From 623f46446aa68b9dfa8f1b70244d2e1a4b3201f8 Mon Sep 17 00:00:00 2001
From: rennokki <rennokki@gmail.com>
Date: Thu, 21 May 2020 21:29:32 +0300
Subject: [PATCH 001/496] Added new PHP client library

---
 content/en/docs/reference/using-api/client-libraries.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/reference/using-api/client-libraries.md b/content/en/docs/reference/using-api/client-libraries.md
index 145a792b72..84e9ce95c0 100644
--- a/content/en/docs/reference/using-api/client-libraries.md
+++ b/content/en/docs/reference/using-api/client-libraries.md
@@ -59,6 +59,7 @@ their authors, not the Kubernetes team.
 | PHP                  | [github.com/allansun/kubernetes-php-client](https://github.com/allansun/kubernetes-php-client) |
 | PHP                  | [github.com/maclof/kubernetes-client](https://github.com/maclof/kubernetes-client) |
 | PHP                  | [github.com/travisghansen/kubernetes-client-php](https://github.com/travisghansen/kubernetes-client-php) |
+| PHP                  | [github.com/renoki-co/php-k8s](https://github.com/renoki-co/php-k8s) |
 | Python               | [github.com/eldarion-gondor/pykube](https://github.com/eldarion-gondor/pykube) |
 | Python               | [github.com/fiaas/k8s](https://github.com/fiaas/k8s) |
 | Python               | [github.com/mnubo/kubernetes-py](https://github.com/mnubo/kubernetes-py) |

From a78caf7fbbc6edb7655844aa9e7443484089d2b6 Mon Sep 17 00:00:00 2001
From: mikonoid <mikonoid@gmail.com>
Date: Fri, 26 Jun 2020 16:20:19 +0300
Subject: [PATCH 002/496] added uk minikube documentation

---
 .../uk/docs/tasks/tools/install-minikube.md   | 260 ++++++++++++++++++
 1 file changed, 260 insertions(+)
 create mode 100644 content/uk/docs/tasks/tools/install-minikube.md

diff --git a/content/uk/docs/tasks/tools/install-minikube.md b/content/uk/docs/tasks/tools/install-minikube.md
new file mode 100644
index 0000000000..3ba8cc2d96
--- /dev/null
+++ b/content/uk/docs/tasks/tools/install-minikube.md
@@ -0,0 +1,260 @@
+---
+title: Встановлення Minikube
+content_template: task
+weight: 20
+card:
+  name: tasks
+  weight: 10
+---
+
+<!-- overview -->
+
+Ця сторінка описує як встановити [Minikube](/docs/tutorials/hello-minikube), інструмент який дозволяє
+запустити  Kubernetes кластер з однієї ноди у віртуальній машині на персональному комп'ютері.
+
+
+## {{% heading "prerequisites" %}}
+
+{{< tabs name="minikube_before_you_begin" >}}
+{{% tab name="Linux" %}}
+Для перевірки, чи підтримується віртуалізація на Linux, запустіть наступну команду і впевніться що вивід команди не пустий:
+```
+grep -E --color 'vmx|svm' /proc/cpuinfo
+```
+{{% /tab %}}
+
+{{% tab name="macOS" %}}
+Для перевірки, чи підтримується віртуалізація на macOS, запустіть наступну команду в терміналі.
+```
+sysctl -a | grep -E --color 'machdep.cpu.features|VMX'
+```
+Якщо ви бачите `VMX` у виводі (має бути кольоровий), то VT-x опція включена на вашому хості.
+{{% /tab %}}
+
+{{% tab name="Windows" %}}
+Для перевірки, чи підтримується віртуалізація на  Windows 8 та версіях вище,запустіть наступну команду в терміналі
+ вашого або через command prompt.
+```
+systeminfo
+```
+Якщо ви бачите наступне, віртуалізація підтримується на Windows.
+```
+Hyper-V Requirements:     VM Monitor Mode Extensions: Yes
+                          Virtualization Enabled In Firmware: Yes
+                          Second Level Address Translation: Yes
+                          Data Execution Prevention Available: Yes
+```
+
+Якщо ви бачите наступнний вивід, на вашій системі вже встановлен гіпервізор і ви можете пропустити наступний крок.
+```
+Hyper-V Requirements:     A hypervisor has been detected. Features required for Hyper-V will not be displayed.
+```
+
+
+{{% /tab %}}
+{{< /tabs >}}
+
+
+
+<!-- steps -->
+
+# Встановлення Minikube
+
+{{< tabs name="tab_with_md" >}}
+{{% tab name="Linux" %}}
+
+### Встановлення kubectl
+
+Впевніться що kubectl встановлен. Ви можете встановити kubectl згідно інструкції [Установка та налаштування kubectl](/docs/tasks/tools/install-kubectl/#install-kubectl-on-linux).
+
+### Встановлення Hypervisor
+
+Якщо у вас немає встановленого гіпервізора, то встановіть один з наступних:
+
+• [KVM](https://www.linux-kvm.org/), який також використовує QEMU
+
+• [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
+
+Minikube також пітримує опцію `--driver=none` яка дозволяє запускати компоненти Kubernetes
+на хост системі, ні в віртуальній машині.
+Використання цього драйвера вимагає [Docker](https://www.docker.com/products/docker-desktop) та Linux оточення але не гіпервізор.
+
+Якщо ви використувуєте `none` драйвер у Debian або похідних дістрибутивах, використовуйте `.deb` пакети для
+Docker замість встановлення snap пакетів, які не працюють з Minikube.
+Ви можете скачати `.deb` пакети звідси [Docker](https://www.docker.com/products/docker-desktop).
+
+{{< caution >}}
+`none` VM драйвер може привести до проблем з безпекою та втрати даних.
+Перед тим, як використовувати `--driver=none`, ознайомтесь [з цієй документацієй](https://minikube.sigs.k8s.io/docs/reference/drivers/none/) для отримання додаткової інформації.
+{{< /caution >}}
+
+Minikube також підтримує `vm-driver=podman` схожий на Docker драйвер. Podman запущений як суперюзер (root user) це найкрайщий  шлях забезпечити повний доступ ваших контейнерів до будь-якої функції, наявної у вашій системі.
+
+{{< caution >}}
+`podman` драйвер вимагає запущені контейнери з під root користувача оскільки звичайні облікові записи користувачів не мають повного доступу до всіх функцій операційної системи, які, можливо, потребуватимуть їх роботи.
+{{< /caution >}}
+
+###Встановлення Minikube як Linux пакет
+
+Доступні *experimental* пакети для Minikube; ви можете знайти Linux (AMD64) пакети
+для Minikube's [releases](https://github.com/kubernetes/minikube/releases) на сторінці GitHub.
+
+Використовувайте ваш Linux інсталер пакетів для того, шоб поставити відповідний пакет.
+
+### Встановлення Minikube за допомогою прямого завантаження
+
+Якщо ви не можете встановити Minikube за допомогою пакета, ви можете скачати автономний бінарний файл,
+та використати його.
+
+```shell
+curl -Lo minikube https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64 \
+  && chmod +x minikube
+```
+
+Ось простий спосіб додати виконуваний файл Minikube до вашого шляху:
+
+```shell
+sudo mkdir -p /usr/local/bin/
+sudo install minikube /usr/local/bin/
+```
+
+### Встановлення Minikube використовуючи Homebrew
+
+Як альтернативний варіант, ви можете установити Minikube використовуючи Linux [Homebrew](https://docs.brew.sh/Homebrew-on-Linux):
+
+```shell
+brew install minikube
+```
+
+{{% /tab %}}
+{{% tab name="macOS" %}}
+### Встановлення kubectl
+
+Впевніться шо kubectl встановлен. Ви можете встановити kubectl згідно інструкції [Установка та налаштування kubectl](/docs/tasks/tools/install-kubectl/#install-kubectl-on-macos).
+
+### Встановлення Hypervisor
+
+Якщо у вас немає встановленого гіпервізора, то встановіть один з наступних:
+
+• [HyperKit](https://github.com/moby/hyperkit)
+
+• [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
+
+• [VMware Fusion](https://www.vmware.com/products/fusion)
+
+### Встановлення Minikube
+Найпростіший спосіб встановити Minikube на macOS це використати [Homebrew](https://brew.sh):
+
+```shell
+brew install minikube
+```
+
+Ви також можете встановити Minikube за допомогою автономного бінарного файла:
+
+```shell
+curl -Lo minikube https://storage.googleapis.com/minikube/releases/latest/minikube-darwin-amd64 \
+  && chmod +x minikube
+```
+
+Ось простий спосіб додати виконуваний файл Minikube до вашого шляху:
+
+```shell
+sudo mv minikube /usr/local/bin
+```
+
+{{% /tab %}}
+{{% tab name="Windows" %}}
+### Встановлення kubectl
+
+Впевніться шо kubectl встановлен. Ви можете встановити kubectl згідно інструкції [Установка та налаштування kubectl](/docs/tasks/tools/install-kubectl/#install-kubectl-on-windows).
+
+### Встановлення Hypervisor
+
+Якщо у вас немає встановленого гіпервізора, то встановіть один з наступних:
+
+• [Hyper-V](https://msdn.microsoft.com/en-us/virtualization/hyperv_on_windows/quick_start/walkthrough_install)
+
+• [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
+
+{{< note >}}
+Hyper-V може бути запущен на трьох версіях Windows 10: Windows 10 Enterprise, Windows 10 Professional, and Windows 10 Education.
+{{< /note >}}
+
+### Встановлення Minikube за допомогою Chocolatey
+
+Найпростіший спосіб встановити Minikube на  Windows за допомогою [Chocolatey](https://chocolatey.org/) (run as an administrator):
+
+```shell
+choco install minikube
+```
+
+Коли Minikube закінчив установку, закрийте поточну CLI сесію та перезавантажтесь. Minikube має бути додан до вашого шляху автоматично.
+
+### Встановлення Minikube за допомогою програми встановлення
+
+Для установкі Minikube вручну на Windows за допомогою [Windows Installer](https://docs.microsoft.com/en-us/windows/desktop/msi/windows-installer-portal), скачайте [`minikube-installer.exe`](https://github.com/kubernetes/minikube/releases/latest/download/minikube-installer.exe) та виконайте програму.
+
+### Встановлення Minikube за допомогою прямого завантаження
+
+Для встановлення Minikube вручну на Windows, скачайте [`minikube-windows-amd64`](https://github.com/kubernetes/minikube/releases/latest), перейменуйте  в `minikube.exe`, та додайте до вашего шляху.
+
+{{% /tab %}}
+{{< /tabs >}}
+
+
+
+## {{% heading "whatsnext" %}}
+
+* [Запуск Kubernetes локально за допомогою Minikube](/docs/setup/learning-environment/minikube/)
+
+
+## Підтвердження встановлення
+
+Щоб підтвердити успішну установку як гіпервізора, так і Minikube, ви можете запустити таку команду, щоб запустити локальний кластер Kubernetes:
+
+{{< note >}}
+
+Щоб встановити `--driver` за допомогою` minikube start`, введіть ім'я гіпервізора, який ви встановили, малими літерами, де `<driver_name>` згадано нижче. Повний список значень `--driver` доступний у [вказуванні документації на драйвер VM](https://kubernetes.io/docs/setup/learning-environment/minikube/#specifying-the-vm-driver).
+
+{{< /note >}}
+
+```shell
+minikube start --driver=<driver_name>
+```
+
+Як тількі `minikube start` закінчився, запустіть команду нижче, щоб перевірити стан кластера:
+
+```shell
+minikube status
+```
+Якщо ваш кластер працює, вивід із "minikube status" має бути аналогічним:
+
+```
+host: Running
+kubelet: Running
+apiserver: Running
+kubeconfig: Configured
+```
+
+Після того, як ви підтвердили, чи Minikube працює з обраним вами гіпервізором, ви можете продовжувати використовувати Minikube або ви можете зупинити кластер. Щоб зупинити кластер, запустіть:
+
+```shell
+minikube stop
+```
+
+## Очистити локальний стан {#cleanup-local-state}
+
+Якщо ви раніше встановили Minikube та запустили:
+```shell
+minikube start
+```
+
+але `minikube start` повертає помилку:
+```
+machine does not exist
+```
+
+тоді вам треба очистити локальний стан minikube:
+```shell
+minikube delete
+```

From c2c4b6ca0e38f64f4d4519d6c2c1d6ca5f8c0e67 Mon Sep 17 00:00:00 2001
From: mikonoid <mikonoid@gmail.com>
Date: Sat, 27 Jun 2020 16:21:43 +0300
Subject: [PATCH 003/496] added original link

---
 content/uk/docs/tasks/tools/install-minikube.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/content/uk/docs/tasks/tools/install-minikube.md b/content/uk/docs/tasks/tools/install-minikube.md
index 3ba8cc2d96..8f96fb57f2 100644
--- a/content/uk/docs/tasks/tools/install-minikube.md
+++ b/content/uk/docs/tasks/tools/install-minikube.md
@@ -9,6 +9,10 @@ card:
 
 <!-- overview -->
 
+<!--This page shows you how to install [Minikube](/docs/tutorials/hello-minikube),
+a tool that runs a single-node Kubernetes cluster in a virtual machine on your personal computer.
+-->
+
 Ця сторінка описує як встановити [Minikube](/docs/tutorials/hello-minikube), інструмент який дозволяє
 запустити  Kubernetes кластер з однієї ноди у віртуальній машині на персональному комп'ютері.
 
@@ -33,7 +37,7 @@ sysctl -a | grep -E --color 'machdep.cpu.features|VMX'
 
 {{% tab name="Windows" %}}
 Для перевірки, чи підтримується віртуалізація на  Windows 8 та версіях вище,запустіть наступну команду в терміналі
- вашого або через command prompt.
+вашого або через command prompt.
 ```
 systeminfo
 ```

From 4ffeeb31c8f3892e74468eeff2b6262b0ab9d798 Mon Sep 17 00:00:00 2001
From: mikonoid <mikonoid@gmail.com>
Date: Sat, 27 Jun 2020 16:25:10 +0300
Subject: [PATCH 004/496] fix identation

---
 content/uk/docs/tasks/tools/install-minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/uk/docs/tasks/tools/install-minikube.md b/content/uk/docs/tasks/tools/install-minikube.md
index 8f96fb57f2..9460fc0c0a 100644
--- a/content/uk/docs/tasks/tools/install-minikube.md
+++ b/content/uk/docs/tasks/tools/install-minikube.md
@@ -98,7 +98,7 @@ Minikube також підтримує `vm-driver=podman` схожий на Dock
 `podman` драйвер вимагає запущені контейнери з під root користувача оскільки звичайні облікові записи користувачів не мають повного доступу до всіх функцій операційної системи, які, можливо, потребуватимуть їх роботи.
 {{< /caution >}}
 
-###Встановлення Minikube як Linux пакет
+### Встановлення Minikube як Linux пакет
 
 Доступні *experimental* пакети для Minikube; ви можете знайти Linux (AMD64) пакети
 для Minikube's [releases](https://github.com/kubernetes/minikube/releases) на сторінці GitHub.

From f1ec7a4a545f51b272aeb88db395f02f0ab6266f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9my=20L=C3=A9one?= <rleone@scaleway.com>
Date: Sun, 28 Jun 2020 13:42:18 +0200
Subject: [PATCH 005/496] Add an slack invite link on README

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 4c631b0dc8..19758fc81b 100644
--- a/README.md
+++ b/README.md
@@ -25,7 +25,7 @@ Learn more about SIG Docs Kubernetes community and meetings on the [community pa
 
 You can also reach the maintainers of this project at:
 
-- [Slack](https://kubernetes.slack.com/messages/sig-docs)
+- [Slack](https://kubernetes.slack.com/messages/sig-docs) [Get an invite for this Slack](https://slack.k8s.io/)
 - [Mailing List](https://groups.google.com/forum/#!forum/kubernetes-sig-docs)
 
 ## Contributing to the docs
@@ -63,4 +63,4 @@ Participation in the Kubernetes community is governed by the [CNCF Code of Condu
 
 ## Thank you!
 
-Kubernetes thrives on community participation, and we appreciate your contributions to our website and our documentation!
\ No newline at end of file
+Kubernetes thrives on community participation, and we appreciate your contributions to our website and our documentation!

From cbced2f6cd6f3fc39061d457147767d2f1903455 Mon Sep 17 00:00:00 2001
From: mikonoid <mikonoid@gmail.com>
Date: Sun, 28 Jun 2020 19:46:08 +0300
Subject: [PATCH 006/496] fix grammar

---
 content/uk/docs/tasks/tools/install-minikube.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/uk/docs/tasks/tools/install-minikube.md b/content/uk/docs/tasks/tools/install-minikube.md
index 9460fc0c0a..3ddc95faa0 100644
--- a/content/uk/docs/tasks/tools/install-minikube.md
+++ b/content/uk/docs/tasks/tools/install-minikube.md
@@ -14,7 +14,7 @@ a tool that runs a single-node Kubernetes cluster in a virtual machine on your p
 -->
 
 Ця сторінка описує як встановити [Minikube](/docs/tutorials/hello-minikube), інструмент який дозволяє
-запустити  Kubernetes кластер з однієї ноди у віртуальній машині на персональному комп'ютері.
+запустити  Kubernetes кластер з однієї ноди у віртуальній машині на вашому персональному комп'ютері.
 
 
 ## {{% heading "prerequisites" %}}
@@ -36,7 +36,7 @@ sysctl -a | grep -E --color 'machdep.cpu.features|VMX'
 {{% /tab %}}
 
 {{% tab name="Windows" %}}
-Для перевірки, чи підтримується віртуалізація на  Windows 8 та версіях вище,запустіть наступну команду в терміналі
+Для перевірки, чи підтримується віртуалізація на  Windows 8 та версіях вище, запустіть наступну команду в терміналі
 вашого або через command prompt.
 ```
 systeminfo

From 13516045d352f814f335775dcc1a521efd64a845 Mon Sep 17 00:00:00 2001
From: Dery Rahman Ahaddienata <dery.ra@gmail.com>
Date: Tue, 7 Jul 2020 19:37:58 +0700
Subject: [PATCH 007/496] Add docs/tutorials/kubernetes-basics/deploy-app ID
 translation

---
 .../kubernetes-basics/deploy-app/_index.md    |   4 +
 .../deploy-app/deploy-interactive.html        |  49 ++++++++
 .../deploy-app/deploy-intro.html              | 109 ++++++++++++++++++
 3 files changed, 162 insertions(+)
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md b/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md
new file mode 100644
index 0000000000..6b55265428
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md
@@ -0,0 +1,4 @@
+---
+title: _Deploy_ Aplikasi
+weight: 20
+---
diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
new file mode 100644
index 0000000000..ef36fea670
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -0,0 +1,49 @@
+---
+title: Tutorial Interaktif - Men-<i>Deploy</i> Aplikasi
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <div class="row">
+            <div class="col-md-12">
+                <p>
+                Pod merupakan unit eksekusi utama pada aplikasi Kubernetes. Setiap Pod mewakili sebagian dari beban kerja (<i>workload</i>) yang berjalan pada klaster kamu. <a href="id/docs/concepts/workloads/pods/pod-overview/#understanding-pods">Learn more about Pods</a>.
+                </p>
+            </div>
+        </div>
+
+        <br>
+        <div class="katacoda">
+            <div class="katacoda__alert">
+                Untuk berinteraksi dengan Terminal, silahkan gunakan desktop/tablet.
+            </div>
+
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            </div>
+
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="docs/tutorials/kubernetes-basics/explore/explore-intro/" role="button">Lanjut ke Modul 3<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>
diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
new file mode 100644
index 0000000000..b93227ecce
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -0,0 +1,109 @@
+---
+title: Menggunakan kubectl untuk membuat Deployment
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+    <link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+<div class="layout" id="top">
+
+    <main class="content">
+
+        <div class="row">
+
+         <div class="col-md-8">
+          <h3>Tujuan</h3>
+                <ul>
+                    <li>Belajar tentang aplikasi Deployment.</li>
+                    <li><i>Deploy</i> aplikasi pertama kamu di Kubernetes dengan kubectl.</li>
+                </ul>
+            </div>
+
+            <div class="col-md-8">
+                <h3><i>Deployment</i> Kubernetes</h3>
+                <p>
+                Ketika klaster Kubernetes kamu sudah berjalan, kamu dapat men-<i>deploy</i> aplikasi terkontainerisasi di atasnya.
+                Untuk melakukannya, kamu perlu membuat konfigurasi <b>Deployment</b>. Deployemnt menginstruksikan Kubernetes
+                tentang bagaimana cara membuat dan memperbaharui <i>instance</i> aplikasi kamu. Ketika kamu selesai membuat Deployment, Kubernetes master
+                melakukan penjadwalan <i>instance</i> aplikasi yang terlibat dalam Deployment untuk berjalan di Node individu pada klaster.
+                </p>
+
+                <p>Setelah <i>instance</i> aplikasi telah dibuat, Kubernetes Deployment Controller akan melakukan monitoring <i>instance</i> tersebut secara kontinu. Jika <i>instance</i> pada hos Node <i>down</i> atau terhapus, Deployment Controller akan mengganti <i>instance</i> tersebut dengan <i>instance</i> Node lain dalam klaster. <b>Ia menyediakan mekanisme penyembuhan diri (<i>self-healing</i>) untuk mengatasi kegagalan mesin atau pemeliharaan (<i>maintenance</i>)</b></p>
+
+                <p>Pada masa pra-orkestrasi, instalasi <i>script</i> sering digunakan untuk memulai aplikasi, namun cara ini tidak memberikan mekanisme pemulihan ketika terjadi kegagalan mesin. Dengan kemampuan membuat <i>instance</i> aplikasi dan menjaganya tetap berjalan pada Node, Kubernetes Deployment menyediakan manajemen aplikasi dengan pendekatan fundamental yang berbeda. </p>
+
+            </div>
+
+            <div class="col-md-4">
+                <div class="content__box content__box_lined">
+                    <h3>Summary:</h3>
+                    <ul>
+                        <li>Deployment</li>
+                        <li>Kubectl</li>
+                    </ul>
+                </div>
+                <div class="content__box content__box_fill">
+                    <p><i>
+                        Sebuah Deployment bertanggung jawab untuk membuat dan memperbaharui instance dari aplikasi kamu
+                    </i></p>
+                </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2 style="color: #3771e3;">Men-<i>deploy</i> aplikasi pertama kamu pada Kubernetes</h2>
+            </div>
+        </div>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p><img src="/docs/tutorials/kubernetes-basics/public/images/module_02_first_app.svg"></p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+
+                <p>Kamu dapat membuat dan mengatur Deployment dengan menggunakan antar muka baris perintah Kubernetes, <b>Kubectl</b>. Kubectl menggunakan Kubernetes API untuk berinteraksi dengan klaster. Pada modul ini, kamu akan belajar perintah-perintah yang sering digunakan Kubectl dalam membuat Deployment untuk menjalankan aplikasi kamu pada klaster Kubernetes.</p>
+
+                <p>Ketika kamu membuat Deployment, kamu perlu mendefinisikan kontainer <i>image</i> untuk aplikasi kamu dan jumlah replika yang kamu inginkan. Kamu dapat mengganti informasi tersebut nanti dengan melakukan pembaharuan Deployment kamu; Modul <a href="docs/tutorials/kubernetes-basics/scale/scale-intro/">5</a> dan <a href="/docs/tutorials/kubernetes-basics/update/update-intro/">6</a> pada <i>bootcamp</i> ini mendiskusikan bagaimana cara melakukan perluasan (<i>scale</i>) dan pembaharuan Deployment kamu.</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_fill">
+                    <p><i> Aplikasi perlu dikemas menjadi satu dengan format kontainer yang didukung supaya terdeploy pada Kubernetes</i></p>
+                </div>
+            </div>
+        </div>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p>
+                Pada Deployment pertama kamu, kamu akan menggunakan aplikasi Node.js yang terkemas dalam kontainer Docker. (Jika kamu belum pernah mencoba membuat aplikasi Node.js dan men-<i>deploy</i>nya dengan kontainer, kamu dapat melakukannya dengan mengikuti instruksi dari <a href="/id/docs/tutorials/hello-minikube/">tutorial Hello Minikube</a>).
+                </p>
+                <p>Sekarang kamu tahu apa itu Deployment, mari kita ke tutorial <i>online</i> dan <i>deploy</i> aplikasi pertama kita!</p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive/" role="button">Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>

From abfff67725efd73635db53222b4a8414c6441e79 Mon Sep 17 00:00:00 2001
From: Ricardo Rosales <missingcharacter@gmail.com>
Date: Mon, 13 Jul 2020 10:22:29 -0500
Subject: [PATCH 008/496] Remove `cluster/update-storage-objects.sh` reference

Seems like this https://github.com/kubernetes/kubernetes/pull/83969/files makes it obsolete
---
 .../tasks/administer-cluster/cluster-management.md   | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/cluster-management.md b/content/en/docs/tasks/administer-cluster/cluster-management.md
index 7cbab3aa2c..1d19e9a6db 100644
--- a/content/en/docs/tasks/administer-cluster/cluster-management.md
+++ b/content/en/docs/tasks/administer-cluster/cluster-management.md
@@ -189,18 +189,6 @@ node discovery; currently this is only Google Compute Engine, not including Core
 
 ## Advanced Topics
 
-### Upgrading to a different API version
-
-When a new API version is released, you may need to upgrade a cluster to support the new API version (e.g. switching from 'v1' to 'v2' when 'v2' is launched).
-
-This is an infrequent event, but it requires careful management. There is a sequence of steps to upgrade to a new API version.
-
-   1. Turn on the new API version.
-   1. Upgrade the cluster's storage to use the new version.
-   1. Upgrade all config files. Identify users of the old API version endpoints.
-   1. Update existing objects in the storage to new version by running `cluster/update-storage-objects.sh`.
-   1. Turn off the old API version.
-
 ### Turn on or off an API version for your cluster
 
 Specific API versions can be turned on or off by passing `--runtime-config=api/<version>` flag while bringing up the API server. For example: to turn off v1 API, pass `--runtime-config=api/v1=false`.

From 93262be5cf7101101e7ae71693fc2d593fbf32d4 Mon Sep 17 00:00:00 2001
From: cristiano-degiorgis <cri@webprofessor.it>
Date: Tue, 30 Jun 2020 11:27:42 +0200
Subject: [PATCH 009/496] upgrade translation for
 control-plane-node-communication

---
 .../control-plane-node-communication.md       | 67 +++++++++++++
 .../architecture/master-node-communication.md | 95 -------------------
 2 files changed, 67 insertions(+), 95 deletions(-)
 create mode 100644 content/it/docs/concepts/architecture/control-plane-node-communication.md
 delete mode 100644 content/it/docs/concepts/architecture/master-node-communication.md

diff --git a/content/it/docs/concepts/architecture/control-plane-node-communication.md b/content/it/docs/concepts/architecture/control-plane-node-communication.md
new file mode 100644
index 0000000000..95fa8cba24
--- /dev/null
+++ b/content/it/docs/concepts/architecture/control-plane-node-communication.md
@@ -0,0 +1,67 @@
+---
+title: Comunicazione Control Plane - Nodo
+content_type: concept
+weight: 20
+aliases:
+- master-node-communication
+---
+
+<!-- overview -->
+
+Questo documento cataloga le connessioni tra il piano di controllo (_control-plane_), in realtà l'apiserver, e il cluster Kubernetes. L'intento è di consentire agli utenti di personalizzare la loro installazione per rafforzare la configurazione di rete affinché il cluster possa essere eseguito su una rete pubblica (o su IP completamente pubblici resi disponibili da un fornitore di servizi cloud).
+
+
+<!-- body -->
+
+## Dal Nodo al control-plane{#dal-nodo-al-control-plane}
+Kubernetes adotta un pattern per le API di tipo _"hub-and-spoke"_. Tutte le chiamate delle API eseguite sui vari nodi sono effettuate verso l'apiserver (nessuno degli altri componenti principali è progettato per esporre servizi remoti). L'apiserver è configurato per l'ascolto di connessioni remote su una porta HTTPS protetta (443) con una o più forme di [autenticazioni client](/docs/reference/access-authn-authz/authentication/) abilitate. Si dovrebbero abilitare una o più forme di [autorizzazioni](/docs/reference/access-authn-authz/authorization/), in particolare nel caso in cui siano ammesse [richieste anonime](/docs/reference/access-authn-authz/authentication/#anonymous-requests) o [_token_ legati ad un account di servizio (_service account_)](/docs/reference/access-authn-authz/authentication/#service-account-tokens).
+
+Il certificato pubblico (_public root certificate_) relativo al cluster corrente deve essere fornito ai vari nodi di modo che questi possano connettersi in modo sicuro all'apiserver insieme alle credenziali valide per uno specifico _client_. Ad esempio, nella configurazione predefinita di un cluster [GKE](https://cloud.google.com/kubernetes-engine?hl=it), le credenziali del client fornite al kubelet hanno la forma di un certificato client. Si veda
+[inizializzazione TLS del kubelet TLS](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) per la fornitura automatica dei certificati client al _kubelet_.
+
+I Pod che desiderano connettersi all'apiserver possono farlo in modo sicuro sfruttando un account di servizio in modo che Kubernetes inserisca automaticamente il certificato pubblico di radice e un token valido al portatore (_bearer token_) all'interno Pod quando questo viene istanziato.
+In tutti i namespace è configurato un _Service_ con nome `kubernetes` con un indirizzo IP virtuale che viene reindirizzato (tramite _kube-proxy_) all'endpoint HTTPS dell'apiserver.
+
+Anche i componenti del piano d controllo comunicano con l'apiserver del cluster su di una porta sicura esposta da quest'ultimo.
+
+Di conseguenza, la modalità operativa predefinita per le connessioni dai nodi e dai Pod in esecuzione sui nodi verso il _control-plane_ è protetta da un'impostazione predefinita
+e può essere eseguita su reti non sicure e/o pubbliche.
+
+## Dal control-plane al nodo{#dal-control-plane-al-nodo}
+
+Esistono due percorsi di comunicazione principali dal _control-plane_ (apiserver) verso i nodi. Il primo è dall'apiserver verso il processo _kubelet_ in esecuzione su ogni nodo nel cluster. Il secondo è dall'apiserver a ciascun nodo, Pod, o servizio attraverso la funzionalità proxy dell'apiserver.
+
+### Dall'apiserver al _kubelet_
+
+Le connessioni dall'apiserver al _kubelet_ vengono utilizzate per:
+
+  * Prendere i log relativi ai vari Pod.
+  * Collegarsi (attraverso kubectl) ai Pod in esecuzione.
+  * Fornire la funzionalità di _port-forwarding_ per i _kubelet_.
+
+Queste connessioni terminano all'endpoint HTTPS del _kubelet_. Di default, l'apiserver non verifica il certificato servito dal _kubelet_, il che rende la connessione soggetta ad attacchi _man-in-the-middle_, e tale  da essere considerato **non sicuro (unsafe)** se eseguito su reti non protette e/o pubbliche.
+
+Per verificare questa connessione, si utilizzi il parametro `--kubelet-certificate-authority` al fine di fornire all'apiserver un insieme di certificati radice da utilizzare per verificare il
+il certificato servito dal _kubelet_.
+
+Se questo non è possibile, si usi un [tunnel SSH](/docs/tasks/access-application-cluster/port-forward-access-application-cluster/) tra l'apiserver e il _kubelet_, se richiesto, per evitare il collegamento su una rete non protetta o pubblica.
+
+In fine, l'[autenticazione e/o l'autorizzazione del kubelet](/docs/admin/kubelet-authentication-authorization/) dovrebbe essere abilitate per proteggere le API esposte dal _kubelet_.
+
+### Dall'apiserver ai nodi, Pod, e servizi{#dal-apiserver-ai-nodi-pod-servizi}
+
+Le connessioni dall'apiserver verso un nodo, Pod o servizio avvengono in modalità predefinita su semplice connessione HTTP e quindi non sono né autenticate né criptata. Queste connessioni possono essere eseguite su una connessione HTTPS sicura mediante il prefisso `https:` al nodo, Pod o nome del servizio nell'URL dell'API, ma non valideranno il certificato fornito dall'endpoint HTTPS né forniranno le credenziali del client così anche se la connessione verrà criptata, non fornirà alcuna garanzia di integrità. **Non è attualmente sicuro** eseguire queste connessioni  su reti non protette e/o pubbliche.
+
+### I tunnel SSH
+
+Kubernetes supporta i _tunnel_ SSH per proteggere la comunicazione tra il _control-plane_ e i nodi. In questa configurazione, l'apiserver inizializza un tunnel SSH con ciascun nodo del cluster (collegandosi al server SSH in ascolto sulla porta 22) e fa passare tutto il traffico verso il _kubelet_, il nodo, il Pod, o il servizio attraverso questo tunnel. Questo tunnel assicura che il traffico non sia esposto al di fuori della rete su cui sono in esecuzioni i vari nodi.
+
+I tunnel SSH sono al momento deprecati ovvero non dovrebbero essere utilizzati a meno che ci siano delle esigenze particolari. Il servizio `Konnectivity` è pensato per rimpiazzare questo canale di comunicazione.
+
+### Il servizio _Konnectivity_
+
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+Come rimpiazzo dei tunnel SSH, il servizio _Konnectivity_ fornisce un proxy a livello TCP per la comunicazione tra il _control-plane_ e il cluster. Il servizio _Konnectivity_ consiste in due parti: il _Konnectivity_ server e gli agenti _Konnectivity_, in esecuzione rispettivamente sul _control-plane_ e sui vari nodi.  Gli agenti _Konnectivity_ inizializzano le connessioni verso il server _Konnectivity_ e mantengono le connessioni di rete. Una volta abilitato il servizio _Konnectivity_, tutto il traffico tra il _control-plane_ e i nodi passa attraverso queste connessioni.
+
+Si può fare riferimento al [tutorial per il servizio _Konnectivity_](/docs/tasks/extend-kubernetes/setup-konnectivity/) per configurare il servizio _Konnectivity_ all'interno del cluster
\ No newline at end of file
diff --git a/content/it/docs/concepts/architecture/master-node-communication.md b/content/it/docs/concepts/architecture/master-node-communication.md
deleted file mode 100644
index 375c244a6c..0000000000
--- a/content/it/docs/concepts/architecture/master-node-communication.md
+++ /dev/null
@@ -1,95 +0,0 @@
----
-draft: True
-title: Comunicazione Master-Node
-content_type: concept
-weight: 20
----
-
-<!-- overview -->
-
-Questo documento cataloga i percorsi di comunicazione tra il master (in realtà il
-apiserver) e il cluster Kubernetes. L'intento è di consentire agli utenti di
-personalizzare la loro installazione per rafforzare la configurazione di rete in questo modo
-il cluster può essere eseguito su una rete non affidabile (o su IP completamente pubblici su a
-fornitore di servizi cloud).
-
-
-
-
-<!-- body -->
-
-## Cluster to Master
-
-Tutti i percorsi di comunicazione dal cluster al master terminano in
-apiserver (nessuno degli altri componenti principali è progettato per esporre il telecomando
-Servizi). In una distribuzione tipica, l'apiserver è configurato per l'ascolto
-connessioni remote su una porta HTTPS protetta (443) con una o più forme di
-client [authentication](/docs/reference/access-authn-authz/authentication/) enabled.
-One or more forms of [authorization](/docs/reference/access-authn-authz/authorization/)
-dovrebbe essere abilitato, specialmente se [anonymous requests](/docs/reference/access-authn-authz/authentication/#anonymous-requests)
-o [service account tokens](/docs/reference/access-authn-authz/authentication/#service-account-tokens)
-sono ammessi.
-
-I nodi devono essere forniti con il certificato di root pubblico per il cluster
-in modo tale che possano connettersi in modo sicuro all'apiserver insieme al client valido
-credenziali. Ad esempio, in una distribuzione GKE predefinita, le credenziali del client
-fornito al kubelet hanno la forma di un certificato client. Vedere
-[kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)
-per il provisioning automatico dei certificati client kubelet.
-
-I pod che desiderano connettersi all'apiserver possono farlo in modo sicuro sfruttando a
-account di servizio in modo che Kubernetes inserisca automaticamente la radice pubblica
-certificato e un token al portatore valido nel pod quando viene istanziato.
-Il servizio `kubernetes` (in tutti gli spazi dei nomi) è configurato con un IP virtuale
-indirizzo che viene reindirizzato (tramite kube-proxy) all'endpoint HTTPS sul
-apiserver.
-
-I componenti master comunicano anche con l'apiserver del cluster sulla porta sicura.
-
-Di conseguenza, la modalità operativa predefinita per le connessioni dal cluster
-(nodi e pod in esecuzione sui nodi) sul master è protetto per impostazione predefinita
-e può funzionare su reti non sicure e / o pubbliche.
-
-## Master to Cluster
-
-Esistono due percorsi di comunicazione principali dal master (apiserver) al
-grappolo. Il primo è dal processo apiserver al processo kubelet su cui gira
-ogni nodo nel cluster. Il secondo è dall'Apiserver a qualsiasi nodo, pod,
-o servizio attraverso la funzionalità proxy dell'apiserver.
-
-### apiserver to kubelet
-
-Le connessioni dall'apiserver al kubelet vengono utilizzate per:
-
-  * Recupero dei log per i pod.
-  * Allegare (tramite kubectl) ai pod in esecuzione.
-  * Fornire la funzionalità di port forwarding di kubelet.
-
-Queste connessioni terminano all'endpoint HTTPS di kubelet. Di default,
-l'apiserver non verifica il certificato di servizio di Kubelet,
-che rende la connessione soggetta ad attacchi man-in-the-middle, e
-** non sicuro ** da eseguire su reti non sicure e / o pubbliche.
-
-Per verificare questa connessione, utilizzare il flag `--kubelet-certificate-authority` su
-fornire all'apiserver un pacchetto di certificati radice da utilizzare per verificare il
-il certificato di servizio di kubelet.
-
-Se questo non è possibile, usa [SSH tunneling](/docs/tasks/access-application-cluster/port-forward-access-application-cluster/)
-btra l'apiserver e il kubelet se richiesto per evitare il collegamento su un
-rete non attendibile o pubblica.
-
-Finalmente, [Kubelet authentication and/or authorization](/docs/admin/kubelet-authentication-authorization/)
-dovrebbe essere abilitato per proteggere l'API kubelet.
-
-### apiserver to nodes, pods, and services
-
-Le connessioni dall'apiserver a un nodo, pod o servizio predefinito su semplice
-Connessioni HTTP e quindi non sono né autenticate né crittografate. Essi
-può essere eseguito su una connessione HTTPS sicura mediante il prefisso `https:` al nodo,
-pod o nome del servizio nell'URL dell'API, ma non convalideranno il certificato
-fornito dall'endpoint HTTPS né fornire le credenziali del client così mentre il file
-la connessione verrà crittografata, non fornirà alcuna garanzia di integrità.
-Queste connessioni ** non sono attualmente al sicuro ** da eseguire su non attendibili e / o
-reti pubbliche.
-
-

From 83c4b6096679eac1d70910bf86c30c63b242ffaf Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Fri, 31 Jul 2020 16:28:39 +0800
Subject: [PATCH 010/496] ID localization for administer cluster - sysctl

---
 .../administer-cluster/sysctl-cluster.md      | 210 ++++++++++++++++++
 1 file changed, 210 insertions(+)
 create mode 100644 content/id/docs/tasks/administer-cluster/sysctl-cluster.md

diff --git a/content/id/docs/tasks/administer-cluster/sysctl-cluster.md b/content/id/docs/tasks/administer-cluster/sysctl-cluster.md
new file mode 100644
index 0000000000..9adbb50a9f
--- /dev/null
+++ b/content/id/docs/tasks/administer-cluster/sysctl-cluster.md
@@ -0,0 +1,210 @@
+---
+title: Menggunakan sysctl dalam Sebuah Klaster Kubernetes
+content_type: task
+---
+
+<!-- overview -->
+{{< feature-state for_k8s_version="v1.12" state="beta" >}}
+
+Dokumen ini menjelaskan tentang cara mengonfigurasi dan menggunakan parameter kernel dalam sebuah
+klaster Kubernetes dengan menggunakan antarmuka {{< glossary_tooltip term_id="sysctl" >}}.
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+
+
+<!-- steps -->
+
+## Melihat Daftar Semua Parameter Sysctl
+
+Dalam Linux, antarmuka sysctl memungkinkan administrator untuk memodifikasi kernel
+parameter pada _runtime_. Parameter tersedia melalui sistem file virtual dari proses `/proc/sys/`.
+Parameter mencakup berbagai subsistem seperti:
+
+- kernel (dengan prefiks umum: `kernel.`)
+- networking (dengan prefiks umum: `net.`)
+- virtual memory (dengan prefiks umum: `vm.`)
+- MDADM (dengan prefiks umum: `dev.`)
+- subsistem yang lainnya dideskripsikan pada [dokumentasi Kernel](https://www.kernel.org/doc/Documentation/sysctl/README).
+
+Untuk mendapatkan daftar semua parameter, kamu bisa menjalankan perintah:
+
+```shell
+sudo sysctl -a
+```
+
+## Mengaktifkan Sysctl _Unsafe_
+
+Sysctl dikelompokkan menjadi sysctl _safe_ dan sysctl _unsafe_. Sebagai tambahan untuk
+pengaturan _Namespace_ yang benar, sebuah sysctl _safe_ harus diisolasikan dengan benar diantara Pod dalam Node yang sama.
+Hal ini berarti mengatur sysctl _safe_ dalam satu Pod:
+
+- tidak boleh mempengaruhi Pod lain dalam Node
+- tidak boleh membahayakan kesehatan dari Node
+- tidak mengizinkan untuk mendapatkan sumber daya CPU atau memori di luar batas sumber daya dari sebuah Pod.
+
+
+Sejauh ini, sebagian besar sysctl yang diatur sebagai Namespace belum tentu dianggap sysctl _safe_.
+Sysctl berikut ini didukung dalam kelompok _safe_:
+
+- `kernel.shm_rmid_forced`,
+- `net.ipv4.ip_local_port_range`,
+- `net.ipv4.tcp_syncookies`,
+- `net.ipv4.ping_group_range` (sejak Kubernetes 1.18).
+
+{{< note >}}
+Contoh `net.ipv4.tcp_syncookies` bukan merupakan Namespace pada kernel Linux versi 4.4 atau lebih rendah.
+
+Daftar ini akan terus dikembangkan dalam versi Kubernetes berikutnya ketika kubelet
+mendukung mekanisme isolasi yang lebih baik.
+
+Semua sysctl _safe_ diaktifkan secara bawaan.
+
+Semua sysctl _unsafe_ dinon-aktifkan secara bawaan dan harus diizinkan secara manual oleh
+administrator klaster untuk setiap Node. Pod dengan sysctl _unsafe_ yang dinon-aktifkan akan dijadwalkan, 
+tetapi akan gagal untuk dijalankan.
+
+Dengan mengingat peringatan di atas, administrator klaster dapat mengizinkan sysctl _unsafe_ tertentu
+untuk situasi yang sangat spesial seperti pada saat kinerja tinggi atau
+penyetelan aplikasi secara _real-time_. _Unsafe_ syctl diaktifkan Node demi Node melalui
+_flag_ pada kubelet; sebagai contoh:
+
+```shell
+kubelet --allowed-unsafe-sysctls \
+  'kernel.msg*,net.core.somaxconn' ...
+```
+
+Untuk {{< glossary_tooltip term_id="minikube" >}}, ini dapat dilakukan melalui _flag_ `extra-config`:
+
+```shell
+minikube start --extra-config="kubelet.allowed-unsafe-sysctls=kernel.msg*,net.core.somaxconn"...
+```
+
+Hanya sysctl yang diatur sebagai Namespace dapat diaktifkan dengan cara ini.
+
+## Mnegatur Sysctl untuk Pod
+
+Sejumlah sysctl adalah diatur sebagai Namespace dalam Kernel Linux hari ini. Ini berarti
+mereka dapat diatur secara independen untuk setiap Pod dalam sebuah Node. Hanya sysctl dengan Namespace
+yang dapat dikonfigurasi melalui Pod securityContext dalam Kubernetes.
+
+Sysctl berikut dikenal sebagai Namespace. Daftar ini dapat berubah
+pada versi kernel Linux yang akan datang.
+
+- `kernel.shm*`,
+- `kernel.msg*`,
+- `kernel.sem`,
+- `fs.mqueue.*`,
+- Parameter dibawah `net.*` dapat diatur sebagai Namespace dari _container networking_
+  Namun, ada beberapa perkecualian (seperti
+  `net.netfilter.nf_conntrack_max` dan `net.netfilter.nf_conntrack_expect_max`
+  yang dapat diatur dalam Namespace _container networking_ padahal bukan merupakan Namespace).
+
+Sysctl tanpa Namespace disebut dengan sysctl _node-level_. Jika kamu perlu mengatur
+mereka, kamu harus secara manual mengonfigurasi mereka pada sistem operasi setiap Node, atau dengan
+menggunakan DaemonSet melalui Container yang berwenang.
+
+Gunakan securityContext dari Pod untuk mengonfigurasi sysctl Namespace. securityContext
+berlaku untuk semua Container dalam Pod yang sama.
+
+
+Contoh ini menggunakan securityContext dari Pod untuk mengatur sebuah sysctl _safe_
+`kernel.shm_rmid_forced`, dan dua buah sysctl _unsafe_ `net.core.somaxconn` dan
+`kernel.msgmax`. Tidak ada perbedaan antara sysctl _safe_ dan sysctl _unsafe_ dalam
+spesifikasi tersebut.
+
+{{< warning >}}
+Hanya modifikasi parameter sysctl setelah kamu memahami efeknya, untuk menghindari
+gangguan pada kestabilan sistem operasi kamu.
+{{< /warning >}}
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: sysctl-example
+spec:
+  securityContext:
+    sysctls:
+    - name: kernel.shm_rmid_forced
+      value: "0"
+    - name: net.core.somaxconn
+      value: "1024"
+    - name: kernel.msgmax
+      value: "65536"
+  ...
+```
+
+
+<!-- discussion -->
+
+{{< warning >}}
+Karena sifat alami dari sysctl _unsafe_, penggunaan sysctl _unsafe_
+merupakan resiko kamu sendiri dan dapat menyebabkan masalah parah seperti perilaku yang salah
+pada Container, kekurangan sumber daya, atau kerusakan total dari Node.
+{{< /warning >}}
+
+Merupakan sebuah praktik yang baik untuk mempertimbangkan Node dengan pengaturan sysctl khusus sebagai
+Node yang tercemar (_tainted_) dalam sebuah cluster, dan hanya menjadwalkan Pod yang membutuhkan pengaturan sysctl.
+Sangat disarankan untuk menggunakan Kubernetes [fitur _taints and toleration_](/docs/reference/generated/kubectl/kubectl-commands/#taint) untuk mengimplementasikannya.
+
+Pod dengan sysctl _unsafe_ akan gagal diluncurkan pada sembarang Node yang belum
+mengaktifkan kedua sysctl _unsafe_ secara eksplisit. Seperti halnya sysctl _node-level_ sangat
+disarankan untuk menggunakan [fitur _taints and toleration_](/docs/reference/generated/kubectl/kubectl-commands/#taint) atau
+[pencemaran dalam Node](/docs/concepts/scheduling-eviction/taint-and-toleration/)
+untuk Pod dalam Node yang tepat.
+
+## PodSecurityPolicy
+
+Kamu selanjutnya dapat mengontrol sysctl mana saja yang dapat diatur dalam Pod dengan menentukan daftar
+sysctl atau pola (_pattern_) sysctl dalam `forbiddenSysctls` dan/atau _field_
+`allowedUnsafeSysctls` dari PodSecurityPolicy. Pola sysctl diakhiri
+dengan karakter `*`, seperti `kernel.*`. Karakter `*` saja akan mencakup
+semua sysctl.
+
+Secara bawaan, semua sysctl _safe_ diizinkan.
+
+Kedua `forbiddenSysctls` dan `allowedUnsafeSysctls` merupakan daftar dari nama sysctl
+atau pola sysctl yang polos (yang diakhiri dengan karakter `*`). Karakter `*` saja berarti sesuai dengan semua sysctl.
+
+_Field_ `forbiddenSysctls` tidak memasukkan sysctl tertentu. Kamu dapat melarang 
+kombinasi sysctl _safe_ dan sysctl _unsafe_ dalam daftar tersebut. Untuk melarang pengaturan
+sysctl, hanya gunakan `*` saja.
+
+Jika kamu menyebutkan sysctl _unsafe_ pada _field_ `allowedUnsafeSysctls` dan 
+tidak ada pada _field_ `forbiddenSysctls`, maka sysctl dapat digunakan pada Pod
+dengan menggunakan PodSecurityPolicy ini. Untuk mengizinkan semua sysctl _unsafe_ diatur dalam
+PodSecurityPolicy, gunakan karakter `*` saja.
+
+Jangan mengonfigurasi kedua _field_ ini sampai tumpang tindih, dimana
+sysctl yang diberikan akan diperbolehkan dan dilarang sekaligus.
+
+{{< warning >}}
+Jika kamu mengizinkan sysctl _unsafe_ melalui _field_ `allowUnsafeSysctls`
+pada PodSecurityPolicy, Pod apa pun yang menggunakan sysctl seperti itu akan gagal dimulai
+jika sysctl _unsafe_ tidak diperbolehkan dalam _flag_ kubelet `--allowed-unsafe-sysctls`
+pada Node tersebut.
+{{< /warning >}}
+
+Ini merupakan contoh sysctl _unsafe_ yang diawali dengan `kernel.msg` yang diperbolehkan dan
+sysctl `kernel.shm_rmid_forced` yang dilarang.
+
+```yaml
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: sysctl-psp
+spec:
+  allowedUnsafeSysctls:
+  - kernel.msg*
+  forbiddenSysctls:
+  - kernel.shm_rmid_forced
+ ...
+```
+
+

From 71d6fb6d97d29a34026642872371907ff03530e2 Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Fri, 31 Jul 2020 11:58:49 +0200
Subject: [PATCH 011/496] Start translation

---
 .../pods/pod-topology-spread-constraints.md   | 247 ++++++++++++++++++
 1 file changed, 247 insertions(+)
 create mode 100644 content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md

diff --git a/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
new file mode 100644
index 0000000000..f56d212496
--- /dev/null
+++ b/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -0,0 +1,247 @@
+---
+title: Contraintes de propagation de topologie pour les Pods
+content_type: concept
+weight: 40
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+Vous pouvez utiliser des  _contraintes de propagation de topologie_ pour contrôler comment les {{< glossary_tooltip text="Pods" term_id="Pod" >}} sont propagés à travers votre cluster parmi les domaines de défaillance comme les régions, zones, noeuds et autres domaines de topologie définis par l'utilisateur. Ceci peut aider à créer de la haute disponibilité et à utiliser efficacement les ressources.
+
+
+
+<!-- body -->
+
+## Conditions préalables
+
+### Autoriser la Feature Gate
+
+La [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) `EvenPodsSpread`  doit être autorisée pour
+{{< glossary_tooltip text="l'API Server" term_id="kube-apiserver" >}} **et** le
+{{< glossary_tooltip text="scheduler" term_id="kube-scheduler" >}}.
+
+### Labels de noeuds
+
+Les contraintes de propagation de topologie reposent sur les labels de noeuds pour identifier le ou les domaines de topologie dans lesquels se trouve  chacun des noeuds. Par exemple, un noeud pourrait avoir les labels: `node=node1,zone=us-east-1a,region=us-east-1`
+
+Supposez que vous avec un cluster de 4 noeuds ayant les labels suivants:
+
+```
+NAME    STATUS   ROLES    AGE     VERSION   LABELS
+node1   Ready    <none>   4m26s   v1.16.0   node=node1,zone=zoneA
+node2   Ready    <none>   3m58s   v1.16.0   node=node2,zone=zoneA
+node3   Ready    <none>   3m17s   v1.16.0   node=node3,zone=zoneB
+node4   Ready    <none>   2m43s   v1.16.0   node=node4,zone=zoneB
+```
+
+Une vue logique du cluster est celle-ci :
+
+```
++---------------+---------------+
+|     zoneA     |     zoneB     |
++-------+-------+-------+-------+
+| node1 | node2 | node3 | node4 |
++-------+-------+-------+-------+
+```
+
+Plutôt que d'appliquer des labels manuellement, vous pouvez aussi réutiliser les [labels réputés](/docs/reference/kubernetes-api/labels-annotations-taints/) qui sont créés et renseignés automatiquement dans la plupart des clusters.
+
+## Contraintes de propagation pour les Pods
+
+### API
+
+Le champ `pod.spec.topologySpreadConstraints` est introduit dans 1.16 comme suit :
+
+```
+apiVersion: v1
+kind: Pod
+metadata:
+  name: mypod
+spec:
+  topologySpreadConstraints:
+    - maxSkew: <integer>
+      topologyKey: <string>
+      whenUnsatisfiable: <string>
+      labelSelector: <object>
+```
+
+Vous pouvez définir une ou plusieurs `topologySpreadConstraint` pour indiquer au kube-scheduler comment placer chaque nouveau Pod par rapport aux Pods déjà existants dans votre cluster. Les champs sont :
+
+- **maxSkew** décrit le degré avec lequel les Pods peuvent être inégalement distribués. C'est la différence maximale permise entre le nombre de Pods correspondants entre deux quelconques domaines de topologie d'un type donné. Il doit être supérieur à zéro.
+- **topologyKey** est la clé des labels de noeuds. Si deux noeuds sont étiquettés avec cette clé et ont des valeurs égales pour ce label, le scheduler considère les deux noeuds dans la même topologie. Le scheduler essaie de placer un nombre équilibré de Pods dans chaque domaine de topologie.
+- **whenUnsatisfiable** indique comment traiter un Pod qui ne satisfait pas les contraintes de propagation :
+  - `DoNotSchedule` (défaut) indique au scheduler de ne pas le programmer.
+  - `ScheduleAnyway` indique au scheduler de le programmer, tout en priorisant les noeuds minimisant le biais (*skew*).
+- **labelSelector** est utilisé pour touver les Pods correspondants. Les Pods correspondants à ce sélecteur de labels sont comptés pour déterminer le nombre de Pods dans leurs domaines de topologie correspodants. Voir [Sélecteurs de labels](/docs/concepts/overview/working-with-objects/labels/#label-selectors) pour plus de détails.
+
+Vous pouvez en savoir plus sur ce champ en exécutant `kubectl explain Pod.spec.topologySpreadConstraints`.
+
+### Exemple : Une TopologySpreadConstraint
+
+Supposez que vous avez un cluster de 4 noeuds où 3 Pods étiquettés `foo:bar` sont placés sur node1, node2 et node3 respectivement (`P` représente un Pod) :
+
+```
++---------------+---------------+
+|     zoneA     |     zoneB     |
++-------+-------+-------+-------+
+| node1 | node2 | node3 | node4 |
++-------+-------+-------+-------+
+|   P   |   P   |   P   |       |
++-------+-------+-------+-------+
+```
+
+Si nous voulons qu'un nouveau Pod soit uniformément réparti avec les Pods existants à travers les zones, la spec peut être :
+
+{{< codenew file="pods/topology-spread-constraints/one-constraint.yaml" >}}
+
+`topologyKey: zone` implies the even distribution will only be applied to the nodes which have label pair "zone:&lt;any value&gt;" present. `whenUnsatisfiable: DoNotSchedule` tells the scheduler to let it stay pending if the incoming Pod can’t satisfy the constraint.
+
+If the scheduler placed this incoming Pod into "zoneA", the Pods distribution would become [3, 1], hence the actual skew is 2 (3 - 1) - which violates `maxSkew: 1`. In this example, the incoming Pod can only be placed onto "zoneB":
+
+```
++---------------+---------------+      +---------------+---------------+
+|     zoneA     |     zoneB     |      |     zoneA     |     zoneB     |
++-------+-------+-------+-------+      +-------+-------+-------+-------+
+| node1 | node2 | node3 | node4 |  OR  | node1 | node2 | node3 | node4 |
++-------+-------+-------+-------+      +-------+-------+-------+-------+
+|   P   |   P   |   P   |   P   |      |   P   |   P   |  P P  |       |
++-------+-------+-------+-------+      +-------+-------+-------+-------+
+```
+
+You can tweak the Pod spec to meet various kinds of requirements:
+
+- Change `maxSkew` to a bigger value like "2" so that the incoming Pod can be placed onto "zoneA" as well.
+- Change `topologyKey` to "node" so as to distribute the Pods evenly across nodes instead of zones. In the above example, if `maxSkew` remains "1", the incoming Pod can only be placed onto "node4".
+- Change `whenUnsatisfiable: DoNotSchedule` to `whenUnsatisfiable: ScheduleAnyway` to ensure the incoming Pod to be always schedulable (suppose other scheduling APIs are satisfied). However, it’s preferred to be placed onto the topology domain which has fewer matching Pods. (Be aware that this preferability is jointly normalized with other internal scheduling priorities like resource usage ratio, etc.)
+
+### Example: Multiple TopologySpreadConstraints
+
+This builds upon the previous example. Suppose you have a 4-node cluster where 3 Pods labeled `foo:bar` are located in node1, node2 and node3 respectively (`P` represents Pod):
+
+```
++---------------+---------------+
+|     zoneA     |     zoneB     |
++-------+-------+-------+-------+
+| node1 | node2 | node3 | node4 |
++-------+-------+-------+-------+
+|   P   |   P   |   P   |       |
++-------+-------+-------+-------+
+```
+
+You can use 2 TopologySpreadConstraints to control the Pods spreading on both zone and node:
+
+{{< codenew file="pods/topology-spread-constraints/two-constraints.yaml" >}}
+
+In this case, to match the first constraint, the incoming Pod can only be placed onto "zoneB"; while in terms of the second constraint, the incoming Pod can only be placed onto "node4". Then the results of 2 constraints are ANDed, so the only viable option is to place on "node4".
+
+Multiple constraints can lead to conflicts. Suppose you have a 3-node cluster across 2 zones:
+
+```
++---------------+-------+
+|     zoneA     | zoneB |
++-------+-------+-------+
+| node1 | node2 | node3 |
++-------+-------+-------+
+|  P P  |   P   |  P P  |
++-------+-------+-------+
+```
+
+If you apply "two-constraints.yaml" to this cluster, you will notice "mypod" stays in `Pending` state. This is because: to satisfy the first constraint, "mypod" can only be put to "zoneB"; while in terms of the second constraint, "mypod" can only put to "node2". Then a joint result of "zoneB" and "node2" returns nothing.
+
+To overcome this situation, you can either increase the `maxSkew` or modify one of the constraints to use `whenUnsatisfiable: ScheduleAnyway`.
+
+### Conventions
+
+There are some implicit conventions worth noting here:
+
+- Only the Pods holding the same namespace as the incoming Pod can be matching candidates.
+
+- Nodes without `topologySpreadConstraints[*].topologyKey` present will be bypassed. It implies that:
+
+  1. the Pods located on those nodes do not impact `maxSkew` calculation - in the above example, suppose "node1" does not have label "zone", then the 2 Pods will be disregarded, hence the incomingPod will be scheduled into "zoneA".
+  2. the incoming Pod has no chances to be scheduled onto this kind of nodes - in the above example, suppose a "node5" carrying label `{zone-typo: zoneC}` joins the cluster, it will be bypassed due to the absence of label key "zone".
+
+- Be aware of what will happen if the incomingPod’s `topologySpreadConstraints[*].labelSelector` doesn’t match its own labels. In the above example, if we remove the incoming Pod’s labels, it can still be placed onto "zoneB" since the constraints are still satisfied. However, after the placement, the degree of imbalance of the cluster remains unchanged - it’s still zoneA having 2 Pods which hold label {foo:bar}, and zoneB having 1 Pod which holds label {foo:bar}. So if this is not what you expect, we recommend the workload’s `topologySpreadConstraints[*].labelSelector` to match its own labels.
+
+- If the incoming Pod has `spec.nodeSelector` or `spec.affinity.nodeAffinity` defined, nodes not matching them will be bypassed.
+
+    Suppose you have a 5-node cluster ranging from zoneA to zoneC:
+
+    ```
+    +---------------+---------------+-------+
+    |     zoneA     |     zoneB     | zoneC |
+    +-------+-------+-------+-------+-------+
+    | node1 | node2 | node3 | node4 | node5 |
+    +-------+-------+-------+-------+-------+
+    |   P   |   P   |   P   |       |       |
+    +-------+-------+-------+-------+-------+
+    ```
+
+    and you know that "zoneC" must be excluded. In this case, you can compose the yaml as below, so that "mypod" will be placed onto "zoneB" instead of "zoneC". Similarly `spec.nodeSelector` is also respected.
+
+    {{< codenew file="pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml" >}}
+
+### Cluster-level default constraints
+
+{{< feature-state for_k8s_version="v1.18" state="alpha" >}}
+
+It is possible to set default topology spread constraints for a cluster. Default
+topology spread constraints are applied to a Pod if, and only if:
+
+- It doesn't define any constraints in its `.spec.topologySpreadConstraints`.
+- It belongs to a service, replication controller, replica set or stateful set.
+
+Default constraints can be set as part of the `PodTopologySpread` plugin args
+in a [scheduling profile](/docs/reference/scheduling/profiles).
+The constraints are specified with the same [API above](#api), except that
+`labelSelector` must be empty. The selectors are calculated from the services,
+replication controllers, replica sets or stateful sets that the Pod belongs to.
+
+An example configuration might look like follows:
+
+```yaml
+apiVersion: kubescheduler.config.k8s.io/v1alpha2
+kind: KubeSchedulerConfiguration
+
+profiles:
+  pluginConfig:
+    - name: PodTopologySpread
+      args:
+        defaultConstraints:
+          - maxSkew: 1
+            topologyKey: failure-domain.beta.kubernetes.io/zone
+            whenUnsatisfiable: ScheduleAnyway
+```
+
+{{< note >}}
+The score produced by default scheduling constraints might conflict with the
+score produced by the
+[`DefaultPodTopologySpread` plugin](/docs/reference/scheduling/profiles/#scheduling-plugins).
+It is recommended that you disable this plugin in the scheduling profile when
+using default constraints for `PodTopologySpread`.
+{{< /note >}}
+
+## Comparison with PodAffinity/PodAntiAffinity
+
+In Kubernetes, directives related to "Affinity" control how Pods are
+scheduled - more packed or more scattered.
+
+- For `PodAffinity`, you can try to pack any number of Pods into qualifying
+  topology domain(s)
+- For `PodAntiAffinity`, only one Pod can be scheduled into a
+  single topology domain.
+
+The "EvenPodsSpread" feature provides flexible options to distribute Pods evenly across different
+topology domains - to achieve high availability or cost-saving. This can also help on rolling update
+workloads and scaling out replicas smoothly. See [Motivation](https://github.com/kubernetes/enhancements/tree/master/keps/sig-scheduling/895-pod-topology-spread#motivation) for more details.
+
+## Known Limitations
+
+As of 1.18, at which this feature is Beta, there are some known limitations:
+
+- Scaling down a Deployment may result in imbalanced Pods distribution.
+- Pods matched on tainted nodes are respected. See [Issue 80921](https://github.com/kubernetes/kubernetes/issues/80921)
+
+

From 6558ca888a89af93cdef93fa2560b800ff7020a2 Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Fri, 31 Jul 2020 15:33:03 +0200
Subject: [PATCH 012/496] end of translation

---
 .../pods/pod-topology-spread-constraints.md   | 109 ++++++++----------
 1 file changed, 51 insertions(+), 58 deletions(-)

diff --git a/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index f56d212496..4e0fddc40b 100644
--- a/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/fr/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -8,7 +8,7 @@ weight: 40
 
 {{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
-Vous pouvez utiliser des  _contraintes de propagation de topologie_ pour contrôler comment les {{< glossary_tooltip text="Pods" term_id="Pod" >}} sont propagés à travers votre cluster parmi les domaines de défaillance comme les régions, zones, noeuds et autres domaines de topologie définis par l'utilisateur. Ceci peut aider à créer de la haute disponibilité et à utiliser efficacement les ressources.
+Vous pouvez utiliser des  _contraintes de propagation de topologie_ pour contrôler comment les {{< glossary_tooltip text="Pods" term_id="Pod" >}} sont propagés à travers votre cluster parmi les domaines de défaillance comme les régions, zones, noeuds et autres domaines de topologie définis par l'utilisateur. Ceci peut aider à mettre en place de la haute disponibilité et à utiliser efficacement les ressources.
 
 
 
@@ -26,7 +26,7 @@ La [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) `
 
 Les contraintes de propagation de topologie reposent sur les labels de noeuds pour identifier le ou les domaines de topologie dans lesquels se trouve  chacun des noeuds. Par exemple, un noeud pourrait avoir les labels: `node=node1,zone=us-east-1a,region=us-east-1`
 
-Supposez que vous avec un cluster de 4 noeuds ayant les labels suivants:
+Supposons que vous ayez un cluster de 4 noeuds ayant les labels suivants:
 
 ```
 NAME    STATUS   ROLES    AGE     VERSION   LABELS
@@ -76,11 +76,11 @@ Vous pouvez définir une ou plusieurs `topologySpreadConstraint` pour indiquer a
   - `ScheduleAnyway` indique au scheduler de le programmer, tout en priorisant les noeuds minimisant le biais (*skew*).
 - **labelSelector** est utilisé pour touver les Pods correspondants. Les Pods correspondants à ce sélecteur de labels sont comptés pour déterminer le nombre de Pods dans leurs domaines de topologie correspodants. Voir [Sélecteurs de labels](/docs/concepts/overview/working-with-objects/labels/#label-selectors) pour plus de détails.
 
-Vous pouvez en savoir plus sur ce champ en exécutant `kubectl explain Pod.spec.topologySpreadConstraints`.
+Vous pouvez en savoir plus sur ces champ en exécutant `kubectl explain Pod.spec.topologySpreadConstraints`.
 
 ### Exemple : Une TopologySpreadConstraint
 
-Supposez que vous avez un cluster de 4 noeuds où 3 Pods étiquettés `foo:bar` sont placés sur node1, node2 et node3 respectivement (`P` représente un Pod) :
+Supposons que vous ayez un cluster de 4 noeuds où 3 Pods étiquettés `foo:bar` sont placés sur node1, node2 et node3 respectivement (`P` représente un Pod) :
 
 ```
 +---------------+---------------+
@@ -96,9 +96,9 @@ Si nous voulons qu'un nouveau Pod soit uniformément réparti avec les Pods exis
 
 {{< codenew file="pods/topology-spread-constraints/one-constraint.yaml" >}}
 
-`topologyKey: zone` implies the even distribution will only be applied to the nodes which have label pair "zone:&lt;any value&gt;" present. `whenUnsatisfiable: DoNotSchedule` tells the scheduler to let it stay pending if the incoming Pod can’t satisfy the constraint.
+`topologyKey: zone` implique que la distribution uniforme sera uniquement appliquée pour les noeuds ayant le label "zone:&lt;any value&gt;" présent. `whenUnsatisfiable: DoNotSchedule` indique au scheduler de laisser le Pod dans l'état Pending si le Pod entrant ne peut pas satisfaire la contrainte.
 
-If the scheduler placed this incoming Pod into "zoneA", the Pods distribution would become [3, 1], hence the actual skew is 2 (3 - 1) - which violates `maxSkew: 1`. In this example, the incoming Pod can only be placed onto "zoneB":
+Si le scheduler plaçait ce Pod entrant dans "zoneA", la distribution des Pods deviendrait [3, 1], et le biais serait de 2 (3 - 1) - ce qui va à l'encontre de `maxSkew: 1`. Dans cet exemple, le Pod entrant peut uniquement être placé dans "zoneB":
 
 ```
 +---------------+---------------+      +---------------+---------------+
@@ -110,15 +110,15 @@ If the scheduler placed this incoming Pod into "zoneA", the Pods distribution wo
 +-------+-------+-------+-------+      +-------+-------+-------+-------+
 ```
 
-You can tweak the Pod spec to meet various kinds of requirements:
+Vous pouvez ajuster la spec du Pod pour pour répondre à divers types d'exigences :
 
-- Change `maxSkew` to a bigger value like "2" so that the incoming Pod can be placed onto "zoneA" as well.
-- Change `topologyKey` to "node" so as to distribute the Pods evenly across nodes instead of zones. In the above example, if `maxSkew` remains "1", the incoming Pod can only be placed onto "node4".
-- Change `whenUnsatisfiable: DoNotSchedule` to `whenUnsatisfiable: ScheduleAnyway` to ensure the incoming Pod to be always schedulable (suppose other scheduling APIs are satisfied). However, it’s preferred to be placed onto the topology domain which has fewer matching Pods. (Be aware that this preferability is jointly normalized with other internal scheduling priorities like resource usage ratio, etc.)
+- Changez `maxSkew` pour une valeur plus grande comme "2" pour que le Pod entrant puisse aussi être placé dans la "zoneA".
+- Changez `topologyKey` pour "node" pour distribuer les Pods uniformément à travers les noeuds et non plus les zones. Dans l'exemple ci-dessus, si `maxSkew` reste à "1", le Pod entrant peut être uniquement placé dans "node4".
+- Changez `whenUnsatisfiable: DoNotSchedule` en `whenUnsatisfiable: ScheduleAnyway` pour s'assurer que le Pod est toujours programmable (en supposant que les autres APIs de scheduling soient satisfaites). Cependant, il sera de préférence placé dans la topologie de domaine ayant le moins de Pods correspondants. (Prenez note que cette préférence est normalisée conjointement avec d'autres priorités de scheduling interne comme le ratio d'usage de ressources, etc.)
 
-### Example: Multiple TopologySpreadConstraints
+### Example: Plusieurs TopologySpreadConstraints
 
-This builds upon the previous example. Suppose you have a 4-node cluster where 3 Pods labeled `foo:bar` are located in node1, node2 and node3 respectively (`P` represents Pod):
+Cela s'appuie sur l'exemple précédent. Supposons que vous ayez un cluster de 4 noeuds où 3 Pods étiquetés `foo:bar` sont placés sur node1, node2 et node3 respectivement (`P` représente un Pod):
 
 ```
 +---------------+---------------+
@@ -130,13 +130,13 @@ This builds upon the previous example. Suppose you have a 4-node cluster where 3
 +-------+-------+-------+-------+
 ```
 
-You can use 2 TopologySpreadConstraints to control the Pods spreading on both zone and node:
+Vous pouvez utiliser 2 TopologySpreadConstraints pour contrôler la répartition des Pods aussi bien dans les zones que dans les noeuds :
 
 {{< codenew file="pods/topology-spread-constraints/two-constraints.yaml" >}}
 
-In this case, to match the first constraint, the incoming Pod can only be placed onto "zoneB"; while in terms of the second constraint, the incoming Pod can only be placed onto "node4". Then the results of 2 constraints are ANDed, so the only viable option is to place on "node4".
+Dans ce cas, pour satisfaire la première contrainte, le Pod entrant peut uniquement être placé dans "zoneB" ; alors que pour satisfaire la seconde contrainte, le Pod entrant peut uniquement être placé dans "node4". Le résultat étant l'intersection des résultats des 2 contraintes, l'unique option possible est de placer le Pod entrant dans "node4".
 
-Multiple constraints can lead to conflicts. Suppose you have a 3-node cluster across 2 zones:
+Plusieurs contraintes peuvent entraîner des conflits. Supposons que vous ayez un cluster de 3 noeuds couvrant 2 zones :
 
 ```
 +---------------+-------+
@@ -148,26 +148,26 @@ Multiple constraints can lead to conflicts. Suppose you have a 3-node cluster ac
 +-------+-------+-------+
 ```
 
-If you apply "two-constraints.yaml" to this cluster, you will notice "mypod" stays in `Pending` state. This is because: to satisfy the first constraint, "mypod" can only be put to "zoneB"; while in terms of the second constraint, "mypod" can only put to "node2". Then a joint result of "zoneB" and "node2" returns nothing.
+Si vous appliquez "two-constraints.yaml" à ce cluster, vous noterez que "mypod" reste dans l'état `Pending`. Cela parce que : pour satisfaire la première contrainte, "mypod" peut uniquement être placé dans "zoneB"; alors que pour satisfaire la seconde contrainte, "mypod" peut uniquement être placé sur "node2". Ainsi, le résultat de l'intersection entre "zoneB" et "node2" ne retourne rien.
 
-To overcome this situation, you can either increase the `maxSkew` or modify one of the constraints to use `whenUnsatisfiable: ScheduleAnyway`.
+Pour surmonter cette situation, vous pouvez soit augmenter `maxSkew`, soit modifier une des contraintes pour qu'elle utilise `whenUnsatisfiable: ScheduleAnyway`.
 
 ### Conventions
 
-There are some implicit conventions worth noting here:
+Il existe quelques conventions implicites qu'il est intéressant de noter ici :
 
-- Only the Pods holding the same namespace as the incoming Pod can be matching candidates.
+- Seuls le Pods du même espace de noms que le Pod entrant peuvent être des candidats pour la correspondance.
 
-- Nodes without `topologySpreadConstraints[*].topologyKey` present will be bypassed. It implies that:
+- Les noeuds sans label  `topologySpreadConstraints[*].topologyKey` seront ignorés. Cela induit que :
 
-  1. the Pods located on those nodes do not impact `maxSkew` calculation - in the above example, suppose "node1" does not have label "zone", then the 2 Pods will be disregarded, hence the incomingPod will be scheduled into "zoneA".
-  2. the incoming Pod has no chances to be scheduled onto this kind of nodes - in the above example, suppose a "node5" carrying label `{zone-typo: zoneC}` joins the cluster, it will be bypassed due to the absence of label key "zone".
+  1. les Pods localisés sur ces noeuds n'impactent pas le calcul de `maxSkew` - dans l'exemple ci-dessus, supposons que "node1" n'a pas de label "zone", alors les 2 Pods ne seront pas comptés, et le Pod entrant sera placé dans "zoneA".
+  2. le Pod entrant n'a aucune chance d'être programmé sur ce type de noeuds - dans l'exemple ci-dessus, supposons qu'un "node5" portant un label `{zone-typo: zoneC}` joigne le cluster ; il sera ignoré, en raison de l'absence de label "zone".
 
-- Be aware of what will happen if the incomingPod’s `topologySpreadConstraints[*].labelSelector` doesn’t match its own labels. In the above example, if we remove the incoming Pod’s labels, it can still be placed onto "zoneB" since the constraints are still satisfied. However, after the placement, the degree of imbalance of the cluster remains unchanged - it’s still zoneA having 2 Pods which hold label {foo:bar}, and zoneB having 1 Pod which holds label {foo:bar}. So if this is not what you expect, we recommend the workload’s `topologySpreadConstraints[*].labelSelector` to match its own labels.
+- Faites attention à ce qui arrive lorsque le `topologySpreadConstraints[*].labelSelector`  du Pod entrant ne correspond pas à ses propres labels. Dans l'exemple ci-dessus, si nous supprimons les labels du Pod entrant, il sera toujours placé dans "zoneB" car les contraintes sont toujours satisfaites. Cependant, après le placement, le degré de déséquilibre du cluster reste inchangé - zoneA contient toujours 2 Pods ayant le label {foo:bar}, et zoneB contient 1 Pod cayant le label {foo:bar}. Si ce n'est pas ce que vous attendez, nous recommandons que `topologySpreadConstraints[*].labelSelector` du workload corresponde à ses propres labels.
 
-- If the incoming Pod has `spec.nodeSelector` or `spec.affinity.nodeAffinity` defined, nodes not matching them will be bypassed.
+- Si le Pod entrant a défini `spec.nodeSelector` ou `spec.affinity.nodeAffinity`, les noeuds non correspondants seront ignorés.
 
-    Suppose you have a 5-node cluster ranging from zoneA to zoneC:
+    Supposons que vous ayez un cluster de 5 noeuds allant de zoneA à zoneC :
 
     ```
     +---------------+---------------+-------+
@@ -179,27 +179,26 @@ There are some implicit conventions worth noting here:
     +-------+-------+-------+-------+-------+
     ```
 
-    and you know that "zoneC" must be excluded. In this case, you can compose the yaml as below, so that "mypod" will be placed onto "zoneB" instead of "zoneC". Similarly `spec.nodeSelector` is also respected.
+    et vous savez que "zoneC" doit être exclue. Dans ce cas, vous pouvez écrire le yaml ci-dessous, pour que "mypod" soit placé dans "zoneB" plutôt que dans "zoneC". `spec.nodeSelector` est pris en compte de la même manière.
 
     {{< codenew file="pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml" >}}
 
-### Cluster-level default constraints
+### Contraintes par défaut au niveau du cluster
 
 {{< feature-state for_k8s_version="v1.18" state="alpha" >}}
 
-It is possible to set default topology spread constraints for a cluster. Default
-topology spread constraints are applied to a Pod if, and only if:
+Il est possible de définir des contraintes de propagation de topologie par défaut pour un cluster. Les contraintes de propagation de topologie sont appliquées à un Pod si et seulement si :
 
-- It doesn't define any constraints in its `.spec.topologySpreadConstraints`.
-- It belongs to a service, replication controller, replica set or stateful set.
+- Il ne définit aucune contrainte dans son `.spec.topologySpreadConstraints`.
+- Il appartient à un service, replication controller, replica set ou stateful set.
 
-Default constraints can be set as part of the `PodTopologySpread` plugin args
-in a [scheduling profile](/docs/reference/scheduling/profiles).
-The constraints are specified with the same [API above](#api), except that
-`labelSelector` must be empty. The selectors are calculated from the services,
-replication controllers, replica sets or stateful sets that the Pod belongs to.
+Les contraintes par défaut peuvent être définies comme arguments du plugin `PodTopologySpread`
+dans un [profil de scheduling](/docs/reference/scheduling/profiles).
+Les contraintes sont spécifiées avec la même [API ci-dessus](#api), à l'exception que
+`labelSelector` doit être vide. Les sélecteurs sont calculés à partir des services,
+replication controllers, replica sets ou stateful sets auxquels le Pod appartient.
 
-An example configuration might look like follows:
+Un exemple de configuration pourrait ressembler à :
 
 ```yaml
 apiVersion: kubescheduler.config.k8s.io/v1alpha2
@@ -216,32 +215,26 @@ profiles:
 ```
 
 {{< note >}}
-The score produced by default scheduling constraints might conflict with the
-score produced by the
-[`DefaultPodTopologySpread` plugin](/docs/reference/scheduling/profiles/#scheduling-plugins).
-It is recommended that you disable this plugin in the scheduling profile when
-using default constraints for `PodTopologySpread`.
+Le score produit par les contraintes de scheduling par défaut peuvent rentrer en conflit avec le score
+produit par le [plugin `DefaultPodTopologySpread`](/docs/reference/scheduling/profiles/#scheduling-plugins).
+Il est recommandé de désactiver ce plugin dans le profil de scheduling lorsque vous utilisez des contraintes
+par défaut pour `PodTopologySpread`.
 {{< /note >}}
 
-## Comparison with PodAffinity/PodAntiAffinity
+## Comparaison avec PodAffinity/PodAntiAffinity
 
-In Kubernetes, directives related to "Affinity" control how Pods are
-scheduled - more packed or more scattered.
+Dans Kubernetes, les directives relatives aux "Affinités" contrôlent comment les Pods sont
+programmés - plus regroupés ou plus dispersés.
 
-- For `PodAffinity`, you can try to pack any number of Pods into qualifying
-  topology domain(s)
-- For `PodAntiAffinity`, only one Pod can be scheduled into a
-  single topology domain.
+- Pour `PodAffinity`, vous pouvez essayer de regrouper un certain nombre de Pods dans des domaines de topologie qualifiés,
+- Pour `PodAntiAffinity`, seulement un Pod peut être programmé dans un domaine de topologie unique.
 
-The "EvenPodsSpread" feature provides flexible options to distribute Pods evenly across different
-topology domains - to achieve high availability or cost-saving. This can also help on rolling update
-workloads and scaling out replicas smoothly. See [Motivation](https://github.com/kubernetes/enhancements/tree/master/keps/sig-scheduling/895-pod-topology-spread#motivation) for more details.
+La fonctionnalité "EvenPodsSpread" fournit des options flexibles pour distribuer des Pods uniformément sur différents domaines de topologie - pour mettre en place de la haute disponibilité ou réduire les coûts. Cela peut aussi aider
+au rolling update des charges de travail et à la mise à l'échelle de réplicas. Voir [Motivations](https://github.com/kubernetes/enhancements/tree/master/keps/sig-scheduling/895-pod-topology-spread#motivation) pour plus de détails.
 
-## Known Limitations
-
-As of 1.18, at which this feature is Beta, there are some known limitations:
-
-- Scaling down a Deployment may result in imbalanced Pods distribution.
-- Pods matched on tainted nodes are respected. See [Issue 80921](https://github.com/kubernetes/kubernetes/issues/80921)
+## Limitations connues
 
+En version 1.18, pour laquelle cette fonctionnalité est en Beta, il y a quelques limitations connues :
 
+- Réduire un Déploiement peut résulter en une distrubution désiquilibrée des Pods.
+- Les Pods correspondants sur des noeuds taintés sont respectés. Voir [Issue 80921](https://github.com/kubernetes/kubernetes/issues/80921)

From 23e979e5f01985693221ef2d98efbea02bf551bf Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Fri, 31 Jul 2020 16:50:11 +0200
Subject: [PATCH 013/496] Add examples

---
 .../one-constraint-with-nodeaffinity.yaml     | 26 +++++++++++++++++++
 .../one-constraint.yaml                       | 17 ++++++++++++
 .../two-constraints.yaml                      | 23 ++++++++++++++++
 3 files changed, 66 insertions(+)
 create mode 100644 content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml
 create mode 100644 content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml
 create mode 100644 content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml

diff --git a/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml b/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml
new file mode 100644
index 0000000000..98823f9d86
--- /dev/null
+++ b/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml
@@ -0,0 +1,26 @@
+kind: Pod
+apiVersion: v1
+metadata:
+  name: mypod
+  labels:
+    foo: bar
+spec:
+  topologySpreadConstraints:
+  - maxSkew: 1
+    topologyKey: zone
+    whenUnsatisfiable: DoNotSchedule
+    labelSelector:
+      matchLabels:
+        foo: bar
+  affinity:
+    nodeAffinity:
+      requiredDuringSchedulingIgnoredDuringExecution:
+        nodeSelectorTerms:
+        - matchExpressions:
+          - key: zone
+            operator: NotIn
+            values:
+            - zoneC
+  containers:
+  - name: pause
+    image: k8s.gcr.io/pause:3.1
\ No newline at end of file
diff --git a/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml b/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml
new file mode 100644
index 0000000000..a0a41188ec
--- /dev/null
+++ b/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml
@@ -0,0 +1,17 @@
+kind: Pod
+apiVersion: v1
+metadata:
+  name: mypod
+  labels:
+    foo: bar
+spec:
+  topologySpreadConstraints:
+  - maxSkew: 1
+    topologyKey: zone
+    whenUnsatisfiable: DoNotSchedule
+    labelSelector:
+      matchLabels:
+        foo: bar
+  containers:
+  - name: pause
+    image: k8s.gcr.io/pause:3.1
\ No newline at end of file
diff --git a/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml b/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml
new file mode 100644
index 0000000000..aa142b7abb
--- /dev/null
+++ b/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml
@@ -0,0 +1,23 @@
+kind: Pod
+apiVersion: v1
+metadata:
+  name: mypod
+  labels:
+    foo: bar
+spec:
+  topologySpreadConstraints:
+  - maxSkew: 1
+    topologyKey: zone
+    whenUnsatisfiable: DoNotSchedule
+    labelSelector:
+      matchLabels:
+        foo: bar
+  - maxSkew: 1
+    topologyKey: node
+    whenUnsatisfiable: DoNotSchedule
+    labelSelector:
+      matchLabels:
+        foo: bar
+  containers:
+  - name: pause
+    image: k8s.gcr.io/pause:3.1
\ No newline at end of file

From 1a2fec388dea8713f71b90120caaeda89ed01fca Mon Sep 17 00:00:00 2001
From: yixin21 <66355657+yixin21@users.noreply.github.com>
Date: Mon, 3 Aug 2020 20:41:35 +0800
Subject: [PATCH 014/496] Create 2019-09-24-san-diego-contributor-summit.md

zh-trans 2019-09-24-san-diego-contributor-summit.md
---
 ...2019-09-24-san-diego-contributor-summit.md | 136 ++++++++++++++++++
 1 file changed, 136 insertions(+)
 create mode 100644 content/zh/blog/_posts/2019-09-24-san-diego-contributor-summit.md

diff --git a/content/zh/blog/_posts/2019-09-24-san-diego-contributor-summit.md b/content/zh/blog/_posts/2019-09-24-san-diego-contributor-summit.md
new file mode 100644
index 0000000000..66f572a305
--- /dev/null
+++ b/content/zh/blog/_posts/2019-09-24-san-diego-contributor-summit.md
@@ -0,0 +1,136 @@
+---
+layout: blog
+title: "San Diego 贡献者峰会开放注册！"
+date: 2019-09-24
+slug: san-diego-contributor-summit
+---
+<!--
+---
+layout: blog
+title: "Contributor Summit San Diego Registration Open!"
+date: 2019-09-24
+slug: san-diego-contributor-summit
+---
+--->
+
+<!--
+**Authors: Paris Pittman (Google), Jeffrey Sica (Red Hat), Jonas Rosland (VMware)**
+--->
+**作者：Paris Pittman (Google), Jeffrey Sica (Red Hat), Jonas Rosland (VMware)**
+
+
+
+<!--
+[Contributor Summit San Diego 2019 Event Page]  
+Registration is now open and in record time, we’ve hit capacity for the
+*new contributor workshop* session of the event! Waitlist is now available.
+--->
+[2019 San Diego 贡献者峰会活动页面](https://events.linuxfoundation.org/events/kubernetes-contributor-summit-north-america-2019/)
+注册已经开放，并且在创纪录的时间内，*新贡献者研讨会* 活动已满员！候补名单已经开放。
+
+<!--
+**Sunday, November 17**  
+Evening Contributor Celebration:  
+[QuartYard]*  
+Address: 1301 Market Street, San Diego, CA 92101  
+Time: 6:00PM - 9:00PM  
+--->
+**11月17日，星期日**  
+晚间贡献者庆典：  
+[QuartYard]*  
+地址: 1301 Market Street, San Diego, CA 92101  
+时间: 下午6:00 - 下午9:00
+
+<!--
+**Monday, November 18**  
+All Day Contributor Summit:  
+[Marriott Marquis San Diego Marina]  
+Address: 333 W Harbor Dr, San Diego, CA 92101  
+Time: 9:00AM - 5:00PM  
+--->
+**11月18日，星期一**  
+全天贡献者峰会：  
+[Marriott Marquis San Diego Marina]  
+地址: 333 W Harbor Dr, San Diego, CA 92101  
+时间: 上午9:00 - 下午5:00  
+
+
+<!--
+While the Kubernetes project is only five years old, we’re already going into our
+9th Contributor Summit this November in San Diego before KubeCon + CloudNativeCon.
+The rapid increase is thanks to adding European and Asian Contributor Summits to
+the North American events we’ve done previously. We will continue to run Contributor
+Summits across the globe, as it is important that our contributor base grows in
+all forms of diversity.
+--->
+虽然 Kubernetes 项目只有五年的历史，但是在 KubeCon + CloudNativeCon 之前，今年11月在圣迭戈时我们举办的第九届贡献者峰会了。快速增长的原因是在我们之前所做的北美活动中增加了欧洲和亚洲贡献者峰会。我们将继续在全球举办贡献者峰会，因为重要的是，我们的贡献者要以各种形式的多样性地成长。
+
+<!--
+Kubernetes has a large distributed remote contributing team, from [individuals and
+organizations] all over the world. The Contributor Summits give the community three
+chances a year to get together, work on community topics, and have hallway track
+time. The upcoming San Diego summit is expected to bring over 450 attendees, and
+will contain multiple tracks with something for everyone. The focus will be around
+contributor growth and sustainability. We're going to stop here with capacity for
+future summits; we want this event to offer value to individuals and the project.
+We've heard from past summit attendee feedback that getting work done, learning,
+and meeting folks face to face is a priority. By capping attendance and offering
+the contributor gatherings in more locations, it will help us achieve those goals.
+--->
+Kubernetes 拥有一个庞大的分布式远程贡献团队，由来自世界各地的 [个人和组织](https://k8s.devstats.cncf.io/d/8/company-statistics-by-repository-group?orgId=1&var-period=y&var-metric=contributions&var-repogroup_name=All&var-companies=All) 组成。贡献者峰会每年为社区提供三次聚会的机会，围绕社区主题开展工作，并有互相了解的时间。即将举行的 San Diego 峰会预计将吸引 450 多名与会者，并将包含多个方向，适合所有人。重点将围绕贡献者的增长和可持续性。我们将在这里停留，为举行未来峰会做准备；我们希望这次活动为个人和项目提供价值。我们已经从峰会与会者的反馈中得知，完成工作、学习和与人们面对面交流是当务之急。通过限制参加人数并在更多地方提供贡献者聚会，将有助于我们实现这些目标。
+
+<!--
+This summit is unique as we’ve taken big moves on sustaining ourselves, the
+contributor experience events team. Taking a page from the release team’s playbook,
+we have added additional core team and shadow roles making it a natural mentoring
+(watching+doing) relationship. The shadows are expected to fill another role at
+one of the three events in 2020, and core team members to take the lead.
+In preparation for this team, we’ve open sourced our [rolebooks, guidelines,
+best practices] and opened up our [meetings] and [project board]. Our team makes up
+many parts of the Kubernetes project and takes care of making sure all voices
+are represented.
+--->
+这次峰会是独一无二的，因为我们在贡献者体验活动团队的坚持自我方面已采取了重大举措。从发行团队的手册中摘录，我们添加了其他核心团队和跟随学习角色，使其成为天然的辅导关系（包括监督和实施）。预计跟随学习者将在 2020 年的三项活动中扮演另一个角色，核心团队成员将带头完成。为这个团队做准备，我们开源了 [技术手册，指南，最佳做法](https://github.com/kubernetes/community/tree/master/events/events-team)，并开放了 [会议](https://docs.google.com/document/d/1oLXv5_rM4f645jlXym_Vd7AUq7x6DV-O87E6tcW1sjU/edit?usp=sharing) 和 [项目委员会](https://github.com/orgs/kubernetes/projects/21)。我们的团队组成了 Kubernetes 项目的许多部分，并确保所有声音都得到体现。
+
+<!--
+Are you at KubeCon + CloudNativeCon but can’t make it to the summit? Check out
+the [SIG Intro and Deep Dive sessions] during KubeCon + CloudNativeCon to
+participate in Q&A and hear what’s up with each Special interest Group (SIG).
+We’ll also record all of Contributor Summit’s presentation sessions, take notes
+in discussions, and share it back with you, after the event is complete.
+--->
+您是否已经在 KubeCon + CloudNativeCon 上，但无法参与会议？ 在 KubeCon + CloudNativeCon 期间查看 [SIG入门和深潜课程](https://kccncna19.sched.com/overview/type/Maintainer+Track+Sessions?iframe=yes) 参与问答，并听取每个特殊兴趣小组（SIG）的最新消息。活动结束后，我们还将记录所有贡献者峰会的课题，在讨论中做笔记，并与您分享。
+
+<!--
+We hope to see you all at Kubernetes Contributor Summit San Diego, make sure you
+head over and [register right now]! This event will sell out - here’s your warning.
+:smiley:
+--->
+我们希望能在 San Diego 的 Kubernetes 贡献者峰会上与大家见面，确保您直接进入并点击 [立即注册](https://events.linuxfoundation.org/events/kubernetes-contributor-summit-north-america-2019/)！ 此活动将关闭 - 特此提醒。 ：笑脸：
+
+<!--
+Check out past blogs on [persona building around our events] and the [Barcelona summit story].
+
+![Group Picture in 2018](/images/blog/2019-09-24-san-diego-contributor-summit/IMG_2588.JPG)
+--->
+查看往期博客有关 [围绕我们的活动构建角色](https://kubernetes.io/blog/2019/03/20/a-look-back-and-whats-in-store-for-kubernetes-contributor-summits/) 和 [巴塞罗那峰会故事](https://kubernetes.io/blog/2019/06/25/recap-of-kubernetes-contributor-summit-barcelona-2019/)。
+
+！[2018年集体照](/images/blog/2019-09-24-san-diego-contributor-summit/IMG_2588.JPG)
+
+<!--
+*=QuartYard has a huge stage! Want to perform something in front of your contributor peers? Reach out to us! community@kubernetes.io
+--->
+*=QuartYard 有一个巨大的舞台！想要在您的贡献者同行面前做点什么？加入我们吧！ community@kubernetes.io
+
+
+[Contributor Summit San Diego 2019 Event Page]: https://events.linuxfoundation.org/events/kubernetes-contributor-summit-north-america-2019/
+[QuartYard]: https://quartyardsd.com/
+[Marriott Marquis San Diego Marina]: https://www.marriott.com/hotels/travel/sandt-marriott-marquis-san-diego-marina/?scid=bb1a189a-fec3-4d19-a255-54ba596febe2
+[individuals and organizations]: https://k8s.devstats.cncf.io/d/8/company-statistics-by-repository-group?orgId=1&var-period=y&var-metric=contributions&var-repogroup_name=All&var-companies=All
+[rolebooks, guidelines, best practices]: https://github.com/kubernetes/community/tree/master/events/events-team
+[meetings]: https://docs.google.com/document/d/1oLXv5_rM4f645jlXym_Vd7AUq7x6DV-O87E6tcW1sjU/edit?usp=sharing
+[project board]: https://github.com/orgs/kubernetes/projects/21
+[SIG Intro and Deep Dive sessions]: https://kccncna19.sched.com/overview/type/Maintainer+Track+Sessions?iframe=yes
+[register right now]: https://events.linuxfoundation.org/events/kubernetes-contributor-summit-north-america-2019/
+[persona building around our events]: https://kubernetes.io/blog/2019/03/20/a-look-back-and-whats-in-store-for-kubernetes-contributor-summits/
+[Barcelona summit story]: https://kubernetes.io/blog/2019/06/25/recap-of-kubernetes-contributor-summit-barcelona-2019/

From 57fe47cb183c48654615b27502f8253d00b51c1d Mon Sep 17 00:00:00 2001
From: danninov <mail@danni.id>
Date: Sun, 2 Aug 2020 20:41:57 +0700
Subject: [PATCH 015/496] Add ID localization task configure volume storage

---
 .../configure-volume-storage.md               | 135 ++++++++++++++++++
 content/id/examples/pods/storage/redis.yaml   |  14 ++
 2 files changed, 149 insertions(+)
 create mode 100644 content/id/docs/tasks/configure-pod-container/configure-volume-storage.md
 create mode 100644 content/id/examples/pods/storage/redis.yaml

diff --git a/content/id/docs/tasks/configure-pod-container/configure-volume-storage.md b/content/id/docs/tasks/configure-pod-container/configure-volume-storage.md
new file mode 100644
index 0000000000..2da9cebcda
--- /dev/null
+++ b/content/id/docs/tasks/configure-pod-container/configure-volume-storage.md
@@ -0,0 +1,135 @@
+---
+title: Mengatur Pod untuk Menggunakan Volume sebagai Tempat Penyimpanan
+content_type: task
+weight: 50
+---
+
+<!-- overview -->
+
+Laman ini menjelaskan bagaimana cara mengatur sebuah Pod untuk menggunakan Volume sebagai tempat penyimpanan.
+
+_Filesystem_ dari sebuah Container hanya hidup selama Container itu juga hidup. Saat Container berakhir dan dimulai ulang, perubahan pada _filesystem_ akan hilang. Untuk penyimpanan konsisten yang independen dari Container, kamu dapat menggunakan [Volume](/id/docs/concepts/storage/volumes/). Hal ini penting terutama untuk aplikasi _stateful_, seperti _key-value stores_ (contohnya Redis) dan database.
+
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+
+
+<!-- steps -->
+
+## Mengatur volume untuk Pod
+
+Pada latihan ini, kamu membuat sebuah Pod yang menjalankan sebuah Container. Pod ini memiliki sebuah Volume dengan tipe [emptyDir](/id/docs/concepts/storage/volumes/#emptydir)
+yang tetap bertahan, meski Container berakhir dan dimulai ulang. Berikut berkas konfigurasi untuk Pod:
+
+{{< codenew file="pods/storage/redis.yaml" >}}
+
+1. Membuat Pod:
+
+    ```shell
+    kubectl apply -f https://k8s.io/examples/pods/storage/redis.yaml
+    ```
+
+2. Verifikasi apakah Container dari Pod berjalan sukses, lalu mengamati perubahan terhadap Pod:
+
+    ```shell
+    kubectl get pod redis --watch
+    ```
+    
+    Hasil keluaran seperti ini:
+
+    ```shell
+    NAME      READY     STATUS    RESTARTS   AGE
+    redis     1/1       Running   0          13s
+    ```
+
+1. Pada terminal lain, buka _shell_ untuk masuk ke Container yang sedang berjalan:
+
+    ```shell
+    kubectl exec -it redis -- /bin/bash
+    ```
+
+1. Di dalam _shell_, pergi ke `/data/redis`, kemudian buat sebuah berkas:
+
+    ```shell
+    root@redis:/data# cd /data/redis/
+    root@redis:/data/redis# echo Hello > test-file
+    ```
+
+1. Di dalam _shell_, munculkan daftar proses-proses yang sedang berjalan:
+
+    ```shell
+    root@redis:/data/redis# apt-get update
+    root@redis:/data/redis# apt-get install procps
+    root@redis:/data/redis# ps aux
+    ```
+
+    Keluarannya mirip seperti ini:
+
+    ```shell
+    USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
+    redis        1  0.1  0.1  33308  3828 ?        Ssl  00:46   0:00 redis-server *:6379
+    root        12  0.0  0.0  20228  3020 ?        Ss   00:47   0:00 /bin/bash
+    root        15  0.0  0.0  17500  2072 ?        R+   00:48   0:00 ps aux
+    ```
+
+1. Di dalam _shell_, matikan proses Redis:
+
+    ```shell
+    root@redis:/data/redis# kill <pid>
+    ```
+
+    dengan `<pid>` adalah ID proses Redis (PID).
+
+2. Di dalam terminal awal, amati perubahan terhadap Pod Redis. Sampai akhirnya kamu akan melihat hal seperti ini:
+
+    ```shell
+    NAME      READY     STATUS     RESTARTS   AGE
+    redis     1/1       Running    0          13s
+    redis     0/1       Completed  0         6m
+    redis     1/1       Running    1         6m
+    ```
+
+Sampai di sini, Container telah berakhir dan dimuat ulang. Hal ini karena Pod Redis memiliki
+[restartPolicy](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core)
+dengan nilai `Always`.
+
+1. Gunakan _shell_ untuk masuk ke dalam Container yang telah dimuat ulang:
+
+    ```shell
+    kubectl exec -it redis -- /bin/bash
+    ```
+
+2. Di dalam _shell_, pergi ke `/data/redis`, dan verifikasi apakah `test-file` masih ada.
+    ```shell
+    root@redis:/data/redis# cd /data/redis/
+    root@redis:/data/redis# ls
+    test-file
+    ```
+
+3. Hapus Pod yang kamu buat untuk latihan ini:
+
+    ```shell
+    kubectl delete pod redis
+    ```
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* Lihat [Volume](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#volume-v1-core).
+
+* Lihat [Pod](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core).
+
+* Selain penyimpanan pada disk lokal yang di sediakan oleh `emptyDir`, Kubernetes
+juga mendukung solusi penyimpanan _network-attached_, termasuk PD pada
+GCE dan EBS dari EC2, yang cenderung lebih disukai untuk data sangat penting dan akan menangani urusan detil seperti _mounting_ dan _unmounting_ perangkat pada Node. Lihat
+[Volume](/id/docs/concepts/storage/volumes/) untuk informasi detil.
+
+
+
+
diff --git a/content/id/examples/pods/storage/redis.yaml b/content/id/examples/pods/storage/redis.yaml
new file mode 100644
index 0000000000..cb06456d4b
--- /dev/null
+++ b/content/id/examples/pods/storage/redis.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: redis
+spec:
+  containers:
+  - name: redis
+    image: redis
+    volumeMounts:
+    - name: redis-storage
+      mountPath: /data/redis
+  volumes:
+  - name: redis-storage
+    emptyDir: {}

From 15e2140286c96ef3b2c024be10e33068c670d73a Mon Sep 17 00:00:00 2001
From: danninov <mail@danni.id>
Date: Sun, 2 Aug 2020 22:00:47 +0700
Subject: [PATCH 016/496] Add ID localization of force delete stateful pod

---
 .../force-delete-stateful-set-pod.md          | 81 +++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 content/id/docs/tasks/run-application/force-delete-stateful-set-pod.md

diff --git a/content/id/docs/tasks/run-application/force-delete-stateful-set-pod.md b/content/id/docs/tasks/run-application/force-delete-stateful-set-pod.md
new file mode 100644
index 0000000000..a6ca6687c3
--- /dev/null
+++ b/content/id/docs/tasks/run-application/force-delete-stateful-set-pod.md
@@ -0,0 +1,81 @@
+---
+reviewers:
+title: Menghapus Paksa Pod StatefulSet
+content_type: task
+weight: 70
+---
+
+<!-- overview -->
+Laman ini menjelaskan bagaimana cara menghapus Pod yang menjadi bagian dari sebuah {{< glossary_tooltip text="stateful set" term_id="StatefulSet" >}}, dan menjelaskan pertimbangan yang harus diperhatikan saat melakukannya.
+
+
+## {{% heading "prerequisites" %}}
+
+
+* Ini merupakan tugas yang cukup rumit dan memiliki potensi melanggar beberapa properti yang melekat dari StatefulSet.
+* Sebelum melanjutkan, pastikan kamu paham dengan pertimbangan yang disebutkan di bawah ini.
+
+
+
+<!-- steps -->
+
+## Pertimbangan StatefulSet
+
+Pada operasi normal dari StatefulSet, **tidak pernah** ada kebutuhan untuk menghapus paksa sebuah Pod StatefulSet. [_Controller_ StatefulSet](/id/docs/concepts/workloads/controllers/statefulset/) bertanggung jawab terhadap pembuatan, penyekalaan dan penghapusan terhadap anggota dari StatefulSet. _Controller_ akan berusaha menjaga agar jumlah Pod yang ditentukan dari 0 hingga N-1 hidup dan siap sedia. StatefulSet memastikan bahwa, pada waktu kapanpun, akan ada minimal satu Pod dengan identitas yang telah ditetapkan berjalan pada klaster. Hal ini direferensikan sebagai semantik *at most one* yang disediakan StatefulSet.
+
+Penghapusan paksa secara manual harus dilakukan dengan hati-hati, karena hal tersebut berpotensi melanggar semantik _at most one_ yang melekat pada StatefulSet. StatefulSet dapat digunakan untuk menjalankan aplikasi terklaster dan terdistribusi yang membutuhkan identitas jaringan dan penyimpanan yang stabil dan tetap. Aplikasi-aplikasi ini biasanya memiliki konfigurasi yang tergantung dengan sejumlah anggota dengan identitas yang tetap. Memiliki banyak anggota dengan identitas yang sama berpotensi menimbulkan kerusakan dan kehilangan data (contohnya skenario  _split brain_ pada sistem berbasis kuorum).
+
+## Menghapus Pod
+
+Kamu dapat melakukan penghapusan Pod secara _graceful_ dengan perintah berikut:
+
+```shell
+kubectl delete pods <pod>
+```
+
+Agar perintah di atas mengarah ke terminasi secara _graceful_, Pod **tidak boleh** menspesifikasikan `pod.Spec.TerminationGracePeriodSeconds` dengan nilai 0. Praktik untuk mengatur nilai `pod.Spec.TerminationGracePeriodSeconds` menjadi 0 detik merupakan hal yang tidak aman dan sangat tidak disarankan untuk Pod StatefulSet. Penghapusan secara _graceful_  itu aman dan akan memastikan bahwa Pod [akan mati secara _gracefully_](/id/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination) sebelum kubelet menghapus nama dari apiserver.
+
+Kubernetes (versi 1.5 atau lebih baru) tidak akan menghapus Pod hanya karena Node tidak dapat dijangkau. Pod yang berjalan pada Node yang tidak dapat dijangkau akan memasuki keadaan 'Terminating' atau 'Unknown' setelah [waktu habis](/id/docs/admin/node/#node-condition). Pod juga dapat memasuki keadaan ini saat pengguna berusaha melakukan penghapusan secara _graceful_ terhadap Pod pada Node yang tidak dapat dijangkau. Cara yang hanya dapat dilakukan untuk menghapus Pod pada keadaan tersebut dari apiserver adalah:
+
+   * Objek Node telah dihapus (baik oleh kamu, atau oleh [_Controller_ Node](/id/docs/admin/node)).<br/>
+   * Kubelet pada Node yang tidak responsif akan menanggapi, lalu mematikan Pod dan menghapusnya dari apiserver.<br/>
+   * Penghapusan paksa Pod oleh pengguna.
+
+Praktik terbaik yang direkomendasikan adalah menggunakan pendekatan pertama atau kedua. Jika sebuah Node telah terkonfirmasi mati (contohnya terputus dari jaringan secara permanen, dimatikan, dll), maka objek Node dihapus. Jika Node mengalami partisi jaringan, maka coba selesaikan masalah ini atau menunggu masalah itu terselesaikan. Saat partisi terselesaikan, kubelet akan menyelesaikan penghapusan Pod serta membebaskan namanya dari apiserver.
+
+Normalnya, sistem akan menyelesaikan penghapusan saat Pod tidak lagi berjalan pada Node, atau Node telah dihapus oleh administrator. Kamu dapat mengabaikan hal ini dengan menghapus paksa Pod.
+
+### Penghapusan Paksa
+
+Penghapusan paksa **tidak** menunggu konfirmasi dari kubelet bahwa Pod telah diterminasi. Terlepas dari apakah penghapusan paksa sukses mematikan sebuah Pod, namanya akan segera dibebaskan dari apiserver. Hal ini berakibat _controller_ StatefulSet akan membuat Pod pengganti dengan identitas yang sama; ini dapat menimbulkan duplikasi terhadap Pod apabila ternyata Pod tersebut masih berjalan, dan jika Pod tersebut masih dapat berkomunikasi dengan anggota Statefulset lainnya, hal ini berakibat terjadi pelanggaran semantik _at most one_ dari StatefulSet yang telah dijamin.
+
+Saat kamu menghapus paksa sebuah Pod StatefulSet, berarti kamu menjamin bahwa Pod tersebut tidak akan pernah lagi berkomunikasi dengan Pod lain pada StatefulSet dan namanya dapat dibebaskan secara aman untuk pembuatan penggantinya.
+
+Jika kamu ingin menghapus paksa Pod dengan menggunakan kubectl versi >= 1.5, lakukan perintah berikut:
+
+```shell
+kubectl delete pods <pod> --grace-period=0 --force
+```
+
+Jika kamu menggunakan kubectl <= 1.4, kamu harus menghilangkan pilihan `--force` dan gunakan:
+
+```shell
+kubectl delete pods <pod> --grace-period=0
+```
+
+Jika setelah perintah ini dijalankan dan Pod tetap berada pada kondisi `Unknown`, gunakan perintah berikut untuk menghapus Pod dari klaster:
+
+```shell
+kubectl patch pod <pod> -p '{"metadata":{"finalizers":null}}'
+```
+
+Selalu jalankan penghapusan paksa Pod StatefulSet dengan hati-hati dan penuh pemahaman terhadap risiko yang dapat timbul.
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+Pelajari lebih lanjut [_debugging_ StatefulSet](/docs/tasks/debug-application-cluster/debug-stateful-set/).
+
+

From d38aa54efab970c7e8108fa69c9b6bd6c977faeb Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Wed, 5 Aug 2020 01:29:48 +0900
Subject: [PATCH 017/496] ja-trans: Translate
 concepts/cluster-administration/manage-deployment.md into Japanese #19280

---
 .../manage-deployment.md                      | 454 ++++++++++++++++++
 1 file changed, 454 insertions(+)
 create mode 100644 content/ja/docs/concepts/cluster-administration/manage-deployment.md

diff --git a/content/ja/docs/concepts/cluster-administration/manage-deployment.md b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
new file mode 100644
index 0000000000..ff36294d17
--- /dev/null
+++ b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
@@ -0,0 +1,454 @@
+---
+reviewers:
+- 
+title: リソースの管理
+content_type: concept
+weight: 40
+---
+
+<!-- overview -->
+
+アプリケーションをデプロイし、Serviceを介して外部への公開できました。さて、どうしますか? Kubernetesは、スケーリングや更新など、アプリケーションのデプロイを管理するための多くのツールを提供します。
+我々が取り上げる機能についての詳細は[設定ファイル](/ja/docs/concepts/configuration/overview/)や[ラベル](/ja/docs/concepts/overview/working-with-objects/labels/)で確認できます。
+
+
+
+
+<!-- body -->
+
+## リソースの設定を管理する
+
+多くのアプリケーションではDeploymentやServiceなど複数のリソースの作成を要求します。複数のリソースの管理は、同一のファイルにひとまとめにしてグループ化すると簡単になります。(YAMLファイル内で`---`で区切る)。
+例えば:
+
+{{< codenew file="application/nginx-app.yaml" >}}
+
+複数のリソースは単一のリソースと同様の方法で作成できます。
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/nginx-app.yaml
+```
+
+```shell
+service/my-nginx-svc created
+deployment.apps/my-nginx created
+```
+
+リソースは、ファイル内に記述されている順番通りに作成されます。そのため、Serviceを最初に指定するのが理想です。スケジューラがServiceに関連するPodを、Deploymentなどのコントローラによって作成されるときに確実に拡散できるようにするためです。
+
+`kubectl apply`もまた、複数の`-f`による引数指定を許可しています。
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/nginx/nginx-svc.yaml -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml
+```
+
+個別のファイルに加えて、-fの引数としてディレクトリ名も指定できます。:
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/nginx/
+```
+
+`kubectl`は`.yaml`, `.yml`, `.json`といったサフィックスの付くファイルを読み込みます。
+
+同じマイクロサービス、アプリケーションティアーのリソースは同一のファイルにまとめ、アプリケーションに関するファイルをグループ化するために、それらのファイルを同一のディレクトリに配備するのを推奨します。アプリケーションのティアーがDNSを通じて互いにバインドされると、アプリケーションスタックの全てのコンポーネントをひとまとめにして簡単にデプロイできます。
+
+リソースの設定ソースとして、URLも指定できます。githubから取得した設定ファイルから直接手軽にデプロイができます。:
+
+```shell
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/application/nginx/nginx-deployment.yaml
+```
+
+```shell
+deployment.apps/my-nginx created
+```
+
+## kubectlによる一括操作
+
+`kubectl`が一括して実行できる操作はリソースの作成のみではありません。作成済みのリソースの削除などの他の操作を実行するために、設定ファイルからリソース名を取得することができます。
+
+```shell
+kubectl delete -f https://k8s.io/examples/application/nginx-app.yaml
+```
+
+```shell
+deployment.apps "my-nginx" deleted
+service "my-nginx-svc" deleted
+```
+
+2つのリソースだけを削除する場合には、コマンドラインでリソース/名前というシンタックスを使うことで簡単に指定できます。
+
+```shell
+kubectl delete deployments/my-nginx services/my-nginx-svc
+```
+
+さらに多くのリソースに対する操作では、リソースをラベルでフィルターするために`-l`や`--selector`を使ってセレクター(ラベルクエリ)を指定するのが簡単です。:
+
+```shell
+kubectl delete deployment,services -l app=nginx
+```
+
+```shell
+deployment.apps "my-nginx" deleted
+service "my-nginx-svc" deleted
+```
+
+`kubectl`は同様のシンタックスでリソース名を出力するので、`$()`や`xargs`を使ってパイプで操作するのが容易です。:
+
+```shell
+kubectl get $(kubectl create -f docs/concepts/cluster-administration/nginx/ -o name | grep service)
+```
+
+```shell
+NAME           TYPE           CLUSTER-IP   EXTERNAL-IP   PORT(S)      AGE
+my-nginx-svc   LoadBalancer   10.0.0.208   <pending>     80/TCP       0s
+```
+
+上記のコマンドで、最初に`examples/application/nginx/`配下でリソースを作成し、`-o name`という出力フォーマットにより、作成されたリソースの名前を表示します(各シロースをresource/nameという形式で表示)。そして"service"のみ`grep`し、`kubectl get`を使って表示させます。
+
+あるディレクトリー内の複数のサブディレクトリーをまたいでリソースを管理するような場合、`--filename,-f`フラグと合わせて`--recursive`や`-R`を指定することでサブディレクトリーに対しても再帰的に操作が可能です。
+
+例えば、開発環境用に必要な全ての{{< glossary_tooltip text="マニフェスト" term_id="manifest" >}}をリソースタイプによって整理している`project/k8s/development`というディレクトリがあると仮定します。
+
+```
+project/k8s/development
+├── configmap
+│   └── my-configmap.yaml
+├── deployment
+│   └── my-deployment.yaml
+└── pvc
+    └── my-pvc.yaml
+```
+
+デフォルトでは、`project/k8s/development`における一括操作は、どのサブディレクトリーも処理せず、ディレクトリーの第1階層で処理が止まります。下記のコマンドによってこのディレクトリー配下でリソースを作成しようとすると、エラーが発生します。
+
+```shell
+kubectl apply -f project/k8s/development
+```
+
+```shell
+error: you must provide one or more resources by argument or filename (.json|.yaml|.yml|stdin)
+```
+
+代わりに、下記のように`--filename,-f`フラグと合わせて`--recursive`や`-R`を指定してください。:
+
+```shell
+kubectl apply -f project/k8s/development --recursive
+```
+
+```shell
+configmap/my-config created
+deployment.apps/my-deployment created
+persistentvolumeclaim/my-pvc created
+```
+
+`--recursive`フラグは`kubectl {create,get,delete,describe,rollout}`などのような`--filename,-f`フラグを扱うどの操作でも有効です。
+
+また、`--recursive`フラグは複数の`-f`フラグの引数を指定しても有効です。
+
+```shell
+kubectl apply -f project/k8s/namespaces -f project/k8s/development --recursive
+```
+
+```shell
+namespace/development created
+namespace/staging created
+configmap/my-config created
+deployment.apps/my-deployment created
+persistentvolumeclaim/my-pvc created
+```
+
+`kubectl`についてさらに知りたい場合は、[kubectlの概要](/docs/reference/kubectl/overview/)を参照してください。
+
+## ラベルを有効に使う
+
+これまで取り上げた例では、リソースに対して最大1つのラベルを適用してきました。リソースのセットを他のセットと区別するために、複数のラベルが必要な状況があります。
+
+例えば、異なるアプリケーション間では、異なる`app`ラベルを使用したり、[ゲストブックの例](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/guestbook/)のようなマルチティアーのアプリケーションでは、各ティアーを区別する必要があります。frontendというティアーでは下記のラベルを持ちます。:
+
+```yaml
+     labels:
+        app: guestbook
+        tier: frontend
+```
+
+Redisマスターやスレーブでは異なる`tier`ラベルを持ち、加えて`role`ラベルも持つことでしょう。:
+
+```yaml
+     labels:
+        app: guestbook
+        tier: backend
+        role: master
+```
+
+そして
+
+```yaml
+     labels:
+        app: guestbook
+        tier: backend
+        role: slave
+```
+
+ラベルを使用すると、ラベルで指定された任意の次元に沿ってリソースを分割できます。
+
+```shell
+kubectl apply -f examples/guestbook/all-in-one/guestbook-all-in-one.yaml
+kubectl get pods -Lapp -Ltier -Lrole
+```
+
+```shell
+NAME                           READY     STATUS    RESTARTS   AGE       APP         TIER       ROLE
+guestbook-fe-4nlpb             1/1       Running   0          1m        guestbook   frontend   <none>
+guestbook-fe-ght6d             1/1       Running   0          1m        guestbook   frontend   <none>
+guestbook-fe-jpy62             1/1       Running   0          1m        guestbook   frontend   <none>
+guestbook-redis-master-5pg3b   1/1       Running   0          1m        guestbook   backend    master
+guestbook-redis-slave-2q2yf    1/1       Running   0          1m        guestbook   backend    slave
+guestbook-redis-slave-qgazl    1/1       Running   0          1m        guestbook   backend    slave
+my-nginx-divi2                 1/1       Running   0          29m       nginx       <none>     <none>
+my-nginx-o0ef1                 1/1       Running   0          29m       nginx       <none>     <none>
+```
+
+```shell
+kubectl get pods -lapp=guestbook,role=slave
+```
+```shell
+NAME                          READY     STATUS    RESTARTS   AGE
+guestbook-redis-slave-2q2yf   1/1       Running   0          3m
+guestbook-redis-slave-qgazl   1/1       Running   0          3m
+```
+
+## Canary deployments カナリアデプロイ
+
+複数のラベルが必要な他の状況として、異なるリリース間でのDeploymentや、同一コンポーネントの設定を区別することが挙げられます。よく知られたプラクティスとして、本番環境の実際のトラフィックを受け付けるようにするために、新しいリリースを完全にロールアウトする前に、新しい*カナリア版*のアプリケーションを過去のリリースと合わせてデプロイする方法があります。
+
+例えば、異なるリリースバージョンを分けるために`track`ラベルを使用できます。
+
+主要な安定板のリリースでは`track`ラベルに`stable`という値をつけることがあるでしょう。:
+
+```yaml
+     name: frontend
+     replicas: 3
+     ...
+     labels:
+        app: guestbook
+        tier: frontend
+        track: stable
+     ...
+     image: gb-frontend:v3
+```
+
+そして2つの異なるPodのセットを上書きしないようにするため、`track`ラベルに異なる値を持つ(例: `canary`)ようなguestbookフロントエンドの新しいリリースを作成できます。
+
+```yaml
+     name: frontend-canary
+     replicas: 1
+     ...
+     labels:
+        app: guestbook
+        tier: frontend
+        track: canary
+     ...
+     image: gb-frontend:v4
+```
+
+frontend Serviceは、トラフィックを両方のアプリケーションにリダイレクトさせるために、両方のアプリケーションに共通したラベルのサブセットを選択して両方のレプリカを扱えるようにします。:
+
+```yaml
+  selector:
+     app: guestbook
+     tier: frontend
+```
+
+安定版とカナリア版リリースで本番環境の実際のトラフィックを転送する割合を決めるため、双方のレプリカ数を変更できます(このケースでは3対1)。
+最新版のリリースをしても大丈夫な場合、安定版のトラックを新しいアプリケーションにして、カナリア版を削除します。
+
+さらに具体的な例については、[tutorial of deploying Ghost](https://github.com/kelseyhightower/talks/tree/master/kubecon-eu-2016/demo#deploy-a-canary)を参照してください。
+
+## ラベルの更新
+
+新しいリソースを作成する前に、既存のPodと他のリソースのラベルの変更が必要な状況があります。これは`kubectl label`で実行できます。
+例えば、全てのnginx Podを frontendティアーとしてラベル付けするには、下記のコマンドを実行するのみです。
+
+```shell
+kubectl label pods -l app=nginx tier=fe
+```
+
+```shell
+pod/my-nginx-2035384211-j5fhi labeled
+pod/my-nginx-2035384211-u2c7e labeled
+pod/my-nginx-2035384211-u3t6x labeled
+```
+
+これは最初に"app=nginx"というラベルのついたPodをフィルターし、そのPodに対して"tier=fe"というラベルを追加します。
+ラベル付けしたPodを確認するには、下記のコマンドを実行してください。
+
+```shell
+kubectl get pods -l app=nginx -L tier
+```
+```shell
+NAME                        READY     STATUS    RESTARTS   AGE       TIER
+my-nginx-2035384211-j5fhi   1/1       Running   0          23m       fe
+my-nginx-2035384211-u2c7e   1/1       Running   0          23m       fe
+my-nginx-2035384211-u3t6x   1/1       Running   0          23m       fe
+```
+
+このコマンドでは"app=nginx"というラベルのついた全てのPodを出力し、Podのtierという項目も表示します(`-L`または`--label-columns`で指定)。
+
+さらなる情報は、[ラベル](/docs/concepts/overview/working-with-objects/labels/)や[kubectl label](/docs/reference/generated/kubectl/kubectl-commands/#label)を参照してください。
+
+## アノテーションの更新
+
+リソースに対してアノテーションを割り当てたい状況があります。アノテーションは、ツール、ライブラリなどのAPIクライアントによって取得するための任意の非識別メタデータです。アノテーションの割り当ては`kubectl annotate`で可能です。例:
+
+```shell
+kubectl annotate pods my-nginx-v4-9gw19 description='my frontend running nginx'
+kubectl get pods my-nginx-v4-9gw19 -o yaml
+```
+```shell
+apiVersion: v1
+kind: pod
+metadata:
+  annotations:
+    description: my frontend running nginx
+...
+```
+
+さらなる情報は、[アノテーション](/docs/concepts/overview/working-with-objects/annotations/) や、[kubectl annotate](/docs/reference/generated/kubectl/kubectl-commands/#annotate)を参照してください。
+
+## アプリケーションのスケール
+
+アプリケーションの負荷が増減するとき、`kubectl`を使って簡単にスケールできます。例えば、nginxのレプリカを3から1に減らす場合、下記を実行します:
+
+```shell
+kubectl scale deployment/my-nginx --replicas=1
+```
+```shell
+deployment.apps/my-nginx scaled
+```
+
+実行すると、Deploymentによって管理されるPod数が1となります。
+
+```shell
+kubectl get pods -l app=nginx
+```
+```shell
+NAME                        READY     STATUS    RESTARTS   AGE
+my-nginx-2035384211-j5fhi   1/1       Running   0          30m
+```
+
+システムに対してnginxのレプリカ数を自動で選択させるには、下記のように1から3の範囲で指定します。:
+
+```shell
+kubectl autoscale deployment/my-nginx --min=1 --max=3
+```
+```shell
+horizontalpodautoscaler.autoscaling/my-nginx autoscaled
+```
+
+実行すると、nginxのレプリカは必要に応じて自動でスケールアップ、スケールダウンします。
+
+さらなる情報は、[kubectl scale](/docs/reference/generated/kubectl/kubectl-commands/#scale)、[kubectl autoscale](/docs/reference/generated/kubectl/kubectl-commands/#autoscale) and [horizontal pod autoscaler](/docs/tasks/run-application/horizontal-pod-autoscale/)を参照してください。
+
+
+## リソースの直接的アップデート
+
+場合によっては、作成したリソースに対して処理を中断させずに更新を行う必要があります。
+
+### kubectl apply
+
+開発者が設定するリソースをコードとして管理しバージョニングも行えるように、設定ファイルのセットをソースによって管理する方法が推奨されています。
+この場合、クラスターに対して設定の変更をプッシュするために[`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands/#apply)を使用できます。
+
+このコマンドは、リソース設定の過去のバージョンと、今適用した変更を比較し、差分に現れないプロパティーに対して上書き変更することなくクラスターに適用させます。
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml
+deployment.apps/my-nginx configured
+```
+
+注意として、前回の変更適用時からの設定の変更内容を決めるため、`kubectl apply`はリソースに対してアノテーションを割り当てます。変更が実施されると`kubectl apply`は、1つ前の設定内容と、今回変更しようとする入力内容と、現在のリソースの設定との3つの間で変更内容の差分をとります。
+
+現在、リソースはこのアノテーションなしで作成されました。そのため、最初の`kubectl paply`の実行においては、与えられたにゅうチョクト、現在のリソースの設定の2つの間の差分が取られ、フォールバックします。この最初の実行の間、リソースが作成された時にプロパティーセットの削除を検知できません。この理由により、プロパティーの削除はされません。
+
+`kubectl apply`の実行後の全ての呼び出しや、`kubectl replace`や`kubectl edit`などの設定を変更する他のコマンドではアノテーションを更新します。`kubectl apply`した後の全ての呼び出しにおいて3-wayの差分取得によってプロパティの検知と削除を実施します。
+
+### kubectl edit
+
+その他に、`kubectl edit`によってリソースの更新もできます。:
+
+```shell
+kubectl edit deployment/my-nginx
+```
+
+このコマンドは、最初にリソースを`get`し、テキストエディタでリソースを編集し、更新されたバージョンでリソースを`apply`します。:
+
+```shell
+kubectl get deployment my-nginx -o yaml > /tmp/nginx.yaml
+vi /tmp/nginx.yaml
+# yamlファイルを編集し、ファイルを保存します。
+
+kubectl apply -f /tmp/nginx.yaml
+deployment.apps/my-nginx configured
+
+rm /tmp/nginx.yaml
+```
+
+このコマンドによってより重大な変更を簡単に行えます。注意として、あなたの`EDITOR`や`KUBE_EDITOR`といった環境変数も指定できます。
+
+さらなる情報は、[kubectl edit](/docs/reference/generated/kubectl/kubectl-commands/#edit)を参照してください。
+
+### kubectl patch
+
+APIオブジェクトの更新には`kubectl patch`を使うことができます。このコマンドはJSON patch、JSON merge patch、戦略的merge patchをサポートしています。
+[kubectl patchを使ったAPIオブジェクトの更新](/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/)や[kubectl patch](/docs/reference/generated/kubectl/kubectl-commands/#patch)を参照してください。
+
+## 破壊的なアップデート
+
+一度初期化された後、更新できないようなリソースフィールドの更新が必要な場合や、Deploymentによって作成され、壊れている状態のPodを修正するなど、再帰的な変更を即座に行いたい場合があります。このようなフィールドを変更するため、リソースの削除と再作成を行う`replace --force`を使用してください。このケースでは、シンプルに元の設定ファイルを修正するのみです。:
+
+```shell
+kubectl replace -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml --force
+```
+```shell
+deployment.apps/my-nginx deleted
+deployment.apps/my-nginx replaced
+```
+
+## サービス停止なしでアプリケーションを更新する
+
+ある時点で、前述したカナリアデプロイのシナリオにおいて、新しいイメージやイメージタグを指定することによって、デプロイされたアプリケーションを更新が必要な場合があります。`kubectl`ではいくつかの更新操作をサポートしており、それぞれの操作が異なるシナリオに対して適用可能です。
+
+ここでは、Deploymentを使ってアプリケーションの作成と更新についてガイドします。
+
+まずnginxのバージョン1.14.2を稼働させていると仮定します。:
+
+```shell
+kubectl create deployment my-nginx --image=nginx:1.14.2
+```
+```shell
+deployment.apps/my-nginx created
+```
+
+レプリカ数を3にします(新旧のリビジョンは混在します)。:
+```shell
+kubectl scale deployment my-nginx --current-replicas=1 --replicas=3
+```
+```
+deployment.apps/my-nginx scaled
+```
+
+バージョン1.16.1に更新するには、上述したkubectlコマンドを使って`.spec.template.spec.containers[0].image`の値を`nginx:1.14.2`から`nginx:1.16.1`に変更するだけでできます。
+
+```shell
+kubectl edit deployment/my-nginx
+```
+
+できました!Deploymentはデプロイされたnginxのアプリケーションを宣言的にプログレッシブに更新します。更新途中では、決まった数の古いレプリカのみダウンし、一定数の新しいレプリカが希望するPod数以上作成されても良いことを保証します。詳細について学ぶには[Deployment page](/docs/concepts/workloads/controllers/deployment/)を参照してください。
+
+
+
+## {{% heading "whatsnext" %}}
+
+- [アプリケーションの調査とデバッグのための`kubectl`の使用方法](/docs/tasks/debug-application-cluster/debug-application-introspection/)について学んでください。
+- [設定のベストプラクティスとTIPS](/ja/docs/concepts/configuration/overview/)を参照してください。
+

From 02c055e4d7b93d8e5c830e61a367274b83852176 Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Thu, 6 Aug 2020 00:33:00 +0900
Subject: [PATCH 018/496] ja-trans: Translate
 concepts/cluster-administration/proxies.md into Japanese #19281

---
 .../cluster-administration/proxies.md         | 68 +++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 content/ja/docs/concepts/cluster-administration/proxies.md

diff --git a/content/ja/docs/concepts/cluster-administration/proxies.md b/content/ja/docs/concepts/cluster-administration/proxies.md
new file mode 100644
index 0000000000..59d9c8cd51
--- /dev/null
+++ b/content/ja/docs/concepts/cluster-administration/proxies.md
@@ -0,0 +1,68 @@
+---
+title: Kubernetesのプロキシー
+content_type: concept
+weight: 90
+---
+
+<!-- overview -->
+このページではKubernetesと併用されるプロキシーについて説明します。
+
+
+<!-- body -->
+
+## プロキシー
+
+Kubernetesを使用する際に、いくつかのプロキシーを使用する場面があります。
+
+1. [kubectlのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#directly-accessing-the-rest-api):
+
+    - ユーザのデスクトップ上かPod内で稼働する
+    - ローカルホストのアドレスからKubernetes api-serverへのプロキシー
+    - クライアントからプロキシ間ではHTTPを使用します
+    - プロキシーからapi-serverへはHTTPSを使用します
+    - api-serverを配置します
+    - 認証用のヘッダーを追加します
+
+1. [api-serverのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#discovering-builtin-services):
+
+    - api-server内で動作する防壁となります
+    - クラスターの外部からクラスターIPへユーザを接続し、できなければ到達不可能となります
+    - api-serverのプロセス内で稼働します
+    - クライアントからプロキシー間ではHTTPSを使用します(api-serverの設定により、HTTPを使用)
+    - プロキシーからターゲット間では利用可能な情報を使用して、プロキシーによってHTTPかHTTPSの使用を選択されます。
+    - Node、Pod、Serviceへ到達可能です
+    - Serviceへ到達するとき負荷分散を行います
+
+1.  [kube-proxy](/ja/docs/concepts/services-networking/service/#ips-and-vips):
+
+    - 各Node上で稼働します
+    - UDP、TCP、SCTPをプロキシーします
+    - HTTPはレイヤーについての情報は知りません
+    - 負荷分散機能を提供します
+    - Serviceへ到達させるためのみに使用されます
+
+1.  api-serverの前段にあるプロキシー/ロードバランサー:
+1.  A Proxy/Load-balancer in front of apiserver(s):
+
+    - 実際の存在する実態と実装はクラスターごとに異なります(例: nginx)
+    - 全てのクライアント間と、1つ以上のapi-serverの間に位置します
+    - 複数のapi-serverがあるときロードバランサーとして稼働します
+
+1.  外部サービス上で稼働するクラウドロードバランサー Cloud Load Balancers on external services:
+
+    - いくつかのクラウドプロバイダーによって提供されます(例: AWS ELB、Google Cloud Load Balancer)
+    - `LoadBalancer`というtypeのKubernetes Serviceが作成されたときに自動で作成されます
+    - たいていのクラウドロードバランサーはUDP/TCPのみサポートしています
+    - SCTPのサポートはクラウドプロバイダーのロードバランサーの実装によって異なります
+    - ロードバランサーの実装はクラウドプロバイダーによって異なります
+
+Kubernetesユーザーのほとんどは、最初の2つのタイプ以外に心配する必要はありません。クラスター管理者は最後のタイプのロードバランサーを正しくセットアップすることを保証します。
+
+## リダイレクトの要求 Requesting redirects
+
+プロキシーはリダイレクトの機能を置き換えました。リダイレクトの使用は非推奨となります。
+Proxies have replaced redirect capabilities.  Redirects have been deprecated.
+
+
+
+

From 34d805df7280f40c93a3c832f117caa7ec964c76 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sun, 9 Aug 2020 12:14:40 +0900
Subject: [PATCH 019/496] Fill the search input form with the current search
 keywords.

---
 assets/js/search.js | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/assets/js/search.js b/assets/js/search.js
index 3d6e9d9447..eeecf9c60a 100644
--- a/assets/js/search.js
+++ b/assets/js/search.js
@@ -17,6 +17,15 @@ limitations under the License.
   var Search = {
     init: function () {
       $(document).ready(function () {
+        // Fill the search input form with the current search keywords
+        const searchKeywords = new URLSearchParams(location.search).get('q');
+        if (searchKeywords !== null && searchKeywords !== '') {
+          const searchInput = document.querySelector('.td-search-input');
+          searchInput.focus();
+          searchInput.value = searchKeywords;
+        }
+
+        // Set a keydown event
         $(document).on("keypress", ".td-search-input", function (e) {
           if (e.keyCode !== 13) {
             return;

From 7bc5ee071061ff4285ce6c23b0b64639314d780c Mon Sep 17 00:00:00 2001
From: Brian Pursley <bpursley@cinlogic.com>
Date: Tue, 21 Jul 2020 10:46:33 -0400
Subject: [PATCH 020/496] Preserve relative path when switching between
 versions of the documentation

---
 layouts/404.html                                |  1 +
 layouts/partials/handle-version-switch-404.html | 11 +++++++++++
 layouts/partials/navbar-version-selector.html   |  3 ++-
 3 files changed, 14 insertions(+), 1 deletion(-)
 create mode 100644 layouts/partials/handle-version-switch-404.html

diff --git a/layouts/404.html b/layouts/404.html
index d3637af38e..5b18c48491 100644
--- a/layouts/404.html
+++ b/layouts/404.html
@@ -1,4 +1,5 @@
 {{ define "main" }}
+{{ partial "handle-version-switch-404.html" . }}
 <div class="container-404">
     <h4>
         Perhaps you were looking for:
diff --git a/layouts/partials/handle-version-switch-404.html b/layouts/partials/handle-version-switch-404.html
new file mode 100644
index 0000000000..d2130bf49f
--- /dev/null
+++ b/layouts/partials/handle-version-switch-404.html
@@ -0,0 +1,11 @@
+{{/*
+If a 404 occurs and the referrer is a different version of the Kubernetes documentation,
+don't show the regular 404 error page, but instead redirect to the site root
+*/}}
+<script type="text/javascript">
+  var sameBaseUrlRegExp = new RegExp("^" + location.protocol + "//" + location.host.replace(".", "\\.") + "/.*", "i");
+  var kubernetesDocumentationUrlRegExp = new RegExp("^https?://(.+\\.)?kubernetes.io/.*", "i");
+  if (!sameBaseUrlRegExp.test(document.referrer) && kubernetesDocumentationUrlRegExp.test(document.referrer)) {
+    location.replace("/");
+  }
+</script>
diff --git a/layouts/partials/navbar-version-selector.html b/layouts/partials/navbar-version-selector.html
index 09e872053f..ce38b96d9e 100644
--- a/layouts/partials/navbar-version-selector.html
+++ b/layouts/partials/navbar-version-selector.html
@@ -2,7 +2,8 @@
 	{{ T "version_menu" }}
 </a>
 <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownMenuLink">
+	{{ $p := . }}
 	{{ range .Site.Params.versions }}
-	<a class="dropdown-item" href="{{ .url }}">{{ .version }}</a>
+	<a class="dropdown-item" href="{{ .url }}{{ $p.RelPermalink }}">{{ .version }}</a>
 	{{ end }}
 </div>
\ No newline at end of file

From badeab324bbd5bb17486b5459f3ef1d51217a80b Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 10 Aug 2020 22:55:56 +0800
Subject: [PATCH 021/496] [zh] Tune translation for debug service task

---
 .../debug-service.md                          | 382 +++++++++++-------
 1 file changed, 226 insertions(+), 156 deletions(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-service.md b/content/zh/docs/tasks/debug-application-cluster/debug-service.md
index 426020b47d..579333b837 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-service.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-service.md
@@ -1,19 +1,14 @@
 ---
-reviewers:
-- thockin
-- bowei
 content_type: concept
 title: 调试 Service
 ---
 
 <!--
----
 reviewers:
 - thockin
 - bowei
 content_type: concept
 title: Debug Services
----
 -->
 
 <!-- overview -->
@@ -24,9 +19,9 @@ Deployment (or other workload controller) and created a Service, but you
 get no response when you try to access it.  This document will hopefully help
 you to figure out what's going wrong.
 -->
-对于新安装的 Kubernetes，经常出现的问题是 Service 无法正常运行。 您已经通过
+对于新安装的 Kubernetes，经常出现的问题是 Service 无法正常运行。 你已经通过
 Deployment（或其他工作负载控制器）运行了 Pod，并创建 Service ，但是
-当您尝试访问它时，没有任何响应。此文档有望对您有所帮助并找出问题所在。
+当你尝试访问它时，没有任何响应。此文档有望对你有所帮助并找出问题所在。
 
 
 <!-- body -->
@@ -36,33 +31,26 @@ Deployment（或其他工作负载控制器）运行了 Pod，并创建 Service
 For many steps here you will want to see what a Pod running in the cluster
 sees.  The simplest way to do this is to run an interactive alpine Pod:
 -->
-## 在 pod 中运行命令
+## 在 Pod 中运行命令
 
-对于这里的许多步骤，您可能希望知道运行在集群中的 Pod 看起来是什么样的。最简单的方法是运行一个交互式的 alpine Pod：
+对于这里的许多步骤，你可能希望知道运行在集群中的 Pod 看起来是什么样的。
+最简单的方法是运行一个交互式的 alpine Pod：
 
 ```none
 $ kubectl run -it --rm --restart=Never alpine --image=alpine sh
 If you don't see a command prompt, try pressing enter.
 ```
-<!--
-{{< note >}}
-If you don't see a command prompt, try pressing enter.
-{{< /note >}}
 
+<!--
 If you already have a running Pod that you prefer to use, you can run a
 command in it using:
 -->
-{{< note >}}
-如果你没有看到命令提示符，请尝试按 Enter 键。
-{{< /note >}}
-
-如果您已经有了您想使用的正在运行的 Pod，则可以运行以下命令去进入：
+如果你已经有了你想使用的正在运行的 Pod，则可以运行以下命令去进入：
 
 ```shell
 kubectl exec <POD-NAME> -c <CONTAINER-NAME> -- <COMMAND>
 ```
 
-
 <!--
 ## Setup
 
@@ -70,13 +58,16 @@ For the purposes of this walk-through, let's run some Pods.  Since you're
 probably debugging your own Service you can substitute your own details, or you
 can follow along and get a second data point.
 -->
-## 设置
+## 设置  {#setup}
 
-为了完成本次实践的任务，我们先运行几个 Pod。由于您可能正在调试自己的 Service，所以，您可以使用自己的信息进行替换，或者，您也可以跟随并开始下面的步骤来获得第二个数据点。
+为了完成本次实践的任务，我们先运行几个 Pod。
+由于你可能正在调试自己的 Service，所以，你可以使用自己的信息进行替换，
+或者你也可以跟着教程并开始下面的步骤来获得第二个数据点。
 
 ```shell
-$ kubectl  create deployment hostnames --image=k8s.gcr.io/serve_hostname 
+kubectl  create deployment hostnames --image=k8s.gcr.io/serve_hostname 
 ```
+
 ```none
 deployment.apps/hostnames created
 ```
@@ -88,9 +79,11 @@ Let's scale the deployment to 3 replicas.
 -->
 `kubectl` 命令将打印创建或变更的资源的类型和名称，它们可以在后续命令中使用。
 让我们将这个 deployment 的副本数扩至 3。
+
 ```shell
 kubectl scale deployment hostnames --replicas=3
 ```
+
 ```none
 deployment.apps/hostnames scaled
 ```
@@ -98,7 +91,7 @@ deployment.apps/hostnames scaled
 <!--
 Note that this is the same as if you had the Deployment with the following YAML:
 -->
-请注意这与您使用以下 YAML 方式启动 Deployment 类似：
+请注意这与你使用以下 YAML 方式启动 Deployment 类似：
 
 ```yaml
 apiVersion: apps/v1
@@ -127,14 +120,14 @@ The label "app" is automatically set by `kubectl create deployment` to the name
 
 You can confirm your Pods are running:
 -->
-
 "app" 标签是 `kubectl create deployment` 根据 Deployment 名称自动设置的。
 
-确认您的 Pods 是运行状态:
+确认你的 Pods 是运行状态:
 
 ```shell
 kubectl get pods -l app=hostnames
 ```
+
 ```none
 NAME                        READY     STATUS    RESTARTS   AGE
 hostnames-632524106-bbpiw   1/1       Running   0          2m
@@ -146,19 +139,19 @@ hostnames-632524106-tlaok   1/1       Running   0          2m
 You can also confirm that your Pods are serving.  You can get the list of
 Pod IP addresses and test them directly.
 -->
-您还可以确认您的 Pod 是否正在运行。您可以获取 Pod IP 地址列表并直接对其进行测试。
+你还可以确认你的 Pod 是否正在提供服务。你可以获取 Pod IP 地址列表并直接对其进行测试。
 
 ```shell
 kubectl get pods -l app=hostnames \
     -o go-template='{{range .items}}{{.status.podIP}}{{"\n"}}{{end}}'
 ```
+
 ```none
 10.244.0.5
 10.244.0.6
 10.244.0.7
 ```
 
-
 <!--
 The example container used for this walk-through simply serves its own hostname
 via HTTP on port 9376, but if you are debugging your own app, you'll want to
@@ -166,15 +159,17 @@ use whatever port number your Pods are listening on.
 
 From within a pod:
 -->
-用于本教程的示例容器仅通过 HTTP 在端口 9376 上提供其自己的主机名，但是如果要调试自己的应用程序，则需要使用您的 Pod 正在侦听的端口号。
+用于本教程的示例容器仅通过 HTTP 在端口 9376 上提供其自己的主机名，
+但是如果要调试自己的应用程序，则需要使用你的 Pod 正在侦听的端口号。
 
-在 pod 内运行：
+在 Pod 内运行：
 
 ```shell
 for ep in 10.244.0.5:9376 10.244.0.6:9376 10.244.0.7:9376; do
     wget -qO- $ep
 done
 ```
+
 <!--
 This should produce something like:
 -->
@@ -196,10 +191,11 @@ there.
 Assuming everything has gone to plan so far, you can start to investigate why
 your Service doesn't work.
 -->
-如果此时您没有收到期望的响应，则您的 Pod 状态可能不健康，或者可能没有在您认为正确的端口上进行监听。
-您可能会发现 `kubectl logs` 命令对于查看正在发生的事情很有用，或者您可能需要通过`kubectl exec` 直接进入 Pod 中并从那里进行调试。
+如果此时你没有收到期望的响应，则你的 Pod 状态可能不健康，或者可能没有在你认为正确的端口上进行监听。
+你可能会发现 `kubectl logs` 命令对于查看正在发生的事情很有用，
+或者你可能需要通过`kubectl exec` 直接进入 Pod 中并从那里进行调试。
 
-假设到目前为止一切都已按计划进行，那么您可以开始调查为何您的 Service 无法正常工作。
+假设到目前为止一切都已按计划进行，那么你可以开始调查为何你的 Service 无法正常工作。
 
 <!--
 ## Does the Service exist?
@@ -216,15 +212,17 @@ something like:
 
 细心的读者会注意到我们实际上尚未创建 Service -这是有意而为之。 这一步有时会被遗忘，这是首先要检查的步骤。
 
-那么，如果我尝试访问不存在的 Service 会怎样？ 假设您有另一个 Pod 通过名称匹配到 Service ，您将得到类似结果：
+那么，如果我尝试访问不存在的 Service 会怎样？ 假设你有另一个 Pod 通过名称匹配到 Service ，你将得到类似结果：
 
 ```shell
 wget -O- hostnames
 ```
+
 ```none
 Resolving hostnames (hostnames)... failed: Name or service not known.
 wget: unable to resolve host address 'hostnames'
 ```
+
 <!--
 The first thing to check is whether that Service actually exists:
 -->
@@ -233,6 +231,7 @@ The first thing to check is whether that Service actually exists:
 ```shell
 kubectl get svc hostnames
 ```
+
 ```none
 No resources found.
 Error from server (NotFound): services "hostnames" not found
@@ -242,10 +241,12 @@ Error from server (NotFound): services "hostnames" not found
 Let's create the Service.  As before, this is for the walk-through - you can
 use your own Service's details here.
 -->
-让我们创建 Service。 和以前一样，在这次实践中 - 您可以在此处使用自己的 Service 的内容。
+让我们创建 Service。 和以前一样，在这次实践中 - 你可以在此处使用自己的 Service 的内容。
+
 ```shell
 kubectl expose deployment hostnames --port=80 --target-port=9376
 ```
+
 ```none
 service/hostnames exposed
 ```
@@ -258,6 +259,7 @@ And read it back, just to be sure:
 ```shell
 kubectl get svc hostnames
 ```
+
 ```none
 NAME        TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)   AGE
 hostnames   ClusterIP   10.0.1.175   <none>        80/TCP    5s
@@ -268,9 +270,9 @@ Now you know that the Service exists.
 
 As before, this is the same as if you had started the `Service` with YAML:
 -->
-现在您知道了 Service 确实存在。
+现在你知道了 Service 确实存在。
 
-就像之前通过 YAML 方式启动 'Service' 一样：
+同前，此步骤效果与通过 YAML 方式启动 'Service' 一样：
 
 ```yaml
 apiVersion: v1
@@ -286,13 +288,14 @@ spec:
     port: 80
     targetPort: 9376
 ```
+
 <!--
 In order to highlight the full range of configuration, the Service you created
 here uses a different port number than the Pods.  For many real-world
 Services, these values might be the same.
 -->
-为了突出配置范围的完整性，您在此处创建的 Service 使用的端口号与 Pods 不同。对于许多真实的 Service，这些值可以是相同的。
-
+为了突出配置范围的完整性，你在此处创建的 Service 使用的端口号与 Pods 不同。
+对于许多真实的 Service，这些值可以是相同的。
 
 <!--
 ## Does the Service work by DNS name?
@@ -307,24 +310,29 @@ From a Pod in the same Namespace:
 通常客户端通过 DNS 名称来匹配到 Service。
 
 从相同命名空间下的 Pod 中运行以下命令：
+
 ```shell
 nslookup hostnames
 ```
+
 ```none
 Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
 
 Name:      hostnames
 Address 1: 10.0.1.175 hostnames.default.svc.cluster.local
 ```
+
 <!--
 If this fails, perhaps your Pod and Service are in different
 Namespaces, try a namespace-qualified name (again, from within a Pod):
 -->
-如果失败，那么您的 Pod 和 Service 可能位于不同的命名空间中，请尝试使用限定命名空间的名称（同样在 Pod 内运行）：
+如果失败，那么你的 Pod 和 Service 可能位于不同的命名空间中，
+请尝试使用限定命名空间的名称（同样在 Pod 内运行）：
 
 ```shell
 nslookup hostnames.default
 ```
+
 ```none
 Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
 
@@ -337,11 +345,13 @@ If this works, you'll need to adjust your app to use a cross-namespace name, or
 run your app and Service in the same Namespace.  If this still fails, try a
 fully-qualified name:
 -->
-如果成功，那么需要调整您的应用，使用跨命名空间的名称去访问它，或者，在相同的命名空间中运行应用和 Service。如果仍然失败，请尝试一个完全限定的名称：
+如果成功，那么需要调整你的应用，使用跨命名空间的名称去访问它，
+或者在相同的命名空间中运行应用和 Service。如果仍然失败，请尝试一个完全限定的名称：
 
 ```shell
 nslookup hostnames.default.svc.cluster.local
 ```
+
 ```none
 Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
 
@@ -361,17 +371,19 @@ You can also try this from a `Node` in the cluster:
 10.0.0.10 is the cluster's DNS Service IP, yours might be different.
 {{< /note >}}
 -->
-注意这里的后缀："default.svc.cluster.local"。"default" 是我们正在操作的命名空间。"svc" 表示这是一个 Service。"cluster.local" 是您的集群域，在您自己的集群中可能会有所不同。
+注意这里的后缀："default.svc.cluster.local"。"default" 是我们正在操作的命名空间。
+"svc" 表示这是一个 Service。"cluster.local" 是你的集群域，在你自己的集群中可能会有所不同。
 
-您也可以在集群中的节点上尝试此操作：
+你也可以在集群中的节点上尝试此操作：
 
 {{< note >}}
-10.0.0.10 是我的 DNS 服务 IP，您的可能有所不同。
+10.0.0.10 是集群的 DNS 服务 IP，你的可能有所不同。
 {{< /note >}}
 
 ```shell
 nslookup hostnames.default.svc.cluster.local 10.0.0.10
 ```
+
 ```none
 Server:         10.0.0.10
 Address:        10.0.0.10#53
@@ -385,15 +397,17 @@ If you are able to do a fully-qualified name lookup but not a relative one, you
 need to check that your `/etc/resolv.conf` file in your Pod is correct.  From
 within a Pod:
 -->
-如果您能够使用完全限定的名称查找，但不能使用相对名称，则需要检查您 Pod 中的 `/etc/resolv.conf` 文件是否正确。在 Pod 中运行以下命令：
+如果你能够使用完全限定的名称查找，但不能使用相对名称，则需要检查你 Pod 中的
+`/etc/resolv.conf` 文件是否正确。在 Pod 中运行以下命令：
 
 ```shell
 cat /etc/resolv.conf
 ```
+
 <!--
 You should see something like:
 -->
-您应该可以看到类似这样的输出：
+你应该可以看到类似这样的输出：
 
 ```
 nameserver 10.0.0.10
@@ -420,12 +434,19 @@ The `options` line must set `ndots` high enough that your DNS client library
 considers search paths at all.  Kubernetes sets this to 5 by default, which is
 high enough to cover all of the DNS names it generates.
 -->
-`nameserver` 行必须指示您的集群的 DNS Service，它通过 `--cluster-dns` 标志传递到 kubelet。
+`nameserver` 行必须指示你的集群的 DNS Service，
+它是通过 `--cluster-dns` 标志传递到 kubelet 的。
 
-`search` 行必须包含一个适当的后缀，以便查找 Service 名称。在本例中，它在本地命名空间（`default.svc.cluster.local`）、所有命名空间中的 `Service`（`svc.cluster.local`）最后是集群（`cluster.local`）中查找 Service 的名称。根据您自己的安装情况，可能会有额外的记录（最多 6 条）。
-集群后缀通过 `--cluster-domain` 标志传递给 `kubelet`。 本文档中，我们假定后缀是 “cluster.local”。您的集群配置可能不同，这种情况下，您应该在上面的所有命令中更改它。
+`search` 行必须包含一个适当的后缀，以便查找 Service 名称。
+在本例中，它查找本地命名空间（`default.svc.cluster.local`）中的服务和
+所有命名空间（`svc.cluster.local`）中的服务，最后在集群（`cluster.local`）中查找
+服务的名称。根据你自己的安装情况，可能会有额外的记录（最多 6 条）。
+集群后缀是通过 `--cluster-domain` 标志传递给 `kubelet` 的。 
+本文中，我们假定后缀是 “cluster.local”。
+你的集群配置可能不同，这种情况下，你应该在上面的所有命令中更改它。
 
-`options` 行必须设置足够高的 `ndots`，以便 DNS 客户端库考虑搜索路径。在默认情况下，Kubernetes 将这个值设置为 5，这个值足够高，足以覆盖它生成的所有 DNS 名称。
+`options` 行必须设置足够高的 `ndots`，以便 DNS 客户端库考虑搜索路径。
+在默认情况下，Kubernetes 将这个值设置为 5，这个值足够高，足以覆盖它生成的所有 DNS 名称。
 
 <!--
 ### Does any Service work by DNS name? {#does-any-service-exist-in-dns}
@@ -436,7 +457,9 @@ Service should always work.  From within a Pod:
 -->
 ### 是否存在 Service 能通过 DNS 名称访问？{#does-any-service-exist-in-dns}
 
-如果上面的方式仍然失败，DNS 查找不到您需要的 Service ，您可以后退一步，看看还有什么其它东西没有正常工作。Kubernetes 主 Service 应该一直是工作的。在 Pod 中运行如下命令：
+如果上面的方式仍然失败，DNS 查找不到你需要的 Service ，你可以后退一步，
+看看还有什么其它东西没有正常工作。
+Kubernetes 主 Service 应该一直是工作的。在 Pod 中运行如下命令：
 
 ```shell
 nslookup kubernetes.default
@@ -453,18 +476,21 @@ Address 1: 10.0.0.1 kubernetes.default.svc.cluster.local
 If this fails, please see the [kube-proxy](#is-the-kube-proxy-working) section
 of this document, or even go back to the top of this document and start over,
 but instead of debugging your own Service, debug the DNS Service.
+-->
+如果失败，你可能需要转到本文的 [kube-proxy](#is-the-kube-proxy-working) 节，
+或者甚至回到文档的顶部重新开始，但不是调试你自己的 Service ，而是调试 DNS Service。
 
+<!--
 ## Does the Service work by IP?
 
 Assuming you have confirmed that DNS works, the next thing to test is whether your
 Service works by its IP address.  From a Pod in your cluster, access the
 Service's IP (from `kubectl get` above).
 -->
-如果失败，您可能需要转到这个文档的 [kube-proxy](#is-the-kube-proxy-working) 部分，或者甚至回到文档的顶部重新开始，但不是调试您自己的 Service ，而是调试 DNS Service。
-
 ### Service 能够通过 IP 访问么？
 
-假设您已经确认 DNS 工作正常，那么接下来要测试的是您的 Service 能否通过它的 IP 正常访问。从集群中的一个 Pod，尝试访问 Service 的 IP（从上面的 `kubectl get` 命令获取）。
+假设你已经确认 DNS 工作正常，那么接下来要测试的是你的 Service 能否通过它的 IP 正常访问。
+从集群中的一个 Pod，尝试访问 Service 的 IP（从上面的 `kubectl get` 命令获取）。
 
 ```shell
 for i in $(seq 1 3); do 
@@ -487,7 +513,7 @@ hostnames-632524106-tlaok
 If your Service is working, you should get correct responses.  If not, there
 are a number of things that could be going wrong.  Read on.
 -->
-如果 Service 状态是正常的，您应该得到正确的响应。如果没有，有很多可能出错的地方，请继续阅读。
+如果 Service 状态是正常的，你应该得到正确的响应。如果没有，有很多可能出错的地方，请继续阅读。
 
 <!--
 ## Is the Service defined correctly?
@@ -498,11 +524,13 @@ and verify it:
 -->
 ## Service 的配置是否正确？
 
-这听起来可能很愚蠢，但您应该两次甚至三次检查您的 Service 配置是否正确，并且与您的 Pod 匹配。查看您的 Service 配置并验证它：
+这听起来可能很愚蠢，但你应该两次甚至三次检查你的 Service 配置是否正确，并且与你的 Pod 匹配。
+查看你的 Service 配置并验证它：
 
 ```shell
 kubectl get service hostnames -o json
 ```
+
 ```json
 {
     "kind": "Service",
@@ -546,10 +574,10 @@ kubectl get service hostnames -o json
 * If you meant to use a named port, do your Pods expose a port with the same name?
 * Is the port's `protocol` correct for your Pods?
 -->
-* 您想要访问的 Service 端口是否在 `spec.ports[]` 中列出？
-* `targetPort` 对您的 Pod 来说正确吗（许多 Pod 使用与 Service 不同的端口）？
-* 如果您想使用数值型端口，那么它的类型是一个数值（9376）还是字符串 “9376”？
-* 如果您想使用名称型端口，那么您的 Pod 是否暴露了一个同名端口？
+* 你想要访问的 Service 端口是否在 `spec.ports[]` 中列出？
+* `targetPort` 对你的 Pod 来说正确吗（许多 Pod 使用与 Service 不同的端口）？
+* 如果你想使用数值型端口，那么它的类型是一个数值（9376）还是字符串 “9376”？
+* 如果你想使用名称型端口，那么你的 Pod 是否暴露了一个同名端口？
 * 端口的 `protocol` 和 Pod 的是否对应？
 
 <!--
@@ -561,9 +589,10 @@ actually being selected by the Service.
 
 Earlier you saw that the Pods were running.  You can re-check that:
 -->
-## Service 有 Endpoint 吗？
+## Service 有 Endpoints 吗？
 
-如果您已经走到了这一步，您已经确认您的 Service 被正确定义，并能通过 DNS 解析。现在，让我们检查一下，您运行的 Pod 确实是由 Service 选择的。
+如果你已经走到了这一步，你已经确认你的 Service 被正确定义，并能通过 DNS 解析。
+现在，让我们检查一下，你运行的 Pod 确实是被 Service 选中的。
 
 早些时候，我们已经看到 Pod 是运行状态。我们可以再检查一下：
 
@@ -590,17 +619,20 @@ If the restart count is high, read more about how to [debug pods](/docs/tasks/de
 Inside the Kubernetes system is a control loop which evaluates the selector of
 every Service and saves the results into a corresponding Endpoints object.
 -->
-`-l app=hostnames` 参数是一个标签选择器 - 和我们 Service 中的一样。
+`-l app=hostnames` 参数是一个标签选择算符 - 和我们 Service 中定义的一样。
 
-"AGE" 列表明这些 Pod 已经启动一个小时了，这意味着它们运行良好，而不是崩溃。
+"AGE" 列表明这些 Pod 已经启动一个小时了，这意味着它们运行良好，而未崩溃。
 
-"RESTARTS" 列表明 Pod 没有经常崩溃或重启。经常性崩溃可能导致间歇性连接问题。如果重启数过大，通过[调试 pod](/docs/tasks/debug-application-cluster/debug-pod-replication-controller/#debugging-pods)了解更多。
+"RESTARTS" 列表明 Pod 没有经常崩溃或重启。经常性崩溃可能导致间歇性连接问题。
+如果重启次数过大，通过[调试 pod](/zh/docs/tasks/debug-application-cluster/debug-application/#debugging-pods)
+了解相关技术。
 
-在 Kubernetes 系统中有一个控制循环，它评估每个 Service 的选择器，并将结果保存到 Endpoints 对象中。
+在 Kubernetes 系统中有一个控制回路，它评估每个 Service 的选择算符，并将结果保存到 Endpoints 对象中。
 
 ```shell
 kubectl get endpoints hostnames
-
+```
+```
 NAME        ENDPOINTS
 hostnames   10.244.0.5:9376,10.244.0.6:9376,10.244.0.7:9376
 ```
@@ -614,7 +646,12 @@ other error, such as the Service selecting for `app=hostnames`, but the
 Deployment specifying `run=hostnames`, as in versions previous to 1.18, where
 the `kubectl run` command could have been also used to create a Deployment.
 -->
-这证实 endpoint 控制器已经为您的 Service 找到了正确的 Pods。如果 `Endpoint` 列的值为 `<none>`，则应检查 Service 的 `spec.selector` 字段，以及您实际想选择的 Pod 的 `metadata.labels` 的值。常见的错误是输入错误或其他错误，例如 Service 想选择 `app=hostnames`，但是 Deployment 指定的是 `run=hostnames`。在 1.18之前的版本中 `kubectl run` 也可以被用来创建 Deployment。
+这证实 Endpoints 控制器已经为你的 Service 找到了正确的 Pods。
+如果 `ENDPOINTS` 列的值为 `<none>`，则应检查 Service 的 `spec.selector` 字段，
+以及你实际想选择的 Pod 的 `metadata.labels` 的值。
+常见的错误是输入错误或其他错误，例如 Service 想选择 `app=hostnames`，但是
+Deployment 指定的是 `run=hostnames`。在 1.18之前的版本中 `kubectl run`
+也可以被用来创建 Deployment。
 
 <!--
 ## Are the Pods working?
@@ -633,8 +670,8 @@ From within a Pod:
 -->
 ## Pod 正常工作吗？
 
-至此，您知道您的 Service 已存在，并且已匹配到您的Pod。在本实践的开始，您验证了 Pod 本身。
-让我们再次检查 Pod 是否确实在工作-您可以绕过 Service 机制并直接转到 Pod，如上面的 Endpoint 所示。
+至此，你知道你的 Service 已存在，并且已匹配到你的Pod。在本实验的开始，你已经检查了 Pod 本身。
+让我们再次检查 Pod 是否确实在工作 - 你可以绕过 Service 机制并直接转到 Pod，如上面的 Endpoint 所示。
 
 {{< note >}}
 这些命令使用的是 Pod 端口（9376），而不是 Service 端口（80）。
@@ -652,6 +689,7 @@ done
 This should produce something like:
 -->
 输出应该类似这样：
+
 ```
 hostnames-632524106-bbpiw
 hostnames-632524106-ly40y
@@ -663,7 +701,8 @@ You expect each Pod in the Endpoints list to return its own hostname.  If
 this is not what happens (or whatever the correct behavior is for your own
 Pods), you should investigate what's happening there.
 -->
-您希望 Endpoint 列表中的每个 Pod 都返回自己的主机名。 如果这不是发生的情况（或您自己的 Pod 的正确行为是什么），您应调查那里发生了什么。
+你希望 Endpoint 列表中的每个 Pod 都返回自己的主机名。 
+如果情况并非如此（或你自己的 Pod 的正确行为是什么），你应调查发生了什么事情。
 
 <!--
 ## Is the kube-proxy working?
@@ -680,9 +719,12 @@ will have to investigate whatever implementation of Services you are using.
 -->
 ## kube-proxy 正常工作吗？
 
-如果您到达这里，则说明您的 Service 正在运行，拥有 Endpoint ，Pod 真正在运行。 此时此刻，整个 Service 代理机制是可疑的。 让我们一步一步地确认它没问题。
+如果你到达这里，则说明你的 Service 正在运行，拥有 Endpoints，Pod 真正在提供服务。
+此时，整个 Service 代理机制是可疑的。让我们一步一步地确认它没问题。
 
- Service 的默认实现（在大多数集群上应用的）是 kube-proxy。这是一个在每个节点上运行的程序，并配置一小组用于提供 Service 抽象的机制之一。如果您的集群不使用 kube-proxy，则以下各节将不适用，您将必须检查您正在使用的 Service 的实现方式。
+Service 的默认实现（在大多数集群上应用的）是 kube-proxy。
+这是一个在每个节点上运行的程序，负责配置用于提供 Service 抽象的机制之一。
+如果你的集群不使用 kube-proxy，则以下各节将不适用，你将必须检查你正在使用的 Service 的实现方式。
 
 <!--
 ## Is the kube-proxy working?
@@ -692,7 +734,7 @@ Node, you should get something like the below:
 -->
 ### kube-proxy 正常运行吗？
 
-确认 `kube-proxy` 正在节点上运行。 在节点上直接运行，您将会得到类似以下的输出：
+确认 `kube-proxy` 正在节点上运行。 在节点上直接运行，你将会得到类似以下的输出：
 
 ```shell
 ps auxw | grep kube-proxy
@@ -708,7 +750,10 @@ depends on your Node OS.  On some OSes it is a file, such as
 /var/log/kube-proxy.log, while other OSes use `journalctl` to access logs.  You
 should see something like:
 -->
-下一步，确认它并没有出现明显的失败，比如连接主节点失败。要做到这一点，您必须查看日志。访问日志取决于您节点的操作系统。在某些操作系统是一个文件，如 /var/log/messages kube-proxy.log，而其他操作系统使用 `journalctl` 访问日志。您应该看到类似的输出：
+下一步，确认它并没有出现明显的失败，比如连接主节点失败。要做到这一点，你必须查看日志。
+访问日志的方式取决于你节点的操作系统。
+在某些操作系统上日志是一个文件，如 /var/log/messages kube-proxy.log，
+而其他操作系统使用 `journalctl` 访问日志。你应该看到输出类似于：
 
 ```none
 I1027 22:14:53.995134    5063 server.go:200] Running in resource-only container "/kube-proxy"
@@ -734,9 +779,12 @@ installing Kubernetes from scratch. If this is the case, you need to manually
 install the `conntrack` package (e.g. `sudo apt install conntrack` on Ubuntu)
 and then retry.
 -->
-如果您看到有关无法连接主节点的错误消息，则应再次检查节点配置和安装步骤。
+如果你看到有关无法连接主节点的错误消息，则应再次检查节点配置和安装步骤。
 
-`kube-proxy` 无法正确运行的可能原因之一是找不到所需的 `conntrack` 二进制文件。在一些 Linux 系统上，这也是可能发生的，这取决于您如何安装集群，例如，您正在从头开始安装 Kubernetes。如果是这样的话，您需要手动安装 `conntrack` 包（例如，在 Ubuntu 上使用 `sudo apt install conntrack`），然后重试。
+`kube-proxy` 无法正确运行的可能原因之一是找不到所需的 `conntrack` 二进制文件。
+在一些 Linux 系统上，这也是可能发生的，这取决于你如何安装集群，
+例如，你是手动开始一步步安装 Kubernetes。如果是这样的话，你需要手动安装
+`conntrack` 包（例如，在 Ubuntu 上使用 `sudo apt install conntrack`），然后重试。
 
 <!--
 Kube-proxy can run in one of a few modes.  In the log listed above, the
@@ -744,20 +792,24 @@ line `Using iptables Proxier` indicates that kube-proxy is running in
 "iptables" mode.  The most common other mode is "ipvs".  The older "userspace"
 mode has largely been replaced by these.
 
+-->
+Kube-proxy 可以以若干模式之一运行。在上述日志中，`Using iptables Proxier`
+行表示 kube-proxy 在 "iptables" 模式下运行。
+最常见的另一种模式是 "ipvs"。先前的 "userspace" 模式已经被这些所代替。
+
+<!--
 #### Iptables mode
 
 In "iptables" mode, you should see something like the following on a Node:
 -->
-Kube-proxy 可以在这些模式之一中运行。在上述日志中，`Using iptables Proxier` 行表示 kube-proxy 在 "iptables" 模式下运行。最常见的另一种模式是 "ipvs"。先前的 "userspace"
-模式已经被这些所代替。
-
 #### Iptables 模式
 
-在 "iptables" 模式中, 您应该可以在节点上看到如下输出:
+在 "iptables" 模式中, 你应该可以在节点上看到如下输出:
 
 ```shell
 iptables-save | grep hostnames
 ```
+
 ```none
 -A KUBE-SEP-57KPRZ3JQVENLNBR -s 10.244.3.6/32 -m comment --comment "default/hostnames:" -j MARK --set-xmark 0x00004000/0x00004000
 -A KUBE-SEP-57KPRZ3JQVENLNBR -p tcp -m comment --comment "default/hostnames:" -m tcp -j DNAT --to-destination 10.244.3.6:9376
@@ -777,25 +829,25 @@ one `KUBE-SVC-<hash>` chain.  For each Pod endpoint, there should be a small
 number of rules in that `KUBE-SVC-<hash>` and one `KUBE-SEP-<hash>` chain with
 a small number of rules in it.  The exact rules will vary based on your exact
 config (including node-ports and load-balancers).
+-->
+对于每个 Service 的每个端口，应有 1 条 `KUBE-SERVICES` 规则、一个 `KUBE-SVC-<hash>` 链。
+对于每个 Pod 末端，在那个 `KUBE-SVC-<hash>` 链中应该有一些规则与之对应，还应该
+有一个 `KUBE-SEP-<hash>` 链与之对应，其中包含为数不多的几条规则。
+实际的规则数量可能会根据你实际的配置（包括 NodePort 和 LoadBalancer 服务）有所不同。
 
+<!--
 #### IPVS mode
 
 In "ipvs" mode, you should see something like the following on a Node:
 -->
-对于每个 Service 的所有端口，应有 1 条规则、一个链。对于每个 Pod endpoint，在那个XX应该有一些规则，也应该包含小数目的规则。实际的规则数量可能会根据您实际的配置（包括节点端口和负载均衡）有所不同。
-For each port of each Service, there should be 1 rule in `KUBE-SERVICES` and
-one `KUBE-SVC-<hash>` chain.  For each Pod endpoint, there should be a small
-number of rules in that `KUBE-SVC-<hash>` and one `KUBE-SEP-<hash>` chain with
-a small number of rules in it.  The exact rules will vary based on your exact
-config (including node-ports and load-balancers).
-
 #### IPVS 模式
 
-在 "ipvs" 模式中, 您应该在节点下看到如下输出：
+在 "ipvs" 模式中, 你应该在节点下看到如下输出：
 
 ```shell
 ipvsadm -ln
 ```
+
 ```none
 Prot LocalAddress:Port Scheduler Flags
   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
@@ -813,22 +865,26 @@ load-balancer IPs, kube-proxy will create a virtual server.  For each Pod
 endpoint, it will create corresponding real servers. In this example, service
 hostnames(`10.0.1.175:80`) has 3 endpoints(`10.244.0.5:9376`,
 `10.244.0.6:9376`, `10.244.0.7:9376`).
+-->
+对于每个 Service 的每个端口，还有 NodePort，External IP 和 LoadBalancer 类型服务
+的 IP，kube-proxy 将创建一个虚拟服务器。
+对于每个 Pod 末端，它将创建相应的真实服务器。
+在此示例中，服务主机名（`10.0.1.175:80`）拥有 3 个末端（`10.244.0.5:9376`、
+`10.244.0.6:9376` 和 `10.244.0.7:9376`）。
 
+<!--
 #### Userspace mode
 
 In rare cases, you may be using "userspace" mode.  From your Node:
 -->
-对于每个 Service 的每个端口，还有 NodePort，外部 IP 和
-负载平衡器 IP，kube-proxy 将创建一个虚拟服务器。 对于每个 Pod  Endpoint ，它将创建相应的真实服务器。 在此示例中，服务主机名(`10.0.1.175:80`)拥有 3 个 endpoint（`10.244.0.5:9376`,
-`10.244.0.6:9376`, `10.244.0.7:9376`)。
-
 #### Userspace 模式
 
-在少数情况下，您可能会用到 "userspace" 模式，在您的节点上运行：
+在极少数情况下，你可能会用到 "userspace" 模式。在你的节点上运行：
 
 ```shell
 iptables-save | grep hostnames
 ```
+
 ```none
 -A KUBE-PORTALS-CONTAINER -d 10.0.1.175/32 -p tcp -m comment --comment "default/hostnames:default" -m tcp --dport 80 -j REDIRECT --to-ports 48577
 -A KUBE-PORTALS-HOST -d 10.0.1.175/32 -p tcp -m comment --comment "default/hostnames:default" -m tcp --dport 80 -j DNAT --to-destination 10.240.115.247:48577
@@ -840,23 +896,26 @@ example) - a "KUBE-PORTALS-CONTAINER" and a "KUBE-PORTALS-HOST".
 
 Almost nobody should be using the "userspace" mode any more, so you won't spend
 more time on it here.
+-->
+对于 Service （本例中只有一个）的每个端口，应当有 2 条规则：
+一条 "KUBE-PORTALS-CONTAINER" 和一条 "KUBE-PORTALS-HOST" 规则。
 
+几乎没有人应该再使用 "userspace" 模式，因此你在这里不会花更多的时间。
+
+<!--
 ### Is kube-proxy proxying?
 
 Assuming you do see one the above cases, try again to access your Service by
 IP from one of your Nodes:
 -->
-对于 Service （本例中只有一个）的每个端口，应当有 2 条规则： 一个 "KUBE-PORTALS-CONTAINER" 和一个 "KUBE-PORTALS-HOST"。
-
-几乎没有人应该再使用 "userspace" 模式，因此您在这里不会花更多的时间。
-
 ### kube-proxy 是否在运行?
 
-假设您确实遇到上述情况之一，请重试从节点上通过 IP 访问您的 Service ：
+假设你确实遇到上述情况之一，请重试从节点上通过 IP 访问你的 Service ：
 
 ```shell
 curl 10.0.1.175:80
 ```
+
 ```none
 hostnames-632524106-bbpiw
 ```
@@ -869,13 +928,16 @@ Look back at the `iptables-save` output above, and extract the
 port number that `kube-proxy` is using for your Service.  In the above
 examples it is "48577".  Now connect to that:
 -->
-如果失败，并且您正在使用用户空间代理，则可以尝试直接访问代理。 如果您使用的是 iptables 代理，请跳过本节。
+如果失败，并且你正在使用用户空间代理，则可以尝试直接访问代理。
+如果你使用的是 iptables 代理，请跳过本节。
 
-回顾上面的 `iptables-save` 输出，并提取 `kube-proxy` 用于您的 Service 的端口号。在上面的例子中，它是 “48577”。现在试着连接它：
+回顾上面的 `iptables-save` 输出，并提取 `kube-proxy` 为你的 Service 所使用的端口号。
+在上面的例子中，端口号是 “48577”。现在试着连接它：
 
 ```shell
 curl localhost:48577
 ```
+
 ```none
 hostnames-632524106-tlaok
 ```
@@ -883,7 +945,7 @@ hostnames-632524106-tlaok
 <!--
 If this still fails, look at the `kube-proxy` logs for specific lines like:
 -->
-如果仍然失败，请查看 `kube-proxy` 日志中的特定行，如：
+如果这步操作仍然失败，请查看 `kube-proxy` 日志中的特定行，如：
 
 ```none
 Setting endpoints for default/hostnames:default to [10.244.0.5:9376 10.244.0.6:9376 10.244.0.7:9376]
@@ -892,7 +954,10 @@ Setting endpoints for default/hostnames:default to [10.244.0.5:9376 10.244.0.6:9
 <!--
 If you don't see those, try restarting `kube-proxy` with the `-v` flag set to 4, and
 then look at the logs again.
+-->
+如果你没有看到这些，请尝试将 `-V` 标志设置为 4 并重新启动 `kube-proxy`，然后再查看日志。
 
+<!--
 ### Edge case: A Pod fails to reach itself via the Service IP {#a-pod-fails-to-reach-itself-via-the-service-ip}
 
 This might sound unlikely, but it does happen and it is supposed to work.
@@ -905,33 +970,35 @@ back to themselves if they try to access their own Service VIP. The
 `hairpin-mode` flag must either be set to `hairpin-veth` or
 `promiscuous-bridge`.
 
+-->
+### 边缘案例: Pod 无法通过 Service IP 连接到它本身       {#a-pod-fails-to-reach-itself-via-the-service-ip}
+
+这听起来似乎不太可能，但是确实可能发生，并且应该可行。
+
+如果网络没有为“发夹模式（Hairpin）”流量生成正确配置，
+通常当 `kube-proxy` 以 `iptables` 模式运行，并且 Pod 与桥接网络连接时，就会发生这种情况。
+`kubelet` 提供了 `hairpin-mode`[标志](/zh/docs/reference/command-line-tools-reference/kubelet/)，
+如果 Service 的末端尝试访问自己的 Service VIP，则该端点可以把流量负载均衡回来到它们自身。
+`hairpin-mode` 标志必须被设置为 `hairpin-veth` 或者 `promiscuous-bridge`。
+
+<!--
 The common steps to trouble shoot this are as follows:
 
 * Confirm `hairpin-mode` is set to `hairpin-veth` or `promiscuous-bridge`.
 You should see something like the below. `hairpin-mode` is set to
 `promiscuous-bridge` in the following example.
 -->
-如果您没有看到这些，请尝试将 `-V` 标志设置为 4 并重新启动 `kube-proxy`，然后再查看日志。
+诊断此类问题的常见步骤如下：
 
-### 边缘案例: 一个 Pod 无法通过 Service  IP 连接到它本身{#a-pod-fails-to-reach-itself-via-the-service-ip}。
+* 确认 `hairpin-mode` 被设置为 `hairpin-veth` 或 `promiscuous-bridge`。
+  你应该可以看到下面这样。本例中 `hairpin-mode` 被设置为 `promiscuous-bridge`。
 
-这听起来似乎不太可能，但是确实发生了，并且应该可行。
-
-如果网络没有为“发夹模式”流量生成正确配置，通常当 `kube-proxy` 以 `iptables` 模式运行，并且 Pod 与桥接网络连接时，就会发生这种情况。`Kubelet`暴露了 `hairpin-mode`[标志](/docs/admin/kubelet/)，如果 Service 的 endpoint 尝试访问自己的 Service VIP，则该端点可以把流量负载均衡回来到它们自身。
-`hairpin-mode` 标志必须被设置为 `hairpin-veth` 或者`promiscuous-bridge`。
-
-解决此问题的常见步骤如下：
-
-* 确认 `hairpin-mode` 被设置为 `hairpin-veth` 或 `promiscuous-bridge`.
-您应该可以看到下面这样。本例中 `hairpin-mode` 被设置为
-`promiscuous-bridge` 。
-
-```shell
-ps auxw | grep kubelet
-```
-```none
-root      3392  1.1  0.8 186804 65208 ?        Sl   00:51  11:11 /usr/local/bin/kubelet --enable-debugging-handlers=true --config=/etc/kubernetes/manifests --allow-privileged=True --v=4 --cluster-dns=10.0.0.10 --cluster-domain=cluster.local --configure-cbr0=true --cgroup-root=/ --system-cgroups=/system --hairpin-mode=promiscuous-bridge --runtime-cgroups=/docker-daemon --kubelet-cgroups=/kubelet --babysit-daemons=true --max-pods=110 --serialize-image-pulls=false --outofdisk-transition-frequency=0
-```
+  ```shell
+  ps auxw | grep kubelet
+  ```
+  ```none
+  root      3392  1.1  0.8 186804 65208 ?        Sl   00:51  11:11 /usr/local/bin/kubelet --enable-debugging-handlers=true --config=/etc/kubernetes/manifests --allow-privileged=True --v=4 --cluster-dns=10.0.0.10 --cluster-domain=cluster.local --configure-cbr0=true --cgroup-root=/ --system-cgroups=/system --hairpin-mode=promiscuous-bridge --runtime-cgroups=/docker-daemon --kubelet-cgroups=/kubelet --babysit-daemons=true --max-pods=110 --serialize-image-pulls=false --outofdisk-transition-frequency=0
+  ```
 
 <!--
 * Confirm the effective `hairpin-mode`. To do this, you'll have to look at
@@ -942,48 +1009,56 @@ match `--hairpin-mode` flag due to compatibility. Check if there is any log
 lines with key word `hairpin` in kubelet.log. There should be log lines
 indicating the effective hairpin mode, like something below.
 -->
+* 确认有效的 `hairpin-mode`。要做到这一点，你必须查看 kubelet 日志。
+  访问日志取决于节点的操作系统。在一些操作系统上，它是一个文件，如 /var/log/kubelet.log，
+  而其他操作系统则使用 `journalctl` 访问日志。请注意，由于兼容性，
+  有效的 `hairpin-mode` 可能不匹配 `--hairpin-mode` 标志。在 kubelet.log
+  中检查是否有带有关键字 `hairpin` 的日志行。应该有日志行指示有效的
+  `hairpin-mode`，就像下面这样。
 
-
-* 确认有效的 `hairpin-mode`。要做到这一点，您必须查看 kubelet 日志。访问日志取决于节点的操作系统。在一些操作系统上，它是一个文件，如 /var/log/kubelet.log，而其他操作系统则使用 `journalctl` 访问日志。请注意，由于兼容性，有效的 `hairpin-mode` 可能不匹配 `--hairpin-mode` 标志。在 kubelet.log 中检查是否有带有关键字 `hairpin` 的日志行。应该有日志行指示有效的 `hairpin-mode`，就像下面这样。
-
-```none
-I0629 00:51:43.648698    3252 kubelet.go:380] Hairpin mode set to "promiscuous-bridge"
-```
+  ```none
+  I0629 00:51:43.648698    3252 kubelet.go:380] Hairpin mode set to "promiscuous-bridge"
+  ```
 
 <!--
 * If the effective hairpin mode is `hairpin-veth`, ensure the `Kubelet` has
 the permission to operate in `/sys` on node. If everything works properly,
 you should see something like:
 -->
-* 如果有效的发卡模式是 `hairpin-veth`, 保证 `Kubelet` 有操作节点上  `/sys` 的权限。如果一切正常，您将会看到如下输出:
+* 如果有效的发夹模式是 `hairpin-veth`, 要保证 `Kubelet` 有操作节点上 `/sys` 的权限。
+  如果一切正常，你将会看到如下输出:
 
-```shell
-for intf in /sys/devices/virtual/net/cbr0/brif/*; do cat $intf/hairpin_mode; done
-```
-```none
-1
-1
-1
-1
-```
+  ```shell
+  for intf in /sys/devices/virtual/net/cbr0/brif/*; do cat $intf/hairpin_mode; done
+  ```
+  ```none
+  1
+  1
+  1
+  1
+  ```
 
 <!--
 * If the effective hairpin mode is `promiscuous-bridge`, ensure `Kubelet`
 has the permission to manipulate linux bridge on node. If `cbr0` bridge is
 used and configured properly, you should see:
 -->
-* 如果有效的发卡模式是 `promiscuous-bridge`, 保证 `Kubelet` 有操作节点上 linux bridge 的权限。如果 `cbr0` 桥正在被使用且被正确设置，您将会看到如下输出:
+* 如果有效的发卡模式是 `promiscuous-bridge`, 要保证 `Kubelet` 有操作节点上
+  Linux 网桥的权限。如果 `cbr0` 桥正在被使用且被正确设置，你将会看到如下输出:
 
-```shell
-ifconfig cbr0 |grep PROMISC
-```
-```none
-UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1460  Metric:1
-```
+  ```shell
+  ifconfig cbr0 |grep PROMISC
+  ```
+  ```none
+  UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1460  Metric:1
+  ```
 
 <!--
 * Seek help if none of above works out.
+-->
+* 如果以上步骤都不能解决问题，请寻求帮助。
 
+<!--
 ## Seek help
 
 If you get this far, something very strange is happening.  Your Service is
@@ -996,28 +1071,23 @@ Contact us on
 [Slack](/docs/troubleshooting/#slack) or
 [Forum](https://discuss.kubernetes.io) or
 [GitHub](https://github.com/kubernetes/kubernetes).
-
-
-## {{% heading "whatsnext" %}}
-
-
-Visit [troubleshooting document](/docs/troubleshooting/) for more information.
 -->
-* 如果以上步骤都不能解决问题，请寻求帮助。
-
 ## 寻求帮助
 
-如果您走到这一步，那么就真的是奇怪的事情发生了。您的  Service  正在运行，有 Endpoint ，您的 Pods 也确实在服务中。您的 DNS 正常，`iptables` 规则已经安装，`kube-proxy` 看起来也正常。然而 Service 还是没有正常工作。这种情况下，请告诉我们，这样我们可以帮助调查！
+如果你走到这一步，那么就真的是奇怪的事情发生了。你的 Service 正在运行，有 Endpoints 存在，
+你的 Pods 也确实在提供服务。你的 DNS 正常，`iptables` 规则已经安装，`kube-proxy` 看起来也正常。
+然而 Service 还是没有正常工作。这种情况下，请告诉我们，以便我们可以帮助调查！
 
 通过
-[Slack](/docs/troubleshooting/#slack) 或者
+[Slack](/zh/docs/tasks/debug-application-cluster/troubleshooting/#slack) 或者
 [Forum](https://discuss.kubernetes.io) 或者
 [GitHub](https://github.com/kubernetes/kubernetes) 
 联系我们。
 
-
-
 ## {{% heading "whatsnext" %}}
 
+<!--
+Visit [troubleshooting document](/docs/troubleshooting/) for more information.
+-->
+访问[故障排查文档](/zh/docs/tasks/debug-application-cluster/troubleshooting/) 获取更多信息。
 
-访问 [故障排查文档](/docs/troubleshooting/) 获取更多信息。

From 75fd9320d8370938c593b6421975ceebb7e0c6a2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Piotr=20Sobieszcza=C5=84ski?=
 <piotr.sobieszczanski@gmail.com>
Date: Tue, 11 Aug 2020 12:05:50 +0200
Subject: [PATCH 022/496] v1 backend yaml definition has wrong indentation

---
 .../tasks/access-application-cluster/ingress-minikube.md    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/tasks/access-application-cluster/ingress-minikube.md b/content/en/docs/tasks/access-application-cluster/ingress-minikube.md
index 77d400aa8d..6310d15851 100644
--- a/content/en/docs/tasks/access-application-cluster/ingress-minikube.md
+++ b/content/en/docs/tasks/access-application-cluster/ingress-minikube.md
@@ -145,9 +145,9 @@ The following file is an Ingress resource that sends traffic to your Service via
         http:
           paths:
           - path: /
-        backend:
-          serviceName: web
-          servicePort: 8080
+            backend:
+              serviceName: web
+              servicePort: 8080
     ```
 
 1. Create the Ingress resource by running the following command:

From c6a96128c4139bf27ccee0728575167a673ffec2 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Wed, 5 Aug 2020 03:17:57 +0900
Subject: [PATCH 023/496] Replace special quote characters with normal ones.

---
 .../docs/concepts/architecture/controller.md  |  6 ++--
 .../concepts/cluster-administration/_index.md |  2 +-
 .../configuration/pod-priority-preemption.md  |  2 +-
 .../en/docs/concepts/configuration/secret.md  |  2 +-
 .../compute-storage-net/device-plugins.md     |  2 +-
 .../concepts/overview/what-is-kubernetes.md   | 16 +++++-----
 .../working-with-objects/annotations.md       |  4 +--
 .../overview/working-with-objects/labels.md   |  2 +-
 .../overview/working-with-objects/names.md    |  2 +-
 .../taint-and-toleration.md                   |  2 +-
 .../security/pod-security-standards.md        |  2 +-
 .../connect-applications-service.md           |  2 +-
 .../services-networking/dns-pod-service.md    |  6 ++--
 .../services-networking/network-policies.md   |  2 +-
 .../concepts/services-networking/service.md   | 30 ++++++++---------
 .../concepts/storage/dynamic-provisioning.md  |  6 ++--
 .../workloads/controllers/replicaset.md       |  4 +--
 .../controllers/replicationcontroller.md      |  4 +--
 .../pods/pod-topology-spread-constraints.md   |  6 ++--
 content/en/docs/contribute/advanced.md        |  4 +--
 .../contribute/generate-ref-docs/kubectl.md   |  2 +-
 .../contribute/participate/pr-wranglers.md    |  2 +-
 .../en/docs/contribute/style/style-guide.md   |  2 +-
 content/en/docs/home/_index.md                |  4 +--
 .../access-authn-authz/authentication.md      |  8 ++---
 .../glossary/admission-controller.md          |  2 +-
 content/en/docs/reference/glossary/kubelet.md |  6 ++--
 content/en/docs/reference/glossary/node.md    |  6 ++--
 .../reference/issues-security/security.md     |  2 +-
 .../reference/setup-tools/kubeadm/_index.md   |  2 +-
 .../docs/reference/using-api/api-concepts.md  |  4 +--
 .../setup/learning-environment/minikube.md    |  2 +-
 .../container-runtimes.md                     |  4 +--
 .../tools/kubeadm/create-cluster-kubeadm.md   |  4 +--
 .../connecting-frontend-backend.md            |  2 +-
 ...igure-liveness-readiness-startup-probes.md |  6 ++--
 .../configure-persistent-volume-storage.md    |  4 +--
 .../tasks/extend-kubectl/kubectl-plugins.md   |  2 +-
 .../distribute-credentials-secure.md          |  2 +-
 ...nward-api-volume-expose-pod-information.md | 32 +++++++++----------
 .../en/docs/tasks/tools/install-minikube.md   |  2 +-
 .../stateful-application/cassandra.md         |  2 +-
 42 files changed, 104 insertions(+), 104 deletions(-)

diff --git a/content/en/docs/concepts/architecture/controller.md b/content/en/docs/concepts/architecture/controller.md
index 547a624a94..8c51ec396c 100644
--- a/content/en/docs/concepts/architecture/controller.md
+++ b/content/en/docs/concepts/architecture/controller.md
@@ -113,9 +113,9 @@ useful changes, it doesn't matter if the overall state is or is not stable.
 As a tenet of its design, Kubernetes uses lots of controllers that each manage
 a particular aspect of cluster state. Most commonly, a particular control loop
 (controller) uses one kind of resource as its desired state, and has a different
-kind of resource that it manages to make that desired state happen. For example, 
+kind of resource that it manages to make that desired state happen. For example,
 a controller for Jobs tracks Job objects (to discover new work) and Pod objects
-(to run the Jobs, and then to see when the work is finished). In this case 
+(to run the Jobs, and then to see when the work is finished). In this case
 something else creates the Jobs, whereas the Job controller creates Pods.
 
 It's useful to have simple controllers rather than one, monolithic set of control
@@ -140,7 +140,7 @@ the {{< glossary_tooltip term_id="kube-controller-manager" >}}. These
 built-in controllers provide important core behaviors.
 
 The Deployment controller and Job controller are examples of controllers that
-come as part of Kubernetes itself (“built-in” controllers).
+come as part of Kubernetes itself ("built-in" controllers).
 Kubernetes lets you run a resilient control plane, so that if any of the built-in
 controllers were to fail, another part of the control plane will take over the work.
 
diff --git a/content/en/docs/concepts/cluster-administration/_index.md b/content/en/docs/concepts/cluster-administration/_index.md
index ec3f9c2f54..e35c8e0ebc 100644
--- a/content/en/docs/concepts/cluster-administration/_index.md
+++ b/content/en/docs/concepts/cluster-administration/_index.md
@@ -39,7 +39,7 @@ Before choosing a guide, here are some considerations:
 
 ## Managing a cluster
 
-* [Managing a cluster](/docs/tasks/administer-cluster/cluster-management/) describes several topics related to the lifecycle of a cluster: creating a new cluster, upgrading your cluster’s master and worker nodes, performing node maintenance (e.g. kernel upgrades), and upgrading the Kubernetes API version of a running cluster.
+* [Managing a cluster](/docs/tasks/administer-cluster/cluster-management/) describes several topics related to the lifecycle of a cluster: creating a new cluster, upgrading your cluster's master and worker nodes, performing node maintenance (e.g. kernel upgrades), and upgrading the Kubernetes API version of a running cluster.
 
 * Learn how to [manage nodes](/docs/concepts/architecture/nodes/).
 
diff --git a/content/en/docs/concepts/configuration/pod-priority-preemption.md b/content/en/docs/concepts/configuration/pod-priority-preemption.md
index 9ca93839f8..c9169cb62e 100644
--- a/content/en/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/en/docs/concepts/configuration/pod-priority-preemption.md
@@ -397,7 +397,7 @@ The only component that considers both QoS and Pod priority is
 [kubelet out-of-resource eviction](/docs/tasks/administer-cluster/out-of-resource/).
 The kubelet ranks Pods for eviction first by whether or not their usage of the
 starved resource exceeds requests, then by Priority, and then by the consumption
-of the starved compute resource relative to the Pods’ scheduling requests.
+of the starved compute resource relative to the Pods' scheduling requests.
 See
 [evicting end-user pods](/docs/tasks/administer-cluster/out-of-resource/#evicting-end-user-pods)
 for more details.
diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 5c553b5cc6..7c8eebc60a 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -912,7 +912,7 @@ Create the Secret:
 kubectl apply -f mysecret.yaml
 ```
 
-Use `envFrom` to define all of the Secret’s data as container environment variables. The key from the Secret becomes the environment variable name in the Pod.
+Use `envFrom` to define all of the Secret's data as container environment variables. The key from the Secret becomes the environment variable name in the Pod.
 
 ```yaml
 apiVersion: v1
diff --git a/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md b/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
index 2a4ede4a0c..b742c19d53 100644
--- a/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
+++ b/content/en/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
@@ -46,7 +46,7 @@ list of devices it manages, and the kubelet is then in charge of advertising tho
 resources to the API server as part of the kubelet node status update.
 For example, after a device plugin registers `hardware-vendor.example/foo` with the kubelet
 and reports two healthy devices on a node, the node status is updated
-to advertise that the node has 2 “Foo” devices installed and available.
+to advertise that the node has 2 "Foo" devices installed and available.
 
 Then, users can request devices in a
 [Container](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core)
diff --git a/content/en/docs/concepts/overview/what-is-kubernetes.md b/content/en/docs/concepts/overview/what-is-kubernetes.md
index 5060b6f287..418ee3d644 100644
--- a/content/en/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/en/docs/concepts/overview/what-is-kubernetes.md
@@ -59,17 +59,17 @@ That's how Kubernetes comes to the rescue! Kubernetes provides you with a framew
 
 Kubernetes provides you with:
 
-* **Service discovery and load balancing**  
+* **Service discovery and load balancing**
 Kubernetes can expose a container using the DNS name or using their own IP address. If traffic to a container is high, Kubernetes is able to load balance and distribute the network traffic so that the deployment is stable.
-* **Storage orchestration**  
+* **Storage orchestration**
 Kubernetes allows you to automatically mount a storage system of your choice, such as local storages, public cloud providers, and more.
-* **Automated rollouts and rollbacks**  
+* **Automated rollouts and rollbacks**
 You can describe the desired state for your deployed containers using Kubernetes, and it can change the actual state to the desired state at a controlled rate. For example, you can automate Kubernetes to create new containers for your deployment, remove existing containers and adopt all their resources to the new container.
-* **Automatic bin packing**  
+* **Automatic bin packing**
 You provide Kubernetes with a cluster of nodes that it can use to run containerized tasks. You tell Kubernetes how much CPU and memory (RAM) each container needs. Kubernetes can fit containers onto your nodes to make the best use of your resources.
-* **Self-healing**  
-Kubernetes restarts containers that fail, replaces containers, kills containers that don’t respond to your user-defined health check, and doesn’t advertise them to clients until they are ready to serve.
-* **Secret and configuration management**  
+* **Self-healing**
+Kubernetes restarts containers that fail, replaces containers, kills containers that don't respond to your user-defined health check, and doesn't advertise them to clients until they are ready to serve.
+* **Secret and configuration management**
 Kubernetes lets you store and manage sensitive information, such as passwords, OAuth tokens, and SSH keys. You can deploy and update secrets and application configuration without rebuilding your container images, and without exposing secrets in your stack configuration.
 
 ## What Kubernetes is not
@@ -84,7 +84,7 @@ Kubernetes:
 * Does not dictate logging, monitoring, or alerting solutions. It provides some integrations as proof of concept, and mechanisms to collect and export metrics.
 * Does not provide nor mandate a configuration language/system (for example, Jsonnet). It provides a declarative API that may be targeted by arbitrary forms of declarative specifications.
 * Does not provide nor adopt any comprehensive machine configuration, maintenance, management, or self-healing systems.
-* Additionally, Kubernetes is not a mere orchestration system. In fact, it eliminates the need for orchestration. The technical definition of orchestration is execution of a defined workflow: first do A, then B, then C. In contrast, Kubernetes comprises a set of independent, composable control processes that continuously drive the current state towards the provided desired state. It shouldn’t matter how you get from A to C. Centralized control is also not required. This results in a system that is easier to use and more powerful, robust, resilient, and extensible.
+* Additionally, Kubernetes is not a mere orchestration system. In fact, it eliminates the need for orchestration. The technical definition of orchestration is execution of a defined workflow: first do A, then B, then C. In contrast, Kubernetes comprises a set of independent, composable control processes that continuously drive the current state towards the provided desired state. It shouldn't matter how you get from A to C. Centralized control is also not required. This results in a system that is easier to use and more powerful, robust, resilient, and extensible.
 
 
 
diff --git a/content/en/docs/concepts/overview/working-with-objects/annotations.md b/content/en/docs/concepts/overview/working-with-objects/annotations.md
index d440d2965e..fe31841612 100644
--- a/content/en/docs/concepts/overview/working-with-objects/annotations.md
+++ b/content/en/docs/concepts/overview/working-with-objects/annotations.md
@@ -69,7 +69,7 @@ If the prefix is omitted, the annotation Key is presumed to be private to the us
 
 The `kubernetes.io/` and `k8s.io/` prefixes are reserved for Kubernetes core components.
 
-For example, here’s the configuration file for a Pod that has the annotation `imageregistry: https://hub.docker.com/` :
+For example, here's the configuration file for a Pod that has the annotation `imageregistry: https://hub.docker.com/` :
 
 ```yaml
 
@@ -85,7 +85,7 @@ spec:
     image: nginx:1.14.2
     ports:
     - containerPort: 80
-          
+
 ```
 
 
diff --git a/content/en/docs/concepts/overview/working-with-objects/labels.md b/content/en/docs/concepts/overview/working-with-objects/labels.md
index e580cadb88..822935978c 100644
--- a/content/en/docs/concepts/overview/working-with-objects/labels.md
+++ b/content/en/docs/concepts/overview/working-with-objects/labels.md
@@ -54,7 +54,7 @@ The `kubernetes.io/` and `k8s.io/` prefixes are reserved for Kubernetes core com
 
 Valid label values must be 63 characters or less and must be empty or begin and end with an alphanumeric character (`[a-z0-9A-Z]`) with dashes (`-`), underscores (`_`), dots (`.`), and alphanumerics between.
 
-For example, here’s the configuration file for a Pod that has two labels `environment: production` and `app: nginx` :
+For example, here's the configuration file for a Pod that has two labels `environment: production` and `app: nginx` :
 
 ```yaml
 
diff --git a/content/en/docs/concepts/overview/working-with-objects/names.md b/content/en/docs/concepts/overview/working-with-objects/names.md
index 9831f7335c..bc89d1c30a 100644
--- a/content/en/docs/concepts/overview/working-with-objects/names.md
+++ b/content/en/docs/concepts/overview/working-with-objects/names.md
@@ -54,7 +54,7 @@ Some resource types require their names to be able to be safely encoded as a
 path segment. In other words, the name may not be "." or ".." and the name may
 not contain "/" or "%".
 
-Here’s an example manifest for a Pod named `nginx-demo`.
+Here's an example manifest for a Pod named `nginx-demo`.
 
 ```yaml
 apiVersion: v1
diff --git a/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md b/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md
index 9bb54b3e4f..03b628be86 100644
--- a/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md
+++ b/content/en/docs/concepts/scheduling-eviction/taint-and-toleration.md
@@ -62,7 +62,7 @@ tolerations:
   effect: "NoSchedule"
 ```
 
-Here’s an example of a pod that uses tolerations:
+Here's an example of a pod that uses tolerations:
 
 {{< codenew file="pods/pod-with-toleration.yaml" >}}
 
diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md
index 20574c8f91..b297e22442 100644
--- a/content/en/docs/concepts/security/pod-security-standards.md
+++ b/content/en/docs/concepts/security/pod-security-standards.md
@@ -316,6 +316,6 @@ restrict privileged permissions is lessened when the workload is isolated from t
 kernel. This allows for workloads requiring heightened permissions to still be isolated.
 
 Additionally, the protection of sandboxed workloads is highly dependent on the method of
-sandboxing. As such, no single ‘recommended’ policy is recommended for all sandboxed workloads.
+sandboxing. As such, no single recommended policy is recommended for all sandboxed workloads.
 
 
diff --git a/content/en/docs/concepts/services-networking/connect-applications-service.md b/content/en/docs/concepts/services-networking/connect-applications-service.md
index 86c4dd1623..402c3c57ca 100644
--- a/content/en/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/en/docs/concepts/services-networking/connect-applications-service.md
@@ -15,7 +15,7 @@ weight: 30
 
 Now that you have a continuously running, replicated application you can expose it on a network. Before discussing the Kubernetes approach to networking, it is worthwhile to contrast it with the "normal" way networking works with Docker.
 
-By default, Docker uses host-private networking, so containers can talk to other containers only if they are on the same machine. In order for Docker containers to communicate across nodes, there must be allocated ports on the machine’s own IP address, which are then forwarded or proxied to the containers. This obviously means that containers must either coordinate which ports they use very carefully or ports must be allocated dynamically.
+By default, Docker uses host-private networking, so containers can talk to other containers only if they are on the same machine. In order for Docker containers to communicate across nodes, there must be allocated ports on the machine's own IP address, which are then forwarded or proxied to the containers. This obviously means that containers must either coordinate which ports they use very carefully or ports must be allocated dynamically.
 
 Coordinating port allocations across multiple developers or teams that provide containers is very difficult to do at scale, and exposes users to cluster-level issues outside of their control. Kubernetes assumes that pods can communicate with other pods, regardless of which host they land on. Kubernetes gives every pod its own cluster-private IP address, so you do not need to explicitly create links between pods or map container ports to host ports. This means that containers within a Pod can all reach each other's ports on localhost, and all pods in a cluster can see each other without NAT. The rest of this document elaborates on how you can run reliable services on such a networking model.
 
diff --git a/content/en/docs/concepts/services-networking/dns-pod-service.md b/content/en/docs/concepts/services-networking/dns-pod-service.md
index 738c6bac14..83c9c04878 100644
--- a/content/en/docs/concepts/services-networking/dns-pod-service.md
+++ b/content/en/docs/concepts/services-networking/dns-pod-service.md
@@ -72,12 +72,12 @@ In general a pod has the following DNS resolution:
 
 `pod-ip-address.my-namespace.pod.cluster-domain.example`.
 
-For example, if a pod in the `default` namespace has the IP address 172.17.0.3, 
+For example, if a pod in the `default` namespace has the IP address 172.17.0.3,
 and the domain name for your cluster is `cluster.local`, then the Pod has a DNS name:
 
 `172-17-0-3.default.pod.cluster.local`.
 
-Any pods created by a Deployment or DaemonSet exposed by a Service have the 
+Any pods created by a Deployment or DaemonSet exposed by a Service have the
 following DNS resolution available:
 
 `pod-ip-address.deployment-name.my-namespace.svc.cluster-domain.example`.
@@ -191,7 +191,7 @@ following pod-specific DNS policies. These policies are specified in the
 
 {{< note >}}
 "Default" is not the default DNS policy. If `dnsPolicy` is not
-explicitly specified, then “ClusterFirst” is used.
+explicitly specified, then "ClusterFirst" is used.
 {{< /note >}}
 
 
diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index a35eca252f..fc422b3338 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -94,7 +94,7 @@ __egress__: Each NetworkPolicy may include a list of allowed `egress` rules.  Ea
 So, the example NetworkPolicy:
 
 1. isolates "role=db" pods in the "default" namespace for both ingress and egress traffic (if they weren't already isolated)
-2. (Ingress rules) allows connections to all pods in the “default” namespace with the label “role=db” on TCP port 6379 from:
+2. (Ingress rules) allows connections to all pods in the "default" namespace with the label "role=db" on TCP port 6379 from:
 
    * any pod in the "default" namespace with the label "role=frontend"
    * any pod in a namespace with the label "project=myproject"
diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index e1f7d09779..f65c565c4d 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -33,8 +33,8 @@ Each Pod gets its own IP address, however in a Deployment, the set of Pods
 running in one moment in time could be different from
 the set of Pods running that application a moment later.
 
-This leads to a problem: if some set of Pods (call them “backends”) provides
-functionality to other Pods (call them “frontends”) inside your cluster,
+This leads to a problem: if some set of Pods (call them "backends") provides
+functionality to other Pods (call them "frontends") inside your cluster,
 how do the frontends find out and keep track of which IP address to connect
 to, so that the frontend can use the backend part of the workload?
 
@@ -91,7 +91,7 @@ spec:
       targetPort: 9376
 ```
 
-This specification creates a new Service object named “my-service”, which
+This specification creates a new Service object named "my-service", which
 targets TCP port 9376 on any Pod with the `app=MyApp` label.
 
 Kubernetes assigns this Service an IP address (sometimes called the "cluster IP"),
@@ -100,7 +100,7 @@ which is used by the Service proxies
 
 The controller for the Service selector continuously scans for Pods that
 match its selector, and then POSTs any updates to an Endpoint object
-also named “my-service”.
+also named "my-service".
 
 {{< note >}}
 A Service can map _any_ incoming `port` to a `targetPort`. By default and
@@ -319,7 +319,7 @@ falls back to running in iptables proxy mode.
 
 ![Services overview diagram for IPVS proxy](/images/docs/services-ipvs-overview.svg)
 
-In these proxy models, the traffic bound for the Service’s IP:Port is
+In these proxy models, the traffic bound for the Service's IP:Port is
 proxied to an appropriate backend without the clients knowing anything
 about Kubernetes or Services or Pods.
 
@@ -447,7 +447,7 @@ You can find more information about `ExternalName` resolution in
 ## Headless Services
 
 Sometimes you don't need load-balancing and a single Service IP.  In
-this case, you can create what are termed “headless” Services, by explicitly
+this case, you can create what are termed "headless" Services, by explicitly
 specifying `"None"` for the cluster IP (`.spec.clusterIP`).
 
 You can use a headless Service to interface with other service discovery mechanisms,
@@ -685,7 +685,7 @@ metadata:
 ```yaml
 [...]
 metadata:
-  annotations:  
+  annotations:
     service.kubernetes.io/qcloud-loadbalancer-internal-subnetid: subnet-xxxxx
 [...]
 ```
@@ -694,7 +694,7 @@ metadata:
 ```yaml
 [...]
 metadata:
-  annotations:  
+  annotations:
     service.beta.kubernetes.io/alibaba-cloud-loadbalancer-address-type: "intranet"
 [...]
 ```
@@ -948,25 +948,25 @@ There are other annotations for managing Cloud Load Balancers on TKE as shown be
 
         # ID of an existing load balancer
         service.kubernetes.io/tke-existed-lbid：lb-6swtxxxx
-        
+
         # Custom parameters for the load balancer (LB), does not support modification of LB type yet
         service.kubernetes.io/service.extensiveParameters: ""
-        
-        # Custom parameters for the LB listener 
+
+        # Custom parameters for the LB listener
         service.kubernetes.io/service.listenerParameters: ""
-        
+
         # Specifies the type of Load balancer;
         # valid values: classic (Classic Cloud Load Balancer) or application (Application Cloud Load Balancer)
         service.kubernetes.io/loadbalance-type: xxxxx
 
-        # Specifies the public network bandwidth billing method; 
+        # Specifies the public network bandwidth billing method;
         # valid values: TRAFFIC_POSTPAID_BY_HOUR(bill-by-traffic) and BANDWIDTH_POSTPAID_BY_HOUR (bill-by-bandwidth).
         service.kubernetes.io/qcloud-loadbalancer-internet-charge-type: xxxxxx
 
         # Specifies the bandwidth value (value range: [1,2000] Mbps).
         service.kubernetes.io/qcloud-loadbalancer-internet-max-bandwidth-out: "10"
 
-        # When this annotation is set，the loadbalancers will only register nodes 
+        # When this annotation is set，the loadbalancers will only register nodes
         # with pod running on it, otherwise all nodes will be registered.
         service.kubernetes.io/local-svc-only-bind-node-with-pod: true
 ```
@@ -1115,7 +1115,7 @@ connections on it.
 
 When a client connects to the Service's virtual IP address, the iptables
 rule kicks in, and redirects the packets to the proxy's own port.
-The “Service proxy” chooses a backend, and starts proxying traffic from the client to the backend.
+The "Service proxy" chooses a backend, and starts proxying traffic from the client to the backend.
 
 This means that Service owners can choose any port they want without risk of
 collision.  Clients can simply connect to an IP and port, without being aware
diff --git a/content/en/docs/concepts/storage/dynamic-provisioning.md b/content/en/docs/concepts/storage/dynamic-provisioning.md
index dc82e5c2c8..bedd431dc9 100644
--- a/content/en/docs/concepts/storage/dynamic-provisioning.md
+++ b/content/en/docs/concepts/storage/dynamic-provisioning.md
@@ -33,7 +33,7 @@ from the API group `storage.k8s.io`. A cluster administrator can define as many
 that provisioner when provisioning.
 A cluster administrator can define and expose multiple flavors of storage (from
 the same or different storage systems) within a cluster, each with a custom set
-of parameters. This design also ensures that end users don’t have to worry
+of parameters. This design also ensures that end users don't have to worry
 about the complexity and nuances of how storage is provisioned, but still
 have the ability to select from multiple storage options.
 
@@ -85,8 +85,8 @@ is deprecated since v1.6. Users now can and should instead use the
 this field must match the name of a `StorageClass` configured by the
 administrator (see [below](#enabling-dynamic-provisioning)).
 
-To select the “fast” storage class, for example, a user would create the
-following `PersistentVolumeClaim`:
+To select the "fast" storage class, for example, a user would create the
+following PersistentVolumeClaim:
 
 ```yaml
 apiVersion: v1
diff --git a/content/en/docs/concepts/workloads/controllers/replicaset.md b/content/en/docs/concepts/workloads/controllers/replicaset.md
index ef2a069ca1..cac2b0bd1e 100644
--- a/content/en/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/en/docs/concepts/workloads/controllers/replicaset.md
@@ -295,7 +295,7 @@ curl -X DELETE  'localhost:8080/apis/apps/v1/namespaces/default/replicasets/fron
 Once the original is deleted, you can create a new ReplicaSet to replace it.  As long
 as the old and new `.spec.selector` are the same, then the new one will adopt the old Pods.
 However, it will not make any effort to make existing Pods match a new, different pod template.
-To update Pods to a new spec in a controlled way, use a 
+To update Pods to a new spec in a controlled way, use a
 [Deployment](/docs/concepts/workloads/controllers/deployment/#creating-a-deployment), as ReplicaSets do not support a rolling update directly.
 
 ### Isolating Pods from a ReplicaSet
@@ -340,7 +340,7 @@ kubectl autoscale rs frontend --max=10 --min=3 --cpu-percent=50
 [`Deployment`](/docs/concepts/workloads/controllers/deployment/) is an object which can own ReplicaSets and update
 them and their Pods via declarative, server-side rolling updates.
 While ReplicaSets can be used independently, today they're  mainly used by Deployments as a mechanism to orchestrate Pod
-creation, deletion and updates. When you use Deployments you don’t have to worry about managing the ReplicaSets that
+creation, deletion and updates. When you use Deployments you don't have to worry about managing the ReplicaSets that
 they create. Deployments own and manage their ReplicaSets.
 As such, it is recommended to use Deployments when you want ReplicaSets.
 
diff --git a/content/en/docs/concepts/workloads/controllers/replicationcontroller.md b/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
index 941d8f585e..e50c9a99bb 100644
--- a/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/en/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -254,8 +254,8 @@ API object can be found at:
 ### ReplicaSet
 
 [`ReplicaSet`](/docs/concepts/workloads/controllers/replicaset/) is the next-generation ReplicationController that supports the new [set-based label selector](/docs/concepts/overview/working-with-objects/labels/#set-based-requirement).
-It’s mainly used by [`Deployment`](/docs/concepts/workloads/controllers/deployment/) as a mechanism to orchestrate pod creation, deletion and updates.
-Note that we recommend using Deployments instead of directly using Replica Sets, unless you require custom update orchestration or don’t require updates at all.
+It's mainly used by [Deployment](/docs/concepts/workloads/controllers/deployment/) as a mechanism to orchestrate pod creation, deletion and updates.
+Note that we recommend using Deployments instead of directly using Replica Sets, unless you require custom update orchestration or don't require updates at all.
 
 
 ### Deployment (Recommended)
diff --git a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index 58fe7c4b8c..4dd195bcf5 100644
--- a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -97,7 +97,7 @@ If we want an incoming Pod to be evenly spread with existing Pods across zones,
 
 {{< codenew file="pods/topology-spread-constraints/one-constraint.yaml" >}}
 
-`topologyKey: zone` implies the even distribution will only be applied to the nodes which have label pair "zone:&lt;any value&gt;" present. `whenUnsatisfiable: DoNotSchedule` tells the scheduler to let it stay pending if the incoming Pod can’t satisfy the constraint.
+`topologyKey: zone` implies the even distribution will only be applied to the nodes which have label pair "zone:&lt;any value&gt;" present. `whenUnsatisfiable: DoNotSchedule` tells the scheduler to let it stay pending if the incoming Pod can't satisfy the constraint.
 
 If the scheduler placed this incoming Pod into "zoneA", the Pods distribution would become [3, 1], hence the actual skew is 2 (3 - 1) - which violates `maxSkew: 1`. In this example, the incoming Pod can only be placed onto "zoneB":
 
@@ -115,7 +115,7 @@ You can tweak the Pod spec to meet various kinds of requirements:
 
 - Change `maxSkew` to a bigger value like "2" so that the incoming Pod can be placed onto "zoneA" as well.
 - Change `topologyKey` to "node" so as to distribute the Pods evenly across nodes instead of zones. In the above example, if `maxSkew` remains "1", the incoming Pod can only be placed onto "node4".
-- Change `whenUnsatisfiable: DoNotSchedule` to `whenUnsatisfiable: ScheduleAnyway` to ensure the incoming Pod to be always schedulable (suppose other scheduling APIs are satisfied). However, it’s preferred to be placed onto the topology domain which has fewer matching Pods. (Be aware that this preferability is jointly normalized with other internal scheduling priorities like resource usage ratio, etc.)
+- Change `whenUnsatisfiable: DoNotSchedule` to `whenUnsatisfiable: ScheduleAnyway` to ensure the incoming Pod to be always schedulable (suppose other scheduling APIs are satisfied). However, it's preferred to be placed onto the topology domain which has fewer matching Pods. (Be aware that this preferability is jointly normalized with other internal scheduling priorities like resource usage ratio, etc.)
 
 ### Example: Multiple TopologySpreadConstraints
 
@@ -164,7 +164,7 @@ There are some implicit conventions worth noting here:
   1. the Pods located on those nodes do not impact `maxSkew` calculation - in the above example, suppose "node1" does not have label "zone", then the 2 Pods will be disregarded, hence the incoming Pod will be scheduled into "zoneA".
   2. the incoming Pod has no chances to be scheduled onto this kind of nodes - in the above example, suppose a "node5" carrying label `{zone-typo: zoneC}` joins the cluster, it will be bypassed due to the absence of label key "zone".
 
-- Be aware of what will happen if the incoming Pod’s `topologySpreadConstraints[*].labelSelector` doesn’t match its own labels. In the above example, if we remove the incoming Pod’s labels, it can still be placed onto "zoneB" since the constraints are still satisfied. However, after the placement, the degree of imbalance of the cluster remains unchanged - it’s still zoneA having 2 Pods which hold label {foo:bar}, and zoneB having 1 Pod which holds label {foo:bar}. So if this is not what you expect, we recommend the workload’s `topologySpreadConstraints[*].labelSelector` to match its own labels.
+- Be aware of what will happen if the incomingPod's `topologySpreadConstraints[*].labelSelector` doesn't match its own labels. In the above example, if we remove the incoming Pod's labels, it can still be placed onto "zoneB" since the constraints are still satisfied. However, after the placement, the degree of imbalance of the cluster remains unchanged - it's still zoneA having 2 Pods which hold label {foo:bar}, and zoneB having 1 Pod which holds label {foo:bar}. So if this is not what you expect, we recommend the workload's `topologySpreadConstraints[*].labelSelector` to match its own labels.
 
 - If the incoming Pod has `spec.nodeSelector` or `spec.affinity.nodeAffinity` defined, nodes not matching them will be bypassed.
 
diff --git a/content/en/docs/contribute/advanced.md b/content/en/docs/contribute/advanced.md
index 52ae7b0efd..2bddacbc3f 100644
--- a/content/en/docs/contribute/advanced.md
+++ b/content/en/docs/contribute/advanced.md
@@ -184,8 +184,8 @@ Begin and end meetings on time.
 
 ### Recording meetings on Zoom
 
-When you’re ready to start the recording, click Record to Cloud.
+When you're ready to start the recording, click Record to Cloud.
 
-When you’re ready to stop recording, click Stop.
+When you're ready to stop recording, click Stop.
 
 The video uploads automatically to YouTube.
diff --git a/content/en/docs/contribute/generate-ref-docs/kubectl.md b/content/en/docs/contribute/generate-ref-docs/kubectl.md
index ea6065472e..80552144dd 100644
--- a/content/en/docs/contribute/generate-ref-docs/kubectl.md
+++ b/content/en/docs/contribute/generate-ref-docs/kubectl.md
@@ -127,7 +127,7 @@ Monitor your cherry-pick pull request until it is merged into the release branch
 
 {{< note >}}
 Proposing a cherry pick requires that you have permission to set a label and a
-milestone in your pull request. If you don’t have those permissions, you will
+milestone in your pull request. If you don't have those permissions, you will
 need to work with someone who can set the label and milestone for you.
 {{< /note >}}
 
diff --git a/content/en/docs/contribute/participate/pr-wranglers.md b/content/en/docs/contribute/participate/pr-wranglers.md
index ba4f2925c2..00c2ebcdab 100644
--- a/content/en/docs/contribute/participate/pr-wranglers.md
+++ b/content/en/docs/contribute/participate/pr-wranglers.md
@@ -20,7 +20,7 @@ Each day in a week-long shift as PR Wrangler:
 - Review [open pull requests](https://github.com/kubernetes/website/pulls) for quality and adherence to the [Style](/docs/contribute/style/style-guide/) and [Content](/docs/contribute/style/content-guide/) guides.
     - Start with the smallest PRs (`size/XS`) first, and end with the largest (`size/XXL`). Review as many PRs as you can.
 - Make sure PR contributors sign the [CLA](https://github.com/kubernetes/community/blob/master/CLA.md).
-    - Use [this](https://github.com/zparnold/k8s-docs-pr-botherer) script to remind contributors that haven’t signed the CLA to do so.
+    - Use [this](https://github.com/zparnold/k8s-docs-pr-botherer) script to remind contributors that haven't signed the CLA to do so.
 - Provide feedback on changes and ask for technical reviews from members of other SIGs.
     - Provide inline suggestions on the PR for the proposed content changes.
     - If you need to verify content, comment on the PR and request more details.
diff --git a/content/en/docs/contribute/style/style-guide.md b/content/en/docs/contribute/style/style-guide.md
index 44653708ec..9b99ba3abc 100644
--- a/content/en/docs/contribute/style/style-guide.md
+++ b/content/en/docs/contribute/style/style-guide.md
@@ -447,7 +447,7 @@ Use three hyphens (`---`) to create a horizontal rule. Use horizontal rules for
 {{< table caption = "Do and Don't - Links" >}}
 Do | Don't
 :--| :-----
-Write hyperlinks that give you context for the content they link to. For example: Certain ports are open on your machines. See <a href="#check-required-ports">Check required ports</a> for more details. | Use ambiguous terms such as “click here”. For example: Certain ports are open on your machines. See <a href="#check-required-ports">here</a> for more details.
+Write hyperlinks that give you context for the content they link to. For example: Certain ports are open on your machines. See <a href="#check-required-ports">Check required ports</a> for more details. | Use ambiguous terms such as "click here". For example: Certain ports are open on your machines. See <a href="#check-required-ports">here</a> for more details.
 Write Markdown-style links: `[link text](URL)`. For example: `[Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/#table-captions)` and the output is [Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/#table-captions). | Write HTML-style links: `<a href="/media/examples/link-element-example.css" target="_blank">Visit our tutorial!</a>`, or create links that open in new tabs or windows. For example: `[example website](https://example.com){target="_blank"}`
 {{< /table >}}
 
diff --git a/content/en/docs/home/_index.md b/content/en/docs/home/_index.md
index 8864e4781a..7ee48721f2 100644
--- a/content/en/docs/home/_index.md
+++ b/content/en/docs/home/_index.md
@@ -53,7 +53,7 @@ cards:
   button_path: /docs/reference
 - name: contribute
   title: Contribute to the docs
-  description: Anyone can contribute, whether you’re new to the project or you’ve been around a long time.
+  description: Anyone can contribute, whether you're new to the project or you've been around a long time.
   button: Contribute to the docs
   button_path: /docs/contribute
 - name: release-notes
@@ -64,4 +64,4 @@ cards:
 - name: about
   title: About the documentation
   description: This website contains documentation for the current and previous 4 versions of Kubernetes.
----
\ No newline at end of file
+---
diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md
index 18a83cac6e..7bbeb3f63d 100644
--- a/content/en/docs/reference/access-authn-authz/authentication.md
+++ b/content/en/docs/reference/access-authn-authz/authentication.md
@@ -30,10 +30,10 @@ In this regard, _Kubernetes does not have objects which represent normal user
 accounts._ Normal users cannot be added to a cluster through an API call.
 
 Even though normal user cannot be added via an API call, but any user that
-presents a valid certificate signed by the cluster’s certificate authority
+presents a valid certificate signed by the cluster's certificate authority
 (CA) is considered authenticated. In this configuration, Kubernetes determines
-the username from the common name field in the ‘subject’ of the cert (e.g.,
-“/CN=bob”). From there, the role based access control (RBAC) sub-system would
+the username from the common name field in the 'subject' of the cert (e.g.,
+"/CN=bob"). From there, the role based access control (RBAC) sub-system would
 determine whether the user is authorized to perform a specific operation on a
 resource. For more details, refer to the normal users topic in
 [certificate request](/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user)
@@ -349,7 +349,7 @@ Kubernetes does not provide an OpenID Connect Identity Provider.
 You can use an existing public OpenID Connect Identity Provider (such as Google, or
 [others](https://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers)).
 Or, you can run your own Identity Provider, such as CoreOS [dex](https://github.com/coreos/dex),
-[Keycloak](https://github.com/keycloak/keycloak), 
+[Keycloak](https://github.com/keycloak/keycloak),
 CloudFoundry [UAA](https://github.com/cloudfoundry/uaa), or
 Tremolo Security's [OpenUnison](https://github.com/tremolosecurity/openunison).
 
diff --git a/content/en/docs/reference/glossary/admission-controller.md b/content/en/docs/reference/glossary/admission-controller.md
index 352ccb4f52..9ca7526609 100644
--- a/content/en/docs/reference/glossary/admission-controller.md
+++ b/content/en/docs/reference/glossary/admission-controller.md
@@ -15,7 +15,7 @@ A piece of code that intercepts requests to the Kubernetes API server prior to p
 
 <!--more-->
 
-Admission controllers are configurable for the Kubernetes API server and may be “validating”, “mutating”, or
+Admission controllers are configurable for the Kubernetes API server and may be "validating", "mutating", or
 both. Any admission controller may reject the request. Mutating controllers may modify the objects they admit;
 validating controllers may not.
 
diff --git a/content/en/docs/reference/glossary/kubelet.md b/content/en/docs/reference/glossary/kubelet.md
index 0c95ac846e..92073a5347 100755
--- a/content/en/docs/reference/glossary/kubelet.md
+++ b/content/en/docs/reference/glossary/kubelet.md
@@ -6,13 +6,13 @@ full_link: /docs/reference/generated/kubelet
 short_description: >
   An agent that runs on each node in the cluster. It makes sure that containers are running in a pod.
 
-aka: 
+aka:
 tags:
 - fundamental
 - core-object
 ---
  An agent that runs on each {{< glossary_tooltip text="node" term_id="node" >}} in the cluster. It makes sure that {{< glossary_tooltip text="containers" term_id="container" >}} are running in a {{< glossary_tooltip text="Pod" term_id="pod" >}}.
 
-<!--more--> 
+<!--more-->
 
-The kubelet takes a set of PodSpecs that are provided through various mechanisms and ensures that the containers described in those PodSpecs are running and healthy. The kubelet doesn’t manage containers which were not created by Kubernetes.
+The kubelet takes a set of PodSpecs that are provided through various mechanisms and ensures that the containers described in those PodSpecs are running and healthy. The kubelet doesn't manage containers which were not created by Kubernetes.
diff --git a/content/en/docs/reference/glossary/node.md b/content/en/docs/reference/glossary/node.md
index fd09ec75b4..4a6df3f8dc 100755
--- a/content/en/docs/reference/glossary/node.md
+++ b/content/en/docs/reference/glossary/node.md
@@ -6,14 +6,14 @@ full_link: /docs/concepts/architecture/nodes/
 short_description: >
   A node is a worker machine in Kubernetes.
 
-aka: 
+aka:
 tags:
 - fundamental
 ---
  A node is a worker machine in Kubernetes.
 
-<!--more--> 
+<!--more-->
 
 A worker node may be a VM or physical machine, depending on the cluster. It has local daemons or services necessary to run {{< glossary_tooltip text="Pods" term_id="pod" >}} and is managed by the control plane. The daemons on a node include {{< glossary_tooltip text="kubelet" term_id="kubelet" >}}, {{< glossary_tooltip text="kube-proxy" term_id="kube-proxy" >}}, and a container runtime implementing the {{< glossary_tooltip text="CRI" term_id="cri" >}} such as {{< glossary_tooltip term_id="docker" >}}.
 
-In early Kubernetes versions, Nodes were called “Minions”.
+In early Kubernetes versions, Nodes were called "Minions".
diff --git a/content/en/docs/reference/issues-security/security.md b/content/en/docs/reference/issues-security/security.md
index 2d16e37662..43b01a4172 100644
--- a/content/en/docs/reference/issues-security/security.md
+++ b/content/en/docs/reference/issues-security/security.md
@@ -23,7 +23,7 @@ You can also subscribe to an RSS feed of the above using [this link](https://gro
 
 ## Report a Vulnerability
 
-We’re extremely grateful for security researchers and users that report vulnerabilities to the Kubernetes Open Source Community. All reports are thoroughly investigated by a set of community volunteers.
+We're extremely grateful for security researchers and users that report vulnerabilities to the Kubernetes Open Source Community. All reports are thoroughly investigated by a set of community volunteers.
 
 To make a report, submit your vulnerability to the [Kubernetes bug bounty program](https://hackerone.com/kubernetes). This allows triage and handling of the vulnerability with standardized response times.
 
diff --git a/content/en/docs/reference/setup-tools/kubeadm/_index.md b/content/en/docs/reference/setup-tools/kubeadm/_index.md
index 32c5c6f0a2..d747c05124 100755
--- a/content/en/docs/reference/setup-tools/kubeadm/_index.md
+++ b/content/en/docs/reference/setup-tools/kubeadm/_index.md
@@ -8,7 +8,7 @@ card:
   weight: 40
 ---
 
-<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">Kubeadm is a tool built to provide `kubeadm init` and `kubeadm join` as best-practice “fast paths” for creating Kubernetes clusters.
+<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">Kubeadm is a tool built to provide `kubeadm init` and `kubeadm join` as best-practice "fast paths" for creating Kubernetes clusters.
 
 kubeadm performs the actions necessary to get a minimum viable cluster up and running. By design, it cares only about bootstrapping, not about provisioning machines. Likewise, installing various nice-to-have addons, like the Kubernetes Dashboard, monitoring solutions, and cloud-specific addons, is not in scope.
 
diff --git a/content/en/docs/reference/using-api/api-concepts.md b/content/en/docs/reference/using-api/api-concepts.md
index 5accb778ba..e0f813c462 100644
--- a/content/en/docs/reference/using-api/api-concepts.md
+++ b/content/en/docs/reference/using-api/api-concepts.md
@@ -758,8 +758,8 @@ For watch, the semantics of resource version are:
 
 The meaning of the watch semantics are:
 
-- **Get State and Start at Most Recent:** Start a watch at the most recent resource version, which must be consistent (i.e. served from etcd via a quorum read). To establish initial state, the watch begins with synthetic “Added” events of all resources instances that exist at the starting resource version. All following watch events are for all changes that occurred after the resource version the watch started at.
-- **Get State and Start at Any:** Warning: Watches initialize this way may return arbitrarily stale data! Please review this semantic before using it, and favor the other semantics where possible. Start a watch at any resource version, the most recent resource version available is preferred, but not required; any starting resource version is allowed. It is possible for the watch to start at a much older resource version that the client has previously observed, particularly in high availability configurations, due to partitions or stale caches. Clients that cannot tolerate this should not start a watch with this semantic. To establish initial state, the watch begins with synthetic “Added” events for all resources instances that exist at the starting resource version. All following watch events are for all changes that occurred after the resource version the watch started at.
+- **Get State and Start at Most Recent:** Start a watch at the most recent resource version, which must be consistent (i.e. served from etcd via a quorum read). To establish initial state, the watch begins with synthetic "Added" events of all resources instances that exist at the starting resource version. All following watch events are for all changes that occurred after the resource version the watch started at.
+- **Get State and Start at Any:** Warning: Watches initialize this way may return arbitrarily stale data! Please review this semantic before using it, and favor the other semantics where possible. Start a watch at any resource version, the most recent resource version available is preferred, but not required; any starting resource version is allowed. It is possible for the watch to start at a much older resource version that the client has previously observed, particularly in high availability configurations, due to partitions or stale caches. Clients that cannot tolerate this should not start a watch with this semantic. To establish initial state, the watch begins with synthetic "Added" events for all resources instances that exist at the starting resource version. All following watch events are for all changes that occurred after the resource version the watch started at.
 - **Start at Exact:** Start a watch at an exact resource version. The watch events are for all changes after the provided resource version. Unlike "Get State and Start at Most Recent" and "Get State and Start at Any", the watch is not started with synthetic "Added" events for the provided resource version. The client is assumed to already have the initial state at the starting resource version since the client provided the resource version.
 
 ### "410 Gone" responses
diff --git a/content/en/docs/setup/learning-environment/minikube.md b/content/en/docs/setup/learning-environment/minikube.md
index 009be9adc8..d0b07b046a 100644
--- a/content/en/docs/setup/learning-environment/minikube.md
+++ b/content/en/docs/setup/learning-environment/minikube.md
@@ -55,7 +55,7 @@ This brief demo guides you on how to start, use, and delete Minikube locally. Fo
 
 2. Now, you can interact with your cluster using kubectl. For more information, see [Interacting with Your Cluster](#interacting-with-your-cluster).
 
-   Let’s create a Kubernetes Deployment using an existing image named `echoserver`, which is a simple HTTP server and expose it on port 8080 using `--port`.
+   Let's create a Kubernetes Deployment using an existing image named `echoserver`, which is a simple HTTP server and expose it on port 8080 using `--port`.
 
    ```shell
    kubectl create deployment hello-minikube --image=k8s.gcr.io/echoserver:1.10
diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index 77e7bb577a..e44a57e0d2 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -81,7 +81,7 @@ apt-get update && apt-get install -y \
 ```
 
 ```shell
-# Add Docker’s official GPG key:
+# Add Docker's official GPG key:
 curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
 ```
 
@@ -339,7 +339,7 @@ apt-get update && apt-get install -y apt-transport-https ca-certificates curl so
 ```
 
 ```shell
-## Add Docker’s official GPG key
+## Add Docker's official GPG key
 curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
 ```
 
diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index 82184f7784..7043ae0912 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -259,10 +259,10 @@ Cluster DNS (CoreDNS) will not start up before a network is installed.**
 
 - Take care that your Pod network must not overlap with any of the host
   networks: you are likely to see problems if there is any overlap.
-  (If you find a collision between your network plugin’s preferred Pod
+  (If you find a collision between your network plugin's preferred Pod
   network and some of your host networks, you should think of a suitable
   CIDR block to use instead, then use that during `kubeadm init` with
-  `--pod-network-cidr` and as a replacement in your network plugin’s YAML).
+  `--pod-network-cidr` and as a replacement in your network plugin's YAML).
 
 - By default, `kubeadm` sets up your cluster to use and enforce use of
   [RBAC](/docs/reference/access-authn-authz/rbac/) (role based access
diff --git a/content/en/docs/tasks/access-application-cluster/connecting-frontend-backend.md b/content/en/docs/tasks/access-application-cluster/connecting-frontend-backend.md
index 725afbfb89..bd54c71cf6 100644
--- a/content/en/docs/tasks/access-application-cluster/connecting-frontend-backend.md
+++ b/content/en/docs/tasks/access-application-cluster/connecting-frontend-backend.md
@@ -150,7 +150,7 @@ so that you can change the configuration more easily.
 
 ## Interact with the frontend Service
 
-Once you’ve created a Service of type LoadBalancer, you can use this
+Once you've created a Service of type LoadBalancer, you can use this
 command to find the external IP:
 
 ```shell
diff --git a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
index 6d5363ee58..e72c86255a 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md
@@ -191,7 +191,7 @@ affect the HTTP liveness probe.
 A third type of liveness probe uses a TCP socket. With this configuration, the
 kubelet will attempt to open a socket to your container on the specified port.
 If it can establish a connection, the container is considered healthy, if it
-can’t it is considered a failure.
+can't it is considered a failure.
 
 {{< codenew file="pods/probe/tcp-liveness-readiness.yaml" >}}
 
@@ -284,7 +284,7 @@ Sometimes, applications are temporarily unable to serve traffic.
 For example, an application might need to load large data or configuration
 files during startup, or depend on external services after startup.
 In such cases, you don't want to kill the application,
-but you don’t want to send it requests either. Kubernetes provides
+but you don't want to send it requests either. Kubernetes provides
 readiness probes to detect and mitigate these situations. A pod with containers
 reporting that they are not ready does not receive traffic through Kubernetes
 Services.
@@ -348,7 +348,7 @@ set "Host" in httpHeaders instead.
 in the range 1 to 65535.
 
 For an HTTP probe, the kubelet sends an HTTP request to the specified path and
-port to perform the check. The kubelet sends the probe to the pod’s IP address,
+port to perform the check. The kubelet sends the probe to the pod's IP address,
 unless the address is overridden by the optional `host` field in `httpGet`. If
 `scheme` field is set to `HTTPS`, the kubelet sends an HTTPS request skipping the
 certificate verification. In most scenarios, you do not want to set the `host` field.
diff --git a/content/en/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md b/content/en/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
index 60e45804c9..2644dfd3cb 100644
--- a/content/en/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
+++ b/content/en/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
@@ -260,8 +260,8 @@ metadata:
 ```
 When a Pod consumes a PersistentVolume that has a GID annotation, the annotated GID
 is applied to all containers in the Pod in the same way that GIDs specified in the
-Pod’s security context are. Every GID, whether it originates from a PersistentVolume
-annotation or the Pod’s specification, is applied to the first process run in
+Pod's security context are. Every GID, whether it originates from a PersistentVolume
+annotation or the Pod's specification, is applied to the first process run in
 each container.
 
 {{< note >}}
diff --git a/content/en/docs/tasks/extend-kubectl/kubectl-plugins.md b/content/en/docs/tasks/extend-kubectl/kubectl-plugins.md
index 6052bff9af..216145a744 100644
--- a/content/en/docs/tasks/extend-kubectl/kubectl-plugins.md
+++ b/content/en/docs/tasks/extend-kubectl/kubectl-plugins.md
@@ -365,7 +365,7 @@ on Linux, Chocolatey on Windows, and Homebrew on macOS. Any package
 manager will be suitable if it can place new executables placed somewhere
 in the user's `PATH`.
 As a plugin author, if you pick this option then you also have the burden
-of updating your kubectl plugin’s distribution package across multiple
+of updating your kubectl plugin's distribution package across multiple
 platforms for each release.
 
 ### Source code {#distributing-source-code}
diff --git a/content/en/docs/tasks/inject-data-application/distribute-credentials-secure.md b/content/en/docs/tasks/inject-data-application/distribute-credentials-secure.md
index 40e74d36b1..e84163cb52 100644
--- a/content/en/docs/tasks/inject-data-application/distribute-credentials-secure.md
+++ b/content/en/docs/tasks/inject-data-application/distribute-credentials-secure.md
@@ -223,7 +223,7 @@ This functionality is available in Kubernetes v1.6 and later.
    kubectl create secret generic test-secret --from-literal=username='my-app' --from-literal=password='39528$vdg7Jb'
    ```
 
-*  Use envFrom to define all of the Secret’s data as container environment variables. The key from the Secret becomes the environment variable name in the Pod.
+*  Use envFrom to define all of the Secret's data as container environment variables. The key from the Secret becomes the environment variable name in the Pod.
 
     {{< codenew file="pods/inject/pod-secret-envFrom.yaml" >}}
 
diff --git a/content/en/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information.md b/content/en/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information.md
index 4ab41f2a23..a46e065169 100644
--- a/content/en/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information.md
+++ b/content/en/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information.md
@@ -200,30 +200,30 @@ The following information is available to containers through environment
 variables and `downwardAPI` volumes:
 
 * Information available via `fieldRef`:
-  * `metadata.name` - the pod’s name
-  * `metadata.namespace` - the pod’s namespace
-  * `metadata.uid` - the pod’s UID, available since v1.8.0-alpha.2
-  * `metadata.labels['<KEY>']` - the value of the pod’s label `<KEY>` (for example, `metadata.labels['mylabel']`); available in Kubernetes 1.9+
-  * `metadata.annotations['<KEY>']` - the value of the pod’s annotation `<KEY>` (for example, `metadata.annotations['myannotation']`); available in Kubernetes 1.9+
+  * `metadata.name` - the pod's name
+  * `metadata.namespace` - the pod's namespace
+  * `metadata.uid` - the pod's UID, available since v1.8.0-alpha.2
+  * `metadata.labels['<KEY>']` - the value of the pod's label `<KEY>` (for example, `metadata.labels['mylabel']`); available in Kubernetes 1.9+
+  * `metadata.annotations['<KEY>']` - the value of the pod's annotation `<KEY>` (for example, `metadata.annotations['myannotation']`); available in Kubernetes 1.9+
 * Information available via `resourceFieldRef`:
-  * A Container’s CPU limit
-  * A Container’s CPU request
-  * A Container’s memory limit
-  * A Container’s memory request
-  * A Container’s ephemeral-storage limit, available since v1.8.0-beta.0
-  * A Container’s ephemeral-storage request, available since v1.8.0-beta.0
+  * A Container's CPU limit
+  * A Container's CPU request
+  * A Container's memory limit
+  * A Container's memory request
+  * A Container's ephemeral-storage limit, available since v1.8.0-beta.0
+  * A Container's ephemeral-storage request, available since v1.8.0-beta.0
 
 In addition, the following information is available through
 `downwardAPI` volume `fieldRef`:
 
-* `metadata.labels` - all of the pod’s labels, formatted as `label-key="escaped-label-value"` with one label per line
-* `metadata.annotations` - all of the pod’s annotations, formatted as `annotation-key="escaped-annotation-value"` with one annotation per line
+* `metadata.labels` - all of the pod's labels, formatted as `label-key="escaped-label-value"` with one label per line
+* `metadata.annotations` - all of the pod's annotations, formatted as `annotation-key="escaped-annotation-value"` with one annotation per line
 
 The following information is available through environment variables:
 
-* `status.podIP` - the pod’s IP address
-* `spec.serviceAccountName` - the pod’s service account name, available since v1.4.0-alpha.3
-* `spec.nodeName` - the node’s name, available since v1.4.0-alpha.3
+* `status.podIP` - the pod's IP address
+* `spec.serviceAccountName` - the pod's service account name, available since v1.4.0-alpha.3
+* `spec.nodeName` - the node's name, available since v1.4.0-alpha.3
 * `status.hostIP` - the node's IP, available since v1.7.0-alpha.1
 
 {{< note >}}
diff --git a/content/en/docs/tasks/tools/install-minikube.md b/content/en/docs/tasks/tools/install-minikube.md
index a5e7ed0c2b..d8b5b101c4 100644
--- a/content/en/docs/tasks/tools/install-minikube.md
+++ b/content/en/docs/tasks/tools/install-minikube.md
@@ -90,7 +90,7 @@ Before using `--driver=none`, consult [this documentation](https://minikube.sigs
 Minikube also supports a `vm-driver=podman` similar to the Docker driver. Podman run as superuser privilege (root user) is the best way to ensure that your containers have full access to any feature available on your system.
 
 {{< caution >}}
-The `podman` driver requires running the containers as root because regular user accounts don’t have full access to all operating system features that their containers might need to run.
+The `podman` driver requires running the containers as root because regular user accounts don't have full access to all operating system features that their containers might need to run.
 {{< /caution >}}
 
 ### Install Minikube using a package
diff --git a/content/en/docs/tutorials/stateful-application/cassandra.md b/content/en/docs/tutorials/stateful-application/cassandra.md
index 72d3f928a8..6eb5e15dae 100644
--- a/content/en/docs/tutorials/stateful-application/cassandra.md
+++ b/content/en/docs/tutorials/stateful-application/cassandra.md
@@ -243,7 +243,7 @@ This setting is for your safety because your data is more valuable than automati
 
 {{< warning >}}
 Depending on the storage class and reclaim policy, deleting the *PersistentVolumeClaims* may cause the associated volumes
-to also be deleted. Never assume you’ll be able to access data if its volume claims are deleted.
+to also be deleted. Never assume you'll be able to access data if its volume claims are deleted.
 {{< /warning >}}
 
 1. Run the following commands (chained together into a single command) to delete everything in the Cassandra StatefulSet:

From 0836d67ef6434d1b164e26fac5e53cf64eab9e2a Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Tue, 11 Aug 2020 21:42:37 +0800
Subject: [PATCH 024/496] [zh] Tweak localization for stateful set task

---
 .../run-replicated-stateful-application.md    | 720 +++++++++++-------
 1 file changed, 459 insertions(+), 261 deletions(-)

diff --git a/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md b/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md
index 368f7e0486..8a75691cb9 100644
--- a/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md
+++ b/content/zh/docs/tasks/run-application/run-replicated-stateful-application.md
@@ -3,7 +3,7 @@ title: 运行一个有状态的应用程序
 content_type: tutorial
 weight: 30
 ---
-<!-- ---
+<!--
 reviewers:
 - enisoc
 - erictune
@@ -14,26 +14,34 @@ reviewers:
 title: Run a Replicated Stateful Application
 content_type: tutorial
 weight: 30
---- -->
+-->
 
 <!-- overview -->
 
-<!-- This page shows how to run a replicated stateful application using a
+<!--
+This page shows how to run a replicated stateful application using a
 [StatefulSet](/docs/concepts/workloads/controllers/statefulset/) controller.
 The example is a MySQL single-master topology with multiple slaves running
-asynchronous replication. -->
-该页面显示如何使用[StatefulSet](/docs/concepts/workloads/controllers/statefulset/) 控制器去运行一个有状态的应用程序。此例是一主多从的 MySQL 集群。
+asynchronous replication.
+-->
+本页展示如何使用 [StatefulSet](/zh/docs/concepts/workloads/controllers/statefulset/)
+控制器运行一个有状态的应用程序。此例是一主多从、异步复制的 MySQL 集群。
 
-<!-- Note that **this is not a production configuration**.
+<!--
+**this is not a production configuration**.
 In particular, MySQL settings remain on insecure defaults to keep the focus
-on general patterns for running stateful applications in Kubernetes. -->
-请注意 **这不是生产配置**。
-重点是， MySQL 设置保留在不安全的默认值上，使重点放在 Kubernetes 中运行有状态应用程序的常规模式。
-
-
+on general patterns for running stateful applications in Kubernetes.
+-->
+{{< note >}}
+**这不是生产环境下配置**。
+尤其注意，MySQL 设置都使用的是不安全的默认值，这是因为我们想把重点放在 Kubernetes
+中运行有状态应用程序的一般模式上。
+{{< /note >}}
 
 ## {{% heading "prerequisites" %}}
 
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+{{< include "default-storage-class-prereqs.md" >}}
 
 <!--
 * This tutorial assumes you are familiar with
@@ -43,46 +51,47 @@ on general patterns for running stateful applications in Kubernetes. -->
   [Services](/docs/concepts/services-networking/service/), and
   [ConfigMaps](/docs/tasks/configure-pod-container/configure-pod-configmap/).
 * Some familiarity with MySQL helps, but this tutorial aims to present
-  general patterns that should be useful for other systems. -->
-* {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-* {{< include "default-storage-class-prereqs.md" >}}
-* 本教程假定您熟悉
-  [PersistentVolumes](/docs/concepts/storage/persistent-volumes/)
-  与 [StatefulSets](/docs/concepts/workloads/controllers/statefulset/),
-  以及其他核心概念，例如[Pods](/docs/concepts/workloads/pods/pod/),
-  [Services](/docs/concepts/services-networking/service/), 与
-  [ConfigMaps](/docs/tasks/configure-pod-container/configure-pod-configmap/).
+  general patterns that should be useful for other systems.
+-->
+* 本教程假定你熟悉
+  [PersistentVolumes](/zh/docs/concepts/storage/persistent-volumes/)
+  与 [StatefulSet](/zh/docs/concepts/workloads/controllers/statefulset/),
+  以及其他核心概念，例如 [Pod](/zh/docs/concepts/workloads/pods/)、
+  [服务](/zh/docs/concepts/services-networking/service/) 与
+  [ConfigMap](/zh/docs/tasks/configure-pod-container/configure-pod-configmap/).
 * 熟悉 MySQL 会有所帮助，但是本教程旨在介绍对其他系统应该有用的常规模式。
 
-
-
 ## {{% heading "objectives" %}}
 
-
-<!-- * Deploy a replicated MySQL topology with a StatefulSet controller.
+<!--
+* Deploy a replicated MySQL topology with a StatefulSet controller.
 * Send MySQL client traffic.
 * Observe resistance to downtime.
-* Scale the StatefulSet up and down. -->
-* 使用 StatefulSet 控制器部署复制的 MySQL 拓扑。
-* 发送 MySQL 客户端流量。
-* 观察对宕机的抵抗力。
-* 缩放 StatefulSet 的大小。
-
-
+* Scale the StatefulSet up and down.
+-->
+* 使用 StatefulSet 控制器部署多副本 MySQL 拓扑架构。
+* 发送 MySQL 客户端请求
+* 观察对宕机的抵抗力
+* 扩缩 StatefulSet 的规模
 
 <!-- lessoncontent -->
 
-<!-- ## Deploy MySQL -->
-## 部署 MySQL
+<!--
+## Deploy MySQL
 
-<!-- The example MySQL deployment consists of a ConfigMap, two Services,
-and a StatefulSet. -->
-部署 MySQL 示例，包含一个 ConfigMap，两个 Services，与一个 StatefulSet。
+The example MySQL deployment consists of a ConfigMap, two Services,
+and a StatefulSet.
+-->
+## 部署 MySQL  {#deploy-mysql}
+
+MySQL 示例部署包含一个 ConfigMap、两个 Service 与一个 StatefulSet。
 
 ### ConfigMap
 
-<!-- Create the ConfigMap from the following YAML configuration file: -->
-从以下的 YAML 配置文件创建 ConfigMap ：
+<!--
+Create the ConfigMap from the following YAML configuration file:
+-->
+使用以下的 YAML 配置文件创建 ConfigMap ：
 
 {{< codenew file="application/mysql/mysql-configmap.yaml" >}}
 
@@ -90,25 +99,33 @@ and a StatefulSet. -->
 kubectl apply -f https://k8s.io/examples/application/mysql/mysql-configmap.yaml
 ```
 
-<!-- This ConfigMap provides `my.cnf` overrides that let you independently control
+<!--
+This ConfigMap provides `my.cnf` overrides that let you independently control
 configuration on the MySQL master and slaves.
 In this case, you want the master to be able to serve replication logs to slaves
-and you want slaves to reject any writes that don't come via replication. -->
-这个 ConfigMap 提供 `my.cnf` 覆盖，使您可以独立控制 MySQL 主服务器和从服务器的配置。
-在这种情况下，您希望主服务器能够将复制日志提供给从服务器，并且希望从服务器拒绝任何不是通过复制进行的写操作。
+and you want slaves to reject any writes that don't come via replication. 
+-->
+这个 ConfigMap 提供 `my.cnf` 覆盖设置，使你可以独立控制 MySQL 主服务器和从服务器的配置。
+在这里，你希望主服务器能够将复制日志提供给从服务器，并且希望从服务器拒绝任何不是通过
+复制进行的写操作。
 
-<!-- There's nothing special about the ConfigMap itself that causes different
+<!--
+There's nothing special about the ConfigMap itself that causes different
 portions to apply to different Pods.
 Each Pod decides which portion to look at as it's initializing,
-based on information provided by the StatefulSet controller. -->
-ConfigMap 本身没有什么特别之处，它可以使不同部分应用于不同的 Pod。
-每个 Pod 都会决定在初始化时要看基于 StatefulSet 控制器提供的信息。
+based on information provided by the StatefulSet controller. 
+-->
+ConfigMap 本身没有什么特别之处，因而也不会出现不同部分应用于不同的 Pod 的情况。
+每个 Pod 都会在初始化时基于 StatefulSet 控制器提供的信息决定要查看的部分。
 
-<!-- ### Services -->
-### Services
+<!--
+### Services 
 
-<!-- Create the Services from the following YAML configuration file: -->
-从以下 YAML 配置文件创建服务：
+Create the Services from the following YAML configuration file: 
+-->
+### 服务  {#services}
+
+使用以下 YAML 配置文件创建服务：
 
 {{< codenew file="application/mysql/mysql-services.yaml" >}}
 
@@ -116,29 +133,43 @@ ConfigMap 本身没有什么特别之处，它可以使不同部分应用于不
 kubectl apply -f https://k8s.io/examples/application/mysql/mysql-services.yaml
 ```
 
-<!-- The Headless Service provides a home for the DNS entries that the StatefulSet
+<!--
+The Headless Service provides a home for the DNS entries that the StatefulSet
 controller creates for each Pod that's part of the set.
 Because the Headless Service is named `mysql`, the Pods are accessible by
 resolving `<pod-name>.mysql` from within any other Pod in the same Kubernetes
-cluster and namespace. -->
-Headless Service 给 StatefulSet 控制器为集合中每个 Pod 创建的 DNS 条目提供了一个宿主。因为 Headless Service 名为 `mysql`，所以可以通过在同一 Kubernetes 集群和 namespace 中的任何其他 Pod 内解析 `<pod-name>.mysql` 来访问 Pod。
+cluster and namespace. 
+-->
+这个无头服务给 StatefulSet 控制器为集合中每个 Pod 创建的 DNS 条目提供了一个宿主。
+因为服务名为 `mysql`，所以可以通过在同一 Kubernetes 集群和名字中的任何其他 Pod
+内解析 `<Pod 名称>.mysql` 来访问 Pod。
 
-<!-- The Client Service, called `mysql-read`, is a normal Service with its own
+<!--
+The Client Service, called `mysql-read`, is a normal Service with its own
 cluster IP that distributes connections across all MySQL Pods that report
 being Ready. The set of potential endpoints includes the MySQL master and all
-slaves. -->
-客户端 Service 称为 `mysql-read`，是一种常规 Service，具有其自己的群集 IP，该群集 IP 在报告为就绪的所有MySQL Pod 中分配连接。可能端点的集合包括 MySQL 主节点和所有从节点。
+slaves. 
+-->
+客户端服务称为 `mysql-read`，是一种常规服务，具有其自己的集群 IP。
+该集群 IP 在报告就绪的所有MySQL Pod 之间分配连接。
+可能的端点集合包括 MySQL 主节点和所有从节点。
 
-<!-- Note that only read queries can use the load-balanced Client Service.
+<!--
+Note that only read queries can use the load-balanced Client Service.
 Because there is only one MySQL master, clients should connect directly to the
 MySQL master Pod (through its DNS entry within the Headless Service) to execute
-writes. -->
-请注意，只有读取查询才能使用负载平衡的客户端 Service。因为只有一个 MySQL 主服务器，所以客户端应直接连接到 MySQL 主服务器 Pod (通过其在 Headless Service 中的 DNS 条目)以执行写入操作。
+writes. 
+-->
+请注意，只有读查询才能使用负载平衡的客户端服务。
+因为只有一个 MySQL 主服务器，所以客户端应直接连接到 MySQL 主服务器 Pod
+（通过其在无头服务中的 DNS 条目）以执行写入操作。
 
 ### StatefulSet
 
-<!-- Finally, create the StatefulSet from the following YAML configuration file: -->
-最后，从以下 YAML 配置文件创建 StatefulSet：
+<!--
+Finally, create the StatefulSet from the following YAML configuration file: 
+-->
+最后，使用以下 YAML 配置文件创建 StatefulSet：
 
 {{< codenew file="application/mysql/mysql-statefulset.yaml" >}}
 
@@ -146,15 +177,19 @@ writes. -->
 kubectl apply -f https://k8s.io/examples/application/mysql/mysql-statefulset.yaml
 ```
 
-<!-- You can watch the startup progress by running: -->
-您可以通过运行以下命令查看启动进度：
+<!--
+You can watch the startup progress by running: 
+-->
+你可以通过运行以下命令查看启动进度：
 
 ```shell
 kubectl get pods -l app=mysql --watch
 ```
 
-<!-- After a while, you should see all 3 Pods become Running: -->
-一段时间后，您应该看到所有3个 Pod 都开始运行：
+<!--
+After a while, you should see all 3 Pods become Running: 
+-->
+一段时间后，你应该看到所有 3 个 Pod 进入 Running 状态：
 
 ```
 NAME      READY     STATUS    RESTARTS   AGE
@@ -163,134 +198,205 @@ mysql-1   2/2       Running   0          1m
 mysql-2   2/2       Running   0          1m
 ```
 
-<!-- Press **Ctrl+C** to cancel the watch.
+<!--
+Press **Ctrl+C** to cancel the watch.
 If you don't see any progress, make sure you have a dynamic PersistentVolume
-provisioner enabled as mentioned in the [prerequisites](#before-you-begin). -->
-输入**Ctrl+C**取消观察。
-如果您看不到任何进度，确保已启用[前提条件](#before-you-begin)中提到的动态 PersistentVolume 预配器。
+provisioner enabled as mentioned in the [prerequisites](#before-you-begin). 
+-->
+输入 **Ctrl+C** 结束 watch 操作。
+如果你看不到任何进度，确保已启用[前提条件](#before-you-begin)
+中提到的动态 PersistentVolume 预配器。
 
-
-<!-- This manifest uses a variety of techniques for managing stateful Pods as part of
+<!--
+This manifest uses a variety of techniques for managing stateful Pods as part of
 a StatefulSet. The next section highlights some of these techniques to explain
-what happens as the StatefulSet creates Pods. -->
-该清单使用多种技术来管理作为 StatefulSet 一部分的有状态 Pod。下一节重点介绍其中一些技巧，以解释 StatefulSet 创建 Pod 时发生的状况。
+what happens as the StatefulSet creates Pods. 
+-->
+此清单使用多种技术来管理作为 StatefulSet 的一部分的有状态 Pod。
+下一节重点介绍其中的一些技巧，以解释 StatefulSet 创建 Pod 时发生的状况。
 
-<!-- ## Understanding stateful Pod initialization -->
+<!--
+## Understanding stateful Pod initialization 
+
+The StatefulSet controller starts Pods one at a time, in order by their
+ordinal index.
+It waits until each Pod reports being Ready before starting the next one. 
+-->
 ## 了解有状态的 Pod 初始化
 
-<!-- The StatefulSet controller starts Pods one at a time, in order by their
-ordinal index.
-It waits until each Pod reports being Ready before starting the next one. -->
-StatefulSet 控制器一次按顺序启动 Pod 序数索引。它一直等到每个 Pod 报告就绪为止，然后再开始下一个 Pod。
+StatefulSet 控制器按序数索引顺序地每次启动一个 Pod。
+它一直等到每个 Pod 报告就绪才再启动下一个 Pod。
 
-<!-- In addition, the controller assigns each Pod a unique, stable name of the form
+<!--
+In addition, the controller assigns each Pod a unique, stable name of the form
 `<statefulset-name>-<ordinal-index>`, which results in Pods named `mysql-0`,
-`mysql-1`, and `mysql-2`. -->
-此外，控制器为每个 Pod 分配一个唯一，稳定的表单名称 `<statefulset-name>-<ordinal-index>` 其结果是 Pods 名为 mysql-0，mysql-1 和 mysql-2。
+`mysql-1`, and `mysql-2`. 
+-->
+此外，控制器为每个 Pod 分配一个唯一、稳定的名称，形如 `<statefulset 名称>-<序数索引>`，
+其结果是 Pods 名为 `mysql-0`、`mysql-1` 和 `mysql-2`。
 
-<!-- The Pod template in the above StatefulSet manifest takes advantage of these
-properties to perform orderly startup of MySQL replication. -->
-上述 StatefulSet 清单中的 Pod 模板利用这些属性来执行 MySQL 复制的有序启动。
+<!--
+The Pod template in the above StatefulSet manifest takes advantage of these
+properties to perform orderly startup of MySQL replication. 
+-->
+上述 StatefulSet 清单中的 Pod 模板利用这些属性来执行 MySQL 副本的有序启动。
 
-<!-- ### Generating configuration -->
+<!--
+### Generating configuration 
+
+Before starting any of the containers in the Pod spec, the Pod first runs any
+[Init Containers](/docs/concepts/workloads/pods/init-containers/)
+in the order defined. 
+-->
 ### 生成配置
 
-<!-- Before starting any of the containers in the Pod spec, the Pod first runs any
-[Init Containers](/docs/concepts/workloads/pods/init-containers/)
-in the order defined. -->
-在启动 Pod 规范中的任何容器之前， Pod 首先运行任何[初始容器](/docs/concepts/workloads/pods/init-containers/)按照定义的顺序。
+在启动 Pod 规约中的任何容器之前，Pod 首先按顺序运行所有的
+[Init 容器](/zh/docs/concepts/workloads/pods/init-containers/)。
 
-<!-- The first Init Container, named `init-mysql`, generates special MySQL config
-files based on the ordinal index. -->
-第一个名为 `init-mysql` 的初始化容器，根据序号索引生成特殊的 MySQL 配置文件。
+<!--
+The first Init Container, named `init-mysql`, generates special MySQL config
+files based on the ordinal index. 
+-->
+第一个名为 `init-mysql` 的 Init 容器根据序号索引生成特殊的 MySQL 配置文件。
 
-<!-- The script determines its own ordinal index by extracting it from the end of
+<!--
+The script determines its own ordinal index by extracting it from the end of
 the Pod name, which is returned by the `hostname` command.
 Then it saves the ordinal (with a numeric offset to avoid reserved values)
 into a file called `server-id.cnf` in the MySQL `conf.d` directory.
 This translates the unique, stable identity provided by the StatefulSet
 controller into the domain of MySQL server IDs, which require the same
-properties. -->
-该脚本通过从 Pod 名称的末尾提取索引来确定自己的序号索引，该名称由 `hostname` 命令返回。
-然后将序数(带有数字偏移量以避免保留值)保存到 MySQL conf.d 目录中的文件 server-id.cnf 中。
-这将转换 StatefulSet 提供的唯一，稳定的身份控制器进入需要相同属性的 MySQL 服务器 ID 的范围。
+properties. 
+-->
+该脚本通过从 Pod 名称的末尾提取索引来确定自己的序号索引，而 Pod 名称由 `hostname` 命令返回。
+然后将序数（带有数字偏移量以避免保留值）保存到 MySQL conf.d 目录中的文件 server-id.cnf。
+这一操作将 StatefulSet 所提供的唯一、稳定的标识转换为 MySQL 服务器的 ID，
+而这些 ID 也是需要唯一性、稳定性保证的。
 
-<!-- The script in the `init-mysql` container also applies either `master.cnf` or
+<!--
+The script in the `init-mysql` container also applies either `master.cnf` or
 `slave.cnf` from the ConfigMap by copying the contents into `conf.d`.
 Because the example topology consists of a single MySQL master and any number of
 slaves, the script simply assigns ordinal `0` to be the master, and everyone
-else to be slaves. -->
-通过将内容复制到 conf.d 中，init-mysql 容器中的脚本也可以应用 ConfigMap 中的 master.cnf 或 slave.cnf。由于示例拓扑由单个 MySQL 主节点和任意数量的从节点组成，因此脚本仅将序数 `0` 指定为主节点，而将其他所有人指定为从节点。与 StatefulSet 控制器的[部署顺序保证](/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees/),这样可以确保 MySQL 主服务器在创建从服务器之前已准备就绪，以便它们可以开始复制。
+else to be slaves. 
 
-<!-- ### Cloning existing data -->
+Combined with the StatefulSet controller's
+[deployment order guarantee](/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees/),
+this ensures the MySQL master is Ready before creating slaves, so they can begin
+replicating.
+
+-->
+通过将内容复制到 conf.d 中，`init-mysql` 容器中的脚本也可以应用 ConfigMap 中的
+`master.cnf` 或 `slave.cnf`。
+由于示例部署结构由单个 MySQL 主节点和任意数量的从节点组成，因此脚本仅将序数
+`0` 指定为主节点，而将其他所有节点指定为从节点。
+
+与 StatefulSet 控制器的
+[部署顺序保证](/zh/docs/concepts/workloads/controllers/statefulset/#deployment-and-scaling-guarantees/)
+相结合，
+可以确保 MySQL 主服务器在创建从服务器之前已准备就绪，以便它们可以开始复制。
+
+<!--
+### Cloning existing data 
+
+In general, when a new Pod joins the set as a slave, it must assume the MySQL
+master might already have data on it. It also must assume that the replication
+logs might not go all the way back to the beginning of time. 
+-->
 ### 克隆现有数据
 
-<!-- In general, when a new Pod joins the set as a slave, it must assume the MySQL
-master might already have data on it. It also must assume that the replication
-logs might not go all the way back to the beginning of time. -->
-通常，当新的 Pod 作为从节点加入集合时，必须假定 MySQL 主节点可能已经有数据。还必须假设复制日志可能不会一直追溯到时间的开始。
-<!-- These conservative assumptions are the key to allow a running StatefulSet
-to scale up and down over time, rather than being fixed at its initial size. -->
-这些保守假设的关键是允许正在运行的 StatefulSet 随时间扩大和缩小而不是固定在其初始大小。
+通常，当新 Pod 作为从节点加入集合时，必须假定 MySQL 主节点可能已经有数据。
+还必须假设复制日志可能不会一直追溯到时间的开始。
 
-<!-- The second Init Container, named `clone-mysql`, performs a clone operation on
+<!--
+These conservative assumptions are the key to allow a running StatefulSet
+to scale up and down over time, rather than being fixed at its initial size. 
+-->
+这些保守的假设是允许正在运行的 StatefulSet 随时间扩大和缩小而不是固定在其初始大小的关键。
+
+<!--
+The second Init Container, named `clone-mysql`, performs a clone operation on
 a slave Pod the first time it starts up on an empty PersistentVolume.
 That means it copies all existing data from another running Pod,
-so its local state is consistent enough to begin replicating from the master. -->
-第二个名为 `clone-mysql` 的初始化容器，第一次在从属 Pod 上以空 PersistentVolume 启动时，会对从属 Pod 执行克隆操作。这意味着它将从另一个运行的 Pod 复制所有现有数据，因此其本地状态足够一致，可以开始主从服务器复制。
+so its local state is consistent enough to begin replicating from the master. 
+-->
+第二个名为 `clone-mysql` 的 Init 容器，第一次在带有空 PersistentVolume 的从属 Pod
+上启动时，会在从属 Pod 上执行克隆操作。
+这意味着它将从另一个运行中的 Pod 复制所有现有数据，使此其本地状态足够一致，
+从而可以开始从主服务器复制。
 
-<!-- MySQL itself does not provide a mechanism to do this, so the example uses a
+<!--
+MySQL itself does not provide a mechanism to do this, so the example uses a
 popular open-source tool called Percona XtraBackup.
 During the clone, the source MySQL server might suffer reduced performance.
 To minimize impact on the MySQL master, the script instructs each Pod to clone
 from the Pod whose ordinal index is one lower.
 This works because the StatefulSet controller always ensures Pod `N` is
-Ready before starting Pod `N+1`. -->
-MySQL 本身不提供执行此操作的机制，因此该示例使用了一种流行的开源工具 Percona XtraBackup。
-在克隆期间，源 MySQL 服务器可能会降低性能。
-为了最大程度地减少对 MySQL 主机的影响，该脚本指示每个 Pod 从序号较低的 Pod 中克隆。
+Ready before starting Pod `N+1`. 
+-->
+MySQL 本身不提供执行此操作的机制，因此本示例使用了一种流行的开源工具 Percona XtraBackup。
+在克隆期间，源 MySQL 服务器性能可能会受到影响。
+为了最大程度地减少对 MySQL 主节点的影响，该脚本指示每个 Pod 从序号较低的 Pod 中克隆。
 可以这样做的原因是 StatefulSet 控制器始终确保在启动 Pod N + 1 之前 Pod N 已准备就绪。
 
-<!-- ### Starting replication -->
-### 开始复制
+<!--
+### Starting replication 
 
-<!-- After the Init Containers complete successfully, the regular containers run.
+After the Init Containers complete successfully, the regular containers run.
 The MySQL Pods consist of a `mysql` container that runs the actual `mysqld`
 server, and an `xtrabackup` container that acts as a
-[sidecar](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns). -->
-初始化容器成功完成后，常规容器将运行。
-MySQL Pods 由运行实际 `mysqld` 服务器的 `mysql` 容器和充当[辅助工具](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns)的 xtrabackup 容器组成。
+[sidecar](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns). 
+-->
+### 开始复制
 
-<!-- The `xtrabackup` sidecar looks at the cloned data files and determines if
+Init 容器成功完成后，应用容器将运行。
+MySQL Pod 由运行实际 `mysqld` 服务的 `mysql` 容器和充当
+[辅助工具](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns)
+的 xtrabackup 容器组成。
+
+<!--
+The `xtrabackup` sidecar looks at the cloned data files and determines if
 it's necessary to initialize MySQL replication on the slave.
 If so, it waits for `mysqld` to be ready and then executes the
 `CHANGE MASTER TO` and `START SLAVE` commands with replication parameters
-extracted from the XtraBackup clone files. -->
-`xtrabackup` 辅助工具查看克隆的数据文件，并确定是否有必要在从属服务器上初始化 MySQL 复制。
-如果是这样，它将等待 `mysqld` 准备就绪，然后执行带有从 XtraBackup 克隆文件中提取的复制参数 `CHANGE MASTER TO` 和 `START SLAVE` 命令。
+extracted from the XtraBackup clone files. 
+-->
+`xtrabackup` sidecar 容器查看克隆的数据文件，并确定是否有必要在从服务器上初始化 MySQL 复制。
+如果是这样，它将等待 `mysqld` 准备就绪，然后使用从 XtraBackup 克隆文件中提取的复制参数
+执行  `CHANGE MASTER TO` 和 `START SLAVE` 命令。
 
-<!-- Once a slave begins replication, it remembers its MySQL master and
+<!--
+Once a slave begins replication, it remembers its MySQL master and
 reconnects automatically if the server restarts or the connection dies.
 Also, because slaves look for the master at its stable DNS name
 (`mysql-0.mysql`), they automatically find the master even if it gets a new
-Pod IP due to being rescheduled. -->
-一旦从服务器开始复制后，它会记住其 MySQL 主服务器。并且如果服务器重新启动或连接中断，则会自动重新连接。
-另外，因为从服务器会以其稳定的 DNS 名称查找主服务器(`mysql-0.mysql`)，即使由于重新安排而获得新的 Pod IP，他们也会自动找到主服务器。
+Pod IP due to being rescheduled. 
+-->
+一旦从服务器开始复制后，它会记住其 MySQL 主服务器，并且如果服务器重新启动或连接中断也会自动重新连接。
+另外，因为从服务器会以其稳定的 DNS 名称查找主服务器（`mysql-0.mysql`），
+即使由于重新调度而获得新的 Pod IP，他们也会自动找到主服务器。
 
-<!-- Lastly, after starting replication, the `xtrabackup` container listens for
+<!--
+Lastly, after starting replication, the `xtrabackup` container listens for
 connections from other Pods requesting a data clone.
 This server remains up indefinitely in case the StatefulSet scales up, or in
-case the next Pod loses its PersistentVolumeClaim and needs to redo the clone. -->
-最后，开始复制后，`xtrabackup` 容器监听来自其他 Pod 的连接数据克隆请求。
-如果 StatefulSet 扩大规模，或者下一个 Pod 失去其 PersistentVolumeClaim 并需要重新克隆，则此服务器将无限期保持运行。
+case the next Pod loses its PersistentVolumeClaim and needs to redo the clone. 
+-->
+最后，开始复制后，`xtrabackup` 容器监听来自其他 Pod 的连接，处理其数据克隆请求。
+如果 StatefulSet 扩大规模，或者下一个 Pod 失去其 PersistentVolumeClaim 并需要重新克隆，
+则此服务器将无限期保持运行。
 
-<!-- ## Sending client traffic -->
-## 发送客户端流量
+<!--
+## Sending client traffic 
 
-<!-- You can send test queries to the MySQL master (hostname `mysql-0.mysql`)
+You can send test queries to the MySQL master (hostname `mysql-0.mysql`)
 by running a temporary container with the `mysql:5.7` image and running the
-`mysql` client binary. -->
-您可以通过运行带有 `mysql:5.7` 镜像的临时容器并运行 `mysql` 客户端二进制文件，将测试查询发送到 MySQL 主服务器(主机名 `mysql-0.mysql` )。
+`mysql` client binary. 
+-->
+## 发送客户端请求
+
+你可以通过运行带有 `mysql:5.7` 镜像的临时容器并运行 `mysql` 客户端二进制文件，
+将测试查询发送到 MySQL 主服务器（主机名 `mysql-0.mysql`）。
 
 ```shell
 kubectl run mysql-client --image=mysql:5.7 -i --rm --restart=Never --\
@@ -301,8 +407,10 @@ INSERT INTO test.messages VALUES ('hello');
 EOF
 ```
 
-<!-- Use the hostname `mysql-read` to send test queries to any server that reports
-being Ready: -->
+<!--
+Use the hostname `mysql-read` to send test queries to any server that reports
+being Ready: 
+-->
 使用主机名 `mysql-read` 将测试查询发送到任何报告为就绪的服务器：
 
 ```shell
@@ -310,8 +418,10 @@ kubectl run mysql-client --image=mysql:5.7 -i -t --rm --restart=Never --\
   mysql -h mysql-read -e "SELECT * FROM test.messages"
 ```
 
-<!-- You should get output like this: -->
-您应该获得如下输出：
+<!--
+You should get output like this: 
+-->
+你应该获得如下输出：
 
 ```
 Waiting for pod default/mysql-client to be running, status is Pending, pod ready: false
@@ -323,18 +433,22 @@ Waiting for pod default/mysql-client to be running, status is Pending, pod ready
 pod "mysql-client" deleted
 ```
 
-<!-- To demonstrate that the `mysql-read` Service distributes connections across
-servers, you can run `SELECT @@server_id` in a loop: -->
-为了演示 `mysql-read` 服务在服务器之间分配连接，您可以在循环中运行 `SELECT @@server_id`：
+<!--
+To demonstrate that the `mysql-read` Service distributes connections across
+servers, you can run `SELECT @@server_id` in a loop: 
+-->
+为了演示 `mysql-read` 服务在服务器之间分配连接，你可以在循环中运行 `SELECT @@server_id`：
 
 ```shell
 kubectl run mysql-client-loop --image=mysql:5.7 -i -t --rm --restart=Never --\
   bash -ic "while sleep 1; do mysql -h mysql-read -e 'SELECT @@server_id,NOW()'; done"
 ```
 
-<!-- You should see the reported `@@server_id` change randomly, because a different
-endpoint might be selected upon each connection attempt: -->
-您应该看到报告的 `@@server_id` 发生随机变化，因为每次尝试连接时都可能选择了不同的端点：
+<!--
+You should see the reported `@@server_id` change randomly, because a different
+endpoint might be selected upon each connection attempt: 
+-->
+你应该看到报告的 `@@server_id` 发生随机变化，因为每次尝试连接时都可能选择了不同的端点：
 
 ```
 +-------------+---------------------+
@@ -354,102 +468,139 @@ endpoint might be selected upon each connection attempt: -->
 +-------------+---------------------+
 ```
 
-<!-- You can press **Ctrl+C** when you want to stop the loop, but it's useful to keep
-it running in another window so you can see the effects of the following steps. -->
-要停止循环时可以按 **Ctrl+C** ，但是让它在另一个窗口中运行非常有用，这样您就可以看到以下步骤的效果。
+<!--
+You can press **Ctrl+C** when you want to stop the loop, but it's useful to keep
+it running in another window so you can see the effects of the following steps. 
+-->
+要停止循环时可以按 **Ctrl+C** ，但是让它在另一个窗口中运行非常有用，
+这样你就可以看到以下步骤的效果。
 
-<!-- ## Simulating Pod and Node downtime -->
+<!--
+## Simulating Pod and Node downtime 
+
+To demonstrate the increased availability of reading from the pool of slaves
+instead of a single server, keep the `SELECT @@server_id` loop from above
+running while you force a Pod out of the Ready state. 
+-->
 ## 模拟 Pod 和 Node 的宕机时间
 
-<!-- To demonstrate the increased availability of reading from the pool of slaves
-instead of a single server, keep the `SELECT @@server_id` loop from above
-running while you force a Pod out of the Ready state. -->
-为了证明从从节点缓存而不是单个服务器读取数据的可用性提高，请在使 Pod 退出 Ready 状态时，保持 `SELECT @@server_id` 循环从上面运行。
+为了证明从从节点缓存而不是单个服务器读取数据的可用性提高，请在使 Pod 退出 Ready
+状态时，保持上述 `SELECT @@server_id` 循环一直运行。
 
-<!-- ### Break the Readiness Probe -->
-### 退出 Readiness Probe
+<!--
+### Break the Readiness Probe 
 
-<!-- The [readiness probe](/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#define-readiness-probes)
+The [readiness probe](/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#define-readiness-probes)
 for the `mysql` container runs the command `mysql -h 127.0.0.1 -e 'SELECT 1'`
-to make sure the server is up and able to execute queries. -->
-`mysql` 容器的[readiness probe](/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#define-readiness-probes)运行命令 `mysql -h 127.0.0.1 -e 'SELECT 1'`，以确保服务器已启动并能够执行查询。
+to make sure the server is up and able to execute queries. 
+-->
+### 破坏就绪态探测
 
-<!-- One way to force this readiness probe to fail is to break that command: -->
-迫使 readiness probe 失败的一种方法就是执行该命令：
+`mysql` 容器的[就绪态探测](/zh/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#define-readiness-probes)
+运行命令 `mysql -h 127.0.0.1 -e 'SELECT 1'`，以确保服务器已启动并能够执行查询。
+
+<!--
+One way to force this readiness probe to fail is to break that command: 
+-->
+迫使就绪态探测失败的一种方法就是中止该命令：
 
 ```shell
 kubectl exec mysql-2 -c mysql -- mv /usr/bin/mysql /usr/bin/mysql.off
 ```
 
-<!-- This reaches into the actual container's filesystem for Pod `mysql-2` and
+<!--
+This reaches into the actual container's filesystem for Pod `mysql-2` and
 renames the `mysql` command so the readiness probe can't find it.
 After a few seconds, the Pod should report one of its containers as not Ready,
-which you can check by running: -->
-这进入 Pod `mysql-2` 的实际容器文件系统，并重命名 `mysql` 命令，以便 readiness probe 无法找到它。
-几秒钟后， Pod 会将其中一个容器报告为未就绪，您可以通过运行以下命令进行检查：
+which you can check by running: 
+-->
+此命令会进入 Pod `mysql-2` 的实际容器文件系统，重命名 `mysql` 命令，导致就绪态探测无法找到它。
+几秒钟后， Pod 会报告其中一个容器未就绪。你可以通过运行以下命令进行检查：
 
 ```shell
 kubectl get pod mysql-2
 ```
 
-<!-- Look for `1/2` in the `READY` column: -->
-在 `就绪` 列中查找 ` 1/2` ：
+<!--
+Look for `1/2` in the `READY` column: 
+-->
+在 `READY` 列中查找 ` 1/2` ：
 
 ```
 NAME      READY     STATUS    RESTARTS   AGE
 mysql-2   1/2       Running   0          3m
 ```
 
-<!-- At this point, you should see your `SELECT @@server_id` loop continue to run,
+<!--
+At this point, you should see your `SELECT @@server_id` loop continue to run,
 although it never reports `102` anymore.
 Recall that the `init-mysql` script defined `server-id` as `100 + $ordinal`,
-so server ID `102` corresponds to Pod `mysql-2`. -->
-此时，您应该会看到 `SELECT @@server_id` 循环继续运行，尽管它不再报告 `102` 。
-回想一下，`init-mysql` 脚本将 `server-id` 定义为 `100 + $ordinal` ，因此服务器 ID `102` 对应于 Pod `mysql-2`。
+so server ID `102` corresponds to Pod `mysql-2`. 
+-->
+此时，你应该会看到 `SELECT @@server_id` 循环继续运行，尽管它不再报告 `102`。
+回想一下，`init-mysql` 脚本将 `server-id` 定义为 `100 + $ordinal`，
+因此服务器 ID `102` 对应于 Pod `mysql-2`。
 
-<!-- Now repair the Pod and it should reappear in the loop output
-after a few seconds: -->
+<!--
+Now repair the Pod and it should reappear in the loop output
+after a few seconds: 
+-->
 现在修复 Pod，几秒钟后它应该重新出现在循环输出中：
 
 ```shell
 kubectl exec mysql-2 -c mysql -- mv /usr/bin/mysql.off /usr/bin/mysql
 ```
 
-<!-- ### Delete Pods -->
+<!--
+### Delete Pods 
+
+The StatefulSet also recreates Pods if they're deleted, similar to what a
+ReplicaSet does for stateless Pods. 
+-->
 ### 删除 Pods
 
-<!-- The StatefulSet also recreates Pods if they're deleted, similar to what a
-ReplicaSet does for stateless Pods. -->
 如果删除了 Pod，则 StatefulSet 还会重新创建 Pod，类似于 ReplicaSet 对无状态 Pod 所做的操作。
 
 ```shell
 kubectl delete pod mysql-2
 ```
 
-<!-- The StatefulSet controller notices that no `mysql-2` Pod exists anymore,
+<!--
+The StatefulSet controller notices that no `mysql-2` Pod exists anymore,
 and creates a new one with the same name and linked to the same
 PersistentVolumeClaim.
 You should see server ID `102` disappear from the loop output for a while
-and then return on its own. -->
-StatefulSet 控制器注意到不再存在 `mysql-2` Pod，并创建了一个具有相同名称并链接到相同    PersistentVolumeClaim 的新 Pod。
-您应该看到服务器 ID `102` 从循环输出中消失了一段时间，然后自行返回。
+and then return on its own. 
+-->
+StatefulSet 控制器注意到不再存在 `mysql-2` Pod，于是创建一个具有相同名称并链接到相同
+PersistentVolumeClaim 的新 Pod。
+你应该看到服务器 ID `102` 从循环输出中消失了一段时间，然后又自行出现。
 
-<!-- ### Drain a Node -->
-### 排除 Node
+<!--
+### Drain a Node 
 
-<!-- If your Kubernetes cluster has multiple Nodes, you can simulate Node downtime
+If your Kubernetes cluster has multiple Nodes, you can simulate Node downtime
 (such as when Nodes are upgraded) by issuing a
-[drain](/docs/reference/generated/kubectl/kubectl-commands/#drain). -->
-如果您的 Kubernetes 集群具有多个节点，则可以通过发出以下命令[drain](/docs/reference/generated/kubectl/kubectl-commands/#drain)来模拟节点停机时间(例如升级节点时)。
+[drain](/docs/reference/generated/kubectl/kubectl-commands/#drain). 
+-->
+### 腾空节点   {#drain-a-node}
 
-<!-- First determine which Node one of the MySQL Pods is on: -->
-首先确定 MySQL Pods 之一在哪个节点上：
+如果你的 Kubernetes 集群具有多个节点，则可以通过发出以下
+[drain](/docs/reference/generated/kubectl/kubectl-commands/#drain)
+命令来模拟节点停机（就好像节点在被升级）。
+
+<!--
+First determine which Node one of the MySQL Pods is on: 
+-->
+首先确定 MySQL Pod 之一在哪个节点上：
 
 ```shell
 kubectl get pod mysql-2 -o wide
 ```
 
-<!-- The Node name should show up in the last column: -->
+<!--
+The Node name should show up in the last column: 
+-->
 节点名称应显示在最后一列中：
 
 ```
@@ -457,30 +608,41 @@ NAME      READY     STATUS    RESTARTS   AGE       IP            NODE
 mysql-2   2/2       Running   0          15m       10.244.5.27   kubernetes-node-9l2t
 ```
 
-<!-- Then drain the Node by running the following command, which cordons it so
+<!--
+Then drain the Node by running the following command, which cordons it so
 no new Pods may schedule there, and then evicts any existing Pods.
-Replace `<node-name>` with the name of the Node you found in the last step. -->
-然后通过运行以下命令耗尽节点，该命令将其封锁，以使新的 Pod 不能在那里调度，然后驱逐任何现有的 Pod。
-将 `<node-name>` 替换为在上一步中找到的 Node 的名称。
+Replace `<node-name>` with the name of the Node you found in the last step. 
+-->
+然后通过运行以下命令腾空节点，该命令将其保护起来，以使新的 Pod 不能调度到该节点，
+然后逐出所有现有的 Pod。将 `<节点名称>` 替换为在上一步中找到的节点名称。
 
 
-<!-- This might impact other applications on the Node, so it's best to
-**only do this in a test cluster**. -->
-这可能会影响节点上的其他应用程序，因此最好
-**仅在测试集群中执行此操作**。
+<!--
+This might impact other applications on the Node, so it's best to
+**only do this in a test cluster**. 
 
 ```shell
 kubectl drain <node-name> --force --delete-local-data --ignore-daemonsets
 ```
+-->
+这可能会影响节点上的其他应用程序，因此最好 **仅在测试集群中执行此操作**。
 
-<!-- Now you can watch as the Pod reschedules on a different Node: -->
-现在，您可以观察 Pod 在其他节点上的重新安排：
+```shell
+kubectl drain <节点名称> --force --delete-local-data --ignore-daemonsets
+```
+
+<!--
+Now you can watch as the Pod reschedules on a different Node: 
+-->
+现在，你可以看到 Pod 被重新调度到其他节点上：
 
 ```shell
 kubectl get pod mysql-2 -o wide --watch
 ```
 
-<!-- It should look something like this: -->
+<!--
+It should look something like this: 
+-->
 它看起来应该像这样：
 
 ```
@@ -495,44 +657,60 @@ mysql-2   1/2     Running         0          22s       10.244.5.32   kubernetes-
 mysql-2   2/2     Running         0          30s       10.244.5.32   kubernetes-node-fjlm
 ```
 
-<!-- And again, you should see server ID `102` disappear from the
-`SELECT @@server_id` loop output for a while and then return. -->
-再次，您应该看到服务器 ID `102` 从 `SELECT @@server_id` 循环输出一段时间，然后返回。
+<!--
+And again, you should see server ID `102` disappear from the
+`SELECT @@server_id` loop output for a while and then return. 
+-->
+再次，你应该看到服务器 ID `102` 从 `SELECT @@server_id` 循环输出
+中消失一段时间，然后自行出现。
 
-<!-- Now uncordon the Node to return it to a normal state: -->
-现在 uncordon 节点,使其恢复为正常模式:
+<!--
+Now uncordon the Node to return it to a normal state: 
 
 ```shell
 kubectl uncordon <node-name>
 ```
-
-<!-- ## Scaling the number of slaves -->
-## 扩展从节点数量
-
-<!-- With MySQL replication, you can scale your read query capacity by adding slaves.
-With StatefulSet, you can do this with a single command: -->
-使用 MySQL 复制，您可以通过添加从节点来扩展读取查询的能力。
-使用 StatefulSet，您可以使用单个命令执行此操作：
+-->
+现在去掉节点保护（Uncordon），使其恢复为正常模式:
 
 ```shell
-kubectl scale statefulset mysql  --replicas=5
+kubectl uncordon <节点名称>
 ```
 
-<!-- Watch the new Pods come up by running: -->
+<!--
+## Scaling the number of slaves 
+
+With MySQL replication, you can scale your read query capacity by adding slaves.
+With StatefulSet, you can do this with a single command: 
+-->
+## 扩展从节点数量
+
+使用 MySQL 复制，你可以通过添加从节点来扩展读取查询的能力。
+使用 StatefulSet，你可以使用单个命令执行此操作：
+
+```shell
+kubectl scale statefulset mysql --replicas=5
+```
+
+<!--
+Watch the new Pods come up by running: 
+-->
 查看新的 Pod 的运行情况：
 
 ```shell
 kubectl get pods -l app=mysql --watch
 ```
 
-<!-- Once they're up, you should see server IDs `103` and `104` start appearing in
+<!--
+Once they're up, you should see server IDs `103` and `104` start appearing in
 the `SELECT @@server_id` loop output.
 
 You can also verify that these new servers have the data you added before they
-existed: -->
-一旦 Pod 启动，您应该看到服务器 IDs `103` 和 `104` 开始出现在 `SELECT @@server_id` 循环输出中。
+existed: 
+-->
+一旦 Pod 启动，你应该看到服务器 IDs `103` 和 `104` 开始出现在 `SELECT @@server_id` 循环输出中。
 
-您还可以验证这些新服务器在存在之前已添加了数据：
+你还可以验证这些新服务器在存在之前已添加了数据：
 
 ```shell
 kubectl run mysql-client --image=mysql:5.7 -i -t --rm --restart=Never --\
@@ -549,29 +727,37 @@ Waiting for pod default/mysql-client to be running, status is Pending, pod ready
 pod "mysql-client" deleted
 ```
 
-<!-- Scaling back down is also seamless: -->
-向下缩放也是不停顿的：
+<!--
+Scaling back down is also seamless: 
+-->
+向下缩容操作也是很平滑的：
 
 ```shell
 kubectl scale statefulset mysql --replicas=3
 ```
 
-<!-- Note, however, that while scaling up creates new PersistentVolumeClaims
+<!--
+Note, however, that while scaling up creates new PersistentVolumeClaims
 automatically, scaling down does not automatically delete these PVCs.
 This gives you the choice to keep those initialized PVCs around to make
-scaling back up quicker, or to extract data before deleting them. -->
-但是请注意，按比例放大会自动创建新的 PersistentVolumeClaims，而按比例缩小不会自动删除这些 PVC。
-这使您可以选择保留那些初始化的 PVC，以更快地进行缩放，或者在删除它们之前提取数据。
+scaling back up quicker, or to extract data before deleting them. 
+-->
+但是请注意，按比例扩大会自动创建新的 PersistentVolumeClaims，而按比例缩小不会自动删除这些 PVC。
+这使你可以选择保留那些初始化的 PVC，以更快地进行缩放，或者在删除它们之前提取数据。
 
-<!-- You can see this by running: -->
-您可以通过运行以下命令查看此信息：
+<!--
+You can see this by running: 
+-->
+你可以通过运行以下命令查看此信息：
 
 ```shell
 kubectl get pvc -l app=mysql
 ```
 
-<!-- Which shows that all 5 PVCs still exist, despite having scaled the
-StatefulSet down to 3: -->
+<!--
+Which shows that all 5 PVCs still exist, despite having scaled the
+StatefulSet down to 3: 
+-->
 这表明，尽管将 StatefulSet 缩小为3，所有5个 PVC 仍然存在：
 
 ```
@@ -583,77 +769,89 @@ data-mysql-3   Bound     pvc-50043c45-b1c5-11e6-93fa-42010a800002   10Gi       R
 data-mysql-4   Bound     pvc-500a9957-b1c5-11e6-93fa-42010a800002   10Gi       RWO           2m
 ```
 
-<!-- If you don't intend to reuse the extra PVCs, you can delete them: -->
-如果您不打算重复使用多余的 PVC，则可以删除它们：
+<!--
+If you don't intend to reuse the extra PVCs, you can delete them: 
+-->
+如果你不打算重复使用多余的 PVC，则可以删除它们：
 
 ```shell
 kubectl delete pvc data-mysql-3
 kubectl delete pvc data-mysql-4
 ```
 
-
-
 ## {{% heading "cleanup" %}}
 
 
-<!-- 1. Cancel the `SELECT @@server_id` loop by pressing **Ctrl+C** in its terminal,
-   or running the following from another terminal: -->
+<!--
+1. Cancel the `SELECT @@server_id` loop by pressing **Ctrl+C** in its terminal,
+   or running the following from another terminal: 
+-->
 1. 通过在终端上按 **Ctrl+C** 取消 `SELECT @@server_id` 循环，或从另一个终端运行以下命令：
 
    ```shell
    kubectl delete pod mysql-client-loop --now
    ```
 
-<!-- 1. Delete the StatefulSet. This also begins terminating the Pods. -->
-1. 删除 StatefulSet。这也开始终止 Pod。
+<!--
+1. Delete the StatefulSet. This also begins terminating the Pods. 
+-->
+2. 删除 StatefulSet。这也会开始终止 Pod。
 
    ```shell
    kubectl delete statefulset mysql
    ```
 
-<!-- 1. Verify that the Pods disappear.
-   They might take some time to finish terminating. -->
-1. 验证 Pod 消失。
-   他们可能需要一些时间才能完成终止。
+<!--
+1. Verify that the Pods disappear.
+   They might take some time to finish terminating. 
+-->
+3. 验证 Pod 消失。他们可能需要一些时间才能完成终止。
 
    ```shell
    kubectl get pods -l app=mysql
    ```
 
    <!-- You'll know the Pods have terminated when the above returns: -->
-   当以上内容返回时，您将知道 Pod 已终止：
+   当上述命令返回如下内容时，你就知道 Pod 已终止：
 
    ```
    No resources found.
    ```
 
-<!-- 1. Delete the ConfigMap, Services, and PersistentVolumeClaims. -->
-1. 删除 ConfigMap，Services 和 PersistentVolumeClaims。
+<!--
+1. Delete the ConfigMap, Services, and PersistentVolumeClaims. 
+-->
+4. 删除 ConfigMap、Services 和 PersistentVolumeClaims。
 
    ```shell
    kubectl delete configmap,service,pvc -l app=mysql
    ```
 
-<!-- 1. If you manually provisioned PersistentVolumes, you also need to manually
+<!--
+1. If you manually provisioned PersistentVolumes, you also need to manually
    delete them, as well as release the underlying resources.
    If you used a dynamic provisioner, it automatically deletes the
    PersistentVolumes when it sees that you deleted the PersistentVolumeClaims.
    Some dynamic provisioners (such as those for EBS and PD) also release the
-   underlying resources upon deleting the PersistentVolumes. -->
-1. 如果您手动设置 PersistentVolume，则还需要手动删除它们，并释放基础资源。
-   如果您使用了动态预配器，当得知您删除 PersistentVolumeClaims 时，它将自动删除 PersistentVolumes。
-   一些动态预配器(例如用于 EBS 和 PD 的预配器)也会在删除 PersistentVolumes 时释放基础资源。
-
-
+   underlying resources upon deleting the PersistentVolumes. 
+-->
+5. 如果你手动供应 PersistentVolume，则还需要手动删除它们，并释放下层资源。
+   如果你使用了动态预配器，当得知你删除 PersistentVolumeClaims 时，它将自动删除 PersistentVolumes。
+   一些动态预配器（例如用于 EBS 和 PD 的预配器）也会在删除 PersistentVolumes 时释放下层资源。
 
 ## {{% heading "whatsnext" %}}
 
-
-<!-- * Look in the [Helm Charts repository](https://github.com/kubernetes/charts)
-  for other stateful application examples. -->
-* 在[Helm Charts 存储库](https://github.com/kubernetes/charts)中查找其他有状态的应用程序示例。
-
-
-
-
+<!--
+* Learn more about [scaling a StatefulSet](/docs/tasks/run-application/scale-stateful-set/).
+* Learn more about [debugging a StatefulSet](/docs/tasks/debug-application-cluster/debug-stateful-set/).
+* Learn more about [deleting a StatefulSet](/docs/tasks/run-application/delete-stateful-set/).
+* Learn more about [force deleting StatefulSet Pods](/docs/tasks/run-application/force-delete-stateful-set-pod/).
+* Look in the [Helm Charts repository](https://github.com/kubernetes/charts)
+  for other stateful application examples.
+-->
+* 进一步了解[为 StatefulSet 扩缩容](/zh/docs/tasks/run-application/scale-stateful-set/).
+* 进一步了解[调试 StatefulSet](/zh/docs/tasks/debug-application-cluster/debug-stateful-set/).
+* 进一步了解[删除 StatefulSet](/zh/docs/tasks/run-application/delete-stateful-set/).
+* 进一步了解[强制删除 StatefulSet Pods](/zh/docs/tasks/run-application/force-delete-stateful-set-pod/).
+* 在[Helm Charts 仓库](https://github.com/kubernetes/charts)中查找其他有状态的应用程序示例。
 

From fe29370afb0255ac1f2af9ffbc5849b6cffab390 Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Tue, 11 Aug 2020 23:56:53 +0900
Subject: [PATCH 025/496] ja-trans: Fix Japanese translation in
 ja/concepts/cluster-administration/manage-deployment.md #19280

---
 .../docs/concepts/cluster-administration/manage-deployment.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/concepts/cluster-administration/manage-deployment.md b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
index ff36294d17..7bd2d41799 100644
--- a/content/ja/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
@@ -8,7 +8,7 @@ weight: 40
 
 <!-- overview -->
 
-アプリケーションをデプロイし、Serviceを介して外部への公開できました。さて、どうしますか? Kubernetesは、スケーリングや更新など、アプリケーションのデプロイを管理するための多くのツールを提供します。
+アプリケーションをデプロイし、Serviceを介して外部への公開できました。さて、どうしますか？Kubernetesは、スケーリングや更新など、アプリケーションのデプロイを管理するための多くのツールを提供します。
 我々が取り上げる機能についての詳細は[設定ファイル](/ja/docs/concepts/configuration/overview/)や[ラベル](/ja/docs/concepts/overview/working-with-objects/labels/)で確認できます。
 
 
@@ -48,7 +48,7 @@ kubectl apply -f https://k8s.io/examples/application/nginx/nginx-svc.yaml -f htt
 kubectl apply -f https://k8s.io/examples/application/nginx/
 ```
 
-`kubectl`は`.yaml`, `.yml`, `.json`といったサフィックスの付くファイルを読み込みます。
+`kubectl`は`.yaml`、`.yml`、`.json`といったサフィックスの付くファイルを読み込みます。
 
 同じマイクロサービス、アプリケーションティアーのリソースは同一のファイルにまとめ、アプリケーションに関するファイルをグループ化するために、それらのファイルを同一のディレクトリに配備するのを推奨します。アプリケーションのティアーがDNSを通じて互いにバインドされると、アプリケーションスタックの全てのコンポーネントをひとまとめにして簡単にデプロイできます。
 

From b497eb0463d0202024ab43afea92c7118eb91b4f Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Wed, 12 Aug 2020 00:24:45 +0900
Subject: [PATCH 026/496] ja-trans: Fix Japanese translation in
 ja/concepts/cluster-administration/proxies.md #19281

---
 .../cluster-administration/proxies.md         | 24 +++++++++----------
 1 file changed, 11 insertions(+), 13 deletions(-)

diff --git a/content/ja/docs/concepts/cluster-administration/proxies.md b/content/ja/docs/concepts/cluster-administration/proxies.md
index 59d9c8cd51..26bbb2248b 100644
--- a/content/ja/docs/concepts/cluster-administration/proxies.md
+++ b/content/ja/docs/concepts/cluster-administration/proxies.md
@@ -16,39 +16,38 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
 
 1. [kubectlのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#directly-accessing-the-rest-api):
 
-    - ユーザのデスクトップ上かPod内で稼働する
-    - ローカルホストのアドレスからKubernetes api-serverへのプロキシー
-    - クライアントからプロキシ間ではHTTPを使用します
+    - ユーザーのデスクトップ上かPod内で稼働します
+    - ローカルホストのアドレスからKubernetes api-serverへのプロキシーを行います
+    - クライアントからプロキシー間ではHTTPを使用します
     - プロキシーからapi-serverへはHTTPSを使用します
-    - api-serverを配置します
+    - api-serverの場所を示します
     - 認証用のヘッダーを追加します
 
 1. [api-serverのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#discovering-builtin-services):
 
     - api-server内で動作する防壁となります
-    - クラスターの外部からクラスターIPへユーザを接続し、できなければ到達不可能となります
+    - これがなければ到達不可能であるクラスターIPへ、クラスターの外部からのユーザーを接続します
     - api-serverのプロセス内で稼働します
-    - クライアントからプロキシー間ではHTTPSを使用します(api-serverの設定により、HTTPを使用)
-    - プロキシーからターゲット間では利用可能な情報を使用して、プロキシーによってHTTPかHTTPSの使用を選択されます。
+    - クライアントからプロキシー間ではHTTPSを使用します(api-serverの設定により、HTTPを使用します)
+    - プロキシーからターゲット間では利用可能な情報を使用して、プロキシーによって選択されたHTTPかHTTPSのいずれかを使用します
     - Node、Pod、Serviceへ到達可能です
     - Serviceへ到達するとき負荷分散を行います
 
-1.  [kube-proxy](/ja/docs/concepts/services-networking/service/#ips-and-vips):
+1.  [kube proxy](/ja/docs/concepts/services-networking/service/#ips-and-vips):
 
     - 各Node上で稼働します
     - UDP、TCP、SCTPをプロキシーします
-    - HTTPはレイヤーについての情報は知りません
+    - HTTPを解釈しません
     - 負荷分散機能を提供します
     - Serviceへ到達させるためのみに使用されます
 
 1.  api-serverの前段にあるプロキシー/ロードバランサー:
-1.  A Proxy/Load-balancer in front of apiserver(s):
 
-    - 実際の存在する実態と実装はクラスターごとに異なります(例: nginx)
+    - 実際に存在するかどうかと実装はクラスターごとに異なります(例: nginx)
     - 全てのクライアント間と、1つ以上のapi-serverの間に位置します
     - 複数のapi-serverがあるときロードバランサーとして稼働します
 
-1.  外部サービス上で稼働するクラウドロードバランサー Cloud Load Balancers on external services:
+1.  外部サービス上で稼働するクラウドロードバランサー:
 
     - いくつかのクラウドプロバイダーによって提供されます(例: AWS ELB、Google Cloud Load Balancer)
     - `LoadBalancer`というtypeのKubernetes Serviceが作成されたときに自動で作成されます
@@ -61,7 +60,6 @@ Kubernetesユーザーのほとんどは、最初の2つのタイプ以外に心
 ## リダイレクトの要求 Requesting redirects
 
 プロキシーはリダイレクトの機能を置き換えました。リダイレクトの使用は非推奨となります。
-Proxies have replaced redirect capabilities.  Redirects have been deprecated.
 
 
 

From c105f1a03a7acddbc369c0834bccf624782a0fc6 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 8 Aug 2020 15:10:53 +0100
Subject: [PATCH 027/496] Fix glossary definition shortcode

Fix a bug rendering short glossary definitions. Also, add an example
of a short glossary definition to the style guide.
---
 .../contribute/style/hugo-shortcodes/index.md | 24 ++++++++-
 layouts/shortcodes/glossary_definition.html   | 51 +++++++++++--------
 2 files changed, 53 insertions(+), 22 deletions(-)

diff --git a/content/en/docs/contribute/style/hugo-shortcodes/index.md b/content/en/docs/contribute/style/hugo-shortcodes/index.md
index ab949be7fc..dd9ed06c31 100644
--- a/content/en/docs/contribute/style/hugo-shortcodes/index.md
+++ b/content/en/docs/contribute/style/hugo-shortcodes/index.md
@@ -90,19 +90,39 @@ Renders to:
 
 ## Glossary
 
+There are two glossary tooltips.
+
 You can reference glossary terms with an inclusion that automatically updates and replaces content with the relevant links from [our glossary](/docs/reference/glossary/). When the term is moused-over by someone
 using the online documentation, the glossary entry displays a tooltip.
 
+As well as inclusions with tooltips, you can reuse the definitions from the glossary in
+page content.
+
 The raw data for glossary terms is stored at [https://github.com/kubernetes/website/tree/master/content/en/docs/reference/glossary](https://github.com/kubernetes/website/tree/master/content/en/docs/reference/glossary), with a content file for each glossary term.
 
-### Glossary Demo
+### Glossary demo
 
 For example, the following include within the markdown renders to {{< glossary_tooltip text="cluster" term_id="cluster" >}} with a tooltip:
 
-```liquid
+```
 {{</* glossary_tooltip text="cluster" term_id="cluster" */>}}
 ```
 
+Here's a short glossary definition:
+
+```
+{{</* glossary_definition prepend="A cluster is" term_id="cluster" length="short" */>}}
+```
+which renders as:
+{{< glossary_definition prepend="A cluster is" term_id="cluster" length="short" >}}
+
+You can also include a full definition:
+```
+{{</* glossary_definition term_id="cluster" length="all" */>}}
+```
+which renders as:
+{{< glossary_definition term_id="cluster" length="all" >}}
+
 ## Table captions
 
 You can make tables more accessible to screen readers by adding a table caption. To add a [caption](https://www.w3schools.com/tags/tag_caption.asp) to a table, enclose the table with a `table` shortcode and specify the caption with the `caption` parameter.
diff --git a/layouts/shortcodes/glossary_definition.html b/layouts/shortcodes/glossary_definition.html
index 76d38fc14b..e2c9089747 100644
--- a/layouts/shortcodes/glossary_definition.html
+++ b/layouts/shortcodes/glossary_definition.html
@@ -1,29 +1,40 @@
-
 {{- $id := .Get "term_id" -}}
 {{- $length := .Get "length" -}}
-{{- $prepend := .Get "prepend" }}
+{{- $prepend := .Get "prepend" -}}
 {{- $glossaryBundle := site.GetPage "page" "docs/reference/glossary" -}}
 {{- $glossaryItems :=  $glossaryBundle.Resources.ByType "page" -}}
 {{- $term_info := $glossaryItems.GetMatch (printf "%s.md" $id ) -}}
+{{- $showFullDefinition := false -}}
 {{- if not $term_info -}}
-{{- errorf "[%s] %q: %q is not a valid glossary term_id, see ./docs/reference/glossary/* for a full list" site.Language.Lang .Page.Path $id -}}
-{{- end -}}
-{{- with $term_info -}}
-{{- if (strings.Contains "short" $length) -}}
-	{{- with .Summary -}}
-	{{- if $prepend }}{{- replace . "<p>" (printf "<P>%s %s" $prepend .) -}}{{ else }}{{- . -}}{{ end -}}
-	{{- else -}}
-	{{- partial "templates/errorthrower.html" (dict "block" "summary" "purpose" .purpose "describes the key term in greater depth, supplementing the short_description") . -}}
-	{{- end -}}
-{{- end -}}
-{{- if (strings.Contains "all|long" $length) -}}
-{{- with .Content -}}
-{{- if $prepend }}
-{{- $firstPara := index (findRE "(?s)<p>.*?</p>" . 1) 0 -}}
-{{- $firstPara := $firstPara | strings.TrimSuffix "</p>" | strings.TrimPrefix "<p>" -}}
-{{- $first := slicestr $firstPara 0 1 | lower }}
-{{- $prepended := printf "<p>%s %s%s</p>"  $prepend $first (slicestr $firstPara 1) -}}
-{{- replace . $firstPara $prepended | safeHTML -}}{{ else }}{{- . -}}{{ end -}}
+  {{- errorf "[%s] %q: %q is not a valid glossary term_id, see ./docs/reference/glossary/* for a full list" site.Language.Lang .Page.Path $id -}}
 {{- end -}}
+{{- if or (eq "long" $length) (eq "all" $length) -}}
+  {{- $showFullDefinition = true -}}
+{{- else if (eq "short" $length) -}}
+  {{- $showFullDefinition = false -}}
+{{- else -}}
+  {{- errorf "[%s] %q: invalid glossary definition length %q" site.Language.Lang .Page.Path $length -}}
 {{- end -}}
+{{- with $term_info.Content -}}
+  {{- if not $showFullDefinition -}}
+    {{- $firstPara := index (findRE "(?s)<p>.*?</p>" . 1) 0 -}}
+    {{- $firstPara := $firstPara | strings.TrimSuffix "</p>" | strings.TrimPrefix "<p>" -}}
+    {{- $first := slicestr $firstPara 0 1 | lower -}}
+    {{- if $prepend -}}
+      {{- $prepended := printf "<p>%s %s%s</p>"  $prepend $first (slicestr $firstPara 1) -}}
+      {{- $prepended | safeHTML -}}
+    {{- else -}}
+      {{- $firstPara | safeHTML -}}
+    {{- end -}}
+  {{- else -}}
+    {{- if $prepend -}}
+      {{- $firstPara := index (findRE "(?s)<p>.*?</p>" . 1) 0 -}}
+      {{- $firstPara := $firstPara | strings.TrimSuffix "</p>" | strings.TrimPrefix "<p>" -}}
+      {{- $first := slicestr $firstPara 0 1 | lower -}}
+      {{- $prepended := printf "<p>%s %s%s</p>"  $prepend $first (slicestr $firstPara 1) -}}
+      {{- replace . $firstPara $prepended | safeHTML -}}
+    {{- else -}}
+      {{- . -}}
+    {{- end -}}
+  {{- end -}}
 {{- end -}}

From e073ac38f85ad4720b1401311901a0cefe5ea902 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Wed, 12 Aug 2020 10:39:51 +0800
Subject: [PATCH 028/496] [zh] Rework kubectl patch tasks

The file location has changed in English site, with two new sections
added.
---
 .../update-api-object-kubectl-patch.md        | 322 +++++++++++++-----
 1 file changed, 234 insertions(+), 88 deletions(-)
 rename content/zh/docs/tasks/{run-application => manage-kubernetes-objects}/update-api-object-kubectl-patch.md (54%)

diff --git a/content/zh/docs/tasks/run-application/update-api-object-kubectl-patch.md b/content/zh/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md
similarity index 54%
rename from content/zh/docs/tasks/run-application/update-api-object-kubectl-patch.md
rename to content/zh/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md
index 68c99d6881..6b7d13cf14 100644
--- a/content/zh/docs/tasks/run-application/update-api-object-kubectl-patch.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md
@@ -2,16 +2,14 @@
 title: 使用 kubectl patch 更新 API 对象
 description: 使用 kubectl patch 更新 Kubernetes API 对象。做一个策略性的合并 patch 或 JSON 合并 patch。
 content_type: task
-weight: 40
+weight: 50
 ---
 
 <!--
----
 title: Update API Objects in Place Using kubectl patch
 description: Use kubectl patch to update Kubernetes API objects in place. Do a strategic merge patch or a JSON merge patch.
 content_type: task
 weight: 40
----
 -->
 
 <!-- overview -->
@@ -20,31 +18,23 @@ weight: 40
 This task shows how to use `kubectl patch` to update an API object in place. The exercises
 in this task demonstrate a strategic merge patch and a JSON merge patch.
 -->
-
-这个任务展示了如何使用 `kubectl patch` 就地更新 API 对象。这个任务中的练习演示了一个策略性合并 patch 和一个 JSON 合并 patch。
-
+这个任务展示如何使用 `kubectl patch` 就地更新 API 对象。
+这个任务中的练习演示了一个策略性合并 patch 和一个 JSON 合并 patch。
 
 
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
-
-
 <!-- steps -->
 
 <!--
 ## Use a strategic merge patch to update a Deployment
--->
 
-## 使用策略合并 patch 更新 Deployment
-
-<!--
 Here's the configuration file for a Deployment that has two replicas. Each replica
 is a Pod that has one container:
 -->
+## 使用策略合并 patch 更新 Deployment
 
 下面是具有两个副本的 Deployment 的配置文件。每个副本是一个 Pod，有一个容器：
 
@@ -53,7 +43,6 @@ is a Pod that has one container:
 <!--
 Create the Deployment:
 -->
-
 创建 Deployment：
 
 ```shell
@@ -85,13 +74,13 @@ patch-demo-28633765-j5qs3   1/1       Running   0          23s
 Make a note of the names of the running Pods. Later, you will see that these Pods
 get terminated and replaced by new ones.
 -->
-把运行的 Pod 的名字记下来。稍后，您将看到这些 Pod 被终止并被新的 Pod 替换。
+把运行的 Pod 的名字记下来。稍后，你将看到这些 Pod 被终止并被新的 Pod 替换。
 
 <!--
 At this point, each Pod has one Container that runs the nginx image. Now suppose
 you want each Pod to have two containers: one that runs nginx and one that runs redis.
 -->
-此时，每个 Pod 都有一个运行 nginx 镜像的容器。现在假设您希望每个 Pod 有两个容器：一个运行 nginx，另一个运行 redis。
+此时，每个 Pod 都有一个运行 nginx 镜像的容器。现在假设你希望每个 Pod 有两个容器：一个运行 nginx，另一个运行 redis。
 
 <!--
 Create a file named `patch-file-containers.yaml` that has this content:
@@ -110,7 +99,7 @@ spec:
 <!--
 Patch your Deployment:
 -->
-修补您的 Deployment：
+修补你的 Deployment：
 
 ```shell
 kubectl patch deployment patch-demo --patch "$(cat patch-file-containers.yaml)"
@@ -129,7 +118,7 @@ The output shows that the PodSpec in the Deployment has two Containers:
 -->
 输出显示 Deployment 中的 PodSpec 有两个容器:
 
-```shell
+```yaml
 containers:
 - image: redis
   imagePullPolicy: Always
@@ -189,20 +178,18 @@ containers:
 
 <!--
 ### Notes on the strategic merge patch
--->
 
-### 策略性合并类的 patch
-
-<!--
 The patch you did in the preceding exercise is called a *strategic merge patch*.
 Notice that the patch did not replace the `containers` list. Instead it added a new
 Container to the list. In other words, the list in the patch was merged with the
 existing list. This is not always what happens when you use a strategic merge patch on a list.
 In some cases, the list is replaced, not merged.
 -->
-您在前面的练习中所做的 patch 称为`策略性合并 patch`。
-请注意，patch 没有替换`容器`列表。相反，它向列表中添加了一个新容器。换句话说，
-patch 中的列表与现有列表合并。当您在列表中使用策略性合并 patch 时，并不总是这样。
+### 策略性合并类的 patch 的说明
+
+你在前面的练习中所做的 patch 称为`策略性合并 patch（Strategic Merge Patch)`。
+请注意，patch 没有替换`containers` 列表。相反，它向列表中添加了一个新 Container。换句话说，
+patch 中的列表与现有列表合并。当你在列表中使用策略性合并 patch 时，并不总是这样。
 在某些情况下，列表是替换的，而不是合并的。
 
 <!--
@@ -211,8 +198,9 @@ patch strategy. The patch strategy is specified by the value of the `patchStrate
 in a field tag in the Kubernetes source code. For example, the `Containers` field of `PodSpec`
 struct has a `patchStrategy` of `merge`:
 -->
-对于策略性合并 patch，列表可以根据其 patch 策略进行替换或合并。patch 策略由 Kubernetes 源代码中字段标记中的 `patchStrategy` 键的值指定。
-例如，`PodSpec` 结构体的 `Containers` 字段有 `merge` 的 `patchStrategy`：
+对于策略性合并 patch，列表可以根据其 patch 策略进行替换或合并。
+patch 策略由 Kubernetes 源代码中字段标记中的 `patchStrategy` 键的值指定。
+例如，`PodSpec` 结构体的 `Containers` 字段的 `patchStrategy` 为 `merge`：
 
 ```go
 type PodSpec struct {
@@ -224,8 +212,7 @@ type PodSpec struct {
 You can also see the patch strategy in the
 [OpenApi spec](https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json):
 -->
-
-您还可以在 [OpenApi spec](https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json)
+你还可以在 [OpenApi spec](https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json)
 规范中看到 patch 策略：
 
 ```json
@@ -243,8 +230,8 @@ You can also see the patch strategy in the
 And you can see the patch strategy in the
 [Kubernetes API documentation](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core).
 -->
-您可以在 [Kubernetes API 文档](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core)
-中看到 patch 策略
+你可以在 [Kubernetes API 文档](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podspec-v1-core)
+中看到 patch 策略。
 
 <!--
 Create a file named `patch-file-tolerations.yaml` that has this content:
@@ -264,22 +251,16 @@ spec:
 <!--
 Patch your Deployment:
 -->
-patch Deployment：
+对 Deployment 执行 patch 操作：
 
-
-{{< tabs name="kubectl_patch_example" >}}
-{{{< tab name="Bash" codelang="bash" >}}
+```
 kubectl patch deployment patch-demo --patch "$(cat patch-file-containers.yaml)"
-{{< /tab >}}
-{{< tab name="PowerShell" codelang="posh" >}}
-kubectl patch deployment patch-demo --patch $(cat patch-file-containers.yaml)
-{{< /tab >}}}
-{{< /tabs >}}
+```
 
 <!--
 View the patched Deployment:
 -->
-查看 patch Deployment：
+查看修补后的 Deployment：
 
 ```shell
 kubectl get deployment patch-demo --output yaml
@@ -288,7 +269,7 @@ kubectl get deployment patch-demo --output yaml
 <!--
 The output shows that the PodSpec in the Deployment has only one Toleration:
 -->
-输出结果显示部署中的 PodSpec 只有一个默认：
+输出结果显示 Deployment 中的 PodSpec 只有一个容忍度设置：
 
 ```shell
 
@@ -316,8 +297,8 @@ Notice that the `tolerations` list in the PodSpec was replaced, not merged. This
 the Tolerations field of PodSpec does not have a `patchStrategy` key in its field tag. So the
 strategic merge patch uses the default patch strategy, which is `replace`.
 -->
-请注意，PodSpec 中的 `tolerations` 列表被替换，而不是合并。这是因为 PodSpec 的 tolerance 字段的字段标签中没有
-`patchStrategy` 键。所以策略合并 patch 使用默认的 patch 策略，也就是 `replace`。
+请注意，PodSpec 中的 `tolerations` 列表被替换，而不是合并。这是因为 PodSpec 的 `tolerations` 
+的字段标签中没有 `patchStrategy` 键。所以策略合并 patch 操作使用默认的 patch 策略，也就是 `replace`。
 
 ```go
 type PodSpec struct {
@@ -327,36 +308,38 @@ type PodSpec struct {
 
 <!--
 ## Use a JSON merge patch to update a Deployment
--->
-## 使用 JSON 合并 patch 更新部署
 
-<!--
 A strategic merge patch is different from a
 [JSON merge patch](https://tools.ietf.org/html/rfc7386).
 With a JSON merge patch, if you
 want to update a list, you have to specify the entire new list. And the new list completely
 replaces the existing list.
 -->
+## 使用 JSON 合并 patch 更新 Deployment
+
 策略性合并 patch 不同于 [JSON 合并 patch](https://tools.ietf.org/html/rfc7386)。
-使用 JSON 合并 patch，如果您想更新列表，您必须指定整个新列表。新的列表完全取代了现有的列表。
+使用 JSON 合并 patch，如果你想更新列表，你必须指定整个新列表。新的列表完全取代现有的列表。
 
 <!--
 The `kubectl patch` command has a `type` parameter that you can set to one of these values:
 -->
-`kubectl patch` 命令有一个 `type` 参数，您可以将其设置为以下值之一:
+`kubectl patch` 命令有一个 `type` 参数，你可以将其设置为以下值之一:
 
 <table>
-  <tr><th>Parameter value</th><th>Merge type</th></tr>
+  <!-- tr><th>Parameter value</th><th>Merge type</th></tr -->
+  <tr><th>参数值</th><th>合并类型</th></tr>
   <tr><td>json</td><td><a href="https://tools.ietf.org/html/rfc6902">JSON Patch, RFC 6902</a></td></tr>
   <tr><td>merge</td><td><a href="https://tools.ietf.org/html/rfc7386">JSON Merge Patch, RFC 7386</a></td></tr>
-  <tr><td>strategic</td><td>Strategic merge patch</td></tr>
+  <!-- tr><td>strategic</td><td>Strategic merge patch</td></tr -->
+  <tr><td>strategic</td><td>策略合并 patch</td></tr>
 </table>
 
 <!--
 For a comparison of JSON patch and JSON merge patch, see
-[JSON Patch and JSON Merge Patch](http://erosb.github.io/post/json-patch-vs-merge-patch/).
+[JSON Patch and JSON Merge Patch](https://erosb.github.io/post/json-patch-vs-merge-patch/).
 -->
-有关 JSON patch 和 JSON 合并 patch 的比较，查看[ JSON patch 和 JSON 合并 patch](http://erosb.github.io/post/json-patch-vs-merge-patch/)。
+有关 JSON patch 和 JSON 合并 patch 的比较，查看
+[JSON patch 和 JSON 合并 patch](https://erosb.github.io/post/json-patch-vs-merge-patch/)。
 
 <!--
 The default value for the `type` parameter is `strategic`. So in the preceding exercise, you
@@ -368,7 +351,7 @@ did a strategic merge patch.
 Next, do a JSON merge patch on your same Deployment. Create a file named `patch-file-2.yaml`
 that has this content:
 -->
-下一步，在相同的部署上执行 JSON 合并 patch。创建一个名为 `patch-file-2` 的文件。内容如下:
+下一步，在相同的 Deployment 上执行 JSON 合并 patch。创建一个名为 `patch-file-2` 的文件。内容如下:
 
 ```yaml
 spec:
@@ -391,7 +374,7 @@ kubectl patch deployment patch-demo --type merge --patch "$(cat patch-file-2.yam
 <!--
 View the patched Deployment:
 -->
-查看 patch 部署：
+查看修补后的 Deployment：
 
 ```shell
 kubectl get deployment patch-demo --output yaml
@@ -401,10 +384,10 @@ kubectl get deployment patch-demo --output yaml
 The `containers` list that you specified in the patch has only one Container.
 The output shows that your list of one Container replaced the existing `containers` list.
 -->
-patch 中指定的`容器`列表只有一个容器。
-输出显示您的一个容器列表替换了现有的`容器`列表。
+patch 中指定的`containers`列表只有一个 Container。
+输出显示你所给出的 Contaier 列表替换了现有的 `containers` 列表。
 
-```shell
+```yaml
 spec:
   containers:
   - image: gcr.io/google-samples/node-hello:1.0
@@ -425,7 +408,7 @@ kubectl get pods
 In the output, you can see that the existing Pods were terminated, and new Pods
 were created. The `1/1` indicates that each new Pod is running only one Container.
 -->
-在输出中，您可以看到已经终止了现有的 Pod，并创建了新的 Pod。`1/1` 表示每个新 Pod只运行一个容器。
+在输出中，你可以看到已经终止了现有的 Pod，并创建了新的 Pod。`1/1` 表示每个新 Pod只运行一个容器。
 
 ```shell
 NAME                          READY     STATUS    RESTARTS   AGE
@@ -434,16 +417,185 @@ patch-demo-1307768864-c86dc   1/1       Running   0          1m
 ```
 
 <!--
-## Alternate forms of the kubectl patch command
--->
+## Use strategic merge patch to update a Deployment using the retainKeys strategy
 
-## kubectl patch 命令的其他形式
+Here's the configuration file for a Deployment that uses the `RollingUpdate` strategy:
+-->
+## 使用带 retainKeys 策略的策略合并 patch 更新 Deployment
+
+{{< codenew file="application/deployment-retainkeys.yaml" >}}
+
+<!-- Create the deployment: -->
+创建 Deployment：
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/deployment-retainkeys.yaml
+```
 
 <!--
+At this point, the deployment is created and is using the `RollingUpdate` strategy.
+
+Create a file named `patch-file-no-retainkeys.yaml` that has this content:
+-->
+这时，Deployment 被创建，并使用 `RollingUpdate` 策略。
+
+创建一个名为 `patch-file-no-retainkeys.yaml` 的文件，内容如下：
+
+```yaml
+spec:
+  strategy:
+    type: Recreate
+```
+
+<!-- Patch your Deployment: -->
+修补你的 Deployment:
+
+{{< tabs name="kubectl_retainkeys_example" >}}
+{{{< tab name="Bash" codelang="bash" >}}
+kubectl patch deployment retainkeys-demo --patch "$(cat patch-file-no-retainkeys.yaml)"
+{{< /tab >}}
+{{< tab name="PowerShell" codelang="posh" >}}
+kubectl patch deployment retainkeys-demo --patch $(Get-Content patch-file-no-retainkeys.yaml -Raw)
+{{< /tab >}}}
+{{< /tabs >}}
+
+<!--
+In the output, you can see that it is not possible to set `type` as `Recreate` when a value is defined for `spec.strategy.rollingUpdate`:
+-->
+在输出中，你可以看到，当 `spec.strategy.rollingUpdate` 已经拥有取值定义时，
+将其 `type` 设置为 `Recreate` 是不可能的。
+
+```shell
+The Deployment "retainkeys-demo" is invalid: spec.strategy.rollingUpdate: Forbidden: may not be specified when strategy `type` is 'Recreate'
+```
+
+<!--
+The way to remove the value for `spec.strategy.rollingUpdate` when updating the value for `type` is to use the `retainKeys` strategy for the strategic merge.
+
+Create another file named `patch-file-retainkeys.yaml` that has this content:
+-->
+更新 `type` 取值的同时移除 `spec.strategy.rollingUpdate` 现有值的方法是
+为策略性合并操作设置 `retainKeys` 策略：
+
+创建另一个名为 `patch-file-retainkeys.yaml` 的文件，内容如下：
+
+```yaml
+spec:
+  strategy:
+    $retainKeys:
+    - type
+    type: Recreate
+```
+
+<!--
+With this patch, we indicate that we want to retain only the `type` key of the `strategy` object. Thus, the `rollingUpdate` will be removed during the patch operation.
+
+Patch your Deployment again with this new patch:
+-->
+使用此 patch，我们表达了希望只保留 `strategy` 对象的 `type` 键。
+这样，在 patch 操作期间 `rollingUpdate` 会被删除。
+
+使用新的 patch 重新修补 Deployment：
+
+{{< tabs name="kubectl_retainkeys2_example" >}}
+{{{< tab name="Bash" codelang="bash" >}}
+kubectl patch deployment retainkeys-demo --patch "$(cat patch-file-retainkeys.yaml)"
+{{< /tab >}}
+{{< tab name="PowerShell" codelang="posh" >}}
+kubectl patch deployment retainkeys-demo --patch $(Get-Content patch-file-retainkeys.yaml -Raw)
+{{< /tab >}}}
+{{< /tabs >}}
+
+<!-- Examine the content of the Deployment: -->
+检查 Deployment 的内容：
+
+```shell
+kubectl get deployment retainkeys-demo --output yaml
+```
+
+<!--
+The output shows that the strategy object in the Deployment does not contain the `rollingUpdate` key anymore:
+-->
+输出显示 Deployment 中的 `strategy` 对象不再包含 `rollingUpdate` 键：
+
+```shell
+spec:
+  strategy:
+    type: Recreate
+  template:
+```
+
+<!--
+### Notes on the strategic merge patch using the retainKeys strategy
+
+The patch you did in the preceding exercise is called a *strategic merge patch with retainKeys strategy*. This method introduces a new directive `$retainKeys` that has the following strategies:
+
+- It contains a list of strings.
+- All fields needing to be preserved must be present in the `$retainKeys` list.
+- The fields that are present will be merged with live object.
+- All of the missing fields will be cleared when patching.
+- All fields in the `$retainKeys` list must be a superset or the same as the fields present in the patch.
+-->
+### 关于使用 retainKeys 策略的策略合并 patch 操作的说明
+
+在前文练习中所执行的称作 *带 retainKeys` 策略的策略合并 patch（Strategic Merge
+Patch with retainKeys Strategy）*。
+这种方法引入了一种新的 `$retainKey` 指令，具有如下策略： 
+
+- 其中包含一个字符串列表；
+- 所有需要被保留的字段必须在 `$retainKeys` 列表中给出；
+- 对于已有的字段，会和对象上对应的内容合并；
+- 在修补操作期间，未找到的字段都会被清除；
+- 列表 `$retainKeys` 中的所有字段必须 patch 操作所给字段的超集，或者与之完全一致。
+
+<!--
+The `retainKeys` strategy does not work for all objects. It only works when the value of the `patchStrategy` key in a field tag in the Kubernetes source code contains `retainKeys`. For example, the `Strategy` field of the `DeploymentSpec` struct has a `patchStrategy` of `retainKeys`:
+-->
+策略 `retainKeys` 并不能对所有对象都起作用。它仅对那些 Kubernetes 源码中
+`patchStrategy` 字段标志值包含 `retainKeys` 的字段有用。
+例如 `DeploymentSpec` 结构的 `Strategy` 字段就包含了 `patchStrategy` 为
+`retainKeys` 的标志。 
+
+```go
+type DeploymentSpec struct {
+  ...
+  // +patchStrategy=retainKeys
+  Strategy DeploymentStrategy `json:"strategy,omitempty" patchStrategy:"retainKeys" ...`
+```
+
+<!--
+You can also see the `retainKeys` strategy in the [OpenApi spec](https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json):
+-->
+你也可以查看 [OpenAPI 规范](https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json)中的 `retainKeys` 策略：
+
+```json
+"io.k8s.api.apps.v1.DeploymentSpec": {
+   ...
+  "strategy": {
+    "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStrategy",
+    "description": "The deployment strategy to use to replace existing pods with new ones.",
+    "x-kubernetes-patch-strategy": "retainKeys"
+  },
+```
+
+<!--
+And you can see the `retainKeys` strategy in the
+[Kubernetes API documentation](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#deploymentspec-v1-apps).
+-->
+而且你也可以在
+[Kubernetes API 文档](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#deploymentspec-v1-apps).
+中看到 `retainKey` 策略。
+
+<!--
+## Alternate forms of the kubectl patch command
+
 The `kubectl patch` command takes YAML or JSON. It can take the patch as a file or
 directly on the command line.
 -->
- `kubectl patch` 命令使用 YAML 或 JSON。它可以将 patch 作为文件，也可以直接在命令行中使用。
+## kubectl patch 命令的其他形式
+
+`kubectl patch` 命令使用 YAML 或 JSON。它可以接受以文件形式提供的补丁，也可以
+接受直接在命令行中给出的补丁。
 
 <!--
 Create a file named `patch-file.json` that has this content:
@@ -470,7 +622,7 @@ Create a file named `patch-file.json` that has this content:
 <!--
 The following commands are equivalent:
 -->
-以下命令是相同的：
+以下命令是等价的：
 
 ```shell
 kubectl patch deployment patch-demo --patch "$(cat patch-file.yaml)"
@@ -482,11 +634,7 @@ kubectl patch deployment patch-demo --patch '{"spec": {"template": {"spec": {"co
 
 <!--
 ## Summary
--->
 
-## 总结
-
-<!--
 In this exercise, you used `kubectl patch` to change the live configuration
 of a Deployment object. You did not change the configuration file that you originally used to
 create the Deployment object. Other commands for updating API objects include
@@ -497,32 +645,30 @@ create the Deployment object. Other commands for updating API objects include
 and
 [kubectl apply](/docs/reference/generated/kubectl/kubectl-commands/#apply).
 -->
-在本练习中，您使用 `kubectl patch` 更改部署对象的实时配置。您没有更改最初用于创建部署对象的配置文件。
+## 总结
+
+在本练习中，你使用 `kubectl patch` 更改了 Deployment 对象的当前配置。
+你没有更改最初用于创建 Deployment 对象的配置文件。
 用于更新 API 对象的其他命令包括
-[kubectl annotate](/docs/reference/generated/kubectl/kubectl-commands/#annotate)，
-[kubectl edit](/docs/reference/generated/kubectl/kubectl-commands/#edit)，
-[kubectl replace](/docs/reference/generated/kubectl/kubectl-commands/#replace)，
-[kubectl scale](/docs/reference/generated/kubectl/kubectl-commands/#scale)，
+[`kubectl annotate`](/docs/reference/generated/kubectl/kubectl-commands/#annotate)，
+[`kubectl edit](/docs/reference/generated/kubectl/kubectl-commands/#edit)，
+[`kubectl replace`](/docs/reference/generated/kubectl/kubectl-commands/#replace)，
+[`kubectl scale`](/docs/reference/generated/kubectl/kubectl-commands/#scale)，
 和
-[kubectl apply](/docs/reference/generated/kubectl/kubectl-commands/#apply)。
-
-
-
+[`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands/#apply)。
 
 ## {{% heading "whatsnext" %}}
 
-
 <!--
-* [Kubernetes Object Management](/docs/concepts/overview/object-management-kubectl/overview/)
-* [Managing Kubernetes Objects Using Imperative Commands](/docs/concepts/overview/object-management-kubectl/imperative-command/)
-* [Imperative Management of Kubernetes Objects Using Configuration Files](/docs/concepts/overview/object-management-kubectl/imperative-config/)
-* [Declarative Management of Kubernetes Objects Using Configuration Files](/docs/concepts/overview/object-management-kubectl/declarative-config/)
+* [Kubernetes Object Management](/docs/concepts/overview/working-with-objects/object-management/)
+* [Managing Kubernetes Objects Using Imperative Commands](/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [Imperative Management of Kubernetes Objects Using Configuration Files](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [Declarative Management of Kubernetes Objects Using Configuration Files](/docs/tasks/manage-kubernetes-objects/declarative-config/)
 -->
-
-* [Kubernetes 对象管理器](/docs/concepts/overview/object-management-kubectl/overview/)
-* [使用命令管理 Kubernetes 对象](/docs/concepts/overview/object-management-kubectl/imperative-command/)
-* [使用配置文件强制管理 Kubernetes 对象](/docs/concepts/overview/object-management-kubectl/imperative-config/)
-* [使用配置文件对 Kubernetes 对象进行声明式管理](/docs/concepts/overview/object-management-kubectl/declarative-config/)
+* [Kubernetes 对象管理](/zh/docs/concepts/overview/working-with-objects/object-management/)
+* [使用指令式命令管理 Kubernetes 对象](/zh/docs/tasks/manage-kubernetes-objects/imperative-command/)
+* [使用配置文件执行 Kubernetes 对象的指令式管理](/zh/docs/tasks/manage-kubernetes-objects/imperative-config)
+* [使用配置文件对 Kubernetes 对象进行声明式管理](/zh/docs/tasks/manage-kubernetes-objects/declarative-config/)
 
 
 

From 60ba92c12f51a24a66577263a1d20a8909d5513a Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Wed, 12 Aug 2020 11:52:35 +0900
Subject: [PATCH 029/496] completed translating

---
 content/ja/docs/concepts/containers/images.md | 273 ++++++++++++++++++
 1 file changed, 273 insertions(+)
 create mode 100644 content/ja/docs/concepts/containers/images.md

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
new file mode 100644
index 0000000000..f731078866
--- /dev/null
+++ b/content/ja/docs/concepts/containers/images.md
@@ -0,0 +1,273 @@
+---
+reviewers:
+title: イメージ
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+コンテナイメージはアプリケーションと依存関係のあるすべてソフトウェアをカプセル化したバイナリデータを表します。コンテナイメージはスタンドアロンで実行可能なソフトウェアをひとつにまとめ、ランタイム環境に関する想定を明確に定義しています。
+
+アプリケーションのコンテナイメージを作成し、一般的には{{< glossary_tooltip text="Pod" term_id="pod" >}}で参照する前にレジストリへPushします。
+
+このページではコンテナイメージのコンセプト概要を説明します。
+
+<!-- body -->
+
+## イメージの名称
+
+コンテナイメージは、`pause`、`example/mycontainer`、または`kube-apiserver`のような名前が通常つけられます。
+イメージにはレジストリのホスト名も含めることができ（例：`fictional.registry.example/imagename`）、さらにポート番号も含めることが可能です（例：`fictional.registry.example:10443/imagename`）。
+
+レジストリのホスト名を指定しない場合は、KubernetesはDockerパブリックレジストリを意味していると見なします。
+
+イメージ名の後に、_タグ_ を追加することができます（`docker`や`podman`のようなコマンドを利用した場合と同様）。
+タグによって同じイメージの異なるバージョンを識別できます。
+
+イメージタグは大文字と小文字、数値、アンダースコア(`_`)、ピリオド(`.`)とマイナス(`-`)で構成されます。
+イメージタグでは区切り記号(`_`、`-`、`.`)を指定できる追加ルールがあります。
+タグを指定しない場合は、Kubernetesは`latest`タグを指定したと見なします。
+
+{{< caution >}}
+本番環境でコンテナをデプロイする場合は、`latest`タグの使用を避けるべきです。
+実行中のイメージのバージョンを追跡するのが難しく、機能しているバージョンへのロールバックがより困難になるためです。
+
+かわりに、`v1.42.0`のような特定できるタグを指定してください。
+{{< /caution >}}
+
+
+## イメージの更新
+
+デフォルトのpull policyでは、{{< glossary_tooltip text="kubelet" term_id="kubelet" >}}はイメージを既に取得済みの場合、イメージのPullをスキップさせる`IfNotPresent`が設定されています。
+常にPullを強制させたい場合は、次のいずれかの方法で実行できます。
+
+- コンテナの`imagePullPolicy`に`Always`を設定します。
+- `imagePullPolicy`を省略し、使用するイメージに`:latest`タグを使用します。
+- `imagePullPolicy`と使用するイメージのタグを省略します。
+- [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)アドミッションコントローラーを有効にします。
+
+`imagePullPolicy`が値なしで定義された場合、この場合も`Always`が設定されます。
+
+## マニュフェストを使ったマルチアーキテクチャイメージ
+
+コンテナレジストリはバイナリイメージの提供だけでなく、[コンテナイメージマニュフェスト](https://github.com/opencontainers/image-spec/blob/master/manifest.md)も提供する事ができます。
+マニュフェストはコンテナのアーキテクチャ固有バージョンに関するイメージマニュフェストを参照できます。マニュフェストの目的はイメージの名前(例:`pause`、`example/mycontainer`、`kube-apiserver`)をもたせ、様々なシステムが使用しているマシンアーキテクチャにあう適切なバイナリイメージを取得できることです。
+
+Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィックスを持つを名前をつけます。下位互換の為にサフィックス付きの古い仕様のイメージを生成してください。その目的は、`pause`のようなすべてのアーキテクチャのマニュフェストを持つイメージと、サフィックスのあるイメージをハードコードしていた可能性のある古い仕様の設定やYAMLファイルと下位互換がある`pause-amd64`のようなイメージを生成することです。
+
+## プライベートレジストリを使用する方法
+
+プライベートリポジトリではイメージを読み込む為にキーが必要になる場合があります。  
+認証情報はいくつかの方法で提供できます。
+
+  - プライベートレジストリへの認証をNodeに設定する
+    - すべてのPodがプライベートレジストリを読み取ることができます。
+    - クラスター管理者によるNodeの設定が必要です。
+  - 事前にPullされたイメージ
+    - すべてのPodがNode上にキャッシュされたイメージを利用できます。
+    - セットアップするためにはすべてのNodeに対するrootアクセスが必要です。
+  - PodでImagePullSecretsを指定する
+    - キーを提供したPodのみがプライベートレジストリへアクセスできる。
+  - ベンダー固有またはローカルエクステンション
+    - カスタムNode構成を使っている場合、あなた(または、あなたのクラウドプロバイダー)はコンテナレジストリーへの認証の仕組みを組み込むことができます。
+
+これらのオプションについて、以下で詳しく説明します。
+
+### プライベートレジストリへの認証をNodeに設定する
+
+Node上でDockerを実行している場合、プライベートコンテナリポジトリへの認証をDockerコンテナランタイムに設定できます。
+
+Node構成を制御できる場合は、この方法が適しています。
+
+{{< note >}}
+KubernetesはDocker構成の`auths`と`HttpHeaders`セクションのみをサポートしています。
+Docker認証情報ヘルパー(`credHelpers`または`credsStore`)はサポートされていません。
+{{< /note >}}
+
+
+Dockerは、`$HOME/.dockercfg`または`$HOME/.docker/config.json`ファイルの中に、プライベートレジストリのキーを保持します。
+下記リストの検索パスに同じファイルを配置した場合、kubeletはイメージをPullする時に認証情報プロバイダーとして利用します。
+
+
+* `{--root-dir:-/var/lib/kubelet}/config.json`
+* `{cwd of kubelet}/config.json`
+* `${HOME}/.docker/config.json`
+* `/.docker/config.json`
+* `{--root-dir:-/var/lib/kubelet}/.dockercfg`
+* `{cwd of kubelet}/.dockercfg`
+* `${HOME}/.dockercfg`
+* `/.dockercfg`
+
+{{< note >}}
+kubeletプロセスの環境では、明示的に`HOME=/root`を設定する必要がある場合があります。
+{{< /note >}}
+
+以下は、プライベートレジストリを使用する為にNodeを構成する推奨の手順です。この例では、デスクトップ/ノートPC上で実行します。
+
+   1. 使用したい認証情報のセット毎に `docker login [server]`を実行します。これであなたのPC上の`$HOME/.docker/config.json`が更新されます。
+   1. 使用したい認証情報が含まれているかを確認するため、エディターで`$HOME/.docker/config.json`を見ます。
+   1. Nodeの一覧を取得します。例:
+      - 名称が必要な場合: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
+      - IPアドレスを取得したい場合: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
+   1. ローカルの`.docker/config.json`を上記の検索パスのいずれかにコピーします。
+      - 例えば、これでテストします: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
+
+{{< note >}}
+本番環境用クラスターでは、構成管理ツールを使用して必要なすべてのNodeに設定を反映してください。
+{{< /note >}}
+
+プライベートイメージを使用するPodを作成して確認します。
+例:
+
+```shell
+kubectl apply -f - <<EOF
+apiVersion: v1
+kind: Pod
+metadata:
+  name: private-image-test-1
+spec:
+  containers:
+    - name: uses-private-image
+      image: $PRIVATE_IMAGE_NAME
+      imagePullPolicy: Always
+      command: [ "echo", "SUCCESS" ]
+EOF
+```
+```
+pod/private-image-test-1 created
+```
+
+すべてが機能している場合は、しばらくしてから以下のコマンドを実行します。
+
+```shell
+kubectl logs private-image-test-1
+```
+コマンドの結果を確認してください。
+```
+SUCCESS
+```
+
+コマンドが失敗したと思われる場合には、以下を実行します。
+```shell
+kubectl describe pods/private-image-test-1 | grep 'Failed'
+```
+失敗している場合、結果が次のようになります。
+```
+  Fri, 26 Jun 2015 15:36:13 -0700    Fri, 26 Jun 2015 15:39:13 -0700    19    {kubelet node-i2hq}    spec.containers{uses-private-image}    failed        Failed to pull image "user/privaterepo:v1": Error: image user/privaterepo:v1 not found
+```
+
+
+クラスターのすべてのNodeが同じ`.docker/config.json`になっているかを確認する必要があります。
+そうでない場合、Podは一部のNodeで実行できますが他のNodeでは実行に失敗します。
+例えば、Nodeのオートスケールを使用している場合、各インスタンスのテンプレートに`.docker/config.json`が含まれている、またはこのファイルが含まれているドライブをマウントする必要があります。
+
+プライベートレジストリーキーを`.docker/config.json`に追加した時点で、すべてのPodがプライベートレジストリのイメージに読み取りアクセス権も持つようになります。
+
+### 事前にPullしたイメージ
+
+{{< note >}}
+Node構成を制御できる場合、この方法が適しています。
+クラウドプロバイダーがNodeを管理し自動的に設定を置き換える場合は、確実に機能できません。
+{{< /note >}}
+
+デフォルトでは、kubeletは指定されたレジストリからそれぞれのイメージをPullしようとします。
+しかしながら、コンテナの`imagePullPolicy`プロパティに`IfNotPresent`や`Never`が設定されている場合、ローカルのイメージが使用されます。(それぞれに対して、優先的またはか排他的に)
+
+レジストリ認証の代替として事前にPullしたイメージを利用したい場合、クラスターのすべてのNodeが同じ事前にPullしたイメージを持っていることを確認する必要があります。
+
+特定のイメージをあらかじめロードしておくことは高速化やプライベートレジストリへの認証の代替として利用することができます。
+
+すべてのPodは事前にPullしたイメージへの読み取りアクセス権をもちます。
+
+### PodでImagePullSecretsを指定する
+
+{{< note >}}
+この方法がプライベートレジストリのイメージに基づいてコンテナを実行するための推奨の方法です。
+{{< /note >}}
+
+KubernetesはPodでのコンテナイメージレジストリキーの指定をサポートしています。
+
+#### Docker ConfigでSecretを作成する。
+
+適切な大文字の値を置き換えて、次のコマンドを実行します。
+
+```shell
+kubectl create secret docker-registry <name> --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL
+```
+
+既にDocker認証情報ファイルを持っている場合は、上記のコマンドの代わりに、認証情報ファイルをKubernetes {{< glossary_tooltip text="Secrets" term_id="secret" >}}としてインポートすることができます。
+[既存のDocker認証情報に基づいてSecretを作成する](/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials) で、この設定方法を説明します.
+
+これは複数のプライベートコンテナレジストリを使用している場合に特に有効です。`kubectl create secret docker-registry`はひとつのプライベートリポジトリーにのみ機能するSecretを作成するからです。
+
+{{< note >}}
+Podは自分自身のNamespace内にあるimage pull secretsのみが参照可能であるため、この作業はNemespace毎に1回行う必要があります。
+{{< /note >}}
+
+#### PodのimagePullSecretsを参照する方法
+
+これで、`imagePullSecrets`セクションをPod定義へ追加することでSecretを参照するPodを作成できます。
+
+例:
+
+```shell
+cat <<EOF > pod.yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: foo
+  namespace: awesomeapps
+spec:
+  containers:
+    - name: foo
+      image: janedoe/awesomeapp:v1
+  imagePullSecrets:
+    - name: myregistrykey
+EOF
+
+cat <<EOF >> ./kustomization.yaml
+resources:
+- pod.yaml
+EOF
+```
+
+これは、プライベートレジストリを使用する各Podで行う必要があります。
+
+ただし、この項目の設定は[ServiceAccount](/docs/tasks/configure-pod-container/configure-service-account/)リソースの中でimagePullSecretsを指定することで自動化することができます。
+
+詳細の手順は、[ImagePullSecretsをService Accountに追加する](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account)をクリックしてください。
+
+これを各Nodeの`.docker/config.json`に組み合わせて利用できます。認証情報はマージされます。
+
+## ユースケース
+
+プライベートレジストリを設定するためのソリューションはいくつかあります。ここでは、いくつかの一般的なユースケースと推奨される解決方法を示します。
+
+1. クラスターに独自仕様でない(例えば、オープンソース)イメージだけを実行します。イメージを非公開にする必要がありません。
+   - Docker hubのパブリックイメージを利用します。
+     - 設定は不要です。
+     - クラウドプロバイダーによっては、可用性の向上とイメージをPullする時間を短くする為に、自動的にキャッシュやミラーされたパプリックイメージを提供します。
+1. 社外には非公開の必要があるが、すべてのクラスター利用者には見せてよい独自仕様のイメージをクラスターで実行しています。
+   - ホストされたプライペートな [Dockerレジストリ](https://docs.docker.com/registry/)を使用する.
+     - [Docker Hub](https://hub.docker.com/signup)または他の場所の上でホストされている場合があります。
+     - 上記のように各Node上のdocker/config.jsonを手動で構成します。
+   - または、オープンな読み取りアクセスを許可したファイヤーウォールの背後で内部向けプライベートレジストリを実行します。
+     - Kubernetesの設定は必要ありません。
+   - イメージへのアクセスを制御できるホストされたコンテナイメージレジストリサービスを利用します。
+     - Nodeを手動設定するよりもクラスターのオートスケーリングのほうがうまく機能します。
+   - また、Node設定変更を自由にできないクラスターでは`imagePullSecrets`を使用します。
+1. 独自仕様のイメージを含むクラスターで、いくつかは厳格なアクセス制御が必要である。
+   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認してください。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性があります。
+   - 機密のデータはイメージに含めてしまうのではなく、"Secret"リソースに移行してください。
+1. それぞれのテナントが独自のプライベートレジストリを必要とするマルチテナントのクラスターである。
+   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認してください。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性があります。
+   - 認証が必要なプライベートレジストリを実行します。
+   - それぞれのテナントでレジストリ認証を生成し、Secretへ設定し、各テナントのNamespaceに追加します。
+   - テナントは、Secretを各NamespaceのimagePullSecretsへ追加します。
+
+複数のレジストリへのアクセスが必要な場合、それぞれのレジストリ毎にひとつのSecretを作成する事ができます。
+Kubeletは複数の`imagePullSecrets`を単一の仮想的な`.docker/config.json`にマージします。
+
+## {{% heading "whatsnext" %}}
+
+* [OCI Image Manifest Specification](https://github.com/opencontainers/image-spec/blob/master/manifest.md)を読みます。

From 6e90a5bda226155654db491f50d618247639e403 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Wed, 12 Aug 2020 14:44:51 +0800
Subject: [PATCH 030/496] [zh] Rework kubectl install translation

The English version has changed a lot.
---
 .../zh/docs/tasks/tools/install-kubectl.md    | 1184 ++++++++++-------
 1 file changed, 682 insertions(+), 502 deletions(-)

diff --git a/content/zh/docs/tasks/tools/install-kubectl.md b/content/zh/docs/tasks/tools/install-kubectl.md
index 577e48d40f..0684759e59 100644
--- a/content/zh/docs/tasks/tools/install-kubectl.md
+++ b/content/zh/docs/tasks/tools/install-kubectl.md
@@ -23,64 +23,95 @@ card:
 <!--
  Use the Kubernetes command-line tool, [kubectl](/docs/user-guide/kubectl/), to deploy and manage applications on Kubernetes. Using kubectl, you can inspect cluster resources; create, delete, and update components; look at your new cluster; and bring up example apps.
  -->
- 在 Kubernetes 上使用 Kubernetes 命令行工具 [kubectl](/docs/user-guide/kubectl/) 部署和管理应用程序。使用 kubectl，您可以检查集群资源；创建、删除和更新组件；查看您的新集群；并启动实例应用程序。
-
+在 Kubernetes 上使用 Kubernetes 命令行工具 [kubectl](/zh/docs/reference/kubectl/kubectl/)
+部署和管理应用程序。
+使用 kubectl，你可以检查集群资源；创建、删除和更新组件；查看你的新集群；并启动实例应用程序。
 
 ## {{% heading "prerequisites" %}}
 
 <!--
 You must use a kubectl version that is within one minor version difference of your cluster. For example, a v1.2 client should work with v1.1, v1.2, and v1.3 master. Using the latest version of kubectl helps avoid unforeseen issues.
 -->
-您必须使用与集群小版本号差别为一的 kubectl 版本。例如，1.2版本的客户端应该与1.1版本、1.2版本和1.3版本的主节点一起使用。使用最新版本的 kubectl 有助于避免无法预料的问题。
-
-
+你必须使用与集群小版本号差别为一的 kubectl 版本。
+例如，1.2 版本的客户端应该与 1.1 版本、1.2 版本和 1.3 版本的主节点一起使用。
+使用最新版本的 kubectl 有助于避免无法预料的问题。
 
 <!-- steps -->
 
 <!--
-## Install kubectl
+## Install kubectl on Linux
 
-Here are a few methods to install kubectl.
+### Install kubectl binary with curl on Linux
 -->
-## 安装 kubectl
+## 在 Linux 上安装 kubectl  {#install-kubectl-on-linux}
 
-以下是一些安装 kubectl 的方法。
+### 在 Linux 上使用 curl 安装 kubectl 可执行文件
 
 <!--
-## Install kubectl binary using native package management
-
-{{< tabs name="kubectl_install" >}}
-{{< tab name="Ubuntu, Debian or HypriotOS" codelang="bash" >}}
-sudo apt-get update && sudo apt-get install -y apt-transport-https
-curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
-echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
-sudo apt-get update
-sudo apt-get install -y kubectl
-{{< /tab >}}
-{{< tab name="CentOS, RHEL or Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
-[kubernetes]
-name=Kubernetes
-baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
-enabled=1
-gpgcheck=1
-repo_gpgcheck=1
-gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
-EOF
-yum install -y kubectl
-{{< /tab >}}
-{{< /tabs >}}
+1. Download the latest release with the command:
 -->
-## 使用本地软件包管理软件安装 kubectl 二进制文件
+1. 使用下面命令下载最新的发行版本：
+
+   ```
+   curl -LO "https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl"
+   ```
+
+   <!--
+   To download a specific version, replace the `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)` portion of the command with the specific version.
+
+   For example, to download version {{< param "fullversion" >}} on Linux, type:
+   -->
+   要下载特定版本， `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)`
+   部分替换为指定版本。
+
+   例如，要下载 Linux 上的版本 {{< param "fullversion" >}}，输入：
+    
+   ```
+   curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
+   ```
+
+<!--
+2. Make the kubectl binary executable.
+-->
+2. 标记 kubectl 文件为可执行：
+
+   ```
+   chmod +x ./kubectl
+   ```
+
+<!--
+3. Move the binary in to your PATH.
+-->
+3. 将文件放到 PATH 路径下：
+
+   ```
+   sudo mv ./kubectl /usr/local/bin/kubectl
+   ```
+
+<!--
+4. Test to ensure the version you installed is up-to-date:
+-->
+4. 测试你所安装的版本是最新的：
+
+   ```
+   kubectl version --client
+   ```
+
+<!--
+### Install using native package management
+-->
+### 使用原生包管理器安装    {#install-using-native-package-management}
 
 {{< tabs name="kubectl_install" >}}
-{{< tab name="Ubuntu, Debian or HypriotOS" codelang="bash" >}}
+{{< tab name="Ubuntu、Debian 或 HypriotOS" codelang="bash" >}}
 sudo apt-get update && sudo apt-get install -y apt-transport-https
 curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
 echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
 sudo apt-get update
 sudo apt-get install -y kubectl
 {{< /tab >}}
-{{< tab name="CentOS, RHEL or Fedora" codelang="bash" >}}cat <<EOF > /etc/yum.repos.d/kubernetes.repo
+{{< tab name="CentOS、RHEL 或 Fedora" codelang="bash" >}}
+cat <<EOF > /etc/yum.repos.d/kubernetes.repo
 [kubernetes]
 name=Kubernetes
 baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
@@ -93,616 +124,765 @@ yum install -y kubectl
 {{< /tab >}}
 {{< /tabs >}}
 
-
 <!--
-## Install with snap on Ubuntu
-
-If you are on Ubuntu or one of other Linux distributions that support [snap](https://snapcraft.io/docs/core/install) package manager, kubectl is available as a [snap](https://snapcraft.io/) application.
-
-1. Switch to the snap user and run the installation command:
-
-    ```
-    sudo snap install kubectl --classic
-    ```
-
-2. Test to ensure the version you installed is sufficiently up-to-date:
-
-    ```
-    kubectl version --client
-    ```
+### Install using other package management
 -->
-## 在 Ubuntu 上使用 snap 安装 kubectl
+### 使用其他包管理器安装 {#install-using-other-package-management}
 
-如果您使用的是 Ubuntu 或其他支持 [snap](https://snapcraft.io/docs/core/install) 软件包管理器的Linux发行版，kubectl 可以作为一个 [snap](https://snapcraft.io/) 应用程序使用。
+{{< tabs name="other_kubectl_install" >}}
+{{% tab name="Snap" %}}
+<!--
+If you are on Ubuntu or another Linux distribution that support [snap](https://snapcraft.io/docs/core/install) package manager, kubectl is available as a [snap](https://snapcraft.io/) application.
+-->
+如果你使用 Ubuntu 或者其他支持 [snap](https://snapcraft.io/docs/core/install)
+包管理器的 Linux 发行版，kubeclt 可以作为 [Snap](https://snapcraft.io)
+应用来安装：
 
-1. 切换到 snap 用户并运行安装命令：
+```shell
+snap install kubectl --classic
 
-    ```
-    sudo snap install kubectl --classic
-    ```
+kubectl version --client
+```
 
-2. 测试以确保您安装的版本是最新的：
+{{% /tab %}}
 
-    ```
-    kubectl version --client
-    ```
+{{% tab name="Homebrew" %}}
+<!--
+If you are on Linux and using [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) package manager, kubectl is available for [installation](https://docs.brew.sh/Homebrew-on-Linux#install).
+-->
+如果你在使用 Linux 且使用 [Homebrew](https://docs.brew.sh/Homebrew-on-Linux) 包管理器，
+kubectl 也可以用这种方式[安装](https://docs.brew.sh/Homebrew-on-Linux#install)。
+
+```shell
+brew install kubectl
+
+kubectl version --client
+```
+
+{{% /tab %}}
+
+{{< /tabs >}}
 
 <!--
-## Install with Homebrew on macOS
+## Install kubectl on macOS
+
+### Install kubectl binary with curl on macOS
+-->
+## 在 macOS 上安装 kubectl
+
+### 在 macOS 上使用 curl 安装 kubectl 可执行文件
+
+<!--
+1. Download the latest release:
+-->
+1. 下载最新发行版本：
+
+   ```bash
+   curl -LO "https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/darwin/amd64/kubectl"
+   ```
+
+   <!--
+   To download a specific version, replace the `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)` portion of the command with the specific version.
+
+   For example, to download version {{< param "fullversion" >}} on macOS, type:
+   -->
+   要下载特定版本，可将上面命令中的`$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)`
+   部分替换成你想要的版本。
+
+   例如，要在 macOS 上安装版本 {{< param "fullversion" >}}，输入：
+
+   ```bash
+   curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
+   ```
+
+   <!-- Make the kubectl binary executable. -->
+   将二进制文件标记为可执行：
+
+   ```bash
+   chmod +x ./kubectl
+   ```
+<!--
+3. Move the binary in to your PATH.
+-->
+3. 将二进制文件放入 PATH 目录下：
+
+   ```bash
+   sudo mv ./kubectl /usr/local/bin/kubectl
+   ```
+
+<!--
+4. Test to ensure the version you installed is up-to-date:
+-->
+4. 测试以确保所安装的版本是最新的：
+
+   ```bash
+   kubectl version --client
+   ```
+
+<!--
+### Install with Homebrew on macOS
 
 If you are on macOS and using [Homebrew](https://brew.sh/) package manager, you can install kubectl with Homebrew.
-
-1. Run the installation command:
-
-    ```
-    brew install kubernetes-cli
-    ```
-
-2. Test to ensure the version you installed is sufficiently up-to-date:
-
-    ```
-    kubectl version --client
-    ```
 -->
-## <span id = "jump"> 在 macOS 上用 Homebrew 安装 kubectl </span>
+### 在 macOS 上使用 Homebrew 安装    {#install-with-homebrew-on-macos}
 
-如果您使用的是 macOS 系统并使用 [Homebrew](https://brew.sh/) 包管理器，您可以通过 Homebrew 安装 kubectl。
+如果你在 macOS 上且使用 [Homebrew](https://brew.sh/) 包管理器，
+你可以使用 Homebrew 来安装 kubectl。
 
+<!--
+1. Run the installation command:
+-->
 1. 运行安装命令：
-   
-    ```
-    brew install kubernetes-cli
-    ```
 
-2. 测试以确保您安装的版本是最新的：
-   
+   ```
+   brew install kubernetes-cli
+   ```
+
+<!--
+2. Test to ensure the version you installed is sufficiently up-to-date:
+-->
+2. 测试以确保你安装的版本是最新的：
+
     ```
     kubectl version --client
     ```
-    
 
 <!--
 ## Install with Macports on macOS
 
 If you are on macOS and using [Macports](https://macports.org/) package manager, you can install kubectl with Macports.
-
-1. Run the installation command:
-
-    ```
-    port install kubectl
-    ```
-
-2. Test to ensure the version you installed is sufficiently up-to-date:
-
-    ```
-    kubectl version --client
-    ```
 -->
-
 ## 在 macOS 上用 Macports 安装 kubectl
 
-如果您使用的是 macOS 系统并使用 [Macports](https://macports.org/) 包管理器，您可以通过 Macports 安装 kubectl。
+如果你使用的是 macOS 系统并使用 [Macports](https://macports.org/) 包管理器，你可以通过 Macports 安装 kubectl。
 
+<!--
+1. Run the installation command:
+-->
 1. 运行安装命令：
-   
-    ```
-    port install kubectl
-    ```
 
-2. 测试以确保您安装的版本是最新的：
+   ```
+   port install kubectl
+   ```
 
-     ```
-    kubectl version --client
-    ```
+<!--
+2. Test to ensure the version you installed is sufficiently up-to-date:
+-->
+2. 测试以确保你安装的版本是最新的：
+
+   ```
+   kubectl version --client
+   ```
+
+<!--
+## Install kubectl on Windows
+
+### Install kubectl binary with curl on Windows
+-->
+## 在 Windows 上安装 kubectl   {#install-kubectl-on-windows}
+
+### 在 Windows 上使用 curl 安装 kubectl 二进制文件
+
+<!--
+1. Download the latest release {{< param "fullversion" >}} from [this link](https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe).
+
+   Or if you have `curl` installed, use this command:
+-->
+1. 从[此链接](https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe)
+   下载最新发型版本。
+
+   或者如何你安装了 `curl`，使用下面的命令：
+
+   ```bash
+   curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
+   ```
+
+   <!--
+   To find out the latest stable version (for example, for scripting), take a look at [https://storage.googleapis.com/kubernetes-release/release/stable.txt](https://storage.googleapis.com/kubernetes-release/release/stable.txt).
+   -->
+   要了解最新的稳定版本（例如，出于脚本编写目的），可查看
+   [https://storage.googleapis.com/kubernetes-release/release/stable.txt](https://storage.googleapis.com/kubernetes-release/release/stable.txt)。
+
+<!--
+2. Add the binary in to your PATH.
+-->
+2. 将二进制文件放到 PATH 目录下。
+
+<!--
+3. Test to ensure the version of `kubectl` is the same as downloaded:
+-->
+3. 测试以确定所下载的 `kubectl` 版本是正确的的：
+
+   ```bash
+   kubectl version --client
+   ```
+
+<!--
+[Docker Desktop for Windows](https://docs.docker.com/docker-for-windows/#kubernetes) adds its own version of `kubectl` to PATH.
+If you have installed Docker Desktop before, you may need to place your PATH entry before the one added by the Docker Desktop installer or remove the Docker Desktop's `kubectl`.
+-->
+{{< note >}}
+[Docker Desktop for Windows](https://docs.docker.com/docker-for-windows/#kubernetes)
+会在 PATH 中添加自己的 `kubectl` 程序。
+如果你之前安装过 Docker Desktop，你可能需要将新安装的 PATH 项放到 Docker Desktop
+安装程序所添加的目录之前，或者干脆删除 Docker Desktop 所安装的 `kubectl`。
+{{< /note >}}
 
 <!--
 ## Install with Powershell from PSGallery
 
 If you are on Windows and using [Powershell Gallery](https://www.powershellgallery.com/) package manager, you can install and update kubectl with Powershell.
-
-1. Run the installation commands (making sure to specify a `DownloadLocation`):
-
-    ```
-    Install-Script -Name install-kubectl -Scope CurrentUser -Force
-    install-kubectl.ps1 [-DownloadLocation <path>]
-    ```
-
-    {{< note >}}
-    If you do not specify a `DownloadLocation`, `kubectl` will be installed in the user's temp Directory.
-    {{< /note >}}
-
-    The installer creates `$HOME/.kube` and instructs it to create a config file
-
-2. Test to ensure the version you installed is sufficiently up-to-date:
-
-    ```
-    kubectl version --client
-    ```
-
-    {{< note >}}
-    Updating the installation is performed by rerunning the two commands listed in step 1.
-    {{< /note >}}
 -->
-## 从 PSGallery 通过 Powershell 安装 kubectl
+## 使用 PowerShell 从 PSGallery 安装 kubectl
 
-如果您使用的是 Windows 系统并使用 [Powershell Gallery](https://www.powershellgallery.com/) 软件包管理器，您可以使用 Powershell 安装和更新 kubectl。
-
-1. 运行安装命令（确保指定 `DownloadLocation`）：
-
-    ```
-    Install-Script -Name install-kubectl -Scope CurrentUser -Force
-    install-kubectl.ps1 [-DownloadLocation <path>]
-    ```
-
-    {{< note >}}
-    如果你没有指定 `DownloadLocation`，那么 `kubectl` 将安装在用户的临时目录中。
-    {{< /note >}}
-
-    安装程序创建 `$ HOME/.kube` 并指示它创建配置文件
-
-2. 测试以确保您安装的版本是最新的：
-    ```
-    kubectl version --client
-    ```
-
-    {{< note >}}
-    通过重新运行步骤1中列出的两个命令来执行更新安装。
-    {{< /note >}}
+如果你使用的是 Windows 系统并使用 [Powershell Gallery](https://www.powershellgallery.com/)
+软件包管理器，你可以使用 Powershell 安装和更新 kubectl。
 
 <!--
-## Install with Chocolatey on Windows
-
-If you are on Windows and using [Chocolatey](https://chocolatey.org) package manager, you can install kubectl with Chocolatey.
-
-1. Run the installation command:
-
-    ```
-    choco install kubernetes-cli
-    ```
-
-2. Test to ensure the version you installed is sufficiently up-to-date:
-
-    ```
-    kubectl version --client
-    ```
-3. Change to your %HOME% directory:
-
-    For example: `cd C:\users\yourusername`
-
-4. Create the .kube directory:
-
-    ```
-    mkdir .kube
-    ```
-
-5. Change to the .kube directory you just created:
-
-    ```
-    cd .kube
-    ```
-
-6. Configure kubectl to use a remote Kubernetes cluster:
-
-    ```
-    New-Item config -type file
-    ```
-
-    {{< note >}}
-    Edit the config file with a text editor of your choice, such as Notepad.
-    {{< /note >}}
+1. Run the installation commands (making sure to specify a `DownloadLocation`):
 -->
-## 在 Windows 上用 Chocolatey 安装 kubectl
+1. 运行安装命令（确保指定 `DownloadLocation`）：
 
-如果您使用的是 Windows 系统并使用 [Chocolatey](https://chocolatey.org) 包管理器，您可以使用 Chocolatey 安装 kubectl。
+   ```
+   Install-Script -Name install-kubectl -Scope CurrentUser -Force
+   install-kubectl.ps1 [-DownloadLocation <path>]
+   ```
 
-1. 运行安装命令：
+   <!--
+   If you do not specify a `DownloadLocation`, `kubectl` will be installed in the user's temp Directory.
+   -->
+   {{< note >}}
+   如果你没有指定 `DownloadLocation`，那么 `kubectl` 将安装在用户的临时目录中。
+   {{< /note >}}
 
-    ```
-    choco install kubernetes-cli
-    ```
+   <!--
+   The installer creates `$HOME/.kube` and instructs it to create a config file
+   -->
+   安装程序创建 `$ HOME/.kube` 目录，并指示它创建配置文件
 
-2. 测试以确保您安装的版本是最新的：
+<!--
+2. Test to ensure the version you installed is sufficiently up-to-date:
+-->
+2. 测试以确保你安装的版本是最新的：
 
-    ```
-    kubectl version --client
-    ```
-3. 切换到 %HOME% 目录：
+   ```
+   kubectl version --client
+   ```
 
-    例如：`cd C:\users\yourusername`
+<!--
+Updating the installation is performed by rerunning the two commands listed in step 1.
+-->
+{{< note >}}
+通过重新运行步骤 1 中列出的两个命令可以更新安装。
+{{< /note >}}
 
-4. 创建 .kube 目录：
+<!--
+### Install with Chocolatey on Windows
 
-    ```
-    mkdir .kube
-    ```
+1. To install kubectl on Windows you can use either [Chocolatey] package manager or [Scoop](https://scoop.sh) command-line installer.
+-->
+1. 要在 Windows 上用 [Chocolatey](https://chocolatey.org) 或者
+   [Scoop](https://scoop.sh) 命令行安装程序安装 kubectl：
 
-5. 切换到刚刚创建的 .kube 目录：
+   {{< tabs name="kubectl_win_install" >}}
+   {{% tab name="choco" %}}
+   ```powershell
+   choco install kubernetes-cli
+   ```
+   {{% /tab %}}
+   {{% tab name="scoop" %}}
+   ```powershell
+   scoop install kubectl
+   ```
+   {{% /tab %}}
+   {{< /tabs >}}
 
-    ```
-    cd .kube
-    ```
+<!--
+2. Test to ensure the version you installed is up-to-date:
+-->
+2. 测试以确保你安装的版本是最新的：
 
+   ```
+   kubectl version --client
+   ```
+
+<!--
+3. Navigate to your home directory:
+-->
+3. 切换到你的 HOME 目录：
+
+   ```powershell
+   # 如果你在使用 cmd.exe，运行 cd %USERPROFILE%
+   cd ~
+   ```
+
+<!--
+4. Create the `.kube` directory:
+-->
+4. 创建 `.kube` 目录：
+
+   ```powerhsell
+   mkdir .kube
+   ```
+
+<!--
+5. Change to the .kube directory you just created:
+-->
+5. 进入到刚刚创建的 `.kube` 目录：
+
+   ```powershell
+   cd .kube
+   ```
+
+<!--
+6. Configure kubectl to use a remote Kubernetes cluster:
+-->
 6. 配置 kubectl 以使用远程 Kubernetes 集群：
 
-    ```
-    New-Item config -type file
-    ```
+   ```powershell
+   New-Item config -type file
+   ```
+
+<!--
+Edit the config file with a text editor of your choice, such as Notepad.
+-->
+{{< note >}}
+使用你喜欢的文本编辑器，例如 Notepad，编辑此配置文件。
+{{< /note >}}
 
-    {{< note >}}
-    使用您偏爱的编辑器编辑配置文件，例如 Notepad。
-    {{< /note >}}
 
 <!--
 ## Download as part of the Google Cloud SDK
 
 You can install kubectl as part of the Google Cloud SDK.
-
-1. Install the [Google Cloud SDK](https://cloud.google.com/sdk/).
-2. Run the `kubectl` installation command:
-
-    ```
-    gcloud components install kubectl
-    ```
-
-3. Test to ensure the version you installed is sufficiently up-to-date:
-
-    ```
-    kubectl version --client
-    ```
 -->
 ## 将 kubectl 作为 Google Cloud SDK 的一部分下载
 
 kubectl 可以作为 Google Cloud SDK 的一部分进行安装。
 
-1. 安装 [Google Cloud SDK](https://cloud.google.com/sdk/).
+<!--
+1. Install the [Google Cloud SDK](https://cloud.google.com/sdk/).
+2. Run the `kubectl` installation command:
+-->
+1. 安装 [Google Cloud SDK](https://cloud.google.com/sdk/)。
 2. 运行以下命令安装 `kubectl`：
 
-    ```
-    gcloud components install kubectl
-    ```
-
-3. 测试以确保您安装的版本是最新的：
-
-    ```
-    kubectl version --client
-    ```
+   ```
+   gcloud components install kubectl
+   ```
 
 <!--
-## Install kubectl binary using curl
-
-{{< tabs name="kubectl_install_curl" >}}
-{{% tab name="macOS" %}}
-1. Download the latest release:
-
-    ```		 
-    	curl -LO https://storage.googleapis.com/kubernetes-release/release/`curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt`/bin/linux/amd64/kubectl
-    ```
-
-    To download a specific version, replace the `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)` portion of the command with the specific version.
-
-    For example, to download version {{< param "fullversion" >}} on macOS, type:
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
-    ```
-
-2. Make the kubectl binary executable.
-
-    ```
-    chmod +x ./kubectl
-    ```
-
-3. Move the binary in to your PATH.
-
-    ```
-    sudo mv ./kubectl /usr/local/bin/kubectl
-    ```
-{{% /tab %}}
-{{% tab name="Linux" %}}
-
-1. Download the latest release with the command:
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl
-    ```
-
-    To download a specific version, replace the `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)` portion of the command with the specific version.
-
-    For example, to download version {{< param "fullversion" >}} on Linux, type:
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
-    ```
-
-2. Make the kubectl binary executable.
-
-    ```
-    chmod +x ./kubectl
-    ```
-
-3. Move the binary in to your PATH.
-
-    ```
-    sudo mv ./kubectl /usr/local/bin/kubectl
-    ```
-{{% /tab %}}
-{{% tab name="Windows" %}}
-1. Download the latest release {{< param "fullversion" >}} from [this link](https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe).
-
-    Or if you have `curl` installed, use this command:
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
-    ```
-
-    To find out the latest stable version (for example, for scripting), take a look at [https://storage.googleapis.com/kubernetes-release/release/stable.txt](https://storage.googleapis.com/kubernetes-release/release/stable.txt).
-
-2. Add the binary in to your PATH.
-{{% /tab %}}
-{{< /tabs >}}
+3. Test to ensure the version you installed is sufficiently up-to-date:
 -->
-## 通过 curl 命令安装 kubectl 可执行文件
-
-{{< tabs name="kubectl_install_curl" >}}
-{{% tab name="macOS" %}}
-1. 通过以下命令下载 kubectl 的最新版本：
-
-    ```		 
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/darwin/amd64/kubectl
-    ```
-
-    若需要下载特定版本的 kubectl，请将上述命令中的 `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)` 部分替换成为需要下载的 kubectl 的具体版本即可。
-
-     例如，如果需要下载 {{< param "fullversion" >}} 版本在 macOS 系统上,需要使用如下命令：
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/darwin/amd64/kubectl
-    ```
-
-2. 修改所下载的 kubectl 二进制文件为可执行模式。
-
-    ```
-    chmod +x ./kubectl
-    ```
-
-3. 将 kubectl 可执行文件放置到你的 PATH 目录下。
-
-
-    ```
-    sudo mv ./kubectl /usr/local/bin/kubectl
-    ```
-{{% /tab %}}
-{{% tab name="Linux" %}}
-
-1. 通过以下命令下载 kubectl 的最新版本：
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl
-    ```
-
-    若需要下载特定版本的 kubectl，请将上述命令中的 `$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)` 部分替换成为需要下载的 kubectl 的具体版本即可。
-
-    例如，如果需要下载用于 Linux 的 {{< param "fullversion" >}} 版本，需要使用如下命令：
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/linux/amd64/kubectl
-    ```
-
-2. 修改所下载的 kubectl 二进制文件为可执行模式。
-
-    ```
-    chmod +x ./kubectl
-    ```
-
-3. 将 kubectl 可执行文件放置到你的 PATH 目录下。
-
-    ```
-    sudo mv ./kubectl /usr/local/bin/kubectl
-    ```
-{{% /tab %}}
-{{% tab name="Windows" %}}
-1. 从[本链接](https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe)下载 kubectl 的最新版 {{< param "fullversion" >}}。
-
-    或者如果您已经在系统中安装了 `curl` 工具，也可以通过以下命令下载：
-
-    ```
-    curl -LO https://storage.googleapis.com/kubernetes-release/release/{{< param "fullversion" >}}/bin/windows/amd64/kubectl.exe
-    ```
-
-若要查找最新的稳定版本（例如脚本等），请查看 [https://storage.googleapis.com/kubernetes-release/release/stable.txt](https://storage.googleapis.com/kubernetes-release/release/stable.txt).
-
-2. 将 kubectl 可执行文件添加到你的 PATH 目录。
-{{% /tab %}}
-{{< /tabs >}}
-
+3. 测试以确保你安装的版本是最新的：
 
+   ```
+   kubectl version --client
+   ```
 
 <!--
-## Configure kubectl
+## Verifying kubectl configuration
 
 In order for kubectl to find and access a Kubernetes cluster, it needs a [kubeconfig file](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/), which is created automatically when you create a cluster using kube-up.sh or successfully deploy a Minikube cluster. See the [getting started guides](/docs/setup/) for more about creating clusters. If you need access to a cluster you didn't create, see the [Sharing Cluster Access document](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
 By default, kubectl configuration is located at `~/.kube/config`.
 -->
-## 配置 kubectl 
+## 验证 kubectl 配置   {#verifying-kubectl-configuration}
 
-kubectl 需要一个 [kubeconfig 配置文件](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)使其找到并访问 Kubernetes 集群。当您使用 kube-up.sh 脚本创建 Kubernetes 集群或者部署 Minikube 集群时，会自动生成 kubeconfig 配置文件。请参阅[入门指南](/docs/setup/)以了解更多创建集群相关的信息。如果您需要访问一个并非由您创建的集群，请参阅[如何共享集群的访问](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)。默认情况下，kubectl 配置文件位于 `~/.kube/config`。
+kubectl 需要一个
+[kubeconfig 配置文件](/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
+使其找到并访问 Kubernetes 集群。
+当你使用 kube-up.sh 脚本创建 Kubernetes 集群或者部署 Minikube 集群时，会自动生成 kubeconfig 配置文件。
 
 <!--
-## Check the kubectl configuration
 Check that kubectl is properly configured by getting the cluster state:
-
-```shell
-kubectl cluster-info
-```
-If you see a URL response, kubectl is correctly configured to access your cluster.
-
-If you see a message similar to the following, kubectl is not correctly configured or not able to connect to a Kubernetes cluster.
-
-```shell
-The connection to the server <server-name:port> was refused - did you specify the right host or port?
-```
-
-For example, if you are intending to run a Kubernetes cluster on your laptop (locally), you will need a tool like minikube to be installed first and then re-run the commands stated above.
-
-If kubectl cluster-info returns the url response but you can't access your cluster, to check whether it is configured properly, use:
-
-```shell
-kubectl cluster-info dump
-```
 -->
-## 检查 kubectl 的配置
 通过获取集群状态检查 kubectl 是否被正确配置：
 
 ```shell
 kubectl cluster-info
 ```
-如果您看到一个 URL 被返回，那么 kubectl 已经被正确配置，能够正常访问您的 Kubernetes 集群。
 
-如果您看到类似以下的信息被返回，那么 kubectl 没有被正确配置，无法正常访问您的 Kubernetes 集群。
+<!--
+If you see a URL response, kubectl is correctly configured to access your cluster.
+
+If you see a message similar to the following, kubectl is not correctly configured or not able to connect to a Kubernetes cluster.
+-->
+如果你看到一个 URL 被返回，那么 kubectl 已经被正确配置，能够正常访问你的 Kubernetes 集群。
+
+如果你看到类似以下的信息被返回，那么 kubectl 没有被正确配置，无法正常访问你的 Kubernetes 集群。
 
 ```shell
 The connection to the server <server-name:port> was refused - did you specify the right host or port?
 ```
 
-例如，如果您打算在笔记本电脑（本地）上运行 Kubernetes 集群，则需要首先安装 minikube 等工具，然后重新运行上述命令。
+<!--
+For example, if you are intending to run a Kubernetes cluster on your laptop (locally), you will need a tool like minikube to be installed first and then re-run the commands stated above.
 
-如果 kubectl cluster-info 能够返回 url 响应，但您无法访问您的集群，可以使用下面的命令检查配置是否正确：
+If kubectl cluster-info returns the url response but you can't access your cluster, to check whether it is configured properly, use:
+-->
+例如，如果你打算在笔记本电脑（本地）上运行 Kubernetes 集群，则需要首先安装 minikube 等工具，然后重新运行上述命令。
+
+如果 kubectl cluster-info 能够返回 URL 响应，但你无法访问你的集群，可以使用下面的命令检查配置是否正确：
 
 ```shell
 kubectl cluster-info dump
 ```
 
 <!--
+## Optional kubectl configurations
+
 ## Enabling shell autocompletion
 
-kubectl includes autocompletion support, which can save a lot of typing!
+kubectl provides autocompletion support for Bash and Zsh, which can save you a lot of typing.
 
-The completion script itself is generated by kubectl, so you typically just need to invoke it from your profile.
-
-Common examples are provided here. For more details, consult `kubectl completion -h`.
+Below are the procedures to set up autocompletion for Bash (including the difference between Linux and macOS) and Zsh.
 -->
-## 启用 shell 自动补全功能
+## 可选的 kubectl 配置
 
-kubectl 支持自动补全功能，可以节省大量输入！
+### 启用 shell 自动补全功能
 
-自动补全脚本由 kubectl 产生，您仅需要在您的 shell 配置文件中调用即可。
+kubectl 为 Bash 和 Zsh 支持自动补全功能，可以节省大量输入！
 
-以下仅提供了使用命令补全的常用示例，更多详细信息，请查阅 `kubectl completion -h` 帮助命令的输出。
+下面是设置 Bash 与 Zsh 下自动补齐的过程（包括 Linux 与 macOS 的差异）。
+
+{{< tabs name="kubectl_autocompletion" >}}
+
+{{% tab name="Linux 上的 Bash" %}}
 
 <!--
-### On Linux, using bash
-On CentOS Linux, you may need to install the bash-completion package which is not installed by default.
+### Introduction
 
-```shell
-yum install bash-completion -y
-```
+The kubectl completion script for Bash can be generated with the command `kubectl completion bash`. Sourcing the completion script in your shell enables kubectl autocompletion.
 
-To add kubectl autocompletion to your current shell, run `source <(kubectl completion bash)`.
-
-To add kubectl autocompletion to your profile, so it is automatically loaded in future shells run:
-
-```shell
-echo "source <(kubectl completion bash)" >> ~/.bashrc
-```
+However, the completion script depends on [**bash-completion**](https://github.com/scop/bash-completion), which means that you have to install this software first (you can test if you have bash-completion already installed by running `type _init_completion`).
 -->
-### Linux 系统，使用 bash
-在 CentOS Linux系统上，您可能需要安装默认情况下未安装的 bash-completion 软件包。
+#### 介绍
 
-```shell
-yum install bash-completion -y
+用于 Bash 的 kubectl 自动补齐脚本可以用 `kubectl completion bash` 命令生成。
+在 Shell 环境中引用自动补齐脚本就可以启用 kubectl 自动补齐。
+
+不过，补齐脚本依赖于 [**bash-completion**](https://github.com/scop/bash-completion) 软件包，
+这意味着你必须先安装 bash-completion（你可以通过运行 `type _init_completion`）来测试是否
+你已经安装了这个软件）。
+
+<!--
+### Install bash-completion
+
+bash-completion is provided by many package managers (see [here](https://github.com/scop/bash-completion#installation)). You can install it with `apt-get install bash-completion` or `yum install bash-completion`, etc.
+
+The above commands create `/usr/share/bash-completion/bash_completion`, which is the main script of bash-completion. Depending on your package manager, you have to manually source this file in your `~/.bashrc` file.
+
+To find out, reload your shell and run `type _init_completion`. If the command succeeds, you're already set, otherwise add the following to your `~/.bashrc` file:
+-->
+### 安装 bash-completion
+
+很多包管理器都提供 bash-completion（参见[这里](https://github.com/scop/bash-completion#installation)）。
+你可以通过 `apt-get install bash-completion` 或 `yum install bash-completion` 来安装。
+
+上述命令会创建 `/usr/share/bash-completion/bash_completion`，也就是 bash-completion 的主脚本。
+取决于所用的包管理器，你可能必须在你的 `~/.bashrc` 中通过 `source` 源引此文件。
+
+要搞清楚这一点，可以重新加载你的 Shell 并运行 `type _init_completion`。
+如果命令成功，一切就绪；否则你就需要将下面的内容添加到你的 `~/.bashrc`
+文件中：
+
+```bash
+source /usr/share/bash-completion/bash_completion
 ```
 
-执行 `source <(kubectl completion bash)` 命令在您目前正在运行的 shell 中开启 kubectl 自动补全功能。
+之后，重新加载你的 Shell 并运行 `type _init_completion` 来检查 bash-completion 是否已
+正确安装。
 
-可以将上述命令添加到 shell 配置文件中，这样在今后运行的 shell 中将自动开启 kubectl 自动补全：
+<!--
+### Enable kubectl autocompletion
 
-```shell
-echo "source <(kubectl completion bash)" >> ~/.bashrc
+You now need to ensure that the kubectl completion script gets sourced in all your shell sessions. There are two ways in which you can do this:
+-->
+### 启用 kubectl 自动补齐
+
+你现在需要确定在你的所有 Shell 会话中都源引了 kubectl 自动补齐脚本。
+实现这点有两种方式：
+
+<!--
+- Source the completion script in your `~/.bashrc` file:
+-->
+- 在 `~/.bashrc` 文件中源引自动补齐脚本
+
+  ```bash
+  echo 'source <(kubectl completion bash)' >>~/.bashrc
+  ```
+
+<!--
+- Add the completion script to the `/etc/bash_completion.d` directory:
+-->
+- 将自动补齐脚本添加到目录 `/etc/bash_completion.d`：
+
+  ```bash
+  kubectl completion bash >/etc/bash_completion.d/kubectl
+  ```
+
+<!--
+If you have an alias for kubectl, you can extend shell completion to work with that alias:
+-->
+如果你为 kubectl 命令设置了别名（alias），你可以扩展 Shell 补齐，使之能够与别名一起使用：
+
+```bash
+echo 'alias k=kubectl' >>~/.bashrc
+echo 'complete -F __start_kubectl k' >>~/.bashrc
 ```
 
 <!--
-### On macOS, using bash
-On macOS, you will need to install bash-completion support via [Homebrew](https://brew.sh/) first:
+- Source the completion script in your `~/.bashrc` file:
+-->
 
-```shell
-## If running Bash 3.2 included with macOS
-brew install bash-completion
-## or, if running Bash 4.1+
+<!--
+bash-completion sources all completion scripts in `/etc/bash_completion.d`.
+-->
+{{< note >}}
+bash-completion 会自动源引 `/etc/bash_completion.d` 下的所有自动补齐脚本。
+{{< /note >}}
+
+<!--
+Both approaches are equivalent. After reloading your shell, kubectl autocompletion should be working.
+-->
+两种方法是等价的。重新加载 Shell 之后，kubectl 的自动补齐应该能够使用了。
+
+{{% /tab %}}
+
+{{% tab name="macOS 上的 Bash" %}}
+
+<!--
+### Introduction
+
+The kubectl completion script for Bash can be generated with `kubectl completion bash`. Sourcing this script in your shell enables kubectl completion.
+
+However, the kubectl completion script depends on [**bash-completion**](https://github.com/scop/bash-completion) which you thus have to previously install.
+-->
+### 介绍
+
+用于 Bash 的 kubectl 自动补齐脚本可以用 `kubectl completion bash` 命令生成。
+在 Shell 环境中引用自动补齐脚本就可以启用 kubectl 自动补齐。
+不过，补齐脚本依赖于 [**bash-completion**](https://github.com/scop/bash-completion) 软件包，
+你必须预先安装。
+
+<!--
+There are two versions of bash-completion, v1 and v2. V1 is for Bash 3.2
+(which is the default on macOS), and v2 is for Bash 4.1+. The kubectl
+completion script **doesn't work** correctly with bash-completion v1 and Bash
+3.2. It requires **bash-completion v2** and **Bash 4.1+**. Thus, to be able to
+correctly use kubectl completion on macOS, you have to install and use Bash
+4.1+
+([*instructions*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)).
+The following instructions assume that you use Bash 4.1+ (that is, any Bash
+version of 4.1 or newer).
+-->
+{{< warning>}}
+`bash-completion` 有两个版本，v1 和 v2。
+v1 是用于 Bash 3.2 版本的（macOS 上的默认配置），v2 是用于 Bash 4.1 以上版本的。
+`kubectl` 补齐脚本 *无法* 在 v1 版本的 bash-completion 和 Bash 3.2 上使用，
+需要 **bash-completion v2** 和 **Bash 4.1 以上版本**。
+因此，为了在 macOS 上正常使用 kubectl 自动补齐，你需要安装并使用 Bash 4.1+
+版本（[*相关指南*](https://itnext.io/upgrading-bash-on-macos-7138bd1066ba)）。
+下面的指令假定你在使用 Bash 4.1+（也就是说 Bash 4.1 及以上版本）。
+{{< /warning >}}
+
+<!--
+### Upgrade Bash
+
+The instructions here assume you use Bash 4.1+. You can check your Bash's version by running:
+-->
+### 升级 Bash  {#upgrade-bash}
+
+这里的命令假定你使用的是 Bash 4.1+。你可以通过下面的命令来检查 Bash 版本：
+
+```bash
+echo $BASH_VERSION
+```
+
+<!--
+If it is too old, you can install/upgrade it using Homebrew:
+-->
+如果版本很老，你可以使用 Homebrew 来安装或升级：
+
+```bash
+brew install bash
+```
+
+<!--
+Reload your shell and verify that the desired version is being used:
+-->
+重新加载 Shell 并验证你使用的版本是期望的版本：
+
+```bash
+echo $BASH_VERSION $SHELL
+```
+
+<!--
+Homebrew usually installs it at `/usr/local/bin/bash`.
+-->
+Homebrew 通常安装 Bash 到 `/usr/local/bin/bash`。
+
+<!--
+### Install bash-completion
+
+{{< note >}}
+As mentioned, these instructions assume you use Bash 4.1+, which means you will install bash-completion v2 (in contrast to Bash 3.2 and bash-completion v1, in which case kubectl completion won't work).
+{{< /note >}}
+
+You can test if you have bash-completion v2 already installed with `type _init_completion`. If not, you can install it with Homebrew:
+-->
+### 安装 bash-completion
+
+{{< note >}}
+如前所述，这里的指令假定你使用的是 Bash 4.1+，这意味着你会安装 bash-completion
+的 v2 版本（与此相对，在 Bash 3.2 版本中的 bash-completion v1 是 kubectl
+无法使用的。
+{{< /note >}}
+
+你可以通过输入 `type _init_completion` 来测试是否 bash-completion v2 已经安装。
+如果没有，可以用 Homebrew 来安装：
+
+```bash
 brew install bash-completion@2
 ```
 
-Follow the "caveats" section of brew's output to add the appropriate bash completion path to your local .bashrc.
-
-If you installed kubectl using the [Homebrew instructions](#install-with-homebrew-on-macos) then kubectl completion should start working immediately.
-
-If you have installed kubectl manually, you need to add kubectl autocompletion to the bash-completion:
-
-```shell
-kubectl completion bash > $(brew --prefix)/etc/bash_completion.d/kubectl
-```
-
-The Homebrew project is independent from Kubernetes, so the bash-completion packages are not guaranteed to work.
+<!--
+As stated in the output of this command, add the following to your `~/.bash_profile` file:
 -->
-### macOS 系统，使用 bash
-macOS 系统需要先通过 [Homebrew](https://brew.sh/) 安装 bash-completion：
+就像命令的输出所提示的，你应该将下面的内容添加到 `~/.bash_profile` 文件中：
 
-```shell
-## 如果您运行的是 macOS 自带的 Bash 3.2，请运行：
-brew install bash-completion
-## 如果您使用的是 Bash 4.1+，请运行：
-brew install bash-completion@2
+```bash
+export BASH_COMPLETION_COMPAT_DIR="/usr/local/etc/bash_completion.d"
+[[ -r "/usr/local/etc/profile.d/bash_completion.sh" ]] && . "/usr/local/etc/profile.d/bash_completion.sh"
 ```
 
-请根据 Homebrew 输出的”注意事项（caveats）”部分的内容将 bash-completion 的路径添加到本地 .bashrc 文件中。
-
-如果您是按照 [Homebrew 指示](#jump)中的步骤安装的 kubectl，那么无需其他配置，kubectl 的自动补全功能已经被启用。
-
-如果您是手工下载并安装的 kubectl，那么您需要将 kubectl 自动补全添加到 bash-completion：
-
-```shell
-kubectl completion bash > $(brew --prefix)/etc/bash_completion.d/kubectl
-```
-
-由于 Homebrew 项目与 Kubernetes 无关，所以并不能保证 bash-completion 总能够支持 kubectl 的自动补全功能。
-
 <!--
-### Using Zsh
-If you are using zsh edit the ~/.zshrc file and add the following code to enable kubectl autocompletion:
-
-```shell
-if [ $commands[kubectl] ]; then
-  source <(kubectl completion zsh)
-fi
-```
-
-Or when using [Oh-My-Zsh](http://ohmyz.sh/), edit the ~/.zshrc file and update the `plugins=` line to include the kubectl plugin.
-
-```shell
-plugins=(kubectl)
-```
+Reload your shell and verify that bash-completion v2 is correctly installed with `type _init_completion`.
 -->
-### 使用 Zsh
-如果您使用的是 zsh,请编辑 ~/.zshrc 文件并添加以下代码以启用 kubectl 自动补全功能。
+重新加载你的 Shell 并运行 `type _init_completion`，验证 bash-completion v2
+被正确安装。
 
+<!--
+### Enable kubectl autocompletion
+
+You now have to ensure that the kubectl completion script gets sourced in all your shell sessions. There are multiple ways to achieve this:
+-->
+### 启用 kubectl 自动补齐
+
+你现在需要确保在你的所有 Shell 会话中都源引了 kubectl 自动补齐脚本。
+实现这点有两种方式：
+
+<!--
+- Source the completion script in your `~/.bashrc` file:
+-->
+- 在 `~/.bash_profile` 文件中源引自动补齐脚本
+
+  ```bash
+  echo 'source <(kubectl completion bash)' >>~/.bash_profile
+  ```
+
+<!--
+- Add the completion script to the `/etc/bash_completion.d` directory:
+-->
+- 将自动补齐脚本添加到目录 `/usr/local/etc/bash_completion.d`：
+
+  ```bash
+  kubectl completion bash >//usr/local/etc/bash_completion.d/kubectl
+  ```
+
+<!--
+If you have an alias for kubectl, you can extend shell completion to work with that alias:
+-->
+- 如果你为 kubectl 命令设置了别名（alias），你可以扩展 Shell 补齐，使之能够与别名一起使用：
+
+  ```bash
+  echo 'alias k=kubectl' >>~/.bash_profile
+  echo 'complete -F __start_kubectl k' >>~/.bash_profile
+  ```
+
+<!--
+- If you installed kubectl with Homebrew (as explained [above](#install-with-homebrew-on-macos)), then the kubectl completion script should already be in `/usr/local/etc/bash_completion.d/kubectl`. In that case, you don't need to do anything.
+
+  The Homebrew installation of bash-completion v2 sources all the files in the `BASH_COMPLETION_COMPAT_DIR` directory, that's why the latter two methods work.
+
+In any case, after reloading your shell, kubectl completion should be working.
+-->
+- 如果你是所有 Homebrew 来安装 kubectl（如[前文](#install-with-homebrew-on-macos)所述）, 
+  kubectl 补齐脚本应该已经位于 `/usr/local/etc/bash_completion.d/kubectl` 目录下。
+  在这种情况下，你就不用做任何操作了。
+
+<!--
+The Homebrew installation of bash-completion v2 sources all the files in the
+`BASH_COMPLETION_COMPAT_DIR` directory, that's why the latter two methods work.
+-->
+{{< note >}}
+Homebrew 安装 bash-completion v2 时会源引 `BASH_COMPLETION_COMPAT_DIR` 目录下的所有
+文件，这是为什么后面两种方法也可行的原因。
+{{< /note >}}
+
+<!--
+In any case, after reloading your shell, kubectl completion should be working.
+-->
+在任何一种情况下，重新加载 Shell 之后，kubectl 的自动补齐应该可以工作了。
+
+{{% /tab %}}
+
+{{% tab name="Zsh" %}}
+
+<!--
+The kubectl completion script for Zsh can be generated with the command `kubectl completion zsh`. Sourcing the completion script in your shell enables kubectl autocompletion.
+
+To do so in all your shell sessions, add the following to your `~/.zshrc` file:
+-->
+Zsh 的 kubectl 补齐脚本可通过 `kubectl completion zsh` 命令来生成。
+在 Shell 环境中引用自动补齐脚本就可以启用 kubectl 自动补齐。
 
 ```shell
-if [ $commands[kubectl] ]; then
-  source <(kubectl completion zsh)
-fi
+source <(kubectl completion zsh)
 ```
 
-如果您使用的是 [Oh-My-Zsh](http://ohmyz.sh/)，请编辑 ~/.zshrc 文件并更新 `plugins=` 行以包含 kubectl 插件。
+<!--
+If you have an alias for kubectl, you can extend shell completion to work with that alias:
+-->
+如果你为 kubectl 命令设置了别名（alias），你可以扩展 Shell 补齐，使之能够与别名一起使用：
 
 ```shell
-plugins=(kubectl)
+echo 'alias k=kubectl' >>~/.zshrc
+echo 'complete -F __start_kubectl k' >>~/.zshrc
 ```
 
+<!--
+After reloading your shell, kubectl autocompletion should be working.
+-->
+重新加载 Shell 之后，kubectl 的自动补齐应该可以工作了。
+
+<!--
+If you get an error like `complete:13: command not found: compdef`, then add the following to the beginning of your `~/.zshrc` file:
+-->
+如果你看到类似 `complete:13: command not found: compdef` 这种错误信息，
+可以将下面的命令添加到你的 `~/.zshrc` 文件的文件头：
+
+```zsh
+autoload -Uz compinit
+compinit
+```
+
+{{% /tab %}}
+
+{{< /tabs >}}
 
 ## {{% heading "whatsnext" %}}
 
 <!--
-[Learn how to launch and expose your application.](/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* [Install Minikube](/docs/tasks/tools/install-minikube/)
+* See the [getting started guides](/docs/setup/) for more about creating clusters.
+* [Learn how to launch and expose your application.](/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* If you need access to a cluster you didn't create, see the [Sharing Cluster Access document](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
+* Read the [kubectl reference docs](/docs/reference/kubectl/kubectl/)
 -->
-[了解如何启动并对外暴露您的应用程序](/docs/tasks/access-application-cluster/service-access-application-cluster/)
-
+* [安装 Minikube](/zh/docs/tasks/tools/install-minikube/)
+* 参阅[入门指南](/zh/docs/setup/)，了解创建集群相关的信息
+* 了解如何[启动和暴露你的应用](/zh/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* 如果你需要访问别人创建的集群，参考[共享集群访问文档](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/).
+* 阅读 [kubectl 参考文档](/zh/docs/reference/kubectl/kubectl/)
 

From 1c06e3763cbe036c9fe7bc285ebcf4bba9d49296 Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Wed, 12 Aug 2020 17:03:31 +0900
Subject: [PATCH 031/496] fix list-centence and concept

---
 content/ja/docs/concepts/containers/images.md | 76 +++++++++----------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index f731078866..75bb46a154 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -10,7 +10,7 @@ weight: 10
 
 アプリケーションのコンテナイメージを作成し、一般的には{{< glossary_tooltip text="Pod" term_id="pod" >}}で参照する前にレジストリへPushします。
 
-このページではコンテナイメージのコンセプト概要を説明します。
+このページではコンテナイメージの概要を説明します。
 
 <!-- body -->
 
@@ -41,10 +41,10 @@ weight: 10
 デフォルトのpull policyでは、{{< glossary_tooltip text="kubelet" term_id="kubelet" >}}はイメージを既に取得済みの場合、イメージのPullをスキップさせる`IfNotPresent`が設定されています。
 常にPullを強制させたい場合は、次のいずれかの方法で実行できます。
 
-- コンテナの`imagePullPolicy`に`Always`を設定します。
-- `imagePullPolicy`を省略し、使用するイメージに`:latest`タグを使用します。
-- `imagePullPolicy`と使用するイメージのタグを省略します。
-- [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)アドミッションコントローラーを有効にします。
+- コンテナの`imagePullPolicy`に`Always`を設定する
+- `imagePullPolicy`を省略し、使用するイメージに`:latest`タグを使用する
+- `imagePullPolicy`と使用するイメージのタグを省略する
+- [AlwaysPullImages](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)アドミッションコントローラーを有効にする
 
 `imagePullPolicy`が値なしで定義された場合、この場合も`Always`が設定されます。
 
@@ -61,15 +61,15 @@ Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィッ
 認証情報はいくつかの方法で提供できます。
 
   - プライベートレジストリへの認証をNodeに設定する
-    - すべてのPodがプライベートレジストリを読み取ることができます。
-    - クラスター管理者によるNodeの設定が必要です。
+    - すべてのPodがプライベートレジストリを読み取ることができる
+    - クラスター管理者によるNodeの設定が必要
   - 事前にPullされたイメージ
-    - すべてのPodがNode上にキャッシュされたイメージを利用できます。
-    - セットアップするためにはすべてのNodeに対するrootアクセスが必要です。
+    - すべてのPodがNode上にキャッシュされたイメージを利用できる
+    - セットアップするためにはすべてのNodeに対するrootアクセスが必要
   - PodでImagePullSecretsを指定する
-    - キーを提供したPodのみがプライベートレジストリへアクセスできる。
+    - キーを提供したPodのみがプライベートレジストリへアクセスできる
   - ベンダー固有またはローカルエクステンション
-    - カスタムNode構成を使っている場合、あなた(または、あなたのクラウドプロバイダー)はコンテナレジストリーへの認証の仕組みを組み込むことができます。
+    - カスタムNode構成を使っている場合、あなた(または、あなたのクラウドプロバイダー)はコンテナレジストリーへの認証の仕組みを組み込むことができる
 
 これらのオプションについて、以下で詳しく説明します。
 
@@ -104,19 +104,19 @@ kubeletプロセスの環境では、明示的に`HOME=/root`を設定する必
 
 以下は、プライベートレジストリを使用する為にNodeを構成する推奨の手順です。この例では、デスクトップ/ノートPC上で実行します。
 
-   1. 使用したい認証情報のセット毎に `docker login [server]`を実行します。これであなたのPC上の`$HOME/.docker/config.json`が更新されます。
-   1. 使用したい認証情報が含まれているかを確認するため、エディターで`$HOME/.docker/config.json`を見ます。
-   1. Nodeの一覧を取得します。例:
+   1. 使用したい認証情報のセット毎に `docker login [server]`を実行する。これであなたのPC上の`$HOME/.docker/config.json`が更新される
+   1. 使用したい認証情報が含まれているかを確認するため、エディターで`$HOME/.docker/config.json`を見る
+   1. Nodeの一覧を取得 例:
       - 名称が必要な場合: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
       - IPアドレスを取得したい場合: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
-   1. ローカルの`.docker/config.json`を上記の検索パスのいずれかにコピーします。
-      - 例えば、これでテストします: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
+   1. ローカルの`.docker/config.json`を上記の検索パスのいずれかにコピーする
+      - 例えば、これでテスト実施: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
 
 {{< note >}}
 本番環境用クラスターでは、構成管理ツールを使用して必要なすべてのNodeに設定を反映してください。
 {{< /note >}}
 
-プライベートイメージを使用するPodを作成して確認します。
+プライベートイメージを使用するPodを作成し確認します。
 例:
 
 ```shell
@@ -243,27 +243,27 @@ EOF
 
 プライベートレジストリを設定するためのソリューションはいくつかあります。ここでは、いくつかの一般的なユースケースと推奨される解決方法を示します。
 
-1. クラスターに独自仕様でない(例えば、オープンソース)イメージだけを実行します。イメージを非公開にする必要がありません。
-   - Docker hubのパブリックイメージを利用します。
-     - 設定は不要です。
-     - クラウドプロバイダーによっては、可用性の向上とイメージをPullする時間を短くする為に、自動的にキャッシュやミラーされたパプリックイメージを提供します。
-1. 社外には非公開の必要があるが、すべてのクラスター利用者には見せてよい独自仕様のイメージをクラスターで実行しています。
-   - ホストされたプライペートな [Dockerレジストリ](https://docs.docker.com/registry/)を使用する.
-     - [Docker Hub](https://hub.docker.com/signup)または他の場所の上でホストされている場合があります。
-     - 上記のように各Node上のdocker/config.jsonを手動で構成します。
-   - または、オープンな読み取りアクセスを許可したファイヤーウォールの背後で内部向けプライベートレジストリを実行します。
-     - Kubernetesの設定は必要ありません。
-   - イメージへのアクセスを制御できるホストされたコンテナイメージレジストリサービスを利用します。
-     - Nodeを手動設定するよりもクラスターのオートスケーリングのほうがうまく機能します。
-   - また、Node設定変更を自由にできないクラスターでは`imagePullSecrets`を使用します。
-1. 独自仕様のイメージを含むクラスターで、いくつかは厳格なアクセス制御が必要である。
-   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認してください。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性があります。
-   - 機密のデータはイメージに含めてしまうのではなく、"Secret"リソースに移行してください。
-1. それぞれのテナントが独自のプライベートレジストリを必要とするマルチテナントのクラスターである。
-   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認してください。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性があります。
-   - 認証が必要なプライベートレジストリを実行します。
-   - それぞれのテナントでレジストリ認証を生成し、Secretへ設定し、各テナントのNamespaceに追加します。
-   - テナントは、Secretを各NamespaceのimagePullSecretsへ追加します。
+1. クラスターに独自仕様でない(例えば、オープンソース)イメージだけを実行する。イメージを非公開にする必要がない
+   - Docker hubのパブリックイメージを利用する
+     - 設定は不要
+     - クラウドプロバイダーによっては、可用性の向上とイメージをPullする時間を短くする為に、自動的にキャッシュやミラーされたパプリックイメージが提供される
+1. 社外には非公開の必要があるが、すべてのクラスター利用者には見せてよい独自仕様のイメージをクラスターで実行している
+   - ホストされたプライペートな [Dockerレジストリ](https://docs.docker.com/registry/)を使用
+     - [Docker Hub](https://hub.docker.com/signup)または他の場所の上でホストされている場合がある
+     - 上記のように各Node上のdocker/config.jsonを手動で構成する
+   - または、オープンな読み取りアクセスを許可したファイヤーウォールの背後で内部向けプライベートレジストリを実行する
+     - Kubernetesの設定は必要ない
+   - イメージへのアクセスを制御できるホストされたコンテナイメージレジストリサービスを利用する
+     - Nodeを手動設定するよりもクラスターのオートスケーリングのほうがうまく機能する
+   - また、Node設定変更を自由にできないクラスターでは`imagePullSecrets`を使用する
+1. 独自仕様のイメージを含むクラスターで、いくつかは厳格なアクセス制御が必要である
+   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認する必要あり。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性がある
+   - 機密のデータはイメージに含めてしまうのではなく、"Secret"リソースに移行する
+1. それぞれのテナントが独自のプライベートレジストリを必要とするマルチテナントのクラスターである
+   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認する必要あり。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性がある
+   - 認証が必要なプライベートレジストリを実行する
+   - それぞれのテナントでレジストリ認証を生成し、Secretへ設定し、各テナントのNamespaceに追加する
+   - テナントは、Secretを各NamespaceのimagePullSecretsへ追加する
 
 複数のレジストリへのアクセスが必要な場合、それぞれのレジストリ毎にひとつのSecretを作成する事ができます。
 Kubeletは複数の`imagePullSecrets`を単一の仮想的な`.docker/config.json`にマージします。

From 9c718eb06656d6edc168ad788c638d614b8480a5 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Thu, 13 Aug 2020 13:44:18 +0800
Subject: [PATCH 032/496] [zh] Resync config PV storage task

---
 .../configure-persistent-volume-storage.md    | 275 ++++++++++++------
 1 file changed, 179 insertions(+), 96 deletions(-)

diff --git a/content/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md b/content/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
index 874700d19a..fdc06d75be 100644
--- a/content/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
+++ b/content/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
@@ -5,42 +5,42 @@ weight: 60
 ---
 
 <!--
----
 title: Configure a Pod to Use a PersistentVolume for Storage
 content_type: task
 weight: 60
----
 -->
 
 <!-- overview -->
 
 <!--
-This page shows how to configure a Pod to use a PersistentVolumeClaim for storage.
+This page shows how to configure a Pod to use a
+{{< glossary_tooltip text="PersistentVolumeClaim" term_id="persistent-volume-claim" >}}
+for storage.
 Here is a summary of the process:
 
 1. A cluster administrator creates a PersistentVolume that is backed by physical
 storage. The administrator does not associate the volume with any Pod.
 
-1. A cluster user creates a PersistentVolumeClaim, which gets automatically
-bound to a suitable PersistentVolume.
+1. You, now taking the role of a developer / cluster user, create a
+PersistentVolumeClaim that is automatically bound to a suitable
+PersistentVolume.
 
 1. The user creates a Pod that uses the PersistentVolumeClaim as storage.
 -->
-
-本文介绍如何配置 Pod 使用 PersistentVolumeClaim 作为存储。
+本文介绍如何配置 Pod 使用 
+{{< glossary_tooltip text="PersistentVolumeClaim" term_id="persistent-volume-claim" >}}
+作为存储。
 以下是该过程的总结：
 
-1. 集群管理员创建由物理存储支持的 PersistentVolume。管理员不将卷与任何 Pod 关联。
-
-1. 群集用户创建一个 PersistentVolumeClaim，它将自动绑定到合适的 PersistentVolume。
-
-1. 用户创建一个使用 PersistentVolumeClaim 作为存储的 Pod。
+1. 你作为集群管理员创建由物理存储支持的 PersistentVolume。你不会将卷与任何 Pod 关联。
 
+1. 你现在以开发人员或者集群用户的角色创建一个 PersistentVolumeClaim，
+   它将自动绑定到合适的 PersistentVolume。
 
+1. 你创建一个使用 PersistentVolumeClaim 作为存储的 Pod。
 
 ## {{% heading "prerequisites" %}}
 
-
 <!--
 * You need to have a Kubernetes cluster that has only one Node, and the kubectl
 command-line tool must be configured to communicate with your cluster. If you
@@ -51,12 +51,10 @@ do not already have a single-node cluster, you can create one by using
 [Persistent Volumes](/docs/concepts/storage/persistent-volumes/).
 -->
 
-* 您需要一个包含单个节点的 Kubernetes 集群，并且必须配置 kubectl 命令行工具以便与集群交互。
-如果还没有单节点集群，可以使用 [Minikube](/docs/getting-started-guides/minikube) 创建一个。
-
-* 熟悉[持久卷](/docs/concepts/storage/persistent-volumes/)中的材料。
-
+* 你需要一个包含单个节点的 Kubernetes 集群，并且必须配置 kubectl 命令行工具以便与集群交互。
+  如果还没有单节点集群，可以使用 [Minikube](/zh/docs/setup/learning-environment/minikube/) 创建一个。
 
+* 熟悉[持久卷](/zh/docs/concepts/storage/persistent-volumes/)中的材料。
 
 <!-- steps -->
 
@@ -69,24 +67,67 @@ shell to your Node by entering `minikube ssh`.
 
 In your shell, create a `/mnt/data` directory:
 -->
-
 ## 在你的节点上创建一个 index.html 文件
 
-打开集群中节点的一个 shell。
-如何打开 shell 取决于集群的设置。
-例如，如果您正在使用 Minikube，那么可以通过输入 `minikube ssh` 来打开节点的 shell。
+打开集群中节点的一个 Shell。
+如何打开 Shell 取决于集群的设置。
+例如，如果你正在使用 Minikube，那么可以通过输入 `minikube ssh` 来打开节点的 Shell。
 
-在 shell 中，创建一个 `/mnt/data` 目录：
+在 Shell 中，创建一个 `/mnt/data` 目录：
 
-    mkdir /mnt/data
+<!--
+# This assumes that your Node uses "sudo" to run commands
+# as the superuser
+-->
+```shell
+# 这里假定你的节点使用 "sudo" 来以超级用户角色执行命令
+sudo mkdir /mnt/data
+```
 
 <!--
 In the `/mnt/data` directory, create an `index.html` file:
 -->
-
 在 `/mnt/data` 目录中创建一个 index.html 文件：
 
-    echo 'Hello from Kubernetes storage' > /mnt/data/index.html
+<!--
+# This again assumes that your Node uses "sudo" to run commands
+# as the superuser
+-->
+```
+# 这里再次假定你的节点使用 "sudo" 来以超级用户角色执行命令
+echo 'Hello from Kubernetes storage' > /mnt/data/index.html
+```
+
+<!--
+If your Node uses a tool for superuser access other than `sudo`, you can
+usually make this work if you replace `sudo` with the name of the other tool.
+-->
+{{< note >}}
+如果你的节点使用某工具而不是 `sudo` 来完成超级用户访问，你可以将上述命令
+中的 `sudo` 替换为该工具的名称。
+{{< /note >}}
+
+<!--
+Test that the `index.html` file exists:
+-->
+测试 `index.html` 文件确实存在：
+
+```shell
+cat /mnt/data/index.html
+```
+<!-- 
+The output should be:
+-->
+输出应该是：
+
+```
+Hello from Kubernetes storage
+```
+
+<!--
+You can now close the shell to your Node.
+-->
+现在你可以关闭节点的 Shell 了。
 
 <!--
 ## Create a PersistentVolume
@@ -95,12 +136,11 @@ In this exercise, you create a *hostPath* PersistentVolume. Kubernetes supports
 hostPath for development and testing on a single-node cluster. A hostPath
 PersistentVolume uses a file or directory on the Node to emulate network-attached storage.
 -->
-
 ## 创建 PersistentVolume
 
-在本练习中，您将创建一个 *hostPath* 类型的 PersistentVolume。
+在本练习中，你将创建一个 *hostPath* 类型的 PersistentVolume。
 Kubernetes 支持用于在单节点集群上开发和测试的 hostPath 类型的 PersistentVolume。
-hostPath 类型的 PersistentVolume 使用节点上的文件或目录来模拟附带网络的存储。
+hostPath 类型的 PersistentVolume 使用节点上的文件或目录来模拟网络附加存储。
 
 <!--
 In a production cluster, you would not use hostPath. Instead a cluster administrator
@@ -112,8 +152,8 @@ to set up
 
 Here is the configuration file for the hostPath PersistentVolume:
 -->
-
-在生产集群中，您不会使用 hostPath。集群管理员会提供网络存储资源，比如 Google Compute Engine 持久盘卷、NFS 共享卷或 Amazon Elastic Block Store 卷。
+在生产集群中，你不会使用 hostPath。
+集群管理员会提供网络存储资源，比如 Google Compute Engine 持久盘卷、NFS 共享卷或 Amazon Elastic Block Store 卷。
 集群管理员还可以使用 [StorageClasses](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#storageclass-v1-storage) 来设置[动态提供存储](https://kubernetes.io/blog/2016/10/dynamic-provisioning-and-storage-in-kubernetes)。
 
 下面是 hostPath PersistentVolume 的配置文件：
@@ -121,37 +161,27 @@ Here is the configuration file for the hostPath PersistentVolume:
 {{< codenew file="pods/storage/pv-volume.yaml" >}}
 
 <!--
-The configuration file specifies that the volume is at `/mnt/data` on the
-cluster's Node. The configuration also specifies a size of 10 gibibytes and
-an access mode of `ReadWriteOnce`, which means the volume can be mounted as
-read-write by a single Node. It defines the [StorageClass name](/docs/concepts/storage/persistent-volumes/#class)
-`manual` for the PersistentVolume, which will be used to bind
-PersistentVolumeClaim requests to this PersistentVolume.
-
 Create the PersistentVolume:
 -->
-
-配置文件指定了该卷位于集群节点上的 `/mnt/data` 目录。
-该配置还指定了 10 吉比特的卷大小和 `ReadWriteOnce` 的访问模式，这意味着该卷可以在单个节点上以读写方式挂载。
-它为 PersistentVolume 定义了 [StorageClass 名称](/docs/concepts/storage/persistent-volumes/#class) 为 `manual`，StorageClass 名称用来将 PersistentVolumeClaim 请求绑定到该 PersistentVolume。
-
 创建 PersistentVolume：
 
-    kubectl create -f https://k8s.io/examples/pods/storage/pv-volume.yaml
+```shell
+kubectl apply -f https://k8s.io/examples/pods/storage/pv-volume.yaml
+```
 
 <!--
 View information about the PersistentVolume:
 -->
-
 查看 PersistentVolume 的信息：
 
-    kubectl get pv task-pv-volume
+```shell
+kubectl get pv task-pv-volume
+```
 
 <!--
 The output shows that the PersistentVolume has a `STATUS` of `Available`. This
 means it has not yet been bound to a PersistentVolumeClaim.
 -->
-
 输出结果显示该 PersistentVolume 的`状态（STATUS）` 为 `Available`。
 这意味着它还没有被绑定给 PersistentVolumeClaim。
 
@@ -168,12 +198,12 @@ access for at least one Node.
 
 Here is the configuration file for the PersistentVolumeClaim:
 -->
-
 ## 创建 PersistentVolumeClaim
 
 下一步是创建一个 PersistentVolumeClaim。
 Pod 使用 PersistentVolumeClaim 来请求物理存储。
-在本练习中，您将创建一个 PersistentVolumeClaim，它请求至少 3 吉比特容量的卷，该卷至少可以为一个节点提供读写访问。
+在本练习中，你将创建一个 PersistentVolumeClaim，它请求至少 3 GB 容量的卷，
+该卷至少可以为一个节点提供读写访问。
 
 下面是 PersistentVolumeClaim 的配置文件：
 
@@ -182,10 +212,11 @@ Pod 使用 PersistentVolumeClaim 来请求物理存储。
 <!--
 Create the PersistentVolumeClaim:
 -->
-
 创建 PersistentVolumeClaim：
 
-    kubectl create -f https://k8s.io/examples/pods/storage/pv-claim.yaml
+```shell
+kubectl create -f https://k8s.io/examples/pods/storage/pv-claim.yaml
+```
 
 <!--
 After you create the PersistentVolumeClaim, the Kubernetes control plane looks
@@ -195,38 +226,45 @@ claim to the volume.
 
 Look again at the PersistentVolume:
 -->
-
 创建 PersistentVolumeClaim 之后，Kubernetes 控制平面将查找满足申领要求的 PersistentVolume。
-如果控制平面找到具有相同 StorageClass 的适当的 PersistentVolume，则将 PersistentVolumeClaim 绑定到该 PersistentVolume 上。
+如果控制平面找到具有相同 StorageClass 的适当的 PersistentVolume，
+则将 PersistentVolumeClaim 绑定到该 PersistentVolume 上。
 
 再次查看 PersistentVolume 信息：
 
-    kubectl get pv task-pv-volume
+```shell
+kubectl get pv task-pv-volume
+```
 
 <!--
 Now the output shows a `STATUS` of `Bound`.
 -->
 现在输出的 `STATUS` 为 `Bound`。
 
-    NAME             CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                   STORAGECLASS   REASON    AGE
-    task-pv-volume   10Gi       RWO           Retain          Bound     default/task-pv-claim   manual                   2m
+```
+NAME             CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                   STORAGECLASS   REASON    AGE
+task-pv-volume   10Gi       RWO           Retain          Bound     default/task-pv-claim   manual                   2m
+```
 
 <!--
 Look at the PersistentVolumeClaim:
 -->
 查看 PersistentVolumeClaim：
 
-    kubectl get pvc task-pv-claim
+```
+kubectl get pvc task-pv-claim
+```
 
 <!--
 The output shows that the PersistentVolumeClaim is bound to your PersistentVolume,
 `task-pv-volume`.
 -->
-
 输出结果表明该 PersistentVolumeClaim 绑定了你的 PersistentVolume `task-pv-volume`。
 
-    NAME            STATUS    VOLUME           CAPACITY   ACCESSMODES   STORAGECLASS   AGE
-    task-pv-claim   Bound     task-pv-volume   10Gi       RWO           manual         30s
+```
+NAME            STATUS    VOLUME           CAPACITY   ACCESSMODES   STORAGECLASS   AGE
+task-pv-claim   Bound     task-pv-volume   10Gi       RWO           manual         30s
+```
 
 <!--
 ## Create a Pod
@@ -235,7 +273,6 @@ The next step is to create a Pod that uses your PersistentVolumeClaim as a volum
 
 Here is the configuration file for the Pod:
 -->
-
 ## 创建 Pod
 
 下一步是创建一个 Pod， 该 Pod 使用你的 PersistentVolumeClaim 作为存储卷。
@@ -251,51 +288,103 @@ is a volume.
 
 Create the Pod:
 -->
-
-注意 Pod 的配置文件指定了 PersistentVolumeClaim，但没有指定 PersistentVolume。对 Pod 而言，PersistentVolumeClaim 就是一个存储卷。
+注意 Pod 的配置文件指定了 PersistentVolumeClaim，但没有指定 PersistentVolume。
+对 Pod 而言，PersistentVolumeClaim 就是一个存储卷。
 
 创建 Pod：
 
-    kubectl create -f https://k8s.io/examples/pods/storage/pv-pod.yaml
+```shell
+kubectl apply -f https://k8s.io/examples/pods/storage/pv-pod.yaml
+```
 
 <!--
 Verify that the Container in the Pod is running;
 -->
-
 检查 Pod 中的容器是否运行正常：
 
-    kubectl get pod task-pv-pod
+```shell
+kubectl get pod task-pv-pod
+```
 
 <!--
 Get a shell to the Container running in your Pod:
 -->
+打开一个 Shell 访问 Pod 中的容器：
 
-打开一个 shell 访问 Pod 中的容器：
-
-    kubectl exec -it task-pv-pod -- /bin/bash
+```shell
+kubectl exec -it task-pv-pod -- /bin/bash
+```
 
 <!--
 In your shell, verify that nginx is serving the `index.html` file from the
 hostPath volume:
 -->
+在 Shell 中，验证 nginx 是否正在从 hostPath 卷提供 `index.html` 文件：
 
-在 shell 中，验证 nginx 是否正在从 hostPath 卷提供 `index.html` 文件：
-
-    root@task-pv-pod:/# apt-get update
-    root@task-pv-pod:/# apt-get install curl
-    root@task-pv-pod:/# curl localhost
+<!--
+# Be sure to run these 3 commands inside the root shell that comes from
+# running "kubectl exec" in the previous step
+-->
+```
+# 一定要在上一步 "kubectl exec" 所返回的 Shell 中执行下面三个命令
+root@task-pv-pod:/# apt-get update
+root@task-pv-pod:/# apt-get install curl
+root@task-pv-pod:/# curl localhost
+```
 
 <!--
 The output shows the text that you wrote to the `index.html` file on the
 hostPath volume:
 -->
-
 输出结果是你之前写到 hostPath 卷中的 `index.html` 文件中的内容：
 
-    Hello from Kubernetes storage
+```
+Hello from Kubernetes storage
+```
+
+<!--
+If you see that message, you have successfully configured a Pod to
+use storage from a PersistentVolumeClaim.
+-->
+如果你看到此消息，则证明你已经成功地配置了 Pod 使用 PersistentVolumeClaim
+的存储。
+
+<!--
+## Clean up
+
+Delete the Pod,  the PersistentVolumeClaim and the PersistentVolume:
+-->
+## 清理    {#clean-up}
+
+删除 Pod、PersistentVolumeClaim 和 PersistentVolume 对象：
+
+```shell
+kubectl delete pod task-pv-pod
+kubectl delete pvc task-pv-claim
+kubectl delete pv task-pv-volume
+```
+
+<!--
+If you don't already have a shell open to the Node in your cluster,
+open a new shell the same way that you did earlier.
+
+In the shell on your Node, remove the file and directory that you created:
+-->
+如果你还没有连接到集群中节点的 Shell，可以按之前所做操作，打开一个新的 Shell。
+
+在节点的 Shell 上，删除你所创建的目录和文件：
 
 
+```shell
+# 这里假定你使用 "sudo" 来以超级用户的角色执行命令
+sudo rm /mnt/data/index.html
+sudo rmdir /mnt/data
+```
 
+<!--
+You can now close the shell to your Node.
+-->
+你现在可以关闭连接到节点的 Shell。
 
 <!-- discussion -->
 
@@ -310,13 +399,12 @@ PersistentVolume.
 
 Use the `pv.beta.kubernetes.io/gid` annotation as follows:
 -->
+## 访问控制  {#access-control}
 
-## 访问控制
-
-使用 group ID（GID）配置的存储仅允许 Pod 使用相同的 GID 进行写入。
-GID 不匹配或缺少将会导致许可被拒绝的错误。
-为了减少与用户的协调，管理员可以使用 GID 对 PersistentVolume 进行注解。
-这样 GID 就能自动的添加到使用 PersistentVolume 的任何 Pod 中。
+使用组 ID（GID）配置的存储仅允许 Pod 使用相同的 GID 进行写入。
+GID 不匹配或缺失将会导致无权访问错误。
+为了减少与用户的协调，管理员可以对 PersistentVolume 添加 GID 注解。
+这样 GID 就能自动添加到使用 PersistentVolume 的任何 Pod 中。
 
 使用 `pv.beta.kubernetes.io/gid` 注解的方法如下所示：
 
@@ -336,36 +424,32 @@ Pod’s security context are. Every GID, whether it originates from a Persistent
 annotation or the Pod’s specification, is applied to the first process run in
 each Container.
 -->
+当 Pod 使用带有 GID 注解的 PersistentVolume 时，注解的 GID 会被应用于 Pod 中的所有容器，
+应用的方法与 Pod 的安全上下文中指定的 GID 相同。
+每个 GID，无论是来自 PersistentVolume 注解还是来自 Pod 规约，都会被应用于每个容器中
+运行的第一个进程。
 
-当 Pod 使用带有 GID 注解的 PersistentVolume 时，注解的 GID 会被应用于 Pod 中的所有容器，应用的方法与 Pod 的安全上下文中指定的 GID 相同。
-每个 GID，无论是来自 PersistentVolume 注解还是来自 Pod 的规范，都应用于每个容器中运行的第一个进程。
-
-{{< note >}}
 <!--
 When a Pod consumes a PersistentVolume, the GIDs associated with the
 PersistentVolume are not present on the Pod resource itself.
 -->
-当 Pod 使用 PersistentVolume 时，与 PersistentVolume 关联的 GID 不会在 Pod 本身的资源对象上出现。
+{{< note >}}
+当 Pod 使用 PersistentVolume 时，与 PersistentVolume 关联的 GID 不会在 Pod
+资源本身的对象上出现。
 {{< /note >}}
 
-
-
-
 ## {{% heading "whatsnext" %}}
 
-
 <!--
 * Learn more about [PersistentVolumes](/docs/concepts/storage/persistent-volumes/).
 * Read the [Persistent Storage design document](https://git.k8s.io/community/contributors/design-proposals/storage/persistent-storage.md).
 -->
-
-* 进一步了解 [PersistentVolumes](/docs/concepts/storage/persistent-volumes/)。
-* 阅读[持久存储设计文档](https://git.k8s.io/community/contributors/design-proposals/storage/persistent-storage.md)。
+* 进一步了解 [PersistentVolumes](/zh/docs/concepts/storage/persistent-volumes/)
+* 阅读[持久存储设计文档](https://git.k8s.io/community/contributors/design-proposals/storage/persistent-storage.md)
 
 <!--
 ### Reference
 -->
-
 ### 参考
 
 * [PersistentVolume](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolume-v1-core)
@@ -374,4 +458,3 @@ PersistentVolume are not present on the Pod resource itself.
 * [PersistentVolumeClaimSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaimspec-v1-core)
 
 
-

From 4de8e2964f126cf066a613769baa8138df8ac4a1 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Fri, 14 Aug 2020 16:16:02 +0800
Subject: [PATCH 033/496] [zh] Tune KMS provider task

Issues fixed:

- The word secret should not be translated due to its special meaning;
- The indentation of contents in a enumeration context was mostly wrong;
- Some links are pointing to English version;
- The way English context was commented out is making future tracking
difficult.
---
 .../tasks/administer-cluster/kms-provider.md  | 425 ++++++++++--------
 1 file changed, 244 insertions(+), 181 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kms-provider.md b/content/zh/docs/tasks/administer-cluster/kms-provider.md
index f456f639f3..0c103543a0 100644
--- a/content/zh/docs/tasks/administer-cluster/kms-provider.md
+++ b/content/zh/docs/tasks/administer-cluster/kms-provider.md
@@ -1,284 +1,347 @@
 ---
-reviewers:
-- smarterclayton
-title: 使用 KMS 提供商进行数据加密
+title: 使用 KMS 驱动进行数据加密
 content_type: task
 ---
-<!-- ---
+<!--
 reviewers:
 - smarterclayton
 title: Using a KMS provider for data encryption
 content_type: task
---- -->
+-->
 <!-- overview -->
 <!-- This page shows how to configure a Key Management Service (KMS) provider and plugin to enable secret data encryption. -->
 
-本页展示了如何配置秘钥管理服务—— Key Management Service (KMS) 提供商和插件以启用数据加密。
-
-
+本页展示了如何配置秘钥管理服务—— Key Management Service (KMS) 驱动和插件以启用
+Secret 数据加密。
 
 ## {{% heading "prerequisites" %}}
 
-
 * {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 <!-- * Kubernetes version 1.10.0 or later is required -->
-
-* 需要 Kubernetes 1.10.0 或更新版本
-
 <!-- * etcd v3 or later is required -->
-
+* 需要 Kubernetes 1.10.0 或更新版本
 * 需要 etcd v3 或更新版本
 
 {{< feature-state for_k8s_version="v1.12" state="beta" >}}
 
-
-
 <!-- steps -->
 
-<!-- The KMS encryption provider uses an envelope encryption scheme to encrypt data in etcd. The data is encrypted using a data encryption key (DEK); a new DEK is generated for each encryption. The DEKs are encrypted with a key encryption key (KEK) that is stored and managed in a remote KMS. The KMS provider uses gRPC to communicate with a specific KMS 
-plugin. The KMS plugin, which is implemented as a gRPC server and deployed on the same host(s) as the Kubernetes master(s), is responsible for all communication with the remote KMS. -->
+<!--
+The KMS encryption provider uses an envelope encryption scheme to encrypt data in etcd. The data is encrypted using a data encryption key (DEK); a new DEK is generated for each encryption. The DEKs are encrypted with a key encryption key (KEK) that is stored and managed in a remote KMS. The KMS provider uses gRPC to communicate with a specific KMS 
+plugin. The KMS plugin, which is implemented as a gRPC server and deployed on the same host(s) as the Kubernetes master(s), is responsible for all communication with the remote KMS.
+-->
+KMS 加密驱动使用封套加密模型来加密 etcd 中的数据。
+数据使用数据加密秘钥（DEK）加密；每次加密都生成一个新的 DEK。
+这些 DEK 经一个秘钥加密秘钥（KEK）加密后在一个远端的 KMS 中存储和管理。
+KMS 驱动使用 gRPC 与一个特定的 KMS 插件通信。这个 KMS 插件作为一个 gRPC 
+服务器被部署在 Kubernetes 主服务器的同一个主机上，负责与远端 KMS 的通信。
 
-KMS 加密提供商使用封套加密模型来加密 etcd 中的数据。数据使用数据加密秘钥（DEK）加密；每次加密都生成一个新的 DEK。这些 DEK 经一个秘钥加密秘钥（KEK）加密后在一个远端的 KMS 中存储和管理。KMS 提供商使用 gRPC 与一个特定的 KMS 插件通信。这个 KMS 插件作为一个 gRPC 服务器被部署在 Kubernetes 主服务器的同一个主机上，负责与远端 KMS 的通信。
+<!--
+## Configuring the KMS provider
 
-<!-- ## Configuring the KMS provider -->
+To configure a KMS provider on the API server, include a provider of type ```kms``` in the providers array in the encryption configuration file and set the following properties:
+-->
+## 配置 KMS 驱动
 
-## 配置 KMS 提供商
+为了在 API 服务器上配置 KMS 驱动，在加密配置文件中的驱动数组中加入一个类型为 `kms`
+的驱动，并设置下列属性：
 
-<!-- To configure a KMS provider on the API server, include a provider of type ```kms``` in the providers array in the encryption configuration file and set the following properties: -->
+<!--
+* `name`: Display name of the KMS plugin.
+* `endpoint`: Listen address of the gRPC server (KMS plugin). The endpoint is a UNIX domain socket.
+* `cachesize`: Number of data encryption keys (DEKs) to be cached in the clear. When cached, DEKs can be used without another call to the KMS; whereas DEKs that are not cached require a call to the KMS to unwrap.
+* `timeout`: How long should kube-apiserver wait for kms-plugin to respond before returning an error (default is 3 seconds).
+-->
 
-为了在 API 服务器上配置 KMS 提供商，在加密配置文件中的提供商数组中加入一个类型为 ```kms``` 的提供商，并设置下列属性：
-
-<!--   * `name`: Display name of the KMS plugin.
-  * `endpoint`: Listen address of the gRPC server (KMS plugin). The endpoint is a UNIX domain socket.
-  * `cachesize`: Number of data encryption keys (DEKs) to be cached in the clear. When cached, DEKs can be used without another call to the KMS; whereas DEKs that are not cached require a call to the KMS to unwrap.
-  * `timeout`: How long should kube-apiserver wait for kms-plugin to respond before returning an error (default is 3 seconds). -->
-
-  * `name`: KMS 插件的显示名称。
-  * `endpoint`: gRPC 服务器（KMS 插件）的监听地址。该端点是一个 UNIX 的套接字。
-  * `cachesize`: 以明文缓存的数据加密秘钥（DEKs）的数量。一旦被缓存，就可以直接使用 DEKs 而无需另外调用 KMS；而未被缓存的 DEKs 需要调用一次 KMS 才能解包。
-  * `timeout`: 在返回一个错误之前，kube-apiserver 等待 kms-plugin 响应的时间（默认是 3 秒）。
+* `name`: KMS 插件的显示名称。
+* `endpoint`: gRPC 服务器（KMS 插件）的监听地址。该端点是一个 UNIX 域套接字。
+* `cachesize`: 以明文缓存的数据加密秘钥（DEKs）的数量。一旦被缓存，
+  就可以直接使用 DEKs 而无需另外调用 KMS；而未被缓存的 DEKs 需要调用一次 KMS 才能解包。
+* `timeout`: 在返回一个错误之前，kube-apiserver 等待 kms-plugin 响应的时间（默认是 3 秒）。
 
 <!-- See [Understanding the encryption at rest configuration.](/docs/tasks/administer-cluster/encrypt-data) -->
+参见[理解静态数据加密配置](/zh/docs/tasks/administer-cluster/encrypt-data)
 
-参见 [理解静态数据加密配置](/docs/tasks/administer-cluster/encrypt-data)
-
-<!-- ## Implementing a KMS plugin -->
+<!--
+## Implementing a KMS plugin
 
+To implement a KMS plugin, you can develop a new plugin gRPC server or enable a KMS plugin already provided by your cloud provider. You then integrate the plugin with the remote KMS and deploy it on the Kubernetes master.
+-->
 ## 实现 KMS 插件
 
-<!-- To implement a KMS plugin, you can develop a new plugin gRPC server or enable a KMS plugin already provided by your cloud provider. You then integrate the plugin with the remote KMS and deploy it on the Kubernetes master. -->
+为实现一个 KMS 插件，你可以开发一个新的插件 gRPC 服务器或启用一个由你的云服务驱动提供的 KMS 插件。
+你可以将这个插件与远程 KMS 集成，并把它部署到 Kubernetes 的主服务器上。
 
-为实现一个 KMS 插件，您可以开发一个新的插件 gRPC 服务器或启用一个由您的云服务提供商提供的 KMS 插件。您可以将这个插件与远程 KMS 集成，并把它部署到 Kubernetes 的主服务器上。
+<!--
+### Enabling the KMS supported by your cloud provider 
+Refer to your cloud provider for instructions on enabling the cloud provider-specific KMS plugin.
+-->
+### 启用由云服务驱动支持的 KMS
 
-<!-- ### Enabling the KMS supported by your cloud provider 
-Refer to your cloud provider for instructions on enabling the cloud provider-specific KMS plugin. -->
+有关启用云服务驱动特定的 KMS 插件的说明，请咨询你的云服务驱动。
 
-### 启用由云服务提供商支持的 KMS
-有关启用云服务提供商特定的 KMS 插件的说明，请咨询您的云服务提供商。
-
-<!-- ### Developing a KMS plugin gRPC server
-You can develop a KMS plugin gRPC server using a stub file available for Go. For other languages, you use a proto file to create a stub file that you can use to develop the gRPC server code. -->
+<!--
+### Developing a KMS plugin gRPC server
 
+You can develop a KMS plugin gRPC server using a stub file available for Go. For other languages, you use a proto file to create a stub file that you can use to develop the gRPC server code.
+-->
 ### 开发 KMS 插件 gRPC 服务器
-您可以使用 Go 语言的存根文件开发 KMS 插件 gRPC 服务器。对于其他语言，您可以用 proto 文件创建可以用于开发 gRPC 服务器代码的存根文件。
 
-<!-- * Using Go: Use the functions and data structures in the stub file: [service.pb.go](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.pb.go) to develop the gRPC server code  -->
+你可以使用 Go 语言的存根文件开发 KMS 插件 gRPC 服务器。
+对于其他语言，你可以用 proto 文件创建可以用于开发 gRPC 服务器代码的存根文件。
 
-* 使用 Go：使用存根文件 [service.pb.go](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.pb.go) 中的函数和数据结构开发 gRPC 服务器代码。
+<!--
+* Using Go: Use the functions and data structures in the stub file:
+[service.pb.go](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.pb.go) to develop the gRPC server code
+-->
+* 使用 Go：使用存根文件 [service.pb.go](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.pb.go)
+  中的函数和数据结构开发 gRPC 服务器代码。
 
-<!-- * Using languages other than Go: Use the protoc compiler with the proto file: [service.proto](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.proto) to generate a stub file for the specific language -->
-
-* 使用 Go 以外的其他语言：用 protoc 编译器编译 proto 文件： [service.proto](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.proto) 为指定语言生成存根文件。
-
-<!-- Then use the functions and data structures in the stub file to develop the server code. -->
+<!--
+* Using languages other than Go: Use the protoc compiler with the proto file: [service.proto](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.proto) to generate a stub file for the specific language
+-->
+* 使用 Go 以外的其他语言：用 protoc 编译器编译 proto 文件：
+  [service.proto](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/v1beta1/service.proto)
+  为指定语言生成存根文件。
 
+<!--
+Then use the functions and data structures in the stub file to develop the server code.
+-->
 然后使用存根文件中的函数和数据结构开发服务器代码。
 
 <!-- **Notes:** -->
-
 **注意：**
 
-<!-- * kms plugin version: `v1beta1`
+<!--
+* kms plugin version: `v1beta1`
 
-In response to procedure call Version, a compatible KMS plugin should return v1beta1 as VersionResponse.version -->
+  In response to procedure call Version, a compatible KMS plugin should return v1beta1 as VersionResponse.version.
 
+* message version: `v1beta1`
+
+  All messages from KMS provider have the version field set to current version v1beta1.
+
+* protocol: UNIX domain socket (`unix`)
+
+  The gRPC server should listen at UNIX domain socket.
+-->
 * kms 插件版本：`v1beta1`
 
-作为对过程调用 Version 的响应，兼容的 KMS 插件应把 v1beta1 作为 VersionResponse.version 返回
-
-<!-- * message version: `v1beta1`
-
-All messages from KMS provider have the version field set to current version v1beta1 -->
+  作为对过程调用 Version 的响应，兼容的 KMS 插件应把 v1beta1 作为 VersionResponse.version 返回
 
 * 消息版本：`v1beta1`
 
-所有来自 KMS 提供商的消息都把 version 字段设置为当前版本 v1beta1
-
-<!-- * protocol: UNIX domain socket (`unix`)
-
-The gRPC server should listen at UNIX domain socket -->
+  所有来自 KMS 驱动的消息都把 version 字段设置为当前版本 v1beta1
 
 * 协议：UNIX 域套接字 (`unix`)
 
-gRPC 服务器应监听 UNIX 域套接字
+  gRPC 服务器应监听 UNIX 域套接字
+
+<!--
+### Integrating a KMS plugin with the remote KMS
 
-<!-- ### Integrating a KMS plugin with the remote KMS
 The KMS plugin can communicate with the remote KMS using any protocol supported by the KMS.
 All configuration data, including authentication credentials the KMS plugin uses to communicate with the remote KMS, 
-are stored and managed by the KMS plugin independently. The KMS plugin can encode the ciphertext with additional metadata that may be required before sending it to the KMS for decryption. -->
-
+are stored and managed by the KMS plugin independently. The KMS plugin can encode the ciphertext with additional metadata that may be required before sending it to the KMS for decryption.
+-->
 ### 将 KMS 插件与远程 KMS 整合
+
 KMS 插件可以用任何受 KMS 支持的协议与远程 KMS 通信。
-所有的配置数据，包括 KMS 插件用于与远程 KMS 通信的认证凭据，都由 KMS 插件独立地存储和管理。KMS 插件可以用额外的元数据对密文进行编码，这些元数据是在把它发往 KMS 进行解密之前可能要用到的。
+所有的配置数据，包括 KMS 插件用于与远程 KMS 通信的认证凭据，都由 KMS 插件独立地存储和管理。
+KMS 插件可以用额外的元数据对密文进行编码，这些元数据是在把它发往 KMS 进行解密之前可能要用到的。
 
-<!-- ### Deploying the KMS plugin 
-Ensure that the KMS plugin runs on the same host(s) as the Kubernetes master(s). -->
+<!--
+### Deploying the KMS plugin 
 
+Ensure that the KMS plugin runs on the same host(s) as the Kubernetes master(s).
+-->
 ### 部署 KMS 插件
+
 确保 KMS 插件与 Kubernetes 主服务器运行在同一主机上。
 
-<!-- ## Encrypting your data with the KMS provider -->
-## 使用 KMS 提供商加密数据
+<!--
+## Encrypting your data with the KMS provider
+
+To encrypt the data:
+-->
+## 使用 KMS 驱动加密数据
 
-<!-- To encrypt the data: -->
 为了加密数据：
 
-<!-- 1. Create a new encryption configuration file using the appropriate properties for the `kms` provider: -->
-1. 使用 `kms` 提供商的相应的属性创建一个新的加密配置文件：
+<!--
+1. Create a new encryption configuration file using the appropriate properties for the `kms` provider:
+-->
+1. 使用 `kms` 驱动的相应的属性创建一个新的加密配置文件：
 
-```yaml
-kind: EncryptionConfiguration
-apiVersion: apiserver.config.k8s.io/v1
-resources:
-  - resources:
-    - secrets
-    providers:
-    - kms:
-        name: myKmsPlugin
-        endpoint: unix:///tmp/socketfile.sock
-        cachesize: 100
-        timeout: 3s
-    - identity: {}
-```
+   ```yaml
+   kind: EncryptionConfiguration
+   apiVersion: apiserver.config.k8s.io/v1
+   resources:
+     - resources:
+       - secrets
+       providers:
+       - kms:
+           name: myKmsPlugin
+           endpoint: unix:///tmp/socketfile.sock
+           cachesize: 100
+           timeout: 3s
+       - identity: {}
+   ```
 
-<!-- 2. Set the `--encryption-provider-config` flag on the kube-apiserver to point to the location of the configuration file. -->
+<!--
+2. Set the `--encryption-provider-config` flag on the kube-apiserver to point to the location of the configuration file.
+3. Restart your API server.
+-->
 2. 设置 kube-apiserver 的 `--encryption-provider-config` 参数指向配置文件的位置。
-<!-- 3. Restart your API server. -->
 3. 重启 API 服务器。
 
-<!-- Note:
-The alpha version of the encryption feature prior to 1.13 required a config file with
-`kind: EncryptionConfig` and `apiVersion: v1`, and used the `--experimental-encryption-provider-config` flag. -->
+<!--
+## Verifying that the data is encrypted
 
-注意：
-在 1.13 之前的加密功能的 alpha 版本需要一个带有 `kind: EncryptionConfig` 和 `apiVersion: v1` 的配置文件，并使用 `--experimental-encryption-provider-config` 标志。
+Data is encrypted when written to etcd. After restarting your kube-apiserver, any newly created or updated secret should be encrypted when stored. To verify, you can use the etcdctl command line program to retrieve the contents of your secret.
+-->
+## 验证数据已经加密
 
-<!-- ## Verifying that the data is encrypted
-Data is encrypted when written to etcd. After restarting your kube-apiserver, any newly created or updated secret should be encrypted when stored. To verify, you can use the etcdctl command line program to retrieve the contents of your secret. -->
+写入 etcd 时数据被加密。重启 kube-apiserver 后，任何新建或更新的 Secret 在存储时应该已被加密。
+要验证这点，你可以用 etcdctl 命令行程序获取 Secret 内容。 
 
-## 验证数据是否已加密
-写入 etcd 时数据被加密。重启 kube-apiserver 后，任何新建或更新的秘密信息在存储时应该已被加密。要验证这点，您可以用 etcdctl 命令行程序获取秘密信息内容。 
+<!--
+1. Create a new secret called secret1 in the default namespace:
+-->
+1. 在默认的命名空间里创建一个名为 secret1 的 Secret：
 
-<!-- 1. Create a new secret called secret1 in the default namespace: -->
-1. 在默认的命名空间里创建一个名为 secret1 的秘密信息：
-```
-kubectl create secret generic secret1 -n default --from-literal=mykey=mydata
-```
-<!-- 2. Using the etcdctl command line, read that secret out of etcd: -->
-2. 用 etcdctl 命令行，从 etcd 读取出秘密信息：
-```
-ETCDCTL_API=3 etcdctl get /kubernetes.io/secrets/default/secret1 [...] | hexdump -C
-```
- <!-- where `[...]` must be the additional arguments for connecting to the etcd server. -->
- 其中 `[...]` 是用于连接 etcd 服务器的额外参数。
-<!-- 3. Verify the stored secret is prefixed with `k8s:enc:kms:v1:`, which indicates that the `kms` provider has encrypted the resulting data. -->
-3. 验证保存的秘密信息是否是以 `k8s:enc:kms:v1:` 开头的，这表明 `kms` 提供商已经对结果数据加密。
-<!-- 4. Verify that the secret is correctly decrypted when retrieved via the API: -->
-4. 验证秘密信息在被 API 获取时已被正确解密：
-```
-kubectl describe secret secret1 -n default
-```
-应该符合 `mykey: mydata` 格式
+   ```
+   kubectl create secret generic secret1 -n default --from-literal=mykey=mydata
+   ```
 
-<!-- ## Ensuring all secrets are encrypted
-Because secrets are encrypted on write, performing an update on a secret encrypts that content. -->
+<!--
+2. Using the etcdctl command line, read that secret out of etcd:
+-->
+2. 用 etcdctl 命令行，从 etcd 读取出 Secret：
 
-## 确保所有秘密信息都已被加密
-因为秘密信息是在写入时被加密的，所以在更新秘密信息时会加密该内容。
+   ```
+   ETCDCTL_API=3 etcdctl get /kubernetes.io/secrets/default/secret1 [...] | hexdump -C
+   ```
 
-<!-- The following command reads all secrets and then updates them to apply server side encryption. If an error occurs due to a conflicting write, retry the command. For larger clusters, you may wish to subdivide the secrets by namespace or script an update. -->
+   <!--
+   where `[...]` must be the additional arguments for connecting to the etcd server.
+   -->
+   其中 `[...]` 是用于连接 etcd 服务器的额外参数。
 
-下列命令读取所有秘密信息并更新他们以便应用服务器端加密。如果因为写入冲突导致错误发生，请重试此命令。对较大的集群，您可能希望根据命名空间或脚本更新去细分秘密内容。
+<!--
+3. Verify the stored secret is prefixed with `k8s:enc:kms:v1:`, which indicates that the `kms` provider has encrypted the resulting data.
+-->
+3. 验证保存的 Secret 是否是以 `k8s:enc:kms:v1:` 开头的，这表明 `kms` 驱动已经对结果数据加密。
+
+<!--
+4. Verify that the secret is correctly decrypted when retrieved via the API:
+-->
+4. 验证 Secret 在被 API 获取时已被正确解密：
+
+   ```
+   kubectl describe secret secret1 -n default
+   ```
+
+   结果应该是 `mykey: mydata`。 
+
+<!--
+## Ensuring all secrets are encrypted
+
+Because secrets are encrypted on write, performing an update on a secret encrypts that content.
+-->
+## 确保所有 Secret 都已被加密
+
+因为 Secret 是在写入时被加密的，所以在更新 Secret 时也会加密该内容。
+
+<!--
+The following command reads all secrets and then updates them to apply server side encryption. If an error occurs due to a conflicting write, retry the command.
+For larger clusters, you may wish to subdivide the secrets by namespace or script an update.
+-->
+下列命令读取所有 Secret 并更新它们以便应用服务器端加密。如果因为写入冲突导致错误发生，
+请重试此命令。对较大的集群，你可能希望根据命名空间或脚本更新去细分 Secret 内容。
 
 ```
 kubectl get secrets --all-namespaces -o json | kubectl replace -f -
 ```
 
-<!-- ## Switching from a local encryption provider to the KMS provider
-To switch from a local encryption provider to the `kms` provider and re-encrypt all of the secrets: -->
+<!--
+## Switching from a local encryption provider to the KMS provider
 
-## 从本地加密提供商切换到 KMS 提供商
-为了从本地加密提供商切换到 `kms` 提供商并重新加密所有秘密内容：
+To switch from a local encryption provider to the `kms` provider and re-encrypt all of the secrets:
+-->
+## 从本地加密驱动切换到 KMS 驱动
 
-<!-- 1. Add the `kms` provider as the first entry in the configuration file as shown in the following example. -->
-1. 在配置文件中加入 `kms` 提供商作为第一个条目，如下列样例所示
+为了从本地加密驱动切换到 `kms` 驱动并重新加密所有 Secret 内容：
 
-```yaml
-kind: EncryptionConfiguration
-apiVersion: apiserver.config.k8s.io/v1
-resources:
-  - resources:
-    - secrets
-    providers:
-    - kms:
-        name : myKmsPlugin
-        endpoint: unix:///tmp/socketfile.sock
-        cachesize: 100
-    - aescbc:
-         keys:
-         - name: key1
-           secret: <BASE 64 ENCODED SECRET>
-```
-<!-- 2. Restart all kube-apiserver processes. -->
+<!--
+1. Add the `kms` provider as the first entry in the configuration file as shown in the following example.
+-->
+1. 在配置文件中加入 `kms` 驱动作为第一个条目，如下列样例所示
+
+   ```yaml
+   kind: EncryptionConfiguration
+   apiVersion: apiserver.config.k8s.io/v1
+   resources:
+     - resources:
+       - secrets
+       providers:
+       - kms:
+           name : myKmsPlugin
+           endpoint: unix:///tmp/socketfile.sock
+           cachesize: 100
+       - aescbc:
+            keys:
+            - name: key1
+              secret: <BASE 64 ENCODED SECRET>
+   ```
+
+<!--
+2. Restart all kube-apiserver processes.
+3. Run the following command to force all secrets to be re-encrypted using the `kms` provider.
+-->
 2. 重启所有 kube-apiserver 进程。
-<!-- 3. Run the following command to force all secrets to be re-encrypted using the `kms` provider. -->
-3. 运行下列命令使用 `kms` 提供商强制重新加密所有秘密信息。
-```
-kubectl get secrets --all-namespaces -o json| kubectl replace -f -
-```
+3. 运行下列命令使用 `kms` 驱动强制重新加密所有 Secret。
 
-<!-- ## Disabling encryption at rest
-To disable encryption at rest: -->
+   ```
+   kubectl get secrets --all-namespaces -o json| kubectl replace -f -
+   ```
 
+<!--
+## Disabling encryption at rest
+To disable encryption at rest:
+-->
 ## 禁用静态数据加密
+
 要禁用静态数据加密：
 
-<!-- 1. Place the `identity` provider as the first entry in the configuration file:  -->
+<!--
+1. Place the `identity` provider as the first entry in the configuration file:
+-->
+1. 将 `identity` 驱动作为配置文件中的第一个条目： 
 
-1. 将 `identity` 提供商作为配置文件中的第一个条目： 
+   ```yaml
+   kind: EncryptionConfiguration
+   apiVersion: apiserver.config.k8s.io/v1
+   resources:
+     - resources:
+       - secrets
+       providers:
+       - identity: {}
+       - kms:
+           name : myKmsPlugin
+           endpoint: unix:///tmp/socketfile.sock
+           cachesize: 100
+   ```
 
-```yaml
-kind: EncryptionConfiguration
-apiVersion: apiserver.config.k8s.io/v1
-resources:
-  - resources:
-    - secrets
-    providers:
-    - identity: {}
-    - kms:
-        name : myKmsPlugin
-        endpoint: unix:///tmp/socketfile.sock
-        cachesize: 100
-```
-<!-- 2.  Restart all kube-apiserver processes.  -->
+<!--
+2.  Restart all kube-apiserver processes.
+3. Run the following command to force all secrets to be decrypted.
+-->
 2. 重启所有 kube-apiserver 进程。
-<!-- 3. Run the following command to force all secrets to be decrypted. -->
-3. 运行下列命令强制重新加密所有秘密信息。
-```
-kubectl get secrets --all-namespaces -o json | kubectl replace -f -
-```
-
-
+3. 运行下列命令强制重新加密所有 Secret。
 
+   ```
+   kubectl get secrets --all-namespaces -o json | kubectl replace -f -
+   ```
 

From 2a33dfdcd6f83b7d03036c2a2ddbab7dcc2e960d Mon Sep 17 00:00:00 2001
From: Daniel Mendes <danielmd3000@gmail.com>
Date: Fri, 14 Aug 2020 11:31:00 +0200
Subject: [PATCH 034/496] Update jsonpath.md

Adding note that JSONPath in kubectl cli does not currently support RegEx.
---
 content/en/docs/reference/kubectl/jsonpath.md | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/content/en/docs/reference/kubectl/jsonpath.md b/content/en/docs/reference/kubectl/jsonpath.md
index 50c051c9f4..e7087bbdea 100644
--- a/content/en/docs/reference/kubectl/jsonpath.md
+++ b/content/en/docs/reference/kubectl/jsonpath.md
@@ -98,4 +98,24 @@ kubectl get pods -o=jsonpath="{range .items[*]}{.metadata.name}{\"\t\"}{.status.
 ```
 {{< /note >}}
 
+{{< note >}}
+
+JSONPath RegEx are currently not supported. You must use jq or similar.
+Example currently not supported
+
+```shell
+kubectl get secrets -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
+```
+{{< /note >}}
+
+{{< note >}}
+
+JSONPath RegEx are currently not supported. You must use jq or similar.
+Example currently not supported
+
+```shell
+kubectl get secrets -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
+```
+{{< /note >}}
+
 

From 869817b56c5e6d53991d4610331baa2d6efbd702 Mon Sep 17 00:00:00 2001
From: Daniel Mendes <danielmd3000@gmail.com>
Date: Fri, 14 Aug 2020 11:40:11 +0200
Subject: [PATCH 035/496] Update jsonpath.md

---
 content/en/docs/reference/kubectl/jsonpath.md | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/content/en/docs/reference/kubectl/jsonpath.md b/content/en/docs/reference/kubectl/jsonpath.md
index e7087bbdea..9e483e443c 100644
--- a/content/en/docs/reference/kubectl/jsonpath.md
+++ b/content/en/docs/reference/kubectl/jsonpath.md
@@ -108,14 +108,4 @@ kubectl get secrets -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.
 ```
 {{< /note >}}
 
-{{< note >}}
-
-JSONPath RegEx are currently not supported. You must use jq or similar.
-Example currently not supported
-
-```shell
-kubectl get secrets -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
-```
-{{< /note >}}
-
 

From efe9e55d17cbe5deab5e662999f4115a619fa4b4 Mon Sep 17 00:00:00 2001
From: Dery Rahman Ahaddienata <dery.ra@gmail.com>
Date: Fri, 14 Aug 2020 19:01:40 +0700
Subject: [PATCH 036/496] Update
 content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md

Co-authored-by: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
---
 .../id/docs/tutorials/kubernetes-basics/deploy-app/_index.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md b/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md
index 6b55265428..e49c3847f1 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/_index.md
@@ -1,4 +1,4 @@
 ---
-title: _Deploy_ Aplikasi
+title: Menyebarkan (Deploy) Aplikasi
 weight: 20
 ---

From 346979402ba21dc269202cbe6b8579dacef37d39 Mon Sep 17 00:00:00 2001
From: Dery Rahman Ahaddienata <dery.ra@gmail.com>
Date: Fri, 14 Aug 2020 19:09:25 +0700
Subject: [PATCH 037/496] Apply suggestions from code review

Co-authored-by: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Co-authored-by: Yudi A Phanama <11147376+phanama@users.noreply.github.com>
---
 .../deploy-app/deploy-interactive.html        |  6 ++---
 .../deploy-app/deploy-intro.html              | 24 +++++++++----------
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index ef36fea670..5349a72626 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -1,5 +1,5 @@
 ---
-title: Tutorial Interaktif - Men-<i>Deploy</i> Aplikasi
+title: Tutorial Interaktif - Menyebarkan (Deploy) Aplikasi
 weight: 20
 ---
 
@@ -20,7 +20,7 @@ weight: 20
         <div class="row">
             <div class="col-md-12">
                 <p>
-                Pod merupakan unit eksekusi utama pada aplikasi Kubernetes. Setiap Pod mewakili sebagian dari beban kerja (<i>workload</i>) yang berjalan pada klaster kamu. <a href="id/docs/concepts/workloads/pods/pod-overview/#understanding-pods">Learn more about Pods</a>.
+                Pod merupakan unit eksekusi utama pada aplikasi Kubernetes. Setiap Pod mewakili sebagian dari beban kerja (<i>workload</i>) yang berjalan pada klaster kamu. <a href="/id/docs/concepts/workloads/pods/pod-overview/#understanding-pods">Learn more about Pods</a>.
                 </p>
             </div>
         </div>
@@ -37,7 +37,7 @@ weight: 20
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="docs/tutorials/kubernetes-basics/explore/explore-intro/" role="button">Lanjut ke Modul 3<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/explore/explore-intro/" role="button">Lanjut ke Modul 3<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
index b93227ecce..6cb2a45f41 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -29,14 +29,14 @@ weight: 10
                 <h3><i>Deployment</i> Kubernetes</h3>
                 <p>
                 Ketika klaster Kubernetes kamu sudah berjalan, kamu dapat men-<i>deploy</i> aplikasi terkontainerisasi di atasnya.
-                Untuk melakukannya, kamu perlu membuat konfigurasi <b>Deployment</b>. Deployemnt menginstruksikan Kubernetes
-                tentang bagaimana cara membuat dan memperbaharui <i>instance</i> aplikasi kamu. Ketika kamu selesai membuat Deployment, Kubernetes master
+                Untuk melakukannya, kamu perlu membuat konfigurasi <b>Deployment</b>. Deployment menginstruksikan Kubernetes
+                tentang bagaimana cara membuat dan memperbarui <i>instance</i> aplikasi kamu. Ketika kamu selesai membuat Deployment, Kubernetes master
                 melakukan penjadwalan <i>instance</i> aplikasi yang terlibat dalam Deployment untuk berjalan di Node individu pada klaster.
                 </p>
 
-                <p>Setelah <i>instance</i> aplikasi telah dibuat, Kubernetes Deployment Controller akan melakukan monitoring <i>instance</i> tersebut secara kontinu. Jika <i>instance</i> pada hos Node <i>down</i> atau terhapus, Deployment Controller akan mengganti <i>instance</i> tersebut dengan <i>instance</i> Node lain dalam klaster. <b>Ia menyediakan mekanisme penyembuhan diri (<i>self-healing</i>) untuk mengatasi kegagalan mesin atau pemeliharaan (<i>maintenance</i>)</b></p>
+                <p>Setelah <i>instance</i> aplikasi telah dibuat, Kubernetes Deployment Controller akan melakukan monitoring <i>instance</i> tersebut secara kontinu. Jika <i>instance</i> pada hos Node mati atau terhapus, Deployment Controller akan mengganti <i>instance</i> tersebut dengan <i>instance</i> Node lain dalam klaster. <b>Ia menyediakan mekanisme penyembuhan diri (<i>self-healing</i>) untuk mengatasi kegagalan mesin atau pemeliharaan (<i>maintenance</i>)</b></p>
 
-                <p>Pada masa pra-orkestrasi, instalasi <i>script</i> sering digunakan untuk memulai aplikasi, namun cara ini tidak memberikan mekanisme pemulihan ketika terjadi kegagalan mesin. Dengan kemampuan membuat <i>instance</i> aplikasi dan menjaganya tetap berjalan pada Node, Kubernetes Deployment menyediakan manajemen aplikasi dengan pendekatan fundamental yang berbeda. </p>
+                <p>Pada masa pra-orkestrasi, instalasi <i>script</i> sering digunakan untuk memulai aplikasi, namun cara ini tidak memberikan mekanisme pemulihan ketika terjadi kegagalan mesin. Dengan kemampuan membuat <i>instance</i> aplikasi dan menjaganya tetap berjalan pada Node, Deployment Kubernetes menyediakan manajemen aplikasi dengan pendekatan fundamental yang berbeda. </p>
 
             </div>
 
@@ -50,7 +50,7 @@ weight: 10
                 </div>
                 <div class="content__box content__box_fill">
                     <p><i>
-                        Sebuah Deployment bertanggung jawab untuk membuat dan memperbaharui instance dari aplikasi kamu
+                        Sebuah Deployment bertanggung jawab untuk membuat dan memperbarui instance dari aplikasi kamu
                     </i></p>
                 </div>
             </div>
@@ -59,13 +59,13 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <h2 style="color: #3771e3;">Men-<i>deploy</i> aplikasi pertama kamu pada Kubernetes</h2>
+                <h2 style="color: #3771e3;">Menyebarkan aplikasi pertama kamu dalam Kubernetes</h2>
             </div>
         </div>
 
         <div class="row">
             <div class="col-md-8">
-                <p><img src="/docs/tutorials/kubernetes-basics/public/images/module_02_first_app.svg"></p>
+                <p><img src="/id/docs/tutorials/kubernetes-basics/public/images/module_02_first_app.svg"></p>
             </div>
         </div>
         <br>
@@ -73,14 +73,14 @@ weight: 10
         <div class="row">
             <div class="col-md-8">
 
-                <p>Kamu dapat membuat dan mengatur Deployment dengan menggunakan antar muka baris perintah Kubernetes, <b>Kubectl</b>. Kubectl menggunakan Kubernetes API untuk berinteraksi dengan klaster. Pada modul ini, kamu akan belajar perintah-perintah yang sering digunakan Kubectl dalam membuat Deployment untuk menjalankan aplikasi kamu pada klaster Kubernetes.</p>
+                <p>Kamu dapat membuat dan mengatur Deployment dengan menggunakan antar muka baris perintah (CLI) Kubernetes, <b>Kubectl</b>. Kubectl menggunakan Kubernetes API untuk berinteraksi dengan klaster. Pada modul ini, kamu akan belajar perintah-perintah yang sering digunakan Kubectl untuk membuat Deployment untuk menjalankan aplikasi kamu pada klaster Kubernetes.</p>
 
-                <p>Ketika kamu membuat Deployment, kamu perlu mendefinisikan kontainer <i>image</i> untuk aplikasi kamu dan jumlah replika yang kamu inginkan. Kamu dapat mengganti informasi tersebut nanti dengan melakukan pembaharuan Deployment kamu; Modul <a href="docs/tutorials/kubernetes-basics/scale/scale-intro/">5</a> dan <a href="/docs/tutorials/kubernetes-basics/update/update-intro/">6</a> pada <i>bootcamp</i> ini mendiskusikan bagaimana cara melakukan perluasan (<i>scale</i>) dan pembaharuan Deployment kamu.</p>
+                <p>Ketika kamu membuat Deployment, kamu perlu mendefinisikan Container <i>image</i> untuk aplikasi kamu dan jumlah replika yang kamu inginkan. Kamu dapat mengganti informasi tersebut nanti dengan melakukan pembaharuan Deployment kamu; Modul <a href="docs/tutorials/kubernetes-basics/scale/scale-intro/">5</a> dan <a href="/docs/tutorials/kubernetes-basics/update/update-intro/">6</a> pada <i>bootcamp</i> ini mendiskusikan bagaimana cara melakukan perluasan (<i>scale</i>) dan pembaruan Deployment kamu.</p>
 
             </div>
             <div class="col-md-4">
                 <div class="content__box content__box_fill">
-                    <p><i> Aplikasi perlu dikemas menjadi satu dengan format kontainer yang didukung supaya terdeploy pada Kubernetes</i></p>
+                    <p><i> Aplikasi perlu dikemas menjadi satu dengan format Container yang didukung supaya tersebar pada Kubernetes</i></p>
                 </div>
             </div>
         </div>
@@ -88,9 +88,9 @@ weight: 10
         <div class="row">
             <div class="col-md-8">
                 <p>
-                Pada Deployment pertama kamu, kamu akan menggunakan aplikasi Node.js yang terkemas dalam kontainer Docker. (Jika kamu belum pernah mencoba membuat aplikasi Node.js dan men-<i>deploy</i>nya dengan kontainer, kamu dapat melakukannya dengan mengikuti instruksi dari <a href="/id/docs/tutorials/hello-minikube/">tutorial Hello Minikube</a>).
+                Pada Deployment pertama kamu, kamu akan menggunakan aplikasi Node.js yang terkemas dalam Container Docker. (Jika kamu belum pernah mencoba membuat aplikasi Node.js dan menyebarkannya dengan Container, kamu dapat melakukannya dengan mengikuti instruksi pada <a href="/id/docs/tutorials/hello-minikube/">tutorial Hello Minikube</a>).
                 </p>
-                <p>Sekarang kamu tahu apa itu Deployment, mari kita ke tutorial <i>online</i> dan <i>deploy</i> aplikasi pertama kita!</p>
+                <p>Sekarang kamu tahu apa itu Deployment, mari kita ke tutorial <i>online</i> dan menyebarkan aplikasi pertama kita!</p>
             </div>
         </div>
         <br>

From 5247eaccc3ddfe3b0aed533e40723d040904a976 Mon Sep 17 00:00:00 2001
From: Daniel Mendes <danielmd3000@gmail.com>
Date: Fri, 14 Aug 2020 14:55:00 +0200
Subject: [PATCH 038/496] Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/reference/kubectl/jsonpath.md | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/kubectl/jsonpath.md b/content/en/docs/reference/kubectl/jsonpath.md
index 9e483e443c..6ca252082d 100644
--- a/content/en/docs/reference/kubectl/jsonpath.md
+++ b/content/en/docs/reference/kubectl/jsonpath.md
@@ -100,12 +100,16 @@ kubectl get pods -o=jsonpath="{range .items[*]}{.metadata.name}{\"\t\"}{.status.
 
 {{< note >}}
 
-JSONPath RegEx are currently not supported. You must use jq or similar.
+JSONPath regular expressions are not supported. If you want to match using regular expressions, you can use a tool such as `jq`.
 Example currently not supported
 
 ```shell
+# kubectl does not suport regular expressions
+# The following command does not work
 kubectl get secrets -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
+
+# The following command achieves the same result
+kubectl get secrets -o json | jq '[needs actual example code writing before merge]'
 ```
 {{< /note >}}
 
-

From 53ec8d14f5f650ba3b085fe00217ba53cc035232 Mon Sep 17 00:00:00 2001
From: Dery Rahman Ahaddienata <dery.ra@gmail.com>
Date: Fri, 14 Aug 2020 21:48:49 +0700
Subject: [PATCH 039/496] Deploy -> menyebarkan & summary -> ringkasan

---
 .../kubernetes-basics/deploy-app/deploy-intro.html        | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
index 6cb2a45f41..bf61b5d085 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -20,15 +20,15 @@ weight: 10
          <div class="col-md-8">
           <h3>Tujuan</h3>
                 <ul>
-                    <li>Belajar tentang aplikasi Deployment.</li>
-                    <li><i>Deploy</i> aplikasi pertama kamu di Kubernetes dengan kubectl.</li>
+                    <li>Belajar tentang menyebarkan (<i>deploy</i>) aplikasi.</li>
+                    <li>Menyebarkan aplikasi pertama kamu di Kubernetes dengan kubectl.</li>
                 </ul>
             </div>
 
             <div class="col-md-8">
                 <h3><i>Deployment</i> Kubernetes</h3>
                 <p>
-                Ketika klaster Kubernetes kamu sudah berjalan, kamu dapat men-<i>deploy</i> aplikasi terkontainerisasi di atasnya.
+                Ketika klaster Kubernetes kamu sudah berjalan, kamu dapat menyebarkan aplikasi terkontainerisasi di atasnya.
                 Untuk melakukannya, kamu perlu membuat konfigurasi <b>Deployment</b>. Deployment menginstruksikan Kubernetes
                 tentang bagaimana cara membuat dan memperbarui <i>instance</i> aplikasi kamu. Ketika kamu selesai membuat Deployment, Kubernetes master
                 melakukan penjadwalan <i>instance</i> aplikasi yang terlibat dalam Deployment untuk berjalan di Node individu pada klaster.
@@ -42,7 +42,7 @@ weight: 10
 
             <div class="col-md-4">
                 <div class="content__box content__box_lined">
-                    <h3>Summary:</h3>
+                    <h3>Ringkasan:</h3>
                     <ul>
                         <li>Deployment</li>
                         <li>Kubectl</li>

From f85e732ad6501c6c9512fb75e6e5f3552145e507 Mon Sep 17 00:00:00 2001
From: Dery Rahman Ahaddienata <dery.ra@gmail.com>
Date: Fri, 14 Aug 2020 21:53:29 +0700
Subject: [PATCH 040/496] Kubernetes master -> Kubernetes control plane

---
 .../tutorials/kubernetes-basics/deploy-app/deploy-intro.html    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
index bf61b5d085..eaaec3beae 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -30,7 +30,7 @@ weight: 10
                 <p>
                 Ketika klaster Kubernetes kamu sudah berjalan, kamu dapat menyebarkan aplikasi terkontainerisasi di atasnya.
                 Untuk melakukannya, kamu perlu membuat konfigurasi <b>Deployment</b>. Deployment menginstruksikan Kubernetes
-                tentang bagaimana cara membuat dan memperbarui <i>instance</i> aplikasi kamu. Ketika kamu selesai membuat Deployment, Kubernetes master
+                tentang bagaimana cara membuat dan memperbarui <i>instance</i> aplikasi kamu. Ketika kamu selesai membuat Deployment, Kubernetes <i>control plane</i>
                 melakukan penjadwalan <i>instance</i> aplikasi yang terlibat dalam Deployment untuk berjalan di Node individu pada klaster.
                 </p>
 

From fbd908ce97a9b222164239363a4c3c8ea9f147a1 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 15 Aug 2020 15:03:49 +0800
Subject: [PATCH 041/496] [zh] Resync access cluster services task

The English context was completely missed from this page. There are few
upstream changes that need syncs.
---
 .../access-cluster-services.md                | 219 ++++++++++++++----
 1 file changed, 171 insertions(+), 48 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/access-cluster-services.md b/content/zh/docs/tasks/administer-cluster/access-cluster-services.md
index cb03264553..99730f4621 100644
--- a/content/zh/docs/tasks/administer-cluster/access-cluster-services.md
+++ b/content/zh/docs/tasks/administer-cluster/access-cluster-services.md
@@ -1,85 +1,192 @@
 ---
-
 title: 访问集群上运行的服务
 content_type: task
 ---
 
 <!-- overview -->
-
+<!--
+This page shows how to connect to services running on the Kubernetes cluster.
+-->
 本文展示了如何连接 Kubernetes 集群上运行的服务。
 
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
 <!-- steps -->
 
+<!--
+## Accessing services running on the cluster
+
+In Kubernetes, [nodes](/docs/concepts/architecture/nodes/),
+[pods](/docs/concepts/workloads/pods/) and [services](/docs/concepts/services-networking/service/) all have
+their own IPs.  In many cases, the node IPs, pod IPs, and some service IPs on a cluster will not be
+routable, so they will not be reachable from a machine outside the cluster,
+such as your desktop machine.
+-->
 ## 访问集群上运行的服务
 
 
-在 Kubernetes 里， [nodes](/docs/admin/node)、[pods](/docs/user-guide/pods) 和  [services](/docs/user-guide/services) 都有它们自己的 IP。许多情况下，集群上的 node IP、pod IP 和某些 service IP 路由不可达，所以不能从一个集群之外的节点访问它们，例如从你自己的台式机。
+在 Kubernetes 里，[Node](/zh/docs/concepts/architecture/nodes/)、
+[Pod](/zh/docs/concepts/workloads/pods/) 和
+[Service](/zh/docs/concepts/services-networking/services/) 都有自己的 IP。
+许多情况下，集群上的节点 IP、Pod IP 和某些服务 IP 是路由不可达的，
+所以不能从集群之外访问它们，例如从你自己的台式机。
 
+<!--
+### Ways to connect
 
-### 连接方式
+You have several options for connecting to nodes, pods and services from outside the cluster:
+-->
+### 连接方式   {#ways-to-connect}
 
+你有多种可选方式从集群外连接节点、Pod 和服务：
 
-你有多种从集群外连接 nodes、pods 和 services 的选项：
-
-
-  - 通过公共 IP 访问 services。
-    - 使用具有 `NodePort` 或 `LoadBalancer` 类型的 service，可以从外部访问它们。请查阅 [services](/docs/user-guide/services) 和 [kubectl expose](/docs/user-guide/kubectl/v1.6/#expose) 文档。
-    - 取决于你的集群环境，你可以仅把 service 暴露在你的企业网络环境中，也可以将其暴露在因特网上。需要考虑暴露的 service 是否安全，它是否有自己的用户认证？
-    - 将 pods 放置于 services 背后。如果要访问一个副本集合中特定的 pod，例如用于调试目的时，请给 pod 指定一个独特的标签并创建一个新 service 选择这个标签。
-    - 大部分情况下，都不需要应用开发者通过节点 IP 直接访问 nodes。
-  - 通过 Proxy Verb 访问  services、nodes 或者  pods。
-    - 在访问 Apiserver 远程服务之前是否经过认证和授权？如果你的服务暴露到因特网中不够安全，或者需要获取 node IP 之上的端口，又或者处于调试目的时，请使用这个特性。
-    - Proxies 可能给某些应用带来麻烦。
-    - 仅适用于 HTTP/HTTPS。
-    - 在[这里](#manually-constructing-apiserver-proxy-urls)描述
+<!--
+  - Access services through public IPs.
+    - Use a service with type `NodePort` or `LoadBalancer` to make the service reachable outside
+      the cluster.  See the [services](/docs/concepts/services-networking/service/) and
+      [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) documentation.
+    - Depending on your cluster environment, this may just expose the service to your corporate network,
+      or it may expose it to the internet.  Think about whether the service being exposed is secure.
+      Does it do its own authentication?
+    - Place pods behind services.  To access one specific pod from a set of replicas, such as for debugging,
+      place a unique label on the pod and create a new service which selects this label.
+    - In most cases, it should not be necessary for application developer to directly access
+      nodes via their nodeIPs.
+-->
+- 通过公网 IP 访问服务
+  - 使用类型为 `NodePort` 或 `LoadBalancer` 的服务，可以从外部访问它们。
+    请查阅[服务](/zh/docs/concepts/services-networking/services/) 和
+    [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) 文档。
+  - 取决于你的集群环境，你可以仅把服务暴露在你的企业网络环境中，也可以将其暴露在
+    因特网上。需要考虑暴露的服务是否安全，它是否有自己的用户认证？
+  - 将 Pod 放置于服务背后。如果要访问一个副本集合中特定的 Pod，例如用于调试目的，
+    请给 Pod 指定一个独特的标签并创建一个新服务选择该标签。
+  - 大部分情况下，都不需要应用开发者通过节点 IP 直接访问节点。
+<!--
+  - Access services, nodes, or pods using the Proxy Verb.
+    - Does apiserver authentication and authorization prior to accessing the remote service.
+      Use this if the services are not secure enough to expose to the internet, or to gain
+      access to ports on the node IP, or for debugging.
+    - Proxies may cause problems for some web applications.
+    - Only works for HTTP/HTTPS.
+    - Described [here](#manually-constructing-apiserver-proxy-urls).
+-->
+- 通过 Proxy 动词访问服务、节点或者 Pod
+  - 在访问远程服务之前，利用 API 服务器执行身份认证和鉴权。
+    如果你的服务不够安全，无法暴露到因特网中，或者需要访问节点 IP 上的端口，
+    又或者出于调试目的，可使用这种方式。
+  - 代理可能给某些应用带来麻烦
+  - 此方式仅适用于 HTTP/HTTPS
+  - 进一步的描述在[这里](#manually-constructing-apiserver-proxy-urls)
   - 从集群中的 node 或者 pod 访问。
-    - 运行一个 pod，然后使用 [kubectl exec](/docs/user-guide/kubectl/v1.6/#exec) 连接到它的一个shell。从那个 shell 连接其他的 nodes、pods 和 services。
-    - 某些集群可能允许你 ssh 到集群中的节点。你可能可以从那儿访问集群服务。这是一个非标准的方式，可能在一些集群上能工作，但在另一些上却不能。浏览器和其他工具可能安装或可能不会安装。集群 DNS 可能不会正常工作。
+<!--
+  - Access from a node or pod in the cluster.
+    - Run a pod, and then connect to a shell in it using [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands/#exec).
+      Connect to other nodes, pods, and services from that shell.
+    - Some clusters may allow you to ssh to a node in the cluster. From there you may be able to
+      access cluster services. This is a non-standard method, and will work on some clusters but
+      not others. Browsers and other tools may or may not be installed. Cluster DNS may not work.
+-->
+- 从集群中的一个节点或 Pod 访问
+  - 运行一个 Pod，然后使用
+    [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands/#exec)
+    连接到它的 Shell。从那个 Shell 连接其他的节点、Pod 和 服务
+  - 某些集群可能允许你 SSH 到集群中的节点。你可能可以从那儿访问集群服务。
+    这是一个非标准的方式，可能在一些集群上能工作，但在另一些上却不能。
+    浏览器和其他工具可能已经安装也可能没有安装。集群 DNS 可能不会正常工作。
 
+<!--
+### Discovering builtin services
 
-### 发现内置服务
+Typically, there are several services which are started on a cluster by kube-system. Get a list of these
+with the `kubectl cluster-info` command:
+-->
+### 发现内置服务   {#discovering-builtin-services}
 
-
-典型情况下，kube-system 会启动集群中的几个服务。使用 `kubectl cluster-info` 命令获取它们的列表：
+典型情况下，kube-system 名字空间中会启动集群的几个服务。
+使用 `kubectl cluster-info` 命令获取这些服务的列表：
 
 ```shell
-$ kubectl cluster-info
-
-  Kubernetes master is running at https://104.197.5.247
-  elasticsearch-logging is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy
-  kibana-logging is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/kibana-logging/proxy
-  kube-dns is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/kube-dns/proxy
-  grafana is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/monitoring-grafana/proxy
-  heapster is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/monitoring-heapster/proxy
+kubectl cluster-info
 ```
 
-这显示了用于访问每个服务的 proxy-verb URL。例如，这个集群启用了（使用 Elasticsearch）集群层面的日志，如果提供合适的凭据可以通过 `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/` 访问，或通过一个 kubectl 代理地址访问，如：`http://localhost:8080/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`。（请查看  [上文](#accessing-the-cluster-api) 关于如何传递凭据或者使用 kubectl 代理的说明。）
+<!--
+The output is similar to this:
+-->
+输出类似于：
 
+```
+Kubernetes master is running at https://104.197.5.247
+elasticsearch-logging is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy
+kibana-logging is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/kibana-logging/proxy
+kube-dns is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/kube-dns/proxy
+grafana is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/monitoring-grafana/proxy
+heapster is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/monitoring-heapster/proxy
+```
 
-#### 手动构建 apiserver 代理 URLs
+<!--
+This shows the proxy-verb URL for accessing each service.
+For example, this cluster has cluster-level logging enabled (using Elasticsearch), which can be reached
+at `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/` if suitable credentials are passed, or through a kubectl proxy at, for example:
+`http://localhost:8080/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`.
+-->
+这一输出显示了用 proxy 动词访问每个服务时可用的 URL。例如，此集群
+（使用 Elasticsearch）启用了集群层面的日志。如果提供合适的凭据，可以通过
+`https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/` 访问，或通过一个 `kubectl proxy` 来访问：`http://localhost:8080/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`。
 
+<!--
+See [Access Clusters Using the Kubernetes API](/docs/tasks/administer-cluster/access-cluster-api/#accessing-the-cluster-api) for how to pass credentials or use kubectl proxy.
+-->
+{{< note >}}
+请参阅[使用 Kubernets API 访问集群](/docs/tasks/administer-cluster/access-cluster-api/#accessing-the-cluster-api)了解如何传递凭据或如何使用 `kubectl proxy`。
+{{< /note >}}
 
-如同上面所提到的，你可以使用 `kubectl cluster-info` 命令取得 service 的代理 URL。为了创建包含 service endpoints、suffixes 和 parameters 的代理 URLs，你可以简单的在 service 的代理 URL中 添加：
+<!--
+#### Manually constructing apiserver proxy URLs
+
+As mentioned above, you use the `kubectl cluster-info` command to retrieve the service's proxy URL. To create proxy URLs that include service endpoints, suffixes, and parameters, you simply append to the service's proxy URL:
+`http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`[https:]service_name[:port_name]`*`/proxy`
+
+If you haven't specified a name for your port, you don't have to specify *port_name* in the URL.
+-->
+#### 手动构建 API 服务器代理 URLs
+
+如前所述，你可以使用 `kubectl cluster-info` 命令取得服务的代理 URL。
+为了创建包含服务末端、后缀和参数的代理 URLs，你可以简单地在服务的代理 URL 中添加：
 `http://`*`kubernetes_master_address`*`/api/v1/namespaces/`*`namespace_name`*`/services/`*`service_name[:port_name]`*`/proxy`
 
-
 如果还没有为你的端口指定名称，你可以不用在 URL 中指定 *port_name*。
 
+<!--
+##### Examples
 
+* To access the Elasticsearch service endpoint `_search?q=user:kimchy`, you would use:
+-->
 ##### 示例
 
+* 如要访问 Elasticsearch 服务末端 `_search?q=user:kimchy`，你可以使用： 
 
- * 你可以通过 `http://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_search?q=user:kimchy` 访问 Elasticsearch service endpoint `_search?q=user:kimchy`。
- * 你可以通过 `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_cluster/health?pretty=true` 访问 Elasticsearch 集群健康信息 endpoint `_cluster/health?pretty=true`。
+  ```
+  http://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_search?q=user:kimchy
+  ```
 
-```json
+<!--
+* To access the Elasticsearch cluster health information `_cluster/health?pretty=true`, you would use:
+-->
+* 如要访问 Elasticsearch 集群健康信息`_cluster/health?pretty=true`，你会使用：
+
+  ```
+  https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_cluster/health?pretty=true` 
+  ```
+
+  <!--
+  The health information is similar to this:
+  -->
+  健康信息与下面的例子类似：
+
+  ```json
   {
     "cluster_name" : "kubernetes_logging",
     "status" : "yellow",
@@ -92,18 +199,34 @@ $ kubectl cluster-info
     "initializing_shards" : 0,
     "unassigned_shards" : 5
   }
-```
+  ```
 
+<!--
+* To access the *https* Elasticsearch service health information `_cluster/health?pretty=true`, you would use:
+-->
+* 要访问 *https* Elasticsearch 服务健康信息 `_cluster/health?pretty=true`，你会使用：
 
-#### 通过 web 浏览器访问集群中运行的服务
+  ```
+  https://104.197.5.247/api/v1/namespaces/kube-system/services/https:elasticsearch-logging/proxy/_cluster/health?pretty=true
+  ```
 
+<!--
+#### Using web browsers to access services running on the cluster
 
-你或许能够将 apiserver 代理的 url 放入浏览器的地址栏，然而：
-
-
-  - Web 服务器不总是能够传递令牌，所以你可能需要使用基本（密码）认证。 Apiserver 可以配置为接受基本认证，但你的集群可能并没有这样配置。
-  - 某些 web 应用可能不能工作，特别是那些使用客户端侧 javascript 的应用，它们构造 url 的方式可能不能理解代理路径前缀。
-
+You may be able to put an apiserver proxy URL into the address bar of a browser. However:
+-->
+#### 通过 Web 浏览器访问集群中运行的服务
 
+你或许能够将 API 服务器代理的 URL 放入浏览器的地址栏，然而：
 
+<!--
+- Web browsers cannot usually pass tokens, so you may need to use basic (password) auth. Apiserver can be configured to accept basic auth,
+    but your cluster may not be configured to accept basic auth.
+- Some web apps may not work, particularly those with client side javascript that construct URLs in a
+    way that is unaware of the proxy path prefix.
+-->
+- Web 服务器通常不能传递令牌，所以你可能需要使用基本（密码）认证。 
+  API 服务器可以配置为接受基本认证，但你的集群可能并没有这样配置。
+- 某些 Web 应用可能无法工作，特别是那些使用客户端 Javascript 构造 URL 的
+  应用，所构造的 URL 可能并不支持代理路径前缀。
 

From 0f97bf3c670ffec7659da66c6ca0a161e971e89e Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 15 Aug 2020 20:24:22 +0800
Subject: [PATCH 042/496] [zh] Resync TopologyManager task

Mainly fix the upstream English text changes.
---
 .../administer-cluster/topology-manager.md    | 188 ++++++++++--------
 1 file changed, 103 insertions(+), 85 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/topology-manager.md b/content/zh/docs/tasks/administer-cluster/topology-manager.md
index c0eb000957..d197f5dcf7 100644
--- a/content/zh/docs/tasks/administer-cluster/topology-manager.md
+++ b/content/zh/docs/tasks/administer-cluster/topology-manager.md
@@ -1,29 +1,23 @@
 ---
 title: 控制节点上的拓扑管理策略
-reviewers:
-- ConnorDoyle
-- klueska
-- lmdaly
-- nolancon
-
 content_type: task
+min-kubernetes-server-version: v1.18
 ---
 <!--
----
 title: Control Topology Management Policies on a node
 reviewers:
 - ConnorDoyle
 - klueska
 - lmdaly
 - nolancon
-
+- bg-chun
 content_type: task
----
+min-kubernetes-server-version: v1.18
 -->
 
 <!-- overview -->
 
-{{< feature-state state="alpha" >}}
+{{< feature-state state="beta" for_k8s_version="v1.18" >}}
 
 <!--
 An increasing number of systems leverage a combination of CPUs and hardware accelerators to support latency-critical execution and high-throughput parallel computation. These include workloads in fields such as telecommunications, scientific computing, machine learning, financial services and data analytics. Such hybrid systems comprise a high performance environment.
@@ -41,17 +35,12 @@ In order to extract the best performance, optimizations related to CPU isolation
 <!--
 _Topology Manager_ is a Kubelet component that aims to co-ordinate the set of components that are responsible for these optimizations.
 -->
-_拓扑管理器（Topology Manager）_ 是一个 Kubelet 的一部分，旨在协调负责这些优化的一组组件。
-
-
+_拓扑管理器（Topology Manager）_ 是一个 kubelet 的一部分，旨在协调负责这些优化的一组组件。
 
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
-
 <!-- steps -->
 
 <!--
@@ -91,42 +80,59 @@ The hint is then stored in the Topology Manager for use by the *Hint Providers*
 取决于所配置的策略，所选建议可用来决定节点接受或拒绝 Pod 。
 之后，建议会被存储在拓扑管理器中，供 *建议提供者* 进行资源分配决策时使用。
 
+<!--
+### Enable the Topology Manager feature
+
+Support for the Topology Manager requires `TopologyManager` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled. It is enabled by default starting with Kubernetes 1.18.
+-->
+### 启用拓扑管理器功能特性
+
+对拓扑管理器的支持要求启用 `TopologyManager`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+从 Kubernetes 1.18 版本开始，这一特性默认是启用的。
+
 <!--
 ### Topology Manager Policies
+
+The Topology Manager currently:
+
+ - Aligns Pods of all QoS classes.
+ - Aligns the requested resources that Hint Provider provides topology hints for.
 -->
 ### 拓扑管理器策略
 
-<!--
-The Topology Manager currently:
--->
-当前拓扑管理器：
+拓扑管理器目前：
 
-<!--
- - Works on Nodes with the `static` CPU Manager Policy enabled. See [control CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/)
- - Works on Pods making CPU requests or Device requests via extended resources
--->
-- 在启用了 `static` CPU 管理器策略的节点上起作用。 请参阅[控制 CPU 管理策略](/docs/tasks/administer-cluster/cpu-management-policies/)
-- 适用于通过扩展资源发出 CPU 请求或设备请求的 Pod
+- 对所有 QoS 类的 Pod 执行对齐操作
+- 针对建议提供者所提供的拓扑建议，对请求的资源进行对齐
 
 <!--
 If these conditions are met, Topology Manager will align the requested resources.
 -->
-如果满足这些条件，则拓扑管理器将调整请求的资源。
+如果满足这些条件，则拓扑管理器将对齐请求的资源。
+
+<!--
+To align CPU resources with other requested resources in a Pod Spec, the CPU Manager should be enabled and proper CPU Manager policy should be configured on a Node. See [control CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/).
+-->
+{{< note >}}
+为了将 Pod 规约中的 CPU 资源与其他请求资源对齐，CPU 管理器需要被启用并且
+节点上应配置了适当的 CPU 管理器策略。
+参看[控制 CPU 管理策略](/zh/docs/tasks/administer-cluster/cpu-management-policies/).
+{{< /note >}}
 
 <!--
 Topology Manager supports four allocation policies. You can set a policy via a Kubelet flag, `--topology-manager-policy`.
 There are four supported policies:
--->
-拓扑管理器支持四种分配策略。
-您可以通过 Kubelet 标志 `--topology-manager-policy` 设置策略。
-所支持的策略有四种：
 
-<!--
 * `none` (default)
 * `best-effort`
 * `restricted`
 * `single-numa-node`
 -->
+拓扑管理器支持四种分配策略。
+你可以通过 Kubelet 标志 `--topology-manager-policy` 设置策略。
+所支持的策略有四种：
+
 * `none` (默认)
 * `best-effort`
 * `restricted`
@@ -134,27 +140,26 @@ There are four supported policies:
 
 <!--
 ### none policy {#policy-none}
+
+This is the default policy and does not perform any topology alignment.
 -->
 ### none 策略 {#policy-none}
 
-<!--
-This is the default policy and does not perform any topology alignment.
--->
 这是默认策略，不执行任何拓扑对齐。
 
 <!--
 ### best-effort policy {#policy-best-effort}
--->
-### best-effort 策略 {#policy-best-effort}
 
-<!--
 For each container in a Guaranteed Pod, kubelet, with `best-effort` topology 
 management policy, calls each Hint Provider to discover their resource availability.
 Using this information, the Topology Manager stores the 
 preferred NUMA Node affinity for that container. If the affinity is not preferred, 
 Topology Manager will store this and admit the pod to the node anyway.
 -->
-对于 Guaranteed 类的 Pod 中的每个容器，具有 `best-effort` 拓扑管理策略的 kubelet 将调用每个建议提供者以确定资源可用性。
+### best-effort 策略 {#policy-best-effort}
+
+对于 Guaranteed 类的 Pod 中的每个容器，具有 `best-effort` 拓扑管理策略的
+kubelet 将调用每个建议提供者以确定资源可用性。
 使用此信息，拓扑管理器存储该容器的首选 NUMA 节点亲和性。
 如果亲和性不是首选，则拓扑管理器将存储该亲和性，并且无论如何都将  pod 接纳到该节点。
 
@@ -166,17 +171,17 @@ resource allocation decision.
 
 <!--
 ### restricted policy {#policy-restricted}
--->
-### restricted 策略 {#policy-restricted}
 
-<!--
 For each container in a Guaranteed Pod, kubelet, with `restricted` topology 
 management policy, calls each Hint Provider to discover their resource availability.
 Using this information, the Topology Manager stores the 
 preferred NUMA Node affinity for that container. If the affinity is not preferred, 
 Topology Manager will reject this pod from the node. This will result in a pod in a `Terminated` state with a pod admission failure.
 -->
-对于 Guaranteed 类 Pod 中的每个容器， 配置了 `restricted` 拓扑管理策略的 kubelet 调用每个建议提供者以确定其资源可用性。。
+### restricted 策略 {#policy-restricted}
+
+对于 Guaranteed 类 Pod 中的每个容器， 配置了 `restricted` 拓扑管理策略的 kubelet
+调用每个建议提供者以确定其资源可用性。。
 使用此信息，拓扑管理器存储该容器的首选 NUMA 节点亲和性。
 如果亲和性不是首选，则拓扑管理器将从节点中拒绝此 Pod 。
 这将导致 Pod 处于 `Terminated` 状态，且 Pod 无法被节点接纳。
@@ -185,21 +190,19 @@ Topology Manager will reject this pod from the node. This will result in a pod i
 Once the pod is in a `Terminated` state, the Kubernetes scheduler will **not** attempt to reschedule the pod. It is recommended to use a ReplicaSet or Deployment to trigger a redeploy of the pod.
 An external control loop could be also implemented to trigger a redeployment of pods that have the `Topology Affinity` error.
 -->
-一旦 Pod 处于 `Terminated` 状态，Kubernetes 调度器将不会尝试重新调度该 Pod。建议使用 ReplicaSet 或者 Deployment 来重新部署 Pod。
+一旦 Pod 处于 `Terminated` 状态，Kubernetes 调度器将不会尝试重新调度该 Pod。
+建议使用 ReplicaSet 或者 Deployment 来重新部署 Pod。
 还可以通过实现外部控制环，以启动对具有 `Topology Affinity` 错误的 Pod 的重新部署。
 
 <!--
 If the pod is admitted, the *Hint Providers* can then use this information when making the 
 resource allocation decision.
 -->
-如果 Pod 被允许运行在该节点，则 *建议提供者* 可以在做出资源分配决定时使用此信息。
+如果 Pod 被允许运行在某节点，则 *建议提供者* 可以在做出资源分配决定时使用此信息。
 
 <!--
 ### single-numa-node policy {#policy-single-numa-node}
--->
-### single-numa-node 策略 {#policy-single-numa-node}
 
-<!--
 For each container in a Guaranteed Pod, kubelet, with `single-numa-node` topology 
 management policy, calls each Hint Provider to discover their resource availability.
 Using this information, the Topology Manager determines if a single NUMA Node affinity is possible.
@@ -207,7 +210,10 @@ If it is, Topology Manager will store this and the *Hint Providers* can then use
 resource allocation decision.
 If, however, this is not possible then the Topology Manager will reject the pod from the node. This will result in a pod in a `Terminated` state with a pod admission failure.
 -->
-对于 Guaranteed 类 Pod 中的每个容器， 配置了 `single-numa-nodde` 拓扑管理策略的 kubelet 调用每个建议提供者以确定其资源可用性。
+### single-numa-node 策略 {#policy-single-numa-node}
+
+对于 Guaranteed 类 Pod 中的每个容器， 配置了 `single-numa-nodde` 拓扑管理策略的
+kubelet 调用每个建议提供者以确定其资源可用性。
 使用此信息，拓扑管理器确定单 NUMA 节点亲和性是否可能。
 如果是这样，则拓扑管理器将存储此信息，然后 *建议提供者* 可以在做出资源分配决定时使用此信息。
 如果不可能，则拓扑管理器将拒绝 Pod 运行于该节点。
@@ -217,17 +223,17 @@ If, however, this is not possible then the Topology Manager will reject the pod
 Once the pod is in a `Terminated` state, the Kubernetes scheduler will **not** attempt to reschedule the pod. It is recommended to use a Deployment with replicas to trigger a redeploy of the Pod.
 An external control loop could be also implemented to trigger a redeployment of pods that have the `Topology Affinity` error.
 -->
-一旦 Pod 处于 `Terminated` 状态，Kubernetes 调度器将不会尝试重新调度该 Pod。建议使用 ReplicaSet 或者 Deployment 来重新部署 Pod。
+一旦 Pod 处于 `Terminated` 状态，Kubernetes 调度器将不会尝试重新调度该 Pod。
+建议使用 ReplicaSet 或者 Deployment 来重新部署 Pod。
 还可以通过实现外部控制环，以触发具有 `Topology Affinity` 错误的 Pod 的重新部署。
 
 <!--
 ### Pod Interactions with Topology Manager Policies
+
+Consider the containers in the following pod specs:
 -->
 ### Pod 与拓扑管理器策略的交互
 
-<!--
-Consider the containers in the following pod specs:
--->
 考虑以下 pod 规范中的容器：
 
 ```yaml
@@ -241,7 +247,7 @@ spec:
 This pod runs in the `BestEffort` QoS class because no resource `requests` or
 `limits` are specified.
 -->
-该 Pod 在 `BestEffort` QoS 类中运行，因为没有指定资源 `requests` 或 `limits` 。
+该 Pod 以 `BestEffort` QoS 类运行，因为没有指定资源 `requests` 或 `limits`。
 
 ```yaml
 spec:
@@ -261,11 +267,12 @@ This pod runs in the `Burstable` QoS class because requests are less than limits
 由于 requests 数少于 limits，因此该 Pod 以 `Burstable` QoS 类运行。
 
 <!--
-If the selected policy is anything other than `none` , Topology Manager would not consider either of these Pod
-specifications. 
+If the selected policy is anything other than `none`, Topology Manager would consider these Pod specifications. The Topology Manager would consult the Hint Providers to get topology hints. In the case of the `static`, the CPU Manager policy would return default topology hint, because these Pods do not have explicity request CPU resources.
 -->
-如果选择的策略是 `none` 以外的任何其他策略，拓扑管理器不会考虑这些 Pod 中的任何一个规范。
-
+如果选择的策略是 `none` 以外的任何其他策略，拓扑管理器都会评估这些 Pod 的规范。
+拓扑管理器会咨询建议提供者，获得拓扑建议。
+若策略为 `static`，则 CPU 管理器策略会返回默认的拓扑建议，因为这些 Pod
+并没有显式地请求 CPU 资源。
 
 ```yaml
 spec:
@@ -284,10 +291,10 @@ spec:
 ```
 
 <!--
-This pod runs in the `Guaranteed` QoS class because `requests` are equal to `limits`.
+This pod with integer CPU request runs in the `Guaranteed` QoS class because
+`requests` are equal to `limits`.
 -->
-此 Pod 在 `Guaranteed` QoS 类中运行，因为其 `requests` 值等于 `limits` 值。
-
+此 Pod 以 `Guaranteed` QoS 类运行，因为其 `requests` 值等于 `limits` 值。
 
 ```yaml
 spec:
@@ -302,48 +309,59 @@ spec:
         example.com/deviceA: "1"
         example.com/deviceB: "1"
 ```
+
 <!--
 This pod runs in the `BestEffort` QoS class because there are no CPU and memory requests.
 -->
-由于没有 CPU 和内存请求，因此该 Pod 在 `BestEffort` QoS 类中运行。
+因为未指定 CPU 和内存请求，所以 Pod 以 `BestEffort` QoS 类运行。
 
 <!--
 The Topology Manager would consider both of the above pods. The Topology Manager would consult the Hint Providers, which are CPU and Device Manager to get topology hints for the pods. 
-In the case of the `Guaranteed` pod the `static` CPU Manager policy would return hints relating to the CPU request and the Device Manager would send back hints for the requested device.
+
+In the case of the `Guaranteed` pod with integer request, the `static` CPU Manager policy would return hints relating to the CPU request and the Device Manager would send back hints for the requested device.
 -->
-拓扑管理器将考虑以上两个 Pod。拓扑管理器将咨询 CPU 和设备管理器，以获取 Pod 的拓扑提示。
-对于 `Guaranteed` Pod，`static` CPU 管理器策略将返回与 CPU 请求有关的提示，而设备管理器将返回有关所请求设备的提示。
+拓扑管理器将考虑以上两个 Pod。拓扑管理器将咨询建议提供者即 CPU 和设备管理器，以获取 Pod 的拓扑提示。
+对于 `Guaranteed` 类的 CPU 请求数为整数的 Pod，`static` CPU 管理器策略将返回与 CPU 请求有关的提示，
+而设备管理器将返回有关所请求设备的提示。
 
 <!--
-In the case of the `BestEffort` pod the CPU Manager would send back the default hint as there is no CPU request and the Device Manager would send back the hints for each of the requested devices.
+In the case of the `Guaranteed` pod with sharing CPU request, the `static` CPU Manager policy would return default topology hint as there is no exclusive CPU request and the Device Manager would send back hints for the requested device.
+
+In the above two cases of the `Guaranteed` pod, the `none` CPU Manager policy would return default topology hint.
 -->
-对于 `BestEffort` Pod，由于没有 CPU 请求，CPU 管理器将发送默认提示，而设备管理器将为每个请求的设备发送提示。
+对于 `Guaranteed` 类的 CPU 请求可共享的 Pod，`static` CPU
+管理器策略将返回默认的拓扑提示，因为没有排他性的 CPU 请求；而设备管理器
+则针对所请求的设备返回有关提示。
+
+在上述两种 `Guaranteed` Pod 的情况中，`none` CPU 管理器策略会返回默认的拓扑提示。
+
+<!--
+In the case of the `BestEffort` pod, the `static` CPU Manager policy would send back the default topology hint as there is no CPU request and the Device Manager would send back the hints for each of the requested devices.
+-->
+对于 `BestEffort` Pod，由于没有 CPU 请求，`static` CPU 管理器策略将发送默认提示，
+而设备管理器将为每个请求的设备发送提示。
 
 <!--
 Using this information the Topology Manager calculates the optimal hint for the pod and stores this information, which will be used by the Hint Providers when they are making their resource assignments.
 -->
-使用此信息，拓扑管理器将为 Pod 计算最佳提示并存储该信息，并且供提示提供程序在进行资源分配时使用。
+基于此信息，拓扑管理器将为 Pod 计算最佳提示并存储该信息，并且供
+提示提供程序在进行资源分配时使用。
 
 <!--
 ### Known Limitations
+
+1. The maximum number of NUMA nodes that Topology Manager allows is 8. With more than 8 NUMA nodes there will be a state explosion when trying to enumerate the possible NUMA affinities and generating their hints.
+
+2. The scheduler is not topology-aware, so it is possible to be scheduled on a node and then fail on the node due to the Topology Manager.
+
+3. The Device Manager and the CPU Manager are the only components to adopt the Topology Manager's HintProvider interface. This means that NUMA alignment can only be achieved for resources managed by the CPU Manager and the Device Manager. Memory or Hugepages are not considered by the Topology Manager for NUMA alignment.
 -->
 ### 已知的局限性
-<!--
-1. As of K8s 1.16 the Topology Manager is currently only guaranteed to work if a *single* container in the pod spec requires aligned resources. This is due to the hint generation being based on current resource allocations, and all containers in a pod generate hints before any resource allocation has been made. This results in unreliable hints for all but the first container in a pod.
-*Due to this limitation if multiple pods/containers are considered by Kubelet in quick succession they may not respect the Topology Manager policy.
--->
-1. 从 K8s 1.16 开始，当前只能在保证 Pod 规范中的 *单个* 容器需要相匹配的资源时，拓扑管理器才能正常工作。这是由于生成的提示信息是基于当前资源分配的，并且 pod 中的所有容器都会在进行任何资源分配之前生成提示信息。这样会导致除 Pod 中的第一个容器以外的所有容器生成不可靠的提示信息。
-* 由于此限制，如果 kubelet 快速连续考虑多个 Pod/容器，它们可能不遵守拓扑管理器策略。
-
-<!--
-2. The maximum number of NUMA nodes that Topology Manager will allow is 8, past this there will be a state explosion when trying to enumerate the possible NUMA affinities and generating their hints.
--->
-2. 拓扑管理器允许的最大 NUMA 节点数为 8，并且在尝试枚举可能的 NUMA 关联并生成其提示信息时，将出现状态问题。
-
-<!--
-3. The scheduler is not topology-aware, so it is possible to be scheduled on a node and then fail on the node due to the Topology Manager.
--->
-3. 调度器不支持拓扑功能，因此可能会由于拓扑管理器的原因而在节点上进行调度，然后在该节点上调度失败。
-
 
+1. 拓扑管理器所能处理的最大 NUMA 节点个数是 8。若 NUMA 节点数超过 8，
+   枚举可能的 NUMA 亲和性并为之生成提示时会发生状态爆炸。
+2. 调度器不支持拓扑功能，因此可能会由于拓扑管理器的原因而在节点上进行调度，然后在该节点上调度失败。
+3. 设备管理器和 CPU 管理器时能够采纳拓扑管理器 HintProvider 接口的唯一两个组件。
+   这意味着 NUMA 对齐只能针对 CPU 管理器和设备管理器所管理的资源实现。
+   内存和大页面在拓扑管理器决定 NUMA 对齐时都还不会被考虑在内。
 

From 84b05958b2d7215ebcee8004fbc4804f2c4f1adc Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Wed, 12 Aug 2020 09:30:13 +0100
Subject: [PATCH 043/496] Tidy troubleshooting task

---
 .../troubleshooting.md                        | 63 +++++++++----------
 1 file changed, 31 insertions(+), 32 deletions(-)

diff --git a/content/en/docs/tasks/debug-application-cluster/troubleshooting.md b/content/en/docs/tasks/debug-application-cluster/troubleshooting.md
index 24123e1d33..a5385b25fc 100644
--- a/content/en/docs/tasks/debug-application-cluster/troubleshooting.md
+++ b/content/en/docs/tasks/debug-application-cluster/troubleshooting.md
@@ -24,7 +24,7 @@ you're using.
 ## Getting help
 
 If your problem isn't answered by any of the guides above, there are variety of
-ways for you to get help from the Kubernetes team.
+ways for you to get help from the Kubernetes community.
 
 ### Questions
 
@@ -38,11 +38,6 @@ development scenarios. The [Reference](/docs/reference/) section provides
 detailed documentation on the [Kubernetes API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
 and command-line interfaces (CLIs), such as [`kubectl`](/docs/reference/kubectl/overview/).
 
-You may also find the Stack Overflow topics relevant:
-
-* [Kubernetes](https://stackoverflow.com/questions/tagged/kubernetes)
-* [Google Kubernetes Engine](https://stackoverflow.com/questions/tagged/google-container-engine)
-
 ## Help! My question isn't covered!  I need help now!
 
 ### Stack Overflow
@@ -55,41 +50,45 @@ If there aren't any existing questions that help, please
 
 ### Slack
 
-The Kubernetes team hangs out on Slack in the `#kubernetes-users` channel. You
-can participate in discussion with the Kubernetes team [here](https://kubernetes.slack.com).
-Slack requires registration, but the Kubernetes team is open invitation to
-anyone to register [here](https://slack.kubernetes.io). Feel free to come and ask
-any and all questions.
+Many people from the Kubernetes community hang out on Kubernetes Slack in the `#kubernetes-users` channel.
+Slack requires registration; you can [request an invitation](https://slack.kubernetes.io),
+and registration is open to everyone). Feel free to come and ask any and all questions.
+Once registered, access the [Kubernetes organisation in Slack](https://kubernetes.slack.com)
+via your web browser or via Slack's own dedicated app.
 
-Once registered, browse the growing list of channels for various subjects of
+Once you are registered, browse the growing list of channels for various subjects of
 interest. For example, people new to Kubernetes may also want to join the
-`#kubernetes-novice` channel. As another example, developers should join the
-`#kubernetes-dev` channel.
+[`#kubernetes-novice`](https://kubernetes.slack.com/messages/kubernetes-novice) channel. As another example, developers should join the
+[`#kubernetes-dev`](https://kubernetes.slack.com/messages/kubernetes-dev) channel.
 
-There are also many country specific/local language channels. Feel free to join
+There are also many country specific / local language channels. Feel free to join
 these channels for localized support and info:
 
-- China: `#cn-users`, `#cn-events`
-- Finland: `#fi-users`
-- France: `#fr-users`, `#fr-events`
-- Germany: `#de-users`, `#de-events`
-- India: `#in-users`, `#in-events`
-- Italy: `#it-users`, `#it-events`
-- Japan: `#jp-users`, `#jp-events`
-- Korea: `#kr-users`
-- Netherlands: `#nl-users`
-- Norway: `#norw-users`
-- Poland: `#pl-users`
-- Russia: `#ru-users`
-- Spain: `#es-users`
-- Sweden: `#se-users`
-- Turkey: `#tr-users`, `#tr-events`
+{{< table caption="Country / language specific Slack channels" >}}
+Country | Channels
+:---------|:------------
+China | [`#cn-users`](https://kubernetes.slack.com/messages/cn-users), [`#cn-events`](https://kubernetes.slack.com/messages/cn-events)
+Finland | [`#fi-users`](https://kubernetes.slack.com/messages/fi-users)
+France | [`#fr-users`](https://kubernetes.slack.com/messages/fr-users), [`#fr-events`](https://kubernetes.slack.com/messages/fr-events)
+Germany | [`#de-users`](https://kubernetes.slack.com/messages/de-users), [`#de-events`](https://kubernetes.slack.com/messages/de-events)
+India | [`#in-users`](https://kubernetes.slack.com/messages/in-users), [`#in-events`](https://kubernetes.slack.com/messages/in-events)
+Italy | [`#it-users`](https://kubernetes.slack.com/messages/it-users), [`#it-events`](https://kubernetes.slack.com/messages/it-events)
+Japan | [`#jp-users`](https://kubernetes.slack.com/messages/jp-users), [`#jp-events`](https://kubernetes.slack.com/messages/jp-events)
+Korea | [`#kr-users`](https://kubernetes.slack.com/messages/kr-users)
+Netherlands | [`#nl-users`](https://kubernetes.slack.com/messages/nl-users)
+Norway | [`#norw-users`](https://kubernetes.slack.com/messages/norw-users)
+Poland | [`#pl-users`](https://kubernetes.slack.com/messages/pl-users)
+Russia | [`#ru-users`](https://kubernetes.slack.com/messages/ru-users)
+Spain | [`#es-users`](https://kubernetes.slack.com/messages/es-users)
+Sweden | [`#se-users`](https://kubernetes.slack.com/messages/se-users)
+Turkey | [`#tr-users`](https://kubernetes.slack.com/messages/tr-users), [`#tr-events`](https://kubernetes.slack.com/messages/tr-events)
+{{< /table >}}
 
 ### Forum
 
-The Kubernetes Official Forum [discuss.kubernetes.io](https://discuss.kubernetes.io)
+You're welcome to join the official Kubernetes Forum: [discuss.kubernetes.io](https://discuss.kubernetes.io).
 
-### Bugs and Feature requests
+### Bugs and feature requests
 
 If you have what looks like a bug, or you would like to make a feature request,
 please use the [GitHub issue tracking system](https://github.com/kubernetes/kubernetes/issues).

From 23ec6207166c3b4649523a397fa0633cde65f4d6 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 15 Aug 2020 22:59:28 +0800
Subject: [PATCH 044/496] [zh] Fix change PV reclaim policy task

The original English text is missing ...
---
 .../change-pv-reclaim-policy.md               | 143 ++++++++++++------
 1 file changed, 99 insertions(+), 44 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/change-pv-reclaim-policy.md b/content/zh/docs/tasks/administer-cluster/change-pv-reclaim-policy.md
index a2b6d89e0c..d02b8d2435 100644
--- a/content/zh/docs/tasks/administer-cluster/change-pv-reclaim-policy.md
+++ b/content/zh/docs/tasks/administer-cluster/change-pv-reclaim-policy.md
@@ -2,86 +2,141 @@
 title: 更改 PersistentVolume 的回收策略
 content_type: task
 ---
-
-
 <!-- overview -->
-
+<!--
+This page shows how to change the reclaim policy of a Kubernetes
+PersistentVolume.
+-->
 本文展示了如何更改 Kubernetes PersistentVolume 的回收策略。
 
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
-
 <!-- steps -->
 
+<!--
+## Why change reclaim policy of a PersistentVolume
 
+PersistentVolumes can have various reclaim policies, including "Retain",
+"Recycle", and "Delete". For dynamically provisioned PersistentVolumes,
+the default reclaim policy is "Delete". This means that a dynamically provisioned
+volume is automatically deleted when a user deletes the corresponding
+PersistentVolumeClaim. This automatic behavior might be inappropriate if the volume
+contains precious data. In that case, it is more appropriate to use the "Retain"
+policy. With the "Retain" policy, if a user deletes a PersistentVolumeClaim,
+the corresponding PersistentVolume is not be deleted. Instead, it is moved to the
+Released phase, where all of its data can be manually recovered.
+-->
 ## 为什么要更改 PersistentVolume 的回收策略
 
+PersistentVolumes 可以有多种回收策略，包括 "Retain"、"Recycle" 和  "Delete"。
+对于动态配置的 PersistentVolumes 来说，默认回收策略为 "Delete"。
+这表示当用户删除对应的 PersistentVolumeClaim 时，动态配置的 volume 将被自动删除。
+如果 volume 包含重要数据时，这种自动行为可能是不合适的。
+那种情况下，更适合使用 "Retain" 策略。
+使用 "Retain" 时，如果用户删除 PersistentVolumeClaim，对应的 PersistentVolume 不会被删除。
+相反，它将变为 Released 状态，表示所有的数据可以被手动恢复。
 
-PersistentVolumes 可以有多种回收策略，包括 "Retain"、"Recycle" 和  "Delete"。对于动态配置的 PersistentVolumes 来说，默认回收策略为 "Delete"。这表示当用户删除对应的 PersistentVolumeClaim 时，动态配置的 volume 将被自动删除。如果 volume 包含重要数据时，这种自动行为可能是不合适的。那种情况下，更适合使用 "Retain" 策略。使用 "Retain" 时，如果用户删除 PersistentVolumeClaim，对应的 PersistentVolume 不会被删除。相反，它将变为 Released 状态，表示所有的数据可以被手动恢复。
-
-
+<!--
+## Changing the reclaim policy of a PersistentVolume
+-->
 ## 更改 PersistentVolume 的回收策略
 
-
+<!--
+1. List the PersistentVolumes in your cluster:
+-->
 1. 列出你集群中的 PersistentVolumes
 
-       kubectl get pv
+   ```shell
+   kubectl get pv
+   ```
 
-    输出类似于这样：
+   输出类似于这样：
 
-        NAME                                       CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                  REASON    AGE
-        pvc-b6efd8da-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim1                   10s
-        pvc-b95650f8-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim2                   6s
-        pvc-bb3ca71d-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim3                   3s
-
-
-   这个列表同样包含了绑定到每个 volume 的 claims 名称，以便更容易的识别动态配置的 volumes。
+   ```
+   NAME                                       CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                  REASON    AGE
+   pvc-b6efd8da-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim1                   10s
+   pvc-b95650f8-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim2                   6s
+   pvc-bb3ca71d-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim3                   3s
+   ```
 
+   <!--
+   This list also includes the name of the claims that are bound to each volume
+   for easier identification of dynamically provisioned volumes.
+   -->
+   这个列表同样包含了绑定到每个卷的 claims 名称，以便更容易的识别动态配置的卷。
 
+<!--
+1. Choose one of your PersistentVolumes and change its reclaim policy:
+-->
 2. 选择你的 PersistentVolumes 中的一个并更改它的回收策略：
 
-    ```shell
-    kubectl patch pv <your-pv-name> -p '{"spec":{"persistentVolumeReclaimPolicy":"Retain"}}'
-    ```
+   ```shell
+   kubectl patch pv <your-pv-name> -p '{"spec":{"persistentVolumeReclaimPolicy":"Retain"}}'
+   ```
 
-    这里的 `<your-pv-name>` 是你选择的 PersistentVolume 的名字。
+   <!--
+   where `<your-pv-name>` is the name of your chosen PersistentVolume.
+   -->
+   这里的 `<your-pv-name>` 是你选择的 PersistentVolume 的名字。
 
+   <!--
+   On Windows, you must _double_ quote any JSONPath template that contains spaces
+   (not single quote as shown above for bash). This in turn means that you must
+   use a single quote or escaped double quote around any literals in the template. For example:
+   -->
+   {{< note >}}
+   在 Windows 系统上，你必须对包含空格的 JSONPath 模板加双引号（而不是像上面
+   一样为 Bash 环境使用的单引号）。这也意味着你必须使用单引号或者转义的双引号
+   来处理模板中的字面值。例如：
+
+   ```cmd
+   kubectl patch pv <your-pv-name> -p "{\"spec\":{\"persistentVolumeReclaimPolicy\":\"Retain\"}}"
+   ```
+   {{< /note >}}
+
+<!--
+1. Verify that your chosen PersistentVolume has the right policy:
+-->
 3. 验证你选择的 PersistentVolume 拥有正确的策略：
 
-    ```shell
-    kubectl get pv
-    ```
+   ```shell
+   kubectl get pv
+   ```
 
-    输出类似于这样：
-
-        NAME                                       CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                  REASON    AGE
-        pvc-b6efd8da-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim1                   40s
-        pvc-b95650f8-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim2                   36s
-        pvc-bb3ca71d-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Retain          Bound     default/claim3                   33s
-
-
-    在前面的输出中，你可以看到绑定到 claim `default/claim3` 的 volume 拥有的回收策略为 `Retain`。当用户删除 claim `default/claim3` 时，它不会被自动删除。
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于这样：
 
+   ```
+   NAME                                       CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                  REASON    AGE
+   pvc-b6efd8da-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim1                   40s
+   pvc-b95650f8-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Delete          Bound     default/claim2                   36s
+   pvc-bb3ca71d-b7b5-11e6-9d58-0ed433a7dd94   4Gi        RWO           Retain          Bound     default/claim3                   33s
+   ```
 
+   <!--
+   In the preceding output, you can see that the volume bound to claim
+   `default/claim3` has reclaim policy `Retain`. It will not be automatically
+   deleted when a user deletes claim `default/claim3`.
+   -->
+   在前面的输出中，你可以看到绑定到申领 `default/claim3` 的卷的回收策略为 `Retain`。
+   当用户删除申领 `default/claim3` 时，它不会被自动删除。
 
 ## {{% heading "whatsnext" %}}
 
-
-* 了解更多关于 [PersistentVolumes](/docs/concepts/storage/persistent-volumes/)的信息。
-* 了解更多关于 [PersistentVolumeClaims](/docs/user-guide/persistent-volumes/#persistentvolumeclaims) 的信息。
-
+<!--
+* Learn more about [PersistentVolumes](/docs/concepts/storage/persistent-volumes/).
+* Learn more about [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims).
+-->
+* 进一步了解 [PersistentVolumes](/docs/concepts/storage/persistent-volumes/)
+* 进一步了解 [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)
 
 ### 参考
 
 * [PersistentVolume](/docs/api-reference/{{< param "version" >}}/#persistentvolume-v1-core)
 * [PersistentVolumeClaim](/docs/api-reference/{{< param "version" >}}/#persistentvolumeclaim-v1-core)
-
-* 查阅  [PersistentVolumeSpec](/docs/api-reference/{{< param "version" >}}/#persistentvolumeclaim-v1-core) 的 `persistentVolumeReclaimPolicy` 字段。
-
-
+* 参阅 [PersistentVolumeSpec](/docs/api-reference/{{< param "version" >}}/#persistentvolumeclaim-v1-core) 的 `persistentVolumeReclaimPolicy` 字段
 

From dd1c2cd33092c581fefc45857226698a36ac4f75 Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sat, 15 Aug 2020 22:33:29 +0700
Subject: [PATCH 045/496] ID localization for debug application cluster

Add nginx-with-request yaml for debug application cluster
---
 .../debug-application-introspection.md        | 401 ++++++++++++++++++
 .../application/nginx-with-request.yaml       |  23 +
 2 files changed, 424 insertions(+)
 create mode 100644 content/id/docs/tasks/debug-application-cluster/debug-application-introspection.md
 create mode 100644 content/id/examples/application/nginx-with-request.yaml

diff --git a/content/id/docs/tasks/debug-application-cluster/debug-application-introspection.md b/content/id/docs/tasks/debug-application-cluster/debug-application-introspection.md
new file mode 100644
index 0000000000..96b7a05e07
--- /dev/null
+++ b/content/id/docs/tasks/debug-application-cluster/debug-application-introspection.md
@@ -0,0 +1,401 @@
+---
+content_type: concept
+title: Introspeksi dan _Debugging_ Aplikasi
+---
+
+<!-- overview -->
+
+Setelah aplikasi kamu berjalan, kamu pasti perlu untuk men-_debug_ masalah yang ada di dalamnya.
+Sebelumnya telah dijelaskan bagaimana kamu dapat menggunakan `kubectl get pods` untuk mengambil informasi status sederhana tentang
+Pod kamu. Namun ada sejumlah cara untuk mendapatkan lebih banyak informasi tentang aplikasi kamu.
+
+
+
+
+<!-- body -->
+
+## Menggunakan `kubectl describe pod` untuk mengambil detil informasi Pod
+
+Dalam contoh ini, kamu menggunakan Deployment untuk membuat dua buah Pod, yang hampir sama dengan contoh sebelumnya.
+
+{{< codenew file="application/nginx-with-request.yaml" >}}
+
+Buat Deployment dengan menjalankan perintah ini:
+
+```shell
+kubectl apply -f https://k8s.io/examples/application/nginx-with-request.yaml
+```
+
+```none
+deployment.apps/nginx-deployment created
+```
+
+Cek status dari Pod dengan menggunakan perintah:
+
+```shell
+kubectl get pods
+```
+
+```none
+NAME                                READY     STATUS    RESTARTS   AGE
+nginx-deployment-1006230814-6winp   1/1       Running   0          11s
+nginx-deployment-1006230814-fmgu3   1/1       Running   0          11s
+```
+
+Kamu dapat memperoleh lebih banyak informasi tentang masing-masing Pod ini dengan menggunakan perintah `kubectl describe pod`. Sebagai contoh:
+
+```shell
+kubectl describe pod nginx-deployment-1006230814-6winp
+```
+
+```none
+Name:		nginx-deployment-1006230814-6winp
+Namespace:	default
+Node:		kubernetes-node-wul5/10.240.0.9
+Start Time:	Thu, 24 Mar 2016 01:39:49 +0000
+Labels:		app=nginx,pod-template-hash=1006230814
+Annotations:    kubernetes.io/created-by={"kind":"SerializedReference","apiVersion":"v1","reference":{"kind":"ReplicaSet","namespace":"default","name":"nginx-deployment-1956810328","uid":"14e607e7-8ba1-11e7-b5cb-fa16" ...
+Status:		Running
+IP:		10.244.0.6
+Controllers:	ReplicaSet/nginx-deployment-1006230814
+Containers:
+  nginx:
+    Container ID:	docker://90315cc9f513c724e9957a4788d3e625a078de84750f244a40f97ae355eb1149
+    Image:		nginx
+    Image ID:		docker://6f62f48c4e55d700cf3eb1b5e33fa051802986b77b874cc351cce539e5163707
+    Port:		80/TCP
+    QoS Tier:
+      cpu:	Guaranteed
+      memory:	Guaranteed
+    Limits:
+      cpu:	500m
+      memory:	128Mi
+    Requests:
+      memory:		128Mi
+      cpu:		500m
+    State:		Running
+      Started:		Thu, 24 Mar 2016 01:39:51 +0000
+    Ready:		True
+    Restart Count:	0
+    Environment:        <none>
+    Mounts:
+      /var/run/secrets/kubernetes.io/serviceaccount from default-token-5kdvl (ro)
+Conditions:
+  Type          Status
+  Initialized   True
+  Ready         True
+  PodScheduled  True
+Volumes:
+  default-token-4bcbi:
+    Type:	Secret (a volume populated by a Secret)
+    SecretName:	default-token-4bcbi
+    Optional:   false
+QoS Class:      Guaranteed
+Node-Selectors: <none>
+Tolerations:    <none>
+Events:
+  FirstSeen	LastSeen	Count	From					SubobjectPath		Type		Reason		Message
+  ---------	--------	-----	----					-------------		--------	------		-------
+  54s		54s		1	{default-scheduler }						Normal		Scheduled	Successfully assigned nginx-deployment-1006230814-6winp to kubernetes-node-wul5
+  54s		54s		1	{kubelet kubernetes-node-wul5}	spec.containers{nginx}	Normal		Pulling		pulling image "nginx"
+  53s		53s		1	{kubelet kubernetes-node-wul5}	spec.containers{nginx}	Normal		Pulled		Successfully pulled image "nginx"
+  53s		53s		1	{kubelet kubernetes-node-wul5}	spec.containers{nginx}	Normal		Created		Created container with docker id 90315cc9f513
+  53s		53s		1	{kubelet kubernetes-node-wul5}	spec.containers{nginx}	Normal		Started		Started container with docker id 90315cc9f513
+```
+
+Di sini kamu dapat melihat informasi konfigurasi tentang Container dan Pod (label, kebutuhan resource, dll.), serta informasi status tentang Container dan Pod (status, kesiapan, berapa kali _restart_, _event_, dll.) .
+
+Keadaan (_state_) Container merupakan salah satu dari keadaan _Waiting, Running,_ atau _Terminated_. Tergantung dari keadaannya, informasi tambahan akan diberikan - di sini kamu dapat melihat bahwa untuk Container dalam keadaan _running_, sistem memberi tahu kamu kapan Container tersebut mulai dijalankan.
+
+_Ready_ memberi tahu kepada kamu apakah Container berhasil melewati pemeriksaan kesiapan terakhir. (Dalam kasus ini, Container tidak memiliki pemeriksaan kesiapan yang dikonfigurasi; Container dianggap selalu siap jika tidak ada pemeriksaan kesiapan yang dikonfigurasi.)
+
+Jumlah _restart_ memberi tahu kamu berapa kali Container telah dimulai ulang; informasi ini dapat berguna untuk mendeteksi kemacetan tertutup (_crash loop_) dalam Container yang dikonfigurasi dengan nilai _restart policy_ 'always.'.
+
+Saat ini, satu-satunya kondisi yang terkait dengan Pod adalah kondisi _Binary Ready_, yang menunjukkan bahwa Pod tersebut dapat melayani permintaan dan harus ditambahkan ke kumpulan penyeimbang beban (_load balancing_) dari semua Service yang sesuai.
+
+Terakhir, kamu melihat catatan (_log_) peristiwa terbaru yang terkait dengan Pod kamu. Sistem mengompresi beberapa peristiwa yang identik dengan menunjukkan kapan pertama dan terakhir kali peristiwa itu dilihat dan berapa kali peristiwa itu dilihat. "From" menunjukkan komponen yang mencatat peristiwa, "SubobjectPath" memberi tahu kamu objek mana (mis. Container dalam pod) yang dimaksud, dan "Reason" dan "Message" memberi tahu kamu apa yang sudah terjadi.
+
+## Contoh: Men-_debug_ Pod yang _Pending_
+
+Skenario umum yang bisa kamu deteksi menggunakan peristiwa (_event_) adalah saat kamu telah membuat Pod yang tidak muat di Node mana pun. Misalnya, karena Pod mungkin meminta lebih banyak sumber daya yang tersedia dalam Node mana pun, atau mungkin Pod menentukan _label selector_ yang tidak sesuai dengan Node mana pun. Katakanlah kamu sebelumnya membuat Deployment dengan 5 replika (bukan 2) dan meminta 600 millicore, bukan 500, pada klaster dengan empat Node di mana setiap mesin (virtual) memiliki 1 CPU. Sehingga salah satu Pod tidak akan bisa dijadwalkan. (Perhatikan bahwa Pod _addon_ seperti fluentd, skydns, dll., yang berjalan di setiap Node pada klaster, tidak bisa dijadwalkan jika kamu meminta sebanyak 1000 millicore.)
+
+```shell
+kubectl get pods
+```
+
+```none
+NAME                                READY     STATUS    RESTARTS   AGE
+nginx-deployment-1006230814-6winp   1/1       Running   0          7m
+nginx-deployment-1006230814-fmgu3   1/1       Running   0          7m
+nginx-deployment-1370807587-6ekbw   1/1       Running   0          1m
+nginx-deployment-1370807587-fg172   0/1       Pending   0          1m
+nginx-deployment-1370807587-fz9sd   0/1       Pending   0          1m
+```
+
+Untuk mencari sebab kenapa Pod nginx-deployment-1370807587-fz9sd tidak berjalan, kamu dapat menggunakan `kubectl describe pod` pada Pod yang _pending_ dan melihat setiap peristiwa yang terjadi di dalamnya:
+
+```shell
+kubectl describe pod nginx-deployment-1370807587-fz9sd
+```
+
+```none
+  Name:		nginx-deployment-1370807587-fz9sd
+  Namespace:	default
+  Node:		/
+  Labels:		app=nginx,pod-template-hash=1370807587
+  Status:		Pending
+  IP:
+  Controllers:	ReplicaSet/nginx-deployment-1370807587
+  Containers:
+    nginx:
+      Image:	nginx
+      Port:	80/TCP
+      QoS Tier:
+        memory:	Guaranteed
+        cpu:	Guaranteed
+      Limits:
+        cpu:	1
+        memory:	128Mi
+      Requests:
+        cpu:	1
+        memory:	128Mi
+      Environment Variables:
+  Volumes:
+    default-token-4bcbi:
+      Type:	Secret (a volume populated by a Secret)
+      SecretName:	default-token-4bcbi
+  Events:
+    FirstSeen	LastSeen	Count	From			        SubobjectPath	Type		Reason			    Message
+    ---------	--------	-----	----			        -------------	--------	------			    -------
+    1m		    48s		    7	    {default-scheduler }			        Warning		FailedScheduling	pod (nginx-deployment-1370807587-fz9sd) failed to fit in any node
+  fit failure on node (kubernetes-node-6ta5): Node didn't have enough resource: CPU, requested: 1000, used: 1420, capacity: 2000
+  fit failure on node (kubernetes-node-wul5): Node didn't have enough resource: CPU, requested: 1000, used: 1100, capacity: 2000
+```
+
+Di sini kamu dapat melihat peristiwa yang dibuat oleh penjadwal yang mengatakan bahwa Pod gagal dijadwalkan karena alasan `FailedScheduling` (dan mungkin karena sebab yang lainnya). Pesan tersebut memberi tahu kamu bahwa tidak ada cukup sumber daya untuk Pod pada salah satu Node.
+
+Untuk memperbaiki situasi ini, kamu dapat menggunakan `kubectl scale` untuk memperbarui Deployment kamu untuk menentukan empat replika atau yang lebih kecil. (Atau kamu bisa membiarkan satu Pod tertunda, dimana hal ini tidak berbahaya.)
+
+Peristiwa seperti yang kamu lihat di bagian akhir keluaran dari perintah `kubectl description pod` akan tetap ada dalam etcd dan memberikan informasi tingkat tinggi tentang apa yang terjadi pada klaster. Untuk melihat daftar semua peristiwa kamu dapat menggunakan perintah
+
+```shell
+kubectl get events
+```
+
+tetapi kamu harus ingat bahwa peristiwa bersifat Namespace. Artinya, jika kamu tertarik dengan peristiwa untuk beberapa objek dalam Namespace (misalnya, apa yang terjadi dengan Pod pada Namespace `my-namespace`), kamu perlu secara eksplisit menyebutkan Namespace tersebut pada perintah:
+
+
+```shell
+kubectl get events --namespace=my-namespace
+```
+Untuk melihat peristiwa dari semua Namespace, kamu dapat menggunakan argumen `--all-namespaces`.
+
+Sebagai tambahan dari perintah `kubectl describe pod`, cara lain untuk mendapatkan informasi tambahan tentang sebuah Pod (selain yang disediakan oleh `kubectl get pod`) adalah dengan meneruskan _flag_ format keluaran `-o yaml` ke perintah `kubectl get pod`. Ini akan memberikan kamu lebih banyak informasi dalam format YAML daripada `kubectl describe pod`--semua informasi dasar yang dimiliki sistem tentang Pod. Di sini kamu akan melihat hal-hal seperti anotasi (yang merupakan metadata nilai kunci tanpa batasan label, yang digunakan secara internal oleh komponen sistem Kubernetes), kebijakan mulai ulang, porta, dan volume.
+
+```shell
+kubectl get pod nginx-deployment-1006230814-6winp -o yaml
+```
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  annotations:
+    kubernetes.io/created-by: |
+      {"kind":"SerializedReference","apiVersion":"v1","reference":{"kind":"ReplicaSet","namespace":"default","name":"nginx-deployment-1006230814","uid":"4c84c175-f161-11e5-9a78-42010af00005","apiVersion":"extensions","resourceVersion":"133434"}}
+  creationTimestamp: 2016-03-24T01:39:50Z
+  generateName: nginx-deployment-1006230814-
+  labels:
+    app: nginx
+    pod-template-hash: "1006230814"
+  name: nginx-deployment-1006230814-6winp
+  namespace: default
+  resourceVersion: "133447"
+  uid: 4c879808-f161-11e5-9a78-42010af00005
+spec:
+  containers:
+  - image: nginx
+    imagePullPolicy: Always
+    name: nginx
+    ports:
+    - containerPort: 80
+      protocol: TCP
+    resources:
+      limits:
+        cpu: 500m
+        memory: 128Mi
+      requests:
+        cpu: 500m
+        memory: 128Mi
+    terminationMessagePath: /dev/termination-log
+    volumeMounts:
+    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
+      name: default-token-4bcbi
+      readOnly: true
+  dnsPolicy: ClusterFirst
+  nodeName: kubernetes-node-wul5
+  restartPolicy: Always
+  securityContext: {}
+  serviceAccount: default
+  serviceAccountName: default
+  terminationGracePeriodSeconds: 30
+  volumes:
+  - name: default-token-4bcbi
+    secret:
+      secretName: default-token-4bcbi
+status:
+  conditions:
+  - lastProbeTime: null
+    lastTransitionTime: 2016-03-24T01:39:51Z
+    status: "True"
+    type: Ready
+  containerStatuses:
+  - containerID: docker://90315cc9f513c724e9957a4788d3e625a078de84750f244a40f97ae355eb1149
+    image: nginx
+    imageID: docker://6f62f48c4e55d700cf3eb1b5e33fa051802986b77b874cc351cce539e5163707
+    lastState: {}
+    name: nginx
+    ready: true
+    restartCount: 0
+    state:
+      running:
+        startedAt: 2016-03-24T01:39:51Z
+  hostIP: 10.240.0.9
+  phase: Running
+  podIP: 10.244.0.6
+  startTime: 2016-03-24T01:39:49Z
+```
+
+## Contoh: Men-_debug_ Node yang mati/tidak terjangkau (_down/unreachable_)
+
+Terkadang saat men-_debug_ melihat status sebuah Node akan sangat berguna - misalnya, karena kamu telah melihat perilaku aneh dari sebuah Pod yang sedang berjalan pada Node tersebut, atau untuk mencari tahu mengapa sebuah Pod tidak dapat dijadwalkan ke dalam Node tersebut. Seperti pada Pod, kamu dapat menggunakan perintah `kubectl description node` dan` kubectl get node -o yaml` untuk mengambil informasi mendetil tentang Node. Misalnya, disini kamu akan melihat jika sebuah Node sedang mati (terputus dari jaringan, atau kubelet mati dan tidak mau restart, dll.). Perhatikan peristiwa yang menunjukkan Node tersebut NotReady, dan juga perhatikan bahwa Pod tidak lagi berjalan (mereka akan dikeluarkan setelah lima menit berstatus NotReady).
+
+```shell
+kubectl get nodes
+```
+
+```none
+NAME                     STATUS       ROLES     AGE     VERSION
+kubernetes-node-861h     NotReady     <none>    1h      v1.13.0
+kubernetes-node-bols     Ready        <none>    1h      v1.13.0
+kubernetes-node-st6x     Ready        <none>    1h      v1.13.0
+kubernetes-node-unaj     Ready        <none>    1h      v1.13.0
+```
+
+```shell
+kubectl describe node kubernetes-node-861h
+```
+
+```none
+Name:			kubernetes-node-861h
+Role
+Labels:		 kubernetes.io/arch=amd64
+           kubernetes.io/os=linux
+           kubernetes.io/hostname=kubernetes-node-861h
+Annotations:        node.alpha.kubernetes.io/ttl=0
+                    volumes.kubernetes.io/controller-managed-attach-detach=true
+Taints:             <none>
+CreationTimestamp:	Mon, 04 Sep 2017 17:13:23 +0800
+Phase:
+Conditions:
+  Type		Status		LastHeartbeatTime			LastTransitionTime			Reason					Message
+  ----    ------    -----------------     ------------------      ------          -------
+  OutOfDisk             Unknown         Fri, 08 Sep 2017 16:04:28 +0800         Fri, 08 Sep 2017 16:20:58 +0800         NodeStatusUnknown       Kubelet stopped posting node status.
+  MemoryPressure        Unknown         Fri, 08 Sep 2017 16:04:28 +0800         Fri, 08 Sep 2017 16:20:58 +0800         NodeStatusUnknown       Kubelet stopped posting node status.
+  DiskPressure          Unknown         Fri, 08 Sep 2017 16:04:28 +0800         Fri, 08 Sep 2017 16:20:58 +0800         NodeStatusUnknown       Kubelet stopped posting node status.
+  Ready                 Unknown         Fri, 08 Sep 2017 16:04:28 +0800         Fri, 08 Sep 2017 16:20:58 +0800         NodeStatusUnknown       Kubelet stopped posting node status.
+Addresses:	10.240.115.55,104.197.0.26
+Capacity:
+ cpu:           2
+ hugePages:     0
+ memory:        4046788Ki
+ pods:          110
+Allocatable:
+ cpu:           1500m
+ hugePages:     0
+ memory:        1479263Ki
+ pods:          110
+System Info:
+ Machine ID:                    8e025a21a4254e11b028584d9d8b12c4
+ System UUID:                   349075D1-D169-4F25-9F2A-E886850C47E3
+ Boot ID:                       5cd18b37-c5bd-4658-94e0-e436d3f110e0
+ Kernel Version:                4.4.0-31-generic
+ OS Image:                      Debian GNU/Linux 8 (jessie)
+ Operating System:              linux
+ Architecture:                  amd64
+ Container Runtime Version:     docker://1.12.5
+ Kubelet Version:               v1.6.9+a3d1dfa6f4335
+ Kube-Proxy Version:            v1.6.9+a3d1dfa6f4335
+ExternalID:                     15233045891481496305
+Non-terminated Pods:            (9 in total)
+  Namespace                     Name                                            CPU Requests    CPU Limits      Memory Requests Memory Limits
+  ---------                     ----                                            ------------    ----------      --------------- -------------
+......
+Allocated resources:
+  (Total limits may be over 100 percent, i.e., overcommitted.)
+  CPU Requests  CPU Limits      Memory Requests         Memory Limits
+  ------------  ----------      ---------------         -------------
+  900m (60%)    2200m (146%)    1009286400 (66%)        5681286400 (375%)
+Events:         <none>
+```
+
+```shell
+kubectl get node kubernetes-node-861h -o yaml
+```
+
+```yaml
+apiVersion: v1
+kind: Node
+metadata:
+  creationTimestamp: 2015-07-10T21:32:29Z
+  labels:
+    kubernetes.io/hostname: kubernetes-node-861h
+  name: kubernetes-node-861h
+  resourceVersion: "757"
+  uid: 2a69374e-274b-11e5-a234-42010af0d969
+spec:
+  externalID: "15233045891481496305"
+  podCIDR: 10.244.0.0/24
+  providerID: gce://striped-torus-760/us-central1-b/kubernetes-node-861h
+status:
+  addresses:
+  - address: 10.240.115.55
+    type: InternalIP
+  - address: 104.197.0.26
+    type: ExternalIP
+  capacity:
+    cpu: "1"
+    memory: 3800808Ki
+    pods: "100"
+  conditions:
+  - lastHeartbeatTime: 2015-07-10T21:34:32Z
+    lastTransitionTime: 2015-07-10T21:35:15Z
+    reason: Kubelet stopped posting node status.
+    status: Unknown
+    type: Ready
+  nodeInfo:
+    bootID: 4e316776-b40d-4f78-a4ea-ab0d73390897
+    containerRuntimeVersion: docker://Unknown
+    kernelVersion: 3.16.0-0.bpo.4-amd64
+    kubeProxyVersion: v0.21.1-185-gffc5a86098dc01
+    kubeletVersion: v0.21.1-185-gffc5a86098dc01
+    machineID: ""
+    osImage: Debian GNU/Linux 7 (wheezy)
+    systemUUID: ABE5F6B4-D44B-108B-C46A-24CCE16C8B6E
+```
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+Pelajari tentang alat _debugging_ tambahan, termasuk:
+
+* [Pencatatan (_logging_)](/id/docs/concepts/cluster-administration/logging/)
+* [Monitoring](/docs/tasks/debug-application-cluster/resource-usage-monitoring/)
+* [Masuk ke Container melalui `exec`](/docs/tasks/debug-application-cluster/get-shell-running-container/)
+* [Masuk ke Container melalui _proxy_](/docs/tasks/extend-kubernetes/http-proxy-access-api/)
+* [Masuk ke Container melalui _port forwarding_](/docs/tasks/access-application-cluster/port-forward-access-application-cluster/)
+* [Inspeksi Node Kubernetes dengan menggunakan crictl](/docs/tasks/debug-application-cluster/crictl/)
+
+
diff --git a/content/id/examples/application/nginx-with-request.yaml b/content/id/examples/application/nginx-with-request.yaml
new file mode 100644
index 0000000000..dd9d002a60
--- /dev/null
+++ b/content/id/examples/application/nginx-with-request.yaml
@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx
+        resources:
+          limits:
+            memory: "128Mi"
+            cpu: "500m"
+        ports:
+        - containerPort: 80

From 41b796a961be34917be914d0537b6a3ceb7a5e3a Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 16 Aug 2020 13:43:38 +0800
Subject: [PATCH 046/496] [zh] Resync kubeadm-certs task

---
 .../kubeadm/kubeadm-certs.md                  | 401 ++++++++++--------
 1 file changed, 231 insertions(+), 170 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index 664381d24b..5e3d098340 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -1,16 +1,13 @@
 ---
-reviewers:
-- sig-cluster-lifecycle
 title: 使用 kubeadm 进行证书管理
 content_type: task
+weight: 10
 ---
 <!--
----
 reviewers:
 - sig-cluster-lifecycle
 title: Certificate Management with kubeadm
 content_type: task
----
 -->
 
 <!-- overview -->
@@ -20,251 +17,319 @@ content_type: task
 <!-- 
 Client certificates generated by [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) expire after 1 year. This page explains how to manage certificate renewals with kubeadm. 
 -->
-
-由 [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) 生成的客户端证书在 1 年后到期。 本页说明如何使用 kubeadm 管理证书续订。
-
-
+由 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 生成的客户端证书在 1 年后到期。
+本页说明如何使用 kubeadm 管理证书续订。
 
 ## {{% heading "prerequisites" %}}
 
-
-<!-- 
-Be familiar with [PKI certificates and requirements in Kubernetes](/docs/setup/certificates/). 
--->
-
-熟悉 [Kubernetes 中的 PKI证书和要求](/docs/setup/certificates/)。
-
 <!--
 You should be familiar with [PKI certificates and requirements in Kubernetes](/docs/setup/best-practices/certificates/).
 -->
-您应该熟悉[Kubernetes 中的 PKI 证书和要求](/docs/setup/best-practices/certificates/)。
-
-
+你应该熟悉 [Kubernetes 中的 PKI 证书和要求](/zh/docs/setup/best-practices/certificates/)。
 
 <!-- steps -->
 
+<!--
+### Using custom certificates {#custom-certificates}
+
+By default, kubeadm generates all the certificates needed for a cluster to run.
+You can override this behavior by providing your own certificates.
+-->
+### 使用自定义的证书 {#custom-certificates}
+
+默认情况下, kubeadm 会生成运行一个集群所需的全部证书。
+你可以通过提供你自己的证书来改变这个行为策略。
+
+<!--
+To do so, you must place them in whatever directory is specified by the
+`--cert-dir` flag or `CertificatesDir` configuration file key. By default this
+is `/etc/kubernetes/pki`.
+-->
+如果要这样做, 你必须将证书文件放置在通过 `--cert-dir` 命令行参数或者配置文件里的
+`CertificatesDir` 配置项指明的目录中。默认的值是 `/etc/kubernetes/pki`。
+
+<!--
+If a given certificate and private key pair exists before running `kubeadm init`,
+kubeadm will not overwrite them. This means you can, for example, copy an existing
+CA into `/etc/kubernetes/pki/ca.crt` and `/etc/kubernetes/pki/ca.key`,
+and kubeadm will use this CA for signing the rest of the certificates.
+-->
+如果在运行 `kubeadm init` 之前存在给定的证书和私钥对，kubeadm 将不会重写它们。
+例如，这意味着您可以将现有的 CA 复制到 `/etc/kubernetes/pki/ca.crt` 和
+`/etc/kubernetes/pki/ca.key` 中，而 kubeadm 将使用此 CA 对其余证书进行签名。
+
+<!--
+#### External CA mode {#external-ca-mode}
+
+It is also possible to provide just the `ca.crt` file and not the
+`ca.key` file (this is only available for the root CA file, not other cert pairs).
+If all other certificates and kubeconfig files are in place, kubeadm recognizes
+this condition and activates the "External CA" mode. kubeadm will proceed without the
+CA key on disk.
+-->
+#### 外部 CA 模式 {#external-ca-mode}
+
+只提供了 `ca.crt` 文件但是不提供 `ca.key` 文件也是可以的 (这只对 CA 根证书可用，其它证书不可用)。
+如果所有的其它证书和 kubeconfig 文件已就绪， kubeadm 检测到满足以上条件就会激活
+"外部 CA" 模式。kubeadm 将会在没有 CA 密钥文件的情况下继续执行。
+
+<!--
+Instead, run the controller-manager standalone with `--controllers=csrsigner` and
+point to the CA certificate and key.
+-->
+否则, kubeadm 将独立运行 controller-manager，附加一个 `--controllers=csrsigner`
+的参数，并且指明 CA 证书和密钥。
+
 <!-- 
 ## Check certificate expiration 
--->
 
+You can use the `check-expiration` subcommand to check certificate expiration. 
+-->
 ## 检查证书是否过期
 
-<!-- 
-`check-expiration` can be used to check certificate expiration. 
--->
-
-`check-expiration` 能被用来检查证书是否过期
+你可以使用 `check-expiration` 子命令来检查证书是否过期
 
 ```
 kubeadm alpha certs check-expiration
 ``` 
 
-<!-- 
-The output is similar to this: 
--->
-
+<!-- The output is similar to this: -->
 输出类似于以下内容：
 
 ```
-CERTIFICATE                EXPIRES                  RESIDUAL TIME   EXTERNALLY MANAGED
-admin.conf                 May 15, 2020 13:03 UTC   364d            false
-apiserver                  May 15, 2020 13:00 UTC   364d            false
-apiserver-etcd-client      May 15, 2020 13:00 UTC   364d            false
-apiserver-kubelet-client   May 15, 2020 13:00 UTC   364d            false
-controller-manager.conf    May 15, 2020 13:03 UTC   364d            false
-etcd-healthcheck-client    May 15, 2020 13:00 UTC   364d            false
-etcd-peer                  May 15, 2020 13:00 UTC   364d            false
-etcd-server                May 15, 2020 13:00 UTC   364d            false
-front-proxy-client         May 15, 2020 13:00 UTC   364d            false
-scheduler.conf             May 15, 2020 13:03 UTC   364d            false
+CERTIFICATE                EXPIRES                  RESIDUAL TIME   CERTIFICATE AUTHORITY   EXTERNALLY MANAGED
+admin.conf                 Dec 30, 2020 23:36 UTC   364d                                    no
+apiserver                  Dec 30, 2020 23:36 UTC   364d            ca                      no
+apiserver-etcd-client      Dec 30, 2020 23:36 UTC   364d            etcd-ca                 no
+apiserver-kubelet-client   Dec 30, 2020 23:36 UTC   364d            ca                      no
+controller-manager.conf    Dec 30, 2020 23:36 UTC   364d                                    no
+etcd-healthcheck-client    Dec 30, 2020 23:36 UTC   364d            etcd-ca                 no
+etcd-peer                  Dec 30, 2020 23:36 UTC   364d            etcd-ca                 no
+etcd-server                Dec 30, 2020 23:36 UTC   364d            etcd-ca                 no
+front-proxy-client         Dec 30, 2020 23:36 UTC   364d            front-proxy-ca          no
+scheduler.conf             Dec 30, 2020 23:36 UTC   364d                                    no
+
+CERTIFICATE AUTHORITY   EXPIRES                  RESIDUAL TIME   EXTERNALLY MANAGED
+ca                      Dec 28, 2029 23:36 UTC   9y              no
+etcd-ca                 Dec 28, 2029 23:36 UTC   9y              no
+front-proxy-ca          Dec 28, 2029 23:36 UTC   9y              no
 ```
 
 <!-- 
 The command shows expiration/residual time for the client certificates in the `/etc/kubernetes/pki` folder and for the client certificate embedded in the KUBECONFIG files used by kubeadm (`admin.conf`, `controller-manager.conf` and `scheduler.conf`). 
 -->
-
-该命令显示 `/etc/kubernetes/pki` 文件夹中的客户端证书以及 kubeadm 使用的 KUBECONFIG 文件中嵌入的客户端证书的到期时间/剩余时间。
+该命令显示 `/etc/kubernetes/pki` 文件夹中的客户端证书以及 kubeadm 使用的 KUBECONFIG
+文件中嵌入的客户端证书的到期时间/剩余时间。
 
 <!-- 
 Additionally, kubeadm informs the user if the certificate is externally managed; in this case, the user should take care of managing certificate renewal manually/using other tools. 
 -->
+另外， kubeadm 会通知用户证书是否由外部管理； 
+在这种情况下，用户应该小心的手动/使用其他工具来管理证书更新。
 
-另外， kubeadm 会通知用户证书是否由外部管理； 在这种情况下，用户应该小心的手动/使用其他工具来管理证书更新。
-
-{{< warning >}}
 <!--
 `kubeadm` cannot manage certificates signed by an external CA.
- -->`kubeadm` 不能管理由外部 CA 签名的证书
+ -->`
+{{< warning >}}
+kubeadm` 不能管理由外部 CA 签名的证书
 {{< /warning >}}
 
-{{< note >}}
 <!-- 
 `kubelet.conf` is not included in the list above because kubeadm configures kubelet for automatic certificate renewal.
--->上面的列表中没有包含 `kubelet.conf` 因为 kubeadm 将 kubelet 配置为自动更新证书。
-
+-->
+{{< note >}}
+上面的列表中没有包含 `kubelet.conf` 因为 kubeadm 将 kubelet 配置为自动更新证书。
 {{< /note >}}
 
+<!--
+On nodes created with `kubeadm init`, prior to kubeadm version 1.17, there is a
+[bug](https://github.com/kubernetes/kubeadm/issues/1753) where you manually have to modify the contents of `kubelet.conf`. After `kubeadm init` finishes, you should update `kubelet.conf` to point to the
+rotated kubelet client certificates, by replacing `client-certificate-data` and `client-key-data` with:
+-->
+{{< warning >}}
+在通过 `kubeadm init` 创建的节点上，在 kubeadm 1.17 版本之前有一个
+[缺陷](https://github.com/kubernetes/kubeadm/issues/1753)，该缺陷
+使得你必须手动修改 `kubelet.conf` 文件的内容。
+`kubeadm init` 操作结束之后，你必须更新 `kubelet.conf` 文件
+将 `client-certificate-data` 和 `client-key-data` 改为如下所示的内容
+以便使用轮换后的 kubelet 客户端证书：
+
+```yaml
+client-certificate: /var/lib/kubelet/pki/kubelet-client-current.pem
+client-key: /var/lib/kubelet/pki/kubelet-client-current.pem
+```
+{{< /warning >}}
+
 <!-- 
 ## Automatic certificate renewal
- -->
-## 自动更新证书
 
-<!-- 
 `kubeadm` renews all the certificates during control plane [upgrade](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-15/). 
 -->
-`kubeadm` 会在控制面板[升级](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-15/)的时候更新所有证书
+## 自动更新证书
+
+`kubeadm` 会在控制面
+[升级](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
+的时候更新所有证书。
 
 <!-- 
 This feature is designed for addressing the simplest use cases; 
 if you don't have specific requirements on certificate renewal and perform Kubernetes version upgrades regularly (less than 1 year in between each upgrade), kubeadm will take care of keeping your cluster up to date and reasonably secure. 
 -->
-这个功能旨在解决最简单的用例；如果您对此类证书的更新没有特殊要求，并且定期执行 Kubernetes 版本升级（每次升级之间的间隔时间少于 1 年），则 kubeadm 将确保您的集群保持最新状态并保持合理的安全性。
+这个功能旨在解决最简单的用例；如果你对此类证书的更新没有特殊要求，
+并且定期执行 Kubernetes 版本升级（每次升级之间的间隔时间少于 1 年），
+则 kubeadm 将确保你的集群保持最新状态并保持合理的安全性。
 
-{{< note >}}
 <!-- 
 It is a best practice to upgrade your cluster frequently in order to stay secure.
- -->最佳的做法是经常升级集群以确保安全。
+-->
+{{< note >}}
+最佳的做法是经常升级集群以确保安全。
 {{< /note >}}
 
 <!-- 
 If you have more complex requirements for certificate renewal, you can opt out from the default behavior by passing `--certificate-renewal=false` to `kubeadm upgrade apply` or to `kubeadm upgrade node`. 
 -->
+如果你对证书更新有更复杂的需求，则可通过将 `--certificate-renewal=false` 传递给
+`kubeadm upgrade apply` 或者 `kubeadm upgrade node`，从而选择不采用默认行为。
 
-如果您对证书更新有更复杂的需求，则可通过将 `--certificate-renewal=false` 传递给 `kubeadm upgrade apply` 或者 `kubeadm upgrade node` ，从而选择不采用默认行为。
+<!--
+Prior to kubeadm version 1.17 there is a [bug](https://github.com/kubernetes/kubeadm/issues/1818)
+where the default value for `--certificate-renewal` is `false` for the `kubeadm upgrade node`
+command. In that case, you should explicitly set `--certificate-renewal=true`.
+-->
+{{< warning >}}
+kubeadm 在 1.17 版本之前有一个[缺陷](https://github.com/kubernetes/kubeadm/issues/1818)，
+该缺陷导致 `kubeadm update node` 执行时 `--certificate-renewal` 的默认值被设置为 `false`。
+在这种情况下，你需要显式地设置 `--certificate-renewal=true`。
+{{< /warning >}}
 
 <!-- 
 ## Manual certificate renewal 
+
+You can renew your certificates manually at any time with the `kubeadm alpha certs renew` command. 
 -->
 ## 手动更新证书
 
-<!-- 
-You can renew your certificates manually at any time with the `kubeadm alpha certs renew` command. 
--->
-您能随时通过 `kubeadm alpha certs renew` 命令手动更新您的证书。
+你能随时通过 `kubeadm alpha certs renew` 命令手动更新你的证书。
 
 <!-- 
 This command performs the renewal using CA (or front-proxy-CA) certificate and key stored in `/etc/kubernetes/pki`. 
 -->
+此命令用 CA （或者 front-proxy-CA ）证书和存储在 `/etc/kubernetes/pki` 中的密钥执行更新。
 
-这个命令用 CA （或者 front-proxy-CA ）证书和存储在 `/etc/kubernetes/pki` 中的密钥执行更新。
-
-{{< warning >}}
 <!-- 
 If you are running an HA cluster, this command needs to be executed on all the control-plane nodes. 
--->如果您运行了一个 HA 集群，这个命令需要在所有控制面板节点上执行。
+-->
+{{< warning >}}
+如果你运行了一个 HA 集群，这个命令需要在所有控制面板节点上执行。
 {{< /warning >}}
 
-{{< note >}}
 <!-- `alpha certs renew` uses the existing certificates as the authoritative source for attributes (Common Name, Organization, SAN, etc.) instead of the kubeadm-config ConfigMap. It is strongly recommended to keep them both in sync. -->
-`alpha certs renew` 使用现有的证书作为属性 (Common Name、Organization、SAN 等) 的权威来源，而不是 kubeadm-config ConfigMap 。强烈建议使它们保持同步。
+{{< note >}}
+`alpha certs renew` 使用现有的证书作为属性 (Common Name、Organization、SAN 等) 的权威来源，
+而不是 kubeadm-config ConfigMap 。强烈建议使它们保持同步。
 {{< /note >}}
 
-<!-- 
-`kubeadm alpha certs renew` provides the following options:
- -->
-`kubeadm alpha certs renew` 提供下列选项 
-
 <!--
 The Kubernetes certificates normally reach their expiration date after one year.
 -->
 Kubernetes 证书通常在一年后到期。
 
 <!-- 
+`kubeadm alpha certs renew` provides the following options:
+
 - `--csr-only` can be used to renew certificats with an external CA by generating certificate signing requests (without actually renewing certificates in place); see next paragraph for more information. 
--->
-
-- `--csr-only` 可用于经过一个外部 CA 生成的证书签名请求来更新证书（无需实际替换更新证书）；更多信息请参见下一段。
-
-<!-- 
 - It's also possible to renew a single certificate instead of all.
  -->
-- 也可以更新单个证书而不是全部证书。
+`kubeadm alpha certs renew` 提供下列选项 
+
+- `--csr-only` 可用于经过一个外部 CA 生成的证书签名请求来更新证书（无需实际替换更新证书）；
+  更多信息请参见下节。
+- 可以更新单个证书而不是全部证书。
 
 <!--
 ## Renew certificates with the Kubernetes certificates API
+
+This section provide more details about how to execute manual certificate renewal using the Kubernetes certificates API.
 -->
 ## 用 Kubernetes 证书 API 更新证书
 
-<!-- 
-This section provide more details about how to execute manual certificate renewal using the Kubernetes certificates API.
--->
-
 本节提供有关如何使用 Kubernetes 证书 API 执行手动证书更新的更多详细信息。
 
-{{< caution >}}
 <!-- 
 These are advanced topics for users who need to integrate their organization's certificate infrastructure into a kubeadm-built cluster. If the default kubeadm configuration satisfies your needs, you should let kubeadm manage certificates instead. 
 -->
-这些是针对需要将其组织的证书基础结构集成到 kubeadm 构建的集群中的用户的高级主题。如果默认的 kubeadm 配置满足了您的需求，则应让 kubeadm 管理证书。
+{{< caution >}}
+这些是针对需要将其组织的证书基础结构集成到 kubeadm 构建的集群中的用户的高级主题。
+如果默认的 kubeadm 配置满足了你的需求，则应让 kubeadm 管理证书。
 {{< /caution >}}
 
 <!--
 ### Set up a signer
--->
-### 设置一个签名者
 
-<!--
 The Kubernetes Certificate Authority does not work out of the box.
 You can configure an external signer such as [cert-manager][cert-manager-issuer], or you can use the build-in signer.
 The built-in signer is part of [`kube-controller-manager`][kcm].
 To activate the build-in signer, you pass the `--cluster-signing-cert-file` and `--cluster-signing-key-file` arguments.
 -->
+### 设置一个签名者（Signer）
+
 Kubernetes 证书颁发机构不是开箱即用。
-您可以配置外部签名者，例如 [cert-manager][cert-manager-issuer] ，也可以使用内置签名者。
-内置签名者是 [`kube-controller-manager`][kcm] 的一部分。
+你可以配置外部签名者，例如
+[cert-manager](https://docs.cert-manager.io/en/latest/tasks/issuers/setup-ca.html)，
+也可以使用内置签名者。
+内置签名者是
+[`kube-controller-manager`](/zh/docs/reference/command-line-tools-reference/kube-controller-manager/)
+的一部分。
 要激活内置签名者，请传递`--cluster-signing-cert-file` 和 `--cluster-signing-key-file`参数。
 
 <!--
 The built-in signer is part of [`kube-controller-manager`][kcm]. 
+To activate the build-in signer, you must pass the `--cluster-signing-cert-file` and `--cluster-signing-key-file` flags.
 -->
 这个内置签名者是 [`kube-controller-manager`][kcm] 的一部分。
-
-<!-- To activate the build-in signer, you must pass the `--cluster-signing-cert-file` and `--cluster-signing-key-file` flags. -->
 要激活内置签名者，必须传递 `--cluster-signing-cert-file` 和 `--cluster-signing-key-file` 参数。
 
 <!-- 
 If you're creating a new cluster, you can use a kubeadm [configuration file][config]: 
 -->
-如果您正在正在创建一个新的集群，您可以使用 kubeadm 的 [配置文件](config) 
+如果你正在正在创建一个新的集群，你可以使用 kubeadm 的
+[配置文件](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)。
 
-  ```yaml
-  apiVersion: kubeadm.k8s.io/v1beta2
-  kind: ClusterConfiguration
-  controllerManager:
-    extraArgs:
-      cluster-signing-cert-file: /etc/kubernetes/pki/ca.crt
-      cluster-signing-key-file: /etc/kubernetes/pki/ca.key
-  ```
-
-[cert-manager-issuer]: https://cert-manager.readthedocs.io/en/latest/tutorials/ca/creating-ca-issuer.html
-[kcm]: /docs/reference/command-line-tools-reference/kube-controller-manager/
-[config]: https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2
+```yaml
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: ClusterConfiguration
+controllerManager:
+  extraArgs:
+    cluster-signing-cert-file: /etc/kubernetes/pki/ca.crt
+    cluster-signing-key-file: /etc/kubernetes/pki/ca.key
+```
 
 <!-- 
 ### Create certificate signing requests (CSR)
+
+You can create the certificate signing requests for the Kubernetes certificates API with `kubeadm alpha certs renew --use-api`. 
 -->
 ### 创建证书签名请求 (CSR)
 
-<!-- 
-You can create the certificate signing requests for the Kubernetes certificates API with `kubeadm alpha certs renew --use-api`. 
--->
-您能用  `kubeadm alpha certs renew --use-api` 为 Kubernetes 证书 API 创建一个证书签名请求。
+你可以用 `kubeadm alpha certs renew --use-api` 为 Kubernetes 证书 API 创建一个证书签名请求。
 
 <!--
 If you set up an external signer such as [cert-manager][cert-manager], certificate signing requests (CSRs) are automatically approved.
 Otherwise, you must manually approve certificates with the [`kubectl certificate`][certs] command.
 The following kubeadm command outputs the name of the certificate to approve, then blocks and waits for approval to occur:
 -->
-如果您设置例如 [cert-manager][cert-manager] 等外部签名者，则会自动批准证书签名请求（CSRs）。
-否者，您必须使用 [`kubectl certificate`][certs] 命令手动批准证书。
-以下 kubeadm 命令输出要批准的证书名称，然后缓慢等待批准发生：
+如果你设置例如 [cert-manager](https://github.com/jetstack/cert-manager)
+等外部签名者，证书签名请求（CSRs）会被自动批准。
+否则，你必须使用 [`kubectl certificate`](/zh/docs/setup/best-practices/certificates/) 
+命令手动批准证书。
+以下 kubeadm 命令输出要批准的证书名称，然后阻塞等待批准发生：
 
 ```shell
 sudo kubeadm alpha certs renew apiserver --use-api &
 ```
-<!-- 
-The output is similar to this:
- -->
+
+<!-- The output is similar to this: -->
 输出类似于以下内容：
 ```
 [1] 2890
@@ -273,41 +338,42 @@ The output is similar to this:
 
 <!-- 
 ### Approve certificate signing requests (CSR) 
+
+If you set up an external signer, certificate signing requests (CSRs) are automatically approved. 
+
+Otherwise, you must manually approve certificates with the [`kubectl certificate`][certs] command. e.g.
 -->
 ### 批准证书签名请求 (CSR)
 
-<!-- 
-If you set up an external signer, certificate signing requests (CSRs) are automatically approved. 
--->
-如果您设置了一个外部签名者， 证书签名请求 (CSRs) 会自动被批准。
+如果你设置了一个外部签名者， 证书签名请求 (CSRs) 会自动被批准。
 
-<!-- Otherwise, you must manually approve certificates with the [`kubectl certificate`][certs] command. e.g.  -->
-否则，您必须用 [`kubectl certificate`][certs] 命令手动批准证书，例如
+否则，你必须用 [`kubectl certificate`](/zh/docs/setup/best-practices/certificates/)
+命令手动批准证书，例如：
 
 ```shell
 kubectl certificate approve kubeadm-cert-kube-apiserver-ld526
 ```
+
 <!-- 
-The output is similar to this: 
--->
+The output is similar to this: -->
 输出类似于以下内容：
-```shell
+
+```
 certificatesigningrequest.certificates.k8s.io/kubeadm-cert-kube-apiserver-ld526 approved
 ```
 
 <!-- 
 You can view a list of pending certificates with `kubectl get csr`. 
 -->
-您可以使用 `kubectl get csr` 查看待处理证书列表。
+你可以使用 `kubectl get csr` 查看待处理证书列表。
 
 <!--
 ## Renew certificates with external CA
+
+This section provide more details about how to execute manual certificate renewal using an external CA.
 -->
 ## 通过外部 CA 更新证书
 
-<!-- 
-This section provide more details about how to execute manual certificate renewal using an external CA.
--->
 本节提供有关如何使用外部 CA 执行手动更新证书的更多详细信息。
 
 <!--
@@ -321,70 +387,65 @@ CSR 表示向 CA 请求客户的签名证书。
 
 <!-- 
 ### Create certificate signing requests (CSR) 
+
+You can create certificate signing requests with `kubeadm alpha certs renew --csr-only`.
+
+Both the CSR and the accompanying private key are given in the output.
+You can pass in a directory with `--csr-dir` to output the CSRs to the specified location.
+If `--csr-dir` is not specified, the default certificate directory (`/etc/kubernetes/pki`) is used.
 -->
 ### 创建证书签名请求 (CSR)
 
-<!--
-You can pass in a directory with `--csr-dir` to output the CSRs to the specified location.
-If `--csr-dir` is not specified, the default certificate directory (`/etc/kubernetes/pki`) is used.
-Both the CSR and the accompanying private key are given in the output. After a certificate is signed, the certificate and the private key must be copied to the PKI directory (by default `/etc/kubernetes/pki`).
--->
-您可以传入一个带有 `--csr-dir` 的目录，将 CRS 输出到指定位置。
+你可以通过 `kubeadm alpha certs renew --csr-only` 命令创建证书签名请求。
+
+CSR 和随附的私钥都在输出中给出。
+你可以传入一个带有 `--csr-dir` 的目录，将 CRS 输出到指定位置。
 如果未指定 `--csr-dir` ，则使用默认证书目录( `/etc/kubernetes/pki` )。
-CSR 和随附的私钥都在输出中给出。签署证书后，必须将证书和私钥复制到 PKI 目录（默认情况下为 `/etc/kubernetes/pki`）。
 
-<!-- 
-A CSR represents a request to a CA for a signed certificate for a client. 
--->
-CSR 代表对 CA 的请求，要求获得客户端的签名证书。
-
-<!-- 
-You can create certificate signing requests with `kubeadm alpha certs renew --csr-only`. 
--->
-您能用 `kubeadm alpha certs renew --csr-only` 创建一个证书签名请求。
-
-<!-- 
-Both the CSR and the accompanying private key are given in the output; you can pass in a directory with `--csr-dir` to output the CSRs to the specified location. 
--->
-输出中给出了 CSR 和随附的私钥；您可以输入目录名和 `--csr-dir` ，以将 CSR 输出到指定位置。
-
-<!-- 
+<!--
 Certificates can be renewed with `kubeadm alpha certs renew --csr-only`.
 As with `kubeadm init`, an output directory can be specified with the `--csr-dir` flag.
-To use the new certificates, copy the signed certificate and private key into the PKI directory (by default `/etc/kubernetes/pki`) 
 -->
-证书能用 `kubeadm alpha certs renew --csr-only` 更新。
+证书可以通过 `kubeadm alpha certs renew --csr-only` 来续订。
+和 `kubeadm init` 一样，可以使用 `--csr-dir` 标志指定一个输出目录。
 
-在 `kubeadm init` ,通过 `--csr-dir` 能指定输出文件夹。
+CSR 签署证书后，必须将证书和私钥复制到 PKI 目录（默认情况下为 `/etc/kubernetes/pki`）。
 
-要使用新证书，请将签名的证书和私钥复制到 PKI 目录（默认情况下为 `/etc/kubernetes/pki` ）
-
-<!-- 
-A CSR contains a certificate's name, domain(s), and IPs, but it does not specify usages. 
+<!--
+A CSR contains a certificate's name, domains, and IPs, but it does not specify usages.
+It is the responsibility of the CA to specify [the correct cert usages](/docs/setup/best-practices/certificates/#all-certificates)
+when issuing a certificate.
 -->
-一个 CSR 包含一个证书的名字，域和 IP， 但是未指定用法
-
-<!-- 
-It is the responsibility of the CA to specify [the correct cert usages][cert-table] when issuing a certificate. 
--->
-颁发证书时， CA 有责任指定[正确的证书用法][cert-table] 。
+CSR 中包含一个证书的名字，域和 IP，但是未指定用法。
+颁发证书时，CA 有责任指定[正确的证书用法](/zh/docs/setup/best-practices/certificates/#all-certificates)
 
 <!-- 
 * In `openssl` this is done with the [`openssl ca` command][openssl-ca].
 * In `cfssl` you specify [usages in the config file][cfssl-usages] 
 -->
-* 在 `openssl` 中，这是通过 [`openssl ca` 命令][openssl-ca] 完成的。
-* 在 `cfssl` 中，这是通过 [在配置文件中指定用法][cfssl-usages] 来完成的。
+* 在 `openssl` 中，这是通过
+  [`openssl ca` 命令](https://superuser.com/questions/738612/openssl-ca-keyusage-extension)
+  来完成的。
+* 在 `cfssl` 中，这是通过
+  [在配置文件中指定用法](https://github.com/cloudflare/cfssl/blob/master/doc/cmd/cfssl.txt#L170)
+  来完成的。
 
 <!-- 
 After a certificate is signed using your preferred method, the certificate and the private key must be copied to the PKI directory (by default `/etc/kubernetes/pki`). 
 -->
-使用首选方法对证书签名后，必须将证书和私钥复制到 PKI 目录（默认为  `/etc/kubernetes/pki` ）。
+使用首选方法对证书签名后，必须将证书和私钥复制到 PKI 目录（默认为 `/etc/kubernetes/pki` ）。
 
+<!--
+## Certificate authority (CA) rotation {#certificate-authority-rotation}
 
-[openssl-ca]: https://superuser.com/questions/738612/openssl-ca-keyusage-extension
-[cfssl-usages]: https://github.com/cloudflare/cfssl/blob/master/doc/cmd/cfssl.txt#L170
-[certs]: /docs/setup/best-practices/certificates/
-[cert-cas]: /docs/setup/best-practices/certificates/#single-root-ca
-[cert-table]: /docs/setup/best-practices/certificates/#all-certificates
+Kubeadm does not support rotation or replacement of CA certificates out of the box.
+
+For more information about manual rotation or replacement of CA, see [manual rotation of CA certificates](/docs/tasks/tls/manual-rotation-of-ca-certificates/).
+-->
+## 证书机构（CA）轮换     {#certificate-authority-rotation}
+
+kubeadm 并不直接支持对 CA 证书的轮换或者替换。
+
+关于手动轮换或者置换 CA 的更多信息，可参阅
+[手动轮换 CA 证书](/zh/docs/tasks/tls/manual-rotation-of-ca-certificates/)。
 

From 32e0ff51d6a1506389584e811b501d514f4f93e0 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 18 Aug 2020 06:50:14 +0900
Subject: [PATCH 047/496] Copy contribute/style/content-guide.md from en/
 directory.

---
 .../ja/docs/contribute/style/content-guide.md | 77 +++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 content/ja/docs/contribute/style/content-guide.md

diff --git a/content/ja/docs/contribute/style/content-guide.md b/content/ja/docs/contribute/style/content-guide.md
new file mode 100644
index 0000000000..0de4a381a3
--- /dev/null
+++ b/content/ja/docs/contribute/style/content-guide.md
@@ -0,0 +1,77 @@
+---
+title: Documentation Content Guide
+linktitle: Content guide
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+This page contains guidelines for Kubernetes documentation.
+
+If you have questions about what's allowed, join the #sig-docs channel in
+[Kubernetes Slack](https://slack.k8s.io/) and ask!
+
+You can register for Kubernetes Slack at https://slack.k8s.io/.
+
+For information on creating new content for the Kubernetes
+docs, follow the [style guide](/docs/contribute/style/style-guide).
+
+
+
+<!-- body -->
+
+## Overview
+
+Source for the Kubernetes website, including the docs, resides in the
+[kubernetes/website](https://github.com/kubernetes/website) repository.
+
+Located in the `kubernetes/website/content/<language_code>/docs` folder, the
+majority of Kubernetes documentation is specific to the [Kubernetes
+project](https://github.com/kubernetes/kubernetes).
+
+## What's allowed
+
+Kubernetes docs allow content for third-party projects only when:
+
+- Content documents software in the Kubernetes project
+- Content documents software that's out of project but necessary for Kubernetes to function
+- Content is canonical on kubernetes.io, or links to canonical content elsewhere
+
+### Third party content
+
+Kubernetes documentation includes applied examples of projects in the Kubernetes project&mdash;projects that live in the [kubernetes](https://github.com/kubernetes) and
+[kubernetes-sigs](https://github.com/kubernetes-sigs) GitHub organizations.
+
+Links to active content in the Kubernetes project are always allowed.
+
+Kubernetes requires some third party content to function. Examples include container runtimes (containerd, CRI-O, Docker),
+[networking policy](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/) (CNI plugins), [Ingress controllers](/docs/concepts/services-networking/ingress-controllers/), and [logging](/docs/concepts/cluster-administration/logging/).
+
+Docs can link to third-party open source software (OSS) outside the Kubernetes project only if it's necessary for Kubernetes to function.
+
+### Dual sourced content
+
+Wherever possible, Kubernetes docs link to canonical sources instead of hosting
+dual-sourced content.
+
+Dual-sourced content requires double the effort (or more!) to maintain
+and grows stale more quickly.
+
+{{< note >}}
+
+If you're a maintainer for a Kubernetes project and need help hosting your own docs,
+ask for help in [#sig-docs on Kubernetes Slack](https://kubernetes.slack.com/messages/C1J0BPD2M/).
+
+{{< /note >}}
+
+### More information
+
+If you have questions about allowed content, join the [Kubernetes Slack](https://slack.k8s.io/) #sig-docs channel and ask!
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* Read the [Style guide](/docs/contribute/style/style-guide).

From 0e7433b99cbb434591e4b6c93dd1776cb8765e07 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 18 Aug 2020 06:50:36 +0900
Subject: [PATCH 048/496] Translate contribute/style/content-guide.md into
 Japanese.

---
 .../ja/docs/contribute/style/content-guide.md | 67 +++++++------------
 1 file changed, 26 insertions(+), 41 deletions(-)

diff --git a/content/ja/docs/contribute/style/content-guide.md b/content/ja/docs/contribute/style/content-guide.md
index 0de4a381a3..d1ca24effd 100644
--- a/content/ja/docs/contribute/style/content-guide.md
+++ b/content/ja/docs/contribute/style/content-guide.md
@@ -1,77 +1,62 @@
 ---
-title: Documentation Content Guide
-linktitle: Content guide
+title: ドキュメントコンテンツガイド
+linktitle: コンテンツガイド
 content_type: concept
 weight: 10
 ---
 
 <!-- overview -->
 
-This page contains guidelines for Kubernetes documentation.
+このページでは、Kubernetesのドキュメント上のコンテンツのガイドラインを説明します。
 
-If you have questions about what's allowed, join the #sig-docs channel in
-[Kubernetes Slack](https://slack.k8s.io/) and ask!
-
-You can register for Kubernetes Slack at https://slack.k8s.io/.
-
-For information on creating new content for the Kubernetes
-docs, follow the [style guide](/docs/contribute/style/style-guide).
+許可されるコンテンツに関して疑問がある場合は、[Kubernetes Slack](https://slack.k8s.io/)の#sig-docsチャンネルに参加して質問してください！
 
+Kubernetes Slackには、<https://slack.k8s.io/> から参加登録ができます。
 
+Kubernetesドキュメントの新しいコンテンツの作成に関する情報については、[スタイルガイド](/docs/contribute/style/style-guide)に従ってください。
 
 <!-- body -->
 
-## Overview
+## 概要
 
-Source for the Kubernetes website, including the docs, resides in the
-[kubernetes/website](https://github.com/kubernetes/website) repository.
+ドキュメントを含むKubernetesのウェブサイトのソースは、[kubernetes/website](https://github.com/kubernetes/website)リポジトリに置かれています。
 
-Located in the `kubernetes/website/content/<language_code>/docs` folder, the
-majority of Kubernetes documentation is specific to the [Kubernetes
-project](https://github.com/kubernetes/kubernetes).
+Kubernetesの主要なドキュメントは`kubernetes/website/content/<language_code>/docs`フォルダに置かれており、これらは[Kubernetesプロジェクト](https://github.com/kubernetes/kubernetes)を対象としています。
 
-## What's allowed
+## 許可されるコンテンツ
 
-Kubernetes docs allow content for third-party projects only when:
+Kubernetesのドキュメントにサードパーティーのコンテンツを掲載することが許されるのは、次の場合のみです。
 
-- Content documents software in the Kubernetes project
-- Content documents software that's out of project but necessary for Kubernetes to function
-- Content is canonical on kubernetes.io, or links to canonical content elsewhere
+- コンテンツがKubernetesプロジェクト内のソフトウェアのドキュメントとなる場合
+- コンテンツがプロジェクト外のソフトウェアのドキュメントとなるが、Kubernetesを機能させるために必要である場合
+-  コンテンツがkubernetes.ioの正規のコンテンツであるか、他の場所の正規のコンテンツへのリンクである場合
 
-### Third party content
+### サードパーティーのコンテンツ
 
-Kubernetes documentation includes applied examples of projects in the Kubernetes project&mdash;projects that live in the [kubernetes](https://github.com/kubernetes) and
-[kubernetes-sigs](https://github.com/kubernetes-sigs) GitHub organizations.
+Kubernetesのドキュメントには、Kubernetesプロジェクト（[kubernetes](https://github.com/kubernetes)および[kubernetes-sigs](https://github.com/kubernetes-sigs) GitHub organizationsに存在するプロジェクト）の適用例が含まれています。
 
-Links to active content in the Kubernetes project are always allowed.
+Kubernetesプロジェクト内のアクティブなコンテンツへのリンクは常に許可されます。
 
-Kubernetes requires some third party content to function. Examples include container runtimes (containerd, CRI-O, Docker),
-[networking policy](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/) (CNI plugins), [Ingress controllers](/docs/concepts/services-networking/ingress-controllers/), and [logging](/docs/concepts/cluster-administration/logging/).
+Kubernetesを機能させるためには、一部サードパーティーのコンテンツが必要です。たとえば、コンテナランタイム(containerd、CRI-O、Docker)、[ネットワークポリシー](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)(CNI plugin)、[Ingressコントローラー](/ja/docs/concepts/services-networking/ingress-controllers/)、[ロギング](/docs/concepts/cluster-administration/logging/)などです。
 
-Docs can link to third-party open source software (OSS) outside the Kubernetes project only if it's necessary for Kubernetes to function.
+ドキュメント内で、Kubernetesプロジェクト外のサードパーティーのオープンソースソフトウェア(OSS)にリンクすることができるのは、Kubernetesを機能させるために必要な場合のみです。
 
-### Dual sourced content
+### 情報源が重複するコンテンツ
 
-Wherever possible, Kubernetes docs link to canonical sources instead of hosting
-dual-sourced content.
+可能な限り、Kubernetesのドキュメントは正規の情報源にリンクするようにし、情報源が重複してしまうようなホスティングは行いません。
 
-Dual-sourced content requires double the effort (or more!) to maintain
-and grows stale more quickly.
+情報源が重複したコンテンツは、メンテナンスするために2倍の労力(あるいはそれ以上！)が必要になり、より早く情報が古くなってしまいます。
 
 {{< note >}}
 
-If you're a maintainer for a Kubernetes project and need help hosting your own docs,
-ask for help in [#sig-docs on Kubernetes Slack](https://kubernetes.slack.com/messages/C1J0BPD2M/).
+あなたがKubernetesのプロジェクトのメンテナーであり、ドキュメントのホスティングに関して手助けが必要なときは、[Kubernetes Slackの#sig-docs](https://kubernetes.slack.com/messages/C1J0BPD2M/)で教えてください。
 
 {{< /note >}}
 
-### More information
-
-If you have questions about allowed content, join the [Kubernetes Slack](https://slack.k8s.io/) #sig-docs channel and ask!
-
+### その他の情報
 
+許可されるコンテンツに関して疑問がある場合は、[Kubernetes Slack](https://slack.k8s.io/)の#sig-docsチャンネルに参加して質問してください！
 
 ## {{% heading "whatsnext" %}}
 
-
-* Read the [Style guide](/docs/contribute/style/style-guide).
+* [スタイルガイド](/docs/contribute/style/style-guide)を読む

From 3085bbde0210af02b5d5cde8064c3b75ceddd542 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 18 Aug 2020 08:10:47 +0900
Subject: [PATCH 049/496] Copy contribute/style/content-organization.md from
 en/ directory.

---
 .../contribute/style/content-organization.md  | 138 ++++++++++++++++++
 1 file changed, 138 insertions(+)
 create mode 100644 content/ja/docs/contribute/style/content-organization.md

diff --git a/content/ja/docs/contribute/style/content-organization.md b/content/ja/docs/contribute/style/content-organization.md
new file mode 100644
index 0000000000..249bebf0fb
--- /dev/null
+++ b/content/ja/docs/contribute/style/content-organization.md
@@ -0,0 +1,138 @@
+---
+title: Content organization
+content_type: concept
+weight: 40
+---
+
+
+<!-- overview -->
+
+This site uses Hugo. In Hugo, [content organization](https://gohugo.io/content-management/organization/) is a core concept.
+
+
+
+<!-- body -->
+
+{{% note %}}
+**Hugo Tip:** Start Hugo with `hugo server --navigateToChanged` for content edit-sessions.
+{{% /note %}}
+
+## Page Lists
+
+### Page Order
+
+The documentation side menu, the documentation page browser etc. are listed using Hugo's default sort order, which sorts by weight (from 1), date (newest first), and finally by the link title.
+
+Given that, if you want to move a page or a section up, set a weight in the page's front matter:
+
+```yaml
+title: My Page
+weight: 10
+```
+
+
+{{% note %}}
+For page weights, it can be smart not to use 1, 2, 3 ..., but some other interval, say 10, 20, 30... This allows you to insert pages where you want later.
+{{% /note %}}
+
+
+### Documentation Main Menu
+
+The `Documentation` main menu is built from the sections below `docs/` with the `main_menu` flag set in front matter of the `_index.md` section content file:
+
+```yaml
+main_menu: true
+```
+
+
+Note that the link title is fetched from the page's `linkTitle`, so if you want it to be something different than the title, change it in the content file:
+
+
+```yaml
+main_menu: true
+title: Page Title
+linkTitle: Title used in links
+```
+
+
+{{% note %}}
+The above needs to be done per language. If you don't see your section in the menu, it is probably because it is not identified as a section by Hugo. Create a `_index.md` content file in the section folder.
+{{% /note %}}
+
+### Documentation Side Menu
+
+The documentation side-bar menu is built from the _current section tree_ starting below `docs/`.
+
+It will show all sections and their pages.
+
+If you don't want to list a section or page, set the `toc_hide` flag to `true` in front matter:
+
+```yaml
+toc_hide: true
+```
+
+When you navigate to a section that has content, the specific section or page (e.g. `_index.md`) is shown. Else, the first page inside that section is shown.
+
+### Documentation Browser
+
+The page browser on the documentation home page is built using all the sections and pages that are directly below the `docs section`.
+
+If you don't want to list a section or page, set the `toc_hide` flag to `true` in front matter:
+
+```yaml
+toc_hide: true
+```
+
+### The Main Menu
+
+The site links in the top-right menu -- and also in the footer -- are built by page-lookups. This is to make sure that the page actually exists. So, if the `case-studies` section does not exist in a site (language), it will not be linked to.
+
+
+## Page Bundles
+
+In addition to standalone content pages (Markdown files), Hugo supports [Page Bundles](https://gohugo.io/content-management/page-bundles/).
+
+One example is [Custom Hugo Shortcodes](/docs/contribute/style/hugo-shortcodes/). It is considered a `leaf bundle`. Everything below the directory, including the `index.md`, will be part of the bundle. This also includes page-relative links, images that can be processed etc.:
+
+```bash
+en/docs/home/contribute/includes
+├── example1.md
+├── example2.md
+├── index.md
+└── podtemplate.json
+```
+
+Another widely used example is the `includes` bundle. It sets `headless: true` in front matter, which means that it does not get its own URL. It is only used in other pages.
+
+```bash
+en/includes
+├── default-storage-class-prereqs.md
+├── index.md
+├── partner-script.js
+├── partner-style.css
+├── task-tutorial-prereqs.md
+├── user-guide-content-moved.md
+└── user-guide-migration-notice.md
+```
+
+Some important notes to the files in the bundles:
+
+* For translated bundles, any missing non-content files will be inherited from languages above. This avoids duplication.
+* All the files in a bundle are what Hugo calls `Resources` and you can provide metadata per language, such as parameters and title, even if it does not supports front matter (YAML files etc.). See [Page Resources Metadata](https://gohugo.io/content-management/page-resources/#page-resources-metadata).
+* The value you get from `.RelPermalink` of a `Resource` is page-relative. See [Permalinks](https://gohugo.io/content-management/urls/#permalinks).
+
+
+## Styles
+
+The [SASS](https://sass-lang.com/) source of the stylesheets for this site is stored in `assets/sass` and is automatically built by Hugo.
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* Learn about [custom Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/)
+* Learn about the [Style guide](/docs/contribute/style/style-guide)
+* Learn about the [Content guide](/docs/contribute/style/content-guide)
+
+

From 385c9ab606ea3728ddf8f42901095979733c6a90 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 18 Aug 2020 08:10:04 +0900
Subject: [PATCH 050/496] Translate contribute/style/content-organization into
 Japanese.

---
 .../contribute/style/content-organization.md  | 89 ++++++++-----------
 1 file changed, 37 insertions(+), 52 deletions(-)

diff --git a/content/ja/docs/contribute/style/content-organization.md b/content/ja/docs/contribute/style/content-organization.md
index 249bebf0fb..36f141acfd 100644
--- a/content/ja/docs/contribute/style/content-organization.md
+++ b/content/ja/docs/contribute/style/content-organization.md
@@ -1,98 +1,89 @@
 ---
-title: Content organization
+title: コンテンツの構成
 content_type: concept
 weight: 40
 ---
 
-
 <!-- overview -->
 
-This site uses Hugo. In Hugo, [content organization](https://gohugo.io/content-management/organization/) is a core concept.
-
-
+このサイトではHugoを使用しています。Hugoでは、[コンテンツの構成](https://gohugo.io/content-management/organization/)がコアコンセプトとなっています。
 
 <!-- body -->
 
 {{% note %}}
-**Hugo Tip:** Start Hugo with `hugo server --navigateToChanged` for content edit-sessions.
+**Hugoのヒント:** コンテンツの編集を始めるときは、`hugo server --navigateToChanged`コマンドを使用してHugoを実行してください。
 {{% /note %}}
 
-## Page Lists
+## ページの一覧
 
-### Page Order
+### ページの順序
 
-The documentation side menu, the documentation page browser etc. are listed using Hugo's default sort order, which sorts by weight (from 1), date (newest first), and finally by the link title.
+ドキュメントのサイドメニューやページブラウザーなどでは、Hugoのデフォルトのソート順序を使用して一覧を作成しています。デフォルトでは、weight(1から開始)、日付(最新のものが1番目)、最後にリンクのタイトルの順でソートされます。
 
-Given that, if you want to move a page or a section up, set a weight in the page's front matter:
+そのため、特定のページやセッションを上に移動したい場合には、ページのフロントマター内のweightを設定します。
 
 ```yaml
 title: My Page
 weight: 10
 ```
 
-
 {{% note %}}
-For page weights, it can be smart not to use 1, 2, 3 ..., but some other interval, say 10, 20, 30... This allows you to insert pages where you want later.
+ページのweightについては、1、2、3…などの値を使用せず、10、20、30…のように一定の間隔を空けた方が賢明です。こうすることで、後で別のページを間に挿入できるようになります。
 {{% /note %}}
 
+### ドキュメントのメインメニュー
 
-### Documentation Main Menu
-
-The `Documentation` main menu is built from the sections below `docs/` with the `main_menu` flag set in front matter of the `_index.md` section content file:
+ドキュメントのメインメニューは、`docs/`以下に置かれたセクションのコンテンツファイル`_index.md`のフロントマター内に`main_menu`フラグが設定されたものから生成されます。
 
 ```yaml
 main_menu: true
 ```
 
-
-Note that the link title is fetched from the page's `linkTitle`, so if you want it to be something different than the title, change it in the content file:
-
+リンクのタイトルは、ページの`linkTitle`から取得されることに注意してください。そのため、ページのタイトルとは異なるリンクテキストにしたい場合、コンテンツファイル内の値を以下のように設定します。
 
 ```yaml
 main_menu: true
-title: Page Title
-linkTitle: Title used in links
+title: ページタイトル
+linkTitle: リンク内で使われるタイトル
 ```
 
-
 {{% note %}}
-The above needs to be done per language. If you don't see your section in the menu, it is probably because it is not identified as a section by Hugo. Create a `_index.md` content file in the section folder.
+上記の設定は言語ごとに行う必要があります。メニュー上にセクションが表示されないときは、Hugoからセクションとして認識されていないためである可能性が高いです。セクションフォルダー内に`_index.md`コンテンツファイルを作成してください。
 {{% /note %}}
 
-### Documentation Side Menu
+### ドキュメントのサイドメニュー
 
-The documentation side-bar menu is built from the _current section tree_ starting below `docs/`.
+ドキュメントのサイドバーメニューは、`docs/`以下の*現在のセクションツリー*から生成されます。
 
-It will show all sections and their pages.
+セクションと、そのセクション内のページがすべて表示されます。
 
-If you don't want to list a section or page, set the `toc_hide` flag to `true` in front matter:
+特定のセクションやページをリストに表示したくない場合、フロントマター内の`toc_hide`フラグを`true`に設定してください。
 
 ```yaml
 toc_hide: true
 ```
 
-When you navigate to a section that has content, the specific section or page (e.g. `_index.md`) is shown. Else, the first page inside that section is shown.
+コンテンツが存在するセクションに移動すると、特定のセクションまたはページ(例:`index.md`)が表示されます。それ以外の場合、そのセクションの最初のページが表示されます。
 
-### Documentation Browser
+### ドキュメントのブラウザー
 
-The page browser on the documentation home page is built using all the sections and pages that are directly below the `docs section`.
+ドキュメントのホームページのページブラウザーは、`docs`セクション直下のすべてのセクションとページを使用して生成されています。
 
-If you don't want to list a section or page, set the `toc_hide` flag to `true` in front matter:
+特定のセクションやページを表示したくない場合、フロントマターの`toc_hide`フラグを`true`に設定してください。
 
 ```yaml
 toc_hide: true
 ```
 
-### The Main Menu
+### メインメニュー
 
-The site links in the top-right menu -- and also in the footer -- are built by page-lookups. This is to make sure that the page actually exists. So, if the `case-studies` section does not exist in a site (language), it will not be linked to.
+右上のメニュー(およびフッター)にあるサイトリンクは、page-lookupの機能を使用して実装されています。これにより、ページが実際に存在することを保証しています。そのため、たとえば`case-studies`のセクションが特定の言語のサイトに存在しない場合、メニューにはケーススタディのリンクが表示されません。
 
+## Page Bundle
 
-## Page Bundles
+スタンドアローンのコンテンツページ(Markdownファイル)に加えて、Hugoでは、[Page Bundles](https://gohugo.io/content-management/page-bundles/)がサポートされています。
 
-In addition to standalone content pages (Markdown files), Hugo supports [Page Bundles](https://gohugo.io/content-management/page-bundles/).
-
-One example is [Custom Hugo Shortcodes](/docs/contribute/style/hugo-shortcodes/). It is considered a `leaf bundle`. Everything below the directory, including the `index.md`, will be part of the bundle. This also includes page-relative links, images that can be processed etc.:
+Page Bundleの1つの例は、[カスタムのHugo Shortcode](/docs/contribute/style/hugo-shortcodes/)です。これは、`leaf bundle`であると見做されます。ディレクトリ内のすべてのファイルは、`index.md`を含めてバンドルの一部となります。これには、ページからの相対リンク、処理可能な画像なども含まれます。
 
 ```bash
 en/docs/home/contribute/includes
@@ -102,7 +93,7 @@ en/docs/home/contribute/includes
 └── podtemplate.json
 ```
 
-Another widely used example is the `includes` bundle. It sets `headless: true` in front matter, which means that it does not get its own URL. It is only used in other pages.
+もう1つのPage Bundleがよく使われる例は、`includes`バンドルです。フロントマターに`headless: true`を設定すると、自分自身のURLを持たなくなり、他のページ内でのみ使用されるようになります。
 
 ```bash
 en/includes
@@ -115,24 +106,18 @@ en/includes
 └── user-guide-migration-notice.md
 ```
 
-Some important notes to the files in the bundles:
+バンドル内のファイルに関して、いくつか重要な注意点があります。
 
-* For translated bundles, any missing non-content files will be inherited from languages above. This avoids duplication.
-* All the files in a bundle are what Hugo calls `Resources` and you can provide metadata per language, such as parameters and title, even if it does not supports front matter (YAML files etc.). See [Page Resources Metadata](https://gohugo.io/content-management/page-resources/#page-resources-metadata).
-* The value you get from `.RelPermalink` of a `Resource` is page-relative. See [Permalinks](https://gohugo.io/content-management/urls/#permalinks).
-
-
-## Styles
-
-The [SASS](https://sass-lang.com/) source of the stylesheets for this site is stored in `assets/sass` and is automatically built by Hugo.
+* 翻訳されたバンドルに対しては、コンテンツ以外の見つからなかったファイルは上位の言語から継承されます。これにより重複が回避できます。
+* バンドル内のすべてのファイルは、Hugoが`Resources`と呼ぶファイルになり、フロントマター(YAMLファイルなど)をサポートしていない場合であっても、言語ごとにパラメーターやタイトルなどのメタデータを提供できます。詳しくは、[Page Resourcesメタデータ](https://gohugo.io/content-management/page-resources/#page-resources-metadata)を参照してください。
+* `Resource`の`.RelPermalink`から取得した値は、ページからの相対的なものとなっています。詳しくは、[Permalinks](https://gohugo.io/content-management/urls/#permalinks)を参照してください。
 
+## スタイル
 
+このサイトのスタイルシートの[SASS](https://sass-lang.com/)のソースは、`assets/sass`に置かれていて、Hugoによって自動的にビルドされます。
 
 ## {{% heading "whatsnext" %}}
 
-
-* Learn about [custom Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/)
-* Learn about the [Style guide](/docs/contribute/style/style-guide)
-* Learn about the [Content guide](/docs/contribute/style/content-guide)
-
-
+* [カスタムのHugo shortcode](/docs/contribute/style/hugo-shortcodes/)について学ぶ
+* [スタイルガイド](/docs/contribute/style/style-guide)について学ぶ
+* [コンテンツガイド](/docs/contribute/style/content-guide)について学ぶ

From 4b5c7f18d2d34b48dd71cdb5f24a7870ee2ff8e0 Mon Sep 17 00:00:00 2001
From: augustkang <iamaugustkang@gmail.com>
Date: Tue, 18 Aug 2020 18:47:11 +0900
Subject: [PATCH 051/496] add closing fence

---
 .../ko/docs/tutorials/stateful-application/basic-stateful-set.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
index c7d57d8633..41ef9aa4c1 100644
--- a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -92,6 +92,7 @@ nginx     ClusterIP    None         <none>        80/TCP    12s
 ```shell
 kubectl get statefulset web
 ```
+```
 NAME      DESIRED   CURRENT   AGE
 web       2         1         20s
 ```

From b55ef2498fc67652f1b322713ff993c2e2505c63 Mon Sep 17 00:00:00 2001
From: augustkang <iamaugustkang@gmail.com>
Date: Tue, 18 Aug 2020 19:03:09 +0900
Subject: [PATCH 052/496] add missing code block fence

---
 .../docs/tutorials/stateful-application/basic-stateful-set.md   | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
index 41ef9aa4c1..488de4e60c 100644
--- a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -85,6 +85,8 @@ statefulset.apps/web created
 
 ```shell
 kubectl get service nginx
+```
+```
 NAME      TYPE         CLUSTER-IP   EXTERNAL-IP   PORT(S)   AGE
 nginx     ClusterIP    None         <none>        80/TCP    12s
 ```

From fb127402c6329b23eb7e085b5a39d3b6da11810b Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Mon, 17 Aug 2020 09:10:45 +0100
Subject: [PATCH 053/496] Add cncf-landscape shortcode

and adjust /partners/ to use it.
---
 content/en/partners/_index.html        | 53 ++--------------------
 layouts/shortcodes/cncf-landscape.html | 63 ++++++++++++++++++++++++++
 2 files changed, 67 insertions(+), 49 deletions(-)
 create mode 100644 layouts/shortcodes/cncf-landscape.html

diff --git a/content/en/partners/_index.html b/content/en/partners/_index.html
index 7925e03188..80078ae76b 100644
--- a/content/en/partners/_index.html
+++ b/content/en/partners/_index.html
@@ -7,7 +7,6 @@ cid: partners
 ---
 
 <section id="users">
-  <main class="main-section">
     <h5>Kubernetes works with partners to create a strong, vibrant codebase that supports a spectrum of complementary platforms.</h5>
     <div class="col-container">
       <div class="col-nav">
@@ -17,7 +16,7 @@ cid: partners
           </h5>
           <br>Vetted service providers with deep experience helping enterprises successfully adopt Kubernetes.
           <br><br><br>
-          <button class="button" id="kcsp" onclick="updateSrc(this.id)">See KCSP Partners</button>
+          <button class="button landscape-trigger landscape-default" data-landscape-types="kubernetes-certified-service-provider" id="kcsp">See KCSP Partners</button>
           <br><br>Interested in becoming a
           <a href="https://www.cncf.io/certification/kcsp/">KCSP</a>?
         </center>
@@ -28,7 +27,7 @@ cid: partners
             <b>Certified Kubernetes Distributions, Hosted Platforms, and Installers</b>
           </h5>Software conformance ensures that every vendor’s version of Kubernetes supports the required APIs.
           <br><br><br>
-          <button class="button" id="conformance" onclick="updateSrc(this.id)">See Conformance Partners</button>
+          <button class="button landscape-trigger" data-landscape-types="certified-kubernetes-distribution,certified-kubernetes-hosted,certified-kubernetes-installer" id="conformance">See Conformance Partners</button>
           <br><br>Interested in becoming
           <a href="https://www.cncf.io/certification/software-conformance/">Kubernetes Certified</a>?
         </center>
@@ -40,57 +39,13 @@ cid: partners
           </h5>
           <br>Vetted training providers who have deep experience in cloud native technology training.
           <br><br><br>
-          <button class="button" id="ktp" onclick="updateSrc(this.id)">See KTP Partners</button>
+          <button class="button landscape-trigger" data-landscape-types="kubernetes-training-partner" id="ktp">See KTP Partners</button>
           <br><br>Interested in becoming a
           <a href="https://www.cncf.io/certification/training/">KTP</a>?
         </center>
       </div>
     </div>
-    <script crossorigin="anonymous" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=" src="https://code.jquery.com/jquery-3.3.1.min.js"></script>
-    <script type="text/javascript">
-
-      var defaultLink = "https://landscape.cncf.io/category=kubernetes-certified-service-provider&format=card-mode&grouping=category&embed=yes";
-      var firstLink = "https://landscape.cncf.io/category=certified-kubernetes-distribution,certified-kubernetes-hosted,certified-kubernetes-installer&format=card-mode&grouping=category&embed=yes";
-      var secondLink = "https://landscape.cncf.io/category=kubernetes-training-partner&format=card-mode&grouping=category&embed=yes";
-
-      function updateSrc(buttonId) {
-        if (buttonId == "kcsp") {
-          $("#landscape").attr("src", defaultLink);
-          window.location.hash = "#kcsp";
-        }
-        if (buttonId == "conformance") {
-          $("#landscape").attr("src", firstLink);
-          window.location.hash = "#conformance";
-        }
-        if (buttonId == "ktp") {
-          $("#landscape").attr("src", secondLink);
-          window.location.hash = "#ktp";
-        }
-      }
-
-      // Automatically load the correct iframe based on the URL fragment
-      document.addEventListener("DOMContentLoaded", function () {
-        var showContent = "kcsp";
-        if (window.location.hash) {
-          console.log("hash is:", window
-            .location
-            .hash
-            .substring(1));
-          showContent = window
-            .location
-            .hash
-            .substring(1);
-        }
-        updateSrc(showContent);
-      });
-    </script>
-    <body>
-      <div id="frameHolder">
-        <iframe frameborder="0" id="landscape" scrolling="no" src="" style="width: 1px; min-width: 100%" title="CNCF Landscape"></iframe>
-        <script src="https://landscape.cncf.io/iframeResizer.js"></script>
-      </div>
-    </body>
-  </main>
+    {{< cncf-landscape helpers=true >}}
 </section>
 
 <style>
diff --git a/layouts/shortcodes/cncf-landscape.html b/layouts/shortcodes/cncf-landscape.html
new file mode 100644
index 0000000000..5684dc0511
--- /dev/null
+++ b/layouts/shortcodes/cncf-landscape.html
@@ -0,0 +1,63 @@
+{{ $helpers := .Get "helpers" }}
+{{ if not (or (eq $helpers true) (eq $helpers false)) }}
+  {{ errorf "must set helpers to a boolean" }}
+{{ else }}
+<!-- CNCF Landscape helpers -->
+
+{{ if $helpers }}
+<script>
+function updateLandscapeSource(button,shouldUpdateFragment) {
+  console.log({button: button,shouldUpdateFragment: shouldUpdateFragment});
+  try {
+    if(shouldUpdateFragment) {
+      window.location.hash = "#"+button.id;
+      // hash change handler will call us again with shouldUpdateFragment set false
+    } else {
+      var landscapeElements = document.querySelectorAll("#landscape");
+      let categories=button.dataset.landscapeTypes;
+      let link = "https://landscape.cncf.io/category="+encodeURIComponent(categories)+"&format=card-mode&grouping=category&embed=yes";
+      landscapeElements[0].src = link;
+    }
+  }
+  catch(err) {
+    console.log({message: "error handling Landscape switch", error: err})
+  }
+}
+
+// Automatically load the correct iframe based on the URL fragment
+document.addEventListener("DOMContentLoaded", function () {
+  let hashChangeHandler = () => {
+    if (window.location.hash) {
+      let selectedTriggerElements = document.querySelectorAll(".landscape-trigger"+window.location.hash);
+      if (selectedTriggerElements.length == 1) {
+        landscapeSource = selectedTriggerElements[0];
+        console.log("Updating Landscape source based on fragment:", window
+          .location
+          .hash
+          .substring(1));
+        updateLandscapeSource(landscapeSource,false);
+      }
+    }
+  }
+  var landscapeTriggerElements = document.querySelectorAll(".landscape-trigger");
+  landscapeTriggerElements.forEach(element => {
+    element.onclick = function() {
+        updateLandscapeSource(element,true);
+    };
+  });
+  var landscapeDefaultElements = document.querySelectorAll(".landscape-trigger.landscape-default");
+  if (landscapeDefaultElements.length == 1) {
+    let defaultLandscapeSource = landscapeDefaultElements[0];
+    updateLandscapeSource(defaultLandscapeSource,false);
+  }
+  window.addEventListener("hashchange", hashChangeHandler, false);
+  /* handle initially-set fragment */
+  hashChangeHandler();
+});
+</script>
+{{- end -}}
+<div id="frameHolder">
+  <iframe frameborder="0" id="landscape" scrolling="no" src="" style="width: 1px; min-width: 100%" title="CNCF Landscape"></iframe>
+  <script src="https://landscape.cncf.io/iframeResizer.js"></script>
+</div>
+{{- end -}}

From 1d05d2cba2c367df3a43de146d43723a31150d6b Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Tue, 4 Aug 2020 10:48:56 +0800
Subject: [PATCH 054/496] [zh] Rework cloud controller

The English version has been drastically revised.
---
 .../concepts/architecture/cloud-controller.md | 536 +++++++-----------
 1 file changed, 190 insertions(+), 346 deletions(-)

diff --git a/content/zh/docs/concepts/architecture/cloud-controller.md b/content/zh/docs/concepts/architecture/cloud-controller.md
index 5253b6cc54..50b4daf85f 100644
--- a/content/zh/docs/concepts/architecture/cloud-controller.md
+++ b/content/zh/docs/concepts/architecture/cloud-controller.md
@@ -1,359 +1,208 @@
 ---
 title: 云控制器管理器的基础概念
 content_type: concept
-weight: 30
+weight: 40
 ---
 
 <!--
----
 title: Concepts Underlying the Cloud Controller Manager
 content_type: concept
-weight: 30
----
+weight: 40
 -->
 
-
 <!-- overview -->
 
-<!--
-The cloud controller manager (CCM) concept (not to be confused with the binary) was originally created to allow cloud specific vendor code and the Kubernetes core to evolve independent of one another. The cloud controller manager runs alongside other master components such as the Kubernetes controller manager, the API server, and scheduler. It can also be started as a Kubernetes addon, in which case it runs on top of Kubernetes.
--->
-
-云控制器管理器（cloud controller manager，CCM）这个概念 （不要与二进制文件混淆）创建的初衷是为了让特定的云服务供应商代码和 Kubernetes 核心相互独立演化。云控制器管理器与其他主要组件（如 Kubernetes 控制器管理器，API 服务器和调度程序）一起运行。它也可以作为 Kubernetes 的插件启动，在这种情况下，它会运行在 Kubernetes 之上。
+{{< feature-state state="beta" for_k8s_version="v1.11" >}}
 
 <!--
-The cloud controller manager's design is based on a plugin mechanism that allows new cloud providers to integrate with Kubernetes easily by using plugins. There are plans in place for on-boarding new cloud providers on Kubernetes and for migrating cloud providers from the old model to the new CCM model.
+Cloud infrastructure technologies let you run Kubernetes on public, private, and hybrid clouds.
+Kubernetes believes in automated, API-driven infrastructure without tight coupling between
+components.
 -->
+使用云基础设施技术，你可以在共有云、私有云或者混合云环境中运行 Kubernetes。
+Kubernetes 的信条是基于自动化的、API 驱动的基础设施，同时避免组件间紧密耦合。
 
-云控制器管理器基于插件机制设计，允许新的云服务供应商通过插件轻松地与 Kubernetes 集成。目前已经有在 Kubernetes 上加入新的云服务供应商计划，并为云服务供应商提供从原先的旧模式迁移到新 CCM 模式的方案。
+{{< glossary_definition term_id="cloud-controller-manager" length="all" prepend="组件 cloud-controller-manager 是">}}
 
 <!--
-This document discusses the concepts behind the cloud controller manager and gives details about its associated functions.
+The cloud-controller-manager is structured using a plugin
+mechanism that allows different cloud providers to integrate their platforms with Kubernetes.
 -->
-
-本文讨论了云控制器管理器背后的概念，并提供了相关功能的详细信息。
-
-<!--
-Here's the architecture of a Kubernetes cluster without the cloud controller manager:
--->
-
-这是没有云控制器管理器的 Kubernetes 集群的架构：
-
-<!--
-![Pre CCM Kube Arch](/images/docs/pre-ccm-arch.png)
--->
-
-![没有云控制器管理器的 Kubernetes 架构](/images/docs/pre-ccm-arch.png)
-
-
-
+`cloud-controller-manager` 组件是基于一种插件机制来构造的，
+这种机制使得不同的云厂商都能将其平台与 Kubernetes 集成。
 
 <!-- body -->
-
 <!--
 ## Design
+
+![Kubernetes components](/images/docs/components-of-kubernetes.png)
+
+The cloud controller manager runs in the control plane as a replicated set of processes
+(usually, these are containers in Pods). Each cloud-controller-manager implements
+multiple {{< glossary_tooltip text="controllers" term_id="controller" >}} in a single
+process.
 -->
+## 设计  {#design}
 
+![Kubernetes 组件](/images/docs/components-of-kubernetes.png)
 
-## 设计
+云控制器管理器以一组多副本的进程集合的形式运行在控制面中，通常表现为 Pod
+中的容器。每个 `cloud-controller-manager` 在同一进程中实现多个
+{{< glossary_tooltip text="控制器" term_id="controller" >}}。
 
 <!--
-In the preceding diagram, Kubernetes and the cloud provider are integrated through several different components:
+You can also run the cloud controller manager as a Kubernetes
+{{< glossary_tooltip text="addon" term_id="addons" >}} rather than as part
+of the control plane.
 -->
-
-在上图中，Kubernetes 和云服务供应商通过几个不同的组件进行了集成，分别是：
-
-<!--
-* Kubelet
-* Kubernetes controller manager
-* Kubernetes API server
--->
-
-* Kubelet
-* Kubernetes 控制管理器
-* Kubernetes API 服务器
-
-<!--
-The CCM consolidates all of the cloud-dependent logic from the preceding three components to create a single point of integration with the cloud. The new architecture with the CCM looks like this:
--->
-
-CCM 整合了前三个组件中的所有依赖于云的逻辑，以创建与云的单一集成点。CCM 的新架构如下所示：
-
-<!--
-![CCM Kube Arch](/images/docs/post-ccm-arch.png)
--->
-
-![含有云控制器管理器的 Kubernetes 架构](/images/docs/post-ccm-arch.png)
-
-<!--
-## Components of the CCM
--->
-## CCM 的组成部分
-
-<!--
-The CCM breaks away some of the functionality of Kubernetes controller manager (KCM) and runs it as a separate process. Specifically, it breaks away those controllers in the KCM that are cloud dependent. The KCM has the following cloud dependent controller loops:
- -->
-
-CCM 打破了 Kubernetes 控制器管理器（KCM）的一些功能，并将其作为一个单独的进程运行。具体来说，它打破了 KCM 中依赖于云的控制器。KCM 具有以下依赖于云的控制器：
-
-<!--
- * Node controller
- * Volume controller
- * Route controller
- * Service controller
--->
-
-* 节点控制器
-* 卷控制器
-* 路由控制器
-* 服务控制器
-<!--
-In version 1.9, the CCM runs the following controllers from the preceding list:
- -->
-
-在 1.9 版本中，CCM 运行前述列表中的以下控制器：
-
-<!--
-* Node controller
-* Route controller
-* Service controller
--->
-
-* 节点控制器
-* 路由控制器
-* 服务控制器
-
 {{< note >}}
-<!--
-Volume controller was deliberately chosen to not be a part of CCM. Due to the complexity involved and due to the existing efforts to abstract away vendor specific volume logic, it was decided that volume controller will not be moved to CCM.
--->
-
-注意卷控制器不属于 CCM，由于其中涉及到的复杂性和对现有供应商特定卷的逻辑抽象，因此决定了卷控制器不会被移动到 CCM 之中。
-
+你也可以以 Kubernetes {{< glossary_tooltip text="插件" term_id="addons" >}} 
+的形式而不是控制面中的一部分来运行云控制器管理器。
 {{< /note >}}
 
 <!--
-The original plan to support volumes using CCM was to use Flex volumes to support pluggable volumes. However, a competing effort known as CSI is being planned to replace Flex.
--->
+## Cloud controller manager functions {#functions-of-the-ccm}
 
-使用 CCM 支持 volume 的最初计划是使用 Flex volume 来支持可插拔卷，但是现在正在计划一项名为 CSI 的项目以取代 Flex。
+The controllers inside the cloud controller manager include:
+-->
+## 云控制器管理器的功能 {#functions-of-the-ccm}
+
+云控制器管理器中的控制器包括：
 
 <!--
-Considering these dynamics, we decided to have an intermediate stop gap measure until CSI becomes ready.
--->
+### Node controller
 
-考虑到这些正在进行中的变化，在 CSI 准备就绪之前，我们决定停止当前的工作。
+The node controller is responsible for creating {{< glossary_tooltip text="Node" term_id="node" >}} objects
+when new servers are created in your cloud infrastructure. The node controller obtains information about the
+hosts running inside your tenancy with the cloud provider. The node controller performs the following functions:
+-->
+### 节点控制器   {#node-controller}
+
+节点控制器负责在云基础设施中创建了新服务器时为之 创建
+{{< glossary_tooltip text="节点（Node）" term_id="node" >}}对象。
+节点控制器从云提供商获取当前租户中主机的信息。节点控制器执行以下功能：
 
 <!--
-## Functions of the CCM
+1. Initialize a Node object for each server that the controller discovers through the cloud provider API.
+2. Annotating and labelling the Node object with cloud-specific information, such as the region the node
+   is deployed into and the resources (CPU, memory, etc) that it has available.
+3. Obtain the node's hostname and network addresses.
+4. Verifying the node's health. In case a node becomes unresponsive, this controller checks with
+   your cloud provider's API to see if the server has been deactivated / deleted / terminated.
+   If the node has been deleted from the cloud, the controller deletes the Node object from your Kubernetes
+   cluster.
 -->
-
-## CCM 的功能
-
-<!--
-The CCM inherits its functions from components of Kubernetes that are dependent on a cloud provider. This section is structured based on those components.
--->
-
-CCM 从依赖于云提供商的 Kubernetes 组件继承其功能，本节基于这些组件组织。
-
-<!--
-### 1. Kubernetes controller manager
--->
-
-### 1. Kubernetes 控制器管理器
-
-<!--
-The majority of the CCM's functions are derived from the KCM. As mentioned in the previous section, the CCM runs the following control loops:
--->
-
-CCM 的大多数功能都来自 KCM，如上一节所述，CCM 运行以下控制器。
-
-<!--
-* Node controller
-* Route controller
-* Service controller
--->
-
-* 节点控制器
-* 路由控制器
-* 服务控制器
-
-<!--
-#### Node controller
--->
-
-#### 节点控制器
-
-<!--
-The Node controller is responsible for initializing a node by obtaining information about the nodes running in the cluster from the cloud provider. The node controller performs the following functions:
--->
-
-节点控制器负责通过从云提供商获取有关在集群中运行的节点的信息来初始化节点，节点控制器执行以下功能：
-
-<!--
-1. Initialize a node with cloud specific zone/region labels.
-2. Initialize a node with cloud specific instance details, for example, type and size.
-3. Obtain the node's network addresses and hostname.
-4. In case a node becomes unresponsive, check the cloud to see if the node has been deleted from the cloud.
-If the node has been deleted from the cloud, delete the Kubernetes Node object.
--->
-
-1. 使用特定于云的域（zone）/区（region）标签初始化节点；
-2. 使用特定于云的实例详细信息初始化节点，例如，类型和大小；
+1. 针对控制器通过云平台驱动的 API 所发现的每个服务器初始化一个 Node 对象；
+2. 利用特定云平台的信息为 Node 对象添加注解和标签，例如节点所在的
+   区域（Region）和所具有的资源（CPU、内存等等）；
 3. 获取节点的网络地址和主机名；
-4. 如果节点无响应，请检查云以查看该节点是否已从云中删除。如果已从云中删除该节点，请删除 Kubernetes 节点对象。
+4. 检查节点的健康状况。如果节点无响应，控制器通过云平台 API ll 查看该节点是否
+   已从云中禁用、删除或终止。如果节点已从云中删除，则控制器从 Kubernetes 集群
+   中删除 Node 对象。
 
 <!--
-#### Route controller
+Some cloud provider implementations split this into a node controller and a separate node
+lifecycle controller.
 -->
-
-#### 路由控制器
-
-<!--
-The Route controller is responsible for configuring routes in the cloud appropriately so that containers on different nodes in the Kubernetes cluster can communicate with each other. The route controller is only applicable for Google Compute Engine clusters.
--->
-
-Route 控制器负责适当地配置云中的路由，以便 Kubernetes 集群中不同节点上的容器可以相互通信。route 控制器仅适用于 Google Compute Engine 群集。
-
-<!--
-#### Service Controller
--->
-
-#### 服务控制器
-
-<!--
-The Service controller is responsible for listening to service create, update, and delete events. Based on the current state of the services in Kubernetes, it configures cloud load balancers (such as ELB , Google LB, or Oracle Cloud Infrastructure LB) to reflect the state of the services in Kubernetes. Additionally, it ensures that service backends for cloud load balancers are up to date.
--->
-
-<!--
-### 2. Kubelet
--->
-
-### 2. Kubelet
-
-<!--
-The Node controller contains the cloud-dependent functionality of the kubelet. Prior to the introduction of the CCM, the kubelet was responsible for initializing a node with cloud-specific details such as IP addresses, region/zone labels and instance type information. The introduction of the CCM has moved this initialization operation from the kubelet into the CCM.
--->
-
-节点控制器包含 kubelet 中云依赖的功能，在引入 CCM 之前，kubelet 负责使用特定于云平台的功能特性（如 IP 地址，域/区标签和实例类型信息）初始化节点。CCM 的引入已将此初始化操作从 kubelet 转移到 CCM 中。
-
-<!--
-In this new model, the kubelet initializes a node without cloud-specific information. However, it adds a taint to the newly created node that makes the node unschedulable until the CCM initializes the node with cloud-specific information. It then removes this taint.
--->
-
-在这个新模型中，kubelet 初始化一个没有特定于云平台的功能特性的节点。但是，它会为新创建的节点添加污点，使节点不可调度，直到 CCM 使用云的规格信息初始化节点后，才会清除这种污点，便得该节点可被调度。
-
-<!--
-## Plugin mechanism
--->
-
-## 插件机制
-
-<!--
-The cloud controller manager uses Go interfaces to allow implementations from any cloud to be plugged in. Specifically, it uses the CloudProvider Interface defined [here](https://github.com/kubernetes/cloud-provider/blob/9b77dc1c384685cb732b3025ed5689dd597a5971/cloud.go#L42-L62).
--->
-
-云控制器管理器使用 Go 接口允许插入任何云的实现。具体来说，它使用[此处](https://github.com/kubernetes/cloud-provider/blob/9b77dc1c384685cb732b3025ed5689dd597a5971/cloud.go#L42-L62)定义的 CloudProvider 接口。
-
-<!--
-The implementation of the four shared controllers highlighted above, and some scaffolding along with the shared cloudprovider interface, will stay in the Kubernetes core. Implementations specific to cloud providers will be built outside of the core and implement interfaces defined in the core.
--->
-
-上面强调的四个共享控制器的实现，以及一些辅助设施（scaffolding）和共享的 cloudprovider 接口，将被保留在 Kubernetes 核心中。但特定于云提供商的实现将在核心之外构建，并实现核心中定义的接口。
-
-<!--
-For more information about developing plugins, see [Developing Cloud Controller Manager](/docs/tasks/administer-cluster/developing-cloud-controller-manager/).
- -->
-
-有关开发插件的更多信息，请参阅[开发云控制器管理器](/zh/docs/tasks/administer-cluster/developing-cloud-controller-manager/)。
-
-<!--
-## Authorization
--->
-
-## 授权
-
-<!--
-This section breaks down the access required on various API objects by the CCM to perform its operations.
--->
-
-本节分解了 CCM 执行其操作时各种 API 对象所需的访问权限。
-
-<!--
-### Node Controller
--->
-
-### 节点控制器
-
-<!--
-The Node controller only works with Node objects. It requires full access to get, list, create, update, patch, watch, and delete Node objects.
--->
-
-Node 控制器仅适用于 Node 对象，它需要完全访问权限来获取、列出、创建、更新、修补、监视和删除 Node 对象。
-
-<!--
-v1/Node:
-
-- Get
-- List
-- Create
-- Update
-- Patch
-- Watch
-- Delete
--->
-
-v1/Node:
-
-- Get
-- List
-- Create
-- Update
-- Patch
-- Watch
-- Delete
+某些云驱动实现中，这些任务被划分到一个节点控制器和一个节点生命周期控制器中。
 
 <!--
 ### Route controller
--->
 
-### 路由控制器
+The route controller is responsible for configuring routes in the cloud
+appropriately so that containers on different nodes in your Kubernetes
+cluster can communicate with each other.
+
+Depending on the cloud provider, the route controller might also allocate blocks
+of IP addresses for the Pod network.
+-->
+### 路由控制器   {#route-controller}
+
+Route 控制器负责适当地配置云平台中的路由，以便 Kubernetes 集群中不同节点上的
+容器之间可以相互通信。
+
+取决于云驱动本身，路由控制器可能也会为 Pod 网络分配 IP 地址块。
 
 <!--
-The route controller listens to Node object creation and configures routes appropriately. It requires get access to Node objects.
+### Service controller
+
+{< glossary_tooltip text="Services" term_id="service" >}} integrate with cloud
+infrastructure components such as managed load balancers, IP addresses, network
+packet filtering, and target health checking. The service controller interacts with your
+cloud provider's APIs to set up load balancers and other infrastructure components
+when you declare a Service resource that requires them.
 -->
+### 服务控制器   {#service-controller}
 
-路由控制器侦听 Node 对象创建并适当地配置路由，它需要访问 Node 对象。
+{{< glossary_tooltip text="服务（Service）" term_id="service" >}}与受控的负载均衡器、
+IP 地址、网络包锅里煮、目标健康检查等云基础设施组件集成。
+服务控制器与云驱动的 API 交互，以配置负载均衡器和其他基础设施组件。
+你所创建的 Service 资源会需要这些组件服务。
 
-v1/Node:
+<!--
+## Authorization
+
+This section breaks down the access that the cloud controller managers requires
+on various API objects, in order to perform its operations.
+-->
+## 鉴权   {#authorization}
+
+本节分别讲述云控制器管理器为了完成自身工作而产生的对各类 API 对象的访问需求。
+
+<!--
+### Node controller {#authorization-node-controller}
+
+The Node controller only works with Node objects. It requires full access
+to read and modify Node objects.
+-->
+### 节点控制器  {#authorization-node-controller}
+
+节点控制器只操作 Node 对象。它需要读取和修改 Node 对象的完全访问权限。
+
+`v1/Node`:
+
+- Get
+- List
+- Create
+- Update
+- Patch
+- Watch
+- Delete
+
+<!--
+### Route controller {#authorization-route-controller}
+
+The route controller listens to Node object creation and configures
+routes appropriately. It requires Get access to Node objects.
+-->
+### 路由控制器 {#authorization-route-controller}
+
+路由控制器会监听 Node 对象的创建事件，并据此配置路由设施。
+它需要读取 Node 对象的 Get 权限。
+
+`v1/Node`:
 
 - Get
 
 <!--
-### Service controller
+### Service controller {#authorization-service-controller}
+
+The service controller listens to Service object Create, Update and Delete events and then configures Endpoints for those Services appropriately.
+
+To access Services, it requires List, and Watch access. To update Services, it requires Patch and Update access.
+
+To set up Endpoints resources for the Services, it requires access to Create, List, Get, Watch, and Update.
 -->
+### 服务控制器 {#authorization-service-controller}
 
-### 服务控制器
+服务控制器监测 Service 对象的 Create、Update 和 Delete 事件，并配置
+对应服务的 Endpoints 对象。
+为了访问 Service 对象，它需要 List、Watch 访问权限；为了更新 Service 对象
+它需要 Patch 和 Update 访问权限。
+为了能够配置 Service 对应的 Endpoints 资源，它需要 Create、List、Get、Watch
+和 Update 等访问权限。
 
-<!--
-The service controller listens to Service object create, update and delete events and then configures endpoints for those Services appropriately.
--->
-
-服务控制器侦听 Service 对象创建、更新和删除事件，然后适当地为这些服务配置端点。
-
-<!--
-To access Services, it requires list, and watch access. To update Services, it requires patch and update access.
--->
-
-要访问服务，它需要列表和监视访问权限。要更新服务，它需要修补和更新访问权限。
-
-<!--
-To set up endpoints for the Services, it requires access to create, list, get, watch, and update.
--->
-
-要为服务设置端点，需要访问 create、list、get、watch 和 update。
-
-v1/Service:
+`v1/Service`:
 
 - List
 - Get
@@ -362,32 +211,40 @@ v1/Service:
 - Update
 
 <!--
-### Others
--->
+### Others {#authorization-miscellaneous}
 
-### 其它
+The implementation of the core of the cloud controller manager requires access to create Event objects, and to ensure secure operation, it requires access to create ServiceAccounts.
 
-<!--
-The implementation of the core of CCM requires access to create events, and to ensure secure operation, it requires access to create ServiceAccounts.
--->
-
-CCM 核心的实现需要访问权限以创建事件，并且为了确保安全操作，它需要访问权限以创建服务账户。
-
-v1/Event:
+`v1/Event`:
 
 - Create
 - Patch
 - Update
 
-v1/ServiceAccount:
+`v1/ServiceAccount`:
 
 - Create
 
-<!--
-The RBAC ClusterRole for the CCM looks like this:
+The {{< glossary_tooltip term_id="rbac" text="RBAC" >}} ClusterRole for the cloud
+controller manager looks like:
 -->
+### 其他  {#authorization-miscellaneous}
 
-针对 CCM 的 RBAC ClusterRole 看起来像这样：
+云控制器管理器的实现中，其核心部分需要创建 Event 对象的访问权限以及
+创建 ServiceAccount 资源以保证操作安全性的权限。
+
+`v1/Event`:
+
+- Create
+- Patch
+- Update
+
+`v1/ServiceAccount`:
+
+- Create
+
+用于云控制器管理器 {{< glossary_tooltip term_id="rbac" text="RBAC" >}}
+的 ClusterRole 如下例所示：
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -451,50 +308,37 @@ rules:
   - update
 ```
 
-<!--
-## Vendor Implementations
--->
-
-## 供应商实施
+## {{% heading "whatsnext" %}}
 
 <!--
-The following cloud providers have implemented CCMs:
--->
+[Cloud Controller Manager Administration](/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)
+has instructions on running and managing the cloud controller manager.
 
-以下云服务提供商已实现了 CCM：
+Want to know how to implement your own cloud controller manager, or extend an existing project?
+-->
+[云控制器管理器的管理](/zh/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)
+给出了运行和管理云控制器管理器的指南。
+
+想要了解如何实现自己的云控制器管理器，或者对现有项目进行扩展么？
 
 <!--
-* [AWS](https://github.com/kubernetes/cloud-provider-aws)
-* [Azure](https://github.com/kubernetes/cloud-provider-azure)
-* [BaiduCloud](https://github.com/baidu/cloud-provider-baiducloud)
-* [Digital Ocean](https://github.com/digitalocean/digitalocean-cloud-controller-manager)
-* [GCP](https://github.com/kubernetes/cloud-provider-gcp)
-* [Linode](https://github.com/linode/linode-cloud-controller-manager)
-* [OpenStack](https://github.com/kubernetes/cloud-provider-openstack)
-* [Oracle](https://github.com/oracle/oci-cloud-controller-manager)
+The cloud controller manager uses Go interfaces to allow implementations from any cloud to be plugged in. Specifically, it uses the `CloudProvider` interface defined in [`cloud.go`](https://github.com/kubernetes/cloud-provider/blob/release-1.17/cloud.go#L42-L62) from [kubernetes/cloud-provider](https://github.com/kubernetes/cloud-provider).
 -->
-* [Alibaba Cloud](https://github.com/kubernetes/cloud-provider-alibaba-cloud)  
-* [AWS](https://github.com/kubernetes/cloud-provider-aws)
-* [Azure](https://github.com/kubernetes/cloud-provider-azure)
-* [BaiduCloud](https://github.com/baidu/cloud-provider-baiducloud)
-* [Digital Ocean](https://github.com/digitalocean/digitalocean-cloud-controller-manager)
-* [GCP](https://github.com/kubernetes/cloud-provider-gcp)
-* [Linode](https://github.com/linode/linode-cloud-controller-manager)
-* [OpenStack](https://github.com/kubernetes/cloud-provider-openstack)
-* [Oracle](https://github.com/oracle/oci-cloud-controller-manager)
+云控制器管理器使用 Go 语言的接口，从而使得针对各种云平台的具体实现都可以接入。
+其中使用了在 [kubernetes/cloud-provider](https://github.com/kubernetes/cloud-provider)
+项目中 [`cloud.go`](https://github.com/kubernetes/cloud-provider/blob/release-1.17/cloud.go#L42-L62)
+文件所定义的 `CloudProvider` 接口。
 
 <!--
-## Cluster Administration
+The implementation of the shared controllers highlighted in this document (Node, Route, and Service), and some scaffolding along with the shared cloudprovider interface, is part of the Kubernetes core. Implementations specific to cloud providers are outside the core of Kubernetes and implement the `CloudProvider` interface.
+
+For more information about developing plugins, see [Developing Cloud Controller Manager](/docs/tasks/administer-cluster/developing-cloud-controller-manager/).
 -->
+本文中列举的共享控制器（节点控制器、路由控制器和服务控制器等）的实现以及
+其他一些生成具有 CloudProvider 接口的框架的代码，都是 Kubernetes 的核心代码。
+特定于云驱动的实现虽不是 Kubernetes 核心成分，仍要实现 `CloudProvider` 接口。
 
-## 群集管理
-
-<!--
-Complete instructions for configuring and running the CCM are provided
-[here](/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager).
--->
-
-[这里](/zh/docs/tasks/administer-cluster/running-cloud-controller/#cloud-controller-manager)提供了有关配置和运行 CCM 的完整说明。
-
-
+关于如何开发插件的详细信息，可参考
+[开发云控制器管理器](/zh/docs/tasks/administer-cluster/developing-cloud-controller-manager/)
+文档。
 

From 6262a5dae36c6b459dfe403acc12d984c298266a Mon Sep 17 00:00:00 2001
From: Daniel Mendes <danielmd3000@gmail.com>
Date: Tue, 18 Aug 2020 19:59:10 +0200
Subject: [PATCH 055/496] Update jsonpath.md

---
 content/en/docs/reference/kubectl/jsonpath.md | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/reference/kubectl/jsonpath.md b/content/en/docs/reference/kubectl/jsonpath.md
index 6ca252082d..acb9d9e9e9 100644
--- a/content/en/docs/reference/kubectl/jsonpath.md
+++ b/content/en/docs/reference/kubectl/jsonpath.md
@@ -101,15 +101,14 @@ kubectl get pods -o=jsonpath="{range .items[*]}{.metadata.name}{\"\t\"}{.status.
 {{< note >}}
 
 JSONPath regular expressions are not supported. If you want to match using regular expressions, you can use a tool such as `jq`.
-Example currently not supported
 
 ```shell
 # kubectl does not suport regular expressions
 # The following command does not work
-kubectl get secrets -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
+kubectl get pods -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
 
 # The following command achieves the same result
-kubectl get secrets -o json | jq '[needs actual example code writing before merge]'
+kubectl get pods -o json | jq -r '.items[] | select(.metadata.name | test("test-")).spec.containers[].image'
 ```
 {{< /note >}}
 

From b9bc797a9fdf67accedf3495554166d8b0c976f6 Mon Sep 17 00:00:00 2001
From: Andrei Kvapil <kvapss@gmail.com>
Date: Tue, 18 Aug 2020 23:36:41 +0200
Subject: [PATCH 056/496] Specify service-cluster-ip-range for apiserver

---
 content/en/docs/concepts/services-networking/dual-stack.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/concepts/services-networking/dual-stack.md b/content/en/docs/concepts/services-networking/dual-stack.md
index aa249566b9..427b8b0a53 100644
--- a/content/en/docs/concepts/services-networking/dual-stack.md
+++ b/content/en/docs/concepts/services-networking/dual-stack.md
@@ -47,6 +47,7 @@ To enable IPv4/IPv6 dual-stack, enable the `IPv6DualStack` [feature gate](/docs/
 
    * kube-apiserver:
       * `--feature-gates="IPv6DualStack=true"`
+      * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
    * kube-controller-manager:
       * `--feature-gates="IPv6DualStack=true"`
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`

From 6282940ff459d87c42298058fcebab60b2593bca Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Wed, 19 Aug 2020 22:32:24 +0900
Subject: [PATCH 057/496] Apply suggestions from code review

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 content/ja/docs/contribute/style/content-guide.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/contribute/style/content-guide.md b/content/ja/docs/contribute/style/content-guide.md
index d1ca24effd..eb165ca733 100644
--- a/content/ja/docs/contribute/style/content-guide.md
+++ b/content/ja/docs/contribute/style/content-guide.md
@@ -29,11 +29,11 @@ Kubernetesのドキュメントにサードパーティーのコンテンツを
 
 - コンテンツがKubernetesプロジェクト内のソフトウェアのドキュメントとなる場合
 - コンテンツがプロジェクト外のソフトウェアのドキュメントとなるが、Kubernetesを機能させるために必要である場合
--  コンテンツがkubernetes.ioの正規のコンテンツであるか、他の場所の正規のコンテンツへのリンクである場合
+- コンテンツがkubernetes.ioの正規のコンテンツであるか、他の場所の正規のコンテンツへのリンクである場合
 
 ### サードパーティーのコンテンツ
 
-Kubernetesのドキュメントには、Kubernetesプロジェクト（[kubernetes](https://github.com/kubernetes)および[kubernetes-sigs](https://github.com/kubernetes-sigs) GitHub organizationsに存在するプロジェクト）の適用例が含まれています。
+Kubernetesのドキュメントには、Kubernetesプロジェクト([kubernetes](https://github.com/kubernetes)および[kubernetes-sigs](https://github.com/kubernetes-sigs) GitHub organizationsに存在するプロジェクト)の適用例が含まれています。
 
 Kubernetesプロジェクト内のアクティブなコンテンツへのリンクは常に許可されます。
 

From 889698c1670867297d3e202d4886b971767cbf75 Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Thu, 20 Aug 2020 02:02:36 +0900
Subject: [PATCH 058/496] ja-trans: Fix Japanese translation in
 ja/concepts/cluster-administration/manage-deployment.md #19280

---
 .../manage-deployment.md                      | 24 +++++++++----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/content/ja/docs/concepts/cluster-administration/manage-deployment.md b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
index 7bd2d41799..90f96547d5 100644
--- a/content/ja/docs/concepts/cluster-administration/manage-deployment.md
+++ b/content/ja/docs/concepts/cluster-administration/manage-deployment.md
@@ -8,8 +8,8 @@ weight: 40
 
 <!-- overview -->
 
-アプリケーションをデプロイし、Serviceを介して外部への公開できました。さて、どうしますか？Kubernetesは、スケーリングや更新など、アプリケーションのデプロイを管理するための多くのツールを提供します。
-我々が取り上げる機能についての詳細は[設定ファイル](/ja/docs/concepts/configuration/overview/)や[ラベル](/ja/docs/concepts/overview/working-with-objects/labels/)で確認できます。
+アプリケーションをデプロイし、Serviceを介して外部に公開できました。さて、どうしますか？Kubernetesは、スケーリングや更新など、アプリケーションのデプロイを管理するための多くのツールを提供します。
+我々が取り上げる機能についての詳細は[設定ファイル](/ja/docs/concepts/configuration/overview/)と[ラベル](/ja/docs/concepts/overview/working-with-objects/labels/)について詳細に説明します。
 
 
 
@@ -18,7 +18,7 @@ weight: 40
 
 ## リソースの設定を管理する
 
-多くのアプリケーションではDeploymentやServiceなど複数のリソースの作成を要求します。複数のリソースの管理は、同一のファイルにひとまとめにしてグループ化すると簡単になります。(YAMLファイル内で`---`で区切る)。
+多くのアプリケーションではDeploymentやServiceなど複数のリソースの作成を要求します。複数のリソースの管理は、同一のファイルにひとまとめにしてグループ化すると簡単になります(YAMLファイル内で`---`で区切る)。
 例えば:
 
 {{< codenew file="application/nginx-app.yaml" >}}
@@ -34,7 +34,7 @@ service/my-nginx-svc created
 deployment.apps/my-nginx created
 ```
 
-リソースは、ファイル内に記述されている順番通りに作成されます。そのため、Serviceを最初に指定するのが理想です。スケジューラがServiceに関連するPodを、Deploymentなどのコントローラによって作成されるときに確実に拡散できるようにするためです。
+リソースは、ファイル内に記述されている順番通りに作成されます。そのため、Serviceを最初に指定するのが理想です。スケジューラーがServiceに関連するPodを、Deploymentなどのコントローラーによって作成されるときに確実に拡散できるようにするためです。
 
 `kubectl apply`もまた、複数の`-f`による引数指定を許可しています。
 
@@ -42,7 +42,7 @@ deployment.apps/my-nginx created
 kubectl apply -f https://k8s.io/examples/application/nginx/nginx-svc.yaml -f https://k8s.io/examples/application/nginx/nginx-deployment.yaml
 ```
 
-個別のファイルに加えて、-fの引数としてディレクトリ名も指定できます。:
+個別のファイルに加えて、-fの引数としてディレクトリ名も指定できます:
 
 ```shell
 kubectl apply -f https://k8s.io/examples/application/nginx/
@@ -52,7 +52,7 @@ kubectl apply -f https://k8s.io/examples/application/nginx/
 
 同じマイクロサービス、アプリケーションティアーのリソースは同一のファイルにまとめ、アプリケーションに関するファイルをグループ化するために、それらのファイルを同一のディレクトリに配備するのを推奨します。アプリケーションのティアーがDNSを通じて互いにバインドされると、アプリケーションスタックの全てのコンポーネントをひとまとめにして簡単にデプロイできます。
 
-リソースの設定ソースとして、URLも指定できます。githubから取得した設定ファイルから直接手軽にデプロイができます。:
+リソースの設定ソースとして、URLも指定できます。githubから取得した設定ファイルから直接手軽にデプロイができます:
 
 ```shell
 kubectl apply -f https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/application/nginx/nginx-deployment.yaml
@@ -81,7 +81,7 @@ service "my-nginx-svc" deleted
 kubectl delete deployments/my-nginx services/my-nginx-svc
 ```
 
-さらに多くのリソースに対する操作では、リソースをラベルでフィルターするために`-l`や`--selector`を使ってセレクター(ラベルクエリ)を指定するのが簡単です。:
+さらに多くのリソースに対する操作では、リソースをラベルでフィルターするために`-l`や`--selector`を使ってセレクター(ラベルクエリ)を指定するのが簡単です:
 
 ```shell
 kubectl delete deployment,services -l app=nginx
@@ -92,7 +92,7 @@ deployment.apps "my-nginx" deleted
 service "my-nginx-svc" deleted
 ```
 
-`kubectl`は同様のシンタックスでリソース名を出力するので、`$()`や`xargs`を使ってパイプで操作するのが容易です。:
+`kubectl`は同様のシンタックスでリソース名を出力するので、`$()`や`xargs`を使ってパイプで操作するのが容易です:
 
 ```shell
 kubectl get $(kubectl create -f docs/concepts/cluster-administration/nginx/ -o name | grep service)
@@ -103,9 +103,9 @@ NAME           TYPE           CLUSTER-IP   EXTERNAL-IP   PORT(S)      AGE
 my-nginx-svc   LoadBalancer   10.0.0.208   <pending>     80/TCP       0s
 ```
 
-上記のコマンドで、最初に`examples/application/nginx/`配下でリソースを作成し、`-o name`という出力フォーマットにより、作成されたリソースの名前を表示します(各シロースをresource/nameという形式で表示)。そして"service"のみ`grep`し、`kubectl get`を使って表示させます。
+上記のコマンドで、最初に`examples/application/nginx/`配下でリソースを作成し、`-o name`という出力フォーマットにより、作成されたリソースの名前を表示します(各リソースをresource/nameという形式で表示)。そして"service"のみ`grep`し、`kubectl get`を使って表示させます。
 
-あるディレクトリー内の複数のサブディレクトリーをまたいでリソースを管理するような場合、`--filename,-f`フラグと合わせて`--recursive`や`-R`を指定することでサブディレクトリーに対しても再帰的に操作が可能です。
+あるディレクトリ内の複数のサブディレクトリをまたいでリソースを管理するような場合、`--filename,-f`フラグと合わせて`--recursive`や`-R`を指定することでサブディレクトリに対しても再帰的に操作が可能です。
 
 例えば、開発環境用に必要な全ての{{< glossary_tooltip text="マニフェスト" term_id="manifest" >}}をリソースタイプによって整理している`project/k8s/development`というディレクトリがあると仮定します。
 
@@ -119,7 +119,7 @@ project/k8s/development
     └── my-pvc.yaml
 ```
 
-デフォルトでは、`project/k8s/development`における一括操作は、どのサブディレクトリーも処理せず、ディレクトリーの第1階層で処理が止まります。下記のコマンドによってこのディレクトリー配下でリソースを作成しようとすると、エラーが発生します。
+デフォルトでは、`project/k8s/development`における一括操作は、どのサブディレクトリも処理せず、ディレクトリの第1階層で処理が止まります。下記のコマンドによってこのディレクトリ配下でリソースを作成しようとすると、エラーが発生します。
 
 ```shell
 kubectl apply -f project/k8s/development
@@ -129,7 +129,7 @@ kubectl apply -f project/k8s/development
 error: you must provide one or more resources by argument or filename (.json|.yaml|.yml|stdin)
 ```
 
-代わりに、下記のように`--filename,-f`フラグと合わせて`--recursive`や`-R`を指定してください。:
+代わりに、下記のように`--filename,-f`フラグと合わせて`--recursive`や`-R`を指定してください:
 
 ```shell
 kubectl apply -f project/k8s/development --recursive

From 772684dc45628fd0c3f97dbdedacc9f1ba24b585 Mon Sep 17 00:00:00 2001
From: Vickey Wu <1143604452@qq.com>
Date: Thu, 20 Aug 2020 11:15:06 +0800
Subject: [PATCH 059/496] Update admission-controllers.md

fix: add missing content about CertificateApproval, CertificateSigning and CertificateSubjectRestrictions
---
 .../admission-controllers.md                  | 36 +++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index 93be72db24..e87aa4e075 100755
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -205,6 +205,42 @@ Rejects all requests. AlwaysDeny is DEPRECATED as no real meaning.
 -->
 拒绝所有的请求。由于没有实际意义，已废弃。
 
+### CertificateApproval
+
+<!--
+This admission controller observes requests to 'approve' CertificateSigningRequest resources and performs additional authorization checks to ensure the approving user has permission to approve certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
+-->
+
+此准入控制器获取“审批”CertificateSigningRequest资源的请求并执行额外的授权检查，以确保审批请求的用户有权限审批`spec.signerName`请求CertificateSigningRequest资源的证书请求。
+
+<!--
+See Certificate Signing Requests for more information on the permissions required to perform different actions on CertificateSigningRequest resources.
+-->
+
+有关对证书签名请求资源执行不同操作所需权限的详细信息，请参阅[证书签名请求](/docs/reference/access-authn-authz/certificate-signing-requests/)
+
+### CertificateSigning
+
+<!--
+This admission controller observes updates to the status.certificate field of CertificateSigningRequest resources and performs an additional authorization checks to ensure the signing user has permission to sign certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
+-->
+
+此准入控制器获取CertificateSigningRequest资源的`status.certificate`字段更新请求并执行额外的授权检查，以确保签发证书的用户有权限为`spec.signerName`请求CertificateSigningRequest资源的证书请求`签发`证书。
+
+<!--
+See Certificate Signing Requests for more information on the permissions required to perform different actions on CertificateSigningRequest resources.
+-->
+
+有关对证书签名请求资源执行不同操作所需权限的详细信息，请参阅[证书签名请求](/docs/reference/access-authn-authz/certificate-signing-requests/)
+
+### CertificateSubjectRestrictions 
+
+<!--
+This admission controller observes creation of CertificateSigningRequest resources that have a spec.signerName of kubernetes.io/kube-apiserver-client. It rejects any request that specifies a 'group' (or 'organization attribute') of system:masters.
+-->
+
+此准入控制器获取具有`kubernetes.io/kube-apiserver-client`的`spec.signerName`的CertificateSigningRequest资源创建请求，它拒绝任何包含了`system:masters`一个“组”（或者“组织”）的请求。
+
 ### DefaultStorageClass {#defaultstorageclass}
 
 <!--

From 85aaea2a993c83840bdc5bfdadb98a89b5421b87 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 22 Aug 2020 14:14:47 +0100
Subject: [PATCH 060/496] Document CustomResourceDefinition as stable

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>
---
 .../custom-resource-definitions.md            | 391 +++---------------
 1 file changed, 46 insertions(+), 345 deletions(-)

diff --git a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
index 337b426d2d..f9333b01c5 100644
--- a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
+++ b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -7,6 +7,7 @@ reviewers:
 - roycaihw
 - sttts
 content_type: task
+min-kubernetes-server-version: 1.16
 weight: 20
 ---
 
@@ -14,16 +15,13 @@ weight: 20
 This page shows how to install a
 [custom resource](/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
 into the Kubernetes API by creating a
-[CustomResourceDefinition](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#customresourcedefinition-v1beta1-apiextensions).
+[CustomResourceDefinition](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#customresourcedefinition-v1-apiextensions-k8s-io).
 
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
-* Make sure your Kubernetes cluster has a master version of 1.16.0 or higher to use `apiextensions.k8s.io/v1`, or 1.7.0 or higher for `apiextensions.k8s.io/v1beta1`.
-
-* Read about [custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
+If you are using an older version of Kubernetes that is still supported, switch to
+the documentation for that version to see advice that is relevant for your cluster.
 
 <!-- steps -->
 
@@ -38,9 +36,6 @@ are available to all namespaces.
 
 For example, if you save the following CustomResourceDefinition to `resourcedefinition.yaml`:
 
-{{< tabs name="CustomResourceDefinition_example_1" >}}
-{{% tab name="apiextensions.k8s.io/v1" %}}
-
 ```yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -84,58 +79,7 @@ spec:
     - ct
 ```
 
-{{% /tab %}}
-{{% tab name="apiextensions.k8s.io/v1beta1" %}}
-
-```yaml
-# Deprecated in v1.16 in favor of apiextensions.k8s.io/v1
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  # name must match the spec fields below, and be in the form: <plural>.<group>
-  name: crontabs.stable.example.com
-spec:
-  # group name to use for REST API: /apis/<group>/<version>
-  group: stable.example.com
-  # list of versions supported by this CustomResourceDefinition
-  versions:
-    - name: v1
-      # Each version can be enabled/disabled by Served flag.
-      served: true
-      # One and only one version must be marked as the storage version.
-      storage: true
-  # either Namespaced or Cluster
-  scope: Namespaced
-  names:
-    # plural name to be used in the URL: /apis/<group>/<version>/<plural>
-    plural: crontabs
-    # singular name to be used as an alias on the CLI and for display
-    singular: crontab
-    # kind is normally the CamelCased singular type. Your resource manifests use this.
-    kind: CronTab
-    # shortNames allow shorter string to match your resource on the CLI
-    shortNames:
-    - ct
-  preserveUnknownFields: false
-  validation:
-    openAPIV3Schema:
-      type: object
-      properties:
-        spec:
-          type: object
-          properties:
-            cronSpec:
-              type: string
-            image:
-              type: string
-            replicas:
-              type: integer
-```
-
-{{% /tab %}}
-{{< /tabs >}}
-
-And create it:
+and create it:
 
 ```shell
 kubectl apply -f resourcedefinition.yaml
@@ -246,11 +190,9 @@ If you later recreate the same CustomResourceDefinition, it will start out empty
 
 ## Specifying a structural schema
 
-{{< feature-state state="stable" for_k8s_version="v1.16" >}}
+CustomResources store structured data in custom fiels (alongside the built-in fields `apiVersion`, `kind` and `metadata`, which the API server validates implicitly). With [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) a schema can be specified, which is validated during creation and updates, compare below for details and limits of such a schema.
 
-CustomResources traditionally store arbitrary JSON (next to `apiVersion`, `kind` and `metadata`, which is validated by the API server implicitly). With [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) a schema can be specified, which is validated during creation and updates, compare below for details and limits of such a schema.
-
-With `apiextensions.k8s.io/v1` the definition of a structural schema is mandatory for CustomResourceDefinitions, while in `v1beta1` this is still optional.
+With `apiextensions.k8s.io/v1` the definition of a structural schema is mandatory for CustomResourceDefinitions (in the beta version of CustomResourceDefinition, structural schemas were optional).
 
 A structural schema is an [OpenAPI v3.0 validation schema](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) which:
 
@@ -262,7 +204,7 @@ A structural schema is an [OpenAPI v3.0 validation schema](/docs/tasks/extend-ku
 4. if `metadata` is specified, then only restrictions on `metadata.name` and `metadata.generateName` are allowed.
 
 
-Non-Structural Example 1:
+Non-structural example 1:
 ```yaml
 allOf:
 - properties:
@@ -280,7 +222,7 @@ allOf:
       ...
 ```
 
-Non-Structural Example 2:
+Non-structural example 2:
 ```yaml
 allOf:
 - items:
@@ -301,7 +243,7 @@ allOf:
         ...
 ```
 
-Non-Structural Example 3:
+Non-structural example 3:
 ```yaml
 properties:
   foo:
@@ -359,34 +301,17 @@ anyOf:
 
 Violations of the structural schema rules are reported in the `NonStructural` condition in the CustomResourceDefinition.
 
-Structural schemas are a requirement for `apiextensions.k8s.io/v1`, and disables the following  features for `apiextensions.k8s.io/v1beta1`:
+### Field pruning
 
-* [Validation Schema Publishing](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#publish-validation-schema-in-openapi-v2)
-* [Webhook Conversion](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/#webhook-conversion)
-* [Pruning](#preserving-unknown-fields)
+CustomResourceDefinitions store validated resource data in the cluster's persistence store, {{< glossary_tooltip term_id="etcd" text="etcd">}}. As with native Kubernetes resources such as {{< glossary_tooltip text="ConfigMap" term_id="configmap" >}}, if you specify a field that the API server does not recognize, the unknown field  is _pruned_ (removed) before being persisted.
 
-### Pruning versus preserving unknown fields {#preserving-unknown-fields}
+{{< note >}}
+CRDs converted from `apiextensions.k8s.io/v1beta1` to `apiextensions.k8s.io/v1` might lack structural schemas, and `spec.preserveUnknownFields` might be `true`.
 
-{{< feature-state state="stable" for_k8s_version="v1.16" >}}
+For migrated CustomResourceDefinitions where `spec.preserveUnknownFields` is set, pruning is _not_ enabled and you can store arbitrary data. For best compatibility, you should update customer resources to meet an OpenAPI schema, and you should set `spec.preserveUnknownFields` true for the CustomResourceDefinition itself.
+{{< /note >}}
 
-CustomResourceDefinitions traditionally store any (possibly validated) JSON as is in etcd. This means that unspecified fields (if there is a [OpenAPI v3.0 validation schema](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) at all) are persisted. This is in contrast to native Kubernetes resources such as a pod where unknown fields are dropped before being persisted to etcd. We call this "pruning" of unknown fields.
-
-{{< tabs name="CustomResourceDefinition_pruning" >}}
-{{% tab name="apiextensions.k8s.io/v1" %}}
-
-For CustomResourceDefinitions created in `apiextensions.k8s.io/v1`, [structural OpenAPI v3 validation schemas](#specifying-a-structural-schema) are required and pruning is enabled and cannot be disabled (note that CRDs converted from `apiextensions.k8s.io/v1beta1` to `apiextensions.k8s.io/v1` might lack structural schemas, and `spec.preserveUnknownFields` might be `true`).
-
-{{% /tab %}}
-{{% tab name="apiextensions.k8s.io/v1beta1" %}}
-
-For CustomResourceDefinitions created in `apiextensions.k8s.io/v1beta1`, if a [structural OpenAPI v3 validation schema](#specifying-a-structural-schema) is defined (either in the global `spec.validation.openAPIV3Schema` in `apiextensions.k8s.io/v1beta1` or for each version) in a CustomResourceDefinition, pruning can be enabled by setting `spec.preserveUnknownFields` to `false`.
-
-{{% /tab %}}
-{{% /tabs %}}
-
-If pruning is enabled, unspecified fields in CustomResources on creation and on update are dropped.
-
-Compare the CustomResourceDefinition `crontabs.stable.example.com` above. It has pruning enabled (both in `apiextensions.k8s.io/v1` and `apiextensions.k8s.io/v1beta1`). Hence, if you save the following YAML to `my-crontab.yaml`:
+If you save the following YAML to `my-crontab.yaml`:
 
 ```yaml
 apiVersion: "stable.example.com/v1"
@@ -405,7 +330,7 @@ and create it:
 kubectl create --validate=false -f my-crontab.yaml -o yaml
 ```
 
-you should get:
+your output is similar to:
 
 ```console
 apiVersion: stable.example.com/v1
@@ -422,15 +347,16 @@ spec:
   image: my-awesome-cron-image
 ```
 
-The field `someRandomField` has been pruned.
+Notice that the field `someRandomField` was pruned.
 
-Note that the `kubectl create` call uses `--validate=false` to skip client-side validation.
+This example turned off client-side validation to demonstrate the API server's behavior, by adding the `--validate=false` command line option.
 Because the [OpenAPI validation schemas are also published](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#publish-validation-schema-in-openapi-v2)
-to kubectl, it will also check for unknown fields and reject those objects long before they are sent to the API server.
+to clients, `kubectl` also checks for unknown fields and rejects those objects well before they would be sent to the API server.
 
-### Controlling pruning
+#### Controlling pruning
 
-If pruning is enabled (enforced in `apiextensions.k8s.io/v1`, or as opt-in via `spec.preserveUnknownField: false` in `apiextensions.k8s.io/v1beta1`) in the CustomResourceDefinition, all unspecified fields in custom resources of that type and in all versions are pruned. It is possible though to opt-out of that for JSON sub-trees via `x-kubernetes-preserve-unknown-fields: true` in the [structural OpenAPI v3 validation schema](#specifying-a-structural-schema):
+By default, all unspecified fields for a custom resource, across all versions, are pruned. It is possible though to opt-out of that for specifc sub-trees fof fields by adding `x-kubernetes-preserve-unknown-fields: true` in the [structural OpenAPI v3 validation schema](#specifying-a-structural-schema).  
+For example:
 
 ```yaml
 type: object
@@ -441,7 +367,7 @@ properties:
 
 The field `json` can store any JSON value, without anything being pruned.
 
-It is possible to partially specify the permitted JSON, e.g.:
+You can also partially specify the permitted JSON; for example:
 
 ```yaml
 type: object
@@ -452,7 +378,7 @@ properties:
     description: this is arbitrary JSON
 ```
 
-With this only object type values are allowed.
+With this, only `object` type values are allowed.
 
 Pruning is enabled again for each specified property (or `additionalProperties`):
 
@@ -610,10 +536,8 @@ meaning all finalizers have been executed.
 
 ### Validation
 
-{{< feature-state state="stable" for_k8s_version="v1.16" >}}
-
-Validation of custom objects is possible via
-[OpenAPI v3 schemas](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#schemaObject) or [validatingadmissionwebhook](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook). In `apiextensions.k8s.io/v1` schemas are required, in `apiextensions.k8s.io/v1beta1` they are optional.
+Custom resources are validated via
+[OpenAPI v3 schemas](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#schemaObject) and you can add additional validation using [admission webhooks](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook).
 
 Additionally, the following restrictions are applied to the schema:
 
@@ -628,13 +552,13 @@ Additionally, the following restrictions are applied to the schema:
   - `writeOnly`,
   - `xml`,
   - `$ref`.
-- The field `uniqueItems` cannot be set to true.
-- The field `additionalProperties` cannot be set to false.
+- The field `uniqueItems` cannot be set to _true_.
+- The field `additionalProperties` cannot be set to _false_.
 - The field `additionalProperties` is mutually exclusive with `properties`.
 
 These fields can only be set with specific features enabled:
 
-- `default`: can be set for `apiextensions.k8s.io/v1` CustomResourceDefinitions. Defaulting is in GA since 1.17 (beta since 1.16 with the `CustomResourceDefaulting` feature gate to be enabled, which is the case automatically for many clusters for beta features). Compare [Validation Schema Defaulting](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#defaulting).
+You can also use [Validation Schema Defaulting](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#defaulting) to apply default values.
 
 {{< note >}}
 Compare with [structural schemas](#specifying-a-structural-schema) for further restriction required for certain CustomResourceDefinition features.
@@ -648,9 +572,6 @@ CustomResourceDefinition applies the following validations on the custom object:
 
 Save the CustomResourceDefinition to `resourcedefinition.yaml`:
 
-{{< tabs name="CustomResourceDefinition_validation" >}}
-{{% tab name="apiextensions.k8s.io/v1" %}}
-
 ```yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -688,58 +609,13 @@ spec:
     - ct
 ```
 
-{{% /tab %}}
-{{% tab name="apiextensions.k8s.io/v1beta1" %}}
-
-```yaml
-# Deprecated in v1.16 in favor of apiextensions.k8s.io/v1
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: crontabs.stable.example.com
-spec:
-  group: stable.example.com
-  versions:
-    - name: v1
-      served: true
-      storage: true
-  version: v1
-  scope: Namespaced
-  names:
-    plural: crontabs
-    singular: crontab
-    kind: CronTab
-    shortNames:
-    - ct
-  validation:
-   # openAPIV3Schema is the schema for validating custom objects.
-    openAPIV3Schema:
-      type: object
-      properties:
-        spec:
-          type: object
-          properties:
-            cronSpec:
-              type: string
-              pattern: '^(\d+|\*)(/\d+)?(\s+(\d+|\*)(/\d+)?){4}$'
-            image:
-              type: string
-            replicas:
-              type: integer
-              minimum: 1
-              maximum: 10
-```
-
-{{% /tab %}}
-{{< /tabs >}}
-
-And create it:
+and create it:
 
 ```shell
 kubectl apply -f resourcedefinition.yaml
 ```
 
-A request to create a custom object of kind `CronTab` will be rejected if there are invalid values in its fields.
+A request to create a custom object of kind CronTab is rejected if there are invalid values in its fields.
 In the following example, the custom object contains fields with invalid values:
 
 - `spec.cronSpec` does not match the regular expression.
@@ -758,13 +634,13 @@ spec:
   replicas: 15
 ```
 
-and create it:
+and attempt to create it:
 
 ```shell
 kubectl apply -f my-crontab.yaml
 ```
 
-you will get an error:
+then you get an error:
 
 ```console
 The CronTab "my-new-cron-object" is invalid: []: Invalid value: map[string]interface {}{"apiVersion":"stable.example.com/v1", "kind":"CronTab", "metadata":map[string]interface {}{"name":"my-new-cron-object", "namespace":"default", "deletionTimestamp":interface {}(nil), "deletionGracePeriodSeconds":(*int64)(nil), "creationTimestamp":"2017-09-05T05:20:07Z", "uid":"e14d79e7-91f9-11e7-a598-f0761cb232d1", "clusterName":""}, "spec":map[string]interface {}{"cronSpec":"* * * *", "image":"my-awesome-cron-image", "replicas":15}}:
@@ -797,8 +673,6 @@ crontab "my-new-cron-object" created
 
 ### Defaulting
 
-{{< feature-state state="stable" for_k8s_version="v1.17" >}}
-
 {{< note >}}
 To use defaulting, your CustomResourceDefinition must use API version `apiextensions.k8s.io/v1`.
 {{< /note >}}
@@ -882,19 +756,13 @@ Default values for `metadata` fields of `x-kubernetes-embedded-resources: true`
 
 ### Publish Validation Schema in OpenAPI v2
 
-{{< feature-state state="stable" for_k8s_version="v1.16" >}}
+CustomResourceDefinition [OpenAPI v3 validation schemas](#validation) which are [structural](#specifying-a-structural-schema) and [enable pruning](#preserving-unknown-fields) are published as part of the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions) from Kubernetes API server.
 
-{{< note >}}
-OpenAPI v2 Publishing is available as beta since 1.15, and as alpha since 1.14. The
-`CustomResourcePublishOpenAPI` feature must be enabled, which is the case automatically for many clusters for beta features. Please refer to the [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) documentation for more information.
-{{< /note >}}
-
-With the OpenAPI v2 Publishing feature enabled, CustomResourceDefinition [OpenAPI v3 validation schemas](#validation) which are [structural](#specifying-a-structural-schema) and [enable pruning](#preserving-unknown-fields) (opt-in in v1beta1, enabled by default in v1) are published as part of the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions) from Kubernetes API server.
-
-[kubectl](/docs/reference/kubectl/overview) consumes the published schema to perform client-side validation (`kubectl create` and `kubectl apply`), schema explanation (`kubectl explain`) on custom resources. The published schema can be consumed for other purposes as well, like client generation or documentation.
+The [kubectl](/docs/reference/kubectl/overview) command-line tool consumes the published schema to perform client-side validation (`kubectl create` and `kubectl apply`), schema explanation (`kubectl explain`) on custom resources. The published schema can be consumed for other purposes as well, like client generation or documentation.
 
 The OpenAPI v3 validation schema is converted to OpenAPI v2 schema, and
 show up in `definitions` and `paths` fields in the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions).
+
 The following modifications are applied during the conversion to keep backwards compatibility with
 kubectl in previous 1.13 version. These modifications prevent kubectl from being over-strict and rejecting
 valid OpenAPI schemas that it doesn't understand. The conversion won't modify the validation schema defined in CRD,
@@ -906,16 +774,13 @@ and therefore won't affect [validation](#validation) in the API server.
 
 ### Additional printer columns
 
-Starting with Kubernetes 1.11, kubectl uses server-side printing. The server decides which
-columns are shown by the `kubectl get` command. You can customize these columns using a
+The kubectl tool relies on server-side output formatting. Your cluster's API server decides which
+columns are shown by the `kubectl get` command. You can customize these columns for a
 CustomResourceDefinition. The following example adds the `Spec`, `Replicas`, and `Age`
 columns.
 
 Save the CustomResourceDefinition to `resourcedefinition.yaml`:
 
-{{< tabs name="CustomResourceDefinition_printer_columns" >}}
-{{% tab name="apiextensions.k8s.io/v1" %}}
-
 ```yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -961,55 +826,6 @@ spec:
       jsonPath: .metadata.creationTimestamp
 ```
 
-{{% /tab %}}
-{{% tab name="apiextensions.k8s.io/v1beta1" %}}
-
-```yaml
-# Deprecated in v1.16 in favor of apiextensions.k8s.io/v1
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: crontabs.stable.example.com
-spec:
-  group: stable.example.com
-  version: v1
-  scope: Namespaced
-  names:
-    plural: crontabs
-    singular: crontab
-    kind: CronTab
-    shortNames:
-    - ct
-  validation:
-    openAPIV3Schema:
-      type: object
-      properties:
-        spec:
-          type: object
-          properties:
-            cronSpec:
-              type: string
-            image:
-              type: string
-            replicas:
-              type: integer
-  additionalPrinterColumns:
-  - name: Spec
-    type: string
-    description: The cron spec defining the interval a CronJob is run
-    JSONPath: .spec.cronSpec
-  - name: Replicas
-    type: integer
-    description: The number of jobs launched by the CronJob
-    JSONPath: .spec.replicas
-  - name: Age
-    type: date
-    JSONPath: .metadata.creationTimestamp
-```
-
-{{% /tab %}}
-{{< /tabs >}}
-
 Create the CustomResourceDefinition:
 
 ```shell
@@ -1074,17 +890,8 @@ The column's `format` controls the style used when `kubectl` prints the value.
 
 ### Subresources
 
-{{< feature-state state="stable" for_k8s_version="v1.16" >}}
-
 Custom resources support `/status` and `/scale` subresources.
 
-You can disable this feature using the `CustomResourceSubresources` feature gate on
-the [kube-apiserver](/docs/admin/kube-apiserver):
-
-```
---feature-gates=CustomResourceSubresources=false
-```
-
 The status and scale subresources can be optionally enabled by
 defining them in the CustomResourceDefinition.
 
@@ -1154,9 +961,6 @@ In the following example, both status and scale subresources are enabled.
 
 Save the CustomResourceDefinition to `resourcedefinition.yaml`:
 
-{{< tabs name="CustomResourceDefinition_scale" >}}
-{{% tab name="apiextensions.k8s.io/v1" %}}
-
 ```yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -1209,65 +1013,6 @@ spec:
     - ct
 ```
 
-{{% /tab %}}
-{{% tab name="apiextensions.k8s.io/v1beta1" %}}
-
-```yaml
-# Deprecated in v1.16 in favor of apiextensions.k8s.io/v1
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: crontabs.stable.example.com
-spec:
-  group: stable.example.com
-  versions:
-    - name: v1
-      served: true
-      storage: true
-  scope: Namespaced
-  names:
-    plural: crontabs
-    singular: crontab
-    kind: CronTab
-    shortNames:
-    - ct
-  validation:
-    openAPIV3Schema:
-      type: object
-      properties:
-        spec:
-          type: object
-          properties:
-            cronSpec:
-              type: string
-            image:
-              type: string
-            replicas:
-              type: integer
-        status:
-          type: object
-          properties:
-            replicas:
-              type: integer
-            labelSelector:
-              type: string
-  # subresources describes the subresources for custom resources.
-  subresources:
-    # status enables the status subresource.
-    status: {}
-    # scale enables the scale subresource.
-    scale:
-      # specReplicasPath defines the JSONPath inside of a custom resource that corresponds to Scale.Spec.Replicas.
-      specReplicasPath: .spec.replicas
-      # statusReplicasPath defines the JSONPath inside of a custom resource that corresponds to Scale.Status.Replicas.
-      statusReplicasPath: .status.replicas
-      # labelSelectorPath defines the JSONPath inside of a custom resource that corresponds to Scale.Status.Selector.
-      labelSelectorPath: .status.labelSelector
-```
-
-{{% /tab %}}
-{{< /tabs >}}
-
 And create it:
 
 ```shell
@@ -1319,22 +1064,21 @@ kubectl get crontabs my-new-cron-object -o jsonpath='{.spec.replicas}'
 5
 ```
 
-You can use a [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) to protect custom resources that have the scale subresource enabled.
+You can use a [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) to protect custom
+resources that have the scale subresource enabled.
 
 ### Categories
 
+{{< feature-state state="beta" for_k8s_version="v1.10" >}}
+
 Categories is a list of grouped resources the custom resource belongs to (eg. `all`).
 You can use `kubectl get <category-name>` to list the resources belonging to the category.
-This feature is __beta__ and available for custom resources from v1.10.
 
 The following example adds `all` in the list of categories in the CustomResourceDefinition
 and illustrates how to output the custom resource using `kubectl get all`.
 
 Save the following CustomResourceDefinition to `resourcedefinition.yaml`:
 
-{{< tabs name="CustomResourceDefinition_categories" >}}
-{{% tab name="apiextensions.k8s.io/v1" %}}
-
 ```yaml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -1371,50 +1115,7 @@ spec:
     - all
 ```
 
-{{% /tab %}}
-{{% tab name="apiextensions.k8s.io/v1beta1" %}}
-
-```yaml
-# Deprecated in v1.16 in favor of apiextensions.k8s.io/v1
-apiVersion: apiextensions.k8s.io/v1beta1
-kind: CustomResourceDefinition
-metadata:
-  name: crontabs.stable.example.com
-spec:
-  group: stable.example.com
-  versions:
-    - name: v1
-      served: true
-      storage: true
-  validation:
-    openAPIV3Schema:
-      type: object
-      properties:
-        spec:
-          type: object
-          properties:
-            cronSpec:
-              type: string
-            image:
-              type: string
-            replicas:
-              type: integer
-  scope: Namespaced
-  names:
-    plural: crontabs
-    singular: crontab
-    kind: CronTab
-    shortNames:
-    - ct
-    # categories is a list of grouped resources the custom resource belongs to.
-    categories:
-    - all
-```
-
-{{% /tab %}}
-{{< /tabs >}}
-
-And create it:
+and create it:
 
 ```shell
 kubectl apply -f resourcedefinition.yaml
@@ -1457,9 +1158,9 @@ crontabs/my-new-cron-object   3s
 
 ## {{% heading "whatsnext" %}}
 
+* Read about [custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
 
 * See [CustomResourceDefinition](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#customresourcedefinition-v1-apiextensions-k8s-io).
 
 * Serve [multiple versions](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/) of a
   CustomResourceDefinition.
-

From 193edd36cf2bf31043c052598f9a14ef34adec35 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 23 Aug 2020 12:49:31 +0800
Subject: [PATCH 061/496] [zh] Translate
 tasks/manage-kubernetes-objects/kustomization.yaml

---
 .../kustomization.md                          | 1068 +++++++++++++++++
 1 file changed, 1068 insertions(+)
 create mode 100644 content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md

diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
new file mode 100644
index 0000000000..02ce76b4ab
--- /dev/null
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -0,0 +1,1068 @@
+---
+title: 使用 Kustomize 对 Kubernetes 对象进行声明式管理
+content_type: task
+weight: 20
+---
+<!--
+title: Declarative Management of Kubernetes Objects Using Kustomize
+content_type: task
+weight: 20
+-->
+<!-- overview -->
+
+<!--
+[Kustomize](https://github.com/kubernetes-sigs/kustomize) is a standalone tool
+to customize Kubernetes objects
+through a [kustomization file](https://github.com/kubernetes-sigs/kustomize/blob/master/docs/glossary.md#kustomization).
+-->
+[Kustomize](https://github.com/kubernetes-sigs/kustomize) 是一个独立的工具，用来通过
+[kustomization 文件](https://github.com/kubernetes-sigs/kustomize/blob/master/docs/glossary.md#kustomization)
+定制 Kubernetes 对象。
+
+<!--
+Since 1.14, Kubectl also
+supports the management of Kubernetes objects using a kustomization file.
+To view Resources found in a directory containing a kustomization file, run the following command:
+-->
+从 1.14 版本开始，`kubectl` 也开始支持使用 kustomization 文件来管理 Kubernetes 对象。
+要查看包含 kustomization 文件的目录中的资源，执行下面的命令：
+
+```shell
+kubectl kustomize <kustomization_directory>
+```
+
+<!--
+To apply those Resources, run `kubectl apply` with `- -kustomize` or `-k` flag:
+-->
+要应用这些资源，使用参数 `--kustomize` 或 `-k` 标志来执行 `kubectl apply`：
+
+```shell
+kubectl apply -k <kustomization_directory>
+```
+
+## {{% heading "prerequisites" %}}
+
+<!--
+Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+-->
+安装 [`kubectl`](/zh/docs/tasks/tools/install-kubectl/).
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+<!-- steps -->
+
+<!--
+## Overview of Kustomize
+
+Kustomize is a tool for customizing Kubernetes configurations. It has the following features to manage application configuration files:
+
+* generating resources from other sources
+* setting cross-cutting fields for resources
+* composing and customizing collections of resources
+-->
+## Kustomize 概述    {#overview-of-kustomize}
+
+Kustomize 是一个用来定制 Kubernetes 配置的工具。它提供以下功能特性来管理
+应用配置文件：
+
+* 从其他来源生成资源
+* 为资源设置贯穿性（Cross-Cutting）字段
+* 组织和定制资源集合
+
+<!--
+### Generating Resources
+
+ConfigMaps and Secrets hold configuration or sensitive data that are used by other Kubernetes objects, such as Pods. The source of truth of ConfigMaps or Secrets are usually external to a cluster, such as a `.properties` file or an SSH keyfile.
+Kustomize has `secretGenerator` and `configMapGenerator`, which generate Secret and ConfigMap from files or literals.
+-->
+### 生成资源   {#generating-resources}
+
+ConfigMap 和 Secret 包含其他 Kubernetes 对象（如 Pod）所需要的配置或敏感数据。
+ConfigMap 或 Secret 中数据的来源往往是集群外部，例如某个 `.properties`
+文件或者 SSH 密钥文件。
+Kustomize 提供 `secretGenerator` 和 `configMapGenerator`，可以基于文件或字面
+值来生成 Secret 和 ConfigMap。
+
+<!--
+#### configMapGenerator
+
+To generate a ConfigMap from a file, add an entry to the `files` list in `configMapGenerator`. Here is an example of generating a ConfigMap with a data item from a `.properties` file:
+-->
+#### configMapGenerator
+
+要基于文件来生成 ConfigMap，可以在 `configMapGenerator` 的 `files`
+列表中添加表项。
+下面是一个根据 `.properties` 文件中的数据条目来生成 ConfigMap 的示例：
+
+```shell
+# 生成一个  application.properties 文件
+cat <<EOF >application.properties
+FOO=Bar
+EOF
+
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: example-configmap-1
+  files:
+  - application.properties
+EOF
+```
+
+<!--
+The generated ConfigMap can be examined with the following command:
+-->
+所生成的 ConfigMap 可以使用下面的命令来检查：
+
+```shell
+kubectl kustomize ./
+```
+
+<!--
+The generated ConfigMap is:
+-->
+所生成的 ConfigMap 为：
+
+```yaml
+apiVersion: v1
+data:
+  application.properties: |
+    FOO=Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-1-8mbdf7882g
+```
+
+<!--
+ConfigMaps can also be generated from literal key-value pairs. To generate a ConfigMap from a literal key-value pair, add an entry to the `literals` list in configMapGenerator. Here is an example of generating a ConfigMap with a data item from a key-value pair:
+-->
+ConfigMap 也可基于字面的键值偶对来生成。要基于键值偶对来生成 ConfigMap，
+在 `configMapGenerator` 的 `literals` 列表中添加表项。下面是一个例子，展示
+如何使用键值偶对中的数据条目来生成 ConfigMap 对象：
+
+```shell
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: example-configmap-2
+  literals:
+  - FOO=Bar
+EOF
+```
+
+<!--
+The generated ConfigMap can be checked by the following command:
+-->
+可以用下面的命令检查所生成的 ConfigMap：
+
+```shell
+kubectl kustomize ./
+```
+
+<!--
+The generated ConfigMap is:
+-->
+所生成的 ConfigMap 为：
+
+```yaml
+apiVersion: v1
+data:
+  FOO: Bar
+kind: ConfigMap
+metadata:
+  name: example-configmap-2-g2hdhfc6tk
+```
+
+#### secretGenerator
+
+<!--
+You can generate Secrets from files or literal key-value pairs. To generate a Secret from a file, add an entry to the `files` list in `secretGenerator`. Here is an example of generating a Secret with a data item from a file:
+-->
+你可以基于文件或者键值偶对来生成 Secret。要使用文件内容来生成 Secret，
+在 `secretGenerator` 下面的 `files` 列表中添加表项。
+下面是一个根据文件中数据来生成 Secret 对象的示例：
+
+```shell
+# 创建一个 password.txt 文件
+cat <<EOF >./password.txt
+username=admin
+password=secret
+EOF
+
+cat <<EOF >./kustomization.yaml
+secretGenerator:
+- name: example-secret-1
+  files:
+  - password.txt
+EOF
+```
+
+<!--
+The generated Secret is as follows:
+-->
+所生成的 Secret 如下：
+
+```yaml
+apiVersion: v1
+data:
+  password.txt: dXNlcm5hbWU9YWRtaW4KcGFzc3dvcmQ9c2VjcmV0Cg==
+kind: Secret
+metadata:
+  name: example-secret-1-t2kt65hgtb
+type: Opaque
+```
+
+<!--
+To generate a Secret from a literal key-value pair, add an entry to `literals` list in `secretGenerator`. Here is an example of generating a Secret with a data item from a key-value pair:
+-->
+要基于键值偶对字面值生成 Secret，先要在 `secretGenerator` 的 `literals`
+列表中添加表项。下面是基于键值偶对中数据条目来生成 Secret 的示例：
+
+```shell
+cat <<EOF >./kustomization.yaml
+secretGenerator:
+- name: example-secret-2
+  literals:
+  - username=admin
+  - password=secret
+EOF
+```
+
+<!--
+The generated Secret is as follows:
+-->
+所生成的 Secret 如下：
+
+```yaml
+apiVersion: v1
+data:
+  password: c2VjcmV0
+  username: YWRtaW4=
+kind: Secret
+metadata:
+  name: example-secret-2-t52t6g96d8
+type: Opaque
+```
+
+#### generatorOptions
+
+<!--
+The generated ConfigMaps and Secrets have a content hash suffix appended. This ensures that a new ConfigMap or Secret is generated when the contents are changed. To disable the behavior of appending a suffix, one can use `generatorOptions`. Besides that, it is also possible to specify cross-cutting options for generated ConfigMaps and Secrets.
+-->
+所生成的 ConfigMap 和 Secret 都会包含内容哈希值后缀。
+这是为了确保内容发生变化时，所生成的是新的 ConfigMap 或 Secret。
+要禁止自动添加后缀的行为，用户可以使用 `generatorOptions`。
+除此以外，为生成的 ConfigMap 和 Secret 指定贯穿性选项也是可能的。
+
+```shell
+cat <<EOF >./kustomization.yaml
+configMapGenerator:
+- name: example-configmap-3
+  literals:
+  - FOO=Bar
+generatorOptions:
+  disableNameSuffixHash: true
+  labels:
+    type: generated
+  annotations:
+    note: generated
+EOF
+```
+
+<!--
+Run`kubectl kustomize ./` to view the generated ConfigMap:
+-->
+运行 `kubectl kustomize ./` 来查看所生成的 ConfigMap：
+
+```yaml
+apiVersion: v1
+data:
+  FOO: Bar
+kind: ConfigMap
+metadata:
+  annotations:
+    note: generated
+  labels:
+    type: generated
+  name: example-configmap-3
+```
+
+<!--
+### Setting cross-cutting fields
+
+It is quite common to set cross-cutting fields for all Kubernetes resources in a project.
+Some use cases for setting cross-cutting fields:
+
+* setting the same namespace for all Resources
+* adding the same name prefix or suffix
+* adding the same set of labels
+* adding the same set of annotations
+
+Here is an example:
+-->
+### 设置贯穿性字段  {#setting-cross-cutting-fields}
+
+在项目中未所有 Kubernetes 对象设置贯穿性字段是一种常见操作。
+贯穿性字段的一些使用场景如下：
+
+* 为所有资源设置相同的名字空间
+* 为所有对象添加相同的前缀或后缀
+* 为对象添加相同的标签集合
+* 为对象添加相同的注解集合
+
+下面是一个例子：
+
+```shell
+# 创建一个 deployment.yaml
+cat <<EOF >./deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+  labels:
+    app: nginx
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx
+EOF
+
+cat <<EOF >./kustomization.yaml
+namespace: my-namespace
+namePrefix: dev-
+nameSuffix: "-001"
+commonLabels:
+  app: bingo
+commonAnnotations:
+  oncallPager: 800-555-1212
+resources:
+- deployment.yaml
+EOF
+```
+
+<!--
+Run `kubectl kustomize ./` to view those fields are all set in the Deployment Resource:
+-->
+执行 `kubectl kustomize ./` 查看这些字段都被设置到 Deployment 资源上：
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    oncallPager: 800-555-1212
+  labels:
+    app: bingo
+  name: dev-nginx-deployment-001
+  namespace: my-namespace
+spec:
+  selector:
+    matchLabels:
+      app: bingo
+  template:
+    metadata:
+      annotations:
+        oncallPager: 800-555-1212
+      labels:
+        app: bingo
+    spec:
+      containers:
+      - image: nginx
+        name: nginx
+```
+
+<!--
+### Composing and Customizing Resources
+
+It is common to compose a set of Resources in a project and manage them inside
+the same file or directory.
+Kustomize offers composing Resources from different files and applying patches or other customization to them.
+-->
+### 组织和定制资源    {#composing-and-customizing-resources}
+
+一种常见的做法是在项目中构造资源集合并将其放到同一个文件或目录中管理。
+Kustomize 提供基于不同文件来组织资源并向其应用补丁或者其他定制的能力。
+
+<!--
+#### Composing
+
+Kustomize supports composition of different resources. The `resources` field, in the `kustomization.yaml` file, defines the list of resources to include in a configuration. Set the path to a resource's configuration file in the `resources` list.
+Here is an example of an NGINX application comprised of a Deployment and a Service:
+-->
+#### 组织    {#composing}
+
+Kustomize 支持组合不同的资源。`kustomization.yaml` 文件的 `resources` 字段
+定义配置中要包含的资源列表。你可以将 `resources` 列表中的路径设置为资源配置文件
+的路径。下面是由 Deployment 和 Service 构成的 NGINX 应用的示例：
+
+
+```shell
+# 创建 deployment.yaml 文件
+cat <<EOF > deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+        ports:
+        - containerPort: 80
+EOF
+
+# 创建 service.yaml 文件
+cat <<EOF > service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: my-nginx
+  labels:
+    run: my-nginx
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+  selector:
+    run: my-nginx
+EOF
+
+# 创建 kustomization.yaml 来组织以上两个资源
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+- service.yaml
+EOF
+```
+
+<!--
+The Resources from `kubectl kustomize ./` contain both the Deployment and the Service objects.
+-->
+`kubectl kustomize ./` 所得到的资源中既包含 Deployment 也包含 Service 对象。
+
+<!--
+#### Customizing
+
+Patches can be used to apply different customizations to Resources. Kustomize supports different patching
+mechanisms through `patchesStrategicMerge` and `patchesJson6902`. `patchesStrategicMerge` is a list of file paths. Each file should be resolved to a [strategic merge patch](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md). The names inside the patches must match Resource names that are already loaded. Small patches that do one thing are recommended. For example, create one patch for increasing the deployment replica number and another patch for setting the memory limit.
+-->
+#### 定制   {#customizing}
+
+补丁文件（Patches）可以用来对资源执行不同的定制。
+Kustomize 通过 `patchesStrategicMerge` 和 `patchesJson6902` 支持不同的打补丁
+机制。`patchesStrategicMerge` 的内容是一个文件路径的列表，其中每个文件都应可解析为
+[策略性合并补丁（Strategic Merge Patch）](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-api-machinery/strategic-merge-patch.md)。
+补丁文件中的名称必须与已经加载的资源的名称匹配。
+建议构造规模较小的、仅做一件事情的补丁。
+例如，构造一个补丁来增加 Deployment
+的副本个数；构造另外一个补丁来设置内存限制。
+
+```shell
+# 创建 deployment.yaml 文件
+cat <<EOF > deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+        ports:
+        - containerPort: 80
+EOF
+
+# 生成一个补丁 increase_replicas.yaml
+cat <<EOF > increase_replicas.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  replicas: 3
+EOF
+
+# 生成另一个补丁 set_memory.yaml
+cat <<EOF > set_memory.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  template:
+    spec:
+      containers:
+      - name: my-nginx
+        resources:
+        limits:
+          memory: 512Mi
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+patchesStrategicMerge:
+- increase_replicas.yaml
+- set_memory.yaml
+EOF
+```
+
+<!--
+Run `kubectl kustomize ./` to view the Deployment:
+-->
+执行 `kubectl kustomize ./` 来查看 Deployment：
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      run: my-nginx
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - image: nginx
+        limits:
+          memory: 512Mi
+        name: my-nginx
+        ports:
+        - containerPort: 80
+```
+
+<!--
+Not all Resources or fields support strategic merge patches. To support modifying arbitrary fields in arbitrary Resources,
+Kustomize offers applying [JSON patch](https://tools.ietf.org/html/rfc6902) through `patchesJson6902`.
+To find the correct Resource for a Json patch, the group, version, kind and name of that Resource need to be
+specified in `kustomization.yaml`. For example, increasing the replica number of a Deployment object can also be done
+through `patchesJson6902`.
+-->
+并非所有资源或者字段都支持策略性合并补丁。为了支持对任何资源的任何字段进行修改，
+Kustomize 提供通过 `patchesJson6902` 来应用 [JSON 补丁](https://tools.ietf.org/html/rfc6902)
+的能力。为了给 JSON 补丁找到正确的资源，需要在 `kustomization.yaml` 文件中指定资源的
+组（group）、版本（version）、类别（kind）和名称（name）。
+例如，为某 Deployment 对象增加副本个数的操作也可以通过 `patchesJson6902`
+来完成：
+
+```shell
+# 创建一个 deployment.yaml 文件
+cat <<EOF > deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+        ports:
+        - containerPort: 80
+EOF
+
+# 创建一个 JSON 补丁文件
+cat <<EOF > patch.yaml
+- op: replace
+  path: /spec/replicas
+  value: 3
+EOF
+
+# 创建一个 kustomization.yaml
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+
+patchesJson6902:
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: my-nginx
+  path: patch.yaml
+EOF
+```
+
+<!--
+Run `kubectl kustomize ./` to see the `replicas` field is updated:
+-->
+执行 `kubectl kustomize ./` 以查看 `replicas` 字段被更新：
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      run: my-nginx
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - image: nginx
+        name: my-nginx
+        ports:
+        - containerPort: 80
+```
+
+<!--
+In addition to patches, Kustomize also offers customizing container images or injecting field values from other objects into containers
+without creating patches. For example, you can change the image used inside containers by specifying the new image in `images` field in `kustomization.yaml`.
+-->
+除了补丁之外，Kustomize 还提供定制容器镜像或者将其他对象的字段值注入到容器
+中的能力，并且不需要创建补丁。
+例如，你可以通过在 `kustomization.yaml` 文件的 `images` 字段设置新的镜像来
+更改容器中使用的镜像。
+
+```shell
+cat <<EOF > deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+        ports:
+        - containerPort: 80
+EOF
+
+cat <<EOF >./kustomization.yaml
+resources:
+- deployment.yaml
+images:
+- name: nginx
+  newName: my.image.registry/nginx
+  newTag: 1.4.0
+EOF
+```
+
+<!--
+Run `kubectl kustomize ./` to see that the image being used is updated:
+-->
+执行 `kubectl kustomize ./` 以查看所使用的镜像已被更新：
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      run: my-nginx
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - image: my.image.registry/nginx:1.4.0
+        name: my-nginx
+        ports:
+        - containerPort: 80
+```
+
+<!--
+Sometimes, the application running in a Pod may need to use configuration values from other objects. For example,
+a Pod from a Deployment object need to read the corresponding Service name from Env or as a command argument.
+Since the Service name may change as `namePrefix` or `nameSuffix` is added in the `kustomization.yaml` file. It is
+not recommended to hard code the Service name in the command argument. For this usage, Kustomize can inject the Service name into containers through `vars`.
+-->
+有些时候，Pod 中运行的应用可能需要使用来自其他对象的配置值。
+例如，某 Deployment 对象的 Pod 需要从环境变量或命令行参数中读取读取
+Service 的名称。
+由于在 `kustomization.yaml` 文件中添加 `namePrefix` 或 `nameSuffix` 时
+Service 名称可能发生变化，建议不要在命令参数中硬编码 Service 名称。
+对于这种使用场景，Kustomize 可以通过 `vars` 将 Service 名称注入到容器中。
+
+```shell
+# 创建一个 deployment.yaml 文件
+cat <<EOF > deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+        command: ["start", "--host", "\$(MY_SERVICE_NAME)"]
+EOF
+
+# 创建一个 service.yaml 文件
+cat <<EOF > service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: my-nginx
+  labels:
+    run: my-nginx
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+  selector:
+    run: my-nginx
+EOF
+
+cat <<EOF >./kustomization.yaml
+namePrefix: dev-
+nameSuffix: "-001"
+
+resources:
+- deployment.yaml
+- service.yaml
+
+vars:
+- name: MY_SERVICE_NAME
+  objref:
+    kind: Service
+    name: my-nginx
+    apiVersion: v1
+EOF
+```
+
+<!--
+Run `kubectl kustomize ./` to see that the Service name injected into containers is `dev-my-nginx-001`:
+-->
+执行 `kubectl kustomize ./` 以查看注入到容器中的 Service 名称是 `dev-my-nginx-001`：
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dev-my-nginx-001
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      run: my-nginx
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - command:
+        - start
+        - --host
+        - dev-my-nginx-001
+        image: nginx
+        name: my-nginx
+```
+
+<!--
+## Bases and Overlays
+
+Kustomize has the concepts of **bases** and **overlays**. A **base** is a directory with a `kustomization.yaml`, which contains a
+set of resources and associated customization. A base could be either a local directory or a directory from a remote repo,
+as long as a `kustomization.yaml` is present inside. An **overlay** is a directory with a `kustomization.yaml` that refers to other
+kustomization directories as its `bases`. A **base** has no knowledge of an overlay and can be used in multiple overlays.
+An overlay may have multiple bases and it composes all resources
+from bases and may also have customization on top of them.
+
+Here is an example of a base:
+-->
+## 基准（Bases）与覆盖（Overlays）
+
+Kustomize 中有 **基准（bases）** 和 **覆盖（overlays）** 的概念区分。
+**基准** 是包含 `kustomization.yaml` 文件的一个目录，其中包含一组资源及其相关的定制。
+基准可以是本地目录或者来自远程仓库的目录，只要其中存在 `kustomization.yaml` 文件即可。
+**覆盖** 也是一个目录，其中包含将其他 kustomization 目录当做 `bases` 来引用的
+`kustomization.yaml` 文件。
+**基准**不了解覆盖的存在，且可被多个覆盖所使用。
+覆盖则可以有多个基准，且可针对所有基准中的资源执行组织操作，还可以在其上执行定制。
+
+```shell
+# 创建一个包含基准的目录 
+mkdir base
+# 创建 base/deployment.yaml
+cat <<EOF > base/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+EOF
+
+# 创建 base/service.yaml 文件
+cat <<EOF > base/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: my-nginx
+  labels:
+    run: my-nginx
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+  selector:
+    run: my-nginx
+EOF
+
+# 创建 base/kustomization.yaml
+cat <<EOF > base/kustomization.yaml
+resources:
+- deployment.yaml
+- service.yaml
+EOF
+```
+
+<!--
+This base can be used in multiple overlays. You can add different `namePrefix` or other cross-cutting fields
+in different overlays. Here are two overlays using the same base.
+-->
+此基准可在多个覆盖中使用。你可以在不同的覆盖中添加不同送的 `namePrefix` 或
+其他贯穿性字段。下面是两个使用同一基准的覆盖：
+
+```shell
+mkdir dev
+cat <<EOF > dev/kustomization.yaml
+bases:
+- ../base
+namePrefix: dev-
+EOF
+
+mkdir prod
+cat <<EOF > prod/kustomization.yaml
+bases:
+- ../base
+namePrefix: prod-
+EOF
+```
+
+<!--
+## How to apply/view/delete objects using Kustomize
+
+Use `-kustomize` or `-k` in `kubectl` commands to recognize Resources managed by `kustomization.yaml`.
+Note that `-k` should point to a kustomization directory, such as
+-->
+## 如何使用 Kustomize 来应用、查看和删除对象
+
+在 `kubectl` 命令中使用 `--kustomize` 或 `-k` 参数来识别被 `kustomization.yaml` 所管理的资源。
+注意 `-k` 要指向一个 kustomization 目录。例如：
+
+```shell
+kubectl apply -k <kustomization 目录>/
+```
+
+<!--
+Given the following `kustomization.yaml`,
+-->
+假定使用下面的 `kustomization.yaml`，
+
+```shell
+# 创建 deployment.yaml 文件
+cat <<EOF > deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: my-nginx
+spec:
+  selector:
+    matchLabels:
+      run: my-nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        run: my-nginx
+    spec:
+      containers:
+      - name: my-nginx
+        image: nginx
+        ports:
+        - containerPort: 80
+EOF
+
+# 创建 kustomization.yaml
+cat <<EOF >./kustomization.yaml
+namePrefix: dev-
+commonLabels:
+  app: my-nginx
+resources:
+- deployment.yaml
+EOF
+```
+
+<!--
+Run the following command to apply the Deployment object `dev-my-nginx`:
+-->
+执行下面的命令来应用 Deployment 对象 `dev-my-nginx`：
+
+```shell
+kubectl apply -k ./
+```
+```
+deployment.apps/dev-my-nginx created
+```
+
+<!--
+Run one of the following commands to view the Deployment object `dev-my-nginx`:
+-->
+运行下面的命令之一来查看 Deployment 对象 `dev-my-nginx`：
+
+```shell
+kubectl get -k ./
+```
+
+```shell
+kubectl describe -k ./
+```
+
+<!--
+Run the following command to compare the Deployment object `dev-my-nginx` against the state that the cluster would be in if the manifest was applied:
+-->
+执行下面的命令来比较 Deployment 对象 `dev-my-nginx` 与清单被应用之后
+集群将处于的状态：
+
+```shell
+kubectl diff -k ./
+```
+
+<!--
+Run the following command to delete the Deployment object `dev-my-nginx`:
+-->
+执行下面的命令删除 Deployment 对象 `dev-my-nginx`：
+
+```shell
+kubectl delete -k ./
+```
+```
+deployment.apps "dev-my-nginx" deleted
+```
+
+<!--
+## Kustomize Feature List
+-->
+## Kustomize 功能特性列表
+
+<!--
+| Field                 | Type                                                                                                         | Explanation                                                                        |
+|-----------------------|--------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------|
+| namespace             | string                                                                                                       | add namespace to all resources                                                     |
+| namePrefix            | string                                                                                                       | value of this field is prepended to the names of all resources                     |
+| nameSuffix            | string                                                                                                       | value of this field is appended to the names of all resources                      |
+| commonLabels          | map[string]string                                                                                            | labels to add to all resources and selectors                                       |
+| commonAnnotations     | map[string]string                                                                                            | annotations to add to all resources                                                |
+| resources             | []string                                                                                                     | each entry in this list must resolve to an existing resource configuration file    |
+| configmapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L99)  | Each entry in this list generates a ConfigMap                                      |
+| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L106)     | Each entry in this list generates a Secret                                         |
+| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L109) | Modify behaviors of all ConfigMap and Secret generator                             |
+| bases                 | []string                                                                                                     | Each entry in this list should resolve to a directory containing a kustomization.yaml file |
+| patchesStrategicMerge | []string                                                                                                     | Each entry in this list should resolve a strategic merge patch of a Kubernetes object |
+| patchesJson6902       | [][Json6902](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/patchjson6902.go#L8)             | Each entry in this list should resolve to a Kubernetes object and a Json Patch     |
+| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L31)                       | Each entry is to capture text from one resource's field                            |
+| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go#L23)                   | Each entry is to modify the name, tags and/or digest for one image without creating patches |
+| configurations        | []string                                                                                                     | Each entry in this list should resolve to a file containing [Kustomize transformer configurations](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs) |
+| crds                  | []string                                                                                                     | Each entry in this list should resolve to an OpenAPI definition file for Kubernetes types |
+-->
+
+| 字段                  | 类型                                                                                                         | 解释                                                                               |
+|-----------------------|--------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------|
+| namespace             | string                                                                                                       | 为所有资源添加名字看                                                     |
+| namePrefix            | string                                                                                                       | 此字段的值将被添加到所有资源名称前面                     |
+| nameSuffix            | string                                                                                                       | 此字段的值将被添加到所有资源名称后面                      |
+| commonLabels          | map[string]string                                                                                            | 要添加到所有资源和选择算符的标签                                       |
+| commonAnnotations     | map[string]string                                                                                            | 要添加到所有资源的注解                                                |
+| resources             | []string                                                                                                     | 列表中的每个条目都必须能够解析为现有的资源配置文件    |
+| configmapGenerator    | [][ConfigMapArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L99)  | 列表中的每个条目都会生成一个 ConfigMap                                      |
+| secretGenerator       | [][SecretArgs](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L106)     | 列表中的每个条目都会生成一个 Secret                                         |
+| generatorOptions      | [GeneratorOptions](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/kustomization.go#L109) | 更改所有 ConfigMap 和 Secret 生成器的行为 |
+| bases                 | []string                                                                                                     | 列表中每个条目都应能解析为一个包含 kustomization.yaml 文件的目录 |
+| patchesStrategicMerge | []string                                                                                                     | 列表中每个条目都赢能解析为某 Kubernetes 对象的策略性合并补丁 |
+| patchesJson6902       | [][Json6902](https://github.com/kubernetes-sigs/kustomize/blob/release-kustomize-v4.0/api/types/patchjson6902.go#L8)             | 列表中每个条目都赢能解析为一个 Kubernetes 对象和一个 JSON 补丁 |
+| vars                  | [][Var](https://github.com/kubernetes-sigs/kustomize/blob/master/api/types/var.go#L31)                       | 每个条目用来从某资源的字段来析取文字                            |
+| images                | [][Image](https://github.com/kubernetes-sigs/kustomize/tree/master/api/types/image.go#L23)                   | 每个条目都用来更改镜像的名称、标记与/或摘要，不必生成补丁 |
+| configurations        | []string                                                                                                     | 列表中每个条目都应能解析为一个包含 [Kustomize 转换器配置](https://github.com/kubernetes-sigs/kustomize/tree/master/examples/transformerconfigs) 的文件 |
+| crds                  | []string                                                                                                     | 列表中每个条目都赢能够解析为 Kubernetes 类别的 OpenAPI 定义文件 |
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* [Kustomize](https://github.com/kubernetes-sigs/kustomize)
+* [Kubectl Book](https://kubectl.docs.kubernetes.io)
+* [Kubectl Command Reference](/docs/reference/generated/kubectl/kubectl-commands/)
+* [Kubernetes API Reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+-->
+* [Kustomize](https://github.com/kubernetes-sigs/kustomize)
+* [Kubectl Book](https://kubectl.docs.kubernetes.io)
+* [Kubectl 命令参考](/docs/reference/generated/kubectl/kubectl-commands/)
+* [Kubernetes API 参考](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+

From a79a5575786c8b0410741a88938356ae989e8f30 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 23 Aug 2020 16:40:31 +0800
Subject: [PATCH 062/496] [zh] Translate
 concepts/configuration/pod-priority-preemption.md

---
 .../configuration/pod-priority-preemption.md  | 734 ++++++++++++++++++
 1 file changed, 734 insertions(+)
 create mode 100644 content/zh/docs/concepts/configuration/pod-priority-preemption.md

diff --git a/content/zh/docs/concepts/configuration/pod-priority-preemption.md b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
new file mode 100644
index 0000000000..885db86cb7
--- /dev/null
+++ b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
@@ -0,0 +1,734 @@
+---
+title: Pod 优先级与抢占
+content_type: concept
+weight: 70
+---
+<!--
+reviewers:
+- davidopp
+- wojtek-t
+title: Pod Priority and Preemption
+content_type: concept
+weight: 70
+-->
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.14" state="stable" >}}
+
+<!--
+[Pods](/docs/concepts/workloads/pods/pod/) can have _priority_. Priority indicates the
+importance of a Pod relative to other Pods. If a Pod cannot be scheduled, the
+scheduler tries to preempt (evict) lower priority Pods to make scheduling of the
+pending Pod possible.
+-->
+[Pods](/zh/docs/concepts/workloads/pods/pod/) 可以有*优先级（Priority）*。
+优先级体现的是当前 Pod 与其他 Pod 相比的重要成都。如果 Pod 无法被调度，则
+调度器会尝试抢占（逐出）低优先级的 Pod，从而是的悬决的 Pod 可被调度。
+
+<!-- body -->
+
+<!--
+In a cluster where not all users are trusted, a malicious user could create Pods
+at the highest possible priorities, causing other Pods to be evicted/not get
+scheduled.
+An administrator can use ResourceQuota to prevent users from creating pods at
+high priorities.
+
+See [limit Priority Class consumption by default](/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+for details.
+-->
+{{< warning >}}
+在一个并非所有用户都可信任的集群中，一个有恶意的用户可能创建优先级最高的
+Pod，从而导致其他 Pod 被逐出或者无法调度。
+管理员可以使用 ResourceQuota 来避免用户创建高优先级的 Pod。
+
+参考[限制默认使用的优先级类](/zh/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+以了解更多细节。
+{{< /warning >}}
+
+<!--
+## How to use priority and preemption
+
+To use priority and preemption:
+
+1.  Add one or more [PriorityClasses](#priorityclass).
+
+1.  Create Pods with[`priorityClassName`](#pod-priority) set to one of the added
+    PriorityClasses. Of course you do not need to create the Pods directly;
+    normally you would add `priorityClassName` to the Pod template of a
+    collection object like a Deployment.
+
+Keep reading for more information about these steps.
+-->
+## 如果使用优先级和抢占
+
+要使用优先级和抢占特性：
+
+1.  添加一个或多个 [PriorityClasses](#priorityclass) 对象
+
+1.  创建 Pod 时设置其 [`priorityClassName`](#pod-priority) 为所添加的 PriorityClass 之一。
+    当然你也不必一定要直接创建 Pod；通常你会在一个集合对象（如 Deployment）的 Pod
+    模板中添加 `priorityClassName`。
+
+关于这些步骤的详细信息，请继续阅读。
+
+<!--
+Kubernetes already ships with two PriorityClasses:
+`system-cluster-critical` and `system-node-critical`.
+These are common classes and are used to [ensure that critical components are always scheduled first](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/).
+-->
+{{< note >}}
+Kubernetes 发行时已经带有两个 PriorityClasses：`system-cluster-critical` 和 `system-node-critical`。
+这些优先级类是公共的，用来
+[确保关键组件总是能够先被调度](/zh/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/).
+{{< /note >}}
+
+<!--
+## How to disable preemption
+-->
+## 如何禁用抢占   {#how-to-disable-preemption}
+
+<!--
+Critical pods rely on scheduler preemption to be scheduled when a cluster
+is under resource pressure. For this reason, it is not recommended to
+disable preemption.
+-->
+{{< caution >}}
+关键 Pod 依赖调度器抢占机制以在集群资源压力较大时得到调度。
+因此，不建议禁用抢占。
+{{< /caution >}}
+
+<!--
+In Kubernetes 1.15 and later, if the feature `NonPreemptingPriority` is enabled,
+PriorityClasses have the option to set `preemptionPolicy: Never`.
+This will prevent pods of that PriorityClass from preempting other pods.
+-->
+{{< note >}}
+在 Kubernetes 1.15 及之后版本中，如果特性门控 `NonPreemptingPriority` 被启用，
+则 PriorityClass 对象可以选择设置 `preemptionPolicy: Never`。
+这样就会避免属于该 PriorityClass 的 Pod 抢占其他 Pod。
+{{< /note >}}
+
+<!--
+Preemption is controlled by a kube-scheduler flag `disablePreemption`, which is
+set to `false` by default.
+If you want to disable preemption despite the above note, you can set
+`disablePreemption` to `true`.
+
+This option is available in component configs only and is not available in
+old-style command line options. Below is a sample component config to disable
+preemption:
+-->
+抢占能力是通过 `kube-scheduler` 的标志 `disablePreemption`
+来控制的，该标志默认为 `false`。
+如果你在了解上述提示的前提下仍希望禁用抢占，可以将 `disablePreemption`
+设置为`true`。
+
+这一选项只能通过组件配置来设置，无法通过命令行选项这种较老的形式设置。
+下面是禁用抢占的组件配置示例：
+
+```yaml
+apiVersion: kubescheduler.config.k8s.io/v1alpha1
+kind: KubeSchedulerConfiguration
+algorithmSource:
+  provider: DefaultProvider
+
+...
+
+disablePreemption: true
+```
+
+## PriorityClass
+
+<!--
+A PriorityClass is a non-namespaced object that defines a mapping from a
+priority class name to the integer value of the priority. The name is specified
+in the `name` field of the PriorityClass object's metadata. The value is
+specified in the required `value` field. The higher the value, the higher the
+priority.
+The name of a PriorityClass object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names),
+and it cannot be prefixed with `system-`.
+-->
+PriorityClass 是一种不属于任何名字空间的对象，定义的是从优先级类名向优先级整数值的映射。
+优先级类名称用 PriorityClass 对象的元数据的 `name` 字段指定。
+优先级整数值在必须提供的 `value` 字段中指定。
+优先级值越大，优先级越高。
+PriorityClass 对象的名称必须是合法的
+[DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)
+且不可包含 `system-` 前缀。
+
+<!--
+A PriorityClass object can have any 32-bit integer value smaller than or equal
+to 1 billion. Larger numbers are reserved for critical system Pods that should
+not normally be preempted or evicted. A cluster admin should create one
+PriorityClass object for each such mapping that they want.
+-->
+PriorityClass 对象可以设置数值小于等于 10 亿的 32 位整数。
+更大的数值保留给那些通常不可被抢占或逐出的系统 Pod。
+集群管理员应该为每个优先级值映射创建一个 PriorityClass 对象。
+
+<!--
+PriorityClass also has two optional fields: `globalDefault` and `description`.
+The `globalDefault` field indicates that the value of this PriorityClass should
+be used for Pods without a `priorityClassName`. Only one PriorityClass with
+`globalDefault` set to true can exist in the system. If there is no
+PriorityClass with `globalDefault` set, the priority of Pods with no
+`priorityClassName` is zero.
+
+The `description` field is an arbitrary string. It is meant to tell users of the
+cluster when they should use this PriorityClass.
+-->
+PriorityClass 对象还有两个可选字段：`globalDefault` 和 `description`。
+前者用来表明此 PriorityClass 的数值应该用于未设置 `priorityClassName` 的 Pod。
+系统中只能存在一个 `globalDefault` 设为真的 PriorityClass 对象。
+如果没有 PriorityClass 对象的 `globalDefault` 被设置，则未设置
+`priorityClassName` 的 Pod 的优先级为 0。
+
+`description` 字段可以设置任意字符串值。其目的是告诉用户何时该使用该
+PriorityClass。
+
+<!--
+### Notes about PodPriority and existing clusters
+
+-   If you upgrade an existing cluster without this feature, the priority
+    of your existing Pods is effectively zero.
+
+-   Addition of a PriorityClass with `globalDefault` set to `true` does not
+    change the priorities of existing Pods. The value of such a PriorityClass is
+    used only for Pods created after the PriorityClass is added.
+
+-   If you delete a PriorityClass, existing Pods that use the name of the
+    deleted PriorityClass remain unchanged, but you cannot create more Pods that
+    use the name of the deleted PriorityClass.
+-->
+### 关于 Pod 优先级与现有集群的说明
+
+- 如果你要升级一个不支持 Pod 优先级的集群，现有 Pod 的有效优先级都被视为 0。
+
+- 向集群中添加 `globalDefault` 设置为 `true` 的 PriorityClass 不会改变现有
+  Pod 的优先级。新添加的 PriorityClass 值仅适用于 PriorityClass 被添加之后
+  新建的 Pod。
+
+- 如果你要删除 PriorityClass，则使用所删除的 PriorityClass 名称的现有 Pod 都
+  不会受影响，但是你不可以再创建使用该 PriorityClass 名称的新 Pod。
+
+<!--
+### Example PriorityClass
+-->
+### PriorityClass 示例
+
+```yaml
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: high-priority
+value: 1000000
+globalDefault: false
+description: "This priority class should be used for XYZ service pods only."
+```
+
+<!--
+## Non-preempting PriorityClass {#non-preempting-priority-class}
+-->
+## 非抢占式的 PriorityClass      {#non-preempting-priority-class}
+
+{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+
+<!--
+Pods with `PreemptionPolicy: Never` will be placed in the scheduling queue
+ahead of lower-priority pods, but they cannot preempt other pods.  A
+non-preempting pod waiting to be scheduled will stay in the scheduling queue,
+until sufficient resources are free, and it can be scheduled.  Non-preempting
+pods, like other pods, are subject to scheduler back-off.  This means that if
+the scheduler tries these pods and they cannot be scheduled, they will be
+retried with lower frequency, allowing other pods with lower priority to be
+scheduled before them.
+-->
+配置 `preemptionPolicy: Never` 的 Pod 在调度队列中会被放在低优先级的 Pod
+的前面，但是它们不可以抢占其他 Pod。
+非抢占 Pod 会在调度队列中等待调度，直到有足够空闲资源时才被调度。
+非抢占 Pod 与其他 Pod 一样，也受调度器回退（Back-off）机制影响。
+换言之，如果调度器尝试调度这些 Pod 时发现它们无法调度，它们会被再次尝试，并且
+重试的频率会被降低，这样可以使得其他优先级较低的 Pod 有机会在它们之前被调度。
+
+<!--
+Non-preempting pods may still be preempted by other,
+high-priority pods.
+
+`PreemptionPolicy` defaults to `PreemptLowerPriority`,
+which will allow pods of that PriorityClass to preempt lower-priority pods
+(as is existing default behavior).
+If `PreemptionPolicy` is set to `Never`,
+pods in that PriorityClass will be non-preempting.
+-->
+非抢占 Pod 仍有可能被其他高优先级的 Pod 抢占。
+
+`preemptionPolicy` 默认取值为 `PreemptLowerPriority`，这会使得该 PriorityClass
+的 Pod 能够抢占低优先级的 Pod（这也是当前的默认行为）。
+如果 `preemptionPolicy` 被设置为 `Never`，则该 PriorityClass 下的 Pod 都是非抢占的。
+
+<!--
+The use of the `PreemptionPolicy` field requires the `NonPreemptingPriority`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+to be enabled.
+
+An example use case is for data science workloads.
+A user may submit a job that they want to be prioritized above other workloads,
+but do not wish to discard existing work by preempting running pods.
+The high priority job with `PreemptionPolicy: Never` will be scheduled
+ahead of other queued pods,
+as soon as sufficient cluster resources "naturally" become free.
+-->
+使用 `preemptionPolicy` 字段要求启用 `NonPreemptingPriority` 
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+
+一种示例应用场景是数据科学负载。
+用户可能希望所提交的 Job 比其他负载的优先级都高，但又不希望因为抢占运行中的
+Pod 而丢弃现有工作。
+只要集群中"自然地"释放出足够的资源，配置了 `preemptionPolicy: Never`
+的高优先级 Job 可以在队列中其他 Pod 之前获得调度机会。
+
+<!--
+### Example Non-preempting PriorityClass
+-->
+### 非抢占 PriorityClass 示例
+
+```yaml
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: high-priority-nonpreempting
+value: 1000000
+preemptionPolicy: Never
+globalDefault: false
+description: "This priority class will not cause other pods to be preempted."
+```
+
+<!--
+## Pod priority
+
+After you have one or more PriorityClasses, you can create Pods that specify one
+of those PriorityClass names in their specifications. The priority admission
+controller uses the `priorityClassName` field and populates the integer value of
+the priority. If the priority class is not found, the Pod is rejected.
+
+The following YAML is an example of a Pod configuration that uses the
+PriorityClass created in the preceding example. The priority admission
+controller checks the specification and resolves the priority of the Pod to
+1000000.
+-->
+## Pod 优先级   {#pod-priority}
+
+在已经创建了一个或多个 PriorityClass 对象之后，你就可以创建 Pod 并在其规约中
+指定这些 PriorityClass 的名字之一。优先级准入控制器使用 `priorityClassName`
+字段来填充优先级整数值。如果所指定优先级类不存在，则 Pod 被拒绝。
+
+下面的 YAML 是一个 Pod 配置，使用了前面例子中创建的 PriorityClass。
+优先级准入控制器检查 Pod  的规约并将 Pod 优先级解析为 1000000。
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: nginx
+  labels:
+    env: test
+spec:
+  containers:
+  - name: nginx
+    image: nginx
+    imagePullPolicy: IfNotPresent
+  priorityClassName: high-priority
+```
+
+<!--
+### Effect of Pod priority on scheduling order
+
+When Pod priority is enabled, the scheduler orders pending Pods by
+their priority and a pending Pod is placed ahead of other pending Pods
+with lower priority in the scheduling queue. As a result, the higher
+priority Pod may be scheduled sooner than Pods with lower priority if
+its scheduling requirements are met. If such Pod cannot be scheduled,
+scheduler will continue and tries to schedule other lower priority Pods.
+-->
+### 优先级对 Pod 调度顺序的影响
+
+当集群启用了 Pod 优先级时，调度器会基于 Pod 的优先级来排序悬决的 Pod。
+新 Pod 会被放在调度队列中较低优先级的其他悬决 Pod 前面。
+因此，优先级较高的 Pod 在其调度需求被满足的前提下会比优先级低的 Pod 先被调度。
+如果优先级较高的 Pod 无法被调度，调度器会继续尝试调度其他较低优先级的 Pod。
+
+<!--
+## Preemption
+
+When Pods are created, they go to a queue and wait to be scheduled. The
+scheduler picks a Pod from the queue and tries to schedule it on a Node. If no
+Node is found that satisfies all the specified requirements of the Pod,
+preemption logic is triggered for the pending Pod. Let's call the pending Pod P.
+Preemption logic tries to find a Node where removal of one or more Pods with
+lower priority than P would enable P to be scheduled on that Node. If such a
+Node is found, one or more lower priority Pods get evicted from the Node. After
+the Pods are gone, P can be scheduled on the Node.
+-->
+## 抢占   {#preemption}
+
+Pod 被创建时会被放入一个队列中等待调度。调度器从队列中选择 Pod，尝试将其调度到某 Node 上。
+如果找不到能够满足 Pod 所设置需求的 Node，就会触发悬决 Pod 的抢占逻辑。
+假定 P 是悬决的 Pod，抢占逻辑会尝试找到一个这样的节点，在该节点上移除一个或者多个
+优先级比 P 低的 Pod 后，P 就可以被调度到丐姐点。如果调度器能够找到这样的节点，
+该节点上的一个或者多个优先级较低的 Pod 就会被逐出。当被逐出的 Pod 从该节点上
+消失时，P 就可以调度到此节点。
+
+<!--
+### User exposed information
+
+When Pod P preempts one or more Pods on Node N, `nominatedNodeName` field of Pod
+P's status is set to the name of Node N. This field helps scheduler track
+resources reserved for Pod P and also gives users information about preemptions
+in their clusters.
+-->
+### 暴露给用户的信息    {#user-exposed-information}
+
+当 Pod P 在节点 N 上抢占了一个或多个 Pod 时，Pod P 的状态中的`nominatedNodeName` 字段
+会被设置为节点 N 的名字。此字段有助于调度器跟踪为 P
+所预留的资源，同时也给用户提供了其集群中发生的抢占的信息。
+
+<!--
+Please note that Pod P is not necessarily scheduled to the "nominated Node".
+After victim Pods are preempted, they get their graceful termination period. If
+another node becomes available while scheduler is waiting for the victim Pods to
+terminate, scheduler will use the other node to schedule Pod P. As a result
+`nominatedNodeName` and `nodeName` of Pod spec are not always the same. Also, if
+scheduler preempts Pods on Node N, but then a higher priority Pod than Pod P
+arrives, scheduler may give Node N to the new higher priority Pod. In such a
+case, scheduler clears `nominatedNodeName` of Pod P. By doing this, scheduler
+makes Pod P eligible to preempt Pods on another Node.
+-->
+请注意，Pod P 不一定会被调度到其 "nominated node（提名节点）"。
+当选定的 Pod 被抢占时，它们都会有其体面终止时限（Graceful Termination Period）。
+如果在调度器等待选定的（被牺牲的）Pod 终止期间有新的节点可用，调度器会使用其他
+节点来调度 Pod P。因此，Pod 中的 `nominatedNodeName` 和 `nodeName` 并不总是相同。
+此外，如果调度器抢占了节点 N 上的 Pod，但接下来出现优先级比 P 还高的 Pod 要被
+调度，则调度器会把节点 N 让给新的优先级更高的 Pod。如果发生了这种情况，调度器
+会清除 Pod P 的 `nominatedNodeName`。通过清除操作，调度器使得 Pod P 可以尝试
+抢占别的节点上的 Pod。
+
+<!--
+### Limitations of preemption
+
+#### Graceful termination of preemption victims
+
+When Pods are preempted, the victims get their
+[graceful termination period](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination).
+They have that much time to finish their work and exit. If they don't, they are
+killed. This graceful termination period creates a time gap between the point
+that the scheduler preempts Pods and the time when the pending Pod (P) can be
+scheduled on the Node (N). In the meantime, the scheduler keeps scheduling other
+pending Pods. As victims exit or get terminated, the scheduler tries to schedule
+Pods in the pending queue. Therefore, there is usually a time gap between the
+point that scheduler preempts victims and the time that Pod P is scheduled. In
+order to minimize this gap, one can set graceful termination period of lower
+priority Pods to zero or a small number.
+-->
+### 抢占的局限性   {#limitations-of-preemption}
+
+#### 抢占牺牲者的体面终止期限
+
+当 Pod 被抢占时，做出牺牲的 Pod 仍有各自的
+[体面终止期限](/zh/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)。
+这些 Pod 可以在给定的期限内结束其工作并退出。如果它们不能及时退出则会被杀死。
+这一体面终止期限带来了一个时间空隙，跨度从调度器开始抢占 Pod 的那一刻到悬决 Pod
+（P）可以被调度到节点（N）上的那一刻。
+与此同时，调度器还要继续调度其他悬决的 Pod。
+随着被抢占的 Pod 退出或终止，调度器尝试继续尝试调度悬决队列中的 Pod。
+因此，从调度器抢占被牺牲的 Pod 到 Pod P 被调度，中间通常存在一个时间间隔。
+为了缩短此时间间隔，用户可以将低优先级的 Pod 的体面终止期限设置为 0
+或者较小的数字。
+
+<!--
+#### PodDisruptionBudget is supported, but not guaranteed
+
+A [PodDisruptionBudget](/docs/concepts/workloads/pods/disruptions/) (PDB)
+allows application owners to limit the number of Pods of a replicated application
+that are down simultaneously from voluntary disruptions. Kubernetes supports
+PDB when preempting Pods, but respecting PDB is best effort. The scheduler tries
+to find victims whose PDB are not violated by preemption, but if no such victims
+are found, preemption will still happen, and lower priority Pods will be removed
+despite their PDBs being violated.
+-->
+#### PodDisruptionBudget 是被支持的，但不提供保证
+
+[PodDisruptionBudget](/docs/concepts/workloads/pods/disruptions/) (PDB)
+的存在使得应用的属主能够限制多副本应用因主动干扰而同时离线的 Pod 的个数。
+Kubernetes 在抢占 Pod 时是可以支持 PDB 的，但对 PDB 的约束也仅限于尽力而为。
+调度器会尝试寻找不会因为抢占而违反其 PDB 约束的 Pod 作为牺牲品，不过如果
+找不到这样的待逐出 Pod，抢占行为仍会发生，低优先级的 Pod 仍会被逐出而不管
+是否违反其 PDB 约束。
+
+<!--
+#### Inter-Pod affinity on lower-priority Pods
+
+A Node is considered for preemption only when the answer to this question is
+yes: "If all the Pods with lower priority than the pending Pod are removed from
+the Node, can the pending Pod be scheduled on the Node?"
+-->
+#### 低优先级 Pod 间的亲和性
+
+只有对下面的问题的回答是肯定的的时候，才会考虑在节点上执行抢占操作：
+"如果所有优先级低于悬决 Pod 的 Pod 都从节点上逐出，悬决 Pod
+可以调度到此节点么？"
+
+<!--
+Preemption does not necessarily remove all lower-priority
+Pods. If the pending Pod can be scheduled by removing fewer than all
+lower-priority Pods, then only a portion of the lower-priority Pods are removed.
+Even so, the answer to the preceding question must be yes. If the answer is no,
+the Node is not considered for preemption.
+-->
+{{< note >}}
+抢占操作不一定要逐出所有优先级较低的 Pod。
+如果少逐出几个 Pod 而不是逐出所有较低优先级的 Pod 即可令悬决 Pod
+被调度，则优先级较低的 Pod 中只有一部分会被逐出。
+即便如此，对上述问题的回答仍须是肯定的。如果回答是否定的，Kubernetes
+不会考虑在该节点上执行抢占操作。
+{{< /note >}}
+
+<!--
+If a pending Pod has inter-pod affinity to one or more of the lower-priority
+Pods on the Node, the inter-Pod affinity rule cannot be satisfied in the absence
+of those lower-priority Pods. In this case, the scheduler does not preempt any
+Pods on the Node. Instead, it looks for another Node. The scheduler might find a
+suitable Node or it might not. There is no guarantee that the pending Pod can be
+scheduled.
+
+Our recommended solution for this problem is to create inter-Pod affinity only
+towards equal or higher priority Pods.
+-->
+如果悬决 Pod 与节点上一个或多个较低优先级的 Pod 之间存在 Pod 间亲和性关系，
+那些对应的低优先级 Pod 若被逐出则无法满足此亲和性规则。
+在这种场合下，调度器不会抢占节点上的任何 Pod。相反，它会尝试寻找其他节点。
+调度器可能能找到也可能找不到合适的节点。
+Kubernetes 并不保证悬决的 Pod 最终会被调度。
+
+对此问题的一种解决方案是仅针对优先级相同或更高的 Pod 设置 Pod 间亲和性。
+
+<!--
+#### Cross node preemption
+
+Suppose a Node N is being considered for preemption so that a pending Pod P can
+be scheduled on N. P might become feasible on N only if a Pod on another Node is
+preempted. Here's an example:
+-->
+#### 跨节点的抢占 {#cross-node-preemption}
+
+假定当前正在考虑在节点 N 上执行抢占操作以便 Pod P 能够被调度到 N 上执行。
+可是只有当另一个节点上的某个 Pod 被抢占，P 才有可能在 N 上调度执行。例如：
+
+<!--
+*   Pod P is being considered for Node N.
+*   Pod Q is running on another Node in the same Zone as Node N.
+*   Pod P has Zone-wide anti-affinity with Pod Q (`topologyKey:
+    failure-domain.beta.kubernetes.io/zone`).
+*   There are no other cases of anti-affinity between Pod P and other Pods in
+    the Zone.
+*   In order to schedule Pod P on Node N, Pod Q can be preempted, but scheduler
+    does not perform cross-node preemption. So, Pod P will be deemed
+    unschedulable on Node N.
+-->
+* Pod P 正在考虑被调度到节点 N。
+* Pod Q 正运行在节点 N 所处区域（Zone）的另一个节点上。
+* Pod P 设置了区域范畴的与 Pod Q 的反亲和性
+  （`topologyKey: failure-domain.beta.kubernetes.io/zone`）。
+* Pod P 与区域中的其他 Pod 之间都不存在反亲和性关系。
+* 为了将 P 调度到节点 N 上，Pod Q 可以被抢占，但是调度器不会执行跨节点的
+  抢占操作。因此，Pod P 会被视为无法调度到节点 N 上执行。
+
+<!--
+If Pod Q were removed from its Node, the Pod anti-affinity violation would be
+gone, and Pod P could possibly be scheduled on Node N.
+
+We may consider adding cross Node preemption in future versions if there is
+enough demand and if we find an algorithm with reasonable performance.
+-->
+如果 Pod Q 真的被从其节点上移除，Pod 间反亲和性的规则就会得到满足，Pod P
+就有可能被调度到节点 N 上执行。
+
+我们可能在将来版本中考虑添加跨节点的抢占能力。前提是在这方面有足够多的需求，
+并且我们找到了性能可接受的算法。
+
+<!--
+## Troubleshooting
+
+Pod priority and pre-emption can have unwanted side effects. Here are some
+examples of potential problems and ways to deal with them.
+-->
+## 故障排查   {#troubleshooting}
+
+Pod 优先级和抢占机制可能产生一些不想看到的副作用。
+下面是一些可能存在的问题以及相应的处理方法。
+
+<!--
+### Pods are preempted unnecessarily
+
+Preemption removes existing Pods from a cluster under resource pressure to make
+room for higher priority pending Pods. If you give high priorities to
+certain Pods by mistake, these unintentionally high priority Pods may cause
+preemption in your cluster. Pod priority is specified by setting the
+`priorityClassName` field in the Pod's specification. The integer value for
+priority is then resolved and populated to the `priority` field of `podSpec`.
+-->
+### Pod 被不必要地抢占
+
+抢占操作会在集群中资源压力较大，进而无法为高优先级的悬决 Pod 腾出空间时发生。
+如果你不小心给某些 Pod 赋予了较高优先级，这些意外获得高优先级的 Pod 可能导致
+集群中出现抢占行为。Pod 优先级是通过在其规约中的 `priorityClassName` 来设定的。
+优先级的整数值被解析出来后会添加到 Pod 规约的 `priority` 字段。
+
+<!--
+To address the problem, you can change the `priorityClassName` for those Pods
+to use lower priority classes, or leave that field empty. An empty
+`priorityClassName` is resolved to zero by default.
+
+When a Pod is preempted, there will be events recorded for the preempted Pod.
+Preemption should happen only when a cluster does not have enough resources for
+a Pod. In such cases, preemption happens only when the priority of the pending
+Pod (preemptor) is higher than the victim Pods. Preemption must not happen when
+there is no pending Pod, or when the pending Pods have equal or lower priority
+than the victims. If preemption happens in such scenarios, please file an issue.
+-->
+要解决这一问题，你可以修改这些 Pod 的 `priorityClassName` 设置，使用优先级
+较低的优先级类，或者将该字段留空。空的 `priorityClassName` 默认解析为优先级 0。
+
+Pod 被抢占时，被抢占的 Pod 会有对应的事件被记录下来。
+只有集群中无法为某 Pod 提供足够资源的时候才会发生抢占。
+在出现这种情况时，也只有悬决 Pod（抢占者）的优先级高于被牺牲的 Pod
+的优先级时，才会发生抢占现象。
+当没有悬决 Pod，或者悬决 Pod 的优先级等于或者低于现有 Pod 时，都不应发生抢占行为。
+如果在这种条件下仍然发生了抢占，请登记一个 Issue。
+
+<!--
+### Pods are preempted, but the preemptor is not scheduled
+
+When pods are preempted, they receive their requested graceful termination
+period, which is by default 30 seconds. If the victim Pods do not terminate within
+this period, they are forcibly terminated. Once all the victims go away, the
+preemptor Pod can be scheduled.
+-->
+### Pod 被抢占但抢占者未被调度
+
+当有 Pod 被抢占时，它们会得到各自的体面终止期限（默认为 30 秒）。
+如果被牺牲的 Pod 在此限期内未能终止，则 Pod 会被强制终止
+一旦所有被牺牲的 Pod 都已消失不见，抢占者 Pod 就可被调度。
+
+<!--
+While the preemptor Pod is waiting for the victims to go away, a higher priority
+Pod may be created that fits on the same Node. In this case, the scheduler will
+schedule the higher priority Pod instead of the preemptor.
+
+This is expected behavior: the Pod with the higher priority should take the place
+of a Pod with a lower priority. Other controller actions, such as
+[cluster autoscaling](/docs/tasks/administer-cluster/cluster-management/#cluster-autoscaling),
+may eventually provide capacity to schedule the pending Pods.
+-->
+在抢占者 Pod 等待被牺牲的 Pod 消失期间，可能有更高优先级的 Pod 被创建，且适合
+调度到同一节点。如果是这种情况，调度器会调度优先级更高的 Pod 而不是抢占者。
+
+这是期望发生的行为：优先级更高的 Pod 应该取代优先级较低的 Pod。
+其他控制器行为，例如
+[集群自动扩缩](/zh/docs/tasks/administer-cluster/cluster-management/#cluster-autoscaling)
+可能会最终为集群添加容量，以调度悬决 Pod。 
+
+<!--
+### Higher priority Pods are preempted before lower priority pods
+
+The scheduler tries to find nodes that can run a pending Pod. If no node is
+found, the scheduler tries to remove Pods with lower priority from an arbitrary
+node in order to make room for the pending pod.
+If a node with low priority Pods is not feasible to run the pending Pod, the scheduler
+may choose another node with higher priority Pods (compared to the Pods on the
+other node) for preemption. The victims must still have lower priority than the
+preemptor Pod.
+-->
+### 高优先级的 Pod 比低优先级的 Pod 先被抢占
+
+调度器尝试寻找可以运行悬决 Pod 的节点。如果找不到这样的节点，调度器会尝试从任一
+节点上逐出优先级较低的 Pod 以运行悬决 Pod。
+如果包含低优先级 Pod 的节点不适合用来运行悬决 Pod，调度器可能会选择其他的、
+运行着较高优先级（相对之前所评估的节点上的 Pod 而言）的 Pod 的节点来执行抢占操作。
+即使如此，被牺牲的 Pod 的优先级也必须比抢占者 Pod 的优先级低。
+
+<!--
+When there are multiple nodes available for preemption, the scheduler tries to
+choose the node with a set of Pods with lowest priority. However, if such Pods
+have PodDisruptionBudget that would be violated if they are preempted then the
+scheduler may choose another node with higher priority Pods.
+
+When multiple nodes exist for preemption and none of the above scenarios apply,
+the scheduler chooses a node with the lowest priority.
+-->
+当有多个节点可供抢占时，调度器会选择 Pod 集合的优先级最低的节点。不过如果这些
+Pod 上定义了 PodDisruptionBudget（PDB）而且如果被抢占了的话就会违反 PDB，
+则调度器会选择另一个 Pod 集合优先级稍高的节点。 
+
+当存在多个节点可供抢占，但以上场景都不适用，则调度器会选择优先级最低的节点。
+
+<!--
+## Interactions between Pod priority and quality of service {#interactions-of-pod-priority-and-qos}
+
+Pod priority and {{< glossary_tooltip text="QoS class" term_id="qos-class" >}}
+are two orthogonal features with few interactions and no default restrictions on
+setting the priority of a Pod based on its QoS classes. The scheduler's
+preemption logic does not consider QoS when choosing preemption targets.
+Preemption considers Pod priority and attempts to choose a set of targets with
+the lowest priority. Higher-priority Pods are considered for preemption only if
+the removal of the lowest priority Pods is not sufficient to allow the scheduler
+to schedule the preemptor Pod, or if the lowest priority Pods are protected by
+`PodDisruptionBudget`.
+-->
+## Pod 优先级与服务质量间关系  {#interactions-of-pod-priority-and-qos}
+
+Pod 优先级与 {{< glossary_tooltip text="QoS 类" term_id="qos-class" >}} 是两个
+相互独立的功能特性，其间交互之处很少，并且不存在基于 Pod QoS 类来为其设置
+优先级方面的默认限制。
+调度器的抢占逻辑在选择抢占目标时不会考虑 QoS 因素。
+抢占考虑的是 Pod 优先级，并选择优先级最低的 Pod 作为抢占目标。
+只有移除最低优先级的 Pod 尚不足以允许调度器调度抢占者 Pod 或者最低优先级的 Pod
+受到 Pod 干扰预算（PDB）保护时，才会考虑抢占优先级稍高的 Pod。
+
+<!--
+The only component that considers both QoS and Pod priority is
+[kubelet out-of-resource eviction](/docs/tasks/administer-cluster/out-of-resource/).
+The kubelet ranks Pods for eviction first by whether or not their usage of the
+starved resource exceeds requests, then by Priority, and then by the consumption
+of the starved compute resource relative to the Pods’ scheduling requests.
+See
+[evicting end-user pods](/docs/tasks/administer-cluster/out-of-resource/#evicting-end-user-pods)
+for more details.
+-->
+唯一同时考虑 QoS 和 Pod 优先级的组件是 `kubelet`，体现在其
+[资源不足时的逐出](/zh/docs/tasks/administer-cluster/out-of-resource/)操作。
+`kubelet`  首先根据 Pod 对濒危资源的使用是否超出其请求值来选择要被逐出的 Pod，
+接下来对这些 Pod 按优先级排序，再按其相对 Pod 的调度请求所耗用的濒危资源的用量
+排序。更多细节可参阅
+[逐出最终用户的 Pod](/zh/docs/tasks/administer-cluster/out-of-resource/#evicting-end-user-pods)。
+
+<!--
+kubelet out-of-resource eviction does not evict Pods when their
+usage does not exceed their requests. If a Pod with lower priority is not
+exceeding its requests, it won't be evicted. Another Pod with higher priority
+that exceeds its requests may be evicted.
+-->
+`kubelet` 资源不足时的逐出操作不会逐出 Pod 资源用量未超出其请求值的 Pod。
+如果优先级较低的 Pod 未超出其请求值，它们不会被逐出。其他优先级较高的
+且用量超出请求值的 Pod 则可能被逐出。
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Read about using ResourceQuotas in connection with PriorityClasses: [limit Priority Class consumption by default](/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+-->
+* 阅读结合 PriorityClass 来使用 ResourceQuota 的介绍：
+  [限制默认可使用的优先级类](/zh/docs/concepts/policy/resource-quotas/#limit-priority-class-consumption-by-default)
+

From cace35ea0459e30f699257fc62d7d68202077bf7 Mon Sep 17 00:00:00 2001
From: jay vyas <jvyas@vmware.com>
Date: Mon, 10 Aug 2020 12:17:17 -0400
Subject: [PATCH 063/496] Clarify the 3 primitives used for defining policy
 targets Co-authored-by: Tim Bannister <tim@scalefactory.com>

---
 .../services-networking/network-policies.md   | 26 ++++++++++++++++---
 1 file changed, 22 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index a35eca252f..bc8ad78a3d 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -9,11 +9,18 @@ weight: 50
 ---
 
 <!-- overview -->
-A network policy is a specification of how groups of {{< glossary_tooltip text="pods" term_id="pod">}} are allowed to communicate with each other and other network endpoints.
 
-NetworkPolicy resources use {{< glossary_tooltip text="labels" term_id="label">}} to select pods and define rules which specify what traffic is allowed to the selected pods.
+If you want to control traffic flow at the IP address or port level (OSI layer 3 or 4), then you might consider using Kubernetes NetworkPolicies for particular applications in your cluster.  NetworkPolicies are an application-centric construct which allow you to specify how a {{< glossary_tooltip text="pod" term_id="pod">}} is allowed to communicate with various network "entities" (we use the word "entity" here to avoid overloading the more common terms such as "endpoints" and "services", which have specific Kubernetes connotations) over the network. 
 
+The entities that a Pod can communicate with are identified through a combination of the following 3 identifiers:
 
+1. Other pods that are allowed (exception: a pod cannot block access to itself)
+2. Namespaces that are allowed 
+3. IP blocks (exception: traffic to and from the node where a Pod is running is always allowed, regardless of the IP address of the Pod or the node)
+
+When defining a pod- or namespace- based NetworkPolicy, you use a {{< glossary_tooltip text="selector" term_id="selector">}} to specify what traffic is allowed to and from the Pod(s) that match the selector.
+
+Meanwhile, when IP based NetworkPolicies are created, we define policies based on IP blocks (CIDR ranges).
 
 <!-- body -->
 ## Prerequisites
@@ -212,8 +219,21 @@ When the feature gate is enabled, you can set the `protocol` field of a NetworkP
 You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports SCTP protocol NetworkPolicies.
 {{< /note >}}
 
+# What you CAN'T do with network policy's (at least, not yet)
 
+As of Kubernetes 1.20, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
 
+- Forcing internal cluster traffic to go through a common gateway (this might be best served with a service mesh or other proxy).
+- Anything TLS related (use a service mesh or ingress controller for this).
+- Node specific policies (you can use CIDR notation for these, but you cannot target nodes by their Kubernetes identities specifically).
+- Targeting of namespaces or services by name (you can, however, target pods or namespaces by their{{< glossary_tooltip text="labels" term_id="label" >}}, which is often a viable workaround).
+- Creation or management of "Policy requests" that are fulfilled by a third party.
+- Default policies which are applied to all namespaces or pods (there are some third party Kubernetes distributions and projects which can do this).
+- Advanced policy querying and reachability tooling.
+- The ability to target ranges of Ports in a single policy declaration.
+- The ability to log network security events (for example connections that are blocked or accepted).
+- The ability to explicitly deny policies (currently the model for NetworkPolicies are deny by default, with only the ability to add allow rules).
+- The ability to prevent loopback or incoming host traffic (Pods cannot currently block localhost access, nor do they have the ability to block access from their resident node).
 
 ## {{% heading "whatsnext" %}}
 
@@ -221,5 +241,3 @@ You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin tha
 - See the [Declare Network Policy](/docs/tasks/administer-cluster/declare-network-policy/)
   walkthrough for further examples.
 - See more [recipes](https://github.com/ahmetb/kubernetes-network-policy-recipes) for common scenarios enabled by the NetworkPolicy resource.
-
-

From cae1bf1adc85d62172d57db51ec3f64ed126d707 Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Mon, 24 Aug 2020 02:21:18 +0900
Subject: [PATCH 064/496] ja-trans: Fix Japanese translation in
 ja/concepts/cluster-administration/proxies.md #19281

---
 .../cluster-administration/proxies.md         | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/content/ja/docs/concepts/cluster-administration/proxies.md b/content/ja/docs/concepts/cluster-administration/proxies.md
index 26bbb2248b..19eb07bee2 100644
--- a/content/ja/docs/concepts/cluster-administration/proxies.md
+++ b/content/ja/docs/concepts/cluster-administration/proxies.md
@@ -17,21 +17,21 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
 1. [kubectlのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#directly-accessing-the-rest-api):
 
     - ユーザーのデスクトップ上かPod内で稼働します
-    - ローカルホストのアドレスからKubernetes api-serverへのプロキシーを行います
+    - ローカルホストのアドレスからKubernetes apiserverへのプロキシーを行います
     - クライアントからプロキシー間ではHTTPを使用します
-    - プロキシーからapi-serverへはHTTPSを使用します
-    - api-serverの場所を示します
+    - プロキシーからapiserverへはHTTPSを使用します
+    - apiserverの場所を示します
     - 認証用のヘッダーを追加します
 
-1. [api-serverのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#discovering-builtin-services):
+1. [apiserverのプロキシー](/docs/tasks/access-application-cluster/access-cluster/#discovering-builtin-services):
 
-    - api-server内で動作する防壁となります
+    - apiserver内で動作する踏み台となります
     - これがなければ到達不可能であるクラスターIPへ、クラスターの外部からのユーザーを接続します
-    - api-serverのプロセス内で稼働します
-    - クライアントからプロキシー間ではHTTPSを使用します(api-serverの設定により、HTTPを使用します)
+    - apiserverのプロセス内で稼働します
+    - クライアントからプロキシー間ではHTTPSを使用します(apiserverの設定により、HTTPを使用します)
     - プロキシーからターゲット間では利用可能な情報を使用して、プロキシーによって選択されたHTTPかHTTPSのいずれかを使用します
     - Node、Pod、Serviceへ到達可能です
-    - Serviceへ到達するとき負荷分散を行います
+    - Serviceへ到達するときは負荷分散を行います
 
 1.  [kube proxy](/ja/docs/concepts/services-networking/service/#ips-and-vips):
 
@@ -41,11 +41,11 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
     - 負荷分散機能を提供します
     - Serviceへ到達させるためのみに使用されます
 
-1.  api-serverの前段にあるプロキシー/ロードバランサー:
+1.  apiserverの前段にあるプロキシー/ロードバランサー:
 
     - 実際に存在するかどうかと実装はクラスターごとに異なります(例: nginx)
-    - 全てのクライアント間と、1つ以上のapi-serverの間に位置します
-    - 複数のapi-serverがあるときロードバランサーとして稼働します
+    - 全てのクライアント間と、1つ以上のapiserverの間に位置します
+    - 複数のapiserverがあるときロードバランサーとして稼働します
 
 1.  外部サービス上で稼働するクラウドロードバランサー:
 

From 4e418f3e8120d2a3736ea3585a439b61bc506810 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Mon, 24 Aug 2020 20:32:20 +0900
Subject: [PATCH 065/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index 75bb46a154..91855c12bd 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -57,7 +57,7 @@ Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィッ
 
 ## プライベートレジストリを使用する方法
 
-プライベートリポジトリではイメージを読み込む為にキーが必要になる場合があります。  
+プライベートレジストリではイメージを読み込む為にキーが必要になる場合があります。  
 認証情報はいくつかの方法で提供できます。
 
   - プライベートレジストリへの認証をNodeに設定する

From cb2500c56c43491c9a79af08dab97bff807f22cf Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Mon, 24 Aug 2020 20:32:44 +0900
Subject: [PATCH 066/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index 91855c12bd..5c5bc46576 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -258,7 +258,7 @@ EOF
    - また、Node設定変更を自由にできないクラスターでは`imagePullSecrets`を使用する
 1. 独自仕様のイメージを含むクラスターで、いくつかは厳格なアクセス制御が必要である
    - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認する必要あり。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性がある
-   - 機密のデータはイメージに含めてしまうのではなく、"Secret"リソースに移行する
+   - 機密データはイメージに含めてしまうのではなく、"Secret"リソースに移行する
 1. それぞれのテナントが独自のプライベートレジストリを必要とするマルチテナントのクラスターである
    - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認する必要あり。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性がある
    - 認証が必要なプライベートレジストリを実行する

From 7ce319f687a001318d7d57343c61715ce5872714 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Mon, 24 Aug 2020 20:33:31 +0900
Subject: [PATCH 067/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index 5c5bc46576..e41697c972 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -257,7 +257,7 @@ EOF
      - Nodeを手動設定するよりもクラスターのオートスケーリングのほうがうまく機能する
    - また、Node設定変更を自由にできないクラスターでは`imagePullSecrets`を使用する
 1. 独自仕様のイメージを含むクラスターで、いくつかは厳格なアクセス制御が必要である
-   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認する必要あり。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性がある
+   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認する必要がある。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性がある
    - 機密データはイメージに含めてしまうのではなく、"Secret"リソースに移行する
 1. それぞれのテナントが独自のプライベートレジストリを必要とするマルチテナントのクラスターである
    - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認する必要あり。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性がある

From e753e5525706b4b936a925dab17e7443b58c91d1 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 23 Aug 2020 20:46:24 +0800
Subject: [PATCH 068/496] [zh] Translate
 tasks/configure-pod-container/security-context.md

---
 .../security-context.md                       | 690 ++++++++++++++++++
 1 file changed, 690 insertions(+)
 create mode 100644 content/zh/docs/tasks/configure-pod-container/security-context.md

diff --git a/content/zh/docs/tasks/configure-pod-container/security-context.md b/content/zh/docs/tasks/configure-pod-container/security-context.md
new file mode 100644
index 0000000000..bdc244a97f
--- /dev/null
+++ b/content/zh/docs/tasks/configure-pod-container/security-context.md
@@ -0,0 +1,690 @@
+---
+title: 为 Pod 或容器配置安全性上下文
+content_type: task
+weight: 80
+---
+<!--
+reviewers:
+- erictune
+- mikedanese
+- thockin
+title: Configure a Security Context for a Pod or Container
+content_type: task
+weight: 80
+-->
+
+<!-- overview -->
+
+<!--
+A security context defines privilege and access control settings for
+a Pod or Container. Security context settings include, but are not limited to:
+
+* Discretionary Access Control: Permission to access an object, like a file, is based on
+  [user ID (UID) and group ID (GID)](https://wiki.archlinux.org/index.php/users_and_groups).
+* [Security Enhanced Linux (SELinux)](https://en.wikipedia.org/wiki/Security-Enhanced_Linux): Objects are assigned security labels.
+* Running as privileged or unprivileged.
+* [Linux Capabilities](https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/): 
+  Give a process some privileges, but not all the privileges of the root user.
+-->
+安全上下文（Security Context）定义 Pod 或 Container 的特权与访问控制设置。
+安全上下文包括但不限于：
+
+* 自主访问控制（Discretionary Access Control）：基于
+  [用户 ID（UID）和组 ID（GID）](https://wiki.archlinux.org/index.php/users_and_groups).
+  来判定对对象（例如文件）的访问权限。
+* [安全性增强的 Linux（SELinux）](https://zh.wikipedia.org/wiki/%E5%AE%89%E5%85%A8%E5%A2%9E%E5%BC%BA%E5%BC%8FLinux)：
+  为对象赋予安全性标签。
+* 以特权模式或者非特权模式运行。
+* [Linux 权能](https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/): 
+  为进程赋予 root 用户的部分特权而非全部特权。
+<!--
+* [AppArmor](/docs/tutorials/clusters/apparmor/): Use program profiles to restrict the capabilities of individual programs.
+* [Seccomp](https://en.wikipedia.org/wiki/Seccomp): Filter a process's system calls.
+* AllowPrivilegeEscalation: Controls whether a process can gain more
+  privileges than its parent process. This bool directly controls whether the
+  [`no_new_privs`](https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt)
+  flag gets set on the container process. AllowPrivilegeEscalation is true
+  always when the container is: 1) run as Privileged OR 2) has `CAP_SYS_ADMIN`.
+* readOnlyRootFilesystem: Mounts the container's root filesystem as read-only.
+-->
+* [AppArmor](/zh/docs/tutorials/clusters/apparmor/)：使用程序框架来限制个别程序的权能。
+* [Seccomp](https://en.wikipedia.org/wiki/Seccomp)：过滤进程的系统调用。
+* AllowPrivilegeEscalation：控制进程是否可以获得超出其父进程的特权。
+  此布尔值直接控制是否为容器进程设置
+  [`no_new_privs`](https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt)标志。
+  当容器以特权模式运行或者具有 `CAP_SYS_ADMIN` 权能时，AllowPrivilegeEscalation 总是为 true。
+* readOnlyRootFilesystem：以只读方式加载容器的根文件系统。
+
+<!--
+The above bullets are not a complete set of security context settings - please see
+[SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core)
+for a comprehensive list.
+
+For more information about security mechanisms in Linux, see
+[Overview of Linux Kernel Security Features](https://www.linux.com/learn/overview-linux-kernel-security-features)
+-->
+以上条目不是安全上下文设置的完整列表 -- 请参阅
+[SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core)
+了解其完整列表。
+
+关于在 Linux 系统中的安全机制的更多信息，可参阅
+[Linux 内核安全性能力概述](https://www.linux.com/learn/overview-linux-kernel-security-features)。
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+<!-- steps -->
+
+<!--
+## Set the security context for a Pod
+
+To specify security settings for a Pod, include the `securityContext` field
+in the Pod specification. The `securityContext` field is a
+[PodSecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritycontext-v1-core) object.
+The security settings that you specify for a Pod apply to all Containers in the Pod.
+Here is a configuration file for a Pod that has a `securityContext` and an `emptyDir` volume:
+-->
+## 为 Pod 设置安全性上下文   {#set-the-security-context-for-a-pod}
+
+要为 Pod 设置安全性设置，可在 Pod 规约中包含 `securityContext` 字段。`securityContext` 字段值是一个
+[PodSecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritycontext-v1-core)
+对象。你为 Pod 所设置的安全性配置会应用到 Pod 中所有 Container 上。
+下面是一个 Pod 的配置文件，该 Pod 定义了 `securityContext` 和一个 `emptyDir` 卷：
+
+{{< codenew file="pods/security/security-context.yaml" >}}
+
+<!--
+In the configuration file, the `runAsUser` field specifies that for any Containers in
+the Pod, all processes run with user ID 1000. The `runAsGroup` field specifies the primary group ID of 3000 for
+all processes within any containers of the Pod. If this field is omitted, the primary group ID of the containers
+will be root(0). Any files created will also be owned by user 1000 and group 3000 when `runAsGroup` is specified.
+Since `fsGroup` field is specified, all processes of the container are also part of the supplementary group ID 2000.
+The owner for volume `/data/demo` and any files created in that volume will be Group ID 2000.
+
+Create the Pod:
+-->
+在配置文件中，`runAsUser` 字段指定 Pod 中的所有容器内的进程都使用用户 ID 1000
+来运行。`runAsGroup` 字段指定所有容器中的进程都以主组 ID 3000 来运行。
+如果忽略此字段，则容器的主组 ID 将是 root（0）。
+当 `runAsGroup` 被设置时，所有创建的文件也会划归用户 1000 和组 3000。
+由于 `fsGroup` 被设置，容器中所有进程也会是附组 ID 2000 的一部分。
+卷 `/data/demo` 及在该卷中创建的任何文件的属主都会是组 ID 2000。
+
+创建该 Pod：
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/security/security-context.yaml
+```
+
+<!--
+Verify that the Pod's Container is running:
+-->
+检查 Pod 的容器处于运行状态：
+
+```shell
+kubectl get pod security-context-demo
+```
+
+<!--
+Get a shell to the running Container:
+-->
+开启一个 Shell 进入到运行中的容器：
+
+```shell
+kubectl exec -it security-context-demo -- sh
+```
+
+<!--
+In your shell, list the running processes:
+-->
+在你的 Shell 中，列举运行中的进程：
+
+```shell
+ps
+```
+
+<!--
+The output shows that the processes are running as user 1000, which is the value of `runAsUser`:
+-->
+输出显示进程以用户 1000 运行，即 `runAsUser` 所设置的值：
+
+```shell
+PID   USER     TIME  COMMAND
+    1 1000      0:00 sleep 1h
+    6 1000      0:00 sh
+...
+```
+
+<!--
+In your shell, navigate to `/data`, and list the one directory:
+-->
+在你的 Shell 中，进入 `/data` 目录列举其内容：
+
+```shell
+cd /data
+ls -l
+```
+
+<!--
+The output shows that the `/data/demo` directory has group ID 2000, which is
+the value of `fsGroup`.
+-->
+输出显示 `/data/demo` 目录的组 ID 为 2000，即 `fsGroup` 的设置值：
+
+```shell
+drwxrwsrwx 2 root 2000 4096 Jun  6 20:08 demo
+```
+
+<!--
+In your shell, navigate to `/data/demo`, and create a file:
+-->
+在你的 Shell 中，进入到 `/data/demo` 目录下创建一个文件：
+
+```shell
+cd demo
+echo hello > testfile
+```
+
+<!--
+List the file in the `/data/demo` directory:
+-->
+列举 `/data/demo` 目录下的文件：
+
+```shell
+ls -l
+```
+
+<!--
+The output shows that `testfile` has group ID 2000, which is the value of `fsGroup`.
+-->
+输出显示 `testfile` 的组 ID 为 2000，也就是 `fsGroup` 所设置的值：
+
+```shell
+-rw-r--r-- 1 1000 2000 6 Jun  6 20:08 testfile
+```
+
+<!--
+Run the following command:
+-->
+运行下面的命令：
+
+```shell
+id
+```
+
+输出为：
+```
+uid=1000 gid=3000 groups=2000
+```
+
+<!--
+You will see that gid is 3000 which is same as `runAsGroup` field. If the `runAsGroup` was omitted the gid would
+remain as 0(root) and the process will be able to interact with files that are owned by root(0) group and that have
+the required group permissions for root(0) group.
+
+Exit your shell:
+-->
+你会看到 `gid` 值为 3000，也就是 `runAsGroup` 字段的值。
+如果 `runAsGroup` 被忽略，则 `gid` 会取值 0（root），而进程就能够与 root
+用户组所拥有以及要求 root 用户组访问权限的文件交互。
+
+退出你的 Shell：
+
+```shell
+exit
+```
+
+<!--
+## Configure volume permission and ownership change policy for Pods
+-->
+## 为 Pod 配置卷访问权限和属主变更策略
+
+{{< feature-state for_k8s_version="v1.18" state="alpha" >}}
+
+<!--
+By default, Kubernetes recursively changes ownership and permissions for the contents of each
+volume to match the `fsGroup` specified in a Pod's `securityContext` when that volume is
+mounted.
+For large volumes, checking and changing ownership and permissions can take a lot of time,
+slowing Pod startup. You can use the `fsGroupChangePolicy` field inside a `securityContext`
+to control the way that Kubernetes checks and manages ownership and permissions
+for a volume.
+-->
+默认情况下，Kubernetes 在挂载一个卷时，会递归地更改每个卷中的内容的属主和访问权限，使之与 Pod
+的 `securityContext` 中指定的 `fsGroup` 匹配。
+对于较大的数据卷，检查和变更属主与访问权限可能会花费很长时间，降低 Pod 启动速度。
+你可以在 `securityContext` 中使用 `fsGroupChangePolicy` 字段来控制 Kubernetes
+检查和管理卷属主和访问权限的方式。
+
+<!--
+**fsGroupChangePolicy** -  `fsGroupChangePolicy` defines behavior for changing ownership and permission of the volume
+before being exposed inside a Pod. This field only applies to volume types that support
+`fsGroup` controlled ownership and permissions. This field has two possible values:
+
+* _OnRootMismatch_: Only change permissions and ownership if permission and ownership of root directory does not match with expected permissions of the volume. This could help shorten the time it takes to change ownership and permission of a volume.
+* _Always_: Always change permission and ownership of the volume when volume is mounted.
+
+For example:
+-->
+**fsGroupChangePolicy** - `fsGroupChangePolicy` 定义在卷被暴露给 Pod 内部之前对其
+内容的属主和访问许可进行变更的行为。此字段仅适用于那些支持使用 `fsGroup` 来
+控制属主与访问权限的卷类型。此字段的取值可以是：
+
+* `OnRootMismatch`：只有根目录的属主与访问权限与卷所期望的权限不一致时，
+  才改变其中内容的属主和访问权限。这一设置有助于缩短更改卷的属主与访问
+  权限所需要的时间。
+* `Always`：在挂载卷时总是更改卷中内容的属主和访问权限。
+
+例如：
+
+```yaml
+securityContext:
+  runAsUser: 1000
+  runAsGroup: 3000
+  fsGroup: 2000
+  fsGroupChangePolicy: "OnRootMismatch"
+```
+
+<!--
+This is an alpha feature. To use it, enable the [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) `ConfigurableFSGroupPolicy` for the kube-api-server, the kube-controller-manager, and for the kubelet.
+-->
+这是一个 Alpha 阶段的功能特性。要使用此特性，需要在 `kube-apiserver`、`kube-controller-manager`
+和 `kubelet` 上启用 `ConfigurableFSGroupPolicy`
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+
+<!--
+This field has no effect on ephemeral volume types such as
+[`secret`](/docs/concepts/storage/volumes/#secret),
+[`configMap`](/docs/concepts/storage/volumes/#configmap),
+and [`emptydir`](/docs/concepts/storage/volumes/#emptydir).
+-->
+{{< note >}}
+此字段对于[`secret`](/zh/docs/concepts/storage/volumes/#secret)、
+[`configMap`](/zh/docs/concepts/storage/volumes/#configmap)
+和 [`emptydir`](/zh/docs/concepts/storage/volumes/#emptydir)
+这类临时性存储无效。
+{{< /note >}}
+
+<!--
+## Set the security context for a Container
+
+To specify security settings for a Container, include the `securityContext` field
+in the Container manifest. The `securityContext` field is a
+[SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core) object.
+Security settings that you specify for a Container apply only to
+the individual Container, and they override settings made at the Pod level when
+there is overlap. Container settings do not affect the Pod's Volumes.
+
+Here is the configuration file for a Pod that has one Container. Both the Pod
+and the Container have a `securityContext` field:
+-->
+## 为 Container 设置安全性上下文  {#set-the-security-context-for-a-container}
+
+若要为 Container 设置安全性配置，可以在 Container 清单中包含 `securityContext` 
+字段。`securityContext` 字段的取值是一个
+[SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core)
+对象。你为 Container 设置的安全性配置仅适用于该容器本身，并且所指定的设置
+在与 Pod 层面设置的内容发生重叠时，会重载后者。Container 层面的设置不会影响
+到 Pod 的卷。
+
+下面是一个 Pod 的配置文件，其中包含一个 Container。Pod 和 Container 都有
+`securityContext` 字段：
+
+{{< codenew file="pods/security/security-context-2.yaml" >}}
+
+<!--
+Create the Pod:
+-->
+创建该 Pod：
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/security/security-context-2.yaml
+```
+
+<!--
+Verify that the Pod's Container is running:
+-->
+验证 Pod 中的容器处于运行状态：
+
+```shell
+kubectl get pod security-context-demo-2
+```
+
+<!--
+Get a shell into the running Container:
+-->
+启动一个 Shell 进入到运行中的容器内：
+
+```shell
+kubectl exec -it security-context-demo-2 -- sh
+```
+
+<!--
+In your shell, list the running processes:
+-->
+在你的 Shell 中，列举运行中的进程：
+
+```shell
+ps aux
+```
+
+<!--
+The output shows that the processes are running as user 2000. This is the value
+of `runAsUser` specified for the Container. It overrides the value 1000 that is
+specified for the Pod.
+-->
+输出显示进程以用户 2000 账号运行。该值是在 Container 的 `runAsUser` 中设置的。
+该设置值重载了 Pod 层面所设置的值 1000。
+
+```
+USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
+2000         1  0.0  0.0   4336   764 ?        Ss   20:36   0:00 /bin/sh -c node server.js
+2000         8  0.1  0.5 772124 22604 ?        Sl   20:36   0:00 node server.js
+...
+```
+
+<!--
+Exit your shell:
+-->
+退出你的 Shell：
+
+```shell
+exit
+```
+
+<!--
+## Set capabilities for a Container
+
+With [Linux capabilities](https://man7.org/linux/man-pages/man7/capabilities.7.html),
+you can grant certain privileges to a process without granting all the privileges
+of the root user. To add or remove Linux capabilities for a Container, include the
+`capabilities` field in the `securityContext` section of the Container manifest.
+
+First, see what happens when you don't include a `capabilities` field.
+Here is configuration file that does not add or remove any Container capabilities:
+-->
+## 为 Container 设置权能   {#set-capabilities-for-a-container}
+
+使用 [Linux 权能](https://man7.org/linux/man-pages/man7/capabilities.7.html)，你可以
+赋予进程 root 用户所拥有的某些特权，但不必赋予其全部特权。
+要为 Container 添加或移除 Linux 权能，可以在 Container 清单的 `securityContext` 节
+包含 `capabilities` 字段。
+
+首先，查看不包含 `capabilities` 字段时候会发生什么。
+下面是一个配置文件，其中没有添加或移除容器的权能：
+
+{{< codenew file="pods/security/security-context-3.yaml" >}}
+
+<!--
+Create the Pod:
+-->
+创建该 Pod：
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/security/security-context-3.yaml
+```
+
+<!--
+Verify that the Pod's Container is running:
+-->
+验证 Pod 的容器处于运行状态：
+
+```shell
+kubectl get pod security-context-demo-3
+```
+
+<!--
+Get a shell into the running Container:
+-->
+启动一个 Shell 进入到运行中的容器：
+
+```shell
+kubectl exec -it security-context-demo-3 -- sh
+```
+
+<!--
+In your shell, list the running processes:
+-->
+在你的 Shell 中，列举运行中的进程：
+
+```shell
+ps aux
+```
+
+<!--
+The output shows the process IDs (PIDs) for the Container:
+-->
+输出显示容器中进程 ID（PIDs）：
+
+```shell
+USER  PID %CPU %MEM    VSZ   RSS TTY   STAT START   TIME COMMAND
+root    1  0.0  0.0   4336   796 ?     Ss   18:17   0:00 /bin/sh -c node server.js
+root    5  0.1  0.5 772124 22700 ?     Sl   18:17   0:00 node server.js
+```
+
+<!--
+In your shell, view the status for process 1:
+-->
+在你的 Shell 中，查看进程 1 的状态：
+
+```shell
+cd /proc/1
+cat status
+```
+
+<!--
+The output shows the capabilities bitmap for the process:
+-->
+输出显示进程的权能位图：
+
+```
+...
+CapPrm:	00000000a80425fb
+CapEff:	00000000a80425fb
+...
+```
+
+<!--
+Make a note of the capabilities bitmap, and then exit your shell:
+-->
+记下进程权能位图，之后退出你的 Shell：
+
+```shell
+exit
+```
+
+<!--
+Next, run a Container that is the same as the preceding container, except
+that it has additional capabilities set.
+
+Here is the configuration file for a Pod that runs one Container. The configuration
+adds the `CAP_NET_ADMIN` and `CAP_SYS_TIME` capabilities:
+-->
+接下来运行一个与前例中容器相同的容器，只是这个容器有一些额外的权能设置。
+
+下面是一个 Pod 的配置，其中运行一个容器。配置为容器添加 `CAP_NET_ADMIN` 和
+`CAP_SYS_TIME` 权能：
+
+{{< codenew file="pods/security/security-context-4.yaml" >}}
+
+<!--
+Create the Pod:
+-->
+创建 Pod：
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/security/security-context-4.yaml
+```
+
+<!--
+Get a shell into the running Container:
+-->
+启动一个 Shell，进入到运行中的容器：
+
+```shell
+kubectl exec -it security-context-demo-4 -- sh
+```
+
+<!--
+In your shell, view the capabilities for process 1:
+-->
+在你的 Shell 中，查看进程 1 的权能：
+
+```shell
+cd /proc/1
+cat status
+```
+
+<!--
+The output shows capabilities bitmap for the process:
+-->
+输出显示的是进程的权能位图：
+
+```shell
+...
+CapPrm:	00000000aa0435fb
+CapEff:	00000000aa0435fb
+...
+```
+
+<!--
+Compare the capabilities of the two Containers:
+-->
+比较两个容器的权能位图：
+
+```
+00000000a80425fb
+00000000aa0435fb
+```
+
+<!--
+In the capability bitmap of the first container, bits 12 and 25 are clear. In the second container,
+bits 12 and 25 are set. Bit 12 is `CAP_NET_ADMIN`, and bit 25 is `CAP_SYS_TIME`.
+See [capability.h](https://github.com/torvalds/linux/blob/master/include/uapi/linux/capability.h)
+for definitions of the capability constants.
+-->
+在第一个容器的权能位图中，位 12 和 25 是没有设置的。在第二个容器中，位 12
+和 25 是设置了的。位 12 是 `CAP_NET_ADMIN` 而位 25 则是 `CAP_SYS_TIME`。
+参见 [capability.h](https://github.com/torvalds/linux/blob/master/include/uapi/linux/capability.h)
+了解权能常数的定义。
+
+<!--
+Linux capability constants have the form `CAP_XXX`. But when you list capabilities in your Container manifest, you must omit the `CAP_` portion of the constant. For example, to add `CAP_SYS_TIME`, include `SYS_TIME` in your list of capabilities.
+-->
+{{< note >}}
+Linux 权能常数定义的形式为 `CAP_XXX`。但是你在 Container 清单中列举权能时，
+要将权能名称中的 `CAP_` 部分去掉。例如，要添加 `CAP_SYS_TIME`，可在权能
+列表中添加 `SYS_TIME`。
+{{< /note >}}
+
+<!--
+## Assign SELinux labels to a Container
+
+To assign SELinux labels to a Container, include the `seLinuxOptions` field in
+the `securityContext` section of your Pod or Container manifest. The
+`seLinuxOptions` field is an
+[SELinuxOptions](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#selinuxoptions-v1-core)
+object. Here's an example that applies an SELinux level:
+-->
+## 为 Container 赋予 SELinux 标签
+
+若要给 Container 设置 SELinux 标签，可以在 Pod 或 Container 清单的
+`securityContext` 节包含 `seLinuxOptions` 字段。
+`seLinuxOptions` 字段的取值是一个
+[SELinuxOptions](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#selinuxoptions-v1-core)
+对象。下面是一个应用 SELinux 标签的例子：
+
+```yaml
+...
+securityContext:
+  seLinuxOptions:
+    level: "s0:c123,c456"
+```
+
+<!--
+To assign SELinux labels, the SELinux security module must be loaded on the host operating system.
+-->
+{{< note >}}
+要指定 SELinux，需要在宿主操作系统中装载 SELinux 安全性模块。
+{{< /note >}}
+
+<!--
+## Discussion
+
+The security context for a Pod applies to the Pod's Containers and also to
+the Pod's Volumes when applicable. Specifically `fsGroup` and `seLinuxOptions` are
+applied to Volumes as follows:
+-->
+## 讨论   {#discussion}
+
+Pod 的安全上下文适用于 Pod 中的容器，也适用于 Pod 所挂载的卷（如果有的话）。
+尤其是，`fsGroup` 和 `seLinuxOptions` 按下面的方式应用到挂载卷上：
+
+<!--
+* `fsGroup`: Volumes that support ownership management are modified to be owned
+and writable by the GID specified in `fsGroup`. See the
+[Ownership Management design document](https://git.k8s.io/community/contributors/design-proposals/storage/volume-ownership-management.md)
+for more details.
+
+* `seLinuxOptions`: Volumes that support SELinux labeling are relabeled to be accessible
+by the label specified under `seLinuxOptions`. Usually you only
+need to set the `level` section. This sets the
+[Multi-Category Security (MCS)](https://selinuxproject.org/page/NB_MLS)
+label given to all Containers in the Pod as well as the Volumes.
+-->
+* `fsGroup`：支持属主管理的卷会被修改，将其属主变更为 `fsGroup` 所指定的 GID，
+  并且对该 GID 可写。进一步的细节可参阅
+  [属主变更设计文档](https://git.k8s.io/community/contributors/design-proposals/storage/volume-ownership-management.md)。
+
+* `seLinuxOptions`：支持 SELinux 标签的卷会被重新打标签，以便可被 `seLinuxOptions`
+  下所设置的标签访问。通常你只需要设置 `level` 部分。
+  该部分设置的是赋予 Pod 中所有容器及卷的
+  [多类别安全性（Multi-Category Security，MCS)](https://selinuxproject.org/page/NB_MLS)标签。
+
+  <!--
+  After you specify an MCS label for a Pod, all Pods with the same label can
+  access the Volume. If you need inter-Pod protection, you must assign a unique
+  MCS label to each Pod.
+  -->
+  {{< warning >}}
+  在为 Pod 设置 MCS 标签之后，所有带有相同标签的 Pod 可以访问该卷。
+  如果你需要跨 Pod 的保护，你必须为每个 Pod 赋予独特的 MCS 标签。
+  {{< /warning >}}
+
+<!--
+## Clean up
+
+Delete the Pod:
+-->
+## 清理
+
+删除之前创建的所有 Pod：
+
+```shell
+kubectl delete pod security-context-demo
+kubectl delete pod security-context-demo-2
+kubectl delete pod security-context-demo-3
+kubectl delete pod security-context-demo-4
+```
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* [PodSecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritycontext-v1-core)
+* [SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core)
+* [Tuning Docker with the newest security enhancements](https://opensource.com/business/15/3/docker-security-tuning)
+* [Security Contexts design document](https://git.k8s.io/community/contributors/design-proposals/auth/security_context.md)
+* [Ownership Management design document](https://git.k8s.io/community/contributors/design-proposals/storage/volume-ownership-management.md)
+* [Pod Security Policies](/docs/concepts/policy/pod-security-policy/)
+* [AllowPrivilegeEscalation design
+  document](https://git.k8s.io/community/contributors/design-proposals/auth/no-new-privs.md)
+-->
+* [PodSecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritycontext-v1-core) API 定义
+* [SecurityContext](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#securitycontext-v1-core) API 定义
+* [使用最新的安全性增强来调优 Docker](https://opensource.com/business/15/3/docker-security-tuning)
+* [安全性上下文的设计文档](https://git.k8s.io/community/contributors/design-proposals/auth/security_context.md)
+* [属主管理的设计文档](https://git.k8s.io/community/contributors/design-proposals/storage/volume-ownership-management.md)
+* [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)
+* [AllowPrivilegeEscalation 的设计文档](https://git.k8s.io/community/contributors/design-proposals/auth/no-new-privs.md)
+

From cd47cf8820cde6cc2c02e4d562d0c19614616472 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 23 Aug 2020 20:37:29 +0800
Subject: [PATCH 069/496] [zh] Translate
 concepts/security/pod-security-standards.md

---
 .../security/pod-security-standards.md        | 519 ++++++++++++++++++
 1 file changed, 519 insertions(+)
 create mode 100644 content/zh/docs/concepts/security/pod-security-standards.md

diff --git a/content/zh/docs/concepts/security/pod-security-standards.md b/content/zh/docs/concepts/security/pod-security-standards.md
new file mode 100644
index 0000000000..fdc36109f4
--- /dev/null
+++ b/content/zh/docs/concepts/security/pod-security-standards.md
@@ -0,0 +1,519 @@
+---
+title: Pod 安全性标准
+content_type: concept
+weight: 10
+---
+<!--
+reviewers:
+- tallclair
+title: Pod Security Standards
+content_type: concept
+weight: 10
+-->
+
+<!-- overview -->
+
+<!--
+Security settings for Pods are typically applied by using [security
+contexts](/docs/tasks/configure-pod-container/security-context/). Security Contexts allow for the
+definition of privilege and access controls on a per-Pod basis.
+
+The enforcement and policy-based definition of cluster requirements of security contexts has
+previously been achieved using [Pod Security Policy](/docs/concepts/policy/pod-security-policy/). A
+_Pod Security Policy_ is a cluster-level resource that controls security sensitive aspects of the
+Pod specification.
+
+However, numerous means of policy enforcement have arisen that augment or replace the use of
+PodSecurityPolicy. The intent of this page is to detail recommended Pod security profiles, decoupled
+from any specific instantiation.
+-->
+Pod 的安全性配置一般通过使用
+[安全性上下文（Security Context）](/zh/docs/tasks/configure-pod-container/security-context/)
+来保证。安全性上下文允许用户逐个 Pod 地定义特权级及访问控制。
+
+以前，对集群的安全性上下文的需求的实施及其基于策略的定义都通过使用
+[Pod 安全性策略](/zh/docs/concepts/policy/pod-security-policy/)来实现。
+_Pod 安全性策略（Pod Security Policy）_ 是一种集群层面的资源，控制 Pod 规约中
+安全性敏感的部分。
+
+不过，新的策略实施方式不断涌现，或增强或替换 PodSecurityPolicy 的使用。
+本页的目的是详细介绍建议实施的 Pod 安全框架；这些内容与具体的实现无关。
+
+<!-- body -->
+
+<!--
+## Policy Types
+
+There is an immediate need for base policy definitions to broadly cover the security spectrum. These
+should range from highly restricted to highly flexible:
+
+- **_Privileged_** - Unrestricted policy, providing the widest possible level of permissions. This
+  policy allows for known privilege escalations.
+- **_Baseline/Default_** - Minimally restrictive policy while preventing known privilege
+  escalations. Allows the default (minimally specified) Pod configuration.
+- **_Restricted_** - Heavily restricted policy, following current Pod hardening best practices.
+-->
+## 策略类型   {#policy-types}
+
+在进一步讨论整个策略谱系之前，有必要对基本的策略下个定义。
+策略可以是很严格的也可以是很宽松的：
+
+- **_Privileged_** - 不受限制的策略，提供最大可能范围的权限许可。这些策略
+  允许已知的特权提升。
+- **_Baseline/Default_** - 限制性最弱的策略，禁止已知的策略提升。
+  允许使用默认的（规定最少）Pod 配置。
+- **_Restricted_** - 限制性非常强的策略，遵循当前的保护 Pod 的最佳实践。
+
+<!--
+## Policies
+
+### Privileged
+-->
+## 策略    {#policies}
+
+### Privileged
+
+<!--
+The Privileged policy is purposely-open, and entirely unrestricted. This type of policy is typically
+aimed at system- and infrastructure-level workloads managed by privileged, trusted users.
+
+The privileged policy is defined by an absence of restrictions. For allow-by-default enforcement
+mechanisms (such as gatekeeper), the privileged profile may be an absence of applied constraints
+rather than an instantiated policy. In contrast, for a deny-by-default mechanism (such as Pod
+Security Policy) the privileged policy should enable all controls (disable all restrictions).
+-->
+Privileged 策略是有目的地开放且完全无限制的策略。此类策略通常针对由
+特权较高、受信任的用户所管理的系统级或基础设施级负载。
+
+Privileged 策略定义中限制较少。对于默认允许（Allow-by-default）实施机制（例如 gatekeeper），
+Privileged 框架可能意味着不应用任何约束而不是实施某策略实例。
+与此不同，对于默认拒绝（Deny-by-default）实施机制（如 Pod 安全策略）而言，
+Privileged 策略应该默认允许所有控制（即，禁止所有限制）。
+
+### Baseline/Default
+
+<!--
+The Baseline/Default policy is aimed at ease of adoption for common containerized workloads while
+preventing known privilege escalations. This policy is targeted at application operators and
+developers of non-critical applications. The following listed controls should be
+enforced/disallowed:
+-->
+Baseline/Default 策略的目标是便于常见的容器化应用采用，同时禁止已知的特权提升。
+此策略针对的是应用运维人员和非关键性应用的开发人员。
+下面列举的控制应该被实施（禁止）：
+
+<table>
+	<!-- caption style="display:none">Baseline policy specification</caption -->
+	<caption style="display:none">Baseline 策略规范</caption>
+	<tbody>
+		<tr>
+			<td width="30%"><strong>控制（Control）</strong></td>
+			<td><strong>策略（Policy）</strong></td>
+		</tr>
+		<tr>
+			<!-- td>Host Namespaces</td -->
+			<td>宿主名字空间</td>
+			<!-- td>
+				Sharing the host namespaces must be disallowed.<br>
+				<br><b>限制的字段：</b><br>
+				spec.hostNetwork<br>
+				spec.hostPID<br>
+				spec.hostIPC<br>
+				<br><b>Allowed Values:</b> false<br>
+			</td -->
+			<td>
+				必须禁止共享宿主名字空间。<br>
+				<br><b>限制的字段：</b><br>
+				spec.hostNetwork<br>
+				spec.hostPID<br>
+				spec.hostIPC<br>
+				<br><b>允许的值：</b> false<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>Privileged Containers</td -->
+			<td>特权容器</td>
+			<!-- td>
+				Privileged Pods disable most security mechanisms and must be disallowed.<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].securityContext.privileged<br>
+				spec.initContainers[*].securityContext.privileged<br>
+				<br><b>Allowed Values:</b> false, undefined/nil<br>
+			</td -->
+			<td>
+				特权 Pod 禁用大多数安全性机制，必须被禁止。<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].securityContext.privileged<br>
+				spec.initContainers[*].securityContext.privileged<br>
+				<br><b>允许的值：</b> false、未定义/nil<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>Capabilities</td -->
+			<td>权能</td>
+			<!-- td>
+				Adding additional capabilities beyond the <a href="https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities">default set</a> must be disallowed.<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].securityContext.capabilities.add<br>
+				spec.initContainers[*].securityContext.capabilities.add<br>
+				<br><b>Allowed Values:</b> empty (or restricted to a known list)<br>
+			</td -->
+			<td>
+				必须禁止添加<a href="https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities">默认集合</a>之外的权能。<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].securityContext.capabilities.add<br>
+				spec.initContainers[*].securityContext.capabilities.add<br>
+				<br><b>允许的值：</b> 空（或限定为一个已知列表）<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>HostPath Volumes</td -->
+			<td>HostPath 卷</td>
+			<!-- td>
+				HostPath volumes must be forbidden.<br>
+				<br><b>限制的字段：</b><br>
+				spec.volumes[*].hostPath<br>
+				<br><b>Allowed Values:</b> undefined/nil<br>
+			</td -->
+			<td>
+				必须禁止 HostPath 卷。<br>
+				<br><b>限制的字段：</b><br>
+				spec.volumes[*].hostPath<br>
+				<br><b>允许的值：</b> 未定义/nil<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>Host Ports</td -->
+			<td>宿主端口</td>
+			<!-- td>
+				HostPorts should be disallowed, or at minimum restricted to a known list.<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].ports[*].hostPort<br>
+				spec.initContainers[*].ports[*].hostPort<br>
+				<br><b>Allowed Values:</b> 0, undefined (or restricted to a known list)<br>
+			</td -->
+			<td>
+				应禁止使用宿主端口，或者至少限定为已知列表。<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].ports[*].hostPort<br>
+				spec.initContainers[*].ports[*].hostPort<br>
+				<br><b>允许的值：</b> 0、未定义（或限定为已知列表）<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>AppArmor <em>(optional)</em></td -->
+			<td>AppArmor <em>（可选）</em></td>
+			<!-- td>
+				On supported hosts, the 'runtime/default' AppArmor profile is applied by default. The default policy should prevent overriding or disabling the policy, or restrict overrides to an allowed set of profiles.<br>
+				<br><b>限制的字段：</b><br>
+				metadata.annotations['container.apparmor.security.beta.kubernetes.io/*']<br>
+				<br><b>Allowed Values:</b> 'runtime/default', undefined<br>
+			</td -->
+			<td>
+				在受支持的宿主上，默认应用 'runtime/default' AppArmor Profile。默认策略应禁止重载或者禁用该策略，或将重载限定未所允许的 profile 集合。<br>
+				<br><b>限制的字段：</b><br>
+				metadata.annotations['container.apparmor.security.beta.kubernetes.io/*']<br>
+				<br><b>允许的值：</b> 'runtime/default'、未定义<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>SELinux <em>(optional)</em></td -->
+			<td>SELinux <em>（可选）</em></td>
+			<!-- td>
+				Setting custom SELinux options should be disallowed.<br>
+				<br><b>Restricted Fields:</b><br>
+				spec.securityContext.seLinuxOptions<br>
+				spec.containers[*].securityContext.seLinuxOptions<br>
+				spec.initContainers[*].securityContext.seLinuxOptions<br>
+				<br><b>Allowed Values:</b> undefined/nil<br>
+			</td -->
+			<td>
+				应禁止设置定制的 SELinux 选项。<br>
+				<br><b>限制的字段：</b><br>
+				spec.securityContext.seLinuxOptions<br>
+				spec.containers[*].securityContext.seLinuxOptions<br>
+				spec.initContainers[*].securityContext.seLinuxOptions<br>
+				<br><b>允许的值：</b> undefined/nil<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>/proc Mount Type</td -->
+			<td>/proc 挂载类型</td>
+			<!-- td>
+				The default /proc masks are set up to reduce attack surface, and should be required.<br>
+				<br><b>Restricted Fields:</b><br>
+				spec.containers[*].securityContext.procMount<br>
+				spec.initContainers[*].securityContext.procMount<br>
+				<br><b>Allowed Values:</b> undefined/nil, 'Default'<br>
+			</td -->
+			<td>
+				要求使用默认的 <code>/proc</code> 掩码以减小攻击面。<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].securityContext.procMount<br>
+				spec.initContainers[*].securityContext.procMount<br>
+				<br><b>允许的值：</b> 未定义/nil、'Default'<br>
+			</td>
+		</tr>
+		<tr>
+			<td>Sysctls</td>
+			<!-- td>
+				Sysctls can disable security mechanisms or affect all containers on a host, and should be disallowed except for an allowed "safe" subset.
+				A sysctl is considered safe if it is namespaced in the container or the Pod, and it is isolated from other Pods or processes on the same Node.<br>
+				<br><b>Restricted Fields:</b><br>
+				spec.securityContext.sysctls<br>
+				<br><b>Allowed Values:</b><br>
+				kernel.shm_rmid_forced<br>
+				net.ipv4.ip_local_port_range<br>
+				net.ipv4.tcp_syncookies<br>
+				net.ipv4.ping_group_range<br>
+				undefined/empty<br>
+			</td -->
+			<td>
+				Sysctls 可以禁用安全机制或影响宿主上所有容器，因此除了若干『安全』的子集之外，应该被禁止。
+				如果某 sysctl 是受容器或 Pod 的名字空间限制，且与节点上其他 Pod 或进程相隔离，可认为是安全的。<br>
+				<br><b>限制的字段：</b><br>
+				spec.securityContext.sysctls<br>
+				<br><b>允许的值：</b><br>
+				kernel.shm_rmid_forced<br>
+				net.ipv4.ip_local_port_range<br>
+				net.ipv4.tcp_syncookies<br>
+				net.ipv4.ping_group_range<br>
+				undefined/empty<br>
+			</td>
+		</tr>
+	</tbody>
+</table>
+
+### Restricted
+
+<!--
+The Restricted policy is aimed at enforcing current Pod hardening best practices, at the expense of
+some compatibility. It is targeted at operators and developers of security-critical applications, as
+well as lower-trust users.The following listed controls should be enforced/disallowed:
+-->
+Restricted 策略旨在实施当前保护 Pod 的最佳实践，尽管这样作可能会牺牲一些兼容性。
+该类策略主要针对运维人员和安全性很重要的应用的开发人员，以及不太被信任的用户。
+下面列举的控制需要被实施（禁止）：
+
+<table>
+	<!-- caption style="display:none">Restricted policy specification</caption -->
+	<caption style="display:none">Restricted 策略规范</caption>
+	<tbody>
+		<tr>
+			<!-- td><strong>Control</strong></td -->
+			<td width="30%"><strong>控制（Control）</strong></td>
+			<!-- td><strong>Policy</strong></td -->
+			<td><strong>策略（Policy）</strong></td>
+		</tr>
+		<tr>
+			<!-- td colspan="2"><em>Everything from the default profile.</em></td -->
+			<td colspan="2"><em>Default 策略的所有要求。</em></td>
+		</tr>
+		<tr>
+			<!-- td>Volume Types</td -->
+			<td>卷类型</td>
+			<td>
+				<!-- In addition to restricting HostPath volumes, the restricted profile limits usage of non-core volume types to those defined through PersistentVolumes. -->
+				除了限制 HostPath 卷之外，此类策略还限制可以通过 PersistentVolumes 定义的非核心卷类型。<br>
+				<br><b>限制的字段：</b><br>
+				spec.volumes[*].hostPath<br>
+				spec.volumes[*].gcePersistentDisk<br>
+				spec.volumes[*].awsElasticBlockStore<br>
+				spec.volumes[*].gitRepo<br>
+				spec.volumes[*].nfs<br>
+				spec.volumes[*].iscsi<br>
+				spec.volumes[*].glusterfs<br>
+				spec.volumes[*].rbd<br>
+				spec.volumes[*].flexVolume<br>
+				spec.volumes[*].cinder<br>
+				spec.volumes[*].cephFS<br>
+				spec.volumes[*].flocker<br>
+				spec.volumes[*].fc<br>
+				spec.volumes[*].azureFile<br>
+				spec.volumes[*].vsphereVolume<br>
+				spec.volumes[*].quobyte<br>
+				spec.volumes[*].azureDisk<br>
+				spec.volumes[*].portworxVolume<br>
+				spec.volumes[*].scaleIO<br>
+				spec.volumes[*].storageos<br>
+				spec.volumes[*].csi<br>
+				<br><b>允许的值：</b> 未定义/nil<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>Privilege Escalation</td -->
+			<td>特权提升</td>
+			<td>
+				<!-- Privilege escalation (such as via set-user-ID or set-group-ID file mode) should not be allowed. -->
+				禁止（通过 SetUID 或 SetGID 文件模式）获得特权提升。<br>
+				<br><b>限制的字段：</b><br>
+				spec.containers[*].securityContext.allowPrivilegeEscalation<br>
+				spec.initContainers[*].securityContext.allowPrivilegeEscalation<br>
+				<br><b>允许的值：</b> false<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>Running as Non-root</td -->
+			<td>以非 root 账号运行 </td>
+			<td>
+				<!-- Containers must be required to run as non-root users. -->
+				必须要求容器以非 root 用户运行。<br>
+				<br><b>限制的字段：</b><br>
+				spec.securityContext.runAsNonRoot<br>
+				spec.containers[*].securityContext.runAsNonRoot<br>
+				spec.initContainers[*].securityContext.runAsNonRoot<br>
+				<br><b>允许的值：</b> true<br>
+			</td>
+		</tr>
+		<tr>
+			<!-- td>Non-root groups <em>(optional)</em></td -->
+			<td>非 root 组 <em>（可选）</em></td>
+			<td>
+				<!-- Containers should be forbidden from running with a root primary or supplementary GID. -->
+				禁止容器使用 root 作为主要或辅助 GID 来运行。<br>
+				<br><b>限制的字段：</b><br>
+				spec.securityContext.runAsGroup<br>
+				spec.securityContext.supplementalGroups[*]<br>
+				spec.securityContext.fsGroup<br>
+				spec.containers[*].securityContext.runAsGroup<br>
+				spec.initContainers[*].securityContext.runAsGroup<br>
+				<br><b>允许的值：</b><br>
+				非零值<br>
+				未定义/nil （<code>*.runAsGroup</code> 除外）<br>
+			</td>
+		</tr>
+		<tr>
+			<td>Seccomp</td>
+			<td>
+				<!-- The 'runtime/default' seccomp profile must be required, or allow specific additional profiles. -->
+				必须要求使用 'runtime/default' seccomp profile 或者允许使用特定的 profiles。<br>
+				<br><b>限制的字段：</b><br>
+				metadata.annotations['seccomp.security.alpha.kubernetes.io/pod']<br>
+				metadata.annotations['container.seccomp.security.alpha.kubernetes.io/*']<br>
+				<br><b>允许的值：</b><br>
+				'runtime/default'<br>
+				未定义（容器注解）<br>
+			</td>
+		</tr>
+	</tbody>
+</table>
+
+<!--
+## Policy Instantiation
+
+Decoupling policy definition from policy instantiation allows for a common understanding and
+consistent language of policies across clusters, independent of the underlying enforcement
+mechanism.
+
+As mechanisms mature, they will be defined below on a per-policy basis. The methods of enforcement
+of individual policies are not defined here.
+-->
+## 策略实例化   {#policy-instantiation}
+
+将策略定义从策略实例中解耦出来有助于形成跨集群的策略理解和语言陈述，
+以免绑定到特定的下层实施机制。
+
+随着相关机制的成熟，这些机制会按策略分别定义在下面。特定策略的实施方法不在这里定义。
+
+[**PodSecurityPolicy**](/zh/docs/concepts/policy/pod-security-policy/)
+
+- [Privileged](https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/policy/privileged-psp.yaml)
+- [Baseline](https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/policy/baseline-psp.yaml)
+- [Restricted](https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/policy/restricted-psp.yaml)
+
+<!--
+## FAQ
+
+### Why isn't there a profile between privileged and default?
+-->
+## 常见问题    {#faq}
+
+### 为什么策略类型定义在 Privileged 和 Default 之间
+
+<!--
+The three profiles defined here have a clear linear progression from most secure (restricted) to least
+secure (privileged), and cover a broad set of workloads. Privileges required above the baseline
+policy are typically very application specific, so we do not offer a standard profile in this
+niche. This is not to say that the privileged profile should always be used in this case, but that
+policies in this space need to be defined on a case-by-case basis.
+
+SIG Auth may reconsider this position in the future, should a clear need for other profiles arise.
+-->
+这里定义的三种策略框架有一个明晰的线性递进关系，从最安全（Restricted）到最不安全，
+并且覆盖了很大范围的工作负载。特权要求超出 Baseline 策略者通常是特定于应用的需求，
+所以我们没有在这个范围内提供标准框架。
+这并不意味着在这样的情形下仍然只能使用 Privileged 框架，只是说处于这个范围的
+策略需要因地制宜地定义。
+
+SIG Auth 可能会在将来考虑这个范围的框架，前提是有对其他框架的需求。
+
+<!--
+### What's the difference between a security policy and a security context?
+
+[Security Contexts](/docs/tasks/configure-pod-container/security-context/) configure Pods and
+Containers at runtime. Security contexts are defined as part of the Pod and container specifications
+in the Pod manifest, and represent parameters to the container runtime.
+-->
+### 安全策略与安全上下文的区别是什么？
+
+[安全上下文](/zh/docs/tasks/configure-pod-container/security-context/)在运行时配置 Pod
+和容器。安全上下文是在 Pod 清单中作为 Pod 和容器规约的一部分来定义的，所代表的是
+传递给容器运行时的参数。
+
+<!--
+Security policies are control plane mechanisms to enforce specific settings in the Security Context,
+as well as other parameters outside the Security Contex. As of February 2020, the current native
+solution for enforcing these security policies is [Pod Security
+Policy](/docs/concepts/policy/pod-security-policy/) - a mechanism for centrally enforcing security
+policy on Pods across a cluster. Other alternatives for enforcing security policy are being
+developed in the Kubernetes ecosystem, such as [OPA
+Gatekeeper](https://github.com/open-policy-agent/gatekeeper).
+-->
+安全策略则是控制面用来对安全上下文以及安全性上下文之外的参数实施某种设置的机制。
+在 2020 年 2 月，目前实施这些安全性策略的原生解决方案是
+[Pod 安全性策略](/zh/docs/concepts/policy/pod-security-policy/) - 一种对集群中
+Pod 的安全性策略进行集中控制的机制。
+Kubernetes 生态系统中还在开发一些其他的替代方案，例如
+[OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper)。
+
+<!--
+### What profiles should I apply to my Windows Pods?
+
+Windows in Kubernetes has some limitations and differentiators from standard Linux-based
+workloads. Specifically, the Pod SecurityContext fields [have no effect on
+Windows](/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#v1-podsecuritycontext). As
+such, no standardized Pod Security profiles currently exists.
+-->
+### 我应该为我的 Windows Pod 实施哪种框架？
+
+Kubernetes 中的 Windows 负载与标准的基于 Linux 的负载相比有一些局限性和区别。
+尤其是 Pod SecurityContext 字段
+[对 Windows 不起作用](/zh/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#v1-podsecuritycontext)。
+因此，目前没有对应的标准 Pod 安全性框架。
+
+<!--
+### What about sandboxed Pods?
+
+There is not currently an API standard that controls whether a Pod is considered sandboxed or
+not. Sandbox Pods may be identified by the use of a sandboxed runtime (such as gVisor or Kata
+Containers), but there is no standard definition of what a sandboxed runtime is.
+
+The protections necessary for sandboxed workloads can differ from others. For example, the need to
+restrict privileged permissions is lessened when the workload is isolated from the underlying
+kernel. This allows for workloads requiring heightened permissions to still be isolated.
+
+Additionally, the protection of sandboxed workloads is highly dependent on the method of
+sandboxing. As such, no single ‘recommended’ policy is recommended for all sandboxed workloads.
+-->
+### 沙箱（Sandboxed） Pod 怎么处理？
+
+现在还没有 API 标准来控制 Pod 是否被视作沙箱化 Pod。
+沙箱 Pod 可以通过其是否使用沙箱化运行时（如 gVisor 或 Kata Container）来辨别，不过
+目前还没有关于什么是沙箱化运行时的标准定义。
+
+沙箱化负载所需要的保护可能彼此各不相同。例如，当负载与下层内核直接隔离开来时，
+限制特权化操作的许可就不那么重要。这使得那些需要更多许可权限的负载仍能被有效隔离。
+
+此外，沙箱化负载的保护高度依赖于沙箱化的实现方法。
+因此，现在还没有针对所有沙箱化负载的“建议”策略。
+

From 85eb1853e20cf207ac542001f9cf831eadbc79df Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Mon, 24 Aug 2020 22:22:40 +0900
Subject: [PATCH 070/496] recheck

---
 content/ja/docs/concepts/containers/images.md | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index e41697c972..a12276a263 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -69,13 +69,13 @@ Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィッ
   - PodでImagePullSecretsを指定する
     - キーを提供したPodのみがプライベートレジストリへアクセスできる
   - ベンダー固有またはローカルエクステンション
-    - カスタムNode構成を使っている場合、あなた(または、あなたのクラウドプロバイダー)はコンテナレジストリーへの認証の仕組みを組み込むことができる
+    - カスタムNode構成を使っている場合、あなた(または、あなたのクラウドプロバイダー)はコンテナレジストリへの認証の仕組みを組み込むことができる
 
 これらのオプションについて、以下で詳しく説明します。
 
 ### プライベートレジストリへの認証をNodeに設定する
 
-Node上でDockerを実行している場合、プライベートコンテナリポジトリへの認証をDockerコンテナランタイムに設定できます。
+Node上でDockerを実行している場合、プライベートコンテナレジストリへの認証をDockerコンテナランタイムに設定できます。
 
 Node構成を制御できる場合は、この方法が適しています。
 
@@ -110,7 +110,7 @@ kubeletプロセスの環境では、明示的に`HOME=/root`を設定する必
       - 名称が必要な場合: `nodes=$( kubectl get nodes -o jsonpath='{range.items[*].metadata}{.name} {end}' )`
       - IPアドレスを取得したい場合: `nodes=$( kubectl get nodes -o jsonpath='{range .items[*].status.addresses[?(@.type=="ExternalIP")]}{.address} {end}' )`
    1. ローカルの`.docker/config.json`を上記の検索パスのいずれかにコピーする
-      - 例えば、これでテスト実施: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
+      - 例えば、これでテストを実施する: `for n in $nodes; do scp ~/.docker/config.json root@"$n":/var/lib/kubelet/config.json; done`
 
 {{< note >}}
 本番環境用クラスターでは、構成管理ツールを使用して必要なすべてのNodeに設定を反映してください。
@@ -161,7 +161,7 @@ kubectl describe pods/private-image-test-1 | grep 'Failed'
 そうでない場合、Podは一部のNodeで実行できますが他のNodeでは実行に失敗します。
 例えば、Nodeのオートスケールを使用している場合、各インスタンスのテンプレートに`.docker/config.json`が含まれている、またはこのファイルが含まれているドライブをマウントする必要があります。
 
-プライベートレジストリーキーを`.docker/config.json`に追加した時点で、すべてのPodがプライベートレジストリのイメージに読み取りアクセス権も持つようになります。
+プライベートレジストリキーを`.docker/config.json`に追加した時点で、すべてのPodがプライベートレジストリのイメージに読み取りアクセス権も持つようになります。
 
 ### 事前にPullしたイメージ
 
@@ -171,7 +171,7 @@ Node構成を制御できる場合、この方法が適しています。
 {{< /note >}}
 
 デフォルトでは、kubeletは指定されたレジストリからそれぞれのイメージをPullしようとします。
-しかしながら、コンテナの`imagePullPolicy`プロパティに`IfNotPresent`や`Never`が設定されている場合、ローカルのイメージが使用されます。(それぞれに対して、優先的またはか排他的に)
+また一方では、コンテナの`imagePullPolicy`プロパティに`IfNotPresent`や`Never`が設定されている場合、ローカルのイメージが使用されます。(それぞれに対して、優先的またはか排他的に)
 
 レジストリ認証の代替として事前にPullしたイメージを利用したい場合、クラスターのすべてのNodeが同じ事前にPullしたイメージを持っていることを確認する必要があります。
 
@@ -187,7 +187,7 @@ Node構成を制御できる場合、この方法が適しています。
 
 KubernetesはPodでのコンテナイメージレジストリキーの指定をサポートしています。
 
-#### Docker ConfigでSecretを作成する。
+#### Docker Configを利用してSecretを作成する。
 
 適切な大文字の値を置き換えて、次のコマンドを実行します。
 
@@ -198,7 +198,7 @@ kubectl create secret docker-registry <name> --docker-server=DOCKER_REGISTRY_SER
 既にDocker認証情報ファイルを持っている場合は、上記のコマンドの代わりに、認証情報ファイルをKubernetes {{< glossary_tooltip text="Secrets" term_id="secret" >}}としてインポートすることができます。
 [既存のDocker認証情報に基づいてSecretを作成する](/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials) で、この設定方法を説明します.
 
-これは複数のプライベートコンテナレジストリを使用している場合に特に有効です。`kubectl create secret docker-registry`はひとつのプライベートリポジトリーにのみ機能するSecretを作成するからです。
+これは複数のプライベートコンテナレジストリを使用している場合に特に有効です。`kubectl create secret docker-registry`はひとつのプライベートレジストリにのみ機能するSecretを作成するからです。
 
 {{< note >}}
 Podは自分自身のNamespace内にあるimage pull secretsのみが参照可能であるため、この作業はNemespace毎に1回行う必要があります。
@@ -245,7 +245,7 @@ EOF
 
 1. クラスターに独自仕様でない(例えば、オープンソース)イメージだけを実行する。イメージを非公開にする必要がない
    - Docker hubのパブリックイメージを利用する
-     - 設定は不要
+     - 設定は必要ない
      - クラウドプロバイダーによっては、可用性の向上とイメージをPullする時間を短くする為に、自動的にキャッシュやミラーされたパプリックイメージが提供される
 1. 社外には非公開の必要があるが、すべてのクラスター利用者には見せてよい独自仕様のイメージをクラスターで実行している
    - ホストされたプライペートな [Dockerレジストリ](https://docs.docker.com/registry/)を使用
@@ -260,7 +260,7 @@ EOF
    - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化かを確認する必要がある。さもないと、全部のPodがすべてのイメージへのアクセスができてしまう可能性がある
    - 機密データはイメージに含めてしまうのではなく、"Secret"リソースに移行する
 1. それぞれのテナントが独自のプライベートレジストリを必要とするマルチテナントのクラスターである
-   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認する必要あり。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性がある
+   - [AlwaysPullImagesアドミッションコントローラー](/docs/reference/access-authn-authz/admission-controllers/#alwayspullimages)が有効化を確認する必要がある。さもないと、すべてのテナントの全Podが全部のイメージにアクセスできてしまう可能性がある
    - 認証が必要なプライベートレジストリを実行する
    - それぞれのテナントでレジストリ認証を生成し、Secretへ設定し、各テナントのNamespaceに追加する
    - テナントは、Secretを各NamespaceのimagePullSecretsへ追加する

From 3a044c18d6fe40de56eb095d3c39ce5ba765473a Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Mon, 24 Aug 2020 23:44:43 +0900
Subject: [PATCH 071/496] finished translate

---
 content/ja/docs/concepts/security/overview.md | 132 ++++++++++++++++++
 1 file changed, 132 insertions(+)
 create mode 100644 content/ja/docs/concepts/security/overview.md

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
new file mode 100644
index 0000000000..ea14270e4c
--- /dev/null
+++ b/content/ja/docs/concepts/security/overview.md
@@ -0,0 +1,132 @@
+---
+reviewers:
+title: クラウドネイティブセキュリティの概要
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+この概要では、クラウドネイティブセキュリティにおけるKubernetesのセキュリティを考えるためのモデルを定義します。
+
+{{< warning >}}
+コンテナセキュリティモデルは、実証済の情報セキュリティポリシーではなく提案を提供します。
+{{< /warning >}}
+
+<!-- body -->
+
+## クラウドネイティブセキュリティの４C
+
+セキュリティは階層で考えることができます。クラウドネイティブの4Cは、クラウド、クラスター、コンテナ、そしてコードです。
+
+{{< note >}}
+階層化されたアプローチは、セキュリティに対する[多層防御](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))のアプローチを強化します。これはソフトウェアシステムを保護するベストプラクティスとして幅広く認知されています。
+{{< /note >}}
+
+{{< figure src="/images/docs/4c.png" title="クラウドネイティブセキュリティの４C" >}}
+
+クラウドネイティブセキュリティモデルの各レイヤーは次の最も外側のレイヤー上に構築します。コードレイヤーは、強固な基盤（クラウド、クラスター、コンテナ）セキュリティレイヤーから恩恵を受けます。コードレベルのセキュリティに対応しても基盤レイヤーが低い水準のセキュリティでは守ることができません。
+
+## クラウド
+
+いろいろな意味でも、クラウド（または同じ場所に設置されたサーバー、企業のデータセンター）はKubernetesクラスターの[トラステッドコンピューティングベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な（または脆弱な方法で構成されている）場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
+
+### クラウドプロバイダーのセキュリティ
+
+Kubernetesクラスターを所有しているハードウェアや様々なクラウドプロバイダー上で実行している場合、セキュリティのベストプラクティスに関するドキュメントを参考にします。ここでは人気のあるクラウドプロバイダーのセキュリティドキュメントの一部のリンクを紹介します。
+
+{{< table caption="Cloud provider security" >}}
+
+IaaSプロバイダー        | リンク |
+-------------------- | ------------ |
+Alibaba Cloud | https://www.alibabacloud.com/trust-center |
+Amazon Web Services | https://aws.amazon.com/security/ |
+Google Cloud Platform | https://cloud.google.com/security/ |
+IBM Cloud | https://www.ibm.com/cloud/security |
+Microsoft Azure | https://docs.microsoft.com/en-us/azure/security/azure-security |
+VMWare VSphere | https://www.vmware.com/security/hardening-guides.html |
+
+{{< /table >}}
+
+### インフラのセキュリティ {#infrastructure-security}
+
+Kubernetesクラスターのインフラを保護するための提案です。
+
+{{< table caption="Infrastructure security" >}}
+
+Kubernetesインフラに関する懸念事項 | 推奨事項 |
+--------------------------------------------- | -------------- |
+API Server(コントロールプレーン)へのネットワークアクセス| Kubernetesコントロールプレーンへのすべてのアクセスは、インターネット上での一般公開は許されず、クラスター管理に必要なIPアドレスに制限するネットワークアクセス制御リストによって制御されます。|
+Nodeへのネットワークアクセス | Nodeはコントロールプレーンの特定ポート _のみ_ 接続(ネットワークアクセス制御リストを介して)を受け入れるよう設定し、NodePortとLoadBalancerタイプのKubernetesのServiceに関する接続を受け入れるよう設定する必要があります。可能であれば、それらのNodeはパブリックなインターネットに完全公開しないでください。|
+KubernetesからのクラウドプロバイダーAPIへのアクセス | 各クラウドプロバイダーはKubernetesコントロールプレーンとNodeに異なる権限を与える必要があります。[最小権限の原則](https://en.wikipedia.org/wiki/Principle_of_least_privilege)に従い、管理に必要なリソースに対してクラウドプロバイダーへのアクセスをクラスターに提供するのが最善です。[Kopsドキュメント](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles)にはIAMのポリシーとロールについての情報が記載されています。|
+etcdへのアクセス | etcd(Kubernetesのデータストア)へのアクセスはコントロールプレーンのみに制限すべきです。設定によっては、TLS経由でetcdを利用する必要があります。詳細な情報は[etcdドキュメント](https://github.com/etcd-io/etcd/tree/master/Documentation)を参照してください。|
+etcdの暗号化 | 可能な限り、保存時に全ドライブを暗号化することは良いプラクティスですが、etcdはクラスター全体(Secretを含む)の状態を保持しているため、そのディスクは特に暗号化する必要があります。|
+
+{{< /table >}}
+
+## クラスター
+
+Kubernetesを保護する為には２つの懸念事項があります。
+
+* 設定可能なクラスターコンポーネントの保護
+* クラスターで実行されるアプリケーションの保護
+
+### クラスターのコンポーネント {#cluster-components}
+
+想定外または悪意のあるアクセスからクラスターを保護して適切なプラクティスを採用したい場合、[クラスターの保護](/docs/tasks/administer-cluster/securing-a-cluster/)に関するアドバイスを読み、従ってください。
+
+### クラスター内のコンポーネント(アプリケーション) {#cluster-applications}
+
+アプリケーションを対象にした攻撃に応じて、セキュリティの特定側面に焦点をあてたい場合があります。例:他のリソースとの連携で重要なサービス(サービスA)と、リソース枯渇攻撃に対して脆弱な別のワークロード(サービスB)が実行されている場合、サービスBのリソースを制限していないとサービスAが危険にさらされるリスクが高くなります。次の表はセキュリティの懸念事項とKubernetesで実行されるワークロードを保護するための推奨事項を示しています。
+
+
+ワークロードセキュリティに関する懸念事項 | 推奨事項 |
+------------------------------ | --------------------- |
+RBAC認可(Kubernetes APIへのアクセス) | https://kubernetes.io/docs/reference/access-authn-authz/rbac/
+認証 | https://kubernetes.io/docs/reference/access-authn-authz/controlling-access/ |
+アプリケーションのSecret管理(およびetcdへの保存時に暗号化) | https://kubernetes.io/ja/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/ |
+Pod Security Policies | https://kubernetes.io/docs/concepts/policy/pod-security-policy/ |
+Quality of Service (およびクラスターリソース管理) | https://kubernetes.io/ja/docs/tasks/configure-pod-container/quality-service-pod/ |
+Network Policies | https://kubernetes.io/docs/concepts/services-networking/network-policies/ |
+Kubernetes IngressのTLS | https://kubernetes.io/ja/docs/concepts/services-networking/ingress/#tls |
+
+
+## コンテナ
+
+コンテナセキュリティは本ガイドの範囲外になります。このトピックを検索するために一般的な推奨事項とリンクを以下に示します。
+
+コンテナに関する懸念事項 | 推奨事項 |
+------------------------------ | -------------- |
+コンテナの脆弱性スキャンとOS依存のセキュリティ | イメージをビルドする手順の一部として、既知の脆弱性がないかコンテナをスキャンする必要があります。 |
+イメージの署名と実施 | コンテナイメージを署名し、コンテナの中身に関する信頼性を維持します。 |
+特権ユーザーを許可しない | コンテナの構成時に、コンテナの目的を実行するために必要最低限なOS特権を持ったユーザーをコンテナ内部に作成する方法のドキュメントを参考にしてください。 |
+
+## コード
+
+アプリケーションコードは、あなたが最も制御できる主要な攻撃対象のひとつです。アプリケーションコードを保護することはKubernetesのセキュリティトピックの範囲外ですが、アプリケーションコードを保護するための推奨事項を以下に示します。
+
+### コードセキュリティ
+
+{{< table caption="Code security" >}}
+
+コードに関する懸念事項 | 推奨事項 |
+-------------------------| -------------- |
+TLS経由のアクセスのみ | コードがTCP通信を必要とする場合は、事前にクライアントとのTSLハンドシェイクを実行してください。 いくつかの例外を除いて、全ての通信を暗号化してください。さらに一歩すすめて、サービス間のネットワークトラフィックを暗号化することはよい考えです。これは、サービスを特定した2つの証明書で通信の両端を検証する相互認証、または[mTLS](https://en.wikipedia.org/wiki/Mutual_authentication)して知られているプロセスを通じて実行できます。|
+通信ポートの範囲制限 | この推奨事項は一目瞭然かもしれませんが、可能なかぎり、通信とメトリクス収集に必要不可欠なサービスのポートのみを公開します。 |
+サードパティに依存するセキュリティ | 既知の脆弱性についてアプリケーションのサードパーティ製ライブラリーを定期的にスキャンすることを推奨します。それぞれの言語は自動でこのチェックを実行するツールを持っています。 |
+静的コード解析 | ほとんどの言語ではコードのスニペットを解析して、安全でない可能性のあるコーディングを分析する方法が提供しています。可能な限り、コードベースでスキャンして、よく起こるセキュリティエラーを検出できる自動ツールを使用してチェックを実行すべきです。一部のツールはここで紹介されています。 https://owasp.org/www-community/Source_Code_Analysis_Tools |
+動的プロービング攻撃 | よく知られているいくつかのサービス攻撃をサービスに対して試すことができる自動ツールがいくつかあります。これにはSQLインジェクション、CSRF、そしてXSSが含まれます。よく知られている動的解析ツールは[OWASP Zed Attack proxy](https://owasp.org/www-project-zap/)toolです。 |
+
+{{< /table >}}
+
+## {{% heading "whatsnext" %}}
+
+関連するKubernetesセキュリティについて学びます。
+
+* [Podのセキュリティ基準](/docs/concepts/security/pod-security-standards/)
+* [PodのNetwork policies](/docs/concepts/services-networking/network-policies/)
+* [クラスターの保護](/docs/tasks/administer-cluster/securing-a-cluster/)
+* [APIアクセスコントロール](/docs/reference/access-authn-authz/controlling-access/)
+* コントロールプレーンとの[通信時のデータ暗号化](/docs/tasks/tls/managing-tls-in-a-cluster/)
+* [保存時のデータ暗号化](/docs/tasks/administer-cluster/encrypt-data/)
+* [Kubernetes Secrets](/ja/docs/concepts/configuration/secret/)

From 593578db7a94df4325db77d2aacdba6805d6bb10 Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Tue, 25 Aug 2020 00:59:17 +0900
Subject: [PATCH 072/496] ja-trans: Fix Japanese translation in
 ja/concepts/cluster-administration/proxies.md #19281

---
 .../ja/docs/concepts/cluster-administration/proxies.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/ja/docs/concepts/cluster-administration/proxies.md b/content/ja/docs/concepts/cluster-administration/proxies.md
index 19eb07bee2..bbae1faf00 100644
--- a/content/ja/docs/concepts/cluster-administration/proxies.md
+++ b/content/ja/docs/concepts/cluster-administration/proxies.md
@@ -30,12 +30,12 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
     - apiserverのプロセス内で稼働します
     - クライアントからプロキシー間ではHTTPSを使用します(apiserverの設定により、HTTPを使用します)
     - プロキシーからターゲット間では利用可能な情報を使用して、プロキシーによって選択されたHTTPかHTTPSのいずれかを使用します
-    - Node、Pod、Serviceへ到達可能です
+    - Node、Pod、Serviceへ到達するのに使えます
     - Serviceへ到達するときは負荷分散を行います
 
 1.  [kube proxy](/ja/docs/concepts/services-networking/service/#ips-and-vips):
 
-    - 各Node上で稼働します
+    - 各ノード上で稼働します
     - UDP、TCP、SCTPをプロキシーします
     - HTTPを解釈しません
     - 負荷分散機能を提供します
@@ -44,7 +44,7 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
 1.  apiserverの前段にあるプロキシー/ロードバランサー:
 
     - 実際に存在するかどうかと実装はクラスターごとに異なります(例: nginx)
-    - 全てのクライアント間と、1つ以上のapiserverの間に位置します
+    - 全てのクライアントと、1つ以上のapiserverの間に位置します
     - 複数のapiserverがあるときロードバランサーとして稼働します
 
 1.  外部サービス上で稼働するクラウドロードバランサー:
@@ -57,7 +57,7 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
 
 Kubernetesユーザーのほとんどは、最初の2つのタイプ以外に心配する必要はありません。クラスター管理者は最後のタイプのロードバランサーを正しくセットアップすることを保証します。
 
-## リダイレクトの要求 Requesting redirects
+## リダイレクトの要求
 
 プロキシーはリダイレクトの機能を置き換えました。リダイレクトの使用は非推奨となります。
 

From 8b954fdf16e1b113f15ebb9143231f1791c58504 Mon Sep 17 00:00:00 2001
From: Keita Akutsu <kakts.git@gmail.com>
Date: Tue, 25 Aug 2020 01:01:18 +0900
Subject: [PATCH 073/496] ja-trans: Fix Japanese translation in
 ja/concepts/cluster-administration/proxies.md #19281

---
 content/ja/docs/concepts/cluster-administration/proxies.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/cluster-administration/proxies.md b/content/ja/docs/concepts/cluster-administration/proxies.md
index bbae1faf00..4738993ab0 100644
--- a/content/ja/docs/concepts/cluster-administration/proxies.md
+++ b/content/ja/docs/concepts/cluster-administration/proxies.md
@@ -55,7 +55,7 @@ Kubernetesを使用する際に、いくつかのプロキシーを使用する
     - SCTPのサポートはクラウドプロバイダーのロードバランサーの実装によって異なります
     - ロードバランサーの実装はクラウドプロバイダーによって異なります
 
-Kubernetesユーザーのほとんどは、最初の2つのタイプ以外に心配する必要はありません。クラスター管理者は最後のタイプのロードバランサーを正しくセットアップすることを保証します。
+Kubernetesユーザーのほとんどは、最初の2つのタイプ以外に心配する必要はありません。クラスター管理者はそれ以外のタイプのロードバランサーを正しくセットアップすることを保証します。
 
 ## リダイレクトの要求
 

From 54471cde97290e2eafb4d49cac5ee26fec6eabea Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken-oomichi@wx.jp.nec.com>
Date: Mon, 24 Aug 2020 23:51:52 +0000
Subject: [PATCH 074/496] Update the link of kustomization file

The page of kustomize/docs/glossary.md has been moved from
https://github.com/kubernetes-sigs/kustomize to
https://kubernetes-sigs.github.io/kustomize/api-reference/glossary/
This updates the link.
---
 .../en/docs/tasks/manage-kubernetes-objects/kustomization.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
index 01b03233c8..f5e20a94c0 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -8,7 +8,7 @@ weight: 20
 
 [Kustomize](https://github.com/kubernetes-sigs/kustomize) is a standalone tool
 to customize Kubernetes objects
-through a [kustomization file](https://github.com/kubernetes-sigs/kustomize/blob/master/docs/glossary.md#kustomization).
+through a [kustomization file](https://kubernetes-sigs.github.io/kustomize/api-reference/glossary/#kustomization).
 
 Since 1.14, Kubectl also
 supports the management of Kubernetes objects using a kustomization file.

From 4883f2f080a1babe55073f481d429ae476abc89e Mon Sep 17 00:00:00 2001
From: Samuel Liu <liupeng0518@gmail.com>
Date: Tue, 25 Aug 2020 11:02:31 +0800
Subject: [PATCH 075/496] Update namespaces.md

fix typo.
---
 .../docs/concepts/overview/working-with-objects/namespaces.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/overview/working-with-objects/namespaces.md b/content/zh/docs/concepts/overview/working-with-objects/namespaces.md
index e40ff89abf..be240bfb9b 100644
--- a/content/zh/docs/concepts/overview/working-with-objects/namespaces.md
+++ b/content/zh/docs/concepts/overview/working-with-objects/namespaces.md
@@ -115,7 +115,7 @@ Kubernetes 会创建三个初始名字空间：
 * `kube-public` 这个名字空间是自动创建的，所有用户（包括未经过身份验证的用户）都可以读取它。
   这个名字空间主要用于集群使用，以防某些资源在整个集群中应该是可见和可读的。
   这个名字空间的公共方面只是一种约定，而不是要求。
-* `kube-node-lease` 此名字空间用于与哥哥节点相关的租期（Lease）对象；
+* `kube-node-lease` 此名字空间用于与各个节点相关的租期（Lease）对象；
   此对象的设计使得集群规模很大时节点心跳检测性能得到提升。
 
 <!--

From 127072b78efc932252d5417e18e7b154e910b0d5 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 24 Aug 2020 19:49:49 +0800
Subject: [PATCH 076/496] [zh] Translate setup/best-practices/multiple-zones.md

---
 .../setup/best-practices/multiple-zones.md    | 606 ++++++++++++++++++
 1 file changed, 606 insertions(+)
 create mode 100644 content/zh/docs/setup/best-practices/multiple-zones.md

diff --git a/content/zh/docs/setup/best-practices/multiple-zones.md b/content/zh/docs/setup/best-practices/multiple-zones.md
new file mode 100644
index 0000000000..c4ca5a5eec
--- /dev/null
+++ b/content/zh/docs/setup/best-practices/multiple-zones.md
@@ -0,0 +1,606 @@
+---
+title: 运行于多区环境
+weight: 10
+content_type: concept
+---
+<!--
+reviewers:
+- jlowdermilk
+- justinsb
+- quinton-hoole
+title: Running in multiple zones
+weight: 10
+content_type: concept
+-->
+
+<!-- overview -->
+
+<!--
+This page describes how to run a cluster in multiple zones.
+-->
+本页描述如何在多个区（Zone）中运行集群。
+
+<!-- body -->
+
+<!--
+## Introduction
+
+Kubernetes 1.2 adds support for running a single cluster in multiple failure zones
+(GCE calls them simply "zones", AWS calls them "availability zones", here we'll refer to them as "zones").
+This is a lightweight version of a broader Cluster Federation feature (previously referred to by the affectionate
+nickname ["Ubernetes"](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/multicluster/federation.md)).
+Full Cluster Federation allows combining separate
+Kubernetes clusters running in different regions or cloud providers
+(or on-premises data centers).  However, many
+users simply want to run a more available Kubernetes cluster in multiple zones
+of their single cloud provider, and this is what the multizone support in 1.2 allows
+(this previously went by the nickname "Ubernetes Lite").
+-->
+## 介绍
+
+Kubernetes 1.2 添加了跨多个失效区（Failure Zone）运行同一集群的能力
+（GCE 把它们称作“区（Zones）”，AWS 把它们称作“可用区（Availability Zones）”，
+这里我们用“区（Zones）”指代它们）。
+此能力是更广泛的集群联邦（Cluster Federation）特性的一个轻量级版本。
+集群联邦之前有一个昵称
+["Ubernetes"](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/multicluster/federation.md))。
+完全的集群联邦可以将运行在多个区域（Region）或云供应商（或本地数据中心）的多个
+Kubernetes 集群组合起来。
+不过，很多用户仅仅是希望在同一云厂商平台的多个区域运行一个可用性更好的集群，
+而者恰恰是 1.2 引入的多区支持所带来的特性
+（此特性之前有一个昵称 “Ubernetes Lite”）。
+
+<!--
+Multizone support is deliberately limited: a single Kubernetes cluster can run
+in multiple zones, but only within the same region (and cloud provider).  Only
+GCE and AWS are currently supported automatically (though it is easy to
+add similar support for other clouds or even bare metal, by simply arranging
+for the appropriate labels to be added to nodes and volumes).
+-->
+多区支持有意实现的有局限性：可以在跨多个区域运行同一 Kubernetes 集群，但只能
+在同一区域（Region）和云厂商平台。目前仅自动支持 GCE 和 AWS，尽管为其他云平台
+或裸金属平台添加支持页相对容易，只需要确保节点和卷上添加合适的标签即可。
+
+<!--
+## Functionality
+
+When nodes are started, the kubelet automatically adds labels to them with
+zone information.
+-->
+## 功能
+
+节点启动时，`kubelet` 自动向其上添加区信息标签。
+
+<!--
+Kubernetes will automatically spread the pods in a replication controller
+or service across nodes in a single-zone cluster (to reduce the impact of
+failures.)  With multiple-zone clusters, this spreading behavior is
+extended across zones (to reduce the impact of zone failures.)  (This is
+achieved via `SelectorSpreadPriority`).  This is a best-effort
+placement, and so if the zones in your cluster are heterogeneous
+(e.g. different numbers of nodes, different types of nodes, or
+different pod resource requirements), this might prevent perfectly
+even spreading of your pods across zones. If desired, you can use
+homogeneous zones (same number and types of nodes) to reduce the
+probability of unequal spreading.
+-->
+在单区（Single-Zone）集群中， Kubernetes 会自动将副本控制器或服务中的 Pod
+分布到不同节点，以降低节点失效的影响。
+在多区集群中，这一分布负载的行为被扩展到跨区分布，以降低区失效的影响，
+跨区分布的能力是通过 `SelectorSpreadPriority` 实现的。此放置策略亦仅仅是
+尽力而为，所以如果你的集群所跨区是异质的（例如，节点个数不同、节点类型
+不同或者 Pod 资源需求不同），放置策略都可能无法完美地跨区完成 Pod 的
+均衡分布。如果需要，你可以使用同质区（节点个数和类型相同）以降低不均衡
+分布的可能性。
+
+<!--
+When persistent volumes are created, the `PersistentVolumeLabel`
+admission controller automatically adds zone labels to them.  The scheduler (via the
+`VolumeZonePredicate` predicate) will then ensure that pods that claim a
+given volume are only placed into the same zone as that volume, as volumes
+cannot be attached across zones.
+-->
+持久卷被创建时，`PersistentVolumeLabel` 准入控制器会自动为其添加区标签。
+调度器使用 `VolumeZonePredicate` 断言确保申领某给定卷的 Pod 只会被放到
+该卷所在的区。这是因为卷不可以跨区挂载。
+
+<!--
+## Limitations
+
+There are some important limitations of the multizone support:
+
+* We assume that the different zones are located close to each other in the
+network, so we don't perform any zone-aware routing.  In particular, traffic
+that goes via services might cross zones (even if some pods backing that service
+exist in the same zone as the client), and this may incur additional latency and cost.
+-->
+## 局限性
+
+多区支持有一些很重要的局限性：
+
+* 我们假定不同的区之间在网络上彼此距离很近，所以我们不执行可感知区的路由。
+  尤其是，即使某些负责提供该服务的 Pod  与客户端位于同一区，通过服务末端
+  进入的流量可能会跨区，因而会导致一些额外的延迟和开销。
+
+<!--
+* Volume zone-affinity will only work with a `PersistentVolume`, and will not
+work if you directly specify an EBS volume in the pod spec (for example).
+
+* Clusters cannot span clouds or regions (this functionality will require full
+federation support).
+-->
+* 卷与区之间的亲和性仅适用于 PV 持久卷。例如，如果你直接在 Pod 规约中指定某 EBS
+  卷，这种亲和性支持就无法工作。
+
+* 集群无法跨多个云平台或者地理区域运行。这类功能需要完整的联邦特性支持。
+
+<!--
+* Although your nodes are in multiple zones, kube-up currently builds
+a single master node by default.  While services are highly
+available and can tolerate the loss of a zone, the control plane is
+located in a single zone.  Users that want a highly available control
+plane should follow the [high availability](/docs/setup/production-environment/tools/kubeadm/high-availability/) instructions.
+-->
+* 尽管你的节点位于多个区中，`kube-up` 脚本目前默认只能构造一个主控节点。
+  尽管服务是高可用的，能够忍受失去某个区的问题，控制面位于某一个区中。
+  希望运行高可用控制面的用户应该遵照
+  [高可用性](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)
+  中的指令构建。
+
+<!--
+### Volume limitations
+
+The following limitations are addressed with
+[topology-aware volume binding](/docs/concepts/storage/storage-classes/#volume-binding-mode).
+
+* StatefulSet volume zone spreading when using dynamic provisioning is currently not compatible with
+  pod affinity or anti-affinity policies.
+-->
+### 卷局限性
+
+以下局限性通过
+[拓扑感知的卷绑定](/zh/docs/concepts/storage/storage-classes/#volume-binding-mode)解决：
+
+* 使用动态卷供应时，StatefulSet 卷的跨区分布目前与 Pod
+  亲和性和反亲和性策略不兼容。
+
+<!--
+* If the name of the StatefulSet contains dashes ("-"), volume zone spreading
+  may not provide a uniform distribution of storage across zones.
+
+* When specifying multiple PVCs in a Deployment or Pod spec, the StorageClass
+  needs to be configured for a specific single zone, or the PVs need to be
+  statically provisioned in a specific zone. Another workaround is to use a
+  StatefulSet, which will ensure that all the volumes for a replica are
+  provisioned in the same zone.
+-->
+* 如果 StatefulSet 的名字中包含连字符（"-"），卷的跨区分布可能无法实现存储的
+  跨区同一分布。
+
+* 当在一个 Deployment 或 Pod 规约中指定多个 PVC 申领时，则需要为某特定区域
+  配置 StorageClass，或者在某一特定区域中需要静态供应 PV 卷。
+  另一种解决方案是使用 StatefulSet，确保给定副本的所有卷都从同一区中供应。
+
+<!--
+## Walkthrough
+
+We're now going to walk through setting up and using a multi-zone
+cluster on both GCE & AWS.  To do so, you bring up a full cluster
+(specifying `MULTIZONE=true`), and then you add nodes in additional zones
+by running `kube-up` again (specifying `KUBE_USE_EXISTING_MASTER=true`).
+-->
+## 演练
+
+我们现在准备对在 GCE 和 AWS 上配置和使用多区集群进行演练。为了完成此演练，
+你需要设置 `MULTIZONE=true` 来启动一个完整的集群，之后指定
+`KUBE_USE_EXISTING_MASTER=true` 并再次运行 `kube-up` 添加其他区中的节点。
+
+<!--
+### Bringing up your cluster
+
+Create the cluster as normal, but pass MULTIZONE to tell the cluster to manage multiple zones; creating nodes in us-central1-a.
+-->
+### 建立集群
+
+和往常一样创建集群，不过需要设置 MULTIZONE，以便告诉集群需要管理多个区。
+这里我们在 `us-central1-a` 创建节点。
+
+GCE:
+
+```shell
+curl -sS https://get.k8s.io | MULTIZONE=true KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-a NUM_NODES=3 bash
+```
+
+AWS:
+
+```shell
+curl -sS https://get.k8s.io | MULTIZONE=true KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2a NUM_NODES=3 bash
+```
+
+<!--
+This step brings up a cluster as normal, still running in a single zone
+(but `MULTIZONE=true` has enabled multi-zone capabilities).
+-->
+这一步骤和往常一样启动一个集群，不过尽管 `MULTIZONE=true`
+标志已经启用了多区功能特性支持，集群仍然运行在一个区内。
+
+<!--
+### Nodes are labeled
+
+View the nodes; you can see that they are labeled with zone information.
+They are all in `us-central1-a` (GCE) or `us-west-2a` (AWS) so far.  The
+labels are `failure-domain.beta.kubernetes.io/region` for the region,
+and `failure-domain.beta.kubernetes.io/zone` for the zone:
+-->
+### 节点已被打标签
+
+查看节点，你会看到节点上已经有了区信息标签。
+目前这些节点都在 `us-central1-a` (GCE) 或 `us-west-2a` (AWS)。
+对于区域（Region），标签为 `failure-domain.beta.kubernetes.io/region`，
+对于区（Zone），标签为 `failure-domain.beta.kubernetes.io/zone`：
+
+```shell
+kubectl get nodes --show-labels
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+NAME                     STATUS                     ROLES    AGE   VERSION          LABELS
+kubernetes-master        Ready,SchedulingDisabled   <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-1,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-master
+kubernetes-minion-87j9   Ready                      <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-87j9
+kubernetes-minion-9vlv   Ready                      <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
+kubernetes-minion-a12q   Ready                      <none>   6m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-a12q
+```
+<!--
+### Add more nodes in a second zone
+
+Let's add another set of nodes to the existing cluster, reusing the
+existing master, running in a different zone (us-central1-b or us-west-2b).
+We run kube-up again, but by specifying `KUBE_USE_EXISTING_MASTER=true`
+kube-up will not create a new master, but will reuse one that was previously
+created instead.
+-->
+### 添加第二个区中的节点
+
+让我们向现有集群中添加另外一组节点，复用现有的主控节点，但运行在不同的区
+（`us-central1-b` 或 `us-west-2b`）。
+我们再次运行 `kube-up`，不过设置 `KUBE_USE_EXISTING_MASTER=true`。
+`kube-up` 不会创建新的主控节点，而会复用之前创建的主控节点。
+
+GCE:
+
+```shell
+KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-b NUM_NODES=3 kubernetes/cluster/kube-up.sh
+```
+
+<!--
+On AWS we also need to specify the network CIDR for the additional
+subnet, along with the master internal IP address:
+-->
+在 AWS 上，我们还需要为额外的子网指定网络 CIDR，以及主控节点的内部 IP 地址：
+
+```shell
+KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2b NUM_NODES=3 KUBE_SUBNET_CIDR=172.20.1.0/24 MASTER_INTERNAL_IP=172.20.0.9 kubernetes/cluster/kube-up.sh
+```
+
+<!--
+View the nodes again; 3 more nodes should have launched and be tagged
+in us-central1-b:
+-->
+再次查看节点，你会看到新启动了三个节点并且其标签表明运行在 `us-central1-b` 区：
+
+```shell
+kubectl get nodes --show-labels
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+NAME                     STATUS                     ROLES    AGE   VERSION           LABELS
+kubernetes-master        Ready,SchedulingDisabled   <none>   16m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-1,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-master
+kubernetes-minion-281d   Ready                      <none>   2m    v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-281d
+kubernetes-minion-87j9   Ready                      <none>   16m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-87j9
+kubernetes-minion-9vlv   Ready                      <none>   16m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
+kubernetes-minion-a12q   Ready                      <none>   17m   v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-a12q
+kubernetes-minion-pp2f   Ready                      <none>   2m    v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-pp2f
+kubernetes-minion-wf8i   Ready                      <none>   2m    v1.13.0           beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-wf8i
+```
+
+<!--
+### Volume affinity
+
+Create a volume using the dynamic volume creation (only PersistentVolumes are supported for zone affinity):
+-->
+### 卷亲和性
+
+通过动态卷供应创建一个卷（只有 PV 持久卷支持区亲和性）：
+
+```bash
+kubectl apply -f - <<EOF
+{
+  "apiVersion": "v1",
+  "kind": "PersistentVolumeClaim",
+  "metadata": {
+    "name": "claim1",
+    "annotations": {
+        "volume.alpha.kubernetes.io/storage-class": "foo"
+    }
+  },
+  "spec": {
+    "accessModes": [
+      "ReadWriteOnce"
+    ],
+    "resources": {
+      "requests": {
+        "storage": "5Gi"
+      }
+    }
+  }
+}
+EOF
+```
+
+<!--
+For version 1.3+ Kubernetes will distribute dynamic PV claims across
+the configured zones. For version 1.2, dynamic persistent volumes were
+always created in the zone of the cluster master
+(here us-central1-a / us-west-2a); that issue
+([#23330](https://github.com/kubernetes/kubernetes/issues/23330))
+was addressed in 1.3+.
+-->
+{{< note >}}
+Kubernetes 1.3 及以上版本会将动态 PV 申领散布到所配置的各个区。
+在 1.2 版本中，动态持久卷总是在集群主控节点所在的区
+（这里的 `us-central1-a` 或 `us-west-2a`），
+对应的 Issue ([#23330](https://github.com/kubernetes/kubernetes/issues/23330))
+在 1.3 及以上版本中已经解决。
+{{< /note >}}
+
+<!--
+Now let's validate that Kubernetes automatically labeled the zone & region the PV was created in.
+-->
+现在我们来验证 Kubernetes 自动为 PV 打上了所在区或区域的标签：
+
+```shell
+kubectl get pv --show-labels
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+NAME           CAPACITY   ACCESSMODES   RECLAIM POLICY   STATUS    CLAIM            STORAGECLASS    REASON    AGE       LABELS
+pv-gce-mj4gm   5Gi        RWO           Retain           Bound     default/claim1   manual                    46s       failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a
+```
+
+<!--
+So now we will create a pod that uses the persistent volume claim.
+Because GCE PDs / AWS EBS volumes cannot be attached across zones,
+this means that this pod can only be created in the same zone as the volume:
+-->
+现在我们将创建一个使用 PVC 申领的 Pod。
+由于 GCE PD 或 AWS EBS 卷都不能跨区挂载，这意味着 Pod 只能创建在卷所在的区：
+
+```yaml
+kubectl apply -f - <<EOF
+apiVersion: v1
+kind: Pod
+metadata:
+  name: mypod
+spec:
+  containers:
+    - name: myfrontend
+      image: nginx
+      volumeMounts:
+      - mountPath: "/var/www/html"
+        name: mypd
+  volumes:
+    - name: mypd
+      persistentVolumeClaim:
+        claimName: claim1
+EOF
+```
+
+<!--
+Note that the pod was automatically created in the same zone as the volume, as
+cross-zone attachments are not generally permitted by cloud providers:
+-->
+注意 Pod 自动创建在卷所在的区，因为云平台提供商一般不允许跨区挂接存储卷。
+
+```shell
+kubectl describe pod mypod | grep Node
+```
+
+```
+Node:        kubernetes-minion-9vlv/10.240.0.5
+```
+
+<!--
+And check node labels:
+-->
+检查节点标签：
+
+```shell
+kubectl get node kubernetes-minion-9vlv --show-labels
+```
+
+```
+NAME                     STATUS    AGE    VERSION          LABELS
+kubernetes-minion-9vlv   Ready     22m    v1.6.0+fff5156   beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
+```
+
+<!--
+### Pods are spread across zones
+
+Pods in a replication controller or service are automatically spread
+across zones.  First, let's launch more nodes in a third zone:
+-->
+### Pod 跨区分布
+
+同一副本控制器或服务的多个 Pod 会自动完成跨区分布。
+首先，我们现在第三个区启动一些节点：
+
+GCE:
+
+```shell
+KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-f NUM_NODES=3 kubernetes/cluster/kube-up.sh
+```
+
+AWS:
+
+```shell
+KUBE_USE_EXISTING_MASTER=true MULTIZONE=true KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2c NUM_NODES=3 KUBE_SUBNET_CIDR=172.20.2.0/24 MASTER_INTERNAL_IP=172.20.0.9 kubernetes/cluster/kube-up.sh
+```
+
+<!--
+Verify that you now have nodes in 3 zones:
+-->
+验证你现在有来自三个区的节点：
+
+```shell
+kubectl get nodes --show-labels
+```
+
+<!--
+Create the guestbook-go example, which includes an RC of size 3, running a simple web app:
+-->
+创建 `guestbook-go` 示例，其中包含副本个数为 3 的 RC，运行一个简单的 Web 应用：
+
+```shell
+find kubernetes/examples/guestbook-go/ -name '*.json' | xargs -I {} kubectl apply -f {}
+```
+
+<!--
+The pods should be spread across all 3 zones:
+-->
+Pod 应该跨三个区分布：
+
+```shell
+kubectl describe pod -l app=guestbook | grep Node
+```
+
+```
+Node:        kubernetes-minion-9vlv/10.240.0.5
+Node:        kubernetes-minion-281d/10.240.0.8
+Node:        kubernetes-minion-olsh/10.240.0.11
+```
+
+```shell
+kubectl get node kubernetes-minion-9vlv kubernetes-minion-281d kubernetes-minion-olsh --show-labels
+```
+
+```
+NAME                     STATUS    ROLES    AGE    VERSION          LABELS
+kubernetes-minion-9vlv   Ready     <none>   34m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-a,kubernetes.io/hostname=kubernetes-minion-9vlv
+kubernetes-minion-281d   Ready     <none>   20m    v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-b,kubernetes.io/hostname=kubernetes-minion-281d
+kubernetes-minion-olsh   Ready     <none>   3m     v1.13.0          beta.kubernetes.io/instance-type=n1-standard-2,failure-domain.beta.kubernetes.io/region=us-central1,failure-domain.beta.kubernetes.io/zone=us-central1-f,kubernetes.io/hostname=kubernetes-minion-olsh
+```
+
+<!--
+Load-balancers span all zones in a cluster; the guestbook-go example
+includes an example load-balanced service:
+-->
+负载均衡器也会跨集群中的所有区；`guestbook-go` 示例中包含了一个负载均衡
+服务的例子：
+
+```shell
+kubectl describe service guestbook | grep LoadBalancer.Ingress
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+LoadBalancer Ingress:   130.211.126.21
+```
+
+<!--
+Set the above IP:
+-->
+设置上面的 IP 地址：
+
+```shell
+export IP=130.211.126.21
+```
+
+<!--
+Explore with curl via IP:
+-->
+使用 curl 访问该 IP：
+
+
+```shell
+curl -s http://${IP}:3000/env | grep HOSTNAME
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+  "HOSTNAME": "guestbook-44sep",
+```
+
+<!--
+Again, explore multiple times:
+-->
+如果多次尝试该命令：
+
+```shell
+(for i in `seq 20`; do curl -s http://${IP}:3000/env | grep HOSTNAME; done)  | sort | uniq
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```shell
+  "HOSTNAME": "guestbook-44sep",
+  "HOSTNAME": "guestbook-hum5n",
+  "HOSTNAME": "guestbook-ppm40",
+```
+
+<!--
+The load balancer correctly targets all the pods, even though they are in multiple zones.
+-->
+负载均衡器正确地选择不同的 Pod，即使它们跨了多个区。
+
+<!--
+### Shutting down the cluster
+
+When you're done, clean up:
+-->
+### 停止集群
+
+当完成以上工作之后，清理任务现场：
+
+GCE:
+
+```shell
+KUBERNETES_PROVIDER=gce KUBE_USE_EXISTING_MASTER=true KUBE_GCE_ZONE=us-central1-f kubernetes/cluster/kube-down.sh
+KUBERNETES_PROVIDER=gce KUBE_USE_EXISTING_MASTER=true KUBE_GCE_ZONE=us-central1-b kubernetes/cluster/kube-down.sh
+KUBERNETES_PROVIDER=gce KUBE_GCE_ZONE=us-central1-a kubernetes/cluster/kube-down.sh
+```
+
+AWS:
+
+```shell
+KUBERNETES_PROVIDER=aws KUBE_USE_EXISTING_MASTER=true KUBE_AWS_ZONE=us-west-2c kubernetes/cluster/kube-down.sh
+KUBERNETES_PROVIDER=aws KUBE_USE_EXISTING_MASTER=true KUBE_AWS_ZONE=us-west-2b kubernetes/cluster/kube-down.sh
+KUBERNETES_PROVIDER=aws KUBE_AWS_ZONE=us-west-2a kubernetes/cluster/kube-down.sh
+```
+
+

From 5737c8bce17d5d624b5b25f5aef52388a590a49d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Roger?= <cedlerouge@users.noreply.github.com>
Date: Tue, 25 Aug 2020 10:06:41 +0200
Subject: [PATCH 077/496] Update install-minikube.md

---
 content/fr/docs/tasks/tools/install-minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/tasks/tools/install-minikube.md b/content/fr/docs/tasks/tools/install-minikube.md
index c3fcb56f34..b079eba6ec 100644
--- a/content/fr/docs/tasks/tools/install-minikube.md
+++ b/content/fr/docs/tasks/tools/install-minikube.md
@@ -75,7 +75,7 @@ Si vous n'avez pas déjà un hyperviseur installé, installez-le maintenant pour
 
 • [VirtualBox](https://www.virtualbox.org/wiki/Downloads)
 
-Minikube supporte également une option `--vm-driver=none` qui exécute les composants Kubernetes sur la machine hôte et dans pas dans une VM.
+Minikube supporte également une option `--vm-driver=none` qui exécute les composants Kubernetes sur la machine hôte et pas dans une VM.
 L'utilisation de ce pilote nécessite [Docker](https://www.docker.com/products/docker-desktop) et un environnement Linux mais pas un hyperviseur.
 
 Si vous utilisez le pilote `none` dans Debian ou un dérivé, utilisez les paquets` .deb` pour

From 53f1a8a7b14d50efa3a17f5a7a7686a3eab5ad1c Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Tue, 25 Aug 2020 21:13:44 +0900
Subject: [PATCH 078/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index a12276a263..06233366cc 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -48,7 +48,7 @@ weight: 10
 
 `imagePullPolicy`が値なしで定義された場合、この場合も`Always`が設定されます。
 
-## マニュフェストを使ったマルチアーキテクチャイメージ
+## マニフェストを使ったマルチアーキテクチャイメージ
 
 コンテナレジストリはバイナリイメージの提供だけでなく、[コンテナイメージマニュフェスト](https://github.com/opencontainers/image-spec/blob/master/manifest.md)も提供する事ができます。
 マニュフェストはコンテナのアーキテクチャ固有バージョンに関するイメージマニュフェストを参照できます。マニュフェストの目的はイメージの名前(例:`pause`、`example/mycontainer`、`kube-apiserver`)をもたせ、様々なシステムが使用しているマシンアーキテクチャにあう適切なバイナリイメージを取得できることです。

From 3f6a7a86053cf5c2a8bc745f3a7ae86fdad6ff20 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Tue, 25 Aug 2020 21:13:55 +0900
Subject: [PATCH 079/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index 06233366cc..80d03492d9 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -50,7 +50,7 @@ weight: 10
 
 ## マニフェストを使ったマルチアーキテクチャイメージ
 
-コンテナレジストリはバイナリイメージの提供だけでなく、[コンテナイメージマニュフェスト](https://github.com/opencontainers/image-spec/blob/master/manifest.md)も提供する事ができます。
+コンテナレジストリはバイナリイメージの提供だけでなく、[コンテナイメージマニフェスト](https://github.com/opencontainers/image-spec/blob/master/manifest.md)も提供する事ができます。
 マニュフェストはコンテナのアーキテクチャ固有バージョンに関するイメージマニュフェストを参照できます。マニュフェストの目的はイメージの名前(例:`pause`、`example/mycontainer`、`kube-apiserver`)をもたせ、様々なシステムが使用しているマシンアーキテクチャにあう適切なバイナリイメージを取得できることです。
 
 Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィックスを持つを名前をつけます。下位互換の為にサフィックス付きの古い仕様のイメージを生成してください。その目的は、`pause`のようなすべてのアーキテクチャのマニュフェストを持つイメージと、サフィックスのあるイメージをハードコードしていた可能性のある古い仕様の設定やYAMLファイルと下位互換がある`pause-amd64`のようなイメージを生成することです。

From 659f9a05cf47ee57dd2a060e45ad72fa2ea48d32 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Tue, 25 Aug 2020 21:14:03 +0900
Subject: [PATCH 080/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index 80d03492d9..56fe05cc5d 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -51,7 +51,7 @@ weight: 10
 ## マニフェストを使ったマルチアーキテクチャイメージ
 
 コンテナレジストリはバイナリイメージの提供だけでなく、[コンテナイメージマニフェスト](https://github.com/opencontainers/image-spec/blob/master/manifest.md)も提供する事ができます。
-マニュフェストはコンテナのアーキテクチャ固有バージョンに関するイメージマニュフェストを参照できます。マニュフェストの目的はイメージの名前(例:`pause`、`example/mycontainer`、`kube-apiserver`)をもたせ、様々なシステムが使用しているマシンアーキテクチャにあう適切なバイナリイメージを取得できることです。
+マニフェストはコンテナのアーキテクチャ固有バージョンに関するイメージマニフェストを参照できます。マニフェストの目的はイメージの名前(例:`pause`、`example/mycontainer`、`kube-apiserver`)をもたせ、様々なシステムが使用しているマシンアーキテクチャにあう適切なバイナリイメージを取得できることです。
 
 Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィックスを持つを名前をつけます。下位互換の為にサフィックス付きの古い仕様のイメージを生成してください。その目的は、`pause`のようなすべてのアーキテクチャのマニュフェストを持つイメージと、サフィックスのあるイメージをハードコードしていた可能性のある古い仕様の設定やYAMLファイルと下位互換がある`pause-amd64`のようなイメージを生成することです。
 

From fabe7b67d53f22bd19b34b2374e8ca19136bf250 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Tue, 25 Aug 2020 21:14:28 +0900
Subject: [PATCH 081/496] Update content/ja/docs/concepts/containers/images.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/containers/images.md b/content/ja/docs/concepts/containers/images.md
index 56fe05cc5d..0ad4459d79 100644
--- a/content/ja/docs/concepts/containers/images.md
+++ b/content/ja/docs/concepts/containers/images.md
@@ -53,7 +53,7 @@ weight: 10
 コンテナレジストリはバイナリイメージの提供だけでなく、[コンテナイメージマニフェスト](https://github.com/opencontainers/image-spec/blob/master/manifest.md)も提供する事ができます。
 マニフェストはコンテナのアーキテクチャ固有バージョンに関するイメージマニフェストを参照できます。マニフェストの目的はイメージの名前(例:`pause`、`example/mycontainer`、`kube-apiserver`)をもたせ、様々なシステムが使用しているマシンアーキテクチャにあう適切なバイナリイメージを取得できることです。
 
-Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィックスを持つを名前をつけます。下位互換の為にサフィックス付きの古い仕様のイメージを生成してください。その目的は、`pause`のようなすべてのアーキテクチャのマニュフェストを持つイメージと、サフィックスのあるイメージをハードコードしていた可能性のある古い仕様の設定やYAMLファイルと下位互換がある`pause-amd64`のようなイメージを生成することです。
+Kubernetes自身は、通常コンテナイメージに`-$(ARCH)`のサフィックスを持つ名前をつけます。下位互換の為にサフィックス付きの古い仕様のイメージを生成してください。その目的は、`pause`のようなすべてのアーキテクチャのマニフェストを持つイメージと、サフィックスのあるイメージをハードコードしていた可能性のある古い仕様の設定やYAMLファイルと下位互換がある`pause-amd64`のようなイメージを生成することです。
 
 ## プライベートレジストリを使用する方法
 

From b676bf3f537106cd17bfa7807b83f7a94f9469d0 Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Tue, 25 Aug 2020 21:43:35 +0900
Subject: [PATCH 082/496] fix some kubernetes resource display name

---
 content/ja/docs/concepts/security/overview.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index ea14270e4c..24a90e455a 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -73,7 +73,7 @@ Kubernetesを保護する為には２つの懸念事項があります。
 
 ### クラスターのコンポーネント {#cluster-components}
 
-想定外または悪意のあるアクセスからクラスターを保護して適切なプラクティスを採用したい場合、[クラスターの保護](/docs/tasks/administer-cluster/securing-a-cluster/)に関するアドバイスを読み、従ってください。
+想定外または悪意のあるアクセスからクラスターを保護して適切なプラクティスを採用したい場合、[クラスターの保護](/docs/tasks/administer-cluster/securing-a-cluster/)に関するアドバイスを読み従ってください。
 
 ### クラスター内のコンポーネント(アプリケーション) {#cluster-applications}
 
@@ -85,9 +85,9 @@ Kubernetesを保護する為には２つの懸念事項があります。
 RBAC認可(Kubernetes APIへのアクセス) | https://kubernetes.io/docs/reference/access-authn-authz/rbac/
 認証 | https://kubernetes.io/docs/reference/access-authn-authz/controlling-access/ |
 アプリケーションのSecret管理(およびetcdへの保存時に暗号化) | https://kubernetes.io/ja/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/ |
-Pod Security Policies | https://kubernetes.io/docs/concepts/policy/pod-security-policy/ |
+PodSecurityPolicy | https://kubernetes.io/docs/concepts/policy/pod-security-policy/ |
 Quality of Service (およびクラスターリソース管理) | https://kubernetes.io/ja/docs/tasks/configure-pod-container/quality-service-pod/ |
-Network Policies | https://kubernetes.io/docs/concepts/services-networking/network-policies/ |
+NetworkPolicy | https://kubernetes.io/docs/concepts/services-networking/network-policies/ |
 Kubernetes IngressのTLS | https://kubernetes.io/ja/docs/concepts/services-networking/ingress/#tls |
 
 
@@ -124,9 +124,9 @@ TLS経由のアクセスのみ | コードがTCP通信を必要とする場合
 関連するKubernetesセキュリティについて学びます。
 
 * [Podのセキュリティ基準](/docs/concepts/security/pod-security-standards/)
-* [PodのNetwork policies](/docs/concepts/services-networking/network-policies/)
+* [PodのNetworkPolicy](/docs/concepts/services-networking/network-policies/)
 * [クラスターの保護](/docs/tasks/administer-cluster/securing-a-cluster/)
 * [APIアクセスコントロール](/docs/reference/access-authn-authz/controlling-access/)
 * コントロールプレーンとの[通信時のデータ暗号化](/docs/tasks/tls/managing-tls-in-a-cluster/)
 * [保存時のデータ暗号化](/docs/tasks/administer-cluster/encrypt-data/)
-* [Kubernetes Secrets](/ja/docs/concepts/configuration/secret/)
+* [Kubernetes Secret](/ja/docs/concepts/configuration/secret/)

From 8f708911d6f62a55801862bb33d059f038e6a820 Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Tue, 25 Aug 2020 18:11:02 +0100
Subject: [PATCH 083/496] =?UTF-8?q?Add=20blog=20post:=20GSoC=20=E2=80=9820?=
 =?UTF-8?q?=20-=20Building=20operators=20for=20cluster=20addons?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ...20 -building-operators-for-cluster-addons.md | 116 ++++++++++++++++++
 1 file changed, 116 insertions(+)
 create mode 100644 content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
new file mode 100644
index 0000000000..65843fcba9
--- /dev/null
+++ b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -0,0 +1,116 @@
+---
+layout: blog
+title: "GSoC 2020 - Building operators for cluster addons"
+date: 2020-08-25
+slug: gsoc20-building-operators-for-cluster-addons
+---
+
+**Author**: Onyekwere Somtochi
+
+# Introduction
+
+Google Summer of Code is a global program that is geared towards introducing students to open source. Students are matched with open-source organizations to work with them for three months during the summer.
+
+My name is Somtochi Onyekwere from the Federal University of Technology, Owerri(Nigeria) and this year, I was opportune to be selected as one of the interns to work with Kubernetes(under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
+
+Specifically, I worked the [Cluster Addons: Package all things!](https://github.com/cncf/mentoring/blob/master/summerofcode/README.md#cluster-addons-package-all-the-things) Project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
+
+# Background
+
+Kubernetes have progressed greatly in the past few years with a flourishing community and a large number of contributors. The codebase has definitely moved away from the monolith structure where all the code resided in the [k/k](https://github.com/kubernetes/kubernetes) repository to being split into multiple sub-projects. Part of the focus of Cluster-addons is to make all these sub-projects work together in an easy to assemble, self-monitoring, self-healing and Kubernetes-native way. It enables them to work seamlessly without human intervention.
+
+The community is exploring the use of operators as a mechanism to monitor various resources in the cluster and properly manage these resources. In addition to this, it provides self-healing and it is a  kubernetes-native pattern that can encode how best these addons work and manage them properly.
+
+What are cluster addons? Cluster addons are a collection of resources(like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards(for visualization) to more complex ones like Calico(for Networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon.
+
+Operators, on the other hand, are custom controllers and custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale.
+
+The addon operators, while solving a lot of problems were not so perfect.  There were some missing pieces and it was still a proof of concept. Generating the RBAC for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
+	I spent the summer working on these issues, looking at them with new eyes and coming up with solutions for both the known and unknown issues.
+
+# Various additions to kubebuilder-declarative-pattern
+
+The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern)(from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDPand cluster-addons.
+
+## Version check for the operators
+Enabling version check for operators helped in making safer upgrades/downgrades to different versions of the addon even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
+
+## Git Repository for storing the manifests
+Previously, there was support for only local file directories and https repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory(the channels directory contains manifest for different versions - the controller pulls the manifest from this directory and applies it to the cluster). During the internship period, I extended it to include git repositories.
+
+## Annotations to temporarily disable reconciliation
+The reconciliation loop that ensures that the desired state matches the actual state prevents modification of objects in the cluster. This makes it hard to experiment or investigate what might be wrong in the cluster as any changes made are promptly reverted. I resolved this by allowing users to place `addons.k8s.io/ignore` annotation to the resource that they don’t want the controller to reconcile. The controller checks for this annotation and doesn’t reconcile that object. To resume reconciliation, simply remove the annotation from the resource.
+
+## Unstructured support in kubebuilder-declarative-pattern
+One of the operators that I worked on is a generic controller that could manage more than one cluster addon that did not require extra configuration. To do this, the operator couldn’t use a particular type and needed the kubebuilder-declarative-repo to support using the [unstructured.Unstructured](https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured#Unstructured) type. There were various functions in the kubebuilder-declarative-pattern that couldn’t handle this type and return an error if the object passed in was not of type `addonsv1alpha1.CommonObject`. The functions were modified to handle both unstructured.Unstructured and addonsv1alpha.CommonObject.
+
+# Tools and CLI programs
+There were also some command-line programs I wrote that could be used to make working with addon operators easier. Most of them have uses outside the addon operators as they try to solve a specific problem that could surface anywhere while working with Kubernetes. I encourage you to check them out when you have the chance!
+
+## RBAC generator
+One of the biggest concerns with the operator was RBAC. You had to manually look through the manifest and add the RBAC rule for each resource as it needs to have RBAC permissions to create, get, update and delete the resources in the manifest when running in-cluster. Building the RBAC generator automated the process of writing the RBAC roles and role bindings. The function of the RBAC generator is simple. It accepts the file name of the manifest as a flag. Then, it parses the manifest and gets the API group and resource name of the resources and adds it to a role. It outputs the role and role binding to stdout or a file if the `--out` flag is parsed.
+
+Additionally, the tool enables you to split the RBAC by separating the cluster roles in the manifest. This lessened the security concern of an operator being over-privileged as it needed to have all the permissions that the clusterrole has. If you want to apply the clusterrole yourself and not give the operator these permissions, you can pass in a `--supervisory` boolean flag so that the generator does not add these permissions to the role. The CLI program resides [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/rbac-gen/main.go).
+
+## Kubectl Ownerref
+It is hard to find out at a glance which objects were created by an addon custom resource, this kubectl plugin alleviates that pain by displaying all the objects in the cluster that a resource has ownerrefs on. You simply pass the kind and the name of the resource as arguments to the program and it checks the cluster for the objects and gives the kind, name, the namespace of such object. It could be useful to get a general overview of all the objects that the controller is reconciling by passing in the name and kind of custom resource.
+
+# Addon Operators
+To fully understand addons operators and make changes to how they are being created, you have to try creating and using them. Part of the summer was spent building operators for some popular addons like the Kubernetes dashboard, flannel, NodeLocalDNS and so on. Please check the [cluster-addons](https://github.com/kubernetes-sigs/cluster-addons) repository for the different addon operators. In this section, I will just highlight just one that is a little different from others.
+
+## Generic Controller
+The generic controller is a general controller that can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. It alsoSo instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CRD using this tool([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory(it could be a git repository!). The tool generates the - CRD, RBAC manifest and two custom resources for you
+
+The process is as follows
+- Create the Generic CRD
+- Generate all the manifest needed with the `generic-addon` tool found here (here)[https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md].
+
+This tool creates
+1. The CRD for your addon
+2. The RBAC for the CRD
+3. The RBAC for applying manifest
+4. The CR for your addon
+5. A Generic CR
+
+The Generic custom resource looks like this:
+
+```
+apiVersion: addons.x-k8s.io/v1alpha1
+kind: Generic
+metadata:
+ 	name: generic-sample
+spec:
+  objectKind:
+  kind: NodeLocalDNS
+  version: "v1alpha1"
+  group: addons.x-k8s.io
+channel: "../nodelocaldns/channels"
+```
+
+Apply these manifests(Ensure to apply the CRD before the CR)
+Run the Generic controller, either on your machine or in-cluster
+
+
+If you are interested in building an operator, Please check out this [README.md](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md).
+
+# Relevant Links
+- [Detailed breakdown of work done during the internship](https://github.com/SomtochiAma/gsoc-2020-meta-k8s)
+- [Addon Operator (KEP)](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/addons/0035-20190128-addons-via-operators.md)
+- [Original GSoC Issue](https://github.com/kubernetes-sigs/cluster-addons/issues/39)
+- [Proposal Submitted for GSoC](https://github.com/SomtochiAma/gsoc-2020-meta-k8s/blob/master/GSoC%202020%20PROPOSAL%20-%20PACKAGE%20ALL%20THINGS.pdf)
+- [All commits to kubernetes-sigs/cluster-addons](https://github.com/kubernetes-sigs/cluster-addons/commits?author=SomtochiAma)
+- [All commits to kubernetes-sigs/kubebuidler-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern/commits?author=SomtochiAma)
+
+# Further Work
+A lot of work was definitely done on the cluster add-ons during the GSoC period. But we need more people building operators and using them in the cluster. We need wider adoption in the community. Build operators for your favourite addons and tell us how it went or if you had any issues. Check out this [README.md](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md) to get started.
+
+# Appreciation
+I really want to appreciate my mentors [Justin Santa Barbara](https://github.com/justinsb)(Google) and [Leigh Capili](https://github.com/justinsb)(Weaveworks). My internship was awesome because they were awesome. They set a golden standard for what mentorship should be. They were accessible and always available to clear any confusion. I think what I liked best was that they didn’t just dish out tasks, instead, we had open discussions about what was wrong and what could be improved. They are really the best and I hope I get to work with them again!
+
+# Conclusion
+So far I have learnt a lot about Go, the internals of Kubernetes, and operators. I want to conclude by encouraging people to contribute to open-source(especially Kubernetes :)) regardless of your level of experience. It has been a well-rounded experience for me and I have come to love the community. It is a great way to learn and meet awesome people. Special shoutout to Google for organizing this program, It is a great initiative.
+If you are interested in cluster addons and finding out more on addon operators, you welcome to join our slack channel #cluster-addons on the Kubernetes [slack](kubernetes.slack.com).
+
+---
+
+_[Onyekwere Somtochi](https://twitter.com/SomtochiAma) is a software engineer that loves contributing to open-source and exploring cloud native solutions._

From 4bb6d47e430ddd78463b24a4dd9c0f8ee83593a2 Mon Sep 17 00:00:00 2001
From: Jim Angel <jameswangel@gmail.com>
Date: Tue, 25 Aug 2020 15:58:16 -0500
Subject: [PATCH 084/496] updating theme submodule

---
 themes/docsy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/themes/docsy b/themes/docsy
index 5d5e6402c9..25f73360dc 160000
--- a/themes/docsy
+++ b/themes/docsy
@@ -1 +1 @@
-Subproject commit 5d5e6402c901492f325af4117adbd151bf869c52
+Subproject commit 25f73360dc4b72c7606531b37edace0417b40858

From a88b2340aa3235369a3c561505b5b4a332e63295 Mon Sep 17 00:00:00 2001
From: wangxy518 <40482095+wangxy518@users.noreply.github.com>
Date: Wed, 26 Aug 2020 09:07:48 +0800
Subject: [PATCH 085/496] Update container-runtimes.md

---
 .../en/docs/setup/production-environment/container-runtimes.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index c22dd0be85..c76dc477f4 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -199,7 +199,7 @@ Use the following commands to install CRI-O on your system:
 
 {{< note >}}
 The CRI-O major and minor versions must match the Kubernetes major and minor versions.
-For more information, see the [CRI-O compatiblity matrix](https://github.com/cri-o/cri-o).
+For more information, see the [CRI-O compatibility matrix](https://github.com/cri-o/cri-o).
 {{< /note >}}
 
 ### Prerequisites

From 4339d17460cf704f74faf01cf3d0d2ce3de7bc4a Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Wed, 26 Aug 2020 07:13:54 +0100
Subject: [PATCH 086/496] Fixes some nits

---
 ...20 -building-operators-for-cluster-addons.md | 30 +++++++++----------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
index 65843fcba9..f53b288797 100644
--- a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
+++ b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -9,19 +9,19 @@ slug: gsoc20-building-operators-for-cluster-addons
 
 # Introduction
 
-Google Summer of Code is a global program that is geared towards introducing students to open source. Students are matched with open-source organizations to work with them for three months during the summer.
+[Google Summer of Code](https://summerofcode.withgoogle.com/) is a global program that is geared towards introducing students to open source. Students are matched with open-source organizations to work with them for three months during the summer.
 
-My name is Somtochi Onyekwere from the Federal University of Technology, Owerri(Nigeria) and this year, I was opportune to be selected as one of the interns to work with Kubernetes(under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
+My name is Somtochi Onyekwere from the Federal University of Technology, Owerri (Nigeria) and this year, I given the opportunity to work with Kubernetes (under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
 
-Specifically, I worked the [Cluster Addons: Package all things!](https://github.com/cncf/mentoring/blob/master/summerofcode/README.md#cluster-addons-package-all-the-things) Project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
+Specifically, I worked on the [Cluster Addons: Package all things!](https://github.com/cncf/mentoring/blob/master/summerofcode/README.md#cluster-addons-package-all-the-things) project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
 
 # Background
 
-Kubernetes have progressed greatly in the past few years with a flourishing community and a large number of contributors. The codebase has definitely moved away from the monolith structure where all the code resided in the [k/k](https://github.com/kubernetes/kubernetes) repository to being split into multiple sub-projects. Part of the focus of Cluster-addons is to make all these sub-projects work together in an easy to assemble, self-monitoring, self-healing and Kubernetes-native way. It enables them to work seamlessly without human intervention.
+Kubernetes has progressed greatly in the past few years with a flourishing community and a large number of contributors. The codebase has definitely moved away from the monolith structure where all the code resided in the [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes) repository to being split into multiple sub-projects. Part of the focus of Cluster-addons is to make all these sub-projects work together in an easy to assemble, self-monitoring, self-healing and Kubernetes-native way. It enables them to work seamlessly without human intervention.
 
 The community is exploring the use of operators as a mechanism to monitor various resources in the cluster and properly manage these resources. In addition to this, it provides self-healing and it is a  kubernetes-native pattern that can encode how best these addons work and manage them properly.
 
-What are cluster addons? Cluster addons are a collection of resources(like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards(for visualization) to more complex ones like Calico(for Networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon.
+What are cluster addons? Cluster addons are a collection of resources (like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards (for visualization) to more complex ones like Calico (for networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon.
 
 Operators, on the other hand, are custom controllers and custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale.
 
@@ -30,13 +30,13 @@ The addon operators, while solving a lot of problems were not so perfect.  There
 
 # Various additions to kubebuilder-declarative-pattern
 
-The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern)(from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDPand cluster-addons.
+The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern) (from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDPand cluster-addons.
 
 ## Version check for the operators
 Enabling version check for operators helped in making safer upgrades/downgrades to different versions of the addon even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
 
 ## Git Repository for storing the manifests
-Previously, there was support for only local file directories and https repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory(the channels directory contains manifest for different versions - the controller pulls the manifest from this directory and applies it to the cluster). During the internship period, I extended it to include git repositories.
+Previously, there was support for only local file directories and https repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory (the channels directory contains manifest for different versions - the controller pulls the manifest from this directory and applies it to the cluster). During the internship period, I extended it to include git repositories.
 
 ## Annotations to temporarily disable reconciliation
 The reconciliation loop that ensures that the desired state matches the actual state prevents modification of objects in the cluster. This makes it hard to experiment or investigate what might be wrong in the cluster as any changes made are promptly reverted. I resolved this by allowing users to place `addons.k8s.io/ignore` annotation to the resource that they don’t want the controller to reconcile. The controller checks for this annotation and doesn’t reconcile that object. To resume reconciliation, simply remove the annotation from the resource.
@@ -45,25 +45,25 @@ The reconciliation loop that ensures that the desired state matches the actual s
 One of the operators that I worked on is a generic controller that could manage more than one cluster addon that did not require extra configuration. To do this, the operator couldn’t use a particular type and needed the kubebuilder-declarative-repo to support using the [unstructured.Unstructured](https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured#Unstructured) type. There were various functions in the kubebuilder-declarative-pattern that couldn’t handle this type and return an error if the object passed in was not of type `addonsv1alpha1.CommonObject`. The functions were modified to handle both unstructured.Unstructured and addonsv1alpha.CommonObject.
 
 # Tools and CLI programs
-There were also some command-line programs I wrote that could be used to make working with addon operators easier. Most of them have uses outside the addon operators as they try to solve a specific problem that could surface anywhere while working with Kubernetes. I encourage you to check them out when you have the chance!
+There were also some command-line programs I wrote that could be used to make working with addon operators easier. Most of them have uses outside the addon operators as they try to solve a specific problem that could surface anywhere while working with Kubernetes. I encourage you to [check them out](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools) when you have the chance!
 
-## RBAC generator
+## [RBAC generator](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools/rbac-gen)
 One of the biggest concerns with the operator was RBAC. You had to manually look through the manifest and add the RBAC rule for each resource as it needs to have RBAC permissions to create, get, update and delete the resources in the manifest when running in-cluster. Building the RBAC generator automated the process of writing the RBAC roles and role bindings. The function of the RBAC generator is simple. It accepts the file name of the manifest as a flag. Then, it parses the manifest and gets the API group and resource name of the resources and adds it to a role. It outputs the role and role binding to stdout or a file if the `--out` flag is parsed.
 
 Additionally, the tool enables you to split the RBAC by separating the cluster roles in the manifest. This lessened the security concern of an operator being over-privileged as it needed to have all the permissions that the clusterrole has. If you want to apply the clusterrole yourself and not give the operator these permissions, you can pass in a `--supervisory` boolean flag so that the generator does not add these permissions to the role. The CLI program resides [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/rbac-gen/main.go).
 
-## Kubectl Ownerref
+## [Kubectl Ownerref](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools/kubectl-ownerref)
 It is hard to find out at a glance which objects were created by an addon custom resource, this kubectl plugin alleviates that pain by displaying all the objects in the cluster that a resource has ownerrefs on. You simply pass the kind and the name of the resource as arguments to the program and it checks the cluster for the objects and gives the kind, name, the namespace of such object. It could be useful to get a general overview of all the objects that the controller is reconciling by passing in the name and kind of custom resource.
 
 # Addon Operators
 To fully understand addons operators and make changes to how they are being created, you have to try creating and using them. Part of the summer was spent building operators for some popular addons like the Kubernetes dashboard, flannel, NodeLocalDNS and so on. Please check the [cluster-addons](https://github.com/kubernetes-sigs/cluster-addons) repository for the different addon operators. In this section, I will just highlight just one that is a little different from others.
 
 ## Generic Controller
-The generic controller is a general controller that can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. It alsoSo instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CRD using this tool([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory(it could be a git repository!). The tool generates the - CRD, RBAC manifest and two custom resources for you
+The generic controller is a general controller that can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. It alsoSo instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CRD using this tool ([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory (it could be a git repository!). The tool generates the - CRD, RBAC manifest and two custom resources for you
 
 The process is as follows
 - Create the Generic CRD
-- Generate all the manifest needed with the `generic-addon` tool found here (here)[https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md].
+- Generate all the manifest needed with the `generic-addon` tool found [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md).
 
 This tool creates
 1. The CRD for your addon
@@ -87,7 +87,7 @@ spec:
 channel: "../nodelocaldns/channels"
 ```
 
-Apply these manifests(Ensure to apply the CRD before the CR)
+Apply these manifests (Ensure to apply the CRD before the CR)
 Run the Generic controller, either on your machine or in-cluster
 
 
@@ -105,10 +105,10 @@ If you are interested in building an operator, Please check out this [README.md]
 A lot of work was definitely done on the cluster add-ons during the GSoC period. But we need more people building operators and using them in the cluster. We need wider adoption in the community. Build operators for your favourite addons and tell us how it went or if you had any issues. Check out this [README.md](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md) to get started.
 
 # Appreciation
-I really want to appreciate my mentors [Justin Santa Barbara](https://github.com/justinsb)(Google) and [Leigh Capili](https://github.com/justinsb)(Weaveworks). My internship was awesome because they were awesome. They set a golden standard for what mentorship should be. They were accessible and always available to clear any confusion. I think what I liked best was that they didn’t just dish out tasks, instead, we had open discussions about what was wrong and what could be improved. They are really the best and I hope I get to work with them again!
+I really want to appreciate my mentors [Justin Santa Barbara](https://github.com/justinsb) (Google) and [Leigh Capili](https://github.com/justinsb) (Weaveworks). My internship was awesome because they were awesome. They set a golden standard for what mentorship should be. They were accessible and always available to clear any confusion. I think what I liked best was that they didn’t just dish out tasks, instead, we had open discussions about what was wrong and what could be improved. They are really the best and I hope I get to work with them again!
 
 # Conclusion
-So far I have learnt a lot about Go, the internals of Kubernetes, and operators. I want to conclude by encouraging people to contribute to open-source(especially Kubernetes :)) regardless of your level of experience. It has been a well-rounded experience for me and I have come to love the community. It is a great way to learn and meet awesome people. Special shoutout to Google for organizing this program, It is a great initiative.
+So far I have learnt a lot about Go, the internals of Kubernetes, and operators. I want to conclude by encouraging people to contribute to open-source (especially Kubernetes :)) regardless of your level of experience. It has been a well-rounded experience for me and I have come to love the community. It is a great way to learn and meet awesome people. Special shoutout to Google for organizing this program, It is a great initiative.
 If you are interested in cluster addons and finding out more on addon operators, you welcome to join our slack channel #cluster-addons on the Kubernetes [slack](kubernetes.slack.com).
 
 ---

From 17807023cc74a511f8d803824d9664ce8126362e Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Wed, 26 Aug 2020 13:53:40 +0200
Subject: [PATCH 087/496] fixing spelling errors

Signed-off-by: didier <durand.didier@gmail.com>
---
 README-fr.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README-fr.md b/README-fr.md
index b493ea60f0..5fe66aef61 100644
--- a/README-fr.md
+++ b/README-fr.md
@@ -16,13 +16,13 @@ Faites tous les changements que vous voulez dans votre fork, et quand vous êtes
 Une fois votre pull request créée, un examinateur de Kubernetes se chargera de vous fournir une revue claire et exploitable.
 En tant que propriétaire de la pull request, **il est de votre responsabilité de modifier votre pull request pour tenir compte des commentaires qui vous ont été fournis par l'examinateur de Kubernetes.**
 Notez également que vous pourriez vous retrouver avec plus d'un examinateur de Kubernetes pour vous fournir des commentaires ou vous pourriez finir par recevoir des commentaires d'un autre examinateur que celui qui vous a été initialement affecté pour vous fournir ces commentaires.
-De plus, dans certains cas, l'un de vos examinateur peut demander un examen technique à un [examinateur technique de Kubernetes](https://github.com/kubernetes/website/wiki/Tech-reviewers) au besoin.
+De plus, dans certains cas, l'un de vos examinateurs peut demander un examen technique à un [examinateur technique de Kubernetes](https://github.com/kubernetes/website/wiki/Tech-reviewers) au besoin.
 Les examinateurs feront de leur mieux pour fournir une revue rapidement, mais le temps de réponse peut varier selon les circonstances.
 
 Pour plus d'informations sur la contribution à la documentation Kubernetes, voir :
 
 * [Commencez à contribuer](https://kubernetes.io/docs/contribute/start/)
-* [Apperçu des modifications apportées à votre documentation](http://kubernetes.io/docs/contribute/intermediate#view-your-changes-locally)
+* [Aperçu des modifications apportées à votre documentation](http://kubernetes.io/docs/contribute/intermediate#view-your-changes-locally)
 * [Utilisation des modèles de page](https://kubernetes.io/docs/contribute/style/page-content-types/)
 * [Documentation Style Guide](http://kubernetes.io/docs/contribute/style/style-guide/)
 * [Traduction de la documentation Kubernetes](https://kubernetes.io/docs/contribute/localization/)

From 5a4c534e5703c5b2016abafdbc021dd722cc9da8 Mon Sep 17 00:00:00 2001
From: Daniel Mendes <danielmd3000@gmail.com>
Date: Wed, 26 Aug 2020 19:55:26 +0200
Subject: [PATCH 088/496] Update content/en/docs/reference/kubectl/jsonpath.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/reference/kubectl/jsonpath.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/reference/kubectl/jsonpath.md b/content/en/docs/reference/kubectl/jsonpath.md
index acb9d9e9e9..cc4628a1c7 100644
--- a/content/en/docs/reference/kubectl/jsonpath.md
+++ b/content/en/docs/reference/kubectl/jsonpath.md
@@ -103,7 +103,7 @@ kubectl get pods -o=jsonpath="{range .items[*]}{.metadata.name}{\"\t\"}{.status.
 JSONPath regular expressions are not supported. If you want to match using regular expressions, you can use a tool such as `jq`.
 
 ```shell
-# kubectl does not suport regular expressions
+# kubectl does not support regular expressions for JSONpath output
 # The following command does not work
 kubectl get pods -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
 
@@ -111,4 +111,3 @@ kubectl get pods -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.nam
 kubectl get pods -o json | jq -r '.items[] | select(.metadata.name | test("test-")).spec.containers[].image'
 ```
 {{< /note >}}
-

From 691ca62bb3288ce472174458b2ae19f1e137f282 Mon Sep 17 00:00:00 2001
From: Daniel Mendes <danielmd3000@gmail.com>
Date: Wed, 26 Aug 2020 19:55:51 +0200
Subject: [PATCH 089/496] Update content/en/docs/reference/kubectl/jsonpath.md

Co-authored-by: Daniel Smith <dbsmith@google.com>
---
 content/en/docs/reference/kubectl/jsonpath.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/kubectl/jsonpath.md b/content/en/docs/reference/kubectl/jsonpath.md
index cc4628a1c7..d26c110cee 100644
--- a/content/en/docs/reference/kubectl/jsonpath.md
+++ b/content/en/docs/reference/kubectl/jsonpath.md
@@ -107,7 +107,7 @@ JSONPath regular expressions are not supported. If you want to match using regul
 # The following command does not work
 kubectl get pods -o jsonpath='{.items[?(@.metadata.name=~/^test$/)].metadata.name}'
 
-# The following command achieves the same result
+# The following command achieves the desired result
 kubectl get pods -o json | jq -r '.items[] | select(.metadata.name | test("test-")).spec.containers[].image'
 ```
 {{< /note >}}

From 40d9c0f111f310a8f53bb2b1d31a7856b7c66445 Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Wed, 26 Aug 2020 22:18:31 +0100
Subject: [PATCH 090/496] Some more corrections

---
 ...20 -building-operators-for-cluster-addons.md | 49 ++++++++++---------
 1 file changed, 26 insertions(+), 23 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
index f53b288797..4afb0268cb 100644
--- a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
+++ b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -11,38 +11,39 @@ slug: gsoc20-building-operators-for-cluster-addons
 
 [Google Summer of Code](https://summerofcode.withgoogle.com/) is a global program that is geared towards introducing students to open source. Students are matched with open-source organizations to work with them for three months during the summer.
 
-My name is Somtochi Onyekwere from the Federal University of Technology, Owerri (Nigeria) and this year, I given the opportunity to work with Kubernetes (under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
+My name is Somtochi Onyekwere from the Federal University of Technology, Owerri (Nigeria) and this year, I was given the opportunity to work with Kubernetes (under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
 
 Specifically, I worked on the [Cluster Addons: Package all things!](https://github.com/cncf/mentoring/blob/master/summerofcode/README.md#cluster-addons-package-all-the-things) project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
 
 # Background
 
-Kubernetes has progressed greatly in the past few years with a flourishing community and a large number of contributors. The codebase has definitely moved away from the monolith structure where all the code resided in the [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes) repository to being split into multiple sub-projects. Part of the focus of Cluster-addons is to make all these sub-projects work together in an easy to assemble, self-monitoring, self-healing and Kubernetes-native way. It enables them to work seamlessly without human intervention.
+Kubernetes has progressed greatly in the past few years with a flourishing community and a large number of contributors. The codebase is gradually moving away from the monolith structure where all the code resides in the [kubernetes/kubernetes](https://github.com/kubernetes/kubernetes) repository to being split into multiple sub-projects. Part of the focus of cluster-addons is to make some of these sub-projects work together in an easy to assemble, self-monitoring, self-healing and Kubernetes-native way. It enables them to work seamlessly without human intervention.
 
-The community is exploring the use of operators as a mechanism to monitor various resources in the cluster and properly manage these resources. In addition to this, it provides self-healing and it is a  kubernetes-native pattern that can encode how best these addons work and manage them properly.
+The community is exploring the use of operators as a mechanism to monitor various resources in the cluster and properly manage these resources. In addition to this, it provides self-healing and it is a kubernetes-native pattern that can encode how best these addons work and manage them properly.
 
 What are cluster addons? Cluster addons are a collection of resources (like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards (for visualization) to more complex ones like Calico (for networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon.
 
-Operators, on the other hand, are custom controllers and custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale.
+Operators are custom controllers with custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale.
 
-The addon operators, while solving a lot of problems were not so perfect.  There were some missing pieces and it was still a proof of concept. Generating the RBAC for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
-	I spent the summer working on these issues, looking at them with new eyes and coming up with solutions for both the known and unknown issues.
+The addon operators can solve a lot of problems, but they have their challenges. Those under the cluster-addons project had missing pieces and were still a proof of concept. Generating the RBAC for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
+
+I spent the summer working on these issues, looking at them with fresh eyes and coming up with solutions for both the known and unknown issues.
 
 # Various additions to kubebuilder-declarative-pattern
 
-The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern) (from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDPand cluster-addons.
+The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern) (from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDP and cluster-addons.
 
 ## Version check for the operators
-Enabling version check for operators helped in making safer upgrades/downgrades to different versions of the addon even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
+Enabling version check for operators helped in making safer upgrades/downgrades to different versions of the addon, even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
 
 ## Git Repository for storing the manifests
-Previously, there was support for only local file directories and https repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory (the channels directory contains manifest for different versions - the controller pulls the manifest from this directory and applies it to the cluster). During the internship period, I extended it to include git repositories.
+Previously, there was support for only local file directories and HTTPS repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory. The channels directory contains manifest for different versions, the controller pulls the manifest from this directory and applies it to the cluster. During the internship period, I extended it to include Git repositories.
 
 ## Annotations to temporarily disable reconciliation
-The reconciliation loop that ensures that the desired state matches the actual state prevents modification of objects in the cluster. This makes it hard to experiment or investigate what might be wrong in the cluster as any changes made are promptly reverted. I resolved this by allowing users to place `addons.k8s.io/ignore` annotation to the resource that they don’t want the controller to reconcile. The controller checks for this annotation and doesn’t reconcile that object. To resume reconciliation, simply remove the annotation from the resource.
+The reconciliation loop that ensures that the desired state matches the actual state prevents modification of objects in the cluster. This makes it hard to experiment or investigate what might be wrong in the cluster as any changes made are promptly reverted. I resolved this by allowing users to place `addons.k8s.io/ignore` annotation on the resource that they don’t want the controller to reconcile. The controller checks for this annotation and doesn’t reconcile that object. To resume reconciliation, the annotation can be removed from the resource.
 
 ## Unstructured support in kubebuilder-declarative-pattern
-One of the operators that I worked on is a generic controller that could manage more than one cluster addon that did not require extra configuration. To do this, the operator couldn’t use a particular type and needed the kubebuilder-declarative-repo to support using the [unstructured.Unstructured](https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured#Unstructured) type. There were various functions in the kubebuilder-declarative-pattern that couldn’t handle this type and return an error if the object passed in was not of type `addonsv1alpha1.CommonObject`. The functions were modified to handle both unstructured.Unstructured and addonsv1alpha.CommonObject.
+One of the operators that I worked on is a generic controller that could manage more than one cluster addon that did not require extra configuration. To do this, the operator couldn’t use a particular type and needed the kubebuilder-declarative-repo to support using the [unstructured.Unstructured](https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured#Unstructured) type. There were various functions in the kubebuilder-declarative-pattern that couldn’t handle this type and returned an error if the object passed in was not of type `addonsv1alpha1.CommonObject`. The functions were modified to handle both `unstructured.Unstructured` and `addonsv1alpha.CommonObject`.
 
 # Tools and CLI programs
 There were also some command-line programs I wrote that could be used to make working with addon operators easier. Most of them have uses outside the addon operators as they try to solve a specific problem that could surface anywhere while working with Kubernetes. I encourage you to [check them out](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools) when you have the chance!
@@ -53,19 +54,19 @@ One of the biggest concerns with the operator was RBAC. You had to manually look
 Additionally, the tool enables you to split the RBAC by separating the cluster roles in the manifest. This lessened the security concern of an operator being over-privileged as it needed to have all the permissions that the clusterrole has. If you want to apply the clusterrole yourself and not give the operator these permissions, you can pass in a `--supervisory` boolean flag so that the generator does not add these permissions to the role. The CLI program resides [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/rbac-gen/main.go).
 
 ## [Kubectl Ownerref](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools/kubectl-ownerref)
-It is hard to find out at a glance which objects were created by an addon custom resource, this kubectl plugin alleviates that pain by displaying all the objects in the cluster that a resource has ownerrefs on. You simply pass the kind and the name of the resource as arguments to the program and it checks the cluster for the objects and gives the kind, name, the namespace of such object. It could be useful to get a general overview of all the objects that the controller is reconciling by passing in the name and kind of custom resource.
+It is hard to find out at a glance which objects were created by an addon custom resource. This kubectl plugin alleviates that pain by displaying all the objects in the cluster that a resource has ownerrefs on. You simply pass the kind and the name of the resource as arguments to the program and it checks the cluster for the objects and gives the kind, name, the namespace of such an object. It could be useful to get a general overview of all the objects that the controller is reconciling by passing in the name and kind of custom resource.
 
 # Addon Operators
-To fully understand addons operators and make changes to how they are being created, you have to try creating and using them. Part of the summer was spent building operators for some popular addons like the Kubernetes dashboard, flannel, NodeLocalDNS and so on. Please check the [cluster-addons](https://github.com/kubernetes-sigs/cluster-addons) repository for the different addon operators. In this section, I will just highlight just one that is a little different from others.
+To fully understand addons operators and make changes to how they are being created, you have to try creating and using them. Part of the summer was spent building operators for some popular addons like the Kubernetes dashboard, flannel, NodeLocalDNS and so on. Please check the [cluster-addons](https://github.com/kubernetes-sigs/cluster-addons) repository for the different addon operators. In this section, I will just highlight one that is a little different from the others.
 
 ## Generic Controller
-The generic controller is a general controller that can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. It alsoSo instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CRD using this tool ([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory (it could be a git repository!). The tool generates the - CRD, RBAC manifest and two custom resources for you
+The generic controller can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. Also instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CRD using this tool ([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory (it could be a Git repository too!). The tool generates the - CRD, RBAC manifest and two custom resources for you.
 
-The process is as follows
+The process is as follows:
 - Create the Generic CRD
 - Generate all the manifest needed with the `generic-addon` tool found [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md).
 
-This tool creates
+This tool creates:
 1. The CRD for your addon
 2. The RBAC for the CRD
 3. The RBAC for applying manifest
@@ -87,11 +88,11 @@ spec:
 channel: "../nodelocaldns/channels"
 ```
 
-Apply these manifests (Ensure to apply the CRD before the CR)
-Run the Generic controller, either on your machine or in-cluster
+Apply these manifests but ensure to apply the CRD before the CR.
+Then, run the Generic controller, either on your machine or in-cluster.
 
 
-If you are interested in building an operator, Please check out this [README.md](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md).
+If you are interested in building an operator, Please check out [this guide](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md).
 
 # Relevant Links
 - [Detailed breakdown of work done during the internship](https://github.com/SomtochiAma/gsoc-2020-meta-k8s)
@@ -102,14 +103,16 @@ If you are interested in building an operator, Please check out this [README.md]
 - [All commits to kubernetes-sigs/kubebuidler-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern/commits?author=SomtochiAma)
 
 # Further Work
-A lot of work was definitely done on the cluster add-ons during the GSoC period. But we need more people building operators and using them in the cluster. We need wider adoption in the community. Build operators for your favourite addons and tell us how it went or if you had any issues. Check out this [README.md](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md) to get started.
+A lot of work was definitely done on the cluster addons during the GSoC period. But we need more people building operators and using them in the cluster. We need wider adoption in the community. Build operators for your favourite addons and tell us how it went and if you had any issues. Check out this [README.md](https://github.com/kubernetes-sigs/cluster-addons/blob/master/dashboard/README.md) to get started.
 
 # Appreciation
-I really want to appreciate my mentors [Justin Santa Barbara](https://github.com/justinsb) (Google) and [Leigh Capili](https://github.com/justinsb) (Weaveworks). My internship was awesome because they were awesome. They set a golden standard for what mentorship should be. They were accessible and always available to clear any confusion. I think what I liked best was that they didn’t just dish out tasks, instead, we had open discussions about what was wrong and what could be improved. They are really the best and I hope I get to work with them again!
+I really want to appreciate my mentors [Justin Santa Barbara](https://github.com/justinsb) (Google) and [Leigh Capili](https://github.com/stealthybox) (Weaveworks). My internship was awesome because they were awesome. They set a golden standard for what mentorship should be. They were accessible and always available to clear any confusion. I think what I liked best was that they didn’t just dish out tasks, instead, we had open discussions about what was wrong and what could be improved. They are really the best and I hope I get to work with them again!
+  Also, I want to say a huge thanks to [Lubomir I. Ivanov](https://github.com/neolit123) for reviewing this blog post!
 
 # Conclusion
-So far I have learnt a lot about Go, the internals of Kubernetes, and operators. I want to conclude by encouraging people to contribute to open-source (especially Kubernetes :)) regardless of your level of experience. It has been a well-rounded experience for me and I have come to love the community. It is a great way to learn and meet awesome people. Special shoutout to Google for organizing this program, It is a great initiative.
-If you are interested in cluster addons and finding out more on addon operators, you welcome to join our slack channel #cluster-addons on the Kubernetes [slack](kubernetes.slack.com).
+So far I have learnt a lot about Go, the internals of Kubernetes, and operators. I want to conclude by encouraging people to contribute to open-source (especially Kubernetes :)) regardless of your level of experience. It has been a well-rounded experience for me and I have come to love the community. It is a great initiative and it is a great way to learn and meet awesome people. Special shoutout to Google for organizing this program.
+
+If you are interested in cluster addons and finding out more on addon operators, you are welcome to join our slack channel #cluster-addons on the Kubernetes [slack](kubernetes.slack.com).
 
 ---
 

From 4febf7471debca6e26f7eed211bd062f895d29df Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sat, 8 Aug 2020 15:41:20 +0100
Subject: [PATCH 091/496] Improve styling for callouts

Update styles for callouts (warning, caution, note); also avoid applying
callout-specific styles to general block quotes.
---
 assets/scss/_custom.scss                      | 38 ++++++++++++-------
 layouts/partials/css.html                     |  2 +-
 layouts/shortcodes/caution.html               |  2 +-
 .../shortcodes/deprecationfilewarning.html    |  2 +-
 layouts/shortcodes/note.html                  |  2 +-
 layouts/shortcodes/warning.html               |  2 +-
 .../css/{callouts.css => feature-states.css}  | 21 ----------
 7 files changed, 30 insertions(+), 39 deletions(-)
 rename static/css/{callouts.css => feature-states.css} (67%)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index 563d87272f..447cca40c7 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -268,22 +268,34 @@ main {
 
 // blockquotes and callouts
 
-blockquote {
-  padding: 0.4rem 0.4rem 0.4rem 1rem !important;
-}
+.td-content, body {
+  blockquote.callout {
+    padding: 0.4rem 0.4rem 0.4rem 1rem;
+    border: 1px solid #eee;
+    border-left-width: 0.5em;
+    background: #fff;
+    color: #000;
+    margin-top: 0.5em;
+    margin-bottom: 0.5em;
+  }
+  blockquote.callout {
+    border-radius: calc(1em/3);
+  }
+  .callout.caution {
+    border-left-color: #f0ad4e;
+  }
 
-// callouts are contained in static CSS as well. these require override.
+  .callout.note {
+    border-left-color: #428bca;
+  }
 
-.caution {
-  border-left-color: #f0ad4e !important;
-}
+  .callout.warning {
+    border-left-color: #d9534f;
+  }
 
-.note {
-  border-left-color: #428bca !important;
-}
-
-.warning {
-  border-left-color: #d9534f !important;
+  h1:first-of-type + blockquote.callout {
+    margin-top: 1.5em;
+  }
 }
 
 .deprecation-warning {
diff --git a/layouts/partials/css.html b/layouts/partials/css.html
index c28d682e1f..8b4bf37e86 100644
--- a/layouts/partials/css.html
+++ b/layouts/partials/css.html
@@ -16,7 +16,7 @@
 {{- end }}
 
 <link rel="stylesheet" href="{{ "css/jquery-ui.min.css" | relURL }}">
-<link rel="stylesheet" href="{{ "css/callouts.css" | relURL }}">
+<link rel="stylesheet" href="{{ "css/feature-states.css" | relURL }}">
 <link rel="stylesheet" href="{{ "css/custom-jekyll/tags.css" | relURL }}">
 {{- if .Site.Params.announcement }}
 <link rel="stylesheet" href="{{ "css/announcement.css" | relURL }}">
diff --git a/layouts/shortcodes/caution.html b/layouts/shortcodes/caution.html
index 2d14447142..82563d8c2c 100644
--- a/layouts/shortcodes/caution.html
+++ b/layouts/shortcodes/caution.html
@@ -1,3 +1,3 @@
-<blockquote class="caution">
+<blockquote class="caution callout">
   <div><strong>{{ T "caution" }}</strong> {{ trim .Inner " \n" | markdownify }}</div>
 </blockquote>
diff --git a/layouts/shortcodes/deprecationfilewarning.html b/layouts/shortcodes/deprecationfilewarning.html
index 48e2f43c98..71583c4c96 100644
--- a/layouts/shortcodes/deprecationfilewarning.html
+++ b/layouts/shortcodes/deprecationfilewarning.html
@@ -1,3 +1,3 @@
-<blockquote class="deprecation_file_warning">
+<blockquote class="deprecation_file_warning callout">
   <div><h4>{{ T "deprecation_file_warning" }}</h4> {{ .Inner | markdownify }}</div>
 </blockquote>
diff --git a/layouts/shortcodes/note.html b/layouts/shortcodes/note.html
index 1161c2366c..eba93f8b7e 100644
--- a/layouts/shortcodes/note.html
+++ b/layouts/shortcodes/note.html
@@ -1,3 +1,3 @@
-<blockquote class="note">
+<blockquote class="note callout">
   <div><strong>{{ T "note" }}</strong> {{ trim .Inner " \n" | markdownify }}</div>
 </blockquote>
\ No newline at end of file
diff --git a/layouts/shortcodes/warning.html b/layouts/shortcodes/warning.html
index ddd5ff197f..a6a5f67abd 100644
--- a/layouts/shortcodes/warning.html
+++ b/layouts/shortcodes/warning.html
@@ -1,3 +1,3 @@
-<blockquote class="warning">
+<blockquote class="warning callout">
   <div><strong>{{ T "warning" }}</strong> {{ trim .Inner " \n" | markdownify }}</div>
 </blockquote>
diff --git a/static/css/callouts.css b/static/css/feature-states.css
similarity index 67%
rename from static/css/callouts.css
rename to static/css/feature-states.css
index ffc61ed4a5..725cf9e0fc 100644
--- a/static/css/callouts.css
+++ b/static/css/feature-states.css
@@ -1,24 +1,3 @@
-/* Callouts */
-.caution, .note, .warning {
-    padding: 20px;
-    margin: 20px 0;
-    border: 1px solid #eee;
-    border-left-width: 5px;
-    border-radius: 3px;
-}
-
-.caution {
-    border-left-color: #f0ad4e;
-}
-
-.note {
-    border-left-color: #428bca;
-}
-
-.warning {
-    border-left-color: #d9534f;
-}
-
 /* Feature States */
 
 .beta, .stable, .alpha, .deprecated {

From c2de62be772143d97f44d7418764b8dd50c8acc6 Mon Sep 17 00:00:00 2001
From: wangxy518 <40482095+wangxy518@users.noreply.github.com>
Date: Thu, 27 Aug 2020 09:06:41 +0800
Subject: [PATCH 092/496] Update 2018-06-28-Airflow-Kubernetes-Operator.md

---
 .../zh/blog/_posts/2018-06-28-Airflow-Kubernetes-Operator.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/blog/_posts/2018-06-28-Airflow-Kubernetes-Operator.md b/content/zh/blog/_posts/2018-06-28-Airflow-Kubernetes-Operator.md
index 86c0fd1ae3..5606cf9c2c 100644
--- a/content/zh/blog/_posts/2018-06-28-Airflow-Kubernetes-Operator.md
+++ b/content/zh/blog/_posts/2018-06-28-Airflow-Kubernetes-Operator.md
@@ -615,7 +615,7 @@ kubectl cp <local file> <namespace>/<pod>:/root/airflow/dags -c scheduler
 
 
 
-This feature is just the beginning of multiple major efforts to improves Apache Airflow integration into Kubernetes. The Kubernetes Operator has been merged into the 1.10 release branch of Airflow (the executor in experimental mode), along with a fully k8s native scheduler called the Kubernetes Executor (article to come). These features are still in a stage where early adopters/contributers can have a huge influence on the future of these features.
+This feature is just the beginning of multiple major efforts to improves Apache Airflow integration into Kubernetes. The Kubernetes Operator has been merged into the 1.10 release branch of Airflow (the executor in experimental mode), along with a fully k8s native scheduler called the Kubernetes Executor (article to come). These features are still in a stage where early adopters/contributors can have a huge influence on the future of these features.
 
 
 

From 7e6e7b6f4612d91492c06db3f93ee8095bfeaea4 Mon Sep 17 00:00:00 2001
From: wangxy518 <40482095+wangxy518@users.noreply.github.com>
Date: Thu, 27 Aug 2020 09:18:44 +0800
Subject: [PATCH 093/496] Update configmap.md

---
 content/en/docs/reference/glossary/configmap.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/glossary/configmap.md b/content/en/docs/reference/glossary/configmap.md
index 169372c954..e71e129c74 100755
--- a/content/en/docs/reference/glossary/configmap.md
+++ b/content/en/docs/reference/glossary/configmap.md
@@ -4,7 +4,7 @@ id: configmap
 date: 2018-04-12
 full_link: /docs/concepts/configuration/configmap/
 short_description: >
-  An API object used to store non-confidential data in key-value pairs. Can be consumed as environment variables, command-line arguments, or configuraton files in a volume.
+  An API object used to store non-confidential data in key-value pairs. Can be consumed as environment variables, command-line arguments, or configuration files in a volume.
 
 aka: 
 tags:

From d4f60587d02adeb80419f4008d3173d51ecd72f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9D=B0=E6=96=87?= <Surbowl@gmail.com>
Date: Thu, 27 Aug 2020 09:53:02 +0800
Subject: [PATCH 094/496] Update links to k8s control plane and k8s objects on
 controller page (#23416)

* add html id #control-plane-components

* Update links to k8s control plane and k8s objects on controller page

Fix links

* Fixe typo

* Update kubernetes-objects.md

* Remove excess Spaces
---
 content/zh/docs/concepts/architecture/controller.md       | 8 ++++----
 content/zh/docs/concepts/overview/components.md           | 2 +-
 .../overview/working-with-objects/kubernetes-objects.md   | 4 ++--
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/content/zh/docs/concepts/architecture/controller.md b/content/zh/docs/concepts/architecture/controller.md
index f7d86e3fec..dba00e9018 100644
--- a/content/zh/docs/concepts/architecture/controller.md
+++ b/content/zh/docs/concepts/architecture/controller.md
@@ -251,13 +251,13 @@ Kubernetes 允许你运行一个稳定的控制平面，这样即使某些内置
 
 ## {{% heading "whatsnext" %}}
 <!--
-* Read about the [Kubernetes control plane](/docs/concepts/#kubernetes-control-plane)
-* Discover some of the basic [Kubernetes objects](/docs/concepts/#kubernetes-objects)
+* Read about the [Kubernetes control plane](/docs/concepts/overview/components/#control-plane-components)
+* Discover some of the basic [Kubernetes objects](/docs/concepts/overview/working-with-objects/kubernetes-objects/)
 * Learn more about the [Kubernetes API](/docs/concepts/overview/kubernetes-api/)
 * If you want to write your own controller, see [Extension Patterns](/docs/concepts/extend-kubernetes/extend-cluster/#extension-patterns) in Extending Kubernetes.
 -->
-* 阅读 [Kubernetes 控制面](/zh/docs/concepts/#kubernetes-control-plane)
-* 了解 [Kubernetes 对象](/zh/docs/concepts/#kubernetes-objects) 的一些基本知识
+* 阅读 [Kubernetes 控制平面组件](/zh/docs/concepts/overview/components/#control-plane-components)
+* 了解 [Kubernetes 对象](/zh/docs/concepts/overview/working-with-objects/kubernetes-objects/) 的一些基本知识
 * 进一步学习 [Kubernetes API](/zh/docs/concepts/overview/kubernetes-api/)
 * 如果你想编写自己的控制器，请看 Kubernetes 的[扩展模式](/zh/docs/concepts/extend-kubernetes/extend-cluster/#extension-patterns)。
 
diff --git a/content/zh/docs/concepts/overview/components.md b/content/zh/docs/concepts/overview/components.md
index ebf3b2b4bf..7f9ef72b72 100644
--- a/content/zh/docs/concepts/overview/components.md
+++ b/content/zh/docs/concepts/overview/components.md
@@ -50,7 +50,7 @@ Here's the diagram of a Kubernetes cluster with all the components tied together
 
 The Control Plane's components make global decisions about the cluster (for example, scheduling), as well as detecting and responding to cluster events (for example, starting up a new {{< glossary_tooltip text="pod" term_id="pod">}} when a deployment's `replicas` field is unsatisfied).
  -->
-## 控制平面组件（Control Plane Components）
+## 控制平面组件（Control Plane Components）    {#control-plane-components}
 
 控制平面的组件对集群做出全局决策(比如调度)，以及检测和响应集群事件（例如，当不满足部署的 `replicas` 字段时，启动新的 {{< glossary_tooltip text="pod" term_id="pod">}}）。
 
diff --git a/content/zh/docs/concepts/overview/working-with-objects/kubernetes-objects.md b/content/zh/docs/concepts/overview/working-with-objects/kubernetes-objects.md
index fe47dad14c..f5843e2573 100644
--- a/content/zh/docs/concepts/overview/working-with-objects/kubernetes-objects.md
+++ b/content/zh/docs/concepts/overview/working-with-objects/kubernetes-objects.md
@@ -82,7 +82,7 @@ supplied.
 -->
 `status` 描述了对象的 _当前状态（Current State）_，它是由 Kubernetes 系统和组件
 设置并更新的。在任何时刻，Kubernetes 
-{{< glossary_tooltip text="控制面" term_id="control-plane" >}}
+{{< glossary_tooltip text="控制平面" term_id="control-plane" >}}
 都一直积极地管理着对象的实际状态，以使之与期望状态相匹配。
 
 <!--
@@ -195,7 +195,7 @@ and the `spec` format for a `Deployment` can be found
 * Learn about the most important basic Kubernetes objects, such as [Pod](/docs/concepts/workloads/pods/pod-overview/).
 * Learn about [controllers](/docs/concepts/architecture/controller/) in Kubernetes
 -->
-* [Kubernetes API 概述](/zh/docs/reference/using-api/api-overview/) 提供关于 API 概念的进一步阐述
+* [Kubernetes API 总览](/zh/docs/reference/using-api/api-overview/) 提供关于 API 概念的进一步阐述
 * 了解最重要的 Kubernetes 基本对象，例如 [Pod](/zh/docs/concepts/workloads/pods/)
 * 了解 Kubernetes 中的[控制器](/zh/docs/concepts/architecture/controller/)
 

From 91b8a103762260a33528df36f1443e11c9a6be80 Mon Sep 17 00:00:00 2001
From: zhangguanzhang <zhangguanzhang@qq.com>
Date: Thu, 27 Aug 2020 11:43:50 +0800
Subject: [PATCH 095/496] fix and update zh doc

---
 .../container-runtimes.md                     | 108 ++++++++++++++----
 1 file changed, 87 insertions(+), 21 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 2873951241..524e75b034 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -35,13 +35,13 @@ A flaw was found in the way runc handled system file descriptors when running co
 A malicious container could use this flaw to overwrite contents of the runc binary and
 consequently run arbitrary commands on the container host system.
 
-Please refer to this link for more information about this issue
-[cve-2019-5736 : runc vulnerability ] (https://access.redhat.com/security/cve/cve-2019-5736)
+Please refer to [CVE-2019-5736](https://access.redhat.com/security/cve/cve-2019-5736) for more
+information about the issue.
 -->
 我们发现 runc 在运行容器，处理系统文件描述符时存在一个漏洞。
 恶意容器可以利用此漏洞覆盖 runc 二进制文件的内容，并以此在主机系统的容器上运行任意的命令。
 
-请参考此链接以获取有关此问题的更多信息 [cve-2019-5736 : runc vulnerability ](https://access.redhat.com/security/cve/cve-2019-5736)
+请参考此链接以获取有关此问题的更多信息 [cve-2019-5736: runc vulnerability](https://access.redhat.com/security/cve/cve-2019-5736)
 {{< /caution >}}
 
 <!--
@@ -120,7 +120,7 @@ is to drain the Node from its workloads, remove it from the cluster and re-join
 ## Docker
 
 On each of your machines, install Docker.
-Version 19.03.4 is recommended, but 1.13.1, 17.03, 17.06, 17.09, 18.06 and 18.09 are known to work as well.
+Version 19.03.11 is recommended, but 1.13.1, 17.03, 17.06, 17.09, 18.06 and 18.09 are known to work as well.
 Keep track of the latest verified Docker version in the Kubernetes release notes.
 
 Use the following commands to install Docker on your system:
@@ -128,7 +128,7 @@ Use the following commands to install Docker on your system:
 ## Docker
 
 在您的每台机器上安装 Docker。
-推荐安装 19.03.4 版本，但是 1.13.1、17.03、17.06、17.09、18.06 和 18.09 版本也是可以的。
+推荐安装 19.03.11 版本，但是 1.13.1、17.03、17.06、17.09、18.06 和 18.09 版本也是可以的。
 请跟踪 Kubernetes 发行说明中经过验证的 Docker 最新版本变化。
 
 使用以下命令在您的系统上安装 Docker：
@@ -244,10 +244,10 @@ yum-config-manager \
     https://download.docker.com/linux/centos/docker-ce.repo
 
 ## Install Docker CE.
-yum update && yum install \
-  containerd.io-1.2.10 \
-  docker-ce-19.03.4 \
-  docker-ce-cli-19.03.4
+yum update -y && yum install -y \
+  containerd.io-1.2.13 \
+  docker-ce-19.03.11 \
+  docker-ce-cli-19.03.11
 
 ## Create /etc/docker directory.
 mkdir /etc/docker
@@ -285,7 +285,10 @@ yum-config-manager \
 
 ```shell
 ## 安装 Docker CE.
-yum update && yum install docker-ce-18.06.2.ce
+yum update -y && yum install -y \
+  containerd.io-1.2.13 \
+  docker-ce-19.03.11 \
+  docker-ce-cli-19.03.11
 ```
 
 ```shell
@@ -525,24 +528,52 @@ apt-get update
 apt-get install cri-o-1.15
 ```
 {{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" codelang="bash" %}}
+{{% tab name="CentOS" %}}
 
 <!--
-# Install prerequisites
-yum-config-manager --add-repo=https://cbs.centos.org/repos/paas7-crio-115-release/x86_64/os/
+To install on the following operating systems, set the environment variable $OS to the appropriate field in the following table:
 
-# Install CRI-O
-yum install --nogpgcheck cri-o
+| Operating system | $OS               |
+| ---------------- | ----------------- |
+| Centos 8         | `CentOS_8`        |
+| Centos 8 Stream  | `CentOS_8_Stream` |
+| Centos 7         | `CentOS_7`        |
+
+<br />
+Then, set `$VERSION` to the CRI-O version that matches your Kubernetes version.
+For instance, if you want to install CRI-O 1.18, set `VERSION=1.18`.
+You can pin your installation to a specific release.
+To install version 1.18.3, set `VERSION=1.18:1.18.3`.
+<br />
+
+Then run
+```shell
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/devel:kubic:libcontainers:stable.repo
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
+yum install cri-o
+```
 -->
 
-```shell
-# 安装必备软件
-yum-config-manager --add-repo=https://cbs.centos.org/repos/paas7-crio-115-release/x86_64/os/
-```
+要在以下操作系统上安装，请将环境变量 `$OS` 设置为下表中的相应字段：
+
+| 操作系统          | $OS               |
+| ---------------- | ----------------- |
+| Centos 8         | `CentOS_8`        |
+| Centos 8 Stream  | `CentOS_8_Stream` |
+| Centos 7         | `CentOS_7`        |
+
+<br />
+然后将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
+例如，如果要安装 CRI-O 1.18，请设置 `VERSION=1.18`。
+你也可以安装特定版本，例如 1.18.3，请设置 `VERSION=1.18:1.18.3`。
+<br />
+
+确保声明变量后，使用下面命令安装
 
 ```shell
-# 安装 CRI-O
-yum install --nogpgcheck cri-o
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/devel:kubic:libcontainers:stable.repo
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
+yum install cri-o
 ```
 
 {{% /tab %}}
@@ -552,8 +583,43 @@ yum install --nogpgcheck cri-o
 ```shell
 sudo zypper install cri-o
 ```
+
 {{% /tab %}}
 
+{{% tab name="Fedora" %}}
+<!--
+Set `$VERSION` to the CRI-O version that matches your Kubernetes version.
+For instance, if you want to install CRI-O 1.18, `VERSION=1.18`                                                                                                                                                                               
+You can find available versions with:
+```shell
+dnf module list cri-o
+```
+CRI-O does not support pinning to specific releases on Fedora.
+
+Then run
+```shell
+dnf module enable cri-o:$VERSION
+dnf install cri-o
+```
+-->
+
+将 `$VERSION` 设置为与你的 Kubernetes 相匹配的 CRI-O 版本。
+例如，如果要安装 CRI-O 1.18，请设置 `VERSION=1.18`。
+你可以用下列命令查找可用的版本：
+
+```shell
+dnf module list cri-o
+```
+
+CRI-O 不支持在 Fedora 上固定到特定的版本。
+运行下列命令安装
+
+```shell
+dnf module enable cri-o:$VERSION
+dnf install cri-o
+```
+
+{{% /tab %}}
 {{< /tabs >}}
 
 <!--

From 4867b6438f7a8ea5b4c1b42eda6ca7949cbe8019 Mon Sep 17 00:00:00 2001
From: Maciej Filocha <maciej.filocha@gmail.com>
Date: Thu, 27 Aug 2020 08:10:41 +0200
Subject: [PATCH 096/496] Synchronize Polish localization - 20200827

Synchronize Polish localization with upstream master
up to 46bd27df8f1d8dc6578b9394ea80c5796ccd6e4e.
---
 content/pl/docs/_index.md                              |  1 +
 .../pl/docs/concepts/overview/what-is-kubernetes.md    | 10 +++++-----
 content/pl/docs/reference/_index.md                    |  2 +-
 content/pl/docs/reference/glossary/kube-apiserver.md   |  2 +-
 content/pl/docs/reference/glossary/kubelet.md          |  4 ++--
 content/pl/docs/tasks/_index.md                        |  2 +-
 .../kubernetes-basics/explore/explore-intro.html       |  6 +++---
 7 files changed, 14 insertions(+), 13 deletions(-)

diff --git a/content/pl/docs/_index.md b/content/pl/docs/_index.md
index 1722679020..22120af73a 100644
--- a/content/pl/docs/_index.md
+++ b/content/pl/docs/_index.md
@@ -1,3 +1,4 @@
 ---
+linktitle: Dokumentacja Kubernetesa
 title: Dokumentacja
 ---
diff --git a/content/pl/docs/concepts/overview/what-is-kubernetes.md b/content/pl/docs/concepts/overview/what-is-kubernetes.md
index 861476a561..75321bfbb5 100644
--- a/content/pl/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/pl/docs/concepts/overview/what-is-kubernetes.md
@@ -58,17 +58,17 @@ I tu właśnie Kubernetes przychodzi z pomocą! Kubernetes dostarcza środowisko
 
 Kubernetes zapewnia:
 
-* **Detekcję nowych serwisów i balansowanie ruchu**  
+* **Detekcję nowych serwisów i balansowanie ruchu**
 Kubernetes może udostępnić kontener używając nazwy DNS lub swojego własnego adresu IP. Jeśli ruch przychodzący do kontenera jest duży, Kubernetes może balansować obciążenie i przekierować ruch sieciowy, aby zapewnić stabilność całej instalacji.
-* **Zarządzanie obsługą składowania danych**  
+* **Zarządzanie obsługą składowania danych**
 Kubernetes umożliwia automatyczne montowanie systemów składowania danych dowolnego typu — lokalnych, od dostawców chmurowych i innych.
-* **Automatyczne wdrożenia i wycofywanie zmian**  
+* **Automatyczne wdrożenia i wycofywanie zmian**
 Możesz opisać oczekiwany stan instalacji za pomocą Kubernetesa, który zajmie się doprowadzeniem w sposób kontrolowany stanu faktycznego do stanu oczekiwanego. Przykładowo, przy pomocy Kubernetesa możesz zautomatyzować proces tworzenia nowych kontenerów na potrzeby swojego wdrożenia, usuwania istniejących i przejęcia zasobów przez nowe kontenery.
 * **Automatyczne zarządzanie dostępnymi zasobami**
 Twoim zadaniem jest dostarczenie klastra maszyn, które Kubernetes może wykorzystać do uruchamiania zadań w kontenerach. Określasz zapotrzebowanie na moc procesora i pamięć RAM dla każdego z kontenerów. Kubernetes rozmieszcza kontenery na maszynach w taki sposób, aby jak najlepiej wykorzystać dostarczone zasoby.
-* **Samoczynne naprawianie**  
+* **Samoczynne naprawianie**
 Kubernetes restartuje kontenery, które przestały działać, wymienia je na nowe, wymusza wyłączenie kontenerów, które nie odpowiadają na określone zapytania o stan i nie rozgłasza powiadomień o ich dostępności tak długo, dopóki nie są gotowe do działania.
-* **Zarządzanie informacjami poufnymi i konfiguracją**  
+* **Zarządzanie informacjami poufnymi i konfiguracją**
 Kubernetes pozwala składować i zarządzać informacjami poufnymi, takimi jak hasła, tokeny OAuth i klucze SSH. Informacje poufne i zawierające konfigurację aplikacji mogą być dostarczane i zmieniane bez konieczności ponownego budowania obrazu kontenerów i bez ujawniania poufnych danych w ogólnej konfiguracji oprogramowania.
 
 ## Czym Kubernetes nie jest
diff --git a/content/pl/docs/reference/_index.md b/content/pl/docs/reference/_index.md
index c8c2ff8835..40e3724fa0 100644
--- a/content/pl/docs/reference/_index.md
+++ b/content/pl/docs/reference/_index.md
@@ -44,7 +44,7 @@ biblioteki to:
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - Przekazuje bezpośrednio dane przepływające w transmisji TCP/UDP lub dystrybuuje ruch TCP/UDP zgodnie ze schematem *round-robin* pomiędzy usługi back-endu.
 * [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - Scheduler odpowiada za dostępność, wydajność i zasoby.
 * [kube-scheduler Policies](/docs/reference/scheduling/policies)
-* [kube-scheduler Profiles](/docs/reference/scheduling/profiles)
+* [kube-scheduler Profiles](/docs/reference/scheduling/config#profiles)
 
 ## Dokumentacja projektowa
 
diff --git a/content/pl/docs/reference/glossary/kube-apiserver.md b/content/pl/docs/reference/glossary/kube-apiserver.md
index 61d55fb6f7..14b58a9ba6 100755
--- a/content/pl/docs/reference/glossary/kube-apiserver.md
+++ b/content/pl/docs/reference/glossary/kube-apiserver.md
@@ -2,7 +2,7 @@
 title: Serwer API
 id: kube-apiserver
 date: 2018-04-12
-full_link: /docs/reference/generated/kube-apiserver/
+full_link: /docs/concepts/overview/components/#kube-apiserver
 short_description: >
   Składnik warstwy sterowania udostępniający API Kubernetes. 
 
diff --git a/content/pl/docs/reference/glossary/kubelet.md b/content/pl/docs/reference/glossary/kubelet.md
index 551f5406a6..86d7a2c7f1 100755
--- a/content/pl/docs/reference/glossary/kubelet.md
+++ b/content/pl/docs/reference/glossary/kubelet.md
@@ -6,7 +6,7 @@ full_link: /docs/reference/generated/kubelet
 short_description: >
   Agent, który działa na każdym węźle klastra. Odpowiada za uruchamianie kontenerów w ramach poda.
 
-aka: 
+aka:
 tags:
 - fundamental
 - core-object
@@ -15,4 +15,4 @@ tags:
 
 <!--more-->
 
-Kubelet korzysta z dostarczanych na różne sposoby PodSpecs i gwarantuje, że kontenery opisane przez te PodSpecs są uruchomione i działają poprawnie. Kubelet nie zarządza kontenerami, które nie zostały utworzone przez Kubernetes.
+Kubelet korzysta z dostarczanych (różnymi metodami) _PodSpecs_ i gwarantuje, że kontenery opisane przez te PodSpecs są uruchomione i działają poprawnie. Kubelet nie zarządza kontenerami, które nie zostały utworzone przez Kubernetesa.
diff --git a/content/pl/docs/tasks/_index.md b/content/pl/docs/tasks/_index.md
index 94c292d8a6..6eedb7f885 100644
--- a/content/pl/docs/tasks/_index.md
+++ b/content/pl/docs/tasks/_index.md
@@ -12,4 +12,4 @@ sposobu realizacji różnych zadań. Przedstawione są one zazwyczaj jako
 krótka sekwencja kilku kroków związanych z pojedynczym zadaniem.
 
 Jeśli chciałbyś stworzyć nową stronę poświęconą jakiemuś zadaniu, przeczytaj
-[Jak przygotować propozycję zmian (PR)](/docs/home/contribute/create-pull-request/).
+[Jak przygotować propozycję zmian (PR)](/docs/contribute/new-content/open-a-pr/).
diff --git a/content/pl/docs/tutorials/kubernetes-basics/explore/explore-intro.html b/content/pl/docs/tutorials/kubernetes-basics/explore/explore-intro.html
index 6dbd6bdf27..edfff527e6 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/explore/explore-intro.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/explore/explore-intro.html
@@ -29,7 +29,7 @@ weight: 10
 
             <div class="col-md-8">
                 <h2>Pody Kubernetes</h2>
-                <p>Po stworzeniu Deploymentu w Module <a href="/pl/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, Kubernetes stworzył <b>Pod</b>, który "przechowuje" instancję Twojej aplikacji. Pod jest obiektem abstrakcyjnym Kubernetes, który reprezentuje grupę jednego bądź wielu kontenerów (takich jak Docker lub rkt) wraz ze wspólnymi zasobami dla tych kontenerów. Zasobami mogą być:</p>
+                <p>Po stworzeniu Deploymentu w Module <a href="/pl/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, Kubernetes stworzył <b>Pod</b>, który "przechowuje" instancję Twojej aplikacji. Pod jest obiektem abstrakcyjnym Kubernetes, który reprezentuje grupę jednego bądź wielu kontenerów (jak np. Docker) wraz ze wspólnymi zasobami dla tych kontenerów. Zasobami mogą być:</p>
                 <ul>
                     <li>Współdzielona przestrzeń dyskowa, np. Volumes</li>
                     <li>Zasoby sieciowe, takie jak unikatowy adres IP klastra</li>
@@ -51,7 +51,7 @@ weight: 10
                 </div>
                 <div class="content__box content__box_fill">
                         <p><i>
-                            Pod to grupa jednego lub wielu kontenerów aplikacji (takich, jak Docker czy rkt) zawierających współdzieloną przestrzeń dyskową (volumes), adres IP i informacje, jak mają być uruchamiane.
+                            Pod to grupa jednego lub wielu kontenerów aplikacji (jak np. Docker) zawierających współdzieloną przestrzeń dyskową (volumes), adres IP i informacje, jak mają być uruchamiane.
                         </i></p>
                 </div>
             </div>
@@ -79,7 +79,7 @@ weight: 10
                 <p>Na każdym węźle Kubernetes działają co najmniej:</p>
                 <ul>
                     <li>Kubelet, proces odpowiedzialny za komunikację pomiędzy Kubernetes Master i węzłami; zarządza podami i kontenerami działającymi na maszynie.</li>
-                    <li>Proces wykonawczy kontenera (przykładowo Docker czy rkt), który zajmuje się pobraniem obrazu dla kontenera z repozytorium, rozpakowaniem kontenera i uruchomieniem aplikacji.</li>
+                    <li>Proces wykonawczy kontenera (np. Docker), który zajmuje się pobraniem obrazu dla kontenera z repozytorium, rozpakowaniem kontenera i uruchomieniem aplikacji.</li>
                 </ul>
 
             </div>

From a7eb062e07d26b7ddda7a478e443e887152247b0 Mon Sep 17 00:00:00 2001
From: Dong-wook94 <gygacpu@naver.com>
Date: Thu, 27 Aug 2020 17:45:26 +0900
Subject: [PATCH 097/496] Modify Inconsistency node name in Korean

Change node name from 'noee2' to 'node2'
---
 content/ko/docs/tutorials/services/source-ip.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ko/docs/tutorials/services/source-ip.md b/content/ko/docs/tutorials/services/source-ip.md
index 382f096375..1e91a85de7 100644
--- a/content/ko/docs/tutorials/services/source-ip.md
+++ b/content/ko/docs/tutorials/services/source-ip.md
@@ -199,7 +199,7 @@ client_address=10.240.0.3
 
 * 클라이언트는 `node2:nodePort`로 패킷을 보낸다.
 * `node2`는 소스 IP 주소(SNAT)를 패킷 상에서 자신의 IP 주소로 교체한다.
-* `noee2`는 대상 IP를 패킷 상에서 파드의 IP로 교체한다.
+* `node2`는 대상 IP를 패킷 상에서 파드의 IP로 교체한다.
 * 패킷은 node 1로 라우팅 된 다음 엔드포인트로 라우팅 된다.
 * 파드의 응답은 node2로 다시 라우팅된다.
 * 파드의 응답은 클라이언트로 다시 전송된다.

From 5c8f26e6d6c19da59e146bf90826144de3f96c2e Mon Sep 17 00:00:00 2001
From: BartoszCki <bartosz.cierocki@gmail.com>
Date: Thu, 27 Aug 2020 15:23:55 +0200
Subject: [PATCH 098/496] Fix a typo

---
 content/en/docs/concepts/workloads/pods/pod-lifecycle.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
index 0daf25de1a..316b41fc34 100644
--- a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -45,7 +45,7 @@ higher-level abstraction, called a
 managing the relatively disposable Pod instances.
 
 A given Pod (as defined by a UID) is never "rescheduled" to a different node; instead,
-that Pod can be replaced by a new, near-identical Pod, with even the same name i
+that Pod can be replaced by a new, near-identical Pod, with even the same name if
 desired, but with a different UID.
 
 When something is said to have the same lifetime as a Pod, such as a

From 9328c7d2b194b1d339f9a1ba3c76de4b85b7eb52 Mon Sep 17 00:00:00 2001
From: BartoszCki <bartosz.cierocki@gmail.com>
Date: Thu, 27 Aug 2020 16:00:02 +0200
Subject: [PATCH 099/496] Another typo

---
 content/en/docs/concepts/workloads/pods/pod-lifecycle.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
index 316b41fc34..557c935c54 100644
--- a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -107,7 +107,7 @@ Each state has a specific meaning:
 
 ### `Waiting` {#container-state-waiting}
 
-If a container is not in either the `Running` or `Terminated` state, it `Waiting`.
+If a container is not in either the `Running` or `Terminated` state, it's `Waiting`.
 A container in the `Waiting` state is still running the operations it requires in
 order to complete start up: for example, pulling the container image from a container
 image registry, or applying {{< glossary_tooltip text="Secret" term_id="secret" >}}

From 9e9b22689c3006cbafd745e2aefc6bce6ea61e63 Mon Sep 17 00:00:00 2001
From: BartoszCki <bartosz.cierocki@gmail.com>
Date: Thu, 27 Aug 2020 16:07:59 +0200
Subject: [PATCH 100/496] Another typo

---
 content/en/docs/concepts/workloads/pods/pod-lifecycle.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
index 557c935c54..08bb73fb97 100644
--- a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -118,7 +118,7 @@ a Reason field to summarize why the container is in that state.
 ### `Running` {#container-state-running}
 
 The `Running` status indicates that a container is executing without issues. If there
-was a `postStart` hook configured, it has already executed and executed. When you use
+was a `postStart` hook configured, it has already executed and finished. When you use
 `kubectl` to query a Pod with a container that is `Running`, you also see information
 about when the container entered the `Running` state.
 

From 7948b19bc93a8bcb0b77a71ead3beca438770f8f Mon Sep 17 00:00:00 2001
From: Nabarun Pal <pal.nabarun95@gmail.com>
Date: Thu, 27 Aug 2020 20:10:42 +0530
Subject: [PATCH 101/496] Fix enhancement statistics in Kubernetes 1.19 release
 blog

The source of the information is: http://bit.ly/k8s-1-19-enhancements

Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
---
 .../2020-08-26-kubernetes-release-1.19.md     | 32 +++++++++----------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-26-kubernetes-release-1.19.md b/content/en/blog/_posts/2020-08-26-kubernetes-release-1.19.md
index 5f2d162eaf..6f7a4c4096 100644
--- a/content/en/blog/_posts/2020-08-26-kubernetes-release-1.19.md
+++ b/content/en/blog/_posts/2020-08-26-kubernetes-release-1.19.md
@@ -1,27 +1,27 @@
 ---
-layout: blog 
+layout: blog
 title: 'Kubernetes  1.19: Accentuate the Paw-sitive'
-date: 2020-08-26 
+date: 2020-08-26
 slug: kubernetes-release-1.19-accentuate-the-paw-sitive
 ---
 
 **Authors:** [Kubernetes 1.19 Release Team](https://github.com/kubernetes/sig-release/blob/master/releases/release-1.19/release_team.md)
 
-Finally, we have arrived with Kubernetes 1.19, the second release for 2020, and by far the longest release cycle lasting 20 weeks in total. It consists of 33 enhancements: 12 enhancements are moving to stable, 18 enhancements in beta, and 13 enhancements in alpha. 
+Finally, we have arrived with Kubernetes 1.19, the second release for 2020, and by far the longest release cycle lasting 20 weeks in total. It consists of 34 enhancements: 10 enhancements are moving to stable, 15 enhancements in beta, and 9 enhancements in alpha.
 
-The 1.19 release was quite different from a regular release due to COVID-19, the George Floyd protests, and several other global events that we experienced as a release team. Due to these events, we made the decision to adjust our timeline and allow the SIGs, Working Groups, and contributors more time to get things done. The extra time also allowed for people to take time to focus on their lives outside of the Kubernetes project, and ensure their mental wellbeing was in a good place. 
+The 1.19 release was quite different from a regular release due to COVID-19, the George Floyd protests, and several other global events that we experienced as a release team. Due to these events, we made the decision to adjust our timeline and allow the SIGs, Working Groups, and contributors more time to get things done. The extra time also allowed for people to take time to focus on their lives outside of the Kubernetes project, and ensure their mental wellbeing was in a good place.
 
-Contributors are the heart of Kubernetes, not the other way around. The Kubernetes code of conduct asks that people be excellent to one another and despite the unrest in our world, we saw nothing but greatness and humility from the community. 
+Contributors are the heart of Kubernetes, not the other way around. The Kubernetes code of conduct asks that people be excellent to one another and despite the unrest in our world, we saw nothing but greatness and humility from the community.
 
 ## Major Themes
 ### Increase Kubernetes support window to one year
 
-A survey conducted in early 2019 by the [Long Term Support (LTS) working group](https://github.com/kubernetes/community/tree/master/wg-lts#readme) showed that a significant subset of Kubernetes end-users fail to upgrade within the current 9-month support period. 
+A survey conducted in early 2019 by the [Long Term Support (LTS) working group](https://github.com/kubernetes/community/tree/master/wg-lts#readme) showed that a significant subset of Kubernetes end-users fail to upgrade within the current 9-month support period.
 This, and other responses from the survey, suggest that 30% of users would be able to keep their deployments on supported versions if the patch support period were extended to 12-14 months. This appears to be true regardless of whether the users are on self build or commercially vendored distributions. An extension would thus lead to more than 80% of users being on supported versions, instead of the 50-60% we have now.
 A yearly support period provides the cushion end-users appear to desire, and is more in harmony with familiar annual planning cycles.
 From Kubernetes version 1.19 on, the support window will be extended to one year.
 
-### Storage capacity tracking 
+### Storage capacity tracking
 
 Traditionally, the Kubernetes scheduler was based on the assumptions that additional persistent storage is available everywhere in the cluster and has infinite capacity. Topology constraints addressed the first point, but up to now pod scheduling was still done without considering that the remaining storage capacity may not be enough to start a new pod. [Storage capacity tracking](/docs/concepts/storage/storage-capacity/), a new alpha feature, addresses that by adding an API for a CSI driver to report storage capacity and uses that information in the Kubernetes scheduler when choosing a node for a pod. This feature serves as a stepping stone for supporting dynamic provisioning for local volumes and other volume types that are more capacity constrained.
 
@@ -35,7 +35,7 @@ All features supported with PersistentVolumeClaims are supported, such as storag
 The alpha version of CSI health monitoring is being released with Kubernetes 1.19. This feature enables CSI Drivers to share abnormal volume conditions from the underlying storage systems with Kubernetes so that they can be reported as events on PVCs or Pods. This feature serves as a stepping stone towards programmatic detection and resolution of individual volume health issues by Kubernetes.
 
 ### Ingress graduates to General Availability
-In terms of moving the Ingress API towards GA, the API itself has been available in beta for so long that it has attained de facto GA status through usage and adoption (both by users and by load balancer / ingress controller providers). Abandoning it without a full replacement is not a viable approach. It is clearly a useful API and captures a non-trivial set of use cases. At this point, it seems more prudent to declare the current API as something the community will support as a V1, codifying its status, while working on either a V2 Ingress API or an entirely different API with a superset of features. 
+In terms of moving the Ingress API towards GA, the API itself has been available in beta for so long that it has attained de facto GA status through usage and adoption (both by users and by load balancer / ingress controller providers). Abandoning it without a full replacement is not a viable approach. It is clearly a useful API and captures a non-trivial set of use cases. At this point, it seems more prudent to declare the current API as something the community will support as a V1, codifying its status, while working on either a V2 Ingress API or an entirely different API with a superset of features.
 
 ### Structured logging
 Before v1.19, logging in the Kubernetes control plane couldn't guarantee any uniform structure for log messages and references to Kubernetes objects in those logs. This makes parsing, processing, storing, querying and analyzing logs hard and forces administrators and developers to rely on ad-hoc solutions in most cases based on some regular expressions. Due to those problems any analytical solution based on those logs is hard to implement and maintain.
@@ -45,13 +45,13 @@ This Kubernetes release introduces new methods to the _klog_ library that provid
 
 ### Client TLS certificate rotation for kubelet
 
-A kubelet authenticates the kubelet to the kube-apiserver using a private key and certificate. The certificate is supplied to the kubelet when it is first booted, via an out-of-cluster mechanism. Since Kubernetes v1.8, clusters have included a (beta) process for obtaining the initial cert/key pair and rotating it as expiration of the certificate approaches. In Kubernetes v1.19 this graduates to stable. 
+A kubelet authenticates the kubelet to the kube-apiserver using a private key and certificate. The certificate is supplied to the kubelet when it is first booted, via an out-of-cluster mechanism. Since Kubernetes v1.8, clusters have included a (beta) process for obtaining the initial cert/key pair and rotating it as expiration of the certificate approaches. In Kubernetes v1.19 this graduates to stable.
 
 During the kubelet start-up sequence, the filesystem is scanned for an existing cert/key pair, which is managed by the certificate manager. In the case that a cert/key is available it will be loaded. If not, the kubelet checks its config file for an encoded certificate value or a file reference in the kubeconfig. If the certificate is a bootstrap certificate, this will be used to generate a key, create a certificate signing request and request a signed certificate from the API server.
 
 When an expiration approaches the cert manager takes care of providing the correct certificate, generating new private keys and requesting new certificates. With the kubelet requesting certificates be signed as part of its boot sequence, and on an ongoing basis, certificate signing requests from the kubelet need to be auto approved to make cluster administration manageable.
 
-## Other Updates 
+## Other Updates
 ### Graduated to Stable
 * [Seccomp](https://github.com/kubernetes/enhancements/issues/135)
 * [Kubelet client TLS certificate rotation](https://github.com/kubernetes/enhancements/issues/266)
@@ -76,20 +76,20 @@ Check out the full details of the Kubernetes 1.19 release in our [release notes]
 
 ## Availability
 
-Kubernetes 1.19 is available for download on [GitHub](https://github.com/kubernetes/kubernetes/releases/tag/v1.19.0). To get started with Kubernetes, check out these [interactive tutorials](https://kubernetes.io/docs/tutorials/) or run local Kubernetes clusters using Docker container “nodes” with [KinD](https://kind.sigs.k8s.io/) (Kubernetes in Docker). You can also easily install 1.19 using [kubeadm](https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/). 
+Kubernetes 1.19 is available for download on [GitHub](https://github.com/kubernetes/kubernetes/releases/tag/v1.19.0). To get started with Kubernetes, check out these [interactive tutorials](https://kubernetes.io/docs/tutorials/) or run local Kubernetes clusters using Docker container “nodes” with [KinD](https://kind.sigs.k8s.io/) (Kubernetes in Docker). You can also easily install 1.19 using [kubeadm](https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/).
 
 ## Release Team
-This release is made possible through the efforts of hundreds of individuals who contributed both technical and non-technical content. Special thanks to the [release team](https://github.com/kubernetes/sig-release/blob/master/releases/release-1.19/release_team.md) led by Taylor Dolezal, Senior Developer Advocate at HashiCorp. The 34 release team members coordinated many aspects of the release, from documentation to testing, validation, and feature completeness. 
+This release is made possible through the efforts of hundreds of individuals who contributed both technical and non-technical content. Special thanks to the [release team](https://github.com/kubernetes/sig-release/blob/master/releases/release-1.19/release_team.md) led by Taylor Dolezal, Senior Developer Advocate at HashiCorp. The 34 release team members coordinated many aspects of the release, from documentation to testing, validation, and feature completeness.
 
 As the Kubernetes community has grown, our release process represents an amazing demonstration of collaboration in open source software development. Kubernetes continues to gain new users at a rapid pace. This growth creates a positive feedback cycle where more contributors commit code creating a more vibrant ecosystem. Kubernetes has had over [49,000 individual contributors](https://k8s.devstats.cncf.io/d/24/overall-project-statistics?orgId=1) to date and an active community of more than 3,000 people.
 
 ## Release Logo
-All of you inspired this Kubernetes 1.19 release logo! This release was a bit more of a marathon and a testament to when the world is a wild place, we can come together and do unbelievable things. 
+All of you inspired this Kubernetes 1.19 release logo! This release was a bit more of a marathon and a testament to when the world is a wild place, we can come together and do unbelievable things.
 
 ![Kubernetes 1.19 Release Logo](/images/blog/2020-08-26-kubernetes-1.19-release-announcement/accentuate.png)
 
 
-"Accentuate the Paw-sitive" was chosen as the release theme because it captures the positive outlook that the release team had, despite the state of the world. The characters pictured in the 1.19 logo represent everyone's personalities on our release team, from emo to peppy, and beyond! 
+"Accentuate the Paw-sitive" was chosen as the release theme because it captures the positive outlook that the release team had, despite the state of the world. The characters pictured in the 1.19 logo represent everyone's personalities on our release team, from emo to peppy, and beyond!
 
 About the designer: Hannabeth Lagerlof is a Visual Designer based in Los Angeles, California, and she has an extensive background in Environments and Graphic Design. Hannabeth creates art and user experiences that inspire connection. You can find Hannabeth on Twitter as @emanate_design.
 
@@ -105,10 +105,10 @@ The milestone until which contributors implement the features was extended from
 * The CNCF just concluded its very first Virtual KubeCon. All talks are [on-demand]( https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/) for anyone registered, it's not too late!
 * The [Certified Kubernetes Security Specialist](https://www.cncf.io/blog/2020/07/15/certified-kubernetes-security-specialist-cks-coming-in-november/) (CKS) coming in November! CKS focuses on cluster & system hardening, minimizing microservice vulnerabilities and the security of the supply chain.
 * CNCF published the second [State of Cloud Native Development](https://www.cncf.io/blog/2020/08/14/state-of-cloud-native-development/), showing the massively growing number of cloud native developer using container and serverless technology.
-* [Kubernetes.dev](https://www.kubernetes.dev), a Kubernetes contributor focused website has been launched. It brings the  contributor documentation, resources and project event information into one central location.  
+* [Kubernetes.dev](https://www.kubernetes.dev), a Kubernetes contributor focused website has been launched. It brings the  contributor documentation, resources and project event information into one central location.
 
 ## Project Velocity
-The [Kubernetes DevStats dashboard](https://k8s.devstats.cncf.io/d/12/dashboards?orgId=1) illustrates the breakdown of contributions from major company contributors, as well as an impressive set of preconfigured reports on everything from individual contributors to pull request lifecycle times. If you want to gather numbers, facts and figures from Kubernetes and the CNCF community it is the best place to start. 
+The [Kubernetes DevStats dashboard](https://k8s.devstats.cncf.io/d/12/dashboards?orgId=1) illustrates the breakdown of contributions from major company contributors, as well as an impressive set of preconfigured reports on everything from individual contributors to pull request lifecycle times. If you want to gather numbers, facts and figures from Kubernetes and the CNCF community it is the best place to start.
 
 During this release cycle from April till August, 382 different companies and over 2,464 individuals contributed to Kubernetes. [Check out DevStats](https://k8s.devstats.cncf.io/d/11/companies-contributing-in-repository-groups?orgId=1&var-period=m&var-repogroup_name=All&from=1585692000000&to=1598392799000) to learn more about the overall velocity of the Kubernetes project and community.
 

From 0729bafceac47871b7731877e282624475a626b6 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Fri, 28 Aug 2020 00:28:38 +0900
Subject: [PATCH 102/496] Translate Completed

---
 .../kubeadm/adding-windows-nodes.md           | 186 ++++++++++++++++++
 1 file changed, 186 insertions(+)
 create mode 100644 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
new file mode 100644
index 0000000000..fc5b2ab060
--- /dev/null
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -0,0 +1,186 @@
+---
+reviewers:
+- michmike
+- patricklang
+title: Adding Windows nodes
+min-kubernetes-server-version: 1.17
+content_type: tutorial
+weight: 30
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+Kubernetesを使用してLinuxノードとWindowsノードを混在させて実行できるため、Linuxで実行するPodとWindowsで実行するPodを混在させることができます。このページでは、Windowsノードをクラスターに登録する方法を示します。
+
+
+
+
+## {{% heading "prerequisites" %}}
+ {{< version-check >}}
+
+* WindowsコンテナをホストするWindowsノードを構成するには、[Windows Server 2019ライセンス](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing)（またはそれ以上）を取得します。
+VXLAN/オーバーレイネットワークを使用している場合は、[KB4489899](https://support.microsoft.com/help/4489899)もインストールされている必要があります。
+
+* コントロールプレーンにアクセスできるLinuxベースのKubernetes kubeadmクラスター（[kubeadmを使用した単一のコントロールプレーンクラスターの作成](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)を参照）
+
+
+
+
+## {{% heading "objectives" %}}
+
+
+* Windowsノードをクラスターに登録する
+* LinuxとWindowsのPodとServiceが相互に通信できるようにネットワークを構成する
+
+
+
+
+<!-- lessoncontent -->
+
+## はじめに：クラスタへのWindowsノードの追加
+
+### ネットワーク構成
+
+LinuxベースのKubernetesコントロールプレーンノードを取得したら、ネットワーキングソリューションを選択できます。このガイドでは、簡単にするためにVXLANモードでのFlannelの使用について説明します。
+
+#### Flannel構成
+
+1. FlannelのためにKubernetesコントロールプレーンを準備する
+
+    クラスター内のKubernetesコントロールプレーンでは、多少の準備が推奨されます。Flannelを使用する場合は、iptablesチェーンへのブリッジIPv4トラフィックを有効にすることをお勧めします。すべてのLinuxノードで次のコマンドを実行する必要があります:
+
+    ```bash
+    sudo sysctl net.bridge.bridge-nf-call-iptables=1
+    ```
+
+1. Linux用のFlannelをダウンロードして構成する
+
+    最新のFlannelマニフェストをダウンロード:
+
+    ```bash
+    wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
+    ```
+
+    VNIを4096、ポートを4789に設定するために、flannelマニフェストの`net-conf.json`セクションを変更します。次のようになります。:
+
+    ```json
+    net-conf.json: |
+        {
+          "Network": "10.244.0.0/16",
+          "Backend": {
+            "Type": "vxlan",
+            "VNI" : 4096,
+            "Port": 4789
+          }
+        }
+    ```
+
+    {{< note >}}Linux上のFlannelがWindows上のFlannelと相互運用するには、VNIを4096およびポート4789に設定する必要があります。これらのフィールドの説明については、[VXLANドキュメント](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan)を参照。{{< /note >}}
+
+    {{< note >}}L2Bridge/Host-gatewayモードを使用するには、代わりに`Type`の値を`"host-gw"`に変更し、`VNI`と`Port`を省略します。{{< /note >}}
+
+1. Flannelマニフェストを適用して検証する
+
+    Flannelの構成を適用しましょう:
+
+    ```bash
+    kubectl apply -f kube-flannel.yml
+    ```
+
+    数分後、Flannel Podネットワークがデプロイされていれば、すべてのPodが実行されていることがわかります。
+
+    ```bash
+    kubectl get pods -n kube-system
+    ```
+
+    出力結果には、実行中のLinux flannel DaemonSetが含まれているはずです:
+
+    ```
+    NAMESPACE     NAME                                      READY        STATUS    RESTARTS   AGE
+    ...
+    kube-system   kube-flannel-ds-54954                     1/1          Running   0          1m
+    ```
+
+1. Windows Flannelとkube-proxy DaemonSetsを追加する
+
+    これで、Windows互換バージョンのFlannelおよびkube-proxyを追加できます。
+    順番に互換性のあるバージョンのkube-proxyを確実に入手するには、イメージのタグを代用する必要があります。
+    次の例は、Kubernetes{{< param "fullversion" >}}の使用方法を示していますが、
+    独自のdeploymentに合わせてバージョンを調整する必要があります。
+
+    ```bash
+    curl -L https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/kube-proxy.yml | sed 's/VERSION/{{< param "fullversion" >}}/g' | kubectl apply -f -
+    kubectl apply -f https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/flannel-overlay.yml
+    ```
+    {{< note >}}
+    ホストゲートウェイを使用している場合は、代わりにhttps://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/flannel-host-gw.ymlを使用してください。
+    {{< /note >}}
+
+    {{< note >}}
+Windowsノードでイーサネット(「Ethernet0 2」など)ではなく別のインターフェースを使用している場合は、次の行を変更する必要があります。:
+
+```powershell
+wins cli process run --path /k/flannel/setup.exe --args "--mode=overlay --interface=Ethernet"
+```
+
+`flannel-host-gw.yml`または`flannel-overlay.yml`ファイルで、それに応じてインターフェースを指定します。
+
+```bash
+# 例
+curl -L https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/flannel-overlay.yml | sed 's/Ethernet/Ethernet0 2/g' | kubectl apply -f -
+```
+    {{< /note >}}
+    
+
+
+### Windowsワーカーノードの参加
+{{< note >}}
+`Containers`機能をインストールし、Dockerをインストールする必要があります。
+行うための指示としては、[Dockerエンジンのインストール - Windowsサーバー上のエンタープライズ](https://docs.mirantis.com/docker-enterprise/v3.1/dockeree-products/docker-engine-enterprise/dee-windows.html)を利用できます。
+{{< /note >}}
+
+{{< note >}}
+Windowsセクションのすべてのコードスニペットは、
+Windowsワーカーノードの(管理者)権限を持つPowerShell環境で実行されます。
+{{< /note >}}
+
+1. wins、kubelet、kubeadmのインストールします。
+
+   ```PowerShell
+   curl.exe -LO https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/PrepareNode.ps1
+   .\PrepareNode.ps1 -KubernetesVersion {{< param "fullversion" >}}
+   ```
+
+1. `kubeadm`を実行してノードに参加します
+
+    コントロールプレーンホストで`kubeadm init`を実行したときに提供されたコマンドを使用します。
+    このコマンドがなくなった場合、またはトークンの有効期限が切れている場合は、`kubeadm token create --print-join-command`
+    （コントロールプレーンホスト上で）を実行して新しいトークンを生成します。
+
+
+#### インストールの確認
+次のコマンドを実行して、クラスター内のWindowsノードを表示できるようになります:
+
+```bash
+kubectl get nodes -o wide
+```
+
+新しいノードが`NotReady`状態の場合は、flannelイメージがまだダウンロードされている可能性があります。
+`kube-system`名前空間のフランネルポッドを確認することで、以前と同様に進行状況を確認できます:
+
+```shell
+kubectl -n kube-system get pods -l app=flannel
+```
+
+flannel Podが実行されると、ノードは`Ready`状態になり、ワークロードを処理できるようになります。
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+- [Windows kubeadmノードのアップグレード](/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes)
+
+

From 21a7a01fb34852d722a9f8f4f86a7952a399891f Mon Sep 17 00:00:00 2001
From: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Date: Tue, 25 Aug 2020 19:12:22 -0300
Subject: [PATCH 103/496] Add Flatcar instructions

Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
---
 .../tools/kubeadm/install-kubeadm.md            | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 42ab59f4db..92a73bf4a1 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -25,7 +25,7 @@ For information how to create a cluster with kubeadm once you have performed thi
   - Red Hat Enterprise Linux (RHEL) 7
   - Fedora 25+
   - HypriotOS v1.0.1+
-  - Container Linux (tested with 1800.6.0)
+  - Flatcar Container Linux (tested with 2512.3.0)
 * 2 GB or more of RAM per machine (any less will leave little room for your apps)
 * 2 CPUs or more
 * Full network connectivity between all machines in the cluster (public or private network is fine)
@@ -220,7 +220,7 @@ sudo systemctl enable --now kubelet
   - You can leave SELinux enabled if you know how to configure it but it may require settings that are not supported by kubeadm.
 
 {{% /tab %}}
-{{% tab name="Fedora CoreOS" %}}
+{{% tab name="Fedora CoreOS or Flatcar Container Linux" %}}
 Install CNI plugins (required for most pod network):
 
 ```bash
@@ -231,6 +231,11 @@ curl -L "https://github.com/containernetworking/plugins/releases/download/${CNI_
 
 Define the directory to download command files  
 
+{{< note >}}
+The DOWNLOAD_DIR variable must be set to a writable directory.
+If you are running Flatcar Container Linux, set DOWNLOAD_DIR=/opt/bin.
+{{< /note >}}
+
 ```bash
 DOWNLOAD_DIR=/usr/local/bin
 sudo mkdir -p $DOWNLOAD_DIR
@@ -251,7 +256,7 @@ cd $DOWNLOAD_DIR
 sudo curl -L --remote-name-all https://storage.googleapis.com/kubernetes-release/release/${RELEASE}/bin/linux/amd64/{kubeadm,kubelet,kubectl}
 sudo chmod +x {kubeadm,kubelet,kubectl}
 
-RELEASE_VERSION="v0.2.7"
+RELEASE_VERSION="v0.4.0"
 curl -sSL "https://raw.githubusercontent.com/kubernetes/release/${RELEASE_VERSION}/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service" | sed "s:/usr/bin:${DOWNLOAD_DIR}:g" | sudo tee /etc/systemd/system/kubelet.service
 sudo mkdir -p /etc/systemd/system/kubelet.service.d
 curl -sSL "https://raw.githubusercontent.com/kubernetes/release/${RELEASE_VERSION}/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf" | sed "s:/usr/bin:${DOWNLOAD_DIR}:g" | sudo tee /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
@@ -262,6 +267,12 @@ Enable and start `kubelet`:
 ```bash
 systemctl enable --now kubelet
 ```
+
+{{< note >}}
+The Flatcar Container Linux distribution mounts the `/usr` directory as a read-only filesystem.
+Before bootstrapping your cluster, you need to take additional steps to configure a writable directory.
+See the [Kubeadm Troubleshooting guide](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/#usr-mounted-read-only/) to learn how to set up a writable directory.
+{{< /note >}}
 {{% /tab %}}
 {{< /tabs >}}
 

From 8bcf7bb7445df99830d9e8418d90ba5dd8f2efd6 Mon Sep 17 00:00:00 2001
From: BartoszCki <bartosz.cierocki@gmail.com>
Date: Fri, 28 Aug 2020 00:31:06 +0200
Subject: [PATCH 104/496] Make it idiomatic English

---
 content/en/docs/concepts/workloads/pods/pod-lifecycle.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
index 08bb73fb97..31a92593da 100644
--- a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -107,7 +107,7 @@ Each state has a specific meaning:
 
 ### `Waiting` {#container-state-waiting}
 
-If a container is not in either the `Running` or `Terminated` state, it's `Waiting`.
+If a container is not in either the `Running` or `Terminated` state, it is `Waiting`.
 A container in the `Waiting` state is still running the operations it requires in
 order to complete start up: for example, pulling the container image from a container
 image registry, or applying {{< glossary_tooltip text="Secret" term_id="secret" >}}

From fd8602b3917d4fd1d6bbca123e7e325a243ea281 Mon Sep 17 00:00:00 2001
From: Savitha Raghunathan <saveetha13@gmail.com>
Date: Thu, 27 Aug 2020 18:37:02 -0400
Subject: [PATCH 105/496] Adding v1.19.0 release notes

---
 content/en/docs/setup/release/notes.md | 3660 ++++++++++++++++--------
 1 file changed, 2447 insertions(+), 1213 deletions(-)

diff --git a/content/en/docs/setup/release/notes.md b/content/en/docs/setup/release/notes.md
index 8bc87867bc..a167556594 100644
--- a/content/en/docs/setup/release/notes.md
+++ b/content/en/docs/setup/release/notes.md
@@ -1,5 +1,5 @@
 ---
-title: v1.18 Release Notes
+title: v1.19 Release Notes
 weight: 10
 card:
   name: release-notes
@@ -13,788 +13,2403 @@ card:
 
 <!-- NEW RELEASE NOTES ENTRY -->
 
-# v1.18.0
+# v1.19.0
 
 [Documentation](https://docs.k8s.io)
 
-## Downloads for v1.18.0
+## Downloads for v1.19.0
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes.tar.gz) | `cd5b86a3947a4f2cea6d857743ab2009be127d782b6f2eb4d37d88918a5e433ad2c7ba34221c34089ba5ba13701f58b657f0711401e51c86f4007cb78744dee7`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-src.tar.gz) | `fb42cf133355ef18f67c8c4bb555aa1f284906c06e21fa41646e086d34ece774e9d547773f201799c0c703ce48d4d0e62c6ba5b2a4d081e12a339a423e111e52`
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes.tar.gz) | `448b941e973a519a500eb24786f6deb7eebd0e1ecb034941e382790ff69dfc2838715a222cfc53bea7b75f2c6aedc7425eded4aad69bf88773393155c737f9c0`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-src.tar.gz) | `47d253e6eb1f6da730f4f3885e205e6bfde88ffe66d92915465108c9eaf8e3c5d1ef515f8bf804a726db057433ecd25008ecdef624ee68ad9c103d1c7a615aad`
 
 ### Client Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-darwin-386.tar.gz) | `26df342ef65745df12fa52931358e7f744111b6fe1e0bddb8c3c6598faf73af997c00c8f9c509efcd7cd7e82a0341a718c08fbd96044bfb58e80d997a6ebd3c2`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-darwin-amd64.tar.gz) | `803a0fed122ef6b85f7a120b5485723eaade765b7bc8306d0c0da03bd3df15d800699d15ea2270bb7797fa9ce6a81da90e730dc793ea4ed8c0149b63d26eca30`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-386.tar.gz) | `110844511b70f9f3ebb92c15105e6680a05a562cd83f79ce2d2e25c2dd70f0dbd91cae34433f61364ae1ce4bd573b635f2f632d52de8f72b54acdbc95a15e3f0`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-amd64.tar.gz) | `594ca3eadc7974ec4d9e4168453e36ca434812167ef8359086cd64d048df525b7bd46424e7cc9c41e65c72bda3117326ba1662d1c9d739567f10f5684fd85bee`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-arm.tar.gz) | `d3627b763606557a6c9a5766c34198ec00b3a3cd72a55bc2cb47731060d31c4af93543fb53f53791062bb5ace2f15cbaa8592ac29009641e41bd656b0983a079`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-arm64.tar.gz) | `ba9056eff1452cbdaef699efbf88f74f5309b3f7808d372ebf6918442d0c9fea1653c00b9db3b7626399a460eef9b1fa9e29b827b7784f34561cbc380554e2ea`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-ppc64le.tar.gz) | `f80fb3769358cb20820ff1a1ce9994de5ed194aabe6c73fb8b8048bffc394d1b926de82c204f0e565d53ffe7562faa87778e97a3ccaaaf770034a992015e3a86`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-s390x.tar.gz) | `a9b658108b6803d60fa3cd4e76d9e58bf75201017164fe54054b7ccadbb68c4ad7ba7800746940bc518d90475e6c0a96965a26fa50882f4f0e56df404f4ae586`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-windows-386.tar.gz) | `18adffab5d1be146906fd8531f4eae7153576aac235150ce2da05aee5ae161f6bd527e8dec34ae6131396cd4b3771e0d54ce770c065244ad3175a1afa63c89e1`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-windows-amd64.tar.gz) | `162396256429cef07154f817de2a6b67635c770311f414e38b1e2db25961443f05d7b8eb1f8da46dec8e31c5d1d2cd45f0c95dad1bc0e12a0a7278a62a0b9a6b`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-darwin-amd64.tar.gz) | `7093a34298297e46bcd1ccb77a9c83ca93b8ccb63ce2099d3d8cd8911ccc384470ac202644843406f031c505a8960d247350a740d683d8910ca70a0b58791a1b`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-linux-386.tar.gz) | `891569cff7906732a42b20b86d1bf20a9fe873f87b106e717a5c0f80728b5823c2a00c7ccea7ec368382509f095735089ddd582190bc51dcbbcef6b8ebdbd5cc`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-linux-amd64.tar.gz) | `1590d4357136a71a70172e32820c4a68430d1b94cf0ac941ea17695fbe0c5440d13e26e24a2e9ebdd360c231d4cd16ffffbbe5b577c898c78f7ebdc1d8d00fa3`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-linux-arm.tar.gz) | `bc0fb19fb6af47f591adc64b5a36d3dffcadc35fdfd77a4a222e037dbd2ee53fafb84f13c4e307910cfa36b3a46704063b42a14ceaad902755ec14c492ccd51d`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-linux-arm64.tar.gz) | `6ff47f4fdfb3b5f2bfe18fd792fe9bfc747f06bf52de062ee803cda87ac4a98868d8e1211742e32dd443a4bdb770018bbdde704dae6abfc6d80c02bdfb4e0311`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-linux-ppc64le.tar.gz) | `d8816518adc3a7fc00f996f23ff84e6782a3ebbba7ef37ba44def47b0e6506fefeeaf37d0e197cecf0deb5bd1a8f9dd1ba82af6c29a6b9d21b8e62af965b6b81`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-linux-s390x.tar.gz) | `662fd4618f2b747d2b0951454b9148399f6cd25d3ca7c40457b6e02cb20df979138cad8cccd18fc8b265d9426c90828d3f0b2a6b40d9cd1a1bdc17219e35ed33`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-windows-386.tar.gz) | `d90cb92eb33ecbfab7a0e3a2da60ab10fc59132e4bc9abe0a1461a13222b5016704a7cfe0bf9bcf5d4ec55f505ffbbf53162dfe570e8f210e3f68b0d3a6bf7e3`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-client-windows-amd64.tar.gz) | `6ec32a8a62b69363a524c4f8db765ff4bd16ea7e5b0eb04aa5a667f8653eda18c357a97513d9e12f0ba1612516acb150deffb6e3608633c62b97a15b6efa7cc0`
 
 ### Server Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-amd64.tar.gz) | `a92f8d201973d5dfa44a398e95fcf6a7b4feeb1ef879ab3fee1c54370e21f59f725f27a9c09ace8c42c96ac202e297fd458e486c489e05f127a5cade53b8d7c4`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-arm.tar.gz) | `62fbff3256bc0a83f70244b09149a8d7870d19c2c4b6dee8ca2714fc7388da340876a0f540d2ae9bbd8b81fdedaf4b692c72d2840674db632ba2431d1df1a37d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-arm64.tar.gz) | `842910a7013f61a60d670079716b207705750d55a9e4f1f93696d19d39e191644488170ac94d8740f8e3aa3f7f28f61a4347f69d7e93d149c69ac0efcf3688fe`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-ppc64le.tar.gz) | `95c5b952ac1c4127a5c3b519b664972ee1fb5e8e902551ce71c04e26ad44b39da727909e025614ac1158c258dc60f504b9a354c5ab7583c2ad769717b30b3836`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-s390x.tar.gz) | `a46522d2119a0fd58074564c1fa95dd8a929a79006b82ba3c4245611da8d2db9fd785c482e1b61a9aa361c5c9a6d73387b0e15e6a7a3d84fffb3f65db3b9deeb`
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-server-linux-amd64.tar.gz) | `7c268bd58e67d3c5016f3fcc9f4b6d2da7558af5a2c708ff3baf767b39e847e3d35d4fd2fa0f640bedbfb09a445036cafbe2f04357a88dada405cfc2ded76972`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-server-linux-arm.tar.gz) | `fcbf8d9004f1cd244a82b685abaf81f9638c3cc1373d78e705050042cfa6a004f8eed92f4721539dcd169c55b662d10416af19cff7537a8dfef802dc41b4088b`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-server-linux-arm64.tar.gz) | `e21f54a35ff29e919e98fe81758f654ea735983d5a9d08dab9484598b116843830a86ceb5cf0a23d27b7f9aba77e5f0aa107c171a0837ba781d508ebbea76f55`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-server-linux-ppc64le.tar.gz) | `c7014c782683f8f612c7805654b632aab4c5dce895ee8f9ef24360616e24240ce59ddf3cf27c3170df5450d8fe14fbca3fb7cddfc9b74ae37943081f0fa4b6b3`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-server-linux-s390x.tar.gz) | `3ac2d6b273e5b650f63260aae164fc6781ad5760f63cca911f5db9652c4bf32e7e7b25728987befc6dfda89c5c56969681b75f12b17141527d4e1d12f3d41f3c`
 
 ### Node Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-amd64.tar.gz) | `f714f80feecb0756410f27efb4cf4a1b5232be0444fbecec9f25cb85a7ccccdcb5be588cddee935294f460046c0726b90f7acc52b20eeb0c46a7200cf10e351a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-arm.tar.gz) | `806000b5f6d723e24e2f12d19d1b9b3d16c74b855f51c7063284adf1fcc57a96554a3384f8c05a952c6f6b929a05ed12b69151b1e620c958f74c9600f3db0fcb`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-arm64.tar.gz) | `c207e9ab60587d135897b5366af79efe9d2833f33401e469b2a4e0d74ecd2cf6bb7d1e5bc18d80737acbe37555707f63dd581ccc6304091c1d98dafdd30130b7`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-ppc64le.tar.gz) | `a542ed5ed02722af44ef12d1602f363fcd4e93cf704da2ea5d99446382485679626835a40ae2ba47a4a26dce87089516faa54479a1cfdee2229e8e35aa1c17d7`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-s390x.tar.gz) | `651e0db73ee67869b2ae93cb0574168e4bd7918290fc5662a6b12b708fa628282e3f64be2b816690f5a2d0f4ff8078570f8187e65dee499a876580a7a63d1d19`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-windows-amd64.tar.gz) | `d726ed904f9f7fe7e8831df621dc9094b87e767410a129aa675ee08417b662ddec314e165f29ecb777110fbfec0dc2893962b6c71950897ba72baaa7eb6371ed`
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-node-linux-amd64.tar.gz) | `d5e21432a4ab019f00cd1a52bbbdb00feb3db2ce96b41a58b1ee27d8847c485f5d0efe13036fd1155469d6d15f5873a5a892ecc0198f1bae1bf5b586a0129e75`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-node-linux-arm.tar.gz) | `bd57adf060813b06be2b33439d6f60d13630c0251ef96ba473274073200ea118f5622ec31ed714cc57bd9da410655e958a7700a5742ae7e4b6406ab12fbf21f3`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-node-linux-arm64.tar.gz) | `3ee70abc0a5cbf1ef5dde0d27055f4d17084585c36a2cf41e3fd925d206df0b583f50dc1c118472f198788b65b2c447aa40ad41646b88791659d2dfb69b3890b`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-node-linux-ppc64le.tar.gz) | `0f4368f229c082b2a75e7089a259e487d60b20bc8edf650dd7ca0fe23c51632397c2ef24c9c6cef078c95fce70d9229a5b4ff682c34f65a44bc4be3329c8ccde`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-node-linux-s390x.tar.gz) | `8f0b6839fc0ad51300221fa7f32134f8c687073715cc0839f7aacb21a075c66dab113369707d03e9e0e53be62ca2e1bdf04d4b26cff805ae9c7a5a4b864e3eae`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0/kubernetes-node-windows-amd64.tar.gz) | `587651158c9999e64e06186ef2e65fe14d46ffdae28c5d8ee6261193bfe4967717f997ebe13857fa1893bbf492e1cc1f816bce86a94c6df9b7a0264848391397`
 
-## Changelog since v1.17.0
-
-A complete changelog for the release notes is now hosted in a customizable
-format at [https://relnotes.k8s.io](https://relnotes.k8s.io/?releaseVersions=1.18.0). Check it out and please give us your
-feedback!
+## Changelog since v1.18.0
 
 ## What’s New (Major Themes)
 
-### Kubernetes Topology Manager Moves to Beta - Align Up!
+### Deprecation warnings
 
-A beta feature of Kubernetes in release 1.18, the [Topology Manager feature](https://github.com/nolancon/website/blob/f4200307260ea3234540ef13ed80de325e1a7267/content/en/docs/tasks/administer-cluster/topology-manager.md) enables NUMA alignment of CPU and devices (such as SR-IOV VFs) that will allow your workload to run in an environment optimized for low-latency. Prior to the introduction of the Topology Manager, the CPU and Device Manager would make resource allocation decisions independent of each other. This could result in undesirable allocations on multi-socket systems, causing degraded performance on latency critical applications.
+SIG API Machinery implemented [warnings when using deprecated APIs](https://kubernetes.io/docs/reference/using-api/deprecation-policy/#rest-resources-aka-api-objects)
+that are visible to `kubectl` users and API consumers, and metrics visible to cluster administrators.
+Requests to a deprecated API are returned with a warning containing a target removal release and any replacement API.
+Warnings can also be returned by [admission webhooks](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#admissionreview-response-warning),
+and specified for [deprecated versions of custom resources](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/#version-deprecation).
 
-### Serverside Apply - Beta 2
+### Avoiding permanent beta
 
-Server-side Apply was promoted to Beta in 1.16, but is now introducing a second Beta in 1.18. This new version will track and manage changes to fields of all new Kubernetes objects, allowing you to know what changed your resources and when.
+From Kubernetes 1.20 onwards, SIG Architecture will implement a new policy to transition all REST APIs out of beta within nine months. The idea behind the new policy is to avoid features staying in beta for a long time. Once a new API enters beta, it will have nine months to either:
 
-### Extending Ingress with and replacing a deprecated annotation with IngressClass
+ - reach GA, and deprecate the beta, or
+ - have a new beta version _(and deprecate the previous beta)_.
 
-In Kubernetes 1.18, there are two significant additions to Ingress: A new `pathType` field and a new `IngressClass` resource. The `pathType` field allows specifying how paths should be matched. In addition to the default `ImplementationSpecific` type, there are new `Exact` and `Prefix` path types.
+If a REST API reaches the end of that nine-month countdown, then the next Kubernetes release will deprecate that API version. More information can be found on [the Kubernetes Blog](https://kubernetes.io/blog/2020/08/21/moving-forward-from-beta/).
 
-The `IngressClass` resource is used to describe a type of Ingress within a Kubernetes cluster. Ingresses can specify the class they are associated with by using a new `ingressClassName` field on Ingresses. This new resource and field replace the deprecated `kubernetes.io/ingress.class` annotation.
+### Expanded CLI support for debugging workloads and nodes
 
-### SIG CLI introduces kubectl debug
+SIG CLI expanded on debugging with `kubectl` to support two new debugging workflows: debugging workloads by creating a copy, and debugging nodes by creating a container in host namespaces. These can be convenient to:
+ - Insert a debug container in clusters that don’t have ephemeral containers enabled 
+ - Modify a crashing container for easier debugging by changing its image, for example to busybox, or its command, for example, to `sleep 1d` so you have time to `kubectl exec`.
+ - Inspect configuration files on a node's host filesystem
 
-SIG CLI was debating the need for a debug utility for quite some time already. With the development of [ephemeral containers](/docs/concepts/workloads/pods/ephemeral-containers/), it became more obvious how we can support developers with tooling built on top of `kubectl exec`. The addition of the `kubectl debug` [command](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/20190805-kubectl-debug.md) (it is alpha but your feedback is more than welcome), allows developers to easily debug their Pods inside the cluster. We think this addition is invaluable.  This command allows one to create a temporary container which runs next to the Pod one is trying to examine, but also attaches to the console for interactive troubleshooting.
+Since these new workflows don’t require any new cluster features, they’re available for experimentation with your existing clusters via `kubectl alpha debug`. We’d love to hear your feedback on debugging with `kubectl`. Reach us by opening an issue, visiting [#sig-cli](https://kubernetes.slack.com/messages/sig-cli) or commenting on enhancement [#1441](https://features.k8s.io/1441).
 
-### Introducing Windows CSI support alpha for Kubernetes
+### Structured logging
 
-With the release of Kubernetes 1.18, an alpha version of CSI Proxy for Windows is getting released. CSI proxy enables non-privileged (pre-approved) containers to perform privileged storage operations on Windows. CSI drivers can now be supported in Windows by leveraging CSI proxy.
-SIG Storage made a lot of progress in the 1.18 release.
-In particular, the following storage features are moving to GA in Kubernetes 1.18:
-- Raw Block Support: Allow volumes to be surfaced as block devices inside containers instead of just mounted filesystems.
-- Volume Cloning: Duplicate a PersistentVolumeClaim and underlying storage volume using the Kubernetes API via CSI.
-- CSIDriver Kubernetes API Object: Simplifies CSI driver discovery and allows CSI Drivers to customize Kubernetes behavior.
+SIG Instrumentation standardized the structure of log messages and references to Kubernetes objects. Structured logging makes parsing, processing, storing, querying and analyzing logs easier. New methods in the klog library enforce log message structure.
 
-SIG Storage is also introducing the following new storage features as alpha in Kubernetes 1.18:
-- Windows CSI Support: Enabling containerized CSI node plugins in Windows via new [CSIProxy](https://github.com/kubernetes-csi/csi-proxy)
-- Recursive Volume Ownership OnRootMismatch Option: Add a new “OnRootMismatch” policy that can help shorten the mount time for volumes that require ownership change and have many directories and files.
+### EndpointSlices are now enabled by default
 
-### Other notable announcements
+EndpointSlices are an exciting new API that provides a scalable and extensible alternative to the Endpoints API. EndpointSlices track IP addresses, ports, readiness, and topology information for Pods backing a Service.
 
-SIG Network is moving IPv6 to Beta in Kubernetes 1.18, after incrementing significantly the test coverage with new CI jobs.
+In Kubernetes 1.19 this feature will be enabled by default with kube-proxy reading from EndpointSlices instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It will also enable significant new features in future Kubernetes releases like Topology Aware Routing.
 
-NodeLocal DNSCache is an add-on that runs a dnsCache pod as a daemonset to improve clusterDNS performance and reliability. The feature has been in Alpha since 1.13 release. The SIG Network is announcing the GA graduation of Node Local DNSCache [#1351](https://github.com/kubernetes/enhancements/pull/1351)
+### Ingress graduates to General Availability
+
+SIG Network has graduated the widely used [Ingress API](https://kubernetes.io/docs/concepts/services-networking/ingress/) to general availability in Kubernetes 1.19. This change recognises years of hard work by Kubernetes contributors, and paves the way for further work on future networking APIs in Kubernetes.
+
+### seccomp graduates to General Availability
+
+The seccomp (secure computing mode) support for Kubernetes has graduated to General Availability (GA). This feature can be used to increase the workload security by restricting the system calls for a Pod (applies to all containers) or single containers.
+
+Technically this means that a first class `seccompProfile` field has been added to the Pod and Container `securityContext` objects:
+
+```yaml
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault|Localhost|Unconfined # choose one of the three
+    localhostProfile: my-profiles/profile-allow.json # only necessary if type == Localhost
+```
+
+The support for `seccomp.security.alpha.kubernetes.io/pod` and `container.seccomp.security.alpha.kubernetes.io/...` annotations are now deprecated, and will be removed in Kubernetes v1.22.0. Right now, an automatic version skew handling will convert the new field into the annotations and vice versa. This means there is no action required for converting existing workloads in a cluster.
+
+You can find more information about how to restrict container system calls with seccomp in the new [documentation page on Kubernetes.io][seccomp-docs]
+
+[seccomp-docs]: https://kubernetes.io/docs/tutorials/clusters/seccomp/
+
+
+### Production images moved to community control
+
+As of Kuberenetes v1.19, Kubernetes container images are stored on a community-controlled storage bucket, 
+located at `{asia,eu,us}.gcr.io/k8s-artifacts-prod`. The `k8s.gcr.io` vanity domain has been updated 
+to this new bucket. This brings production artifacts under community control.
+
+### KubeSchedulerConfiguration graduates to Beta
+
+SIG Scheduling graduates `KubeSchedulerConfiguration` to Beta. The [KubeSchedulerConfiguration](https://kubernetes.io/docs/reference/scheduling/config) feature allows you to tune the algorithms and other settings of the kube-scheduler. You can easily enable or disable specific functionality (contained in plugins) in selected scheduling phases without having to rewrite the rest of the configuration. Furthermore, a single kube-scheduler instance can serve different configurations, called profiles. Pods can select the profile they want to be scheduled under via the `.spec.schedulerName` field.
+
+### CSI Migration - AzureDisk and vSphere (beta)
+ 
+In-tree volume plugins and all cloud provider dependencies are being moved out of the Kubernetes core. The CSI migration feature allows existing volumes using the legacy APIs to continue to function even when the code has been removed, by routing all the volume operations to the respective CSI driver. The AzureDisk and vSphere implementations of this feature have been promoted to beta.
+
+### Storage capacity tracking
+
+Traditionally, the Kubernetes scheduler was based on the assumption that additional persistent storage is available everywhere in the cluster and has infinite capacity. Topology constraints addressed the first point, but up to now pod scheduling was still done without considering that the remaining storage capacity may not be enough to start a new pod. [Storage capacity tracking](https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1472-storage-capacity-tracking), a new alpha feature, addresses that by adding an API for a CSI driver to report storage capacity and uses that information in the Kubernetes scheduler when choosing a node for a pod. This feature serves as a stepping stone for supporting dynamic provisioning for local volumes and other volume types that are more capacity constrained.
+
+### CSI Volume health monitoring
+ 
+The alpha version of CSI health monitoring is being released with Kubernetes 1.19. This feature enables CSI Drivers to share abnormal volume conditions from the underlying storage systems with Kubernetes so that they can be reported as events on PVCs or Pods. This feature serves as a stepping stone towards programmatic detection and resolution of individual volume health issues by Kubernetes.
+
+### General ephemeral volumes
+
+Kubernetes provides volume plugins whose lifecycle is tied to a pod and can be used as scratch space (e.g. the builtin “empty dir” volume type) or to load some data in to a pod (e.g. the builtin ConfigMap and Secret volume types or “CSI inline volumes”). The new [generic ephemeral volumes](https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1698-generic-ephemeral-volumes) alpha feature allows any existing storage driver that supports dynamic provisioning to be used as an ephemeral volume with the volume’s lifecycle bound to the Pod.
+ - It can be used to provide scratch storage that is different from the root disk, for example persistent memory, or a separate local disk on that node.
+ - All StorageClass parameters for volume provisioning are supported.
+ - All features supported with PersistentVolumeClaims are supported, such as storage capacity tracking, snapshots and restore, and volume resizing.
+
+### Immutable Secrets and ConfigMaps (beta)
+
+Secret and ConfigMap volumes can be marked as immutable, which significantly reduces load on the API server if there are many Secret and ConfigMap volumes in the cluster.
+See [ConfigMap](https://kubernetes.io/docs/concepts/configuration/configmap/) and [Secret](https://kubernetes.io/docs/concepts/configuration/secret/) for more information.
+
+### CSI Proxy for Windows
+
+The CSI Proxy for Windows is being promoted to beta along with the 1.19 release. This CSI Proxy enables CSI Drivers to run on Windows by allowing containers in Windows to perform privileged storage operations. At beta, the CSI Proxy for Windows supports storage drivers using direct attached disks and SMB.
+
+### Dashboard v2
+
+SIG UI has released v2 of the Kubernetes Dashboard add-on. You can find the most recent release in the [kubernetes/dashboard](https://github.com/kubernetes/dashboard/releases) repository. Kubernetes Dashboard now includes CRD support, new translations, and an updated version of AngularJS.
+
+### Windows containerd support graduates to beta
+
+Initially introduced in Kubernetes 1.18, Windows containerd support goes to Beta on this release. This includes the added support for Windows Server version 2004 (complete version compatibility can be found in the [documentation for Windows](https://kubernetes.io/docs/setup/production-environment/windows/intro-windows-in-kubernetes/#cri-containerd)).
+
+SIG Windows is also including several addition to this release:
+ - Direct Server Return (DSR) mode support, allowing large numbers of services to scale up efficiently
+ - Windows containers  now honor CPU limits
+ - Performance improvements for collections of metrics and summary
+
+### Increase the Kubernetes support window to one year
+
+As of Kubernetes 1.19, bugfix support via patch releases for a Kubernetes minor release has increased from 9 months to 1 year.
+
+A survey conducted in early 2019 by the working group (WG) Long Term Support (LTS) showed that a significant subset of Kubernetes end-users fail to upgrade within the previous 9-month support period. 
+A yearly support period provides the cushion end-users appear to desire, and is more in harmony with familiar annual planning cycles.
 
 ## Known Issues
 
-No Known Issues Reported
+The new storage capacity tracking alpha feature is known to be affected by a limitation of the WaitForFirstConsumer volume binding mode: [#94217](https://github.com/kubernetes/kubernetes/issues/94217)
 
-## Urgent Upgrade Notes
+## Urgent Upgrade Notes 
 
 ### (No, really, you MUST read this before you upgrade)
 
-#### kube-apiserver:
-- in an `--encryption-provider-config` config file, an explicit `cacheSize: 0` parameter previously silently defaulted to caching 1000 keys. In Kubernetes 1.18, this now returns a config validation error. To disable caching, you can specify a negative cacheSize value in Kubernetes 1.18+.
-- consumers of the 'certificatesigningrequests/approval' API must now have permission to 'approve' CSRs for the specific signer requested by the CSR. More information on the new signerName field and the required authorization can be found at https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests#authorization ([#88246](https://github.com/kubernetes/kubernetes/pull/88246), [@munnerz](https://github.com/munnerz)) [SIG API Machinery, Apps, Auth, CLI, Node and Testing]
-- The following features are unconditionally enabled and the corresponding `--feature-gates` flags have been removed: `PodPriority`, `TaintNodesByCondition`, `ResourceQuotaScopeSelectors` and `ScheduleDaemonSetPods` ([#86210](https://github.com/kubernetes/kubernetes/pull/86210), [@draveness](https://github.com/draveness)) [SIG Apps and Scheduling]
-
-#### kubelet:
-- `--enable-cadvisor-endpoints` is now disabled by default. If you need access to the cAdvisor v1 Json API please enable it explicitly in the kubelet command line. Please note that this flag was deprecated in 1.15 and will be removed in 1.19. ([#87440](https://github.com/kubernetes/kubernetes/pull/87440), [@dims](https://github.com/dims)) [SIG Instrumentation, Node and Testing]
-- Promote CSIMigrationOpenStack to Beta (off by default since it requires installation of the OpenStack Cinder CSI Driver. The in-tree AWS OpenStack Cinder driver "kubernetes.io/cinder" was deprecated in 1.16 and will be removed in 1.20. Users should enable CSIMigration + CSIMigrationOpenStack features and install the OpenStack Cinder CSI Driver (https://github.com/kubernetes-sigs/cloud-provider-openstack) to avoid disruption to existing Pod and PVC objects at that time. Users should start using the OpenStack Cinder CSI Driver directly for any new volumes. ([#85637](https://github.com/kubernetes/kubernetes/pull/85637), [@dims](https://github.com/dims)) [SIG Cloud Provider]
-
-#### kubectl:
-- `kubectl` and k8s.io/client-go no longer default to a server address of `http://localhost:8080`. If you own one of these legacy clusters, you are *strongly* encouraged to secure your server. If you cannot secure your server, you can set the `$KUBERNETES_MASTER` environment variable to `http://localhost:8080` to continue defaulting the server address. `kubectl` users can also set the server address using the `--server` flag, or in a kubeconfig file specified via `--kubeconfig` or `$KUBECONFIG`. ([#86173](https://github.com/kubernetes/kubernetes/pull/86173), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI and Testing]
-- `kubectl run` has removed the previously deprecated generators, along with flags unrelated to creating pods. `kubectl run` now only creates pods. See specific `kubectl create` subcommands to create objects other than pods.
-([#87077](https://github.com/kubernetes/kubernetes/pull/87077), [@soltysh](https://github.com/soltysh)) [SIG Architecture, CLI and Testing]
-- The deprecated command `kubectl rolling-update` has been removed ([#88057](https://github.com/kubernetes/kubernetes/pull/88057), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG Architecture, CLI and Testing]
-
-#### client-go:
-- Signatures on methods in generated clientsets, dynamic, metadata, and scale clients have been modified to accept `context.Context` as a first argument. Signatures of Create, Update, and Patch methods have been updated to accept CreateOptions, UpdateOptions and PatchOptions respectively. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. Generated clientsets with the previous interface have been added in new "deprecated" packages to allow incremental migration to the new APIs. The deprecated packages will be removed in the 1.21 release. A tool is available at http://sigs.k8s.io/clientgofix to rewrite method invocations to the new signatures.
-
-- The following deprecated metrics are removed, please convert to the corresponding metrics:
-  - The following replacement metrics are available from v1.14.0:
-      - `rest_client_request_latency_seconds` -> `rest_client_request_duration_seconds`
-      - `scheduler_scheduling_latency_seconds` -> `scheduler_scheduling_duration_seconds `
-      - `docker_operations` -> `docker_operations_total`
-      - `docker_operations_latency_microseconds` -> `docker_operations_duration_seconds`
-      - `docker_operations_errors` -> `docker_operations_errors_total`
-      - `docker_operations_timeout` -> `docker_operations_timeout_total`
-      - `network_plugin_operations_latency_microseconds` -> `network_plugin_operations_duration_seconds`
-      - `kubelet_pod_worker_latency_microseconds` -> `kubelet_pod_worker_duration_seconds`
-      - `kubelet_pod_start_latency_microseconds` -> `kubelet_pod_start_duration_seconds`
-      - `kubelet_cgroup_manager_latency_microseconds` -> `kubelet_cgroup_manager_duration_seconds`
-      - `kubelet_pod_worker_start_latency_microseconds` -> `kubelet_pod_worker_start_duration_seconds`
-      - `kubelet_pleg_relist_latency_microseconds` -> `kubelet_pleg_relist_duration_seconds`
-      - `kubelet_pleg_relist_interval_microseconds` -> `kubelet_pleg_relist_interval_seconds`
-      - `kubelet_eviction_stats_age_microseconds` -> `kubelet_eviction_stats_age_seconds`
-      - `kubelet_runtime_operations` -> `kubelet_runtime_operations_total`
-      - `kubelet_runtime_operations_latency_microseconds` -> `kubelet_runtime_operations_duration_seconds`
-      - `kubelet_runtime_operations_errors` -> `kubelet_runtime_operations_errors_total`
-      - `kubelet_device_plugin_registration_count` -> `kubelet_device_plugin_registration_total`
-      - `kubelet_device_plugin_alloc_latency_microseconds` -> `kubelet_device_plugin_alloc_duration_seconds`
-      - `scheduler_e2e_scheduling_latency_microseconds` -> `scheduler_e2e_scheduling_duration_seconds`
-      - `scheduler_scheduling_algorithm_latency_microseconds` -> `scheduler_scheduling_algorithm_duration_seconds`
-      - `scheduler_scheduling_algorithm_predicate_evaluation` -> `scheduler_scheduling_algorithm_predicate_evaluation_seconds`
-      - `scheduler_scheduling_algorithm_priority_evaluation` -> `scheduler_scheduling_algorithm_priority_evaluation_seconds`
-      - `scheduler_scheduling_algorithm_preemption_evaluation` -> `scheduler_scheduling_algorithm_preemption_evaluation_seconds`
-      - `scheduler_binding_latency_microseconds` -> `scheduler_binding_duration_seconds`
-      - `kubeproxy_sync_proxy_rules_latency_microseconds` -> `kubeproxy_sync_proxy_rules_duration_seconds`
-      - `apiserver_request_latencies` -> `apiserver_request_duration_seconds`
-      - `apiserver_dropped_requests` -> `apiserver_dropped_requests_total`
-      - `etcd_request_latencies_summary` -> `etcd_request_duration_seconds`
-      - `apiserver_storage_transformation_latencies_microseconds ` -> `apiserver_storage_transformation_duration_seconds`
-      - `apiserver_storage_data_key_generation_latencies_microseconds` -> `apiserver_storage_data_key_generation_duration_seconds`
-      - `apiserver_request_count` -> `apiserver_request_total`
-      - `apiserver_request_latencies_summary`
-  - The following replacement metrics are available from v1.15.0:
-      - `apiserver_storage_transformation_failures_total` -> `apiserver_storage_transformation_operations_total` ([#76496](https://github.com/kubernetes/kubernetes/pull/76496), [@danielqsj](https://github.com/danielqsj)) [SIG API Machinery, Cluster Lifecycle, Instrumentation, Network, Node and Scheduling]
-
+- ACTION REQUIRED: Switch core master base images (kube-controller-manager) from debian to distroless. If you need Flex Volumes support using scripts, please build your own image with required packages (like bash) ([#91329](https://github.com/kubernetes/kubernetes/pull/91329), [@dims](https://github.com/dims)) [SIG Cloud Provider, Release, Storage and Testing]
+- ACTION REQUIRED: Support for basic authentication via the --basic-auth-file flag has been removed.  Users should migrate to --token-auth-file for similar functionality. ([#89069](https://github.com/kubernetes/kubernetes/pull/89069), [@enj](https://github.com/enj)) [SIG API Machinery]
+ - Azure blob disk feature(`kind`: `Shared`, `Dedicated`) has been deprecated, you should use `kind`: `Managed` in `kubernetes.io/azure-disk` storage class. ([#92905](https://github.com/kubernetes/kubernetes/pull/92905), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+ - CVE-2020-8559 (Medium): Privilege escalation from compromised node to cluster. See https://github.com/kubernetes/kubernetes/issues/92914 for more details.
+  The API Server will no longer proxy non-101 responses for upgrade requests. This could break proxied backends (such as an extension API server) that respond to upgrade requests with a non-101 response code. ([#92941](https://github.com/kubernetes/kubernetes/pull/92941), [@tallclair](https://github.com/tallclair)) [SIG API Machinery]
+ - Kubeadm does not set the deprecated '--cgroup-driver' flag in /var/lib/kubelet/kubeadm-flags.env, it will be set in the kubelet config.yaml. If you have this flag in /var/lib/kubelet/kubeadm-flags.env or /etc/default/kubelet (/etc/sysconfig/kubelet for RPMs) please remove it and set the value using KubeletConfiguration ([#90513](https://github.com/kubernetes/kubernetes/pull/90513), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+ - Kubeadm now respects user specified etcd versions in the ClusterConfiguration and properly uses them. If users do not want to stick to the version specified in the ClusterConfiguration, they should edit the kubeadm-config config map and delete it. ([#89588](https://github.com/kubernetes/kubernetes/pull/89588), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+ - Kubeadm respects resolvConf value set by user even if systemd-resolved service is active. kubeadm no longer sets the flag in '--resolv-conf' in /var/lib/kubelet/kubeadm-flags.env. If you have this flag in /var/lib/kubelet/kubeadm-flags.env or /etc/default/kubelet (/etc/sysconfig/kubelet for RPMs) please remove it and set the value using KubeletConfiguration ([#90394](https://github.com/kubernetes/kubernetes/pull/90394), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+ - Kubeadm: Move the "kubeadm init" phase "kubelet-start" later in the init workflow, after the "kubeconfig" phase. This makes kubeadm start the kubelet only after the KubeletConfiguration component config file (/var/lib/kubelet/config.yaml) is generated and solves a problem where init systems like OpenRC cannot crashloop the kubelet service. ([#90892](https://github.com/kubernetes/kubernetes/pull/90892), [@xphoniex](https://github.com/xphoniex)) [SIG Cluster Lifecycle]
+ - The 'kubeadm config upload' command is finally removed after a full GA deprecation cycle. If you still use it, please, use 'kubeadm init phase upload-config' instead ([#92610](https://github.com/kubernetes/kubernetes/pull/92610), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+ - Upgrade kubescheduler.config.k8s.io/v1alpha2 to kubescheduler.config.k8s.io/v1beta1
+  
+   - `.bindTimeoutSeconds` was moved as part of plugin args for `VolumeBinding`,
+     which can be configured separately per [profile](&#35;profiles).
+   - `.extenders` are updated to satisfy API standards. In particular:
+     - `.extenders` decoding is case sensitive. All fields are affected.
+     - `.extenders[*].httpTimeout` is of type `metav1.Duration`.
+     - `.extenders[*].enableHttps` is renamed to `.extenders[*].enableHTTPS`.
+   - `RequestedToCapacityRatio` args decoding is case sensitive. All fields are affected.
+   - `DefaultPodTopologySpread` [plugin](&#35;scheduling-plugins) is renamed to `SelectorSpread`.
+   - `Unreserve` extension point is removed from Profile definition. All `Reserve`
+     plugins implement an `Unreserve` call.
+   - `.disablePreemption` was removed. Users can disable preemption by disabling the
+     "DefaultPreemption" PostFilter plugin. ([#91420](https://github.com/kubernetes/kubernetes/pull/91420), [@pancernik](https://github.com/pancernik)) [SIG Scheduling]
+ 
 ## Changes by Kind
 
 ### Deprecation
 
-#### kube-apiserver:
-- the following deprecated APIs can no longer be served:
-  - All resources under `apps/v1beta1` and `apps/v1beta2` - use `apps/v1` instead
-  - `daemonsets`, `deployments`, `replicasets` resources under `extensions/v1beta1` - use `apps/v1` instead
-  - `networkpolicies` resources under `extensions/v1beta1` - use `networking.k8s.io/v1` instead
-  - `podsecuritypolicies` resources under `extensions/v1beta1` - use `policy/v1beta1` instead ([#85903](https://github.com/kubernetes/kubernetes/pull/85903), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps, Cluster Lifecycle, Instrumentation and Testing]
+- Added support for vSphere in-tree volumes migration to vSphere CSI driver. The in-tree vSphere Volume plugin will be deprecated and removed in a future release.
+  
+  Users that self-deploy Kubernetes on vSphere should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to avoid disruption to existing Pod and PVC objects at that time. Users should start using the vSphere CSI driver directly for any new volumes.
+  
+  The CSI Migration feature for vSphere Volume also requires minimum vSphere vCenter/ESXi Version to be 7.0u1 and minimum HW Version to be VM version 15.
+  
+  vSAN raw policy parameter is deprecated for the in-tree vSphere Volume plugin and will be removed in a future release. ([#90911](https://github.com/kubernetes/kubernetes/pull/90911), [@divyenpatel](https://github.com/divyenpatel)) [SIG API Machinery, Node and Storage]
+- Apiextensions.k8s.io/v1beta1 is deprecated in favor of apiextensions.k8s.io/v1 ([#90673](https://github.com/kubernetes/kubernetes/pull/90673), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
+- Apiregistration.k8s.io/v1beta1 is deprecated in favor of apiregistration.k8s.io/v1 ([#90672](https://github.com/kubernetes/kubernetes/pull/90672), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
+- Authentication.k8s.io/v1beta1 and authorization.k8s.io/v1beta1 are deprecated in 1.19 in favor of v1 levels and will be removed in 1.22 ([#90458](https://github.com/kubernetes/kubernetes/pull/90458), [@deads2k](https://github.com/deads2k)) [SIG API Machinery and Auth]
+- Autoscaling/v2beta1 is deprecated in favor of autoscaling/v2beta2 ([#90463](https://github.com/kubernetes/kubernetes/pull/90463), [@deads2k](https://github.com/deads2k)) [SIG Autoscaling]
+- Coordination.k8s.io/v1beta1 is deprecated in 1.19, targeted for removal in 1.22, use v1 instead. ([#90559](https://github.com/kubernetes/kubernetes/pull/90559), [@deads2k](https://github.com/deads2k)) [SIG Scalability]
+- Ensure that volume capability and staging target fields are present in nodeExpansion CSI calls
 
-#### kube-controller-manager:
-- Azure service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset has been deprecated. Its support would be removed in a future release. ([#88462](https://github.com/kubernetes/kubernetes/pull/88462), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-
-#### kubelet:
-- The StreamingProxyRedirects feature and `--redirect-container-streaming` flag are deprecated, and will be removed in a future release. The default behavior (proxy streaming requests through the kubelet) will be the only supported option. If you are setting `--redirect-container-streaming=true`, then you must migrate off this configuration. The flag will no longer be able to be enabled starting in v1.20. If you are not setting the flag, no action is necessary. ([#88290](https://github.com/kubernetes/kubernetes/pull/88290), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Node]
-- resource metrics endpoint `/metrics/resource/v1alpha1` as well as all metrics under this endpoint have been deprecated. Please convert to the following metrics emitted by endpoint `/metrics/resource`:
-      - scrape_error --> scrape_error
-      - node_cpu_usage_seconds_total --> node_cpu_usage_seconds
-      - node_memory_working_set_bytes --> node_memory_working_set_bytes
-      - container_cpu_usage_seconds_total --> container_cpu_usage_seconds
-      - container_memory_working_set_bytes --> container_memory_working_set_bytes
-      - scrape_error --> scrape_error
-      ([#86282](https://github.com/kubernetes/kubernetes/pull/86282), [@RainbowMango](https://github.com/RainbowMango)) [SIG Node]
-- In a future release, kubelet will no longer create the CSI NodePublishVolume target directory, in accordance with the CSI specification. CSI drivers may need to be updated accordingly to properly create and process the target path. ([#75535](https://github.com/kubernetes/kubernetes/issues/75535)) [SIG Storage]
-
-#### kube-proxy:
-- `--healthz-port` and `--metrics-port` flags are deprecated, please use `--healthz-bind-address` and `--metrics-bind-address` instead ([#88512](https://github.com/kubernetes/kubernetes/pull/88512), [@SataQiu](https://github.com/SataQiu)) [SIG Network]
-- a new `EndpointSliceProxying` feature gate has been added to control the use of EndpointSlices in kube-proxy. The EndpointSlice feature gate that used to control this behavior no longer affects kube-proxy. This feature has been disabled by default. ([#86137](https://github.com/kubernetes/kubernetes/pull/86137), [@robscott](https://github.com/robscott))
-
-#### kubeadm:
-- command line option "kubelet-version" for `kubeadm upgrade node` has been deprecated and will be removed in a future release. ([#87942](https://github.com/kubernetes/kubernetes/pull/87942), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- deprecate the usage of the experimental flag '--use-api' under the 'kubeadm alpha certs renew' command. ([#88827](https://github.com/kubernetes/kubernetes/pull/88827), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- kube-dns is deprecated and will not be supported in a future version ([#86574](https://github.com/kubernetes/kubernetes/pull/86574), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- the `ClusterStatus` struct present in the kubeadm-config ConfigMap is deprecated and will be removed in a future version. It is going to be maintained by kubeadm until it gets removed. The same information can be found on `etcd` and `kube-apiserver` pod annotations, `kubeadm.kubernetes.io/etcd.advertise-client-urls` and `kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint` respectively. ([#87656](https://github.com/kubernetes/kubernetes/pull/87656), [@ereslibre](https://github.com/ereslibre)) [SIG Cluster Lifecycle]
-
-#### kubectl:
-- the boolean and unset values for the --dry-run flag are deprecated and a value --dry-run=server|client|none will be required in a future version. ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-- `kubectl apply --server-dry-run` is deprecated and replaced with --dry-run=server ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-
-#### add-ons:
-- Remove cluster-monitoring addon ([#85512](https://github.com/kubernetes/kubernetes/pull/85512), [@serathius](https://github.com/serathius)) [SIG Cluster Lifecycle, Instrumentation, Scalability and Testing]
-
-#### kube-scheduler:
-- The `scheduling_duration_seconds` summary metric is deprecated ([#86586](https://github.com/kubernetes/kubernetes/pull/86586), [@xiaoanyunfei](https://github.com/xiaoanyunfei)) [SIG Scheduling]
-- The `scheduling_algorithm_predicate_evaluation_seconds` and
-  `scheduling_algorithm_priority_evaluation_seconds` metrics are deprecated, replaced by `framework_extension_point_duration_seconds[extension_point="Filter"]` and `framework_extension_point_duration_seconds[extension_point="Score"]`. ([#86584](https://github.com/kubernetes/kubernetes/pull/86584), [@xiaoanyunfei](https://github.com/xiaoanyunfei)) [SIG Scheduling]
-- `AlwaysCheckAllPredicates` is deprecated in scheduler Policy API. ([#86369](https://github.com/kubernetes/kubernetes/pull/86369), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-
-#### Other deprecations:
-- The k8s.io/node-api component is no longer updated. Instead, use the RuntimeClass types located within k8s.io/api, and the generated clients located within k8s.io/client-go ([#87503](https://github.com/kubernetes/kubernetes/pull/87503), [@liggitt](https://github.com/liggitt)) [SIG Node and Release]
-- Removed the 'client' label from apiserver_request_total. ([#87669](https://github.com/kubernetes/kubernetes/pull/87669), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery and Instrumentation]
+  Behaviour of NodeExpandVolume being called between NodeStage and NodePublish is deprecated for CSI volumes. CSI drivers should support calling NodeExpandVolume after NodePublish if they have node EXPAND_VOLUME capability ([#86968](https://github.com/kubernetes/kubernetes/pull/86968), [@gnufied](https://github.com/gnufied)) [SIG Storage]
+- Feat: azure disk migration go beta in 1.19. Feature gates CSIMigration to Beta (on by default) and CSIMigrationAzureDisk to Beta (off by default since it requires installation of the AzureDisk CSI Driver)
+  The in-tree AzureDisk plugin "kubernetes.io/azure-disk" is now deprecated and will be removed in 1.23. Users should enable CSIMigration + CSIMigrationAzureDisk features and install the AzureDisk CSI Driver (https://github.com/kubernetes-sigs/azuredisk-csi-driver) to avoid disruption to existing Pod and PVC objects at that time.
+  Users should start using the AzureDisk CSI Driver directly for any new volumes. ([#90896](https://github.com/kubernetes/kubernetes/pull/90896), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Kube-apiserver: the componentstatus API is deprecated. This API provided status of etcd, kube-scheduler, and kube-controller-manager components, but only worked when those components were local to the API server, and when kube-scheduler and kube-controller-manager exposed unsecured health endpoints. Instead of this API, etcd health is included in the kube-apiserver health check and kube-scheduler/kube-controller-manager health checks can be made directly against those components' health endpoints. ([#93570](https://github.com/kubernetes/kubernetes/pull/93570), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Cluster Lifecycle]
+- Kubeadm: `kubeadm config view` command has been deprecated and will be removed in a feature release, please use `kubectl get cm -o yaml -n kube-system kubeadm-config` to get the kubeadm config directly ([#92740](https://github.com/kubernetes/kubernetes/pull/92740), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubeadm: deprecate the "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. ([#92881](https://github.com/kubernetes/kubernetes/pull/92881), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: deprecate the feature `--experimental-kustomize` in favor of `--experimental-patches`. The supported patch formats are the same as "kubectl patch". They are read as files from a directory and can be applied to kubeadm components during init/join/upgrade. Only patching of static Pods is supported for the time being. ([#92017](https://github.com/kubernetes/kubernetes/pull/92017), [@neolit123](https://github.com/neolit123))
+- Kubeadm: remove the deprecated "--use-api" flag for "kubeadm alpha certs renew" ([#90143](https://github.com/kubernetes/kubernetes/pull/90143), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubernetes no longer supports building hyperkube images ([#88676](https://github.com/kubernetes/kubernetes/pull/88676), [@dims](https://github.com/dims)) [SIG Cluster Lifecycle and Release]
+- Remove --export flag from kubectl get command. ([#88649](https://github.com/kubernetes/kubernetes/pull/88649), [@oke-py](https://github.com/oke-py)) [SIG CLI and Testing]
+- Scheduler's alpha feature 'ResourceLimitsPriorityFunction' is completely removed due to lack of usage ([#91883](https://github.com/kubernetes/kubernetes/pull/91883), [@SataQiu](https://github.com/SataQiu)) [SIG Scheduling and Testing]
+- Storage.k8s.io/v1beta1 is deprecated in favor of storage.k8s.io/v1 ([#90671](https://github.com/kubernetes/kubernetes/pull/90671), [@deads2k](https://github.com/deads2k)) [SIG Storage]
 
 ### API Change
 
-#### New API types/versions:
-- A new IngressClass resource has been added to enable better Ingress configuration. ([#88509](https://github.com/kubernetes/kubernetes/pull/88509), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, CLI, Network, Node and Testing]
-- The CSIDriver API has graduated to storage.k8s.io/v1, and is now available for use. ([#84814](https://github.com/kubernetes/kubernetes/pull/84814), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
-
-#### New API fields:
-- autoscaling/v2beta2 HorizontalPodAutoscaler added a `spec.behavior` field that allows scale behavior to be configured. Behaviors are specified separately for scaling up and down. In each direction a stabilization window can be specified as well as a list of policies and how to select amongst them. Policies can limit the absolute number of pods added or removed, or the percentage of pods added or removed. ([#74525](https://github.com/kubernetes/kubernetes/pull/74525), [@gliush](https://github.com/gliush)) [SIG API Machinery, Apps, Autoscaling and CLI]
-- Ingress:
-  - `spec.ingressClassName` replaces the deprecated `kubernetes.io/ingress.class` annotation, and allows associating an Ingress object with a particular controller.
-  - path definitions added a `pathType` field to allow indicating how the specified path should be matched against incoming requests. Valid values are `Exact`, `Prefix`, and `ImplementationSpecific` ([#88587](https://github.com/kubernetes/kubernetes/pull/88587), [@cmluciano](https://github.com/cmluciano)) [SIG Apps, Cluster Lifecycle and Network]
-- The alpha feature `AnyVolumeDataSource` enables PersistentVolumeClaim objects to use the spec.dataSource field to reference a custom type as a data source ([#88636](https://github.com/kubernetes/kubernetes/pull/88636), [@bswartz](https://github.com/bswartz)) [SIG Apps and Storage]
-- The alpha feature `ConfigurableFSGroupPolicy` enables v1 Pods to specify a spec.securityContext.fsGroupChangePolicy policy to control how file permissions are applied to volumes mounted into the pod. ([#88488](https://github.com/kubernetes/kubernetes/pull/88488), [@gnufied](https://github.com/gnufied)) [SIG  Storage]
-- The alpha feature `ServiceAppProtocol` enables setting an `appProtocol` field in ServicePort and EndpointPort definitions. ([#88503](https://github.com/kubernetes/kubernetes/pull/88503), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- The alpha feature `ImmutableEphemeralVolumes` enables an `immutable` field in both Secret and ConfigMap objects to mark their contents as immutable. ([#86377](https://github.com/kubernetes/kubernetes/pull/86377), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, CLI and Testing]
-
-#### Other API changes:
-- The beta feature `ServerSideApply` enables tracking and managing changed fields for all new objects, which means there will be `managedFields` in `metadata` with the list of managers and their owned fields.
-- The alpha feature `ServiceAccountIssuerDiscovery` enables publishing OIDC discovery information and service account token verification keys at `/.well-known/openid-configuration` and `/openid/v1/jwks` endpoints by API servers configured to issue service account tokens. ([#80724](https://github.com/kubernetes/kubernetes/pull/80724), [@cceckman](https://github.com/cceckman)) [SIG API Machinery, Auth, Cluster Lifecycle and Testing]
-- CustomResourceDefinition schemas that use `x-kubernetes-list-map-keys` to specify properties that uniquely identify list items must make those properties required or have a default value, to ensure those properties are present for all list items. See https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;merge-strategy for details. ([#88076](https://github.com/kubernetes/kubernetes/pull/88076), [@eloyekunle](https://github.com/eloyekunle)) [SIG API Machinery and Testing]
-- CustomResourceDefinition schemas that use `x-kubernetes-list-type: map` or `x-kubernetes-list-type: set` now enable validation that the list items in the corresponding custom resources are unique. ([#84920](https://github.com/kubernetes/kubernetes/pull/84920), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-
-#### Configuration file changes:
-
-#### kube-apiserver:
-- The `--egress-selector-config-file` configuration file now accepts an apiserver.k8s.io/v1beta1  EgressSelectorConfiguration configuration object, and has been updated to allow specifying HTTP or GRPC connections to the network proxy ([#87179](https://github.com/kubernetes/kubernetes/pull/87179), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Cloud Provider and Cluster Lifecycle]
-
-#### kube-scheduler:
-- A kubescheduler.config.k8s.io/v1alpha2 configuration file version is now accepted, with support for multiple scheduling profiles ([#87628](https://github.com/kubernetes/kubernetes/pull/87628), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-  - HardPodAffinityWeight moved from a top level ComponentConfig parameter to a PluginConfig parameter of InterPodAffinity Plugin in `kubescheduler.config.k8s.io/v1alpha2` ([#88002](https://github.com/kubernetes/kubernetes/pull/88002), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-  - Kube-scheduler can run more than one scheduling profile. Given a pod, the profile is selected by using its `.spec.schedulerName`. ([#88285](https://github.com/kubernetes/kubernetes/pull/88285), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps, Scheduling and Testing]
-  - Scheduler Extenders can now be configured in the v1alpha2 component config ([#88768](https://github.com/kubernetes/kubernetes/pull/88768), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
-  - The PostFilter of scheduler framework is renamed to PreScore in kubescheduler.config.k8s.io/v1alpha2. ([#87751](https://github.com/kubernetes/kubernetes/pull/87751), [@skilxn-go](https://github.com/skilxn-go)) [SIG Scheduling and Testing]
-
-#### kube-proxy:
-- Added kube-proxy flags `--ipvs-tcp-timeout`, `--ipvs-tcpfin-timeout`, `--ipvs-udp-timeout` to configure IPVS connection timeouts. ([#85517](https://github.com/kubernetes/kubernetes/pull/85517), [@andrewsykim](https://github.com/andrewsykim)) [SIG Cluster Lifecycle and Network]
-- Added optional `--detect-local-mode` flag to kube-proxy. Valid values are "ClusterCIDR" (default matching previous behavior) and "NodeCIDR" ([#87748](https://github.com/kubernetes/kubernetes/pull/87748), [@satyasm](https://github.com/satyasm)) [SIG Cluster Lifecycle, Network and Scheduling]
-- Kube-controller-manager and kube-scheduler expose profiling by default to match the kube-apiserver.  Use `--enable-profiling=false` to disable. ([#88663](https://github.com/kubernetes/kubernetes/pull/88663), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Cloud Provider and Scheduling]
-- Kubelet pod resources API now provides the information about active pods only. ([#79409](https://github.com/kubernetes/kubernetes/pull/79409), [@takmatsu](https://github.com/takmatsu)) [SIG Node]
-- New flag `--endpointslice-updates-batch-period` in kube-controller-manager can be used to reduce the number of endpointslice updates generated by pod changes. ([#88745](https://github.com/kubernetes/kubernetes/pull/88745), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Apps and Network]
-- New flag `--show-hidden-metrics-for-version` in kube-proxy, kubelet, kube-controller-manager, and kube-scheduler can be used to show all hidden metrics that are deprecated in the previous minor release. ([#85279](https://github.com/kubernetes/kubernetes/pull/85279), [@RainbowMango](https://github.com/RainbowMango)) [SIG Cluster Lifecycle and Network]
-
-#### Features graduated to beta:
-  - StartupProbe ([#83437](https://github.com/kubernetes/kubernetes/pull/83437), [@matthyx](https://github.com/matthyx)) [SIG Node, Scalability and Testing]
-
-#### Features graduated to GA:
-  - VolumePVCDataSource ([#88686](https://github.com/kubernetes/kubernetes/pull/88686), [@j-griffith](https://github.com/j-griffith)) [SIG Storage]
-  - TaintBasedEvictions ([#87487](https://github.com/kubernetes/kubernetes/pull/87487), [@skilxn-go](https://github.com/skilxn-go)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
-  - BlockVolume and CSIBlockVolume ([#88673](https://github.com/kubernetes/kubernetes/pull/88673), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-  - Windows RunAsUserName ([#87790](https://github.com/kubernetes/kubernetes/pull/87790), [@marosset](https://github.com/marosset)) [SIG Apps and Windows]
-- The following feature gates are removed, because the associated features were unconditionally enabled in previous releases: CustomResourceValidation, CustomResourceSubresources, CustomResourceWebhookConversion, CustomResourcePublishOpenAPI, CustomResourceDefaulting ([#87475](https://github.com/kubernetes/kubernetes/pull/87475), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
+- A new alpha-level field, `SupportsFsGroup`, has been introduced for CSIDrivers to allow them to specify whether they support volume ownership and permission modifications. The `CSIVolumeSupportFSGroup` feature gate must be enabled to allow this field to be used. ([#92001](https://github.com/kubernetes/kubernetes/pull/92001), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, CLI and Storage]
+- Added pod version skew strategy for seccomp profile to synchronize the deprecated annotations with the new API Server fields. Please see the corresponding section [in the KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190717-seccomp-ga.md&#35;version-skew-strategy) for more detailed explanations. ([#91408](https://github.com/kubernetes/kubernetes/pull/91408), [@saschagrunert](https://github.com/saschagrunert)) [SIG Apps, Auth, CLI and Node]
+- Adds the ability to disable Accelerator/GPU metrics collected by Kubelet ([#91930](https://github.com/kubernetes/kubernetes/pull/91930), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node]
+- Admission webhooks can now return warning messages that are surfaced to API clients, using the `.response.warnings` field in the admission review response. ([#92667](https://github.com/kubernetes/kubernetes/pull/92667), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
+- CertificateSigningRequest API conditions were updated:
+  - a `status` field was added; this field defaults to `True`, and may only be set to `True` for `Approved`, `Denied`, and `Failed` conditions
+  - a `lastTransitionTime` field was added
+  - a `Failed` condition type was added to allow signers to indicate permanent failure; this condition can be added via the `certificatesigningrequests/status` subresource.
+  - `Approved` and `Denied` conditions are mutually exclusive
+  - `Approved`, `Denied`, and `Failed` conditions can no longer be removed from a CSR ([#90191](https://github.com/kubernetes/kubernetes/pull/90191), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps, Auth, CLI and Node]
+- Cluster admins can now turn off /logs endpoint in kubelet by setting enableSystemLogHandler to false in their kubelet configuration file. enableSystemLogHandler can be set to true only when enableDebuggingHandlers is also set to true. ([#87273](https://github.com/kubernetes/kubernetes/pull/87273), [@SaranBalaji90](https://github.com/SaranBalaji90)) [SIG Node]
+- Custom Endpoints are now mirrored to EndpointSlices by a new EndpointSliceMirroring controller. ([#91637](https://github.com/kubernetes/kubernetes/pull/91637), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Cloud Provider, Instrumentation, Network and Testing]
+- CustomResourceDefinitions added support for marking versions as deprecated by setting `spec.versions[*].deprecated` to `true`, and for optionally overriding the default deprecation warning with a `spec.versions[*].deprecationWarning` field. ([#92329](https://github.com/kubernetes/kubernetes/pull/92329), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
+- EnvVarSource api doc bug fixes ([#91194](https://github.com/kubernetes/kubernetes/pull/91194), [@wawa0210](https://github.com/wawa0210)) [SIG Apps]
+- Fix bug in reflector that couldn't recover from "Too large resource version" errors ([#92537](https://github.com/kubernetes/kubernetes/pull/92537), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
+- Fixed: log timestamps now include trailing zeros to maintain a fixed width ([#91207](https://github.com/kubernetes/kubernetes/pull/91207), [@iamchuckss](https://github.com/iamchuckss)) [SIG Apps and Node]
+- Generic ephemeral volumes, a new alpha feature under the `GenericEphemeralVolume` feature gate, provide a more flexible alternative to `EmptyDir` volumes: as with `EmptyDir`, volumes are created and deleted for each pod automatically by Kubernetes. But because the normal provisioning process is used (`PersistentVolumeClaim`), storage can be provided by third-party storage vendors and all of the usual volume features work. Volumes don't need to be empt; for example, restoring from snapshot is supported. ([#92784](https://github.com/kubernetes/kubernetes/pull/92784), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Instrumentation, Node, Scheduling, Storage and Testing]
+- Go1.14.4 is now the minimum version required for building Kubernetes ([#92438](https://github.com/kubernetes/kubernetes/pull/92438), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Storage and Testing]
+- Hide managedFields from kubectl edit command ([#91946](https://github.com/kubernetes/kubernetes/pull/91946), [@soltysh](https://github.com/soltysh)) [SIG CLI]
+- K8s.io/apimachinery - scheme.Convert() now uses only explicitly registered conversions - default reflection based conversion is no longer available. `+k8s:conversion-gen` tags can be used with the `k8s.io/code-generator` component to generate conversions. ([#90018](https://github.com/kubernetes/kubernetes/pull/90018), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Apps and Testing]
+- Kube-proxy: add `--bind-address-hard-fail` flag to treat failure to bind to a port as fatal ([#89350](https://github.com/kubernetes/kubernetes/pull/89350), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle and Network]
+- Kubebuilder validation tags are set on metav1.Condition for CRD generation ([#92660](https://github.com/kubernetes/kubernetes/pull/92660), [@damemi](https://github.com/damemi)) [SIG API Machinery]
+- Kubelet's --runonce option is now also available in Kubelet's config file as `runOnce`. ([#89128](https://github.com/kubernetes/kubernetes/pull/89128), [@vincent178](https://github.com/vincent178)) [SIG Node]
+- Kubelet: add '--logging-format' flag to support structured logging ([#91532](https://github.com/kubernetes/kubernetes/pull/91532), [@afrouzMashaykhi](https://github.com/afrouzMashaykhi)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Node]
+- Kubernetes is now built with golang 1.15.0-rc.1.
+  - The deprecated, legacy behavior of treating the CommonName field on X.509 serving certificates as a host name when no Subject Alternative Names are present is now disabled by default. It can be temporarily re-enabled by adding the value x509ignoreCN=0 to the GODEBUG environment variable. ([#93264](https://github.com/kubernetes/kubernetes/pull/93264), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Storage and Testing]
+- Promote Immutable Secrets/ConfigMaps feature to Beta and enable the feature by default.
+  This allows to set `Immutable` field in Secrets or ConfigMap object to mark their contents as immutable. ([#89594](https://github.com/kubernetes/kubernetes/pull/89594), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps and Testing]
+- Remove `BindTimeoutSeconds` from schedule configuration `KubeSchedulerConfiguration` ([#91580](https://github.com/kubernetes/kubernetes/pull/91580), [@cofyc](https://github.com/cofyc)) [SIG Scheduling and Testing]
+- Remove kubescheduler.config.k8s.io/v1alpha1 ([#89298](https://github.com/kubernetes/kubernetes/pull/89298), [@gavinfish](https://github.com/gavinfish)) [SIG Scheduling]
+- Reserve plugins that fail to reserve will trigger the unreserve extension point ([#92391](https://github.com/kubernetes/kubernetes/pull/92391), [@adtac](https://github.com/adtac)) [SIG Scheduling and Testing]
+- Resolve regression in `metadata.managedFields` handling in update/patch requests submitted by older API clients ([#91748](https://github.com/kubernetes/kubernetes/pull/91748), [@apelisse](https://github.com/apelisse))
+- Scheduler: optionally check for available storage capacity before scheduling pods which have unbound volumes (alpha feature with the new `CSIStorageCapacity` feature gate, only works for CSI drivers and depends on support for the feature in a CSI driver deployment) ([#92387](https://github.com/kubernetes/kubernetes/pull/92387), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Scheduling, Storage and Testing]
+- Seccomp support has graduated to GA. A new `seccompProfile` field is added to pod and container securityContext objects. Support for `seccomp.security.alpha.kubernetes.io/pod` and `container.seccomp.security.alpha.kubernetes.io/...` annotations is deprecated, and will be removed in v1.22. ([#91381](https://github.com/kubernetes/kubernetes/pull/91381), [@pjbgf](https://github.com/pjbgf)) [SIG Apps, Auth, Node, Release, Scheduling and Testing]
+- ServiceAppProtocol feature gate is now beta and enabled by default, adding new AppProtocol field to Services and Endpoints. ([#90023](https://github.com/kubernetes/kubernetes/pull/90023), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- SetHostnameAsFQDN is a new field in PodSpec. When set to true, the fully 
+  qualified domain name (FQDN) of a Pod is set as hostname of its containers. 
+  In Linux containers, this means setting the FQDN in the hostname field of the 
+  kernel (the nodename field of struct utsname).  In Windows containers, this
+  means setting the this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters to FQDN. 
+  If a pod does not have FQDN, this has no effect. ([#91699](https://github.com/kubernetes/kubernetes/pull/91699), [@javidiaz](https://github.com/javidiaz)) [SIG Apps, Network, Node and Testing]
+- The CertificateSigningRequest API is promoted to certificates.k8s.io/v1 with the following changes:
+  - `spec.signerName` is now required, and requests for `kubernetes.io/legacy-unknown` are not allowed to be created via the `certificates.k8s.io/v1` API
+  - `spec.usages` is now required, may not contain duplicate values, and must only contain known usages
+  - `status.conditions` may not contain duplicate types
+  - `status.conditions[*].status` is now required
+  - `status.certificate` must be PEM-encoded, and contain only CERTIFICATE blocks ([#91685](https://github.com/kubernetes/kubernetes/pull/91685), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Architecture, Auth, CLI and Testing]
+- The HugePageStorageMediumSize feature gate is now on by default allowing usage of multiple sizes huge page resources on a container level. ([#90592](https://github.com/kubernetes/kubernetes/pull/90592), [@bart0sh](https://github.com/bart0sh)) [SIG Node]
+- The Kubelet's --node-status-max-images option is now available via the Kubelet config file field nodeStatusMaxImage ([#91275](https://github.com/kubernetes/kubernetes/pull/91275), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's --seccomp-profile-root option is now marked as deprecated. ([#91182](https://github.com/kubernetes/kubernetes/pull/91182), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's `--bootstrap-checkpoint-path` option is now removed. ([#91577](https://github.com/kubernetes/kubernetes/pull/91577), [@knabben](https://github.com/knabben)) [SIG Apps and Node]
+- The Kubelet's `--cloud-provider` and `--cloud-config` options are now marked as deprecated. ([#90408](https://github.com/kubernetes/kubernetes/pull/90408), [@knabben](https://github.com/knabben)) [SIG Cloud Provider and Node]
+- The Kubelet's `--enable-server` and `--provider-id` option is now available via the Kubelet config file field `enableServer` and `providerID` respectively. ([#90494](https://github.com/kubernetes/kubernetes/pull/90494), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's `--kernel-memcg-notification` option is now available via the Kubelet config file field kernelMemcgNotification ([#91863](https://github.com/kubernetes/kubernetes/pull/91863), [@knabben](https://github.com/knabben)) [SIG Cloud Provider, Node and Testing]
+- The Kubelet's `--really-crash-for-testing` and  `--chaos-chance` options are now marked as deprecated. ([#90499](https://github.com/kubernetes/kubernetes/pull/90499), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's `--volume-plugin-dir` option is now available via the Kubelet config file field `VolumePluginDir`. ([#88480](https://github.com/kubernetes/kubernetes/pull/88480), [@savitharaghunathan](https://github.com/savitharaghunathan)) [SIG Node]
+- The `DefaultIngressClass` feature is now GA. The `--feature-gate` parameter will be removed in 1.20. ([#91957](https://github.com/kubernetes/kubernetes/pull/91957), [@cmluciano](https://github.com/cmluciano)) [SIG API Machinery, Apps, Network and Testing]
+- The alpha `DynamicAuditing` feature gate and `auditregistration.k8s.io/v1alpha1` API have been removed and are no longer supported. ([#91502](https://github.com/kubernetes/kubernetes/pull/91502), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
+- The kube-controller-manager managed signers can now have distinct signing certificates and keys.  See the help about `--cluster-signing-[signer-name]-{cert,key}-file`.  `--cluster-signing-{cert,key}-file` is still the default. ([#90822](https://github.com/kubernetes/kubernetes/pull/90822), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps and Auth]
+- The unused `series.state` field, deprecated since v1.14, is removed from the `events.k8s.io/v1beta1` and `v1` Event types. ([#90449](https://github.com/kubernetes/kubernetes/pull/90449), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps]
+- Unreserve extension point for scheduler plugins is merged into Reserve extension point ([#92200](https://github.com/kubernetes/kubernetes/pull/92200), [@adtac](https://github.com/adtac)) [SIG Scheduling and Testing]
+- Update Golang to v1.14.4 ([#88638](https://github.com/kubernetes/kubernetes/pull/88638), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Cloud Provider, Release and Testing]
+- Updated the API documentation for Service.Spec.IPFamily to warn that its exact
+  semantics will probably change before the dual-stack feature goes GA, and users
+  should look at ClusterIP or Endpoints, not IPFamily, to figure out if an existing
+  Service is IPv4, IPv6, or dual-stack. ([#91527](https://github.com/kubernetes/kubernetes/pull/91527), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
+- Users can configure a resource prefix to ignore a group of resources. ([#88842](https://github.com/kubernetes/kubernetes/pull/88842), [@angao](https://github.com/angao)) [SIG Node and Scheduling]
+- `Ingress` and `IngressClass` resources have graduated to `networking.k8s.io/v1`. Ingress and IngressClass types in the `extensions/v1beta1` and `networking.k8s.io/v1beta1` API versions are deprecated and will no longer be served in 1.22+. Persisted objects can be accessed via the `networking.k8s.io/v1` API. Notable changes in v1 Ingress objects (v1beta1 field names are unchanged):
+  - `spec.backend` -> `spec.defaultBackend`
+  - `serviceName` -> `service.name`
+  - `servicePort` -> `service.port.name` (for string values)
+  - `servicePort` -> `service.port.number` (for numeric values)
+  - `pathType` no longer has a default value in v1; "Exact", "Prefix", or "ImplementationSpecific" must be specified
+  Other Ingress API updates:
+  - backends can now be resource or service backends
+  - `path` is no longer required to be a valid regular expression ([#89778](https://github.com/kubernetes/kubernetes/pull/89778), [@cmluciano](https://github.com/cmluciano)) [SIG API Machinery, Apps, CLI, Network and Testing]
+- `NodeResourcesLeastAllocated` and `NodeResourcesMostAllocated` plugins now support customized weight on the CPU and memory. ([#90544](https://github.com/kubernetes/kubernetes/pull/90544), [@chendave](https://github.com/chendave)) [SIG Scheduling]
+- `PostFilter` type is added to scheduler component config API on version v1beta1. ([#91547](https://github.com/kubernetes/kubernetes/pull/91547), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- `RequestedToCapacityRatioArgs` encoding is now strict ([#91603](https://github.com/kubernetes/kubernetes/pull/91603), [@pancernik](https://github.com/pancernik)) [SIG Scheduling]
+- `v1beta1` Scheduler `Extender` encoding is case-sensitive (`v1alpha1`/`v1alpha2` was case-insensitive), its `httpTimeout` field uses duration encoding (for example, one second is specified as `"1s"`), and the `enableHttps` field in `v1alpha1`/`v1alpha2` was renamed to `enableHTTPS`. ([#91625](https://github.com/kubernetes/kubernetes/pull/91625), [@pancernik](https://github.com/pancernik)) [SIG Scheduling]
 
 ### Feature
 
-- API request throttling (due to a high rate of requests) is now reported in client-go logs at log level 2.  The messages are of the form:`Throttling request took 1.50705208s, request: GET:<URL>` The presence of these messages may indicate to the administrator the need to tune the cluster accordingly. ([#87740](https://github.com/kubernetes/kubernetes/pull/87740), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery]
-- Add support for mount options to the FC volume plugin ([#87499](https://github.com/kubernetes/kubernetes/pull/87499), [@ejweber](https://github.com/ejweber)) [SIG Storage]
-- Added a config-mode flag in azure auth module to enable getting AAD token without spn: prefix in audience claim. When it's not specified, the default behavior doesn't change. ([#87630](https://github.com/kubernetes/kubernetes/pull/87630), [@weinong](https://github.com/weinong)) [SIG API Machinery, Auth, CLI and Cloud Provider]
-- Allow for configuration of CoreDNS replica count ([#85837](https://github.com/kubernetes/kubernetes/pull/85837), [@pickledrick](https://github.com/pickledrick)) [SIG Cluster Lifecycle]
-- Allow user to specify resource using --filename flag when invoking kubectl exec ([#88460](https://github.com/kubernetes/kubernetes/pull/88460), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Apiserver added a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver. ([#88567](https://github.com/kubernetes/kubernetes/pull/88567), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- Azure Cloud Provider now supports using Azure network resources (Virtual Network, Load Balancer, Public IP, Route Table, Network Security Group, etc.) in different AAD Tenant and Subscription than those for the Kubernetes cluster. To use the feature, please reference https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/docs/cloud-provider-config.md&#35;host-network-resources-in-different-aad-tenant-and-subscription. ([#88384](https://github.com/kubernetes/kubernetes/pull/88384), [@bowen5](https://github.com/bowen5)) [SIG Cloud Provider]
-- Azure VMSS/VMSSVM clients now suppress requests on throttling ([#86740](https://github.com/kubernetes/kubernetes/pull/86740), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Azure cloud provider cache TTL is configurable, list of the azure cloud provider is as following:
-  - "availabilitySetNodesCacheTTLInSeconds"
-  - "vmssCacheTTLInSeconds"
-  - "vmssVirtualMachinesCacheTTLInSeconds"
-  - "vmCacheTTLInSeconds"
-  - "loadBalancerCacheTTLInSeconds"
-  - "nsgCacheTTLInSeconds"
-  - "routeTableCacheTTLInSeconds"
-  ([#86266](https://github.com/kubernetes/kubernetes/pull/86266), [@zqingqing1](https://github.com/zqingqing1)) [SIG Cloud Provider]
-- Azure global rate limit is switched to per-client. A set of new rate limit configure options are introduced, including routeRateLimit, SubnetsRateLimit, InterfaceRateLimit, RouteTableRateLimit, LoadBalancerRateLimit, PublicIPAddressRateLimit, SecurityGroupRateLimit, VirtualMachineRateLimit, StorageAccountRateLimit, DiskRateLimit, SnapshotRateLimit, VirtualMachineScaleSetRateLimit and VirtualMachineSizeRateLimit. The original rate limit options would be default values for those new client's rate limiter. ([#86515](https://github.com/kubernetes/kubernetes/pull/86515), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Azure network and VM clients now suppress requests on throttling ([#87122](https://github.com/kubernetes/kubernetes/pull/87122), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Azure storage clients now suppress requests on throttling ([#87306](https://github.com/kubernetes/kubernetes/pull/87306), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Azure: add support for single stack IPv6 ([#88448](https://github.com/kubernetes/kubernetes/pull/88448), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- DefaultConstraints can be specified for PodTopologySpread Plugin in the scheduler’s ComponentConfig ([#88671](https://github.com/kubernetes/kubernetes/pull/88671), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- DisableAvailabilitySetNodes is added to avoid VM list for VMSS clusters. It should only be used when vmType is "vmss" and all the nodes (including control plane nodes) are VMSS virtual machines. ([#87685](https://github.com/kubernetes/kubernetes/pull/87685), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Elasticsearch supports automatically setting the advertise address ([#85944](https://github.com/kubernetes/kubernetes/pull/85944), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle and Instrumentation]
-- EndpointSlices will now be enabled by default. A new `EndpointSliceProxying` feature gate determines if kube-proxy will use EndpointSlices, this is disabled by default. ([#86137](https://github.com/kubernetes/kubernetes/pull/86137), [@robscott](https://github.com/robscott)) [SIG Network]
-- Kube-proxy: Added dual-stack IPv4/IPv6 support to the iptables proxier. ([#82462](https://github.com/kubernetes/kubernetes/pull/82462), [@vllry](https://github.com/vllry)) [SIG Network]
-- Kubeadm now supports automatic calculations of dual-stack node cidr masks to kube-controller-manager. ([#85609](https://github.com/kubernetes/kubernetes/pull/85609), [@Arvinderpal](https://github.com/Arvinderpal)) [SIG Cluster Lifecycle]
-- Kubeadm: add a upgrade health check that deploys a Job ([#81319](https://github.com/kubernetes/kubernetes/pull/81319), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: add the experimental feature gate PublicKeysECDSA that can be used to create a
-  cluster with ECDSA certificates from "kubeadm init". Renewal of existing ECDSA certificates is also supported using "kubeadm alpha certs renew", but not switching between the RSA and ECDSA algorithms on the fly or during upgrades. ([#86953](https://github.com/kubernetes/kubernetes/pull/86953), [@rojkov](https://github.com/rojkov)) [SIG API Machinery, Auth and Cluster Lifecycle]
-- Kubeadm: implemented structured output of 'kubeadm config images list' command in JSON, YAML, Go template and JsonPath formats ([#86810](https://github.com/kubernetes/kubernetes/pull/86810), [@bart0sh](https://github.com/bart0sh)) [SIG Cluster Lifecycle]
-- Kubeadm: on kubeconfig certificate renewal, keep the embedded CA in sync with the one on disk ([#88052](https://github.com/kubernetes/kubernetes/pull/88052), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: reject a node joining the cluster if a node with the same name already exists ([#81056](https://github.com/kubernetes/kubernetes/pull/81056), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: support Windows specific kubelet flags in kubeadm-flags.env ([#88287](https://github.com/kubernetes/kubernetes/pull/88287), [@gab-satchi](https://github.com/gab-satchi)) [SIG Cluster Lifecycle and Windows]
-- Kubeadm: support automatic retry after failing to pull image ([#86899](https://github.com/kubernetes/kubernetes/pull/86899), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: upgrade supports fallback to the nearest known etcd version if an unknown k8s version is passed ([#88373](https://github.com/kubernetes/kubernetes/pull/88373), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubectl/drain: add disable-eviction option.Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, and should be used with caution. ([#85571](https://github.com/kubernetes/kubernetes/pull/85571), [@michaelgugino](https://github.com/michaelgugino)) [SIG CLI]
-- Kubectl/drain: add skip-wait-for-delete-timeout option. If a pod’s  `DeletionTimestamp` is older than N seconds, skip waiting for the pod.  Seconds must be greater than 0 to skip. ([#85577](https://github.com/kubernetes/kubernetes/pull/85577), [@michaelgugino](https://github.com/michaelgugino)) [SIG CLI]
-- Option `preConfiguredBackendPoolLoadBalancerTypes` is added to azure cloud provider for the pre-configured load balancers, possible values: `""`, `"internal"`, `"external"`,`"all"` ([#86338](https://github.com/kubernetes/kubernetes/pull/86338), [@gossion](https://github.com/gossion)) [SIG Cloud Provider]
-- PodTopologySpread plugin now excludes terminatingPods when making scheduling decisions. ([#87845](https://github.com/kubernetes/kubernetes/pull/87845), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Provider/azure: Network security groups can now be in a separate resource group. ([#87035](https://github.com/kubernetes/kubernetes/pull/87035), [@CecileRobertMichon](https://github.com/CecileRobertMichon)) [SIG Cloud Provider]
-- SafeSysctlWhitelist: add net.ipv4.ping_group_range ([#85463](https://github.com/kubernetes/kubernetes/pull/85463), [@AkihiroSuda](https://github.com/AkihiroSuda)) [SIG Auth]
-- Scheduler framework permit plugins now run at the end of the scheduling cycle, after reserve plugins. Waiting on permit will remain in the beginning of the binding cycle. ([#88199](https://github.com/kubernetes/kubernetes/pull/88199), [@mateuszlitwin](https://github.com/mateuszlitwin)) [SIG Scheduling]
-- Scheduler: Add DefaultBinder plugin ([#87430](https://github.com/kubernetes/kubernetes/pull/87430), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-- Skip default spreading scoring plugin for pods that define TopologySpreadConstraints ([#87566](https://github.com/kubernetes/kubernetes/pull/87566), [@skilxn-go](https://github.com/skilxn-go)) [SIG Scheduling]
-- The kubectl --dry-run flag now accepts the values 'client', 'server', and 'none', to support client-side and server-side dry-run strategies. The boolean and unset values for the --dry-run flag are deprecated and a value will be required in a future version. ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-- Support server-side dry-run in kubectl with --dry-run=server for commands including apply, patch, create, run, annotate, label, set, autoscale, drain, rollout undo, and expose. ([#87714](https://github.com/kubernetes/kubernetes/pull/87714), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery, CLI and Testing]
-- Add --dry-run=server|client to kubectl delete, taint, replace ([#88292](https://github.com/kubernetes/kubernetes/pull/88292), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
-- The feature PodTopologySpread (feature gate `EvenPodsSpread`) has been enabled by default in 1.18. ([#88105](https://github.com/kubernetes/kubernetes/pull/88105), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
-- The kubelet and the default docker runtime now support running ephemeral containers in the Linux process namespace of a target container. Other container runtimes must implement support for this feature before it will be available for that runtime. ([#84731](https://github.com/kubernetes/kubernetes/pull/84731), [@verb](https://github.com/verb)) [SIG Node]
-- The underlying format of the `CPUManager` state file has changed. Upgrades should be seamless, but any third-party tools that rely on reading the previous format need to be updated. ([#84462](https://github.com/kubernetes/kubernetes/pull/84462), [@klueska](https://github.com/klueska)) [SIG Node and Testing]
-- Update CNI version to v0.8.5 ([#78819](https://github.com/kubernetes/kubernetes/pull/78819), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Cluster Lifecycle, Network, Release and Testing]
-- Webhooks have alpha support for network proxy ([#85870](https://github.com/kubernetes/kubernetes/pull/85870), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Auth and Testing]
-- When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, Auth, Node and Testing]
-- When deleting objects using kubectl with the --force flag, you are no longer required to also specify --grace-period=0. ([#87776](https://github.com/kubernetes/kubernetes/pull/87776), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Windows nodes on GCE can use virtual TPM-based authentication to the control plane. ([#85466](https://github.com/kubernetes/kubernetes/pull/85466), [@pjh](https://github.com/pjh)) [SIG Cluster Lifecycle]
-- You can now pass "--node-ip ::" to kubelet to indicate that it should autodetect an IPv6 address to use as the node's primary address. ([#85850](https://github.com/kubernetes/kubernetes/pull/85850), [@danwinship](https://github.com/danwinship)) [SIG Cloud Provider, Network and Node]
-- `kubectl` now contains a `kubectl alpha debug` command. This command allows attaching an ephemeral container to a running pod for the purposes of debugging. ([#88004](https://github.com/kubernetes/kubernetes/pull/88004), [@verb](https://github.com/verb)) [SIG CLI]
-- TLS Server Name overrides can now be specified in a kubeconfig file and via --tls-server-name in kubectl ([#88769](https://github.com/kubernetes/kubernetes/pull/88769), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and CLI]
-
-#### Metrics:
-- Add `rest_client_rate_limiter_duration_seconds` metric to component-base to track client side rate limiter latency in seconds. Broken down by verb and URL. ([#88134](https://github.com/kubernetes/kubernetes/pull/88134), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Added two client certificate metrics for exec auth:
-    - `rest_client_certificate_expiration_seconds` a gauge reporting the lifetime of the current client certificate. Reports the time of expiry in seconds since January 1, 1970 UTC.
-    - `rest_client_certificate_rotation_age` a histogram reporting the age of a just rotated client certificate in seconds. ([#84382](https://github.com/kubernetes/kubernetes/pull/84382), [@sambdavidson](https://github.com/sambdavidson)) [SIG API Machinery, Auth, Cluster Lifecycle and Instrumentation]
-- Controller manager serve workqueue metrics ([#87967](https://github.com/kubernetes/kubernetes/pull/87967), [@zhan849](https://github.com/zhan849)) [SIG API Machinery]
-- Following metrics have been turned off:
-  - kubelet_pod_worker_latency_microseconds
-  - kubelet_pod_start_latency_microseconds
-  - kubelet_cgroup_manager_latency_microseconds
-  - kubelet_pod_worker_start_latency_microseconds
-  - kubelet_pleg_relist_latency_microseconds
-  - kubelet_pleg_relist_interval_microseconds
-  - kubelet_eviction_stats_age_microseconds
-  - kubelet_runtime_operations
-  - kubelet_runtime_operations_latency_microseconds
-  - kubelet_runtime_operations_errors
-  - kubelet_device_plugin_registration_count
-  - kubelet_device_plugin_alloc_latency_microseconds
-  - kubelet_docker_operations
-  - kubelet_docker_operations_latency_microseconds
-  - kubelet_docker_operations_errors
-  - kubelet_docker_operations_timeout
-  - network_plugin_operations_latency_microseconds ([#83841](https://github.com/kubernetes/kubernetes/pull/83841), [@RainbowMango](https://github.com/RainbowMango)) [SIG Network and Node]
-- Kube-apiserver metrics will now include request counts, latencies, and response sizes for /healthz, /livez, and /readyz requests. ([#83598](https://github.com/kubernetes/kubernetes/pull/83598), [@jktomer](https://github.com/jktomer)) [SIG API Machinery]
-- Kubelet now exports a `server_expiration_renew_failure` and `client_expiration_renew_failure` metric counter if the certificate rotations cannot be performed. ([#84614](https://github.com/kubernetes/kubernetes/pull/84614), [@rphillips](https://github.com/rphillips)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Release]
-- Kubelet: the metric process_start_time_seconds be marked as with the ALPHA stability level. ([#85446](https://github.com/kubernetes/kubernetes/pull/85446), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Node]
-- New metric `kubelet_pleg_last_seen_seconds` to aid diagnosis of PLEG not healthy issues. ([#86251](https://github.com/kubernetes/kubernetes/pull/86251), [@bboreham](https://github.com/bboreham)) [SIG Node]
-
-### Other (Bug, Cleanup or Flake)
-
-- Fixed a regression with clients prior to 1.15 not being able to update podIP in pod status, or podCIDR in node spec, against >= 1.16 API servers ([#88505](https://github.com/kubernetes/kubernetes/pull/88505), [@liggitt](https://github.com/liggitt)) [SIG Apps and Network]
-- Fixed "kubectl describe statefulsets.apps" printing garbage for rolling update partition ([#85846](https://github.com/kubernetes/kubernetes/pull/85846), [@phil9909](https://github.com/phil9909)) [SIG CLI]
-- Add a event to PV when filesystem on PV does not match actual filesystem on disk ([#86982](https://github.com/kubernetes/kubernetes/pull/86982), [@gnufied](https://github.com/gnufied)) [SIG Storage]
-- Add azure disk WriteAccelerator support ([#87945](https://github.com/kubernetes/kubernetes/pull/87945), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Add delays between goroutines for vm instance update ([#88094](https://github.com/kubernetes/kubernetes/pull/88094), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- Add init containers log to cluster dump info. ([#88324](https://github.com/kubernetes/kubernetes/pull/88324), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Addons: elasticsearch discovery supports IPv6 ([#85543](https://github.com/kubernetes/kubernetes/pull/85543), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle and Instrumentation]
-- Adds "volume.beta.kubernetes.io/migrated-to" annotation to PV's and PVC's when they are migrated to signal external provisioners to pick up those objects for Provisioning and Deleting. ([#87098](https://github.com/kubernetes/kubernetes/pull/87098), [@davidz627](https://github.com/davidz627)) [SIG  Storage]
-- All api-server log request lines in a more greppable format. ([#87203](https://github.com/kubernetes/kubernetes/pull/87203), [@lavalamp](https://github.com/lavalamp)) [SIG API Machinery]
-- Azure VMSS LoadBalancerBackendAddressPools updating has been improved with sequential-sync + concurrent-async requests. ([#88699](https://github.com/kubernetes/kubernetes/pull/88699), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Azure cloud provider now obtains AAD token who audience claim will not have spn: prefix ([#87590](https://github.com/kubernetes/kubernetes/pull/87590), [@weinong](https://github.com/weinong)) [SIG Cloud Provider]
-- AzureFile and CephFS use the new Mount library that prevents logging of sensitive mount options. ([#88684](https://github.com/kubernetes/kubernetes/pull/88684), [@saad-ali](https://github.com/saad-ali)) [SIG Storage]
-- Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83364](https://github.com/kubernetes/kubernetes/pull/83364), [@wawa0210](https://github.com/wawa0210)) [SIG Cluster Lifecycle and Windows]
-- Bind kube-dns containers to linux nodes to avoid Windows scheduling ([#83358](https://github.com/kubernetes/kubernetes/pull/83358), [@wawa0210](https://github.com/wawa0210)) [SIG Cluster Lifecycle and Windows]
-- Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83363](https://github.com/kubernetes/kubernetes/pull/83363), [@wawa0210](https://github.com/wawa0210)) [SIG Cluster Lifecycle, Instrumentation and Windows]
-- Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83362](https://github.com/kubernetes/kubernetes/pull/83362), [@wawa0210](https://github.com/wawa0210)) [SIG Cluster Lifecycle, Instrumentation and Windows]
-- Bug fixes: Make sure we include latest packages node &#35;351 (@caseydavenport) ([#84163](https://github.com/kubernetes/kubernetes/pull/84163), [@david-tigera](https://github.com/david-tigera)) [SIG Cluster Lifecycle]
-- CPU limits are now respected for Windows containers. If a node is over-provisioned, no weighting is used, only limits are respected. ([#86101](https://github.com/kubernetes/kubernetes/pull/86101), [@PatrickLang](https://github.com/PatrickLang)) [SIG Node, Testing and Windows]
-- Changed core_pattern on COS nodes to be an absolute path. ([#86329](https://github.com/kubernetes/kubernetes/pull/86329), [@mml](https://github.com/mml)) [SIG Cluster Lifecycle and Node]
-- Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates ([#88744](https://github.com/kubernetes/kubernetes/pull/88744), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery and Auth]
-- Cloud provider config CloudProviderBackoffMode has been removed since it won't be used anymore. ([#88463](https://github.com/kubernetes/kubernetes/pull/88463), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Conformance image now depends on stretch-slim instead of debian-hyperkube-base as that image is being deprecated and removed. ([#88702](https://github.com/kubernetes/kubernetes/pull/88702), [@dims](https://github.com/dims)) [SIG Cluster Lifecycle, Release and Testing]
-- Deprecate --generator flag from kubectl create commands ([#88655](https://github.com/kubernetes/kubernetes/pull/88655), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- During initialization phase (preflight), kubeadm now verifies the presence of the conntrack executable ([#85857](https://github.com/kubernetes/kubernetes/pull/85857), [@hnanni](https://github.com/hnanni)) [SIG Cluster Lifecycle]
-- EndpointSlice should not contain endpoints for terminating pods ([#89056](https://github.com/kubernetes/kubernetes/pull/89056), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Evictions due to pods breaching their ephemeral storage limits are now recorded by the `kubelet_evictions` metric and can be alerted on. ([#87906](https://github.com/kubernetes/kubernetes/pull/87906), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node]
-- Filter published OpenAPI schema by making nullable, required fields non-required in order to avoid kubectl to wrongly reject null values. ([#85722](https://github.com/kubernetes/kubernetes/pull/85722), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Fix /readyz to return error immediately after a shutdown is initiated, before the --shutdown-delay-duration has elapsed. ([#88911](https://github.com/kubernetes/kubernetes/pull/88911), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix API Server potential memory leak issue in processing watch request. ([#85410](https://github.com/kubernetes/kubernetes/pull/85410), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- Fix EndpointSlice controller race condition and ensure that it handles external changes to EndpointSlices. ([#85703](https://github.com/kubernetes/kubernetes/pull/85703), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Fix IPv6 addresses lost issue in pure ipv6 vsphere environment ([#86001](https://github.com/kubernetes/kubernetes/pull/86001), [@hubv](https://github.com/hubv)) [SIG Cloud Provider]
-- Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made ([#85990](https://github.com/kubernetes/kubernetes/pull/85990), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix a bug in kube-proxy that caused it to crash when using load balancers with a different IP family ([#87117](https://github.com/kubernetes/kubernetes/pull/87117), [@aojea](https://github.com/aojea)) [SIG Network]
-- Fix a bug in port-forward: named port not working with service ([#85511](https://github.com/kubernetes/kubernetes/pull/85511), [@oke-py](https://github.com/oke-py)) [SIG CLI]
-- Fix a bug in the dual-stack IPVS proxier where stale IPv6 endpoints were not being cleaned up ([#87695](https://github.com/kubernetes/kubernetes/pull/87695), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network]
-- Fix a bug that orphan revision cannot be adopted and statefulset cannot be synced ([#86801](https://github.com/kubernetes/kubernetes/pull/86801), [@likakuli](https://github.com/likakuli)) [SIG Apps]
-- Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. ([#88786](https://github.com/kubernetes/kubernetes/pull/88786), [@freehan](https://github.com/freehan)) [SIG Network]
-- Fix a bug where kubenet fails to parse the tc output. ([#83572](https://github.com/kubernetes/kubernetes/pull/83572), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
-- Fix a regression in kubenet that prevent pods to obtain ip addresses ([#85993](https://github.com/kubernetes/kubernetes/pull/85993), [@chendotjs](https://github.com/chendotjs)) [SIG Network and Node]
-- Fix azure file AuthorizationFailure ([#85475](https://github.com/kubernetes/kubernetes/pull/85475), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix bug where EndpointSlice controller would attempt to modify shared objects. ([#85368](https://github.com/kubernetes/kubernetes/pull/85368), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps and Network]
-- Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. ([#83446](https://github.com/kubernetes/kubernetes/pull/83446), [@Elias481](https://github.com/Elias481)) [SIG Cloud Provider]
-- Fix invalid VMSS updates due to incorrect cache ([#89002](https://github.com/kubernetes/kubernetes/pull/89002), [@ArchangelSDY](https://github.com/ArchangelSDY)) [SIG Cloud Provider]
-- Fix isCurrentInstance for Windows by removing the dependency of hostname. ([#89138](https://github.com/kubernetes/kubernetes/pull/89138), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix issue #85805 about a resource not found in azure cloud provider when LoadBalancer specified in another resource group. ([#86502](https://github.com/kubernetes/kubernetes/pull/86502), [@levimm](https://github.com/levimm)) [SIG Cloud Provider]
-- Fix kubectl annotate error when local=true is set ([#86952](https://github.com/kubernetes/kubernetes/pull/86952), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix kubectl create deployment image name ([#86636](https://github.com/kubernetes/kubernetes/pull/86636), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix `kubectl drain ignore` daemonsets and others. ([#87361](https://github.com/kubernetes/kubernetes/pull/87361), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix missing "apiVersion" for "involvedObject" in Events for Nodes. ([#87537](https://github.com/kubernetes/kubernetes/pull/87537), [@uthark](https://github.com/uthark)) [SIG Apps and Node]
-- Fix nil pointer dereference in azure cloud provider ([#85975](https://github.com/kubernetes/kubernetes/pull/85975), [@ldx](https://github.com/ldx)) [SIG Cloud Provider]
-- Fix regression in statefulset conversion which prevents applying a statefulset multiple times. ([#87706](https://github.com/kubernetes/kubernetes/pull/87706), [@liggitt](https://github.com/liggitt)) [SIG Apps and Testing]
-- Fix route conflicted operations when updating multiple routes together ([#88209](https://github.com/kubernetes/kubernetes/pull/88209), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. ([#88141](https://github.com/kubernetes/kubernetes/pull/88141), [@tedyu](https://github.com/tedyu)) [SIG Node and Storage]
-- Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. ([#87246](https://github.com/kubernetes/kubernetes/pull/87246), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Fix control plane hosts rolling upgrade causing thundering herd of LISTs on etcd leading to control plane unavailability. ([#86430](https://github.com/kubernetes/kubernetes/pull/86430), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Node and Testing]
-- Fix: add azure disk migration support for CSINode ([#88014](https://github.com/kubernetes/kubernetes/pull/88014), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: add non-retriable errors in azure clients ([#87941](https://github.com/kubernetes/kubernetes/pull/87941), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: add remediation in azure disk attach/detach ([#88444](https://github.com/kubernetes/kubernetes/pull/88444), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: azure data disk should use same key as os disk by default ([#86351](https://github.com/kubernetes/kubernetes/pull/86351), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: azure disk could not mounted on Standard_DC4s/DC2s instances ([#86612](https://github.com/kubernetes/kubernetes/pull/86612), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: azure file mount timeout issue ([#88610](https://github.com/kubernetes/kubernetes/pull/88610), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: check disk status before disk azure disk ([#88360](https://github.com/kubernetes/kubernetes/pull/88360), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: corrupted mount point in csi driver ([#88569](https://github.com/kubernetes/kubernetes/pull/88569), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fix: get azure disk lun timeout issue ([#88158](https://github.com/kubernetes/kubernetes/pull/88158), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: update azure disk max count ([#88201](https://github.com/kubernetes/kubernetes/pull/88201), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fixed "requested device X but found Y" attach error on AWS. ([#85675](https://github.com/kubernetes/kubernetes/pull/85675), [@jsafrane](https://github.com/jsafrane)) [SIG Cloud Provider and Storage]
-- Fixed NetworkPolicy validation that `Except` values are accepted when they are outside the CIDR range. ([#86578](https://github.com/kubernetes/kubernetes/pull/86578), [@tnqn](https://github.com/tnqn)) [SIG Network]
-- Fixed a bug in the TopologyManager. Previously, the TopologyManager would only guarantee alignment if container creation was serialized in some way. Alignment is now guaranteed under all scenarios of container creation. ([#87759](https://github.com/kubernetes/kubernetes/pull/87759), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed a bug which could prevent a provider ID from ever being set for node if an error occurred determining the provider ID when the node was added. ([#87043](https://github.com/kubernetes/kubernetes/pull/87043), [@zjs](https://github.com/zjs)) [SIG Apps and Cloud Provider]
-- Fixed a data race in the kubelet image manager that can cause static pod workers to silently stop working. ([#88915](https://github.com/kubernetes/kubernetes/pull/88915), [@roycaihw](https://github.com/roycaihw)) [SIG Node]
-- Fixed a panic in the kubelet cleaning up pod volumes ([#86277](https://github.com/kubernetes/kubernetes/pull/86277), [@tedyu](https://github.com/tedyu)) [SIG Storage]
-- Fixed a regression where the kubelet would fail to update the ready status of pods. ([#84951](https://github.com/kubernetes/kubernetes/pull/84951), [@tedyu](https://github.com/tedyu)) [SIG Node]
-- Fixed an issue that could cause the kubelet to incorrectly run concurrent pod reconciliation loops and crash. ([#89055](https://github.com/kubernetes/kubernetes/pull/89055), [@tedyu](https://github.com/tedyu)) [SIG Node]
-- Fixed block CSI volume cleanup after timeouts. ([#88660](https://github.com/kubernetes/kubernetes/pull/88660), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixed cleaning of CSI raw block volumes. ([#87978](https://github.com/kubernetes/kubernetes/pull/87978), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Fixed AWS Cloud Provider attempting to delete LoadBalancer security group it didn’t provision, and fixed AWS Cloud Provider creating a default LoadBalancer security group even if annotation `service.beta.kubernetes.io/aws-load-balancer-security-groups` is present because the intended behavior of aws-load-balancer-security-groups is to replace all security groups assigned to the load balancer. ([#84265](https://github.com/kubernetes/kubernetes/pull/84265), [@bhagwat070919](https://github.com/bhagwat070919)) [SIG Cloud Provider]
-- Fixed two scheduler metrics (pending_pods and schedule_attempts_total) not being recorded ([#87692](https://github.com/kubernetes/kubernetes/pull/87692), [@everpeace](https://github.com/everpeace)) [SIG Scheduling]
-- Fixes an issue with kubelet-reported pod status on deleted/recreated pods. ([#86320](https://github.com/kubernetes/kubernetes/pull/86320), [@liggitt](https://github.com/liggitt)) [SIG Node]
-- Fixes conversion error in multi-version custom resources that could cause metadata.generation to increment on no-op patches or updates of a custom resource. ([#88995](https://github.com/kubernetes/kubernetes/pull/88995), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- Fixes issue where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. The audience claim before this fix has "spn:" prefix. After this fix, "spn:" prefix is omitted. ([#86412](https://github.com/kubernetes/kubernetes/pull/86412), [@weinong](https://github.com/weinong)) [SIG API Machinery, Auth and Cloud Provider]
-- Fixes an issue where you can't attach more than 15 GCE Persistent Disks to c2, n2, m1, m2 machine types. ([#88602](https://github.com/kubernetes/kubernetes/pull/88602), [@yuga711](https://github.com/yuga711)) [SIG Storage]
-- Fixes kube-proxy when EndpointSlice feature gate is enabled on Windows. ([#86016](https://github.com/kubernetes/kubernetes/pull/86016), [@robscott](https://github.com/robscott)) [SIG Auth and Network]
-- Fixes kubelet crash in client certificate rotation cases ([#88079](https://github.com/kubernetes/kubernetes/pull/88079), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Auth and Node]
-- Fixes service account token admission error in clusters that do not run the service account token controller ([#87029](https://github.com/kubernetes/kubernetes/pull/87029), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- Fixes v1.17.0 regression in --service-cluster-ip-range handling with IPv4 ranges larger than 65536 IP addresses ([#86534](https://github.com/kubernetes/kubernetes/pull/86534), [@liggitt](https://github.com/liggitt)) [SIG Network]
-- Fixes wrong validation result of NetworkPolicy PolicyTypes ([#85747](https://github.com/kubernetes/kubernetes/pull/85747), [@tnqn](https://github.com/tnqn)) [SIG Network]
-- For subprotocol negotiation, both client and server protocol is required now. ([#86646](https://github.com/kubernetes/kubernetes/pull/86646), [@tedyu](https://github.com/tedyu)) [SIG API Machinery and Node]
-- For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. ([#88678](https://github.com/kubernetes/kubernetes/pull/88678), [@verult](https://github.com/verult)) [SIG Storage]
-- Garbage collector now can correctly orphan ControllerRevisions when StatefulSets are deleted with orphan propagation policy. ([#84984](https://github.com/kubernetes/kubernetes/pull/84984), [@cofyc](https://github.com/cofyc)) [SIG Apps]
-- `Get-kube.sh` uses the gcloud's current local GCP service account for auth when the provider is GCE or GKE instead of the metadata server default ([#88383](https://github.com/kubernetes/kubernetes/pull/88383), [@BenTheElder](https://github.com/BenTheElder)) [SIG Cluster Lifecycle]
-- Golang/x/net has been updated to bring in fixes for CVE-2020-9283 ([#88381](https://github.com/kubernetes/kubernetes/pull/88381), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
-- If a serving certificate’s param specifies a name that is an IP for an SNI certificate, it will have priority for replying to server connections. ([#85308](https://github.com/kubernetes/kubernetes/pull/85308), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- Improved yaml parsing performance ([#85458](https://github.com/kubernetes/kubernetes/pull/85458), [@cjcullen](https://github.com/cjcullen)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
-- Improves performance of the node authorizer ([#87696](https://github.com/kubernetes/kubernetes/pull/87696), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- In GKE alpha clusters it will be possible to use the service annotation `cloud.google.com/network-tier: Standard` ([#88487](https://github.com/kubernetes/kubernetes/pull/88487), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider]
-- Includes FSType when describing CSI persistent volumes. ([#85293](https://github.com/kubernetes/kubernetes/pull/85293), [@huffmanca](https://github.com/huffmanca)) [SIG CLI and Storage]
-- Iptables/userspace proxy: improve performance by getting local addresses only once per sync loop, instead of for every external IP ([#85617](https://github.com/kubernetes/kubernetes/pull/85617), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Network]
-- Kube-aggregator: always sets unavailableGauge metric to reflect the current state of a service. ([#87778](https://github.com/kubernetes/kubernetes/pull/87778), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
-- Kube-apiserver: fixed a conflict error encountered attempting to delete a pod with gracePeriodSeconds=0 and a resourceVersion precondition ([#85516](https://github.com/kubernetes/kubernetes/pull/85516), [@michaelgugino](https://github.com/michaelgugino)) [SIG API Machinery]
-- Kube-proxy no longer modifies shared EndpointSlices. ([#86092](https://github.com/kubernetes/kubernetes/pull/86092), [@robscott](https://github.com/robscott)) [SIG Network]
-- Kube-proxy: on dual-stack mode, if it is not able to get the IP Family of an endpoint, logs it with level InfoV(4) instead of Warning, avoiding flooding the logs for endpoints without addresses ([#88934](https://github.com/kubernetes/kubernetes/pull/88934), [@aojea](https://github.com/aojea)) [SIG Network]
-- Kubeadm allows to configure single-stack clusters if dual-stack is enabled ([#87453](https://github.com/kubernetes/kubernetes/pull/87453), [@aojea](https://github.com/aojea)) [SIG API Machinery, Cluster Lifecycle and Network]
-- Kubeadm now includes CoreDNS version 1.6.7 ([#86260](https://github.com/kubernetes/kubernetes/pull/86260), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Kubeadm upgrades always persist the etcd backup for stacked ([#86861](https://github.com/kubernetes/kubernetes/pull/86861), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm:  'kubeadm alpha kubelet config download' has been removed, please use 'kubeadm upgrade node phase kubelet-config' instead ([#87944](https://github.com/kubernetes/kubernetes/pull/87944), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: Forward cluster name to the controller-manager arguments ([#85817](https://github.com/kubernetes/kubernetes/pull/85817), [@ereslibre](https://github.com/ereslibre)) [SIG Cluster Lifecycle]
-- Kubeadm: add support for the "ci/k8s-master" version label as a replacement for "ci-cross/*", which no longer exists. ([#86609](https://github.com/kubernetes/kubernetes/pull/86609), [@Pensu](https://github.com/Pensu)) [SIG Cluster Lifecycle]
-- Kubeadm: apply further improvements to the tentative support for concurrent etcd member join. Fixes a bug where multiple members can receive the same hostname. Increase the etcd client dial timeout and retry timeout for add/remove/... operations. ([#87505](https://github.com/kubernetes/kubernetes/pull/87505), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: don't write the kubelet environment file on "upgrade apply" ([#85412](https://github.com/kubernetes/kubernetes/pull/85412), [@boluisa](https://github.com/boluisa)) [SIG Cluster Lifecycle]
-- Kubeadm: fix potential panic when executing "kubeadm reset" with a corrupted kubelet.conf file ([#86216](https://github.com/kubernetes/kubernetes/pull/86216), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster ([#88434](https://github.com/kubernetes/kubernetes/pull/88434), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: make sure images are pre-pulled even if a tag did not change but their contents changed ([#85603](https://github.com/kubernetes/kubernetes/pull/85603), [@bart0sh](https://github.com/bart0sh)) [SIG Cluster Lifecycle]
-- Kubeadm: remove 'kubeadm upgrade node config' command since it was deprecated in v1.15, please use 'kubeadm upgrade node phase kubelet-config' instead ([#87975](https://github.com/kubernetes/kubernetes/pull/87975), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: remove the deprecated CoreDNS feature-gate. It was set to "true" since v1.11 when the feature went GA. In v1.13 it was marked as deprecated and hidden from the CLI. ([#87400](https://github.com/kubernetes/kubernetes/pull/87400), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: retry `kubeadm-config` ConfigMap creation or mutation if the apiserver is not responding. This will improve resiliency when joining new control plane nodes. ([#85763](https://github.com/kubernetes/kubernetes/pull/85763), [@ereslibre](https://github.com/ereslibre)) [SIG Cluster Lifecycle]
-- Kubeadm: tolerate whitespace when validating certificate authority PEM data in kubeconfig files ([#86705](https://github.com/kubernetes/kubernetes/pull/86705), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: use bind-address option to configure the kube-controller-manager and kube-scheduler http probes ([#86493](https://github.com/kubernetes/kubernetes/pull/86493), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-- Kubeadm: uses the api-server AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters ([#85745](https://github.com/kubernetes/kubernetes/pull/85745), [@aojea](https://github.com/aojea)) [SIG Cluster Lifecycle]
-- Kubectl cluster-info dump --output-directory=xxx now generates files with an extension depending on the output format. ([#82070](https://github.com/kubernetes/kubernetes/pull/82070), [@olivierlemasle](https://github.com/olivierlemasle)) [SIG CLI]
-- `Kubectl describe <type>` and `kubectl top pod` will return a message saying `"No resources found"` or `"No resources found in <namespace> namespace"` if there are no results to display. ([#87527](https://github.com/kubernetes/kubernetes/pull/87527), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- `Kubectl drain node --dry-run` will list pods that would be evicted or deleted ([#82660](https://github.com/kubernetes/kubernetes/pull/82660), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-- `Kubectl set resources` will no longer return an error if passed an empty change for a resource. `kubectl set subject` will no longer return an error if passed an empty change for a resource. ([#85490](https://github.com/kubernetes/kubernetes/pull/85490), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-- Kubelet metrics gathered through metrics-server or prometheus should no longer timeout for Windows nodes running more than 3 pods. ([#87730](https://github.com/kubernetes/kubernetes/pull/87730), [@marosset](https://github.com/marosset)) [SIG Node, Testing and Windows]
-- Kubelet metrics have been changed to buckets. For example the `exec/{podNamespace}/{podID}/{containerName}` is now just exec. ([#87913](https://github.com/kubernetes/kubernetes/pull/87913), [@cheftako](https://github.com/cheftako)) [SIG Node]
-- Kubelets perform fewer unnecessary pod status update operations on the API server. ([#88591](https://github.com/kubernetes/kubernetes/pull/88591), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Scalability]
-- Kubernetes will try to acquire the iptables lock every 100 msec during 5 seconds instead of every second. This is especially useful for environments using kube-proxy in iptables mode with a high churn rate of services. ([#85771](https://github.com/kubernetes/kubernetes/pull/85771), [@aojea](https://github.com/aojea)) [SIG Network]
-- Limit number of instances in a single update to GCE target pool to 1000. ([#87881](https://github.com/kubernetes/kubernetes/pull/87881), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider, Network and Scalability]
-- Make Azure clients only retry on specified HTTP status codes ([#88017](https://github.com/kubernetes/kubernetes/pull/88017), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Make error message and service event message more clear ([#86078](https://github.com/kubernetes/kubernetes/pull/86078), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Minimize AWS NLB health check timeout when externalTrafficPolicy set to Local ([#73363](https://github.com/kubernetes/kubernetes/pull/73363), [@kellycampbell](https://github.com/kellycampbell)) [SIG Cloud Provider]
-- Pause image contains "Architecture" in non-amd64 images ([#87954](https://github.com/kubernetes/kubernetes/pull/87954), [@BenTheElder](https://github.com/BenTheElder)) [SIG Release]
-- Pause image upgraded to 3.2 in kubelet and kubeadm. ([#88173](https://github.com/kubernetes/kubernetes/pull/88173), [@BenTheElder](https://github.com/BenTheElder)) [SIG CLI, Cluster Lifecycle, Node and Testing]
-- Plugin/PluginConfig and Policy APIs are mutually exclusive when running the scheduler ([#88864](https://github.com/kubernetes/kubernetes/pull/88864), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Remove `FilteredNodesStatuses` argument from `PreScore`'s interface. ([#88189](https://github.com/kubernetes/kubernetes/pull/88189), [@skilxn-go](https://github.com/skilxn-go)) [SIG Scheduling and Testing]
-- Resolved a performance issue in the node authorizer index maintenance. ([#87693](https://github.com/kubernetes/kubernetes/pull/87693), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- Resolved regression in admission, authentication, and authorization webhook performance in v1.17.0-rc.1 ([#85810](https://github.com/kubernetes/kubernetes/pull/85810), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
-- Resolves performance regression in `kubectl get all` and in client-go discovery clients constructed using `NewDiscoveryClientForConfig` or `NewDiscoveryClientForConfigOrDie`. ([#86168](https://github.com/kubernetes/kubernetes/pull/86168), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- Reverted a kubectl azure auth module change where oidc claim spn: prefix was omitted resulting a breaking behavior with existing Azure AD OIDC enabled api-server ([#87507](https://github.com/kubernetes/kubernetes/pull/87507), [@weinong](https://github.com/weinong)) [SIG API Machinery, Auth and Cloud Provider]
-- Shared informers are now more reliable in the face of network disruption. ([#86015](https://github.com/kubernetes/kubernetes/pull/86015), [@squeed](https://github.com/squeed)) [SIG API Machinery]
-- Specifying PluginConfig for the same plugin more than once fails scheduler startup.
-  Specifying extenders and configuring .ignoredResources for the NodeResourcesFit plugin fails ([#88870](https://github.com/kubernetes/kubernetes/pull/88870), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Terminating a restartPolicy=Never pod no longer has a chance to report the pod succeeded when it actually failed. ([#88440](https://github.com/kubernetes/kubernetes/pull/88440), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Testing]
-- The CSR signing cert/key pairs will be reloaded from disk like the kube-apiserver cert/key pairs ([#86816](https://github.com/kubernetes/kubernetes/pull/86816), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps and Auth]
-- The EventRecorder from k8s.io/client-go/tools/events will now create events in the default namespace (instead of kube-system) when the related object does not have it set. ([#88815](https://github.com/kubernetes/kubernetes/pull/88815), [@enj](https://github.com/enj)) [SIG API Machinery]
-- The audit event sourceIPs list will now always end with the IP that sent the request directly to the API server. ([#87167](https://github.com/kubernetes/kubernetes/pull/87167), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Auth]
-- The sample-apiserver aggregated conformance test has updated to use the Kubernetes v1.17.0 sample apiserver ([#84735](https://github.com/kubernetes/kubernetes/pull/84735), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Architecture, CLI and Testing]
-- To reduce chances of throttling, VM cache is set to nil when Azure node provisioning state is deleting ([#87635](https://github.com/kubernetes/kubernetes/pull/87635), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- VMSS cache is added so that less chances of VMSS GET throttling ([#85885](https://github.com/kubernetes/kubernetes/pull/85885), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
-- Wait for kubelet & kube-proxy to be ready on Windows node within 10s ([#85228](https://github.com/kubernetes/kubernetes/pull/85228), [@YangLu1031](https://github.com/YangLu1031)) [SIG Cluster Lifecycle]
-- `kubectl apply  -f <file> --prune -n <namespace>` should prune all resources not defined in the file in the cli specified namespace. ([#85613](https://github.com/kubernetes/kubernetes/pull/85613), [@MartinKaburu](https://github.com/MartinKaburu)) [SIG CLI]
-- `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object ([#85889](https://github.com/kubernetes/kubernetes/pull/85889), [@oke-py](https://github.com/oke-py)) [SIG CLI]
-- `kubectl diff` now returns 1 only on diff finding changes, and >1 on kubectl errors. The "exit status code 1" message has also been muted. ([#87437](https://github.com/kubernetes/kubernetes/pull/87437), [@apelisse](https://github.com/apelisse)) [SIG CLI and Testing]
-
-## Dependencies
-
-- Update Calico to v3.8.4 ([#84163](https://github.com/kubernetes/kubernetes/pull/84163), [@david-tigera](https://github.com/david-tigera))[SIG Cluster Lifecycle]
-- Update aws-sdk-go dependency to v1.28.2 ([#87253](https://github.com/kubernetes/kubernetes/pull/87253), [@SaranBalaji90](https://github.com/SaranBalaji90))[SIG API Machinery and Cloud Provider]
-- Update CNI version to v0.8.5 ([#78819](https://github.com/kubernetes/kubernetes/pull/78819), [@justaugustus](https://github.com/justaugustus))[SIG Release, Testing, Network, Cluster Lifecycle and API Machinery]
-- Update cri-tools to v1.17.0 ([#86305](https://github.com/kubernetes/kubernetes/pull/86305), [@saschagrunert](https://github.com/saschagrunert))[SIG Release and Cluster Lifecycle]
-- Pause image upgraded to 3.2 in kubelet and kubeadm ([#88173](https://github.com/kubernetes/kubernetes/pull/88173), [@BenTheElder](https://github.com/BenTheElder))[SIG CLI, Node, Testing and Cluster Lifecycle]
-- Update CoreDNS version to 1.6.7 in kubeadm ([#86260](https://github.com/kubernetes/kubernetes/pull/86260), [@rajansandeep](https://github.com/rajansandeep))[SIG Cluster Lifecycle]
-- Update golang.org/x/crypto to fix CVE-2020-9283 ([#8838](https://github.com/kubernetes/kubernetes/pull/88381), [@BenTheElder](https://github.com/BenTheElder))[SIG CLI, Instrumentation, API Machinery, CLuster Lifecycle and Cloud Provider]
-- Update Go to 1.13.8 ([#87648](https://github.com/kubernetes/kubernetes/pull/87648), [@ialidzhikov](https://github.com/ialidzhikov))[SIG Release and Testing]
-- Update Cluster-Autoscaler to 1.18.0 ([#89095](https://github.com/kubernetes/kubernetes/pull/89095), [@losipiuk](https://github.com/losipiuk))[SIG Autoscaling and Cluster Lifecycle]
-
-
-
-# v1.18.0-rc.1
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-rc.1
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes.tar.gz) | `c17231d5de2e0677e8af8259baa11a388625821c79b86362049f2edb366404d6f4b4587b8f13ccbceeb2f32c6a9fe98607f779c0f3e1caec438f002e3a2c8c21`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-src.tar.gz) | `e84ffad57c301f5d6e90f916b996d5abb0c987928c3ca6b1565f7b042588f839b994ca12c43fc36f0ffb63f9fabc15110eb08be253b8939f49cd951e956da618`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-darwin-386.tar.gz) | `1aea99923d492436b3eb91aaecffac94e5d0aa2b38a0930d266fda85c665bbc4569745c409aa302247df3b578ce60324e7a489eb26240e97d4e65a67428ea3d1`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-darwin-amd64.tar.gz) | `07fa7340a959740bd52b83ff44438bbd988e235277dad1e43f125f08ac85230a24a3b755f4e4c8645743444fa2b66a3602fc445d7da6d2fc3770e8c21ba24b33`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-386.tar.gz) | `48cebd26448fdd47aa36257baa4c716a98fda055bbf6a05230f2a3fe3c1b99b4e483668661415392190f3eebb9cb6e15c784626b48bb2541d93a37902f0e3974`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-amd64.tar.gz) | `c3a5fedf263f07a07f59c01fea6c63c1e0b76ee8dc67c45b6c134255c28ed69171ccc2f91b6a45d6a8ec5570a0a7562e24c33b9d7b0d1a864f4dc04b178b3c04`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-arm.tar.gz) | `a6b11a55bd38583bbaac14931a6862f8ce6493afe30947ba29e5556654a571593358278df59412bbeb6888fa127e9ae4c0047a9d46cb59394995010796df6b14`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-arm64.tar.gz) | `9e15331ac8010154a9b64f5488969fc8ee2f21059639896cb84c5cf4f05f4c9d1d8970cb6f9831de6b34013848227c1972c12a698d07aac1ecc056e972fe6f79`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-ppc64le.tar.gz) | `f828fe6252678de9d4822e482f5873309ae9139b2db87298ab3273ce45d38aa07b6b9b42b76c140705f27ba71e101d58b43e59ac7259d7c08dc647ea809e207c`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-s390x.tar.gz) | `19da4b45f0666c063934af616f3e7ed3caa99d4ee1e46d53efadc7a8a4d38e43a36ced7249acd7ad3dcc4b4f60d8451b4f7ec7727e478ee2fadd14d353228bce`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-windows-386.tar.gz) | `775c9afb6cb3e7c4ba53e9f48a5df2cf207234a33059bd74448bc9f177dd120fb3f9c58ab45048a566326acc43bc8a67e886e10ef99f20780c8f63bb17426ebd`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-windows-amd64.tar.gz) | `208d2595a5b57ac97aac75b4a2a6130f0c937f781a030bde1a432daf4bc51f2fa523fca2eb84c38798489c4b536ee90aad22f7be8477985d9691d51ad8e1c4dc`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-amd64.tar.gz) | `dcf832eae04f9f52ff473754ef5cfe697b35f4dc1a282622c94fa10943c8c35f4a8777a0c58c7de871c3c428c8973bf72d6bcd8751416d4c682125268b8fcefe`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-arm.tar.gz) | `a04e34bea28eb1c8b492e8b1dd3c0dd87ebee71a7dbbef72be10a335e553361af7e48296e504f9844496b04e66350871114d20cfac3f3b49550d8be60f324ba3`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-arm64.tar.gz) | `a6af086b07a8c2e498f32b43e6511bf6a5e6baf358c572c6910c8df17cd6cae94f562f459714fcead1595767cb14c7f639c5735f1411173bbd38d5604c082a77`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-ppc64le.tar.gz) | `5a960ef5ba0c255f587f2ac0b028cd03136dc91e4efc5d1becab46417852e5524d18572b6f66259531ec6fea997da3c4d162ac153a9439672154375053fec6c7`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-s390x.tar.gz) | `0f32c7d9b14bc238b9a5764d8f00edc4d3bf36bcf06b340b81061424e6070768962425194a8c2025c3a7ffb97b1de551d3ad23d1591ae34dd4e3ba25ab364c33`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-amd64.tar.gz) | `27d8955d535d14f3f4dca501fd27e4f06fad84c6da878ea5332a5c83b6955667f6f731bfacaf5a3a23c09f14caa400f9bee927a0f269f5374de7f79cd1919b3b`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-arm.tar.gz) | `0d56eccad63ba608335988e90b377fe8ae978b177dc836cdb803a5c99d99e8f3399a666d9477ca9cfe5964944993e85c416aec10a99323e3246141efc0b1cc9e`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-arm64.tar.gz) | `79bb9be66f9e892d866b28e5cc838245818edb9706981fab6ccbff493181b341c1fcf6fe5d2342120a112eb93af413f5ba191cfba1ab4c4a8b0546a5ad8ec220`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-ppc64le.tar.gz) | `3e9e2c6f9a2747d828069511dce8b4034c773c2d122f005f4508e22518055c1e055268d9d86773bbd26fbd2d887d783f408142c6c2f56ab2f2365236fd4d2635`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-s390x.tar.gz) | `4f96e018c336fa13bb6df6f7217fe46a2b5c47f806f786499c429604ccba2ebe558503ab2c72f63250aa25b61dae2d166e4b80ae10f6ab37d714f87c1dcf6691`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-windows-amd64.tar.gz) | `ab110d76d506746af345e5897ef4f6993d5f53ac818ba69a334f3641047351aa63bfb3582841a9afca51dd0baff8b9010077d9c8ec85d2d69e4172b8d4b338b0`
-
-## Changelog since v1.18.0-beta.2
-
-## Changes by Kind
-
-### API Change
-
-- Removes ConfigMap as suggestion for IngressClass parameters ([#89093](https://github.com/kubernetes/kubernetes/pull/89093), [@robscott](https://github.com/robscott)) [SIG Network]
-
-### Other (Bug, Cleanup or Flake)
-
-- EndpointSlice should not contain endpoints for terminating pods ([#89056](https://github.com/kubernetes/kubernetes/pull/89056), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. ([#88786](https://github.com/kubernetes/kubernetes/pull/88786), [@freehan](https://github.com/freehan)) [SIG Network]
-- Fix invalid VMSS updates due to incorrect cache ([#89002](https://github.com/kubernetes/kubernetes/pull/89002), [@ArchangelSDY](https://github.com/ArchangelSDY)) [SIG Cloud Provider]
-- Fix isCurrentInstance for Windows by removing the dependency of hostname. ([#89138](https://github.com/kubernetes/kubernetes/pull/89138), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fixed a data race in kubelet image manager that can cause static pod workers to silently stop working. ([#88915](https://github.com/kubernetes/kubernetes/pull/88915), [@roycaihw](https://github.com/roycaihw)) [SIG Node]
-- Fixed an issue that could cause the kubelet to incorrectly run concurrent pod reconciliation loops and crash. ([#89055](https://github.com/kubernetes/kubernetes/pull/89055), [@tedyu](https://github.com/tedyu)) [SIG Node]
-- Kube-proxy: on dual-stack mode, if it is not able to get the IP Family of an endpoint, logs it with level InfoV(4) instead of Warning, avoiding flooding the logs for endpoints without addresses ([#88934](https://github.com/kubernetes/kubernetes/pull/88934), [@aojea](https://github.com/aojea)) [SIG Network]
-- Update Cluster Autoscaler to 1.18.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.18.0 ([#89095](https://github.com/kubernetes/kubernetes/pull/89095), [@losipiuk](https://github.com/losipiuk)) [SIG Autoscaling and Cluster Lifecycle]
-
-
-# v1.18.0-beta.2
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-beta.2
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes.tar.gz) | `3017430ca17f8a3523669b4a02c39cedfc6c48b07281bc0a67a9fbe9d76547b76f09529172cc01984765353a6134a43733b7315e0dff370bba2635dd2a6289af`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-src.tar.gz) | `c5fd60601380a99efff4458b1c9cf4dc02195f6f756b36e590e54dff68f7064daf32cf63980dddee13ef9dec7a60ad4eeb47a288083fdbbeeef4bc038384e9ea`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-darwin-386.tar.gz) | `7e49ede167b9271d4171e477fa21d267b2fb35f80869337d5b323198dc12f71b61441975bf925ad6e6cd7b61cbf6372d386417dc1e5c9b3c87ae651021c37237`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | `3f5cdf0e85eee7d0773e0ae2df1c61329dea90e0da92b02dae1ffd101008dc4bade1c4951fc09f0cad306f0bcb7d16da8654334ddee43d5015913cc4ac8f3eda`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-386.tar.gz) | `b67b41c11bfecb88017c33feee21735c56f24cf6f7851b63c752495fc0fb563cd417a67a81f46bca091f74dc00fca1f296e483d2e3dfe2004ea4b42e252d30b9`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | `1fef2197cb80003e3a5c26f05e889af9d85fbbc23e27747944d2997ace4bfa28f3670b13c08f5e26b7e274176b4e2df89c1162aebd8b9506e63b39b311b2d405`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-arm.tar.gz) | `84e5f4d9776490219ee94a84adccd5dfc7c0362eb330709771afcde95ec83f03d96fe7399eec218e47af0a1e6445e24d95e6f9c66c0882ef8233a09ff2022420`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | `ba613b114e0cca32fa21a3d10f845aa2f215d3af54e775f917ff93919f7dd7075efe254e4047a85a1f4b817fc2bd78006c2e8873885f1208cbc02db99e2e2e25`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | `502a6938d8c4bbe04abbd19b59919d86765058ff72334848be4012cec493e0e7027c6cd950cf501367ac2026eea9f518110cb72d1c792322b396fc2f73d23217`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | `c24700e0ed2ef5c1d2dd282d638c88d90392ae90ea420837b39fd8e1cfc19525017325ccda71d8472fdaea174762208c09e1bba9bbc77c89deef6fac5e847ba2`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-windows-386.tar.gz) | `0d4c5a741b052f790c8b0923c9586ee9906225e51cf4dc8a56fc303d4d61bb5bf77fba9e65151dec7be854ff31da8fc2dcd3214563e1b4b9951e6af4aa643da4`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | `841ef2e306c0c9593f04d9528ee019bf3b667761227d9afc1d6ca8bf1aa5631dc25f5fe13ff329c4bf0c816b971fd0dec808f879721e0f3bf51ce49772b38010`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | `b373df2e6ef55215e712315a5508e85a39126bd81b7b93c6b6305238919a88c740077828a6f19bcd97141951048ef7a19806ef6b1c3e1772dbc45715c5fcb3af`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-arm.tar.gz) | `b8103cb743c23076ce8dd7c2da01c8dd5a542fbac8480e82dc673139c8ee5ec4495ca33695e7a18dd36412cf1e18ed84c8de05042525ddd8e869fbdfa2766569`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | `8f8f05cf64fb9c8d80cdcb4935b2d3e3edc48bdd303231ae12f93e3f4d979237490744a11e24ba7f52dbb017ca321a8e31624dcffa391b8afda3d02078767fa0`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | `b313b911c46f2ec129537407af3f165f238e48caeb4b9e530783ffa3659304a544ed02bef8ece715c279373b9fb2c781bd4475560e02c4b98a6d79837bc81938`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | `a1b6b06571141f507b12e5ef98efb88f4b6b9aba924722b2a74f11278d29a2972ab8290608360151d124608e6e24da0eb3516d484cb5fa12ff2987562f15964a`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | `20e02ca327543cddb2568ead3d5de164cbfb2914ab6416106d906bf12fcfbc4e55b13bea4d6a515e8feab038e2c929d72c4d6909dfd7881ba69fd1e8c772ab99`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-arm.tar.gz) | `ecd817ef05d6284f9c6592b84b0a48ea31cf4487030c9fb36518474b2a33dad11b9c852774682e60e4e8b074e6bea7016584ca281dddbe2994da5eaf909025c0`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | `0020d32b7908ffd5055c8b26a8b3033e4702f89efcfffe3f6fcdb8a9921fa8eaaed4193c85597c24afd8c523662454f233521bb7055841a54c182521217ccc9d`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | `e065411d66d486e7793449c1b2f5a412510b913bf7f4e728c0a20e275642b7668957050dc266952cdff09acc391369ae6ac5230184db89af6823ba400745f2fc`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | `082ee90413beaaea41d6cbe9a18f7d783a95852607f3b94190e0ca12aacdd97d87e233b87117871bfb7d0a4b6302fbc7688549492a9bc50a2f43a5452504d3ce`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | `fb5aca0cc36be703f9d4033eababd581bac5de8399c50594db087a99ed4cb56e4920e960eb81d0132d696d094729254eeda2a5c0cb6e65e3abca6c8d61da579e`
-
-## Changelog since v1.18.0-beta.1
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
-- `kubectl` no longer defaults to `http://localhost:8080`.  If you own one of these legacy clusters, you are *strongly- encouraged to secure your server.   If you cannot secure your server, you can set `KUBERNETES_MASTER` if you were relying on that behavior and you're a client-go user. Set `--server`, `--kubeconfig` or `KUBECONFIG` to make it work in `kubectl`. ([#86173](https://github.com/kubernetes/kubernetes/pull/86173), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI and Testing]
-
-## Changes by Kind
-
-### Deprecation
-
-- AlgorithmSource is removed from v1alpha2 Scheduler ComponentConfig ([#87999](https://github.com/kubernetes/kubernetes/pull/87999), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Kube-proxy: deprecate `--healthz-port` and `--metrics-port` flag, please use `--healthz-bind-address` and `--metrics-bind-address` instead ([#88512](https://github.com/kubernetes/kubernetes/pull/88512), [@SataQiu](https://github.com/SataQiu)) [SIG Network]
-- Kubeadm: deprecate the usage of the experimental flag '--use-api' under the 'kubeadm alpha certs renew' command. ([#88827](https://github.com/kubernetes/kubernetes/pull/88827), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-
-### API Change
-
-- A new IngressClass resource has been added to enable better Ingress configuration. ([#88509](https://github.com/kubernetes/kubernetes/pull/88509), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, CLI, Network, Node and Testing]
-- Added GenericPVCDataSource feature gate to enable using arbitrary custom resources as the data source for a PVC. ([#88636](https://github.com/kubernetes/kubernetes/pull/88636), [@bswartz](https://github.com/bswartz)) [SIG Apps and Storage]
-- Allow user to specify fsgroup permission change policy for pods ([#88488](https://github.com/kubernetes/kubernetes/pull/88488), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
-- BlockVolume and CSIBlockVolume features are now GA. ([#88673](https://github.com/kubernetes/kubernetes/pull/88673), [@jsafrane](https://github.com/jsafrane)) [SIG Apps, Node and Storage]
-- CustomResourceDefinition schemas that use `x-kubernetes-list-map-keys` to specify properties that uniquely identify list items must make those properties required or have a default value, to ensure those properties are present for all list items. See https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;merge-strategy for details. ([#88076](https://github.com/kubernetes/kubernetes/pull/88076), [@eloyekunle](https://github.com/eloyekunle)) [SIG API Machinery and Testing]
-- Fixes a regression with clients prior to 1.15 not being able to update podIP in pod status, or podCIDR in node spec, against >= 1.16 API servers ([#88505](https://github.com/kubernetes/kubernetes/pull/88505), [@liggitt](https://github.com/liggitt)) [SIG Apps and Network]
-- Ingress: Add Exact and Prefix maching to Ingress PathTypes ([#88587](https://github.com/kubernetes/kubernetes/pull/88587), [@cmluciano](https://github.com/cmluciano)) [SIG Apps, Cluster Lifecycle and Network]
-- Ingress: Add alternate backends via TypedLocalObjectReference ([#88775](https://github.com/kubernetes/kubernetes/pull/88775), [@cmluciano](https://github.com/cmluciano)) [SIG Apps and Network]
-- Ingress: allow wildcard hosts in IngressRule ([#88858](https://github.com/kubernetes/kubernetes/pull/88858), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
-- Kube-controller-manager and kube-scheduler expose profiling by default to match the kube-apiserver.  Use `--enable-profiling=false` to disable. ([#88663](https://github.com/kubernetes/kubernetes/pull/88663), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Cloud Provider and Scheduling]
-- Move TaintBasedEvictions feature gates to GA ([#87487](https://github.com/kubernetes/kubernetes/pull/87487), [@skilxn-go](https://github.com/skilxn-go)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
-- New flag --endpointslice-updates-batch-period in kube-controller-manager can be used to reduce number of endpointslice updates generated by pod changes. ([#88745](https://github.com/kubernetes/kubernetes/pull/88745), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Apps and Network]
-- Scheduler Extenders can now be configured in the v1alpha2 component config ([#88768](https://github.com/kubernetes/kubernetes/pull/88768), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
-- The apiserver/v1alph1&#35;EgressSelectorConfiguration API is now beta. ([#88502](https://github.com/kubernetes/kubernetes/pull/88502), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery]
-- The storage.k8s.io/CSIDriver has moved to GA, and is now available for use. ([#84814](https://github.com/kubernetes/kubernetes/pull/84814), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, Apps, Auth, Node, Scheduling, Storage and Testing]
-- VolumePVCDataSource moves to GA in 1.18 release ([#88686](https://github.com/kubernetes/kubernetes/pull/88686), [@j-griffith](https://github.com/j-griffith)) [SIG Apps, CLI and Cluster Lifecycle]
-
-### Feature
-
-- Add `rest_client_rate_limiter_duration_seconds` metric to component-base to track client side rate limiter latency in seconds. Broken down by verb and URL. ([#88134](https://github.com/kubernetes/kubernetes/pull/88134), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Allow user to specify resource using --filename flag when invoking kubectl exec ([#88460](https://github.com/kubernetes/kubernetes/pull/88460), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Apiserver add a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver.
-  After the connection closed(received GOAWAY), the client's other in-flight requests won't be affected, and the client will reconnect.
-  The flag min value is 0 (off), max is .02 (1/50 requests); .001 (1/1000) is a recommended starting point.
-  Clusters with single apiservers, or which don't use a load balancer, should NOT enable this. ([#88567](https://github.com/kubernetes/kubernetes/pull/88567), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- Azure: add support for single stack IPv6 ([#88448](https://github.com/kubernetes/kubernetes/pull/88448), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- DefaultConstraints can be specified for the PodTopologySpread plugin in the component config ([#88671](https://github.com/kubernetes/kubernetes/pull/88671), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Kubeadm: support Windows specific kubelet flags in kubeadm-flags.env ([#88287](https://github.com/kubernetes/kubernetes/pull/88287), [@gab-satchi](https://github.com/gab-satchi)) [SIG Cluster Lifecycle and Windows]
-- Kubectl cluster-info dump changed to only display a message telling you the location where the output was written when the output is not standard output. ([#88765](https://github.com/kubernetes/kubernetes/pull/88765), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Print NotReady when pod is not ready based on its conditions. ([#88240](https://github.com/kubernetes/kubernetes/pull/88240), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Scheduler Extender API is now located under k8s.io/kube-scheduler/extender ([#88540](https://github.com/kubernetes/kubernetes/pull/88540), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
-- Signatures on scale client methods have been modified to accept `context.Context` as a first argument. Signatures of Get, Update, and Patch methods have been updated to accept GetOptions, UpdateOptions and PatchOptions respectively. ([#88599](https://github.com/kubernetes/kubernetes/pull/88599), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery, Apps, Autoscaling and CLI]
-- Signatures on the dynamic client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. ([#88906](https://github.com/kubernetes/kubernetes/pull/88906), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps, CLI, Cluster Lifecycle, Storage and Testing]
-- Signatures on the metadata client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. ([#88910](https://github.com/kubernetes/kubernetes/pull/88910), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-- Webhooks will have alpha support for network proxy ([#85870](https://github.com/kubernetes/kubernetes/pull/85870), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Auth and Testing]
-- When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, Auth, Node and Testing]
-- When deleting objects using kubectl with the --force flag, you are no longer required to also specify --grace-period=0. ([#87776](https://github.com/kubernetes/kubernetes/pull/87776), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- `kubectl` now contains a `kubectl alpha debug` command. This command allows attaching an ephemeral container to a running pod for the purposes of debugging. ([#88004](https://github.com/kubernetes/kubernetes/pull/88004), [@verb](https://github.com/verb)) [SIG CLI]
+- A defaultpreemption plugin is registered and enabled in scheduler which replaces the legacy hard-coded Pod preemption logic. ([#92049](https://github.com/kubernetes/kubernetes/pull/92049), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- A new extension point `PostFilter` is introduced to scheduler framework which runs after Filter phase to resolve scheduling filter failures. A typical implementation is running preemption logic. ([#91314](https://github.com/kubernetes/kubernetes/pull/91314), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- ACTION REQUIRED : In CoreDNS v1.7.0, [metrics names have been changed](https://github.com/coredns/coredns/blob/master/notes/coredns-1.7.0.md&#35;metric-changes) which will be backward incompatible with existing reporting formulas that use the old metrics' names. Adjust your formulas to the new names before upgrading. 
+  
+  Kubeadm now includes CoreDNS version v1.7.0. Some of the major changes include:
+  -  Fixed a bug that could cause CoreDNS to stop updating service records.
+  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
+  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
+  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
+  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
+  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92651](https://github.com/kubernetes/kubernetes/pull/92651), [@rajansandeep](https://github.com/rajansandeep)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- API requests to deprecated versions now receive a warning header in the API response, and cause a metric indicating use of a deprecated API to be published:
+  - `kubectl` outputs warnings to stderr, and accepts a `--warnings-as-errors` option to treat warnings as fatal errors
+  - `k8s.io/client-go` outputs warnings to stderr by default; override this per-client by setting `config.WarningHandler`, or per-process with `rest.SetDefaultWarningHandler()`
+  - `kube-apiserver` publishes `apiserver_requested_deprecated_apis` gauge metrics set to `1` for deprecated APIs which have been requested, with `group`, `version`, `resource`, `subresource`, and `removed_release` labels ([#73032](https://github.com/kubernetes/kubernetes/pull/73032), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, CLI, Instrumentation and Testing]
+- Add --logging-format flag for component-base. Defaults to "text" using unchanged klog. ([#89683](https://github.com/kubernetes/kubernetes/pull/89683), [@yuzhiquan](https://github.com/yuzhiquan)) [SIG Instrumentation]
+- Add --port flag to kubectl create deployment ([#91113](https://github.com/kubernetes/kubernetes/pull/91113), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
+- Add .import-restrictions file to cmd/cloud-controller-manager. ([#90630](https://github.com/kubernetes/kubernetes/pull/90630), [@nilo19](https://github.com/nilo19)) [SIG API Machinery and Cloud Provider]
+- Add Annotations to CRI-API ImageSpec objects. ([#90061](https://github.com/kubernetes/kubernetes/pull/90061), [@marosset](https://github.com/marosset)) [SIG Node and Windows]
+- Add attempts label to scheduler's PodSchedulingDuration metric. ([#92650](https://github.com/kubernetes/kubernetes/pull/92650), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
+- Add client-side and server-side dry-run support to kubectl scale ([#89666](https://github.com/kubernetes/kubernetes/pull/89666), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- Add selectors to kubectl diff ([#90857](https://github.com/kubernetes/kubernetes/pull/90857), [@sethpollack](https://github.com/sethpollack)) [SIG CLI]
+- Add support for cgroups v2 node validation ([#89901](https://github.com/kubernetes/kubernetes/pull/89901), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
+- Add support for pre allocated huge pages with different sizes, on node level ([#89252](https://github.com/kubernetes/kubernetes/pull/89252), [@odinuge](https://github.com/odinuge)) [SIG Apps and Node]
+- Add tags support for Azure File Driver ([#92825](https://github.com/kubernetes/kubernetes/pull/92825), [@ZeroMagic](https://github.com/ZeroMagic)) [SIG Cloud Provider and Storage]
+- Add tags support for azure disk driver ([#92356](https://github.com/kubernetes/kubernetes/pull/92356), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Added --privileged flag to kubectl run ([#90569](https://github.com/kubernetes/kubernetes/pull/90569), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Added a new `GetPreferredAllocation()` call to the `v1beta1` device plugin API. ([#92665](https://github.com/kubernetes/kubernetes/pull/92665), [@klueska](https://github.com/klueska)) [SIG Node and Testing]
+- Added feature support to Windows for configuring session affinity of Kubernetes services.
+  required: [Windows Server vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) (or higher) ([#91701](https://github.com/kubernetes/kubernetes/pull/91701), [@elweb9858](https://github.com/elweb9858)) [SIG Network and Windows]
+- Added kube-apiserver metrics: apiserver_current_inflight_request_measures and, when API Priority and Fairness is enable, windowed_request_stats. ([#91177](https://github.com/kubernetes/kubernetes/pull/91177), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery, Instrumentation and Testing]
+- Added service.beta.kubernetes.io/aws-load-balancer-target-node-labels annotation to target nodes in AWS LoadBalancer Services ([#90943](https://github.com/kubernetes/kubernetes/pull/90943), [@foobarfran](https://github.com/foobarfran)) [SIG Cloud Provider]
+- Adding a set of debugging endpoints under prefix "/debug/flowcontrol/*" for dumping internal states of flow-control system with different granularity. ([#90967](https://github.com/kubernetes/kubernetes/pull/90967), [@yue9944882](https://github.com/yue9944882)) [SIG API Machinery]
+- Adds profile label to kube-scheduler metric framework_extension_point_duration_seconds ([#92268](https://github.com/kubernetes/kubernetes/pull/92268), [@alculquicondor](https://github.com/alculquicondor)) [SIG Instrumentation and Scheduling]
+- Adds profile label to kube-scheduler metric schedule_attempts_total
+  - Adds result and profile label to e2e_scheduling_duration_seconds. Times for unschedulable and error attempts are now recorded. ([#92202](https://github.com/kubernetes/kubernetes/pull/92202), [@alculquicondor](https://github.com/alculquicondor)) [SIG Instrumentation and Scheduling]
+- Audit events for API requests to deprecated API versions now include a `"k8s.io/deprecated": "true"` audit annotation. If a target removal release is identified, the audit event includes a `"k8s.io/removal-release": "<majorVersion>.<minorVersion>"` audit annotation as well. ([#92842](https://github.com/kubernetes/kubernetes/pull/92842), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Instrumentation]
+- Bump Dashboard to v2.0.1 ([#91526](https://github.com/kubernetes/kubernetes/pull/91526), [@maciaszczykm](https://github.com/maciaszczykm)) [SIG Cloud Provider]
+- Cloud node-controller use InstancesV2 ([#91319](https://github.com/kubernetes/kubernetes/pull/91319), [@gongguan](https://github.com/gongguan)) [SIG Apps, Cloud Provider, Scalability and Storage]
+- Deps: Update to Golang 1.13.9
+  - build: Remove kube-cross image building ([#89275](https://github.com/kubernetes/kubernetes/pull/89275), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- Detailed scheduler scoring result can be printed at verbose level 10. ([#89384](https://github.com/kubernetes/kubernetes/pull/89384), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- E2e.test can print the list of conformance tests that need to pass for the cluster to be conformant. ([#88924](https://github.com/kubernetes/kubernetes/pull/88924), [@dims](https://github.com/dims)) [SIG Architecture and Testing]
+- Enable feature Gate DefaultPodTopologySpread to use PodTopologySpread plugin to do defaultspreading. In doing so, legacy DefaultPodTopologySpread plugin is disabled. ([#91793](https://github.com/kubernetes/kubernetes/pull/91793), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- EndpointSlice controller waits longer to retry failed sync. ([#89438](https://github.com/kubernetes/kubernetes/pull/89438), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Extend AWS azToRegion method to support Local Zones ([#90874](https://github.com/kubernetes/kubernetes/pull/90874), [@Jeffwan](https://github.com/Jeffwan)) [SIG Cloud Provider]
+- Feat: add azure shared disk support ([#89511](https://github.com/kubernetes/kubernetes/pull/89511), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Feat: change azure disk api-version ([#89250](https://github.com/kubernetes/kubernetes/pull/89250), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Feat: support [Azure shared disk](https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-shared-enable), added a new field(`maxShares`) in azure disk storage class:
+  
+  kind: StorageClass
+  apiVersion: storage.k8s.io/v1
+  metadata:
+    name: shared-disk
+  provisioner: kubernetes.io/azure-disk
+  parameters:
+    skuname: Premium_LRS  &#35; Currently only available with premium SSDs.
+    cachingMode: None  &#35; ReadOnly host caching is not available for premium SSDs with maxShares>1
+    maxShares: 2 ([#89328](https://github.com/kubernetes/kubernetes/pull/89328), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Improves IPVS proxy performance by only running `EnsureDummyInterface` if the virtual server address is not binded already. ([#92609](https://github.com/kubernetes/kubernetes/pull/92609), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network]
+- Kube-Proxy now supports EndpointSlices on Windows with the EndpointSliceProxying feature gate. ([#90909](https://github.com/kubernetes/kubernetes/pull/90909), [@kumarvin123](https://github.com/kumarvin123)) [SIG Network and Windows]
+- Kube-Proxy now supports IPv6DualStack on Windows with the IPv6DualStack feature gate. ([#90853](https://github.com/kubernetes/kubernetes/pull/90853), [@kumarvin123](https://github.com/kumarvin123)) [SIG Network, Node and Windows]
+- Kube-addon-manager has been updated to v9.1.1 to allow overriding the default list of whitelisted resources (https://github.com/kubernetes/kubernetes/pull/91018) ([#91240](https://github.com/kubernetes/kubernetes/pull/91240), [@tosi3k](https://github.com/tosi3k)) [SIG Cloud Provider, Scalability and Testing]
+- Kube-apiserver backed by etcd3 exports metric showing the database file size. ([#89151](https://github.com/kubernetes/kubernetes/pull/89151), [@jingyih](https://github.com/jingyih)) [SIG API Machinery]
+- Kube-apiserver, kube-scheduler and kube-controller manager now use SO_REUSEPORT socket option when listening on address defined by --bind-address and --secure-port flags, when running on Unix systems (Windows is NOT supported). This allows to run multiple instances of those processes on a single host with the same configuration, which allows to update/restart them in a graceful way, without causing downtime. ([#88893](https://github.com/kubernetes/kubernetes/pull/88893), [@invidian](https://github.com/invidian)) [SIG API Machinery, Scheduling and Testing]
+- Kube-apiserver: The NodeRestriction admission plugin now restricts Node labels kubelets are permitted to set when creating a new Node to the `--node-labels` parameters accepted by kubelets in 1.16+. ([#90307](https://github.com/kubernetes/kubernetes/pull/90307), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- Kube-controller-manager: add '--logging-format' flag to support structured logging ([#91521](https://github.com/kubernetes/kubernetes/pull/91521), [@SataQiu](https://github.com/SataQiu)) [SIG API Machinery and Instrumentation]
+- Kube-controller-manager: the `--experimental-cluster-signing-duration` flag is marked as deprecated for removal in v1.22, and is replaced with `--cluster-signing-duration`. ([#91154](https://github.com/kubernetes/kubernetes/pull/91154), [@liggitt](https://github.com/liggitt)) [SIG Auth and Cloud Provider]
+- Kube-proxy now consumes EndpointSlices instead of Endpoints by default on Linux. A new alpha `WindowsEndpointSliceProxying` feature gate allows the feature to be enabled on Windows. ([#92736](https://github.com/kubernetes/kubernetes/pull/92736), [@robscott](https://github.com/robscott)) [SIG Network]
+- Kube-scheduler: add '--logging-format' flag to support structured logging ([#91522](https://github.com/kubernetes/kubernetes/pull/91522), [@SataQiu](https://github.com/SataQiu)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Scheduling]
+- Kubeadm now distinguishes between generated and user supplied component configs, regenerating the former ones if a config upgrade is required ([#86070](https://github.com/kubernetes/kubernetes/pull/86070), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: Allow manually upgraded component configs to be supplied in a YAML file via the --config option during upgrade plan & apply. The old behavior of --config in which kubeadm configuration and component configs that overwrite everything cluster stored is preserved too. The behavior to use with --config is now determined based on whether kubeadm config API objects (API group "kubeadm.kubernetes.io") were supplied in the file or not. ([#91980](https://github.com/kubernetes/kubernetes/pull/91980), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: add startup probes for static Pods to protect slow starting containers ([#91179](https://github.com/kubernetes/kubernetes/pull/91179), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubeadm: deprecate the "--csr-only" and "--csr-dir" flags of the "kubeadm init phase certs" subcommands. Please use "kubeadm alpha certs generate-csr" instead. This new command allows you to generate new private keys and certificate signing requests for all the control-plane components, so that the certificates can be signed by an external CA. ([#92183](https://github.com/kubernetes/kubernetes/pull/92183), [@wallrj](https://github.com/wallrj)) [SIG Cluster Lifecycle]
+- Kubeadm: during 'upgrade apply', if the kube-proxy ConfigMap is missing, assume that kube-proxy should not be upgraded. Same applies to a missing kube-dns/coredns ConfigMap for the DNS server addon. Note that this is a temporary workaround until 'upgrade apply' supports phases. Once phases are supported the kube-proxy/dns upgrade should be skipped manually. ([#89593](https://github.com/kubernetes/kubernetes/pull/89593), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: switch control-plane static Pods to the "system-node-critical" priority class ([#90063](https://github.com/kubernetes/kubernetes/pull/90063), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: upgrade plan now prints a table indicating the state of known component configs prior to upgrade ([#88124](https://github.com/kubernetes/kubernetes/pull/88124), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubectl supports taint no without specifying(without having to type the full resource name) ([#88723](https://github.com/kubernetes/kubernetes/pull/88723), [@wawa0210](https://github.com/wawa0210)) [SIG CLI]
+- Kubelet: following metrics have been renamed:
+  kubelet_running_container_count --> kubelet_running_containers
+  kubelet_running_pod_count --> kubelet_running_pods ([#92407](https://github.com/kubernetes/kubernetes/pull/92407), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Node]
+- Kubelets configured to rotate client certificates now publish a `certificate_manager_server_ttl_seconds` gauge metric indicating the remaining seconds until certificate expiration. ([#91148](https://github.com/kubernetes/kubernetes/pull/91148), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- New scoring for PodTopologySpreading that yields better spreading ([#90475](https://github.com/kubernetes/kubernetes/pull/90475), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- No actions required. This is a small enhancement to a utility library. ([#92440](https://github.com/kubernetes/kubernetes/pull/92440), [@luigibk](https://github.com/luigibk)) [SIG Network]
+- PodTolerationRestriction: Mention Whitelist Scope in Error ([#87582](https://github.com/kubernetes/kubernetes/pull/87582), [@mrueg](https://github.com/mrueg)) [SIG Scheduling]
+- Provider-specific Notes: vsphere: vsphere.conf - new option to disable credentials secret management for performance concerns ([#90836](https://github.com/kubernetes/kubernetes/pull/90836), [@Danil-Grigorev](https://github.com/Danil-Grigorev)) [SIG Cloud Provider]
+- Rename pod_preemption_metrics to preemption_metrics. ([#93256](https://github.com/kubernetes/kubernetes/pull/93256), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
+- Rest.Config now supports a flag to override proxy configuration that was previously only configurable through environment variables. ([#81443](https://github.com/kubernetes/kubernetes/pull/81443), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery and Node]
+- Scores from PodTopologySpreading have reduced differentiation as maxSkew increases. ([#90820](https://github.com/kubernetes/kubernetes/pull/90820), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
+- Service controller: only sync LB node pools when relevant fields in Node changes ([#90769](https://github.com/kubernetes/kubernetes/pull/90769), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
+- Set CSIMigrationvSphere feature gates to beta.
+  Users should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to move workload from the in-tree vSphere plugin "kubernetes.io/vsphere-volume" to vSphere CSI Driver.
+  
+  Requires: vSphere vCenter/ESXi Version: 7.0u1, HW Version: VM version 15 ([#92816](https://github.com/kubernetes/kubernetes/pull/92816), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
+- Support `kubectl create deployment` with replicas ([#91562](https://github.com/kubernetes/kubernetes/pull/91562), [@zhouya0](https://github.com/zhouya0))
+- Support a smooth upgrade from client-side apply to server-side apply without conflicts, as well as support the corresponding downgrade. ([#90187](https://github.com/kubernetes/kubernetes/pull/90187), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery and Testing]
+- Support create or update VMSS asynchronously. ([#89248](https://github.com/kubernetes/kubernetes/pull/89248), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Support for running on a host that uses cgroups v2 unified mode ([#85218](https://github.com/kubernetes/kubernetes/pull/85218), [@giuseppe](https://github.com/giuseppe)) [SIG Node]
+- Switch core master base images (kube-apiserver, kube-scheduler) from debian to distroless ([#90674](https://github.com/kubernetes/kubernetes/pull/90674), [@dims](https://github.com/dims)) [SIG Cloud Provider, Release and Scalability]
+- Switch etcd image (with migration scripts) from debian to distroless ([#91171](https://github.com/kubernetes/kubernetes/pull/91171), [@dims](https://github.com/dims)) [SIG API Machinery and Cloud Provider]
+- The RotateKubeletClientCertificate feature gate has been promoted to GA, and the kubelet --feature-gate RotateKubeletClientCertificate parameter will be removed in 1.20. ([#91780](https://github.com/kubernetes/kubernetes/pull/91780), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- The SCTPSupport feature is now active by default. ([#88932](https://github.com/kubernetes/kubernetes/pull/88932), [@janosi](https://github.com/janosi)) [SIG Network]
+- The `certificatesigningrequests/approval` subresource now supports patch API requests ([#91558](https://github.com/kubernetes/kubernetes/pull/91558), [@liggitt](https://github.com/liggitt)) [SIG Auth and Testing]
+- The metric label name of `kubernetes_build_info` has been updated from `camel case` to `snake case`:
+  - gitVersion --> git_version
+  - gitCommit --> git_commit
+  - gitTreeState --> git_tree_state
+  - buildDate --> build_date
+  - goVersion --> go_version
+  
+  This change happens in `kube-apiserver`、`kube-scheduler`、`kube-proxy` and `kube-controller-manager`. ([#91805](https://github.com/kubernetes/kubernetes/pull/91805), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- Trace output in apiserver logs is more organized and comprehensive. Traces are nested, and for all non-long running request endpoints, the entire filter chain is instrumented (e.g. authentication check is included). ([#88936](https://github.com/kubernetes/kubernetes/pull/88936), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Scheduling]
+- Try to send watch bookmarks (if requested) periodically in addition to sending them right before timeout ([#90560](https://github.com/kubernetes/kubernetes/pull/90560), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
+- Update cri-tools to v1.18.0 ([#89720](https://github.com/kubernetes/kubernetes/pull/89720), [@saschagrunert](https://github.com/saschagrunert)) [SIG Cloud Provider, Cluster Lifecycle, Release and Scalability]
+- Update etcd client side to v3.4.4 ([#89169](https://github.com/kubernetes/kubernetes/pull/89169), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
+- Update etcd client side to v3.4.7 ([#89822](https://github.com/kubernetes/kubernetes/pull/89822), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
+- Update etcd client side to v3.4.9 ([#92075](https://github.com/kubernetes/kubernetes/pull/92075), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider and Instrumentation]
+- Upgrade to azure-sdk v40.2.0 ([#89105](https://github.com/kubernetes/kubernetes/pull/89105), [@andyzhangx](https://github.com/andyzhangx)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Storage and Testing]
+- Warn users that `kubectl port-forward` does not support UDP now ([#91616](https://github.com/kubernetes/kubernetes/pull/91616), [@knight42](https://github.com/knight42)) [SIG CLI]
+- Weight of PodTopologySpread scheduling Score is doubled. ([#91258](https://github.com/kubernetes/kubernetes/pull/91258), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- `EventRecorder()` is exposed to `FrameworkHandle` interface so that scheduler plugin developers can choose to log cluster-level events. ([#92010](https://github.com/kubernetes/kubernetes/pull/92010), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- `kubectl alpha debug` command now supports debugging pods by copy the original one. ([#90094](https://github.com/kubernetes/kubernetes/pull/90094), [@aylei](https://github.com/aylei)) [SIG CLI]
+- `kubectl alpha debug` now supports debugging nodes by creating a debugging container running in the node's host namespaces. ([#92310](https://github.com/kubernetes/kubernetes/pull/92310), [@verb](https://github.com/verb)) [SIG CLI]
+- `local-up-cluster.sh` installs CSI snapshotter by default now, can be disabled with `ENABLE_CSI_SNAPSHOTTER=false`. ([#91504](https://github.com/kubernetes/kubernetes/pull/91504), [@pohly](https://github.com/pohly))
+- `maxThreshold` of `ImageLocality` plugin is now scaled by the number of images in the pod, which helps to distinguish the node priorities for pod with several images. ([#91138](https://github.com/kubernetes/kubernetes/pull/91138), [@chendave](https://github.com/chendave)) [SIG Scheduling]
 
 ### Documentation
 
-- Update Japanese translation for kubectl help ([#86837](https://github.com/kubernetes/kubernetes/pull/86837), [@inductor](https://github.com/inductor)) [SIG CLI and Docs]
-- `kubectl plugin` now prints a note how to install krew ([#88577](https://github.com/kubernetes/kubernetes/pull/88577), [@corneliusweig](https://github.com/corneliusweig)) [SIG CLI]
+- Updated the instructions for deploying the sample app. ([#82785](https://github.com/kubernetes/kubernetes/pull/82785), [@ashish-billore](https://github.com/ashish-billore)) [SIG API Machinery]
 
-### Other (Bug, Cleanup or Flake)
+### Failing Test
 
-- Azure VMSS LoadBalancerBackendAddressPools updating has been improved with squential-sync + concurrent-async requests. ([#88699](https://github.com/kubernetes/kubernetes/pull/88699), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- AzureFile and CephFS use new Mount library that prevents logging of sensitive mount options. ([#88684](https://github.com/kubernetes/kubernetes/pull/88684), [@saad-ali](https://github.com/saad-ali)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
-- Build: Enable kube-cross image-building on K8s Infra ([#88562](https://github.com/kubernetes/kubernetes/pull/88562), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates ([#88744](https://github.com/kubernetes/kubernetes/pull/88744), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery and Auth]
-- Conformance image now depends on stretch-slim instead of debian-hyperkube-base as that image is being deprecated and removed. ([#88702](https://github.com/kubernetes/kubernetes/pull/88702), [@dims](https://github.com/dims)) [SIG Cluster Lifecycle, Release and Testing]
-- Deprecate --generator flag from kubectl create commands ([#88655](https://github.com/kubernetes/kubernetes/pull/88655), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- FIX: prevent apiserver from panicking when failing to load audit webhook config file ([#88879](https://github.com/kubernetes/kubernetes/pull/88879), [@JoshVanL](https://github.com/JoshVanL)) [SIG API Machinery and Auth]
-- Fix /readyz to return error immediately after a shutdown is initiated, before the --shutdown-delay-duration has elapsed. ([#88911](https://github.com/kubernetes/kubernetes/pull/88911), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix a bug where kubenet fails to parse the tc output. ([#83572](https://github.com/kubernetes/kubernetes/pull/83572), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
-- Fix describe ingress annotations not sorted. ([#88394](https://github.com/kubernetes/kubernetes/pull/88394), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. ([#83446](https://github.com/kubernetes/kubernetes/pull/83446), [@Elias481](https://github.com/Elias481)) [SIG Cloud Provider]
-- Fix kubectl create deployment image name ([#86636](https://github.com/kubernetes/kubernetes/pull/86636), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix missing "apiVersion" for "involvedObject" in Events for Nodes. ([#87537](https://github.com/kubernetes/kubernetes/pull/87537), [@uthark](https://github.com/uthark)) [SIG Apps and Node]
-- Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. ([#88141](https://github.com/kubernetes/kubernetes/pull/88141), [@tedyu](https://github.com/tedyu)) [SIG Node and Storage]
-- Fix: azure file mount timeout issue ([#88610](https://github.com/kubernetes/kubernetes/pull/88610), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: corrupted mount point in csi driver ([#88569](https://github.com/kubernetes/kubernetes/pull/88569), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fixed a bug in the TopologyManager. Previously, the TopologyManager would only guarantee alignment if container creation was serialized in some way. Alignment is now guaranteed under all scenarios of container creation. ([#87759](https://github.com/kubernetes/kubernetes/pull/87759), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed block CSI volume cleanup after timeouts. ([#88660](https://github.com/kubernetes/kubernetes/pull/88660), [@jsafrane](https://github.com/jsafrane)) [SIG Node and Storage]
-- Fixes issue where you can't attach more than 15 GCE Persistent Disks to c2, n2, m1, m2 machine types. ([#88602](https://github.com/kubernetes/kubernetes/pull/88602), [@yuga711](https://github.com/yuga711)) [SIG Storage]
-- For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. ([#88678](https://github.com/kubernetes/kubernetes/pull/88678), [@verult](https://github.com/verult)) [SIG Apps, Node and Storage]
-- Hide kubectl.kubernetes.io/last-applied-configuration in describe command ([#88758](https://github.com/kubernetes/kubernetes/pull/88758), [@soltysh](https://github.com/soltysh)) [SIG Auth and CLI]
-- In GKE alpha clusters it will be possible to use the service annotation `cloud.google.com/network-tier: Standard` ([#88487](https://github.com/kubernetes/kubernetes/pull/88487), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider]
-- Kubelets perform fewer unnecessary pod status update operations on the API server. ([#88591](https://github.com/kubernetes/kubernetes/pull/88591), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Scalability]
-- Plugin/PluginConfig and Policy APIs are mutually exclusive when running the scheduler ([#88864](https://github.com/kubernetes/kubernetes/pull/88864), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Specifying PluginConfig for the same plugin more than once fails scheduler startup.
+- Kube-proxy iptables min-sync-period defaults to 1 sec. Previously, it was 0. ([#92836](https://github.com/kubernetes/kubernetes/pull/92836), [@aojea](https://github.com/aojea)) [SIG Network]
 
-  Specifying extenders and configuring .ignoredResources for the NodeResourcesFit plugin fails ([#88870](https://github.com/kubernetes/kubernetes/pull/88870), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Support TLS Server Name overrides in kubeconfig file and via --tls-server-name in kubectl ([#88769](https://github.com/kubernetes/kubernetes/pull/88769), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and CLI]
-- Terminating a restartPolicy=Never pod no longer has a chance to report the pod succeeded when it actually failed. ([#88440](https://github.com/kubernetes/kubernetes/pull/88440), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Testing]
-- The EventRecorder from k8s.io/client-go/tools/events will now create events in the default namespace (instead of kube-system) when the related object does not have it set. ([#88815](https://github.com/kubernetes/kubernetes/pull/88815), [@enj](https://github.com/enj)) [SIG API Machinery]
-- The audit event sourceIPs list will now always end with the IP that sent the request directly to the API server. ([#87167](https://github.com/kubernetes/kubernetes/pull/87167), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Auth]
-- Update to use golang 1.13.8 ([#87648](https://github.com/kubernetes/kubernetes/pull/87648), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Release and Testing]
-- Validate kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout ([#88657](https://github.com/kubernetes/kubernetes/pull/88657), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
+### Bug or Regression
+
+- A PV set from in-tree source will have ordered requirement values in NodeAffinity when converted to CSIPersistentVolumeSource ([#88987](https://github.com/kubernetes/kubernetes/pull/88987), [@jiahuif](https://github.com/jiahuif)) [SIG Storage]
+- A panic in the apiserver caused by the `informer-sync` health checker is now fixed. ([#93600](https://github.com/kubernetes/kubernetes/pull/93600), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery]
+- An issue preventing GCP cloud-controller-manager running out-of-cluster to initialize new Nodes is now fixed. ([#90057](https://github.com/kubernetes/kubernetes/pull/90057), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps and Cloud Provider]
+- Avoid GCE API calls when initializing GCE CloudProvider for Kubelets. ([#90218](https://github.com/kubernetes/kubernetes/pull/90218), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider and Scalability]
+- Avoid unnecessary GCE API calls when adding IP alises or reflecting them in Node object in GCE cloud provider. ([#90242](https://github.com/kubernetes/kubernetes/pull/90242), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Cloud Provider and Network]
+- Avoid unnecessary scheduling churn when annotations are updated while Pods are being scheduled. ([#90373](https://github.com/kubernetes/kubernetes/pull/90373), [@fabiokung](https://github.com/fabiokung)) [SIG Scheduling]
+- Azure auth module for kubectl now requests login after refresh token expires. ([#86481](https://github.com/kubernetes/kubernetes/pull/86481), [@tdihp](https://github.com/tdihp)) [SIG API Machinery and Auth]
+- Azure: fix concurreny issue in lb creation ([#89604](https://github.com/kubernetes/kubernetes/pull/89604), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- Azure: per VMSS VMSS VMs cache to prevent throttling on clusters having many attached VMSS ([#93107](https://github.com/kubernetes/kubernetes/pull/93107), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
+- Azure: set dest prefix and port for IPv6 inbound security rule ([#91831](https://github.com/kubernetes/kubernetes/pull/91831), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- Base-images: Update to kube-cross:v1.13.9-5 ([#90963](https://github.com/kubernetes/kubernetes/pull/90963), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- Bug fix for AWS NLB service when nodePort for existing servicePort changed manually. ([#89562](https://github.com/kubernetes/kubernetes/pull/89562), [@M00nF1sh](https://github.com/M00nF1sh)) [SIG Cloud Provider]
+- CSINode initialization does not crash kubelet on startup when APIServer is not reachable or kubelet has not the right credentials yet. ([#89589](https://github.com/kubernetes/kubernetes/pull/89589), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- CVE-2020-8557 (Medium): Node-local denial of service via container /etc/hosts file. See https://github.com/kubernetes/kubernetes/issues/93032 for more details. ([#92916](https://github.com/kubernetes/kubernetes/pull/92916), [@joelsmith](https://github.com/joelsmith)) [SIG Node]
+- Client-go: resolves an issue with informers falling back to full list requests when timeouts are encountered, rather than re-establishing a watch. ([#89652](https://github.com/kubernetes/kubernetes/pull/89652), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
+- CloudNodeLifecycleController will check node existence status before shutdown status when monitoring nodes. ([#90737](https://github.com/kubernetes/kubernetes/pull/90737), [@jiahuif](https://github.com/jiahuif)) [SIG Apps and Cloud Provider]
+- Containers which specify a `startupProbe` but not a `readinessProbe` were previously considered "ready" before the `startupProbe` completed, but are now considered "not-ready". ([#92196](https://github.com/kubernetes/kubernetes/pull/92196), [@thockin](https://github.com/thockin)) [SIG Node]
+- Cordoned nodes are now deregistered from AWS target groups. ([#85920](https://github.com/kubernetes/kubernetes/pull/85920), [@hoelzro](https://github.com/hoelzro)) [SIG Cloud Provider]
+- Do not add nodes labeled with kubernetes.azure.com/managed=false to backend pool of load balancer. ([#93034](https://github.com/kubernetes/kubernetes/pull/93034), [@matthias50](https://github.com/matthias50)) [SIG Cloud Provider]
+- Do not retry volume expansion if CSI driver returns FailedPrecondition error ([#92986](https://github.com/kubernetes/kubernetes/pull/92986), [@gnufied](https://github.com/gnufied)) [SIG Node and Storage]
+- Dockershim security: pod sandbox now always run with `no-new-privileges` and `runtime/default` seccomp profile
+  dockershim seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90948](https://github.com/kubernetes/kubernetes/pull/90948), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
+- Dual-stack: fix the bug that Service clusterIP does not respect specified ipFamily ([#89612](https://github.com/kubernetes/kubernetes/pull/89612), [@SataQiu](https://github.com/SataQiu)) [SIG Network]
+- EndpointSliceMirroring controller now copies labels from Endpoints to EndpointSlices. ([#93442](https://github.com/kubernetes/kubernetes/pull/93442), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Ensure Azure availability zone is always in lower cases. ([#89722](https://github.com/kubernetes/kubernetes/pull/89722), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Eviction requests for pods that have a non-zero DeletionTimestamp will always succeed ([#91342](https://github.com/kubernetes/kubernetes/pull/91342), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
+- Explain CRDs whose resource name are the same as builtin objects ([#89505](https://github.com/kubernetes/kubernetes/pull/89505), [@knight42](https://github.com/knight42)) [SIG API Machinery, CLI and Testing]
+- Extend kube-apiserver /readyz with new "informer-sync" check ensuring that internal informers are synced. ([#92644](https://github.com/kubernetes/kubernetes/pull/92644), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery and Testing]
+- Extended DSR loadbalancer feature in winkernel kube-proxy to HNS versions 9.3-9.max, 10.2+ ([#93080](https://github.com/kubernetes/kubernetes/pull/93080), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
+- First pod with required affinity terms can schedule only on nodes with matching topology keys. ([#91168](https://github.com/kubernetes/kubernetes/pull/91168), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+- Fix AWS Loadbalancer VPC CIDR calculation when CIDR in disassociated state exists. ([#92227](https://github.com/kubernetes/kubernetes/pull/92227), [@M00nF1sh](https://github.com/M00nF1sh)) [SIG Cloud Provider]
+- Fix InstanceMetadataByProviderID for unmanaged nodes ([#92572](https://github.com/kubernetes/kubernetes/pull/92572), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix `VirtualMachineScaleSets.virtualMachines.GET` not allowed issues when customers have set VMSS orchestrationMode. ([#91097](https://github.com/kubernetes/kubernetes/pull/91097), [@feiskyer](https://github.com/feiskyer))
+- Fix a bug that didn't allow to use IPv6 addresses with leading zeros ([#89341](https://github.com/kubernetes/kubernetes/pull/89341), [@aojea](https://github.com/aojea)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. ([#90537](https://github.com/kubernetes/kubernetes/pull/90537), [@freehan](https://github.com/freehan)) [SIG Network]
+- Fix a condition when expiring nil VM entry in VMSS cache ([#92681](https://github.com/kubernetes/kubernetes/pull/92681), [@ArchangelSDY](https://github.com/ArchangelSDY)) [SIG Cloud Provider]
+- Fix a racing issue where the scheduler may perform unnecessary scheduling attempts. ([#90660](https://github.com/kubernetes/kubernetes/pull/90660), [@Huang-Wei](https://github.com/Huang-Wei))
+- Fix an issue with container restarts using a modified configmap or secret subpath volume mount. ([#89629](https://github.com/kubernetes/kubernetes/pull/89629), [@fatedier](https://github.com/fatedier)) [SIG Architecture, Storage and Testing]
+- Fix bug in the port allocation logic that caused that the NodePort creation with statically assigned portNumber collide in multi-master HA cluster ([#89937](https://github.com/kubernetes/kubernetes/pull/89937), [@aojea](https://github.com/aojea)) [SIG Network and Testing]
+- Fix bug with xfs_repair from stopping xfs mount ([#89444](https://github.com/kubernetes/kubernetes/pull/89444), [@gnufied](https://github.com/gnufied)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
+- Fix clusterdump info namespaces flag not working ([#91890](https://github.com/kubernetes/kubernetes/pull/91890), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix detection of SystemOOMs in which the victim is a container. ([#88871](https://github.com/kubernetes/kubernetes/pull/88871), [@dashpole](https://github.com/dashpole)) [SIG Node]
+- Fix detection of image filesystem, disk metrics for devicemapper, detection of OOM Kills on 5.0+ linux kernels. ([#92919](https://github.com/kubernetes/kubernetes/pull/92919), [@dashpole](https://github.com/dashpole)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
+- Fix etcd version migration script in etcd image. ([#91925](https://github.com/kubernetes/kubernetes/pull/91925), [@wenjiaswe](https://github.com/wenjiaswe)) [SIG API Machinery]
+- Fix flaws in Azure File CSI translation ([#90162](https://github.com/kubernetes/kubernetes/pull/90162), [@rfranzke](https://github.com/rfranzke)) [SIG Release and Storage]
+- Fix instance not found issues when an Azure Node is recreated in a short time ([#93316](https://github.com/kubernetes/kubernetes/pull/93316), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix issues when supported huge page sizes changes ([#80831](https://github.com/kubernetes/kubernetes/pull/80831), [@odinuge](https://github.com/odinuge)) [SIG Node and Testing]
+- Fix kube-apiserver startup to wait for APIServices to be installed into the HTTP handler before reporting readiness. ([#89147](https://github.com/kubernetes/kubernetes/pull/89147), [@sttts](https://github.com/sttts)) [SIG API Machinery]
+- Fix kubectl create --dryrun client ignores namespace ([#90502](https://github.com/kubernetes/kubernetes/pull/90502), [@zhouya0](https://github.com/zhouya0))
+- Fix kubectl create secret docker-registry --from-file not usable ([#90960](https://github.com/kubernetes/kubernetes/pull/90960), [@zhouya0](https://github.com/zhouya0)) [SIG CLI and Testing]
+- Fix kubectl describe CSINode nil pointer error ([#89646](https://github.com/kubernetes/kubernetes/pull/89646), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix kubectl describe node for users not having access to lease information. ([#90469](https://github.com/kubernetes/kubernetes/pull/90469), [@uthark](https://github.com/uthark)) [SIG CLI]
+- Fix kubectl describe output format for empty annotations. ([#91405](https://github.com/kubernetes/kubernetes/pull/91405), [@iyashu](https://github.com/iyashu)) [SIG CLI]
+- Fix kubectl diff so it doesn't actually persist patches ([#89795](https://github.com/kubernetes/kubernetes/pull/89795), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- Fix kubectl run  --dry-run client  ignore namespace ([#90785](https://github.com/kubernetes/kubernetes/pull/90785), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix kubectl version should print version info without config file ([#89913](https://github.com/kubernetes/kubernetes/pull/89913), [@zhouya0](https://github.com/zhouya0)) [SIG API Machinery and CLI]
+- Fix missing `-c` shorthand for `--container` flag of `kubectl alpha debug` ([#89674](https://github.com/kubernetes/kubernetes/pull/89674), [@superbrothers](https://github.com/superbrothers)) [SIG CLI]
+- Fix printers ignoring object average value ([#89142](https://github.com/kubernetes/kubernetes/pull/89142), [@zhouya0](https://github.com/zhouya0)) [SIG API Machinery]
+- Fix public IP not shown issues after assigning public IP to Azure VMs ([#90886](https://github.com/kubernetes/kubernetes/pull/90886), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix scheduler crash when removing node before its pods ([#89908](https://github.com/kubernetes/kubernetes/pull/89908), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Fix the VMSS name and resource group name when updating Azure VMSS for LoadBalancer backendPools ([#89337](https://github.com/kubernetes/kubernetes/pull/89337), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix throttling issues when Azure VM computer name prefix is different from VMSS name ([#92793](https://github.com/kubernetes/kubernetes/pull/92793), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix: Azure deallocating node should be regarded as shut down ([#92257](https://github.com/kubernetes/kubernetes/pull/92257), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: GetLabelsForVolume panic issue for azure disk PV ([#92166](https://github.com/kubernetes/kubernetes/pull/92166), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: add azure file migration support on annotation support ([#91093](https://github.com/kubernetes/kubernetes/pull/91093), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Node]
+- Fix: azure disk dangling attach issue which would cause API throttling ([#90749](https://github.com/kubernetes/kubernetes/pull/90749), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: determine the correct ip config based on ip family ([#93043](https://github.com/kubernetes/kubernetes/pull/93043), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- Fix: don't use docker config cache if it's empty ([#92330](https://github.com/kubernetes/kubernetes/pull/92330), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: fix topology issue in azure disk storage class migration ([#91196](https://github.com/kubernetes/kubernetes/pull/91196), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: get attach disk error due to missing item in max count table ([#89768](https://github.com/kubernetes/kubernetes/pull/89768), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fix: incorrect max azure disk max count ([#92331](https://github.com/kubernetes/kubernetes/pull/92331), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fix: initial delay in mounting azure disk & file ([#93052](https://github.com/kubernetes/kubernetes/pull/93052), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fix: support removal of nodes backed by deleted non VMSS instances on Azure ([#91184](https://github.com/kubernetes/kubernetes/pull/91184), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
+- Fix: use force detach for azure disk ([#91948](https://github.com/kubernetes/kubernetes/pull/91948), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fixed a 1.18 regression in wait.Forever that skips the backoff period on the first repeat ([#90476](https://github.com/kubernetes/kubernetes/pull/90476), [@zhan849](https://github.com/zhan849)) [SIG API Machinery]
+- Fixed a bug that mistake use newObj as oldObj in endpoint slice update. ([#92339](https://github.com/kubernetes/kubernetes/pull/92339), [@fatkun](https://github.com/fatkun)) [SIG Apps and Network]
+- Fixed a bug where executing a kubectl command with a jsonpath output expression that has a nested range would ignore expressions following the nested range. ([#88464](https://github.com/kubernetes/kubernetes/pull/88464), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
+- Fixed a bug whereby the allocation of reusable CPUs and devices was not being honored when the TopologyManager was enabled ([#93189](https://github.com/kubernetes/kubernetes/pull/93189), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixed a performance issue applying json patches to deeply nested objects ([#92069](https://github.com/kubernetes/kubernetes/pull/92069), [@tapih](https://github.com/tapih)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Fixed a regression preventing garbage collection of RBAC role and binding objects ([#90534](https://github.com/kubernetes/kubernetes/pull/90534), [@apelisse](https://github.com/apelisse)) [SIG Auth]
+- Fixed a regression running kubectl commands with  --local or --dry-run flags when no kubeconfig file is present ([#90243](https://github.com/kubernetes/kubernetes/pull/90243), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI and Testing]
+- Fixed ambiguous behavior when bearer token (kubectl --token=..) and an exec credential plugin was configured in the same context - the bearer token now takes precedence. ([#91745](https://github.com/kubernetes/kubernetes/pull/91745), [@anderseknert](https://github.com/anderseknert)) [SIG API Machinery, Auth and Testing]
+- Fixed an issue mounting credentials for service accounts whose name contains `.` characters ([#89696](https://github.com/kubernetes/kubernetes/pull/89696), [@nabokihms](https://github.com/nabokihms)) [SIG Auth]
+- Fixed an issue that a Pod's nominatedNodeName cannot be cleared upon node deletion. ([#91750](https://github.com/kubernetes/kubernetes/pull/91750), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- Fixed bug where a nonzero exit code was returned when initializing zsh completion even though zsh completion was successfully initialized ([#88165](https://github.com/kubernetes/kubernetes/pull/88165), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Fixed memory leak in endpointSliceTracker ([#92838](https://github.com/kubernetes/kubernetes/pull/92838), [@tnqn](https://github.com/tnqn)) [SIG Apps and Network]
+- Fixed mountOptions in iSCSI and FibreChannel volume plugins. ([#89172](https://github.com/kubernetes/kubernetes/pull/89172), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed node data lost in kube-scheduler for clusters with imbalance on number of nodes across zones ([#93355](https://github.com/kubernetes/kubernetes/pull/93355), [@maelk](https://github.com/maelk))
+- Fixed several bugs involving the IPFamily field when creating or updating services
+  in clusters with the IPv6DualStack feature gate enabled.
+  
+  Beware that the behavior of the IPFamily field is strange and inconsistent and will
+  likely be changed before the dual-stack feature goes GA. Users should treat the
+  field as "write-only" for now and should not make any assumptions about a service
+  based on its current IPFamily value. ([#91400](https://github.com/kubernetes/kubernetes/pull/91400), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
+- Fixed the EndpointSlice controller to run without error on a cluster with the OwnerReferencesPermissionEnforcement validating admission plugin enabled. ([#89741](https://github.com/kubernetes/kubernetes/pull/89741), [@marun](https://github.com/marun)) [SIG Auth and Network]
+- Fixed the EndpointSliceController to correctly create endpoints for IPv6-only pods.
+  
+  Fixed the EndpointController to allow IPv6 headless services, if the IPv6DualStack
+  feature gate is enabled, by specifying `ipFamily: IPv6` on the service. (This already
+  worked with the EndpointSliceController.) ([#91399](https://github.com/kubernetes/kubernetes/pull/91399), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
+- Fixed using of a read-only iSCSI volume in multiple pods. ([#91738](https://github.com/kubernetes/kubernetes/pull/91738), [@jsafrane](https://github.com/jsafrane)) [SIG Storage and Testing]
+- Fixes CSI volume attachment scaling issue by using informers. ([#91307](https://github.com/kubernetes/kubernetes/pull/91307), [@yuga711](https://github.com/yuga711)) [SIG API Machinery, Apps, Node, Storage and Testing]
+- Fixes a bug defining a default value for a replicas field in a custom resource definition that has the scale subresource enabled ([#89833](https://github.com/kubernetes/kubernetes/pull/89833), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Fixes a bug that non directory hostpath type can be recognized as HostPathFile and adds e2e tests for HostPathType ([#64829](https://github.com/kubernetes/kubernetes/pull/64829), [@dixudx](https://github.com/dixudx)) [SIG Apps, Storage and Testing]
+- Fixes a problem with 63-second or 1-second connection delays with some VXLAN-based
+  network plugins which was first widely noticed in 1.16 (though some users saw it
+  earlier than that, possibly only with specific network plugins). If you were previously
+  using ethtool to disable checksum offload on your primary network interface, you should
+  now be able to stop doing that. ([#92035](https://github.com/kubernetes/kubernetes/pull/92035), [@danwinship](https://github.com/danwinship)) [SIG Network and Node]
+- Fixes a regression in 1.17 that dropped cache-control headers on API requests ([#90468](https://github.com/kubernetes/kubernetes/pull/90468), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
+- Fixes conversion error for HorizontalPodAutoscaler objects with invalid annotations ([#89963](https://github.com/kubernetes/kubernetes/pull/89963), [@liggitt](https://github.com/liggitt)) [SIG Autoscaling]
+- Fixes kubectl to apply all validly built objects, instead of stopping on error. ([#89848](https://github.com/kubernetes/kubernetes/pull/89848), [@seans3](https://github.com/seans3)) [SIG CLI and Testing]
+- Fixes regression in CPUManager that caused freeing of exclusive CPUs at incorrect times ([#90377](https://github.com/kubernetes/kubernetes/pull/90377), [@cbf123](https://github.com/cbf123)) [SIG Cloud Provider and Node]
+- Fixes regression in CPUManager that had the (rare) possibility to release exclusive CPUs in app containers inherited from init containers. ([#90419](https://github.com/kubernetes/kubernetes/pull/90419), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixes v1.18.0-rc.1 regression in `kubectl port-forward` when specifying a local and remote port ([#89401](https://github.com/kubernetes/kubernetes/pull/89401), [@liggitt](https://github.com/liggitt))
+- Fixing race condition with EndpointSlice controller garbage collection. ([#91311](https://github.com/kubernetes/kubernetes/pull/91311), [@robscott](https://github.com/robscott)) [SIG Apps, Network and Testing]
+- For GCE cluster provider, fix bug of not being able to create internal type load balancer for clusters with more than 1000 nodes in a single zone. ([#89902](https://github.com/kubernetes/kubernetes/pull/89902), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider, Network and Scalability]
+- For external storage e2e test suite, update external driver, to pick snapshot provisioner from VolumeSnapshotClass, when a VolumeSnapshotClass is explicitly provided as an input. ([#90878](https://github.com/kubernetes/kubernetes/pull/90878), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
+- Get-kube.sh: fix order to get the binaries from the right bucket ([#91635](https://github.com/kubernetes/kubernetes/pull/91635), [@cpanato](https://github.com/cpanato)) [SIG Release]
+- If firstTimestamp is not set use eventTime when printing event ([#89999](https://github.com/kubernetes/kubernetes/pull/89999), [@soltysh](https://github.com/soltysh)) [SIG CLI]
+- If we set parameter cgroupPerQos=false and cgroupRoot=/docker，this function will retrun  nodeAllocatableRoot=/docker/kubepods, it is not right, the correct return should be /docker.
+  cm.NodeAllocatableRoot(s.CgroupRoot, s.CgroupDriver)
+  
+  kubeDeps.CAdvisorInterface, err = cadvisor.New(imageFsInfoProvider, s.RootDirectory, cgroupRoots, cadvisor.UsingLegacyCadvisorStats(s.ContainerRuntime, s.RemoteRuntimeEndpoint))
+  the above funtion，as we use cgroupRoots to create cadvisor interface，the wrong parameter cgroupRoots will lead eviction manager not  to collect metric from /docker, then kubelet frequently print those error：
+  E0303 17:25:03.436781 63839 summary_sys_containers.go:47] Failed to get system container stats for "/docker": failed to get cgroup stats for "/docker": failed to get container info for "/docker": unknown container "/docker"
+  E0303 17:25:03.436809 63839 helpers.go:680] eviction manager: failed to construct signal: "allocatableMemory.available" error: system container "pods" not found in metrics ([#88970](https://github.com/kubernetes/kubernetes/pull/88970), [@mysunshine92](https://github.com/mysunshine92)) [SIG Node]
+- In a HA env, during the period a standby scheduler lost connection to API server, if a Pod is deleted and recreated, and the standby scheduler becomes master afterwards, there could be a scheduler cache corruption. This PR fixes this issue. ([#91126](https://github.com/kubernetes/kubernetes/pull/91126), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- In the kubelet resource metrics endpoint at /metrics/resource, change the names of the following metrics:
+  - node_cpu_usage_seconds --> node_cpu_usage_seconds_total
+  - container_cpu_usage_seconds --> container_cpu_usage_seconds_total
+  This is a partial revert of &#35;86282, which was added in 1.18.0, and initially removed the _total suffix ([#89540](https://github.com/kubernetes/kubernetes/pull/89540), [@dashpole](https://github.com/dashpole)) [SIG Instrumentation and Node]
+- Ipvs: only attempt setting of sysctlconnreuse on supported kernels ([#88541](https://github.com/kubernetes/kubernetes/pull/88541), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
+- Jsonpath support in kubectl / client-go serializes complex types (maps / slices / structs) as json instead of Go-syntax. ([#89660](https://github.com/kubernetes/kubernetes/pull/89660), [@pjferrell](https://github.com/pjferrell)) [SIG API Machinery, CLI and Cluster Lifecycle]
+- Kube-aggregator certificates are dynamically loaded on change from disk ([#92791](https://github.com/kubernetes/kubernetes/pull/92791), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
+- Kube-apiserver: fixes scale subresource patch handling to avoid returning unnecessary 409 Conflict error to clients ([#90342](https://github.com/kubernetes/kubernetes/pull/90342), [@liggitt](https://github.com/liggitt)) [SIG Apps, Autoscaling and Testing]
+- Kube-apiserver: jsonpath expressions with consecutive recursive descent operators are no longer evaluated for custom resource printer columns ([#93408](https://github.com/kubernetes/kubernetes/pull/93408), [@joelsmith](https://github.com/joelsmith)) [SIG API Machinery]
+- Kube-apiserver: multiple comma-separated protocols in a single X-Stream-Protocol-Version header are now recognized, in addition to multiple headers, complying with RFC2616 ([#89857](https://github.com/kubernetes/kubernetes/pull/89857), [@tedyu](https://github.com/tedyu)) [SIG API Machinery]
+- Kube-proxy IP family will be determined by the nodeIP used by the proxier. The order of precedence is:
+  1. the configured --bind-address if the bind address is not 0.0.0.0 or ::
+  2. the primary IP from the Node object, if set.
+  3. if no IP is found, NodeIP defaults to 127.0.0.1 and the IP family to IPv4 ([#91725](https://github.com/kubernetes/kubernetes/pull/91725), [@aojea](https://github.com/aojea)) [SIG Network]
+- Kube-proxy, in dual-stack mode, infers the service IP family from the ClusterIP instead of using the `Service.Spec.IPFamily` field ([#91357](https://github.com/kubernetes/kubernetes/pull/91357), [@aojea](https://github.com/aojea))
+- Kube-up now includes CoreDNS version v1.7.0. Some of the major changes include:
+  -  Fixed a bug that could cause CoreDNS to stop updating service records.
+  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
+  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
+  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
+  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
+  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92718](https://github.com/kubernetes/kubernetes/pull/92718), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cloud Provider]
+- Kube-up: fixes setup of validating admission webhook credential configuration ([#91995](https://github.com/kubernetes/kubernetes/pull/91995), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider and Cluster Lifecycle]
+- Kubeadm increased to 5 minutes its timeout for the TLS bootstrapping process to complete upon join ([#89735](https://github.com/kubernetes/kubernetes/pull/89735), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: Add retries for kubeadm join / UpdateStatus to make update status more resilient by adding a retry loop to this operation ([#91952](https://github.com/kubernetes/kubernetes/pull/91952), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
+- Kubeadm: add the deprecated flag --port=0 to kube-controller-manager and kube-scheduler manifests to disable insecure serving. Without this flag the components by default serve (e.g. /metrics) insecurely on the default node interface (controlled by --address). Users that wish to override this behavior and enable insecure serving can pass a custom --port=X via kubeadm's "extraArgs" mechanic for these components. ([#92720](https://github.com/kubernetes/kubernetes/pull/92720), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: during "join", don't re-add an etcd member if it already exists in the cluster. ([#92118](https://github.com/kubernetes/kubernetes/pull/92118), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: during "reset" do not remove the only remaining stacked etcd member from the cluster and just proceed with the cleanup of the local etcd storage. ([#91145](https://github.com/kubernetes/kubernetes/pull/91145), [@tnqn](https://github.com/tnqn)) [SIG Cluster Lifecycle]
+- Kubeadm: during join when a check is performed that a Node with the same name already exists in the cluster, make sure the NodeReady condition is properly validated ([#89602](https://github.com/kubernetes/kubernetes/pull/89602), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
+- Kubeadm: ensure `image-pull-timeout` flag is respected during upgrade phase ([#90328](https://github.com/kubernetes/kubernetes/pull/90328), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where post upgrade to 1.18.x, nodes cannot join the cluster due to missing RBAC ([#89537](https://github.com/kubernetes/kubernetes/pull/89537), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: fix misleading warning about passing control-plane related flags on 'kubeadm join' ([#89596](https://github.com/kubernetes/kubernetes/pull/89596), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: increase robustness for "kubeadm join" when adding etcd members on slower setups ([#90645](https://github.com/kubernetes/kubernetes/pull/90645), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: remove duplicate DNS names and IP addresses from generated certificates ([#92753](https://github.com/kubernetes/kubernetes/pull/92753), [@QianChenglong](https://github.com/QianChenglong)) [SIG Cluster Lifecycle]
+- Kubectl azure authentication: fixed a regression in 1.18.0 where "spn:" prefix was unexpectedly added to the `apiserver-id` configuration in the kubeconfig file ([#89706](https://github.com/kubernetes/kubernetes/pull/89706), [@weinong](https://github.com/weinong)) [SIG API Machinery and Auth]
+- Kubectl: fix the bug that kubectl autoscale does not honor '--name' flag ([#91855](https://github.com/kubernetes/kubernetes/pull/91855), [@SataQiu](https://github.com/SataQiu)) [SIG CLI]
+- Kubectl: fix the bug that kubectl scale does not honor '--timeout' flag ([#91858](https://github.com/kubernetes/kubernetes/pull/91858), [@SataQiu](https://github.com/SataQiu)) [SIG CLI]
+- Kubelet: fix the bug that kubelet help information can not show the right type of flags ([#88515](https://github.com/kubernetes/kubernetes/pull/88515), [@SataQiu](https://github.com/SataQiu)) [SIG Docs and Node]
+- Kuberuntime security: pod sandbox now always runs with `runtime/default` seccomp profile
+  kuberuntime seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90949](https://github.com/kubernetes/kubernetes/pull/90949), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
+- Make Kubelet bootstrap certificate signal aware ([#92786](https://github.com/kubernetes/kubernetes/pull/92786), [@answer1991](https://github.com/answer1991)) [SIG API Machinery, Auth and Node]
+- Node ([#89677](https://github.com/kubernetes/kubernetes/pull/89677), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- On AWS nodes with multiple network interfaces, kubelet should now more reliably report addresses from secondary interfaces. ([#91889](https://github.com/kubernetes/kubernetes/pull/91889), [@anguslees](https://github.com/anguslees)) [SIG Cloud Provider]
+- Pod Conditions updates are skipped for re-scheduling attempts ([#91252](https://github.com/kubernetes/kubernetes/pull/91252), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Pods can now be considered for preemption after a previously nominated node has become unschedulable and unresolvable. ([#92604](https://github.com/kubernetes/kubernetes/pull/92604), [@soulxu](https://github.com/soulxu))
+- Prevent PVC requested size overflow when expanding or creating a volume ([#90907](https://github.com/kubernetes/kubernetes/pull/90907), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- Provides a fix to allow a cluster in a private Azure cloud to authenticate to ACR in the same cloud. ([#90425](https://github.com/kubernetes/kubernetes/pull/90425), [@DavidParks8](https://github.com/DavidParks8)) [SIG Cloud Provider]
+- Refine aws loadbalancer worker node SG rule logic to be deterministic ([#92224](https://github.com/kubernetes/kubernetes/pull/92224), [@M00nF1sh](https://github.com/M00nF1sh)) [SIG Cloud Provider]
+- Resolve regression in metadata.managedFields handling in create/update/patch requests not using server-side apply ([#91690](https://github.com/kubernetes/kubernetes/pull/91690), [@apelisse](https://github.com/apelisse)) [SIG API Machinery and Testing]
+- Resolved a regression in v1.18.0-rc.1 mounting windows volumes ([#89319](https://github.com/kubernetes/kubernetes/pull/89319), [@mboersma](https://github.com/mboersma)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
+- Resolves an issue using `kubectl certificate approve/deny` against a server serving the v1 CSR API ([#91691](https://github.com/kubernetes/kubernetes/pull/91691), [@liggitt](https://github.com/liggitt)) [SIG Auth and CLI]
+- Restore the ability to `kubectl apply --prune` without --namespace flag.  Since 1.17, `kubectl apply --prune` only prunes resources in the default namespace (or from kubeconfig) or explicitly specified in command line flag.  But this is s breaking change from kubectl 1.16, which can prune resources in all namespace in config file.  This patch restores the kubectl 1.16 behaviour. ([#89551](https://github.com/kubernetes/kubernetes/pull/89551), [@tatsuhiro-t](https://github.com/tatsuhiro-t)) [SIG CLI and Testing]
+- Restores priority of static control plane pods in the cluster/gce/manifests control-plane manifests ([#89970](https://github.com/kubernetes/kubernetes/pull/89970), [@liggitt](https://github.com/liggitt)) [SIG Cluster Lifecycle and Node]
+- Reverted devicemanager for Windows node added in 1.19rc1. ([#93263](https://github.com/kubernetes/kubernetes/pull/93263), [@liggitt](https://github.com/liggitt)) [SIG Node and Windows]
+- Scheduler v1 Policy config or algorithm-provider settings can now be passed alongside v1beta1 ComponentConfig to aid transition from Policy to CC ([#92531](https://github.com/kubernetes/kubernetes/pull/92531), [@damemi](https://github.com/damemi)) [SIG Scheduling]
+- Scheduling failures due to no nodes available are now reported as unschedulable under ```schedule_attempts_total``` metric. ([#90989](https://github.com/kubernetes/kubernetes/pull/90989), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+- Service account tokens bound to pods can now be used during the pod deletion grace period. ([#89583](https://github.com/kubernetes/kubernetes/pull/89583), [@liggitt](https://github.com/liggitt)) [SIG Auth]
+- Service load balancers no longer exclude nodes marked unschedulable from the candidate nodes. The service load balancer exclusion label should be used instead.
+  
+  Users upgrading from 1.18 who have cordoned nodes should set the `node.kubernetes.io/exclude-from-external-load-balancers` label on the impacted nodes before upgrading if they wish those nodes to remain excluded from service load balancers. ([#90823](https://github.com/kubernetes/kubernetes/pull/90823), [@smarterclayton](https://github.com/smarterclayton)) [SIG Apps, Cloud Provider and Network]
+- Support kubectl annotate --list option ([#92576](https://github.com/kubernetes/kubernetes/pull/92576), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Sync LB backend nodes for Service `Type=LoadBalancer` on Add/Delete node events. ([#81185](https://github.com/kubernetes/kubernetes/pull/81185), [@andrewsykim](https://github.com/andrewsykim))
+- The following components that do not expect non-empty, non-flag arguments will now print an error message and exit if an argument is specified: cloud-controller-manager, kube-apiserver, kube-controller-manager, kube-proxy, kubeadm {alpha|config|token|version}, kubemark. Flags should be prefixed with a single dash "-" (0x45) for short form or double dash "--" for long form. Before this change, malformed flags (for example, starting with a non-ascii dash character such as 0x8211: "–") would have been silently treated as positional arguments and ignored. ([#91349](https://github.com/kubernetes/kubernetes/pull/91349), [@neolit123](https://github.com/neolit123)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle, Network and Scheduling]
+- The terminationGracePeriodSeconds from pod spec is respected for the mirror pod. ([#92442](https://github.com/kubernetes/kubernetes/pull/92442), [@tedyu](https://github.com/tedyu)) [SIG Node and Testing]
+- Update github.com/moby/ipvs to v1.0.1 to fix IPVS compatibility issue with older kernels ([#90555](https://github.com/kubernetes/kubernetes/pull/90555), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network]
+- Updates to pod status via the status subresource now validate that `status.podIP` and `status.podIPs` fields are well-formed. ([#90628](https://github.com/kubernetes/kubernetes/pull/90628), [@liggitt](https://github.com/liggitt)) [SIG Apps and Node]
+- Wait for all CRDs to show up in discovery endpoint before reporting readiness. ([#89145](https://github.com/kubernetes/kubernetes/pull/89145), [@sttts](https://github.com/sttts)) [SIG API Machinery]
+- When evicting, Pods in Pending state are removed without checking PDBs. ([#83906](https://github.com/kubernetes/kubernetes/pull/83906), [@michaelgugino](https://github.com/michaelgugino)) [SIG API Machinery, Apps, Node and Scheduling]
+- [security] Vulnerability in golang.org/x/text/encoding/unicode ([#92219](https://github.com/kubernetes/kubernetes/pull/92219), [@voor](https://github.com/voor)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
+
+### Other (Cleanup or Flake)
+
+- --cache-dir sets cache directory for both http and discovery, defaults to $HOME/.kube/cache ([#92910](https://github.com/kubernetes/kubernetes/pull/92910), [@soltysh](https://github.com/soltysh)) [SIG API Machinery and CLI]
+- Add `pod.Namespace` to the image log ([#91945](https://github.com/kubernetes/kubernetes/pull/91945), [@zhipengzuo](https://github.com/zhipengzuo))
+- Add the ability to disable kubeconfig file lock through DISABLE_KUBECONFIG_LOCK env var ([#92513](https://github.com/kubernetes/kubernetes/pull/92513), [@soltysh](https://github.com/soltysh)) [SIG API Machinery and CLI]
+- Adds additional testing to ensure that udp pods conntrack are cleaned up ([#90180](https://github.com/kubernetes/kubernetes/pull/90180), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Architecture, Network and Testing]
+- Adjusts the fsType for cinder values to be `ext4` if no fsType is specified. ([#90608](https://github.com/kubernetes/kubernetes/pull/90608), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
+- Base-images: Use debian-base:v2.1.0 ([#90697](https://github.com/kubernetes/kubernetes/pull/90697), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery and Release]
+- Base-images: Use debian-iptables:v12.1.0 ([#90782](https://github.com/kubernetes/kubernetes/pull/90782), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
+- Beta.kubernetes.io/arch is already deprecated since v1.14, are targeted for removal in v1.18 ([#89462](https://github.com/kubernetes/kubernetes/pull/89462), [@wawa0210](https://github.com/wawa0210)) [SIG Testing]
+- Build: Update to debian-base@v2.1.2 and debian-iptables@v12.1.1 ([#93667](https://github.com/kubernetes/kubernetes/pull/93667), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
+- Change beta.kubernetes.io/os  to kubernetes.io/os ([#89460](https://github.com/kubernetes/kubernetes/pull/89460), [@wawa0210](https://github.com/wawa0210)) [SIG Testing and Windows]
+- Change beta.kubernetes.io/os to kubernetes.io/os ([#89461](https://github.com/kubernetes/kubernetes/pull/89461), [@wawa0210](https://github.com/wawa0210)) [SIG Cloud Provider and Cluster Lifecycle]
+- Changes not found message when using `kubectl get` to retrieve not namespaced resources ([#89861](https://github.com/kubernetes/kubernetes/pull/89861), [@rccrdpccl](https://github.com/rccrdpccl)) [SIG CLI]
+- CoreDNS will no longer be supporting Federation data translation for kube-dns ConfigMap ([#92716](https://github.com/kubernetes/kubernetes/pull/92716), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
+- Deprecate kubectl top flags related to heapster
+  Drop support of heapster in kubectl top ([#87498](https://github.com/kubernetes/kubernetes/pull/87498), [@serathius](https://github.com/serathius)) [SIG CLI]
+- Deprecate the `--target-ram-md` flags that is no longer used for anything. ([#91818](https://github.com/kubernetes/kubernetes/pull/91818), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
+- Drop some conformance tests that rely on Kubelet API directly ([#90615](https://github.com/kubernetes/kubernetes/pull/90615), [@dims](https://github.com/dims)) [SIG Architecture, Network, Release and Testing]
+- Emit `WaitingForPodScheduled` event if the unbound PVC is in delay binding mode but used by a pod ([#91455](https://github.com/kubernetes/kubernetes/pull/91455), [@cofyc](https://github.com/cofyc)) [SIG Storage]
+- Fix: license issue in blob disk feature ([#92824](https://github.com/kubernetes/kubernetes/pull/92824), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Improve server-side apply conflict errors by setting dedicated kubectl subcommand field managers ([#88885](https://github.com/kubernetes/kubernetes/pull/88885), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- IsFullyQualifiedDomainName() validates each label based on IsDNS1123Label. ([#90172](https://github.com/kubernetes/kubernetes/pull/90172), [@nak3](https://github.com/nak3)) [SIG API Machinery and Network]
+- It is now possible to use the service annotation `cloud.google.com/network-tier: Standard` to configure the Network Tier of the GCE Loadbalancer ([#88532](https://github.com/kubernetes/kubernetes/pull/88532), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider, Network and Testing]
+- Kube-aggregator: renames aggregator_unavailable_apiservice_count metric to aggregator_unavailable_apiservice_total ([#88156](https://github.com/kubernetes/kubernetes/pull/88156), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
+- Kube-apiserver: openapi schemas published for custom resources now reference standard ListMeta schema definitions ([#92546](https://github.com/kubernetes/kubernetes/pull/92546), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
+- Kube-proxy exposes a new metric, `kubeproxy_sync_proxy_rules_last_queued_timestamp_seconds`, that indicates the last time a change for kube-proxy was queued to be applied. ([#90175](https://github.com/kubernetes/kubernetes/pull/90175), [@squeed](https://github.com/squeed)) [SIG Instrumentation and Network]
+- Kube-scheduler: The metric name `scheduler_total_preemption_attempts` has been renamed to `scheduler_preemption_attempts_total`. ([#91448](https://github.com/kubernetes/kubernetes/pull/91448), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Scheduling]
+- Kube-up: defaults to limiting critical pods to the kube-system namespace to match behavior prior to 1.17 ([#93121](https://github.com/kubernetes/kubernetes/pull/93121), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider and Scheduling]
+- Kubeadm now forwards the IPv6DualStack feature gate using the kubelet component config, instead of the kubelet command line ([#90840](https://github.com/kubernetes/kubernetes/pull/90840), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: do not use a DaemonSet for the pre-pull of control-plane images during "kubeadm upgrade apply". Individual node upgrades now pull the required images using a preflight check. The flag "--image-pull-timeout" for "kubeadm upgrade apply" is now deprecated and will be removed in a future release following a GA deprecation policy. ([#90788](https://github.com/kubernetes/kubernetes/pull/90788), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
+- Kubeadm: use two separate checks on /livez and /readyz for the kube-apiserver static Pod instead of using /healthz ([#90970](https://github.com/kubernetes/kubernetes/pull/90970), [@johscheuer](https://github.com/johscheuer)) [SIG Cluster Lifecycle]
+- NONE ([#91597](https://github.com/kubernetes/kubernetes/pull/91597), [@elmiko](https://github.com/elmiko)) [SIG Autoscaling and Testing]
+- Openapi-controller: remove the trailing `1` character literal from the rate limiting metric `APIServiceOpenAPIAggregationControllerQueue1` and rename it to `open_api_aggregation_controller` to adhere to Prometheus best practices. ([#77979](https://github.com/kubernetes/kubernetes/pull/77979), [@s-urbaniak](https://github.com/s-urbaniak)) [SIG API Machinery]
+- Reduce event spam during a volume operation error. ([#89794](https://github.com/kubernetes/kubernetes/pull/89794), [@msau42](https://github.com/msau42)) [SIG Storage]
+- Refactor the local nodeipam range allocator and instrument the cidrset used to store the allocated CIDRs with the following metrics:
+  "cidrset_cidrs_allocations_total",
+  "cidrset_cidrs_releases_total",
+  "cidrset_usage_cidrs",
+  "cidrset_allocation_tries_per_request", ([#90288](https://github.com/kubernetes/kubernetes/pull/90288), [@aojea](https://github.com/aojea)) [SIG Apps, Instrumentation, Network and Scalability]
+- Remove deprecated --server-dry-run flag from kubectl apply ([#91308](https://github.com/kubernetes/kubernetes/pull/91308), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- Renamed DefaultPodTopologySpread plugin to SelectorSpread plugin to avoid naming conflicts with feature Gate DefaultPodTopologySpread ([#92501](https://github.com/kubernetes/kubernetes/pull/92501), [@rakeshreddybandi](https://github.com/rakeshreddybandi)) [SIG Release, Scheduling and Testing]
+- Replace framework.Failf with ExpectNoError ([#91811](https://github.com/kubernetes/kubernetes/pull/91811), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG Instrumentation, Storage and Testing]
+- Scheduler PreScore plugins are not executed if there is one filtered node or less. ([#89370](https://github.com/kubernetes/kubernetes/pull/89370), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+- The "HostPath should give a volume the correct mode" is no longer a conformance test ([#90861](https://github.com/kubernetes/kubernetes/pull/90861), [@dims](https://github.com/dims)) [SIG Architecture and Testing]
+- The Kubelet's `--experimental-allocatable-ignore-eviction` option is now marked as deprecated. ([#91578](https://github.com/kubernetes/kubernetes/pull/91578), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's `--experimental-mounter-path` and `--experimental-check-node-capabilities-before-mount` options are now marked as deprecated. ([#91373](https://github.com/kubernetes/kubernetes/pull/91373), [@knabben](https://github.com/knabben))
+- The PR adds functionality to generate events when a PV or PVC processing encounters certain failures. The events help users to know the reason for the failure so they can take necessary recovery actions. ([#89845](https://github.com/kubernetes/kubernetes/pull/89845), [@yuga711](https://github.com/yuga711)) [SIG Apps]
+- The PodShareProcessNamespace feature gate has been removed, and the PodShareProcessNamespace is unconditionally enabled. ([#90099](https://github.com/kubernetes/kubernetes/pull/90099), [@tanjunchen](https://github.com/tanjunchen)) [SIG Node]
+- The kube-apiserver `--kubelet-https` flag is deprecated. kube-apiserver connections to kubelets now unconditionally use `https` (kubelets have unconditionally used `https` to serve the endpoints the apiserver communicates with since before v1.0). ([#91630](https://github.com/kubernetes/kubernetes/pull/91630), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Node]
+- Update CNI to v0.8.6 ([#91370](https://github.com/kubernetes/kubernetes/pull/91370), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Network, Release and Testing]
+- Update Golang to v1.14.5
+  - Update repo-infra to 0.0.7 (to support go1.14.5 and go1.13.13)
+    - Includes:
+      - bazelbuild/bazel-toolchains@3.3.2
+      - bazelbuild/rules_go@v0.22.7 ([#93088](https://github.com/kubernetes/kubernetes/pull/93088), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- Update Golang to v1.14.6
+  - Update repo-infra to 0.0.8 (to support go1.14.6 and go1.13.14)
+    - Includes:
+      - bazelbuild/bazel-toolchains@3.4.0
+      - bazelbuild/rules_go@v0.22.8 ([#93198](https://github.com/kubernetes/kubernetes/pull/93198), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- Update corefile-migration library to 1.0.8 ([#91856](https://github.com/kubernetes/kubernetes/pull/91856), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- Update default etcd server version to 3.4.4 ([#89214](https://github.com/kubernetes/kubernetes/pull/89214), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cluster Lifecycle and Testing]
+- Update default etcd server version to 3.4.7 ([#89895](https://github.com/kubernetes/kubernetes/pull/89895), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cluster Lifecycle and Testing]
+- Update default etcd server version to 3.4.9 ([#92349](https://github.com/kubernetes/kubernetes/pull/92349), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
+- Update go.etcd.io/bbolt to v1.3.5 ([#92350](https://github.com/kubernetes/kubernetes/pull/92350), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery and Cloud Provider]
+- Update opencontainers/runtime-spec dependency to v1.0.2 ([#89644](https://github.com/kubernetes/kubernetes/pull/89644), [@saschagrunert](https://github.com/saschagrunert)) [SIG Node]
+- `beta.kubernetes.io/os` and `beta.kubernetes.io/arch` node labels are deprecated. Update node selectors to use `kubernetes.io/os` and `kubernetes.io/arch`. ([#91046](https://github.com/kubernetes/kubernetes/pull/91046), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and Node]
+- `kubectl config view` now redacts bearer tokens by default, similar to client certificates. The `--raw` flag can still be used to output full content. ([#88985](https://github.com/kubernetes/kubernetes/pull/88985), [@puerco](https://github.com/puerco))
+
+## Dependencies
+
+### Added
+- cloud.google.com/go/bigquery: v1.0.1
+- cloud.google.com/go/datastore: v1.0.0
+- cloud.google.com/go/pubsub: v1.0.1
+- cloud.google.com/go/storage: v1.0.0
+- dmitri.shuralyov.com/gpu/mtl: 666a987
+- github.com/cespare/xxhash/v2: [v2.1.1](https://github.com/cespare/xxhash/v2/tree/v2.1.1)
+- github.com/checkpoint-restore/go-criu/v4: [v4.0.2](https://github.com/checkpoint-restore/go-criu/v4/tree/v4.0.2)
+- github.com/chzyer/logex: [v1.1.10](https://github.com/chzyer/logex/tree/v1.1.10)
+- github.com/chzyer/readline: [2972be2](https://github.com/chzyer/readline/tree/2972be2)
+- github.com/chzyer/test: [a1ea475](https://github.com/chzyer/test/tree/a1ea475)
+- github.com/containerd/cgroups: [0dbf7f0](https://github.com/containerd/cgroups/tree/0dbf7f0)
+- github.com/containerd/continuity: [aaeac12](https://github.com/containerd/continuity/tree/aaeac12)
+- github.com/containerd/fifo: [a9fb20d](https://github.com/containerd/fifo/tree/a9fb20d)
+- github.com/containerd/go-runc: [5a6d9f3](https://github.com/containerd/go-runc/tree/5a6d9f3)
+- github.com/containerd/ttrpc: [v1.0.0](https://github.com/containerd/ttrpc/tree/v1.0.0)
+- github.com/coreos/bbolt: [v1.3.2](https://github.com/coreos/bbolt/tree/v1.3.2)
+- github.com/coreos/go-systemd/v22: [v22.1.0](https://github.com/coreos/go-systemd/v22/tree/v22.1.0)
+- github.com/cpuguy83/go-md2man/v2: [v2.0.0](https://github.com/cpuguy83/go-md2man/v2/tree/v2.0.0)
+- github.com/docopt/docopt-go: [ee0de3b](https://github.com/docopt/docopt-go/tree/ee0de3b)
+- github.com/go-gl/glfw/v3.3/glfw: [12ad95a](https://github.com/go-gl/glfw/v3.3/glfw/tree/12ad95a)
+- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
+- github.com/godbus/dbus/v5: [v5.0.3](https://github.com/godbus/dbus/v5/tree/v5.0.3)
+- github.com/ianlancetaylor/demangle: [5e5cf60](https://github.com/ianlancetaylor/demangle/tree/5e5cf60)
+- github.com/ishidawataru/sctp: [7c296d4](https://github.com/ishidawataru/sctp/tree/7c296d4)
+- github.com/moby/ipvs: [v1.0.1](https://github.com/moby/ipvs/tree/v1.0.1)
+- github.com/moby/sys/mountinfo: [v0.1.3](https://github.com/moby/sys/mountinfo/tree/v0.1.3)
+- github.com/moby/term: [672ec06](https://github.com/moby/term/tree/672ec06)
+- github.com/russross/blackfriday/v2: [v2.0.1](https://github.com/russross/blackfriday/v2/tree/v2.0.1)
+- github.com/shurcooL/sanitized_anchor_name: [v1.0.0](https://github.com/shurcooL/sanitized_anchor_name/tree/v1.0.0)
+- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
+- github.com/yuin/goldmark: [v1.1.27](https://github.com/yuin/goldmark/tree/v1.1.27)
+- google.golang.org/protobuf: v1.24.0
+- gotest.tools/v3: v3.0.2
+- k8s.io/klog/v2: v2.2.0
+
+### Changed
+- cloud.google.com/go: v0.38.0 → v0.51.0
+- github.com/Azure/azure-sdk-for-go: [v35.0.0+incompatible → v43.0.0+incompatible](https://github.com/Azure/azure-sdk-for-go/compare/v35.0.0...v43.0.0)
+- github.com/Azure/go-autorest/autorest/adal: [v0.5.0 → v0.8.2](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.5.0...v0.8.2)
+- github.com/Azure/go-autorest/autorest/date: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.1.0...v0.2.0)
+- github.com/Azure/go-autorest/autorest/mocks: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.2.0...v0.3.0)
+- github.com/Azure/go-autorest/autorest: [v0.9.0 → v0.9.6](https://github.com/Azure/go-autorest/autorest/compare/v0.9.0...v0.9.6)
+- github.com/GoogleCloudPlatform/k8s-cloud-provider: [27a4ced → 7901bc8](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/compare/27a4ced...7901bc8)
+- github.com/Microsoft/go-winio: [v0.4.14 → fc70bd9](https://github.com/Microsoft/go-winio/compare/v0.4.14...fc70bd9)
+- github.com/Microsoft/hcsshim: [672e52e → 5eafd15](https://github.com/Microsoft/hcsshim/compare/672e52e...5eafd15)
+- github.com/alecthomas/template: [a0175ee → fb15b89](https://github.com/alecthomas/template/compare/a0175ee...fb15b89)
+- github.com/alecthomas/units: [2efee85 → c3de453](https://github.com/alecthomas/units/compare/2efee85...c3de453)
+- github.com/beorn7/perks: [v1.0.0 → v1.0.1](https://github.com/beorn7/perks/compare/v1.0.0...v1.0.1)
+- github.com/cilium/ebpf: [95b36a5 → 1c8d4c9](https://github.com/cilium/ebpf/compare/95b36a5...1c8d4c9)
+- github.com/containerd/console: [84eeaae → v1.0.0](https://github.com/containerd/console/compare/84eeaae...v1.0.0)
+- github.com/containerd/containerd: [v1.0.2 → v1.3.3](https://github.com/containerd/containerd/compare/v1.0.2...v1.3.3)
+- github.com/containerd/typeurl: [2a93cfd → v1.0.0](https://github.com/containerd/typeurl/compare/2a93cfd...v1.0.0)
+- github.com/containernetworking/cni: [v0.7.1 → v0.8.0](https://github.com/containernetworking/cni/compare/v0.7.1...v0.8.0)
+- github.com/coredns/corefile-migration: [v1.0.6 → v1.0.10](https://github.com/coredns/corefile-migration/compare/v1.0.6...v1.0.10)
+- github.com/coreos/pkg: [97fdf19 → 399ea9e](https://github.com/coreos/pkg/compare/97fdf19...399ea9e)
+- github.com/docker/docker: [be7ac8b → aa6a989](https://github.com/docker/docker/compare/be7ac8b...aa6a989)
+- github.com/docker/go-connections: [v0.3.0 → v0.4.0](https://github.com/docker/go-connections/compare/v0.3.0...v0.4.0)
+- github.com/evanphx/json-patch: [v4.2.0+incompatible → e83c0a1](https://github.com/evanphx/json-patch/compare/v4.2.0...e83c0a1)
+- github.com/fsnotify/fsnotify: [v1.4.7 → v1.4.9](https://github.com/fsnotify/fsnotify/compare/v1.4.7...v1.4.9)
+- github.com/go-kit/kit: [v0.8.0 → v0.9.0](https://github.com/go-kit/kit/compare/v0.8.0...v0.9.0)
+- github.com/go-logfmt/logfmt: [v0.3.0 → v0.4.0](https://github.com/go-logfmt/logfmt/compare/v0.3.0...v0.4.0)
+- github.com/go-logr/logr: [v0.1.0 → v0.2.0](https://github.com/go-logr/logr/compare/v0.1.0...v0.2.0)
+- github.com/golang/groupcache: [02826c3 → 215e871](https://github.com/golang/groupcache/compare/02826c3...215e871)
+- github.com/golang/protobuf: [v1.3.2 → v1.4.2](https://github.com/golang/protobuf/compare/v1.3.2...v1.4.2)
+- github.com/google/cadvisor: [v0.35.0 → v0.37.0](https://github.com/google/cadvisor/compare/v0.35.0...v0.37.0)
+- github.com/google/go-cmp: [v0.3.0 → v0.4.0](https://github.com/google/go-cmp/compare/v0.3.0...v0.4.0)
+- github.com/google/pprof: [3ea8567 → d4f498a](https://github.com/google/pprof/compare/3ea8567...d4f498a)
+- github.com/googleapis/gax-go/v2: [v2.0.4 → v2.0.5](https://github.com/googleapis/gax-go/v2/compare/v2.0.4...v2.0.5)
+- github.com/googleapis/gnostic: [v0.1.0 → v0.4.1](https://github.com/googleapis/gnostic/compare/v0.1.0...v0.4.1)
+- github.com/gorilla/mux: [v1.7.0 → v1.7.3](https://github.com/gorilla/mux/compare/v1.7.0...v1.7.3)
+- github.com/json-iterator/go: [v1.1.8 → v1.1.10](https://github.com/json-iterator/go/compare/v1.1.8...v1.1.10)
+- github.com/jstemmer/go-junit-report: [af01ea7 → v0.9.1](https://github.com/jstemmer/go-junit-report/compare/af01ea7...v0.9.1)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.1 → v1.0.3](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.1...v1.0.3)
+- github.com/kr/pretty: [v0.1.0 → v0.2.0](https://github.com/kr/pretty/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-isatty: [v0.0.9 → v0.0.4](https://github.com/mattn/go-isatty/compare/v0.0.9...v0.0.4)
+- github.com/matttproud/golang_protobuf_extensions: [v1.0.1 → c182aff](https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.1...c182aff)
+- github.com/mistifyio/go-zfs: [v2.1.1+incompatible → f784269](https://github.com/mistifyio/go-zfs/compare/v2.1.1...f784269)
+- github.com/mrunalp/fileutils: [7d4729f → abd8a0e](https://github.com/mrunalp/fileutils/compare/7d4729f...abd8a0e)
+- github.com/opencontainers/runc: [v1.0.0-rc10 → 819fcc6](https://github.com/opencontainers/runc/compare/v1.0.0-rc10...819fcc6)
+- github.com/opencontainers/runtime-spec: [v1.0.0 → 237cc4f](https://github.com/opencontainers/runtime-spec/compare/v1.0.0...237cc4f)
+- github.com/opencontainers/selinux: [5215b18 → v1.5.2](https://github.com/opencontainers/selinux/compare/5215b18...v1.5.2)
+- github.com/pkg/errors: [v0.8.1 → v0.9.1](https://github.com/pkg/errors/compare/v0.8.1...v0.9.1)
+- github.com/prometheus/client_golang: [v1.0.0 → v1.7.1](https://github.com/prometheus/client_golang/compare/v1.0.0...v1.7.1)
+- github.com/prometheus/common: [v0.4.1 → v0.10.0](https://github.com/prometheus/common/compare/v0.4.1...v0.10.0)
+- github.com/prometheus/procfs: [v0.0.2 → v0.1.3](https://github.com/prometheus/procfs/compare/v0.0.2...v0.1.3)
+- github.com/rubiojr/go-vhd: [0bfd3b3 → 02e2102](https://github.com/rubiojr/go-vhd/compare/0bfd3b3...02e2102)
+- github.com/sirupsen/logrus: [v1.4.2 → v1.6.0](https://github.com/sirupsen/logrus/compare/v1.4.2...v1.6.0)
+- github.com/spf13/cobra: [v0.0.5 → v1.0.0](https://github.com/spf13/cobra/compare/v0.0.5...v1.0.0)
+- github.com/spf13/viper: [v1.3.2 → v1.4.0](https://github.com/spf13/viper/compare/v1.3.2...v1.4.0)
+- github.com/tmc/grpc-websocket-proxy: [89b8d40 → 0ad062e](https://github.com/tmc/grpc-websocket-proxy/compare/89b8d40...0ad062e)
+- github.com/urfave/cli: [v1.20.0 → v1.22.2](https://github.com/urfave/cli/compare/v1.20.0...v1.22.2)
+- github.com/vishvananda/netlink: [v1.0.0 → v1.1.0](https://github.com/vishvananda/netlink/compare/v1.0.0...v1.1.0)
+- github.com/vishvananda/netns: [be1fbed → 52d707b](https://github.com/vishvananda/netns/compare/be1fbed...52d707b)
+- go.etcd.io/bbolt: v1.3.3 → v1.3.5
+- go.etcd.io/etcd: 3cf2f69 → 18dfb9c
+- go.opencensus.io: v0.21.0 → v0.22.2
+- go.uber.org/atomic: v1.3.2 → v1.4.0
+- golang.org/x/crypto: bac4c82 → 75b2880
+- golang.org/x/exp: 4b39c73 → da58074
+- golang.org/x/image: 0694c2d → cff245a
+- golang.org/x/lint: 959b441 → fdd1cda
+- golang.org/x/mobile: d3739f8 → d2bd2a2
+- golang.org/x/mod: 4bf6d31 → v0.3.0
+- golang.org/x/net: 13f9640 → ab34263
+- golang.org/x/oauth2: 0f29369 → 858c2ad
+- golang.org/x/sys: fde4db3 → ed371f2
+- golang.org/x/text: v0.3.2 → v0.3.3
+- golang.org/x/time: 9d24e82 → 555d28b
+- golang.org/x/tools: 65e3620 → c1934b7
+- golang.org/x/xerrors: a985d34 → 9bdfabe
+- google.golang.org/api: 5213b80 → v0.15.1
+- google.golang.org/appengine: v1.5.0 → v1.6.5
+- google.golang.org/genproto: 24fa4b2 → cb27e3a
+- google.golang.org/grpc: v1.26.0 → v1.27.0
+- gopkg.in/check.v1: 788fd78 → 41f04d3
+- honnef.co/go/tools: v0.0.1-2019.2.2 → v0.0.1-2019.2.3
+- k8s.io/gengo: 36b2048 → 8167cfd
+- k8s.io/kube-openapi: bf4fb3b → 656914f
+- k8s.io/system-validators: v1.0.4 → v1.1.2
+- k8s.io/utils: 0a110f9 → d5654de
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.7 → v0.0.9
+- sigs.k8s.io/structured-merge-diff/v3: v3.0.0 → 43c19bb
+
+### Removed
+- github.com/OpenPeeDeeP/depguard: [v1.0.1](https://github.com/OpenPeeDeeP/depguard/tree/v1.0.1)
+- github.com/Rican7/retry: [v0.1.0](https://github.com/Rican7/retry/tree/v0.1.0)
+- github.com/StackExchange/wmi: [5d04971](https://github.com/StackExchange/wmi/tree/5d04971)
+- github.com/anmitsu/go-shlex: [648efa6](https://github.com/anmitsu/go-shlex/tree/648efa6)
+- github.com/bazelbuild/bazel-gazelle: [70208cb](https://github.com/bazelbuild/bazel-gazelle/tree/70208cb)
+- github.com/bazelbuild/buildtools: [69366ca](https://github.com/bazelbuild/buildtools/tree/69366ca)
+- github.com/bazelbuild/rules_go: [6dae44d](https://github.com/bazelbuild/rules_go/tree/6dae44d)
+- github.com/bradfitz/go-smtpd: [deb6d62](https://github.com/bradfitz/go-smtpd/tree/deb6d62)
+- github.com/cespare/prettybench: [03b8cfe](https://github.com/cespare/prettybench/tree/03b8cfe)
+- github.com/checkpoint-restore/go-criu: [17b0214](https://github.com/checkpoint-restore/go-criu/tree/17b0214)
+- github.com/client9/misspell: [v0.3.4](https://github.com/client9/misspell/tree/v0.3.4)
+- github.com/coreos/go-etcd: [v2.0.0+incompatible](https://github.com/coreos/go-etcd/tree/v2.0.0)
+- github.com/cpuguy83/go-md2man: [v1.0.10](https://github.com/cpuguy83/go-md2man/tree/v1.0.10)
+- github.com/docker/libnetwork: [c8a5fca](https://github.com/docker/libnetwork/tree/c8a5fca)
+- github.com/gliderlabs/ssh: [v0.1.1](https://github.com/gliderlabs/ssh/tree/v0.1.1)
+- github.com/go-critic/go-critic: [1df3008](https://github.com/go-critic/go-critic/tree/1df3008)
+- github.com/go-lintpack/lintpack: [v0.5.2](https://github.com/go-lintpack/lintpack/tree/v0.5.2)
+- github.com/go-ole/go-ole: [v1.2.1](https://github.com/go-ole/go-ole/tree/v1.2.1)
+- github.com/go-toolsmith/astcast: [v1.0.0](https://github.com/go-toolsmith/astcast/tree/v1.0.0)
+- github.com/go-toolsmith/astcopy: [v1.0.0](https://github.com/go-toolsmith/astcopy/tree/v1.0.0)
+- github.com/go-toolsmith/astequal: [v1.0.0](https://github.com/go-toolsmith/astequal/tree/v1.0.0)
+- github.com/go-toolsmith/astfmt: [v1.0.0](https://github.com/go-toolsmith/astfmt/tree/v1.0.0)
+- github.com/go-toolsmith/astinfo: [9809ff7](https://github.com/go-toolsmith/astinfo/tree/9809ff7)
+- github.com/go-toolsmith/astp: [v1.0.0](https://github.com/go-toolsmith/astp/tree/v1.0.0)
+- github.com/go-toolsmith/pkgload: [v1.0.0](https://github.com/go-toolsmith/pkgload/tree/v1.0.0)
+- github.com/go-toolsmith/strparse: [v1.0.0](https://github.com/go-toolsmith/strparse/tree/v1.0.0)
+- github.com/go-toolsmith/typep: [v1.0.0](https://github.com/go-toolsmith/typep/tree/v1.0.0)
+- github.com/gobwas/glob: [v0.2.3](https://github.com/gobwas/glob/tree/v0.2.3)
+- github.com/godbus/dbus: [2ff6f7f](https://github.com/godbus/dbus/tree/2ff6f7f)
+- github.com/golangci/check: [cfe4005](https://github.com/golangci/check/tree/cfe4005)
+- github.com/golangci/dupl: [3e9179a](https://github.com/golangci/dupl/tree/3e9179a)
+- github.com/golangci/errcheck: [ef45e06](https://github.com/golangci/errcheck/tree/ef45e06)
+- github.com/golangci/go-misc: [927a3d8](https://github.com/golangci/go-misc/tree/927a3d8)
+- github.com/golangci/go-tools: [e32c541](https://github.com/golangci/go-tools/tree/e32c541)
+- github.com/golangci/goconst: [041c5f2](https://github.com/golangci/goconst/tree/041c5f2)
+- github.com/golangci/gocyclo: [2becd97](https://github.com/golangci/gocyclo/tree/2becd97)
+- github.com/golangci/gofmt: [0b8337e](https://github.com/golangci/gofmt/tree/0b8337e)
+- github.com/golangci/golangci-lint: [v1.18.0](https://github.com/golangci/golangci-lint/tree/v1.18.0)
+- github.com/golangci/gosec: [66fb7fc](https://github.com/golangci/gosec/tree/66fb7fc)
+- github.com/golangci/ineffassign: [42439a7](https://github.com/golangci/ineffassign/tree/42439a7)
+- github.com/golangci/lint-1: [ee948d0](https://github.com/golangci/lint-1/tree/ee948d0)
+- github.com/golangci/maligned: [b1d8939](https://github.com/golangci/maligned/tree/b1d8939)
+- github.com/golangci/misspell: [950f5d1](https://github.com/golangci/misspell/tree/950f5d1)
+- github.com/golangci/prealloc: [215b22d](https://github.com/golangci/prealloc/tree/215b22d)
+- github.com/golangci/revgrep: [d9c87f5](https://github.com/golangci/revgrep/tree/d9c87f5)
+- github.com/golangci/unconvert: [28b1c44](https://github.com/golangci/unconvert/tree/28b1c44)
+- github.com/google/go-github: [v17.0.0+incompatible](https://github.com/google/go-github/tree/v17.0.0)
+- github.com/google/go-querystring: [v1.0.0](https://github.com/google/go-querystring/tree/v1.0.0)
+- github.com/gostaticanalysis/analysisutil: [v0.0.3](https://github.com/gostaticanalysis/analysisutil/tree/v0.0.3)
+- github.com/jellevandenhooff/dkim: [f50fe3d](https://github.com/jellevandenhooff/dkim/tree/f50fe3d)
+- github.com/klauspost/compress: [v1.4.1](https://github.com/klauspost/compress/tree/v1.4.1)
+- github.com/logrusorgru/aurora: [a7b3b31](https://github.com/logrusorgru/aurora/tree/a7b3b31)
+- github.com/mattn/go-shellwords: [v1.0.5](https://github.com/mattn/go-shellwords/tree/v1.0.5)
+- github.com/mattn/goveralls: [v0.0.2](https://github.com/mattn/goveralls/tree/v0.0.2)
+- github.com/mesos/mesos-go: [v0.0.9](https://github.com/mesos/mesos-go/tree/v0.0.9)
+- github.com/mitchellh/go-ps: [4fdf99a](https://github.com/mitchellh/go-ps/tree/4fdf99a)
+- github.com/mozilla/tls-observatory: [8791a20](https://github.com/mozilla/tls-observatory/tree/8791a20)
+- github.com/nbutton23/zxcvbn-go: [eafdab6](https://github.com/nbutton23/zxcvbn-go/tree/eafdab6)
+- github.com/pquerna/ffjson: [af8b230](https://github.com/pquerna/ffjson/tree/af8b230)
+- github.com/quasilyte/go-consistent: [c6f3937](https://github.com/quasilyte/go-consistent/tree/c6f3937)
+- github.com/ryanuber/go-glob: [256dc44](https://github.com/ryanuber/go-glob/tree/256dc44)
+- github.com/shirou/gopsutil: [c95755e](https://github.com/shirou/gopsutil/tree/c95755e)
+- github.com/shirou/w32: [bb4de01](https://github.com/shirou/w32/tree/bb4de01)
+- github.com/shurcooL/go-goon: [37c2f52](https://github.com/shurcooL/go-goon/tree/37c2f52)
+- github.com/shurcooL/go: [9e1955d](https://github.com/shurcooL/go/tree/9e1955d)
+- github.com/sourcegraph/go-diff: [v0.5.1](https://github.com/sourcegraph/go-diff/tree/v0.5.1)
+- github.com/tarm/serial: [98f6abe](https://github.com/tarm/serial/tree/98f6abe)
+- github.com/timakin/bodyclose: [87058b9](https://github.com/timakin/bodyclose/tree/87058b9)
+- github.com/ugorji/go/codec: [d75b2dc](https://github.com/ugorji/go/codec/tree/d75b2dc)
+- github.com/ultraware/funlen: [v0.0.2](https://github.com/ultraware/funlen/tree/v0.0.2)
+- github.com/valyala/bytebufferpool: [v1.0.0](https://github.com/valyala/bytebufferpool/tree/v1.0.0)
+- github.com/valyala/fasthttp: [v1.2.0](https://github.com/valyala/fasthttp/tree/v1.2.0)
+- github.com/valyala/quicktemplate: [v1.1.1](https://github.com/valyala/quicktemplate/tree/v1.1.1)
+- github.com/valyala/tcplisten: [ceec8f9](https://github.com/valyala/tcplisten/tree/ceec8f9)
+- go4.org: 417644f
+- golang.org/x/build: 2835ba2
+- golang.org/x/perf: 6e6d33e
+- gopkg.in/airbrake/gobrake.v2: v2.0.9
+- gopkg.in/gemnasium/logrus-airbrake-hook.v2: v2.1.2
+- gotest.tools/gotestsum: v0.3.5
+- grpc.go4.org: 11d0a25
+- k8s.io/klog: v1.0.0
+- k8s.io/repo-infra: v0.0.1-alpha.1
+- mvdan.cc/interfacer: c200402
+- mvdan.cc/lint: adc824a
+- mvdan.cc/unparam: fbb5962
+- sourcegraph.com/sqs/pbtypes: d3ebe8f
 
 
-# v1.18.0-beta.1
+## Dependencies
 
-[Documentation](https://docs.k8s.io)
+### Added
+- cloud.google.com/go/bigquery: v1.0.1
+- cloud.google.com/go/datastore: v1.0.0
+- cloud.google.com/go/pubsub: v1.0.1
+- cloud.google.com/go/storage: v1.0.0
+- dmitri.shuralyov.com/gpu/mtl: 666a987
+- github.com/cespare/xxhash/v2: [v2.1.1](https://github.com/cespare/xxhash/v2/tree/v2.1.1)
+- github.com/checkpoint-restore/go-criu/v4: [v4.0.2](https://github.com/checkpoint-restore/go-criu/v4/tree/v4.0.2)
+- github.com/chzyer/logex: [v1.1.10](https://github.com/chzyer/logex/tree/v1.1.10)
+- github.com/chzyer/readline: [2972be2](https://github.com/chzyer/readline/tree/2972be2)
+- github.com/chzyer/test: [a1ea475](https://github.com/chzyer/test/tree/a1ea475)
+- github.com/containerd/cgroups: [0dbf7f0](https://github.com/containerd/cgroups/tree/0dbf7f0)
+- github.com/containerd/continuity: [aaeac12](https://github.com/containerd/continuity/tree/aaeac12)
+- github.com/containerd/fifo: [a9fb20d](https://github.com/containerd/fifo/tree/a9fb20d)
+- github.com/containerd/go-runc: [5a6d9f3](https://github.com/containerd/go-runc/tree/5a6d9f3)
+- github.com/containerd/ttrpc: [v1.0.0](https://github.com/containerd/ttrpc/tree/v1.0.0)
+- github.com/coreos/bbolt: [v1.3.2](https://github.com/coreos/bbolt/tree/v1.3.2)
+- github.com/coreos/go-systemd/v22: [v22.1.0](https://github.com/coreos/go-systemd/v22/tree/v22.1.0)
+- github.com/cpuguy83/go-md2man/v2: [v2.0.0](https://github.com/cpuguy83/go-md2man/v2/tree/v2.0.0)
+- github.com/docopt/docopt-go: [ee0de3b](https://github.com/docopt/docopt-go/tree/ee0de3b)
+- github.com/go-gl/glfw/v3.3/glfw: [12ad95a](https://github.com/go-gl/glfw/v3.3/glfw/tree/12ad95a)
+- github.com/go-ini/ini: [v1.9.0](https://github.com/go-ini/ini/tree/v1.9.0)
+- github.com/godbus/dbus/v5: [v5.0.3](https://github.com/godbus/dbus/v5/tree/v5.0.3)
+- github.com/ianlancetaylor/demangle: [5e5cf60](https://github.com/ianlancetaylor/demangle/tree/5e5cf60)
+- github.com/ishidawataru/sctp: [7c296d4](https://github.com/ishidawataru/sctp/tree/7c296d4)
+- github.com/moby/ipvs: [v1.0.1](https://github.com/moby/ipvs/tree/v1.0.1)
+- github.com/moby/sys/mountinfo: [v0.1.3](https://github.com/moby/sys/mountinfo/tree/v0.1.3)
+- github.com/moby/term: [672ec06](https://github.com/moby/term/tree/672ec06)
+- github.com/russross/blackfriday/v2: [v2.0.1](https://github.com/russross/blackfriday/v2/tree/v2.0.1)
+- github.com/shurcooL/sanitized_anchor_name: [v1.0.0](https://github.com/shurcooL/sanitized_anchor_name/tree/v1.0.0)
+- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
+- github.com/yuin/goldmark: [v1.1.27](https://github.com/yuin/goldmark/tree/v1.1.27)
+- google.golang.org/protobuf: v1.24.0
+- gotest.tools/v3: v3.0.2
+- k8s.io/klog/v2: v2.2.0
+- sigs.k8s.io/structured-merge-diff/v4: v4.0.1
 
-## Downloads for v1.18.0-beta.1
+### Changed
+- cloud.google.com/go: v0.38.0 → v0.51.0
+- github.com/Azure/azure-sdk-for-go: [v35.0.0+incompatible → v43.0.0+incompatible](https://github.com/Azure/azure-sdk-for-go/compare/v35.0.0...v43.0.0)
+- github.com/Azure/go-autorest/autorest/adal: [v0.5.0 → v0.8.2](https://github.com/Azure/go-autorest/autorest/adal/compare/v0.5.0...v0.8.2)
+- github.com/Azure/go-autorest/autorest/date: [v0.1.0 → v0.2.0](https://github.com/Azure/go-autorest/autorest/date/compare/v0.1.0...v0.2.0)
+- github.com/Azure/go-autorest/autorest/mocks: [v0.2.0 → v0.3.0](https://github.com/Azure/go-autorest/autorest/mocks/compare/v0.2.0...v0.3.0)
+- github.com/Azure/go-autorest/autorest: [v0.9.0 → v0.9.6](https://github.com/Azure/go-autorest/autorest/compare/v0.9.0...v0.9.6)
+- github.com/GoogleCloudPlatform/k8s-cloud-provider: [27a4ced → 7901bc8](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/compare/27a4ced...7901bc8)
+- github.com/Microsoft/go-winio: [v0.4.14 → fc70bd9](https://github.com/Microsoft/go-winio/compare/v0.4.14...fc70bd9)
+- github.com/Microsoft/hcsshim: [672e52e → 5eafd15](https://github.com/Microsoft/hcsshim/compare/672e52e...5eafd15)
+- github.com/alecthomas/template: [a0175ee → fb15b89](https://github.com/alecthomas/template/compare/a0175ee...fb15b89)
+- github.com/alecthomas/units: [2efee85 → c3de453](https://github.com/alecthomas/units/compare/2efee85...c3de453)
+- github.com/beorn7/perks: [v1.0.0 → v1.0.1](https://github.com/beorn7/perks/compare/v1.0.0...v1.0.1)
+- github.com/cilium/ebpf: [95b36a5 → 1c8d4c9](https://github.com/cilium/ebpf/compare/95b36a5...1c8d4c9)
+- github.com/containerd/console: [84eeaae → v1.0.0](https://github.com/containerd/console/compare/84eeaae...v1.0.0)
+- github.com/containerd/containerd: [v1.0.2 → v1.3.3](https://github.com/containerd/containerd/compare/v1.0.2...v1.3.3)
+- github.com/containerd/typeurl: [2a93cfd → v1.0.0](https://github.com/containerd/typeurl/compare/2a93cfd...v1.0.0)
+- github.com/containernetworking/cni: [v0.7.1 → v0.8.0](https://github.com/containernetworking/cni/compare/v0.7.1...v0.8.0)
+- github.com/coredns/corefile-migration: [v1.0.6 → v1.0.10](https://github.com/coredns/corefile-migration/compare/v1.0.6...v1.0.10)
+- github.com/coreos/pkg: [97fdf19 → 399ea9e](https://github.com/coreos/pkg/compare/97fdf19...399ea9e)
+- github.com/docker/docker: [be7ac8b → aa6a989](https://github.com/docker/docker/compare/be7ac8b...aa6a989)
+- github.com/docker/go-connections: [v0.3.0 → v0.4.0](https://github.com/docker/go-connections/compare/v0.3.0...v0.4.0)
+- github.com/evanphx/json-patch: [v4.2.0+incompatible → v4.9.0+incompatible](https://github.com/evanphx/json-patch/compare/v4.2.0...v4.9.0)
+- github.com/fsnotify/fsnotify: [v1.4.7 → v1.4.9](https://github.com/fsnotify/fsnotify/compare/v1.4.7...v1.4.9)
+- github.com/go-kit/kit: [v0.8.0 → v0.9.0](https://github.com/go-kit/kit/compare/v0.8.0...v0.9.0)
+- github.com/go-logfmt/logfmt: [v0.3.0 → v0.4.0](https://github.com/go-logfmt/logfmt/compare/v0.3.0...v0.4.0)
+- github.com/go-logr/logr: [v0.1.0 → v0.2.0](https://github.com/go-logr/logr/compare/v0.1.0...v0.2.0)
+- github.com/golang/groupcache: [02826c3 → 215e871](https://github.com/golang/groupcache/compare/02826c3...215e871)
+- github.com/golang/protobuf: [v1.3.2 → v1.4.2](https://github.com/golang/protobuf/compare/v1.3.2...v1.4.2)
+- github.com/google/cadvisor: [v0.35.0 → v0.37.0](https://github.com/google/cadvisor/compare/v0.35.0...v0.37.0)
+- github.com/google/go-cmp: [v0.3.0 → v0.4.0](https://github.com/google/go-cmp/compare/v0.3.0...v0.4.0)
+- github.com/google/pprof: [3ea8567 → d4f498a](https://github.com/google/pprof/compare/3ea8567...d4f498a)
+- github.com/googleapis/gax-go/v2: [v2.0.4 → v2.0.5](https://github.com/googleapis/gax-go/v2/compare/v2.0.4...v2.0.5)
+- github.com/googleapis/gnostic: [v0.1.0 → v0.4.1](https://github.com/googleapis/gnostic/compare/v0.1.0...v0.4.1)
+- github.com/gorilla/mux: [v1.7.0 → v1.7.3](https://github.com/gorilla/mux/compare/v1.7.0...v1.7.3)
+- github.com/json-iterator/go: [v1.1.8 → v1.1.10](https://github.com/json-iterator/go/compare/v1.1.8...v1.1.10)
+- github.com/jstemmer/go-junit-report: [af01ea7 → v0.9.1](https://github.com/jstemmer/go-junit-report/compare/af01ea7...v0.9.1)
+- github.com/konsorten/go-windows-terminal-sequences: [v1.0.1 → v1.0.3](https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.1...v1.0.3)
+- github.com/kr/pretty: [v0.1.0 → v0.2.0](https://github.com/kr/pretty/compare/v0.1.0...v0.2.0)
+- github.com/mattn/go-isatty: [v0.0.9 → v0.0.4](https://github.com/mattn/go-isatty/compare/v0.0.9...v0.0.4)
+- github.com/matttproud/golang_protobuf_extensions: [v1.0.1 → c182aff](https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.1...c182aff)
+- github.com/mistifyio/go-zfs: [v2.1.1+incompatible → f784269](https://github.com/mistifyio/go-zfs/compare/v2.1.1...f784269)
+- github.com/mrunalp/fileutils: [7d4729f → abd8a0e](https://github.com/mrunalp/fileutils/compare/7d4729f...abd8a0e)
+- github.com/opencontainers/runc: [v1.0.0-rc10 → 819fcc6](https://github.com/opencontainers/runc/compare/v1.0.0-rc10...819fcc6)
+- github.com/opencontainers/runtime-spec: [v1.0.0 → 237cc4f](https://github.com/opencontainers/runtime-spec/compare/v1.0.0...237cc4f)
+- github.com/opencontainers/selinux: [5215b18 → v1.5.2](https://github.com/opencontainers/selinux/compare/5215b18...v1.5.2)
+- github.com/pkg/errors: [v0.8.1 → v0.9.1](https://github.com/pkg/errors/compare/v0.8.1...v0.9.1)
+- github.com/prometheus/client_golang: [v1.0.0 → v1.7.1](https://github.com/prometheus/client_golang/compare/v1.0.0...v1.7.1)
+- github.com/prometheus/common: [v0.4.1 → v0.10.0](https://github.com/prometheus/common/compare/v0.4.1...v0.10.0)
+- github.com/prometheus/procfs: [v0.0.2 → v0.1.3](https://github.com/prometheus/procfs/compare/v0.0.2...v0.1.3)
+- github.com/rubiojr/go-vhd: [0bfd3b3 → 02e2102](https://github.com/rubiojr/go-vhd/compare/0bfd3b3...02e2102)
+- github.com/sirupsen/logrus: [v1.4.2 → v1.6.0](https://github.com/sirupsen/logrus/compare/v1.4.2...v1.6.0)
+- github.com/spf13/cobra: [v0.0.5 → v1.0.0](https://github.com/spf13/cobra/compare/v0.0.5...v1.0.0)
+- github.com/spf13/viper: [v1.3.2 → v1.4.0](https://github.com/spf13/viper/compare/v1.3.2...v1.4.0)
+- github.com/tmc/grpc-websocket-proxy: [89b8d40 → 0ad062e](https://github.com/tmc/grpc-websocket-proxy/compare/89b8d40...0ad062e)
+- github.com/urfave/cli: [v1.20.0 → v1.22.2](https://github.com/urfave/cli/compare/v1.20.0...v1.22.2)
+- github.com/vishvananda/netlink: [v1.0.0 → v1.1.0](https://github.com/vishvananda/netlink/compare/v1.0.0...v1.1.0)
+- github.com/vishvananda/netns: [be1fbed → 52d707b](https://github.com/vishvananda/netns/compare/be1fbed...52d707b)
+- go.etcd.io/bbolt: v1.3.3 → v1.3.5
+- go.etcd.io/etcd: 3cf2f69 → 17cef6e
+- go.opencensus.io: v0.21.0 → v0.22.2
+- go.uber.org/atomic: v1.3.2 → v1.4.0
+- golang.org/x/crypto: bac4c82 → 75b2880
+- golang.org/x/exp: 4b39c73 → da58074
+- golang.org/x/image: 0694c2d → cff245a
+- golang.org/x/lint: 959b441 → fdd1cda
+- golang.org/x/mobile: d3739f8 → d2bd2a2
+- golang.org/x/mod: 4bf6d31 → v0.3.0
+- golang.org/x/net: 13f9640 → ab34263
+- golang.org/x/oauth2: 0f29369 → 858c2ad
+- golang.org/x/sys: fde4db3 → ed371f2
+- golang.org/x/text: v0.3.2 → v0.3.3
+- golang.org/x/time: 9d24e82 → 555d28b
+- golang.org/x/tools: 65e3620 → c1934b7
+- golang.org/x/xerrors: a985d34 → 9bdfabe
+- google.golang.org/api: 5213b80 → v0.15.1
+- google.golang.org/appengine: v1.5.0 → v1.6.5
+- google.golang.org/genproto: 24fa4b2 → cb27e3a
+- google.golang.org/grpc: v1.26.0 → v1.27.0
+- gopkg.in/check.v1: 788fd78 → 41f04d3
+- honnef.co/go/tools: v0.0.1-2019.2.2 → v0.0.1-2019.2.3
+- k8s.io/gengo: 36b2048 → 8167cfd
+- k8s.io/kube-openapi: bf4fb3b → 6aeccd4
+- k8s.io/system-validators: v1.0.4 → v1.1.2
+- k8s.io/utils: a9aa75a → d5654de
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.7 → v0.0.9
+
+### Removed
+- github.com/OpenPeeDeeP/depguard: [v1.0.1](https://github.com/OpenPeeDeeP/depguard/tree/v1.0.1)
+- github.com/Rican7/retry: [v0.1.0](https://github.com/Rican7/retry/tree/v0.1.0)
+- github.com/StackExchange/wmi: [5d04971](https://github.com/StackExchange/wmi/tree/5d04971)
+- github.com/anmitsu/go-shlex: [648efa6](https://github.com/anmitsu/go-shlex/tree/648efa6)
+- github.com/bazelbuild/bazel-gazelle: [70208cb](https://github.com/bazelbuild/bazel-gazelle/tree/70208cb)
+- github.com/bazelbuild/buildtools: [69366ca](https://github.com/bazelbuild/buildtools/tree/69366ca)
+- github.com/bazelbuild/rules_go: [6dae44d](https://github.com/bazelbuild/rules_go/tree/6dae44d)
+- github.com/bradfitz/go-smtpd: [deb6d62](https://github.com/bradfitz/go-smtpd/tree/deb6d62)
+- github.com/cespare/prettybench: [03b8cfe](https://github.com/cespare/prettybench/tree/03b8cfe)
+- github.com/checkpoint-restore/go-criu: [17b0214](https://github.com/checkpoint-restore/go-criu/tree/17b0214)
+- github.com/client9/misspell: [v0.3.4](https://github.com/client9/misspell/tree/v0.3.4)
+- github.com/coreos/go-etcd: [v2.0.0+incompatible](https://github.com/coreos/go-etcd/tree/v2.0.0)
+- github.com/cpuguy83/go-md2man: [v1.0.10](https://github.com/cpuguy83/go-md2man/tree/v1.0.10)
+- github.com/docker/libnetwork: [c8a5fca](https://github.com/docker/libnetwork/tree/c8a5fca)
+- github.com/gliderlabs/ssh: [v0.1.1](https://github.com/gliderlabs/ssh/tree/v0.1.1)
+- github.com/go-critic/go-critic: [1df3008](https://github.com/go-critic/go-critic/tree/1df3008)
+- github.com/go-lintpack/lintpack: [v0.5.2](https://github.com/go-lintpack/lintpack/tree/v0.5.2)
+- github.com/go-ole/go-ole: [v1.2.1](https://github.com/go-ole/go-ole/tree/v1.2.1)
+- github.com/go-toolsmith/astcast: [v1.0.0](https://github.com/go-toolsmith/astcast/tree/v1.0.0)
+- github.com/go-toolsmith/astcopy: [v1.0.0](https://github.com/go-toolsmith/astcopy/tree/v1.0.0)
+- github.com/go-toolsmith/astequal: [v1.0.0](https://github.com/go-toolsmith/astequal/tree/v1.0.0)
+- github.com/go-toolsmith/astfmt: [v1.0.0](https://github.com/go-toolsmith/astfmt/tree/v1.0.0)
+- github.com/go-toolsmith/astinfo: [9809ff7](https://github.com/go-toolsmith/astinfo/tree/9809ff7)
+- github.com/go-toolsmith/astp: [v1.0.0](https://github.com/go-toolsmith/astp/tree/v1.0.0)
+- github.com/go-toolsmith/pkgload: [v1.0.0](https://github.com/go-toolsmith/pkgload/tree/v1.0.0)
+- github.com/go-toolsmith/strparse: [v1.0.0](https://github.com/go-toolsmith/strparse/tree/v1.0.0)
+- github.com/go-toolsmith/typep: [v1.0.0](https://github.com/go-toolsmith/typep/tree/v1.0.0)
+- github.com/gobwas/glob: [v0.2.3](https://github.com/gobwas/glob/tree/v0.2.3)
+- github.com/godbus/dbus: [2ff6f7f](https://github.com/godbus/dbus/tree/2ff6f7f)
+- github.com/golangci/check: [cfe4005](https://github.com/golangci/check/tree/cfe4005)
+- github.com/golangci/dupl: [3e9179a](https://github.com/golangci/dupl/tree/3e9179a)
+- github.com/golangci/errcheck: [ef45e06](https://github.com/golangci/errcheck/tree/ef45e06)
+- github.com/golangci/go-misc: [927a3d8](https://github.com/golangci/go-misc/tree/927a3d8)
+- github.com/golangci/go-tools: [e32c541](https://github.com/golangci/go-tools/tree/e32c541)
+- github.com/golangci/goconst: [041c5f2](https://github.com/golangci/goconst/tree/041c5f2)
+- github.com/golangci/gocyclo: [2becd97](https://github.com/golangci/gocyclo/tree/2becd97)
+- github.com/golangci/gofmt: [0b8337e](https://github.com/golangci/gofmt/tree/0b8337e)
+- github.com/golangci/golangci-lint: [v1.18.0](https://github.com/golangci/golangci-lint/tree/v1.18.0)
+- github.com/golangci/gosec: [66fb7fc](https://github.com/golangci/gosec/tree/66fb7fc)
+- github.com/golangci/ineffassign: [42439a7](https://github.com/golangci/ineffassign/tree/42439a7)
+- github.com/golangci/lint-1: [ee948d0](https://github.com/golangci/lint-1/tree/ee948d0)
+- github.com/golangci/maligned: [b1d8939](https://github.com/golangci/maligned/tree/b1d8939)
+- github.com/golangci/misspell: [950f5d1](https://github.com/golangci/misspell/tree/950f5d1)
+- github.com/golangci/prealloc: [215b22d](https://github.com/golangci/prealloc/tree/215b22d)
+- github.com/golangci/revgrep: [d9c87f5](https://github.com/golangci/revgrep/tree/d9c87f5)
+- github.com/golangci/unconvert: [28b1c44](https://github.com/golangci/unconvert/tree/28b1c44)
+- github.com/google/go-github: [v17.0.0+incompatible](https://github.com/google/go-github/tree/v17.0.0)
+- github.com/google/go-querystring: [v1.0.0](https://github.com/google/go-querystring/tree/v1.0.0)
+- github.com/gostaticanalysis/analysisutil: [v0.0.3](https://github.com/gostaticanalysis/analysisutil/tree/v0.0.3)
+- github.com/jellevandenhooff/dkim: [f50fe3d](https://github.com/jellevandenhooff/dkim/tree/f50fe3d)
+- github.com/klauspost/compress: [v1.4.1](https://github.com/klauspost/compress/tree/v1.4.1)
+- github.com/logrusorgru/aurora: [a7b3b31](https://github.com/logrusorgru/aurora/tree/a7b3b31)
+- github.com/mattn/go-shellwords: [v1.0.5](https://github.com/mattn/go-shellwords/tree/v1.0.5)
+- github.com/mattn/goveralls: [v0.0.2](https://github.com/mattn/goveralls/tree/v0.0.2)
+- github.com/mesos/mesos-go: [v0.0.9](https://github.com/mesos/mesos-go/tree/v0.0.9)
+- github.com/mitchellh/go-ps: [4fdf99a](https://github.com/mitchellh/go-ps/tree/4fdf99a)
+- github.com/mozilla/tls-observatory: [8791a20](https://github.com/mozilla/tls-observatory/tree/8791a20)
+- github.com/nbutton23/zxcvbn-go: [eafdab6](https://github.com/nbutton23/zxcvbn-go/tree/eafdab6)
+- github.com/pquerna/ffjson: [af8b230](https://github.com/pquerna/ffjson/tree/af8b230)
+- github.com/quasilyte/go-consistent: [c6f3937](https://github.com/quasilyte/go-consistent/tree/c6f3937)
+- github.com/ryanuber/go-glob: [256dc44](https://github.com/ryanuber/go-glob/tree/256dc44)
+- github.com/shirou/gopsutil: [c95755e](https://github.com/shirou/gopsutil/tree/c95755e)
+- github.com/shirou/w32: [bb4de01](https://github.com/shirou/w32/tree/bb4de01)
+- github.com/shurcooL/go-goon: [37c2f52](https://github.com/shurcooL/go-goon/tree/37c2f52)
+- github.com/shurcooL/go: [9e1955d](https://github.com/shurcooL/go/tree/9e1955d)
+- github.com/sourcegraph/go-diff: [v0.5.1](https://github.com/sourcegraph/go-diff/tree/v0.5.1)
+- github.com/tarm/serial: [98f6abe](https://github.com/tarm/serial/tree/98f6abe)
+- github.com/timakin/bodyclose: [87058b9](https://github.com/timakin/bodyclose/tree/87058b9)
+- github.com/ugorji/go/codec: [d75b2dc](https://github.com/ugorji/go/codec/tree/d75b2dc)
+- github.com/ultraware/funlen: [v0.0.2](https://github.com/ultraware/funlen/tree/v0.0.2)
+- github.com/valyala/bytebufferpool: [v1.0.0](https://github.com/valyala/bytebufferpool/tree/v1.0.0)
+- github.com/valyala/fasthttp: [v1.2.0](https://github.com/valyala/fasthttp/tree/v1.2.0)
+- github.com/valyala/quicktemplate: [v1.1.1](https://github.com/valyala/quicktemplate/tree/v1.1.1)
+- github.com/valyala/tcplisten: [ceec8f9](https://github.com/valyala/tcplisten/tree/ceec8f9)
+- go4.org: 417644f
+- golang.org/x/build: 2835ba2
+- golang.org/x/perf: 6e6d33e
+- gopkg.in/airbrake/gobrake.v2: v2.0.9
+- gopkg.in/gemnasium/logrus-airbrake-hook.v2: v2.1.2
+- gotest.tools/gotestsum: v0.3.5
+- grpc.go4.org: 11d0a25
+- k8s.io/klog: v1.0.0
+- k8s.io/repo-infra: v0.0.1-alpha.1
+- mvdan.cc/interfacer: c200402
+- mvdan.cc/lint: adc824a
+- mvdan.cc/unparam: fbb5962
+- sigs.k8s.io/structured-merge-diff/v3: v3.0.0
+- sourcegraph.com/sqs/pbtypes: d3ebe8f
+
+
+
+# v1.19.0-rc.4
+
+
+## Downloads for v1.19.0-rc.4
+
+### Source Code
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes.tar.gz) | `7c182ca905b3a31871c01ab5fdaf46f074547536c7975e069ff230af0d402dfc0346958b1d084bd2c108582ffc407484e6a15a1cd93e9affbe34b6e99409ef1f`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-src.tar.gz) | `d104b8c792b1517bd730787678c71c8ee3b259de81449192a49a1c6e37a6576d28f69b05c2019cc4a4c40ddeb4d60b80138323df3f85db8682caabf28e67c2de`
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes.tar.gz) | 98bb6e2ac98a3176a9592982fec04b037d189de73cb7175d51596075bfd008c7ec0a2301b9511375626581f864ea74b5731e2ef2b4c70363f1860d11eb827de1
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-src.tar.gz) | d4686f8d07fe6f324f46880a4dc5af9afa314a6b7dca82d0edb50290b769d25d18babcc5257a96a51a046052c7747e324b025a90a36ca5e62f67642bb03c44f6
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-darwin-amd64.tar.gz) | e9184ceb37491764c1ea2ef0b1eca55f27109bb973c7ff7c78e83c5945840baf28fdead21ef861b0c5cb81f4dc39d0af86ed7b17ed6f087f211084d0033dad11
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-linux-386.tar.gz) | c9f1ec4e8d9c6245f955b2132c0fae6d851a6a49a5b7a2333c01ba9fafa3c4e8a07c6462e525179c25e308520502544ab4dc570e1b9d0090d58b6d18bcfcba47
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-linux-amd64.tar.gz) | d23858b03c3554ad12517ce5f7855ceccaa9425c2d19fbc9cf902c0e796a8182f8b0e8eeeeefff0f46e960dfee96b2a2033a04a3194ac34dfd2a32003775d060
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-linux-arm.tar.gz) | a745b3a06fe992713e4d7f921e2f36c5b39222d7b1a3e13299d15925743dd99965c2bdf05b4deda30a6f6232a40588e154fdd83f40d9d260d7ac8f70b18cad48
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-linux-arm64.tar.gz) | 719b1f30e4bbb05d638ee78cf0145003a1e783bbd0c2f0952fcb30702dd27dfd44c3bc85baaf9a776e490ed53c638327ed1c0e5a882dc93c24d7cac20e4f1dd0
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-linux-ppc64le.tar.gz) | fba0794e9dc0f231da5a4e85e37c2d8260e5205574e0421f5122a7d60a05ca6546912519a28e8d6c241904617234e1b0b5c94f890853ad5ae4e329ef8085a092
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-linux-s390x.tar.gz) | edce96e37e37fd2b60e34fe56240461094e5784985790453becdfe09011305fcbd8a50ee5bf6d82a70d208d660796d0ddf160bed0292271b6617049db800962f
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-windows-386.tar.gz) | 06c849b35d886bebedfd8d906ac37ccda10e05b06542fefe6440268c5e937f235915e53daafe35076b68e0af0d4ddeab4240da55b09ee52fa26928945f1a2ecd
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-client-windows-amd64.tar.gz) | a13e6ec70f76d6056d5668b678ba6f223e35756cded6c84dfb58e28b3741fecfa7cb5e6ae2239392d770028d1b55ca8eb520c0b24e13fc3bd38720134b472d53
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-server-linux-amd64.tar.gz) | ff7fbf211c29b94c19466337e6c142e733c8c0bac815a97906168e57d21ad1b2965e4b0033b525de8fed9a91ab943e3eb6d330f8095660e32be2791f8161a6a2
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-server-linux-arm.tar.gz) | 218a35466ebcc0bc0e8eff9bbb2e58f0ac3bec6a75f45a7c1487aa4fc3e2bddb90b74e91a2b81bbbbb1eb1de2df310adab4c07c2a2c38a9973580b4f85734a1f
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-server-linux-arm64.tar.gz) | 8a81d727e63875d18336fda8bb6f570084553fc346b7e7df2fc3e1c04a8ef766f61d96d445537e4660ce2f46b170a04218a4d8a270b3ad373caa3f815c0fec93
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-server-linux-ppc64le.tar.gz) | 9b5afa44ac2e1232cd0c54b3602a2027bc8a08b30809b3ef973f75793b35a596491e6056d7995e493a1e4f48d83389240ac2e609b9f76d2715b8e115e6648716
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-server-linux-s390x.tar.gz) | f3034b2e88b5c1d362d84f78dfd1761d0fc21ada1cd6b1a6132a709c663a1206651df96c948534b3661f6b70b651e33021aced3a7574a0e5fc88ace73fff2a6f
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-node-linux-amd64.tar.gz) | 2061a8f5bc2060b071564c92b693950eda7768a9ceb874982f0e91aa78284fb477becb55ecf099acae73c447271240caecefc19b3b29024e9b818e0639c2fc70
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-node-linux-arm.tar.gz) | c06b817b191ff9a4b05bf70fc14edcf01d4ded204e489966b1761dd68d45d054028870301e45ebba648c0be097c7c42120867c8b28fdd625c8eb5a5bc3ace71d
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-node-linux-arm64.tar.gz) | 21efb3bf23628546de97210074f48e928fec211b81215eff8b10c3f5f7e79bb5911c1393a66a8363a0183fe299bf98b316c0c2d77a13c8c5b798255c056bd806
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-node-linux-ppc64le.tar.gz) | ce31dd65b9cbfaabdc3c93e8afee0ea5606c64e6bf4452078bee73b1d328d23ebdbc871a00edd16fa4e676406a707cf9113fdaec76489681c379c35c3fd6aeb0
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-node-linux-s390x.tar.gz) | 523a8e1d6e0eff70810e846c171b7f74a4aaecb25237addf541a9f8adb3797402b6e57abf9030f62d5bb333d5f5e8960199a44fe48696a4da98f7ed7d993cde1
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.4/kubernetes-node-windows-amd64.tar.gz) | a7fbcd11ea8b6427e7846e39b2fdeae41d484320faa8f3e9b6a777d87ba62e7399ad0ec6a33d9a4675001898881e444f336eebd5c97b3903dee803834a646f3d
+
+## Changelog since v1.19.0-rc.3
+
+## Changes by Kind
+
+### Deprecation
+
+- Kube-apiserver: the componentstatus API is deprecated. This API provided status of etcd, kube-scheduler, and kube-controller-manager components, but only worked when those components were local to the API server, and when kube-scheduler and kube-controller-manager exposed unsecured health endpoints. Instead of this API, etcd health is included in the kube-apiserver health check and kube-scheduler/kube-controller-manager health checks can be made directly against those components' health endpoints. ([#93570](https://github.com/kubernetes/kubernetes/pull/93570), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Cluster Lifecycle]
+
+### Bug or Regression
+
+- A panic in the apiserver caused by the `informer-sync` health checker is now fixed. ([#93600](https://github.com/kubernetes/kubernetes/pull/93600), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG API Machinery]
+- EndpointSliceMirroring controller now copies labels from Endpoints to EndpointSlices. ([#93442](https://github.com/kubernetes/kubernetes/pull/93442), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Kube-apiserver: jsonpath expressions with consecutive recursive descent operators are no longer evaluated for custom resource printer columns ([#93408](https://github.com/kubernetes/kubernetes/pull/93408), [@joelsmith](https://github.com/joelsmith)) [SIG API Machinery]
+
+### Other (Cleanup or Flake)
+
+- Build: Update to debian-base@v2.1.0 and debian-iptables@v12.1.1 ([#93667](https://github.com/kubernetes/kubernetes/pull/93667), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Release and Testing]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- k8s.io/utils: 0bdb4ca → d5654de
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.19.0-rc.3
+
+
+## Downloads for v1.19.0-rc.3
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes.tar.gz) | 31f98fb8d51c6dfa60e2cf710a35af14bc17a6b3833b3802cebc92586b01996c091943087dc818541fc13ad75f051d20c176d9506fc0c86ab582a9295fb7ed59
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-src.tar.gz) | 4886180edf6287adf9db1cdab1e8439c41296c6b5b40af9c4642bb6cfd1fb894313c6d1210c2b882f1bc40dbfd17ed20c5159ea3a8c79ad2ef7a7630016e99de
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-darwin-amd64.tar.gz) | 19b0f9fe95e135329ce2cb9dd3e95551f3552be035ce7235e055c9d775dfa747c773b0806b5c2eef1e69863368be13adcb4c5ef78ae05af65483434686e9a773
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-linux-386.tar.gz) | 219a15b54ba616938960ac38869c87be573e3cd7897e4790c31cdeb819415fcefb4f293fc49d63901b42f70e66555c72a8a774cced7ec15a93592dffef3b1336
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-linux-amd64.tar.gz) | 7c5a2163e0e163d3b1819acc7c4475d35b853318dd5a6084ea0785744a92063edf65254b0f0eae0f69f4598561c182033a9722c1b8a61894959333f1357cb1f9
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-linux-arm.tar.gz) | 5d48f78da6a54b63d8ea68e983d780c672b546b4a5d1fb2c15033377dd3098f0011516b55cc47db316dacabdbbd3660108014d12899ef1f4a6a03158ef503101
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-linux-arm64.tar.gz) | c2db09db465f8ea2bd7b82971a59a2be394b2f9a8c15ff78ab06c3a41d9f1292175de19fdc7450cc28746027d59dc3162cb47b64555e91d324d33d699d89f408
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-linux-ppc64le.tar.gz) | f28c9c672bc2c5e780f6fdcf019a5dad7172537e38e2ab7d52a1ea55babb41d296cef97b482133c7fce0634b1aed1b5322d1e0061d30c3848e4c912a7e1ca248
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-linux-s390x.tar.gz) | 22844af3c97eb9f36a038c552e9818b8670cd02acc98defe5c131c7f88621014cd51c343c1e0921b88ebbfd9850a5c277f50df78350f7565db4e356521d415d4
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-windows-386.tar.gz) | edabe78a1337f73caa81c885d722544fec443f875297291e57608d4f486c897af6c602656048a4325fcc957ce1d7acb1c1cf06cab0bd2e36acee1d6be206d3c6
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-client-windows-amd64.tar.gz) | f1a370b9ec298838e302909dd826760b50b593ee2d2247416d345ff00331973e7b6b29cef69f07d6c1477ab534d6ec9d1bbf5d3c2d1bb9b5b2933e088c8de3f1
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-server-linux-amd64.tar.gz) | 193c023306d7478c2e43c4039642649c77598c05b07dbc466611e166f0233a7ea2a7f2ff61763b2630988c151a591f44428942d8ee06ce6766641e1dcfaac588
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-server-linux-arm.tar.gz) | c1aa489779fb74855385f24120691771a05b57069064c99471b238e5d541d94d4356e7d2cd5b66c284c46bde1fc3eff2a1cebfcd9e72a78377b76e32a1dbf57a
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-server-linux-arm64.tar.gz) | 73400003571f9f0308051ca448b1f96d83e9d211876a57b572ffb787ad0c3bb5f1e20547d959f0fac51a916cf7f26f8839ddddd55d4a38e59c8270d5eb48a970
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-server-linux-ppc64le.tar.gz) | bebf75d884d024ffebfda40abaa0bfec99a6d4cd3cc0fac904a1c4c190e6eb8fc9412c7790b2f8a2b3cc8ccdf8556d9a93eec37e5c298f8abd62ee41de641a42
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-server-linux-s390x.tar.gz) | 8374dfb689abae31480814d6849aaa51e30666b7203cdcf204d49c9a0344391232f40d135671ec8316e26d1685e1cbbea4b829ff3b9f83c08c2d1ba50cd5aeb2
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-node-linux-amd64.tar.gz) | 194ee29b012463e6d90c346f76d53f94778f75cc916b0e10a5ee174983fac6e848438e0d9e36a475c5d7ba7b0f3ad5debc039ec8f95fdfb6229843f04dfacb53
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-node-linux-arm.tar.gz) | f0d075eaa84dae7ce2101dfa421021b0bfea235fe606d693e881775cd37ff0b82ca6a419dfe48becd2eddc5f882e97ba838164e6ac5991445225c31f147b4f97
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-node-linux-arm64.tar.gz) | 3dc69981f31b01a2d8c439f7047f73e5699a121501c516ed17b3e91ed358ee97e43fa955eb9e1434cbf7864e51097e76c216075d34f4b455930a44af6c64be5c
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-node-linux-ppc64le.tar.gz) | 4a77720373960a0cc20bbcfcdfe17f8d5ddaaf2e38bad607cfe05831029e8e14559e78cd0b5b80ab9c9268a04a8b6bd54ad7232c29301a1f6a6392fcd38ecedf
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-node-linux-s390x.tar.gz) | 319e684340aab739e3da46c6407851ff1c42463ba176bf190e58faa48d143975f02df3443ac287cdfcf652b5d6b6e6721d9e4f35995c4e705297a97dd777fe7e
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.3/kubernetes-node-windows-amd64.tar.gz) | 1ff22497a3f0844ffa8593a2a444a8fcb45d0123da49fd58e17cfc1477d22be7f6809d923898b6aa7a9ce519b0a6e0825f575f6cf71da5c8a0fa5f6b4d0905b6
+
+## Changelog since v1.19.0-rc.2
+
+## Changes by Kind
+
+### API Change
+
+- Adds the ability to disable Accelerator/GPU metrics collected by Kubelet ([#91930](https://github.com/kubernetes/kubernetes/pull/91930), [@RenaudWasTaken](https://github.com/RenaudWasTaken)) [SIG Node]
+- Kubernetes is now built with golang 1.15.0-rc.1.
+  - The deprecated, legacy behavior of treating the CommonName field on X.509 serving certificates as a host name when no Subject Alternative Names are present is now disabled by default. It can be temporarily re-enabled by adding the value x509ignoreCN=0 to the GODEBUG environment variable. ([#93264](https://github.com/kubernetes/kubernetes/pull/93264), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scalability, Storage and Testing]
+
+### Bug or Regression
+
+- Azure: per VMSS VMSS VMs cache to prevent throttling on clusters having many attached VMSS ([#93107](https://github.com/kubernetes/kubernetes/pull/93107), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
+- Extended DSR loadbalancer feature in winkernel kube-proxy to HNS versions 9.3-9.max, 10.2+ ([#93080](https://github.com/kubernetes/kubernetes/pull/93080), [@elweb9858](https://github.com/elweb9858)) [SIG Network]
+- Fix instance not found issues when an Azure Node is recreated in a short time ([#93316](https://github.com/kubernetes/kubernetes/pull/93316), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+
+## Dependencies
+
+### Added
+- github.com/yuin/goldmark: [v1.1.27](https://github.com/yuin/goldmark/tree/v1.1.27)
+
+### Changed
+- github.com/Microsoft/hcsshim: [v0.8.9 → 5eafd15](https://github.com/Microsoft/hcsshim/compare/v0.8.9...5eafd15)
+- github.com/containerd/cgroups: [bf292b2 → 0dbf7f0](https://github.com/containerd/cgroups/compare/bf292b2...0dbf7f0)
+- github.com/urfave/cli: [v1.22.1 → v1.22.2](https://github.com/urfave/cli/compare/v1.22.1...v1.22.2)
+- golang.org/x/crypto: bac4c82 → 75b2880
+- golang.org/x/mod: v0.1.0 → v0.3.0
+- golang.org/x/net: d3edc99 → ab34263
+- golang.org/x/tools: c00d67e → c1934b7
+
+### Removed
+- github.com/godbus/dbus: [ade71ed](https://github.com/godbus/dbus/tree/ade71ed)
+
+
+
+# v1.19.0-rc.2
+
+
+## Downloads for v1.19.0-rc.2
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes.tar.gz) | 7a9fa6af3772be18f8c427d8b96836bd77e271a08fffeba92d01b3fac4bd69d2be1bbc404cdd4fc259dda42b16790a7943eddb7c889b918d7631857e127a724c
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-src.tar.gz) | 60184627a181ac99cd914acb0ba61c22f31b315ef13be5504f3cb43dea1fa84abb2142c8a1ba9e98e037e0d9d2765e8d85bd12903b03a86538d7638ceb6ac5c9
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-darwin-386.tar.gz) | 03332cd70ce6a9c8e533d93d694da32b549bef486cf73c649bcb1c85fc314b0ac0f95e035de7b54c81112c1ac39029abeb8f246d359384bde2119ea5ea3ebe66
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-darwin-amd64.tar.gz) | e82c2908366cc27cbc1d72f89fdc13414b484dfdf26c39c6180bf2e5734169cc97d77a2d1ac051cdb153582a38f4805e5c5b5b8eb88022c914ffb4ef2a8202d3
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-linux-386.tar.gz) | 948be72e8162ee109c670a88c443ba0907acfd0ffb64df62afe41762717bc2fb9308cbc4eb2012a14e0203197e8576e3700ad9f105379841d46acafad2a4c6dc
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-linux-amd64.tar.gz) | 54e1980b6967dab1e70be2b4df0cd0171f04c92f12dcdf80908b087facb9d5cc1399a7d9455a4a799daa8e9d48b6ad86cb3666a131e5adfcd36b008d25138fa3
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-linux-arm.tar.gz) | 4edcd2e1a866a16b8b0f6228f93b4a61cdd43dca36dcb53a5dbd865cc5a143ef6fd3b8575925acc8af17cff21dee993df9b88db5724320e7b420ca9d0427677f
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-linux-arm64.tar.gz) | 138b215e35cfb5d05bda766763e92352171e018a090d516dbf0c280588c5e6f36228163a75a8147c7bac46e773ad0353daaf550d8fa0e91b1e05c5bc0242531c
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-linux-ppc64le.tar.gz) | 3b8e7f5f1f2e34df5dbb06c12f07f660a2a732846c56d0f4b0a939b8121361d381325565bdda3182ef8951f4c2513a2c255940f97011034063ffb506d5aedeab
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-linux-s390x.tar.gz) | b695cc0695bd324c51084e64bea113aaad3c0b5ba44b5d122db9da6e359a4108008a80944cbe96c405bd2cf57f5f31b3eaf50f33c23d980bdb9f272937c88d1c
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-windows-386.tar.gz) | 8e370a66545cdebe0ae0816afe361c7579c7c6e8ee5652e4e01c6fcc3d6d2a6557101be39be24ceb14302fb30855730894a17f6ae11586759257f12406c653e2
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-client-windows-amd64.tar.gz) | 89e0fe5aac33c991891b08e5a3891ecbda3e038f0ee6a5cdd771ea294ec84292bd5f65f1a895f23e6892ec28f001f66d0166d204bf135cb1aa467ae56ccc1260
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-server-linux-amd64.tar.gz) | 2b0a1b107bf31913d9deec57eab9d3db2ea512c995ce3b4fe247f91c36fdebcc4484a2f8ff53d40a5bc6a04c7144827b85b40ac90c46a9b0cec8a680700f1b1c
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-server-linux-arm.tar.gz) | 2f1ab3bcacd82a9b6d92e09b7cdd63f57fc44623cdfb517512b634264fed87999d78b8571c7930839381b1ed4793b68343e85956d7a8c5bae77ba8f8ade06afa
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-server-linux-arm64.tar.gz) | ea67613c8356f650891a096881546afb27f00e86a9c777617817583628d38b4725f0f65da3b0732414cbc8f97316b3029a355177342a4b1d94cf02d79542e4cd
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-server-linux-ppc64le.tar.gz) | d1b151f3f47c28ead2304d2477fa25f24d12e3fd80e9d1b3b593db99b9a1c5821db4d089f4f1dd041796ea3fd814000c225a7e75aac1e5891a4e16517bcaceee
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-server-linux-s390x.tar.gz) | 69bf215fdc3ad53834eaa9a918452feb0803dffe381b6e03b73141364a697a576e5ed0242d448616707cb386190c21564fe89f8cf3409a7c621a86d86b2c7680
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-node-linux-amd64.tar.gz) | 88ae137316bab3bb1dcb6c78a4d725face618d41714400505b97ce9d3fa37a6caa036b9e8508ade6dd679e3a8c483a32aef9e400ab08d86b6bf39bc13f34e435
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-node-linux-arm.tar.gz) | 7eaaf2a2a4ee5181cb4c1567e99b8bf82a3da342799f5d2b34dd7f133313c3e3d2ac5a778110e178161788cb226bd64836fba35fbec21c8384e7725cae9b756c
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-node-linux-arm64.tar.gz) | 4f0ef95abc52da0e5d0c40434f8c324ddfb218a577114c4ead00f2ac1c01439922aee6fe347f702927a73b0166cd8b9f4c491d3a18a1a951d24c9ea7259d2655
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-node-linux-ppc64le.tar.gz) | 0424896e2fedae3a566a5aa2e4af26977a578066d49e3ad66307839c2d2dd1c53d1afcf16b2f6cebf0c74d2d60dbc118e6446d9c02aaab27e95b3a6d26889f51
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-node-linux-s390x.tar.gz) | 294788687a6e6d1ca2e4d56435b1174e4330abe64cc58b1372c3b9caaab4455586da4e3bfc62616b52ea7d678561fb77ce1f8d0023fd7d1e75e1db348c69939c
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.2/kubernetes-node-windows-amd64.tar.gz) | 61389f8c05c682102e3432a2f05f41b11d531124f61443429627f94ef6e970d44240d44d32aa467b814de0b54a17208b2d2696602ba5dd6d30f64db964900230
+
+## Changelog since v1.19.0-rc.1
+
+## Changes by Kind
+
+### API Change
+
+- A new alpha-level field, `SupportsFsGroup`, has been introduced for CSIDrivers to allow them to specify whether they support volume ownership and permission modifications. The `CSIVolumeSupportFSGroup` feature gate must be enabled to allow this field to be used. ([#92001](https://github.com/kubernetes/kubernetes/pull/92001), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, CLI and Storage]
+- The kube-controller-manager managed signers can now have distinct signing certificates and keys.  See the help about `--cluster-signing-[signer-name]-{cert,key}-file`.  `--cluster-signing-{cert,key}-file` is still the default. ([#90822](https://github.com/kubernetes/kubernetes/pull/90822), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Apps and Auth]
+
+### Feature
+
+- Added kube-apiserver metrics: apiserver_current_inflight_request_measures and, when API Priority and Fairness is enable, windowed_request_stats. ([#91177](https://github.com/kubernetes/kubernetes/pull/91177), [@MikeSpreitzer](https://github.com/MikeSpreitzer)) [SIG API Machinery, Instrumentation and Testing]
+- Rename pod_preemption_metrics to preemption_metrics. ([#93256](https://github.com/kubernetes/kubernetes/pull/93256), [@ahg-g](https://github.com/ahg-g)) [SIG Instrumentation and Scheduling]
+
+### Bug or Regression
+
+- Do not add nodes labeled with kubernetes.azure.com/managed=false to backend pool of load balancer. ([#93034](https://github.com/kubernetes/kubernetes/pull/93034), [@matthias50](https://github.com/matthias50)) [SIG Cloud Provider]
+- Do not retry volume expansion if CSI driver returns FailedPrecondition error ([#92986](https://github.com/kubernetes/kubernetes/pull/92986), [@gnufied](https://github.com/gnufied)) [SIG Node and Storage]
+- Fix: determine the correct ip config based on ip family ([#93043](https://github.com/kubernetes/kubernetes/pull/93043), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- Fix: initial delay in mounting azure disk & file ([#93052](https://github.com/kubernetes/kubernetes/pull/93052), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fixed the EndpointSliceController to correctly create endpoints for IPv6-only pods.
+  
+  Fixed the EndpointController to allow IPv6 headless services, if the IPv6DualStack
+  feature gate is enabled, by specifying `ipFamily: IPv6` on the service. (This already
+  worked with the EndpointSliceController.) ([#91399](https://github.com/kubernetes/kubernetes/pull/91399), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
+
+### Other (Cleanup or Flake)
+
+- Kube-up: defaults to limiting critical pods to the kube-system namespace to match behavior prior to 1.17 ([#93121](https://github.com/kubernetes/kubernetes/pull/93121), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider and Scheduling]
+- Update Golang to v1.14.5
+  - Update repo-infra to 0.0.7 (to support go1.14.5 and go1.13.13)
+    - Includes:
+      - bazelbuild/bazel-toolchains@3.3.2
+      - bazelbuild/rules_go@v0.22.7 ([#93088](https://github.com/kubernetes/kubernetes/pull/93088), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- Update Golang to v1.14.6
+  - Update repo-infra to 0.0.8 (to support go1.14.6 and go1.13.14)
+    - Includes:
+      - bazelbuild/bazel-toolchains@3.4.0
+      - bazelbuild/rules_go@v0.22.8 ([#93198](https://github.com/kubernetes/kubernetes/pull/93198), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- Update default etcd server version to 3.4.9 ([#92349](https://github.com/kubernetes/kubernetes/pull/92349), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle and Testing]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- go.etcd.io/etcd: 54ba958 → 18dfb9c
+- k8s.io/utils: 6e3d28b → 0bdb4ca
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.19.0-rc.1
+
+
+## Downloads for v1.19.0-rc.1
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes.tar.gz) | d4bc1d86ff77a1a8695091207b8181a246c8964ae1dd8967392aae95197c0339c7915a016c017ecab0b9d203b3205221ca766ce568d7ee52947e7f50f057af4f
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-src.tar.gz) | 79af4e01b0d5432f92b026730a0c60523069d312858c30fdcaeaf6ee159c71f3413a5075d82c0acd9b135b7a06d5ecb0c0d38b8a8d0f301a9d9bffb35d22f029
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-darwin-386.tar.gz) | 7d21bf9733810659576e67986d129208894adea3c571de662dbf80fb822e18abfc1644ea60a4e5fbe244a23b56aa973b76dafe789ead1bf7539f41bdd9bca886
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-darwin-amd64.tar.gz) | b4622e06c09bb08a0dc0115bfcd991c50459c7b772889820648ed1c05a425605d10b71b92c58c119b77baa3bca209f9c75827d2cde69d128a5cfcada5f37be39
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-linux-386.tar.gz) | f51032ad605543f68a2a4da3bede1f3e7be0dd63b03b751fef5f133e8d64bec02bfe7433b75e3d0c4ae122d4e0cf009095800c638d2cc81f6fb81b488f5a6dab
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-linux-amd64.tar.gz) | 48489d22969f69a5015988e596d597c64ea18675649afe55ad119dbbe98ba9a4104d5e323704cf1f3cbdfca3feac629d3813e260a330a72da12f1a794d054f76
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-linux-arm.tar.gz) | d9f8a6f6f3d09be9c08588c2b5153a4d8cc9db496bde3da2f3af472c260566d1391cd8811f2c05d4f302db849a38432f25228d9bbb59aaaf0dfba64b33f8ee8e
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-linux-arm64.tar.gz) | 1c3590750a3f02e0e5845e1135cc3ab990309bdecfe64c089842a134eae57b573488531696796185ed12dde2d6f95d2e3656dd9893d04cd0adbe025513ffff30
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-linux-ppc64le.tar.gz) | 158a562d5dbbe90cd56b5d757823adda1919e9b5db8005fb6e2523358e5a20628d55ec1903c0e317a0d8ac9b9a649eea23d9ea746db22b73d6d580ae8c067077
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-linux-s390x.tar.gz) | 47c140567dc593caf065f295ed6006efcde010a526a96c8d3ef5f3d9a9dc6b413bc197dc822648067fe16299908ada7046c2a8a3213d4296b04b51a264ad40e9
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-windows-386.tar.gz) | e25d7d4ad3e6f6e6cfba181c5871e56de2751f88b640502745f6693ddd86ccd7eef8aebaa30955afdbbd0320a5b51d4e9e17f71baab37a470aac284178a0e21c
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-client-windows-amd64.tar.gz) | fd8463b04b5d7f115104245fa1dd53de6656b349dad4cfd55f239012d4f2c1a8e35aa3f3554138df9ddfea9d7702b51a249f6db698c0cea7c36e5bc98a017fe7
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-server-linux-amd64.tar.gz) | 96acce78bba3779bef616de28da5d75bc4dc0b52fe0bf03b169c469ade9a8cd38b19c4620d222d67bff9ceeb0c5ebf893f55c1de02356bcebe5689890d0478f7
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-server-linux-arm.tar.gz) | 1e561f3edbc66d2ab7f6f1ffe8dc1c01cec13ee3ba700458bd5d87202723cc832f3305a864a3b569463c96d60c9f60c03b77f210663cc40589e40515b3a32e75
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-server-linux-arm64.tar.gz) | ba8fc011ac0e54cb1a0e0e3ee5f1cff4d877f4fdd75e15bf25b1cf817b3cf2bc85f9809d3cc76e9145f07a837960843ca68bdf02fe970c0043fc9ff7b53da021
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-server-linux-ppc64le.tar.gz) | 1f506676284ab2f6bd3fc8a29a062f4fddf5346ef30be9363f640467c64011144381180c5bf74ec885d2f54524e82e21c745c5d2f1b191948bc40db2a09a2900
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-server-linux-s390x.tar.gz) | 5a7101288d51297c3346d028176b4b997afd8652d6481cec82f8863a91209fec6e8a9286a9bd7543b428e6ef82c1c68a7ce0782191c4682634015a032f749554
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-node-linux-amd64.tar.gz) | 6852edc9818cb51a7e738e44a8bca2290777320e62518c024962fddd05f7ef390fb5696537068fd75e340bae909602f0bbc2aa5ebf6c487c7b1e990250f16810
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-node-linux-arm.tar.gz) | f13edad4684d0de61e4cd7e524f891c75e0efe1050911d9bf0ee3a77cac28f57dca68fb990df6b5d9646e9b389527cbb861de10e12a84e57788f339db05936cb
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-node-linux-arm64.tar.gz) | 69480150325525459aed212b8c96cb1865598cb5ecbeb57741134142d65e8a96258ec298b86d533ce88d2c499c4ad17e66dd3f0f7b5e9c34882889e9cb384805
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-node-linux-ppc64le.tar.gz) | 774cfa9a4319ede166674d3e8c46900c9319d98ffba5b46684244e4bb15d94d31df8a6681e4711bc744d7e92fd23f207505eda98f43c8e2383107badbd43f289
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-node-linux-s390x.tar.gz) | 7e696988febb1e913129353134191b23c6aa5b0bea7c9c9168116596b827c091a88049ca8b8847dda25ecd4467cca4cc48cae8699635b5e78b83aab482c109f5
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-rc.1/kubernetes-node-windows-amd64.tar.gz) | 067182292d9e17f0d4974051681bedcf5ed6017dc80485541f89ea1f211085714165941a5262a4997b7bfc2bd190f2255df4c1b39f86a3278487248111d83cd4
+
+## Changelog since v1.19.0-rc.0
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - Azure blob disk feature(`kind`: `Shared`, `Dedicated`) has been deprecated, you should use `kind`: `Managed` in `kubernetes.io/azure-disk` storage class. ([#92905](https://github.com/kubernetes/kubernetes/pull/92905), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+ 
+## Changes by Kind
+
+### Deprecation
+
+- Kubeadm: deprecate the "kubeadm alpha kubelet config enable-dynamic" command. To continue using the feature please defer to the guide for "Dynamic Kubelet Configuration" at k8s.io. ([#92881](https://github.com/kubernetes/kubernetes/pull/92881), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+
+### API Change
+
+- Added pod version skew strategy for seccomp profile to synchronize the deprecated annotations with the new API Server fields. Please see the corresponding section [in the KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190717-seccomp-ga.mdversion-skew-strategy) for more detailed explanations. ([#91408](https://github.com/kubernetes/kubernetes/pull/91408), [@saschagrunert](https://github.com/saschagrunert)) [SIG Apps, Auth, CLI and Node]
+- Custom Endpoints are now mirrored to EndpointSlices by a new EndpointSliceMirroring controller. ([#91637](https://github.com/kubernetes/kubernetes/pull/91637), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, Auth, Cloud Provider, Instrumentation, Network and Testing]
+- Generic ephemeral volumes, a new alpha feature under the `GenericEphemeralVolume` feature gate, provide a more flexible alternative to `EmptyDir` volumes: as with `EmptyDir`, volumes are created and deleted for each pod automatically by Kubernetes. But because the normal provisioning process is used (`PersistentVolumeClaim`), storage can be provided by third-party storage vendors and all of the usual volume features work. Volumes don't need to be empt; for example, restoring from snapshot is supported. ([#92784](https://github.com/kubernetes/kubernetes/pull/92784), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, CLI, Instrumentation, Node, Scheduling, Storage and Testing]
+
+### Feature
+
+- ACTION REQUIRED : In CoreDNS v1.7.0, [metrics names have been changed](https://github.com/coredns/coredns/blob/master/notes/coredns-1.7.0.md&#35;metric-changes) which will be backward incompatible with existing reporting formulas that use the old metrics' names. Adjust your formulas to the new names before upgrading. 
+  
+  Kubeadm now includes CoreDNS version v1.7.0. Some of the major changes include:
+  -  Fixed a bug that could cause CoreDNS to stop updating service records.
+  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
+  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
+  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
+  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
+  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92651](https://github.com/kubernetes/kubernetes/pull/92651), [@rajansandeep](https://github.com/rajansandeep)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Add tags support for Azure File Driver ([#92825](https://github.com/kubernetes/kubernetes/pull/92825), [@ZeroMagic](https://github.com/ZeroMagic)) [SIG Cloud Provider and Storage]
+- Audit events for API requests to deprecated API versions now include a `"k8s.io/deprecated": "true"` audit annotation. If a target removal release is identified, the audit event includes a `"k8s.io/removal-release": "<majorVersion>.<minorVersion>"` audit annotation as well. ([#92842](https://github.com/kubernetes/kubernetes/pull/92842), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Instrumentation]
+- Cloud node-controller use InstancesV2 ([#91319](https://github.com/kubernetes/kubernetes/pull/91319), [@gongguan](https://github.com/gongguan)) [SIG Apps, Cloud Provider, Scalability and Storage]
+- Kubeadm: deprecate the "--csr-only" and "--csr-dir" flags of the "kubeadm init phase certs" subcommands. Please use "kubeadm alpha certs generate-csr" instead. This new command allows you to generate new private keys and certificate signing requests for all the control-plane components, so that the certificates can be signed by an external CA. ([#92183](https://github.com/kubernetes/kubernetes/pull/92183), [@wallrj](https://github.com/wallrj)) [SIG Cluster Lifecycle]
+- Server-side apply behavior has been regularized in the case where a field is removed from the applied configuration. Removed fields which have no other owners are deleted from the live object, or reset to their default value if they have one. Safe ownership transfers, such as the transfer of a `replicas` field from a user to an HPA without resetting to the default value are documented in [Transferring Ownership](https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;transferring-ownership) ([#92661](https://github.com/kubernetes/kubernetes/pull/92661), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Testing]
+- Set CSIMigrationvSphere feature gates to beta.
+  Users should enable CSIMigration + CSIMigrationvSphere features and install the vSphere CSI Driver (https://github.com/kubernetes-sigs/vsphere-csi-driver) to move workload from the in-tree vSphere plugin "kubernetes.io/vsphere-volume" to vSphere CSI Driver.
+  
+  Requires: vSphere vCenter/ESXi Version: 7.0u1, HW Version: VM version 15 ([#92816](https://github.com/kubernetes/kubernetes/pull/92816), [@divyenpatel](https://github.com/divyenpatel)) [SIG Cloud Provider and Storage]
+- Support a smooth upgrade from client-side apply to server-side apply without conflicts, as well as support the corresponding downgrade. ([#90187](https://github.com/kubernetes/kubernetes/pull/90187), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery and Testing]
+- Trace output in apiserver logs is more organized and comprehensive. Traces are nested, and for all non-long running request endpoints, the entire filter chain is instrumented (e.g. authentication check is included). ([#88936](https://github.com/kubernetes/kubernetes/pull/88936), [@jpbetz](https://github.com/jpbetz)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Scheduling]
+- `kubectl alpha debug` now supports debugging nodes by creating a debugging container running in the node's host namespaces. ([#92310](https://github.com/kubernetes/kubernetes/pull/92310), [@verb](https://github.com/verb)) [SIG CLI]
+
+### Failing Test
+
+- Kube-proxy iptables min-sync-period defaults to 1 sec. Previously, it was 0. ([#92836](https://github.com/kubernetes/kubernetes/pull/92836), [@aojea](https://github.com/aojea)) [SIG Network]
+
+### Bug or Regression
+
+- Dockershim security: pod sandbox now always run with `no-new-privileges` and `runtime/default` seccomp profile
+  dockershim seccomp: custom profiles can now have smaller seccomp profiles when set at pod level ([#90948](https://github.com/kubernetes/kubernetes/pull/90948), [@pjbgf](https://github.com/pjbgf)) [SIG Node]
+- Eviction requests for pods that have a non-zero DeletionTimestamp will always succeed ([#91342](https://github.com/kubernetes/kubernetes/pull/91342), [@michaelgugino](https://github.com/michaelgugino)) [SIG Apps]
+- Fix detection of image filesystem, disk metrics for devicemapper, detection of OOM Kills on 5.0+ linux kernels. ([#92919](https://github.com/kubernetes/kubernetes/pull/92919), [@dashpole](https://github.com/dashpole)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Node]
+- Fixed memory leak in endpointSliceTracker ([#92838](https://github.com/kubernetes/kubernetes/pull/92838), [@tnqn](https://github.com/tnqn)) [SIG Apps and Network]
+- Kube-aggregator certificates are dynamically loaded on change from disk ([#92791](https://github.com/kubernetes/kubernetes/pull/92791), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
+- Kube-up now includes CoreDNS version v1.7.0. Some of the major changes include:
+  -  Fixed a bug that could cause CoreDNS to stop updating service records.
+  -  Fixed a bug in the forward plugin where only the first upstream server is always selected no matter which policy is set.
+  -  Remove already deprecated options `resyncperiod` and `upstream` in the Kubernetes plugin.
+  -  Includes Prometheus metrics name changes (to bring them in line with standard Prometheus metrics naming convention). They will be backward incompatible with existing reporting formulas that use the old metrics' names.
+  -  The federation plugin (allows for v1 Kubernetes federation) has been removed.
+  More details are available in https://coredns.io/2020/06/15/coredns-1.7.0-release/ ([#92718](https://github.com/kubernetes/kubernetes/pull/92718), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cloud Provider]
+- The apiserver will no longer proxy non-101 responses for upgrade requests. This could break proxied backends (such as an extension API server) that respond to upgrade requests with a non-101 response code. ([#92941](https://github.com/kubernetes/kubernetes/pull/92941), [@tallclair](https://github.com/tallclair)) [SIG API Machinery]
+- The terminationGracePeriodSeconds from pod spec is respected for the mirror pod. ([#92442](https://github.com/kubernetes/kubernetes/pull/92442), [@tedyu](https://github.com/tedyu)) [SIG Node and Testing]
+
+### Other (Cleanup or Flake)
+
+- --cache-dir sets cache directory for both http and discovery, defaults to $HOME/.kube/cache ([#92910](https://github.com/kubernetes/kubernetes/pull/92910), [@soltysh](https://github.com/soltysh)) [SIG API Machinery and CLI]
+- Fix: license issue in blob disk feature ([#92824](https://github.com/kubernetes/kubernetes/pull/92824), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- github.com/cilium/ebpf: [9f1617e → 1c8d4c9](https://github.com/cilium/ebpf/compare/9f1617e...1c8d4c9)
+- github.com/coredns/corefile-migration: [v1.0.8 → v1.0.10](https://github.com/coredns/corefile-migration/compare/v1.0.8...v1.0.10)
+- github.com/google/cadvisor: [8450c56 → v0.37.0](https://github.com/google/cadvisor/compare/8450c56...v0.37.0)
+- github.com/json-iterator/go: [v1.1.9 → v1.1.10](https://github.com/json-iterator/go/compare/v1.1.9...v1.1.10)
+- github.com/opencontainers/runc: [1b94395 → 819fcc6](https://github.com/opencontainers/runc/compare/1b94395...819fcc6)
+- github.com/prometheus/client_golang: [v1.6.0 → v1.7.1](https://github.com/prometheus/client_golang/compare/v1.6.0...v1.7.1)
+- github.com/prometheus/common: [v0.9.1 → v0.10.0](https://github.com/prometheus/common/compare/v0.9.1...v0.10.0)
+- github.com/prometheus/procfs: [v0.0.11 → v0.1.3](https://github.com/prometheus/procfs/compare/v0.0.11...v0.1.3)
+- github.com/rubiojr/go-vhd: [0bfd3b3 → 02e2102](https://github.com/rubiojr/go-vhd/compare/0bfd3b3...02e2102)
+- sigs.k8s.io/structured-merge-diff/v3: v3.0.0 → 43c19bb
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.19.0-beta.2
+
+
+## Downloads for v1.19.0-beta.2
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes.tar.gz) | 806c1734a57dfc1800730fcb25aeb60d50d19d248c0e2a92ede4b6c4565745b4f370d4fd925bef302a96fba89102b7560b8f067240e0f35f6ec6caa29971dea4
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-src.tar.gz) | 507372c6d7ea380ec68ea237141a2b62953a2e1d1d16288f37820b605e33778c5f43ac5a3dedf39f7907d501749916221a8fa4d50be1e5a90b3ce23d36eaa075
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-darwin-386.tar.gz) | 6d20ca8d37b01213dcb98a1e49d44d414043ce485ae7df9565dfb7914acb1ec42b7aeb0c503b8febc122a8b444c6ed13eec0ff3c88033c6db767e7af5dbbc65d
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | e9caa5463a662869cfc8b9254302641aee9b53fa2119244bd65ef2c66e8c617f7db9b194a672ff80d7bc42256e6560db9fe8a00b2214c0ef023e2d6feed58a3a
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-linux-386.tar.gz) | 48296417fcd2c2f6d01c30dcf66956401ea46455c52a2bbd76feb9b117502ceaa2fb10dae944e087e7038b9fdae5b835497213894760ca01698eb892087490d2
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | e2cc7819974316419a8973f0d77050b3262c4e8d078946ff9f6f013d052ec1dd82893313feff6e4493ae0fd3fb62310e6ce4de49ba6e80f8b9979650debf53f2
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-linux-arm.tar.gz) | 484aac48a7a736970ea0766547453b7d37b25ed29fdee771734973e3e080b33f6731eecc458647db962290b512d32546e675e4658287ced3214e87292b98a643
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | f793078dc2333825a6679126b279cb0a3415ded8c650478e73c37735c6aa9576b68b2a4165bb77ef475884d50563ea236d8db4c72b2e5552b5418ea06268daae
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | 4c204b8d3b2717470ee460230b6bdc63725402ad3d24789397934bfe077b94d68041a376864b618e01f541b5bd00d0e63d75aa531a327ab0082c01eb4b9aa5ee
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | d0f6e4ddbf122ebcb4c5a980d5f8e33a23213cb438983341870f288afd17e73ec42f0ded55a3a9622c57700e68999228508d449ca206aca85f3254f7622375db
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-windows-386.tar.gz) | a615a7821bba1f8e4115b7981347ed94a79947c78d32c692cd600e21e0de29fedfc4a39dc08ca516f2f35261cf4a6d6ce557008f034e0e1d311fa9e75478ec0c
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | 34046130c5ebb3afe17e6e3cf88229b8d3281a9ac9c28dece1fd2d49a11b7be011700b74d9b8111dee7d0943e5ebfa208185bae095c2571aa54e0f9201e2cddd
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | c922058ce9c665e329d3d4647aac5d2dd22d9a8af63a21e6af98943dfd14f2b90268c53876f42a64093b96499ee1109803868c9aead4c15fd8db4b1bbec58fd9
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-server-linux-arm.tar.gz) | 4f17489b946dc04570bfab87015f2c2401b139b9ee745ed659bc94ccd116f3f23e249f83e19aaa418aa980874fffb478b1ec7340aa25292af758c9eabd4c2022
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | 69e44a63d15962de95a484e311130d415ebfec16a9da54989afc53a835c5b67de20911d71485950d07259a0f8286a299f4d74f90c73530e905da8dc60e391597
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | 66b30ebad7a8226304150aa42a1bd660a0b3975fecbfd8dbbea3092936454d9f81c8083841cc67c6645ab771383b66c7f980dd65319803078c91436c55d5217a
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | 0e197280f99654ec9e18ea01a9fc848449213ce28521943bc5d593dd2cac65310b6a918f611ea283b3a0377347eb718e99dd59224b8fad8adb223d483fa9fecb
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | f40afee38155c5163ba92e3fa3973263ca975f3b72ac18535799fb29180413542ef86f09c87681161affeef94eb0bd38e7cf571a73ab0f51a88420f1aedeaeec
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-node-linux-arm.tar.gz) | 6088b11767b77f0ec932a9f1aee9f0c7795c3627529f259edf4d8b1be2e1a324a75c89caed65c6aa277c2fd6ee23b3ebeb05901f351cd2dde0a833bbbd6d6d07
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | e790c491d057721b94d0d2ad22dd5c75400e8602e95276471f20cd2181f52c5be38e66b445d8360e1fb671627217eb0b7735b485715844d0e9908cf3de249464
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | 04f696cfab66f92b4b22c23807a49c344d6a157a9ac3284a267613369b7f9f5887f67902cb8a2949caa204f89fdc65fe442a03c2c454013523f81b56476d39a0
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | c671e20f69f70ec567fb16bbed2fecac3099998a3365def1e0755e41509531fd65768f7a04015b27b17e6a5884e65cddb82ff30a8374ed011c5e2008817259db
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | 23d712fb2d455b5095d31b9c280d92442f7871786808528a1b39b9babf169dc7ae467f1ee2b2820089d69aa2342441d0290edf4f710808c78277e612f870321d
+
+## Changelog since v1.19.0-beta.1
+
+## Changes by Kind
+
+### Deprecation
+
+- Kubeadm: remove the deprecated "--use-api" flag for "kubeadm alpha certs renew" ([#90143](https://github.com/kubernetes/kubernetes/pull/90143), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Scheduler's alpha feature 'ResourceLimitsPriorityFunction' is completely removed due to lack of usage ([#91883](https://github.com/kubernetes/kubernetes/pull/91883), [@SataQiu](https://github.com/SataQiu)) [SIG Scheduling and Testing]
+
+### API Change
+
+- Remove `BindTimeoutSeconds` from schedule configuration `KubeSchedulerConfiguration` ([#91580](https://github.com/kubernetes/kubernetes/pull/91580), [@cofyc](https://github.com/cofyc)) [SIG Scheduling and Testing]
+- Resolve regression in metadata.managedFields handling in update/patch requests submitted by older API clients ([#91748](https://github.com/kubernetes/kubernetes/pull/91748), [@apelisse](https://github.com/apelisse)) [SIG API Machinery and Testing]
+- The CertificateSigningRequest API is promoted to certificates.k8s.io/v1 with the following changes:
+  - `spec.signerName` is now required, and requests for `kubernetes.io/legacy-unknown` are not allowed to be created via the `certificates.k8s.io/v1` API
+  - `spec.usages` is now required, may not contain duplicate values, and must only contain known usages
+  - `status.conditions` may not contain duplicate types
+  - `status.conditions[*].status` is now required
+  - `status.certificate` must be PEM-encoded, and contain only CERTIFICATE blocks ([#91685](https://github.com/kubernetes/kubernetes/pull/91685), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Architecture, Auth, CLI and Testing]
+- The Kubelet's `--cloud-provider` and `--cloud-config` options are now marked as deprecated. ([#90408](https://github.com/kubernetes/kubernetes/pull/90408), [@knabben](https://github.com/knabben)) [SIG Cloud Provider and Node]
+
+### Feature
+
+- A new extension point `PostFilter` is introduced to scheduler framework which runs after Filter phase to resolve scheduling filter failures. A typical implementation is running preemption logic. ([#91314](https://github.com/kubernetes/kubernetes/pull/91314), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- Added --privileged flag to kubectl run ([#90569](https://github.com/kubernetes/kubernetes/pull/90569), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- Enable feature Gate DefaultPodTopologySpread to use PodTopologySpread plugin to do defaultspreading. In doing so, legacy DefaultPodTopologySpread plugin is disabled. ([#91793](https://github.com/kubernetes/kubernetes/pull/91793), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Extend AWS azToRegion method to support Local Zones ([#90874](https://github.com/kubernetes/kubernetes/pull/90874), [@Jeffwan](https://github.com/Jeffwan)) [SIG Cloud Provider]
+- Kube-Proxy now supports IPv6DualStack on Windows with the IPv6DualStack feature gate. ([#90853](https://github.com/kubernetes/kubernetes/pull/90853), [@kumarvin123](https://github.com/kumarvin123)) [SIG Network, Node and Windows]
+- Kube-controller-manager: the `--experimental-cluster-signing-duration` flag is marked as deprecated for removal in v1.22, and is replaced with `--cluster-signing-duration`. ([#91154](https://github.com/kubernetes/kubernetes/pull/91154), [@liggitt](https://github.com/liggitt)) [SIG Auth and Cloud Provider]
+- Support kubectl create deployment with replicas ([#91562](https://github.com/kubernetes/kubernetes/pull/91562), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- The RotateKubeletClientCertificate feature gate has been promoted to GA, and the kubelet --feature-gate RotateKubeletClientCertificate parameter will be removed in 1.20. ([#91780](https://github.com/kubernetes/kubernetes/pull/91780), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- The metric label name of `kubernetes_build_info` has been updated from `camel case` to `snake case`:
+  - gitVersion --> git_version
+  - gitCommit --> git_commit
+  - gitTreeState --> git_tree_state
+  - buildDate --> build_date
+  - goVersion --> go_version
+  
+  This change happens in `kube-apiserver`、`kube-scheduler`、`kube-proxy` and `kube-controller-manager`. ([#91805](https://github.com/kubernetes/kubernetes/pull/91805), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
+- `EventRecorder()` is exposed to `FrameworkHandle` interface so that scheduler plugin developers can choose to log cluster-level events. ([#92010](https://github.com/kubernetes/kubernetes/pull/92010), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+
+### Bug or Regression
+
+- Azure: set dest prefix and port for IPv6 inbound security rule ([#91831](https://github.com/kubernetes/kubernetes/pull/91831), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- Fix etcd version migration script in etcd image. ([#91925](https://github.com/kubernetes/kubernetes/pull/91925), [@wenjiaswe](https://github.com/wenjiaswe)) [SIG API Machinery]
+- Fix issues when supported huge page sizes changes ([#80831](https://github.com/kubernetes/kubernetes/pull/80831), [@odinuge](https://github.com/odinuge)) [SIG Node and Testing]
+- Fix kubectl describe output format for empty annotations. ([#91405](https://github.com/kubernetes/kubernetes/pull/91405), [@iyashu](https://github.com/iyashu)) [SIG CLI]
+- Fixed an issue that a Pod's nominatedNodeName cannot be cleared upon node deletion. ([#91750](https://github.com/kubernetes/kubernetes/pull/91750), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- Fixed several bugs involving the IPFamily field when creating or updating services
+  in clusters with the IPv6DualStack feature gate enabled.
+  
+  Beware that the behavior of the IPFamily field is strange and inconsistent and will
+  likely be changed before the dual-stack feature goes GA. Users should treat the
+  field as "write-only" for now and should not make any assumptions about a service
+  based on its current IPFamily value. ([#91400](https://github.com/kubernetes/kubernetes/pull/91400), [@danwinship](https://github.com/danwinship)) [SIG Apps and Network]
+- Kube-apiserver: fixes scale subresource patch handling to avoid returning unnecessary 409 Conflict error to clients ([#90342](https://github.com/kubernetes/kubernetes/pull/90342), [@liggitt](https://github.com/liggitt)) [SIG Apps, Autoscaling and Testing]
+- Kube-up: fixes setup of validating admission webhook credential configuration ([#91995](https://github.com/kubernetes/kubernetes/pull/91995), [@liggitt](https://github.com/liggitt)) [SIG Cloud Provider and Cluster Lifecycle]
+- Kubeadm: Add retries for kubeadm join / UpdateStatus to make update status more resilient by adding a retry loop to this operation ([#91952](https://github.com/kubernetes/kubernetes/pull/91952), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
+- On AWS nodes with multiple network interfaces, kubelet should now more reliably report addresses from secondary interfaces. ([#91889](https://github.com/kubernetes/kubernetes/pull/91889), [@anguslees](https://github.com/anguslees)) [SIG Cloud Provider]
+- Resolve regression in metadata.managedFields handling in create/update/patch requests not using server-side apply ([#91690](https://github.com/kubernetes/kubernetes/pull/91690), [@apelisse](https://github.com/apelisse)) [SIG API Machinery and Testing]
+
+### Other (Cleanup or Flake)
+
+- Deprecate the `--target-ram-md` flags that is no longer used for anything. ([#91818](https://github.com/kubernetes/kubernetes/pull/91818), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
+- Replace framework.Failf with ExpectNoError ([#91811](https://github.com/kubernetes/kubernetes/pull/91811), [@lixiaobing1](https://github.com/lixiaobing1)) [SIG Instrumentation, Storage and Testing]
+- The Kubelet's `--experimental-allocatable-ignore-eviction` option is now marked as deprecated. ([#91578](https://github.com/kubernetes/kubernetes/pull/91578), [@knabben](https://github.com/knabben)) [SIG Node]
+- Update corefile-migration library to 1.0.8 ([#91856](https://github.com/kubernetes/kubernetes/pull/91856), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+- github.com/Azure/azure-sdk-for-go: [v40.2.0+incompatible → v43.0.0+incompatible](https://github.com/Azure/azure-sdk-for-go/compare/v40.2.0...v43.0.0)
+- github.com/coredns/corefile-migration: [v1.0.6 → v1.0.8](https://github.com/coredns/corefile-migration/compare/v1.0.6...v1.0.8)
+- k8s.io/klog/v2: v2.0.0 → v2.1.0
+
+### Removed
+_Nothing has changed._
+
+
+
+# v1.19.0-beta.1
+
+
+## Downloads for v1.19.0-beta.1
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes.tar.gz) | c4ab79e987790fbda842310525abecee60861e44374c414159e60d74e85b4dd36d9d49253b8e7f08aec36a031726f9517d0a401fb748e41835ae2dc86aee069d
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-src.tar.gz) | 08d1aadb8a31b35f3bc39f44d8f97b7e98951f833bb87f485f318c6acfdb53539851fbb2d4565036e00b6f620c5b1882c6f9620759c3b36833da1d6b2b0610f2
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-darwin-386.tar.gz) | 55eb230fdb4e60ded6c456ec6e03363c6d55e145a956aa5eff0c2b38d8ecfe848b4a404169def45d392e747e4d04ee71fe3182ab1e6426110901ccfb2e1bc17f
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | ddc03644081928bd352c40077f2a075961c90a7159964be072b3e05ec170a17d6d78182d90210c18d24d61e75b45eae3d1b1486626db9e28f692dfb33196615c
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-linux-386.tar.gz) | 6e1e00a53289bd9a4d74a61fce4665786051aafe8fef8d1d42de88ba987911bfb7fd5f4a2c3771ae830819546cf9f4badd94fd90c50ca74367c1ace748e8eafd
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | 2c4db87c61bc4a528eb2af9246648fc7a015741fe52f551951fda786c252eca1dc48a4325be70e6f80f1560f773b763242334ad4fe06657af290e610f10bc231
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-linux-arm.tar.gz) | 8a2bebf67cbd8f91ba38edc36a239aa50d3e58187827763eb5778a5ca0d9d35be97e193b794bff415e8f5de071e47659033dc0420e038d78cc32e841a417a62a
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | f2d0029efc03bf17554c01c11e77b161b8956d9da4b17962ca878378169cbdee04722bbda87279f4b7431c91db0e92bfede45dcc6d971f34d3fe891339b7c47b
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | 45eb3fe40951ba152f05aa0fe41b7c17ffb91ee3cecb12ec19d2d9cdb467267c1eb5696660687852da314eb8a14a9ebf5f5da21eca252e1c2e3b18dca151ad0d
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | 2097ac5d593dd0951a34df9bdf7883b5c228da262042904ee3a2ccfd1f9c955ff6a3a59961850053e41646bce8fc70a023efe9e9fe49f14f9a6276c8da22f907
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-windows-386.tar.gz) | c38b034e8ac3a5972a01f36b184fe1a195f6a422a3c6564f1f3faff858b1220173b6ab934e7b7ec200931fd7d9456e947572620d82d02e7b05fc61a7fb67ec70
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | 0501694734381914882836e067dc177e8bccd48a4826e286017dc5f858f27cdef348edbb664dda59162f6cd3ac14a9e491e314a3ea032dec43bc77610ce8c8bc
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | 0dd2058889eabbf0b05b6fafd593997ff9911467f0fc567c142583adf0474f4d0e2f4024b4906ff9ee4264d1cbbfde66596ccb8c73b3d5bb79f67e5eb4b3258a
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-server-linux-arm.tar.gz) | 9c3a33d7c198116386178a4f8ee7d4df82e810d6f26833f19f93eff112c29f9f89e5ee790013ad1d497856ecb2662ee95a49fc6a41f0d33cc67e431d06135b88
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | 11f83132f729bec4a4d84fc1983dbd5ddd1643d000dc74c6e05f35637de21533834a572692fc1281c7b0bd29ee93e721fb00e276983e36c327a1950266b17f6d
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | 949334065d968f10207089db6175dcc4bf9432b3b48b120f689cd39c56562a0f4f60d774c95a20a5391d0467140a4c3cb6b2a2dfedccfda6c20f333a63ebcf81
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | 29e8f6a22969d8ab99bf6d272215f53d8f7a125d0c5c20981dcfe960ed440369f831c71a94bb61974b486421e4e9ed936a9421a1be6f02a40e456daab4995663
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | 3d9767e97a40b501f29bbfc652c8fd841eae1dee22a97fdc20115e670081de7fa8e84f6e1be7bbf2376b59c5eef15fb5291415ae2e24ce4c9c5e141faa38c47c
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-node-linux-arm.tar.gz) | 8ccf401e0bd0c59403af49046b49cf556ff164fca12c5233169a80e18cc4367f404fd7edd236bb862bff9fd25b687d48a8d57d5567809b89fd2727549d0dc48f
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | 3e1fa2bde05a4baec6ddd43cd1994d155a143b9c825ab5dafe766efc305cb1aad92d6026c41c05e9da114a04226361fb6b0510b98e3b05c3ed510da23db403b3
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | 01df4be687f5634afa0ab5ef06f8cee17079264aa452f00a45eccb8ace654c9acc6582f4c74e8242e6ca7715bc48bf2a7d2c4d3d1eef69106f99c8208bc245c4
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | 5523b0b53c30b478b1a9e1df991607886acdcde8605e1b44ef91c94993ca2256c74f6e38fbdd24918d7dbf7afd5cd73d24a3f7ff911e9762819776cc19935363
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | 8e7ebf000bc8dec1079a775576807c0a11764d20a59e16f89d93c948532ba5e6864efd3e08c3e8cc5bd7e7f97bb65baefbf2f01cb226897abd5e01997a4c4f75
+
+## Changelog since v1.19.0-alpha.3
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+ - ACTION REQUIRED : Switch core master base images (kube-controller-manager) from debian to distroless. If you need Flex Volumes support using scripts, please build your own image with required packages (like bash) ([#91329](https://github.com/kubernetes/kubernetes/pull/91329), [@dims](https://github.com/dims)) [SIG Cloud Provider, Release, Storage and Testing]
+  - Kubeadm: Move the "kubeadm init" phase "kubelet-start" later in the init workflow, after the "kubeconfig" phase. This makes kubeadm start the kubelet only after the KubeletConfiguration component config file (/var/lib/kubelet/config.yaml) is generated and solves a problem where init systems like OpenRC cannot crashloop the kubelet service. ([#90892](https://github.com/kubernetes/kubernetes/pull/90892), [@xphoniex](https://github.com/xphoniex)) [SIG Cluster Lifecycle]
+ 
+## Changes by Kind
+
+### API Change
+
+- CertificateSigningRequest API conditions were updated:
+  - a `status` field was added; this field defaults to `True`, and may only be set to `True` for `Approved`, `Denied`, and `Failed` conditions
+  - a `lastTransitionTime` field was added
+  - a `Failed` condition type was added to allow signers to indicate permanent failure; this condition can be added via the `certificatesigningrequests/status` subresource.
+  - `Approved` and `Denied` conditions are mutually exclusive
+  - `Approved`, `Denied`, and `Failed` conditions can no longer be removed from a CSR ([#90191](https://github.com/kubernetes/kubernetes/pull/90191), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps, Auth, CLI and Node]
+- EnvVarSource api doc bug fixes ([#91194](https://github.com/kubernetes/kubernetes/pull/91194), [@wawa0210](https://github.com/wawa0210)) [SIG Apps]
+- Fixed: log timestamps now include trailing zeros to maintain a fixed width ([#91207](https://github.com/kubernetes/kubernetes/pull/91207), [@iamchuckss](https://github.com/iamchuckss)) [SIG Apps and Node]
+- The Kubelet's --node-status-max-images option is now available via the Kubelet config file field nodeStatusMaxImage ([#91275](https://github.com/kubernetes/kubernetes/pull/91275), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's --seccomp-profile-root option is now available via the Kubelet config file field seccompProfileRoot. ([#91182](https://github.com/kubernetes/kubernetes/pull/91182), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's `--enable-server` and `--provider-id` option is now available via the Kubelet config file field `enableServer` and `providerID` respectively. ([#90494](https://github.com/kubernetes/kubernetes/pull/90494), [@knabben](https://github.com/knabben)) [SIG Node]
+- The Kubelet's `--really-crash-for-testing` and  `--chaos-chance` options are now marked as deprecated. ([#90499](https://github.com/kubernetes/kubernetes/pull/90499), [@knabben](https://github.com/knabben)) [SIG Node]
+- The alpha `DynamicAuditing` feature gate and `auditregistration.k8s.io/v1alpha1` API have been removed and are no longer supported. ([#91502](https://github.com/kubernetes/kubernetes/pull/91502), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and Testing]
+- `NodeResourcesLeastAllocated` and `NodeResourcesMostAllocated` plugins now support customized weight on the CPU and memory. ([#90544](https://github.com/kubernetes/kubernetes/pull/90544), [@chendave](https://github.com/chendave)) [SIG Scheduling]
+- `PostFilter` type is added to scheduler component config API on version v1beta1. ([#91547](https://github.com/kubernetes/kubernetes/pull/91547), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- `kubescheduler.config.k8s.io` is now beta ([#91420](https://github.com/kubernetes/kubernetes/pull/91420), [@pancernik](https://github.com/pancernik)) [SIG Scheduling]
+
+### Feature
+
+- Add --logging-format flag for component-base. Defaults to "text" using unchanged klog. ([#89683](https://github.com/kubernetes/kubernetes/pull/89683), [@yuzhiquan](https://github.com/yuzhiquan)) [SIG Instrumentation]
+- Add --port flag to kubectl create deployment ([#91113](https://github.com/kubernetes/kubernetes/pull/91113), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
+- Add .import-restrictions file to cmd/cloud-controller-manager. ([#90630](https://github.com/kubernetes/kubernetes/pull/90630), [@nilo19](https://github.com/nilo19)) [SIG API Machinery and Cloud Provider]
+- Add Annotations to CRI-API ImageSpec objects. ([#90061](https://github.com/kubernetes/kubernetes/pull/90061), [@marosset](https://github.com/marosset)) [SIG Node and Windows]
+- Added feature support to Windows for configuring session affinity of Kubernetes services.
+  required: [Windows Server vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) (or higher) ([#91701](https://github.com/kubernetes/kubernetes/pull/91701), [@elweb9858](https://github.com/elweb9858)) [SIG Network and Windows]
+- Added service.beta.kubernetes.io/aws-load-balancer-target-node-labels annotation to target nodes in AWS LoadBalancer Services ([#90943](https://github.com/kubernetes/kubernetes/pull/90943), [@foobarfran](https://github.com/foobarfran)) [SIG Cloud Provider]
+- Feat: azure disk migration go beta in 1.19 ([#90896](https://github.com/kubernetes/kubernetes/pull/90896), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Kube-addon-manager has been updated to v9.1.1 to allow overriding the default list of whitelisted resources (https://github.com/kubernetes/kubernetes/pull/91018) ([#91240](https://github.com/kubernetes/kubernetes/pull/91240), [@tosi3k](https://github.com/tosi3k)) [SIG Cloud Provider, Scalability and Testing]
+- Kubeadm now distinguishes between generated and user supplied component configs, regenerating the former ones if a config upgrade is required ([#86070](https://github.com/kubernetes/kubernetes/pull/86070), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: add startup probes for static Pods to protect slow starting containers ([#91179](https://github.com/kubernetes/kubernetes/pull/91179), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubelets configured to rotate client certificates now publish a `certificate_manager_server_ttl_seconds` gauge metric indicating the remaining seconds until certificate expiration. ([#91148](https://github.com/kubernetes/kubernetes/pull/91148), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- Local-up-cluster.sh installs CSI snapshotter by default now, can be disabled with ENABLE_CSI_SNAPSHOTTER=false. ([#91504](https://github.com/kubernetes/kubernetes/pull/91504), [@pohly](https://github.com/pohly)) [SIG Storage]
+- Rest.Config now supports a flag to override proxy configuration that was previously only configurable through environment variables. ([#81443](https://github.com/kubernetes/kubernetes/pull/81443), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery and Node]
+- Scores from PodTopologySpreading have reduced differentiation as maxSkew increases. ([#90820](https://github.com/kubernetes/kubernetes/pull/90820), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Service controller: only sync LB node pools when relevant fields in Node changes ([#90769](https://github.com/kubernetes/kubernetes/pull/90769), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
+- Switch core master base images (kube-apiserver, kube-scheduler) from debian to distroless ([#90674](https://github.com/kubernetes/kubernetes/pull/90674), [@dims](https://github.com/dims)) [SIG Cloud Provider, Release and Scalability]
+- Switch etcd image (with migration scripts) from debian to distroless ([#91171](https://github.com/kubernetes/kubernetes/pull/91171), [@dims](https://github.com/dims)) [SIG API Machinery and Cloud Provider]
+- The `certificatesigningrequests/approval` subresource now supports patch API requests ([#91558](https://github.com/kubernetes/kubernetes/pull/91558), [@liggitt](https://github.com/liggitt)) [SIG Auth and Testing]
+- Update cri-tools to v1.18.0 ([#89720](https://github.com/kubernetes/kubernetes/pull/89720), [@saschagrunert](https://github.com/saschagrunert)) [SIG Cloud Provider, Cluster Lifecycle, Release and Scalability]
+- Weight of PodTopologySpread scheduling Score is doubled. ([#91258](https://github.com/kubernetes/kubernetes/pull/91258), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- `maxThreshold` of `ImageLocality` plugin is now scaled by the number of images in the pod, which helps to distinguish the node priorities for pod with several images. ([#91138](https://github.com/kubernetes/kubernetes/pull/91138), [@chendave](https://github.com/chendave)) [SIG Scheduling]
+
+### Bug or Regression
+
+- Add support for TLS 1.3 ciphers: TLS_AES_128_GCM_SHA256, TLS_CHACHA20_POLY1305_SHA256 and TLS_AES_256_GCM_SHA384. ([#90843](https://github.com/kubernetes/kubernetes/pull/90843), [@pjbgf](https://github.com/pjbgf)) [SIG API Machinery, Auth and Cluster Lifecycle]
+- Base-images: Update to kube-cross:v1.13.9-5 ([#90963](https://github.com/kubernetes/kubernetes/pull/90963), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+- CloudNodeLifecycleController will check node existence status before shutdown status when monitoring nodes. ([#90737](https://github.com/kubernetes/kubernetes/pull/90737), [@jiahuif](https://github.com/jiahuif)) [SIG Apps and Cloud Provider]
+- First pod with required affinity terms can schedule only on nodes with matching topology keys. ([#91168](https://github.com/kubernetes/kubernetes/pull/91168), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+- Fix VirtualMachineScaleSets.virtualMachines.GET not allowed issues when customers have set VMSS orchestrationMode. ([#91097](https://github.com/kubernetes/kubernetes/pull/91097), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix a racing issue that scheduler may perform unnecessary scheduling attempt. ([#90660](https://github.com/kubernetes/kubernetes/pull/90660), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+- Fix kubectl create --dryrun client ignore namespace ([#90502](https://github.com/kubernetes/kubernetes/pull/90502), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix kubectl create secret docker-registry --from-file not usable ([#90960](https://github.com/kubernetes/kubernetes/pull/90960), [@zhouya0](https://github.com/zhouya0)) [SIG CLI and Testing]
+- Fix kubectl describe node for users not having access to lease information. ([#90469](https://github.com/kubernetes/kubernetes/pull/90469), [@uthark](https://github.com/uthark)) [SIG CLI]
+- Fix kubectl run  --dry-run client  ignore namespace ([#90785](https://github.com/kubernetes/kubernetes/pull/90785), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix public IP not shown issues after assigning public IP to Azure VMs ([#90886](https://github.com/kubernetes/kubernetes/pull/90886), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix: add azure file migration support on annotation support ([#91093](https://github.com/kubernetes/kubernetes/pull/91093), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Node]
+- Fix: azure disk dangling attach issue which would cause API throttling ([#90749](https://github.com/kubernetes/kubernetes/pull/90749), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: fix topology issue in azure disk storage class migration ([#91196](https://github.com/kubernetes/kubernetes/pull/91196), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: support removal of nodes backed by deleted non VMSS instances on Azure ([#91184](https://github.com/kubernetes/kubernetes/pull/91184), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
+- Fixed a regression preventing garbage collection of RBAC role and binding objects ([#90534](https://github.com/kubernetes/kubernetes/pull/90534), [@apelisse](https://github.com/apelisse)) [SIG Auth]
+- For external storage e2e test suite, update external driver, to pick snapshot provisioner from VolumeSnapshotClass, when a VolumeSnapshotClass is explicitly provided as an input. ([#90878](https://github.com/kubernetes/kubernetes/pull/90878), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
+- Get-kube.sh: fix order to get the binaries from the right bucket ([#91635](https://github.com/kubernetes/kubernetes/pull/91635), [@cpanato](https://github.com/cpanato)) [SIG Release]
+- In a HA env, during the period a standby scheduler lost connection to API server, if a Pod is deleted and recreated, and the standby scheduler becomes master afterwards, there could be a scheduler cache corruption. This PR fixes this issue. ([#91126](https://github.com/kubernetes/kubernetes/pull/91126), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- Kubeadm: during "reset" do not remove the only remaining stacked etcd member from the cluster and just proceed with the cleanup of the local etcd storage. ([#91145](https://github.com/kubernetes/kubernetes/pull/91145), [@tnqn](https://github.com/tnqn)) [SIG Cluster Lifecycle]
+- Kubeadm: increase robustness for "kubeadm join" when adding etcd members on slower setups ([#90645](https://github.com/kubernetes/kubernetes/pull/90645), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Pod Conditions updates are skipped for re-scheduling attempts ([#91252](https://github.com/kubernetes/kubernetes/pull/91252), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Prevent PVC requested size overflow when expanding or creating a volume ([#90907](https://github.com/kubernetes/kubernetes/pull/90907), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+- Resolves an issue using `kubectl certificate approve/deny` against a server serving the v1 CSR API ([#91691](https://github.com/kubernetes/kubernetes/pull/91691), [@liggitt](https://github.com/liggitt)) [SIG Auth and CLI]
+- Scheduling failures due to no nodes available are now reported as unschedulable under ```schedule_attempts_total``` metric. ([#90989](https://github.com/kubernetes/kubernetes/pull/90989), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+- The following components that do not expect non-empty, non-flag arguments will now print an error message and exit if an argument is specified: cloud-controller-manager, kube-apiserver, kube-controller-manager, kube-proxy, kubeadm {alpha|config|token|version}, kubemark. Flags should be prefixed with a single dash "-" (0x45) for short form or double dash "--" for long form. Before this change, malformed flags (for example, starting with a non-ascii dash character such as 0x8211: "–") would have been silently treated as positional arguments and ignored. ([#91349](https://github.com/kubernetes/kubernetes/pull/91349), [@neolit123](https://github.com/neolit123)) [SIG API Machinery, Cloud Provider, Cluster Lifecycle, Network and Scheduling]
+- When evicting, Pods in Pending state are removed without checking PDBs. ([#83906](https://github.com/kubernetes/kubernetes/pull/83906), [@michaelgugino](https://github.com/michaelgugino)) [SIG API Machinery, Apps, Node and Scheduling]
+
+### Other (Cleanup or Flake)
+
+- Adds additional testing to ensure that udp pods conntrack are cleaned up ([#90180](https://github.com/kubernetes/kubernetes/pull/90180), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Architecture, Network and Testing]
+- Adjusts the fsType for cinder values to be `ext4` if no fsType is specified. ([#90608](https://github.com/kubernetes/kubernetes/pull/90608), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
+- Change beta.kubernetes.io/os to kubernetes.io/os ([#89461](https://github.com/kubernetes/kubernetes/pull/89461), [@wawa0210](https://github.com/wawa0210)) [SIG Cloud Provider and Cluster Lifecycle]
+- Content-type and verb for request metrics are now bounded to a known set. ([#89451](https://github.com/kubernetes/kubernetes/pull/89451), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery and Instrumentation]
+- Emit `WaitingForPodScheduled` event if the unbound PVC is in delay binding mode but used by a pod ([#91455](https://github.com/kubernetes/kubernetes/pull/91455), [@cofyc](https://github.com/cofyc)) [SIG Storage]
+- Improve server-side apply conflict errors by setting dedicated kubectl subcommand field managers ([#88885](https://github.com/kubernetes/kubernetes/pull/88885), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- It is now possible to use the service annotation `cloud.google.com/network-tier: Standard` to configure the Network Tier of the GCE Loadbalancer ([#88532](https://github.com/kubernetes/kubernetes/pull/88532), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider, Network and Testing]
+- Kube-scheduler: The metric name `scheduler_total_preemption_attempts` has been renamed to `scheduler_preemption_attempts_total`. ([#91448](https://github.com/kubernetes/kubernetes/pull/91448), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, Cluster Lifecycle, Instrumentation and Scheduling]
+- Kubeadm now forwards the IPv6DualStack feature gate using the kubelet component config, instead of the kubelet command line ([#90840](https://github.com/kubernetes/kubernetes/pull/90840), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: do not use a DaemonSet for the pre-pull of control-plane images during "kubeadm upgrade apply". Individual node upgrades now pull the required images using a preflight check. The flag "--image-pull-timeout" for "kubeadm upgrade apply" is now deprecated and will be removed in a future release following a GA deprecation policy. ([#90788](https://github.com/kubernetes/kubernetes/pull/90788), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
+- Kubeadm: use two separate checks on /livez and /readyz for the kube-apiserver static Pod instead of using /healthz ([#90970](https://github.com/kubernetes/kubernetes/pull/90970), [@johscheuer](https://github.com/johscheuer)) [SIG Cluster Lifecycle]
+- NONE ([#91597](https://github.com/kubernetes/kubernetes/pull/91597), [@elmiko](https://github.com/elmiko)) [SIG Autoscaling and Testing]
+- Remove deprecated --server-dry-run flag from kubectl apply ([#91308](https://github.com/kubernetes/kubernetes/pull/91308), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- The "HostPath should give a volume the correct mode" is no longer a conformance test ([#90861](https://github.com/kubernetes/kubernetes/pull/90861), [@dims](https://github.com/dims)) [SIG Architecture and Testing]
+- The Kubelet's --experimental-mounter-path and --experimental-check-node-capabilities-before-mount options are now marked as deprecated. ([#91373](https://github.com/kubernetes/kubernetes/pull/91373), [@knabben](https://github.com/knabben)) [SIG Node]
+- The kube-apiserver `--kubelet-https` flag is deprecated. kube-apiserver connections to kubelets now unconditionally use `https` (kubelets have unconditionally used `https` to serve the endpoints the apiserver communicates with since before v1.0). ([#91630](https://github.com/kubernetes/kubernetes/pull/91630), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Node]
+- Update CNI to v0.8.6 ([#91370](https://github.com/kubernetes/kubernetes/pull/91370), [@justaugustus](https://github.com/justaugustus)) [SIG Cloud Provider, Network, Release and Testing]
+- `beta.kubernetes.io/os` and `beta.kubernetes.io/arch` node labels are deprecated. Update node selectors to use `kubernetes.io/os` and `kubernetes.io/arch`. ([#91046](https://github.com/kubernetes/kubernetes/pull/91046), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and Node]
+- base-images: Use debian-base:v2.1.0 ([#90697](https://github.com/kubernetes/kubernetes/pull/90697), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery and Release]
+- base-images: Use debian-iptables:v12.1.0 ([#90782](https://github.com/kubernetes/kubernetes/pull/90782), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
+
+## Dependencies
+
+### Added
+- cloud.google.com/go/bigquery: v1.0.1
+- cloud.google.com/go/datastore: v1.0.0
+- cloud.google.com/go/pubsub: v1.0.1
+- cloud.google.com/go/storage: v1.0.0
+- dmitri.shuralyov.com/gpu/mtl: 666a987
+- github.com/cespare/xxhash/v2: [v2.1.1](https://github.com/cespare/xxhash/v2/tree/v2.1.1)
+- github.com/chzyer/logex: [v1.1.10](https://github.com/chzyer/logex/tree/v1.1.10)
+- github.com/chzyer/readline: [2972be2](https://github.com/chzyer/readline/tree/2972be2)
+- github.com/chzyer/test: [a1ea475](https://github.com/chzyer/test/tree/a1ea475)
+- github.com/containerd/cgroups: [bf292b2](https://github.com/containerd/cgroups/tree/bf292b2)
+- github.com/containerd/continuity: [aaeac12](https://github.com/containerd/continuity/tree/aaeac12)
+- github.com/containerd/fifo: [a9fb20d](https://github.com/containerd/fifo/tree/a9fb20d)
+- github.com/containerd/go-runc: [5a6d9f3](https://github.com/containerd/go-runc/tree/5a6d9f3)
+- github.com/coreos/bbolt: [v1.3.2](https://github.com/coreos/bbolt/tree/v1.3.2)
+- github.com/cpuguy83/go-md2man/v2: [v2.0.0](https://github.com/cpuguy83/go-md2man/v2/tree/v2.0.0)
+- github.com/go-gl/glfw/v3.3/glfw: [12ad95a](https://github.com/go-gl/glfw/v3.3/glfw/tree/12ad95a)
+- github.com/google/renameio: [v0.1.0](https://github.com/google/renameio/tree/v0.1.0)
+- github.com/ianlancetaylor/demangle: [5e5cf60](https://github.com/ianlancetaylor/demangle/tree/5e5cf60)
+- github.com/rogpeppe/go-internal: [v1.3.0](https://github.com/rogpeppe/go-internal/tree/v1.3.0)
+- github.com/russross/blackfriday/v2: [v2.0.1](https://github.com/russross/blackfriday/v2/tree/v2.0.1)
+- github.com/shurcooL/sanitized_anchor_name: [v1.0.0](https://github.com/shurcooL/sanitized_anchor_name/tree/v1.0.0)
+- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
+- golang.org/x/mod: v0.1.0
+- google.golang.org/protobuf: v1.23.0
+- gopkg.in/errgo.v2: v2.1.0
+- k8s.io/klog/v2: v2.0.0
+
+### Changed
+- cloud.google.com/go: v0.38.0 → v0.51.0
+- github.com/GoogleCloudPlatform/k8s-cloud-provider: [27a4ced → 7901bc8](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/compare/27a4ced...7901bc8)
+- github.com/Microsoft/hcsshim: [672e52e → v0.8.9](https://github.com/Microsoft/hcsshim/compare/672e52e...v0.8.9)
+- github.com/alecthomas/template: [a0175ee → fb15b89](https://github.com/alecthomas/template/compare/a0175ee...fb15b89)
+- github.com/alecthomas/units: [2efee85 → c3de453](https://github.com/alecthomas/units/compare/2efee85...c3de453)
+- github.com/beorn7/perks: [v1.0.0 → v1.0.1](https://github.com/beorn7/perks/compare/v1.0.0...v1.0.1)
+- github.com/coreos/pkg: [97fdf19 → 399ea9e](https://github.com/coreos/pkg/compare/97fdf19...399ea9e)
+- github.com/go-kit/kit: [v0.8.0 → v0.9.0](https://github.com/go-kit/kit/compare/v0.8.0...v0.9.0)
+- github.com/go-logfmt/logfmt: [v0.3.0 → v0.4.0](https://github.com/go-logfmt/logfmt/compare/v0.3.0...v0.4.0)
+- github.com/golang/groupcache: [02826c3 → 215e871](https://github.com/golang/groupcache/compare/02826c3...215e871)
+- github.com/golang/protobuf: [v1.3.3 → v1.4.2](https://github.com/golang/protobuf/compare/v1.3.3...v1.4.2)
+- github.com/google/cadvisor: [8af10c6 → 6a8d614](https://github.com/google/cadvisor/compare/8af10c6...6a8d614)
+- github.com/google/pprof: [3ea8567 → d4f498a](https://github.com/google/pprof/compare/3ea8567...d4f498a)
+- github.com/googleapis/gax-go/v2: [v2.0.4 → v2.0.5](https://github.com/googleapis/gax-go/v2/compare/v2.0.4...v2.0.5)
+- github.com/json-iterator/go: [v1.1.8 → v1.1.9](https://github.com/json-iterator/go/compare/v1.1.8...v1.1.9)
+- github.com/jstemmer/go-junit-report: [af01ea7 → v0.9.1](https://github.com/jstemmer/go-junit-report/compare/af01ea7...v0.9.1)
+- github.com/prometheus/client_golang: [v1.0.0 → v1.6.0](https://github.com/prometheus/client_golang/compare/v1.0.0...v1.6.0)
+- github.com/prometheus/common: [v0.4.1 → v0.9.1](https://github.com/prometheus/common/compare/v0.4.1...v0.9.1)
+- github.com/prometheus/procfs: [v0.0.5 → v0.0.11](https://github.com/prometheus/procfs/compare/v0.0.5...v0.0.11)
+- github.com/spf13/cobra: [v0.0.5 → v1.0.0](https://github.com/spf13/cobra/compare/v0.0.5...v1.0.0)
+- github.com/spf13/viper: [v1.3.2 → v1.4.0](https://github.com/spf13/viper/compare/v1.3.2...v1.4.0)
+- github.com/tmc/grpc-websocket-proxy: [89b8d40 → 0ad062e](https://github.com/tmc/grpc-websocket-proxy/compare/89b8d40...0ad062e)
+- go.opencensus.io: v0.21.0 → v0.22.2
+- go.uber.org/atomic: v1.3.2 → v1.4.0
+- golang.org/x/exp: 4b39c73 → da58074
+- golang.org/x/image: 0694c2d → cff245a
+- golang.org/x/lint: 959b441 → fdd1cda
+- golang.org/x/mobile: d3739f8 → d2bd2a2
+- golang.org/x/oauth2: 0f29369 → 858c2ad
+- google.golang.org/api: 5213b80 → v0.15.1
+- google.golang.org/appengine: v1.5.0 → v1.6.5
+- google.golang.org/genproto: f3c370f → ca5a221
+- honnef.co/go/tools: e561f67 → v0.0.1-2019.2.3
+- k8s.io/gengo: e0e292d → 8167cfd
+- k8s.io/kube-openapi: e1beb1b → 656914f
+- k8s.io/utils: a9aa75a → 2df71eb
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.7 → 33b9978
+
+### Removed
+- github.com/coreos/go-etcd: [v2.0.0+incompatible](https://github.com/coreos/go-etcd/tree/v2.0.0)
+- github.com/ugorji/go/codec: [d75b2dc](https://github.com/ugorji/go/codec/tree/d75b2dc)
+- k8s.io/klog: v1.0.0
+
+
+
+# v1.19.0-beta.0
+
+
+## Downloads for v1.19.0-beta.0
+
+### Source Code
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes.tar.gz) | 8c7e820b8bd7a8f742b7560cafe6ae1acc4c9836ae23d1b10d987b4de6a690826be75c68b8f76ec027097e8dfd861afb1d229b3687f0b82afcfe7b4d6481242e
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-src.tar.gz) | 543e9d36fd8b2de3e19631d3295d3a7706e6e88bbd3adb2d558b27b3179a3961455f4f04f0d4a5adcff1466779e1b08023fe64dc2ab39813b37adfbbc779dec7
+
+### Client binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-darwin-386.tar.gz) | 3ef37ef367a8d9803f023f6994d73ff217865654a69778c1ea3f58c88afbf25ff5d8d6bec9c608ac647c2654978228c4e63f30eec2a89d16d60f4a1c5f333b22
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-darwin-amd64.tar.gz) | edb02b0b8d6a1c2167fbce4a85d84fb413566d3a76839fd366801414ca8ad2d55a5417b39b4cac6b65fddf13c1b3259791a607703773241ca22a67945ecb0014
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-linux-386.tar.gz) | dafe93489df7328ae23f4bdf0a9d2e234e18effe7e042b217fe2dd1355e527a54bab3fb664696ed606a8ebedce57da4ee12647ec1befa2755bd4c43d9d016063
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-linux-amd64.tar.gz) | d8e2bf8c9dd665410c2e7ceaa98bc4fc4f966753b7ade91dcef3b5eff45e0dda63bd634610c8761392a7804deb96c6b030c292280bf236b8b29f63b7f1af3737
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-linux-arm.tar.gz) | d590d3d07d0ebbb562bce480c7cbe4e60b99feba24376c216fe73d8b99a246e2cd2acb72abe1427bde3e541d94d55b7688daf9e6961e4cbc6b875ac4eeea6e62
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-linux-arm64.tar.gz) | f9647a99a566c9febd348c1c4a8e5c05326058eab076292a8bb5d3a2b882ee49287903f8e0e036b40af294aa3571edd23e65f3de91330ac9af0c10350b02583d
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-linux-ppc64le.tar.gz) | 662f009bc393734a89203d7956942d849bad29e28448e7baa017d1ac2ec2d26d7290da4a44bccb99ed960b2e336d9d98908c98f8a3d9fe1c54df2d134c799cad
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-linux-s390x.tar.gz) | 61fdf4aff78dcdb721b82a3602bf5bc94d44d51ab6607b255a9c2218bb3e4b57f6e656c2ee0dd68586fb53acbeff800d6fd03e4642dded49735a93356e7c5703
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-windows-386.tar.gz) | 20d1e803b10b3bee09a7a206473ba320cc5f1120278d8f6e0136c388b2720da7264b917cd4738488b1d0a9aa922eb581c1f540715a6c2042c4dd7b217b6a9a0a
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-client-windows-amd64.tar.gz) | b85d729ec269f6aad0b6d2f95f3648fbea84330d2fbfde2267a519bc08c42d70d7b658b0e41c3b0d5f665702a8f1bbb37652753de34708ae3a03e45175c8b92c
+
+### Server binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-server-linux-amd64.tar.gz) | c3641bdb0a8d8eff5086d24b71c6547131092b21f976b080dc48129f91de3da560fed6edf880eab1d205017ad74be716a5b970e4bbc00d753c005e5932b3d319
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-server-linux-arm.tar.gz) | 7c29b8e33ade23a787330d28da22bf056610dae4d3e15574c56c46340afe5e0fdb00126ae3fd64fd70a26d1a87019f47e401682b88fa1167368c7edbecc72ccf
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-server-linux-arm64.tar.gz) | 27cd6042425eb94bb468431599782467ed818bcc51d75e8cb251c287a806b60a5cce50d4ae7525348c5446eaa45f849bc3fe3e6ac7248b54f3ebae8bf6553c3f
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-server-linux-ppc64le.tar.gz) | ede896424eb12ec07dd3756cbe808ca3915f51227e7b927795402943d81a99bb61654fd8f485a838c2faf199d4a55071af5bd8e69e85669a7f4a0b0e84a093cc
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-server-linux-s390x.tar.gz) | 4e48d4f5afd22f0ae6ade7da4877238fd2a5c10ae3dea2ae721c39ac454b0b295e1d7501e26bddee4bc0289e79e33dadca255a52a645bee98cf81acf937db0ef
+
+### Node binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-node-linux-amd64.tar.gz) | 8025bd8deb9586487fcf268bdaf99e8fd9f9433d9e7221c29363d1d66c4cbd55a2c44e6c89bc8133828c6a1aa0c42c2359b74846dfb71765c9ae8f21b8170625
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-node-linux-arm.tar.gz) | 25787d47c8cc1e9445218d3a947b443d261266033187f8b7bc6141ae353a6806503fe72e3626f058236d4cd7f284348d2cc8ccb7a0219b9ddd7c6a336dae360b
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-node-linux-arm64.tar.gz) | ff737a7310057bdfd603f2853b15f79dc2b54a3cbbbd7a8ffd4d9756720fa5a02637ffc10a381eeee58bef61024ff348a49f3044a6dfa0ba99645fda8d08e2da
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-node-linux-ppc64le.tar.gz) | 2b1144c9ae116306a2c3214b02361083a60a349afc804909f95ea85db3660de5025de69a1860e8fc9e7e92ded335c93b74ecbbb20e1f6266078842d4adaf4161
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-node-linux-s390x.tar.gz) | 822ec64aef3d65faa668a91177aa7f5d0c78a83cc1284c5e30629eda448ee4b2874cf4cfa6f3d68ad8eb8029dd035bf9fe15f68cc5aa4b644513f054ed7910ae
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-beta.0/kubernetes-node-windows-amd64.tar.gz) | 3957cae43211df050c5a9991a48e23ac27d20aec117c580c53fc7edf47caf79ed1e2effa969b5b972968a83e9bdba0b20c46705caca0c35571713041481c1966
+
+## Changelog since v1.19.0-alpha.3
+
+## Changes by Kind
+
+### API Change
+ - EnvVarSource api doc bug fixes ([#91194](https://github.com/kubernetes/kubernetes/pull/91194), [@wawa0210](https://github.com/wawa0210)) [SIG Apps]
+ - The Kubelet's `--really-crash-for-testing` and  `--chaos-chance` options are now marked as deprecated. ([#90499](https://github.com/kubernetes/kubernetes/pull/90499), [@knabben](https://github.com/knabben)) [SIG Node]
+ - `NodeResourcesLeastAllocated` and `NodeResourcesMostAllocated` plugins now support customized weight on the CPU and memory. ([#90544](https://github.com/kubernetes/kubernetes/pull/90544), [@chendave](https://github.com/chendave)) [SIG Scheduling]
+
+### Feature
+ - Add .import-restrictions file to cmd/cloud-controller-manager. ([#90630](https://github.com/kubernetes/kubernetes/pull/90630), [@nilo19](https://github.com/nilo19)) [SIG API Machinery and Cloud Provider]
+ - Add Annotations to CRI-API ImageSpec objects. ([#90061](https://github.com/kubernetes/kubernetes/pull/90061), [@marosset](https://github.com/marosset)) [SIG Node and Windows]
+ - Kubelets configured to rotate client certificates now publish a `certificate_manager_server_ttl_seconds` gauge metric indicating the remaining seconds until certificate expiration. ([#91148](https://github.com/kubernetes/kubernetes/pull/91148), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+ - Rest.Config now supports a flag to override proxy configuration that was previously only configurable through environment variables. ([#81443](https://github.com/kubernetes/kubernetes/pull/81443), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery and Node]
+ - Scores from PodTopologySpreading have reduced differentiation as maxSkew increases. ([#90820](https://github.com/kubernetes/kubernetes/pull/90820), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+ - Service controller: only sync LB node pools when relevant fields in Node changes ([#90769](https://github.com/kubernetes/kubernetes/pull/90769), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
+ - Switch core master base images (kube-apiserver, kube-scheduler) from debian to distroless ([#90674](https://github.com/kubernetes/kubernetes/pull/90674), [@dims](https://github.com/dims)) [SIG Cloud Provider, Release and Scalability]
+ - Update cri-tools to v1.18.0 ([#89720](https://github.com/kubernetes/kubernetes/pull/89720), [@saschagrunert](https://github.com/saschagrunert)) [SIG Cloud Provider, Cluster Lifecycle, Release and Scalability]
+
+### Bug or Regression
+ - Add support for TLS 1.3 ciphers: TLS_AES_128_GCM_SHA256, TLS_CHACHA20_POLY1305_SHA256 and TLS_AES_256_GCM_SHA384. ([#90843](https://github.com/kubernetes/kubernetes/pull/90843), [@pjbgf](https://github.com/pjbgf)) [SIG API Machinery, Auth and Cluster Lifecycle]
+ - Base-images: Update to kube-cross:v1.13.9-5 ([#90963](https://github.com/kubernetes/kubernetes/pull/90963), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
+ - CloudNodeLifecycleController will check node existence status before shutdown status when monitoring nodes. ([#90737](https://github.com/kubernetes/kubernetes/pull/90737), [@jiahuif](https://github.com/jiahuif)) [SIG Apps and Cloud Provider]
+ - First pod with required affinity terms can schedule only on nodes with matching topology keys. ([#91168](https://github.com/kubernetes/kubernetes/pull/91168), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+ - Fix VirtualMachineScaleSets.virtualMachines.GET not allowed issues when customers have set VMSS orchestrationMode. ([#91097](https://github.com/kubernetes/kubernetes/pull/91097), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+ - Fix a racing issue that scheduler may perform unnecessary scheduling attempt. ([#90660](https://github.com/kubernetes/kubernetes/pull/90660), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling and Testing]
+ - Fix kubectl run  --dry-run client  ignore namespace ([#90785](https://github.com/kubernetes/kubernetes/pull/90785), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+ - Fix public IP not shown issues after assigning public IP to Azure VMs ([#90886](https://github.com/kubernetes/kubernetes/pull/90886), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+ - Fix: azure disk dangling attach issue which would cause API throttling ([#90749](https://github.com/kubernetes/kubernetes/pull/90749), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+ - Fix: support removal of nodes backed by deleted non VMSS instances on Azure ([#91184](https://github.com/kubernetes/kubernetes/pull/91184), [@bpineau](https://github.com/bpineau)) [SIG Cloud Provider]
+ - Fixed a regression preventing garbage collection of RBAC role and binding objects ([#90534](https://github.com/kubernetes/kubernetes/pull/90534), [@apelisse](https://github.com/apelisse)) [SIG Auth]
+ - For external storage e2e test suite, update external driver, to pick snapshot provisioner from VolumeSnapshotClass, when a VolumeSnapshotClass is explicitly provided as an input. ([#90878](https://github.com/kubernetes/kubernetes/pull/90878), [@saikat-royc](https://github.com/saikat-royc)) [SIG Storage and Testing]
+ - In a HA env, during the period a standby scheduler lost connection to API server, if a Pod is deleted and recreated, and the standby scheduler becomes master afterwards, there could be a scheduler cache corruption. This PR fixes this issue. ([#91126](https://github.com/kubernetes/kubernetes/pull/91126), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+ - Kubeadm: increase robustness for "kubeadm join" when adding etcd members on slower setups ([#90645](https://github.com/kubernetes/kubernetes/pull/90645), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+ - Prevent PVC requested size overflow when expanding or creating a volume ([#90907](https://github.com/kubernetes/kubernetes/pull/90907), [@gnufied](https://github.com/gnufied)) [SIG Cloud Provider and Storage]
+ - Scheduling failures due to no nodes available are now reported as unschedulable under ```schedule_attempts_total``` metric. ([#90989](https://github.com/kubernetes/kubernetes/pull/90989), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+
+### Other (Cleanup or Flake)
+ - Adds additional testing to ensure that udp pods conntrack are cleaned up ([#90180](https://github.com/kubernetes/kubernetes/pull/90180), [@JacobTanenbaum](https://github.com/JacobTanenbaum)) [SIG Architecture, Network and Testing]
+ - Adjusts the fsType for cinder values to be `ext4` if no fsType is specified. ([#90608](https://github.com/kubernetes/kubernetes/pull/90608), [@huffmanca](https://github.com/huffmanca)) [SIG Storage]
+ - Change beta.kubernetes.io/os to kubernetes.io/os ([#89461](https://github.com/kubernetes/kubernetes/pull/89461), [@wawa0210](https://github.com/wawa0210)) [SIG Cloud Provider and Cluster Lifecycle]
+ - Improve server-side apply conflict errors by setting dedicated kubectl subcommand field managers ([#88885](https://github.com/kubernetes/kubernetes/pull/88885), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+ - It is now possible to use the service annotation `cloud.google.com/network-tier: Standard` to configure the Network Tier of the GCE Loadbalancer ([#88532](https://github.com/kubernetes/kubernetes/pull/88532), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider, Network and Testing]
+ - Kubeadm now forwards the IPv6DualStack feature gate using the kubelet component config, instead of the kubelet command line ([#90840](https://github.com/kubernetes/kubernetes/pull/90840), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+ - Kubeadm: do not use a DaemonSet for the pre-pull of control-plane images during "kubeadm upgrade apply". Individual node upgrades now pull the required images using a preflight check. The flag "--image-pull-timeout" for "kubeadm upgrade apply" is now deprecated and will be removed in a future release following a GA deprecation policy. ([#90788](https://github.com/kubernetes/kubernetes/pull/90788), [@xlgao-zju](https://github.com/xlgao-zju)) [SIG Cluster Lifecycle]
+ - Kubeadm: use two separate checks on /livez and /readyz for the kube-apiserver static Pod instead of using /healthz ([#90970](https://github.com/kubernetes/kubernetes/pull/90970), [@johscheuer](https://github.com/johscheuer)) [SIG Cluster Lifecycle]
+ - The "HostPath should give a volume the correct mode" is no longer a conformance test ([#90861](https://github.com/kubernetes/kubernetes/pull/90861), [@dims](https://github.com/dims)) [SIG Architecture and Testing]
+ - `beta.kubernetes.io/os` and `beta.kubernetes.io/arch` node labels are deprecated. Update node selectors to use `kubernetes.io/os` and `kubernetes.io/arch`. ([#91046](https://github.com/kubernetes/kubernetes/pull/91046), [@wawa0210](https://github.com/wawa0210)) [SIG Apps and Node]
+ - base-images: Use debian-base:v2.1.0 ([#90697](https://github.com/kubernetes/kubernetes/pull/90697), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery and Release]
+ - base-images: Use debian-iptables:v12.1.0 ([#90782](https://github.com/kubernetes/kubernetes/pull/90782), [@justaugustus](https://github.com/justaugustus)) [SIG Release]
+
+## Dependencies
+
+### Added
+- cloud.google.com/go/bigquery: v1.0.1
+- cloud.google.com/go/datastore: v1.0.0
+- cloud.google.com/go/pubsub: v1.0.1
+- cloud.google.com/go/storage: v1.0.0
+- dmitri.shuralyov.com/gpu/mtl: 666a987
+- github.com/cespare/xxhash/v2: [v2.1.1](https://github.com/cespare/xxhash/v2/tree/v2.1.1)
+- github.com/chzyer/logex: [v1.1.10](https://github.com/chzyer/logex/tree/v1.1.10)
+- github.com/chzyer/readline: [2972be2](https://github.com/chzyer/readline/tree/2972be2)
+- github.com/chzyer/test: [a1ea475](https://github.com/chzyer/test/tree/a1ea475)
+- github.com/coreos/bbolt: [v1.3.2](https://github.com/coreos/bbolt/tree/v1.3.2)
+- github.com/cpuguy83/go-md2man/v2: [v2.0.0](https://github.com/cpuguy83/go-md2man/v2/tree/v2.0.0)
+- github.com/go-gl/glfw/v3.3/glfw: [12ad95a](https://github.com/go-gl/glfw/v3.3/glfw/tree/12ad95a)
+- github.com/google/renameio: [v0.1.0](https://github.com/google/renameio/tree/v0.1.0)
+- github.com/ianlancetaylor/demangle: [5e5cf60](https://github.com/ianlancetaylor/demangle/tree/5e5cf60)
+- github.com/rogpeppe/go-internal: [v1.3.0](https://github.com/rogpeppe/go-internal/tree/v1.3.0)
+- github.com/russross/blackfriday/v2: [v2.0.1](https://github.com/russross/blackfriday/v2/tree/v2.0.1)
+- github.com/shurcooL/sanitized_anchor_name: [v1.0.0](https://github.com/shurcooL/sanitized_anchor_name/tree/v1.0.0)
+- github.com/ugorji/go: [v1.1.4](https://github.com/ugorji/go/tree/v1.1.4)
+- golang.org/x/mod: v0.1.0
+- google.golang.org/protobuf: v1.23.0
+- gopkg.in/errgo.v2: v2.1.0
+- k8s.io/klog/v2: v2.0.0
+
+### Changed
+- cloud.google.com/go: v0.38.0 → v0.51.0
+- github.com/GoogleCloudPlatform/k8s-cloud-provider: [27a4ced → 7901bc8](https://github.com/GoogleCloudPlatform/k8s-cloud-provider/compare/27a4ced...7901bc8)
+- github.com/alecthomas/template: [a0175ee → fb15b89](https://github.com/alecthomas/template/compare/a0175ee...fb15b89)
+- github.com/alecthomas/units: [2efee85 → c3de453](https://github.com/alecthomas/units/compare/2efee85...c3de453)
+- github.com/beorn7/perks: [v1.0.0 → v1.0.1](https://github.com/beorn7/perks/compare/v1.0.0...v1.0.1)
+- github.com/coreos/pkg: [97fdf19 → 399ea9e](https://github.com/coreos/pkg/compare/97fdf19...399ea9e)
+- github.com/go-kit/kit: [v0.8.0 → v0.9.0](https://github.com/go-kit/kit/compare/v0.8.0...v0.9.0)
+- github.com/go-logfmt/logfmt: [v0.3.0 → v0.4.0](https://github.com/go-logfmt/logfmt/compare/v0.3.0...v0.4.0)
+- github.com/golang/groupcache: [02826c3 → 215e871](https://github.com/golang/groupcache/compare/02826c3...215e871)
+- github.com/golang/protobuf: [v1.3.3 → v1.4.2](https://github.com/golang/protobuf/compare/v1.3.3...v1.4.2)
+- github.com/google/cadvisor: [8af10c6 → 6a8d614](https://github.com/google/cadvisor/compare/8af10c6...6a8d614)
+- github.com/google/pprof: [3ea8567 → d4f498a](https://github.com/google/pprof/compare/3ea8567...d4f498a)
+- github.com/googleapis/gax-go/v2: [v2.0.4 → v2.0.5](https://github.com/googleapis/gax-go/v2/compare/v2.0.4...v2.0.5)
+- github.com/json-iterator/go: [v1.1.8 → v1.1.9](https://github.com/json-iterator/go/compare/v1.1.8...v1.1.9)
+- github.com/jstemmer/go-junit-report: [af01ea7 → v0.9.1](https://github.com/jstemmer/go-junit-report/compare/af01ea7...v0.9.1)
+- github.com/prometheus/client_golang: [v1.0.0 → v1.6.0](https://github.com/prometheus/client_golang/compare/v1.0.0...v1.6.0)
+- github.com/prometheus/common: [v0.4.1 → v0.9.1](https://github.com/prometheus/common/compare/v0.4.1...v0.9.1)
+- github.com/prometheus/procfs: [v0.0.5 → v0.0.11](https://github.com/prometheus/procfs/compare/v0.0.5...v0.0.11)
+- github.com/spf13/cobra: [v0.0.5 → v1.0.0](https://github.com/spf13/cobra/compare/v0.0.5...v1.0.0)
+- github.com/spf13/viper: [v1.3.2 → v1.4.0](https://github.com/spf13/viper/compare/v1.3.2...v1.4.0)
+- github.com/tmc/grpc-websocket-proxy: [89b8d40 → 0ad062e](https://github.com/tmc/grpc-websocket-proxy/compare/89b8d40...0ad062e)
+- go.opencensus.io: v0.21.0 → v0.22.2
+- go.uber.org/atomic: v1.3.2 → v1.4.0
+- golang.org/x/exp: 4b39c73 → da58074
+- golang.org/x/image: 0694c2d → cff245a
+- golang.org/x/lint: 959b441 → fdd1cda
+- golang.org/x/mobile: d3739f8 → d2bd2a2
+- golang.org/x/oauth2: 0f29369 → 858c2ad
+- google.golang.org/api: 5213b80 → v0.15.1
+- google.golang.org/appengine: v1.5.0 → v1.6.5
+- google.golang.org/genproto: f3c370f → ca5a221
+- honnef.co/go/tools: e561f67 → v0.0.1-2019.2.3
+- k8s.io/gengo: e0e292d → 8167cfd
+- k8s.io/kube-openapi: e1beb1b → 656914f
+- k8s.io/utils: a9aa75a → 2df71eb
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.7 → 33b9978
+
+### Removed
+- github.com/coreos/go-etcd: [v2.0.0+incompatible](https://github.com/coreos/go-etcd/tree/v2.0.0)
+- github.com/ugorji/go/codec: [d75b2dc](https://github.com/ugorji/go/codec/tree/d75b2dc)
+- k8s.io/klog: v1.0.0
+
+
+
+# v1.19.0-alpha.3
+
+[Documentation](https://docs.k8s.io)
+
+## Downloads for v1.19.0-alpha.3
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes.tar.gz) | `49df3a77453b759d3262be6883dd9018426666b4261313725017eed42da1bc8dd1af037ec6c11357a6360c0c32c2486490036e9e132c9026f491325ce353c84b`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-src.tar.gz) | `ddbb0baaf77516dc885c41017f4a8d91d0ff33eeab14009168a1e4d975939ccc6a053a682c2af14346c67fe7b142aa2c1ba32e86a30f2433cefa423764c5332d`
 
 ### Client Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `bc337bb8f200a789be4b97ce99b9d7be78d35ebd64746307c28339dc4628f56d9903e0818c0888aaa9364357a528d1ac6fd34f74377000f292ec502fbea3837e`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `38dfa5e0b0cfff39942c913a6bcb2ad8868ec43457d35cffba08217bb6e7531720e0731f8588505f4c81193ce5ec0e5fe6870031cf1403fbbde193acf7e53540`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-386.tar.gz) | `8e63ec7ce29c69241120c037372c6c779e3f16253eabd612c7cbe6aa89326f5160eb5798004d723c5cd72d458811e98dac3574842eb6a57b2798ecd2bbe5bcf9`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `c1be9f184a7c3f896a785c41cd6ece9d90d8cb9b1f6088bdfb5557d8856c55e455f6688f5f54c2114396d5ae7adc0361e34ebf8e9c498d0187bd785646ccc1d0`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `8eab02453cfd9e847632a774a0e0cf3a33c7619fb4ced7f1840e1f71444e8719b1c8e8cbfdd1f20bb909f3abe39cdcac74f14cb9c878c656d35871b7c37c7cbe`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `f7df0ec02d2e7e63278d5386e8153cfe2b691b864f17b6452cc824a5f328d688976c975b076e60f1c6b3c859e93e477134fbccc53bb49d9e846fb038b34eee48`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | `36dd5b10addca678a518e6d052c9d6edf473e3f87388a2f03f714c93c5fbfe99ace16cf3b382a531be20a8fe6f4160f8d891800dd2cff5f23c9ca12c2f4a151b`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | `5bdbb44b996ab4ccf3a383780270f5cfdbf174982c300723c8bddf0a48ae5e459476031c1d51b9d30ffd621d0a126c18a5de132ef1d92fca2f3e477665ea10cc`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-windows-386.tar.gz) | `5dea3d4c4e91ef889850143b361974250e99a3c526f5efee23ff9ccdcd2ceca4a2247e7c4f236bdfa77d2150157da5d676ac9c3ba26cf3a2f1e06d8827556f77`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `db298e698391368703e6aea7f4345aec5a4b8c69f9d8ff6c99fb5804a6cea16d295fb01e70fe943ade3d4ce9200a081ad40da21bd331317ec9213f69b4d6c48f`
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-darwin-386.tar.gz) | `c0fb1afb5b22f6e29cf3e5121299d3a5244a33b7663e041209bcc674a0009842b35b9ebdafa5bd6b91a1e1b67fa891e768627b97ea5258390d95250f07c2defc`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | `f32596863fed32bc8e3f032ef1e4f9f232898ed506624cb1b4877ce2ced2a0821d70b15599258422aa13181ab0e54f38837399ca611ab86cbf3feec03ede8b95`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-linux-386.tar.gz) | `37290244cee54ff05662c2b14b69445eee674d385e6b05ca0b8c8b410ba047cf054033229c78af91670ca1370807753103c25dbb711507edc1c6beca87bd0988`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | `3753eb28b9d68a47ef91fff3e91215015c28bce12828f81c0bbddbde118fd2cf4d580e474e54b1e8176fa547829e2ed08a4df36bbf83b912c831a459821bd581`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | `86b1cdb59a6b4e9de4496e5aa817b1ae7687ac6a93f8b8259cdeb356020773711d360a2ea35f7a8dc1bdd6d31c95e6491abf976afaff3392eb7d2df1008e192c`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | `fbf324e92b93cd8048073b2a627ddc8866020bc4f086604d82bf4733d463411a534d8c8f72565976eb1b32be64aecae8858cd140ef8b7a3c96fcbbf92ca54689`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | `7a6551eca17d29efb5d818e360b53ab2f0284e1091cc537e0a7ce39843d0b77579f26eb14bdeca9aa9e0aa0ef92ce1ccde34bdce84b4a5c1e090206979afb0ea`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | `46352be54882cf3edb949b355e71daea839c9b1955ccfe1085590b81326665d81cabde192327d82e56d6a157e224caefdcfbec3364b9f8b18b5da0cfcb97fc0c`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-windows-386.tar.gz) | `d049bf5f27e5e646ea4aa657aa0a694de57394b0dc60eadf1f7516d1ca6a6db39fc89d34bb6bba0a82f0c140113c2a91c41ad409e0ab41118a104f47eddcb9d2`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | `2e585f6f97b86443a6e3a847c8dfaa29c6323f8d5bbfdb86dc7bf5465ba54f64b35ee55a6d38e9be105a67fff39057ad16db3f3b1c3b9c909578517f4da7e51e`
 
 ### Server Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `c6284929dd5940e750b48db72ffbc09f73c5ec31ab3db283babb8e4e07cd8cbb27642f592009caae4717981c0db82c16312849ef4cbafe76acc4264c7d5864ac`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `6fc9552cf082c54cc0833b19876117c87ba7feb5a12c7e57f71b52208daf03eaef3ca56bd22b7bce2d6e81b5a23537cf6f5497a6eaa356c0aab1d3de26c309f9`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `b794b9c399e548949b5bfb2fe71123e86c2034847b2c99aca34b6de718a35355bbecdae9dc2a81c49e3c82fb4b5862526a3f63c2862b438895e12c5ea884f22e`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | `fddaed7a54f97046a91c29534645811c6346e973e22950b2607b8c119c2377e9ec2d32144f81626078cdaeca673129cc4016c1a3dbd3d43674aa777089fb56ac`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | `65951a534bb55069c7419f41cbcdfe2fae31541d8a3f9eca11fc2489addf281c5ad2d13719212657da0be5b898f22b57ac39446d99072872fbacb0a7d59a4f74`
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | `8c41c6abf32ba7040c2cc654765d443e615d96891eacf6bcec24146a8aaf79b9206d13358518958e5ec04eb911ade108d4522ebd8603b88b3e3d95e7d5b24e60`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | `7e54c60bf724e2e3e2cff1197512ead0f73030788877f2f92a7e0deeeabd86e75ce8120eb815bf63909f8a110e647a5fcfddd510efffbd9c339bd0f90caa6706`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | `7c57fd80b18be6dd6b6e17558d12ec0c07c06ce248e99837737fdd39b7f5d752597679748dc6294563f30def986ed712a8f469f3ea1c3a4cbe5d63c44f1d41dc`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | `d22b1d4d8ccf9e9df8f90d35b8d2a1e7916f8d809806743cddc00b15d8ace095c54c61d7c9affd6609a316ee14ba43bf760bfec4276aee8273203aab3e7ac3c1`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | `3177c9a2d6bd116d614fa69ff9cb16b822bee4e36e38f93ece6aeb5d118ae67dbe61546c7f628258ad719e763c127ca32437ded70279ea869cfe4869e06cbdde`
 
 ### Node Binaries
 
 filename | sha512 hash
 -------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | `992059efb5cae7ed0ef55820368d854bad1c6d13a70366162cd3b5111ce24c371c7c87ded2012f055e08b2ff1b4ef506e1f4e065daa3ac474fef50b5efa4fb07`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-arm.tar.gz) | `c63ae0f8add5821ad267774314b8c8c1ffe3b785872bf278e721fd5dfdad1a5db1d4db3720bea0a36bf10d9c6dd93e247560162c0eac6e1b743246f587d3b27a`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | `47adb9ddf6eaf8f475b89f59ee16fbd5df183149a11ad1574eaa645b47a6d58aec2ca70ba857ce9f1a5793d44cf7a61ebc6874793bb685edaf19410f4f76fd13`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | `a3bc4a165567c7b76a3e45ab7b102d6eb3ecf373eb048173f921a4964cf9be8891d0d5b8dafbd88c3af7b0e21ef3d41c1e540c3347ddd84b929b3a3d02ceb7b2`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | `109ddf37c748f69584c829db57107c3518defe005c11fcd2a1471845c15aae0a3c89aafdd734229f4069ed18856cc650c80436684e1bdc43cfee3149b0324746`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | `a3a75d2696ad3136476ad7d811e8eabaff5111b90e592695e651d6111f819ebf0165b8b7f5adc05afb5f7f01d1e5fb64876cb696e492feb20a477a5800382b7a`
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | `543248e35c57454bfc4b6f3cf313402d7cf81606b9821a5dd95c6758d55d5b9a42e283a7fb0d45322ad1014e3382aafaee69879111c0799dac31d5c4ad1b8041`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | `c94bed3861376d3fd41cb7bc93b5a849612bc7346ed918f6b5b634449cd3acef69ff63ca0b6da29f45df68402f64f3d290d7688bc50f46dac07e889219dac30c`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | `3649dbca59d08c3922830b7acd8176e8d2f622fbf6379288f3a70045763d5d72c944d241f8a2c57306f23e6e44f7cc3b912554442f77e0f90e9f876f240114a8`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | `5655d1d48a1ae97352af2d703954c7a28c2d1c644319c4eb24fe19ccc5fb546c30b34cc86d8910f26c88feee88d7583bc085ebfe58916054f73dcf372a824fd9`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | `55190804357a687c37d1abb489d5aef7cea209d1c03778548f0aa4dab57a0b98b710fda09ff5c46d0963f2bb674726301d544b359f673df8f57226cafa831ce3`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | `d8ffbe8dc9a0b0b55db357afa6ef94e6145f9142b1bc505897cac9ee7c950ef527a189397a8e61296e66ce76b020eccb276668256927d2273d6079b9ffebef24`
 
-## Changelog since v1.18.0-beta.0
+## Changelog since v1.19.0-alpha.2
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+- Kubeadm does not set the deprecated '--cgroup-driver' flag in /var/lib/kubelet/kubeadm-flags.env, it will be set in the kubelet config.yaml. If you have this flag in /var/lib/kubelet/kubeadm-flags.env or /etc/default/kubelet (/etc/sysconfig/kubelet for RPMs) please remove it and set the value using KubeletConfiguration ([#90513](https://github.com/kubernetes/kubernetes/pull/90513), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+
+- Kubeadm respects resolvConf value set by user even if systemd-resolved service is active. kubeadm no longer sets the flag in '--resolv-conf' in /var/lib/kubelet/kubeadm-flags.env. If you have this flag in /var/lib/kubelet/kubeadm-flags.env or /etc/default/kubelet (/etc/sysconfig/kubelet for RPMs) please remove it and set the value using KubeletConfiguration ([#90394](https://github.com/kubernetes/kubernetes/pull/90394), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+
+## Changes by Kind
+
+### Deprecation
+
+- Apiextensions.k8s.io/v1beta1 is deprecated in favor of apiextensions.k8s.io/v1 ([#90673](https://github.com/kubernetes/kubernetes/pull/90673), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
+- Apiregistration.k8s.io/v1beta1 is deprecated in favor of apiregistration.k8s.io/v1 ([#90672](https://github.com/kubernetes/kubernetes/pull/90672), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
+- Authentication.k8s.io/v1beta1 and authorization.k8s.io/v1beta1 are deprecated in 1.19 in favor of v1 levels and will be removed in 1.22 ([#90458](https://github.com/kubernetes/kubernetes/pull/90458), [@deads2k](https://github.com/deads2k)) [SIG API Machinery and Auth]
+- Autoscaling/v2beta1 is deprecated in favor of autoscaling/v2beta2 ([#90463](https://github.com/kubernetes/kubernetes/pull/90463), [@deads2k](https://github.com/deads2k)) [SIG Autoscaling]
+- Coordination.k8s.io/v1beta1 is deprecated in 1.19, targeted for removal in 1.22, use v1 instead. ([#90559](https://github.com/kubernetes/kubernetes/pull/90559), [@deads2k](https://github.com/deads2k)) [SIG Scalability]
+- Storage.k8s.io/v1beta1 is deprecated in favor of storage.k8s.io/v1 ([#90671](https://github.com/kubernetes/kubernetes/pull/90671), [@deads2k](https://github.com/deads2k)) [SIG Storage]
+
+### API Change
+
+- K8s.io/apimachinery - scheme.Convert() now uses only explicitly registered conversions - default reflection based conversion is no longer available. `+k8s:conversion-gen` tags can be used with the `k8s.io/code-generator` component to generate conversions. ([#90018](https://github.com/kubernetes/kubernetes/pull/90018), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, Apps and Testing]
+- Kubelet's --runonce option is now also available in Kubelet's config file as `runOnce`. ([#89128](https://github.com/kubernetes/kubernetes/pull/89128), [@vincent178](https://github.com/vincent178)) [SIG Node]
+- Promote Immutable Secrets/ConfigMaps feature to Beta and enable the feature by default.
+  This allows to set `Immutable` field in Secrets or ConfigMap object to mark their contents as immutable. ([#89594](https://github.com/kubernetes/kubernetes/pull/89594), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps and Testing]
+- The unused `series.state` field, deprecated since v1.14, is removed from the `events.k8s.io/v1beta1` and `v1` Event types. ([#90449](https://github.com/kubernetes/kubernetes/pull/90449), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps]
+
+### Feature
+
+- Kube-apiserver: The NodeRestriction admission plugin now restricts Node labels kubelets are permitted to set when creating a new Node to the `--node-labels` parameters accepted by kubelets in 1.16+. ([#90307](https://github.com/kubernetes/kubernetes/pull/90307), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- Kubectl supports taint no without specifying(without having to type the full resource name) ([#88723](https://github.com/kubernetes/kubernetes/pull/88723), [@wawa0210](https://github.com/wawa0210)) [SIG CLI]
+- New scoring for PodTopologySpreading that yields better spreading ([#90475](https://github.com/kubernetes/kubernetes/pull/90475), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- No ([#89549](https://github.com/kubernetes/kubernetes/pull/89549), [@happinesstaker](https://github.com/happinesstaker)) [SIG API Machinery, Auth, Instrumentation and Testing]
+- Try to send watch bookmarks (if requested) periodically in addition to sending them right before timeout ([#90560](https://github.com/kubernetes/kubernetes/pull/90560), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery]
+
+### Bug or Regression
+
+- Avoid GCE API calls when initializing GCE CloudProvider for Kubelets. ([#90218](https://github.com/kubernetes/kubernetes/pull/90218), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider and Scalability]
+- Avoid unnecessary scheduling churn when annotations are updated while Pods are being scheduled. ([#90373](https://github.com/kubernetes/kubernetes/pull/90373), [@fabiokung](https://github.com/fabiokung)) [SIG Scheduling]
+- Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. ([#90537](https://github.com/kubernetes/kubernetes/pull/90537), [@freehan](https://github.com/freehan)) [SIG Network]
+- Fixed a regression in wait.Forever that skips the backoff period on the first repeat ([#90476](https://github.com/kubernetes/kubernetes/pull/90476), [@zhan849](https://github.com/zhan849)) [SIG API Machinery]
+- Fixes a bug that non directory hostpath type can be recognized as HostPathFile and adds e2e tests for HostPathType ([#64829](https://github.com/kubernetes/kubernetes/pull/64829), [@dixudx](https://github.com/dixudx)) [SIG Apps, Storage and Testing]
+- Fixes a regression in 1.17 that dropped cache-control headers on API requests ([#90468](https://github.com/kubernetes/kubernetes/pull/90468), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
+- Fixes regression in CPUManager that caused freeing of exclusive CPUs at incorrect times ([#90377](https://github.com/kubernetes/kubernetes/pull/90377), [@cbf123](https://github.com/cbf123)) [SIG Cloud Provider and Node]
+- Fixes regression in CPUManager that had the (rare) possibility to release exclusive CPUs in app containers inherited from init containers. ([#90419](https://github.com/kubernetes/kubernetes/pull/90419), [@klueska](https://github.com/klueska)) [SIG Node]
+- Jsonpath support in kubectl / client-go serializes complex types (maps / slices / structs) as json instead of Go-syntax. ([#89660](https://github.com/kubernetes/kubernetes/pull/89660), [@pjferrell](https://github.com/pjferrell)) [SIG API Machinery, CLI and Cluster Lifecycle]
+- Kubeadm: ensure `image-pull-timeout` flag is respected during upgrade phase ([#90328](https://github.com/kubernetes/kubernetes/pull/90328), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubeadm: fix misleading warning for the kube-apiserver authz modes during "kubeadm init" ([#90064](https://github.com/kubernetes/kubernetes/pull/90064), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Provides a fix to allow a cluster in a private Azure cloud to authenticate to ACR in the same cloud. ([#90425](https://github.com/kubernetes/kubernetes/pull/90425), [@DavidParks8](https://github.com/DavidParks8)) [SIG Cloud Provider]
+- Update github.com/moby/ipvs to v1.0.1 to fix IPVS compatiblity issue with older kernels ([#90555](https://github.com/kubernetes/kubernetes/pull/90555), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network]
+- Updates to pod status via the status subresource now validate that `status.podIP` and `status.podIPs` fields are well-formed. ([#90628](https://github.com/kubernetes/kubernetes/pull/90628), [@liggitt](https://github.com/liggitt)) [SIG Apps and Node]
+
+### Other (Cleanup or Flake)
+
+- Drop some conformance tests that rely on Kubelet API directly ([#90615](https://github.com/kubernetes/kubernetes/pull/90615), [@dims](https://github.com/dims)) [SIG Architecture, Network, Release and Testing]
+- Kube-proxy exposes a new metric, `kubeproxy_sync_proxy_rules_last_queued_timestamp_seconds`, that indicates the last time a change for kube-proxy was queued to be applied. ([#90175](https://github.com/kubernetes/kubernetes/pull/90175), [@squeed](https://github.com/squeed)) [SIG Instrumentation and Network]
+- Kubeadm: fix badly formatted error message for small service CIDRs ([#90411](https://github.com/kubernetes/kubernetes/pull/90411), [@johscheuer](https://github.com/johscheuer)) [SIG Cluster Lifecycle]
+- None. ([#90484](https://github.com/kubernetes/kubernetes/pull/90484), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Remove the repeated calculation of nodeName and hostname during kubelet startup, these parameters are all calculated in the `RunKubelet` method ([#90284](https://github.com/kubernetes/kubernetes/pull/90284), [@wawa0210](https://github.com/wawa0210)) [SIG Node]
+- UI change ([#87743](https://github.com/kubernetes/kubernetes/pull/87743), [@u2takey](https://github.com/u2takey)) [SIG Apps and Node]
+- Update opencontainers/runtime-spec dependency to v1.0.2 ([#89644](https://github.com/kubernetes/kubernetes/pull/89644), [@saschagrunert](https://github.com/saschagrunert)) [SIG Node]
+
+
+# v1.19.0-alpha.2
+
+[Documentation](https://docs.k8s.io)
+
+## Downloads for v1.19.0-alpha.2
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes.tar.gz) | `a1106309d18a5d73882650f8a5cbd1f287436a0dc527136808e5e882f5e98d6b0d80029ff53abc0c06ac240f6b879167437f15906e5309248d536ec1675ed909`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-src.tar.gz) | `c24c0b2a99ad0d834e0f017d7436fa84c6de8f30e8768ee59b1a418eb66a9b34ed4bcc25e03c04b19ea17366564f4ee6fe55a520fa4d0837e86c0a72fc7328c1`
+
+### Client Binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `51ede026b0f8338f7fd293fb096772a67f88f23411c3280dff2f9efdd3ad7be7917d5c32ba764162c1a82b14218a90f624271c3cd8f386c8e41e4a9eac28751f`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `4ed4358cabbecf724d974207746303638c7f23d422ece9c322104128c245c8485e37d6ffdd9d17e13bb1d8110e870c0fe17dcc1c9e556b69a4df7d34b6ff66d5`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `a57b10f146083828f18d809dbe07938b72216fa21083e7dbb9acce7dbcc3e8c51b8287d3bf89e81c8e1af4dd139075c675cc0f6ae7866ef69a3813db09309b97`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `099247419dd34dc78131f24f1890cc5c6a739e887c88fae96419d980c529456bfd45c4e451ba5b6425320ddc764245a2eab1bd5e2b5121d9a2774bdb5df9438b`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `d12704bc6c821d3afcd206234fbd32e57cefcb5a5d15a40434b6b0ef4781d7fa77080e490678005225f24b116540ff51e436274debf66a6eb2247cd1dc833e6c`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `da0d110751fa9adac69ed2166eb82b8634989a32b65981eff014c84449047abfb94fe015e2d2e22665d57ff19f673e2c9f6549c578ad1b1e2f18b39871b50b81`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | `7ac2b85bba9485dd38aed21895d627d34beb9e3b238e0684a9864f4ce2cfa67d7b3b7c04babc2ede7144d05beacdbe11c28c7d53a5b0041004700b2854b68042`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | `ac447eabc5002a059e614b481d25e668735a7858134f8ad49feb388bb9f9191ff03b65da57bb49811119983e8744c8fdc7d19c184d9232bd6d038fae9eeec7c6`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `7c7dac7af329e4515302e7c35d3a19035352b4211942f254a4bb94c582a89d740b214d236ba6e35b9e78945a06b7e6fe8d70da669ecc19a40b7a9e8eaa2c0a28`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `0c89b70a25551123ffdd7c5d3cc499832454745508c5f539f13b4ea0bf6eea1afd16e316560da9cf68e5178ae69d91ccfe6c02d7054588db3fac15c30ed96f4b`
+
+### Server Binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `3396e6e0516a09999ec26631e305cf0fb1eb0109ca1490837550b7635eb051dd92443de8f4321971fc2b4030ea2d8da4bfe8b85887505dec96e2a136b6a46617`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `cdea122a2d8d602ec0c89c1135ecfc27c47662982afc5b94edf4a6db7d759f27d6fe8d8b727bddf798bfec214a50e8d8a6d8eb0bca2ad5b1f72eb3768afd37f1`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `6543186a3f4437fb475fbc6a5f537640ab00afb2a22678c468c3699b3f7493f8b35fb6ca14694406ffc90ff8faad17a1d9d9d45732baa976cb69f4b27281295a`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | `fde8dfeb9a0b243c8bef5127a9c63bf685429e2ff7e486ac8bae373882b87a4bd1b28a12955e3cce1c04eb0e6a67aabba43567952f9deef943a75fcb157a949c`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | `399d004ee4db5d367f37a1fa9ace63b5db4522bd25eeb32225019f3df9b70c715d2159f6556015ddffe8f49aa0f72a1f095f742244637105ddbed3fb09570d0d`
+
+### Node Binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | `fd865c2fcc71796d73c90982f90c789a44a921cf1d56aee692bd00efaa122dcc903b0448f285a06b0a903e809f8310546764b742823fb8d10690d36ec9e27cbd`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | `63aeb35222241e2a9285aeee4190b4b49c49995666db5cdb142016ca87872e7fdafc9723bc5de1797a45cc7e950230ed27be93ac165b8cda23ca2a9f9233c27a`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | `3532574d9babfc064ce90099b514eadfc2a4ce69091f92d9c1a554ead91444373416d1506a35ef557438606a96cf0e5168a83ddd56c92593ea4adaa15b0b56a8`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | `de59d91e5b0e4549e9a97f3a0243236e97babaed08c70f1a17273abf1966e6127db7546e1f91c3d66e933ce6eeb70bc65632ab473aa2c1be2a853da026c9d725`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | `0cb8cf6f8dffd63122376a2f3e8986a2db155494a45430beea7cb5d1180417072428dabebd1af566ea13a4f079d46368c8b549be4b8a6c0f62a974290fd2fdb0`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | `f1faf695f9f6fded681653f958b48779a2fecf50803af49787acba192441790c38b2b611ec8e238971508c56e67bb078fb423e8f6d9bddb392c199b5ee47937c`
+
+## Changelog since v1.19.0-alpha.1
+
+## Urgent Upgrade Notes
+
+### (No, really, you MUST read this before you upgrade)
+
+- Kubeadm now respects user specified etcd versions in the ClusterConfiguration and properly uses them. If users do not want to stick to the version specified in the ClusterConfiguration, they should edit the kubeadm-config config map and delete it. ([#89588](https://github.com/kubernetes/kubernetes/pull/89588), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+
+## Changes by Kind
+
+### API Change
+
+- Kube-proxy: add `--bind-address-hard-fail` flag to treat failure to bind to a port as fatal ([#89350](https://github.com/kubernetes/kubernetes/pull/89350), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle and Network]
+- Remove kubescheduler.config.k8s.io/v1alpha1 ([#89298](https://github.com/kubernetes/kubernetes/pull/89298), [@gavinfish](https://github.com/gavinfish)) [SIG Scheduling]
+- ServiceAppProtocol feature gate is now beta and enabled by default, adding new AppProtocol field to Services and Endpoints. ([#90023](https://github.com/kubernetes/kubernetes/pull/90023), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- The Kubelet's `--volume-plugin-dir` option is now available via the Kubelet config file field `VolumePluginDir`. ([#88480](https://github.com/kubernetes/kubernetes/pull/88480), [@savitharaghunathan](https://github.com/savitharaghunathan)) [SIG Node]
+
+### Feature
+
+- Add client-side and server-side dry-run support to kubectl scale ([#89666](https://github.com/kubernetes/kubernetes/pull/89666), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- Add support for cgroups v2 node validation ([#89901](https://github.com/kubernetes/kubernetes/pull/89901), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle and Node]
+- Detailed scheduler scoring result can be printed at verbose level 10. ([#89384](https://github.com/kubernetes/kubernetes/pull/89384), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
+- E2e.test can print the list of conformance tests that need to pass for the cluster to be conformant. ([#88924](https://github.com/kubernetes/kubernetes/pull/88924), [@dims](https://github.com/dims)) [SIG Architecture and Testing]
+- Feat: add azure shared disk support ([#89511](https://github.com/kubernetes/kubernetes/pull/89511), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Kube-apiserver backed by etcd3 exports metric showing the database file size. ([#89151](https://github.com/kubernetes/kubernetes/pull/89151), [@jingyih](https://github.com/jingyih)) [SIG API Machinery]
+- Kube-apiserver: The NodeRestriction admission plugin now restricts Node labels kubelets are permitted to set when creating a new Node to the `--node-labels` parameters accepted by kubelets in 1.16+. ([#90307](https://github.com/kubernetes/kubernetes/pull/90307), [@liggitt](https://github.com/liggitt)) [SIG Auth and Node]
+- Kubeadm: during 'upgrade apply', if the kube-proxy ConfigMap is missing, assume that kube-proxy should not be upgraded. Same applies to a missing kube-dns/coredns ConfigMap for the DNS server addon. Note that this is a temporary workaround until 'upgrade apply' supports phases. Once phases are supported the kube-proxy/dns upgrade should be skipped manually. ([#89593](https://github.com/kubernetes/kubernetes/pull/89593), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: switch control-plane static Pods to the "system-node-critical" priority class ([#90063](https://github.com/kubernetes/kubernetes/pull/90063), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Support for running on a host that uses cgroups v2 unified mode ([#85218](https://github.com/kubernetes/kubernetes/pull/85218), [@giuseppe](https://github.com/giuseppe)) [SIG Node]
+- Update etcd client side to v3.4.7 ([#89822](https://github.com/kubernetes/kubernetes/pull/89822), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
+
+### Bug or Regression
+
+- An issue preventing GCP cloud-controller-manager running out-of-cluster to initialize new Nodes is now fixed. ([#90057](https://github.com/kubernetes/kubernetes/pull/90057), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Apps and Cloud Provider]
+- Avoid unnecessary GCE API calls when adding IP alises or reflecting them in Node object in GCE cloud provider. ([#90242](https://github.com/kubernetes/kubernetes/pull/90242), [@wojtek-t](https://github.com/wojtek-t)) [SIG Apps, Cloud Provider and Network]
+- Azure: fix concurreny issue in lb creation ([#89604](https://github.com/kubernetes/kubernetes/pull/89604), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- Bug fix for AWS NLB service when nodePort for existing servicePort changed manually. ([#89562](https://github.com/kubernetes/kubernetes/pull/89562), [@M00nF1sh](https://github.com/M00nF1sh)) [SIG Cloud Provider]
+- CSINode initialization does not crash kubelet on startup when APIServer is not reachable or kubelet has not the right credentials yet. ([#89589](https://github.com/kubernetes/kubernetes/pull/89589), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Client-go: resolves an issue with informers falling back to full list requests when timeouts are encountered, rather than re-establishing a watch. ([#89652](https://github.com/kubernetes/kubernetes/pull/89652), [@liggitt](https://github.com/liggitt)) [SIG API Machinery and Testing]
+- Dual-stack: fix the bug that Service clusterIP does not respect specified ipFamily ([#89612](https://github.com/kubernetes/kubernetes/pull/89612), [@SataQiu](https://github.com/SataQiu)) [SIG Network]
+- Ensure Azure availability zone is always in lower cases. ([#89722](https://github.com/kubernetes/kubernetes/pull/89722), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Explain CRDs whose resource name are the same as builtin objects ([#89505](https://github.com/kubernetes/kubernetes/pull/89505), [@knight42](https://github.com/knight42)) [SIG API Machinery, CLI and Testing]
+- Fix flaws in Azure File CSI translation ([#90162](https://github.com/kubernetes/kubernetes/pull/90162), [@rfranzke](https://github.com/rfranzke)) [SIG Release and Storage]
+- Fix kubectl describe CSINode nil pointer error ([#89646](https://github.com/kubernetes/kubernetes/pull/89646), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix kubectl diff so it doesn't actually persist patches ([#89795](https://github.com/kubernetes/kubernetes/pull/89795), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- Fix kubectl version should print version info without config file ([#89913](https://github.com/kubernetes/kubernetes/pull/89913), [@zhouya0](https://github.com/zhouya0)) [SIG API Machinery and CLI]
+- Fix missing `-c` shorthand for `--container` flag of `kubectl alpha debug` ([#89674](https://github.com/kubernetes/kubernetes/pull/89674), [@superbrothers](https://github.com/superbrothers)) [SIG CLI]
+- Fix printers ignoring object average value ([#89142](https://github.com/kubernetes/kubernetes/pull/89142), [@zhouya0](https://github.com/zhouya0)) [SIG API Machinery]
+- Fix scheduler crash when removing node before its pods ([#89908](https://github.com/kubernetes/kubernetes/pull/89908), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Fix: get attach disk error due to missing item in max count table ([#89768](https://github.com/kubernetes/kubernetes/pull/89768), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fixed a bug where executing a kubectl command with a jsonpath output expression that has a nested range would ignore expressions following the nested range. ([#88464](https://github.com/kubernetes/kubernetes/pull/88464), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery]
+- Fixed a regression running kubectl commands with  --local or --dry-run flags when no kubeconfig file is present ([#90243](https://github.com/kubernetes/kubernetes/pull/90243), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI and Testing]
+- Fixed an issue mounting credentials for service accounts whose name contains `.` characters ([#89696](https://github.com/kubernetes/kubernetes/pull/89696), [@nabokihms](https://github.com/nabokihms)) [SIG Auth]
+- Fixed mountOptions in iSCSI and FibreChannel volume plugins. ([#89172](https://github.com/kubernetes/kubernetes/pull/89172), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixed the EndpointSlice controller to run without error on a cluster with the OwnerReferencesPermissionEnforcement validating admission plugin enabled. ([#89741](https://github.com/kubernetes/kubernetes/pull/89741), [@marun](https://github.com/marun)) [SIG Auth and Network]
+- Fixes a bug defining a default value for a replicas field in a custom resource definition that has the scale subresource enabled ([#89833](https://github.com/kubernetes/kubernetes/pull/89833), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Fixes conversion error for HorizontalPodAutoscaler objects with invalid annotations ([#89963](https://github.com/kubernetes/kubernetes/pull/89963), [@liggitt](https://github.com/liggitt)) [SIG Autoscaling]
+- Fixes kubectl to apply all validly built objects, instead of stopping on error. ([#89848](https://github.com/kubernetes/kubernetes/pull/89848), [@seans3](https://github.com/seans3)) [SIG CLI and Testing]
+- For GCE cluster provider, fix bug of not being able to create internal type load balancer for clusters with more than 1000 nodes in a single zone. ([#89902](https://github.com/kubernetes/kubernetes/pull/89902), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider, Network and Scalability]
+- If firstTimestamp is not set use eventTime when printing event ([#89999](https://github.com/kubernetes/kubernetes/pull/89999), [@soltysh](https://github.com/soltysh)) [SIG CLI]
+- If we set parameter cgroupPerQos=false and cgroupRoot=/docker，this function will retrun  nodeAllocatableRoot=/docker/kubepods, it is not right, the correct return should be /docker.
+  cm.NodeAllocatableRoot(s.CgroupRoot, s.CgroupDriver)
+  
+  kubeDeps.CAdvisorInterface, err = cadvisor.New(imageFsInfoProvider, s.RootDirectory, cgroupRoots, cadvisor.UsingLegacyCadvisorStats(s.ContainerRuntime, s.RemoteRuntimeEndpoint))
+  the above funtion，as we use cgroupRoots to create cadvisor interface，the wrong parameter cgroupRoots will lead eviction manager not  to collect metric from /docker, then kubelet frequently print those error：
+  E0303 17:25:03.436781 63839 summary_sys_containers.go:47] Failed to get system container stats for "/docker": failed to get cgroup stats for "/docker": failed to get container info for "/docker": unknown container "/docker"
+  E0303 17:25:03.436809 63839 helpers.go:680] eviction manager: failed to construct signal: "allocatableMemory.available" error: system container "pods" not found in metrics ([#88970](https://github.com/kubernetes/kubernetes/pull/88970), [@mysunshine92](https://github.com/mysunshine92)) [SIG Node]
+- In the kubelet resource metrics endpoint at /metrics/resource, change the names of the following metrics:
+  - node_cpu_usage_seconds --> node_cpu_usage_seconds_total
+  - container_cpu_usage_seconds --> container_cpu_usage_seconds_total
+  This is a partial revert of &#35;86282, which was added in 1.18.0, and initially removed the _total suffix ([#89540](https://github.com/kubernetes/kubernetes/pull/89540), [@dashpole](https://github.com/dashpole)) [SIG Instrumentation and Node]
+- Kube-apiserver: multiple comma-separated protocols in a single X-Stream-Protocol-Version header are now recognized, in addition to multiple headers, complying with RFC2616 ([#89857](https://github.com/kubernetes/kubernetes/pull/89857), [@tedyu](https://github.com/tedyu)) [SIG API Machinery]
+- Kubeadm increased to 5 minutes its timeout for the TLS bootstrapping process to complete upon join ([#89735](https://github.com/kubernetes/kubernetes/pull/89735), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]
+- Kubeadm: during join when a check is performed that a Node with the same name already exists in the cluster, make sure the NodeReady condition is properly validated ([#89602](https://github.com/kubernetes/kubernetes/pull/89602), [@kvaps](https://github.com/kvaps)) [SIG Cluster Lifecycle]
+- Kubeadm: fix a bug where post upgrade to 1.18.x, nodes cannot join the cluster due to missing RBAC ([#89537](https://github.com/kubernetes/kubernetes/pull/89537), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: fix misleading warning about passing control-plane related flags on 'kubeadm join' ([#89596](https://github.com/kubernetes/kubernetes/pull/89596), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubectl azure authentication: fixed a regression in 1.18.0 where "spn:" prefix was unexpectedly added to the `apiserver-id` configuration in the kubeconfig file ([#89706](https://github.com/kubernetes/kubernetes/pull/89706), [@weinong](https://github.com/weinong)) [SIG API Machinery and Auth]
+- Restore the ability to `kubectl apply --prune` without --namespace flag.  Since 1.17, `kubectl apply --prune` only prunes resources in the default namespace (or from kubeconfig) or explicitly specified in command line flag.  But this is s breaking change from kubectl 1.16, which can prune resources in all namespace in config file.  This patch restores the kubectl 1.16 behaviour. ([#89551](https://github.com/kubernetes/kubernetes/pull/89551), [@tatsuhiro-t](https://github.com/tatsuhiro-t)) [SIG CLI and Testing]
+- Restores priority of static control plane pods in the cluster/gce/manifests control-plane manifests ([#89970](https://github.com/kubernetes/kubernetes/pull/89970), [@liggitt](https://github.com/liggitt)) [SIG Cluster Lifecycle and Node]
+- Service account tokens bound to pods can now be used during the pod deletion grace period. ([#89583](https://github.com/kubernetes/kubernetes/pull/89583), [@liggitt](https://github.com/liggitt)) [SIG Auth]
+- Sync LB backend nodes for Service Type=LoadBalancer on Add/Delete node events. ([#81185](https://github.com/kubernetes/kubernetes/pull/81185), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
+
+### Other (Cleanup or Flake)
+
+- Change beta.kubernetes.io/os  to kubernetes.io/os ([#89460](https://github.com/kubernetes/kubernetes/pull/89460), [@wawa0210](https://github.com/wawa0210)) [SIG Testing and Windows]
+- Changes not found message when using `kubectl get` to retrieve not namespaced resources ([#89861](https://github.com/kubernetes/kubernetes/pull/89861), [@rccrdpccl](https://github.com/rccrdpccl)) [SIG CLI]
+- Node ([#76443](https://github.com/kubernetes/kubernetes/pull/76443), [@mgdevstack](https://github.com/mgdevstack)) [SIG Architecture, Network, Node, Testing and Windows]
+- None. ([#90273](https://github.com/kubernetes/kubernetes/pull/90273), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
+- Reduce event spam during a volume operation error. ([#89794](https://github.com/kubernetes/kubernetes/pull/89794), [@msau42](https://github.com/msau42)) [SIG Storage]
+- The PR adds functionality to generate events when a PV or PVC processing encounters certain failures. The events help users to know the reason for the failure so they can take necessary recovery actions. ([#89845](https://github.com/kubernetes/kubernetes/pull/89845), [@yuga711](https://github.com/yuga711)) [SIG Apps]
+- The PodShareProcessNamespace feature gate has been removed, and the PodShareProcessNamespace is unconditionally enabled. ([#90099](https://github.com/kubernetes/kubernetes/pull/90099), [@tanjunchen](https://github.com/tanjunchen)) [SIG Node]
+- Update default etcd server version to 3.4.4 ([#89214](https://github.com/kubernetes/kubernetes/pull/89214), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cluster Lifecycle and Testing]
+- Update default etcd server version to 3.4.7 ([#89895](https://github.com/kubernetes/kubernetes/pull/89895), [@jingyih](https://github.com/jingyih)) [SIG API Machinery, Cluster Lifecycle and Testing]
+
+
+# v1.19.0-alpha.1
+
+[Documentation](https://docs.k8s.io)
+
+## Downloads for v1.19.0-alpha.1
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes.tar.gz) | `d5930e62f98948e3ae2bc0a91b2cb93c2009202657b9e798e43fcbf92149f50d991af34a49049b2640db729efc635d643d008f4b3dd6c093cac4426ee3d5d147`
+[kubernetes-src.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-src.tar.gz) | `5d92125ec3ca26b6b0af95c6bb3289bb7cf60a4bad4e120ccdad06ffa523c239ca8e608015b7b5a1eb789bfdfcedbe0281518793da82a7959081fb04cf53c174`
+
+### Client Binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-darwin-386.tar.gz) | `08d307dafdd8e1aa27721f97f038210b33261d1777ea173cc9ed4b373c451801988a7109566425fce32d38df70bdf0be6b8cfff69da768fbd3c303abd6dc13a5`
+[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | `08c3b722a62577d051e300ebc3c413ead1bd3e79555598a207c704064116087323215fb402bae7584b9ffd08590f36fa8a35f13f8fea1ce92e8f144e3eae3384`
+[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-linux-386.tar.gz) | `0735978b4d4cb0601171eae3cc5603393c00f032998f51d79d3b11e4020f4decc9559905e9b02ddcb0b6c3f4caf78f779940ebc97996e3b96b98ba378fbe189d`
+[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | `ca55fc431d59c1a0bf1f1c248da7eab65215e438fcac223d4fc3a57fae0205869e1727b2475dfe9b165921417d68ac380a6e42bf7ea6732a34937ba2590931ce`
+[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | `4e1aa9e640d7cf0ccaad19377e4c3ca9a60203daa2ce0437d1d40fdea0e43759ef38797e948cdc3c676836b01e83f1bfde51effc0579bf832f6f062518f03f06`
+[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | `fca5df8c2919a9b3d99248120af627d9a1b5ddf177d9a10f04eb4e486c14d4e3ddb72e3abc4733b5078e0d27204a51e2f714424923fb92a5351137f82d87d6ea`
+[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | `6a98a4f99aa8b72ec815397c5062b90d5c023092da28fa7bca1cdadf406e2d86e2fd3a0eeab28574064959c6926007423c413d9781461e433705452087430d57`
+[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | `94724c17985ae2dbd3888e6896f300f95fec8dc2bf08e768849e98b05affc4381b322d802f41792b8e6da4708ce1ead2edcb8f4d5299be6267f6559b0d49e484`
+[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-windows-386.tar.gz) | `5a076bf3a5926939c170a501f8292a38003552848c45c1f148a97605b7ac9843fb660ef81a46abe6d139f4c5eaa342d4b834a799ee7055d5a548d189b31d7124`
+[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | `4b395894bfd9cfa0976512d1d58c0056a80bacefc798de294db6d3f363bd5581fd3ce2e4bdc1b902d46c8ce2ac87a98ced56b6b29544c86e8444fb8e9465faea`
+
+### Server Binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | `6720d1b826dc20e56b0314e580403cd967430ff25bdbe08e8bf453fed339557d2a4ace114c2f524e6b6814ec9341ccdea870f784ebb53a52056ca3ab22e5cc36`
+[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | `f09b295f5a95cc72494eb1c0e9706b237a8523eacda182778e9afdb469704c7eacd29614aff6d3d7aff3bc1783fb277d52ad56a1417f1bd973eeb9bdc8086695`
+[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | `24787767abd1d67a4d0234433e1693ea3e1e906364265ee03e58ba203b66583b75d4ce0c4185756fc529997eb9a842d65841962cd228df9c182a469dbd72493d`
+[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | `a117e609729263d7bd58aac156efa33941f0f9aa651892d1abf32cfa0a984aa495fccd3be8385cae083415bfa8f81942648d5978f72e950103e42184fd0d7527`
+[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | `19280a6dc20f019d23344934f8f1ec6aa17c3374b9c569d4c173535a8cd9e298b8afcabe06d232a146c9c7cb4bfe7d1d0e10aa2ab9184ace0b7987e36973aaef`
+
+### Node Binaries
+
+filename | sha512 hash
+-------- | -----------
+[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | `c4b23f113ed13edb91b59a498d15de8b62ff1005243f2d6654a11468511c9d0ebaebb6dc02d2fa505f18df446c9221e77d7fc3147fa6704cde9bec5d6d80b5a3`
+[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | `8dcf5531a5809576049c455d3c5194f09ddf3b87995df1e8ca4543deff3ffd90a572539daff9aa887e22efafedfcada2e28035da8573e3733c21778e4440677a`
+[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | `4b3f4dfee2034ce7d01fef57b8766851fe141fc72da0f9edeb39aca4c7a937e2dccd2c198a83fbb92db7911d81e50a98bd0a17b909645adbeb26e420197db2cd`
+[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | `df0e87f5e42056db2bbc7ef5f08ecda95d66afc3f4d0bc57f6efcc05834118c39ab53d68595d8f2bb278829e33b9204c5cce718d8bf841ce6cccbb86d0d20730`
+[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | `3a6499b008a68da52f8ae12eb694885d9e10a8f805d98f28fc5f7beafea72a8e180df48b5ca31097b2d4779c61ff67216e516c14c2c812163e678518d95f22d6`
+[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.19.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | `c311373506cbfa0244ac92a709fbb9bddb46cbeb130733bdb689641ecee6b21a7a7f020eae4856a3f04a3845839dc5e0914cddc3478d55cd3d5af3d7804aa5ba`
+
+## Changelog since v1.19.0-alpha.0
 
 ## Urgent Upgrade Notes
 
@@ -803,568 +2418,187 @@ filename | sha512 hash
 - The StreamingProxyRedirects feature and `--redirect-container-streaming` flag are deprecated, and will be removed in a future release. The default behavior (proxy streaming requests through the kubelet) will be the only supported option.
   If you are setting `--redirect-container-streaming=true`, then you must migrate off this configuration. The flag will no longer be able to be enabled starting in v1.20. If you are not setting the flag, no action is necessary. ([#88290](https://github.com/kubernetes/kubernetes/pull/88290), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Node]
 
-- Yes.
-
-  Feature Name: Support using network resources (VNet, LB, IP, etc.) in different AAD Tenant and Subscription than those for the cluster.
-
-  Changes in Pull Request:
-
-    1. Add properties `networkResourceTenantID` and `networkResourceSubscriptionID` in cloud provider auth config section, which indicates the location of network resources.
-    2. Add function `GetMultiTenantServicePrincipalToken` to fetch multi-tenant service principal token, which will be used by Azure VM/VMSS Clients in this feature.
-    3. Add function `GetNetworkResourceServicePrincipalToken` to fetch network resource service principal token, which will be used by Azure Network Resource (Load Balancer, Public IP, Route Table, Network Security Group and their sub level resources) Clients in this feature.
-    4. Related unit tests.
-
-  None.
-
-  User Documentation: In PR https://github.com/kubernetes-sigs/cloud-provider-azure/pull/301 ([#88384](https://github.com/kubernetes/kubernetes/pull/88384), [@bowen5](https://github.com/bowen5)) [SIG Cloud Provider]
+- `kubectl` no longer defaults to `http://localhost:8080`.  If you own one of these legacy clusters, you are *strongly- encouraged to secure your server.   If you cannot secure your server, you can set `KUBERNETES_MASTER` if you were relying on that behavior and you're client-go user. Set `--server`, `--kubeconfig` or `KUBECONFIG` to make it work in `kubectl`. ([#86173](https://github.com/kubernetes/kubernetes/pull/86173), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI and Testing]
 
 ## Changes by Kind
 
 ### Deprecation
 
+- AlgorithmSource is removed from v1alpha2 Scheduler ComponentConfig ([#87999](https://github.com/kubernetes/kubernetes/pull/87999), [@damemi](https://github.com/damemi)) [SIG Scheduling]
 - Azure service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset has been deprecated. Its support would be removed in a future release. ([#88462](https://github.com/kubernetes/kubernetes/pull/88462), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Kube-proxy: deprecate `--healthz-port` and `--metrics-port` flag, please use `--healthz-bind-address` and `--metrics-bind-address` instead ([#88512](https://github.com/kubernetes/kubernetes/pull/88512), [@SataQiu](https://github.com/SataQiu)) [SIG Network]
+- Kubeadm: deprecate the usage of the experimental flag '--use-api' under the 'kubeadm alpha certs renew' command. ([#88827](https://github.com/kubernetes/kubernetes/pull/88827), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubernetes no longer supports building hyperkube images ([#88676](https://github.com/kubernetes/kubernetes/pull/88676), [@dims](https://github.com/dims)) [SIG Cluster Lifecycle and Release]
 
 ### API Change
 
+- A new IngressClass resource has been added to enable better Ingress configuration. ([#88509](https://github.com/kubernetes/kubernetes/pull/88509), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, CLI, Network, Node and Testing]
 - API additions to apiserver types ([#87179](https://github.com/kubernetes/kubernetes/pull/87179), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Cloud Provider and Cluster Lifecycle]
 - Add Scheduling Profiles to kubescheduler.config.k8s.io/v1alpha2 ([#88087](https://github.com/kubernetes/kubernetes/pull/88087), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
+- Added GenericPVCDataSource feature gate to enable using arbitrary custom resources as the data source for a PVC. ([#88636](https://github.com/kubernetes/kubernetes/pull/88636), [@bswartz](https://github.com/bswartz)) [SIG Apps and Storage]
 - Added support for multiple sizes huge pages on a container level ([#84051](https://github.com/kubernetes/kubernetes/pull/84051), [@bart0sh](https://github.com/bart0sh)) [SIG Apps, Node and Storage]
+- Allow user to specify fsgroup permission change policy for pods ([#88488](https://github.com/kubernetes/kubernetes/pull/88488), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
 - AppProtocol is a new field on Service and Endpoints resources, enabled with the ServiceAppProtocol feature gate. ([#88503](https://github.com/kubernetes/kubernetes/pull/88503), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- BlockVolume and CSIBlockVolume features are now GA. ([#88673](https://github.com/kubernetes/kubernetes/pull/88673), [@jsafrane](https://github.com/jsafrane)) [SIG Apps, Node and Storage]
+- Consumers of the 'certificatesigningrequests/approval' API must now grant permission to 'approve' CSRs for the 'signerName' specified on the CSR. More information on the new signerName field can be found at https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/20190607-certificates-api.md&#35;signers ([#88246](https://github.com/kubernetes/kubernetes/pull/88246), [@munnerz](https://github.com/munnerz)) [SIG API Machinery, Apps, Auth, CLI, Node and Testing]
+- CustomResourceDefinition schemas that use `x-kubernetes-list-map-keys` to specify properties that uniquely identify list items must make those properties required or have a default value, to ensure those properties are present for all list items. See https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;merge-strategy for details. ([#88076](https://github.com/kubernetes/kubernetes/pull/88076), [@eloyekunle](https://github.com/eloyekunle)) [SIG API Machinery and Testing]
 - Fixed missing validation of uniqueness of list items in lists with `x-kubernetes-list-type: map` or x-kubernetes-list-type: set` in CustomResources. ([#84920](https://github.com/kubernetes/kubernetes/pull/84920), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Introduces optional --detect-local flag to kube-proxy.
-  Currently the only supported value is "cluster-cidr",
+- Fixes a regression with clients prior to 1.15 not being able to update podIP in pod status, or podCIDR in node spec, against >= 1.16 API servers ([#88505](https://github.com/kubernetes/kubernetes/pull/88505), [@liggitt](https://github.com/liggitt)) [SIG Apps and Network]
+- Ingress: Add Exact and Prefix maching to Ingress PathTypes ([#88587](https://github.com/kubernetes/kubernetes/pull/88587), [@cmluciano](https://github.com/cmluciano)) [SIG Apps, Cluster Lifecycle and Network]
+- Ingress: Add alternate backends via TypedLocalObjectReference ([#88775](https://github.com/kubernetes/kubernetes/pull/88775), [@cmluciano](https://github.com/cmluciano)) [SIG Apps and Network]
+- Ingress: allow wildcard hosts in IngressRule ([#88858](https://github.com/kubernetes/kubernetes/pull/88858), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
+- Introduces optional --detect-local flag to kube-proxy. 
+  Currently the only supported value is "cluster-cidr", 
   which is the default if not specified. ([#87748](https://github.com/kubernetes/kubernetes/pull/87748), [@satyasm](https://github.com/satyasm)) [SIG Cluster Lifecycle, Network and Scheduling]
+- Kube-controller-manager and kube-scheduler expose profiling by default to match the kube-apiserver.  Use `--enable-profiling=false` to disable. ([#88663](https://github.com/kubernetes/kubernetes/pull/88663), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Cloud Provider and Scheduling]
 - Kube-scheduler can run more than one scheduling profile. Given a pod, the profile is selected by using its `.spec.SchedulerName`. ([#88285](https://github.com/kubernetes/kubernetes/pull/88285), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps, Scheduling and Testing]
+- Move TaintBasedEvictions feature gates to GA ([#87487](https://github.com/kubernetes/kubernetes/pull/87487), [@skilxn-go](https://github.com/skilxn-go)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
 - Moving Windows RunAsUserName feature to GA ([#87790](https://github.com/kubernetes/kubernetes/pull/87790), [@marosset](https://github.com/marosset)) [SIG Apps and Windows]
+- New flag --endpointslice-updates-batch-period in kube-controller-manager can be used to reduce number of endpointslice updates generated by pod changes. ([#88745](https://github.com/kubernetes/kubernetes/pull/88745), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Apps and Network]
+- New flag `--show-hidden-metrics-for-version` in kubelet can be used to show all hidden metrics that deprecated in the previous minor release. ([#85282](https://github.com/kubernetes/kubernetes/pull/85282), [@serathius](https://github.com/serathius)) [SIG Node]
+- Removes ConfigMap as suggestion for IngressClass parameters ([#89093](https://github.com/kubernetes/kubernetes/pull/89093), [@robscott](https://github.com/robscott)) [SIG Network]
+- Scheduler Extenders can now be configured in the v1alpha2 component config ([#88768](https://github.com/kubernetes/kubernetes/pull/88768), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
+- The apiserver/v1alph1&#35;EgressSelectorConfiguration API is now beta. ([#88502](https://github.com/kubernetes/kubernetes/pull/88502), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery]
+- The storage.k8s.io/CSIDriver has moved to GA, and is now available for use. ([#84814](https://github.com/kubernetes/kubernetes/pull/84814), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, Apps, Auth, Node, Scheduling, Storage and Testing]
+- VolumePVCDataSource moves to GA in 1.18 release ([#88686](https://github.com/kubernetes/kubernetes/pull/88686), [@j-griffith](https://github.com/j-griffith)) [SIG Apps, CLI and Cluster Lifecycle]
 
 ### Feature
 
+- deps: Update to Golang 1.13.9
+  - build: Remove kube-cross image building ([#89275](https://github.com/kubernetes/kubernetes/pull/89275), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
 - Add --dry-run to kubectl delete, taint, replace ([#88292](https://github.com/kubernetes/kubernetes/pull/88292), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
+- Add `rest_client_rate_limiter_duration_seconds` metric to component-base to track client side rate limiter latency in seconds. Broken down by verb and URL. ([#88134](https://github.com/kubernetes/kubernetes/pull/88134), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
 - Add huge page stats to Allocated resources in "kubectl describe node" ([#80605](https://github.com/kubernetes/kubernetes/pull/80605), [@odinuge](https://github.com/odinuge)) [SIG CLI]
+- Add support for pre allocated huge pages with different sizes, on node level ([#89252](https://github.com/kubernetes/kubernetes/pull/89252), [@odinuge](https://github.com/odinuge)) [SIG Apps and Node]
+- Adds support for NodeCIDR as an argument to --detect-local-mode ([#88935](https://github.com/kubernetes/kubernetes/pull/88935), [@satyasm](https://github.com/satyasm)) [SIG Network]
+- Allow user to specify resource using --filename flag when invoking kubectl exec ([#88460](https://github.com/kubernetes/kubernetes/pull/88460), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
+- Apiserver add a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver. 
+  After the connection closed(received GOAWAY), the client's other in-flight requests won't be affected, and the client will reconnect. 
+  The flag min value is 0 (off), max is .02 (1/50 requests); .001 (1/1000) is a recommended starting point.
+  Clusters with single apiservers, or which don't use a load balancer, should NOT enable this. ([#88567](https://github.com/kubernetes/kubernetes/pull/88567), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
+- Azure Cloud Provider now supports using Azure network resources (Virtual Network, Load Balancer, Public IP, Route Table, Network Security Group, etc.) in different AAD Tenant and Subscription than those for the Kubernetes cluster. To use the feature, please reference https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/docs/cloud-provider-config.md&#35;host-network-resources-in-different-aad-tenant-and-subscription. ([#88384](https://github.com/kubernetes/kubernetes/pull/88384), [@bowen5](https://github.com/bowen5)) [SIG Cloud Provider]
+- Azure: add support for single stack IPv6 ([#88448](https://github.com/kubernetes/kubernetes/pull/88448), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
+- DefaultConstraints can be specified for the PodTopologySpread plugin in the component config ([#88671](https://github.com/kubernetes/kubernetes/pull/88671), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- EndpointSlice controller waits longer to retry failed sync. ([#89438](https://github.com/kubernetes/kubernetes/pull/89438), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
+- Feat: change azure disk api-version ([#89250](https://github.com/kubernetes/kubernetes/pull/89250), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Feat: support [Azure shared disk](https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-shared-enable), added a new field(`maxShares`) in azure disk storage class:
+  
+  kind: StorageClass
+  apiVersion: storage.k8s.io/v1
+  metadata:
+    name: shared-disk
+  provisioner: kubernetes.io/azure-disk
+  parameters:
+    skuname: Premium_LRS  &#35; Currently only available with premium SSDs.
+    cachingMode: None  &#35; ReadOnly host caching is not available for premium SSDs with maxShares>1
+    maxShares: 2 ([#89328](https://github.com/kubernetes/kubernetes/pull/89328), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Kube-apiserver, kube-scheduler and kube-controller manager now use SO_REUSEPORT socket option when listening on address defined by --bind-address and --secure-port flags, when running on Unix systems (Windows is NOT supported). This allows to run multiple instances of those processes on a single host with the same configuration, which allows to update/restart them in a graceful way, without causing downtime. ([#88893](https://github.com/kubernetes/kubernetes/pull/88893), [@invidian](https://github.com/invidian)) [SIG API Machinery, Scheduling and Testing]
 - Kubeadm: The ClusterStatus struct present in the kubeadm-config ConfigMap is deprecated and will be removed on a future version. It is going to be maintained by kubeadm until it gets removed. The same information can be found on `etcd` and `kube-apiserver` pod annotations, `kubeadm.kubernetes.io/etcd.advertise-client-urls` and `kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint` respectively. ([#87656](https://github.com/kubernetes/kubernetes/pull/87656), [@ereslibre](https://github.com/ereslibre)) [SIG Cluster Lifecycle]
 - Kubeadm: add the experimental feature gate PublicKeysECDSA that can be used to create a
   cluster with ECDSA certificates from "kubeadm init". Renewal of existing ECDSA certificates is
   also supported using "kubeadm alpha certs renew", but not switching between the RSA and
   ECDSA algorithms on the fly or during upgrades. ([#86953](https://github.com/kubernetes/kubernetes/pull/86953), [@rojkov](https://github.com/rojkov)) [SIG API Machinery, Auth and Cluster Lifecycle]
 - Kubeadm: on kubeconfig certificate renewal, keep the embedded CA in sync with the one on disk ([#88052](https://github.com/kubernetes/kubernetes/pull/88052), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
+- Kubeadm: support Windows specific kubelet flags in kubeadm-flags.env ([#88287](https://github.com/kubernetes/kubernetes/pull/88287), [@gab-satchi](https://github.com/gab-satchi)) [SIG Cluster Lifecycle and Windows]
 - Kubeadm: upgrade supports fallback to the nearest known etcd version if an unknown k8s version is passed ([#88373](https://github.com/kubernetes/kubernetes/pull/88373), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubectl cluster-info dump changed to only display a message telling you the location where the output was written when the output is not standard output. ([#88765](https://github.com/kubernetes/kubernetes/pull/88765), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
 - New flag `--show-hidden-metrics-for-version` in kube-scheduler can be used to show all hidden metrics that deprecated in the previous minor release. ([#84913](https://github.com/kubernetes/kubernetes/pull/84913), [@serathius](https://github.com/serathius)) [SIG Instrumentation and Scheduling]
+- Print NotReady when pod is not ready based on its conditions. ([#88240](https://github.com/kubernetes/kubernetes/pull/88240), [@soltysh](https://github.com/soltysh)) [SIG CLI]
+- Scheduler Extender API is now located under k8s.io/kube-scheduler/extender ([#88540](https://github.com/kubernetes/kubernetes/pull/88540), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
 - Scheduler framework permit plugins now run at the end of the scheduling cycle, after reserve plugins. Waiting on permit will remain in the beginning of the binding cycle. ([#88199](https://github.com/kubernetes/kubernetes/pull/88199), [@mateuszlitwin](https://github.com/mateuszlitwin)) [SIG Scheduling]
+- Signatures on scale client methods have been modified to accept `context.Context` as a first argument. Signatures of Get, Update, and Patch methods have been updated to accept GetOptions, UpdateOptions and PatchOptions respectively. ([#88599](https://github.com/kubernetes/kubernetes/pull/88599), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery, Apps, Autoscaling and CLI]
+- Signatures on the dynamic client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. ([#88906](https://github.com/kubernetes/kubernetes/pull/88906), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps, CLI, Cluster Lifecycle, Storage and Testing]
+- Signatures on the metadata client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. ([#88910](https://github.com/kubernetes/kubernetes/pull/88910), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
+- Support create or update VMSS asynchronously. ([#89248](https://github.com/kubernetes/kubernetes/pull/89248), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]
 - The kubelet and the default docker runtime now support running ephemeral containers in the Linux process namespace of a target container. Other container runtimes must implement this feature before it will be available in that runtime. ([#84731](https://github.com/kubernetes/kubernetes/pull/84731), [@verb](https://github.com/verb)) [SIG Node]
+- Update etcd client side to v3.4.4 ([#89169](https://github.com/kubernetes/kubernetes/pull/89169), [@jingyih](https://github.com/jingyih)) [SIG API Machinery and Cloud Provider]
+- Upgrade to azure-sdk v40.2.0 ([#89105](https://github.com/kubernetes/kubernetes/pull/89105), [@andyzhangx](https://github.com/andyzhangx)) [SIG CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Storage and Testing]
+- Webhooks will have alpha support for network proxy ([#85870](https://github.com/kubernetes/kubernetes/pull/85870), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Auth and Testing]
+- When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, Auth, Node and Testing]
+- When deleting objects using kubectl with the --force flag, you are no longer required to also specify --grace-period=0. ([#87776](https://github.com/kubernetes/kubernetes/pull/87776), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
+- `kubectl` now contains a `kubectl alpha debug` command. This command allows attaching an ephemeral container to a running pod for the purposes of debugging. ([#88004](https://github.com/kubernetes/kubernetes/pull/88004), [@verb](https://github.com/verb)) [SIG CLI]
+
+### Documentation
+
+- Improved error message for incorrect auth field. ([#82829](https://github.com/kubernetes/kubernetes/pull/82829), [@martin-schibsted](https://github.com/martin-schibsted)) [SIG Auth]
+- Update Japanese translation for kubectl help ([#86837](https://github.com/kubernetes/kubernetes/pull/86837), [@inductor](https://github.com/inductor)) [SIG CLI and Docs]
+- Updated the instructions for deploying the sample app. ([#82785](https://github.com/kubernetes/kubernetes/pull/82785), [@ashish-billore](https://github.com/ashish-billore)) [SIG API Machinery]
+- `kubectl plugin` now prints a note how to install krew ([#88577](https://github.com/kubernetes/kubernetes/pull/88577), [@corneliusweig](https://github.com/corneliusweig)) [SIG CLI]
 
 ### Other (Bug, Cleanup or Flake)
 
+- A PV set from in-tree source will have ordered requirement values in NodeAffinity when converted to CSIPersistentVolumeSource ([#88987](https://github.com/kubernetes/kubernetes/pull/88987), [@jiahuif](https://github.com/jiahuif)) [SIG Storage]
 - Add delays between goroutines for vm instance update ([#88094](https://github.com/kubernetes/kubernetes/pull/88094), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
 - Add init containers log to cluster dump info. ([#88324](https://github.com/kubernetes/kubernetes/pull/88324), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Azure VMSS LoadBalancerBackendAddressPools updating has been improved with squential-sync + concurrent-async requests. ([#88699](https://github.com/kubernetes/kubernetes/pull/88699), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Azure auth module for kubectl now requests login after refresh token expires. ([#86481](https://github.com/kubernetes/kubernetes/pull/86481), [@tdihp](https://github.com/tdihp)) [SIG API Machinery and Auth]
+- AzureFile and CephFS use new Mount library that prevents logging of sensitive mount options. ([#88684](https://github.com/kubernetes/kubernetes/pull/88684), [@saad-ali](https://github.com/saad-ali)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
+- Beta.kubernetes.io/arch is already deprecated since v1.14, are targeted for removal in v1.18 ([#89462](https://github.com/kubernetes/kubernetes/pull/89462), [@wawa0210](https://github.com/wawa0210)) [SIG Testing]
+- Build: Enable kube-cross image-building on K8s Infra ([#88562](https://github.com/kubernetes/kubernetes/pull/88562), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
 - CPU limits are now respected for Windows containers. If a node is over-provisioned, no weighting is used - only limits are respected. ([#86101](https://github.com/kubernetes/kubernetes/pull/86101), [@PatrickLang](https://github.com/PatrickLang)) [SIG Node, Testing and Windows]
+- Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates ([#88744](https://github.com/kubernetes/kubernetes/pull/88744), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery and Auth]
 - Cloud provider config CloudProviderBackoffMode has been removed since it won't be used anymore. ([#88463](https://github.com/kubernetes/kubernetes/pull/88463), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Conformance image now depends on stretch-slim instead of debian-hyperkube-base as that image is being deprecated and removed. ([#88702](https://github.com/kubernetes/kubernetes/pull/88702), [@dims](https://github.com/dims)) [SIG Cluster Lifecycle, Release and Testing]
+- Deprecate --generator flag from kubectl create commands ([#88655](https://github.com/kubernetes/kubernetes/pull/88655), [@soltysh](https://github.com/soltysh)) [SIG CLI]
+- Deprecate kubectl top flags related to heapster
+  Drop support of heapster in kubectl top ([#87498](https://github.com/kubernetes/kubernetes/pull/87498), [@serathius](https://github.com/serathius)) [SIG CLI]
+- EndpointSlice should not contain endpoints for terminating pods ([#89056](https://github.com/kubernetes/kubernetes/pull/89056), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
 - Evictions due to pods breaching their ephemeral storage limits are now recorded by the `kubelet_evictions` metric and can be alerted on. ([#87906](https://github.com/kubernetes/kubernetes/pull/87906), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node]
+- FIX: prevent apiserver from panicking when failing to load audit webhook config file ([#88879](https://github.com/kubernetes/kubernetes/pull/88879), [@JoshVanL](https://github.com/JoshVanL)) [SIG API Machinery and Auth]
+- Fix /readyz to return error immediately after a shutdown is initiated, before the --shutdown-delay-duration has elapsed. ([#88911](https://github.com/kubernetes/kubernetes/pull/88911), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
+- Fix a bug that didn't allow to use IPv6 addresses with leading zeros ([#89341](https://github.com/kubernetes/kubernetes/pull/89341), [@aojea](https://github.com/aojea)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. ([#88786](https://github.com/kubernetes/kubernetes/pull/88786), [@freehan](https://github.com/freehan)) [SIG Network]
+- Fix a bug where kubenet fails to parse the tc output. ([#83572](https://github.com/kubernetes/kubernetes/pull/83572), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
+- Fix bug with xfs_repair from stopping xfs mount ([#89444](https://github.com/kubernetes/kubernetes/pull/89444), [@gnufied](https://github.com/gnufied)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
+- Fix describe ingress annotations not sorted. ([#88394](https://github.com/kubernetes/kubernetes/pull/88394), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix detection of SystemOOMs in which the victim is a container. ([#88871](https://github.com/kubernetes/kubernetes/pull/88871), [@dashpole](https://github.com/dashpole)) [SIG Node]
+- Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. ([#83446](https://github.com/kubernetes/kubernetes/pull/83446), [@Elias481](https://github.com/Elias481)) [SIG Cloud Provider]
+- Fix invalid VMSS updates due to incorrect cache ([#89002](https://github.com/kubernetes/kubernetes/pull/89002), [@ArchangelSDY](https://github.com/ArchangelSDY)) [SIG Cloud Provider]
+- Fix isCurrentInstance for Windows by removing the dependency of hostname. ([#89138](https://github.com/kubernetes/kubernetes/pull/89138), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
+- Fix kube-apiserver startup to wait for APIServices to be installed into the HTTP handler before reporting readiness. ([#89147](https://github.com/kubernetes/kubernetes/pull/89147), [@sttts](https://github.com/sttts)) [SIG API Machinery]
+- Fix kubectl create deployment image name ([#86636](https://github.com/kubernetes/kubernetes/pull/86636), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Fix missing "apiVersion" for "involvedObject" in Events for Nodes. ([#87537](https://github.com/kubernetes/kubernetes/pull/87537), [@uthark](https://github.com/uthark)) [SIG Apps and Node]
+- Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. ([#88141](https://github.com/kubernetes/kubernetes/pull/88141), [@tedyu](https://github.com/tedyu)) [SIG Node and Storage]
+- Fix the VMSS name and resource group name when updating Azure VMSS for LoadBalancer backendPools ([#89337](https://github.com/kubernetes/kubernetes/pull/89337), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
 - Fix: add remediation in azure disk attach/detach ([#88444](https://github.com/kubernetes/kubernetes/pull/88444), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: check disk status before disk azure disk ([#88360](https://github.com/kubernetes/kubernetes/pull/88360), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: azure file mount timeout issue ([#88610](https://github.com/kubernetes/kubernetes/pull/88610), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
+- Fix: check disk status before delete azure disk ([#88360](https://github.com/kubernetes/kubernetes/pull/88360), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
+- Fix: corrupted mount point in csi driver ([#88569](https://github.com/kubernetes/kubernetes/pull/88569), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
+- Fixed a bug in the TopologyManager. Previously, the TopologyManager would only guarantee alignment if container creation was serialized in some way. Alignment is now guaranteed under all scenarios of container creation. ([#87759](https://github.com/kubernetes/kubernetes/pull/87759), [@klueska](https://github.com/klueska)) [SIG Node]
+- Fixed a data race in kubelet image manager that can cause static pod workers to silently stop working. ([#88915](https://github.com/kubernetes/kubernetes/pull/88915), [@roycaihw](https://github.com/roycaihw)) [SIG Node]
+- Fixed an issue that could cause the kubelet to incorrectly run concurrent pod reconciliation loops and crash. ([#89055](https://github.com/kubernetes/kubernetes/pull/89055), [@tedyu](https://github.com/tedyu)) [SIG Node]
+- Fixed block CSI volume cleanup after timeouts. ([#88660](https://github.com/kubernetes/kubernetes/pull/88660), [@jsafrane](https://github.com/jsafrane)) [SIG Node and Storage]
+- Fixed bug where a nonzero exit code was returned when initializing zsh completion even though zsh completion was successfully initialized ([#88165](https://github.com/kubernetes/kubernetes/pull/88165), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
 - Fixed cleaning of CSI raw block volumes. ([#87978](https://github.com/kubernetes/kubernetes/pull/87978), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
+- Fixes conversion error in multi-version custom resources that could cause metadata.generation to increment on no-op patches or updates of a custom resource. ([#88995](https://github.com/kubernetes/kubernetes/pull/88995), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
+- Fixes issue where you can't attach more than 15 GCE Persistent Disks to c2, n2, m1, m2 machine types. ([#88602](https://github.com/kubernetes/kubernetes/pull/88602), [@yuga711](https://github.com/yuga711)) [SIG Storage]
+- Fixes v1.18.0-rc.1 regression in `kubectl port-forward` when specifying a local and remote port ([#89401](https://github.com/kubernetes/kubernetes/pull/89401), [@liggitt](https://github.com/liggitt)) [SIG CLI]
+- For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. ([#88678](https://github.com/kubernetes/kubernetes/pull/88678), [@verult](https://github.com/verult)) [SIG Apps, Node and Storage]
 - Get-kube.sh uses the gcloud's current local GCP service account for auth when the provider is GCE or GKE instead of the metadata server default ([#88383](https://github.com/kubernetes/kubernetes/pull/88383), [@BenTheElder](https://github.com/BenTheElder)) [SIG Cluster Lifecycle]
 - Golang/x/net has been updated to bring in fixes for CVE-2020-9283 ([#88381](https://github.com/kubernetes/kubernetes/pull/88381), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
+- Hide kubectl.kubernetes.io/last-applied-configuration in describe command ([#88758](https://github.com/kubernetes/kubernetes/pull/88758), [@soltysh](https://github.com/soltysh)) [SIG Auth and CLI]
+- In GKE alpha clusters it will be possible to use the service annotation `cloud.google.com/network-tier: Standard` ([#88487](https://github.com/kubernetes/kubernetes/pull/88487), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider]
+- Ipvs: only attempt setting of sysctlconnreuse on supported kernels ([#88541](https://github.com/kubernetes/kubernetes/pull/88541), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
+- Kube-proxy: on dual-stack mode, if it is not able to get the IP Family of an endpoint, logs it with level InfoV(4) instead of Warning, avoiding flooding the logs for endpoints without addresses ([#88934](https://github.com/kubernetes/kubernetes/pull/88934), [@aojea](https://github.com/aojea)) [SIG Network]
 - Kubeadm now includes CoreDNS version 1.6.7 ([#86260](https://github.com/kubernetes/kubernetes/pull/86260), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
 - Kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster ([#88434](https://github.com/kubernetes/kubernetes/pull/88434), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
+- Kubelet: fix the bug that kubelet help information can not show the right type of flags ([#88515](https://github.com/kubernetes/kubernetes/pull/88515), [@SataQiu](https://github.com/SataQiu)) [SIG Docs and Node]
+- Kubelets perform fewer unnecessary pod status update operations on the API server. ([#88591](https://github.com/kubernetes/kubernetes/pull/88591), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Scalability]
 - Optimize kubectl version help info ([#88313](https://github.com/kubernetes/kubernetes/pull/88313), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
+- Plugin/PluginConfig and Policy APIs are mutually exclusive when running the scheduler ([#88864](https://github.com/kubernetes/kubernetes/pull/88864), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
 - Removes the deprecated command `kubectl rolling-update` ([#88057](https://github.com/kubernetes/kubernetes/pull/88057), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG Architecture, CLI and Testing]
+- Resolved a regression in v1.18.0-rc.1 mounting windows volumes ([#89319](https://github.com/kubernetes/kubernetes/pull/89319), [@mboersma](https://github.com/mboersma)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
+- Scheduler PreScore plugins are not executed if there is one filtered node or less. ([#89370](https://github.com/kubernetes/kubernetes/pull/89370), [@ahg-g](https://github.com/ahg-g)) [SIG Scheduling]
+- Specifying PluginConfig for the same plugin more than once fails scheduler startup.
+  
+  Specifying extenders and configuring .ignoredResources for the NodeResourcesFit plugin fails ([#88870](https://github.com/kubernetes/kubernetes/pull/88870), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
+- Support TLS Server Name overrides in kubeconfig file and via --tls-server-name in kubectl ([#88769](https://github.com/kubernetes/kubernetes/pull/88769), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and CLI]
+- Terminating a restartPolicy=Never pod no longer has a chance to report the pod succeeded when it actually failed. ([#88440](https://github.com/kubernetes/kubernetes/pull/88440), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Testing]
+- The EventRecorder from k8s.io/client-go/tools/events will now create events in the default namespace (instead of kube-system) when the related object does not have it set. ([#88815](https://github.com/kubernetes/kubernetes/pull/88815), [@enj](https://github.com/enj)) [SIG API Machinery]
+- The audit event sourceIPs list will now always end with the IP that sent the request directly to the API server. ([#87167](https://github.com/kubernetes/kubernetes/pull/87167), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Auth]
+- Update Cluster Autoscaler to 1.18.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.18.0 ([#89095](https://github.com/kubernetes/kubernetes/pull/89095), [@losipiuk](https://github.com/losipiuk)) [SIG Autoscaling and Cluster Lifecycle]
+- Update to use golang 1.13.8 ([#87648](https://github.com/kubernetes/kubernetes/pull/87648), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Release and Testing]
+- Validate kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout ([#88657](https://github.com/kubernetes/kubernetes/pull/88657), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
+- Wait for all CRDs to show up in discovery endpoint before reporting readiness. ([#89145](https://github.com/kubernetes/kubernetes/pull/89145), [@sttts](https://github.com/sttts)) [SIG API Machinery]
+- `kubectl config view` now redacts bearer tokens by default, similar to client certificates. The `--raw` flag can still be used to output full content. ([#88985](https://github.com/kubernetes/kubernetes/pull/88985), [@brianpursley](https://github.com/brianpursley)) [SIG API Machinery and CLI]
 
-
-# v1.18.0-alpha.5
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.5
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes.tar.gz) | `6452cac2b80721e9f577cb117c29b9ac6858812b4275c2becbf74312566f7d016e8b34019bd1bf7615131b191613bf9b973e40ad9ac8f6de9007d41ef2d7fd70`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-src.tar.gz) | `e41d9d4dd6910a42990051fcdca4bf5d3999df46375abd27ffc56aae9b455ae984872302d590da6aa85bba6079334fb5fe511596b415ee79843dee1c61c137da`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-darwin-386.tar.gz) | `5c95935863492b31d4aaa6be93260088dafea27663eb91edca980ca3a8485310e60441bc9050d4d577e9c3f7ffd96db516db8d64321124cec1b712e957c9fe1c`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-darwin-amd64.tar.gz) | `868faa578b3738604d8be62fae599ccc556799f1ce54807f1fe72599f20f8a1f98ad8152fac14a08a463322530b696d375253ba3653325e74b587df6e0510da3`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-386.tar.gz) | `76a89d1d30b476b47f8fb808e342f89608e5c1c1787c4c06f2d7e763f9482e2ae8b31e6ad26541972e2b9a3a7c28327e3150cdd355e8b8d8b050a801bbf08d49`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-amd64.tar.gz) | `07ad96a09b44d1c707d7c68312c5d69b101a3424bf1e6e9400b2e7a3fba78df04302985d473ddd640d8f3f0257be34110dbe1304b9565dd9d7a4639b7b7b85fd`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-arm.tar.gz) | `c04fed9fa370a75c1b8e18b2be0821943bb9befcc784d14762ea3278e73600332a9b324d5eeaa1801d20ad6be07a553c41dcf4fa7ab3eadd0730ab043d687c8c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-arm64.tar.gz) | `4199147dea9954333df26d34248a1cb7b02ebbd6380ffcd42d9f9ed5fdabae45a59215474dab3c11436c82e60bd27cbd03b3dde288bf611cd3e78b87c783c6a9`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-ppc64le.tar.gz) | `4f6d4d61d1c52d3253ca19031ebcd4bad06d19b68bbaaab5c8e8c590774faea4a5ceab1f05f2706b61780927e1467815b3479342c84d45df965aba78414727c4`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-s390x.tar.gz) | `e2a454151ae5dd891230fb516a3f73f73ab97832db66fd3d12e7f1657a569f58a9fe2654d50ddd7d8ec88a5ff5094199323a4c6d7d44dcf7edb06cca11dd4de1`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-windows-386.tar.gz) | `14b262ba3b71c41f545db2a017cf1746075ada5745a858d2a62bc9df7c5dc10607220375db85e2c4cb85307b09709e58bc66a407488e0961191e3249dc7742b0`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-windows-amd64.tar.gz) | `26353c294755a917216664364b524982b7f5fc6aa832ce90134bb178df8a78604963c68873f121ea5f2626ff615bdbf2ffe54e00578739cde6df42ffae034732`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-amd64.tar.gz) | `ba77e0e7c610f59647c1b2601f82752964a0f54b7ad609a89b00fcfd553d0f0249f6662becbabaa755bb769b36a2000779f08022c40fb8cc61440337481317a1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-arm.tar.gz) | `45e87b3e844ea26958b0b489e8c9b90900a3253000850f5ff9e87ffdcafba72ab8fd17b5ba092051a58a4bc277912c047a85940ec7f093dff6f9e8bf6fed3b42`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-arm64.tar.gz) | `155e136e3124ead69c594eead3398d6cfdbb8f823c324880e8a7bbd1b570b05d13a77a69abd0a6758cfcc7923971cc6da4d3e0c1680fd519b632803ece00d5ce`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-ppc64le.tar.gz) | `3fa0fb8221da19ad9d03278961172b7fa29a618b30abfa55e7243bb937dede8df56658acf02e6b61e7274fbc9395e237f49c62f2a83017eca2a69f67af31c01c`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-s390x.tar.gz) | `db3199c3d7ba0b326d71dc8b80f50b195e79e662f71386a3b2976d47d13d7b0136887cc21df6f53e70a3d733da6eac7bbbf3bab2df8a1909a3cee4b44c32dd0b`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-amd64.tar.gz) | `addcdfbad7f12647e6babb8eadf853a374605c8f18bf63f416fa4d3bf1b903aa206679d840433206423a984bb925e7983366edcdf777cf5daef6ef88e53d6dfa`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-arm.tar.gz) | `b2ac54e0396e153523d116a2aaa32c919d6243931e0104cd47a23f546d710e7abdaa9eae92d978ce63c92041e63a9b56f5dd8fd06c812a7018a10ecac440f768`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-arm64.tar.gz) | `7aab36f2735cba805e4fd109831a1af0f586a88db3f07581b6dc2a2aab90076b22c96b490b4f6461a8fb690bf78948b6d514274f0d6fb0664081de2d44dc48e1`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-ppc64le.tar.gz) | `a579936f07ebf86f69f297ac50ba4c34caf2c0b903f73190eb581c78382b05ef36d41ade5bfd25d7b1b658cfcbee3d7125702a18e7480f9b09a62733a512a18a`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-s390x.tar.gz) | `58fa0359ddd48835192fab1136a2b9b45d1927b04411502c269cda07cb8a8106536973fb4c7fedf1d41893a524c9fe2e21078fdf27bfbeed778273d024f14449`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-windows-amd64.tar.gz) | `9086c03cd92b440686cea6d8c4e48045cc46a43ab92ae0e70350b3f51804b9e2aaae7178142306768bae00d9ef6dd938167972bfa90b12223540093f735a45db`
-
-## Changelog since v1.18.0-alpha.3
-
-### Deprecation
-
-- Kubeadm: command line option "kubelet-version" for `kubeadm upgrade node` has been deprecated and will be removed in a future release. ([#87942](https://github.com/kubernetes/kubernetes/pull/87942), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-
-### API Change
-
-- Kubelet podresources API now provides the information about active pods only. ([#79409](https://github.com/kubernetes/kubernetes/pull/79409), [@takmatsu](https://github.com/takmatsu)) [SIG Node]
-- Remove deprecated fields from .leaderElection in kubescheduler.config.k8s.io/v1alpha2 ([#87904](https://github.com/kubernetes/kubernetes/pull/87904), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Signatures on generated clientset methods have been modified to accept `context.Context` as a first argument. Signatures of generated Create, Update, and Patch methods have been updated to accept CreateOptions, UpdateOptions and PatchOptions respectively. Clientsets that with the previous interface have been added in new "deprecated" packages to allow incremental migration to the new APIs. The deprecated packages will be removed in the 1.21 release. ([#87299](https://github.com/kubernetes/kubernetes/pull/87299), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Scheduling, Storage, Testing and Windows]
-- The k8s.io/node-api component is no longer updated. Instead, use the RuntimeClass types located within k8s.io/api, and the generated clients located within k8s.io/client-go ([#87503](https://github.com/kubernetes/kubernetes/pull/87503), [@liggitt](https://github.com/liggitt)) [SIG Node and Release]
-
-### Feature
-
-- Add indexer for storage cacher ([#85445](https://github.com/kubernetes/kubernetes/pull/85445), [@shaloulcy](https://github.com/shaloulcy)) [SIG API Machinery]
-- Add support for mount options to the FC volume plugin ([#87499](https://github.com/kubernetes/kubernetes/pull/87499), [@ejweber](https://github.com/ejweber)) [SIG Storage]
-- Added a config-mode flag in azure auth module to enable getting AAD token without spn: prefix in audience claim. When it's not specified, the default behavior doesn't change. ([#87630](https://github.com/kubernetes/kubernetes/pull/87630), [@weinong](https://github.com/weinong)) [SIG API Machinery, Auth, CLI and Cloud Provider]
-- Introduced BackoffManager interface for backoff management ([#87829](https://github.com/kubernetes/kubernetes/pull/87829), [@zhan849](https://github.com/zhan849)) [SIG API Machinery]
-- PodTopologySpread plugin now excludes terminatingPods when making scheduling decisions. ([#87845](https://github.com/kubernetes/kubernetes/pull/87845), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Promote CSIMigrationOpenStack to Beta (off by default since it requires installation of the OpenStack Cinder CSI Driver)
-  The in-tree AWS OpenStack Cinder "kubernetes.io/cinder" was already deprecated a while ago and will be removed in 1.20. Users should enable CSIMigration + CSIMigrationOpenStack features and install the OpenStack Cinder CSI Driver (https://github.com/kubernetes-sigs/cloud-provider-openstack) to avoid disruption to existing Pod and PVC objects at that time.
-  Users should start using the OpenStack Cinder CSI Driver directly for any new volumes. ([#85637](https://github.com/kubernetes/kubernetes/pull/85637), [@dims](https://github.com/dims)) [SIG Cloud Provider]
-
-### Design
-
-- The scheduler Permit extension point doesn't return a boolean value in its Allow() and Reject() functions. ([#87936](https://github.com/kubernetes/kubernetes/pull/87936), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-
-### Other (Bug, Cleanup or Flake)
-
-- Adds "volume.beta.kubernetes.io/migrated-to" annotation to PV's and PVC's when they are migrated to signal external provisioners to pick up those objects for Provisioning and Deleting. ([#87098](https://github.com/kubernetes/kubernetes/pull/87098), [@davidz627](https://github.com/davidz627)) [SIG Apps and Storage]
-- Fix a bug in the dual-stack IPVS proxier where stale IPv6 endpoints were not being cleaned up ([#87695](https://github.com/kubernetes/kubernetes/pull/87695), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network]
-- Fix kubectl drain ignore daemonsets and others. ([#87361](https://github.com/kubernetes/kubernetes/pull/87361), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix: add azure disk migration support for CSINode ([#88014](https://github.com/kubernetes/kubernetes/pull/88014), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: add non-retriable errors in azure clients ([#87941](https://github.com/kubernetes/kubernetes/pull/87941), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixed NetworkPolicy validation that Except values are accepted when they are outside the CIDR range. ([#86578](https://github.com/kubernetes/kubernetes/pull/86578), [@tnqn](https://github.com/tnqn)) [SIG Network]
-- Improves performance of the node authorizer ([#87696](https://github.com/kubernetes/kubernetes/pull/87696), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- Iptables/userspace proxy: improve performance by getting local addresses only once per sync loop, instead of for every external IP ([#85617](https://github.com/kubernetes/kubernetes/pull/85617), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Network]
-- Kube-aggregator: always sets unavailableGauge metric to reflect the current state of a service. ([#87778](https://github.com/kubernetes/kubernetes/pull/87778), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
-- Kubeadm allows to configure single-stack clusters if dual-stack is enabled ([#87453](https://github.com/kubernetes/kubernetes/pull/87453), [@aojea](https://github.com/aojea)) [SIG API Machinery, Cluster Lifecycle and Network]
-- Kubeadm:  'kubeadm alpha kubelet config download' has been removed, please use 'kubeadm upgrade node phase kubelet-config' instead ([#87944](https://github.com/kubernetes/kubernetes/pull/87944), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: remove 'kubeadm upgrade node config' command since it was deprecated in v1.15, please use 'kubeadm upgrade node phase kubelet-config' instead ([#87975](https://github.com/kubernetes/kubernetes/pull/87975), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubectl describe <type> and kubectl top pod will return a message saying "No resources found" or "No resources found in <namespace> namespace" if there are no results to display. ([#87527](https://github.com/kubernetes/kubernetes/pull/87527), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Kubelet metrics gathered through metrics-server or prometheus should no longer timeout for Windows nodes running more than 3 pods. ([#87730](https://github.com/kubernetes/kubernetes/pull/87730), [@marosset](https://github.com/marosset)) [SIG Node, Testing and Windows]
-- Kubelet metrics have been changed to buckets.
-  For example the exec/{podNamespace}/{podID}/{containerName} is now just exec. ([#87913](https://github.com/kubernetes/kubernetes/pull/87913), [@cheftako](https://github.com/cheftako)) [SIG Node]
-- Limit number of instances in a single update to GCE target pool to 1000. ([#87881](https://github.com/kubernetes/kubernetes/pull/87881), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider, Network and Scalability]
-- Make Azure clients only retry on specified HTTP status codes ([#88017](https://github.com/kubernetes/kubernetes/pull/88017), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Pause image contains "Architecture" in non-amd64 images ([#87954](https://github.com/kubernetes/kubernetes/pull/87954), [@BenTheElder](https://github.com/BenTheElder)) [SIG Release]
-- Pods that are considered for preemption and haven't started don't produce an error log. ([#87900](https://github.com/kubernetes/kubernetes/pull/87900), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Prevent error message from being displayed when running kubectl plugin list and your path includes an empty string ([#87633](https://github.com/kubernetes/kubernetes/pull/87633), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object ([#85889](https://github.com/kubernetes/kubernetes/pull/85889), [@oke-py](https://github.com/oke-py)) [SIG CLI]
-
-# v1.18.0-alpha.4
-
-[Documentation](https://docs.k8s.io)
-
-## Important note about manual tag
-
-Due to a [tagging bug in our Release Engineering tooling](https://github.com/kubernetes/release/issues/1080) during `v1.18.0-alpha.3`, we needed to push a manual tag (`v1.18.0-alpha.4`).
-
-**No binaries have been produced or will be provided for `v1.18.0-alpha.4`.**
-
-The changelog for `v1.18.0-alpha.4` is included as part of the [changelog since v1.18.0-alpha.3][#changelog-since-v1180-alpha3] section.
-
-# v1.18.0-alpha.3
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.3
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes.tar.gz) | `60bf3bfc23b428f53fd853bac18a4a905b980fcc0bacd35ccd6357a89cfc26e47de60975ea6b712e65980e6b9df82a22331152d9f08ed4dba44558ba23a422d4`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-src.tar.gz) | `8adf1016565a7c93713ab6fa4293c2d13b4f6e4e1ec4dcba60bd71e218b4dbe9ef5eb7dbb469006743f498fc7ddeb21865cd12bec041af60b1c0edce8b7aecd5`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-darwin-386.tar.gz) | `abb32e894e8280c772e96227b574da81cd1eac374b8d29158b7f222ed550087c65482eef4a9817dfb5f2baf0d9b85fcdfa8feced0fbc1aacced7296853b57e1f`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | `5e4b1a993264e256ec1656305de7c306094cae9781af8f1382df4ce4eed48ce030827fde1a5e757d4ad57233d52075c9e4e93a69efbdc1102e4ba810705ccddc`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-386.tar.gz) | `68da39c2ae101d2b38f6137ceda07eb0c2124794982a62ef483245dbffb0611c1441ca085fa3127e7a9977f45646788832a783544ff06954114548ea0e526e46`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | `dc236ffa8ad426620e50181419e9bebe3c161e953dbfb8a019f61b11286e1eb950b40d7cc03423bdf3e6974973bcded51300f98b55570c29732fa492dcde761d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | `ab0a8bd6dc31ea160b731593cdc490b3cc03668b1141cf95310bd7060dcaf55c7ee9842e0acae81063fdacb043c3552ccdd12a94afd71d5310b3ce056fdaa06c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | `159ea083c601710d0d6aea423eeb346c99ffaf2abd137d35a53e87a07f5caf12fca8790925f3196f67b768fa92a024f83b50325dbca9ccd4dde6c59acdce3509`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | `16b0459adfa26575d13be49ab53ac7f0ffd05e184e4e13d2dfbfe725d46bb8ac891e1fd8aebe36ecd419781d4cc5cf3bd2aaaf5263cf283724618c4012408f40`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | `d5aa1f5d89168995d2797eb839a04ce32560f405b38c1c0baaa0e313e4771ae7bb3b28e22433ad5897d36aadf95f73eb69d8d411d31c4115b6b0adf5fe041f85`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-windows-386.tar.gz) | `374e16a1e52009be88c94786f80174d82dff66399bf294c9bee18a2159c42251c5debef1109a92570799148b08024960c6c50b8299a93fd66ebef94f198f34e9`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | `5a94c1068c19271f810b994adad8e62fae03b3d4473c7c9e6d056995ff7757ea61dd8d140c9267dd41e48808876673ce117826d35a3c1bb5652752f11a044d57`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | `a677bec81f0eba75114b92ff955bac74512b47e53959d56a685dae5edd527283d91485b1e86ad74ef389c5405863badf7eb22e2f0c9a568a4d0cb495c6a5c32f`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | `2fb696f86ff13ebeb5f3cf2b254bf41303644c5ea84a292782eac6123550702655284d957676d382698c091358e5c7fe73f32803699c19be7138d6530fe413b6`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | `738e95da9cfb8f1309479078098de1c38cef5e1dd5ee1129b77651a936a412b7cd0cf15e652afc7421219646a98846ab31694970432e48dea9c9cafa03aa59cf`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | `7a85bfcbb2aa636df60c41879e96e788742ecd72040cb0db2a93418439c125218c58a4cfa96d01b0296c295793e94c544e87c2d98d50b49bc4cb06b41f874376`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | `1f1cdb2efa3e7cac857203d8845df2fdaa5cf1f20df764efffff29371945ec58f6deeba06f8fbf70b96faf81b0c955bf4cb84e30f9516cb2cc1ed27c2d2185a6`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | `4ccfced3f5ba4adfa58f4a9d1b2c5bdb3e89f9203ab0e27d11eb1c325ac323ebe63c015d2c9d070b233f5d1da76cab5349da3528511c1cd243e66edc9af381c4`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | `d695a69d18449062e4c129e54ec8384c573955f8108f4b78adc2ec929719f2196b995469c728dd6656c63c44cda24315543939f85131ebc773cfe0de689df55b`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | `21df1da88c89000abc22f97e482c3aaa5ce53ec9628d83dda2e04a1d86c4d53be46c03ed6f1f211df3ee5071bce39d944ff7716b5b6ada3b9c4821d368b0a898`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | `ff77e3aacb6ed9d89baed92ef542c8b5cec83151b6421948583cf608bca3b779dce41fc6852961e00225d5e1502f6a634bfa61a36efa90e1aee90dedb787c2d2`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | `57d75b7977ec1a0f6e7ed96a304dbb3b8664910f42ca19aab319a9ec33535ff5901dfca4abcb33bf5741cde6d152acd89a5f8178f0efe1dc24430e0c1af5b98f`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | `63fdbb71773cfd73a914c498e69bb9eea3fc314366c99ffb8bd42ec5b4dae807682c83c1eb5cfb1e2feb4d11d9e49cc85ba644e954241320a835798be7653d61`
-
-## Changelog since v1.18.0-alpha.2
-
-### Deprecation
-
-- Remove all the generators from kubectl run. It will now only create pods. Additionally, deprecates all the flags that are not relevant anymore. ([#87077](https://github.com/kubernetes/kubernetes/pull/87077), [@soltysh](https://github.com/soltysh)) [SIG Architecture, SIG CLI, and SIG Testing]
-- kubeadm: kube-dns is deprecated and will not be supported in a future version ([#86574](https://github.com/kubernetes/kubernetes/pull/86574), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-
-### API Change
-
-- Add kubescheduler.config.k8s.io/v1alpha2 ([#87628](https://github.com/kubernetes/kubernetes/pull/87628), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- --enable-cadvisor-endpoints is now disabled by default. If you need access to the cAdvisor v1 Json API please enable it explicitly in the kubelet command line. Please note that this flag was deprecated in 1.15 and will be removed in 1.19. ([#87440](https://github.com/kubernetes/kubernetes/pull/87440), [@dims](https://github.com/dims)) [SIG Instrumentation, SIG Node, and SIG Testing]
-- The following feature gates are removed, because the associated features were unconditionally enabled in previous releases: CustomResourceValidation, CustomResourceSubresources, CustomResourceWebhookConversion, CustomResourcePublishOpenAPI, CustomResourceDefaulting ([#87475](https://github.com/kubernetes/kubernetes/pull/87475), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-
-### Feature
-
-- aggragation api will have alpha support for network proxy ([#87515](https://github.com/kubernetes/kubernetes/pull/87515), [@Sh4d1](https://github.com/Sh4d1)) [SIG API Machinery]
-- API request throttling (due to a high rate of requests) is now reported in client-go logs at log level 2.  The messages are of the form
-
-  Throttling request took 1.50705208s, request: GET:<URL>
-
-  The presence of these messages, may indicate to the administrator the need to tune the cluster accordingly. ([#87740](https://github.com/kubernetes/kubernetes/pull/87740), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery]
-- kubeadm: reject a node joining the cluster if a node with the same name already exists ([#81056](https://github.com/kubernetes/kubernetes/pull/81056), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- disableAvailabilitySetNodes is added to avoid VM list for VMSS clusters. It should only be used when vmType is "vmss" and all the nodes (including masters) are VMSS virtual machines. ([#87685](https://github.com/kubernetes/kubernetes/pull/87685), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- The kubectl --dry-run flag now accepts the values 'client', 'server', and 'none', to support client-side and server-side dry-run strategies. The boolean and unset values for the --dry-run flag are deprecated and a value will be required in a future version. ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-- Add support for pre-allocated hugepages for more than one page size ([#82820](https://github.com/kubernetes/kubernetes/pull/82820), [@odinuge](https://github.com/odinuge)) [SIG Apps]
-- Update CNI version to v0.8.5 ([#78819](https://github.com/kubernetes/kubernetes/pull/78819), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, SIG Cluster Lifecycle, SIG Network, SIG Release, and SIG Testing]
-- Skip default spreading scoring plugin for pods that define TopologySpreadConstraints ([#87566](https://github.com/kubernetes/kubernetes/pull/87566), [@skilxn-go](https://github.com/skilxn-go)) [SIG Scheduling]
-- Added more details to taint toleration errors ([#87250](https://github.com/kubernetes/kubernetes/pull/87250), [@starizard](https://github.com/starizard)) [SIG Apps, and SIG Scheduling]
-- Scheduler: Add DefaultBinder plugin ([#87430](https://github.com/kubernetes/kubernetes/pull/87430), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling, and SIG Testing]
-- Kube-apiserver metrics will now include request counts, latencies, and response sizes for /healthz, /livez, and /readyz requests. ([#83598](https://github.com/kubernetes/kubernetes/pull/83598), [@jktomer](https://github.com/jktomer)) [SIG API Machinery]
-
-### Other (Bug, Cleanup or Flake)
-
-- Fix the masters rolling upgrade causing thundering herd of LISTs on etcd leading to control plane unavailability. ([#86430](https://github.com/kubernetes/kubernetes/pull/86430), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, SIG Node, and SIG Testing]
-- `kubectl diff` now returns 1 only on diff finding changes, and >1 on kubectl errors. The "exit status code 1" message as also been muted. ([#87437](https://github.com/kubernetes/kubernetes/pull/87437), [@apelisse](https://github.com/apelisse)) [SIG CLI, and SIG Testing]
-- To reduce chances of throttling, VM cache is set to nil when Azure node provisioning state is deleting ([#87635](https://github.com/kubernetes/kubernetes/pull/87635), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix regression in statefulset conversion which prevented applying a statefulset multiple times. ([#87706](https://github.com/kubernetes/kubernetes/pull/87706), [@liggitt](https://github.com/liggitt)) [SIG Apps, and SIG Testing]
-- fixed two scheduler metrics (pending_pods and schedule_attempts_total) not being recorded ([#87692](https://github.com/kubernetes/kubernetes/pull/87692), [@everpeace](https://github.com/everpeace)) [SIG Scheduling]
-- Resolved a performance issue in the node authorizer index maintenance. ([#87693](https://github.com/kubernetes/kubernetes/pull/87693), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- Removed the 'client' label from apiserver_request_total. ([#87669](https://github.com/kubernetes/kubernetes/pull/87669), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, and SIG Instrumentation]
-- `(*"k8s.io/client-go/rest".Request).{Do,DoRaw,Stream,Watch}` now require callers to pass a `context.Context` as an argument. The context is used for timeout and cancellation signaling and to pass supplementary information to round trippers in the wrapped transport chain. If you don't need any of this functionality, it is sufficient to pass a context created with `context.Background()` to these functions. The `(*"k8s.io/client-go/rest".Request).Context` method is removed now that all methods that execute a request accept a context directly. ([#87597](https://github.com/kubernetes/kubernetes/pull/87597), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery, SIG Apps, SIG Auth, SIG Autoscaling, SIG CLI, SIG Cloud Provider, SIG Cluster Lifecycle, SIG Instrumentation, SIG Network, SIG Node, SIG Scheduling, SIG Storage, and SIG Testing]
-- For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. ([#87258](https://github.com/kubernetes/kubernetes/pull/87258), [@verult](https://github.com/verult)) [SIG Apps, SIG Node, and SIG Storage]
-- kubeadm: apply further improvements to the tentative support for concurrent etcd member join. Fixes a bug where multiple members can receive the same hostname. Increase the etcd client dial timeout and retry timeout for add/remove/... operations. ([#87505](https://github.com/kubernetes/kubernetes/pull/87505), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Reverted a kubectl azure auth module change where oidc claim spn: prefix was omitted resulting a breaking behavior with existing Azure AD OIDC enabled api-server ([#87507](https://github.com/kubernetes/kubernetes/pull/87507), [@weinong](https://github.com/weinong)) [SIG API Machinery, SIG Auth, and SIG Cloud Provider]
-- Update cri-tools to v1.17.0 ([#86305](https://github.com/kubernetes/kubernetes/pull/86305), [@saschagrunert](https://github.com/saschagrunert)) [SIG Cluster Lifecycle, and SIG Release]
-- kubeadm: remove the deprecated CoreDNS feature-gate. It was set to "true" since v1.11 when the feature went GA. In v1.13 it was marked as deprecated and hidden from the CLI. ([#87400](https://github.com/kubernetes/kubernetes/pull/87400), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Shared informers are now more reliable in the face of network disruption. ([#86015](https://github.com/kubernetes/kubernetes/pull/86015), [@squeed](https://github.com/squeed)) [SIG API Machinery]
-- the CSR signing cert/key pairs will be reloaded from disk like the kube-apiserver cert/key pairs ([#86816](https://github.com/kubernetes/kubernetes/pull/86816), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, SIG Apps, and SIG Auth]
-- "kubectl describe statefulsets.apps" prints garbage for rolling update partition ([#85846](https://github.com/kubernetes/kubernetes/pull/85846), [@phil9909](https://github.com/phil9909)) [SIG CLI]
-
-
-<!-- NEW RELEASE NOTES ENTRY -->
-
-
-# v1.18.0-alpha.2
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.2
-
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes.tar.gz) | `7af83386b4b35353f0aa1bdaf73599eb08b1d1ca11ecc2c606854aff754db69f3cd3dc761b6d7fc86f01052f615ca53185f33dbf9e53b2f926b0f02fc103fbd3`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-src.tar.gz) | `a14b02a0a0bde97795a836a8f5897b0ee6b43e010e13e43dd4cca80a5b962a1ef3704eedc7916fed1c38ec663a71db48c228c91e5daacba7d9370df98c7ddfb6`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `427f214d47ded44519007de2ae87160c56c2920358130e474b768299751a9affcbc1b1f0f936c39c6138837bca2a97792a6700896976e98c4beee8a1944cfde1`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `861fd81ac3bd45765575bedf5e002a2294aba48ef9e15980fc7d6783985f7d7fcde990ea0aef34690977a88df758722ec0a2e170d5dcc3eb01372e64e5439192`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `7d59b05d6247e2606a8321c72cd239713373d876dbb43b0fb7f1cb857fa6c998038b41eeed78d9eb67ce77b0b71776ceed428cce0f8d2203c5181b473e0bd86c`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `7cdefb4e32bad9d2df5bb8e7e0a6f4dab2ae6b7afef5d801ac5c342d4effdeacd799081fa2dec699ecf549200786c7623c3176252010f12494a95240dd63311d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `6212bbf0fa1d01ced77dcca2c4b76b73956cd3c6b70e0701c1fe0df5ff37160835f6b84fa2481e0e6979516551b14d8232d1c72764a559a3652bfe2a1e7488ff`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `1f0d9990700510165ee471acb2f88222f1b80e8f6deb351ce14cf50a70a9840fb99606781e416a13231c74b2bd7576981b5348171aa33b628d2666e366cd4629`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | `77e00ba12a32db81e96f8de84609de93f32c61bb3f53875a57496d213aa6d1b92c09ad5a6de240a78e1a5bf77fac587ff92874f34a10f8909ae08ca32fda45d2`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | `a39ec2044bed5a4570e9c83068e0fc0ce923ccffa44380f8bbc3247426beaff79c8a84613bcb58b05f0eb3afbc34c79fe3309aa2e0b81abcfd0aa04770e62e05`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `1a0ab88f9b7e34b60ab31d5538e97202a256ad8b7b7ed5070cae5f2f12d5d4edeae615db7a34ebbe254004b6393c6b2480100b09e30e59c9139492a3019a596a`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `1966eb5dfb78c1bc33aaa6389f32512e3aa92584250a0164182f3566c81d901b59ec78ee4e25df658bc1dd221b5a9527d6ce3b6c487ca3e3c0b319a077caa735`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `f814d6a3872e4572aa4da297c29def4c1fad8eba0903946780b6bf9788c72b99d71085c5aef9e12c01133b26fa4563c1766ba724ad2a8af2670a24397951a94d`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `56aa08225e546c92c2ff88ac57d3db7dd5e63640772ea72a429f080f7069827138cbc206f6f5fe3a0c01bfca043a9eda305ecdc1dcb864649114893e46b6dc84`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `fb87128d905211ba097aa860244a376575ae2edbaca6e51402a24bc2964854b9b273e09df3d31a2bcffc91509f7eecb2118b183fb0e0eb544f33403fa235c274`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | `6d21fbf39b9d3a0df9642407d6f698fabdc809aca83af197bceb58a81b25846072f407f8fb7caae2e02dc90912e3e0f5894f062f91bcb69f8c2329625d3dfeb7`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | `ddcda4dc360ca97705f71bf2a18ddacd7b7ddf77535b62e699e97a1b2dd24843751313351d0112e238afe69558e8271eba4d27ab77bb67b4b9e3fbde6eec85c9`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | `78915a9bde35c70c67014f0cea8754849db4f6a84491a3ad9678fd3bc0203e43af5a63cfafe104ae1d56b05ce74893a87a6dcd008d7859e1af6b3bce65425b5d`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | `3218e811abcb0cb09d80742def339be3916db5e9bbc62c0dc8e6d87085f7e3d9eeed79dea081906f1de78ddd07b7e3acdbd7765fdb838d262bb35602fd1df106`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | `fa22de9c4440b8fb27f4e77a5a63c5e1c8aa8aa30bb79eda843b0f40498c21b8c0ad79fff1d841bb9fef53fe20da272506de9a86f81a0b36d028dbeab2e482ce`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | `bbda9b5cc66e8f13d235703b2a85e2c4f02fa16af047be4d27a3e198e11eb11706e4a0fbb6c20978c770b069cd4cd9894b661f09937df9d507411548c36576e0`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | `b2ed1eda013069adce2aac00b86d75b84e006cfce9bafac0b5a2bafcb60f8f2cb346b5ea44eafa72d777871abef1ea890eb3a2a05de28968f9316fa88886a8ed`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | `bd8eb23dba711f31b5148257076b1bbe9629f2a75de213b2c779bd5b29279e9bf22f8bde32f4bc814f4c0cc49e19671eb8b24f4105f0fe2c1490c4b78ec3c704`
-
-## Changelog since v1.18.0-alpha.1
-
-### Other notable changes
-
-* Bump golang/mock version to v1.3.1 ([#87326](https://github.com/kubernetes/kubernetes/pull/87326), [@wawa0210](https://github.com/wawa0210))
-* fix a bug that orphan revision cannot be adopted and statefulset cannot be synced ([#86801](https://github.com/kubernetes/kubernetes/pull/86801), [@likakuli](https://github.com/likakuli))
-* Azure storage clients now suppress requests on throttling ([#87306](https://github.com/kubernetes/kubernetes/pull/87306), [@feiskyer](https://github.com/feiskyer))
-* Introduce Alpha field `Immutable` in both Secret and ConfigMap objects to mark their contents as immutable. The implementation is hidden behind feature gate `ImmutableEphemeralVolumes` (currently in Alpha stage). ([#86377](https://github.com/kubernetes/kubernetes/pull/86377), [@wojtek-t](https://github.com/wojtek-t))
-* EndpointSlices will now be enabled by default. A new `EndpointSliceProxying` feature gate determines if kube-proxy will use EndpointSlices, this is disabled by default. ([#86137](https://github.com/kubernetes/kubernetes/pull/86137), [@robscott](https://github.com/robscott))
-* kubeadm upgrades always persist the etcd backup for stacked ([#86861](https://github.com/kubernetes/kubernetes/pull/86861), [@SataQiu](https://github.com/SataQiu))
-* Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. ([#87246](https://github.com/kubernetes/kubernetes/pull/87246), [@nilo19](https://github.com/nilo19))
-* New flag `--show-hidden-metrics-for-version` in kube-controller-manager can be used to show all hidden metrics that deprecated in the previous minor release. ([#85281](https://github.com/kubernetes/kubernetes/pull/85281), [@RainbowMango](https://github.com/RainbowMango))
-* Azure network and VM clients now suppress requests on throttling ([#87122](https://github.com/kubernetes/kubernetes/pull/87122), [@feiskyer](https://github.com/feiskyer))
-* `kubectl apply  -f <file> --prune -n <namespace>` should prune all resources not defined in the file in the cli specified namespace. ([#85613](https://github.com/kubernetes/kubernetes/pull/85613), [@MartinKaburu](https://github.com/MartinKaburu))
-* Fixes service account token admission error in clusters that do not run the service account token controller ([#87029](https://github.com/kubernetes/kubernetes/pull/87029), [@liggitt](https://github.com/liggitt))
-* CustomResourceDefinition status fields are no longer required for client validation when submitting manifests.  ([#87213](https://github.com/kubernetes/kubernetes/pull/87213), [@hasheddan](https://github.com/hasheddan))
-* All apiservers log request lines in a more greppable format. ([#87203](https://github.com/kubernetes/kubernetes/pull/87203), [@lavalamp](https://github.com/lavalamp))
-* provider/azure: Network security groups can now be in a separate resource group. ([#87035](https://github.com/kubernetes/kubernetes/pull/87035), [@CecileRobertMichon](https://github.com/CecileRobertMichon))
-* Cleaned up the output from `kubectl describe CSINode <name>`. ([#85283](https://github.com/kubernetes/kubernetes/pull/85283), [@huffmanca](https://github.com/huffmanca))
-* Fixed the following  ([#84265](https://github.com/kubernetes/kubernetes/pull/84265), [@bhagwat070919](https://github.com/bhagwat070919))
-    * -  AWS Cloud Provider attempts to delete LoadBalancer security group it didn’t provision
-    * -  AWS Cloud Provider creates default LoadBalancer security group even if annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present
-* kubelet: resource metrics endpoint `/metrics/resource/v1alpha1` as well as all metrics under this endpoint have been deprecated. ([#86282](https://github.com/kubernetes/kubernetes/pull/86282), [@RainbowMango](https://github.com/RainbowMango))
-    * Please convert to the following metrics emitted by endpoint `/metrics/resource`:
-    * - scrape_error --> scrape_error
-    * - node_cpu_usage_seconds_total --> node_cpu_usage_seconds
-    * - node_memory_working_set_bytes --> node_memory_working_set_bytes
-    * - container_cpu_usage_seconds_total --> container_cpu_usage_seconds
-    * - container_memory_working_set_bytes --> container_memory_working_set_bytes
-    * - scrape_error --> scrape_error
-* You can now pass "--node-ip ::" to kubelet to indicate that it should autodetect an IPv6 address to use as the node's primary address. ([#85850](https://github.com/kubernetes/kubernetes/pull/85850), [@danwinship](https://github.com/danwinship))
-* kubeadm: support automatic retry after failing to pull image ([#86899](https://github.com/kubernetes/kubernetes/pull/86899), [@SataQiu](https://github.com/SataQiu))
-* TODO ([#87044](https://github.com/kubernetes/kubernetes/pull/87044), [@jennybuckley](https://github.com/jennybuckley))
-* Improved yaml parsing performance ([#85458](https://github.com/kubernetes/kubernetes/pull/85458), [@cjcullen](https://github.com/cjcullen))
-* Fixed a bug which could prevent a provider ID from ever being set for node if an error occurred determining the provider ID when the node was added. ([#87043](https://github.com/kubernetes/kubernetes/pull/87043), [@zjs](https://github.com/zjs))
-* fix a regression in kubenet that prevent pods to obtain ip addresses ([#85993](https://github.com/kubernetes/kubernetes/pull/85993), [@chendotjs](https://github.com/chendotjs))
-* Bind kube-dns containers to linux nodes to avoid Windows scheduling ([#83358](https://github.com/kubernetes/kubernetes/pull/83358), [@wawa0210](https://github.com/wawa0210))
-* The following features are unconditionally enabled and the corresponding `--feature-gates` flags have been removed: `PodPriority`, `TaintNodesByCondition`, `ResourceQuotaScopeSelectors` and `ScheduleDaemonSetPods` ([#86210](https://github.com/kubernetes/kubernetes/pull/86210), [@draveness](https://github.com/draveness))
-* Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83364](https://github.com/kubernetes/kubernetes/pull/83364), [@wawa0210](https://github.com/wawa0210))
-* fix kubectl annotate error when local=true is set ([#86952](https://github.com/kubernetes/kubernetes/pull/86952), [@zhouya0](https://github.com/zhouya0))
-* Bug fixes: ([#84163](https://github.com/kubernetes/kubernetes/pull/84163), [@david-tigera](https://github.com/david-tigera))
-    * Make sure we include latest packages node #351 ([@caseydavenport](https://github.com/caseydavenport))
-* fix kuebctl apply set-last-applied namespaces error   ([#86474](https://github.com/kubernetes/kubernetes/pull/86474), [@zhouya0](https://github.com/zhouya0))
-* Add VolumeBinder method to FrameworkHandle interface, which allows user to get the volume binder when implementing scheduler framework plugins. ([#86940](https://github.com/kubernetes/kubernetes/pull/86940), [@skilxn-go](https://github.com/skilxn-go))
-* elasticsearch supports automatically setting the advertise address ([#85944](https://github.com/kubernetes/kubernetes/pull/85944), [@SataQiu](https://github.com/SataQiu))
-* If a serving certificates param specifies a name that is an IP for an SNI certificate, it will have priority for replying to server connections. ([#85308](https://github.com/kubernetes/kubernetes/pull/85308), [@deads2k](https://github.com/deads2k))
-* kube-proxy: Added dual-stack IPv4/IPv6 support to the iptables proxier. ([#82462](https://github.com/kubernetes/kubernetes/pull/82462), [@vllry](https://github.com/vllry))
-* Azure VMSS/VMSSVM clients now suppress requests on throttling ([#86740](https://github.com/kubernetes/kubernetes/pull/86740), [@feiskyer](https://github.com/feiskyer))
-* New metric kubelet_pleg_last_seen_seconds to aid diagnosis of PLEG not healthy issues. ([#86251](https://github.com/kubernetes/kubernetes/pull/86251), [@bboreham](https://github.com/bboreham))
-* For subprotocol negotiation, both client and server protocol is required now. ([#86646](https://github.com/kubernetes/kubernetes/pull/86646), [@tedyu](https://github.com/tedyu))
-* kubeadm: use bind-address option to configure the kube-controller-manager and kube-scheduler http probes ([#86493](https://github.com/kubernetes/kubernetes/pull/86493), [@aojea](https://github.com/aojea))
-* Marked scheduler's metrics scheduling_algorithm_predicate_evaluation_seconds and ([#86584](https://github.com/kubernetes/kubernetes/pull/86584), [@xiaoanyunfei](https://github.com/xiaoanyunfei))
-    * scheduling_algorithm_priority_evaluation_seconds as deprecated. Those are replaced by framework_extension_point_duration_seconds[extenstion_point="Filter"] and framework_extension_point_duration_seconds[extenstion_point="Score"] respectively.
-* Marked scheduler's scheduling_duration_seconds Summary metric as deprecated ([#86586](https://github.com/kubernetes/kubernetes/pull/86586), [@xiaoanyunfei](https://github.com/xiaoanyunfei))
-* Add instructions about how to bring up e2e test cluster ([#85836](https://github.com/kubernetes/kubernetes/pull/85836), [@YangLu1031](https://github.com/YangLu1031))
-* If a required flag is not provided to a command, the user will only see the required flag error message, instead of the entire usage menu. ([#86693](https://github.com/kubernetes/kubernetes/pull/86693), [@sallyom](https://github.com/sallyom))
-* kubeadm: tolerate whitespace when validating certificate authority PEM data in kubeconfig files ([#86705](https://github.com/kubernetes/kubernetes/pull/86705), [@neolit123](https://github.com/neolit123))
-* kubeadm: add support for the "ci/k8s-master" version label as a replacement for "ci-cross/*", which no longer exists. ([#86609](https://github.com/kubernetes/kubernetes/pull/86609), [@Pensu](https://github.com/Pensu))
-* Fix EndpointSlice controller race condition and ensure that it handles external changes to EndpointSlices. ([#85703](https://github.com/kubernetes/kubernetes/pull/85703), [@robscott](https://github.com/robscott))
-* Fix nil pointer dereference in azure cloud provider ([#85975](https://github.com/kubernetes/kubernetes/pull/85975), [@ldx](https://github.com/ldx))
-* fix: azure disk could not mounted on Standard_DC4s/DC2s instances ([#86612](https://github.com/kubernetes/kubernetes/pull/86612), [@andyzhangx](https://github.com/andyzhangx))
-* Fixes v1.17.0 regression in --service-cluster-ip-range handling with IPv4 ranges larger than 65536 IP addresses ([#86534](https://github.com/kubernetes/kubernetes/pull/86534), [@liggitt](https://github.com/liggitt))
-* Adds back support for AlwaysCheckAllPredicates flag. ([#86496](https://github.com/kubernetes/kubernetes/pull/86496), [@ahg-g](https://github.com/ahg-g))
-* Azure global rate limit is switched to per-client. A set of new rate limit configure options are introduced, including routeRateLimit, SubnetsRateLimit, InterfaceRateLimit, RouteTableRateLimit, LoadBalancerRateLimit, PublicIPAddressRateLimit, SecurityGroupRateLimit, VirtualMachineRateLimit, StorageAccountRateLimit, DiskRateLimit, SnapshotRateLimit, VirtualMachineScaleSetRateLimit and VirtualMachineSizeRateLimit. ([#86515](https://github.com/kubernetes/kubernetes/pull/86515), [@feiskyer](https://github.com/feiskyer))
-    * The original rate limit options would be default values for those new client's rate limiter.
-* Fix issue [#85805](https://github.com/kubernetes/kubernetes/pull/85805) about resource not found in azure cloud provider when lb specified in other resource group. ([#86502](https://github.com/kubernetes/kubernetes/pull/86502), [@levimm](https://github.com/levimm))
-* `AlwaysCheckAllPredicates` is deprecated in scheduler Policy API. ([#86369](https://github.com/kubernetes/kubernetes/pull/86369), [@Huang-Wei](https://github.com/Huang-Wei))
-* Kubernetes KMS provider for data encryption now supports disabling the in-memory data encryption key (DEK) cache by setting cachesize to a negative value. ([#86294](https://github.com/kubernetes/kubernetes/pull/86294), [@enj](https://github.com/enj))
-* option `preConfiguredBackendPoolLoadBalancerTypes` is added to azure cloud provider for the pre-configured load balancers, possible values: `""`, `"internal"`, "external"`, `"all"` ([#86338](https://github.com/kubernetes/kubernetes/pull/86338), [@gossion](https://github.com/gossion))
-* Promote StartupProbe to beta for 1.18 release ([#83437](https://github.com/kubernetes/kubernetes/pull/83437), [@matthyx](https://github.com/matthyx))
-* Fixes issue where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. ([#86412](https://github.com/kubernetes/kubernetes/pull/86412), [@weinong](https://github.com/weinong))
-    * The audience claim before this fix has "spn:" prefix. After this fix, "spn:" prefix is omitted.
-* change CounterVec to Counter about  PLEGDiscardEvent ([#86167](https://github.com/kubernetes/kubernetes/pull/86167), [@yiyang5055](https://github.com/yiyang5055))
-* hollow-node do not use remote CRI anymore ([#86425](https://github.com/kubernetes/kubernetes/pull/86425), [@jkaniuk](https://github.com/jkaniuk))
-* hollow-node use fake CRI ([#85879](https://github.com/kubernetes/kubernetes/pull/85879), [@gongguan](https://github.com/gongguan))
-
-
-
-# v1.18.0-alpha.1
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.1
-
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes.tar.gz) | `0c4904efc7f4f1436119c91dc1b6c93b3bd9c7490362a394bff10099c18e1e7600c4f6e2fcbaeb2d342a36c4b20692715cf7aa8ada6dfac369f44cc9292529d7`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-src.tar.gz) | `0a50fc6816c730ca5ae4c4f26d5ad7b049607d29f6a782a4e5b4b05ac50e016486e269dafcc6a163bd15e1a192780a9a987f1bb959696993641c603ed1e841c8`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-darwin-386.tar.gz) | `c6d75f7f3f20bef17fc7564a619b54e6f4a673d041b7c9ec93663763a1cc8dd16aecd7a2af70e8d54825a0eecb9762cf2edfdade840604c9a32ecd9cc2d5ac3c`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | `ca1f19db289933beace6daee6fc30af19b0e260634ef6e89f773464a05e24551c791be58b67da7a7e2a863e28b7cbcc7b24b6b9bf467113c26da76ac8f54fdb6`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-386.tar.gz) | `af2e673653eb39c3f24a54efc68e1055f9258bdf6cf8fea42faf42c05abefc2da853f42faac3b166c37e2a7533020b8993b98c0d6d80a5b66f39e91d8ae0a3fb`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | `9009032c3f94ac8a78c1322a28e16644ce3b20989eb762685a1819148aed6e883ca8e1200e5ec37ec0853f115c67e09b5d697d6cf5d4c45f653788a2d3a2f84f`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | `afba9595b37a3f2eead6e3418573f7ce093b55467dce4da0b8de860028576b96b837a2fd942f9c276e965da694e31fbd523eeb39aefb902d7e7a2f169344d271`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | `04fc3b2fe3f271807f0bc6c61be52456f26a1af904964400be819b7914519edc72cbab9afab2bb2e2ba1a108963079367cedfb253c9364c0175d1fcc64d52f5c`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | `04c7edab874b33175ff7bebfff5b3a032bc6eb088fcd7387ffcd5b3fa71395ca8c5f9427b7ddb496e92087dfdb09eaf14a46e9513071d3bd73df76c182922d38`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | `499287dbbc33399a37b9f3b35e0124ff20b17b6619f25a207ee9c606ef261af61fa0c328dde18c7ce2d3dfb2eea2376623bc3425d16bc8515932a68b44f8bede`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-windows-386.tar.gz) | `cf84aeddf00f126fb13c0436b116dd0464a625659e44c84bf863517db0406afb4eefd86807e7543c4f96006d275772fbf66214ae7d582db5865c84ac3545b3e6`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | `69f20558ccd5cd6dbaccf29307210db4e687af21f6d71f68c69d3a39766862686ac1333ab8a5012010ca5c5e3c11676b45e498e3d4c38773da7d24bcefc46d95`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | `3f29df2ce904a0f10db4c1d7a425a36f420867b595da3fa158ae430bfead90def2f2139f51425b349faa8a9303dcf20ea01657cb6ea28eb6ad64f5bb32ce2ed1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | `4a21073b2273d721fbf062c254840be5c8471a010bcc0c731b101729e36e61f637cb7fcb521a22e8d24808510242f4fff8a6ca40f10e9acd849c2a47bf135f27`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | `7f1cb6d721bedc90e28b16f99bea7e59f5ad6267c31ef39c14d34db6ad6aad87ee51d2acdd01b6903307c1c00b58ff6b785a03d5a491cc3f8a4df9a1d76d406c`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | `8f2b552030b5274b1c2c7c166eacd5a14b0c6ca0f23042f4c52efe87e22a167ba4460dcd66615a5ecd26d9e88336be1fb555548392e70efe59070dd2c314da98`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | `8d9f2c96f66edafb7c8b3aa90960d29b41471743842aede6b47b3b2e61f4306fb6fc60b9ebc18820c547ee200bfedfe254c1cde962d447c791097dd30e79abdb`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | `84194cb081d1502f8ca68143569f9707d96f1a28fcf0c574ebd203321463a8b605f67bb2a365eaffb14fbeb8d55c8d3fa17431780b242fb9cba3a14426a0cd4a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | `0091e108ab94fd8683b89c597c4fdc2fbf4920b007cfcd5297072c44bc3a230dfe5ceed16473e15c3e6cf5edab866d7004b53edab95be0400cc60e009eee0d9d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | `b7e85682cc2848a35d52fd6f01c247f039ee1b5dd03345713821ea10a7fa9939b944f91087baae95eaa0665d11857c1b81c454f720add077287b091f9f19e5d3`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | `cd1f0849e9c62b5d2c93ff0cebf58843e178d8a88317f45f76de0db5ae020b8027e9503a5fccc96445184e0d77ecdf6f57787176ac31dbcbd01323cd0a190cbb`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | `e1e697a34424c75d75415b613b81c8af5f64384226c5152d869f12fd7db1a3e25724975b73fa3d89e56e4bf78d5fd07e68a709ba8566f53691ba6a88addc79ea`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | `c725a19a4013c74e22383ad3fb4cb799b3e161c4318fdad066daf806730a89bc3be3ff0f75678d02b3cbe52b2ef0c411c0639968e200b9df470be40bb2c015cc`
-
-## Changelog since v1.17.0
-
-### Action Required
-
-* action required ([#85363](https://github.com/kubernetes/kubernetes/pull/85363), [@immutableT](https://github.com/immutableT))
-    * 1. Currently, if users were to explicitly specify CacheSize of 0 for KMS provider, they would end-up with a provider that caches up to 1000 keys. This PR changes this behavior.
-    * Post this PR, when users supply 0 for CacheSize this will result in a validation error.
-    * 2. CacheSize type was changed from int32 to *int32. This allows defaulting logic to differentiate between cases where users explicitly supplied 0 vs. not supplied any value.
-    * 3. KMS Provider's endpoint (path to Unix socket) is now validated when the EncryptionConfiguration files is loaded. This used to be handled by the GRPCService.
-
-### Other notable changes
-
-* fix: azure data disk should use same key as os disk by default ([#86351](https://github.com/kubernetes/kubernetes/pull/86351), [@andyzhangx](https://github.com/andyzhangx))
-* New flag `--show-hidden-metrics-for-version` in kube-proxy can be used to show all hidden metrics that deprecated in the previous minor release. ([#85279](https://github.com/kubernetes/kubernetes/pull/85279), [@RainbowMango](https://github.com/RainbowMango))
-* Remove cluster-monitoring addon ([#85512](https://github.com/kubernetes/kubernetes/pull/85512), [@serathius](https://github.com/serathius))
-* Changed core_pattern on COS nodes to be an absolute path. ([#86329](https://github.com/kubernetes/kubernetes/pull/86329), [@mml](https://github.com/mml))
-* Track mount operations as uncertain if operation fails with non-final error ([#82492](https://github.com/kubernetes/kubernetes/pull/82492), [@gnufied](https://github.com/gnufied))
-* add kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout to configure IPVS connection timeouts. ([#85517](https://github.com/kubernetes/kubernetes/pull/85517), [@andrewsykim](https://github.com/andrewsykim))
-* The sample-apiserver aggregated conformance test has updated to use the Kubernetes v1.17.0 sample apiserver ([#84735](https://github.com/kubernetes/kubernetes/pull/84735), [@liggitt](https://github.com/liggitt))
-* The underlying format of the `CPUManager` state file has changed. Upgrades should be seamless, but any third-party tools that rely on reading the previous format need to be updated. ([#84462](https://github.com/kubernetes/kubernetes/pull/84462), [@klueska](https://github.com/klueska))
-* kubernetes will try to acquire the iptables lock every 100 msec during 5 seconds instead of every second. This specially useful for environments using kube-proxy in iptables mode with a high churn rate of services. ([#85771](https://github.com/kubernetes/kubernetes/pull/85771), [@aojea](https://github.com/aojea))
-* Fixed a panic in the kubelet cleaning up pod volumes ([#86277](https://github.com/kubernetes/kubernetes/pull/86277), [@tedyu](https://github.com/tedyu))
-* azure cloud provider cache TTL is configurable, list of the azure cloud provider is as following: ([#86266](https://github.com/kubernetes/kubernetes/pull/86266), [@zqingqing1](https://github.com/zqingqing1))
-    * - "availabilitySetNodesCacheTTLInSeconds"
-    * - "vmssCacheTTLInSeconds"
-    * - "vmssVirtualMachinesCacheTTLInSeconds"
-    * - "vmCacheTTLInSeconds"
-    * - "loadBalancerCacheTTLInSeconds"
-    * - "nsgCacheTTLInSeconds"
-    * - "routeTableCacheTTLInSeconds"
-* Fixes kube-proxy when EndpointSlice feature gate is enabled on Windows. ([#86016](https://github.com/kubernetes/kubernetes/pull/86016), [@robscott](https://github.com/robscott))
-* Fixes wrong validation result of NetworkPolicy PolicyTypes ([#85747](https://github.com/kubernetes/kubernetes/pull/85747), [@tnqn](https://github.com/tnqn))
-* Fixes an issue with kubelet-reported pod status on deleted/recreated pods. ([#86320](https://github.com/kubernetes/kubernetes/pull/86320), [@liggitt](https://github.com/liggitt))
-* kube-apiserver no longer serves the following deprecated APIs: ([#85903](https://github.com/kubernetes/kubernetes/pull/85903), [@liggitt](https://github.com/liggitt))
-        * All resources under `apps/v1beta1` and `apps/v1beta2` - use `apps/v1` instead
-        * `daemonsets`, `deployments`, `replicasets` resources under `extensions/v1beta1` - use `apps/v1` instead
-        * `networkpolicies` resources under `extensions/v1beta1` - use `networking.k8s.io/v1` instead
-        * `podsecuritypolicies` resources under `extensions/v1beta1` - use `policy/v1beta1` instead
-* kubeadm: fix potential panic when executing "kubeadm reset" with a corrupted kubelet.conf file ([#86216](https://github.com/kubernetes/kubernetes/pull/86216), [@neolit123](https://github.com/neolit123))
-* Fix a bug in port-forward: named port not working with service ([#85511](https://github.com/kubernetes/kubernetes/pull/85511), [@oke-py](https://github.com/oke-py))
-* kube-proxy no longer modifies shared EndpointSlices. ([#86092](https://github.com/kubernetes/kubernetes/pull/86092), [@robscott](https://github.com/robscott))
-* allow for configuration of CoreDNS replica count ([#85837](https://github.com/kubernetes/kubernetes/pull/85837), [@pickledrick](https://github.com/pickledrick))
-* Fixed a regression where the kubelet would fail to update the ready status of pods. ([#84951](https://github.com/kubernetes/kubernetes/pull/84951), [@tedyu](https://github.com/tedyu))
-* Resolves performance regression in client-go discovery clients constructed using `NewDiscoveryClientForConfig` or `NewDiscoveryClientForConfigOrDie`. ([#86168](https://github.com/kubernetes/kubernetes/pull/86168), [@liggitt](https://github.com/liggitt))
-* Make error message and service event message more clear ([#86078](https://github.com/kubernetes/kubernetes/pull/86078), [@feiskyer](https://github.com/feiskyer))
-* e2e-test-framework: add e2e test namespace dump if all tests succeed but the cleanup fails. ([#85542](https://github.com/kubernetes/kubernetes/pull/85542), [@schrodit](https://github.com/schrodit))
-* SafeSysctlWhitelist: add net.ipv4.ping_group_range ([#85463](https://github.com/kubernetes/kubernetes/pull/85463), [@AkihiroSuda](https://github.com/AkihiroSuda))
-* kubelet: the metric process_start_time_seconds be marked as with the ALPHA stability level. ([#85446](https://github.com/kubernetes/kubernetes/pull/85446), [@RainbowMango](https://github.com/RainbowMango))
-* API request throttling (due to a high rate of requests) is now reported in the kubelet (and other component) logs by default.  The messages are of the form ([#80649](https://github.com/kubernetes/kubernetes/pull/80649), [@RobertKrawitz](https://github.com/RobertKrawitz))
-    * Throttling request took 1.50705208s, request: GET:<URL>
-    * The presence of large numbers of these messages, particularly with long delay times, may indicate to the administrator the need to tune the cluster accordingly.
-* Fix API Server potential memory leak issue in processing watch request. ([#85410](https://github.com/kubernetes/kubernetes/pull/85410), [@answer1991](https://github.com/answer1991))
-* Verify kubelet & kube-proxy can recover after being killed on Windows nodes ([#84886](https://github.com/kubernetes/kubernetes/pull/84886), [@YangLu1031](https://github.com/YangLu1031))
-* Fixed an issue that the scheduler only returns the first failure reason. ([#86022](https://github.com/kubernetes/kubernetes/pull/86022), [@Huang-Wei](https://github.com/Huang-Wei))
-* kubectl/drain: add skip-wait-for-delete-timeout option. ([#85577](https://github.com/kubernetes/kubernetes/pull/85577), [@michaelgugino](https://github.com/michaelgugino))
-    * If pod DeletionTimestamp older than N seconds, skip waiting for the pod.  Seconds must be greater than 0 to skip.
-* Following metrics have been turned off: ([#83841](https://github.com/kubernetes/kubernetes/pull/83841), [@RainbowMango](https://github.com/RainbowMango))
-    * - kubelet_pod_worker_latency_microseconds
-    * - kubelet_pod_start_latency_microseconds
-    * - kubelet_cgroup_manager_latency_microseconds
-    * - kubelet_pod_worker_start_latency_microseconds
-    * - kubelet_pleg_relist_latency_microseconds
-    * - kubelet_pleg_relist_interval_microseconds
-    * - kubelet_eviction_stats_age_microseconds
-    * - kubelet_runtime_operations
-    * - kubelet_runtime_operations_latency_microseconds
-    * - kubelet_runtime_operations_errors
-    * - kubelet_device_plugin_registration_count
-    * - kubelet_device_plugin_alloc_latency_microseconds
-    * - kubelet_docker_operations
-    * - kubelet_docker_operations_latency_microseconds
-    * - kubelet_docker_operations_errors
-    * - kubelet_docker_operations_timeout
-    * - network_plugin_operations_latency_microseconds
-* - Renamed Kubelet metric certificate_manager_server_expiration_seconds to certificate_manager_server_ttl_seconds and changed to report the second until expiration at read time rather than absolute time of expiry. ([#85874](https://github.com/kubernetes/kubernetes/pull/85874), [@sambdavidson](https://github.com/sambdavidson))
-    * - Improved accuracy of Kubelet metric rest_client_exec_plugin_ttl_seconds.
-* Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83363](https://github.com/kubernetes/kubernetes/pull/83363), [@wawa0210](https://github.com/wawa0210))
-* Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83362](https://github.com/kubernetes/kubernetes/pull/83362), [@wawa0210](https://github.com/wawa0210))
-* During initialization phase (preflight), kubeadm now verifies the presence of the conntrack executable ([#85857](https://github.com/kubernetes/kubernetes/pull/85857), [@hnanni](https://github.com/hnanni))
-* VMSS cache is added so that less chances of VMSS GET throttling ([#85885](https://github.com/kubernetes/kubernetes/pull/85885), [@nilo19](https://github.com/nilo19))
-* Update go-winio module version from 0.4.11 to 0.4.14 ([#85739](https://github.com/kubernetes/kubernetes/pull/85739), [@wawa0210](https://github.com/wawa0210))
-* Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made ([#85990](https://github.com/kubernetes/kubernetes/pull/85990), [@feiskyer](https://github.com/feiskyer))
-* kubectl drain node --dry-run will list pods that would be evicted or deleted ([#82660](https://github.com/kubernetes/kubernetes/pull/82660), [@sallyom](https://github.com/sallyom))
-* Windows nodes on GCE can use TPM-based authentication to the master. ([#85466](https://github.com/kubernetes/kubernetes/pull/85466), [@pjh](https://github.com/pjh))
-* kubectl/drain: add disable-eviction option. ([#85571](https://github.com/kubernetes/kubernetes/pull/85571), [@michaelgugino](https://github.com/michaelgugino))
-    * Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, and should be used with caution.
-* kubeadm now errors out whenever a not supported component config version is supplied for the kubelet and kube-proxy ([#85639](https://github.com/kubernetes/kubernetes/pull/85639), [@rosti](https://github.com/rosti))
-* Fixed issue with addon-resizer using deprecated extensions APIs ([#85793](https://github.com/kubernetes/kubernetes/pull/85793), [@bskiba](https://github.com/bskiba))
-* Includes FSType when describing CSI persistent volumes. ([#85293](https://github.com/kubernetes/kubernetes/pull/85293), [@huffmanca](https://github.com/huffmanca))
-* kubelet now exports a "server_expiration_renew_failure" and "client_expiration_renew_failure" metric counter if the certificate rotations cannot be performed. ([#84614](https://github.com/kubernetes/kubernetes/pull/84614), [@rphillips](https://github.com/rphillips))
-* kubeadm: don't write the kubelet environment file on "upgrade apply" ([#85412](https://github.com/kubernetes/kubernetes/pull/85412), [@boluisa](https://github.com/boluisa))
-* fix azure file AuthorizationFailure ([#85475](https://github.com/kubernetes/kubernetes/pull/85475), [@andyzhangx](https://github.com/andyzhangx))
-* Resolved regression in admission, authentication, and authorization webhook performance in v1.17.0-rc.1 ([#85810](https://github.com/kubernetes/kubernetes/pull/85810), [@liggitt](https://github.com/liggitt))
-* kubeadm: uses the apiserver AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters ([#85745](https://github.com/kubernetes/kubernetes/pull/85745), [@aojea](https://github.com/aojea))
-* kubeadm: Forward cluster name to the controller-manager arguments ([#85817](https://github.com/kubernetes/kubernetes/pull/85817), [@ereslibre](https://github.com/ereslibre))
-* Fixed "requested device X but found Y" attach error on AWS. ([#85675](https://github.com/kubernetes/kubernetes/pull/85675), [@jsafrane](https://github.com/jsafrane))
-* addons: elasticsearch discovery supports IPv6 ([#85543](https://github.com/kubernetes/kubernetes/pull/85543), [@SataQiu](https://github.com/SataQiu))
-* kubeadm: retry `kubeadm-config` ConfigMap creation or mutation if the apiserver is not responding. This will improve resiliency when joining new control plane nodes. ([#85763](https://github.com/kubernetes/kubernetes/pull/85763), [@ereslibre](https://github.com/ereslibre))
-* Update Cluster Autoscaler to 1.17.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.17.0 ([#85610](https://github.com/kubernetes/kubernetes/pull/85610), [@losipiuk](https://github.com/losipiuk))
-* Filter published OpenAPI schema by making nullable, required fields non-required in order to avoid kubectl to wrongly reject null values. ([#85722](https://github.com/kubernetes/kubernetes/pull/85722), [@sttts](https://github.com/sttts))
-* kubectl set resources will no longer return an error if passed an empty change for a resource.  ([#85490](https://github.com/kubernetes/kubernetes/pull/85490), [@sallyom](https://github.com/sallyom))
-    * kubectl set subject will no longer return an error if passed an empty change for a resource.  
-* kube-apiserver: fixed a conflict error encountered attempting to delete a pod with gracePeriodSeconds=0 and a resourceVersion precondition ([#85516](https://github.com/kubernetes/kubernetes/pull/85516), [@michaelgugino](https://github.com/michaelgugino))
-* kubeadm: add a upgrade health check that deploys a Job ([#81319](https://github.com/kubernetes/kubernetes/pull/81319), [@neolit123](https://github.com/neolit123))
-* kubeadm: make sure images are pre-pulled even if a tag did not change but their contents changed ([#85603](https://github.com/kubernetes/kubernetes/pull/85603), [@bart0sh](https://github.com/bart0sh))
-* kube-apiserver: Fixes a bug that hidden metrics can not be enabled by the command-line option `--show-hidden-metrics-for-version`. ([#85444](https://github.com/kubernetes/kubernetes/pull/85444), [@RainbowMango](https://github.com/RainbowMango))
-* kubeadm now supports automatic calculations of dual-stack node cidr masks to kube-controller-manager.  ([#85609](https://github.com/kubernetes/kubernetes/pull/85609), [@Arvinderpal](https://github.com/Arvinderpal))
-* Fix bug where EndpointSlice controller would attempt to modify shared objects. ([#85368](https://github.com/kubernetes/kubernetes/pull/85368), [@robscott](https://github.com/robscott))
-* Use context to check client closed instead of http.CloseNotifier in processing watch request which will reduce 1 goroutine for each request if proto is HTTP/2.x . ([#85408](https://github.com/kubernetes/kubernetes/pull/85408), [@answer1991](https://github.com/answer1991))
-* kubeadm: reset raises warnings if it cannot delete folders ([#85265](https://github.com/kubernetes/kubernetes/pull/85265), [@SataQiu](https://github.com/SataQiu))
-* Wait for kubelet & kube-proxy to be ready on Windows node within 10s ([#85228](https://github.com/kubernetes/kubernetes/pull/85228), [@YangLu1031](https://github.com/YangLu1031))

From 944c8093dac70ed1026ef48a9c62299401a572fc Mon Sep 17 00:00:00 2001
From: zacharysarah <zach@corleissen.com>
Date: Thu, 27 Aug 2020 17:38:30 -0700
Subject: [PATCH 106/496] Remove the KubeCon EU event from the landing page

---
 content/en/_index.html | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/content/en/_index.html b/content/en/_index.html
index e5b4f1922c..110141c900 100644
--- a/content/en/_index.html
+++ b/content/en/_index.html
@@ -41,11 +41,6 @@ Kubernetes is open source giving you the freedom to take advantage of on-premise
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Watch Video</button>
         <br>
         <br>
-        <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/?utm_source=kubernetes.io&utm_medium=nav&utm_campaign=kccnceu20" button id="desktopKCButton">Attend KubeCon EU virtually on August 17-20, 2020</a>
-        <br>
-        <br>
-        <br>
-        <br>
         <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=kubernetes.io&utm_medium=nav&utm_campaign=kccncna20" button id="desktopKCButton">Attend KubeCon NA virtually on November 17-20, 2020</a>
 </div>
 <div id="videoPlayer">

From 65b354ccd911d3ad4d0cdec76b946f8ccab9e9c3 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Thu, 27 Aug 2020 20:25:12 -0700
Subject: [PATCH 107/496] Update chinese page debug-application

---
 .../docs/tasks/debug-application-cluster/debug-application.md  | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-application.md b/content/zh/docs/tasks/debug-application-cluster/debug-application.md
index 8e7b751951..57863d4146 100644
--- a/content/zh/docs/tasks/debug-application-cluster/debug-application.md
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-application.md
@@ -125,7 +125,7 @@ Once your pod has been scheduled, the methods described in [Debug Running Pods](
 
 一旦 Pod 被调度，就可以采用
 [调试运行中的 Pod](/zh/docs/concepts/configuration/manage-resources-containers/)
-中小鞥在的方法来进一步调试。
+中的方法来进一步调试。
 
 <!--
 #### My pod is running but not doing what I told it to do
@@ -315,4 +315,3 @@ You may also visit [troubleshooting document](/docs/troubleshooting/) for more i
 DNS 服务已配置并正常工作，iptables 规则也以安装并且 `kube-proxy` 也没有异常行为。
 
 你也可以访问[故障排查文档](/zh/docs/tasks/debug-application-cluster/troubleshooting/ )来获取更多信息。
-

From 09d9476f383f7c960bde431227c97e90c559ea5f Mon Sep 17 00:00:00 2001
From: wangyetao <wangyetao@inspur.com>
Date: Fri, 28 Aug 2020 11:44:02 +0800
Subject: [PATCH 108/496] fix broken links

---
 .../_posts/2018-06-26-kubernetes-1-11-release-announcement.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2018-06-26-kubernetes-1-11-release-announcement.md b/content/en/blog/_posts/2018-06-26-kubernetes-1-11-release-announcement.md
index 4614421d1b..a5d9f8b4d0 100644
--- a/content/en/blog/_posts/2018-06-26-kubernetes-1-11-release-announcement.md
+++ b/content/en/blog/_posts/2018-06-26-kubernetes-1-11-release-announcement.md
@@ -45,7 +45,7 @@ Support for [dynamic maximum volume count](https://github.com/kubernetes/feature
 
 The StorageObjectInUseProtection feature is now stable and prevents the removal of both [Persistent Volumes](https://github.com/kubernetes/features/issues/499) that are bound to a Persistent Volume Claim, and [Persistent Volume Claims](https://github.com/kubernetes/features/issues/498) that are being used by a pod. This safeguard will help prevent issues from deleting a PV or a PVC that is currently tied to an active pod.
 
-Each Special Interest Group (SIG) within the community continues to deliver the most-requested enhancements, fixes, and functionality for their respective specialty areas. For a complete list of inclusions by SIG, please visit the [release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.11.md#111-release-notes).
+Each Special Interest Group (SIG) within the community continues to deliver the most-requested enhancements, fixes, and functionality for their respective specialty areas. For a complete list of inclusions by SIG, please visit the [release notes](https://github.com/kubernetes/kubernetes/blob/release-1.11/CHANGELOG-1.11.md#111-release-notes).
 
 ## Availability
 
@@ -88,7 +88,7 @@ Is Kubernetes helping your team? Share your story with the community.
 * The CNCF recently expanded its certification offerings to include a Certified Kubernetes Application Developer exam. The CKAD exam certifies an individual's ability to design, build, configure, and expose cloud native applications for Kubernetes. More information can be found [here](https://www.cncf.io/blog/2018/03/16/cncf-announces-ckad-exam/).
 * The CNCF recently added a new partner category, Kubernetes Training Partners (KTP). KTPs are a tier of vetted training providers who have deep experience in cloud native technology training. View partners and learn more [here](https://www.cncf.io/certification/training/).
 * CNCF also offers [online training](https://www.cncf.io/certification/training/) that teaches the skills needed to create and configure a real-world Kubernetes cluster.
-* Kubernetes documentation now features [user journeys](https://k8s.io/docs/home/): specific pathways for learning based on who readers are and what readers want to do. Learning Kubernetes is easier than ever for beginners, and more experienced users can find task journeys specific to cluster admins and application developers.  
+* Kubernetes documentation now features [user journeys](https://k8s.io/docs/home/): specific pathways for learning based on who readers are and what readers want to do. Learning Kubernetes is easier than ever for beginners, and more experienced users can find task journeys specific to cluster admins and application developers.
 
 ## KubeCon
 

From 0beb0478b9a4aa36ae6e98a4ec97657ae91e9fd8 Mon Sep 17 00:00:00 2001
From: shencheng <cheng0214@users.noreply.github.com>
Date: Fri, 28 Aug 2020 15:18:43 +0800
Subject: [PATCH 109/496] Update horizontal-pod-autoscale-walkthrough.md

The yaml example file has mistake
---
 .../run-application/horizontal-pod-autoscale-walkthrough.md   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/zh/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index 1dd802ae11..aa0aecc95f 100644
--- a/content/zh/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/zh/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -444,7 +444,9 @@ spec:
     pods:
       metric:
         name: packets-per-second
-      targetAverageValue: 1k
+      target:
+        type: AverageValue
+        averageValue: 1k
   - type: Object
     object:
       metric:

From 09b03d35a1f54e251f2edc88f8971deea18a0f5e Mon Sep 17 00:00:00 2001
From: Kush Trivedi <kushthedude@gmail.com>
Date: Fri, 28 Aug 2020 15:11:52 +0530
Subject: [PATCH 110/496] chore: link to Start Contributing in CONTRIBUTING.md

Signed-off-by: Kush Trivedi <kushthedude@gmail.com>
---
 CONTRIBUTING.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index d5f2c4ce05..9fe6cea5f3 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -35,3 +35,5 @@ Note that code issues should be filed against the main kubernetes repository, wh
 ### Submitting Documentation Pull Requests
 
 If you're fixing an issue in the existing documentation, you should submit a PR against the master branch.  Follow [these instructions to create a documentation pull request against the kubernetes.io repository](http://kubernetes.io/docs/home/contribute/create-pull-request/).
+
+For more information, see [contributing to Kubernetes docs](https://kubernetes.io/docs/contribute/).

From 17e180f8aec3541c25ab5759862c3d2db7e0c34f Mon Sep 17 00:00:00 2001
From: xieyanker <xjsisnice@gmail.com>
Date: Fri, 28 Aug 2020 18:37:26 +0800
Subject: [PATCH 111/496] Fix format error

---
 content/zh/docs/concepts/cluster-administration/_index.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/_index.md b/content/zh/docs/concepts/cluster-administration/_index.md
index fd60a3457f..fa4b1f6f71 100644
--- a/content/zh/docs/concepts/cluster-administration/_index.md
+++ b/content/zh/docs/concepts/cluster-administration/_index.md
@@ -62,9 +62,9 @@ Before choosing a guide, here are some considerations:
 -->
 - 你是打算在你的计算机上尝试 Kubernetes，还是要构建一个高可用的多节点集群？请选择最适合你需求的发行版。
 - 您正在使用类似 [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/) 这样的**被托管的 Kubernetes 集群**, 还是**管理您自己的集群**？
-- 你的集群是在**本地**还是**云（IaaS）**上？Kubernetes 不能直接支持混合集群。作为代替，你可以建立多个集群。
+- 你的集群是在**本地**还是**云（IaaS）** 上？Kubernetes 不能直接支持混合集群。作为代替，你可以建立多个集群。
 - **如果你在本地配置 Kubernetes**，需要考虑哪种[网络模型](/zh/docs/concepts/cluster-administration/networking/)最适合。
-- 你的 Kubernetes 在**裸金属硬件**上还是**虚拟机（VMs）**上运行？
+- 你的 Kubernetes 在**裸金属硬件**上还是**虚拟机（VMs）** 上运行？
 - 你**只想运行一个集群**，还是打算**参与开发 Kubernetes 项目代码**？如果是后者，请选择一个处于开发状态的发行版。某些发行版只提供二进制发布版，但提供更多的选择。
 - 让你自己熟悉运行一个集群所需的[组件](/zh/docs/concepts/overview/components/)。
 

From a4ab9c712f266a715f1a390733ca8249404e0cbf Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Fri, 28 Aug 2020 12:42:00 +0100
Subject: [PATCH 112/496] Remove cloud providers page

The content guide for the website requires omitting this kind of
content; instead, cloud providers can each provide their own
documentation on how to make their system work with Kubernetes.
---
 .../cluster-administration/cloud-providers.md | 362 ------------------
 1 file changed, 362 deletions(-)
 delete mode 100644 content/en/docs/concepts/cluster-administration/cloud-providers.md

diff --git a/content/en/docs/concepts/cluster-administration/cloud-providers.md b/content/en/docs/concepts/cluster-administration/cloud-providers.md
deleted file mode 100644
index 89bd0be3f6..0000000000
--- a/content/en/docs/concepts/cluster-administration/cloud-providers.md
+++ /dev/null
@@ -1,362 +0,0 @@
----
-title: Cloud Providers
-content_type: concept
-weight: 30
----
-
-<!-- overview -->
-This page explains how to manage Kubernetes running on a specific
-cloud provider. There are many other third-party cloud provider projects, but this list is specific to projects embedded within, or relied upon by Kubernetes itself.
-
-<!-- body -->
-### kubeadm
-[kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) is a popular option for creating kubernetes clusters.
-kubeadm has configuration options to specify configuration information for cloud providers. For example a typical
-in-tree cloud provider can be configured using kubeadm as shown below:
-
-```yaml
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: InitConfiguration
-nodeRegistration:
-  kubeletExtraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
----
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: ClusterConfiguration
-kubernetesVersion: v1.13.0
-apiServer:
-  extraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
-  extraVolumes:
-  - name: cloud
-    hostPath: "/etc/kubernetes/cloud.conf"
-    mountPath: "/etc/kubernetes/cloud.conf"
-controllerManager:
-  extraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
-  extraVolumes:
-  - name: cloud
-    hostPath: "/etc/kubernetes/cloud.conf"
-    mountPath: "/etc/kubernetes/cloud.conf"
-```
-
-The in-tree cloud providers typically need both `--cloud-provider` and `--cloud-config` specified in the command lines
-for the [kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/),
-[kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) and the
-[kubelet](/docs/reference/command-line-tools-reference/kubelet/).
-The contents of the file specified in `--cloud-config` for each provider is documented below as well.
-
-For all external cloud providers, please follow the instructions on the individual repositories,
-which are listed under their headings below, or one may view [the list of all repositories](https://github.com/kubernetes?q=cloud-provider-&type=&language=)
-
-## AWS
-This section describes all the possible configurations which can
-be used when running Kubernetes on Amazon Web Services.
-
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-aws](https://github.com/kubernetes/cloud-provider-aws#readme)
-
-### Node Name
-
-The AWS cloud provider uses the private DNS name of the AWS instance as the name of the Kubernetes Node object.
-
-### Load Balancers
-You can setup [external load balancers](/docs/tasks/access-application-cluster/create-external-load-balancer/)
-to use specific features in AWS by configuring the annotations as shown below.
-
-```yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: example
-  namespace: kube-system
-  labels:
-    run: example
-  annotations:
-     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:xx-xxxx-x:xxxxxxxxx:xxxxxxx/xxxxx-xxxx-xxxx-xxxx-xxxxxxxxx #replace this value
-     service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-spec:
-  type: LoadBalancer
-  ports:
-  - port: 443
-    targetPort: 5556
-    protocol: TCP
-  selector:
-    app: example
-```
-Different settings can be applied to a load balancer service in AWS using _annotations_. The following describes the annotations supported on AWS ELBs:
-
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval`: Used to specify access log emit interval.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-enabled`: Used on the service to enable or disable access logs.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name`: Used to specify access log s3 bucket name.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix`: Used to specify access log s3 bucket prefix.
-* `service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags`: Used on the service to specify a comma-separated list of key-value pairs which will be recorded as additional tags in the ELB. For example: `"Key1=Val1,Key2=Val2,KeyNoVal1=,KeyNoVal2"`.
-* `service.beta.kubernetes.io/aws-load-balancer-backend-protocol`: Used on the service to specify the protocol spoken by the backend (pod) behind a listener. If `http` (default) or `https`, an HTTPS listener that terminates the connection and parses headers is created. If set to `ssl` or `tcp`, a "raw" SSL listener is used. If set to `http` and `aws-load-balancer-ssl-cert` is not used then a HTTP listener is used.
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-cert`: Used on the service to request a secure listener. Value is a valid certificate ARN. For more, see [ELB Listener Config](https://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener-config.html) CertARN is an IAM or CM certificate ARN, for example `arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012`.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-enabled`: Used on the service to enable or disable connection draining.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-timeout`: Used on the service to specify a connection draining timeout.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout`: Used on the service to specify the idle connection timeout.
-* `service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled`: Used on the service to enable or disable cross-zone load balancing.
-* `service.beta.kubernetes.io/aws-load-balancer-security-groups`: Used to specify the security groups to be added to ELB created. This replaces all other security groups previously assigned to the ELB. Security groups defined here should not be shared between services.
-* `service.beta.kubernetes.io/aws-load-balancer-extra-security-groups`: Used on the service to specify additional security groups to be added to ELB created
-* `service.beta.kubernetes.io/aws-load-balancer-internal`: Used on the service to indicate that we want an internal ELB.
-* `service.beta.kubernetes.io/aws-load-balancer-proxy-protocol`: Used on the service to enable the proxy protocol on an ELB. Right now we only accept the value `*` which means enabling the proxy protocol on all ELB backends. In the future we could adjust this to allow setting the proxy protocol only on certain backends.
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-ports`: Used on the service to specify a comma-separated list of ports that will use SSL/HTTPS listeners. Defaults to `*` (all)
-
-The information for the annotations for AWS is taken from the comments on [aws.go](https://github.com/kubernetes/legacy-cloud-providers/blob/master/aws/aws.go)
-
-## Azure
-
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-azure](https://github.com/kubernetes/cloud-provider-azure#readme)
-
-### Node Name
-
-The Azure cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the Kubernetes Node name must match the Azure VM name.
-
-## GCE
-
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-gcp](https://github.com/kubernetes/cloud-provider-gcp#readme)
-
-### Node Name
-
-The GCE cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the first segment of the Kubernetes Node name must match the GCE instance name (e.g. a Node named `kubernetes-node-2.c.my-proj.internal` must correspond to an instance named `kubernetes-node-2`).
-
-## HUAWEI CLOUD
-
-If you wish to use the external cloud provider, its repository is [kubernetes-sigs/cloud-provider-huaweicloud](https://github.com/kubernetes-sigs/cloud-provider-huaweicloud).
-
-## OpenStack
-This section describes all the possible configurations which can
-be used when using OpenStack with Kubernetes.
-
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-openstack](https://github.com/kubernetes/cloud-provider-openstack#readme)
-
-### Node Name
-
-The OpenStack cloud provider uses the instance name (as determined from OpenStack metadata) as the name of the Kubernetes Node object.
-Note that the instance name must be a valid Kubernetes Node name in order for the kubelet to successfully register its Node object.
-
-### Services
-
-The OpenStack cloud provider
-implementation for Kubernetes supports the use of these OpenStack services from
-the underlying cloud, where available:
-
-| Service                  | API Version(s) | Required |
-|--------------------------|----------------|----------|
-| Block Storage (Cinder)   | V1†, V2, V3    | No       |
-| Compute (Nova)           | V2             | No       |
-| Identity (Keystone)      | V2‡,  V3       | Yes      |
-| Load Balancing (Neutron) | V1§, V2        | No       |
-| Load Balancing (Octavia) | V2             | No       |
-
-† Block Storage V1 API support is deprecated, Block Storage V3 API support was
-added in Kubernetes 1.9.
-
-‡ Identity V2 API support is deprecated and will be removed from the provider in
-a future release. As of the "Queens" release, OpenStack will no longer expose the
-Identity V2 API.
-
-§ Load Balancing V1 API support was removed in Kubernetes 1.9.
-
-Service discovery is achieved by listing the service catalog managed by
-OpenStack Identity (Keystone) using the `auth-url` provided in the provider
-configuration. The provider will gracefully degrade in functionality when
-OpenStack services other than Keystone are not available and simply disclaim
-support for impacted features. Certain features are also enabled or disabled
-based on the list of extensions published by Neutron in the underlying cloud.
-
-### cloud.conf
-Kubernetes knows how to interact with OpenStack via the file cloud.conf. It is
-the file that will provide Kubernetes with credentials and location for the OpenStack auth endpoint.
-You can create a cloud.conf file by specifying the following details in it
-
-#### Typical configuration
-This is an example of a typical configuration that touches the values that most
-often need to be set. It points the provider at the OpenStack cloud's Keystone
-endpoint, provides details for how to authenticate with it, and configures the
-load balancer:
-
-```yaml
-[Global]
-username=user
-password=pass
-auth-url=https://<keystone_ip>/identity/v3
-tenant-id=c869168a828847f39f7f06edd7305637
-domain-id=2a73b8f597c04551a0fdc8e95544be8a
-
-[LoadBalancer]
-subnet-id=6937f8fa-858d-4bc9-a3a5-18d2c957166a
-```
-
-##### Global
-These configuration options for the OpenStack provider pertain to its global
-configuration and should appear in the `[Global]` section of the `cloud.conf`
-file:
-
-* `auth-url` (Required): The URL of the keystone API used to authenticate. On
-  OpenStack control panels, this can be found at Access and Security > API
-  Access > Credentials.
-* `username` (Required): Refers to the username of a valid user set in keystone.
-* `password` (Required): Refers to the password of a valid user set in keystone.
-* `tenant-id` (Required): Used to specify the id of the project where you want
-  to create your resources.
-* `tenant-name` (Optional): Used to specify the name of the project where you
-  want to create your resources.
-* `trust-id` (Optional): Used to specify the identifier of the trust to use for
-  authorization. A trust represents a user's (the trustor) authorization to
-  delegate roles to another user (the trustee), and optionally allow the trustee
-  to impersonate the trustor. Available trusts are found under the
-  `/v3/OS-TRUST/trusts` endpoint of the Keystone API.
-* `domain-id` (Optional): Used to specify the id of the domain your user belongs
-  to.
-* `domain-name` (Optional): Used to specify the name of the domain your user
-  belongs to.
-* `region` (Optional): Used to specify the identifier of the region to use when
-  running on a multi-region OpenStack cloud. A region is a general division of
-  an OpenStack deployment. Although a region does not have a strict geographical
-  connotation, a deployment can use a geographical name for a region identifier
-  such as `us-east`. Available regions are found under the `/v3/regions`
-  endpoint of the Keystone API.
-* `ca-file` (Optional): Used to specify the path to your custom CA file.
-
-
-When using Keystone V3 - which changes tenant to project - the `tenant-id` value
-is automatically mapped to the project construct in the API.
-
-#####  Load Balancer
-These configuration options for the OpenStack provider pertain to the load
-balancer and should appear in the `[LoadBalancer]` section of the `cloud.conf`
-file:
-
-* `lb-version` (Optional): Used to override automatic version detection. Valid
-  values are `v1` or `v2`. Where no value is provided automatic detection will
-  select the highest supported version exposed by the underlying OpenStack
-  cloud.
-* `use-octavia`(Optional): Whether or not to use Octavia for LoadBalancer type
-    of Service implementation instead of using Neutron-LBaaS. Default: true
-   Attention: Openstack CCM use Octavia as default load balancer implementation since v1.17.0
-* `subnet-id` (Optional): Used to specify the id of the subnet you want to
-  create your loadbalancer on. Can be found at Network > Networks. Click on the
-  respective network to get its subnets.
-* `floating-network-id` (Optional): If specified, will create a floating IP for
-  the load balancer.
-* `lb-method` (Optional): Used to specify an algorithm by which load will be
-  distributed amongst members of the load balancer pool. The value can be
-  `ROUND_ROBIN`, `LEAST_CONNECTIONS`, or `SOURCE_IP`. The default behavior if
-  none is specified is `ROUND_ROBIN`.
-* `lb-provider` (Optional): Used to specify the provider of the load balancer.
-  If not specified, the default provider service configured in neutron will be
-  used.
-* `create-monitor` (Optional): Indicates whether or not to create a health
-  monitor for the Neutron load balancer. Valid values are `true` and `false`.
-  The default is `false`. When `true` is specified then `monitor-delay`,
-  `monitor-timeout`, and `monitor-max-retries` must also be set.
-* `monitor-delay` (Optional): The time between sending probes to
-  members of the load balancer. Ensure that you specify a valid time unit. The valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-* `monitor-timeout` (Optional): Maximum time for a monitor to wait
-  for a ping reply before it times out. The value must be less than the delay
-  value. Ensure that you specify a valid time unit. The valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-* `monitor-max-retries` (Optional): Number of permissible ping failures before
-  changing the load balancer member's status to INACTIVE. Must be a number
-  between 1 and 10.
-* `manage-security-groups` (Optional): Determines whether or not the load
-  balancer should automatically manage the security group rules. Valid values
-  are `true` and `false`. The default is `false`. When `true` is specified
-  `node-security-group` must also be supplied.
-* `node-security-group` (Optional): ID of the security group to manage.
-
-##### Block Storage
-These configuration options for the OpenStack provider pertain to block storage
-and should appear in the `[BlockStorage]` section of the `cloud.conf` file:
-
-* `bs-version` (Optional): Used to override automatic version detection. Valid
-  values are `v1`, `v2`, `v3` and `auto`. When `auto` is specified automatic
-  detection will select the highest supported version exposed by the underlying
-  OpenStack cloud. The default value if none is provided is `auto`.
-* `trust-device-path` (Optional): In most scenarios the block device names
-  provided by Cinder (e.g. `/dev/vda`) can not be trusted. This boolean toggles
-  this behavior. Setting it to `true` results in trusting the block device names
-  provided by Cinder. The default value of `false` results in the discovery of
-  the device path based on its serial number and `/dev/disk/by-id` mapping and is
-  the recommended approach.
-* `ignore-volume-az` (Optional): Used to influence availability zone use when
-  attaching Cinder volumes. When Nova and Cinder have different availability
-  zones, this should be set to `true`. This is most commonly the case where
-  there are many Nova availability zones but only one Cinder availability zone.
-  The default value is `false` to preserve the behavior used in earlier
-  releases, but may change in the future.
-* `node-volume-attach-limit` (Optional): Maximum number of Volumes that can be
-  attached to the node, default is 256 for cinder.
-
-If deploying Kubernetes versions <= 1.8 on an OpenStack deployment that uses
-paths rather than ports to differentiate between endpoints it may be necessary
-to explicitly set the `bs-version` parameter. A path based endpoint is of the
-form `http://foo.bar/volume` while a port based endpoint is of the form
-`http://foo.bar:xxx`.
-
-In environments that use path based endpoints and Kubernetes is using the older
-auto-detection logic a `BS API version autodetection failed.` error will be
-returned on attempting volume detachment. To workaround this issue it is
-possible to force the use of Cinder API version 2 by adding this to the cloud
-provider configuration:
-
-```yaml
-[BlockStorage]
-bs-version=v2
-```
-
-##### Metadata
-These configuration options for the OpenStack provider pertain to metadata and
-should appear in the `[Metadata]` section of the `cloud.conf` file:
-
-* `search-order` (Optional): This configuration key influences the way that the
-  provider retrieves metadata relating to the instance(s) in which it runs. The
-  default value of `configDrive,metadataService` results in the provider
-  retrieving metadata relating to the instance from the config drive first if
-  available and then the metadata service. Alternative values are:
-  * `configDrive` - Only retrieve instance metadata from the configuration
-    drive.
-  * `metadataService` - Only retrieve instance metadata from the metadata
-    service.
-  * `metadataService,configDrive` - Retrieve instance metadata from the metadata
-    service first if available, then the configuration drive.
-
-  Influencing this behavior may be desirable as the metadata on the
-  configuration drive may grow stale over time, whereas the metadata service
-  always provides the most up to date view. Not all OpenStack clouds provide
-  both configuration drive and metadata service though and only one or the other
-  may be available which is why the default is to check both.
-
-##### Route
-
-These configuration options for the OpenStack provider pertain to the [kubenet]
-Kubernetes network plugin and should appear in the `[Route]` section of the
-`cloud.conf` file:
-
-* `router-id` (Optional): If the underlying cloud's Neutron deployment supports
-  the `extraroutes` extension then use `router-id` to specify a router to add
-  routes to.  The router chosen must span the private networks containing your
-  cluster nodes (typically there is only one node network, and this value should be
-  the default router for the node network).  This value is required to use
-  [kubenet](/docs/concepts/cluster-administration/network-plugins/#kubenet)
-  on OpenStack.
-
-[kubenet]: /docs/concepts/cluster-administration/network-plugins/#kubenet
-
-## vSphere
-
-{{< tabs name="vSphere cloud provider" >}}
-{{% tab name="vSphere >= 6.7U3" %}}
-For all vSphere deployments on vSphere >= 6.7U3, the [external vSphere cloud provider](https://github.com/kubernetes/cloud-provider-vsphere), along with the [vSphere CSI driver](https://github.com/kubernetes-sigs/vsphere-csi-driver) is recommended. See [Deploying a Kubernetes Cluster on vSphere with CSI and CPI](https://cloud-provider-vsphere.sigs.k8s.io/tutorials/kubernetes-on-vsphere-with-kubeadm.html) for a quick start guide.
-{{% /tab %}}
-{{% tab name="vSphere < 6.7U3" %}}
-If you are running vSphere < 6.7U3, the in-tree vSphere cloud provider is recommended. See [Running a Kubernetes Cluster on vSphere with kubeadm](https://cloud-provider-vsphere.sigs.k8s.io/tutorials/k8s-vcp-on-vsphere-with-kubeadm.html) for a quick start guide.
-{{% /tab %}}
-{{< /tabs >}}
-
-For in-depth documentation on the vSphere cloud provider, visit the [vSphere cloud provider docs site](https://cloud-provider-vsphere.sigs.k8s.io).

From 24b350662c2168a9d4fdc735fc6a875c4ac519cf Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Fri, 28 Aug 2020 12:53:42 +0100
Subject: [PATCH 113/496] Remove links to cloud providers page

---
 content/en/docs/concepts/services-networking/service.md | 2 +-
 content/en/docs/concepts/storage/volumes.md             | 3 +--
 content/en/docs/reference/access-authn-authz/node.md    | 2 +-
 content/en/docs/reference/glossary/cloud-provider.md    | 1 -
 4 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index b7253a5bef..4d788fd78e 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -1178,7 +1178,7 @@ to expose HTTP / HTTPS Services.
 
 ### PROXY protocol
 
-If your cloud provider supports it (eg, [AWS](/docs/concepts/cluster-administration/cloud-providers/#aws)),
+If your cloud provider supports it,
 you can use a Service in LoadBalancer mode to configure a load balancer outside
 of Kubernetes itself, that will forward connections prefixed with
 [PROXY protocol](https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt).
diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 4ed310f6df..1793a7a5f8 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -215,8 +215,7 @@ See the [CephFS example](https://github.com/kubernetes/examples/tree/{{< param "
 ### cinder {#cinder}
 
 {{< note >}}
-Prerequisite: Kubernetes with OpenStack Cloud Provider configured. For cloudprovider
-configuration please refer [cloud provider openstack](/docs/concepts/cluster-administration/cloud-providers/#openstack).
+Prerequisite: Kubernetes with OpenStack Cloud Provider configured.
 {{< /note >}}
 
 `cinder` is used to mount OpenStack Cinder Volume into your Pod.
diff --git a/content/en/docs/reference/access-authn-authz/node.md b/content/en/docs/reference/access-authn-authz/node.md
index 439d97ff84..141dc8bb61 100644
--- a/content/en/docs/reference/access-authn-authz/node.md
+++ b/content/en/docs/reference/access-authn-authz/node.md
@@ -46,7 +46,7 @@ This group and user name format match the identity created for each kubelet as p
 [kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/).
 
 The value of `<nodeName>` **must** match precisely the name of the node as registered by the kubelet. By default, this is the host name as provided by `hostname`, or overridden via the [kubelet option](/docs/reference/command-line-tools-reference/kubelet/) `--hostname-override`. However, when using the `--cloud-provider` kubelet option, the specific hostname may be determined by the cloud provider, ignoring the local `hostname` and the `--hostname-override` option. 
-For specifics about how the kubelet determines the hostname, as well as cloud provider overrides, see the [kubelet options reference](/docs/reference/command-line-tools-reference/kubelet/) and the [cloud provider details](/docs/concepts/cluster-administration/cloud-providers/).
+For specifics about how the kubelet determines the hostname, see the [kubelet options reference](/docs/reference/command-line-tools-reference/kubelet/).
 
 To enable the Node authorizer, start the apiserver with `--authorization-mode=Node`.
 
diff --git a/content/en/docs/reference/glossary/cloud-provider.md b/content/en/docs/reference/glossary/cloud-provider.md
index 84b4d6fcac..c9f3f11fb5 100755
--- a/content/en/docs/reference/glossary/cloud-provider.md
+++ b/content/en/docs/reference/glossary/cloud-provider.md
@@ -2,7 +2,6 @@
 title: Cloud Provider
 id: cloud-provider
 date: 2018-04-12
-full_link: /docs/concepts/cluster-administration/cloud-providers
 short_description: >
   An organization that offers a cloud computing platform.
 

From 7bac2479adce135d1375f90ee1c5b0037e2ee6aa Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Fri, 28 Aug 2020 13:47:18 +0100
Subject: [PATCH 114/496] Revise list of available documentation versions

For older releases, the previous rendering wasn't quite right.
Implement a custom layout for the supported versions list

This commit does NOT remove the shortcode named {{< versions-other >}}
because it is still used in some localizations.
---
 .../en/docs/home/supported-doc-versions.md    | 26 ++-----------
 i18n/en.toml                                  |  9 +++++
 layouts/docs/supported-versions.html          | 39 +++++++++++++++++++
 3 files changed, 52 insertions(+), 22 deletions(-)
 create mode 100644 layouts/docs/supported-versions.html

diff --git a/content/en/docs/home/supported-doc-versions.md b/content/en/docs/home/supported-doc-versions.md
index bd368b2b54..b955f95f56 100644
--- a/content/en/docs/home/supported-doc-versions.md
+++ b/content/en/docs/home/supported-doc-versions.md
@@ -1,30 +1,12 @@
 ---
-title: Supported Versions of the Kubernetes Documentation
-content_type: concept
+title: Available Documentation Versions
+content_type: custom
+layout: supported-versions
 card:
   name: about
   weight: 10
-  title: Supported Versions of the Documentation
+  title: Available Documentation Versions
 ---
 
-<!-- overview -->
-
 This website contains documentation for the current version of Kubernetes
 and the four previous versions of Kubernetes.
-
-
-
-<!-- body -->
-
-## Current version
-
-The current version is
-[{{< param "version" >}}](/).
-
-## Previous versions
-
-{{< versions-other >}}
-
-
-
-
diff --git a/i18n/en.toml b/i18n/en.toml
index c59107c7c8..69b6c645e6 100644
--- a/i18n/en.toml
+++ b/i18n/en.toml
@@ -54,6 +54,15 @@ other = "I AM..."
 [docs_label_users]
 other = "Users"
 
+[docs_version_current]
+other = "(this documentation)"
+
+[docs_version_latest_heading]
+other = "Latest version"
+
+[docs_version_other_heading]
+other = "Older versions"
+
 [examples_heading]
 other = "Examples"
 
diff --git a/layouts/docs/supported-versions.html b/layouts/docs/supported-versions.html
new file mode 100644
index 0000000000..a1c2702741
--- /dev/null
+++ b/layouts/docs/supported-versions.html
@@ -0,0 +1,39 @@
+{{ define "main" }}
+    <div class="td-content">
+    {{ partial "docs/content-page" (dict "ctx" . "page" .) }}
+    {{ $versions := .Page.Param "versions" }}
+    {{ $thisPageRelUri := .Page.RelPermalink }}
+    {{ $thisVersionArray := split (.Page.Param "version") "." }}
+    {{ $.Scratch.Set "version-class" (slice "placeholder") }}
+    {{/* "placeholder" is also used later to check whether we opened the <ul> */}}
+    {{ range $index, $version := $versions }}
+    {{ $.Scratch.Set "version-class" (slice "") }}
+    {{ $versionArray := split .version "." }}
+
+    {{ if eq $index 0 }}
+    <h2 id="version-latest">{{ T "docs_version_latest_heading" }}</h2>
+    <ul>
+    {{ $.Scratch.Set "version-class" ($.Scratch.Get "version-class" | append "version-latest" ) }}
+    {{ end }}
+    {{ if eq $index 1 }}
+    </ul>
+    <h2 id="versions-older">{{ T "docs_version_other_heading" }}</h2>
+    <ul>
+    {{ end }}
+
+    {{ if eq .version ( delimit $thisVersionArray "." ) }}
+    {{ $.Scratch.Set "version-class" ($.Scratch.Get "version-class" | append "version-current" ) }}
+    {{ end }}
+
+    <li class="{{ delimit ( $.Scratch.Get "version-class") " " }}">
+        <a href="{{ .url }}{{ $thisPageRelUri }}">{{ .version }}</a>
+        {{ if eq .version ( delimit $thisVersionArray "." ) }}
+        {{ T "docs_version_current" }}
+        {{ end }}
+    </li>
+    {{ end }}
+    {{ if ne (index ($.Scratch.Get "version-class") 0) "placeholder" }}
+    </ul>
+    {{ end }}
+
+{{ end }}
\ No newline at end of file

From 2e5548831977497992a9a6da0967bd4dc9e6f066 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Fri, 28 Aug 2020 13:49:48 +0100
Subject: [PATCH 115/496] Deprecate {{< versions-other >}} shortcode

Instead of this, use the docs layout named "supported-versions".
---
 layouts/shortcodes/versions-other.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/layouts/shortcodes/versions-other.html b/layouts/shortcodes/versions-other.html
index 4f5e3854f2..2b2b2655dd 100644
--- a/layouts/shortcodes/versions-other.html
+++ b/layouts/shortcodes/versions-other.html
@@ -1,3 +1,4 @@
+{{/* this shortcode is DEPRECATED */}}
 {{ $versions := .Page.Param "versions" }}
 {{ $thisVersion :=  .Page.Param "version" }}
 <ul>

From ee8a9b29c234bdbdac730d59a916820eb445886f Mon Sep 17 00:00:00 2001
From: Julien <whatthefrog@ymail.com>
Date: Fri, 28 Aug 2020 17:09:38 +0200
Subject: [PATCH 116/496] Update basic-stateful-set.md

Cascading Delete: fixup mixup in delete commands
---
 .../docs/tutorials/stateful-application/basic-stateful-set.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tutorials/stateful-application/basic-stateful-set.md b/content/en/docs/tutorials/stateful-application/basic-stateful-set.md
index 9c6edf784f..64073549ef 100644
--- a/content/en/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/en/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -1039,7 +1039,7 @@ Even though you completely deleted the StatefulSet, and all of its Pods, the
 Pods are recreated with their PersistentVolumes mounted, and `web-0` and
 `web-1` continue to serve their hostnames.
 
-Finally, delete the `web` StatefulSet...
+Finally, delete the `nginx` Service...
 
 ```shell
 kubectl delete service nginx
@@ -1047,7 +1047,7 @@ kubectl delete service nginx
 ```
 service "nginx" deleted
 ```
-...and the `nginx` Service:
+...and the `web` StatefulSet:
 ```shell
 kubectl delete statefulset web
 ```

From 94b2f857bbef31cbfd3c8a433d8bb9aa572a4843 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Fri, 28 Aug 2020 16:49:50 +0100
Subject: [PATCH 117/496] Update Kubernetes architectural diagram (#23138)

* Update Kubernetes architectural diagram

Co-Authored-By: Tim Bannister <tim@scalefactory.com>

* Switch Kubernetes Component diagram to SVG

Co-authored-by: David Kypuros <davidkypuros@gmail.com>
---
 .../concepts/architecture/cloud-controller.md |    2 +-
 .../en/docs/concepts/overview/components.md   |    2 +-
 .../images/docs/components-of-kubernetes.svg  | 1182 ++++++-----------
 3 files changed, 412 insertions(+), 774 deletions(-)

diff --git a/content/en/docs/concepts/architecture/cloud-controller.md b/content/en/docs/concepts/architecture/cloud-controller.md
index 9a731b684a..d97fc94a4c 100644
--- a/content/en/docs/concepts/architecture/cloud-controller.md
+++ b/content/en/docs/concepts/architecture/cloud-controller.md
@@ -23,7 +23,7 @@ mechanism that allows different cloud providers to integrate their platforms wit
 
 ## Design
 
-![Kubernetes components](/images/docs/components-of-kubernetes.png)
+![Kubernetes components](/images/docs/components-of-kubernetes.svg)
 
 The cloud controller manager runs in the control plane as a replicated set of processes
 (usually, these are containers in Pods). Each cloud-controller-manager implements
diff --git a/content/en/docs/concepts/overview/components.md b/content/en/docs/concepts/overview/components.md
index 53e6b84c16..eb17e2dd7e 100644
--- a/content/en/docs/concepts/overview/components.md
+++ b/content/en/docs/concepts/overview/components.md
@@ -21,7 +21,7 @@ a complete and working Kubernetes cluster.
 
 Here's the diagram of a Kubernetes cluster with all the components tied together.
 
-![Components of Kubernetes](/images/docs/components-of-kubernetes.png)
+![Components of Kubernetes](/images/docs/components-of-kubernetes.svg)
 
 
 
diff --git a/static/images/docs/components-of-kubernetes.svg b/static/images/docs/components-of-kubernetes.svg
index 0fcbe0aafe..5e7289cb00 100644
--- a/static/images/docs/components-of-kubernetes.svg
+++ b/static/images/docs/components-of-kubernetes.svg
@@ -1,774 +1,412 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<svg
-   xmlns:dc="http://purl.org/dc/elements/1.1/"
-   xmlns:cc="http://creativecommons.org/ns#"
-   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
-   xmlns:svg="http://www.w3.org/2000/svg"
-   xmlns="http://www.w3.org/2000/svg"
-   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
-   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
-   version="1.0"
-   width="4307.5pt"
-   height="1967.5pt"
-   viewBox="0 0 4307.5 1967.5"
-   preserveAspectRatio="xMidYMid meet"
-   id="svg818"
-   sodipodi:docname="components-of-kubernetes.svg"
-   inkscape:version="0.92.4 (unknown)"
-   inkscape:export-filename="/home/fale/www/kubernetes.io/static/images/docs/components-of-kubernetes.png"
-   inkscape:export-xdpi="25.07"
-   inkscape:export-ydpi="25.07">
-  <metadata
-     id="metadata824">
-    <rdf:RDF>
-      <cc:Work
-         rdf:about="">
-        <dc:format>image/svg+xml</dc:format>
-        <dc:type
-           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
-        <dc:title></dc:title>
-      </cc:Work>
-    </rdf:RDF>
-  </metadata>
-  <defs
-     id="defs822">
-    <marker
-       inkscape:isstock="true"
-       style="overflow:visible"
-       id="marker11952"
-       refX="0"
-       refY="0"
-       orient="auto"
-       inkscape:stockid="EmptyTriangleInM">
-      <path
-         transform="matrix(-0.4,0,0,-0.4,1.8,0)"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#646464;stroke-width:1.00000003pt;stroke-opacity:1"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         id="path11950"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:isstock="true"
-       style="overflow:visible"
-       id="marker6867"
-       refX="0"
-       refY="0"
-       orient="auto"
-       inkscape:stockid="EmptyTriangleOutM">
-      <path
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         id="path6865"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleInM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="marker6761"
-       style="overflow:visible"
-       inkscape:isstock="true"
-       inkscape:collect="always">
-      <path
-         id="path6759"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#646464;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(-0.4,0,0,-0.4,1.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleOutM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="marker6659"
-       style="overflow:visible"
-       inkscape:isstock="true"
-       inkscape:collect="always">
-      <path
-         id="path6657"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#646464;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:isstock="true"
-       style="overflow:visible"
-       id="marker6475"
-       refX="0"
-       refY="0"
-       orient="auto"
-       inkscape:stockid="EmptyTriangleOutM"
-       inkscape:collect="always">
-      <path
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         id="path6473"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleInM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="marker6393"
-       style="overflow:visible"
-       inkscape:isstock="true"
-       inkscape:collect="always">
-      <path
-         id="path6391"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(-0.4,0,0,-0.4,1.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleOutM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="marker6315"
-       style="overflow:visible"
-       inkscape:isstock="true"
-       inkscape:collect="always">
-      <path
-         id="path6313"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:isstock="true"
-       style="overflow:visible"
-       id="marker6245"
-       refX="0"
-       refY="0"
-       orient="auto"
-       inkscape:stockid="EmptyTriangleInM"
-       inkscape:collect="always">
-      <path
-         transform="matrix(-0.4,0,0,-0.4,1.8,0)"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         id="path6243"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:isstock="true"
-       style="overflow:visible"
-       id="marker6179"
-       refX="0"
-       refY="0"
-       orient="auto"
-       inkscape:stockid="EmptyTriangleOutM"
-       inkscape:collect="always">
-      <path
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         id="path6177"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleInM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="EmptyTriangleInM"
-       style="overflow:visible"
-       inkscape:isstock="true"
-       inkscape:collect="always">
-      <path
-         id="path5581"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(-0.4,0,0,-0.4,1.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleOutM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="EmptyTriangleOutM"
-       style="overflow:visible"
-       inkscape:isstock="true"
-       inkscape:collect="always">
-      <path
-         id="path5590"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleOutL"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="EmptyTriangleOutL"
-       style="overflow:visible"
-       inkscape:isstock="true">
-      <path
-         id="path5587"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(0.8,0,0,0.8,-4.8,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="Arrow2Lend"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="Arrow2Lend"
-       style="overflow:visible"
-       inkscape:isstock="true">
-      <path
-         id="path5448"
-         style="fill:#000000;fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:0.625;stroke-linejoin:round;stroke-opacity:1"
-         d="M 8.7185878,4.0337352 -2.2072895,0.01601326 8.7185884,-4.0017078 c -1.7454984,2.3720609 -1.7354408,5.6174519 -6e-7,8.035443 z"
-         transform="matrix(-1.1,0,0,-1.1,-1.1,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="Arrow1Lend"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="Arrow1Lend"
-       style="overflow:visible"
-       inkscape:isstock="true">
-      <path
-         id="path5430"
-         d="M 0,0 5,-5 -12.5,0 5,5 Z"
-         style="fill:#000000;fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(-0.8,0,0,-0.8,-10,0)"
-         inkscape:connector-curvature="0" />
-    </marker>
-    <marker
-       inkscape:stockid="EmptyTriangleInM"
-       orient="auto"
-       refY="0"
-       refX="0"
-       id="marker6761-1"
-       style="overflow:visible"
-       inkscape:isstock="true">
-      <path
-         inkscape:connector-curvature="0"
-         id="path6759-3"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#646464;stroke-width:1.00000003pt;stroke-opacity:1"
-         transform="matrix(-0.4,0,0,-0.4,1.8,0)" />
-    </marker>
-    <marker
-       inkscape:isstock="true"
-       style="overflow:visible"
-       id="marker6867-3"
-       refX="0"
-       refY="0"
-       orient="auto"
-       inkscape:stockid="EmptyTriangleOutM">
-      <path
-         inkscape:connector-curvature="0"
-         transform="matrix(0.4,0,0,0.4,-1.8,0)"
-         style="fill:#ffffff;fill-rule:evenodd;stroke:#646464;stroke-width:1.00000003pt;stroke-opacity:1"
-         d="M 5.77,0 -2.88,5 V -5 Z"
-         id="path6865-3" />
-    </marker>
-  </defs>
-  <sodipodi:namedview
-     pagecolor="#ffffff"
-     bordercolor="#666666"
-     borderopacity="1"
-     objecttolerance="10"
-     gridtolerance="10"
-     guidetolerance="10"
-     inkscape:pageopacity="0"
-     inkscape:pageshadow="2"
-     inkscape:window-width="1920"
-     inkscape:window-height="1056"
-     id="namedview820"
-     showgrid="false"
-     inkscape:zoom="0.207876"
-     inkscape:cx="2596.7784"
-     inkscape:cy="1579.5621"
-     inkscape:window-x="0"
-     inkscape:window-y="0"
-     inkscape:window-maximized="1"
-     inkscape:current-layer="g816"
-     showguides="false"
-     fit-margin-top="0"
-     fit-margin-left="0"
-     fit-margin-right="0"
-     fit-margin-bottom="0">
-    <inkscape:grid
-       type="xygrid"
-       id="grid5230"
-       originx="-512.24999"
-       originy="-122.25" />
-  </sodipodi:namedview>
-  <g
-     transform="matrix(0.1,0,0,-0.1,-512.25,2089.75)"
-     id="g816"
-     style="fill:#000000;stroke:none">
-    <rect
-       style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:300, 300;stroke-dashoffset:0;stroke-opacity:1;paint-order:normal"
-       id="rect5408"
-       width="17720"
-       x="5160"
-       y="-20860"
-       transform="scale(1,-1)"
-       ry="374.16977"
-       height="19600" />
-    <rect
-       style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:300, 300;stroke-dashoffset:0;stroke-opacity:1;paint-order:normal"
-       id="rect5380"
-       width="23629.967"
-       height="9317.7373"
-       x="24530.031"
-       y="-11497.74"
-       transform="scale(1,-1)"
-       ry="374.16977" />
-    <path
-       d="m 36544,20020 c -204,-17 -443,-67 -641,-134 -334,-113 -671,-313 -916,-546 l -88,-83 -42,30 c -54,39 -186,105 -263,131 -61,21 -185,46 -284,57 -79,9 -279,-12 -379,-41 -419,-119 -740,-481 -801,-901 l -12,-83 -37,-5 c -101,-17 -282,-68 -388,-110 -508,-203 -918,-651 -1067,-1167 -103,-358 -96,-737 20,-1087 77,-229 203,-446 366,-631 261,-296 636,-508 1029,-581 l 114,-22 3035,-8 c 2987,-8 3037,-8 3180,11 369,51 611,168 841,408 187,195 296,404 356,682 28,129 25,390 -6,529 -60,273 -188,502 -386,689 -203,192 -452,314 -732,358 l -111,18 -11,120 c -23,235 -68,444 -139,642 -133,369 -317,665 -592,948 -408,421 -963,695 -1547,765 -123,15 -384,21 -499,11 z m 371,-230 c 231,-20 433,-64 629,-137 346,-129 624,-310 878,-571 270,-277 448,-572 564,-932 25,-80 50,-154 55,-165 24,-52 59,-322 65,-502 l 7,-188 95,3 c 313,11 608,-107 830,-330 90,-91 135,-150 190,-248 20,-36 39,-67 43,-70 4,-3 18,-34 32,-70 84,-223 95,-465 31,-700 -114,-420 -473,-744 -904,-815 -71,-12 -558,-14 -3060,-14 -1727,-1 -3032,3 -3110,8 -230,16 -414,67 -620,172 -249,126 -446,302 -601,535 -310,467 -352,1081 -108,1580 249,509 751,855 1294,892 l 100,7 6,140 c 8,158 28,243 85,358 53,105 112,184 202,268 124,116 285,200 442,230 88,16 272,14 354,-5 151,-35 336,-138 440,-245 l 49,-50 115,120 c 495,517 1201,788 1897,729 z"
-       id="path58"
-       style="fill:#3966a0;fill-opacity:1"
-       inkscape:connector-curvature="0" />
-    <path
-       d="m 5860,17027 v -1473 l 58,-24 c 31,-13 84,-36 117,-51 88,-40 293,-112 430,-152 l 120,-35 3,-60 3,-60 142,-60 c 215,-90 441,-169 540,-187 l 37,-7 v -63 -62 l 68,-28 c 37,-16 94,-41 127,-56 247,-111 643,-217 985,-264 179,-25 591,-31 777,-11 440,47 781,140 1248,340 541,233 910,327 1397,356 537,32 1137,-83 1672,-320 63,-27 117,-50 120,-50 3,0 6,671 6,1490 v 1490 h -365 -365 v 190 190 h -360 -360 v 190 190 H 9060 5860 Z m 6320,1243 v -150 H 9385 6590 v -1371 -1371 l -27,6 c -122,29 -376,116 -555,192 l -68,29 v 1408 1407 h 3120 3120 z m 730,-380 v -150 l -2797,-2 -2798,-3 -3,-1367 c -2,-1084 -5,-1368 -15,-1368 -44,0 -422,131 -564,196 l -73,33 v 1399 c 0,769 3,1402 7,1405 3,4 1410,7 3125,7 h 3118 z m 720,-1621 c 0,-1109 -3,-1390 -12,-1386 -275,113 -408,158 -635,216 -316,80 -567,112 -888,112 -547,0 -986,-98 -1586,-354 -486,-208 -812,-298 -1231,-343 -208,-22 -623,-15 -818,15 -355,53 -670,142 -987,278 l -83,35 v 1409 1409 h 3120 3120 z"
-       id="path166"
-       style="fill:#3966a0;fill-opacity:1"
-       inkscape:connector-curvature="0" />
-    <g
-       transform="translate(7600,0.00221901)"
-       id="g898-5-7">
-      <path
-         inkscape:connector-curvature="0"
-         id="path566-3-0"
-         d="m 26504.798,6814.2167 c -327.613,0.08 -367.013,-3.213 -394.952,-17.212 -19.958,-10.001 -41.912,-32.0019 -51.891,-52.0019 -16.963,-33 -17.949,-117.005 -17.949,-1330.005 0,-1213 0.986,-1297.005 17.949,-1330.005 34.925,-72 21.961,-70.998 622.671,-67.998 525.87,3 535.852,3.009 563.793,24.009 14.968,10.999 33.918,31.999 39.905,45 9.977,19 12.98,312.99 12.98,1329.99 v 1306.011 l -22.949,33.999 c -12.973,18.9999 -37.931,38.9959 -56.89,45.9959 -24.946,9 -178.617,11.997 -553.809,11.997 -59.373,0.127 -112.057,0.21 -158.858,0.217 z m -34.306,-101.0159 c 62.444,0.105 130.807,0.08 202.153,-0.202 l 519.884,-3.003 0.629,-271.348 h -1050.643 c 1.164,165.372 2.614,268.124 4.254,269.356 2.245,3 136.39,4.872 323.723,5.2 z m -328.65,-379.35 h 1051.564 l 0.644,-280.093 h -1053.23 c 0.307,98.573 0.591,200.227 1.023,280.093 z m -1.403,-384.888 h 1053.844 l 0.644,-277.193 H 26140.06 c 0.105,95.046 0.172,190.883 0.381,277.193 z m -0.494,-381.987 h 1055.232 l 0.337,-145.972 c 1.996,-1034 0,-1291.013 -9.969,-1298.013 -14.968,-9 -1005.835,-10.992 -1029.784,-1.992 -13.97,6 -15.976,129.003 -15.976,1293.003 0,54.104 0.127,100.532 0.157,152.974 z"
-         style="fill:#2c5aa0;stroke-width:0.99892712" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path568-5-9"
-         d="m 26938.07,5409.9978 v -35 h 74.839 74.839 v 35 35 h -74.839 -74.839 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path570-6-3"
-         d="m 26619.754,5023.9978 c -191.588,-38 -252.457,-291 -100.783,-421 97.789,-85 230.504,-78 323.305,15 73.841,74 90.805,143 60.869,243 -35.923,120 -155.666,189 -283.391,163 z m 154.668,-129 c 84.817,-84 51.888,-216 -63.863,-251 -34.925,-10 -47.897,-9 -86.814,5 -115.751,45 -128.723,200 -22.95,267 51.888,32 127.725,22 173.627,-21 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path586-2-6"
-         d="m 27614.616,6778.9977 c -60.869,-32.9999 -57.876,31 -57.876,-1178.9999 0,-1221 -3.991,-1147 63.863,-1179 29.936,-14 96.792,-16 604.7,-16 h 569.776 l -2.994,-47 -2.993,-48 -206.557,-5 c -193.583,-5 -208.551,-6 -227.511,-26 -48.894,-48 -47.897,-172 0,-224 l 27.94,-30 h 742.405 c 687.522,0 743.402,2 762.361,18 33.927,27 43.906,56 43.906,122 0,68 -16.964,110 -51.889,128 -14.967,8 -89.807,13 -222.521,15 l -199.571,2 v 50 50 l 593.724,5 c 326.298,3 594.721,6 596.717,8 0.998,1 10.976,17 21.953,35 19.957,31 19.957,53 19.957,1139 0,695 -3.991,1116 -9.979,1132 -4.989,14 -23.948,35 -41.909,46 -32.93,19.9999 -50.891,19.9999 -1514.745,19.9999 -1291.225,-1 -1485.807,-3 -1508.757,-16 z m 2973.609,-1175.9999 1.995,-1098 h -1466.847 -1466.847 v 1093 c 0,602 2.993,1097 6.985,1100 2.993,4 662.576,6 1463.854,5 l 1457.866,-3 z m -1225.367,-1243 v -44 l -51.888,-3 c -28.938,-2 -136.706,-2 -239.485,0 l -187.597,3 v 44 44 l 52.886,3 c 27.94,2 135.708,2 239.485,0 l 186.599,-3 z m 473.982,-200 v -40 h -708.478 -708.477 l -2.994,28 c -6.985,61 -56.877,57 713.467,55 l 706.482,-3 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path588-9-0"
-         d="m 27796.225,5699.9978 v -855 h 1327.148 1327.148 v 855 855 h -1327.148 -1327.148 z" />
-      <path
-         sodipodi:nodetypes="cccccccc"
-         style="fill:#3771c8;stroke-width:0.70368761"
-         id="path588-7-2-2"
-         d="m 27796.225,5699.9978 v -855 l 261.544,0.245 1055.626,1709.755 v 0 h -658.585 -658.585 z"
-         inkscape:connector-curvature="0" />
-    </g>
-    <g
-       id="g5228"
-       transform="matrix(0.95383647,0,0,1.0010929,1796.8907,29.157905)"
-       style="stroke:#3966a0;stroke-opacity:1">
-      <rect
-         transform="scale(1,-1)"
-         ry="374.16959"
-         y="-10460.273"
-         x="33341.402"
-         height="1579.6681"
-         width="4799.4004"
-         id="rect540-1"
-         style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75.66401672;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:none;stroke-opacity:1;paint-order:normal" />
-      <text
-         transform="scale(0.99999997,-0.99999997)"
-         xml:space="preserve"
-         style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1"
-         x="34273.75"
-         y="-9385.6641"
-         id="text1130-0"><tspan
-           sodipodi:role="line"
-           id="tspan1128-1"
-           x="34273.75"
-           y="-9385.6641"
-           style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:800px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1">kubelet</tspan></text>
-    </g>
-    <g
-       id="g5228-9"
-       transform="matrix(0.95383647,0,0,1.0010929,2021.6822,-1771.7122)">
-      <rect
-         transform="scale(1,-1)"
-         ry="374.16959"
-         y="-10142.432"
-         x="33173.938"
-         height="1207.8866"
-         width="4799.3984"
-         id="rect540-1-0"
-         style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75.66401672;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:none;stroke-opacity:1;paint-order:normal" />
-      <text
-         transform="scale(1,-1)"
-         xml:space="preserve"
-         style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-         x="33439.191"
-         y="-9318.832"
-         id="text1130-0-5"><tspan
-           sodipodi:role="line"
-           id="tspan1128-1-6"
-           x="33439.191"
-           y="-9318.832"
-           style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:800px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5">kube-proxy</tspan></text>
-    </g>
-    <g
-       transform="translate(15557.264,28.971911)"
-       id="g898-5-7-7">
-      <path
-         inkscape:connector-curvature="0"
-         id="path566-3-0-4"
-         d="m 26504.798,6814.2167 c -327.613,0.08 -367.013,-3.213 -394.952,-17.212 -19.958,-10.001 -41.912,-32.0019 -51.891,-52.0019 -16.963,-33 -17.949,-117.005 -17.949,-1330.005 0,-1213 0.986,-1297.005 17.949,-1330.005 34.925,-72 21.961,-70.998 622.671,-67.998 525.87,3 535.852,3.009 563.793,24.009 14.968,10.999 33.918,31.999 39.905,45 9.977,19 12.98,312.99 12.98,1329.99 v 1306.011 l -22.949,33.999 c -12.973,18.9999 -37.931,38.9959 -56.89,45.9959 -24.946,9 -178.617,11.997 -553.809,11.997 -59.373,0.127 -112.057,0.21 -158.858,0.217 z m -34.306,-101.0159 c 62.444,0.105 130.807,0.08 202.153,-0.202 l 519.884,-3.003 0.629,-271.348 h -1050.643 c 1.164,165.372 2.614,268.124 4.254,269.356 2.245,3 136.39,4.872 323.723,5.2 z m -328.65,-379.35 h 1051.564 l 0.644,-280.093 h -1053.23 c 0.307,98.573 0.591,200.227 1.023,280.093 z m -1.403,-384.888 h 1053.844 l 0.644,-277.193 H 26140.06 c 0.105,95.046 0.172,190.883 0.381,277.193 z m -0.494,-381.987 h 1055.232 l 0.337,-145.972 c 1.996,-1034 0,-1291.013 -9.969,-1298.013 -14.968,-9 -1005.835,-10.992 -1029.784,-1.992 -13.97,6 -15.976,129.003 -15.976,1293.003 0,54.104 0.127,100.532 0.157,152.974 z"
-         style="fill:#2c5aa0;stroke-width:0.99892712" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path568-5-9-0"
-         d="m 26938.07,5409.9978 v -35 h 74.839 74.839 v 35 35 h -74.839 -74.839 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path570-6-3-6"
-         d="m 26619.754,5023.9978 c -191.588,-38 -252.457,-291 -100.783,-421 97.789,-85 230.504,-78 323.305,15 73.841,74 90.805,143 60.869,243 -35.923,120 -155.666,189 -283.391,163 z m 154.668,-129 c 84.817,-84 51.888,-216 -63.863,-251 -34.925,-10 -47.897,-9 -86.814,5 -115.751,45 -128.723,200 -22.95,267 51.888,32 127.725,22 173.627,-21 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path586-2-6-4"
-         d="m 27614.616,6778.9977 c -60.869,-32.9999 -57.876,31 -57.876,-1178.9999 0,-1221 -3.991,-1147 63.863,-1179 29.936,-14 96.792,-16 604.7,-16 h 569.776 l -2.994,-47 -2.993,-48 -206.557,-5 c -193.583,-5 -208.551,-6 -227.511,-26 -48.894,-48 -47.897,-172 0,-224 l 27.94,-30 h 742.405 c 687.522,0 743.402,2 762.361,18 33.927,27 43.906,56 43.906,122 0,68 -16.964,110 -51.889,128 -14.967,8 -89.807,13 -222.521,15 l -199.571,2 v 50 50 l 593.724,5 c 326.298,3 594.721,6 596.717,8 0.998,1 10.976,17 21.953,35 19.957,31 19.957,53 19.957,1139 0,695 -3.991,1116 -9.979,1132 -4.989,14 -23.948,35 -41.909,46 -32.93,19.9999 -50.891,19.9999 -1514.745,19.9999 -1291.225,-1 -1485.807,-3 -1508.757,-16 z m 2973.609,-1175.9999 1.995,-1098 h -1466.847 -1466.847 v 1093 c 0,602 2.993,1097 6.985,1100 2.993,4 662.576,6 1463.854,5 l 1457.866,-3 z m -1225.367,-1243 v -44 l -51.888,-3 c -28.938,-2 -136.706,-2 -239.485,0 l -187.597,3 v 44 44 l 52.886,3 c 27.94,2 135.708,2 239.485,0 l 186.599,-3 z m 473.982,-200 v -40 h -708.478 -708.477 l -2.994,28 c -6.985,61 -56.877,57 713.467,55 l 706.482,-3 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path588-9-0-7"
-         d="m 27796.225,5699.9978 v -855 h 1327.148 1327.148 v 855 855 h -1327.148 -1327.148 z" />
-      <path
-         sodipodi:nodetypes="cccccccc"
-         style="fill:#3771c8;stroke-width:0.70368761"
-         id="path588-7-2-2-4"
-         d="m 27796.225,5699.9978 v -855 l 261.544,0.245 1055.626,1709.755 v 0 h -658.585 -658.585 z"
-         inkscape:connector-curvature="0" />
-    </g>
-    <g
-       id="g5228-8"
-       transform="matrix(0.9538365,0,0,1.0010929,9754.1549,58.127911)"
-       style="stroke:#3966a0;stroke-opacity:1">
-      <rect
-         transform="scale(1,-1)"
-         ry="374.16959"
-         y="-10460.273"
-         x="33341.402"
-         height="1579.6681"
-         width="4799.4004"
-         id="rect540-1-5"
-         style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75.66401672;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:none;stroke-opacity:1;paint-order:normal" />
-      <text
-         transform="scale(0.99999997,-0.99999997)"
-         xml:space="preserve"
-         style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1"
-         x="34273.75"
-         y="-9385.6641"
-         id="text1130-0-8"><tspan
-           sodipodi:role="line"
-           id="tspan1128-1-2"
-           x="34273.75"
-           y="-9385.6641"
-           style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:800px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1">kubelet</tspan></text>
-    </g>
-    <g
-       id="g5228-9-6"
-       transform="matrix(0.9538365,0,0,1.0010929,9978.9469,-1742.7421)"
-       style="stroke:#3966a0;stroke-opacity:1">
-      <rect
-         transform="scale(1,-1)"
-         ry="374.16959"
-         y="-10142.432"
-         x="33173.938"
-         height="1207.8866"
-         width="4799.3984"
-         id="rect540-1-0-0"
-         style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75.66401672;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:none;stroke-opacity:1;paint-order:normal" />
-      <text
-         transform="scale(1,-1)"
-         xml:space="preserve"
-         style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1"
-         x="33439.191"
-         y="-9318.832"
-         id="text1130-0-5-6"><tspan
-           sodipodi:role="line"
-           id="tspan1128-1-6-6"
-           x="33439.191"
-           y="-9318.832"
-           style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:800px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1">kube-proxy</tspan></text>
-    </g>
-    <g
-       transform="translate(234.5822,-154.259)"
-       id="g898-5-7-4">
-      <path
-         inkscape:connector-curvature="0"
-         id="path566-3-0-6"
-         d="m 26504.798,6814.2167 c -327.613,0.08 -367.013,-3.213 -394.952,-17.212 -19.958,-10.001 -41.912,-32.0019 -51.891,-52.0019 -16.963,-33 -17.949,-117.005 -17.949,-1330.005 0,-1213 0.986,-1297.005 17.949,-1330.005 34.925,-72 21.961,-70.998 622.671,-67.998 525.87,3 535.852,3.009 563.793,24.009 14.968,10.999 33.918,31.999 39.905,45 9.977,19 12.98,312.99 12.98,1329.99 v 1306.011 l -22.949,33.999 c -12.973,18.9999 -37.931,38.9959 -56.89,45.9959 -24.946,9 -178.617,11.997 -553.809,11.997 -59.373,0.127 -112.057,0.21 -158.858,0.217 z m -34.306,-101.0159 c 62.444,0.105 130.807,0.08 202.153,-0.202 l 519.884,-3.003 0.629,-271.348 h -1050.643 c 1.164,165.372 2.614,268.124 4.254,269.356 2.245,3 136.39,4.872 323.723,5.2 z m -328.65,-379.35 h 1051.564 l 0.644,-280.093 h -1053.23 c 0.307,98.573 0.591,200.227 1.023,280.093 z m -1.403,-384.888 h 1053.844 l 0.644,-277.193 H 26140.06 c 0.105,95.046 0.172,190.883 0.381,277.193 z m -0.494,-381.987 h 1055.232 l 0.337,-145.972 c 1.996,-1034 0,-1291.013 -9.969,-1298.013 -14.968,-9 -1005.835,-10.992 -1029.784,-1.992 -13.97,6 -15.976,129.003 -15.976,1293.003 0,54.104 0.127,100.532 0.157,152.974 z"
-         style="fill:#2c5aa0;stroke-width:0.99892712" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path568-5-9-2"
-         d="m 26938.07,5409.9978 v -35 h 74.839 74.839 v 35 35 h -74.839 -74.839 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path570-6-3-8"
-         d="m 26619.754,5023.9978 c -191.588,-38 -252.457,-291 -100.783,-421 97.789,-85 230.504,-78 323.305,15 73.841,74 90.805,143 60.869,243 -35.923,120 -155.666,189 -283.391,163 z m 154.668,-129 c 84.817,-84 51.888,-216 -63.863,-251 -34.925,-10 -47.897,-9 -86.814,5 -115.751,45 -128.723,200 -22.95,267 51.888,32 127.725,22 173.627,-21 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path586-2-6-9"
-         d="m 27614.616,6778.9977 c -60.869,-32.9999 -57.876,31 -57.876,-1178.9999 0,-1221 -3.991,-1147 63.863,-1179 29.936,-14 96.792,-16 604.7,-16 h 569.776 l -2.994,-47 -2.993,-48 -206.557,-5 c -193.583,-5 -208.551,-6 -227.511,-26 -48.894,-48 -47.897,-172 0,-224 l 27.94,-30 h 742.405 c 687.522,0 743.402,2 762.361,18 33.927,27 43.906,56 43.906,122 0,68 -16.964,110 -51.889,128 -14.967,8 -89.807,13 -222.521,15 l -199.571,2 v 50 50 l 593.724,5 c 326.298,3 594.721,6 596.717,8 0.998,1 10.976,17 21.953,35 19.957,31 19.957,53 19.957,1139 0,695 -3.991,1116 -9.979,1132 -4.989,14 -23.948,35 -41.909,46 -32.93,19.9999 -50.891,19.9999 -1514.745,19.9999 -1291.225,-1 -1485.807,-3 -1508.757,-16 z m 2973.609,-1175.9999 1.995,-1098 h -1466.847 -1466.847 v 1093 c 0,602 2.993,1097 6.985,1100 2.993,4 662.576,6 1463.854,5 l 1457.866,-3 z m -1225.367,-1243 v -44 l -51.888,-3 c -28.938,-2 -136.706,-2 -239.485,0 l -187.597,3 v 44 44 l 52.886,3 c 27.94,2 135.708,2 239.485,0 l 186.599,-3 z m 473.982,-200 v -40 h -708.478 -708.477 l -2.994,28 c -6.985,61 -56.877,57 713.467,55 l 706.482,-3 z" />
-      <path
-         inkscape:connector-curvature="0"
-         style="fill:#2c5aa0;stroke-width:0.99892706"
-         id="path588-9-0-6"
-         d="m 27796.225,5699.9978 v -855 h 1327.148 1327.148 v 855 855 h -1327.148 -1327.148 z" />
-      <path
-         sodipodi:nodetypes="cccccccc"
-         style="fill:#3771c8;stroke-width:0.70368761"
-         id="path588-7-2-2-0"
-         d="m 27796.225,5699.9978 v -855 l 261.544,0.245 1055.626,1709.755 v 0 h -658.585 -658.585 z"
-         inkscape:connector-curvature="0" />
-    </g>
-    <g
-       id="g5228-7"
-       transform="matrix(0.9538365,0,0,1.0010929,-5568.5268,-125.103)"
-       style="stroke:#3966a0;stroke-opacity:1">
-      <rect
-         transform="scale(1,-1)"
-         ry="374.16959"
-         y="-10460.273"
-         x="33341.402"
-         height="1579.6681"
-         width="4799.4004"
-         id="rect540-1-01"
-         style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75.66401672;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:none;stroke-opacity:1;paint-order:normal" />
-      <text
-         transform="scale(0.99999997,-0.99999997)"
-         xml:space="preserve"
-         style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1"
-         x="34273.75"
-         y="-9385.6641"
-         id="text1130-0-0"><tspan
-           sodipodi:role="line"
-           id="tspan1128-1-1"
-           x="34273.75"
-           y="-9385.6641"
-           style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:800px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1">kubelet</tspan></text>
-    </g>
-    <g
-       id="g5228-9-3"
-       transform="matrix(0.9538365,0,0,1.0010929,-5343.7348,-1925.973)"
-       style="stroke:#3966a0;stroke-opacity:1">
-      <rect
-         transform="scale(1,-1)"
-         ry="374.16959"
-         y="-10142.432"
-         x="33173.938"
-         height="1207.8866"
-         width="4799.3984"
-         id="rect540-1-0-7"
-         style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:75.66401672;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;stroke-dasharray:none;stroke-opacity:1;paint-order:normal" />
-      <text
-         transform="scale(1,-1)"
-         xml:space="preserve"
-         style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1"
-         x="33439.191"
-         y="-9318.832"
-         id="text1130-0-5-7"><tspan
-           sodipodi:role="line"
-           id="tspan1128-1-6-2"
-           x="33439.191"
-           y="-9318.832"
-           style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:800px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke:#3966a0;stroke-width:7.5;stroke-opacity:1">kube-proxy</tspan></text>
-    </g>
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="33737.383"
-       y="-2473.6172"
-       id="text5384"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         id="tspan5382"
-         x="33737.383"
-         y="-2473.6172"
-         style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:700px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab Bold';fill:#646464;fill-opacity:1;stroke-width:7.5">Kubernetes Nodes</tspan></text>
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="6566.0039"
-       y="-19571.555"
-       id="text5384-3"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         id="tspan5382-7"
-         x="6566.0039"
-         y="-19571.555"
-         style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:699.99993896px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab Bold';fill:#646464;fill-opacity:1;stroke-width:7.5">Kubernetes Control Plane</tspan></text>
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="35042.906"
-       y="-16825.971"
-       id="text5406"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         id="tspan5404"
-         x="35042.906"
-         y="-16825.971"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:700px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5">Cloud</tspan></text>
-    <path
-       style="fill:#3966a0;fill-opacity:1;stroke-width:0.99999994"
-       inkscape:connector-curvature="0"
-       d="m 14260,17027 v -1473 l 58,-24 c 31,-13 84,-36 117,-51 88,-40 293,-112 430,-152 l 120,-35 3,-60 3,-60 142,-60 c 215,-90 441,-169 540,-187 l 37,-7 v -63 -62 l 68,-28 c 37,-16 94,-41 127,-56 247,-111 643,-217 985,-264 179,-25 591,-31 777,-11 440,47 781,140 1248,340 541,233 910,327 1397,356 537,32 1137,-83 1672,-320 63,-27 117,-50 120,-50 3,0 6,671 6,1490 v 1490 h -365 -365 v 190 190 h -360 -360 v 190 190 h -3200 -3200 z m 6320,1243 v -150 h -2795 -2795 v -1371 -1371 l -27,6 c -122,29 -376,116 -555,192 l -68,29 v 1408 1407 h 3120 3120 z m 730,-380 v -150 l -2797,-2 -2798,-3 -3,-1367 c -2,-1084 -5,-1368 -15,-1368 -44,0 -422,131 -564,196 l -73,33 v 1399 c 0,769 3,1402 7,1405 3,4 1410,7 3125,7 h 3118 z m 720,-1621 c 0,-1109 -3,-1390 -12,-1386 -275,113 -408,158 -635,216 -316,80 -567,112 -888,112 -547,0 -986,-98 -1586,-354 -486,-208 -812,-298 -1231,-343 -208,-22 -623,-15 -818,15 -355,53 -670,142 -987,278 l -83,35 v 1409 1409 h 3120 3120 z"
-       id="path166-4" />
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-end:url(#EmptyTriangleOutM)"
-       d="m 22025.844,16908.074 9467.602,-36.445"
-       id="path5425"
-       inkscape:connector-curvature="0"
-       sodipodi:nodetypes="cc" />
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="15908.43"
-       y="-16740.76"
-       id="text5945"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         id="tspan5943"
-         x="15908.43"
-         y="-16740.76"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5">cloud-controller</tspan><tspan
-         sodipodi:role="line"
-         x="15908.43"
-         y="-15765.76"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5"
-         id="tspan5953">manager</tspan></text>
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="7517.4902"
-       y="-16773.648"
-       id="text5945-1"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         id="tspan5943-8"
-         x="7517.4902"
-         y="-16773.648"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5">kube-controller</tspan><tspan
-         sodipodi:role="line"
-         x="7517.4902"
-         y="-15798.648"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5"
-         id="tspan5953-3">manager</tspan></text>
-    <path
-       style="fill:#3966a0;fill-opacity:1;stroke-width:0.99999994"
-       inkscape:connector-curvature="0"
-       d="m 13887.5,5553.486 v -1473 l 58,-24 c 31,-13 84,-36 117,-51 88,-40 293,-112 430,-152 l 120,-35 3,-60 3,-60 142,-60 c 215,-90 441,-169 540,-187 l 37,-7 v -63 -62 l 68,-28 c 37,-16 94,-41 127,-56 247,-111 643,-217 985,-264 179,-25 591,-31 777,-11 440,47 781,140 1248,340 541,233 910,327 1397,356 537,32 1137,-83 1672,-320 63,-27 117,-50 120,-50 3,0 6,671 6,1490 v 1490 h -365 -365 v 190 190 h -360 -360 v 190 190 h -3200 -3200 z m 6320,1243 v -150 h -2795 -2795 v -1371 -1371 l -27,6 c -122,29 -376,116 -555,192 l -68,29 v 1408 1407 h 3120 3120 z m 730,-380 v -150 l -2797,-2 -2798,-3 -3,-1367 c -2,-1084 -5,-1368 -15,-1368 -44,0 -422,131 -564,196 l -73,33 v 1399 c 0,769 3,1402 7,1405 3,4 1410,7 3125,7 h 3118 z m 720,-1621 c 0,-1109 -3,-1390 -12,-1386 -275,113 -408,158 -635,216 -316,80 -567,112 -888,112 -547,0 -986,-98 -1586,-354 -486,-208 -812,-298 -1231,-343 -208,-22 -623,-15 -818,15 -355,53 -670,142 -987,278 l -83,35 v 1409 1409 h 3120 3120 z"
-       id="path166-42" />
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="15666.416"
-       y="-4661.1484"
-       id="text5945-1-2"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         x="15666.416"
-         y="-4661.1484"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5"
-         id="tspan5953-3-5">kube-scheduler</tspan></text>
-    <path
-       style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:112.5;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1;paint-order:normal"
-       d="M 13912.5,11649.886 15878.523,12330 H 21825 V 9592.5 h -7912.5 z"
-       id="rect6014"
-       inkscape:connector-curvature="0"
-       sodipodi:nodetypes="cccccc" />
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="15070.075"
-       y="-10632.383"
-       id="text5945-1-2-1"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         x="15070.075"
-         y="-10632.383"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5"
-         id="tspan5953-3-5-7">kube-api-server</tspan></text>
-    <path
-       id="rect6035-5"
-       style="fill:#ffffff;fill-opacity:1;stroke:#3966a0;stroke-width:112.5;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1;paint-order:normal"
-       d="m 9190.8111,9543.844 c 1459.5379,0 2634.5449,-501.379 2634.5449,-1124.168 v -15.703 c 0,-622.7888 -1175.007,-1124.1678 -2634.5449,-1124.1678 -1459.538,0 -2634.5453,501.379 -2634.5453,1124.1678 v 15.703 c 0,622.789 1175.0073,1124.168 2634.5453,1124.168 z m 0.145,1.252 c 1459.5379,0 2634.5449,-501.379 2634.5449,-1124.1686 v -765.703 c 0,-622.789 -1175.007,-1124.168 -2634.5449,-1124.168 -1459.538,0 -2634.5453,501.379 -2634.5453,1124.168 v 765.703 c 0,622.7896 1175.0073,1124.1686 2634.5453,1124.1686 z m 3.0355,1.373 c 1459.5374,0 2634.5444,-501.379 2634.5444,-1124.1691 V 6947.7535 c 0,-622.789 -1175.007,-1124.168 -2634.5444,-1124.168 -1459.538,0 -2634.5453,501.379 -2634.5453,1124.168 v 1474.5464 c 0,622.7901 1175.0073,1124.1691 2634.5453,1124.1691 z m 0,0 c 1459.5374,0 2634.5444,-501.379 2634.5444,-1124.169 V 6197.754 c 0,-622.789 -1175.007,-1124.168 -2634.5444,-1124.168 -1459.5379,0 -2634.5452,501.379 -2634.5452,1124.168 V 8422.3 c 0,622.79 1175.0073,1124.169 2634.5452,1124.169 z m -1.7187,-7.832 c 1459.5381,0 2634.5451,-501.379 2634.5451,-1124.1679 V 3828.2589 c 0,-622.7888 -1175.007,-1124.1676 -2634.5451,-1124.1676 -1459.5381,0 -2634.5454,501.3788 -2634.5454,1124.1676 v 4586.2102 c 0,622.7889 1175.0073,1124.1679 2634.5454,1124.1679 z"
-       inkscape:connector-curvature="0" />
-    <text
-       xml:space="preserve"
-       style="font-style:normal;font-weight:normal;font-size:300px;line-height:1.25;font-family:sans-serif;letter-spacing:0px;word-spacing:0px;fill:#3966a0;fill-opacity:1;stroke:none;stroke-width:7.5"
-       x="8409.7988"
-       y="-3744.3438"
-       id="text5945-1-2-1-9"
-       transform="scale(1,-1)"><tspan
-         sodipodi:role="line"
-         x="8409.7988"
-         y="-3744.3438"
-         style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:780px;font-family:'Roboto Slab';-inkscape-font-specification:'Roboto Slab';fill:#3966a0;fill-opacity:1;stroke-width:7.5"
-         id="tspan5953-3-5-7-8">etcd</tspan></text>
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-start:url(#EmptyTriangleInM);marker-end:url(#marker6179)"
-       d="m 18364.313,12303.007 v 2291.03"
-       id="path6119"
-       inkscape:connector-curvature="0" />
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-start:url(#marker6245);marker-end:url(#marker6315)"
-       d="m 11473.186,15081.106 3129.871,-3129.87"
-       id="path6235"
-       inkscape:connector-curvature="0" />
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-start:url(#marker6393);marker-end:url(#marker6475)"
-       d="M 13890.493,9849.6218 11295.427,9154.2765"
-       id="path6383"
-       inkscape:connector-curvature="0" />
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-start:url(#marker11952);marker-end:url(#marker6659)"
-       d="M 18183.917,9579.0278 V 7035.444"
-       id="path6555"
-       inkscape:connector-curvature="0" />
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-start:url(#marker6761);marker-end:url(#marker6867)"
-       d="m 26175.46,9687.2655 -2381.227,18.0396 -18.039,1389.0489 h -1966.317"
-       id="path6751"
-       inkscape:connector-curvature="0"
-       sodipodi:nodetypes="cccc" />
-    <path
-       style="fill:none;stroke:#646464;stroke-width:112.5;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1;marker-start:url(#marker6761-1);marker-end:url(#marker6867-3)"
-       d="m 26175.46,7576.6317 -2381.227,18.04 -18.039,3499.6823 h -1966.317"
-       id="path6751-7"
-       inkscape:connector-curvature="0"
-       sodipodi:nodetypes="cccc" />
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="svg277" width="331.31mm" height="154.79mm" version="1.1" viewBox="0 0 1252.2 585.04" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
+ <title id="title3597">Kubernetes components</title>
+ <metadata id="metadata2">
+  <rdf:RDF>
+   <cc:Work rdf:about="Components of Kubernetes">
+    <dc:format>image/svg+xml</dc:format>
+    <dc:type rdf:resource="http://purl.org/dc/dcmitype/StillImage"/>
+    <dc:title>Kubernetes components</dc:title>
+    <dc:creator>
+     <cc:Agent>
+      <dc:title>Cloud Native Computing Foundation</dc:title>
+     </cc:Agent>
+    </dc:creator>
+   </cc:Work>
+  </rdf:RDF>
+ </metadata>
+ <defs id="defs4">
+  <marker id="Arrow2Mend" overflow="visible" orient="auto">
+   <path id="path1645" transform="scale(-.6)" d="m8.7186 4.0337-10.926-4.0177 10.926-4.0177c-1.7455 2.3721-1.7354 5.6175-6e-7 8.0354z" fill-rule="evenodd" stroke="#000" stroke-linejoin="round" stroke-width=".625"/>
+  </marker>
+  <style id="style2">.cls-1{font-size:254.54px;font-family:'Open Sans', sans-serif;}.cls-10,.cls-2,.cls-3,.cls-5,.cls-6,.cls-7,.cls-9{fill:none;}.cls-3,.cls-9{stroke:blue;}.cls-10,.cls-3{stroke-miterlimit:10;}.cls-4{fill-opacity:0;}.cls-4,.cls-8{fill-rule:evenodd;}.cls-5{stroke:#b14d9d;}.cls-5,.cls-6,.cls-7,.cls-9{stroke-linejoin:round;}.cls-5,.cls-6{stroke-width:2px;stroke-dasharray:8 6;}.cls-6{stroke:#009444;}.cls-10,.cls-7{stroke:#000;}.cls-8{fill:#e6e6e6;}.cls-11{fill:#326ce5;}.cls-12,.cls-22{font-size:12px;}.cls-12,.cls-13,.cls-15,.cls-16,.cls-17,.cls-18,.cls-19,.cls-20,.cls-21,.cls-23{fill:#fff;}.cls-12,.cls-15,.cls-16,.cls-17,.cls-18,.cls-19,.cls-20,.cls-21,.cls-22,.cls-23{font-family:'Open Sans', sans-serif;}.cls-14,.cls-15,.cls-16,.cls-17,.cls-18,.cls-19,.cls-20,.cls-21,.cls-23{isolation:isolate;}.cls-15{font-size:11.77px;}.cls-16{font-size:11.14px;}.cls-17{font-size:11.07px;}.cls-18{font-size:10.36px;}.cls-19{font-size:10.71px;}.cls-20{font-size:10.06px;}.cls-21{font-size:11.31px;}.cls-23{font-size:9.71px;}</style>
+ </defs>
+ <g id="layer3" transform="translate(-138.94 -55.356)">
+  <rect id="rect1045" x="154.05" y="70.474" width="956.24" height="544.24" ry="34.593" fill="#6d6d6d" fill-opacity=".43" opacity=".869" aria-labelledby="text274"/>
+ </g>
+ <text id="text6" class="cls-1" transform="scale(1.546 .64685)" x="306.19925" y="1883.1586" stroke-width="1.546"/>
+ <path id="path16" class="cls-4" d="m31.924 98.833a58 58 0 0 1 58-58h231.91a58 58 0 0 1 58 58v325.17a58 58 0 0 1-58 58h-231.92a58 58 0 0 1-58-58z"/>
+ <path id="path22" class="cls-4" d="m397.77 90.003h445.41"/>
+ <path id="path28" class="cls-8" d="m485.69 245.09-1 0.22-1.75 1.68-1.37 2.74-0.77 3.82v259.51l0.77 3.8 1.37 3 1.75 1.47 1 0.2h127.41l1.07-0.2 1.76-1.47 1.27-3 0.78-3.8v-259.51l-0.78-3.82-1.27-2.74-1.74-1.68-1.07-0.22z"/>
+ <path id="path30" class="cls-8" d="m646.39 245.09-1 0.22-1.76 1.68-1.36 2.74-0.78 3.82v259.51l0.78 3.8 1.36 3 1.76 1.47 1 0.2h127.41l1.07-0.2 1.75-1.47 1.28-3 0.77-3.8v-259.51l-0.77-3.82-1.28-2.74-1.75-1.68-1.07-0.22z"/>
+ <path id="path32" class="cls-8" d="m807.08 245.09-1 0.22-1.75 1.68-1.37 2.74-0.78 3.82v259.51l0.78 3.8 1.37 3 1.75 1.47 1 0.2h127.41l1.07-0.2 1.76-1.47 1.2699-3 0.78-3.8v-259.51l-0.78-3.82-1.2699-2.74-1.76-1.68-1.07-0.22z"/>
+ <path id="path46" class="cls-4" d="m364.66 245.27h176.52v60.85h176.52"/>
+ <path id="path58" class="cls-4" d="m307.86 148.15v59.85"/>
+ <path id="path60" class="cls-7" d="m299.16 202.69 0.58757-59.984" marker-end="url(#Arrow2Mend)" stroke-dasharray="4.5, 4.5" stroke-width="1.5"/>
+ <g id="g1766" transform="translate(-128.38 -37.947)">
+  <path id="path66" class="cls-4" d="m282 172.21 109.39 95.84"/>
+  <path id="path68" class="cls-7" d="m287.05 176.63 106.47 81.098"/>
+  <path id="path70" class="cls-10" d="m288.26 175.24-5-2 2.6 4.73z"/>
+ </g>
+ <g id="g1925" transform="translate(-127.95 -38.269)">
+  <path id="path74" class="cls-4" d="m280.16 398.2 106.68-89.49"/>
+  <path id="path76" class="cls-7" d="m285.33 393.89 113.97-88.512"/>
+  <path id="path78" class="cls-10" d="m284.16 392.48-2.7 4.67 5.08-1.84z"/>
+ </g>
+ <path id="path86" class="cls-4" d="m84.814 348.83h70.14v70.17h-70.14z"/>
+ <g id="g1930" transform="translate(-125.69 -31.966)">
+  <path id="path110" class="cls-4" d="m431.68 332.24v59.89"/>
+  <path id="path112" class="cls-7" d="m431.58 327 0.0987 58.471"/>
+  <path id="path116" class="cls-10" d="m429.83 385.42 1.85 5.07 1.85-5.07z"/>
+ </g>
+ <path id="path120" class="cls-4" d="m79.344 459.47h258v21.9h-258z"/>
+ <path id="path122" class="cls-4" d="m364.66 245.27h352.52"/>
+ <g id="g1244" transform="translate(-189.24 210.02)">
+  <g id="g3835">
+   <path id="path126-1" class="cls-11" d="m994.86-151.53-3.7358 0.22237-6.7823 1.9013-3.0687 1.8901-3.0798 2.1347-5.2702 5.4703-1.7344 3.0798-1.7123 3.5357-1.7456 7.3604-0.2224 4.0471v1.412l-3.5913 1.6566-5.915 4.7365-2.4016 3.3355-2.0013 3.569-2.4016 7.5828-0.2113 4.2584 0.2113 3.569 1.5343 6.6711 1.5344 3.0687 1.7678 3.0798 4.6031 4.9811 2.6128 1.9013 3.0799 1.6566 6.1374 1.6678 3.3355 0.22237h62.942l2.8463-0.22237 5.4702-1.4343 2.6351-1.6455 2.4128-1.4343 4.1694-4.2584 1.5344-2.6017 1.3342-2.8574 1.5121-5.9262v-3.3355l-0.2113-4.2917-2.4015-7.3382-2.2237-3.569-2.8464-2.8241-6.1374-4.2806-3.5134-0.94507 0.6449-3.1021 0.2335-3.3355-0.2335-3.569-2.4016-6.3931-2.2237-2.6128-2.4127-2.3682-5.915-2.6128-3.3357-0.24461h-2.4126l-4.603 1.6678-1.9791 1.1897-1.9681-3.0798-4.9921-5.4369-3.0465-2.1125-3.0686-1.8901-7.0159-1.9013z" fill="#326ce5" stroke-width="1.1118"/>
+   <path id="path3753" d="m989.51-127.57q-1.8828 0-2.9766 1.2578-1.0859 1.25-1.0859 3.4297 0 2.2422 1.0469 3.4688 1.0547 1.2188 3 1.2188 1.1953 0 2.7266-0.42968v1.1641q-1.1875 0.44531-2.9297 0.44531-2.5234 0-3.8984-1.5312-1.3672-1.5312-1.3672-4.3516 0-1.7656 0.65625-3.0938 0.66406-1.3281 1.9062-2.0469 1.25-0.71875 2.9375-0.71875 1.7969 0 3.1406 0.65625l-0.5625 1.1406q-1.2969-0.60938-2.5938-0.60938z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3755" d="m995.81-117.17h-1.2969v-12.156h1.2969z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3757" d="m1006-121.46q0 2.0938-1.0546 3.2734-1.0547 1.1719-2.9141 1.1719-1.1484 0-2.0391-0.53906-0.89063-0.53906-1.375-1.5469-0.48438-1.0078-0.48438-2.3594 0-2.0938 1.0469-3.2578 1.0469-1.1719 2.9063-1.1719 1.7969 0 2.8515 1.1953 1.0625 1.1953 1.0625 3.2344zm-6.5234 0q0 1.6406 0.6563 2.5 0.6562 0.85937 1.9296 0.85937 1.2735 0 1.9297-0.85156 0.6641-0.85937 0.6641-2.5078 0-1.6328-0.6641-2.4766-0.6562-0.85157-1.9453-0.85157-1.2734 0-1.9219 0.83594-0.6484 0.83594-0.6484 2.4922z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3759" d="m1009.5-125.73v5.5547q0 1.0469 0.4766 1.5625 0.4765 0.51562 1.4922 0.51562 1.3437 0 1.9609-0.73437 0.625-0.73438 0.625-2.3984v-4.5h1.2969v8.5625h-1.0703l-0.1875-1.1484h-0.07q-0.3985 0.63282-1.1094 0.96875-0.7031 0.33594-1.6094 0.33594-1.5625 0-2.3437-0.74219-0.7735-0.74218-0.7735-2.375v-5.6016z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3761" d="m1023.9-118.32h-0.07q-0.8985 1.3047-2.6875 1.3047-1.6797 0-2.6172-1.1484-0.9297-1.1484-0.9297-3.2656t0.9375-3.2891q0.9375-1.1719 2.6094-1.1719 1.7422 0 2.6719 1.2656h0.1015l-0.055-0.61719-0.031-0.60156v-3.4844h1.2969v12.156h-1.0547zm-2.5938 0.21875q1.3282 0 1.9219-0.71875 0.6016-0.72656 0.6016-2.3359v-0.27344q0-1.8203-0.6094-2.5938-0.6016-0.78125-1.9297-0.78125-1.1406 0-1.75 0.89062-0.6015 0.88282-0.6015 2.5 0 1.6406 0.6015 2.4766 0.6016 0.83593 1.7656 0.83593z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3763" d="m978.42-97.015q-0.83593 0-1.5312-0.30469-0.6875-0.3125-1.1562-0.95312h-0.0937q0.0937 0.75 0.0937 1.4219v3.5234h-1.2969v-12.406h1.0547l0.17968 1.1719h0.0625q0.5-0.70313 1.1641-1.0156 0.66406-0.3125 1.5234-0.3125 1.7031 0 2.625 1.1641 0.92969 1.1641 0.92969 3.2656 0 2.1094-0.94531 3.2812-0.9375 1.1641-2.6094 1.1641zm-0.1875-7.7734q-1.3125 0-1.8984 0.72657-0.58594 0.72656-0.60157 2.3125v0.28906q0 1.8047 0.60157 2.5859 0.60156 0.77344 1.9297 0.77344 1.1094 0 1.7344-0.89844 0.63281-0.89844 0.63281-2.4766 0-1.6016-0.63281-2.4531-0.625-0.85938-1.7656-0.85938z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3765" d="m988.16-105.89q0.57031 0 1.0234 0.0937l-0.17969 1.2031q-0.53125-0.11719-0.9375-0.11719-1.0391 0-1.7812 0.84375-0.73438 0.84375-0.73438 2.1016v4.5938h-1.2969v-8.5625h1.0703l0.14844 1.5859h0.0625q0.47656-0.83594 1.1484-1.2891 0.67187-0.45313 1.4766-0.45313z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3767" d="m998.17-101.46q0 2.0937-1.0547 3.2734-1.0547 1.1719-2.9141 1.1719-1.1484 0-2.0391-0.53906-0.89062-0.53906-1.375-1.5469-0.48437-1.0078-0.48437-2.3594 0-2.0938 1.0469-3.2578 1.0469-1.1719 2.9062-1.1719 1.7969 0 2.8516 1.1953 1.0625 1.1953 1.0625 3.2344zm-6.5234 0q0 1.6406 0.65625 2.5t1.9297 0.85938q1.2734 0 1.9297-0.85156 0.66406-0.85938 0.66406-2.5078 0-1.6328-0.66406-2.4766-0.65625-0.85157-1.9453-0.85157-1.2734 0-1.9219 0.83594-0.64843 0.83594-0.64843 2.4922z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3769" d="m1002.3-97.172-3.25-8.5625h1.3906l1.8438 5.0781q0.625 1.7812 0.7343 2.3125h0.062q0.086-0.41406 0.5391-1.7109 0.4609-1.3047 2.0547-5.6797h1.3906l-3.25 8.5625z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3771" d="m1009.8-97.172h-1.2969v-8.5625h1.2969zm-1.4062-10.883q0-0.44531 0.2187-0.64844 0.2188-0.21094 0.5469-0.21094 0.3125 0 0.5391 0.21094 0.2265 0.21094 0.2265 0.64844t-0.2265 0.65625q-0.2266 0.21094-0.5391 0.21094-0.3281 0-0.5469-0.21094-0.2187-0.21875-0.2187-0.65625z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3773" d="m1018.4-98.32h-0.07q-0.8985 1.3047-2.6875 1.3047-1.6797 0-2.6172-1.1484-0.9297-1.1484-0.9297-3.2656 0-2.1172 0.9375-3.2891 0.9375-1.1719 2.6094-1.1719 1.7421 0 2.6718 1.2656h0.1016l-0.055-0.61719-0.031-0.60156v-3.4844h1.2968v12.156h-1.0547zm-2.5938 0.21875q1.3281 0 1.9219-0.71875 0.6016-0.72656 0.6016-2.3359v-0.27344q0-1.8203-0.6094-2.5938-0.6016-0.78125-1.9297-0.78125-1.1406 0-1.75 0.89062-0.6016 0.88282-0.6016 2.5 0 1.6406 0.6016 2.4766 0.6016 0.83594 1.7656 0.83594z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3775" d="m1026-97.015q-1.8984 0-3-1.1562-1.0937-1.1562-1.0937-3.2109 0-2.0703 1.0156-3.2891 1.0234-1.2188 2.7422-1.2188 1.6094 0 2.5469 1.0625 0.9375 1.0547 0.9375 2.7891v0.82032h-5.8985q0.039 1.5078 0.7578 2.2891 0.7266 0.78125 2.0391 0.78125 1.3828 0 2.7344-0.57812v1.1562q-0.6875 0.29688-1.3047 0.42188-0.6094 0.13281-1.4766 0.13281zm-0.3515-7.7891q-1.0313 0-1.6485 0.67187-0.6093 0.67188-0.7187 1.8594h4.4765q0-1.2266-0.5468-1.875-0.5469-0.65625-1.5625-0.65625z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3777" d="m1035.2-105.89q0.5704 0 1.0235 0.0937l-0.1797 1.2031q-0.5313-0.11719-0.9375-0.11719-1.0391 0-1.7813 0.84375-0.7343 0.84375-0.7343 2.1016v4.5938h-1.2969v-8.5625h1.0703l0.1484 1.5859h0.062q0.4766-0.83594 1.1485-1.2891 0.6719-0.45313 1.4765-0.45313z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3779" d="m1001.4-77.172-1.4218-3.6328h-4.5781l-1.4062 3.6328h-1.3438l4.5156-11.469h1.1172l4.4922 11.469zm-1.8359-4.8281-1.3281-3.5391q-0.25782-0.67188-0.53125-1.6484-0.17188 0.75-0.49219 1.6484l-1.3438 3.5391z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3781" d="m1011.6-85.265q0 1.7344-1.1875 2.6719-1.1796 0.92969-3.3828 0.92969h-1.3437v4.4922h-1.3281v-11.422h2.9609q4.2812 0 4.2812 3.3281zm-5.914 2.4609h1.1953q1.7656 0 2.5547-0.57031 0.789-0.57031 0.789-1.8281 0-1.1328-0.7421-1.6875-0.7422-0.55469-2.3125-0.55469h-1.4844z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
+   <path id="path3783" d="m1014-77.172v-11.422h1.3281v11.422z" fill="#fff" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/>
   </g>
+ </g>
+ <g id="layer1-3" transform="translate(-279.71 93.814)" data-name="layer1">
+  <g id="g70-3" data-name="g70">
+   <path id="path3055-3" class="cls-11" d="m1150.2 328.44a4.79 4.79 0 0 0-1.82 0.46l-24.77 11.83a4.71 4.71 0 0 0-2.56 3.19l-6.1 26.59a4.66 4.66 0 0 0 0.65 3.6 3.28 3.28 0 0 0 0.27 0.38l17.08 21.32a4.75 4.75 0 0 0 3.71 1.76h27.5a4.74 4.74 0 0 0 3.7-1.77l17.14-21.32a4.68 4.68 0 0 0 0.92-4l-6.13-26.58a4.69 4.69 0 0 0-2.56-3.19l-24.77-11.83a4.82 4.82 0 0 0-2.26-0.44z" data-name="path3055"/>
+   <path id="path3054-2-9-3" class="cls-13" d="m1150.2 326.51a5.09 5.09 0 0 0-1.91 0.49l-26.15 12.49a5 5 0 0 0-2.71 3.37l-6.46 28.07a4.9 4.9 0 0 0 0.68 3.8c0.09 0.14 0.18 0.27 0.28 0.4l18.1 22.5a5 5 0 0 0 3.91 1.87h29a5 5 0 0 0 3.91-1.86l18.1-22.51a5 5 0 0 0 1-4.2l-6.46-28.07a5 5 0 0 0-2.7-3.36l-26.16-12.5a5.07 5.07 0 0 0-2.43-0.49zm0 1.93a4.76 4.76 0 0 1 2.29 0.46l24.78 11.83a4.69 4.69 0 0 1 2.56 3.19l6.13 26.59a4.66 4.66 0 0 1-0.92 4l-17.07 21.29a4.74 4.74 0 0 1-3.7 1.77h-27.5a4.76 4.76 0 0 1-3.71-1.77l-17.14-21.32a3.28 3.28 0 0 1-0.27-0.38 4.66 4.66 0 0 1-0.65-3.6l6.12-26.59a4.69 4.69 0 0 1 2.56-3.18l24.77-11.84a4.79 4.79 0 0 1 1.82-0.46z" data-name="path3054-2-9"/>
+  </g>
+  <g id="text2066-3" class="cls-14" data-name="text2066">
+   <text id="text149" class="cls-15" transform="translate(1130.9 391.73)">k-proxy</text>
+  </g>
+  <path id="path1994-3" class="cls-13" d="m1150.4 338.69c-0.58 0-16.66 7.89-16.87 8.29-0.51 1-4.17 17.86-4 18.23 0.12 0.21 2.76 3.55 5.85 7.42l5.63 7h18.53l5.9-7.37 5.89-7.36-2.06-9c-1.13-5-2.15-9.13-2.25-9.23-0.29-0.28-16.36-8-16.67-8zm0.82 3.95 3.79 1.1-3.79 1.1-3.79-1.1zm-3.79 1.52 3.55 1.06v4.93l-3.53-2zm7.58 0v4l-3.53 2v-4.93zm-9.17 6.73 3.79 1.1-3.79 1.1-3.79-1.1zm9.22 0 3.79 1.1-3.79 1.1-3.8-1.1zm-13 1.52 3.55 1.06v4.93l-3.54-1.95zm7.58 0v4l-3.53 1.95v-4.93zm1.63 0 3.55 1.06v4.93l-3.53-1.95zm7.59 0v4l-3.53 1.95v-4.93zm-14.39 6.32c1.13 0 0.25 1.18 1.54 1.79s1.64-1 2.5 0.26-0.76 0.93-0.64 2.44 1.67 0.94 1 2.31-1.19-0.2-2.43 0.66 0 1.92-1.48 2-0.43-1.13-1.79-1.78-1.65 1-2.51-0.27 0.76-0.93 0.64-2.43-1.67-0.94-1-2.31 1.19 0.2 2.43-0.66 0-1.92 1.49-2zm9.74 1.52c2 0.05 0.06 1.95 1.9 2.77s2-1.89 3.34-0.43-1.34 1.42-0.62 3.31 2.72 0 2.66 2.05-2 0.06-2.77 1.9 1.89 1.95 0.43 3.34-1.42-1.34-3.3-0.62 0 2.72-2.06 2.66-0.06-2-1.9-2.77-2 1.89-3.34 0.43 1.34-1.42 0.62-3.31-2.72 0-2.66-2.05 2-0.06 2.77-1.9-1.89-1.95-0.43-3.34 1.42 1.34 3.31 0.62 0.02-2.72 2.04-2.66zm-9.65 1.05a2.22 2.22 0 1 0 2.22 2.22 2.22 2.22 0 0 0-2.23-2.22zm9.44 2a4.43 4.43 0 1 0 4.43 4.43 4.43 4.43 0 0 0-4.45-4.42z" data-name="path1994"/>
+ </g>
+ <g id="layer1-6" transform="translate(-279.73 93.814)" data-name="layer1">
+  <g id="g70-6" data-name="g70">
+   <path id="path3055-6" class="cls-11" d="m1150.3 239.22a4.45 4.45 0 0 0-1.72 0.43l-23.45 11.21a4.46 4.46 0 0 0-2.43 3l-5.78 25.17a4.45 4.45 0 0 0 0.6 3.41c0.08 0.12 0.17 0.24 0.26 0.35l16.26 20.21a4.53 4.53 0 0 0 3.51 1.67h26a4.46 4.46 0 0 0 3.49-1.67l16.23-20.18a4.42 4.42 0 0 0 0.86-3.77l-5.79-25.17a4.46 4.46 0 0 0-2.43-3l-23.45-11.2a4.56 4.56 0 0 0-2.16-0.46z" data-name="path3055"/>
+   <path id="path3054-2-9-6" class="cls-13" d="m1150.2 237.39a4.71 4.71 0 0 0-1.81 0.47l-24.76 11.82a4.72 4.72 0 0 0-2.57 3.19l-6.1 26.57a4.62 4.62 0 0 0 0.64 3.6 3.28 3.28 0 0 0 0.27 0.38l17.13 21.31a4.78 4.78 0 0 0 3.71 1.76h27.48a4.74 4.74 0 0 0 3.7-1.77l17.13-21.31a4.66 4.66 0 0 0 0.92-4l-6.12-26.58a4.69 4.69 0 0 0-2.56-3.18l-24.76-11.83a4.82 4.82 0 0 0-2.3-0.43zm0 1.83a4.56 4.56 0 0 1 2.18 0.43l23.45 11.2a4.46 4.46 0 0 1 2.43 3l5.79 25.17a4.42 4.42 0 0 1-0.86 3.77l-16.24 20.21a4.5 4.5 0 0 1-3.51 1.68h-26a4.49 4.49 0 0 1-3.49-1.68l-16.23-20.19c-0.09-0.11-0.18-0.23-0.26-0.35a4.41 4.41 0 0 1-0.6-3.41l5.78-25.17a4.48 4.48 0 0 1 2.43-3l23.45-11.21a4.45 4.45 0 0 1 1.72-0.43z" data-name="path3054-2-9"/>
+  </g>
+  <g id="text2066-6" class="cls-14" data-name="text2066">
+   <text id="text173" class="cls-16" transform="translate(1132.2 299.14)">kubelet</text>
+  </g>
+  <path id="path1994-6" class="cls-13" d="m1150.4 248.92c-0.54 0-15.77 7.47-16 7.85-0.48 0.93-4 16.91-3.74 17.25s2.61 3.37 5.54 7l5.33 6.67h17.55l11.16-14-2-8.56c-1.08-4.71-2-8.64-2.14-8.74-0.27-0.26-15.48-7.55-15.78-7.56zm0.78 3.74 3.59 1-3.59 1-3.59-1zm-3.59 1.44 3.36 1v4.67l-3.34-1.85zm7.18 0v3.82l-3.35 1.85v-4.67zm-8.68 6.38 3.59 1-3.59 1-3.59-1zm8.72 0 3.59 1-3.59 1-3.59-1zm-12.31 1.43 3.36 1v4.68l-3.35-1.86zm7.18 0v3.82l-3.34 1.86v-4.68zm1.54 0 3.36 1v4.68l-3.35-1.86zm7.18 0v3.82l-3.34 1.86v-4.68zm-13.62 6c1.07 0 0.24 1.11 1.45 1.69s1.57-0.93 2.38 0.25-0.73 0.88-0.61 2.31 1.58 0.89 1 2.18-1.13-0.19-2.31 0.62 0 1.82-1.4 1.94-0.4-1.07-1.7-1.69-1.56 0.93-2.37-0.25 0.73-0.88 0.61-2.31-1.58-0.88-1-2.18 1.13 0.19 2.31-0.62 0-1.82 1.4-1.94zm9.22 1.43c1.91 0.05 0.06 1.85 1.8 2.63s1.85-1.8 3.16-0.41-1.26 1.34-0.58 3.13 2.57 0 2.52 1.94-1.85 0.06-2.63 1.8 1.8 1.85 0.41 3.16-1.35-1.26-3.13-0.58 0 2.57-2 2.52 0-1.85-1.8-2.63-1.84 1.8-3.15 0.41 1.26-1.34 0.58-3.13-2.57 0-2.52-1.94 1.84-0.06 2.62-1.81-1.79-1.84-0.4-3.15 1.34 1.26 3.13 0.58 0.08-2.58 1.97-2.53zm-9.14 1a2.1 2.1 0 1 0 2.1 2.1 2.1 2.1 0 0 0-2.1-2.11zm8.94 1.9a4.2 4.2 0 1 0 4.2 4.19 4.2 4.2 0 0 0-4.2-4.2z" data-name="path1994"/>
+ </g>
+ <g id="g1954" transform="translate(-123.82 -40.997)">
+  <path id="path108" class="cls-4" d="m380.16 400h70v70.14h-70z"/>
+  <g id="layer1-7" transform="translate(-31.839)" data-name="layer1">
+   <g id="g70-7" data-name="g70">
+    <path id="path3055-7" class="cls-11" d="m446.67 398.6a4.4 4.4 0 0 0-1.67 0.4l-23.39 11.14a4.41 4.41 0 0 0-2.41 3l-5.77 25a4.4 4.4 0 0 0 0.6 3.39l0.26 0.36 16.14 20.11a4.5 4.5 0 0 0 3.5 1.66h25.95a4.5 4.5 0 0 0 3.5-1.66l16.18-20.06a4.38 4.38 0 0 0 0.86-3.74l-5.78-25a4.41 4.41 0 0 0-2.42-3l-23.38-11.2a4.52 4.52 0 0 0-2.17-0.4z" data-name="path3055"/>
+    <path id="path3054-2-9-7" class="cls-13" d="m446.66 396.79a4.75 4.75 0 0 0-1.81 0.46l-24.68 11.75a4.66 4.66 0 0 0-2.56 3.16l-6.09 26.41a4.66 4.66 0 0 0 0.64 3.58l0.27 0.37 17.09 21.17a4.72 4.72 0 0 0 3.69 1.75h27.4a4.78 4.78 0 0 0 3.69-1.75l17.07-21.18a4.62 4.62 0 0 0 0.92-3.95l-6.1-26.4a4.69 4.69 0 0 0-2.55-3.17l-24.64-11.75a4.75 4.75 0 0 0-2.34-0.45zm0 1.81a4.52 4.52 0 0 1 2.17 0.43l23.38 11.13a4.41 4.41 0 0 1 2.42 3l5.78 25a4.38 4.38 0 0 1-0.86 3.74l-16.17 20.1a4.5 4.5 0 0 1-3.5 1.66h-25.95a4.5 4.5 0 0 1-3.5-1.66l-16.18-20.05c-0.09-0.12-0.18-0.23-0.26-0.36a4.38 4.38 0 0 1-0.6-3.38l5.76-25a4.45 4.45 0 0 1 2.42-3l23.43-11.21a4.59 4.59 0 0 1 1.71-0.43z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-7" class="cls-14" data-name="text2066">
+    <text id="text181" class="cls-17" transform="translate(432.3,458.13)">sched</text>
+   </g>
+   <path id="path1984" class="cls-13" d="m446.83 409.62c-0.54 0-15.73 7.42-15.92 7.81-0.48 0.91-3.94 16.79-3.73 17.14s2.6 3.34 5.53 7l5.31 6.63h17.49l5.56-6.92 5.57-6.93-1.95-8.51c-1.07-4.68-2-8.59-2.12-8.68-0.28-0.26-15.44-7.51-15.74-7.52zm0.93 7.78c0.74 0 0.81 1.15 2.39 1.26 2.05 0.16 1.83-1.75 3.4-0.42s-0.35 1.42 0.14 3.41 2.24 1.2 1.46 3.1-1.47 0.11-3.22 1.19-0.45 2.49-2.51 2.34-0.55-1.36-2.12-2.69-2.52 0.34-3-1.65 1.13-0.95 1.91-2.84-1.11-2.28 0.64-3.36a2.41 2.41 0 0 1 0.56-0.28 1 1 0 0 1 0.36-0.06zm2.06 2.25a2.88 2.88 0 0 0-0.88 0.12 3 3 0 1 0 0.88-0.12zm-11.82 5.1a2.68 2.68 0 0 1 0.59 0.11c1.89 0.58 0 1.57 1.31 3s2.48-0.4 2.92 1.52-1.38 0.76-2 2.64 1.58 1.94 0.13 3.28-1.35-0.81-3.27-0.36-0.9 2.33-2.79 1.75 0-1.57-1.31-3-2.48 0.4-2.92-1.52 1.38-0.76 2-2.64-1.58-1.94-0.14-3.28 1.35 0.81 3.28 0.37c1.68-0.39 1.1-1.89 2.19-1.87zm14.05 2.06a1.87 1.87 0 0 1 0.67 0.16c2.18 0.84-0.69 2.14 1 3.75s2.86-1.31 3.8 0.82-2 1-1.95 3.36 2.95 1.09 2.1 3.26-2.15-0.68-3.76 1 1.31 2.85-0.83 3.79-1-2-3.37-1.95-1.1 2.94-3.27 2.1 0.69-2.14-1-3.75-2.87 1.3-3.81-0.83 2-1 2-3.35-2.95-1.1-2.11-3.27 2.15 0.69 3.77-1-1.31-2.86 0.82-3.8 1 2 3.37 1.95c2 0 1.35-2.26 2.61-2.25zm-15.28 1a3 3 0 1 0 3 3 3 3 0 0 0-2.97-3zm12.81 2.85a4.38 4.38 0 1 0 4.42 4.34 4.38 4.38 0 0 0-4.39-4.34z"/>
+  </g>
+  <g id="layer1-8" transform="translate(-31.839)" data-name="layer1">
+   <g id="g70-8" data-name="g70">
+    <path id="path3055-8" class="cls-11" d="m456.51 406.53a4.54 4.54 0 0 0-1.71 0.43l-23.39 11.14a4.45 4.45 0 0 0-2.42 3l-5.76 25a4.38 4.38 0 0 0 0.6 3.38c0.08 0.13 0.17 0.24 0.26 0.36l16.18 20a4.5 4.5 0 0 0 3.5 1.66h26a4.5 4.5 0 0 0 3.5-1.66l16.18-20.06a4.42 4.42 0 0 0 0.86-3.74l-5.78-25a4.41 4.41 0 0 0-2.42-3l-23.43-11.04a4.52 4.52 0 0 0-2.17-0.47z" data-name="path3055"/>
+    <path id="path3054-2-9-8" class="cls-13" d="m456.5 404.72a4.75 4.75 0 0 0-1.81 0.46l-24.69 11.75a4.67 4.67 0 0 0-2.55 3.16l-6.09 26.41a4.66 4.66 0 0 0 0.64 3.58c0.09 0.12 0.17 0.25 0.27 0.37l17.09 21.17a4.72 4.72 0 0 0 3.69 1.75h27.39a4.75 4.75 0 0 0 3.69-1.75l17.08-21.18a4.65 4.65 0 0 0 0.92-3.95l-6.1-26.4a4.66 4.66 0 0 0-2.56-3.16l-24.68-11.76a4.77 4.77 0 0 0-2.29-0.45zm0 1.81a4.52 4.52 0 0 1 2.17 0.43l23.38 11.13a4.41 4.41 0 0 1 2.42 3l5.78 25a4.39 4.39 0 0 1-0.87 3.74l-16.16 20.07a4.5 4.5 0 0 1-3.5 1.66h-26a4.51 4.51 0 0 1-3.5-1.67l-16.18-20c-0.09-0.12-0.18-0.23-0.26-0.35a4.42 4.42 0 0 1-0.61-3.39l5.77-25a4.44 4.44 0 0 1 2.42-3l23.44-11.15a4.54 4.54 0 0 1 1.71-0.43z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-8" class="cls-14" data-name="text2066">
+    <text id="text189" class="cls-17" transform="translate(442.14,466.07)">sched</text>
+   </g>
+   <path id="path1984-2" class="cls-13" d="m456.67 417.55c-0.54 0-15.73 7.43-15.93 7.81-0.47 0.91-3.93 16.8-3.72 17.14s2.6 3.34 5.53 7l5.31 6.63h17.49l5.56-6.92 5.57-6.93-2-8.51c-1.07-4.68-2-8.58-2.13-8.68-0.27-0.26-15.43-7.51-15.73-7.52zm0.93 7.78c0.74 0 0.81 1.15 2.38 1.26 2.06 0.16 1.84-1.75 3.41-0.42s-0.35 1.42 0.14 3.41 2.23 1.2 1.45 3.1-1.46 0.11-3.21 1.19-0.46 2.49-2.51 2.34-0.55-1.36-2.12-2.69-2.52 0.34-3-1.65 1.12-0.94 1.91-2.84-1.11-2.28 0.64-3.36a2.41 2.41 0 0 1 0.56-0.28 1.34 1.34 0 0 1 0.36-0.06zm2 2.25a3 3 0 1 0 2.84 2.11 3 3 0 0 0-2.79-2.11zm-11.78 5.1a2.68 2.68 0 0 1 0.59 0.11c1.89 0.58 0 1.57 1.31 3s2.48-0.4 2.92 1.52-1.38 0.76-2 2.64 1.58 1.94 0.14 3.28-1.35-0.8-3.27-0.36-0.9 2.33-2.79 1.75 0-1.56-1.31-3-2.48 0.4-2.92-1.52 1.38-0.76 2-2.64-1.59-1.94-0.14-3.28 1.35 0.81 3.27 0.37c1.69-0.39 1.11-1.88 2.2-1.87zm14.05 2.06a1.87 1.87 0 0 1 0.67 0.16c2.17 0.84-0.69 2.14 1 3.75s2.87-1.31 3.81 0.82-2 1-2 3.36 2.95 1.09 2.11 3.26-2.15-0.68-3.76 1 1.3 2.85-0.83 3.79-1-2-3.37-1.95-1.1 2.94-3.28 2.1 0.69-2.14-1-3.75-2.86 1.3-3.8-0.83 2-1 2-3.35-3-1.1-2.11-3.27 2.15 0.69 3.77-1-1.31-2.86 0.82-3.8 1 2 3.37 1.95c2 0 1.35-2.26 2.61-2.25zm-15.28 1a3 3 0 1 0 3 3 3 3 0 0 0-2.95-3zm12.8 2.85a4.38 4.38 0 1 0 4.4 4.37 4.39 4.39 0 0 0-4.35-4.37z" data-name="path1984"/>
+  </g>
+  <g id="layer1-9" transform="translate(-31.839)" data-name="layer1">
+   <g id="g70-9" data-name="g70">
+    <path id="path3055-9" class="cls-11" d="m465.45 413.24a4.4 4.4 0 0 0-1.71 0.43l-23.38 11.13a4.43 4.43 0 0 0-2.42 3l-5.77 25a4.36 4.36 0 0 0 0.61 3.39 2.8 2.8 0 0 0 0.25 0.35l16.18 20.06a4.5 4.5 0 0 0 3.5 1.66h26a4.5 4.5 0 0 0 3.5-1.66l16.18-20.06a4.35 4.35 0 0 0 0.86-3.74l-5.77-25a4.44 4.44 0 0 0-2.42-3l-23.39-11.13a4.49 4.49 0 0 0-2.22-0.43z" data-name="path3055"/>
+    <path id="path3054-2-9-9" class="cls-13" d="m465.44 411.43a4.73 4.73 0 0 0-1.81 0.45l-24.63 11.76a4.66 4.66 0 0 0-2.56 3.16l-6.09 26.4a4.65 4.65 0 0 0 0.64 3.58l0.27 0.37 17.09 21.18a4.72 4.72 0 0 0 3.69 1.75h27.4a4.76 4.76 0 0 0 3.69-1.76l17.08-21.17a4.64 4.64 0 0 0 0.91-3.95l-6.12-26.4a4.69 4.69 0 0 0-2.55-3.17l-24.69-11.75a4.75 4.75 0 0 0-2.32-0.45zm0 1.81a4.52 4.52 0 0 1 2.17 0.43l23.39 11.13a4.42 4.42 0 0 1 2.41 3l5.78 25a4.35 4.35 0 0 1-0.86 3.74l-16.18 20.06a4.5 4.5 0 0 1-3.5 1.66h-26a4.5 4.5 0 0 1-3.5-1.66l-16.15-20.05c-0.09-0.11-0.18-0.23-0.26-0.35a4.4 4.4 0 0 1-0.6-3.39l5.77-25a4.43 4.43 0 0 1 2.42-3l23.38-11.13a4.4 4.4 0 0 1 1.71-0.43z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-9" class="cls-14" data-name="text2066">
+    <text id="text197" class="cls-17" transform="translate(451.08,472.77)">sched</text>
+   </g>
+   <path id="path1984-3" class="cls-13" d="m465.61 424.26c-0.54 0-15.72 7.42-15.92 7.8-0.48 0.92-3.93 16.8-3.73 17.14s2.61 3.35 5.53 7l5.31 6.62h17.49l5.57-6.93 5.56-6.92-1.95-8.51c-1.07-4.68-2-8.59-2.12-8.68-0.28-0.26-15.44-7.51-15.74-7.52zm0.93 7.78c0.74 0 0.81 1.14 2.39 1.26 2.05 0.15 1.83-1.75 3.4-0.43s-0.35 1.43 0.14 3.42 2.24 1.2 1.46 3.1-1.47 0.1-3.22 1.18-0.45 2.5-2.51 2.34-0.55-1.35-2.12-2.68-2.52 0.34-3-1.65 1.13-0.95 1.91-2.85-1.11-2.28 0.64-3.36a2.78 2.78 0 0 1 0.56-0.27 1 1 0 0 1 0.36-0.06zm2.06 2.24a2.89 2.89 0 0 0-0.88 0.13 3 3 0 1 0 0.88-0.13zm-11.78 5.11a2.21 2.21 0 0 1 0.58 0.11c1.89 0.58 0 1.57 1.32 3s2.47-0.4 2.91 1.52-1.37 0.76-1.95 2.64 1.58 1.94 0.13 3.28-1.34-0.81-3.27-0.37-0.89 2.34-2.78 1.76 0-1.57-1.32-3-2.47 0.4-2.92-1.52 1.38-0.76 2-2.64-1.58-1.94-0.14-3.28 1.35 0.81 3.28 0.36c1.68-0.38 1.1-1.88 2.2-1.86zm14 2.06a2 2 0 0 1 0.67 0.15c2.18 0.85-0.69 2.15 1 3.75s2.86-1.3 3.8 0.83-2 1-1.95 3.36 2.95 1.09 2.1 3.26-2.15-0.69-3.76 1 1.31 2.85-0.83 3.79-1-2-3.37-1.95-1.1 2.94-3.27 2.1 0.69-2.15-1-3.75-2.86 1.3-3.81-0.83 2-1 2-3.36-2.95-1.09-2.11-3.26 2.15 0.69 3.77-1-1.31-2.85 0.83-3.79 1 2 3.36 1.95c2.05-0.05 1.36-2.26 2.61-2.25zm-15.28 1a3 3 0 1 0 3 3 3 3 0 0 0-2.96-3zm12.81 2.85a4.38 4.38 0 1 0 4.39 4.37 4.37 4.37 0 0 0-4.35-4.37z" data-name="path1984"/>
+  </g>
+ </g>
+ <text id="text255" class="cls-22" x="216.71268" y="485.55911" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1053" font-family="'Open Sans'" font-size="14.667px" font-weight="bold" text-align="center" text-anchor="middle" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Control Plane</tspan></text>
+ <text id="text257" class="cls-22" x="549.05597" y="275.27713" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1312" font-family="'Open Sans'" font-size="14.667px" font-weight="bold" text-align="center" text-anchor="middle" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Node</tspan></text>
+ <text id="text259" x="-123.81744" y="664.74402"/>
+ <g id="layer1-15" transform="translate(-151.54 -61.332)" data-name="layer1">
+  <g id="g70-16" data-name="g70">
+   <path id="path3055-16" class="cls-11" d="m276.45 411.42a4.3 4.3 0 0 0-1.63 0.32l-22.3 9a4 4 0 0 0-2.37 2.55l-6.15 21.76a3.65 3.65 0 0 0 0.48 3 3.46 3.46 0 0 0 0.22 0.31l14.64 18.08a4.36 4.36 0 0 0 3.23 1.57l24.41 0.8a4.35 4.35 0 0 0 3.33-1.35l15.79-17.06a3.67 3.67 0 0 0 0.93-3.25l-4.71-22.09a4 4 0 0 0-2.19-2.71l-21.66-10.48a4.51 4.51 0 0 0-2.02-0.45z" data-name="path3055"/>
+   <path id="path3054-2-9-16" class="cls-13" d="m276.49 409.83a4.7 4.7 0 0 0-1.71 0.35l-23.56 9.52a4.18 4.18 0 0 0-2.49 2.69l-6.49 22.94a3.85 3.85 0 0 0 0.5 3.16 2 2 0 0 0 0.24 0.33l15.45 19.09a4.59 4.59 0 0 0 3.41 1.65l25.76 0.85a4.62 4.62 0 0 0 3.52-1.42l16.68-18a3.86 3.86 0 0 0 1-3.43l-5-23.32a4.17 4.17 0 0 0-2.31-2.85l-22.86-11.09a4.78 4.78 0 0 0-2.14-0.47zm0 1.59a4.51 4.51 0 0 1 2 0.44l21.66 10.48a4 4 0 0 1 2.19 2.71l4.7 22.09a3.63 3.63 0 0 1-0.92 3.25l-15.79 17.07a4.38 4.38 0 0 1-3.33 1.34l-24.4-0.8a4.34 4.34 0 0 1-3.23-1.57l-14.67-18.08-0.23-0.31a3.69 3.69 0 0 1-0.47-3l6.15-21.73a4 4 0 0 1 2.36-2.55l22.31-9a4.73 4.73 0 0 1 1.63-0.32z" data-name="path3054-2-9"/>
+  </g>
+  <g id="text2066-16" class="cls-14" data-name="text2066">
+   <text id="text264" class="cls-23" transform="matrix(1.0794 .035808 -.033155 .99945 265.24 463.26)">etcd</text>
+  </g>
+  <path id="path2078" class="cls-13" d="m276.28 421.08c-0.51 0-15 6-15.2 6.34-0.48 0.79-4.19 14.59-4 14.9s2.36 3 5 6.29l4.8 6 8.22 0.28 8.23 0.27 5.43-5.89 5.43-5.9-1.58-7.51c-0.87-4.14-1.66-7.59-1.75-7.67-0.25-0.24-14.29-7.06-14.57-7.08z"/>
+  <path id="path4590" class="cls-11" d="m291.05 440.37h-0.46a6.3 6.3 0 0 1-2.62-0.66 21 21 0 0 0 0.5-4.32 23.86 23.86 0 0 0-2.91-3.42 5.77 5.77 0 0 1 2.2-2l0.4-0.21-0.3-0.33a15.84 15.84 0 0 0-5.42-3.94l-0.42-0.19-0.12 0.41a5.43 5.43 0 0 1-1.58 2.49 25.41 25.41 0 0 0-4.3-1.81 25 25 0 0 0-4.39 1.52 5.44 5.44 0 0 1-1.42-2.58l-0.09-0.42-0.43 0.16a16 16 0 0 0-5.69 3.53l-0.31 0.31 0.38 0.23a5.7 5.7 0 0 1 2.05 2.18 23.53 23.53 0 0 0-3.12 3.2 21.37 21.37 0 0 0 0.2 4.37 6.36 6.36 0 0 1-2.64 0.48 3.44 3.44 0 0 1-0.46 0h-0.45v0.43a13.9 13.9 0 0 0 1.93 6.13l0.22 0.38 0.36-0.27a6.23 6.23 0 0 1 2.86-1.13 22.92 22.92 0 0 0 2.3 3.74 26.46 26.46 0 0 0 4.55 1.2 5.11 5.11 0 0 1-0.48 2.89l-0.18 0.39 0.44 0.11a16.83 16.83 0 0 0 3.43 0.46l3.44-0.24 0.45-0.07-0.16-0.4a5.15 5.15 0 0 1-0.28-2.92 25.82 25.82 0 0 0 4.6-0.9 21.72 21.72 0 0 0 2.54-3.58 6.07 6.07 0 0 1 2.8 1.33l0.34 0.28 0.25-0.36a13.91 13.91 0 0 0 2.33-6l0.06-0.42zm-10.73 4.83a20 20 0 0 1-9.83-0.33 17.16 17.16 0 0 1-2-4.18 16.22 16.22 0 0 1-0.74-4.55 18.44 18.44 0 0 1 3.67-3 19.34 19.34 0 0 1 4.42-2.05 19.57 19.57 0 0 1 4.26 2.34 18.38 18.38 0 0 1 3.48 3.29 16.19 16.19 0 0 1-1.05 4.47 17.09 17.09 0 0 1-2.21 4.01zm-3.32-7.39a2.08 2.08 0 0 0 4.15 0.14 2.08 2.08 0 0 0-4.15-0.14zm-2.69-0.09a2.08 2.08 0 1 1-2-2 2 2 0 0 1 2 2z"/>
+ </g>
+ <text id="text274" class="cls-22" x="480.11725" y="47.03083" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1314" fill="#ffffff" font-family="'Open Sans'" font-size="21.333px" font-weight="bold">Kubernetes cluster</tspan></text>
+ <g id="g2018" transform="translate(-123.82 -40.997)">
+  <g id="layer1-10-1" transform="translate(-42.645 -4.995)" data-name="layer1">
+   <g id="g70-10-2" data-name="g70">
+    <path id="path3055-10-5" class="cls-11" d="m463.61 257.22a4.39 4.39 0 0 0-1.6 0.4l-21.81 10.43a4.15 4.15 0 0 0-2.26 2.8l-5.38 23.41a4.12 4.12 0 0 0 0.57 3.17 3.43 3.43 0 0 0 0.24 0.33l15.09 18.77a4.19 4.19 0 0 0 3.26 1.55h24.21a4.19 4.19 0 0 0 3.26-1.55l15.09-18.78a4.12 4.12 0 0 0 0.81-3.5l-5.39-23.4a4.16 4.16 0 0 0-2.26-2.81l-21.81-10.42a4.16 4.16 0 0 0-2.02-0.4z" data-name="path3055"/>
+    <path id="path3054-2-9-10-7" class="cls-13" d="m463.6 255.53a4.48 4.48 0 0 0-1.69 0.42l-23 11a4.39 4.39 0 0 0-2.39 3l-5.68 24.71a4.33 4.33 0 0 0 0.6 3.34c0.08 0.12 0.16 0.24 0.25 0.35l15.94 19.82a4.43 4.43 0 0 0 3.44 1.64h25.53a4.43 4.43 0 0 0 3.45-1.64l15.95-19.85a4.39 4.39 0 0 0 0.85-3.7l-5.69-24.71a4.41 4.41 0 0 0-2.38-3l-23-11a4.35 4.35 0 0 0-2.18-0.38zm0 1.69a4.17 4.17 0 0 1 2 0.41l21.84 10.37a4.19 4.19 0 0 1 2.26 2.81l5.39 23.4a4.12 4.12 0 0 1-0.81 3.5l-15.09 18.78a4.19 4.19 0 0 1-3.26 1.55h-24.21a4.19 4.19 0 0 1-3.26-1.56l-15.09-18.77a3.43 3.43 0 0 1-0.24-0.33 4.12 4.12 0 0 1-0.57-3.17l5.38-23.41a4.17 4.17 0 0 1 2.26-2.8l21.8-10.37a4.21 4.21 0 0 1 1.6-0.41z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-10-2" class="cls-14" data-name="text2066">
+    <text id="text205-6" class="cls-18" transform="translate(457.08,312.94)">api</text>
+   </g>
+   <path id="path1984-4-0" class="cls-13" d="m463.76 267.54c-0.51 0-14.67 6.94-14.86 7.3-0.44 0.86-3.66 15.72-3.47 16s2.43 3.13 5.15 6.54l5 6.2h16.31l5.19-6.49 5.19-6.48-1.81-8c-1-4.38-1.9-8-2-8.13-0.25-0.24-14.4-7-14.67-7zm0.87 7.28c0.68 0 0.75 1.07 2.22 1.18 1.91 0.14 1.71-1.64 3.17-0.4s-0.32 1.33 0.13 3.2 2.09 1.12 1.36 2.89-1.37 0.1-3 1.11-0.42 2.34-2.34 2.19-0.51-1.27-2-2.51-2.35 0.32-2.8-1.54 1.05-0.89 1.78-2.67-1-2.13 0.6-3.14a2.28 2.28 0 0 1 0.52-0.26 0.88 0.88 0 0 1 0.34-0.05zm1.91 2.1a2.86 2.86 0 0 0-0.82 0.12 2.77 2.77 0 1 0 0.82-0.12zm-11 4.78a1.84 1.84 0 0 1 0.55 0.1c1.76 0.54 0 1.47 1.22 2.81s2.31-0.37 2.73 1.43-1.29 0.71-1.83 2.47 1.47 1.81 0.13 3.07-1.26-0.76-3.06-0.34-0.83 2.18-2.59 1.64 0-1.47-1.23-2.82-2.31 0.37-2.72-1.42 1.29-0.71 1.83-2.47-1.48-1.82-0.13-3.07 1.26 0.75 3.05 0.34c1.57-0.36 1-1.76 2.05-1.74zm13.1 1.92a2.08 2.08 0 0 1 0.63 0.15c2 0.79-0.65 2 0.93 3.51s2.67-1.22 3.55 0.77-1.88 1-1.83 3.14 2.75 1 2 3.06-2-0.65-3.51 0.93 1.21 2.67-0.78 3.55-1-1.87-3.14-1.83-1 2.75-3.05 2 0.64-2-0.94-3.51-2.67 1.22-3.54-0.78 1.87-1 1.82-3.14-2.75-1-2-3.05 2 0.64 3.51-0.93-1.22-2.67 0.77-3.55 1 1.87 3.14 1.82c1.91 0 1.26-2.12 2.43-2.11zm-14.25 0.94a2.78 2.78 0 1 0 2.78 2.78 2.77 2.77 0 0 0-2.77-2.78zm12 2.66a4.1 4.1 0 1 0 4.09 4.1 4.1 4.1 0 0 0-4.13-4.1z" data-name="path1984"/>
+  </g>
+  <g id="layer1-10" transform="translate(-33.895 4.515)" data-name="layer1">
+   <g id="g70-10" data-name="g70">
+    <path id="path3055-10" class="cls-11" d="m463.61 257.22a4.39 4.39 0 0 0-1.6 0.4l-21.81 10.43a4.15 4.15 0 0 0-2.26 2.8l-5.38 23.41a4.12 4.12 0 0 0 0.57 3.17 3.43 3.43 0 0 0 0.24 0.33l15.09 18.77a4.19 4.19 0 0 0 3.26 1.55h24.21a4.19 4.19 0 0 0 3.26-1.55l15.09-18.78a4.12 4.12 0 0 0 0.81-3.5l-5.39-23.4a4.16 4.16 0 0 0-2.26-2.81l-21.81-10.42a4.16 4.16 0 0 0-2.02-0.4z" data-name="path3055"/>
+    <path id="path3054-2-9-10" class="cls-13" d="m463.6 255.53a4.48 4.48 0 0 0-1.69 0.42l-23 11a4.39 4.39 0 0 0-2.39 3l-5.68 24.71a4.33 4.33 0 0 0 0.6 3.34c0.08 0.12 0.16 0.24 0.25 0.35l15.94 19.82a4.43 4.43 0 0 0 3.44 1.64h25.53a4.43 4.43 0 0 0 3.45-1.64l15.95-19.85a4.39 4.39 0 0 0 0.85-3.7l-5.69-24.71a4.41 4.41 0 0 0-2.38-3l-23-11a4.35 4.35 0 0 0-2.18-0.38zm0 1.69a4.17 4.17 0 0 1 2 0.41l21.84 10.37a4.19 4.19 0 0 1 2.26 2.81l5.39 23.4a4.12 4.12 0 0 1-0.81 3.5l-15.09 18.78a4.19 4.19 0 0 1-3.26 1.55h-24.21a4.19 4.19 0 0 1-3.26-1.56l-15.09-18.77a3.43 3.43 0 0 1-0.24-0.33 4.12 4.12 0 0 1-0.57-3.17l5.38-23.41a4.17 4.17 0 0 1 2.26-2.8l21.8-10.37a4.21 4.21 0 0 1 1.6-0.41z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-10" class="cls-14" data-name="text2066">
+    <text id="text205" class="cls-18" transform="translate(457.08,312.94)">api</text>
+   </g>
+   <path id="path1984-4" class="cls-13" d="m463.76 267.54c-0.51 0-14.67 6.94-14.86 7.3-0.44 0.86-3.66 15.72-3.47 16s2.43 3.13 5.15 6.54l5 6.2h16.31l5.19-6.49 5.19-6.48-1.81-8c-1-4.38-1.9-8-2-8.13-0.25-0.24-14.4-7-14.67-7zm0.87 7.28c0.68 0 0.75 1.07 2.22 1.18 1.91 0.14 1.71-1.64 3.17-0.4s-0.32 1.33 0.13 3.2 2.09 1.12 1.36 2.89-1.37 0.1-3 1.11-0.42 2.34-2.34 2.19-0.51-1.27-2-2.51-2.35 0.32-2.8-1.54 1.05-0.89 1.78-2.67-1-2.13 0.6-3.14a2.28 2.28 0 0 1 0.52-0.26 0.88 0.88 0 0 1 0.34-0.05zm1.91 2.1a2.86 2.86 0 0 0-0.82 0.12 2.77 2.77 0 1 0 0.82-0.12zm-11 4.78a1.84 1.84 0 0 1 0.55 0.1c1.76 0.54 0 1.47 1.22 2.81s2.31-0.37 2.73 1.43-1.29 0.71-1.83 2.47 1.47 1.81 0.13 3.07-1.26-0.76-3.06-0.34-0.83 2.18-2.59 1.64 0-1.47-1.23-2.82-2.31 0.37-2.72-1.42 1.29-0.71 1.83-2.47-1.48-1.82-0.13-3.07 1.26 0.75 3.05 0.34c1.57-0.36 1-1.76 2.05-1.74zm13.1 1.92a2.08 2.08 0 0 1 0.63 0.15c2 0.79-0.65 2 0.93 3.51s2.67-1.22 3.55 0.77-1.88 1-1.83 3.14 2.75 1 2 3.06-2-0.65-3.51 0.93 1.21 2.67-0.78 3.55-1-1.87-3.14-1.83-1 2.75-3.05 2 0.64-2-0.94-3.51-2.67 1.22-3.54-0.78 1.87-1 1.82-3.14-2.75-1-2-3.05 2 0.64 3.51-0.93-1.22-2.67 0.77-3.55 1 1.87 3.14 1.82c1.91 0 1.26-2.12 2.43-2.11zm-14.25 0.94a2.78 2.78 0 1 0 2.78 2.78 2.77 2.77 0 0 0-2.77-2.78zm12 2.66a4.1 4.1 0 1 0 4.09 4.1 4.1 4.1 0 0 0-4.13-4.1z" data-name="path1984"/>
+  </g>
+  <g id="layer1-10-14" transform="translate(-25.145 14.025)" data-name="layer1">
+   <g id="g70-10-1" data-name="g70">
+    <path id="path3055-10-53" class="cls-11" d="m463.61 257.22a4.39 4.39 0 0 0-1.6 0.4l-21.81 10.43a4.15 4.15 0 0 0-2.26 2.8l-5.38 23.41a4.12 4.12 0 0 0 0.57 3.17 3.43 3.43 0 0 0 0.24 0.33l15.09 18.77a4.19 4.19 0 0 0 3.26 1.55h24.21a4.19 4.19 0 0 0 3.26-1.55l15.09-18.78a4.12 4.12 0 0 0 0.81-3.5l-5.39-23.4a4.16 4.16 0 0 0-2.26-2.81l-21.81-10.42a4.16 4.16 0 0 0-2.02-0.4z" data-name="path3055"/>
+    <path id="path3054-2-9-10-5" class="cls-13" d="m463.6 255.53a4.48 4.48 0 0 0-1.69 0.42l-23 11a4.39 4.39 0 0 0-2.39 3l-5.68 24.71a4.33 4.33 0 0 0 0.6 3.34c0.08 0.12 0.16 0.24 0.25 0.35l15.94 19.82a4.43 4.43 0 0 0 3.44 1.64h25.53a4.43 4.43 0 0 0 3.45-1.64l15.95-19.85a4.39 4.39 0 0 0 0.85-3.7l-5.69-24.71a4.41 4.41 0 0 0-2.38-3l-23-11a4.35 4.35 0 0 0-2.18-0.38zm0 1.69a4.17 4.17 0 0 1 2 0.41l21.84 10.37a4.19 4.19 0 0 1 2.26 2.81l5.39 23.4a4.12 4.12 0 0 1-0.81 3.5l-15.09 18.78a4.19 4.19 0 0 1-3.26 1.55h-24.21a4.19 4.19 0 0 1-3.26-1.56l-15.09-18.77a3.43 3.43 0 0 1-0.24-0.33 4.12 4.12 0 0 1-0.57-3.17l5.38-23.41a4.17 4.17 0 0 1 2.26-2.8l21.8-10.37a4.21 4.21 0 0 1 1.6-0.41z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-10-7" class="cls-14" data-name="text2066">
+    <text id="text205-7" class="cls-18" transform="translate(457.08,312.94)">api</text>
+   </g>
+   <path id="path1984-4-3" class="cls-13" d="m463.76 267.54c-0.51 0-14.67 6.94-14.86 7.3-0.44 0.86-3.66 15.72-3.47 16s2.43 3.13 5.15 6.54l5 6.2h16.31l5.19-6.49 5.19-6.48-1.81-8c-1-4.38-1.9-8-2-8.13-0.25-0.24-14.4-7-14.67-7zm0.87 7.28c0.68 0 0.75 1.07 2.22 1.18 1.91 0.14 1.71-1.64 3.17-0.4s-0.32 1.33 0.13 3.2 2.09 1.12 1.36 2.89-1.37 0.1-3 1.11-0.42 2.34-2.34 2.19-0.51-1.27-2-2.51-2.35 0.32-2.8-1.54 1.05-0.89 1.78-2.67-1-2.13 0.6-3.14a2.28 2.28 0 0 1 0.52-0.26 0.88 0.88 0 0 1 0.34-0.05zm1.91 2.1a2.86 2.86 0 0 0-0.82 0.12 2.77 2.77 0 1 0 0.82-0.12zm-11 4.78a1.84 1.84 0 0 1 0.55 0.1c1.76 0.54 0 1.47 1.22 2.81s2.31-0.37 2.73 1.43-1.29 0.71-1.83 2.47 1.47 1.81 0.13 3.07-1.26-0.76-3.06-0.34-0.83 2.18-2.59 1.64 0-1.47-1.23-2.82-2.31 0.37-2.72-1.42 1.29-0.71 1.83-2.47-1.48-1.82-0.13-3.07 1.26 0.75 3.05 0.34c1.57-0.36 1-1.76 2.05-1.74zm13.1 1.92a2.08 2.08 0 0 1 0.63 0.15c2 0.79-0.65 2 0.93 3.51s2.67-1.22 3.55 0.77-1.88 1-1.83 3.14 2.75 1 2 3.06-2-0.65-3.51 0.93 1.21 2.67-0.78 3.55-1-1.87-3.14-1.83-1 2.75-3.05 2 0.64-2-0.94-3.51-2.67 1.22-3.54-0.78 1.87-1 1.82-3.14-2.75-1-2-3.05 2 0.64 3.51-0.93-1.22-2.67 0.77-3.55 1 1.87 3.14 1.82c1.91 0 1.26-2.12 2.43-2.11zm-14.25 0.94a2.78 2.78 0 1 0 2.78 2.78 2.77 2.77 0 0 0-2.77-2.78zm12 2.66a4.1 4.1 0 1 0 4.09 4.1 4.1 4.1 0 0 0-4.13-4.1z" data-name="path1984"/>
+  </g>
+ </g>
+ <g id="g2066" transform="translate(-123.82 -40.997)">
+  <path id="path84" class="cls-4" d="m396.5 106.15h70v70.14h-70z"/>
+  <g id="layer1-11" transform="translate(-31.326 -2.8445)" data-name="layer1">
+   <g id="g70-11" data-name="g70">
+    <path id="path3055-11" class="cls-11" d="m462.48 109.72a4.33 4.33 0 0 0-1.65 0.42l-22.55 10.77a4.29 4.29 0 0 0-2.33 2.9l-5.56 24.19a4.22 4.22 0 0 0 0.59 3.28 2.62 2.62 0 0 0 0.24 0.34l15.61 19.38a4.29 4.29 0 0 0 3.37 1.61h25a4.34 4.34 0 0 0 3.37-1.6l15.6-19.41a4.22 4.22 0 0 0 0.83-3.6l-5.57-24.19a4.27 4.27 0 0 0-2.33-2.9l-22.55-10.77a4.31 4.31 0 0 0-2.07-0.42z" data-name="path3055"/>
+    <path id="path3054-2-9-11" class="cls-13" d="m462.47 108a4.56 4.56 0 0 0-1.74 0.44l-23.8 11.37a4.53 4.53 0 0 0-2.47 3.06l-5.87 25.55a4.49 4.49 0 0 0 0.62 3.46l0.26 0.36 16.47 20.48a4.57 4.57 0 0 0 3.56 1.7h26.42a4.56 4.56 0 0 0 3.56-1.69l16.46-20.49a4.44 4.44 0 0 0 0.88-3.81l-5.88-25.55a4.5 4.5 0 0 0-2.46-3.06l-23.8-11.37a4.57 4.57 0 0 0-2.21-0.45zm0 1.75a4.31 4.31 0 0 1 2.09 0.42l22.55 10.77a4.27 4.27 0 0 1 2.33 2.9l5.56 24.16a4.21 4.21 0 0 1-0.83 3.62l-15.58 19.38a4.31 4.31 0 0 1-3.37 1.6h-25a4.33 4.33 0 0 1-3.38-1.61l-15.6-19.4c-0.09-0.11-0.17-0.22-0.25-0.34a4.26 4.26 0 0 1-0.58-3.28l5.56-24.2a4.29 4.29 0 0 1 2.33-2.9l22.55-10.77a4.33 4.33 0 0 1 1.65-0.42z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-11" class="cls-14" data-name="text2066">
+    <text id="text213" class="cls-19" transform="translate(449.46,167.32)">c-c-m</text>
+   </g>
+   <path id="path1984-5" class="cls-13" d="m462.64 120.39c-0.53 0-15.17 7.18-15.36 7.55-0.46 0.88-3.79 16.25-3.59 16.58s2.51 3.23 5.33 6.76l5.12 6.4h16.86l5.36-6.7 5.37-6.7-1.88-8.23c-1-4.53-2-8.31-2.05-8.4-0.27-0.25-14.89-7.26-15.17-7.27zm0.9 7.52c0.7 0 0.78 1.11 2.29 1.22 2 0.15 1.77-1.69 3.28-0.41s-0.33 1.38 0.14 3.31 2.16 1.15 1.4 3-1.41 0.1-3.1 1.15-0.43 2.41-2.41 2.26-0.54-1.31-2.05-2.6-2.43 0.34-2.9-1.59 1.08-0.92 1.83-2.75-1.06-2.21 0.63-3.25a2.45 2.45 0 0 1 0.54-0.27 0.92 0.92 0 0 1 0.35-0.06zm2 2.17a3 3 0 0 0-0.84 0.12 2.88 2.88 0 1 0 0.84-0.12zm-11.38 4.92a2.47 2.47 0 0 1 0.56 0.11c1.82 0.56 0 1.51 1.27 2.91s2.38-0.38 2.81 1.47-1.33 0.73-1.89 2.56 1.53 1.87 0.13 3.17-1.29-0.78-3.15-0.35-0.86 2.25-2.68 1.69 0-1.51-1.27-2.91-2.39 0.38-2.82-1.47 1.33-0.73 1.89-2.56-1.53-1.87-0.13-3.17 1.3 0.78 3.15 0.36c1.63-0.38 1.07-1.82 2.13-1.81zm13.54 2a1.81 1.81 0 0 1 0.64 0.14c2.1 0.82-0.66 2.08 1 3.63s2.77-1.26 3.67 0.8-1.93 1-1.88 3.25 2.84 1.06 2 3.16-2.07-0.67-3.63 1 1.26 2.76-0.8 3.67-1-1.94-3.25-1.89-1.06 2.85-3.16 2 0.67-2.07-1-3.63-2.76 1.27-3.67-0.79 1.94-1 1.89-3.25-2.85-1.06-2-3.16 2.07 0.67 3.63-1-1.26-2.76 0.8-3.67 1 1.93 3.24 1.88c2 0 1.31-2.19 2.52-2.17zm-14.7 1a2.88 2.88 0 1 0 2.87 2.88 2.88 2.88 0 0 0-2.87-2.88zm12.35 2.76a4.23 4.23 0 1 0 4.24 4.23 4.23 4.23 0 0 0-4.28-4.25z" data-name="path1984"/>
+  </g>
+  <g id="layer1-11-3" transform="translate(-22.232 5.3355)" data-name="layer1">
+   <g id="g70-11-2" data-name="g70">
+    <path id="path3055-11-0" class="cls-11" d="m462.48 109.72a4.33 4.33 0 0 0-1.65 0.42l-22.55 10.77a4.29 4.29 0 0 0-2.33 2.9l-5.56 24.19a4.22 4.22 0 0 0 0.59 3.28 2.62 2.62 0 0 0 0.24 0.34l15.61 19.38a4.29 4.29 0 0 0 3.37 1.61h25a4.34 4.34 0 0 0 3.37-1.6l15.6-19.41a4.22 4.22 0 0 0 0.83-3.6l-5.57-24.19a4.27 4.27 0 0 0-2.33-2.9l-22.55-10.77a4.31 4.31 0 0 0-2.07-0.42z" data-name="path3055"/>
+    <path id="path3054-2-9-11-7" class="cls-13" d="m462.47 108a4.56 4.56 0 0 0-1.74 0.44l-23.8 11.37a4.53 4.53 0 0 0-2.47 3.06l-5.87 25.55a4.49 4.49 0 0 0 0.62 3.46l0.26 0.36 16.47 20.48a4.57 4.57 0 0 0 3.56 1.7h26.42a4.56 4.56 0 0 0 3.56-1.69l16.46-20.49a4.44 4.44 0 0 0 0.88-3.81l-5.88-25.55a4.5 4.5 0 0 0-2.46-3.06l-23.8-11.37a4.57 4.57 0 0 0-2.21-0.45zm0 1.75a4.31 4.31 0 0 1 2.09 0.42l22.55 10.77a4.27 4.27 0 0 1 2.33 2.9l5.56 24.16a4.21 4.21 0 0 1-0.83 3.62l-15.58 19.38a4.31 4.31 0 0 1-3.37 1.6h-25a4.33 4.33 0 0 1-3.38-1.61l-15.6-19.4c-0.09-0.11-0.17-0.22-0.25-0.34a4.26 4.26 0 0 1-0.58-3.28l5.56-24.2a4.29 4.29 0 0 1 2.33-2.9l22.55-10.77a4.33 4.33 0 0 1 1.65-0.42z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-11-4" class="cls-14" data-name="text2066">
+    <text id="text213-7" class="cls-19" transform="translate(449.46,167.32)">c-c-m</text>
+   </g>
+   <path id="path1984-5-6" class="cls-13" d="m462.64 120.39c-0.53 0-15.17 7.18-15.36 7.55-0.46 0.88-3.79 16.25-3.59 16.58s2.51 3.23 5.33 6.76l5.12 6.4h16.86l5.36-6.7 5.37-6.7-1.88-8.23c-1-4.53-2-8.31-2.05-8.4-0.27-0.25-14.89-7.26-15.17-7.27zm0.9 7.52c0.7 0 0.78 1.11 2.29 1.22 2 0.15 1.77-1.69 3.28-0.41s-0.33 1.38 0.14 3.31 2.16 1.15 1.4 3-1.41 0.1-3.1 1.15-0.43 2.41-2.41 2.26-0.54-1.31-2.05-2.6-2.43 0.34-2.9-1.59 1.08-0.92 1.83-2.75-1.06-2.21 0.63-3.25a2.45 2.45 0 0 1 0.54-0.27 0.92 0.92 0 0 1 0.35-0.06zm2 2.17a3 3 0 0 0-0.84 0.12 2.88 2.88 0 1 0 0.84-0.12zm-11.38 4.92a2.47 2.47 0 0 1 0.56 0.11c1.82 0.56 0 1.51 1.27 2.91s2.38-0.38 2.81 1.47-1.33 0.73-1.89 2.56 1.53 1.87 0.13 3.17-1.29-0.78-3.15-0.35-0.86 2.25-2.68 1.69 0-1.51-1.27-2.91-2.39 0.38-2.82-1.47 1.33-0.73 1.89-2.56-1.53-1.87-0.13-3.17 1.3 0.78 3.15 0.36c1.63-0.38 1.07-1.82 2.13-1.81zm13.54 2a1.81 1.81 0 0 1 0.64 0.14c2.1 0.82-0.66 2.08 1 3.63s2.77-1.26 3.67 0.8-1.93 1-1.88 3.25 2.84 1.06 2 3.16-2.07-0.67-3.63 1 1.26 2.76-0.8 3.67-1-1.94-3.25-1.89-1.06 2.85-3.16 2 0.67-2.07-1-3.63-2.76 1.27-3.67-0.79 1.94-1 1.89-3.25-2.85-1.06-2-3.16 2.07 0.67 3.63-1-1.26-2.76 0.8-3.67 1 1.93 3.24 1.88c2 0 1.31-2.19 2.52-2.17zm-14.7 1a2.88 2.88 0 1 0 2.87 2.88 2.88 2.88 0 0 0-2.87-2.88zm12.35 2.76a4.23 4.23 0 1 0 4.24 4.23 4.23 4.23 0 0 0-4.28-4.25z" data-name="path1984"/>
+  </g>
+  <g id="layer1-11-8" transform="translate(-13.136 13.515)" data-name="layer1">
+   <g id="g70-11-1" data-name="g70">
+    <path id="path3055-11-8" class="cls-11" d="m462.48 109.72a4.33 4.33 0 0 0-1.65 0.42l-22.55 10.77a4.29 4.29 0 0 0-2.33 2.9l-5.56 24.19a4.22 4.22 0 0 0 0.59 3.28 2.62 2.62 0 0 0 0.24 0.34l15.61 19.38a4.29 4.29 0 0 0 3.37 1.61h25a4.34 4.34 0 0 0 3.37-1.6l15.6-19.41a4.22 4.22 0 0 0 0.83-3.6l-5.57-24.19a4.27 4.27 0 0 0-2.33-2.9l-22.55-10.77a4.31 4.31 0 0 0-2.07-0.42z" data-name="path3055"/>
+    <path id="path3054-2-9-11-9" class="cls-13" d="m462.47 108a4.56 4.56 0 0 0-1.74 0.44l-23.8 11.37a4.53 4.53 0 0 0-2.47 3.06l-5.87 25.55a4.49 4.49 0 0 0 0.62 3.46l0.26 0.36 16.47 20.48a4.57 4.57 0 0 0 3.56 1.7h26.42a4.56 4.56 0 0 0 3.56-1.69l16.46-20.49a4.44 4.44 0 0 0 0.88-3.81l-5.88-25.55a4.5 4.5 0 0 0-2.46-3.06l-23.8-11.37a4.57 4.57 0 0 0-2.21-0.45zm0 1.75a4.31 4.31 0 0 1 2.09 0.42l22.55 10.77a4.27 4.27 0 0 1 2.33 2.9l5.56 24.16a4.21 4.21 0 0 1-0.83 3.62l-15.58 19.38a4.31 4.31 0 0 1-3.37 1.6h-25a4.33 4.33 0 0 1-3.38-1.61l-15.6-19.4c-0.09-0.11-0.17-0.22-0.25-0.34a4.26 4.26 0 0 1-0.58-3.28l5.56-24.2a4.29 4.29 0 0 1 2.33-2.9l22.55-10.77a4.33 4.33 0 0 1 1.65-0.42z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-11-3" class="cls-14" data-name="text2066">
+    <text id="text213-72" class="cls-19" transform="translate(449.46,167.32)">c-c-m</text>
+   </g>
+   <path id="path1984-5-7" class="cls-13" d="m462.64 120.39c-0.53 0-15.17 7.18-15.36 7.55-0.46 0.88-3.79 16.25-3.59 16.58s2.51 3.23 5.33 6.76l5.12 6.4h16.86l5.36-6.7 5.37-6.7-1.88-8.23c-1-4.53-2-8.31-2.05-8.4-0.27-0.25-14.89-7.26-15.17-7.27zm0.9 7.52c0.7 0 0.78 1.11 2.29 1.22 2 0.15 1.77-1.69 3.28-0.41s-0.33 1.38 0.14 3.31 2.16 1.15 1.4 3-1.41 0.1-3.1 1.15-0.43 2.41-2.41 2.26-0.54-1.31-2.05-2.6-2.43 0.34-2.9-1.59 1.08-0.92 1.83-2.75-1.06-2.21 0.63-3.25a2.45 2.45 0 0 1 0.54-0.27 0.92 0.92 0 0 1 0.35-0.06zm2 2.17a3 3 0 0 0-0.84 0.12 2.88 2.88 0 1 0 0.84-0.12zm-11.38 4.92a2.47 2.47 0 0 1 0.56 0.11c1.82 0.56 0 1.51 1.27 2.91s2.38-0.38 2.81 1.47-1.33 0.73-1.89 2.56 1.53 1.87 0.13 3.17-1.29-0.78-3.15-0.35-0.86 2.25-2.68 1.69 0-1.51-1.27-2.91-2.39 0.38-2.82-1.47 1.33-0.73 1.89-2.56-1.53-1.87-0.13-3.17 1.3 0.78 3.15 0.36c1.63-0.38 1.07-1.82 2.13-1.81zm13.54 2a1.81 1.81 0 0 1 0.64 0.14c2.1 0.82-0.66 2.08 1 3.63s2.77-1.26 3.67 0.8-1.93 1-1.88 3.25 2.84 1.06 2 3.16-2.07-0.67-3.63 1 1.26 2.76-0.8 3.67-1-1.94-3.25-1.89-1.06 2.85-3.16 2 0.67-2.07-1-3.63-2.76 1.27-3.67-0.79 1.94-1 1.89-3.25-2.85-1.06-2-3.16 2.07 0.67 3.63-1-1.26-2.76 0.8-3.67 1 1.93 3.24 1.88c2 0 1.31-2.19 2.52-2.17zm-14.7 1a2.88 2.88 0 1 0 2.87 2.88 2.88 2.88 0 0 0-2.87-2.88zm12.35 2.76a4.23 4.23 0 1 0 4.24 4.23 4.23 4.23 0 0 0-4.28-4.25z" data-name="path1984"/>
+  </g>
+ </g>
+ <g id="g2042" transform="translate(-123.82 -40.997)">
+  <path id="path82" class="cls-4" d="m208.7 106.15h70v70.14h-70z"/>
+  <g id="layer1-12" transform="translate(-45.575 -4.91)" data-name="layer1">
+   <g id="g70-12" data-name="g70">
+    <path id="path3055-12" class="cls-11" d="m275.24 108.5a4.33 4.33 0 0 0-1.62 0.39l-22.18 10.11a4 4 0 0 0-2.29 2.72l-5.47 22.72a3.83 3.83 0 0 0 0.57 3.08l0.24 0.32 15.35 18.22a4.37 4.37 0 0 0 3.32 1.51h24.62a4.3 4.3 0 0 0 3.31-1.51l15.35-18.21a3.9 3.9 0 0 0 0.82-3.4l-5.48-22.72a4.08 4.08 0 0 0-2.3-2.72l-22.18-10.12a4.41 4.41 0 0 0-2.06-0.39z" data-name="path3055"/>
+    <path id="path3054-2-9-12" class="cls-13" d="m275.23 106.85a4.62 4.62 0 0 0-1.71 0.42l-23.41 10.67a4.32 4.32 0 0 0-2.43 2.88l-5.77 24a4 4 0 0 0 0.61 3.25c0.08 0.12 0.16 0.23 0.25 0.34l16.23 19.21a4.61 4.61 0 0 0 3.51 1.59h26a4.58 4.58 0 0 0 3.5-1.6l16.2-19.23a4 4 0 0 0 0.86-3.58l-5.78-24a4.26 4.26 0 0 0-2.42-2.87l-23.41-10.68a4.79 4.79 0 0 0-2.23-0.4zm0 1.65a4.41 4.41 0 0 1 2.06 0.39l22.19 10.11a4.08 4.08 0 0 1 2.3 2.72l5.48 22.72a3.9 3.9 0 0 1-0.82 3.4l-15.35 18.21a4.3 4.3 0 0 1-3.31 1.51h-24.62a4.37 4.37 0 0 1-3.32-1.51l-15.35-18.22-0.24-0.32a3.83 3.83 0 0 1-0.57-3.08l5.47-22.71a4 4 0 0 1 2.29-2.73l22.18-10.11a4.33 4.33 0 0 1 1.62-0.39z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-12" class="cls-14" data-name="text2066">
+    <text id="text221" class="cls-20" transform="matrix(1.05,0,0,1,266.83,162.57)">c-m</text>
+   </g>
+   <path id="path1984-6" class="cls-13" d="m275.4 118.51c-0.52 0-14.92 6.74-15.11 7.09-0.45 0.83-3.73 15.25-3.53 15.57s2.47 3 5.24 6.34l5 6h16.59l5.28-6.29 5.27-6.29-1.84-7.73c-1-4.25-1.93-7.8-2-7.88-0.26-0.24-14.64-6.82-14.92-6.83zm0.88 7.06c0.7 0 0.77 1 2.26 1.15 1.95 0.14 1.74-1.59 3.23-0.39s-0.33 1.3 0.13 3.11 2.12 1.08 1.38 2.81-1.39 0.1-3 1.08-0.43 2.26-2.37 2.12-0.53-1.23-2-2.44-2.39 0.31-2.85-1.5 1.06-0.86 1.81-2.58-1.05-2.07 0.61-3.05a2.71 2.71 0 0 1 0.53-0.25 1.16 1.16 0 0 1 0.34-0.06zm2 2a2.94 2.94 0 0 0-0.84 0.12 2.68 2.68 0 0 0-1.89 3.36 2.85 2.85 0 0 0 3.52 1.8 2.67 2.67 0 0 0 1.89-3.36 2.8 2.8 0 0 0-2.73-1.88zm-11.18 4.64a2 2 0 0 1 0.56 0.1c1.79 0.52 0 1.42 1.25 2.73s2.34-0.36 2.76 1.39-1.3 0.68-1.85 2.39 1.5 1.76 0.12 3-1.27-0.73-3.1-0.33-0.85 2.12-2.64 1.59 0-1.42-1.25-2.73-2.34 0.36-2.76-1.38 1.3-0.69 1.85-2.4-1.5-1.76-0.13-3 1.28 0.74 3.11 0.33c1.6-0.35 1-1.7 2.08-1.69zm13.32 1.87a2.06 2.06 0 0 1 0.64 0.14c2.06 0.77-0.66 2 0.95 3.41s2.71-1.19 3.61 0.75-1.91 0.93-1.86 3.05 2.8 1 2 3-2-0.62-3.57 0.91 1.24 2.59-0.79 3.44-1-1.82-3.19-1.77-1 2.67-3.11 1.9 0.65-1.94-0.95-3.4-2.71 1.18-3.61-0.75 1.91-0.94 1.86-3-2.8-1-2-3 2 0.63 3.57-0.9-1.24-2.59 0.79-3.44 1 1.81 3.19 1.77c1.94 0 1.28-2.06 2.47-2zm-14.49 0.91a2.7 2.7 0 1 0 2.83 2.7 2.77 2.77 0 0 0-2.88-2.69zm12.07 2.62a4 4 0 1 0 4.16 4 4.07 4.07 0 0 0-4.16-4z" data-name="path1984"/>
+  </g>
+  <g id="layer1-12-3" transform="translate(-37.33 5.74)" data-name="layer1">
+   <g id="g70-12-4" data-name="g70">
+    <path id="path3055-12-0" class="cls-11" d="m275.24 108.5a4.33 4.33 0 0 0-1.62 0.39l-22.18 10.11a4 4 0 0 0-2.29 2.72l-5.47 22.72a3.83 3.83 0 0 0 0.57 3.08l0.24 0.32 15.35 18.22a4.37 4.37 0 0 0 3.32 1.51h24.62a4.3 4.3 0 0 0 3.31-1.51l15.35-18.21a3.9 3.9 0 0 0 0.82-3.4l-5.48-22.72a4.08 4.08 0 0 0-2.3-2.72l-22.18-10.12a4.41 4.41 0 0 0-2.06-0.39z" data-name="path3055"/>
+    <path id="path3054-2-9-12-9" class="cls-13" d="m275.23 106.85a4.62 4.62 0 0 0-1.71 0.42l-23.41 10.67a4.32 4.32 0 0 0-2.43 2.88l-5.77 24a4 4 0 0 0 0.61 3.25c0.08 0.12 0.16 0.23 0.25 0.34l16.23 19.21a4.61 4.61 0 0 0 3.51 1.59h26a4.58 4.58 0 0 0 3.5-1.6l16.2-19.23a4 4 0 0 0 0.86-3.58l-5.78-24a4.26 4.26 0 0 0-2.42-2.87l-23.41-10.68a4.79 4.79 0 0 0-2.23-0.4zm0 1.65a4.41 4.41 0 0 1 2.06 0.39l22.19 10.11a4.08 4.08 0 0 1 2.3 2.72l5.48 22.72a3.9 3.9 0 0 1-0.82 3.4l-15.35 18.21a4.3 4.3 0 0 1-3.31 1.51h-24.62a4.37 4.37 0 0 1-3.32-1.51l-15.35-18.22-0.24-0.32a3.83 3.83 0 0 1-0.57-3.08l5.47-22.71a4 4 0 0 1 2.29-2.73l22.18-10.11a4.33 4.33 0 0 1 1.62-0.39z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-12-6" class="cls-14" data-name="text2066">
+    <text id="text221-8" class="cls-20" transform="matrix(1.05,0,0,1,266.83,162.57)">c-m</text>
+   </g>
+   <path id="path1984-6-2" class="cls-13" d="m275.4 118.51c-0.52 0-14.92 6.74-15.11 7.09-0.45 0.83-3.73 15.25-3.53 15.57s2.47 3 5.24 6.34l5 6h16.59l5.28-6.29 5.27-6.29-1.84-7.73c-1-4.25-1.93-7.8-2-7.88-0.26-0.24-14.64-6.82-14.92-6.83zm0.88 7.06c0.7 0 0.77 1 2.26 1.15 1.95 0.14 1.74-1.59 3.23-0.39s-0.33 1.3 0.13 3.11 2.12 1.08 1.38 2.81-1.39 0.1-3 1.08-0.43 2.26-2.37 2.12-0.53-1.23-2-2.44-2.39 0.31-2.85-1.5 1.06-0.86 1.81-2.58-1.05-2.07 0.61-3.05a2.71 2.71 0 0 1 0.53-0.25 1.16 1.16 0 0 1 0.34-0.06zm2 2a2.94 2.94 0 0 0-0.84 0.12 2.68 2.68 0 0 0-1.89 3.36 2.85 2.85 0 0 0 3.52 1.8 2.67 2.67 0 0 0 1.89-3.36 2.8 2.8 0 0 0-2.73-1.88zm-11.18 4.64a2 2 0 0 1 0.56 0.1c1.79 0.52 0 1.42 1.25 2.73s2.34-0.36 2.76 1.39-1.3 0.68-1.85 2.39 1.5 1.76 0.12 3-1.27-0.73-3.1-0.33-0.85 2.12-2.64 1.59 0-1.42-1.25-2.73-2.34 0.36-2.76-1.38 1.3-0.69 1.85-2.4-1.5-1.76-0.13-3 1.28 0.74 3.11 0.33c1.6-0.35 1-1.7 2.08-1.69zm13.32 1.87a2.06 2.06 0 0 1 0.64 0.14c2.06 0.77-0.66 2 0.95 3.41s2.71-1.19 3.61 0.75-1.91 0.93-1.86 3.05 2.8 1 2 3-2-0.62-3.57 0.91 1.24 2.59-0.79 3.44-1-1.82-3.19-1.77-1 2.67-3.11 1.9 0.65-1.94-0.95-3.4-2.71 1.18-3.61-0.75 1.91-0.94 1.86-3-2.8-1-2-3 2 0.63 3.57-0.9-1.24-2.59 0.79-3.44 1 1.81 3.19 1.77c1.94 0 1.28-2.06 2.47-2zm-14.49 0.91a2.7 2.7 0 1 0 2.83 2.7 2.77 2.77 0 0 0-2.88-2.69zm12.07 2.62a4 4 0 1 0 4.16 4 4.07 4.07 0 0 0-4.16-4z" data-name="path1984"/>
+  </g>
+  <g id="layer1-12-6" transform="translate(-29.085 16.39)" data-name="layer1">
+   <g id="g70-12-42" data-name="g70">
+    <path id="path3055-12-3" class="cls-11" d="m275.24 108.5a4.33 4.33 0 0 0-1.62 0.39l-22.18 10.11a4 4 0 0 0-2.29 2.72l-5.47 22.72a3.83 3.83 0 0 0 0.57 3.08l0.24 0.32 15.35 18.22a4.37 4.37 0 0 0 3.32 1.51h24.62a4.3 4.3 0 0 0 3.31-1.51l15.35-18.21a3.9 3.9 0 0 0 0.82-3.4l-5.48-22.72a4.08 4.08 0 0 0-2.3-2.72l-22.18-10.12a4.41 4.41 0 0 0-2.06-0.39z" data-name="path3055"/>
+    <path id="path3054-2-9-12-0" class="cls-13" d="m275.23 106.85a4.62 4.62 0 0 0-1.71 0.42l-23.41 10.67a4.32 4.32 0 0 0-2.43 2.88l-5.77 24a4 4 0 0 0 0.61 3.25c0.08 0.12 0.16 0.23 0.25 0.34l16.23 19.21a4.61 4.61 0 0 0 3.51 1.59h26a4.58 4.58 0 0 0 3.5-1.6l16.2-19.23a4 4 0 0 0 0.86-3.58l-5.78-24a4.26 4.26 0 0 0-2.42-2.87l-23.41-10.68a4.79 4.79 0 0 0-2.23-0.4zm0 1.65a4.41 4.41 0 0 1 2.06 0.39l22.19 10.11a4.08 4.08 0 0 1 2.3 2.72l5.48 22.72a3.9 3.9 0 0 1-0.82 3.4l-15.35 18.21a4.3 4.3 0 0 1-3.31 1.51h-24.62a4.37 4.37 0 0 1-3.32-1.51l-15.35-18.22-0.24-0.32a3.83 3.83 0 0 1-0.57-3.08l5.47-22.71a4 4 0 0 1 2.29-2.73l22.18-10.11a4.33 4.33 0 0 1 1.62-0.39z" data-name="path3054-2-9"/>
+   </g>
+   <g id="text2066-12-5" class="cls-14" data-name="text2066">
+    <text id="text221-0" class="cls-20" transform="matrix(1.05,0,0,1,266.83,162.57)">c-m</text>
+   </g>
+   <path id="path1984-6-7" class="cls-13" d="m275.4 118.51c-0.52 0-14.92 6.74-15.11 7.09-0.45 0.83-3.73 15.25-3.53 15.57s2.47 3 5.24 6.34l5 6h16.59l5.28-6.29 5.27-6.29-1.84-7.73c-1-4.25-1.93-7.8-2-7.88-0.26-0.24-14.64-6.82-14.92-6.83zm0.88 7.06c0.7 0 0.77 1 2.26 1.15 1.95 0.14 1.74-1.59 3.23-0.39s-0.33 1.3 0.13 3.11 2.12 1.08 1.38 2.81-1.39 0.1-3 1.08-0.43 2.26-2.37 2.12-0.53-1.23-2-2.44-2.39 0.31-2.85-1.5 1.06-0.86 1.81-2.58-1.05-2.07 0.61-3.05a2.71 2.71 0 0 1 0.53-0.25 1.16 1.16 0 0 1 0.34-0.06zm2 2a2.94 2.94 0 0 0-0.84 0.12 2.68 2.68 0 0 0-1.89 3.36 2.85 2.85 0 0 0 3.52 1.8 2.67 2.67 0 0 0 1.89-3.36 2.8 2.8 0 0 0-2.73-1.88zm-11.18 4.64a2 2 0 0 1 0.56 0.1c1.79 0.52 0 1.42 1.25 2.73s2.34-0.36 2.76 1.39-1.3 0.68-1.85 2.39 1.5 1.76 0.12 3-1.27-0.73-3.1-0.33-0.85 2.12-2.64 1.59 0-1.42-1.25-2.73-2.34 0.36-2.76-1.38 1.3-0.69 1.85-2.4-1.5-1.76-0.13-3 1.28 0.74 3.11 0.33c1.6-0.35 1-1.7 2.08-1.69zm13.32 1.87a2.06 2.06 0 0 1 0.64 0.14c2.06 0.77-0.66 2 0.95 3.41s2.71-1.19 3.61 0.75-1.91 0.93-1.86 3.05 2.8 1 2 3-2-0.62-3.57 0.91 1.24 2.59-0.79 3.44-1-1.82-3.19-1.77-1 2.67-3.11 1.9 0.65-1.94-0.95-3.4-2.71 1.18-3.61-0.75 1.91-0.94 1.86-3-2.8-1-2-3 2 0.63 3.57-0.9-1.24-2.59 0.79-3.44 1 1.81 3.19 1.77c1.94 0 1.28-2.06 2.47-2zm-14.49 0.91a2.7 2.7 0 1 0 2.83 2.7 2.77 2.77 0 0 0-2.88-2.69zm12.07 2.62a4 4 0 1 0 4.16 4 4.07 4.07 0 0 0-4.16-4z" data-name="path1984"/>
+  </g>
+ </g>
+ <text id="text257-0" class="cls-22" x="709.74622" y="273.9754" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1312-5" font-family="'Open Sans'" font-size="14.667px" font-weight="bold" text-align="center" text-anchor="middle" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Node</tspan></text>
+ <text id="text257-0-8" class="cls-22" x="870.43634" y="273.14334" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1312-5-0" font-family="'Open Sans'" font-size="14.667px" font-weight="bold" text-align="center" text-anchor="middle" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Node</tspan></text>
+ <g id="g1782" transform="translate(-123.82 -40.997)">
+  <path id="path24" class="cls-7" d="m482.2 151.95h391.95" stroke-width="1.5"/>
+  <path id="path26" d="m872.31 157.19 13.46-4.84-13.46-4.83z"/>
+ </g>
+ <g id="g3988" transform="translate(-123.82 664.74)">
+  <g id="g3990"></g>
+ </g>
+ <g id="g4014" transform="translate(-123.82 664.74)">
+  <g id="g4016"></g>
+ </g>
+ <path id="path4857" d="m468.32 368.91v100.33h47.605v-1h-46.605v-99.334z" color="#000000" color-rendering="auto" dominant-baseline="auto" fill-rule="evenodd" image-rendering="auto" shape-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+ <path id="path4853" d="m346.1 259.99c-323.35-210.23-161.68-105.11 0 0z" color="#000000" color-rendering="auto" dominant-baseline="auto" fill-rule="evenodd" image-rendering="auto" shape-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+ <path id="path3934" d="m629.76 369.61v100.33h45.238v-1h-44.238v-99.334z" color="#000000" color-rendering="auto" dominant-baseline="auto" fill-rule="evenodd" image-rendering="auto" shape-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+ <g id="layer1" transform="translate(-312.21 93.814)">
+  <g id="g70">
+   <path id="path3055" class="cls-11" d="m861.36 328.44a4.79 4.79 0 0 0-1.82 0.46l-24.77 11.83a4.71 4.71 0 0 0-2.56 3.19l-6.12 26.59a4.66 4.66 0 0 0 0.65 3.6 3.28 3.28 0 0 0 0.27 0.38l17.14 21.32a4.75 4.75 0 0 0 3.71 1.76h27.5a4.74 4.74 0 0 0 3.7-1.77l17.14-21.32a4.68 4.68 0 0 0 0.92-4l-6.12-26.56a4.69 4.69 0 0 0-2.56-3.19l-24.79-11.83a4.76 4.76 0 0 0-2.29-0.46z"/>
+   <path id="path3054-2-9" class="cls-13" d="m861.34 326.51a5.09 5.09 0 0 0-1.91 0.49l-26.15 12.49a5 5 0 0 0-2.71 3.37l-6.45 28.07a4.9 4.9 0 0 0 0.68 3.8c0.09 0.14 0.18 0.27 0.28 0.4l18.1 22.5a5 5 0 0 0 3.91 1.87h29a5 5 0 0 0 3.91-1.86l18.1-22.51a5 5 0 0 0 1-4.2l-6.46-28.07a5 5 0 0 0-2.7-3.36l-26.17-12.5a5.07 5.07 0 0 0-2.43-0.49zm0 1.93a4.76 4.76 0 0 1 2.29 0.46l24.78 11.83a4.69 4.69 0 0 1 2.56 3.19l6.12 26.59a4.63 4.63 0 0 1-0.91 4l-17.12 21.29a4.75 4.75 0 0 1-3.71 1.77h-27.49a4.75 4.75 0 0 1-3.71-1.77l-17.15-21.31a3.28 3.28 0 0 1-0.27-0.38 4.66 4.66 0 0 1-0.65-3.6l6.11-26.59a4.73 4.73 0 0 1 2.57-3.18l24.77-11.84a4.79 4.79 0 0 1 1.82-0.46z"/>
+  </g>
+  <g id="text2066" class="cls-14">
+   <text id="text133" class="cls-15" transform="translate(841.97,391.73)">k-proxy</text>
+  </g>
+  <path id="path1994" class="cls-13" d="m861.53 338.69c-0.58 0-16.66 7.89-16.87 8.29-0.51 1-4.17 17.86-4 18.23 0.13 0.21 2.77 3.55 5.86 7.42l5.63 7h18.53l5.9-7.37 5.89-7.36-2.06-9c-1.13-5-2.15-9.13-2.25-9.23-0.29-0.28-16.36-8-16.67-8zm0.82 3.95 3.79 1.1-3.79 1.1-3.79-1.1zm-3.79 1.52 3.55 1.06v4.93l-3.53-2zm7.58 0v4l-3.53 2v-4.93zm-9.14 6.73 3.79 1.1-3.79 1.1-3.79-1.1zm9.22 0 3.78 1.11-3.79 1.1-3.8-1.1zm-13 1.52 3.55 1.06v4.93l-3.54-1.95zm7.58 0v4l-3.53 1.95v-4.93zm1.63 0 3.55 1.06v4.93l-3.53-1.95zm7.59 0v4l-3.54 1.95v-4.93zm-14.39 6.32c1.13 0 0.25 1.18 1.53 1.79s1.65-1 2.51 0.26-0.76 0.93-0.64 2.44 1.67 0.94 1 2.31-1.19-0.2-2.43 0.66 0 1.92-1.48 2-0.43-1.13-1.79-1.78-1.65 1-2.51-0.27 0.76-0.93 0.64-2.43-1.67-0.94-1-2.31 1.19 0.2 2.43-0.66 0-1.92 1.49-2zm9.74 1.52c2 0.05 0.06 1.95 1.9 2.77s1.95-1.89 3.34-0.43-1.34 1.42-0.62 3.31 2.72 0 2.66 2.05-2 0.06-2.77 1.9 1.89 1.95 0.43 3.34-1.42-1.34-3.31-0.62 0 2.72-2.05 2.66-0.06-2-1.9-2.77-2 1.89-3.34 0.43 1.34-1.42 0.62-3.31-2.72 0-2.66-2.05 2-0.06 2.77-1.9-1.89-1.95-0.43-3.34 1.42 1.34 3.31 0.62-0.01-2.72 2.01-2.66zm-9.65 1.05a2.22 2.22 0 1 0 2.21 2.22 2.22 2.22 0 0 0-2.25-2.22zm9.44 2a4.43 4.43 0 1 0 4.43 4.43 4.43 4.43 0 0 0-4.47-4.42z"/>
+ </g>
+ <g id="layer1-4" transform="translate(-312.22 93.814)" data-name="layer1">
+  <g id="g70-4" data-name="g70">
+   <path id="path3055-4" class="cls-11" d="m861.37 239.22a4.45 4.45 0 0 0-1.72 0.43l-23.45 11.21a4.46 4.46 0 0 0-2.43 3l-5.77 25.19a4.46 4.46 0 0 0 0.61 3.41c0.08 0.12 0.17 0.24 0.26 0.35l16.21 20.19a4.52 4.52 0 0 0 3.51 1.67h26a4.46 4.46 0 0 0 3.51-1.67l16.23-20.18a4.42 4.42 0 0 0 0.86-3.77l-5.79-25.17a4.46 4.46 0 0 0-2.43-3l-23.45-11.2a4.56 4.56 0 0 0-2.15-0.46z" data-name="path3055"/>
+   <path id="path3054-2-9-4" class="cls-13" d="m861.36 237.39a4.71 4.71 0 0 0-1.81 0.47l-24.77 11.82a4.74 4.74 0 0 0-2.56 3.19l-6.1 26.57a4.62 4.62 0 0 0 0.64 3.6 3.28 3.28 0 0 0 0.27 0.38l17.13 21.31a4.78 4.78 0 0 0 3.71 1.76h27.48a4.74 4.74 0 0 0 3.7-1.77l17.13-21.31a4.66 4.66 0 0 0 0.92-4l-6.1-26.55a4.72 4.72 0 0 0-2.56-3.18l-24.76-11.83a4.82 4.82 0 0 0-2.32-0.46zm0 1.83a4.49 4.49 0 0 1 2.17 0.43l23.47 11.2a4.48 4.48 0 0 1 2.43 3l5.79 25.15a4.42 4.42 0 0 1-0.86 3.77l-16.23 20.23a4.5 4.5 0 0 1-3.51 1.68h-26a4.49 4.49 0 0 1-3.51-1.67l-16.23-20.19c-0.09-0.11-0.18-0.23-0.26-0.35a4.42 4.42 0 0 1-0.61-3.41l5.79-25.17a4.46 4.46 0 0 1 2.43-3l23.45-11.21a4.45 4.45 0 0 1 1.72-0.43z" data-name="path3054-2-9"/>
+  </g>
+  <g id="text2066-4" class="cls-14" data-name="text2066">
+   <text id="text157" class="cls-16" transform="translate(843.3,299.14)">kubelet</text>
+  </g>
+  <path id="path1994-4" class="cls-13" d="m861.53 248.92c-0.54 0-15.77 7.47-16 7.85-0.48 0.93-3.95 16.91-3.74 17.25s2.61 3.37 5.54 7l5.33 6.67h17.55l11.16-14-1.95-8.56c-1.08-4.71-2-8.64-2.14-8.74-0.27-0.26-15.48-7.55-15.78-7.56zm0.78 3.74 3.59 1-3.59 1-3.59-1zm-3.59 1.44 3.36 1v4.67l-3.34-1.85zm7.18 0v3.82l-3.35 1.85v-4.67zm-8.68 6.38 3.59 1-3.59 1-3.59-1zm8.72 0 3.59 1-3.59 1-3.59-1zm-12.31 1.43 3.36 1v4.68l-3.35-1.86zm7.18 0v3.82l-3.35 1.86v-4.68zm1.54 0 3.36 1v4.68l-3.35-1.86zm7.18 0v3.82l-3.34 1.86v-4.68zm-13.62 6c1.07 0 0.24 1.11 1.45 1.69s1.56-0.93 2.38 0.25-0.73 0.88-0.61 2.31 1.58 0.89 1 2.18-1.13-0.19-2.31 0.62 0 1.82-1.4 1.94-0.4-1.07-1.7-1.69-1.56 0.93-2.37-0.25 0.73-0.88 0.61-2.31-1.59-0.88-1-2.18 1.12 0.19 2.3-0.62 0-1.82 1.41-1.94zm9.22 1.43c1.91 0.05 0.06 1.85 1.8 2.63s1.85-1.8 3.16-0.41-1.26 1.34-0.58 3.13 2.57 0 2.52 1.94-1.85 0.06-2.63 1.8 1.79 1.85 0.41 3.16-1.35-1.26-3.13-0.58 0 2.57-1.95 2.52-0.05-1.85-1.8-2.63-1.84 1.8-3.15 0.41 1.26-1.34 0.58-3.13-2.58 0-2.52-1.94 1.84-0.06 2.62-1.81-1.79-1.84-0.4-3.15 1.34 1.26 3.13 0.58 0.03-2.58 1.94-2.53zm-9.14 1a2.1 2.1 0 1 0 2.1 2.1 2.1 2.1 0 0 0-2.09-2.11zm8.94 1.9a4.2 4.2 0 1 0 4.2 4.19 4.2 4.2 0 0 0-4.2-4.2z" data-name="path1994"/>
+ </g>
+ <g id="layer1-5" transform="translate(-288.32 93.814)" data-name="layer1">
+  <g id="g70-5" data-name="g70">
+   <path id="path3055-5" class="cls-11" d="m998.15 239.22a4.45 4.45 0 0 0-1.72 0.43l-23.43 11.21a4.45 4.45 0 0 0-2.42 3l-5.79 25.17a4.42 4.42 0 0 0 0.61 3.41 2.88 2.88 0 0 0 0.26 0.35l16.2 20.21a4.52 4.52 0 0 0 3.51 1.67h26a4.49 4.49 0 0 0 3.51-1.67l16.22-20.18a4.42 4.42 0 0 0 0.9-3.82l-5.79-25.17a4.48 4.48 0 0 0-2.43-3l-23.46-11.2a4.49 4.49 0 0 0-2.17-0.41z" data-name="path3055"/>
+   <path id="path3054-2-9-5" class="cls-13" d="m998.13 237.39a4.81 4.81 0 0 0-1.81 0.47l-24.76 11.82a4.71 4.71 0 0 0-2.56 3.19l-6.11 26.57a4.7 4.7 0 0 0 0.64 3.6l0.27 0.38 17.14 21.31a4.76 4.76 0 0 0 3.7 1.76h27.48a4.76 4.76 0 0 0 3.71-1.77l17.17-21.31a4.66 4.66 0 0 0 0.91-4l-6.11-26.58a4.73 4.73 0 0 0-2.57-3.18l-24.76-11.83a4.77 4.77 0 0 0-2.34-0.43zm0 1.83a4.52 4.52 0 0 1 2.17 0.43l23.46 11.2a4.48 4.48 0 0 1 2.43 3l5.81 25.15a4.42 4.42 0 0 1-0.87 3.77l-16.22 20.23a4.53 4.53 0 0 1-3.51 1.68h-26a4.49 4.49 0 0 1-3.51-1.67l-16.23-20.19a2.88 2.88 0 0 1-0.26-0.35 4.42 4.42 0 0 1-0.61-3.41l5.79-25.17a4.44 4.44 0 0 1 2.42-3l23.46-11.21a4.45 4.45 0 0 1 1.72-0.43z" data-name="path3054-2-9"/>
+  </g>
+  <g id="text2066-5" class="cls-14" data-name="text2066">
+   <text id="text165" class="cls-16" transform="translate(980.08,299.14)">kubelet</text>
+  </g>
+  <path id="path1994-5" class="cls-13" d="m998.31 248.92c-0.55 0-15.78 7.47-16 7.85-0.48 0.93-4 16.91-3.75 17.25s2.62 3.37 5.55 7l5.33 6.67h17.56l5.59-7 5.58-7-2-8.56c-1.07-4.71-2-8.64-2.13-8.74-0.28-0.26-15.48-7.55-15.78-7.56zm0.77 3.74 3.59 1-3.59 1-3.58-1zm-3.58 1.44 3.36 1v4.67l-3.34-1.85zm7.17 0v3.82l-3.34 1.85v-4.67zm-8.67 6.38 3.59 1-3.59 1-3.59-1zm8.72 0 3.59 1-3.59 1-3.59-1zm-12.31 1.43 3.36 1v4.68l-3.34-1.86zm7.18 0v3.82l-3.35 1.86v-4.68zm1.54 0 3.36 1v4.68l-3.34-1.86zm7.18 0v3.82l-3.35 1.86v-4.68zm-13.62 6c1.06 0 0.24 1.11 1.45 1.69s1.56-0.93 2.37 0.25-0.72 0.88-0.61 2.31 1.59 0.89 1 2.18-1.13-0.19-2.31 0.62 0 1.82-1.4 1.94-0.41-1.07-1.7-1.69-1.56 0.93-2.37-0.25 0.72-0.88 0.61-2.31-1.59-0.88-1-2.18 1.12 0.19 2.3-0.62 0-1.82 1.41-1.94zm9.22 1.43c1.91 0.05 0.06 1.85 1.8 2.63s1.84-1.8 3.16-0.41-1.27 1.34-0.59 3.13 2.58 0 2.52 1.94-1.84 0.06-2.62 1.8 1.79 1.85 0.4 3.16-1.34-1.26-3.12-0.58 0 2.57-2 2.52-0.06-1.85-1.8-2.63-1.85 1.8-3.16 0.41 1.27-1.34 0.58-3.13-2.57 0-2.51-1.94 1.84-0.06 2.62-1.81-1.79-1.84-0.41-3.15 1.35 1.26 3.13 0.58 0.09-2.58 2-2.53zm-9.14 1a2.1 2.1 0 1 0 2.1 2.1 2.1 2.1 0 0 0-2.1-2.11zm8.94 1.9a4.2 4.2 0 1 0 4.19 4.19 4.2 4.2 0 0 0-4.19-4.2z" data-name="path1994"/>
+ </g>
+ <g id="layer1-3-3" transform="translate(-440.4 93.814)" data-name="layer1">
+  <g id="g70-3-0" data-name="g70">
+   <path id="path3055-3-4" class="cls-11" d="m1150.2 328.44a4.79 4.79 0 0 0-1.82 0.46l-24.77 11.83a4.71 4.71 0 0 0-2.56 3.19l-6.1 26.59a4.66 4.66 0 0 0 0.65 3.6 3.28 3.28 0 0 0 0.27 0.38l17.08 21.32a4.75 4.75 0 0 0 3.71 1.76h27.5a4.74 4.74 0 0 0 3.7-1.77l17.14-21.32a4.68 4.68 0 0 0 0.92-4l-6.13-26.58a4.69 4.69 0 0 0-2.56-3.19l-24.77-11.83a4.82 4.82 0 0 0-2.26-0.44z" data-name="path3055"/>
+   <path id="path3054-2-9-3-0" class="cls-13" d="m1150.2 326.51a5.09 5.09 0 0 0-1.91 0.49l-26.15 12.49a5 5 0 0 0-2.71 3.37l-6.46 28.07a4.9 4.9 0 0 0 0.68 3.8c0.09 0.14 0.18 0.27 0.28 0.4l18.1 22.5a5 5 0 0 0 3.91 1.87h29a5 5 0 0 0 3.91-1.86l18.1-22.51a5 5 0 0 0 1-4.2l-6.46-28.07a5 5 0 0 0-2.7-3.36l-26.16-12.5a5.07 5.07 0 0 0-2.43-0.49zm0 1.93a4.76 4.76 0 0 1 2.29 0.46l24.78 11.83a4.69 4.69 0 0 1 2.56 3.19l6.13 26.59a4.66 4.66 0 0 1-0.92 4l-17.07 21.29a4.74 4.74 0 0 1-3.7 1.77h-27.5a4.76 4.76 0 0 1-3.71-1.77l-17.14-21.32a3.28 3.28 0 0 1-0.27-0.38 4.66 4.66 0 0 1-0.65-3.6l6.12-26.59a4.69 4.69 0 0 1 2.56-3.18l24.77-11.84a4.79 4.79 0 0 1 1.82-0.46z" data-name="path3054-2-9"/>
+  </g>
+  <g id="text2066-3-0" class="cls-14" data-name="text2066">
+   <text id="text149-5" class="cls-15" transform="translate(1130.9 391.73)">k-proxy</text>
+  </g>
+  <path id="path1994-3-5" class="cls-13" d="m1150.4 338.69c-0.58 0-16.66 7.89-16.87 8.29-0.51 1-4.17 17.86-4 18.23 0.12 0.21 2.76 3.55 5.85 7.42l5.63 7h18.53l5.9-7.37 5.89-7.36-2.06-9c-1.13-5-2.15-9.13-2.25-9.23-0.29-0.28-16.36-8-16.67-8zm0.82 3.95 3.79 1.1-3.79 1.1-3.79-1.1zm-3.79 1.52 3.55 1.06v4.93l-3.53-2zm7.58 0v4l-3.53 2v-4.93zm-9.17 6.73 3.79 1.1-3.79 1.1-3.79-1.1zm9.22 0 3.79 1.1-3.79 1.1-3.8-1.1zm-13 1.52 3.55 1.06v4.93l-3.54-1.95zm7.58 0v4l-3.53 1.95v-4.93zm1.63 0 3.55 1.06v4.93l-3.53-1.95zm7.59 0v4l-3.53 1.95v-4.93zm-14.39 6.32c1.13 0 0.25 1.18 1.54 1.79s1.64-1 2.5 0.26-0.76 0.93-0.64 2.44 1.67 0.94 1 2.31-1.19-0.2-2.43 0.66 0 1.92-1.48 2-0.43-1.13-1.79-1.78-1.65 1-2.51-0.27 0.76-0.93 0.64-2.43-1.67-0.94-1-2.31 1.19 0.2 2.43-0.66 0-1.92 1.49-2zm9.74 1.52c2 0.05 0.06 1.95 1.9 2.77s2-1.89 3.34-0.43-1.34 1.42-0.62 3.31 2.72 0 2.66 2.05-2 0.06-2.77 1.9 1.89 1.95 0.43 3.34-1.42-1.34-3.3-0.62 0 2.72-2.06 2.66-0.06-2-1.9-2.77-2 1.89-3.34 0.43 1.34-1.42 0.62-3.31-2.72 0-2.66-2.05 2-0.06 2.77-1.9-1.89-1.95-0.43-3.34 1.42 1.34 3.31 0.62 0.02-2.72 2.04-2.66zm-9.65 1.05a2.22 2.22 0 1 0 2.22 2.22 2.22 2.22 0 0 0-2.23-2.22zm9.44 2a4.43 4.43 0 1 0 4.43 4.43 4.43 4.43 0 0 0-4.45-4.42z" data-name="path1994"/>
+ </g>
+ <g id="g4896" transform="translate(-138.94 -55.356)" fill-rule="evenodd" shape-rendering="auto">
+  <g id="g4885">
+   <path id="path4847" d="m594.91 274.99v27.163h-107.08v1h108.08v-27.163h333.33v250.34h49.326v-1h-48.326v-100.37h48.326v-1h-48.326v-148.98z" color="#000000" color-rendering="auto" dominant-baseline="auto" image-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+   <path id="path4845" d="m488.78 300.07c-0.0266-2e-3 -0.0532 2e-3 -0.0781 0.0117l-6.5547 2.4102c-0.16295 0.0605-0.16295 0.29102 0 0.35156l6.5547 2.4121c0.1731 0.063 0.32383-0.13521 0.21679-0.28515-0.99512-1.3865-0.9987-3.2444 0-4.6016 0.0885-0.11937 0.01-0.28934-0.13867-0.29882z" color="#000000" color-rendering="auto" dominant-baseline="auto" image-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+  </g>
+  <g id="g4877">
+   <path id="path4861" d="m489.69 329.63v1h117.52v94.564h47.605v-1h-46.605v-94.564z" color="#000000" color-rendering="auto" dominant-baseline="auto" image-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+   <path id="path4859" d="m490.78 327.54c-0.014 2e-3 -0.0277 5e-3 -0.041 0.01l-6.5547 2.4121c-0.16295 0.0605-0.16295 0.29102 0 0.35156l6.5547 2.4102c0.17312 0.0631 0.32387-0.13522 0.2168-0.28516-0.99512-1.3865-1.0007-3.2444-2e-3 -4.6016 0.0968-0.13239-0.011-0.31652-0.17382-0.29687z" color="#000000" color-rendering="auto" dominant-baseline="auto" image-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+  </g>
+  <g id="g4881">
+   <path id="path4855" d="m607.02 287.07v27.763h-117.48v1h118.48v-27.763h160.68v137.39h45.271v-1h-44.271v-137.39z" color="#000000" color-rendering="auto" dominant-baseline="auto" image-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+   <path id="path4851" d="m492.11 312.75c-0.014 2e-3 -0.0278 5e-3 -0.041 0.01l-6.5547 2.4102c-0.16655 0.059-0.16655 0.29453 0 0.35352l6.5547 2.4102c0.17311 0.0631 0.32385-0.13522 0.21679-0.28516-0.99512-1.3865-0.9987-3.2444 0-4.6016 0.0978-0.13318-0.012-0.31859-0.17578-0.29688z" color="#000000" color-rendering="auto" dominant-baseline="auto" image-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+  </g>
+ </g>
+ <rect id="rect1051" x="40.959" y="40.872" width="351.71" height="459.79" ry="18.916" fill="none" opacity=".95" stroke="#336de5" stroke-dasharray="20.8, 2.6" stroke-miterlimit="1.414" stroke-width="2.6"/>
+ <g id="g4560">
+  <text id="text270" class="cls-22" x="1148.4604" y="500.68777" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1047" font-family="'Open Sans'" font-size="14.667px" font-weight="600" text-align="end" text-anchor="end" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Control plane</tspan></text>
+  <text id="text270-1" class="cls-22" x="1148.0236" y="456.87979" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1047-7" font-family="'Open Sans'" font-size="14.667px" font-weight="600" text-align="end" text-anchor="end" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Scheduler</tspan></text>
+  <g id="use1797" transform="translate(-137.57 -55.356)">
+   <g id="g1691" transform="matrix(.71919 0 0 .71919 992.05 180.04)" data-name="layer1">
+    <g id="g1683" data-name="g70">
+     <path id="path1679" class="cls-11" d="m465.45 413.24a4.4 4.4 0 0 0-1.71 0.43l-23.38 11.13a4.43 4.43 0 0 0-2.42 3l-5.77 25a4.36 4.36 0 0 0 0.61 3.39 2.8 2.8 0 0 0 0.25 0.35l16.18 20.06a4.5 4.5 0 0 0 3.5 1.66h26a4.5 4.5 0 0 0 3.5-1.66l16.18-20.06a4.35 4.35 0 0 0 0.86-3.74l-5.77-25a4.44 4.44 0 0 0-2.42-3l-23.39-11.13a4.49 4.49 0 0 0-2.22-0.43z" data-name="path3055"/>
+     <path id="path1681" class="cls-13" d="m465.44 411.43a4.73 4.73 0 0 0-1.81 0.45l-24.63 11.76a4.66 4.66 0 0 0-2.56 3.16l-6.09 26.4a4.65 4.65 0 0 0 0.64 3.58l0.27 0.37 17.09 21.18a4.72 4.72 0 0 0 3.69 1.75h27.4a4.76 4.76 0 0 0 3.69-1.76l17.08-21.17a4.64 4.64 0 0 0 0.91-3.95l-6.12-26.4a4.69 4.69 0 0 0-2.55-3.17l-24.69-11.75a4.75 4.75 0 0 0-2.32-0.45zm0 1.81a4.52 4.52 0 0 1 2.17 0.43l23.39 11.13a4.42 4.42 0 0 1 2.41 3l5.78 25a4.35 4.35 0 0 1-0.86 3.74l-16.18 20.06a4.5 4.5 0 0 1-3.5 1.66h-26a4.5 4.5 0 0 1-3.5-1.66l-16.15-20.05c-0.09-0.11-0.18-0.23-0.26-0.35a4.4 4.4 0 0 1-0.6-3.39l5.77-25a4.43 4.43 0 0 1 2.42-3l23.38-11.13a4.4 4.4 0 0 1 1.71-0.43z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g1687" class="cls-14" data-name="text2066">
+     <text id="text1685" class="cls-17" transform="translate(451.08,472.77)">sched</text>
+    </g>
+    <path id="path1689" class="cls-13" d="m465.61 424.26c-0.54 0-15.72 7.42-15.92 7.8-0.48 0.92-3.93 16.8-3.73 17.14s2.61 3.35 5.53 7l5.31 6.62h17.49l5.57-6.93 5.56-6.92-1.95-8.51c-1.07-4.68-2-8.59-2.12-8.68-0.28-0.26-15.44-7.51-15.74-7.52zm0.93 7.78c0.74 0 0.81 1.14 2.39 1.26 2.05 0.15 1.83-1.75 3.4-0.43s-0.35 1.43 0.14 3.42 2.24 1.2 1.46 3.1-1.47 0.1-3.22 1.18-0.45 2.5-2.51 2.34-0.55-1.35-2.12-2.68-2.52 0.34-3-1.65 1.13-0.95 1.91-2.85-1.11-2.28 0.64-3.36a2.78 2.78 0 0 1 0.56-0.27 1 1 0 0 1 0.36-0.06zm2.06 2.24a2.89 2.89 0 0 0-0.88 0.13 3 3 0 1 0 0.88-0.13zm-11.78 5.11a2.21 2.21 0 0 1 0.58 0.11c1.89 0.58 0 1.57 1.32 3s2.47-0.4 2.91 1.52-1.37 0.76-1.95 2.64 1.58 1.94 0.13 3.28-1.34-0.81-3.27-0.37-0.89 2.34-2.78 1.76 0-1.57-1.32-3-2.47 0.4-2.92-1.52 1.38-0.76 2-2.64-1.58-1.94-0.14-3.28 1.35 0.81 3.28 0.36c1.68-0.38 1.1-1.88 2.2-1.86zm14 2.06a2 2 0 0 1 0.67 0.15c2.18 0.85-0.69 2.15 1 3.75s2.86-1.3 3.8 0.83-2 1-1.95 3.36 2.95 1.09 2.1 3.26-2.15-0.69-3.76 1 1.31 2.85-0.83 3.79-1-2-3.37-1.95-1.1 2.94-3.27 2.1 0.69-2.15-1-3.75-2.86 1.3-3.81-0.83 2-1 2-3.36-2.95-1.09-2.11-3.26 2.15 0.69 3.77-1-1.31-2.85 0.83-3.79 1 2 3.36 1.95c2.05-0.05 1.36-2.26 2.61-2.25zm-15.28 1a3 3 0 1 0 3 3 3 3 0 0 0-2.96-3zm12.81 2.85a4.38 4.38 0 1 0 4.39 4.37 4.37 4.37 0 0 0-4.35-4.37z" data-name="path1984"/>
+   </g>
+  </g>
+  <text id="text270-1-1-5" class="cls-22" x="1148.0236" y="106.06998" font-family="'Open Sans'" font-size="14.667px" font-weight="600" text-anchor="end" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"><tspan id="tspan4599" x="1148.0236" y="106.06998" text-align="end">Cloud controller</tspan><tspan id="tspan4601" x="1148.0236" y="124.40336" text-align="end">manager</tspan><tspan id="tspan4603" x="1148.0236" y="142.73674" font-style="italic" text-align="end">(optional)</tspan></text>
+  <g id="use1603" transform="translate(-138.94 -54.387)">
+   <g id="g2359" transform="matrix(.7857 0 0 .7857 963.45 64.034)" data-name="layer1">
+    <g id="g2351" data-name="g70">
+     <path id="path2347" class="cls-11" d="m462.48 109.72a4.33 4.33 0 0 0-1.65 0.42l-22.55 10.77a4.29 4.29 0 0 0-2.33 2.9l-5.56 24.19a4.22 4.22 0 0 0 0.59 3.28 2.62 2.62 0 0 0 0.24 0.34l15.61 19.38a4.29 4.29 0 0 0 3.37 1.61h25a4.34 4.34 0 0 0 3.37-1.6l15.6-19.41a4.22 4.22 0 0 0 0.83-3.6l-5.57-24.19a4.27 4.27 0 0 0-2.33-2.9l-22.55-10.77a4.31 4.31 0 0 0-2.07-0.42z" data-name="path3055"/>
+     <path id="path2349" class="cls-13" d="m462.47 108a4.56 4.56 0 0 0-1.74 0.44l-23.8 11.37a4.53 4.53 0 0 0-2.47 3.06l-5.87 25.55a4.49 4.49 0 0 0 0.62 3.46l0.26 0.36 16.47 20.48a4.57 4.57 0 0 0 3.56 1.7h26.42a4.56 4.56 0 0 0 3.56-1.69l16.46-20.49a4.44 4.44 0 0 0 0.88-3.81l-5.88-25.55a4.5 4.5 0 0 0-2.46-3.06l-23.8-11.37a4.57 4.57 0 0 0-2.21-0.45zm0 1.75a4.31 4.31 0 0 1 2.09 0.42l22.55 10.77a4.27 4.27 0 0 1 2.33 2.9l5.56 24.16a4.21 4.21 0 0 1-0.83 3.62l-15.58 19.38a4.31 4.31 0 0 1-3.37 1.6h-25a4.33 4.33 0 0 1-3.38-1.61l-15.6-19.4c-0.09-0.11-0.17-0.22-0.25-0.34a4.26 4.26 0 0 1-0.58-3.28l5.56-24.2a4.29 4.29 0 0 1 2.33-2.9l22.55-10.77a4.33 4.33 0 0 1 1.65-0.42z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g2355" class="cls-14" data-name="text2066">
+     <text id="text2353" class="cls-19" transform="translate(449.46,167.32)">c-c-m</text>
+    </g>
+    <path id="path2357" class="cls-13" d="m462.64 120.39c-0.53 0-15.17 7.18-15.36 7.55-0.46 0.88-3.79 16.25-3.59 16.58s2.51 3.23 5.33 6.76l5.12 6.4h16.86l5.36-6.7 5.37-6.7-1.88-8.23c-1-4.53-2-8.31-2.05-8.4-0.27-0.25-14.89-7.26-15.17-7.27zm0.9 7.52c0.7 0 0.78 1.11 2.29 1.22 2 0.15 1.77-1.69 3.28-0.41s-0.33 1.38 0.14 3.31 2.16 1.15 1.4 3-1.41 0.1-3.1 1.15-0.43 2.41-2.41 2.26-0.54-1.31-2.05-2.6-2.43 0.34-2.9-1.59 1.08-0.92 1.83-2.75-1.06-2.21 0.63-3.25a2.45 2.45 0 0 1 0.54-0.27 0.92 0.92 0 0 1 0.35-0.06zm2 2.17a3 3 0 0 0-0.84 0.12 2.88 2.88 0 1 0 0.84-0.12zm-11.38 4.92a2.47 2.47 0 0 1 0.56 0.11c1.82 0.56 0 1.51 1.27 2.91s2.38-0.38 2.81 1.47-1.33 0.73-1.89 2.56 1.53 1.87 0.13 3.17-1.29-0.78-3.15-0.35-0.86 2.25-2.68 1.69 0-1.51-1.27-2.91-2.39 0.38-2.82-1.47 1.33-0.73 1.89-2.56-1.53-1.87-0.13-3.17 1.3 0.78 3.15 0.36c1.63-0.38 1.07-1.82 2.13-1.81zm13.54 2a1.81 1.81 0 0 1 0.64 0.14c2.1 0.82-0.66 2.08 1 3.63s2.77-1.26 3.67 0.8-1.93 1-1.88 3.25 2.84 1.06 2 3.16-2.07-0.67-3.63 1 1.26 2.76-0.8 3.67-1-1.94-3.25-1.89-1.06 2.85-3.16 2 0.67-2.07-1-3.63-2.76 1.27-3.67-0.79 1.94-1 1.89-3.25-2.85-1.06-2-3.16 2.07 0.67 3.63-1-1.26-2.76 0.8-3.67 1 1.93 3.24 1.88c2 0 1.31-2.19 2.52-2.17zm-14.7 1a2.88 2.88 0 1 0 2.87 2.88 2.88 2.88 0 0 0-2.87-2.88zm12.35 2.76a4.23 4.23 0 1 0 4.24 4.23 4.23 4.23 0 0 0-4.28-4.25z" data-name="path1984"/>
+   </g>
+  </g>
+  <text id="text270-1-1-5-8" class="cls-22" x="1148.0236" y="186.10117" font-family="'Open Sans'" font-size="14.667px" font-weight="600" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"><tspan id="tspan4605" x="1148.0236" y="186.10117" text-align="end" text-anchor="end">Controller</tspan><tspan id="tspan4607" x="1148.0236" y="204.43454"><tspan id="tspan4609" text-align="end" text-anchor="end">manage</tspan>r</tspan></text>
+  <g id="use1635" transform="translate(-138.44 -53.418)">
+   <g id="g1625" transform="matrix(.78345 0 0 .78345 1111.2 130.81)" data-name="layer1">
+    <g id="g1617" data-name="g70">
+     <path id="path1613" class="cls-11" d="m275.24 108.5a4.33 4.33 0 0 0-1.62 0.39l-22.18 10.11a4 4 0 0 0-2.29 2.72l-5.47 22.72a3.83 3.83 0 0 0 0.57 3.08l0.24 0.32 15.35 18.22a4.37 4.37 0 0 0 3.32 1.51h24.62a4.3 4.3 0 0 0 3.31-1.51l15.35-18.21a3.9 3.9 0 0 0 0.82-3.4l-5.48-22.72a4.08 4.08 0 0 0-2.3-2.72l-22.18-10.12a4.41 4.41 0 0 0-2.06-0.39z" data-name="path3055"/>
+     <path id="path1615" class="cls-13" d="m275.23 106.85a4.62 4.62 0 0 0-1.71 0.42l-23.41 10.67a4.32 4.32 0 0 0-2.43 2.88l-5.77 24a4 4 0 0 0 0.61 3.25c0.08 0.12 0.16 0.23 0.25 0.34l16.23 19.21a4.61 4.61 0 0 0 3.51 1.59h26a4.58 4.58 0 0 0 3.5-1.6l16.2-19.23a4 4 0 0 0 0.86-3.58l-5.78-24a4.26 4.26 0 0 0-2.42-2.87l-23.41-10.68a4.79 4.79 0 0 0-2.23-0.4zm0 1.65a4.41 4.41 0 0 1 2.06 0.39l22.19 10.11a4.08 4.08 0 0 1 2.3 2.72l5.48 22.72a3.9 3.9 0 0 1-0.82 3.4l-15.35 18.21a4.3 4.3 0 0 1-3.31 1.51h-24.62a4.37 4.37 0 0 1-3.32-1.51l-15.35-18.22-0.24-0.32a3.83 3.83 0 0 1-0.57-3.08l5.47-22.71a4 4 0 0 1 2.29-2.73l22.18-10.11a4.33 4.33 0 0 1 1.62-0.39z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g1621" class="cls-14" data-name="text2066">
+     <text id="text1619" class="cls-20" transform="matrix(1.05,0,0,1,266.83,162.57)">c-m</text>
+    </g>
+    <path id="path1623" class="cls-13" d="m275.4 118.51c-0.52 0-14.92 6.74-15.11 7.09-0.45 0.83-3.73 15.25-3.53 15.57s2.47 3 5.24 6.34l5 6h16.59l5.28-6.29 5.27-6.29-1.84-7.73c-1-4.25-1.93-7.8-2-7.88-0.26-0.24-14.64-6.82-14.92-6.83zm0.88 7.06c0.7 0 0.77 1 2.26 1.15 1.95 0.14 1.74-1.59 3.23-0.39s-0.33 1.3 0.13 3.11 2.12 1.08 1.38 2.81-1.39 0.1-3 1.08-0.43 2.26-2.37 2.12-0.53-1.23-2-2.44-2.39 0.31-2.85-1.5 1.06-0.86 1.81-2.58-1.05-2.07 0.61-3.05a2.71 2.71 0 0 1 0.53-0.25 1.16 1.16 0 0 1 0.34-0.06zm2 2a2.94 2.94 0 0 0-0.84 0.12 2.68 2.68 0 0 0-1.89 3.36 2.85 2.85 0 0 0 3.52 1.8 2.67 2.67 0 0 0 1.89-3.36 2.8 2.8 0 0 0-2.73-1.88zm-11.18 4.64a2 2 0 0 1 0.56 0.1c1.79 0.52 0 1.42 1.25 2.73s2.34-0.36 2.76 1.39-1.3 0.68-1.85 2.39 1.5 1.76 0.12 3-1.27-0.73-3.1-0.33-0.85 2.12-2.64 1.59 0-1.42-1.25-2.73-2.34 0.36-2.76-1.38 1.3-0.69 1.85-2.4-1.5-1.76-0.13-3 1.28 0.74 3.11 0.33c1.6-0.35 1-1.7 2.08-1.69zm13.32 1.87a2.06 2.06 0 0 1 0.64 0.14c2.06 0.77-0.66 2 0.95 3.41s2.71-1.19 3.61 0.75-1.91 0.93-1.86 3.05 2.8 1 2 3-2-0.62-3.57 0.91 1.24 2.59-0.79 3.44-1-1.82-3.19-1.77-1 2.67-3.11 1.9 0.65-1.94-0.95-3.4-2.71 1.18-3.61-0.75 1.91-0.94 1.86-3-2.8-1-2-3 2 0.63 3.57-0.9-1.24-2.59 0.79-3.44 1 1.81 3.19 1.77c1.94 0 1.28-2.06 2.47-2zm-14.49 0.91a2.7 2.7 0 1 0 2.83 2.7 2.77 2.77 0 0 0-2.88-2.69zm12.07 2.62a4 4 0 1 0 4.16 4 4.07 4.07 0 0 0-4.16-4z" data-name="path1984"/>
+   </g>
+  </g>
+  <text id="text270-1-2" class="cls-22" x="1147.3718" y="327.01175" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1047-7-2" font-family="'Open Sans'" font-size="14.667px" font-style="italic" font-weight="600" text-align="end" text-anchor="end" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">kubelet</tspan></text>
+  <g id="use1733" transform="translate(-139.16 -55.212)">
+   <g id="g1659" transform="matrix(.76104 0 0 .76104 567.17 163.65)" data-name="layer1">
+    <g id="g1651" data-name="g70">
+     <path id="path1647" class="cls-11" d="m998.15 239.22a4.45 4.45 0 0 0-1.72 0.43l-23.43 11.21a4.45 4.45 0 0 0-2.42 3l-5.79 25.17a4.42 4.42 0 0 0 0.61 3.41 2.88 2.88 0 0 0 0.26 0.35l16.2 20.21a4.52 4.52 0 0 0 3.51 1.67h26a4.49 4.49 0 0 0 3.51-1.67l16.22-20.18a4.42 4.42 0 0 0 0.9-3.82l-5.79-25.17a4.48 4.48 0 0 0-2.43-3l-23.46-11.2a4.49 4.49 0 0 0-2.17-0.41z" data-name="path3055"/>
+     <path id="path1649" class="cls-13" d="m998.13 237.39a4.81 4.81 0 0 0-1.81 0.47l-24.76 11.82a4.71 4.71 0 0 0-2.56 3.19l-6.11 26.57a4.7 4.7 0 0 0 0.64 3.6l0.27 0.38 17.14 21.31a4.76 4.76 0 0 0 3.7 1.76h27.48a4.76 4.76 0 0 0 3.71-1.77l17.17-21.31a4.66 4.66 0 0 0 0.91-4l-6.11-26.58a4.73 4.73 0 0 0-2.57-3.18l-24.76-11.83a4.77 4.77 0 0 0-2.34-0.43zm0 1.83a4.52 4.52 0 0 1 2.17 0.43l23.46 11.2a4.48 4.48 0 0 1 2.43 3l5.81 25.15a4.42 4.42 0 0 1-0.87 3.77l-16.22 20.23a4.53 4.53 0 0 1-3.51 1.68h-26a4.49 4.49 0 0 1-3.51-1.67l-16.23-20.19a2.88 2.88 0 0 1-0.26-0.35 4.42 4.42 0 0 1-0.61-3.41l5.79-25.17a4.44 4.44 0 0 1 2.42-3l23.46-11.21a4.45 4.45 0 0 1 1.72-0.43z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g1655" class="cls-14" data-name="text2066">
+     <text id="text1653" class="cls-16" transform="translate(980.08,299.14)">kubelet</text>
+    </g>
+    <path id="path1657" class="cls-13" d="m998.31 248.92c-0.55 0-15.78 7.47-16 7.85-0.48 0.93-4 16.91-3.75 17.25s2.62 3.37 5.55 7l5.33 6.67h17.56l5.59-7 5.58-7-2-8.56c-1.07-4.71-2-8.64-2.13-8.74-0.28-0.26-15.48-7.55-15.78-7.56zm0.77 3.74 3.59 1-3.59 1-3.58-1zm-3.58 1.44 3.36 1v4.67l-3.34-1.85zm7.17 0v3.82l-3.34 1.85v-4.67zm-8.67 6.38 3.59 1-3.59 1-3.59-1zm8.72 0 3.59 1-3.59 1-3.59-1zm-12.31 1.43 3.36 1v4.68l-3.34-1.86zm7.18 0v3.82l-3.35 1.86v-4.68zm1.54 0 3.36 1v4.68l-3.34-1.86zm7.18 0v3.82l-3.35 1.86v-4.68zm-13.62 6c1.06 0 0.24 1.11 1.45 1.69s1.56-0.93 2.37 0.25-0.72 0.88-0.61 2.31 1.59 0.89 1 2.18-1.13-0.19-2.31 0.62 0 1.82-1.4 1.94-0.41-1.07-1.7-1.69-1.56 0.93-2.37-0.25 0.72-0.88 0.61-2.31-1.59-0.88-1-2.18 1.12 0.19 2.3-0.62 0-1.82 1.41-1.94zm9.22 1.43c1.91 0.05 0.06 1.85 1.8 2.63s1.84-1.8 3.16-0.41-1.27 1.34-0.59 3.13 2.58 0 2.52 1.94-1.84 0.06-2.62 1.8 1.79 1.85 0.4 3.16-1.34-1.26-3.12-0.58 0 2.57-2 2.52-0.06-1.85-1.8-2.63-1.85 1.8-3.16 0.41 1.27-1.34 0.58-3.13-2.57 0-2.51-1.94 1.84-0.06 2.62-1.81-1.79-1.84-0.41-3.15 1.35 1.26 3.13 0.58 0.09-2.58 2-2.53zm-9.14 1a2.1 2.1 0 1 0 2.1 2.1 2.1 2.1 0 0 0-2.1-2.11zm8.94 1.9a4.2 4.2 0 1 0 4.19 4.19 4.2 4.2 0 0 0-4.19-4.2z" data-name="path1994"/>
+   </g>
+  </g>
+  <text id="text270-1-2-2" class="cls-22" x="1147.021" y="390.25568" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1047-7-2-9" font-family="'Open Sans'" font-size="14.667px" font-style="italic" font-weight="600" text-align="end" text-anchor="end" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">kube-proxy</tspan></text>
+  <g id="use1765" transform="translate(-137.85 -54.676)">
+   <g id="g1675" transform="matrix(.68635 0 0 .68635 641.76 185.86)" data-name="layer1">
+    <g id="g1667" data-name="g70">
+     <path id="path1663" class="cls-11" d="m998.13 328.44a4.75 4.75 0 0 0-1.81 0.46l-24.77 11.83a4.72 4.72 0 0 0-2.57 3.19l-6.11 26.59a4.7 4.7 0 0 0 0.64 3.6l0.27 0.38 17.15 21.32a4.73 4.73 0 0 0 3.7 1.76h27.5a4.76 4.76 0 0 0 3.71-1.77l17.16-21.32a4.67 4.67 0 0 0 0.91-4l-6.12-26.58a4.69 4.69 0 0 0-2.56-3.19l-24.78-11.83a4.77 4.77 0 0 0-2.32-0.44z" data-name="path3055"/>
+     <path id="path1665" class="cls-13" d="m998.12 326.51a5.09 5.09 0 0 0-1.91 0.49l-26.16 12.49a5 5 0 0 0-2.7 3.37l-6.45 28.07a4.9 4.9 0 0 0 0.67 3.8c0.09 0.14 0.19 0.27 0.29 0.4l18.1 22.5a5 5 0 0 0 3.91 1.87h29a5 5 0 0 0 3.91-1.86l18.09-22.51a4.92 4.92 0 0 0 1-4.2l-6.46-28.07a5 5 0 0 0-2.71-3.36l-26.15-12.5a5.1 5.1 0 0 0-2.43-0.49zm0 1.93a4.77 4.77 0 0 1 2.3 0.46l24.78 11.83a4.69 4.69 0 0 1 2.56 3.19l6.12 26.59a4.66 4.66 0 0 1-0.91 4l-17.14 21.32a4.76 4.76 0 0 1-3.71 1.77h-27.5a4.74 4.74 0 0 1-3.7-1.77l-17.15-21.32-0.27-0.38a4.66 4.66 0 0 1-0.64-3.6l6.14-26.61a4.72 4.72 0 0 1 2.56-3.18l24.78-11.84a4.75 4.75 0 0 1 1.81-0.46z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g1671" class="cls-14" data-name="text2066">
+     <text id="text1669" class="cls-15" transform="translate(978.75,391.73)">k-proxy</text>
+    </g>
+    <path id="path1673" class="cls-13" d="m998.31 338.69c-0.58 0-16.67 7.89-16.88 8.29-0.5 1-4.16 17.86-3.95 18.23 0.13 0.21 2.76 3.55 5.86 7.42l5.63 7h18.53l5.89-7.37 5.9-7.36-2.06-9c-1.14-5-2.15-9.13-2.26-9.23-0.29-0.28-16.35-8-16.66-8zm0.81 3.95 3.8 1.1-3.8 1.1-3.79-1.1zm-3.79 1.52 3.55 1.06v4.93l-3.54-2zm7.59 0v4l-3.54 2v-4.93zm-9.17 6.73 3.79 1.1-3.79 1.1-3.75-1.09zm9.21 0 3.79 1.1-3.79 1.1-3.79-1.1zm-13 1.52 3.55 1.06v4.93l-3.51-1.95zm7.58 0v4l-3.54 1.99v-4.93zm1.63 0 3.55 1.06v4.93l-3.53-1.95zm7.58 0v4l-3.53 1.95v-4.93zm-14.39 6.32c1.13 0 0.26 1.18 1.54 1.79s1.65-1 2.51 0.26-0.77 0.93-0.64 2.44 1.67 0.94 1 2.31-1.19-0.2-2.44 0.66 0 1.92-1.48 2-0.42-1.13-1.79-1.78-1.65 1-2.51-0.27 0.77-0.93 0.65-2.43-1.68-0.94-1-2.31 1.19 0.2 2.44-0.66 0-1.92 1.48-2zm9.75 1.52c2 0.05 0.06 1.95 1.9 2.77s2-1.89 3.33-0.43-1.33 1.42-0.61 3.31 2.72 0 2.66 2.05-1.95 0.06-2.77 1.9 1.89 1.95 0.43 3.34-1.42-1.34-3.31-0.62 0 2.72-2 2.66-0.06-2-1.9-2.77-2 1.89-3.34 0.43 1.33-1.42 0.61-3.31-2.71 0-2.66-2.05 2-0.06 2.78-1.9-1.9-1.95-0.43-3.34 1.42 1.34 3.3 0.62-0.01-2.72 2.01-2.66zm-9.66 1.05a2.22 2.22 0 1 0 2.22 2.22 2.22 2.22 0 0 0-2.22-2.22zm9.45 2a4.43 4.43 0 1 0 4.43 4.43 4.43 4.43 0 0 0-4.43-4.42z" data-name="path1994"/>
+   </g>
+  </g>
+  <g id="g2164" transform="translate(-137.51 -337.4)" font-family="'Open Sans'" font-size="14.667px">
+   <text id="text270-1-2-9" class="cls-22" x="1159.5905" y="587.27118" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"><tspan id="tspan2127" x="1159.5905" y="587.27118" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/><tspan id="tspan2129" x="1159.5905" y="605.60455" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">(persistence store)</tspan></text>
+   <text id="text270-1-2-9-0" class="cls-22" x="1255.2429" y="571.36078" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"><tspan id="tspan2127-4" x="1255.2429" y="571.36078" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal"/><tspan id="tspan2129-1" x="1255.2429" y="589.69415" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">etcd</tspan></text>
+  </g>
+  <g id="use1668" transform="translate(-138.38 -53.843)">
+   <g id="g1643" transform="matrix(.78889 0 0 .78889 1109.7 -42.901)" data-name="layer1">
+    <g id="g1633" data-name="g70">
+     <path id="path1629" class="cls-11" d="m276.45 411.42a4.3 4.3 0 0 0-1.63 0.32l-22.3 9a4 4 0 0 0-2.37 2.55l-6.15 21.76a3.65 3.65 0 0 0 0.48 3 3.46 3.46 0 0 0 0.22 0.31l14.64 18.08a4.36 4.36 0 0 0 3.23 1.57l24.41 0.8a4.35 4.35 0 0 0 3.33-1.35l15.79-17.06a3.67 3.67 0 0 0 0.93-3.25l-4.71-22.09a4 4 0 0 0-2.19-2.71l-21.66-10.48a4.51 4.51 0 0 0-2.02-0.45z" data-name="path3055"/>
+     <path id="path1631" class="cls-13" d="m276.49 409.83a4.7 4.7 0 0 0-1.71 0.35l-23.56 9.52a4.18 4.18 0 0 0-2.49 2.69l-6.49 22.94a3.85 3.85 0 0 0 0.5 3.16 2 2 0 0 0 0.24 0.33l15.45 19.09a4.59 4.59 0 0 0 3.41 1.65l25.76 0.85a4.62 4.62 0 0 0 3.52-1.42l16.68-18a3.86 3.86 0 0 0 1-3.43l-5-23.32a4.17 4.17 0 0 0-2.31-2.85l-22.86-11.09a4.78 4.78 0 0 0-2.14-0.47zm0 1.59a4.51 4.51 0 0 1 2 0.44l21.66 10.48a4 4 0 0 1 2.19 2.71l4.7 22.09a3.63 3.63 0 0 1-0.92 3.25l-15.79 17.07a4.38 4.38 0 0 1-3.33 1.34l-24.4-0.8a4.34 4.34 0 0 1-3.23-1.57l-14.67-18.08-0.23-0.31a3.69 3.69 0 0 1-0.47-3l6.15-21.73a4 4 0 0 1 2.36-2.55l22.31-9a4.73 4.73 0 0 1 1.63-0.32z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g1637" class="cls-14" data-name="text2066">
+     <text id="text1635" class="cls-23" transform="matrix(1.0794 .035808 -.033155 .99945 265.24 463.26)">etcd</text>
+    </g>
+    <path id="path1639" class="cls-13" d="m276.28 421.08c-0.51 0-15 6-15.2 6.34-0.48 0.79-4.19 14.59-4 14.9s2.36 3 5 6.29l4.8 6 8.22 0.28 8.23 0.27 5.43-5.89 5.43-5.9-1.58-7.51c-0.87-4.14-1.66-7.59-1.75-7.67-0.25-0.24-14.29-7.06-14.57-7.08z"/>
+    <path id="path1641" class="cls-11" d="m291.05 440.37h-0.46a6.3 6.3 0 0 1-2.62-0.66 21 21 0 0 0 0.5-4.32 23.86 23.86 0 0 0-2.91-3.42 5.77 5.77 0 0 1 2.2-2l0.4-0.21-0.3-0.33a15.84 15.84 0 0 0-5.42-3.94l-0.42-0.19-0.12 0.41a5.43 5.43 0 0 1-1.58 2.49 25.41 25.41 0 0 0-4.3-1.81 25 25 0 0 0-4.39 1.52 5.44 5.44 0 0 1-1.42-2.58l-0.09-0.42-0.43 0.16a16 16 0 0 0-5.69 3.53l-0.31 0.31 0.38 0.23a5.7 5.7 0 0 1 2.05 2.18 23.53 23.53 0 0 0-3.12 3.2 21.37 21.37 0 0 0 0.2 4.37 6.36 6.36 0 0 1-2.64 0.48 3.44 3.44 0 0 1-0.46 0h-0.45v0.43a13.9 13.9 0 0 0 1.93 6.13l0.22 0.38 0.36-0.27a6.23 6.23 0 0 1 2.86-1.13 22.92 22.92 0 0 0 2.3 3.74 26.46 26.46 0 0 0 4.55 1.2 5.11 5.11 0 0 1-0.48 2.89l-0.18 0.39 0.44 0.11a16.83 16.83 0 0 0 3.43 0.46l3.44-0.24 0.45-0.07-0.16-0.4a5.15 5.15 0 0 1-0.28-2.92 25.82 25.82 0 0 0 4.6-0.9 21.72 21.72 0 0 0 2.54-3.58 6.07 6.07 0 0 1 2.8 1.33l0.34 0.28 0.25-0.36a13.91 13.91 0 0 0 2.33-6l0.06-0.42zm-10.73 4.83a20 20 0 0 1-9.83-0.33 17.16 17.16 0 0 1-2-4.18 16.22 16.22 0 0 1-0.74-4.55 18.44 18.44 0 0 1 3.67-3 19.34 19.34 0 0 1 4.42-2.05 19.57 19.57 0 0 1 4.26 2.34 18.38 18.38 0 0 1 3.48 3.29 16.19 16.19 0 0 1-1.05 4.47 17.09 17.09 0 0 1-2.21 4.01zm-3.32-7.39a2.08 2.08 0 0 0 4.15 0.14 2.08 2.08 0 0 0-4.15-0.14zm-2.69-0.09a2.08 2.08 0 1 1-2-2 2 2 0 0 1 2 2z"/>
+   </g>
+  </g>
+  <text id="text257-0-8-7" class="cls-22" x="1148.4604" y="550.76685" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1312-5-0-5" font-family="'Open Sans'" font-size="14.667px" font-weight="600" text-align="end" text-anchor="end" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">Node</tspan></text>
+  <path id="path2202" class="cls-8" d="m1168.6 519.39-1 0.22-1.75 1.68-1.37 2.74-0.78 3.82v33.602l0.78 3.8 1.37 3 1.75 1.47 1 0.2h38.909l1.07-0.2 1.76-1.47 1.2699-3 0.78-3.8v-33.602l-0.78-3.82-1.2699-2.74-1.76-1.68-1.07-0.22z"/>
+  <text id="text270-1-1" class="cls-22" x="1076.4661" y="67.477371" font-family="'Open Sans', sans-serif" font-size="12px"><tspan id="tspan1047-7-1" font-family="'Open Sans'" font-size="14.667px" font-weight="600" style="font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal">API server</tspan></text>
+  <g id="use1518" transform="translate(-137.9 -55.356)">
+   <g id="g1609" transform="matrix(.78098 0 0 .78098 964.75 -113.64)" data-name="layer1">
+    <g id="g1601" data-name="g70">
+     <path id="path1597" class="cls-11" d="m463.61 257.22a4.39 4.39 0 0 0-1.6 0.4l-21.81 10.43a4.15 4.15 0 0 0-2.26 2.8l-5.38 23.41a4.12 4.12 0 0 0 0.57 3.17 3.43 3.43 0 0 0 0.24 0.33l15.09 18.77a4.19 4.19 0 0 0 3.26 1.55h24.21a4.19 4.19 0 0 0 3.26-1.55l15.09-18.78a4.12 4.12 0 0 0 0.81-3.5l-5.39-23.4a4.16 4.16 0 0 0-2.26-2.81l-21.81-10.42a4.16 4.16 0 0 0-2.02-0.4z" data-name="path3055"/>
+     <path id="path1599" class="cls-13" d="m463.6 255.53a4.48 4.48 0 0 0-1.69 0.42l-23 11a4.39 4.39 0 0 0-2.39 3l-5.68 24.71a4.33 4.33 0 0 0 0.6 3.34c0.08 0.12 0.16 0.24 0.25 0.35l15.94 19.82a4.43 4.43 0 0 0 3.44 1.64h25.53a4.43 4.43 0 0 0 3.45-1.64l15.95-19.85a4.39 4.39 0 0 0 0.85-3.7l-5.69-24.71a4.41 4.41 0 0 0-2.38-3l-23-11a4.35 4.35 0 0 0-2.18-0.38zm0 1.69a4.17 4.17 0 0 1 2 0.41l21.84 10.37a4.19 4.19 0 0 1 2.26 2.81l5.39 23.4a4.12 4.12 0 0 1-0.81 3.5l-15.09 18.78a4.19 4.19 0 0 1-3.26 1.55h-24.21a4.19 4.19 0 0 1-3.26-1.56l-15.09-18.77a3.43 3.43 0 0 1-0.24-0.33 4.12 4.12 0 0 1-0.57-3.17l5.38-23.41a4.17 4.17 0 0 1 2.26-2.8l21.8-10.37a4.21 4.21 0 0 1 1.6-0.41z" data-name="path3054-2-9"/>
+    </g>
+    <g id="g1605" class="cls-14" data-name="text2066">
+     <text id="text1603" class="cls-18" transform="translate(457.08,312.94)">api</text>
+    </g>
+    <path id="path1607" class="cls-13" d="m463.76 267.54c-0.51 0-14.67 6.94-14.86 7.3-0.44 0.86-3.66 15.72-3.47 16s2.43 3.13 5.15 6.54l5 6.2h16.31l5.19-6.49 5.19-6.48-1.81-8c-1-4.38-1.9-8-2-8.13-0.25-0.24-14.4-7-14.67-7zm0.87 7.28c0.68 0 0.75 1.07 2.22 1.18 1.91 0.14 1.71-1.64 3.17-0.4s-0.32 1.33 0.13 3.2 2.09 1.12 1.36 2.89-1.37 0.1-3 1.11-0.42 2.34-2.34 2.19-0.51-1.27-2-2.51-2.35 0.32-2.8-1.54 1.05-0.89 1.78-2.67-1-2.13 0.6-3.14a2.28 2.28 0 0 1 0.52-0.26 0.88 0.88 0 0 1 0.34-0.05zm1.91 2.1a2.86 2.86 0 0 0-0.82 0.12 2.77 2.77 0 1 0 0.82-0.12zm-11 4.78a1.84 1.84 0 0 1 0.55 0.1c1.76 0.54 0 1.47 1.22 2.81s2.31-0.37 2.73 1.43-1.29 0.71-1.83 2.47 1.47 1.81 0.13 3.07-1.26-0.76-3.06-0.34-0.83 2.18-2.59 1.64 0-1.47-1.23-2.82-2.31 0.37-2.72-1.42 1.29-0.71 1.83-2.47-1.48-1.82-0.13-3.07 1.26 0.75 3.05 0.34c1.57-0.36 1-1.76 2.05-1.74zm13.1 1.92a2.08 2.08 0 0 1 0.63 0.15c2 0.79-0.65 2 0.93 3.51s2.67-1.22 3.55 0.77-1.88 1-1.83 3.14 2.75 1 2 3.06-2-0.65-3.51 0.93 1.21 2.67-0.78 3.55-1-1.87-3.14-1.83-1 2.75-3.05 2 0.64-2-0.94-3.51-2.67 1.22-3.54-0.78 1.87-1 1.82-3.14-2.75-1-2-3.05 2 0.64 3.51-0.93-1.22-2.67 0.77-3.55 1 1.87 3.14 1.82c1.91 0 1.26-2.12 2.43-2.11zm-14.25 0.94a2.78 2.78 0 1 0 2.78 2.78 2.77 2.77 0 0 0-2.77-2.78zm12 2.66a4.1 4.1 0 1 0 4.09 4.1 4.1 4.1 0 0 0-4.13-4.1z" data-name="path1984"/>
+   </g>
+  </g>
+  <path id="path4387" d="m1156.2 495.21v1.5h9v-1.5zm10.5 0v1.5h9v-1.5zm10.5 0v1.5h9v-1.5zm10.5 0v1.5h9v-1.5zm10.5 0v1.5h9v-1.5zm10.5 0v1.5h9v-1.5zm10.5 0v1.5h5.3809v-1.5z" color="#000000" color-rendering="auto" dominant-baseline="auto" fill="#326ce5" fill-rule="evenodd" image-rendering="auto" shape-rendering="auto" solid-color="#000000" stop-color="#000000" style="font-feature-settings:normal;font-variant-alternates:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-position:normal;font-variation-settings:normal;inline-size:0;isolation:auto;mix-blend-mode:normal;shape-margin:0;shape-padding:0;text-decoration-color:#000000;text-decoration-line:none;text-decoration-style:solid;text-indent:0;text-orientation:mixed;text-transform:none;white-space:normal"/>
+ </g>
 </svg>

From 89a43a088f315561fb9817dbd216588d9c384089 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 29 Aug 2020 01:01:58 +0900
Subject: [PATCH 118/496] Translate Completed

---
 .../kubeadm/upgrading-windows-nodes.md        | 93 +++++++++++++++++++
 1 file changed, 93 insertions(+)
 create mode 100644 content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md
new file mode 100644
index 0000000000..e157eda3e4
--- /dev/null
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md
@@ -0,0 +1,93 @@
+---
+title: Windowsノードのアップグレード
+min-kubernetes-server-version: 1.17
+content_type: task
+weight: 40
+---
+
+<!-- overview -->
+
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
+
+このページでは、[kubeadmで作られた](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes)Windowsノードをアップグレードする方法について説明します。
+
+
+
+
+## {{% heading "prerequisites" %}}
+ 
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+* [残りのkubeadmクラスターをアップグレードするプロセス](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade)を理解します。
+Windowsノードをアップグレードする前にコントロールプレーンノードをアップグレードしてほしいです。
+
+
+
+
+<!-- steps -->
+
+## ワーカーノードをアップグレード
+
+### kubeadmをアップグレード
+
+1.  Windowsノードから、kubeadmをアップグレードします。:
+
+    ```powershell
+    # {{< param "fullversion" >}}を目的のバージョンに置き換えます
+    curl.exe -Lo C:\k\kubeadm.exe https://dl.k8s.io/{{< param "fullversion" >}}/bin/windows/amd64/kubeadm.exe
+    ```
+
+### ノードをドレインする
+
+1.  Kubernetes APIにアクセスできるマシンから、
+    ノードをスケジュール不可としてマークして、ワークロードを削除することでノードのメンテナンスを準備します:
+
+    ```shell
+    # <node-to-drain>をドレインするノードの名前に置き換えます
+    kubectl drain <node-to-drain> --ignore-daemonsets
+    ```
+
+    このような出力結果が表示されるはずです:
+
+    ```
+    node/ip-172-31-85-18 cordoned
+    node/ip-172-31-85-18 drained
+    ```
+
+### kubeletの構成をアップグレード
+
+1. Windowsノードから、次のコマンドを呼び出して新しいkubelet構成を同期します:
+
+    ```powershell
+    kubeadm upgrade node
+    ```
+
+### kubeletをアップグレード
+
+1.  Windowsノードから、kubeletをアップグレードして再起動します:
+
+    ```powershell
+    stop-service kubelet
+    curl.exe -Lo C:\k\kubelet.exe https://dl.k8s.io/{{< param "fullversion" >}}/bin/windows/amd64/kubelet.exe
+    restart-service kubelet
+    ```
+
+### ノードをオンライン状態に
+
+1.  Kubernetes APIにアクセスできるマシンから、
+スケジュール可能としてマークして、ノードをオンラインに戻します:
+
+    ```shell
+    # <node-to-drain>をノードの名前に置き換えます
+    kubectl uncordon <node-to-drain>
+    ```
+### kube-proxyをアップグレード
+
+1. Kubernetes APIにアクセスできるマシンから、次を実行します、
+もう一度{{< param "fullversion" >}}を目的のバージョンに置き換えます:
+
+    ```shell
+    curl -L https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/kube-proxy.yml | sed 's/VERSION/{{< param "fullversion" >}}/g' | kubectl apply -f -
+    ```
+
+
+

From 6ccad6439ba2e172cbced4d159120a48947435ce Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 29 Aug 2020 01:07:26 +0900
Subject: [PATCH 119/496] Title Translate

---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index fc5b2ab060..69609c1f79 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -2,7 +2,7 @@
 reviewers:
 - michmike
 - patricklang
-title: Adding Windows nodes
+title: Windowsノードの追加
 min-kubernetes-server-version: 1.17
 content_type: tutorial
 weight: 30

From 160364d548f6dc2582c88a194563938876bbf810 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 11 Aug 2020 19:23:07 -0400
Subject: [PATCH 120/496] move search.md

add search bar to search page

fix bing anchors
---
 assets/js/search.js                 |  3 +-
 content/en/{docs => }/search.md     |  0
 layouts/_default/search.html        | 56 +++++++++++++++++++++++++++++
 layouts/docs/search.html            | 27 --------------
 layouts/partials/docs/top-menu.html | 21 -----------
 layouts/partials/head.html          |  2 +-
 static/js/search.js                 |  2 +-
 7 files changed, 59 insertions(+), 52 deletions(-)
 rename content/en/{docs => }/search.md (100%)
 create mode 100644 layouts/_default/search.html
 delete mode 100644 layouts/docs/search.html
 delete mode 100644 layouts/partials/docs/top-menu.html

diff --git a/assets/js/search.js b/assets/js/search.js
index 3d6e9d9447..5c25d8af1f 100644
--- a/assets/js/search.js
+++ b/assets/js/search.js
@@ -23,8 +23,7 @@ limitations under the License.
           }
 
           var query = $(this).val();
-          var searchPage = "{{ "docs/search/" | absURL }}?q=" + query;
-          document.location = searchPage;
+          document.location = "{{ "search/" | absURL }}?q=" + query;
 
           return false;
         });
diff --git a/content/en/docs/search.md b/content/en/search.md
similarity index 100%
rename from content/en/docs/search.md
rename to content/en/search.md
diff --git a/layouts/_default/search.html b/layouts/_default/search.html
new file mode 100644
index 0000000000..32c93338cf
--- /dev/null
+++ b/layouts/_default/search.html
@@ -0,0 +1,56 @@
+<!doctype html>
+<html lang="{{ .Site.Language.Lang }}" class="{{.Params.class}} no-js">
+  <head>
+    {{ partial "head.html" . }}
+  </head>
+  <body class="td-{{ .Kind }}{{- if ne .Params.cid "" -}}{{- printf " cid-%s" (lower .Params.cid) -}}{{- end -}}">
+    <header>
+      {{ partial "navbar.html" . }}
+    </header>
+    {{ block "announcement" . }}
+      {{ if .IsHome }}
+        {{ partial "frontpage-announcement.html" . }}
+      {{ else }}
+        {{ partial "announcement.html" . }}
+      {{ end }}
+    {{ end }}
+    <div class="td-outer">
+      <main role="main" class="td-main">
+		<section class="row td-search-result">
+	      <div class="col-12 col-md-4 offset-md-2">
+		    <form class="td-sidebar__search d-flex align-items-center">
+		    {{ partial "search-input.html" . }}
+		    <button class="btn btn-link td-sidebar__toggle d-md-none p-0 ml-3 fas fa-bars" type="button" data-toggle="collapse" data-target="#td-section-nav" aria-controls="td-docs-nav" aria-expanded="false" aria-label="Toggle section navigation">
+		    </button>
+			</form>
+		  </div>
+		  <div class="col-12 col-md-8 offset-md-2">
+	        <h2 class="ml-4">{{ .Title }}</h2>
+			{{ if .Site.Params.gcs_engine_id }}
+			<script>
+		    (function() {
+		    var cx = '{{ . }}';
+		    var gcse = document.createElement('script');
+		    gcse.type = 'text/javascript';
+		    gcse.async = true;
+		    gcse.src = 'https://cse.google.com/cse.js?cx=' + cx;
+		    var s = document.getElementsByTagName('script')[0];
+		    s.parentNode.insertBefore(gcse, s);
+		    })();
+	        </script>
+	        <gcse:searchresults-only></gcse:searchresults-only>
+	        {{ else if .Site.Params.k8s_search }}
+		    <script src="{{ "js/search.js" | relURL }}"></script>
+		    <gcse:searchresults-only linktarget="_parent">
+		    <div id="bing-results-container">{{ T "layouts_docs_search_fetching" }}</div>
+		    <div id="bing-pagination-container"></div>
+		    </gcse:searchresults-only>
+	        {{ end }}
+		  </div>
+		</section>
+      </main>
+    {{ partial "footer.html" . }}
+    </div>
+    {{ partialCached "scripts.html" . }}
+  </body>
+</html>
diff --git a/layouts/docs/search.html b/layouts/docs/search.html
deleted file mode 100644
index aeb918566e..0000000000
--- a/layouts/docs/search.html
+++ /dev/null
@@ -1,27 +0,0 @@
-{{ define "main" }}
-<section class="row td-search-result">
-<div class="col-12 col-md-8 offset-md-2">
-<h2 class="ml-4">{{ .Title }}</h2>
-{{ if .Site.Params.gcs_engine_id }}
-	<script>
-		(function() {
-		var cx = '{{ . }}';
-		var gcse = document.createElement('script');
-		gcse.type = 'text/javascript';
-		gcse.async = true;
-		gcse.src = 'https://cse.google.com/cse.js?cx=' + cx;
-		var s = document.getElementsByTagName('script')[0];
-		s.parentNode.insertBefore(gcse, s);
-		})();
-	</script>
-	<gcse:searchresults-only></gcse:searchresults-only>
-{{ else if .Site.Params.k8s_search }}
-<script src="{{ "js/search.js" | relURL }}"></script>
-	<gcse:searchresults-only linktarget="_parent">
-		<div id="bing-results-container">{{ T "layouts_docs_search_fetching" }}</div>
-		<div id="bing-pagination-container"></div>
-	</gcse:searchresults-only>
-{{ end }}
-</div>
-</section>
-{{ end }}
\ No newline at end of file
diff --git a/layouts/partials/docs/top-menu.html b/layouts/partials/docs/top-menu.html
deleted file mode 100644
index c1654dbcd1..0000000000
--- a/layouts/partials/docs/top-menu.html
+++ /dev/null
@@ -1,21 +0,0 @@
-{{ $p := . }}
-{{ $home := site.Home }}
-{{ $docs := site.GetPage "section" "docs" }}
-{{ $menuSections := (where $docs.Sections ".Params.main_menu" true) }}
-{{ range $menuSections }}
-{{ if $p.IsDescendant . }}
-<h1>{{ if not (strings.Contains .Path "home")}}{{ .Params.bigheader | default .Title }}{{ end }}</h1>
-<h5>{{ .Params.abstract }}</h5>
-{{ end }}
-{{ end }}
-<div id="vendorStrip" class="light-text">
-	<ul>
-		{{ range $menuSections }}
-		{{ $yah := $p.IsDescendant . }}
-		<li><a href="{{ .RelPermalink }}"{{ if $yah }} class="YAH"{{ end }} data-proofer-ignore>{{ .LinkTitle | upper }}</a></li>
-		{{ end }}
-	</ul>
-	<form id="searchBox" action="/docs/search/" role="search">
-		<input type="text" id="search" name="q" placeholder="{{ T "ui_search_placeholder" }}" aria-label="Search">
-	</form>
-</div>
\ No newline at end of file
diff --git a/layouts/partials/head.html b/layouts/partials/head.html
index 47f6e92daf..fa71b6a700 100644
--- a/layouts/partials/head.html
+++ b/layouts/partials/head.html
@@ -58,7 +58,7 @@
 {{- if not .Site.Params.deprecated }}
     "potentialAction": {
       "@type": "SearchAction",
-      "target": {{ printf "%s%s" ("/docs/search/" | absURL) "?q={search_term_string}" }},
+      "target": {{ printf "%s%s" ("search/" | absURL) "?q={search_term_string}" }},
       "query-input": "required name=search_term_string"
     }
 {{ end }}
diff --git a/static/js/search.js b/static/js/search.js
index 2a4a03aff8..a76524b327 100644
--- a/static/js/search.js
+++ b/static/js/search.js
@@ -17,7 +17,7 @@
 
         for(var i = 1; i <= 10; i++){
             if(i > pages) break;
-            pageAnchors += '<a class="bing-page-anchor" href="/docs/search/?q='+searchTerm+'&page='+i+'">';
+            pageAnchors += '<a class="bing-page-anchor" href="/search/?q='+searchTerm+'&page='+i+'">';
             pageAnchors += (currentPage == i) ? '<b>'+i+'</b>' : i;
             pageAnchors += '</a>';
         }

From 11b10784fdd755610b6d67927c2d0374ac235c69 Mon Sep 17 00:00:00 2001
From: Jubayer Abdullah Joy <jubayerjoy98@gmail.com>
Date: Sat, 29 Aug 2020 01:42:14 +0600
Subject: [PATCH 121/496] =?UTF-8?q?Move=20=E2=80=9CResource=20Bin=20Packin?=
 =?UTF-8?q?g=E2=80=9D=20into=20Scheduling=20&=20Eviction=20section=20(#1)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Jubayer Abdullah Joy <jubayerjoy98@gmail.com>
---
 .../resource-bin-packing.md                                       | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/en/docs/concepts/{configuration => scheduling-eviction}/resource-bin-packing.md (100%)

diff --git a/content/en/docs/concepts/configuration/resource-bin-packing.md b/content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md
similarity index 100%
rename from content/en/docs/concepts/configuration/resource-bin-packing.md
rename to content/en/docs/concepts/scheduling-eviction/resource-bin-packing.md

From a2a1755608069dba950385869ac3ce3db75cdc10 Mon Sep 17 00:00:00 2001
From: tallaxes <18728999+tallaxes@users.noreply.github.com>
Date: Fri, 28 Aug 2020 15:40:13 -0700
Subject: [PATCH 122/496] Fix arguments for service account key pair

---
 content/en/docs/setup/best-practices/certificates.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/setup/best-practices/certificates.md b/content/en/docs/setup/best-practices/certificates.md
index 9e27b40943..a065462baf 100644
--- a/content/en/docs/setup/best-practices/certificates.md
+++ b/content/en/docs/setup/best-practices/certificates.md
@@ -124,8 +124,8 @@ Same considerations apply for the service account key pair:
 
 | private key path             | public key path             | command                 | argument                             |
 |------------------------------|-----------------------------|-------------------------|--------------------------------------|
-|  sa.key                      |                             | kube-controller-manager | service-account-private              |
-|                              | sa.pub                      | kube-apiserver          | service-account-key                  |
+|  sa.key                      |                             | kube-controller-manager | --service-account-private-key-file   |
+|                              | sa.pub                      | kube-apiserver          | --service-account-key-file           |
 
 ## Configure certificates for user accounts
 

From 56b137b88a7175babda7487684b859dd18ff1acf Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Sat, 29 Aug 2020 14:59:06 +0700
Subject: [PATCH 123/496] Fix link color and tab component styles

---
 assets/scss/_base.scss   | 4 ++++
 assets/scss/_custom.scss | 9 +++++++++
 2 files changed, 13 insertions(+)

diff --git a/assets/scss/_base.scss b/assets/scss/_base.scss
index 4b9125bcd9..b7b88e7512 100644
--- a/assets/scss/_base.scss
+++ b/assets/scss/_base.scss
@@ -42,6 +42,10 @@ $video-section-height: 200px;
 
 body {
   background-color: white;
+
+  a {
+    color: $blue;
+  }
 }
 
 section {
diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index 563d87272f..e85c5ef486 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -20,6 +20,15 @@ $announcement-size-adjustment: 8px;
       padding-top: 2rem !important;
     }
   }
+
+  .ui-widget {
+    font-family: inherit;
+    font-size: inherit;
+  }
+
+  .ui-widget-content a {
+    color: $blue;
+  }
 }
 
 section {

From 360d997d1e629968b968ec2b2307caeea5aff186 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Sat, 29 Aug 2020 22:44:07 +0900
Subject: [PATCH 124/496] Update content/ja/docs/concepts/security/overview.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/security/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index 24a90e455a..2deeedb51a 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -33,7 +33,7 @@ weight: 10
 
 ### クラウドプロバイダーのセキュリティ
 
-Kubernetesクラスターを所有しているハードウェアや様々なクラウドプロバイダー上で実行している場合、セキュリティのベストプラクティスに関するドキュメントを参考にします。ここでは人気のあるクラウドプロバイダーのセキュリティドキュメントの一部のリンクを紹介します。
+Kubernetesクラスターを所有しているハードウェアや様々なクラウドプロバイダー上で実行している場合、セキュリティのベストプラクティスに関するドキュメントを参考にしてください。ここでは人気のあるクラウドプロバイダーのセキュリティドキュメントの一部のリンクを紹介します。
 
 {{< table caption="Cloud provider security" >}}
 

From 45bfb0adf354534077fdb511f9e298c0316f2216 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Sat, 29 Aug 2020 22:45:22 +0900
Subject: [PATCH 125/496] Update content/ja/docs/concepts/security/overview.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/security/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index 2deeedb51a..44ca99f5eb 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -97,7 +97,7 @@ Kubernetes IngressのTLS | https://kubernetes.io/ja/docs/concepts/services-netwo
 
 コンテナに関する懸念事項 | 推奨事項 |
 ------------------------------ | -------------- |
-コンテナの脆弱性スキャンとOS依存のセキュリティ | イメージをビルドする手順の一部として、既知の脆弱性がないかコンテナをスキャンする必要があります。 |
+コンテナの脆弱性スキャンとOS依存のセキュリティ | イメージをビルドする手順の一部として、既知の脆弱性がないかコンテナをスキャンする必要があります。 |
 イメージの署名と実施 | コンテナイメージを署名し、コンテナの中身に関する信頼性を維持します。 |
 特権ユーザーを許可しない | コンテナの構成時に、コンテナの目的を実行するために必要最低限なOS特権を持ったユーザーをコンテナ内部に作成する方法のドキュメントを参考にしてください。 |
 

From b10e391fc00a8f04880e93f51cb2c44ee20273c1 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Sat, 29 Aug 2020 22:47:49 +0900
Subject: [PATCH 126/496] Update content/ja/docs/concepts/security/overview.md

Co-authored-by: Keita Akutsu <kakts.git@gmail.com>
---
 content/ja/docs/concepts/security/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index 44ca99f5eb..ec18810b2c 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -111,7 +111,7 @@ Kubernetes IngressのTLS | https://kubernetes.io/ja/docs/concepts/services-netwo
 
 コードに関する懸念事項 | 推奨事項 |
 -------------------------| -------------- |
-TLS経由のアクセスのみ | コードがTCP通信を必要とする場合は、事前にクライアントとのTSLハンドシェイクを実行してください。 いくつかの例外を除いて、全ての通信を暗号化してください。さらに一歩すすめて、サービス間のネットワークトラフィックを暗号化することはよい考えです。これは、サービスを特定した2つの証明書で通信の両端を検証する相互認証、または[mTLS](https://en.wikipedia.org/wiki/Mutual_authentication)して知られているプロセスを通じて実行できます。|
+TLS経由のアクセスのみ | コードがTCP通信を必要とする場合は、事前にクライアントとのTLSハンドシェイクを実行してください。 いくつかの例外を除いて、全ての通信を暗号化してください。さらに一歩すすめて、サービス間のネットワークトラフィックを暗号化することはよい考えです。これは、サービスを特定した2つの証明書で通信の両端を検証する相互認証、または[mTLS](https://en.wikipedia.org/wiki/Mutual_authentication)して知られているプロセスを通じて実行できます。|
 通信ポートの範囲制限 | この推奨事項は一目瞭然かもしれませんが、可能なかぎり、通信とメトリクス収集に必要不可欠なサービスのポートのみを公開します。 |
 サードパティに依存するセキュリティ | 既知の脆弱性についてアプリケーションのサードパーティ製ライブラリーを定期的にスキャンすることを推奨します。それぞれの言語は自動でこのチェックを実行するツールを持っています。 |
 静的コード解析 | ほとんどの言語ではコードのスニペットを解析して、安全でない可能性のあるコーディングを分析する方法が提供しています。可能な限り、コードベースでスキャンして、よく起こるセキュリティエラーを検出できる自動ツールを使用してチェックを実行すべきです。一部のツールはここで紹介されています。 https://owasp.org/www-community/Source_Code_Analysis_Tools |

From cf1146f75f882341f79bb392d4b4a1d82d894f24 Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Sat, 29 Aug 2020 23:00:56 +0900
Subject: [PATCH 127/496] changed trusted computing base

---
 content/ja/docs/concepts/security/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index ec18810b2c..0e4f1c21dd 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -29,7 +29,7 @@ weight: 10
 
 ## クラウド
 
-いろいろな意味でも、クラウド（または同じ場所に設置されたサーバー、企業のデータセンター）はKubernetesクラスターの[トラステッドコンピューティングベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な（または脆弱な方法で構成されている）場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
+いろいろな意味でも、クラウド（または同じ場所に設置されたサーバー、企業のデータセンター）はKubernetesクラスターの[トラステッド・コンピューティング・ベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な（または脆弱な方法で構成されている）場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
 
 ### クラウドプロバイダーのセキュリティ
 

From 72376c52d717d8126a83f624951a1f297d13f2c3 Mon Sep 17 00:00:00 2001
From: Jintao Zhang <zhangjintao9020@gmail.com>
Date: Sun, 30 Aug 2020 00:30:09 +0800
Subject: [PATCH 128/496] s/removed_version/removed_release

fix `apiserver_requested_deprecated_apis` memtric's label.

ref: https://github.com/kubernetes/kubernetes/blob/044f9102dd44b8a0696f771bf40c2e9df4622076/staging/src/k8s.io/apiserver/pkg/endpoints/metrics/metrics.go#L70

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
---
 content/en/docs/reference/using-api/deprecation-policy.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/reference/using-api/deprecation-policy.md b/content/en/docs/reference/using-api/deprecation-policy.md
index ba322d42b5..d93bbc03c9 100644
--- a/content/en/docs/reference/using-api/deprecation-policy.md
+++ b/content/en/docs/reference/using-api/deprecation-policy.md
@@ -303,12 +303,12 @@ Starting in Kubernetes v1.19, making an API request to a deprecated REST API end
 2. Adds a `"k8s.io/deprecated":"true"` annotation to the [audit event](/docs/tasks/debug-application-cluster/audit/) recorded for the request.
 3. Sets an `apiserver_requested_deprecated_apis` gauge metric to `1` in the `kube-apiserver` 
    process. The metric has labels for `group`, `version`, `resource`, `subresource` that can be joined
-   to the `apiserver_request_total` metric, and a `removed_version` label that indicates the 
+   to the `apiserver_request_total` metric, and a `removed_release` label that indicates the
    Kubernetes release in which the API will no longer be served. The following Prometheus query
    returns information about requests made to deprecated APIs which will be removed in v1.22:
-   
+
    ```promql
-   apiserver_requested_deprecated_apis{removed_version="1.22"} * on(group,version,resource,subresource) group_right() apiserver_request_total
+   apiserver_requested_deprecated_apis{removed_release="1.22"} * on(group,version,resource,subresource) group_right() apiserver_request_total
    ```
 
 ### Fields of REST resources

From 54bae9db1818b27982883ce15d9b4629226df4e9 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sun, 30 Aug 2020 00:10:12 +0300
Subject: [PATCH 129/496] remove indent on video block

---
 content/es/_index.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/es/_index.html b/content/es/_index.html
index 8aecd07aaf..af07c0764b 100644
--- a/content/es/_index.html
+++ b/content/es/_index.html
@@ -41,7 +41,6 @@ Kubernetes es código abierto lo que le brinda la libertad de aprovechar su infr
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Ver vídeo</button>
         <br>
         <br>
-        <br>
         <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-north-america-2019" button id="desktopKCButton">Asista a la KubeCon en San Diego del 18 al 21 de Nov. 2019</a>
         <br>
         <br>

From 30fea4454e9f9f4085e5383b0d89d7be10178824 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Sun, 30 Aug 2020 09:50:21 +0800
Subject: [PATCH 130/496] correct cheatsheet

---
 content/de/docs/reference/kubectl/cheatsheet.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/de/docs/reference/kubectl/cheatsheet.md b/content/de/docs/reference/kubectl/cheatsheet.md
index 15b8d0bda3..bce7eeefb3 100644
--- a/content/de/docs/reference/kubectl/cheatsheet.md
+++ b/content/de/docs/reference/kubectl/cheatsheet.md
@@ -54,7 +54,8 @@ KUBECONFIG=~/.kube/config:~/.kube/kubconfig2 kubectl config view
 # Zeigen Sie das Passwort für den e2e-Benutzer an
 kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}'
 
-kubectl config view -o jsonpath='{.users[].name}'    # eine Liste der Benutzer erhalten
+kubectl config view -o jsonpath='{.users[].name}'    # den ersten Benutzer anzeigen
+kubectl config view -o jsonpath='{.users[*].name}'    # eine Liste der Benutzer erhalten
 kubectl config current-context                       # den aktuellen Kontext anzeigen
 kubectl config use-context my-cluster-name           # Setzen Sie den Standardkontext auf my-cluster-name
 

From 665ba33b0802537361d89a2fa3c1b38bdbd7a915 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 29 Aug 2020 14:50:52 +0800
Subject: [PATCH 131/496] [zh] Translate custom-resources concept

---
 .../api-extension/custom-resources.md         | 557 ++++++++++++++++++
 1 file changed, 557 insertions(+)
 create mode 100644 content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md

diff --git a/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md b/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
new file mode 100644
index 0000000000..3010597fee
--- /dev/null
+++ b/content/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
@@ -0,0 +1,557 @@
+---
+title: 定制资源
+content_type: concept
+weight: 10
+---
+<!--
+title: Custom Resources
+reviewers:
+- enisoc
+- deads2k
+content_type: concept
+weight: 10
+-->
+
+<!-- overview -->
+
+<!--
+*Custom resources* are extensions of the Kubernetes API. This page discusses when to add a custom
+resource to your Kubernetes cluster and when to use a standalone service. It describes the two
+methods for adding custom resources and how to choose between them.
+-->
+*定制资源（Custom Resource）* 是对 Kubernetes API 的扩展。
+本页讨论何时向 Kubernetes 集群添加定制资源，何时使用独立的服务。
+本页描述添加定制资源的两种方法以及怎样在二者之间做出抉择。
+
+<!-- body -->
+
+<!--
+## Custom resources
+
+A *resource* is an endpoint in the [Kubernetes
+API](/docs/reference/using-api/api-overview/) that stores a collection of [API
+objects](/docs/concepts/overview/working-with-objects/kubernetes-objects/) of
+a certain kind; for example, the built-in *pods* resource contains a
+collection of Pod objects.
+-->
+## 定制资源
+
+*资源（Resource）* 是
+[Kubernetes API](/zh/docs/reference/using-api/api-overview/) 中的一个端点，
+其中存储的是某个类别的
+[API 对象](/zh/docs/concepts/overview/working-with-objects/kubernetes-objects/)
+的一个集合。
+例如内置的 *pods* 资源包含一组 Pod 对象。
+
+<!--
+A *custom resource* is an extension of the Kubernetes API that is not necessarily available in a default
+Kubernetes installation. It represents a customization of a particular Kubernetes installation. However,
+many core Kubernetes functions are now built using custom resources, making Kubernetes more modular.
+
+Custom resources can appear and disappear in a running cluster through dynamic registration,
+and cluster admins can update custom resources independently of the cluster itself.
+Once a custom resource is installed, users can create and access its objects using
+[kubectl](/docs/reference/kubectl/overview/), just as they do for built-in resources like
+*Pods*.
+-->
+*定制资源（Custom Resource）* 是对 Kubernetes API 的扩展，不一定在默认的
+Kubernetes 安装中就可用。定制资源所代表的是对特定 Kubernetes 安装的一种定制。
+不过，很多 Kubernetes 核心功能现在都用定制资源来实现，这使得 Kubernetes
+更加模块化。
+
+定制资源可以通过动态注册的方式在运行中的集群内或出现或消失，集群管理员可以独立于集群
+更新定制资源。一旦某定制资源被安装，用户可以使用 
+[kubectl](/zh/docs/reference/kubectl/overview/)
+来创建和访问其中的对象，就像他们为 *pods* 这种内置资源所做的一样。
+
+<!--
+## Custom controllers
+
+On their own, custom resources simply let you store and retrieve structured data.
+When you combine a custom resource with a *custom controller*, custom resources
+provide a true _declarative API_.
+-->
+## 定制控制器   {#custom-controllers}
+
+就定制资源本身而言，它只能用来存取结构化的数据。
+当你将定制资源与 *定制控制器（Custom Controller）* 相结合时，定制资源就能够
+提供真正的 _声明式 API（Declarative API）_。
+
+<!--
+A [declarative API](/docs/concepts/overview/kubernetes-api/)
+allows you to _declare_ or specify the desired state of your resource and tries to
+keep the current state of Kubernetes objects in sync with the desired state.
+The controller interprets the structured data as a record of the user's
+desired state, and continually maintains this state.
+-->
+使用[声明式 API](/zh/docs/concepts/overview/kubernetes-api/)，
+你可以 _声明_ 或者设定你的资源的期望状态，并尝试让 Kubernetes 对象的当前状态
+同步到其期望状态。控制器负责将结构化的数据解释为用户所期望状态的记录，并
+持续地维护该状态。
+
+<!--
+You can deploy and update a custom controller on a running cluster, independently
+of the cluster's lifecycle. Custom controllers can work with any kind of resource,
+but they are especially effective when combined with custom resources. The
+[Operator pattern](https://coreos.com/blog/introducing-operators.html) combines custom
+resources and custom controllers. You can use custom controllers to encode domain knowledge
+for specific applications into an extension of the Kubernetes API.
+-->
+你可以在一个运行中的集群上部署和更新定制控制器，这类操作与集群的生命周期无关。
+定制控制器可以用于任何类别的资源，不过它们与定制资源结合起来时最为有效。
+[Operator 模式](https://coreos.com/blog/introducing-operators.html)就是将定制资源
+与定制控制器相结合的。你可以使用定制控制器来将特定于某应用的领域知识组织
+起来，以编码的形式构造对 Kubernetes API 的扩展。
+
+<!--
+## Should I add a custom resource to my Kubernetes Cluster?
+
+When creating a new API, consider whether to
+[aggregate your API with the Kubernetes cluster APIs](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+or let your API stand alone.
+-->
+## 我是否应该向我的 Kubernetes 集群添加定制资源？
+
+在创建新的 API 时，请考虑是
+[将你的 API 与 Kubernetes 集群 API 聚合起来](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+还是让你的 API 独立运行。
+
+<!--
+| Consider API aggregation if: | Prefer a stand-alone API if: |
+| ---------------------------- | ---------------------------- |
+| Your API is [Declarative](#declarative-apis). | Your API does not fit the [Declarative](#declarative-apis) model. |
+| You want your new types to be readable and writable using `kubectl`.| `kubectl` support is not required |
+| You want to view your new types in a Kubernetes UI, such as dashboard, alongside built-in types. | Kubernetes UI support is not required. |
+| You are developing a new API. | You already have a program that serves your API and works well. |
+| You are willing to accept the format restriction that Kubernetes puts on REST resource paths, such as API Groups and Namespaces. (See the [API Overview](/docs/concepts/overview/kubernetes-api/).) | You need to have specific REST paths to be compatible with an already defined REST API. |
+| Your resources are naturally scoped to a cluster or namespaces of a cluster. | Cluster or namespace scoped resources are a poor fit; you need control over the specifics of resource paths. |
+| You want to reuse [Kubernetes API support features](#common-features).  | You don't need those features. |
+-->
+| 考虑 API 聚合的情况 | 优选独立 API 的情况 |
+| ---------------------------- | ---------------------------- |
+| 你的 API 是[声明式的](#declarative-apis)。 | 你的 API 不符合[声明式](#declarative-apis)模型。 |
+| 你希望可以是使用 `kubectl` 来读写你的新资源类别。 | 不要求 `kubectl` 支持。 |
+| 你希望在 Kubernetes UI （如仪表板）中和其他内置类别一起查看你的新资源类别。 | 不需要 Kubernetes UI 支持。 |
+| 你在开发新的 API。 | 你已经有一个提供 API 服务的程序并且工作良好。 |
+| 你有意愿取接受 Kubernetes 对 REST 资源路径所作的格式限制，例如 API 组和名字空间。（参阅 [API 概述](/zh/docs/concepts/overview/kubernetes-api/)） | 你需要使用一些特殊的 REST 路径以便与已经定义的 REST API 保持兼容。 |
+| 你的资源可以自然地界定为集群作用域或集群中某个名字空间作用域。 | 集群作用域或名字空间作用域这种二分法很不合适；你需要对资源路径的细节进行控制。 |
+| 你希望复用 [Kubernetes API 支持特性](#common-features)。  | 你不需要这类特性。 |
+
+<!--
+### Declarative APIs
+
+In a Declarative API, typically:
+
+ - Your API consists of a relatively small number of relatively small objects (resources).
+ - The objects define configuration of applications or infrastructure.
+ - The objects are updated relatively infrequently.
+ - Humans often need to read and write the objects.
+ - The main operations on the objects are CRUD-y (creating, reading, updating and deleting).
+ - Transactions across objects are not required: the API represents a desired state, not an exact state.
+-->
+### 声明式 APIs {#declarative-apis}
+
+典型地，在声明式 API 中：
+
+ - 你的 API 包含相对而言为数不多的、尺寸较小的对象（资源）。
+ - 对象定义了应用或者基础设施的配置信息。
+ - 对象更新操作频率较低。
+ - 通常需要人来读取或写入对象。
+ - 对象的主要操作是 CRUD 风格的（创建、读取、更新和删除）。
+ - 不需要跨对象的事务支持：API 对象代表的是期望状态而非确切实际状态。
+
+<!--
+Imperative APIs are not declarative.
+Signs that your API might not be declarative include:
+
+ - The client says "do this", and then gets a synchronous response back when it is done.
+ - The client says "do this", and then gets an operation ID back, and has to check a separate Operation object to determine completion of the request.
+ - You talk about Remote Procedure Calls (RPCs).
+ - Directly storing large amounts of data; for example, > a few kB per object, or > 1000s of objects.
+ - High bandwidth access (10s of requests per second sustained) needed.
+ - Store end-user data (such as images, PII, etc.) or other large-scale data processed by applications.
+ - The natural operations on the objects are not CRUD-y.
+ - The API is not easily modeled as objects.
+ - You chose to represent pending operations with an operation ID or an operation object.
+-->
+命令式 API（Imperative API）与声明式有所不同。
+以下迹象表明你的 API 可能不是声明式的：
+
+ - 客户端发出“做这个操作”的指令，之后在该操作结束时获得同步响应。
+ - 客户端发出“做这个操作”的指令，并获得一个操作 ID，之后需要检查一个 Operation（操作）
+   对象来判断请求是否成功完成。
+ - 你会将你的 API 类比为远程过程调用（Remote Procedure Call，RPCs）。
+ - 直接存储大量数据；例如每个对象几 kB，或者存储上千个对象。
+ - 需要较高的访问带宽（长期保持每秒数十个请求）。
+ - 存储有应用来处理的最终用户数据（如图片、个人标识信息（PII）等）或者其他大规模数据。
+ - 在对象上执行的常规操作并非 CRUD 风格。
+ - API 不太容易用对象来建模。
+ - 你决定使用操作 ID 或者操作对象来表现悬决的操作。
+
+<!--
+## Should I use a configMap or a custom resource?
+
+Use a ConfigMap if any of the following apply:
+
+* There is an existing, well-documented config file format, such as a `mysql.cnf` or `pom.xml`.
+* You want to put the entire config file into one key of a configMap.
+* The main use of the config file is for a program running in a Pod on your cluster to consume the file to configure itself.
+* Consumers of the file prefer to consume via file in a Pod or environment variable in a pod, rather than the Kubernetes API.
+* You want to perform rolling updates via Deployment, etc., when the file is updated.
+-->
+## 我应该使用一个 ConfigMap 还是一个定制资源？
+
+如果满足以下条件之一，应该使用 ConfigMap：
+
+* 存在一个已有的、文档完备的配置文件格式约定，例如 `mysql.cnf` 或 `pom.xml`。
+* 你希望将整个配置文件放到某 configMap 中的一个主键下面。
+* 配置文件的主要用途是针对运行在集群中 Pod 内的程序，供后者依据文件数据配置自身行为。
+* 文件的使用者期望以 Pod 内文件或者 Pod 内环境变量的形式来使用文件数据，
+  而不是通过 Kubernetes API。
+* 你希望当文件被更新时通过类似 Deployment 之类的资源完成滚动更新操作。
+
+<!--
+Use a [secret](/docs/concepts/configuration/secret/) for sensitive data, which is similar to a configMap but more secure.
+-->
+{{< note >}}
+请使用 [Secret](/zh/docs/concepts/configuration/secret/) 来保存敏感数据。
+Secret 类似于 configMap，但更为安全。
+{{< /note >}}
+
+<!--
+Use a custom resource (CRD or Aggregated API) if most of the following apply:
+
+* You want to use Kubernetes client libraries and CLIs to create and update the new resource.
+* You want top-level support from `kubectl`; for example, `kubectl get my-object object-name`.
+* You want to build new automation that watches for updates on the new object, and then CRUD other objects, or vice versa.
+* You want to write automation that handles updates to the object.
+* You want to use Kubernetes API conventions like `.spec`, `.status`, and `.metadata`.
+* You want the object to be an abstraction over a collection of controlled resources, or a summarization of other resources.
+-->
+如果以下条件中大多数都被满足，你应该使用定制资源（CRD 或者 聚合 API）：
+
+* 你希望使用 Kubernetes 客户端库和 CLI 来创建和更改新的资源。
+* 你希望 `kubectl` 能够直接支持你的资源；例如，`kubectl get my-object object-name`。
+* 你希望构造新的自动化机制，监测新对象上的更新事件，并对其他对象执行 CRUD
+  操作，或者监测后者更新前者。
+* 你希望编写自动化组件来处理对对象的更新。
+* 你希望使用 Kubernetes API 对诸如 `.spec`、`.status` 和 `.metadata` 等字段的约定。
+* 你希望对象是对一组受控资源的抽象，或者对其他资源的归纳提炼。
+
+<!--
+## Adding custom resources
+
+Kubernetes provides two ways to add custom resources to your cluster:
+
+- CRDs are simple and can be created without any programming.
+- [API Aggregation](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) requires programming, but allows more control over API behaviors like how data is stored and conversion between API versions.
+-->
+## 添加定制资源   {#adding-custom-resources}
+
+Kubernetes 提供了两种方式供你向集群中添加定制资源：
+
+- CRD 相对简单，创建 CRD 可以不必编程。
+- [API 聚合](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+  需要编程，但支持对 API 行为进行更多的控制，例如数据如何存储以及在不同 API 版本间如何转换等。
+
+<!--
+Kubernetes provides these two options to meet the needs of different users, so that neither ease of use nor flexibility is compromised.
+
+Aggregated APIs are subordinate API servers that sit behind the primary API server, which acts as a proxy. This arrangement is called [API Aggregation](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) (AA). To users, it simply appears that the Kubernetes API is extended.
+
+CRDs allow users to create new types of resources without adding another API server. You do not need to understand API Aggregation to use CRDs.
+
+Regardless of how they are installed, the new resources are referred to as Custom Resources to distinguish them from built-in Kubernetes resources (like pods).
+-->
+Kubernetes 提供这两种选项以满足不同用户的需求，这样就既不会牺牲易用性也不会牺牲灵活性。
+
+聚合 API 指的是一些下位的 API 服务器，运行在主 API 服务器后面；主 API
+服务器以代理的方式工作。这种组织形式称作
+[API 聚合（API Aggregation，AA）](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) 。
+对用户而言，看起来仅仅是 Kubernetes API 被扩展了。
+
+CRD 允许用户创建新的资源类别同时又不必添加新的 API 服务器。
+使用 CRD 时，你并不需要理解 API 聚合。
+
+无论以哪种方式安装定制资源，新的资源都会被当做定制资源，以便与内置的
+Kubernetes 资源（如 Pods）相区分。
+
+<!--
+## CustomResourceDefinitions
+
+The [CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
+API resource allows you to define custom resources.
+Defining a CRD object creates a new custom resource with a name and schema that you specify.
+The Kubernetes API serves and handles the storage of your custom resource.
+The name of a CRD object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+-->
+## CustomResourceDefinitions
+
+[CustomResourceDefinition](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
+API 资源允许你定义定制资源。
+定义 CRD 对象的操作会使用你所设定的名字和模式定义（Schema）创建一个新的定制资源，
+Kubernetes API 负责为你的定制资源提供存储和访问服务。
+CRD 对象的名称必须是合法的
+[DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)。
+
+<!--
+This frees you from writing your own API server to handle the custom resource,
+but the generic nature of the implementation means you have less flexibility than with
+[API server aggregation](#api-server-aggregation).
+
+Refer to the [custom controller example](https://github.com/kubernetes/sample-controller)
+for an example of how to register a new custom resource, work with instances of your new resource type,
+and use a controller to handle events.
+-->
+CRD 使得你不必编写自己的 API 服务器来处理定制资源，不过其背后实现的通用性也意味着
+你所获得的灵活性要比 [API 服务器聚合](#api-server-aggregation)少很多。
+
+关于如何注册新的定制资源、使用新资源类别的实例以及如何使用控制器来处理事件，
+相关的例子可参见[定制控制器示例](https://github.com/kubernetes/sample-controller)。
+
+<!--
+## API server aggregation
+
+Usually, each resource in the Kubernetes API requires code that handles REST requests and manages persistent storage of objects. The main Kubernetes API server handles built-in resources like *pods* and *services*, and can also generically handle custom resources through [CRDs](#customresourcedefinitions).
+
+The [aggregation layer](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) allows you to provide specialized
+implementations for your custom resources by writing and deploying your own standalone API server.
+The main API server delegates requests to you for the custom resources that you handle,
+making them available to all of its clients.
+-->
+## API 服务器聚合  {#api-server-aggregation}
+
+通常，Kubernetes API 中的每个都需要处理 REST 请求和管理对象持久性存储的代码。
+Kubernetes API 主服务器能够处理诸如 *pods* 和 *services* 这些内置资源，也可以
+按通用的方式通过 CRD {#customresourcedefinitions} 来处理定制资源。
+
+[聚合层（Aggregation Layer）](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+使得你可以通过编写和部署你自己的独立的 API 服务器来为定制资源提供特殊的实现。
+主 API 服务器将针对你要处理的定制资源的请求全部委托给你来处理，同时将这些资源
+提供给其所有客户。
+
+<!--
+## Choosing a method for adding custom resources
+
+CRDs are easier to use. Aggregated APIs are more flexible. Choose the method that best meets your needs.
+
+Typically, CRDs are a good fit if:
+
+* You have a handful of fields
+* You are using the resource within your company, or as part of a small open-source project (as opposed to a commercial product)
+-->
+## 选择添加定制资源的方法
+
+CRD 更为易用；聚合 API 则更为灵活。请选择最符合你的需要的方法。
+
+通常，如何存在以下情况，CRD 可能更合适：
+
+* 定制资源的字段不多；
+* 你在组织内部使用该资源或者在一个小规模的开源项目中使用该资源，而不是
+  在商业产品中使用。
+
+<!--
+### Comparing ease of use
+
+CRDs are easier to create than Aggregated APIs.
+-->
+### 比较易用性  {#compare-ease-of-use}
+
+CRD 比聚合 API 更容易创建
+
+<!--
+| CRDs                        | Aggregated API |
+| --------------------------- | -------------- |
+| Do not require programming. Users can choose any language for a CRD controller. | Requires programming in Go and building binary and image. |
+| No additional service to run; CRDs are handled by API server. | An additional service to create and that could fail. |
+| No ongoing support once the CRD is created. Any bug fixes are picked up as part of normal Kubernetes Master upgrades. | May need to periodically pickup bug fixes from upstream and rebuild and update the Aggregated API server. |
+| No need to handle multiple versions of your API; for example, when you control the client for this resource, you can upgrade it in sync with the API. | You need to handle multiple versions of your API; for example, when developing an extension to share with the world. |
+-->
+| CRDs                        | 聚合 API       |
+| --------------------------- | -------------- |
+| 无需编程。用户可选择任何语言来实现 CRD 控制器。 | 需要使用 Go 来编程，并构建可执行文件和镜像。 |
+| 无需额外运行服务；CRD 由 API 服务器处理。 | 需要额外创建服务，且该服务可能失效。 |
+| 一旦 CRD 被创建，不需要持续提供支持。Kubernetes 主控节点升级过程中自动会带入缺陷修复。 | 可能需要周期性地从上游提取缺陷修复并更新聚合 API 服务器。 |
+| 无需处理 API 的多个版本；例如，当你控制资源的客户端时，你可以更新它使之与 API 同步。 | 你需要处理 API 的多个版本；例如，在开发打算与很多人共享的扩展时。 |
+
+<!--
+### Advanced features and flexibility
+
+Aggregated APIs offer more advanced API features and customization of other features; for example, the storage layer.
+-->
+### 高级特性与灵活性  {#advanced-features-and-flexibility}
+
+聚合 API 可提供更多的高级 API 特性，也可对其他特性实行定制；例如，对存储层进行定制。
+
+<!--
+| Feature  | Description  | CRDs | Aggregated API   |
+| -------- | ------------ | ---- | ---------------- |
+| Validation | Help users prevent errors and allow you to evolve your API independently of your clients. These features are most useful when there are many clients who can't all update at the same time. | Yes.  Most validation can be specified in the CRD using [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation).  Any other validations supported by addition of a [Validating Webhook](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook-alpha-in-1-8-beta-in-1-9). | Yes, arbitrary validation checks |
+| Defaulting | See above | Yes, either via [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#defaulting) `default` keyword (GA in 1.17), or via a [Mutating Webhook](/docs/reference/access-authn-authz/admission-controllers/#mutatingadmissionwebhook) (though this will not be run when reading from etcd for old objects). | Yes |
+| Multi-versioning | Allows serving the same object through two API versions. Can help ease API changes like renaming fields. Less important if you control your client versions. | [Yes](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning) | Yes |
+| Custom Storage | If you need storage with a different performance mode (for example, a time-series database instead of key-value store) or isolation for security (for example, encryption of sensitive information, etc.) | No | Yes |
+| Custom Business Logic | Perform arbitrary checks or actions when creating, reading, updating or deleting an object | Yes, using [Webhooks](/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks). | Yes |
+| Scale Subresource | Allows systems like HorizontalPodAutoscaler and PodDisruptionBudget interact with your new resource | [Yes](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#scale-subresource)  | Yes |
+| Status Subresource | Allows fine-grained access control where user writes the spec section and the controller writes the status section. Allows incrementing object Generation on custom resource data mutation (requires separate spec and status sections in the resource) | [Yes](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#status-subresource) | Yes |
+| Other Subresources | Add operations other than CRUD, such as "logs" or "exec". | No | Yes |
+| strategic-merge-patch | The new endpoints support PATCH with `Content-Type: application/strategic-merge-patch+json`. Useful for updating objects that may be modified both locally, and by the server. For more information, see ["Update API Objects in Place Using kubectl patch"](/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/) | No | Yes |
+| Protocol Buffers | The new resource supports clients that want to use Protocol Buffers | No | Yes |
+| OpenAPI Schema | Is there an OpenAPI (swagger) schema for the types that can be dynamically fetched from the server? Is the user protected from misspelling field names by ensuring only allowed fields are set? Are types enforced (in other words, don't put an `int` in a `string` field?) | Yes, based on the [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) schema (GA in 1.16). | Yes |
+-->
+| 特性    | 描述        | CRDs | 聚合 API       |
+| ------- | ----------- | ---- | -------------- |
+| 合法性检查 | 帮助用户避免错误，允许你独立于客户端版本演化 API。这些特性对于由很多无法同时更新的客户端的场合。| 可以。大多数验证可以使用 [OpenAPI v3.0 合法性检查](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) 来设定。其他合法性检查操作可以通过添加[合法性检查 Webhook](/zh/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook-alpha-in-1-8-beta-in-1-9)来实现。 | 可以，可执行任何合法性检查。|
+| 默认值设置 | 同上 | 可以。可通过 [OpenAPI v3.0 合法性检查](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#defaulting)的 `default` 关键词（自 1.17 正式发布）或[更改性（Mutating）Webhook](/zh/docs/reference/access-authn-authz/admission-controllers/#mutatingadmissionwebhook)来实现（不过从 etcd 中读取老的对象时不会执行这些 Webhook）。 | 可以。 |
+| 多版本支持 | 允许通过两个 API 版本同时提供同一对象。可帮助简化类似字段更名这类 API 操作。如果你能控制客户端版本，这一特性将不再重要。 | [可以](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning)。 | 可以。 |
+| 定制存储 | 支持使用具有不同性能模式的存储（例如，要使用时间序列数据库而不是键值存储），或者因安全性原因对存储进行隔离（例如对敏感信息执行加密）。 | 不可以。 | 可以。 |
+| 定制业务逻辑 | 在创建、读取、更新或删除对象时，执行任意的检查或操作。 | 可以。要使用 [Webhook](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks)。 | 可以。 |
+| 支持 scale 子资源 | 允许 HorizontalPodAutoscaler 和 PodDisruptionBudget 这类子系统与你的新资源交互。 | [可以](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#scale-subresource)。 | 可以。 |
+| 支持 status 子资源 | 允许在用户写入 spec 部分而控制器写入 status 部分时执行细粒度的访问控制。允许在对定制资源的数据进行更改时增加对象的代际（Generation）；这需要资源对 spec 和 status 部分有明确划分。| [可以](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#status-subresource)。 | 可以。 |
+| 其他子资源 | 添加 CRUD 之外的操作，例如 "logs" 或 "exec"。 | 不可以。 | 可以。 |
+| strategic-merge-patch | 新的端点要支持标记了 `Content-Type: application/strategic-merge-patch+json` 的 PATCH 操作。对于更新既可在本地更改也可在服务器端更改的对象而言是有用的。要了解更多信息，可参见[使用 `kubectl patch` 来更新 API 对象](/zh/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/)。 | 不可以。 | 可以。 |
+| 支持协议缓冲区 | 新的资源要支持想要使用协议缓冲区（Protocol Buffer）的客户端。 | 不可以。 | 可以。 |
+| OpenAPI Schema | 是否存在新资源类别的 OpenAPI（Swagger）Schema 可供动态从服务器上读取？是否存在机制确保只能设置被允许的字段以避免用户犯字段拼写错误？是否实施了字段类型检查（换言之，不允许在 `string` 字段设置 `int` 值）？ | 可以，依据 [OpenAPI v3.0 合法性检查](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) 模式（1.16 中进入正式发布状态）。 | 可以。|
+
+<!--
+### Common Features
+
+When you create a custom resource, either via a CRD or an AA, you get many features for your API, compared to implementing it outside the Kubernetes platform:
+-->
+### 公共特性  {#common-features}
+
+与在 Kubernetes 平台之外实现定制资源相比，
+无论是通过 CRD 还是通过聚合 API 来创建定制资源，你都会获得很多 API 特性：
+
+<!--
+| Feature  | What it does |
+| -------- | ------------ |
+| CRUD | The new endpoints support CRUD basic operations via HTTP and `kubectl` |
+| Watch | The new endpoints support Kubernetes Watch operations via HTTP |
+| Discovery | Clients like `kubectl` and dashboard automatically offer list, display, and field edit operations on your resources |
+| json-patch | The new endpoints support PATCH with `Content-Type: application/json-patch+json` |
+| merge-patch | The new endpoints support PATCH with `Content-Type: application/merge-patch+json` |
+| HTTPS | The new endpoints uses HTTPS |
+| Built-in Authentication | Access to the extension uses the core API server (aggregation layer) for authentication |
+| Built-in Authorization | Access to the extension can reuse the authorization used by the core API server; for example, RBAC. |
+| Finalizers | Block deletion of extension resources until external cleanup happens. |
+| Admission Webhooks | Set default values and validate extension resources during any create/update/delete operation. |
+| UI/CLI Display | Kubectl, dashboard can display extension resources. |
+| Unset versus Empty | Clients can distinguish unset fields from zero-valued fields. |
+| Client Libraries Generation | Kubernetes provides generic client libraries, as well as tools to generate type-specific client libraries. |
+| Labels and annotations | Common metadata across objects that tools know how to edit for core and custom resources. |
+-->
+| 功能特性 | 具体含义     |
+| -------- | ------------ |
+| CRUD | 新的端点支持通过 HTTP 和 `kubectl` 发起的 CRUD 基本操作 |
+| 监测（Watch） | 新的端点支持通过 HTTP 发起的 Kubernetes Watch 操作 |
+| 发现（Discovery） | 类似 `kubectl` 和仪表盘（Dashboard）这类客户端能够自动提供列举、显示、在字段级编辑你的资源的操作 |
+| json-patch | 新的端点支持带 `Content-Type: application/json-patch+json` 的 PATCH 操作 |
+| merge-patch | 新的端点支持带 `Content-Type: application/merge-patch+json` 的 PATCH 操作 |
+| HTTPS | 新的端点使用 HTTPS |
+| 内置身份认证 | 对扩展的访问会使用核心 API 服务器（聚合层）来执行身份认证操作 |
+| 内置鉴权授权 | 对扩展的访问可以复用核心 API 服务器所使用的鉴权授权机制；例如，RBAC |
+| Finalizers | 在外部清除工作结束之前阻止扩展资源被删除 |
+| 准入 Webhooks | 在创建、更新和删除操作中对扩展资源设置默认值和执行合法性检查 |
+| UI/CLI 展示 | `kubectl` 和仪表盘（Dashboard）可以显示扩展资源 |
+| 区分未设置值和空值 | 客户端能够区分哪些字段是未设置的，哪些字段的值是被显式设置为零值的。  |
+| 生成客户端库 | Kubernetes 提供通用的客户端库，以及用来生成特定类别客户端库的工具 |
+| 标签和注解 | 提供涵盖所有对象的公共元数据结构，且工具知晓如何编辑核心资源和定制资源的这些元数据 |
+
+<!--
+## Preparing to install a custom resource
+
+There are several points to be aware of before adding a custom resource to your cluster.
+-->
+## 准备安装定制资源
+
+在向你的集群添加定制资源之前，有些事情需要搞清楚。
+
+<!--
+### Third party code and new points of failure
+
+While creating a CRD does not automatically add any new points of failure (for example, by causing third party code to run on your API server), packages (for example, Charts) or other installation bundles often include CRDs as well as a Deployment of third-party code that implements the business logic for a new custom resource.
+
+Installing an Aggregated API server always involves running a new Deployment.
+-->
+### 第三方代码和新的失效点的问题
+
+尽管添加新的 CRD 不会自动带来新的失效点（Point of
+Failure），例如导致第三方代码被在 API 服务器上运行，
+类似 Helm Charts 这种软件包或者其他安装包通常在提供 CRD 的同时还包含带有第三方
+代码的 Deployment，负责实现新的定制资源的业务逻辑。
+
+安装聚合 API 服务器时，也总会牵涉到运行一个新的 Deployment。
+
+<!--
+### Storage
+
+Custom resources consume storage space in the same way that ConfigMaps do. Creating too many custom resources may overload your API server's storage space.
+
+Aggregated API servers may use the same storage as the main API server, in which case the same warning applies.
+-->
+### 存储
+
+定制资源和 ConfigMap 一样也会消耗存储空间。创建过多的定制资源可能会导致
+API 服务器上的存储空间超载。
+
+聚合 API 服务器可以使用主 API 服务器的同一存储。如果是这样，你也要注意
+此警告。
+
+<!--
+### Authentication, authorization, and auditing
+
+CRDs always use the same authentication, authorization, and audit logging as the built-in resources of your API server.
+
+If you use RBAC for authorization, most RBAC roles will not grant access to the new resources (except the cluster-admin role or any role created with wildcard rules). You'll need to explicitly grant access to the new resources. CRDs and Aggregated APIs often come bundled with new role definitions for the types they add.
+
+Aggregated API servers may or may not use the same authentication, authorization, and auditing as the primary API server.
+-->
+### 身份认证、鉴权授权以及审计
+
+CRD 通常与 API 服务器上的内置资源一样使用相同的身份认证、鉴权授权
+和审计日志机制。
+
+如果你使用 RBAC 来执行鉴权授权，大多数 RBAC 角色都会授权对新资源的访问
+（除了 cluster-admin 角色以及使用通配符规则创建的其他角色）。
+你要显式地为新资源的访问授权。CRD 和聚合 API 通常在交付时会包含
+针对所添加的类别的新的角色定义。
+
+聚合 API 服务器可能会使用主 API 服务器相同的身份认证、鉴权授权和审计
+机制，也可能不会。
+
+<!--
+## Accessing a custom resource
+
+Kubernetes [client libraries](/docs/reference/using-api/client-libraries/) can be used to access custom resources. Not all client libraries support custom resources. The _Go_ and _Python_ client libraries do.
+
+When you add a custom resource, you can access it using:
+
+- `kubectl`
+- The kubernetes dynamic client.
+- A REST client that you write.
+- A client generated using [Kubernetes client generation tools](https://github.com/kubernetes/code-generator) (generating one is an advanced undertaking, but some projects may provide a client along with the CRD or AA).
+-->
+## 访问定制资源
+
+Kubernetes [客户端库](/zh/docs/reference/using-api/client-libraries/)可用来访问定制资源。
+并非所有客户端库都支持定制资源。_Go_ 和 _Python_ 客户端库是支持的。
+
+当你添加了新的定制资源后，可以用如下方式之一访问它们：
+
+- `kubectl`
+- Kubernetes 动态客户端
+- 你所编写的 REST 客户端
+- 使用 [Kubernetes 客户端生成工具](https://github.com/kubernetes/code-generator)
+  所生成的客户端。生成客户端的工作有些难度，不过某些项目可能会随着 CRD 或
+  聚合 API 一起提供一个客户端
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Learn how to [Extend the Kubernetes API with the aggregation layer](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/).
+* Learn how to [Extend the Kubernetes API with CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/).
+-->
+* 了解如何[使用聚合层扩展 Kubernetes API](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+* 了解如何[使用 CustomResourceDefinition 来扩展 Kubernetes API](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
+

From d70cd852aa4a3d014e8f5ed158bd1f9982d78469 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 29 Aug 2020 22:02:22 +0800
Subject: [PATCH 132/496] [zh] Translate deprecation policy reference

---
 .../reference/using-api/deprecation-policy.md | 738 ++++++++++++++++++
 1 file changed, 738 insertions(+)
 create mode 100644 content/zh/docs/reference/using-api/deprecation-policy.md

diff --git a/content/zh/docs/reference/using-api/deprecation-policy.md b/content/zh/docs/reference/using-api/deprecation-policy.md
new file mode 100644
index 0000000000..a5fa369e96
--- /dev/null
+++ b/content/zh/docs/reference/using-api/deprecation-policy.md
@@ -0,0 +1,738 @@
+---
+title: Kubernetes 弃用策略
+content_type: concept
+weight: 40
+---
+<!--
+reviewers:
+- bgrant0607
+- lavalamp
+- thockin
+title: Kubernetes Deprecation Policy
+content_type: concept
+weight: 40
+-->
+
+<!-- overview -->
+<!--
+This document details the deprecation policy for various facets of the system.
+-->
+本文档详细解释系统中各个层面的弃用策略（Deprecation Policy）。
+
+<!-- body -->
+<!--
+Kubernetes is a large system with many components and many contributors.  As
+with any such software, the feature set naturally evolves over time, and
+sometimes a feature may need to be removed. This could include an API, a flag,
+or even an entire feature. To avoid breaking existing users, Kubernetes follows
+a deprecation policy for aspects of the system that are slated to be removed.
+-->
+Kubernetes 是一个组件众多、贡献者人数众多的大系统。
+就像很多类似的软件，所提供的功能特性集合会随着时间推移而自然发生变化，
+而且有时候某个功能特性可能需要被去除。被去除的可能是一个 API、一个参数标志或者
+甚至某整个功能特性。为了避免影响到现有用户，Kubernetes 对于其中渐次移除
+的各个方面规定了一种弃用策略并遵从此策略。
+
+<!--
+## Deprecating parts of the API
+
+Since Kubernetes is an API-driven system, the API has evolved over time to
+reflect the evolving understanding of the problem space. The Kubernetes API is
+actually a set of APIs, called "API groups", and each API group is
+independently versioned.  [API versions](/docs/reference/using-api/api-overview/#api-versioning) fall
+into 3 main tracks, each of which has different policies for deprecation:
+-->
+## 弃用 API 的一部分  {#deprecating-parts-of-the-api}
+
+由于 Kubernetes 是一个 API 驱动的系统，API 会随着时间推移而演化，以反映
+人们对问题共建的认识的变化。Kubernetes API 实际上是一个 API 集合，其中每个
+成员称作“API 组（API Group）”，并且每个 API 组都是独立管理版本的。
+[API 版本](/zh/docs/reference/using-api/api-overview/#api-versioning)会有
+三类，每类有不同的废弃策略：
+
+<!--
+| Example  | Track                            |
+|----------|----------------------------------|
+| v1       | GA (generally available, stable) |
+| v1beta1  | Beta (pre-release)               |
+| v1alpha1 | Alpha (experimental)             |
+-->
+| 示例     | 分类                             |
+|----------|----------------------------------|
+| v1       | 正式发布（Generally available，GA，稳定版本） |
+| v1beta1  | Beta （预发布）|
+| v1alpha1 | Alpha （试验性） |
+
+<!--
+A given release of Kubernetes can support any number of API groups and any
+number of versions of each.
+
+The following rules govern the deprecation of elements of the API.  This
+includes:
+-->
+给定的 Kubernetes 发布版本中可以支持任意数量的 API 组，且每组可以包含
+任意个数的版本。
+
+下面的规则负责指导 API 元素的弃用，具体元素包括：
+
+<!--
+   * REST resources (aka API objects)
+   * Fields of REST resources
+   * Annotations on REST resources, including "beta" annotations but not
+     including "alpha" annotations.
+   * Enumerated or constant values
+   * Component config structures
+-->
+* REST 资源（也即 API 对象）
+* REST 资源的字段
+* REST 资源的注解，包含“beta”类注解但不包含“alpha”类注解
+* 枚举值或者常数值
+* 组件配置结构
+
+<!--
+These rules are enforced between official releases, not between
+arbitrary commits to master or release branches.
+
+**Rule #1: API elements may only be removed by incrementing the version of the
+API group.**
+
+Once an API element has been added to an API group at a particular version, it
+can not be removed from that version or have its behavior significantly
+changed, regardless of track.
+-->
+以下是跨正式发布版本时要实施的规则，不适用于对 master 或发布分支上
+不同提交之间的变化。
+
+**规则 #1：只能在增加 API 组版本号时删除 API 元素。**
+
+一旦在某个特定 API 组版本中添加了 API 元素，则该元素不可从该版本中删除，
+且其行为也不能大幅度地变化，无论属于哪一类（GA、Alpha 或 Beta）。
+
+<!--
+For historical reasons, there are 2 "monolithic" API groups - "core" (no
+group name) and "extensions".  Resources will incrementally be moved from these
+legacy API groups into more domain-specific API groups.
+-->
+{{< note >}}
+由于历史原因，Kubernetes 中存在两个“单体式（Monolithic）”API 组 -
+“core”（无组名）和“extensions”。这两个遗留 API 组中的资源会被逐渐迁移到
+更为特定领域的 API 组中。
+{{< /note >}}
+
+<!--
+**Rule #2: API objects must be able to round-trip between API versions in a given
+release without information loss, with the exception of whole REST resources
+that do not exist in some versions.**
+-->
+**规则 #2：在给定的发布版本中，API 对象必须能够在不同的 API 版本之间来回
+转换且不造成信息丢失，除非整个 REST 资源在某些版本中完全不存在。**
+
+<!--
+For example, an object can be written as v1 and then read back as v2 and
+converted to v1, and the resulting v1 resource will be identical to the
+original.  The representation in v2 might be different from v1, but the system
+knows how to convert between them in both directions.  Additionally, any new
+field added in v2 must be able to round-trip to v1 and back, which means v1
+might have to add an equivalent field or represent it as an annotation.
+-->
+例如，一个对象可被用 v1 来写入之后用 v2 来读出并转换为 v1，所得到的 v1 必须
+与原来的 v1 对象完全相同。v2 中的表现形式可能与 v1 不同，但系统知道如何
+在两个版本之间执行双向转换。
+此外，v2 中添加的所有新字段都必须能够转换为 v1 再转换回来。这意味着 v1 必须
+添加一个新的等效字段或者将其表现为一个注解。
+
+<!--
+**Rule #3: An API version in a given track may not be deprecated until a new
+API version at least as stable is released.**
+
+GA API versions can replace GA API versions as well as beta and alpha API
+versions.  Beta API versions *may not* replace GA API versions.
+-->
+**规则 #3：给定类别的 API 版本在新的、稳定性未降低的 API 版本发布之前不可被废弃。**
+
+一个正式发布的（GA）API 版本可替换现有的正式 API 版本或 alpha、beta API 版本。
+Beta API 版本 *不可以* 替代正式的 API 版本。
+
+<!--
+**Rule #4a: Other than the most recent API versions in each track, older API
+versions must be supported after their announced deprecation for a duration of
+no less than:**
+
+   * **GA: 12 months or 3 releases (whichever is longer)**
+   * **Beta: 9 months or 3 releases (whichever is longer)**
+   * **Alpha: 0 releases**
+
+This covers the [maximum supported version skew of 2 releases](/docs/setup/release/version-skew-policy/).
+-->
+**规则 #4a：除了每类 API 版本中的最新版本，旧的 API 版本在其被宣布被废弃之后
+至少以下时长内仍需被支持：**
+
+   * **GA：12 个月或者 3 个发布版本（取其较长者）**
+   * **Beta: 9 个月或者 3 个发布版本（取其较长者）**
+   * **Alpha: 0 个发布版本**
+
+这里也包含了关于[最大支持 2 个发布版本的版本偏差](/zh/docs/setup/release/version-skew-policy/)的约定。
+
+<!--
+Until [#52185](https://github.com/kubernetes/kubernetes/issues/52185) is
+resolved, no API versions that have been persisted to storage may be removed.
+Serving REST endpoints for those versions may be disabled (subject to the
+deprecation timelines in this document), but the API server must remain capable
+of decoding/converting previously persisted data from storage.
+-->
+{{< note >}}
+在[#52185](https://github.com/kubernetes/kubernetes/issues/52185)被解决之前，
+已经被保存到持久性存储中的 API 版本都不可以被去除。
+你可以禁止这些版本所对应的 REST 末端（在符合本文中弃用时间线的前提下），
+但是 API 服务器必须仍能解析和转换存储中以前写入的数据。
+{{< /note >}}
+
+<!--
+**Rule #4b: The "preferred" API version and the "storage version" for a given
+group may not advance until after a release has been made that supports both the
+new version and the previous version**
+-->
+**规则 #4b：标记为“preferred（优选的）” API 版本和给定 API 组的
+“storage version（存储版本）”在既支持老版本也支持新版本的 Kubernetes 发布
+版本出来以前不可以提升其版本号。**
+
+<!--
+Users must be able to upgrade to a new release of Kubernetes and then roll back
+to a previous release, without converting anything to the new API version or
+suffering breakages (unless they explicitly used features only available in the
+newer version).  This is particularly evident in the stored representation of
+objects.
+
+All of this is best illustrated by examples.  Imagine a Kubernetes release,
+version X, which introduces a new API group.  A new Kubernetes release is made
+every approximately 3 months (4 per year).  The following table describes which
+API versions are supported in a series of subsequent releases.
+-->
+用户必须能够升级到 Kubernetes 新的发行版本，之后再回滚到前一个发行版本，且
+整个过程中无需针对新的 API 版本做任何转换，也不允许出现功能损坏的情况，
+除非用户显式地使用了仅在较新版本中才存在的功能特性。
+就对象的存储表示而言，这一点尤其是不言自明的。
+
+以上所有规则最好通过例子来说明。假定现有 Kubernetes 发行版本为 X，其中引入了
+新的 API 组。大约每隔 3 个月会有一个新的 Kubernetes 版本被发布（每年 4 个版本）。
+下面的表格描述了在一系列后续的发布版本中哪些 API 版本是受支持的。
+
+<table>
+  <thead>
+    <tr>
+      <!-- th>Release</th>
+      <th>API Versions</th>
+      <th>Preferred/Storage Version</th>
+      <th>Notes</th -->
+      <th>发布版本</th>
+      <th>API 版本</th>
+      <th>优选/存储版本</th>
+      <th>注释</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>X</td>
+      <td>v1alpha1</td>
+      <td>v1alpha1</td>
+      <td></td>
+    </tr>
+    <tr>
+      <td>X+1</td>
+      <td>v1alpha2</td>
+      <td>v1alpha2</td>
+      <td>
+        <ul>
+           <!-- li>v1alpha1 is removed, "action required" relnote</li -->
+           <li>v1alpha1 被去除，发布说明中会包含 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+2</td>
+      <td>v1beta1</td>
+      <td>v1beta1</td>
+      <td>
+        <ul>
+          <!-- li>v1alpha2 is removed, "action required" relnote</li -->
+          <li>v1alpha2 被去除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+3</td>
+      <!-- td>v1beta2, v1beta1 (deprecated)</td -->
+      <td>v1beta2、v1beta1（已弃用）</td>
+      <td>v1beta1</td>
+      <td>
+        <ul>
+          <!-- li>v1beta1 is deprecated, "action required" relnote</li -->
+          <li>v1beta1 被弃用，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+4</td>
+      <!-- td>v1beta2, v1beta1 (deprecated)</td -->
+      <td>v1beta2、v1beta1（已弃用）</td>
+      <td>v1beta2</td>
+      <td></td>
+    </tr>
+    <tr>
+      <td>X+5</td>
+      <!-- td>v1, v1beta1 (deprecated), v1beta2 (deprecated)</td -->
+      <td>v1、v1beta1（已弃用）、v1beta2（已弃用）</td>
+      <td>v1beta2</td>
+      <td>
+        <ul>
+          <!-- li>v1beta2 is deprecated, "action required" relnote</li -->
+          <li>v1beta2 被弃用，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+6</td>
+      <!-- td>v1, v1beta2 (deprecated)</td -->
+      <td>v1、v1beta2（已弃用）</td>
+      <td>v1</td>
+      <td>
+        <ul>
+          <!-- li>v1beta1 is removed, "action required" relnote</li -->
+          <li>v1beta1 被去除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+7</td>
+      <!-- td>v1, v1beta2 (deprecated)</td -->
+      <td>v1、v1beta2（已弃用）</td>
+      <td>v1</td>
+      <td></td>
+    </tr>
+    <tr>
+      <td>X+8</td>
+      <td>v2alpha1、v1</td>
+      <td>v1</td>
+      <td>
+        <ul>
+          <!-- li>v1beta2 is removed, "action required" relnote</li -->
+          <li>v1beta2 被去除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+9</td>
+      <td>v2alpha2、v1</td>
+      <td>v1</td>
+      <td>
+        <ul>
+           <!-- li>v2alpha1 is removed, "action required" relnote</li -->
+           <li>v2alpha1 被删除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+10</td>
+      <td>v2beta1、v1</td>
+      <td>v1</td>
+      <td>
+        <ul>
+          <!-- li>v2alpha2 is removed, "action required" relnote</li -->
+          <li>v2alpha2 被删除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+11</td>
+      <!-- td>v2beta2, v2beta1 (deprecated), v1</td -->
+      <td>v2beta2、v2beta1（已弃用）、v1</td>
+      <td>v1</td>
+      <td>
+        <ul>
+          <!-- li>v2beta1 is deprecated, "action required" relnote</li -->
+          <li>v2beta1 被弃用，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+12</td>
+      <!-- td>v2, v2beta2 (deprecated), v2beta1 (deprecated), v1 (deprecated)</td -->
+      <td>v2、v2beta2（已弃用）、v2beta1（已弃用）、v1（已弃用）</td>
+      <td>v1</td>
+      <td>
+        <ul>
+          <!-- li>v2beta2 is deprecated, "action required" relnote</li>
+          <li>v1 is deprecated, "action required" relnote</li -->
+          <li>v2beta2 已被弃用，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+          <li>v1 已被弃用，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+13</td>
+      <!-- td>v2, v2beta1 (deprecated), v2beta2 (deprecated), v1 (deprecated)</td -->
+      <td>v2、v2beta1（已弃用）、v2beta2（已弃用）、v1（已弃用）</td>
+      <td>v2</td>
+      <td></td>
+    </tr>
+    <tr>
+      <td>X+14</td>
+      <!-- td>v2, v2beta2 (deprecated), v1 (deprecated)</td -->
+      <td>v2、v2beta2（已弃用）、v1（已弃用）</td>
+      <td>v2</td>
+      <td>
+        <ul>
+          <!-- li>v2beta1 is removed, "action required" relnote</li -->
+          <li>v2beta1 被删除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+15</td>
+      <!-- td>v2, v1 (deprecated)</td -->
+      <td>v2、v1（已弃用）</td>
+      <td>v2</td>
+      <td>
+        <ul>
+          <!-- li>v2beta2 is removed, "action required" relnote</li -->
+          <li>v2beta2 被删除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+    <tr>
+      <td>X+16</td>
+      <!-- td>v2, v1 (deprecated)</td -->
+      <td>v2、v1（已弃用）</td>
+      <td>v2</td>
+      <td></td>
+    </tr>
+    <tr>
+      <td>X+17</td>
+      <td>v2</td>
+      <td>v2</td>
+      <td>
+        <ul>
+          <li>v1 被删除，发布说明中包含对应的 "action required（采取行动）" 说明</li>
+        </ul>
+      </td>
+    </tr>
+  </tbody>
+</table>
+
+<!--
+### REST resources (aka API objects)
+
+Consider a hypothetical REST resource named Widget, which was present in API v1
+in the above timeline, and which needs to be deprecated.  We document and
+[announce](https://groups.google.com/forum/#!forum/kubernetes-announce) the
+deprecation in sync with release X+1.  The Widget resource still exists in API
+version v1 (deprecated) but not in v2alpha1.  The Widget resource continues to
+exist and function in releases up to and including X+8.  Only in release X+9,
+when API v1 has aged out, does the Widget resource cease to exist, and the
+behavior get removed.
+-->
+### REST 资源（也即 API 对象）
+
+考虑一个假想的名为 Widget 的 REST 资源，在上述时间线中位于 API v1，
+而现在打算将其弃用。
+我们会在文档和
+[声明](https://groups.google.com/forum/#!forum/kubernetes-announce)
+中与 X+1 版本的发布同步记述此弃用决定。
+Wdiget 资源仍会在 API 版本 v1（已弃用）中存在，但不会出现在 v2alpha1 中。
+Widget 资源会 X+8 发布版本之前（含 X+8）一直存在并可用。
+只有在发布版本 X+9 中，API v1 寿终正寝时，Widget
+才彻底消失，相应的资源行为也被移除。
+
+<!--
+Starting in Kubernetes v1.19, making an API request to a deprecated REST API endpoint:
+
+1. Returns a `Warning` header (as defined in [RFC7234, Section 5.5](https://tools.ietf.org/html/rfc7234#section-5.5)) in the API response.
+2. Adds a `"k8s.io/deprecated":"true"` annotation to the [audit event](/docs/tasks/debug-application-cluster/audit/) recorded for the request.
+3. Sets an `apiserver_requested_deprecated_apis` gauge metric to `1` in the `kube-apiserver` 
+   process. The metric has labels for `group`, `version`, `resource`, `subresource` that can be joined
+   to the `apiserver_request_total` metric, and a `removed_version` label that indicates the 
+   Kubernetes release in which the API will no longer be served. The following Prometheus query
+   returns information about requests made to deprecated APIs which will be removed in v1.22:
+   
+   ```promql
+   apiserver_requested_deprecated_apis{removed_version="1.22"} * on(group,version,resource,subresource) group_right() apiserver_request_total
+   ```
+-->
+从 Kubernetes v1.19 开始，当 API 请求被发送到一个已弃用的 REST API 末端时：
+
+1. API 响应中会包含一个 `Warning` 头部字段（如 [RFC7234 5.5 节](https://tools.ietf.org/html/rfc7234#section-5.5)所定义）；
+2. 该请求会导致对应的 
+   [审计事件](/zh/docs/tasks/debug-application-cluster/audit/)
+   中会增加一个注解 `"k8s.io/deprecated":"true"`。
+3. `kube-apiserver` 进程的 `apiserver_requested_deprecated_apis` 度量值会被
+   设置为 `1`。
+   该度量值还附带 `group`、`version`、`resource` 和 `subresource` 标签
+   （可供添加到度量值 `apiserver_request_total` 上），
+   和一个 `removed_version` 标签，标明该 API 将消失的 Kubernetes 发布版本。
+   下面的 Prometheus 查询会返回对 v1.22 中将移除的、已弃用的 API
+   的请求的信息：
+   
+   ```promql
+   apiserver_requested_deprecated_apis{removed_version="1.22"} * on(group,version,resource,subresource) group_right() apiserver_request_total
+   ```
+
+<!--
+### Fields of REST resources
+
+As with whole REST resources, an individual field which was present in API v1
+must exist and function until API v1 is removed.  Unlike whole resources, the
+v2 APIs may choose a different representation for the field, as long as it can
+be round-tripped.  For example a v1 field named "magnitude" which was
+deprecated might be named "deprecatedMagnitude" in API v2.  When v1 is
+eventually removed, the deprecated field can be removed from v2.
+-->
+### REST 资源的字段    {#fields-of-rest-resources}
+
+就像整个 REST 资源一样，在 API v1 中曾经存在的各个字段在 API v1 被移除
+之前必须一直存在且起作用。
+与整个资源上的规定不同，v2 API 可以选择为字段提供不同的表示方式，
+只要对应的资源对象可在不同版本之间来回转换即可。
+例如，v1 版本中一个名为 "magnitude" 的已弃用字段可能在 API v2 中被命名
+为 "deprecatedMagnitude"。当 v1 最终被移除时，废弃的字段也可以从 v2
+中移除。
+
+<!--
+### Enumerated or constant values
+
+As with whole REST resources and fields thereof, a constant value which was
+supported in API v1 must exist and function until API v1 is removed.
+-->
+### 枚举值或常数值 {#enumerated-or-constant-values}
+
+就像前文讲述的 REST 资源及其中的单个字段一样，API v1 中所支持的常数值
+必须在 API v1 被移除之前一直存在且起作用。
+
+<!--
+### Component config structures
+
+Component configs are versioned and managed just like REST resources.
+-->
+### 组件配置结构  {#component-config-structures}
+
+组件的配置也是有版本的，并且按 REST 资源的方式来管理。
+
+<!--
+### Future work
+
+Over time, Kubernetes will introduce more fine-grained API versions, at which
+point these rules will be adjusted as needed.
+-->
+### 将来的工作    {#future-work}
+
+随着时间推移，Kubernetes 会引入粒度更细的 API 版本。
+到那时，这里的规则会根据需要进行调整。
+
+<!--
+## Deprecating a flag or CLI
+
+The Kubernetes system is comprised of several different programs cooperating.
+Sometimes, a Kubernetes release might remove flags or CLI commands
+(collectively "CLI elements") in these programs.  The individual programs
+naturally sort into two main groups - user-facing and admin-facing programs,
+which vary slightly in their deprecation policies.  Unless a flag is explicitly
+prefixed or documented as "alpha" or "beta", it is considered GA.
+-->
+## 弃用一个标志或 CLI 命令
+
+Kubernetes 系统中包含若干不同的、相互协作的程序。
+有时，Kubernetes 可能会删除这些程序的某些标志或 CLI 命令（统称“命令行元素”）。
+这些程序可以天然地划分到两个大组中：面向用户的和面向管理员的程序。
+二者之间的弃用策略略有不同。
+除非某个标志显示地通过前缀或文档来标明其为“alpha”或“beta”，
+该标志要被视作正式发布的（GA）。
+
+<!--
+CLI elements are effectively part of the API to the system, but since they are
+not versioned in the same way as the REST API, the rules for deprecation are as
+follows:
+-->
+命令行元素相当于系统的 API 的一部分，不过因为它们并没有采用 REST API
+一样的方式来管理版本，其弃用规则规定如下： 
+
+<!--
+**Rule #5a: CLI elements of user-facing components (e.g. kubectl) must function
+after their announced deprecation for no less than:**
+
+   * **GA: 12 months or 2 releases (whichever is longer)**
+   * **Beta: 3 months or 1 release (whichever is longer)**
+   * **Alpha: 0 releases**
+-->
+**规则 #5a：面向用户的命令行元素（例如，kubectl）必须在其宣布被弃用其
+在以下时长内仍能使用：**
+
+   * **GA：12 个月或者 2 个发布版本（取其较长者）**
+   * **Beta：3 个月或者 1 个发布版本（取其较长者）**
+   * **Alpha：0 发布版本**
+
+<!--
+**Rule #5b: CLI elements of admin-facing components (e.g. kubelet) must function
+after their announced deprecation for no less than:**
+
+   * **GA: 6 months or 1 release (whichever is longer)**
+   * **Beta: 3 months or 1 release (whichever is longer)**
+   * **Alpha: 0 releases**
+-->
+**规则 #5b：面向管理员的命令行元素（例如，kubelet）必须在其被宣布弃用
+之后以下时长内保持可用：**
+
+   * **GA：6 个月或 1 个发行版本（取其较长者）**
+   * **Beta: 3 个月或 1 个发行版本（取其较长者）**
+   * **Alpha: 0 个发布版本**
+
+<!--
+**Rule #6: Deprecated CLI elements must emit warnings (optionally disable)
+when used.**
+-->
+**规则 #6：被弃用的 CLI 元素在被用到时必须能够产生警告，而警告的
+产生是可以被禁止的。**
+
+<!--
+## Deprecating a feature or behavior
+
+Occasionally a Kubernetes release needs to deprecate some feature or behavior
+of the system that is not controlled by the API or CLI.  In this case, the
+rules for deprecation are as follows:
+-->
+## 弃用某功能特性或行为  {#deprecating-a-feature-or-behavior}
+
+在一些较偶然的情形下，某 Kubernetes 发行版本需要弃用系统的某项功能
+特性或者行为，而对应的功能特性或行为并不受 API 或 CLI 控制。在这种情况下，
+其弃用规则如下：
+
+<!--
+**Rule #7: Deprecated behaviors must function for no less than 1 year after their
+announced deprecation.**
+-->
+**规则 #7：被弃用的行为必须在被宣布弃用之后至少 1 年时间内必须保持能用。**
+
+<!--
+This does not imply that all changes to the system are governed by this policy.
+This applies only to significant, user-visible behaviors which impact the
+correctness of applications running on Kubernetes or that impact the
+administration of Kubernetes clusters, and which are being removed entirely.
+-->
+这并不意味着对系统的所有更改都受此策略约束。
+此规则仅适用于重大的、用户可见的行为；这些行为会影响到在 Kubernetes
+中运行的应用的正确性，或者影响到 Kubernetes 集群的管理。
+此规则也适用于那些被整个移除的功能特性或行为。
+
+<!--
+An exception to the above rule is _feature gates_. Feature gates are key=value
+pairs that allow for users to enable/disable experimental features.
+
+Feature gates are intended to cover the development life cycle of a feature - they
+are not intended to be long-term APIs. As such, they are expected to be deprecated
+and removed after a feature becomes GA or is dropped.
+-->
+上述规则的一个例外是 _特性门控（Feature Gates）_。特性门控是一些键值偶对，
+允许用户启用或禁用一些试验性的功能特性。
+
+特性门控意在覆盖功能特性的整个开发周期，它们无意成为长期的 API。
+因此，它们会在某功能特性正式发布或被抛弃之后被弃用和删除。
+
+<!--
+As a feature moves through the stages, the associated feature gate evolves.
+The feature life cycle matched to its corresponding feature gate is:
+
+  * Alpha: the feature gate is disabled by default and can be enabled by the user.
+  * Beta: the feature gate is enabled by default and can be disabled by the user.
+  * GA: the feature gate is deprecated (see ["Deprecation"](#deprecation)) and becomes
+  non-operational.
+  * GA, deprecation window complete: the feature gate is removed and calls to it are
+  no longer accepted.
+-->
+随着一个功能特性经过不同的成熟阶段，相关的特性门控也会演化。
+与功能特性生命周期对应的特性门控状态为：
+
+* Alpha：特性门控默认被禁用，只能由用户显式启用。
+* Beta：特性门控默认被弃用，可被用户显式禁用。
+* GA: 特性门控被弃用（参见[弃用](#deprecation)），并且不再起作用。
+* GA，弃用窗口期结束：特性门控被删除，不再接受调用。
+
+<!--
+### Deprecation
+
+Features can be removed at any point in the life cycle prior to GA. When features are
+removed prior to GA, their associated feature gates are also deprecated.
+
+When an invocation tries to disable a non-operational feature gate, the call fails in order
+to avoid unsupported scenarios that might otherwise run silently.
+-->
+### 弃用   {#deprecation}
+
+功能特性在正式发布之前的生命周期内任何时间点都可被移除。
+当未正式发布的功能特性被移除时，它们对应的特性门控也被弃用。
+
+当尝试禁用一个不再起作用的特性门控时，该调用会失败，这样可以避免
+毫无迹象地执行一些不受支持的场景。
+
+<!--
+In some cases, removing pre-GA features requires considerable time. Feature gates can remain
+operational until their associated feature is fully removed, at which point the feature gate
+itself can be deprecated.
+
+When removing a feature gate for a GA feature also requires considerable time, calls to
+feature gates may remain operational if the feature gate has no effect on the feature,
+and if the feature gate causes no errors.
+-->
+在某些场合，移除一个即将正式发布的功能特性需要很长时间。特性门控
+可以保持其功能，直到对应的功能特性被彻底去除，直到那时特性门控
+自身才可被弃用。
+
+由于移除一个已经正式发布的功能特性对应的特性门控也需要一定时间，对特性
+门控的调用可能一直被允许，前提是特性门控对功能本身无影响且特性门控不会
+引发任何错误。
+
+<!--
+Features intended to be disabled by users should include a mechanism for disabling the
+feature in the associated feature gate.
+
+Versioning for feature gates is different from the previously discussed components,
+therefore the rules for deprecation are as follows:
+-->
+意在允许用户禁用的功能特性应该包含一个在相关联的特性门控中禁用该功能的机制。
+
+特性门控的版本管理与之前讨论的组件版本管理不同，因此其对应的弃用策略如下：
+
+**规则 #8：特性门控所对应的功能特性经历下面所列的成熟性阶段转换时，特性门控
+必须被弃用。特性门控弃用时必须在以下时长内保持其功能可用：**
+
+   * **Beta 特性转为 GA：6 个月或者 2 个发布版本（取其较长者）**
+   * **Beta 特性转为丢弃：3 个月或者 1 个发布版本（取其较长者）**
+   * **Alpha 特性转为丢弃：0 个发布版本**
+
+<!--
+**Rule #9: Deprecated feature gates must respond with a warning when used. When a feature gate
+is deprecated it must be documented in both in the release notes and the corresponding CLI help.
+Both warnings and documentation must indicate whether a feature gate is non-operational.**
+-->
+**规则 #9：已弃用的特色门控再被使用时必须给出警告回应。当特性门控被
+弃用时，必须在发布说明和对应的 CLI 帮助信息中通过文档宣布。
+警告信息和文档都要标明是否某特性门控不再起作用。**
+
+<!--
+## Exceptions
+
+No policy can cover every possible situation.  This policy is a living
+document, and will evolve over time.  In practice, there will be situations
+that do not fit neatly into this policy, or for which this policy becomes a
+serious impediment.  Such situations should be discussed with SIGs and project
+leaders to find the best solutions for those specific cases, always bearing in
+mind that Kubernetes is committed to being a stable system that, as much as
+possible, never breaks users. Exceptions will always be announced in all
+relevant release notes.
+-->
+## 例外   {#exceptions}
+
+没有策略可以覆盖所有情况。此策略文档是一个随时被更新的文档，会随着时间
+推移演化。在实践中，会有一些情况无法很好地匹配到这里的弃用策略，或者
+这里的策略变成了很严重的羁绊。这类情形要与 SIG 和项目牵头人讨论，
+寻求对应场景的最佳解决方案。请一直铭记，Kubernetes 承诺要成为一个
+稳定的系统，至少会尽力做到不会影响到其用户。此弃用策略的任何例外情况
+都会在所有相关的发布说明中公布。
+

From 61c1cd6077f7cb3123f3549a4a46abbf2cb4ac3b Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 30 Aug 2020 18:33:00 +0800
Subject: [PATCH 133/496] [zh] Translate imperative-command task

---
 .../imperative-command.md                     | 294 ++++++++++++++++++
 1 file changed, 294 insertions(+)
 create mode 100644 content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md

diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
new file mode 100644
index 0000000000..89c86ebb2b
--- /dev/null
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -0,0 +1,294 @@
+---
+title: 使用指令式命令管理 Kubernetes 对象
+content_type: task
+weight: 30
+---
+<!--
+title: Managing Kubernetes Objects Using Imperative Commands
+content_type: task
+weight: 30
+-->
+<!-- overview -->
+
+<!--
+Kubernetes objects can quickly be created, updated, and deleted directly using
+imperative commands built into the `kubectl` command-line tool. This document
+explains how those commands are organized and how to use them to manage live objects.
+-->
+使用构建在 `kubectl` 命令行工具中的指令式命令可以直接快速创建、更新和删除
+Kubernetes 对象。本文档解释这些命令的组织方式以及如何使用它们来管理现时对象。
+
+## {{% heading "prerequisites" %}}
+
+<!--
+Install [`kubectl`](/docs/tasks/tools/install-kubectl/).
+-->
+安装[`kubectl`](/zh/docs/tasks/tools/install-kubectl/)。
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+<!-- steps -->
+
+<!--
+## Trade-offs
+
+The `kubectl` tool supports three kinds of object management:
+
+* Imperative commands
+* Imperative object configuration
+* Declarative object configuration
+
+See [Kubernetes Object Management](/docs/concepts/overview/working-with-objects/object-management/)
+for a discussion of the advantages and disadvantage of each kind of object management.
+-->
+## 权衡取舍   {#trade-offs}
+
+`kubectl` 工具能够支持三种对象管理方式：
+
+* 指令式命令
+* 指令式对象配置
+* 声明式对象配置
+
+关于每种对象管理的优缺点的讨论，可参见
+[Kubernetes 对象管理](/zh/docs/concepts/overview/working-with-objects/object-management/)。
+
+<!--
+## How to create objects
+
+The `kubectl` tool supports verb-driven commands for creating some of the most common
+object types. The commands are named to be recognizable to users unfamiliar with
+the Kubernetes object types.
+
+- `run`: Create a new Deployment object to run Containers in one or more Pods.
+- `expose`: Create a new Service object to load balance traffic across Pods.
+- `autoscale`: Create a new Autoscaler object to automatically horizontally scale a controller, such as a Deployment.
+-->
+## 如何创建对象  {#how-to-create-objects}
+
+`kubectl` 工具支持动词驱动的命令，用来创建一些最常见的对象类别。
+命令的名称设计使得不熟悉 Kubernetes 对象类型的用户也能做出判断。
+
+- `run`：创建一个新的 Deployment 对象来在一个或多个 Pod 中运行 Container。
+- `expose`：创建一个新的 Service 对象为若干 Pod 提供流量负载均衡。
+- `autoscale`：创建一个新的 Autoscaler 对象来自动对某控制器（如 Deployment）
+  执行水平扩缩。
+
+<!--
+The `kubectl` tool also supports creation commands driven by object type.
+These commands support more object types and are more explicit about
+their intent, but require users to know the type of objects they intend
+to create.
+
+- `create <objecttype> [<subtype>] <instancename>`
+-->
+`kubectl` 命令也支持一些对象类型驱动的创建命令。
+这些命令可以支持更多的对象类别，并且在其动机上体现得更为明显，不过要求
+用户了解它们所要创建的对象的类别。
+
+- `create <对象类别> [<子类别>] <实例名称>`
+
+<!--
+Some objects types have subtypes that you can specify in the `create` command.
+For example, the Service object has several subtypes including ClusterIP,
+LoadBalancer, and NodePort. Here's an example that creates a Service with
+subtype NodePort:
+
+```shell
+kubectl create service nodeport <myservicename>
+```
+-->
+某些对象类别拥有自己的子类别，可以在 `create` 命令中设置。
+例如，Service 对象有 ClusterIP、LoadBalancer 和 NodePort 三种子类别。
+下面是一个创建 NodePort 子类别的 Service 的示例：
+
+```shell
+kubectl create service nodeport <服务名称>
+```
+
+<!--
+In the preceding example, the `create service nodeport` command is called
+a subcommand of the `create service` command.
+
+You can use the `-h` flag to find the arguments and flags supported by
+a subcommand:
+-->
+在前述示例中，`create service nodeport` 命令也称作 `create service`
+命令的子命令：
+
+```shell
+kubectl create service nodeport -h
+```
+
+<!--
+## How to update objects
+
+The `kubectl` command supports verb-driven commands for some common update operations.
+These commands are named to enable users unfamiliar with Kubernetes
+objects to perform updates without knowing the specific fields
+that must be set:
+
+- `scale`: Horizontally scale a controller to add or remove Pods by updating the replica count of the controller.
+- `annotate`: Add or remove an annotation from an object.
+- `label`: Add or remove a label from an object.
+-->
+## 如何更新对象  {#how-to-update-objects}
+
+`kubectl` 命令也支持一些动词驱动的命令，用来执行一些常见的更新操作。
+这些命令的设计是为了让一些不了解 Kubernetes 对象的用户也能执行更新操作，
+但不需要了解哪些字段必须设置：
+
+- `scale`：对某控制器进行水平扩缩以便通过更新控制器的副本个数来添加或删除 Pod。
+- `annotate`：为对象添加或删除注解。
+- `label`：为对象添加或删除标签。
+
+<!--
+The `kubectl` command also supports update commands driven by an aspect of the object.
+Setting this aspect may set different fields for different object types:
+
+- `set` `<field>`: Set an aspect of an object.
+-->
+`kubectl` 命令也支持由对象的某一方面来驱动的更新命令。
+设置对象的这一方面可能对不同类别的对象意味着不同的字段：
+
+- `set <字段>`：设置对象的某一方面。
+
+<!--
+In Kubernetes version 1.5, not every verb-driven command has an associated aspect-driven command.
+-->
+{{< note >}}
+在 Kubernetes 1.5 版本中，并非所有动词驱动的命令都有对应的方面驱动的命令。
+{{< /note >}}
+
+<!--
+The `kubectl` tool supports these additional ways to update a live object directly,
+however they require a better understanding of the Kubernetes object schema.
+
+- `edit`: Directly edit the raw configuration of a live object by opening its configuration in an editor.
+- `patch`: Directly modify specific fields of a live object by using a patch string.
+For more details on patch strings, see the patch section in
+[API Conventions](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#patch-operations).
+-->
+`kubectl` 工具支持以下额外的方式用来直接更新现时对象，不过这些操作要求
+用户对 Kubernetes 对象的模式定义有很好的了解：
+
+- `edit`：通过在编辑器中打开现时对象的配置，直接编辑其原始配置。
+- `patch`：通过使用补丁字符串（Patch String）直接更改某现时对象的的特定字段。
+  关于补丁字符串的更详细信息，参见
+  [API 约定](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#patch-operations)
+  的 patch 节。
+
+<!--
+## How to delete objects
+
+You can use the `delete` command to delete an object from a cluster:
+
+- `delete <type>/<name>`
+-->
+## 如何删除对象  {#how-to-delete-objects}
+
+你可以使用 `delete` 命令从集群中删除一个对象：
+
+- `delete <类别>/<名称>`
+
+<!--
+You can use `kubectl delete` for both imperative commands and imperative object
+configuration. The difference is in the arguments passed to the command. To use
+`kubectl delete` as an imperative command, pass the object to be deleted as
+an argument. Here's an example that passes a Deployment object named nginx:
+-->
+你可以使用 `kubectl delete` 来执行指令式命令或者指令式对象配置。不同之处在于
+传递给命令的参数。要将 `kubectl delete` 作为指令式命令使用，将要删除的对象作为
+参数传递给它。下面是一个删除名为 `nginx` 的 Deployment 对象的命令：
+
+```shell
+kubectl delete deployment/nginx
+```
+
+<!--
+## How to view an object
+
+{{< comment >}}
+TODO(pwittrock): Uncomment this when implemented.
+
+You can use `kubectl view` to print specific fields of an object.
+
+- `view`: Prints the value of a specific field of an object.
+
+{{< /comment >}}
+-->
+## 如何查看对象  {#how-to-view-an-object}
+
+用来打印对象信息的命令有好几个：
+
+- `get`：打印匹配到的对象的基本信息。使用 `get -h` 可以查看选项列表。
+- `describe`：打印匹配到的对象的详细信息的汇集版本。
+- `logs`：打印 Pod 中运行的容器的 stdout 和 stderr 输出。
+
+<!--
+## Using `set` commands to modify objects before creation
+
+There are some object fields that don't have a flag you can use
+in a `create` command. In some of those cases, you can use a combination of
+`set` and `create` to specify a value for the field before object
+creation. This is done by piping the output of the `create` command to the
+`set` command, and then back to the `create` command. Here's an example:
+-->
+## 使用 `set` 命令在创建对象之前修改对象
+
+有些对象字段在 `create` 命令中没有对应的标志。在这些场景中，
+你可以使用 `set` 和 `create` 命令的组合来在对象创建之前设置字段值。
+这是通过将 `create` 命令的输出用管道方式传递给 `set` 命令来实现的，
+最后执行 `create` 命令来创建对象。下面是一个例子：
+
+```sh
+kubectl create service clusterip my-svc --clusterip="None" -o yaml --dry-run=client | kubectl set selector --local -f - 'environment=qa' -o yaml | kubectl create -f -
+```
+
+<!--
+1. The `kubectl create service -o yaml --dry-run=client` command creates the configuration for the Service, but prints it to stdout as YAML instead of sending it to the Kubernetes API server.
+1. The `kubectl set selector --local -f - -o yaml` command reads the configuration from stdin, and writes the updated configuration to stdout as YAML.
+1. The `kubectl create -f -` command creates the object using the configuration provided via stdin.
+-->
+1. 命令 `kubectl create service -o yaml --dry-run=client` 创建 Service 的配置，但
+   将其以 YAML 格式在标准输出上打印而不是发送给 API 服务器。
+1. 命令 `kubectl set selector --local -f - -o yaml` 从标准输入读入配置，并将更新后的
+   配置以 YAML 格式输出到标准输出。
+1. 命令 `kubectl create -f -` 使用标准输入上获得的配置创建对象。
+
+<!--
+## Using `--edit` to modify objects before creation
+
+You can use `kubectl create --edit` to make arbitrary changes to an object
+before it is created. Here's an example:
+-->
+## 在创建之前使用 `--edit` 更改对象
+
+你可以用 `kubectl create --edit` 来在对象被创建之前执行任意的变更。
+下面是一个例子：
+
+```sh
+kubectl create service clusterip my-svc --clusterip="None" -o yaml --dry-run=client > /tmp/srv.yaml
+kubectl create --edit -f /tmp/srv.yaml
+```
+
+<!--
+1. The `kubectl create service` command creates the configuration for the Service and saves it to `/tmp/srv.yaml`.
+1. The `kubectl create --edit` command opens the configuration file for editing before it creates the object.
+-->
+1. 命令 `kubectl create service` 创建 Service 的配置并将其保存到
+   `/tmp/srv.yaml` 文件。
+1. 命令 `kubectl create --edit` 在创建 Service 对象打开其配置文件进行编辑。
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* [Managing Kubernetes Objects Using Object Configuration (Imperative)](/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [Managing Kubernetes Objects Using Object Configuration (Declarative)](/docs/tasks/manage-kubernetes-objects/declarative-config/)
+* [Kubectl Command Reference](/docs/reference/generated/kubectl/kubectl-commands/)
+* [Kubernetes API Reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+-->
+* [使用指令式对象配置管理 Kubernetes 对象](/zh/docs/tasks/manage-kubernetes-objects/imperative-config/)
+* [使用声明式对象配置管理 Kubernetes 对象](/zh/docs/tasks/manage-kubernetes-objects/declarative-config/)
+* [Kubectl 命令参考](/docs/reference/generated/kubectl/kubectl-commands/)
+* [Kubernetes API 参考](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+

From da41301c5499ee2d52219e8120d26307fc9ba98b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Max=20K=C3=B6rb=C3=A4cher?= <max@koerbaecher.io>
Date: Sun, 30 Aug 2020 13:43:51 +0200
Subject: [PATCH 134/496] add endpointslice feature blog

---
 ...ng-kubernetes-networking-endpointslices.md |  46 ++++++++++++++++++
 .../endpoint-slices.png                       | Bin 0 -> 213154 bytes
 2 files changed, 46 insertions(+)
 create mode 100644 content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
 create mode 100644 static/images/blog/2020-09-02-scaling-kubernetes-networking-endpointslices/endpoint-slices.png

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
new file mode 100644
index 0000000000..92738fb53d
--- /dev/null
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -0,0 +1,46 @@
+---
+layout: blog
+title: 'Scaling Kubernetes Networking With EndpointSlices'
+date: 2020-09-02
+slug: scaling-kubernetes-networking-with-endpointSlices
+---
+**Author:** Rob Scott (Google)
+
+EndpointSlices are an exciting new API that provides a scalable and extensible alternative to the Endpoints API. EndpointSlices track IP addresses, ports, readiness, and topology information for Pods backing a Service.
+
+In Kubernetes 1.19 this feature will be enabled by default with kube-proxy reading from [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It will also enable significant new features in future Kubernetes releases like Topology Aware Routing.
+
+# Scalability Limitations of the Endpoints API 
+With the Endpoints API, there was only one Endpoint resource for a Service. That meant that it needed to be able to store IP addresses and ports (network endpoints) for every Pod that was backing the corresponding Service. This resulted in huge API resources. To compound this problem, kube-proxy was running on every node and watching for any updates to Endpoints resources. If even a single network endpoint changed in an Endpoints resource, the whole object would have to be sent to each of those instances of kube-proxy.
+
+A further limitation of the Endpoints API is that it limits the number of network endpoints that can be tracked for a Service. The default size limit for an object stored in etcd is 1.5MB. In some cases that can limit an Endpoints resource to 5,000 Pod IPs. This is not an issue for most users, but it becomes a significant problem for users with Services approaching this size.
+
+To show just how significant these issues become at scale it helps to have a simple example. Think about a Service which has 5,000 Pods, it might end up with a 1.5MB Endpoints resource. If even a single network endpoint in that list changes, the full Endpoints resource will need to be distributed to each Node in the cluster. This becomes quite an issue in a large cluster with 3,000 Nodes. Each update would involve sending 4.5GB of data (1.5MB Endpoints * 3,000 Nodes) across the cluster. That's nearly enough to fill up a DVD, and it would happen for each Endpoints change. Imagine a rolling update that results in all 5,000 Pods being replaced - that's more than 22TB (or 5,000 DVDs) worth of data transferred.
+
+# Splitting endpoints up with the EndpointSlice API
+The EndpointSlice API was designed to address this issue with an approach similar to sharding. Instead of tracking all Pod IPs for a Service with a single Endpoints resource, we split them into multiple smaller EndpointSlices. 
+
+Consider an example where a Service is backed by 15 pods. We'd end up with a single Endpoints resource that tracked all of them. If EndpointSlices were configured to store 5 endpoints each, we'd end up with 3 different EndpointSlices:
+![EndpointSlices](/images/blog/2020-09-02-scaling-kubernetes-networking-endpointslices/endpoint-slices.png)
+
+By default, EndpointSlices will store as many as 100 endpoints each, though this can be configured with the --max-endpoints-per-slice flag on kube-controller-manager.
+
+# EndpointSlices provide 10x scalability improvements
+This API dramatically improves networking scalability. Now when a Pod is added or removed, only 1 small EndpointSlice needs to be updated. This difference becomes quite noticeable when hundreds or thousands of Pods are backing a single Service. 
+
+Potentially more significant, now that all Pod IPs for a Service don't need to be stored in a single resource, we don't have to worry about the size limit for objects stored in etcd. EndpointSlices have already been used to scale Services beyond 100,000 network endpoints.
+
+All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale at least 10x beyond any previous limitations.
+
+# EndpointSlices enable new functionality
+As a new API, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This will include dual-stack Services, topology aware routing, and endpoint subsetting.
+
+Dual-Stack Services are an exciting new feature that has been in development alongside EndpointSlices. They will utilize both IPv4 and IPv6 addresses for Services and rely on the addressType field on EndpointSlices to track these addresses by IP family. 
+
+Topology aware routing will update kube-proxy to prefer routing requests within the same zone or region. This makes use of the topology fields stored for each endpoint in an EndpointSlice. As a further refinement of that, we're exploring the potential of endpoint subsetting. This would allow kube-proxy to only watch a subset of EndpointSlices. For example, this might be combined with topology aware routing so that kube-proxy would only need to watch EndpointSlices containing endpoints within the same zone. This would provide another very significant scalability improvement.
+
+# What does this mean for the Endpoints API?
+Although the EndpointSlice API is providing a newer and more scalable alternative to the Endpoints API, the Endpoints API will continue to be considered generally available and stable. The most significant change planned for the Endpoints API will involve beginning to truncate Endpoints that would otherwise run into scalability issues.
+
+Although the Endpoints API is not going away, many new features will be enabled by the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider switching to EndpointSlices in the future.
+
diff --git a/static/images/blog/2020-09-02-scaling-kubernetes-networking-endpointslices/endpoint-slices.png b/static/images/blog/2020-09-02-scaling-kubernetes-networking-endpointslices/endpoint-slices.png
new file mode 100644
index 0000000000000000000000000000000000000000..3775c51fb1a2a59fa77d6eda26c895d679f87623
GIT binary patch
literal 213154
zcmagF1zc3k_diZ7oeSuaQX(oPAh2|UNSZWAgVfSXcPK3iDh&ck=Tb{7DH01(OD`o2
zOE>)1$LI6;#^?L||M&H}+_`t=%$YgoJ?ES`v%JyKQl%heB*nqOp-_9I^b`jN0LQ_>
zrza-FenA{wY2e_H8`>!<>ZmCyvgx=wTiZEU;ov-a^C5-k`LiCzpq1q3#C-1evc;Z!
zAxxlAh<^Sp<ZIaN1RVtp;`^TNPY^X(9HgS|FO-IAa4KJRZ0DfP&E=K#LB<u?dv|VU
z6_urlt@Nb}Twm<h_VM8dSrh4U^eEThe5VCHT5JoUUwrzM;Y&9Tk##GMr!T+u9kb3Z
z6+9GScOa~G95;u)49w$j3BEQ>r8H$*#0~l)KY;FqdMCu=27&f(|HQ+ILg+Y&<jLi{
zVz)HDM^3#*PGED-`%{SUd$^SxH+vjKJqb>wL<&zoo?PyY9}MAeUR%{gK}(RJ>1{%}
zXP`=1?eEKqT0v4$0s^K8H?}E7f0CuGgij1}sJ^qv%NX`^Bd0NHo_$8!rB{g>?|RdZ
z0+W9Q*20ZWv#1PFqv1a>VCAdw2r;)kPP$^sdc!mzOYT>ZrDKlf%59vi=h;$HPrk)}
z##lP&$!1Yagd-{9f*kO~pQkage0yhO`Bp(ZVcto;;4LYbq_BpJpfUmaq5rjAfKeZt
z&EpB)(Mg|D_tr9nmKPaG-=9vj+@pgKZnfN_xpP}FA1~+$nX=kYf(YBj57!0G_Yxni
z5))XYzjA))zPC^t(MK269`gREqFTewHtn(LJ8q^v5D)Mzc<6p9FZG=;o{i8gv<uOK
zSlBchbrlWK7O~|b2a(%6S%~8MdJ9K9mz?{io6TR??rPP*RNpZb{p{`unSKyHO;cG>
z{J^B<CaW=ySiw)3TleloY3g*nDX?+t?zq2*Ad|oSD)dz=jw?!7PUbsd4s5&2=|o+e
zmb6Zev@!?>Ty#5>=N*xC2ZoXAZEI!%Ku)xp-}co@9MbHI{e<V<9)zFptHSYlTw7_s
zd$Zv!wax7XzgS>*RznNEj|#vHgjW1&EB$!>q$}jzqYp|lwkg@-U)9Lj32EEkWGfL(
z(;s*H?>>T3gw5QrS(ptS3K-><Vy~vXMN<ltAg;ah=55|wCk=r_)}_viE`~Ylm??$S
zTTtq4q7ud4IvFSOG#9Vc$Z#S#<Sm^aFFQ-Vr|&xNG5<iPel9w=%TM>-T#n=mDzN2g
z`;&Hy?{9N*=EhVR?7MVcOehM^o!bOHvyoxuY##5pX?|WljB?rJ^(3|jkZ;}{3o~w|
z<bm2!N#8;#hR!Y!F7yO@D#@NK7W&=4f6wik+nVd?m(TbFA>RnzGR33|e7bYPiiC`w
z_v9w^1F-pQ)I7N^NEd`dw?nsVQMj_u+K4Ck^Xh)8AztgM<K^WgQOl2<BfRoJAiTdU
z;KM{oWPGSPPTIuxBz3Y6LPjp^tp&k%;JGpA^B<(B_86mJZVW*%8z2T(kPY`s(3|oB
zg}ThVSEL_te}&NK5GDt|c*Tdp5e?mX1wxTABG@6!X?QCLE(pbR@Oc3(97h_>x2i}T
z7B)yNVIKC8Q#6Wp;q3!p;BCMgrG*5#+blf_9Z}4mg8LMIB)D4gRg!#D4p64#=uWJ9
zB<V`#9puhlmKc9GqA<7N>%G^}aY~==lEuo=4wBg3lwjafSjkl%d|XX9^F}nQduV@E
zq#EBp_{bdRS^I$?Ss#OixdShudZ&=!Jy9~A&imzz#kcGut`BY$<8O4ypq0|%gdsL{
zk?p%mX_4ApHuKTDH7A~MT<6X*G!^F71zE7l19mXbkC?d)tZ>teG&@X39`zV32PWCc
z*J?B5Nc^f@&FO<^6b%2UnWkl=VWc{(DW&4TEyHp2?$K?|ceFk6bcze_NFQ;15&4q-
zCHG737p<SZm5dW<n~y2E3f^@tnY$8r6P*&D3Z34okIzxA$Uf0Azw7to;g6?3Zax-X
z=EzI>sXCfJ`Q-8|$%w<c(QB@n44-#CDQC5xKYz~qTsx^Jk~qm+^SDO(wav(_ul_pY
zPrRPn6cv2y9ZmV_{7g1KK>gC0G1gk0>`UHHQd@P~nrhnW^Xg+p_gEk!GevWkL+t%n
z!q{F$0g-#3ML+ZQzxk~E`Nrq-hXSuX?VnUT)SwKEO7sn07!cJs*&e<gu2Hq?wq3Ck
z7@N)Ze|i3iQmy+Xw^C%8u&GVe07<&4dyJE^&9L`@_W|EQ(t(z7PH8&7s+eJ|hF6MH
zs#APMTt=hGyV>VW_nX>%Sk68+m&mBf>IQzhGP&G1W2Mlb&?CePRVF+nOre-%pcE#5
zNJpQ{xGf5|J{gKKqceYRQ9b>2Xf;F7Y139}4ElE0XECX3rrkaAlyZ@RhXv+^a-<#U
z7`i=R+0bL1M0Tes-#XtcpJrGjpIf7`|DYeQzq0@3XBNQ?p@P)&)aX9l&#WSW1A`Xj
z^z|{1Rd{l{+d4R=6`U%1a{6<SKL><{Dp9Vr%hEiBH-_&Izs`FR{UW}m-sAlt`G&;C
zlqelje(a!iO}|~L7t9mZ10!=_a?G4ym~`2EyScu(JvqFIzsWr{jxzONlX$@5$~-1+
z<f_CX%^V*0A`X<U!>!GoI4n_cG#@rU+uqr3A2A1c>18brk{B14rO%e-a8=rk>H-R=
z8pLa`)cY;1C7K#Z8Mzw6>ZTd;gkSf4U3k);YtksuuxC_cRMs#wtuSNVC{o|#>g5Wm
zEAwhulRu8y(?bs}>`n~#K3mt{nOL^k`mp_C%Omt#Z;Tbcb;j-;D3LevNM`90(LG$y
zYEy<ZZ60VAZ<h4SjD<1r(KlHgaLTI7md@R2p$v=&Y`9jrj>Cz@agx()ZI>&O3qX&x
z7Vr|i6t(Bxuu4!*c(^JzC<&wTy>qVj;3o4;BgW~QIkfNSD@B(AzFOJ7v^BQX{-}yN
zD7Tmo!$e`0=f%MJ%(n`XhlRWB`}zb+fa}0rpgrd;6$zEcoT<5kUj?7=<ZP=<DMjZp
zS;&!dTPyc9={2HyDq3Q>;$m40MUK>_zt%Ch6fCaoCM|e%v}h7P*82?M9+G*IfqM7l
z)BEJ-sR#Vx;CiWgi|Ow!!rkfGf?B}5hk5UwCOxgqKZ>JbXnE~t^I6qEZSs)BlQv%q
zEI9-<-|lEnddTg<y`|3mg}Y$q(RD}c{20Vn7|bxrAT1^8EV4r&o6z!ZjtfKko-D)q
z%qrPNrgyK`AaRt7ocbkkqq4)0!BEjAW|LxK$JN{wwtTR1XJvbUb0u$ug>ECtt)t}B
z`t;fU6qnXJ8ntfA%$}k<$B#I_7+OU+gcN_10|mfM6Q+6t-^t!R5GcOyC(C8`qxsw9
zv(9G%8g6MY+sWaa!5q{4#bNJZLu<XhkCKZBjj=w>ssw$8Dg$f7{tVehH!W1!7S=zw
z{kk&Qd}?HJVQsPp|8<(bztR_Y@C>Ex!Nth+^BohJAIL#3N`Q{f!Egy?+n*zlck$EB
zir?ynRp!n8o0;d{BghZ3#{xY@KVc(oYiCv+Rtr|+DMY+;CZ)zE&#!EiN8Uz!i20Dm
zGgth%dfg%1w=-gNWOQ$o<wN2JP5a_;Uc-I663A9fVOHVH=$+B%!nu;gvPQTJ#Q&0T
zn8J!l#)-}mUVqQwnPRM?W~cSSueN?|*lkDgOS1ix$&xO^URc2Fo!PMpX(wO%5?#kF
z$|M%`jX?=-<MDy&^b}8mo!5n4rE}GWfnF20%2k_JPRrI>Oy-y>YOPq^OfLgcFGq=1
zi5@d0MA%VC$F_CF<-gBA3bmkwJv<j>J#p-Co}$!eE|e(tg02DA6Hiso;%~BSN#7A4
z^OxE<$xT+{^U{iubgA)hu%GIQO0v-k&yaBW>~Xfr&>|c;aF!+wjq@(ug|D1Oklg}N
zUTp842a6(M5z!`~RDN&M*G{Z60ZXo}%Zs`pWoZpR>V2*Z4r-1z-i$lXK586tNebMb
zD48}aa{|q7Hwv%t&pWM2m-yZ|*4!Syn8$Q)QzGNqsX|zdp!C<60nXW6P`p*Vtj9p0
zg74Gakqf&m;c=VD28Bj`Y1V7_e)y8IsaH?tWZ=t|>cINzvep*<gP4sqKQ8~#YoFaY
zl|X0T#jE^0G1&3d6uj1d=kXj<)7(|?>HI<WQoQzgz8{Bw;l(DV{#3mqrSa1H@{*?X
zy(H#d5F*an8V}>cgi}q2vx+ecmN4=D#bg_`mnI>HmaW(`0uM^zevJ%Wa7*_m50WmQ
zB2<`y!~|O?u*uC#M>G`n2+bIMfIVEtVbec2ZW$m7!aFZ0zq)EhU0oqZAE1hGn7#9*
z?C&!IGbltG?ygpz%3%DTWhl1v?4ASfazKdY;;-@Y^4`QT{(LZk-EF+J(o?h6)Wo@u
zEfeDaa2at3uq9mVErZMS@3IQ+T^#(szT@HGMB3p1{%)g%eg3`@u=j78KTrI35jaHH
zHyZ2>&BFUvYXCe8|6gT%dTbqz{4+&0HSF`5g{zg7lbfxxyOi%)1oi_7<dMD`4$e)k
z-#4z>)7uzq|KoPg_1yI|H6$#Y9r?{Hoz1QIp^lK>{oqJJC9p+DD|a(CsH20En*>yv
z<F6JH*z)hs0vv3AHF39>=FrpBVN-N=wPF+Df5`uULxz-%jZMnc(puuFlFHxY*f(ho
zTX%Pegn)pTmlwa6Fu${_jewxIxVXRrAps#FK5Pp<H*Y6*Gbo>v8|R-+{?(6?m79gD
z9mL(v*@^9Uzh>sn9`4c{9KRX;`}#9ZE2!OnadL9|ds^5D3jD4S5afR#@bA8{q*A}X
zO6b@@tsL}}>>RN&!}5?36cQAY`itN{s{V`RAJP|YR<4T9j#x@}ng1sBKg9pN@_!Tl
z#Z&*kc#4Vt50?L}=5I<Vf!|aAZ=(1k=fA#U1ua7=CGc;h$&h}t=xW63k=ag3`#JWB
zMcMBQHwOFX?w=>NjBEKV%-6mP2S*M^O-cSa6nC>}BFVVNW4pFcEB)IqToD}GKHKtO
zCwDOsB*(p{wD;ByWl%5mj%VuvFqgCrEnvENRoSy$iPEjQ<aYU3v&46g-n_f}<h_z-
zF44n?E~6J;y(K&%7~ui>k1*~Y*-zSKEc_=b8c7R|deYB(oy&|idOy@l!kRw5rKZMH
zkRv9>WoH9~1^v$#TUvm`ZD@^}_PXf*uKF(`JUkk>65#)!{?jBFrXUxhYv@tnr1F0=
z`Q0oe1^l1f|HWePCGjK7>!R(E{{M53e>HoAp&|O`Ax@Iwl9)J-rZ+JB<1n!e7XH`l
z|HU6WGC4zbHbhZL!!t3?{}9r@n<3Ph|6Tr%R<=9<tR!D}ty}-|Flj(=SZ%GNh1*mz
zDOai?|K#RgLw{MaLsPX`UaaO6p_{C#@;}NjOB(pd!&6V<L#1DS?^%Per#YK*yT3lu
zcE3K1$BKoerfH{xpe(kZ&rrY_)wE{iyRxX?xch2W23q$@SbYPw$${!RO5QN0fxn(A
zDK!2kKCy~yDchB^4qYlns}jPK_RhwPHRDLisnKD@u@rSf-NLH;Sal_gLhJoxv8|(}
z99H$C`CM;M?T=rRDeM!D&R%*yoWIa|AYZ`wuO~jOKe&1Z#OnY5=4ML;fVKT-;WNEl
z>F!FlS2Tpx)HwRhE*t3Z&)BV~o^RIZMr>U`Gt(KjUDob;`>%cv0reR4Zdmy?=#>Y;
z#jWOAE=K||yD@W0KW@NfBqb$Y6=)w!WEB)s99Wi2jW#(*EVt>}XgYnBUd?X&C*8?y
zum=skIN~dLY0P6_z%vPV_6oOl?@s!1XGPc1%wvW>_IN7Z^i~zpcWiuAxLp*jeoO!C
zQO@(H%a20F^LgBF=x#LoFD72LM<$8Zlshq9P4pznFfnab3?ZC0dbS=)>}xEouWwer
zXN~fz(ZRgKQ#t%+oHLW-3e|sKecPs6UunlB`_c%<Q19O4^xK`o=I0pyIWjXlP6m^f
zy(5N3AJ6YTm3HGX?|@Blx1pN#3da!Z(W?a_s!h{vDT)b0tR$vZOw-HXWZ&B8u_>-1
zw6h}$HLxMW{ih}JkTLl1Y3I%H$DZfAAx&P+T?FNa81r^h=%wZNle4s)9T8NjrqY4L
zdvs@pF|XCdQEd0ob-*#~##<(S2am~kQ*kShHibc;7eBAQ(uZd^b#vFgZ2S|utX<;r
z%<--}=dI2tg9>xj>C6hl_!UP_yZ(W+)tc)wb=|EWYx2m0b&1Lh_qzx(k?q~-&;A=T
zkw*n{EjFO;$j!Zbb9UF8Bux8#{Cv6&Qg24^{&8Z$c*g~x_F0o_ANwCLWAgJ;`vR$9
z`-hubA7mB`nW?y-GXa&BfrsspM+2AQ=jfr3%U{|im6?H;F?s%(rFA1uKN<IH+^f<2
zzfnw$7polP-;A2t$dvtjU=_D7y7<YYWi@BK<+^6vU;E@Bk<p6{5v|$%xOw>MSmrbA
z`m#(0qfx3QDJ*L1oW@#1MjQHLQ{t)aYVSWS6tD>~MyP|^jpqmvs((JkM74QVZ+7nN
zXSb*}*B4OE?Q8ph@-}oRs<Wojf6;Vj>iSGowtNHBz1ed1lPUSw_`vPz?9q*Xk`ES*
z5FLP%%;&1>y%Hu-nS`pc%Ms;9Pis_C5h0~P|NcJJZ7ARAtg-9`bnI&FD8~P|U9B;|
zY&zhQTfjiqrXVk_4z}kVeGvUWy~}@FaIF;z==r|N%YMn@lFACR0@a2sP-#YGrvKJb
zwjekGeQ4=4dbR4yI+gy-YU*e?rtI|2q3rJZyg<O}%Z=!N5(_n+V`%HND?6{fpHw6B
z(cT%KcKKO)W;0~<TrvUe;q|)bs`h#(qQCh4=Am1z=h{d@IxDNxLFb|J|A#2bD@`i9
zt9XvCF7?l^`nivs1J>T|EFVs02a99-+}{nk6u3qnJJwWNwVXan+3K@xi9J}M@^|rn
z@=x%<4!=0%zGyAn>3Yf8;o_I<T+N(E#fI!f*P$Z58yjMy3yV6|>wPari^le=DO2Am
zt=Izt(R7LbpONYmIxzZn2Ofv29v!x{*j*p-jBmDFuNy`Z{%Q>wzs3amjl=k?uCK&q
zVI+admOsRbb^qBGQ{zP{XH{0%+2>K5H(~*HeKl}?w9~xTaM@kf<d0h4lnWX6rTVoQ
zcqV&21S=lCYAn0@7)#;Fde(N9^N)HDqQ(jC@8{#GUp-9sVntmamM|ST2iC-ejGt4j
zYz1Bk%#nqR?_5qA@<R{5>i)Cm3~NoKMorGbN=h8hH@vo|0<U_#Hjmdo%^%L^5}aSk
zqJZ##<6h^<uYfX6kNjrd|8UR$!Xkzf(7Y8g9(dM8WsGTf*}@e|0}mL%J^RPCt-z*_
zb?jWx1+QuU*^fQIhDeOlxDD`s6ogzQHpY2;Q+xEzKMrm16_$}m9lpEwKcX|(5}1Jg
zz?)I{_i#Vs1Um-asQA<p2hBDAV2-$-=P`8`<k)`QR9`V4IC<3K8uz%0b8u+L%-EPg
z-Nr3o>2ejue{FXq9%vsybMh-~l2;P>n1Dxe?*8&q^yJuB{;;NzeMG=nv1n`F^TOWx
zWLT-jm^dNQHQ9CB<7}n>IjmMR#4*(Q!&5<wWA0ubtfx}snQl`#UwZnzl~h&;-xiE-
z#ZTRa@58{uaO3kO`UaSAgv59oeM9{>!Gmz=DZjwg)m3+=Jihdv@QNhC_Z8Kjx^(=6
z{9qJa0}H~<FMb3&8yXriDyGK2%zXW%V83|S(I92&fdfN;K~+pP4P0i_`0Vd!!hj(d
z&0PPzd~M++HS1V%3A~vx?Q1^;h+XQzdz>LgY38$@^sm)K;h+3!tz4Uu*S2dlkU?ZX
zyNykSDBCoQ@;PjVVQx~%0n%Jjrk95^H)a%ecN4sU3~3*eyMV&p1#GTvl85M`4fvhE
z8D)Ab`xr&7lHk$jfPy*mW)<wKbs-cL_Eig><SsR<p8bx7J*N?^Z&&kvP7`-DhiTud
zH6^B!H|jqoD77*=A%*qhcdJam*nUcmm)oThpV+G-y9P&F1!dxoho)_dJceL-#zAt=
zHCMd41|8@Xjr(?9Gb2}7CTq8@CdY(<Ep7CSCooQ*7e)td1^cw4pEP6SmKc&$TwE)A
zFKbw1v+EzYbfENic4<*q3<-LVJp6+pFc>e2VxveM1_Ltz$~1Hftc2})SA>##p!o?%
z_k0CNDk;7*C*fS^-01EZA*GX)sPTjQzHBWfyb}gyGorixl26CPTz~oyY6FI%9p0$C
zFX@kE0~ho4PrTjl|7NXE#pXH@<3`!+4ND-ZNgt?%KFmpP_%%zc6t_#8;phN?W}a14
z!kju?xrk}%XK`01zh2L>SeI`&3VVjM@$oc%G%zqOAI&2G)s2-%rucV>AZOV^+v`=v
zbe0U7rs~ChoY4VR+g~>$swh^B@+yH)SmjG%PYPV}#xY?ujPJne($Vl6nxjygu0)1O
zvC6L2&Z*ZmCL0qYc))-}e}s<tF<;*vM^97<y3d5WvMNeGWnfk0E^Z7&b?anG?FkkF
zt?Y9*lM;(w>Y0=;ho=iZOxZq5G~Rcq?yV=BL+j^GP7pg7%zsX_iODo0_ZN*bAAdPx
zYC+C5%rhru*`#P;wpR&c7^Z<61Z%#|{j>Vvbiogpwg!gJe&pOR3SyheFS6+M@%1e!
zDB!;6TiM^PJ{QWfp`;r~N;^zZFg&I$OuviQZeC%_!@~osUQ)2me${!Hvn<8dcNj}=
z4iJ8uk@Kv!`8IUMz0~o<bz<QMoRusCx59j8K;WcnXlBL{6N@f4I4G3-*nlPjw#vsF
zh1x8;PCU+gik@0n$SEl;o%{tO(r;ekof2cNOWs<elGp7!@-bT`xnL(XX37|Pp?{n=
z5zZxhvt$##fmxQt9t<J3m^?LMe7J-5&y~v=UigLDM^U4&!MTW`o*o80SamFw$TcOo
zYQ$8T<`!F==JV#U8Tnz%=eE5#O$&0(Q~JsA@#E=IM1{jx3eO9YQ$|I5rO%wtqm84F
z`1Z(skNn8_KJbmpu18LZtT6P}RoES__ij06j<}Xq__@q<57Oux|5n9bi4S=!UJ=%$
zCveP{y^KDQ-`o>?=t|K@IF6o<h|m6}aa<)>EsH71Fj|ChLAj<+3$_0EV8&3nA)7Bf
z)%SS4ty2W{Khd*RCC+EFdA>kCQcdKM@Z7brFeoY74#$b3;{seDg*bB*YpSa^5%X|9
z-V&6L_ppjq`tc{lN_M}UREhqlRZBLP4C82{cpI6R_*jE7q6lez_ZN~YiO$pUb%dn-
z&p29apSaI1Y6Bj0l+}B$OfJ0RD=DsTm2luJ5P(9WY)#Jno6r;aMBxwzyR&Q$Cug60
z&6L=<jPl^%U^b~&Q)oRYwBC~b#e`H8>s)dx&*O_XY{2@Pj#HJ<XBbC2@6qtf%2>E7
z;!K(>GKTo9b}X;1L0DhO^PxIJcV=uh@yV!#?ULS-?uGuw(YLEhPMlhfanJo2L3byo
zf$l-8A_uR@^7!l-r>Un->g()FZlKLF1EUOzq@<!~nF!C7BW6VlYuzQii~7LZ?$#yL
zUw?tdqoksf9-(S-;<NXihJXD6`I8&h%+9}g5Fr#WCOoVjqFbVu<rDtbjyj8<*x{^F
zNK}H4w}0x##rx%->0@(A$61hvmU87Wzyh^AX==S=E`~lvEp2Tgc8<<w6Y0=qa$DZM
zr;XiLQs}ZymdF%V=z}^Tu^UGlKWv8O^`u?ega@R~ahtzY6XAh3dwYqC$p&f*U}pDv
z4=4=-UZL<ivOmw<4#q#9#O#HRhJQ+!7=3cjz*)PN%=l9DVKwKHs#%RS#gk4C<t#MJ
zvGY{)(!I-i<yX3W#`3a)Qv5!jgOEw?Si(eSv@t2ayI{o8($BG}%Ur?tF{M7lP9hD`
zFB-{kyL2`gE$%7=*uc80NWGHNMi=u)nBWfW++4c;<TJb_`m?n-^o)!TW3wA23MsC7
zDjgjr`!<WGY6^a(`qa0GTF&5eCLeEJ_}m~dIaDwh{}X)$e`X8H)gtUzZ+m9wVRPA5
z@8-GoGjB!sr%3(R`;K5dVPRoW;YF?Yl3S_i3`~;8270b4$+~<t!TQa0+xlU>+r<SA
z!=*;`G|V1CY_Gj%BJcxZm|EXeefxGV)l{#V0NKot2DWMEMvjvM0cEi^>b)7WEq2BO
zRl@~Zgg{ny)4V329OkoYBdl(zHyD1biZt;I_9(X&>u*kxv{<c<&mQ(%9@X7Si_aA-
zDzXN>?4(e{5eyttChi)#2iljcY7+IlDr}**w#jTW5RK{M?;6aTutVx;h6}nwAP+E_
z7Pfqe&PFrD#i;7ja4y3G!GjK-6i3L#hX#>HA-XeJW8r@SJvKFf!p$(Eh|LL+<0T7q
z>?Q^^XOWv>*REk^w2-tU@<Ml?t(8~g+(+8)<ono|x|w#F)H$#BFHOE=(aM$YM`JKP
zE!pzrPpYDW;}(h;j>4j%H<SC@#KbrH+v9H=wl&|5GD+h1nQ6IhJyS8Q$WB`EBcYzi
zUArxCV||jNs*hmwa9Mo+Iq}9$|5VSLH{~fb=WXAr#qc(t)xqI3b+GD}2WX7>_o&tN
z$DR{M1N05c0?<!n7Pc}oW}!}4H*N`hP3~x#F?1Z0z4_u~b;yF}OzUXkinh7F&Zg{W
z{EqJj!IAN%3HZ5vc=)|qduh?lPsULvD3RFgtzI!0(JONQ3ritXO`<OU1RBL-MqbkW
zQ-#E2tCw%)({E3bRRV1Fo@ApoPODh+6?24Ujoai4MD}~=hh+b}B1S7o`y6~fj?^os
zp=@+EmwgZ*x=E2(ebT|iFrjUCG{gdG+K%Ln8ZOX|w2E;+7yoP~R&rq}^*@=9Z2mHo
zq8^_P(`Xjh&9gSEvRj$x%bj|8)SsrR8e!DIN+QqBAa;K%9>>q(**TTWNo&3hXgWXL
z1<{+L;dNZ^sP5z)fd1U#XJO^}<NNJ2ddc|-(Xxo9`G*lOS!7*%NOTdZ=Csp_=OwJz
z#&%lRd7ymWa)B0XnEIjI3uMH@t1(rSp$48;2=JTe+Qo)ivsTQCJ2Q=-&B<02!-k~G
zkII=QGwnWuTn<Fh7;#a+pHSv230`XRH}~LWt1Fdndq2`*DXAtqqd{%A9#2*k-ANEL
z&g1QUC0jNzA>O$2$>f_~;G+*zsc*S?6+ZYQ6FmYwe0u6(`bHIGApVp5fkmX)S7!;x
zNLB}RtA0T_U=<Nc1REN%V!0Z-cNE)ubi0vCttTaA7cXx4Q}<ZCeswfx;QW?LM*Zq}
zdm`>{`L~K4HG4y@oBR9tP%m|5HlLxyq^!S{E-4|?t*Wj(AAw%-IE~-wQuQZqqKD=S
zR$qE|vFy3Vm2>9{<ThQSvzKS`E2fKwyR}7cYFEA|<1eg7zC7p~jq86(uh`QSX|JZO
z!!_YF>fsJpp#L$36O%n<hg{unT5O|VR|qJH29z0a7N7lXfA0`GJbw&(a0zx;o!(Lx
zRM949Vh}SX83-ExGGF*m5CF;f{uCYiOw4)qpb1_%w!>fow@z<*^p2Ncj@#*UjZ@vr
zN#6^`193!!6Mt9?#VOObL8dN`hTM3}6l`xfdt3kI1bAAkaPEGofwrhsih%LMquM9p
zCd6#NWIakNyf1&g9(r0Y!}J;4xNja8mUS0I20J;ZaQyHxR`9)8zfeRWGwbhJn0#an
zfDUuV5<0YcC-)rd-AUctTN9bH@vu5dw0f34mV^Y9?!xqck3b;Edp&hr;QZ;<&;0P1
z3qJ}|9NNSW=o^WH+JDesdk=srzFG@4gc+MuJ(CfZ7Lq#fn@db?0E!$95_jk;iYi$-
z=heIu`1EMmU%%_?A>|z&C0?Y~<Yv2}sL+V>VlH<^%e|e!*l~~{CGHWM{DJv1mt-6Y
z-#bck-+PpHECSZEqp9N^z8`ZkGq{(=VwFGB^S1VlsNRQB0B)Gyk*<0D(b7ST4c!sy
zjc^LBv4Y|KVpPmjb?MgI^aDY6)bW=24nKA(a?FY=={CpGx#g=I0ETc&+M@$*$?U3!
zmxI4<&5*X;@2v*zHCj!@QB7QEO?Z6}bpPRKfXW<nG(f)EGVS0%Z0HSXi1Ga1G}^KP
zKBfn_u1KppmQEF2z3egr!BHpAzwK@fcb_-W9<j6U69Uc6>R(;v7SIOb4~9r?JR7JL
zE=#K>TR{?)S_yr+6n(N%gNxT`F1YF49!+ycn$!GX`UMjv)+>oun{}2lRU%Vz|E=?L
zS*J_?CbLhT@5XhE`{Qv!K%R~P0kbmAwN-$-&B_Ab#>&e0CzfW8i>Gu;6V)EUVolyA
z&^462pz3Apfqyy{3*|4SyWp!{aX>3onqN&XHi~ZfH7*%Ry8Y5Xe?H=J;LBjHse#`O
zev^CNT<qd$CJtw)c7|Sj9c?~1r-7T0CTjiJt_NEy1vNR{@;|^=cTU;r-x$xd@lwOQ
z?wT!hOhuu+SNME}n^VRun54XCRWAAD)RODDkMZV8jhZcW%S=X@`rZL*mDd*>W8rt_
zw`UrUT9wP*L_4Fh1g_O8HD)hcO=BRvCM}-*0~yj5Yvn0gu1p`eCti-ekOX{(2ix=F
zHk=OeO=&D|F6D{Q7#A92#F%9pPVqN-y}|{nYiq?e3!XPNKJD*+i({mC;3Fk&b?ir;
z4nD4D^WmD9EufMi_4D2D7u(vin&a*}zCF?$rp7US;W1z2;&(8lDk?5)!|hMLrLCto
zLq<Si;+vg={Noj~)_}wzDUus@JX2H7O^1H>A^>IiI}II7-vh+JoAI|~E8?BzVDryF
zj+>hwl*)ux%ARtAFVb2%H$O)MF&akdbPM@q<QeQfGoEq&eml*YMy}b?W{8cRndA1K
z6SYPivVm7d#KfId`2{Kq6iOI#MHfIB)kS|66N|p2_o+`?$hbne-Q{U@)8Wz7*wip*
zYBE$CrV<XpF6P(`=h<cpZULhz+5&;wlP7nfP0Lq|&bA};pYOu?o-jx)w&qKJ@>%D&
z@*pwc8*+R7<<FMrAt3lJ)T-Frxv@&-;g{HSrk_Af$dlx2h!pf>&<TFr9Gli`xwvAg
zUTtLwl|G750F;fJ21*Y#ywJC2!|A4Oa++zd^4bnCV#4~M{z~2Hm6?3wI!Lof&=Ve7
zRU8Cab4C2PuhZ~-mQRetCK>a~qK>Tu0$qc*K=9{r+;~H<nadN4#@#C-&mUDJNdxax
zFg_PUR1}DfA0I5azr@*;)yx_T2ej23&j!v_krZ%2YfM0eoqy7fI@*9A&0ltRx4f|J
zOT@}HG_4N-Ej^{mkng*#HU)D{F6|NaY|wt~*;?+}xe8>Hk2tTLgAnmZngkoQcNdeq
z^IW|lEy8|pk;>0vW$FkfaL(SYz6|A{uJ0m5?#x1ws`c&*A>$1Kc9!JI7@y&89TJo7
zB>QQPB__|Und8}_H)xTKb6TN@F0R;a(AJ{wN}`R}w6^bw<>Qd?-Mo-(tTu76R`DoQ
z4pn^%QItz_#L6(TQF4rLXqefq@^uG(UMgUxA=7SewjQiG>phNY->4aX*MG}?L(8r`
z^?WeJVtUU?wnpzK*keaAHPDY6RlUFRZicm(qA_R7*$#;4bu{p9Bn$zij-As_&ZWaP
zn!{c?<2(9FG#wB+&(tqktj2yOHgSvJMvcrc9d$7|pL8AeY*(EAWEv*X495}OLM*D0
zm}rjjypH)B4=mV(+2>Mq##uHJ6N;S>iy<8BoO4oB7w&LDMU=&uQ&k>eBt(s82AMvf
zM|Dm-T>iHDH+~<oJ=PvAOQ(UaM;^K~zXOylPM;q(d0`{$&ht7`&5&^y8#(`N(-2*M
z$k>a&msBS<Z8o~Vq8Iv09aD(=wQ%nlHXC<Fcl#_$1zRWtmKS<zV|(5riI&lz$DS0D
z;1{m{O)8Bgt+@_Z_E=nY6^FA#>IN4)y|=NxUa4_s_+?pk3c4mx>$bo3bc|^8Y(}l%
z6EwZ5jg1ZXU9%JCdJ=k+ctqA)^Mqjh{)fjW3|j{LDP*v%B%9jp7HpcPd8gbFYl|VV
za}`!GnapeM4Z9Q?<peZv8o++g3k2Wnt0>LrE5;YEhI7gy((NO$;Sh_@lVi3&8AK6P
zY)1Bq{nzMGQBe^hvCZs<b=7>VQBzZsBd0<T)@WS1ajXfui~-rl#>XAa%-A8Z_6LWD
z;i0VwI29~!0cBms92_!6JanY<+#CQ;M<^5wh>CSK6XL_B7|G*QzYze<0|I1XvM=IT
zHnz6|0+{o*t<Oubbcc`V8pp=Q9K5~7V+yLRA&|kd^YeBkF3-~6-FmJn&xHO_^9XY=
zHlVe<K|QF7OTumC#U5H{@SFqX{3Uk}LBxuhY4mcmvf`><?07@#`Kyni5i;MFs7&1P
zaGeV$?*Y@Bgovb<J3q0x;&&~1TWiAw$n?3_8bE>h8y~xIcr%f@nNMryyeZMGBO~uG
zF_E$lCpG6CjmnzOUPDk+KSeu)DVYOL!pjlGVr`5_5OO4_<<pG}!E<AzMzkj#yfsBG
zI@BS#iIm=A9NN6rt1>A9h~n1HKrMF1JNo!YKyVt5#tfY&u<1&Z{<-}sddrvlG2~>>
zuKi9#)eT2Rq``$Bl9cwUoP|JOvtx790h*6sEiNKE;kb_wEZ<pMv$HLapF!mNU+i`x
z2od4fKz!=kvw}9{I*j$eYdbyEhEjvt<y7pr&k~m&(>GdForLZ@k)PXjSghK5K`&cW
zPdFRH9eWqW($%0Ee~ZC_+$alv`YY9Q`NxOW&`S-*T@9BV)OXN~*Wu+8ZWyhJFl_H)
zv;m7|k+wq9KNevU@3;KH`L)h-u%4bCYG#h0Eq*XHxEQbmrs*4)hwq6~DmV4cU2V-x
z%3klw5=DOA$dvXSGYP!(IKNnt4Sco2PslCU9uh>G7#hT|l1Lt%#H~#zSTcJ&fmKVB
z@3BI8xG=miNQ@}%J~I;oLq&FWc5BmW^?18?o-r5&UX@~+JLwV&Ax5moo+ioK$zBf2
zvP`NlnZEoQX>)(TmGcNl%#pRbiIC0U3~AlnbxHmBkr+vjWSl09H%P&1$=cew%`FBR
z7S*IHzsb(F#Gq=sB$p7?>v(jgRU*^AJq`C321G=iR+BXz6}6ldd2UbFr<jONR?w5X
z%_Z85_P#+s_k)$&OIci`A~$v&YI4y8zjj)#n-TSQ&2_!#>)P&hX@CjmTA3w5jwXkv
zHCHT+p_=C@fu||27HyICWlh$Z=hG`~$Xp{<myilKY(53cffhho_r}rU>HXRBC#5b4
zJFp})LG8znei*boeacZ=a0OugR;ge_keF-*_hFh+w&N4xUlS*dE$5AF0lTNV&3iY_
zCo(T52J^wC`=`;5jcB|##!5i5UWZ=w<3+k<gt#eZ8-fv!F@@W>m;8U97oZ7<A3nyk
z1)p6Vw>X1o`!eRAV|BR+ehQ`ngjv?JJ(#cN3>$5{%?F)N5GH#Q8Ylb)9j=3D658l@
zSekNfG2WSS=;eyFyy>@}IyWu6L73q}?YEf5SxWPM5zYY^<+)psn?wVr?x!|F-)y64
z1L3lB(2r+9kl<zTy3{kv!vtlO!Kd+Tc`O8F=f^uleZY8V#_@g38~nxyjN9qnGWGj*
zahWn3H3dvt9J@L7t2XgEmGUTJpnCN(B-XbXx@-QuF3A3nn0)F9Mq%}Az^mCJ>NHAi
z6dLMVZ6A{zbC1}VScCaMQCc{|R+|sIs2D$4NO@`8Y*mDkATbQ|+Eni<9{I*Uom9i*
z%u&+-bukl1_g#43B;7>`g}M3B--%z>e@6rV8Y#H%J9nOeMcU=Cx^uAL0Vr@6)K33n
z{{@vHKVl<qCWrQqX_q7ZDDoI%?)iB_EabKj9&rMM8bSw#ymT?QNYK*h_=&I|FD2kk
z&Z9o$S0gr=28H0uvn#Mto~g3>(^;=ss1VD)>bu2RR4|*zA`FM<wOk#R$%5eDE7{SC
zsBCRCD<wZs9M30Q*&_?tn{{0p9?}4|Gx2+fXf75@kEZ<rNo2Z5M)tY}hmv5J&35Lw
zMNc=AGaM-7yUu>MHWz(^KxI2NFN7|v<h2>mbgmp?#que;LXb4PST&1|@z=HbW6W81
z;Dzcrf+~PI`TBu3&|3wEIg`iXmS}nlkobBUd6^a)8yg<jeKfLeBS~sPTo`qt!HBq*
z;anGCjPC__a26s+Cm+(ne$^@rV5@|z>%ZoLcKU_|I!IDib=8YOBUre5qkE!#K6ui=
z(KjtfCbmu-=<2%YamUd&ks?TOf7~7FnhJZ_t3}yc$wdppyXii3lfl~FBjf@ZsjCH7
zmvh(twi3u2ZGy<3+aY}2`GR)O1tj?q_Fe+3bN@QhJ(A1P2MB~Xr2(u7flN7fmE^jF
zc$x1rlUkE~Qnp|)Yf`5P0Ud`gUSsCl%RAz-z}tMCb9bi;0A-fGwFa2B-8+MEy+)8h
zU=-wC&u8=wxCRgj(6A)I?D)L@0uW&KNKOF)I8-|F5M}Va$IuAkrzetl6u1=Q%k`W^
zeEjLfhnKfNh-h^D=JSx-o6NZ4Qutn1{VU^TrnLfo^JHcW)Sl%gTqKBS7)L`Z*CwM;
zhz)Np=b$pGyDPEthj7=v@`FAh<2!=ToA$<Wq3BNGfs-iXb`#)<@EZlzc99HkCDsns
zFk-Mi@+l93>^f*=t#R(s>AQ7o4%zV?#Kx*LJOv%zzrfH1W5;8+-gjsh>w2o>E0h<w
zz#YIrEEmJ)`$kFCd8WYr(PPYl%y)<L$iS1xl_V7@3n?)aY=)q*f6pjGaJ%LfUM8Sy
zrYS4%Uq84&;Rjm-;gE#y#q7hl+&6$6+f0Z`S?eki%1=)$1tK!fzGaf?-y8adHVW}e
zGY#lo<H9WL_(irxzY4;)0dSWzK=}1#zyko=zU^HGc|0vjM@~8Jubj}_*}IQfEU5&T
z6_ZVLsN^~1agIALU8S!y36+Ws8B9i-+)w6;2n6c7goKzqLmcaHwk@ZIx-Ya^GGzm0
zz~#J$(UkmcJk#c!hIJ}|ZA@ozKHuMSpuz+o6x<&hz~<SMC!NPGUrFwM#W!ht(M&~k
zeO7iY0RZ~#Wcfl}sHCWNGi+tI*yVzeba-alpn0-^q@J#-<4%Eq3Vx0b7a$zX;M+Y|
zCbe<Emjm)wynaT_2;3tf=Nv}^rn6Y*nfytQzv7?c*HU+jXEszYjfU^vO|$_(FmcHF
z`%+n2XSWQMe9Mzi8JFAhH_E#GA%j}$s_xkV;C|t@6<!MSdIkddm{%WH64c@hQWn{u
z><@x?LT>gRmkS?|eC)Pij(dgQe2^zVka%Od$QuttFFQ|ivFHqm-5JV6Q9CeQOr*d0
zei}t#L^gmhCSB>eOrxIj-kt|Ao55u_Z<$obx+GP+_g_8fsX67nMFUp=F|P&sl9)h(
z`@|iXEN))L`Li3cGz;D`Px|;UC*FG?H-SnU4Vqq(9HG)(s{#|YfuLQ$s-mK9o%L3J
zj&d`@6S27hz7bq8AZnh;FQ3_+N&p;F7P%wm$%Mp3(#uSkOoU+4THNN0S{j;E*MpEJ
zm4GrNj%pwc-k$|Z4Ya+9AX6n!y|4-RWupMmK8L)880h6=%CLGtsQq$d20iU28ORY<
z%BNGHA;M!AphmFA5#h4q;>3wiKG33@E8zz_fK@gR!}eox6(2+;DaxtbQE)GZ6yAIC
zULp#8Bb=OBF--*Tr4nfJG1Cco_q{PbL{UQu<+X1On!pA!rhkiU028brN~iA!UVy|0
zn0ezFwI}Aak}#WrNye%9A(Lye%sy$xAp>`lfg@X<0pIW`fmt(kE}TYG+X#XTTs%OC
zH~<e%=Z8E&8HVecb<XBjx{o(yVW(II?KVEYtAG@(6swe}ulPa5z?XpE#(>MRWnZ#|
z7SFFdRDk#d8wvz6gx!&8Z%*(~#OZMrCS~q085Db^{EFxpO(=@z#O^d`<406c+yJ>n
zq%h{Y({${YDTk*BAU~tW#UF4Tcmfb8Wh(358I@X`1Jv-|i}S_Vjlq!b`E{Nz!wo)Q
zQG^J;%ZA`2g~c@6XhbUjkf+YqN6xaWHWn>I*C@PAyd#n)r1N;bZ}`4s(ksrtK14B{
z$Lv>#9SFks-e#t$C-cIRk>6N-iH^;EPrU~froejEkuz}|AX%UewLCf{`Qa_P3GIv)
ztfgTKzZ;jOd@a<4;Jjnke7WTu=|VIA#)VoiQ;kzeh}55|Mb9-VFf!Ic<4X%Yeucds
zRmN`8&K8UtvX!x8OqBUGQi37$l;0@)`ozBRvMbcVfGVY8ILdgW-7RS5Y+bj7aq>v*
zJ>$LriAgNNSog+XFbck@nDvQ3fSE6hH^en0Fpc?f4f;kWewqhXZ_H_#V2dc)h(+a~
zNMX7Z$9X@_N+9?tBn@(;|1MNmrCf~#YydWj;uv~!=hbrKUzq9ivg00?f36tS{%!Hh
z0jil0v`@d0jK0yZ^8I=$9^DzB%Nw0-il*iOnYSUYFOZSw7&K|zpf0iT!Hu*q5Qg04
zeRH&yB<|ffF@#ClOdJ9~?mnd??!C<U%|#trDTwj<A|oc%RSyxp^Gx=zO`kL^zf}xi
zlED(9V+AG9i#w353kG)rk1>;c&>>b7{j6RjwLE)WGy^U1CQ9&(bqZ8}GgM(9(jFz!
zaX$>dIi5cFE6Md;$VbsueM$!^zi>kcMJl~_@ZbQVr9zshAG6>yVra~Pq+ZJzL|$TI
z%6X$=M32m4Lfj6$lCCc6NKH_8!8gU<l;p$%Usc?r!}C>ou?fTjz|Ah&XFFw<B_Xl9
zr1M2*;kQPBj-2CW4vP&#o`PNGhG;H$M5xBLlFM~Dg9%Ej@_9v`5y&?>efbuexeat=
z7y^=ZKcVR^UYCX+(ZK8Q1fIwpgvcI9F0vZUFH53$y2KrDF2gm0sM6F;pPW#xn9*WJ
zF|pL2%4siR_g4)aI24?g7!TXz&sZBHSi&q&`d2FAwh_8ZAahVN?jpCNIUYHareS%m
z-+;&>JuCmqf@?KQA?;wp-&ufaQM`T*==>7(YSr_^Jbv&bSOMUG4QUO*KLAev7JVc0
zuh_I6ta5V9S1;0G|6xchpc`THi)tlxXCaO4Rk;l%9{qUd6OP05ST&bcaEio&Jk{bf
z8vKNnXdsX-kCFrWgou&}7k7Z3l5Xv)@9BQNaHR|Or##mhTQ}jW!a{K3chnEpOqp%N
zUNF0a$XLH6`G{sjFviJ#0)Sfu*}`lf#HE9^g3qYr@dB{OV54OlEISa$A--fG05($z
zoN6sGGKWT1M`MA)<L5no{WU4nGa)t@rQC?-_;hnx0AX7~CXXzc@^V=C>48m-r>-vN
zZ+okZEJ_~b%dV^-xeSkOMBD`s(Y(Y$uc`BMj29=$1~3YAo!e&5sBchn0>71$5I=$7
z$0=nD24aBCW-ZhS<#r>q!ujQ~5RtdkBf*+qDC-{0Hx8BVo<AWd(_{76lMMG&{>Vlf
z8bgvHrbG!4$N)}0-*9CH2!!E6mV;CwVJ>$_GcLYpw_eu<Y}6{Ku&=a=Yy$nmw%Ttg
zr*?c)Gv&Aid9_kb(Q=^PLRU)b$PIhjgGUKfYr@1dFQexYnJ$)sRw8>aIs9?H{DX-f
zqE~}$yZ76LyE4=<G1z4Fs`eQ6XhI<Hv==E1uOszm6b~v>Y2oY`?uJtnOhpFX=++tN
zrbN&}J5M3x{0MQS+u+zsOZYFTGnVE`Kx%Vj*-+Wy&c%So*Hnq}_={9m9Yl0P{mtKa
zI&2rn5D0Lk=nBlh-K4jWT7j_AO+MZDA7@0iWPs0Vm^QmtqRA6-%$Z=x*o1I!P*te#
z?ncYihS?ft9J#{y+(rK!fC!Wrl9e75|4EsdI_(y-c?e(HgY{RR@U_U|=m$vg=t4k5
zD~p@m`pVWfPbsxnJrXEFbKS5Op`lL2eG~GL`WZ2p`tUY%^j8Je2(VMO;?{)>QxJXh
z?t0TT-=!a}n1;`~CXA;52%`rJMaS3@uB<Aqx2kn9s5%6x5(9}J^%1+tEa3Oj16_bZ
zb)xdPhphyqWaITWiQu`n??Hipgf09`5*=GHJSImrrZ;Sf=ifZU`LT)kUt$4^Vj=xF
zHk&~GyVJ5#*$_$&JR^=l&bu)a#uw>Va`chf5P)ICRwxfj?J6z^XB;i+8L{EFVK_%B
z&jbTr34RN@RIElbcW6!GvZ61s&S^Uq#wH309O<!%YG+2-Z}K5uNTL1ceCm;ZIVZDT
z^dqA?jNCEhVknw3LO6pBkcWD4p5SP+>}tI%gkC-{{kWL%4xZlLTWWb};(8Pr7+-dt
zJ}r;+lrrbe0`F1cZX!8L-P@T^d!xt=H@-?YG#)MK2(WwM@<`f(dwStiZu%{pgX!}M
z`nR#hU-_mTG9K{6f7cru`5f#BT<-}G`2oGlRV|eeB2YYTOk&|NrmYrXy?gA-|8k)h
zp+E4(94OU!$3=(R$U;MbdF3;T6dHjO9-HlGlo{|VOKX!};RY;m_ajV)@;(${2W9QH
zFYW)RC3!-!L*G(=$MeHVxah0MQ=^daXz|f`w7(GRN$1LBWc<y|<7>1p%qsn;(KKLK
zg~)5HE1*mFfcsA_k{U1buf0neN!p7vk4id-!N;1;`Bpnb1-qWPb!;njBvT}DcccbM
z2R`WlZLs8kXIglBk4hg0HD_J7xV$CXaJ2mbed1b3mDap(-`$0%#S`I&iw8-iNbzbe
z!U&fm;0j?ksZC~9Rs)(^xjQP;_XeI3_Mm`0sn2FK1mrJw&1p>&Gt`11B4U(JY7Vmp
zPeOv+=Gky>8nrQW&vQjDfCA=0c&cci2l_TA2fHnTpfos&tYDr->Psfc8JcX|EReR2
zxZo~$!-!~?qWNhdfk3n3Ac*A@(pGi7%M8R(ifo)*`z2#X>%kGh=3f3qa8`hUW?C3Y
z<T28~jE$25hzvU-?zXDph6F6RLApzU8bjKFd)(OIQPF_{!6p^Lou<nEETk2fp$xp`
z5|Tw(`YLqWTc@W|t*)yDC{!Me(h3o-lf!xZl5^#ibFMLGbh4)#rBv?BD8WFhNNG=%
zocyEZ=JE+kWj2UX>UU}OYPKM@Y8|m)_PMfOwud6`E-t~uCg|v(R>V$BJaOTH3tbKH
zd4=I7h^XL1Qp%ix@v_^EDiF=!uRPZ#?*L2^8eyncg0ONIpkL7umP=RT;*w6O$#Uwr
z@Kt`T$i=)xVmB_ORLHNa&Cfy5HZZ9!HL^T$1RrV34bSg4I;XnEP~j7u$~ca^>w0~g
z>Pqrbdrr^^f%}+FdY<}H;hMu%P}E#~RiF!q-Di^Rl#`w4qlg_SU~yMwn-<IwzAoe{
zBMVZG4=r(EG(c7vbNsa(D2tzHDVZvRA-&>abnsWAsqeQcP+$iT3{<+sKTYK*-x@8I
z%ir8CKktiz+0K2`K;N2YOk0_?RWFGag1?R}UkCjOv0#5;k(nqBlm?_^CQUO96JR#G
z(ri^J4@>IUgt(7=TJD_Bd9d*a@&;c)8ax0tds56s++oLo=6FV)9TJ4o9qb1A>S6?m
zgN%F)MPfJ9Jdo--{y3^&MLM`GHzoZ5d)#vm`K(v4q|mdY`!w()1+ID|7Ba8%Sc!k-
zJR`kcRisQaW`;1k)ZG-PN%z3>#(R8%a8<4&_WFizlj=Z%Cs-E*ear&hBCeP_qVS&w
zF3^w5LtoVs$y>YUldPhbOfNc30i{E;uMyFroU^VaGXzewkJ`j1pYz>mH48J$AlfDv
zif#?{jcsE-R=TX<YuwP@o9kA_<YdlMe>9KJ(QI!<w0~TdgM1f1;E|U+8MHy&SGphK
z<3JfMLCjmBPyF(L$Nw^1z>ghZY!rDF?u_Cg^#l&ZYycCU5Z?#(gTH^tlQzOfkg?-Z
zS{N>dDV)5!j?YS1Arhp#(kb^f5`J3)iS~r(wBk0#oRA?uPP0Kuf7ya72(Kk6LqJGL
zf4qSMs_9^h1NKF3a62csb$`J7K%7~j5AAmr+N}D0VF#1A!|~Qk7|p!M?5}mre)3G#
z93)DH2$5K|s3RUP=N_Rbo9E<^Y_U+p0uewMCf?=iVCNAm7Lz$bkjbz=&$z-V^osRc
zd?5A|LuGrlWw_;)2_F<e)<qA-E8`e1$AwTf2F)nEYRh=QKQGB%Y_1MwrTlq)U|JoI
z61)>jy<Wljet-Lz-FlaH_Hr%r%FdQ-e12{u*p!&nj?6KO5=x;>uYK<cCZ`_~qsF_r
zy4~h4$lvW|OEmq<7Zcwm@>T4Xl(SzviBOmCCe!ir|Mb1en6~;>eS}^2r-dj=DS7$<
z043D`K#MYt2*IdD5eFr|(w7J$4qlA^e|((>R1;sj?gc49S^_A&tEe;)2%&dS5l~Tj
zFH!@cg$~k@Dxx4=K#I~^=p}Td*U$;Q_g=l@=l?tBuKS&H*R170oG>$ccHaH&cR$ZB
zlrreE5B&Xj(Zdm?trGX~ykQ5!%{DBvM#AhzkJZ|%%EFqQ5u;T+(o*Hvz=MFBku(&H
zd4FbaxOik#gt#60@_rcooVzFEwrEZVE{90(C^Xw;dLcLmbbdx3A7E-bcRJK?$;k7m
zwehSNE2YsV)vV(h@c23SLx{Zi?(JaMbp*?2KbX|x_x{SU<T&>;wSnpf9y!9+#ka4F
zejwI7;Nm-&0sP{zNl$5`V`GCbA#0$a?+S6jXf6=>h$GQy7D{XwFaegVtEuQ7UI^Yf
zpM_#TI#{f@f))9}JJXPth`|I&#)cP|DY;9+WR%_U{N90Ilj#ky&=?#~f>ek&C}}kc
z=;_@=o3uwPrf;ZIZsUO_$Xp&E!Ve%ObF>WEjAE2{Js`ufM2{fr=<HXXxdoDIvr+z7
z{88Q#>%-e@c+jxx`PoBiwAfXo6uD~gvv4m&h>zn-8hT;Eg2yQiOh=w;N(Q%(cpfdY
z9kD?Mms?>5m&RX7LcEB`!D2A#$e|SA{ML>1o19`lc*K}ra2Z|{eF$#_6^DRBTp17)
z10?kHXQ5t!=3=5_HYvg>4cc)!ro#0e%_@5C%?buppI4Uv2}ALZ8X*}4dQ{D*8Ia0a
zD<rn<oLYt7J0zs>7d$3m!X7j#orl+_`3R??hJGJ1&Zc2CjAXAj`>wgdt6tHVTz=<S
zm+$}1bJ}|vZm6I)#&)YV$Y4yNZQg<&QcF{4DTE4XXm1GQmAGIwVYzI-W891tMSi*n
zoAOP?`oRNAU%{FS7iq(AZJg`MPxbsXxL>|a{#&}}M}h>xuz@iY_&f|6NyP8)iGmPL
z_9>uaP!l2r@fcwR`KkGi2A>xi{LT`5Ph<mhGbv0n5Fu@}953|tm1OA<><WYf6V?sW
z+Fq4vb$?pgzNR?V1j)Tqix{<+IHgx{aW+EHbA<SBY`+DT4g;S%qyqB_wstIoipZ79
zw;)Fq9|+4H?aHfFmsm#@ChTex<ej5EDp&r+JMT56N&<51V=?rP72S6QkXmr!sXoc+
z*R(8bi<;)OuZil7XFu-Lf@r|a*p2O`(tXZ`eNNUJ->#;Z19z}x{0pQSRT9#?IC#C{
zTJK;7dzaHkqw{}4A+E+b+dT317-JEKl%EnP!!Sxuw&OfQ@;qaOmTWiNM%GWXMDqa%
z2vNtIiL;mQK)a_&2kEZQ9}`e#h=<aW;l)K`Mo`f=J|demHktkKj>D~4UcaH9P}1qB
zHT3hvbs^FeE{fV?d4JEMMTI@|CHCQzVz|`j9A{x50xrBE`E~Y;c?fgJE_T!0hHPp<
z7cb-Mbo&^-WU=p|`0;y+_Ii&L+Ma`7XQm;qd1bhgnwXwI9mtG1{BY*+#tlYr&uu54
zil$#JaC9-wfjmDfxGmyCLyw!y3ee@1ik`UJ5#}G7O8sg4@-udYXHBM-&gL#36a-LO
z9X24TYq9t!KZ$R<qDaz2sZ@Vq&1N(#>*I&e{3hEyVPu5&3ig7^24sBuqR7Yvd&jHe
zwBzh>0Rt56``eRLXZdLxk4}^K*(QMw(Tip_<qYqjln4vl`)zG-p^YWpLPr`6&6hU1
z*(WVm8Hq(D<=^ouwlC)ayp;d%5S&Ehm-BV&eaxSj<;xz(9+^Rx{5C18@=f%ci&d82
z%XZiA5M?HaXB>0GEnEb6PYMDZ17Jb^GT+))Oh>RGkoP515ROm^M#ch4pk(sR3QbHH
zI_~f;)xJ8H_~;e&$uS!TAfgmB?)?2H^mCu5-gvNotDP}B(f`{=mgobp#zR;vo+*N;
zV9u4@aNb4{;&<?~lm;ukC~(omLWbRKC*dtnHVonKBZ1;8Cfwv<bKm?j*D6@QrQ{E0
zM^cxV|BQ>q=JC@jdohR+;#Kc5y^4z8`+6m%7rjxlk>A=76^4~>48jsoH&WC4gP$`a
z8p~;5gB3OWwOEkXE%S``jd(cYM0kNCS|p~ftgh&^2d=Foye0NnPRt@8=I3p>xk(2F
zUn`=+R&Lni_<pYc$&*CrGsjaqliN?Qc~_dV54VpT73*U%R7KVWTc|hn7>OP>Z<pTn
zQw$+N;3c-ufC}eZAgO#QO_H~ehAu(WY*e)RH5XJkDIZw9jbm0N@pz#P=3ELneu|*O
z7thgJ_fyyms+jz!dB6HvgYatbdDq|jBk&{NP|HD5*llPQB$C>oLu9AjrSfwg2<Z9E
zOY!-pgJws~<Y*nQh`T;^E@)zvRtaAdMCi@m;q{Hk-57~blUsh&wEBmnQvvM5zN?H^
zA~po$8hp*fqV1Yp!r>L+<3NV)WAX#acH8?7K01tu$%Z}s&hcjoeBKGX;P}fAF*tJp
z=D#yicuyUssL!lMR+=<CiEX%(g6yWKV^qY#{>QGxut$>@)3aYf!Kj1#fZ-tn!!0rx
znw9L0)26*GVlyKruvGrz?~y`pLD)2&BTO;LpFhAP91%o$+nnPEeS1(hW0E^V>7NcI
zCL&(U?HTMh6jd5|Q~qP6Ml`mZ`cbEsI<R>7Ee0M)smx5_T9?;I?n)4c_-67_QGv8U
z4U6Z8uOd#%2Rj~)7<=|obrkQyW6pwI9m|k<lBsve{ch<cA(^NzqsJF;?W>>swO|N{
z&Y<jjGz)I8eQKHSv4e7wNeeHoTxCzVFip!!z(xx;VD@3n@45raC%+|ux$Tt_)Uy2X
zIU61XAFD9cOf1pJe0oa*bo$_s{VM88_Nh$mH*gNCI*St<3Cm+SbXYjOpX>zW=8GqV
zV7~M#ATDFU(hSG86_s=xY#_2Zimk=>ywUu79I1+|G#4Mf;Rw0ey5=r=Z+cZ$v0v^0
zGlxU`K8Zf(Zk21U4w~#DezD*X<+0mxx7y@S+cas2S3b7lXM>4~tnrSybmVqJmFQ@1
z(k=iInaxCh5p7F`(6`~0oMRQs&=VsZ3G~Q-^TmYkF-Pw3AR;cX9QXDi1@f#nqrZ=4
zPUG{+$@$%Q?)`5Tz!RMK9P~S^T3y~pH|kcmbNm{G27VsnsMBzXR{hpE<V%jLpqE71
zSV~Ii@RdWpbc%5w#9r;B;`5_VZFUzeFLhBsl$r=7^&8r=n+xl^4xY|XMtBNES+EE8
z3A=jJgh4!tGbw6Qd`~|yyDKdy-55;$D-;E+Y}#*k|HOGu*em-xQQ<gAxAC}>o-jOM
zuw?iS<L_R9DZ&<Ef~MxJOQA3USUZRo_9_J7*>(iZghg4iQoJG7zhtz>QDj7?S3jl?
zRqK%c_FtU``34=f<d2B3p~ky$P7$2UMS%O@{A(k*?|UyRFc^zRCfqBc%a(Y{KHa^O
zlz$FHg?Alt12zDn4Jk~bH~$7?ys#E$5Q_`-I?KnFA1mj@)33q<cS7#t(eX9sYY*S+
zSgP?P*vas3xDa`EspE&qe$}Fn&iJ$XNQNu!6;A4By&K}4p$f(~Mv}=$AcG}jcY`_c
zuJDXP3SSAxPu*oF<}qG?1&2$vkR7MZiMdATv4536&DP(fQ*`#_Ktvo6sY9l~b6D!s
zy^{{cZNkJ4r)`dCaaR4^seX0bQEh4>{ZxfY_rZ`oLJwcKG>sXFJdIh>f@8q*O^6Im
zQX{g3MB}>WwW4c>W|s?issk#QCxwS)fW3!@H;L8;_1Rm}&)=+Fc1M&}H&WliG+sBA
zPp|B{RJMMXTja#32T^x0)HhN-Nz4_>mkh_YmI6i)WrJqk^VH%fK4K5QvA|RU=7oLp
z&9~hMvyvb#%ge``w@`$Ut!8Iqj1ys7CZ5tEOJYD+I%)*?ak@d)HN+;u@C7^5M0*Kn
zM5?_5h?!g^=BPuCW`PfbF4)(7qZ+VPAld1|+06M&;BDMr#ZDPFZvG?Jxy|{HSc@1z
z|EKRuJ!S&A{A9^m@E9nQ5J`dz3=C$tBEaHoYa6S=n?^{peVV>RGbDq@?+LEZx`Mz5
z8G=Z4puEqR)=UB9=tj|#vnP>{T=_hdj&aBY(y8(J!oq3&Bw?~rgyh02DWX##Fe1dv
z6t<MqXY&}%E<+_vTPq!cWni!ZhKh&v<P|2%D!>#VXSYNK`&0)JQsv^RYIH2ZWA?qL
zhPYP(O?a6Fe^oZ-rBCrY7F#Y9iuXF?6qJYe9`teS$&*&>EiYVN(DfXV%<UC0i8or_
zbCV890tv%@yz%Lpqw90M;vt)wpCjne96QFBe*~yIl?3F(9q-$K4_S>HIVUKqWOa&*
zLDsra8x%Cg{t$H#*jn$ds~4S7n`!`IifpX6d~`^0RK3w=^ZkK_aE~!az5iqBRQa^f
zzEvOBfI4)LkvVvOj($p><UMnE^Oywe24OCKp=!l$Olm(_WjF|3+3Sp?ZgZXR-O50a
zwprQ;ocM>(x0X)ND(}z!+C3LY7<*J1^iox_iM>s+4GP1>7(*Yf7{$PXxt`pQ1*a8p
z+7LCuLP5cZR@V?lBboPnKwYMrvmlr>+=SVWdY%qyD|t<4B5@pQ{e-89ej-HA|3Hkl
zjItiB+ydPWUhzAA969<Qq9OI$wFsnr0)!Cs9g%LIj(7*E{Oa2xjOM$KZ5nTThIV5m
zCgHfX5_e#){<UtoQ7hecy)k+oD*}u-%6h{e4%pEf*r>*);hTxI2L*anwFg02{uo51
z9mCsQKWbQ|jc(Mpz#F0dVHso^Sjb8vc>r&cjReQzyF)mvH?nCX*-WFC<X;9IkZ7EV
zs=%Dt#9G|3bW7j-sC{on!us%4BpI?0q!YJ%-0mQ$13<AFZJWFkYPm8+h>c^$#7d{>
zp!>b|-Q$0FFi%|mskIYI|5IzHvQNI4|3?0RP-_rK{)DAj32{h0S$5gq&xhbp`${GS
zgdI}T2Iz*}3;JBCN{VJivmS$4V;UhmO+@ukdKqM!>{E>e(R1a@XyO{s4v`E*9!rgx
z3z?GM#EOVfU-qsHM|5<x;3efcM`MpH1J-;h6<(?yGvY|-HrleLJUM1%G3+``;`>~`
z;P}K0oLi(5LN>+;Yixly1KBp+k)bt~h(XHG|E4G5t4$U^>a9TQU4e<xX_r><U1M+w
z>fvsfIqn=OntEo(>;#E%90tk&=K_9Wzd^IR0o@PI!5;qN^BmBd-iSty${={7Mwra)
zdRo*MzR#({&wQScIW}rk$}^5BM|OPizokDynYl|g*;YO;SQKAeH^tpYN@<9oE3jAn
z&(!0UpN7*%du@at0*OemrvZOI)<L*}HW4Zyuss5iV}iu#C682dYPA3MmFVt+aA`>u
zs&NXK5#En(uK7hZ!mTEI^s8kTiHtg!IG+x#?+x?S2lyOd)<A0wOho^y9fw)}Ko_xo
zCJE=xw!Vhg)g}6SuF+bJ^(?R-2;X~P)9U_UJTqQSSPui<(Jo0ZD+~)#%ZZU9uV;P4
z@`6RCk-x;@lw`Zn19m4a8f{Ro_(6A}1`*rvN>cZ(4ld7b_-1xpi0<ZOU?V~Hv5o~l
zy45Z9$9=GGSotHdi>>>>623z5t;m<FJ~QX?Qm9niJ}?dVU`}U|PHfI@0JTS16L15k
zuY-#v<DNd@^^`~KTgYrTQ5<L@efQbNwv%GZT|6B{C>#A0yJuY<iz$NTYf*Q|xf=mi
z*~Z+H$AS|YcZ}xUeB5y0mahb;a6&{)h4_z+IKDRe-sHlWRGpRYUh{wvYs@ogADVa`
zuSvov+bwMHXt~BzT=6)BgZE;(=_dlgFR#Qm4XAE_^RV~*Xee>_Lbil|soHRQFz++G
zZuHxWM}0EVDIB!*)9BW1Q%&o483VPwJiqN-o7caydn*!aXJogFIVI7NW<&(}={0FI
ztFUMr&z_2+0(bZd&_XtMQJ-)P<{s!a7rdliF-|?z_p~J3nvQB92;QZyyhBN_E2dAF
z8huWCQf#10?#)_YEO`?4EN2(=I|l2Fw|n^ZZ$%s?@h^$m0BcvE6xS_%yfF~O{^rir
zA+8FDFw*^nNjp&}E%C7Q$H0*H2VK4<e$97oKIuhEXEWM&(y369(W%@alb|IU_El?r
z%`PX1OOoXLj>X<H@^yz)lWzv8F8ion)D;|AQ3EJ0OOjnj+^A|ns5Q~pDy(ip9v1t$
z<2B0=4jC3qIR&w4LO;lR&EaX3MO`rW{y^xo%?**d(}bzCffUT$Z8v`pjdt?|lBTB~
zkh;?g?}@I18`)qb?65a6{}9L;wxt_}#QZGFzy?~pzk!CF^!gE+zA%zJR>RT}ilzO=
z-V&2GT;jilB+?%+FhxRW9QqB4`#}4k<3`#V1rIFGJ?}U}ibPPVn*x>v6`TiTe{r{6
zyMUEJMnnXZqNU9|=(t}WS2KmQpj{A4jVzrYYuI!TzVi6fKftqRy)J&qjRd~jy4W$G
ze{jtad4-7kapIj0_n41yo(J!Jx|YR$^Tzdrz0q6sI1PO&74&xTkykgxGdW^8Tsa>+
zH;JgNrJZL~FqI(cKGwi<2y0_dc*(zXTr~WUNU#Qt+Jlfqpo{chg^CUo$n!A|gxQBy
z&(YzlG;+2vpZaYDSdWprK4nBu_;80aZ%eX`DtO4&>|%Bkb7G*5;@iGv(cx)jE|PxK
zx>>euMyJmib%QCkxccysBn%e3l&?<{%gULM%6=NFWLK(xrKkao=Is3d$EDqOTod<k
zlCvBW0|d9Sxw~cl#w%*YB)zui>=qk>BuEmH;n6$XTwunXmZl8bzU(~#0#7=k`fF$N
zfOG)X^9ekMQZeC}ITKi=$0shJ-5`i^|05Iy1%O#s)y_Y@`1+N*oOwm)7zc-b>RTa}
zPFjzI<OelVzsoMZKK627tNei21<`aS;cJ%U+cv&J%L2<#2KrwTHvT>Fh4Uz+6HB$V
zaB;z17Pqm`;h4XU+^LAXO2I?|^ONTd0~H||RIUnGul^VJT`BO@{bbG|1uwC54APh1
zy<5tr{j^EQ&Un!Dx>7kSj`j3zp~?Y$Nx+gp5((?(OxG<mM;}!m&}P>i<^{58`3#6K
zkp)NUt+lR#=$2VP7U@S1QUXf2c+{Z!V)2W$nh@(vjyCa1zpeM2hnzmm1pOL^%*Yt)
z$KGr*Z>Ue7B^r;CUS{^6910V9`Z9~LdooRS_1(R-)z<4sPF3`+$58fS<1HYU^wSZ;
z08g9h*0KLH#&asB{<sV7L&<cGW8Cc~T2~wl4d)NhThGGN1~hV+!g6jFDD)~6IPgp<
z9;T~oQq(T)j0s3&*In#kuoOs!f<cuwxAnCC*i&7ss<G_c<31v28BmSYsQWnT{EuWl
z6JqfhJ2LpK+-(84DXRk>>&{7QMRe{x(RmtyYCu0~(hukM2-^ar{5Bj6{y|E+A_U2K
zI#hpGGBVf!BFZWaN{5u9b|POf@xU99%9}TondAb;n-oHK!~qM?Ouc1xEU?d>8Ls=6
z`5{262mBHHmfu1LWeiwPCY`xQ5Ws#!k9%4Z*iU<LV_bnf#*BO15ZI5yt;+t<sM7;_
z|09LkvqBDZ?%72SqxOS8GW%k|ZD~IZ>qE7gve$kZHHW5-v%z?U%iGN5|5(fu@PPLz
z13s2v5@0_}3!kC_5M)zT%1CR#+K?wZQ7a5wf31Jw;xTaj&lGcL|0zpO{ehirUt7v;
z0I%a7Ex0HH)`!AAdgpe4Arg4GR|`n&7sdhJll7nL(#8D6j`+sPeXHFrgfv_g{PEG$
zxm~FhqU<^oUuTd9-YCRhaoxqH)p;xgk*5C3NF(}2kN14=a@Z@;sa~(jv$H_I?mT_y
z(2brQ?1ns8R<7|{DNxp}ww0wcr>tA(jFK#>QgqqeswkK|b6law*ZERTh8u0Iq@-j!
zG;{EZ2hPE3Q1PNbv^Y`IK&y<ycIf=T(qpK-KP4rlWnEo9KTv9Ma;wJW=Ino!hLyV|
zsu|n*H!y{hOI>l4fBqr??!SF2zf{g?CVb{id+2{}{eigvFqW;8dWW9t1<Z`Z;gQHC
z0qW#pi=3HzZ09%n#HLGR%cbEmD}wA-<2JQuG6&wj`k5%`Gq_gbJk3nx5felGJ@f_*
z<xOf+N5>&1F;5Gj8IM^7D^^$KnbP)(nLnnS@dCXXWcUDJVyiDNH)CM-I*gvKy0C}i
z71r#~`_2JYD@*F$RLOcn<^$38EOdEmtGvg~)rsEjuVKI=MY6S{GN~g0XtG7>zlWhn
zYmm)n>cnX4<vDJTd6U&dyLwB&c(A^Qe?c?rwm1%mz|5oW13n@~6Q0%4zmso6W)O?3
zIA9=4J>l^{oT5lcNrM2?qSNNWq)28mSZZ@(Y^*3aifNpXd1k6}SLCEh&dz?jQ`}?K
z(_`ybBo@D~rCg5H_WT!?rhQA)Wpn0=5Nf|iO3xq}V^Nbj<<^H^sFPBD{;p$peRGql
zk3zmu@R989&o_^xch4L7ZwZN%0L>H)$aB#AwSdKR*ZpFP5v>Hx7d(x2;-r<Gn`}SX
zruP(GL%|QfgniIoUh|K_ot<&NfY<E5*rk}I2&`P=G`S2gXBKI{pKb0%;-yEcuRLpQ
z_3iKHNPq;ecsax4nm@IrrLn3Z#)`HrRs-$RLtE3uy`Rv=CXgmq8=9CG-kr#*Y8Umx
ze9_=_3&M;v3Z7;;c!D3qb@`f~?984l(Ztl-94C;5*L`|$BgWL#?S9KfVT0{TZ%VO~
z2xDdJs{9+RA@=v!KxM$|UL;!YiRAxMx<`!pbh|c|+COAAb?256ori}9_m}5_;!rEY
zeGrf#R$P!XZ*gIe1<5ck)&XK=Ny=K8pg6#9b@|7*)}m~n_2bPgv6=-X^VD9RYULU$
zFLp{nyNXzWQ3hkZe`qsSzKy+EM?zfXT8HCJT~IMG(<)t+ad7#Kn$C@u58C?rsI~a<
zkM|{E-lNG!rsmnySxjT!&1aKD9VdA7YYoS3MxVsLh+)rIzV|^Y?d90q_@P>&Gpq6G
z7tZZGj+);chgUk#--`u$FrQwP<fJ0~S&fG=&p6!Zf9B$Y4cEw_fCCfFq^caB>9N@o
zufd(%!!de(G;(iNZ7pbNh!NS!uR(Zz(M*#thX3YO7faE$F|}u+)8z4LXPGKZomDf@
zjw<Zrv>+-?$WwU1jQXH22oQf8ES<6xp-}HOm0-exaHU*)dSS;_cLGIgviEp}39@;_
z|Aba<aL(t^t$)n6LmcgJ05pj9#p$6L#ofGLNXa@6m~)^FWyZvu_#4dPa9JYr8Nh1m
zzTBgTG<NM*iHsV5@0edBT1EOjk-=E757PK5H9o$0X+%(m_iditW|A|<W?moQpKD!H
zgo=$ZS3;rgO>VJC9chs^q<EUf1Q>waApTglqE|Pyfn_eq*{tNlw3I!(^_?e)vWv~w
z+6TVbJB{uAXy2A~4f%Zk#$UgFiYFTZzzTV0*<jU_Qr`d}N`oYC3rC5dlq4D<0P0{N
z!8<uB!X@mkMD3XlGJu=Gr=QbLj!Js>?q4-47M|V{e7fsSBz0c;Pv_>qrC<8QU3s&-
zxZXy*sw^Us#7&{)8F!~e@Agm2+*r?d31;tdH*QZpU&?n`4Pfr<rMnaR4!*X=-sK#B
zv|I}1<AdO~B+Pt$WcLUU%z_<9n#W~6nU1ArD1Fh_JLCII(8<iZO`SR=fgWXu;n9aN
z2V8z%*AUP5z0p-RH_<)iH(8cs=1!Pz=i2>RuhZ<yr+Ym#)p|Udsq|2}kQfQTVJ(Tb
zyu7kCQ%9)o1Tn7RT+yYkNbxld3@Hz^)bT#=uP(LR*ys%AE1NC7^)`|mS1lz!RF8i}
z^U<WqwCn-^N6Hnx0jy?_74!UKFDsWabj&agTyoPf&?@@1?nkWekKAhtEb4x7Av27-
zx11Z}WeXx%nbvC9x|p(Y`kwEy_<70woO^OQ(ZXLT@b=0??U!Wh$xOi-tS&wM!HwaQ
z+JUy34>HqEUy5r<Qs(kz_eeKt2o=Owl8WBc_XQT3@>4wze9KwDJsE0FmF4Lp6AS%R
z_lrV%ygVyIL75H@qnSmDS-#^b(;nBee4#j%b);qP=V1c}obM<ByL)Z@<$)ioemTIm
z^54YR!hb!_fP1VPOPE-gqg>2Mj`sLtcAk~>WR~CKJg3p#=PPp@f+t3$ai}DLJcocF
zFs!Vh<yqVhn7^(_+g+N~Z-~oE7*VzL>-J1?qH~wQ8~;j9a9Cdw<DrOTIF~+>@&RT^
zddBsNTugyhMRtd^L5McXjHmOwTyau#H~mZ!W<-3^F0Oi+4R2nmB$1cB$W~<5wfua3
z*lV`(Iw4uOwDd<M)ZJFX_U<?v)G5duw&60Z#e5vc7M@yTJjvKw9BFExTU1_dnOH9@
zK`$1kvEo&AEZ0$MRHda6mreb%OdNM(V*^!EVhq^3h`MMwfEFQ1LHxYOSwL7&rL5y%
z?>y1|5=BsnJhGyZ6bwR%_cW2R6&O$6*Xvf?UAJfb{k=h$e1Nk4o)&=TdR4L(C0TaV
znvEQ(Qcz&^FnZptO0l+_8%AB<SV~CFOu)*Vh-_+qrLpVP^mv@lsjvocK2kqAfAKfH
zPhi3+@c`G2YEZ+0A#0<Alzz2mveJC|qg!)$+B?$3dV2C{sTLmSgx5S<%amUqgWcC9
z@q>33m*E#L^*)@4>rPJ0l-x7GEfYH!J5RQjy?JG%r4VJu#Z%8%&6#){Hb&zbbozd*
zTwAjug4<wlomQxhL&dE|G=;Hqx+zj`vTUi!QpX^Lcs$_BYZ`ez{19lGp{)5%>1ijy
zX!y<9j=PJES<c@NpsP^s4XxbIciYQgK?MND>T*%MtGXUd^UGl?IvO%w_TJUwns)*v
zNX<$kOC2j-I(()u+Oyk2`!)6fMk<=mX|laPu+u|*cPWC)nt_R~Y;SL`C@!w;<x8tV
z3O7_`B~4quOtH<9as|KbkbAPV5s9-w-6)VA=R?%5{w9Dg)$qoGO`VOPc){PhQr(t5
zCohpoNm$eHvwb3=uyW`Bd6@|cVCe}2m9V(x4o`cWG|lK;@kkw3V!!M#?#8c8^w6-$
zP~DlEtaWy_9S=NMxgt$#HtLLLIF3UabS1q%ZN%wYUS9U}N%R;U_)<Q%r*_>W)`$9q
zvE8AC^(qP9>LP|7tVWuNR%{)v#V|3D1xBQFJ_x6Ul)$-Ve^5gOCIm`Yu=HBsC}!33
zE+Lh`Z;w|lT<%qAU2O*yg(Kni_s0a<Ud9fjNO*~u&RCF4N2qW7rmvTuL=_cTFxS92
zt3d-k^JUH_<XSEUB^MOi3O0-dXDMH;C4!du^^h~|{Wz&&#^b2A{%MQy?S|a;eoLPV
z4ik%sI5YApJ*A78xHZp`NfpmKuL0T{G2_+0QFlzf`8}k$rv%3#;I7gr?!@iG%|s?2
z%6>Tznf;gvV(d^TgP@)Y2k`sQNW>?V#g7Z;R%WF9ItmhJEtwWKQd`juy|L+0I>)y0
zYl@Pykh{7$WzXxWf{Z$z62I~L(?R+HBISr19uERDC3;JjmTo&HXrWv>+=ErM%|*<U
z_0|%~B|$9pWyPE6n1splPv*t8w>9z`3OPb@L3x1b_7<7-=*^@2uX#K+bWQ8u5Aqi+
z0}|_XQGHcyGkQOqCfbWk<Ko`VvMTks5_Kmua2c5$e^|P@_t;AuFp2Kn7mpPh9n4a%
zkZ-^+0o<X0x0O(#1`D%3ZRMKxvnzIH-HX-voXJyRkmKsa2#0}38$fePpp+}Dg_(sE
z6@mnVw(-@8ebmK+c+O~^Bb~e(4IV7g4kkaWuoPsFb!onjwiaSLulT3Pe;0RyGYs`a
z628<_(lD1-R=N|>V4RH6S7eomhvbix^BwrU|5&Fm@68T^sOoKMYjdB5ABHeD*GHcg
ziLQ@VPqBE+<_Tk59ZlT4T4yJ|mcE+xtZ4U_I}KXJ$H0ug(fEvJ`c`+;L*AQEy~~)R
zCB&JVNFX%L&4tp-jc{);G8F617Bz6&!S?Fl`om+~6Mm~pO1-h3wD2~;sF`iujzgJU
zHg;S-HV5uo7xNQgVE84#+KRTe_dkETGU3O25g(s?vJ`d`ow77tQ2fKO?m5~G^^2yu
z-iopQ2h0x6aL89yQzN>|H6gf{r!VeMwjo!r=XgRB3O6Cq)8X|oCQ%-F7BDuoE1vAB
z#U4Lc3(l$#E#y12n4T`OQ%q^)6F9d5(uY01;lRt#Fg;T&f6(%jd9F(|_N`ruv-sa?
z*B>4YPY52zuVm!ApPW2$PG`TMC9JMTf)}$a3X2ZHW(vdK2|pDIh`a>pZf3MlwB3u$
zyk`=xit39q2&jlVa_`^K0txE=()4m+eUAvPd#!uW<C4ma?~v`)=+?G8kBIQ9OFs>~
z!3s&ILoc5t*Dr?953!3i@*XohyrVQaBx&Kcq80ms-iO_UP%O7Og`I_JVp)bkE6}Vj
z1WTHh`9<ruOKbJ(<UTk(P}l2336dA;4^x~|)u<m{5fXulEg5$6*}v?)?>}4C?Gj!Y
z3;UR%f3N;4JC_}xqvT5k$SrGpL2M<)LuH5mwBh6(j?f~wJ;^<5!3`6O-coh94K6#=
z7iV(H;!yBP!B|&VT;m&ET|I+@;&k)kg2F9;i^NQbnWv%Sh+H>wi3&R3yFe~#O?|zt
zDqLPzt&U3LiVidZ>HVNHS8M=z5$W^FD5U=NuSqGfz0}n~Is5d8T+G_Ief!#%<t16j
z)8%?!uDYw#R&#z8hqH9p;afs!SjJ6x!wyIZ%dgv<_OAM3iiPG*&K@tn?s>6TRW<aO
zv&y~KJl4oBrS6;<l+jcno*nEheo@V7>W(h$5Zv1;?a%u?n||8Z*Tcf)=A#bvbfXoU
zEaN^fGxL{V-|}VcdbjaV;!Orb|0`B2@ZO5{K$ZHTcpOTIb2PcD67KO1lVV1tP`~H3
zmrvK)cFhFWzSOc$c{}C(`B$&d@47|n((xgJn%F%r+rg@oAi>JYb>E-FV0)73x$!6)
zZR+^kF+rj;(v6Hby~+s`Ur<v;3GtGA1>8)vf^{J%&!QzH?||p+f>}7P)y{q6`pI%X
z^VP!YzF6nLa?!-S@TP*tk;u7H@vhHpDV<q$pw2c=vWj%&$<D}`Ijznrf<BaH!j@Rq
z#SB7EBIy3ra^KZVIlu*A%RKm}QgaU+f@UoZHtTDAcy@nb120s<L-W|n?a{T{dOQfg
zTn>5yoT)jnxu<j3cb;qN1vMCl`r+Vi!gseI%&$!)1^S7yyk?%-S+|<!Dj5}KezH67
ze&Jk<r4_E{CG!kt!;^fQK!^jo!-%xO5$h7|tM<5P)@Rq6)x_L(Sou2nLE(U8EXkUc
zKfUZ7eG2U>5@Zklb@^LPw>H3;EWtKQ#Q-J86y1)tD|@tcamTDQ<;#klL3hl^lE<Wz
zSxvH)sNL6mjjSGh(A%gq)8adE;$hCtZssJ;k<p}`G;~!c4aW1lV$hqYv@!p(NmO1~
zjy=gzL|b^Obc<aX{J@6y*m!zB|G`*cQAf~mu0&7)b<=g8nCR3^&lqKEu0o`N_=LbY
zNFw?weq-;&OCL9I7d5S{zcO(>asf|?NWaEI<@cSxC97D)_h^?%em2c{%{|h#al+t;
zt>zL%mpnuQOhi=o{i?;;B)o=xYzClgY~#^Sa=QI?I;&?}dojvi<&biQz34nG9t!SZ
zWr48R+FeMP?2^<MKP<G9A)Un<FX|{}cZ|L;B{hz7jF6e#+~rzmircwZK^y(TC*rq}
zb3B@iofM30tQd^!FP|HiNlf{2r*ip(LYUfC<+n8qSJY&%cVCMxX21JOqtJ@x#98cp
z|9*a1KG#FNj4qD0mj)_2_9;e~4wM<W>_o>Y?Zm|CGL)_$tHzr~)=M|NU(pm*+HNMY
z+tc1JW@2$*TE)Itvwqu#j`EAy$|S&Gq~9)_BSesotu|I<$zFVgc3j{~k`}xI-y2^c
zH{ecoOkBp5kVtf4U>tk-5vX@jdF%Z{EBUtv`|lL<UmQUe%Ri*uh@AER4{7%S01lzM
z)xh&_Tl{~L<v$7lhkR0ab3}ymZ=wF*#Ot4l4e*Nq6;Qh)4K$$sE1v$Jj(bW69P*6)
z=lTC|o&TJZE)<w02Q?Lj{o8W;Z^rO{pXhD`aL9MaTd)833jX`9N#%iWPmrC%wEnFU
z{pbC#;C)g64jByjDe=GE56Cx&4fy(kwB3#Q|NTVIfVwKDrQF-pze&J<U%`L9MN0M$
zCgs0rEB|>vAm8tQ0K@|6KmT3U|Ie>f_?Gsk!1>^^y7GTN(I9ZhbGla}|CI7b6%9Q+
zCMS#FiS)NQ3#s#TwJV<gpt-IquQJ-(A+^h)E8@UqOimshk1lb7ZYa(?Ib%{XcNmRd
zFNutd6mJ;nAg@57Y&@)ogi*Fj>5lojWf2aY(76Pkg28T(lV<h-_sADy!4g-@#&HJ6
zWexuqtDixHHA|@cvifB)PP}^fn_qu;emXPin<>xv|L~G6$0`_8oOSL@F4yvJSUj4%
z)Bd!r|Fsb}f;&7d@%H4z)G*CN_g#PG@U&!!p!3T3-ldy;)q~?%^s?-IG`vdNxqJX8
zvq{wTe&Xn&T!!0r3@{ePH&(ou*-D5?JGBOwXwP@8aF~94_}lnJK6vS;@0;K3eM5LT
zkINUnB?n_{O6S=Ee3+7RSds-&y-R*4!Yla2^*KyA9+32k%=;4tjHlpqAy2kK^!2vo
zs@PR6KcAK_eD~1N^OWkBacVRQHqUJOd0@*SH8u6%VpcB%5&6M7tt(-}C)%zz`!k_`
ze4gmKxL2%WJ>>2-UdWHe_O^X^SCO?2j}5#E`%+WC%-E>)QEx?rIogP-wxx7Aee7Vg
zQBbl79_xVSoV6CNu$=ai?XB`&(QcCuZJQ_`8|ALB9Lt9V-BFKCiAc*uy_F6*9iXAB
z&)^e~!JMY{+0fz2DVk#<i`I2bNb*x)p)zvp?Jr>fRu<x_j)eS<sn>25u7ofptT^h<
zYb~6;o%Vxy4@%qC(C`9KWbdvcGEI&9lL96H<9j`FXy<Rs_3wi|UKQ0>n_7pJO7A{*
zLqzv{2S~zusSK72{Bkk9y~_!2?c8>wTmcvo=&25BF8<Y*UqQD+@9B^$jx+w`={h;q
znYr2G`Mb#cz1wV++H43#08f-YqzafOp-^Jx^5nOM)_A(!@yDL9#~p>UQm<53>%Q1~
z!HNqe`?4&317bN;3VOtI_seshyW$Hv#c#-Pt!I*tZCB{VVTk-!XrsVQLh9GVT?eRj
zWPaD#XQckpR2DukKMxa|goNFug_3t6wf%a=CZ;Clw5x1#t?_lZsq}C*%6O=?3ET9E
z{N#QTm1u_bmd{V@_tI!T!mD3OGC6x3l*OH>65Jg@)fdp#pOp?!N|EqpxOQu6r^V1{
znAyhDOudj*ayCvRsmEvz-{;NzPsGQ8Us?@^P<3@^je}xJ1MZc2?Y8zI9#26@nRnm2
zwbkrNaU{djOe<;{)c5TjgYC>XW1madFJ5ai$a>8`+1;vg*P7J<GGK#RXTiULC<lVu
ztq@~bx=l7bF_;7|DAde`YpL259vvTRrvBdC?yVV0A;y)XVx_y?G71WcEr6O9SC&R*
z=pTPWn3;{lYN!JUq0Z+^0KeG0<9MC%78_m{;|90fX7}@jyh40PdS&%$Jd_h4{E_Pd
z^Lb*=jkRMN)>u<_#MteUL0~kY7lzdMVdV`qHGSI3f$^vWUeh=c-|P0iGRC)guvEq1
zSW`7S`9-2~g(V=|Q94k6$Tb<{nBOiuI<x@I?}H~E<cX$|8*_?fcu}Y)Mp%lDe?#Q!
z7HAf0mIb!TOWwiVfmVocNeV2Z=RO|f_g(Z|6ywahGRPA5mN)(KgWu8MYNc8CG`U>t
zSh<Qv)TqOU1cIRCvp?JWKZTKnr*d|2q86d~wZ&EZK}d4V0=uy|VWh_$m4a=P)gbeU
zQn5RUciQ{HCkt#VEbDrUy(_FwtwQuADfR`0$HllNEuVq+QkChxOc?--CJE$xDYxiK
zta!{wAV4pEKx<%1Lm=INg927rON$k^{z1#ivNnbvuFoflzA8n%(k+i!FoB8*P~kR{
z(1PD;K}V!>la6H3dNI6nQm+sbXUR9B<E>f>Gc(ORMEFeto%@h`<1J}>rK3Vm<|J;9
z6X*$A_UV6N`&rW0(RA4S(LUx#Yc<W+n_iS}lUAr+Bed@&dlv8wg{%%-*HgLrUg|!0
z0LU0Bei0;&`TB#$gIUr`#KiG{SlUAQ%=_*x_evL|8kczP5SJirfT`2gSh?_uR-tmG
zURaYXmbQyemY^jHx5>S{@LGJdS|bky2V!uIdhuDH8$g{ds|vhFy-x^V9Co8--S;&=
zs@J(6hSf&5_xCu=ozaAXd=bp|KXg>G@~@6d)3;W*pA3f;YV`1X2b=p^^Q`kq(#v8z
zN%CFq(?Ihvf$GP+;Yth!x{eM$<HeSxDbg@=J;q7sHWc39-Y=2*RqiQiy*8FMUQcp9
z&NWt-`R*&VMLNj}*e>SMu&HETVsa>c{Bh77uaYN2({{ibn*VC+{+2tS5d6Ou?BpPZ
zl<u*YMN{T($X|oWlcShqdk(890z$&(CkhPCUq<CvU}{V(1^M~omzTBNJlyzuoL>&a
z>!v=eGtm&y@0a{m=4PBv?k>o0Ed40Gnr@X1pD^@kh#(;!FJk6<V59tf#0nf@yfHPE
z6b2#owafe!o9Q6hW$8iSDGcuz%S~1$^8Gm}aJ<%(1+O~&sN^#7A$rab;~+fC*@_SP
zGOBQ+Am5ds_tRuqXXis|R*@w0l<9eBMCK$qYlM~FFOJFPjo89FqtV!vEL@EHJ}tEd
zK$=b&$jn2JE={DE<d}N_W7^Hp1<%~}lC4V2J%(n3E@x-WhA>@|UjCBmeOru`a8QLU
zIZC~&*qY(gy087^Y-E0y7ZjCYNYaWL8Oj3E1a7h)<^K$U#J(Tt`evZSs_<6EACBhw
z#ea~i%klL|-8a=jlX7mzDqWMCCsQON{hG(ewGxj>lD?FuN2GX-oCmebD#&p&=76cr
z?;n;%ZBH~UUOna%heE9~I26K{!uBTSwUq`p-7?r`5o28vYNVKVo>}hh?rl$aWWt4K
zHJ|HrX;~F8o@_K_9i1$0?PrFuJ}`~vVxa6xanb6!#>K!o0NO)xino>OeGY(Q{G#LV
z`I!St?7(RCZkuXsTt3f>$@Qr+J%@tiBl|Zd7WvVIs#gP9dz6z+G`BEW;wIIr#@DOy
z8u{jkmeO2Tdzr1{cvH3W$9!v0cxl<YI39fx+Fa17sq-sS%z87hmUQnA`TXklc+Cz+
zO(du4E)hAEC)z{N@6L_<2d|wd<k^R~e`MOi?b=`LIGxCCwry^v@=4m*w5YTI|Mc4K
zsJQeUt0b<)3Vmk3_vzCEcQ6YPdDCs+Payg@h>0Yqh_l|G+%nt8W17i5+3rbn+xJjS
zxtxjN5EVh1r^00}HaAOYCFSoNe|giCTPUDcs3!RGUt9khQkpk)Dhht*SJG19Fdq@N
znzrv+(lXsi!u*urzyOQ&Kx-qRw>S4^J8lmYd$@>+Z@#b`t^~!UGJMBuKD`!$V)AdR
zltzHbn8#vz6__%k*yxOBriArOF{dboac8wJuX$%ENHt#*TPG(6Kbd(!HrMmy8<CoM
z8J;y#N3LLdw(1^KW-Rr7Bt0c0Ky7eyywq{~J6-<7r-J$)flcEdC^`HNMZj_`+YD>Y
z-Ys8WEQTGHOy%8{lcSYg+MH;xR-zNX^h_9rLVFU#In#-<NB9o2($k%(g@Qu4<lLPV
zzGD=Ph87=jkw+$odn4z#LQo;<;$Rp(GgR3WlhhawTC05ng-Yf;ITd&bsAnKsBLl@8
z$=46g-4-haEGP09v~pT|+H_R4^8z$fwSUaMC4KX+?a+f1k$!jl3wgT9(8REWo2Rz-
zM!xXc+St<<24)CrDY=%Jka}s)WP0eM6uOxd7yKuDHd#0E&Cz*5rS+U!<0uJb5<ex|
z%BoWHtRHIk$!+gpM$JfB*pIiuKuIAX?<;;d#(t+gh&7`~AD5HsWxqp|JYMF=L6*7H
zWv9$<-W_5(x4@$S8MUQNqARkwFyzXZE;ccb4EhT7(Mk|A(U+qFZaq*eP`Mlq*}7>L
z+>COz(NBEWmy}|wQ!nNKiR_`bB~jtVs1Mv=YodAN=d1ySG`GEYT6$;tj%U5a(lQSQ
zb=G#qvUjpIm4pn`t63UdvK&Ycl=hVG?dmAhHrutvT8u$WEZS4V<4+UHPf-H!<Mi0@
zG;zyP3Vm_QOmB^Ucd;G8##eEsCvsfoVs5T>2@=i@WYHCi*$UE!7uz*+w_>x06Dw?<
zDXOMCi+R`G=VrHwXG(nVj_CDBWVj;Prb@C0D%;KR-HKT$vMuIY{Vy!${r5fq>lgaL
zNYSstKF0j}hoKdP?aHUiUaUWhw6wv`T$A)fsgxcBCwD>fz1BY`byvlkDweM6bXlel
z{Ms&K^ev4HsTWRE$by)(Wk2L!$>v+&XbDWH`CPtf<+=YfJk7U4xb)rk%;N6uQ?2&?
z<s)k!u1<djVBu-=PPJRtsMEUc;!r5xu&ukvgkip$!};O|Cov?y1QR(&l*@L+(zw!~
z-`RmNtqE52(~t)3C7t0U0DE@Xe42=B7vh;nMk}ir$u#7E4}2Dv9u-jM(EZ&k0tsLn
z$sWk>{Ou+#xe(?hz5V4rVvcp0nF4j)(%A6^fkva*GD|fPL=GoTVL%RC?VZ38QTZiQ
zkxZc=hP~LtfXiGL<!YpjGPVExS}tEX)k4Y%(-x69cm^>sdE3@fn`f{40-X3T_Uh?+
zcUI?gIRahVF)dgeAD3fx<VgDTc<M_w!axMlWs%)ykT7vyxl42q8q=*P$1qXDo*YFA
zYl{q@-e+TMygWO&s6tvDCH(NsP>fpUJ47rtGcY}Cg?}~dMDj1WemwOocRGG!^XT*7
ze37Lin@shu{-MU>Ez!Xs8d=4bQ{m^2LZ6cM+xV4p<f}L3a^w&1{3Q6ho!1fE&7H0A
zk`?h;w@47o5LdRdi%Q-%CM>^mUvKN=Ij!;S&u=_cKY}mV<Kpm+GuX*HKZ9a;yL=MT
z$UY#KDrmj0UnKNHc@(8X0&<=l3b4dsw#6Z9E_Xk9rivs^+_b(Ir%_tQ>ViQ}GiPZH
zO%8RBeTi147b@Txu#NR5lo9?krlY{Q|ITM+F62QHQ%#~W@u0PpT#FODWiT9>B;qX)
zmB!Bgd#Rg7Hd~KIHt`jb+r-eKQI@@`mMj1+>Un7@_Bb^2+z6BKP|^6LuWl|kf>~5#
zr7npNZj~V7_L`sfRTmu#-Rdv3N)AR5BwKQLPSde)ahV{~8<h5=xe+T;%zo}aZK0ix
z6D`D;IQo5VMMa^d=hIgjm3%i_?ew*4ot(^f!Q_Ojw;>Qw7v%S7X;)=~qS_xdzsKtG
zOu7hvz`HvH>}IBhncQl!URZ5^in`97(=JsYeQHQ<C%OeI-!a@As}zfU*9{k243gZL
zsperEtKzen7_8-!(fOE{p)evQB$PLXqkd!Zcn-B?sk&HKJY{nj@X&I-JH(J_q;^RX
z>KV<c;)E&5R2p3Dj8W48ATMUC7LBj@p~@27j5Ww?)DPr<&deKphR~1^J$lStIn3bh
zNSorKl}=CT#2ZHP&rOj`;<0-u@yl}mJ*)*V8#SxxganGOrT<6#U@07obhgWkW=>Y&
z)X00P#vWa{T9B}kHS3}`^vGgzLoHinX-RTpv{03OA}dR{YuonGoSE>#@zG987Kn0?
zv0^s5jS%M*<rXxbnDCAC{oq{`U+jSG8N#DY`(iUt8Q$Fcm1cVq#gngF^@LlWY9Q2T
z$ZFV1?X4KgEt5$yMv<iB*4~Iom#xrg>2{6}DT-0Fn6mS(+Z7A`6~-L>(U$VzX_WV0
z<W$upWKH|N`nY&xldv?gVL}48PEFj>=C`&JUO?@R-04k>@e-_wjLeBX?Rm5J{-M(0
zqgpSp=Ehj5qzQcgP?)>W=U%OL!MwZg&wn;`iyL$0;z>sXYfjqbR&Vdu>Sj~u=l3Ij
zbE(bi-3{;*+Nt~P4c1p{^3@)2YO>bB+9+HsZstYxB(e?5)m%|R^7FrRvexF$7O}!7
zY6W|$%;dSOZAj;w`@~O7o5I9%q50)k6U<8HlPXEDco(>?3#;8!Ql?ARfJq{?ud~=b
z1)VHM1c2;?U%JwJlWat-=QvwM6M%EmiCpl1oO_3-!H2;5oC)sbFI@3^@ARb7!*ssz
zsoRgfxlR7H$*{+I%VQ^-u~>9<ibj@mPSCKrP`%9R+uyBF@FP*7s})Qnxw98o-&H%W
zzIEg-q;>Ot;8RclW}@7he@?JwJOJY>zUOqlC15@A*~t#Jk)eo5rnPgZm@Vr{WN4bK
zcHS5YQcf%_l_>8Fz!Yd^)!9v++YH5W>3a@MX!CkH3O1t9ljt$|ooPYqp?IT=q1vwu
z(74@DP$7*hJyBue<huJ&{iqbJ?3R@EpXW97q)Dmd9FTiu7ba>JVxj~LFHJFHWn0Ao
zC<^_n97n6S{}rlI2~-pVFukO?L#syS4vRgXpSvD4s94!Yz&7+jg@V>>sgsqRKh^>?
zxGbk2N^}tYT=lj9V07f(9=X=>L{DBYdxBr-Cu+;MI@@^jGL99`&3|gU&W+G6Rk!+P
zn19fpR(3uu2x%AlxfX!=pgCB{+1CFI_>Qhm3K0FbL9qn4dcpcT^%u5Eph8&>mt{Vu
zG*IDN&fr)-Yir&CDfHxe;{=M4QTTbaf~#J7`njT=AYyy!tn5T;v)caf^j>x(Bmbj_
zC`O;QiU?(sc9Lt35f0U4m3GyX=k06)my4Z4TGZ@{ksU;o?NRhG6Ef7z!5HwilGN+p
zIdn8P=suQtW7<Y6U&y(3O0vz_eo6a*6M$JC$<>i@W!wrkt>=4~<ZSe8VRb;z_q1Pb
zygeV~iJU%<;AX8w+PO(GhJQb@nMe=p(c?L@CtlC?O$XjRX*8+gGmP7$G<Z%UEANWd
zQPz}v`EuaWU3<`igc0Kh+~);yDL4k8-#^R6H3y!=3{jp}rI*IN+DBBjx;NWZlb-)R
z%`nKEtv$NF7s#C=$vN%Zm0q@ge9sb{gl;H5A5Hccyhuc4meWhTNUQ+l0}#@WG32~@
zU$<*BHw3NT9H89l<;IVq{(SyoEx!TJN)3?eR#NESEa)O|3Iw|Fw;DUCxAnjaKWhkV
z%>MN08e1v#S_*yTb(Aa+@(VhyeGbPyIL*tv={uqlw>vHq@EJW6c*N$X&{9Bg^I4?a
z<nJq=^OeIZYW=$J6E4%$55ztD7}xd)HNGz?E$i)18eT5A<YF>Yug>$!-d&BBJp}R2
zeOBX$P_5wB`pD$5yL~vdK>pocmSqtB_!tf!>K~N?s9?z7LMY&}A|`TDb@F|myOwJ=
zmtUp>KipOxJ^}g@5H^Nwxoc_&fI&u&9dmXv5y70rTz^_qX0*{eTzrCcj{P(kCwcPn
z{Ho7OM43j?wlSLR%kKL6G4u6)`C)3qQE6G>0YWB#0&h7$bMS1_<RrV{G=sNgWf^`j
z<veokGa@x2l`Hs?s8HS775mwMsL*#v!#^$S%Pt*B9qjQ0@E^VdsyFLmffrWAVMXh}
z5%-TUlRI|Le}lWuW@an7;X7k4)0y4}N~+%_ulHjt2Ln(YX9COBT~)LkK%StqA$hB5
z!>*n&0E3PqDjX;du%8dGUmI84QT4fwSaFajO&m~+z=%=Ts3%D{Lf73McvYIHirm&o
zjd6n*!931~1$cI|Xa4m8t`-2UCp6&S4OHI`wBfl-*Ad;nUibg+-{o(9*?p8yi9UJm
zn)!yPkOzEqDP$+lQyMpj((`bn@R>!)mz<CDPYkJ%&&FKCo+^LXutOyYdqC|T@AeWV
z4ju5;+4IqDeb972$Nrie?0)){Yq03~pSFqv9>v?}mw!%}{^5Lvnl2|m!@#0S-~Z3+
z_Wl3$dxiz@@Z>3lPW6cjfyW7gkJpRVQ7h>R+3h?PJz;pd!v4w1SZ<R$UWjuV<s@A#
z>X2|0{QU^@>qy7tJ7!idRsVELl-dPzIT(}rTvej%Ne`)??O;o_nbR8PT>sAl%Qbml
zcOXI~>cuFEG<tTD^U89*<%4DSS3b+dj%drVBHsoj_`TYK$Ut>w9CJWm6*B!%b=l?Y
zNiaEc%6;X8&wHcm8z*LGKyOikpLpg2k}LC?KiuY|MCZ-1F*h;&g|>(;Wd2Gi!A!-M
z-RdeYB$P=Z^}}sy#Yl!ulrkLKUC^Il%w@Jf;1A@)<#iTf0hz#<ZpMYCnhSG74;Z2c
z%PmSM^fBp~*05!V0L(686aJ9LJVs1KBZj_b4j;S6OWwBk&_IRp#baBiPxjZfC12Ju
zYfoo=u0v1M6<n8)RsDg-&U&RA)tO}VHB4((L-@%9dO~#%ONB5n$}T+BR_hJ?rmjKs
zhlR<(LHyF8&rkIwp%kMhS+#9Y!O@ZJs4Ck5AOQM^`PPn>aGQCq9hDd7E_*ynzcOi8
zUEZ(Xo61<LYG-<SV6GZ<u3}Mp`BqYBly_m*kLM=$!1D4T<}K$d@*FygXad_ib7sbN
zulw9AKRXn9oXppbZGQjweCedkQTs~k{}A=v(QH3%)NN6-2wJm75Y&h*sa3?PRipME
zRkf+TiXf?7#HKZ>trnrw-nCNHre^Fd_U6s^_n!B>=j3m3az4-JxzD}#xzFRK8keaL
zPoF+LSOIBfB(3&mr$6>h>6jZYoqR~E<q%XtJD)!PbK3sd^rdY_dYhX6kkdws=vS~m
zAH(6V!MEnParz6P<JZA!t!xmFg+-0)<J$-#@?kt+XQtZO7u$aA*!D7!*aEAu!zvs2
zHeZwJJ}1`a;%H-e%%4r)4^4$z@#Y+0^7M}?bL!Oz!cz&p{e(2H{!LGVn<uNC(}w4|
zf__X^?e0W5?(issCjxV~WZfzNmMg4|;9$2@6`3LLHm0VO=HURl+_+=bM>~^f&S}XO
zt=y*)f|iYt>gwth&$9h9{*dTum4@9aBd1>{Z=BmqtZMx5kGMzY{l9jFbh&}<o%ox6
zmwLZ8i}z%y4{!h!9w=s&I=hIgY#!?U>hd+mtVQsj(lT4VwUIe`QvX^21BKr-l06Es
zI(iul36nCjO2fU`j%Plbp~XhM{y@BeQuZFvPn=14rIj5x#y_(z6z@2gr{Q?-omzSo
zJ;h~424P$*x6h_Gr`M(dghyBC9x=7*TCcKZnabO{Rb%i8M%UQh1V1gthf@4BLznT0
z?49kp!#bB8eyQCI_9xvi%2F>*%PonVFrl6{yY2?xZG&cnkowk2XMHlWi3y@RWr&`8
zZM?^$e&?dcV+d2tgxq-?bU3VGpT3g*PundOSD*or>94C5X8&ThQJOsQ?8>sVY|HZ{
zLCDweY-N9>fImKhbU05oNXSXZY_WN*7Lms!9~zt`>hL^E()Hi(*WWa>*CXX2@+>Fw
zSF2JRvwrjaMmZvOD)no5L82SQp_{YJd<jGNi%3<Jlx%W2`Nk+DPj<;no%b4O;-GF!
zlz|is84;ol+H(*n!pN+~aGJ5`=^&I@{#Fl4DJ{6*v&=K$&nnvU)DV|@E%Nw3A7b=_
zro@bn$lR%_rCfQvUAANge}?H#%3o*bo=O5^96Vi)|9V^v_7|L!2|+u9&Rw#4WUqso
zQt(kcE#4D9%+hz5{(RY6WM^-DBxstt7v(HCAM)E5?{<}5Dyymzt2<pV%1(ByDDJO%
z)!*l9F?BRdFFHvArVTlTn0?w~DvrzFb)2-tBx&GN_*)kAPvZxex8NTqTf)Kuw|@LO
zxW-B`TppFk=ZbvFn|R{FG#n{AU+3)z8lKd$6aHRT^3!J^2U>T1^w&uA1u6JcFf7iJ
zIcm2r7QCvEA2bP3pKm%2V!|}%4Q^9RM{GxM+p&m9GI35BGSsr_O6ol-t8tx1?WCXc
z1+Bllf_GK+^*9s$zbt^<4!8DC&0ya_zm>T|>$j_aGN<lay3aC|Po35M*Pm;{2W0`4
zoc9(!49<t0{z(3EHT9DV7+j{Rog<TW$p2W{^U1kp(*2Ron$MRw=~LJ9mi9x|u!U%W
z9oSRfMSF@IM<E(Z;CqmY5a>Juq*9dmy3o_E;aO<$T{<VvCw<Uhf%aOvUu_+#iEF&<
zT+z-6NM>cXZ|b_csYu!bzgw((bIP_J$(i!*d+uPWd2iJ~880P4E79`c-1)Sig}=#P
zz`)X24@TN!*TkLzw5}=)X-BCtP5q|3(A5HN1c7}bNcMg!K;yJ{hCV-Y7J1T>LCd34
zQmF8p@ANfH>U{dt?Rf;QprnSuyo=c6r6kR>BMB9Ql}P5Bt*=@Y?87>YJNh6{82u3I
zG2|QT{u8dDBBZND$ioYdKc6^Nmrnf;XrDq@jUkK!fbb~u?sf9xQThSF<dBu8bIBhs
z9vY6jP9@)*pBoKlJuo{w1~@HO<y)r7J-(Lk{<j=QKR@*KsZKUiq+KHuk;)PI<2T*=
zv?U`*k5%i6pWL*T3MU+^>p!iDN!P2I8)+UfmmA3&J(v-|f7)XSuG-1LMGu%I&4=Hf
zI(Sw<z&Sp;#31z?V{o^5tX5;u0`pm<SU({6=6r3Ww7fY>LlGu>v0muZ`+<AvZsRzq
zvuBd#eJx{HoF@wMTn(I}qD$jK9CKYW?S>gZZB?5>0`Zpsv^%=Bw5!s8sBx+!y!pqS
z=)0>SE%{x$3YfTvw>uq74*hH|e?gt&TK7!RWv=o3!)p?T#dnWXQMB&1YI`gO1F{q+
z#jR8LD$JKVTZp`(r0R*_$qyEly*XPl`a$+Ri_l|o*6gPFQMeT4)3vL)puPUUTGXN2
zat6LvH0^gWZyZlp4W1MvyTGdz{fDZ0IpfmOTdwCO<T~&d1#)+oF7X!_LN9mDfA3Z_
zOgt%|0Wgs;(8`B(h(50E{yEk3I{}=~Tj<LPDjRdNbe0wJo3Z9>T(7?@YWdj|mp?Z}
z8Ti@VSBve8dEkP^8E5@HXrnm2(p7%~zcEzem=^%DyLUHOLWDR{cZn;`NnSeUDze&k
z5K!t7T|41M7(ahe(6s4*NBVL+{Ya6YnO?8w%YKS={l!~ii(ZOEOX|lxY&rW4u5{C=
zJ6gH1Pj8&$oy?RC@*U?FI4=XE;c5{fc2I%+Tm*U_$&=UP-;yUX4Ix(&zQD$?y~@8^
zW?h!#<YMgCPWI^BGh5QNuZC(M`BfBdQNQ)mx|ke`%dk^bg)wP)#5i-XJ2%#0qFZX*
zMUDB_&U3ci?Z9?<KDE+r)<)@BrXf3$3_<Cq!_LXE>Nj6xi76fKq;b1*w`0)1z-Ae{
z^$s?s5XY{U?v0!ZZ+GS<GUqH>B&@=$Qe*uq*UPt7Sy`7=?}+!+-<FwqaZQI^HLw-u
zHy*qK#glFLaJR?KSq6q^{qtM!*rZU5`I9-sN;tLS<hK0?@g-=hNh_dtwoLX?3~E>_
z?vwGbfmA3%mNVqd*umTGN}_ZBi`uO1#K&~MqAcg<e+q_Bms<o;*;l^E#eC?})FV<C
zb6oxT6LR4G!@QYGFiT2I%RT???=O{k|HOqr_Xf;-E{BiSul*cEe~bc>zp$QHdj^4G
zuU01;+~Tw4|M}r?==I2Br;c%pp@{}Ds4?(Ng<^>%A&#V-&uQq&WQhLPsyD!<V2_E&
zBswWFO^QH&vpy)yabacYuer3ib|UhT*K<a~=%j3&;5QD9LXTxmI?oT%LMohsKttQw
zq|zim3ost^w$zVNq|Y%=*P^xQqqNh(dFg)eqg;g=JZ26XZ|w&*LP+N?=T3+51OZrA
z$1|@_x+J$SJh*nNtikP!Z;qS3p-VnX-QROE*#Z;|%I+c6PT7O1lb}ThJd$>srMo)K
z-21ghBn(gMshH#7^f^ddK5(Frp0ME@29_N8<f3(X9{v@)qCyIu6a|dV`OO9JNY78`
zg*_F9TGqIjTx>haPxI`s#=$2r;Fg@w<5H`Y-jwyvKq9-jbE4m692|x}Ow*7mv^~uy
zj9JS5P528h(2JLyLP62%!-gr+lKmRlvaKHOvtAg%jRfi4o(%q{Z&ohxWfaG37SVHi
zTppI&o3Ao^43`L0z50$Pq!Rf&#?y_R?_(W;;ev2NJre_(Afqm=r@W_+fcNXHujtP8
zU4jbpO!ouuAj*0CyZZd?&8b+x$d~kp;t2Xc*djaK#+dO&LvuU+gb@+;w;RVGtgfzn
z;oBKm{`nurgAT1FJ3rBW2qt>d?}oO)D7ZF4*}japx_~jh{A%hI;2MvnU|SD@-MF#U
z_*wBNcD^~+Fsy<*q#_`wtXS<+cO*`+Gw1#Kmmku8B@$b|2tB=p3;Yr+atI;*uq0Lz
z05lUdke^GMEFF22B~~R%OFf$%fAuVmU1ToM-HyvzmCSYTJ?{NpY;7HnD%a4T6F#Tk
z2fv-B+Myd!Mn)xLTLOY-kovXf@QHHEAgPeGwH9@0zdaoU4bbGG<8&^$5P8+)+Yz%d
z%j+Gsmdv8C+yDeN92~ow<rsEum6<(KwjWNNnae|YyfIQ;f32Ss^RGBwt&>3a1ZfPK
zv{={XdQ7v6dOiO`;je&|s63*EL@IGF=tJH=t`DTWhwB7>#q+l_C5L(wUS%Xw$R(@T
z;wS`fvfgqYd!ri_O?k*cr@4FspJ`yN^L$&ZN<nIPPGKxm?DOZKU31iK(;;ext*2CF
zNXq@kSP9#!dp?6VO7w;IF`g)kKt&NC$&(PxB&(iodH>a+qiRRi-g)Hqzb1K*TDG74
zqKkLZkLkkDn21*XWW;%E^ev288}X&nN#RD&3?d~<*P!tJ!i>7;D{sY<mju@)1X8iM
z#XDh_)AP->unHOEDuu@r8PBD+bfP`i&Jmrxi!K&I7at)lQR0hlYu7NBX%|3w76dV&
zL&U0ag1X7DKPSMlST66z^UHX-Reo+MO?U@Xb<;uGr_C+n4n|8?ak1Rs^wpK*e_)Y+
zNDo*7L07!%S*+c14tY^P7%VALbf^=usSk}9)VElp;|tj^_s6d|Klil9K=cPTHfGN^
z^#`Op-&Hfm<3s_lFJ4{b&4KlD0;nF=7Uy3*tjV#cp&C>CJaUY&x)E)nPA)}ggkZ|j
zdPuHa6gxk+F?%LfITu(YJ=?wA)!R-!3=uk^05N+`T{j;5I&6IJ`Zht-`XOIm*+Z5i
z$##t(>qosj_5BA=S5OX<E~X~7vBADF(;;iQejr+P0O!PT^e}2Ggv|w>P8xX1OMmhm
zCbr>z+8o3(zCPL604x0)q@(+ih^Io4Oq*=A>~q+f)M9lGvDNl)Jj{QeG%h#l&xDY%
zHx;A2#e_(gNXA=m8>2L(_tD53#xL;nFXA^DL8*Uv;{MvSeYl*A4O7WK>T^4vkv&jn
zB+|I}y%s@a+=vQl259toB#2U5dU)V}`aaMum8(htlbA9^d*ar^4Zgs*$KGKa4VD2b
zY2WEH3dxs6AGeiUjy5e@1}%gWA1H}aLF35#lb-uaD8=fk@RNe=@nl0w9%pWne32k3
zYL-!hsJr`v9Kf0+n^QG$#oT}>=f8(2Ns1&UXxA9UYVPSAxP8+w(#YOcPY$$GO+7zg
zb{1o-UVG+9(TIJ$ipbSS+^y$}DRxrm)6A9OKve1nOcfTpqOi&Q089DX{^^aDn=>PY
z)NM?%Q-aaJj=~cpwU?`|Lrfy9^RFsJIH%mBi3uS>cF|4dLAk75%7cDU%%Wyk@Z0Co
z5ynAKn(CI5-FnR{_PT*wdcMCu7NS$A9izlyo5;WQQg3TTNxtS4l}MTdB0YYZzexCA
z)3ak}kC$cCSZ;5A)6W9zKYtPQp}PisAgh~tZT_5bu1cuAr<Z`oea0w15F*O}*DJhQ
zbHA0j?*A2rO8>SwQn_5Q&yZi(dvj{_2t%#>@Mb?fUvvIynD$&6mK%6`vU568J|B0y
zjs9*JU^HAzd#HzDA9>WD%Xm@CBTKCjdWjiGtFt+7`4*0O{jr7GQcXaor4NRr1vZ+0
z3Gr-Cq6S3)n@~bKQ-+>T8{c;f*eG%NJL;5ibuq4GetFWd&r)}A8c$={cWRIS|E>P)
zRL&$Ub<{0G@XMr-6w4@U>;n2cL4mNwG@1;n+_K_S+Pw12+h42aC^2+`2c?!F{II)a
z-AX<Xnm%II1=cQ0KP-=yaKMN9aIOSjZy&}}TlOu#Zg4y*X#w-(y>2i>elVuNc+Z*@
zJp0))COSz9X0RSi8h6QVmawrOS%{Cf$$q}vZ<mPIU`8zVJXVXrQ#`(H0Uq1eZx&f5
zRPOV}XxUKZx)%g-!s)+r;4Dc#P+?b^tubuDxHip4&hj~~NYZatG1I@?2ao-%LiS^=
z{v=b$o>v<=>$``sk-^hNI=$>KMyWv4Bn<U_i5;9x<%kuJSiA2-QnSAUTxeWq9NLhl
z&TUzT<O2(3IaHkZ`5T@dr271>F63XatczH7)R!n%Nh-?g-B3XIvQ$05WbzH80GysC
zuV2x)>T#DcJgGQ{FkESmH3`?7Br~ggOE17%X#M5Pel~IM=GS5D?4jj=Sj|@q{ztFq
zV>NO3XyM|8PK)>1K;jfrAAaX(Om(=D^kq^_uILd1WF(A*o<%CvSzXUje1#i{{bX=B
zg84JP20R8PHlIgzd(&Z7gp5cYCX1_mRY8yLoTtzA3>ik@XddXJ#!U)9*xD641RXxD
zp^V;vdqSV{tBpzKYwn`I6M3Orv(0Z6ENM)<^zJTxVowh}Zy4K1FaI%6^a2Ta;`6~>
zUGB-mJ<YoE1AERs)c0AvhOXs3BT(a9A96%lXeXXK#eO?O7ceHyM{Dk7>Z4^3d@fkV
zJcc>%OY-v4eF$g+W%YVB5E}^$0vufd>ISe-;guG8ICe1f+7Q;a(}Q6c%V)O{h)N~U
zu=>kA+pD#b#YNdWWQbbiXp+0_X{rkoJa$gazg<mneFC3YV^#5&_2t7pOm;;ST6Mc2
z=g6^9ohgO!LMx9(UIqM4jk?0rwJ6GSPX&LCoL`xzi9a@mr6RAqSkEunu0*eAsVx6E
zs0ZhhwnVSQB@D4<3&v4g4a@c>o9OQD$scbVtqg`f35$7s4W19<phcrhP!7o!J}lYk
z4X<p$N2{j3;oB7717oC;y{xDryp#nV<}wdOA6XW^`6%!FU)6!4P;9BMLE2KpQ?%mR
zq>d9KVlCO4o;@Tbk2YG*pBZPodq@+mv>m#Z<Jt3kmo!0otyCAHTM%wu1(QC@P5J$G
z^`nO+{3c~?6=$1XtzZUIGWK1S9!OS4APNtP46a9;)O3yoTO<y1DT&P}%kzMZNqS!0
z8D|>=847`(!Pt0@Beu{pY;1@=iRub;9K)5MWYuL(tAx*z<%*`~snvz-mX+LUFy^@2
zE9raZNK2vn4wTpDf6(iU!4?Y*=&ICFF_rICJw4MpFK;?Az1f!AC(P>DwKPaK#8~q*
zuBYbma><(A0|N~t-DWa)RuCi^fPljp@4=P9;PD7r$p@=ROU)xKE(F<k3b$z*R=xec
zx841o3Fpkc`ayB*C6MzZUrWDvK8P9XAlhAajlcOfi1}k39k22TOsS`QEmJG3P)(s_
zKqF#uGo0RxXSBb^&)qua6kxj4TZ++9;u6gpK}!#ss(3CY{3DBmL+b}gHJ^@)SYC|!
z5gOtPW;C6<{@<xXT!hi0d59|uUrO*=r4w$IMZ=2xzUEC(N(Z@0*hy8sL*qBF9%~ob
z#^RiCLaZswy0r#v28(~qmEl}X@u(eR+{#vHSECXJWJ*SM;hDRN(X)4*?g@er>-n?S
z!g>`&Is*IrzT_%osH4Os@<&blBMiNv?H>>(D@+YD#6>)MPi{RjZ_Sltr)*bR<3*=n
z$8Tr7sE!OIv*XlM77rOmG1nY#(wbuY>>4{S5aM>S7SDCsBqjM@DsndpjkGmg*YmWK
z^8$!9I8Ck{*-X>a5ty`Ch756hI?+0st6Vn_*x0vM#-Wn}JJK)FR2#9&eB7?2c&HSU
zSezSlQo^YqoI^TXgz!ee%1Y#~BTEhsRL)cSyhNAPRhO$Sw%o4;*2bUGU`EJnP~N8T
zteNWhUz7durCmn24p?OvlB4;QPf7fVnr$VpiMz2cU=uEb4o=bzmNY~N{PPp`6+wQH
zoB$J$6ueRwm<nE=lO8dWyY&!&=J*c@vzyGBH*lzOn)sUZNK7dHR6CNB_!r4rS)_9#
z2F1WK)aeo{_#(b1zq>8fk^SHuXu|Z57e6*V&+LITxM-6Gt1-xPzE$X^>DXIGG`^xo
z*`bi|Luvz*Ht>#eF-H@k{(3v@mlrEIa2v6bjA&9Z5$5rAA=RVv1t19-dB5S3FL(bi
zQ`g>Hs0H4(T&>8jHd=6J=~!^r<V!i@Qxm>5<Dye%Cm79^d|7(x6Uz_0`sL5B2Up}u
z)wh^~K8Eg=Gp&Q+^lQB%8~Ec2S;7GAh+F`aJI5%+BY~zQBIUPsmWyW~O9zLNqK7#|
z5dJ`f5hlluYJ`|OD3((Uq>_FqcAtYfHxJtBLV`d)He=XvqX|bSoYw=&q;*QlM|%BS
zirHFv@B58vw!H2^vn)fnm7;Kp!om1St-q6R7I+u(D{u5>T~)qsbJbvrnN~^n9*b#r
z+dDaNr$X?x=>_E~%bNP`aIwZAjKcERrj0Wg$fn5x`Qve?Fm#Qp<4K8G-3qd5FTYWx
zeap0B@y25?g8}GSjk(5+>g%kO49cAn?cSHhuCPWwW>9?HMi<UebHA;x48V1RzZ01j
z3#T`)pifXRT`!Li+v|HJpY$lI@tI1+W6J~^W}BWOisT>p<l_qzfCcvnMRs#4d>NDJ
zAV_>4xJ{`@Y8AYy8DCDGh552K&v0(zss`n<(Pe@^P@kx=QKJg%XnM7fg4^SGzmV^P
z^xX{PiF3y-z0LFFfKqvzy9p!$jPkj$;-a4%IgdEQ`3diRZ_lhu(jRbCrG6-E^T9n>
zFk?>;8)ct#N}Gp`%Y7(l=MpV(?{F8KT)J5pvUzbdqEiyX8pz8w(sz5G9Qzv&F5Ayu
zZlgpr-aZYoX@nDpkofhmLOjby!sSF&0xRyZ#T(O@eA%OZ<I$FYzMJ6rT@KdX!5I{u
z0rVi89*~H>w6IXqDKfahir%8lJocUjYc7@hR!$Hm*kl|T_-;5FE0w*8tmz3ujsjgI
z8#y~!O5zJvsjm~p<_gk-+kLK#NXxfgnCg_^8#PqBq<5a{;<YAB$U=MhlPL>V>WT%5
zMY1oA1PrjDiNkz4#)bG5_0o1Zw%=E;b{-68_m}JGgp+(zH0PT>s4tg2%w&1s;ADcl
z^N*P@v2#6)P4`*3s-8D&D(X%NyB2WDpPDhTOHU0$ocz|!G+EWlWhgw@n48|nspFW&
zQZ0QNNTw#9Wp3#8JXii!cL2O<3cm660kv$uP^Y#((ByEqIdaa|sagtNeyBipeW+tO
zfMHbTO!KA|^eqow6+2zwF3^u;U`pfB0xYte|L7am4zU*It*6elH{n#=XjYq?=k4ce
zq*eotxtTqcmjytl*9k@5Cso1!dKu}49RzWty?-sGx0~D(^(y^E?=@+JM)vx%${VA3
zlk^t;wScgLPiY&UUM9bTcqmK3WUT{Kf@A*DoS%d)Kf62)JO1%=zr%u&IDwh*B30FO
z#Z^NTb?DPU^^Ow)WdS(({)QFx-GU~Jg9L0`qeZ;0@$=@7(Pv?xMrtz9G7IxSq&k!1
zMzShv?*I)?1B}w+8Kl!CD=0B#D>p?4GRNX(&s6E+3AxN+Nk}}@ylH}%<<uRBC)=$+
zz?4b7cd!*luhLa~Bzlh(|9ma!{TAr&*=(Mj@!g;4^@pMFJmGZ<rB_l0q~H(&;);_c
zwp)lZ^3Yiip(&hsAWh+w1TFV)7<L#YHtVA4ZcXsU8vKlFj;a%diUUS&S!`;>(4+H2
z<-hM5@=UyNt0Dzon}g_j8uYAESay80{N1Z5UbdGGQMS@qa5jeSorZ#SmaW^D_2$`C
zv8{d{t*mVsEyz7hNq`!OX;_s7E>ie%$2}~&h7e8WTv6<PEG1K^kf5LEH#|)OK7FVD
zO^wq>@~)43t>eO6kuh@;JA(4~<Z+Hu71FjXxa?W%4f8j6`u;w?WjKwupfR;kajJBT
zVb<g#HeWvyYu-ewhLCVxO!(bI%U<_=-jFBcA6mP3)EjQE_yUq>p&#uR;^G#CbL8ng
zrndYqRqntiwU{*uH~eVv-@lG7ra=phS^OIryhiMB{_)X`5h5wPMuRh=L?p&Y2cE9h
zR+&<GIeGnqYPLIAZ21wzU+JJi@R4*7A;CbnLKtUzu2q566jwL!&m?)WZoEA`OB#J}
zCA7j|+ghh+G_9UdE;kn8m^hX{_*<^M@=}3WO~*l+s*TEdTfmn3eyq;AjGP6!ZI^t<
zj3wh?@0Q#!>-;RjpnXf_=Y+@Z3Q2jiQrQ{cE_d=3UMassTHwlH{^~gi)EAmbGWoGr
zFA8$rAC9G!ztKu~6DUDbkPkidOr^iKORgis(7-&0I&?s;auoO)5(gYK(OdSzp4$~C
z3-P;KeaH)4Zf>NbX(J3%`{E~u$fb*vNj@#*8V9dgg0WHJ0Z$RU6R==_b_}mLtly7w
zO14s&&I};csWkLC?D*Kxn=acS{9lt;!T3#nSg>3Z&2dU?b5htrRIl9$Ps{0)rn!lt
zaltGl>wDY@`-59Pgy<T_8-aMP9e}K4P+-u-Dm~kv26GG%V+<V-U!XAKDWby>g=Z$(
zh-XhUER}Oz5hpE7MIehwr%Dna6@Z8DYDuB5KQWgz_BFwW?c=enkwmLNSxK37GH<~a
zjL6B19hJS_Pgr!?eB;)hoy~Xd>)X@YjeI+TcL}lb^z9hRl>CHT$>gsnBoLrHj3lg*
z8R;VPz5I!B<S+w2(vvrMaHRj>h#s$JSR*t2KJ9|6L90361x0L@46-LZC!xkH+=O)9
z;{&fl*E-pmsFgu_ou@2R12V))i>BI0o-wuiTq!(nbHuscp`+~vGyT2~CU}M-S@qrA
zNx=hY_}E7()dbpRNDkYvxcb=m0c=R3I!)=dS3Bd8MXAFVYRepV{F|5t`(?{ayQZWG
zP9QLtj(jYW)ziv!@UruPfagCf?A9}NBeA2bakzzqP$S;DpG%95QFRKP<Ga>g>a{RI
zsKr=uN375DPl^@-=M^%s056TXe6LUCm?y&-AuGGb&qxM0${a<z?%Leskv<xxBPH}}
z25T@)u@Mq{X!n%s$m-4Lk<W+(OOl!xlK7ucSWd}HD%X*SsUK-Am`|K<zfa$4Wtb)*
z@VMK72VZ1{nr~;>T$r=Tf0ZrGg**D-9%sM#@TUwN7Gg6o>d8xONuq-(UZ;CSohiI(
zNngF~KJ)_kg1QK_(L;2-%5b8_hE}d9U|GZKjeMGI9PKn51ysrO#T5R^cX$cz%YL^}
zeOyQ(Nkyus_I?gOh(2k@Kz@{US^JN%`o@NMTlr_SY6sQ6=#dyoLB!%m0FFkOE7~L;
z^6Wjw-(!w&Zj5?7bJTayntku1D9@TR-7ev^hhcFKA^~fM-R9l<7Y`DwKZMw&SZhOZ
z#$8j2Umg}T^XP4wUSvJ6&mJuvas%RQP)7ze=n(?Z)AYc49_ysJK8DRuUCG<jT?9$x
zVA##!d9IaFZT!{J|8J;xJq$x52Tg<ZsTs`GivOYMh(|MHW6|(EY5B{3Zp;BS&!DVt
z*o6T#(2sBk<t?b(5lY|5aBrn}g0oZ9ch)%-d|%<DE@lt8URLMSHOiN{{iKC6X8G+0
z>RF+vcrRHveI)z*SboTLrtvED*tQ7Ju}~elHK19cj=H(XI*w1*=s}eeJ9(=v^Hg23
z$+A1#T$suCuhCUv)cs(~8HjpEwkG*mnw?6Qs)`<N)p07zV2OV}L3`W&5MT-kkWBZG
zKJ3heT9;}~tx_>nA_YhDm{(7u^C6Hb+{i5uL#C`bh200=VpRjWd(G?4sP=y@j{n{W
zpUhb}RA2(;y`SO5D&O`|Tb#(>THPjb-V0G(*G`>nG#LS}>Y1?yK1_=?c$oR>kRV`=
zq!D$p4BiaGGqA=4*LX3BCHrlVl<uN{2bU%Vl$FKY-q>?oYa3FN!<izO@FVEu95*Ec
zF@{SA$}&HHz3Z0=TQca?v5DwW$KuZ73oQ{818H6|=%w%8qp|vfLmc=g6c0XQS=dsj
zd?c`cg;ER?vekKP<TaVzE4kZZy-Ss)$K20qd!0@yA3AmRU{pO$YlKv#Pm3Qj8<v;=
zbQ?rjoS<TtijXehdjyt8uA;94$cO1vAXqi_kZoni6pE)6sm|P#y24U%KP=X+ozgjh
zTi5_W;Q*|oeuW|fJ~7|okv~@ljcHy$@bRx1lAebR>fxjWG={U-A`>`$aOUeTB|OI<
z$IVX<K$y*l;4OZ}Z8*JbJE?Sg&4z~W9hFJIX%i_+?iK;&&M{R(NtpGsd~}eS{&KS2
z6j^r#5AZ?i*F9<yT$f=6B2%WFrr=#g5D2ZtGoehGVf_BpJA!!&F!tqkHEDSu=OzMg
zKaot4O|hTgrJcm1>F9gd-wEvd@tzfiU4o|#&8s7ojuo%;++6G?CRH=US1a^EI~B|B
z3{esg&+mJa(p*uYaPI4PcHuH~Q1i$H?tb|N!(9Bt+*mArf)F*7!jl44*q&iXt>g5R
zCRI6g`EPfRAJ6@V+E<k4B~|=~c(RG8JR*O7);G3IiBoqWrNHSNHN*sXEHj+ST9pkY
zMks`|gP;jbHdL_fbaaf?p|k)xN{yq4L14rEo>E!(-x$(iTE4Wf+P*MheHXTzM`74E
z@boRt%1JB#S4$ghk>n>?blK~W46cMAQC3Sq%K5esufmgZ8cUNOQaAG}B;e@LqB;Ap
zP6Q^VN#kEr@cxyWXsBNx1ocUxFAdlTi@L@bH#??FL#vtYa!94H7|4gL^dJ42KmYyP
zA-E4kPu?4eUoA#`eArG7JvrENKJe;#+|WSb`Zd-eq9E?Gc2)*wZ{O+MU=B1JS$uou
zCm;8id%h=(Q%Vj0{&!`dg%4LH&gb7;-mYq-C&|>cp6M7&)T_yW6*uV7BX)%|XcwCc
zyw9u;vxx#{ru)768N9a_c81BZZrV52Rl}!J0#)mgm0Ln6tV1pgK9P;?Op%LSpALHn
zpD|M8$^6SWQmxXG2~T$@vPxV&1n#4{MTcpSC6p9fQ|wK1h`{TZmUCZf9g7sI7LG>i
z4w@;)g8ZE`<03|Qdh={$6X(VrUV&QWE-Y?Qt~Vh=##zX?zcOX8&*p9z`Nw%~3*+ib
zdu10<R$N$Yc--{n<L&=AB{d?#q|*cOq>k3ig;bA4Xb&h9@g(8b3`vd;CH3@g=%S{_
zQ^?^qX$exy@t#ResLn6wTM!A01Zg_d7!=(jnQ}KpXMlA22P=z2?`rJQa4t^KfVYK*
zPp3{6U_kG>D30n8bUl1Bp_gz##sMtQ%B@Cw%4~0#N*&||ex1j&K9GO-$I!ZS+59$8
zsx9*FHNS1NlJ=U~-G(X81RE-oE`U_{axKk3c`uuJ77JuhByas`S2eyd8Ri2RKo2}#
zdts%og@!4hB@~nR(OR=!E`p%!+K^E4Ck9ry@Z-vGE;n{rbm}i_3X!YAjT3)kouO4P
z{%dEJF77G3K)^y4zRH^w4q87z;fqW4)Ee2R(Aq&Ahn(R%0f@Z0_vDGHRaQ}EMmzo{
zVX-2vGEw*ey-u{Ny~YvR3-BwxMz?Nrf#}yZtqkxx6Z$^ecB$8-po24&OIqjAfIe&R
z5P?fW$)j!<)#?;ZFR{6G`UQJqQYnJK_g!sEy!#yH?DZAweOvBL3`ZxgW~J^0k^0@l
zKF_%Q#Qs2R6up;xySUyThE0ElD!LgTYoe)@V6Ld1$BW_jKD=|Crdg8kjLWgx6b$UH
zB`%d!N2763!QSqz4{17&<Hm%^{8&wEdGM?8MgQ#-953xnhO4xbC-=PCpnnQ4Jn)*|
zG=etAStQt1#qnK4x!N8ckps!@cFr+W#i4^muD_T|wsky`#Ow!)thDBMlYQzf`${f-
zPoqa@`RNSJ#J(5B_pP9snugY&o&%nJel7t2MdFHFBfOM*7=`mnki-wKt-zuC^)C$f
znXkK0hw?L#n;x8cq~***mK}BJoQ-!@v%LJ3fd@GqTV-=AIGX+=`J32zjK&Q$N&Gw5
zc+VF6-9^joes?+-PYVn7IG9@PLp`U6uWECN%K5L`#nTbCF1M5q%YMX`zH*!*S5{p<
zdADO*&;t^*VxWe<Q+E+*vJpQbOFoh035J4sy7<p^Zj3i9v!{Bm`v9YoZ1soo{poC-
zfNzia2js`GWV=6=EtMDt=p4=PT7+?xS@D&@?C*nKsR_5Zo(d{O@ZPesB&(fzVeu!L
z2~55UUS&6_yl|ZN2LY>5YgZQBJega6p$h&cro5X!)JjRg6H`qsVp~Vm2;s=|DzrHo
zaifU0i2CHQ0jxCW2ND_`f7t`I=b)#`Y2U)bi^6Xd{p(uZ6D*3EwQ?LRj(Sx<wm_>O
zvm9g>{3Hj5hnlqWz&<o#M3tLp?}jN$O4)(<3~Yy3{!GF5Ej4M5P>ZKIWD(BUnR#<_
z+LF&h(!8bZ?|B9}k|pJdSz6sFuKz;p_{VtjE4ygyVW9;JAML$_!ix;y=ey?rc5)1R
zUvM<8C$eHPtnj^rjTV{`3gM+yvd6nRL=bmUpxv3)D4szOA&YskHOK*W>(vRJ>ZB2a
zGbnsM{~<GLSR)s6H$^Rl+Fzp0U$loz_n`+>70Y#3@28+HPf#?@uq++?7AxP)uRm)}
zQ1;j{;6usw%8j#3Nm@Sfe_RpR_lNZO`dCqH6Q3@%8vm&r4Y`VS@3p(_`G4mPPs<NT
zygnu4VjS0EpTjYVSx>0Sjt<x4PV3AK`8rMuL>I=Yt$!rr^c;PAmWSNq+vh5sKsCZK
z;=1lB%993?L7(H*Xlqpx&_n;0nsHMiAskBKxM8dK(+ae{yuV|2oJo(+5--KNH=)eI
z9RObM{TX{F5(6BNs*}1o|IQYVu88>VptC$~Yqc;Y(dX`=Xx(!h*CDJ*hK&*qCoopd
zI^l8=Y4j&)m28&^Dt%mG)up`SNIX@e=nuV*T?tnxRlc5@4A1K*1!xExcr4F`P_gxR
zcRrYv`UfZ~6nTJ(OGyCVlkd@m@n80oM-oV4V!?)?k&n*~WQW;Q%&l4ue!(sSdSGPO
z6^4`hsJOIQB47HL+cj*sU3HZjcjJ4I(CtmTwAqN2?5*!bRmq;_?Fq($k3%TzXeEsC
z(c>wJ>6R-I`mlho%eJGv8|)Ze&}EVQ^;Ms^-E(>o&;56x;B_R<7Q&Tg#gZ(PsM@}t
zN0R2{RQGF}4gpEFD%BOD$2ySChWH6;+^*_`f_aktWXpk2b$@|2C0mXHCcmWye09#|
z-%9%K2Z?zp?KEZtvj&KQT5sg9epx*aqaIQb8uHKelC4AET;zwLLTL!IAK$?YMB~97
zH5Y2vp?!;4!T<PKoU!TalCH3;A&rgvys$b0j+W_%ha$RW{ON1(ouku%%j{u1&=owN
z;q`hM!iR$Y>wN(?_k+^H=_|LZjW_x9c01H==6S=;X6zI)WRnixO(`dfr{F#;y`NKl
zQ%!u%ZCcU5-gsjKH(IvhAAa6mYObVRb!um_WVYuT=TNbyI%?sfzy`DTv*9}Cxqff|
z^Uu+^acINawj9JwR&vULpM1%Ug~VSriN97PU_5L3a_=`_KS5LY>!P@4fsDFcscf5|
zP6>24VPBdjE^?GNM+6pG%*b-7qDLOU4o3LtlxX}UB97IEL7bu;wVO(OilnjJHdQ4H
zvPe?+)AQNoJ7}0DU9v@wgzJP*@+(v*$rhNh3HgmDhvgZiS*bmKygbr8jry`!(ZO^L
zysvq61a_P`1zkqr3WB;h_>TC@vqotXnoF8kJTZ92np`(3jy+yCqT*FuAum$#1;>3R
z9v@J0#lAhYC4!GZMUkC;p-_!AWs#|mMnS*AEL3&!>6~n2s>ki$wndK{EbZK-DW1sv
zomb(A`$TmN*glUFS5`#y4HM(AlPZ<8sF^(yAaspv;E1+8)<Wz&hNwVu2!8S5+S*x@
z!eXKt_NYQ4elbI3dQ#25t)N%>ax*ago>dgJuYBrOTiRu>EWGEPvu`o%Z)NfJPdsnc
zFl&cra-aF59giN^T|8^)NW2-cs^}_vcuz5(y>THXH(Y5sQbhe$g6#6NgY8C`HvJ-Y
zC-Px;70>*|_%G3+1u3qW`ANA9E*DOhig;mVGAvQ{rgN}?p-%frn*@zg(-<SV?=#x9
zYt74QDBLqtBZ(Ea+U$Aj|9bR4VKqIpP>1ky^Zt{ID7K}z%Si^sIKK-+HqM+gr!J|X
z6C!uz(<q#1*;BUjAMWu=|IIFk3}5HZ-g<!kjgr?KRUO2K`x=aQ7g1XZQ_;o`S)IQl
zzpbNRpdFuO{`ay-3J-JZc_xkQL@inyDywr_zs;Y;5gmpu4RVlS4MN;uZ{QR0ugkGB
zc_iTTkD5n2A5Pa4W&}uqtARy4?Xk(M%mK2g@zf?YxD=>HSq$!?Ts{;^YfqDj2~ke+
zMSZ#c%_d8aIc05jq1~Q2{WTxLL8}x5yeQd*Pm;A`sws&!j&DQuq9%0@($h!Po1b75
z1&ywbWc^?U6XQpQFsJLYVkx=g7gm;{&{~0}Ej|V5c77iJMBdNNTDUpQc5?L#`D;x1
za%gn%2cGZfHoVuy)?OzcO5eLBAJ<PdZg2ZnR6qJf-p|9ehP=1p<6~?43cGz!o-jP0
zGn4iT_SVjB_vdc+L`&)Yi`e@Y<X8tBz3xhG)$gH2YmUdkgHECx0+bQzsU-tI@?c*U
z$B4+^Q*LxAPqm3vr$!XuMxI^N7C8cYERG2;GmrREQXO>_Zvc<}s~=6Pf{i>vtPLrN
zUYt^S^S^fWgP*x6ut`Q*f`P_Lh(_mmf^NQOc#pjJx%}~B#)ByC_#Axz0i4sdlEe`d
zC2ZUyT%_#Rj@biQ=XkEs(F_+QSGm%dpoHn#G0-B<fJoB$5gqwlw8h24-d3cFJv)Gj
z6s&8^5(581LJWfePKhGIITPa|2UT<_WinHFr;SV8cIgNFPM4SmUB}kiwEc(Bq$pC^
z_BPqU!Q)>+jN_VT3+0m%A*Eq6F`z^j_78o-U|PR5+7!N;PRzaw-Jhoe%jiiaV_OXy
zB{+G|2=9RV&-mXb=*Y5g_G&oE`8Y2Q_@RW_kUQ|D*`x%6y<_#ra*~#}po0_tcJ|qj
zLfr%t#{FdNe}#m267q4dsUv@HijU!S&H{bA20Yy}Mwa)woJyVXQb0_}pd#v`JQ?v$
z-mY-oyh^}t^!9hzc|XJSYi7LcJ<0AuTTsA*#uRua(V5-X00vXD?@FAeU6SS{*`WFX
z^RkRo6x7{6P;GeR0=9|1w)u7BjJCrqdlw=k$9{FmCz}O}6iH6MBq@*JP9E+7W(W&0
zRlz7Kc|73ncyRB79b(U%H$PH@W_iBov_XCY!_yD@Al)ZE^v1X(($MPu5WWBErgE0n
zC0lMnWr<gBOnN`5RkkY{MQj~vS2)XDX0;vgRmpvxA3J6iZ?SsT3~G$-E_+9N@6PFb
zh{nal{FPz?YQwU6i=(mmk{n>^{#&&5F+FD^>|s1In*n`t?AQ?Z`qcTnfxmsL1b{t$
z1@r&yTVGON<A!$%I(+>cY)Vq^e!ZNg@r|=xqu`X-j*(rFnuC*ULlr%$S8%Lyt_X7s
zIj^FMx_PxWqZi+D9*3(mAFPy3cAls##NrVZ!-%)S8x9relgDb)zRGg(?9YGgPUhD5
zbZRSIJ{=h{UVY=?N>?;{^fl!`R8Kl~?h!_Ptv_#^Gjqb<^4eU&qw0UXMu!60imwzB
z50xZRP+*R6g0CmFW-C*=xYu{6Eyy&FPV#+k;SBWvmc_fm9J8DlX^0ZPh#wi$J!Fna
ztetP7wgbiBYsEp-vCdYfKxPHVm*mdE<*FOKg_r}f2<d#*qJ-Y!xtl*6jgZVAIV_Y9
z@%*X#!Qck>MS)D)XR8DsPxvt@4O!hLQZ&4pM*X#Ik0&>adB}K(dSMS!LeoBx4H<D~
zifapBp(eX^60JK8Qe2Gh#Z8KcjZ!6tf_Y>|e52rEGjB2rh`6}%pn>$>+6-4k5+wpK
zDT?-Rv-(f@KT^*mK}!+wxMb0PZ?i457&+YyV;CB&K&1XGLQg)s?sW698YZz*<ElMj
z&NcwSSAHp$r8n<3(|x681!YzwQiMa{YK824n*U~)Lme-zY1)2|qn-Yh<$9QIS3iYz
z!zY)M1b12EC;f9@g|OoNIiZf}ap^=xI0C<BXD-c+hkW+taH(Zb<#z!mfs_-`lgyv7
zI7P{I{Tc$pNv4`_0#5d-$t)|sY>lj2&lcNWF!GRNUm_sJ0{%O5dp*?Mv_97KHpBj;
zC9v%4u4cS}y|P~J(sbKLt|IF8!J~GKBW~t*>=A5|&s#c@T0-3DLM{{qjE<>QTK+->
zhNSZo7;f?RM)RocE-YKx%jjt^##;(0&ZSCdb-ccD>hfSwQ(T-6U%bqq(HM(Op-sw$
z;Bv3TRJ#R4u5IC2fE=v@a|!eG1G_HA6To=fuYcRdJ0M(HXqWjZ$z!I&|7_!{cC-Ay
z^ZR+syTkBHXq3grZ=YMyT29c&`pUx7c|X&KUTP=2S2U(p?};Ivyy?#mhK6vWaPcIS
z4;Yw#$0Knc__xmyMU~4hZup1I+R57_n_bPdzk$DLmX+*2`<3HqCIG(D7HGS|#-<C!
z_d*+iQt2ysUj8PVr~mB%o&qN(f|!LI&?^^}T>B@*hmr6NXw1a40_u7<*Jop`CFHUa
z+PFG^5Uen(C_>At`b(U&4Cclpt~h+&bDcqr<Ly>T+Xr=yx1ZiFPwunq7@_dS{?-00
zloUmUXM2dkOai52;r~q1&%!twH9tW5K+jlWN|7bMfz~j8&nJ+lARh$93SE1|Ql|)Z
z(t8t%V-ZN8BPLhp$a;Uc=Qog9Pp2BMZyV8t^fouCnassgnGYkr1<h)$!xTN*A^Ipm
z&p#oFIbzVakK5IkV4k%Q%`Vb_fKgROmVy5}J>g2NuHTGrjJ+iVU-Z#B0Vw6XQ!y!y
z13%Q$LL)c;#117-<%lZvZy&aoa&7xq&}tGA{^_92j}#k(Mmz6;h*)-bB5^d>7ob27
z@^oc$tEMEN8u1#n1I_6>Qts`{;BR7;FK1cIaOqULg|~QQrd*=N;d|fdWr0OmktHo(
zO6U-Q+?J7KyPh%^?KTR@Xx3@inj0z=00(4@Ot?G{C5YC1k!-V#Ko)x8#dLKTQNvQL
zXq`P<?ov?3p;=*T9O+l*4uh{TF_dM4pV97RORReLY1jbWsLHChi^h|9t&pf)!#-^t
z5aKPkL>T0r6ArLTzp+huo*;4Num>{;s5Jm)U~7|1as7q?uRF_9_s1Awjo$$nJOuq8
zk&^Itifoz{*pIc<&ZYRX<8htMM5>1Qi0s`#5_)?P%_oUq?2WgekL&*oG93>g?~u-D
zGvPa&7a9E?bBhcUlXp+01UA_0P-?;_S}kaTE{;yV7L0qJ4W~83{<m9dk0^V6IcCxZ
z2cwn$2Cqj8cibAtr@K`c6UV+<_jvv;vn0nB2fLo!8Hv4qDP$X`r7t;cj6Y=dEa>OR
z!9T@&zU5Z#w`Fi6cM0FjC1P^y@!{k?&Zs3w$|*6II`+;*3+2Iv^I$LttiGkKog>fI
zAf>Eba=X+LED!u@sllT&E!oUpS@H``AK|+E1)v@(sOyjdiW}6Jdv4K~Zo#y|qrawt
z)>xvqOYeHA;485^eCCHf(rsY+J>1R1YMRN~7!;t``j)=vlLfz3z+ux-!x-E0m*OtF
zn+AFRr+em3Q2VJ3uP-oviOn|0ArCd}x+Y3CSrnzp@&pQTVp?_6!6H)YWY*1H(zD@%
z--ZZq)GJz=6e$FsH{Iw;{GAsU#;<zm><ipta}W!n97<kDriEt#i(P!H85yIQEM7Gb
zAPaP$mY0CCrX-$)hVp&yJ>nnm&)z4HfjnLmPvFI05m0)LIIR|Kq{_VlbUpx3R!T7-
zSCBB$1?5k%!NaXdl)vdZ!_KhET3XR@A0N!p?!5oPoU~l$4NY|85u@!h`*>b~A^yDa
z_cFqO5gkxMjuoN6J%d{yb<)G0=PT^}kfWRs!f5qyy9GdWQW>g{kKC736YoH)%Q+CO
z(^n~EpByb*=yy-pr}2qK=*#6~Ue$fRkZvB@cNeHi%jd@)tM33sj~kF|m-oel+dpSs
zWu8@$<EyFjGkeMcnx(relNzWwB@jYMPXbuUh^ypup`QN2;?Vkx6H8PD`idKW?A)gx
zO)B)g(x`wWw*yoe5AxZ)drB^SsfZ6<{#U38gI}=6jWvzoIV_zw4C8UR9*f20lU&#L
zh`Z#BBSj$L+_v8ph1stkm){->&ODv-?~w!^CYx+)F^-S{igOhGImjj<OFS+|Ts`+z
zT5Zt1+qv|?b!Ge0kTSt8Q3sPJj(oLGzdGZUL>kMZgqd)n8r87+avS8VE&b#j-%^<`
z0yPinx?Z)tUl(dQtUF?}eV<sw;!puC3wN>gCQ~pa0Z;f)2%yboi7el<{hpIZ2uf%f
zCjm=7oEv?J#ISzL4+K_^W@}Ri#h()Wsfu^;5W_Qr{eNv!MT|+x@u>l!7g}8Gw?5P|
zsLv98Qh7n*vdmng5mO`b$$Ml|4in8S7bW>cRxqy7DfWh$k43-W>E1KO_?>Ft^~Qu8
zTLZ1OMhY0FlP0R{dTl6M*z9F2@jjRT7Dt}A!tH%nScZ~!OL$$_a<i8I*~spfvecWY
z{e=^D^W8c-6VQa4g^ZMHRa&+w>l5Tn7;dpNlW?ZO$8j^R65$X~7?GNitwkvuFrX5@
zX*w@MO#;@Cwn}u!lD}GU&P;tXI?qP<)v4p1a`KDNH&n>0!#hko!KpmN7CH$kacBPL
zsg+5&CANA^&U<Y+Qt@+u7{rTChD?S4?4yC)G`Y)-G&Ey7ez7q6y!*mx?3w&%D}Emy
zBA#P9AShb8oUq^`kU(nd>Gs$T*hRWT;`v<0XZgGLjBJ{a&IV+~rPvN~#UiP*3wh}!
zk}>0HIT^bPr;k~C-mYtu&`Ut9p8K<naGY>R0(w-2H7zUDv?nVd5Yc71;<s2+2`z<B
ztW?JY3q#?YDNM8#H2np8M`_KoH1J|%(M>elz|%&&D)e9xN&ClUJm2Geu;@N`h^}mf
z3FO%)2&XS;{<X;W%gdZTd6g;0)&GF&U-c}#l+qJ?Dg5Bvohtg^tTmr0gO;)sF437H
zu1VAi=k(R#%0L$OHqB3o)pR+^0j2E@dOxpwuT@H^kxabQ=EROM=pOcF`G(jH6Q35m
zG1sXBm2LCqv<ZpEhp1##1SROwV+H|MzYVQ+nflN0nG5-&K$Z=v<#3UoGUB3qF`SYb
zMGxXCR4su@Q+TY1km0=^lzfVEh2PbUxG)Ukd`f+%i{T6ug?qBJ&ExF9A?5PK3v-Sj
zg_Hcb&^AlrvJ~zeucw0DN4|lr22`7__drDc`Z;a8!s!ppr;`iRTu-9+?Bj-7To{;N
zT=8~yq|XCB;1=B_Bjlq;y(qR3PvP8?hf;sqQ?@qzY+bgSw<~^y%rdvf?sZ941*z2^
zwB8wtT{klFH8NYMntZ*(+wADRH8HY}-`-c}pV*(pE6`l8!^BWHS@8VWs>Y#(EX~l1
z#2G(FZOLX~nhvS=GlmJbyMv)Ae&Pb~4|e!b+-pwOPoN+3V6WN7v!2`cm^0Ibbm{7i
zfXLN}PFU`^Y8iUxu|<Rb3c+Ga43P06{}x*n;HQb4O9nTbu&Ujz&EN7i(G_8kDJ4R3
z;m-M@A|#EB>P6!rezRGA3aM=I2*VHgo43~kU@y8U{EjGCXoN-H&1L%=RPNd-=d>6B
z^48|)yO75EoVYA!AuJ&C##JIAd-N^pvz+Cjw_kNiO4#baYZBRy>T2p^<(}Ptvi6qR
zm{YZj%WgX(cE>MxqeRRzju-m$yd0gqI>)Xo7{WzsJGB`B9f`!5rlt3xNb0WauFKzi
zWP4+cU$M%uqAc&tT6x97P79%|HRAZFiF@3gxn_`Q?fDKsk${c!$V;Z?{*yPm#Nu5B
zd6ICrXzuA^&a6AefPGo!S0^+e3Cek<orEAuQ5ul<6rAw1@OkM7PDtTpN%{L*VKLb@
z<&aJ51~2)g8}T|e9X*b*4BI?Z`Tj7cEe4tAAn$On4zU%rH%afcK{hJ9ZGR_<lv@q%
z$abC~!M-Fx9vE1hs|g{4nzHR%=l<Ic3DMiC=rG&>11LP&RnW>Fi?bp)Y|xo78ZMDy
zU>q*tfDjMn0J>8@*hcMXFbaRpiGX(VSK+(3BH>+KuMxCapGu(r*Th~9fl{!idu_tS
z`_8e?h8o<Ba$jvii0FHWG;RRLH?Lx?qb%M5e1F7gba5;{0g~P=EeFsdgff)<&$RQO
z5X)U#bV+gDl}W;TAU3y5cS(o7bp_q)*xc{~LnM8H?*P<lb9ynsisZL=hZKGAy3w^B
z>-rh<ee1iFM;dK3!Hi*(cXdlhL>NRY(PoIiy`s3pP%!xVfkq!^h?aj{bNUxadl6vy
zS$=U-MbGNjsuPa0>WRoZflkr*L<vUII8nTzmm%KMPPLozUDZLQAhNz3<m+W#Z>`Pr
z_@gRUQl77q%S%cy0J;SX+{7EaF-NQa9(ay~G*Vc%<uE##jPBhS-#8j|452lO{tsX8
z9o1B~y$h?LpmdSm1O!By^bQILC{0AA7wHfJNC_RJcMzpRK)MKoUPJG_MF=GHB0YrO
z;oF|`o_oJ>@A=)4KQhK<hqd=wbFDe&v(|i`w}pbA%_4li!EJ`lc`_gWfF)u7*0m)*
z8P;&?e%Q4dxz_cq7DlfT8bd!KUT@^#3`Y539gXCaG_ql&2EbHOI;S!Y-x;u~a+~1y
zm2_NJX74rfWql~!JuY$9-J5J3xL!UY?XA%~T=lqB!ItLHu^Z!S_%VI&la$Vrf)1T@
z+4)s-K0-s~n(JT=M&;NUFDu@nOXTkT(sjQ3f98E1w4PkueE1q7sWNc@XL$6gk0&-v
zRJ;>^e*~6>ir$Wo1?~FFi#HITy>f7o{p7751EFJ(h$>VjHG3J+Ro`+syLkwGEKe5p
zaGJaa&Arg4^Un4}BUcyLq`5Bs%SXUW%DwwA?}e0R&1I{k)sgKxc3WlIT&hsIjjsDk
zRn9Q{wT{jKa#4*3;<`p`xs76M>`58joUzNhUNH}P2Fo`)vpB!s86yc3v^d+I0+Ep`
z5W@?W*t7c&py#&V&r_c`eO=F1cysvbQK!k1#s$^RM*(AS-(b9YGX-(OBFDMK2Sy2j
zPlU%#d^RL?7JE0j-1mg2_<!+<Uj~^C#!-D}s}Dsw$?U(bqHb)v<9$lR$X!msIjR4d
zXX=>u{3ZGm<@94c{JB$CQF)-)%p&_^BL1c`u4KR$u)L~a<hpZ>>JuFFpXMO)-1z$$
zPDg3`q>3z0Rku|z)HP2py!<sqqMP{1M9-Xj#gk?Ow68{L>O=5uZ*E=b*{P?rwkKb_
zkF<*X4;Mi8l*UQ0#LuGetPyO9s>1z;?ZOM?d{|L{$-q-2B-yT#HAq@;&x#LbAy=Yd
z5^eZ}oO&+>8c1<<PX!;(rza+SP@g`RYOwr6=bjxi5UJ_NIX*+zZ!Ui#Z=^8&!tgQX
z{CtRCn|uvGhX>_(Me0llhfQ8fzq0R0_L7TFYPom=P|2)bC*aPxzdjXFR`Y@IK#FFT
z^;z0ehQ>#tAq13%WKykhGRPZm0UwL)C*I6H+~X>`Ww^%YjQJB?$-hcJO~|uC#-^;J
zf^yz{<SnDRu?YknP|Rq<)L`#xAhZP&2_(O+SLZ%iO?)Sw<;!l0#@ke;`d>9^z@fwJ
zSJ%C6Y^kpVj*G$>a9&M`G3qLwf5XbDZv&)fSF6F+PshZg%*j+vxN!``tSs3hhI<@(
z0;SGP4q~c!SsG`4HiP1~0D7ZfV;e`MTb|V#m^TnEzWA_;m@w2c-1x2PXu9uxT_ZDY
z+UF=l?2|G5S21_{_WyX%ePc`GYi^MEF1#u#-eIXu(8J>7K3n0aZlqU0L?=6w5H5B9
zR0FpS@sy+!6RYv6{eogZHb#c4<;1O>AUwQSugP9Tq4Y{>84zr`$bDS$wQ?UclsZ=p
z#bo95ETs=0o`qe0ThCM{O~1LA2gti5eOZ*tcv)1d(tkd;SeHB%f7k<%Ruyu2>tf!l
zU<2}cnCc{z_9y6#ba{?ieE&6#KEDqNNQ)xF^}kPNmH$-}nJuFJfNp5|ZK7Mu*ZWBq
z3C>wk>J(P9=JO{;(e3q|%<H|ki6ujWD~pZTi<?F7uRi+RC>FH2l?-BQjFL8jt@btS
zi>U>RY4UQ+2E8?;3e}p@ZhuMPFXTP5BIGq4A!KTPATle4qIn%D3J?w~`FHe>>igFH
z#v=->l;iabr64X}m(tMp;$nxKGkxkB6MnhixTO`-c)uy!n^_L7v9j=i=Db;~FPQ!d
z8~Lp@XRI`*lAL3z^j)g*QGHE~0p9q)^aXFYqF~a8!y5I~Q-E+F+>xwJJ7YU-y)G$E
zdA9uRp<}(9n1A_xfCc2fuiCa6?V@Tfp<K&_f`(rjcWP_6!WVt9w<P8qmmP@>l#;np
z3h)y-YXg{X^n6j0*X_CZ5A44%L`P0gMen3u7zR>TK4|I7Xct6vMd@^RPyWzKw;9Pm
zpgqo(_A`@|qRiCp8DxkWU;mt#eTq04^P1G5+ju2>q(4Y&nPz`phh1V)>_JjLH=LxS
zXCg@L@JraNg7TyGqJ>ECvJ&+gfUVAQn=abAa<wGM&{(U`9!dK}4KZIbK!P0*bnv?>
z-GaHfzH&2Lf;Gyr8|24%r>4@=)IIGa@K6Pd+J#q!r%so=%iQUE(5YARG^~sGg%D{|
zyN}wwcVw08JL|maD<WlkFk_!|ZEjs0-n+O|n$lhaF_U;{0Yp<riu&4O$4)^>T8dF&
z9P^*>Lk)GFxdoe!BQt%365XUz?*~5I8&3*KvWDW2O+VRdTsg{aqIE+eC>4S)RkCy1
z9frt^I9QMg-r82n_l|9&LN<98Clacfx%xM^r=7(g_U^w#3NEnf6Qj@g!bFf9!Bw71
zT3m<%Q)G)5i=2)3Hb!Sfm6XRRszkR%_-bWU*@<pP?);Gxv98FcnJLw!=!oVBn~%d+
z7H80!N8h^NDQarO$~bBdUj$QsD{IySVzIoTbCvn)qgvn8J`_0zoShlPEJ1LVo4FDE
z_!sxxs~kS5jDwtwz-qFi<CZJnSZ>@+o6u)D1zlWrcB3%tLpCbJ3Jkv#VWp)+U)jX!
zWR||0+NvmOIsV?9VSm&<)ll=(nbY4=Oy7So<b1}D5LDo&XD0SPnG@6LT6`Y2T<pF^
z|G5$9IgkF;=ge%%C*g^&GY`bH(`D4D9u_HV1GObD`rWt-`rZ0@G#~ywVqVbPS*@xU
zubmO%To*rJvyA@>q(Qv+f%o&QED3OGWcbj^W32o&>7C!Wg|*pISH|Zs(u96aA8p5c
zro~dt!xjP6rvw=$6DRD6M#I`80ygjODa}8D)n;d~mtl)lb%MFTCuf%ZfJ<9P`ItKm
zcbAa_<L|@-7i~0~Bt?HQ_T#Emm@NbKD>Akjo%A(bPwsBBINh?pDq&<d3U&#QU9FVw
z=PI51%HHqF*IHfS{ZZTXtuZn;GQi>F-jz#jhc=?`=voHwEIyp63N5rMVP3Q}ckyP+
z9od>TSoy@p{Q9{dB_<^c)FQm1HrkmFv$VQ}>VmX%1QQGS;COWX?~NhrdKe<t_k3%W
z(Jrm_iN_5w4fQc2u##&ZPJje${N$2fB!t@G)C`FdebsXwCasy_8-VBY$LlIL^V83$
zIKceZI!NGFm*XSYC7r8Z_M5Ast3`swgQq%WZ#NNXZaVL@j|tR$*e$kq3hmZNUB~{6
z8-YhZLSh&{RdDz{&h*B)`Ov;~FCOW>nSfu~y$m}(OEdOlxdQ5R2cKy4+5849{+#)n
z!cF7Dfg9g56g=e?c_HFE^_N%WYMBC@iPdWTulsnYs$5Fa5&G>QbA@&_{0iHt=b$Cl
zllDSKVqPyFO_vU5g_(-5I~TSJkdg+U*9va0-Yq{Z2%{U?>VSGV=f<si?>fvSzLqeb
zx;s})@7w3)C}`tO>SJd5B3atZwt**6SB6&ewZ>gt#P>tD_M+cs9bw-t;JZEc@8cR7
znS-a`Cb9j@neI1{vfjK`)1n!D1Ilpx(%lud>|n9W&ik{?U#L_x(B0AMZrp~+&HHDe
ztl#WDv6ICW0<?7Jm4Dg6CNf<G-fsbA_N7^<B%G|-z&I=|z9&<JE4^J1^6hqq|L7lp
z){h8xc2dIk9WXHGx$3a3v^E9z@Lv^li(YZ9*Q=tFE6R-G4YWxllx*P*6_@*M2?L0x
za`fV`j-_?qBK&1?U+F90gb?#Nciup$j_uQ)_@Gmr-FDKXt;h$oOvo0#ef3#4WQEHv
zbYLGAW2WfF_LjFN;eZ>w9VTVbOAD8@k6PK$cf$}XN@bu7LUvxJ_Z?K*EzY>C@enu*
z_^3#%Qg6M!2OJNHSGc^gKWbQC>kXy!7=Dtq`??`)XtA7YRWNShCPg(O;@d^6-%STS
zPv}Zx)HyGwdMCB%?{{xK+7FY$#K|mtjt=*~J(!UFb<Z;kc<CcK-N4IH;N|y;F;+uG
zLE5rgUtbzPfeTB+J4$MQFKk9JzfAyY;tRivzG~(edy9tbG(C}h?*J&7T~zMbM&>#9
zKFJ<LvOZ8!=d3RZ`<cJ@l5vK%Zzj`g`#MbO{K=UUdpj+UpbI9}6xr3C7p}$1l$dA!
zu#_+2$;zr;J(l2RC!Fm|_P|`Mf!b~toDIwoNcxg-)gqLvFc80@c!W5V%U(a-O@1&4
ziKjo_Oc0cmd$s>kw?@S8_^?}LW%lBFPl?YkTU3Q?Z78a`M{`cTTuKwZ!x;X4>|Q68
zlS1#xin6y1cyr}(W8$j!TR}k0bvM|;J;`9booN$OE%<G0Ks=-uUBNmj%=Fz|KyHDx
z<vnwcqGD%Uo=4)QS}bUav!b#4RhaekQ2B-HT!bO7AB9etdBwK!Qzkmoo_7O1K;eIQ
zGkpJ(PqMS=>lg=*PjQ^zy9-Kvuj6J$P!^Q|m;iSG<!VfaxVWscW8n=dynNF)S7ReU
zt<!RSA}6Dii%_D7{fKytosQ#E<>wMV%(A0dDoEcYPRU%+h&N*Hn+^(e;cOJN_;UT_
zUu0K)wa9t!&{Uv(`EcUr(?DLH@9DxmZ%B<)0$!v$$8FmdYXcj7qsD)U2(M9sKE?pa
z;Zf6Y=spENt{Lyu;(!Kt51S`W-Ztq0aiHzUd^$wCz38=PQXO4e;3El&@7G%toexYq
z_hEAOy|pgS!|;Ou!sv*{EZkS}mWT0JeTBs8^5KM*Utg(*lM3EoIL(Jw!yd&MahNsj
zW`!NgMd=({*2=#gA$!IG|2<(JMjq%cx2fZ6{W=$vXc5LzvjRz#8sks;)3(k@`^MCJ
zRpxB;*P)WJH@C4yXG(AJ6|{UHsPRFE*~Q+|frs*?-&Qi!VO7LUUv;gr!PzP5oegH5
zfGqh7`!xLL60FKfJE;_!mJb);b5oC*Rd~w>UOfp<f2XnI#*oeT3d)R6=91@d6_PCF
zbf_?_0uc%m_4pkT#+xSStd~mN5E7mN^AIYlHFH}@w^lCR74s~h%GHfM#b44e&Zr`m
zgu%Uxt>zL0%ud@;E>98!^6zO1OP_bzN9`AO6~2suswu@n2gN5OVmr_G<a_RLl}o-`
zn5T6T;6|0q^(RX)KLqv)0CujG^QpnCq84u2l6S(RH~$)!c_p6@9l*FG<ZrqDrK6<4
z^U3==9~1IJk6oWF3RhjUl<NN_^t3U^hSdKc#b1*-PcB;r@9it-=7*L&T?rA0W0@OK
zROe!07E65*PktxA;8MwOOw};x!Tu|jW0nq9SxSMsi;m(fdGwL3jxtMI)}(SwuP)MM
zA*$R~gzbcJnlK05$L+o1!F4obEAL|xAABpJ*Y3xJW5*fEtVa}t#xi|(HfEX;W7kes
z&M#TQrM{Vyg^O@1bCOwUvo!P{HMFqa-l!&xK<S3P^x+p#mRe<vjW<5e^%9Tv+bVjv
z@jmhOW(iq#o*Z7D-+*{n-?we1zNx0nuXg9+sZ+~G(8%p)=O68nM=WPHU)5M~G@^0!
z>+L<Xdt&8Cl=(Wd*Lln-$K1}RD>Qw0-W7Q<LC8W20>!F6zkH$^b^eF}vRFsJ75oMM
z4%etq%Lgcdjr~ja>9?Jbrd9C9eU`q7WTNO}JLu=J_k1n<p^;DNL6&<Lu&#9(wRnJG
zLC7J5Pm`1N51?q7Imq1e&)5a4)$hur?HZkgkN@J?cdY!&Bbt_XcI`F`j7y6Q&7knF
zAfyRq_IjcQxKMgcU0huVT-ceuo`wMzMto@ms)0McZfv4PfBD}A*jhPa@}NM`z*xs{
zZUWcG6`puJ?;Kkk&pdxv??&vyb|C)|w)x+c2C($Brf1s%cueATqB}Y_>PG4<wyP11
zU8ferCB`I9M6GFI8zeG1Ns|sU@qgwjSk$0RWrZb}sY@e?G9P)pdRq&<Mr%#20a!2*
zJ<%g{2v+Y3lj<T7{pR3~LrzbPa0wYljKXFVwLC|4^cyZyLI!~G5YZ32OGHTYD4n@+
zE}Flp#78}q+{{{Vb#xBuK?n$~+c$7*>m_6r`3r=!qiTAmr8(?SD;v&wu&-2e)2Y{+
zXSIk-X&<ZeTI1%mhEh>(TI}9=W6`67>*K(U`Kyj1PRgacf6fI8muYM2W?liiH!@nT
zO>Y6h)>b0hh4-XJl9Me^#R5T_iC-UV`d9kuJ3+de-hoN5f)jEgM`>=fl6%w1oEHyk
zV@;`-<WRbZ_$-}RrFV;IaptWbu|;DEkVQZYjaP&h)yT#k;wB2kqN+I|Hgh#Hv(6*G
zs@Cr;e%PDrVVEW1)wa{OTFW}bpsF_p%f<lS<fyFg-O>GK*82MT)!?fiyB8G??pooO
zR`Z9{1YkF3Dp_gdsd!$vm-G(-wBCGP^*08QEtd3#m6l-CTscQ<7J%@|UJ07p0-HC?
zh>7Z~4>&kRIQXSIOpOVOJ}wd(#0BcmRP=j>!rSxJ$eCL)h?FU@yNlKKvkgLx;5VsF
zhnPQ#?hI4kYnU5R9C;tOwDb8rv==lmqh3P^Fg#)%qN!W==0xmfl56Z{DaV3dx)14%
z{yyHGsbk-{a5Sv3iKOBi##N}cQTwp><tZWAZ4e$Yqw21b!s7Iz8Dhr5O<1^n>vS>D
zgOFme+IB+PMsDR6OoxsXYpur?omF6FRva@6M>Mq30Eg{B`HvfGnr<vfjSead1Ir^S
zEo}kL;jVm-avS*Zwu*D&Tmt(9K48=Sfq8!!h`FV8(VD`~Pldm-HU@-IdtAS7@amc^
zl*TWG5wUHm=LEK#!1dN`7Q@NQxel(cYz7i}Y*tPSZMw51Q&rqo*`kZIE>`w7V$cpF
zX(3Snck0idbv2bQaSBYSEZouOi#1g~NQ@9@Z^x#8@Qg@l=2VHy=t9PTNn{6BWxd$m
zSU-GZcgJN}xR7l|mFO{x3DIKp=YvTX-_ANAufCljwno#}%Q1kdN72M#nlCUy0I_jY
zZQ3-(bEkRY)<dRY$nG?`+4`gqFMg?R<gT?X+nXTdWql<g0>0Z%y<GHx#*<deW8b_x
z4S%Bvprb2ROBE?vjrgfTs}Ec9cl{eK7GM9WE}^CF2Y9=iS=mE7MlzIZx%IyR)UJrS
z&&!+NJD71F44-H9ey+S}^{=uTnNxMI9)YtFIhYccnuQWS@kr>7Wk{gpO$Nx~Ir3if
z^A`i^3Xa=T<x#aUt*GX}P{iR`t<crRA*N(&+@B$>LM=_!!M?@@5)Tuo68eIbn3|@k
z*)c)YdpXdGczUPSFC+@t4%X#!F0G8oe?m{@f4*I6p^}u_7f0Djtp`X6yl_e4|1F<0
zOZHjNezRBzd|jgUp*72g!3LQx97kzlJ5`-m$n#tTvYni7ltU@<T*wh1D~_r){DhE*
zg{lgg5<;K5Dh_Y~PARd--NbOA3*ZuSxH?Rz$}uyxG@9^rS>Z|%`()s`x#)#xxkPE%
zT-KH26lqr1e8BmD6Zj6tN*$_t!CHTyR1ll@S16*&W~Z;Bo0f?GDIDIT_<7Q;=Uo&I
zo+Kh%%WC}ReJw;M4Z%2;Y={+Ky))PGX1K(rQ^{&PcaO}1AEcNnTzN#S7fS>)o_kN^
za_{!o*jOAflVn0nrg&zOU`(b!Q=u!W#aU%@hGBrss;YqI6H);d!=Qf!%YWu^>k+%B
zD-sq{<#yBNveLOBQ~`cx8@pP`sw5iwRLu3#`fCwg1vt&)Hi(h_1C0bN>F17oS4N3%
zF;FRJw|Yh#`-m+@kzPsCOuZf~pZeThHI)Ja*1PyE<T0L`m9v5xkEESq>a<nr!Pp_x
zp-hb8&#7{2!VNc+c^Q8PkO1Uw{_pUd;z}FKMSO0$=DQkDS2li9O;2(ZqgBZ}`ur~2
zC^piJy;+ja{t(sR=xSGE{&t|KHjdRux_amdM%gNs>5W<7d@^GYveDyUzoI)$zY^fw
zAHQYg1DszeJiv|#*=`33S(<u@Z6gq6i$nUn%-=@UqYF&WMpDQ_5#L@BAja8TPa2yy
zm#<wI27DKGX0ZG=r^(@GeTQ}ThoE%~G1g%ncoI&(hgPsnQ$i|3zX*AV!i;9?Y@AU|
zyDv<@a<p{c+r!E3j}0<dkEBb)#dK18UjH5wV(%VJ5wtXKB;rvc*_n*cvp~eq%cdx{
zPUqSbg5NkZt-D*B>n>xR3j~KL2Q#&qXo)nZcBbkD!4Kfw`O(y(oaicka0$~q5CJLN
zcB{8^Kv#>F%r^)!NJCf{WIdiSiI|>Z!}e)YD2LKg0A5H<_Eugu->c?-1Q3KAuV<#s
zUw4OhTp+@SrENSf;;ZbYE1tBx8zLFgZgM<;u{Lb2kL4^%f!`>x-Z6Djkd2DQFO4(X
z5t?kw-CrBdcwJx?7{nUacs-i2V{<*D>tU0VCo7zU9NM~RZmh7T3y18O*L+&e7qagk
z6#9JLDCB9NPb=I|Kc>wQ%b?y9XdpdSFB#1U;Z3~7GZ0rKEc?m$_;jd=vbe7Z7jz*R
zo7*SI`oPr5YXR)7@LV)@P}c3(g;8FE5tSK(H}_{SBcbQ5=C~_iQ$4ly(ZoPLKD0dj
zvzA@^=gpZisgM{NS#d_jXot;JvLcT5e1=%%(&fb>fcS8{%H;Yos+=}%{{4p&bbC~m
zH^8S`TM+#T$sVkhCI(iov0+uJmf^4kIN5oGY`gxWxB$!bkCl<g9PZM>=8*ZYlDxiH
zxxZ1fI)FIcTRu?t94?W(ZTLD6=Rh<@B95T_VI_}#ZT|Pg;t^dZZBnD}uAW*K(#Cu+
z59{6GDoMx)C{v0*(LyzntqQ@iZ)w{6v1_`ub9}<qu<T>+1oWjlIHq%W$2loqH!{(<
zRqvqp!_mvK)W?{J#?Nc&^lxhUT6l({*s2nRCufIXlV&&<CjqtJxQHi-nPeFxQ)W}x
zbtKSsXiAUvVW=c|+&FxnT7n}HG!H?8JubP;eXGGZbXw9AjKhFiPfVtfm!+McOk<g$
zNn`0$2O1aA8pfNxZFS*h7h_-qLhSgLcSTZJq<!2c|ClbUwR}}jY>KcuUAnzmvm?1r
z-Jh?PS^LBeh0Q+)C4oEuikpIzbDzH?^M5}rlP{7G5E<DlnW?=`K?9i)ol7~0ZTC0Q
z09j=EK#_#zRRck3kyFMaPjD<paAGo)NkkwzYV`EA;GeuWGn7-x(Dunv8C1$sjA3Uc
zO`T~=b<a4JN#m#0aJugI2xDzN;;8S3(#5Yg2_2MTGT&Gs!Y<7{#}B8+!v1_Ks@f-e
z$f8_&1rO+zu8>v3PZN>;COrZb<RB*#W-&D}S@X2jwL=d>;SZgTR85A)GYbXR^7z5z
z&T&IEU`BdqShP4X#7-?I1gZfp7w-W$s}YAAh%IVQX{gw(VgE{ca3xrO?$M&bf}M+k
z5}mwK6fMH#&Yf-<2_};0<DEBn?JzZJQ3<t-sl?ABY$9*IY*;RN-g0UCT4+imPtw^f
zmkp1}l%O+P@12@;H_F9LPB|K-@&UXCGfw^A!1(W{t?>33X^+|K?)#-Wb7EG*#q_*<
zET-@68Z@DWZDYIi9Fj@8o6eV~dsSfcaj)=nO8#JSTDOvYn&wMSVQ05)jNW%a%=U)X
z#tT(Kl2>zS;$*IZX6IFnmAXJEH)q>qS^}TEhnX*9k9}Ai9&q{`dpy=#&d(VICFfAB
zSAJ2I9lSP@snR2HQegH8@zsbN-JSo6!1TWI%KkISvE!~MSrp(R3jho1s)0tmXX%M$
zQb9wuRpAoHoy0$!5kbd~Cweq&Z7a?(!e!=?1^3FT_`Bc2$A<3*RL5k^3JaIr@QMkB
zL|{x2z<H_+_E0rYniNlTOf*?){i2E+m_gR*DT8zsACxdEPmlwV9ZUfDRz?x9oza|5
z&j^N=Zpu$ICW}$MUEf!X1_HKQX{Hy19o54l?r|-C5Yn9gkDSrH+<Q)S-YYC|OiS2i
z2Ah?#*zus`$DVJ%NJZuY;b*2VAUkXciZb|-^W-sz7zW9AW%@R!>z{!z(4U$d7gwn%
zr5?^(?|#X=AA;j{+1vJ5heY8kvQ22|GNn=Sr!_u2t<OuVeA3Vv=fFXyvWjq0f`sYy
z8p}6F1G|XFyS-skoDK>LB_F<JM&Px1?w`gr^7qth^^8wxvhI&}dwfEYo(cE7E2^45
zS&gXkuWh<GwrGT21Co7}kKq;DQiF8jEQ0=n3Z{x5ZvTY+!dSW?N0**{%T9f$|0IpD
z&$n!qDzrVK>}p{&jfo+PDwO3Cqb)0DF8PRAvi*tLoAlp2!*=hsvwndX-v)cAJ^_kz
z4$svm6=&bDe;Mp-5{DVOIy%gGjmTVFUdVz<k20%I!Z}d`vscXS&}Z@;X3<~gU&BqM
zRku9Ux+H>6%m{b3HX`ue`-p^0(kbc3sxp>C@x6Tso8Bb?e~RIZ8q#|c_i}2Y$tkc5
z+GAIu^5++w5_$QTtHaJAz;h8Z#o)08m3gg?cBCnmT&!HoM!wjhmS7~I6bK>imJbez
z&br(uj>#(0RA~bVvz)oHe8qoqC%hG=U;?qtR_*dMaxPy#*l$-A_cRx(a0rRqrrU~h
zM1=z&&LCkp6g_muH#pE<@T%R==1%8qxR=Exrb*yYq!^q_ZTpuNP3=+?<sYj^4pGn4
zId4b%=Zp>_-qt?}Lzj73+e54pKnYeyu3V_(9v#^`37{kUs=FQFNxFI_G;{%V`Oc>9
z&)x=3d9_z`no>1{zs@qcJ%v<vP5zQrMrd?Oc<WLBp>4HI3d7#hM{bjA2@VrAi>Trw
zFw3%~_mVFboUJ3~-HO;J9(Xd-z>P1J7Gr}RqHYj7aU|@jl?b7gbtatEP1h?DcDDqr
zPOo*3l0F7BF`0jgka*b~bcjycYF!QDn3$IiYs_;sl^Z1E5fdpLKQk^7rF_1-rB8NP
z)SG5z^~&C=`D5CoM9BX1Dae)3P=}aI+Aej^+3~bDF;n@0kv_2p<8v})+=u=OKgjWu
z@2#j;tCsdjBGVq1OI9?Q&qc+A$O}u&;D(E{{Ul$ntyPa9=jeA4Xb%*Q@9ybI)4u)V
zZo0Hglb^LvXDEh;{BgR)_YDfrH}3BDsCrW7{GL*!FJfb=Zk>YO&b4}9b-GF)v7!cI
zA(J0*<cTGkXW?$U%=1zuo=@xkz=S?ekkimLcclvIYtq6zXu()Jr%OduNjPFk81cot
zw8F-n{p}MubCWuXCV*qQRrI(dg2XN@)L|xkW7@C@Z@>f#ep;t!AU$dxRkK?drD0pY
zr`27>v7r`>753q)&@m&F_PuoPsFnz+0NEfig8m%)#+r#_%QMJ-9-5@m>Ps!G;17YR
znwd+Y;BT*%hvzy%!p=@Q^7oLI9J`7BIz`y^sj(2NBSniLZdLfPm{9EvTq2}@{g>I(
zv=C7D+vS3zhN!HJ-nxVoLkj4l#%B-DQvcfO3zjkt(lW+y$=`zIJVPTwZlq=*ieeak
z0^SUn-xIDsJXRGZB*VOxI!{_(|28R;cuRkrr?Wj-Q|J9d#~^8e?I4RIUl8K3Xt?pw
zJ?+>A-EPoPJzb|IEh}hfI;p!skbSp{<qLkZPd~rZz^!tMHs~H>%j62`9hRq#l1r?I
zVI$7zdH%)WF^OGd4lyUFXJ|+@Q5V9)m@$g1HkcAZThU((!Ysbj37$@%B0gq#-25m9
zk@U+Qc>Y*S<5*eLpKt4Rx!(-dP9cGj9ef_5My<WW_nHK6+u5NWAb%O6VURzcZ$$2J
z&72Pc1YorCOgcYgaQSpa#4O{^cb*1KP^3X*w^0gG8IY{Ki3U1&h;d!bQfc4ME;zR&
ziT@=3BjjZhHO*M$wjP80^2Rit8AJPAAb&_VQUA_UPIoZgrpKVd<A2#`49h~{3k(Zy
z(DEF2x7Uq*agz(*<m(h30x~H`sCG4rZ++$TSibox-HU~nxB)7QJR7okrLy_>-M@Jv
zgGizkCA??i>@!%Z)zlF=>K2@nY<t+CdY~sI#TiXOVteJMhu+v|oTnF-!48W<R@40W
zLK<C>*Z13llPOG}H4`z!ylPkKH<^i(p^lNj^C`-IE^|MbjYh1TcsPDAthYG@n*Ows
zxoWrv>Iy05+SWTMSlax)*}q#$d0P&*xg76}Lop7LDgY;jDCpF&H&9frv!@#RSf?f?
zD_>ka6wLZ%5hXVT$JFs+OURmPDEp;QW~8lrQXQg-{%TuH)ZBqYBc?Q8sO8~uE2g^;
zIU9k44sB3kZWx|xnT;Uxmqi-QVy7s>fr<lCYX<p}fe9*6=5YNWuM|T`3qrLv(AsAX
z{rG<yBsL!3@mOq|L`Dso6kbUU$}7gDS5bQrM<c3n-$@B#+~<vdH@gt3W&hdH1}nX&
zJpJ)bJ9PEZ36<0#ZoD|{U3p8Wjbc8G6K~1B`iAyHHfx<lUfN5OF7*Yy!#KNu1$_;T
zVkQI@{9_R+gT8+!=s>V5&X5(>e_nxKwbS-4>}lpWD6gb&$svRUI?K_W+v|zVlv5V2
z4h47ACJ@T8bPg||*Lp@5^ur8-t`hhUUplL;P@`N{htD~>=|p2bc8}r=4N;n{N2qPh
ze>Su35M(iw5^59b8F8;M-Fnsoi6ENOg*IK4@G}a#T+C26m?CI1dF;^Y)bd(blrPMj
z09fz-ZBqZ`3l;X_fe{#2u;|U-W$}NwZORw-9Ts&h(@XiU8U8P)^y1&X>HqgtMdtsg
z5ruF0G2!3+{$Fn^yTZ?1sJ`;~%JZ*v_<v~7n)ME+do|f$@w0y~*Z=i4lM6ECHqgbz
zWBvcy(mxkR6@h2BWlh%o@P9q<|9+X)W7e+$$m5fjHUG7xe=h!r2A+LF@p<L1|EZ(?
zzSEA<<GZChyMcBu{~ry$paY)0DB8sG1F&NLkB^Uz1qKH_k2f9g|7uW#<!gX8UEAQV
z|9JqFach`>!KrB>skr-3gJ4Ay50A4?(L)!fUaJ71q2Fnsccn9#nBxzjn=VlKD{<_`
zmb&esd~-E+d(ld=Fl#!ohh@}}V2#*CxCL!v;MH5G;X(PaB<PdZw)kq2<RkwOtGaI3
zjuiU%D`>3Yk542RofT$TIr(BiFs+8p{rE?@6&E|t4vKcRzC+e@Bs-knce1>)+1{-K
zFjEX;?=r_<@9`BM5Q?R+@~P+M;f}9Q=@S4Je#$?V{o_mCc9CT4mOrK-qiCH)e;90h
zV%E^};@+G2wyAr>NptQy7>vida`m30hT%jYo{EKsP2nJ3&od+t@&tkiEY4nv?VToC
zSh0{YdTMLCZD2Ndnyzs2{7ilx5-~oL-gDE&f;keNNe!yclVqp~d+VoX>Mu_3zbUKx
zj!FZcq4CSWcmWPRczA)J(Ehds+PUyYZf_iaPL!CfZ@<TadAmn-&DP~S%Hqw|=P}dJ
zqx&&5@)rU6O?BP*M+`H-ysftB9;mkw+0n}2S)6`HI(C|3p~Q;aphh9k$f=5EYWWL1
z5<H}%qg7NEr~8ieJ&Wak##1EX*2~DU>gS?#`eGW)5WuU(<3&0zO7bLPvp@cdlGG$K
z{hhW&C#`zjOpY%kVSc#`oEBl*-rOKy&TerD?U?g=9u(#{=XJicJ9qtO9Zm5Vh8yU;
zmse5u1td6Bqr4Ka)7EZ)1vj5%bj(#%-nW*#tv6Y(i<_!?=cbO8=S62VsqS9%<1r-D
zZBxe*i5+y8XuvbTvDKVy^o2N(P+H1cv;C^D8Q@A%LsbopXH{PK*rKzOXo2cR_h8T!
zP=rU#th|lEfbHfXd&PHN{H_21b2CCH!RHC;26{-zBFc$DK8;KWWpFZx1S>5#L}zg=
zTe!9G$E%^m|E_n-R#R2M(;JGN#<tzV(-g8pQ}^GRSsgU&tXtyfk+lj>a$h@izZHGb
zVYRhE$1UwGVhRETktIz4KTuS?yzlex3DyczYMos#^m6OJl0?#R{AwvJrKhET8cITx
z7>GyGJ!$NjDyc!X(12Dq=&N8Q{YrH7xaO>PP(RuD=}AF;|H{gHAQW~Adng~O)W6VM
zJ{1${_bOK>#j|E2n#0|OOUcLS@?%P)SEcGa9Ul(Pm4&tS&qcI}V@atj#{KyC-n^%r
z(EZyEX(;%_>2~6B-(#I`DO3h&DNwNc$1@0a)R9KYJC`t;(E&F+!~t#2g-;@=MQ*V_
zJmkc;jcU8T79hQp@V5RzNJJ<EDJiJ6>VkonUCZ^)eI!x!mnPzN=m$v49NAs<8Bk5$
zslgX9$RF?T6k`-A!DwmrAyxJGjSIIlei!~Ae6v4a`CZl#{6gEQc4&+(qGqFED#mwa
zqeqCBN7ziuymn-y=Tv+;D(7TZBjN2~M}BlXvzhf&b@$D5KL6{)g~8uV0>Wg?sGTkT
z4Bo_UZGspE8KFnVB`t?|BecdtLt!v1;+vIZr0*i$9+DDhvw2XpG%9Ptflf^5-Mx_5
zc=>;g49H58L;w3fA>(UY%H`o7oK%RDo&nV`62k$4ycQ0HZ={b?dFUYl+Q#@MYQJ2?
zJb?h|;WqJ(qOvXh&t6Mi{4vloTt4)bBg)EZt>1Leem$Z%EF&<K;H4buGJ>?+wVf(1
z_wyv{(<d<AVf94iz^Ai#i61**@}d0;1uVEQvPNvNJwpI*(JbzrIz?=Ib$xw(2ne^d
zuP?d1`jG)Q|HR%xR`Qa2o#WhW;oO@=f)Um4P-s-^bA`+2j(L*XsH_DY)?(jhFAhU*
zO(NvKtlM`!G#IF;B>h=Kg#05PR_C^BRJn+rX@9p7qgv`OpTn#em4Fks!M5yJH1H;0
zEh?+6dYV)R&cq!LOn(w4;$|XRB{N$C$7sWj^8VT#%JmxB0;so?2odtxNPa=VKrWrq
z$!^kgeQ*W!w3uO2oCmqLB(+G1tUv)tkfSb=XC}fqjfCvO<l}M>b7K0sQ3eTF3*TuM
zj3`llTMs)prRyV1uaW_NwOf2cJrv!t0K}kH%lTw}C1kq08Y0(vIyK|uTD2FUa+eR9
zbtPKgqf2;!E*D<%X#B_j#5{hEn2BrF%*V_{Y*1;f&P=cMhcEY}wZ46>!;n9rj@WFG
z9Iq>OF~oQLVOuyHkL)6C1yZMhRW9xRE3cD*!$CXo<87+`-f*iln^@O=-PzjjrIV^l
zW%CXDnkgxD3`>)33)AIJe+~;3->&9r!)%neTJ+}KDx!5y&PjD59n#&r;ofIX^}f>E
zuN_Oc@^Kg>4}zVZSFqBKfg%Nn%pra2sr0dg?F*=IGqcs1`bsj=Zj?scZB37wRPCZ0
zBPQCjB6XHBN+fpscn7`ur$m2sbE0=fQc6!f!zb(TFchB*0jg~fnigpjHPAOo=CqP!
zkiTCn(2&ZV2GBM5mRx%kp`kq&g#Oj;A01d`o4iD~Q3+15r@}2dF(GPnGLTJ#4O*W=
zZYDAccHw3p-xsdGYJ&d@5WeG4>R};&YOgMmGMb4(PBiLWomg2xcWZF`Kf=VDTfmW#
z0tK?NA;-joNjW3lS$&B$++81&0H;m6CuQ_cjG#|eMjXT)wgImlXhI|VvjUqeTvpzS
zLk_KHQe-Z%_AdG)sR>}3I}_olDJh)f<m5w;6O4k#C`J1_hZ!P9NisK*&@^}mv{3~t
z@ok%Tsbl3dy7#exUHTDg4y(msuQiQ~6uquU99b2S8((d);BlKjR_)7_BTt1RZaAWH
zuPhSBhgq4PGc?d)wp{%+$L>469+dDwT!{pomhV&*EbmN!9zk_CcsrGlj>R`|Hu_dZ
zUu!+noz7|yl8$W2-^PmnZf{j3&Sd9wfNE);j#3}B1Vzn`FO~?YNKBHDBOZdW5AZ>q
zS9g!@SrQUSQZ8*SmVe(fNtVxy$%5)HWm%G{<M#YvA!iy<R0^R>6A_}`iaY|}xXek9
zEuy_23J*AT8SB%?7g(AZwqmF6DYf&FG}FjRb6Xa@0rLM~7e<bM^8XTi$E8OEA*JRo
zW+EgJwf$$kUryT(Mr2h(9kyOpR)Cehkh5_u0lK;tOLOnV&$kJfJ)w4#$|WFA*Clmq
z|I%UQD#RS3X3(MoDB2mSL#1>9=!_QR)}=LBu`Q0PO3+?SCko&zTQv01@ZWqw8cxM-
zh3KJbb}=I6&IZTtK$nq=fL+{wdhc~nr4>dA;8$+*;HrL(Z}Yr5KXTd_&+Bav*XmZ!
zjDEF)XLhc;#yG0k^H$@svo>WRjsGw&$%q@!k~WCR@`|)18R@3>1hhWOY>@pfs?O$!
z5XIP6mW!<&#bcqe_8n>cg1V>fA{3$=B;3OyQj#9~3L6(LC_g&lgb&-#aW|<wk5JW4
zY^Ne(p4p4&e$!(gH4s`l1a|l310zt@w@kKw$7S2@xT&qr1(?M&MfrT*o;M^8l(S+e
z86zbT<-~7tyVmqXB%A3(XI`{rRkMg~*X~9oo#El73OA`b96oxMM@}3s9M5iV6kaG(
znJ4<uO~U!lduOW#4}3XGv|SyOTL&@b{c`G2A{Ojq**ti69)Ls*6=O1NDK+gyk=znZ
z)Vf8r?fFBqEm|=mBH&_rSqOLK2R9rWk+JRsJdWZpBT;z+Xhc+dz55Sr@19j^6#mxS
zdwxIi30bEki4eVe3zK;y115fMQCY0aOH5ojIe@LnJglF+3g&-rnZ=2AlfO*W-+bm%
z-u;a~{_8v>&GMK2RP`QRQh&(+Q(}2<gbb}z<)hZcWZnS{&<Ver8_5oI63Oo(C6KoV
zmLR0d1Pj$cPJ8!aqOw3)NdZW`pDR}XMB0*!{_M}Af;TN*&NQ4F(L~xr@x7u9>PqJ+
zPP1@eeayN9>{NV4Vr_MGVqWY_C%y6Gj<A(3g-DFJTS_c<mK3SI6_aqPOAjlQ0U%}`
z){f8<kzNl7(H#XoExOX+4qtK1yVwkGUIE99-QGKm0{7Rf3i^jM=C}r&zpGJp?&(C1
zvJ7)B?1JSUGKUpuo0hbLMD0Tsj_kfSZ7$N!Htmdrm>?<TFOwUcOBT@^-+KZaJ}Jo>
zCi^<%G_{PxkbWXeX!Bg{udbjcm}c_A<RzoTeos|HvMV2fCOm$QLP42AQr};?^G@#U
zKj|LS0dtH?*7DYXy=Q>Ef=Sb+k1?_*rs7VUcFU!%P99$(0341Y+*|G6+2+&-d>!}z
z3%oM!Zn>CGEj=9_IA36rLwV=d_r7j>>f3IG(q!u$B(mHm1#79rbRh1dE<^z;h3MrM
ztdQasL~W+gU|9M@RW(f-DJ9obD~i-aIri+dGi+-8R2=|>`bbo67IQ4Dxf$O*e+0ty
zP5m$hL!?G<40^tqyIgTECe!XGFm`XI54TGj46vqZm#od`7u2G&kRKf6OHkG)`g~;I
z2+rM^CRGUApq5_?01;>{uezx6dC4T=v{paTcH`ARjR{Qq<fo;~oi2v%-AZ)#US<~I
z=^hO%XSbA8@nKoE!`k`o+fP*;tWH}E$75D>B|puLxt5rh^9pIz%#$=TL~w7&E2#?^
z2sV`?*zT69v!);YlL)!s-qskPi>;2Qw8A80B}aUg%ID7zCs%*ZOFKu_=w_Pd?CiYS
z9!y~2y<`;b5uN#fto*Sp9hLlQvDdHPmxoOiQnH4_nLahT9QGVbao|nvJEAOGf7*Mf
zSaP1n|8zHL$Buosc$`s;9Ci}TADWA_lM?|8Q4;&HPevTXH*#O#-DU~eo+v`9-qw4X
zQ!p&7Mdx)vT=QY@q)K;-OeU;=mgMN9SPCrCJ^J@v(P$Y!3{ikz+%OSNlIZWQ)BXuj
zjn>IGn+}&m@+M*`bncyd_B)TH^KzI;m?d6?wkB|C4=7Q|@D41NdYH63Iu1qWs002^
zBHD2>^WSmdC>bvIN5AFoZYuY!u2Qr((p=$+il%S$XM_hUWJw)E&nE%@t*$ymotezt
z6dDuH%0Dq!)eTA5xF8>DV3o#W?5vvZh|cl7oYH~+8u5gX-N{c|MDM^)2AT?|1t5RU
z{uD;<NZkc-MjKz$NjaY@IPSO?=Lvn&szTq#^8Qp2!R5aR><y~(@M=7KH9554Xim{h
zK3u#u0TU4Qk<CwTq60nTO%yCpj|T+Xg+OlAMc2hvYph?aqSYcdEZx{KJ=sefbnwaH
z#QE6m^)03rZN;U+sDcjd$`B-W@zEYSe9yjcpsHIUM14s1X-|gu{8Y7it?d741#ZA8
zQLN&IQAEL2<Eb1C9UT{tuP|VBie(0_U%W7Jzq!7$WcU`DR2n~*#kx8*%~vh_G(9zp
zL(caQA}%yawG|^pr7<W;Pq0J0L-OT-TQ;<HP*sWy;#6VK;9YG1_b5siJIS;Bv^R3K
z&UsVky9jl<*vDIqEFX@xk+sv)ka@JosX6NduLLJ`<j>Z*!d1KEMw$XyEx0Ee3pMb-
zJv4t43=n?^@gbvi_vqr{qW6-W<d@l3u5~t@`Lp<5kiGF$0cr%TM*4-5{z&V2lD5pL
zrZ|mggpub)unv67q>}xUKFPO)od>wZt6f$Xr{f8vIvfLiKu{bDU3W)oVK>D(J-+-C
zgsML_`8A#A)~xNBv^D@Jf}&=i?2x>LiThP<mQc#M>O|yFZ-WOQIrc^a->AUYy}l#>
zd9|0eIu4h8s-#4cRO)k7L`KTU-NgA~TUE}b?n8jQcV!GxiOKKXaO0^{CDvY&gzI^u
z>)!1CCRb_v!P<x@O_2=(6^_OHj0A%^FWn#R^ic5uV;i{o`;4zA^)n7w(tqP(nLot0
zg+8WhDJm;}*fPWgy)a8bQBqtYWDM&%587?Ku&0sm%%_n@PoKg?d6Oa+i=aNosvbP<
z-5G2nfB$=7QB0OYXbWWZyu^}_K^)Ss%mE-fJ<P*6{~%Q^cl;^Zwl4BYz1acfg?pjU
z7hYDAx>R!sEH}q!ha_0r*fD_-5OhWYyI0h7oTZKXPBJ_WR_{Kk=&^~dl(n2(U#xb-
z%3yvj9HBs^!X!#2Bjfqt*C&{tfo0$fVhKhKJfF2DlKywar7nL6jBU2$AO2bpmKxQ^
z4w1)v2T4ZUV{jn+<jS9sz3xx%&~o&VW;=P|=*oRzz$!p{zj)aY&PwtHR3kd?2{#BA
zexT8#mh-3)Vy<nG^AD5(xpN1%bbwibv{7s;XYWZR_XWZ2m&{}V3rBy_91=04jq25s
z9a~y$TPtH@`$tG4o{T%G7Je*`#X4)<=6y=t$KP`ZG{StJc5Gdh*_0-(v376`Tq}G5
zcZdcc>0~`Cx#`!rMid;Uh6@7pR4@18^L(s<K58LUZNP1EKVq_Q`OMZArZ$Gn-GfUZ
zGPtFsp{0oyH!N>^Mw#v+c@66`0+82vav2`~AO@bK$(hh++H-!=xTV4S{R4aj3)PIH
z$5ResTQz_HSCZ(QdyWfHRFyF{f-^d4-m58HO5!16kYz!&4HR2$eN~`!W+~C_wd*%U
z*0zOGa!8OY521oVCEe_=q6dsIoVbo^^>hJ9lKE53naK?>d_h>yqt+mr|9uE@fIlRE
zp}OE{73_PVNc4gQ;ZD$kFquY16TOrqorab7&V=^l1nhEbPT|M?&d~y@YXAvAv}v>H
zR{x-{qrA8uDNFpC4nr5ZbWei1xi83X(-@VuTze`387{n**6J#kGrFy^x%pU{4eWP3
ziILr^H9g;k^A8o1(-<N78V$Qky+^02oUKMMzGeG_84vv7<m9V(pU{7jB$?fHtF8sx
zK#q>sLR6~ct`RQGs0jsZ*)jBDZ7EAQ+@-x58fnd}6BQOhKOto5U4-wJ=F0t(#js$-
z08G}CUgBa4{;2U-+t1--8hF`R=`z2VOke~ywsxctK;lDwb>+4V++du!M)QwPw7Ubq
zm?F1PjI)5Rltz_H9##RboyAazmzEHKWZeGE;Qj_c&sx=|JJjB^fk@o!GxYvx^@0>Y
zTzzyf$Em<CcBJdzD4;FOX6ft<3NTXV-JOgYV0gXGZTYH%?v^%<MtTtc6TmV2MRa52
z8$rYXNDSNfB|SC@Je7hdCgM8)Kx?}oU=HRFjNr`#ZWH$baJ#61i!SXSV8ie)+8uDY
zv}9WDF;mI0;Nt3<fWctK5eP)%JnVY9e>s0)!lUXl$i}9So10t6z*#}6h;D8t>05xd
zl~;pI1LM41zdsIMDo1Vw=%NsSpU>tj5q5U;86VRAOw3<o0avDtU>Y3eBfnbygl+3O
zI5>1vUbPFaK?A5BRs1i6TjK@r3KU=L=bH`jWlnbI`3?>aEKE#(L`6p@08-wfx0lFG
zX2^{Tfd6m*h;(TR5H}uglvs*mRqEec?ipC@2p#bCY}bEa1YJdMZ`;u@G4a`@X|FD{
z1+EeppUR1Q9$H(GG<Vo)v=tpNIGydUI<596C?2xNl!08)d~&{je@N2?vb4;ffxDG1
zqJIB=@7yW~L_~l(aXwiSe(^;f&{4*o5+j2DPS6$#N!Q~Sy2w&8GI)VFhoq9=qiDQY
zJ3nT3*FmIh3Nj0YJ1)wdt>?t{N7IR>LSmz$;w!C25=*^TxzZ?^#jGm0O+Gm*z5Coe
z><S=p^#skdN#|}&X}aZ4Iyo_x4;AsB><~VI6fLlowK%V-lUsk-)-wjx+@4ubA1t26
zD``PToS-7i{0>C@5RDRl0DxTI2uRfw4<A0Z&tG`JKXfD_E`IhLk-gtpkJeKevVHVo
zYI|4EwQcZY{V&Gdt+kRPyW=Z+^2UW_S{LbdP|1>K)zQ(BFdeL|30ha;I#VsfT5Qzd
zQdkD2;xn@IZMVFfZMkq8I6GKFqE^E*7ensg9W!J$xeeQi!#C3P3Dnz&Eq!;J2%~N1
zO>kI~r)y*IcB;T|HLQUBx-50a$b69sm;JWh>dfXmcw*k6aZl0X>Ij+UI~n^oPc%bM
z)lSq{HGzNWMo<v=EeD@(-3#TQxM<tM%)*KAK9}y7IALD97O!2*K6778;jgj`fXQel
zZ^_d&Vu!4D8WpvfoJ(4cSj)En{ohq3*>g?SKNqur67P(i9iC)WN&tDchECas)9kX8
zj*bpc2A@$w%G;f#oEU-vPkDlnopzqPrAo{hng2}VCwF-8UEW~Nfe1bIg^DBJEn`E%
zQ(UIo<Ke)Ld!bfADj1F#ZaSLO5ANW7@!M$H(D-~jsbAyfP(w7PfAhF>Z8sHi1E_3M
zq<M-f4r@Qh0vh5%G0QodzlNKA?v_k22TudJ{CwEwG*`@|#2<T#MsteGF5}BC`L)`k
z8C-d>S7qWZz$uJdgePJ<`i5fTouLkZf-A`@d{ZP>Y2$bmk*J84<E!UxKrX(If$xeK
zES70!I8H(RK+H3$s;WXeqwE*UKN}1(>794tR(~=ge~zG6i+4rZ05f%%;|7=vKAoK|
z$LeQ!pElnc+s50*y(sHxJHq`#!e!e*=RXA~i5pLeq`$@g^_N4mKlW-W7QBhSouoFI
zOow~NTg2!`A*R&tYHLWm_9O4pP9FLLubp3VF%1iMSd;7fzBrVD3czS^0F@?oNOa!r
zc{kj%GH2<5;Axpz#gTa(y(Gj=U-0C5d*r(KawGHF22pD_q{7$q+in|ec`@!m{`%8m
z1FLcwnvMdo5FYxMQ<Sbe2ps=m>%0mo<xwGb@xB!P0lQ>;d6s!|#_A({rBt@))jFs1
zgGmHknszruql?7U?`EIxrlOo<^L#q<YI@&U_QW}wy62ul{!jEN=LId}gz*Im+5FKC
z1m!bYiuZ|5i+!fhUJ3{|NBfv<p@M<6BvwvJR^vb0j(UIR`w_seT6Vt*UpW9e@oIF?
ze}S4HUTiynVfezb(%>VL8LJ;Ty!qy8S2o?2-TmuqSNPHoyIe<Kv8g+fZY<)P^iN-A
zv?g^t)#u~f_zxEVwWIdC)`|wlbg`8?48&De`US0RVF!m=vPW8KKk7YihOV3R@ACPd
z0F&<qlXZahy#9cF_|;jW=!-LErk=fb@9bklu~@6_&DH$PRcLk}6~Jk??{+;r??J6x
zRpTeUEB*)LN&aXvMAAK|LqXp(z~ogMPdlCc$FYE%QpQZ}HUeJQD`dbA3QH_2V@=Ms
zNLysD8H!T>rGj1&zPaPC2Vwy>HAC#A=r?03Ca1%ayF$96Mif_P8rOZYHg+R=JAN}(
z+qAa>TDxGCD!4BoFeCl>({52(Sk)wsV0w@6lF(w-1F<^G4$fpUM(m)lf9WPzX&Nw%
zPfCvsD|NzTO76zuk9WTnt5^I?1PKbS?oODzlH9wFy<U&)cWXX?h6W&$0QDkM=Vj}h
z+cI>k>4wgBw6I0`IkA@L2%CgTzawqGi79D=kR;D35i=*reqc6DRnDJ5=RI;uKMKN6
zLAV>6r8L@6<U0-b_j6@N9X{CIe3w1@-kmYEM&-Lm)jxl8;nz}5wY}>}&}PW*`;mD^
z?$q{tOlRGTrW{we#@cn(zUpdj_iB#(E?*r@s3E~~eZvt?H2mC+)4fFT$&LDdY-IAq
z53PVCPW?ObazlCnN%@YbE%vYM?)Bemrnduy)g5M;s<p67@dTUZA1;rKZ(Ns^C*Z;9
z>}wnJ7V^au$?spvSyF{Yuy!+(Q$KLT6%_~w`@G|neybWVfa#!?J-U{?(KEv$1lNez
z+W8lpNDzP$5#@t+5aA;d%<lJb!|w-}A?dCcBHnq(J#mFah~VFvg;L&f+P?cR{et$E
z(ErERc}F$1b?qK7Na!E}B27R=K|n<ybQA=Ys`Oq3A+&&jNR{4$jUpX66ltL)gidHt
zkR~M*Apu0Bhu-0C&wI`{zA^55?_U|i0g}D<+-p5+&iVYNa(po8ZYb|^-j_#LzoA9B
z?P_VQ%9;01Ni@nYD#|aF1(jKNyR}&iSVwG?(J`PuPlW<Q)05fkz$_58R2&!KqE*0F
zI?*+>-bhQ!JB%xf&gi5$R?3~BNHv5zpb!62(@u%C4Lg9W;s(C&Gk2buDHmLc-Lty$
zGSKQeRzdFfS1L#Hfqg&yXCp28?yF<VJ69%*1l*eJE}wGEC9ror>x5V=3tR+(&<IB_
z-K96XllNpk4QlDbldgVyd(UX<-cmTJlW&H){A=_`R9C+o$7xf`-X7o0f|+BF(_bD+
zbX8H=Y|b;C>vJvW9uH02vOved^?xh$h<j8(9}q}RO7bgj04}ceqolx>&*PLGIhT1(
zzx5w$9em9`{@N8{wyH*pb>*=}Wd!&lWi70-UvhqAv0)=mW}jQYstNl-s5#M18SfGt
z5wa2wQe3&X7?-?!&GZ)J@ji_r2v%k@YKguK3~YP(G@RjRGQi_Z1aWfQe-^N{m*?+m
zPlS{!EnmKLv(O4r_j1qGT`V4rlzX*jRCj#3JpXg-(W`5BCl3!NjAew;hGfAt(q&;b
zVNdOx-nS7#(<}`j`L#7;fg+5#HO}nKbL$hwY`+w9{(bIXKEsv7!lV+c#a=rzmow+A
zPF2+)g9H*QP4{CsLI`UV@pQo?6CTQ$RYPZmO)Lc69WuH2pqTiD1D3UP{RQ}SW7M_j
zAfdYmFl*leY=LNS7#{3XO}eIHV9^q;g2nNas|f^ni?y@kx9`t8h~7GU8a%_*d|+Og
zt!*^sB0p9iJWrMN@zavWN!zrXlKTr$nEtp{q%pb<(k0H?;Mse}l6%5}8Wp?^kgJIo
z8Xe%3Vf*4+dXZuAG=wm3r?bGQo^tNCkIU7L#G0&iN8-9VPV>Abd*gNq^vx<hPY(I@
zd-&((*P^*`CNEaZO7=6gvy0EwdNNpB>?O{n9d4%t!b;Xq>#H75fH80z{4#{s%b|f~
zq2J$k{hBa>&n9oR(F)#NBbiJUlh9f9miqe-$9#D!oF-5#buPR|mgKu@wRBd9aHqp$
z#X(}%Ir|$(lHgec>340AF@5=jXJ-)E$I`g`pbTpL>c^$;^(}k5IKz_|wsPk2yl!>L
zM$gCTW6ryu56xX`4+E`x%;1xR0>+k;$(E^OgUR@WuBYn<VDt-lfe8aWLL{_|7dRUD
z<fOv?5x*<1K$r*Q*_U3!+A~6qFc(>Nwd**xs4%v^16I9B2zcaXQD00Th$xM`7!{hQ
zUBRLPyBdI*a9#-btSS$R$lyT*^}y!FM$qn%XQ89LV5`2kbGyKCTV_aTdFt7MtvAw&
z{~7|e1W8(x?q(R$fzxr+80xv6U2IeeHZA991U~}$^yV$*5?tj?qYgO=3ZAowfTE^F
zA)%r?F9QubvnD)1U>pZ5OtnP96EosmtE_=tleh#A2<Va;!qnil-_o-V+~j6&T-teE
zQZO@1KaJ(^<gd-lt4bz459Zc#V3Ffoc$gaU5mSGi)~<q`;YJ30S^2<n-eIfr`q?;r
zC?_oPi;zv^=hts;cbp%#`L?6;WiJ*A`9z{EUzCv6uE-|_^cT!L5hbkX*BLF7{e38n
zr&I>cV?y_HS(u_N51)<4lMEj!e6&<M_ru6DhmQz1s$>DxCi^L}5;IC#b>+!@zU6P%
zI}9NAYg;n64!&#(`ZXOcm6RE}9iF&zHrhNixiV1UcKCxa*6)4fqrdj2P^U{M>7fb{
z6Kp8wVezI`cAFXhWqInw!#4@-{N~WgmISeC4|WA!X5;6_$AxFx*_Zu4DUS=fm4&{W
zQ~3Ns*!`<(vRk`yE2qzBW#Bpw&-!CHVfmc8>&Fd)K=i&6H7Zu!xxC2;w=5hqD||Vt
zQV5&VVtM2_%y~EkA({DR);qEj4I8>Ns`>j!C9sG@BfQ>;Ss>b|p}=D}cYP=OWTcaC
zBEYH9Kka71(!g~Kp~wr9<JJlz9E3>kr=u4d_g!{{H&55rPu;iV=NfK_&mFit)y%xD
z-{M`qFuAgS@$4_s&PCFE`9J5!BbtyhAmdTVGfS}YFN1Z+-c$14Gg9ewUbrecs!6)%
znFAs6(6=$eR8$t4`XS93=XKaLo}5roQ8w(AMO6P4M46I6?#!)hv4?OhMA%<b***fo
zaN^nkyTt`I2xMXoA@u?<&R=M>nN?U7-Pez17?Jfpodynb6Ak$@deBJYOmUY44yLLg
z0Xo_*5KIT9&fWpIxa?@gH};g1W$Bz9b(DE_Yok|!kSIwod663@$TS+70ur>lDE_&B
zgPL()#bU>b+zP<fJb*H}^+Lx?7d;-Xv>&f*=xV7+ZoAJ-W6g~w232?k@p!p~g+Z&&
z#~PBo*7}~q^(^j~tS?)!G=fc9cA+h!TEbyB`+xxrr}(q|+a=u|U>PbkyF_B83`Fn}
zfd)&s?0~DKW34*BLWq@}-d7CK4qle9(3dH{z;kT%dS2%5VC?)=+`c2EVnCBs(Xi8i
z2R2!LZtmY^t&&HxiNNp$-v{J2DG0V1^j$5%N85wA8p_#7ZvF7kBDC;SI%tUv1(}~X
zNwPjja^xA=+i#6rRF+Ax*h2FUKV5xyYEQ%4zW*uFEbhef+rFuXUZpHDiXIX|9}aFY
zB)(VsJbKtfFgiJFS`S3AHjdc{hAu~<NOCab#O`19nd!TA(!+T5O-c(kCA{oHF`q>b
z1FGK%!TMXQP6gZv<Q$Zi+jhyFoMR{ZiD!tRv%@#7)KE;XNzWdv_ein)5_Fp%_T!?3
zh2-vVWw;_Km}_!dw(qlQ_DnT#Hti66fGjM%_C(5BVU{1mMi`#SI4)!Cg6s~VLxsA{
z;PS$&RVb;(iwir<XEVyKt{kWGM6=<~LFs!KpASH1UWnc3+kes$3#?-zIL(~?J9p6<
zGq*jFvVUcq@2e7=i>#jS6V%WoBW8wL8+OG1@bJIgpJn)*eeU`dmN%2Nay&@Y@GEMp
zf3397kOE+zAh?}9WTBg`5JFbCFU^~z2dyn-M&{IKUq#T0fbLLP*+o-ODJ`)y0%;1p
z`5EO<;HB*0bs7>QeUmjh?wWGGG#jSUy~ktFh@+)s&tgG%BK6BiZ`VtP+=+7Y-OU};
z0d1-}w{2ewl_>>J61&FB8oQ{O(0($a2v~QSM;IHAYlwi3`H_ZRap^ULly!$P(rswh
zuWWc7bXh7a9#XgpdXB46>4eW!7vA*0PY#WFNU}wdqJvJ#h=*m@^9Gzk<$WG2rx!%A
zl{<gJEL&Jt(jS)FiBN>yX&&qErLu5jyGW$p9lQL|c$)sns{XR=5Xg2S%p+D#y8cBV
zJ9<plCjpYfyMkJN%uQZ@%4LOIu7!s^4O~xSCC!#XyZkXc9vh{W4?2Kl5Olbbv?7kt
z9z=D~*{4Yr+Z28wSE=X17=_2=x%5Hwf~NDpfZP$L3}zfpq8lPX(=}{;{Nah~(1H@)
z(4t*(b*M0C`I1_NaLhApd-KyuW!APjhy(#l*>+I%d8G<UvzKL1OJv15w07H#WKF0;
z>a51rE;bs;+3b8!m*G8t1~AU0Q)xntHr~d|h6i9``qlsPvE+VVOaVPEQNT$N8>V+u
zo4RNZR@CRynr%JC?(L9XpA>8BCrTdxj!4SqVo!??W?9b+a6M?D_L7MwGB+&wk?RUc
z=%rn5d{>$Bal5i>5Pq~iq^nDw-wmEH%+0*Rlg3}Wm<<FU$ie8}W}jNtF>zd6JBdl0
zCXMB3X566~kEwBn5b{#x19ET7{P7pkti^t_4vJ&}t_QPbm@qXE_Z6M8i;SxMkCTVy
z*RJ8!%pqnxmw=g(#nRQ0oKD%2+P6s#-gMMn84t6axAH&|ZX--OS@N3`Unqxy`mBL6
zwsqVxYopDLqDawl+GA=2j{%d6JF5@)(cu7*Oo&2+0~${D3y$**o0IH%hS|w=>`xW>
ztU%8gmFq7mW>Rx>l)dYd66ma?Dqbp3feOvc-IV5DH&}fD)*i!`EFZ>z<${(6Av`wX
z!^PUNt=Tdh%>o=7>d*Y9*B|0EuM{!=*x|&Ay1p&tdC*9~i~$+$SB30`c(AM5_8858
zPf3L*V^X*ef~mF2M>oG1&{W>P{l#Z#(x}g<+)bTag*rr!)KxkwZOH_Y4*ft9nEs%0
zO4Lf`mJMeNSGY3a?Q%DS)MzQcdc*%I*)Gw>qr{G7?f4LN=J)<uuegD~n#v}h257oV
z38URo9Hl)Rg;lj_ld{+_S7>{_TRow2;&9e2<x}Z?IKHq{@s;XspVDViX&@~hBIK+?
zjL`2Zc<xO$=@M`QqXll`bjKfbdD-9er=`J@ech}Z!VTx>v!C0nyp-i#w!u_u{iru9
z?~qG%%1($MWKo(l&AN(M<laAvIwSL^ZS<g_3InzK4{qOe?=GmW>pD@l9{22YLKGx!
z#PT}@_gG;2#^scl%3YX`+W6Zw=gRE&6Z~BFbH#z+TY~LlnO4lJ2gj`41{`_b$|eXU
z7Ee}Y(rZP(j@?Kx`F5VLTsqOYRDGx|uSsXMswTPoPfzn$HP|(R)cKhG+gC47!kawY
zV0j3C)UXHS{@Sf>suHTuhn}>Tc}SNp)=Tz;=q1`bCja(_gBfIbsRAE__d}M6r@OV>
z8VN#n*2FshZ!w$P$mCsx1XAZsgJ8xb$U(*p-@+-{pDKSM5A~$#a#34Yp3~}0CL5sA
zo!j36NWf?+DxMHo4f9|Y>S!dD&xzQWfQlzZ_9vp_sc`&~#<4tq=p`ge<1j84kM>(I
z<K18K-S2(s!}IZ?nqZ&o0%4Cz<#^s^(%PoO*+^OhF;b0EXlGm9sg*uHT|W!*4ruYu
zAQ>(@2X^Z2w_aSY89^IvRAK0~CZ6twk~)!JE?hjW+qE^U3l{~1W{t-8hBezLrw&6N
z+|B!}<yDqaS2lT9Vt|3iEe_9Gv)|y74JJ*3+eabE_QRMLVe6s<X(7Z&^Qe&zcS>gA
z3V0HTz*U?mfnUBvJp0woM`=1~^wf^%`>zKiA0Rov+2~23F-C{!h2%3^6k;Fnv`Sf2
z74S4T@(i985DxiHS6BsD`^Y=oR4le%_UKl$uU%7+D{q~?<k)*P(9uHjd<ji<fO-c3
zwUXG9U=GM$p7d3?`^p;t`54LeX57&&AcGX43h8EQ*m!Nc3tO#d2hq(Hd3Q5NM58{8
zgmSXd_iqa^wGJf6?{hiDyLE_gm+xzxaodkepF~=_Uhd;M@(iD9V?`}>I_ci;xOVc*
zSm-B#LAeEIXyL#;uGEG=CmfoM7m?6jqxrHDg5~vY`?J@n%Ar7V(MKGJ{HrjnkeKEB
ziiqDH>j&w5{g)`|2}SD@Pk|<Lnpjhfe=0{=8aARJi9Sl<k=OmO83ou~$V>)Zu=gif
zg${8+Dvcj|!DO1?0mv#3xQ}g6i}WQ#52BobUfTAq0-Zl2@gIkE<+2A{xB|JBA%vg#
z2KzpYW1Y+K{w@23>Nb8h)pNflf>fE+W@=nazD6;V1G^w2h;UBqJ>>!FZG4HRF1Wa`
zTd6ap?RuU<MRQl_|Jr^Gy<N~ETNmo9qxfz0C;@?>ipscAtPHYQ^PG!qk*$TaEecl^
zhqWW)fKfMPq)b(m(vKkyBK>r<RktIxgj-RDe&X_@fsK2iDe?=R#kd5ynTIc6tGE%V
zQDhY-uq1`3yr#!qlhkavAY>Dzd6;rToyUI8f%Nfi`*}KsanXPe)Yn_vH7NP5=ugLV
zcPbLFKV?G8g3s2^0^c{yVykS%G%QNTMO^tOi}>yre9Gj`{BCk&)<9<DA8vYz>yf(e
z>bV9nTD{80&2Lc)GTWWnq2eZZ{2gwjoORDmsc3ofz0;Y?xDb{Y`vS??_v^H#cdN<N
z(-23u>vP;|ZCQ%%@@HkRk(%!3Sz<gBUZ{82OkN}?^UbCO4M}4LFF6fyz-uQ=FdmBe
z6Ot%t_}ru)wS;{m^bI)9X~H8z=2v^)5NyiEeqmo|V$83%v@jv@sMqQ%*-n%E?NV1W
zDe}&+XkUeW7bxgMx<Ip#Po?>>G?Bplz;iTeMIeZE3HF#+KN?f*$}xR_Yzc2zVU)M|
z0c+1ewlDee1o6uM<!VIs5|?&+Ivgdhd!f-H81d^DbswQkN1o7axns1^kH+)2s$wyD
zfRJLkSdILr6t0-qY6P}YyNVPRP95r#{gvu9OlzJ2Ldq3Jy>7kfNyrvD%}njq3zHgR
z*M@JHb1~Bu<~eeC8bC%1pvOS^)@yFy&}!h(H!lkvwmaX_AQO3(bohujPbEEoG>cB$
z?w5B(z8BLoXZd$ndqLb7bgaFH8rjTJgU+gi_28ITLM?GWwHfZ4G&e3s{lI$W%G*$u
z-0T=V9?y_Bq&^SOW5le?{%1ZUj9qm2tFt1%={ZQx$7|xhp?%8bq!;Ykuspew&{L70
z#np!7DqTi9<>2J}aclpP2;T|AI6u(ErRjLm{PBuz^lkP>D!Jm2`e_S^P#c_kljBmQ
z%uziMcPAA57A!fHaOsn$VXG4@h?sNXBB8?mAZsFhBP`<N8FRx!6}L<?q2KmrF4w78
zDXiH;MVV&vTA$*ea8kaKVKHeQ0VytXP2U}T7FIK{2i=iDdKds~Bb<o8V{pWY@EeH7
zj|&u&ph={Jr@O{DaF!UP#M?MXGL4+Jb1K{mnthl4WCc{ZqfAM;OE>rdLSd}%Ec)mE
zi^fiQ?A)Nl>8ynG4raHSl$mh&OQvN!nim@)v7g5jAXQ$STNY}}{(D<$x|XA*Y+<M9
zH0T|vGYChS665V!w<U<F*n!Lkl$9A*k3S<HmU50oj~3p$kVaMsHg0eXXqA`l*nb4M
z7JrZ#UtjO=TB%i;$ZAb%O~=$QouHe{M6UJQX3p;4|CD|31e-9lLV=6JMnWfMuYcZf
z-qF9jF`=~7X%8<IUx~MO@n$bv@^G2jKfQ{hXM*(Zd3t}5(vz_mK95OKDYC-DwONhF
zo%jEH?D6Diup=pi37HQld7aYiyKQIGU_sG(bcIoQt9v_4TpCt3eYQeoH#2DCpx!T5
zdqM<Wc-D-ZB%W<3yRV5D(R3<Nool;9(>3*w$(&sjLRJz!KirB_qT2{L*J(Nj_=ca6
zV}-9wHyMiK4~2yB>fNF<q}`peb>x{DqWshqO+p_Yjkd&4^5{|_PunPu-!gg%bes#+
zy4}e;9vF%rZDYM2KPul-^$fCtjSHqy;+felK8JeF$s+H9`}!w|?F@-{pAp!y;g8F1
z4N+~W2P^T=6N-Nu25;4b8pC&Ex{&L~8Ruv$f!4o1bmnsjuvKDPn5DfcIsQ_FFZMc#
zuqP$@+T^<DHuwEHrO}j7sYVWps)$&XuO2Y9+dG-b>6C~N6!PX3LkE2pU0N;IH_xag
zPCi>@2vdLuTm-r+-<PvV*CsXW$fUD2)@V@tM!>bmOMV-cO$Ya}Z+B+=UT`k>Gyqqr
zuDMEs>Uv<$7i6NZH;|~hZ@(g0J`-nGpO=2W?4k9AnB!!<@P_d7y8MPIm4?}skCD$C
z^_eFJ%v_T19TgyraGFhO#`cRY0uKVQXV_D#MAH0(;AY*;nd@Bl+b__$TfAUK0!=g%
z_SsF=Vu--q-UVVMW0z=~OYgfq`lI&D_3)Cz_u7)>m9VmT-{3u8ZrF#{k+ng1!ri{#
z{Pv|AUwq4WzDITa<!4VL99=_K*;5ecO82&QqIcAOi+B8<y|R1l^u1zx(jWCuA#07d
zo#ZtSgx_*Bf8K;sohs*DSekH7vD5?{8@^lrI5t!S$>6_pcdp*zklP&~WJs%y-nCRg
zFWO;<`r7P)RZiFA>uLu0hb#uv5=SCXTB{BU9mPUR#ZUy($DF>Pg6$&BnW7s!en=#-
zK5R?`LHm8B|Kn~m`bC3$YKBzbxEYWsECXtT^rXwS6ziU4j;y~Wc(%>Xz0#4S3?)ZE
zm)RR3jiU><8GABab)+kc&ZlGqWtfN|SVtTVz>j3x%R)JW4w*QOISG-@>Y?XWQH0k-
zL*YqT*L&@nm^2jwn-%N?jRYYP1N&}k_VCxp>ck2WIE8+vDJTN}HFhB&>^%e3?1l6$
zzJvIaK_ZnB7gM)7Na7O*Wf`4SL2l(^Iwl}dzsG*^<XdZxNQEITF7>(fE^=%z4KDOz
z$SO24N)D1T@;omz1=@Kh+N_*;Hhk7lK1QHi^%Lk;41ZrrD*;(GNsYREdzt>EBoR!3
zeQmuGawkslZcy8ZHV;A4^?BY6K-Q0G+NX7{Z<r3a-x^g$Y}~;0tVdfJy1KB7j&Zb!
zhN$q@a`;3hRK994di4&78oQ%01DV==>It0}*K^uHdp5QK_=i|rk4J_CD+sBp9~~GF
zG1dG+k%#;(^_&K(OLLAQi%Y1)GAv~=qKg+hH$4ZE2wd!9nW4*`GMH7aw5|H41$B_9
z!I|KhxT1<l`9VD1bEF5+PoA(hHu_d~)x+VAulrqK3ewt{*keF}$icc_Rh+<wd<ddP
zB1b*&c9f@O-5{yHt?s|%Ip}bjD($AT2rn1e><rEjMjADiuH0g#b50?1Ce#v?*x9~}
z!jAF8Jd|gS?8OW%WO>`ul2FdVJe}p4pLBZ95uY{XdGt59`znm#7&<GS8%X+%QpeqU
z@}0^PeXn4(LzeyMKdt4Wh(%^5nJBJx&yrXhZ2O>_*#1!3OujC))#&G$91MqGSPqj0
z1QV(pQuo<W$=A1@&T6TZ-t@eoMK!Y$n<C#e#K*PhsFJuXy%d#a+}VH{$Q-ZH@FX4H
zVf+Fk36GH{#1{f~4pyjfngbf)7a-Nwuo3o$Gz%cvm3TotwkxdnN+_Nyf0U)F-x7Fm
zptw<`lY*n3eK+e1lsWW9JHG@*g{c|u$YR>o=xV@LhBjNgIBU=Tt_z1TtiUe*<NI}e
z(%A1mu|!xpF+YopS@d+p?#cz@uda3XIsd)yxmP-ca}lm)u?TuH7$JUFn}KEylXIL`
zilx6Y3Z);4NZ9IBkj+gkx*Rdf=EOrIZw8-`GCSdo&_|k(5*ftOC6V@|A~cY*cD)w;
zwb@h*NEv;K>ODetzXwSWI8GtRZ=OG*5_gUK`$y~Cqx&FTeFq89&=+EwDT$l+o}<84
zU5W~l?i*;EX#0v{Dicwiij<j$S}zsnn63K}&*Kf^12H0qMH;wVawX8+oZfPfo<PbE
zCQt1@&X_eX(;&A!bi2(&NT)1YeOXrFJn<_-S`>jEJt*4i8u3%56lP!OK2?fcNGx7{
znq5fRx#6(6^^eF>%c1@|e@k2g({+QjGcIt`Om)5e+*jK#TL6lnhwb%EH7{Yo`#-+U
zfk&=rb+J2T<cWIfC$4Mb-(1sMuYz@yke=7)m2xA^881LwdAulFYyiRYosTlB-&hw<
zx;N60wQE`e^uM4(ITyzKJi;%}3hNk@zjA|n?QkM%&cibT^qFqmYc}hsd7-#L!C8F!
z=UR={Mfg7Qh6n}QC9j_`wm>%j-CUi#_Q3p@yn5#Mq9&z<8k9INUzyCXF5-KlqgY;@
z;DDH^QZb24)V^KZC!)osU^6IETIN19ble08DI5=F?)mORaHMM*!DZQnf3c8wx=M7v
zOWDM!GRw>~eCvGna_}eN5OnNH)w39tL#yi%@pLC;V1~d%el>}Q#H!qt%kCmT>0E8L
zVy?msX{w3tb;WGi2^**Q&|86=q)py@(P3kxWvKwF(}0RH&+~}U0ursomL(P?_BR@%
znY!*$)>ihT%L3-Oi3qH8%E`su=o=z8_V@st3Xq^Z>N46P3F%ZTw;YzVOnCO)K|i!T
z0@v-wN|te1AqqTVcwFtFcarDw%aF@uME@2(9DV-*MY!yzG)x_zsCWm*M;q6QPgBjl
z%_~h(Jr-fQ`n$2DPF=~!CANKohR7&#X{u4F!-Y|)#^_k`Rhu+BO)Z15OJi)u&k>9C
z7R8@9(tqYsb$BS;*)3|{3(&wD(KO^ICUio|hZ!U?x&nO$*Nr$EJKQjgDdzpEljPw#
zmT!&5!(yWGQ<gm(<x1)&+{6(e^smlw<9Zkg7aJ`SmT!4jUzRvqA_mne+_0R_KKU*>
zzyHFY!^dJ_X6s+`fIr3Gu_qB4?0fXX(*N1aFt|%rk{APbfyjhj>0`#@r&RA}66@r9
z1zK1_c!dk)P#N$Rq3AmQ-k4c1EDiK59Nd=LA}bfvZhO53_C?k%$UcolI4U)VF{1|1
zyyhXeyzoEPU?cKu5!)LGhG$opo$~S^FzN6$t*~d_H0|gaBvhFPK1-=X-{%>gC$2a9
z!)Wls(7M0xyO@h`Kd>;5uKBvkp90^4%#yVwWMK^h?RRmSLRVPfdg@43P(1otD*SZm
z<@Chd1ZxfWr3);8C#rvGjzDz%2?z9)8rXMbXUi|HRBZNjj)nDwUmG+jHYF0kSzNdw
zocZwn`IKG{ki8m(Aa(j*ObQ?B^0n!n#y`ppUQY8Yr&)#H;%RkmbY@g8PW|K-+GoTx
z?ENE})LC%B!c!wN^!w!(F6Yc8<R8hO7{OMt?$Io(HySL-p}hW%$M%z12BcV_a_EC_
zm>xgduY`8PFE;cJ4y-)XzajRe(xam^S1qC|4F~$x7G+FjyB_*bDGx)xeVB1+hh_uU
zI}zrDbb^ZQ$8%b_L6d}mG6dy9aakXHC*daiQ2RuO+os#vW-I#cPC>gF-g@21{~`H%
z3&KtzbnrdhkBz+80?3157-O|Y`78U&?xZ~8YyzwcHYT>-!gk6R9MfbI<;j}pfSHZ9
z`(f8V#&Gi40H>Kfp&Lnbu^m|-yZgg{Q~bzH3{v^$E@N|F>-U}W$jm!DNmzFT4c|;y
z$;WUB|L~N;VDcOyjpg;e$^FxUyQ@GY|CBs?+u+XfB=OW|?u*w4(0!iUA(<43)icPN
zZxkUHgj2lXN(JY?`j9#%62SsfS?#?7GbXfr5Yx4ZgA7&c!d>t$b86JmFf^qM?U}k{
z6owsLZ_>p<o#?F~ZG-Hku&y0p+nBrrP3&u-@H?M47WkAmdU#!Nxmx_$^b@od8I~69
z8uvx;yuq|w8Ss$%nU2FEh|f`TO=(U^`Vga6qf4d0IaAOJd?O=HB?Yn|xhixOT74zz
z9MKF!3-8V#%C!{UJTfG|(-tDxH-H=~9OKC0ir@F7^ok!)D_yXm{&YxOa80{n&D$(o
ze4%PMpCmeY1B@DH0yaZBWB*9`63r5A=)CF46d<=kKKo$LTWD7C!X7ta7bd)WvC^Q}
zm9p1*Z<Y^TG{!wbQ<T`r)slB9$A#vur9WSBAUM>4f6$U$`T1r*e<lrT9?~W{#8f84
zwr2LeKXJMR>{ZWKXhTLSVU>ntJ5iB-qe+Y~toII36!~m^bU@+yQMydr&{cpe>k;sh
zsp55vbOSQ0V8s|0r-)^l%U;e{waXhz^9y@N@k<Uh$FH>HYa!$^cden-Sa1`VoyKum
z=~Q(zPOVVPtaoL=$hKOFz6Tq@T=J^Gnpc0aakM2}W}_dtt_5f*zOLJM;r9etrs0?4
zg_aA1fUaFxYo8xS|3xOngc?(44z=2n)YxbtS9z{{qHv036Yxa!DQI-PWJXGBB%c#}
zJsaIazHs#d7sRM}?j=@oL59cY6PK;(25*%0>zml%w0EI|K8{9E<Y6Z1F-6<WU}G4K
z^>O4mq$-v0u`GYcGj^jG4jw;?t1nmt&BA=)ERriFry>KhFH1=1aru^VYB!EXCFeoE
z1%VuvRPamc=-6Fak(#964fXqd9~kbJ+rZFQFo%1(hyE>eRsaa!eiHNr(wa4*1;);>
zX8q>o0*E+&*-e6=%|cfz6R1Ri`CqfTj0GUGAUwtphNiQk8Z5lY&DyBd^I`A{ayB`K
zr6q%=um1XQVFHyI4&|(cb%g%?z-{=29on&7&|i!zJCu`Mjw6+cER_D)U#Z%w{Sw&N
zf7}y9yz=0mWf330n9YsaU|i?PGbH<&nQvUh^&HeAUHkmSD$liO6^2ny*G+?2R#4nF
z6X3AFLsszkx4%N=!Q@Ua-^>%<qj-N{LFl~SR(xmJW8ZG&Q)M;X&SB`ukTJFgFBv3j
zRMIjkf~X8jzlpVHSddV1ej;?VQt%LM9{y}0S``~*JrTt`vEsiF>mg0hkOy?=s>+?^
zf4~}JTi_K3T%3MK<;?5UC%+V({L9+LNop)bE{Fc`D%q{jBR?n4ol_o3WW($DcA+m?
zxaIlpQ(FfN*&|rDpX)%2c=!CCwZz|NZdTX59W=_Fsj5&O_8=)i$GLO?Ca|VQ*m3dv
z^)y0NjAfzq0#md#ojcuh3)|3LNPC8rDSH{UhU^+P!AY9QGgGIUJ(N@9$CNW6$qmkJ
zJ~?@4rS~aQO67;E&C}%{DBv9<(11WES6Hk|n8&VBLS|aGt3<ZjnQO_s)-g3y-$o*|
zFB%+*<r<AM;d;(p26O0&^ckjaXmW&Ol-;_t6@LY>H7>oHi_p3>E0RT;HnV#}Y-omk
zt1-oB2ZKl1kJ2Mc#DBPn1<lpEa^tkrFLBo<g&ITs`F66-$mT6O<_Y|yv^OL934J4s
zRX!h1L=c86(Uw(|<JTV?<;C6^65Ods!9_^KZoGdaTAkgZ9_}(PTK-k*-YzLOX#2#7
z-l_^T<#~Jc7}gx>UF<Uk@5I!pkJjh@tmPI14Ad7ZkN;&5G^+s}Y@Dp2uSrao1YU;;
zRiuQVr`yJ7a=de7*_SS0KcncZ)x`QPgv3^hA9X-Ws@ITL79ROK7=x*XMRP9d)rCD;
z0rI~lC)32WLznfT^Om6#m&fXlZoQdvHSf=r^Gj@ZkV>BDdOVB~SyFUA+X*r*RDm<b
zf6$j$;lsswi-jece9lO8y)@RX_a>=k`T?Sqt?w2emaR8;)Ct=*&N0l&SgI??mM=#{
z&iIDkQfMc1U$Z-}v?O{2z6Fc-_SoX0)b@vVb@)wM1mhR+&IGWA#XwG~U$`)&eb9(!
zQr0DpfbK~C6;*ONzRqQ}-+KCmWe^{GDy;rh#l*vw;D9s8S`_{9{#qVCOdE5q5$Y56
zI)k@(_d)gy6Xk<}`3d#`QG|=NMVr{F<KFP9_bNO=K^s=u&5xqe!wW@M;mRUzIJGyV
z3H&sBT3m$Rt;dYPKB43SM#YaXlOTz?^mu(P2`nYe?)?@whbG9*rFBmRnz2U@K&Qh>
z1HOpdps~5T(~I2cp?fQ(&0Vs`o%TKnZi60>IREC_>^nNj6Is%&Df#LdPIF{CNqB=*
zv`?R^V%N-sl9K9wIv*wNi=YN~9La=jH?-_Bjz)J|nWxb>`_9`{93!`U2=q{oAEG`_
z)4WtDa<vkQjV#&EU*F*}H(4z>ocigtMVlf6mE>thcZoObj%hz^Dp}smyye`2cFyy;
zv6D8)VP6hyf3?YFVLU+-^?xtZK#S}(@-GW-1cboDuG8n3rDGr52hxc3z8_xH_Ygix
z?X&dj_2j6?2<se~o(jSnj$KlLsX^{!aOq^(ByaT(`lZccrFB^Gx;FTY8BiHs);u8}
zGj2S|2QN=|UI#imK}0n$vg#Ajld+E*HY)0<CSeXQqV~x!(UDz1yBn$$AH5oB!G48F
zk7y~LVo(^Cr)b^ujc+@+8AA3%gHdMLj`C8|T)ob)a0NUdf3u^~Qk0Ib{(Ma@lrbP(
zf`2RVWJK6z@K@pdw0jTP&X=?#_jy(%_jS>ujvtQ(tq~E`RGvFCVg2lsycw2r6^_c#
zD<gh9KBZns36;v_hDQ%t$tMxu7lDP$XwInY0+w<!*`KKsTB$>8qqB|2qq4J#mAE?5
zoq8|iL}}CQ&N6ggEqXekk?0o689)wwLGp``IMQ>QRPUSeur2Qgvr0?HG`+42(w7*F
zn%W+BSs4er0hJWaX;$HFwse)oibT1M0a3oO?d75K`>vmTN(hL?kM*`T8LjtsTB}FH
zf>&=$ypWr29b5F0bH9xKPxVtRd3)SRH^o>r+}X)?$R-R**APa((&rcOVH886ot_wu
z^W6^<MU=V|WWNzM%T^MtSE!pS-zv512S!3&L0OezD^+p_!4vi4u$VvtPV<PlY0)K1
zOPRIy?t=}sn#$8@rE+R}*&tbCLW+;#Dm-Ux6mW}(UOrIzpH@r|Rpy08$T=P@B&9~1
zjl}O?HLf+D$*xO36<|guWd_2r_62L`j2%A(rkJvk@r5hni9(LnL}QKS>8C$R&yDz5
zxGmJ++U|@nChkB~ptd(X;eE^FEtt8-s0^9DL*U7M&*sr-)Dyv^!-F=AGClFs7A1|L
z{_KgKj_|>jAP;4o2EV0KL<jAt6498?rO>ab+;CyZzI3N{Zej^0%8?|Dw0spGg|zJV
zE;}4OWFTZT>_QiYygY!8+1uzD>f?(LaI;O-+h<3bfv!3wWu-gC)#oz~nP`kTk0y=N
zU6*#`Pppot%q{t2mDuhbt~tlf71z2WY3VU9;Zr*@J3J-4FOU5!4by)IjOZ%|r%7Yh
z8i3V7I&YK8id^K=CWRgR#FQ@Qwp4qQJnFPm2A8*jehzp(w1PS_uQS41!Dn-g;j<NP
z@W3)SY9Uau+z*D3gv$pLD3x6N6+KqN-2Pq+EYjVR4Ro+fu#l<oqRc2UCW8jhUN<}Z
zbA#0aT+5|%+M~pBZk=n$C3q27HjEXvGY?0MWwC?1qxSNV^<>qlX;J71qcD-+UAkHX
zpK0(eAtV`R1CLa18HKuuFub}c^*@i4;m;%G^Zs(|5+zsxsBd06C+THcFwjrFOk4Qg
zdff)(lTJd1<$fzrJRbs>I23<<*ev0V2LMv?Snn$5f4%55z*)~n$J*6b6L3MT@r_yI
z0o@+Fv*(lL2B4;5PETch=&X(kQNC>-0ZSH}pTOilbgGKEKeR2p?_jdjZEBQQm>ly(
zz}u8`Z%pJ58%*S{y*(K4Njzy8aRPi*MnYM5&3`=JNq;<0q77w22|BnEp$f<R#6M;v
z4T|^twY<Q$nP74@!k!0sUuBd}f`;z^|J%}~8dKOmg;c8tz|S@fr|bFxC=x~9pt`*-
zz{dr(N6e#S{?M_~@#1?H%71>FzvOs+=nuwg$Uar--`>x2pkfkxe}bq4KCfIuLwy%#
zx^NRCNLo~j#lQAlxtTBrh#bUUhhOuA=95UK*4F-6u_Jzb2SL79^bUX~&-D+!#Iu}?
zR~z$QKZnOL(x-<JwLO_V{P!&6eaoBRwdh<^Qw`Q4i}cjg8_I~2guB*$J(9TE<}mJH
zGjiT#IZ4^4<$+{BF23JxU3$84Jyk6%MG6gmt7ejsOvp^}zs;#v{?jsX$#3`L(ENz;
zgt@OdcUlshC#1WU&|VPeb>Je)EA94kY!S)7C$D^rJzj6w3)}2(IY`=+2s%M)^RKI9
zw8j$ZkRsE~_pDAwT29<!Xljy!cQsKT=JHgR$3%nQ{ip5g4LBgO_4u0s<f-y45X#u<
zRen4Y8MOPnd6E<CspxvQF=#uFKdC(At(Qo~&RW)P%(FebM{>{lNks-k&diG5X)2FY
zy`l^9?6sdFzFL^toTlOTQ6tyy4w}#R<?r=~qMD!eWy{wphxApuuUu}PYLb6y#XLC*
zm>*B492u@5xKyJe@A6H0442p!F`#5Zop@Or-L0Iv2CDnBZlWRpnqM&M?V#Bo+#bh8
z7L8tjXXr#TLgC*$+|HHToS_7u_%HyrLPfF}Qlrk%FqJy(9ryC7yq>G6sTl@ac{J@9
z;Xx=(Ts51$P(rm1`3Z8Ba?^G8qG#{!n*VwVvvNJlM;2?Se<WdqnRu&KqS@FgaA(Bp
z^f;E36fmjgw7O|o?AGAF=l*K0x3;@2<n#;q(9B=5@c|h?v@-8X2fUw2vY4Fj7`NG?
zWpSNAe<Axxb`9u&t$aN!00x+MKWn3vn^~&Dq>aYv+ib#}?cNIKl=3OS7X6JpA(WY3
z_)iPoKoAIQ#YsH10$Xj(qX||}kc5tb+_P1@U*YH%)9mbQ4-g8NXMuXj%y(0`g*>wB
zh?uH-Djr!Kbo|9rk~goVrRAls@4CUGDob898yKu|W|HRZ6nthj-%AAR^Yf>-o8oNJ
z9`Q!)1G3+$R4Cz~D=S|cD%#QT>24_Jq_k2{Z6hyNMBEfj&qvPY2_qcza2ip!-?x{3
zGhyH7_dqU>vM;s#1mTNZ<b}rRz`drsi0zkSXcT&#;^`0qY!!gs0-?ww-*us)jSa<B
z5fKqx<xOlB4SsVzvb^@c$(8!N%265L$6(Q06#pzenJTRx)b)G)_`W3pCOv#N;4ORt
zxE1AAGAaC{Mi<>@08b#`ix=jUkPanmcw4)dkfaV4FI#Cu()4gz``rv}%k{dghPrjc
z95OyWepgY^60nulS;RC93HJxr#q$Igl&M&pkjuP|zWdLYSRXu*_1~=njF#`IpysU8
zyh*Hr1qB5?s~a0$Gjnmz>zs1_z&=ATnXT~*s7tC*hYevK%0^85N<ZRr-Q-n_YUWt4
z%yO%G{Ae^)I{j(KrQlVc0S2u6UW5-_zQHD0vVoswxReusm_1`j{rJ&&-$wxJ13d;P
zI1)+i_QLW^YIIh-Q4r>TF@&_BTV}zEqYaB@88`ctgUjP1NY9_B8yg!7Go`@SR6vmB
zIaZeGW^duD#<dSwsv6y6k`l?~YrC>T`fR@4JM`-xaA3Or3|Te>?wfh-QNC9$kN>43
zbX!)I3o0@tM(~&x_q~3-r_#y#MpPnZZ*4n4cRKFjvhpqK{k8)zi>{Qk_UqK=!2%T*
zLkXGkbMr=Hm}Qyu59O!1UdQ8{njU934CNj9R}x(VGCjDg`ON?aHe@`*f}E9`s;{p>
z&AW$}?0>Jy&pQGZUk#n)N|LGk9|94bz!~BeJ^8_yRM12#Zg&Hl>DF5>7uVY4zn6Ar
z+blkJuVBHBA+VC?vf}7?nEL8X1e|A9;a}pRFpEiQc0wyTZ_{QiNR~seW3W<a9^meO
zWE`Ze@O_b)u_J0+{$ayp?3FvLZaabm|2-z@#@^^yxRxSMP`XLOvCyp&tSjq%=pgG|
zyybh<_r}kodQ;yA0oV(1^18j^$#wbXp8xESeE#C+3-dcTbj)%}cV*>F1vGDdtTOMp
zO-`VxqMMtm(dZozhmily=Dg^<dNhk9z3t@rsGi?nou24=993y9I9>0_6y;A^%dcbE
zjIw9orEdmWpI0uuFx`k`eFL*+X!7@{`X;V$<D3w_haBT1W6?k7lbV6GbdQKu9wz7`
zBT+sIt`lzu1B!R&ZcmmFry5_0b`6L=_dC6B8ZX?B?7Af9iQQt(0Q}0RyCVIfe{cDU
z$ky*|0d>AdE~cqzHx%!@<Wu(hOJVPacLFI1I=!;dmpD}2m2lJXkJE6jbdUeC*hv(=
z8#l)E677*t7E$-{?yEhWk4>DDC-QG;H!Kd?w(2n7r=7-}oT8!K=w$+Tv)CR}^0bMB
z`-`jl(!<lPEk~7(KL9eG&_$D5Q8Y(A;|p1C1!=ND6H+%;PC`BC>Eq^4OhniGz*d2(
zz`aA1&X~(*t2BJUOw}3v0hDCTcY4is0Mw=kPcJu*t<s5mrX^hiUq2$4Ze(@t%MLiQ
z20JcU)%h;Fm|CTZO)+zH*QFK*9uCKxC;c3s{$;8tA5d+{1RJ@Wsu-5n%lO3p#hJ=N
zHdA`2@#_D^#VAC}le~ujl2}KX*V*X&^`7N?6Z@~9X6uwX%9pyerF`7o%YU>4w*;{C
z9S*NN;F3QHh_=kjZ}7+|!%aNXO1Fr2eK2&l3l(UgldbSHD-K`6e>oQ2=w;SbaOhsU
z>QDv=Xz-eMA+Ltrz2_rW<<^&+bsF*oy9ixg{HCo@5J9o=E1yN+S2}#IOK>YvyN6U!
zrnf%U{Y%h$#0<9Ha&})5?z8f3OZ&P&GupfR^t;`yD{er9NP=Q|w0|wdNi?S}cdeQ@
z)}U-VXry~Dx>0o;djU|Q1<kVoPhi5M?_bXx=C(%G@R$4~I4aI&Ijs*}1KTV@KV<@c
zrT&(3hzIAKt;BjT`M&K?r2R?HbcOTk#SMOHKnW#2xc;x3a%>RnImUNOOl`M!)$3%=
zxBHQUs>0bZ0Oz7#XNtI#>+pK4wW9F!voD?OQt!oTD52-U&;3k*0Rpg-Pt*!)(L`Pe
zckN{Vw{Y*R?@@2zL&ja|Oeu5t#FW9eZ?99hIkD6i%0W}IwdTzj8Bj#5skk-3`BAe$
zD2%Sh8nj`&7%en41uFV_0aTOiq5DDGf%hHi--xXWkS>jOI;Q9GPU<h?X6+6+nbGz7
z3l@?)__jXPw=*L?lN`(8Gu#5R>hZbwE_I=>9g8i1j*=jKu$#&>nQuMA#Y(*7vMR1X
zpI?#@f2U@TWHV6Ow49@asJPfXVOJM8Kj$Sj+U_uv6}bD+3&KY+cRv4}!eqXK--GHB
zZAmx>vD~VKHK1YI(`{vY{12*0>LxV`t@pM6pX9iY0@e9v4?0|b$Ts?)*uA=~Z0Xm)
z_rb~DcEc$v2A(n7XDj#gKa?wEeM1DNxJC3$N0}$SkR=-X)$&{ug~mdU=K?=`cKzF{
zU(8!5u)mZmkkTPGJ^dw&w>Rq=_uBmVRo$ZZVW-TGga$jBK%&AW0Umfj`bTRQ4rb+-
zKh-L4uKr9rOiob^2L}-o;Ee_AQzC&h$@XsfZzDbK(&<}7e4oBGf(g7}%EBpONmtGr
zyBII@{Hm)tv2ZA8;wwN>@B6_o0Z5TpIGvL{gQa_cRF)iE1V7O9xLSRsiiaZIM>Kq-
z9H0%V>g`Y<*Rq<K#%hulT?<@@v<;*Fr2DcjD{3?3eKD`b^bTG8KfHjM0aHfc%SHz`
z_NC8qN&o>D28EyW_)OGj2z(4B<h}XY&-Nc|un#o=*Ll@=`0`e~oFYtebn|lDj(|?G
z>f1$lMT>IguH|5yuKUlh>)f`VU;Tv^KCy^%P50j`>?T)AKEIK*IVA5{R2Daaa(}z1
z9Cv5rx4V{9HDAmvlu%^?5-H8a+5tvR8bLftCX<6}`6*|^q6A54uIVK>nUERs#*p@P
zTlOmx!9SmQW`geoN?=mmr3W~5!3j~<zT8lFc>}>`7er^BsS@PBRC+(xIlii)oQO4a
zpRO}kN8*PUh4A(X>8ftoa+7`q^cx*>AHOy{zn)B!TJK-NrL4=NJX*>td`_4;#;C?;
z{Rm+7=x8T3Y`nC$FPf)_&kYkm>`2+a0Gg025<bwhYDJ->*`?i_-9@q<_yfqS;8oAD
zn&xKqTrqtANYUzai#dKEz1CgBhtO*x?EcrxBo6m`>&x{Y#X#=dNFWpc_&<lH-(ad9
zR-Pvx7mA2Yusgp%y&A8_h8)xoE_o~I3{3J=C&@<j6%_-wo&`%~z1#aLoZT@TmwWwa
zW?<}dYQmih)je|QgTgn^rq(e-O0SNdC<wf)e-%6Zl}*?Vx4_nWj_n=P{7D>=SL=MZ
z)U47eBr6ROT=n%T4*+-B|GoHqWXLrAyQi3IT4~z`!etI%Nqui>G|&O4KMVbtP*<~Z
z{jth&;$|#$WWh1w1{JWCY)1vk^Mu$s+-Kl-=4%^#EC9e(-oFizWF7x*35-9$olcuL
zExK;~oa0fg&A7lTO9Bx8ah#g{IMv><R}k0Bl_f*=zq^OK^6&ETykG4sNMK-2+H&eo
znwe=&uw1^{FHhxSbodCQq#UUu#Z?m3HG4A$05ncMu?F5>4IllWe~m5aEEQv0S_%(6
ze7rv00+^res^=;h%N>Xe4EM&ZLObM6Zt<36PBs`?%;xk|RYra{_>t7iulpe_ElW&a
z();=CtgBL&a5mPZlZJ(N-8;F&x`ytj3(Fvhx4Z>{KB~*J;ARF|ad$64@r>sQKguvO
z=J2I=9_EAc+{)+6Z>rG*w4;}bbak{-zAn~n=9CCyeeUta-u~|33mdKdL`rk6xoa{m
z_0g(5>U<iUj)sONeaC|wuicLNIcBuoJ;a+gA+7&>95YUu)N=5dqKCn~MASwB?(kep
z^<8%b%9o<mSE3Ij-x@+>;4*hT3jhwFUVLuUb4`u&C9V<{C3euw)kW;U*Cx?^&r)RW
zU2sC~`#X_3{bKi|-ALrOEKN)r=WT<9)3@sC3vV&9DA*6xCkwU5qd1mdF*5RsoTEA7
z-~5&q@nmzwo4kruUIOOZ0Fz3xD9rE!^J~q&7PHU6yf;a?CQx`B&|q)QfZ!AVPkJJ!
z8mtw`0+Y!C{rv1lGpn;xY5%vr?|z%==Xl3I#123et%enrO%2oQT#S00oY1-Gfp;9#
zkCREv^usWOQwUT8a3Rdc+23FF*?`NF4J!H8r`2VqX<yljaG+#lR<_ue?TlXiox8)Y
zZ#|oy!$Q1%{rctRk6jQ+8EbW21vcNmj7PZ_7boj;Ds~vs3Z<u;r^oL3tafa$#n$`A
zQczr#eXMrhK>Jt1Voek?zspJ*sUo(d?C94~W`qjb&9K#Ja;;;#YJ+6HZlm>{shRh(
z;&k-E<jCePXTPi>U+8m&q$U@JPMNtv>Q!J;MftQT5ylT>QMgp`_Q&@kFX-cSGTq!S
z@6aq@@>sUk(PQ_xA~X{DprhND<*Q~(=I`NGe}7EiuSVv&b8xA`Tr;$}6Z6&W7@iMl
z^<x|fMhb6XWs*QzL(E{a`k$^7%edBnQVqe$9=l!5ElC&+?DNYMntV~rqtF{~X$C=&
zmX;fR_pp}!1^%cR<_7_{n<CGRK%RC)KWcUMTUYTlU0ZS+t>%iB51*=3IWd|}a)0Qb
zA6SV+KvuEp`)TykJ8GK#c5gS%VMkp>eG6$>wds_p9DykSV7d|tRs;I-h&OcsIUV1(
z^Ff4qJ4z?tyfVVbqzntR1MVJ}jt>!pWF#&oi2AHr0a0WJJ1RFht}D5P7d7AgY}uoQ
z!r!lRBaY-$j9|p57m}0h9X1Ub%fHYiNVzdFG2&l#g^(t@&p|MGIIOg?Jo`}XI=((a
zvUeCjJ@cv>?{nzCyF5LAsh&4*yU4!EcBG*5%EVX=jjNe!kEN)6(PG@WDD}%o_};E!
zaWOK;-EZz#Yu^Qy2kuYiT$nvSAJ%2O%+#Q+$M}A9-z6bC63XlL)TsF>=%>1jh5zsB
zlhr%hD)G6;Xh+_*(@UzgH{|_x>VOp0<+sQ3|A}WCg3y(sHzD?SrWgHd?e9;=q!z$h
zzTtU`BEWo%^>BJ+kshY|IjlT(E?gQ@qm#iE+Y#^YvD_!MelhWON(-B2M;_^jhz{{M
z^;nQyr8$DLu7y5q#j=>HX4M<lVJ!Qmb=q8n(Vh3ynfza<C!~&Wb6Esdriu^Z!dSFg
z2As^LA~qh6DVUhKW|1IVaZ2VI<(1C1a~!{fOyV;e>h(<mFGNo61WI0~CN@^NRZ)-E
z24TbsZu8MKv(~wIwpgx~;@x;v#qNstyt!@5U>RSDu5`xL{yHp@pI^oZwPsa9(c6{I
z;lnJvTGk(?(C@qSRs$<8E_<JEDY$O;I2Q4o0NiXCpQ~9r+U>#<5#&L=G*xy&E^Myz
zoq%ooA%JwgdKZlM`F1HSlrV9Ul70OjK&TyXh{ar2u}Fn>NKlQ1<tI_E@$2BfG(^f5
zr{oa?+j|1rld3Klz-1DjEc~_C;d7-!{G|5%6YmtsjII361CDZ5eGnf^iLrl{X@?2A
zr_<&sKk;le++IdnAXG$OyuRMQ9ky=$F(`N4=TQr*t|fn#mgY+Y%jC0Yn<~L&S-s}F
zoS#DMHBN@cFzPF2&PMMyxG)SvBUf_;Mi@<*sR4@7{<q*pZlzmXg0?@4LPzDVv~dAK
z7jkLE%~fl)b^;_5MP8E3S}ncvGQUaSdxV(xTv4TS_MwZY{X(qb<V|VpY#K@wT(hao
zFBL#PLr-)d`7^3kuG+t#v-&#rZ@1Wgn;@VV0SI*eV)-qHe}v|L{dh)x!t_7Hrhl>~
z|NCR*=ATrn{?td|f2?%>b#Oq1SSTT#bN$2F0WqNVRqLwqS(0&2%wX<H%>VBjssX?y
zlUJL2UI%#uW$`mSz+pMw@(4m7$5{uv4Z-=M4G)$5OTV)f9}MDads>c_&+cYr|1dnA
z^auptXgD|PrZZaYKGZ*A@V{Q34}?l{!(q2BB7YO_5%BD^*LQl%47Z%X(s)`Je6lc)
z3n||uMv>qyu0=1S_LHvt=Ux17w-dOKv0GGI0zOmeS)#!kqw||*rw5bsEeH9i4`(yx
zD0fVKRV4#TckM&)LGa1LkJe`5XDjKb50V<pNg>VC+WZQ>TK~~m|BoRQ1x}pZ2{E5H
zW!5dlh^ILGe9LL4M9SG(N(;u>M*1qEDR5Ee!1^@1Mf|-tb9ZgfW~bL~ho`KZ0(LQM
z0r|h5+5h!CTRVm=>O5E7UoFh8Zno1CdX!HNQUH2&^%vJi<ip>GY6rxiGmZI)sqxKD
zCuA~bUwo&JLp8qd<iFn2|M^F+xiy3T!`@f^wb^y);<Ux3#R3#)ky4uCE-hM|Qe2A`
zclU=D*WzBhc#$B10B!N$L4&&nhoIr)d1u~t&Y8~4A8>y2Eg$aed#|;wrF-9NT`k^B
zXHL&veL1OOl++1CunjxWW)M9z*6A%BIJ`aoa<Z7>XBp_yayv6?zQNYvZw132q5q#G
zMjjH+(!Wd6j?@rVPlZyc#wO?8o%Ek*0(0j1Uel4cv6gJHRPAeDRe05;Nd}%O`dnQl
zZA=GU7mqIlJf*5xa;IAVADDrzBr}NVzN$x878Z2n_5@M4IVXc-`6qdIg9IDVrSb!_
zYvF=K17SEdSKY;~TPVY;P)5U-_j~uqJGrCln)c%qo|z>BJTvIO%G-Z1`|nCqC4R`p
z#ztN9*|+(2LCwI+vDlL=Chxm0CANY4%e;GUVF599;tS83(oFuKdZwRtvK|I6mSPFf
z-Iowe10mH1Cxf-Wnf!Cufjz#)djI10f2m97Po=EElDs;o69nf*Va1xI<H!8lGb**z
zplbq?7vUrqJ@&t__sXn>me8^;=Wp}daJ&jVG<j(ZoNv|%T-k8j*aPOikWSo~L{jb=
zR7slrPr|ui#o}pA_Jg@?z;pUf7~AjPwFvTS2CjBfY?Qt|y50fiya*6CQu8>;B5ynB
z*8dv?(8GYkq?7yGS-%aX5e80^zysZ@ftJFJ^+aj4$#3(*|AWSv9x_WEeO=fni*fSz
zuP|&0=*R}pv)^xwKy=%0_Y+;+FHLtueq8Op>T^&$8vp(!-TaEJ*7?pU09nYx-}C_t
z1`p_rFao#K;$(iC<yxAk!J4tvW;-Es5Fe}mUSIYZakk$nk!Vltg9E+F+gw(xTD;8*
zvT5jEn1~8$2VU)Mt=^g1gr_!e{8Z9WUvuomy7(LH_jjd-X_5h_w!#u3)OJ4f9Fpf7
zyc=EH>P2}TO~r{frF*B!|2=DGvL3wb`b}!RNtHENEg86GmSLj%A{_sEAn4c)$OohD
zB|c9>32>!=Y<?1)5k!-$jwLE>j4XonQP+^Y4S1J(M)ZhWIG!2*-A~uu?R*}d8J)2E
zpo@cZ!Mf9G?8^~`B`3Q>uGZOw`7BnOtj{>(1UApvtKj9kxbP??t)B$OCqYj?dxw6O
zdb^4XB&B+s|JH!Cm~yN^>ixGYzJ<-YEDOQebGWgen0b7!dDfONw8)WmXWtj0m$&X#
z9tn|P7~##^n%>I38g|R2p^Hmg31P;7YL0udl=<0tLab$jF)*=k9*{nj`u88-+oik&
zrU&%dGOIja3QR|-nfr59&4OlhRqQ;gy6NTF))pyvkJ}p@r*oQ=yQLhEJcV?R+Q7F6
zO4p%R)m=KdVsuL)0TQZtIl#Bo_=gg-UW|FFX~L>hX~LV!7210pD|@e7<M%lK-?yS)
z--)8wrc5dlaS>LD8(^9~rFybDc=g4bwQAM_S&My)x{2@YWoQu}+6Nb3^7YUe)$he(
zwUT>pOuS<A1RCqVkN_Re7jHC=>qe*WsW?2ZI!v(+aVSxGdg^M74blgn_ez-r9Ulq`
z^mRP^4{HCN>~fBT>FwPjk0ntbNOf#g!=|6fI*H+6+Kae&!mf#J(`-c@oW(>d_l>#Q
z1~Kj7XwMtlPNRoyjb3lsi(I(B7y%6pl{pb3y{9$Br2A&#=x!&UiZSe;R_*bpKWS#9
zrH-I8KzEcYyw3ek%zi4hY(?Pyei<~iL-|pss9%-WrmTWxhl2W0u^xQTflwE7@6AUK
zQT!BBTwHVEI(Ob#af#ELyvlE|SKC(iBvw0j17uv}=VM}`c;Py#rIeo*`{x^~Sbk(+
z)l{9ikADg5POUlF8$K8ynAqB=4jWId(H{u^$GUbvx;-a~f1%)CKiDZqy;B~}s{Ln}
zJXPnw4AChDE1Cbv%>f)7W6QS}f3EgHQEFMM>|k8?|3Tc}?+W2Tua=Q;_kSbt-}aC~
zPU@{y-pZHy2Vvio(W|jqNdAE&sbcg7Qg&a(KL01E|CgNqVC?@&=YPQ_^}o79`oES9
z=l?rXaPjg8J`YE?F;;C5wX02a+{^K-bZRhnbK_kQFyp)f7SvP*{8xTS&Xn`|`nq6B
zk`x;hLQP8@xAHS_bx+FS_4UoQ--$AMSzC}!;aGWZcQ=8{$CZ?HBY*xUsX+O9kl|<3
zoFP@U+;8|ye>j`%SSjLG*YEriJY=vn{I#y1b8DABHC<Lm5iX|otYP?aQBw9b2K5yo
zI@admnRY|X<IMm!Xg#-12W9lo7hOX=_P?sFD#+~is%8{E>X-zX`2KY#?(@|zcKh%T
z-?})3Wnhq4a{<-4*l>6~v`I@(tCT;Tzv^k~&q}Nch%Cg9E3OHT&MUU~G~$|XM9_AU
zr0*cOmU88GJVBt=<yM1wIy?eN&h2yuNI3Hmt1OUT^>5hN|CVOic^6;ACJ6xXL5Af1
zi~@{80PY(bl_xT#pz}#x8-8;i4~{3a1l%Th(O1PvvailM5hT5#O_H=Eix>6Xmhm7I
zJXdT79Xp*+q*sje@YdX_8Kz6p#e#el&l{s&+gYueDyt24t#7->6z|vzuh0P$n&9fb
zW}xk*LbgUWeH8m2?!Hs)q5TGE9+rv7X~^{>Za>L9sJc*`(AlkRs7uGHnf+A!^raJi
z4{=W-ANOuZ5=nQC{9$bV&lPF~yFkRIr*z1)_9M_ql5pPJYDUPlvj6Fs&YJ6;*}U7H
z=-R;=vfHTlAUbhnjMAA1VU=~q^=Ir7^<bT}vSljbG;O3Cw$)BmZ_}s~u%YOGn`jc*
zdwAnKSOjJ04P)~>Kj}e-%DWZOHcZzo-m8NhMYBft^lODlE}u>m^dt5g-5;(crqgB#
zL{~6(muCEj%l^0UJOo182Q}UBSfZ<dx;)=dpxQKvO9P@yaqj0!gEK4Mw;?7`esN2T
zETM(6aSe11GaAe2Z)J7ZjKQ~WZ;yWMc%OU;ia#X)cAFpGs?Yna8g;Ll|F#jy{4-<>
z?(__qeqtP1Pn8$XTO*buap^1}al6d6wj#QeB{6pVfg5Ibb9iueLyv2GB{Fy$8LgIm
zCFg%$))8qQuG(E?qdlF|d%#isb1?1oX8gAXvVX;2|N1fWDuJqTq-8uqN42*_2}rru
zxfHlweYuSu?X<>Q>S>ue9fwu(rDsFPZ>Pokq}!?2YuKNcp%p28d?3p3E;>%7cl&7O
zVr$v&4{=~(Nj`TDJSg_Iyy*76xZR<qp^l9gyDjtXt;HXA)suG;I)iI0pU>NkbP1x6
zoV64BF?=bUiym{oUADN8JyKPvPpEn8_ey<7N&c_2=-)RU`1WZ~=9-x~6KZX+X&i2R
z>T)yYx4O_IP9DE_9zw0W=eN-3X@pkjdJ0Y(tvlFOZcIne3DDfujP;=P?x&DIK!I*0
zN{)85{Xa_=6Uzx0qV2~Y=#JVkBfDw)c8ATz7#A;j-I7k75fy?8p*J_wSx%{`ZENsm
z;(C9NxEx3ddQ38ZVd}qHJ5v147(|zA+qh=E9QWtSDU>ra^9p-DT)pwHZl9u#JK6!r
z9B(!M9jc(xblnt5kW1;D2d?pX3g__|bSav#-B%>H<I;ZKZ58ExAJCD2RU?tcbI^c4
zAOD|&@FRi8GiZZ*KJ44Zck}jk583fVp4BOmMB-?yd2L&Cb*drwPPJ+8QQIq^QA|+4
zwVlh#K#PJVcs0)8AQE3yyaCqhDfwTB(B*jG%jH2vP;`4$1O;zXcc|B`VcX3Fi)d;~
zb?4sgZObLP>$2FBOg9%~q*qV>Z?CRM=_bVG&xOSQyhC(inbPB*{m#y3XxiEw1R{@L
zx=*}R&)fmQ5MZntxB8Lpynr<l^WudFlJ+eYm)qrjq1O`i|INO}bgOzRPHVbmqer^k
zsB&ZD?*^^cC~S_ea~!81dqbR$!;gDS?jhS<zWyh*z^<_!b8dfZf(S&z*n#{X#`9>3
z>=Q`Gj442ItsWR8nd^TLdAVL_5;4+#7%dw37kWYQdwBh^yvhB-Oib+M{F+IWw5B}l
zy|L(hL?3+<oc_<$Ymo;Fp(>hblRAwYk$Ai$a(8}tX5PV&ci-uRxV%EJA4RoCj07DC
zt}U;xobANyFbez^%ojz&Wn0D%Lcip<B6<u$_eqqvnQ`i>2{>x<x}0X_3e0P?gCL{R
zhP(1^VTZli*Gs_rTdL^JJ^jNy<exh8pe>_wQyZM?Y|fJFi;BDqzrWqP9Q4y%KKG8t
zs;RdbyOzA$l4QrKQG*=n;2JwkNeBMvXnwGSu;tx&-Y$6EGfN~{dp|@^64_S$6Y4h#
zQp=!t5oygo_u*(Lwd}DLhQj*OgGiv0Ohn=EDCOVWn4u3j*!phoXfIm|A<H>e1v_+E
z>9@I>oAZh*TxX})p}waq*d%qh-eKL{-Hn;-#lxk72nmU09DZo~o6vnXx@VmG?YHhb
z2cM6MJ#Ub*Ew4ZS;6#^WXh)|pQJ_C3eP?tH+kySMxw$FOo-p9T3kx)KY9U7co}!<g
znjZH~?E%G#RTtCFDVt}C%#nz@BOIDVs*6RG%=N25Ki&6~&eNLij{46R^jm!iA^J`^
zs-@rgdq?dKx3ccCBqhR(t3Y?2gor6U3FGP}m<unxWKC{`L(is_h>qKS+w609MEsI?
zSjlO<U~c`wzWMjgJ$UPw6FJ(zNy*}Xfv6LL-zmk~l`psEY%8m(ij&Gc$yD9d8eW_v
zFQyIw003nm4!*gCy^tK6eAL|0j5=XFF@iH5AY|{^STOlXo^w*azLvIPNV`E3vLUs)
z`>vH288B(%^hsHQX(WGlv`<~b$y~FrY%wfaA1b*-V!%*;QsrX#T>G>+b+-}(PTjSK
zJUETDxyetft|F5D?E|2TGqk=Ea51fX(7|kJe8YOAD6Q>6Xk-ZSB~&?YoKifWGQPhL
zo=o?2fCSVBRsiu}GyFng)P?3O+&qbKg_<ng>5V3F`3u}tlZMfo??oI1^lLNY@_m${
zn0A3I?{+=vcekz?1j8?}v9WdbICJV_Jw|57ui!%xVUOCXYk+qGe*<RUEyVw?MPnOz
zH=pP5s`H2;J|*^XQPlttUnomJo>RbGcXU+NT{TRibl>L`%+_(0vv3=LQrKCwPP9^W
zC<$EnR60uvVoqkqiacH^kZk2;@ts_rF9DcscoiEAd5XMK13rLpLBbh8sE~riljtc!
z>xE3{{UQm_!q4)<mtGFrmy>X{34`644?bfD4X_|l9qb<;tk*b_`&R6#LB>e)+~Xg)
z#u%Hl(4PVJMR53ToXw6ME$q56)(+xm^7#7Ns;QQ`_at3A#-VI;e5Nt6{m{PX2aiC3
zzyxC<1q-(@Z?2Vmk-3)dv3Gsrxi+mGthQdy>50jWzzH|+v>w+aDn35n$6nJ;up({o
z)}?7$&&v?XqR#+pWRyOolQ&N)lx@zltD3$`pG&o?1l2v^JfAeP(y=e0X$;t*&U7l9
zin>-@b3pndhVp9j7L`LBV<9O1y!v8&=;P^w%Hl)^mN5DE%b7im$7O)s($m7M*NqR`
z9IaBk?f;>b{2{9{KnPv>61`!rQ_rt`Gw^;X#o8JLH$VSld}4sYQhe`>uE=(YSH3OC
z9V^cfA~7}xV!M5ED}7bOVS+aU*`V>cYOJdxkB*M!mXyp>Ef$E*AjOYY=?!5?l6{a^
zI<i$o6_By_G6(wjqmG}4_^#WKZf1>qfQv9I8(Xvp^jv_On+)9qo?A@JaKb>sXXM;!
zP7-TD1ZpxpJsquYV5E}&zPt%NHTFAjI$DX>wb^(3()}2VJKPwO`2`kmjD~h)OFByO
zwN5;zjbT=1wl8GLHD|-c;S)O~I=2Vp*a;3w20bHKuXVV&M6+=06Q#L6#5f*wp|3m`
z)18=vA5BB<qpiB=%U$xABpH=t4O`EI*5lKm!>wQYDQ00h4AbD=QUBY)HMFI0gq+vK
zE;L?WZ(_~ay&OrfEu}$JX=f5;?mF1m?3|+~AN5HA6njU@q$#?&8|dDi6#xZKH}1<E
zV);rYx6;gyU1_Z~`%-%A46R`>n@SZA0Un<B6S@+Pk93yWI-EAuPIYS`i>_502Gt;c
z=$4%lRH>Vr5C1AWZlp`W_w>6^SV<VNU<xdORa5=B=5Ir-ZW98U<b$z(F^c6J;#;%g
zV(n!!XI?mo{^`Fu5%8w@?wL5Fv!Bms6`wN+?NUI<l6c~7uJQ&2((!WglYm)EtznyA
zv)0^8RX7`Q4Amj+MFB9HAN)Q6%-3W%*toM)*?pw$i*&Vb^JYpnA>7o5rkQ(6PagF9
z0^!r4j=oSand%zHArCvQaFZ6af^`7`C+W_0ZK}Gid-P-IsbhclTKQhQ^2nV{v3BQA
z(>4>1wPOjj!5j5{q{+r+X79d#F0vPAvul5!YSlChHgSvHNB|jF>pZFHLYsJyDrZT2
z5!Ic1Y1DBcoy^&4Mpf}_dDRApa#4^uC@(&bVuz>@;JvZj?nk)5ASD!bQD9wt#|=JD
z>1cORhJKWhh!e<!%BJU8D^G`AGk5s#32?*f%|F$*yLu=a*vn<gWc4&)%jRr!a!$`&
ztXWsrh*fV49iPJYzEO3wK&Bd}4H)LYTlSn4J2NSZLbi>W=vm@%WuX+ZM=3WAY35m-
z6;zK`xc~NwrXx5}-M?V8idV8L;~SKpD?LweV_eXe5ry2h)ydwb>(yJ|ir@dfGTIfp
zvGVj3*d6i(w0p1;15|;1<052!E$IQs_3D&g6M(l9TeP+9V2#ft^2Cghh4S(3sK0(}
zu`@WU;kZ8K7L=q)1DeDs)u)+#vVR(vEu?Fhn>cL(uc-1qPUvX>tZvPcRGe$OPYJM0
z>oH89?1$eLj9yHU_Py!)_3JHniBX$3H!E>m_ZgQaw@B{d_jhU78xBB|{Vf_nANpTb
z`gGNSEgFWlslbo>4AO2859#oxu*<m{y_c`Jo`6#0^D7XOtJESsuOZy&Jq-{-CfC>v
zLCWgEDRZBEjToD?!ZnxO^)fRn_rUs3z`a|<!k*yPELHDl3)JO!y!eA#nwh@{#3mW-
zD2%4sjIC-K7ap~tNH8$&?~}D~DgQZ8WPiari+(zh?NZwN5W+>y_YGUhNtR8~om}=E
z3ka@^oS|wRX`dhAu9=b$73YP_!K!S^h@KB5Qs!)nKU72ir)mB&=U2$rv@dV9R<!fW
z6GGTroE8Sfe0WqXvLk}zx>|Oj-zMJZH@RtDj{xsW&n$2KE*A5O9u~5B91ULo$i(Ky
zw<Vqcd>1~_BF>iZ5uq3LXQqey2_fcuo~mRD39IA@h{w|MzaXL$cu52hdTrz}sbwNw
zhN>8GU7je@+*$8WvgwVZw;5Sn*qNBswCU@6W3zg8Y_omDwBTuCJ)Es#t(x<$wF#ke
z(|D+6E*Gm}-W#K|#ulSiC?BgT9Zo#tDqz|f?6@br;EY~!f3{w4ikLwpz0qkYHx3}0
zts3OR6PqU@ppq`qJ}2UKv7fdxlW)Fr6jHd;SsiM#{q18u%&G`|Ma&8!S32oB<*<Kv
z92T98Sn7~Oz(Jh!629y?LIE#Ta``!8bA&{U_?OEabAGGl2<5~vN@Ni43nyRn0z@3(
z4Sbd-$-cx0mv`G41ewzD^rER-qmUb<RgQrF;ApxuThUKxJP!l5I7ac@xG>|n4$k$P
zzA`=*cX(GM#p$iEMPEWC%+{c4ZYD^N_7&J+2^C;7cj2&e*<Z-yR61TnLowd`&fKq3
zjj`I7Q~ds5sdVcAb$V7xg6e%`f-I*!+T}UirLg;lDAe7)5diuQ^;Wf@$AxTI!9oeD
z4B|QCvlZhpJG|pDG`!>A-h|qg{vhy2aF*`RH31O|t%43qwOlzZyY87&Ji<hb{9;7Z
zGvdQc!lL9DUHRhSu-Z_z@w0?_4$YFHu|k8N)$PBUz<D`ao#=sFu*CpB?3kI1#xHFu
zncNa88R8rk4pK1mU0u)3v)Kl(-gbBIr7^zc!A?HM{YyT-i+w)-%cII^ks$nYnt%{&
z^xZTSd=f03redR3ui}TW-eT?~Iot$EJ|bGNA3IIzW{=|-#BwhXXfpDIvfe8fS~%=Z
zl$`_M?s3RmJWR69(FH%xQiNzzX^3=<B5YGtRa%}fHtq9JfQ|I<=Wf8f+iS!_h^N+e
z!^hC@(%E{e(uWkR>uF#4gO~g)3PpWg&$biA!VhLZEWuL<COb`@?MZsKPX>22m^F>f
z@9(wUzHLekg=Atwa<OB+*ITzMhhNaEX6ZO76^6wsx@|QUahvz73&I?~1scrkh1Wvq
z#R9I~Mf@+F^=r*!Mf`8oGexXjY56^6XnFjdn__NIM)>0wv8{Fa61H9209m2H+e<?4
zi5}my@LIL(KH+ChSprT2CjySU>3o(`U3?ZZ2_^C}*|7@0G|51UrI^|VZ%b8j`Gm16
zJQ{5CNYh?<ea+4hc4KvztrK=wtb0xbaMhv}u~ncIv{a^jA|+GLflWrH(hMwkAXo!W
zWsS*7*c{HtvUKQ*AiHu!bJ4yU8FvvQp2J%1+&%DEc))Hq`<+eK_6m2nfZ%)mt{1b5
zEjC`;ATB0zol-qs>zw$fU5Wa`zTt-MI>2rIlg7Z`V6pJJX;#?}5_)ue%{K*)pm!6&
zIx8}FdjI5HKomCM_nJI&ip%{NV1@tV{%1a?#kTAoA@8GQ2@jx$wde>YUTa?#zui<3
zcKAgpnR$4(fLJVmO2b%1nG-z=RT+b{l$mJF6b|xnQa#V$cCexqw{oZDZky!T_dnd@
zy(Y)+qy0M7>^ro}=Y1K>C${b|(VS>=+4oTe@;LGHcpw@*>D40qPxtsVNZs{$H^5~%
z)pT|*@MWqGX6xAyi)@xRGI6W`VY##2;1Vos=7(wk@eC;D{z9XqN)8VflunO=$w>2l
zLu$;%m^MQ?K39lb#NiVy4KP+N*6yIqb62KFJ*<jV+|MZ)yV-LQL?$c5w#WB0P~|QU
zTXs>PSBb^#`&H7AfXJpgS>=KX|MKJlpn9%G7_F**gUfNHbLV?0&Sz5GMAc%$Ry*{t
zCs6((*Ze_FZ21Q6=b0c=lZiIr+%Q@Cug7Eozq#$7<Pe(Q9ie_F#*Kl8S~ubD3!rKK
ziYsuAL>DH9)NX<^v09FJE~|3%wZob`|2Z+S416SHA)FaxFGVZ-VPbb4078HIJrR3u
zOB@j<<gzNGU+4Y~PVsGe&<8f2{(XaAh?!~P)b>f)f`{|;iebmzei;zfPzI}O<FB{_
z=PZt3g4zc2@rmgbdJ7%rzaO)_t>JHK93T6Qxh(I{4C@{FT;-`1r>{l+t%NfkyVdJ(
z*loL3Q+|9FvlP~4LowdRJ%p<}w`xn|4eCz0Zu+Mi***sxO*wCsh-<X&Dbou28fFT8
zG|Lq8ajnK5+Y>eM`oRHE_t)Y3e64s>aCz{9TY7wbR)fMq{dAF*QPf|Is$7!d+#!q*
zK+C^swJGAF(h>qrl;{pYy9rAl?6&|Rax(73RBp%d^peHj)m(nAlwHkZ6s}P;IojjU
zOy7KPtuYjH$D~v>Ptk6=Ql%AnU>n;O**B?SE-#?f6v;XdvT?fRk&37-?Cnu1eCI=q
z0L7GvPPr3fXhQ*D>-$_j-_?jwyCEZG)!9fxV$;zhK1byVNx~d~z}wFyOG*o-hg+TK
z0g7g|`QkKvlD;R-eeh(yl73(;eD&?0tPpb9x0nc>$!(9p0D8z5-NgWe>r`)c&RM40
zh@(DZyj8f@Kw5pmFy`G<u_@Q|_P$SSuw1y{b2qI_7WDAVBn`Wssa?zTqVP}(2*WO5
zD#CDB1PdePLE`d@5hu2+4n|EZQW4_$Fnw3FXB&EC#c!ks_%_$*xR8knOca!sCw9Dk
z;VX|lxJ2%@z0CJ)D3Y??WvwTtCdkLq<z@h40F2#k$f<qWyE&8vOXpyzH@0JyzmUCy
z4plVb1xs@8@pFEf-oVK0UulP>ei5Fr&uX++z9Bv!(#u*rOOtbODa31ouPWXd{B2zS
z4kONdiM>T3AG<fdyYaqW@Lr2O?s4|7eyBkui8z;@Zukey50Xq;JsmKNLt&MBC4wHZ
z^`U+w#YCLH$*6^2mGZ>V3cr|+w1cZm5S`NyE95_S+7qlK8MV{Q3|NS18~?!TWU46?
zCOUOEAW~KB22&ossA}96!0ncm-k*VR5dj3As^p3CKT-T-95BFwA74TQ73_TrU>T1+
zbsFs6wQ~kJ_4gNFJo%wmikPWosnTm@jm_bCG1T7PvJ<AAZPetinJHl@2j1z)s>{)y
z)`LtW?qzL7vp;jPo2ph7MII=-Rp({&s5v@5axlm)`_sQ*)PR%(i$bjNioXz0Z8X6;
ztI>}AAGB{y<atXI9qG5YTGI0Ps%N_W9xTB!wtZ1$1m;!&2y!g=LaS)@%Lxzy4i9cV
zNNZ=1lhyj3mp25iUB9$TvR1X<6}KmJ_Lu|b=#_#R8Y}{|_Zmv-n$`G9`gnWQ!5453
zyZ5vwmYD&F81|$2woe_u@#Bg-^5^7;>FG}zf5asmP<$PmSIv}G;u=h;)n7~JD1^;l
z@n-oZiq9cS_>}}ogn73tgzGQms$iJ|s}ivEE0~q#sDo&erC!$S;v1GtyUvP{2!(~Q
zf9m>oSBzy4@v?{KkxwTS1y3k<Eei_TqV$!9*iBbA_+Onk;<O1A^{<s$2vcBcKy~j^
zD+m_o_3Eqi&t>&n109f<#$+oXb}9d0s`3r4`jx2bct`9XQ78KCW_lu`N6MbWSuF*#
zE7<b9%lx)8+YO(_3Jf``Q$d`HgXEpjs+!G#S0|P>gX<bLsxZu&fUAx5><qX1>=kD&
zYn{~WlvXac?ePsI*c8G5z4O;4sC^Oq;cRh=mU~ecDzw&jvVTo4-^O7%I7DN@M?F*6
zL7S3f|6UfG!)@*$Kor)F?N>;;-9H#Q#?o8Ftx@DQ_}#^0D33U5_UCW>@#=&!^apIk
zNu>qO??;0ZO7o?|<bJ|jY{oxx*c^S644dPfIYMpMvIsxBzl=0*A>~|*XW(be<F(&D
zA~uFdRBm?a2xA=SGk!dwInw{}THZV0JmR_rHH<0J!}`l^XS~?v=zGWl`3lJKsz<xi
z?q>lw_k9pmx#z)%zucmBU@cFnMFgw8=jXKK9t5U$WV21i+_<XKuF+ivwrmq-Tk1<A
zK=AaAGqJVo=jqXsg~sHbbEp7Y@bq7}1g@WTV6-)KyA*(@)@QVxb~crd;9S8vMSRsJ
zPdJvzR&e`jb_O=2GNh}dT7Bj=X^+6JviUw<fhQCFXICfju<~<G^Oji%rY{JKQW}rs
zom3e9p)a4&G*5>Q)qXLTkF@9YVA<JKl-f9zU0NyH2w4SN4acPNc}?-}?CMRIya~lS
zA74aPJ60{V2|y=u?^?-^2r!#5O1bJci@yji=E}ugu8|{50%yVFqj5%a<KfXu(OSZu
z#VozVrL(Y5B(K4H=)Rp>rurcm3Kk6bf*m#Gq+9!(DC$9tffI!PQKVN8eQ^7)EY7Mt
zjGFFfDldZN;;`xK$64b=5l8yYdw*FFSM3aJc1Ash!piw8z|Vi#K{Fj}w!*~qN{1r5
zg>1of!awdiQKJrdrM%dx{Pag6zDK(7W>+Ou8@}+ViV)+Lx<-e&MzQd?46(W$GGjll
zgOPJ>>ydPNx9wk?Y5nIpd0U-Z`7i-ldgYyZ55+Z~Mt4-S!q?DnVvEw-PT}6R)2gDj
ziMz{M3UmI*L`-s`Jw=K%L^cImT<P@EO~AFqEWXWjF8$8TabXLv^A++mlr8A1W9wBl
zbgCm4d~{)C0PCsRgOw^tDsxVAMbEFekr|VHbcYf}kB53mWTy3ZC!u5(;ScB+yiC>N
z>_weF1&R2dsrUV?br%R`=litWiBTDbqrlG-OUtyX*flp3(M~&OH8EGG6)jz2tZLxp
z7zZYAb)%CGCsayeQ+?ND*ugIDKe8rl`|2>_J}#WFdZ|sMityWUAx0aq9OFw67uXKI
zPIGm+SJTdo{lh~g`xofCz7X&ovnI~9{GL$<+xRXh#t%k66|Cb#8;e><LtDkAwK;=>
zYP>dIsDdHQ9r{t$*m}P9p*exBMs5dqdo8qTILF5WY&Gm*<630<Zgy7*XXbK}^FDj=
zdi%T~U@H}%S9t$BJXYcT016S0Dn0AWAwd=!?7lbAsnpB-nW~l=n9#1<bj#^54?04f
z-Lavb4W)~4syr~Q7ff&-nMxQ@$cZ5CcWdG}5n3+Cq(YcUNMdl=gonoi227Vyz40nf
z>d_GaA(oPtEE?y-rb!Q~-mS3}mnD^yawL@$b5N8PYp}?dev}T|+DkROiBE0Iv$S1H
z^|0B>MYIrM?4EJ(!g2@>l$Lz<Z)|R7Buo0EO8gF!n#OyT7NZe&?q`7Q-L8ik7}vcc
zx3XZ-p3Zvy=D5th+sgYrA$;4;inX@gLwPjEf*4m8J%Z2?XKPQPB(emr?fP{4BG<11
zvu2U^iOyR!^rP<zUzW@B4b*Anl@=e*YJDy6=&eE)rDjaaP(mlF1>E$8(NAkP0*Pq6
z?_o_W#m8$6R==rCXre`_=Cj(7Rg9&2FsstYHMStjrHyOp50u{&Vqfm03*+(^e3z3c
z|E8};#j?dH>?_1&0ukc6TRkOoN5rxNF=iq^X?{-G2I5Fj=xxx#@r*I0G1a|*zE2nY
z@BZQw3*<EYP>Nae8y_}@*&Ik2JZ+t5Y*0XGMAvzF7r}$$joBgM>NH$YwkfqDMdbZh
zbs~>{Sqmzq=K2i{i?4G!7a-fty#a>%T<{GVFdVAW(?3IKk8HmJBKFBOzBUyfdbLdY
zIr+VQzsT@zS{9zdp4u*h=97qig<vJ&k3E=zjeYEqh})*Sj51LlN4eL$tD5g_;-Rbs
ztbxyS@DeK0RxGts4H0D~caW8_rXN&lii-}!T(iPs-@5toJy=(iCBWlulYgraJ^?Ss
zQlS#*xP9f}H4!nk(-PsIRKU*sW1@2B<ua~!lH&EwNj%T?^Ht@{jnU?wi3n!D>#?oz
zf~><q41*TA9eH#vwQTmcLPWc;TRLYsV&wW=Bt)oq5J1P5pZ|5bT6Mn2f+qGPo=BMD
zqw=tRVRDBU(C)5E)r!d5DA0$+I<*Pd7@y`POm58QZ-4jY?`PvI#w<70m&mTlhx5~#
z!iQRXiM;v4<I~0!Jy2&k4%+)5l=ek2UfV0#_b;~4KpFsL?k4vn%LpRoAuN!)<Gr1F
zOU8}I*ppS60_dOzQ6dTxEb#7lyZ1b*j9E_n8l*LrqncN9`|NJDIIr6_qIEnY-PFL!
zB#DZO^dUdndwZZvjKrKZ<}1kAW(_Qi{dI@<I5nof<=6JnmdPbd!@mnXlD^j?utKDS
z%VMy*vNa}<fGwi2LATTH5R!b+CH~GXo8i1w-)cmOWZ`be-2qCZp;S3}Ree#2GX4*K
z<={UhrWZ+$0|<XrqXv`>7Rt$Xp__`#enKbs7gxGeRZe-5mNh<`m&a>cf<bPC=z2s>
zldECSWhG_}R5I${$`cHO7@Tv~Ge16VHKA~ROa)JGr0`2onVui5{MKvQA<`?H9xT4Y
zjX+BX%4uD#I<?Jzy4|0|HiBJ&W@F<w88mC(EyA(eid18xMWmw~NCurks=>=zPB|Uy
zQi-iRqu=6mObSGPp_6*bL&+!6)c&=ediso@(wCnwOf#tYD=H_1oQBV7_QCV2OZ~dC
z6hg?At;3=q)Pm&tW1`1t9S6HtiTcg2#R1EsZ7tI#>Nv$O7{r<-AvZf&J708A9Eez7
zqvv(eFeW37H@-We1!YCNiY{U<UqfAAVuwV*<LSjEE_npSX%d}~GWzBzA_U%Lk3G+3
z#xMX)TW4ltR@wwP)B)<8gfo-VxfL%YcMsFju+s>R%#r~@&dY7bbA7lY2C9!4$jg3V
zzL>rB6pqMuGyvIZ!P|V?4t}L`n~%@8xWPU@q^KjCoNRaD38C%elgsQ7#$b_;6C)`(
zpAbj(J^;FUu69Mfw3aw-N{pdLUtVze)wi(W+SxZ-ZPYsKbgjlv-NLFZ-G2QGXh(Zk
zc8l<L_*!M&8<!IgsPCBPW$V;l{G8_2dQ&fnWeo7mvIc8RJqn85N^tWXLZ0|}owin8
z2ydU!&W>)OMN|5BE$dwptH*$F<p7O*(qPJsS5Ph+&*s$&;6wPXn%CXb5=KqIbX)Mx
zJ-J_}<;E;d0v#sA1wn%@bOQE$U=_x`8INhBG!wwiTrsI0w&Uor1x*lXLLr+@?m>L8
zPKM;s^wbld_MN&D|0GB?T*d*kl(7_ZpUP!G?q_w6x@$3US5s0_%9IH34bO62a;M3t
z1Icf`N1E(6Uc@<UwxdlIx!@dj8@gnZ?$~xQ#a=DWEs8>LjLoiGHVtM{;X>G~e|&ql
zu$O3sw&5v5tQ2!Q5$@!O^;Yh*DTOi24s}1*QTTf#s>X48SHbf3wKi`9IkWQv56UAE
z*L`RGRu?T_WRf5Z>V#sIzm$Ee>1f`!oKK?*wmR^z`FT6%mQ(#R6tDCSA8C~^^dfi8
zY@<8YKydxndDD`=7uaqk;0oRn;&$)x<mg44bxf{=+Y9aR7*v-wYjViXn-FX~ZJ<U_
zjqvD4V#8OR(Hg(T%#s^qWANj~nqAgT@N~h3WcV=*cL5tII^*Gtf$6PKXYgVBO&wXW
zlM${$5#{Vul|dRcG}le;x>B$HB!G9qH|m;Y*>e8kU?J;be>O=H4U#@MTK`~Z#jU5%
zj=AVr^IbhWG4wy~rt0q*ood2oj2S1b^+=5>Yzerz*#C6hD%7_gv;TDiJ=EQb=HMM$
zF&Zayf<4S?Sposi?^<GL7RM<riC^alxtO62nxK}VT*hred;D=s3Cq`eHIf}Z3?ho_
zPrkhg_nGnsev`)3E>(%{_Qz6Yam%gEEkfaW`^3d&P`$>Ol4DkrdPdyrf^(hFlI!1I
z5dd#;GJ)5c%lmHSc-0x#lgymYn8#aYG*9@%86&Y`tCw2btaEFO%+Z8hiL@he&gDA^
zzVEj8WqlfL>^oJS3Qj-Ev_`qk+Ff7GTIX5be0?PlG%makLPxBis)MF0I(lt;e1}H)
zY9{^K83zRY++YCOlRa~6#P=S`l@Jv7yr;0y_9tc(5W{Aq0#`;*<F*z1q!hr%8)Sw7
zLJg8m!y65Mrx?MX$68Qi@+Qxq2LY`--<{WI5~b4AEW)LBv-jen6=?Z0<YW__gS?XC
z<P2<?5DSbCoX_6iz%n9mu;ya`5<Iaq;sWxc5!+XYy$<C=|64hDU4SMzBouB?tnt$g
zX_W$X6*H9?$TQo#WcsR*JaGW|N2+vs-1#hNtZ$|8<W4zv23%hJK&11%{JWu2e<!jX
zclHB~GYve&;jX(c<m4I2H)Q5!mT&ysmJl?CUraEHcVC2DuLo8td|y~Si!5L5!pz2a
zb3j$*z;8Cw2cThne&T-H4#X%F=kDpzNuJoLuR8x3Cg;aeNSs<r&1f#>`JwVC<4t2t
zM?N#B#Xx!ZA+Bz5^UXkn+;4L}J9u_B${O<vji&Y1(m>E!DE?ZnN(72zh)h3^>*jU9
z(N(L@AV^O^W-_2Dhy@$6z6eQ}HD`;n$^{6!3LSU_rE=Wma$9Oo5N0K@s$AMK-4A0K
zUq&4EP)b5~6Ru^eU*dcuJZgtLW*1k&fQ06@M3}*xI&36ymGFro9)!PlUvi^%_)3BF
zVKTE=PSm%_)vS}3paz?S5pE|5hyyK%)L*@5sOI-%io3Wy{M#A}LC&WPXtr(ks{4rp
zx)aPQd5eTL2_J#W*@%!>-jK`H=$$*H!Jgi5IyVb8X@MiPw=5Fm0d%<Aq&aS+B>l;L
z+TUCNo#*@=6FNgvT3@y2zS)F&;GM{Oiz_oz*KTL3n8>e6RT!{2n4vcnT$Q#P!Ed-*
z5QIgnU8$R>U2T{lNw9q0#}Z!@&fvRUu$9Ev^-v&pJ*xhfH<Ip0#Zj>IJ}Q_L14tIl
z>@Q}5n8l_-$l#M~#|Kl%L#^f?{m`A!ID69Wmaxr#o6BphiaJ2%F8l4os|6HK3%R?G
z-(H=bdj2L7v|y|CMYkF0=RCqSJ-lMJ23R0XIxWGOueM0XQ`Tb~*FIk)YtAoW05QH=
z)0xgrDY3Z9)I8SXjrSfVXkM7o_1tpW6u1jG9TKc}bmLmyZR)r~RQkP=9kCMS+Z^A3
zrdbPj(Vc`pd8s>EOoe;3{_1v`5fgaZWq`zMu#c{DqPd3hs@BxP`skeV2rr)P9J1y4
zf8B^tEwG#YKq7V|rQhuQF}#&|9DcPQUS-hK=x02(u`e*9tEPbt10rDvOk+VqH_hv$
zLzE?0;?WrA@PgjfnzK+(D-xkh$0F{yP{QBRo4uT&X<fY2*w5?6H`b2fpj~B>VaMU}
z9aA9&ME2W&{!{1N{P%u7mSIeV2v3_Dpf!v5zI!&w=UK41n|`Z}2fV=}K!loD^vH5M
zVTG)lqI;-Nyv#|8z#|Fc>GdOTDfBLaUm+VE*LE8`wo?6XBb+ZEd*qSH!p>>DR{|$2
z;Xf=LRCDSJzM<4;C7-KAUn`&1K!i&Pz)wuEL6(G%v8hOZnPOhs$M1og=o9h0*rmR%
zVftd`gyGJ-cJ1mLG{K$U>Ke#kK9s}h!#@L)9zN=5+@GQJsP)`zPrg4g>7tOT!N|PE
zQl4$_kT#wrGY!MYOJc4%@9`0|W?+bV{NQo82`Eq&j_pr)bSQ(te*LDp1Sj3xUiQIo
z#^Tq<Yz+CoqFt9dpYk^u2kr^d?34Rw5#Agp28s$_iinN_i&wRG;MCS+rk(Us8wQN+
zsS=UQ$GhH-zYQP17rbA+xtBONZ_I`ZeT)76;>2SYFte8ZhTHM^_0ZDy`e3RAs-^zD
zo`lI453J{pj47Wl>aakf3@@L};r}H$&MfFeg3Ewdj^9$h`8kMViUXiyiB?(`)$0~T
z>R%!l8g`6hCx1%gk2e|_jF(4L&Vj70<2*&lqzYYZaCPLj6x2bm>WlyfN0RiC8mg~?
z)8EUig`8V3fOtozBa(TkFZI4UCHrd$@=U$3wjSvaw)ng0-GZ>Y;RjVU4PML|R}+A&
zQ_;e`JYzs|j!Z}Xi}apP`y9JyEfVHjCVScsh}_OC2#U&nEV1N&IyAe}aRIlh&)-Lu
zqd0p#daZdefXLr1hK=@m`Ve1_#qyEV!;M_w=ok;zO(LPr-}PGFFnXjed_O*Tn$D>$
z(bx|G0(`_8edQ0led&)Bea$%IF(Qs!SD;)|kK+{EJs45KZNso+1}_HQAPC!&QD72e
z#LUO_L5N#~Q`>P5j(WX|oZny9bj#199`-$udNC{%sB>lP9e0QUltLBAM)N%Q5QliU
z*ed6RWt_`vimIq-&y={oJ-yw3Ja<pGbSdY1(6Z&bE5OT+^BKVFW0A=lWTjct>a~Sx
zK-Y?YAgxPrn>+!{EfcB<Aas{PV3l4yYp5ig^F%Y(rOpc5-=_pqDc6k$|Ln!qI&k6E
zq#gq}mb9s!IF-wf)L$rX!tBF8$&ju&c)Jr~YmjqgjBT8=qAl9%$+nE!2PefC-{O>r
zOF7bCN_UGBJ_yFez?V`e8qUSg#du%vLp4W&hGa7BDt~nuTUKa0SP&Fbo#AHGT5%Nl
zOrL_ot^(Wi$_x?p2`ME+yK=VWX~6Pc#v}3s>w!uZ9}9EB1&(tA`t!ygyZ(Ioe!*#2
zYn`>|IzXCsrCzEqVS2iVjqlkZ9Ooqt@yol_dJOyvD=9_FC&Ax5Hhxd-aXtw0z`#Mr
zVmf$>G9a`@YVZs%v^hxYxBI?>Q|5J&nST95C&q~vE+`Qy%@kRO<*4uuS9ihNNQOe@
zeq!A=I`}<Q2dKhXaCeS5s%5hh>s7?YfKqiN_z^Bsf!UH;dCPZq5KHCSkhLUx7>Vci
zR2zYlPQB!SIgHsVV~%NpcE{>3q$I|yy#?(u8)odrxddMhoM<G+3B(SiBC^c2dR`x3
z18^TjW@10h+$PiOU(0;cQX}`0!vg3^K#EW8dm5_4yDTfvf#)rbJcLzYdhh5M1nY2H
zDbW@k+XL#+p0bB@DHgHH-UA$JOxW&WW4Kn`RKnzfN(3-b6|n1s0jjYN!t4P;R6Y+9
z+&eB~WyrsBkK{M9#${zYc5EEn+Lt}njy?N2^=PnrFU2m^$_JVl#T_QB&r{9$iy%Ix
z@cXN=tb+4R6E`<wsbw=xtJItClC5dj5Zt4au(aP>Ni6KPQbicyQE{hPg1@AIPNQwL
zdmOf`%g=YQM~i!Kq|t8eTczA0`mpm<u8|8}Q)ZQBZr*<9+M^&aoXwWV)`LNs@0lt%
z5$oILBYtbEG=$Ygy_XkwZKIDq!ti`QpLByO<g7T)x#(?v=%m`8<F%OK*s_s&YyXbz
zz;X95n5s4URHuO9D9Il)LWZHP7lZ6{a|pUjf?vxP;(yojp;PG@Q3h9Vn)MfAHoNxv
z$!$Sbxl)!oZ<vbUbJNd!t-0SgF^_(^b@I2owWySt_vwix=p>+ibMT0CjN<lCwG(Ps
zE<pXm?(X{hs#vb}&aQKBT)v6y=*4r4U@?oR0J*7c5EkE8>CSkn<O1QLJoh(h>S*2J
zk(JDp9x8Qju@1|D3rUV2+rJkvY;gZ~-?s43JCd4wl11z292uDBH^`m)B=LE@>-yN_
zY-HeleUn>}x^6L58z&hbv%6zt!Fn*|j+Io7E$ugaa*R53QORXU636?8kbIockFgo1
zI$4(!4a~0?#2D^U&n6g_pZoSeAgBZAPLe{rbmx=A4{q2EXgvNUp?Cepv59@tf4SwJ
z9gj@2v%_ie-U7S>#ubK_fghO(t37&-K}LOYA@8*QfZ-NG{Vs@(TxxVa;sm@l<;Sdb
zm^v@GX6jl=-nqV3e7Lp!?8{z-`#n8LX`W2O()vS9w>$(kWu%!Ont*Y&psV}MWZ4c9
z5($h+hPKl&LT3p58VP$DmQtMEGYzNul96}ul1Cr(DJ$L*$3Kv~lYwe;spiS?O|dC0
zj+{3IJA4t0MKqiXq5}8mM%KTVL~!);T=jn?Il26B!_Q)II@^1%h1bT~qq`YVo&Xts
zk1l&?=rZ;~W{d0;m0lJxdIuqY;bV2iOgau9cLfGBFJcw<-9}-Q$VBBteXop5pzLzO
zH#ulKUyQ)9?|+(p8vOP8hj(|W5C32{RI*>=OD@@Z3mqjM70pGKH85WO7SUvY-C*ea
z+ref<#mnM~HFUDCVP4_RB;Ms)6NYgN+qnQWQT9_Odm8naxUY_DM44blX6FF|zB<b_
zZ<kfsBg$Y#3L5=08kX3^_k<~OYfvAlQY_z3zqz}8oMV^nQAlB0rB*F<#U-fA1xR)n
z`LY>^#M##eyW4mM=RnC`ai~u=?ma-?wU|9#f@8JyVU?=crf_3QDNZN+QXdZ$ijSAL
z{^U7GQ;!?L?)r8yhDMmXu}=uzM{T_%94n=li0!HkKgt?9h9}AW?0b^9NgZ~<lA~ZV
zk$OWW-baHY;0-f=Z()Sr*DL&zXPf3HMX)P6>y9hm7fNgOv<Sj)i@|orZ&qv?W9!ju
z!1$I$m_XIL3`y3iTN9Ic5*0%!mEHCPVlmj4k%kGkN#^f`8}`b1La&BBxW?jZI#9k-
zwbf&@$#MapcTD6ex)>6^h8<@q*|WVa7nM7lrstwdSE}vE>UU~e!(eg@;0RZED@N?5
zn%Gt)HeD>mx7uxqordpy5A|5s)~hvY#%SPNzC%7ejf$4U*uhWqSdx0?oO&2u+a5@#
zWsZN3x6q~}{t-Ql?b)1nLO2<$<MA1M0YR&*$BK*;%;?hLAo)7{UP}A=3q6bFq*CFo
zp@Qmw)ouCOh8W$#O12zCyC=mzQH!U7s3S@K<lR)UX_P{1a<ZJ;k8Qt;OyLO#R{c!A
z{a-J}iaTGs*{g+IR-0fOPii!OJ`^YNc1e~UCX8lhN_=Zeh=|rY5hFy9G2s(qI?A-p
zQ+A(CKKiPvtw5X3*Ab6x;fq*E8%LkMv||C1*UIxcLw{;a+Z-*wIeuLXsC~wahb|hd
zj*>*`D|FU#v-EDd^He-c4R7*YI0-Nf<|vr1w##5l6!5ZqtyWd?b{OOk{i)gu>w#Y5
z?rDVa4f8I$Y*jr5QsgbOv&<<5^1#s9$#?yr7xo#W$goKfZDo}M3j&H>WL6f*YqQjr
zPge#ysl?JHF|_TCx%YA*iz-;&SDzgZDZKgcEij;{M{&zOzI0LmihQyBeBhnMG=A;C
z8aiNP2)JPpdbXkA&d|Bp7y+gr!?W0Zc}}^En~p^tRJR`r7;5H~QrB=tpERLP*8}@1
z;HH09E2Uo@+&oIxW~N^H`<&rf0c9~CSX;qdV#F<6XSOVg(jwSCH(~hkJ=^d1o*^)A
zj&bPe2iV4nloMtfHCgu4yqHILL`NY%e}4M-5}QdVevuXnqR#D0(+c2RPB*9d5V5i@
z)+1h;M<z$YFB1NoU!D$b#>d@A%`L^Y#XY6;$m((O?t^7Z23SdBG5+fU>afKI-mgNP
zxb|g@M%cza)UCHB2EkNo$xOua+$NOP$}a}+8T}J#EazptT}Wd|gx|`lQX^yh%@wp0
zn-*e>c$8IR9fX05r1vexm|2ggWwrb9L&4P0>jkY&C}=*Z-Brqd-6SY#ZKVa%^W9JE
zU*L8>tx%lr^Pfi3P=crR9oWY1G1eL83MPrT{&+kok4^eX*bs4|2MTK9=O6H5`XYuT
zOuw9c0Ef&wpTsbkMlLdCjWhRiwp4%hNdt`XXG>~Oqddh$60@;nG4L$DoX$M%gz}@W
zAh?&HTEcFu^Zc}f{j=414!v%@FJ`ULC$%D`IhVwrJ7KnpEKdnKrH7A}yjLMU(Bm^@
zrC_s-VlvVvi4<;0<_?=`A|b}SxfsOPp_Q|JIW8crNC_OmZK@X60G@YgqYh_<vL+Z0
zx8Gv|1B&J(P?u}yj~G=(sAzy9EqHCt8{^-}j(FnJmt=5~n7{)<KO7VvJ)Jde6(a}Q
z4)|mBy<PvTT1YVHW--#tG^T0sMb%9LB9}+$%GEn=>7FUju;qmi4bM*eIQ{KrTM@(G
z+RhtuXBIp6;k8a)+ozPMs(7sem|<R<&W(Y1iD>(Duuf7loME~6$@m(HSVm!4u;%2a
z@*b!fv1#zBVR0jK+X*U){4r6N3j;-&dKK}p77akd*?@~ngY|P;f}NP>5(TE*e1;~S
ztk&cA$_6T|6^EF-w?+@PStf@;MMf?cvL)=7xqBw>Km^N$zE$YRt6CPbIW>Y0SrnJ(
zheOK#f<!0*jxR=9{5jasR#or#ur>bv^)x0nH4|Qi*@{V}K`snWNB%4`A{XluHC1qo
z0{xgmHJ8WxoEK%u@~bGyH2G^!H<`YL`t1+^2OEFG?Loa>u#O`i>NhsB%Ea6881oT!
zd~7VGcA3}Y1I{*eNjr_0ng~{pk^}|er(ba&^l5pxg!oI{vVC#0I5K;CR7YmW1Z={O
zNPRQDofg5K_yLGo`9jE$+V^}KzphO7c_yhki#W{5qWA7K@hdrTOz#v~ih1l&=<0*#
zkI55ujb*}j1Yc`BDuJ70aBsnZW{0y*Ai0K?n%7Pzm)>y_F`1ru@*=xoReL80Tg`yx
zvZPY{bbj6^)EM4G{pK98y0JB(Wb|bYI2I|7IE|>jg(1I>1rJD0-FtB2`w}d7Cp04(
z=iVz(uLpB<^|4ooaDxY4ND-!CX}|W5`uKa)YTKEz0v+iVG;o!d$|SbPVGd?PN%5<>
z;WR_;U+u7#&-$}$dPvIudQXqr*3i%XlK4SsQ3HaAAG^91L3=dta_1z-0n-@p*2Cxk
zyjMN{O7Ek4$IU_OPH~#?KnD$S&Z$FOUitMdO+BFb95do8S(w1px_cs1*AJ_2Nkpbt
zJ}h*BY)ap$S36%KUQZb<&EtP&w}Eu)O*Wn~?wEeoX;--I<zOGq^ILOw#YwQ6EfPZ=
zcy&OBL(N0bwHpi-B5zA=kLwOwBH$@2+q(%OJ!Z`ZN9MPfCOu1Sy*{^#$o8~exGo0a
z_9Kyyz|$s|XPofo6u2+h^3IZCvu#E$$3ra$n@i|}s5+yw6E$7sny@M`7;|vj9)(6J
zw|HjsLY>?zB%H$*qT7@Bzwu@qJ_M69x3xX^rFqM>%oZS9nuu+#Ca3=vn9`COh^ak8
z0(jk#q1msGi5^)TpHY#m)I=lL!NT(}f<K7X+Q9~PxG5w;X1WP*{S+u`gxl7aV*UAL
zOYT-gOiS2a%GDgdZ6^WMt5{l0V4c*~kKZy*OsBL)RvQ0@rtglY`j7WN=a?a*>=7Nw
z%AUtOWk$%}N1=plvN`IT?bu}R?7gy23di0QS=n10+u`?d@BRIIJRZm6d_M2j`?a2f
zRe+mHT77~CO$ygTPFmWJIw4(atYl)nL(*e}rnBYS@P#X|B;Ez2gB|WgT7mI*e5!wa
zn91A6JezdHC-F@9<@+8o%{Kgg!ux1#^>S1NSN!p^Vqshl525kb%NH1U8K>&HV1MYh
zE$Xv|CNvW5`JM4z3J`ngqjW@l1E?kFmR6*fW|*ifU~$}NmiqkgoJ~>mkB>&5weVw_
zUrcT=!AB}BE|bZ;ik&=4?ls}T`#$&Q5q_D#Jp9*KM7<eZIwc@)kySKSuc_jd=oVy)
zj5T!(oe1I*m*WFLcrRG)#@KYt6fmedN5An<@jIpr`wuKv<nUPRUPh?gU-05mVq;)(
z!~VQaCTrvag40Qmu3H}r&EYZn=cX{$u1P$63vY&tB!RRA4+b%cclDZt{pf9fi-(vI
zMT{2?4TxocR6+L^<2sLMd16kADg7TJGrI5{!+or@<S)$HB`%-b%l_3S^&VY9hq&%B
ztLjK!*G=U`JP8+VPPtnuieedWHsM%QN#z__-wj1v^ekNY^P~6npLKWIp>%l4uZZbe
zVHYA!dv|T!BbP@$7>GV`z~V2~^KD@OJ^jEl{hBRnvBCSl9`$Wicqz-6c7qo=JalA5
z55WgItUL3w?XmWSo6@j<t+=hpK+TQ|ocwAv>;p<-20zAoXuk!QW42FPbf-#BghGD0
zn^W-K5<43$^85$qjc9cA`mBNOuxqvi9)gU4kow0bm!Gc%oVGxSmDqnjxu_m?d0B4g
ztrG|<u|l5E|4f$|r6!~M`OC7*JAQpvggxW+*9=#FD^k_YJBw_&z(t$MnkMIZCHW;?
zlWBP~(Gbz=RKhe{0j?a_<G-1vLPuEHn1N$~@ubsHJ$-NbvsVOpX=X7h!jP(i#-s2Y
z1U6YqS+Ef4qA}EZms2712~!{{^#o&Q`w8)=P`u`uxc|D5+}Lw;|GDa{xC7nD;6erO
z-9a2=cZZjtJgAc(y*J8zJP;?_Njf|WX^oVHQNA`z4_vedw_=itXnH_wBt<6fp-XHw
zGlj{KiPg)<I9XvUKcx`d5=9^egio1=c?O$yX}51w{AotAsQ*(jtq7A+WQ1(L9?8ih
z8m2*h<wWZHHvvg>F<#FvYlV2<)Wk#>q%I!x3eE+02pi*d{pj@ONpJXI6P$dRbA}W~
z!3BZSai|CMvNpNO&FMfb%!UId^wH`!1Ebg~Vu_>1j!hHsj|*VxBEnW-CjQM16bOOl
zaN{#AE3+On_;CaA`mL2UN@QK}%UG%MJb(QCn)+fHm;EB0a~5+f%TW?6VNj(~|4me6
zlK7P)g6IoPOSK4+4nC;%7pX72<~>S>7RcC^BFJW6Ah2$K^w#rm1%M7b`oZsh8?zxs
zqi*rMG1;={?UseBrzp)5M4>F&{(!BtD{2Vcja!n5$Y)?3a(OpoMrSwPa16^`AEZF^
zq7y>!pWEY`6~nL?{{^{q4C%CN$_K@g+2KH(=X!1nw1%7dEzCwuatoT~7^$ZUqK1d(
z@q6^w&tGD9xr94fkC$ZVs3sGM1*Vr*B3|f_nORd+Jr#1MD9HUAfwy8zd)!5BQ5i?W
z&f0c5o5C4>#4c8&Sjv4Nu(gKHF(7dINHs@T2Pxw|AzyU1fG(fxM2O~e?XTvZ14tb?
z)?LB_mwC5^YnS#UAubSLHZFj3D^D_>CS2IpI)aF%(olWcl4D4o^Ywglus`XE7+6#X
zrz=v0<EOIPewHVW!Iun+to(Pcyg?40d9$B&on^KtyDxLf`pWLQ)pQKcQzpUWZKG84
z8+qeyCf72jiz;EX%JIlV8!)4u^!{uz^e|!>k1}qG_$-xS7OOfQUm_tUUK$FKsGn8^
z5_hq-%~Ry5ygzT)RcV}!^;1Q|;@@BQ(LBJ2)-dSOzuG6SJwmQd&B}Q49x<up^{#zK
zXlSR!Tgq}76>G+k7Zu<#G=F?NE|Z;2%$VkN*a5-9@sf(xjS_;2CiGW{`r*UlK-r%`
z^AInWnjoV{l3>xEP!Y^Ot1=NudRgS-p&Tx1<?_ZB9en>nm0g<{XMCzx&mWQJbveyc
z#i6i#-9nt`G+S~8qJ;Ms8Px=l!acS>j=|JqPbQ4fyjj#YU?KXLNZDy_)K5Tc-)sJ5
z*=-U2+0Fd2m2&ZTKxEh&9)Yqf^OYVn=5;Dm;-H2J5rU>6dfv<GNf;ty0@YE^m4RPz
zbluMCk|7{`<%a6FrOw1=KV0C1!6H`a1AqZ*FOPRSHM&&R(YwJcYdJ^WdKCA^cfYNv
z65X6BIA4j6j`;M5Aed}~!%G9T!RM-Yv)D#l1*|KCw^<L1DrnIW^Fp-N_<}>;%UIag
zbgh#O5ueyHsc!FdHF74|t>zQkkoWOguJFR&TC}(+eRM?YCS4N*8DkzeD<f^q7<&rz
zQk}I=r%(S&Z`w-)d3nbk-7Yr0g_Eq+Cz8%b>BsrJDBeK@GTpMDrYJ-uo)7;~(L|CD
z<tR9~$EmU$>3Te+Z~&#K<<r18KcRThNVoc@{6UDKQY0Nt?W<Y5|Dp-v?WTx-#fYSN
zq#c^Kb}8=q=!K!7?IS$vpI2NY5qoGSWP?ynBPJFWB?E!>g0oqT2(VBJY)r!j#|KJe
z-?!9=-i-6a^tk)k48kXHKQ}Sc$h|zeUe_?F8=1eAe4C0KM%hM}ansi47jC@qy^6o9
zK<3@kcYCK2(r8?>L6~3bqpzL^x7Pq$9{&d;U*vSxQ2E}?xXq15jefB#x>U?(XUp9}
zG1>1j$3~b~cSt|fbZe4HyLQv*=DgA^;rVkI-c;y(6R(}NEDaSLniMmkh@R96{3ijc
z;lA<O>-fENV8IINyH61)p%Slu>U}18E`NC(sO8jtqvqHX9&-CI7Pt03pDIaBXE3yu
zASk|6Ijm1%$I=Ay7dj>{lA3mixI%-Qc*i>S$eqcH!6(lYXZ#L+OEc)jRD^<pbCa&;
zqOaG@BIiHdL381=LCXAVus=XY^8@Qi{&HD<XTPx{veD~Zc#7xQZy|^aVey$Z={=>W
zqA)O{wu!zD_9iRfavYSIRL}+<0oQURYqNJNzQ&zv7vU<$?jAXoWX5$wm|PCuEC=?F
zzMjlL3vs7WEZ_#oD)dh4kIk)9E-Y7eqD})@?_)>ZWpp%5!I=ig`t(AJts!unW4q()
zwR5b|YqymH?eq4XN*yf_!YSa)4j~E-E%{*hFndXYo#y-&<3?!8G%nrm;@}UdFmN(T
zxuzWc2tCt>m?f(6vAs&f6o^hHLuUqR^*COw*DhRWHw&RvxqBn)QhkzcN4l19mxk7$
zx2=Lc^e-dHH5mkvF8W(bg0Ciw4rs|=c74xPdEj^OeMd$(ApM8YYi5@n25oE(22yNV
z(M8-CZH4~z7b%3O`vH5E;PQmQJ`&cG!^2h3k$Gf*J2?I~UYSeOX9H6M@GJlXO>*py
z)^a};JEwSelMp|_Cd1G4r_22=M|1Q-j{QPpCc(|Bce?A`B#p?tYpky}`CT!;p^fPQ
z)32-4MJ&1EqZh8$Bw%p^o=zdXRK_c1HL!Hfu@_mekP97XtE5w?S#o(_In-3&yL8VJ
zwVh<sc~mQ>lPPmQJy-=A{=(ugVj$-C-q&k#F9xFK{~kOfIvaL@RK!bw@DSr~&;jJe
z;0ud@^HpX*L%gpa6e|W2?THc6hGD7Nlu;O~;!p3)dSi;xpeoj62g=jUj<I;Q%QK7a
z24I0<fc$cS;HWW}+rg^}MY=n=H`sg*IC>u=bQ(lgv6N{}5$*G_0w3M~3-95<%(s+b
zOvpb$@ose<Tkq=sZdN{}du>{!OYUGJ8#ZJwLNf(VN1ZT2(f?J9(6)W`XTzVnW1T&1
z0vQnvfq=0gdjwV6THw4ABpplPaFnZob>4>Pr8&_^!7!jC5Mkz<S*Kwb?*LTOpFf%3
z{Osphd{ZG<0r$zubP?d_rMe!M=uXcRI*lb*{(6@iyQXyso_7yYwae~kO5sy}JUF|i
z@FBfg40UojC-WjHrYV^@Rw>Ip&)aN;l?BsK0zp_?SoBR{5=%7M_bb~kw!F>XT0C5j
zpFT|6ZlRO<;>f$3u-vj;OW2zF^LIaim&=#Q(`r|?mp^$NKZnP-Y~1Xf-=s#&u*wr*
zL9J!^o;D!0VVMiu5i<GN+E{UB;HC}LB-Y!OC$Jf%f3p|vRu*c+!4}c1(&39srb@Y2
z%IX*~atK1dGz3?gT6r}0u=??Yjop*g<v^oHK?c|(IzaHkOi$bXQEGzXx)IgCSl^CB
zE#2f^l2C(Z)Vumy0UD8s97@c%jTHG|HZ80C*yYIGn#C?BiyI})h_aJqCQn(~;`bD5
zkX_x!^}$ah?jOY6^U}zt<B4<fP|P;bW-MUcmZ-eb-Vu{jaq+}qruku^l+@Qkkbu~%
zV$x<$>fKV;@B-@ZW~98dy6^IX@c0A;#dTDy2%<OL4m<DIMMXtnn(uKK4sG5+tM67U
zw4d~w{p`s9tY%A-Sgd+Ok$Lr8bI|(0Jwb7}ern%`Qzcq|_`VVsgevAYqtHoD8)$R9
zP;0g58L6_K?NDT?6$hrUHr>QMR|Hqwpc}X^b=zZeK!QK5-hYV>{VV8w9|MOnjd7__
z<Kcay-zH<~mU0e{9Yl@=pMU(0cX0R>Rokn&<Y(7!s<5lhiB*ot={8#W0u~Op+K}lH
z+A_Z{20@Vd_tYt+L(=3Vq`Uy&3~f*9si`S4SxB&f%<~Yg94Tw{+f%s?2hGGl;=XD}
zdb|oMVj*nMBCJ2ZL;RGsm$(P@LaN);vF97DF&;^b29nq2ZYU{nl?5w?cl~KIKYIs>
z7x*!DwD$XV-j$0?D%2<Y*c;_TW)}o@R7?`Zyp-gu+Sm5Y>B=@eo@v&udjZFC@VAOV
zdim*8j1XJ=N)(y%2JrJ>f{(33mU~hpXw!>TAg|bx-I-Gko@GnswBs=-s)1xA%|Rr>
z)_GQvUnu0SoCyuU3^N=m%ql(_fpw+?ts9m;Q3IQviJ0UMn6$g2@o14nLUg~!Kjaf{
z+6{xl)qwt^X<fH#Ad9ESgDJadM>)EG{<;|Sg2+0obOoS6=x~H{yLY+b%W=2v`Br5c
zuu*TBi)SQkLNZQB;62jHI#f=m5yDfqIkRTydbcQdnlb~A^4}qntO<49pk%$^(aVlg
zV!f=09`oMReg&ZFZ|Og;rUUKqTQ~0c3?9As8rkIiUwWd=eE)NwP(J0;STQR?xbSdw
z$PPOmQo!M2j#Tpk4`YI0WLR+W-!?V27>zEdD3unLm%rCs-O5$qgbBJwGc)4pKVc|9
z4Qj$>YGg56gl6VWGiwcpE3&K4@YX0NMVN0&_-He&n6XY+Vl5$oKF=C~IXXj|`qg`i
zgSa^H$7BEe4Dv!|n)7|shh<K1l{<C<o$3iwpFHJLp9+-zeeQ4fh<5{rO%99)6L)P>
z0ZX_9=&yya?L^|rC~c$5h*0W_Ii`+2Duv002jQWtVj+rm#b~EInJKq`Uf}La?#KUB
zoo4B@^?|gWOkBR6dFFyrOru2WnPQJZKb{-sTbQ&Ryg=#_bLEpKUdu6zzIz}kb5$vS
z(*af6F851cpk%u%8N5Di;cs<ae!&X3B<V~WD5tIs2OKvxZTNe1)QKwnp`j+4zs==d
zjjG=dzmbEqMlY0S>Kqgh8gBo>jkcu5q=VcOw6(y90{QSVyhz&0Gtp>y<C-euf|laX
z<abRx&sXuziiS@P+M-pWD(&4IO1Ff7VjQe-v)UDifxip8iqDnu7{g-U<zLEOo^_Ob
zC{|eDLmljKQmHYwQhFP5km~+%pZj<e!LE0jxQ|vCewmoBC+9aT!G8DfBt3U#sum&J
zem(C;j-^HSXLxs)GI175{v&fou_~l#>!kB89Yr#BI}6#hc9q^+e=zbgU2qYi(C-pi
zVsUdZy?!c`Etwf9ME=NfWF)QQYE{53JZ1qH;3$8i&TUXl6F(h$hY!3|Q)c^lCty%!
z!fDebgtZkBXXdh+yr;>u&dLThieoe=-|wp8LrE{w3Z3;rooN=4^c_gTLwnSkXgEY+
zWhBjBTbfx)@qr@0GqjiQ2LRFkPn%-E<L>FtAbcMhS9vmzAp#pbj1C8?)F#-ipQ=h|
zN>+m7S!dgpjg~gBS0Z6Ec4uTbYTFQ7R*N1HBLG22Mr^JBdlLH`^qJbMN1Aoil;FS<
z)eto&(Q!UVrueJJB|mwCpZw2qw0!2VjfbC-P>f+V15p);R}*bvw3Uqo5V{*;s0Zsb
zu`1-y^GW$rEv@3<u>Y?Gu-2Qozt`oBEnV+)Tg$|@wQQ<^S|be;liTTxMU>qmVZ%p`
zSweJt3Y;T%v6L~LLfwS1ENMmK7Pu|L^OkcuXShKm2TVjFj%pXe)z_Y@g`r#oErKWD
z1P5aRK8=d+S2OP3z^44n{N*tB&3pJqC_vTXiZ7dKAs~4ic07f`>oxE2%O4!6hlNE_
zKE4Ahv9?23DH^u5qBZ}A)e!aV-l<!h`n<aCc#|JO@=cSKO{UDTd(HqYxJ-e4r0eB4
z1WAQVQ^kz8ZqU0WRV#wjt%&KxGDBq;6tYt{_&C5M@3y4m&%RUC?72B8p2mRPik6YZ
zUE-oP@pl`thja5X3U9FS?V}DAD)S_irT(YS3cV5O`|V~FfO}Y-eT?n!b5Gq{4AzfZ
z^i#p5<Bc*fGP|&KN>nbL8H_4d13pIKrX<?$^DZgLCZCZjzRMp1A;O0ROmW^m$GdbL
z2E!X+A?@)`^X<xWx9ZEjoCQ?GA0tqXR7;<lNxZlr{24D+5}HjMsIvcN1)h!@eI8@_
zGX?2I>3_Rf3f=R04EiZx1(~V#^}P^~zmykV)JOC0hBbhx<^GL$iX2ROMZHHVwv3I>
zlz4K;YFs=LRLk+4c!4Hm!#`_b2MH`%19R}P=|Qkp+k?&jvWOPz?acFY%pRj7@=E2t
zOiE2Q%rM9-RB;$EhbO2L{G#!$jJpE@m7(aW)J17tRjL6oj8g!m0PV%XTfntM5CZaT
zP&^1L+kOHtGah~F$mGy=(!W<v^zDhqNXcd2Y2L$Oj%PJj20)p0KY70vSO=5cQI6I!
z6-uX9ATtk+*Xkzz@m~)3zgJ}<e_)7oW%z#*!}^x5k`qXk$*kIuCXp$02(O1sVjvLV
zm!b^Ix_2Q%b-2HD9g<E}K+>I;+R`%3*Fs7K8w&OHx!hLHqq12m|1I@%*LpKW(dTu4
z9OADbJa|p-mK!M$gM0$Xko3!?k68e$?XI8LSl1|ib3QYVzTdm~lwg7f#R{{IWUnF2
zer1-7LxYtY<nZ_;V{fq>&H3E1w$nT-ax!?C@o{!KC+90N&Iak6_cSb&J~`7PDOUM>
zU1UnuKTMwjfC(O-yB4rxxn2s;$M$<Pukd7O3p<b*>B2Q{WU{>ehF#4`vV%TWKN@#u
zgLnZfTo5P|S;4I8&&Fi%0<S{9S4e+O^}&00w%^NU5W@&v!yyi7?0av6tG(Y4j8rs#
zy$e^w4$aF!T)h7)MJ-scA!Jc0AUxgyl`nBH!>raFNfQt+>-xx~n*@b+y2$2$2P`|9
zZBps2wa1~}wnKlQ9&#eNgwL*yhHYevDc+DzJ!n$4{@5N@V(M-MOzpm2f06HR_tROG
zudyGZJ>T$|aTU1ef1EAfO9%gni&4-UlK}(pK88(A7EcZk!n*%$nFE$o_H$!*u3cs9
zQ#VF)WniD8hytUTbeD7Q>P0z=Q9xrqVp$owESk$f2=}?@z^i3H2mfbE5@UIY2VRd!
z7L^d`q<TligU^Oe(>Ly44tuW!NJTo<c5GM-2W^MO5Ue~rrAR+|UnLZ=lYG*${6AIm
z<OxWizKB}FkjxL@!>oVKE?4L6<G(1m4L}1Z{#Gb`3RUUZb2|Im@Pq2+?}J~K(Hn9U
zN9*8&y{w=d<+1q<{;eyxqcp54Fdifg#omG`Q5V|Q9efvE>hexeLt)rnohpBK5aOcf
z7RB%KyUE`4Vmpu+&8x#$il3hv=<wwHYEi^ts#G`#?0WFG1GjS%S@*s2t9OI`en|>4
zdB)&WvCrE6(eJs3@)qlOzkP8yP-_xiYm$XHy0mYa%#Q^|?=kh4Pv^kV3S<Et{jmF+
z;g!+0ovBv@hA8InQtRsZ0}<rQ6l-6|!Np~0z}2R}wW+v4pX>`}d2U+bZ*nB3^63xS
zZo&@TLgbUn!|ST(<7rBh*9d5({4Ax30LG2<z-Es5ZSPto{K}tpJ-Yhm%Qs~p0(yP2
zCo8**lpmjt8>1uKhL`?ci2>MOOxV0_1oc^cQx@Yv>OH4Ix|NNC2CvDT1xe*7VC9?o
zv~S}rI*!}whtQMk<o(c`S=z-eV;ky5pnus?i=sj%H@2_P17R5%P&2rpLT~_`Cc9Kd
zlX_Lj<$kCe4&(YsKkcc>7owY{y1;NevrG(WyIM1X(}e`Z>+ChwP2bM~idIV-8gvl(
zGQ1jZL*npNq~xV_<u9UK#VDGWb+YIP1&RacERaq3y@kI*AA#@)4ut37c;v>305PVO
zd2zr+xOB1P=$PdTJQ=b#105zGi5Q4A9<@dr45zC?ap1B9;_8N(cT-M4)U3j~wQ8(I
zEaL85aRkEEIt;%PAnDF+DGr1Qk&me=u<_!O$7noL_C@_MmQqc5*|!xQZ4f&ebj04n
z`|j*99elY8rV#l3him6-rq-!f-W7l1i<r<)e32*xgxQGO*<WcUJd5TCpr0+p(0J$e
z9Lzgm>96C&gjG%`e>YPuc9FZ8=|2XWuar|A<VGX+S%B!vj|zAX6tll-Y-?lWVyOIc
zXJ^LMv5X_?@`+N5mra4<U^XMBRSpB&4rw`HRsGz|0Vp|nPM7zuw%yJ9ub6Yj=eO*r
zjh`aar-3I@fzro<v?a{xls@CF0Az9EM1YVa^YFx7%_`O~i-AkVFq-6Vhy6Z^>#T#L
zjbXFi&J@h4(HS}rfrXIB(`q9OlAqL<``{mtRBi8Dm5wQTEUuN{oxaqxFWcM3oB{(a
z;^d2YA>e%dEfNu?|C(Mb?DR!C9BkqLqZ?`YUNE4IX2l4?3Zl{xFTrPi#f8^P-$`ae
z7$y-yW?jt4EY<DzyGLjR&L%)FS-D#vD*RWy#N>FU-Hp7D=?COjqSY30WoOvl`Fr4K
zf_$ysUunmR5muIOQ8RkFjvA=txvcK^)<z&H9STI%OrIbP#R_7_Z&dSnglk9_6(5vP
zAyyI}?n+W2tiO!z@4AOsIy;;$GNw~%a@kPA41CdqPW5vXA&N8iR7UE9s=AgioW~=9
zzzNK)#Ds)`o69AU0hN8m`jrfZQswO2QK+R6aC}|QcO3zgnJWp*ue%)+tV9n0MDDzM
zToC&Q!U6ol9R`Py`do$*J&^99a^?(FJic6p4ipu)rM|FDIv-lH;dqPSaigWAI)nGb
zmewS~5}y2u@vcoBd-ozT<otfje|_|0fot+^IVV9S)?NRs6|o}cLLFhMb<qLbaJg5&
z?wju=f{+>=@g&ybkSxI|Vngj>FoMJ9MMt`Bu6u^=nyst7yz7G3Qs%(-y;A9*P#_&a
z#?mA}Y1UscdZs>u^f9DI&Q@yd{y)h@D!T80d(_p~ota~|3p0Iq@KT{?z_`Tx^aty;
zV6?4m-oH0+ngiEX@m9$inpYDZ*bZbjLXXDZ!Gb+j;Lt$Ff3VbA`;vf|-z{LdY4ED$
zc9<~;T+7^Uf%jt7kOEW)`~r~)xkV3$3VDz5dV+(Ci#~^pu!DP1wNJ*X5#E=LO%L?y
zvldVjy&-!6Ph4|Nho-Me_J+Bmvf47_OrQWu)J$aHx<c7&uI-jU%SA6|)mJ87S?ExD
ze+H%Gg4HcFu~#fk7I&N3De}a6`CP>Azj?#ow%4KfUs58itk>uKa)xA1R&Q~<xYg6c
z^VQ_?t}{a=hq9Y%fk0e+vzmm8_1s4$r(y2W+})QfOZwkVd$f2d9!R+g(plYz0{Nx;
zWM}rc2k&p1kA3$56!NC4KNHkC@wPThjkokmb363k0<m{;->k8nK!LV{ASt|#k(Fhd
zVA)bkyVO)Odj0j`e?E!bL#XE>sC_;p9iGBZeRZTZT{wNwyg+t%&;V@Z5p4*?H#D3F
zeeV+?eOK{v-DqOuJwn(gQ|ZV6G!mCC;ZGG?z&djrJSLZ&g1Pf^@o4II^}L-cJwuBF
z72D8PKGQ^ixz!i77U)C@^!u`aqq0S*&BWAXFDa4QcXRG2#0PqXnjcjh>RnZD;388>
z+#tqZN+`T%UZw-8kL^jepu&o4Ft^-?JL}BO#IV@;XTI@fAc4cT9jb(*_pA#k3qQRc
z{{HC4_1m*;ikJVrm!g1w-yHYsmR+xuM9+-bpcHHzn#ZDt{7yW9Rs5nD0~k`b4yS2%
z=~jI6Ja+AXfoQRl9qctG(w*$a5w4WVfJC1{&eZEUv^Xvz0`Pyuo$J(P%Gf49i3d#M
zefhSZx*`Z#2i8Fb7g|jEkV98Lmb~(s*zbS6Xh*<Rov|FJ){HI*d}O(m);0groE+#<
zc`e(w3Mfx<*;?r#$#y|di~xhsDTDM;mJmk|TFrHrfQI2dPH7=V15Vdw7(O*F;LwY-
z!X~#vRn}f*8<{F<H8sFG%Dt!Lgw;6X3~M6OiC((#)hMrjSb@DSrC>SV1$v;3hr^Y0
zg54LE)@G4mFzQ8HO)=Kg%K-)V{C_G~+LvY%IZbJDuZIC#5GyQ~NnMZkvNQq6QmV7o
zsu%fI8@kQmk(&bMb`KtniyzrPbX5}{SQmF_`fBr>NvQ{xnQq(T_RnNPtH);#)4HC^
zvGZ#$p>}MY@qj1&+t1-^h?m13#(t4X^Gt-_a<T<)1E12%)Q5$$TQO1jg6FfWZJBbR
zQV6KoiSl<>ppw~c;KIL|U>{zUG97>1h%+F4nL{|fsa$3GR(-<aV$HkC(uTVHCN1k`
zf#Cr1o_hIN>X(G^eZM23rX<5<S#QBp)<4PKIq-HLJ^g0fTcvH&#yu{R1w&oNQkjwf
zC#`mB>qf4Rs+bzCXTY3&cwNf*hJ6doGSqc^OeZM&=I=!M&{>-kuE>X!<)Y$co6YN9
zx~$b^yUF-H61LO8^ZpyLLKkr<?Bw#+ep@u2Kh42m_m?AldeA$e63m01muhqh$rV-;
z>J*1>zx*R7K6<P3lK@WYyvWDG8UKCo+iPmyOUxHbXK=0Ldo+KytQ~%9GtVh7Z)+R=
zSpY#4cy?#LCS~KW2ffgIU99lah*pVU2dZA7KBY(_bG{P4KF+RqKRij$LS%&DGM54b
zT}h;Jkk8B7$%S}@&2MnQrjNb{f$TO|U;Y>Wkmu9*vj(Q;S>~0chkt${d;_PE)6-1~
z?Hf$R7HBm^io|3vmOSHoEFK(m*~>nHabe~kDp~+%xU;fBT+To=>GI11OYD^^CTZQR
zBwmSJ-~A2=uE)iVJ^2e0+0_Fm85&(=BJQjAK>a6K;Z7<Q@mkIQ-2k-e?EzkaD9oM3
z33^xTU=9?%Npuk^C(;vM_H@mlIn+_)!w{eLM-(R>nghh!G{Mi19pOjIz=ce<QcKvG
z_WgZ9x){{D6%inDZ|*s55X%fv72BcGSEZ=&-|)5uEW*my90%Og?L#mtJYv4hz#YNn
z+zVm!**FdQiK{XZBo6~<o4kMs4cfy+-1wl<CutEuFNTD!S4OW?$T7fPUrq0H+V{N2
z0;|vZI~XMHR*<aV{uX?+d!*Cvrak67SZVO##B9S*1->qisJCALt|xoH%Nb)F!NEO^
zh7aRgW_0$plH2+w?&BGEh&|TJPn8o4w@V&P;(DMOyN#7M(6*ydCflQvDDO$>%N7!^
zIp@K_&F?J_p63>o<r{G*wUrZ}b?)DA<F*n5HElX%(rA!YAex~z2|J6hk*B^VyP7v=
zX&n(Xj}}mq?5E12!%gq1R0Gp#mBw#&d~d{6?4Flf?a=0mioZ8byQL`Ha>wtZzpBj`
znpse1ZRhfGbgC;Z?199H$U|wOl~KJOZwc?(l{4tAY9F_(D`rT#j(sD^p`n@_XeP{N
z<o;a52@>!>A1oa%oTGAiOmg=wiblUcU+x;MyBVT|Ge&6tdsYgiRhaZPc6}C5_L94g
z>g@7&P4teGR^xmX*UIj~>Svn1t)g|$DGMJlq6?lyeX@Jq&8kF%#8y2_Hr&Ep$hVI~
zG8GpDjp(ttY(W1^O(;cKsyHb)gd3u_8W0(v*XTN1`jZ1xW9de$e|)*hEvmV(i>sAO
zU6i};{xfXqKaLgew&mote$JH6dAO!g0RzNoRC(6HdN5PaufqmIljO$El{-S+3_UAh
zRxi<HD5fU%=nMc1wFCosdGTZG6*Xc4HCeMYZt4L7c!j|HM>o;twA+))Oo$kLUP(Z#
zG$r}ZJ;fz2I+An_fPY*LPOp%CQ9@xjWC=n+nQ`i_uUUJt1{iz~Iiw;ZV;HE&0IZf|
zGMsofp*@a$cbjfK_R2-CxApSq2}oM;iR&ZZP9dODt?W<Tut66mE2D{p(K!;Qu@cMg
zS}}3|>SI}i^`Lj6GE@~&^4>?5#Mz2H35*Eqr%cvpo8q(y2DJJDrp-nni!m%ckxO`3
zW3&=YxtMN)nM#_sf4{AB4WMHx-73%Sue?~H@wf6Lp;Quxm6qz0lluIgR`w|;IJQpV
z!-n!9AwEZ*J29M8P~TcndUcgLtr7rwu>O{Lks0K4q5Q$D-xKHTup4hX{26z#)C6kZ
zY_Vzq9!u$SW=D#Hd)0?O3U8jMDA&`LvpRn-C1<8TCK28kV?5bGXTGpqIWRrmXGNUN
zVtZ>S4i)sJq&>gV+;ti#Wks-_igJ;4mexevypducncDIj?zlR_4)r+Y;}Kb<tm>AB
zH<Ti$%QoGtj(b0EqD=RDxnDho1lJH@NMh0;ez(BsT>c6Bf{1h7i6l3q+nY&wZ4&{a
zSH}R||LZaM6?h;<JV@;3;_~KUmIyTbC!V;Oicgw}ZiLmbLN>uc0rg+c3X}I*%6%&e
zR4Jk&2A`RkiW7<iz=%Mc{Pii>T31WgAI}?Ov+rB+&<jx1=XL6`f8<j?#o1I8x%>A1
z+^H^E!i0u1QW0zr1^;D~%oZE8f-~<JA@h%-e$!RQt?aw??HJ~*wzHHzgix-pB>bLw
zvko-4KFe(jg@y~~<_PV38~Ph1g6~+HFVg^_i-S~3rJeqd_u=J~-@j#v7%MA^XWl8$
z8jASGlk02_>X`}Pg|=bdKfLn4`d&DGH&)F)@ujdNTjn_r3?WtC`ycZ~T9E7`<hO3C
z()Gy&fS!|l|3K$7ueI3T*0xuhEYceOy({!e&=qzvPa-VJz?S*^l724p$dWl;48<0L
zXogzN1_aZDyzsx%P5;A$31w6DuIF@&_ETR#Hsi8#K13m6!1FV`!3A3`9_2@RWPt-p
zMT=@V>LJWaFW+)bP-N{##hk7wuI&$!?$w0yjk8at|H*Ii0?{Pjho(xJiagY?cat9F
z4R?Q!%DoCJ6B<*}jdgJS4^-;aDhCpENLt=B7Jkd_X&tFu?vG4<cW1Mij(r&4`_L?w
zn@v##<6$0B?N}gxJC+Q@Zw001l12tq<2`WxrTC6!<jB&G!xT%^!}0~)%g$;2Q+X&-
zL{?=AQ+ondZBMoWX<tD8135liHcJl>Hn6V1xE0GU*RsbN&P-_ym2HnE?zKn;UzAsh
zces&lita|#9lPdm7Ii=nx$!{;#PYH&nO0VQLOjhMtprSBDg;?`gl}SnIubhuHTZId
zLC@c0ex>W>o>P{H(^`)Ws$uYT0H)W20d7@Fv>S}BF5HSk7)vlWk`g2GuMMzr)Jff&
zXu{DP#G$zUQb+%mMqoontZ&>CK*qVbn9vPg*Jn2)uUCTPYR>m0Y6ySY+=s+tD1C<_
zm}}lfZi>0S52%OH!5T0UuQalb4Ojklg+3WwfHppXFSi7Ymd+fT&o<=lZ-~m+mf3%(
zwm09p285;b$TOuo0Q}VlkVLK_Na#mMH0GIaPQOXH<IcuEShMv;j6q%{Cs<%J08qBt
znGQ^oJKM=1v!gT;wX@FmR>I{t{W(`{UJaf-EQwJdyxUs}f%KMHpAGc{Vq&GCMSb1?
zS`<Wfzgt7iQ=nOXuKu8%jLZ1Dj&<xrXEd#fMsN|qB)vz$<LPAzxx}^M78vNWchkO|
zD!5z@aS?!Ords{XMd{aWGy3WI%3WujQS9p<!Rvb6yVcFhzFDm)PjgtRw^pi`RgS!&
zDe0%50B|9lNu!S?LuEU}3lO(@jB8Xq!r#y~A;9Xemb^I;dp;;0@z6*t)=c#r@9-`o
zJ#m1dJc~@LJpAWEez~+nh^1_1k6J?7$Nl9VO)}7XJ;n#6DDnrQqIe-HmK++~0sRI7
zs6-~iEG_RrvZ$K?%Hx>_fs30D1WW|(ZRd6Ef7MF%|1#y|s1d>CUlU$P{NuBBp@Zgx
zFVj6M6cM168$z-6?&+u*pl?KiJRZt_%<N6{kp++rfc9K-;2uLUH4mBA+0Yw*K+St5
z&K88mJ<(v=fXNtHk1gw@BXjW1p7b|~tbO`ji3g?^CV?O1iTLRjSMO#uv*x~~%u}{Y
zc27r93%&jIOHoQtc$x@_4uwFyNFz6%^*EPEIz@`4NleVc*_BDz)k+B9|1FW9{gYk}
zUPf0r-C?)L$7hegBN+h!iBYiU!)KDkE+M|-@7T(^!IAC%<;5=J|Be)Dd-H<kJHb8o
z1WDT!e6-pW{q>oC<m+AMJ^DE^4_C4sOJY2!aKBJzXMT8J;Wf<<W2~mj<6n$${OJ`m
z1YV$ph^zxHE`PrH|9s`7o@LTZa~A^;wYn2Ps{x=K2oiRu-~U-%I4iX^!Q@**fMKhZ
z+hnn_XU$Nal5|Bwq(ZOjnjUiw2w9g-I3E>jrN0<@WIQf0{84;UyyniqqegM5J<Amt
zsrWtYdyr^2dnv`t2iYO$@2|5PuZD@|-dbqA48&{2;2~p=C{*ENx!`3Mg4Rfi6yd#Y
za{3&NBTnO-`|nqJ{cKw|LXy6aM!f+$Z*nb@pNVG06ZxoIuJpSM39YTYI}&4fNOVy;
zhmvEWi=*)|*NeW4>E1qn>i*b#L3aY6xwl%UeL0ORua-!%Ya4~Ja0nA*L-E$EmX$Ok
z%}4F6lM#7o8)9OeYKp?fk1D-hX!bJB5f=fe_IViAazD{NB_3Dak((@_T=DcPQ2(-m
zn>l!5U$Fb<eCkgx&+>YjL>jvPW$){)xJk&ZxXFJ<fmYOsMERj3@0?y0kPKzO1njIe
zh5#d)+t8iHBgC!MuaCEYvG0FZb0;|1Us$-yM3H4LCvDTMVpzpWgER3I#FZx!^i<)&
zTt(20nQfj$0wa1!!6a<kUJ{v<DgX)1ko1<RsO2e)4Ew_~YJwt?nv=R|z|QsDOg5?J
zOid;ut@o7d{_ZbaI9!t_z#m*QQ00h802>qy{9hYK^LVif?e_MdXF079Vxi4Yy=S0|
zVr|2n6qT$9(N+~#rkSVy1P2i6Yb;%0yj=99H1jKJj&P)Le4g^GY(y@`Qjs0({inr>
z+AT|x|CyzN90gJ6S#-yB3rI3Kp9LI;VwIMo(=`kveF>8S>G<J)0h3UuU>Ey5`k{xm
z8h-MAa*&a0Dlon}iyyX~^KbeRtWVRz2ii%>dW(WW_^x-wL=O+C=rzg3(6JR@WY7_Q
z4C}QvxrEO^Cce;u`_5eV4pMsBv!dNlRzvBqj69OS({56#*s~t@=fbj2kZ6L3g-B6b
zbpu*HpYOE_-GFp;Y8D4_dJ&XVsFj)G*s@wd%D<T1A?6`)8?s$U$}aS#3K;=m)i6qt
zmbyYPNv6N+*PC=f<Q0mZgCjrVX=mtRTDcl?qowNesFBC#Z>prD**82<gzQm4{Ayr9
zG@Q4&X6CI*JD$$_NcUj2zweS781!V7$Y!r;mz0L+yTpZcn4O(0VNMwwLl5O#$a^DC
zBFcoydI_vpRQs9)G+#H7Tc!Fzgs~y5abi+&f8uYFoXK&!8j>nHEhI}b{K_+&TA8JB
zCoa`)eF4*8aXcFmHnS6e`3|I5$=BlK_cLC}z(Tqc_&13ee3@hwhA{lbc&K=qT}VtM
z6~lPLe%C0^^aznd8HGw>Yb=Muh`&3TfB*MKBJNC0j~g%S?cZ0{nc^nelgXH0;;=H`
zl&jk|Ub?PIrEB8|2*-QTO_uC>vpcAL+}(p*1q^;RRaMxA2-OqoA5+@70!X~>m{x}2
zdoZg=5~Dk2VjsF=$i#=du?%f_QIHiT-y?R=<R4RProCO|24jyoN$l%p>N6rNG+EW1
z<NqSGrdym_s?!V779KTbJa0$jtZXn)h$Zk3*<fytEQ=9wv(y)7R{4P8f`<=rA8Hw7
z{CJ#azX3%v!U~*Py*7y9DxN9hy&{x`mn&hBzbRR^nnvWO$10j?%h#b<BN{ir>O7u)
z_QB#LBNe;8<IA|m9{SSL3BjC)3f8>|&&LmA0Wx4%@P+ke$mX2U=*yLe4$`}!6Q#^e
z_p^VFJpAEW7co(~%!#roys<`FaWt38BmjxjY#g5gsogrKunhi(1k)oQ7Y^5bosguZ
z7kblK$1HY)wHki2STbSmN{+PG05Ns=<B~TcxOm##_EAT{!ESTW_OKrROjOZh+Y}_r
zH1FxMi9uJZG$_Y(o#;&Blu$lHLivJZvEHL+4f||D{{DG`zu`nd=%tbu*()jsV!yaJ
zz{GY6Y)iexnN_&#giH?QLuVfa<L^&&+yhH+b;!QSuUA&o4p50^?QO-j9f+tTDE%C7
z1g4ln1gC2skjb}=VywMEq~CQ{76Ilm1hkG?EmE3JM!eWlWFo&C!*j}OEi9E4{avKy
zA>RoAG4{sZw3Eeougzsic|m&=*&+X#79aCv7r__542lRJloTyf-3-M{zPqow;oWIy
zn+Y9!5W3OVKpQDJ?Ti~8Wd3G`OkVFwv+gFhlyN3*E7%?|4HSM(C;YMX=@Srr52bAc
z;7HXTMegWcm+myqnl<AR>6U?qIcWK?Yh~v07kjD0EaC4-5h;Qb@aK1E2>>t&_^lX*
zo`qlMKkY9<Mo~Q(9Lr9;uDSkJ??ep537g9?%EycqS^<$Bn})ECbd`B#qU@3O>$nc(
zgR&XN^F5he+ZM_4Hw#^IM}BmN1DhLnnzjMWiA*L5D|q0Dbob<!zfLL`dZ?AwP$WkR
zuTSxYsFfb}>pu2nA~vYZ_EW3=u)unv9L=1;%9M?j?_@*2=k6?a^y{!V&f{i=D=na<
zq9MXhY-?%Eu~z<)Y4P)V_rSNmV!6XIEnX(w_3VC+IJ*bVViSeG%0-YdH42AZpcs29
zF!0f+i#Iz_61dgc4O!s|7OAKw?q53`=HgHKM0EDPyHt?wZ2WH#z;ywT%#!aqMLcm2
z?pSHSsEtZn_kNwr6^R(ofAd3f7F!HDn{nkgcGHAKzu5NtUD$y==qfT(Xc?-Mqfn~c
z*4?z<6gXF|nAZIt7LU6x($I!KXXN73(gcFe)_c5gV4(0sbdg}?cY~Gs#KDDN+rR7m
zaTG{|T&d5%R}T%<eh-I?>Jf0=rYOIAlO9|;J=8@`(MY}AaMy_!)YFD7q}d~?cD(+y
zrv#x!4L;9NW8AjkQ9a_<yWg2<(A^2D=cexCESs71rQG-N^rL+%bS%KFWx3oA$IAt*
zD_oVrh)G}DD@3B!<@LWt`6wEgycSx-HX!5SC<<P0&mQHjt@v`z^+zYOlD<P8C#bS)
z1J6vyetX#sJu#2-edeO_=;_rqaTv)}ujdU<?%%!PMS3*FbBYG!r@zPQ9cMDTBr*Dm
zxzBTBh$Z5|F=8=w@2~L2)T|4Ny0<II9}v)AJ5Nya@){)_Z4YNIqgNrV%}3<Dxi)A{
z_98n$kCo;jt6yyEC;8y<*lUkzAsp4g7C*u^IsF%<_e0){*m~E1^PQdZ^G^S>4nTCs
zW8HbgwgJNCabm(OQ8Pu8@hioi2K0IU$;FZD_6VT1<?&Xg+4a2#S+BZH&%Vy^zFL;=
z57_OOYPQGSXF4x&WNBL~$XpoR9!aZMy}xNc>cHZVCyfHMEFZhn%YzaB>4^@PaPe1s
zX`I9|+B1pOME!88SMaC>F(7OBW=+SP07S=Ny0~=VM>PiB((Pv}uXO}*TcP)Scy!2U
z%nUi7Cup#Pg+OKz?DhZZPZ2|#?`Az4Xsh4LG+cNVCBHvYwQsTij?><^e_i23kpE6}
z=8|NQBhGeqh;Q>p*M7c*3dwdm$UFRF$-M9JC4luTJ+#XNFqVHXFKjUM=1jc8^Hik)
z5N{<Zn(U&w@%u<a?IGG{Y&HUI$7yF~{}M%q$FfNM<8I{rPZm~+I<(hwsaPU7$83|!
zO_;O)a#p|Vlx|vMP-s<K+4kG88KBb7E+=d)NpEglxa3{bU*++iVX&KE$dK(2ncmXq
z0oKjy%6ZzF>2nOmO%q4b)3fuQ?svUB9AA_ijxoS^4S^5UrRgrq5QWUMiPuSPY5$A?
zrIcmMW%>^vuK16yhK?IfnE`r322+GG%;kfP^)B#A-Z{-SYua4SjM{sweFJ7(WQ{Yh
z4?TMhz2P4Hd6}b!q0C!6&tqHopa~#eowkwoB98jk>eO_4X3_>EW%pig+#*%$lPU&_
zHFHZDpQ}yoBLW|WTkQ94nw+RF#WQkf^!0f`9T>T%Im1QE#Fz|LKVmO(9AhWokh{O)
z<~Pi`>S#g@FMF@2@m}2f{a5lhT+!ZNz@WvH`qY4<^n@FJbI~HO9$K^2Zkii<Wpyf_
zVrZ>L?>F2&cYaa6`Pl{!8U8Gv%0<j^;F}SL5J@cIVgaVPb5rM#F^J2d@#~t>=qSBF
zeg1?K0Isv*&#vfBXpgAS4t&nkDSJF8%NYH8JWp^jecKJke>y`8CYr2=5=Ft6Iz!2P
z4|Dcc7+)db?ot&TTPprS$C(oxypIZAYSb{T&&36`x@!L3kKcKo@<YWH@*)TS*wnlR
zP-huB|BIVEYW<!tR2ZGbe<KJlje<e%1pa&aGs#_Xnaq8ZZkcnJ_8T`(*nm^$g@c!>
zIN(WCdNf>^7EI=~O@N#T6wV_|O)w{w8c6vacX?;WPH*1pEacSU`7Cr*XM)B~>qAh=
z&_8CLZi)%s{Oe!$zx%p=me7YMq&GWFSA{?Fj{jPmIrsgWfbi>d6K^KiCLWPZz&n-y
zvKXB`1^n2K7&=O7h_H~aV1x2MMVO9M8<IIzxer_!s45$WtSC97Nu61Rzvs-f+zoKJ
z7-*e9aDyRP&4jL8fPLmD>o#(|`A?#Gfunds-_!0&2W$oml}q+d0m#V3HT}tFX+U1H
zT~G~I7!CX-zj}q<DV&QAG}P^|-STH^63jRl@oY(FwLAC|iku*nO)R{&mB;R-zO4>5
zrJ-WLOacR}q<HIH@^V>b5iK3jrD8rWlpATK5;Y7@)DuQsepYQxwZsCz=OMNvtnyG3
z<OH6bvb1B$pj}4}N#OSC5X%i|zdC$Dh(aPx=dWM3H*R?VYx)V^dt&SqCTaHKezD$U
zM&NE$f;90rJ_y`lu)U*ZL8zQ_LEfXzJ4Ur1#!Ko%46J2{tM0_$XCXy$Jrws<1==b&
z!ug3*^D=dPr$O*of>){g`l%9^&7tqY-TOgX`9V;&zOeWn;REbw+^Oqel`BdKjAW)2
z`6AoK@k#cL#rY#&Xk31*+Hd@-Q2I_cSNB`#-s0-!wa>)AzQQ{;9>Yh!f2wvhjr><!
z6rE(>&?Ons4QVx_EB2TsWW_|Z`!l>Q9h$o*{4p7xiw7u7FRCvcr_<8cJe$Yb_#qX_
z#ah<h#1K1yjp(2<W{jU#%$FBqr|PCotm#G?Y)z4007c040!+(E!MAyrep#@Z`Tc3;
z`89fz1hf}GUE{ZYCXJjmpcL4m`D_LPM`b{9@wqqMMDQs2U0D^l9_SA$rZ!Pq!O<5J
zOx*)0=QT_ng}UGw*_(d90hH4Tt0ZOn5sva+Dtl`FwWR;buG=mpU*aL=dS=_FT<>}v
z*HdlJ;>v+jAsgUde7i|XRxaH?sRz!>-ml}X%v<8Ta#WrJO$&RjIFHi2^sJ1Ep(s_A
zQUZ}qzsd@U;MyzX9sNGGXCLZJ4S(22#<-MS7`8w=SKRCJ*u)``VT$0^7ok$dQN`Bh
z*={$*yZG+9>gtM=AhkYyvA#EEASj30ju(gpnXFTash8Y>C%e9|1x8Za*U}F(<-JcT
zUBCNKN$%lP4~!l<O;7KIzSbU*Lz0b3lgv`k(|bG}qLC4pez&j78a17>NcA8q(iiUq
zC`u8uMEU?v7%7*Vel;~OhEkTkC@yLjFBN?|@rBu#)29si7Pj>SPAfCCOdV_ZnXp^d
z<omEJg7_WY6L1Qu`xi*>fW$V7Ic$ZADvJ)9J@GHbBKAdYKT@ij{!Ag$gdLUZWrtyZ
z5E<s+toV?|`B+iWo#l=kk7}T(0j+zxI9SD7zkfq3DF|Fn5UvyvHo!!6`Y62kAgBBq
zY#U_0r=1nk!2hVFA|>mGo0ZARoHuk#akZ(z9#X-0XJ4(3&Rf8Ndn8bNX6TjW0lr{j
zUez;kkS?@3m>_V*7qwE?_z|J<Y521CJ*Wk1+_D1Cs=GU(dnK>(^Ye}^E9G068J}*Z
z{k-cI-~V~hKc?G%0WKlOUE13%{=nqFUHXH6`8x2Tr<Kc`P8xw1z4q;R5&^tu3znvU
zvHb`LVgc9BOr=-oavTq?bjn+Uv#z1TtT@MlX-vn^wVzCriCLv9C>Av4jw_tATVH~_
z_>5~F-F+Y?IN0?1Eu-kS<=8H|mc5|1kg<!^w6T>?Hgo6g&UBN&YPT&ME*@}mF(@;O
zHK;UBeB*F9P|2U*R_xjCecVvzw!AlDOFH%k<|a_zba5ru7X-B@BHz)9pcBxvA<P7v
zf`-);LM$XnI%*qzRu-%4gw{s1e<-iRChVMVoj15#2@gzatX&vIy!BE=Iy_<<-nv-s
zqj0ZF9n@-VhI-xJ)y|a9Zu&BF9X3c>JB&|h0M1ok@8~u!e7JF*G~GP+ypfajJk2VU
z_dk&Tkm6$4b+<0K+C4kWL)x(5=ISu8Py6Zc{AIl8YivGwx<2dJ{aZch%tcrKs9Q^h
z)bBydDq7ZTki~lE@13HKW~W-IgBzZ6%14rDEM@tf0~0_n?i7UZCI9Nt4?^gUb$$lk
zLhI<ZFJEF}efyc^8<Sc`4FDmUX5gSPJH6jmGbId2Yzr0dx#&v1bZ0`__l|LF?x4r#
zKwd0SFn2dbF?V;9s#i}LVTYZoda16u9_(!>Jf$JPxhpA&-+V>`Io&Q3GIR%RztpMJ
zh9dF^@j>CeAvbS+Z#z*kZ-$4E?YX#6(<cYyw-T9-Pj7#Nj|dS6v7O}b0&j>+Euu4&
z2Wgn`b|y`wyvg6H%=7?nvEH&PT-16ZTl6y6=x1IE6$0#aYoIYrj9&&wMAvD)aoiI;
zNtw!Tjc?R1H7q!0ntF@2AB$X5_HwwgRG(>Zw3)Ky<Ks(_sMp*UfsWOoXy+ONZ?5b7
zx@thJL)Pn6z*mM)Fb}$Mp-I0`9F)8%w^jJX$q0du*v>XO4ZCgpuT9F^_0#tYbZ#5L
zMU~PLd?phlUV!u13-Z&92285A`|ray+V(#7sZ3Po%YZIYy9g3jPzXG03+0;j=u|ww
zQ3zBiraol@U<H&K-=HI?^qF*Ufjj*y!c$tAGAZCn{ZfO194o>C<7p27A^h;x9;DC;
z)H+k@VRT^-cp^_;Wd3}9sv=6iK*CA2wlXW_@!*${38uL!OShTk4=NwXZYfV?!*&@{
zdbFou-5>;~X1eO-$-cTp*#*>~Q7V4zzg98211Z23CYX5%*b#aq`c(OUeD1+1kb;LM
zl5)62?b;rfOx{@(yS!jX{^M95G&g(l7IuHhW7eT@QmVW!op(ptxOUW5+7b+xa=1#U
zo*VisRZu-^{HKv0xZeHkTes$?n7_rrvV)V|Bi()A&HsX#Zgqa${0nAat*-eWs{_ss
zmg;P@$~0TvxZT>pVC}!=2YpI4{IUIN;$WuA)s68!sim3p{*0*I#766@zQiA^7n-C*
zD8QI))nU7Vuex&|CAyqiY};A4_EpEpq)lu$G@<+a$mvC`&ESw!IiXQMu^B82?bqzE
zKQC*$oD^z}8Z#GJ*U(Z3xogXKAH^)gSf40f`1+G_{<*|}){VUHK8|JGW6fI*10#aq
z-+3IX_o(=Z@$cWRakIs{n&Z;a@&oe1OhcK!SsRA;(qXl}AO0VE-x<~9)~#zn0TF2e
z0)i9^y$VPd5KyX!gdUnm38520mtLf(ND&AT6p#`^O=zJv=~6>N?=2MR{buid&Kdih
z`|a<?9rx!MBO_zIkas0(uG!Z!=ewVtv68{0gC?L%k{riM3)59ZY_G6?bm#x>FOP=i
zao!BRWO(iCyUoOC{U1Kf{t5@)&WCk<{!TVF*;co6Vx1s&$!PA$tPuz$5NBn+)h@@A
zI<S3@U*PCdGKF75l@lAkeGtXP{fxo9&)1|pir3kN<>lGd5s0%=%9ve~uE~c5`N(eQ
z;sdD7T~`R~X|Mq#G1-mpipiITp*Ky^y%5~^=dmJKP4KinaHF94xHD7TB;*oo@0{4V
z?A|guDCja@9&h<EtU?f)-FID;w7qanDVKhM9*+WR0SxqPhmF}SL3gmh1$UXY6Qd_4
zkFOs$MdR_tYlZn77}#C`V@+WVqHnEyVq|__71nl1*B(Ukv|FuX)4j34>udWB^_@a{
zgKzW<**e@QcVIWcc6Ic|YrP}W4`MMqVAd;88lbZ>=?S8?XowjD)Uah<XA%uP#pO$z
zM_Qwi9>5L0W>8S5hiGq-H6<nGHQ#UAY0qQEP$Sn1e*E-<aW(Rp@V|-u&C>{qeY*CT
zll=->%fiP2=OcYAAR+<MU(g2_nAj3;Om%|b-;^y~@)(hkmUeWpYglw!EG*CGCYk8z
z(ST2ji%8h}%RjJw>(Kk#{RSets?`{k>qTF%&QVw49)0Q8<fK#7*iUM`ytgKai3Zt{
z{gQ)$$1<dd{6d^Vz5}A9L^q^azz)(<Z4YuTo2+9?E3xM*;x5O5#Q`r<;1bMwbMmaU
zn5o4a0ci2a@bEQX4LrHWS4y2r@hrIhnO_`fWk!4j0wt?$yU~YSA>RaN4~#Pv9%ms(
zu*(@G;w!Klbu)^5Awf^Qyu9p`<(|A-xZUjw1Aw#XA28(-X)qUAwnk!5jUy=GjeJkO
zDPT(m;o~2UNH=}E>-JhVjS=l4JOVGANjJmkR;XyGFVh%a5BjoV#InIs5;enf@H^G3
zv0&2J#3ZDkHb-3Wszs7>Fe!;%cQ0JQnai3BU}Un$27CaRz1o~Uo?dQd))Y2ek}1N%
zdI$Y6NCY%d(q$+YZ~r#cAxWZ}<@hNa@n(c+9Z}5Rrw)on6qa^JYxox#G1KYUMVzRG
zEIGVT%=_b^jGE%#wDmAas{Jg7FGVC~#&&EcnhQod9n=fE*CbkoJ+wzNGEz%E*6F6*
z)xvhqr-R)&uJ|S(z!r1Q^+v2<Z62z){-~D9#L>^k%HL@D5d7MMMxP>PGJn0?EPl`?
zXHli_1cw2|i%W`k^$w_eTi=V3j%A$X6%p3JXg7~^7O2Y!S}w|^Jb;27PYid)DQ{6#
zu6cM-V~QZ2<1XhTNpg_GBGSUbp@}t$0eoZ4%(G)<l4nmzk`&*yxjS%La>+kgw_o!T
zsq4MPCTrK)+L{E1*X2%kbwo=TkzR>3(-e{M+DO;Z*1_(};gv{vB^5AD4daDKD{(pN
zs}ss2o_X!eEUCc}jN4A?>Y^8K+*tcpKU0uRgT<tz><x-cOWY@okl>=yaG0lH(NeDd
zyXo>F`vm!?Z;a>sI3Eq!Lno<sRD(x@gU7xHT7j&sts(p4Ml8&%<%<)s09_Ndbpe>w
zdEqEHD$1UbOEs8Odk3{>;am=PP?pSdHLKw#5n7LVd8s^e$6IV<9&G1oq-$&-wdf%h
z#e^KqDeRLo$QxbG-R>u28C3q(1Ge2>B~u8(R8&+{VPKvnpxtZc4*XMc#AgOyzYlHw
z)bGnKEG2F^M>iL~B`z)RcQr9T+5rz3y(?|z?aiz?c}XoW@*P>BRM1xFfXq5{g8JaP
zb0k52qOiK!n2iPmWCnRDg=%-!q0y2pl}uZeTvBW!Ird)4%Y_l?-}@T*(z_OWFiw6i
zv6D-KqS1xrKf33<!4$4@)SR~^od}(Q0)3&dZ7ZCPXvQaedi!QRD6gcA)st!aWrMqG
zo1Alz>2m4Mk39Ivc|OGv$xxrz%UREm73J?L<O~Y&O6gDF@_3nkkk}46Xur`iT{^Az
zHyoZO`AkSQ8wp%Ssl%PZmngy9CAIS_6{v-JfNgW{4_hUcRgu|aj5Z&C7Zunps6A36
zH`Y}vJ)Trej@3UC_zfOjX{>LyAQt|qq;|l+x56rKhhK{wmH9J_<`cmdJ_?FF^z0D_
z0otE$8CR#H#*vw?Qgr~Ke%e~zY;+G4gp6qNt<)cU>m#bPHN|(~pC3ytYM{L+Ps(F>
zyprJ+FgCyByx2%;TF#MgZ$y2yYr#;MoUa6bHqc0KMp36rY5n7AFsMK*$7JibhPtLU
zzGXSIeTTVtW>Ob^T!tsQXGLFUzX)u2%1L`_n%=oA6lu?Rud_fS1Wmd5-QytQ$)gbE
zSt!S1-?0Y)w`z>9@p9hcehotvJ^c79flJB4nNbK>t^rQ|G<e59)kxngj2>tL6M^kB
z;QOOKzF=8rF3Bqi73rZd`R1g@lKN{Fhz=nZ2;*KdsIc2XRlxQs11W11b>9cuDm(0K
zl?4k+t++gysp9rG#@4I?{EN#x;O-OCt1Xh$kwn7R*eMGHPIl&N6qXi^D_?n&Ly6(I
zI(q(Ly5bJK|D!8J5^;VICvi!JyZizTkw%cw=+o<u%5fT!lX=;D=9K0<aZdd;eKe~y
zy0ztExL|7s?Z}}`V7L-dbNInL-FD?BpkA1(Ol-q@4jHte$g;{*@~LS+xV1i~`XTgo
zQetA>TphJB!$r?m;UWtO;V0A#s@(iNXa}m-I^#u6v%82SH1%M*?<9Ls9F<O}w7`_v
zohV&HJw3Ww=O2Uj{RF-zVFGvFG5NkPcz5gO9`R}S#iSlZH)b7lqjbc&>K`uJPK(l1
zK`lZXq}K;oK>nBS1V_)UWJ^50+AzBEArEY4ZjKzaSC$Y<CIj2q+eFcSo<^j%<*HB=
zxx4xC4uO;>b<&vAP(H}PVzJeVtSrt7I0e+^1fB=xZsL7Uk@%Y7nlImOrP+$9>pr0H
zK6E1bLjdFDKa4=fjVmp`SJ&<ozcBaa9sS*;=Ky%Z$Im}BEzGCxvZ6VA^mJU%>Zxg^
zOJlx6eqsIyY3SYq!0QaDZA;6doZ3Noc~MJPvcC}+?lv+#*pr%;hRDm~X}SNAy5xf)
z<UAHp66#}mJ2R_#Jb(3U_~l1kOYua8?OGrI2gWU@D?gdgWdtG{*1gQ-X?w++w|*W&
z-B><$hpXsEp)izo<Z(_QeSh|Ij`;)gZBlYJXC6s4@bas|(rxsR#BHIbe4Kh<RfLD~
z7y4>!1t6~mGm80b=IEYTkySWw;&4)!pHC!>&yy-Z_J^aL@2E`T!|4IKW{Y6EFys~E
z#G?eECm|%rYfpD`$%u+6@+pMYqH}Ei2k8lG>dg}8lwdQ{*M1Wx;g{wj%|#B&qya4G
zbk~rjun0<_>mg7DYEmm72re*fXN6Hd_LspC5BK&k?cD1&@yh!E($)f(Ap@s$7bF>c
z;jOpS5#WP4b&e$MNq86?)G8Ly`mV4PEzX^;pU#P6&bo?HeFS672(_M*&vprD`~BX{
z?A;bUQ`h^Z=vON@@7BFe+U8B)lBU!_mSmE5ed((R9&cI`N%}EZT*kfH)s~c1B@*y{
zKk51XqERr(kM_x&oJVqRM?Kv3L=TJwAbo;Xya@dp6c3>=32m0uL6#l&9c30~Im|2k
z%is5XO$t649eEdv$&%{fU*h`Kz;?I5Kaicv8D?P*R?PjZ^X~36*xjWXX(VUFyhSwR
zN+u;Am3Kx*PwU<x@JAn)mSx)&T{xF$zh^Tmq0H`Mz`s1U54~)m8=CbP=~#RB3T<tY
z@(cVQ^nFM6hBBxm$kp7_Vd%OKDH!s$*C9V2(PS`GK&JHU1vS_5(^i8KQ!GOVH|wKU
z>xF}^S<R0{Wvw(V@3OK~MCZGKumIcE#0^?=6eOha_31nnKGn^+DKle6nBLCMu_=GN
zH{U<n+Q{B05*>O+F;~vVKW{EW-StdC&DYxE4(6V!s@nKuI2if{ODjfRfM3)DOi%<r
z7(%v3n#>i_<+@<y3?q)i!NsGw)klxnWjU!0zPJHinYuL(fyc&}8T&=G8NmW0;6lUj
z5Am?rLr{l#>&6&8rrOFc&E~E&AuVSA<ZAf2$l4}Tu@rKt7#$tmY2mEf9Z$%06d)Wr
zuf5BIgh$@Py(Ag7us!eZz`ta8YG+r3{&d4xSz|Ppa-oriqLF$O)Uj6H<QIC%yqR0o
z{)NIEYqT0HTv~<~eIG-J!L%}Ro`(wgNs5XxuY-s1uW<c1Rd}?yITNm5Hl7B}_9A%H
z=jEuB%F{pG6j9Ynn`zU81-(96c}hFM86D|dIn`*d;zfT84Zrj|F_JfEn7U$a)pA~O
z6^^{rXlv!Bt4c<Bq_XjI0m%vXQM{Qweg$4xtqse4L)vEmccV%V)#-YEI8@fsQjY)P
zb)MtT1c`4~t`!Q7AJmQC&(S`K?&g?dv9|p+@`Py{M21UW+Wz!gV|*ieqB+cvi%s~h
zP?KgG+Gy2kdzZ8K)mFo{4_I*KJ%u+$V$Bmb?l_QemE}F^p^QoN;_+#cG5X`xPVPrk
zzFn^PrjZ}`8xtpu7-H27rq`r?xWA;r!kGuW?ARn{Qi3*=G&i}e3SK_O4)*j$!#F&)
zwVPNHRoazc47mPr5Cm|0-3fzxxlYESq505pAh*9)vl<*G-Locv+%#1D{5dTxrjb{M
z;)%q#f@FCn+j*>8)8sOIhKUvT5;<t6ywZ+H^x9Q=Nn6W6ON6o!Ee-n>BOP{+<I|sy
zS$SvqX)gIR$+_gv4K^ll-MqC@yd?a*`?zc3F{AJjY`5xjuTPMUVyi}edEtFc3^#)R
zR&XdIK3pB@E5iPUnR?LSQJcT|2Va-_<CDvkq%*x@7+~<v@ZgFdQL(k)`>c=yo|`r;
zLr-%)CR#Xe{0eKQWZjMBWas$$X~`8n+0p4kXPsc#NxPRy1rG6F2=&oQ#9bFH`;hpZ
zI_Lx3^s?Mkt_&jseKmr<3P%4Z*S4m=LU%p(lrx7`Mi85ZX9jb7G6x4xM@)>k4TU>#
z>&*pCj+@@DbqkKAufjfMF@B{jQ(c1VXHS8`!qK~jE~VOOcXjrM4+Yw-f2x?^Uw%zw
zauz?!gddC+OW|HNNxsZ&l_>w7byz0xIOIJCe=hfZs6fOg6wP18hWE<MN)EbF@u{mw
zaFEq%0{6WpQTg55@;1X2;KlChz}sgJFW|Rc|F-A2n!nXT-NzE>7O7PA>zVpGr6nH}
z{~c?*PNv%UYy?$O$S9*Bt<+tkWoaPDJVO~|HxC3>Z3HPtFQ6x@s358sNRKb|HXj+C
zV)@B>-3J)L>&4mjkuogl6<QY=79=}KjZLr5I%rlcM)!vw+q^__EJsLuuI{-e6F?!6
zBe5G#;RCC$`qlf1^9j{qlX5Z$qI$Jj7uRoLJ7f=xxF)mX<rurEN6_@dNwbV_=IZPZ
zI5{eZAZB=a)SEJ$@OQvJNRTQwUYbY!srmlWe}8{}BXpS@IA#LrtoqaV{P#~)Q~JO7
z&t3q3+|<BHLL}oAm47o^&>mea@Ek1x7qgx6Syuy?=)y51iSB=x_<!*VqEuvWiQGwN
zhn}q?>dP3}&csfBC0sZR6Wi-veQ2F5Fh{*4qcc_?xDx2z2%4<hX@P5O8DAFzbN=aQ
z{V4%|$-#fT7eBttFqV>*=GwTXb<!$x;R(KmbT`n!UF^+XtOqBL9b_D9FxE0lbl-TQ
zVLgcaZ}<LfHkQPO_4OF79!*@t(j>|pb3i2sJ*zrfNw}EHFRS6CLY5imV5d%hPlfWt
zPWi4P3+vp{gf7F-s|g^rf3?m(7yrClb8NXK(%)^y>|~-{2#3CRRC2cUGqB1*n2)wL
zW#DiVcxn#zk+(DtocA3u#7sm}XaM}(2;Bd$R`x4&QLbw&8zp)KH3DW3iI-$M&h&4`
z)B@4~_n~I%($*K7d>0W~_uJNgp48cCRmc?P7rw1n8VUHPWph&3))eic$F7ZL^g`~U
zk#~>c<SrTx09tQVf=3h2yY}OqFA#gN5R)|&22~aiPq4#c{_T>N@2!;3fz`k+-}`6>
z_4ZrL%*!8bp3des7CzrvW!fm8x_6RTv1eXx6rWy?K6*DX;d4J-_E9_67~enfYh;5c
zd3Rr5gn$gG^g1D-UUH}2#KCK9#*7M&sbMo+)IEom(USw4=|Uj21TL9h=TWfb!<Jhc
zmF*doClr?1s^q}Hn+8*V7lFTz$I~wbkH#STp?N3inBUt9MrKD6zQ-Fv_>8tQ;+pps
zWhQ5niSz3XCX7g7E$^8@@xbFlTNIjjM&or@0C@e<>e^8l`blB{!@p#B;va+h$hv!a
za9f8TU^PCSK$-ng0$A2=%J)<Vky-k)Gn!8x?-B+l?qHA4Lu!nC)nU=uoJk-kaX}w4
zTBOVY^*2+QyP<>V`OCHv&FlYop+tjTjDG1gle15*5i&ezps%rAI@{kPt#@7!ge)v9
zBAI)lNs!Q_KUlZ`UT1e^EhizDTwLSD>gtRPY3$+?k`!{v@%l$LHvHW1#;WOh`!V60
z`zE%*4h}|+F_9o6_T?<Yj#S=nl#L4+Jb+ThQW>gEJveEOGRJq_yBNx--t5|+K5s{4
zRdy2jI?2}w{8zB_H>vwi8CD_Rz3FM}yZOL(G-P;bfdPwVJ1SvytQvLbS`(0bbb$I%
zsJ^A%ec#c~p=DC$B>Ze+(A@ZiYo31MDE2(525jP~L5*>ev_^aC<Ba|%dH#c17Rs~@
zWgtI?A#D`vUS7<SfY75U<F$RP-a$ZX>O@z;vIM54a#^1o_;F+*!yR(mDRMIL%N$o#
zq_;o*afy&IabV(Uj|j%9J@@%5fcd|*Tc!5b!0+wVq(~eHUU!=W=`8o#c7Hj@wy@Q}
zhM$KYQ#V2Is}yJiy|L<8GTbL>nyFGc0vtQE{yi}n0F^~v9eF)yHEiRVv?hXab8~Zg
z6pu6bht;ra{2>(h@zeBJt+>km;T6tNsT!<zTYjfQVToIfT=Bs+HOo2V>TvFCl|UmO
z+wv!09~j1Gd{X)>pD54x-tdWyU{o`6ep-mA!MrQx_s(wwJCdE}ozbgH3DgYat7iZD
zi%a2`W{JUQPtVx;cwtZX!<c?UIz8(Vg@HAZ86gv|3;H!zDrD~FS-zaxv^^eBF~O^z
zKj5=%PgC0_H%OGxw%hF#6SnIy$k`{-QuA~VdzcH13#%Xz!+;_0bfg2H0I$vsbE)5_
z>Yx{^7XMmn759=Xn$9aNr#_FtceE5!R(1>%8dqdwpPYSe-{5u4{Q=waCB%WfYMO`G
zK)(&QRIasdaO-~<NzYZ;;#4#3{-NXQxLNP0CWLV|xQ=slsqIt0(OFnnIevAF(Zo{G
zvhrQ<>GxcNjQ7B*(OS%akG^!uzp#{lTE|qHl;(o2T!AdAp57j8xv%HUSYk>>>CZfJ
z7Pfn(R*a}r2NXVtaDX$Di8K5nqrw5P;mp?B;&eB?&G=YK&Jx3A2Fb4P!JP;mpV+M3
zT`sPh5sYtAcw2Vs(sn^Za(cJdFO3)fdLy2(`;xOmwR*J1cGo>pdY^9{sl#)yuLd0i
zh?OK5NOC>oShImJ8d^l#)nze$P<{iL*DAW$rEx2E&m{i6DdwE{?poPQi6Ue3LvZg!
zS5J>;3E$N3v)Rx8L%ICdWoh!IUM(^A!N#9ID}?yEg?<+UYybv8XHR;3VM+DRe07j=
zp<rl{W^N2Q@JnxHoX|fSvG+88&z=0=>fl2K(dn=O|KgeZ*9^dZ<$q`Ri!%R9hySI+
z-(}?g2S0SAOpA-jfTO;I#%kUiE3R*QsOHEi;xs6xCm|yV+Bua}s5i{mh5ds{e9A!E
z@$;t$@W}fb!1Sdf{e$82{L=h^)Gf&=q)I1oYI*Uu&2v{Fbtf^fO=)XZe@29R@q}ty
zxTC|{rngH=!OIm4jCt;V_t5@6ev|R8%Pc7^0krTS5n%Ak!WYe2EO%c0ZAGvEIlh=>
z@ZwNzQ0hh6bQpT%v#;}B{66-mS8wE3;7@5%9QZAyZPC4Z7-QPi)kQg)08g_$I=YsW
zoaS6r^>b6yKU2EypBD9&>?=i2_4UUDvGccYbC7)-?#_>r8$NLwg1s?>!YNP<^Zr;-
zn+$(n1?O&-=J#?kV41s^ggESWjbNqPXawVAsfOHAq1RUau)YKim726Q>+bCumdKE3
zTvC7I_l=2G0R_6zZ0qR%9*q6h!V77Fs;Z=@tP@@Q?FJsw(Xq`sV2SQnVcA8rCndyi
z^r_m`25!)!VZ+|P;nrqA3$K5^wUMrhOSsZ)4O{j1)5DSj)&|Eyco|z@83bOP0*5;%
z+6;%gMNpV{zX+peOfvk~H}R(EVTKvhd!f>c(aA~u?_Blw@tDRXDx?&Zx%iSRK58N^
z*PsdZjk>-qSJmuv6&>^uxW>8)3F7PX%zEW}I$Z{-+~eTm;ib^lU8z0B)7H|;hkYFV
zx&IAPI!71CTJdwm6<<NP1p;GPfGS}siu3BWIiCFg;D-jSvo~}%kTcd*AIq$-C(^Oa
zokj1(dEl@5vZ0%6*h(j2Pn2tseqJBcM{l<izw3INk6Z%l{#tyX6C4;YwJ$!!v}oak
z#LocD^nX5mQ}t{qnb81}^3{#!UmL2G2OoCNQ$6F6p%muUBO~s==IY_7x=c3sQL?Rh
z;IglL>ox~fkp7I=l|i~=2mN3J7p)!dFOQ_<QB=M4GnZF|@RhcQ{cNwR{s_X_Zv3Vg
z)KF8S`-d2z!{-X7d4dgJF!6_XiUk@FGRzL}ax(GQ38LrVX|H8`Hy7{#O7qSUYSjTe
zKg``vki7UdQNJlt<9u*+#1t(?a<};#-=jyE#<tSB$DWt}zGr_QkIwq_jOFd?G~aHI
zJC^|EPdX_aj+>i+&gA2l^j+|uiC<#IYFDNsh;hy>x?3S;5RVV>l6CUhsO{_YyQX?&
z@ZZE~uSk3%s{LqMASd%pHH#vfgp#W|_(sCP7+d^GYj6ZQ0l*KXalODUP^~X*o?&`=
z`;5UV7*?z+vV8;RD|6Ie_xE4=_pwP#L&xC<jOTCtKb)lePYyEkitF&Yr2-DYQ^Hrn
zkJI7=*P8H0*9pxO&iKBmGZ|1ms3c-v!BTv|6JTWQ|L^C%WLbvu5yXZSl|gdm3?t|E
zh*e#@q20V4CjNeh#L(~AK>fJ;<TWIEeb`zErwDI5%qFb^d$X1CNlH4ur;if+CntRx
zLRKt1`^;+mkJwBoa7zzAQ9M<*R8kwcqQAmsUZ6$H0$f-1CHR{sZaXf$Si8GgEQ6X_
zU<1O-?w;#?I37+4+W*%a6D07$Vlu>w!-t3&C&twN#3+)N&@rh-=p`J48v+Z$N;w+~
z+>4um$IJH!s}?o-p8;W&W+x^aKtfdo{2$cZJ2JzAY5kL}brXp%DW%b$czvN$bo<kF
zeTdZVXcD0uvGb+TbN|RWPrJ?Lk%8ha=7Q9JpRG`~CMx=!ax(&`Y$J$of85_3EyQ}h
z|7S9wy5GO;d^7pND=qy?ao;`fNz`z8<tm`+-)0x?q}{C$G|&5J2y7Shw=?&huG#O2
z2q^zEozi>!;$kuRqHWP}<a|C#p{#B7VOM=@<WWIy1?2WWh#mGZi6O$(u6!!a?7SbS
zaL#fv(yUOrDR(|vP*+FX`6XGyvx}p?i-ew~?waX6Mu7R)k6|W*SfI>5sp_W|K5ubE
zbx4?_*u?SOJ8P;t>xd^r=$v-xHyf2q?`;O`)u#w`+D-ZY7DAx1EQcSB#QmMq|J(S|
zWq`x8-Q(%?wEeDw0IMnQ-M)1-o$~_XR3E23>()M>MVMchq#az;ogK!TZRMNqMOA$J
z$IX3e5fCuBxVW@_CgzOon>zRPwG_A}6g;BVxMmW6mPaBq_Wd93eTpNi^;+~iSuwd7
z147?W%GKV7W+P5L*#AjYU;86#cqvQauZ#sTW_0TQKK8{(LsJW{Y4x!7t?iOyule@D
zdi_9;@3qesPEJJ&3rBnkeK&6GAii=>DJ+=;C{Bh~ZyiZ_rNPrEBqRu^HW0*T<gKl(
z4TvTGds2s{b{yV>_{vzQ@~3B@CrNAGcbm8_sT938GW4toyl#wH^c)|*>B%gmIpWL0
zf$VIaC9xv+2O#My5xQvlYM8f+wT_h2`!!e=B22==O?t?_{98GE$aDK(uQ#{1{&7$`
zHrxl6Wd7lvBbciq^H<#499#YwNO-K)$<lY&(S#d92)(PnI!erEqB1An4yf^Qk3ab%
z_eyEW(HZ(DA)iW<_eaeprf6b28h*r5>R?+so-M!Rc-N{8knYQ~&W?Y2_ja4Mo~!-G
zME#`0f}!ZH=-7J6S4vo=X=X1L7FK32leF@vk{667beVH?AAjf9jz4F|8OOahJDSuL
z;^n!yuMae1SV#Q$&P`@6xlth>*y;oR;fy7ss6sGWaXMqWpQ)(LLi?v({5x%=Y-1q|
zXaN_+iXWBzMEnV*NkO3?+K+M1s2}u=4ER&R0~da*>X<I!@mb<_iKi;qj=zKQn2jJ%
zp6LWC|B_AL3IH0RGI9Nexmq#W;dRX5<&^py@0TlJ2M2TTnawn%F?KB-VF!{GR(eed
zwqx=~4Nwk-t8W?Ga{XHQixCDi-rbUd<^Gy+)zH*DIpi4q?S4k?0}NV-NcMF+)YAb<
zN!1Sc2C#znNS4QYX9N}$Rhb(4j&8`5jZV^)k!xt`R2^s)(K9d_hEY*#@TuR-3@$b8
zx-GM!JD(NOYauMu4tHFnKkmZxk1zgq+rH%%&*4a!mQaGQ5t;aH+SnG{^MDXb5Bnr^
zAmL(?_9cxR1$YHq-v=xLpIjSVjjcdD-U=W#tLa{Q43ye&(l|F)lt-yz7Ey~3hE;KN
zNi2KHIPEzDo_z?+gOU(i1Gb;5YwBE=`3B_k)U7W?ao%L!zGQ-YEG}Y`V6E3UA`eoY
zFyT_b8K2vtR3}hCreW`k$cA)0*3V8Xfxx|IRLW{oA?>VeYp1;PDJww#i!M5>?gRQ8
z=*th^yg?;%;ugpXXA!|13~Lo@p3D-e7*rC|P?gh*OPPGbBf+pL(&hEqQSc;WAiOtR
zqFk8Fe8I^Xx{8cwFDF5oFyu=7m7(gme#LTYHCABKl<WMNPi0_t?s2z?w|A93;I%Ok
z1(=wWWc=bql&@PQ`wa5?a<<cuD$msSjs@0-vN@;X;^Oo`BCtl{@#8mVXJ>-pJ*jKz
zfQgqj`ko7bWi}~U{ria4rwWl~f}Jx9!V8n)&1c^>z+w!<o=m*F#A9$ARETfq(MoG8
zz;OA<-Q+#&AhyZ)Xp5(Bbp2*cT1E!ySre&+6UchbdSnSDAu3Aih`_=DqmKdCf)aB_
zEw?JJ&)QJGsMT(M4{8BB4uQen1IIi0IzwXh^#NhWu|9~e4Xu$NPn<DDLus}NouMIG
zOS4jP8Ef}rFgzl{(am8%y+FMXm4{Owe_zp$sTVG(_%Ud;G3TMOTJ|f*6<zVGKl~M3
zA9@mn`4!M6@p!}@^rbz;03)P*iMXwE{%_k<NRfjNA3Xy5`Hd52L<D|SAfqKK9I~eu
zUufit$isiH;MP#m=sx_s{xX*`=9)~`4(T(SNrUFLd<<o_HXko<b*8q-`&t2Q{V73J
z_Hv!kb;`8&VD7Vul5Jg<J9jEa!WT(I>T^m4)=-};obNgdbm;|;T0Qu&`B&nlH11MJ
zlWyRvC#$SKewKs|zaGAxSy0<8<1y(PeN{<%<#Bl)vaklLl{&-za69xE#|N2Q(R`3|
zwo<M`bC-=3vJL7d1`HC(Vz!icQ1j=nFN;81pP8Lmaz0RcP+fN&_OC81Y{|W^U&;Q;
zc$Rb2HkjAj*v>hve7W>@X%?(C&Uaw)bfvt#HC4SbxobX@@+M`au*htnj<Jzv9^S+(
z#YeU3tu#$vI8W&}WkC;b48Yj*ZH2z4;=Gbaq^I%i>esn8)z1Kdr>{-s#E9p8BoK)i
zt7r98x76Cz9IYJqBabTZ`5}*bjj=|xytUxA@yTLw*&2s@hfiQT@38g&-twm4rZ+J)
zAh6wSz^L0a^G^OjD>;9888+Msr2F9x8*6D$<7H>%M*`>uC0N_8n5^?i7C+5vHKOzk
zISP)hl^YjuBX3egL7(1U6JO`s%bYi!2fOAULqx7%nR#$`QEe0^6q5xrmubO26l9rM
zZn2r`dnN)l{Uuf_Dt322O;;F_ugd&s=Yk43sHHvF)-IQTzS?3JX?FlA25*RvY;-lQ
zdfKKeDI~n`a&k74mXFV#k%5;Nb-hDcz8~{T@03&;_$%Al0j1ntxf-Q(!JH&YP3-!R
z>DJvsWC8j({8*U%ncqv?U6MQO`}+rm&d%|kHJAm)B~q$%Q8@8wy;YhI9AhnJA`gkc
zJ&A=Ybv^Tj%KjmvAc4l_@Sx0rMfP`$x2`;k$76?kwfPW&DD?wiYj1Q>D_{4##l1ek
zbxP-9MQ3HO#F7sS5oF1-E)Z>!7IHXJ7p)j*F+{goF34!ut_*AYO!)NsQ%p29_6{-t
zIT(phhXH`bmPDj_V;M#KvL^0mL~w7f$_Lk<QRlRY^b9*jd@seWraCAE#vZ1C67NG1
z^!6~dKa-X0TqI;p>Nm43;cd@tF?l6pkn;7)4O;kds4y2(zvAfUr+%*{#)g?fBlEtz
z;N$K=hchrrirwkXh?CAxAOhG%ylfgA@<E6s1DJ106(fgEwhaj6aDz#K$?ABw+au+M
zN5xKbY$fR}SC<qBV9GSDWXBz7<vBwxf|YZ85SEQ{S1Zs5R53oYH!2n*r)FxdUnGqK
z(vZ=R6)1BlOKfBSwGfnmIX!fgUdjuOca_N`*^i#cftP!eU?W3Ag%Tb;0+wLy=PaGK
zalO3-Ba;0~u9%02maDkIaN1m9y{ItLAEVcO!udrctPwJh>d2`(>zV}HoFB+dS8En&
zVXU)35d?cUU#ZonZSoCotYy8IYNH)InwmKh^_Nr+ykK8Z1#>LhPYnm8xjLr>rz?T>
z<9yuR%d8$|)9qiE9hsi~+Frj>#wYmf@C_wsa$*^_Pb+lLt=aXpOkQ-EFQD3XbZEI8
z>^$j2gcoxpeX0dZd=2_8qS4Zj**rNsxWM+r08v!ch9VU9b(F^}PYe?ci0kJcgVY8z
z+uQFxkXkZRKtfofD}gPs&27~aBl+m6gM43~MCi?`JGsIzqc|`(Ckgn6)(J02>e_~D
zSu-;W%W!xO@wdq^D3Jie{Le6uy;b@yfzFZ~v)GwT-D<h)Z!pUJTTFY#L3qO#mR|_i
zlIArO^Vrz+vRKVGw&QbF`-9=txr}=zI~!o)4Zr|5oWsN3FFu;&z`V!1e;wPfgUI@$
zQqy1u_IJ1-N174(Nr16B%t`Pi#Rk1s58=_als~jmb*-jjVq?d)=h_|LSYc5WBN2wc
z%AdAb<56RtdsfMbw-b%^RXnKyAP0x$DpA)uEn`O`Z=;*HjDl9(Oww2tT*vd}4xQ%W
zs;T|ZUxhJjG@3#h(DfqJAghFw=z=GXbp+dgXBOWPBFxugJND%kI2CW~>swRdRi3uc
zXJl#Lxc79wOTJ%JQWKRa=y!Nq4A&oyYwHhhyC(T0W))@A)Lq(>h1i~slok+?TmjpK
zAam4SZtrS~Q}7A-Vn#fx+6CcGX#bP_v0fOWQA}E%{}asS%VmUcO?l?-n4qbwb9-&y
z$Pn(1m3Il5=EIiLu(5>ciVu<Jf1NNAfpdksbV=p=mui&dxHwY8Sb4k^->7U)Kpw6X
z&w0C_pL)ZuJhoGzzXn(=NKYKSpX)cVPhQ0OE-yy&h-sa5e<kKj-Ujv4IMqbf1*#GW
zPAJ-0e!`M`38iYqOsLvf;_t(7MDyK13>ZA&+R&1w%Lr|WVp(S^86O*GhtjA;@hC9g
z&Pmv9lLHL+(#JPxr=@D$pjpsgq2kq^P-W@tglodGoxV}FzJHk!$}%cH@UhG=H#RN~
zcSNxSc64ir?xZ-&)U`LP5@B76Y<~{LMn&nuMe%ETZ)?IQ+BRGoLAmtvj3k>ym9R-k
zp&&bFvZJM5c!d>OeAc@}-R_~X?z1e~T26Az`#;lVZ|E-rx>%N(OUVy{J77I!$JN(C
zV6eWLT!H%bzNkj=Qc+Qn@WdY}%m?}^jVzq7f(v#CrSCg4z{Q)rQh(q5G1im)DPUWL
z7l78{%bqqBue`Ll6*(j4s%#u%mVq?gV8C^Mi{~%^z|^V6*efiIX2AOvE6AFzfzHao
zfftJ0zqM<)lL4+1Rtsx4=%m`l4<w$n%zH$RwcaM&Wi&`biHAu%HftYsm5>i2H;+n^
z2HQdVALg_-UFFJg%oXF9KB$S<?Vc~h8^sZvCgv<3p>lU_O9PUqEiT__df9KD)&-*+
zWH#b>JoqBmAcuVI@UIw=iK9VJ*>v8v%{Ii#0EYZ*U|^8@D4Z!1BSNLVHF17^PTfVU
zfEb0}VKA~Tz&{ND;zVUPbaH%)b|Z!r-rtA@`ws4JssB+3P{{F4l4O5ma0(pq?W(2m
zb;Z`fFV!+Wav1~fM(u&{;i0fZCJpt0HI<~^(^bQjN5oGTq|In`@Mc2kW--x{&!pER
z0GA1M<Deb3ngUe*2wuk=jH;7AWBktLWOzmPah5h$5+m5o#_S6iKm1|j^cGc&;Zn8}
zpCGrVOu;rbIhI4v(pV=e#O7L1<_rhAqV6R!RwpjJ(lzqvi#BbosFq>-e_%$*g7Tt5
zE8tZQJLF{(H4v8V&yjLj!(F1mzRGO3b;zDYPEG>jeFxvFB!-Q+wWG>!-B9z(u8rF<
zKycUJ=MQh_j2TV@p{x7DN$OR^R9?ESBhJ)oJoim2SWi-$Y1dX-To;sbDUL8G+tJBl
z;VYiZgG`AihRdrcJ~qu-G_qaJxeY-?h_=-7aChslkjXmRDO0#dJ0_zuhlhtVDYgEi
zuEH`=8j+ie7xZN@9)7t2w$n4->B*02xnGDV+VKI$CnhGF*uPlB_zd{aNE;fH#l*+s
zJASlJfNS1dZ9YTI#l0;k(%Dr0)+)-|2om8v*8bC~S~Sy5uk5zcfs@1%Y`v!Z(Zki#
zD&sV*RbyK!$*7yOWQk9JWI)?KAJfRrD|lCn8d60qcm(5nPE*-2C;f%tKdQ{A?a-A!
zo`6TcUbUgRT+306reG8@G-<a1$@SAdi}V00rjb%@)?(*8adIQ8K`@${`?I+TE|9zL
ztHCajiFPLhhf(@2zTOgod__rdr7)PWVKs&^9&PkO(a27jkJk_Py=Az3yC?iAN8zhn
z8u-?FRhi<JgB<qLNa2C!EvPx6RNNU<;#&)BZoADTh=?p(w9p)Go9xYyv7YcZ%cMlu
zcb{H;Mh-Nx=Is3OR}js6nFP7hE@(9ASjQ^wcV8B!y8dZ8QQh7>@a@YEItLP@Uaq#0
zrApl|Bc0r7@gd1|2xM$Ee~nOgvLV(|R9m}C?vPd!Dls}N62{;w<GUYYR_XT(QiTvN
zAIje26oNaT3mB`FVJP2&jhFB|Z4JKJ!Y6kInYX#`-nm=sF8IuFCY>-oMGLsDHF_=P
zR_xd{B%YXT8=t(@r7Ue`QMUY~gc5`E9@d7*+9$@+qt<#oD1c{>4ZXmp{R7PFngu;?
zKL&l5Dk#sCeIo6>`rV9BH;Y0wJ3N49e<{877b2qAo{Sx8_H-+iuTl`|>dJiADV4Ks
zAxxNio?JY5lxXL~xS?jH;i;-JZu93`9>x-ouB@@oEEb?zVlyW2lE1fS%Ww=CaAU@^
zMa7Rq=+nA@1@_fNOEtLvn$Rk$>hz276MkMEb(V-<ncM8pL`DPX1f)e>L&FAS|1FJ`
zRB4MSpe|=obnS?N+{dUKvn^&asz)YX>o@k8-w+-62><Ug$t9F>8>o?AV>B&9h{Q@x
zZEKvGwUn3`SgcG;LQ=st$y8tF<<~48es0_=!EBf3lXha6SpxjryY^Rp=I-W0lfB%#
zrIj<BtaY#knzD$W?n#wAOY`$>NM!xs*X!r*WfDu2e0chKZ%taXa!GyMi+h0Qmm1eT
z>DWKplJ;13+1fIm;VAb`qWj7=8#e8^juqkK?(2$-7`+CM3!3&k?5E-5*PQyC#ou1P
zP#TZ;l>w9X=jBIakT(_(y6M-diH`1LD>`1V)|C<`mb-V$b>dkos%m#BfSUHT9$9iw
zD66!`^X(ec*E|)O8lSy<bSC`mv#r%l=3<IT1JFcV#OOzX=SInQ$@>GW+~L)T3UhGs
zG<{>?K5NST%^OqfyM?<@dA5Vw=Rd21q*TR4rQgiaSxXR_45%@c%#8P`xg82t3kx4(
zy6lmkH;o<PwN;Cb-BK|+aWxhR#il~o(ob&i)K{}1$yqN^X-3c}O5;i{`N6zThZD7C
zkZPwX4cC+ucI@<r2XAQ=8)h$I^@7^9czFcNI)AIfS9gq_>i1Gygo@ouyHk<Z@@AUq
zr1Vp1gS=DykoRblwnyAL*VF!EjYl&4Q`dxYQuXz1<hN}0b#cs6s$0@NyLPH1$Tv5U
z5(Qq3YyJKar<NZ{kO)hC$@<QOM><%hc*RddD$b4Tuhk7Pu9lCCm`V1928_{?5HrEM
z%a0_|WMB{~<n|1CjbA<&8L&JP3gscv`HxW|rH%aok&0})b;dP>@w!2Lf3pc)anbSh
zD{v@m1d^>4JWBZ*u-#th`$<^m@yf7RSv1#uub&5vzKQ{gk)t%2Ab@|d_@s!4oXzGv
z|8{Mdg40#yGet*s3MeG;b~4sIK5%Sf+^dgy$$_9FDJp#z5PUe_LJC=&{mFhl6C1kh
z=CWzFKb_f*D6jO;^R1crA}%6jnV^@@cq@zju58(On~^~Fk78`GS6z*fbl_18=3+&r
zF5MAL8GAFl=gz6V!3d7E<`(wqft=MsHe5jHeLoIAWs@u|h>d8UD*ILPaoWZ}Ul$y^
zr?o$giO2OWn$4us);g)0O-;qTBSEHp9P^pd*uweP)MXg(H-h9=oDuHCYvTnB(15QI
zgz0eZ*&#xk^s2-v?-9$VW<GMT>>mv0taheOlj}3r29<*JAKp2gO$;m^oeCV5u8|3j
zpuDSYI-bW}P+ot2UXOaj=JU3~uJmm^pBVv?Nk~82KqQ-9^21Xr)6`O*5xX<mpY$4>
zKju%QNbdQZL#wAa-o!_-nQwW}&CGI-vdLg~zsuc~Z|a)a`eo<(R|f;Uzu$GMZ0rHn
zuNVfsHzL#3jZs=}$`P!2H#{-Q<TCSMbR26%RpoLR+ZWhQjMI_U=`QirgN)ildQ6s0
z)o%9*exj^O7^~I)Y%mtL2=JZJP$+KplA~^sxE53wr*$vs#na$XQAKc2&wVI3NNMtE
zGIt~BDt+6-J|ad<3)sLi|C{)a55ZW@u@BRUIl&tngz|)qu~4r;`#^-mg!}Xds*Zae
zlHF#O(#;O>Wo#!ew$xuKxbExuZYH4D=jb*`sf23Ns9mTrY|^_a{yP*?6-hZTL7!oy
znuyJMx`EleV~yLdYq<%Ku_-lTn~zJXHxW+?KK`thiUe+qg-z=l3|eUI_0)N6-NH|l
zwquG@&(O7NCA|P%sB14;!DmALa2FhiVaXYFYfMMhp?>{Q;)n}5kYm7dmGVS2sFM*(
zs>l&N7z7Ej$E=Qpuu5D`Iqg{O(Z}fu?=A?J*%uOI>}%#U1tHqn0b(mp1EG^kC$RZ7
ztW1IYDzSZxy^j2DAz{khV9UyAFKEP4jU4!5nGCoY@H@xfPnHMTn$@v~)uXx>Fs_ok
z3FdC3&?)TAD3CvMY0ACmIrL~Q71pBe<B^}@jjd)J{i<WxTDCe=Wew@g<(OTNa3w$`
z@%I{|@}gorwMK~Ly=-3i`lW`M>4mVTD#o$Xdm|CZu)K<UY`&wIuC`{^6p0tI>5O%!
zXVXlovQk!g{|^hKt>xD=8~m(FF{x#1dg{GLn8K>DsYQoI7}OzY535MwsC%*(O8^6W
zF~10p)?(GX<yOaW&zg|2*XA(w8~7aqU&uxomzTor(5eSs`}c$@;9kxss`Z3~dv~m+
zKDWE2RiR2}U!ABTC9T{<5Zg88Cm;RK-OaaG!XI$Nv7QvY-m+>8{gx|VPG!38Lm(J9
zdidRc6ZFJQGvu^U^1NvdDwo9*t3e+VP{Tt6MoX%cEd&tZNej__W<rL+qt&xhuO1~&
zS7b-~P6z^s*O^nF9wiYO)5=_ZtEnva>(>T@)t%{aK|lUPw*AUy@d{g?2|Mq`wJ7n)
zIFIJDhg8TnA8+2GGMuuAXO%nBO&NIZ$Y*7s|5@L=|GXwvw9P#ls=xNd&>{$GqKP>j
zLk7}Xy?G#u#7@Gz#;xJL(_h&ACivsa<n?Kg!ux>>vF2e<x6K4ovmX|HymY3y^oEy<
z4?t^}aqSis-ZG>rTLe7(O|`zFR!<$;c*h)+9n4rDM(oDEU7Ie+KzV2X8p)GKifia2
zkDn1#fxQp{Hle#uV54<tt>2dB9Z_GI;4dGDBa4az*ETn)WIliXY-k2U4w$HR*Uj@*
zpyda8(9?&7ZK<X-l2Vq^RqWxTVgcqt71V7#@ztf~#1v4B!9!HrEmc+3CJ+?*1gl(!
zoHj8xcP8d2zC2l|W+kRJt265ZW*Zw7*ETj#&p2t4s*pc^6d&^Po0<j2N%N0<sU19s
zLRS1}FETgnBqay(2#?Hg?TZtuQp-h#obRtY5(~pK&%Vc**hllF5X)-<*WX(sl3_2l
zjO}@f9DO_e92`2^+S&?{$i8-8x|vHQ{xN&qopGrdh!W-X^w#r^N8VBX&6;E1NRYdq
zVFC}JC99l#yEKJqy-$#7*(aOc+%4X?vbnh8{P7+XK9Z=rt4m({kopt`{^$!gy`;Ql
z?_}pXlijKA7uIyQrO#8l@auE-LobDZ!E4A1X28gOjgy0MrW^+Ooesv}L(eit&bU3w
zeH>`B)=I&9Tj3g2{ScU@(onIa(b`tTU!*UWhqi?c$;aT8qOKX<lg6Ct-`X0o-}(rS
zCLKTF6-T_@iarrdq}h($aglE+x(**8JK1Akwr1PQ@F$+JO;mR;xAgz?IhgPw%>PWV
zByAB)`s(cDgv!s)$8T7)#|=Er_&({%`O7u8xf}p{LJquqQhgo*GpqAEI)2~l?&?}X
z^r^9b^sOlJ);Rb{bV}2fJLA1J#-)5W<;>5#Js#g2A|?&NOTDl*UmKf+PO4>Ji!!W;
z(5iT-*s92+_shD!Dt|84(<2XL`H9}d4`P{a*uCPi2sWP%2L}fw)`PK;u9Mqgf{rna
zQ4$Fex&<`-NnRt_Xku>lF&uxED0+{XxwM1n*ZXJq=PWNws(_w1XXPPrWQ=&i>gsCD
z{uFVYMJi_aK%U0;m(RE&;AA0AIZni_6CZIZ1K0UyBYDy3hc76~;%7Ab?)xRymQ0T|
zZMG<L0(CzkgALY~%)v^}Qg##XZ1-Cd!9R?yPuQ&3qWQ0==j1%jx-^#;VoTk`Jo&=q
zO}6qA4sHa1{#HBWE!1jeyCpyRe%uRXY5?v1$w7gZ&M?!TOGF?vOEQo97cr=)NJX5r
zpv_f^_=Mww^rhI-SYP?=qExv1=Jin>ngn&fJtaf_<mUd4udFg>FUYpe+equtze?s4
zzAxMWlD)9?lb$!Zcit#h3%q%11vCoV?v>f7n2_1W?YFTiZYj+-OUx*`c+1XEUn|)&
zV=F$-IExrRad4J>1~o@ai_b~i;99?i6sok~8>hG#nVk0HbBTCpbtr|$Xvn6Fdk)ZT
zJdsVzL$>y26}<SPcYSiPVkhMZx2JC03X<>Vk{ePDKfxBXM_b$0-mbiq9M@$Pb$lNJ
zT%q2%pK{sI+xy5W&30Gjx|4@hz{SZFUhSU$?Ov4twt&MKVc|jq!VJPnFV-o-^oCP(
zMyky=#YM<<^F!qZs|+L*q-N3Ofr|-d)ZDfR64@LIq@dfo?Ma6Ui`7MKwVjVt_cl??
zu8)<4Q#Za3x_h;<oz1tK&42e-n9;?z`mq2D3wBdyUteGBMZARZJjI6O^&8NStg=v-
zVXJn|h`JSnG~KPNZf=E8&~efG2iI+~v$It(L9p#O_HworVt0>Bp!HYPfCB>F)@$5V
z4QgAA8gKCrU(!}nQ~NRaqtAj`uC_9{vc3|q`Z%sfT!@&yANLz~tm%0OZDhW@a(c9*
zc*zhtG2U0akkLlLL_7p)-uR(2BCVpM#K!Cz|6zY)0;HpG=JCTF@F~|YR}a3EB@lbS
z3~3X0!^p-o^={oaDYzY$(itua!jwHg<PtX7$~7M0{V!L-Aj@^l_HvMJNk_&UJB=X|
zEG?MC@0-_26G7}q@{DUeBSHyFOOTF2eUzY;F^;w6^%q>_UC%2k6RRC$NU(x+U_$+~
zAEJVozydd`gi6$Y|J)aDzEyRwrKI6?LBt<9*pIg@Ws@L7d^b_|0(OK5??|)S=WMcL
z8N$OlLe*|&(MF}^_fvjvAnj0*2j8R#or<)4M!lUmbH2tV+47usJ4mYO3i6Ycq}#=<
z#^||mehvrANV40Jd{>pP%BwgE`@LPj$Q~FLcvyZzRSQOv-;@Cc5Ev~JYvYPg?6fY9
zq1Q=1{HII07(V#mTJ?&HW+?e9JLoBPo<=ctQ|h8)Ir6<|b4CP*Mx~3=WC5Q;AugmK
z`Dl-xF)`dfX>cW+(X>h;w5TKsl%duf5+r`qz(ti=oKyO6{+`f-^ETzkl{`u72w}+u
zp*XFo>>R5pIFDa(Jml%ZWe`fu@Qdf-{i3UzPoL4N^N_jqT3Wevw`Mgq1cTV`%}15m
zEU1Mdmvt*Xs60u&2Y+H>#`fb}fU#O$>L?S2@sP$cE=>@&Yl?@}%)Wy?Ie5ig*R9a^
z;@%(Jp0wONiH_W4^<S%Q=-k(A_dl=Ngx)PCHQRC^AD?yY5UV{gU9TQ@6`7ZVT2wtU
z%=T@_&PluhYy{F&`LQ>jiF$#ByG6bLZuoX?y<K4B`_0`=1HGr~&>**0i9Upp?EEgh
zae&>)1v`Cfb=f`$K5c4vI4psUxX8j-c14;g_r{;_kQLTZN+=qMoqh6(dm%O1IjI!B
z+m}jhDAf2~yGtkVSnp(aP=^uI`-b%;wR9ozP>Ko`mz2aXC$`t!<YVzG<ok+-v^W`1
z2($YMv!m^Hneq4be1Z-xL(W%e$+_xiCLkwvn&$y)0R^LA=w;EsxtzX=R^QmT0pjDN
ztVwU(EjFuxWUn|l1*G(FLoID{wP80hyrE02LAt!xQU*W9hBTd>97MROoMttvN85a=
zHh(B@Z96Zv_@!42c4!Otm$-S$*;8A3>gILr^e2}00uC*U^GpcMo2K`!suZ1Rm>+*4
z9yANsqVc%5VmE-1v-Kwvn@avP7;Oe6tFIkT@6OmBY)n{A$0J0Z8uQ7#_dY(Hi&w^k
zvo~T~mtbDuj9HInhY+vU6@<6m^hdl4C#4Ez^kh9?*mP_cf0aAK^q!RIfMv9n!M=<f
zc(dDH=6owc0h`EYz@YLx?b$?Q2wiO+wP+QR37U%%d%uysD3ljrzu6(=$r1%2beW(3
z_T<<A<hFzt>*9Fgf{Jfmt!r+3ZYt&}K@dY}*8KEu^KTWml~$SI#*+xiZZ5}f7r(KL
zUat(yLoe^VbaoX|BX*O^N8fRu9<J!$r_qLcFMhGu<nxA7w~0C#3=Qwr7xUoEpBbG$
z6o9N7ZhmB3XAZFKO()-z-@oI%#db|>^>wI_<Ky$X4}0ntNz)attR%<e6M`8to*2~N
z3G-ER#B*r=+f_9?y^9l#TyLG%SOr}u!{5z-VaXGq@H<!Gd51T5w=d;GW^yJ~!cK0n
zm0%DjA<xT)b_Ge2Tp2BTO{Hz%8OI&hqJj6mQ-ub}T!qR)sQak5Q$CGU`=eQ9PNI-Q
zUgN!Jn5W_!;eKQFtyRJ%iZ1{RWro%JNjRDVj2W)P&}pm+9?(`}A-%}66i*M-wRrYg
zFQqU7FLl<_Cl?zbs6M2<LD!@LtyYsF<7tTG;5#Hg^!)cqaXx#7s$WFENW|#p-0|_d
zj4ytNkh1VGZ0xRaoeyrXo-}#RT}Byl!V6z_l*mZqow1=<LmjzOQ|jCf8GFcxwS5&?
zFnZ|T<QX_pru85_;ptl8_|K|dQ(1dPxu>TKe2k`-(r?;mN`0W#pg!ZamMy0)T+L@G
z%sN$-^lhn(%5zm1St-t%)n%-~O}te-#ci{3aopg@7#@Bc3ZgOxo-Fml4k9e}=P7^1
zoR%_kw!ff1C=OHboe3;H@$>CeNYpRoP;Jn<5nCnoQx%Psqh`d-sb3Rn`QC6o@TJ({
z&F#pa0oi5Hfw5-Nng2u6yN5IV`0wL6&v|ob4r7iX=j42t!=w;NMbVrp6d|WMpKXju
zDan~4uf$f8Gn->75@pUC%4wMMaeVjw{I1_0{@QgtFXs6;-S_=?+}J2j4|CVQvCXrI
ztNPv}OT#izlb0&#cQ&@0QYWm8kajY9;HJep5*7ZlL#dfk&eDH+x^|vSnt@A|=4=qL
z5^evjG++?uC#9M+&o|cxw-V%Jz{=J-%|4eAE>jiHJ;%pG!o1pcPI_5&{v%u3EtOo5
z@{}5Iyko%AP&2$?z4!bh?A+Fv?vhXoP$M!jk~-UsDfO~MDfL{W#CpUFa3t{9BDw5P
zX?9T+!?%Q6$mt)393J3CNF*Qhd(s^t=i%RGtv5w$D#^m@_`$f7tpvh{&B*5VfSUyF
zAniYo06?Dapm-5eH7C9HySqWB6T&TvUoHT;Clbw|JEA(@wXf$o*lPv8!Iryq825zA
zgc;E~SO_+9|Ky*qyExFe=;~0{xearDDZ6Wx(t6kV-ftw|_7{C?K_hwrOV`W36q3Yb
zl<T`g1C2=@(Hpv>-xvhSRZq+YrTby6hyIcOB?4xp=jFRk$RRuO-yL!i|M+8Yn|t%m
zEnofWTc55rvDNyh1ANe~$agaC(j-~e?6ZO`@Ai<=v@Kvxn;^gHlGQa-XBr(p*oQg9
zo<Pbxn%0at5%2M3mb+iykbe)43U^_3r^Hb&PA}WqPkwpSzB&_ADY0$3*h)7xLpDV3
zJlknT3bGGzZ>DM7SdcX3pWgEU%Is2GI{!QW{<Lo*C1%5bz`~J`LY{#_q7-b+I$4yo
zDQw+mBogkstt3dHcecat3bv#YD{MFs{!VJCkD_)yxJ{r&Z(ZyPX4hOVqVJ8-_l*1$
z24WsUV-Ft#dw^Bf1<kos^kB0jk3Gflp%F27ez$=I`T}y<b#*P!Y&oOQAa2sG80JBj
z#BdGy;=3+t!FehsR>M73YYdIfUY*;OdLnhGN}ZJ5CvfBc)j?s}F>3^Gs{PbNEupeT
zMkTvX&~w5N+Wt6hZ|hV&a3QMYbJ*jV`)(1-;uJ{rK61bquPE5>?IG&Ohh!&Eidayq
zkK<-25bhSO6sb!x55S3#`;kOT_`X(aVB->Z@zH-VOI5WT(pWC)=WsWC7Pb|9>yoP?
zlD<C?Cqd0Hddr3QW(=NS%ss^B4VHz0760OgX$rS(0Z5#8q^3^lo~teH%`wMRn_At`
zMQ$)y$%>gQo2vE#$N@SBJKc98?xeoDzqV>wmS76E9J#Ok&E7r^k~|gGZf|icy+?I<
zg{zDlRPKEP;a_X+T}R#8yI9Sg*=Zi-($Ib~07=M{K@N$&bsR7(WLmTAk~RPV>_}RP
zqx8KQXwj{$H!9lQSZ@2}MW3#wWIjNlra?#azt7H|Q3GF3TJ~+r2L9?|vru3b!(Z0M
zEqd(gH42e58vJQ;FNchzglw0wfsNeBrD%_M^!|&bx|^)(erJkk47Y3#uMoQk2lkM~
z;>hJH4UOJ&UK8TqG{;5j&-$|&&RHIGGj(`|y3{EQ<Uf2wMHO!3h)#6a-CCw}hiWLc
zge+axV~<m}EhvUp7AYLMvK-78nMX$)Z}cYZ{UFkR(f1yJTgcX}o%E|ysZ)farKF&K
zs1CZfYbtz3A{jlB0G#l2fp8cSboTQ<&N};v`#;t+#QYUr&6o@1*}V_j3}ayJQ4Hry
z|Id<$d2Vs~PHmjT@}+@pdXg1L(sSeyNkj%#i;N3ubvvE~capP??-}^B5x89v^^Ncx
z{mdJhc20kz;OSP95pt6=_!A5j&%aAaDRhs6DDaW-Uy#%W`(?xWuiQ~&5$fPBNo*G@
z5@{%jK-OMY=-GYV#4BD=Q(>Yo=&EimvM?7w&8T`j;{R>K*|xRlcl5LhW4_D!dCt-$
zQHc%~sJAc-8oe9Nc2eaj^Ox^vBvN@?VAnLy!v>N&O6;oN5FrWl5^8W3yH-ZMn2W!g
zgESo;Qi2>${~_nIy`+1JOjh{>*R=a~9IQ5?Y%vn~k^E6_VEcx9i}G3XnI~e2XN~l9
z5Vd~XR-PF{ZP#ap&%KdlppP7uu%0{I2xO(k3tW%Wm(KUzU6lu)o1YSHC>fQUwL$YC
z-;9jvkR;S{Vs`QZ*t63UU_D?#Pp;txZ1F)?EFBfcCuzxZ_+0l_rl#>TU604kY5X4L
zE!9SP1dY3V9%*&g2^gb~WgZrV{D|nEai8B$jk`(#5RZ^!DwpRA^;~Srz1X^<_$B#9
zQF~*=<UKxOr-A|u7j6=v#hL>ZhjM>^b*sU7RxE8e+3MEatF7D*n~6kb+d<o&fTkfw
z#k+}4WHRE)o}`|@d2zT%%Rkzk^rE{}2l8UQ!UO;REr8-2P4hb+7Pj8o$7#{t1)8yI
zW^C_T)lTHEw~N8GT5>Cnojt7YE+@R)FF23Hk1-O42NZJOdTzpul-8{CM|%uhw14N-
zFElP4_3PoUJDdpQSZG5bCBf223vSsWp2qa@{Jd%y??n~ly_h4LnJ*|;+e`0MT6)Am
zyzAd)S`U=LW;48==cYqOjhoLJmc;cMf7NtueS*Ri1zP!ZSK#&E?nvVtSk+nO4D4Hm
zBQhnND((-Zy%}au)s8|~h`vAt;;lgWmJLU;op#|_11&j&TOp=;52!wG*TAq|J~2-w
z2`Pg+Bd{Tx1g1xj5&YmoR&{nJBjf0u-%b`(VS}gW+eSM!J2bSv6U66ffPrnEor@(c
zapBXTiFnaTr%)8-tC~F$^qQO%Zc6>BwUZumIiyR;ihTpkn&SbPw4^*s5Z--8wK)z#
z6~%Jw{)hlEk&5|r76{XQ-1Y@dvdAFFn(!LOK=ybLKR9qzY`@6vBtM`{)L`EgTo}{>
z1HJ_FrOvf2MbA(Z!C~;i?lT<qBbGVF(@MDBSVa!@+!5bFMz79`P#n2JVh<BAu2ghc
zW@EqMaE-XOzxF_BZSV|Feu-LXG>8eeH*>Q4<^9<fy>q>lcI7oaSQ_@;)5{W9Ouib1
z>TU3YJijW3(w*85e_vCtwVbLKX044{Z`DN`YM?aD!NfC@zQc;*6)LjKnyuOO3fc}Y
zsY!Qx%;M^_D=dGdUP{moZQmE2=rPIjOuOpdJd#h+P1D&4V^!bmIYIt*cXU<I`Mz__
zJ1E9g0i&VuA%C^;)W@xAl$J9PGOm&c-U00?#whs3Z@w{}m8={nbM>%m?TJ$H+TS$X
zO)_?n-2V3N8%|=`6fQk(aDt5~9C=a-87r#SPR}I?`^$P7966lSw(j2XQ63A|bU45B
ziW}yYKaUYX7DsPhL0*RE+r{?57G$Asy0N_c{bKyLshRaf2EswYhO)KjyX)<zC!wXq
zhrq#GtP3G&wT!DPFRABG5!N)%j#CETp<tWh)iixwd7Bbp-tvB=?iC8mo^&Q@55z0w
z_#5~NSXlNmDLd7D!sGR{w<q5b)#vf&TH~Wc`v4<IOXhWP2llz#TGx+zuE4|9eD#zU
z`+Bjq=<~K?=XV|vf_<iWi<WNNDs*Bp#52rdCcPQR?ZyjWRD%gpbBEU>HU1P571qP1
zU;Hvx%rUJ+dRyc3vlk~tvGZGIfQ;ck4N4$2TD5eaL6J_SdO<^x)$T%pE%$ukqxlwB
z!Qmkw{4zlIh2)ndrahymO^UaLX;?*CMMVfF;<2LHzNwMSX^hED;jE?$-UTb|(veq@
zd9v}E47^)Ux>zm4XpfX@4ykE1(H3&Z+5X2-J0`wPA848!#w@*&mb_y<_VFsvW%3eE
z*7;3EFBI8d6uqbqmi?0Q5w<iPj`pc-+j&A3{?g6&3fsF9k9nWjW-a3>J&mjyrqAx`
zM!9hllx>wlk77nw=`4G4M*qwMXv<Bv5}tp#m!apH{hY-YiE?%ooHMhX{O7q+9Q_v+
z);@uFV)^HdVrbP|BF0C7y0eGaQR=l~k@c(_x;Ap-Ppa?x?g9N7@hjBK%?^fkK65h}
z#w@lQeLBTIA(>Ts)|e%r$9BdW+i?lhA|f=~`k6ufYg{V}&d}?MH)8*1nOu@&Q<*qm
zoR(lL;gZZ^U=;#iR2=dsyILCiR@NL<h&`)raJ7n=J?!gAK^D01qJa@9MCkisNi>bX
z;Zf2b;dCD9Ff&x@*<odsx%KnX(Cx0@h0)o)`Dt<mTEo8Y0SKNP1d@`1TRdZn2lp3m
z#>{2vGCzQ`8dNwWcOw)nSRLw9gjqUCdA+HN^B<us7Kj{QAz4Kyfw0WX3&6k5Bv!iE
zZf~1DyUtbANtykW2k>k7V3Vm;ub~9z!~+d;tKwIVXsJmB)|0<V7Y|Y$Dux*?fQX{Z
zJui#NIgPi7M8l$+LD%@Ai~`zDc4|={d(PsNsmYPdE**bx5`OZ3Y<Mn+>Rm^S*z?#q
z3jVden|g+T@p{5D0A9`Unj4EZ4)kNk1p%82%x*(SZJYhd9)Z0Fd9j(u-cC-x*N;l3
zy=bVX++cXRA~L(!w(^4%(!mWRh&fEGPx+V-zMWi(AV`9mJt5i+pCoo}S5Lg-$4gK(
z#>M`kjisczQC9fLcVPUZeo@0YiKw!*GWwfVd3(PslFgLW9bX>xwFIzRwC1FtD|gXd
zSDTFBubNf%RlRs$R*p6OO`Ddh%k{REKV*=`8(o5>c8L=A(V0?V9yUWdIQc{M?TN+a
zr|&)~Dja%_sBZsIRQ5|gl5EZhJsYD>O}{`Kxa?;oA-oF6pPwALT1Oy(==$}glHHH5
zVA8HrQ2EE58@S-E;Ze6ZdSt70EG}xmzU>O5OE5XZ&y9ZZRkMMenjOi1PNVb0y(j4+
zH4)`bS^>AwQm%PdGAslME9cl+e%0m*w9u|c9-mZBxqK}qH@FKJ24f17L~d|9{pVs!
zvtGks%JWY1TlAwf+R7txwVOoD%tMx?OokT&(O+^V6%N#goBISE+1K?0-GKeG>wa0e
z+>S)-k(6=d!wtg-E1Y|}+qe3{TjbPqtFfDVi=KzzsT+^aAT<AvNU&tFI#d0Gz)oPb
zS8Ew`H+Mf42~Up!_H%J#qWk~J?k3fqTGIGzGM{TxM?=4-)SRBYZ`VpjEB4{l7tV(V
z{P)t|(ERv(vMBQlSrf8w>Vm874V|uyrU~Q6|Kpj9d&1;Sgr<kjA@3TVFOy*gNB9M9
zaPxmkOgs);wf#ZeBR#C{&s(la0Ru7ekfs%;sQzw&iil?oC*=yTk4#w#zgHy@tnU{N
zuRAhMhfO%o2vwZCJqa5;>6B)NXtww~HH<P`4b7U{$x^51N}cKU|ElaM>$v4ym0cBq
zT94E~GHm7o8+}z-)o)4O|Bq^qIJV#IIWj2;%GTm4&@4859mcM%21nTD`vZBJC;x2_
zXN%~6a@)Wy8)Z`;*VkjXHUp-bS2kZ@2rq$3cqrV`sNOkGfFKl<eL;T#-}?%irr?Ga
z{ny)(nr0t9zlNeV_O?U%<^S2NKeBNz=R#a_$Mr}pZTn_PEF#oH!WQF)L@|X<21Wo+
zzfQr+2Gb$0J*}s|eEsdaBr-fyIV@@Dga2gLn~c4{$RI2DHt#qCvw~bZhy-J2flb}u
zH0ZUc{p6CLX1u%9_nn`j^R939B~P3?<J`Z-zbTpISmtn1X(#_f$SVK%6L^ZgYczIt
zxxivi;?9so;)^2X&?rANfxn)Bc~TPm`aIH7yhQ8N{&d^kBb=3~Ka~KJh%&&1Jj)}R
zT8SH$$V#pz7b@y5n<sOy(|Jrc!b-~}4Y%hxq%jRp(#774UU%{F5=Gap0i&=}KQT6S
zDuXR6<K6?0+Ittc@9-c*a=MNyKHBard^m^Hq$xPK{qGp)<RhNs%hmgbs{wI_BS8*E
z?uN^9RH@%~BuSUKZYl08X7<~phYvlk_0TiuvNaxz(``5{YI-DU9oVVY%lHO%%}g!P
zWD0Aqr<Bd4+-3^haoqu?r8ghh2z`eEwcvI>zgw?=O=k1zPdtLG8}^@(X0EL<9+gzv
zu=5Pe%H^7%<<XJd@PlioLAL!bK9;Yh?`H5ynO@VqUOQCpA^66pGDnM9m6=@z;LE7B
zp$mhtyPt4Bc@HL9qrzz!^9DFAfzS(kyrIVR_S1bwqiwsN$#`*{elqNT1VjNPQ&(^n
z7$XN)KXk~E=C=moFONLJS<Rd6x8$ix{~B(ajp=Qx)0gYV)W6`c9}y*S&1B=`m)|!S
z(=|8E?%3vV!6xUS*spCQ0Dnxwr9&jiq3$nf)P+i#RM=)|K)~-)^JB(dMrOfVe*|o+
zHl7{75gT=Ku+Uk59Mc?H%utpH(X87UtqF1B?c1u~t;PKo9R5}2QOlG;js%&VV_k5|
zGa36f@l!RotLr9U;n!k!%w5%Xdz-n<l6~(KH;wjx|L*N50g?bpOSbGefc=Y_Bqs|7
zARE=OC;6w6M&alKp*@QZ_nVgzr{_NR)akRY0aWj*6#<V6kj_rW1+fc=_T=AO2-dR-
ziw49qK~=N@PUifXXx0VTU(I(l`xh^6iU^jCPDviE91OMtD;~+{JOh4xC2$#{GF$R?
zElDpVcfC_v+7GU-oorH3E<dMM$ce9^?aD}ZfZi`f>^<{(C|jf#^xy3!Hud&z{`naD
z@YSu7MKvEC-8H}qCQr9h_hL-=g2i!tEO=27cKz{V1n?O6w{2}YMa9pQ__B$vo%aeb
z9OxFin(NX3aDQVQrXjm%v`e@+G}5I#H<bdgU}Keib@FcqoU{jFnsyYNpxo^_p8?Tr
z1KQ+0`?h|gU)Sc5G&04K-F1IX?A0=tMY58Br%*)qNqw_OI_aCb*5jlu6R#JREleOz
z{${D)v%3~V7w+usx1%Rt5r=db+mL8>1}necYFpBt;hY7*3#0dlq__v<)?=hjkt>P(
z@3W^@_NKVqPRta=jeflR&x(jWR9O8#=*}vQNn8S2^k(Sm>{m&Nw|c)b%)|;qSmnA{
z3`BS)=eV6iUM;c?H+o22@)Kp=`*r2P&t69(14_uh#SWar9=8m*j3db$E>Mq|_JV{n
z-fjsMR(69VSN>5ej<h)qfXCC0ou`Y(mi#>R(#1Bvl{_jh9<#K6P(%(9QcfoV+Wp%P
zu3o56JQkg#q?wCK33zzrNEf>9rrEz21zZo;ESVR!RA&4t4b3s`seP9`<3zNiI*LgA
zF6Dw*KNAYwACaVYO&cp+XvFD8?*=SJtt}|l@99xGldXZl>^IF`Mwak!9Ac+&#lv>Q
z?q__6nG>G@BnA6%OAC~81&H`1ni>9uOQ2)i#YtjEGA8bo=ocd~3}B$MEueMh7O)wo
zO+_08^7!TW&tihFDKJV~Sxwhtkl{NE(d12u-LCjo2D$4E;Xsvr)yPy0|MM4aV_PQ&
zbQln0I{$52TjyEDN6E<LHw{u8VGNXL3Z;6T|58wTByV%a0Pc#3W3KddsYr*O5w{%W
zzc#Ix=sgj5C+agV_i})HL2+bG_%DX$wD|OR!Hkw3)|FH%A`tKOEN=N$*Uek;{}7bp
znd5)DNx9&Odlwjhr1EY8a0Y}@wCI1;CUhSiem<0s>R|`t%8xe=JsT>}TLMjO_24F1
zO%|h``dR2pKa(Di71$W4r+#Cx-YuObo~=5a#VZbW!>iu*iyje*KsE1B3|-efeUlww
zy4@NoUn0LnT0qt(i0AO_$fLT_Nm)5ot=MwDiZ+Fzb@<}Kcw^Co#MWgRmvg{rF@qa?
z0ij#X9D;k4wHf@m=9$`%0LH=Uxc>h;)BZUszYBTQw$U8uA>SGoSX;4?wz0x;aNSM6
z_P6B)PXs90$S%U-=MuHeGwx{kRKa#5-4lG^aV;y*s=7>85@K?*TB^fX(y4ua6*hj<
z70e}(_-6m(9R@bcX8)hJB)!bOJnGMr>q67t)=EQ1oUn4KLho5C&b7<~H)xNWMlHn!
zB((r{88W|bl^2TYhBmTk#>}F_rtL?cp{NE|fQ>6St?D%zSlhDU2|NWn7|8kbw1qPJ
z?`V1}?txq6X2kpRwQVLZE*2(&7ffv}AdFd8CvWyrnE=s{Q@!PM_ggzJH`}#;a=R8I
za<5ML+cv<23FYIboBZ!RPf+cr`8a0p{!tGx8P8FztY`xGlHSw9;j-eiv|T(0;dH<2
z$gJAK0I_X%r-3E$=VSF^i?!91QGrAO$8FqP_xVqsfh{;F75(DeMpt^;F{EjW>ByBf
z+YGa1!M1M<Xb(hMTyj75Z4YSR$A=0ag72=;ci%h3Jy1WT<WidV2N|Q;V3e&|SB+s9
zG{X%Qp7>9&c5QF{xF`0n`R#{9uXX$O1E<nx;C)dar4OqA2UFfI5wx?4Hxt-VmEbQ@
zlzBLGr6)gOCgMWFgrRT<c9Ha}v_vZ<Mk|wXclM5zr?|nK(b5A`tA(Z8doL-jA%TnE
zhp#N?h2-GP4BSF&`#2<Yl64JqLS`4K*$k=MP>|QP%c!Tv8bGqxWmkqNv-(Ivh~!t;
z+PbUqfh#6~a!a5EIXf6Ho?l{%*QUl}b;6PrfhjksSTkt}*M2Nk<33y=_my4_e^^o>
zB7`Yz&H<YvJv>GucUD{mJgnNaZuI=b1HplIErIf|Nfz|Op$AJNGj_9gKnjc1f?v|i
zG?IkaI{*?$PLI(?FX|J?DbCho7v7aa@Z5eGOu+l!OP&(WdI}E@T}E%W?{}*wlDj(u
zj>^=`tH~1LrEMi`p4Tk%u7~j$RUL^yo~X~=1R7t^Q@j6-TRNQ}PgG#J;P-k<gXB_0
z?hd*_5(>Q+y>D97ptfx9mthn<_%v=a?J|K5GB$i>^>wn{#f(Nw^@KDi`dnAgOey+U
zVe8{K+lsyG@SrXREqXj4Rd9I5WiC9KZQL#yf;DTljOnwkAweb_7x1ukKQNTleGlz@
zoEbwi42%Eqd|x8J_Z;qpi@YDb`1GLILfrbUsBuO^1?lCJXsRSA$;k*j{rrnd-1Pal
z<F?zZ>MhSff*@5TFKRqvj~yMxc~rLA$qt;Tg5d<0b&~DJEyk}gS`fjVGjs*UB6_)s
zKKqeYH-COvEL^2rqN4S___9*+%>hgCbkz;<(6e-TYCHo_RHn|K;$S*NhH3hEn56aW
zYHJR;JBEdO{MxeTazxDw4)6#;ZaFA+&Y2N)v1*u5n%zWPvzH`8K(w-Y`U#N;HWy}E
zgqm!>qDb__i<c|>IE;_(=iTOCr~h#}J<9R`4s;YGzf0PWC+~drZkO=n+@Sx&^<LdD
zJGFN;J?LZOF^JIwLAe9oS4u_<c-@x(ETnDpp^v(yPIKGozOT5(77(5e(YHU4ySZ|*
zrcUoUA7BY4O6f8MnBP)v$5Vron15hR3`L?=uH~ns$#EkN<|cDYKOQ|*MI!;A`P}4D
z5#l(1%#Mjs2<<%PxFKvdwlHvAkF{{rm}Dp!T*ZlB`HC_=NyO+ORkD96At_&z!be#4
zO#IxU{xSR(&U3xSTf{QxNvVrPAz8XctBZ1}W@zpl00MU0<Cglu$Z_k(0s}s&&Ol#F
z3KyD2fX4^e_?vD_q%HKErG-=n4Pkv>BJHH3rTwm#s@pOe3HpE&z;XocW8NU|!IHu_
zcC&r-2iy)_%Syq2a-MgOeLS5~dk=UY-rUkMuPtY+Y=6+YXN?xkjl7G-!4Chm1NNYZ
zXH}eoI8Cru+|KggD(uKO|FyYFhx+lASJs$JE5oZ(mx{F*lL!D2QoX3yrH~kMc2P=G
zs$5XqaAn94Ghn}bLwgxuFc&g{UhgKSCj&2`ik5Uj{2CNQMSfl>A2zF03UggV2e}$J
z^Yn{Aet{TCLk+1Rb?NDTW`k776WT!Ii`C5=&y0R<c#uu+5<fp%G<~*@#mbM0ahwgA
zk9a+BM)UvRjSxSOl*q^sB~!xDpn(LrZ<lAX^<Asf0;@Wd-Rqc0Fsx7gaD6v~v_yKo
zn5^}#^U^H&DM4Psm6}d>-jDZ%@c?lV?72Cry=9Ylr!JtuPLTEGCRX)<G*#IgspO|t
zZRO7gVv^1fq{2V^Vjvq0#h_x5pN?+VP9|qYd`A>UtVm~*<kx~Kv^_D$SOqpuwj+00
zd^ApbnS1SKO9xQk9Ten-FWvun=BPCG9*qGY6u*iTYE=^P$p*8B190fIZTu}|WHtwt
zbE2nhKYwKbA=4iHFShef<1Kc=NYEEUvP;c}$7}@5ZpJ1fA&DEgGxjPy%AAD#q5k5>
zO3y_u#7A-ur5U85R7j8=xz)2o7XF7wcZ-Oj$K5EVk>>y#z#>U*2V8%-IYm_liRahJ
zG?u-T4gKHTM}4)FH<C4<b{rHv&~3r8Y)|Ezs8n6hn#q<!vhnEBQIWHiFuE_f|I%dT
zWbKH(MzZdn?tPTMhjNwVPlkU`z=_0Y=+wdE?^~DS$wm*Ql+wghzlo`Ie^gZ{npeVW
z?Jd7Jv6;S8JG%UN)1v*wK)+4XbGvr$-k=G*UoZatShn}=KPuQ+)@M?hgI-K*C3_1(
z{5MsErO#BKXP5|OGfae<IvZ!UT92sz`{@kW*O@#*-x<pC6!(Mrr?i&x;z4!NMk$|2
zI^+Cyztp9RJfTbZK5j_nfO30|T(WX+Nqa^0E!ymzhBhD6Eg7VP6RSEBN@rSA4J;4*
zke3LqmuzPq_@&#ml`3&-Ba5~6X8cS4+_wxgo&d0wt4OVT(DE^NFk<!*V(ESrK)vfJ
z>Mltd3<h20Y0~;OXiQvrKS*y?DDL&WY<b23T9Io!p9tpM`T7+u%|ALeFudDZ9R1D7
zH~J{mB1p0x7P)w$(YlffrSr4afQ?@NeLEWKQE2i*?UKcZTQnJOkSD|wa4`7G=2wcM
zOj_GcQXH3h#m!&R4)qPMp17~C?vj%1BjkQ)Q4BX#V|EPV0@T|#-UG7*c?~^B*H(|H
zHpRztz#u^#yCc+UBu7moal^~x$5y_Xob}O|336u6%vtsThP?hn37Ks}9bizWX5fpk
z%~EgkwYu%CtvsJE&}Mgwu8EXy-brSO-aDTG2$cDapM@Nbi5`b-jRGyRnuB)@<{a<X
zld6Ihh!<_jmitsw8_=b;>LdI^D^I!e(9i3%A#&qttwQFs!!|4V*uhHLvtEpkDp!N9
z&c(4_=;@o7ujTu{%DIPE!aogyjUur(McoW{^M9%>O=S0-IzkVk(H#~ynoIRil#N<f
zSNaKNaEc~4Y<v6QSyd)H?Y<x&fMgao4@uaOL2AD9#{D>xMi3o1KcHpD-_k)ae?t`Q
zbs!%tR?oRpu2Imize6s1R#mZSD7h`Ocae;FHi?B8lYeqgfQf7cJ9G&Ar>8JrFd)fi
zj1@~EFq?CDvN@RK*b*=?qVD&Ud9I62N+T)Gvr?LX`8x-hEB}0<qiHNwg?f^sU7u&a
z2Ql2+zbs4LfA4mTjdW<wEb8Ru@%6@8(GtDgv4x3I0GM8d-mKooKy<xq)0vZwo5?Kf
zxq)m8MTx`w;5^ALsi%pb>>jHObO-%<9u@32fFCTJ>C<Ls1JnUPJbYDdLM=te*))wa
zmWpY6m-N1Vjw5p$&AA3Df5Jgo*ph)=E?9!p?2r|d*TIMSO_S@UP7^sLvuqW2w~lj`
z>6Mp#!zn>rQs%XcMh6Rf4i5>h6`lGXe#eNB8%I}VS35g+iU^=&hXIxV5CtCqztSO%
z?2FI`6P3%rkc9?Xw%PeG-jl6x#?oIa-Xienqbuq(?)+{;b@r|i7DT8)FIh8XMh|w>
z8D5he#SD6Sl-eXz=EqLJobWSoiL*`fG*HCif{Q!N4nc@I34aWZ3q^L!DCs!|(zc}N
zk$B-lP=+pwaEYjW=+Thqo?v`%veyp9qIloNP%i2S5E6+U&{AeYF{l_`0)!~YJtUZ|
zW%;GV0&9N42rGS>hY<~3F|2XrrdDx3K087iPVxq$dvL`EYLlNv@c7n&U5IsN@srSj
z(l$^t^1p9k>$Ezay*CdI=a)$%`gdt%Q#6|n>=Dck%Iei%kuUv#AXsm)I7^TowKw#{
zEQ&9=EZQiMj1V+{Ns!7omLrFxf=y9BD_erUjkW^J7jU}}P4+Ltok5L&O2z%lEo6|t
z<cfH#?GfWjK(YHoL;a${N6ubE4dY*eO#~mgPv9t%F6#<Nf(2D-cJsqHj1%FT8Kn$m
z0JP3Gvy4pPX!4s}m7p^Iql+K;<7i9b_0HBb8S8&aZkg+n;L=x;mUbV$Z+>$^)YZl;
z#2xkr$BYX8oUx@XZ~I2Uxujh+chp-ocvm!w?;tz2__Iw-J^>3ipD8q-uDYnF%rC+t
z92hl58W*#cr_K?i%JpQU0E6M4)>KWsw=}c6^m^W^smSeH<x5a&&yCBhT3q_gC%v%K
z&-Pc3EgKx>f`A}&qNiap`n&mpuBQIkTOr4l>nC1F`x*A^?B81^f$J#q$MUh?-jcgV
zhB=G|#nSenZR_~GYVy|uw5{iht}oHnlAiL8s~WZ`XIuJiYwK%^;wtRq`n<&yWzJ6q
zezOj(1(%IBm;}brB;#H$oAYHqS$Ydh1P{lw?<CcxEWOXR;5Cs5X<q1zTF%Z&h4_pp
zO_3@`H7C5+q}L2Lg9=-bhpAT^puqbe;u8F^3O4%`w%kZSTidEr5T`$TsqgFq{vtSF
zFNiWY1fv32EI<o^kkt?-<^@g^pciezQOUI+>Mc>q<XxnYTunwNF(?y({aK7Udu4ut
z$N+n<ht$`g%Qpt%dA;)#IUzwsc5@>Rfyqd`gdLx}BTZ(qSmF5?7oSA$Jg2@VJ5gY?
zw<AF*z(}~up&Tfmtc7yS+8X?P;o5y5QRhHNP6tC~8_*l1Wu9p80SUQgdaK=x2N&pg
zc5sXajwtCJ*Kshb48{9dq}hj1#0ttgTp&UFoW()EKx~S7eMYPIO@SP#1(;pbs9$eM
z<{a#=xtgQwTt_w&`(!4Y3s!c}*tAt-|G`=IgzO|556^4|8{d<Rz47($<@0OnnQBPQ
zYZ+mxg^y^NM<Qz-{QH*-e==5VL1hh4(QQq%Ic;{2WKw6Gbfb%%-7T6wJWmpS<ducf
zhW~~??$Az7-;RYA$wYQ2Q?D{|1O1?Ih8z~@VagrXXeH7>xCz%`FM)78CRo*Xn#iUG
z{fI_ocAt0(&b2;|rA9|j^CW^H7&=RRs!1v_oQH__-HzcI7<(CJNrekp9-Ft6Wu;_A
zR|G=##n?{wOW3gl;c*b(GuxuJ7boY_Jpv6)csh2ac%=3PRWGF_IthJRgyEycxabB8
z<pU%WRu7X-hZ_Di2d8O@>`bTrvR$DwlkidA`bP#=uaP86N+-cKb=AiUqKd&`n01_B
zovOcWv1KuPuIEMRhG57z8kI#$Ys1zrAotDo{r8=1nUb4HTzclsox0<BUL9I8E}&jy
zC7i%*h$dOWb;1-r{S5cAPgCryzrN?pC5;S%R@AzSuSQgNTF=NMKM3LT{n~TLmO^KT
zSCDb-H^uU%U*zffG8PL8?4WV8j?zxQ*9wnn6zuG4|EaqjFnppe=Qw7#H|CMM$pw8i
zai=?5ZJv{vJ==ozvFFf1JS|=WwcA_Yo8E1tFZ9WvM#U8nypDVaF`pB`5ns_Q%(~A;
zy_E-zPkF(uZEO0C=W6U7c|23BT%=hAT6?YzUhFwN8I1c2LR2w18=W2Q;+qO{LeGEg
zD)iUTgFj2?hQ)3LShQ6)sIS{@!2P1B1O;Qz0fFXd$EKczlu4&1G(-8yz>WDAxF?U6
zzNwR36x{f~4vbpU$`H0&jO$8Vp1ea3<UFis%b^7P;6!|i(Cm#-q=ZY%-z(3SVRVuL
zG4$n&Hf2^}Mt86fM|a!JT&KtBg!?~~*?G9(imX=q8gjGZLrq;E|IoS00ZD#`aOEl3
z#O`FceUnIR)`GBw-1l>jy(jEv{__2={!^mK5Un%mEQSyW9KgP=$ED}gqR7J@l!3hS
z-J6vKu2{iFfxHE?#{zhRUR#7vgT8~B0{@7b&fcTE(bVWT=ojK`qpt>_<^rjVl3#V!
zcBStY`s^I1JjfStdjxDH;LX2)nQ6S`rxiN?IuH;fsib!q{y^$A+(Ts|;_;5*a<^2Z
z796RmIQumuWHtg77u_3Qu$$>T*Ri!N#*t49s}nVn{V4Ug*R)ti*4_y+5~RX@2a@}&
zXpqGUn!rqv<>LX}4Vo3**F4kJxDabfoAr$lf`i~9wC=<?9yf}PE9KQv%G~C?f}?n*
z^DNia<QoRuS*F2Fejx<zsKmP%5Mpw!PB7_78%x|cCsSg(655Fb*k{T0iJ}T6I?ant
zXuk7$dd0<49VY=v@-b)SZb+I+vf)8c43o?^|GWhcuql8zfX2Vr)KAW(^MI7c%No@8
zIQZFsb!464oOfDD&dW^ejk>sRq>IRJ`VF~crODn~UMvK~nfqD*1PMq>_0Ds(0QBm_
zhu2xwap>@#xO@9(v9eRmGOnks3NWS%K(zG&C*)1Qn^k>veil9U1q=6*pNx42EkRPV
z7HTOYotD8A8^$bTpQy=12Jt2H45ZOJvC=m>;?|VcK!;b>_-il%>)gvP{=W#G?`{=s
zWUVL3QiT)G>d23O5K$6?LMo1&NeSD`9E<i8*0Qri(HJFA0z7ZXYN!ZOyuMV91CJ!F
zQ>3y-;I8437nS6>5YegNz_g{*Jhrtt`yksIHnrZ50tC#KKw4@{cbf-)V;pU(A&iTk
zv!S=)*713+b|qBq?KIu_Oo|Ls5%tt{(a<YykLZ?~yjmPF|LxB>ZF=zyHA?Mtf-yEc
zamb!5c$e|iZ@h3XU%1TV*Ol%thPo21QhZ!Em~xXnyrHl2B=5dFV^6MAVz1yPY^UXt
zt%Hp^<74k6bk~TnK#2F*<kC@WYc#$4VSEmQ^2jpT_Za-J<1O8LOQ#g&1=}kR5Gfn&
z8hOR7RMq0j7-5*N*~fjM({)eAV^_X@9sc%&RlVN(a3)TH&}^mp7F@yej9l2)qWJ3X
zb=rRxv`wQ207T123a*G%{qZ+iF(%{6x^t&>uF2;Ol3_sdvG0hmNhSE!m+I>3O;@kD
zS#HJSB724EMzw$cYwE|tPYAM7r_!y~(s?F(su-wLK}{WF169eh8&8j9=o?rmmqD5x
zroaVZ6e~wc_{jsDNO9j^8yXQ$6eSMbNh7E9CCKJ}01~mEuv$<yb;y+(utHX4iIC(y
zsn@iw!i3Aw=3g($*O!_EoylG``f@n+0Mrs#AX+V$5HARI;}MCV)OKjYufQ?UTnN2(
zo=dsPNJ>{He?!hy8gc28J7)N@jDm=tj4SX*=gIaX8U(~UB>#LRs6DzZfDtwsqIC)D
zCRx>`nT_js-;H31ZO^;+jObr&+`B!-UDWfx7a{l>KlP_I0|3Z2@mDCy58qF5hH|vP
za|p`I+#G4==9(IFMOd{I;X;^M$b|bSF2R9z85Uau3t%+A?}U@jHCVzxDL3J4<MQL$
ze&Y9AIT72%@RA40OO66*7cBOP6+_;jAKk4zp-+AQc;VK>D>b4M?4uVNi~sM>Wr#!;
z#VLYeEEH~WqG3H|FfUBmEfLHwxm1ai>eTo39)}VzDaHn$7!fGeAXMJ|YeEQ1yB0q;
zoldrdeP^*nUb;)W4f?cbkKYm6=Y#?=X|ZqPeO=#zq9j*i_k)B_6^W08OYTqHXOyAj
z6*)`qWmjNJjp$Fm-mkk;zY<6NJ^FuxvM!pV(^(3(=c;XK28@akAez=P7;#~Hn^*^{
zK(5l3@~-NFS`aaY^2pZM<NL+qVUHMt?+S?P%FiF^Nn`zAich`W5;j-Vs)3Zh!~a_D
zG5i1kwU5EoC;7EKUp4`?_nxT1k@Qa8(|^VhKlmbkg;vbs)8%GG<-a64#iWv7^v4O<
zg{&6uFfM<NVg}u<nt^{U>%fl3(?Jd|d}<r6KS(=>dn><7?Twv@?G3K^{J9Rb)J}B+
z5LQ-9ZtfJf?PZz7$LjJ!lsyDOdxWMdW6rNzf4k1;D1-Ue8fEps%KB=<QXr?j$oa7!
zU8^r3_7gS#H&kvUtC-xrbf&}MZ;E4wA=a!Z*tCv|MN!5>q;IYT-utpD9q+Cj(UdCH
z-NC)^N+I3o?j^t3X6P}QgAjCy<bEbK*zyM3tT-D7hTi8$bTsDL=}vn<?uiiX+ZfSz
zAw+bE5|!XIqFEVPPSdCBO4&81f>3PtcD$kwZTp!IfIT%RUNo$41D0<|^Q7(NSlJGp
zWP1;#EqvJ~I=YP)SJu&zbrK)dxjYbJanR6f@Dp!5Gm0$xZp!3Mw~X8T9>UFq4T5Y7
zDp@2X0XV2x&%bwIw;bH+Q)=r3Au>(UXV-Yy8+opg#j!Dw9%8_jSwy^(tHLP%7t+gM
zq5mr^9!xHmqTtfZZ3)Kev01YgT}5VM{@w0eW{In!@3bzP_mKm*j7+za6?oc27KgF4
zWG2r#ZJs`|%F)M<lC!rD_0#%gE(os?KX3O*?5CgU?Z^a_Y!e&N%;qI1dw4$K%07yo
z{2m_GVS~jWQ%PK>=%1z<vH~E#3$mua2A{tl%r~QX0`2FO!s25S@q%HQCKs{gzmBd+
zzWcdLVjI`v`m`Oh{YZ#4jtZqqIyT`^kSq@Nz?4-oIh?V^)4|q|a+jiuL|-;9rBklh
z8VrVO5-}%&h~NT08MX<5&uG=R9o`5U7ox%n=>c2vYDB#n_=c~N-TCWrtL+;j_;C6g
zrO<ko6L>Ql>X$#@RfW~iTqnG_H^~HPSz1UIG%{zM)uKz*gKB6p4;fDuCq(!L$D$kq
z^TH};k`(qsveh+-+>!*&hUCoeDuKCM*V^}i+K(;hxFpSG?Mt7Z__0PGUe+ja&&NmX
z7f-@y1uJiAvy76~xBuGirDl!rMp@OVoyf*j&Sc>wl_MCt-~x3oNns3_)piQwD5e$6
zZ@fiez(B)Rez^(}gWs#zF53Fa#evhBZhxqqsl0ammN=!G>)Bu=bKGWew=l4ii4HB`
zekLIu7K4ExiZbFJKh`<U(5o-^$~9if)`!1!Am;Scp5E-EycpMwmZ<nJ6+u&*8+T5*
z@X1{RecfO<;=J4mZ1u|6FgIt{m4*|u!P@Ta>-~(Z{3~d_Dc36_b`HbdvRPl-_U}F7
zK@IZ2q1a#_-jkl20&HocC_jsxbBnR|dZH6@!PVw@ZERE2Q4z3l?>h?i!|7X78?N*;
zc#}G@`zbe0U^<P@Rvpe9JNwnXvO?G8%AvhYY|VyG`v(_;XahXVa#L7O%Wz0O{7;s?
znR_b$q4yRIIC5om*Vv9_<0vEuVtJD;tlcb#hVVhcAQ#uX3(gm9Z+2x7L?NBoozlIO
ze|l&ez5n$7>bZ|FS@BjT&wYdrNB!zfXQY2KCO%}n0LK@->my(V&PpB>mPv6yXosjX
zcaI_mx=rvN7&LvcB;uFV`LgySgCx<2-W_Aq>-|_~qBJ7NntwH;Jbjoa4q16uG4S1R
zv0mqwSB7ab5oHiI^(X&;-5r_~APaXxmQ;T@4++>LQ>)JachEo6lGs_D_n#riz|hX@
zg+hUqEIr%Sz>zVq2eXHWw~4{VQt$b$1;)JQk>umV?nip_7w#=k7$4tFhjIk-?B*Tz
zhg@th&3{rWWA3iJ&(jWE#JlkPhtnRK?oeXKXo97R@yZN{MWmpsZG(a1bZd$tiH){3
zLH;zJqF~A8gm|LqGbSjrF=WnY1U!LmVCKMAqFqTQ^?yzJ!p9hsS`6zIGNtdyAty5F
zZaIvoCgu4n7X5&MwPJUz+&f}_o;u*d>(pB+R&h6tcuG!_l}TC*p<tjbwv$}!`vHO?
zz*79*sk@d81hP)#e4rUdmv>a!nruqcKU;B6S2I^Pvd}1%g#Uq4<R><QccvK8hZgvE
z(gnSPol2K6-aR9p`hhtZo1`Jxn5>!}BlT)-Wr*XKonMwZyA|-qVka4VA{JUoFJCP$
zwiICrU^J9u&U#KYLicxb;|AR_-uZQBQfwomcDh!v@blnGM}(`%S}`V}WTrFxk{zj$
ziL(4GG>+NM5#-wMHiqq+>J!l;e<8w3x)tSV^~p?hik?6~Wp1xz<c0a?22_Wu^S}F5
z(z-JEH{<-;H++-U3t+yoURCnfoRpDMQTqfb`08HE1H-!=*6MJ+Y<D9$NchmBSd)mU
zcY>Tr?`ZE9ey6{`DAN|R(|8KH<qPldylG|K%nbnCWDrcSI@vGKt1!#`?^lgAMjk0h
zU>1yCs|3GRXdIK=6c$?FX|YE8<uGoTcw9^346%6in1=;;`-C&`Ka3eeHMcPH{5w6|
zWP9W1gE|QZM2<NCF-TvGI~pOy?RIna)GmONKB1eSJ2yeF)3n;;M=k?9-8LpG#0}*D
zx&fda(6{ur#t?hB{R74uL38GP(wI_J{QLLG$eTnXrWfCcQH{NS!oFFQIJ2p<%0hhD
zUF2}x*~Fy|&fcnyp$c*b`FN9603}k%i7HY^)f)#O;Ev=Rjh~EC7ew*ZAArSey#ZRi
z_SaKjvr;i8ayMuHAb7eIK)J9|vyg}&5y))FYH(1d**SYa70gax#~p{+8f07!yzt87
z2w5H20XdZ=thC1esu6;?jPpv8GqhfzSa`;P?6|je;&vJn8YEA502FkwoZRi`i%qh?
znqua-Ie<zcU3e(VWh|SnzM9>!qhw<e*)oQNb*gr$)}D}w>;}&;gnl33qd-vCMo<e#
z?45WLC-U=Ih7nzqLuHJJt@KY>8IMn7fKDcpAxN2IvUXF32d5O6);FSf%i{~q5g<ys
zgk)9NFHE?f@s1MZC(Eo1Nt?h)B<aXl<9%r=;-ffA_^2ni5hg+<MzG`2Ja8QGE~{V-
zC!YJL*8;FCUU}*suyt1s*$VcciZBq7oZWI`JTHm0i-RgiKflXU^mD*3=~aSpqC%an
zzgRcNxTp&_g-Z|K&TdcUpo>pjD<iYDQ#f6lZ$tYvaRDT)W%v{YG!vB7;kL%fQ1`Pe
zkhQY!(lQJjMx%3ooJS@^)v*MoqZGHZ138=7b^&Gk#w7Ve-Eod6#v|Rx!n<5doJYb(
z=UH!HS)gMaGm3|o0XsR{iYkX%$Q-5gj}p-doe+f+36p&o^^+@sTRg)Jy^ij%PUzgv
zB<U>oe}3ZT;Z0Ep0}b?|m^><7j;#_$RhdP?XA~1h$+UR<by;(P_a|?2o7Y=Lv67KL
zEo-ehA4X2{v?x9;PTq$dkL^+4j>a4ePuDyxDVSm4mE90)xWiNs8ON=>Uc?{dNpiv;
zO}C%g02lP^RVHG%=8fB)Nhm8kJ5491hoi;XLqUm3WkH9sj<%rI6WXU!!dh?wue9{^
zq@HSsfVX<l$1f7x6%iLy)mx2r`g&u=C!Twx-*I_l{YEK_fN>2DZ`|K|WAFCk?9SQR
zxB<4_Y&=Cu@@1n)60q}3-o54H!ViJP8gDl^VDy0~R>nTnvs0)dj=a+nygSokLi6<V
zym&)AsOrD}3;-2w$bZTn>GE-vxr-yjxAQF+mcP~aUiNzjzg>9ZOeQmkAIY;%F3+fQ
zA>>K}9!<SI8ICeR1?%ybo7yZmUVpY6J^cya)@R7veI7}fpB)jf!+y&AgpvI&g<%p(
zGT^e~u;UrvoCTSSm<#jWfMif`f~q}d1QgO%1MLDyB4@}qf}*h?S?LRG>d2NGlm@*k
zdMA39_5L1b%Gwo*ijd`I`y6Hz(Ng^zIYPb0GbxW)QJF<`MZ0$&Cp&c&ge5%E+tQmP
zX~M19Qv;JtUe^D$gxa_erP)*9YCVLr*@kdrf_9SbA()*N&P)j=i)i_HUK6o&MIPqx
zYXmJj-4PLaqN0Z)$Hyf}CB~=s^(^eotyvE?POdV>1+bEyX|v!`JP_1<z9Cg3{zJ!_
z2Zk&b#$01rgy+@466C{p+oYY{)kUv)4wKlYgLwRS)f)i1dVK1P!8WFyIg9e>yM13w
z!c`1WY>z#Z0-4ke%s$GR0m+a}MqjSWFp>qJvry3#sEY20Uo8tLpCLTJ^R9C9QzYm@
z{+FQE;+}>;1!PHb3|s^QAuX7jxSGbtE5IWNY=_3y3=+kZ7Ml{4WY8f`)!gF@1LuGB
zM)FlsE<idtOp)Dx90v9HBHOnn``7bt(unG1cVE>EVsy;jyooE7AoKdOm~3CE1053w
zq>vtua97aBG{y9Tz%=?2lmh5|Q%Di)r5NS>55Q@7&D_q=aI4Yfi<QQ(KVpd5fgg-)
zXQv50vr(Sjc;87ak~>%E0+V3D0>yHhgP8S&#^5Ji&Zx(XGS&vKDpVvn?|fc3F{!Q>
z;TU&Se!rAmneK|<83*Z<Io#VZ?)tdiLd(?f5BydBPD=m&=R~KdM^?@UG){YfJ@e7W
zU*Va7PJ7)NJDa0wHTd)QBFCDy;sZ{TF~R)F1y;v8I&1nMqr;4wav)dWcSV5EPAIP=
zWk)!Qw#FZsc#M?_p-q(WH(gFX-I_V+dOj7U_-S1?TJ>S(jM8B2F+XuRaVerQ{Vr|1
zeWj$<b!nJ6`Zs)YV5*uYlSkx$(${^{@ut^=5em}ywl9vYVvI{>Ip1VzN4M?HzqjuT
zb^SJ*+qe{E#2uaUu3uJyCy&-5=v8#8E{ty|s+FaR;bVWhA?B3f$oYJr-H>0BvvK~H
zvh4!1Rn2x}NCJ1<sv07DqUKjQ!*1MY36E)m9d_>-zg|TxHK(jZku2vp)(_mti@dN0
z$Apa~XW(;s2v#}b%Aa#Ysq%;Un}eRhEx@O^UOkweqMo%L*sLUsBR`yr4>Up0FA@?M
zBXU<tD2OPqdGmr2!C0*c*$d=%47#yeBhU+%+BsmtBQ`ACGHrj6JYB{|g>rBhf&RMU
z2PTU*jwfr;O13G)vCg3H;e@mt@(YRkkUJ2+qQ%*at-Sgq@jBzxZZfb<ljPZf{>iow
znCK-W40%f@h@xK81AkJ)Q@k`UCoA*tkq<sFmO6MEb<wj++lyMu_(6^``^Na58-iGg
zm?ElEQG3Au;>?B0+CtRPpp{SIM6(r0T(Q0E1YLGJz<Ztw^qmwNl1jZ9&?^#HVBuG?
zI#%qz&ok;1h2<@#>@#!$`*z0YJNFLxl8hR@#Sj|bafjXy><c@-%F4<DTjm};P@DN*
zodi`B`hfjd6Xn;pD@nC|vh}4?i2;j~_aapxgj5Y2$`E~RTLQwu6z{cZ3@P!ah^&5}
z2^63t%`r5TiNjQkL?>UTHkZyb#>Ou8TLjMEXk@mq?e!t8KYXk@5$tc#Jp9GuQ&Uru
zxeK9uaR#1m8RhYX3~Cc0D*3b9`#9>MjR}t_{2rBym1Kcp&~wtucNhH5`WIi#x#Q~+
zT)?<{<I3WigxN19JxreQ*?OluifO>Cqxnq-%)8W<q4b0oe>8)m81{ka>dkcqcvsPs
zo$u4!F3Y1LTuQk3pQ@^w$jITd<u=u~Pp_<i8rY)`XHHK}oGcQ<lgkt%9iYjDR?tm&
zaS^(h5YsqwP44JiV)_eU+|IatXHJ`G;2_?TAt<`JGThHlLsOZ+?2_BUT#t-VAdoYB
zm~q0xz1J?PZ||=b`z}7v3u=P=V!Sn9nE}8TPF%MsvKzFGFnR0ckv^t=mrNFGWKsfz
zXBp8NBsS^jrmFWlZ<5q%K#f`qGOkPX*$4hiK36wR0TpMnjo>0Ls#2D1+1)Dfx6Z8U
zG6yFMx~Fbgh$z|l+H|DU;p!NE)JgF;5U8j5I`B*qs}8T)gWrEfP)hGr#C{I155I);
zhk@Z=J_j(4T11STPkXr)v!t_Np^(qxf5xOB%ID$^ykrDl6PUDj+y2fesQ2U8I@9>;
z>i_~q355<+kJ^Shstt2TH%vLr%Jn}T6nPNNmN@+MRbkM=0|Nj8aNU+L^~o#lo#8=8
zPoW{)NWhH!^i`sb@4En=UYR}dqj=xXR#|Kuok1DSpO%+KwsQ>64O8qq+l@`=XQ!*G
zd6^$Egrw-Gq2NRfT)BqNoUdDSQ;X|G;QQH&sf$vSea~7Yl6`?1<h;zCz#8Ohk#a5)
z7Hr3D&d#UJXEeZn{P#razr;ui59O)m8FHF@qryAgV*SA<Tt}NX3JGkZ1EzwNd@kL}
zf50fly&yB`;;J|XD!>>lM2AB3Dp~@+Q#u{h_BH74jcnKs&I+%ekKNh!0ykwx7o7r;
zq5zp|GUgo;1rvSz`<*4~CWHz`VAXq<TybH%<~tQxvr$i8NyRb<4xX}KB4~m?Hig_#
z$5m9|SZmJ1`ssI+?Eho$EyJSxy0>8k6cCUSkS^&K>68`)M5G%;Vi>w%M7lu)q(QnH
zhVGP<9GIcIhVFbW@85I(pZ9%^+xzqT;q}`bhg{dS_g;Iiwbwe=c|I|~z9J0=s^;i!
zUpId(a)u_&lq=jn6*nTW;N2xKAwm_Y8?dd`TqQ$gL9>U)o}Zw=7FksVuzMB>C~}7i
zute7=zsT`;r(=;em5bTyxLxt^O2{`p>RpDso?C&m?@z=#b^w(1r!v89E)HD8nbxlW
zR8gi<2;86gSr@ZIoe!^zMLk2Pg3O}*yDODC0>snO(R*&Ypx%?LX_jGWV+6Acjhm5U
zmcFUsg{&^U=;*$&$P%sS&z9*7x8j^_?E9rxE-BaH9%_puT&1Mq<E@=#%$(0cO($}I
zy8~5d)8^gtbIwN#fp=lo&h;)~x0?vO#!c4)$3+6<k6#SC#J)@rN*4@?FqHUB%@tHK
zxZsteHL8k*?ghrwL_EZ;PKNr8Zkhk}Qa0?a9V++5-taI{s@1c~R83+}0*z~rdiP6{
zYq`4}wfGn=P2171*h51{)faASC_u|Jko&_Yb>_rFljnRjJ4C*J*GTn5DC2CuVF(J%
zN&7(Z;b2*gobtS@tM$r9Md{>IVEl+d`W^Zfo^$Zx%(_sM%l`C6rd$BIZMw#9*GWTt
zPTz2Ui&!Tu;PPiL?$0zVe}e5sgQi?p_j_f7z8}=n{k48oPf(wG*+8PJf(vq_BBjhR
ztn_A>>Gtz^*AVA-9{re2x|XbR>P*xPT2&zvocg$6IOz#9qsDVUNaIME$t-v}h~l%S
z>mDybiTC1WmVjVKH=Ucl%Z<X+-Bbb0dZHqv<8!cwqo~bsK>($=*fSp7!>Fw<7@X+m
z^Hlz+*(-NL-q(exXI@~8;OFdh25J${wW!flb07M0E&r|#6Ic{l)}p)XI;K6F@FY0n
zx(rRBzWmL*^!&MyA}!F<L>Pd(aD6BMX%C3+bYGDO&WMXsH-5r}xw3=_`{kr8I4Ut6
zA8O~A1|SL+YSB|X3*xlYqz=NkZu`FMo)e53SgT+L&gDta`R~uSz<B0Jawj!nb2QW+
zg7#iJEZQ6TTtiC`etkC?*XeezMfsfhr&RX?q>W0@xF}Fl*i#IjsC=~#c8@ZdaCqNl
z-;)6#doJ65nQ-H!vZuVDV2vDl5NYbj)pH$v=i}=anH4}No4Wj!s5cZc{)j6LzNEF(
z<@k<5%DThhi87J%iWfGv-4DFox~JQ|RXsfR;dcB5T<0WZUL>WSS+Z_Eyk5av+<}DH
zfo*Q}3`b}i$!B?Uf{e=cPIgOAkg`rB%ADSgoOSq@uSGgJD9jE5%Ty^ODZ<7j7BT#!
zzpOmRAQQY|<FE@`d2c&B^fT_-2cuW8FWgyotHRd#I)d4aXByQOj;mK;ZugMfx3wt+
z1qKwJNu@}nL_~dDy@HULNI@H~L)Uf5sI$+Wb)ov5E%p-cajmiWBSsELs7#}l58Vuh
zB?XRKg3n2NS7!ClPjhUd7mPY8IxjLFxZn&509{EW7F=koSK?33tQT4!?FL4?KXex{
zT>|-69vN=FHAReSOy>v=MYoP$zYuH-^XL+`r-;PlS|Ym%Qj^(l!~e44xgD0OH{ASM
zEDO1|M1203;UXO-sFeOjzryikbn8@)ld85-zv79(iR^{xiBc@{`<`p3`UIo57P`Rw
zkrY9cRc>Lr`#>~Q&zE{SXd1np-kM3z#2f9ExZ^t+4LC_!mEkH&%1_(uDF5@(T3wse
z6_*r|E38>fuUvL#Yr!{=thp@ZiTM2`YUkXR=@zFVp97+Qa{;igoc1`Do$33+tfB{|
zZCTpcOvf4Sy}BHg#rE(&)?R<CM2d@re^3A_c=!=g9ar&Ump5f%=%br8qDnW95Ahym
zO3IYd`{QP6Con$G9P=W-lY90PzywO|J{f21{8}`dgqL}fn_%DjwU5pJflY%}FoyIu
zV=KDxL!Bh3UTfl3I9?B@em!0;Kh=3YRc3g;C$qtZ6-j*(gq0E|*)<xw!o8%%mk06q
z96tOSyU^j`YN?1<Y2yZlh|?k`qH#yESjvryxV;EQf0W?R8=91=IoufiZfJj<u5MVP
zH>w~cZhqd8^Q?k^(R~)r>=&|TaoT&F{-KH+frp0Pi?JvaCOo;2F{uZp7FfeZ!IGpE
zpL8=DUBJg^l~nq@Pkx@ey@-q1ZFtS)zt~OpI9S!_P<KOgnNrPj9BVY($Oo@q?CZs^
zSMwDi_N~wvytuP9mHPt6<%)93rkwIZrs&`@%6o7y)!P?de6b)wdtAOL0ndp~$?_1s
zN2Q#czkS>-${cO`1N6~8Wp*bhdYv4g8hbDZZG4=1>{CO~WJh2ZnyKbP*>$)k=C}x@
z_+(e@wv@kOXGC3*BPc;ZvXQhhKUneEGvyhD^Vx=$;J^erzTa!INTSp3%VmL<jdNxz
z_PjKEasUJO+`p&&(dn9&pxlH2mB?Pq{yDI9+IivF@@XW`$6W-61+$7+swpYjqc^5g
z{8q*c1eXu!o<6A(f>!)-vQgJnhT$o}daDB4jUQ+Q4M<Ku;Q^J~S=0%RP<#8v8n=aD
zU(KuAcZj@|<}n|w>NnGrZobU`zFp+8rbTaGO>&L#D(TI}^9esl9r^`!uOK=K(al=-
zJ{!K0pg_u+U`mv0<N#lrVdSIMEWC;j>^3gof!i-xm<9)5&wOpYa=&uiK6X3Sv0QSq
z^EVy)GOE$R2ahB{x>P~4n%zgsde6)a1<C5kqJ~_i-);}^4-|0eE$ayJZ+snic9x?&
zTIz$^s~7g6*jKYF)-yrM(}(^X3FvfxzUUx#lUY#k>@4bIh$OjwDQ*sOh2~K0sw{L@
zT#&c4F}NvQkJZX16JP#1tfV~t?5uR3cHA-GhI^1$nPQq}$dxWc3=85|^JtIxK17Wn
zQG7%VPz<4QI@U(KaI>%CmJOTLx<B$O)2)>kWcY0R?7_=2iC{HOhuv8y8-`qbsng@p
zFytTP7&|_Tzk=@r;AXt_L#58b;a;B_W0aexfej)dQyIqTf!}=A!F4}mJM~dMu4U*$
zI({c!cbdnl=~-eFgykK=blbp#g}5CnIw&~zB6Db=EE}s*Az}ut>|8|drg<W!j6PV*
zZKN}eWN!v<%fIi3!5=V<c$YZwtFOnlX<n0Bla34l`9;>gBx+Rcm)BfhMBYWL@s8TC
zvDocBP1kTwKTh&8A!yR@HL$7GXKQDx)y&9RL-7GjXbpvgl3oJCTBe;%LSZYvHndHS
zu*rr97nx3t7OH;Gk4q+O)dDDl$I<%>02HC+2_7%)x;0<CXeF#K1DK4cWVpZA<&mIa
z`4>Q_)|}e1-fKBWvS>@(4q^2uI{&H9%hYg-MQ1N=aHZnl>&v9)kofZtt9&96Y77>q
zvlOfUov-^j!v<hyry6zQ)YCMFx$iW<NxzSp8|co)GruU!=*;{0G9sqnOYOB{VD05)
z2O-71So5>6#ei?qBEMGzn<zD=n!HYzl>(?@UC>xHvb~P{R6IW-+VLPkb{G=FPHAVB
zZk@E-m^F8w8AQ9Ceah=c^Emu1Gp?mgZaQlhD09CDVzgJMVllYU9(^yrt90}U=DT=&
z-z#Qy_!&jL3#|gQUwV566lB(lbmz&@7A|6g@~DElH#pNU-y9~=4JxL;v-b~^3FS}^
z{w|I7qB1g0eqYGR8&5ADF5kL_3y>IJc0#8k+1mlmuHw2Kw)UbrL|K9rS9?){PLbOV
zYkQF!qVze4vz<-8q$jr2bic{6SEZG7Uej~hTBxbdb7Bj14HkLJFB6hY?ODr2!n8jM
z=4>kuHKDM`v+eBnU+`SgrS<;sEF3SSFQi*BklOtu@tZ9Rgj&1`nXp0Nal8sT`>q1c
zrYaUELBn~4lV0?Lpejkv!sE9>$It}3!z&2vn3k68JswX&%W00vU9_0f2tCjQg^SXe
zIIMOy9&b<%gIMW%xL>sN?jEOKRO%nBeDe&`(^;L=aeDn!shcl>yF2{Fc1p5kAo|&C
z3;XM@Tk$X85_@2m-BbZzL4oa2!*>H=9yq<`K0f`Sg?8^8G<i<<(xlI|vo=!t8S_=|
z9pk-fezu{i6nf+Mx#<@Vo^RzzP#*<!ckKq#$!IpaFHe3YSCy=on3#ay%8TQnMK#`D
zEsGzz&M(am*xro=<gL(dkS*hwV2|2gyHZ!HKu)k+e%t?Iucqh9b#J+uD%+(T>2{vq
zQD%NMPQ>!`^@F5tOrUU??6v8`Bq}6^`LPJHpiJVZeEn>ia7tj>)Guw?d%i5l^uedt
z7L*@fsvV@D`l7Q-Y&=x6D{QzzKM<lS&)vr>1EyY59x%1uWz?#~m!Tvn@;5wlO-$>9
zxD6h9-=Y=uHM4!A^ZjzQ#Wme5FRI#PDvbgDY@9@w`HanhN&=88oA2wu32uYYU^d!`
z*>A5K93@@Wh%QE3y(rnZJ^?*6J?f5*!AfZ(jkW`%*<`qK;Y)K#GV}J~8fCm4i_wUv
zK+lvE!x_PYz4@zH6@Y$tjc{&R7>ZW5Y*l7b2JoGm*tRbhv;w~^i%d!jfZsOF%SDZ7
zWfV1}%XlW(m!)!gFLc1apo;YPjH}<tTzoz+!hcForMGiou4=dA7-MG8R{>nv{uXim
zWmkdErHr|U&NyV?7yTZI<44nhn}kOkv_|#@{?ET#R(VkP%CXkFO9$tg2pfY2e$b#)
zjKu8?&?XA>(muhmf5`Kdh<W@Ez@Vc)Ui`9`wla8f8xK3-y8<VRKTGLDpOTqlHheQw
zmlqNvE*x7MtGt&@2|aQj#}4vqlUwtSzC}xN5jl6B@|@RK495rnngC&X%I_?(>$`7m
zW}fuYVv2etB#^Zl$4sqr7zc<GWYCAdZzFh(<`u%KIAS00^^LzuOnTLfX7M27SeqCe
z-8k@=_UC&+arZnIkI3T3y$n@dNIZ8u-XJ$2O-B7!bXQ>?mSKHD`225r=9e;ArC36C
zwSDZZtX?k4HPZ0&oW`ywF?|qXA;xcMvZKWC$4I9LB1!ON=zTn5J^M)7U%50on7RMM
ztgI--A#_#z6H#BE>zN-(F`P8>{-q4dm%MKhVV)5?K06pKUZ1T@u9h(-d_1E-lEr=`
z>>h1TLW8rnVBZO<iKQDO>y1R$@dKCY<_%V2vX-v3RL<V&Q@g+3E}jn%f`6M-6e8IO
zZ+bJSbx%wH95n$lo{;pnzOXBs^au?ROat-~S=jz506=O5S4CSfwu9(v)~{NLF%5QF
zBc_ya@L%Hb0r0j=XFRp%+4Pac)$9yzVpoeXv|JxNK|#1DAiv)Mc!ZC*hDo{!hetqs
zk6!zNmZu402w|GGGFkv4k3#j`JCc_gj-{tfxMA2dD0FV!*~kJ>-4}%KN}7W00=_1e
zd<&;s3bf!uqw8X#%VLH-;v%sIgbJi}OQ6k_sUn68?U-E}^9%HD>Wwt&n)`0WqN)t1
zYhRXSKU}Ty(Fy}Hx~D5KHxi6(BQU=0x&e7WuHdKwzNxEt0N><jYAIC#25S`+p+^o3
zw%!>wQUh?0OMoj#t?1f8ywwhorP2AUnbA^Rq0}*2m9f8L2_!Y>A9ENU6k=`Qs14+I
zo*u{RlQd{Je)$=KFW3~s65+KKu=5rZZ=Vyj5$@=ZT6zqqJzhA;^$I9kX7@kz!*j28
z5~-44IOvk-ZN22|qBICIkdnb#Fbk2xmMG5h{-7neP-@Sq!C}|=XsVK?vZb-`(+xyu
zKk-~`mZ`fj_AAyId7|TCQrH^6^i@&)@ooo**zce3VDHn>wD0J%pRlw7k_G)-Ey5l^
zxyispiWYFb>I&7)rROx|dH@d7j#Ww$1H-3AhK47#d^kp51Nz<=@Hk{Y3JnLYHfICm
zX-<udM)8^=sU>WPPR*bIS9n@Fx994Pm6f2d;GSsXCoqRDaz5)^$80Tv?P1w^0z6L;
zKiEqIauu5@=FM+c0@;WtB3;;yb53oxY9>LS&7A`QlswIootF1>vNR50C#Q*d@iQn#
z?9j}-bYpR0E~~lbD<OU}5*7W5tHQ^P8)=@!0B5~<@03p{s!v~4TAGcB%WeW66oyEX
z7ID<M%$PUc5uIGaia=sQER=Ce{fLNAqHU+EOZPZyEk#P4L5}lfOL4rd)f)y^Nn+Or
z)H9k?_hIVkWnEk}M9P)n(*MR7dVKty30aTk(gk%!xM%;c#{hq4`g0IsYEfzcbCg2Q
z%?qg0%=E9b?aq7d$1TP=`or!Y+KUC>05UfA%Q9(bWju{`bPR5DuKN&zrYQ-IBaKcx
zvt2LGjnr|My^i`O41@R)y_&S)J8tgTT3f^UQdx9^1q>MkAdYI%t3u(}&X!2hUUb}L
zR^-?oCjJpH#&sESD-w4(e;6R(b4=%kbB2w0<ZV%HzG0Ast3K0&(ItK|eQ27-bPWh>
z480AgX?DOg0EM*<bE5gT9pOtJ2z%cwJGU3*<S^_OTjmY)mQUAqxzkC|`ogxx^GYf+
zW?dF4=zH-EOow^V%J@aL@ePXK>0%4vhBbp>rngIEWmV=QfSealU#US_3|XpkrR`Ow
zVQ~UOEJH5TN>J$XbL8QXbhqQtt*@_JfBH17oF;A=wuS|TWobH+F7fdQTawH|C)KaF
zw>f2K+(JOIucK1bzl%RhJ3TpZqxR@0tM%}YKW2|NEBEXh78*I*g%i3x?(M451C*_L
zGw=Ov^HM-_5KTWNkgC7t;j2Zt0>Jk~jD2r-N?U%2kKqfe2-6TY+>`23l|GOP{zhMO
zh!8iR9ljbIe23RGoGM{H3FtN*Ly<xxO~D6NheRIx!Vd9e(>ht*Y$mAImFF`vGi|lQ
zVI;*n{bq=@Wh(#yjb$*malO0QEDv6ohrk@FN^S6eDou%!Z#&>O<>uu<WG{?GJom!6
zz|9t(Hu4AkbFl!ST-QxQ;ng?dpDptwcZc2IKJw$Du-nK|!x0G3Ml&whx(v&OBOW6g
ztt`w~k-mkDVq7}wUqe)U;iW3PLC*5<3f=Se;hHkY(zgHlk%gk^JS}G_p~3-c>DdQx
zK-*`zuM`IH%7zu)Ganjn&k!XwIg^^)B>-bE(9AsEQBlD|PDWO3GxGYwoR%fxtX5as
zeeW^Yw3E=~a*!y>H@~*o^GsXKR80%tg|NN&ZF6AT#Kgx%U02&$9PHDX$Xm*(v1r5%
zy}o&4$@z!YIeP>p)N!NKXuN-5VDfP?_QNi(BUhZKxYLtqMH(9FCL*}jRsGwum<BN`
z;~BUmtVK_~K-SjSUWiZcZMO#);DO>!Mn5G^GH^KEzzeN>c?sC35pJb*oCx@oaqWUj
z<K%_nvATNwfNcDD|F)64tdWUBM~__ZY_5LA=&$JCLHuCL!5tx?I<&GTX+1rr&F%V6
z8(b}>tzM^jXH&mmw)r=m=VG4?FS_EvZ$XWdlgyU4IE$OOv@~c>BHMNci}jm-gN}K_
zpv|U1h+Gap_cNO*=#gzmjR@_qhoND*{A=tPK*DqKmHNz&RE|3|Ay<5!7cP7C)8;uE
zHbW5{&>Bcljjg3&W7t$84ErHkaLb)Iz}Znz(B)sVZ&j7cfg@C+GLj>{vrkq@iEw#b
z$|t}FvP)3&4_h&knLjx@oo-wF8le=aqplwSc5YGssJ^<3lFRhD_}Ui%?RMCgt_=#3
zJIP>8Mt_(IzPi3vgKSPDOx8}->koh@wl^0O^o15oahxN3%!iaXrl!AnN1Gm3n;hzG
z{XTeqFw>*Ao0O{JFJ7G?bRT90m<Uzmv+UgFTTSE#*SuzzT{98qy;Yozrt<^Tvq8f2
z>h)X=%?*(4g_1YM!#^_=(KcJWVbdV|Ddd+>QAvIklmiTfT)Qa!Vs?@)Ub@7HYIQrz
zj0lg=vNQ{s<X6{S`60|UlmT=b%|zd+CMPOry<Bp4a@og;{zFqKd`d>!)`r(I6c4bn
z4FYKzIek-`TUw1*<a?AgN&Ujq&-m*PYC03Fax3fcXgp4(HXfy)t@y?|mOv|n4@#Qo
zTt~lzY-s}$luvOZtXM%M%_U+d8Oc~%Ly(%7m>8F>F$Qm=SDzV%tFC_NfUE{ef=4E1
z9*(T2H@yEmNyG<r>{Z^-vB~P=cV#0UnRInEtQihV^#Kv_nN7`3S@50mxwk&RG;j~9
zt5fFY=dtR{@^jg;$~!$fpM8Isif}<hBle*1B;lfbyP|wLH2<%7TGD9iF~|JkFD+xT
z#`$@Z4lsaovHV_AOIGEQcB<U?iIY`kV}gm?UMWB?4cfDCI?U)P+$k*1u6|)&qtH+;
zEGA@{<+s8=D`3^=vg<GkG6YIU`F;A;vcs&!sB08Hb%H2tiS4!Ubykpd5pJZ1`qR7w
zRr|+5gf_6;UIGnO9W(TEYHYUOtP;k<$<A|Bcol4`^+K*wfpU+1!A0lH0Bp5B+@Ko@
zD7DYTo@b0_RY6NklaULphVCm<9K67N$f2t{_QA$TdTrNDH6IvU4i6;T(01NaUX`c2
z?Ygk**G#5LwwFNuL>_Iyr(a!K2?cn}QH2MqUrbF-u0b|u+G=_@3dE~l0&*S#s6dD`
z^lc`4VP%4Yo%4Cus-s6n3<p;c#-)AiGhs?n2r-J35eJ@@o<fO90N(5QWDX^;%SE3t
z$r?yMHXg5n82q8n@#s?$%V!{TsOsvdMz%oYgQ2f?`^~6{et^>rU(wk%3_I&4V-+F9
zwgXe_Lz`GWg_X_KXV!VF^%JSke3^po&6tQhby_uR1Mb!j4l5lwgzAmtBPlA*&d!X+
zUkU1oJbiXFI6kh%FD|}U<dcRoPU^Z)-$|xRj<VojiSYfl<0ajfhigWLT<Q!$g-rwz
zS9W80bHdZm<)o!sd^688H0trLesAj-1_%b>kLi)(GQ~K)*=e4oc5}J-9ZgfLp`np<
zL`d9%ge`}&U!W`mGiKwO@gXC{kT&CrPv|@p4|KvbU_t?3@$gWj7JuMlNcoF^WA6ML
zdSgW6bpvW%K?B>3b#;@wE_LPHAXE?JQ-fa0AWl3p=eA~8=wG!!%!}0PtCWAO{lrUC
z4Q?XcrmP5<k!3q9AbmGrM8@&Ub*&mbn15EHT1+oFApygS{FM1(Yvv7TZpsVd+@t4!
z^B@buM=6;s^>FgFuGEQD@6^)}1M)~?0fYC|;ATj3i<N;&Ihf&YH*i*8X8ygyuiELL
zNL-~0DNIxibydo%-zB;T$mEK~X@&s*NZ=(_8m;8XNw!1RXpn}$M>pyQhSlH!hTaDe
zK`|+g<>rFH217VQQ)5lt<(7c<&+<&5@suami?a;TluyRAxx*c`C5=$6fvE{!uKIO^
zCnzKPbcTD>^-rAnkoLU{#-Q7)uFbXtCG6`7Y}|OJ-mw<Qb+{gr8NhUP^<*@I82^*3
z_9V0DQhrQhSl*ZzWNr$+glQ+XfiX@xz~)dZY|5yx8g80_<{$iegtFFr!~jt-N6%GS
zVofYWyuf=7Tj&mue1^J67Sb64tvGsQ7&of9WnDPnzE|qxM7&O7-35kE|8^_4R1%kL
zLN0=hoqsczhMI2$6P<7DK*5}52u{5^qj*k3><(5To9z_a%ak+eBaf^1R8+K;R8FNx
zc+J40DTk<*_tZMGyB@V?F!yx`Gyd2~hBUojdoCYzN@T>!v7zIz(OelqMxBV^62Vd(
z_6CcM-v+#ofg5geQn;(bXw`k~>Ol=(LAjf$GB3`A&O)H;Z8dO|)xFS7mJT+$3|HW!
z22LYpMKp|fl{!2g@mHj|p8@_$Ej3d|H;>@ws(?{``?i&dRu;^vbcYV;jz4|saUxyD
zu>RRP!)ZR9z+>6Ybz*?+7%?1-cYH@iPF2g3F4riya}{JB^V#|L)YMeD6tiATr-4ki
zPG+I~lgE1Gq~uW24P7N^_2(3Tlh=_o+xs45uHol{!Vk9c5}vN^7E)o<N8r&t2?>=v
z@ddGxqdv?u#M97j5AQ22=!#_^`J4(GnwtKw4=tg~t8aX%YT7WfJE&I<qKB9oGq`As
zBDVFia06^BL5cZ93kwyvvTaNaY|$wd1Olcf88Ub#;|_`UF9|d1yMVuWmyt@5SlIyg
zh%y4#L`FU>DmfKzdM7&2Rh)3Iye}Oj2k|MWw={f~!FhmFy5{gO^1SnnFYKB&d*Ppb
z_>&pWsGqbbdFUPE&6aV<hPEO{m4UuKWiE>B(pwb*n73mO)2MwY?s&h#^1G)PxjZkK
zyX;MbKtEKO_7yUoNOgrXRZt&H4(0Zm7mvp4m|x*`kVq-yaBZXXW?m4XhaNV+Kb>&@
z5hS^)<3)x8`+oc;IVq*G;*e)&3;EPUvpK8~hw9Pm7c$kf10tQ<wRD+w`L<m#(<<5~
zR#VVw>k1^LNO3N-2Vjo}9;m;<zC68M!8wrz++6q#g7L7inHZV$2C2(!fCYi5m)ou)
zSwB7NN>BmIgeN$c&Uh8#c0(s8>YgvV^U%ZSMwUG@%E#S*L`klap0S^037llKaBKUW
zXRrr;RVo@hTqb`z89VVnrkv61(Wl(e?;=l)YkD9xu?Z@ljJKRU8Phld*5UWW^*th9
zVO%#g(?N8la;3(wCjefOh|E4!<<HioK|At&pi;0w@Wv3wg02`NHYKq(v{DgdbC|b!
zSDl2mBDlAz*WvS>FfRUc->=v9DRyH(uzbqx9o^>s=~GuvkJpydh^3mkE@{fCPA<<?
zOov{n-q{zDZ=okixNHK-QA{1NRi8}eW4N?~kF0F0pzsEGxf_b!z_XV5{fn#Sa*Q@U
z0~y>7zTB(D?9SS)M3$lxmgjsplboefy6O>3+Kf*+kn*%o^pa2WG3c7{=s)LeSbyos
zQ-?y)O8F)lX_lk$gRi2^1M=gCD?HFL!O~t|ZB19Q__tjmC<HVb7QKovP^EK+2p*|w
z7}P0<=Yk0XP+<x4&#!(T_2adZUB9oBtF%AODB6&uJq!0`rI2>}iJNmD4zX~)tr4G~
zZw#*f<(zqyQ;MG)I8BsmeJ!1J+2tFiPnEbZ`^>ARCotD&+~kvS#xC-M^OUWCJk41K
z#`!@+O8iNNUBn~7gdQ!}#}#p1MXe!or;{NomiC>`eVd;Da||%{&ek96;jhrgq#04j
z_oMr(^W8bf&t=)VeV|M^1r=QqecsfGeNWspRw{yaNGtq4WX4}!;)R}@9gu1SS2<#m
zP|xz5G5Pa3tHWX@NE$MYe}_I_!WT5Q+e}HeN2e+U<hRvj;~Yy^<4}WGY8VRgCLfKx
zd4dCU_Sr5aP0M~TOH=HuN%Y6UAFfH%PJanHroDOy#6HInu_W)k6wvv2koc0OF;rW8
zq`NvL$Kem@TyRR&xz~mqIRc0jad;#kwh#kcj9ClBtV>;6C?q*8(Wzw!4H5W_I;+8I
zyAW0kmwBsF2eefwQtRlhs8-K=cL-dKgaXmBwmweg<y$A+s$7qekcBl;eE+ca+#I(b
zm6jE_;Q3{UMf0`HqwrnDGWG&y#-@d?TqVJg6eS;1KJ{s+&b~wl^SiJUU#l(j-y3}L
zU)Q{R%hp9##AJ#ZqU7#FMjpdb0y1#deDEO_wA9MEs4v>tC~^KoHGlFVnesF;i*>ww
z0wNo9{u}M2j`AaULPvB@*tc4F1lc*>as;uvLT+DOc9^iL5D&*(-oMD;Dr3b}BL<1}
z=T7CtMK=kpld()pRKD|<y1f~QeP4-}Nk`D)Cbg>FL2us|g1Ruxe^4ShU~4|5?!7?a
z!+qL8kJ%jE@r*39mbHjY3e7lG<+R}Rp>Z$`J6E%D=+ID9Lb{<;bx#v6v)&8ZP$C}R
zt!kM!gTr-7j%l>ZggN*>++BUt%^<X2>z*upfDVCCphK5|eF1gdPU(2BHy85Y_DJ|Q
zy#Opr2=l1HG=J{oun>&+JJ!;dU@tZ5hA(wLl3MB(=gi$ao(XC!K^R3l)8?jwa(BCR
zCep5HuB>Fdq8W`|URbr*`5|gnQx@1bv%5SWHZrD_$iAJsNwH%Gy1s)v?)~&TBh@ca
ze>KQ?KX7ZtW#}!eT_h8Wh+cF)cA4P%-=RP@2AX;34Rcl6@A&|XF7#Y08keO{0SXvt
z?}9X=4OSl)yA;lSFd>Q8T$hqgRH@B(8Z9d9p>Mb$Lf78eI`XqyekvU4xtJ7IV#oE=
zPEAzWXp(pPbizhPl6|?@vz?I}5^hltN>k}^;)nYzt3(U;^fUJWjU604NQPv%;UezD
z(&8Zed%tIvp21E=$;+LCQn2Iodd@`s<AufNbRg#vmA9v@q`0M%Ke?NSw;-E?vByJT
zauc>_p>65$XdT0JKP5*VO#F0|yoAc<GF<+_&Qn2;)9O_Mz4=$7i<?FmKc|}8?A(x<
zEU*}YA&24cY>OY;F&B;gvpIWJqd|e_^20T!V?jVecfd!$(*vR7zapf6x&8n1gC84(
zpo#yT8o=NB*Z(7Fqy)%lH|HVu4KChBL3pnR=?yEU0{LqK|MpbiS#=C(3B&{5Woegj
zkc}MgN^^+|`Lnp*dy~mt_CwTMMl7xsJPZTx;~Q^GqKg|-Zy*ConqW!z&w2EJzVCm&
z$|nb3fx|zxT65$Mes{WN`%L3N80Of2cZGgGL##-=8y0n64?e^wBPe06athnh{QH9#
z@D+xcICuoWW$D)uV)xsQoNl)jkjumSx>fPFw{@8qWmR)b$oos!{Q&V>V&q%uJ6;fI
z7NB!C*hafj`o~rM&u9JdTmSyS9?-U{*U^*LyIX=)HXUXww(kq0hEt24QU8FO{aVm?
z;TFIWA#uaSU&{?@z5cxc1`RwdDk#=JLc3D^?~ipd>3`gFwd(}q@k9=mA=Pkiza&i6
zO#q(@rE4#$+AqHCY`xb^PD`%tjT8kVbX>F@Av+&>VYdHq&Hwpcqc>=bq76I!iwrxv
zVxSF3;8O1%Wa`Vl4;M%M$Onm1g@XoRubGzPBh3=;VwejQSu>}5j+ie&{~_G+h44RH
z)4!hlmX2F+%9e?<**J@^lV3u@Jc{xvU(923i{V^*yO#*l0ClDL?3hrZGVFH4nlZ85
z53ygKbxn=k%f-T?y)F7*r+D^j+w!u>MWbi_fPwI7X5xK)9`Y;Y-1Wmo&k<As>&EXA
zz${0oM8ON#Y!QcV%MiLGh7}^Nb7m@35XRyOKrWb}9HjgIShIfx9{*lI3_vbETi%H$
z?l1t>3PLI&cInS=(vYCmIVj)04xc0&LDOe1_rAMPD$m=Sw`ZNO`|dMv<B+)5NN-7Q
z;cy`vNJAeJ$^1VC@qay>w)_$gFg*y_%D2>gNbeWO(E`$_m-hN5=xzc|CR|)v_+|2I
zF;M@|(ks_a@4uJ|Sb*0WTp4O;s@c|h#=<y9Hfn0zuM62SDF2B;|Ko<HMkyY4Tkp4T
zobYac42kP$bdfMh|FVf&Jk?!VIaaBTT1nT=mbT_wWV3p-P1$U<5~4b?a{6tqWu+X@
zUDkHjcAtH>|6lBeh7BcHzmpL43_cTYZS639R!v<^-?(3eekNfRw-%>;uDusuM9{?e
zxu@9mBJ_53`W)HVdduXwy}1uZ-*cNy+D?L4nIauVN|66&-v93v;b%c<rk`_}p>H%0
zzRXmQ*F=y|-#X&vHw+|M=@wUKpZs{Q9k<9QAOTVfdE<$^DMN1brq_P2{7_U<S_KrM
z;E^1S(&A;hm?DiiY-7WJAI=W3k0mUY(VWpswM$^vWI?E?$ok;LY3+<@P&yRMAyQIV
zy!~URg%y~x8c_N8uv2<<dg?_+DpF{R=sI|={+bE|wmAM>Rk&l7qG1;vyruuQot%vI
zP{SnqK)hAZR(j=jO2nz#K>XOTQFz)c{U}ABx(<nn7_CHDIaD(*b6^?}@~-gn^O@M{
zT|}fd9Q}xRhohrzRzo@aW!j~BuM(R3RE1l^1~|D%qMd90Ho9O88m9_8I<gN@So$)~
zsrz4;*uU0!4v06}-lK!d<lQDUCbjE#6zZ94U$}KY;a)hBTCnuI+#Lb-d#?_8Eqp2$
zoU!~7np-$U-%=>uQBhf035qskAn2g`>Ou0C1EB4(<O6#)83&FR96}Q2A@%;PpRHf=
z*mSP=y*?mIdtNyjg73N8H-7fJ9ar0P+y#_xGq^RmA#;$Fn0l6CKsd$cG&+3sthbh{
z#j2AE$+y2f2VJM6Le?O<%fQBkreJ3XUW?+}exPhp&Em}cf1Ay}4XT&}1q<t#e;;Vr
zT99XwFY&HMkcc-~>HCpbyVy(}J5M6Oh^T3OPbv%#RnHaZH)1we{h}kC+rzacLp&?}
z^WSD7UoMq)sP-x|emyK=X2T^aE6%TWxF38JdnuBR->mr7mSg7*&Y$(C5b_tl`7Lxi
z30I9I=9f^^9?&EI$oqW6@s~D9BSBhv(Xg;+5?1@pu>QH0l5B~(`p1n&O(~cL6MJ*t
zYO-;{&u56DE*gG&_6U29z$cf&#OEpyjJdtizLlYsPl}k!u$MIrO5dRq{bdb+Ydr=q
zek^_w3DEJc?4c1Z{}T;Bvm2TRZbc$IfLxwO5c0%Je-N#>H2+XCKXfOIay`peh^T3d
zO<@y0eG-hLf<3*c)f%CUGt)JwmC*Pmv+^S+m#kZkY3|71tc_U?jadJHu7;>1{xUOs
zaJQ(Sv}PTy0V=UQex-?=(t}w!tK%4-8Mc)1*!pU=u$8W0J^b7HVfa}8sVfGCw*1}E
zFzW!tGa~SK!Sdg}2oGfj55NN95J8y!x=Qb>ffupDbJe>4exz2?(zLUYvtB9xZEH*Y
zwD?o^tX9ek{ri|cNlW@_@_#%@{cF%9ISN!&i!73riT<{`zT))-0!rJ~`I{ntpSnz0
z;6<bSsjUCSHgSMz?acdsXU%B-!}Q380WZn~3#;q>b<{NEK<rqVk-7i3EkJ`7N({V6
z7U5J__xDlr1M6reExUmES95sA0lX*_y7kfi@1y?z4dy?u)Bnc|#+|U~`?2GXgyf3R
z0%P(+Sl3B{5(DE+qyHfylVci)?V!S2|HZcHWPWC6cY*Z(L>d~p>gGev9CubVJ#b<m
zj;=Wxd-4_>vk*3ryckf&_fqH+$<^?5{oc5X`(l$buItR^YVgpYlCDF$Y*}}}jX`SU
z-#5s6ZZt(j#ggjki6p&6E8E?21eCJU58+M;g$72_c*I@tUvdf&HU&>9zA!Ha!sB6=
zbUU9NDZIM($o>J=;>@Ow{{H?F0HV^=f6KcNf3@&09K?S%@b0h&ua%C0{NCH)ncbUW
z4)($8g*zREE4I@_g|b^p*Xg^G+8~mo_bpvzDHsNT4@o}DFKHRIX`J?+Qr7#@*&yFw
zZCAViCqsaB2b4j!^PiPYb&H2PX9@w0<c3N(Yd@<WhDOs+LDJt3Cw6xB>6E<kq|*}(
z-m3AmDXW)*M?2Izm>#MN2a`Whkv1Ymu6s?0r^vcqogGB+XrAbgxY#wXBvWOyvWHRI
z+hh$Et)iENjlxd9wm~~3-Q6W;x!|ey;}$iOryA-@DDfi;FFLSJIdhidE*`B(gez75
z{b28-Mj5;Tx-NVaxab;g;!c9O(8>$6yUL8opChZ%me`=&twuySYiAeHQ8TybK*L}Q
zMrglTJp<6R6h0opA~Jd!n7ZwO5WXG`nAN)$ehS|^gFsCO(r6rbAgZ$ed6xhePNQSm
zuNSftn)en_`kO+g&Gf*%C%bnK4r!&FcP^V-7ixj>gGVf-u5}5T9`{~LrIk{*9CDqV
zb!#F^#c-#=B2N)#K)g7d)zH^xEBB0q^h*8j=ORBj3eOeWRtE{bVf?iSa(6OjO3Z1-
z5yCNTPJKrY1ZbV5419H)amham)G-a-s0i|l#Fwwc8`dtQTqfcuop^rI9NU9?wj$>|
zxZjz+c+(vE*You&o`SrQg;(2^TmurgK<=E*8lXcMdg-aQoJZ!-OX_XjDih3<0sNHM
zU~7-A;N2@Y*WDDA*ip5Z-GTJfXp>m5{uW8bU)?@1b2NlLYViwDUQK1U(Bi78B{j0v
zqYLlKW+Zw^)9#dCz6OJvK53JMt<zo4@M%hA80yAuiyw8hbYql`k{PnbGCVQ<XY1eH
zuYX%32Hw`>&YRtZrUTu#j4?p)*t>f$oCR%NQ6_1&0b8wvqH(S3ak38w6@)K%uI;Q}
zo`XThPetl(l@V)iw*SjI__sOWCnS*8#xGpfpJD@up#DJalEY5<w2JM}B;9_@Rv;~5
z^M#+C{t|v^NbU=Zgo>SIbgF1egMkh&6CR?!`lE-m<$7rA->Y2AHoxm{e(6=#^I(&4
zgB*@ZROJGv6|*T%*JK=U7gh@i;VwHG3gbd>Dc?@-%{tdYPFhs7EiJW`2|`Qu2&&`%
zy0DTwbmfacV%xLy;#h2d8mr73b_S)a9{F;B3-%n~1eJpIPZ>%S4#<+8mun8+bqt@U
zRr>rA7pYtMCT6#YFX8@+BOtM);SB!w<O2}bDCCUjl(V6dAkBNfd^%MZFR>r-bJ-Yf
zM1I{k(gABnFHZ8#nn}3b>Q0HcOeT@*fK{#^jx0D^)ND+B`Fmg{1(>79?$9w8;++ZH
zifsppS}U>iW|vx@?<H`_<~&QUy1zH~HeKP(I%@+*O%HQ;7MB#5PBOtF|I0ItoE*A1
z&r)kRqfQ!xf16Q@U9ntWK+^U3xc@x!q}kN_I;*u>#-T^t<36uA%RO%r#;ko?IQrin
z%FoAZ{O2Zmw*AKQx&w69i0joZetn>+5itlrqW&a`%I=W&(17pm*Bz$bCg2E44Fipe
z?HG{!e=&`3f85_MW0CpGhTG*Xm0e!yi%Q7WsDvT#rNm8l2;93W4!AGmFhrt?14kDU
z&@-l<t|#*3Kf8}V6XH|9nxe$Sh>SRHt)Xtc6uaI<zx&;CbK$M`udxHW4%+I{KA^X9
zwY=hORf2;o60dN1hVu8hq~UJmwtYj=Y#??Gy1rvus2+hFMD4Og-FFwZ18eTwa_-c(
z6tH+YBj2*@tBEL7DgG}h3I7Ke?3|o|Fg9~<%LT~R&Y3msqcSXr`R<>5V)|H}#UJWD
zf~KxFf1NU)6xxISL_@eE7i1_6Quh_#fS}1?>WlEVzi*DmK*;#=!D#wFV+1tkfW&tB
z>Tb%=@SwJd$JEBr2%@PK!|}|Ue>lLVoQ;Kr12b&q<HsMmvg!fqlOIXb-wr62WM_Yx
z(+4lcz^rWeEgdm8l3U$^Kv=`=7uO9%b*#_ujFz%1k6v!*)T?V~3NNsh6c@7}fW@Sq
zT?Qy6J6`jrJ4JE?o9|Qr*<b(Lj+RGh`YUAok(E?na)?E_C2!S_0}_6Y10{&X=kd~_
z*0S@A;gbH}K^i*l-B(EI!=Zyog7LegH)xRoE#pW4>muK#U+H@N{v1|1!`ISju8Rw_
zZF^Wentc6_Pjd*Ad`3b{Ozels$H!x;wldBSpyM1ly=WELxdl%aAe&2B;VG#)=nd*<
zziDqJQnFuqtHacR@?XuQz+}LAX#bP@AzftBCeecJX?4-uy)X=~CPigDX1FF~tF3nH
zm&~H>Gc8i;Qt1+#n)nvlvoJ8q0;~S6udQ=LjmCyoQE_Sc6Ka~rk@{8mpzhi}-ub1O
zY($mi#!S~{>`)soH8W@3W`KU@&k*ySZ)u~@fY(L<{AU8FomEfhMtJwk%YNxTuW1PF
z1JDB<wFMO*hy|VHFQI*Dzi-|p*B_}HG?Y%~j}2Bxy`;K&b03xRP3kyv;6_f#Q<Dk(
z7*is#o(d=}_+^>wl-z?Qfs<yuKdsRM_e}N}YOU|#+a>bK8flsj;)ewU#qQ+b#x2&Y
zTdO|$$3fG?V{|c%t#lH;_L5v><zT5T1gfU&W!3#pyvMXPmdajwj}6n%$D6|{Y#u$N
zKydddHdKl1t9Y23->jittro}qh<`lFhC#roxcKStnI{L9U&~Bau~MYc%*DZKjRJYq
zw&I3P04`^Ls(DlY%`aipIlj_;9g`ZW5gZt?7ZKAB&h*q{4B`#){i-`xCH+ZfRo~#U
zwpzZI#2DIkIB5~}`pKt#rQPmTiW}N-$Jog~mdQ|3-Jn$UKPtgg9L^D-ao%zMm;@*R
z$w847YjIANkW6JRmLbTQGWZ1JDNqIv&p!~a>c7+g+TIuXA>Wb-{9&6=EjG8QQ+NDe
zV&bJl!18K-2Q?@qA8TsM7UGti-c_ZEPh4l!5NOr|MQQ>yOmgbPgCN-uybwd}ha-h0
zg%qVZS0gX4lxsmAg7w4s8@{k6N3e04_^U05`LYLfXzGfw*|RfP!=ITRuFKl~Cl%VZ
zjo0SWF_WCA?2nOrn1Sh<yIwqaUsP07wf^ICQBg@191h=!6rt<V5%MZ(?2l;Hd_H}>
z_{GI#3f+&FpI`j5sc9BJ|I2l{F6#sb4a7&&Q;r&{=oLTCsD5oMS~|fU>?aVoNiY?~
zQo)H69@K6sIVq{QqN3f(>ZZWMS@GtH+G>g|>khh)yX%B|d(E$cHycUE;E79sA;V8P
z-9<y!`1CHDEH5<=mJ_^MT0z|Z87+C;1w5Q(^*Q&mb%#6uy30_IcY7e8fPk*Fv~)R0
zU44@C>*dG659y&SX(iO(^^4wAgE8>b#>e?ZUwxA9l;%gKle{G<smc0<M~9~)-CF&4
z*)2Rb(FNZGPM@_UZQcyv6%NA1tD!yn=(V8syM}}^aVLl>Qh0=5K9DotWW48=Z`*}K
zD81TYpLeGT7i{rHw&I6p;a92ijHTD8E-=~BgYrK2A1S&Rq9ALlSGzip5_$2dx;f`)
zK5=f=*g1Vej)pHF!W$ZIqgba3wk5CRl$3JSo0{KIks`2uDQdVRHC%yO@qShOoNSsO
zz}m;l7bgC5tQJ4;x%lXjZ$2G(-CI0NdE9d)2eP!pc`BT7BdDzE7VIY_q{{X{Xe7Dk
z;hnR5f8HzqV2r3tsS7d+vT9OlZbp*zVrShdzFNKp?$^o08VV-wd3auu8erhXnZ@m8
z*Xo!`XHCLjhEdQr8#)>2MD8|)IQAEPweGHP{FVeMzv+IEQTc*gkDT=|Jq{bFA3SiT
zK|)_BhWj*A)0hrxNqdYQ9K20d_j1!OAe2V1x&|r)BlGI-YmDZ9H-Nn?oiL`Aa0SL7
zc(zGL2eVMS=y~<=aY!e9C#PKa^mJGL<SPwbMC24Vx4(G+=dbz+vETc8(z}I41-Ser
zHO^sJ=P)#N5=d5lp?LLgj+48Mw;QB-S@$W)^ku8X5!a~M(?Jbp6;nt6KM7w{?F$&v
zR5)1-4=bFmPW&~qm<}K|b&Jk3WR^`~A6m%xk@}vx%#GJ~%pfehub^iD#6>dA^);W2
z$7qo7!sEclO}La#N3Zx!)iZDz#=`U*0yqhpo<!6Q|L??=kSvW;!~FhtiICqHzwk+9
zayLqvo9Cc)S@UCK1a#Db1r)g{Qik9BMq6GRB^|uJ|0?pHUR==Wu&7})FNH7X$Wwii
z*ruNpRXz72{AuLO$whb^dn|z0tpd+AOp<Mr1BKw%Uq{~n01UmAN3h3_(NSP{TA&n=
zjNCVsr?kB3Dg`T&bjobWFMRDj!MlTUcU&U!)kE^#GbG!eJ{buPd`?9L-P^N?0+1Fi
zCG*D|`1tr}gD5i6UE;A8lhZ-NOvE4b5S0ukS!?0}s<-Ct`O)KqW;@coOg%Q6(ji7e
zwPGQnriHt865JiRaqbNvv1L<M9Gq^C5IR56p9nqDMsJLi+?BpYzXIFYai3&x<~05^
zBswxBI3%jmcz_^gV`%?>L7Fmo1tvsHG)K-oKE~rdsjWt53bjafLRWn1dB|sP_q`b|
zsOmo)1>nRM+kQ$EP#v(4t3e_68X)*`w834ha5|lgOr%9}Mf)M%ocgv2Y`*!r82nZ@
z_-img@vPfSLJi>m?UNpNkm#+bBlJuW=g$7>Ba6B%Pn?ZBNU>=2#1>3TYiEA^;Fy{M
z&I`jW(HNxxO}5qhx{Cdz#6(O~>BqqkNHgux=bcgx4TG)GkM675O&#CPF{977zv(wG
zZn&1V3;1JPz3<`-ts}-~D?PUuAG`j2*K&vF6Qh^noV<<;@;dbY9ki}$y?kSblMH}C
ziP1Q(l-+t>Y44KBin4KjF`ME);%LT2l5b)`EF3*e4`wWOq^6--0+<H)n9ctr0wh)G
zB%jIjWxaZ3nT1L?RZ-LFvNuh7<bqFCR#|~ZvoYi^?|FLS6tpEN%J**VRI%hqY*~?6
zKl}JV;FVm8`HF_7J~dq<)Y%%#Pl`fNX!}yi8yq?CO1_Sm&d#G0F7<{LCFn*##$&CB
zo4YF)e}<1=a4C#t0$xhlC}ksvh7lJL@Bp>5pr8OxT_IcZO%9jBd)+;$mW_wj`O31=
ztE#~Xrvdu8skWx`L6Pp%4UQYiou&A)`QlEd_7O$EMuB}$aaFNm1rtUKtez@{7+f|i
zmxuC*9^W~-Sk1c#jo=-cl700`)$G+5K{KHiUNpH=KcDf^Xpw)bsV(gY(aM3o=ZjfX
zXU=w}`X}=2!$NrhL$<#Bbj*td0A)#2oGD!5A|fPJRH9B#&jai(#|jA$(6YJsuHp2y
z#DloQT(RXq=HSsgdl9dTasas}Qv8A_{hh6Km%#p{lCp9`8{E{d(~p+vO{4sR)2__`
zIZbd;fvBQd8uhSa`o+X9fSOnI>LXv?S!sJ``y#U(memv}mT^0bfClIVteOwxC5Q`c
zn<SrSggG*_keTKn=bI5wFajzrsmcLtRw*?8i2RPxL;Rw`q62X!kX8yk7t@K~Q8`9q
zV0sT~R<q~1$17t{i*nvdDLtBk^e83OhlcxC;$(C=zcjV-fzt7Ng&om<BIIvsXc)<#
zjTDX!(uThjl@ww{>kkca7|Rx<q`gDeb;Y2O`Zlt&oD&8V6-+5T5w{`65lj^$;B0m5
z5$aRRaKW9p94ggyJw%16d>?LJU#YWvM2co`_6T7M3Xy6+DhXEu#^@(q%QI!_e{%u2
zUdQqhzw0}Ut*X0_b2Tp;3LgpRD}_S&qZq9l#B10$Nb*rjvCy>GeKwPeG|O~UY@;S?
zCbUvjvKaC-W#fY6R_nN%t><Hucx4+Kt45N@lbUho*4PGfi5L0~x18#n{U4}i1Gv93
zgQf|~Ff%OZ5I{UjR^edEiM5fW^3u%ZxBC>iAb{bQ57shckc*3mlGN)y?4M+t+VVm`
zU5jcirMQjZXEg=Imol$?HN{6KEB;AR(AZ)u$_#l-;1sQ%8c>u&r_KP*&u7@Ov#U5~
z&W=X@%()L!Mcv1G808_(Rm9X3Q##IIb!A8Qc3uq{vRx`D+lGgA?-?c3{Cu7p$1iT+
zBfmI`U4*8lW_+rs^Vqg7$ZxZ|FoL}%ZQ!NIN@nk;4zNxu$6ykrki(1B;F$8Hx3RGE
z3V`O>#js}PQ%5j>)t;QlvsU7yZw6qE<`jqO5uPcwBDMS2UVb3^M?I$zu~xM@Xqig%
zh2O+qMW;YHhIxtK2J7h}0ZAv*Q-nW)FEgtGBp*3zhJHqkK|wh3aulB6E#IQQ*|g{-
zvc$#@)p{$hrgbSuZSsXN6u4I5k1qUUH1D5b;9>eq^NI1BR>d51y4B18VB3yoReDdK
zgrbBiX}zIfP9rmDaQbx|9j=v#i>>{pETd*P0VTGmqcGg~wDKFh%`DK8vjQ|*iUI>;
z0|sWlNEWaqaRAPEMd}}%3w>M!${(^^(`K;savNKp%~g+wP2b&KOLyV$E4gswy)Q%f
z;k*0c*>4@mCMS^Mstsw)u*2ST|MC{%5p^!XRSIm<Kgn2zH{{3-vl4^Ja3jhsSJYP4
zd2u?WvvQ%c>zFBtNtiA0!LDLNO*Wz$b*Vkt?MKzR-Z^@xmnj(se!waVdl^gBI<$wz
zW9=FRs5_DyQyTtr;R1Hx@YUj^F-hb1G~CSL<JoF$dHJBs#v|XeD^X^(p{uJasiUi3
zmMVKd(@cp-QYvaaVbkYaf|ksQV5S+RB!;)5qkA?8WPRgDerlAgtgM12dn#2yJ`qb~
znqPKB4Q-wz_8s-v-t|B!-3*DBZ_~NdQ_^qWxL>+i{H#D)!WZ^h&YQ0X2aC0B?-I_(
zi`_x<4ad8Kr%0P?8?w#ZLn_*^cfUMsC25S7W8_(&Pt|h@#|l2Ajy)|YakNTrb~Kj*
z{&~56TAiog+PpK(7-#GvsAAF1dqZU~9@qI$HK*+chnzp#PyXp@A2~TgumPAMfs1Qt
zNlc#pevQe}dN9Lfu*lI>U&tXh#{~n(DM<=D>?#P8{*2$8+;YsTj>Tk(N>xNR5n4HT
z^)e!AR-a!cfw)p*Jg(QLGYD5;{r7n9SP*sk8{T#09T<+$lORxAkzM9pvCw<RpX-uC
zKG5Z_InO;!u$%$ti?*Y~(fFGf#>uxl@In%<l1di=R4EE!CuXEbITxxy6|u6dr9qBb
zuS%~&`mJ$sl!6+Q%0Q#y8#-Vpy*?=dd()%rpr9zK!4TKH!IX&)a=VBxG?cUMf==++
zSB^b{DI2--EM+<DR3`x;fj<$eOrmZVl97SWMT|ctJsZV4>Zu9cO{#U>@p-kovh+}D
za99X)D1%R5h~k^TFonm#w;_VF+>r6!9PO~r(AbB)PbpOzp)xZoj5$IXFvg(p2<inm
z$s>*uJAJKI`^ByhLhbpp-33b3fZk&YD*^ajF4@7h?Nitqj3WP^(YM;QA-0g@E;-Lc
z-u^F|zQdo*_j^APL~FOTDYaW8HnFu<YgHGDP@|}#HDe~;tvzF<_TH;TDPmP^V(+~-
zv5Hu~e7>*O?;m)c+;`4%&UIbqy3Z}t<o7&D*6mZw>q6MS5y<YtxPWQ9yJSGzG=2A9
z4Lw$rhg9tErnj!kUES5!bEbzMy`H}Rol$}LJUc17ocH$1A>Uc`*(#5+Tur{hrF*_-
zn9YU>cj@Q0vVL!8-9J2G=)aLw$CbJ)iWoNz4S}8a=rIIq#*FGbtGtg0o1CWv!M-Zk
zpCZ?o+r1++CKVLPEXBJ%*zURYIaL*Ni+2@CpfHpS3XQ87{X86gXty6TB~)58$5iVu
znfOt+fp_lbd0@%NCz|G5LC54jpL<m1xyzIuKqAT_psq*ZH{dD4zwV%#Q)b)mp9GQw
zf1-K=H7}f6_mCYPW2e+BeplAxl)sZg^OlP8`oMGLKln3W++r){%H|CKc8tbG@CT0r
zVe`69MpZ&O$?^(9W=)(C4<+kiQgSD1#Uu3Zp9*kV94GWoLAmV{tg2&bN*5B{ou<(5
zO5ex3+<UQY^6k8I^^13$S}o9knjOlDT^eUyBQa+i`=fJDP;%x9TO;8(dM+PCIH1}T
z8SO}YXlo<{EOt$reZeB_s2TfFSMwO%?_hLsSN8YDmuZZbF&6Q>e8|SF5}#1{+u^Q&
z%O;+3XJj7aJ@Q}luR?LYGw*A{dKZjLl>RTo|F>fNHxK}#tV)MFN|}c4Qae&(#e}Xu
zC<8I$<!0&Xx{UKq$cdB3;=?_3#lu}FE_+MgFQLzxCqi8`=cOFHq#X$6q~7<v!1Cbl
zlT~gAQjTrn<?H#}Z~uU<EF8<402s@{+z&;j!>>t*wpoc!+B@zfByb0#DuoDk$w#0P
z=k~GVjSRXFzd}ayw{Zll>uqs{IR(Na4j5X(N~I9{{|VYyl_XU8ZDCc+_>Ej9_uw9?
z&nJ)*83&cEW-763iPRQnmDEa_50aYoHxp&bbS>4RbhtFC9hX^4SnaA=AXuwsrz?7j
z*tcwopW)1kKC0^~rEu?YZ}vdJr4<c!M4WYx>FU;YaZoO8Yp*_+hS?(7a^p&Nl!cas
zGb5JhMjFn}^mRGy!w|LP80#iE7yvV#aMWv4WJX04bjM!a3hA3|8!e0=SZz1aQDTd~
z-1nyaNH8C@Q<*samNMbCo9V}Rs6SHu%tgWg!9vE;XXJ~&d{@e<YqJ5cFj8^3?fO$L
z@TSy}`^n}|^~Zj>t(7I4HfRb1a-twX;dHcO#FL6m$;;w>owIe3w1zE{{Y+klSP&7W
zFY~_TbIW2b%;&$Y?;70quUvPEjAsI+-PDW+{KbOGj2d|NrW=Y$G4BVK1<L<Y5BU9%
zax_BM?9C_XrpTxHLrfT<oX8N`>|ux6SvuRxLFqike0E<SDTnDA(Y?t=p;W(vH}kFb
z+c{fySjl5CYJiBOX$q*}Y)_lzX<p<*CDw+zls@V3;91W59eOWZ%Il<r8uvRWauQ<r
zYp97h<a~BtuHRPN*BJ3WNPjVs-={5}Kk(xCW4~T3UyZx;kE30@%cjd>pSR7c&iYi;
z7Z26<v|9b2TI@H^JYC3{cBr73dC!eh35%<rej&JR!)C6X()eD3aioC@pNR^B!E=VD
zS5(SjY7~N;!0I%(P?gg?vL~k({Qci=W9eT#z{)@Xj1cLmiVy#N*a4PLMqAF{yYv`o
zVZCTbIk5Z_*yPbdm@WvO`0Nsdlf@ipZU^U1Phb<-^@jz@X|Ut{yWt?U`OWH7Z+F5w
zZM3)hq2>dZHuF&qz6-tSjditNdz(X+7RB@G+;O%U?wmuW15H=1UM_R?s1s*10Oi5j
zcCV6{W8d$SzYI<2cXO^9a*~C5ZY2MJwlMFFwd#L!W8LGYZJeBT9ivQJ9XtZVsRH{t
zmfzU3A_DK}KLO;Q%`2tOhkaFksA`)^3Bbk59Gn#gQHI$T%Vh0kU8_g1(qU&euRPsU
zfl?Yxr86hGUjO3rN7An4MwYUJ#2VB)6gb%(n?6{3En<U4{sNlsdd~Z|UB2$b_HT`i
zLE06-;<x3AQgZ#tjU00oSNq3E%f__kFQqrTkHOrfHYL>5EnyX~1L3jPSjxs7K|7O1
zFSlj@tdlyO%(4*(2fi!+-nE&@_o&oi2yYm9xWDdkNrH>1_PeclW|ZHbZU%yt?$!Mh
z*t6ZeTkmx`vz1+JObt&}oY#D>w9mRI>ApMp&+?_|O2QZOfiwkAs#F<ElU^>2^Dv$Q
zZps4TBcv%Fw(<1<44bS&=RTX{qFdoL{OWH-wfAk=?vDei4NN&Vk#%cIfZhAmeVX=R
z-4j0~YxBj*z(|<W74%-)9u}pu?euu%ykcdf`R3nk(th2kzx$_G>D%?zmwAACLe4Jn
z<jEoo!B~S=c*#cuYu3&<)yesuqMSOgkE(<LpYSIcD(<g!Rhf_@|K`~2Hs<&2Zd>QJ
zx+>JI60FPE+nGOAib%P$Bujj7*6j+X<}CMFrZ)fi!l}$xvUfC+|9*4;pkSi!$9)V&
z!1toHT;uQf=y7dIDF4q|qA$Mo*DPBR09L&;MHKqm7e<@EjzUpNM|%|Yx{OL+yMU1!
zi7ydb(o~~JgXW5wy}M<=@|vB>nzApH@Lz6czuvA9wx_hd*g?P;1ap{ib1*t&#(mPS
z-BYTDILy`yC!Cb_YyHH(-|d$c)DuXUPg*D0<oVzrhYBt;Q#_45nYBk~dxNg-Pkl$S
z-tW-SzTNk}eKhCM`E74BM{&$;E^llrzSd0JiNx^Ou``gohi2}yAL6T&u+p#f+7evW
zs_bk93?<CwV6CfEO#=p>%mhDNHIZXE16I4YA3bY%@YDX_X3o=SDdcsh%U|?&e}L!=
zQPe|8UQh;SRi1WIf`7Rk?X~;$6;H+L@wAI)4RZ^cA1e0CcVfKyc5uE=_-r5zDm_Pw
z@wq}dsWGJ!!LoMJ5Z8KJryj8X?XQqh1CFt|`7*v)+oSZ#B#HHGRR4Z}_^FK^^d$(U
zur@l_Tt<os^kb*aqaR03m~Tg9nxdI;%+uF$hVKnPuy471W#L|gy$!=B#@==$8H^;;
zj&W7ym%C0BT@L%!D*d2`m?Wj*n-W~0`^CU=(us-BK5~s$<1Sl!!D7>_o|q!n&LeLN
zyA6-yqxx1N+lLB%+{#64TUN-|?0?1n9s+ekTkd(16kr&;^?41((_vmuuD8~da#r}F
zNCsV>K%A}&b%SNDo^j4ur8dh_^)d(v5X*;5<MG)GI@Gh*wxn&`*&2-`82QT!gY@oR
zCIj%TP^qAV+fnsNDnuFp;YiFy{jVBPf<LtsOV2V-PY{+lxWCXkUQbx&X9Y3Wo!21P
zvsx$c>s~@e6*=t~EY~80PC=B%{?tQ#9*A_LB;>4a)Z4L9X%5l(%&t3&g%D8#CK!zL
ze#oX2GzS*O`f5k2Io9J7E4^oNM^tL`yLq^`*ZDkTy@1;jBh1%b>n7zcK3nN)i9aqz
zXlrn4j0f2$bva8baZ;>xCDCbt8?s`m?0X}1wob<&`H}}s@zO%)i*4d{vt|4Ciqx~r
zN{&w>oBpsUzj?mBVBFGMIjuwcmhWt$*QqhORa#CelsB18-;H|VIG}nLpUmaupxtO}
z>7p@;FpC38E{>U_N_W^erCl7G0A)hYA1dJgn7)Se3`#X+kYe!7$49JmV*hR~4{VH%
zRh^}rSG&4EP<hw$0IkK#W_9$z9l{fuF%15?=|lGHe&-+jelR#YYolrfLI@jr>z%CY
z@<XZdDtDr1D5baN*51W4jSyJZy=TkWL-tk?k<WG|iXAp<1=Pl?8%Qx<GD$|+7S%EW
z+sk~i-mBLBy)_+9t(e_*sr6OVfV+XET#Z_+uQDTXpG0o8Kf`c-f(Jg<r{s419ks(-
z=Z=Ysk|Q?xxf2U<E}E2qgt=g4BNe+Rgzr!D7I%D`NcFdJHp=4pN{m{s*yQP=X;j`0
z!|Y(L>KYp@Xx3}#)MiBKcH3zrlM9?xnvXTpON6mO>sHsqNP`hvi#sd9H=)F5>E~Dc
z-%OpyeK&fQw5jK>Coe92w}ckeGJ9u!Sq{{kT-gt(Q&l{JdN#4KZ48+HaJ)k^;M|q;
ziRvT(bWH+h(xM^_%}xx}U#|L;LpUcgadx)Q8O5#_Nu(+=%BTG!I!`w>$v;@j(@z}o
z!n=2)y~nYs8CQ~jW>#`_<lR67JAbC<&TBIrXx6U*HJes^nND$fHt!8t`lTn~XtIh-
zk$4=zB+kpS=Ub>{*D$~d>3PJZrkm9H&gLx6WnW0XIAO`BxL^(d!Pu=ki9_xVBq=4A
zvjjH-P4jhAU-0RsX!7Z$&Ctr8OiNCf#PaH5;5ptNZh}7i>1AUdkwTt@G4?cdB``DW
zWq)J8^Sa6Zo>l%Q|4$Y6{AGN_pW}B&B~>==9$4XKs(MDalHb+2&!AJT-`w27l#`lz
zsP3_cU9DK}8Ft@6absRgFV6V|lW(cnvG_C{?$5%X<aMcw23(y_O{iI_LUDr&J_1IV
z592E9ysB9<VKSiWGN|P1YnSu+O}r$+-v06H%i`}gkzuII&=R_bu-&w@D;ObXExn>H
z+oHl%%J0^9>8;+!4G9vDEi;%l$Owh3g^Pn&6Xn0YIL%kNZ6w7on~pM$+Kk*x7T#NQ
z{<o{)iR%f;)yvmOyh&W$MQ6JRsm(U!b2ZXmboia^LM&~%xu#mSA20GGeezh{t9;(-
zbaM`=;6D0$(It$WAGO`sWpWw$RUx-LDQd~}$zBy^u~~QSyxG;-)%y!_Y`Ntoy~f7i
zWK_RR^zMWnN0in5*!^g<yZT@;4bXtKq8Sj*%<9Th$NubPGxAUY?I=x${x4)ieW=+Z
zDIfkBvdDN-$jFmL!Ppkdr-#KhH8&({6<Jr~y)`s6rYo(rWWR7I?~CNgd_Ue8(34*9
zafuB69k;Or^82C)e8>uPNRx7S?+5a$sAO{2h<ezMOwput5@+&Yov;WtEeTJ%nlD2#
zWH=LK$-0H4neHxP*m7bQ{q@~0K~me}Q^HMl%5Jwe*ITC(W&`PI(oXZ3YWU%@gk?v#
zg!PMs&pFF|C{bPXSDSfZ=jFZH>=*4n`HZa|h%Eb^EhQgn>W<x6c;9$w(g1|vsmu<0
zetgdRBksd%*#S*MHTSCET?mK%3%OipBH84e=|*=5V{>%K8H6!8PnH6X4qJhXfJtns
z+?lxCb&R;zfLmuITkjdrJ2@LW>VQAlN_4WKRx(!GBZV`4yZpD;TNyZUQ+CfUR-jTH
z8?G<!a^s9*^JClAqAzRwH(fHbS=%%o26I^qxY+7T6t5G6kZtm&E5zS-@A|hlGcb^C
z{qSAjL1~6N31(Bm#kQ(6kndazJNb!fWprbWqyDc?v&X?afnFqiHYf~Y>tNfSGVs;H
zR;Ne4^7DKoX+K`F%F)*UkG?L)GD7dnLv8ynjH~K1YTdcM{=j0xzGcUPb$jVx4hYNA
zdieVoC1Ep;k>I`O=&_O0B_zQUV?Q(Y(%Df}M&{6lGfDk~rasi4F5^!ZZT1o05^V+O
z`#DF7&jR%J6`y4I*ay2e{P5oPSrB~Z@$-+4iOg$TBOFKaAmi1f%2jjc{fU7qK|V_G
zcg^pS^;++pER-&Xg7gp0ET1~bcxC-ZhVhCF#eZs+U9D+9J~j^t42kc(Z{&CLW45Na
zeA_fQ&uS-)oUzrCR`>khb5#zzbW3<#)I`F(=X`sb{<#_xf7Od=(3c@~Yc8Kl?zBRx
z7LF^mHtpfVUD520b^9@$g(h~-8eIP?g)>g;x_2?21A_zSBZ(z-8b(2uce2?i*HWso
zmkQxh?_Kv!w*n1cd3y+!n~K=zD;nIe&|PZ>KF)ZZueU~4gI@4bboNk)x6U@P2^vaH
z5FF?Qqe*`7F#M=T-SMmem?ro!O9PZAyw+0;-3@aIDWJ7M@3NX!7}nFqh3QN$7UtyZ
zpsstF04hHvpW^qSt8;h5W#Ur9<8ptb9?o6&TyR+Zk>NeVi=H96#OpX2dd$PEJ;M%4
zU;PW9KDAkZ4w@kua0OhfLWHY4>R%Xjrizb4hsABMeUYA`)0dxqzDXaNIXJ)^>v|pc
zOINA%p;q8?t|K~IO_%#SZW5|PA5M6(L#m7@94twH5-uRyuivRW95I=2Rtg%trYM?g
z@UU6Ip8pZ2+KG^!pR`#iyGXooG-wHnJsj48Sa1BSGj*k$Yg67BU2JT!t_E>!{=&K%
zyFg3vEI)cG&aV#;=}Ph5ZIseEGmZ^Ha={ck^RL>{WRux|D-Or&{fP`%2IwR4_UCq+
zdr@M_WGx?N<?e2(?c*Yjk!BQb%A`%ui6_@{jz|U#azw4;TvDgYuk^0yiyz``Q~ABD
z@W3-H!)1Y&8NzQOoki+%7sq$K9NmTU4(UplNwiHYo4Yu!=Qo#hilTFCqVca!ZxiA_
zO<7SK5U6{6xm!6@1sW{R6t%66?E{~GoUM5=K23=eBb_KUM$1}IwKsg^AaY{0qFjj3
zzXHuK8Wo?v+v^PTy&XxviA(cbPb@LmoVM;wShL(3&TUM~ucTyhSHOjr4BD-$96vG=
zN5s&9y_YRi$8kffday%uc)W9$i9mrV5aJR89W`{|tyINsiXK_(;yBxVo{|nJ_h+t4
zK&ZDCm2NKvri72K1`s#LTdiRBzEf`YMjm&%#0>GN_dR?btI=%mUZGm6I{O-(h#><r
zU&%|HtEItr#I7WVh@upFWXzXAjzG&8R$fvg4hXeIaF@mG95x@|XaX=w*(>7*DYWUB
zq|4STN4IHEOS!ksR0%Eg)TPl4iC2B>(-qI}?*VjF1P^Xa*70OHx^p*-HQu&*FJ&NN
z)YUyBQuo$#>Z;26&)#~}>=X&FU1h>+Y!g!tKQ|mSp51I+$s^+mer>(B>2R)4vs3rE
zS*lyeK`;0SJ1oqhb_wPW5GGQi^0<w5ugdbQrutx3*vFFV-lvZ0#JV&Wi;Jml!1HRe
z86<Z?2~$@KkoNTmNTkm3X4$7v_VnYC>=(G%w1>IgdTBxS$dHsdaWrT#W1k?wQa&`h
zk9t8)zz`b^;vILJ<958`*GX>CLQOmoY-~LcJdM%#hG)asL0?_IYR@AK38|^lZ6Jjh
zFb5Da<KfglWO%-#*mHm2WGlR217k!k_9YIO=#ueX7&nV}pac8IAb-1}rI+{XpbYC1
z-%M@<v%TO+lRDt8<G_0kVRl>;#qKQmo0e;oRT`}Dp9!>8w(>o^bi7xQ8-;udcbCHN
z?M?w+0zJOoZk_4cC~60979Xzgee`Q+e(3~+TyYe`omc_ryWKNxmN-9bpXWv5YQDgq
znQQPfDQvvkva4ln_a7(UeCo~!ru1Er=l{w>D)<cyjs8rTNCEZ?k-k=ron?`(tLICa
z{}6)spFmE~W3?<DRwd}M)BNs5o&2JQ&bM#>tJa<)y^M>iaLaeO%dE^w>);N+Go;GP
z@WSm=&|%{klED|tWK{raVB86RLdwbI+a1F*wY4kwDUb0o#l9u8?K<V*mBnYVKZGPv
zc1&s`03Rh3<$RoU^M%g3hd6s^N#Zl8dbkeCZJrcDF-W82E#54JUYKbn2rtXT&g<i4
zgriWq&Si`{tKa)<<v2B1S$xFRfi%i6(&jeb0H+kN*xk5>8~jeyZp{<sECLS1()jXL
znqT8j)3@+{#E(?VaLM69hCewFM2(~|co2?L?u01_H|Md??`**7wdttK2Q9q!Ga_Xu
z$SNXyD4<>Cue4>XBe#7Ry-*K8Bymq$>0R&s)|op9gS%Kmn_(^AD=mMG?@L`1QTM0L
zQiZOg1&H$Fk?4!q@E>R4(j4C}x;-<(Y7(;fkPIB5v!NxD<uMB829Mj$-n}Hi-IGM<
zn`#0|Nw>bqndnO=44K0Y9Vm8Z+LQiwf<ORZ>w0U$uRlv6MqY2GdGB}YSL}`w;o@tW
z&MiuK@pA{vkPFNC-O#?o^$*AVjpHV|24|+bK9q3N@Mj8FjdCr$&ZP&4>v9+3u)k}>
zP1125L*zg2h#daIPaKyjqe+g-w2rxmG#s;DSENvItWJ8Hdyq<CRk>*_wZ9K<{=P|?
zbkie_Sc{*)8Zjylg%1EI#=Js0fD#Tfza*b)Q+=L7d~pKM0m`Gqqouz7$)N}pq@c0F
zO1g}6l<siaop)4AmN9gHBYd!NwJrxWnCwie6<ZS=|AaW?z=Ym>G_u<BvH=+CW(8P&
zvzjUv4Wy4HGXHs*CM6W!#ofEXt3!t5c@Pnt_%Z9Znluos#`M_RVE1Q;%{j&Adv+uk
zU|Pt>B>6i9QsO;n?5B5IzO1Lf_g68hWpzFX(82tkVfs8Jtc&L@Psk#B(;0bP<oSQ9
z_kpw%8vkA9o1Oa-5dbRCynDsnVAT!8xCK_`R9r0O`OdDY@K{gZ+`4Wx%QKAYh5c7j
z9i+J*<Sspp*U4X$tqV@VJ=(`|uek2|fCLxEMYK}4P4Xl4p7Ps5%d(eO9y|RWymC53
ze{h=v6<k?l6}1zMY1z0Qx78yv-yOvBUi4g&=VW3ZgNEdHi3Q$I6{A&gBgQRSx7PFE
z+lh8Ku!t^+5x_YQX}C$4ExQ-7=Hd2;!MU7G9;37e{V9NV^d`lwO35*a<(IGqz~A;%
zMoBA|7rxH3M&j~#1T0L1Y*nk&5Oka_8lYKOLSv{4|Bs?<|8Am^*Oe`4Kzzs<7txQJ
z6PG`~pKo+NK{6{#ds;A79UAMP(f<d<1^r>++DL}$c5{)#SoRLVjfG@`$|sd1WUCG$
zT-CB2$<S5&)Bcs>l!NUmuX6jI>rw#b=m)t%nQ1tmlMXZ>;pf-)G!G4*+?l;U_BzY)
zYTXaBH2Z}@E$}P7mMhv`rhi_$+^~Xk4sm;ZQJQ`He;|~gBFFjtt4dEr%!FyMTC3;Y
ztjRAI`Yo{%apGXaM6m7HvVtcNwRiRPHC4y`XP~U`kcFFnwP@C*b`FDw9RAsA?_`3f
zd(xEEbY&iMszi(0XghN=?Vc}tRR%MpuuK5jago|Y4&hp~@;uC0kgF~_nKLs2PVWe6
z^4=+}z31z{DM=+`G%^7{XpwIIN(P12&U@`#>|iCEN1{G@Zk=R3OcO++>*<kY5L(#w
zDu?*VbVmeB)$Xv~Dlv*hU)}6#nW2iR{M}GhH}m}0f(V_J=oFNYb6+cWuT^NtobTD(
z1y8V;u?hjdFBOv|)GqkRffV3`%Ss)^VckDOr*Uj$SlYIPMG(bCU*ZVQOp(}nmKIy*
znhIfaLme_q*L7N+aHQ|XYkn1*9oZDce2rFG`ytT9%xTl}!R37Z?k576D*Z@h?ZM&V
z|Mjl6pwykjoEbpTI#TWcBmQmXCU2)cs|aISRI=6kjtDmWtZdS7UH4zo!S2Yb18i33
zRUl+Q@$xhNVgQkrjO7z_2hY885b&#nVkkJ8B^TfRo{1lQgLRs_b;Kw0-C7DV<GB^S
z4p0w|-Wd^Su35K75W!e+Ix|wLtE0zE<}WSHDK_4Z4qerei!q+Q*nI(}xTo^$x2lKH
z2;&zGvREFcHkTX&E{%~;z^nZoDSv76wXv=PVq4>8YaLPv=Kt8VZk+29B%~4~bwg$~
zk$fn1UY1h@cdFk&3d7-l2Tf<}!@eH!aA2ES1Q2#}wLMaS*^jtl>4bepb>$_~L-d?V
z5kmJ`ni=oE1L(K-+a@QF>_@9W_A0+q0nRr!no=AMe+$O-<sA3+7E!-Jv;<fkrPYZe
z(?P9f^4Y9{LVu-~tz&^c;*3Du=?`@aYy$fs^7g%A1#g5Jd=`GY`FaT;bEGGl5?ayD
z^ZBMS&ByW0edb&*2|ztqK>t-tGl*$uvSP*gWZp9U@)haQ&B@USFlkqg;R9dyX`S0(
zYw&UJ(tiwa@E0$BcW#XJRuAjfH-P+pp!ziQ-XMwj0|i3>`fBhzY8lAuPXFlNph8rx
z#($lh<o;<0zqLXD2BuRy(fk#-NCLlVy?-lJO4dT&6&BP#Iz?0VL}B8LK)Z*RFO7F#
z{S6YI%pP&fc{JnEz{$DP9bz)!9N`w>mW?ncd6vbMBtez~lHXb%EBgXI$H^A+A*mLC
zHZ2|CeJ^e&O^#{(oOh3|OdFT_eK7Z(`96gU#?~JDGBTjW4owrSsFdsF@n6(-_opzk
zRdHqrDpoKl5zYcbRF6?Jt+v&d8f9W)<<;fR{`R4rAF%AR?~>lTQXGEx(J|UcBcVKc
zX8vW}gu>XRF$vr*jGsnV6s&jI$KFA@O@$NVHMQ?1(EyuwoEOa#5NKiq!_@=@9H^%@
z1cYze=}M(-GsyGWx3B;Nz_g5`babADJueI<+})cl{B)nx-Hw&}#mjR3xeHXqSLUEr
z)D>l1lu3}ld{q{5H&S@vw_sthfkG*E0Edh(fLW}gkj98i;*ix@;O_m5rTV6$?9twh
zmjDbh->S>l+cG6qcU&eC|Bb7wyF!B5iG0&=?b)e!73K|MXV1eIoU+^pyStccN;O2S
z{FdXps2ZdYLRdl;2nbw_Facg2_A02+k43dTcUKE#y5B+uA$_m1M+IkcvI=q(k0K&W
zvte7lztF|ml=KWZVycf4ZLYOoMQ>CS;W%whDB0{T9$kMFv@;vBZv<lQY94ng-H2*<
z(0wsWCFrjwCOxuQci}=NzeReP02=9ocCN|aOgqxVYajfK-Ww<Ei+w;zp_Tv;GUV4m
z)7TNo0eRb)r;`eVZGV`TKqU3j()3PBkdkMlBZ6<QgaSwa?B!nf;tlur_NyXs+mUjO
z=cP(O2rX~cI~e?0uY!1wy6#<DWh~o8)9O_ySq@hx)keXS|Hjyue8lr$u^#?DCrywI
z;)|6|T?`<a<3}gwU0Z@^$t69)K3o&bEYM5Y@Wj}W&m6re2%^*E`*g<*3<r)???pir
z6IB=|TuwT{${!OaOAMJek|I-+2Uy6<?07FSO%Rtt9{KUob7>wc#k_owKvEIA>pV%I
zB8E1jYsb^bi0*-%a4lY%<Bzja2HIx!Axigtb{fg=Clij77^%jl^)-s|&$E>^DcJP%
zhU?aoZ^8dYz-x-oW>x$D)94QnH%dp2LBfu>4^Oe*tRK&H2<?bv81Yt;-z~e!G&%J-
zPlM#mIMxYhkki2cB6~$-C-)p4XqV1<9+m^zA@aCi6mi=d6GXwpqejzYlaGl_>d$H}
z#m!wzRg**N1@?p{PFAaGk?6JZat%eXPA!x+JHUiY5BG3Tz+d5pei(e-;5f1^$Y4cf
zF0j30VWl0C;Bz%}U?mdA8rq_o&`tCkMkT_$`AZHkejn(#>`nUXPYW0ZVm#DS3QG|<
zy1QEW{f(j|D(n0S*hmK*1Ofr!1miN0^+&vb!N+H<Q1w!f2r)mAuE;n$e9?cGLi8R@
zCrbZ7s5~2>+#%5B|4q0jOGf{uEC%|w_0VDwE~U|Xowh{D^DVM1SJAhB$vSO_UY8fF
z3r+Lil-V2XDC5M8hFDJ0k}}eK%RET&jstO@G)Cfz{yFvpev<qX_Tl-sOpq0D!9Qpo
z=aSczv;d&xd=8*3c)|ydS~x$DzhQWmjsbKtUgtW!h&U0yIAT2_-Q{7}=PM=@52*Pn
z<taVxh{C#_UF7bM<=`*D3ZTK(FB*iX-9MEx;>(`~_y8on@cK)n+;uigSp6iY=({Fh
z*6nl5x*;48NVI4z_`ZWLtAkZTZ%DMmY0GS7&Y7OdJp}XU_3HP?K{K`SP@%t`%b&Mj
zi-GzIjvD&%SHn_J($-MD@lDBv)R7=o*&Kv-avR~Ecpz3LAg%DT8@I;IJ|QdJn1C>Y
zSTXlmJ+$0ek3hLq<JS8<5>50h6wPV5Ht!C`gg?iMH3675c`Eai02dvIEsqR|Ms--q
zGc{~iND~Lbs{a75a+|2s4W6=#oE*}l8pvchkyBV^S|!LUJgczAl<aS8+cPGxE%Y{D
z;_&Ud-k!5<em#@GNuG_@cze$~da?B3Yb%DA#ZA+tLLJtH=@nCVkK_lE2+h!>=Fg4-
zq4H)OOV=7BHK%f1BCFHY78gCo8^(ufsl`aNC&+1&U7kxiEB&NgG4nP|km&04&JoKL
z2iK}HV)@t2%gDMw;n%`OBehmPy9&ilDmLoU9Y+uFed67;p1HBBtoP@_WkI<|)TUSY
zy4&i!eVO?Fs_JKKz8;j@CA(rlinmwCo{tN5x-gos%D?+BbsxD+z|7J36*YkZf~%ml
zo!>G82pKCA23~R#WB5zcB%XiAqS<{oIbS(OVPNFKUkIZBj1tI1;Q021RI{YXSm$Hq
zaA2WgfEPJD{?g)&G^snqO<J{s6#&>0C}%L6+;q|2+_k9uxc7RS`)D`6`LeV65t6@w
zIKkRytv=0fo~f6jnXx6xHf^e6_vedJBFu|KJkwjx_kKIu_W|&U&;b&D2EbxO?b<A?
zEZ(v|GTb@S=;MTO5fKc)g?b55!`9e5)fFTWT9ww<JBnBMveDKZW6&$^tpy^1yZvgj
z)!P<GN1M1HE+P==j!~ORp$&rhJT_Siu;79U53Zx~7nDf24|YUSz6aoyCQla#_X)jv
zLYxAM+t#9ua&8!N^^_5zK{9+(BfHwGT}T5830X6WzGJK%`@TZq2EEU?03i9BX?f*5
z%g7&YrcU=HP!{*!x4%GZ!#5#ISybV&P7%-?iYN7{{%ts(m2gHZC`cLFv!gTY<>s{%
zz~Jo40EigMo(pHO_AaY;C4qmvnuo7M?8=A?({B6(AbMO8l<>FSXH`hFycB01uC9y7
z(o~m~<GY`^>*X~{<6(FD3&9Rq=n@8{7w87WFqQ(y&qR;ZP@=Hnz*74;u;7zGiMAw)
zO%1VJUA&RP|1^lo9Bpi8te#@xPJtt<mZka}(7iysMc|g^_HmmGM}GKe$;Lo`|Ncbe
z1T0L)Jgclg(C9vs&8%tBkm3UX<Ora=eD!GM{_n+7#1hMww^$jU?ED_L4i}(BSV_gs
zCeO8sM>Hj1|4#sURU6tV^0xAtVS)(N#nedFB3StXG0di{J&<WbJGCRUm>UTYcV1)a
zi2Sy{$~c_3n%M=0?otjVXMIy`e?pyM0)VWP(2edR(V{O7qPglR6Z88*@Bvt{v>}6L
z{FuBG5FD;w`SbvIb((wN%BJvie3PP*H%WJ4Yhpc^&82K(2uw06mOspdPc^wTy#=;!
z)`$7Os;i8@MKYi4vESf=ObpggmX+o{0R3uxU&uRmCU&dsx{b8n#Ske*gEY(VP{UGS
zxjI+^1lxW1kJ&i8>%Y}qJ*8{cH1SPneU#r5C}(`mKp$Hcbn5fEjL!tSRlCm}8fSK+
z?Cd_%sR2bk^3_m9aT_#iY+C-oCfnJt^ofAcvsC|A8=*TV&r(Nq8oI%a&p&o2=~;$`
zXJC7z{JJ>32S_ElegmaOjJESluXPALO-?EgFg!%i=wWvQ4+ld(t%xpK?-#L7*1;1u
z`X#rUvzINl?^XS}&MY-F2M#GhYS(;-9D~I&f8W)K;0g99uZPTe^`@e19y@2hNigqz
z#FKat284$+RerO0guTX0(e|)YDSqi*n6iz?H9z|Bd>H#7iq_b1%k8^C-4GHzVcR+@
zV$N9<nyuuuT42KNSu5Br_s~HQWo2N-<^<D->IOvFCaWu!lge;7e{{mN#)xG^<;KO7
zarM%xZEDIYDmf>|vyu2yb8ZOM&EDU;lp*zO`FQbA{-^8Fv4>KUW8)T8K#IZBQc{fk
z%fEzy!<>F6$H5=C#0+hqd8@m|9-pzj_g&VOn?JNIM?C$Uz!8+73F$Q(O6Urxc|4u%
zu)2KO)vVT3#2u<hoJ4&3n)3r9zN|qie30KD#*@|w43hBK>L+{cyPgjPPba!m#;_%9
z3OMr~Boglud`kn)ma!yt3q8U)V@Ju&)WnO{BgB~Vxpcoot~S*GqmQA;UjRM~@nl4#
ziCtg{PY7qrtiUTRIrhlheD@>?ro^ABK?*FiF?!9o28v)bB}Fw$6xtNw!YXa8xR@)}
zov10!!nmtc8v;swq_@yxI8J7jN~iU%_-MSZ3V(33(y~U33FYFAqIt#y#Oybo&F}sY
zWn`2Hcco%k3{wdYRk1e_+ieuJVg)^5TnLv4Bwv0|-^`^<Mr%kxNBUr;S28@7a|Hmv
zH$#vN;HMX9ZH4APAn&XBl@_3+3HCC=scSe3RnL)4n7&*J>)FcvZ|RoZ&=O$zZ0W|W
zrJ(^AMizuI;R^lUrkhuUWatbM(r3NAC)&zCZno}lv@Ta?F)8+sLD=L+gp)Oj-M3AX
zR9R&FRGQ}XlvN_8ZsM$ns|9(`AEUljNDf^ZM6D5($vVlSxCo8&wfAEAzS~xUbe*86
zu9BKBvL>L#%OiAi3XpLEZ9m|l3TdWLYa!Qz`Zix#_cfwAX(T}~tMA8=<#6q@q38SU
zBYzC)?<lL80eS)C9g5Bhsmgl%8lGvz)Ti;@-QU|Tvdk`t;6rsi8^kdJr$e_rxd)?}
z1o(FNJ+4({UFK7eD0fVBm4gqe?%m)^5)7^h06U?>PZQ`M5aO$PJLm}@4k}>U=rNR@
zpz{POMvGE4DDpn@%XX3n52|epQYzo^HC)#-C%za%;H&vE-ncYBi828hD0G@=!@8R)
zatJ=U=TqCtokXzNUd5Lhr@~@37e<tDNv}+Tdib-7AO})f-nVt@Wb;_P7?pp6{EEqU
z=>lCm(y*qIG$UFDno&tnDFke)pCx&8rHILsCn}k4_#O2MKM`AC;*WRQURHAB(dzha
zgR)#Bn(0ohNkFTo#_L3yZ16A>hECk!&#A4BH!W)F;r6!fbJNdNOeL6!6f5?sqzP#K
zYcNo>ZMmv}jXC~_*p{&w{)U8llM2WAfOVOLUPvn|Qf3H1I{;-hCq{1ccTJq&<shas
z{#@nvHcS+=2NtdkNjc=>o`SQkM#^s%Ff$gC)2gF`ahhqq8$I5~F)Bkk*_Mx2G%|nt
z^T(8x&(qWya@N(W7`J3Lsl%s$ddu!DvvbA!19H-`9#0a!m-?RVQFJ|zY!-;wGI-wb
zu;I2ik%646oFQgrE8<r<F*~fg7Y8s3uK13~${;w~)L{SdsWkE=B`EEORPua8@J+j2
ztqx&U`+O5hjCjxIx;lBb?W~Y;yxOCmTEdP%^riKOk*+H-YfRjS^70+_T5C5Cv`o)P
z3oeE<Y+Tq>8K)Ft<)aJR$<gb_fX67qmLCocH95`KQ;2^3_ZOWmx6k2D7qber3eoiH
z>;~N~zu1(&d91FLx|QcH+(Mm8Qf5S!2(^;Mf$W5i<QKekxSHP`LHr+(=}@HEC=5^E
z_6v{k2VmwY7vtowFXHoER?SW?w(V+Puz(jIEglyAR&FZ44&u7_3b3w#^HEGrCJL-l
z@rU51%95JT+oFac>G<dKCV+C948#8}y`3(79%==k;}kjGB|8wC&t`FEA9-Hmc5Zng
zg_87gD+W!OH{}a5A}^5)APpF;Iencu888b#n^nfRj5oUx26OpmwlM<ViE3|x)v4Qv
zamqK0Labt>;myz&DLx%Pc2bT%8WXD+S#*#+b|T;6bXy{pVca``nE@bs7G$DvGJ(@S
zMZ($l?zeZ?z40?ZqW{?i{rker^s+@RgOuQ4T_c!u1KKi~a74WC-?wA}MV6o|i7VM=
zCm@X%3x<&$-E9WVT2Hm|PCz$uT`xqVnO4hq5EO1&U;NFiLci+fK@WJc0w0x90e}lo
zV=8O@*XaZu<VmT`7m&iFcAC>?+hl2MiyR?;yzMFUD~kFStG%uoeXg6(y_X%On50yE
zc5-_8Kh`e}Ak{atzG7+CQ#gI&UUL}eGw9nPmMFl1A|p9^3Z~;2^YDsRT<sgu>1a3t
z)@il13N|;Sr)=4KMb2~DTfH;g)T>la3mcgv7?S1rn^#z6@`ZcE_ho)Zh7owTC2M_D
z8qX!xjt|W6qt&0Mvxh;_0^5Qn^Z`IHSFrg*Mjj!gVrE#l-eSFCi}8`=R0Z?_VhgNW
zcX9t^yVRJ$y1Ml?_&Sr_<RAr_RDzNdQzKP7lRxegH*!LeSU<Qf5Vi`(;711ld0}cF
z+{VlIb0@0%Gt*8YQ*oPb*SsAKtnI(y?W6&82-&BOzdC&u<)GQcQ)C1zuo>{NMJuim
zI;y4WtE2m(nl<&m&Xy<mU`O$@=tu663|fACVJE1ISd+x#SuNcz3MAdFLKr6cR~Acu
zJ4`-tX11Jl0OwIL7FuGbVw3U4=4i|(Qpa#zdf+856DqmaBve+wn58TFYwJg4SB9Bq
z4dG0d5jSFyDdIu(d7I}xBRn?*s~x(l#o5~fiM~@S^DAPf{7J3v`Z46;?ZnpQ*EfZ7
zE#&4L%PTd2GVaF=c4D$ElH3-5vEK%o|8*L6oar&~KY@lIUvg&b2d^Q_{BVaD@)YmY
zs!Em>rK@FxRp;gIlzL9s0{1g?bB{{`X|%=jgn}o4&cfFymZh$n;FAj@U029<&;GZ9
zawM9+$T*=yyV$Xbi!=URu0Bv3Na-(oY2l%P?5{#enCcciiFco4J}bTFOZS~xPw{NW
zMEauT#k?@B6~Wycu6m>tu30KKk`odup7BiI=llaB3zTnEfN9j|eun0A{)4j*2Gmg)
zorSx8^7I@XC9H&7;Yx`y@?e=dpRLlZVrpNm{zOR#-zL}=_~3A=vd-*giLWAdtpjs4
z%B{Yx`giW<X5I;d*`>i&;0|-QworWRXGK{djezS31YYlXLlN<0h3o!}VW{m{?~}qP
z8v%At`is9K8`<ouk3a=)*E-xdfof7H11+`<jnRj=ojd?8PcLHb=}PUZyd82%;>FXR
z8HmJDlG=@Mg8}_3cJmzurCa#?WBn$~QX7kBv+8B)g^2ryZvFov9D+|@cb8k&38vyk
z$(y@}V$yv|YMGtv9N@UIpyouNMCE&j+JZh`@W0jEzyHfiT5pg3t~EIkg1Qbe);?Km
zXAb=z3*!23=`W)>tLP^tMG7}ks+BmE_Qek-GT~aJV6Nn$Z7=ID522CaZ`J97P!%0t
zKJbfw0@5NO%A_k~wt1`zw4mt<krcg-2P-7}9jzM@a4D|bS}o=+s=$;Qk^O3oi}0*8
z0BqmmH~RpiIt6cJsq`2j<S!;|NikhuBapg?2vipUktgt-iwYnAlua&WM(E*319q_^
zXo6KCvb+Zf^Logn-&8wOM%&)@a{af9VmFV1=0hkI1<d#PxM_a)5oujHk^%a`&^xm2
z_cFK1-Nm<7dUC3vOy8`&eh8;K{d-?oRlt@X0D~Xm+Nf=ORUKtU@JPpziC{}IWQL0%
z+X_vL<iwIt{=+WII_A!3Dt_ez`>XzL1_eMkhqp4PR&y6^BCm0aAd<|}l{!_k{P8#O
zP&^U*aj%MA4E0LDZjmL*V<n(z?=xC`pq)iI<LgJ(qGYjn4M&tzk(?rvbWhGRLi>RV
z{xxljaY$F0XeF(Ua+H=bSIOjCkg^?Z_PU%hLlEo2+_ze*h#M~QbvY`fM8WzY8IQrt
zRaD84_lZAr0;&v7%@{b%_U=z#?U(c=!4!$92=}l~zi#PO=!p9Y<gmQYKl1yLF)}=I
zu-OU~K87@~bS1#AU5V>*_AQo`cwKS#L&oz}59h@U7M#g#L*(8cnD`k=($dH*nn#R0
z#~`pS$x#CBMW3N%Iw`wuT)EDCnz_>FVl{oenlPJ*RW4NTt-npbie+%l!*-zXW)wKF
zn!bo#k_k>93jtfS=%SOgtj!I$o~YEgaDrgYyu8^vEGHO|6ok2juRiR4-Y9rQNH24=
zP87K3t`pZDigB$;&gEBcc(FESeow9uO4ksmO>C|&*}1t9XUoo^MpJz3f*kcAZQ*hD
z!j&mjVb$c(&{HJC04>QIo{L;v@c9u$@5aSze@sa|&d^d?W#WVmS1)>`<a<-rIUEt@
zbVGq7`YG#oWT-lLC8IHDE1(u3nCKE!Ad*2zq-;APfHIjAlQ5^RY~bQJF!McL=+uSR
zN&;ge*dDBjd&?b(bia<j-?$;ia;xBTz%b&AGTW**JmR&u^XncihFnXjTkGF>_5v39
zv3qN*K*cgKi=VT>ZXY^0X%v=K#pK`B%&z)oaM)0GLfg2;=>_7L`qoCZywS5&FTzyb
zAP;=tB>^$REOzSN{9OH|I@m~$`hH2hONl#Hp7*T8)p@ZDk_`wYKB#c_MSf}mHQvp5
zQ^ro#vQxN$K)1f^wc<(CK)xLclX5@bH@JC%tgnFH`#HK}k<R(+q>~)gu=7iE+l*((
zMNj_U9IL<0#pihL0j1;C%L=2vuc5Lf_+)uoGv9L-ChlriBQ|?xLn;d5#diJ=!JuNs
z*>-;GpCZi2XW;;Kf9XqQvJJ+g6xj~SMzfSZ7C+_kDUdW=!Iqu;7V_Qwe>2t|d=X~i
z31`vuKY|9fpD&UDaxr&o$i&|j5qfrY6P_CJjFRCzYhtdlTv$~gbu}9`V_3?)(?-U(
z5z0RLwfE}UI6l)6Qcp5hhla&<uFD9HwiJ{R#jc2w9X|+$T7Tr8HAR^*Ru|1v>}|)W
zXAl`#DvQf7<s-=|Ep*59TC@XYE#EKDZ={NrLAtXxAyl;BbW3ajq`|kYlV#}@mBwhJ
z6>2ty>+CD5!=H?SE)+jGpv<Z^<>l#D9iw3~<qt@2n0O-Sv=)z&(|Bar>dP8HpcUJh
z6uKc_iMvD`Q;xNd0vS>mEbHhb2to-qyn;f$MZi*%-6ds{P7GkU_9a$pB~>@uep9V7
zIRAu}sl|RRTBD`#ut4v`ZEEn@tqUvSIC;T}W8&2HVGv9SWp`cpFiR}%nea;>Mm|cI
z(}rrop!--JY;F=?<s4Djt*Hluc*U0G_jW5P|0d9gL)0#d2H>gu;~|>0MD)=VK{%-y
zu>tV<>f8>Bx-yHrHd{`IMzAJwb(3wFMsi{_0Aw5rxDr+6WVtO#*;k2aDhXXBikoCe
zvO$%EO%5;W^B4R6%)$GjoxsFCeSB;aKk^=v5W$F8GBjk>KSbB!DcVvTSNQM*k|^!O
z>;xwg5xw!d-Z8UDWAw(N@dWNglj_)4<2~#p6$*WDd&1_cu2`+7gi@22^gwBB_$zft
zXDqO`-iVzo2`Sh-d`AVKM;4j*zJxI|9j`_=zTu?mX2=K@9L^2K#MmEcE@T~Ljk0Q`
zb!CVSX}dBdj+0jI^1pF?km@el5+;-pxvp7nQn$tt=K92wFKXJcZ?OL)**&2q&gSg2
zir^pbsmr?*W>}Q8@0i7~q-o|ETXe_f>IQ_q@)k~5y}ll}_1;ZkymL73g!y%F7e}=D
zIec}xIYd+FPIs}Zli=5?w$xli|D7%cEvtcaPJ*Q!_1DL8_2%B&0Q_C})CZhBu%kb{
zivK{uur#a{@_vsGXaTGQc(&KwyCz}<xcfdzkmAf(Lfj4^uy@8y1)fl@@z|r#+aVAi
zKFEs8{(mZL12PYM+QQPW_Su~kArlYkxnklLXd5JZ%B>zh{=~DGn~pR7b2PAUp-H+~
zbb2f=cX!&v{1gvQeyF9Tgx@rA?gtWKPDonx_oemy2nQ+@N+Z}5Yj<bkA_FKMK;KM|
zO1dv{GGq;&99vchx~dC;KhJl6<p4m;mmq2Quh@xqoVTMoX+p?}+NSgCNe)hWVRb8G
zz2|;)XfEg7Qp1Gbjw5mmv%Ez+O*8DW&3$$FY<`ie2W~d3Z=XMu00;~k=~jIF^3%)V
zx)JezifJ2Cw53brf<?*dKYiuSi{vGc{35GZ4dW(-Lm(K;D*BUADn*J^(gFvddGS4A
zLnMZK|1H(CJ|}?Cz{<<er;86nA{i&s1~jd|izYC&y=@8e8zxn!dRFwJ#}XrA%bKcB
z3D1>?MxqtnM0`%!j4ZFjluw;5ZH)f^EC2?LsJ4zRn;$Ooz_(c~0Fa-}Ul68?EAfe#
zy`7-ZGNTu1-CHV}c%X1hl(rXrC+amngw69U6%)5*%iTb^i*h2E6$4|&)kkNgI&Pck
zOy7X&!&g8EAfg^+5J~=%5h4>hosrhzbXvD|;d{Y)m+(V|7}TPo#e@9T4CDFlDT5SL
zBDt%<_|2;2!6l)LqPS<bz{Z|epRd*!y&fq$5t5AIOQc|A!vgd*l3F#ei?J?ef$*W5
z=%oWkHl^GiTlE!aY<c_6YZK0l#ObAtqJ4&X;Z`Y&42sLt934OIKQ~;(Tuk|1G|T}Z
zmLtDMAnW?h-w`Kw=9k$`pOJ0~d-XGtUj3Lj5%t>4402YrKpAapvMfe>j-G>^f5@?W
z?^X!5A$<rLXdv%fUuK$tt3Q6wR~d4x{jb{)7^k`;Q_hBOc!5v#bA`LxjNWh2Vv~QS
z0N}J5)uJ>H5mhN8I2O}4G`TAYz29`_B)@|F;evFw)uOKVLk=y%VjmxKn#T*GsFmqo
zYMWioIi19dny!BkyPR3Lkpg8~88rXA+*AtktU%_iK4n_fKC!Q0>vq<d3~UiS3MI5^
zh0}npBc1&@I_uW;1k_~k=xnG#0f^ZY0;HiGTFl*E*BlnIO663(h$~+>RAD*%KJP?A
zz%c^98LeHx@aKcRrmCts6dSO=x{Eocijo_}^`|%Feh0#T!jAhMqc`WpWnKPLGm!+8
zU!x2PXon~17Ju<LTa;3RO)Wg`>=bhw#BY`b9Mf<7Js(@}0mG-J4u6e7)-kWLd|sLX
z%Ns19QyxuMZNXncYX?wrCF1yQryIrV^IAkY`d|E}BuCHe)UnI=VFL>$4w7o61mznv
z0^cmQ_*U}W>LX+3-kYYY!TWa41=s9(Cx}#5J!1|&wIz_NDEpvqchWY+yHE8A?ciQ@
zA%n*2goY8*Von3S*Q(JQs79rxD=RPWIhKn1i}jeeI1A<iGKib9%|OR+POvUf%ibhg
z!_40!Wm+3B=LLSLD=`5$xEc187p(Q7-1sN=9DVO|e=nX1!@7?gfO2+_4&vIw(=&@q
zz^X4a%S+^F#>j8dm?&D2K`UfJl}cgJAij&QE_S9|z?9>IuZu*cyd!l7?;WW`ng9*-
zsKifJM*fztudN*B(Htv@v@HcohF?c9Z|RNNaBDQ8EsY8S>LANBS}eaiyTzi|E)yGt
z_g{|K&hJ&-92ViCn~a7Ohn?&Qc{$Q;t3FP3-EO15i6ulZ3YJJNP##n8O9Qum^s&G>
zrZMD13qcyxx~0z^UqBKC@^Up`?5s0FV-~sNYe$s*kKCEb^m)`3TEb=@b%<N093D{C
z+J<s+S=GyA@;vF8)u~Zqj&=&Hs*fXsOgz>|O?qw${gR^ZoUaqmw?hEOjGL_b=ENF9
z@DD#(vO99{7o+c1eFSU^05B4n&e*Jt6E0}h{Vspd!ijVXxd^h0lY>2Ki^jJE0*y#{
zoI&5o2K2xCg|xtHJ<$d$=aa=DNJ*sYB|J<pCCU$}5T2sUgAeyxm4Bx~CW}gYXHz-H
zL^ecF9ejpMt&Fe3`kb}LMxX<0f-V#Uopmx-w?AU59r26=Cl<tfW>t7{-)N-;UGd5B
zMDF78G4p&D#Ak{8g8xhooI_J+F`K+0|LrC=Sr>7xW8`-%%~a({B2xT9S-hSWsUBI3
zWSGmMaGtvwCRmY^G@DtdQ-|6CkV@5>E*IdNt@qAWeT><zDWcB?ia`LPjOC2i-F5#=
z@1iVg)EhM5C{Zwz0C*<kb0YYJp{c_63VRb%8?D=FeDtgnPWxs(;*UWFeanK|XUPd*
z<L1x*Ijb&s_<UDuizrZ9zAvH%A0fqkL+&oB-41(O)u<xkH}G!|vO3q*1E&FAAb4GZ
z!WL6UlyetGud={l_nnxY@Kp3_Sei|n)Nu|$$xSB^KjTQZuf84xGiHyoL@z+?C(U`8
z=Bt0}{OElE#5(l97?<wh+9Kryn-fypG$S%(leIy@F_P`N=;T+>S~32qAC+=OB0#rX
z<IkRRoas8DO8W{Y+`U=cL8N+6d|rR<`LFrvCY?)ZN@;z~CBo-Lgmox9vn;`$`Q;@S
zWcc<t3J6z=EPS%GP-%E`-hSCUzICK<x6Qmg>~{QlQ!zH-mH_TKsXf3yc<=UzDz4@y
zl9Dg}Kfc~Ns;%zZ_fDW#p;&P*+M>ma)8fTxaR?NL6n77$MT&dz;!bdiL!r34YjAgm
zclSBxzT=+r{Kow!V`PwQcIIAdt~J-3^Yc|NnF@S?8J{xyaXBo=A=+HwEU_7#O|R+9
z3j%Msnr%^v=uiq&Cj&O;hY#y53^H+h9v<Ex`}7dm;tfG{`0h@_dZ>8!dGe$Qm6Nl+
z?cfwl)ArYd*c3Lf<(@Vxwi_kg2!fzFaoUk4i{6{Df7&BJ)<!7WUp11Rnk63hUcC#&
znBwBn4~bn9M0I)<xB}O^^ai$+3a*Rp=FK&CXkK<<{&*jNL0=A}sn>GfV~L(`R&h-W
zW&s_BTCE|UdN2@;udPTkO-ev9q53CV!uT^N`9_l5)B0%nxG0_Z@aP~35E5y|ZI7Hb
z<SCCQBLy?6z%?T=u#3<j<S|6obwSs2VDkrBig$Juh0rn+@65E5H{DC^Rb=&JrKCL@
zvZLs_@h14zg4zvJKxknCN+B0cW+8E#m+Ou|)P0jZOZ?~66C(Sk0uwoh0&j1EPO-aX
zT9L5@NNG4s)C`dP-pH4-2?qMC6x+|f_XQKHM7^!(Q<Y4UQrf0I346MXqDRM)X#gfn
zseN~o_&HcFTSne}-8CIpK?^T6S{$GFb!7^UOQjx1N(6CaI{s7Sli0AuU136nqIIpi
z6v=sS2?&GZiYE2Jv_yL_N7D^%M!)eDG-uoDnNvxcT#_$cNgrT3rk|eC)eZCaf}1r9
z8l8|r3k(R0kGKk1cR8G2T^2S#<2F6boj6-DeM5=&&sX2yZgY4v##$;A1Rg(eyAUF8
z^I9I>FiLmQ2uw>MXND1rMsnYD>uvwkJrha0$!7X~$npInb#Qa0{8j}Qe8gVefwEPe
zI!beD6uQxx{&1GJ8Pn=XMJdT1o5TLcm+%~ig4;C<$?Y1lF@+Q$pqW1%(96*G2ldF)
z76ey=xTd#ip1w*1YGH{jI^(W02tNW%+{;F>Bb3VwR#Mr~%E2YCYD;CurJc1icS}FE
z_OZL*U-k9y`sf+UDRD0Wou)^UZtAz44j*E&Q`veB(~uiZ!xPAnRN|H&nx@x}_GSV`
zWP@j~Ro`6%A|EB;dhgrv5P;#I+R3ilO21!~E)J(aH&8&AhLBa}!<nODLf&Vre~Zvo
z$6xcn(6DqrV!248wf8b1FS-YyWqsppm%X60Z)89?i{#<h#|sLI4sfngF#T*mhcl(Q
z(aN}SPWA#}=ZYO?Qk*tQBgh5ICmakbc|VI%JXZ4!FKYOo1p`<|9PTr4NXKtTU$;du
z3Sn=4FCRQc6OW|B##Dj5?G3UCKVp_A>p`Dc`OG!Rb`6#KN*ow}3TGea*fz`$L4cM?
zIlcksHl*ehQrOH#19>i_Ar#^xcvr1;1>tcg{qpy~hL2bqoEC#@a^M;%<h?y?iw+m?
zH<inBbPDWdvwhgcx!jTe3DW-<c7#;u`1CyD<!^KL7r#UF#>`EY9LGy=WhULg1a1(p
zYVV;aP+qqZc<mRS?Yo}3IzC!-WhDXo=dk(at0*!y$)i(*qZ6#IY|Eb(+Nyq<=N>ku
zpQ$935Oh+wBX-Kt`a4?6Lx$8TzY5gr>N|q-a3KFxvmm6d%DsT}UQL{7Nhk|A)kdH%
zn_V-wGk!P|nfXI5+1Zn@Ip*!dFN%4j4iR*^xJyg>I~0WmD6C35m?}16iU}8_QA6&(
zUjEH@qfUdhH=fbN<=<_H5-wmJon(G{a7rbX5D7b?odeNF8KH~=U#?@^6`wuH{5k8o
zgDsmk*InU4XvMp1st1lb?wtP)ob$Bp7rpB-AYmMRv$XxFd)bowu+j7Q!&T06HH|vE
z;CZgA$3jlZ9`;dm_RTF`fm3@XIrp+UR#%#+Ee#m1SRShS@Y5U;iVhFzE{N7gq7J3R
zSZ}IeElLy((%+@uLRD)l--yF<`jrdEgT!O_To(Dpxn@*RRK3r+^}V?D?Ztyc=gMD%
zF-p_k%z&|l3HnAPTjcUvfUd_ggNI|Wb%rq0TH&eQa|Y6u)GLIP72{BO|1*w<+lYt5
zl%PhBu;wP93iM1IF~uxIHi-vO$L4KL7j~wl452Xa^#F=OJ3GNQ?RCr|58bt65|=(N
zHUq~3Er1BC&zo{0l^{<kEuQGx=XqlHWvYflmI<qit=rk@;}J8w-PN%TkUG-hV4?tr
zZ6q$Y;d!1-%g_%p+gjtzkzEO;eM2ib6Gh}cKOoTrRGFB-;?Uzl@B(ql#_>A&VQtA=
zAH$56abKXaA}3_@ec~eKG;HWwF%>{vt08f4%B=nUdszS$dcwT?2ls?R>7_*ddz7-Z
zUmkQb|7WV0-}ecas2GGw_Sjtk=a<F^<kwU{(C|5w`+E<%z)Ki$7TL>XQt_A4JlA;Z
zQW}jEpSHLWQgZh7-HctK!me@cm|B>6gqD*EJ1?I4eU27dmd#iML1tH%e?&SD`T<3m
z7|UJ`ZlV0vtV)XZc7^Hx9WZGIe_g544}H4id);TS5yWzm-O|^I)(hg>l8@3BN0qnm
zmO*sCwFNWw1yK2n88r2*Fj&1?VhL<4lz-vyzGiD=l_Y+t*W4Dw!3Fm^Df%oE^~!qv
z3MpjUFp9hro8~vyr)33}d>}gVhJ<~sBT+sg-~dD1bRpy2@>eQbyz5cCTyl@v-_c`F
zC|@pXw{qV6l>GjxPvk5Douj@4gxZ^NTi?4Pl@10?Bi+=#ccK&7f4The+;xcq)$LWx
zgSzHTwZL};(jD|O<_aa$iS*);%U1Q))0|--h?C^6oI2xu&<j1%CnyjlS~opF{xPDN
zxfSYeO!-(O(5PqraOUvsVOI{D!x8R&llXKQ$iSV*5q+ne(z88LsF|^HO7S41B}RPI
zWsk2~tX3Cb_9%(XDFN}*H~=9c^3lofiN=wqg>?T_vIT52=Uo2ihIfmdHJJMn_UumS
zw^D{b-n$CN5<xt@mA1UwB93JSSI#%m$BJzE9o#7EJ18KvUHHvi)VE4WVxFIrEFj(x
z&H$gY-IlOBdEexi$@KgD<4Nn2j&2lA^G|z6SF$&wn=NUC{KL40=W6swXohvv`a<S!
z5eGW)r#xW#<Q{Qh`yDq#r%w9YD6_QgrRtpxp;Pwnr)!BoVHp=W`xVX*n`2cK-p?B&
zgvVTSk>6?p=6YtsV|bwP_F>)$FD`5<V%;x97?L?CDy-{r7%JJnnefM_;bVDM`s}qA
z;>g3iT{pewo2H8;g^<}i%Jc3&Pl?Y_gOGo$dwNDmJ{p-$wOocG`{NyD_K|dAY2smr
zk_X^#hC~g#S&bbt#Uht?XxugiygjK_sHSa!fD_iIa5{;gw@<J>nOrZB%MXJ6sbBy3
zaZ(J-69JX<)nDoYeTEv061^jTr^zyEBS~F~2zIRnYQXEwKI{)L@G|oZ829y8KM51C
zmTIVTIQ|-uoivfa50j8$B=??}7BC8k&GuIhi?*v`Fgqy4VNw{L_{IXp?x4}??+{iF
zYUQG0ugQ+eD19h34J9|Hh+FMPQVx9~oG<t!ZTnjM^^}G$%lX#8W*oZPin22kmoVZp
za+4&_2=5KP8;&6ep=-1wc(O&4E?$O|G^%+ckBG342xmkxiIQ30f@UkT6&wp+j(9ui
za=WMbZ0zk^n(aJW{&W1nU=8J`DhkxE*opn8q;5~Mc>|Fc)l<7%LZ=*{Bbw+4#Dg-r
z%ONQWJKazg&Nbf>UG@{Dg(9M`z!cj_;Xi!0F)Ad{MgrrLl0vq5B`>$yqwVJ9kv%%z
z1{UH7WO;VG#&uV25;UpZmw2_1Ea!NgXZKY}cqau9A|qL4?QR>N<Ui}gfjz4E1+fqw
zac!1Y_FLb;7HN!6o>t6-x}P$oN-FhNB0yJ92y{tCN^X8Osu<NKlKUMv#i3i(P%fy@
zM)zbjOQRfRis`TY$riO?Y$+huK1~%SrcD+>Y3z<PFUqP@S?GSQ&F)z4Q9%gnp7lo)
z7cng7oP1gchHKby_L4BerWUn4YTV}n&Q8VduDC}OF6XThI*0y57sd%hdBr(Dx$aNA
zJhkx?XTVdX^-wXOYupoj<vSV;$|RDEK4k78c3}iP6=LdLF~vv~{JH(X46&Y-9>NfX
z^QY8hYkB3Kv<zRLz9JuH%x!Eg-XQLC+b1T=&#s;3x(cNl_q;gljS_4LTDU`G7pj>H
zX+mDXh^gLhMHtY@bPUS3lgXhM-B~`cM>Tcav>cca4+jFbkj{n;a`2Gk&H$DGpX)Q_
zF^+eO5z<EYJGt1f4=0x;T2?dqbKUw;O$4WJpRk(?sJdS7(U-zUOTdv2w=Gv<4&+@Z
zTk0Qf?F`G1Afc$zf<NCQo~@<YGpk|!YW-m}{F)I&h(#!kjvKPJxu0DdNWmQN!_HG0
zx6Xw_qR%-Lx6?itcMZh#wGgJMX`AXf+sC`i`wI*=YUKLKW{n`>43hfJ*&z^s_+mV$
zvPr}BnRF}Dsv8e^k_)p!N1Xl?UAxj`fZSA?b2Hts6^~7oSiQ9f9$?2=;fVw^792}%
zNSWG6rf?I1Y!=@YK__fzc2m^Wa4ddj>|>#CZ~w4ch(mQFT#V%AdWU^PwFJg$MPJ%}
z>AmJEs3Nw^zlk?2E@n@$&ExQdezjwpnC3~MR0`|5-APC>VQXI{``>sId?=}C2k~S0
z!#U0_n8-T1GAo}4EwV?3y>8Zdt4X#jMNKj$PD6u4`kHuDdqXtv!R}e=$~R?jFzBNb
ze%W^_dME=Lu?mdpNQkDLBIGQ~htc*%MNAXS@v}8&7>KIRX%9{0^tX=8Mjr$NHMup(
ze3PdN8+b1Geq&xqgvUythFWu}h)dqcE&X`hVs#-G;F@xacaKO#p()&vp88=BXRO4v
z>GV~>GroO33<Sv}-d4Um`+MV-9CkxLI48GQt%1XlJ+SdR$}kLT9vhgeehKQ9braBF
zP)o79dXs_V1}>;MJdl073VBRi)VZ8RDQSA)!rk9@N$c<)JA+x9&+VpZY&);zvFmJ8
zGhHsT;XVF!GZG{oeGyOS5{wS}tX{FU^q@s_IVW~cD{{SQu(@8i?iwY)V%sRPP`;Xm
zH7wvu-x_KldLMHJ<eeqi3-mX4&1&DPa{Jz=K8h?54Ur0D`k5qDC_IVJX{tUrKhvv%
zUOsd>WSra*Q(fsm27ehI{N^!LGY%e%Lvl-fS_XyEpHdTv6T{xW^Y&h#v|egrqeYv_
zU3xg)6qqgYV6)q94x*{*X|DpYjfjIF$|8?*X9&lZ_YD^ZSOS);VRbh<()8a2y)RjO
z<4(Uv#SI3n=5<5`_t7KMFW~N1ed_1~gER~9R?eHWkQ&|$q)uEbIZy2F9{L9&`vZ`V
z7vU-Sq=V7^2h6r(jXiXEi)7q(qy#4M{vB_kCBERTQe;V(V7I6G1IJY)*Qux7TO5J>
zi@eK(7*h#@itRF9d=**nXwSQ&;PG-Fna0M%L=D!690yL0>hCaxP-khLo&9L(imWAY
z7A*nEMhYD&tH8=x6z^0dZ@Nj~i$SeT$!M9&;Mj^P|3=zNuJQW=8hEeSOO`+{Y@TJ5
zU&ylsbeoyu{`2Gpv-6}s{`ei&=r>5cvzW^nj(h4Bg}00y={FY8Ep7j!zb+-4mQGwc
z3hbt=aR;=)9G=mkMS3~ZbTf!!SZJJOIZ$jlfFMJ{rwZX#bh<mTH59X|ooV*!v;$i<
zs<PtZtqLq#?~xnN#1@c#JSiKE0-E4^$Vf-1uax=vt8dz;(Tb5Id%o`ugvCoCX?eRw
z?8d5^C@x)xvD<?<Q1OpOAs2r2mbF=l{r52LDE?W!69rOTM5w;FD95+badfy*pnKhB
ztAV$8UKD>tuCJb^6JC?Fw4_6l?h%!&i4Co-xQ-*fHg{l>ZMX5OtZDBXC{Tc2gX;N~
zha6XVVPb;h-E3*vhR0HMTL{NK3c;HE|0z_@5^9CE&F_vTP~CZitC5kzTGba=r7AvR
z*uAzw<m281`0+#nxVZ>nEzirtLD*DLkwL$E`AeCOt7g9VeG$8<c7el*4*QtVGF&}F
zV$gd?u9)!U?wJ|LG(OP#OqEWu0w@(2Zs%&7^Mmj&kTz&aTbN4XYg5%4E6eP`E|okS
z_o3UVx#(o#Gybk3NpCC2OQEbEs#uS6w4~9*wSkT-r#ro~#JBt|XTRpf#4EJ9%{JGK
zXgxqKE@WQb=Y8Azzhn@)!8)f65ALhwhZ_qtc?wBMhwXVT!2YqQ2YR7YrTA6vMFV)&
zaHVZ}-9gUFs%VK#dtjf+rf5@jyQ61q``grGY=YN~=gHSsavupuCpS&p-1I!1yBjQC
z%agHT=u`LIFMdxYcRehE1!i3B<zL$gpC*wyI#BVQlLGB%=!KNK@6uePp6I;jb^B8>
zhxFC+^`=Lq`xh6r5pxODC9&sEZ|=vokIMaL+{%SDoIb6D>A&}V+%#Z-C6%j$euw4`
zVT)hXRC&#mZ080sQ;6}!vxPR}D)ixnauTiQdUB+FdV(~+M->d`)u+NfBVPW~eKDB^
zHeNNKm#v>q)~_WQrmcMwnBr(VK~fT`Ge{vaIBb~DRYt1ViVXxaJ?<TL4lNEOFL$!A
zq<=t3_SZc+G5!0=-*g7wIM8x@Be6}<wLaEUwUAF>A3#-6#!5GX6p{yKvkKJ3)~g@>
zF|f6e3AN>D4e|Tj#W;wHgcZr_MU?8yNh^b0@f3(=SdFV;Z=K9Jn|u6gt1;=K141K(
zT4FTAvuekC@zk?Ik;b_^Cc5%Yv0MUc=R-fKvN0H~8adlMq_Q*C?y%R!)X=Q?Va1T1
zOYY?OtkcAZym02gn4G8%g{RHW&G7zZz_eUhg@Q)#%1(ikZn2iovPu`e^s!AK&fp4C
zc!7gJi(>Ey%aWb!=KR@LSt#GV#ajWVjsw#>a^yvZ)@c&pr1rd}TN4k3d+$TtU)eY|
zd7RcJph@|7c~DW>eu&x-mIWE2H5G+9xt3FoPrZ$geJfpE%bLK#HJ4oP>|!m11Tozv
zuA{@e0tyj0r$5j>M`Y89tNtV|OTJUTg%z)eXydI|+Gvy1KWi1=+-6Y~pzu1)a(`zK
zoyX-%1R6LuX?N$^rNP;lm46|qc*aI)UV0!uGi%cxgrA6f#D!C2Pz0L**fi5t4w&(>
zDvkjH<BcQF$-fB;bO$qxBfie>aGX-pl4GyGB0iEBY!rX7BugDd&4-hC&Y$`gRbOJT
z`;|Lwpvery{-2m}Fya^dH2P*N>nxGjU?)P5r9tx7Xv<Ck_N=7>%|7b|1Eq!rz#DpK
z9zTwx#(xBIJu4jyJ}y9Eybm~+!2C^aF?+fhQ;mBioflu`x8A|8$QW*Ttr9ZWx#@Qo
zhqObZjw}7t-~DD@AAyM1x|9`M=N(+@1@NmwI>4X3D8ATUHdRL@TP|#%TBtnHmbiWD
z7F@wuH}5e<xqacbF%L3gRQwUEgo=JN7{Kpv*54LHk8GxHc|EFLj<tUqg}E~(`(ha=
zrws$?q<I|hW00r@wIRn=IjO}?0UWS(K^9L}5DiD;@n@YDck7qYpyNTXgm@~(8l&{t
zkimwjZ95VHmxXEr2tp}ToBepa_L!mp_odquXYuBHf!{e4{8B)OaghY${+#*&%-i*3
zi_2&J3RLs^HP-7Rrk49aiUKKVsa|kV_iHMpU?@;C^JPoSaD^Od?3w|JSL$p6RVirl
zhW?`VxnIiW5IJ%KB`+$4_KE=|WGG)_pz?zy8x+<6Vrx(wzJLdmugh0izUO<x=3S*g
z)ZHNJut+In&+5ItVw)WYHkt|MW$y(owcM@9Y;OWJHFRRrfnmbj;^M+h<`drKyQ`aH
zcUq-F##VIWO>L1{qXc&XUS}$^b*`SDAIkWZ4W%MLgwT3niY;JXa(5kl`pg|pI+|i@
zd+PDNlS4v=N5cMqgoNTvfD&gKiFhbu089H9V+h5op%X7`2Bx@AT`EWl!!cMKFl6(v
z7i?C)D^oPnf;cz-I)h$Q1u!uTMO<JI6ZybsykFj##a5bww>S4@4;Z8*DU0(VDR14{
zEuViIe;!!Z{~SxBlef<F7fS@PxX;rd(AMfpLeLky1K{MC_!mtQQg<(y7FvodPJ+C%
zPPWdSLfW?8Xg^BKrSyilw;GG&=o<*FGlf$veuGRoMHG$cS00QQQkZw_z##p1-pfa9
z=}J-|OjdrK$DR>tuc?giQm{Ixo%uU#y%v<KqmbZI1EIID`1@~&$_Gi7fYwsXjggcV
z%vmF)mN5jFkau?Pa&Yxk<6eX_&cqpqdVR!zAN7mOYNdQU-@GCvhrMwonvkm5vTq?I
zuhM}SG}n?Z|M4Sw<?o7e#0(1iJK1rtL0{`C8_zOgwgiQ96VCL(d7-Bp?ihB`wm-yr
ziUjKnmbN*(l|)744PtCJDK-ST++Ue!=jx?8QM6`rm{yV_p0MFTau$2Jm}<WOP&8We
z4HfUue$ow<Q|U@pr_MaCz>3Q5_>*q(x>J64_T`rXe1kKZpGmp8Argo#FQ}4hi~Em3
zyKp@sp=cj^^Rx1ki7B-<d7zSIu5ydlc*r$-exsr%x>-ZUF<+2`4nakVx&96LI<sq=
zXS1-zviS=C0iZO>8$!+}fqc*4em@8#>H4feFto|>w@y=wSBvHGNzk2Eoa9WbsXj2-
z3j(`SH-BFf<C)e9;4yxa#-dJ)aUV+YQG_{!$!UC@@}s*o4qj=tyNh^2<4j9VY^rie
zc+@+D1sTA`HN6O}b2slE$&xm=Lme(-i%tvqjeq<Ngy9nLL`URd%hjPO-kc6kx(lfc
zPyg)J+&8g}0~9VurqWtefG5Ju-%2K)Re{J8q!RB8Z<-s;Xh*AX=n)d`JfD&>I!{h0
zmOV-8;muVJ!M7rAg=)fHfmq}<{Zbg<q_C$JK-*`9N?E9vs%J>)vp?jj2CZF}$YnPp
z@CUxWAO^3SPVeW)u^sII%F3)Pq~8~}XL%^aT`d0V!PB1>1_#_vpKn(t;+@m~mdEC3
z<WTy%QHCi->9=@Z5O0UM(l(Nmxnm>#U`DB<#4<-|QKPz{oJHf<_`<xg1`eNGxdX&Y
zhq;NR(g+3*1^iq55ox7T>@+<gAqNS`Cv<gmzI2%j)PcgY`vmYXp|zfatj?qb(tSOh
zvv+2Y`z4se&lV6zxNz2wPp##jc<h%+5}O!0vHg**R6?my2}pV4;|4w%sW_P(xiudj
z3}krN{{nC@lT8Q4lH6(}oIAx7ooP3MzOOpAkZoR1Zlf#Z-K+-Q7=$Ld7uf6++epFn
z{u>6T3AQ_9F_K(kTZ@*M{4mPDq3rO^r6)y{PRJx|ELY(^@DZkR$8nmy`BFlpH`%H}
zQbWIM87=bH(zOviH)2B5UBo?kQQLD|S0oN|S%r_;L5-5QGsga7=ZA8rAWN->()~ot
z-fDYJFQh@rEegep?Zl7&&-DiEJfJ(+XV{=K)j=R+kj_D#>PTnCB=_k<tmv9aK}0jX
z<AH1HgFQ9ch&$H`m3KFojyU1nj*dxpW!STNg6`Zwb*}iTkzcJ6YktLrEToypJ$V<S
zbvp-#R-Q%c=j)yT+G2xsP`G)8R5Z#jbIzmBA4zK@E_@WtO@Z+!P2uH|*A$kDJz~L_
z{R7iI97kVsCnwyb-)o)UTaL&JVr77|)1R^P7ILFjBS0;lalfO9P^7HRAOt`?38E-x
z%Xmh*!{?o!lt0J*7V?^qal*eBKZun}1NvHjL+@oKV<QS3^SQQIJ#xBRxV9y4CMkA+
zGIOyw97)IgqRlfvH={gvv6JdPRFGwkd%Kb=uzvDtSScI3lQ1<u)v3G&QplEw3BLpC
z!3oXudZ!LR@Wt4^jOyo^7Iby_!{W#g0Wz!G+_Mwip&WC_owuOF-I05HW>Jk+t^g||
zG7MzO))M0v1f*qyUp^N&x0h6p>n<!!_f-$as%T%@2MY?{)Nz>8<XqoSHV8Qw-Sgs&
zRGM~esPIJ*BVvY14Q!j?ch-hFy)WG#i4PyGk|;sij!sIz5_*esps3t*G^a&GrpqeB
z&VKL1S=gHg-H)sT=**<uqsmPgNO#kbhS#IIV@-JbPGhT>OP#<{D7F2a>~8&on9@+!
zsC1OBJL#vFXKDDjJ7@-vyOANcT+1kp@5I@ozWD~_|E`^CNqhUpC_AA7{Dm=X1dO}-
zqV<=@v)26psXhnxhM_LC1=8}7cYhnb0TPpb+T^%$69M*X_BngGwVbND=F1cNp8&41
zudCpuC!yC5U=*=eH=W-DAK!oKrcY%vq1^Nl-~><QI2_I2OJE$~FE|KiHnL7c!+iQK
z!iW)kJE5kuDrO4FiEjnP2{$1KtR0qR2J_MLQ(M`Fi~S(U8(ksK&!P!*I7Zv^DbUg|
z^b9nI1E8X%bO=vofIk>AS8lGWB#E;%LkN2UTQfqCo@n;8R3Yk31!~6%wQ>brLM8W!
zHw*xO)u%QbraQHn`Xt@+d|Ru+jR%>1;TQlKfCYT<<S!5^b2ZRD_p0WG+o4CIyA)hi
z!yAR{`Tg4YxGb`~j*4#PznhGsCtf-=^=4~xU{Eu@Jcg^}*QFjzSe{iA`xTXSB3_hT
zyb02~9!d8#rl)&aM-#bdP(JC=c`eabNu`nu%uL9>o2~k`ii6S}M&b0rm%vGJg_e#7
z!0*YvJ@ld%+x@aR<%>lEU~{3ZS|VH2K!Vf1IV9jC3bYj}>%95XM&X&;vz-G{t~g*p
zc`+7eJremBtjr&b(4utDK}dLb-Y0vrpI@xIn&xS*Ixj!1SX+swJj~Tx@_7{v74v*M
z<AUb3*9_l4$L;$qh^g$gUa~o+?0c!aJv@RekPwZ;DpuL=ppNMB06v5;StBN(@U<A5
z8_9LXYctM!Cy)R_rk1kc?b4%9ST~RNX8Te3k}Z_M?v&2Hb}KfI&H=rQUKW*xhg}>-
zEqZJ_nhHk$DAzI3K)E|cZQ#YVIaT<;Xg<2x-nK+xoj~1x%5ZAK%3n!Pe(WXJD5bqJ
zgX}7rLL}WWoDaef#KhF#m%kLG-9be!e}zAyOJ-R|iTm4@p&k|Yg_R<?Ojwnktruj&
zb(hUGR|=dDV8VauESxUI)d`xwSU=C!9N)Pc9O${*-fRGP^IU1k;a{L_T-cfkh%SEY
ze(&-z){%dmdbOq8xO3yq6hB3%R|LqeyM%jjB7UEYvCYwT$yU8xm>^be#v6+H+MIZ#
z1}WhMYl+<dK6DUemK(*yIkP7iTXuwbi&My79E8t*z}(PJ0E-K0>Xg<xZ*EY$V2st^
zNo%yB_N7&ISt}qN2LwjL5mQ;*c9kY86+t`SO&g<J!zlC#r#^1)FR#QzUFowI`Ii?H
zI5RcSVjeFX&kAv*Cb(Yqa0U?H*m|Mni0V`241r<se9Z(6%r@aZLL_}oQcc_Gzn`xY
zqy>qNr>UiPQ9o#ee;ljXc|#9}O|Yrv3jPJ<r#Y{tG<v&*Yd({XtLU)_zx&S60c#_t
zT|LbOp=zRRnfiZCV#fi--0sPd_iNE=)J9ZeIM#w7kSiG8pKF_}_%CKN&p*uON&_@#
z5s?3s5}|9WdYNDyh2BU9iftY}$BgfA=rpyQJQLV_`x2vgy?A!KoYNn3qCzUZxN-X;
z<>frPd#ax>C?}ykn0SHy5TA@xKA%zQWLFBPO`}|+e`=fCDE|pjhQ#Oe<R=&uv!{>b
z@RJyZ6!f!nYQP}nEw0?aI<LoHF7ct?^fu!ONu03kW!FJCD4ZE+6kMoVT|5ip@Zp$5
zZArkEB#3`m-_(ZI`ZdQOKCH*rBsk&8&6Kn#{T=9OPt+3=OGcV-37=A9rU>c9@}{~p
zA>@=(tSD<3?|Kn`na%spG|Qx*Qf)BvtQV-|y-(SOdAB)=Bps&b7c}+g$DLA8DB?3x
zERFomk%v6Yu9fJH<w<``14a;2x#;Vh#O_6)TYYR0q;{mYWKrKubAH}fAzb6Z5sB9A
zdbQOS^mF$OQ-f|r3Ml*tCS1_oA#1{+dS9_?`(7U2@TxD|%jV#Zgmrw^vo}!p<?T0Q
zb!B9I6sOTmpl3|s=_%mklxb0yj;hl<`n{_a?E!Db@`t%7<2^%3DN?k2p&1lCvcOK7
z;T<odyI;x>PD4uVwq)j)Qj9Pi6UF4vTIt_c79T)=-1j7@d&<{E8@?4*)<gT|wWm6j
z!l%~t36f2fXWTLj<TE`Td=b+tjd-w^WokoeHTFD=txDqT%bq^nX<;BnlxZpUzmZQq
z7~a=@*>*J!jF8YKfa(qStG`rl-M>`tvh(iYVr9Tz4fs$NmjDS1qVv!cvFM-jp*}pB
zW;gFM`EwP6pTMK;l0Ssgm!Q&u_&`t9D=-&}LD*!V-XB9C)KU=w?8YbS)K4NEYv_Y9
z?cQF;thrO{9Hdx?w?|Evs5;p6mBYAO@nL~q*T(V&Wx0`YdwZ(d>(Ju&rpKb%=mwi*
z2}j=I`zm9?3f}`g87`eM#295y0A*h-MvP*lPAqEFD&(IEeZl+He=3vS#_XIXwS-t8
z{oEHRW2(hVmxpk`W-VwG=|5d!;o0B(xjsnC5bm4q_V-dyN5Xx7CCUtnsn~nQ;l~Dw
zoL9zkS4RgKbt$#>W`lV8{yGyA<(8ny6JcQ)x-Xk+na!;vCnJQGaQf|A95lOXTg?M8
z)556<O@p{LO3+frbjI@|wCw0E1*hkNlv8QlTn=xTw9$g<se?X5;}?dc5+4t-M<S$_
z!l>L|9F6PA2+zCPxuR+h`M+D}wozIp30_>7n*MY))@WoxaTvzwe27Ic*ogTMg>0<&
zAZQ9c5*9NeUu*8JBjlp_0<eN5Tga3LU8Qo;{mgGA;v-OoynGM)w^Le2yfypqT$K($
znelErzH9xt#4p?ydLf!ar9-s=f4SylqS)WmfT#QN%;>f%1GRBB4?f$J3;f|gWSZ(6
z5U#k`%F9se`@1SBJH!f9rAvy^sM2`n6t!nqOV)dl?Pu<(`8a-YZVlO8A9$Av=G-w&
z)OOimA?&-{xNSfSo<FR+=5A&p4af|(hf*Bxxi#nbHq#AR`atx^qBzr0NIih`z-VVU
zRl-~LbBm*_-A&g{f4y?0hrV?w0y2<d%eI)c#4Pcn%<XFT{#~r{f=Jd2G}Vo|dgdIJ
zgC!6zQccjwDYAp-U79;ZE2Q#_CvE>m*)%hDvyz#7z<WM2?^9hw;pN8`{;QeDrBT}n
zhrvrnubv7b7*642OIugKUcyOIU#t9Ote`%j*TCc8afVLbNz)6*XEP-y>t7t0FZt6H
zHOTKc)~`COVQQ|%IpZ^%->h#wvO8$2YHdewJ&YF|b?^>+WV;nk-wt(LE6{@rT;YG?
zy((E6I_~8KZZ}rd_u{WNF7mya4bK6zJ%lcFZYS#iQ`a8OmTUl~wh@_3I|pbE7kjlX
zCC&ghA3F3b%H#6MQAKf4B}0P5R}^P%E9`L!i|5!W?uQCHTD9EIZrvnx%Dto(Me7s`
zA)1v^6c(_ZbOc-LRIzr9bSQQF21jagK*ZME#bT=ZE-)Bhn9n)#?DrC~=r)VEnhzBZ
zJyXIaaGxvt<ULzu`XRoW)RAL;eq9aP>^OE%Wjoh4Y{@eA1qGA6`q#|^-@15IwQ*N?
z&ctD{5;e~4Yc?%DjxaLrLQ^(D=R2p_8XrwEF{^hv&0g+g{H0NSHKsWEm}F-ZFC9>i
zbSgJedF(r{czkE(<0o&An&}FR@55!CD`^rXp!E&{Du^(pxjJ+6t*Sc9o&KKt!AQ*|
zZ}$7WKP~c0jl1wsoWsYZo4dxMOz;FO!Ul7;{&C@qU-_YnLhiUjL=4cq()(3hI+wgl
zeH-_8IK%f!FyVhSrM^+PJ)R|2Iq!#q8UymwSu~}Ts^#j=1b0fmDNrG#I7L_|h*qj?
z7V3SF8p8uqctIQvjA%w|#{PP*ZwfpzQ+nn)UHNnWFZ~?&nxRhJ$%odW_*$Qx;kSCM
z3(||>R3g!n#rn@-Q!_r`MgZ1JNem-)Cl_-0Tr!7Ru5czZ(MwV9dYD%ASEL8rh`s-;
zm1ScXy6OGYZ9=d_%){|0L3=|*(0Xc7A4pnWHGH<1ECYlj%vvT(3I$#h2!M`eE6jB3
zZ?aIAc};s`=lf?P$-Xx&xF?e+yJP{fM)SWo!%|)g>wC7R5Xrbv4mt37pM+M?E-FQk
z@fOaRZl_LFi3$<Cq2XX~pKEmgurs|F1%_`s>NI>fta&ChmR54h9n@mC@*7KhT+sTZ
ztn%S3D2N6sgLI_R@=5>3<f_Z^tt7mL>-R3A{6ofE%_cfry+~sn9j-I!F{Qlk<D4jQ
zd9aYo_j!I8)EGZ#X<3QAFOagS0!v7c{wt#N|7$`8MK4zRDo<K|Fyn)0T$<DEpu-;!
zHsta8fSSm(rE?q<TQ7s68>ZRF+jz5AR&^J@j<IZN96TFY@9^YH`2zqtH*JMNyC!+8
zeh2Zm9v8<WLv)Sh)?$OlMiu!NV>>&;OEMd+>QCMrwV{<4D0BmOc1lZ4)~+A5CQ3<s
z4dANU@8oksU`U^FVhuwWAZHcJtFKJ~a*L{Nm%+{((B;o5lJ<%&)kiwAS{NJ#af}oh
z%Y+X(ZhgggUeTzpozh&P%VHFlvOm|t0Z7OKrTO+5Q)acXuV@<^Q&RYEXB(a3l^n;N
z*6o)8R=V~gpUl^@wsy34c>_u@=0K<v$Apnk_Xm)aNfi3&<MmhgOJoC<eIEaqjZ>-=
z0yjtj!#RxwmndtyzD*L>5TczZl|`*>9Ido}DmzrnVhUH7Voga4cxIc*>HS}#XA73|
zTgR4dcPQmq``J9efosj`2mP5zyXCX(F*zlM3bTZrnUGSs5+9)^=xJJ&?JY2!<wqOq
zPDi&!vV<1!>Ur4;<w=VvKpQdD5`j253+2X_M<bd!0wHEOQCYfZfNst)WVZQ}CK>N%
zg)|93@!&`QKk{$5QnG{CRDwSM27EH30(F8JThfRcD#fBN58|`=qLg>fDuZSJ7N>w(
zeGX0mCKMApMcAFIZ!XQdVeA-?zf1Wxl^s0Bc;>mViw^fOxAznQ)H7y_T6Sh9DSkx@
z9JSq2=Za9?j>#PQMwceqD<<(d>nQ0N$Vli3sJ&P<1IYUBGeg^#$~m0RWpWA}8UJ9H
zm4pOEO}j6JBX93?6Y^XBM*Nkx<1zMtQhs5{>zZxI`AhLXak(2WKYIww8#}A}FxF8}
z!aLbB+omrwTAWz<`)x|1^X%i&V(Me3vpyPySS1{RrD;F%PX2^3$6;?;$+`#~iC$K>
zN{K8>e3cgEX_fDL)t_Q#2}mgQcjE?MGG#|H2h@1pB4^jAl0)!0s*A&-e+A##UBroO
zhNlUdbj3;zU<s_cM)%mgS?y0AYN)$xIvo_5`U05`kB6BqvRZ<Sti9DMzOi92z2hpy
zr2k5r+Q-heE?>b@<PCr)Nv1fR+}wWrF$mY-j!`Sf_A8x>o|%pH;$-Ss`4y_*$_Jew
z^3nb=VW{(2CET)wFP190&99A)abSuUAU&(i>6ZRth}*B2&gAI%cuCwxvn+Kx_d>iC
ziiW0)E53}2`H_WJ+h8`<p_F;V5ZLZzaq;p>72dsAG*4aR5d!4<)&hjIaQ?i*SC*pZ
zq}bgec&+=)$<b8)dtJr&cV_|j)!6=&r0p}!mHQj<)-Oeqi)0T;PmFxz!m!>Ol~s~*
z#y=~sOBoSmWB2cgRZvut<C2s9M9mWsZj)&WpXJ$KuQtVy_QIzQeQ)KYk_SZ-x)6xV
zoJ7~{m973b#R|_44GXK|tTLu<C8zZ8^AhE#tgK|8CJaTTj|%T;l{H7kbs4cx-*vm*
z@d@54pFJD5cU{>UUMusXB-YZ>v)gC;88Q&C>Vc<vTcwqGOYDU1=Io_;aY<fU$^pfz
zbH7HM1Uh&h?1XciBDNh*dQT1P(F{jq&2f%gyl?^Yfc$Q8^QU&AmzdxCRMK3BMTcUA
zb#IU5F;HMXKdZ-S@p)w8BW%Z>ghQH`-3JcH5@n&SEQ~8!DqcPYUCodZofx%dR+l)B
zH5chzrab5Bf*6~^#A;rfh-R4SoEFH)-d?p-zk%`i#WT@R99dSXiC1Q+eZM&6garD{
z&ziMke|}x>-{xlD4Y>Il;Ujd~oN;bV)ZgN<Us!Bg+B4kolRgl?w8@#vvs$A>{zaB?
zeogJX^oS|pEXn(YH@3>c^%0Ai=(@V~FGFf7-)GUbcc~>YP{zqNR<0$*rI&fwyA+%4
z?-gHIc15Jy5$ASy`#Q~O?ebT0j^9+*)d@_&pHY%KVbW`ru@D^Wk<8xIEe-*Q0Su~C
z@jAU|qXL>_UGiua6W9FdxXyCC5^CI469+V`zk^Er$sTOr3m#EWnIJvgwyJ=uQpoq+
z(H#Opu}J;VF`R0{1VzqDm}ZWu3(E!r>KZNC?x@sHL6=Gw#v22cMj=<zx5!1tTmqci
zxsQ?VW1Jfj_tFqMXCEI(>DJS*=iJ6z-e#FBMPb@BOGV0BJyVFgx>GJu(SsWvC2SmL
z?(OML?UG-g`B*ed_3WK(ltg&<a|c~KoExN#b&H!ymTJi4Pq}zG88(N~U9H1_!PRi8
z(i}ArROwPvQ?sFw3dsBR%_f#0&GukQU#yd#2Q(O#IT`<%(63(O!9?hiW1<Qrl)Jsm
zn0d)$xX!fqV}D~HxwI*DoY0)fth0eDpoWfVc|vI&{jpR7zP+p&<B&s77}im<xcA;g
zIEjXK>HF^?bQ(KDB%+|{No1G4AgwgrF+qATsVr7~jD*nJy|bP+KW|l0w?LTwtE$`I
zzrPe0v&vgHFs``C1~7d{T9|0$S~!L!*!Wd*C(mlJjZ0dICZ?sutCp-wsUA}{Y({w)
zd52c>Vv1^&^|3$EVf?C}N+lZavQ#}*^m{fqAMiL!I?mb<|Jl45r~P1zrse#uPfwbt
z3K(nF`lg#}fuwmAeTaMrdnEPncBt`(c6@n0a}B48CU;{C7j6!g+DQfkjvSZh^6YGP
zH@fjwc+=^Ya5<kD7@b_gTJ>wvg{5kVuK-tKyrC9%wvYgfIhis~d#+}Cwzk@!Qk1Ra
z{58|r?<ls|*7Dh`u^JcO=eAhYAu)UbM7{0><9%F(-Z~z|+Fd1M`_`9y(~d}x{f}3a
zNa!>$@g;OEK1ml5CV}MH{4p3S?x&*dnVt;S^D<&&t0fqqj!_@O{Y>1gPe*qlYNDDj
zwf9YCb!;@goYjSWzT=-AS8i>-PdV9ACz~3k)}KD?Mk+w<&VOX92|kn5<U5Vm&MVoE
z-yPa?`C@iyRK8U~Q=As9Y!1=-$&&HG+_>jpg0eg`sNX~5wz^SCfMpBA=)IX4m1A{d
zu|XxDw9xL5%Y;o)Q}e(V+{s0o#rju{n2t8zwXK}Q@sX3N=i7|V8)`FBYB_lhJBL$H
zTg=SN=HK*^)aw?uq<il7cdF>J4c+jtXozufvLd$&n!3=8j-VL0Kxe9?`?_l_tLBnE
z9RIkmG&Wun>Qxzr?`!NXZI&44vxUAc+Gk6_+D6HW?Lc$F+JC#xt{eeNU}~fL$6^Lg
z$IlUEI;B?DL5-7Iv(YLv#fgxCqH&_ovY*7-c;0nT*UwcGDizOv$Hft9%FDq?Lky7h
zG~|1p3Zi{^2v`1Nu>f*C%C#O)La!tjC?MEbUBdn~@s^F;$igBBYfGa{^l?V%sdaC}
z#C}E0yFU8Ryv%4SWy^u6pF}t~PW$Au!3F1*-}L18s%`X|D%i^H`b`Ox0G)8r0n9QN
zYdW{JGz>RVe!iyuS=~B~(QkM=T-nyvG^uvqc7(JWpqIpzmSNQn`ZbddHf>*J-!KQe
zjhcGQkXU^fLYLgr*lpQt=u#PA8b`tVj5YClr6(vn!>=?vqh?s8TFp7+*$hgr8$J7W
z+l#~>DZ>}J`+5-*7UuU;rJ}YWx?RJH`~e!(M4#r*p?p3%p1TuaFim*&HN}&^KEL!S
zK^4r~jJK$0d%NdL8qI86yA$(%g>56tM9CjFfwG;Q1Gjws+UGtEGr>O>nrH_#kd2Iu
z^|>3IbUKD%RKg4ky`i7<Gs-n<-xn0}#`o%sK|j2ospv4q5V26U%+<WHdEqH!cR8Ch
zHQ3k%v1Uql1nAegl`u1?XJt+NfT=#wryLD?srH!dU(-#R;Ir?jO<YB~rPGdbm3F{z
zwa~leE&8yfm}6~iUR8cOw~2NQZ@kz5X8b$An&ip56`9&as?S8}d53uozwLPbK=~x~
zr&hyJZCpx_Or2b!Yo26h;?L*(ss6|dmq<3t!=V}%v&%^rGt3uSEj6XaTQ{9aHSlcA
z{7z@nPL*ue>MA}BF7{tK%&`o`edl2j;eE?6)CHaovqih6_eoRDja^MGoN%gG*i@do
zasIibON&rIX{oIGhnu7|^Gbu=^BVl4o$5E~fgoT|4ikc1<8+`)2)?RiIHaJ){{qIb
z{5?cBHOLRFudaxbzb83@{qs%GPOr^Yck--X45g%YK-hvc!>b~2RF4Tg{xf;5xJWm_
z9gWx%G%x+sfbv^R_e2O^Tum&??$ZpZSH#R7Filsc!1(Pr*{usp6<Yk@`6eqx&p9^t
zH))<s0Yo3GYs@})7pH1_vc!K+5+RBCnue<b`mJH&l=yYl_iWY7dSJ($u#&;`i$%ob
zBx}~|RHX*df!Rd<oOr&;kfsy6^iTT(7e&NgWz7Qz<jLf#Q$PGmqRqASF`9HyC25A6
zEN2^9dKNgH6!Z9Z-stovbij?bwzl$%s!c+iv~(+d!Z@937gszEI$v3vPv&Vaw?WM(
zYqiD9ihOih%o6o|tj!;=OFw&YVDz0;oPcx%n>gWP<ks)4S;<_xtXxtyD2v<^znwuZ
z@kOSmnmEU~j!K%e2jro)larrc2=}$tUYNP+MwKVejHENYZQVUJxf1zrXP_03Kq<M-
zB~YNggFjIqzM>-eyUk1y{xfI)_KscNAGx5tI;07i=`ee^6kh|Xp4zKL)K^ikvtT8b
z&C|e={cT5LWKloPCeC3_(^g5SvN-5n%}bZ+*<2(kI*&NPVLk8OzUJ~!8YNs^6r8Rh
zh)|_W-`BDWjRK9NeMQV&o7)<FBFT6Dkf>jiLAxsip&Bpxn5+2Ac<uJ6#tOvocE_A1
z_6(1dbWi!YX)Vl490E7Zp~fYym}NRk8ZO?tmA)ZX<dwyx`DV^iYf;E^SF0LwbGmXB
zuARexYg{oz*jy;SHZ(=r%T%p25Gs4N?*EuB4kfSrnNZCMg}QbPdpKfIQc#VHDs~N1
znYmQk6rb0|$JvIoA*z%zZ0F!zRwEnbN$1en&c@>y(Gv9oyZg`9{ZPjm<%Q#<@Qg{g
zdUc8QEm^5@Wk~E~p0lIX1%&HK<HhI-?>|nX`T3E?lZt-yzJRiK7cPeC-Gn)r&hC55
zLvW@*qOWDh%r=2Ct=K7hKYOq<_w32!&p;q7S2@YIABn=h^3ri+zGY8-pR0*}{@v+y
z@vYLXb1>r!#mCmsnz4nmHlLc-LKKGYf`3LT?21d`zSqy%*R3{(xGpai71#}gt@$1@
zELZc+1-j5sVaUuAR9uOles@x!X3OfM%%-;Utn?YEK!+w#ewyLexT>2O<k8C1oZNrJ
z^b@+DeS8173R#r7K40)oHWidC_8sFhd+WtQW|PQ&@Ff(J@tiTFY(cb6D8Q;kgI$9+
zM7{EB#XxIwb@gm2=lJf_Y!h0G5DA!E2#}}ieAyRNQ|tmYhSU_6bdU^_y^qiLQ1Sj|
zoxWi0hrK(t_s(=MeB!J;zs(zJexcte8diR4I6KxPTJ4Ngjrq={-)yYRT3uTR0u9e_
z<x<BfYr;FKpGreG|F?bZ(9}G>Xifdpl*&ufe*JrAMGH0X*|1BbxoZm~qox(3w*AHM
zye-*Y{d46C<b0Kv`Dm(m37?*i=;({~#qTVzrr&-k_rLHMAW|+XAoGyYpG!i~C~2B;
zt#H|x)x*gPo1Y4xKK4bFDnZ3Q@uwe<7pa=~1(lTsnUm_*aHZ|i?)4wx&NuF}S<)=s
zRGSGwC*?<|2E5VWwn9&m`xvXxwZshl=sl~Ffj#<s1)rH;X^@%N^dUAE`bb6HfMEw<
zFLnyvuHo+&j)DPJG{4Ek_M<qf)DH}OUD|s0AIT;B1$|~0knl=Vw@IwPUb~0b?E_)g
zHAj)CO~nf06G9qAyVC{xhX>PgLPA&#&`mxI&B@^!v)dk<1KJ8ywI)s;iZQ-C(yx<~
zdSd0LaL=1in5J^w_3OXZ1OLw#KO0Qkqn(=9hY^2WGVFi841WM40h*>8?f?EB_(?sR
zcx%zz??$nIe-9?EjDk(S?7V-$a6R{Ug;_g)S_|>e4?vUlyvg~`w;`k4%J%)|xAUc@
zyWG27-$#G1-9BHMrKT&U+lNe1?{>4`hg-K0sC)tf{&+v6-?}?T+>!@|m)~BoJYf8X
zI{+c2a|~OI=S=4JG-xiyQa9cEFQPV<vidOlp09~Hg5gu_4;i7koyqd;z7H2CPygd3
zJfDv5sK1IoJ!z}1UC%pwO!hkcGqo;6{OC5+GPC;!t@o(D;!5l!LG11W0M$hB4jhrm
zE6Tpco!z~6fA+r&{m)xJ5tQDEXp<B2laW2olg=)&I8EN=^IML`ku=}RsSq53qk5lP
z?rWiv74^~t1a#=3l!81dTGGi7e!2ONZ~50nF9=>*xJ;dFWa_0ocAzx*?AA>oCWxCG
zHkbC!SCLT~ZAu_9hmWha^t!#>+<6AE1yM1ACCAf{!y)Lu9{1m;zxOJ#$F_Ixgiu?n
zfuVM4bG@kLV(#P|6Mk^b@7Z)E4u<E130(KwKGMr4y2~*ItdDnS3vgc}{vQ`CtEi)I
zX?zGLkVgsr_WWdZCgh}X@zT@tCv3{YMt!mF1hdZLHoDj}LBDKQKB8q$bZ+x>-<AAI
z=zosX|1u!m%d(~>wy^zxe)wYK<IR;hK4vH4uE%_Rdu^yYF*xsn?F6{TcLGdP2^@VK
z=1WohqW6iy-X~wY_Cs3ei1tpd?`{{-A8`L=NFY|-!q6%!(kbe#{w9AC<NBx_j*}j3
z>vJu{l@rn4Gve(p3=~r7z`Lbw22dJ(t`^05$A|6Rk9(FPKN`v6bAF#X^yD}S{I^wG
z@d)xKiyS<S-<ERd$48hiB``4#0lJ3Hr0+vzc_`*;yMgD_s9cT(r*1sI#DDr^ef)}4
zvk&Tk_;tw@@$c&aPig)`tA_dA#9o8Vd*c$FD9k)aq^<C+C;qd2v1wE4dN^$A?nZIp
zhb!V_mB~SI*WG(NSQ9bdV_uc7rSQdXSfmB(@qaslzXn;h!2C?eRS~Tn?aI;eYTZgM
zE%n;j{iXxO-D`DTqATHo@QB&!%(}9SUF>nI>xARb%OFkYHabP@JS8+QT#k$HCD?b_
z;*hiXpKZqf^d&HHU2xHyy6yP-WUq6b{cWKa-(`9Bs>I2DLNilDnAi(@{hZ@Z#4_`m
ztwoFZaydHj${V7?>f}q2IRoy*!JZGn38ov<+QBl<$<ChE+^gN;|Hnu8)FebV`qk%N
z&x9ohFuaRtsHg7vP&YR>M|UJqA&v`8ZWRDztd-ZOi8ryok8gC|-aMK4EyE?^p~e`f
z+&$hcN2-wR{N4C&@M*Z{p|YFge=yUVcSv({b4HKlhyt%yMdjJ<b=86_&_vT28y*CU
z!Ik3m@1D*1!q64NY&tF+!lMcWj-uSho&g-hn(pE5PMEEHjz&BtSyXc38<r1QO!H^b
z=|f9VVe5+j$;sZxw<1B#_v?$zH4l_N-JMMao{YvA#1T{ZN-0r$s&%3=&3|qSOzqw3
z5e9nVJ!9hfGqqmaM%XmwjgfE8!|8NdMM=pcogB2(f?x0tjBqu-Yb(2|?o1eZSfe}b
z<3`~9+lX7Pe%2*Jro8oq)rIjb%<>s2ai2M}+DdtQtfD-MFgfN#F|NLx{ON+k=7k$X
zIvGt5;O`+^4`o~X`0{fTAyBe{2A;=^yG^(cy(6?zt(X9DH61F<cl=8MOS#9wN)KOW
zT$CcniN|V64tEjr-~V6S&=*M~bkRuiT20AckKDoYG`_zCl28<qkgaOljTo*H_Pxl|
z^SasPB9WJ)6)bDPsqZpyW?eQNX^2Ms#peJO#5t{>A7t&Govetpk^+8puAs&)q2ecK
zkO6nYm!x&mZ~NZGTW%5h9ew|vT&*iaWtJhlY~H2-QN1bm^yW^mog+U{S2g%6E&H{l
zil$MDta9IY<fJdP=qn9)pBa+N+GIIw>L9GLH9^s~vD`u3ECFuuwj#Nrv5sDwO=)u2
zJvl>M{EJ^1rpNw+ZW`VHT4VpdJ&S-TnZ$l)5S(CJR!?xFf3ba4mO_#m^<gc~)a(ue
zXxRD{icK-*rjoyFPz(i_J6p`^-=nAMk_4VP5ITjMX{YN}4Q)8y-20TQOf<UQ>z;uB
z{mVc|3(tRj__0{hoiB!V|6*YIX+x_fZBp$2x0I5AMNzkHg?e_)2>5Qc<mb6q?uydt
z!<F?|ieE;STbu$PvX&ouk2SG|H8h0Ze`jSTgC$lM%w=F)U#9hk51U**D@VoGx9gG*
m3t}`-My+II`9-UM{i9zctibqg^1OcxK;Y@>=d#Wzp$Py3e;lm<

literal 0
HcmV?d00001


From ff3c81a68172aaac11932083ed4d2dc61c568134 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Max=20K=C3=B6rb=C3=A4cher?= <max@koerbaecher.io>
Date: Sun, 30 Aug 2020 14:19:52 +0200
Subject: [PATCH 135/496] fix title size

---
 ...02-scaling-kubernetes-networking-endpointslices.md | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 92738fb53d..249b976913 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -4,20 +4,21 @@ title: 'Scaling Kubernetes Networking With EndpointSlices'
 date: 2020-09-02
 slug: scaling-kubernetes-networking-with-endpointSlices
 ---
+
 **Author:** Rob Scott (Google)
 
 EndpointSlices are an exciting new API that provides a scalable and extensible alternative to the Endpoints API. EndpointSlices track IP addresses, ports, readiness, and topology information for Pods backing a Service.
 
 In Kubernetes 1.19 this feature will be enabled by default with kube-proxy reading from [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It will also enable significant new features in future Kubernetes releases like Topology Aware Routing.
 
-# Scalability Limitations of the Endpoints API 
+## Scalability Limitations of the Endpoints API 
 With the Endpoints API, there was only one Endpoint resource for a Service. That meant that it needed to be able to store IP addresses and ports (network endpoints) for every Pod that was backing the corresponding Service. This resulted in huge API resources. To compound this problem, kube-proxy was running on every node and watching for any updates to Endpoints resources. If even a single network endpoint changed in an Endpoints resource, the whole object would have to be sent to each of those instances of kube-proxy.
 
 A further limitation of the Endpoints API is that it limits the number of network endpoints that can be tracked for a Service. The default size limit for an object stored in etcd is 1.5MB. In some cases that can limit an Endpoints resource to 5,000 Pod IPs. This is not an issue for most users, but it becomes a significant problem for users with Services approaching this size.
 
 To show just how significant these issues become at scale it helps to have a simple example. Think about a Service which has 5,000 Pods, it might end up with a 1.5MB Endpoints resource. If even a single network endpoint in that list changes, the full Endpoints resource will need to be distributed to each Node in the cluster. This becomes quite an issue in a large cluster with 3,000 Nodes. Each update would involve sending 4.5GB of data (1.5MB Endpoints * 3,000 Nodes) across the cluster. That's nearly enough to fill up a DVD, and it would happen for each Endpoints change. Imagine a rolling update that results in all 5,000 Pods being replaced - that's more than 22TB (or 5,000 DVDs) worth of data transferred.
 
-# Splitting endpoints up with the EndpointSlice API
+## Splitting endpoints up with the EndpointSlice API
 The EndpointSlice API was designed to address this issue with an approach similar to sharding. Instead of tracking all Pod IPs for a Service with a single Endpoints resource, we split them into multiple smaller EndpointSlices. 
 
 Consider an example where a Service is backed by 15 pods. We'd end up with a single Endpoints resource that tracked all of them. If EndpointSlices were configured to store 5 endpoints each, we'd end up with 3 different EndpointSlices:
@@ -25,21 +26,21 @@ Consider an example where a Service is backed by 15 pods. We'd end up with a sin
 
 By default, EndpointSlices will store as many as 100 endpoints each, though this can be configured with the --max-endpoints-per-slice flag on kube-controller-manager.
 
-# EndpointSlices provide 10x scalability improvements
+## EndpointSlices provide 10x scalability improvements
 This API dramatically improves networking scalability. Now when a Pod is added or removed, only 1 small EndpointSlice needs to be updated. This difference becomes quite noticeable when hundreds or thousands of Pods are backing a single Service. 
 
 Potentially more significant, now that all Pod IPs for a Service don't need to be stored in a single resource, we don't have to worry about the size limit for objects stored in etcd. EndpointSlices have already been used to scale Services beyond 100,000 network endpoints.
 
 All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale at least 10x beyond any previous limitations.
 
-# EndpointSlices enable new functionality
+## EndpointSlices enable new functionality
 As a new API, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This will include dual-stack Services, topology aware routing, and endpoint subsetting.
 
 Dual-Stack Services are an exciting new feature that has been in development alongside EndpointSlices. They will utilize both IPv4 and IPv6 addresses for Services and rely on the addressType field on EndpointSlices to track these addresses by IP family. 
 
 Topology aware routing will update kube-proxy to prefer routing requests within the same zone or region. This makes use of the topology fields stored for each endpoint in an EndpointSlice. As a further refinement of that, we're exploring the potential of endpoint subsetting. This would allow kube-proxy to only watch a subset of EndpointSlices. For example, this might be combined with topology aware routing so that kube-proxy would only need to watch EndpointSlices containing endpoints within the same zone. This would provide another very significant scalability improvement.
 
-# What does this mean for the Endpoints API?
+## What does this mean for the Endpoints API?
 Although the EndpointSlice API is providing a newer and more scalable alternative to the Endpoints API, the Endpoints API will continue to be considered generally available and stable. The most significant change planned for the Endpoints API will involve beginning to truncate Endpoints that would otherwise run into scalability issues.
 
 Although the Endpoints API is not going away, many new features will be enabled by the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider switching to EndpointSlices in the future.

From 73c8016e4ec51276d23525779cb6c706717e26ac Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Sun, 30 Aug 2020 17:08:38 +0200
Subject: [PATCH 136/496] add quotation mark

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 249b976913..8149e5e133 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -24,7 +24,7 @@ The EndpointSlice API was designed to address this issue with an approach simila
 Consider an example where a Service is backed by 15 pods. We'd end up with a single Endpoints resource that tracked all of them. If EndpointSlices were configured to store 5 endpoints each, we'd end up with 3 different EndpointSlices:
 ![EndpointSlices](/images/blog/2020-09-02-scaling-kubernetes-networking-endpointslices/endpoint-slices.png)
 
-By default, EndpointSlices will store as many as 100 endpoints each, though this can be configured with the --max-endpoints-per-slice flag on kube-controller-manager.
+By default, EndpointSlices  store as many as 100 endpoints each, though this can be configured with the `--max-endpoints-per-slice` flag on kube-controller-manager.
 
 ## EndpointSlices provide 10x scalability improvements
 This API dramatically improves networking scalability. Now when a Pod is added or removed, only 1 small EndpointSlice needs to be updated. This difference becomes quite noticeable when hundreds or thousands of Pods are backing a single Service. 
@@ -44,4 +44,3 @@ Topology aware routing will update kube-proxy to prefer routing requests within
 Although the EndpointSlice API is providing a newer and more scalable alternative to the Endpoints API, the Endpoints API will continue to be considered generally available and stable. The most significant change planned for the Endpoints API will involve beginning to truncate Endpoints that would otherwise run into scalability issues.
 
 Although the Endpoints API is not going away, many new features will be enabled by the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider switching to EndpointSlices in the future.
-

From bb139e0b8af087a4ce0727aaccff636480ef28ca Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Sun, 30 Aug 2020 17:09:54 +0200
Subject: [PATCH 137/496] edit slug

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 8149e5e133..78361dd993 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -2,7 +2,7 @@
 layout: blog
 title: 'Scaling Kubernetes Networking With EndpointSlices'
 date: 2020-09-02
-slug: scaling-kubernetes-networking-with-endpointSlices
+slug: scaling-kubernetes-networking-with-endpointslices
 ---
 
 **Author:** Rob Scott (Google)

From 91f9d2e74913cafad875620a100de341d98c135b Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Sun, 30 Aug 2020 17:11:15 +0200
Subject: [PATCH 138/496] adjust wording

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 78361dd993..c4c87ef800 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -31,7 +31,7 @@ This API dramatically improves networking scalability. Now when a Pod is added o
 
 Potentially more significant, now that all Pod IPs for a Service don't need to be stored in a single resource, we don't have to worry about the size limit for objects stored in etcd. EndpointSlices have already been used to scale Services beyond 100,000 network endpoints.
 
-All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale at least 10x beyond any previous limitations.
+All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale to at least 10 times any previous limitations.
 
 ## EndpointSlices enable new functionality
 As a new API, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This will include dual-stack Services, topology aware routing, and endpoint subsetting.

From 2be9e4e5dd1f49b14a03d7111b1c4632311f1057 Mon Sep 17 00:00:00 2001
From: Jubayer Abdullah Joy <jubayerjoy98@gmail.com>
Date: Sun, 30 Aug 2020 22:13:28 +0600
Subject: [PATCH 139/496] Add redirect for
 '/docs/concepts/scheduling-eviction/resource-bin-packing/'

File is moved from `/docs/concepts/configuration/resource-bin-packing/` to `/docs/concepts/scheduling-eviction/resource-bin-packing/`
Adding a redirect for old URL
---
 static/_redirects | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/_redirects b/static/_redirects
index dc58a78c72..56b1af54bd 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -98,6 +98,7 @@
 /docs/concepts/configuration/container-command-arg/     /docs/tasks/inject-data-application/define-command-argument-container/ 301
 /docs/concepts/configuration/container-command-args/     /docs/tasks/inject-data-application/define-command-argument-container/     301
 /docs/concepts/configuration/manage-compute-resources-container/ /docs/concepts/configuration/manage-resources-containers/ 301
+/docs/concepts/configuration/resource-bin-packing/      /docs/concepts/scheduling-eviction/resource-bin-packing/ 301
 /docs/concepts/configuration/scheduler-perf-tuning/      /docs/concepts/scheduling-eviction/scheduler-perf-tuning/    301
 /docs/concepts/configuration/scheduling-framework/     /docs/concepts/scheduling-eviction/scheduling-framework/    301
 /docs/concepts/configuration/taint-and-toleration/     /docs/concepts/scheduling-eviction/taint-and-toleration/ 301

From ecf60163b84f49f74d3972c3aad2514bbd50f7f7 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Mon, 31 Aug 2020 09:35:38 +0800
Subject: [PATCH 140/496] Fix arguments for service account key pair

---
 content/ko/docs/setup/best-practices/certificates.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ko/docs/setup/best-practices/certificates.md b/content/ko/docs/setup/best-practices/certificates.md
index 42b94acf5e..780bd46fa3 100644
--- a/content/ko/docs/setup/best-practices/certificates.md
+++ b/content/ko/docs/setup/best-practices/certificates.md
@@ -120,8 +120,8 @@ kubeadm 사용자만 해당:
 
 | 개인키 경로             | 공개 키 경로             | 명령어                 | 파라미터                             |
 |------------------------------|-----------------------------|-------------------------|--------------------------------------|
-|  sa.key                      |                             | kube-controller-manager | service-account-private              |
-|                              | sa.pub                      | kube-apiserver          | service-account-key                  |
+|  sa.key                      |                             | kube-controller-manager | --service-account-private-key-file              |
+|                              | sa.pub                      | kube-apiserver          | --service-account-key-file                  |
 
 ## 각 사용자 계정을 위한 인증서 설정하기
 

From a66dae2ba3e9aacf0182daf2ebbd81e11281560d Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Mon, 31 Aug 2020 09:47:34 +0800
Subject: [PATCH 141/496] Fix arguments for service account key pair

---
 content/zh/docs/setup/best-practices/certificates.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/setup/best-practices/certificates.md b/content/zh/docs/setup/best-practices/certificates.md
index 67fe1c9942..281125e367 100644
--- a/content/zh/docs/setup/best-practices/certificates.md
+++ b/content/zh/docs/setup/best-practices/certificates.md
@@ -217,8 +217,8 @@ Same considerations apply for the service account key pair:
 
 | 私钥路径            | 公钥路径            | 命令                 | 参数                             |
 |------------------------------|-----------------------------|-------------------------|--------------------------------------|
-|  sa.key                      |                             | kube-controller-manager | service-account-private              |
-|                              | sa.pub                      | kube-apiserver          | service-account-key                  |
+|  sa.key                      |                             | kube-controller-manager | --service-account-private-key-file              |
+|                              | sa.pub                      | kube-apiserver          | --service-account-key-file                  |
 
 <!--
 ## Configure certificates for user accounts

From 517298e98c916cdcb8cea98b6131cb47ef478b06 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 09:58:15 +0800
Subject: [PATCH 142/496] Update addons.md

---
 content/zh/docs/concepts/cluster-administration/addons.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/addons.md b/content/zh/docs/concepts/cluster-administration/addons.md
index c0291a480d..77316222b3 100644
--- a/content/zh/docs/concepts/cluster-administration/addons.md
+++ b/content/zh/docs/concepts/cluster-administration/addons.md
@@ -37,7 +37,7 @@ Add-ons 扩展了 Kubernetes 的功能。
 * [NSX-T](https://docs.vmware.com/en/VMware-NSX-T/2.0/nsxt_20_ncp_kubernetes.pdf) Container Plug-in (NCP) provides integration between VMware NSX-T and container orchestrators such as Kubernetes, as well as integration between NSX-T and container-based CaaS/PaaS platforms such as Pivotal Container Service (PKS) and OpenShift.
 * [Nuage](https://github.com/nuagenetworks/nuage-kubernetes/blob/v5.1.1-1/docs/kubernetes-1-installation.rst) is an SDN platform that provides policy-based networking between Kubernetes Pods and non-Kubernetes environments with visibility and security monitoring.
 * [Romana](http://romana.io) is a Layer 3 networking solution for pod networks that also supports the [NetworkPolicy API](/docs/concepts/services-networking/network-policies/). Kubeadm add-on installation details available [here](https://github.com/romana/romana/tree/master/containerize).
-* [Weave Net](https://www.weave.works/docs/net/latest/kube-addon/) provides networking and network policy, will carry on working on both sides of a network partition, and does not require an external database.
+* [Weave Net](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/) provides networking and network policy, will carry on working on both sides of a network partition, and does not require an external database.
 -->
 ## 网络和网络策略
 
@@ -71,7 +71,7 @@ Add-ons 扩展了 Kubernetes 的功能。
 * [Romana](https://romana.io) 是一个 pod 网络的第三层解决方案，并支持[
   NetworkPolicy API](/zh/docs/concepts/services-networking/network-policies/)。
   Kubeadm add-on 安装细节可以在[这里](https://github.com/romana/romana/tree/master/containerize)找到。
-* [Weave Net](https://www.weave.works/docs/net/latest/kube-addon/) 
+* [Weave Net](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/) 
   提供在网络分组两端参与工作的网络和网络策略，并且不需要额外的数据库。
 
 <!--

From 71fb3d34e952db46346973ea6f6e7253bd03098e Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 10:06:52 +0800
Subject: [PATCH 143/496] Update manage-resources-containers.md

---
 .../concepts/configuration/manage-resources-containers.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/concepts/configuration/manage-resources-containers.md b/content/zh/docs/concepts/configuration/manage-resources-containers.md
index ef14f7608d..b2d3844012 100644
--- a/content/zh/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/zh/docs/concepts/configuration/manage-resources-containers.md
@@ -212,13 +212,13 @@ CPU 总是按绝对数量来请求的，不可以使用相对数量；
 ## Meaning of memory
 
 Limits and requests for `memory` are measured in bytes. You can express memory as
-a plain integer or as a fixed-point integer using one of these suffixes:
+a plain integer or as a fixed-point number using one of these suffixes:
 E, P, T, G, M, K. You can also use the power-of-two equivalents: Ei, Pi, Ti, Gi,
 Mi, Ki. For example, the following represent roughly the same value:
 -->
 ## 内存的含义  {#meaning-of-memory}
 
-内存的约束和请求以字节为单位。你可以使用以下后缀之一以一般整数或定点整数形式来表示内存：
+内存的约束和请求以字节为单位。你可以使用以下后缀之一以一般整数或定点数字形式来表示内存：
 E、P、T、G、M、K。你也可以使用对应的 2 的幂数：Ei、Pi、Ti、Gi、Mi、Ki。
 例如，以下表达式所代表的是大致相同的值：
 
@@ -573,7 +573,7 @@ You can use _ephemeral-storage_ for managing local ephemeral storage. Each Conta
 * `spec.containers[].resources.requests.ephemeral-storage`
 
 Limits and requests for `ephemeral-storage` are measured in bytes. You can express storage as
-a plain integer or as a fixed-point integer using one of these suffixes:
+a plain integer or as a fixed-point number using one of these suffixes:
 E, P, T, G, M, K. You can also use the power-of-two equivalents: Ei, Pi, Ti, Gi,
 Mi, Ki. For example, the following represent roughly the same value:
 
@@ -590,7 +590,7 @@ Pod 中的每个 Container 可以设置以下属性：
 * `spec.containers[].resources.limits.ephemeral-storage`
 * `spec.containers[].resources.requests.ephemeral-storage`
 
-`ephemeral-storage` 的请求和约束值是按字节计量的。你可以使用一般整数或者定点整数
+`ephemeral-storage` 的请求和约束值是按字节计量的。你可以使用一般整数或者定点数字
 加上下面的后缀来表达存储量：E、P、T、G、M、K。
 你也可以使用对应的 2 的幂级数来表达：Ei、Pi、Ti、Gi、Mi、Ki。
 例如，下面的表达式所表达的大致是同一个值：

From e9cf05db66a414e9afdcab8b943675b026ffefaa Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 10:11:29 +0800
Subject: [PATCH 144/496] Update deployment.md

---
 content/zh/docs/concepts/workloads/controllers/deployment.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/controllers/deployment.md b/content/zh/docs/concepts/workloads/controllers/deployment.md
index d0537de82a..68f5ed1e55 100644
--- a/content/zh/docs/concepts/workloads/controllers/deployment.md
+++ b/content/zh/docs/concepts/workloads/controllers/deployment.md
@@ -1763,9 +1763,9 @@ configuring containers, and [using kubectl to manage resources](/docs/concepts/o
 
 <!--
  In addition to required fields for a Pod, a Pod template in a Deployment must specify appropriate
-labels and an appropriate restart policy. For labels, make sure not to overlap with other controllers. See [selector](#selector)).
+labels and an appropriate restart policy. For labels, make sure not to overlap with other controllers. See [selector](#selector).
 -->
-除了 Pod 的必填字段外， Deployment 中的 Pod 模板必须指定适当的标签和适当的重新启动策略。对于标签，请确保不要与其他控制器重叠。请参考[选择器](#selector))。
+除了 Pod 的必填字段外， Deployment 中的 Pod 模板必须指定适当的标签和适当的重新启动策略。对于标签，请确保不要与其他控制器重叠。请参考[选择器](#selector)。
 
 <!--
  Only a [`.spec.template.spec.restartPolicy`](/docs/concepts/workloads/pods/#restart-policy) equal to `Always` is

From 32638e65ed8eae7a29879e300afc5fffc8c29668 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 10:18:29 +0800
Subject: [PATCH 145/496] Update deployment.md

---
 .../docs/concepts/workloads/controllers/deployment.md  | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/controllers/deployment.md b/content/zh/docs/concepts/workloads/controllers/deployment.md
index 68f5ed1e55..bcda474a0f 100644
--- a/content/zh/docs/concepts/workloads/controllers/deployment.md
+++ b/content/zh/docs/concepts/workloads/controllers/deployment.md
@@ -212,7 +212,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
 -->
 2. 运行 `kubectl get deployments` 以检查 Deployment 是否已创建。如果仍在创建 Deployment ，则输出以下内容：
 
-    ```shell
+    ```
     NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
     nginx-deployment   3         0         0            0           1s
     ```
@@ -247,7 +247,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
 -->
 3. 要查看 Deployment 展开状态，运行 `kubectl rollout status deployment.v1.apps/nginx-deployment`。输出：
 
-    ```shell
+    ```
     Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
     deployment.apps/nginx-deployment successfully rolled out
     ```
@@ -257,7 +257,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
 -->
 4. 几秒钟后再次运行 `kubectl get deployments`。输出：
 
-    ```shell
+    ```
     NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
     nginx-deployment   3         3         3            3           18s
     ```
@@ -271,7 +271,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
 -->
 5. 要查看 Deployment 创建的 ReplicaSet  （`rs`），运行 `kubectl get rs`。输出：
 
-    ```shell
+    ```
     NAME                          DESIRED   CURRENT   READY   AGE
     nginx-deployment-75675f5897   3         3         3       18s
     ```
@@ -286,7 +286,7 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
 -->
 6. 要查看每个 Pod 自动生成的标签，运行 `kubectl get pods --show-labels`。返回以下输出：
 
-    ```shell
+    ```
     NAME                                READY     STATUS    RESTARTS   AGE       LABELS
     nginx-deployment-75675f5897-7ci7o   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
     nginx-deployment-75675f5897-kzszj   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453

From ef51a21fdbd5b6905117b77259a310b9de005e42 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sun, 30 Aug 2020 19:36:59 -0700
Subject: [PATCH 146/496] Update chinese page linkd access-cluster-link

---
 .../docs/tasks/access-application-cluster/access-cluster.md   | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/access-cluster.md b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
index b7b4d18657..1cbf420e1a 100644
--- a/content/zh/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
@@ -42,7 +42,7 @@ Check the location and credentials that kubectl knows about with this command:
 
 当您第一次访问 Kubernetes API 的时候，我们建议您使用 Kubernetes CLI，`kubectl`。
 
-访问集群时，您需要知道集群的地址并且拥有访问的凭证。通常，这些在您通过 [Getting started guide](/docs/setup/) 安装集群时都是自动安装好的，或者其他人安装时也应该提供了凭证和集群地址。
+访问集群时，您需要知道集群的地址并且拥有访问的凭证。通常，这些在您通过 [Getting started guide](/zh/docs/setup/) 安装集群时都是自动安装好的，或者其他人安装时也应该提供了凭证和集群地址。
 
 通过以下命令检查 kubectl 是否知道集群地址及凭证：
 
@@ -599,5 +599,3 @@ will typically ensure that the latter types are setup correctly.
     - 具体实现因云提供商而异。
 
 除了前两种类型之外，Kubernetes 用户通常不需要担心任何其他问题。集群管理员通常会确保后者的正确配置。
-
-

From b4ee8430311c3fce3d49efefd5b3f998f3eb964f Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Mon, 31 Aug 2020 10:44:39 +0800
Subject: [PATCH 147/496] containerd configuration improvement

---
 .../docs/setup/production-environment/container-runtimes.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 2873951241..3d7edde06d 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -794,7 +794,11 @@ Refer to the [Frakti QuickStart guide](https://github.com/kubernetes/frakti#quic
 -->
 ### systemd
 
-使用 `systemd` cgroup 驱动，在 `/etc/containerd/config.toml` 中设置 `plugins.cri.systemd_cgroup = true`。
+使用 `systemd` cgroup 驱动，在 `/etc/containerd/config.toml` 中设置 
+```
+[plugins.cri]
+systemd_cgroup = true
+```
 当使用 kubeadm 时，请手动配置
 [kubelet 的 cgroup 驱动](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
 

From 26f5d35aac16484474f30ec85b6fbf2b39d2802c Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 10:50:57 +0800
Subject: [PATCH 148/496] Update dual-stack.md

---
 content/zh/docs/concepts/services-networking/dual-stack.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/zh/docs/concepts/services-networking/dual-stack.md b/content/zh/docs/concepts/services-networking/dual-stack.md
index f1bfba435f..9d490cb9cf 100644
--- a/content/zh/docs/concepts/services-networking/dual-stack.md
+++ b/content/zh/docs/concepts/services-networking/dual-stack.md
@@ -89,6 +89,7 @@ To enable IPv4/IPv6 dual-stack, enable the `IPv6DualStack` [feature gate](/docs/
 
    * kube-apiserver:
       * `--feature-gates="IPv6DualStack=true"`
+      * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
    * kube-controller-manager:
       * `--feature-gates="IPv6DualStack=true"`
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>` 例如 `--cluster-cidr=10.244.0.0/16,fc00::/48`

From a3ca547e1eceb37fd7400058372c85023c6dc0c4 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 10:57:29 +0800
Subject: [PATCH 149/496] Update explore-intro.html

---
 .../kubernetes-basics/explore/explore-intro.html     | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/zh/docs/tutorials/kubernetes-basics/explore/explore-intro.html b/content/zh/docs/tutorials/kubernetes-basics/explore/explore-intro.html
index eca0105bbe..080e38fb82 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/explore/explore-intro.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/explore/explore-intro.html
@@ -41,9 +41,9 @@ weight: 10
 -->
         <h2>Kubernetes Pods</h2>
 <!--
-        <p>When you created a Deployment in Module <a href="/docs/tutorials/kubernetes-basics/deploy-intro/">2</a>, Kubernetes created a <b>Pod</b> to host your application instance. A Pod is a Kubernetes abstraction that represents a group of one or more application containers (such as Docker or rkt), and some shared resources for those containers. Those resources include:</p>
+        <p>When you created a Deployment in Module <a href="/docs/tutorials/kubernetes-basics/deploy-intro/">2</a>, Kubernetes created a <b>Pod</b> to host your application instance. A Pod is a Kubernetes abstraction that represents a group of one or more application containers (such as Docker), and some shared resources for those containers. Those resources include:</p>
 -->
-        <p>在模块 <a href="/docs/tutorials/kubernetes-basics/deploy-intro/">2</a>创建 Deployment 时, Kubernetes 添加了一个 <b>Pod</b> 来托管你的应用实例。Pod 是 Kubernetes 抽象出来的，表示一组一个或多个应用程序容器（如 Docker 或 rkt ），以及这些容器的一些共享资源。这些资源包括:</p>
+        <p>在模块 <a href="/docs/tutorials/kubernetes-basics/deploy-intro/">2</a>创建 Deployment 时, Kubernetes 添加了一个 <b>Pod</b> 来托管你的应用实例。Pod 是 Kubernetes 抽象出来的，表示一组一个或多个应用程序容器（如 Docker），以及这些容器的一些共享资源。这些资源包括:</p>
 <!--
         <ul>
           <li>Shared storage, as Volumes</li>
@@ -84,11 +84,11 @@ weight: 10
         <div class="content__box content__box_fill">
 <!--
           <p><i>
-              A Pod is a group of one or more application containers (such as Docker or rkt) and includes shared storage (volumes), IP address and information about how to run them.
+              A Pod is a group of one or more application containers (such as Docker) and includes shared storage (volumes), IP address and information about how to run them.
             </i></p>
 -->
           <p><i>
-              Pod 是一组一个或多个应用程序容器（例如 Docker 或 rkt ），包括共享存储（卷), IP 地址和有关如何运行它们的信息。
+              Pod 是一组一个或多个应用程序容器（例如 Docker），包括共享存储（卷), IP 地址和有关如何运行它们的信息。
             </i></p>
         </div>
       </div>
@@ -120,7 +120,7 @@ weight: 10
         <p>Every Kubernetes Node runs at least:</p>
         <ul>
           <li>Kubelet, a process responsible for communication between the Kubernetes Master and the Node; it manages the Pods and the containers running on a machine.</li>
-          <li>A container runtime (like Docker, rkt) responsible for pulling the container image from a registry, unpacking the container, and running the application.</li>
+          <li>A container runtime (like Docker) responsible for pulling the container image from a registry, unpacking the container, and running the application.</li>
         </ul>
 -->
         <h2>工作节点</h2>
@@ -129,7 +129,7 @@ weight: 10
         <p>每个 Kubernetes 工作节点至少运行:</p>
         <ul>
           <li>Kubelet，负责 Kubernetes 主节点和工作节点之间通信的过程; 它管理 Pod 和机器上运行的容器。</li>
-          <li>容器运行时（如 Docker ，rkt ）负责从仓库中提取容器镜像，解压缩容器以及运行应用程序。</li>
+          <li>容器运行时（如 Docker）负责从仓库中提取容器镜像，解压缩容器以及运行应用程序。</li>
         </ul>
       </div>
       <div class="col-md-4">

From b155925511e71389e3ede7cd30a66df7682dee57 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sun, 30 Aug 2020 20:01:44 -0700
Subject: [PATCH 150/496] Correct 404 link logging-elasticsearch-kibana

---
 .../logging-elasticsearch-kibana.md                          | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md b/content/zh/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
index b2532f8a1f..a667fa7f1b 100644
--- a/content/zh/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
+++ b/content/zh/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
@@ -20,14 +20,14 @@ in the [Logging With Stackdriver Logging](/docs/user-guide/logging/stackdriver).
 -->
 在 Google Compute Engine (GCE) 平台上，默认的日志管理支持目标是
 [Stackdriver Logging](https://cloud.google.com/logging/)，
-在[使用 Stackdriver Logging 管理日志](/zh/docs/tasks/debug-application-cluster/logging-stackdriver/)
+在[使用 Stackdriver Logging 管理日志](/docs/tasks/debug-application-cluster/logging-stackdriver/)
 中详细描述了这一点。
 
 <!--
 This article describes how to set up a cluster to ingest logs into
 [Elasticsearch](https://www.elastic.co/products/elasticsearch) and view
 them using [Kibana](https://www.elastic.co/products/kibana), as an alternative to
-Stackdriver Logging when running on GCE. 
+Stackdriver Logging when running on GCE.
 -->
 本文介绍了如何设置一个集群，将日志导入
 [Elasticsearch](https://www.elastic.co/products/elasticsearch)，并使用
@@ -192,4 +192,3 @@ ideas on how to dig into it, check out [Kibana's documentation](https://www.elas
 -->
 Kibana 为浏览你的日志提供了各种强大的选项！有关如何深入研究它的一些想法，
 请查看 [Kibana 的文档](https://www.elastic.co/guide/en/kibana/current/discover.html)。
-

From 43d264e04499351144f1f832f98813510c94aa7d Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sun, 30 Aug 2020 20:10:40 -0700
Subject: [PATCH 151/496] Change link to Chinese version page

---
 content/zh/docs/setup/_index.md | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/content/zh/docs/setup/_index.md b/content/zh/docs/setup/_index.md
index 81e8d38ef8..042a75f203 100644
--- a/content/zh/docs/setup/_index.md
+++ b/content/zh/docs/setup/_index.md
@@ -100,6 +100,4 @@ When evaluating a solution for a production environment, consider which aspects
 <!--
 [Kubernetes Partners](https://kubernetes.io/partners/#conformance) includes a list of [Certified Kubernetes](https://github.com/cncf/k8s-conformance/#certified-kubernetes) providers.
 -->
-[Kubernetes 合作伙伴](https://kubernetes.io/partners/#conformance) 包括一个 [已认证的 Kubernetes](https://github.com/cncf/k8s-conformance/#certified-kubernetes) 提供商列表。
-
-
+[Kubernetes 合作伙伴](https://kubernetes.io/zh/partners/#kcsp) 包括一个 [已认证的 Kubernetes](https://github.com/cncf/k8s-conformance/#certified-kubernetes) 提供商列表。

From 5a90349b23caf669c21e098d2ef92e7865ed82a9 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Mon, 31 Aug 2020 11:14:27 +0800
Subject: [PATCH 152/496] Update resource-bin-packing.md

---
 content/zh/docs/concepts/configuration/resource-bin-packing.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/configuration/resource-bin-packing.md b/content/zh/docs/concepts/configuration/resource-bin-packing.md
index dd4584c989..4b155ba9f9 100644
--- a/content/zh/docs/concepts/configuration/resource-bin-packing.md
+++ b/content/zh/docs/concepts/configuration/resource-bin-packing.md
@@ -223,7 +223,7 @@ NodeScore   =  (7 * 5) + (5 * 1) + (3 * 3) / (5 + 1 + 3)
 
 intel.com/foo  = resourceScoringFunction((2+2),8)
                = (100 - ((8-4)*100/8)
-               = (100 - 25)
+               = (100 - 50)
                = 50
                = rawScoringFunction(50)
                = 5

From 21422ad27a19cc1c4a3bfa861dce0e2428cc3283 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sun, 30 Aug 2020 20:42:15 -0700
Subject: [PATCH 153/496] update chinese page high-availability

---
 .../tools/kubeadm/high-availability.md                 | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
index 3703563d4b..68003f8445 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
@@ -77,8 +77,8 @@ For both methods you need this infrastructure:
 -->
 对于这两种方法，您都需要以下基础设施：
 
-- 配置三台机器[kubeadm 的最低要求](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin)给主节点
-- 配置三台机器 [kubeadm 的最低要求](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) 给工作节点
+- 配置三台机器 [kubeadm 的最低要求](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) 给主节点
+- 配置三台机器 [kubeadm 的最低要求](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) 给工作节点
 - 在集群中，所有计算机之间的完全网络连接（公网或私网）
 - 所有机器上的 sudo 权限
 - 每台设备对系统中所有节点的 SSH 访问
@@ -129,7 +129,7 @@ option. Your cluster requirements may need a different configuration.
 
     - Make sure the address of the load balancer always matches
       the address of kubeadm's `ControlPlaneEndpoint`.
-      
+
     - Read the [Options for Software Load Balancing](https://github.com/kubernetes/kubeadm/blob/master/docs/ha-considerations.md#options-for-software-load-balancing)
       guide for more details.
 -->
@@ -143,7 +143,7 @@ option. Your cluster requirements may need a different configuration.
     - 负载均衡器必须能够在 apiserver 端口上与所有控制平面节点通信。它还必须允许其监听端口的传入流量。
 
     - 确保负载均衡器的地址始终匹配 kubeadm 的 `ControlPlaneEndpoint` 地址。
-    
+
     - 阅读[软件负载平衡选项指南](https://github.com/kubernetes/kubeadm/blob/master/docs/ha-considerations.md#options-for-software-load-balancing)以获取更多详细信息。
 
 <!--
@@ -731,5 +731,3 @@ the creation of additional nodes could fail due to a lack of required SANs.
     mv /home/${USER}/etcd-ca.crt /etc/kubernetes/pki/etcd/ca.crt
     mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key
     ```
-
-

From 45caa32f9f1293982dcda505a08959f21cb4d8ca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Max=20K=C3=B6rb=C3=A4cher?= <max@koerbaecher.io>
Date: Mon, 31 Aug 2020 08:51:31 +0200
Subject: [PATCH 154/496] fixed grammar

---
 ...20-09-02-scaling-kubernetes-networking-endpointslices.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index c4c87ef800..b8e4cc186c 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -9,10 +9,10 @@ slug: scaling-kubernetes-networking-with-endpointslices
 
 EndpointSlices are an exciting new API that provides a scalable and extensible alternative to the Endpoints API. EndpointSlices track IP addresses, ports, readiness, and topology information for Pods backing a Service.
 
-In Kubernetes 1.19 this feature will be enabled by default with kube-proxy reading from [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It will also enable significant new features in future Kubernetes releases like Topology Aware Routing.
+In Kubernetes 1.19 this feature is be enabled by default with kube-proxy reading from [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It also enables significant new features in future Kubernetes releases like Topology Aware Routing.
 
 ## Scalability Limitations of the Endpoints API 
-With the Endpoints API, there was only one Endpoint resource for a Service. That meant that it needed to be able to store IP addresses and ports (network endpoints) for every Pod that was backing the corresponding Service. This resulted in huge API resources. To compound this problem, kube-proxy was running on every node and watching for any updates to Endpoints resources. If even a single network endpoint changed in an Endpoints resource, the whole object would have to be sent to each of those instances of kube-proxy.
+With the Endpoints API, there was only one Endpoints resource for a Service. That meant that it needed to be able to store IP addresses and ports (network endpoints) for every Pod that was backing the corresponding Service. This resulted in huge API resources. To compound this problem, kube-proxy was running on every node and watching for any updates to Endpoints resources. If even a single network endpoint changed in an Endpoints resource, the whole object would have to be sent to each of those instances of kube-proxy.
 
 A further limitation of the Endpoints API is that it limits the number of network endpoints that can be tracked for a Service. The default size limit for an object stored in etcd is 1.5MB. In some cases that can limit an Endpoints resource to 5,000 Pod IPs. This is not an issue for most users, but it becomes a significant problem for users with Services approaching this size.
 
@@ -34,7 +34,7 @@ Potentially more significant, now that all Pod IPs for a Service don't need to b
 All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale to at least 10 times any previous limitations.
 
 ## EndpointSlices enable new functionality
-As a new API, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This will include dual-stack Services, topology aware routing, and endpoint subsetting.
+Introduced as an alpha feature in Kubernetes v1.18, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This could include dual-stack Services, topology aware routing, and endpoint subsetting.
 
 Dual-Stack Services are an exciting new feature that has been in development alongside EndpointSlices. They will utilize both IPv4 and IPv6 addresses for Services and rely on the addressType field on EndpointSlices to track these addresses by IP family. 
 

From da48b120c40447c79c8b8ee92d8a0f4d81783bb8 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Mon, 31 Aug 2020 15:59:21 +0800
Subject: [PATCH 155/496] Update nodes.md

---
 content/zh/docs/concepts/architecture/nodes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/architecture/nodes.md b/content/zh/docs/concepts/architecture/nodes.md
index 00e221aec1..a277713bf4 100644
--- a/content/zh/docs/concepts/architecture/nodes.md
+++ b/content/zh/docs/concepts/architecture/nodes.md
@@ -381,7 +381,7 @@ You may read more about capacity and allocatable resources while learning how
 to [reserve compute resources](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable) on a Node.
 -->
 可以在学习如何在节点上[预留计算资源](/zh/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)
-的时了解有关容量和可分配资源的更多信息。
+的时候了解有关容量和可分配资源的更多信息。
 
 <!--
 ### Info

From 3e3de65859e0e4c4df2073ae9f8991a38b3449fb Mon Sep 17 00:00:00 2001
From: alec <alecli@google.com>
Date: Mon, 31 Aug 2020 17:21:32 +0900
Subject: [PATCH 156/496] Update endpoint-slices.md

Fix a typo
---
 .../en/docs/concepts/services-networking/endpoint-slices.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/endpoint-slices.md b/content/en/docs/concepts/services-networking/endpoint-slices.md
index 5f2522ae7e..3a2d622fc4 100644
--- a/content/en/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/en/docs/concepts/services-networking/endpoint-slices.md
@@ -114,8 +114,8 @@ of the labels with the same names on the corresponding Node.
 Most often, the control plane (specifically, the endpoint slice
 {{< glossary_tooltip text="controller" term_id="controller" >}}) creates and
 manages EndpointSlice objects. There are a variety of other use cases for
-EndpointSlices, such as service mesh implementations, that could result in othe
-rentities or controllers managing additional sets of EndpointSlices.
+EndpointSlices, such as service mesh implementations, that could result in other
+entities or controllers managing additional sets of EndpointSlices.
 
 To ensure that multiple entities can manage EndpointSlices without interfering
 with each other, Kubernetes defines the

From 5729f1f6b2c3a6f2baf9d8be6213c26368f5bc55 Mon Sep 17 00:00:00 2001
From: Patrick Ohly <patrick.ohly@intel.com>
Date: Wed, 12 Aug 2020 14:03:59 +0200
Subject: [PATCH 157/496] blog: generic ephemeral volumes + storage capacity
 tracking

These are new alpha features coming in Kubernetes 1.19.
---
 .../2020-09-01-generic-ephemeral-volumes.md   | 394 ++++++++++++++++++
 1 file changed, 394 insertions(+)
 create mode 100644 content/en/blog/_posts/2020-09-01-generic-ephemeral-volumes.md

diff --git a/content/en/blog/_posts/2020-09-01-generic-ephemeral-volumes.md b/content/en/blog/_posts/2020-09-01-generic-ephemeral-volumes.md
new file mode 100644
index 0000000000..49b0d3b26f
--- /dev/null
+++ b/content/en/blog/_posts/2020-09-01-generic-ephemeral-volumes.md
@@ -0,0 +1,394 @@
+---
+layout: blog
+title: 'Ephemeral volumes with storage capacity tracking: EmptyDir on steroids'
+date: 2020-09-01
+slug: ephemeral-volumes-with-storage-capacity-tracking
+---
+
+**Author:** Patrick Ohly (Intel)
+
+Some applications need additional storage but don't care whether that
+data is stored persistently across restarts. For example, caching
+services are often limited by memory size and can move infrequently
+used data into storage that is slower than memory with little impact
+on overall performance. Other applications expect some read-only input
+data to be present in files, like configuration data or secret keys.
+
+Kubernetes already supports several kinds of such [ephemeral
+volumes](/docs/concepts/storage/ephemeral-volumes), but the
+functionality of those is limited to what is implemented inside
+Kubernetes.
+
+[CSI ephemeral volumes](https://kubernetes.io/blog/2020/01/21/csi-ephemeral-inline-volumes/)
+made it possible to extend Kubernetes with CSI
+drivers that provide light-weight, local volumes. These [*inject
+arbitrary states, such as configuration, secrets, identity, variables
+or similar
+information*](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/20190122-csi-inline-volumes.md#motivation).
+CSI drivers must be modified to support this Kubernetes feature,
+i.e. normal, standard-compliant CSI drivers will not work, and
+by design such volumes are supposed to be usable on whatever node
+is chosen for a pod.
+
+This is problematic for volumes which consume significant resources on
+a node or for special storage that is only available on some nodes.
+Therefore, Kubernetes 1.19 introduces two new alpha features for
+volumes that are conceptually more like the `EmptyDir` volumes:
+- [*generic* ephemeral volumes](/docs/concepts/storage/ephemeral-volumes#generic-ephemeral-volumes) and
+- [CSI storage capacity tracking](/docs/concepts/storage/storage-capacity).
+
+The advantages of the new approach are:
+- Storage can be local or network-attached.
+- Volumes can have a fixed size that applications are never able to exceed.
+- Works with any CSI driver that supports provisioning of persistent
+  volumes and (for capacity tracking) implements the CSI `GetCapacity` call.
+- Volumes may have some initial data, depending on the driver and
+  parameters.
+- All of the typical volume operations (snapshotting,
+  resizing, the future storage capacity tracking, etc.)
+  are supported.
+- The volumes are usable with any app controller that accepts
+  a Pod or volume specification.
+- The Kubernetes scheduler itself picks suitable nodes, i.e. there is
+  no need anymore to implement and configure scheduler extenders and
+  mutating webhooks.
+
+This makes generic ephemeral volumes a suitable solution for several
+use cases:
+
+# Use cases
+
+## Persistent Memory as DRAM replacement for memcached
+
+Recent releases of memcached added [support for using Persistent
+Memory](https://memcached.org/blog/persistent-memory/) (PMEM) instead
+of standard DRAM. When deploying memcached through one of the app
+controllers, generic ephemeral volumes make it possible to request a PMEM volume
+of a certain size from a CSI driver like
+[PMEM-CSI](https://intel.github.io/pmem-csi/).
+
+## Local LVM storage as scratch space
+
+Applications working with data sets that exceed the RAM size can
+request local storage with performance characteristics or size that is
+not met by the normal Kubernetes `EmptyDir` volumes. For example,
+[TopoLVM](https://github.com/cybozu-go/topolvm) was written for that
+purpose.
+
+## Read-only access to volumes with data
+
+Provisioning a volume might result in a non-empty volume:
+- [restore a snapshot](/docs/concepts/storage/persistent-volumes/#volume-snapshot-and-restore-volume-from-snapshot-support)
+- [cloning a volume](/docs/concepts/storage/volume-pvc-datasource)
+- [generic data populators](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/20200120-generic-data-populators.md)
+
+Such volumes can be mounted read-only.
+
+# How it works
+
+## Generic ephemeral volumes
+
+The key idea behind generic ephemeral volumes is that a new volume
+source, the so-called
+[`EphemeralVolumeSource`](/docs/reference/generated/kubernetes-api/#ephemeralvolumesource-v1alpha1-core)
+contains all fields that are needed to created a volume claim
+(historically called persistent volume claim, PVC). A new controller
+in the `kube-controller-manager` waits for Pods which embed such a
+volume source and then creates a PVC for that pod. To a CSI driver
+deployment, that PVC looks like any other, so no special support is
+needed.
+
+As long as these PVCs exist, they can be used like any other volume claim. In
+particular, they can be referenced as data source in volume cloning or
+snapshotting. The PVC object also holds the current status of the
+volume.
+
+Naming of the automatically created PVCs is deterministic: the name is
+a combination of Pod name and volume name, with a hyphen (`-`) in the
+middle. This deterministic naming makes it easier to
+interact with the PVC because one does not have to search for it once
+the Pod name and volume name are known. The downside is that the name might
+be in use already. This is detected by Kubernetes and then blocks Pod
+startup.
+
+To ensure that the volume gets deleted together with the pod, the
+controller makes the Pod the owner of the volume claim. When the Pod
+gets deleted, the normal garbage-collection mechanism also removes the
+claim and thus the volume.
+
+Claims select the storage driver through the normal storage class
+mechanism. Although storage classes with both immediate and late
+binding (aka `WaitForFirstConsumer`) are supported, for ephemeral
+volumes it makes more sense to use `WaitForFirstConsumer`: then Pod
+scheduling can take into account both node utilization and
+availability of storage when choosing a node. This is where the other
+new feature comes in.
+
+## Storage capacity tracking
+
+Normally, the Kubernetes scheduler has no information about where a
+CSI driver might be able to create a volume. It also has no way of
+talking directly to a CSI driver to retrieve that information. It
+therefore tries different nodes until it finds one where all volumes
+can be made available (late binding) or leaves it entirely to the
+driver to choose a location (immediate binding).
+
+The new [`CSIStorageCapacity` alpha
+API](/docs/reference/generated/kubernetes-api/v1.19/#csistoragecapacity-v1alpha1-storage-k8s-io)
+allows storing the necessary information in etcd where it is available to the
+scheduler. In contrast to support for generic ephemeral volumes,
+storage capacity tracking must be [enabled when deploying a CSI
+driver](https://github.com/kubernetes-csi/external-provisioner/blob/master/README.md#capacity-support):
+the `external-provisioner` must be told to publish capacity
+information that it then retrieves from the CSI driver through the normal
+`GetCapacity` call.
+<!-- TODO: update the link with a revision once https://github.com/kubernetes-csi/external-provisioner/pull/450 is merged -->
+
+When the Kubernetes scheduler needs to choose a node for a Pod with an
+unbound volume that uses late binding and the CSI driver deployment
+has opted into the feature by setting the [`CSIDriver.storageCapacity`
+flag](/docs/reference/generated/kubernetes-api/v1.19/#csidriver-v1beta1-storage-k8s-io)
+flag, the scheduler automatically filters out nodes that do not have
+access to enough storage capacity. This works for generic ephemeral
+and persistent volumes but *not* for CSI ephemeral volumes because the
+parameters of those are opaque for Kubernetes.
+
+As usual, volumes with immediate binding get created before scheduling
+pods, with their location chosen by the storage driver. Therefore, the
+external-provisioner's default configuration skips storage
+classes with immediate binding as the information wouldn't be used anyway.
+
+Because the Kubernetes scheduler must act on potentially outdated
+information, it cannot be ensured that the capacity is still available
+when a volume is to be created. Still, the chances that it can be created
+without retries should be higher.
+
+# Security
+
+## CSIStorageCapacity
+
+CSIStorageCapacity objects are namespaced. When deploying each CSI
+drivers in its own namespace and, as recommended, limiting the RBAC
+permissions for CSIStorageCapacity to that namespace, it is
+always obvious where the data came from. However, Kubernetes does
+not check that and typically drivers get installed in the same
+namespace anyway, so ultimately drivers are *expected to behave* and
+not publish incorrect data.
+
+## Generic ephemeral volumes
+
+If users have permission to create a Pod (directly or indirectly),
+then they can also create generic ephemeral volumes even when they do
+not have permission to create a volume claim. That's because RBAC
+permission checks are applied to the controller which creates the
+PVC, not the original user. This is a fundamental change that must be
+[taken into
+account](/docs/concepts/storage/ephemeral-volumes#security) before
+enabling the feature in clusters where untrusted users are not
+supposed to have permission to create volumes.
+
+# Example
+
+A [special branch](https://github.com/intel/pmem-csi/commits/kubernetes-1-19-blog-post)
+in PMEM-CSI contains all the necessary changes to bring up a
+Kubernetes 1.19 cluster inside QEMU VMs with both alpha features
+enabled. The PMEM-CSI driver code is used unchanged, only the
+deployment was updated.
+
+On a suitable machine (Linux, non-root user can use Docker - see the
+[QEMU and
+Kubernetes](https://intel.github.io/pmem-csi/0.7/docs/autotest.html#qemu-and-kubernetes)
+section in the PMEM-CSI documentation), the following commands bring
+up a cluster and install the PMEM-CSI driver:
+
+```console
+git clone --branch=kubernetes-1-19-blog-post https://github.com/intel/pmem-csi.git
+cd pmem-csi
+export TEST_KUBERNETES_VERSION=1.19 TEST_FEATURE_GATES=CSIStorageCapacity=true,GenericEphemeralVolume=true TEST_PMEM_REGISTRY=intel
+make start && echo && test/setup-deployment.sh
+```
+
+If all goes well, the output contains the following usage
+instructions:
+
+```
+The test cluster is ready. Log in with [...]/pmem-csi/_work/pmem-govm/ssh.0, run
+kubectl once logged in.  Alternatively, use kubectl directly with the
+following env variable:
+   KUBECONFIG=[...]/pmem-csi/_work/pmem-govm/kube.config
+
+secret/pmem-csi-registry-secrets created
+secret/pmem-csi-node-secrets created
+serviceaccount/pmem-csi-controller created
+...
+To try out the pmem-csi driver ephemeral volumes:
+   cat deploy/kubernetes-1.19/pmem-app-ephemeral.yaml |
+   [...]/pmem-csi/_work/pmem-govm/ssh.0 kubectl create -f -
+```
+
+The CSIStorageCapacity objects are not meant to be human-readable, so
+some post-processing is needed. The following Golang template filters
+all objects by the storage class that the example uses and prints the
+name, topology and capacity:
+
+```console
+kubectl get \
+        -o go-template='{{range .items}}{{if eq .storageClassName "pmem-csi-sc-late-binding"}}{{.metadata.name}} {{.nodeTopology.matchLabels}} {{.capacity}}
+{{end}}{{end}}' \
+        csistoragecapacities
+```
+
+```
+csisc-2js6n map[pmem-csi.intel.com/node:pmem-csi-pmem-govm-worker2] 30716Mi
+csisc-sqdnt map[pmem-csi.intel.com/node:pmem-csi-pmem-govm-worker1] 30716Mi
+csisc-ws4bv map[pmem-csi.intel.com/node:pmem-csi-pmem-govm-worker3] 30716Mi
+```
+
+One individual object has the following content:
+
+```console
+kubectl describe csistoragecapacities/csisc-6cw8j
+```
+
+```
+Name:         csisc-sqdnt
+Namespace:    default
+Labels:       <none>
+Annotations:  <none>
+API Version:  storage.k8s.io/v1alpha1
+Capacity:     30716Mi
+Kind:         CSIStorageCapacity
+Metadata:
+  Creation Timestamp:  2020-08-11T15:41:03Z
+  Generate Name:       csisc-
+  Managed Fields:
+    ...
+  Owner References:
+    API Version:     apps/v1
+    Controller:      true
+    Kind:            StatefulSet
+    Name:            pmem-csi-controller
+    UID:             590237f9-1eb4-4208-b37b-5f7eab4597d1
+  Resource Version:  2994
+  Self Link:         /apis/storage.k8s.io/v1alpha1/namespaces/default/csistoragecapacities/csisc-sqdnt
+  UID:               da36215b-3b9d-404a-a4c7-3f1c3502ab13
+Node Topology:
+  Match Labels:
+    pmem-csi.intel.com/node:  pmem-csi-pmem-govm-worker1
+Storage Class Name:           pmem-csi-sc-late-binding
+Events:                       <none>
+```
+
+Now let's create the example app with one generic ephemeral
+volume. The `pmem-app-ephemeral.yaml` file contains:
+
+```yaml
+# This example Pod definition demonstrates
+# how to use generic ephemeral inline volumes
+# with a PMEM-CSI storage class.
+kind: Pod
+apiVersion: v1
+metadata:
+  name: my-csi-app-inline-volume
+spec:
+  containers:
+    - name: my-frontend
+      image: intel/pmem-csi-driver-test:v0.7.14
+      command: [ "sleep", "100000" ]
+      volumeMounts:
+      - mountPath: "/data"
+        name: my-csi-volume
+  volumes:
+  - name: my-csi-volume
+    ephemeral:
+      volumeClaimTemplate:
+        spec:
+          accessModes:
+          - ReadWriteOnce
+          resources:
+            requests:
+              storage: 4Gi
+          storageClassName: pmem-csi-sc-late-binding
+```
+
+After creating that as shown in the usage instructions above, we have one additional Pod and PVC:
+
+```console
+kubectl get pods/my-csi-app-inline-volume -o wide
+```
+
+```
+NAME                       READY   STATUS    RESTARTS   AGE     IP          NODE                         NOMINATED NODE   READINESS GATES
+my-csi-app-inline-volume   1/1     Running   0          6m58s   10.36.0.2   pmem-csi-pmem-govm-worker1   <none>           <none>
+```
+
+```console
+kubectl get pvc/my-csi-app-inline-volume-my-csi-volume
+```
+
+```
+NAME                                     STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS               AGE
+my-csi-app-inline-volume-my-csi-volume   Bound    pvc-c11eb7ab-a4fa-46fe-b515-b366be908823   4Gi        RWO            pmem-csi-sc-late-binding   9m21s
+```
+
+That PVC is owned by the Pod:
+
+```console
+kubectl get -o yaml pvc/my-csi-app-inline-volume-my-csi-volume
+```
+
+```
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  annotations:
+    pv.kubernetes.io/bind-completed: "yes"
+    pv.kubernetes.io/bound-by-controller: "yes"
+    volume.beta.kubernetes.io/storage-provisioner: pmem-csi.intel.com
+    volume.kubernetes.io/selected-node: pmem-csi-pmem-govm-worker1
+  creationTimestamp: "2020-08-11T15:44:57Z"
+  finalizers:
+  - kubernetes.io/pvc-protection
+  managedFields:
+    ...
+  name: my-csi-app-inline-volume-my-csi-volume
+  namespace: default
+  ownerReferences:
+  - apiVersion: v1
+    blockOwnerDeletion: true
+    controller: true
+    kind: Pod
+    name: my-csi-app-inline-volume
+    uid: 75c925bf-ca8e-441a-ac67-f190b7a2265f
+...
+```
+
+Eventually, the storage capacity information for `pmem-csi-pmem-govm-worker1` also gets updated:
+
+```
+csisc-2js6n map[pmem-csi.intel.com/node:pmem-csi-pmem-govm-worker2] 30716Mi
+csisc-sqdnt map[pmem-csi.intel.com/node:pmem-csi-pmem-govm-worker1] 26620Mi
+csisc-ws4bv map[pmem-csi.intel.com/node:pmem-csi-pmem-govm-worker3] 30716Mi
+```
+
+If another app needs more than 26620Mi, the Kubernetes
+scheduler will not pick `pmem-csi-pmem-govm-worker1` anymore.
+
+
+# Next steps
+
+Both features are under development. Several open questions were
+already raised during the alpha review process. The two enhancement
+proposals document the work that will be needed for migration to beta and what
+alternatives were already considered and rejected:
+
+* [KEP-1698: generic ephemeral inline
+volumes](https://github.com/kubernetes/enhancements/blob/9d7a75d/keps/sig-storage/1698-generic-ephemeral-volumes/README.md)
+* [KEP-1472: Storage Capacity
+Tracking](https://github.com/kubernetes/enhancements/tree/9d7a75d/keps/sig-storage/1472-storage-capacity-tracking)
+
+Your feedback is crucial for driving that development. SIG-Storage
+[meets
+regularly](https://github.com/kubernetes/community/tree/master/sig-storage#meetings)
+and can be reached via [Slack and a mailing
+list](https://github.com/kubernetes/community/tree/master/sig-storage#contact).

From 9da30f4876d61ab5f2295430a516532646ad4618 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Mon, 31 Aug 2020 19:18:46 +0800
Subject: [PATCH 158/496] Update pod-security-policy.md

---
 content/zh/docs/concepts/policy/pod-security-policy.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/policy/pod-security-policy.md b/content/zh/docs/concepts/policy/pod-security-policy.md
index 38c97dcc6e..48073fb1b2 100644
--- a/content/zh/docs/concepts/policy/pod-security-policy.md
+++ b/content/zh/docs/concepts/policy/pod-security-policy.md
@@ -380,7 +380,7 @@ The name of a PodSecurityPolicy object must be a valid
 -->
 ### 创建一个策略和一个 Pod
 
-在一个文件中定一个示例的 PodSecurityPolicy 对象。
+在一个文件中定义一个示例的 PodSecurityPolicy 对象。
 这里的策略只是用来禁止创建有特权要求的 Pods。
 PodSecurityPolicy 对象的名称必须是合法的
 [DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)。

From 0319dd70d8b2a2d826d5b6b01dbf051660bfe764 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Mon, 31 Aug 2020 19:21:52 +0800
Subject: [PATCH 159/496] Update assign-pod-node.md

---
 content/zh/docs/concepts/scheduling-eviction/assign-pod-node.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/zh/docs/concepts/scheduling-eviction/assign-pod-node.md
index 29dec9c016..9bcc43260a 100644
--- a/content/zh/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/zh/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -24,7 +24,7 @@ that a pod ends up on a machine with an SSD attached to it, or to co-locate pods
 services that communicate a lot into the same availability zone.
 -->
 
-你可以约束一个 {{< glossary_tooltip text="Pod" term_id="pod" >}} 只能在特定的 {{< glossary_tooltip text="Node(s)" term_id="node" >}} 上运行，或者优先运行在特定的节点上。有几种方法可以实现这点，推荐的方法都是用[标签选择器](/zh/docs/concepts/overview/working-with-objects/labels/)来进行选择。通常这样的约束不是必须的，因为调度器将自动进行合理的放置（比如，将 pod 分散到节点上，而不是将 pod 放置在可用资源不足的节点上等等），但在某些情况下，你可以需要更多控制 pod 停靠的节点，例如，确保 pod 最终落在连接了 SSD 的机器上，或者将来自两个不同的服务且有大量通信的 pod 放置在同一个可用区。
+你可以约束一个 {{< glossary_tooltip text="Pod" term_id="pod" >}} 只能在特定的 {{< glossary_tooltip text="Node(s)" term_id="node" >}} 上运行，或者优先运行在特定的节点上。有几种方法可以实现这点，推荐的方法都是用[标签选择器](/zh/docs/concepts/overview/working-with-objects/labels/)来进行选择。通常这样的约束不是必须的，因为调度器将自动进行合理的放置（比如，将 pod 分散到节点上，而不是将 pod 放置在可用资源不足的节点上等等），但在某些情况下，你可能需要更多控制 pod 停靠的节点，例如，确保 pod 最终落在连接了 SSD 的机器上，或者将来自两个不同的服务且有大量通信的 pod 放置在同一个可用区。
 
 <!-- body -->
 

From 5c81a9277505271dc4a18200778b1a3902771c4a Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Mon, 31 Aug 2020 12:43:50 +0100
Subject: [PATCH 160/496] Corrects inconsistency in name

---
 ...20-08-25-gsoc‘20 -building-operators-for-cluster-addons.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
index 4afb0268cb..e496315dc9 100644
--- a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
+++ b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -5,7 +5,7 @@ date: 2020-08-25
 slug: gsoc20-building-operators-for-cluster-addons
 ---
 
-**Author**: Onyekwere Somtochi
+**Author**: Somtochi Onyekwere
 
 # Introduction
 
@@ -116,4 +116,4 @@ If you are interested in cluster addons and finding out more on addon operators,
 
 ---
 
-_[Onyekwere Somtochi](https://twitter.com/SomtochiAma) is a software engineer that loves contributing to open-source and exploring cloud native solutions._
+_[Somtochi Onyekwere](https://twitter.com/SomtochiAma) is a software engineer that loves contributing to open-source and exploring cloud native solutions._

From 28d79ae1e8025c747556e2242ecfe772445c8d9c Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Tue, 25 Aug 2020 20:04:51 +0800
Subject: [PATCH 161/496] [zh] Translate
 tasks/tls/manual-rotation-of-ca-certificates.md

---
 .../tls/manual-rotation-of-ca-certificates.md | 278 ++++++++++++++++++
 1 file changed, 278 insertions(+)
 create mode 100644 content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md

diff --git a/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md b/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md
new file mode 100644
index 0000000000..6816bdd6fc
--- /dev/null
+++ b/content/zh/docs/tasks/tls/manual-rotation-of-ca-certificates.md
@@ -0,0 +1,278 @@
+---
+title: 手动轮换 CA 证书
+min-kubernetes-server-version: v1.13
+content_type: task
+---
+<!--
+title: Manual Rotation of CA Certificates
+min-kubernetes-server-version: v1.13
+content_type: task
+-->
+<!-- overview -->
+
+<!--
+This page shows how to manually rotate the certificate authority (CA) certificates.
+-->
+本页展示如何手动轮换证书机构（CA）证书。
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+<!--
+- For more information about authentication in Kubernetes, see [Authenticating](/docs/reference/access-authn-authz/authentication).
+- For more information about best practices for CA certificates, see [Single root CA](/docs/setup/best-practices/certificates/#single-root-ca).
+-->
+- 要了解 Kubernetes 中用户认证的更多信息，参阅
+  [认证](/zh/docs/reference/access-authn-authz/authentication)；
+- 要了解与 CA 证书最佳实践有关的更多信息，参阅[单根 CA](/zh/docs/setup/best-practices/certificates/#single-root-ca)。
+
+<!-- steps -->
+
+<!--
+## Rotate the CA certificates manually
+-->
+## 手动轮换 CA 证书  {#rotate-the-ca-certificates-manually}
+
+<!--
+Make sure to back up your certificate directory along with configuration files and any other necessary files.
+
+This approach assumes operation of the Kubernetes control plane in a HA configuration with multiple API servers.
+Graceful termination of the API server is also assumed so clients can cleanly disconnect from one API server and reconnect to another.
+
+Configurations with a single API server will experience unavailability while the API server is being restarted.
+-->
+{{< caution >}}
+确保备份你的证书目录、配置文件以及其他必要文件。
+
+这里的方法假定 Kubernetes 的控制面通过运行多个 API 服务器以高可用配置模式运行。
+另一假定是 API 服务器可体面地终止，因而客户端可以彻底地与一个 API 服务器断开
+连接并连接到另一个 API 服务器。
+
+如果集群中只有一个 API 服务器，则在 API 服务器重启期间会经历服务中断期。
+{{< /caution >}}
+
+<!--
+1. Distribute the new CA certificates and private keys
+   (ex: `ca.crt`, `ca.key`, `front-proxy-ca.crt`, and `front-proxy-ca.key`)
+   to all your control plane nodes in the Kubernetes certificates directory.
+-->
+1. 将新的 CA 证书和私钥（例如：`ca.crt`、`ca.key`、`front-proxy-ca.crt` 和
+   `front-proxy-client.key`）分发到所有控制面节点，放在其 Kubernetes 证书目录下。
+
+<!--
+1. Update *Kubernetes controller manager's* `-root-ca-file` to include both old and new CA and restart controller manager.
+
+   Any service account created after this point will get secrets that include both old and new CAs.
+
+   Remove the flag `-client-ca-file` from the *Kubernetes controller manager* configuration.
+   You can also replace the existing client CA file or change this configuration item to reference a new, updated CA.
+   [Issue 1350](https://github.com/kubernetes/kubeadm/issues/1350) tracks an issue with *Kubernetes controller manager* being unable to accept a CA bundle.
+-->
+2. 更新控制器管理器的 `--root-ca-file` 标志，使之同时包含老的和新的 CA，之后重启控制器管理器。
+
+   自此刻起，所创建的所有服务账号都会获得同时包含老的 CA 和新的 CA 的 Secret。
+
+   {{< note >}}
+   去掉控制器管理器的 `-client-ca-file` 标志。
+   你也可以替换客户端 CA 文件或者将此配置条目指向新的、更新过的 CA。
+   [Issue 1350](https://github.com/kubernetes/kubeadm/issues/1350) 用来跟踪
+   控制器管理器无法接受 CA 包的问题。
+   {{< /note >}}
+
+<!--
+1. Update all service account tokens to include both old and new CA certificates.
+
+   If any pods are started before new CA is used by API servers, they will get this update and trust both old and new CAs.
+-->
+3. 更新所有服务账号令牌，使之同时包含老的和新的 CA 证书。
+
+   如果在 API 服务器使用新的 CA 之前启动了新的 Pod，这些 Pod
+   也会获得此更新并且同时信任老的和新的 CA 证书。
+
+   ```shell
+   base64_encoded_ca="$(base64 <path to file containing both old and new CAs>)"
+
+   for namespace in $(kubectl get ns --no-headers | awk '{print $1}'); do
+       for token in $(kubectl get secrets --namespace "$namespace" --field-selector type=kubernetes.io/service-account-token -o name); do
+           kubectl get $token --namespace "$namespace" -o yaml | \
+             /bin/sed "s/\(ca.crt:\).*/\1 ${base64_encoded_ca}" | \
+             kubectl apply -f -
+       done
+   done
+   ```
+<!--
+1. Restart all pods using in-cluster configs (ex: kube-proxy, coredns, etc) so they can use the updated certificate authority data from *ServiceAccount* secrets.
+
+   * Make sure coredns, kube-proxy and other pods using in-cluster configs are working as expected.
+
+1. Append the both old and new CA to the file against `-client-ca-file` and `-kubelet-certificate-authority` flag in the `kube-apiserver` configuration.
+
+1. Append the both old and new CA to the file against `-client-ca-file` flag in the `kube-scheduler` configuration.
+-->
+4. 重启所有使用集群内配置的 Pods（例如：`kube-proxy`、`coredns` 等），以便这些 Pod 能够使用
+   来自服务账号 Secret 中的、已更新的证书机构数据。
+
+   * 确保 `coredns`、`kube-proxy` 和其他使用集群内配置的 Pod 都正按预期方式工作。
+
+5. 将老的和新的 CA 都追加到 `kube-apiserver` 配置的 `--client-ca-file` 和 `--kubelet-certificate-authority` 标志所指的文件。
+
+6. 将老的和新的 CA 都追加到 `kube-scheduler` 配置的 `--client-ca-file` 标志所指的文件。
+
+<!--
+1. Update certificates for user accounts by replacing the content of `client-certificate-data` and `client-key-data` respectively.
+
+   For information about creating certificates for individual user accounts, see
+   [Configure certificates for user accounts](/docs/setup/best-practices/certificates/#configure-certificates-for-user-accounts).
+
+   Additionally, update the `certificate-authority-data` section in the kubeconfig files,
+   respectively with Base64-encoded old and new certificate authority data
+-->
+7. 通过替换 `client-certificate-data` 和 `client-key-data`
+   中的内容，更新用户账号的证书。
+
+   有关为独立用户账号创建证书的更多信息，可参阅
+   [为用户帐号配置证书](/zh/docs/setup/best-practices/certificates/#configure-certificates-for-user-accounts)。
+
+   另外，还要更新 kubeconfig 文件中的 `certificate-authority-data`
+   节，使之包含 Base64 编码的老的和新的证书机构数据。
+<!--
+1. Follow below steps in a rolling fashion.
+
+   1. Restart any other *[aggregated api servers](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)*
+      or *webhook handlers* to trust the new CA certificates.
+
+   1. Restart the kubelet by update the file against `clientCAFile` in kubelet configuration and
+      `certificate-authority-data` in kubelet.conf to use both the old and new CA on all nodes.
+
+      If your kubelet is not using client certificate rotation update `client-certificate-data` and
+      `client-key-data` in kubelet.conf on all nodes along with the kubelet client certificate file
+      usually found in `/var/lib/kubelet/pki`.
+-->
+8. 遵循下列步骤执行滚动更新
+
+   1. 重新启动所有其他[被聚合的 API 服务器](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+      或者 *Webhook 处理程序*，使之信任新的 CA 证书。
+
+   2. 在所有节点上更新 kubelet 配置中的 `clientCAFile` 所指文件以及 kubelet.conf 中的
+      `certificate-authority-data` 并重启 kubelet 以同时使用老的和新的 CA 证书。
+
+      如果你的 kubelet 并未使用客户端证书轮换，则在所有节点上更新 kubelet.conf 中
+      `client-certificate-data` 和 `client-key-data` 以及 kubelet
+      客户端证书文件（通常位于 `/var/lib/kubelet/pki` 目录下）
+
+   <!--
+   1. Restart API servers with the certificates (`apiserver.crt`, `apiserver-kubelet-client.crt` and
+      `front-proxy-client.crt`) signed by new CA.
+      You can use the existing private keys or new private keys.
+      If you changed the private keys then update these in the Kubernetes certificates directory as well.
+   -->
+   3. 使用用新的 CA 签名的证书
+     （`apiserver.crt`、`apiserver-kubelet-client.crt` 和 `front-proxy-client.crt`）
+      来重启 API 服务器。
+      你可以使用现有的私钥，也可以使用新的私钥。
+      如果你改变了私钥，则要将更新的私钥也放到 Kubernetes 证书目录下。
+
+      由于 Pod 既信任老的 CA 也信任新的 CA，Pod 中的客户端会经历短暂的连接断开状态，
+      之后再连接到使用新的 CA 所签名的证书的新的 API 服务器。
+
+      <!--
+      * Restart Scheduler to use the new CAs.
+      * Make sure control plane components logs no TLS errors.
+      -->
+      * 重启调度器以使用新的 CA 证书。
+      * 确保控制面组件的日志中没有 TLS 相关的错误信息。
+
+      <!--
+      To generate certificates and private keys for your cluster using the `openssl`
+      command line tool, see [Certificates (`openssl`)](/docs/concepts/cluster-administration/certificates/#openssl).
+      You can also use [`cfssl`](/docs/concepts/cluster-administration/certificates/#cfssl).
+      -->
+      {{< note >}}
+      要使用 `openssl` 命令行为集群生成新的证书和私钥，可参阅
+      [证书（`openssl`）](/zh/docs/concepts/cluster-administration/certificates/#openssl)。
+      你也可以使用[`cfssl`](/zh/docs/concepts/cluster-administration/certificates/#cfssl).
+      {{< /note >}}
+
+   <!--
+   1. Annotate any Daemonsets and Deployments to trigger pod replacement in a safer rolling fashion.
+
+      Example:
+   -->
+   4. 为 Daemonset 和 Deployment 添加注解，从而触发较安全的滚动更新，替换 Pod。
+
+      示例：
+
+      ```shell
+      for namespace in $(kubectl get namespace -o jsonpath='{.items[*].metadata.name}'); do
+          for name in $(kubectl get deployments -n $namespace -o jsonpath='{.items[*].metadata.name}'); do
+              kubectl patch deployment -n ${namespace} ${name} -p '{"spec":{"template":{"metadata":{"annotations":{"ca-rotation": "1"}}}}}';
+          done
+          for name in $(kubectl get daemonset -n $namespace -o jsonpath='{.items[*].metadata.name}'); do
+              kubectl patch daemonset -n ${namespace} ${name} -p '{"spec":{"template":{"metadata":{"annotations":{"ca-rotation": "1"}}}}}';
+          done
+      done
+      ```
+
+      <!--
+      To limit the number of concurrent disruptions that your application experiences,
+      see [configure pod disruption budget](/docs/tasks/run-application/configure-pdb/).
+      -->
+      {{< note >}}
+      要限制应用可能受到的并发干扰数量，可以参阅
+      [配置 Pod 干扰预算](/zh/docs/tasks/run-application/configure-pdb/).
+      {{< /note >}}
+<!--
+1. If your cluster is using bootstrap tokens to join nodes, update the ConfigMap `cluster-info` in the `kube-public` namespace with new CA.
+-->
+9. 如果你的集群使用启动引导令牌来添加节点，则需要更新 `kube-public` 名字空间下的
+   ConfigMap `cluster-info`，使之包含新的 CA 证书。
+
+   ```shell
+   base64_encoded_ca="$(base64 /etc/kubernetes/pki/ca.crt)"
+
+   kubectl get cm/cluster-info --namespace kube-public -o yaml | \
+       /bin/sed "s/\(certificate-authority-data:\).*/\1 ${base64_encoded_ca}" | \
+       kubectl apply -f -
+   ```
+<!--
+1. Verify the cluster functionality.
+
+   1. Validate the logs from control plane components, along with the kubelet and the
+      kube-proxy are not throwing any tls errors, see
+      [looking at the logs](/docs/tasks/debug-application-cluster/debug-cluster/#looking-at-logs).
+
+   1. Validate logs from any aggregated api servers and pods using in-cluster config.
+-->
+10. 验证集群的功能正常
+
+    1. 验证控制面组件的日志，以及 `kubelet` 和 `kube-proxy` 的日志，确保其中没有
+       抛出 TLS 错误，参阅
+       [查看日志](/zh/docs/tasks/debug-application-cluster/debug-cluster/#looking-at-logs).
+
+    2. 验证被聚合的 API 服务器的日志，以及所有使用集群内配置的 Pod 的日志。
+
+<!--
+1. Once the cluster functionality is successfully verified:
+
+   1. Update all service account tokens to include new CA certificate only.
+
+      * All pods using an in-cluster kubeconfig will eventually need to be restarted to pick up the new SA secret for the old CA to be completely untrusted.
+
+   1. Restart the control plane components by removing the old CA from the kubeconfig files and the files against `--client-ca-file`, `--root-ca-file` flags resp.
+
+   1. Restart kubelet by removing the old CA from file against the `clientCAFile` flag and kubelet kubeconfig file.
+-->
+11. 完成集群功能的检查之后：
+
+    1. 更新所有的服务账号令牌，使之仅包含新的 CA 证书。
+
+       * 使用集群内 kubeconfig 的 Pod 最终也需要被重启，以获得新的服务账号 Secret
+         数据，进而不再信任老的 CA 证书。
+
+    1. 从 kubeconfig 文件和 `--client-ca-file` 以及 `--root-ca-file` 标志所指向的文件
+       中去除老的 CA 数据，之后重启控制面组件。
+
+    1. 重启 kubelet，移除 `clientCAFile` 标志所指向的文件以及 kubelet kubeconfig 文件中
+       的老的 CA 数据。
+

From dd9d26c6203eb0795fb279e70a4cb2e65048be79 Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Tue, 30 Jun 2020 17:50:47 +0800
Subject: [PATCH 162/496] update manage-hugepages page

---
 .../manage-hugepages/scheduling-hugepages.md  | 98 +++++++++++++------
 1 file changed, 66 insertions(+), 32 deletions(-)

diff --git a/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md b/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md
index 9bb6292242..c6f6e5747e 100644
--- a/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md
+++ b/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md
@@ -18,10 +18,9 @@ content_type: task
 
 <!--
 Kubernetes supports the allocation and consumption of pre-allocated huge pages
-by applications in a Pod as a **GA** feature. This page describes how users
-can consume huge pages and the current limitations.
+by applications in a Pod. This page describes how users can consume huge pages.
 --->
-作为 **GA** 特性，Kubernetes 支持在 Pod 应用中使用预先分配的巨页。本文描述了用户如何使用巨页，以及当前的限制。
+Kubernetes 支持在 Pod 应用中使用预先分配的巨页。本文描述了用户如何使用巨页，以及当前的限制。
 
 
 
@@ -48,29 +47,70 @@ schedulable resource.
 
 <!--
 Huge pages can be consumed via container level resource requirements using the
-resource name `hugepages-<size>`, where size is the most compact binary notation
-using integer values supported on a particular node. For example, if a node
-supports 2048KiB page sizes, it will expose a schedulable resource
-`hugepages-2Mi`. Unlike CPU or memory, huge pages do not support overcommit. Note
-that when requesting hugepage resources, either memory or CPU resources must
-be requested as well.
+resource name `hugepages-<size>`, where `<size>` is the most compact binary
+notation using integer values supported on a particular node. For example, if a
+node supports 2048KiB and 1048576KiB page sizes, it will expose a schedulable
+resources `hugepages-2Mi` and `hugepages-1Gi`. Unlike CPU or memory, huge pages
+do not support overcommit. Note that when requesting hugepage resources, either
+memory or CPU resources must be requested as well.
+
+A pod may consume multiple huge page sizes in a single pod spec. In this case it
+must use `medium: HugePages-<hugepagesize>` notation for all volume mounts.
 --->
 
-用户可以通过在容器级别的资源需求中使用资源名称 `hugepages-<size>` 来使用巨页，其中的 size 是特定节点上支持的以整数值表示的最小二进制单位。 例如，如果节点支持 2048KiB 的页面规格， 它将暴露可供调度的资源 `hugepages-2Mi`。 与 CPU 或内存不同，巨页不支持过量使用（overcommit）。
-注意，在请求巨页资源时，还必须请求内存或 CPU 资源。
+用户可以通过在容器级别的资源需求中使用资源名称 `hugepages-<size>` 来使用巨页，其中的 size 是特定节点上支持的以整数值表示的最小二进制单位。 例如，如果一个节点支持 2048KiB 和 1048576KiB 页面大小，它将公开可调度的资源 `hugepages-2Mi` 和 `hugepages-1Gi`。与 CPU 或内存不同，巨页不支持过量使用（overcommit）。注意，在请求巨页资源时，还必须请求内存或 CPU 资源。
+
+同一 Pod 的 spec 中可能会消耗不同尺寸的巨页。在这种情况下，它必须对所有挂载卷使用 `medium: HugePages-<hugepagesize>` 标识。
 
 ```yaml
 apiVersion: v1
 kind: Pod
 metadata:
-  generateName: hugepages-volume-
+  name: huge-pages-example
 spec:
   containers:
-  - image: fedora:latest
+  - name: example
+    image: fedora:latest
+    command:
+    - sleep
+    - inf
+    volumeMounts:
+    - mountPath: /hugepages-2Mi
+      name: hugepage-2mi
+    - mountPath: /hugepages-1Gi
+      name: hugepage-1gi
+    resources:
+      limits:
+        hugepages-2Mi: 100Mi
+        hugepages-1Gi: 2Gi
+        memory: 100Mi
+      requests:
+        memory: 100Mi
+  volumes:
+  - name: hugepage-2mi
+    emptyDir:
+      medium: HugePages-2Mi
+  - name: hugepage-1gi
+    emptyDir:
+      medium: HugePages-1Gi
+```
+<!--
+A pod may use `medium: HugePages` only if it requests huge pages of one size.
+-->
+Pod 只有在请求同一大小的巨页时才使用 `medium：HugePages`。
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: huge-pages-example
+spec:
+  containers:
+  - name: example
+    image: fedora:latest
     command:
     - sleep
     - inf
-    name: example
     volumeMounts:
     - mountPath: /hugepages
       name: hugepage
@@ -89,8 +129,7 @@ spec:
 <!--
 - Huge page requests must equal the limits. This is the default if limits are
   specified, but requests are not.
-- Huge pages are isolated at a pod scope, container isolation is planned in a
-  future iteration.
+- Huge pages are isolated at a container scope, so each container has own limit on their cgroup sandbox as requested in a container spec.
 - EmptyDir volumes backed by huge pages may not consume more huge page memory
   than the pod request.
 - Applications that consume huge pages via `shmget()` with `SHM_HUGETLB` must
@@ -98,30 +137,25 @@ spec:
 - Huge page usage in a namespace is controllable via ResourceQuota similar
 to other compute resources like `cpu` or `memory` using the `hugepages-<size>`
 token.
+- Support of multiple sizes huge pages is feature gated. It can be
+  enabled with the `HugePageStorageMediumSize` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/) on the {{<
+glossary_tooltip text="kubelet" term_id="kubelet" >}} and {{<
+glossary_tooltip text="kube-apiserver"
+term_id="kube-apiserver" >}} (`--feature-gates=HugePageStorageMediumSize=true`).
 --->
 
 - 巨页的资源请求值必须等于其限制值。该条件在指定了资源限制，而没有指定请求的情况下默认成立。
-- 巨页是被隔离在 pod 作用域的，计划在将来的迭代中实现容器级别的隔离。
+- 巨页是被隔离在 pod 作用域的，因此每个容器在 spec 中都对 cgroup 沙盒有自己的限制。
 - 巨页可用于 EmptyDir 卷，不过 EmptyDir 卷所使用的巨页数量不能够超出 Pod 请求的巨页数量。
 - 通过带有 `SHM_HUGETLB` 的 `shmget()` 使用巨页的应用，必须运行在一个与
    `proc/sys/vm/hugetlb_shm_group` 匹配的补充组下。
 - 通过 ResourceQuota 资源，可以使用 `hugepages-<size>` 标记控制每个命名空间下的巨页使用量，
   类似于使用 `cpu` 或 `memory` 来控制其他计算资源。
-
-<!--
-## Future
-
-- Support container isolation of huge pages in addition to pod isolation.
-- NUMA locality guarantees as a feature of quality of service.
-- LimitRange support.
---->
-
-## 待实现的特性
-
-- 在 pod 级别隔离的基础上，支持巨页在容器级别的隔离。
-- 作为服务质量特性，保证巨页的 NUMA 局部性。
-- 支持 LimitRange 。
-
+- 多种尺寸的巨页的支持需要特性门控配置。它可以通过 `HugePageStorageMediumSize` [特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)在  {{<
+glossary_tooltip text="kubelet" term_id="kubelet" >}} 和 {{<
+glossary_tooltip text="kube-apiserver"
+term_id="kube-apiserver" >}} 中开启（`--feature-gates=HugePageStorageMediumSize=true`）。
 
 
 

From 268492a36492118614e505525e04d4d09ccfb47d Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Tue, 30 Jun 2020 17:24:15 +0800
Subject: [PATCH 163/496] translate  into chinese

---
 .../enabling-service-topology.md              | 76 +++++++++++++++++++
 1 file changed, 76 insertions(+)
 create mode 100644 content/zh/docs/tasks/administer-cluster/enabling-service-topology.md

diff --git a/content/zh/docs/tasks/administer-cluster/enabling-service-topology.md b/content/zh/docs/tasks/administer-cluster/enabling-service-topology.md
new file mode 100644
index 0000000000..d97171de3e
--- /dev/null
+++ b/content/zh/docs/tasks/administer-cluster/enabling-service-topology.md
@@ -0,0 +1,76 @@
+---
+title: 开启服务拓扑
+content_type: task
+---
+
+<!-- overview -->
+<!--
+This page provides an overview of enabling Service Topology in Kubernetes.
+-->
+本页面提供了在 Kubernetes 中启用服务拓扑的概述。
+
+## {{% heading "prerequisites" %}}
+
+  {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+
+<!-- steps -->
+<!--
+## Introduction
+
+_Service Topology_ enables a service to route traffic based upon the Node
+topology of the cluster. For example, a service can specify that traffic be
+preferentially routed to endpoints that are on the same Node as the client, or
+in the same availability zone.
+-->
+## 介绍
+
+_服务拓扑（Service Topology）_ 使服务能够根据集群中的 Node 拓扑来路由流量。
+比如，服务可以指定将流量优先路由到与客户端位于同一节点或者同一可用区域的端点上。
+
+<!--
+## Prerequisites
+
+The following prerequisites are needed in order to enable topology aware service
+routing:
+
+   * Kubernetes 1.17 or later
+   * {{< glossary_tooltip text="Kube-proxy" term_id="kube-proxy" >}} running in iptables mode or IPVS mode
+   * Enable [Endpoint Slices](/docs/concepts/services-networking/endpoint-slices/)
+-->
+## 先决条件
+
+需要下面列的先决条件，才能启用拓扑感知的服务路由：
+
+   * Kubernetes 1.17 或更新版本
+   * {{< glossary_tooltip text="Kube-proxy" term_id="kube-proxy" >}} 以 iptables 或者 IPVS 模式运行
+   * 启用[端点切片](/zh/docs/concepts/services-networking/endpoint-slices/)
+
+<!--
+## Enable Service Topology
+
+{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+
+To enable service topology, enable the `ServiceTopology` and `EndpointSlice` feature gate for all Kubernetes components:
+-->
+## 启用服务拓扑
+
+{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+
+要启用服务拓扑功能，需要为所有 Kubernetes 组件启用 `ServiceTopology` 和 `EndpointSlice` 特性门控：
+
+```
+--feature-gates="ServiceTopology=true,EndpointSlice=true"
+```
+
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Read about the [Service Topology](/docs/concepts/services-networking/service-topology) concept
+* Read about [Endpoint Slices](/docs/concepts/services-networking/endpoint-slices)
+* Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
+-->
+* 阅读[服务拓扑](/zh/docs/concepts/services-networking/service-topology)概念
+* 阅读[端点切片](/zh/docs/concepts/services-networking/endpoint-slices)
+* 阅读[通过服务来连接应用](/zh/docs/concepts/services-networking/connect-applications-service/)
\ No newline at end of file

From 8d08b9bfc18c8b8608a838c41e57ffe5414fc5a5 Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Mon, 31 Aug 2020 17:52:21 +0200
Subject: [PATCH 164/496] add feature blog 1y support  (#23582)

* add 1y support feature blog

* fixed images

* adjsut title and linkt to slack channel

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

* Update content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md

Co-authored-by: Bob Killen <killen.bob@gmail.com>

Co-authored-by: Bob Killen <killen.bob@gmail.com>
---
 ...31-increase-kubernetes-support-one-year.md |  30 ++++++++++++++++++
 .../support-timeline.png                      | Bin 0 -> 3670 bytes
 .../versions-in-production-text-2.png         | Bin 0 -> 23850 bytes
 3 files changed, 30 insertions(+)
 create mode 100644 content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md
 create mode 100644 static/images/blog/2020-08-31-increase-kubernetes-support-one-year/support-timeline.png
 create mode 100644 static/images/blog/2020-08-31-increase-kubernetes-support-one-year/versions-in-production-text-2.png

diff --git a/content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md b/content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md
new file mode 100644
index 0000000000..91bc4660a5
--- /dev/null
+++ b/content/en/blog/_posts/2020-08-31-increase-kubernetes-support-one-year.md
@@ -0,0 +1,30 @@
+---
+layout: blog 
+title: 'Increasing the Kubernetes Support Window to One Year'
+date: 2020-08-31 
+slug: kubernetes-1-19-feature-one-year-support
+---
+
+**Authors:** Tim Pepper (VMware), Nick Young (VMware)
+
+Starting with Kubernetes 1.19, the support window for Kubernetes versions [will increase from 9 months to one year](https://github.com/kubernetes/enhancements/issues/1498). The longer support window is intended to allow organizations to perform major upgrades at a time of the year that works the best for them.
+
+This is a big change. For many years, the Kubernetes project has delivered a new minor release (e.g.: 1.13 or 1.14) every 3 months. The project provides bugfix support via patch releases (e.g.: 1.13.Y) for three parallel branches of the codebase. Combined, this led to each minor release (e.g.: 1.13) having a patch release stream of support for approximately 9 months. In the end, a cluster operator had to upgrade at least every 9 months to remain supported. 
+
+A survey conducted in early 2019 by the WG LTS showed that a significant subset of Kubernetes end-users fail to upgrade within the 9-month support period. 
+
+![Versions in Production](/images/blog/2020-08-31-increase-kubernetes-support-one-year/versions-in-production-text-2.png)
+
+This, and other responses from the survey, suggest that a considerable portion of our community would better be able to manage their deployments on supported versions if the patch support period were extended to 12-14 months. It appears to be true regardless of whether the users are on DIY builds or commercially vendored distributions. An extension in the patch support length of time would thus lead to a larger percentage of our user base running supported versions compared to what we have now.
+
+A yearly support period provides the cushion end-users appear to desire, and is more aligned with familiar annual planning cycles.
+There are many unknowns about changing the support windows for a project with as many moving parts as Kubernetes. Keeping the change relatively small (relatively being the important word), gives us the chance to find out what those unknowns are in detail and address them.
+From Kubernetes version 1.19 on, the support window will be extended to one year. For Kubernetes versions 1.16, 1.17, and 1.18, the story is more complicated.
+
+All of these versions still fall under the older “three releases support” model, and will drop out of support when 1.19, 1.20 and 1.21 are respectively released. However, because the 1.19 release has been delayed due to the events of 2020, they will end up with close to a year of support (depending on their exact release dates).
+
+For example, 1.19 was released on the 26th of August 2020, which is 11 months since the release of 1.16. Since 1.16 is still under the old release policy, this means that it is now out of support.
+
+![Support Timeline](/images/blog/2020-08-31-increase-kubernetes-support-one-year/support-timeline.png)
+
+If you’ve got thoughts or feedback, we’d love to hear them. Please contact us on [#wg-lts](https://kubernetes.slack.com/messages/wg-lts/) on the Kubernetes Slack, or to the [kubernetes-wg-lts mailing list](https://groups.google.com/g/kubernetes-wg-lts).
diff --git a/static/images/blog/2020-08-31-increase-kubernetes-support-one-year/support-timeline.png b/static/images/blog/2020-08-31-increase-kubernetes-support-one-year/support-timeline.png
new file mode 100644
index 0000000000000000000000000000000000000000..8752a5c0ca74cf80976a16b3648e96f0b9053da6
GIT binary patch
literal 3670
zcmbVPeK^y58=uHl-YX-S71A5Zi6w8dSVG95R9;3(u_j}O&{Fn9=ukO?IqWDeleaKq
zGK3I2<|RU`j<-eQDf80S?D@^pInTMy^_=IAXV<lB`~L3x^ZDJM&;8x^cQ4_Tvz@|b
zjm;nsNWuPu?e`#%G#3Ptf<dH#D@6?rr-6^Fr%t+~#bPn=wVz*&!C)F28<9vP91iDj
zIJvpGF)=YNo;Er3cw<Wg4J~Nx>z_#(A%RinMXPN--u4ZQRHT(r4mlbQS05WLxq0Kl
z*Q%#JHr8*m(~$c6f4&yf5O)g>RlRxcbW&21xw*NEi;IPMMGbJXO(7@Fg@Hhdt&+D?
z+5yEKK#}+DZBg#mvw35iJSI#v?)VipbOc~GY}<ve$@wA{<DYNY7hu+$e#u}VjA53s
z6;jFcG;&uwk_gcK>D6?wG<|IYs5^xsEwz(t4T6{{gJKnBZmlm@^Iv1EK3hVV<w_$e
z1hp?rt1EVFgKds<dyPFLb5o{Oh8?>!wRLz3(P_KHS@O>Ifu~yoSJZ~5YW5Z*Bg3{O
ztYzj<Cg|O=A{2voBkFqg9R96hY=<EotvX*@l+vdwV#Y;86VKl2q#&&<Fv0L#OtCm1
zN|#RB3HH8-&uZiKu52|!wO`AW7jVjZ9*qtS&Gv9uy_kba;<ek2)8WdK6c0{*Qr?x6
z#D(bE1}pt0ZoaT<acY^id8GwQ<nvdb2sOreJB@oL$8g{0n{Qp(^=LlB_Zg+p0%>81
zthQt1vMnJ32SN`wFblfmw^W^TQDphn2M(<`%YM4hhw;ITKK2+>nsifs*o-VwA$-mH
zL}?_@Q%*B-F|#&?V==6iC6xID3ex~k039oraICGCe7Su?DRyCw6fVc~oyM2Nc<FGP
zRDHJ3Xmf_ZJP0G{1_oZO!!`U&B(jq!^&JwD*!ll2D0LU;n#><v1DePvJc9)r{aE#W
zAS#gpM&sO^7Mo$Fv>a`&l<SB)Ivq0NPC~Jz^Qx(Ofn&W}dJ8n-&XLyi#+WfTzV<Ff
zX1;vz(>%>MxqteuLjkB;oxeiw>EcZ<5*O=w`I$g;0P$M;+QG3vH-)BqDDmP_WF1j_
zwj4Q5e!Miz;~@X3SAf^ehc^_Jjnt1^9C2?rGLtWyc4LUHM+>hcTaA;OT$+uOb?H<n
zerx!MdyDUWF1e>1$pezYW`TCY=NL{Vs?}847w+svX7STy`Z5<gyC*<{rd&;p^Pi_&
zV~m#5^*-(}9OJ#DE)BdzVQ_+l-UH;>3J0NZrq!j}_}4hMxqV>=Glsc>c9U2u9p}=*
z>z6byW}kOaA#|)eaUUOKiDvJbkXU2`uxvxc-vcnQirWhZ-DF_j0SJiM{{U><V9mY_
zQYP#K$-p2W6g@o^={#rTk?v<xf@c4swBv$7Y;wIltus;-JvK3CUa@OXn_HWDp6rzX
z-uU6_T^ht}{>gxzhwX@#EBRyW7m^_jE~ds<3MU=%<)&Zl%|{$f?5iohGjFn|8%Cgs
zYCjj0&SX<|6v$d82z7!|VTU5vY0DF@rXO2ojo*B($Bm<+7INFEPT?;;KALwBeu@(H
zBFe55o$}mDXqg<DG~^BF)xQW~b2tJW7^nEK$MJnYZDGyMxXJ_a;D#8jA-05N5GenW
zE|)08KMJ?xwPRz0VTjiA$79#VZhkGS^BwB{J*iDDfU+)9k@!X#t3u$m#GOr|*ua5o
z8JJ*QEjwP}859+7wJw(bCtv;s@|V*`vX70Pma1i_?|FuMsZ7w1#~qHN_#?i@h3fuB
zI91@lX6@o;Bz#ZSyj0imaIU^WlGJTWbt*dmy>qw7$tUp_%EFV;P&$&k_VwhwJChIF
zw3GX5ydKQc(CV86_=tzWF7clU179IP@F&XUW7V7|Zsg|>9TYO#<<Y4BQi)GG%XMk8
z?1M^%x?Cr!yzEVV4mv1R&2PG|!NNPZr+#ehttKxe+PmkYgnndF_s6_i3L?@-PDbRO
z&O7p9%6<sg&GZLAiG_g<xX+>8;0DG8j#fCY_uP>5A)`U;&FPzWaED)dvAgD%YdOIY
zGlKh$D{Me+hMb`IW6p4dP{g#d$fdWZ7Jz*(WVhCAuWFSG$jYsoYil)40Q~TH>38%h
z*+>S~<u`h77x%2<Xn;JbJ@gI2A7Yl?QnTHL{Y<llr5>9+wQkQh5C1#l+fD}mXJZrP
zg)z5&Wgcs`zK3G_snt2r)_&+AaiqJ}*Qrktr$4nUL<j7AxszLw&{wd(?*zfFn(Az9
z$DV=?2!@PZgrd@q*i)19G+oE4>Z5rN1NVzijX@}b!nK@$Ws|+3Z1gyx91TDUkz5D4
zpgK<aSnnIC`+5jlO`SDr$*+H#8E(OI5l&wrq-_yuYy*lY>VwSy!9!u}E}Q<$nxEOR
zub8svU^mt6xMD`PCV!+=LgBj!SDe+ojnCY;<dq*Ckud;dNt775v4zlq&&G8d(};Is
zZ>#$+t95G@)=(<TPaRVB|K}@H)41E}Bua~se5<+)EZI+@E<|41NEQ|EuYT7EVy4+5
zk^f#@_JVw@Vmp9QCj2i5<S)KrW2#>cTEhzxC_12%TT$`C3sZ=LvJt*n5HqjBK|Q+*
zs!H=Oj8zD=&Qz!5Jmch1;McAiMPj-IE9sEW)X2bA+#H}u&v|E`MDr4Vr953~9}P9B
zG{-rz@yL9*CGV9x)rpyRnCl?=6kgBajXYLaYQL&5zZ-1n+^;_;=%qTP2R0BqUTx`#
zuQ`BskJs=dMR(FVkKNUV4(KVdp!^Bu0W|D%O!weBpHN(AK9f+0i1e+YEG!HAsdGog
zBBiM}8r&9RmNK8YR;%B&Sf=R-Bm;^9<0vaj?P-EO;zf~>r!+A`&*u;cbjV2tCM8j~
zp$SkWb1P7r3jy`pvQ<F8TVMyu(2Gs}n?#v!!^j_}LlcSODX>|TQgSxQo@(X;lrF(;
ztp2X@F!A*I(mBx0>APLu;fZQW1t}Dr5C?M5!y%Z#gBV=#;f>zGXv>c=V(c*3!t`~;
zPkjX%yU`<>k!L!M9ocDT1}3QbE>i<8ADXFg`DLVWA4c?Gf!V(!zs#Q>PQHrfMTQjn
z?K{fN+Z_4cpFC>;9JU8$m#>c>vGXrZi_*#tI_nVZR%)X)qg6xA+7uQ2!Ky%&HY4Gi
zM4Wz*A2<tuzM>93y`O7G&szqH2s!rMD)5Y2i|H&a`k^Bt{#j{}<u`3CH9k|7X2Dw#
z_WtK$=Jn=o{AbB5qTfmSFp-9DGSE5+M}dPs`3fLrAxYqVJN9i)iwvt+#kapn40#8Y
z_#jQceuyXot8F8F07j9&hrHlR{dE$oILcjKGaZ|*lKt8={a`n@i6}YjBs0ZTt#iO#
zY^YAqbJ}tC^vH{w%tDlaN7un(B!2P~u5zBzh3;q<tsPoBJbYtNc_+=uByr?2!Gkfx
zm-XIv%+RGh^jIIx3JbZf!GDf*{UIN5?ixEyd$OfYP&JxtaIEG_$u4UL_QYAfUGRV&
zmPzmsy3$9Nw-epTS**(nQV+4IsntY}qDS){C?uhw=yBrxbv7@uSIPc6j<n7&St9*_
z@UaTI1CeX;4va|oD34l5x}PFk_V!}v$p60XS(;)+5>zSy&ehv2oi4cmkkh)hD;E|!
zwh*khlI_wd(phgTDrI2oR*46<^bjffD6sJ}iDpUyOUIEd_1_>RAZ|6`Nep7OG7d8X
zTgaRt6<_ARPZhkgjChOg2YZiKF(NhzoYPr5+WZ|Cc5=^K?Hy>><0e}mP!TaoyexQE
z<GWMv(M(EoQ@crI-Cp?6#ko9vQKjA|ypxaNt9Fwwb$h?f^Wy#X{m<7h{axEu7D7gq
zu!*TV;Qp3@t~}_H9N~?x6ED1uSNP+3D_3ntTY*cuZsy&GrdZB{g#5-5ds%Gp_z6u+
z>hq#$mRGeLVfgp-EnRyofo_VaYZ^Z;&hpA`_I|pY*qoI(3v2tWFiIoPl|{yn8?rBv
zOlYH1HSdqp9ILDaoIC{^x1#Kqcn06Y_~*)kJS$!sPpNWjC9n9%;%`D+;XW*b5M9p;
zautamrCmmgc29ZlwLLSLj8R#uC@^J}teXF@Inebr*;QQAUp6>t#|9?_i5n|Sp{zS?
zD^<BBY8n&X<y1kOt*Ll&k3sRx#pv6H^**U;D7b#H=Sb!3wN7%CXAEW>Gi_#tB$@1f
z9p%;N@BsSy`IiRkc!j}98-UQEWYxL0C`RG9N@1W#cl>6G58iwmvaFNWSpO56cJ27s
z1{lIC6)d5|WU2mR^$YG%=iCX4bEzvkrW6jUZT!=}C=jTrT%<I(EK_;8r{$z1V2^gT
JEj#8L`!B+~5aj>>

literal 0
HcmV?d00001

diff --git a/static/images/blog/2020-08-31-increase-kubernetes-support-one-year/versions-in-production-text-2.png b/static/images/blog/2020-08-31-increase-kubernetes-support-one-year/versions-in-production-text-2.png
new file mode 100644
index 0000000000000000000000000000000000000000..d10a47363149eb6a23dcb99ad6810381757025d9
GIT binary patch
literal 23850
zcmbrm2|Shkw?4czpb%+5GFIk!%v=%@DG3>4o5xI<haOZyhDb<Ak|Yg;%yTLsQOQuI
z44D-&z1Qv;&hMQ6IluS(-*<nW2XXKF{toNA*0rv6tsQ>ygc{A(JzEI`0?jdX6&(U$
zLn(nk=1sW)zxkYS55FL6Ij?@!oj}-DNBW;Efqxq_fk5G4r)%J0prt8Gba4_gw{)?v
z67qIBkE;m;c_r`j=0pc84|WSH8#`wO&Z*K$PIfy>1x|fQEfKBrN33k^)P3EoPWztF
zCHguLWh^<B6xrpyWpM*1D-UyaZzo4*cUf-*&foWy#m}T)3v;snzQn^pf%7owf$Roa
zC)tm<xLL7F35f_2MMT8drDcRfr6eSzL<HEyM8rgdMI?nq#RNsAWJM%oMWxyQdU4`u
zZkE=vIx4DvJq!O*;I#GdI4>(K?B(Sp<RvcT;$|Z(DkCE!EFvZ>CMJk01l@g{J<PoY
zo!$5SeFqgQccPo!c@H}mXLiyZ%`IF!Jrp=G(m$u*bpD^)I=lb1Ojs~sZ}aoQqCz61
zDgD0ClK9Vc=RMsVe?Q!kC~W0u<z(gT;f`xX|GD<Ot&4|?yRFOraO;2m{GT3xrPb2<
z=NbR)Se%^xd4#*i(F>TyUkmczUhS^ybKXi=$I9Ks(~W3#^a6&tk2IU}vPayk%spJ(
zbX{B=|K6yRe-D}c$PsLes0=%gmO0VRnKTdHe|eXcin)iC0w-zf1Vs)Cii_xq9+VXq
zmBk*4NXv?d{CTOCi=~~l&;N0$n3$}XjI5;8f4UTQV`=VT{{MQhB~jMe#m&hav$k_G
zx3LmF?`*@#{?A&<9&vGWal?Z#I`Mz~{jnoQPP(~R+d1M7?mBA9?8lBCkrI`Wk`fdX
z68$|~EiKt&&h8%O&P1zYDhixfAt5_EOIdLVb5Wx8K~X^&F&Pm-i-Qv8f-<5O2L(mV
zWn{z;ic83diyi#?{VFa*Pm&#w-v8&3uyi5f9{({s2~k`xB6(1dD2ZE2N|Ej+B_Sdx
zW^Hb6eo#bI)KXO9@4IQc+2K^0JO1lkNu#pF9W5=S#H_6)Wdubmh!%npL?VVJA!#ir
zVM!Ddm%&4<q@_r<{~u5O`!0tuKX+`q`(I~E+1%!@pB(KJ|NB8(60IyOB}DKrNl9@*
zX)6f}!GqG$;(}t9Qlget=GF(rq|D`oNyiGeVE^-{KW{7i@1OtM*k#r2NaOMOYZRxg
zT>lvl`)~V}H7AnJtpX>JWUyA2oPYh=?!Vcs|JAzu^?ol~E8O(o*zliEcXzS&@G^I^
zI&6cT{ofrF;s0p{?&cT%{rE*C4-!SCVGtJ5l2(Ee7GmOpG9pBAK}kz%OR0kr7Bb=%
zu#Z0n_J53D3<vO_tc1kh2kZay`2TtU(bnAA#tPv;nDhVpjQ)4$=YN{fe{mK6s~L%j
z3W>4v=-WA4x_G(6YyJ7A|1z21=K80t3IA6!{Qb9oi5P#|G{O++$A97<{_#%)wQ|Nf
zxgkC}=UJH$2xs6!4(oc~n&|N}-Z`{JG5zfm6(=X<20m%m!*s&wcm7CxL*>nXO8j8z
zySKbMUY+1>rrIm#^XB2k8>#OK_K)ARR@x}&a&xnx>D7~mnoB87$%dZ0nHXGHSX!MK
zxn<{Nek|51v1NJa^@qtf;^KWtEEg)4--x#yVIpoqTu(nn?@mDq@Vg028}aStrARV-
z(>&5Z`sF<iBI#Ruj3~Ya+r4DOw<-xsYJ5AF{HB{MczZ%Zf?J6(XRP{u`d@y-+h_=c
zF5dV5&DDFv$nho-8bLNPfshl~1H${`I@RZyh_b1VXrxN4B4@UH8OcA^Q>-EEreNAw
z6`+&b@wvz)|NebSYU;fTz6Ix#N<2p2UED}P$sun2W~8^=FTycGRLbw?_rbxzEjzfr
ze|%Eg+4=ma-sjK+e*H%VPwx0FOn!J|vV4SL_{EDCtIG=vyLZnP(TCUd_V)JmDIGjm
zeB|;rTE<<(?=NHb;g;tjv+mxFWK&vO>vaDy*1;CIc$hEY?M>0zPoI+Lbk3alF?d~@
zRo?sjWOs?fhert-S+tCN!9NZ+5YDF+7*6P$1r)mURfrNBNCRnV3a6`KT%K>&*3UPc
z7#sVA_ihafORMjfyuvNk5L!~>FjLpa>i4F-U7Vf$5ZCqa59bVYTy|&~Po)^xFHV1@
z+AVP2!$abQU~Rzm_wV1At*<SsUE9mC@PN!xEGZ<UHbS_f*rI-Gxoyg}77@NR<?Qw+
ze#w;|`X6hj%KjM3&3`pCYhHT^K<AXkklWIAZAF>$U#ePLPtH8$lAgJIfvoBdHnv#%
z`Sa)7w{Krwm}+_Zwjyv<wuMpS`0=2%B^%|Ji!%dDLwdO#!^6Y7ckk}}@Ig*imVDDD
zkBP1XIvq2!wAk2FMn>aPQ^K+8vvYIId-iZ?-}WEx%quG^d-X~qN7vrPr7zD&nvIPu
zT!o&I@nhC;2E4v1d(I6vV}CHIk6m3aN=uiQmS)TvzO|%Px(#W3dz%^(64H_?=Y^jh
znUrp06bb&IX)BTZ%%-KcBETrOqYG~;F6P;J^+c*{xL1_U*u;c_@4T&%kx@lS2nFo}
zT|O_b1y%)L<Kpv&^Yr}u{3teUl5l-OO+#by_}t+$XU^#8=;-O`DJ$0uHeFYXWOV&f
zb@9auS-?Ym{SU_zg^uly`&xVX^T&_fFFeO*hh7&J7V6}@@98P`n(B2cxt0H*tZd~?
zk~m+&1DMyIDAkXfh~M$=5BX+ZuC7e--j9uiT3){{J^xkt@-~)+Xtow&?!$*~nwtgr
z`H7J-2M^AVwrAhD!zm|cl-+J8kz9M3)~qtHr?xf|-wq!>JUKZD^Q_rk;rnB((BXqF
zUqWhXYIb&ZbTq9}4Yu>>(W54%7ig%d<pX|soH>(FTI$zV5fBzk_HakYbKLk2cJ$Gs
z6M1^l5)!r&d-C-7*Gx7$)zwEZ$X)oZPI<P#Hugkz`=|#K6H}_JXWZ+d6e*{7qaGa{
z9T5z|dOSNXT(}^X^roqaS3p33pFcuWPgi#*9UXhDdQENZ#tj?3fB*h#e$@Tv_fN6=
z)Gmy^J1UguHPTxB>66dL$L2*YeVwBo+DfYhDx693K2J5W-q}i+1uj{wudTAMuvm$m
z%|4Op9}v*zJ1&@@QO{_E!KiS~%*-T-nEw$G5uwTD?(S|>dO=VrY`7(DYG|k<;|N8G
zv9pWI)Wk&U?c0xv%w$t1o2C2W)%Rna4D)V?Haxr0+S>Z~u?RMrnVC6E*>!Q+yte&m
zLBV{i8f!*8j&CNGBew&G_PV}Q+1y*XNKs*7;cyi(x51Z(L&!gU`b5JjUySRgzt(1C
zWL&#;&8?&xegx+hBlB;Ed(&22x*HM#XTc(`puiTi;);i<sWlc96kNJ=$!BhOhUoq6
zElcW&#F!W?l<)jVbz-^axSpk@<-%l-oX1FO#*xdg<-oP2Z#W-2oMquEb97}LIv-xW
zdiBZ`%5at0{s`e&r5D(6a&qzulig>zuFo*@r}@tUh;Aeb@bO*!c7C8C%H7Q^uE~;>
zmDMcZ$F4Q?>K7RoX{%P}=H^mF%r|fhK5J2gt?dtW>?+84{=Bog`eL6&-xFeESE0jk
z4UO9YKR=zx)#KfH_05|%(!Ji9&!68|-#q5=0u!4VUxf_^t;{r<1+5mI&OY(_hM?cK
zRIhv5X+qbVyd&hlM&F=|OH5q&HJ+a)=k*9@VXAzgx7c+6^SW{KrZ-mIEx)ZF6L9XU
zPzYM{H#6(&@9(dxQ%OCcZ(vYt-JJZ#AAfv$W>X1A7PP+H7Z4B-HJQBVpltAMW}wl;
z#DqcEv^(c?HatUJef<+ZudUP!`nereR#vbo#S7mVIYM>DCMSg+jwPA}j=sx!EjLvr
z?)TF%O9z(h1D7jg@<PC@!hh_2j<id!rl#f!Jg$eViH^>@pA(;Rb8|EA+%feX&BEL|
z-oKaF&TXbdeE8^*Gp<Jj$$9YL>a}ZY3zh2%PF)g7no<|Oe<W?}d&{NSp|rqXqg29W
z>0Y7YVq(4ibItG)G)!WHJzjk@TedVcH=Dfh7|lAK7-~{{{_7taS%#0#U5to0e)w?p
zcz&f&LF%T*8pZr%=hyesH>J2#Bqb;N!naL)E>c=s9Kdo*a##+(NxFUecH|TIM7Saf
zipy|vbKhD%fBLjt`PyEYJGy*6$B$`@etbf#T>WVTJ8$@SL(u51PL3|0Riuxvud0g5
z;?mNmj~}l{zhZp-@?~-0>WkFWo(E@g8?Ld)5gQ^;Wvcd+`OJNGsf@aE<xBmo)KssD
zuAzyE3HWwqW+Po)4-5$o)pP9qu`C_j2(I}Wn^NG~%F;@phWq?jhXXA4=g*(m4AaWM
z08`W3INYU~94}wKyeUe&q>+UspeH)ckF>Sl)7mlY>+QXto4d5QSfn8?E{>0n4|A^w
zSpJ2rXl)e<Tv^<wcFq4shklFV^7lrzAWh0G)YO_98cz!gf6UJIGk9Njb8~xpTj4lm
zcyzSc3y&NX&aYmaj*gD-r|YBHX$WrcqO^z&bTvB^tKo`Xy?P}tFR!@xB_usPJ$wf@
z`R2{M39r_dE7y&lSZo$<FZWx(f3h+%m|I<ABYbW7g9i_=k<Icq|HK;`w`|?Im4;?@
zDA6qL`t<}2tD{H5G`WnPJ2G*ElDwb_B`-h!@e?P8hnyT83k;p?>~d04nA7NY?{1h1
zI<1lB-5)+xvFtq6TRv4bcMWmVz7Pkir_@W>rA4^-!o(h;rck1vkI!~xl7n!MWtMiH
z-Vm>&t*woys7z^gLsSoE1_ubSPjR8!9e(-O_h&5<d$baTOfaIxC}tZsZQiVn6x#}l
ziWoYZgsY+w@*h4dgU#vk{g|7JxOOdYC_z6omp97;&bUm0g5z#_dN7@Ziwhea-66`@
zCQB@VqT8T44waTx^N;ZlTR4D<zD<b0t<kXU+WtWHy?vp`le>3SayxW18WFqZ#KTqY
zBnC3oGx7@vSVnqIc7N*VNT9oOlE-`CQdyb2Im61z$|CDbbew+fO=FqhA>{_bbUM7o
z?W821*}*0%1|d3SF3p>*nQF9dQ%|)hM|(;aN~bD5m$=(#<ebRn7ZRHM^ekH=t3M(l
zKPdj4aK&OjYy`e{b)u-RH*k4k2lt7)_wK<KjLMFhnVD(i80J;D4P8~vfQ`%M-=FHp
zO+2Yud`8&$*8TR;Ukg*~u<@a9-};JOiNJ7xOg`(Y3n|w{>6AkoC6ebns@~_EuKYE|
z9~dU}UG8Gh`WN4y-;Yt|JbI)E+fP3nvS-g8@18?g^6wK9ySCONZo=u>+uI}XJu)t-
zN#UIBn2mu!zqj|qOHc2{<F3h`(&Je=g@&og$+C_gMNAtJk*ZSMXIqquX*g7QVbOQu
zVL-qWxquAtbA$EXCu*4#Y6yDN0J<T2#H}N*Uq9{YD$1e4b-nqf=#k=q>BWKQpyi1o
zA0HnaJZ7ap|1)QHx!8;N%vxsVc475^U*LT)_@tB+qf@7<869kG=@K*IFNK9IEiM|D
z`+8RYv6%##DuaSfor*0lU)`ZC-!|Wod+#0>50CBp`=?+?cjHaVeSzlm^&1U;Z9kkb
z&V9X{V@4`2Vz=Of`}c1ibhU7F{0{g0?AbHkEZl7J<C6in5d`P7#6)TM&9&9#pxGvF
z<@!rFp@~1?TvvyLgW5(tlvd}j$B<F8${*z6;Sm>~L$Hv;^@xNmw`9bfyNhMqhYub+
zsJ=fAt}Zk*6i4{l9!ZT`j@y-4eFnEPFeDlkIhQZ?N3>^auMelV6d2|`dp6gutrWFF
z=n_QwK^v+gd#)-taP`+JKz3*hHsNwu*cSI}?X*B_Jn7`i0Tvn>8Uk||o0xEG-aJ<j
z!rs6b#O@9N3cM3aho=DQY2P|{YKpHTS3jThzhU86O&Ap%!vwtTxpQA`$+)Xt+xy9*
z03fijk$d01eUg%A^7OpM-rKdNABKHPOr2@{^l52%s&c(iY0b62E*wEGP`^LP=C;q*
zFb1Bi7NvFn6DQsxQ0kmMO+x1*nbDJdm1YJP;P!KJa&XQ_J`J|ZwtahSa`G#irlDD!
z)VFC$>%b(-KPQfBX?eQ2^_O&2UED~z8q47H`8nx74EVOV&9#Gff%WqY3+;PecrpkX
zFMd;6|Abij<;$1NRJ#F{JLSa)PFtNG=7`@sWo4CRER+ZY5+1sCyX45mfk&q0hQ`L4
zyrc=IDF)P~3e0ftgg?befXDS_paLY^6E%!g`SIfiu*ZrJImg{cj~*2l7e9R(_krKz
z`^UDPo*tkLy12A7Gd;cGk&%&a-?(Gd8Hrh0S@rexfY5FwWyqNT+T^#FxDGTR`uXhF
z$(etfDwim1W*xbig5veiY=6JS+TtU<+=SOdLPA2Ai};&!Td7DdK*#gvMY86L`T}$F
z^Sv%y7;e$qiPx@OO_oo|Hj<AB=C;|+&dz!>9|}`8H)uRRJ9sQgb>RDVfr?*Z4e=UQ
z;LA)*Sc0fKYHLH-R2vM=oaun8#T56lumE7^8<!~aVtPYr_wL?>*F2QnKEo=72M@XV
zoIFXl?w6C7CnzBB@WBIMWfr*$^Ru&K-6i52gO~u|#>3p)eWBjIzDP4oEBs5IK7H5G
zQE1b0J6@;ZBc=*y+hH%MbP{>Wmr{2i3OTPy54h64zBC;eXmVOw%V(eT<K&MmUNUxZ
zl5*?T&UB?ev*iiK;BFi_+NjcYoxH(GKZPj4MKyif0J4HEU%Epn3KRm;1P!|)=bn?-
zyKW$*qi11Roqa7#6)-yIHyBE{wwSa?Yv2;fT0W|r?bn|`)wfxdfn%XUIP|PCp{$B+
zYw(pz%7N2_$pOln3c)v4Dd`9&YV@cu|A3i#hQ6S6g^N;fQZddwFIJaYf~1yq?j=;!
zJ_}g>xjX0;gW+x=dJ+-vcWUo-;85C$Y=EtH=CBr9r;MiXg`)UVPVxi|tltEi{h_Ud
zb7x~jgDb9H-HOa)@@JaFJNJseuL=g5M&>9jExn(Ha4wH@U00W3hKro7VuL|IfC3xG
z7DCmpFAoT+>?XyuZY6sa?r#X*b%Z743>=RC`vL5Qcmon9z1)e`jF6}(EfbSe!#tAD
zVjEkyZAQklFTQuxO#b!xI|fF9>RV}D$p|Z_UNSz^@bOtnmUP&*_u%wgi;@}g4_@A;
zo}K`lZ_Lx=sb#ow29L0?wx*_|^{x#>%OQ=~<=rvO%DhYp$@0HOjvU(~CMFiIF%-{x
zdeV;u2?bIHV&gTZ>iY!3Lsl{J+;=cFcuf|0?-;tcn>QJE?5I_nMhN_d^K1r83J~?j
z9~+RBnD#z)kP>Zpd3Bdc?rN?1NsSwV`=S-?Ejz_q<i)LC#lxjsa#4_xSpuR*y5_tl
zycQW5iG-Wt4I_N2sP!90U2y_If(;K<=H1mbmZsqM69I7*u>FX#GE)2UvND|f>}(sL
zn;6mWpPqd~JX}$|#L+OhR!SQsDCyE$7R4;Bdh{rO(ul_kI2l3X;>XB&zoi8|%E@68
zId=&8CO;n^faUPyWZ-1CjJ9?Q60mR;H$<vTwP-kW<kzzTYFRogvL5#f3f}ki1x<gc
z-V?>8prC+S4L7$<-IeWtIcvaL2&Fr>)*~+PW@%*2W~T*mhQ{Bx(c2<)F{@<i*@EK9
zu6r)EWCfI#)OxRxWg_{!c=4ie*>p|lmK|_XlpF^R8~|>mf2E>IdXe(IjyqeoZ1Gv>
z@#5#_H!(H_jx{wl{ysIeo>;kJ_2#B%U|=B98|0Zz*m$@#Zmnbq@98g<>#I|k0TqaX
zCl*I>q5vo_O!cw=;4vOoSLYEBxOLFAAB;d>;Ib3uEZyh-40({a&D;0365-+DK*wuq
zYc3T_!`&tB*;*-5L2D~GHl$2}1p5(8b0@@ZZYJ*M4fp>wx;{(p`iyyo>aFc@7Ue*F
z(=yf>f$-2bw~qA>#7YDw9BDXrW^8N>ko?Tqvpz^(5ieJ;i(z45rlzJlxHP>d3O@iy
zX0(q21K2fC0+f<(+q?MVgIOh_CbN{|mB`39$OK@)F&sxIIgnqJ0)$H1@8lTFE9xC<
z&8Q8dVt9*S3|<JSS!n1c<Q;F`Xet994gr&|;4FZe0Y!lTwh|@X%O3hBO(_V;EI1Uz
zR8p3MGv@8R2+Lrlql-yON{WqbLmq?`v7H()r7}o1DpEgj!a-O3q{by0hX=bvf<3E_
zc<3F?Za<dw4jkPB-3Q06bJ6UPc-h;lsHj*0bhN(mP032^(<K__H-2-boUx&oFO#xT
zfF^n1NhG*N1_nF{8sG_p%__QqZ2~E(5z9L}Z|IB-4(jUb>z_K+_JpX097!Xms7RXQ
zZdutahJB%6tqLDLjO=?b(o-tUW}jbNd{9_;>Rr}xnBi?XFK1U*SETp1Zr#G^$j#+9
z6e*za?%b7bm2s{5!N*UZ!r90e75$5+Um$T<{q<w{h{HgU_0&LD*St>cC7SC^me_xo
z{$yvK(YbTyklR{X?$_Sth}xTJ*?s9-kB|;(X=$B3n{@qpJB}kLwN6BM9HHAvL4i0M
zz?=Qy8#qFx2V$Bmu~pGZYsGM*s+sU?yLRoeFO*eMs#J?+Eh#A>ots*}&4ktp4q~wC
zDUIHsG~2?;(t+HCu4z+YhCN*)_8|N)Gc*60dK`a1EM$KQKi;3tFaMd0Sf|Su0NaT?
zs=SYr(=_168Ti`-jiZ!L3JX`KYiUVz<(Dr&u+wlH5!WLzMmPh(vrj`8lthsg-@kt!
zt_(h*wYGKuZm7Dtnl{iMobRryrej^{@ZTlILL@GD%WC=MCnZec*2v9|jNHvgPp_)2
zJ#y2pk6XRHddx%CJi3mXBg?DhSb5vs`4hUeyfq%?yyfAS92PgqwNqnH<8@qXbwu_x
zyi9S4+r@8~!vfATE?SXug#X9kk$~-onL}mCMZR+M%rFEAkC>E2RY;aqNe48oXAY4O
z((PUj{|iz5cYOMX-_{iS)VVkMGl5{BB+pM4MSQU%e0$_5<-X9k()D$hM^C~R<{5u{
zV2ze{I2bK@0pt$sX>I2njjTKIaBosdJZmF%jn`O~jKBi7*&<a)S?AgGJN*T8PL^^q
zoGaqLr<ZHfoLqSRYfUTHuT%ozvCw^DFjo&tgWCN1x@v)h)Xb#PJA?WV!@S$D?E<@Y
zoOebd(n8H+$G(O*k9){wyxwGf)tfVI4FGs;+-#k`SID$%F*90GOrT}5%_z^DDf2Y)
zL-$SqhCp^=uwFgm-0Uo$px`Rr5PICr#H5GWrR?kEBq_If_YPnr?!fW>fdOnhIn5rA
z`H@rRt{QfL_(;t`+h|dic#e0%Gg`m7d6<`kB9`Yz#VzWt0Go?6Jclo{Y>ESgvoPBJ
z4fOMuV^wNw0fVEXGKd+!e)(3^fXk!>;ujG)56~L<1T+(9c>$y64*`Yj3w@Cq!&<;`
z`U?>qK@-3aBmZ~w@hS1S#!d)M!VEgOt~Yh&o2A{l^-z~@3rFM=V6FK0co6)WNn%6!
zL8}f&j)Z7r$-)p3v3mm+dT>$<<lkH3-r$X&J$=eZ1ZY{s8g(HP08@%fy!!A3m+R%5
z<^jdq{{T<`D>;;3x#kN}4J86nYJ$STHa10hL|IT!bjrY;1O5G-56@n|b!(+>eXR(f
zFthEJVgTyZB1mZZ>mxv@egq09<*RvyKLE;8aok8z1Soa6hDvzw+qcYQGMtP8B0(HQ
zjPIX|roaR)9+j4q^u(P32fdLz_4#~bF%1$y{Khu?9BCtBOp#9j+%2uGw=qizh>Fe#
z2Q9tEAHjYEfvp~Tow!38iE;$et>$FO<Js*<ctL$7(TO1<faBN5xqSJuPR<)(c)1G?
z^YdL=ZYz{}j;m72_|D(Y&i;1)R3=XrwgM{^aOhBQZmxreM}a2SacylSkd+7vJXxTb
z&z?QIC(3&8W$Z?B>gl<;<;+@NGJ=7uCG|PhQ>RYB&VA?G)Ji=@YZ|k;LZ^R{m2I?>
zlan)zv)P4(m1X<%uA$)`+$Hj&HBb!>4h~BRMyRL2e_`&SbQ(EuipZZ^_v&!QPP<lx
z<xOi)DTd{n<#xOpa#Ow%60(tvaGEn#e(sI<lP6E)slm8{h*imKo0gnDLq;fI1F5EU
zC!WrCDwe{2IzKi%N~w^YnqCxHAu<ARpy4{Q?!#|@ze!{OB0J2}%iX=5`9cIY8GI~K
zjCdV5zc6J{ugPv~f7i#4bjrhTQ<rOLm5{7sU9BuFr^9`jX{e~=5GBC{;KH+ph8mPU
zm^!ip+Pw#3Qd0v!bTnP(j$mLCvs6d2WNOO#yCi^EjjGb((zi6^&$Pfo$oF>3LT+<|
z%#*tHARp7tpf8iBX=_e)sx}r$iM4rm9^##7%e)K-+hqAVQ5c&MlbJbC7rq1G4gq-v
zV|4!b_%PRXgaMQSwkx9)R9afvt6?ej>9n?jBmf7fuUW@)07oDvNQ8cl?$@thN&IzY
zW@buC%HyL(MxTR&gW;Ct5fM=OLDYI)RD{w6(EZw61GCG0-3N<{-bjtdKjeewp7R7F
z-B4eDVE=yLGSF(}GY!lL*7;?#ulm-079qz3!@O17djp|>f^p)7p#AAglcIy>A`V}>
z2lAKhch<ao@0)2N{e*SKNWs@(!02l`4TFSi>vM0{%n)a)e9<n?lt0=Y32sv@bzVN%
zNXXMFel^zP)#~RkU)c6T!bH<0LM!?YC%1Gb>LeP%#O|juzl(@W8%K6LnEXmxeRv~b
z{8A}>dP_rtYL4zJ%Y)Kugwzw+Iyo;cOxRBzA`n=28}B-lh7`;&uXEg`>T#PHafjB6
z$}@#C1fDElHuYzOs;ghAw#}pPqa<;2KLPWwZNx)JrO(HFhI!8)l3tOOPPVo@yu4pK
zh5_%vpwZCKSkurE2m-qRw!zS%0K~?`)YP{IIs$bBTqNz>Z2(5NA&MFPA&hI4Kse79
zBWjQUCZM6NZrb#chinhXmGbiPEgWz_Nnl^$RlL4`Jay*Gfq0upbCm-Gg6%dS-!Pq5
z%LW~z9=UpXdr%2YO=TfIynDB<r^kdd7L;q|)2BK->+o}+03O`C*Wk~wkq~TE^^CqV
zr>x8$Y=@nl9lW9GbH}8_L<Y7zFnp+in(|1&+3}vf2S1Z63`N*uY9vEf;avk)ym9`)
zUxQ@j&4PzrG;%>fqcd-z*DwFU1A71#lu3rS?ZE75f2SItCw#%PW$Ey;d5)6c<@=oL
zm6hx8n+pKxs5+PnU@pb9qz51q1g%kjT3K0nF#;#`<~~k5o8ESb^3OFVE&YF6ZvH=_
zI4=CVN}bW7MhL!qMU<0O$F%#n9I=xB(?@~wYdy><^^6(u>eJ$Mtb0g_HEkP%Sqy`j
zgkpr*KuVy~;`8v)>)h8}Dg#=B$@YYx@co73o&B+Z0Dh-j?4i`Ai5+~8@tD6W-v4e0
z|E5s>_uB?E40bgzuA6bjKK9$!eM)0VrGYUkeh*7Ka{csU_hD{W_tW<@nG}2_IQEN*
zy27&r{c2A`aPC2s3*i^`f+BP3Xw+jW1pVI|mYX{c9JVx$<j@+a84mj(q7qWlK{p?J
z`>|g?#$UgF-OLQbHUPJvhl(8vxw9XTMuf(s1+A3?t*;?I!^go(QBhJN&)NA3e2AEU
z0JRMC0XIV<tL;S_5bH8d^1zmD92`(<Jx&ScY7}Yq$zh}%>qz8KQ)p)3!b8aMka6S$
zilF(C3GrqDK6ID+dD+>G0z3rx`-h6f>x6ImhGo5Z$>zXA4Opjz#huHS8!xj3dJnxy
z01bfh6cM;FTH)tMRB1sGp>&ppn(R$EP1uS&$&4Z*UV})^m5x<9A%jZV*=N>C`*`q2
za{N(?*dv(Ej79aPE4~at!oO89{JlB<fWv<=D-NP<M61$1_yoz9i~@wLoxfLv;V&fv
z(-9+;DURYJkV`mi{O5Nmm$u@`w)<j43y#{3!Kj_0e(NM`s|mX&+O?a$)`p65-l~BB
zKxIwuTtRSefB(_N`1?HcOrL6IHU@){=;FCcb*@BAyeZM_`Mc*EHpYq)3h28NY$Jep
zXC}4`!t0z<B~e9u$}#)|!Xf71$P7W{s~EQvjo78<lr0+grBMieStGawLvbJt<<ePY
z@j3DaMxrLlzvaU&p0X@El$tTpR!7|G&ake?m1kttc}7K?`}QHz(4uT=X#pMh3w1$6
zI)rZ`k(jNS6nFdfwY!+`<VHM6UD$-qG(I6=6>N2+XqFC1pb@k(z&12A)V~?2H|jAP
z*JKebI5@t-Ow5o}L$(2+cK!PGKJS4j@MWE!;YA+rCQZ7wYjeX#1X7=d$DlJ|HK6wd
zP0I|7RbjFR4^DqT%p)Ts<KW-`$9WJnMqAtaD9ZxBy?*s7bau;@EeK|Md<nFEUO2Ju
zGFlp+tKSm3V)mi46AwbN2~sBD*JyU+6J(u|&*|mlN&#CNZsw6*PFh+t9CvXYiZ;qg
z;5H8&zwzdl%-q-S(8d_hT2ebDn`#|F-V0jR%-Hy$UM{NPC`<5PXIkIHL?l^iTc#Sy
ztYC|qT#hX+E}qmt!p&!@bh{qHnc*svaH&_*h9`Jwwr%UQl_2HRfc!jJ2piEW0g1oB
zl(P9xUsTRm#99J*UW0@IOyRfNe$F6Ez<IC*%(tO%Y8JkUO_o4dF~1Mf+_T(6su+=y
zX2hGfZ{LQ-AlHjx6je5^s;{@gS*rOAv`FO;5f$ZR(F_C8s%_Caey4pDTxqY*w^ZPB
z;|hOLwurU$wYpC>Gp|R>1lnqo82RzIl$2#CNf7fvNP~$hG!%Sv3it5#MiirNFmQIB
z1POE7Z?Xhq#cVytFZ}#|*1d5vfiSTF@3$ZlPa7J(G81n=Wep{!W@eCu1v_k)Y(;sp
zkVPXVqr7(Z*s&&X)z2M2%>se6ce|1WZ$1}E$x?S(gRykEk~Q;L-Hw!-2X6DM&~|R}
zq`pyyyc5~SNxlU7@Iex{)t<H{fugND#b$yN3vs_f>Pt%%z5_bEvFfPj_A34L{uO44
zm+C?r^a!5RyRCr`;WAF;=*H^+vU)tir1Ca?U?$DD)V!8FN%I1h4zNaX_T@gLdE#Ct
zaZH5LuT@)!Gzghh7@s|x(>^NY+)X0dOTbzH49mI=UICj<AdFv@B|m<r14+2g(WCWP
zeWHbh@{uDT0&FMK;pR;av4qs8$NT#F0tY-twGzBIU<mh#TPJyT4qt;?@7nxc)F2LE
z53mbtV)>6wqtF<HQGHXN`tHMIghQplvgA~xA_~MtC>iVO>5&G?$Omz^Aq5ux9kTZ}
z<Yv>=6yUVuby81oCurahH?uInmX$22cZZNt`6oz^0P6rCLKf<9OLz(vc)4SUL6(+-
z0F+@WIOv8<hKh#N8g}`n<;Xs7CMN2eng)Jj{cD@Ya6Mj#GpMAHa*QeHjDkxBFqHAj
zk=1eYQ+-MY4usLwOw!E#K|1QKvM?Tc8=G&qz7G`WSVt}(bGh#iNKuBjL9pJnxq$ds
zBrV`4unLp|1}9IRw6wfym?!0>LfQm&;$z0hCm?EsD_4-ARzg`bWTMiNBHaSZAuUZQ
z{S6TK=MXt#V`IyfYH*D_cu|shz$`J|aMZ#8Y+QO?)HAl*O2F_dDk}bZG!~v(V-#gT
zKr@`_;h~{3r%#_owL3okeH|yMEcqpb7Gf_j^7x8)H8MV4>OEtTquXU~4$$R!sNvi(
zl)|4{y}p6ON0FPmv8~M&XsEZhS1Vro`0*44zvn8PpHN1Jqtkz6oD?6AJe;&y@eFjg
z-yz=GA|6rgi&gLL>B)WYVDH|&Bz9pky86QhFH}U_O8kM@kkF<Aw0n4XsH$H2lg34u
zl$4arqnE=Di&#?MP|4CM|Jmh$8WHN34<0?b;OW_eAiP71>DBAkBu$Qn9V!pHd|4zy
z!(L)f#v$xExL{HpTW<>+kR2mw-y009t*wCsk<ulnr1;^~GMIXsBiw2UxD7PWAVK)8
zRxm_b@$TI_=&yb)E?#+^{y`lR*+w$s<m6=3dzO}$Piti9jAE31epBUKucG(L#C;Hb
zXz-*Ta|eHGj|4sqo<xrd0>g*oV&oBrdC&0dB$eMKY-6IMwZUZo)gXg9O)ABYB2D_r
z3F-|wD?_ifrDcI>F@mBAY%2~7ia)R@1ud(``SY#zg~000&d$8Nyz%c)!t7szY03jZ
z2s9ze1g^}e)v9sEB8pbkUV^<IgvM?2=41QmmDQ1(>g6J9;|ao<oId&0f+)K9j2@||
zY$~bBf1OJ!8Kf)*^@en;3aCg&2RSncLWw=iAO+yrD*>88to~(tIGM`4$RgmnaKw;9
zqa22aDE60k`Rx{dEidPrlu98q0p^9qpbm-BSc;qwmXm>WaKe<IfPRCr=C*<#y)v*J
zZXo;D{U<dH=)+Z%dCOe~RH2^$uVO4zR9GnakN1j0s4ky>cN~TS(?h)E6%ty5hhJOn
zTTdoE<8dG`D2^A3?pTOP#OjwZ93+iG3p6lIe;qKa()*5%ACo;PI<Mq>z<ndJ`pYdv
zR$H9ZP>`2Lp%atu1r=dpQVx8Hbo1t)b7;Nx+b0A;Ko+z*ZYB)r3|wt`I{W+=*nZwd
zrjP@%uZNJfCrLVB`K=<6l>w6=U;2H6$AMU7h)3mI`&CYyxTed;g4#KhE~x%uA;!LZ
z2_|V*4avmFU!TXRQ(9kY!QlppWDL;?NLF}JdQ@L(YTmHyImBE~aWOko^p4VA|2b|c
z8{T(=Is`q8zzQ^f9fGr7p5akS;L2v)U0hro3_EuE(C4AAx{Sm6hbYZg6f#4_*8b3G
zP;ptJ;)`Di_*yDlw|QRgsI9QRzD9YhY_KP2d?tGbkXA>Q#<3d6kFI}xw$XOy0moPA
z1&4!H{}8qIW|B4(JoofbdRrEcCyRVS+|mMzVDQnZGmT;*4PZ;Y4GyYMmUz$fqbx%*
z*Iv<D6l$AUSPp$YvgJS|y(+J`RQm`$m%fkEaWVrM9DNRU_Aj~l6|Y)azPT_FafHkx
zNx4aI=f%isF_qu1n{x29ww16b@?Jp+{H-KC(H2oqgywG)T%DZLF-EJjavo<LI0jC`
z4;UOgys^H%%_I(6)ht}G^<`SN3mzWbSS_d#NGRO4?GDUl3iWNCDn{a)m(Of)Ti@2%
zwq%f0P`W_+wH`Q@lYQdW!LL(O5Qr9GURyU;tp5BAr#?1jFHR1~x|@tCL=xhVp9>3Y
z61J^2X#t(Bt?UUJzoj>MC%=Sq--e&!22p9=z)nV};v|g))fc!~Y&L8XfQiKGK`sIA
z>(98yYDwMch^U9a;pXZ(Q@QpdADS_F$Opg#K~R_QJ8HcSiL6d8dGUgao14ldXlaN+
zoE$-YHw_6>|5yF<zsnplP`?entgf6C`uv@@OFaF`w$RIvH500iNO(?rCApL@EZZq>
zI2@&w9s0Ph#bSYLkI;|O@N0n?p)1SPL~@a>OdErLd^wUR-Vo$4R=JzOVYu!dm4pfF
zL5=Xxu{}w41(O$<QtJ2ktd@r7=_Qd(>=?@@JPbXd#-+^#=<_;U*LNXp@kfBB<HKN0
z)#uLTDd~hmau*Tg$E!c~1oiW(Mo7B%v+)rKoiv`vi~pmB`?mq$9Q~7B|1VP8a+QsT
zsQm7>2**7ssWIZ(;}CmQ^;Ca5uXzpC^$5nddq%`>#*hgzDG($!;0XnfMK7vR++Qes
z`@B2gE=1*q6qA20FdUGZVcrE4rbq=&TiZow@>uBT9y@*#OQKGbJ0z#fJ38e#`Pzq#
z{?5Ko5mjER$W!5=TaLu(Xi##<vSh_?v6?rf99mM*n7XkZVBSACdTf+g#bcfF;l@XM
zJ2f-g{83JVjXccBSwgvk6pct&913t`2Sb|~$wkO**<?NMPYk%`cs2-3jXcN<1rMZH
z%x~U&B2BRes1U^w#7u}4goX1-c8C(9@<p)J$QV$7N)biudrXNebT^TtcL95f;;}F<
z@aX<fx)S3@?W3V$ZEbB3i#-DMvs44W_Zq0B^G#phI`U-*@vf`yM@Zy@b6#7XT3ucJ
z$A0x9bY!hw?Nq*^%LiI>3WYsRPEHi>hMQAtCR_hHlO$4IAPAs?cTN?t?grJwziRgX
zoz4E|Z62xKlD=7_Q#ND+y)tE%7X=qN!B&g3RaHB*WBBzA?Tpd_RF#$S9o>cCRs_HF
zA9Y*v2Xpe^0hkj4`=ty2KMm`#cTMoN{%V%w+unW0!T1`D9M~hkNW5EobHu|-&ALDF
z!q>vK@D=>8B~VWhG}e{ya++ZyVPaRsdetAIs=f<cl9H9V<gLsfo;*40D@hU6On>jR
zhL8zoxvzP*I>9y@{!gZXq%3`9b~?ATTU6CUc9mCa=UV2o&{6s=&f36}00qfI!^0@i
zynFk05}M*RTM0l5NbqQBX%jP?SqOwR_5%L`Yx_b{aS)*ubOxejPHL*j?~3%LzuZb+
za_2)_KuVK=Y!h$X`1xmU6|nl_L$v%XrEm=JuAyO9YwNk*gBeFpYHUyt(p%Q2Q>EmH
zJgG6+tJW5z<r%s<wf4TJBtD#b&*!T3ttYp*dY+`~pQZb`k<i5h-sMq6#TrDXfumW8
ziffBR5H;M~*^rc)3lTMQJCa4^Z4bvkuGIQyFzQuyMoKkc=W$*d?z%3+2ErjC7ULN-
zkw|@kj+d90y~aDWa&%2gFElqb9pm}(jr8J9eBI2r9}sgB$(e!?1QQL+10@fsM1gF~
z<kYF{Y-}$75g>q<VA5IfvzPf$6Soe~*55!lG!B^D%##KE>Ply1HT>$)+V+HhbwXYT
z2!@1Ro>qr=iOQ9m?|i5;xOk6SN{8T;NT{MlD@sA|p#Hj{zHe%!^_}Cg;um~e)>JY#
zulTKAj=4xnCqSrLJ=8#G-N17ozIQ_Rl>b-h<V_Mmzun#R$qW`a^nbcsYE8Bjvqf%~
zldD;zQ~f@<GozG3Bm9Kg{<zX-b?#xamlg%eH>@~$N>&qk2!!FVeDh*$d&#y@Sbfw1
zCR8z!LdCdVycVW@=k4`L)%r=FG_|ec4UtvTmL%H~NH}(ikv~2c|5W%}z3tfe0bMo9
zHqk9Efjoi5v6Z{F(zOw<_SeuqAck&jr!m83x*KTaq%i&5K}e^;_;*Lr4^OzA&ekh@
z)o|bVfn5|0&cLz%Yo2tC@k`*zSI^7l<F1L;@ML(cGyIs<WKMBg2%0oaDxJDHI4PjY
z+p+4hU3q_8bZpNC!cFj7#o7V#LQ)-m?h$b(SxD5@TuqV4zbxB-ZVqaleZoRg$3my(
z>KcCKN(?EN18*X*WsI?ls^KGOL%1<i?EQbu+qqvR1ypiR>WQOHPEM#(fW|>e1Z@7L
zI%Eq6AVwL)^N?mh6Ua!6*HOOGOGP@Qm0#MI9`YYGY@p=0L~EeaR#%!IcFexeP^c*O
zWDR9TrO_3!hQ*y+d@W|Wtg@O1bjk_d>iSggWuu-ik<lqL?n@>w>~6S3e~OWuY(!1@
zz)<B1U(wV9211bEoPELz4a!;-!k{zTE|vCH_Uo@xSgLw99B9<;GR<qH3g&-d{NP2N
zQy{_r&b^GoLW$B!gtdDj-;BSBF<XD%@;Qzw?99<$YMJ4LMOjJ1JY7B~XTpNDiBf9c
z(benb)S+}kOZ=}mqnZeH?Tkd(JUz}>I*lJEY8p123#G5w`?l{*k%FZ}<bzxWjjILC
zG8_7%59PL>Qic+tX<wBJ|8wF2=|HhS3Eg_1qN@dWT3)MQ7$>rcq3Q?XtjViBz1Qnj
z^!O-3UM{Y;sP}dK!-o%4L0?*>MuP@|3m-guxB^z?nd7IYP-UPdW(RF#Xbfb7H*VYj
zBZlh!^An7uR2mtmW$zRSI7Bm2T~NHCD$lrN7Ob80a+?8?8syQA4UEMQ1RYgVJHCJT
z;i6?ENicv~2SB_ikufv|WfCANDAALoBT>IXdT)dLA@8xE#wfNnR-(WPq?Is4h0xtW
zKMURfq{5;KI)w1ze4uX|*|vd;d(ZC2g@q8-i<a>f7!pG1Qcu{}*f7x3bKdSqCZpVe
zMv|~h^BV+2`_#9;>r$a~7B>i+Am4!OCsreCcx&*w{|ofroIDwWlGoV{bX>h9?u{KC
zk~};w2haYB+3>{$<jk>S;W47}-wEkaM;cm9QTODKknou4uaAF+I^TG+<WjanL2y&}
zrOm2QdpcImC`1w#>$dMx9ci{7A}mt5cH)_f<IulKe=A+)*vt-HiC6nBYFashV%z7>
zrC<@Qse@6sb3cFH_U)e!#mL$G&nzr((>l>jY7_{|re347=)Gzd{G7Tn;Lqv<AXlx6
zmNyUlFzWD9P!ppm30-i^yYJ`a1waoBvZ)8;0Z2c^yKf5b-Lvj^a0X1Nhr2sJ4^L}K
zY0!EgG%&!~cwyP3rHh~{xV&98AONZRI5@;p_!Tnbk!Gt%u(Vo0G_|!vsH%_<`lzdA
zW@LQDM&A-KSH^?1Z_DQt?P@RpLpKnuG&wZ%;}w5CN!(;rWNK*m3-Jr>Syk=rr*m}2
zn)B}8N43iwlG(e*u4DY6qu{PUM$RrQ1fd3BXjp#PVzLp{-x~sF#k{A_p~47BLU{=~
zdf3(%)y|)v1_le;aSuHim=o5IMdVx+(gRj`^52pq2(K>FFhe<GU3{Y9<JDdKs2@Qy
z8}zkivw1A2u`DFa&=$a`$||PGpa`l!wF=J{`$d69JW^+e|KfQzwlu)JEj!kK7FBL0
zC+FLFwQ_aB1^QH4R&s-_mekWH-{bsz_<)%wbvvBoYGCvm&nrUmQv|!WYrlum>1AEo
zZs@yfM^NJWD*b(5w0s<hrr20l&^T!5bA$jGbRO+K>L}IP+Vh^Cl4aj9m=lomqm&M8
z03|9aYTgjw*HRwIZqNCxfx@Xgp4m3iEGQ(zid{!ZZ{ho=%=S^ehX!p=jr4PLrKF@l
zF&jX&_mwxJ!=7dD-rY#W(34ncqvz6VTwvRFT(}%r*gX)UQoOvQ)$Tb6`+0iEfClkH
zro*!*PkhiFK-!ocst{o9j|0>sk$^`ZwGZ|t$pBV{t5|qIFo{P!M?rD%ZoEbo!~(Fx
zPB4{V9qQ`pC}=~{lE8dCg|y070+}roE@w`i;!reKjb<&!HGsju#t<~3h(i&*Nnqnf
zZ(A_t=-)EY)x9gd3Z#lX;S&&eKk9*<H^1zP@+7EEG?kP;*#Ht8%Y!`K_r7_2Vq!Ft
z_$7UgE1)U!VD|vV=vzan3L(RZ^F2kjUM?D>ng$x9$61zOS7@6`GE<9YQ<@wYIIXAG
z`7{O1XsBcq78SWTHuELegGZOoLX+pcd!+sf`L}RaAfEN~^^4T^g9U^a10NzKTU1e@
z$it&PbsF3eT4#8nmX9SAcXu0yDYt!;MW16?dAW9)qTnWWe@jsI)i7HlzQ~%In(7b=
zC=F^yj0+7X1_$S%pBvZuFzQk2HAT{eA=Vu~y1{Ah7-M>&Xah3&M(o80Q$NUx9Z|1e
zdHphS20e?_NMT`s0%YDkK1WqmN!MZSSb_;?KnF%gKm9WQ-97e--)}!X3YDu%bKi`V
zsL6=mA?8GNWMu-PQWX5g$Hv|;#`%EBS{p@4A6lHw(S6lCQL5LIl1gv}kabs}l8<h|
z;j5brnZ(FNLY_W-ivB@JFny6aBSQgngLvCI(gwUElmgcNp`k@C2hnqN_%KQNcl=Di
zI%+W-Vo8pWQ^J{mV#8N7M*gU!%gxEzz96W|EBQLs?ldE@si_H+7y9XjuO9v_S3zaz
z1==EwMT5^m=`6AlUI~oWHfE`Z(EV#et%i~Wh%l_1^s`N%{NiulUW4<wX*C`igSkLm
z32lbAw>PxW?r3&FmjIihzc>G7)L^1X+W8b|7w}3jCb;D({F1*hz46nhv$nxGZMHmF
zTJuxyS#1luz*knF9}UU>8MwRVU6-Pwn$y--Y#Kg7bOEV9$~|Z=b$WCzT{7bunIUr)
ziK|87zwA;8<Um~4(aw4E0As^P3=^8akU#!-vnyC92i=LF4bw>nK}Q1`R3jyN4Le)g
z5rkRv@$A^KV*p4R+{Z8TD+5di&wqhtW055n14VZbd}fm9{%1f^CS~3;5G|o)%3;!g
zGOGX{F;cY9&}q^jJwY86QRhj<D%pU!W@+GWifwzRr>A-N`A_rggfK$`bUX_CvR;!b
zfaDY1C8xQr3!1!;*uUQrc{S~T>z0O(pmwH_DcsA>E-fiZh>u6qhI(KOjlxNyMDnZx
zl=-oMq|_KWESr6$0+=3>UiV#lJK`8hHzdWvty^XOOS2;*wzRa-(D(q~eL|9iUJvMl
zH8eH-8Ea$38$d-uSas{h4X(u3DAa-1j%JbDy<>;CL#Kf9OA<wgsvFvCK$({>PnIgX
z^a~dLfFHrZW|Q?$N7Xsu71~r#)w=WWp(7esaQ;U}M=@=*El;8JjV@RuR8Y#mxsaMU
z3=Q`%GnWGLK&q+Wy&o-ho)<3s#OXxsnZ#rL7~93d5&%DqV!C((CIp{xJ2@GF63xSy
zRui)$7-fG1EvOvO=GN1*N~Xl#@DW~+)D!omiVPjbh+SycIvTN?)HVUCG4csE$jaJ!
zva68P<pWhRh(~;d&dsRI`w5ElIB}pKySuwtSM;FzH$--bjsb{G`&ud3{2znIU86ux
zYAh7p@MaK#4Zy5m%c#%ILbpfBffA7cY71Ak?_+((CR}j%CF2+KPtTo<0F`m((Xr;_
zL{e7Z<oo;k!)}n<QBff_qqRCs#JmP4imhRD+-KYpL&4v3b@`w%MT=C9UM@;E4SwGt
z?jRvXNDaFT8mj~kC@8G1EY0B!k0ASe_>h{4>URq>^&Sazp+q$`HGMt3HONE(EsV;2
z3r#<i366X)3sMMNDK081(#YZy7G^`gJVH6Ckwp9jDg>nVON3@%2dJ@JW-hTnr5a|K
zhoENwb*yS8ldOlWr{@n;V0Laj3eF#@H<T(@R##y;@OLN%;Y>C}GLd?C;3)(R3vA!r
zJtpX8AcZJ+`m{K3+|#FGg@!D9_B_zZ0j{YX*999590p0EA3_Lh4H`VLhHb3!-otO0
zAge_)27*2X1%=Y$7Kr_fb#&<W?tPOIIjuy8#$zD79m+qa`huXrMw~*l(AU+aW>YLf
z^uP{3eE1!J899ppFE7SE64G~%l*yozC`^e|i|zRE0q1K*DF*7o6)Y8u<V<b{d?EbQ
zh4bf&ksBipLj->(Gm}Bk@cmntU4{H3bK8HDZ*s`H{)LhyOE(cO6K<085<f0NXeBj!
z*j6$Up*%+Ls@WN(`V9IIJf^$x!P;Efx-r@&k8a!)EVYSg<DupHWtFZMp8WZ`Us%K;
z*ZhPcs-oU5CZ^HJ$u+tfTtyb3xS_xSVli;<D2$f5-^EaAAU|YhPrrND5)olDv|qkI
zAZ|_0%p{_s0w)7&BMCmyQizp;neZiOaC39_j+?2fHUJo*^U%!5s1zX^(G&7L@Ctsu
zzItcQIQ5pvfVmPB)XLI9;hYGz_P1MyO`vZQAnoN#b$8Ff&4gw!mcbXaGES1p5nY85
zqW9WI0~fzuM%<hrwR_mS)jWQDygj=GO~EDh9efQ2rl!4UdnI-01_u++SPkH}`ln18
zB5G;rM6Xs4)UERLO5KKDk)#R;w-BzACe4=sVLPdK1fF~1`*$=;FbEi&G%|um_=KWY
z2DS=@j`yKoq@;wFoFK6o%;`ijK8yj;!iW2&M%L4Z4+YTGwr?Lkh~g)3G!PW_c?}in
zyB+phIN-P-s#}<uL8L^-;cb+?&>4?7vxTFE@f2YF+6;vEi(e^Vm8d(QEnyVL52Dh$
z@j}MM(;&U?=jNtJ*y#XE013jUz!%_b*nkFqn@J!vqlg=PAxh^LBxq((p5dbgNU8xG
zCX^AKd&`niQx(wY05gUkTSG0b>@hT$Ajr3HKs$g>obX0CQH$F11LD;yms!u`=!zvp
zE{JIH;^PM1pqlWEoR(FS5<I5A|6APT#BF&QE-sQn6usc4eymM<NIX2jb_xwC=sRA9
zAPo*s3m%y-0iCx|tP1#w*Am(xWYEz)wZ(v|)QF!qL4(cj`xAWJhB<;TM3XDeH>X(<
ziS0ny6zvv~(7$iVj2rXhcC@i6LU{p35(N1rI5t!;4aX<M2`jFkC4<XQ4+bFIl7)t}
zC-Lua%6Bs`OnolOzjyB*<o@E~r}Hmg0>**!gL{XV5h8R{|1(JXS8Ris_t!9FQUG)m
zIG*T>m6m0#gT<2CDd4rv=<Cm2q%$JwlYI#UgLKGGjd$Whejg}U)kwzbG`;DW8TjJQ
z$V(uU9_#N%AC?v`peGts87hDNZf@%rG<uFtvOqZ$a(WfM1T;ybwct}%7dr5K>#y!Y
z$M?eg{0iCw5hIb!ObiUvHZo_Dqyn!j#ZVGNWFSd7F&dO(f8p~vn*G_K8)FRLN}w$H
zu#{OWc4*}8MI8;^4t{nInx=1CcPu$5CRXmgcO_zGv}S?!(s6Rz<-b12<sXS7T+IKy
z-0nX!#aMlC&wqU=%>P6%xB5PP_6&0Ql1y74gzw>P)xHo&<CTJ16vR@8a<4{5<5Ng>
z_YQyirlz9O-FQ?tM^{x%tw>iFJ`P7lu<$uoT|<M^x<w4syT;+|?d<?lY=*|PDvJWF
z`(L6J8O?jUqh9O4>?G$L9bemQHaL(}vN8AqH#(2@?+>j!p{YqtOY7z4_9FTRK4zd$
zR~;U2YuKHv&Q3<~vT13;-%Ck)2K;uVP&vakjB-lb*H<=r?(iQ_<yX@>2q`E8pzPet
z`{_o@*2fx9^y?isv2D?11Z`c)>X5PJ=L=`)-gi^SClF|8T#br~x^@j`i&e~$GV49C
z-TI1#hDJXFqxlV7m|u=kFpxEHar`@uBbTNNG4Pom%fEh&nIxfU5x0X-s%>*Udg%X@
z?ek=<6tS%Pq{hY3qgOO8&VrG;Z#(jQ4Lf{ROyyH+8=J<)Mk@CuRx2BuImx+zNL0?X
zwZ9n+)`v1u)9U*B%ct2ciYq87rCnCx-6i#)NYFI~1E>j{+2Eh*>j(S;m6y*&bg<qg
z-*UJCuf|545xkfcwjm$zr9g7YtDunT(lcVdlTpFf-(7iytA(dLZ#<P*S?lJ>0M6ck
zz^brXW)>E~hh}B<ckk~18az!KFClc`z)^!6*$Jv%r(GCAueVN@?Fu@CB;)?o;2YHh
z!&5+s_@t2_7JB-)Tesej8m_Kj(}jg?B5@j_QkgEno*<0??Asc~N%~}x8vuQYiH+Z^
z(XWK$W9QX^0*M9#W8=MMP&~M)tE<C1z*D2M8h}u^;X?}*GfmU^!{u?f5!!w59^7li
zg&Us<fR8&tA|ogm)tJMe30?vDM(-oiLm6tWArGZ`JsZ&d*nA@`m#}bj<35#_*=S3m
zqTu7;$UqM~-YG9{EId3r>lRoSdXuK;fa03JtXcNs5MMvOURg8dzRjj_l}J)HDp}MB
zsUZzgNB!Qy!lLdl^d;Ms7eyt0C0%7=El0GatY7>C%Q<t8riJEf#3_I0D_&+i>}#4o
zp5MH2qe1Cf!wK%gkZmYue4)6^#*<l^Q$*!!6V~hVI@;gIM`r!;Vk6mfFzGDOSE$w}
zN`w5L_5+Z@lpso9m)f}%M!%)6q^27V@vG4p19wf$NRe2&8sX`caZ~>sI?5p$hWGru
zZyzr?%y6oPxVpK~ckUZhz>3vuPMNy0I9r8P!98X^)a;5iV+`HkOQBJAC762?)C{Ct
zkb^_D=zy_U$>5-+>#%uoHdfgGOuq@;A3Mz|mxi>a4uV4%F{!HKm+)n*k7O;6iHX6i
zrz3<M8ki3B7W9^I^xkiC4`F+P5Q6RGaI6*Fsy~mx*0vlaeF_TOftgFxzb$CMaXyq`
z!;U*noP=O&WjS)&GZ<vqZfQ}`*!3|jZEby?o&Bm?Fd*1#jiCQ;ImgNTl!Sx>-3Lit
zW;ZFIEqK6(;D{}C$HdS9xtJ!!-oDMs!qObH9)5)W6|>NNeND=620CF23C3QFkbG_>
zC9@pet;fMrgnz(Cc0BqZun%Vg$&QOVJh?J;*`%Q`pZWF-O;p)+b#?!A0_XkfKKD18
zl|5TpTI$amVL7vA_%UYj85X6>emc0mv3lg~*hJV@n+N&^QzOW@5h7>oSFkPzWn_}%
zGwYtszonTuEF~`;nuQNqA|23>jhWv>`udP0#mDaqd?3w*!{zT7Cb;MJ{(ch?`7L2{
zdMjiz%L2BO1i=jxARJ~qID~|*1x3t|Zz_9{u&y}Jw^oywsgpBk)(A>U`Sa#AlhMJ!
zy6kCBG<(ey)kyQ2h2yUY1rUiK^9rRZffuTSx7`6XTU`Vr&85m=_b`4v_{Pc`=*KJP
z&w5-rxG-@f%%X-1e*UzM4yc5AAs1is?7MfT+0s`kiWilIdUq>P`kr3=j0S^Rg<V%?
zOj_k^Ylisb<Who?<?&H2P0`e%#lbUiT6<Mzvd?+X$7>wOFZz;^j76Ysp_!TE9W-@I
zFIvW~mYumeUBc)b%K&AgmbyCK(=7O`+8azN^BHqL7<;tJO}?}<%egG+Va0p~ENTTe
zbkn-)yB#X6t<<US_#!GQTBeg2^zCWihfHWocy?~B*qPtF`@zDJHvd||=CpcY=9)|1
zR{1z+4!d{nyfXfdhGFM`*(?78WpQWAuC$$7)VW0`pKmlgL#Mpxy!G`~8cOdsa4P*T
zY}bg%E`Lm2IiFr9IoKZ)+U3UiLOQ=lkoER-3FUV5x>mp~yrQDa9g5-zO?D4cu8s(w
ziktqK=g*IYu48j0UOwg0-k;g{`4A;Htx|rn;_tZ!#w=x9dn|-){5&u7hPum~aW&Fg
zl=af%qnX^{-VAlpA=E9O;ecjFuc}hF>c9h}R84J_zEC6yPbvM~-tjPGkVwChZGElj
zUB2r9C9A}!hJ1|}32TgCa#k*L%cOehclpjztc{fw)AL@D?(O9rQtsL*Y?lrdE99${
zmE2Q0U8^-``{Tm1QE?5Ic3*zS;XhP2wwK<ISh({fK>9`fvSN)znaP8u%5A~ccOpf_
z-#Zcvb_Plt`g1cUM=QxUxkxiU-}gih(FO-qd4POPz;*n4Y3nJ2z(B<yv8-KETPGmf
zA+)#pe<$1Gv|%#8NGKvxmyg*&rp?}nJ2ZXs#sUHK9-VNS)^IHNwC~VdVfC{;=|{hu
z-D2yc>=iW_?UCW)F>_-Nt@6nB{H5A6S87Feva$8m8TYcK_11x3u)grd#$$#{@4zJO
z6Bz~36ywU?Y_54vDEJ)ekLXCQhL0yWrkZO&@F+%Z>(oE#HZ?#|?(LdUvKI0Z4ntPo
zIZ!^z^A{r9#Q1nhe7xm6H`f$9bb0#Sn<c0Gyiw}llD7A770t};?@<wJfSe_{A}+}|
z$iku@FcE6ldOvRY;_Wy?_2t{8dzzmyKFFyuL>H%CeQ9?z>=?+v%jkMs-2AUvhQJ-n
zfokJ|LaelZ&>B_cclx((%6QJMpiutAbt?`Syui{Pd|$GC?@N@J-oCqT-_9$wtq~$z
zq}RPCROC}-aY`ZFnuFS>W*eze6n#}07{p)TQ$2WkeGlbl-&;0Na(UIrwz7k3mVzp5
zL;q}l_4dU@_Rtto>^EQx6uLCPH4;U`L8n?l*RUueOBeF>Bzq{`%qPzI)pY4=<Q)6K
z6GPca`zn1QoSEGEpoq$jMy4vAq#ws<Y`qpYC;UINx4!OD|HH>5!BM#Tbuart32si#
zhmS2d4r_d9fAH1nt@sD^>pwLZ)=V^%s^EF_P~u3U#9jBjc{9FBybDjRl`t><_-u{W
z`sWXR$L-%CoZ$#;xV>K<nZN78W25(76Xk6S#ZOnw@2<GRvN+kfW4p#2b(^Tg%!Vz}
zJgkS<3m;7EXrFUI+P&G{|Fr#6U>*HYJ+Fj=^Khdg!y5jo&bF|nAzHxmppMLC=DPds
zV;$$ueBV0jIp2kD9C_pvUjFFo2fc4CdNY6aJJlt}0p~XUo_N;(=VSayVEO$g6S#Fm
zUoWKP!_Gr4iQR2qszk0SztfA_<6-=IW3OIbQ7Ev!0nI^Nf5;xQf5&?dM_^k5Sc=5@
zNa+DL2?5JRVBHUlw@UFVT&+#l**omT>so#;oh1Nl&mG(yrt*E)k!#WF?|%fX5EQhU
zFIFGq6o2~BKfP8j1v^7vXos)+Ap0=-No*F^V!v+tLc6f#78`(VUf>$Ty5(%5JPAiZ
zb-x#IP2|2->DT=6cMLb&J9_@bqeI+<(xne?ZUfd9AE#c*_<zKv*TBk+d4C?~-H%+V
ztp;BtzG>uCuzabqQ)825FhBU>k?;Dh?>=YhZS8;jYR%ptkspv$A@1pMtHKLdLC%{r
z>CkT#gFi7xj^BUb!TZQG|Hg(!bAz7V-lvP(%xndkD@525xBdw>v+8S$OH!$M<i=cF
zR%Rw6!F1pkXpiS);7$>DNd-1#<4*U90`;}CWA=2`ef>GLUtj48?~7IyxqXf`6CZ?g
z+}mrvKLps|=eqlwJ5l1&@6P$agEH#ly1ySXm~S8>>t&-b`JUs2-IG3A2?4X*_Ip1Q
zydO>d@NY^_8k_I>`1d;<3+MJ;{K#E#mhpTzuo?hntd@EGy!PUS>y)nuamsK1(eU~0
zr@K#d6MFcLBv^=W%s(y69k*~QFyGFYu>zRHf7T|c{5vAe-P5kZ!*h_osQA`0h6thJ
z`(lk{E)q-$z;1x=mv;T0!Ug58qw)(6e^fYfSYvYa;n2^oZT}0dxt^`RySyH_7;?^k
zzpK)V9c>z#3Z&y?+A2b;9t(f^{Q|f}U*MK=$M4_5v!puoZ?`qObW6s@+(|oB5L#u+
z^Qm)>V_TyB3AO9``_evl9=iBASxF-Is-g_nzo-{KZ+s}e*nJ8Z_Eqy|860cB*eJo%
z&h&8R<btM;2Y8NO6zK0u`~k_7EXh6@x{L{?7n+5)Xw~)ad?_FIr;&B>UuLuPLgzp8
zw#RYTe|+Zg_`6_F-p7B3GM0V$@&(vLd$z@Lhy9<4jEhAjzBkHu9qY@zJnLT!@K{X|
zuEXx3yy-7%HGt!yH*f9)Zmz#y@#rY9bMo_OT+CEe;0%(pTX^1%(z@+Td(9ew>mL~|
zY;$pU=RW%)N~XT&!^5S@x$PGhI<)afZUQc}-{Qlv!yedsJisOSc9mqUHlq#joCjcE
nGC}HB4RBc$Rr{s4{xcsGJagsJ<1KkWlNmf+{an^LB{Ts5cQ$Zr

literal 0
HcmV?d00001


From 900ee5c5662fc0c080f6dc93f6dada5ede57290f Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Tue, 1 Sep 2020 00:32:47 +0800
Subject: [PATCH 165/496] fix some format errors of Certificates

---
 .../zh/docs/concepts/cluster-administration/certificates.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/certificates.md b/content/zh/docs/concepts/cluster-administration/certificates.md
index 75efede893..2c1dfc1b6c 100644
--- a/content/zh/docs/concepts/cluster-administration/certificates.md
+++ b/content/zh/docs/concepts/cluster-administration/certificates.md
@@ -198,7 +198,7 @@ manually through `easyrsa`, `openssl` or `cfssl`.
 1. 创建用于生成证书签名请求（CSR）的配置文件。
    确保在将其保存至文件（如 `csr.conf`）之前将尖括号标记的值（如 `<MASTER_IP>`）
    替换为你想使用的真实值。 注意：`MASTER_CLUSTER_IP` 是前面小节中描述的 API 服务器的服务集群 IP
-   (service cluster IP)。 下面的示例也假设用户使用 `cluster.local` 作为默认的 DNS 域名。
+   （service cluster IP）。 下面的示例也假设用户使用 `cluster.local` 作为默认的 DNS 域名。
 
    ```
    [ req ]
@@ -259,7 +259,7 @@ manually through `easyrsa`, `openssl` or `cfssl`.
 <!--
 Finally, add the same parameters into the API server start parameters.
 -->
-最后，添加同样的参数到  API 服务器的启动参数中。
+最后，添加同样的参数到 API 服务器的启动参数中。
 
 ### cfssl
 

From 11dbe4f490c14d689beaa1c361c23187848da63a Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Tue, 1 Sep 2020 08:58:41 +0800
Subject: [PATCH 166/496] Update podpreset.md

---
 content/zh/docs/concepts/workloads/pods/podpreset.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/workloads/pods/podpreset.md b/content/zh/docs/concepts/workloads/pods/podpreset.md
index f4e0f85675..bb17654ddb 100644
--- a/content/zh/docs/concepts/workloads/pods/podpreset.md
+++ b/content/zh/docs/concepts/workloads/pods/podpreset.md
@@ -126,7 +126,7 @@ the Pod; for changes to `Volume`, Kubernetes modifies the Pod Spec.
 一个 Pod 可能不与任何 Pod Preset 匹配，也可能匹配多个 Pod Preset。 同时，一个 `PodPreset` 
 可能不应用于任何 Pod，也可能应用于多个 Pod。 当 `PodPreset` 应用于一个或多个 Pod 时，Kubernetes
 修改 pod spec。 对于 `Env`、 `EnvFrom` 和 `VolumeMounts` 的改动， Kubernetes 修改 pod
-中所有容器的规格，对于卷的改动，Kubernetes 会修改 Pod 规约。
+中所有容器 spec，对于卷的改动，Kubernetes 会修改 Pod spec。
 
 <!--
 A Pod Preset is capable of modifying the following fields in a Pod spec when appropriate:

From 429ac3106373a44a93cd8b28909446ddbbf6980e Mon Sep 17 00:00:00 2001
From: Jim Angel <jameswangel@gmail.com>
Date: Mon, 31 Aug 2020 22:34:24 -0500
Subject: [PATCH 167/496] Updating Barnie Makonda's permissions

---
 OWNERS_ALIASES | 2 --
 1 file changed, 2 deletions(-)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index c39698ba81..54d87f0cdf 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -27,7 +27,6 @@ aliases:
     - jimangel
     - kbarnard10
     - kbhawkey
-    - makoscafee
     - onlydole
     - savitharaghunathan
     - sftim
@@ -43,7 +42,6 @@ aliases:
     - jimangel
     - kbarnard10
     - kbhawkey
-    - makoscafee
     - onlydole
     - rajeshdeshpande02
     - sftim

From 7945750685091a162400005bffddf997493dc058 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=9F=A9=E5=86=AC?= <hanxiaozhu@vip.qq.com>
Date: Tue, 1 Sep 2020 14:52:29 +0800
Subject: [PATCH 168/496] Update container-runtimes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

add 安装CRI-O之前，应该先更新数据源否则有可能找不到资源。
---
 .../zh/docs/setup/production-environment/container-runtimes.md  | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 7be7f189cd..85673a3228 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -465,6 +465,7 @@ sudo apt-get install cri-o-1.17
 随后安装 CRI-O:
 
 ```shell
+sudo apt-get update
 sudo apt-get install cri-o-1.17
 ```
 
@@ -499,6 +500,7 @@ sudo apt-get install cri-o-1.17
 
 ```shell
 # 安装 CRI-O
+sudo apt-get update
 sudo apt-get install cri-o-1.17
 ```
 {{% /tab %}}

From 91f4a125c0a284b35438e144304defaa31fdefc7 Mon Sep 17 00:00:00 2001
From: Sascha Grunert <sgrunert@suse.com>
Date: Tue, 1 Sep 2020 09:51:26 +0200
Subject: [PATCH 169/496] Remove the feature gate part from immutable
 secrets/configmaps

The feature is in `beta` since Kubernetes v1.19.0 so it is enabled per
default. This means that we can omit the hint to enable the feature
gate manually.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
---
 content/en/docs/concepts/configuration/configmap.md | 7 ++++---
 content/en/docs/concepts/configuration/secret.md    | 7 ++++---
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index f40c99fbc4..3e7abfd593 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -224,9 +224,10 @@ data has the following advantages:
 - improves performance of your cluster by significantly reducing load on kube-apiserver, by
 closing watches for config maps marked as immutable.
 
-To use this feature, enable the `ImmutableEphemeralVolumes`
-[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) and set
-your Secret or ConfigMap `immutable` field to `true`. For example:
+This feature is controlled by the `ImmutableEphemeralVolumes` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/),
+which is enabled by default since v1.19. You can create an immutable
+ConfigMap by setting the `immutable` field to `true`. For example,
 ```yaml
 apiVersion: v1
 kind: ConfigMap
diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 8c4dbcadb0..651e90f270 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -728,9 +728,10 @@ data has the following advantages:
 - improves performance of your cluster by significantly reducing load on kube-apiserver, by
 closing watches for secrets marked as immutable.
 
-To use this feature, enable the `ImmutableEphemeralVolumes`
-[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) and set
-your Secret or ConfigMap `immutable` field to `true`. For example:
+This feature is controlled by the `ImmutableEphemeralVolumes` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/),
+which is enabled by default since v1.19. You can create an immutable
+Secret by setting the `immutable` field to `true`. For example,
 ```yaml
 apiVersion: v1
 kind: Secret

From c1f1bcf99b17df552d1860f2bfc811bdc61a186e Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Tue, 1 Sep 2020 16:59:38 +0200
Subject: [PATCH 170/496] update link

Co-authored-by: Bob Killen <killen.bob@gmail.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index b8e4cc186c..03736c5150 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -9,7 +9,7 @@ slug: scaling-kubernetes-networking-with-endpointslices
 
 EndpointSlices are an exciting new API that provides a scalable and extensible alternative to the Endpoints API. EndpointSlices track IP addresses, ports, readiness, and topology information for Pods backing a Service.
 
-In Kubernetes 1.19 this feature is be enabled by default with kube-proxy reading from [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It also enables significant new features in future Kubernetes releases like Topology Aware Routing.
+In Kubernetes 1.19 this feature is be enabled by default with kube-proxy reading from [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It also enables significant new features in future Kubernetes releases like [Topology Aware Routing](/docs/concepts/services-networking/service-topology/).
 
 ## Scalability Limitations of the Endpoints API 
 With the Endpoints API, there was only one Endpoints resource for a Service. That meant that it needed to be able to store IP addresses and ports (network endpoints) for every Pod that was backing the corresponding Service. This resulted in huge API resources. To compound this problem, kube-proxy was running on every node and watching for any updates to Endpoints resources. If even a single network endpoint changed in an Endpoints resource, the whole object would have to be sent to each of those instances of kube-proxy.

From 47dd26bf0970d902de819f442d903838e3ae75ab Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Tue, 11 Aug 2020 10:23:04 -0700
Subject: [PATCH 171/496] Add 3rd party content warning

Signed-off-by: Celeste Horgan <celeste@cncf.io>
Co-authored-by: Tim Bannister <tim+github@scalefactory.com>
---
 content/en/docs/concepts/cluster-administration/addons.md  | 4 ++--
 .../en/docs/concepts/cluster-administration/networking.md  | 7 ++++---
 content/en/docs/reference/using-api/client-libraries.md    | 2 ++
 .../tasks/administer-cluster/declare-network-policy.md     | 6 +-----
 i18n/en.toml                                               | 4 ++++
 layouts/shortcodes/thirdparty-content.html                 | 4 ++++
 6 files changed, 17 insertions(+), 10 deletions(-)
 create mode 100644 layouts/shortcodes/thirdparty-content.html

diff --git a/content/en/docs/concepts/cluster-administration/addons.md b/content/en/docs/concepts/cluster-administration/addons.md
index 05a65a1efc..ac0afcc693 100644
--- a/content/en/docs/concepts/cluster-administration/addons.md
+++ b/content/en/docs/concepts/cluster-administration/addons.md
@@ -5,12 +5,12 @@ content_type: concept
 
 <!-- overview -->
 
+{{% thirdparty-content %}}
+
 Add-ons extend the functionality of Kubernetes.
 
 This page lists some of the available add-ons and links to their respective installation instructions.
 
-Add-ons in each section are sorted alphabetically - the ordering does not imply any preferential status.
-
 <!-- body -->
 
 ## Networking and Network Policy
diff --git a/content/en/docs/concepts/cluster-administration/networking.md b/content/en/docs/concepts/cluster-administration/networking.md
index ff30e60b12..3b692fb448 100644
--- a/content/en/docs/concepts/cluster-administration/networking.md
+++ b/content/en/docs/concepts/cluster-administration/networking.md
@@ -79,6 +79,8 @@ as an introduction to various technologies and serves as a jumping-off point.
 The following networking options are sorted alphabetically - the order does not
 imply any preferential status.
 
+{{% thirdparty-content %}}
+
 ### ACI
 
 [Cisco Application Centric Infrastructure](https://www.cisco.com/c/en/us/solutions/data-center-virtualization/application-centric-infrastructure/index.html) offers an integrated overlay and underlay SDN solution that supports containers, virtual machines, and bare metal servers. [ACI](https://www.github.com/noironetworks/aci-containers) provides container networking integration for ACI. An overview of the integration is provided [here](https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/solution-overview-c22-739493.pdf).
@@ -112,7 +114,7 @@ Additionally, the CNI can be run alongside [Calico for network policy enforcemen
 [Azure CNI](https://docs.microsoft.com/en-us/azure/virtual-network/container-networking-overview) is an [open source](https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md) plugin that integrates Kubernetes Pods with an Azure Virtual Network (also known as VNet) providing network performance at par with VMs. Pods can connect to peered VNet and to on-premises over Express Route or site-to-site VPN and are also directly reachable from these networks. Pods can access Azure services, such as storage and SQL, that are protected by Service Endpoints or Private Link. You can use VNet security policies and routing to filter Pod traffic. The plugin assigns VNet IPs to Pods by utilizing a pool of secondary IPs pre-configured on the Network Interface of a Kubernetes node.
 
 Azure CNI is available natively in the [Azure Kubernetes Service (AKS)] (https://docs.microsoft.com/en-us/azure/aks/configure-azure-cni).
- 
+
 
 ### Big Cloud Fabric from Big Switch Networks
 
@@ -313,5 +315,4 @@ to run, and in both cases, the network provides one IP address per pod - as is s
 
 The early design of the networking model and its rationale, and some future
 plans are described in more detail in the
-[networking design document](https://git.k8s.io/community/contributors/design-proposals/network/networking.md).
-
+[networking design document](https://git.k8s.io/community/contributors/design-proposals/network/networking.md).
\ No newline at end of file
diff --git a/content/en/docs/reference/using-api/client-libraries.md b/content/en/docs/reference/using-api/client-libraries.md
index c4d7e5ea24..9e4ee1f67e 100644
--- a/content/en/docs/reference/using-api/client-libraries.md
+++ b/content/en/docs/reference/using-api/client-libraries.md
@@ -40,6 +40,8 @@ The following client libraries are officially maintained by
 
 ## Community-maintained client libraries
 
+{{% thirdparty-content %}}
+
 The following Kubernetes API client libraries are provided and maintained by
 their authors, not the Kubernetes team.
 
diff --git a/content/en/docs/tasks/administer-cluster/declare-network-policy.md b/content/en/docs/tasks/administer-cluster/declare-network-policy.md
index 61add5312a..fed4a77f9d 100644
--- a/content/en/docs/tasks/administer-cluster/declare-network-policy.md
+++ b/content/en/docs/tasks/administer-cluster/declare-network-policy.md
@@ -9,6 +9,7 @@ content_type: task
 <!-- overview -->
 This document helps you get started using the Kubernetes [NetworkPolicy API](/docs/concepts/services-networking/network-policies/) to declare network policies that govern how pods communicate with each other.
 
+{{% thirdparty-content %}}
 
 ## {{% heading "prerequisites" %}}
 
@@ -23,11 +24,6 @@ Make sure you've configured a network provider with network policy support. Ther
 * [Romana](/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/)
 * [Weave Net](/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy/)
 
-{{< note >}}
-The above list is sorted alphabetically by product name, not by recommendation or preference. This example is valid for a Kubernetes cluster using any of these providers.
-{{< /note >}}
-
-
 <!-- steps -->
 
 ## Create an `nginx` deployment and expose it via a service
diff --git a/i18n/en.toml b/i18n/en.toml
index c59107c7c8..f9250ce1d3 100644
--- a/i18n/en.toml
+++ b/i18n/en.toml
@@ -198,6 +198,10 @@ other = "Subscribe"
 [synopsis_heading]
 other = "Synopsis"
 
+
+[thirdparty_message]
+other = """This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects. This page follows <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF website guidelines</a> by listing projects alphabetically. To add a project to this list, read the <a href="/contribute/style/content-guide/#third-party-content">content guide</a> before submitting a change."""
+
 [ui_search_placeholder]
 other = "Search"
 
diff --git a/layouts/shortcodes/thirdparty-content.html b/layouts/shortcodes/thirdparty-content.html
new file mode 100644
index 0000000000..5a98081e49
--- /dev/null
+++ b/layouts/shortcodes/thirdparty-content.html
@@ -0,0 +1,4 @@
+<blockquote class="callout caution" role="alert">
+  <strong>{{ T "caution" | safeHTML }}</strong>
+  {{ T "thirdparty_message" | safeHTML }}
+</blockquote>

From 8cc8199d9aa483f3ae66b721d6ac4ecc7785104d Mon Sep 17 00:00:00 2001
From: Jubayer Abdullah Joy <jubayerjoy98@gmail.com>
Date: Wed, 2 Sep 2020 02:01:07 +0600
Subject: [PATCH 172/496] Change filesystem paths to monospace in Minikube
 setup guide

Signed-off-by: Jubayer Abdullah Joy <jubayerjoy98@gmail.com>

- Changed  filesystem paths to monospace in `/docs/setup/learning-environment/minikube.md` mounted host folder section
---
 content/en/docs/setup/learning-environment/minikube.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/setup/learning-environment/minikube.md b/content/en/docs/setup/learning-environment/minikube.md
index d0b07b046a..0e3e26ea2a 100644
--- a/content/en/docs/setup/learning-environment/minikube.md
+++ b/content/en/docs/setup/learning-environment/minikube.md
@@ -452,11 +452,11 @@ Host folder sharing is not implemented in the KVM driver yet.
 
 | Driver | OS | HostFolder | VM |
 | --- | --- | --- | --- |
-| VirtualBox | Linux | /home | /hosthome |
-| VirtualBox | macOS | /Users | /Users |
-| VirtualBox | Windows | C://Users | /c/Users |
-| VMware Fusion | macOS | /Users | /mnt/hgfs/Users |
-| Xhyve | macOS | /Users | /Users |
+| VirtualBox | Linux | `/home` | `/hosthome` |
+| VirtualBox | macOS | `/Users` | `/Users` |
+| VirtualBox | Windows | `C://Users` | `/c/Users` |
+| VMware Fusion | macOS | `/Users` | `/mnt/hgfs/Users` |
+| Xhyve | macOS | `/Users` | `/Users` |
 
 ## Private Container Registries
 

From 8cd3b2c0c3362cc0fee8a0d45b73256368cfe389 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Wed, 2 Sep 2020 00:28:44 +0300
Subject: [PATCH 173/496] fix broken link

---
 README-ru.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README-ru.md b/README-ru.md
index bb290654a8..d999e1cc88 100644
--- a/README-ru.md
+++ b/README-ru.md
@@ -38,8 +38,8 @@ hugo server --buildFuture
 Узнать подробнее о том, как поучаствовать в документации Kubernetes, вы можете по ссылкам ниже:
 
 * [Начните вносить свой вклад](https://kubernetes.io/docs/contribute/)
-* [Использование шаблонов страниц](http://kubernetes.io/docs/contribute/style/page-templates/)
-* [Руководство по оформлению документации](http://kubernetes.io/docs/contribute/style/style-guide/)
+* [Использование шаблонов страниц](https://kubernetes.io/docs/contribute/style/page-content-types/)
+* [Руководство по оформлению документации](https://kubernetes.io/docs/contribute/style/style-guide/)
 * [Руководство по локализации Kubernetes](https://kubernetes.io/docs/contribute/localization/)
 
 ## Файл `README.md` на других языках

From 971de9c3411b311aa85870f038583fd39543fd26 Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Wed, 2 Sep 2020 00:38:32 +0200
Subject: [PATCH 174/496] fix typo

Co-authored-by: Rob Scott <rob.scott87@gmail.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 03736c5150..3bd48be0fd 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -9,7 +9,7 @@ slug: scaling-kubernetes-networking-with-endpointslices
 
 EndpointSlices are an exciting new API that provides a scalable and extensible alternative to the Endpoints API. EndpointSlices track IP addresses, ports, readiness, and topology information for Pods backing a Service.
 
-In Kubernetes 1.19 this feature is be enabled by default with kube-proxy reading from [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It also enables significant new features in future Kubernetes releases like [Topology Aware Routing](/docs/concepts/services-networking/service-topology/).
+In Kubernetes 1.19 this feature is enabled by default with kube-proxy reading from [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/) instead of Endpoints. Although this will mostly be an invisible change, it should result in noticeable scalability improvements in large clusters. It also enables significant new features in future Kubernetes releases like [Topology Aware Routing](/docs/concepts/services-networking/service-topology/).
 
 ## Scalability Limitations of the Endpoints API 
 With the Endpoints API, there was only one Endpoints resource for a Service. That meant that it needed to be able to store IP addresses and ports (network endpoints) for every Pod that was backing the corresponding Service. This resulted in huge API resources. To compound this problem, kube-proxy was running on every node and watching for any updates to Endpoints resources. If even a single network endpoint changed in an Endpoints resource, the whole object would have to be sent to each of those instances of kube-proxy.

From bf0d740ba3898981c4b0d2596b9d32fa1557b68a Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Wed, 2 Sep 2020 00:38:42 +0200
Subject: [PATCH 175/496] fix typo

Co-authored-by: Rob Scott <rob.scott87@gmail.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 3bd48be0fd..e37ceb4882 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -34,7 +34,7 @@ Potentially more significant, now that all Pod IPs for a Service don't need to b
 All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale to at least 10 times any previous limitations.
 
 ## EndpointSlices enable new functionality
-Introduced as an alpha feature in Kubernetes v1.18, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This could include dual-stack Services, topology aware routing, and endpoint subsetting.
+Introduced as an alpha feature in Kubernetes v1.16, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This could include dual-stack Services, topology aware routing, and endpoint subsetting.
 
 Dual-Stack Services are an exciting new feature that has been in development alongside EndpointSlices. They will utilize both IPv4 and IPv6 addresses for Services and rely on the addressType field on EndpointSlices to track these addresses by IP family. 
 

From c7aad1693b41426ca2710388f8f9d96a85b2e9c2 Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Wed, 2 Sep 2020 00:38:52 +0200
Subject: [PATCH 176/496] fix typo

Co-authored-by: Rob Scott <rob.scott87@gmail.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index e37ceb4882..efc04b806d 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -43,4 +43,4 @@ Topology aware routing will update kube-proxy to prefer routing requests within
 ## What does this mean for the Endpoints API?
 Although the EndpointSlice API is providing a newer and more scalable alternative to the Endpoints API, the Endpoints API will continue to be considered generally available and stable. The most significant change planned for the Endpoints API will involve beginning to truncate Endpoints that would otherwise run into scalability issues.
 
-Although the Endpoints API is not going away, many new features will be enabled by the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider switching to EndpointSlices in the future.
+The Endpoints API is not going away, but many new features will rely on the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider switching to EndpointSlices in the future.

From ae7b7c02671834ab67879ab8d3f124b6bac2aab4 Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Wed, 2 Sep 2020 00:39:03 +0200
Subject: [PATCH 177/496] fix typo

Co-authored-by: Rob Scott <rob.scott87@gmail.com>
---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index efc04b806d..9da8695a8c 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -31,7 +31,7 @@ This API dramatically improves networking scalability. Now when a Pod is added o
 
 Potentially more significant, now that all Pod IPs for a Service don't need to be stored in a single resource, we don't have to worry about the size limit for objects stored in etcd. EndpointSlices have already been used to scale Services beyond 100,000 network endpoints.
 
-All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale to at least 10 times any previous limitations.
+All of this is brought together with some significant performance improvements that have been made in kube-proxy. When using EndpointSlices at scale, significantly less data will be transferred for endpoints updates and kube-proxy should be faster to update iptables or ipvs rules. Beyond that, Services can now scale to at least 10 times beyond any previous limitations.
 
 ## EndpointSlices enable new functionality
 Introduced as an alpha feature in Kubernetes v1.16, EndpointSlices were built to enable some exciting new functionality in future Kubernetes releases. This could include dual-stack Services, topology aware routing, and endpoint subsetting.

From 7048041d14fef76c1a7e6308201ef8680b7b4fab Mon Sep 17 00:00:00 2001
From: Lorenzo Paris <lparis@vmware.com>
Date: Tue, 1 Sep 2020 16:47:11 -0700
Subject: [PATCH 178/496] Update storage-classes.md

Adding vSphere CSI StorageClass example.
---
 .../docs/concepts/storage/storage-classes.md  | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index f2c8589db4..9926ffc973 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -415,6 +415,33 @@ This internal provisioner of OpenStack is deprecated. Please use [the external c
 
 ### vSphere
 
+There are two types of provisioners for vSphere storage classes: 
+
+- [CSI provisioner](#csi-provisioner): `csi.vsphere.vmware.com`
+- [vCP provisioner](#vcp-provisioner): `kubernetes.io/vsphere-volume`
+
+In-tree provisioners are [deprecated](https://kubernetes.io/blog/2019/12/09/kubernetes-1-17-feature-csi-migration-beta/#why-are-we-migrating-in-tree-plugins-to-csi). For more information on the CSI provisioner, see [Kubernetes vSphere CSI Driver](https://vsphere-csi-driver.sigs.k8s.io/) and [vSphereVolume CSI migration](https://kubernetes.io/docs/concepts/storage/volumes/#csi-migration-5).
+
+#### CSI Provisioner
+
+The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters.
+
+```
+kind: StorageClass
+apiVersion: storage.k8s.io/v1
+metadata:
+  name: example-vsphere-sc-csi
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
+provisioner: csi.vsphere.vmware.com
+parameters:
+  datastoreurl: "ds:///vmfs/volumes/vsan:52d8eb4842dbf493-41523be9cd4ff7b7/"
+```
+    
+#### vCP Provisioner 
+
+The following examples use the VMware Cloud Provider (vCP) StorageClass provisioner.  
+
 1. Create a StorageClass with a user specified disk format.
 
     ```yaml

From 33bdbfca4ee263673f2598cf43adb50477525243 Mon Sep 17 00:00:00 2001
From: Evan Adi <evan.adiprasetyo@gmail.com>
Date: Sat, 8 Aug 2020 14:52:39 +0700
Subject: [PATCH 179/496] Translate
 tasks/administer-cluster/manage-resources/memory-constraint-namespace into
 Bahasa Indonesia

nits:
Fix title typo
Add memory-constraints.yaml
Add memory-constraints-pod.yaml
Add example files
nits:
- index title capitalization
- use Container instead of Kontainer
- fix typos
- translate whatsnext references title
---
 .../docs/tasks/administer-cluster/_index.md   |   6 +
 .../manage-resources/_index.md                |   4 +
 .../memory-constraint-namespace.md            | 272 ++++++++++++++++++
 .../resource/memory-constraints-pod-2.yaml    |  13 +
 .../resource/memory-constraints-pod-3.yaml    |  13 +
 .../resource/memory-constraints-pod-4.yaml    |   9 +
 .../resource/memory-constraints-pod.yaml      |  13 +
 .../admin/resource/memory-constraints.yaml    |  11 +
 8 files changed, 341 insertions(+)
 create mode 100755 content/id/docs/tasks/administer-cluster/_index.md
 create mode 100644 content/id/docs/tasks/administer-cluster/manage-resources/_index.md
 create mode 100644 content/id/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace.md
 create mode 100644 content/id/examples/admin/resource/memory-constraints-pod-2.yaml
 create mode 100644 content/id/examples/admin/resource/memory-constraints-pod-3.yaml
 create mode 100644 content/id/examples/admin/resource/memory-constraints-pod-4.yaml
 create mode 100644 content/id/examples/admin/resource/memory-constraints-pod.yaml
 create mode 100644 content/id/examples/admin/resource/memory-constraints.yaml

diff --git a/content/id/docs/tasks/administer-cluster/_index.md b/content/id/docs/tasks/administer-cluster/_index.md
new file mode 100755
index 0000000000..4855515ce2
--- /dev/null
+++ b/content/id/docs/tasks/administer-cluster/_index.md
@@ -0,0 +1,6 @@
+---
+title: "Mengelola Sebuah Klaster"
+description: Pelajari tugas-tugas umum dalam pengelolaan sebuah klaster.
+weight: 20
+---
+
diff --git a/content/id/docs/tasks/administer-cluster/manage-resources/_index.md b/content/id/docs/tasks/administer-cluster/manage-resources/_index.md
new file mode 100644
index 0000000000..b3094dde73
--- /dev/null
+++ b/content/id/docs/tasks/administer-cluster/manage-resources/_index.md
@@ -0,0 +1,4 @@
+---
+title: Mengelola Memori, CPU, dan Sumber Daya API
+weight: 20
+---
diff --git a/content/id/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace.md b/content/id/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace.md
new file mode 100644
index 0000000000..1aae3e38f0
--- /dev/null
+++ b/content/id/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace.md
@@ -0,0 +1,272 @@
+---
+title: Mengatur Batas Minimum dan Maksimum Memori pada sebuah Namespace
+content_type: task
+weight: 30
+---
+
+
+<!-- overview -->
+
+Laman ini menunjukkan cara untuk mengatur nilai minimum dan maksimum memori yang digunakan oleh Container
+yang berjalan pada sebuah Namespace. Kamu dapat menentukan nilai minimum dan maksimum memori pada objek
+[LimitRange](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#limitrange-v1-core). Jika sebuah Pod tidak memenuhi batasan yang ditentukan oleh LimitRange,
+maka Pod tersebut tidak dapat dibuat pada Namespace tersebut.
+
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+Tiap Node dalam klastermu harus memiliki setidaknya 1 GiB memori.
+
+
+
+
+<!-- steps -->
+
+## Membuat sebuah Namespace
+
+Buat sebuah Namespace sehingga sumber daya yang kamu buat pada latihan ini
+terisolasi dari komponen lain pada klastermu.
+
+```shell
+kubectl create namespace constraints-mem-example
+```
+
+## Membuat LimitRange dan Pod
+
+Berikut berkas konfigurasi untuk sebuah LimitRange:
+
+{{< codenew file="admin/resource/memory-constraints.yaml" >}}
+
+Membuat LimitRange:
+
+```shell
+kubectl apply -f https://k8s.io/examples/admin/resource/memory-constraints.yaml --namespace=constraints-mem-example
+```
+
+Melihat informasi mendetail mengenai LimitRange:
+
+```shell
+kubectl get limitrange mem-min-max-demo-lr --namespace=constraints-mem-example --output=yaml
+```
+
+Keluaran yang dihasilkan menunjukkan batasan minimum dan maksimum dari memori seperti yang diharapkan. Tetapi
+perhatikan hal berikut, meskipun kamu tidak menentukan nilai bawaan pada berkas konfigurasi untuk 
+LimitRange, namun nilai tersebut akan dibuat secara otomatis.
+
+```
+  limits:
+  - default:
+      memory: 1Gi
+    defaultRequest:
+      memory: 1Gi
+    max:
+      memory: 1Gi
+    min:
+      memory: 500Mi
+    type: Container
+```
+
+Mulai sekarang setiap Container yang dibuat pada Namespace constraints-mem-example, Kubernetes
+akan menjalankan langkah-langkah berikut:
+
+* Jika Container tersebut tidak menentukan permintaan dan limit memori, maka diberikan nilai permintaan 
+dan limit memori bawaan pada Container.
+
+* Memastikan Container memiliki permintaan memori yang lebih besar atau sama dengan 500 MiB.
+
+* Memastikan Container memiliki limit memori yang lebih kecil atau kurang dari 1 GiB.
+
+Berikut berkas konfigurasi Pod yang memiliki satu Container. Manifes Container
+menentukan permintaan memori 600 MiB dan limit memori 800 MiB. Nilai tersebut memenuhi
+batasan minimum dan maksimum memori yang ditentukan oleh LimitRange.
+
+{{< codenew file="admin/resource/memory-constraints-pod.yaml" >}}
+
+Membuat Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/admin/resource/memory-constraints-pod.yaml --namespace=constraints-mem-example
+```
+
+Memastikan Container pada Pod sudah berjalan:
+
+```shell
+kubectl get pod constraints-mem-demo --namespace=constraints-mem-example
+```
+
+Melihat informasi mendetail tentang Pod:
+
+```shell
+kubectl get pod constraints-mem-demo --output=yaml --namespace=constraints-mem-example
+```
+
+Keluaran yang dihasilkan menunjukkan Container memiliki permintaan memori 600 MiB dan limit memori
+800 MiB. Nilai tersebut memenuhi batasan yang ditentukan oleh LimitRange.
+
+```yaml
+resources:
+  limits:
+     memory: 800Mi
+  requests:
+    memory: 600Mi
+```
+
+Menghapus Podmu:
+
+```shell
+kubectl delete pod constraints-mem-demo --namespace=constraints-mem-example
+```
+
+## Mencoba membuat Pod yang melebihi batasan maksimum memori
+
+Berikut berkas konfigurasi untuk sebuah Pod yang memiliki satu Container. Container tersebut menentukan
+permintaan memori 800 MiB dan batas memori 1.5 GiB.
+
+{{< codenew file="admin/resource/memory-constraints-pod-2.yaml" >}}
+
+Mencoba membuat Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/admin/resource/memory-constraints-pod-2.yaml --namespace=constraints-mem-example
+```
+
+Keluaran yang dihasilkan menunjukkan Pod tidak dibuat, karena Container menentukan limit memori yang
+terlalu besar:
+
+```
+Error from server (Forbidden): error when creating "examples/admin/resource/memory-constraints-pod-2.yaml":
+pods "constraints-mem-demo-2" is forbidden: maximum memory usage per Container is 1Gi, but limit is 1536Mi.
+```
+
+## Mencoba membuat Pod yang tidak memenuhi permintaan memori
+
+Berikut berkas konfigurasi untuk sebuah Pod yang memiliki satu Container. Container tersebut menentukan
+permintaan memori 100 MiB dan limit memori 800 MiB.
+
+{{< codenew file="admin/resource/memory-constraints-pod-3.yaml" >}}
+
+Mencoba membuat Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/admin/resource/memory-constraints-pod-3.yaml --namespace=constraints-mem-example
+```
+
+Keluaran yang dihasilkan menunjukkan Pod tidak dibuat, karena Container menentukan permintaan memori yang
+terlalu kecil:
+
+```
+Error from server (Forbidden): error when creating "examples/admin/resource/memory-constraints-pod-3.yaml":
+pods "constraints-mem-demo-3" is forbidden: minimum memory usage per Container is 500Mi, but request is 100Mi.
+```
+
+## Membuat Pod yang tidak menentukan permintaan ataupun limit memori
+
+
+
+Berikut berkas konfigurasi untuk sebuah Pod yang memiliki satu Container. Container tersebut tidak menentukan
+permintaan memori dan juga limit memori.
+
+{{< codenew file="admin/resource/memory-constraints-pod-4.yaml" >}}
+
+Mencoba membuat Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/admin/resource/memory-constraints-pod-4.yaml --namespace=constraints-mem-example
+```
+
+Melihat informasi mendetail tentang Pod:
+
+```
+kubectl get pod constraints-mem-demo-4 --namespace=constraints-mem-example --output=yaml
+```
+
+Keluaran yang dihasilkan menunjukkan Container pada Pod memiliki permintaan memori 1 GiB dan limit memori 1 GiB.
+Bagaimana Container mendapatkan nilai tersebut?
+
+```
+resources:
+  limits:
+    memory: 1Gi
+  requests:
+    memory: 1Gi
+```
+
+Karena Containermu tidak menentukan permintaan dan limit memori, Container tersebut diberikan
+[permintaan dan limit memori bawaan](/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/)
+dari LimitRange.
+
+Pada tahap ini, Containermu mungkin saja berjalan ataupun mungkin juga tidak berjalan. Ingat bahwa prasyarat
+untuk tugas ini adalah Node harus memiliki setidaknya 1 GiB memori. Jika tiap Node hanya memiliki
+1 GiB memori, maka tidak akan ada cukup memori untuk dialokasikan pada setiap Node untuk memenuhi permintaan 1 Gib memori. Jika ternyata kamu menggunakan Node dengan 2 GiB memori, maka kamu mungkin memiliki cukup ruang untuk memenuhi permintaan 1 GiB tersebut.
+
+Menghapus Pod:
+
+```
+kubectl delete pod constraints-mem-demo-4 --namespace=constraints-mem-example
+```
+
+## Pelaksanaan batasan minimum dan maksimum memori
+
+Batasan maksimum dan minimum memori yang yang ditetapkan pada sebuah Namespace oleh LimitRange dilaksanakan
+hanya ketika Pod dibuat atau diperbarui. Jika kamu mengubah LimitRange, hal tersebut tidak akan memengaruhi
+Pods yang telah dibuat sebelumnya.
+
+## Motivasi untuk batasan minimum dan maksimum memori
+
+Sebagai seorang administrator klaster, kamu mungkin ingin menetapkan pembatasan jumlah memori yang dapat digunakan oleh Pod.
+Sebagai contoh:
+
+* Tiap Node dalam sebuah klaster memiliki 2 GB memori. Kamu tidak ingin menerima Pod yang meminta
+lebih dari 2 GB memori, karena tidak ada Node pada klater yang dapat memenuhi permintaan tersebut.
+
+* Sebuah klaster digunakan bersama pada departemen produksi dan pengembangan.
+Kamu ingin mengizinkan beban kerja (_workload_) pada produksi untuk menggunakan hingga 8 GB memori, tapi
+kamu ingin beban kerja pada pengembangan cukup terbatas sampai dengan 512 MB saja. Kamu membuat Namespace terpisah
+untuk produksi dan pengembangan, dan kamu menerapkan batasan memori pada tiap Namespace.
+
+## Bersih-bersih
+
+Menghapus Namespace:
+
+```shell
+kubectl delete namespace constraints-mem-example
+```
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+### Untuk administrator klaster
+
+* [Mengatur Permintaan dan Limit Memori Bawaan untuk Sebuah Namespace](/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/)
+
+* [Mengatur Permintaan dan Limit CPU Bawaan untuk Sebuah Namespace](/docs/tasks/administer-cluster/manage-resources/cpu-default-namespace/)
+
+* [Mengatur Batas Minimum dan Maksimum CPU untuk Sebuah Namespace](/docs/tasks/administer-cluster/manage-resources/cpu-constraint-namespace/)
+
+* [Mengatur Kuota Memori dan CPU untuk Sebuah Namespace](/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/)
+
+* [Mengatur Kuota Pod untuk Sebuah Namespace](/docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/)
+
+* [Mengatur Kuota untuk Objek API](/docs/tasks/administer-cluster/quota-api-object/)
+
+### Untuk pengembang aplikasi
+
+* [Memberikan Sumber Daya Memori pada Container dan Pod](/docs/tasks/configure-pod-container/assign-memory-resource/)
+
+* [Memberikan Sumber Daya CPU pada Container dan Pod](/docs/tasks/configure-pod-container/assign-cpu-resource/)
+
+* [Mengatur Kualitas Layanan Pod](/docs/tasks/configure-pod-container/quality-service-pod/)
+
+
+
+
+
+
+
diff --git a/content/id/examples/admin/resource/memory-constraints-pod-2.yaml b/content/id/examples/admin/resource/memory-constraints-pod-2.yaml
new file mode 100644
index 0000000000..0b1ae569c4
--- /dev/null
+++ b/content/id/examples/admin/resource/memory-constraints-pod-2.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: constraints-mem-demo-2
+spec:
+  containers:
+  - name: constraints-mem-demo-2-ctr
+    image: nginx
+    resources:
+      limits:
+        memory: "1.5Gi"
+      requests:
+        memory: "800Mi"
diff --git a/content/id/examples/admin/resource/memory-constraints-pod-3.yaml b/content/id/examples/admin/resource/memory-constraints-pod-3.yaml
new file mode 100644
index 0000000000..f97cd4a8ac
--- /dev/null
+++ b/content/id/examples/admin/resource/memory-constraints-pod-3.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: constraints-mem-demo-3
+spec:
+  containers:
+  - name: constraints-mem-demo-3-ctr
+    image: nginx
+    resources:
+      limits:
+        memory: "800Mi"
+      requests:
+        memory: "100Mi"
diff --git a/content/id/examples/admin/resource/memory-constraints-pod-4.yaml b/content/id/examples/admin/resource/memory-constraints-pod-4.yaml
new file mode 100644
index 0000000000..657530c41e
--- /dev/null
+++ b/content/id/examples/admin/resource/memory-constraints-pod-4.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: constraints-mem-demo-4
+spec:
+  containers:
+  - name: constraints-mem-demo-4-ctr
+    image: nginx
+
diff --git a/content/id/examples/admin/resource/memory-constraints-pod.yaml b/content/id/examples/admin/resource/memory-constraints-pod.yaml
new file mode 100644
index 0000000000..06954d10d6
--- /dev/null
+++ b/content/id/examples/admin/resource/memory-constraints-pod.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: constraints-mem-demo
+spec:
+  containers:
+  - name: constraints-mem-demo-ctr
+    image: nginx
+    resources:
+      limits:
+        memory: "800Mi"
+      requests:
+        memory: "600Mi"
diff --git a/content/id/examples/admin/resource/memory-constraints.yaml b/content/id/examples/admin/resource/memory-constraints.yaml
new file mode 100644
index 0000000000..3a2924c032
--- /dev/null
+++ b/content/id/examples/admin/resource/memory-constraints.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: mem-min-max-demo-lr
+spec:
+  limits:
+  - max:
+      memory: 1Gi
+    min:
+      memory: 500Mi
+    type: Container

From c6144ddf76cdd2dee93e0cff5e5815883bf739e6 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:08:33 +0900
Subject: [PATCH 180/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

半角ということで承知しました。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 69609c1f79..e331d8f466 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -20,7 +20,7 @@ Kubernetesを使用してLinuxノードとWindowsノードを混在させて実
 ## {{% heading "prerequisites" %}}
  {{< version-check >}}
 
-* WindowsコンテナをホストするWindowsノードを構成するには、[Windows Server 2019ライセンス](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing)（またはそれ以上）を取得します。
+* WindowsコンテナをホストするWindowsノードを構成するには、[Windows Server 2019ライセンス](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing)(またはそれ以上)を取得します。
 VXLAN/オーバーレイネットワークを使用している場合は、[KB4489899](https://support.microsoft.com/help/4489899)もインストールされている必要があります。
 
 * コントロールプレーンにアクセスできるLinuxベースのKubernetes kubeadmクラスター（[kubeadmを使用した単一のコントロールプレーンクラスターの作成](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)を参照）
@@ -183,4 +183,3 @@ flannel Podが実行されると、ノードは`Ready`状態になり、ワー
 
 - [Windows kubeadmノードのアップグレード](/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes)
 
-

From ff1de4ad209fc2f82bee5924292d7fc57d595675 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:08:48 +0900
Subject: [PATCH 181/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

半角ということで承知しました。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index e331d8f466..071f0f2cea 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -23,7 +23,7 @@ Kubernetesを使用してLinuxノードとWindowsノードを混在させて実
 * WindowsコンテナをホストするWindowsノードを構成するには、[Windows Server 2019ライセンス](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing)(またはそれ以上)を取得します。
 VXLAN/オーバーレイネットワークを使用している場合は、[KB4489899](https://support.microsoft.com/help/4489899)もインストールされている必要があります。
 
-* コントロールプレーンにアクセスできるLinuxベースのKubernetes kubeadmクラスター（[kubeadmを使用した単一のコントロールプレーンクラスターの作成](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)を参照）
+* コントロールプレーンにアクセスできるLinuxベースのKubernetes kubeadmクラスター([kubeadmを使用した単一のコントロールプレーンクラスターの作成](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)を参照)
 
 
 
@@ -182,4 +182,3 @@ flannel Podが実行されると、ノードは`Ready`状態になり、ワー
 
 
 - [Windows kubeadmノードのアップグレード](/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes)
-

From b9498f5256d80f703df80c1920a3cf1bc53e2dee Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:08:59 +0900
Subject: [PATCH 182/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

半角ということで承知しました。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 071f0f2cea..d2cf89821c 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -39,7 +39,7 @@ VXLAN/オーバーレイネットワークを使用している場合は、[KB44
 
 <!-- lessoncontent -->
 
-## はじめに：クラスタへのWindowsノードの追加
+## はじめに: クラスタへのWindowsノードの追加
 
 ### ネットワーク構成
 

From ca4dd1c00173ca58d968ec990b9b16074ceaefb2 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:09:24 +0900
Subject: [PATCH 183/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index d2cf89821c..8a7676430f 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -77,7 +77,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
         }
     ```
 
-    {{< note >}}Linux上のFlannelがWindows上のFlannelと相互運用するには、VNIを4096およびポート4789に設定する必要があります。これらのフィールドの説明については、[VXLANドキュメント](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan)を参照。{{< /note >}}
+    {{< note >}}Linux上のFlannelがWindows上のFlannelと相互運用するには、VNIを4096およびポート4789に設定する必要があります。これらのフィールドの説明については、[VXLANドキュメント](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan)を参照してください。{{< /note >}}
 
     {{< note >}}L2Bridge/Host-gatewayモードを使用するには、代わりに`Type`の値を`"host-gw"`に変更し、`VNI`と`Port`を省略します。{{< /note >}}
 

From 2fe0c07fa15ce58fb22dfb9d112896d6b0739f24 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:09:42 +0900
Subject: [PATCH 184/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 8a7676430f..1f9198de80 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -103,7 +103,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
     kube-system   kube-flannel-ds-54954                     1/1          Running   0          1m
     ```
 
-1. Windows Flannelとkube-proxy DaemonSetsを追加する
+1. Windows Flannelとkube-proxy DaemonSetを追加する
 
     これで、Windows互換バージョンのFlannelおよびkube-proxyを追加できます。
     順番に互換性のあるバージョンのkube-proxyを確実に入手するには、イメージのタグを代用する必要があります。

From 97a79be0c611f1b67cd9401c30da645ba0dabc66 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:09:57 +0900
Subject: [PATCH 185/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 1f9198de80..f6c418e8ee 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -146,7 +146,7 @@ Windowsセクションのすべてのコードスニペットは、
 Windowsワーカーノードの(管理者)権限を持つPowerShell環境で実行されます。
 {{< /note >}}
 
-1. wins、kubelet、kubeadmのインストールします。
+1. wins、kubelet、kubeadmをインストールします。
 
    ```PowerShell
    curl.exe -LO https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/PrepareNode.ps1

From 571e064622600cd9d625bdc219dcce8201f3448f Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:10:09 +0900
Subject: [PATCH 186/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

半角ということで承知しました。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index f6c418e8ee..8937719820 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -157,7 +157,7 @@ Windowsワーカーノードの(管理者)権限を持つPowerShell環境で実
 
     コントロールプレーンホストで`kubeadm init`を実行したときに提供されたコマンドを使用します。
     このコマンドがなくなった場合、またはトークンの有効期限が切れている場合は、`kubeadm token create --print-join-command`
-    （コントロールプレーンホスト上で）を実行して新しいトークンを生成します。
+    (コントロールプレーンホスト上で)を実行して新しいトークンを生成します。
 
 
 #### インストールの確認

From d7c01381a86bc27bf1b2b566d396ea42211444cb Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:10:32 +0900
Subject: [PATCH 187/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

問題ありません。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 8937719820..a38a31463f 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -168,7 +168,7 @@ kubectl get nodes -o wide
 ```
 
 新しいノードが`NotReady`状態の場合は、flannelイメージがまだダウンロードされている可能性があります。
-`kube-system`名前空間のフランネルポッドを確認することで、以前と同様に進行状況を確認できます:
+`kube-system`名前空間のflannel Podを確認することで、以前と同様に進行状況を確認できます:
 
 ```shell
 kubectl -n kube-system get pods -l app=flannel

From 6c221377ae8e4c74609d7db516abf1e30d73211d Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:10:54 +0900
Subject: [PATCH 188/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index a38a31463f..26f09c63ac 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -167,7 +167,7 @@ Windowsワーカーノードの(管理者)権限を持つPowerShell環境で実
 kubectl get nodes -o wide
 ```
 
-新しいノードが`NotReady`状態の場合は、flannelイメージがまだダウンロードされている可能性があります。
+新しいノードが`NotReady`状態の場合は、flannelイメージがまだダウンロード中の可能性があります。
 `kube-system`名前空間のflannel Podを確認することで、以前と同様に進行状況を確認できます:
 
 ```shell

From e6cf4c4568e0e19cb5069088946785147b3e6300 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:11:40 +0900
Subject: [PATCH 189/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 .../administer-cluster/kubeadm/upgrading-windows-nodes.md      | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md
index e157eda3e4..3c367aaa22 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/upgrading-windows-nodes.md
@@ -18,7 +18,7 @@ weight: 40
  
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 * [残りのkubeadmクラスターをアップグレードするプロセス](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade)を理解します。
-Windowsノードをアップグレードする前にコントロールプレーンノードをアップグレードしてほしいです。
+Windowsノードをアップグレードする前にコントロールプレーンノードをアップグレードしたいと思うかもしれません。
 
 
 
@@ -90,4 +90,3 @@ Windowsノードをアップグレードする前にコントロールプレー
     ```
 
 
-

From 01755116bb9ea2b4256948c028883a8237e82809 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Wed, 2 Sep 2020 16:16:01 +0900
Subject: [PATCH 190/496] reviewers delete

---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md   | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 26f09c63ac..a28efed015 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -1,7 +1,4 @@
 ---
-reviewers:
-- michmike
-- patricklang
 title: Windowsノードの追加
 min-kubernetes-server-version: 1.17
 content_type: tutorial

From 33c82671632b30c93889f28364e2ae52c3d1b333 Mon Sep 17 00:00:00 2001
From: feranwq <feranwq@gmail.com>
Date: Wed, 2 Sep 2020 16:14:59 +0800
Subject: [PATCH 191/496] update secret.md fix typo

---
 content/zh/docs/concepts/configuration/secret.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/configuration/secret.md b/content/zh/docs/concepts/configuration/secret.md
index 44ab02eae1..66980089df 100644
--- a/content/zh/docs/concepts/configuration/secret.md
+++ b/content/zh/docs/concepts/configuration/secret.md
@@ -166,7 +166,7 @@ kubectl create secret generic dev-db-secret \
 You do not need to escape special characters in passwords from files (`--from-file`).
  -->
 {{< note >}}
-特殊字符（例如 `$`、`*`、`*`、`=` 和 `!`）可能会被你的
+特殊字符（例如 `$`、`\`、`*`、`=` 和 `!`）可能会被你的
 [Shell](https://en.wikipedia.org/wiki/Shell_(computing)) 解析，因此需要转义。
 在大多数 Shell 中，对密码进行转义的最简单方式是使用单引号（`'`）将其扩起来。
 例如，如果您的实际密码是 `S!B\*d$zDsb=` ，则应通过以下方式执行命令：

From 2cbba6feeb9eeab9745d91fbf7fe25edfe4e1c87 Mon Sep 17 00:00:00 2001
From: Max <16919345+mkorbi@users.noreply.github.com>
Date: Wed, 2 Sep 2020 17:07:38 +0200
Subject: [PATCH 192/496] update mean for Endpoint API

---
 .../2020-09-02-scaling-kubernetes-networking-endpointslices.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
index 9da8695a8c..eebf88a1f1 100644
--- a/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
+++ b/content/en/blog/_posts/2020-09-02-scaling-kubernetes-networking-endpointslices.md
@@ -43,4 +43,4 @@ Topology aware routing will update kube-proxy to prefer routing requests within
 ## What does this mean for the Endpoints API?
 Although the EndpointSlice API is providing a newer and more scalable alternative to the Endpoints API, the Endpoints API will continue to be considered generally available and stable. The most significant change planned for the Endpoints API will involve beginning to truncate Endpoints that would otherwise run into scalability issues.
 
-The Endpoints API is not going away, but many new features will rely on the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider switching to EndpointSlices in the future.
+The Endpoints API is not going away, but many new features will rely on the EndpointSlice API. To take advantage of the new scalability and functionality that EndpointSlices provide, applications that currently consume Endpoints will likely want to consider supporting EndpointSlices in the future.

From 4cbb3b2823726ad1c3c709a1268d4ac980f441e7 Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 09:52:03 -0700
Subject: [PATCH 193/496] Remove Roboto from _base.scss

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 assets/scss/_base.scss | 2 --
 1 file changed, 2 deletions(-)

diff --git a/assets/scss/_base.scss b/assets/scss/_base.scss
index 4b9125bcd9..5b164adb50 100644
--- a/assets/scss/_base.scss
+++ b/assets/scss/_base.scss
@@ -336,7 +336,6 @@ dd {
     width: 100%;
     height: 45px;
     line-height: 45px;
-    font-family: "Roboto", sans-serif;
     font-size: 20px;
     color: $blue;
   }
@@ -612,7 +611,6 @@ section#cncf {
   padding-top: 30px;
   padding-bottom: 80px;
   background-size: auto;
-  // font-family: "Roboto Mono", monospace !important;
   font-size: 24px;
   // font-weight: bold;
 

From 0da853bb11368a20fb782fa94a480d705a5875ec Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 10:18:34 -0700
Subject: [PATCH 194/496] Remove Roboto from partner-style.css, improve button
 styling

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 assets/scss/_base.scss                | 1 +
 content/en/includes/partner-style.css | 1 -
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/scss/_base.scss b/assets/scss/_base.scss
index 5b164adb50..9bff2d1c7d 100644
--- a/assets/scss/_base.scss
+++ b/assets/scss/_base.scss
@@ -71,6 +71,7 @@ footer {
     background-color: $blue;
     text-decoration: none;
     font-size: 1rem;
+    border: 0px;
   }
 
   #cellophane {
diff --git a/content/en/includes/partner-style.css b/content/en/includes/partner-style.css
index 7aeb255dd5..dc120872e0 100644
--- a/content/en/includes/partner-style.css
+++ b/content/en/includes/partner-style.css
@@ -82,7 +82,6 @@
 .button{
   max-width: 100%;
 	box-sizing: border-box;
-	font-family: "Roboto", sans-serif;
 	margin: 0;
 	display: inline-block;
 	border-radius: 6px;

From 08154800362054c1317f226e7bf9622199553f16 Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 10:30:43 -0700
Subject: [PATCH 195/496] Remove blog.css as it is no longer used

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 layouts/blog/baseof.html |   2 -
 static/css/blog.css      | 510 ---------------------------------------
 2 files changed, 512 deletions(-)
 delete mode 100644 static/css/blog.css

diff --git a/layouts/blog/baseof.html b/layouts/blog/baseof.html
index 0e03cce7d5..704968d73e 100644
--- a/layouts/blog/baseof.html
+++ b/layouts/blog/baseof.html
@@ -4,8 +4,6 @@
     {{ partial "head.html" . }}
     <title>{{ if .IsHome }}{{ .Site.Title }}{{ else }}{{ with .Title }}{{ . }} | {{ end }}{{ .Site.Title }}{{ end }}</title>
     <script defer src="https://use.fontawesome.com/releases/v5.0.6/js/all.js"></script>
-    <!-- Disabled as Docsy is primarily handling styles for this template now -->
-    <!-- <link rel="stylesheet" type="text/css" href="{{ "css/blog.css" | relURL }}"> -->
   </head>
   <body class="td-{{ .Kind }} td-blog">
     <header>
diff --git a/static/css/blog.css b/static/css/blog.css
deleted file mode 100644
index 834795084b..0000000000
--- a/static/css/blog.css
+++ /dev/null
@@ -1,510 +0,0 @@
-/* Overall I tried to maintain as much of the look of the old site as */
-/* possible.  When I made changes they were generally to accommodate jekyll */
-/* or to conform with the styling on the rest of k8s.io */
-
-
-/* Content
------------------------------------------------ */
-body {
-  font: normal normal 16px 'Trebuchet MS', Trebuchet, Verdana, sans-serif;
-  color: #666666;
-  background: #ffffff none repeat scroll top left;
-  padding: 0 0 0 0;
-}
-html body .region-inner {
-  min-width: 0;
-  max-width: 100%;
-  width: auto;
-}
-
-div a:link {
-color: #326DE6;
-}
-
-div a.widget-link {
-color: #326DE6;
-}
-
-/* Header
------------------------------------------------ */
-
-.header-outer {
-  background: transparent none repeat-x scroll 0 -400px;
-  _background-image: none;
-}
-.Header h1 {
-  font: normal normal 40px 'Trebuchet MS',Trebuchet,Verdana,sans-serif;
-  color: #000000;
-  text-shadow: 0 0 0 rgba(0, 0, 0, .2);
-}
-
-.Header h1 a {
-  color: #000000;
-}
-.Header .description {
-  font-size: 18px;
-  color: #000000;
-}
-.header-inner .Header .titlewrapper {
-  padding: 22px 0;
-}
-.header-inner .Header .descriptionwrapper {
-  padding: 0 0;
-}
-
-#blog-hero {
-  background-image: url('../images/texture.png');
-  background-color: #303030;
-  padding-left: 50px;
-}
-
-
-header#topHeader {
-  position: absolute;
-  top: 0;
-  left: 0;
-  width: 100%;
-  height: 160px;
-  background-color: #333;
-  background-image: url(http://kub.unitedcreations.xyz/images/texture.png);
-  background-position: center center;
-}
-#headerWrapper {
-  position: relative;
-  width: 1408px;
-  margin: 0px auto;
-  overflow: hidden;
-}
-div.header-title {
-  position: relative;
-  float: left;
-  width: 980px;
-  margin: 0 auto;
-  padding: 40px 0 0 20px;
-  border: true;
-}
-div.header-title h6 {
-  margin: 0;
-  padding-left: 108px;
-  font-weight: normal;
-  font-size: 18px;
-  color: white;
-}
-div.header-try {
-  width: 384px;
-  float: right;
-  color: white;
-  padding-top: 70px;
-}
-div.header-try h6 {
-  font-size: 16px;
-  margin: 0 0 20px;
-  color: transparent;
-}
-div.header-try a {
-  display: inline-block;
-  font-size: 16px;
-  padding: 10px 40px;
-  background: none;
-  border: 0;
-  background-color:  #326DE6;
-  border-radius: 6px;
-  color: white;
-  outline: none;
-  cursor: pointer;
-}
-
-/* Tabs
------------------------------------------------ */
-.blog-title {
-  clear: left
-}
-
-.tabs-inner .section:first-child {
-  border-top: 0 solid #dddddd;
-}
-.tabs-inner .section:first-child ul {
-  margin-top: -1px;
-  border-top: 1px solid #dddddd;
-  border-left: 1px solid #dddddd;
-  border-right: 1px solid #dddddd;
-}
-
-
-/* Pagination Links */
-@media (max-width: 449px) {
-  div.pagination {
-  position: relative;
-  left: 30%;
-  }
-}
-
-@media (min-width: 450px) {
-  h4.pagination {
-  position: relative;
-  left: 30%;
-  }
-}
-
-/* Columns
------------------------------------------------ */
-.main-outer {
-  border-top: 0 solid transparent;
-}
-@media (min-width: 992px) {
-  .blog-content {
-    padding-left: 50px;
-  }
-}
-
-@media (max-width: 991px) {
-  .blog-content {
-    padding-left: 20px;
-  }
-}
-.fauxcolumn-left-outer .fauxcolumn-inner {
-  border-right: 1px solid transparent;
-}
-.fauxcolumn-right-outer .fauxcolumn-inner {
-  border-left: 1px solid transparent;
-}
-
-/* Headings
------------------------------------------------ */
-div.widget > h2,
-div.widget h2.title {
-  margin: 0 0 1em 0;
-  font: normal bold 11px 'Roboto', sans-serif;
-  color: #000000;
-}
-
-/* Posts
------------------------------------------------ */
-h2.date-header {
-  font: normal bold 11px 'Roboto', Tahoma, Helvetica, FreeSans, sans-serif;
-}
-.date-header span {
-  background-color: #bbbbbb;
-  color: #ffffff;
-  padding: 0.4em;
-  letter-spacing: 3px;
-  margin: inherit;
-}
-.main-inner {
-  padding-top: 35px;
-  padding-bottom: 65px;
-}
-.main-inner .column-center-inner {
-  padding: 0 0;
-}
-.main-inner .column-center-inner .section {
-  margin: 0 1em;
-}
-.post {
-  margin: 0 0 15px 0;
-}
-h3.post-title{
-  font: normal normal 22px 'Trebuchet MS',Trebuchet,Verdana,sans-serif;
-  margin: .75em 0 0;
-}
-.post-body {
-  font-size: 110%;
-  line-height: 1.4;
-  position: relative;
-}
-.post-body img, .post-body .tr-caption-container, .Profile img, .Image img,
-.BlogList .item-thumbnail img {
-  padding: 2px;
-  background: #ffffff;
-  border: 1px solid #eeeeee;
-  -moz-box-shadow: 1px 1px 5px rgba(0, 0, 0, .1);
-  -webkit-box-shadow: 1px 1px 5px rgba(0, 0, 0, .1);
-  box-shadow: 1px 1px 5px rgba(0, 0, 0, .1);
-  width: inherit;
-}
-.post-body img, .post-body .tr-caption-container {
-  padding: 5px;
-  width: inherit;
-}
-.post-body .tr-caption-container {
-  color: #666666;
-}
-.post-body .tr-caption-container img {
-  padding: 0;
-  background: transparent;
-  border: none;
-  -moz-box-shadow: 0 0 0 rgba(0, 0, 0, .1);
-  -webkit-box-shadow: 0 0 0 rgba(0, 0, 0, .1);
-  box-shadow: 0 0 0 rgba(0, 0, 0, .1);
-}
-.post-header {
-  margin: 0 0 1.5em;
-  line-height: 1.6;
-  font-size: 90%;
-}
-.post-footer {
-  margin: 20px -2px 0;
-  padding: 5px 10px;
-  color: #666666;
-  background-color: #eeeeee;
-  border-bottom: 1px solid #eeeeee;
-  line-height: 1.6;
-  font-size: 90%;
-}
-
-/* Mobile
------------------------------------------------ */
-.main-inner .column-right-outer {
-  width: 320px;
-  margin-right: -320px;
-}
-.sidebar .widget a.widget-link:link,
-.sidebar .widget a.widget-link:visited,
-.sidebar .widget a.widget-link:hover,
-.sidebar .widget a.widget-link:active {
-  color: #326DE6;
-  font-size: 22px;
-}
-.widget-link {
-  position: relative;
-  display: block;
-  box-sizing: border-box;
-  padding: 0 0 0 15px;
-  margin: 10px 0;
-  line-height: 50px;
-  white-space: nowrap;
-  font-family: Roboto, sans-serif;
-}
-.widget-link .fa {
-  position: absolute;
-  left: 0; top: 0;
-  width: 40px; height: 40px;
-  color: white;
-  background-color: #326DE6;
-  border-radius: 6px;
-  font-size: 30px;
-  text-align: center;
-  line-height: 40px;
-}
-h2.date-header {
-  font-family: Roboto-Bold;
-  font-weight: bold;
-  font-style: normal;
-  font-size: 16px;
-}
-h2.date-header span {
-  background: none;
-  color: #222;
-}
-h3.post-title {
-  font-size: 30px;
-  color: #326DE6;
-}
-
-div.post-footer {
-  display: none;
-}
-.post-body {
-  font-family: Roboto-Light;
-  font-size: 16px;
-  line-height: 1.5;
-}
-
-body {
-  width: 100%;
-}
-.content-outer, .content-fauxcolumn-outer, .region-inner {
-  width: 100%;
-  max-width: 1200px;
-  padding-left: 15px;
-}
-.main-inner .columns {
-  padding-left: 0px;
-  padding-right: 310px;
-}
-
-.main-inner .fauxcolumn-center-outer {
-  left: 0px;
-  right: 310px;
-  /* IE6 does not respect left and right together */
-  _width: expression(this.parentNode.offsetWidth -
-  parseInt("0px") -
-  parseInt("310px") + 'px');
-  }
-
-  .main-inner .fauxcolumn-left-outer {
-    width: 0px;
-  }
-  .main-inner .fauxcolumn-right-outer {
-    width: 310px;
-  }
-  .main-inner .column-left-outer {
-    width: 0px;
-    right: 100%;
-    margin-left: -0px;
-  }
-  .main-inner .column-right-outer {
-    width: 310px;
-    margin-right: -310px;
-  }
-  #layout {
-    min-width: 0;
-  }
-  #layout .content-outer {
-    min-width: 0;
-    width: 800px;
-  }
-  #layout .region-inner {
-    min-width: 0;
-    width: auto;
-  }
-  /* overwrite blog styles with specific rules to conform with site */
-  .blog-content ul , .blog-content li {
-    list-style:initial;
-    margin-left: 1em;
-  }
-
-  .blog-content .PageNavigation > ul.navigation, .blog-content .PageNavigation > ul.navigation > li {
-    margin-left: auto;
-  }
-
-  /* .blog-content .pagination {
-    width: inherit;
-  } */
-
-  .button {
-    border-radius: 6px;
-    padding: 0 20px;
-    line-height: 40px;
-    background-color: #3371e3;
-    text-decoration: none;
-  }
-
-div a.button {
-  font-size: 16px;
-}
-
-
- a:link.button {
-    color: #ffffff;
-  }
-
- a:visited.button{
-    color: #ffffff;
-  }
-
-/* Nested List Indentations for Release Notes & Community Meeting Notes -- in HTML */
-
-ul {
-  padding: 1em;
-}
-
-/* Sidebar Icon Styles */
-.widget-link svg {
-  font-size: 40px;
-  color:#326DE6;
-  vertical-align: middle;
-  width: 40px !important;
-}
-
-.widget-link div {
-  display: flex;
-}
-
-.widget-link .widget-link-text {
-  margin-left: 6px;
-}
-
-
-/* SideNavigation Styles */
-.heading-year-toggle-checkbox,
-.heading-month-toggle-checkbox{
-  display: none;
-}
-
-.collapsible-year-header,
-.collapsible-month-header {
-  -webkit-box-flex: 1;
-  -ms-flex: 1;
-  flex: 1;
-}
-
-.collapsible-year-heading-label,
-.collapsible-month-heading-label {
-  display: -webkit-box;
-  display: -ms-flexbox;
-  display: flex;
-  -webkit-box-align: center;
-  -ms-flex-align: center;
-  align-items: center;
-}
-
-.collapsible-year-body-caret,
-.collapsible-posts-list-caret {
-  display: inline-block;
-  font-size: 11px;
-  margin-right: 8px;
-  -webkit-box-flex: none;
-  -ms-flex: none;
-  flex: none;
-}
-
-.collapsible-year-body,
-.collapsible-posts-list{
-  display: none;
-}
-
-.heading-year-toggle-checkbox:checked + .collapsible-year-heading-label > .collapsible-year-body-caret,
-.heading-month-toggle-checkbox:checked + .collapsible-month-heading-label > .collapsible-posts-list-caret {
-  -webkit-transform: rotate(90deg);
-   -moz-transform: rotate(90deg);
-   -o-transform: rotate(90deg);
-   -ms-transform: rotate(90deg);
-   transform: rotate(90deg);
-}
-
-.heading-year-toggle-checkbox:checked + .collapsible-year-heading-label + .collapsible-year-body,
-.heading-month-toggle-checkbox:checked + .collapsible-month-heading-label + .collapsible-posts-list{
-  display: block;
-}
-
-/* blog post specific styling */
-table.post-table ,.post-table tr, .post-table td, .post-table th {
-  font-size: 20px;
-  border: solid;
-  border-color: black;
-  border-width: .5px;
-  padding: 5px;
-}
-
-.yaml-scale code {
-  font-size: small;
-}
-
-.inline-link a{
-  text-decoration: none;
-}
-
-img.big-img {
-  width: 100%;
-}
-
-.blog-content img {
-  max-width: 100%;
-}
-
-.blog-content .content {
-  overflow-x: scroll;
-}
-
-.flyout-button {
-  display: none;
-}
-
-.global-nav {
-  padding: 0;
-}
-
-/* .content img {
-max-width: 100%;
-} */

From 5c7280bb6d81000f9759e32c5da50301434f0000 Mon Sep 17 00:00:00 2001
From: Thomas Tanaka <thomas.tanaka@oracle.com>
Date: Wed, 2 Sep 2020 10:38:29 -0700
Subject: [PATCH 196/496] kubeadm reset unmounts /var/lib/kubelet

Signed-off-by: Thomas Tanaka <thomas.tanaka@oracle.com>
---
 .../tools/kubeadm/troubleshooting-kubeadm.md           | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 82ceef4696..2e347b0ef6 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -407,4 +407,12 @@ be advised that this is modifying a design principle of the Linux distribution.
 
 This error message is shown when upgrading a Kubernetes cluster with `kubeadm` in the case of running an external etcd. This is not a critical bug and happens because older versions of kubeadm perform a version check on the external etcd cluster. You can proceed with `kubeadm upgrade apply ...`. 
 
-This issue is fixed as of version 1.19. 
\ No newline at end of file
+This issue is fixed as of version 1.19.
+
+## `kubeadm reset` unmounts `/var/lib/kubelet`
+
+If `/var/lib/kubelet` is being mounted, performing a `kubeadm reset` will effectively unmount it.
+
+To workaround the issue, re-mount the `/var/lib/kubelet` directory after performing the `kubeadm reset` operation.
+
+This is a regression introduced in kubeadm 1.15. The issue is fixed in 1.20.

From c186b6d1d7f797c6d0dcd1a7a60dde91ca34872c Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 10:52:19 -0700
Subject: [PATCH 197/496] Remove Roboto from case study pages

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 static/css/case-studies-gradient.css | 26 ---------------------
 static/css/gridpage.css              |  1 -
 static/css/style_amadeus.css         | 35 +---------------------------
 static/css/style_ancestry.css        | 33 --------------------------
 static/css/style_blablacar.css       | 35 +---------------------------
 static/css/style_blackrock.css       | 35 +---------------------------
 static/css/style_box.css             | 33 --------------------------
 static/css/style_buffer.css          | 32 -------------------------
 static/css/style_case_studies.css    | 33 --------------------------
 static/css/style_crowdfire.css       | 35 +---------------------------
 static/css/style_golfnow.css         | 34 ---------------------------
 static/css/style_haufegroup.css      | 35 +---------------------------
 static/css/style_huawei.css          | 35 +---------------------------
 static/css/style_peardeck.css        | 32 -------------------------
 static/css/style_wink.css            | 33 --------------------------
 static/css/style_zalando.css         | 34 ---------------------------
 16 files changed, 6 insertions(+), 495 deletions(-)

diff --git a/static/css/case-studies-gradient.css b/static/css/case-studies-gradient.css
index d33439d91f..274c0502e8 100644
--- a/static/css/case-studies-gradient.css
+++ b/static/css/case-studies-gradient.css
@@ -9,8 +9,6 @@
   display: inline-block;
   vertical-align: top;
   position: relative;
-  color:white;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:10%;
@@ -55,11 +53,9 @@ padding-top:5% !important;
 
 #caseStudyTitle {
     margin-top: 1em !important;
-    font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding-bottom:1%;
   padding-top:1%;
   font-weight:300;
@@ -68,7 +64,6 @@ p {
 }
 
 section {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:1.4em;
   letter-spacing:0.03em;
@@ -91,7 +86,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -111,7 +105,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -122,7 +115,6 @@ h1 {
 }
 
 .greybanner {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -137,7 +129,6 @@ h1 {
 }
 
 .quotetext {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:0%;
@@ -153,7 +144,6 @@ h1 {
 }
 
 .greyquotetext {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -162,7 +152,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:1.4em;
@@ -172,7 +161,6 @@ h2 {
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:1.4em;
@@ -182,7 +170,6 @@ h4 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -190,7 +177,6 @@ h4 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:1.2em !important;
   color:#3366ff;
@@ -210,14 +196,12 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   color:#606060;
   letter-spacing:0.03em;
   width:100%;
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#606060;
   letter-spacing:0.03em;
@@ -230,7 +214,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#606060;
   letter-spacing:0.03em;
@@ -244,7 +227,6 @@ hr {
   margin-left:10%;
   margin-top:2%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
 }
 
 .video {
@@ -278,7 +260,6 @@ hr {
   }
 
   h1 {
-    font-family: "Roboto", sans-serif;
     font-weight: bold;
     line-height: 36px;
     letter-spacing: 0.03em;
@@ -305,7 +286,6 @@ hr {
   }
 
   .details {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     font-size: 1em !important;
     color: #3366ff;
@@ -324,7 +304,6 @@ hr {
   .col1 {
     width: 90%;
     margin-left:5%;
-    font-family: "Roboto", sans-serif;
     color: #606060;
     letter-spacing: 0.03em;
   }
@@ -333,7 +312,6 @@ hr {
     width: 95%;
     padding-top: 2%;
     padding-bottom: 5%;
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     line-height: 20px;
     color: #606060;
@@ -364,8 +342,6 @@ hr {
     display: inline-block;
     vertical-align: top;
     position: relative;
-    color:white;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:20%;
@@ -401,7 +377,6 @@ hr {
   }
 
   p {
-    font-family:"Roboto", sans-serif;
     padding-bottom:2%;
     padding-top:2%;
     font-size:1em;
@@ -411,7 +386,6 @@ hr {
   }
 
   section {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     line-height:1.4em;
     letter-spacing:0.03em;
diff --git a/static/css/gridpage.css b/static/css/gridpage.css
index 542eadea8f..7da7f1973d 100644
--- a/static/css/gridpage.css
+++ b/static/css/gridpage.css
@@ -89,7 +89,6 @@
 }
 
 .gridPage #mainContent .content .case-study p {
-    font-family: "Roboto", sans-serif;
     font-size: 16px;
     padding: 0;
 }
diff --git a/static/css/style_amadeus.css b/static/css/style_amadeus.css
index 709ecb078d..54d8129e6c 100644
--- a/static/css/style_amadeus.css
+++ b/static/css/style_amadeus.css
@@ -1,17 +1,15 @@
 #caseStudyTitle {
     margin-top: 1em !important;
-    font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
 .header_logo {
 
   width:23%;
-  margin-bottom:-0.6%;
+  margin-bottom: 1%;
   margin-left:10px;
 }
 
@@ -26,7 +24,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -43,7 +40,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -56,7 +52,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -72,7 +67,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -87,7 +81,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -100,7 +93,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -114,7 +106,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -123,7 +114,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -132,7 +122,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -141,7 +130,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -151,7 +139,6 @@ h1 {
 
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -159,7 +146,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -167,7 +153,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -187,7 +172,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -197,7 +181,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -212,7 +195,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -225,12 +207,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -240,7 +220,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -262,7 +241,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -281,7 +259,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -293,7 +270,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -303,7 +279,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -315,7 +290,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -330,7 +304,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -344,7 +317,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -358,7 +330,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -373,7 +344,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -386,7 +356,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -397,7 +366,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -408,7 +376,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
diff --git a/static/css/style_ancestry.css b/static/css/style_ancestry.css
index 9f93d22bb9..9ac57f7776 100644
--- a/static/css/style_ancestry.css
+++ b/static/css/style_ancestry.css
@@ -1,10 +1,8 @@
 #caseStudyTitle {
     margin-top: 1em !important;
-    font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -19,7 +17,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -36,7 +33,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -49,7 +45,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -64,7 +59,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -79,7 +73,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -92,7 +85,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -106,7 +98,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -115,7 +106,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -124,7 +114,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -133,7 +122,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -143,7 +131,6 @@ h1 {
 
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -151,7 +138,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -159,7 +145,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -179,7 +164,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -189,7 +173,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -204,7 +187,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:6%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -217,12 +199,10 @@ hr {
   margin-left:6.5%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -233,7 +213,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -249,7 +228,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -269,7 +247,6 @@ h4 {
     padding-left:5%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -282,7 +259,6 @@ h4 {
     padding-left:5%;
     padding-top:5%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -292,7 +268,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -304,7 +279,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -320,7 +294,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -334,7 +307,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -348,7 +320,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -363,7 +334,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -374,7 +344,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -385,7 +354,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -396,7 +364,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
diff --git a/static/css/style_blablacar.css b/static/css/style_blablacar.css
index ffa005ee71..0942a356af 100644
--- a/static/css/style_blablacar.css
+++ b/static/css/style_blablacar.css
@@ -1,16 +1,14 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
 .header_logo {
   width:24%;
-  margin-bottom:-0.5%;
+  margin-bottom:1%;
   margin-left:10px;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -53,7 +49,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding: 1%;
@@ -68,7 +63,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -83,7 +77,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -96,7 +89,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -110,7 +102,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -121,7 +112,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -130,7 +120,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -139,7 +128,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -148,7 +136,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -156,7 +143,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -164,7 +150,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -183,7 +168,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -192,7 +176,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -206,7 +189,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -219,12 +201,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -234,7 +214,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -256,7 +235,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -275,7 +253,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -287,7 +264,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -297,7 +273,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -309,7 +284,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -324,7 +298,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -338,7 +311,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -352,7 +324,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -367,7 +338,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -380,7 +350,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -391,7 +360,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -402,7 +370,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
diff --git a/static/css/style_blackrock.css b/static/css/style_blackrock.css
index 61d997ba41..25b1b9f482 100644
--- a/static/css/style_blackrock.css
+++ b/static/css/style_blackrock.css
@@ -1,16 +1,14 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
 .header_logo {
   width:15%;
-  margin-bottom:0%;
+  margin-bottom: 0%;
   margin-left:10px;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -53,7 +49,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -68,7 +63,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -83,7 +77,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -96,7 +89,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -110,7 +102,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -119,7 +110,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -128,7 +118,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -137,7 +126,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -146,7 +134,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -154,7 +141,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -162,7 +148,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -181,7 +166,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -190,7 +174,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -204,7 +187,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -217,12 +199,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -232,7 +212,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -254,7 +233,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -273,7 +251,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -285,7 +262,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -295,7 +271,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -307,7 +282,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -322,7 +296,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -336,7 +309,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -350,7 +322,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -365,7 +336,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -378,7 +348,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -389,7 +358,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -400,7 +368,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
diff --git a/static/css/style_box.css b/static/css/style_box.css
index 9ca316ed1e..f39c02394c 100644
--- a/static/css/style_box.css
+++ b/static/css/style_box.css
@@ -1,6 +1,5 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 body {
@@ -8,7 +7,6 @@ body {
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -22,7 +20,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -37,7 +34,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -50,7 +46,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -64,7 +59,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -77,7 +71,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -90,7 +83,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -104,7 +96,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -113,7 +104,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:55%;
@@ -122,7 +112,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:55%;
@@ -131,7 +120,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -140,7 +128,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -148,7 +135,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -156,7 +142,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -175,7 +160,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -184,7 +168,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -198,7 +181,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:6%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -211,12 +193,10 @@ hr {
   margin-left:6%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -226,7 +206,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -242,7 +221,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -262,7 +240,6 @@ h4 {
     padding-left:5%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -275,7 +252,6 @@ h4 {
     padding-left:5%;
     padding-top:5%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -285,7 +261,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -297,7 +272,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -313,7 +287,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -327,7 +300,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -341,7 +313,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -357,7 +328,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -368,7 +338,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -377,7 +346,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -386,7 +354,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
diff --git a/static/css/style_buffer.css b/static/css/style_buffer.css
index 299a1aea21..48d7373cc9 100644
--- a/static/css/style_buffer.css
+++ b/static/css/style_buffer.css
@@ -3,7 +3,6 @@
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -22,7 +21,6 @@ background-color:#ffffff !important;
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -38,7 +36,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -51,7 +48,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -65,7 +61,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -80,7 +75,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -93,7 +87,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -107,7 +100,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -116,7 +108,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -125,7 +116,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:55%;
@@ -134,7 +124,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -143,7 +132,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -151,7 +139,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -159,7 +146,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -178,7 +164,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -187,7 +172,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -201,7 +185,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:6%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -214,12 +197,10 @@ hr {
   margin-left:6%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -229,7 +210,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -245,7 +225,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -265,7 +244,6 @@ h4 {
     padding-left:5%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -278,7 +256,6 @@ h4 {
     padding-left:5%;
     padding-top:5%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -288,7 +265,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -300,7 +276,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -316,7 +291,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -332,7 +306,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -346,7 +319,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -362,7 +334,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -373,7 +344,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -385,7 +355,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -394,7 +363,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
diff --git a/static/css/style_case_studies.css b/static/css/style_case_studies.css
index ce4d372f9f..a7beefe523 100644
--- a/static/css/style_case_studies.css
+++ b/static/css/style_case_studies.css
@@ -1,10 +1,8 @@
 #caseStudyTitle {
     margin-top: 1em !important;
-    font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -51,7 +47,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -66,7 +61,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -80,7 +74,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -92,7 +85,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -107,7 +99,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -116,7 +107,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -125,7 +115,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -134,7 +123,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -143,7 +131,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -151,7 +138,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -159,7 +145,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -178,7 +163,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -187,7 +171,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -201,7 +184,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -214,12 +196,10 @@ hr {
   margin-left:8.5%;
   margin-top:3%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -234,7 +214,6 @@ h4 {
 @media screen and (max-width: 910px) {
 
   h1 {
-    font-family: "Roboto", sans-serif;
     font-weight: bold;
     line-height: 36px;
     letter-spacing: 0.03em;
@@ -256,7 +235,6 @@ h4 {
   }
 
   .details {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     font-size: 16px;
     color: #3366ff;
@@ -273,7 +251,6 @@ h4 {
 
   .col1 {
     width: 95%;
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #606060;
     line-height: 20px;
@@ -285,7 +262,6 @@ h4 {
     width: 95%;
     padding-top: 2%;
     padding-bottom: 5%;
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     line-height: 20px;
     color: #606060;
@@ -294,7 +270,6 @@ h4 {
   }
 
   .banner1 {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     padding-top: 15%;
@@ -305,7 +280,6 @@ h4 {
   }
 
   .banner2 {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     padding-top: 4%;
@@ -319,7 +293,6 @@ h4 {
   }
 
   .banner3 {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     padding-top: 5%;
@@ -331,7 +304,6 @@ h4 {
   }
 
   .banner4 {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     padding-top: 4%;
@@ -343,7 +315,6 @@ h4 {
   }
 
   .banner5 {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     padding-top: 4%;
@@ -357,7 +328,6 @@ h4 {
   }
 
   .banner2text {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     width: 90%;
@@ -369,7 +339,6 @@ h4 {
   }
 
   .banner3text {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     width: 90%;
@@ -380,7 +349,6 @@ h4 {
   }
 
   .banner4text {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     width: 90%;
@@ -391,7 +359,6 @@ h4 {
   }
 
   .banner5text {
-    font-family: "Roboto", sans-serif;
     font-weight: 300;
     color: #ffffff;
     width: 90%;
diff --git a/static/css/style_crowdfire.css b/static/css/style_crowdfire.css
index 3e153e1006..568f8934f1 100644
--- a/static/css/style_crowdfire.css
+++ b/static/css/style_crowdfire.css
@@ -1,16 +1,14 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
 .header_logo {
   width:24%;
-  margin-bottom:-1%;
+  margin-bottom: 1%;
   margin-left:10px;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -53,7 +49,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -68,7 +63,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -83,7 +77,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -96,7 +89,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -110,7 +102,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -119,7 +110,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -128,7 +118,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -137,7 +126,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -146,7 +134,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -154,7 +141,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -162,7 +148,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -181,7 +166,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -190,7 +174,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -204,7 +187,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -217,12 +199,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -232,7 +212,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -254,7 +233,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -273,7 +251,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -285,7 +262,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -295,7 +271,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -307,7 +282,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -322,7 +296,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -336,7 +309,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -350,7 +322,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -365,7 +336,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -378,7 +348,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -389,7 +358,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -401,7 +369,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
diff --git a/static/css/style_golfnow.css b/static/css/style_golfnow.css
index abd875080d..12ee20b393 100644
--- a/static/css/style_golfnow.css
+++ b/static/css/style_golfnow.css
@@ -3,7 +3,6 @@
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -22,7 +21,6 @@ footer {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -37,7 +35,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -50,7 +47,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -64,7 +60,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -79,7 +74,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -92,7 +86,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -106,7 +99,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -115,7 +107,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -124,7 +115,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:55%;
@@ -133,7 +123,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -142,7 +131,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -150,7 +138,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -158,7 +145,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -177,7 +163,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -186,7 +171,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -200,7 +184,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:6%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -213,12 +196,10 @@ hr {
   margin-left:6%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -228,7 +209,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -244,7 +224,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -264,7 +243,6 @@ h4 {
     padding-left:5%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -277,7 +255,6 @@ h4 {
     padding-left:5%;
     padding-top:5%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -287,7 +264,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -299,7 +275,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -315,7 +290,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -331,7 +305,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -345,7 +318,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -361,9 +333,7 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
-    color:#ffffff;
     width:80%;
     padding-left:10%;
     float:left;
@@ -372,7 +342,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -384,7 +353,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -393,9 +361,7 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
-    color:#ffffff;
     width:80%;
     padding-left:10%;
     float:left;
diff --git a/static/css/style_haufegroup.css b/static/css/style_haufegroup.css
index b8cee6ca6e..fec90302f8 100644
--- a/static/css/style_haufegroup.css
+++ b/static/css/style_haufegroup.css
@@ -1,16 +1,14 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
 .header_logo {
   width:32%;
-  margin-bottom:-1%;
+  margin-bottom: -0.3%;
   margin-left:10px;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -53,7 +49,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -68,7 +63,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -83,7 +77,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -96,7 +89,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -110,7 +102,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -119,7 +110,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -128,7 +118,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -137,7 +126,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -146,7 +134,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -154,7 +141,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -162,7 +148,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -181,7 +166,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -190,7 +174,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -204,7 +187,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -217,12 +199,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -232,7 +212,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -254,7 +233,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -273,7 +251,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -285,7 +262,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -295,7 +271,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -307,7 +282,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -322,7 +296,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -336,7 +309,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -350,7 +322,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -365,7 +336,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -378,7 +348,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -389,7 +358,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -400,7 +368,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
diff --git a/static/css/style_huawei.css b/static/css/style_huawei.css
index a1d449e621..a0a7ffcf32 100644
--- a/static/css/style_huawei.css
+++ b/static/css/style_huawei.css
@@ -1,16 +1,14 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
 .header_logo {
   width:10%;
-  margin-bottom:-0.6%;
+  margin-top: -1%;
   margin-left:10px;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -53,7 +49,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -68,7 +63,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -83,7 +77,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -96,7 +89,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -110,7 +102,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -119,7 +110,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -128,7 +118,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -137,7 +126,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -146,7 +134,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -154,7 +141,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -162,7 +148,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -181,7 +166,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -190,7 +174,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -204,7 +187,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -217,12 +199,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -232,7 +212,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -254,7 +233,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -273,7 +251,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -285,7 +262,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -295,7 +271,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -307,7 +282,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -322,7 +296,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -336,7 +309,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -350,7 +322,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -365,7 +336,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -378,7 +348,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -389,7 +358,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -400,7 +368,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
diff --git a/static/css/style_peardeck.css b/static/css/style_peardeck.css
index 0ec3a55bef..c74863776d 100644
--- a/static/css/style_peardeck.css
+++ b/static/css/style_peardeck.css
@@ -3,7 +3,6 @@
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -22,7 +21,6 @@ footer {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -37,7 +35,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -50,7 +47,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -64,7 +60,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -79,7 +74,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -92,7 +86,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -106,7 +99,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -115,7 +107,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -124,7 +115,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:55%;
@@ -133,7 +123,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -142,7 +131,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -150,7 +138,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -158,7 +145,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -177,7 +163,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -186,7 +171,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -200,7 +184,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:6%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -213,12 +196,10 @@ hr {
   margin-left:6%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -228,7 +209,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -244,7 +224,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -264,7 +243,6 @@ h4 {
     padding-left:5%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -277,7 +255,6 @@ h4 {
     padding-left:5%;
     padding-top:5%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -287,7 +264,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -299,7 +275,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -315,7 +290,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -331,7 +305,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -345,7 +318,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -361,7 +333,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -372,7 +343,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -384,7 +354,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -393,7 +362,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
diff --git a/static/css/style_wink.css b/static/css/style_wink.css
index 9dce4c391d..a1784d313c 100644
--- a/static/css/style_wink.css
+++ b/static/css/style_wink.css
@@ -1,10 +1,8 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -18,7 +16,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -33,7 +30,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -46,7 +42,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -60,7 +55,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -75,7 +69,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -88,7 +81,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -102,7 +94,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:62%;
@@ -111,7 +102,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -120,7 +110,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:60%;
@@ -129,7 +118,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -138,7 +126,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -146,7 +133,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -154,7 +140,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -173,7 +158,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -182,7 +166,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -196,7 +179,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:6%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -209,12 +191,10 @@ hr {
   margin-left:6.2%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -224,7 +204,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -240,7 +219,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -260,7 +238,6 @@ h4 {
     padding-left:5%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -273,7 +250,6 @@ h4 {
     padding-left:5%;
     padding-top:5%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -283,7 +259,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -295,7 +270,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -311,7 +285,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -327,7 +300,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -341,7 +313,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -357,7 +328,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -368,7 +338,6 @@ h4 {
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -380,7 +349,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
@@ -389,7 +357,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:80%;
diff --git a/static/css/style_zalando.css b/static/css/style_zalando.css
index a7e9cd4397..f356f28fc5 100644
--- a/static/css/style_zalando.css
+++ b/static/css/style_zalando.css
@@ -1,10 +1,8 @@
 #caseStudyTitle {
   margin-top: 1em !important;
-  font-family:"Roboto", sans-serif;
 }
 
 p {
-  font-family:"Roboto", sans-serif;
   padding:5%;
 }
 
@@ -24,7 +22,6 @@ body {
 }
 
 h1 {
-  font-family:"Roboto", sans-serif;
   font-weight:bold;
   letter-spacing:0.025em;
   font-size:42px;
@@ -40,7 +37,6 @@ h1 {
 }
 
 .banner1 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:12%;
@@ -53,7 +49,6 @@ h1 {
 }
 
 .banner2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:4%;
@@ -68,7 +63,6 @@ h1 {
 }
 
 .banner3 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-left:5%;
@@ -83,7 +77,6 @@ h1 {
 }
 
 .banner4 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:5%;
@@ -96,7 +89,6 @@ h1 {
 }
 
 .banner5 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   padding-top:3%;
@@ -110,7 +102,6 @@ h1 {
 }
 
 .banner2text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:70%;
@@ -119,7 +110,6 @@ h1 {
 }
 
 .banner3text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:75%;
@@ -128,7 +118,6 @@ h1 {
 }
 
 .banner4text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:65%;
@@ -137,7 +126,6 @@ h1 {
 }
 
 .banner5text {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   color:#ffffff;
   width:68%;
@@ -146,7 +134,6 @@ h1 {
 }
 
 h2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:24px;
   line-height:34px;
@@ -154,7 +141,6 @@ h2 {
 }
 
 .quote {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:22px;
   line-height:32px;
@@ -162,7 +148,6 @@ h2 {
 }
 
 .details {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   font-size:18px;
   color:#3366ff;
@@ -181,7 +166,6 @@ hr {
 }
 
 .col1 {
-  font-family:"Roboto", sans-serif;
   font-weight:100;
   color:#606060;
   line-height:20px;
@@ -190,7 +174,6 @@ hr {
 }
 
 .col2 {
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:20px;
   color:#606060;
@@ -204,7 +187,6 @@ hr {
   margin-right:10%;
   margin-top:4%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
   line-height:22px;
   color:#606060;
@@ -217,12 +199,10 @@ hr {
   margin-left:10%;
   margin-top:1%;
   margin-bottom:4%;
-  font-family:"Roboto", sans-serif;
   font-weight:300;
 }
 
 h4 {
-  font-family:"Roboto", sans-serif;
   font-weight:400;
   letter-spacing:0.9;
   font-size:20px;
@@ -232,7 +212,6 @@ h4 {
 @media screen and (max-width: 910px){
 
   h1 {
-    font-family:"Roboto", sans-serif;
     font-weight:bold;
     line-height:36px;
     letter-spacing:0.03em;
@@ -254,7 +233,6 @@ h4 {
   }
 
   .details {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     font-size:16px;
     color:#3366ff;
@@ -273,7 +251,6 @@ h4 {
     width: 95%;
     padding-right:8%;
     float:left;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#606060;
     line-height:20px;
@@ -285,7 +262,6 @@ h4 {
     width: 95%;
     padding-top:2%;
     padding-bottom:5%;
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     float:left;
     line-height:20px;
@@ -295,7 +271,6 @@ h4 {
   }
 
   .banner1 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:15%;
@@ -307,7 +282,6 @@ h4 {
   }
 
   .banner2 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -322,7 +296,6 @@ h4 {
   }
 
   .banner3 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:5%;
@@ -336,7 +309,6 @@ h4 {
   }
 
   .banner4 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -350,7 +322,6 @@ h4 {
   }
 
   .banner5 {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     padding-top:4%;
@@ -365,7 +336,6 @@ h4 {
   }
 
   .banner2text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -374,11 +344,9 @@ h4 {
     padding-top:1%;
     float:left;
     text-align:center;
-    color:#ffffff;
   }
 
   .banner3text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -389,7 +357,6 @@ h4 {
   }
 
   .banner4text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;
@@ -400,7 +367,6 @@ h4 {
   }
 
   .banner5text {
-    font-family:"Roboto", sans-serif;
     font-weight:300;
     color:#ffffff;
     width:90%;

From fcb5d5adef3e88ee47ca46da3bb11ad733fd5cd5 Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 16:02:45 -0700
Subject: [PATCH 198/496] Remove roboto from /community, /training

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 static/css/newcommunity.css | 29 -----------------------------
 static/css/training.css     |  1 -
 2 files changed, 30 deletions(-)

diff --git a/static/css/newcommunity.css b/static/css/newcommunity.css
index 39ea374747..e792fceae9 100644
--- a/static/css/newcommunity.css
+++ b/static/css/newcommunity.css
@@ -81,7 +81,6 @@ p {
 
 body {
   line-height: 1.5em;
-  /* font-family:'roboto'; */
   margin-top: 1%;
   font-weight: 300;
   /* letter-spacing:0.03em; */
@@ -106,7 +105,6 @@ body {
   text-align: left;
   line-height: 1.6em;
   margin-bottom: 2%;
-  font-family: 'roboto';
   margin-top: 3%;
   font-weight: 300;
   letter-spacing: 0.04em;
@@ -117,7 +115,6 @@ body {
   text-align: center;
   padding-top: 2%;
   padding-bottom: 2%;
-  font-family: 'roboto';
   word-spacing: 3%;
   text-decoration: none;
   text-transform: uppercase;
@@ -179,7 +176,6 @@ a {
   padding-top: 1%;
   padding-bottom: 8%;
   text-align: center;
-  font-family: 'roboto';
   float: left;
   margin: 1%;
 }
@@ -220,7 +216,6 @@ a {
   width: 37%;
   margin-left: 5%;
   text-align: left;
-  font-family: 'roboto';
 }
 
 .meetuptext {
@@ -262,7 +257,6 @@ a {
 
 .newcommunitywrapper h1 {
   font-size: 42px;
-  font-family: 'roboto';
   font-weight: 300;
   margin-top: 4%;
   line-height: 1.1em;
@@ -300,7 +294,6 @@ a {
   margin-top: 3%;
   text-align: center;
   padding-top: 4%;
-  font-family: 'roboto';
 
 }
 
@@ -309,7 +302,6 @@ a {
   padding: 3%;
   color: #0662EE;
   text-transform: uppercase;
-  font-family: 'roboto';
   font-weight: bold;
   letter-spacing: 0.05em;
   line-height: 1.3em;
@@ -323,7 +315,6 @@ a {
   margin-top;
   5%;
   margin-bottom: 3%;
-  font-family: 'roboto';
   float: left;
 }
 
@@ -345,7 +336,6 @@ a {
   height: 100%;
   vertical-align: middle;
   text-transform: uppercase;
-  font-family: 'roboto';
   font-weight: bold;
   line-height: 1.3em;
   letter-spacing: 0.05em;
@@ -395,7 +385,6 @@ a {
   padding-top: 3%;
   padding-bottom: 3%;
   text-align: center;
-  font-family: 'roboto';
   font-weight: 300;
 }
 
@@ -405,14 +394,12 @@ a {
   margin-bottom: 3%;
   margin-left: 15%;
   text-align: center;
-  font-family: 'roboto';
   font-weight: 300;
 }
 
 
 h2 {
   overflow: hidden;
-  font-family: 'roboto';
   font-weight: 200;
   margin-top: 5%;
   text-align: center;
@@ -448,14 +435,12 @@ h2:after {
   padding-bottom: 3%;
   margin-left: 10%;
   text-align: center;
-  font-family: 'roboto';
 
 }
 
 .newscol {
   float: left;
   width: 30%;
-  font-family: 'roboto';
   font-weight: 300;
 }
 
@@ -535,11 +520,9 @@ h2:after {
     border: 1px solid grey;
     padding: 1%;
     font-size: 1.4em;
-    ;
     color: #0662EE;
     vertical-align: middle;
     text-transform: uppercase;
-    font-family: 'roboto';
     font-weight: bold;
     min-height: 375px;
     letter-spacing: 0.01em;
@@ -562,7 +545,6 @@ h2:after {
     color: #0662EE;
     vertical-align: middle;
     text-transform: uppercase;
-    font-family: 'roboto';
     font-weight: bold;
     min-height: 280px;
     letter-spacing: 0.01em;
@@ -584,11 +566,9 @@ h2:after {
     border: 1px solid grey;
     padding: 1%;
     font-size: 1.1em;
-    ;
     color: #0662EE;
     vertical-align: middle;
     text-transform: uppercase;
-    font-family: 'roboto';
     font-weight: bold;
     height: 100% !important;
     letter-spacing: 0.01em;
@@ -621,7 +601,6 @@ h2:after {
     text-align: center;
     line-height: 1.6em;
     margin-bottom: 1%;
-    font-family: 'roboto';
     margin-top: 7%;
     margin-bottom: 7%;
     letter-spacing: 0.04em;
@@ -659,7 +638,6 @@ h2:after {
   body {
     overflow-x: hidden;
     line-height: 1.5em;
-    /* font-family: 'roboto'; */
     margin-top: 1%;
     letter-spacing: 0.03em;
     /* font-size: 13px; */
@@ -694,7 +672,6 @@ h2:after {
     padding-top: 1%;
     padding-bottom: 1%;
     color: white;
-    font-family: 'roboto';
     text-align: center;
     float: left;
     margin: 1%;
@@ -717,7 +694,6 @@ h2:after {
     width: 90%;
     margin-left: 5%;
     text-align: center;
-    font-family: 'roboto';
   }
 
   .meetuptext {
@@ -769,7 +745,6 @@ h2:after {
     text-align: center;
     padding-top: 4%;
     padding-bottom: 2%;
-    font-family: 'roboto';
 
   }
 
@@ -780,7 +755,6 @@ h2:after {
     line-height: 1.3em;
     color: #0662EE;
     text-transform: uppercase;
-    font-family: 'roboto';
     font-weight: bold;
     padding-bottom: 8%;
     font-size: 1em;
@@ -792,7 +766,6 @@ h2:after {
     margin-top;
     8%;
     margin-bottom: 8%;
-    font-family: 'roboto';
     float: left;
   }
 
@@ -835,7 +808,6 @@ h2:after {
     padding-top: 3%;
     padding-bottom: 3%;
     text-align: center;
-    font-family: 'roboto';
     margin-bottom: 12%;
   }
 
@@ -845,7 +817,6 @@ h2:after {
     margin-left: 10%;
     margin-bottom: 2%;
     text-align: center;
-    font-family: 'roboto';
   }
 
   .fullbutton {
diff --git a/static/css/training.css b/static/css/training.css
index 2d7d866481..4aa49c54c9 100644
--- a/static/css/training.css
+++ b/static/css/training.css
@@ -127,7 +127,6 @@ section.call-to-action .main-section .cta-image > img {
 .button{
   max-width: 100%;
   box-sizing: border-box;
-  font-family: "Roboto", sans-serif;
   margin: 1em 0;
   display: inline-block;
   border-radius: 6px;

From 6ec2f71e58d36d88e8f75b298074dc96780cbd40 Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 16:41:06 -0700
Subject: [PATCH 199/496] Remove base_fonts.css

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 layouts/partials/css.html |   2 -
 static/css/base_fonts.css | 169 --------------------------------------
 2 files changed, 171 deletions(-)
 delete mode 100644 static/css/base_fonts.css

diff --git a/layouts/partials/css.html b/layouts/partials/css.html
index 8b4bf37e86..2bde76cab9 100644
--- a/layouts/partials/css.html
+++ b/layouts/partials/css.html
@@ -2,8 +2,6 @@
 
 {{ $inServerMode := site.IsServer }}
 
-<link rel="stylesheet" href="/css/base_fonts.css">
-
 {{- if .Params.case_study_styles }}
   {{ $cssOutput := "css/case-studies.css" }}
   {{ $caseStudiesCSS := resources.Get "scss/_case-studies.scss" | resources.ToCSS }}
diff --git a/static/css/base_fonts.css b/static/css/base_fonts.css
deleted file mode 100644
index c83893cb37..0000000000
--- a/static/css/base_fonts.css
+++ /dev/null
@@ -1,169 +0,0 @@
-/* roboto-mono-regular - latin */
-@font-face {
-    font-family: 'Roboto Mono';
-    font-style: normal;
-    font-weight: 400;
-    src: url('../fonts/roboto-mono-v5-latin-regular.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Mono'), local('RobotoMono-Regular'),
-         url('../fonts/roboto-mono-v5-latin-regular.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-mono-v5-latin-regular.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-mono-v5-latin-regular.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-mono-v5-latin-regular.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-mono-v5-latin-regular.svg#RobotoMono') format('svg'); /* Legacy iOS */
-  }
-/* roboto-100 - latin */
-@font-face {
-    font-family: 'Roboto';
-    font-style: normal;
-    font-weight: 100;
-    src: url('../fonts/roboto-v18-latin-100.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Thin'), local('Roboto-Thin'),
-         url('../fonts/roboto-v18-latin-100.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-100.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-100.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-100.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-100.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-100italic - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: italic;
-    font-weight: 100;
-    src: url('../fonts/roboto-v18-latin-100italic.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Thin Italic'), local('Roboto-ThinItalic'),
-         url('../fonts/roboto-v18-latin-100italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-100italic.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-100italic.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-100italic.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-100italic.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-300 - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: normal;
-    font-weight: 300;
-    src: url('../fonts/roboto-v18-latin-300.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Light'), local('Roboto-Light'),
-         url('../fonts/roboto-v18-latin-300.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-300.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-300.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-300.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-300.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-300italic - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: italic;
-    font-weight: 300;
-    src: url('../fonts/roboto-v18-latin-300italic.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Light Italic'), local('Roboto-LightItalic'),
-         url('../fonts/roboto-v18-latin-300italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-300italic.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-300italic.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-300italic.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-300italic.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-regular - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: normal;
-    font-weight: 400;
-    src: url('../fonts/roboto-v18-latin-regular.eot'); /* IE9 Compat Modes */
-    src: local('Roboto'), local('Roboto-Regular'),
-         url('../fonts/roboto-v18-latin-regular.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-regular.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-regular.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-regular.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-regular.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-italic - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: italic;
-    font-weight: 400;
-    src: url('../fonts/roboto-v18-latin-italic.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Italic'), local('Roboto-Italic'),
-         url('../fonts/roboto-v18-latin-italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-italic.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-italic.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-italic.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-italic.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-500 - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: normal;
-    font-weight: 500;
-    src: url('../fonts/roboto-v18-latin-500.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Medium'), local('Roboto-Medium'),
-         url('../fonts/roboto-v18-latin-500.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-500.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-500.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-500.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-500.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-500italic - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: italic;
-    font-weight: 500;
-    src: url('../fonts/roboto-v18-latin-500italic.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Medium Italic'), local('Roboto-MediumItalic'),
-         url('../fonts/roboto-v18-latin-500italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-500italic.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-500italic.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-500italic.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-500italic.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-700 - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: normal;
-    font-weight: 700;
-    src: url('../fonts/roboto-v18-latin-700.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Bold'), local('Roboto-Bold'),
-         url('../fonts/roboto-v18-latin-700.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-700.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-700.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-700.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-700.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-700italic - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: italic;
-    font-weight: 700;
-    src: url('../fonts/roboto-v18-latin-700italic.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Bold Italic'), local('Roboto-BoldItalic'),
-         url('../fonts/roboto-v18-latin-700italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-700italic.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-700italic.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-700italic.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-700italic.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-900 - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: normal;
-    font-weight: 900;
-    src: url('../fonts/roboto-v18-latin-900.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Black'), local('Roboto-Black'),
-         url('../fonts/roboto-v18-latin-900.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-900.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-900.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-900.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-900.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
-  /* roboto-900italic - latin */
-  @font-face {
-    font-family: 'Roboto';
-    font-style: italic;
-    font-weight: 900;
-    src: url('../fonts/roboto-v18-latin-900italic.eot'); /* IE9 Compat Modes */
-    src: local('Roboto Black Italic'), local('Roboto-BlackItalic'),
-         url('../fonts/roboto-v18-latin-900italic.eot?#iefix') format('embedded-opentype'), /* IE6-IE8 */
-         url('../fonts/roboto-v18-latin-900italic.woff2') format('woff2'), /* Super Modern Browsers */
-         url('../fonts/roboto-v18-latin-900italic.woff') format('woff'), /* Modern Browsers */
-         url('../fonts/roboto-v18-latin-900italic.ttf') format('truetype'), /* Safari, Android, iOS */
-         url('../fonts/roboto-v18-latin-900italic.svg#Roboto') format('svg'); /* Legacy iOS */
-  }
\ No newline at end of file

From ba3f527b73171f05b4d051bf60ea2523d15e933c Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 17:12:03 -0700
Subject: [PATCH 200/496] Remove roboto font files

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 static/fonts/roboto-mono-v5-latin-regular.eot | Bin 17757 -> 0 bytes
 static/fonts/roboto-mono-v5-latin-regular.svg | 390 ------------------
 static/fonts/roboto-mono-v5-latin-regular.ttf | Bin 31052 -> 0 bytes
 .../fonts/roboto-mono-v5-latin-regular.woff   | Bin 19576 -> 0 bytes
 .../fonts/roboto-mono-v5-latin-regular.woff2  | Bin 16028 -> 0 bytes
 static/fonts/roboto-v18-latin-100.eot         | Bin 17475 -> 0 bytes
 static/fonts/roboto-v18-latin-100.svg         | 313 --------------
 static/fonts/roboto-v18-latin-100.ttf         | Bin 36372 -> 0 bytes
 static/fonts/roboto-v18-latin-100.woff        | Bin 19936 -> 0 bytes
 static/fonts/roboto-v18-latin-100.woff2       | Bin 15316 -> 0 bytes
 static/fonts/roboto-v18-latin-100italic.eot   | Bin 18852 -> 0 bytes
 static/fonts/roboto-v18-latin-100italic.svg   | 332 ---------------
 static/fonts/roboto-v18-latin-100italic.ttf   | Bin 37488 -> 0 bytes
 static/fonts/roboto-v18-latin-100italic.woff  | Bin 21268 -> 0 bytes
 static/fonts/roboto-v18-latin-100italic.woff2 | Bin 16644 -> 0 bytes
 static/fonts/roboto-v18-latin-300.eot         | Bin 17481 -> 0 bytes
 static/fonts/roboto-v18-latin-300.svg         | 312 --------------
 static/fonts/roboto-v18-latin-300.ttf         | Bin 35468 -> 0 bytes
 static/fonts/roboto-v18-latin-300.woff        | Bin 19916 -> 0 bytes
 static/fonts/roboto-v18-latin-300.woff2       | Bin 15440 -> 0 bytes
 static/fonts/roboto-v18-latin-300italic.eot   | Bin 19292 -> 0 bytes
 static/fonts/roboto-v18-latin-300italic.svg   | 329 ---------------
 static/fonts/roboto-v18-latin-300italic.ttf   | Bin 37232 -> 0 bytes
 static/fonts/roboto-v18-latin-300italic.woff  | Bin 21776 -> 0 bytes
 static/fonts/roboto-v18-latin-300italic.woff2 | Bin 17124 -> 0 bytes
 static/fonts/roboto-v18-latin-500.eot         | Bin 17596 -> 0 bytes
 static/fonts/roboto-v18-latin-500.svg         | 305 --------------
 static/fonts/roboto-v18-latin-500.ttf         | Bin 35588 -> 0 bytes
 static/fonts/roboto-v18-latin-500.woff        | Bin 20012 -> 0 bytes
 static/fonts/roboto-v18-latin-500.woff2       | Bin 15552 -> 0 bytes
 static/fonts/roboto-v18-latin-500italic.eot   | Bin 19148 -> 0 bytes
 static/fonts/roboto-v18-latin-500italic.svg   | 326 ---------------
 static/fonts/roboto-v18-latin-500italic.ttf   | Bin 37120 -> 0 bytes
 static/fonts/roboto-v18-latin-500italic.woff  | Bin 21564 -> 0 bytes
 static/fonts/roboto-v18-latin-500italic.woff2 | Bin 16940 -> 0 bytes
 static/fonts/roboto-v18-latin-700.eot         | Bin 17391 -> 0 bytes
 static/fonts/roboto-v18-latin-700.svg         | 309 --------------
 static/fonts/roboto-v18-latin-700.ttf         | Bin 35236 -> 0 bytes
 static/fonts/roboto-v18-latin-700.woff        | Bin 19888 -> 0 bytes
 static/fonts/roboto-v18-latin-700.woff2       | Bin 15436 -> 0 bytes
 static/fonts/roboto-v18-latin-700italic.eot   | Bin 18764 -> 0 bytes
 static/fonts/roboto-v18-latin-700italic.svg   | 325 ---------------
 static/fonts/roboto-v18-latin-700italic.ttf   | Bin 36096 -> 0 bytes
 static/fonts/roboto-v18-latin-700italic.woff  | Bin 21132 -> 0 bytes
 static/fonts/roboto-v18-latin-700italic.woff2 | Bin 16572 -> 0 bytes
 static/fonts/roboto-v18-latin-900.eot         | Bin 17437 -> 0 bytes
 static/fonts/roboto-v18-latin-900.svg         | 302 --------------
 static/fonts/roboto-v18-latin-900.ttf         | Bin 35208 -> 0 bytes
 static/fonts/roboto-v18-latin-900.woff        | Bin 19936 -> 0 bytes
 static/fonts/roboto-v18-latin-900.woff2       | Bin 15340 -> 0 bytes
 static/fonts/roboto-v18-latin-900italic.eot   | Bin 19390 -> 0 bytes
 static/fonts/roboto-v18-latin-900italic.svg   | 324 ---------------
 static/fonts/roboto-v18-latin-900italic.ttf   | Bin 37224 -> 0 bytes
 static/fonts/roboto-v18-latin-900italic.woff  | Bin 21856 -> 0 bytes
 static/fonts/roboto-v18-latin-900italic.woff2 | Bin 17156 -> 0 bytes
 static/fonts/roboto-v18-latin-italic.eot      | Bin 19158 -> 0 bytes
 static/fonts/roboto-v18-latin-italic.svg      | 323 ---------------
 static/fonts/roboto-v18-latin-italic.ttf      | Bin 36752 -> 0 bytes
 static/fonts/roboto-v18-latin-italic.woff     | Bin 21528 -> 0 bytes
 static/fonts/roboto-v18-latin-italic.woff2    | Bin 16944 -> 0 bytes
 static/fonts/roboto-v18-latin-regular.eot     | Bin 17405 -> 0 bytes
 static/fonts/roboto-v18-latin-regular.svg     | 308 --------------
 static/fonts/roboto-v18-latin-regular.ttf     | Bin 35408 -> 0 bytes
 static/fonts/roboto-v18-latin-regular.woff    | Bin 19824 -> 0 bytes
 static/fonts/roboto-v18-latin-regular.woff2   | Bin 15344 -> 0 bytes
 65 files changed, 4198 deletions(-)
 delete mode 100644 static/fonts/roboto-mono-v5-latin-regular.eot
 delete mode 100644 static/fonts/roboto-mono-v5-latin-regular.svg
 delete mode 100644 static/fonts/roboto-mono-v5-latin-regular.ttf
 delete mode 100644 static/fonts/roboto-mono-v5-latin-regular.woff
 delete mode 100644 static/fonts/roboto-mono-v5-latin-regular.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-100.eot
 delete mode 100644 static/fonts/roboto-v18-latin-100.svg
 delete mode 100644 static/fonts/roboto-v18-latin-100.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-100.woff
 delete mode 100644 static/fonts/roboto-v18-latin-100.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-100italic.eot
 delete mode 100644 static/fonts/roboto-v18-latin-100italic.svg
 delete mode 100644 static/fonts/roboto-v18-latin-100italic.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-100italic.woff
 delete mode 100644 static/fonts/roboto-v18-latin-100italic.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-300.eot
 delete mode 100644 static/fonts/roboto-v18-latin-300.svg
 delete mode 100644 static/fonts/roboto-v18-latin-300.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-300.woff
 delete mode 100644 static/fonts/roboto-v18-latin-300.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-300italic.eot
 delete mode 100644 static/fonts/roboto-v18-latin-300italic.svg
 delete mode 100644 static/fonts/roboto-v18-latin-300italic.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-300italic.woff
 delete mode 100644 static/fonts/roboto-v18-latin-300italic.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-500.eot
 delete mode 100644 static/fonts/roboto-v18-latin-500.svg
 delete mode 100644 static/fonts/roboto-v18-latin-500.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-500.woff
 delete mode 100644 static/fonts/roboto-v18-latin-500.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-500italic.eot
 delete mode 100644 static/fonts/roboto-v18-latin-500italic.svg
 delete mode 100644 static/fonts/roboto-v18-latin-500italic.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-500italic.woff
 delete mode 100644 static/fonts/roboto-v18-latin-500italic.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-700.eot
 delete mode 100644 static/fonts/roboto-v18-latin-700.svg
 delete mode 100644 static/fonts/roboto-v18-latin-700.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-700.woff
 delete mode 100644 static/fonts/roboto-v18-latin-700.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-700italic.eot
 delete mode 100644 static/fonts/roboto-v18-latin-700italic.svg
 delete mode 100644 static/fonts/roboto-v18-latin-700italic.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-700italic.woff
 delete mode 100644 static/fonts/roboto-v18-latin-700italic.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-900.eot
 delete mode 100644 static/fonts/roboto-v18-latin-900.svg
 delete mode 100644 static/fonts/roboto-v18-latin-900.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-900.woff
 delete mode 100644 static/fonts/roboto-v18-latin-900.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-900italic.eot
 delete mode 100644 static/fonts/roboto-v18-latin-900italic.svg
 delete mode 100644 static/fonts/roboto-v18-latin-900italic.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-900italic.woff
 delete mode 100644 static/fonts/roboto-v18-latin-900italic.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-italic.eot
 delete mode 100644 static/fonts/roboto-v18-latin-italic.svg
 delete mode 100644 static/fonts/roboto-v18-latin-italic.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-italic.woff
 delete mode 100644 static/fonts/roboto-v18-latin-italic.woff2
 delete mode 100644 static/fonts/roboto-v18-latin-regular.eot
 delete mode 100644 static/fonts/roboto-v18-latin-regular.svg
 delete mode 100644 static/fonts/roboto-v18-latin-regular.ttf
 delete mode 100644 static/fonts/roboto-v18-latin-regular.woff
 delete mode 100644 static/fonts/roboto-v18-latin-regular.woff2

diff --git a/static/fonts/roboto-mono-v5-latin-regular.eot b/static/fonts/roboto-mono-v5-latin-regular.eot
deleted file mode 100644
index 550df22a6d601dd5ce37ddd1463adc1a7e4f0b79..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17757
zcmZ^|V{{};umC#AOsoku#>BR5+qUg&ys>TD&c?QFXJaQD?gqP?_q}`WdFTFlU8lOs
zr}|G<SGS=g0H7@a06_l-Ai)0}P=F+;|Cd)#p#}hg#Q%?~5DEYR0HBonYdX;WkNAH{
zY=9cT8DRDwdi;kFfZ~6%(|-s6p#G<^1Xu$+0S*9DfZKl(4S?2v5;uT5!1jNvAOJQ1
z6M*G^fEU06-~{mh7lG|Rp7noekN=`t{paoZKhbUe^K<%-f&gd$UjNxJ0oVbw|Hb|P
z&jA1sQ<qlx-&Fs<1qiV90C4aCgeU-1-57J1F>}l4YlSo(JE_k=Td>5@Ftrqlv-FI7
zX%MMtA6jfeR-Aw=yV49(uDDRlpg;wt)!t-VijoGdMkzgw0p;l11&X3%gk1GwJlQOa
zLK3v6B{eCm;lUNf4!>X2Vx|m@y3kBQMV}7aL<HX%ex0U@sRSJRBr1|1zehax{)30W
z!6{U&>87n7d0^kAjF<IJn|JKbx$i=TW3`m|M8@TU-PXJQ$XS%}0jw5vCAZx3YYDLW
z?Wi62-UN4S-R!J4b)vv;I8@^F%1?JJ-W!4oq?wU0q9dvXDkf{@>4E8Gjv994Rt#_u
zt2y&MJ~Dhh?Tg$i_yww>7u1TLQ_(PRtc!^?VNCkZO{O`ldo@-~ie!v#MV0v<)Z=v8
zvq&n8GY>&Gh_9@JIe;j{6g4pJiPZFi92QH};5!X4TPzXliAs=us+Mm${)b4Ilh_oF
zx2)_!T@Wp1d8S5FI7Ifug))~UfmiK3O)2N3aX=AW=BO|$9m%C2+!xo9<u}%>mfo-P
zQNh8nak<}7x&p$`?r+3thhb>+q~h}4`XS3$X5&tXCWoSk*f+v%fFzhqSx?)7KWAMG
zD)@lMK6o%{*q`>YY4}4u3(G5`^Be#sQ@|k%Ja0)j)~8JnG-2_&A8b=FE0QEE@X!-f
zYV?Xy;}p};)!)=Q)y7FHl{ay%q2fVa-kT~fwH2*-E17XQIy+iom4o7CqqYA{M!bDy
z78TZo>2N<S6j-s585;k<*V5{6(ZJ!4t5aci7;Wnv5BG_-!3@YL^Xi;m>~W~fT^IRz
zVu%St;Pu^Ia`3xdK!sD=wkdW)8dL+33s9OUia&%<`j7{DAFpw@70R`%{wmCJlEB)@
zfi0vO{^9L}I6L0C>8;)R^^nAcYLKtxJp05*r#wV0d?okgd2gTPglp{`H4054$V8Vx
zOZ7tgn!yKZcuVynEeQR@{X77YYec?}q3A_3<T0+Zg7-tzq!Tm6+57-KqZDttu=!D!
zM^#qsu-F_nJ5K!iqcXWB@cR~8I$~d>260vop?Yv(H^3&F?V}CnfHYr<X%Cxt;!RM=
zd>@-q95pyHFT7yL7?{dx#W%yuKDegn(p7K<_B9v1{C#-5hQF*)o}27=GIBRI<m)6}
z4*N4`OeKFq5k*Yl7Ds9d{swUt4({xNm|f+1Y&J`vm`F^Qd1{bhN)vo21L6By0$`~V
zjn?Fv75Iay*PYk@p_`C(<_FrO63rX)p34tSP1?9M+wF`_CNMKOY{4$_n?0qYFpM`6
zKTaiQ*aM-lAzCXjr$brX%Q2}N?8Mym{FZ%>FA1n3*!w6b767CU$q^a;>HUD#P|f}~
zRh~Sah`4thblUJ6GZ<6MIaC9Lcds*z()4H(x^5j>wn+%^Eh9LfKf?20zG0g9L#{OY
z#9|_Lx(`;#TR<W)TUfv%GyR@>Epa*%@Qv*RS?g#x(PDX+BpaMs=VW{1s2v8C^X$Uw
zBP;WPrdCusbASd#O+Mu+B`q=Nf>I5}X?;I$sY`IDEe;TPJVeNptQEll{f<|ZuTiUi
z^jd5EWj$PQ0Ck5h6vC2$vTC0%VrkU2XD|?A$QGwWv{fR0=3uSHF-Mr=cI3#~i5bk#
z7Qc%d)CpfS57Dh;Y8q({>LR&P=(F#@vi5gMhgX#{AeF?P6gv{_$HBaM)tfvzw5Qh;
zoAsj@9H(6Yf`^BL6VFPCqs1H?;HXn3NkUq*i~%#D&7jWsvZiyC6P}+fS?dGJwGCPG
zfsO5EH6|Wns-BtBWZc0$S3EG!dJg8!_XO)hRE#3lCZBV>oefo+>W1V(S<&WFCPB$)
zdE_Bo!`G$GGY*NhWw>-18oOmFQ?1rW?BK*!J2HIF?^*Iry*IT%tIBlpggOC{R-)Zf
zOQD84Q8*W`ALONMb9mK1OPZ=B7;KsqD`b<>`4lkT+#9o(OsWPxtG{qcREg@(DwOX?
zrB(S->phs<X&DMBp3@~lj6kw84iw1eLjCo<_-Y8H9j^f@RKRgebeUk1OQbK~+J4@u
znXbG+Yk2lChmix#Dg5qs2xw%^N7#a3>Sa>lIiufY-=Td)!8~pfTAqFt9^M>^F9%@L
zJT6ZR1;S_$#+i*0gHRY?KZFWTerPmj2CLpBxM}{k@32<TKM`%cZ539`rV)IzpL<=$
zb<w|SBho~6kKR30p@z>F$@6&lsfPqjiUX;n-zavkeTLC~JHE$Ts~W=5U<<ge7DQvG
zf!og}vC{pDDmj1rEBlemLr)^1?5becP9jBbMK-x@(l}1Km|^cj>K1(BdVf<Y=kY{L
ztF#o%Ce9}3Rm94%V8&^aXqy$PzaRM;$7E%P*I$7yAM9i}gVQ9UiND@$Gvwlg9voyY
zy3cp`iO|4J+7{|@$5$M=UT&1kSV@09(w9mlrQkb>hppuS!_rkk=pieEfW4R=RcT?R
zH4#o$M%0y&+jJ@Db=xuA9ZNfKQpb27;rD|-hQMQPl<UBegUgDcm9D3+xKCV5DG9w0
zn@Wmt^GKlZXUXJHstAR#g9;RuzU(0mIX~G=bUpvR#5&s%<v;^j*!-m~25ve?+IcCN
zXhqBA`QPuEm{v_(l<^(SXjsMWIIJp#B0h#;##qPbrO>>h-RK4IE9<+B+k0naGvA-U
zP3Exoq<-Lz25+Qhnt)t&VH#W<&m?M7;H|uO!CBlQ>Kvsvk9k#WVgQ15@%{@YM!7$B
z{<|Tqi(jb>pU=j~*GH7!ZVmDSJFC1Of4w*1hcc7kQp3eL7d)Gp`35#<c{A`-P~$O!
z?2K?2Z5RtEhS@iBi2gdtioRD^I~Iz67Qx|#P!$%9$f!`DgutBLHHD*#!3xoRw)(+v
zy5#u~+Ff$V90R!3LjG;6xC~qPMJT5NShg<wh*Vm(pWWa8xHaosUlkQ$qP`VYY%+bJ
zir7Jx!$zDGk@4OGC50^vG@;LtPi4!9DdIAHLn+#S^^V8*?@YVM5UwK;6`N8Yl0<-@
z3=J)61OJI2njoA7Ti1k#EwE&waSZAO8DGLF;L_P}RH6RTh(N57U~ohO!pn7Y+{h1F
z#GcrrtkbRfYd};vYf6>?nzA;@7c##T162r%V`N%syAw4ap-vd^SVK0-oZAysHOvyh
zVx=f7XrrDQ<Hw*u;uu(%cFasN2Ki{ht;HVn4KO<!<qLcOvHY*(mwtK#_womsZX32F
zknxY&C+Km|44W!Xb0pXKYpRnVLhqlks_pH$SjaSo7Re;Jpc?wi3vyp!i5HfUv0wj_
z3hkeo5>83R6!%RXlylQ^K7km8kfhs{Lf9%1`XNIJ3EV!&N)z-qvpW*qZh(7Qv|3{W
zM|@jH1{|`t9+|(gSAp$`6QE_B!?#=Rs&H8zwO7gb8v|!uTa;_TKY+1gCe$lE?!uri
zEY8g%ko4e7)_kik4;MJdPQz?*zhkI6d?_(wCq7r@m)EuRHsXmTNIq^Of~(4cLD#9#
z<235_ip0jSxkDtHu0!73hF(Akqv@xVd8%Vo<AOQgz`ilHUk#d|+!;v4Y5L-yY#$#}
z=Nb_|HVix4sZJUQmxv4Mk~yh(^YK9Y8}A%+DC(Q5Tet-=x2R#G7#d5~Od(mIerzjY
z*g2HWkT(@zf;9OINP_{v=30?}5R+|2a1h@1<k%{1jo68=0D73xX{8H%&uS;@zqD|o
z??P>}61%ZE+np~RWb(ij_JnmGdQ~MidEuoLS$SX*60WPXQUQjN#SmTinRO6uD1WHS
z4&R^?*)J(gxj~pkL5WdU2UhTdoiquYhz+CU1t<^|x0R-IE$S$t5_a6Ds?;Ie1h}Ec
z(nstXlx>wcjLo+IqS*QeV#UP2972=dv?HCZbE(v?GP3lX4d)*Y{zW07QWRww4lwv!
zv0>Gt`z!90S|Hgm!5=`^X+hIUI9A{W2g<JKBg_j3j37zaQ0l1`p?kIbsTo{oM1vWr
z@~e)9i*!I_WQ-E9CHtn=nqtt_*P<`S`dU{U-EtUgB)^IetdWl%F)tgeFbZ|w96qow
zd!4k@hXd3{TxqKjaeP7HcL;9I;#6~yV<i+cFIS#WQJL+V_%-XYL6HmP+AqQTwRtZ~
zpR(`YKQXz9f4lg=;z5{kc#xSu5D`kSDh%P*KT42IVHCsIt?djUrUJc_k>{?~zR^sR
zT*S-On<ViVzQ5xzoxAQJ6Kt(XqSDWg8=eWCZ)Q_58uqw{q=gGu{R<YZuxN;nx{h~h
z)=A=ApfLJUTO58IT#bc@^B?a?VeBYQaVQlfpk*xW-579dyNr(-v!n`gi+}gWoF_(k
zKE*~z(fGsYiOAj8Zh+`mNB~1TUF<7G6UYxyf-$u@YvNz)W&W{R<kYL0uU5=Zs2<!?
z@*N=2s+gl<fKma%e9BODabvdxH|bd#fIH|V!>Yi`KLn}lJb?@nac5Y*hOv}hdO%oO
zG!s)Cidd0-+B4=pPTlQ7Uu^`oE)a&(x?sf4qlTH_iltt;t;rH7q^Sy>ZgtS7n6QwR
zYH6k<8c(#bd{H8JRcY<pk$@~vM@u2sBK9e*sq7a#jsg{0&l(gGlGI)VBf<^+YTc!B
zYq`*RD)#k9D_xaO?4OaW#URAsp$+OP(xDU9w2Ub2Ep1r-@FFouRi;gwoklw(z)h4K
zDb{TCqbN^fGV_ow<3FWJw5G=xGtnwY>JrOvVbN&aF}|pq?L=U|OAQxi$;b~9LyqD2
zENytky*|GZ$REC}`<%^~9gBLlax$zX8+@z&gws3Tx;amF2X&^jLbX=ey>ryKpg%ls
zAXIeG$El!upf-to8<j4NAr^d>xT~605;5;31irFNSjyp>^-*$xbg0wtB=r7LARh~@
z_C(@AJJ;6$&l*PZI-o)^2Q-<T73WG++kA~kuQk_xPECjsEmTc=UNJsC@fi+%61SA0
zwny7Sb<wZInI^>t1>&tKSqzbP2WlEkgSskzsf;u+R0oUpqS+Wgaxq&ic5&@5@$J`5
zntBl7>@Vy7)UlIIYx!aaW?4Z!_~x>eI3S=Rx#_kYil~{8sOR5~OYtvsomvcR$MZ1D
z+u~^*IslO2J7N%1?IP6ojEa}Nc?}i<YtiuwHrX{b=^{_-^dd$PdHLpUgJK90L3{xk
z07L0fPMtX?`4AqeC&Dw!p*g988l*pSC2_dy;ffc|0g_xqtga)UKGJ3h3P+gE`j8!m
zMuJ1mSk2_1=kfZMF!N}VRa^9PQ)0giMSmQrw5+Gt(++ybLdsy+zxh{K(_*$rG>ldy
zD!k|6{lHh+h~O{B=~9e<V0A6@Z$8y2gG;aj@C96fL&ceNbKY&>kxh0OUv$gQ7MX3q
z!;NwTRrs}Nvl=9rZ+)*!sGkdosVfF|Ft5j)sW2)PRxNxeo@;k6o7>!20axY}-$~Ew
zY_u~K@<qv%iTe{z8@a=#RaqqjGLm%MmSdx?TaIBB=*9)>zW3?M<SRe8=q|+R9-Pj;
z%kIYVb&xBD%=ei==;>m;mJ&<Q4V&MPibQ|1GluD2|GWFePccp+W-Xl|V;^)u`xaVN
zDgl+|c7Wt9FQj{A^fF*zppJ_fIv1RvU<}$OV2z5NK`aa96eAR`Q8CJWODIRAtA9j{
zlbb$I9~wfoMD@N9F-F6Fft!@2(>!*zY`!3)(IpqjEg~t_XL7u_Uuwd$N-ECpLOCI-
z7Uf+|J4khB{8=*&xrk)p5@YWYvpYx-$-=WScQykvI5yQ`L2#o?9P8F^ke_hhDdv9c
zBOYOe|5Dp=@?XK{EpJ7fy~)?%YGe4X=uJmRf2k-&>A`tTTN=zZ;|sMQGa<s{K7S-E
zg&A<MEVY^t0r5_pGMqt6S0%Jl;IZ3#A8YJ>k}%rMin~v|Wn`^H%lTh3DqAbNps69{
zP21@s>Q&;@z*8`lGA-VAo?VRO^Oc;4Crl{G>Tdii?M>63)z>=v5T-)Kz7W6}Pv)9C
zapEfYIqxg~R=9)B?r}|@FAhxZD-<5|M~i6FsD8{8L=R~%W~b9@S&I}~`ERdXjX61(
zC#vL_@0^}o=-6v4d`dQHdA#4$5}3O4S>gv`@F`;@Fcu|xPSkmA#^iJfqTS+VnvC#j
zXlRsag5Ph3?~Ns4Bjs(19ghGRgJ!b`!|bonLf)YVK>l!%yn{B#Ba*r?XKu?WD2ttn
zH~f)33G^F2Nf({+MqMX|h0+q>HRJk%P<<##p{g(ON8Mq(B+9pTk|8>Tq_*lc+iVSY
zrBIOf*48$=G5E|NT8PM0;X`irf&IYrIoDj<3A`wIppS^42AT+aBg<~qn!n|SoG`^^
z8@qIGN&<B>URl8BF#Srgf2rUz3d?9PTbb0(AJy{b_TJ8kS!!rR20|D%3rcUORWxPJ
zbl7|iV_HoD*8g2-p`xB^1*0>qIInW+G;h6dm8{~yk)t$i^H%1<2GP|gl_SgE5SnHl
zzWc#!U2PG}=SU>hEcfmayV$+z!;=hDJ@=K+!;-aoTkq@d9waLWx$wXwlL-PsR71bs
zON%DTyAkKb;vdFNj;F=^^-PZN)<#WI7)#|<hQ>oe9A~?yKNywQ4KwKJXQ%A@;Jd1{
z(Z2_v#u?_=tp)ruB$ZT%9SB2qYxo-wNqM-{dm(6RxgSZT>gY1W`ZY6G<~HeQ2P&Sf
z8OlRFtrq_Bs}7T8C;|2CG0t<%UBaOs)+h$2rB1^}%jLYzj9KX6<DW26TS>;dngAZg
zrCKz$r#zRbvl-}n4YCY-6qAznLO<PkNi-&$&RtCb;*+;i(~-Ud0(Xr~$HetO>V}YW
z(=Ei1J!0Z*jWkfBc%sVc{E3&R*Rgz+53X1A#md`|*{7QT*AwzW7F$6sPf9>tj<>iM
z(--8p>$SOq%fgG0a5-1&Jmg2mH<~4#u>~1l>qiTe4#RQsXTRuk<fDoz$>E(@LV5qL
zs@f;KO`HrYmHY?yHLf%Q>Xbt0&UuE(QHc6WrF(wIsw8_>N>zB;1d8Q0DLS4Rh9;g%
z@9oabpK>~iyINY_nYk5Xg|>1nN9P(O3Xe}Vn-*vKxT}8yKam+*Rj>OLDq$O{4Zv?8
z+&c_PH^Xhf)>W|#)~wwtFdyI^WM9&OjScc|0Q7e3P>1pi1AIdXkA${CC~X^|Q5iPP
z!qGkNqEaJMo^hz3EiGK6u3Lr4frb-m_*8rHKb=rfa$xuGUQj=&c?`I`hOrd|^i)i?
zy9T4}eqCtTm}XZPDK7WsV2-{T)P!oABFdL_loL1YHzE0ERXx`pzhyN=t6ms%%4VfU
zVR%ms&}ZCS;ub+C*s%smF+MfgW+izcrn`#On?eP%np>nsQOy^{Za+Lk9&W8PT4*h#
z)kg}%35}@NQQt(aNdu+*1Rf%y{snJN^uwqgqMr4VwO7@#@86<tTgv?e)6BEbQ<uuJ
zmbY4JL?3<DRft$W!}1`e6%l2>%Ac9@@N3UZVKA<c=VmKU!a~u-2veITB)+hak$xTG
zyC@vodP^*<i$Nm}C;6ON?2q<PLH)9G55c(57#TPEp;^VMv;sKgyt~XeVRv6bI_eiO
zt84H?@_&<q;F+V-2uvoZM+;B{l36MiR_yjfd<8s<AO_L5Wllo6pC$3h{V7`I+2P^(
zB_lt+r!t)Q%#`AAw<0Jf_6oo;I29?(1q{Jkf-QsYAqP{jlU3Z_$2HJ@G-M?ruNk<D
z$2RcT#CzIzIPf(3%ncP9IpMu$*AuaFJn#t79gcS1tvAUqhcb~R>Pw`Wys-c`d3^He
zC%T%L1+ghr9tEXN#xbVB2m82+qNj7-15<RY@%-oIj`&8k>>oI929```iHkKP22Yyv
zl!AB9;ILw&@#T)Vi$C*CeYnye`Yl{<%oJlm@pmGPZNWKJP0-;!^Qx|qaGw4kADX?D
zcr@UtoqyIjArfTAmowZ7n2v`N->pSUFJzW6PB9)z`8wr1IN^>xYT;AZ`Sc!LcV=gc
z5dux4VjW&Sbc63|mP6)3$eNzL7S9wFkcXLPnf-~FlDF)VM^ayZx1X^H@1o-Y3grTb
zAX|y*PbmJwt;l~*?osN|FUGBatsyLR1)Qho^{%|Q*Isvk&H_<Jc?~E3d`WrDq30iP
z72J}~mb8qTcwKSSt=2zSl3UYV`x-2gG$W8(09vN2(%4o7V<W)6wWl?9xvr;lCZv}_
z*my;z4;+NMD&Ps1+JRBVbdegT1Fbv^ONCT38DkLGZ=zxFMOH`U0Rtbz0(EtfBL8L>
zzB6{|1+Svc>r^Y9+4MtC-aw@2ebq0`r~Lv;{T>7uR_8q=BkzLk78(x^G_h68Eo!S5
zvl9D8he)Z4c3EsIG}iZ!M&&YUGZp11$jvQ8ZVeDny!Ft+Z$}&%;-_Z_1yYUbv1;_`
zUiQMdQc7GMqaKw&{RnSng>H;WVpVq#R`ClLuCJXKrqIYVEi(Hfhe~3|bQRx(4e7xW
z`gY;r90NZEL&&RCer%ypb`9Q?3PvHvd?c&gg8bYIxURlOvdbTdj<(ZdPE+62Z~*hD
zaNA_ID<36G!hXGKvILYl4rMz1tqhDFaHZ>8f3ZP~K$En!>xfQ=#nmhI1ag-#Q3?lf
zbVl`ke==~~L6}B<M7BT#eDN}wKuKJcQL6~9yb2)CE`!^T+peXWf95GuAr7n~P#{-{
zLBzM7MtJU`;sRsg57vtDwW*$Q4^C~?Q2=H!gbTdl;T5WK&k8?Id5&+igU~B(7EPGT
z^%*M*Ifi1$k894kBfo}nA8(#q5q087qoxtBAxVW|&tkIX2nyk|<DqN$cWTl&K%*Ka
zyeT{R0!U%WDQSevR{ug`IBz?lF{ZtRRh1T0Ct64+aZI5k?Ffo%h}aBb(N)#zXm-U=
zxjbp1i;M<QRFa(6d2E|7O7w^IvCkV8J@vw@2=ST^L~BdxB;1Y_X({U)xp9GvUffMV
zpM(y=YGoqb`O4CLmRffswuS(MwDe)+TtuW^`^3l!v1t^H5UNLJWN3kJEfKz1r7XK5
zzN|l=l94IKsknF5*Ai%h3=g&O{x+W$GhE6+F0VAWWBG6zLGZ9UzluY#8?Q(JzfU0_
zy@Gs?$p_>J1bH2<Z@SU38RBofOI-|xgZjqoLF|WvVZTM)XJb~v<(x|kxYAOrFBEY^
zhB1H5MN`<koA?wslmDWsYr>0Ej6jTxC6M^iagS&mdr~fh%NpArg@NAQ`T)8;GH59`
zuW>Y!Uv8Pr4}J1`X;OQ2uty3^AR^3u$MN2e`WW`nQJkf+R;kG(WGz4@NhQi9-pzgo
z{f<7<QS24$@~a-lkwTZn6QwNNe1rV#MdVB_gEztxZjmgd2*5Q9<Zaanb}TCmX`7x&
zX+|1LLrxCK1(B?tB(`=73DcmQbAiAr<bx6LY54Jpu1>R?5vYjA`Ym|aT!z+SiePMZ
zY1lDBe>EBWBH?x~!)YQ2tIxCSj|f$>Fa(P@2{DlCKjnAt+!IyC<xByB`T6|E^l-Mf
zYI%1}m6Yx@Qw|!c+rMeThw4pI4pS@iY2~@3u{}53ClaVUz@kAVQAj%0*37ku*eX#M
zj)oqZ>(EOH?w|CrOEYZEQcGbX3=Z+Yu0#7$cx_$#6g(0QW-{k2Bp0|8`%!4S?I9Xw
zklUB35Vj)do~=<4H|ViArZ29tqRe!JPj@H{hg=N1X#7*Lq^n#%r!~D_|NIUO3P(9-
zco2ys4Xyb0;=l4G6r<j=Faj1<@1>^AJxJ5|!*@0ca&_#y-Z&Z_vFUZDEIuPpN9p<f
zd8+sm%i2I0E4O|#2ru!F44XXy3iXxIX6vH?o>X@4$5)fz*%;HJ;(-VQePFKi^N+)+
z%FU&<giq)ElQ-In=d$^SDQh=#(+emJmGy(3FV&FFFxR_cD2GYhw}`s(m*XCmsRtKE
zjQ9qB(yXYTR{Od>1)J!E)b(5yqajQjEU4TV$y*aOvE<(VKgU}8m(@uF-8EssDXNL6
z29pYjKW=P{<EVj-`^zFHdeAEIr$ve@b`$g?t5r{5T8VtjF6)LwHLF_l)%HEY3(PYo
z6L+%VNMsThHd)!;=44qouonpEs`3mUoCqZWJ3cPa>{xvemA^d~RrzO7g8neI9b_IQ
z^P38o1ujuAL|$z=%d#-7DelEv0&YROv<hF@Cf&$)#Qb;nQ>=<?GiG3UP<!lft#GNn
zKL9-d`q4v`&g!;hzCSNKOdVP;uvHRlITYse;nsqz9S3#I$x~dp%=n-HKNmOoF+$#P
z)Un(TM@(U3=zik3P1a1^=t!1zTVY*L7TCba%r-cvSMq<X6K)(=?_EZkwf5X1l2DtI
zzC(YJMfgR&v@(2jXC>A>#hJH<COpsa-9m$A|DS{*&u^sF>@Rx7dz{U>kD|(jX`kQC
zf*9PV4z{c67(SRcGr4cPd30r78OSBwX44wG&;KNZKh%>JSQ^>+4W?($UMq&hJwW-M
znDB==wgvLDb{a@UUX06vY;Le*)Dan(L^mu3!0>u7>S5~^qft<}-T!s%9$k9sv!&7$
zPE$4Lk)25tYn0qVo+Zwv5k0_von#DTEQ;V015`zaHyF?)*>W=#LZS}{&van+cL^hg
z@M*3?z1m+}?_!C`05nkBp=x^}8|}_-W-4!z+qepm(~HDs$&LGi^cIjuFgp|Xt%9Sm
z@JbuIA`6g9hC~H|&twl-GI#oRdbj8)EiQp!XzOJ$oPn0)>gM>fWq0K2an&?3iFbXW
zQXq=U{u*r<Ec%1FDBRmMeWml0x<DZ{M&LvJ6>ab&&2I$^mVN@jO+MhLdgH|pcl43q
zgK8myXyoE>uQ)Lla}TUm%bDz5%q;-}mQcc;N0#(7dwA&)njbU&LZ0^#apW)QLQ+gg
z<rIX7GXEI*ae0^LQQl#gkaRa~E?@-0`otnH%{I)%$o`fL4qLM{HITU&<L;~w2nU9|
z*zz$;$=K?xsL;$shv+Z1zDkjLbW@fdNG<|@yE5eu`hfZxkb`%Laz)uRddR=`|3Rtv
zZf6<J8;5Z3orR0y-i{FBZjTt->Rxn71?M|uL;~7IrTYaM=l;u!**x@;kq;CH{qz|@
zrPmF1N7no!t)7ME_PP#6+oj8rFGH+1=>Ks~$?O&EY-JC|oP;eKBAHe`6rQs=(Ebyz
zj7Y_5L@PNtr#&I5cC!35tyN_Aqw6kM3I9MU)d%^YghksI$44cq*nb^QuYvDcO_C@J
zueB36>>p(Wj;df3sOmg%L!v<#Vl!=HDXKh}qQP4ZQuGuVDlI|AhL43B4T0nCK7cHq
zl{b?<3PRzw<jF{*nlS^rHN<bv#??n>hcM=VF(B{ML7r0dmyI;G5$Kk!!>QJEAbQqC
zL?J0_g>zB5Pp~&-BR^S|FWavd4*7P*WK8(9{pgRyVoJF?M4eiyN%VE(1gxFG+vSqo
zcI9&0B9}&abH+XB62<Iab#YdH9_1Cp$0$Cc58@pqi_?bo4Cd_wN-#B{(A<*3D8!U<
z&Nm`UxetIPlV2Ajo(|s>l4QdpuhK*B2-LPF;)}lqn&+MoC{g}~hj7$2&TBr94ex*d
z-s>%cSEgM&AaBdyW$VadSCGwuc)^F$tQ1rIc>%RGb_7kKGbe3Q`BSj{B4j&%{l8aZ
zIzD5L0;z2NsR~<umK8`puL1QYib--&w!JDe01#FCDquw{G~X}s>GpM!4b^shEe{Cs
z+4%#Ie}0V)fxP3mY`SBn-EJtr76_J7IQk|7QvUE87vNHK+t9Kj-jR3VS5G=ExkZ>Q
zqQLwympfi?Cn^BHn;m8kUU;4&Wc-pk3d$+uj7EyTV^#{YTM}g{^4%jKrW+l<`ggHr
zPKP*KlUCiUK&|SCH>iNL9-Yo>fTe#Q6X-(Ye3I;keWcuRIzJn$YNE$$FNc1hY22UU
z9Tl6Qvn<`{A-ghiDTgJ3FS|A+4(M$V|7i$LI57EYKie8sa}Yan9-?0vGRUPj2meGY
z0iAAQyMu)GT(PC(uX{}ql(R#8RfE4{tw`&k;9QMnsP5Ft><wR7Ta^4`O>D7pFcEL-
z1id{pcQ<der)v|HZTlPbwrQK$FL%R?r#rQkuLH5ayY8_i)IG<efChROCC$LC3tsGa
zb&2u4Oh`A3B#mb0rdKrw&e%S2rlpO|jrRm<%>!0!T<?7`YzIW1m257S#`TheRG_L0
zdLGYL_L^cqqGnj~w2*4!fxq>sgi7UWMRjV~P;gh;aL86=_%0{1-JU+?X^@)NU~i4K
zUo}c;(}Ld+@oxVX!SbdaDT<PW2n};DF%v;YFn1;xB`0vT;&S?ApC?p5q7W~r^zaO5
zJ#sM%#z_EB-yHTX$b7ETD8V(rrZ)x>-pe+vX})+S9e5_#yM{4JBn~f)T7O}`k#HmN
zHG&@Pv6C3T`91Cx`!kMvO!pERM>d@X_fsbE2ErobOK$7eHDn1msKHO34ab;~zH63C
z-|ffMQiWs`SZ}gdB`iWey}U=!nye#s{ta)-*7%JY)IDe{1E#V%T(bv!*7mkh#Acf%
ztXE~utz$H2Q9S}$4h7?U5YuQ#d%PkdOy#V4m;}c9ZOygCJUw)|LmArt{frZ}d-_3H
z-2Ob=M4W?q^u|gtsDuSES;m1q!YSYnjoqN*?!d&Enz2oBrt%MdhIKni!Lp3&@VLU^
z2lCqd2GYXgQIp2yjWS2C>nW#rE0#C~nle9Ovq}zpn<qA4rpfnO91T5Yw<U&4q(55x
z#|Ze`8y0gc46h#!di?|PADashds&9tr$<b=y4qk$j5AvVA(0NcoYqO27|HgSf4oEe
zxXie?vih<3nc^z~C?aoT2uxEIU&`VVbyp{qbx}-X7Zy>X*Sznd<gp+!s#*SkB1_zf
zpQ=?Xj|9N&0od^#>x2(zC}I*JD2lW)vJ10kxA*UO?}OK6bHC@IT4eB-qx?Tx82+j0
zDC8hTN)ur+i>y{j+zDZ)eQ};lf=ul<dD4rNS*qdlMI`rIB>te;)OK~30F-AKp|RS4
zv!bWbu^@h8l?3>_C?$NcPZe5k$~HxT_N=2=Gy$d<i$<gDlR9D<jdbNK`Q0_$=+2gk
zfMYSPsN`xa;nW|hxo$80&<5eWhjc@aY&A1XhN%GjNulSI)i$rwAa#Q(*7`4%_*>j`
zVZaeZln-kpYx>qbA6H(gHH5Da*_|cM=_B--)|yUJIToaVWzGzccLfUqS<cJS+)*Qp
zjhuG1qn%CE7|e7zA7jG!wP^%fPI68c^y}HZEg}HuIKx#+Ut_*UwYdBj6c=l#<UjJL
z4=8rvXtn9IWm}g*gILe?xMMY0BLHttWT!>7e_aV9cEuiO)#+BGzvdk}mu{r6>t%1^
zxpEv=b?Jcma+cg-c(f3he$C#iw1^GSu;$w|-{w#wgEyJ%&cx4Y7@Owx_Xyn7b~iC`
z!gl>)fGzzB{M~p#5eh5UVQ-a@??oe2KTPYO9l^)aG2-hcxOPrA8lp#>{Y(HJj$i<Y
zod(A4@@Gu83z6WG4vzFKGGpbt<XDHbp#b79cT-N2ZrS}{zS}Nw0|rx$I?G*$1{3VK
zmbgo_eA$>(gkpKKqra`uvmW!)N?Ro((7>va5{z2)t<ZlFYPBfyVg$vM7=xomW5q5y
z;9rW1e``0c59o|Tjj#U|?}-(1vR@60V_^3rtkwy)VzCG^n6-$B8lyU~Q2$nshJf5i
z2)h;Y2yM)E3P%6?zut;?b0n}ELqXe&*1}@b5=kCPjepb`8Uo@N?Zl}+K6FeW#^4=v
z!!;lpB$tRo#zTK2l{DGNK&jn6nE0&4bvHHPh)H|Mw2Lq-_Leq>Gx!l<j(6Da2#xH4
z@%l&EV*+!rQem;@NhLH+mcE`|$h_c1*oK>scSm7D)nMR@DBU~{=6r9Q^j+>K<|lG5
z0GA2<O!2G@_K0OzRT@1nIEgMK==uj+Z5FelTusg7PX}Rex4{w{X(+s>>oCG!WpQpD
zvr2d-c2|JR`7J1`atE~J6}uA`ea^;(2!Do2<^UkHA+`Bk3LbI;VR;)b^qNs>t#2dL
z(=wbZoMI@aoIj?1lZnq`u(4{s2Bm$V^oftM6Vh;^RHZrps4iqhq}?l_wKIn$=ZdjR
z^4jI+RO!Lij;*eYFr=A4zTwKdRM(D>rRDllQaM{pw+CZ-BeAeOj@EgJl|_^!40_`E
zPIgAus!t9nyrC~0?ay9C_r99Bd9TKr5q9<94a%DQGl$*U8`q+$1d40ufSL}@R*0!x
zWhBmyoKEKcAsG>*CyHn@`$Ww>a;yE5Y-0KiGx2mu4}%I!Rz{IvcYWe@zuv4IWcw2s
zu5JPfZs5>>hHZusPskE+Y4pq<r8JH~n44C_Z^ljb(WlnA^fr#AGp^(j#J~1u#534;
zl63`o+j)PfrW;gcNV2$R<lryiPsF@nqEC)6+X4tQ_I{DAuzMV8his1m<a+Rap9C@8
zB0er3NWm(^c73C_YcsbN4MnQ91`5qH&>yV`k}G@Ro0Tc_e@v^LBNucmJ$HT`oAIB*
z`J-IcKiIAkDfDT76o%*SGy1ff7NTS9Kj>v)5JI1<d~0Fd3OnDngsN1;i4ipE3k`_W
zlujNxNRJGg=aLKy5<*U;wC@a0PrI0q;386RwF{4!^ogG9(MdR(ts3p+9)JTo7ZRo=
zYO2%plWt4d>zJ$*a~bDF*dPZ_d4A)dmtzX3CbF1mtx<+c)i(I^YNWETP<C*mvhIoo
zCT~wYSHBtcCfkI<Zn85;w2A6#obL1%n<eR@wfhv0ai&4ADa#&`CHmv6i*R8=;MUq~
zV1X+krdLTHW#igqNLDvgru_%2l!)9`=5!MVs0uH2krI_--c-c8e)mYXAc3M;)imc_
zafn44xkNqkHXlC-kG#4so;pe_mHnBTWZ38L3YCvL=!bU^whR;&`N<<9I{PyVdl<{H
z$N_D?blljatiZqz%O^M}UmBrRxmEIk%NGM(nC5;_2r>|p8xxezV}S(WV*fkXid`1y
zlJ$`{>#oAg<w}{>%QVJ8=IMj#i!X-sru8^Y$+O$QOt-?|*mKMfQvB{O^?n0q*b@PK
zLoCmPD~}g%Dx|6R2^C##i4%oWdYm5oLhFfrx!N+KDaDBTtRWcg<aj?Euk&=PuTyd`
z2c?H4NJkfb>f%{>gr*0Lx}I|d6Thp|gvUkIYY3aM#f|Pk)37k<KYgz?SqqxMo02wi
zK;ui;w|l;GBhK&*^UgFF3-JA~woedplj>^ekOgg+Clo<#3z!_t7^K>`P1_mEZ5B*4
zJhy=6@qs$K{2P7bjd>ILQn=8JB?rn!3{qXsLmroK$?Ph^V3Q7@5hvT=4HOeTcCV4o
z6#gSzt`RP-Ei>S^AF?$UZ>a%N@SVElg#j<hCUM&@rVl-N3v>#4TE4_5R7zSt1m99J
z9j^msylpbj#m58t5cYS_MeHnkj!b3{^>W=BGDFu(j{j@|=yjxhbMMW&D0s&f=zria
z$C7o*nTI+sSslr!+Y7ykA8MtJrzwN;tzCAK>`DR1aQ8YI+;|!+!e+2O^8z@U)W~iB
zZc0h70ep@K{ztp&kHHs<QB+?F)$e3lrV|Xqv5M;2CR%B^9HPx{$R=S02(<fEL|duv
zlc_53MGaX=AD(HNAS8!9`m@>MCt>}rY77~mh6VGSc3fd|V0rnZUDr4m%^QJD@Za0I
zh0gb~9y-2JF7oIW6DZB^icd05RO@dD#V8B$ArBPKK#Ej&hUz_z;DLMpi}@Jmyk*H)
zdhuMSb*3O>1-?8~w!g%|pV96OMMunvM@duCLDujCIRs^WUxS`BUG5NGv;$n#7SxaP
zUe8JoqqO{vj$(_LiF(gsego}{E~B|qy~I}@sS9|Ln%zphn{+iUXfY(R+WW~Y7L%Xu
z44@n=Gn@CLSm1}sfC0as);N`$gCmDHmOXy4h()4dT%ueKDGC;RVi2nNH0{q{dKQ6j
zQ#P^C<|CgH>mWf9=mGig$YZMQ+lZ@B2-T4#rMBOXf_zizmrq1kLx`(pTvhMKyMdPB
z9tO%23a6}TD|*pV#@q3ubrA(h>S42oAzaEZ31fSOA>XFj-C^H4cEb}tt;q+e(03Dc
zG&vV3*>HaF9jUt^OEF*b9nsZMbUNF*GBFY0RH#W{V<4Xp8jOo`+X)l3yHBAorTDkQ
zf0QOc(;wVRsbre*un>h~6^Tz-qF<xXgwjT)S%>#uC-fX3zsKxI9Hsk14H-zvK{49u
z_ApVpGo$=L->FrJ29A6WG%~CA?mc2lwvj4s)CKpimsnWi4TXHI6o+3|)}hSe#vmnb
zkK6U^l#tSas#Dhv03Ty#LXp1Qu$hW705owX3s1kjU<Sw<9>96?cb-+2HY(U^PQ!W2
zDst{9{2MQKlR;=$q^;lZDmo64IV+E%4DK;jx=;ziEW(6Rw#t7zj*IRlYD7c`K<ukS
zV97LJeI&<+^Jm%^I-TW~+$iBLGei6<^F#HNg22rtWS7ufRc8}xrI!(g4PyOZz*4i=
zr5dn~iiXZqq`3v043g1L2#ieQV@F7=IS0Lz_@EPU1_duRy<#qtq<uU5o1FR_uLF@f
zP|@*+Mkdn5qx_u|DrEv3>XAH9^|?9>2oiDWtaH+0j?os0onK~8mN}3DLo<^y%zfo2
zOTjRCtp~_iXwlZ}v>9XE3ulNKKW);{sz`fy9D-ELpie(M=HD`)>6lz_fJoKtCAywC
ziGOXDwKk{X%oNo2u_Nc{^%jRlod@>f6j(UDSjA_0nIa~mBVx9=pIK5vpnYKZp3+7~
z2SfFPKLw5l2dB(YeyF%7vgnFVtz7>S4$5QDAe~}>9INX$>@NI*Y*bW?j_f3trY$E)
zop!j;spyo|LZ?7ONKkn@rYOdxX?64?Wsp>sf+U4J_sU{>wtNSD3wkgIu48)45@9Fv
zWMP!{&TMAaeh7@y!id^Z%p?*%sQh=M{1-frN##YXS6s(Vl#RtuHZr_FWVTNO|6^#m
zk;(ZH-92_1j~!Rgv^lX^=zPVRb>|+h=qwpb2h6TQ$NYC0<lHTkbrgS`=_AzeiTV>x
zF-^i$7o5JLJPJ$n+{uSNh>(K+Bp$`4+Ilpzi1iJg0<2Ppav$Q9*bwsJ;OdJWNHu(_
z1r%}#|3aKXwZ*-NymH_+Xo5s?{f0iyh(JQ^+8@PaL%2)!dm}sU%+)oojH+z5ls#b9
zPchhK{mtEQc8iZ<htHxKiCv@d5^>IV6fLQgj-tcXS&g$z%JU2L4~SiF%9Sl5(o|q2
zHru@sry0Lav>Bhdur_aK37ZI&XiJC`MnN?5x1(6z7Z?=5806(kyKf|Z645{9fvw_L
ze0(&^_pqjIKAjmyD2eSH8CM4%AFs^Z1!6pwE>|i4N~RGU&d`%*;S`C!#r5@-#foS^
zF8SCnFTS~=JA_1Et$mp{=1XPe{kv{3<f=HQjrt=jhBCTEoW^#<yrm^~hX*K-psC>H
z-d(#x^#Lty<uDOzvE}utOOQ0}2d!km<IQ>R^57sPSg6IFewb1r_gKjSKhs{%nU%76
z0UMJqtw#DM#XOV#F0s!nNNnpLa&SzjO&MfVUd{X3M;YpSy&5aB{{WnWp3nAipFU3A
zJgixmN6u>4n9?4)4Y*uyN<n0rO2(!O>=YK@zipz5O$xvjVU(7T49(6P`<CVw1Eh;-
zOA;8$7&1fqAtOr=FTn<Y|A9XT!=b7--Fzx;rmbFVdfHk~>?o=UZmi9g=}szTV4bo}
zGUNpn2%6$L(A?W9X3mV2`5H_isxwy1j_Z`@b-xs8aeVpj>mR}L>D@V!<{tDUvQFjk
zgIVvfno@p7?|OSp?CT1>5~&{iIm7z2JHIGl{)4VDVS|O1b*o{lM2(9h_80tRo|gTR
z5?~pPC(^-R!d9kxnb@HwX1^g<T(I#^G#j2iq{AD`Kt9bMv$Q1_YC{K-S|!Ou->1QN
zc@Mez&9V~ryC&wU!(9RxSNDt>04AO}srj`A>51_`57+2dGUL{)XP8dj_OTB4yaQNF
z<uzz#*=+o4R!Vw))3Ru=HaNuPd`gTJ&$4ctoq~qGGY}>E@g9K|Q}lvg#zTAnJm@Lz
zVZ-R3t)-$4h`C|QjQ@k@OGPrjRsQ#By2i#FCdn-)f05pd#@P6ZxqEjd1Y2?z8LXuu
zT3C*H@ZxkLA*tv<UV?fjN=dLv;st)gHcGN<ur)OWSGZn#e?Q?5uOfe!nJI%vq}A%s
zns0u0{mtz$l>l8eLcK-YR0F`V(W8zC$Z(4hJ6XDxqw(6_vh1T&a^Ho~TF2P3J_fmZ
zk-@i^xs9&A(dehk#U-OK+BjrI2qaqNb)HTFEmBS825@t&iNDwDFX3TG3sOstFn-y<
zG5qU`&Bf7xZ%o8UdaYg>1BMWu*_jR#A#ICj5pFp<x0ZTr<A@VtEeb}N=}AZ9o|Pt@
zeBYoaS&7XS>JA*19>n5BU{FXiZ?A!8bxN;Q!k*Bn^oOfAm4d}Rt?A|~kB3q&2Sc6-
z06V-ZQnYGkBSWy1c!BSg7LkuhlEOtf3n!!wLyRC^qe0T8uA}dyQowY!ciXuyPB{uw
zU;CUkP35FSWHr30ecexQw`T8QNXbP=!jIsw0ly|Gt64$$LK3p@$>pm>;DgC!S9o+`
zyIA3+%wB!`692d}wE+k}`|hBf<{MsDshFMpbK`|-%@Ho^uo+I~?K@(5SgA7fb4VQg
ztxm+}vJ~!cVm}J;0xVbYQpIGzn+H)Z0j3!^tJrR|LnYMwq8zHG|4S;Z7A~MqJJ8f%
zaLp%4yCsuUONSV~ct%JWE_f#147!_Bia~Tt@7KDtAgD)dG{Hgo$3-g`EazY|SEW2e
z;INo;ifId|W&NR|ahglIf@VD6iosr$2O!!8!@whhaYFJwQCER()Q#&EF?=|i)+)Lt
z)ipA_0WP^<-+9AHD?>P_7=5^Pk5!S&B>_X=(Oz0$S}X2oDG4#Qdp4|_%;fy-l!c4L
z$=-?t@S;g?34dCr9MgMc+JlG1^=FDS!)$<2*}LT7a5F1aIP}qLXBw=x1s973d@_>R
zrQ2Tm<`RtLr<@u`6Ibg%m^Zrh(5|1d33Q0}z3E>KozzEWiG@!`z7UQZ6U!_)YY~sl
zLv4k0GKs(`ghhur<YrvHxZ`D+tRNGOsv7rQ)kQL_)U-2zVp_8@)5vTrJMmK#{q1C9
zK-p(We0D>#tXD~xI6bkPi)Z@649(MeSo|m+55T_3#<WKmLLb8ba=cO^2(9_b?Gbd0
z`aQ$bX(GjL80yXhN(=t1r5)M~tv|vQte}??RnVbnQJt3LW9MQH%Mv|-LqjB#iuOxK
zMd(R$Krgv{X-z|-1{WzvQT|^s3e&s_cby6`w50H$o#}Fvje}B!>mIZLh)<}-W`)vz
zks8rAX2;Zn`tU|LF1SEDT|W7$h`P3WBilw^QZZ&Sm%{o=se`oJrVDL+CQ&^-Y7O$W
zmU@wOEfH7Sys|_AvO+c~FIpu-17wREnR-3&?R1=-P~2LCQ{a+Oq55tW{IF(1w#Yj{
zl!BzBMBX$JVV<vz2nDrD--b?ZKB{|A5Yj}=F*%>0z@WB*sNyv@^aFLfc}ef1x!j&k
zM<}y6tpPmxO!);d3zl1u+`)2Rn@mV2LDy4q1Q>d6$B!dB`R#bcxpW9U$eC`Yg`hPS
z`sycU=7iYVP9F^3NMT%n;Tg|GdK?Z0(T2zS(cOyN9xCQ`>okmFts$n&zm~4Xj`4~I
z?4;}t)B;SnS?#aI-6yRi%VVZ_xlOt%PtZ`nyEc`kuOX5s$IqTex@jSvXYfcA%@es{
z{)Ln@&V1kOQ?{Z*7cS*DY?jce3J1fdCkd%zK^ImlLd$x)bUNkht}Yd#>*QNTT^pa`
zWae?V*4w>JD=t1_spfZt>3!b%oW83Y0!RKdi6rf+WSw8Oj^E|pA?2w=iA~18vWoH5
z{SIu!KgP)mkc(i^24oZ)S@Fy(0Rr~IgIBmVAOHtiGDj)1F=2S_r5>_9CHcD07ZSJQ
zzso#45}i}5#Rx|&<5FkQHjgf-wtK;&4kE+qGa4e|a7Hg4N${kk2d?0EdDBN^%V>bk
zt`f0CGh8Qy0HCR8=^-T*#-GKPP!yh@nzGeAY%F^q%A8Uq@ms1`QxL8UJx36Zkfl)j
zt!!g$V+CeB$#m#;z7=K2RWj7zG2r1Zc01zGq&#BI_f}DP;i<qjqy?Avyb%swW%I%1
z%0*hiD_Traap!=O7*+w)b8fQQ<?ikX#_yX%?7#X%8NkJ+^Kg)RSmt}y41|YwHFsPZ
z7t=`Httf(7)jEw@^UOLYJGLwW3mj{ci^{VtUKlqRs>S>#`}4N?fnvk>LD-3>bIN66
zYGR44prFA?IVC6;Ktmw$KrkLl<k0gIp1I}wlkbbae2~x;Whm)GZ?QdbQAH+-^p44`
z7|J?yC`~}WF^0Q9`Z?*7SIoF86_H(zJ{S5+TXk#aI?h@$8R4KB4wLSqyf8RU%Gv%X
zC*kWWZjyfCXt0T<h=v|sRGD%GqF=b-I<6sUt?9O74VVMM(F7%7#gVslw>%`v3h=&8
z2j6r0)8=e-@H1hKbhvi%(MwiB1!1L70U_^WBfP>4?<f%~I30A}*~dT2`#Lyq8O0}g
zp(O^VFsg_thVt8f5Qf7~z2a;j^4paO%_`B2p&rdu87_`w)_X~YW||>1+;WZ)P--2b
z)1q97p(XXB+|}zw(Wn8JxC~RmtP0jZ7!vI3$^ahB{E$|8@{Srjf4(%8kaA=q8P%k(
z5|1Hmpp5OCM!gvJsJkP2=Qv5uB6p<bT0eD!Ih}1hgzmvtH4->)s!<rbTsY&e7Hsz@
z3k>4`R_^UNh9!NTOiOrWI`i2+CAI9$vz6HrZOLyYuy{#m^f2!@Xo&7vfzce(xETv7
z!o7w{Ge9Mgev&7<+it<LADP?!CS18YvlLT4GAYY-EES#?5~Fiz&LwHY@YPQPcWbH9
z+*QU%dcKSwfe@^E<TdanIVr(ir)1w@G>2&Cec#pn_foA<)@eA5J@-stAFpuA@IVWO
ze#W{C08WM5wuHB@IVH+WbX!UY9St5YOln_=g9F3Wq$Ai7b0kfa!gR=LI+F&yL$DJE
z#vxXhE6ATTmk0sBDKGj<8JTW3)E1wS1W~P2r%lRfC&xz0f})0mo6XX9vSRkculLKb
z<WyoTI?A|G^zu32%6Tqz%z5bH!#5A_m=YDk&a&UG4XrEz_DtnC>{gTMgr$-B(ZU?5
zzIIl1O~)}s#ol|ov4*%AMpw=ooZWRaZ|B&QSGKsSeMrtp2gEhHQmg+pxhhBkEU$+i
zoh!D}4|aF^!-E<wv~0tHAu>9wA~N{6_vWvsGd#Wuy5(n)qOq`OAB>sOnxXO&(a5kW
z@Ze`OBE;`G>m>#``4ikl5Gva+<f!S4Js_=hwflsSuZik)LqRu#*bZr0Kjst}SH37@
z0G&o1H0${FL?O-QL`7v#L?LxKvKkE!((2EWo~clGYjY3^(q$2n5MlMzGBc?fl!|Re
zM*n{T$pkk0ct)@G>YCuZuK@`w0QBZP@0Z6PLg4rTN3;RNrDWhhiEXJCu+kcC;@G6q
zE1emJRVz`?@alm3!q^y(69W{WOh-%HGzI1x<R7&$r^M-7IreRk#~T{HmOK>*LNa3*
zhL=^urYq)!6vn-3<7CTmNnI5qW=&OQva31JCo0^}!3d^GjL25^0bLfu8A}Y4X`spn
zO13#7i?M(Z9x9sUf!U)O3<!8wMUls9;@W%aEHKEzwG<VrJYwxPBSNKMM0kH7K{0@8
zh)Rk|5X4PTOXAd9@)}il7s_ThZ{AY%jmLdw3o1)t+TrSD^kvf16$h76pz`qEVXyEk
z`q^%V$xLzT{W$o77ilY+L!Gh|OeX;CG{5NcnhqogBWlsnG;;z}0n9Zk7TB3}J+F@K
z;aMV9fk@{Q;HT#%$aPx{QzTCyTqah$CB7RwiYQEbMTS`LHvmM)U~;_;B>Xg7V+0l6
zGcSP(u^+1uCJ5C`yncog_2{Ya4i6k}a)5y~^pki#FyL;)0Bu<l@Q1r$4X87p1a@HA
zFEjgORZYk+BdY?FaYHK8R7Hx#r&Tafl}!dx55Y>K#%FI5=y~6O4e$3ByD&&&+)b)L
zo_c~p(h%f$vI0VqzyY5@nu!YdFUN@u6TUjE4Bx>Uhax~3z;JnReT0Si*puxy$6(sQ
zTO?(GnPAGKe>p3Fa)fgu13>!3uw@DlgMWfjjfMyX2)SCkJ~b*L<!}Lc-r8e3jj5!0
zJmluf(-4Zz!;Bhtu!ACB*3dUKe-Z+Dd0tq!8nkRxNOJHH2A!gTi(pK5n(M{*=uCIT
zHhfRCnwt+Dq!h$3(hsnXZ05-s@d*H!0pQ=V5*1#l&jp28m>EFuysj*>6~oAa@<E_l
zEtFIV40=HtnHCZi9wK1Mt3bPXE<X4_k<jOAk+JA7OlMYg%s_<%N-38gTvNQn7D4I6
z8<{8?{yjp_J?%#EOYmX{!HP$&0F<n8)0_1iHR#7dICL3oR0-wFhBIi-MX7Iwv>Q@f
zfP`(5NCzH#i#suv3Irw63^741#d{tZEKvs{;0G2wk1K!%f52-)qo;3$ZSE4e8*t#9
z`QgXLvT(bpS=d?09OQ2XAYH_meDG8NLr)2g(L^Trbxop9GBYtI=Cx|FQB@2XV0=%2
zOG*Q@%nga~A)t&6iSu6g2^higXyor~v}ScSS{AySEd^ao{eHT0`m1h5_6JyDxn7Fz
zhXLxCbAp4kPlKFmITAt`pm3c9(GEtId<G6vt^at8I8d6E5PdXbO98SIiUEu;9Pj30
zMq-8dLkz3BFt!#cl}xe8LhE*ZnCbHoQD0Dptdm2Y;UgPT1h~qA1DIRRM%m&Rqbwp}
zIOcxul2ThlOcH6@gOMxtK$p`hf1x_)toKI7o<I>|OiQGoA2YCk8sp%ToRc@=X3<=y
z!0P53c1$WeMS%2%Qmwb#a?S+-<tjIwbs9*<<|DDAUhOxB=`$VC#zwcE?K;V|GQHrA
zXF7}z-Xcpl9#T@prHqUuq*}ajQGEdfg32}4JfI4#Gg4g0s)NUo-K=bgSLKe*0Di%v
oO)Vx{U^z?z1e7JwpH82#Zn1Q$@CAk%5m!C+4?2ZR$IV(XzzuJh;{X5v

diff --git a/static/fonts/roboto-mono-v5-latin-regular.svg b/static/fonts/roboto-mono-v5-latin-regular.svg
deleted file mode 100644
index f384d9cea2..0000000000
--- a/static/fonts/roboto-mono-v5-latin-regular.svg
+++ /dev/null
@@ -1,390 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="RobotoMono" horiz-adv-x="1230" ><font-face
-    font-family="Roboto Mono"
-    units-per-em="2048"
-    panose-1="0 0 0 0 0 0 0 0 0 0"
-    ascent="2146"
-    descent="-555"
-    alphabetic="0" />
-<glyph unicode=" " glyph-name="space" horiz-adv-x="1229" />
-<glyph unicode="!" glyph-name="exclam" horiz-adv-x="1229" d="M690 471H504V1456H690V471ZM486 97Q486 145 514 177T600 209Q657 209 686 177T716 97Q716 51 687 20T600 -11Q543 -11 515 20T486 97Z" />
-<glyph unicode="&quot;" glyph-name="quotedbl" horiz-adv-x="1229" d="M505 1427L484 1057H354L355 1411V1536H505V1427ZM862 1427L841 1057H712L713 1411V1536H863L862 1427Z" />
-<glyph unicode="#" glyph-name="numbersign" horiz-adv-x="1229" d="M707 410H443L363 0H220L300 410H61V547H326L395 901H137V1040H422L504 1456H647L565 1040H829L911 1456H1054L972 1040H1177V901H945L876 547H1102V410H850L770 0H627L707 410ZM469 547H733L802
-901H538L469 547Z" />
-<glyph unicode="$" glyph-name="dollar" horiz-adv-x="1229" d="M907 375Q908 466 841 531T626 644Q533 673 458 711T330 801T247 922T218 1079Q218 1163 243 1231T315 1349T428 1431T576 1472V1692H725V1472Q893 1449 986 1331T1080 1008H896Q896 1075 880 1131T832
-1228T754 1292T649 1315Q528 1315 466 1252T403 1082Q403 1032 419 993T469 922T558 863T690 809Q784 778 859 740T986 651T1065 533T1093 377Q1093 290 1066 221T988 103T867 23T708 -16V-208H559V-17Q481 -9 410 19T283 100T195 235T162 429H347Q347 345 372
-290T436 201T526 154T627 140Q692 140 744 156T832 202T887 276T907 375Z" />
-<glyph unicode="%" glyph-name="percent" horiz-adv-x="1229" d="M44 1194Q44 1251 61 1302T112 1393T196 1454T311 1477Q377 1477 427 1455T511 1393T562 1303T580 1194V1117Q580 1060 563 1009T512 920T428 859T313 836Q248 836 198 858T113 919T62 1009T44
-1117V1194ZM182 1117Q182 1086 189 1058T212 1007T252 971T313 957Q348 957 372 970T412 1006T434 1057T442 1117V1194Q442 1225 435 1254T412 1306T372 1342T311 1356Q276 1356 252 1343T212 1307T189 1255T182 1194V1117ZM645 338Q645 395 662 446T714 536T798
-597T913 620Q979 620 1029 598T1113 536T1164 446T1182 338V260Q1182 203 1165 152T1113 63T1030 2T915 -21Q849 -21 799 1T714 62T663 152T645 260V338ZM783 260Q783 229 790 200T813 149T854 113T915 99Q950 99 974 112T1014 148T1036 200T1043 260V338Q1043
-369 1036 398T1014 449T973 485T913 499Q877 499 853 486T813 450T790 398T783 338V260ZM398 188L287 250L854 1287L965 1225L398 188Z" />
-<glyph unicode="&amp;" glyph-name="ampersand" horiz-adv-x="1229" d="M107 373Q107 440 127 497T183 603T269 697T380 785Q313 876 274 957T234 1126Q234 1211 259 1276T332 1386T445 1454T593 1477Q664 1477 722 1452T820 1385T883 1286T905 1168Q905 1115
-890 1072T847 990T781 918T699 851L605 771L912 368Q947 432 967 508T988 672H1155Q1155 544 1119 435T1012 237L1193 0H972L889 110Q815 47 726 14T539 -20Q440 -20 360 9T224 90T138 214T107 373ZM539 130Q610 130 676 156T799 230L476 661L448 637Q398 596 367
-557T320 484T298 421T292 373Q292 322 308 278T355 201T432 149T539 130ZM420 1128Q420 1072 445 1014T515 890L632 983Q663 1004 683 1027T714 1073T729 1121T734 1168Q734 1198 725 1226T697 1276T652 1311T593 1325Q550 1325 518 1309T464 1266T431 1204T420
-1128Z" />
-<glyph unicode="&apos;" glyph-name="quotesingle" horiz-adv-x="1229" d="M653 1425L632 1057H494L495 1409V1536H653V1425Z" />
-<glyph unicode="(" glyph-name="parenleft" horiz-adv-x="1229" d="M357 591Q357 734 379 860T440 1093T527 1290T631 1448T741 1566T846 1643L885 1521Q823 1474 762 1393T652 1197T573 931T542 593V579Q542 392 572 241T651 -26T761 -224T885 -357L846 -470Q796
--442 741 -394T631 -276T527 -118T440 78T380 312T357 581V591Z" />
-<glyph unicode=")" glyph-name="parenright" horiz-adv-x="1229" d="M849 581Q849 438 827 312T766 79T679 -117T575 -275T465 -393T359 -470L320 -357Q382 -311 443 -229T553 -29T632 240T663 579V593Q663 780 631 932T549 1202T438 1402T320 1530L359 1643Q409
-1615 464 1566T574 1448T678 1290T766 1094T826 860T849 591V581Z" />
-<glyph unicode="*" glyph-name="asterisk" horiz-adv-x="1229" d="M537 683L160 779L214 954L579 803L554 1224H732L703 797L1066 947L1120 769L738 675L994 351L848 241L634 604L422 250L276 356L537 683Z" />
-<glyph unicode="+" glyph-name="plus" horiz-adv-x="1229" d="M710 781H1117V597H710V146H525V597H119V781H525V1206H710V781Z" />
-<glyph unicode="," glyph-name="comma" horiz-adv-x="1229" d="M643 43Q643 -4 632 -55T598 -157T543 -254T469 -336L354 -273Q402 -203 422 -124T442 40V219H643V43Z" />
-<glyph unicode="-" glyph-name="hyphen" d="M983 561H218V713H983V561Z" />
-<glyph unicode="." glyph-name="period" horiz-adv-x="1229" d="M496 120Q496 150 505 176T533 221T578 252T641 263Q677 263 704 252T750 222T778 176T788 120Q788 91 779 66T751 21T705 -8T641 -19Q605 -19 578 -9T533 21T506 65T496 120Z" />
-<glyph unicode="/" glyph-name="slash" horiz-adv-x="1229" d="M418 -125H252L860 1456H1025L418 -125Z" />
-<glyph unicode="0" glyph-name="zero" horiz-adv-x="1229" d="M1088 557Q1088 418 1056 311T964 130T817 18T618 -20Q507 -20 420 18T271 129T178 310T145 557V898Q145 1037 177 1144T269 1326T417 1438T616 1477Q728 1477 815 1439T963 1326T1056 1145T1088 898V557ZM331
-594L898 1029Q882 1174 814 1249T616 1325Q470 1325 401 1227T331 939V594ZM902 852L336 419Q353 278 423 204T618 130Q765 130 833 230T902 518V852Z" />
-<glyph unicode="1" glyph-name="one" horiz-adv-x="1229" d="M774 0H589V1220L208 1075V1244L759 1456H774V0Z" />
-<glyph unicode="2" glyph-name="two" horiz-adv-x="1229" d="M1067 0H113V133L590 663Q654 734 697 789T766 890T803 978T814 1064Q814 1118 797 1165T746 1248T665 1303T557 1324Q484 1324 431 1303T342 1244T289 1150T271 1027H85Q85 1119 117 1200T209 1343T357
-1440T557 1476Q660 1476 742 1446T882 1361T969 1233T1000 1072Q1000 1007 978 944T919 818T832 696T727 575L336 151H1067V0Z" />
-<glyph unicode="3" glyph-name="three" horiz-adv-x="1229" d="M390 817H522Q592 817 645 836T735 888T791 967T810 1068Q810 1195 745 1259T555 1324Q496 1324 448 1307T365 1256T311 1177T292 1074H106Q106 1157 138 1230T230 1358T371 1444T555 1476Q653 1476
-734 1450T873 1371T963 1242T995 1064Q995 1022 982 977T942 890T873 810T771 747Q842 724 889 687T965 604T1005 507T1017 406Q1017 304 982 225T885 92T739 9T556 -20Q460 -20 376 7T229 86T131 213T94 384H279Q279 327 298 280T354 200T441 149T556 131Q619
-131 670 147T757 198T812 282T832 402Q832 470 810 519T747 602T649 651T522 667H390V817Z" />
-<glyph unicode="4" glyph-name="four" horiz-adv-x="1229" d="M924 489H1127V338H924V0H739V338H75V447L727 1456H924V489ZM280 489H739V1210L709 1154L280 489Z" />
-<glyph unicode="5" glyph-name="five" horiz-adv-x="1229" d="M240 730L313 1456H1060V1276H469L428 888Q471 913 531 932T670 951Q771 951 851 916T987 818T1073 664T1103 464Q1103 360 1075 271T991 118T848 17T646 -20Q557 -20 478 5T338 80T237 206T187 383H363Q380
-259 454 195T646 131Q712 131 763 154T848 221T900 326T918 462Q918 530 899 589T842 691T751 760T627 785Q581 785 548 779T487 760T437 731T388 692L240 730Z" />
-<glyph unicode="6" glyph-name="six" horiz-adv-x="1229" d="M856 1457V1291H840Q748 1291 676 1272T548 1220T454 1142T388 1042T348 929T330 809Q356 840 390 866T463 912T548 943T644 955Q753 955 832 914T962 804T1037 650T1061 475Q1061 373 1033 283T947
-126T806 19T610 -20Q531 -20 466 3T348 65T257 159T193 275T154 404T141 538V625Q141 725 153 825T196 1018T277 1190T405 1330T590 1423T840 1457H856ZM614 801Q567 801 523 786T441 744T374 679T328 595V533Q328 437 351 363T413 237T503 160T610 133Q675 133
-725 158T809 227T861 332T879 466Q879 530 863 590T814 698T731 773T614 801Z" />
-<glyph unicode="7" glyph-name="seven" horiz-adv-x="1229" d="M1096 1352L493 0H299L900 1294H112V1456H1096V1352Z" />
-<glyph unicode="8" glyph-name="eight" horiz-adv-x="1229" d="M1070 1076Q1069 967 1011 882T856 749Q912 725 957 690T1035 608T1085 508T1103 393Q1103 294 1067 217T968 88T821 8T641 -20Q543 -20 459 7T312 86T213 216T177 393Q177 454 194 508T243 608T320
-690T421 750Q373 774 334 807T268 882T226 973T211 1076Q211 1171 243 1245T331 1371T466 1449T638 1476Q730 1476 809 1449T946 1371T1037 1246T1070 1076ZM918 397Q918 458 898 509T840 596T752 653T639 673Q576 673 525 653T438 597T383 509T363 397Q363 334
-382 285T438 201T525 149T641 131Q702 131 753 149T840 201T897 284T918 397ZM884 1073Q884 1128 866 1174T815 1253T737 1305T638 1324Q584 1324 540 1307T464 1256T415 1177T397 1073Q397 1016 414 971T464 893T541 843T640 825Q693 825 738 842T815 892T866
-971T884 1073Z" />
-<glyph unicode="9" glyph-name="nine" horiz-adv-x="1229" d="M373 164Q472 164 547 181T677 231T770 306T830 402T865 513T879 633Q855 603 824 577T754 530T668 499T564 487Q456 487 378 529T248 641T173 797T149 972Q149 1075 177 1166T262 1326T403 1435T600
-1476Q684 1476 751 1453T870 1388T959 1290T1019 1168T1054 1031T1065 887V820Q1065 727 1056 630T1021 441T946 270T821 129T634 34T373 -1H354V164H373ZM594 640Q641 640 685 655T767 699T834 766T881 852V912Q881 1009 859 1085T798 1213T709 1294T601 1322Q536
-1322 486 1296T402 1225T349 1117T331 982Q331 918 347 857T395 747T477 670T594 640Z" />
-<glyph unicode=":" glyph-name="colon" horiz-adv-x="1229" d="M546 120Q546 150 555 176T583 221T628 252T691 263Q727 263 754 252T800 222T828 176T838 120Q838 91 829 66T801 21T755 -8T691 -19Q655 -19 628 -9T583 21T556 65T546 120ZM546 996Q546 1026 555
-1052T583 1097T628 1128T691 1139Q727 1139 754 1128T800 1098T828 1052T838 996Q838 967 829 942T801 897T755 868T691 857Q655 857 628 867T583 897T556 941T546 996Z" />
-<glyph unicode=";" glyph-name="semicolon" horiz-adv-x="1229" d="M537 996Q537 1026 546 1052T574 1097T619 1128T682 1139Q718 1139 745 1128T791 1098T819 1052T829 996Q829 967 820 942T792 897T746 868T682 857Q646 857 619 867T574 897T547 941T537 996ZM775
-43Q775 -4 764 -55T730 -157T675 -254T601 -336L486 -273Q534 -203 554 -124T574 40V219H775V43Z" />
-<glyph unicode="&lt;" glyph-name="less" horiz-adv-x="1229" d="M406 663L353 646L406 628L1018 392V196L170 575V721L1018 1099V903L406 663Z" />
-<glyph unicode="=" glyph-name="equal" horiz-adv-x="1229" d="M1066 780H173V941H1066V780ZM1066 365H173V525H1066V365Z" />
-<glyph unicode="&gt;" glyph-name="greater" horiz-adv-x="1229" d="M178 909V1100L1061 722V576L178 197V389L825 633L885 650L825 669L178 909Z" />
-<glyph unicode="?" glyph-name="question" horiz-adv-x="1229" d="M511 410Q512 482 517 528T538 611T584 681T664 761Q698 796 733 833T798 910T847 996T866 1091Q866 1200 803 1257T623 1315Q576 1315 532 1304T453 1268T397 1206T376 1116H191Q192 1200 226
-1267T317 1380T453 1451T623 1476Q724 1476 803 1451T938 1376T1022 1257T1051 1097Q1051 1025 1026 962T962 842T875 736T779 645Q749 616 733 590T708 537T698 480T696 410H511ZM490 97Q490 145 518 177T604 209Q661 209 690 177T720 97Q720 51 691 20T604 -11Q547
--11 519 20T490 97Z" />
-<glyph unicode="@" glyph-name="at" horiz-adv-x="1229" d="M1159 789Q1156 709 1140 626T1092 474T1008 363T883 320Q822 320 782 352T724 441Q689 385 638 353T524 320Q475 320 439 346T381 419T350 531T347 674Q356 785 384 874T456 1026T560 1122T690 1156Q757
-1156 801 1130T871 1067L827 563Q824 522 829 497T843 457T867 437T897 432Q934 432 962 460T1010 537T1039 651T1050 789Q1054 916 1029 1017T953 1188T826 1295T655 1332Q554 1332 471 1285T326 1152T230 949T191 691Q186 555 210 449T287 270T422 158T617 119Q647
-119 678 123T739 136T796 157T845 184L877 67Q852 48 820 34T753 11T682 -3T614 -8Q467 -8 362 43T190 188T94 409T69 691Q73 794 94 891T151 1074T239 1229T355 1351T495 1430T658 1458Q780 1458 875 1411T1034 1275T1131 1064T1159 789ZM470 674Q465 572 487
-515T557 458Q606 458 646 485T716 575L755 1020Q727 1033 697 1033Q644 1033 605 1008T538 936T495 823T470 674Z" />
-<glyph unicode="A" glyph-name="A" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538Z" />
-<glyph unicode="B" glyph-name="B" horiz-adv-x="1229" d="M172 0V1456H605Q695 1455 781 1433T934 1363T1041 1243T1080 1068Q1079 1011 1062 964T1014 880T942 814T855 766Q913 749 961 718T1045 642T1099 541T1119 420Q1120 318 1080 240T973 110T819 29T638
-0H172ZM358 681V157H643Q701 158 753 176T845 228T908 309T932 418Q933 480 912 528T852 609T763 661T653 681H358ZM358 835H616Q668 836 718 851T807 896T870 969T894 1069Q894 1130 871 1173T808 1243T717 1284T611 1298H358V835Z" />
-<glyph unicode="C" glyph-name="C" horiz-adv-x="1229" d="M1117 438Q1104 337 1065 253T964 108T816 14T625 -20Q535 -20 462 5T331 76T232 182T163 315T122 466T107 626V829Q108 910 121 989T162 1140T231 1273T330 1380T461 1450T625 1476Q734 1476 820 1443T968
-1348T1067 1200T1117 1010H932Q923 1076 901 1133T842 1233T752 1300T625 1325Q559 1325 509 1304T422 1245T361 1159T321 1055T300 943T293 831V626Q293 572 299 515T321 402T360 297T421 211T508 152T625 130Q698 130 751 153T842 217T901 315T932 438H1117Z"
-/>
-<glyph unicode="D" glyph-name="D" horiz-adv-x="1229" d="M155 0V1456H492Q644 1454 763 1405T965 1267T1091 1055T1136 781V674Q1135 524 1092 401T966 189T764 51T492 0H155ZM343 1304V151H492Q610 152 696 192T838 303T922 468T951 674V783Q950 894 922 988T838
-1152T696 1262T492 1304H343Z" />
-<glyph unicode="E" glyph-name="E" horiz-adv-x="1229" d="M975 673H367V157H1076V0H182V1456H1067V1298H367V830H975V673Z" />
-<glyph unicode="F" glyph-name="F" horiz-adv-x="1229" d="M984 643H378V0H191V1456H1085V1298H378V800H984V643Z" />
-<glyph unicode="G" glyph-name="G" horiz-adv-x="1229" d="M1116 191Q1024 83 905 31T644 -20Q554 -19 479 7T343 80T238 190T163 326T117 480T100 643V812Q101 893 114 973T156 1128T226 1265T326 1375T459 1449T625 1476Q727 1476 813 1445T963 1355T1066 1214T1114
-1029H931Q920 1092 897 1145T837 1237T747 1296T626 1318Q560 1318 509 1296T420 1235T357 1147T316 1040T293 926T286 814V643Q287 588 295 530T322 415T368 309T435 221T527 161T645 137Q683 136 724 140T805 156T878 188T935 242L937 569H641V725H1113L1116
-191Z" />
-<glyph unicode="H" glyph-name="H" horiz-adv-x="1229" d="M1087 0H912V673H315V0H141V1456H315V830H912V1456H1087V0Z" />
-<glyph unicode="I" glyph-name="I" horiz-adv-x="1229" d="M174 1456H1054V1295H705V160H1054V0H174V160H515V1295H174V1456Z" />
-<glyph unicode="J" glyph-name="J" horiz-adv-x="1229" d="M857 1456H1046V443Q1044 342 1008 257T908 111T760 15T573 -20Q471 -20 388 11T243 99T144 238T98 421H286Q289 360 310 308T369 218T457 158T573 137Q639 137 691 161T779 228T835 325T857 443V1456Z" />
-<glyph unicode="K" glyph-name="K" horiz-adv-x="1229" d="M523 676L361 492V0H172V1456H361V745L502 921L929 1456H1154L645 819L1188 0H963L523 676Z" />
-<glyph unicode="L" glyph-name="L" horiz-adv-x="1229" d="M383 157H1095V0H198V1456H383V157Z" />
-<glyph unicode="M" glyph-name="M" horiz-adv-x="1229" d="M377 1456L614 728L870 1456H1100V0H920V581L935 1189L666 405H560L313 1168L328 581V0H148V1456H377Z" />
-<glyph unicode="N" glyph-name="N" horiz-adv-x="1229" d="M1086 0H898L333 1088L330 0H143V1456H331L896 370L899 1456H1086V0Z" />
-<glyph unicode="O" glyph-name="O" horiz-adv-x="1229" d="M1121 644Q1120 566 1108 487T1069 333T1003 195T906 83T778 8T615 -20Q525 -20 453 7T324 83T227 195T160 334T120 487T106 644V810Q107 888 119 967T158 1121T225 1259T322 1372T450 1448T613 1476Q703
-1476 776 1449T905 1373T1001 1261T1068 1122T1107 968T1121 810V644ZM938 812Q937 864 931 920T911 1032T872 1138T812 1227T727 1288T613 1311Q549 1311 500 1288T415 1227T355 1138T317 1032T296 920T288 812V644Q289 593 295 536T317 424T356 317T416 228T501
-166T615 143Q680 143 729 166T814 227T873 316T911 422T931 535T938 644V812Z" />
-<glyph unicode="P" glyph-name="P" horiz-adv-x="1229" d="M376 584V0H191V1456H663Q761 1454 848 1425T1002 1341T1106 1205T1145 1019Q1145 914 1107 834T1002 698T849 614T663 584H376ZM376 736H663Q727 737 781 756T875 812T937 899T960 1017Q960 1083 938
-1136T876 1226T782 1283T663 1304H376V736Z" />
-<glyph unicode="Q" glyph-name="Q" horiz-adv-x="1229" d="M1134 663Q1133 582 1120 500T1081 342T1013 200T913 84L1164 -125L1037 -246L749 -2Q687 -20 615 -20Q522 -20 448 8T317 86T217 201T148 344T108 501T94 663V791Q95 871 108 953T148 1111T216 1253T314
-1369T446 1447T614 1476Q707 1476 781 1448T913 1370T1012 1255T1080 1112T1120 954T1134 791V663ZM950 793Q949 848 944 907T924 1024T885 1134T823 1225T735 1288T614 1311Q546 1311 495 1288T407 1225T346 1133T306 1024T285 907T278 793V663Q278 609 284 550T306
-432T345 322T407 230T495 167T615 143Q684 143 735 166T824 229T885 321T923 431T943 548T950 663V793Z" />
-<glyph unicode="R" glyph-name="R" horiz-adv-x="1229" d="M656 594H365V0H181V1456H608Q710 1454 800 1427T957 1346T1063 1211T1102 1019Q1102 948 1082 889T1025 782T939 697T829 634L1138 12L1137 0H942L656 594ZM365 746H613Q675 747 730 765T826 819T892
-904T916 1021Q916 1091 893 1143T829 1231T732 1285T608 1304H365V746Z" />
-<glyph unicode="S" glyph-name="S" horiz-adv-x="1229" d="M936 368Q936 435 906 481T827 558T722 611T611 649Q534 674 455 709T310 795T203 915T161 1079Q161 1173 202 1247T311 1372T463 1449T634 1476Q729 1476 817 1445T973 1356T1082 1218T1125 1037H935Q927
-1100 904 1151T843 1240T753 1297T634 1318Q581 1318 531 1303T441 1258T378 1184T354 1082Q355 1019 386 976T464 902T567 852T672 817Q726 800 781 779T887 729T982 666T1059 587T1110 489T1129 370Q1129 272 1086 199T973 78T817 5T643 -20Q546 -20 453 10T287
-96T167 234T118 420H307Q316 352 344 300T416 211T517 156T643 137Q697 137 749 150T843 192T910 264T936 368Z" />
-<glyph unicode="T" glyph-name="T" horiz-adv-x="1229" d="M1156 1298H706V0H526V1298H76V1456H1156V1298Z" />
-<glyph unicode="U" glyph-name="U" horiz-adv-x="1229" d="M1088 1456L1090 470Q1088 368 1053 279T955 124T805 19T614 -20Q508 -20 421 18T272 122T175 278T139 470L141 1456H317L321 470Q322 405 341 345T397 239T488 165T614 137Q685 137 739 164T829 238T885
-345T906 470L909 1456H1088Z" />
-<glyph unicode="V" glyph-name="V" horiz-adv-x="1229" d="M610 298L954 1456H1151L692 0H531L71 1456H269L610 298Z" />
-<glyph unicode="W" glyph-name="W" horiz-adv-x="1229" d="M896 394L1007 1456H1182L1005 0H816L629 1097L440 0H250L73 1456H249L360 394L547 1456H708L896 394Z" />
-<glyph unicode="X" glyph-name="X" horiz-adv-x="1229" d="M625 885L939 1456H1157L734 734L1167 0H951L629 582L306 0H87L521 734L98 1456H315L625 885Z" />
-<glyph unicode="Y" glyph-name="Y" horiz-adv-x="1229" d="M603 725L935 1456H1145L692 543L689 0H517L514 543L61 1456H272L603 725Z" />
-<glyph unicode="Z" glyph-name="Z" horiz-adv-x="1229" d="M325 157H1079V0H116L114 144L839 1298H127V1456H1050L1052 1315L325 157Z" />
-<glyph unicode="[" glyph-name="bracketleft" horiz-adv-x="1229" d="M822 1512H601V-160H822V-312H426V1664H822V1512Z" />
-<glyph unicode="\" glyph-name="backslash" horiz-adv-x="1229" d="M231 1456H398L1006 -125H839L231 1456Z" />
-<glyph unicode="]" glyph-name="bracketright" horiz-adv-x="1229" d="M405 1664H802V-312H405V-160H627V1512H405V1664Z" />
-<glyph unicode="^" glyph-name="asciicircum" horiz-adv-x="1229" d="M403 677H231L551 1456H678L997 677H826L628 1163L613 1231L598 1163L403 677Z" />
-<glyph unicode="_" glyph-name="underscore" horiz-adv-x="1229" d="M1072 -151H155V0H1072V-151Z" />
-<glyph unicode="`" glyph-name="grave" horiz-adv-x="1229" d="M813 1215H663L415 1481H638L813 1215Z" />
-<glyph unicode="a" glyph-name="a" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786 895T706 938T599
-953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521 525 431
-477T341 326Q341 286 354 252T395 194T463 155T558 141Z" />
-<glyph unicode="b" glyph-name="b" horiz-adv-x="1229" d="M1091 529Q1091 413 1063 313T981 138T848 22T665 -20Q561 -20 485 17T354 123L345 0H175V1536H360V966Q413 1032 488 1067T663 1102Q767 1102 847 1061T981 947T1063 773T1091 550V529ZM906 550Q906
-629 891 700T841 826T752 913T617 945Q569 945 529 933T458 898T402 845T360 778V305Q378 269 402 239T459 185T531 150T619 137Q695 137 749 168T838 254T889 379T906 529V550Z" />
-<glyph unicode="c" glyph-name="c" horiz-adv-x="1229" d="M635 130Q685 130 732 146T817 190T876 257T900 341H1075Q1074 269 1038 204T940 89T800 10T635 -20Q512 -20 420 24T267 142T174 314T143 520V562Q143 669 174 767T266 939T420 1058T635 1102Q731 1102
-811 1072T950 989T1042 864T1075 710H900Q899 759 879 802T823 879T740 931T635 950Q549 950 491 916T396 826T345 701T329 562V520Q329 449 344 380T395 255T489 165T635 130Z" />
-<glyph unicode="d" glyph-name="d" horiz-adv-x="1229" d="M139 550Q139 671 169 772T256 947T393 1061T572 1102Q669 1102 741 1070T867 975V1536H1052V0H882L874 114Q820 48 745 14T570 -20Q472 -20 393 22T257 138T170 312T139 529V550ZM324 529Q324 450 341
-379T393 254T484 169T616 137Q663 137 701 148T770 179T825 228T867 292V794Q831 860 770 902T618 945Q540 945 485 913T394 827T341 701T324 550V529Z" />
-<glyph unicode="e" glyph-name="e" horiz-adv-x="1229" d="M652 -20Q538 -20 443 19T279 128T173 294T135 503V545Q135 676 177 779T288 954T446 1064T628 1102Q745 1102 832 1062T978 950T1064 781T1093 571V488H320Q323 414 348 349T418 236T525 159T662 131Q761
-131 838 171T966 277L1079 189Q1052 148 1012 111T918 44T798 -2T652 -20ZM628 950Q572 950 522 930T432 870T365 773T326 640H908V654Q905 708 888 761T836 856T751 924T628 950Z" />
-<glyph unicode="f" glyph-name="f" d="M450 0V939H152V1082H450V1158Q450 1262 480 1340T566 1472T700 1552T874 1579Q940 1579 1002 1568T1131 1540L1109 1387Q1068 1401 1014 1411T897 1422Q767 1421 702 1356T636 1158V1082H1053V939H636V0H450Z" />
-<glyph unicode="g" glyph-name="g" horiz-adv-x="1229" d="M140 550Q140 671 169 772T255 947T391 1061T572 1102Q672 1102 747 1067T876 964L885 1082H1053V23Q1053 -84 1020 -167T926 -308T781 -396T595 -426Q553 -426 499 -417T390 -386T283 -328T194 -239L290
--128Q324 -169 360 -197T433 -243T507 -267T581 -275Q647 -275 700 -256T790 -201T848 -110T868 14V107Q814 45 741 13T570 -20Q471 -20 391 22T256 138T170 312T140 529V550ZM325 529Q325 450 341 379T393 254T484 169T616 137Q664 137 702 148T771 181T826 231T868
-295V791Q850 825 826 853T771 901T702 933T618 945Q540 945 485 913T394 827T342 701T325 550V529Z" />
-<glyph unicode="h" glyph-name="h" horiz-adv-x="1229" d="M359 921Q417 1006 502 1053T693 1102Q778 1102 847 1078T966 1001T1041 870T1068 681V0H883V683Q883 816 820 881T638 945Q549 945 477 902T359 786V0H174V1536H359V921Z" />
-<glyph unicode="i" glyph-name="i" horiz-adv-x="1229" d="M203 1082H756V160H1109V0H203V160H571V921H203V1082ZM547 1366Q547 1412 574 1443T658 1475Q713 1475 741 1444T769 1366Q769 1321 741 1291T658 1261Q602 1261 575 1291T547 1366Z" />
-<glyph unicode="j" glyph-name="j" horiz-adv-x="1229" d="M299 1082H845V-7Q845 -111 817 -191T734 -325T601 -408T422 -437Q365 -437 316 -434T211 -420L224 -268Q241 -271 267 -273T319 -277T370 -279T409 -280Q461 -280 507 -267T587 -221T640 -137T660 -7V921H299V1082ZM634
-1367Q634 1412 661 1443T744 1475Q800 1475 828 1444T856 1367Q856 1322 828 1292T744 1261Q688 1261 661 1291T634 1367Z" />
-<glyph unicode="k" glyph-name="k" horiz-adv-x="1229" d="M498 505L362 374V0H176V1536H362V596L483 726L838 1082H1063L625 631L1130 0H895L498 505Z" />
-<glyph unicode="l" glyph-name="l" horiz-adv-x="1229" d="M203 1536H756V160H1109V0H203V160H571V1375H203V1536Z" />
-<glyph unicode="m" glyph-name="m" horiz-adv-x="1229" d="M259 1082L264 980Q297 1037 350 1069T480 1102Q629 1102 679 986Q711 1038 763 1069T891 1102Q1010 1102 1074 1029T1138 808V0H962V810Q962 946 837 945Q804 945 780 936T740 912T715 876T703 833V0H527V811Q527
-876 498 911T406 945Q348 945 316 922T269 861V0H93V1082H259Z" />
-<glyph unicode="n" glyph-name="n" horiz-adv-x="1229" d="M340 1082L353 922Q412 1006 498 1053T690 1102Q775 1102 844 1078T963 1003T1038 874T1065 687V0H880V683Q880 755 864 805T817 886T740 931T635 945Q542 945 472 899T359 776V0H174V1082H340Z" />
-<glyph unicode="o" glyph-name="o" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q728 1102 819 1060T974 943T1072 769T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q500 -20 409 22T254 138T156 312T122 529V551ZM307
-529Q307 449 326 377T383 249T480 162T615 130Q691 130 748 162T844 249T902 376T921 529V551Q921 630 902 702T844 830T748 917T613 950Q536 950 479 918T384 830T326 703T307 551V529Z" />
-<glyph unicode="p" glyph-name="p" horiz-adv-x="1229" d="M1087 529Q1087 413 1059 313T977 138T844 22T662 -20Q563 -20 488 12T358 104V-416H173V1082H342L351 964Q405 1031 481 1066T659 1102Q763 1102 843 1061T977 947T1059 773T1087 550V529ZM902 550Q902
-629 885 700T831 826T738 913T604 945Q515 945 455 904T358 797V276Q394 212 454 172T606 131Q683 131 739 163T831 251T884 378T902 529V550Z" />
-<glyph unicode="q" glyph-name="q" horiz-adv-x="1229" d="M140 550Q140 671 169 772T254 947T391 1061T577 1102Q673 1102 746 1070T874 975L882 1082H1052V-416H867V98Q813 41 741 11T575 -20Q472 -20 392 22T255 138T170 312T140 529V550ZM325 529Q325 450
-342 378T396 251T487 164T620 131Q709 131 769 171T867 275V809Q848 840 824 865T769 910T702 939T622 950Q545 950 489 917T397 829T343 701T325 550V529Z" />
-<glyph unicode="r" glyph-name="r" horiz-adv-x="1229" d="M883 1102Q909 1102 937 1101T990 1096T1037 1087T1073 1076L1048 895Q994 907 946 912T844 918Q714 918 634 859T515 694V0H329V1082H505L514 910Q580 999 672 1050T883 1102Z" />
-<glyph unicode="s" glyph-name="s" horiz-adv-x="1229" d="M893 287Q893 320 880 346T836 395T754 435T627 469Q534 488 458 515T327 579T242 667T212 785Q212 851 243 908T330 1009T463 1077T634 1102Q734 1102 814 1076T950 1004T1036 897T1067 764H882Q882
-799 864 832T814 892T737 934T634 950Q575 950 531 937T457 902T412 851T397 791Q397 759 409 734T450 689T529 653T655 622Q755 601 834 574T967 508T1049 418T1078 300Q1078 228 1046 169T955 68T816 3T639 -20Q529 -20 443 9T298 87T207 200T175 333H360Q364
-276 390 237T456 174T544 140T639 130Q756 130 824 173T893 287Z" />
-<glyph unicode="t" glyph-name="t" horiz-adv-x="1229" d="M612 1344V1082H1024V939H612V351Q612 288 628 247T672 182T736 147T814 137Q844 137 876 140T938 149T995 159T1039 169L1065 38Q1042 24 1009 14T937 -4T855 -16T768 -20Q696 -20 634 0T525 65T453
-180T426 351V939H142V1082H426V1344H612Z" />
-<glyph unicode="u" glyph-name="u" horiz-adv-x="1229" d="M876 149Q822 69 741 25T554 -20Q469 -20 400 6T282 89T207 231T180 439V1082H365V437Q365 349 379 291T421 199T489 150T583 136Q696 136 765 182T869 306V1082H1055V0H887L876 149Z" />
-<glyph unicode="v" glyph-name="v" horiz-adv-x="1229" d="M598 266L615 199L633 266L936 1082H1125L684 0H543L98 1082H288L598 266Z" />
-<glyph unicode="w" glyph-name="w" horiz-adv-x="1229" d="M338 392L360 237L387 392L560 1082H679L851 392L880 222L907 392L1027 1082H1191L961 0H815L646 663L618 831L591 663L424 0H278L48 1082H212L338 392Z" />
-<glyph unicode="x" glyph-name="x" horiz-adv-x="1229" d="M621 681L910 1082H1127L724 547L1138 0H924L625 412L326 0H110L524 547L121 1082H335L621 681Z" />
-<glyph unicode="y" glyph-name="y" horiz-adv-x="1229" d="M572 384L620 253L950 1082H1157L608 -167Q589 -209 560 -256T488 -343T390 -410T261 -437Q248 -437 232 -436T200 -432T170 -426T147 -421L177 -270Q184 -270 196 -271T221 -273T246 -274T265 -275Q303
--275 334 -254T390 -204T432 -144T460 -93L534 51L68 1082H275L572 384Z" />
-<glyph unicode="z" glyph-name="z" horiz-adv-x="1229" d="M396 151H1085V0H160V136L806 929H169V1082H1049V951L396 151Z" />
-<glyph unicode="{" glyph-name="braceleft" horiz-adv-x="1229" d="M978 -366Q913 -364 860 -344T765 -290T693 -211T642 -115T611 -9T601 99V268Q601 412 533 477T323 543V688Q464 688 532 752T601 962V1132Q601 1185 610 1239T638 1345T686 1442T758 1521T854
-1575T978 1597L999 1482Q927 1480 885 1448T821 1367T793 1255T787 1132V962Q786 842 731 752T560 614Q676 568 731 478T787 268V99Q787 37 797 -24T831 -135T896 -217T999 -251L978 -366Z" />
-<glyph unicode="|" glyph-name="bar" horiz-adv-x="1229" d="M689 -398H540V1456H689V-398Z" />
-<glyph unicode="}" glyph-name="braceright" horiz-adv-x="1229" d="M323 -251Q384 -249 425 -217T490 -136T525 -25T536 99V268Q536 387 591 477T762 614Q646 661 591 751T536 962V1132Q536 1193 530 1255T502 1366T438 1448T324 1482L344 1597Q413 1595 467
-1575T564 1521T635 1442T684 1346T712 1240T721 1132V962Q721 817 790 753T999 688V543Q859 542 790 477T721 268V99Q721 19 699 -62T631 -211T513 -321T344 -366L323 -251Z" />
-<glyph unicode="~" glyph-name="asciitilde" horiz-adv-x="1229" d="M1180 740Q1180 674 1158 613T1096 505T1001 430T879 402Q832 402 792 411T713 438T637 482T559 542Q504 587 454 613T348 639Q313 639 283 625T230 586T195 528T182 456L48 473Q48 539 70 599T131
-704T226 775T348 802Q394 802 435 793T516 765T592 721T669 663Q726 615 774 590T879 565Q914 565 944 581T997 623T1033 685T1046 758L1180 740Z" />
-<glyph unicode="&#xa1;" glyph-name="exclamdown" horiz-adv-x="1229" d="M522 611H707V-372H522V611ZM728 990Q728 944 699 913T613 881Q556 881 527 912T498 990Q498 1038 527 1070T613 1103Q669 1103 698 1071T728 990Z" />
-<glyph unicode="&#xa2;" glyph-name="cent" horiz-adv-x="1229" d="M639 130Q689 130 736 146T821 190T880 257T904 341H1079Q1078 277 1049 219T971 113T857 32T718 -13V-245H533V-10Q437 8 365 57T244 178T172 337T147 520V562Q147 657 171 744T244 903T364
-1024T533 1092V1318H718V1096Q798 1084 864 1050T978 964T1052 848T1079 710H904Q903 759 883 802T827 879T744 931T639 950Q553 950 495 916T400 826T349 701T333 562V520Q333 449 348 380T399 255T493 165T639 130Z" />
-<glyph unicode="&#xa3;" glyph-name="sterling" horiz-adv-x="1229" d="M463 626L471 400Q471 331 457 265T410 151H1148L1147 0H117V151H192Q219 158 237 186T267 250T282 327T286 400L278 626H113V778H273L264 1039Q264 1141 297 1222T390 1359T531 1446T709
-1476Q805 1476 881 1448T1009 1369T1090 1247T1118 1089H932Q932 1152 913 1196T860 1269T783 1311T691 1325Q640 1325 596 1306T519 1250T469 1160T450 1039L458 778H778V626H463Z" />
-<glyph unicode="&#xa4;" glyph-name="currency" horiz-adv-x="1229" d="M931 84Q869 34 794 7T634 -20Q549 -20 475 7T338 82L234 -26L103 109L215 224Q177 287 157 360T137 515Q137 601 159 678T223 820L103 944L234 1079L351 957Q411 1001 482 1025T634 1049Q714
-1049 786 1025T918 955L1038 1080L1170 944L1046 816Q1086 752 1108 676T1130 515Q1130 435 1110 363T1054 228L1170 109L1038 -27L931 84ZM309 515Q309 441 334 375T402 260T505 181T634 151Q703 151 762 180T864 259T932 375T957 515Q957 589 933 655T865 770T762
-849T634 878Q565 878 506 849T403 771T334 655T309 515Z" />
-<glyph unicode="&#xa5;" glyph-name="yen" horiz-adv-x="1229" d="M614 779L983 1456H1195L774 736H1092V615H704L703 613V446H1092V326H703V0H518V326H138V446H518V615H138V736H454L33 1456H245L614 779Z" />
-<glyph unicode="&#xa6;" glyph-name="brokenbar" horiz-adv-x="1229" d="M511 -270V521H696V-270H511ZM696 698H511V1456H696V698Z" />
-<glyph unicode="&#xa7;" glyph-name="section" horiz-adv-x="1229" d="M1140 431Q1140 334 1091 265T954 156Q1023 108 1059 40T1096 -128Q1096 -216 1061 -284T961 -399T807 -470T608 -495Q510 -495 417 -473T250 -400T132 -267T87 -64L272 -62Q272 -140 302
--193T380 -280T488 -328T608 -343Q678 -343 734 -327T829 -283T890 -216T911 -130Q911 -82 892 -47T831 16T723 71T560 126Q454 155 368 189T220 273T126 389T93 551Q93 645 141 714T275 825Q209 874 174 942T138 1110Q138 1194 173 1261T273 1377T427 1450T626
-1476Q740 1476 831 1448T985 1365T1083 1230T1118 1045H933Q933 1103 913 1154T853 1243T757 1303T626 1325Q551 1325 495 1309T400 1264T342 1196T323 1112Q323 1060 340 1024T397 960T505 907T672 854Q780 824 866 789T1014 706T1107 592T1140 431ZM598 691Q553
-703 513 715T435 742Q357 724 318 674T278 553Q278 500 296 463T355 397T464 342T632 289Q676 276 716 264T793 238Q869 258 912 307T956 428Q956 476 936 512T873 579T762 635T598 691Z" />
-<glyph unicode="&#xa8;" glyph-name="dieresis" horiz-adv-x="1229" d="M287 1371Q287 1416 314 1446T396 1477Q450 1477 478 1447T506 1371Q506 1326 478 1296T396 1266Q342 1266 315 1296T287 1371ZM717 1369Q717 1414 744 1445T826 1476Q880 1476 908 1445T936
-1369Q936 1325 908 1295T826 1264Q772 1264 745 1294T717 1369Z" />
-<glyph unicode="&#xa9;" glyph-name="copyright" horiz-adv-x="1229" d="M862 443Q862 327 797 268T613 208Q551 208 503 230T422 290T371 382T353 498V585Q353 647 371 700T422 793T503 854T613 876Q731 876 797 816T863 641H753Q752 712 719 745T613 778Q575
-778 547 763T499 723T471 662T462 586V498Q462 457 471 422T499 361T546 320T613 305Q685 305 718 338T752 443H862ZM177 542Q177 444 211 358T305 207T446 105T623 68Q717 68 798 105T940 207T1034 358T1068 542Q1068 639 1034 724T940 874T799 974T623 1011Q528
-1011 447 975T305 874T211 725T177 542ZM90 542Q90 620 108 691T161 825T243 939T351 1026T479 1082T623 1102Q736 1102 833 1058T1001 939T1114 761T1155 542Q1155 425 1114 323T1002 144T833 23T623 -21Q510 -21 413 23T244 143T131 322T90 542Z" />
-<glyph unicode="&#xaa;" glyph-name="ordfeminine" horiz-adv-x="1229" d="M780 705Q765 749 759 802Q729 759 673 726T533 691Q415 691 350 752T284 918Q284 1030 370 1089T615 1149H756V1201Q755 1266 724 1301T630 1336Q563 1336 523 1310T481 1231L320 1243Q321
-1294 343 1337T406 1411T504 1459T630 1476Q695 1476 748 1459T839 1407T898 1320T919 1200V886Q919 838 925 794T945 705H780ZM572 828Q599 828 628 836T683 859T728 892T756 928V1037H616Q537 1037 492 1004T446 922Q446 877 478 853T572 828Z" />
-<glyph unicode="&#xab;" glyph-name="guillemotleft" horiz-adv-x="1229" d="M390 515L648 118H507L212 506V525L507 914H648L390 515ZM725 515L983 118H842L547 506V525L842 914H983L725 515Z" />
-<glyph unicode="&#xac;" glyph-name="logicalnot" horiz-adv-x="1229" d="M1019 375H834V639H189V800H1019V375Z" />
-<glyph unicode="&#xad;" glyph-name="uni00AD" d="M983 561H218V713H983V561Z" />
-<glyph unicode="&#xae;" glyph-name="registered" horiz-adv-x="1229" d="M87 540Q87 657 128 759T240 938T409 1057T620 1101Q733 1101 830 1058T998 938T1111 760T1152 540Q1152 423 1111 321T999 143T830 23T620 -21Q507 -21 410 23T241 142T128 320T87 540ZM174
-540Q174 442 208 357T302 207T443 106T620 69Q714 69 795 106T937 207T1031 356T1065 540Q1065 638 1031 724T937 873T796 973T620 1010Q525 1010 444 974T302 874T208 724T174 540ZM508 485V232H401V867H612Q667 867 711 855T786 819T835 759T852 675Q852 619
-817 580T716 519L863 232H753L633 485H508ZM508 582H627Q675 583 710 606T745 671Q745 726 715 748T612 770H508V582Z" />
-<glyph unicode="&#xaf;" glyph-name="overscore" horiz-adv-x="1229" d="M971 1313H257V1456H971V1313Z" />
-<glyph unicode="&#xb0;" glyph-name="degree" horiz-adv-x="1229" d="M361 1216Q361 1269 381 1316T436 1399T517 1455T616 1476Q667 1476 712 1456T792 1400T846 1317T866 1216Q866 1163 846 1116T792 1035T713 980T616 960Q564 960 518 980T437 1034T382 1115T361
-1216ZM485 1216Q485 1189 495 1166T523 1125T565 1098T616 1088Q643 1088 666 1097T706 1124T733 1165T743 1216Q743 1244 734 1268T707 1311T666 1339T616 1349Q589 1349 565 1339T524 1311T496 1269T485 1216Z" />
-<glyph unicode="&#xb1;" glyph-name="plusminus" horiz-adv-x="1229" d="M709 855H1072V703H709V289H541V703H156V855H541V1267H709V855ZM1030 1H195V152H1030V1Z" />
-<glyph unicode="&#xb2;" glyph-name="twosuperior" horiz-adv-x="1229" d="M934 667H335V775L623 1046Q688 1106 716 1149T744 1228Q744 1277 711 1307T620 1338Q546 1338 511 1301T474 1205H316Q316 1259 337 1307T397 1390T491 1446T616 1467Q682 1467 735 1451T825
-1403T882 1329T902 1230Q902 1190 889 1155T850 1085T789 1015T710 940L535 795H934V667Z" />
-<glyph unicode="&#xb3;" glyph-name="threesuperior" horiz-adv-x="1229" d="M526 1125H610Q680 1125 718 1154T756 1234Q756 1279 723 1308T623 1337Q566 1337 529 1313T491 1245H334Q334 1296 356 1337T417 1406T508 1450T620 1466Q684 1466 738 1452T831 1409T891
-1338T913 1241Q913 1185 878 1140T777 1070Q927 1028 927 886Q927 830 904 787T839 715T741 671T621 655Q564 655 511 668T416 710T349 783T323 888H481Q482 842 521 813T626 783Q694 783 732 813T769 894Q769 957 726 983T610 1009H526V1125Z" />
-<glyph unicode="&#xb4;" glyph-name="acute" horiz-adv-x="1229" d="M594 1481H818L550 1215H410L594 1481Z" />
-<glyph unicode="&#xb5;" glyph-name="mu" horiz-adv-x="1229" d="M373 1082V460Q373 360 389 296T434 195T504 144T593 130Q700 130 762 171T854 283V1082H1040V0H873L864 116Q820 51 756 16T601 -20Q455 -20 373 53V-416H188V1082H373Z" />
-<glyph unicode="&#xb6;" glyph-name="paragraph" horiz-adv-x="1229" d="M790 0V520H703Q585 520 494 555T339 652T244 800T211 988Q211 1089 243 1174T339 1322T493 1420T703 1456H976V0H790Z" />
-<glyph unicode="&#xb7;" glyph-name="middot" horiz-adv-x="1229" d="M504 729Q504 777 533 809T619 841Q675 841 704 809T734 729Q734 682 705 651T619 619Q562 619 533 650T504 729Z" />
-<glyph unicode="&#xb8;" glyph-name="cedilla" horiz-adv-x="1229" d="M630 0L618 -52Q647 -57 674 -69T723 -101T758 -151T771 -225Q771 -322 692 -378T468 -435L461 -328Q495 -328 525 -323T577 -305T613 -275T627 -229Q627 -204 617 -187T587 -160T536 -143T466
--134L497 0H630Z" />
-<glyph unicode="&#xb9;" glyph-name="onesuperior" horiz-adv-x="1229" d="M758 665H601V1266L386 1209V1337L740 1454H758V665Z" />
-<glyph unicode="&#xba;" glyph-name="ordmasculine" horiz-adv-x="1229" d="M272 1141Q272 1214 296 1275T364 1381T472 1451T614 1476Q693 1476 756 1451T864 1382T932 1276T956 1141V1024Q956 952 933 891T865 785T758 715T616 690Q536 690 473 715T365 784T296
-890T272 1024V1141ZM435 1024Q435 982 446 947T479 885T536 844T616 829Q660 829 693 844T749 885T782 946T794 1024V1141Q794 1182 783 1217T749 1279T693 1321T614 1336Q569 1336 536 1321T480 1280T446 1218T435 1141V1024Z" />
-<glyph unicode="&#xbb;" glyph-name="guillemotright" horiz-adv-x="1229" d="M383 949L677 560V541L383 152H241L499 550L241 949H383ZM728 949L1022 560V541L728 152H586L844 550L586 949H728Z" />
-<glyph unicode="&#xbc;" glyph-name="onequarter" horiz-adv-x="1229" d="M383 751H242V1292L48 1241V1356L367 1461H383V751ZM658 221L545 287L1058 1241L1172 1175L658 221ZM1068 269H1164V152H1068V0H927V152H589L584 244L923 710H1068V269ZM726 269H927V529L912
-504L726 269Z" />
-<glyph unicode="&#xbd;" glyph-name="onehalf" horiz-adv-x="1229" d="M598 221L485 287L998 1241L1112 1175L598 221ZM371 747H230V1288L36 1237V1352L355 1457H371V747ZM1174 0H635V97L894 341Q952 395 977 434T1003 505Q1003 549 973 576T891 604Q825 604 793
-570T760 484H618Q618 533 636 576T690 651T776 701T888 720Q947 720 994 705T1075 663T1127 596T1145 507Q1145 471 1133 439T1098 376T1043 313T972 246L815 115H1174V0Z" />
-<glyph unicode="&#xbe;" glyph-name="threequarters" horiz-adv-x="1229" d="M469 220L356 286L869 1240L983 1174L469 220ZM1101 269H1197V152H1101V0H960V152H622L617 244L956 710H1101V269ZM759 269H960V529L945 504L759 269ZM221 1157H296Q359 1157 393 1183T428
-1255Q428 1296 398 1322T308 1348Q257 1348 224 1327T189 1265H48Q48 1311 68 1348T123 1410T204 1450T305 1464Q363 1464 411 1451T495 1413T549 1349T569 1262Q569 1211 537 1171T446 1108Q581 1070 581 942Q581 892 560 853T502 788T414 748T306 734Q255 734
-207 746T121 784T61 849T38 944H180Q181 902 216 876T311 849Q372 849 406 876T439 949Q439 1006 400 1029T296 1053H221V1157Z" />
-<glyph unicode="&#xbf;" glyph-name="questiondown" horiz-adv-x="1229" d="M724 673Q723 602 719 556T699 474T655 405T576 326Q545 291 512 254T452 175T407 89T389 -7Q389 -116 447 -173T614 -231Q657 -231 697 -220T769 -184T820 -122T839 -32H1024Q1023 -116
-992 -183T905 -296T776 -367T614 -392Q517 -392 441 -367T312 -292T232 -173T204 -13Q204 59 227 123T287 243T369 349T460 442Q489 471 505 496T528 547T537 604T539 673H724ZM509 988Q509 1036 538 1068T624 1101Q681 1101 710 1069T739 988Q739 942 710 911T624
-879Q567 879 538 910T509 988Z" />
-<glyph unicode="&#xc0;" glyph-name="Agrave" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538ZM710 1561H560L312 1827H535L710 1561Z" />
-<glyph unicode="&#xc1;" glyph-name="Aacute" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538ZM727 1824H951L683 1558H543L727 1824Z" />
-<glyph unicode="&#xc2;" glyph-name="Acircumflex" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538ZM933 1624V1599H779L629 1750L480 1599H328V1625L573 1864H685L933 1624Z" />
-<glyph unicode="&#xc3;" glyph-name="Atilde" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538ZM973 1844Q973 1799 958 1758T915 1687T850 1638T767 1620Q734 1620 708 1627T661 1644T620 1667T582
-1690T540 1708T491 1715Q447 1715 419 1683T389 1604L285 1628Q285 1673 300 1714T343 1787T407 1838T491 1857Q533 1857 566 1842T631 1810T695 1777T767 1762Q788 1762 807 1771T839 1795T861 1830T870 1874L973 1844Z" />
-<glyph unicode="&#xc4;" glyph-name="Adieresis" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538ZM302 1718Q302 1763 329 1793T411 1824Q465 1824 493 1794T521 1718Q521 1673 493 1643T411 1613Q357
-1613 330 1643T302 1718ZM732 1716Q732 1761 759 1792T841 1823Q895 1823 923 1792T951 1716Q951 1672 923 1642T841 1611Q787 1611 760 1641T732 1716Z" />
-<glyph unicode="&#xc5;" glyph-name="Aring" horiz-adv-x="1229" d="M869 377H383L266 0H81L551 1456H706L1168 0H984L869 377ZM433 538H820L628 1170L433 538ZM424 1732Q424 1775 440 1811T484 1874T549 1916T629 1931Q671 1931 707 1916T771 1875T815 1812T831
-1732Q831 1689 815 1653T772 1592T708 1552T629 1538Q587 1538 550 1552T485 1591T441 1653T424 1732ZM523 1732Q523 1710 531 1691T554 1658T588 1635T629 1627Q651 1627 669 1635T702 1657T724 1690T732 1732Q732 1780 703 1810T629 1841Q585 1841 554 1811T523
-1732Z" />
-<glyph unicode="&#xc6;" glyph-name="AE" horiz-adv-x="1229" d="M1195 0H664L663 353H353L230 0H32L592 1456H1172V1304H835L837 833H1139V682H837L838 151H1195V0ZM414 527H663L661 1233L414 527Z" />
-<glyph unicode="&#xc7;" glyph-name="Ccedilla" horiz-adv-x="1229" d="M1117 438Q1104 337 1065 253T964 108T816 14T625 -20Q535 -20 462 5T331 76T232 182T163 315T122 466T107 626V829Q108 910 121 989T162 1140T231 1273T330 1380T461 1450T625 1476Q734
-1476 820 1443T968 1348T1067 1200T1117 1010H932Q923 1076 901 1133T842 1233T752 1300T625 1325Q559 1325 509 1304T422 1245T361 1159T321 1055T300 943T293 831V626Q293 572 299 515T321 402T360 297T421 211T508 152T625 130Q698 130 751 153T842 217T901
-315T932 438H1117ZM684 0L672 -52Q701 -57 728 -69T777 -101T812 -151T825 -225Q825 -322 746 -378T522 -435L515 -328Q549 -328 579 -323T631 -305T667 -275T681 -229Q681 -204 671 -187T641 -160T590 -143T520 -134L551 0H684Z" />
-<glyph unicode="&#xc8;" glyph-name="Egrave" horiz-adv-x="1229" d="M975 673H367V157H1076V0H182V1456H1067V1298H367V830H975V673ZM700 1561H550L302 1827H525L700 1561Z" />
-<glyph unicode="&#xc9;" glyph-name="Eacute" horiz-adv-x="1229" d="M975 673H367V157H1076V0H182V1456H1067V1298H367V830H975V673ZM717 1824H941L673 1558H533L717 1824Z" />
-<glyph unicode="&#xca;" glyph-name="Ecircumflex" horiz-adv-x="1229" d="M975 673H367V157H1076V0H182V1456H1067V1298H367V830H975V673ZM923 1624V1599H769L619 1750L470 1599H318V1625L563 1864H675L923 1624Z" />
-<glyph unicode="&#xcb;" glyph-name="Edieresis" horiz-adv-x="1229" d="M975 673H367V157H1076V0H182V1456H1067V1298H367V830H975V673ZM292 1718Q292 1763 319 1793T401 1824Q455 1824 483 1794T511 1718Q511 1673 483 1643T401 1613Q347 1613 320 1643T292
-1718ZM722 1716Q722 1761 749 1792T831 1823Q885 1823 913 1792T941 1716Q941 1672 913 1642T831 1611Q777 1611 750 1641T722 1716Z" />
-<glyph unicode="&#xcc;" glyph-name="Igrave" horiz-adv-x="1229" d="M174 1456H1054V1295H705V160H1054V0H174V160H515V1295H174V1456ZM648 1561H498L250 1827H473L648 1561Z" />
-<glyph unicode="&#xcd;" glyph-name="Iacute" horiz-adv-x="1229" d="M174 1456H1054V1295H705V160H1054V0H174V160H515V1295H174V1456ZM665 1824H889L621 1558H481L665 1824Z" />
-<glyph unicode="&#xce;" glyph-name="Icircumflex" horiz-adv-x="1229" d="M174 1456H1054V1295H705V160H1054V0H174V160H515V1295H174V1456ZM871 1624V1599H717L567 1750L418 1599H266V1625L511 1864H623L871 1624Z" />
-<glyph unicode="&#xcf;" glyph-name="Idieresis" horiz-adv-x="1229" d="M174 1456H1054V1295H705V160H1054V0H174V160H515V1295H174V1456ZM241 1718Q241 1763 268 1793T350 1824Q404 1824 432 1794T460 1718Q460 1673 432 1643T350 1613Q296 1613 269 1643T241
-1718ZM671 1716Q671 1761 698 1792T780 1823Q834 1823 862 1792T890 1716Q890 1672 862 1642T780 1611Q726 1611 699 1641T671 1716Z" />
-<glyph unicode="&#xd0;" glyph-name="Eth" horiz-adv-x="1259" d="M185 0V666H-44V817H185V1456H522Q674 1454 793 1405T995 1267T1121 1055T1166 781V674Q1165 524 1122 401T996 189T794 51T522 0H185ZM593 666H373V151H522Q640 152 726 192T868 303T952 468T981
-674V783Q980 894 952 988T868 1152T726 1262T522 1304H373V817H593V666Z" />
-<glyph unicode="&#xd1;" glyph-name="Ntilde" horiz-adv-x="1229" d="M1086 0H898L333 1088L330 0H143V1456H331L896 370L899 1456H1086V0ZM934 1844Q934 1799 919 1758T876 1687T811 1638T728 1620Q695 1620 669 1627T622 1644T581 1667T543 1690T501 1708T452
-1715Q408 1715 380 1683T350 1604L246 1628Q246 1673 261 1714T304 1787T368 1838T452 1857Q494 1857 527 1842T592 1810T656 1777T728 1762Q749 1762 768 1771T800 1795T822 1830T831 1874L934 1844Z" />
-<glyph unicode="&#xd2;" glyph-name="Ograve" horiz-adv-x="1229" d="M1121 644Q1120 566 1108 487T1069 333T1003 195T906 83T778 8T615 -20Q525 -20 453 7T324 83T227 195T160 334T120 487T106 644V810Q107 888 119 967T158 1121T225 1259T322 1372T450 1448T613
-1476Q703 1476 776 1449T905 1373T1001 1261T1068 1122T1107 968T1121 810V644ZM938 812Q937 864 931 920T911 1032T872 1138T812 1227T727 1288T613 1311Q549 1311 500 1288T415 1227T355 1138T317 1032T296 920T288 812V644Q289 593 295 536T317 424T356 317T416
-228T501 166T615 143Q680 143 729 166T814 227T873 316T911 422T931 535T938 644V812ZM714 1582H564L316 1848H539L714 1582Z" />
-<glyph unicode="&#xd3;" glyph-name="Oacute" horiz-adv-x="1229" d="M1121 644Q1120 566 1108 487T1069 333T1003 195T906 83T778 8T615 -20Q525 -20 453 7T324 83T227 195T160 334T120 487T106 644V810Q107 888 119 967T158 1121T225 1259T322 1372T450 1448T613
-1476Q703 1476 776 1449T905 1373T1001 1261T1068 1122T1107 968T1121 810V644ZM938 812Q937 864 931 920T911 1032T872 1138T812 1227T727 1288T613 1311Q549 1311 500 1288T415 1227T355 1138T317 1032T296 920T288 812V644Q289 593 295 536T317 424T356 317T416
-228T501 166T615 143Q680 143 729 166T814 227T873 316T911 422T931 535T938 644V812ZM731 1845H955L687 1579H547L731 1845Z" />
-<glyph unicode="&#xd4;" glyph-name="Ocircumflex" horiz-adv-x="1229" d="M1121 644Q1120 566 1108 487T1069 333T1003 195T906 83T778 8T615 -20Q525 -20 453 7T324 83T227 195T160 334T120 487T106 644V810Q107 888 119 967T158 1121T225 1259T322 1372T450
-1448T613 1476Q703 1476 776 1449T905 1373T1001 1261T1068 1122T1107 968T1121 810V644ZM938 812Q937 864 931 920T911 1032T872 1138T812 1227T727 1288T613 1311Q549 1311 500 1288T415 1227T355 1138T317 1032T296 920T288 812V644Q289 593 295 536T317 424T356
-317T416 228T501 166T615 143Q680 143 729 166T814 227T873 316T911 422T931 535T938 644V812ZM937 1645V1620H783L633 1771L484 1620H332V1646L577 1885H689L937 1645Z" />
-<glyph unicode="&#xd5;" glyph-name="Otilde" horiz-adv-x="1229" d="M1121 644Q1120 566 1108 487T1069 333T1003 195T906 83T778 8T615 -20Q525 -20 453 7T324 83T227 195T160 334T120 487T106 644V810Q107 888 119 967T158 1121T225 1259T322 1372T450 1448T613
-1476Q703 1476 776 1449T905 1373T1001 1261T1068 1122T1107 968T1121 810V644ZM938 812Q937 864 931 920T911 1032T872 1138T812 1227T727 1288T613 1311Q549 1311 500 1288T415 1227T355 1138T317 1032T296 920T288 812V644Q289 593 295 536T317 424T356 317T416
-228T501 166T615 143Q680 143 729 166T814 227T873 316T911 422T931 535T938 644V812ZM977 1865Q977 1820 962 1779T919 1708T854 1659T771 1641Q738 1641 712 1648T665 1665T624 1688T586 1711T544 1729T495 1736Q451 1736 423 1704T393 1625L289 1649Q289 1694
-304 1735T347 1808T411 1859T495 1878Q537 1878 570 1863T635 1831T699 1798T771 1783Q792 1783 811 1792T843 1816T865 1851T874 1895L977 1865Z" />
-<glyph unicode="&#xd6;" glyph-name="Odieresis" horiz-adv-x="1229" d="M1121 644Q1120 566 1108 487T1069 333T1003 195T906 83T778 8T615 -20Q525 -20 453 7T324 83T227 195T160 334T120 487T106 644V810Q107 888 119 967T158 1121T225 1259T322 1372T450 1448T613
-1476Q703 1476 776 1449T905 1373T1001 1261T1068 1122T1107 968T1121 810V644ZM938 812Q937 864 931 920T911 1032T872 1138T812 1227T727 1288T613 1311Q549 1311 500 1288T415 1227T355 1138T317 1032T296 920T288 812V644Q289 593 295 536T317 424T356 317T416
-228T501 166T615 143Q680 143 729 166T814 227T873 316T911 422T931 535T938 644V812ZM306 1739Q306 1784 333 1814T415 1845Q469 1845 497 1815T525 1739Q525 1694 497 1664T415 1634Q361 1634 334 1664T306 1739ZM736 1737Q736 1782 763 1813T845 1844Q899 1844
-927 1813T955 1737Q955 1693 927 1663T845 1632Q791 1632 764 1662T736 1737Z" />
-<glyph unicode="&#xd7;" glyph-name="multiply" horiz-adv-x="1229" d="M181 329L511 666L184 1000L303 1123L631 788L960 1123L1079 1000L751 666L1082 329L963 206L631 543L300 206L181 329Z" />
-<glyph unicode="&#xd8;" glyph-name="Oslash" horiz-adv-x="1229" d="M1113 644Q1112 566 1100 487T1061 333T995 195T898 83T770 8T607 -20Q516 -20 445 7T317 83L213 -93H71L231 177Q197 226 172 282T131 398T106 520T98 644V810Q99 888 111 967T150 1121T217
-1259T314 1372T442 1448T605 1476Q707 1476 785 1442T923 1348L1022 1516H1164L1003 1244Q1031 1197 1051 1145T1085 1037T1105 924T1113 810V644ZM280 644Q281 575 292 498T333 350L831 1193Q794 1246 739 1278T605 1311Q541 1311 492 1288T407 1227T347 1138T309
-1032T288 920T280 812V644ZM930 812Q929 870 922 934T895 1061L404 231Q441 190 491 167T607 143Q672 143 721 166T806 227T865 316T903 422T923 535T930 644V812Z" />
-<glyph unicode="&#xd9;" glyph-name="Ugrave" horiz-adv-x="1229" d="M1088 1456L1090 470Q1088 368 1053 279T955 124T805 19T614 -20Q508 -20 421 18T272 122T175 278T139 470L141 1456H317L321 470Q322 405 341 345T397 239T488 165T614 137Q685 137 739 164T829
-238T885 345T906 470L909 1456H1088ZM740 1549H590L342 1815H565L740 1549Z" />
-<glyph unicode="&#xda;" glyph-name="Uacute" horiz-adv-x="1229" d="M1088 1456L1090 470Q1088 368 1053 279T955 124T805 19T614 -20Q508 -20 421 18T272 122T175 278T139 470L141 1456H317L321 470Q322 405 341 345T397 239T488 165T614 137Q685 137 739 164T829
-238T885 345T906 470L909 1456H1088ZM757 1812H981L713 1546H573L757 1812Z" />
-<glyph unicode="&#xdb;" glyph-name="Ucircumflex" horiz-adv-x="1229" d="M1088 1456L1090 470Q1088 368 1053 279T955 124T805 19T614 -20Q508 -20 421 18T272 122T175 278T139 470L141 1456H317L321 470Q322 405 341 345T397 239T488 165T614 137Q685 137 739
-164T829 238T885 345T906 470L909 1456H1088ZM963 1612V1587H809L659 1738L510 1587H358V1613L603 1852H715L963 1612Z" />
-<glyph unicode="&#xdc;" glyph-name="Udieresis" horiz-adv-x="1229" d="M1088 1456L1090 470Q1088 368 1053 279T955 124T805 19T614 -20Q508 -20 421 18T272 122T175 278T139 470L141 1456H317L321 470Q322 405 341 345T397 239T488 165T614 137Q685 137 739
-164T829 238T885 345T906 470L909 1456H1088ZM332 1706Q332 1751 359 1781T441 1812Q495 1812 523 1782T551 1706Q551 1661 523 1631T441 1601Q387 1601 360 1631T332 1706ZM762 1704Q762 1749 789 1780T871 1811Q925 1811 953 1780T981 1704Q981 1660 953 1630T871
-1599Q817 1599 790 1629T762 1704Z" />
-<glyph unicode="&#xdd;" glyph-name="Yacute" horiz-adv-x="1229" d="M603 725L935 1456H1145L692 543L689 0H517L514 543L61 1456H272L603 725ZM707 1823H931L663 1557H523L707 1823Z" />
-<glyph unicode="&#xde;" glyph-name="Thorn" horiz-adv-x="1229" d="M353 1456V1163H630Q747 1163 837 1132T990 1044T1085 909T1118 738Q1118 645 1086 567T991 433T838 345T630 313H353V0H168V1456H353ZM353 1011V465H630Q708 465 765 487T859 547T915 634T933
-736Q933 790 915 839T860 927T766 988T630 1011H353Z" />
-<glyph unicode="&#xdf;" glyph-name="germandbls" horiz-adv-x="1229" d="M353 0H169V1087Q169 1199 198 1287T280 1435T405 1526T562 1558Q637 1558 702 1538T816 1475T893 1370T921 1220Q921 1141 901 1088T857 992T814 912T794 823Q794 777 816 740T873 668T947
-598T1021 522T1077 431T1100 316Q1100 231 1075 168T1003 63T894 0T754 -21Q713 -21 669 -16T585 -1T510 22T456 51L498 206Q516 195 542 182T600 157T666 138T735 130Q782 130 816 143T872 181T904 237T915 307Q915 354 893 392T836 465T762 535T688 612T631 705T608
-825Q608 864 618 897T643 959T677 1016T710 1073T736 1134T746 1204Q746 1254 731 1291T692 1354T636 1393T572 1406Q473 1406 414 1324T353 1087V0Z" />
-<glyph unicode="&#xe0;" glyph-name="agrave" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786 895T706
-938T599 953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521
-525 431 477T341 326Q341 286 354 252T395 194T463 155T558 141ZM962 1239H812L564 1505H787L962 1239Z" />
-<glyph unicode="&#xe1;" glyph-name="aacute" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786 895T706
-938T599 953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521
-525 431 477T341 326Q341 286 354 252T395 194T463 155T558 141ZM723 1502H947L679 1236H539L723 1502Z" />
-<glyph unicode="&#xe2;" glyph-name="acircumflex" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786
-895T706 938T599 953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521
-525 431 477T341 326Q341 286 354 252T395 194T463 155T558 141ZM929 1302V1277H775L625 1428L476 1277H324V1303L569 1542H681L929 1302Z" />
-<glyph unicode="&#xe3;" glyph-name="atilde" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786 895T706
-938T599 953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521
-525 431 477T341 326Q341 286 354 252T395 194T463 155T558 141ZM969 1522Q969 1477 954 1436T911 1365T846 1316T763 1298Q730 1298 704 1305T657 1322T616 1345T578 1368T536 1386T487 1393Q443 1393 415 1361T385 1282L281 1306Q281 1351 296 1392T339 1465T403
-1516T487 1535Q529 1535 562 1520T627 1488T691 1455T763 1440Q784 1440 803 1449T835 1473T857 1508T866 1552L969 1522Z" />
-<glyph unicode="&#xe4;" glyph-name="adieresis" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786 895T706
-938T599 953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521
-525 431 477T341 326Q341 286 354 252T395 194T463 155T558 141ZM298 1396Q298 1441 325 1471T407 1502Q461 1502 489 1472T517 1396Q517 1351 489 1321T407 1291Q353 1291 326 1321T298 1396ZM728 1394Q728 1439 755 1470T837 1501Q891 1501 919 1470T947 1394Q947
-1350 919 1320T837 1289Q783 1289 756 1319T728 1394Z" />
-<glyph unicode="&#xe5;" glyph-name="aring" horiz-adv-x="1229" d="M885 0Q874 21 868 52T858 118Q830 90 796 65T720 21T631 -9T531 -20Q445 -20 376 5T258 72T183 173T156 300Q156 389 191 456T292 567T448 634T653 656H855V741Q855 790 837 829T786 895T706
-938T599 953Q544 953 501 939T427 902T381 848T364 782H178Q179 841 208 898T293 1000T428 1074T609 1102Q701 1102 780 1080T916 1012T1007 898T1040 739V236Q1040 182 1050 122T1078 16V0H885ZM558 141Q612 141 659 155T744 192T811 244T855 306V525H683Q521
-525 431 477T341 326Q341 286 354 252T395 194T463 155T558 141ZM420 1410Q420 1453 436 1489T480 1552T545 1594T625 1609Q667 1609 703 1594T767 1553T811 1490T827 1410Q827 1367 811 1331T768 1270T704 1230T625 1216Q583 1216 546 1230T481 1269T437 1331T420
-1410ZM519 1410Q519 1388 527 1369T550 1336T584 1313T625 1305Q647 1305 665 1313T698 1335T720 1368T728 1410Q728 1458 699 1488T625 1519Q581 1519 550 1489T519 1410Z" />
-<glyph unicode="&#xe6;" glyph-name="ae" horiz-adv-x="1229" d="M896 -20Q793 -20 719 17T599 126Q580 97 555 71T496 24T423 -8T335 -20Q264 -20 210 2T119 63T63 159T43 285Q43 451 147 543T448 635H511V783Q511 859 480 904T381 950Q318 950 279 909T240 792L61
-800Q61 869 83 924T147 1019T248 1080T379 1102Q462 1102 524 1075T626 995Q669 1046 728 1074T862 1102Q943 1102 1004 1076T1108 1001T1171 884T1193 731V497H688V411Q688 345 701 293T744 205T820 150T932 130Q970 130 999 137T1052 154T1095 177T1130 200L1176
-64Q1163 54 1140 40T1083 12T1002 -10T896 -20ZM862 950Q817 950 785 931T731 878T700 801T688 709V640H1017V768Q1017 803 1007 835T977 893T928 934T862 950ZM371 130Q408 130 446 151T512 202L511 495H450Q397 495 355 478T284 431T240 363T224 281Q224 250
-233 223T261 175T307 142T371 130Z" />
-<glyph unicode="&#xe7;" glyph-name="ccedilla" horiz-adv-x="1229" d="M635 130Q685 130 732 146T817 190T876 257T900 341H1075Q1074 269 1038 204T940 89T800 10T635 -20Q512 -20 420 24T267 142T174 314T143 520V562Q143 669 174 767T266 939T420 1058T635
-1102Q731 1102 811 1072T950 989T1042 864T1075 710H900Q899 759 879 802T823 879T740 931T635 950Q549 950 491 916T396 826T345 701T329 562V520Q329 449 344 380T395 255T489 165T635 130ZM705 0L693 -52Q722 -57 749 -69T798 -101T833 -151T846 -225Q846 -322
-767 -378T543 -435L536 -328Q570 -328 600 -323T652 -305T688 -275T702 -229Q702 -204 692 -187T662 -160T611 -143T541 -134L572 0H705Z" />
-<glyph unicode="&#xe8;" glyph-name="egrave" horiz-adv-x="1229" d="M652 -20Q538 -20 443 19T279 128T173 294T135 503V545Q135 676 177 779T288 954T446 1064T628 1102Q745 1102 832 1062T978 950T1064 781T1093 571V488H320Q323 414 348 349T418 236T525 159T662
-131Q761 131 838 171T966 277L1079 189Q1052 148 1012 111T918 44T798 -2T652 -20ZM628 950Q572 950 522 930T432 870T365 773T326 640H908V654Q905 708 888 761T836 856T751 924T628 950ZM957 1240H807L559 1506H782L957 1240Z" />
-<glyph unicode="&#xe9;" glyph-name="eacute" horiz-adv-x="1229" d="M652 -20Q538 -20 443 19T279 128T173 294T135 503V545Q135 676 177 779T288 954T446 1064T628 1102Q745 1102 832 1062T978 950T1064 781T1093 571V488H320Q323 414 348 349T418 236T525 159T662
-131Q761 131 838 171T966 277L1079 189Q1052 148 1012 111T918 44T798 -2T652 -20ZM628 950Q572 950 522 930T432 870T365 773T326 640H908V654Q905 708 888 761T836 856T751 924T628 950ZM718 1503H942L674 1237H534L718 1503Z" />
-<glyph unicode="&#xea;" glyph-name="ecircumflex" horiz-adv-x="1229" d="M652 -20Q538 -20 443 19T279 128T173 294T135 503V545Q135 676 177 779T288 954T446 1064T628 1102Q745 1102 832 1062T978 950T1064 781T1093 571V488H320Q323 414 348 349T418 236T525
-159T662 131Q761 131 838 171T966 277L1079 189Q1052 148 1012 111T918 44T798 -2T652 -20ZM628 950Q572 950 522 930T432 870T365 773T326 640H908V654Q905 708 888 761T836 856T751 924T628 950ZM924 1303V1278H770L620 1429L471 1278H319V1304L564 1543H676L924
-1303Z" />
-<glyph unicode="&#xeb;" glyph-name="edieresis" horiz-adv-x="1229" d="M652 -20Q538 -20 443 19T279 128T173 294T135 503V545Q135 676 177 779T288 954T446 1064T628 1102Q745 1102 832 1062T978 950T1064 781T1093 571V488H320Q323 414 348 349T418 236T525
-159T662 131Q761 131 838 171T966 277L1079 189Q1052 148 1012 111T918 44T798 -2T652 -20ZM628 950Q572 950 522 930T432 870T365 773T326 640H908V654Q905 708 888 761T836 856T751 924T628 950ZM293 1397Q293 1442 320 1472T402 1503Q456 1503 484 1473T512
-1397Q512 1352 484 1322T402 1292Q348 1292 321 1322T293 1397ZM723 1395Q723 1440 750 1471T832 1502Q886 1502 914 1471T942 1395Q942 1351 914 1321T832 1290Q778 1290 751 1320T723 1395Z" />
-<glyph unicode="&#xec;" glyph-name="igrave" horiz-adv-x="1229" d="M203 1082H756V160H1109V0H203V160H571V921H203V1082ZM1003 1218H853L605 1484H828L1003 1218Z" />
-<glyph unicode="&#xed;" glyph-name="iacute" horiz-adv-x="1229" d="M203 1082H756V160H1109V0H203V160H571V921H203V1082ZM764 1481H988L720 1215H580L764 1481Z" />
-<glyph unicode="&#xee;" glyph-name="icircumflex" horiz-adv-x="1229" d="M203 1082H756V160H1109V0H203V160H571V921H203V1082ZM970 1281V1256H816L666 1407L517 1256H365V1282L610 1521H722L970 1281Z" />
-<glyph unicode="&#xef;" glyph-name="idieresis" horiz-adv-x="1229" d="M203 1082H756V160H1109V0H203V160H571V921H203V1082ZM339 1375Q339 1420 366 1450T448 1481Q502 1481 530 1451T558 1375Q558 1330 530 1300T448 1270Q394 1270 367 1300T339 1375ZM769
-1373Q769 1418 796 1449T878 1480Q932 1480 960 1449T988 1373Q988 1329 960 1299T878 1268Q824 1268 797 1298T769 1373Z" />
-<glyph unicode="&#xf0;" glyph-name="eth" horiz-adv-x="1229" d="M845 1286Q949 1168 1007 1004T1066 633V571Q1066 433 1029 324T924 138T766 21T565 -20Q457 -20 367 17T211 121T109 276T73 467Q73 582 109 676T211 837T366 940T561 977Q649 977 725 943T859
-853Q836 963 791 1047T684 1194L418 1042L345 1141L584 1278Q543 1305 500 1325T410 1362L467 1521Q547 1499 618 1463T753 1375L983 1507L1056 1407L845 1286ZM881 635Q881 648 881 660T880 685Q863 712 835 737T766 782T675 813T561 825Q492 825 436 797T341
-719T280 605T259 467Q259 405 280 345T340 237T437 160T569 130Q641 130 698 162T796 251T859 390T881 571V635Z" />
-<glyph unicode="&#xf1;" glyph-name="ntilde" horiz-adv-x="1229" d="M340 1082L353 922Q412 1006 498 1053T690 1102Q775 1102 844 1078T963 1003T1038 874T1065 687V0H880V683Q880 755 864 805T817 886T740 931T635 945Q542 945 472 899T359 776V0H174V1082H340ZM949
-1522Q949 1477 934 1436T891 1365T826 1316T743 1298Q710 1298 684 1305T637 1322T596 1345T558 1368T516 1386T467 1393Q423 1393 395 1361T365 1282L261 1306Q261 1351 276 1392T319 1465T383 1516T467 1535Q509 1535 542 1520T607 1488T671 1455T743 1440Q764
-1440 783 1449T815 1473T837 1508T846 1552L949 1522Z" />
-<glyph unicode="&#xf2;" glyph-name="ograve" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q728 1102 819 1060T974 943T1072 769T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q500 -20 409 22T254 138T156 312T122
-529V551ZM307 529Q307 449 326 377T383 249T480 162T615 130Q691 130 748 162T844 249T902 376T921 529V551Q921 630 902 702T844 830T748 917T613 950Q536 950 479 918T384 830T326 703T307 551V529ZM951 1239H801L553 1505H776L951 1239Z" />
-<glyph unicode="&#xf3;" glyph-name="oacute" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q728 1102 819 1060T974 943T1072 769T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q500 -20 409 22T254 138T156 312T122
-529V551ZM307 529Q307 449 326 377T383 249T480 162T615 130Q691 130 748 162T844 249T902 376T921 529V551Q921 630 902 702T844 830T748 917T613 950Q536 950 479 918T384 830T326 703T307 551V529ZM712 1502H936L668 1236H528L712 1502Z" />
-<glyph unicode="&#xf4;" glyph-name="ocircumflex" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q728 1102 819 1060T974 943T1072 769T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q500 -20 409 22T254 138T156 312T122
-529V551ZM307 529Q307 449 326 377T383 249T480 162T615 130Q691 130 748 162T844 249T902 376T921 529V551Q921 630 902 702T844 830T748 917T613 950Q536 950 479 918T384 830T326 703T307 551V529ZM918 1302V1277H764L614 1428L465 1277H313V1303L558 1542H670L918
-1302Z" />
-<glyph unicode="&#xf5;" glyph-name="otilde" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q728 1102 819 1060T974 943T1072 769T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q500 -20 409 22T254 138T156 312T122
-529V551ZM307 529Q307 449 326 377T383 249T480 162T615 130Q691 130 748 162T844 249T902 376T921 529V551Q921 630 902 702T844 830T748 917T613 950Q536 950 479 918T384 830T326 703T307 551V529ZM958 1522Q958 1477 943 1436T900 1365T835 1316T752 1298Q719
-1298 693 1305T646 1322T605 1345T567 1368T525 1386T476 1393Q432 1393 404 1361T374 1282L270 1306Q270 1351 285 1392T328 1465T392 1516T476 1535Q518 1535 551 1520T616 1488T680 1455T752 1440Q773 1440 792 1449T824 1473T846 1508T855 1552L958 1522Z"
-/>
-<glyph unicode="&#xf6;" glyph-name="odieresis" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q728 1102 819 1060T974 943T1072 769T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q500 -20 409 22T254 138T156 312T122
-529V551ZM307 529Q307 449 326 377T383 249T480 162T615 130Q691 130 748 162T844 249T902 376T921 529V551Q921 630 902 702T844 830T748 917T613 950Q536 950 479 918T384 830T326 703T307 551V529ZM287 1396Q287 1441 314 1471T396 1502Q450 1502 478 1472T506
-1396Q506 1351 478 1321T396 1291Q342 1291 315 1321T287 1396ZM717 1394Q717 1439 744 1470T826 1501Q880 1501 908 1470T936 1394Q936 1350 908 1320T826 1289Q772 1289 745 1319T717 1394Z" />
-<glyph unicode="&#xf7;" glyph-name="divide" horiz-adv-x="1229" d="M1113 600H115V784H1113V600ZM507 1097Q507 1142 534 1173T616 1204Q670 1204 698 1173T726 1097Q726 1052 698 1022T616 992Q562 992 535 1022T507 1097ZM505 282Q505 327 532 358T614 389Q668
-389 696 358T724 282Q724 238 696 208T614 177Q560 177 533 207T505 282Z" />
-<glyph unicode="&#xf8;" glyph-name="oslash" horiz-adv-x="1229" d="M122 551Q122 668 156 768T253 943T408 1059T613 1102Q670 1102 720 1092T816 1061L889 1209H1012L911 1004Q1005 929 1055 812T1106 551V529Q1106 412 1072 312T975 138T820 22T615 -20Q561
--20 514 -11T423 16L349 -135H226L327 70Q228 143 175 262T122 529V551ZM307 529Q307 438 331 360T403 224L745 918Q716 933 684 941T613 950Q536 950 479 918T384 830T326 703T307 551V529ZM921 551Q921 636 899 712T832 845L492 156Q547 130 615 130Q691 130
-748 162T844 249T902 376T921 529V551Z" />
-<glyph unicode="&#xf9;" glyph-name="ugrave" horiz-adv-x="1229" d="M876 149Q822 69 741 25T554 -20Q469 -20 400 6T282 89T207 231T180 439V1082H365V437Q365 349 379 291T421 199T489 150T583 136Q696 136 765 182T869 306V1082H1055V0H887L876 149ZM950 1219H800L552
-1485H775L950 1219Z" />
-<glyph unicode="&#xfa;" glyph-name="uacute" horiz-adv-x="1229" d="M876 149Q822 69 741 25T554 -20Q469 -20 400 6T282 89T207 231T180 439V1082H365V437Q365 349 379 291T421 199T489 150T583 136Q696 136 765 182T869 306V1082H1055V0H887L876 149ZM711 1482H935L667
-1216H527L711 1482Z" />
-<glyph unicode="&#xfb;" glyph-name="ucircumflex" horiz-adv-x="1229" d="M876 149Q822 69 741 25T554 -20Q469 -20 400 6T282 89T207 231T180 439V1082H365V437Q365 349 379 291T421 199T489 150T583 136Q696 136 765 182T869 306V1082H1055V0H887L876 149ZM917
-1282V1257H763L613 1408L464 1257H312V1283L557 1522H669L917 1282Z" />
-<glyph unicode="&#xfc;" glyph-name="udieresis" horiz-adv-x="1229" d="M876 149Q822 69 741 25T554 -20Q469 -20 400 6T282 89T207 231T180 439V1082H365V437Q365 349 379 291T421 199T489 150T583 136Q696 136 765 182T869 306V1082H1055V0H887L876 149ZM287
-1376Q287 1421 314 1451T396 1482Q450 1482 478 1452T506 1376Q506 1331 478 1301T396 1271Q342 1271 315 1301T287 1376ZM717 1374Q717 1419 744 1450T826 1481Q880 1481 908 1450T936 1374Q936 1330 908 1300T826 1269Q772 1269 745 1299T717 1374Z" />
-<glyph unicode="&#xfd;" glyph-name="yacute" horiz-adv-x="1229" d="M572 384L620 253L950 1082H1157L608 -167Q589 -209 560 -256T488 -343T390 -410T261 -437Q248 -437 232 -436T200 -432T170 -426T147 -421L177 -270Q184 -270 196 -271T221 -273T246 -274T265
--275Q303 -275 334 -254T390 -204T432 -144T460 -93L534 51L68 1082H275L572 384ZM731 1482H955L687 1216H547L731 1482Z" />
-<glyph unicode="&#xfe;" glyph-name="thorn" horiz-adv-x="1229" d="M1087 529Q1087 413 1060 313T980 138T848 22T668 -20Q568 -20 491 12T358 107V-416H173V1558H358V970Q413 1034 489 1068T665 1102Q769 1102 848 1061T980 947T1060 773T1087 550V529ZM902
-550Q902 629 885 700T833 826T742 913T610 945Q519 945 457 904T358 796V278Q396 213 457 172T612 131Q688 131 743 163T833 251T885 378T902 529V550Z" />
-<glyph unicode="&#xff;" glyph-name="ydieresis" horiz-adv-x="1229" d="M572 384L620 253L950 1082H1157L608 -167Q589 -209 560 -256T488 -343T390 -410T261 -437Q248 -437 232 -436T200 -432T170 -426T147 -421L177 -270Q184 -270 196 -271T221 -273T246 -274T265
--275Q303 -275 334 -254T390 -204T432 -144T460 -93L534 51L68 1082H275L572 384ZM306 1376Q306 1421 333 1451T415 1482Q469 1482 497 1452T525 1376Q525 1331 497 1301T415 1271Q361 1271 334 1301T306 1376ZM736 1374Q736 1419 763 1450T845 1481Q899 1481 927
-1450T955 1374Q955 1330 927 1300T845 1269Q791 1269 764 1299T736 1374Z" />
-<glyph unicode="&#x2013;" glyph-name="endash" horiz-adv-x="1229" d="M1159 651H74V802H1159V651Z" />
-<glyph unicode="&#x2014;" glyph-name="emdash" horiz-adv-x="1229" d="M1164 651H79V802H1164V651Z" />
-<glyph unicode="&#x2018;" glyph-name="quoteleft" horiz-adv-x="1229" d="M492 1185Q492 1232 503 1284T537 1386T592 1483T666 1565L767 1493Q720 1422 697 1348T673 1188V1039H492V1185Z" />
-<glyph unicode="&#x2019;" glyph-name="quoteright" horiz-adv-x="1229" d="M736 1411Q736 1364 725 1312T691 1210T636 1113T562 1031L461 1103Q508 1174 531 1248T555 1408V1558H736V1411Z" />
-<glyph unicode="&#x201a;" glyph-name="quotesinglbase" horiz-adv-x="1229" d="M723 76Q723 29 712 -22T678 -124T623 -220T549 -303L444 -230Q491 -160 514 -86T538 74V225H723V76Z" />
-<glyph unicode="&#x201c;" glyph-name="quotedblleft" horiz-adv-x="1229" d="M329 1185Q329 1232 340 1284T374 1386T429 1483T503 1565L604 1493Q557 1422 534 1348T510 1188V1039H329V1185ZM654 1185Q654 1232 665 1284T699 1386T754 1483T828 1565L929 1493Q882
-1422 859 1348T835 1188V1039H654V1185Z" />
-<glyph unicode="&#x201d;" glyph-name="quotedblright" horiz-adv-x="1229" d="M576 1411Q576 1364 565 1312T531 1210T476 1113T402 1031L301 1103Q348 1174 371 1248T395 1408V1558H576V1411ZM908 1411Q908 1364 897 1312T863 1210T808 1113T734 1031L633 1103Q680
-1174 703 1248T727 1408V1558H908V1411Z" />
-<glyph unicode="&#x201e;" glyph-name="quotedblbase" horiz-adv-x="1229" d="M582 75Q582 28 571 -24T537 -126T482 -222T408 -305L303 -232Q350 -162 373 -88T397 72V223H582V75ZM872 75Q872 28 861 -24T827 -126T772 -222T698 -305L593 -232Q640 -162 663 -88T687
-72V223H872V75Z" />
-<glyph unicode="&#x2022;" glyph-name="bullet" horiz-adv-x="1229" d="M410 790Q410 833 424 869T465 932T528 973T613 988Q660 988 698 973T762 932T803 870T817 790V732Q817 689 803 653T763 591T699 550T614 535Q567 535 530 549T466 590T425 653T410 732V790Z" />
-<glyph unicode="&#x2039;" glyph-name="guilsinglleft" horiz-adv-x="1229" d="M574 550L832 153H691L396 541V560L691 949H832L574 550Z" />
-<glyph unicode="&#x203a;" glyph-name="guilsinglright" horiz-adv-x="1229" d="M538 949L832 560V541L538 152H396L654 550L396 949H538Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-mono-v5-latin-regular.ttf b/static/fonts/roboto-mono-v5-latin-regular.ttf
deleted file mode 100644
index 27363d17d074e53c02c3676a7a14501385cb16e7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 31052
zcmbTe2VmRPwLgCEcSy1w4|yh@l4Z+7!$X$jDa-QSBg1x_;caI)cH%fYBqSk(OcJsP
z5Rxzx0+9oOI6&bQ%4<vMqAipz+TVM$zgODQzSow5E&o6F`;{CULSO&CI9K0w?mG9}
zbIv{I+)F4SB$(_bJQ=B6xY$*;scwvrtwy}nG%n1@KJ(_o&k)kT1<##5LtP`^DtP?^
zJiku}UE8y1qo(UG;mZlxco^Rw?jIQ#`gQovJ|SeVjF5mc16`vdcprlDl5kZGtlirG
z{`o~yxSvFE`Gb93z5mDx!S|kUyt57B#XO$ehw>NUIcacc;}(<YXf3|i5yC6h4)=7~
zQ{x^Yq^k|}-x})LGQvF?7>(y#z-!iZ4fQ2Qxbg`ZOU3u!j0}%%tUGz)`-E(sM+g@+
zvY~IpK34D=A)`MB{Bwk(-GY{1sUSoo0VJo^t!-*^268|NZRaVa4pJB648t8>EM_lA
zJ3dlU-~M7~XsB9H%{Ne97iP7H(l7l-#2$K@_C?%HPm2$Dj?(U(L((rQCq;w^4~lLQ
zLlVfwT6Yv`N(l<!_<0;hC{ManRG}!W4ff{*L2UO^a-vvV8;B~4DB6(BUa)VxD0F{0
zmlv+x8J!Rx7aJ43V186&M0i-J+WRjgL=|VCS~OB;)rM)2EIdn=2%VI4c+zrjcs^}9
z*7PUpSMKr9xRzrrRE3{+epmjR$);oHsjA%bDLv=ur|0gY-G}G}PbW)<Jm>H8^m97e
z4ZK{M&J@ZO52LRxXK_d%dS*6oyvWrM$_X45Mu;GCg18RI2OhZ|BJ#Z0N<@)wC%nkl
z=jY~FOva?}c!es;KyCUIGjGjtaCWODA~G^cmt*F1i3(+SJQo$uM}!A)$_SkmAQrr_
zWIH(i5WV+-<)_!=TbAF`eCp|2^rp6WS;5vFR8u}wzvA?u-QIhw^;E;Lb*_o*#$HRw
zU{wm;+_5J!u5Q(V_C*K!9R5H5dDI`iQ@Xy{eAk-n2B$qbp{{>_d+WiTLciBvQ{}F?
zw0_aBD^^p4CKKcI?}hW?H%J6AkP^~LI*7wr(6N-`_;#vLqRSXo^tp!!M5z#zJ%r~0
zLr7UIQ7FU?bh=!uOOyX4sZ_CsF!a=t9nVFup6L?J+)Tf$R;lMfTm=0WV8j#}Wz?1S
zmbm&#b?jQwSEf4{q{&LsWyJ>vC$MWm5dEI63?RK_I$c>0Kmih*kj+4Xf)cWINdWQe
z8s_Z7!j-&%29v2_Ag?~Jzusi3@6SufGsVQ1@)GJ33fN6S!sOF={S2l*uVDrzpMA<t
zXh`thoOTF-4se+@(;o|$fwy#$N9xE%XIRmEk*8vYS+hV8s1Ag}*VMWfV0t71M?REM
z%60IR<BDn(R1m!P9A<`QE>Ju1!SEfxcsXC!?hG~>sw)k7#ynkkyitic%P?)%>ltZD
z2xpX}q&Az~60T52=~5I5hJG>IW~a&^5L!IPhet-)9Uw+VfkE7w)T-X1(niaQeJzz6
zn~e$fI^zmz(WTO-sw-~%Vqwko?w$)HMburnFVFL8Y_>xipm8kA&o+%Eq(=IMCFf`j
zC5A{kR=T05-OzEVZSmfAbN1p9hqbk?Oxxrca-MD5{j;_|tSc_fA3Xj@PA0uJKdqrW
zFU->B((@nXj+HErFlS^&#pfAfG`31Y=^q6xcSPc1CYgr?fY4|=zDOJ_1XB|X43DH8
zH(*~cgsM4Jq?dVdM<Nc=^Wt&O{j_rzfciY?{Fq`5IF;i0a3#$&fa(N$R1n8VGZYh1
zX%?-t&s5hlv@ScvvAwIPsB60;C3|?Nr`E(Z9-Dmc`oZqlZ5fw->v{L(pqD*A{M{4T
z>tnkPjlVZ}4AoO7%5R=iet3|eOmT3bAaqWzPqD{~5qvW%e^@Tx*|#-MD!<Oem81Oe
zLtU}!%}@Ln%|!V$>-UeF*T;4rye^kdE|5P9ox(Rs5Q%n11qIFv@b^<G6+B1hkxJlY
zRX9~e7-+Ix<Sl%1lt`64pTaHh+-svl3$Dk}H8#&4N>2RbM<=*vI<K9fPk0uezP`fq
z$~wBnbAC0@x0##}mJ2UJV(6VZZ~{(TEKmaRfEnKfa^ygSB3Cc*-VlW<8k{#mtJbN(
zchwf|EqcbYYQnRco}S<XZ+eR88#n1?V5QsR=Jt}Gq0|s(phD#2wnnqICNly}vDvIv
z3%57Q<V+vUO#PN2W1w$YQgOxk#m}QnA8=Xxd)&7$zveq5zBt_K5NWVcKmXno&rNYz
zXW2M>GW`cWoGM8e33EaQ6WW27<+Ls}iGe52njLI9&`-jWY)MJ><gl=0dlGKLw#4V8
zL`J6M#K&3m5fOR|Bdy8ly#j@l<K;3b8AX|ev`%h<sG}Bo=}E5hiJb})V2*<qI3*q$
zN0LdZGdUqXDpJ5mfqQaNbHFXVe6yU?=~L5^B$?}DkZNBWDb?#C8X`m*8EMJ3Sp}za
z%X1^c*S3{7w_Y0_xwh3g6~Ng;?z{WMA+BKR+v>wRAGnV*9eVG9y1ED6J46>BdhcX?
z{mJ(ZdA?7dKYr#LueN#`kDUDGE38M*9(V<Mq#)r=wTQ+EqzcF?B6T5bY_vMHXic{8
ziV4qNE+tra^Z4Z-A=hF^dxQ8UNg`&a0kTeDU7`ZG+XxUM@g{Ul5ZHudWkn~28$v|Y
z0)tj-rMDSPgwEGPMgmkT7$z&|FPuwqB6X!J3#->u>TaQfBLh!tC^FXe*gadhpWVZS
zR<2vV&}ds(k(OS+u58(3+p3Dzo@_1IwPS0crwwgeG5s<B546oe%AKxw5P;M+h-flG
zM5RJ0Dn`&KrAQ#OZnssT5IWG{a-q&qn3HWbrKKc=>oqE-0x{WZ&A|XbLd|KgET!kl
zGR8u6bpO7JHP!k(I}5tX^|wkkJ<->FX`?gRwz!~jWnNUpj?3Mhmv>Z8q*M(Q7x!1C
zn3_k+_wiYJ*E0LAyLGN*c?%yHDz*-u>q}p{xOPEQ&9eUN{_{h5w!zb#c`IB=+Ood#
zvL2TPA{e@(Fo4nX2RAS{Qv)#)DzHJWM)b|tZgi@!mWd6nPR%qXdCEdHlBO&OR;yO>
z55N8P#MB^n_#0C@=-cu1|DN$YM_Y#YKTqayKgb16Uj`*NqMme8=*$zTf=j1@0!o0O
z5EX(rf|e)*PQmagjW{ZV(&Lp-sfppKI<;D<iZO(RfmQG}n@=n;)TLM$O*0J3!bkZ@
zHTV0e@ifDh#=Z+9g}LjmZfrllz0u#TJ~ig*FW05itgSGY+A<b!A8<c;!Lwt5zGBx4
z>jtmiU7g)~wr|JojMi<nWt&>F1Lr43qFqPO@?>$Gq>w_A@3i}YNKI4}n9c@KD^j5c
z#2__QYBbjYRF!jeX{kBcsfB5UajEHACR1qyhF?%R_*qRCz|S3mg$G?InH2T)f^Q31
zc6?o9POK1J*4U9fbiO|`Z^Px`#=V0LmgohA{SW=**l#l0>hjg*hW^}=-g2GB)hmua
zsdsg(-BgrdO^I4~;A(sS3->md8`tjGU)tLHt(zA&l}(Mr+v?1Y&Qtx??6&Py&aEr3
zD4?KeB2-E9H^CVT{4?f)U#2LaL(=5Kpz}=Og!Ta*DO628@pZ0!@?-vevFfv%V$daU
zs&Q$2-vpP+BlX1U%#PwYPDD{)|4?wD<q2QrS2a~mhb_mLo~SV@n8;Bml(S|8X0~0{
zZyCyXpNi+xWxwz&nCZr@+>R1m_0Fd|yD#soN^~yG&1|s6JJ&z5eA)SpuCr-114V4I
zVA42?`m56tlS`J`Y;8`RuB6>&U0RYP<P2TOoL{+YZBfs;Rd(B|bG=1F9aZz^moDtK
ztvuClv-O{v{0uo$Q>*)nihIhElFE9x|6^ZPnyhmz&&xyIx{_s}m{Zf!LK^r7qnJ{s
z(*!C}Qs}xhN-6;10(4#oK}IKK(AK=fQ^bR0D3OUKIVmb4Fo2}c6qPF6kem(mB8ZpR
zgv{;)rUMH)oiz+}Z}$;CBOyB0b9%TYBa)x*XjqxM_7PCd`pYAW?j69pP;2M8pPvc)
zB%{5yKy9k;%LC~oX-aw?*Ew5PjTOaPQ==9ie6DTarTdyQ7OvlWtg3YR8!ukmQt<@+
zc|u-&Mq$_4Rk=AGJFA@AI}6D4G?xhZSRssZdJ>XNz$QaTHounmjZ=D)U+cCQ07F0W
zxcMT$q~L2BzZOtIWFM%?Z=Cp`fRZcZP5v{XmZ+dnDFvocDWk*)YNZkMwAIS>PP+Lf
z?u<J0<2UK{6Li~~Y`yp_9TL*{XF+>PlITo8DNr#;7XjVziy;&l1@n@Y5hBS%rd=@V
zO`qJ$?_`OecX8_V3&?k!d_zbU>ZIBQirT|i#nxnd%5{Ep@(6ctVIhCyHP8MNo_k*Z
zA9Wb&er@`%LX0%R7V>7T+aJn!G793cP#sZFULd?6t>NS`2JK7hnIf?+rq(_0UjxSC
z2f#u98ZayQUugjfZEtUPLYc|VG^T?<A)}!2V`@8iNqzUqsM}nM>GymN_$}7U3SFX}
zPE&tPVRm9=f&Q+sjP~;M30gM#NJrnJ>+-W3x-#OmA;Nd_^70A_@I%j4Ew3&$>uQ>p
zW)F=<W!2^^+P^%@(tUVo)vop3>2W!>q7=`+XF8pkW`_e<bxwaO91^dCe{_&1YTe=J
zd-#0n$1QG9@w}g%iX@jRM4=|e8705wRDLSTt9)O?nszx?3JUY%Ilmr!g+LK`!uXG}
zgD8~}k5+VGiCLro&WsFF1xTXeiK>+;sb3A=?hI;MqEAmtO-)HnO7dqW12!x5-t`a=
z2sB0U3Yn4HZC-KYdybNT^_<-yGKNMKOcS$*NhlZY<uxV!HAT&8-GC#j%A{8K<+g9C
zENzQ6^8R75A<23Aa4KXEobK#<YFmXMX0Co>B;HYIi_|P|R#a&oc=w(HQAn>I*!|#=
zZC|_FIaMnfGqalFQ)1(-jW#VG(e%`TCC<FulAINL8it?WS!zx4sM0KP{&`({s&{?+
zaLvjqA0IyOqX+8!)boSK!eYbx25wRM;J_PKj`ZiQbpPG+xBd;bV)|+z3<qrPHA80H
z51FBa-jM7}^k)ls$a07ifpklPgBgQhnPED<q_#2R3RDFM5T5VzM2}6-pFBjrdvofi
zbnokQtLI+P{aF(i&27OXCRb5<CrXbbI+Dq(2J<kbSoul{?UHBQQ(E?7ESVOpkgJM{
zA|%tSPm0n-B}UIj<_N6{LdBxi#`B<JCRrkxj;Pi`eZ<(LB(obxkrdrkI==Mk{wBz`
zq84+0S49eK+J9}i=XW$Nf3PWo8tVEBJU^vePH#hIM&p2ON_11xiWB{LD{6DY)y3^2
zCH)Vt%B9@pssEwLuFfJyXK505jwTc=$tzl7k7jF2X;r@*9K%9vP74!>JST!xKwlQY
zDtO)}9HH?tBM6jv{91^`loW1CQbO;QNX;yySY_&o(wRYeK}-<D3rugY3(Er=c0RLe
z=>ww+?J<<b*cXnT=oq@XqjuhepRs05wX3f>D?TtVKC`B`w0cdA(T~2^cX?~6W$Cv2
z&o{r_eE$CJOD(0_uMWC4EXgv|bgvt=y<;04?yfbM7p`|<%wbg&MldRYSoa#8X(IKm
zJG`R+#>oaeD2R}tn4oBNFaYOinOK)bASwbwz^g6bGq6adJVcw%{^^NUN?V`!)7ev}
zHeFqBr!;ru>L$_6^^E`h^qSLuAMc^!{LgpM=EGkb9vXi2P!q@S_##@7gH{BPG^ZZQ
z1p!y+!sKQKG9FFwYA#Gym1s|1UaHvwQ%d~zrY>;bnB2pUO_gz-+{LNMM@08|kCBxP
zyQffuvi*q8sqs=X<cTCnm@f21ie~yRE0=$N>e9>nT~kHe3U2SzPF5bUKuIqwV9PM(
zR+8tmWf2(mK*Su6l{OX-3L--HWyODa=+zNy*b|w;o2*czn8h!Tdb}7Fi9u(!N@3Zu
zKOS9rX3Nr|1PpubqOp_9`mgS8@Ovr1Tsv6q>aWYz1W|QTZsVX!zp$Y!iu1fr-+yiG
zAf?vjcRg^i<#O}Ile?DNipQSlFJ4n;FxB;qY_vUN9~<edGf}FVpQfdi53~Lp0e*@l
z+-sfjzz<Vpx)>c4)?x+6R%y3!j%6QP(qrt^7NPjs)HBaL$1T1Fe6JMUQ%AWCti0z?
zUc6Ku@GXLVysAG|fiMyRGth}{m&i1KhHoaupW{b7kJ06m_tV9mXGHhK&yQcYAPloI
zyP=0hqRc45bOH|CgyY$24a4WfG#2nl;mNX2U{T9zRf;7Zyc_uB+h66X?|P=M|EcXY
zey{L`ngOS4usVek-ID=*SGJcsMjz`d8mv#xS~ToHZH!Yrj@srC=+6F-{GgE<4m~NX
zg)YJ{5*nrsmDCTVgbh1*Ak}dJmtKAK2z}<)9-d41HTU>UPdKoW=jNiO_D;Toa^FI^
zl_*yv3!GSk$ci{!>Z8CAri~{vd|2o%?wgalCLRG5Bi~8ntHWIoTUGlrb}6l0@r9!!
zShFxZcsVn05=4T+&^!fOorF;f8W=`(d>F2D>mMlj=!Ia<f3N;~@C#^LD)&D4b2-;J
z`3d*=)Qzc^Q3*<gxk_;0){n$HW0WvwLkuu0WMM4^Q|i7tRKm1Y2R{H>8)gw4uS~to
zzx)bk<zE(@pT91;KmWSGr2lG+To-0b94TPflvq1DJjcLcGMV%eHiJZH!#-vxL}7|Z
ztE-53h*l`eLKj_-(>!u~>C)pPE!JpC7g(jI6C=&m1@t94FD|pHyTsXDl^F-u0C*yv
zN_r|Y;sPkQui?>?yF2an&bv>ZZ+H?9cXvq-7aF*n^}~JjCUbq?@OsPBmJP%G^=9_4
zA&1FC#yz%5xQ}5gY1r#wFyL>md_aK`N(hNr0PYw>0<~%dvoQkS5K)r3enuo|>6Qul
ze)qL~_4WI%b$fnI6P#<COs2*mr{~vP)znR}$^3PfR;{|YE}x#ISkbs#t81`)Ks#1U
z`wNGGM-A*3Xom`xGM?5b70h6EC!-N?nkM6vS4Jt5q2zrTu|6pS%&w!+)`j_>@A7=;
zs9Jt<bde3%jkdLno?5>A)aXLs`X&vC%c>bDFYB+7<PGl2$_HvP8E(%sKYsR}tRHOs
zpU}MSd(J-Aw7Ut<J$dZmi6+jzd33PRoY6Qqy4kkJws|9DFCI2-wxd@!fZYwiZYaD%
z=v6S|JwA;?vMDlEdxp4Ewdq=~okB7!deKXj&_R4cpS$1li<|TrER*Zgs(K5t*mz^=
zwND-E7G|1T)|dV_*E01SuxwlV*t*J1oi))@C+2bgMUyM~TotP-lYnVTHi2SS0n^3A
z;>`S_2M3eE>&>`r$SBOWS+g>d!p)NVhN&L6*SB7Q&PBxYQ84d%EqFf0#6MlsIclwc
zbnn82`>!ln=|0fHeNAPqTjjF$HD*x9%Hb^Ay8bp-a_hn8TDxvNu#A7zFSl*9%(ki}
zhmMpkD^6E0sOUemV#UdRYw?Cly~P7HY4L?^`Nge;sljSPZbkc=lI{~-S%vE#8!TH@
zog9<bivB?b5%vM+N)qFo&p7;TAuFqP-h~w-V2Gi89>)tFhmb3Ve)dN(^gP4RAz;Xb
z5*83h3}&|kW5hVkQgIfL1<4V~B3puld3kY|CCtl>!vrVCRowO5;OgggR8Y<>(3I+-
z%F4CXdMHrtNqztId+O`%dA^_jU{YVQWm&F$`IZv?1JnyMwy+EJDoBJgl(l@8^p-6d
zOck|o-L&l+9_vL<&RaBH*#B7*vLJUga-YZTJfd;N`HRR;YtVRB3ghkQdnhx6F>53k
z8n5H=-x7wq-NV<$Uw!%2uZ_EhU%p5W3i{8QgzC><0*m`V(6f?TQSvdA9Kbl7p8^sI
zMKeipyJVl+R1y@B6%@@}PxC+UwA1nTJzw*@`ZIdn)BaO_40c-cR3cX~b&LBY_d`}X
z^Pn;gq$07-1<an0!e@6LMf*CB7Ngt_TK7Xw0e_YE6uis*nETn}@YJul1pYY6f`At6
zD9exOS$>p*0?w?07(5>lpho6EVU!T6mMDQqq!eZ$ilXJ*UnYw<?#ENP{6pL$kK8Zp
zIe!GeS3KY3ZHnFA6+4e2cxZ1B7?Sgat=Q?T6*~lmq+Z#6@e9vJdRYA3Ken7z-ef)f
z?et#$k7yk)S<%tYQ6}P{e@KS>FbwW*pW-^765aoJ7qy;3t%)<Wf{eityHFM77Nb9`
z7aV2Y2p>6Xt&oNE6g}b@{pBweyFaZut2iLl%00pVr-Wb32PJBi(0kj2ua@L8BP@u~
z6eWG&Ds}Fn#m~GI9E_X+lYgZjm6f6O4^6KUGST3F;)@X3gvy*;!=E~H2K78DyvCbE
z=Dqkpwl=_jHB+zGrZDr$0f)G3Ihc6`2LoP(U_m|eN`?xZ{Yr+4oc&6MV!rs9j4~AS
zKhC_8p<-sglA+RPzhY2MKeU^IxX3CPBE0`z@cLgci+I!NPk$x6M*W#2dl=lqCNvN;
zD7(yAl0!v>31i3H<sfd3r*IVz1&ql(7)HtXURkT8-o+tSP?;HaYerFK5!Ag@7}DT7
zfbUFZGLmc4GGjQ?c?}+FxG^JOZi7vYc}tjMb1Wc`k1b!g!n)*8m$h=wOY6U#<XTx^
zZ!Of`q6Nc`_ANU<>Ix5?`qZ|fJ~!m*r59psEfK|uvDx~_?8Rec?fct}i?bT+@v-LO
z#DWbSxu%W-9Ued1R#V84SaX5qXPpD7Wm&PTx7X0yQurvDzx<Ny;0+F>0<YC@B5d+7
zOTh3k`whh#7(CcW!~g*f<}Q)!(3Q-1PCA$h1}tFUS=0uU;kh7~x-uLFgMk6!c7AzU
z%!PpA$S*AoN@9|<sFEa<K1Iote6K-X4nV*nTP-tit5BM|_R)dC2W@^=CakA>2QRG6
zok%EK*Ob{*oTU!UayDhw4V7y-^~P_VTvSuOT|uVaa#ggPczbK(u_5OIQ&Ey9C8@}~
zpm^=kMhx{aV8{Y`FpvUgE+QqcdX`84u8MU&cR{6OQRSF603$pliJI7$sEB#~3XvG7
zK`C2PIlIM61~V>hc{$A-xbYmfJ$q%1iC&}C+s-f9esjCSfuGKcW3Fp7t)eS;$yilF
zLgm;VO<ujJYHv?L+o?C!rmuPPR9n%i`&+VFUHbCjgB9tOhla~Bs!RgLN~4-a4myKX
zSgv9~1u<}zA3p{&9HZwYT#Vjq2flCgz5v3!_`dOi6Q7OV?fkw)@N5V+dMPubC&yAm
zMq%uH?);f(3cH&53gN0cRJ8s=PuFql#1)n8bZ_^gBaVs0%60V_b&kx?q-`Ay!<C7g
ze(T#OT1p&T)@Njct8CH9Z*6Qmy0$nnEl)@P=349=I@ZW&`(9w793uzajX0e}G10Kh
zLVc5c16?qS%gzCGof#FFO&k=d)li~O))=&g`H`XOdHy7UCNOij$U;A61}*}+Gqa<?
zx+eKiv@kDlhc~=-pl;Ej@#SOJHs(!!&Rg1d)b^aStdD74y?-FLx5*yBRq(p9f$)aI
zudh$v`@Lgz&BwmJeqqg?uG}V9TUu?tj{kOA<7jP=ZS|rYP#)aD!WxAEdW_wf6NqJ1
z5d3~j8bY<^_#O}-gdwwl6oUatrbSFDs5a`b<Ycv41s69KtyZnvXv7Bq!3sr01Y5z;
zuX}z%(~E{5?sV;RMWzio_Uxq>JuCTVj@1o5vf37@elRG4?zyM#*d$!0969V+BE$ic
zY0x^4$&)`Ekx>MJ0ir?+PeWt`WHqyqve)#Buf6<21N*1UAS7NPJ1!aWrHNC*;zp7{
zl*KF*M^e_l0<7KXpO%)AmK+8X6`XUDa{_@N7PU`(wR;(XRSp@MMPp`WzTzSd7mQr!
z>pf%jd%AS%)BWjdhX;~76RT=!l3lB7Q*94)^;{S(oX~>mGV6;nLqjtib!O0=R;Ihk
z(oLWLV$G8q3&RXm*5S0g#9)2(+KT0l5+5B#rRVGDCyBXfQ8FdUHV30LAFE$fGj)R^
zn1=DkNX#ZoLa%aK>02hpNb7GO4nU_;+#8gh_LtOQx`;$c2}EQJi%WtYoTFDF01G!3
zI*@;5_2NU_)`?x4+K-ziCin*zucTRnj}A?>a?jkehqhKt{t*qqn7$3_S}eW+T`Phh
zc)=I`bld-3EVYKIN6ZPE1YanW6$#@r77;qjM*lXKM!P0A(Gdi!wApj*x%h7v@+bQ*
zT;TpeUo{sOn@xp<tmbz;wR{_Djv_kdv%?CF_XqO;Ws9Oj6!Pku`QSkd-qm9@3@EyY
zGOIUqLmq1ulp>i>tZMD-won6?m^buDZ(ff*P@QAV3d&hlmf|@>8*RDLKbw&M`D=q0
zhVqpDXJHhjG0s)>`~~_oQ*p7$R8)ky2bEk{4Mfc&<u6GlmYE?_%Y2jL7=EO+H9P}&
zM=(ZsWDTDAf`G(3Sz_p44&1u6mG=DFQ$zppd-{*Po`VW9xo8jV^%PCrhuWpFLG6A(
zzzm&8b}Gl5LBV_jk`U%1bTI>qZ>&HiY^)fSgw2fAtnpEh&o01p^%`nIl&G))Gdq#2
zuXQtBYMuhaK@uXNa&wr^(xcM*h<VIFB4sPA3YH#1Ao>JOqL3J8w2CT~#kKNhrU=~r
zD7k-7OClrRFrCg1GnYm&5|(}<B{EiGZZa~Sp=ZjA+BJ2jvNfw}H}7`u)Mjczd3Szs
zzBAY@<oD+}>BgL5dgA2d`+WKV8k&$6Ir$oID5;=k{p4c;0#4<bmxlgDk@^?IG4G^d
zWSxLR4J$&)IyGzBA?`>JB%<?9KCj)X-5Cf(N0F$o<OrQ)x{{jhoqo*aBF#U#D6rtF
zJpVMs9R<seq)!O>7Z$Cgnf;HfooeQusp@saF0Y&X6piD^Hpr(Iw2kRr%=Y9pZG-E1
zX&y#HL?TMTHUCN&;<mC~FK!rpX;+!=I-#%MSYJ0<uTQBTt*_ruujf+6zIAf(;*;MR
ziyZsr$wiA!esiqp_&TR^-SMW##^dWsO4c2hB<Hi9PN7(8SqkZv)ITmEenuhmX@5S2
z0r>K20p-kGUBWbOrugCgZQbq*5YP*fXY>N<)#?}r174+A1z%XH+8bse6ho=&?>S?e
zxa?<puuoFzbk!pb?OT(Qwk)e3snW>`owIQ2Q}KgMrIkK~ZehvP-<{1R>+Y9&b{IX2
zm3o#&wt4kkrXHbtOg-We<_LWkZ|JNyGx{#;giP1Io}tGaCy6fjf|=;@_7j8X?Yj@+
zj+zjJmQFoKO4;mcpODHQd2F!r0h{W|gzf$n0~bdMCUjN9_3c~qVOd4hhWe3eolg;3
z^O>IG@`@w@bpN`NCMOq}faovRFgi^svn*tx&tYWHJI7)6ChB=?u`bPVJo3Ir?;H<h
z9Ib<A##@OVApw|B;(2tDeF4vz`G8nXj)VjU1^TN<7#Ai&TcVImlEUGYOBhvtG&<K}
z2wGt4vhKO4zvcFGO$ZIV(qD07Ucjc+Q#C^V)%F3*ShgZz>#u@;V&9S!18LO(EtG{P
zXTWuFC;JuxpJab1)3Cka$x=jvWO}#pJEI-_b;}<dDs+rIw7eJ5p%Y2Yj=X~Qg82Cb
zJ$1e3*XEUMywthw>gM7J!P?lFF?N6^XsyQN;4oWlU#V+!Np{Y%?UlOH98I(_KS7h7
zstJy;*Y}rJZCYe5=-OSL*N_>$gz=%H=vA8Ngf0rNOfc9`2vj*1o1q|z4NQk4?M$Bo
zcENbP5lG-T2_!)sk>=IrsO0!TM<l0#<k*EyDg`idz4T#EuO_!TE#6sVRYym;8d?oi
zJC|8K|3PC#r{}X{Q!f;^WQ8mJ1BAUn5y7go_9MMq-7!>8$qQ&(0yt6>DZ3GdrZMG&
zt?xn^^OIU6kGHg5i}bz}1WDBSjA~3VNtP88IFBS0L(7-i3W^4m^J{IFRxdsX%_KIr
z*}DEv;;pAoHMLtup4|%X)%LcH<*~~ec-7}`p*`K8*FLmIMPTt@sF4jy66HxIz%a?6
z6vf;c%$~MH9ZEA^^;915lzxr+mzMIGpT8w@f7m;Or*IoeU<nL_r-XSX;OJq9mg1J-
zunSj*gJfY;i?YK8$bMj^N>MWF8f}S;d3N*FxR@=Ee{|w<Y|K+9K6;!Uc<3SS`c%V}
zE8O+Z-{Q_Z{q)o-)W8;lOp@l4FIm}&XY6-(va$_P?N2>J^!!geKlc3ieR|$A^b_tf
zJwEk+r+&ePl+$tWFjG?IsTJ-)>9Hiqsf~uRBz45s54wy^b6OXfm1GT-I|JOvtIZUq
zB}x<nd~t=DwB~zLKMN~ZG*TU?(Zu@2E9XbgSL%zibpACS^Y`fPy?oK<3F#}EY`m!8
z&Oj2S=R3mh7nH0O7tqHdwBjr5a~L5&-N8O*W%juUdYBuZ?BVuL?d3<#oH@WRcyKS8
zUFtc(|5j0i7(LjtwNPTPMB|Bo^#lwoaI|tPa0y#M*oFi~Z6aw*Pg5^YFMuY9QA5x(
zf*ez<2rtD#hXq9Q5fKRKLO`@M=lLI&tX@=<7JlE6Blm^s3l<HPM^r5~%%kfzZd^yh
zvzi^A6I^Q9(t#oC<@@*0<98pwVjUV-T9(R<a?YL|MOU`m$S~j7eA%(R$BEW(v7Qaw
z_-z{?vn&%*;<Eu#2rzE^)G5yfr309l>02sW!6AkZE)muz@Lg;?fG?Bvk#!3eTEc>L
zh}f8#qQPzvwo3&4i!g|A99VN~EG}M(8el=#5#f;*bP-n;Sx{Qkk`=*v6KGge6<$8H
zs6Zcj@bKY-#^p!5KSv+7J1%d&Va~X*<x0^G^kLN7+bifQ-E;rtrpNX#!F-@3lb#SB
z<`YRW^Wr75MM_vGR+`d!)7N6cBUnY+Fu{{XeVTqw+;55=%MdKCQoO;jQIU~$7`3dz
z!^Wm{r5VljwW;>rTwReddcU!8U8#9tLv2c47hag6x&Lr&Tag=@l#^(((zvWrz1p>9
zsWmJqN0Vux8f%3f&H0PxF!#RD2)qT80(qxSgpXN59(V~)Qa(c26QRpzK67>LFJb{B
zn_9t)!lbAo;1!`Wod3kccMEd!^7Hd@3%H)iG_i%PRWeITSRoHg2f!k&Ct0M{Srxm0
z6M5|OfyWVEpt+VH9-ehx?12>lpIezRfobD}tEVJYpQw$A4x9&TP!`RaZ4L77lwm7$
zwwneHqd69#U0#b&e)rz$iO%DlSy}j*Xxi6l{jyESIkwU@?{~is?K$dRnZEMcv7XT1
z{BmA-|DNi(wjoN^V-D|t|H!~%T!=y`U?0qgiVFUI(EA0x3*kyq+*q09UiZyrVAMbi
z5in}1Bh~8g02YQ6g?$-XCG6Iq(G;E4!g~k)w$O$5oPJLgr{R7>KmV*YCOJ~2dg6j#
z>88g!I}z1)E2XqG)6(utR#7Ln;Wy>`GS8e*=2karesh+J{g>7k=Jp?LEpE??NvU2_
z>iHbz5RME?|EF+5$i>Rh4$V{(Js+N4o@!%){lGC2RSM>LuUVkxXq8S0-(#&i0fH<7
zL@UKRc!e1{BgwKb3^3**&n&q!g3RfklbxO#8J;L$`bn}3=Ef9hV~Wk5Vwdz&SR10i
zVGx`K=Oy(@WS?D^f6Q@u@#0gC!M!8;RAc&<y<>&Pnwst}+_G;+sxdWb<G!hs?AFcY
z<(pcwvRXHlmv3&(UX*RKWv;z<wD^JMCFe?Z+`A2NRHmH=c0125ZaVJRe1MCu+1FE0
z(6g@w*ZlmReQ3BA<A^8(NNw;<KZHy$+cejWMHvea=7lbQ&>+~8C?ZaeZ9HRZLgqnI
zOM?gb07H;cvIa?>G#HAs5D@)z{f|5y)Zy7d={=t96P|r^2U4M@<41e|_rz4@R_>`S
zo?EnH%jK=y_c1T0J%8cg8OFR+GTDSyF^MhBJt;bdgF{b=06GBh@LnO{7V3axtC*gc
znDG3CkDC0y{5QG3vC(bysD+K7&1$le=}B$%sqg?vE?3`VLv$~<4v_f25?zy2r82S3
z=i^M5e4H2-HaJ08mO(+X&l(@e^(k@FFVQNXpdcp0SP$099w0%mK85}$Z0v3;udclN
z`JwKYPb{4%?A%gVG18c>Uvy9B>SwpPI+wUAD|f#zwBf~F<r8TQqt&(R>-CAv`+L_u
zyRBsEH>T#~hQ_3p1HHzk<hms^b;$vGt?OWF=7HX}11qvjeNSxR8rGD?X>uDfGAr_O
z;^NA?_pe-WC@t$i@1lD<EqOy12lEGNjoQ2hQ%+T0R&0Dl=RHr(TM!i5TWPH+$c_!1
z9~9nGnOR+E1yX2&@CpAk_HG2Q#i}!$DQl#Ix#P-UKS@dgQ6ubPmenSC);&$I+h8C;
zr|EOPJFx@y5EBeH29v{KGQu{(lck6-+6xVx&B1!o;DpX9N0#~fBFlW!3bA<#f%Jf-
zs5*#B1vafv_;nCJzj8lN1q;Mxa}5RQ(h@_{5(Ah(XRLX~)EXI~^O}X(kT8pD@~qKh
zwmc<^WoLFU?{M=g_HJ@?x{{JyosLcW*3r@`eV#rv6hBoiI`wa5TOM1v;;}7dxUN`<
zYin{@*QSHD>%V@ir3J>=^>1K*<;xp48|zmWw>s7|7`Kd8y5cRBscmT$Iq|Nlp6+Mw
zuBpBIYIoN&yQ`~rKhxE4Y-fK}YTKFbjE%kXU|ZXR?_dmKx##(DP;ny3AUA5=I&h%i
z@GuC}RQQrG7P3!e)*DP$=2KxlummhUl~{F&AaCzV0M;;tLSkQ)2p*Noivt6Yd{B1)
zm+YvpZbO?85NCfIkm*jhONC5qcSa=Xz}VAt8A%z;IFq7FO7deA!X|+-5qt4$7K@dQ
zfC4+gU}<9p4|uC)IjbW1dBKYKkwu&KK70NMbrhF2(~H#9yrH~gO>O$TAkU$g0!xbO
zaASv)`!}Q2P)fJ08rhsvQen-RXIbJ%)RhmGdEUxwGi_JLC4~;TvP@ai)8t2F6aOB6
z0`c1qPFGF;0`c1qk~7o4AfYUNd-@lM@@C=Q(hd6eD&5R~&TG&+hwP_}gyg1V07Egy
z*%|{u0PxW-zHh$)W0|z1kQgEV`NY(A-a$80)kWxNt)TYZLOoW`DWG>JsdHB6P^F62
zfXym7j1{)$AevWX(Y*dtDX5fPUL8qZAWI|1_HU&+9r?Mb_Eh_PZA5BnYEr<A@%lFP
z&gNB&x<%}Fk*Qmu4AZ5gSg_p;TY7Y@EyvziKbvS<zew1$Va>btw&KJJ*8}Ue?A)AL
zQCL05#g4smwzc)_J0R9GZEa`X8S8##cTLUiXS%zu?y9cdb@jn1Zu|Vqs?6MmNYAgQ
zx~MtbZe+NmqLzPqM(f2JrsL0ezL|2*zddE+zAb8x0lBOA*ZFSHKf~B8yB6pe<H3An
z#S9y%vhwKT!`|upMFh}QY30jvEFER3sbw9OoaN<dJ0f(MF)?OcSeVWn6O*Zn5MH;g
ztV~O*TxqqgC{Il-Uv7)ZU|%z0VzZLM!;`X@uy`0j!kNN<gD(cNNFJCkz#5^7BZ`M`
zN|9q~kD?tD4FTGcpae;<?Z2}(39^22-@tyuQ%`$#(Yv3fC6ll6rF`pIPd7b(mOlJ>
z5c8TBau4xOiZ7FRa{2})JEWIPl+nNpmY!_4HDn|Vuii~uvd@~u=YJIhSU09U3(Eg0
z2v){denfV-ykCk=3Qh3_MO(3}R@xb+P|n#HrquFJPF<#&l3Z7QO(i{_-Y{IwBD`WO
zm4<8d828Xx8eG__%POkPw{=#gX&tTh)XMV8l;ey>O1WeFqv9>_yiGUeW5%+68_{M2
zyF(wCy^BqO{a3=unf})T^|G~9iC(0C3Ea2o?F-q^D`!AbA_A2|ld$0pL&dfjvi)we
zdj(CvCmF2LjxAdXn?GF8qKZ0KX<iL|#8f|6=v>=is4O|1v2ethw`QT`JZ&r~tAnp(
zk<gcKG393(EiHKoae0gExl0$MAI)8opAeJRR%9+Hv=k!>kJ599l*pbNDS<wF!$UB3
zY;*&_dZbru^RF*bVh)rXDKQ61j+B@KB}Yokfs!L7=0M4j5_6#BNQpU6a-_s8C`3x2
znH$ihJ48yr+QPMb==q<+;<r411K2CDrG~&75J{Fh1N=}*7&aqgX(U^Z=3}?4WIn?5
z^KKG{Nwh@37{~fPN&aMnq(}xYW--NQ?00~E9!VlY;q*_Ig3xE%k)&-8DbOG3n5LjP
zbIs1UTTl5J?_PSM1*Z0?6TQ1@Vp}TtgwNmFSW;Q-F^D)8gOYbq$M?a%f+T)~H*8NW
zi`$bN7pM+Fsi|54aghkzW7-GfN?J7^*}CbayGly#dTA5I&g_aESNr>(*;)Bn6C3kS
zxi#D``D$<!wzn5Aq*XjCnb5|hL}_pDY~|`xw!UQROzx*_^GQZ=G0XIhrydJx7Jq?V
z%U%Zsnne+-j1rgOOSKe~A3-A2^Q8t#o7EtW+0vQ?^Vzvg^WyA==<~;wiG`+^@U+6z
zgdA~xYLTI9gsusgpB%FwF=8ISpVhX9dyxB^_#7hCLY=|4cg?Pn_RPX~p~Rk9?r)F0
zN4rA-*`Bw1jOmmi+;#pH@N?#;K#Ui-DH^!aC*;boh0N=u_*c$Bpdp#<cQrQdYR|}M
zyQ{HjS9|7Tk)|@UvD6q9Whyn{f21&0y}dm<yM250Se1NJm0p<>AD>g1K9*K#jgPlh
zreT*C`7=4od-xmB63$Kc0aHqHj(m-<FU;<DM0^pv=z`}{?oWB=h@L$3Hx&&gm#B*n
zJgb=|!Tm|rB-|=_-xx_kzSH7$>@9ofmP*R~G57ntbIA87h5NvpPXcEO2={w$zGUQk
zPQ1zT<tdTx66`yGM!t*Ff!yzW`IM|W9{GO9@&S+E@oW(Ybc+;hy6CHQv+0-&D<u{?
za+r}f#>5+Cgf4Q}=_k7z62An;3gkMmD3Zak>B<@M<t<m(5CIDrEJ%!gd;uvSceW90
z_LeK|N7OIAAS=OT*KHg!G#Be9Xz{vJtz8eUvS(CxnBp|Se0+W$vzmaSFIFzADmCe9
zTb5eBu;ps^`W{1EwzV*Y7QmvC3Cjv=rUv+8Yu8{{W)W2r%3^9*V1_~^D!O3zW%^YY
zbD((lS3p3pBVJf+w^ul;L;PTZ&}w-tcKBc+%i{FIuzux*XQuu@J>TB`7MIDDd9HEP
z?D-)MPni7ge{i(R^Qh=P>q$EUkS*NTF(VM+`&}U)R=5D{0rcb9E<8%HDI|(gY@WP9
zYdjO1X%(&B?72y6H+x?2+<=+2nKo?qjMK*Lp6i}#+iA1s8jGr{oPG=u&>zEomP1OJ
zZ6yx-lk#%Y(=<3YK)_-gN<QNaqnJ2S)Rd$OK`HWjj9`&4nZitAdMVC{g_^T4r!d6o
zN}F$3fCG;xT@lMtX<I$E^|Ht^X=^<TK5zF1pLZP18$5a;F<TqrjX&>yq@d^M#n`l%
zKsxyvjf$gxNgi(SMxk>DX>gb)BDvS~#X$5-Hx0@f*|M|98;o9F@U-WXj8(&<xlfiq
zRKeF;OXP_3{JR~KUr)=p9g+St#&!k9HiX2H94C}71jh+P#9lbC4eUY%-Lfq+66aN`
z2~o$XW5YuM9->ag-YJCSs<poL91Eik!=udVbhL{`jNRB-QnK^LnCJHs6Evb>Lv2!0
z&1i$@_WZ1P{lm+bKfJ!!^Y3^no%*Gzw%cm!sW$=Xm!ZSgDIzg0%}#%83J?<63KfEi
zNzQNpz=i}OV5UtknZffg^IG!id!tkk-UYRzq&O`lJ~kQZ6eI@x)sPn6CS#c@_!N$r
z;Dj8rz--g9fk>gGT{jC>-M_eYPj_x=W{Rn-smx?qwyQ3!t+^~bJ=9uUo|sW)j9~B0
z;R#6z;qh6;nx4&6C?0WdDNb9oYf0mpMfKU{nu>~+-jc<4ElLjviw=1xASNm}Cex|U
zs4uTvI8c`2DzFz6>$7Vu(T`&j6;BNC@?4huYE_U_tDOT{Fq%3Wr&8MC7EysX5p4{I
z--tiu=3xSI%AO#Y1bGpWQKDE`8yvu?RB(R=a+39|rn;z*lE(V#)|%E*S7B9ARd%K!
zJz19!w_tu`xH{NRNeXB|h!i<>JN}U^CnXilYb9nT772B*LwOhWGci@zbOZTDvF4Y9
zcJQ6wJ#f+-W^pxTR<5l{`TjSG9c9H0&zlx*s#>@+#jv@idHW)RM;TMF%%v~L(1(}<
z&E?CNn@Z9n;2jB1&7b-txh|F#Sr_Fe;IxeJ+R8X<>U?A4`tm1lo~-LwSgR@@ZZz1e
zmRxJseT)8Ui3=wY1x3scIN%=_9man<#nqNszFSvfNtpbOA&w^N3hE6B_O$unXVt)M
zy7*_z{UVa(G)F={(wgKXohE@D`{YNfKugRzH*?$&CVQSe!<3rJL^_QOm2CMlng{lC
zVrGlX=$K;1e78sOIeJ8xNwG^l`v+e?I99v=rJ=Pq_EuHzeSTHjgLzR)9iG2c|0%82
zoY!=$_@nA;RGrr};3$W&D!p;ErfRg=C@MC2Uiz-%;LjdxuHARNfAp38)n&Qso-RJy
zb6-qa$fJ?fmVLdGlY#RCV=O6AdEI-e9a~oxI7c62{)$mDF0>0T;4YX*yYbL-bc*jm
z?^qBDI5vb&EBH1uAPZt63{Eh*%bVd~T%4s1&6YGm`(!l#(bOfM$%&h}X}d}DnAr*D
zr%BIk`_s1Rt%#eL0Dnm*HpXcKR5<=4!<?uUL?Jo~CjiKtb_3=(KZ@qas|&_yC7z2p
zoNfq9lOsxRhmSFvp*(dN<7Eb43rrm{ujL}Na57O@YD#eyd3~np?R_iySgeI@rJ-hf
zU(f1^%uKo@u0$_|TJ#%Do~!mU7JeazT||VRe5dxm?w2Aj!qjKpss7{1jz{vi7lYL-
z>|*iRys5@$7Ks6@O7R!qR}s(*aQXua$ek5`0aAi`_?4j*caE!=8!d}ym6^B-+nR^_
zd(Y)gOxVx%4xV3alfo@Kb|mY!t*Bd9ktl~%lsKmTs(f+k1!vhzT!m}uvyv7$uEHC!
zBzXp<U3&5fDsv;qnB@NIm?U4M7<%7`+4LmzP0$#5Us_DuNRamWV%da6410hhErwnF
zXid8}IwO(k4>%>I3w}25QB-BM{$OKRTtby*x`UkGX`c%TQB+pTGI_NPIgfM#jGW(R
z!HIEZ`*OmBDUlMy_e?&vjP>TCDwQu2jBH`?u{uqxG2X~905fMu09LD7t<Oy^Nsq`V
z7M3X`F?%K!mMwgQCq0WC`^vi>8Y;+N`%qW;eh0ne8KrHWr|Frg`mF2)+0l7z`SI9T
zqYNzF_r`Ae#_l)vmCaL~^(390`tNXFxWsYEOOCAa6s$V71d1w8%)qZ3lE6q@q>)rQ
z%Mi9jV&LOTip54}zQ&)bKw>HmnDil!1vvA((80o^aMny&X>E0BV_75g{*>g1B$%>%
z2c><9q1zZgXS&RsC>IEHpSvU?S>p2&Z!?=(cegCsZ8UAESh%%O@3DoaIt*nU8oSz5
zSeMzl*JRwaaN+JY(=D~W(2x#CXQ;j?J-r|~lzON-SZhhvSaf0Bu2omIxk??yF6V}a
zJ8n43hMNrOv3G?gMu(I*id?QOS5}pcwwTQ=qh)WEZCGf|Xc;Y4ElzJJN;WhMmx7o5
zoA4iey!Z#`p>fV=c$DB%qBS5Pj+qWQ2Uq9Y(h{Kqqp&i)?A+;7Xa71POf5KbCi+j%
zaA6Tx!DorTg$+!1hc%Of$EivGn*oejGUz$2y*53)+OE;qtJBkK?b;r7oIWx#IX0xg
zXmp4gLp56uRT~Udme^QJl_63e7ZMVykIIyy7!L~nhtG#xN+69+MD*}n2ozARCV_HQ
z*vkg*7&9i|U@F-x2dxz3!Peq1?ZqGi7N$Hb#=g(6xV)%KNuKTW6(q~BSO1Zg6nuVy
zt<I#)G3Zl_F~&SPm|&|lr<WF&q(tar)Z)9QmZGGfhy@WrCFc32g~j@KU3_SKS`=Hg
zRda`g1AHR(QJtSgG{r)Tlf7-g+aun$u&A)NXwk<)FgLA;gWm2vmy4bLv`RXci>*TK
zQOrNCqaU+#x%x6PZU`4M25~S~RprSgr=)c^Y_}hR!_MTF&LETXGq<|;T(1v(`Nh36
z`A@U_uXujIy-R+5r~I?e1$&p}UzL$DQI|2$yF977;^dMuIG?0i2<9&;;;?c(K8*-W
ztXz+iOKjyzO@fj?tcb*y6Vsj2mlJHiFDNR*^F4l${0cQj5uAAys%Ad5O2*k%A+jB6
z#H@P7SzV~`HGwAj?rJjzeT_MJ`xd=A$3^j3{LdkG?qJhMlMW#J@*1C>i_59a$f&c%
z##(W$wZ`$0hHAE6uQuc(L^>|cS|y#z;y3*VQBRfVTgdbR^a)qkWm)e-ILT#C50eLZ
zCw~L>3GD1eI4!g&rd!NDBri-pA`gK-R(LBNlske$5>k$Edho=3Ve}s4ISjjiTncO|
zY(K2DWlAasdYQD}8>j7|V#Hn{ln5S49K50fl}A&(=Yyk^^T4X$*&gQEPLI-KY_tvJ
z$NYKW2bc|t=TTgyAsMGR(udb`bi<Eb{4JOiI2z353iHJ`$XB0f)dlV$v_oJNBJ60+
znN~P36MNX?Gp+7EbLKHm4o|;z*;7iRBl+RGCMH&J8>g<)1I!jrc3~}(2kDqWnw<4o
zs!}FWg$n*(0==CIHGWjV+;G_BAHc*UI~xNlYL#>h$!!ZfRG<vA$q0o#2{I`>IVohG
zbQY<1SA)!}nNQz}#2i2J_5tQ^gN(vqSnE7@ah9dK8w=LugywE39(&_R6aPH^iOq*!
z-&j0W6q++!*l^cU3s3iW?t<MZVc?;G9JTsfa7fkBcMoklxc$I)4_2sy9tsJ|?m6AN
z{UGbvW$qCFF=qNd*`X%68a`%bcka*`HZlnE<sauYu(soL2&~<h9l>X3=fUfESYl?M
z=jOG6YqkHx2LAXzv4Q_H3pj$4xbN{1jI5p)8I@pZC|T6LCtK8Hdm2uhnEoq&5^c@^
zTzoL#{(o7n`G3uFP2c_(EY}=``;UJbZT@Fe3w6r73E<9DYr#ouMQheP;<-;jw_fz@
z`<0p+_FTT)&nY~SR2vH(?)}FpFt&`Rd(TD0b1*(}(?7!c;V5hdYUWdR=D_rV<phjh
zU2w=qdX^N&z<1ze9d<keA-Y6uLL`EukRwE^R{OzhfUq9ypv1l$>Clfb_{|*hsUNtT
z_|N~Gee_4=&u5+eaq8#Xxij3ZSqFe{=ccA+9RT84fEG8Sh4(8FaElhQQ>R?h58`A5
zzi|#b&zE|wfHI6`24<ApLtDKtt#e?iW?&AJd!Z@H<#fz}X_<jJN*<tHUYM>qFt_U(
zB*Ahy+)X;SoI^9^93esUaaIms9`}~B##1lggc!g;H3a2uwz2Vf5xvckdYj_y?J=ph
zuzAk(R)%3MkYPs2cB!`v#@AaJhV@p4IZSp+tz<C1R(`RZK@2>@2%Xgv>C6tPJusU}
z*zfpKdt?~a9vNm7!jWNrc6($P)*cz=Fsc4hd%jrC;Pel_)E)>0!J%X$1WPm8bCj%=
zMu^qr8zJdr31u!|vb=46gbsU0aoCG}8OAyTGfM8G>?|`zRo=7A<P$2C%V%H?lS9~l
zD8r1*DQ92?<|sKsH+f+;&4IaH*B}X#%K@H!<w!f{l~E|i?rrl+v;pO?el>W@kzvAT
zU`EMfwAKq#I|rt42Ieq%0`_ycoW?mYx62tMCK(3p@xe%Y%asWzr$B1YC|OUJc*|Mh
zEl1j~EB+cVrGQZo*QxnL1q{090|2xvfB&WTyAnG5-Oz6&h=^GbU^H?GN^+R&B@1MT
z1+yVSW+0B@43Y#HB4HMU=&MCR1_PuLIQN_qs%Khx#J`*6=iJ?L{$rSj*ky|E<?=kN
zW%E$l!6^O)Z=s&DzTH2!UGn!|&3qr-5h=GSQZ7~cj$^NV`48U}Eq{-m^<BK3e^4QP
z=iJ`!Z-dSki{C;1`{eq+hV#lm4Q^h}FMt1*{2hASD9+Sl?UvvF*_)4H^eW81QcmFx
zInlGh9O*kwTadrAS(v6^7-!Bl1v$E%;Ttu3@h$D0kwzU{mtp4M+)<amv+<C>k8YYf
z=F)d*%;oQgx6H+?{GHX$zOxy=?+YXT#To`>nwc4KDXLz42PGi7m$mS|xfqbYe|zTp
z=opoINM#Jj-~Tf6{qSZ{{w~h`emg(-Ci~90z2BvXaglw8UV<Kgw?M~|aOkaJE(FFP
zY*q=-qCT4bEB75pWoGZgUKw`YARL|E;E$P&3XsQM5BD8DvQ5IWulo)kS<X9^$c_hZ
zpB1nR0Y2Ma$X&m6>pL^2{k_Nk^s{l_X?|!N8u)YU-iu_X=3>R(L^^RYG$FqTID>w$
zufBg)@)V7u6I>5>kh{hG7axsd$$R;`pbfnys0E|2P54Ai67LrOtO!?}QwAwDN{g~y
zxj}hIW%CR0%lCWSU-Yl?-{gNjKoMXLXbU(N@N&R=^MdDD=bf7O)4;O8qk*2FgrJU~
zZ9z{3{Um5II3>6?xI1`%@Ri^<LL4DC)D`Lrp}Nq$q2CM}47(oor|^>S-QhPPk|RbV
zUXL_IJ{9SSS{3zD)b#wM`Ag^DH~%~H|F)ohLGOZF(f-lp(a*&M#+-=xNz7#IBeCC$
zTNzK{qv9*#zZw6lgtUYe2_I<MH1BFtwJq8)?N#l+Cx#_z5(^XC5;rD(qO<Cj>VBD&
znsg<(E%|MIuzt7xr~2uXYpKPlU8#?!ex9aCQ>SI6HK&cF?MyqE_Db6C(<ajs(yP*!
zrXNlJ+z?^tFbo@R7=CB?#PF%H+Sp+nGVU@SH$G;(VSL^AL*suK|7KE|qD@AV!_;Kz
zHf=QRH=Q+IF}-5?uIWS5U(A9z(yTYz%~j@h^D6UJ^FH%Q^W)|h%x{{1Wd6|n=M0*m
z&d_FLWt3#JWOQe2$k>x{BI8oV^BHes#$njl=y9YZ_@ygfTNzyVR}!F-#`4Wi)Mj?`
zgFVl8Oo~%KRz9d=kr#e|mHr9u+`h7V;T_tIYZ1~VBqP!qy!#_kACeQ#7mzkfaNi{#
z;Q9%kCy|aLeIIEt(h8(nq?eJ7AdMi6Bb^f7;S!POBivs>dKT$A(rZYp>}I5^NT`!M
zg!Cd3`__xZ%6SfnwU5EPg>(|>7}9Da2FL2XfwT#!4(Sk5B~mp~D-!G12Gq~${w=O(
z54*Cu=%ctkjC2i&mC5qnD}0xn#q}@}tNU%FcahxQ`{lT@_uG(IUjPUDg<Qr_Twg$9
z?af45hg60H{Lxb2Ay&S!Z}cyC{{Yf@qyZ!?-c93*HX~~F9kLWxz>^;#z3P2W@op9F
z(PmnRgfd}SdxyM&gf`Mok={YtgA{^ye@0^MNJ2_R`VNu?iQ$Xk=xL<ONCqU<hfyS7
zzgWK;k<3W{hVocF2ay<D1D-!dVs)Wz)_+)P-k}*tfTMm$3@<F9Y#NL_yO1v9J|C$A
zDHlnHcLezUK=}PM>u2+<zctXh<-g}}MjiV*Mpn=K9U}5y5iBOR|BjJ+y?<{*=CZ%%
z$hMik7l`~<hTz|iFb6PyRNYfQ#?&}BDSo;^`QRLW$R^2C*pc#GdOtWP5zmPhWJ!>(
z{0~UKcRI<FiR>l>Iz7|5<bNYuH;fV|A&H@K9jb25pds|pM${_gLy8cBNBpv4c%*PI
zKMu#5y$#R#_%4uW+yxRXxr<zY&hRYGH+zeGk9<V_M5bvLUC6zK<FkLR3D-nx;x&mH
zy(V8%rrD^univYLgZ&FcDT&B?5qX~@uakerN%6lWpCE6GH*c6`z9v@6n>Q;jo&GB{
zm){V6`t|9*Prruy|3vx~QrmRy)LT=}PhJ0T$A?=#-16brhZ{cZ{IK=I)L;GimxsL=
zv`KZ#Ka3aUB6ZJtcjsH4{ER#aoIg!2LvMP9>>^Jf9^pmu61hnx$St7wZt^mDg}jQW
zme<H0Xr-@{e<NQfZ;&_1H=vK)1I&D%{DAxr@l8J>`#}jmCO;wXk@v|@$pP|#n;122
zvbe3hU8AYJNrIYd-HL@v+uS)Z?$q|qe$BzfZEh~PYeEG>cTbP5J4UN@lXf>L)s<aG
zze+n@CO0*@HJ$w?H)quJYTU0kxdr{w>#5jeSKd?J($S{XX=4tyY1~asZCbapJx1fs
zWp}yl?V52JsH@kVidWtzjXRTl&t#CVH??Wdh=W}krdf32jfQ>mXLmMsXX}jVgdPy%
zriS)*otreZ^|iN~+`Lg!u5k;=U1*S4+SKM2buPC;=R)(_-L%u>7K}QyOVc|pcDpp}
zi(EPTbqk&4J#Ic-i}$6PgPMaVdpuK2Mz@;VI-6p;TH4!m?fB|k*oIFrtW(~aO>WWX
zR+bvBgMcN}DDbFr>40LLtIN%G_q%Bi>UWFjCb!b4VT}wZ?YW7gX#s*}Iy>7LNN1VU
zNR{!rGJuqpyVA8Y$o4bNMZUjW3N@e!XnJy|ru?9;iw%T?DH6l5>DI)ck-k>C`D9&J
znOsG{S7di5Ar~^wbZvH~d5mUsuImB*e0iHTMyG90*P7gcMl4mz-Mw99CU=k#9nfgp
z^Ga)2zi^{-wYvk^QwyE~@nmubqnHp0B^qF$2hDZ|m3C?lc52)~K$^)NVys=%HZJs*
zwI{g)`*d4OZnd$txvh4g{4z$1_hHieP~$iWE?wL<9vocird=*~uz?XNNY^z!kNpJV
z$4w(K5`1z~+c=|KAj@?S!^^5o*XoeXcON5vXIVh|>}xxEQi=9gc483c4AoZ*;5Z>+
zI-t1JO&r%@PnM`5%t*!wSH7st9jtR{%H07VN`D>b&86u?^*2J`c?lve*TK&5P=&!g
zW{61yn!?eyFoVe*VH~II8VNkJYm{-EXV>}0ae-YI7{^6+jW&)e*fqvDu4LC(<G6}l
z<Ba2e?3!lOnB8=_$(=6UtT(w0(#-~wJKjj#frkHwHYT8r@hDq^HnOW0ZDiL(w2@tP
zXd}BOp^faCj5e~X9&KdT6tt0DQ_)6tH5xUA(iAWmftrv`O)18wlZ|H=u5KfvH?z@g
zGPq5cNf{vGN>JM!r;-l42N@gtrw|||lRI-}cxa?MBYj+?5#?=QLu?STW@F~dpR<h`
ztJGc#;Ar`mXEYea9h=AAlgJk&-e2a><&J052=pii{YQiEn57eh-IZ%{TaD(ZLX+F}
zzkz}XdjM|7kdVk^jagI4CNEG~eehtVt`f|m4Qw535i{BbFGo1)&jpu>#00^A3B>JJ
zYUn#?)@d|_2T@ku?avysT!vdfnSj!`JK219Hn%;`X?RV{^PHZKZg(*rr~)@deW+1a
zf!T-AoI8~;@2Np%_FQRaug=YvcJ+b{aiv``xbJMo-2GynE;I>@S%<@~VsxmX0{y~8
zss-iUp%OHNF-rjq0Js-HP+;v}XbDQ}Lgr+t5%`6qVO;KZU7(13h64?17xi8o=n8?F
z0_n9|g$b_FROl*MWo)zxC6uuacri*AwV5@Akd3Ux-j^usHp&&rc&f&y8R;tz)R&2?
zQ|BESw9(`)^0uJVH#D70Jb$r^zM*s&bs96nS_K$$VY_+UOv5n&i)UVAG;hCl&b*eO
zeOc$glo;K)2H%%Cg}RLHJi|fI5F?g@n3i9v7{g+An^AwMgf2#aKI}5$(qUGZF-hb$
zmVs%2htE)|ufP90DOTQzF#cbtkKv8+mqJ}`jCR&|YumkTEN95@A+>__U&}Dhn&|Dv
zOqVOs<p_ClLfT^<hMC<tn2S|k@xB^7mxhPAt$?X9y6w2sGOU#YubK*oH6NbpjEo%J
zwLojV@j7<-;idsMl-)EMujAkV+%(}vdeh8c%JHU!!LXZ!42In-VleDxF@q_=%@PK~
zZdw@(yJ=%E?53T;l;UP7gJCxv42In-V=(MyIfJRd%?bv?ZdNiFcGJmV*i9FMap9($
z!LXYi2E%T884SDWGrIF<(A>`++zz}RknW0cHz?5)UOVxy%IGebfnLoXB<MBL9fMvg
z-7(N1qq}ehbRBz;K!>F}209|$G0^o!chL;!2KFF<j!Jh7bfa{~K*x;Fv#rQp<;i7m
ztNPr0QqvZn$T1NDW&E2hP*mtqaAsNk9vLSJ*9}r>Nf1anyLbB6(|na)6^;#M-WLs|
zOp&RG!?BEb;qQ7iY<JM>ey@v8teX7rCdl<FM2%DWliu*8Y&?k`Xol)}plzJ*EgRRf
zr(3Gsa0)vQ^g#at2sCV*r`A9URjH~-r7$o3CY`>=EgXSFDH|7i%OvsjzyC~N#d3z6
zVe33Zfe}w9TLp@5BGRZ~`eRS6v?iPdBjWrfyq|#*zaha%&nRi8Eb-TKOT+W+^0G-b
z8m1!sY$YjR=L%VYB;Qk509SbLIcQ!Rz4wTI!b(bp5oW=NWD#MOPF9YBB*AMg-v^OJ
zG!?7dVb~M5Vq?rIGC&4Vng(@e!n0$=T_wH_<NaFFho@?s1k!_AG^7M?*5cYSlWSCZ
z>Vqw|4`pq_Z!aKQkh>dcBa(*H<98iW3%(AJF_h2+*x7aDe?^Y`nKmtv${$6&tSr`6
zGg{03@~}3w!kcot{p@}t{`yhRnAC<r<XeY34M{~Cvyj(<lmBM7($_}Q7h1_Mvk{oe
zhi^Lrc31XiM!6$MJ-}NZo`%tz0eoGHT6*wiorH~1yr~23O3DA%*13d26oz5=9ZhCP
zNRlLpNJ5i@Bq1bCliZRdC31;j%(&#TRTff;6%k7zvSY=<eIt^vb|<$j&p9m3;+(0O
z#rJ>j*QxLM-v9i?a;cJQ>R;5q!~kKx+sW2{pDQuwmmiAZ0Avbbhy4ZOlL>+b1jDXF
znG%QL#0qEb6M=gs5>g+9yD%CDX$(|97Tyr2cy@mzC=sfW#A=h75T+1A8gUsqr;~#W
zGMC9@ESoImki%R&g?YRYF(0K1iM)uYOHitmb(C?&nG-EtIPA)yJQb{|iu31cm<H5h
z6Rd;E*Ru(*0e@8^*;zFE`E5<>mQH>G+A|9kSkkyI>HDYjrgu(4n4z!V(G5Fa<{$>2
z`p_4?p-H{sA9{lC&+8s`u%Krsz#0w7g|1-%>)J4>!Y({$6LK&HYcPnymIc?lUU=7)
zKf4|5TDAn}4sNm!HCdq|o5=Se3hn6t(r~0>olqsGGMK|E8lFQP&QSFMO4X(gb)u<J
zxjpFZK~<xg`lx^bh}58lG@@Y`$Ee9Q9^o5StE<}SwE4Q)(j8eD)?%N>ZS(fK(|Uc~
zHg{LEaS!medYa8|_7=C#WB$bd9gYGXOqg4sJ|WzN-qC1jDJpSRp}*BAlRqM)9~>2f
AS^xk5

diff --git a/static/fonts/roboto-mono-v5-latin-regular.woff b/static/fonts/roboto-mono-v5-latin-regular.woff
deleted file mode 100644
index 0ea5db896b1f6d60284c8dcecaef9f4f872151de..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19576
zcmYg$V~{3Ixa>Qg9ox3CJGO1xwrzWMY}>YN+upJ5GvB@E$Ek?y>deR|o<ek0cSpI(
ziiiM!06#^_4FLaN?Jo7h|DW<7`@cn0QCR>008;zW2>yeRi<GmhBK_|l&FzQF{Xj2e
zFtftYTHo$R8~x#*Keg2uXYab9ixU9=0Q{dO`h!gUI}~jbJ5y@_00aR50E+|wpi}lx
zHf~Jy9e-jWGk-jg{|f|DD|eG0S_lAebNr;>Sj|@YG&9yW0sw?}e>^Pz;gt~q!R$u_
z07Ni;IQ|bvU_b!jX4XzWZ4+VpX@}NNE^u1f7)dKz!ylh$;*Zw)gLYO5+ze}dx1YS?
zQa^D7{{c7$7RyH8+W1Ga`r!{hzI{?u0S-G`M<)P4LhpyW{`3c3DlvZ6&cXO6R&w>n
zm-T~cR%gy00MO4J6aWW+2LKWhky85U4d{;o`2POy3IMpR8|s;`kFfdsC;9t3qg611
zfD~{AnRJi-9Uk<9!NR~;^iTW~r7NedG`ZW`n@chn_wY;w0wRi(&<qT6;N>d<4vt2>
z49iE#M+XpXfJt*(4~_&eW0nJm%m{u(W4hYHG^ALj-S7Y1vcg`=wB8tRxMU;lx{7Lz
zJq1Ycfqe)D@4qfZ==DPTV}a~)niMKX5KBifOwo{M5~IdI@g6lg2)2=a{Q}V^V(OQ0
z`(=wri^c3)2)fG&3|o{qC-kRal3|1rJ+|_i`d#(pSApsBJ#xk076N#=F?n}-Q9iuD
zO)yLv?#6|6IO}(vJDq-=51mP!L!A?y+3cySBN;|0z~;{=aQ1>g9#faC7N%oaloe!y
z&zI&$+IXB4#rn*T>G|=8V3-6+)ngb(*^{LjMOZnc8ppV!sTqZ9-Km)bD=({&=R`w{
zuNw>f|M4UMzX0t&g;`K%WnidPV`TV{+!cHCOnMysW~K4@-ubu(zx}&ZYok{O95J9=
zhX+<6*(>*qu*5`wub+(=hzNkqU`qR$mrCUomje-)EO|%z4QR#QtfT`qL7VF=lp?o^
zb9N)D)2GaAFOVK^r8i9;TJ*%tODA-oz&-#vdMYBdWTnah1);}nMY@((U-S{YVfX2c
zRlJRSH<n{j+9yk8$kJQ8x}#Q#az7Q*W%fLk6i957u|x}3wc0wtm$$#=AN(hiM>C8n
zQAzxvYWplMG99%rZJ%_uL09393=*Y>ta{k&VDnm{ZmM_Hy>LB7Afar;Sh_(<8WPWf
z{4KOgm$O3gc(zJSaRW8l!3^<z`z56P#dJ)-(m-(PIoWQ=F95H8mWNgYc&k}KX$=?&
z=jY+wSQC@R@mVIcrx^QDn6_3GtNgM-CLP<F0#XKOhir<W6+49mXTyl|grI&!36-}6
zmRfo*0yVOcmimT4SImc2&b`}cydMtqif>gJb3Eh+lk^~|bqYbKwXK;{usp-@)n9Id
z=LB925g<4aPAVD7acL23km5vQtKaN^w&?f@>4c_t%HbIH=@fg3y+!%ZVQY0cTdPK_
zp=!fTqv=PtezYWsL2UJn1950kB0Tt<3401MF*gAfNi}J`qg#}Isgy(n3^h@mY#7CH
z#eMO=|85(->yXf!qFo%)$XTYI@p5YE(GJijybBKceaahi8iUiJR1XX+sEo3}xR&Ax
zhfctUTD_!p10U4|OAQI>g1D5h580E<kF^2~H`*6=Mi4(zl0lQ4{Cl9!zf^D+dIic9
z!L5QT@tzx(jca7ol}jZWk?s?JQS37!-<0-sf+Z4t$}TKuNS70gF6<i>4DB>#O6Hz2
zS#U1hy+qMAjyCM7AF^vI31_zmOCN%1E(+^33JVq*MiR!^t{JEuZZu;czIK!5Jd)$h
zB#oovwMZOE#_rTbkZXJcA9VD-z!@MjL^%1&ACl^!nES~e8tb8~fr`Za>7}^i)<a>3
zjv}fm3Oy=yM>8)`gn~`ZYXpg}n#{0Wv#blva2i5#K24QLy{L{ey^!T*kigU3GLPk%
zQ2iIt&VxLpno!?sN&08RMz_VOV$c)Bhl3*%loe(ywz;B#m+IA=m&G;m{0)YxJ^ZcA
z6Glfx-(}@MbD8&f_F%*JXq-bU^c}ZRD9butR$E1c%#&xPquBCy#EKlR<>twTMh<)Q
zhbyhzUchdR(_UO{Q`&pTiGGaQvrEg^^~i4eufa&Rr1vi;#;-g9We1<qNhNwR|4#n_
z!lU8`7Tir9r+a_~F!tw2H&QWnNQHiL9fDyT`>djSAYAqs4B=zcX>KSuCPyiB{$%{T
zym*um<El7eTa14>endo=f_ww0|4i@~bxQ^`Z4W&T0?lI@5X3*iQg;HAMGN2yXDQWq
z@fN&@E*ibwQjKtL4>K)@WNYGpONDJS1LmIRjh3C#0y4K*Ok%?iGe3e&8)+)t83@Tu
zn<GQZQS@aFw^V#GpS|;iRzF#nNodb0*=JAu)BDN0t>rj=kcnpvcBF|~z@<KZ<B%zS
z_1<)l|5g?v6NdB7CT@`B!CWu)7rjW`yRURk@5~i&avySi$&StMUW{Lu8;`DqJ}WSg
z46e^9o5EwJZz&BWhj`g{uVh#I5F@L{)_D)7ieAufjuWl~I*^u#ZbdS1D1nXiRZ+w}
zesAMXH`9FXu)>jd!%t4;uLUFR%>o2|`2-P?_(EbJts|`+9h&OYuy>}k86$1K&Y6E5
zq;M1y&GjNk!_4&~SWEHe2NJep<cAWzrN$2e1YsBlAqArtmBW99q#A@_hNK!sAVI^_
z4I)s()WuMXA2ZluNT^s?D#=)k#OWUzUmQq`&q0Lb#U|#-Ci2hNlU~k359F$j=dzCH
zKDWl(p9Jd9k{i#a$j`cJ!M}4ojVLk}2Q5diD!i{<Cl2Df`$_+7yFc$CKl>%T+j^82
zgdVc!^0()oj`*m)W*W)iuF|#SBQnW)E6HR}Tc!<+K+Ywws8dkjAOs1>F4976sG|UJ
zfq;aGqi)Hz_-l`voyToUy449^lOkrg!z*9#q%Chw&ij8;)IHB4e6^}#dDKb(q96gE
zPaz4(4qrTez(sD@Nni+DPYe-nU22XWT!7!~>aB#4QK8E0WD6nlStgvk&xr5o^R7A0
z>`rXS5c2%MYKNnk4+Oz37{YWoG6IBnZJiHMI`<eBn#75g0D$trOs<Hk8a_u5l>Y)!
z9$B8IEGINf$H<%E9{B?cHF(?eO5ud#qfR{h*R6dW<9z|_8-;cu%L_VUo_MW3)Oq1t
zTE3({J;V`x=r%=9RALsXt@w2dj`b^Xh>`>n84X)IfcfGQx~KeOOle{+va~F5d*pte
zAlnzx6Mhd_fz=l`o{onE7K!)?xL>iwF-T&mU^n=;ulOLB0KtSvsn{7HoKFq|jGrWc
z4F&+}|KKlHwhEpv#_1Q)SXWE1qd&tWOj^z~$Ks@3slJ$YO>9#lXv-jkecuqqs9Y2y
zK{6MvgpVq+=uwam$F_<onjJeU__7;by<iEAs}0|n?eWFjnWj)*X?6}LRgGhz<>QgG
zvE|!%skAV+S3lPI&qwsM9E;lKYBM2Ww)Ty0Bp(E%n|<fo=i&Oh#mn1r+1v6y{o`u2
zFr@Dj*BatILXhXNxLEH}@f<xmafsYgJ%#Z8$u>B0pEDN%J5d1JDPTr-u`Ll{-JgmX
z`!^5@<dZ+ZA}RL@L;@3*Pnf$@$$%W&sc7{t-pe0zrdt+V>@s5dxRck>s4{gU6D^q%
zt~-YOk?#PJMgynfy3U?PtK7{|UP%b5D2Rc0N9p0s!J8YBuQZep-QOw<@n28{b@{Pz
zzvFKTxnz*gk`qmt7?I3ZAnjuzQ@E)!E}n{$vPEX}3bwY{PQ>q45B4vz3x^AdzKST!
z&)jDSN-!Uore;y@B!k7J$5R$~^t0h9D!V>8_mB=W!QFC!Sl*nsUx|bnIjPx25N5-K
za-AQM8Liw411P9y1WB?`e%&rt$RPym{L;i6!zVif1c$f)7bPXqM%+kgS~pE4oHB}#
znv^r&8_RUiqLuVZ(TQ6)wQa^wByp^pDVMQX4soSmFX=1Iut^ob%-P^8yLGZu74K+n
zU#NB4@;?qQPm;I_{&R4`Sh#6hFURIpQ+qbB-9awU$t>MIj@u5Kxi1PLdrwCFw>FY6
z4@1b|=o3-3XwrLo2kVX7JYBMmetkJQuE}-g*vza{*eE9W)o|I-v-0)67k}5UJc2hd
z(`R|VkU_=GA?leH{FSfQ*(jNll!csiQa41}Q4VwqF95|(WXb5s7a9z#s*kX!he$xp
zu=@sW^!Vsdm}~~ae<U1p0>3YOoB9Chat%BPL>U-Uu`Ga7suQ7L7!xg?wHpIRtaU-O
zCZJ>*E`w9c`Tz@itnR(x*}0v4$z!=aDyQ3(#e|>rwj2rJdC+3a`zU#8Srght=l!TU
zb66F7&F=K6sVEAB@LBn}4Bv#0N>*CMgESVDsz#&YnqOK{)%h96_x|Nyh1d28&RJ%3
zsmr^F+{1I8wxb7UiSOw9URU{e+XbNu(+Dryn-gra*MI<C_jOY1?kIR1WVT2pVMnI~
z(tAd+cw%kl61m7fHAhrV*%Xg)%8w2=)S2pMsXdPubg=XBX75n+zK-c7qT%&6bTm&M
zVqfKC4@+Pbav+d$0~Hi7WDANI)~d#r8wOenAruFlCx!)*u38jsoUWRa&uo#ly~Huv
z;U=QNO<C2qkl?f}Jr-%ZH7Mz~N-h1j>xO&TBFHyeg2caj_^vy>%}+y{jy$8HYtF@Y
zSWRaA*lLX$A~{W>oQ}@t7ecqB!)eRtv0uMe&)3!IvdCz{RJLpnv-B9#7&o-vOUXu0
ziF_$I?n!DGK#!b2#XvAUJR!rh3a%UHMwTOC!pI@RnWJH2u=}i;<ew%ixTTLlz(D?r
zCeDYtV#_lWg$w|;F`NNBY-knXB*07vg6EOu)W@V`91bOhQF}MV*$g<9aLQIjB8mkv
zQ4be^$h9P2XD%aYR!>}#b&N$--bbS-HVh5=53C0wEVyX)1m(-8rVa*fTXWT7&*S>&
zNmJF=soZ{y+sW5KsMy@YaZ{*kwp-XLy!W|~;6S)7ZvRkdw{v~n?O_X?xbARDOqTm`
zG)vj*=-7-;0Q~L*Kxs(i=h^E~L7_m*1qXD_BJ>@T4V9v1nLsE@OL&GeYq`Cz7S(|C
z8vy#qx?#yi?=~O<dP9SNk@QgzjJF0u$RKAC&8U}Aj3W`48JiPP$hYO0JPxdIgDC^7
z%b|RCb>nRrl4~fcwKc81qG9cvj{abGragMwm{Y%QgOJpFv|8#HTM8?Ch#c4r)t9s^
zxvgYbQExRFTGlPXK~C6y$9zRTPC+Dn)e9*FZnE+L7Z8*yTgWp*0W1&~y&K-j6@FzA
zKqd(U*0Ax?Ph{IL3#-R7dvO@OC)l>N41_=Ea1M!@41T_sFE496UC^ABHFm1BpQib5
zm$1AUYDY$vtGeY^xM-bSb~hHd%xg5%7aG+LTiD`OY>GP48c%F?T(Kt8-qUa~D(!1I
z`w$qO?!Tp;v>OMy2cm~^RV$Zta8FD~QKEt*p?VvS@#W(2sg0S~!Ug$H<*>l>&k_Ka
zAt#}3KnKWa!Pm3TiA>X||3e#-M8i$ZS6&d^@w9dDKxO}!et`3$NA&d;@c=@Hnd6mp
zA610{>^YN-O<k~K%3VB%l@ei6l#1a(QpuBs74Y$qA}H(HNdtT4Qc$5$(K1s_l`fSt
z+p}cFltG<2OzF6(K%|)C%Nq%NmT25<oSvUH(@ufNMxmis_O#a>>_7cuM_yMvFb+%-
zvD|7euXIp#fqA8S{WmcmgCV(8of4|r<>qUx^S$Pe+tIMmyrgPnF_FQ_y95A@sm;z9
zI@b#}pm^vIl;h)!0DfLmq6njS0P@>ZZd)ishAbn2JvD!IHy=73`elwuxmlc_{U|N>
zeo|QtEn{K;262?NJd^Ibj#qcFYUk+FiJ&>Rna1j5&oI)kH!pU-tt=h0n!4Wyy~FjE
zaPbr(V6C#C$8YXi#MoA;+xb;lROz@yW*fhN)pgUm6w{Z2Z#8bA(_-lBuK9gz!_!t~
z;K4Mv^!MnThxugEa!2Q2r@a#Z&`04bja#ve=fy+#wM-cUjQzLsWwlW8$}T_dTrAJz
zEloBdrfg@<Hj){C6J;P97;5F{)f;<q*I&f$?LME9kjPR3^lJCXpJ211=FH-QN7ctf
z#KNICA_FJM;wfTRMhs0k6QR8F1(0*aj#h7HD9dkJR_AhjztxrEvRwF<f_BK%hV*%k
zf3D$TZ@9Mh(4M5zt+twf>j`1Gpg2_|sa@^TGpDw`=Rilx{OeUP#qpmiz2@;HXV3bj
zhIjW4=c4)_U!T{0os|g1K)RLPvNHJ9EOYaw!0q^MsD!fo*pJ1o%1tYp^E<cIhUlUR
zzuvNqmSCq_YjuP1PajUGe5^R}C@e5Ogj(6Sga{8*@Zb^2v{3@kpkb?s<r!!&Y7ORe
ziVXJHHgtU@eW-(w-cQXwGpDn=)@R;GRJLtbk3zZ)zT@|F6_iTPDDmkx$%05ct+8og
zj*c1M@2D%;HQYyG4bKC=(C`?_w#I8i5#Nn7d)xd!v>vy8=<BN8Z*rDT{g0lp%ZaXC
zkK+lN<=K7L<nCAvk)G4lbfeds>IXa9+Mq4A2}&mT6+w&!{$X5v%tCy4+7N^*h_>_2
z$Z*&NeY#@EixXy*7Zx1aBc=U%_<#c7U?>E-fsF@{JUph!19|Ap19{O%52t)QS<b9N
zUyFd|zkk+8ce<iCVh@^IfFQkaLW5x5>~nKNlzfrwM2H>$q(OAx5^bQ0YZGCAt%;uL
zS|3cLE{ix{Bd5I`-V|j4{gF2@dT3aOCD5bU)d%n{>08U_r>l#IcY5}W+;_!|->nb5
zC11r$K>n<@-`ZgbrmH}<E3%XNctw~96a=`+gs6T{Tp`fYjF161Gj2m6t#9FN-?;Wg
zQaDdLEg!lp>vMB`xUrp?lQ6Zw4f1Ig-HqOf9oG@j?FB`xzOwge-Nv`S@84+Mu#ZX5
zkBd~$)vvH;u1Y6U2P5i6I3V!w=_W1D#$=?z5xP%q-6A4Zv9oJV%V}qRFE`OmVPi#3
zSIy`)_E4|PdAgZTRX=uN{(7aWQGSz(*~v*bx(5RKzI+ZA+>e}v%({{K6hguFT=aq=
zjLcw43~7}Q0#*ta(9Y!LuuC@+U=m{<N3E+Swo5^U43a~dAE_n^5c5CBcP1}gs*h1|
z4v;ufX3RErkbo@!g$0ww{t&%`^HqCCk`(dKNN1ihN*^Eu>87IXa~qv%GYKm$_Y-jF
z2>2()9+MnS8zpnNDUA9&xXF=r)E~&y=2SbqQO;cbaJ0PIRQ@+0MtbS!vM$XjhK{HI
zqE0C9Z_Az2bFbq@IVhv))SrUzZi5s;_F-M+1h0Kdc$9Dfk<0O|<7BJ%!_Ti%55_;_
zEu?c;IVV;wMRMK~ju6Q&++ano6VFW1osA8f=J8CYF+uFv+1yPXJie_qLq|KfJU5TX
z(S+--dk5`q+N0wu2s2e)=XY^^0jS8|iC>JZeaZp0lZL%O0Dl$09-=+)A_K(a*CIQG
zT?HW^7tmF|mkTr~>~h<-G2DmhWCtQ}>W9L~6TZ{wr`yT?iM#nuxk<%MA>%bGU@(RT
zfKmktvRQ5iiuyYsAJ`@aw%v_IiD;ICG&ipE%cUGRHX;UmbgVu#KYFgL?tX3R4F&cO
z6`ZvMk+H%gZKVHu*g6W?iIq*I$rovkH>1wbxn#|iEkBb7x)JJ=l6sx-cN5*IYN}jo
zIVrX^Y@qPG>)*p?)*~a<8Yk&UWHVhKui1vqZUPC-c}5M6my<JKl9b}_kbm_yH8mZZ
zLequ{b4anS;hbndaxrHesl#@D6W6<BaY%8rN^u}61AJu$IAHvYF@UI5eOBQ$X^UyT
zH2|cFDW6AvwE6{G6n20RKN@|WrOv`Mbwx@xhUQ6(V3Z?04(B$zle6gO=GfoK_NFFd
zkfyfq`+ubW79Ueqs;eeo`c%Q`tZ7|oww^|ZmY+4~dFs8(3cTKzl#Q{I57*B;LPxZ8
z?V_U}mN)9rs_8+1(E&m7EY$Y|aKArKi4-_I(Smwuf`Wm9hJuGI1~B(FQIdXx%z3bY
zDV^(igb*q$L$7)~#m+PmHgn&PG?d6#x3_Oct1);uC$RCqRe#?<tS@|bZinuFXm->-
z-jIuih-|Yh3b5hp0wLU~(+d!8*#aQ~ginC@b8&$nr2N^$1}<(CGV<ZOPg06=2(G0r
z^9~kJ3p2RbxgS&6?B&M~t$ThExT$Xt>OGJ{6tzK6D0}5~kZM@MG{0V+mgtl`OM8wv
z)Vq3++tNq1tjr+P8e2_g?cR1c_(N{u6DbLYTc9WrKvC5l6PM^z94};#<LWd>7*8Qx
zXFUoruJ@8<87B4D8~eJsou<)Bc8Q1CgGCO@(qVVDcTgTK%~rlCCm9FAx{v9XGNUrp
zP&Lq4m4}hdx7=>nR%-^IT(n;gCP33Q@whvvrc@Yxr1ix&!LoP`^qz>UpgzBt`3B<3
z|Ka5ZtH3`xU<W2h9PO07B^T&TIz^1T&&u7W0C$@n;F-pU@N|VFT`8{Vya87CioW#>
zW@G$hSnJ*J1mY7rytMa;WIK3+9_1HUBTrw-r(+A<jOyVNEh?$AJVVr?(MBZC?sUEg
zCl5m0Hlf!v1z$F4yg)|C<vTIslb}=vc2i7b-$iC?)Mr8vAW?8foQq)<yYyBC2hZ8i
zLBIQDQK5NCuc>TFx<9CN(tC87)LmBs(OH4@#{oV11z;@w$oSOQw&|K(AOIES42swW
zoXCz;wjeSdt1z)?R{%06CXnNC5KZiMG=fAb&P#^hK`G2w?M5c{@UUG*59sdz2ryf!
z24VE@+Yj285&0u-VzWB>u-T!%UMyCRjijQ0^os-X{Jo(M<R5XW>41!LQ6Xa@fPqry
zCIL}YQX}mp`&$cnfzEQFBISlTt&h);J#Oq;Z|CX0Aw83C$s*lT500d#*>A{g%-)7?
z&QAz@Y)}L*ho}iBv5LsRpyw2KUj}wB>tbmOlp=*zAEl0v-Lg_WqPpLp_VX)X-&L~V
z$SpjycIQ1IQ(Ewvw7=vA+g{@Up<6aBqnj|urj&w&>9mOK?FJM5eObnN5QcY}qOr8v
z9#&5Nf6y3*De-aft(}K=E7({GONv_-cQg|c7~t)7h<K?kE2d>2h3jihZxcE?wyv(;
zWp%7Pl5sb8i1E4Rgzi>iVVKq%upmU1IkR1@Ffgqq_aU(FfWj)do5wq258{~Q5P!{b
z#>FB@0SykB4PdTyqEtl;$Y@1_?!93qBnD`b-EMTPJTbFebu3eVVkCT=Yg|12BkXxF
zRQThaP&U@TSE5qm<IsvQLlkK?KEAwIL<rD78N%6PI57PE;>OEF1Qg+Hf$D$eJF@Tq
zkS*iTuvXccP#YQ_&BPs6JMQn->?p*4wP=@#p><%q8g566$~rsaU~c|<`$iT*cDP(s
zS&31Za0&aaBi~j}7kd9Bbv`o9^Y=Ze$~W@ifyeIYG<l2mqIG5fKHHq|YRa%8y`ers
zHQL(c(%yP|)QX;SwRH^^)CK^Fjp0g67#>TdB@%^#TNR}Er#~w>J}&>{OZ`H)2@yA9
zjyzV3w>4Z<Ep;<hXF)eg#>?_;>e+h$+OZz3lKz`oo#7Mspx$z8VPGkv{oJ4=c80Wv
z-*Jgged)|1!D@k(F<g6!O&b`_cX|sGM*z6=-HM=~b@pg-ibdFX>=b)DGVMi0{!(bh
z$~b?tgHw}n?zn5qaC&&;nNF+q`z{_883OIEtVKPRN(wtfdc$0c0m%w8*Q$<*4d;u1
z=8PqI@*JxG)cOdORt5Uuf!S+)JdCx}(r(_-ge)9~Bn#J)Zhbu+cU@~&ZDAD~t(GNq
z>6x15x@RYOi`(Zy1(nK5`T>`<pO#XvcYO-_agHnkA7gz4Aq>SFffMybf)~9cPaa>?
z$1c3Vq40E`V3eS7WiW;fBb!ZleG9|HP`E!v!#0hB&q+YL+VLz{Q=QBWvV!vtbj5OK
zZ2{C+kl*rp-r1RR6PiGpNHa|L3!mWt2tDllwT!w%3k|iMt2JfO4%p#rZLQ=m)5Dk8
zwqwx(R6JovKHPld<+a!}dC`X}qu}Z{za(G95-=pXaaHz(Y$`DlXeDxKC6_o~HxWAm
z87B}21hc}^PM+b8ORQGM*YLTm*WKIT=(+4Zf8QN{q@3rua`ApQwVK<6HK1SK=C(Bi
zT3&uUqnNG3nADmI8|t+uuyUmTS_0SYb7P*oh_ySEUIKR~?*OJ`DqV(Dd7&l_KfdN}
zxr-mR(BI8BDq{RIo7-)<@weNu;j#@mi<dH0zG|7$1M?m1T~}G$DSiTp2MhuW0Me#<
ztt|&NAPDL=6(s)z4ucpjf3XNSiN7WZb!<aHUHpgfxa25nG4u)8-Kt?Mq$eF7(BQ<p
zX_;gbCq|v(U&Thhpxyo4<B$d-7ZV1f=kdotd@=0X+LsDnYxaunG10e)4bM}26FDbP
zoC7kv0E+e)=_~pi;;or*<nK2uf@}j>=`43D04blRA3^*OA0$3lAE)dQ1yDn<8&s^A
zA@4_?#q&F}sWQZ2NxbRF47=~Ehn!*W@(kZggtiF#be;-xc5B3!wwlAy){UKu>B-{G
zEjlWypWWV*1tG*P?-7wucdkS6^1PzyG+_UrKVy;Z?qbLl#7vN4l1sG@#YE=yP*ML`
zL3mRV)tx?RPpACEv&`VCD54{U>cED|7m{EXJiF~Q_0^M|!NjN{Y+bhJ+qXZ14Z^Rt
zK+3Z<h-?&?Ug<^hUS4U95-6Ll1oYRCJfB>6=^2QC(M?yoPIP{0X-cM5%b$&m1LG^5
zbmaj@2pU%wXi>*WfGN~&p0T-9m-_IcTXPUO%ZT9d+{<|IM3yAnBU{CDXZzQEaXqT=
zRr7x0O0C)9t-mq)$ap?c$&M?nElpVK+v0?MHP~DH;tN+Kq3x}k@W@xp<WQUR)!<8I
z{9-<A7TD7?NR~pFWd--Xn3szD-E+HYvGU>Y{hW?r0j;WkCcQ6J@9vE|#cZMx5fm1j
z<l>O`2~7PTT%dk7f<aaIzCs&kZaXr9ajh_DBd&xiGX4kf69T?r3KP2ViG3R=aGc=6
zl0W2gB-koz0_v3(SIgi)?gat8mLO1@l!@q-o?b`gj@5rB5~deEE3(y88Pb#(H{%x+
z;wz#jA6pKYV3dmyE{A8bw3Jlaw80jxla*=NzP6YD6$pM|bgYo5OK(@E#yi8aI@%`K
zj}kKZ!$y375rk1d)kB6s4n!nXB_k?>1&NAD$HYc1&tw%K^@XrF1Efi9MCD*i6gDFs
zj~r#1kE==>4wx&qT<pi5GB&(<o|Zok-PV|;YR)Lte(NM8Dsgv{uPvC>tZk?+`kYlc
zV_NR;EL~}Tjs|Qt|CT%&?JJKu6C_UJGlIsTpRwS;c?h+X17-0JV6#=h<Bg$@!Ib%P
zH6yW0-QddltAp)NT2kW7c4eei(zbM;=}h^gPHl2O!qh(*@#7hz+)WKh065p7_P3Dk
z4CC>karC*9@AW}J_t@gu-tYyuu1ul1rs;y1GgY0H_w`GF0{+-1fF)6xhU2v@dJ4XV
znz7I`>Ls>*=qs;aN~;;)NUIbjz4aR0r-zj;S?+fN_KCdVtZ+5lOHsMsZZQe5+T>U>
z%7&L<q01GHSU(9|Xe53*n>SPnGrH)?A(sSHAo}PYtSz3In$wBL%1cvpcA4hlTwOu;
zb*G`X)_M9THT0Y2W?o?g7PX29Gw#>oTU3`W$NH?t!@@cG^5rR|8KtFc4L#HRObKi3
zQfS*U%{W9*1E60c3D%(ZawaD<F^Ev1Ehv~M&pTfWft0}Dmm(hyHB38;M%G&8k_E<q
z@x>bEVS75GTG9NuJ7{Q5a(6i9cARL(giA8!e5jY_(|*D{l*f_TK>5gWE6lp1zQ^W0
z-@shiP-a4C5vc(1fe}Yy@0{O@khvV#v=>pif*b;@hX7bi+}(oPin*{ZNuUI(9726H
zBnch+{ZX*u__>HwuPE_CUk~Z|&5XEgOL2xXS&TA;z>$j?>hlt=66mz25l!nh9C|bl
z<E-y6=AGB;@-f7p<>*Q#*OKMMrL>9V#gaCehX-y(1+KLILb{T<3}no-1ItkZhZLm0
z9cOpaEk3nRYtcg-n$eCVTM1Y;W!kDsN7TxP3>*csVZIWyVzK|?OZDK=?mQ~Jg`tB?
zJAkPt0Rg)i_A(VoVni}AJ=Zi+7mzw9ZpsyZ&J^2_N2v{s&h;1nX)cygu`iA!1*fdg
z@GPEZZZ?%2q<TBVXKQu>JF0T?Fl~ucbJap@SQLNd0`rty13^X(wGe<l^hTg3-j#5^
zUL&=!Le(1o9#0LMyu}m(HPwH(j&r(5TMsIjCtkgxvqP`_w#l=zxCtj8?YW7rjE|@B
zv}g3aTPgHdpU%dC70GUZ78W=rKvF1~Y{sDkf6o<)Z5nOQt+AuJRh~tlQ2gBM&W$eg
z2*EplerP*3zt3vZf1RMJoX50sK^^s_%ez_5sK~~+D?QFEA{t`*J`;HZ^_kaEFlh1Y
z@?!uZsFVkq3?5fC4l_0xZv-k56AKS$uATI|5FZQ0Z=b&%7bRkRNdc+pYDRtcp;_AN
z@rnFir^Z$4Tg>NPrFSpE2Zou9h9Ur!2yn=kinta`=wHTWPyo#{T{b5ph0<ZOtTvg7
zh2n7w;8(Q;7C?`+3nmi_egx9BsD}C#OaelfxHtp`x70Tf0|+Pd>$g}GYx61xMY@ox
z1YbIff9o|KTth#4fcKQ3Le_oy9m2rgZ${UDm%)!_$gEn_aD-WwTHm~<q;q%nHq}Ay
zQhZ1vIv?I2FW~zUB*%7gdocWg#O32~w!w4&5FsnVF5WI|o~N3um*S>Hp`xbGil)cH
z(hcw59X|-19fOua84XR=ZVU^MbGQz;xS0XbixxVc^eBMQ7M{`Y+5ColaGmSSuke3N
z(VACZbS5!Wpzt!7gPO$jvf6T@Zc|vej=Z)=^~iCK>18p=L4%aue2%Xpm$+V42V;_w
zO^LMps`x!<joP8J#_)7j4Rz!=Ki^tcr(Zc|V2xvGwK;1>xP1GwBzL|X9uLDF<Z!o{
z&5g~(wBTSry@$p&VWh{xrX<7RTP8PTDzwNEJx@Y))xV3zBcX=M-Qt_zgv4`xVLby&
z$h*KC-bdKF!h_vIPd>XjdxZ;8>tyvW>7@nB^=G#Cb^oazlO(Km1gTdvt;DrHTebLY
zt-j2rVF<(K^tFHbJalbCRilE_9$d8W{m_yO$2*TxYqTZM$yM*PN(N7|i&wX2{~QLj
zxpQP{w~RTolVxvLas9&f7;(Bk9p4`woBtvvJ34hc1FufGf=jH-_V!SIg-kbfB)&pC
zp~}Oq!DL>EX@0S4Fn8o(X&qhABr=4k@$Mgt5Ua|<7Ymcp{1Q$WuI!r>UCU4GU__V_
ztqxHUV5ubpdZ~q1dCxozZ+;`Eeh}venZ;Dgg<@<7kXS=_MFldYyU~yVM%>fC|7XT0
z>O^#({8yULmF)!v+%zd>2#w83pRpS6IGdcdMmi`_8cJG;Th!Um=A@W;!C7E$DJIF!
zjuyig^%KIY!h@xIXd<EE5<l8@3KYVlh)Z3ayZ&3mb@&Y&yL}oK^<9MC>9OH#Ry?6+
zL2*$&k*%k+ChvQnL-usIq&>98hAs^yb82ht0D^&XD9s#hrR@x2d}28H@Q8jx$C_qF
zHfD-ON@7}45^kjf8)Cweg?60kY)$*rd^}tO*zbk`Te<xtlq5UpmuLW@*sq!?Ie&{l
z0#iaEm~~ELJwOzfc!eyyha&~KPreDM%d6NSu*iIDti<OSSkq~^PmLlrw)XO(NyS>*
zB;_Z}fpE`5-`r`6B-)`!*>Mn*=fJ~W`a=xyXW<@2IbhFtxrHPTAwO?F1n!rCU9hNv
z5Db+dP~dGkp_>9iX9GX;Rcb0oOgKBm%;Y8|(o|t)wIg?v$t`~|<^i-u);WAp_tQsN
zGTiaWNK5_2($iCP((Ocg>A&R;t_)xT7|39tK@fSML<y5wrmQG8p^iYebtG#NlO954
z{J3%6aL4fp^XV#Akab=NKDQX}=tHqxE@gs0gap6XSp9>v6ImoiI;PeQF$jDMa76b`
zu;>^Dy}j<2f?8?u--m7`Z|!GrzlTO{dV`@4hfa$pQpO@%wn<I1eSJKbJ%Rgct;C_P
zh1Vp$h{suiD0kvQZuVJ=Y{hn7SacFYy2a`C>P~fKzx`w>8RN}(;-SiP-29sG;K_U?
zXySYM676^E{X&gKnc0a!0{J1p<D^}6<P0!+#O&dgz0Kb|+w+ABn(pHh4g`^w?hTJC
zXi3|K*_{=ZQ|z8~&bpEk>pF*og;CiBAx%);^6?NC{jqcqItBK62971ZaCwdoUo!FF
z6V4UAjlLgrI6VGM0%1AY&=Vv}j-1jf>x}N6bCb&b65-dgeg*<U`9-e<jIa?<t{n6)
z%E>y4g-l=wBAxU%h*=%Sy_SPIwl11Smqd{X*xX%ui7u^n!)ONH<7^x;ys$<D8m#h}
zCECWn{hQ(F0gR-LvxJz0#)u;7(99IPwZM@pUY9lYMhA0YEKK6BZrtq&O&cTAtyQnF
zmaZ9DfOu!4zm_TkA8C(5xt<>m7s-ljRy<3oH-n{>IadHQzd!h$L1Jup0KhBCOU)Y4
z+hvQ8u~0c?)dIOgiqyBTnjc$l-{z*x)pGBE*vvD&t0%Y!Q4f8z4c6wtlkVOu%q*WI
z7#Tqm2LX@Ile+e3cTLL@a@j4JVQXZ(v+A(c5g4sc!?r$QRoZ$SCrK-Ntt)WY6fhDj
zYEG5vjy3}W8cr7vAZ_r3X{0?Vk~3>A)Z|fmwro;c)LPI;+6?I1O{RS=NTVG%TC0kF
zG{5=+E@1uR;%jnm=f2!u>`_q?npHazpOa**se@oXF5AS(NZ7KOPrFgSSoY_L{Fsel
zP2CtMz&8#q!4`Uoj}RvU_#{_HK6xo(7c4VY%m;Lp*)felHWQ3N;%%ukp#Zc5hw(3a
zLV_+0)eQ=o2ULXEj#7K8-v||ZQBh|ca*H5Xi<!Sx>GR6q2tr&)FcNU#l?_Q4a83D%
zBB5%8^#w>PD_kKW;Z%G&5;~`CwM3BCWL7jdnCm!2hdI(|C}N&AzfftdtL>%HbKTXZ
z))UKGea(hDJ=r0?t~|@LYESfqr<;NBaD=7kJCX0*KwDCvrv+~mEMX-Cf=iffVDw6>
zp9F2Ga(^j!FgsyT0G}sc6&!c~=yjzDz$H+6hEKYRzakpy$XIMnp2`_2kjKqo!orE;
zgj*!Vc;;3zJ;>+|x$}|VJ98~}j_Y1X?6o-7*|nj(d!_Qonmq=tM?KJ|evdrq-C;UY
z9(}Qy?E8==B2c!9o({vSwW@Fc*|bVqlWvOxnosZOG6#Aj7?>d-!@YQ{?q0n(#Xv&K
zEsW2sTtwJ^wjG1E533-Zfmfd>d?GwPSe5HNmv#XNm{jcDB+GbLz(+?Uosdd-_N0wA
zVNZlw*Ut)5V{4Q5C`Pk!y*E%gxl?Ee5k4lJ=aRF_?Ur(<ysIF&aWab5b0jjhxsgku
z(|9MQagu3a*n45Qvw12hDP!Hiaf3x!#l~hrGx6BrsM6D}@=)kJ{=SG4Z*%yp^nw%q
z;weXa(_ymZ6(C-@v7)N9*isYYjfVDg2@-??*n_HJ-}U$dDjyg`bgE2z1lF%~l7=kS
zKkDq^b&!_)EnJ_%<$kjJj=$((j2!d<k86am;;Vfol+y@u3uOLY*a+`ht6I1C>Wn3k
zoi@EDk-b6G6{4(3XHBXL9?(+M^EabjM9FajlpweM=`a)493WRA1VkZMHR={IiTk%M
zVk03TVP4nlVX@}abd2}qqFG!+pEzMkL#^+#@M)NdD%Y<84I42I24ruL8U?>rAal&#
zWRyn_MfLknb+%?2{t)xw`oj);m<cp}Wdb}5INm|sME~&i)A;(?yDrw5_vg#}*!~sm
zkaEEkX0kB6Q_bs3bNv;m@zPR<F5ddhc=h<$Lvh{u+hcU{;_~O`IZt<$(;NAdilbtK
zd7uB+B%0#@l9Z+cpym-rYJz=s$4Ae-+Iu&Rw$R+#UBH1~(M2YSoR=`K-t{};D0JQt
z{(;`3c4H6I!$Em({B06NHi5fmH~~9HZRxYO!O^gv=)EG#S=jyd{$Hr@qw?`08Yd7W
z*)QMxnaFEC3V4-Id6c$>X><oLmQ<-?rD`BkV$y%=JB(wO27q7KOx?L&$efsX2By8y
zQ&;zEf4X#XYZH|*E>Y7DnO7mDzdVZStzs0^i)pBVevYT(moBBt%$k+6*Q3w>A|y;A
zgavdWWYjP(|7GN6{>{y-ggiiQizZ?-iyc^7%X1=`eyw3`Ve(+Qa<p*d$@<zpAyr&&
zvs3Inpr&JZt42h;rYVgn^DR4+T%t<j>mdpDuGJmj-JC}4!Gc?<`+ZsfjmE&>@~J6`
zzI%?%YRXbgX?|a2J-+!{MLYSVROaVnZ(Nq9;`IFU<<t4`S@-g?t-hn#<vA(4xPTMF
za(;d0<ND<VeY&Y7=N%X!ikyD#Tq;755Zh)^7Q;OXvxr!1UQP*-wB+}B6vAj32HRmZ
zzdS7hf<736gK3H=pv+{b!2by;5ob~K?*v<UIx|#0pr8SAkM1}4^trSMK(n23BXOz^
zvtrH&Y7eO&-Je5`5O<mn!!#?YDm|(4_iWo<`QV&z#*@#-KH@`CV#|JlneCRGdV4dE
zp-rk2MfIru5{}K)L&Eo%)B3pm#@XD|YmxHwM_UYOx02yeIn?P^rpvpFbpWM9Da}f@
z=R1oRF3X(l+`%B!vCYcn7f|^gPG;LDNZ8@yMvHInSxb%K4KzWgf5s_oIt<YZu)72Z
zfT*&Qa}DcwWkS8LW5#t;F21y$sIY~sq(u?mMr101fDb$2X-k0kq!-HOMli641%C;v
zQZX-=Eb6s@Kp;%yaH-Q#j@E3E8$bN8u;|r07|i^N>G=c2TSFtAQVFQWRJ`V$?iB4&
z#Co?~qUw)E6<kVWiX`?18jiQ+r&XSHhh}Y^`Q^&yC25(mF?mSK#b&0WvQ|gLV65++
zmFC78J%c{?!nV&p=z}g*mzAZ<?)eQ*XI1OV>Wbsyv8PvdW_B=X@Y9h6?$o5c>BCMT
z#^CM}x2}i^=7d*~>Bi?`?ZbP6ae0E)bf1W)2wTUPss5(K&wLz={Y^1ww%G49pvt<3
z@oFzoQ(+Aa;S%DWir?O$+o{OtDaMPZQR?>g>>^z^l*bWg4-aRkGRJr0jg8}Us#+{P
z>A2`QmJt!ZkH*!t`3OZ{sDlL9Y7W!7{vd>DkZfMcJA+bHCta?2y<cBQ2Y6*3;%ZT6
zdFZSMKl8>GDca6Dth=b34Mm#X&S~nKvT2Tjy;Z(&ko2Eo`_q~L<wa$!nUewDcZ#g`
z6&y~#v-1VStG-8Az7{TNwmvN?Dd(|h2%U-0iQSd4c^fxaf_XT-e<eslk3*f8-x`Q4
zh>_OZL^vvKRPV_<=;MZ<w_rMUJqA}_ojsuFW^h)u*ROj>#W;`3zqP(#84VO;-^;^#
zZKhSuq&;64DEj9jsZ2g}W!Lf4YAsr!V1C;yY;3jI!!Rx;jzc98OOM?tvEN-`qCSIO
z>G9mr2~q3vl32+r3#zx3z~MKrR#QFISk^12WKZj`ojq4-pR|Te6`{hesx*jUP&lnZ
zJO0Ln<`VyvEqoPF#E1!xPD3dbao_0K5D|e(`s#IY9L#FI9ZF4VGA@|7mc@Pq;?8kh
z6w#VOb*Do$(4{o@tT6QR&(oD&d3a0d3*qmC9l~{0;;tFA`VH}^ZRpU9_%|R(mVt&@
zfC3c6=~Yk=K@OcPRK&kzMm1dMsTC+udY=HY2-s7s(?Oi)SMF}%$M2nMK<_$}5Ef=3
z33?ti+q~3vD)A6ow$@^LgNtdu<xH^AcF)5LFnE(J{`HPFdQWaT*_MZ^p}BLF5pvH2
z!~-+n%~*$Y>@lvsq*=}14_LU&oDvw@D8i*!j#yX{);dF{tETaxTa`60*{s|}3m2!g
zzTqtp4KVmTrg0~z0iD;G9g^eMtT*8|Rjia|*pOB6?Cv#oAa#e^{YuhN7_{>MRu-oK
zn7!AY=mP~i!uNvH!vrh}1bS)LWYN3IZC4IY*6q)=j}^E5veCR4GCW%}@YGWBu-8!N
zX5*c*JjWbr%DbPkXDoYbbK?CuSmY4%A?O99gm4Pq(_rbsyz^(GDreo?<*zT-6YWK`
zQ6g^k)&T&Ncr@|>d4GdTw$HND4}he_Sg?F56%YI!NdhKv=(M@A*;zr%+40%^FIgLx
zT^9QSRXyz}ZEo(#f%DxKVc4?8_3+5qss^{_msi<X>9nlWWX&{&Y>f*U8Aru}zxyxW
zkOrlE)-crR9lTu&;OPN!f8D*-9mHGI(Gc>&=P`Wl<33>Yue?4xH>e4~YF)A?(qSx+
ztbqXXDl0e{V6X9oNPn@${IJ7U)aRUi=E@T%Bk7&Zy%&hE2X@;O96<-c_U@g_V$?+T
z6y)!<=iL+69rY0pb5CsjyU)-y2=F(xH6ou`qN@`uXmWviu#!;RbT#8I6-*$2dT}AP
z!gbyOZ2T3bL){*6i&n7w>j*NiIO<4NJ4rX9<x?{CoimI$&A2p`BQ`7Cnua7zg4%Dd
z@~Y!a3s)EG5^h5FOfobNuHX;h>`EOKMH|*-dbP7w%Za6{NAKn!F4H>HNR0gWgrTBr
zJ_iOD*ibPYW#sUD0(6s7ru=dUrrytr-7lyiJ|~KyuLx&2eR(ShDCs;An*!%MXk4Y%
z-=Cg|JUyS<@q$!^mY@xVHAHYypO3nro`oYr;SCCJm?HJTURZ!Va4&fZls5ttCHi2w
zZfN+qXpHDmkxqZ-`9qV+zV)ej>B=3NE}E@g4XdHz%Xw$3ZMrTB?TwhKd1e6AQcDgR
zTx1W(pF=_R5fvmkg6x2(heLNN`BdVLPatK<GA*Q{i+JQAPT@I@j%gy(!Tv$Mw1k)e
zK_14x)cN5|8b<n*<BV~+|B{T&7(gWoIRl1{v*0~dxIcs}bR>jozr1eh^1DNGqGV$;
zLKSTdoPfWExaLtR1;`;7wa8DWK8;<`^N*$U)UHmFv$pjZJ&fn>=X2^+W1~>HG~M$e
zmN_LsP)~!O--~&&vb{@)KHUNO>=_%7Vt!t}bbeUEKtgyhM2NMr!Cn$cTfYJ8pw?bW
zB*d|^#YJYVVHS!gp?^DcI9xCuAnG6<4_IB2ldn1%={{W?kRGM6&!mgn>&WZ{-gL&^
zL_6B?v~`KRLvWL1zh`xJ&Yd2a*Mats?)R{jz$rpizHx{Z2vOPVF>5pB{RrexfP26M
z6EnX)(iScTrC!BJ_iRMX#oL(~w{Zv^f~^*(@ABNn+P|(i5<h7C4Hu^MB#=FA(5ifl
z>_4-&0~&EEy7G(quhg0=2)nwPh^UC?)fLjxwd2Z;j~nvirNrgK+epW}Gvp~SvsM-2
zyUkYO|20Ko-PfO$m!mzT&~@9&i<Hu_><gG_Ik{=Y?8I-Wsdw2K2RBuYYAYFxRk#lN
zTmYxYVt)stv)8DASl15s{01vq-6g_m%0QZ(<v^gw1J;-4N}E6<kbe#iMvxeiL5(nQ
z_I9I~Gs{Ijj_aj6)39X}a5S{m)Yf!Yw~uZiqaR7uXCWgUoMaU;9}rxW3lc_jI7(Fb
zrU*>{LZ=Nw!cKIeAILKyZ3gySP-GkUyXIXEU~+mMPf+I&RhN``Z09&n*`d5uPGssb
z(rqm>*^{ZTcGNz95@r#{Rc)-CR7kWAA5BkDURyGzpPD6J7AZoN`5xOuh}AjH?<dJx
z!&TPJ+Lg-4S?lb+TgxEF=0IPzq!LZHrYkAvUAv#n-=U$@R5pZNn1SbJASYB2<+Y`?
zoGIJ1rg0{b{;Z(|ni|d*(TwNx=0PYm?wmsShB3JjsOFs@AfKBgGju@uUMoSU1Oknj
zew_N5b$io|h51%-QNcspNK7MW%{3wj+$tLo2yFB2AxxnV)JO?z)##OLUuUze=q~0a
zPhE{IpK0W-Me@&rr`S_#_3Y#V(w@?;5DnQ030+c<ir?uYXBNX6e}tFFPM7H4;C!yN
zEI+%^Ax3!WdYbd~US8uHyy1t6M7eBAoiEOF($iUebutIAE>E`<&o|ohM|q!^M88LN
z+h++oClOzIZMce%VCCopPJ#GQf}3}nb@{DK{1W8X5cWRg{HLuXiJhc|=5?ibi}+-W
z{z<+|KiI8?_sJ^G<9?WLTvqi1>mwl%fM{tggjj?D*3`==11JVXkdYP}vHg%Zzys{a
zO)D$+U^3`FucWv}U>^TG7U2*(2~oBupD5n7RVT62uc*6$Uo>q%B*WiaSEDw!UxIjB
zk~uoqi3^ko(=}mCHcF~)p~4zUtOfI&9ipH4-iK+q=PhKv3S8pLxbXZVtO>GoUmMzQ
z$Ugn2rW2mGs9Or-@F|?PGc{prx}*!pGaBfjuX;IYhq~;ks<5l_cB=jM>N_laxB4!R
zwA6BFGd_lEFy6Qe*(+b<Qx`6?eY-wWE!KTfom^B-l=hWt=c}%eqe^x&`D?1d+a7Si
zyFx;lWWbl3R#j{|)Y2B!*K(w{FB0Fm!iq3>12PWxVhXwJ>@@j7hkD~zM-H0QpBVAR
zj@2J1nV8g$1lndQPo=^JifT*j27leddZW#6xBuZjo(0nnv(2_4nbro)jCDi?UVn;o
z5IuIA7M_*~0`o5la%u3-im-SB1el#kLuo3jBJ>0Z{+_ydoUN|$OmJR)zcacA)${ue
zr8&$-(edr1lc9}{lul(y7ekzNrTh%_&hxU3m*unOJJmmnX^G;71>flWe#M~F6dZM0
z)GD6#K^Q*5$Xizdvj8cIK$FrZRWmtQd$DlJY{<mrx+{=8tp1k*hFEkqMJlHVitlA9
zVRvt9cSqqr_wQ9EU1Ng~h3{s;)0Rd_muL96h^dMu-6m@rF7#@RoD1DW7JJJkk%tiy
z_iI!f30oST_JT4SI-dWkgP~npHgp#>BCIimaaJBpj8M{u<pr$WA_g)q7|uqkmr`1i
zlHMi8Kd|vGJNIfZ%<GH?chJ+Yu;tJ0las95I@=Ab_*Iqz>LOgJS!gE5br@8t)idV~
znK#l!#)0;HgL3ACZl81gL47MD0<=CtA%g@%2SrVq8&9I8<k{MEUA`X58hr6liw&nU
z!#{}uefRwi>C|6HPI@0<sbiwpG~c>_s0?wgoc-#V(Nbq}@(#;Czt6TPz1Kk_`}AUB
zDaI!s!pE95@Zgu$t(aq8+(e_N^u)u$!dirmN0p->f^+5tOj6==(^Mbiko^4$>3)ez
zvk5o@q-LpWGi}Mx=)u_|CE6M*Q`@3wA}t!zP078%Ffo%ub5o1@NmK*5Nq0=@Oooj;
z?3Cjxc&H0H3m3~<2F-_R*3jLg_1`eO)y$W@-usax^BEa`GjgYk$~PVUweu?$VAks7
zhN+$1J2uT&T_f&mF!XQmd*LL^+*BdmeATW_Pun@__qr0g`DjJ-9q~=EB;b4xxiNYw
z_ctz1KTD958MAN6CF51V<T-QgvRl6P_!Mi?-Q;xqHuw1^FRb}n(--^g+XMZ??DKtg
zaWNKhk@Truyk4FlIlb8(-6X)~t&qf5X?Nk0g42c<SOQo@?Z_<-RR(uCdbzZD9k*|V
z(#o$dqMuW~@pUjEAD=;T=PFT&9>v2(pO_0#pFuTs&XYI=E~eT!Yfz=kVs}5L9;p*!
znkw3X_!QO0Iwku`^fdJ1%K59Cll4CV=nEJ0-QbLmce2lVX96|YYI(d~Yb#_W(g_L9
z8XF&5$nD>Y7F4sbMcj@70QL!w%43Wma>^bL!#V1wH$cUA_ELGT)7?9jbXvI=XhbJE
zh!4pT={smWLM%)t?$hA|aw}&8t#C|5L=xN{&D$Y3(+~h7Q0XY2an!T+ki?=z`tHL>
zB!((T+jY`*d>D`Ne%as~^rG+;pe#xxfH^j^6{GRd^#nJ3ql~^*#^)!T6bSRhxBkO#
zTJ-=SLI(&!@!h{^#mWFutij*3y8q0Xr=@&~pSvWLW2}LW+&4M7oNS!FiU&9r54%__
z<6+h@8(RF0DX3AWqDm8j2y>92P#1!#IVf-P59MYuuv1l|k$+c2LEvQ<C_BrZ$sBeQ
z>qnH?6fu`4g_T_m0bR{=`cC%pQDyspyw!oHjOnm+A8{<*-CQ)BA6c-aWc;loE%YV!
zC$=8`)W(u=Z)E;RanpTE9TfLS_u(FrwDQ8re699;ctp*^Uputz;PwMwJXoa-yAYwv
z>pR`Q{UGot?f+GBPGOTQF&Iv&r+d~uwr$(CZLMvagJWxLo7ZdGzFFJTo37-^)AjqG
zo5A-MQ=@d%XZm=%y(^1#%iA5L-A$k0fYb*8yaC?jaB1{=G>@a32WUL}%JFlP9QYMQ
z<-i9NkpnL(1O5?!S>&Aq0j&~0S|wLVMr{#i)Ht7pcz<}r`<eQD8*!IbCazSOYp-OP
zYn)et%(cO*0K6gIIYqA8M1p_96}D>cqE-7yojU*IdIi|3Z?5a6s(4f9p+mnlLGE0<
z;^Hs_xtRbw0D3OIi1fU2^m4cyAd&IMKvlRZ+9?(JR@tQ17Z3z?y^1qi8MO8c09Rdk
z#bxKxCMhaW<%+6R%hI<o<%aK3(+|2>rmi3KXzGp~aqExg*2la*epzq+{LOTT8Gx8S
z&zy-FfaER+L-w9Y(uP~=Az%`o4FA9n$xq7Q6#S60fWlm^OcUsa?+Nps!#uA{3VPs2
z!hGZ~Zz_|4pYRJ|z9^)vnoybRF?s9hqf8nq;Q(O<2vaBbO5_kj%ryWIK#P0nRrWiv
zqrFZ>o3*3G*l3x#T$v`&2Hz9rJ%@Q-nH03ckA(TCka}u@&x}!qJv(fFZj%0d<n~9I
z%av&Y&$<0k=6PjO@PgByg6gRmF3sB?cA&5kx?Lhv7r&5tBtq;gk-VRnJEYJ5U;~L_
z1BbasnI_N+>k3oXVLnkN1%0rgFby5%J7qHP8#WiFc_D4pgz8+6(R%pgeDXYE?vp-G
z##d!ruR2T(Wtu>Ld`Xy>9OhwVQZNu-6Xvx->Zu90Fk_VAv*pRlh<QlbYJ~4fJ?}EZ
z=XL!p#5_ez08jpMK9r%6k2#+J)i+w5>*xgMFmX<d2m&Qi&;>4F;(|C)MTrb#;W8#J
zE2xzKYL>S(7`KKOR8N=tlJzfH&*ol<PMMPa48IRwqOtJ_Mt>{4`W%n#d$(V#Z&JNU
z+jChzH>L+k)l=;+Wc|W|%hwF7ZbX+eV)IGw#qH1XNJkvw#q~L?Lo~O;0QB_({JNdd
z5s=`LiF_rw<-4tJMCWrmcE(?~dZx`~T%PBf&(7GWzrj80?M9vTjjA_k?!=t+AW%Kk
z(w$k>t5}^Q-c=)Ba0@lTi8$}7_ZN`<9`~@9I|HoGRlP|wWF6!BLDf?&eAfMf%hv>}
z8_{{kxYa)b`D_8V1(%>2s>f;ogFC|`X1+hh=KEUnb?tL>^M@W(c*Nr?+y#oySg}&!
zB?~F^!3VNoR~#9fD^ug9O`ET7f2+JTC&!AL-&vYZ)0hAN0096100IC(54WnmUk^O>
z01F5J00000#PAU=00000(SoyE{005h2bl<S0000900IC200000c-muNWMJS(`g@gu
zfpgX$)*nUeGl3$gU^xJmJO-2ic-l?U1I$%n00!W5a#PL78uFNJ+qP}nwmD?mwlOs$
zyCMC0c6Ryh+57Q2$CDs>=$NptuEAc)GR)dH22k64H<O}sPlGr5hj|)ncuog;(u_;2
zU^FM#kmE_V;_kdNKFASHa*f)w;V{G4##ye>pA{UXFNe9ydR8%%YxLv{6KT#e8qtJK
z)L^XFKd9g94N-e7<6U|?$5_QO7Ws^u^>U8#h*uov5j{A{RF2?W*hC*=C8z02MMhGe
z-OkkWJrs=Ep8loRF@`}DvzDnl=_0zTE~sB~CAJ<i#CW@|PCd4oU*?tZAD%Fm{MLR_
zk&=|+F-18;BldHEGBjaa%IA7SE6Q^t_Bu;xLQC^6JmE4;C`Sdhl9%N%Wyt5wEWB1&
zm2Om~gtZ|0PkqjOZQLd$!-BK19F1jFFf@^6vD65*C*#DTSRRSEH8qjbvD6Rhhwrig
z+N=0Kc-lq51C$&=6ac`rMr+$W)BQUa+jjC0+qP}nwr$(CZJXzNzA9O+0<v{-pZtKL
zm13gepyH#_t*oGItsJUcuRNwQsjzCG>bp9s9-;oBv1%4-d2LXePg_IVQ#(mlP|xU#
z>Q@`ohRTM%hNX;#0j54PjXA{JV+FPVJBNM1mFK2%S$u$R#1G`x@pt(QAt6)~S_)%@
zjlwBoN#h<<MbmO~#5~G;-qPN()AG$)#yZ@(#}>2ovK_Y*`#O7;ql06gBik8uHgryK
zUUvR<)o`_T9dsMq72I1roM)!zt|!C0#Cy%x%rEmh{1yG@{m%j@&@}KcSU-3xlnm7k
z^$BeboeNvS!Eo_#{c!K__eg<A!^qQUGP*HVKXxfD#D~Wp#IqCIlBJR@lB<*HNP|o$
z1=T^_(GWBd9Y&u}h8Peliw(u8V!C9L8cE%xJ<@yWyYwGd!HsYiJPgmktMDFt9N)yR
z@n51NZh}ckQk%3Sy~$WIpKK(D$yM^4`~(%)Ar6J0GBkh=FaSowY*-Du;WXTa=kSBd
zsfmVY3N1tH(w4L*9Z6@>m2?+9mB*I@YMFqf009610Nenu02Tmn00jU708jv60CxZY
z0No3h00RI4c-nQ2!&(La5JgXR%eL9JHrduL`?s;}iF(9N_IC$&JU}@&6j4xI0i3`a
zFQCrol^0S=>XmEzczEN*UwTS7;PH)@(o#_T#%nn!=wO~GG4dq1=axHCG%&;fgN(|S
ziHci7TpO(t;gUYtEFsar-p5oDBd$rR2{PI%`piVRP*Z9Ho7#wKpHpc<oZI{L#?(I(
zQy)Ja;eL|dwSvFWXGJi{g!Sn!|I0~<8}FoXBX`b4WDRtXVbIxOI=|lhxY+yS%R5pc
z#uWV`i=fX+Oue*vZ4|Zd)@sNrmu4a)xmNqxV3m0m*<xSY`}*}0yZuFSc-m~igS7$x
z006-Iwr$(CZDjMQncJln=uSOQDJiO@OkKTt4VpA-(W*_m4xPGm>(Q%EzX5}W3>z_O
z%(w}Yrc9eLYtFm{i<T@~v1-k_4V$)X+p%lUz5|Dj96NF9%()Afu3Wou>(0FgkDfex
z@#@XH51+n#`|<0~zkr~Su!yLbxP+vXw2Z7=l^}T73IqTE064jRb8XxEvR#*K+qU^K
z&)IcuMyV*#`sFwfBSoTo)ygE;7Aez}YsqrO8MW_Hff~1N+$oXfLb_A&iX7=u?97HH
z%{J}X(xO#|PGj1%8yBnAfI)o$K>@+e1405q1HuBr)dfU2RBzg(1`j;+$gIbv%vdyM
z-hwAqELqm*sdcN?Jag=Y=U#g4l{emc@0|}m`s|Z0zWU~e?|%C2m%sk_=f4v@g73%T
z7wY4~UYeI_WMFQ>;#yji&t6iVuUA}Jz@DF%3ZgknGKx~cERMAN(jpK8q~5^5(FFj0
zUv$*~c-mv|-obDpC}JZcV_)P3#+@7t91O_?8yVP~wlcUI%d;?Of!GdQzKm8JY8)c$
zEF4e)KL!^z12$P!umG3SUf~A51Dpp~9T->`IDsO3PJ0;`7#x5QD#Fa*vQdSxBQRov
zLr26$<`kEWY9QV&js^xs7Ke`HkO+{HNFV^2ZNs6#A;!+aqqT$af9nR8-i=H^?W`#-
L0EMk7h5!HnfQj?9

diff --git a/static/fonts/roboto-mono-v5-latin-regular.woff2 b/static/fonts/roboto-mono-v5-latin-regular.woff2
deleted file mode 100644
index 6163de7b0ab1b46dfa01699d5d520fe2bf24980d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 16028
zcmV;NK4ZamPew8T0RR9106v@m4*&oF0D1HP06stf0RR9100000000000000000000
z0000SAO>Inf@}zZ90`{f5eN!_!DNB30}F#X00A}vBm;&91Rw>2Vh4m541q2iP;Mn-
z+|BHEKm?KMEsjJ88wW^a;OfXguyL@_hPSf+|CpSNAuJC=)jEk~!7O*&$n=~JRtNFc
zZbyq7eaM|On&Z1Kbf_U{QP?b&=*5JKLmOACNbT}G_4Ds%{Il=)KUC?nHONb^Jzk_r
z#}w6*?voGV?E|r4dc)}|Llz&Qu}_j*cp$y6H%zj-CoA{cgPA>b?&jwNcdXUIoB@7r
z{ToUNk`g)C*nkxS*065ah+0xB1|vf(TEe14B^0MU>+XyTv#!1uRsa7rt*^n3Q4rBI
zMMZ-pQ!Cs0vA+A>uQRiahu~g)moY6N8w)rV3ny)L4{K?IS4(3dmx}-V@BNvcbMC$G
zJuS_$f#m>zARtBSZvu@h)88Kg8B;cyp1A9Qs+5W0iP?IsC?!TSWFp2!?2B?16($O2
zMV+Fis~#IqaI6OlZRxDEtGh>(`Od&76Uo47(?Opu?$V~IT$DM=Y3@2!U{;FbL&Sw3
z`+#j_3s%cf8A6D6b`D>C0X;r7YuJ+Slu|RfFIi(?|IoGFJun`$0x3}j2+7tmYnK;u
zU{R^4FGxw*;ABH<cA#s?dj`)DUG?Y}Y^=6rJnH{cE!#f;;U&2jz)MkkNwTxv70pUq
zr_{T1=b{=8z!_jb03=9J6m(Py&;^RhyhM=~NM4Ge(o&nG-E~g6Y5jV4ZrhN{by2zK
z8dJzlZ$D6rGR!G>%)LtW?8x`UGACqVFuPOE2CxXNjf-&s?6se7E-qjnki1Z;3Yzwn
z-2LrW3v{(^o5r@wS`<WtC){H9=e7A;{cu-!qF>^uRY^-y*?oNwKn~?40%hKi<N<zY
z0PktGtn_t`;tgh#$p#=Q?e9X}g1H1BZ6TmqR@d%3XXcT!9$)~fc3k~`UVw14kOu*@
zy$1+Dw+%M{m2Ejq6;Rv;1%)<>f$!_Kl5C_bfC5y}Y2H!Cyyi{!eCB)q7l%~qO}*56
z2e*i&C`2tfaV1_>&aZr=T@*aw3snX|3u{~Vy0_f-xgR=7bzr#2#d`J2r40WK{xKW;
zCI5T2d;OV04_>!{N&46K@6^9j58Jh9=HgUAEA7J{KXApBpruQHL;lvDsnP!6t+?Z`
zBbKdLwWiA<XPkA;c^(&Z>v7Q~mtFCiUVUEohO4f*?uLE??z!)QhaP!st3gjZ^~`fG
zZ1d8Qev!hoqblQ%hx%4l{)^{w;(ET-GUfb#+L<?u310D05lWgHb?dptpCB9;Uwrl+
zt=s`a0<O}?M4tXb_Tnk#>QiEBhrWlrlzMfK^722FP~K-cb>0IHHg(v8WHZMAfsV2a
zD9Bv+-xE%s`abnJnvLFkPF}sMw}+gbC(qi06Xxy@pL;NA6uo6mUmES;D`AX}F~R>F
zSxWsZ_I8lebH+Q!Jb5q7z|2QMHZuo>nS#@_FbinNNMJ8>LHH^m7BLo`_Xd>!L%n*L
zH<?5^S7#<|1}<YSdgPBXlqz4cuhnQ{?G{e2Q-0;j8%t^z9cx!<;BG-tsThwbAmH^L
z$}C{Cfb^&UK2lJVCDq@@0%Q~jAPVNDIQz%)HtIlktyq6D4~vb3=z|&A9K~zi(2$sK
z_*hcF)+rQh!k%SRqbhSNIk1*IijE!DY=hZ=YZ*>|YEokp#19b4mXIckd2##HbTcRK
z)Y~;5$e^i4=A)rEkj1D8xM@Ba8!?_mBhx|WC^IpTgOE4JEcwUsUZeV?fm!N{mOTYs
zD37P_Qsa-IU8t8o^@mo-241J9Z%-1=k7B855e+%M*K)4{s77*Oi}94lmOe$9S<t!)
z+85poHxc$&KV{C2k=Hx)G3JIqMU--$Yos|L1CfIgZaN{(+iU|?bO;fw^rU+BQBcB4
z6P4d3au#Jo$|6aFOOy=N-}%K=$jU~nFTcgk$d7R6El@^7>3X1oM*FC0N-eD(Yb2T(
zwm?gv))H?&q=R1Q4*1$Z-(R<3g+{=e_Gz1rgLS5KrA4tg(Vfv#ptn$8i8}=L6~i9r
z_)NaYKtn!o1xXz~6l=3az;G};Vyi|WGAZwcJ}ujt!%p~M#(A6VG1n|k>x_<?=-MdV
zvc=isRw>`tKLNQ9RiA7*2l5Oq6f>76^`ZI;&G*mvP`BHJrq=>fkbRjz&45k*4HTG0
zcX~fCL)Qy&Ry%tZO-c2lbj$@&RF6EapA(Z_ku-HV5f_&3XVh5RycU=PsKUN0{R@-e
z^+g>qk^MS%w%UA3I{rS`A_F%3Wvwr}c9DLn!*$_)s<ghexc!ZVlo~O{bv&IdGmUuO
zg49gEfMT92nq|%-L83V1dHX5Jo+&DPDNZ^r+fE5NM)|uU;T*G+G2Q4i-iY0AUc4Xz
zT{vlDxB`C9>IPRNN3#tU{HS8uCQ1K{?r)dG#a=>-$J!XkOvF=siKHkWwdTffnL625
z?@$LWB#5~a#-pmoZ@j9L%0_S0E8IfZT$XOpEj+(Ams}ooqqhQ;&SIJIo0R2R*G80G
zFRfT@@v6oeWBK7*UI%kAVeST)kJ^!uKsl#6SB!(%F;Zu5Mi(R&emyGt!p-fedbZHQ
z>GY0a_$M)mJfb?;T5i0r+s^yC%^N(vZ3wEnu+!#s7uA6+7wyI>iRtuMgWATCe`>TQ
zdn5a3pdi6C_8x%QcW@g*b)?eCxJK1R&LKiEfpg=I&;w(Jjs=2~APG7Z6wX3GM&|;-
zMUVtt3JO;t-~?R@1UEqvbSo(M5I}S%5Znhz(1W1x7y{1FlR)qsBtb8N!fOaPMQ;MZ
zdyoWu2s-=?fUJpmc#^;kVniO2V>m(z*%n49K7r~JqhX}bZCt|e0j3YIe1N@zaD0U8
zBRn6c{qj+#TN~v&CoNv47t`lD<<$JQlR6CmA-pG|3EU-%3%ru|07aGn<z4`&Jpi&f
zfT|lD>5{&n0)s-Zmq;SntB{_sb5fY9QwB+LO$CyyW%tFrC!DXA0AWa2K3#^@^o@c*
zuvSzRLX)V5rnpyLPyr={sqG&@H3!q$>95fp7d>c<694CW9bt?Z;;!qo_W>GJ>U4~$
z)I-Qq`19PIWnp+SpJV?F<2<w@zbK-xDw0sUODDvh?;_VjXg}h7;!NP>z`2ie9QsYp
zIj5Yl8<Ben-uNTxJA{uW$#R6=bBrb9O=vR~dx$ZN$^(=|m^+*+9M5nUMI?NA6GmN*
zFfKyOslO&W9(pVm7$S8qqk{r;fJ)~eK$IeEWXNC$!z89n+*j!+U@c4?f+Tonf*=8r
z2cz=o&8IdQ8_!&U3G!YHj3furPwMtUfO%!)KKm&GOvec+LCk6{Ij|*z$`0R9FXgy&
z@Q0Qx&&JqD%7!4Fm1H2D&5P!eg|X_F&l!(WHaS2Ox*u`GNf~ef@ffozlelIiax#!w
zTH4zdnJ8{A{}mf;+YqFm9UgOV$26EH&a=AsGeqI*yGn=dW-lz=p3E6Oeme3JW8=^J
zE{VYlzi!AGD`G-Pa2$&cp`pQCYDl$!kBT)PavP4u+kb5s6B&qYaYl9fFfn;+C34p-
z1CTD-s$xJAx!ek$#U$_CH*zPsdB>P_u^j@U@oh3a2s@NCu@kU38w3{Uxe{-ak=kFr
zGS9e-&PXrmgs&_}g1`bkfmjlkrfi9dvZ27>W^T%p;-q3~j1IJ{kw}w9UQ+yYJ~crc
zJB!pjoZ)OXpjqS6MSFs<T^^p54vtceFLJ(V%Gnhz-I;(>ihP-jGo@vh7fejV#?we6
zwF@|m<!m-%?n1|zvo}#1mIxBJ!Yaf%a^c(O&m~QG*30b{ZuxXm2MRheGElJbgqR+=
z9UQhx&tg*BIzX6$I%i|>Pnm_eMmr*$QrSuB0Y8}z53gng1F-oEW_sb=@hq-$dsrUr
zGExl&NpyImMG~p$m7p1D>@gzpj?z@C*3SYsJ9R4dQ7|lkM4EPvrzb1jH$^Z<)}R(O
z#S8(4JP%FtCnJ&qk6)_{wAxURw4*?a&6`kRa*ljTe2XkGGr(&3<}Jyc4hr|CiPfeM
zX-BHRhJvsbpk`<C^#q}n38`<nlUf+_g@YvP5U0XRMPx)2(LsrFL1cs#<a9`LnF)`I
z&gE-T2Y42%cVB`siHx|ziWOS!n`cW=jbCAf(>^fmb0g$Ft5e<0IFm919+4B5gS<7*
zW#uv!RF3&cpO;EhmX#k&)j_Iwy40<AAxU(<#^rq&b3q!Bx8#HvYGDUSPJz^9aHJBa
zqnHVYNF>HxhRZ-~XA*RRRH?-ueofR>Oe8p>u`iTUebr!dm&E=<)}n%hP7|`)jvDDe
zkexia7WcIg-7-V>$$XpvF{CHGInv?OyA)Z#J7r>nrPPn+5`MdFUrZKPfz2c#W_2^_
z@ZG$s5FL0%92)Q5>_c1g<}__6$YLFWm7E%BN$c3~<VR|LD%R*cM(d_P)_xjNeTSJK
z{=V7mm}tEuj3?x0%fMKz$#X+U&ar}G+%$Kn?<+{s=9?B5QPiY-W7($fIVEy?g?e7?
zH*6%OOOCHdBJn9EZPQm*KI?vj$*N}>LB8N;41Em+C3Ega?i1-F3-F==lBr=lepe7V
zs*JKu`PZ1@97{bKxMppYWvR83o_Pp~nu>LXk1IucHQDU#t({5xcpV53cx7o+jlGj$
zGYF4oj8q_ZGkV6L`ZC8!i-uI|e;>)kSYWVo`nmEJZ_7>_v8r+m;Ya-8J`-ywCy9wD
z5<yT@ZzQMTspCvqNx{T;+!8^fM4VQLJ!T0rcQP^UlkWLqbqP3y^vp@@HpH>{ypE;>
z+dgp5X)Y$S=bgL@lEiElgd!%`vDldlua1aA5LUFpRuS>o$f2>R6X^pT9>n>RyLZ%k
z+8pkNF(>f_sVWXO%A>|rl|lQ8C}LR?i#yo-9c{4DX_(~0r%y2lOhV<rI`)TXNXpi`
zM7ih^mL{~r##?C@!J(b<(T+gHBUNII0Mt<$QfD9nrejr@N)r5tuOBERtD4HUT8zN7
zgYc{Twiw|Zx>Yx|>+ejhcW0d;$V;(FRmGWLEjI*VMv9fJ!|5DUms7fR6i(Zgrcgcd
zmt`eoJ^kkq+o=?1UBZhg3uDdU;dbVDiQ_8m2FchdiRF4@5GaE%I-Z6A=cN9^H30ba
zl;sF=X=|gqwU^UrXu8PUQh|XL%ik4<lW@}6E&;;MHL9u>)eDMhdKLN4MRJ*ePA?h{
z($Ex}9S<!BXSORh%Y`-FA%RZYl3d#TbLynr>~Ai|M%mQ2OE^KHIF3krC3K42LKk!d
zoSx)`5@jF_@TAzy5H|5}admb!4mA^XW_NmEC_ekK*^nBdAvHovBavZAi6SA1#V63j
zcpBneq7c?K1;WhUWr9n+BEHl$b~D*UM;_0Xb#HUEUPxLrsoa@r0U2V|<a#k01n~Uq
zkeePHuu9|(4m$1C?bTzr)!o&9@yB6Ooa!|eN6}H$6AWf8(nq`bXR7#nDs66_&Aw`I
zjP3%Y@o?Ob%Y3>%^ww7};X&@Ebx?Xgj#HS&ZuYfkE}Eux2`_)xg1L+zaM4cgIY#D{
z_hek@`b{<d%6kQ&Vjb8=L5Mbc)R8xuW?Qqzk_SJ{yOEx@^$DAo-MAMwUF`|q_(}aI
zZey}`!#o|3M;0(Gc%$rD!D!yIo)xqVOp-p<p?_+nY41!JL&}Id#poXe5&@@xg$4^x
zU=pJ+!5?2ue_^dW75}R3EahZnoHPkuciBwdozSMSt+*UZ<<%Hm86lAV>#4c@d-a&&
zrHk^H20IfV5hoFufZ`!3F^)?XTzUww%E5ZjXM<EJRNHyRLE;*8tjwo;Y@>bF(9@8L
zG-;m(JDkL9CVl$ew<>H^UqL+aSwj@SMDcSj5(U=$uE0X>gC9}11s8w)<&3*;p_tdd
ziN7&y1S5Ax*Z2OHzyEY!=)VsGPQ+Nu;OeiRc834SoKf@l6EVL<|6gT(UgppKJorD@
zQ|UyZ?-^fg4qx!~`PAgS?}yNB?}x{~bMQ*QtI1dSvl{<K!}IYacMe?%+qhqsucK67
za9Lm}hi)NAVoDPy#g!()K%thf-Jl=N(fGYS`I^*sm}sqGF4TGQGHo)ZAugL)3Fha*
zH7u{|t7M3oB{iU!EF+2~g_y}wGQ`A^B*2WbC4O1*4)F7THl;u}z4rxJ3jXSwa@;pB
z!SO#AR0Y^lKg)omTvh}mdd9WWm*2#Wya3C<FZwt%1u*>W@1C?#p$(gDR9Z~~JGG9l
zHx%4t70DI~^0RtN3;NJ1eto7Q4{4|26Ey^}nC&i=XN_m1P6Ibbx&<$}+SA{>ud)hh
zCs=yJ9NAu(J9>OSzb|`)wSF#|Dox@nhi8MeRAw=3!@<u;nGGmLL&+x{Wg}6EX(CE8
zk^w#x!D~o+GPcFO19<M5MH^)!sK3Qe^(QRbt-3gP%LlCs6`$pzE(Tr9MOS>@y7U0<
zh_h8#cIe%rr>MV2EIy1&-Qc$DuvIj3yx+Q1@nvqtqtda)ubK}IJ(|w4U4KIS863UZ
zT#jG2Ohqr9j9;yp#GmLW{Xcum`lRNOZmc>MW!OA@e)^i{+SK`}6%V`@kr8P|8R^9n
zPFe;x^+5iqcS5Mn%ztP8&H2755lYBUNip%Di3t#{F(oAr4+&prKMeOl9}4Gqp?A`s
zHjN(>JM8P?mT|_@o%u;l^TfKu?oe23bn+Sb%VxsK;L&YUJ>xsBU#4jA?vPzOCpsp!
zy>%(g$8)`XbOrt>cnk8vz<Z%|UcNQEBtnHEK+0I$vb0=bO*&5kv2rey&=;Fq*7=Ug
zrQEvO+zBlc*(qw%H`i`G@-8OYklD|xfeDzfVq#ZMcSlYIgya8*4f%qaG48S~(M<XU
zTzw^dj|mY|h|kLtE%PGFgrwp~Q<j-~pv|&O(pN0w+bRW<6&^CYl+QFn>2y;PpA9#1
zIVin?=>&88x#Ty#yfuAG<x$O8)2{t^BaQvmtq0GL-@gz%`TDdxt#7#rCO6G-?VUNN
zY*oY)j_x%<L*aqUR)cKX-{=l$+uh}2nJ^p;q(#huyM&tBOdf_6sC_k%iyt^~IHY70
zW@XBXvTNg9xwCAX3|<tOWj&xW4Q8wrnn|bXwk}KU@?LbMOj?`O7Bj%s8l&INIcJ*R
z>w3Z-c{P%uO%UVB;?1-Q^lquigd;HxnH(*oRloo@GfNFb3THq7J0rLXn+)2r_#Djo
z1P4s5U#ZAwD&jGUA+=P4U{8D15kiH28Q)&T-(#dETj)iF{HEWfEW9c~M<}Q7c9{0#
zOG^&m>rKqv{(U~wG?P$ZPNmXKseA$4M5V*^e6|_NpqiipcA7r<BVtN1gH@P9AZQ_U
zCZvQ+h7>Uv1rP$h5W-+Ui}4Ky4U-TXU8uoSMKqu~9!pcpB1xA0d8X|d#|kP*XC2#?
z6^^{E7_&;~!1P883)rQhS8->`=l3+d%bgBC^!>XT1&JaOMG};&LrqJnj6^cikj*KA
zwhI{GRz|s=!uI!{oMJEyUth<A+Q#vq*6Tj3gMl3j9gL3o4oCoW=rv+y>o_s9?e(oc
zSDf<sZx6fvC161gD<O<0q$ps8S=J7xE2AKigH0FVJirBez*({%TWp%mvg*h?iv*dS
zQb&dE%l9_?nwxrugdHK1k7F^%$mF5xg8B$AIruPR(3CHtD(HTxW(F;jpN%RF>G78O
z*@!0#+FdL@TZ@}O{+>3D@`S*)!79RgfV~Z!neUi)P6{hbhs#=4xL<GBxp6S#QT6ze
z#F6;itt|sL^!|M^jPI8;@zC7wp#XYjgE{@GV8y(v%QQpOv|cXjK2HDbbhOcgtixu?
z@gKl1T}s5uvhXEI{f7w3md_fRJqafFzW7hw=ixDZuQkDr0^&YV2&|z7O66m~H$O;e
zu1HCIG+II97QpRHz$D){P_<4h0iu=z6Gkgj<V;LCbu*$|%rZe2;CsBVhD0ePBcDvg
z<jV-=7{$Ld?t`;|M(J{U^D3*lXgteVsA?gM#2x@nZvj1H4-iIFt<J)+tYYgLtF2YE
z7EtN&V<PK>`88M}%ZLyNvAP6npp$Ti5a>*>W$1(=1A;BAK?_w#haZ!$4-mI<8uXoh
z$*uVfn5+dRHNP#L_)b3!B=VzsCSAaq!m*QZ8Tf7mY{X0U9cywI2$lQO!pMy`4s-(E
zZrALk#}(<+-oCQFi-5R0XRrNK2Iao~T5;{Sl|z6Brf^Lqg&n!$iSxkO3UC@bPn=M9
zHk3@@OU!Gut_JCnpXuB>x<(|fL~vOqlvtc;1lu>)6V`k}8lZNfK_;$5F#(0jR~p4m
zs{rxR_CF`nk1ymetOMd+cjh~fCvW=H?N}(am(Dxp^X>Ui{G|Kxuh=M9>1bW$n9PT%
ztxn;hpYak3Q7M#|(;2KvtUwL7B|tVETsZg5WkB4Q-`aJ2HS*Oz?a4o9zXEsefBQfW
zAZ|}g)TH~HXa9em1IB%t8&n?hD5U1Mzk)>E(}1`!v`f%D27qH+1jLO%d$DL26M13%
zz)|#U_JpF#UOq}FDpGhWRCePgVh#XDhYtg8r*3-%8bb<y^xUS;f;I#=;%ym5zC?#&
zGIVIb9>=o+9bU^`fprN*WNL<HGWBSl1oL8Vs@ni=;tM>0xS#7l>*PMGWTCoRGT-C=
z-Khf-r@=qe!sUFFnZ-g?%Y>HHAHYc7N7KM*%t73=s(<vaiOy#5&kqEp6C|fj-H)G+
zSp-hHfs->l%~ke0^}9)>rMt_rsvieSn?48f+0+>C#8wJrW;B;$!fe>*CO88d3B80Z
zkx*ZJB)J*G;hO&q&8Up8-_+=X98p45=K*oAnLwxTTWckYHh!9mUv3b3aMplpj4%JV
zZ%t8gGmI=Ax=P7&Kv}@gLFsX@bBoJq&UA((dY0R3Qtc=!Q%ww*R&bi~<Fvs#<pRiX
zr4wxy3#-ytcw>Sr2cx9~Q8i^bw$vbn6=5Q3xy*u;8m3+|w!PvQR;%;mj5~@Ky(%yJ
zv58e$fis0esESpRvNhQPZrD}8gq;Q??CLBjj^phHqL&~O_e4kkF-cX;F>zZz_ayKQ
zfWCACn=gUR@FqdAg~;dE5(Fi%CJ+P2ewnOGkLcfeBmRtgA^wK@%?J``htDtY;{g%w
z%K@i_0gr`O0wUb*6h|)}d?6_{+(o9mJp91@{&Oam#eMh0`)sKf;G)Okmk;CBV_u0z
zy%P0X_)$D(|4%<(1&yHddf%Si2ildMZTjMUz;1hgW)~2g-vtSBxsSko&_}{!G~Gj4
z$I#3N7n}Y7GQM<l%Z7li@Sg+LZhRWVmJM-iV0v<!W^~r$*QS0C`0%A`>2C5xPNoW0
z8iCjB$gIf2HE;@f13d+2k##roGoex@p)4VXsENBA1i7$@QfDigC7MbOpqxd_!Q$Tu
z;mz?OzPkveaT0Xv|KB~bc&fZIEtaiN#&I}Vp$){hYbR#al~prBJjbtf6)=E@f@4l{
zja75X+A-qI7LPn}m~FAr6<B%nH-Q^oga`gBkH$(YG)`^OkbJSVC#wuBB%vgM$AMiz
zZ;So_Mbmap+q#>2)q<#{UTfWbPTN*7pW9Hy98nzy`ZQc-1&pL=;P7pU+j$6n;trmz
zfs?ZX){=YEF*c_(=tddROb=jyRo^;1bCPY;&#LVc)VCWv^5h|2t(7Lt5Jx=!BkVUQ
zvn8)sW~1{g$;0v;JHwq<q=P%fuhk*?)OU9byTzrhbw&L!>5V$Ix0f)hr=X&ZC^qbo
zXE7bxWre7kJOJ^jzezHr$z=rRCJ`?P2B~JN&Do5rYlsnqq$+p6t$H86g4G_u42hT-
zvTULC0Ka<%Bnu-8Ys8(f7RpWg*qqX2oZ{hFey(L`E$dKo{gE6qqBhKiF!MR(wrD;{
zm@Eu}v8rJrL250pv~--IGt8-N6FHjrk`~8GBH#Hl?1#|bpNk_gJ4pKLG7?$8hn%-k
zRt@Cu!0IY-v(^>Q+CXQI3n(1bp!i`PzyKa$;Au+wUfukTdB>j)?InzjMC`<%+lZuE
zbl7PMgjq$Jvsm_%jAXq}b>OrYjs*naieuSyc$IX%T6P&-Mj~~h(d{Hs3I4}F1{XJ8
z01R;9XmgL=@aoLfKN`R02A&1_0aGFTefXM#9)hE6H2Kxg#lU1{{m)f25zy2%wmZ#@
z*wzjt|M*`tjOj))$=v@@{{6JnO{t6EPy**D>a_(l&Cr=}`z^;`JptJ8ZBblK>8_G=
zv7d(`ZGpSkZ+A|d$#d49&C}S&U6BcT3#pNM6K}aZ3fQQ`T2GfsoOFUouOd<oCy(M}
zNTqd*Avu`+QxyLg%!Vm?v7ZN!mn(iQJZpw$D&LEcVS&X?mlZavpbUR{lcGdwXYj3%
z5xIURtc85jKDMZ=su*XK`qr!h^3vl~Fp^tVIj^=)P<(}3aN8zq3~6DLygU-)bwjWP
zc{juq*tWg35^=IvCw%2e^y%V?P59n<7p(g11&Z5mjahKsTt$2UPTu{lDMcJq5;lXk
zh;oc<7S(Cb-<w%#oXfTs=eF`aP$=u?A}~3pAZG0aIH~T49xM(rY&k%vm5@wq0mD_V
zUO-pa)+mh?v@WiPgp<lL%EL2UgZbHTF2iU4$bJbOtaJ#%(-VJtN3<cP*UH=?4bu1`
z1?_3Y1-M;CN&HB>51H`#BwoHyP?NtMr?caZw)A-h3gYUC97P<yZbxyl)b9dinUn7y
z!U|=D{fxaFx0^B)_n2}ePB|E{H+JvQ6HRL;;#Xo<nocYQ87bq-Q*lRPj~t#F4>D4g
zk}b<gqc6rI4?vzG_96B?KL8nzd<xF#%IMv4ka`c2_bQ!Is+QaF!p%SZa%NG&lyBXb
z!x#RgKYBtql91wiFJ<S{iRlB|(hM;jdmMe~)MOh2RGq43=N6`!!!7ug(QQ4ufWJfA
zy2n=Wp%$2#QmAHIQaPY4PCh7)j?f3RQCERq*3<QvdbIU4@N<P0-ip;L=nt~pLz6&2
zn+#|D^@fs;)o*E~tza2lkNHS$UZn=MA@piG9~AE7fGnwMHl+||4z=J{$F_Ix8ruo{
z=^0&7AQwvphVpeFqVVb`EM$wk)JkM$C_*JrQFfihfO9}^yJJ}Jfe;q5NmgjZu`#MJ
z>G2-+k&3Ke&%Nt0TsX#G?|J44{8WWmCy{3{STci5qA+qgH_q22nB1T%>tzZ8zVLiq
z9y+QoAHp6lN0ejN%ZG!nztE37AIJmxIOQf>k1&URxQp-B`M%=D_x=AP*7;0}5A!1g
zzKSH@SBGZi{Wh9e3oggOoQjHRVwH(Fq`g3g7qCd0SZsCyoGwVIVf$`m%+M&<ya$u`
z{QTYc4=ZbXx7wX$spCowa!)#=scn5V8d@$6XDAdS*h@|AeS>XXUC8NtMd~QEz7b!d
z=Lw?BK8?PS!sWUs8a=j8B*JpPi|lVC<Kt~{dblCLvGjQ99<8MxbY!4;fal@0H@B~}
zx8yF}dz}5><|t3p+n(PVtMi%1b-L}^R8EFq&{)75>@GctwdyaR#*Bqa&F4X~oSJf0
zQ+zJZ4wezqr5RWlS54~AE|0H{Kgwy*F$c=a%6H_aF|oWsV;*m7SNW+dtMd%0)54jr
z@=(&uQjrrW6g!e6B$yP9OXe#`16V^`ZNgD*OF5%I;m|Ebv{V`@Gw|_Hp^`F~X^6Wd
zkCKYR^Ys7^n<~i98N`u8e=SB^2!wVtx{W}nJ%&JA34{(bs+~ZvMB!guZ0K!lq?IF?
z5@<DDOM})hrR7LkV_#Ff4dAhu0{D<Bl$TbJ9?De@!39hvz^Cc;?4wQHi^B4<MNv~X
zdrhxnuQqip3d+hC1x;P-RZWE~WtiPwVRG@er;6*|&<;;2Z@FB`+ru+&XzS{(YKLc(
zw`JI?Z+xBi(#}!?jlC_^j-!pULpY!_l}l$Ua2w_WyioZHYF#pySpyMq(knR>Y=HK?
zhSs=wl%dYLOJ2mxME`K6DE&l}$8TVPM$^QJmZz_3_IN`xJgvx*reMm|H0S{;fVmK9
z`Z&AR)QPoD{~x||=3htKBce9y`(!?r#Fa85#uIH#|Fl;${lG;dh!=%blH4=NH%D%U
zNA7+dpH{}<m89Xai_+M<)G|CiwUo^%O3lWVq;fcEC2jaP8RVz9xQ7r-TznGrQC!^5
zPzD&K*4EC{&MwdP%=GME-m>K<_B0zw(eKk*z(I^0q6V7D%%zBUBL7)JdbyNmOXISt
zlZ4b%4KXd2m&M`n4zG`nOeK9{%HxU2*=Q!2O%`SZ9LPo~C8Wy4Tt;oYl!Q<dNxVWv
z^kn)l36rlP+Y=e&nphPnOG};IETb?v;v6r!CR>o#2!p-zzX1PTFQf7(HY2!;B2>g-
zYulCaJn#j|5x;sQqnlSWt`t1+0P?al(ofrXmfO+BSTma#s~zoUd5xifaf5$<j-4Zu
zj$<?O#Ctos@znLoBm0rM1NKqC)Icu0wG<bV*?-ZQH~{~3W^3V7Qn#)lEG%@ROPJAG
zP|%Snmv?3s6ku9~E&--h`%F;allQgYAR>Zyjh%o&u@X*2@(`}{NZxf;0vgRqxE{ev
zj}HwEeKZg3_!TGcDXhScm?DA_QkZS6cUqB($p68<^sk*ZU@h5=)#_%ls&s^I8BCYJ
zQKY|l`^Qg^sR@(~Ekh<VR+xQD&YIT3fsusPiZ`L&ZqAGn^b|9V0g9Ti51Ri3y^(WT
zAXM<Ajjeo{K=zWQB86Y9xELSq_?NKnPVo?7r1JRi+~$x>ds0(yJN1j$Z_d1*v#LKb
zJRf`|tt!?Q==8;f90s-`_r`O<P%+2GkbNEdigx%1b)yqc(F6tztK1YVGQtguaGj>L
zI~e;)OBL4GyRHawx{vnXlJl1!5wbdzNCeg42~fRI;zY@Cy7P1g<#<)o2rXaSlcrM>
zJ2mpunhZ5ul7&GD*<3l7twb4^`B@#s>dtgYx^|Nyj2%Ny-y19Xj1vUOV8^~Dhi9N9
zY>u4AR-w(D)Ntlkgs*7utOSwQmq~`kgTOx}2`FAUAwu&|Da=%P6qa9$6w2TZ?%{jq
zZqRp2s6`yQR3$#?%SG8#G8aOiZpRxJ8;K%iD^6X3*p~OzpBh$dC52xMXTgtsqWud!
z_|AKrn36E>M>o+7csg^7Hkd2yhK4hov&kE9Ffrm15L5AL$lgQ=5)2nq*5ID_RJs}j
zcWFCBF9&AMDy){%qTW9K33I*RV(-97L3P0ldoa>kc;o~BX@UN`Z96n+AChL}5yOIy
zKJ612HvPPDv+w3jy>hrYlE$@@WV-YoAuYXGR_3IL1WvlbiCi>fa>olkJO5cJ$#$wh
zdSL+Sl~<t9;fo*}w_FoUv>9)gii}^5V#HUTP!={XoN6=P)(fh?-R&vP*#8GRbC(eU
z|9o6?K63hPwY!=_9XSmvHsIf`nb_B0+{5SySSC2@k=Uo%#;OC#>M?xrVkZytELOU-
zxJ{M9^no#2lw}etgKJHuRTRqoXDj*e(WiZZT-{!lrH^v8`&u{oYHi<MwvIax@N98r
z=)HoOg3Z$>!!yGcdqQK$+7xnr!mjEY)d|Bn`P!7{=+0`?il(KDsmkkOUB27I<f)tK
zvO3tl;xjiHoN!yJ{3Vi8l>RrN1N4SR9E{cWGVWaJWUAF&Ol=ctrTPLV#0gVgMk0>E
zl%Y<}o1D-(nCcD!v7QqCHDLei8=8*@k_M*0k`NGSn2pWP{N&%5y^~YBr)FY*`Oc9L
zb0`U!Bru8+5C}nn5iCF=!F;_S4uKHG>67?+M5Ooa^2kW}#b0M*kD^fT#b+OSgichJ
zh@t3Y>QaI6avX}p*jyQfPE?hNU>F1|;Uh*uYJ~EbUz9xY`a(uzWfJ|XXXImem<i3~
znGlS3UkOY(55@8JIR<*kM3n%;of@V+AzV=_m1mzk!Tzt_mY9Q)$aq1vC?O+5oWPC~
zASuW=K1URvks*rb#PgBSR2XR25WFuO-anL>eDDmcKOELS3>pFr!}mRQFq6VB)G>WX
z;r8jyY0p8=ZLiX|>sKzRW49F}2_J!bLFTNzh32kod5$#%8@i{nDVXlM%HK64f9SR2
zRO_i7r`k?!98}!dx&1Y61HB>SPUv2`Ei6~oky)tEn)EXCw)O7lRnV^PWKXlBm+qo8
z>K>?H;XYnBozm|GpX>+7+TPlg11nA5re^Pjwl6<S4nTVLemebWR|4^Q*xB>mhFdlH
z`FlkFuWRJ@peLSQcyS@{hCDI6bgLJ<@jyrqKmmnil`TpQ(~usCR~2L_pkYr6@_h_`
z(-Fwsn<fAO1YCJ>8<{VD>cfkB0k`iz6ouFoEC7I%{47KATlsb5aJTIt4@?8xgbV~V
z?99#P%SFLAn>Ik7erF!VdIF$xEK4QID=lK!8{=8gxysRQC?sPdI$%Ep{!&=Kw5SRd
zl4}BbJP{D*9u{>P69b`bbOxiiF*Omo3r`eGUX>Lj_5jSoGH)bWN)<<>RIyD;6+6sS
zVWPK*<PnP{q{x?$qR@w2nGa1YK+$4m3g|vSd#5q6JuHpR&TurQrlYZQqHwZF#NFp8
z!;Oi9A#QXIg?#6U&}I%(s4g^!?OEdI`gxSt-6NuCbo#^`l^Ox&=$_b)DMHznKE}1L
zFhhK>?RO2ddvY4NyE~5!POORBcZq*B2SjKUAZ_nHY9os?aezfdC_Mp-%H8AJ`tHeo
z#Ln(8M%6&<_bCOUwmZIIw0p7#+T9&^2Pd+MJ>~#isKn`A13(_lp$p3eatrtPx8y?!
zx%;i+c|AY-->s-#kH;Fz&up9@Z7Bcea~3Q>XU$ns^s05{B(Sv~Gv^VOcIs^k0$B$`
zuRMhwtajQ2qTN?H8%clv&cNvl%D-L8v}bxpw?VxkfMO|064X+Ww!V|v;-Z(vb({t0
z<{65lBwNr$>)DDKiYQtkKqKqxm{q9BZ?rCxkc5{??Mf2bnPufDByF*Ci{?~-UXa1q
zpC!aA<ojUz<Wno8Sep<dMK{lO83wy7H$FnX58IP(G4&Qe_lw&|ddL0|q4m)^DFm&p
zSyjBkz7MufK6VHRoz8;e4w7!#KXq@!DSpy%{*PXINA>$nhmHUz8nP$HtWIW}3Fqr!
zq5yH+|D#`9GP*OjqwKA@o!4Xw5@@JHQtFgZRqioK6pHAVA!HY`y2XTi^%lO(L0P)I
zUjBj*{U70IGdGUiMb`ImNIuUV8#H~W0_CF5;31EX0f<n8FpDuFYyt~AzHo7JyqhE|
zY~7Ld_0J!svk9fF3Ibhh;K<2y12aqk3>>5sQ$!5K`caQ`b??JBGP%ty&v^V=EKuNK
zoLl7{7Qf$g4H4y5NKG|Tx3qD8ycuU!3ptAP1m(+YQ<x34c^zHmcW=ha>9S$P<k%Qh
zP9SbEQ6^(3IZ6Yi_J<wY)Xn_6U+_fx*4Ej)u`oZ^Dmj_BfDwTA%7$)a-9SKbo`I19
zYeWD!EOgw^vaP!Z!W7~Vn>AC3P9d%w9m7J?BZp*t@_C5337sgz;%!-E9C@*VM4KKs
zW9JWXtVi`Sq&hUQDmolnCFmM?ss7RAKI-Un%4Z;r)iZG5O}@#jretGm>8{2DpBF{}
z0N_PMPC3#HKn~=FlXw{XrEnjzt=ya(?d|%lWSwwT*q{o57ZR$(MEZ7HXQu>5wil?4
zW?fn&Jw$l(S6F`}j~RsIN{yX#JV-}4c%-jps=1kQbPqN^_i#Q+^b8Ym0=)r1r;Gr-
z6w**xzdAWmH~q~<4V9xDUq?@xRSe-u)dX5W@L7z@N7+n|D<_aB*U-S-;B^n)>btX(
zX{g0y+ju#>GeTt2RRuVZ)yT)U+H91X-1XM43{mFAY-N^)HQY}p)%E-czqb#+j*TSl
z@4^GoDS@*tQNtuV4>Oew3pPFe)p1K8kbn4Ll+EiF2m@_qFo*fNRu$+3_f-j9%~n1M
zusA%O=0Z=32{kWBn7@6W8k+{VANR*>a&$-j@W6h*X_gxmoj-QHwVo&91xn$S)!Cux
zrnU;LoE#RF=a{<%p=D|{7kMPY;5Ep}oI?RpK}y|ZR!>Z*-1{hoG6wB(UeEuoyP;QV
ztEBYvs8jpf9;(Jb$9DL{W*L~IznVtgHO8D`dZx*(*}9-Z5;$g9U#eOLcw(fJS(DYv
z95%7h>4p+N4!e9)%nXt9^^buD;12FR0G^haVaX_W<oSE6$|U&MpKUI-w5K`kM6!s5
zL&3V44gz4HhPzF?=(;da#ZYX=OmRfLzNS~D)G@uYLy&*^Udxgx&5#hDqF%96NLLFr
z>`4`1CT=avo;EQ;Hgmg$4R8>yM>U}0`lFX17-X|IkuwUWV=-%Ebk%eGL<2b}PBAH;
z`-=&obr!$=X<pow5rcp;`f^KxHyvQcOo9M8*8{MGrL`WR_89(^lLxWVjAa@#V2mzb
z9=7)$-tD>vQD8yAEDg0tO96WtB$6d89_rY-S(k7lySG>cNf=G&>x~Hbsqm;RVw)fA
ztA>h$H4pGWT5`2T(0lZytFzO?eaZHy0MA85)rM+=dQiDQ-k<^&>uLTj?CMTiYnVW3
z9}2onHhvW0us`GNoXLxKg`#5K+Dm4&XVx%EsN#CD2ojYEOdWSZ=OOd^$b<%|;+7^R
z-E@Bm23j=*lz848YyvHD&N9J$fDTBHCV&aHhe*j1pMzo`cgVV!V`mz6LTG^s<?VsA
zrhv`<6?>;J?+_*qL&NYeS(rtbRjY%eJr1E8?eF=o=AW|~_w2-o=}}HdXcH4<T!cu$
z)IdTNJtOC^P{rBu*#7zH{_Vl7WUbn|x+|}$Ueuu5p|u&kSnsn|_CLg!Z#8uVQm+J}
z=#CtW>kv6vJF04x^+YGsE-|pkC96@STk>TQ|6P0M=M72ZWtw;a9t__X#xy>@LdJ*)
zP-KFarP>|qRhHsv3Or1?U|+V5lz~GXW{5?K%vXG6vt4N903EX(l&mKN*#@S(vKj{U
z#f{4AYNr{utEK5hgR*r%?i(cy`AgR+47smcjMbQPN^lhiXr+fJJP9!^k#^+@V3aii
z1NPW29q!ktUC1dUZA-`<bGKxhGM9vBr|P6bgxDOI-Z20vYmHRK0|HVKsv=(%pOQ@~
zXAQ6RSuJ5!rOT-UtK+qQe!lJ7M7pTHe;pB8RQbCn2lwqIYv!X>@c#*bo0HOs{y*t8
zX>Gl%AuuYU-n`$N-MPuQ$rZ=Ap`!rV94S>R6b8{g6!sHGXzEN~p4xEZznf#*+?xPt
z^>4gRt1~O3{5iie?f>0|?1<{-TJ|tJ6a&Bsugmbluz+eEwty35I8Zg6sj`1cIp*tQ
z9INz&1?|MLcF^RLmo7Q?%eu1=g+dtn&_<h|SUHU+o9+9cm63?xq7wA^9%L5oeUWX!
z>rj9l*imZJ#=fP`WM(=PNsthhWQuj!SqGK~lu<*h=)(cIT>RCUiCt;YpWjGU(C!_s
zn=+be{woi(Av5fMtC7JPvtt#bD{MJUM<v@#xyE@HoeC{4l2}PQQj(EBC8Jpn1rlTW
zd`<Y=!@&%dN`v2<P<&rT4$Hab;#|R+>P1~g8ZAa7@{r!&Wrb%E;xb;L)gB4y22o)o
zLZ1#eHh=>-P)K_iN&M}tCMCqFz@rM##z4BsOD^o*r7DWaN^MtefGX@hT@jPKB1|;p
z2x3Sob=H_Xh2*vM{y?=fTwlskykyW`^-!MD{$-I%_<ri3@@hK_Ud<cK3Nf`o05Mj8
z+`!3!o-Cvj+tXSx&a_`8GKZgdxFKFJ-b^Hb^oB79coiZ}_H9L3Y*I`{>`i<{V+*3z
zx~7<VW?|#YbZ3T>J$)zRUsftKbF`P}RpIonZt!y56lMOO+#Rss?RsHGTbjq(H7f_}
z7(ykzS^6c6Z&{dRpySx=fu6crEyMcGPtx5hdJQRiPCg6qxt0uWHFAdMGnw#rK>!cq
z;fiD};oz_!1bnNAWlm${d1w|@T-MfPkW~$0vK2WFBll1qPz^_z)|p^D@sdGR&F4DW
zf4m<QXEoxdci_Q7jTYB-fF*jE*GX!t`r0JPrxZYgB;XY=)00CJ=+p&r3Wvc~;+PM9
z_U)6J1v)>0KnY>Du3o_Qf#7{{FjzDbO-C>wi-l23!}<`YN=bI8WgSS420520N*Os_
zXyvzB!-N456tdS`IE=&nHQkNCb)aTLQNL%R2Z%|yuK2&0XNcD;T_U>>xO!L?n^Fl1
zH>3zP)&^acYpY;_2Y2v5IA*PCpdiTTWlUuQc(}jWm;2C0ySI_j)1B!W|K0bokx;2S
z;ulN26B2Y<of74eRcZe>Ab2U?oft)7W$>)*njz3C5wE!CbIe|HeM2qWr}W*`g*sQ~
zd6iBWd4M9U*sy4@LLD57rJ^bC_l>ESDwW#wpd2!ZRGP#?XiAx+bYp*0i|Rq`WsEW5
z*saT{Lgu-gutsrkTIRz~a9_=fvH#0G-Qo}L@0bD`LR0N2mN_lKlV4@fN#)GPTNRkq
zL*lb!A980G2Kz1BNh$>&sK3TSLz=OFp~tfM9m2$6Xc!(Q3$qBbYHc8y4C3jKxCvE~
zYfZRSC-2YgC^$<4@p=t#+N*3<ugjH^G(a|#It+`?1=z%9u^~z8xJQ}*H#@E~8dq^2
z*q~*N^!k|N7GvPaxZaN0U_P$D@f*$Pl5+$D58S{;A+Lxc;<5LN-USHt_Eq&aHL+7o
zcsu>$d|tjwqEi(901>k86ZEUf#fNBZEEpE(sUfU#I@TpBR=e&p0}ynr?Kz62L?`GA
zYDD+J3Q~zwqW~Jzv>j95%1P=>d6)0$zWlpl5#-HXZ;YT9Ux!|VDSXbJs*+Ed`Mfkf
zd!~pOl9ouL^8pJF0h!?lYo1Rz8^eM$Qn)N&rIoB1g=H)kROPNW-{0ZA4G~aP6tOWk
zdh@|jp@^NAkx$eE6NZ`KbCr6<x{WO<z8`;8hL2-2rsn6pL$L~OGS@7L7MP22ldZ@s
zriO@-i)tzbQ)(z#|5kc;dt=DSqjz85e|_=%=I!m<ql0m1n{u<rIU`Xe<7N72V}j%!
zM~q&#Y()7mEze^MgbS{0Vr&!U&-ZsqDVWuJwg~HSqJ~HKIMv<baWWQWlVp>x18u<L
zBXyPW-6Iy20^A76ZWiHS%7wv!G3mW=ejeQ@_C0PTWV#Vl6umtcx(GIleKuGm|CVuW
z0vGBZ$jEnSnLgOywFaVWCmzpv1Lvy%l#@gm+|)Sl#KF=Y`Wo$?m;lw^)P;3feKaVG
zR*TudDxk<x3L}pB=t;3|#Cj?wG9>qP411S+>5{RByzZHs!K@<3fvl)buwG~6bh+QB
z!sD#XZoT;M?!}jvU;18d+f>Ri`j@tcUrkVW0yk+}&!ra2*c0ekJ&tsF3N$SvRMl>{
ztsJOO;MDEfJqyV@F9s#d?YLSu8T0>|Q#+ROT=5ZG(ZAPllp&OG@B~3G*)B~uUD+>_
zt67Y)WHK^UB47)an!r?=K+*jB0zg7q^SY6LJMf7IfV__Ep-FWodzn8~hUPY@v`EZR
z^eRD`<KqLKQa?3uoh;?a3?nP#Qv4ho-P=v$&`LrGYh{de--Fg#{bNwaK&mU7kBmCF
zzat(5pUY)yA8Gf?Q=IXWr+*5l_t!{ih0$l1$&hCj&;JcL+*OsFB@|Y$+)0S1JMyFB
z_q_OZ{3DIiG}fXt4WDHOBm&C}Jy~<8aru)heVAtPj_W_jC$e-jo<y50T)1=meCK=J
z&|UFBL!a+@YrDxev$(sY0sP#es}|=(J(a8r-UdIX2iC~!UVNP2rthUMzIBl9@_pX@
zJ#qNKIoCr*{P5pD@&04l6+nQb%iH<y6C=v~*FQG|;M!kk2LRl<{yqIi`R5Jxg!KT3
zkN^ny@0VS)>7w{~?-xKcz5SItSnO9f1@#6hi=d>|_#Gx;80K%9Sju<t()a`aT#W(u
z$)^l47a79A37Omr(#~hBa*UI_1_LEWsb!y^CA(1s>#iT>O?ETlH7t~IhDIdpgpUv{
zRB;+tuRhmdawW$&$9|6c2;XF|au+kcOD?x~<nBi=CDD3&jO9!rKf`_+Dp+iAWWFH#
zr1-r7%TF?4sH0MnjsHgrm?Glk@fnv%0y?o8?uof#3hq7O61+YC=($5LA^sx-Qh>?r
zGm>ltpJi4Qnd^00>xmqUzahhSu!!u;Z{%?4N~l1S!Cw4z7s#t%h+VTD3dN8FdIS(p
zm9OtUeyO}})H<u{tr0c4bDC;@W5l4|YOQP4)50OW)#5XNfV<oxId~)KsX`Ngd+lj9
zAb^nZ_s7x^FdR@HEGVh$U`avp4^}kPTd9W+HuU8_*it<<ergn?Z=`|E&Y^`<wMtbQ
zB*}u62`>qson0jhlO#em1{g`0EG&|!IE?y^ZqlPBPK``AHjS#-=@-<{G>Md*O*wz)
zN-h>UPVuLP!faFE7#h)Ty=tNYQ^x?go=!%BmjgZes5g)?GaZ*Oz3Pc!(=U{!@g^AA
z(&e$L78)QaFducG$dF>wD29%M>xPTwCKz^3m7^Bb44GlGgkBF@lMrI#l2PMA15SF;
zJYPSV(YDIF03nem43>b9h#YdsqW}ddL}8)AgxexQq$ts1#EKIyK_aju$snLoz`&(S
zlMVq11q~wuR;Dc3aPSC-NXRI1<f5XXV_;%o<KW`q6A%&+laP{;Q&3V-%acz-t3aV5
z#Y&VaQ?7!}LH!0?HsuRj4cqB}6-#z_sn3L;e33P6n`=Jsqit6G>Z|W|8TEsezO~)F
zubj8wJI}bC@Z9@eIO&wL&bjWiGj15P=8D%`iVZ^ZA-shZfe1Mg{=9O`JKnNR&%o#w
zlegV;&uw?yW%kH@4;)wNsmGqE^0gY(YFSy>*wt}xs^`+6QIlq^TD0lVu1lwGJ-%_l
zM&13qMB?lExH_xx`3d6QcG`U#KDA?#ISya@$ELmE|7UQd;C_D+M|Onu<-j(6mI1`?
zczgZ{0;Pl8^#2?6H&4JP{s#PhB?Q!cT<<HJq@)yh*^)Pg&kiL6r-n@lvDBvcm(s$e
z*ITa#0~?7b1U)tYI%8PafXr(ww)HA-uWh^Cz$o<OTnM`X>DhhHE9lo3;w5Bkk|DQ|
WRwDDpyt?1>|I0r2p_97nig5sB!Lbzp

diff --git a/static/fonts/roboto-v18-latin-100.eot b/static/fonts/roboto-v18-latin-100.eot
deleted file mode 100644
index 2187a1385f23cf24512d7becd171680f2b6c9163..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17475
zcmZ^KV{|1>@a0QhY#T4O?Y!8wZCjIhv2EM7ZB9I~jR_``$pka|+daGgZ(Dupbk(hU
zy1(?7zNbo33IK4F1OTA_TQGqCz5hRh0=)g7P)Usr0D$~Q`5!BS0)YN^60K%I@ju}I
z1b6@qfGfb_Kll32K>#g)9l##o@?Rb8zlt@$7T^tV0+<6l{zGU1I{zUa0MGvzuK#gB
z08RiafCIn<-~$N#pN###jPF0@|Nm3~KtfYi?SHQSzX1?nlMdk60B}hGXcVv(u41Px
zw{;QiIC}WH`BSh8IPsV=34Ts>RUM7E+(EhD=%oO*Q+1eSh$PoZ^V}<HF8}G`7<r9b
zZI3<wn2>n;MESD|Eb0Hwh{dd-gn>#zQ{#Q%XwD_9(Pv+f!r)`&;Pm}N0R|K%UFq0{
z1W!2TcoX|YQ2{;OeYbHhL&PvfS~mEb1Mwzjd_Ehpqjv>?p`9856Qwyhan*olSSho{
zS}j@3PZvGAI4GtDQ?z#|Nn5c?GTJWRH90JRK9nRM<E4A3(<>lrI`awt4ji&w2@+C^
zI-l}zwXEPBCO3EL`lK=CKno+n<7y)4=pP(Ig4s8mJMO(%DUcVl_OLcg>oxpx(}&-Y
zf8z;n(ZVtqd#k+$5dD+>=-60<c|vz8P(BK+b+Q*mPKAZs5x1-cd(dWg)?e2n|BHY4
zTyEg~;!u2opcO&OhMsqADnwNDih$;?mPu}GhP{+ig8QMOt;-!XM+yRxWHG;*f|G-L
z_!xWvjJvW-DiFEfFWx|ooa!C9_es`6Ubn<b@Dua+X~Kai!e6ttJ-?JQzmwBlJI6qJ
zi-sD3Kmz20Mu~B3j+lt=T#&j<=R%*|`W3-j0vEyCDTRTSI;Y?{<(tEY>~VMd5plBX
z)7RV}?0+1Jn;|e=6*GuIywT$j?`UCyQJufnHJWdlsg+qetFmpv-Jz=Bk!a+NWKYXI
z03kn*_~<EgdS-6=md(4tK+6gXq2g$`%gA(FWH$8I9b*wRHB1Xx`Mqy2Fl@kc`Kb?_
zZu-Nj5zTN0b(lLOWh6s*CRApW%-sR=;4#=pV%SUrup?9=kQxbR5(A!ayev`;h1@84
z>RzI`7z}qf$f^hO!De-O`ze@>cu;%0-oKFhD^A20V5X%A-BXf1g|cFh(2w6aYm*#U
zxEk!)_Ll~L1mzT?&?vu~z>e)52EgYlu%=27&I?xmr=S&|^jx+_Ybw`m18Vqlp7-oL
zk5iyQu)=j}U;Mih^+mxWu;K#!v-Rsst$YX*d{4;4-o>8psnwJ@+6pe8>@vAkFvhf$
zkU#z%&C(1&f@V4!ge5hDEu|c7K%rHv_j`VY%mcaGUtH7bD}n|EebKQOB5Qbd<Bu?W
zL@CO6X;2Q1PkFdJCUqD9O+nzy0P0#<iNMejX%(8rP~}Gxg#%UUn#45MwP@ALK$@`=
zsb9!;`2xPr#9G+WZ@yZa_I@jqe(%k5oEHSRiWcuVvNM@wd<!8Xail)Di4Z|ef|a0Q
z19kOV2TOu76h^C-XtRZD%F+&XeYfoOyZq`I58QYJBKRcT5(N?ykg`$C-aMu~Y0+}W
z=r@ZT9f3Y_84byl;tsC>(V<inQ9%jP_ggs85;)^srz`h?WyJS=qDTM)j-gJEb=rAS
z>=ye+zDr5L*F~ZvN64VFhe!fiA+quS)&7uAQH`W-(N=KEsZx39=8AnDeOx3~J!R(@
zUPV+94q(r%OqcwdIqmbBjcEdGDRqx|im4Kl-|W`qLLdr-M5I}rCvn^evDUWmfwE&`
z@iTrAEcl%tK74cB$_X<;x*)YjGrLDd<Zja_?%8;L++AW*d<~fP@mA?Pr%Q08R848p
z{t4#^Tw#Xa#KeJ1>4H&-ZwC}IknJW@W*FXksW)Oq)tfbOI2>aAo>g{dhXTq=pE$f?
zq=Ik$$WkM#p61}6OCy4cM$ooB>`dWdcc!v<7`Enjqk*sX4as5__G{W^C(teQW`x}_
z`M2|x(W4p}!WFB9z+_?!SYfWHS)e1N1=k9rN1<&6M#P-`hro^{Wk{yW+*xG_w0h)S
zB2wt7*0uqa&{DDRqH0>u@O+$^w2V=6P&`=&NvvU7z>}?HnDC3|pNlB)(Im<bRc8An
z4}T79GVZ57j8|7z(BBWgctBOVT|(sdM>@TRQ_ePjl(`fhbmS7!-Y}rwWx?4#8;#n~
zY`BS>G+3<@uEM~59e(X!v}jd(q=BFPh~_Z~&OjH3+=KLVa#F4@Zt%l5q<?ihTp6c4
zSl2^s>IAy&`gIc?cT#dq*;3RmSX5M>+72IyT$qAM>kKMkLUbCf7Juz2NRrX-)o%^8
zK!RtO59+_y)PqZB;{^kL5imFeowKeF6%&;OAa{I*B;BRrrL;?lz3eL+>|i}7L;BJ$
zIvgb<4AwrauKBPpPn``$P4+t5mI;pbC}++qzwrPQ7#_6*$qn|h?K<?VlQftET8q4y
z%U#dSZ1>_$3>HZ+PW9GiP+X5UI1igw(0jDo>KK%+V+sm{0KEQN75RE_b0pr&hKapQ
zD>>`JYujWA%S_V&(Zz+OOhET*-q~?q_$DTdZSsp|6weI^uf;7;pfY0M!U1p@NCh3M
z=$0hnc%R?#d(mL$tj;yFVNgObtRC-xgQjb)4z^m4#olK`Mix*ydbN%;7z!jUhJ5S$
z)gEV5Lb=}(Ia+U__=R98j?W~apbg0Nsh3}~{<aBP7N{Ihp|=*>1wp+q8{<^Egn*A(
zEsNr%=%)VIb4Ph63)NY!S!&eFXZN}LmcKygmR-gm5q)Q7{@=}*i3Ga`d&<xVH-x|f
zPSCpd<NEwAXs%^+au*c@Ofs5Nv@34iT%%4(@OrU1E)Jo3h&LFaiqi|m+=R^t^Xxpn
zC>g7mQM68d#z^G>*hg}VC>ms~PZCXc0|e1fk$vVJ>oN4biDVJZBrPK@F&ZvwQT1uX
zI7a0xE8Vb`qC0`kt0fb2!yE~nTO!Z*5|P}yn)=FnY_scF%s-yH(zI%nezDDG?m1P{
z=E+xe5@_Qa9Uu5iLE<nOKSLX>_9$|^U=QQk;6;A8{2H%f=2ue#7@Yv;>fI*NH{(8-
z7|v=zr^+du2WZL`r2>$BP{sr_Tn27=(A7>gl>TL7g@fm*%zlDura9xSzq*kYp8JpL
zFM;$Zjp0e<LcE^85}oGOP7rwL!!#}vm^JD8zcJ$(&~K>?=h>{938f4(Y}GUj^dHk@
z^(4MSC2!fJFoBt<-8>C%g_TRyHjug5m#GwNYVCQ3=HEk#<X|Qp49Sp}8nQF8T0n;6
zX))ISh{uQyO`5%S`V2Y4HF#2teG-Wm?6jIY#?!DQT3Is6cXk~#xmJFg^&(<@f5&m$
z59RK4=9nof%U!i{aBIv-D}Fx9eRPmJH2Gc!uGQ9QZfb1<{?=_z8o{vO9yi4-_7GOD
zCVqCA4yTQsN);`M#8qM=AjSv;@lo2vEhU7C$T?7;Ne@HjV{apmnW3Gr-O-N~Vq}@s
zD5;K3O4Y&}q$&_O!<C{*5fsN8!}qZ*i?CkcOoCv4E149Kf{i03A^pX<`QZxI*HF#8
z<BO01No0#>Sohz*%$z{X54(pnXowHH!&)k2hwC&SBhGL&P3Ne^>xEG9gtkWkCT8$|
zquAyNZBMUE%u*tcp)xMk2@*WIbTSf26)9KZ_^?!IdD$%L8pv)5u2y4T84XCsK$W|@
z-*NGG|53)&;JK2&2OCXI$ve9HruWBydwQo#+yD7&H1Y_T9I{^CHcU*=Ab8<D;d>bW
z9zx#x`$yrtXJQuU9Dzd`7Z$=)vykEroj*Opps7#D!C=WIKUuK2jblLfCvD|4QAQiL
zYxB6eU7GkmFhuT{akJVBC}4D~by)g1mm7M3bVo0~_9-M&y`adgJ>ZZDSIJE7keu4$
zp}0;zhQi849rl?3lEPJmDI))B(r&&;p{Dhr+jRJua{aw}^9NN{{$O4jq_aY>&bdKL
zrL9#Vv5L4_=*sTmyZ_C^BUuWUb^1+`0bt=z+9h0$;M~?-I<`$LHoVU2I<2v8_D|rV
zeB@nEq}=8?owAY&Q5BrNg$_KE{{(rEVPp?)#!e)v;*b$9;6Tx|VH5>XRz-H*NRxt_
z-s1}GJ>+jM0bVk_!rThSggv+*&M}3dhMn(6*q3q=U743L+HnU{#UUx$8`^j3eU2w(
zOsrGRZDW3`2xx-Mhs(ce&GLd0G-e|lj*LPse{ndD#+mJ(0UVVM@+=^}@cO;C`5b-s
zNmBZUKq-m0QP}{yF6CnQ3FxwOSGfftubLO|!XHx0zy_IP4zvVdF&yDd;=ag+v%jh_
z4JwU;D13X^I~DfeLqEk*xI;AzAz3`_-&@M1I&|LHc`0|4S=|q1b`m)o%}UrYg#tho
zi}~_qaJXB(ea9`o<R^TrEi0;cV$fFrUn3M0Qbs2cNLE4(qP}5K0rM=}a5GgC(qe|d
zpQi^e4<kK^{W$@J=%9{s0@!Jp13)#eg6RIilo`iQqmXq24zRk3mgz&C_u!!*k46SC
z4U8StekgF?C-$lnT)_8M8oc-deZN+)5k2j0iiZxRVyMg6hFOsZX^Opf>0rhMzloke
zk7O{_Vg5;PZq8cm1pk<>6da<Dr~CKHk@<ji`0EcY?LUgKY9-2v8sAQvE64!R8n{}8
zDM{DYdPXYUnT$BqfIWkqbQeRd*a<xG+Y0&*ewj1ZCaoiShJl!_l=E9W7J}qA%!qK7
ziw7W*tdc@f>Qz2CFEcC83<rsLS|XVP8hF-|;C(e!qmxRP8(oS#q2|haj3Gq{J7!jm
z5+>1Wi_-ryhnP&3B|3RI|5fLpz5!Q<P%p%aY76s+E#A)!x*M@(9<&tjomfKC68i+@
z@`bsjjClb&NjV(`HEXN5hH^3%GRy|kdrs@`D4*$e8<wo}S^6#JO7jhQUE3jxf1KNu
z;b+0j8>LlgZa<D!!koGBrOY`#kD7Z8i5;O$+v=+#mQ{_^`6*$vul3|`@BtH2YUee?
z!I`5K3;{m<@8nd+EOq5TsOdl^5}p+jI0Jml7+P0#CJr=lo`-5YxwPW>0J3*FBl}u=
zm>8-+<B5l{-PDa3iN+~}2a0O1!>E`y9cjban5$-RfK`fN=8xI&EXvWx5X~m5<##W;
z3s|LkVZ9n6(-=Hb4-sB9uO^|~HZ`tvOqiG$BTVdg_^fp8>pjNRPl@HwpKX9B=Bt|)
zp|2Q$V&$CeGO5zDR#$rz=}L`t+y~l^^~-%l>6GI;t>Pb*P}pB)0q^0etFgj77atio
zF`IoNUb3=#6o!Rip7b^92+hkSxib1BpYq6226r6P$unPj>|_3hb=$BqN+MDx-iz4%
zJ(a>`E^RPH=pd)1!oN>4=c3kF!}R}`Vfcg)LZ8b^;?NnM+dG{H(RHFvGy|{v`-a5?
zsbDRyG%?o)zRpbAqtGXeB#-5t2F6{BxU`#KY{>rWh0DYVttZOfnGm<&EgQ+ErHM)3
zH5x<{)luJT3>*v%WFTVCFRyvd30C5jMYkA{V7JpR|J|cMB7qr2&FNOn>zDE>Re$GL
zy{hfKU{{IP9lk}&MjQJbLEvo({uPM>%we3rQIR^lZ+IG?;c?r#pp%Q|`t3>goO|`#
zvScTewYL(DHW}7qGu4B2n)JjpIU?ri!BVA3#n547WffNf$>?ar$YOwWdN`b-i?vgk
zbuw7OMILF6t~4V{b;RS3jlMW@hK#DmnhZ-*W+PdHaW+WED?krfWqpIfV|~9Tw2=<7
zi`%bO!8z}=60tARw;=h}3TB^$`vn=@a{30qbFoB5h?*wCqblw<&Y$u4<Nr9K8>Bkw
z5u!tSUhB}XfSZZ1_E!#HWgp5b$)$6ww?Y68PN;PUVUlgR!XqTUAi`$qWk#yFmTs<u
zEtHsd<Zck=)8*<}Wv<m1h7zp$7Gr(q9E7JWreqNSeS<wM!@+;TzodppP-m`Lr6F{$
z6Yo<>+YoRCFWS1wL}C<N1?wSW<xM6_{5Z`cQ4tXxaGe}I<)uQMZ3BubcYZe&mirsF
zhVn(1U-LIP%NW_8aD^;_5e?L~xH6rxA?)Ia%)(bZ^VjQQ-Zk_)e?-r1eFwK93XeGq
z-FouD3T0SLcej&$;rW#Ln+-CLI$>QH@1)AzHv>;zaFbl`OTqkk-1wGrmn~n|fyNKs
zVPTc4(ewNeNowN)xaxT{Ze65e&twmq$71SpK&iyln3WX$2sQ^3qgz;c3-bk>`hXB4
z-2**-I4uBbb!PQfKK3!^l338N>rLD?TrmQ1PGWuJXX<Dy;Fu&NmfQ?YkSNNYw!3QV
zp9UePl2QMkKn>klKoXT4!XG5YpUmWLRD*~?N6$E_LCIR96;Ky(?tgO3l@7fZ)0i}Q
zKTu^E^pMIf$-4S#&e(hCjn<6sBpN^i>f_Ir9I@9?dIwgGqxa#&C%_n3g3nag-lyze
zp;Eq<;G5Paj8b(>EhjT0!T|4P_t==D+%It=DU@skJI%?VEQe>>VI7b|QRkU?bf6p4
z1mCH_d0Wo%psN%w43pJyC-Afe%$p#4!N2k4)xrDSG>+aeSCeQ8&RBQ_N^GO6tT{tp
z1E$O7`*!^;5C(tw#;_UpouAQcyXCfXd6CmfVf1%)zl=u|sOk-i>Uwo5D8P2(8zIZ>
z4T7&^#XOc}l6|U5f1k9G!=Z99O-5R)YW&(m6ihLLJE^zAUsfWTgM|?M9BdM^k@{#&
zSK-Nq9A^q#?9}jLnfymG{TU6E>_c*O1kx#kMRw_#(<TgDmO=8#M!i`Si5;&cy1VTe
zmimHjsPC$Md-4)j9Qx%}oi|<Ade9+KtiDRC%<XGP!HP3v6g~VW+C%C<YtuuyB2+&@
z=5t#h=V?)mU~iN;RWPhn6&zV=jSN>tU4HQ^-Vr69D6Zh#$*<0rz~_l&906T}=ezhW
zT;m`9m|N_^={+|_>cDu`dtW$+MwymF`7{n8;?`qc24;J(X7}05Yf>1WR?$+-lZHYW
zgpd^XLx+(vsiCgi2NFR-P+zVRP~>aHIP0$yaGdHAJTZ(G8m+Q(k~C$7Y(hQkQn;qD
zWf*2(7q2w=9mfy0&8?7!*W7*hck#jT+_l|Bj%twJ^K9|5c$e|>Im2HS<0<`2>k;<+
ze}DeSQ8N|@EO60c{{vU20a^G-mRwH%>ZBdjg`!a#u!@dyQT#1D^D1i`EYrcq`UMVE
z&%Hc!h#?zn+gMia<PzdUSCT=DsB}+XL<j(DXRdB{yG(@l+4E3?8%{8)?&eIjTf({d
z2=}}eVBTM}(5F&rG3>uu*mGRoE~lmmyj38dB6(fy5qjl4==oSV+xYJ-a5teZ)J}Uk
z@fnmK&BumPz^ve1OYYXdQcFYF{=w4sYMQZfx1iC&iJ`AS0sOjL9<XQ%Ii=I%{_17x
zoi{OC5O$&cPDi+fK6JBUjsz9gsfRc1P{T77{eFcJ0jHE8HeP6UA?Hf<2rU7SEsQi#
z74eeXLzox73o!`lchrv0*eQ;^)aPXgV4a2ur~i(5(w4K}AWzPO8kXr10uh#?ao{Oh
zhT%HFu{RKs74f~)h707yr9z^M(CO=ROytJA3Pxb&QXGY^t-f)m$*rYi4~Az7@6^z(
zm165rqp!MYCG5YG02v50jGN)&W1CNCB#|~9E~Ec2izOmGurjOEY+|z1XST6;?VeoG
zk>9l$o(Q$_uPUR>Hg^qu(_5Q&B2v-54x1Gcom_T?ofI--)~`X<E|=vzrsR1}|AgnB
z&@?3`Qq?0)P=JrH&SuHXjT&Q$$D15qQ?+iOQ@gv5naHL@hT|&s6L5O(*-6EVoGYAo
zArzM>(5G}i)gr#AQw`Cd({M8{3gh)uzzoZ(8x~8U9L&J=fD$0Gv{41upH^S~ltUP)
zA6U7x<jCRw)>V%<zyn{Zg+bHh42%Y^;}BTz6FcRgRxuV!b&1;@m5T<6uDBDP5VVi^
zSxvWMB5S|2Jc7PH9DH>`;LOlzKldtwV~klVza4tp#;Q?<Pbk+RKN1L>ad@;KWm%v7
zf-p<Doj~b{(CbAzUzP0WTFkRkj<I6>RA~2T-0f5nuv^D%w7YXWE%TPIg_wd5uUsXY
z23P<0NmQIqyF#<ukHPRJW?FkGyI5O1yyquUnx<MAwg%ER#(sR}{3AJL9wkzqh&$g`
zr73sJbtJCr*>y)k@x!da<j+z5k+#x_h^^f0u)^yPa2^L)09$5ooavZkB)ZJ4wy(%N
z$<tGLP1|mn))(Ws(gxg%>Y~znE0*^DqFofd_i~pZY>Xi2X>&rgNbY#sfB<6|J|ZgE
zcr&Lq0jwat0({=!+^}Wpenj7t#O)3~tGZ9>ajNq*#mTkdJ<h2BB;1P1G#mVxVq=S|
zwX2gXYV7VFQU{gP7;q<yjhp_M{=XV&aRn(Sqi_*2=e}EQ4&ki7HTGi-w+X68wLauh
z@y*)V`9FO%+P9Mg=8}FTGCZrY;L~PA6HQHZCiB}XrEJ6vCnC`}pk!r|XXxBl=EDp|
z>};Lo<7s|KYHl66IEcQ^r}qL_tvkRDzbMnKlsJ@@X*z7yxEp%LlP*;j%wa4e9X)kU
z#*))eGoybJUb+hB<&CH%Xd>?U#JGq?Kz}Eee9L#WmJ@PNu?1}+u)wl5ek4Ytuh30k
z5%YqF!Ki3o>79BeI$O1H?P%saipX#Hms67voG-&11ORMr1Eymqw!ft7Z%e>hc{pyH
zYQcOpU@H0J2hi-;GDGvj>}2X8OoU)5nt?GlyH_MLw>)v>%CI8kWV~EF{I4&ne)gAM
zz9Krw{RvQML}n|F#p2T*OFvL1ZFPXU0@A)MbO8qdookaN7id3qZ%iCTcpi*!?jx2+
zji}F>Q2f$o;*WjVAJ)gD;`RGCEp@QrqPK5pf@I6ni?boC^y)^7%YnTpIn(^r_1N<l
zgQ;VXB4}V!OA}MbaTu8`ByN=X3wdh@Y;2}s9~T1?FWVvQ5u}`aco$l>YK!#Cpc&wO
zWnL*wR)3-&1*eaV9ti_4E>-=<Up7>orm9{6Yn-P3G&5Yivz7-vNr`wJ$jQk#%j25d
zw7FGp1sxwPw*_3j<myfhO16%!g@ZVJiF=C#l%F(kn<dyZ+^rU~fRhJEgEC!ClHFn!
zHe0z4e7{Z?g9CZ--HJV!C%TWfIzuuYUV?+UF*M}Q2<aR9Iw|0)ZG4D35LY9VNFZ4!
zvU`)jsXhFzEtnJEJ*bCxey%LYkhts80o|Tje2(Uo)~ktTslR}#zA{nNU2T=$Ty7K>
z-9qN=gPju+m(WcC+U2Y1LOFpWRUwRTL)RM6CvXf>=fCT~)GGV_V<oJ@G&lt$ER8ZZ
zgRiwxrv*lwXKt2*+VvUsp_Z}|U(Jq&+7JhZ5(m))ndfk_d)5fm%Z0O945Yh<Ya%&#
zMk}t;E)<Of3;x6N#<+gIAn>$;3IFalS}b}>o2-F*lmMFyeHumbUG$C(5u49+iOyxg
zk2GrcSK$q)BpN9hdtWif&#*siHpE#>E(HNr3|<3`2=x>^W+*C3=KimMvU??0Qjfcr
zp}Jv1Opt<|fS`&Q@rz`tc4OusTy!QX-%EF@U7Ah%IMMTnPPp(~wU+_cw2g_&E%nqy
zmEoc|_bLm<^H2F`oQh7zkmSr681%x>ns7uZZU%V!AdMlfN{Hm$PiUMm>xg-?x6+3j
z?>?FY4NdlRytxOHT_+-|x0Jiuk$8gbTSt?b7D$<lQQzE+)kFwoN?*2vL>)6ldY`(M
zRsP%6NTy0kbMpC8IV)kNwn7Qf;}vSCa*`0qVDr)e$%!<m-8Oi-@Ys2yTNt2AO=Lt_
z`it7|?KN$VlizDJf~MVnPG;Hgmpqr>D@RT2Y1Cl`WI}{7esmpxU}a;3<iXHj@$O1Y
z^sHUQzmc1Z7zyWL%%z8rnemS%2&MUuxHp5PJ7u$bmY?xbN500L$9IaK|1*gTL_8^9
z<A#fw`**HAJUs)+h^KOW1YDbgn9XYtM<b<}(gY%7?ocIHf_U6m&gHP4dYNPnAVOUK
zaZj)Ogsth%RIE~DI;W=Yy0p^rAT~Tu^=JBV6*j~kfFW)L=4n93Q5y@o8mwn(>@c=m
zYwVD>xuip$`rO62m8&vO%$?n8-DfUI4ChOV*90Dd7HIUoejxyovUiHaqfM&)Td*ay
zG@05Mw!sRtXzPI4=i&8eRo(!rC_T-(9i}?KGC(0=q@jLU8F7H$eM*4)#h!c)zdxC1
z-OmwEH;JUmf$0@#C{hiFgfONK;~J#2WXH~b=7YvTSW@h)HwDOBH7RPQos~g-4a+It
zYsTDmUMI!ECew&gG}e$hjdY@b_rRpLR{4p-dXCsX&u^{URhXGc*~ejOZ%)SMs^)}c
z#`wq>@TBx!e1)b~k+MKR%j7V`8{SD03#H03RK<tElQ$EfAbu8ZdZI6`|Hcv7yGH7K
z%?uSBidCyjuES_MDBYN;sZ}-!>u<`EsmG!Z;UB=fS}ySq8pC-CZuJxf<RpytQg|Dh
z5B=O3F?avH11hC&Me3XmM-MRFUP;>4p=*~d3Fz*qppla}MB|IftVEWUr<8ai;XrU&
zc+094R^lC@M+Z<BrTHJKA07G+vHn!*f=I<wGx#uB<|5huUW{VELQiEQNg)`7PKy0!
z6Zhr^%z7R0i%oF%?C&;uXdh954c9&e<jS!7S~0}#m{+LyTRdRV=bEvS1vCVs{0;gd
zPvqa>#0FIdSGnBDzKf7C&Mb3>sHs0?Gk$qYF&P4qx+An8)kQ$86<u*aV!>y@ayT{3
zpbwZ)SNp&u|8hZ+8ZK41h$mPKZ$7C%`iht-G}%K^Jx2aDHXKKdD7&sA4@%*RS{fsH
zkrHn38?XYI>GP2C<Z5=qS604&<{WagNp5F)qU&%;=?y<vEoE79A9IzyAv{ddBTizs
z+356zc|4?>O{hpB*v?*yJmGiiHP>8|*u8Hkl8|q*yw?lVNbNz`I_<T@J(K1F0?~2)
zz9`<ubJ*fn<v(^tUGH+YiY}t&>v0Dql4Y7{aXrlLX!D#rwKx+R0F&%+l%qLxO6dTn
ze}R#72#TDYLM8+GNC;sM7_sqhqi(%U&*%vGJ=3uH{gloBytnE=8HbXxToR5D@dVoR
z^U^wg?i??309>7?`GOgn&fKr3p+ZS%iWSu#n{ld)e3&;$Taf6{3AVSFudX^Es}MBW
zk!a##dh!wyu4yj<R7!$7&SKBvGSV#(E)BAD{du%YQhiIL>{m|gHtRV|cjP=XLNiR(
zAOhhBJ^Cs|yS0MSb?n(-0{Ja|ej+HdVc2SV6qu%y%ga9jzANntk?pQcf%nN0Jjn!5
z;tLB@qf&ZR6Nbmp8YJI#R@1>D3-U6^ZG;qEODQ6Z3$IWa%bX)(k8xs>{`Wq4>uR^Z
zneyWcA5_2|^GA0S^z)(sboH9u;}1eYaEicw^srExg0e*!d;JO{e3~JEC5GU4`JshO
z(>$^W1rnjPj0dRFSz#2$5$ua-ej!IR%)I<(tUl-!WN}}VqGB~kF(CGPhX3w}4)cEK
zjBw89-q#Iy%Wg3p<*ia;_$}fsJBSGh1>5_>4t6ybuJO>MH3r6D1IwGC3>9*m|EeXC
zC)h5Q`G-F)nMDcB4;1a*)~iJv^{N)8>odHZ7+<VzRfOb^3N0Mo%nillh;SQ~#CzBx
zLIH-8j&1#308-Wc6R5++23UlX4|T=Hq`%&x{rm~D^sS)+!u&=~IK1?qXn!-O7S&8_
zYa?t|X1x_fF8IXCk2${nZwfL0n?DZ)<aHmXHKH894Nx4e{&h-DlI$FlTw)PX5cRH3
zJ*}}GlV=KnIcv=AcI=YDD%}Exv_-&xEO|Fv3hA#QajE$*h;U5KmeQs#{r#U*Y)XM)
z=w~QW1x%Fk*D!bGBmvcKPiB-fINum%H0z?}<SNcNkd4*qnvildfT6~pNyEcQeHnQX
zy3V{H9(aje(H!BwxM?A^B(&aUm?1<oXV)*oexxWK@%+Y|`epzxXxKqS&OqC>=o)SS
z%Rr7?*)_pFia1<J3yvkm%ZbB>7UsUI<J2T)X|$8?$hLgJMy~swIXz-GjC{=}_*rcz
zz&!Ya@DT<eI`|#~h3!9-86_oBl&beBrK#up8(NOc?7%o){82%kdGqM%3*V6YanCdf
z-NNGs5*~AnGHk?kC|3xfWHsa+?*(6qII%QuE_{CL@(KRWeG}zO7A{-aMhy{CD;mr4
zYy$@kXoFhgJ5!D|mmA<8h4cgNS_i<dZ0=kNG?_DT;I-|2#kf+c<0-N7Ds275vqilE
z&5bHOaW_8UOU>Zo=<uf(Q*W3U4Grn=QRtG&{pI`_Sd2B&Gz2%}yAXZAmv7ZG%|g$=
zzS{A8{^GF^jKITIPsP^4kqh`XZqxv_|8N)j(Qp3}VZSFJ<E=mrf)V&>%$XYz(-E~g
zYl44kj%U0$IW9=h85Qp%Ep}2$PLO1&uLxibcR(LMW!fkE*C*|d`_&92&H?@Icw&x_
zvXRaz#^OK_jyUwg#Y}08v}%x%WFIEVp&SjB-TT#JbTa_0Fx*leA}KosRu{$^<tnkq
zX#ASeCdq*<uQ+4C4w|$)z%ZeP!B0adU4pGe&?J%}2D6yo&q_Hrkz&wA*vq(SdG?E*
z_6MX#>P+s;9uy-qY5qjz$7v1c*Kr2?%IGld*y}bMEn#JZ4EcYn-?PkVZ}v&%3SmE*
zC1-}tqVS|zr>|UUy>Q@WP#VF)*+%TqADgD;<<BZf|3hT1FCS*e!(&9g%tck=B&$?t
zxS`!pueYzLbj8KYQZ8oPG|Eox8KIl({Ij%*qEWgYt5LFg(9NnDRtzkBf6AKsyEeaw
zz|?~4$4srRp%KRrS%<)nVw*)MECVUMaJ=ywMkAgx-(=WU)ZOLDlulPXUNyZEdXyBX
z@{sWJ+%Q>v5V|76!=KWwQ@n|3cVYu>lSBoq^J?boyjF>xb1KE>ky-vO_zIq)(s;>4
z9XI@9<)@d#@WpcBE}U!$Uell*oQ!M37GVmPkRh5UFtq3%juFx^4YX?C@JR7=vmVz<
z7D*Py{+W6U;V`o^cIx^lab^U5f>7$@l9Y&&lL$~Z@U&I##$S7&K&N@1+R$8d{0SF3
ztWO`FwE_YQl9D5r)OJ!Wa1X(O!E*1KekqtaggR*DW_c~JHD?=t05LVgv1a6@*6R~<
z7h1uZjQ6VDWIAY#x&lj_U1YzCV*;UQW}G;S&&-N6<fU69xf|UEwrAnOVj?g3XQ*Cy
zTpFv|e@8shlzd@lsCI~EMx-et<D3OW$op>0)SOyaX3WgT6Z4hOsJb!65=gTD*Bpdb
zZAAE*Wf|e@=1htwW$w!az`z@fuGSSFq1E?B7Qbn@@gpaye(pJRv9s{DH{s(JhdCs<
zW>150@a1i*qIR8zHqUjv98G+ddaQn7f5C`4M{E-C@pq#K=20rwZsHK5a`B`<Y8MvA
z%|JTFAfSPL%JWp0o#l+A%QSKok>f8Zdf8c2Z+MH*GeGfo(|9@c$?&>pYWgAx+3^<u
zSF0Z!5$;O5oE+|Pc(Mqy)oT$>GIJK}nXwzS?oZpdbfxHxt#4}0WUpt$P6=p@uOakW
zT9NUuAy|>EkWl%eDG6bZfQYerq6y&9s6A?Hh%4r>oF^_K<}}ogKcdKhu%Pd;@n~XH
z2+X800#0IWW1jBR4@|2c7uKW{9O6fol)kMO;xMi~?o&`+(|n<b*omU_)HuP1q2bkk
zvmWth)!%#?v>{8jq;N^37!}Y7Q*34uGN`?SmIm{+)<559+61yRX{fxd_0f!+<&R$i
z#K#|M=m=wLycpH=u{~K_)4J<g94*(2FG}^J=q^ys4Yvqt8lR`i%94uZuks*A5PQpS
zF^VZU*S&sm9kdeYQ-d|Q8Mrp4>L9H&U28c|-)3UTNFKs-N+>O!rN+N|b+fNLwW9Sz
zQ!b!5SEtqP!@B(ijahKqjHsvGsA7zC)#$kgD_2!W;@tr&-HyIYj-fTir4n*>Ekmj7
z821C&h(!y|XUVWqi{V3IZNsP85D)y76<&H7><p^`H_|7qrOo#!L~YfhvGR^?5p0WO
z`ic!;j@mSquNqNtv$f`${3CS9Fk&`QYHT^-7!7-fQ`wlT<t!itW-a8&2bc@hKJr>&
z96KT<N0YpRkq$CkGJjfhl6r{BiP7Q{cYrR&Sds^PWb6*MqY39<94$4Ab|I^ua6f!r
znLQen%Htz$dLh$d*_bj}Y)vJXC7+{+aou;)8Bt0?NR;}CG4Mn!*?FM<d_ft{#rSSG
zA+LPB$79R!EJ#8w<>A`r07DSZ{;-?AXd_2$Li5lf^JfcHBwAvp{+Bs+wTl)!^nvyk
zHLveT$;zI%-qXa!N)VoFBHSn#@%ap;>+qO{YsmBrrm>g2_W~xUYRsfiWo)?GQ15x~
zjQN{yMpu{R&4#8|ifL3fZLaf}e@C?yv^?b<F|rqV$2y{IHUk;7Cz!rqfyfQKg<JD@
zKCEK%&5U>)-AncnNFogUP!9|thU5%w({-{f2gkz!zA62!2RxBc47L}-lb>QRlS9=z
zV{&vzl~8`EV8!LsDaete`v<^05}(xopmGO<w0r)|aV7aRPe=yd!#Z3%7#pSlwJHm9
zuVM*+=;DBv2KezYwh*^zM0vMa)Nk<94)M-}R^POt!&?iu9zNRn6;19Xj96hp@b?=G
z*q@TMB1M_EjQuCKOi=x*W<=$xLbBU8){W)v_{*fMB%*<C?MpfpQ28xH`U6f@XO7t|
z)4QIy*hdOhnN2z)NI~f(J&xN-v(jZQtemTw|49kCj#5NivMJd$O51g)z7CiKGuCq5
zg?^jI3e)O*I57M^VHg-uhS8JHaLl#5rI1EGvK3WxD3hdcb619?@Lh?=F%)4_Gf}2#
zo9$Mm<eC{bCHebyBy?)E@?4{=<-G0%jDz&RI_3%@a}_*dR*eB16`Mnb<bFb>cD8ZG
zAvnXhEj6bMN^a&Ic~9SBcl$OSY?EUR4sMECP4vGtbl3N3X_bGeBC>lIcuJats8vF?
z#V=vLEX^?Ld$SkoaAw-=Y+~b6xJMW0B>F=u59sk;g^ZDa_F`#|F@h=83Ly|xlthx=
z0`qbopdxxQA~*tyKMo`Gu9O%ArTzVoY}(+JsADS&pmKu>;^VLjLFDH2Ssr*hYQuo+
zNJo$A=+XF4^J|jims#u4|3ct$NlEvY&O7elIumt`{^9<2dXutFfm7B92N@U9OMXG}
z)jWx@XPe(-=_$4v-*(PSG)U!7bx*kd0<d&;*B6`Q8Gmf@^IsYjm6kz`8qp6LyrX6j
z6x5`rPPL_yz-%49S%%UCYK%%*)G;WeDExaOEN-}ZynPkMREQP>J8Kc^a>~2ZF1Pew
zB`26P3dP)K+(;7s9C|_NT@L28iVj`CQK)ij?HH5M>A7roD5*&~w6`6HKj^5pk6k;!
z>0Xsn8m2jKpa3kM4!Uz8RbA0^LB{&q<}YD}NRj!+_~BaHqTqzJ34<%;=yotAL~9lU
z@Zn(|ItCp{1Dm1%TOr30Dqd^DdS+zEK#~*spP=0FLEl{w2v;jC7J=ZeF)B=Pjp&v~
z3%I0Ykf&#aBLIEF=?IABX_BZH^VGL`3i^hkH;Rt2i)c~^#P68{H>;}ZpO?zZyO(oO
zMjQ0FMeX>8-SU4kI1_@f(fs-yCLD3Bh!X&8wz0DN7gFL^%61}hEx8P#alg{s)7mTZ
zibbrkbXbCXAM;U<sKL3sVs`(2G@00P9iwlRqdv7gMs<6EUgDm>Aum{0HW0-*@!^^d
zQ-rD_^d;4gjPba4t*U(pD+$~;PWngcEkOZVt1#-ulLeh3xVw=aN9<$|MV{W@Sh+yh
zG|!s1>+XFebp^S6rlL;K^iguVJ=TjqJ=?p3aCL=4Wh@`=7M*1JLVX?^-lAF)Y7!+&
z7)d~RrkCC<dm$qM`eCFHg-aytd(A{{^J`8OKAvXiPG+5wn$oYt)d?=PDH@(AHr!Su
zY?5~IvO#yQd1{#{Xw>tx&2rAEk;G)4vmP0fmulKV^tuwHYG_U~g-p6X6BE3tCSMA{
zEA1gj(cQr*ai&&5_lRbbX<Z6x!Qzez2$2#(MvIj8ttvIc3usTgFZ_@AaEI=wSbGUX
zV*+J39~I~G!x_t#F1CJfG(=LNRm;)@a$NH+#i9`Yy_V`BNmwFbZY!+NHgEQc6zJhl
zP`x4xbalk*vRwiILp0+l>^v3bo#&JiO&$Ktykl5dS!|qy?wu|cIvg+F-qbHrAIS)G
zu%K)ov7NAh(c&5!>M+tXs;z_((u~GLUu@Pk(q}9cGPFnqbqaXJRd~w8L_Pcq>3y|a
z>GGNiGRsHIvx5ny{QWkoz2zoUFgh#yBf2=i{#klc;F@`vmdag(Lwa5kBN;qLUaUNJ
zpXGT4{t)<~bZA?-%ck;}#kAs+#?nP^lQ4*Lj`u;UWm#c|kp8_?$uATN;CX9D;Wd5w
zeQK1XIW#lSg!Kzg+$32)(;Uk0Y_+mDCMim(@iksy<~JC3+x)^qsPjXGC;33WU*zzZ
zY0e+#K71-9OO-!c$?3r~YPVudm^6>B=cKca(Xd)*6g@Ck+#Cmy4KIX|gAQrR`QQ}-
zY}h1&gk{=7M!y$0ZY#Acllo;D%kop;6{D@29jdsu#Lvi;pBtJ2QrnU1F9z*TI<ph%
zzc=hDCD1)dK3!#G<*Me17Q3g|z16P&5ZC-JTg@{(?D=PRAw4pvrm7a=cWAGM*r~I(
z(O2@@Jf;uMXqKH)|LWH`#_V5xM}Hi<4%(@^NU~;1H6L8p3RB<-j@i}Nfoo6!N9TXN
zH$qG|^-X<ZPu47(l;vd%>10;gj8g6f12{`&{uz=b7i=<xOIZl17$Op0kyT+(K~X#J
zY>C-3<zVgPk>Qb(ZfN+U41^G()NGT#bR%5s)37^Mb~Yxg!Qb=uJUE3>LS7+8&eIQK
zgx}yI8)<%oY2Sq~E|FoR6_|J97YxUy@u`W7l&Gj!jPNM1tx60V$X_X=#@4mY)a(&z
zlD1DVVArm8EY5^>G8-gG>xj@Rz)12^%2`z!IHJ*kC&QUnkec+ep%CYPj)K}BQXvok
z;1qqva^wh<N=(OGA1OsuK~qv!kGZ-Aj8M3kI`!DV;h{-KB&Nfik&ELaqK}-kbdP+b
zxQ3Q^taS`6Sq^2aqWuXvoL?q<YH1O$s(0lGp&A_sHQ+)`Q-H;3-ulz|q)|HjqUM+&
z<*QWCazoI<f~&4Hd&sDfS8JbSkg~%!9p2sOmvU0zB;$y8Tlk}s%`+hzHIaJycfG)A
zq3XocJzx1~Tf)7G+6wnS9qR#ol9t@L-~s4uI+x)p^|xqtOViK~Hq{lRz-YV&b3alh
zfk-y!kLW1NZ|ml-&k<j?RZhxod6$BbK>W<TIvt5*IMZb%8zY+sw;W%8<=IFkXugn#
z!%TY-!W&f}ML(@izZ}MT6S2QzDyAW!Xe#J7XM!su)6-ArFw1Ayz)G8{AthbuRe+4i
zuzM$4Z@^codD$qUN<JcM9*Dkeg}C2k^%DAQ$ql)@bWz+hY$vCk7Xnr8j=cz*801J}
z7(jSZO4;h1r)(=R)Z$=;k6p`P#aLLHg}|*~L$z^&uFM{0mdy<t4HW#5p|Qhoq%DO4
z>>S5*q|9f+gWn--Tu?h=(?BOj&VbddjcoK1Q3lEN{g5aYX10aRR6JQLfuQn43hDrl
zTiD$&+4yHH8q#ZY`xU)<oVQN3^LVkRS%S1`_lv|lIp+wVN7B#YH`_8gfST(0{XQta
zTGnO0tbUW(uL}alzRgAQu~ofiR3g3<hZT7<<jLC6lEBOkQRb$e{=+cJfIo6lX92<c
zWND)S^voJA^DrY*5^rS?$jh=YUktQJ1A{3+Hj;4OhLWLJb0auKlfWacveO|mLn~5_
zVIA|c4vg0`eRYX!sLF@QA4dcjB?7f-N;|JBWA=97ED0E*yl^G;suA=M;l99F6<IAZ
zI_XI;7tf2c@l~0haLNog@O1Q<aO~$7XfC)5e`v16014$@2wErxBPC-aeX#>c^~hJ-
zf76@Qv0w$T0xnaSdmUBM<gc(2wlevI>(E6QAz0_*XQWa{VSaDuAwO(eq9jrwy!5b9
z*X3Z$lk^wmAJnAF#&OY>wUcTQE-+ZjMTO$k=DAIep*0^$OmoR4sp>L6)(JgCts7G^
zBem!4iQF>JcOs|7#z)q($y3qwh8S2Ws{dH@Na|EFl*g`?{GE?2UCHT5lbeFJx?`^`
z-qeoEyww2$om_!S7Pbx$>q|sme*bFfgUIaeH}}>dUz%g4Y$>Tm*$^r}C&xk(o5y)J
zhvDdvCAsI1pNUE0dpqn~EN!ImHVQ!y=t0lYsG53NW$T96JlhSuZ7mC}<)}CtvYYQ0
zT>joBx~toZjhV{YJ`1y7JLS+di7DPz>AfiYV_836-wt<JD)XHMYX8cRgec`!V=Tn4
zt>EvuujNPSU~r{bz9*I0=mpDl!=EXwaOxe)&FkY>(W*4+5ReA3*j6uK#mB=c1q?|q
z?0ro+YR826UQKnah!#zn^%kWB&X3c>4L#iTWi!%~S6u74U~3Eyv6>CRjgHG;wQeF2
zlsYJjhYs!CgOIByA9b5+Zcyl4op80-C2y?9Ma`CRhX=aOd!L_%hV0&d1D1*%Nqqfd
zrscrxhm0A@CMXGM$QaPytv>%)H6G;io}o#)0GhbWL%}N9GDUzUGw5aE0Qo-Y;*>{8
zNiYM8#$w5A8^wx$QybXheC30=;iood3zaJ&A*WyFWBYZxgfJ5oyWaadhg)WG7tVSY
zV9=D?5cv|ZE&Fj?IpT^f!GL-Ut~CZ!15=0C<@EyHOGQbfkhmz<Btn}6D!+iW6bx}6
zcDL3;ptBAPp);rJN<SE7r`K3CdiL-AQz3u?Bv4GBhx9>F(a)E;I6i@Vgyo>Zs=)yW
z=T`U`pc&|tZ*o8@HW#J8iAf`ojk^9SB9fjJsC2SqAprbNg+dp3#GogKuUJoSgagwN
zMma^@RDJ%16Iu>yQ?DWuz>)H6YUhy&6Y3Yj_$Uu0DRjCyc{5CikeeOm7j=tq5PF7X
zo%!DlZT)f=H4o)+BrSM>(-x#cR-p*Wngk*vU>!{$#w+AQ^gdMl@YnvKy6$Db1qIng
z&pRT;ss?b0+(S;R@b0MGZtUy6HFpOEKiqd_rNX|p;txA>_LyEpNcZ8vote}0PO}Z$
z-n19>sX4PUSu}e}vO!`xRs%Cvt^lLyRrc@PA`GDyjEptGRjj1Up`N4#bapud=~1`e
zrT&;6Qq6J$5wMSRe{eip%t+`2ZIZE}HA6m}Qi<3%XRPCtmSAH@2*d+x0T!VMM~5X8
z60uZpLnuyQ)*6djqoz`|7D`TFE~LaQrHk`emxP@Vxl4vrJ&Yl(dK^p_vtYsza%`N2
z5Ze!!&h^wwU@a7}T8&P1gN5ihd>;XC$wDCU6)_HG-#XQkTkv*}NkTUO=h;Gr>AjWH
z1sw5@s6SEK*DNkg02B0Zb<>;S-bZ+xg*v}ary=2(5@VFfgLBhmyfyo3(C{PIlQq#F
zml(DN4FCpDc3~6e`&F(_mx^)~2VtYQD1%A36Jg(jo2L%2Z&>P_9$a(`6D!u5@xGM3
z3>m2Y@V`G-LSidKZKCE^BAc;eUW}FL<i1Kscc(R1<nZ1Ms%RNem_h6X?6`^za)UMI
z_iJIp)Y-zj`Ef$tE7`)?KdGJ03N-@yi5Q`|vl3)KC|`7{Da$Mc*7FD|d&vTzw-9GJ
zU^cL|qAtg4b!gKpFw{$)f0Pg79QEz9bR73HXe2#BeQXz2xX4V?#$(4G^c%-E=bWY#
z%P6&fIJarSy(#XaJZ)HJR|Z^`B1yV%g<&VtBmF1TiU&ZLcH)47aCAxDAB$>;cCE8o
zQX&#S?KaV3YN_-j^pqnYRDez^L6)e%Nlp{g7k?@+rdEq;4>3MeDEB~tLOje!aLgYZ
zUhi6|tZld=WC2?|$Bomrys37X<OX@fOfn1o56BL`Qi7#086Pf5>EJh4#I4l|H~xB)
zgRd8^Uld<qv`L)ztEbWJs%4k3Fnn>kk#}NdJftg<FXrM*0{3(q#;r*y%>&&#INDw%
zQ(@YQW2(67=FTV5wDR{voV%J(lQ;y^Xj4D!-eEaF*1%_hOuM#zG7^0>>WGz^R?pYG
z?ZZ!ZYU(X4=+9t@Dc^h`%a}!uAwdG>Y|T{2dNc-l>qzZ9znUs%o2@NP(Ru0x)UZ?z
z2o2gk)OKE&fm~(@umTahq%>>q;f~ik)kcuVkCKHFd0;S7ILcrNDT5n7d)$MMfVqq2
zkkS4?uJm#^<s7H>>S(6jLPYK}x?iq)nwUDF#|5H5$+k8RDFDI1o<Dj@g_EM(En6KP
zL})JW7Z_s(uGyLKXvAr$ED*PGk?Y<lcJCMrl};*jVjU(Qpybn|#(xtirUVK=PEfY3
zh3u;~I_@09E4A`)3Z+VTirj#fR1gkTw|U|3?ja6p@+2j-(#3I)*b_<)4Q5QJ0trH5
z&<1Loht8h**R+JrA!sdo3aXb8jm}ULQ7%EDVcw*W1mym@SaQq@5PK7Q_k=58t5eVz
zR>yI+7fRQ#B3D~#8XfIjh}AA(Tp9*Vj+Uw#qoSQk^&XYpm{3|}?~R9AAcy`}g8InM
zA8q^Rl>AX+0gH^*o!7@~D1k~E#$N@RXwHhiHN!njP&XgpB|KcxVi>eBtEw!dq|K9=
zsdjT>;o#;F7-Y$8QzSCb^M0qW4Q|5mVQw3glvx`ls)3bagKJ@yPP!gN`GCT1bms3t
zo3I3K$8VmV+5`yT>n>wERqU@03csR>w$KPsH<!O6E5%A?K6WCdxU6(zPuJHJjK(9k
zcTCR^a7HwRzgT?7f=d66nKnIKCjrScT&JYG-e!{eZ@OWYQmNQR9#!6MNmBkpo^$H^
zoBMz}@+I7Ivh^m*bJ1fwit47kV5(=}fcUv>!kq$XTK`zGR%>yAJ2i7z4*Gv>SCZ|g
zz1HYIR-w<SXpS$~4c6femRZo5Jh`d`Po@N+gNHfw&;w8;w-%Jt9v5WTFZi2Y`C2Mt
zlCeGX;ukAD^*Ru&n)U3(N}lF_FJ<k-`DiI^M+Lzq^h%hmP*IRD>d)%PPcv{QR%~O$
z)XfJ@=u&@|Yi1uW*d+3~r=SWH@R#M_MCuG5AAOTy|C;;XgX(v?Oc{xjo4VG_^rO=;
zhj<i^C{~v@h<|bNmq{o;80gk=82br3LPnkc^FA1gpc%{4K0*A+d;lKUGA2V;_RS0p
zvfwzqYSt))^)G{8=@Pl781?DWNvPYr596#XnvmKiI%RHf=79hE@l=w;n9GR(Z<ySr
z6b$ABJjDeiN^7jlM56n1XZu}@r0m2zvGy}$l}ajhW0x~7WQLRIWzDH847)dFp}IV|
zB(xawf;cI}lv1g=eJLaibGuS{7>byC1oerSzLuCiF^67nAH^*`PbMJ7z6%qcDafuS
z?kgs<YnHE<hSFNG9`cHiPrlq3s+a3{&A!5EN+T_)%tE{!tW^Od0p2nh{t!!F5F|;A
z6^O%}NPy3P+6s=$9u)t&%AFZE=La>2(jog~5#b{g9afuCuc*K5wBCp(iTK$sZqN8m
zm!L+CtiB`|S4GSne?Ss`!dwg|GLo=4A0iHWyYAJYa&Z}<0;uyZ$-CKXnLTsPoKuRC
zHRWU^ha1Zo=z3A)fJCPa;7H|3)Clxy7wceUG%Bql#LS__`08yfJzzAAgn61(GStr;
zEsX!K0Kfx3{7|I_keB)d(EiDkR@i$bXqi+$Uza>d1lbeb`Y1*77^ct(cBN&Q76_Rp
zX%SPGLzUQz210yVV{rcCD1W#Xg+W;HOQaVym96Z|vLf$xnF6Ko`6FjstdbyS=t@in
z{1rsSxFd;}8mMQIfOr!Pu7Q*n3-G+c1KrIeUqI&Z6%_k|&|VY4qk~<~dWGi%)51b;
zvlwRHdjIa&$~cQqGueT)UI5T;D^S$xFubfJt@~oM`{g8OEDyw*D9sOr%<XT0f&lC+
zsSYE3^~)ylX9U&a;X?#@=cC>9S@5GViO*7@AtjlX*$<GNvVdwa35&L2NSAXG4TG4F
ztHP}aD(5d-A3)3k2HIc<Pm*1s<4DMef^U;JC>>X#>e81wpyvw76`3Lwlm-K$N1d!n
z1Im3i$rZKGMgfR?pvEm2(k#R>)2ECCk7~QR59m6~69aof3hFUTDUJq^iOn{7;5ECt
zNH+Cmu9ad|=IHb(kCVlbzHST%UZI&^;1aimP*`<{Q9CC9+yjN3=*w9~pd&p+txS6*
zEAQ*|9JXrHm<3>_drJbDnAb$D$+I~iRLU`k5(+IK8Woezb+WTFZp-Xriy>Au<oj8f
zp_UOMCr~R&VJRqC3PvKbq0~o^5)u)#h;L=cu%N5fz*A2P;p8j)FRrcxh2w=2m@bDX
zjkOx#0TCR=2ZeBE$DRy=G67r`MWqld;cpW4$v*yUxC&{6BcPz!J8Ojk-bZotZIcFq
z>~qW+&T_?UJ%xo~`4g-yI)I23D=r0x(@B9%M<^)a5a=AINysRaJ=<WSL8Zb#kWRC*
z-fgSR6=XBSmMvWxQs5?-A8$G_2P^qjXbN{i%IiQgBS3vKN#vC8D$;WVkH?@<_VS6$
z23Qe43Jy*^E?n&}R3k{LJzCf}wv-UO(H$A`geXt|hha!~<RDPsAT5GlzGp6jup6rO
zy8fuJ`N(Dl;(|RI&vGHIe%Ag%LK?7V)xoz6#ksJg%sZ4TphXhZoc7Iq8IINZX>zII
z{&qvZQ;k`<^{vL@zkQE%8R@WQM#ysWWOz*CLR1!MQ8>hY)F-B4Bo4voEH+FBbUVep
zu6^ftAYZ=!js+61R6rwZp@b41w0Uxmm;o*Xb)6=J%DsJnypO}aePOS>4#XPfq6Ap<
z?w6H8oRzhG&+cDrs<}E;4m!w{mv@l3*AXI7E*T+t2!xsAjU-hPmDR1U$>cj3@nQL>
kb|#*Ql587?|Md^q238Hj7Fcl7y5JklKzI-ec8suo!0e~?>i_@%

diff --git a/static/fonts/roboto-v18-latin-100.svg b/static/fonts/roboto-v18-latin-100.svg
deleted file mode 100644
index e8c8fc835f..0000000000
--- a/static/fonts/roboto-v18-latin-100.svg
+++ /dev/null
@@ -1,313 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1113" ><font-face
-    font-family="Roboto Thin"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="490" />
-<glyph unicode="!" horiz-adv-x="397" d="M221 401H167V1456H221V401ZM147 49Q147 72 163 88T202 105T241 89T258 49T242 10T202 -6T163 10T147 49Z" />
-<glyph unicode="&quot;" horiz-adv-x="521" d="M210 1393L200 1122H150Q155 1390 155 1536H210V1393ZM411 1393L401 1122H351L357 1390V1536H411V1393Z" />
-<glyph unicode="#" horiz-adv-x="1121" d="M742 410H378L304 0H248L322 410H51V462H332L427 986H127V1040H437L512 1456H568L492 1040H857L933 1456H989L913 1040H1167V986H903L807 462H1092V410H798L723 0H667L742 410ZM388 462H751L847 986H482L388 462Z" />
-<glyph unicode="$" horiz-adv-x="1121" d="M947 344Q947 435 913 494T796 604T554 709T317 817T205 940T168 1110Q168 1273 275 1371T554 1476V1663H609V1476Q793 1466 893 1354T993 1047H939Q939 1217 843 1320T579 1424Q417 1424 320 1337T222 1112Q222 1014
-254 957T362 854T575 760T785 677T906 592T977 485T1001 346Q1001 187 898 89T620 -20V-208H565V-21Q353 -13 237 99T121 409H175Q175 232 285 132T586 32Q743 32 845 122T947 344Z" />
-<glyph unicode="%" horiz-adv-x="1527" d="M114 1176Q114 1305 192 1391T386 1477Q503 1477 580 1391T657 1171V1099Q657 972 581 886T388 800Q271 800 193 885T114 1105V1176ZM169 1099Q169 995 228 925T388 855Q484 855 543 924T602 1104V1176Q602 1284 543
-1353T386 1422Q291 1422 230 1353T169 1169V1099ZM870 357Q870 486 947 571T1141 657Q1258 657 1335 572T1413 350V279Q1413 150 1336 65T1143 -21Q1027 -21 949 64T870 284V357ZM925 279Q925 172 984 103T1143 34Q1241 34 1299 103T1358 284V357Q1358 470 1300
-536T1141 602Q1042 602 984 535T925 353V279ZM422 131L377 162L1088 1300L1133 1269L422 131Z" />
-<glyph unicode="&amp;" horiz-adv-x="1247" d="M422 802Q334 910 296 996T257 1167Q257 1308 341 1392T562 1477Q687 1477 762 1404T838 1213Q838 1077 650 921L494 797L969 258Q1084 418 1084 632H1139Q1139 395 1006 216L1196 0H1129L972 176Q776 -20 549 -20Q348
--20 232 80T115 352Q115 450 171 545T371 762L422 802ZM549 34Q660 34 760 81T937 217L454 764L402 723Q284 621 227 532T169 352Q169 210 272 122T549 34ZM312 1169Q312 1011 462 834L637 973Q782 1094 782 1213Q782 1305 721 1364T562 1423Q449 1423 381 1353T312
-1169Z" />
-<glyph unicode="&apos;" horiz-adv-x="340" d="M200 1367L186 1122H136L145 1365V1536H200V1367Z" />
-<glyph unicode="(" horiz-adv-x="607" d="M148 586Q148 802 201 1011T351 1386T562 1623L581 1580Q483 1515 396 1363T257 1011T202 616V564Q202 366 252 163T391 -200T581 -427L562 -470Q446 -397 351 -239T202 130T148 586Z" />
-<glyph unicode=")" horiz-adv-x="623" d="M461 566Q461 341 408 131T259 -238T47 -470L28 -427Q132 -357 221 -195T358 167T407 590Q407 792 356 995T217 1356T28 1580L47 1623Q160 1552 257 1386T408 1011T461 566Z" />
-<glyph unicode="*" horiz-adv-x="856" d="M393 1017L30 1141L48 1195L410 1062L411 1456H467L460 1061L812 1204L832 1151L472 1014L721 697L674 664L432 986L204 661L159 693L393 1017Z" />
-<glyph unicode="+" horiz-adv-x="1151" d="M590 702H1071V649H590V146H535V649H73V702H535V1206H590V702Z" />
-<glyph unicode="," horiz-adv-x="383" d="M129 -255L92 -223Q173 -119 180 -8L181 159H235V13Q231 -146 129 -255Z" />
-<glyph unicode="-" horiz-adv-x="607" d="M531 639H61V693H531V639Z" />
-<glyph unicode="." horiz-adv-x="439" d="M147 49Q147 72 163 88T202 105T241 89T258 49T242 10T202 -6T163 10T147 49Z" />
-<glyph unicode="/" horiz-adv-x="782" d="M101 -125H42L650 1456H709L101 -125Z" />
-<glyph unicode="0" horiz-adv-x="1121" d="M996 594Q996 301 882 141T562 -20Q357 -20 241 142T125 598V862Q125 1152 239 1314T560 1477Q767 1477 881 1315T996 858V594ZM942 862Q942 1127 843 1275T560 1423Q376 1423 278 1275T179 857V596Q179 332 280 183T562
-34Q744 34 843 183T942 601V862Z" />
-<glyph unicode="1" horiz-adv-x="1121" d="M659 0H605V1388L187 1231V1290L648 1460H659V0Z" />
-<glyph unicode="2" horiz-adv-x="1121" d="M1024 0H153V54L650 627Q772 770 831 881T891 1085Q891 1245 798 1333T536 1422Q434 1422 350 1373T219 1238T171 1045H117Q117 1162 171 1262T321 1419T536 1476Q730 1476 838 1373T946 1085Q946 915 755 678L664 567L224
-54H1024V0Z" />
-<glyph unicode="3" horiz-adv-x="1121" d="M417 770H539Q710 773 815 861T921 1085Q921 1240 827 1331T564 1422Q400 1422 294 1326T188 1074H134Q134 1190 190 1282T345 1425T564 1476Q753 1476 864 1370T975 1081Q975 965 902 874T703 745Q846 712 926 621T1007
-386Q1007 200 888 90T573 -20Q441 -20 329 37T160 188T103 405H157Q157 245 275 140T573 34Q752 34 852 126T953 382Q953 543 846 628T531 714H417V770Z" />
-<glyph unicode="4" horiz-adv-x="1121" d="M842 451H1094V397H842V0H788V397H82V427L777 1456H842V451ZM166 451H788V1391L704 1253L166 451Z" />
-<glyph unicode="5" horiz-adv-x="1121" d="M231 762L299 1456H1009V1403H348L289 819Q341 862 426 889T594 916Q790 916 907 792T1024 464Q1024 227 918 104T614 -20Q427 -20 312 87T182 383H237Q253 212 349 123T614 34Q794 34 881 142T969 462Q969 644 868 753T595
-862Q490 862 412 834T272 746L231 762Z" />
-<glyph unicode="6" horiz-adv-x="1121" d="M840 1476V1422Q534 1422 365 1241T183 733Q241 836 351 896T592 957Q784 957 898 826T1013 480Q1013 341 961 226T814 46T602 -20Q468 -20 360 42T191 219T128 481V660Q128 1048 311 1262T840 1476ZM585 903Q445 903
-329 823T182 621V493Q182 287 299 160T602 33Q757 33 858 162T959 480Q959 674 859 788T585 903Z" />
-<glyph unicode="7" horiz-adv-x="1121" d="M1007 1422L366 0H311L945 1402H77V1456H1007V1422Z" />
-<glyph unicode="8" horiz-adv-x="1121" d="M986 1086Q986 964 911 873T715 745Q858 707 943 607T1028 379Q1028 194 902 87T565 -20Q351 -20 226 87T100 379Q100 508 182 607T408 745Q288 781 215 872T141 1086Q141 1266 256 1371T561 1476Q751 1476 868 1369T986
-1086ZM973 374Q973 524 858 621T563 718Q382 718 268 622T154 374Q154 220 265 127T565 34Q749 34 861 127T973 374ZM932 1091Q932 1233 825 1327T561 1422Q400 1422 298 1331T195 1091Q195 949 297 861T563 772Q725 772 828 861T932 1091Z" />
-<glyph unicode="9" horiz-adv-x="1121" d="M939 724Q886 609 775 539T523 468Q403 468 307 532T157 710T103 958Q103 1101 158 1220T312 1408T531 1476Q756 1476 874 1330T993 907V740Q993 371 829 178T346 -20H298L300 34H343Q635 37 787 212T939 724ZM523 522Q671
-522 785 609T939 840V902Q939 1155 835 1288T535 1422Q428 1422 341 1359T206 1188T157 958Q157 839 204 738T334 579T523 522Z" />
-<glyph unicode=":" horiz-adv-x="364" d="M376 49Q376 72 392 88T431 105T470 89T487 49T471 10T431 -6T392 10T376 49ZM125 1011Q125 1034 141 1050T180 1067T219 1051T236 1011T220 972T180 956T141 972T125 1011Z" />
-<glyph unicode=";" horiz-adv-x="364" d="M126 1011Q126 1034 142 1050T181 1067T220 1051T237 1011T221 972T181 956T142 972T126 1011ZM374 -255L337 -223Q418 -119 425 -8L426 159H480V13Q476 -146 374 -255Z" />
-<glyph unicode="&lt;" horiz-adv-x="1053" d="M155 666L919 321V262L82 641V691L919 1069V1011L155 666Z" />
-<glyph unicode="=" horiz-adv-x="1142" d="M981 843H147V897H981V843ZM981 436H147V490H981V436Z" />
-<glyph unicode="&gt;" horiz-adv-x="1053" d="M872 668L114 1013V1072L950 694V644L114 265V324L872 668Z" />
-<glyph unicode="?" horiz-adv-x="893" d="M395 400Q397 512 429 583T552 739T678 874T730 980T747 1112Q747 1257 670 1340T458 1423Q314 1423 232 1337T147 1116H93Q95 1278 198 1377T458 1476T708 1377T801 1110Q801 995 756 906T581 698Q449 595 449 400H395ZM371
-49Q371 72 387 88T426 105T465 89T482 49T466 10T426 -6T387 10T371 49Z" />
-<glyph unicode="@" horiz-adv-x="1902" d="M1770 523Q1765 369 1715 240T1584 46T1400 -20Q1300 -20 1238 41T1165 210Q1055 -20 832 -20Q696 -20 630 104T581 436Q605 687 726 837T1018 988Q1133 988 1216 922L1268 878L1219 293Q1208 170 1256 103T1403 35Q1537
-35 1619 164T1713 523Q1735 934 1553 1144T1000 1354Q776 1354 593 1242T305 930T187 478Q175 223 259 24T513 -287T913 -398Q1003 -398 1091 -377T1243 -318L1267 -364Q1203 -406 1102 -429T909 -453Q659 -453 479 -341T210 -17T132 478Q144 758 255 970T560 1296T1004
-1411Q1396 1411 1592 1182T1770 523ZM634 279Q645 163 696 99T830 34Q955 34 1036 111T1168 344L1211 851Q1142 933 1015 933T792 833T655 557Q621 405 634 279Z" />
-<glyph unicode="A" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489Z" />
-<glyph unicode="B" horiz-adv-x="1235" d="M200 0V1456H583Q818 1456 938 1361T1059 1083Q1059 951 992 864T803 753Q941 735 1033 634T1125 401Q1125 215 1005 108T669 0H200ZM254 719V54H675Q860 54 965 145T1071 399Q1071 537 969 626T696 719H254ZM254 773H603Q802
-773 903 849T1004 1087Q1004 1397 595 1402H254V773Z" />
-<glyph unicode="C" horiz-adv-x="1327" d="M1190 446Q1169 221 1035 101T671 -20Q516 -20 397 58T211 281T144 612V837Q144 1023 209 1169T394 1396T671 1476Q899 1476 1034 1356T1190 1012H1136Q1113 1213 996 1317T671 1422Q459 1422 329 1262T198 833V619Q198
-447 256 315T422 108T671 34Q880 34 997 137T1136 446H1190Z" />
-<glyph unicode="D" horiz-adv-x="1340" d="M200 0V1456H603Q772 1456 909 1376T1124 1152T1204 828V639Q1204 457 1128 311T914 83T608 0H200ZM254 1402V54H603Q756 54 881 128T1078 336T1150 633V820Q1150 983 1081 1116T887 1324T611 1402H254Z" />
-<glyph unicode="E" horiz-adv-x="1166" d="M984 722H254V54H1086V0H200V1456H1086V1402H254V776H984V722Z" />
-<glyph unicode="F" horiz-adv-x="1172" d="M1000 716H254V0H200V1456H1102V1402H254V772H1000V716Z" />
-<glyph unicode="G" horiz-adv-x="1406" d="M1226 156Q1171 80 1033 30T729 -20Q567 -20 440 59T242 282T168 608V858Q168 1037 237 1179T431 1398T712 1476Q929 1476 1065 1365T1224 1062H1170Q1143 1236 1025 1329T712 1422Q492 1422 357 1265T222 852V620Q222
-449 285 315T464 108T729 34Q875 34 1000 77T1172 181V605H727V660H1226V156Z" />
-<glyph unicode="H" horiz-adv-x="1438" d="M1238 0H1184V722H254V0H200V1456H254V776H1184V1456H1238V0Z" />
-<glyph unicode="I" horiz-adv-x="534" d="M294 0H240V1456H294V0Z" />
-<glyph unicode="J" horiz-adv-x="1125" d="M876 1456H930V442Q930 231 815 106T510 -20Q306 -20 198 89T90 401H144Q144 223 235 129T510 34Q670 34 771 141T876 432V1456Z" />
-<glyph unicode="K" horiz-adv-x="1300" d="M487 766L254 551V0H200V1456H254V614L494 849L1098 1456H1176L527 803L1226 0H1156L487 766Z" />
-<glyph unicode="L" horiz-adv-x="1057" d="M255 54H1002V0H200V1456H255V54Z" />
-<glyph unicode="M" horiz-adv-x="1756" d="M277 1456L876 79L1477 1456H1556V0H1502V1376L898 0H855L254 1369V0H200V1456H277Z" />
-<glyph unicode="N" horiz-adv-x="1449" d="M1249 0H1195L255 1364V0H200V1456H255L1195 95V1456H1249V0Z" />
-<glyph unicode="O" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103 1043 1262T681 1422Q456 1422 322
-1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839Z" />
-<glyph unicode="P" horiz-adv-x="1230" d="M254 615V0H200V1456H655Q878 1456 1001 1344T1125 1031Q1125 833 1005 725T662 615H254ZM254 669H655Q852 669 961 764T1071 1029Q1071 1205 962 1303T655 1402H254V669Z" />
-<glyph unicode="Q" horiz-adv-x="1364" d="M1231 619Q1231 415 1152 261T924 33L1191 -228L1152 -263L868 10Q778 -20 683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103
-1043 1262T681 1422Q456 1422 322 1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839Z" />
-<glyph unicode="R" horiz-adv-x="1340" d="M754 623H249V0H195V1456H659Q878 1456 1007 1343T1137 1036Q1137 887 1045 776T809 637L1198 14V0H1141L754 623ZM249 677H708Q876 677 979 779T1083 1036Q1083 1206 969 1304T655 1402H249V677Z" />
-<glyph unicode="S" horiz-adv-x="1211" d="M1072 349Q1072 442 1029 506T892 620T609 722T326 827T187 950T143 1120Q143 1279 277 1377T626 1476Q766 1476 877 1422T1050 1269T1111 1046H1057Q1057 1209 937 1315T626 1422Q434 1422 316 1337T197 1122Q197 991
-300 911T640 770T987 627Q1127 524 1127 351Q1127 241 1065 157T889 26T633 -20Q475 -20 349 32T160 182T96 411H150Q150 232 284 133T633 34Q824 34 948 121T1072 349Z" />
-<glyph unicode="T" horiz-adv-x="1224" d="M1169 1402H639V0H585V1402H55V1456H1169V1402Z" />
-<glyph unicode="U" horiz-adv-x="1365" d="M1180 1456V470Q1180 239 1046 110T683 -20T320 109T185 466V1456H239V472Q239 270 360 152T683 34T1005 152T1126 473V1456H1180Z" />
-<glyph unicode="V" horiz-adv-x="1223" d="M583 142L612 54L641 142L1130 1456H1189L645 0H579L35 1456H94L583 142Z" />
-<glyph unicode="W" horiz-adv-x="1855" d="M489 90L555 330L899 1456H959L1301 330L1366 90L1434 330L1734 1456H1793L1401 0H1340L979 1214L928 1368L879 1214L515 0H454L61 1456H121L423 330L489 90Z" />
-<glyph unicode="X" horiz-adv-x="1223" d="M611 785L1081 1456H1149L645 743L1168 0H1101L611 701L119 0H54L577 743L73 1456H141L611 785Z" />
-<glyph unicode="Y" horiz-adv-x="1223" d="M609 602L1119 1456H1185L636 553V0H582V553L33 1456H105L609 602Z" />
-<glyph unicode="Z" horiz-adv-x="1224" d="M168 54H1130V0H94V44L1023 1403H134V1456H1098V1418L168 54Z" />
-<glyph unicode="[" horiz-adv-x="439" d="M464 1610H235V-258H464V-312H181V1664H464V1610Z" />
-<glyph unicode="\" horiz-adv-x="774" d="M57 1456H115L723 -125H665L57 1456Z" />
-<glyph unicode="]" horiz-adv-x="439" d="M-8 1664H275V-312H-8V-258H220V1610H-8V1664Z" />
-<glyph unicode="^" horiz-adv-x="849" d="M416 1382L150 729H91L390 1456H442L741 729H680L416 1382Z" />
-<glyph unicode="_" horiz-adv-x="845" d="M845 -54H-1V0H845V-54Z" />
-<glyph unicode="`" horiz-adv-x="537" d="M403 1270H344L149 1536H215L403 1270Z" />
-<glyph unicode="a" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33Z" />
-<glyph unicode="b" horiz-adv-x="1121" d="M999 531Q999 278 890 129T593 -20Q471 -20 375 30T224 171V0H170V1536H224V885Q281 992 374 1047T591 1102Q781 1102 890 957T999 548V531ZM943 552Q943 785 851 916T592 1048Q456 1048 362 978T224 770V274Q267 159
-361 97T594 34Q761 34 852 167T943 552Z" />
-<glyph unicode="c" horiz-adv-x="1039" d="M539 34Q686 34 781 112T886 328H940Q932 171 819 76T539 -20Q336 -20 217 127T97 526V562Q97 808 216 955T537 1102Q709 1102 821 999T940 725H886Q879 871 784 959T537 1048Q356 1048 254 918T151 555V520Q151 293
-254 164T539 34Z" />
-<glyph unicode="d" horiz-adv-x="1121" d="M122 552Q122 811 231 956T530 1102Q652 1102 745 1047T897 883V1536H951V0H897V173Q842 81 746 31T528 -20Q340 -20 231 129T122 538V552ZM178 531Q178 301 269 168T527 34Q661 34 756 93T897 268V775Q804 1048 529
-1048Q363 1048 271 917T178 531Z" />
-<glyph unicode="e" horiz-adv-x="1032" d="M561 -20Q430 -20 321 50T149 244T87 517V562Q87 712 147 837T312 1032T541 1102Q722 1102 837 973T952 634V577H141V518Q141 386 196 274T349 97T561 33Q670 33 746 69T882 182L920 155Q799 -20 561 -20ZM541 1048Q383
-1048 273 931T144 631H898V644Q898 754 852 848T724 995T541 1048Z" />
-<glyph unicode="f" horiz-adv-x="645" d="M254 0V1027H66V1082H254V1240Q255 1390 329 1473T537 1557Q611 1557 665 1540L657 1488Q605 1503 538 1503Q431 1503 370 1434T308 1236V1082H594V1027H308V0H254Z" />
-<glyph unicode="g" horiz-adv-x="1123" d="M121 552Q121 811 230 956T529 1102Q650 1102 744 1047T895 884V1082H950V19Q950 -195 840 -315T541 -436Q432 -436 342 -389T187 -254L225 -218Q288 -298 363 -340T539 -383Q706 -383 799 -282T895 5V171Q839 79 744
-30T527 -20Q339 -20 230 129T121 538V552ZM176 531Q176 299 268 167T526 34Q663 34 759 97T895 276V767Q807 1048 528 1048Q361 1048 269 917T176 531Z" />
-<glyph unicode="h" horiz-adv-x="1121" d="M226 830Q279 956 382 1029T610 1102Q784 1102 868 1004T954 706V0H900V708Q899 882 829 965T607 1049Q467 1049 365 950T226 693V0H172V1536H226V830Z" />
-<glyph unicode="i" horiz-adv-x="422" d="M239 0H185V1082H239V0ZM157 1420Q157 1443 173 1459T212 1476T251 1460T268 1420T252 1381T212 1365T173 1381T157 1420Z" />
-<glyph unicode="j" horiz-adv-x="445" d="M240 1082V-129Q240 -279 165 -358T-45 -437Q-94 -437 -143 -417L-140 -365Q-92 -383 -45 -383Q67 -383 126 -317T186 -129V1082H240ZM163 1420Q163 1443 179 1459T218 1476T257 1460T274 1420T258 1381T218 1365T179
-1381T163 1420Z" />
-<glyph unicode="k" horiz-adv-x="969" d="M385 585L383 583L226 448V0H172V1536H226V507L353 627L845 1082H922L425 621L953 0H883L385 585Z" />
-<glyph unicode="l" horiz-adv-x="422" d="M239 0H185V1536H239V0Z" />
-<glyph unicode="m" horiz-adv-x="1836" d="M946 0H892V727Q891 890 821 969T596 1049Q418 1049 305 892Q238 798 216 684V0H161V1082H216V826Q271 958 373 1030T599 1102Q735 1102 821 1042T935 846Q983 963 1091 1032T1333 1102Q1508 1102 1593 1003T1680 706V0H1626V702Q1626
-880 1555 965T1330 1049Q1133 1046 1018 892Q952 803 946 720V0Z" />
-<glyph unicode="n" horiz-adv-x="1121" d="M226 830Q279 956 382 1029T610 1102Q784 1102 868 1004T954 706V0H900V708Q899 882 829 965T607 1049Q467 1049 365 950T226 693V0H172V1082H226V830Z" />
-<glyph unicode="o" horiz-adv-x="1127" d="M90 562Q90 717 149 840T317 1033T563 1102Q699 1102 807 1035T975 845T1037 568V520Q1037 364 978 241T811 49T565 -20T320 48T151 238T90 514V562ZM144 520Q144 385 197 273T346 97T565 34Q750 34 866 173T983 531V562Q983
-695 929 808T780 984T563 1048Q378 1048 261 907T144 552V520Z" />
-<glyph unicode="p" horiz-adv-x="1121" d="M999 531Q999 278 890 129T593 -20Q470 -20 374 30T224 168V-416H170V1082H224V889Q280 992 375 1047T591 1102Q781 1102 890 957T999 548V531ZM944 552Q944 785 852 916T592 1048Q456 1048 361 978T224 775V269Q266
-157 361 96T594 34Q760 34 852 166T944 552Z" />
-<glyph unicode="q" horiz-adv-x="1121" d="M122 552Q122 811 231 956T530 1102Q651 1102 746 1047T897 889V1082H951V-416H897V168Q839 77 744 29T528 -20Q340 -20 231 129T122 538V552ZM178 531Q178 301 269 168T527 34Q661 34 756 93T897 268V775Q850 910 755
-979T529 1048Q363 1048 271 917T178 531Z" />
-<glyph unicode="r" horiz-adv-x="685" d="M649 1043L579 1049Q441 1049 348 960T226 709V0H172V1082H226V857Q270 970 358 1036T579 1102Q626 1102 655 1091L649 1043Z" />
-<glyph unicode="s" horiz-adv-x="1019" d="M839 265Q839 462 503 533Q301 576 222 643T143 829Q143 948 243 1025T505 1102Q680 1102 786 1019T892 793H837Q837 902 745 975T505 1048Q363 1048 280 986T197 831Q197 758 228 717T329 642T533 577T745 504T858 405T893
-264Q893 136 788 58T513 -20Q331 -20 220 62T108 275H162Q170 161 262 98T513 34Q658 34 748 101T839 265Z" />
-<glyph unicode="t" horiz-adv-x="648" d="M293 1374V1082H539V1027H293V259Q293 144 330 89T456 34Q500 34 563 43L572 -8Q539 -20 459 -20Q341 -20 290 45T238 252V1027H38V1082H238V1374H293Z" />
-<glyph unicode="u" horiz-adv-x="1121" d="M897 0V175Q849 85 757 33T524 -20Q347 -20 259 83T168 385V1082H222V383Q224 211 300 123T522 34Q677 34 774 107T897 321V1082H952V0H897Z" />
-<glyph unicode="v" horiz-adv-x="978" d="M490 86L879 1082H937L516 0H463L43 1082H101L490 86Z" />
-<glyph unicode="w" horiz-adv-x="1550" d="M366 313L425 80L742 1082H797L1112 80L1173 313L1393 1082H1456L1141 0H1087L820 813L769 1007L714 813L451 0H397L83 1082H145L366 313Z" />
-<glyph unicode="x" horiz-adv-x="978" d="M489 602L834 1082H902L522 555L922 0H855L488 508L122 0H55L455 555L75 1082H143L489 602Z" />
-<glyph unicode="y" horiz-adv-x="978" d="M503 84L510 104L884 1082H944L460 -188L436 -248Q358 -437 178 -437Q120 -437 98 -426L97 -375Q129 -384 170 -384Q255 -384 311 -335T408 -173L474 6L43 1082H102L503 84Z" />
-<glyph unicode="z" horiz-adv-x="978" d="M160 54H930V0H87V44L798 1027H118V1082H871V1034L160 54Z" />
-<glyph unicode="{" horiz-adv-x="660" d="M642 -441Q482 -391 403 -278T323 20V261Q323 543 73 543V609Q323 609 323 889V1136Q324 1321 403 1434T642 1597L657 1552Q377 1461 377 1125V897Q377 625 166 576Q377 523 377 255V26Q377 -299 662 -395L642 -441Z" />
-<glyph unicode="|" horiz-adv-x="406" d="M235 -270H181V1456H235V-270Z" />
-<glyph unicode="}" horiz-adv-x="660" d="M0 -395Q284 -298 284 22V255Q284 523 495 576Q284 625 284 897V1124Q284 1462 5 1552L19 1597Q179 1547 257 1435T338 1141V892Q338 609 588 609V543Q338 543 338 258V21Q338 -165 260 -277T19 -441L0 -395Z" />
-<glyph unicode="~" horiz-adv-x="1412" d="M1246 752Q1246 614 1173 529T977 443Q906 443 845 471T687 586T539 696T428 720Q328 720 272 655T215 462H160Q160 605 231 689T428 774Q500 774 563 745T723 629T870 519T977 496Q1078 496 1134 563T1190 753L1246 752Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="490" />
-<glyph unicode="&#xa1;" horiz-adv-x="406" d="M179 696H233V-359H179V696ZM253 1048Q253 1025 237 1009T198 992T159 1008T142 1048T158 1087T198 1103T237 1087T253 1048Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1110" d="M576 34Q723 34 818 112T923 328H977Q969 178 864 84T604 -19V-245H549V-19Q358 -9 246 136T134 526V562Q134 802 246 946T549 1101V1318H604V1101Q767 1090 868 989T977 725H923Q916 871 821 959T574 1048Q393
-1048 291 918T188 555V520Q188 293 291 164T576 34Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1150" d="M360 667L370 336Q374 142 303 54H1060L1061 0H99V54H219Q267 68 292 148T316 336L306 667H95V721H304L295 1039Q295 1243 394 1359T661 1476Q834 1476 934 1372T1035 1089H981Q981 1248 896 1335T661 1422Q514
-1422 432 1322T349 1039L358 721H728V667H360Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1502" d="M1159 156Q1078 73 972 27T745 -20T518 26T330 154L154 -26L114 13L293 195Q149 371 149 608Q149 854 303 1032L114 1225L154 1264L342 1072Q513 1234 745 1234Q863 1234 965 1191T1148 1070L1339 1265L1380 1225L1187
-1029Q1339 851 1339 608Q1339 374 1198 199L1380 13L1339 -27L1159 156ZM204 608Q204 454 277 320T476 110T745 33Q888 33 1013 109T1211 320T1285 608Q1285 761 1213 893T1015 1103T745 1181T475 1104T277 894T204 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1038" d="M938 1456H1000L568 676H935V621H543V381H935V326H543V0H489V326H99V381H489V621H99V676H464L33 1456H95L487 738L512 687H521L547 738L938 1456Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="398" d="M172 -270V482H226V-270H172ZM226 698H172V1456H226V698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1223" d="M1094 431Q1094 326 1012 255T790 164Q932 110 991 37T1050 -149Q1050 -309 929 -402T600 -495Q374 -495 245 -383T115 -64L169 -62Q169 -242 285 -341T600 -441Q783 -441 889 -362T995 -151Q995 -63 959 -10T840
-85T607 166Q336 230 229 319T121 551Q121 660 198 731T407 822Q278 873 222 947T166 1129Q166 1286 288 1381T618 1476Q833 1476 952 1364T1072 1045H1018Q1018 1212 909 1317T618 1422Q434 1422 327 1345T220 1132Q220 1041 256 987T374 891T616 804Q824 752 914
-705T1049 593T1094 431ZM590 766Q531 779 482 796Q339 791 257 726T175 553Q175 460 214 406T347 309T693 196Q850 198 945 262T1040 428Q1040 513 999 569T865 670T590 766Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="906" d="M174 1421Q174 1444 190 1460T229 1477T268 1461T285 1421T269 1382T229 1366T190 1382T174 1421ZM619 1421Q619 1444 635 1460T674 1477T713 1461T730 1421T714 1382T674 1366T635 1382T619 1421Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1666" d="M1124 616Q1124 464 1046 383T826 302Q682 302 594 409T506 693V768Q506 941 595 1048T826 1155Q969 1155 1047 1073T1125 842H1073Q1073 973 1009 1037T826 1102T634 1010T561 763V689Q561 540 633 449T826 357Q1072
-357 1072 616H1124ZM179 729Q179 541 267 380T507 126T833 34Q1009 34 1161 128T1400 382T1487 729Q1487 916 1400 1075T1161 1328T833 1421Q660 1421 508 1330T268 1079T179 729ZM123 729Q123 931 216 1104T475 1376T833 1476T1190 1377T1449 1104T1543 729Q1543
-530 1452 358T1196 83T833 -21T471 82T214 358T123 729Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="898" d="M680 705Q662 759 658 823Q619 763 554 727T417 691Q296 691 232 748T168 900Q168 1009 251 1070T487 1132H657V1201Q657 1305 608 1363T458 1422Q349 1422 285 1378T221 1243H167Q167 1345 248 1410T458 1476Q574
-1476 643 1404T712 1200V884Q712 792 738 705H680ZM418 746Q488 746 562 793T657 899V1078H490Q222 1078 222 904Q222 746 418 746Z" />
-<glyph unicode="&#xab;" horiz-adv-x="905" d="M216 781L510 402H440L145 772V791L440 1161H510L216 781ZM503 525L797 146H727L432 516V535L727 905H797L503 525Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1101" d="M915 396H861V700H122V753H915V396Z" />
-<glyph unicode="&#xad;" horiz-adv-x="607" d="M531 639H61V693H531V639Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1674" d="M115 729Q115 931 208 1104T467 1376T825 1476T1182 1377T1441 1104T1535 729Q1535 530 1444 358T1188 83T825 -21T463 82T206 358T115 729ZM170 729Q170 543 257 383T496 128T825 34Q1001 34 1153 128T1392 382T1479
-729Q1479 916 1392 1075T1153 1328T825 1421Q649 1421 497 1328T257 1076T170 729ZM648 678V326H593V1156H832Q1121 1156 1121 916Q1121 772 968 710Q1100 671 1100 502Q1100 391 1117 342V326H1058Q1044 362 1044 502Q1044 594 1006 635T873 678H648ZM648 734H853Q949
-734 1007 784T1066 917Q1066 1015 1015 1057T846 1101H648V734Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="811" d="M699 1383H132V1436H699V1383Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="783" d="M156 1236Q156 1333 225 1404T392 1476Q488 1476 556 1405T624 1236Q624 1138 556 1069T392 999Q294 999 225 1068T156 1236ZM211 1236Q211 1159 262 1107T392 1055Q468 1055 518 1105T568 1236Q568 1318 518 1369T392
-1421Q314 1421 263 1368T211 1236Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1077" d="M569 805H988V751H569V289H515V751H72V805H515V1267H569V805ZM957 -1H122V53H957V-1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="728" d="M651 664H108V708L398 1003Q477 1080 514 1138T551 1247Q551 1324 502 1369T356 1415Q254 1415 197 1363T140 1226H86Q86 1329 161 1396T356 1464Q472 1464 538 1405T605 1248Q605 1154 492 1031L426 961L175 713H651V664Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="728" d="M270 1090H345Q446 1091 505 1135T564 1249Q564 1326 511 1370T362 1415Q271 1415 211 1369T150 1246H97Q97 1342 172 1403T362 1464Q481 1464 549 1406T618 1246Q618 1189 578 1140T463 1067Q549 1047 593 997T637
-875Q637 775 563 714T367 653Q243 653 162 716T80 881H134Q134 803 199 752T367 701T526 747T583 874Q583 1041 330 1041H270V1090Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="511" d="M315 1536H381L186 1270H126L315 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1121" d="M223 1082V421Q226 232 302 133T529 34Q705 34 794 124T899 414V1082H953V0H902L899 203Q803 -20 538 -20Q424 -20 345 30T223 171V-416H171V1082H223Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="946" d="M716 0V520H589Q439 520 328 578T158 742T99 988Q99 1201 232 1328T593 1456H770V0H716Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="472" d="M179 706Q179 729 195 745T234 762T273 746T290 706T274 667T234 651T195 667T179 706Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="490" d="M207 0L196 -76Q373 -92 373 -245Q373 -330 297 -382T88 -435L81 -386Q182 -386 250 -347T318 -245Q318 -189 280 -161T129 -121L154 0H207Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="728" d="M433 664H379V1386L131 1305V1358L424 1455H433V664Z" />
-<glyph unicode="&#xba;" horiz-adv-x="914" d="M148 1141Q148 1291 231 1383T452 1476T673 1384T757 1136V1024Q757 873 674 782T454 690Q317 690 233 781T148 1029V1141ZM202 1024Q202 893 268 819T454 744Q570 744 637 820T704 1028V1141Q704 1269 636 1345T452
-1422Q338 1422 270 1346T202 1135V1024Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="897" d="M198 940L492 560V541L198 171H128L421 550L128 940H198ZM488 940L782 560V541L488 171H418L711 550L418 940H488Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1467" d="M447 664H393V1386L145 1305V1358L438 1455H447V664ZM386 139L341 170L1052 1308L1097 1277L386 139ZM1225 253H1372V204H1225V0H1172V204H749L748 236L1165 789H1225V253ZM818 253H1172V727L1128 656L818 253Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1508" d="M343 139L298 170L1009 1308L1054 1277L343 139ZM424 664H370V1386L122 1305V1358L415 1455H424V664ZM1392 0H849V44L1139 339Q1218 416 1255 474T1292 583Q1292 660 1243 705T1097 751Q995 751 938 699T881 562H827Q827
-665 902 732T1097 800Q1213 800 1279 741T1346 584Q1346 490 1233 367L1167 297L916 49H1392V0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1586" d="M548 139L503 170L1214 1308L1259 1277L548 139ZM1365 253H1512V204H1365V0H1312V204H889L888 236L1305 789H1365V253ZM958 253H1312V727L1268 656L958 253ZM314 1090H389Q490 1091 549 1135T608 1249Q608 1326
-555 1370T406 1415Q315 1415 255 1369T194 1246H141Q141 1342 216 1403T406 1464Q525 1464 593 1406T662 1246Q662 1189 622 1140T507 1067Q593 1047 637 997T681 875Q681 775 607 714T411 653Q287 653 206 716T124 881H178Q178 803 243 752T411 701T570 747T627
-874Q627 1041 374 1041H314V1090Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="912" d="M514 695Q512 593 503 557T469 487T389 403L311 327Q232 248 197 166T162 -17Q162 -166 241 -247T461 -328Q599 -328 678 -246T762 -21H816Q814 -188 719 -284T461 -381Q296 -381 202 -281T108 -15Q108 106 160 207T361
-445Q412 485 434 526T459 626L460 695H514ZM538 1046Q538 1023 522 1007T483 990T444 1006T427 1046T443 1085T483 1101T522 1085T538 1046Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489ZM655 1589H596L401 1855H467L655 1589Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489ZM761 1855H827L632 1589H572L761 1855Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489ZM866 1593V1583H798L611 1779L426 1583H362V1597L592 1836H632L866 1593Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489ZM940 1806Q940 1724 890 1672T764 1620Q683 1620 611 1682T477 1745Q421 1745 389 1711T356 1620H301Q301 1700 351 1749T477
-1799Q555 1799 630 1737T764 1675Q818 1675 851 1711T885 1806H940Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489ZM336 1740Q336 1763 352 1779T391 1796T430 1780T447 1740T431 1701T391 1685T352 1701T336 1740ZM781 1740Q781 1763 797
-1779T836 1796T875 1780T892 1740T876 1701T836 1685T797 1701T781 1740Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1223" d="M967 435H254L92 0H33L578 1456H644L1189 0H1130L967 435ZM274 489H947L611 1391L274 489ZM614 1875Q686 1875 735 1824T785 1701T736 1580T614 1531Q545 1531 494 1578T443 1701T493 1825T614 1875ZM497 1701Q497
-1649 530 1617T614 1585T698 1617T731 1701Q731 1755 698 1788T614 1821T530 1788T497 1701Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1816" d="M1768 0H1016L998 425H371L115 0H50L931 1456H1707V1402H1011L1037 786H1625V732H1039L1067 54H1768V0ZM403 478H996L957 1398L403 478Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1327" d="M1190 446Q1169 221 1035 101T671 -20Q516 -20 397 58T211 281T144 612V837Q144 1023 209 1169T394 1396T671 1476Q899 1476 1034 1356T1190 1012H1136Q1113 1213 996 1317T671 1422Q459 1422 329 1262T198 833V619Q198
-447 256 315T422 108T671 34Q880 34 997 137T1136 446H1190ZM706 -9L695 -85Q872 -101 872 -254Q872 -339 796 -391T587 -444L580 -395Q681 -395 749 -356T817 -254Q817 -198 779 -170T628 -130L653 -9H706Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1166" d="M984 722H254V54H1086V0H200V1456H1086V1402H254V776H984V722ZM662 1589H603L408 1855H474L662 1589Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1166" d="M984 722H254V54H1086V0H200V1456H1086V1402H254V776H984V722ZM768 1855H834L639 1589H579L768 1855Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1166" d="M984 722H254V54H1086V0H200V1456H1086V1402H254V776H984V722ZM873 1593V1583H805L618 1779L433 1583H369V1597L599 1836H639L873 1593Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1166" d="M984 722H254V54H1086V0H200V1456H1086V1402H254V776H984V722ZM343 1740Q343 1763 359 1779T398 1796T437 1780T454 1740T438 1701T398 1685T359 1701T343 1740ZM788 1740Q788 1763 804 1779T843 1796T882 1780T899
-1740T883 1701T843 1685T804 1701T788 1740Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="534" d="M294 0H240V1456H294V0ZM312 1589H253L58 1855H124L312 1589Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="534" d="M294 0H240V1456H294V0ZM417 1855H483L288 1589H228L417 1855Z" />
-<glyph unicode="&#xce;" horiz-adv-x="534" d="M294 0H240V1456H294V0ZM523 1593V1583H455L268 1779L83 1583H19V1597L249 1836H289L523 1593Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="534" d="M294 0H240V1456H294V0ZM-7 1740Q-7 1763 9 1779T48 1796T87 1780T104 1740T88 1701T48 1685T9 1701T-7 1740ZM438 1740Q438 1763 454 1779T493 1796T532 1780T549 1740T533 1701T493 1685T454 1701T438 1740Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1370" d="M230 0V713H60V767H230V1456H633Q802 1456 939 1376T1154 1152T1234 828V639Q1234 457 1158 311T944 83T638 0H230ZM647 713H284V54H623Q870 54 1025 220T1180 647V820Q1180 983 1111 1116T917 1324T641 1402H284V767H647V713Z"
-/>
-<glyph unicode="&#xd1;" horiz-adv-x="1449" d="M1249 0H1195L255 1364V0H200V1456H255L1195 95V1456H1249V0ZM1054 1806Q1054 1724 1004 1672T878 1620Q797 1620 725 1682T591 1745Q535 1745 503 1711T470 1620H415Q415 1700 465 1749T591 1799Q669 1799 744
-1737T878 1675Q932 1675 965 1711T999 1806H1054Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103 1043 1262T681 1422Q456 1422
-322 1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839ZM719 1610H660L465 1876H531L719 1610Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103 1043 1262T681 1422Q456 1422
-322 1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839ZM825 1876H891L696 1610H636L825 1876Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103 1043 1262T681 1422Q456 1422
-322 1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839ZM930 1614V1604H862L675 1800L490 1604H426V1618L656 1857H696L930 1614Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103 1043 1262T681 1422Q456 1422
-322 1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839ZM1004 1827Q1004 1745 954 1693T828 1641Q747 1641 675 1703T541 1766Q485 1766 453 1732T420 1641H365Q365 1721 415 1770T541 1820Q619 1820 694 1758T828 1696Q882 1696
-915 1732T949 1827H1004Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q437 -20 285 155T133 627V837Q133 1025 200 1171T393 1396T681 1476Q844 1476 969 1397T1163 1171T1231 837V619ZM1177 839Q1177 1103 1043 1262T681 1422Q456 1422
-322 1264T188 832V619Q188 445 248 312T421 106T683 34Q911 34 1044 193T1177 627V839ZM400 1761Q400 1784 416 1800T455 1817T494 1801T511 1761T495 1722T455 1706T416 1722T400 1761ZM845 1761Q845 1784 861 1800T900 1817T939 1801T956 1761T940 1722T900 1706T861
-1722T845 1761Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1052" d="M98 36L482 429L125 793L164 832L520 468L877 832L916 793L559 429L944 36L905 -1L521 390L137 -1L98 36Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1364" d="M1231 619Q1231 430 1164 285T971 60T683 -20Q488 -20 349 92L243 -75H177L307 130Q133 306 133 629V837Q133 1025 200 1171T393 1396T681 1476Q912 1476 1063 1319L1174 1495H1240L1100 1275Q1230 1103 1231 839V619ZM188
-619Q188 335 337 176L1033 1273Q901 1422 681 1422Q456 1422 322 1264T188 832V619ZM1177 839Q1177 1076 1070 1227L378 137Q502 34 683 34Q911 34 1044 193T1177 627V839Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1365" d="M1180 1456V470Q1180 239 1046 110T683 -20T320 109T185 466V1456H239V472Q239 270 360 152T683 34T1005 152T1126 473V1456H1180ZM740 1589H681L486 1855H552L740 1589Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1365" d="M1180 1456V470Q1180 239 1046 110T683 -20T320 109T185 466V1456H239V472Q239 270 360 152T683 34T1005 152T1126 473V1456H1180ZM846 1855H912L717 1589H657L846 1855Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1365" d="M1180 1456V470Q1180 239 1046 110T683 -20T320 109T185 466V1456H239V472Q239 270 360 152T683 34T1005 152T1126 473V1456H1180ZM951 1593V1583H883L696 1779L511 1583H447V1597L677 1836H717L951 1593Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1365" d="M1180 1456V470Q1180 239 1046 110T683 -20T320 109T185 466V1456H239V472Q239 270 360 152T683 34T1005 152T1126 473V1456H1180ZM421 1740Q421 1763 437 1779T476 1796T515 1780T532 1740T516 1701T476 1685T437
-1701T421 1740ZM866 1740Q866 1763 882 1779T921 1796T960 1780T977 1740T961 1701T921 1685T882 1701T866 1740Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1223" d="M609 602L1119 1456H1185L636 553V0H582V553L33 1456H105L609 602ZM757 1844H823L628 1578H568L757 1844Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1219" d="M254 1456V1143H631Q837 1141 956 1030T1075 738Q1075 558 958 448T639 334H254V0H200V1456H254ZM254 1089V388H625Q806 388 913 486T1021 736Q1021 889 918 987T640 1089H254Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1183" d="M218 0H164V1143Q164 1334 248 1434T493 1535Q619 1535 711 1456T804 1257Q804 1157 745 1050T685 829Q685 770 727 717T871 589T1017 445T1062 297Q1062 207 1010 135T871 21T695 -21Q604 -21 513 6T383 68L408
-117Q452 82 533 57T687 32Q822 32 915 111T1008 306Q1008 371 967 428T822 561T675 698T631 831Q631 942 687 1055T744 1259Q744 1349 671 1415T503 1481Q222 1481 218 1153V0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33ZM620 1270H561L366 1536H432L620 1270Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33ZM726 1536H792L597 1270H537L726 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33ZM831 1274V1264H763L576 1460L391 1264H327V1278L557 1517H597L831 1274Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33ZM905 1486Q905 1404 855 1352T729 1300Q648 1300 576 1362T442 1425Q386 1425 354 1391T321 1300H266Q266 1380 316 1429T442 1479Q520
-1479 595 1417T729 1355Q783 1355 816 1391T850 1486H905Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33ZM301 1421Q301 1444 317 1460T356 1477T395 1461T412 1421T396 1382T356 1366T317 1382T301 1421ZM746 1421Q746 1444 762 1460T801
-1477T840 1461T857 1421T841 1382T801 1366T762 1382T746 1421Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1081" d="M871 0Q851 69 851 198Q787 94 676 37T425 -20Q275 -20 184 61T92 274Q92 423 226 512T584 604H851V762Q851 898 766 973T521 1048Q373 1048 274 972T175 784L121 786Q121 918 237 1010T521 1102Q696 1102 799 1015T905
-768V251Q905 73 933 9V0H871ZM425 33Q577 33 686 101T851 292V549H601Q369 549 246 457Q146 382 146 270Q146 171 225 102T425 33ZM579 1556Q651 1556 700 1505T750 1382T701 1261T579 1212Q510 1212 459 1259T408 1382T458 1506T579 1556ZM462 1382Q462 1330 495
-1298T579 1266T663 1298T696 1382Q696 1436 663 1469T579 1502T495 1469T462 1382Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1735" d="M1268 -20Q1121 -20 1021 47T868 230V218H869Q821 111 707 46T448 -20Q280 -20 187 62T93 284Q93 442 203 535T516 630H813V720Q813 876 741 962T521 1048Q363 1048 269 972T174 771L121 778Q121 923 232 1012T521
-1102Q662 1102 749 1028T860 814Q916 951 1019 1026T1253 1102Q1439 1102 1548 986T1657 656V577H870V500Q870 282 974 158T1268 34Q1472 34 1600 164L1630 122Q1551 43 1465 12T1268 -20ZM447 32Q528 32 606 60T741 136T813 225V575H512Q345 572 247 492T148 280Q148
-164 224 98T447 32ZM1253 1048Q1100 1048 996 935T873 632H1603V664Q1603 838 1510 943T1253 1048Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1039" d="M539 34Q686 34 781 112T886 328H940Q932 171 819 76T539 -20Q336 -20 217 127T97 526V562Q97 808 216 955T537 1102Q709 1102 821 999T940 725H886Q879 871 784 959T537 1048Q356 1048 254 918T151 555V520Q151
-293 254 164T539 34ZM575 -9L564 -85Q741 -101 741 -254Q741 -339 665 -391T456 -444L449 -395Q550 -395 618 -356T686 -254Q686 -198 648 -170T497 -130L522 -9H575Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1032" d="M561 -20Q430 -20 321 50T149 244T87 517V562Q87 712 147 837T312 1032T541 1102Q722 1102 837 973T952 634V577H141V518Q141 386 196 274T349 97T561 33Q670 33 746 69T882 182L920 155Q799 -20 561 -20ZM541 1048Q383
-1048 273 931T144 631H898V644Q898 754 852 848T724 995T541 1048ZM610 1269H551L356 1535H422L610 1269Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1032" d="M561 -20Q430 -20 321 50T149 244T87 517V562Q87 712 147 837T312 1032T541 1102Q722 1102 837 973T952 634V577H141V518Q141 386 196 274T349 97T561 33Q670 33 746 69T882 182L920 155Q799 -20 561 -20ZM541 1048Q383
-1048 273 931T144 631H898V644Q898 754 852 848T724 995T541 1048ZM716 1535H782L587 1269H527L716 1535Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1032" d="M561 -20Q430 -20 321 50T149 244T87 517V562Q87 712 147 837T312 1032T541 1102Q722 1102 837 973T952 634V577H141V518Q141 386 196 274T349 97T561 33Q670 33 746 69T882 182L920 155Q799 -20 561 -20ZM541 1048Q383
-1048 273 931T144 631H898V644Q898 754 852 848T724 995T541 1048ZM821 1273V1263H753L566 1459L381 1263H317V1277L547 1516H587L821 1273Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1032" d="M561 -20Q430 -20 321 50T149 244T87 517V562Q87 712 147 837T312 1032T541 1102Q722 1102 837 973T952 634V577H141V518Q141 386 196 274T349 97T561 33Q670 33 746 69T882 182L920 155Q799 -20 561 -20ZM541 1048Q383
-1048 273 931T144 631H898V644Q898 754 852 848T724 995T541 1048ZM291 1676Q291 1699 307 1715T346 1732T385 1716T402 1676T386 1637T346 1621T307 1637T291 1676ZM736 1676Q736 1699 752 1715T791 1732T830 1716T847 1676T831 1637T791 1621T752 1637T736 1676Z"
-/>
-<glyph unicode="&#xec;" horiz-adv-x="406" d="M235 0H181V1082H235V0ZM253 1247H194L-1 1513H65L253 1247Z" />
-<glyph unicode="&#xed;" horiz-adv-x="406" d="M235 0H181V1082H235V0ZM358 1769H424L229 1503H169L358 1769Z" />
-<glyph unicode="&#xee;" horiz-adv-x="406" d="M235 0H181V1082H235V0ZM464 1251V1241H396L209 1437L24 1241H-40V1255L190 1494H230L464 1251Z" />
-<glyph unicode="&#xef;" horiz-adv-x="406" d="M235 0H181V1082H235V0ZM-66 1398Q-66 1421 -50 1437T-11 1454T28 1438T45 1398T29 1359T-11 1343T-50 1359T-66 1398ZM379 1398Q379 1421 395 1437T434 1454T473 1438T490 1398T474 1359T434 1343T395 1359T379 1398Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1183" d="M802 1308Q923 1183 982 1014T1041 615V535Q1041 376 990 250T843 52T629 -20Q500 -20 396 43T232 218T173 465Q173 696 286 824T601 953Q714 953 815 909T977 780Q957 948 899 1069T752 1280L517 1149L489 1197L709
-1320Q571 1441 338 1527L358 1577Q610 1485 760 1348L962 1461L991 1413L802 1308ZM987 617L986 672Q940 777 837 836T601 895Q424 895 326 782T228 465Q228 350 279 250T423 94T633 38Q789 38 886 171T987 520V617Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1121" d="M226 830Q279 956 382 1029T610 1102Q784 1102 868 1004T954 706V0H900V708Q899 882 829 965T607 1049Q467 1049 365 950T226 693V0H172V1082H226V830ZM906 1484Q906 1402 856 1350T730 1298Q649 1298 577 1360T443
-1423Q387 1423 355 1389T322 1298H267Q267 1378 317 1427T443 1477Q521 1477 596 1415T730 1353Q784 1353 817 1389T851 1484H906Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1127" d="M90 562Q90 717 149 840T317 1033T563 1102Q699 1102 807 1035T975 845T1037 568V520Q1037 364 978 241T811 49T565 -20T320 48T151 238T90 514V562ZM144 520Q144 385 197 273T346 97T565 34Q750 34 866 173T983
-531V562Q983 695 929 808T780 984T563 1048Q378 1048 261 907T144 552V520ZM610 1268H551L356 1534H422L610 1268Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1127" d="M90 562Q90 717 149 840T317 1033T563 1102Q699 1102 807 1035T975 845T1037 568V520Q1037 364 978 241T811 49T565 -20T320 48T151 238T90 514V562ZM144 520Q144 385 197 273T346 97T565 34Q750 34 866 173T983
-531V562Q983 695 929 808T780 984T563 1048Q378 1048 261 907T144 552V520ZM716 1534H782L587 1268H527L716 1534Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1127" d="M90 562Q90 717 149 840T317 1033T563 1102Q699 1102 807 1035T975 845T1037 568V520Q1037 364 978 241T811 49T565 -20T320 48T151 238T90 514V562ZM144 520Q144 385 197 273T346 97T565 34Q750 34 866 173T983
-531V562Q983 695 929 808T780 984T563 1048Q378 1048 261 907T144 552V520ZM821 1272V1262H753L566 1458L381 1262H317V1276L547 1515H587L821 1272Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1127" d="M90 562Q90 717 149 840T317 1033T563 1102Q699 1102 807 1035T975 845T1037 568V520Q1037 364 978 241T811 49T565 -20T320 48T151 238T90 514V562ZM144 520Q144 385 197 273T346 97T565 34Q750 34 866 173T983
-531V562Q983 695 929 808T780 984T563 1048Q378 1048 261 907T144 552V520ZM895 1484Q895 1402 845 1350T719 1298Q638 1298 566 1360T432 1423Q376 1423 344 1389T311 1298H256Q256 1378 306 1427T432 1477Q510 1477 585 1415T719 1353Q773 1353 806 1389T840
-1484H895Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1127" d="M90 562Q90 717 149 840T317 1033T563 1102Q699 1102 807 1035T975 845T1037 568V520Q1037 364 978 241T811 49T565 -20T320 48T151 238T90 514V562ZM144 520Q144 385 197 273T346 97T565 34Q750 34 866 173T983
-531V562Q983 695 929 808T780 984T563 1048Q378 1048 261 907T144 552V520ZM291 1675Q291 1698 307 1714T346 1731T385 1715T402 1675T386 1636T346 1620T307 1636T291 1675ZM736 1675Q736 1698 752 1714T791 1731T830 1715T847 1675T831 1636T791 1620T752 1636T736
-1675Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1159" d="M1071 686H73V738H1071V686ZM529 1079Q529 1102 545 1118T584 1135T623 1119T640 1079T624 1040T584 1024T545 1040T529 1079ZM529 301Q529 324 545 340T584 357T623 341T640 301T624 262T584 246T545 262T529 301Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1121" d="M87 562Q87 717 146 840T314 1033T560 1102Q680 1102 784 1047L868 1219H931L832 1016Q927 946 980 829T1034 562V520Q1034 364 975 241T808 49T562 -20Q450 -20 352 28L268 -145H205L303 56Q200 125 144 247T87
-522V562ZM141 520Q141 388 190 280T327 107L759 995Q671 1048 560 1048Q375 1048 258 907T141 552V520ZM980 562Q980 684 935 790T806 963L376 77Q459 34 562 34Q747 34 863 173T980 531V562Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1121" d="M897 0V175Q849 85 757 33T524 -20Q347 -20 259 83T168 385V1082H222V383Q224 211 300 123T522 34Q677 34 774 107T897 321V1082H952V0H897ZM623 1270H564L369 1536H435L623 1270Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1121" d="M897 0V175Q849 85 757 33T524 -20Q347 -20 259 83T168 385V1082H222V383Q224 211 300 123T522 34Q677 34 774 107T897 321V1082H952V0H897ZM729 1536H795L600 1270H540L729 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1121" d="M897 0V175Q849 85 757 33T524 -20Q347 -20 259 83T168 385V1082H222V383Q224 211 300 123T522 34Q677 34 774 107T897 321V1082H952V0H897ZM834 1274V1264H766L579 1460L394 1264H330V1278L560 1517H600L834 1274Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1121" d="M897 0V175Q849 85 757 33T524 -20Q347 -20 259 83T168 385V1082H222V383Q224 211 300 123T522 34Q677 34 774 107T897 321V1082H952V0H897ZM304 1421Q304 1444 320 1460T359 1477T398 1461T415 1421T399 1382T359
-1366T320 1382T304 1421ZM749 1421Q749 1444 765 1460T804 1477T843 1461T860 1421T844 1382T804 1366T765 1382T749 1421Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="978" d="M503 84L510 104L884 1082H944L460 -188L436 -248Q358 -437 178 -437Q120 -437 98 -426L97 -375Q129 -384 170 -384Q255 -384 311 -335T408 -173L474 6L43 1082H102L503 84ZM668 1536H734L539 1270H479L668 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1121" d="M999 531Q999 278 890 129T593 -20Q470 -20 374 30T224 168V-416H170V1536H224V889Q280 992 375 1047T591 1102Q781 1102 890 957T999 548V531ZM944 552Q944 785 852 916T592 1048Q456 1048 361 978T224 775V269Q266
-157 361 96T594 34Q760 34 852 166T944 552Z" />
-<glyph unicode="&#xff;" horiz-adv-x="978" d="M503 84L510 104L884 1082H944L460 -188L436 -248Q358 -437 178 -437Q120 -437 98 -426L97 -375Q129 -384 170 -384Q255 -384 311 -335T408 -173L474 6L43 1082H102L503 84ZM243 1421Q243 1444 259 1460T298 1477T337
-1461T354 1421T338 1382T298 1366T259 1382T243 1421ZM688 1421Q688 1444 704 1460T743 1477T782 1461T799 1421T783 1382T743 1366T704 1382T688 1421Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1324" d="M1415 721H413V775H1415V721Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1561" d="M1446 721H110V775H1446V721Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="320" d="M207 1554L244 1522Q158 1414 155 1288V1168H101V1286Q105 1445 207 1554Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="320" d="M114 1151L77 1183Q158 1287 165 1398L166 1536H220V1419Q216 1260 114 1151Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="300" d="M84 -182L47 -150Q128 -46 135 65L136 228H190V86Q186 -73 84 -182Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="500" d="M458 1554L495 1522Q409 1414 406 1288V1168H352V1286Q356 1445 458 1554ZM387 1554L424 1522Q338 1414 335 1288V1168H281V1286Q285 1445 387 1554Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="502" d="M114 1151L77 1183Q158 1287 165 1398L166 1536H220V1419Q216 1260 114 1151ZM296 1151L259 1183Q340 1287 347 1398L348 1536H402V1419Q398 1260 296 1151Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="481" d="M84 -182L47 -150Q128 -46 135 65L136 228H190V86Q186 -73 84 -182ZM255 -182L218 -150Q299 -46 306 65L307 228H361V86Q357 -73 255 -182Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="635" d="M155 733Q155 804 200 848T321 893T442 849T489 730V703Q489 632 442 589T322 545Q250 545 203 587T155 701V733Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="604" d="M179 560L473 181H403L108 551V570L403 940H473L179 560Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="604" d="M176 940L470 560V541L176 171H106L399 550L106 940H176Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-100.ttf b/static/fonts/roboto-v18-latin-100.ttf
deleted file mode 100644
index 09cd7c01e3f80a96cd1b79a65f34d4cefdc686b9..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 36372
zcmcJ&2YeL88$Ud=yLXqKyGw--NDmMofh2b{X;P&Z>77udLkJxKX(3Xj_a;(>%hEf7
z(nN?T2#5#>2ol6zAh-8^XZH58hv@JBf8Wo0m)X7Dot^T`Gf$rhp@a}C4ibrJRKGz(
z!&HNVkjV+So7JdQ%eE)}x-$URxr79qY}EG6diLJteT2+uObETuvTbUW?62b&5R&s7
z^7rgBq}T9M;UC;0WK1(c#Aba)kBX^Og<c?JQdK-}+;4dQAw7O6xr31L%klov{=Kq?
z6CV<S@+0v)p#R`;{oe0;Jsi&}5HeIAkTqm%pug*HLPod4^S=i4?Uhy3=*nb5M%=-*
zZ2)fgEi?8+{ROyA7%*hi*kv8Ex)U-I<%#<T59`zGuTQ@Io{-^qOm7eAHFmgIT0nWj
z?%+nu&|X9OmV8jH652Nf&&LiQmOaWfgk%x&_FwGz@R5Cor`XOPC1fJ2|2tw}&&0BT
zkVuTgmjsYtGC~e8TP)UUjsUZR6tJU_AAR{Tuz)y7gN_a%H7Z{SuhofP5L^&rtxmEe
z5WFcH)RRd)`S4S|AN@@ZQ11ltlS44)2hrcsD#ylJVnqw37AnTlOd2beb=DL<wkba<
zhiSllK~xkfIGqN^^Y;xV=Okgw3yUz;*<I+KD|9CUS>$?71>S=IQd2et2C=pqS=(RH
zQh&76A1%!{8XSHp9b>OY{np7r3mh~xt#U}bC0)$0RS6F@#wC4Yv%L{hDK@rJ3|%Od
zc|J9Q{fr@~Z>iLqt}+t9&Y#4~Bp{I0=Yz_mRG9`y?24v3Oa%_f?C>i<v0}V6Gd)6#
z56Miw;#b9BKkrw?XfupZex?EM&F4pynhu1Wk6uKPGGwhB7!%9N2{b#(xO)+Rh6iZy
zHsivqUGR}Wm-tAO#FLV2B%%WZlrYf|of?@>XmMYq0!K6-Q5^jX9R8{KKDwv=W=9Zi
znjO{xhmYA2$}@)-IEdL1$?ud#hcH0#A+edUJf(}VA?adzSgaU}6i;zic&IFXqv{*z
zS&1IXm(<p@YBM^dS=DBW@>fq9t=w!{Re4MY^;8zol}bOlGD8Tk(e+ACmTb=7GH~yb
z5CHTg<6LRtW8-8}iOiN0Qq#~Mf(G+``k|kG8UzAy5vX0n<03x54UR-yBr<S_eu;Qp
zw(yg~&zv8s>$PakkJ4QxnjLWka=Ao5HUx?0{0ha-(D{s{q=clT%nX}7Gd(OkJS;vV
zDL&2^78)Kdl@`K6ji#{pOgv8y4NtFP6ZbTDUpcY7$+eyKgXe4?ZP|Fb?lNk9uV?Dz
zUG^^@*}gfx<|6IbWlYwvx8`JR`owtTh~M2)+b{3R>pikt_a;3@w_5j!-_avJcR$HL
zw-@*}()GkJ!|(|S1eTN|c2a}Pl?^ptW6d;}9U%qmSc)IZ^J8`3PSsRLbrobHU?FNy
zO2S1FLmH7GslzWd-%{L5+{};ET_!O!bd*VTB$@Lo>h6~@=VugO0@E{W=~cqR0EGCs
zq|68ofy_)5KJ-7H8Iozl$kn5AR<0P8v&KFqtLNx3y?Trnj;$J%vuaiLDBSAPJ0~Zr
zPmbbSQ8-&sT0V8>hcg;a-no62alo9sVT}jp<z*LrId#X5+(uJ(Y@cNql=tqiCL^ZL
z8hN{nG_ni`9LaVSN;?6$Xi^q4ZJAslBa=a`0-pmoYO~A;uoyKMh2SDYn^+OJh+vo$
zXAEJOl%k$UTnf7iNQq;oK=o#Dh>=}|saMv(FkI!AE{2pG8^(!-(VSno_%3jZ;}rv8
zsL4caz#&sad@=_n&@H5j%}z~5hH7GHgx#hBmVVH&`L^6i%Z{$5UuWBA9DjYy$KRcQ
zJYv2)?0hpNI%9P9<vL4uFPzY8#B4Ec@Xj~qZd;U-yLzJY!TM`Y_gr^;e11po6XTp^
zdvp}y%k`7H%yUS?*5<!EZcNwFbJ+~cm3otNoYqCi)M!FKIGGcSoXiP~Xqw_N5zYlw
z@wFQ|{QfIgAtj5I@<Ib+2Vx~=IUpp|{gxw`WzVo$?GZ*nFolI$tr4aqL0CNS^oWq&
zy9S6^a^H|qCk6>`T&EjpvqmX(l>%k>>5MbVTgpeTr!=9j(ao&%Qc8LH8A`XHbd!}0
z25|(Xg8Bl0p(r@nX0>K!2tu+w+-jwt4LUI@WPseOUw&4|h|>cF+g+uLa=J-MLt39M
z`1S%_Mr+hdX{78`z+@>YEi4i1fC>kZWH}(%%*$rnPQvI*94`t=I7n)w!xv}Y)JRmB
zXg7cWCPo-SOrn@fXDdsrbRey2qCG>E<$tICa=)VZ_e9$any2K<&z!BCj-~aKBQdC}
z33*RSmG*;+#JRZ$L6MB*`kM2N#dzTmIn51=wZvOMbuH;a3wl>6V^^xsOLpOSrs7Ng
z%%p#z#I7z%o{)9KL`uk#k1ub%4<G|p#LFcBQAD!MZch(0PEBkL6q8&r1BPvRZyoFV
zYr<q9MA(PfQbHz@fxj)L>X`?6iv|cG7=UZSWE<Y$yqCNMnI~QreHp=2d9DfYGGVsl
zgE4DtHm$N<W3G!-&RW^cR4FO%nkIb0d3Z@#aMw*#vZV<cXnH(N?^{FYS!0s1A~@zG
zSD|>{O${5%ex;&OJ1D!u0;<Qx%!@^E;>YGPNdLc6I&{!1#K#F1i`kl9#cE0Rx)Sf-
zzx3Io2bV5Cu$?_{@RJMs_MZ{jC|@flfJ#Z!hsMzc$`R$JM15&l<tyb^<%RN>a*dX!
zfq>Kzhz^Skdm&}jm8r?c11SR_WzZ;2u^eS!aukLwUo1uhSrFN%KwgTs7%~&ng+(@{
zJN?YxFnCRk?Q8^dn9ytZn3N<PWZ$S#o;s|k!}@X^`6Y@=b_fNsWaU*_&H28?59B~%
zMKN*&f5;@YOlose9wS(vjT3xEtzsoow1WOTe$3%*{kHb74L&*M)b$fxl*VF=O?Yko
z?QZMydw)1E=iJCkhqgZ*=5(R8{V{&e(Ax53q-;v5;Aw3zS{tmjHVPL}jO^0jDCC$3
z(JImrY|c07+URGZc;ukw{BpXxVdePUD06<i?ruzcIpoDSr)%9P?uF3=cFuX1#=b#f
zljG@z@jJdaw)OolZNtxuJ$8H1r1=|u{CN7Ek+#CUd(MA#d88<aj@(uIPp%$yu;11F
zqxL7o?q6{D*2tq1)_-wm(}wNPL<G_XBhwK0?FY)zK@Q@S#Svr%8BuZ77v1#L`pk(9
z@3XI4n#>o9yTGJz%J`P-Blx2)av;yex)c`ANd!%&u@;l~Mp2Q?SxY!j*V$DV+K!&K
zDcN*xX~|F&BJRus{P%+=611r_87}*ji9u0nTPWH>wYCJ|B8bf!Kv$27K9q~uKB=<7
zhyMyP=ZEPU>Ek6*$<{D7dUEL~#tOj&LYT1VMjpoBlGDSPxTLZ))A#j-GtNOZGIq52
z_=hjg9C;XQH=o?LclW0|-dbHtcrNVEbRJBx{dMu_pVyA<kZ*jk|7O*ifbkUI)9=8i
zFcL@l%Hi<|sLBy;25zhU;*;wi{UYXkTHJ2gM0jsZsj_5Zzw*P2A7a4rql+&A@vs=e
zdtn9Iux=zJXPQY!9ArQy`+y52iH(&@%C5lbx2BzZFyMI3%<JO?I<(82$EANbyz0U^
z1C*Sl%Ax+_l;>Z)`*7OChl}>m>2#;_^oDU$E-6$zdg=k2*UcfqJi|yCN%eoH9emi>
zNEy6Ginxger4Y_DW5s9A$#!9U(Q0v{VczqRhVeEgA7ud-B)~3$#FJDqN)Ah_%%B%$
zc0?7hW3n5DVL*p44Tc<P8J<=QW4vafqat(-oggiXQ5A7t4z9=spK-O=V(6jN{N&<G
z0289KHvgD(t;s^7CSNmgTL1gzva$2GJFi@Ov3dU3Mc*Gg{v`0>-hKDKJ$mp?xoc}S
ze0K5ujhCfb;}0Yxottv#+O<Pd&n6`t7{B+*wW8dmr#@P?^6(L{-@Ie{m(0uG!)7R>
zMt3;`lE?tLOmbP)<T7lYso296N3G|apt7EeRyGA4Vya9;{tM*uCCx%FNc)@f%Xsx!
z#Ts-MbkrIWW+sMsdwK#%gs2A*26_coEW{m|-_99(a`4bIWA7GH<)HFWnvg;hXqwV<
z@%^%&pB}WUSN9KuFSF-Py*F$Avs|#G!Y#^tWs+nQY4=&X7SwW5|F>_98}sQ%;&PF(
zuIHpsN+C(a3hXiwtLq2x6z;c%^zan-lX2&Xcna8N{+(f88)_7nNfkNgB5uyb7?a@P
z?C88I4;JX>64QST1$s#a6Q71b!4F#{6crs28we|vEj8$bDs+5xjKCtgSG+1t1vZ*U
zWtnjK1+oiqm{J{L0br~bMI0t`zT^c;CK@sPzFKr#tjChr)TX2ZyD1q-eZ~D!8hTJ)
z)_Q>ABz+Ggkq;yz7yqjhly!k-iUXW}V*R3{!fM*7hBC8?GNT51(arT-jOBO~Lwd^L
zu}m*uR4B@gM_$~m45m{V;8A|bVljycfFxBGgE>0}tJAY%*k@3l9Li6aGqof)$&9zz
zVi@x>8N)m#4EnB6cW>j^m9rLX7Hq;LTK#b6cc!;+8#NXTpTD)=(B=z2*g0$CnKN6n
z_l)j;TG>!+<ru5fFggv>NG7RArpVP_uh05X-Rwv}KT=X1>8fz1u_`WbdFVl~Z#v5z
zoGP1qS$o;kuU0%*j_?9Ux;ej;?oNt1KS6hiUe_+ZL_duJ=MwB-w?Q<Eh!Bm8!rHAQ
zHck>uMymw!0L2115`++|H6cBQP|j2AAxR*}M&l2Ltd0G%Ci)NkHg|?K@|PXiZ8IwS
z_v$@!vwyg<SebiAdGAVKz*gGsVP{93$U2{Pd9Ezq6A*Bl&iI?=(%CO2`S))#X=8dy
z1LdQ#af1I!MVU5!@Wa0^zn~TCRd61dFpCNg=_>mE9c6ftOBr!HC9zWZ)Vp*GjiQls
z>jNdz*<;kyRjcTWHs>76fhVz$2sVSJn;;Xkll}Yy7@Q!zGKBZmI5cA$qwVYo*HIbq
z@s*f~2Reg(V#t2{E?~y2G3kuxQ}L|RzOjZ7TTh6sQM6Uqpg8Crr8(?rt>|NMCZqr7
z(3-wzO%OOh88THaq1vBHu<78yQIn~?WCM@18c8{>MyAR=B55~yK0Bo1uy=RliAbSa
zesJ+v%09u7tkGb*=Hk0dy3pyzX_eD0u}llrI0D5b6AqFS+1Z>JdyY<i^7G8`c?W;~
zO6f&6ANu0r4y7UOcJ_kOU)f=BoY+5oSETjRX@|cOE<5`l*qFCRw5`}cZ3adS7J%1%
zfEikvw30=g+~Z|o)AR+|9KZ=ffH^-z*IsXnkz872!^iMc0)`67nHg3PbSWY}DJedV
zSfJ_xS#5UdgD~Z{hpV1Vr|<l{`aTT`vqk(+@TKx%)QvfxKMAA9@BX}o#vZ<Vm?p0O
z>CXAjm6OV^*LEs@F1~b$aVR!Mdof1-7^B8=L}UpD$B1GM^~$kfkPXl^9B>aTzElA%
zStG(i1qo6#plfA}Cn@<HU9^o_R|_kYAGaxMX}1+G=FxZmUS@EtSH9hIY`=2reQFs0
z{OA(uzv;*(>bFc_kYz2b#alQOmQZHmP;uGIs-lq$*<Upx_ycSF8P>2vDh_*h`=9U!
z)_7Sh&E6ugS#PyuxNd<!sV4EdGfAvdlqZfZIw{-~t~j%728Yc#&)vQjXrC`>B2z!c
zum5ANy?T0qsd;lWR1LM9RW3eqhTFuMMGoNy;i5BxRhq}3vK9Dt0r(b2ddLA>DphO!
z7kuNW1grah;ai-FlyRxv;zZ(qqaS0B(gnLx_`ybHzL58P^$ltXw?!46zNP#!`THgB
zJx^6$r@yXlmbI3~?0>$8mRfcD<gUZY85eo9L-}n{``74JyBmtv_$ask_fhszzBNKo
zOxQU2BFtVek(p8SgUi)h22{`hOS*K;R@B{Q6F1s0l9db&XGdWx+VB$qn}jxqB*9~=
zV6;&)7Vw(1YI%w2G|2`;z`LCx>21WXV3H;qxTixM4=??ItL2O{>n0EIEZw5oHdX7c
zT^wwCc>LmZ+kpe?KNSs*BEK(Q-27BNcI}`x8!n)p0MbnM<6enZV4Dvl03S`P^s?k@
zo(lAjk$Ksu(RCAtjUBWd#QponHrr1^*A~t(!jXo8@|E)jnz8?h(8HNs^o_d};tyzr
z0lg(|3*Nu-7yX=rxrU*2x=VOcbldKR9cH*Ol=rEpOm%(of}PhOXw#jKh-Mbz7aT<x
zB2dDlN7<;JeEBJ@vagVij-rd~7$$TOI<>Sp-%oLF!6-goXXy33m7(YJ^@dK*x1c>L
z?YWCzzJRu%o7-OY6)$LO=)oJ~q4xr}yvQbgVwl6~Pp81dySAcscDuOKW@z_(C)%*v
z&>B>E24?qV%x*LIW@A}W`6eXaP&Xg<n&lo~V0!D-1P~RSGz2^gW%3TOsC*>c8kTG(
z#f*elq|39OZ~8+inDt`grWd(3<+uBHmEXqQS$d!P34@L)->jqEX}K#$X~Md7%GXB(
z*rsYLr<G?{cPYOwptWd-o0~9>?+0&XOIZqKiaCgzBf#BmFK>aSTgv_-H>$vEq^Hi{
zhE_dO2?5C5{F^guXl=2Ijh_AX&!2BA1L(p}zW(|XWth<4xx(PMd+yA2!FGJR;}gc?
zW+;DiXof-$Z7lmFFsBW3L`Aw=<>mO|qX`6Zn7!Q<usy`+n*(T?sEPg$h^|{q{gajZ
zoqPNnTrVmY-%wrvA4>mk=$-~A+y&?|d1`=cP<b`HGvWVJy5qhqHY?1kbZ7Pgwd_xr
zQF<cWV3CX!>8ul+3o^J%Om3oK5d2hwO04jUVzSYKuc>%wKAlmmXgd9L>*WV$m4U)A
z=R$+y-l-+uMmZM-37apj+Ws-489jm1{ejcv$S~Qjd<rU5DVG;f*K`-iP~1@lN0L+^
z2l<s@Lk26W4kKRnCq)#<3F=GmAbA@BH1AphydXN?niRpLL5v{xtT9<%O6zb$nR%=u
z4ftx#x8rR;ojCdQ61_Qe&cyrk))q~+;r5BYXt!=t`wSR3Cu`j&Lq3_f>FSQD)7DRD
z-T%X(+q%AWYWkityU|xWMhZZH99~VPZkxGB%KisohQ~&a_^_-SxN)8#Jecc3=Z`k$
zk5XrdMl-o(g_1*n<!Y24OkR`y|Bc&lx~NsA5s7?%FC?~vk{FT<t{55~W6QKitCimr
z%zSG5mA>~2h<?)dij#`piMNZ&UMMX5RQ!sKWITGuv<x3oRi--oyw~jZs$FAzGIiUH
z5+fL^fhr+1ijJm_YdG)JbKa>juVY6;97wQ()$$t52oyi9(0Da}&p)`aS1n%iSkoIh
zA=V6zG7*?j384i16u?hul@nQG+$~Brv1U>FxE}3TleVv0pH`@$jD1a6mR?y|{F*YR
zCau)@C#m0yl|SM5yp?o(<;oZJ42~BoS({-PkQSiL{-m?V`@-7nB}IE7yf!XgoJ=NE
zWnStDQ53AvzDA}HVMeM<8qEaw`p|3j71(TFSHhLhx`MyrQ(v?Q>zsCH3E`OYb>VyA
zJle(d!VT^bBf1guYL^!*wRX9iqSnfoX1dUeD)pRS+nirF7CMXVi^e&>63U6QPz#)0
z(m>SWOPb3D9k=u<SQAI|C@)KdE1fXE7>dzT_BAlypeiyTfFm<DY^!+c#c$$<qFLg{
zHd_Tl%giJO^?k}YT40=l*_Ps&ZSYN*yoeklY&u&rIs^{PBy3vn;DPdhMj7AuYp>08
z5am^a-{=eULnI|->h>E6s%b(KNnmsW`c|th^sH`h{QU)5;ra`$2;r@$1oJh+F9OLC
zL+?ODimqEsdD1!J(khE+L?*-%9~z}RxPRX`<*&vzQ!})qi*Q4DfOZ(sFU`Wlut}R|
zFxzr9lEP3(`7cg4IR3^X@ZpadG$n(kyk_X<%oe_KmSe4Sxh{yX{GxA&GSPfuTA55V
z)ls6f$_8fpYF;FZEo|K8wM6=ZE`sM)1l3?YBW}kfTnF5kwm(=bBc_UCHwIoYoi3_z
zx*lHfV_di^B;?If3uwsY$x_+OeKTOPju<!h;=XXJ+Z^E~MtP`*V2EH7A%LG80jYaa
z18N5d-S!R(n2ZzD)_k)LeL@g%WUW@mHz1@`NQID^AyPL7tk^nJDbt5^ZXC#ENtv7-
zWM(ATV^teiSTYYWh_Hl4gfRoEB|Z+;FgVNmht|10XXybN_$~F{v2O7h+oP?!FNviT
zY5CXo=Z_|2t!*%Mz{pM0mh2JM<}O`6T$p}v_d4ebxsGpa?gUD^HXYsvdYnME11jGG
zq87lVpB%(32h4{P2B<K<Erx~@FAXq!E-~@Mg9wbR8-v(Pk^T9Jc@*?s69`f-%Yk5d
z$?)r>TeykXlFY5bCJQrdS;g;f9vy!YvU#;56OP}kdgz1PV<{=e^0w?3LY&IAzMXd%
zi8E)=P~{s)RgbA@PM%`Uo`fN$q!;?K6C)gj`5(kRrz(ekWe4<#CX3uHB3ob8evoIt
zJ)I4VfVdCX>B3bLh=7<7s}Qy5gs;u#-j+|FJv+bij>%>^v25RGm*ZCFtvNxHiW2^y
zNtbrKm#@5d6#t##WDp;ZRvzFGk0yO&u{0MgAZIXJDvZJ&xM~o8H6t;KoP+rD)63x2
zxhp^@nAbNv0>F;v*d<sZLU9MEB*exE<8K}xf26w2W<NRp=*_D8x6C|VshjfjgF`}D
zD$@9&Lxj1{$%kG0!rv>I9xA_&$)+!;MR|^XbU;520@{(F?t^9DxOiXyY@&`5?)k*q
zt#v}1Pja*`x2i>B?nKv)hCxJUxMB7)ojpnpSM$Qos`KiCC@^`+?Og~9i)BGds+p9+
zB+8~ul2Cct*AvHHnYiy^(bZw6M-Ew0BWawXti2T?{L*bx=-fY+R$Tggj-p(tR%80z
zDNUM1?UpJ$*&jIc*jtR6*TW#KFowb7Hb4#r+%!3n3+9n}%-1?+fx2taF0`IHEM7i1
z2TYC-;q|>0cyv=JL@hQn>6vUUAa;bsU7=U87Uk$sx@5*1HlK{w2Th=*m3xwCU%PaR
zB_sIVDJ$(SoEU>~N;CKXS|9?b9GNKxaH$ql#pBuHlv-;UpSs!w*Wi5Iz464?8O4%p
z6us><vbiJ=4vJ78mh|>`VRm~7yKZy?L*YgR#H;Ypc?If?yLo)v(Q5Wv$A;{ylT>?Y
z-z|s5swc)By=g!A!R(V|J1UR2xUq29pffLST>H6u$AngIetPJGu6;N*K2rXioK2t5
z62L}Ec7iD!#;gh<Z^!{$?;{TDD`t}y{o(=}qhCa1^ovRKUY3y%?#zvV*uhMmurq*U
z-OIc*Y1cMtqjQ$e`78lOoLX<c_sLnfq(9!Z<?I?~Q?x-KYk)`r&^1KZNown&H>rDW
zc#Vq(V?YGd;6+^+Cy)b`db}UcY_>M4uS2R%+qfMYf@_4*lv+_=API+tNg}v4S~G9+
z^0jg2auvp1?|{L)1HE^IrRJN9JvJa5d;~Fom|d9`PZNGxI;(PJF)elYm<X*UFB&Xe
z8=7IAF-|(-X_R|R4gns4q#jrU^O+EbK^+q>;=rMy@f41jd`x_qNC9UHJAt2@yi7z>
zg*7(YWLnr<2^P!^g(ku*rH+xjcrliqRnnb{Q2QZB8P8Drze!Q3Lj^8iifnje1MENx
zFq;y{SUDsyiMN-LW3Tz`B_?paRs*eP9N9aX9f;F&E#8CC1f3)%2SqSqD2MVB1QBML
z;izU(agDRb@CXkUW+dT((Im<?I(MZ!;`MO5-F|Um?uSun*JtkDL2dI_e3D(yD15bP
z-J0$ro$aLRE;4<=*xa0V&zu2*9+!6r;>u2Kwb_E6hQLds&6a;K9v&&Eb?*Q7c_T4z
zDXf@MAlhYyeAhshR6ir^H_`5S!?9Oul4ewR+34gI&4B1lkk#;TI0KBv7{oHzIlHj3
z2u{ptA*}P58?$q-kE5e+C_mm9OKpQrOgQv-@QHDUeh{jx`ZI6lA1l*V|B;vb`wHW%
zyKmF*uglE1H(7ajjmu6-Pw{)SmdQ@TUy_{|G`-{wju2YYIW#rutD!%nD30;|{Pce)
zMKO{T#=3~Ou9u~#2`6nfTh-&^j^DH&+LC*`eEAczKRC#xsH~38gNB<Q_4i0obEhlD
z;S;D2#$Y^pb->-LA#Pt1C?jHURcXqLc6sp>KB=`{c~oAb$U;tFWaE)1|0Ng}vyONR
z7q>i;3Lh$nD&vk<wb`nl7^{gYsmG^zM3w#@Jx>xEcj=`URc7UZIjHz9%txPsNF&)#
z7XitMjn|-P7n;n^c%eR&#y3EXR-?&oe!zhrA<S-=cQ_h4p<_mBv=n08v%y(Is(yFG
zbbr)77?RQ?)SgJj$v#QR9=gIM3a!FY5F$!3x+j!kaddKk4-0jJ_7G4iph7^+0B8@8
zA9PMfrq=18DaY{l_DV6KG0;Uyy`);uj6_IHYPhm4xZ4w(qJ}DojTFa)wdXhN{?dMM
z@w^Xe&7lFS8(!JI|67~Sp|uP5QQuD*rOX;VX62T7L*AR%tx4P0YqiU6J7x9ecScU0
z#o(OeDimrOx<hvAB?swbC$8sfJ@uk1+9ZZns>TQ~^;D-PI|9ADVhj;21qkE^LjdB(
z!)}yb1s-yyP%t6NLKFY^qiM$qwS8k-jqXR!oilV-ZrPnAd#G=Ez_hud$xai{PI#{%
zyH*GNYwflYtGMkoB3@+Qi@1A?6V$>8xL&FQ30HMEX4FzeAN&xfrX8G{pO1ir<?pRJ
zRnoq@^IMnC2#1^vcILk~SNQwI8MG+{tZEzDWQ0{quWft5j-#apNDtv429-x9sx~e9
z1D#P_>5{2*t=?X||Kbb^Mfq*9xWj>;X4tdfCG=n+H;8COa;K(t!J|5~3y)ozQ8sPV
z5WvWhRZ>s>{Dh&2Ktt@zLP6c;tf4jNYj#@WwOh57Pi)HX>2~FBn{uWWt@c>_p(y;Z
zNMD>0E1o)4^o811*e}JE`1wjZmewLKimD9>=eHWOl8K*c$5K!KVaKA6X{Y+ibh_Ym
zWufxk>vVxKy}r<y-f{lyyh@7{Nk|cb*%&EJMFvAFX(|(U3^;>_7Yx1dMx*pHu`m%+
zFJH=L6I+qwHvgG`!^z1^*0M8e;GZTsx~5Vpvc=x&;WVb)o5Rc1Q(D((7b;$P;aBsR
zf4Xm<;d`VEHm)52tBq*WE3IA{to}b)z1E9D(LUiUyp%tK!iitm(^$Ptlt#i*<7?3W
zD$4#PnBIUnlnT^9xFKH%0Q;BD&LoF$KOK;RX>aEE%qkXWJoX655@t4q<6scpS-<Z2
zbGmL_u=41OFR-SjQI&g#ex@bs(a1j!-K$cui{iMi{8Twp`R##nq$gUiPx*yBdC5-p
zkN9e~{^^O$ru<?&&RR{->Spd%2fAAwnF`N?Y>DKtZkANNkzY1g)iJUpSTfD_Bpec<
z(L{uq)5GEr0s)^ysV}}z9tW*oBRqe;W}}kRi`IEe12PeF{T*%7xnh;O`~FrQ)Kk8D
zdiZWS>R(TfNVi2JJSYv_9u&etih_d?Cm=@hxFRu?#RBUWFsX_Gv=hC1E!gacU}TV~
zS(R8+9gF!*uTolI;<|Ku(fCH=PiMWBHNrlBQscKzWmW4tT=*$(N7Y@a?@XD$t;UCy
zW{qbu%sgcUaY`-!p{Z!=%)BNU$D$x8jqrq+id6-ba5IynB|d~LGh-3)dpt|cgo7{c
z8YX+9;%B=2#m@~%uo?_;TMf9ThLC<Xle{KRD0pJ1hQivU=Gipy+S`ib$5v&?k)hmm
z16kY44&t`r@Rdy5kfSbj(%W+Ca9hrmRrV8i?wqi1`c!AlS$fRp-aS7W_j|%mG}iCN
z4gU+9bXFZodcgLa2n{R-y^7*;tIAP0v(ua)o*<_nzKCWbB*aKP^I(94Ge#E%?hp&)
zh!7sV8)D8cS!`WoHafm+EhO9&8v*;R&6X^J0YXiKxT~$-LPRnh;3qW_ey2sX#-^nU
zeqVg<duHp0=WRQdEZXc#M+&QyeWyCwY(X0a(WW+9>*C{rJ?nOzJD{9`y;Z>4tOtfH
z>1Ws%Dj>q&Qn3=?3nd0C$#k+H)7-$5EeL2d=f~-qh!H4Xd<i;d1a2golI;*g?8){B
z*3t-jgb7|SQ-q1C@kDHuOHzzckY=_1@|UZv9cA|{Sb41M(H)OQf7a?mxsR65-Cyp-
z!bQ&)%zwUU;S1$X(ZbbjyLD}|H+jF~=^ye($tO2<Xnwlv$MUZ~>^@vpn6Og$ZN&;2
zuyO_UUA0R2lTm<J(91`l8YQqMG_oWM;#K>?IlMMf8h*il&ymRpD|!LQygodW4V8YD
z2C%_%V5K1x7Be#Q^@dQbLotMYZr2Hd*qLny)*bF!%Y=O!#6BY3E^e=-w4%e5u{2j1
zYg5M4nMgyF*0pGE310+K7X4=b$&Qty4RI0!oK@1Xv{E2DK>_b^3TR^MZHl8y-DFUU
zQIZW*Oko;*x`inWJE0dSzX(4$&Eh%X50sOwSP;qoG07nHVMmH+(2$KYqOdYC&TcDk
zJmz9NzyqsXJbN0RnqRAUaAmB)!(D{!^M^3m=`G=D>fN-|e7o+IXggc{C@04=OQs|K
zC1lY>PA6nSX=79kDqC^_U#0j8SvI1ykeHOL#uh_mW|^gi@6VYx`q#_%6sPUc*#loT
zd4HMm^H(dUPaXdI<*%OEZtg#Lt?}k{1^YTFJ~b-Of4{}C7i*5UIZSuIH80e*X!!cW
zcP|Nh&#s%+aZsDGb@t2~GA}fJ@!&Pb?_Sz+Wo2%c!R;z$bf5Mt&|;W2sN3KU4TPzE
z-yGhVjmj=Vd*LS5@c2M8j3N#*UpEVGs9QD!Ll1^STRD`d{n+J>V?Cyx4Rckh8KFh6
zie!T8iP40SD#6!Ez9*NiT8%-kG<SgDSkXN*D`L1RYS^5Ki%h0lh?y*Qoke#0Rm^0+
z{8IN4KeM0E4L)urL*~D<j3`1kUL{066*9e|8XXnQ`ANl@-28~!XWev&nKRk&SrS88
zJZl1*;0f_8zBR*|5F=rgfgr^s2vXLXxeFZfy!op$ru_Kc!m)o8P0OdLyBsua*DmGq
z?hloM{HjN2Q#yq<J+fcfr;Jwi?H2|t-}sfI>4(=gFP=8_;Ho#49H8Qeqsp;^M`_)|
zM`-QC`;`;NF3`?r&nh2WIIC>Ee3^E{_-qmO2=@TPXhe%Il+9{XJUl_A-LT^(9){|M
zWM=;5HY*;!{IdUNKXd%d4-o&&^%J7Gewu}J4H+CVF=S4NFLwgz!a|vXsUw<9J^~U$
zpJB>cI<VNo*~7!&1mZ#T@i73}R;!det<ktCTb6I{lQm?DZR6BYc_o#T4VQ#&QGOFX
zvel{Ccw~<u6B-Q2>DZ;;v<1_ZkGpm#*S*G`U29pq{6g}c7%k2Q1Xd+}1JC6uTHo~z
zsN;A#M_eTQjL51a&)P@>{Ch^G_A>bnE-c-;9W<8{GI5d387-Eeb7)#7mTP5WO|J_O
z4g`!Vlj>Oe9ap0!D<F==Q?MhJV&hoN4RNl?XxOU7i0S1p##(gTPcGxnuobI!<yduz
zLM#wD)*K5&u2P1tGOv=V55AR?N>|}8m>m@g9I@v7>Ux~T`b`}s+F!y`10$J$IO9_h
zVeuH4q~v6k93{tRzl@XiT{JCU!&--Oc^AEHe@0_hOt;hsYTo_sXFYTJ=bRC4yo8l!
z4=X2N?pLw)u=3H5%6hTZPYY@#ZyQ$GoG_<r8=-37Hoe;k7@_Hg{=yN%YDjD)blzdT
zAcR2yUlEQt&kJ@#|4d-~YVmtvIL3oT*;dxEZU*w;0tld9=3u~DXIS8Lip^zi&-YMb
zpylek-aT`3d-l$=_iNcKt8dd5{iQE^&7a?^_q%z0nh)sPs!jiasJpStCEk*LMcu)q
zg*!G8Sma=PF1UG%rcN^V5kw$x51r!RfM*v*fS}?5lMO*EAc1vLW26XXV_mLBH!0n0
zN&|YtMyD4Y6JHk-ZEQuUjb3^Yz&*(Ah2_G#hJ(;ry2!qo)&jZHD|Um60)8-(N9Yz)
z2&%DGGIIwOqO*K;4+D4vlN`n$a`<~z6slr5z!xmU3hz4a(zupy^zPMfq;1)lQ8Px=
zdqHmr%PY|2=A+V^cNy?z|5>AZcc0J@8(UD)N|-B5LR*u_blJqIlsa_Ww5H7#?z=%-
zWm1xfi4*xkUU*<ly4Lv-rhD$M;n&o!iyx>J{A`K3$DxV5OK|MO=<b$IjA1Wjl&)X8
zU1{!7_gY=3Vnp%cCIpW%4jms)gPQgoJ*Y>Qahc0Tj+x!6Y5R_g$4}g3d*{*!XHBUd
z?bM)or*6%9jvv*pTAzr}tj1a6C--g9uWRcqtjBM|SwD%}?BU;M!3%5;i~Yg03{9nI
zx4^hu39v7=L^&NR0czAcUDHUEKiIoFV7EL3JvbEW<buM&(RQ6&rzsI$1|GiPNwZgK
z5+7GDG~=aS+=E4q@juzZPfVEdn0K(8J(e4wEZ>SNmOAzX+tS6J%AX_GmCul>I|m&*
zv+u01`o)<~zs>66+-JDSTH6OwDC7amiWFJYMU`_Ksy4Qo(Fwt%Oh$rj3GRO;`Xr>M
zTZD^~m);&t{qE-rKBKO_d)4*470TTsyi4PR=a4;0c-AgMY}ILNI=N$yDrN|$H2H#(
z)=G1V6}PaIcJ*2-&Lv3=R>ke&Awd|UI)OE5Guo97rW3&fjNP~zQ;bZ^s25m#3BL;?
zrpEYWF4QI4FZ<^&pJD2o+kAM5X66-dzE!zpt*TW6#-Tscgyl5fup3sf|Fy!H%>n5@
zR~Um;nXtl`=G*?FiM}8NS6XNG0)<*E$O2nq8Gtp$_1tTW87VS@LV2t^7!y3w)~4vB
zTV{vViAfy1Shb{*%a`_xSiFT=w{FRuz0Edb%&3{Ovq$DiIZF>6Ts?f*f&FU?)0V85
zHe$+(<+H$_r;r_Dkhl|be|0!p&$gOYB`V)0hOU4|GWmc63CnR_LqmxVHIZ!swkaTH
zwaMI0h$g31Mp;nw4a506Ysh0@2Hti33AmcbW&w-kw0AVr<L^wwJC8tnSo!<;JKIE9
z<?zl{QUUe4>xqSA8O!Sd90x1Y#5AcnDFsV+AGsvAbUR8GN7!%`LYs+v@-bTi1pgSF
zEdg77l)^eyE3<w(u<%e9FDM7`yK-bHX1xRn2og+K1I49FcZ3F44q#TYd+ZQ`AcUk<
zZPBvf+PQh_B%5$z<L09SmZVn{sC&_vaG+n4dg;wtzTbDr#?AA#d~|;ExKDG-wyDv8
z_Ha)NfmDHKkm-!Uu>38Rjok9bls&5(Lo_{$ql-2>_=RSdlr8F1fq6+MKCx+{Qz5Z>
zgi~Tzqu82};w2<{vmvA2I%dcMiJ3V(7JJpe-U^P$mLZ44Vx^Svk<)B-&UKNx;t0{l
z*|?<8%(=gmaP0XGp>;CdrgUJdIhNa;o#|F_Ip$h#aB7EG2Q;aH?5Cqinm~qy-Hc-!
z5FZK!!k0;em~lJ~g>nn4g9l;BCW#SB#LZEPzX*yjW!jrgQC20>EZR3&Sw*KND^rvy
z33N6coUAP72W3nmou!NeSw!^tKIyvQE66G_&~gUIk{Z{*{eVolPI5!ti)VWPUDC{L
zzVZA7>|%?3!L4;(L57nFOih1Tb7Ar6$=Lb>W<I{wDZ&mq6=E<)P)Om#l9-W9p~$!+
z)la`Wu--en5Ul?FvSIb+yhC3+T_PNuehV?{;x~hw%_i>i#H|nC@|lCaUce&P*EnwN
zRQ|f9++Qa(S;C^%O;4A-INqO!uVV(WwMOZ{vjBKdI=Q1yU<`D;a<#X{vA`X;Vumoh
zVD%T|IUQDU;#({|G0qjs{XQmUg}{YMgcUmO(vMHhE0b+Dn!WF<%ZT(=&I-5p?Y$)_
zGJY>~zW(v@6(38Cd%f>^A|)AI@L6=1%T{1IrN^`Hh5g)s#}rS$P>wBu24<nt+vVg~
z^+^JM;(&Ic+wOq-=T(DND5g2ziHNC2?x2#)j7kEuB&H+9h&OH9*1vsd%$pZF57^bI
z%Ymd46*e}Rb-3;24kO;{p?oh%V@{l3Hzw=a$QlEe<+kd)u&q6=a(tDwqw0=aKB3XD
zdtEwDSFpZC#7fsf<2d;0DnV<hM;^+ex<(Wh*z^MCe5&QfJuY@>v@8ZxFh;xZ0)XZ<
zk;ND`v*lnP9$*uU@TcI~!SK^T=<*7A3TB};bpivzONCbmuNmGfylc3zn;fmaU7MdA
zwefcC+O-iprC(kOvY-Q<oTBE1&oH%k?3rO%x4Drc#O$a6+JT6w<S-uL#_8uvp@-ao
zt_E6hUz-s+D5A$=Ipx)2uB6`<ozI|Y4;E}a^34TWZo%TU$1=aopSwGv>g9J1-z<9i
z`LT;rO1J#5s9WpR*+I$|TRvGK9$ZlnBHTO@Ix9P1(6smGtUWArUcGbqB-6q@i|5Q<
z_V{Yc<~RR(r+mxW8P&R%r`^T%(??Ag|N8D&%&se#DIX$Iz+x<i^(mEDoEG0li_H|a
zl9%yp9&({YYk5W?IEuNen8Dr3T~!Wjq*1b1E@9x&gA~9^DFz-G4i>F|uQL<`pm<mv
zEK<y%35<j#Q%vS@LTW^s)h@=38{Pl-n5mzSzIS27r!_-Ib$U|jR^H>#qNNw2C0gmy
zjQo%L9~`~<lw>G1N%`<Wt98!#Z{L~qJ*A!6ZT+S5w6qE1+E?j1dqi5%efwLZzxy=%
z+;Hmu6>zi(`2&0G48t!*CpySR?rCNG2+9+V!GOU_3(JAI{%mFY^{89kyTrjh8SHt0
zMNq~2+AxI*`&+3S$62%=Qfg62@uBmcDml94$6XopO_f(V1Km7RM10^d$xk{BOI19n
z$f$UwR0ey{?-*_(E$<#FPPnzn!_EJUU_?vI?;<DjlOvfKXBffOErD@hueY)=JHKQ%
zR0BRZ<>o?|M$-A#U7U~$VTsV-86~%7c0lyU*a7Wo_vtZc^o`lWd$+6IyZ;DVpAOW~
zaoC|B#714(Ds9^KKlGT#g4lO{+VF>^<q-~&_Tl*kzb_Z2->4&w%|tYa-}o<IFUm_n
zcnGuqZD(;I&|?0tVrn(n+T+yye;W<*Z!xw19Svey?;Q7va1hXX>?28@K(7*E%PAIz
zwE@$pof=97M;meqWVq{z$rloJ1Y)Un$|ZR$72~>E{F~Q)0bYyAwC;OLQka+K;)y7S
z@SOr2ArO;7n3%*4^Ksa_JLE(N$fDj&2C}G=&Y2xazjp<UZ#uz%Nl|Qa3&|Fh|1<jn
zPlhUXOA-qgLcl?|$+zg>*=b7)rwLPkTsrT#*tiI5a@qRa7enQNgZ6x`<a`;nga&S<
zHFi?VvQRA3wK=oG0u5~gl^aFM)wO@;GERedbW?3`nt1HpR)egUqt!j{fYs&s28H%l
z%@5A=HQ1K`+bO}kFO1-MRxX+R*cxiNDnDVTyuGPaYgYwO^fF@!FIS=*uD()AeFc*W
zGcBzc-i{2_SZ#yOuLh%e!fxH67b;2oM{JeG9J*qbeeg83(!-^P9u!@D>+q28hec2M
zb<vNN(w?oG?HzPw2wr;wVY;9433q(+hEu;>Y}x$n>l3GypMPr2mV^I@!=gVuJ{Y_0
zE8yvJ=_g@<;VE>L8f-f^h^ZwYr$z$jN<cwn3(Fh=yfWB1%<RBEmZsD?zQLw4rc_gH
zlLX(ZiAjwh@nP|h05k3B!h-ro4%K;BR(kID@y9{WxHn8XO3xWX;b{+no=DWyh0Kfv
zaX8pOVOJ@D^<{r;(h}}Km@6R6=)y^v+^$<bhN>881-50_Osee!TRPC_#(nxUZqTo9
zYQ28-@MjF|x1e{ArG0i~)TxtUt5*;G>})U!Hw-7yhB}_u6}XJCffAflp!2Gb4#h$r
zYYenE>jo5CaE4$^x$hWg?RFi5BHA*A8-1I$UQnxQU3*ru7R##JUN@X<GhkBvYOVTA
zY+QqBplgKBrCFkhG$iY9kY=CNVfTg#pBp~Fy+&lc3qjQV`qg1lVqa+i`ORpB_8KA!
z+A1`+{s1X7g6}G6yPViwv`I#5%;2}jj^=x|HJ2unTcDr%_loy=3vuuDHd5W|O`43&
z-tuzRp}tht8{{~-kN5ufPI2wjxA)`aP4m{VKJ=6p(5+}~5?S<u)xC)9<r+6yL*GMd
zlE`9ELKBYraTZu@^etXnFl;zJ>h7{o#tc9RxO^ncqErWbf&r-xAH;scz0I(rc&|Eb
z&pLNY8hABmh`U|r)hZzt8(K^PuaA&@-K&#<#l9NXcH48@28ZNTU6x{(&BooS@J*vm
z9h*iq>hNYG^zM-Bxl{ss+F^g3Bm%A8N<ZMev5FBmBSwwvqc>o0FtV|7?}vj}T|Q$_
z12oG_n!bl7HB@fU<c30;GJ}o`p(F9;K(d2gbH8cO_JDJ5Zo}RT!@JZ$la!kcX`=GA
zxKo)PqRgWc=uB2`T{2C~G=zd4nmv2up?3^Wc5I+Ilx>YUjcs^|KGcQDCg1QO@N63f
zU^!+0r+k{-0v6@8%B;-B&`x~7eUjnbi7Z<V^IFZw>7`~{^Jq`WCAjvK?7dnG5e~XY
zUCdqP*o7DZ$1aXMS{n2ttV~#HSnV*Wn|@|vYZ1Nc!GWEo;tF8OfNY8>hxG~sVssd0
zK9)kWxPO+cxEB$|IE+d44~tf%8l`te_j@b*Z{^-+_z1M*-#y<RKJ>xg6fw@#=vkq0
zm1oNHxN2o+GBu^zPgE^Wv3R~r^>{^jTCVB|28m6==i)=aON8Bmd9QVmjI1eGT=kGy
z$%W5h8yDEh2XPcuK7_*#mMi=4z4n-SL0hNHd9%iRxcx@E;E>fWxU{W_-kN;CM@rjn
zl-YH3O<`CDQCrWTVCls+y<q^Der-fDr&Zj2jzH;jwm@S0@`V$8YP8Lnw2-Zk5b8hx
z5$(Af<Z2m_Wme=)$1({BB!Gn0w+O8M4dE-7Rh;0K8?EJD0lPeML+gfyExa4y;Je|B
z?;<4Q-;FtJ?lX*JwgdNy4(w#7t@E(Ni?xpTQ`dFa_(G2fcWj2eDeBS=b*0B^&&#T#
zV%UpODT^44y|Pt}!2mXC^0U{dc!ke+sii4sbc)u|e;=X*WJ}OwigLIp$1Wgb|8u<b
z`~_GN&fGK(nC~!l!1wq9*lDm3#d`$ZuyC(+(Tyj(h!$;3J&Rrhzn8|>=KMpN!iU(i
z5XO6~McsIFsFfodWUFqq_rF7nn==15fV_mRL;#5G#Qc8&plA*tKnE76<N|0g{{bMF
zXY|PP(vl!RXUPm;jR%bY9Nh{bKnMt=Ln*8nqNF`0`nxbjywd+=cFU65q<xkDOMJEe
zi{F*Qxf_g$(ZxGz{%`-+tG!>-Fm3a}onC4Af4QYt!OI=gFKywb+gns``FGp>ySsiD
z#sU^>=jq0>sP4522}+}Pe9~(*c@z`2*Q(BBz!Zw&OHHO?>(iKrELrv6t0wA9VeIT_
zQ|8T?`p&zV!w2*qk=<{=FxqI-?%kVav4dgOlEr!RbC)b(`&hO@+a{rHNo*g{mwkU)
zn>_2b{-^Jc37<*D&6GovUg`2nVlF@Q;s3j*k8b}jPoDt3PlS9i?7#O8)%xkN?b71C
zLyJ4ZL|;UYv%N$8`KB`3-l2&I5XZjdvB?Or!rq}m=|zh&l}?mysHwa~dslE)zIZW4
zDCc}cZ#DwNCjsJlXi+rQa+Kt&GIi>%))LJz$ecd<y#jp%9;4^IbEvL~U~f7*6Lt<|
zW<WW*WEh9{zw8{!gFj5Bg{ky}GBh!wXRUFI=e*s2k+01(y#3YefxWB8VWa1_)0GFo
zWoD0<JZnr=^X}KW3`>AOCy+tt%``C@e7`jOp@O=u7nC`~tyS_VuJuY=bH%WP7PlIK
zynF*Uwr^+vk6sQbe#qihbX@|{gkePlw-s`&hRp!arlGcsBq4m~M?Nt*&9mn&95!+F
zb$i3fVUx2uj2a<ESCQ9Nsx_~0`T8l%FFjQbHGQq-;Hi^Nj&gHtVJgPt<vl_<*VbCk
z1LPSIhR&lO6C%2!1ejX{!2wg1DOKs)&KE*$;diIM@Ex2wBA;ioFwer_YbZ}f$-e5k
zaCrY<aKbUx4KHrV)@tMuCu)?Fe3?Caq9X}$oF$53Ba0>2>M=PuiEn3yc!tu&4;`Uc
zKv{grDMqmyUE3qHN;tL!jWhDNHxcp!(+~l~VQuTT=(Tdnw3WSD)NeEQhxw(aUYIgr
z@LLlecFrEPf8=Q4jk-O;!w1&S8Z#!Vali10?sa?Rj8fv8_UgI3dv{@Q=QkR6=rjl0
zBnYI1>n~w2`px#09Uw=m`^v)h;I((J)?bfRPPFh?J-#z2{{_LoTHF_AT?yA+qT|uU
zm*^?C6Szqu45@Inu((x(yu0I^Lc;}H%-H7H3zp|hpL_8{1TDGo!`rRKhv)R|HZGfv
z%BZ_)*qHSnEN*)78ch?ncWqlQ>7A)FdUTo0^tbMamKbX|2x%9g1jX6`C*n-#w}8{K
zeE&yU1oBNnd3jvh*v`u{tK@)Vo90;^ggny>`%ou*uf=up$;IkqN;a#r9yFJ!yezC!
zE%u&zd1+a+$1L9d4|$#vYJD8>SXm_tfH}ZNwZs;}0%0)Ey-Q!SM;D5A=X39WF2J$K
zwbq*OFkRuE%+lmt*{sq9vuZPDW+bgiT+r3zfMUP8+(Tk!HtB?fZ4bVcp5Y|V$1ORP
z-4B+^NWus&Q4#u*x81`5tB5Wxn^|L6Te+Ce_W5yd+ZO_H5S})^Z6AI<+`e76cb~7a
zgtq;Y+OT&YoQZ>k^EM%Wy=MzQ;k<JQf)NZK@-6(FGXVcs^m?<YwvYtRH1lECCq=Zj
zrayA-!XO-QONH&rxpU}o<o4xOr9iJd6+9)*BUfHgVz5{4AW!ZE<O|xuU1E?|9?6qu
zAlZl#!&NNsw9$GC{!H$nS6kWElYc&Kg8TuzmF8PqcS6q>DD~OCkjRzH_5E@5SJ$7o
z&v!NC5MkSL03ulK?}3QNovrou<=i>+6XXU&U~<yhujXM8QA?ahZoHyIv%9xyZq{2h
z_dv1@x!t|>)E{yS3I*>iQ{t-f_EuEe>)KpgI$xK-M$q6c{XX)1r^}r~`l;=OX~F2u
z6M}i;Z({9LOPuGL@QM<B)ZFa98wrUf)?PLDKv&b^_Im2~zXi3Gx0m(ru8EB}*bLyi
zfHqJ^97Yuls(hC<Q#<5AFgG8AnzWsUl^&~jth>E0=gy%Da$^i&V2bm~Q`b}CJZgPK
zi3wi0<2|_-&=A_kU1Gdfo)Vrs1Iay<=pH9e8<TH2($s$QouN47tGWBsx)`cl?PTL*
zahLvb?i?XR9VY~uTD|hHaZ*d12Xlu9Q$3CZ@7!#h)Z7EfpT*<ksXyWtUv2HC3>!>X
za=`X`!WiVx!!(1z0K3chyIa6_jxiGCX`uFr+`wFNTc14Z!7Kbr?i{)bxlv+7s-vPl
zkKw7O#Cc@*D@siD%6-X`djV)dkh{c6UU@!o=P{CjlZiG;o)%WQ#l5}gwc4XlPl@v>
zjDn1Ipp9v_5cbb;xR+9&?WclVjqub&#?j%NcJQ4)3@+Sn;)cg%l&QDIF*RDlpqF#!
z(1pkicp#KS!$dVtp{K-oWb-RZOmg>C&CO^Us~>&MacO<!{EyXM?v|qp?*+;s#A$ep
z-0!Nbbq#bq)>_MFF3Yb`j%~=Z)sx#ua#9|%wieS3*LCD5FkJJLH_uh)73FDkgDpDy
z!LZAdd!WmV-0u0~slAwP@O>-{7m>dWZ|wq-k8wc@VB(K(_n)tlHz>%{mglKYF1r-1
zN1Riz9%(e;<=hPZ3M&!jX>E+uJWo6&GWh?q#6++9SsT^*7a$gmw-F_3BdV5o+MS1u
zk)rk5)55a19F<i}<Lhzx4D00X(XHb7;2F~}cl|Ht&Y^3O8$E)NJzSrM&oH&bc|?9i
ziIHBp+3Zns4<zp(w|kU4^+(;}CR|_?UkA$D+l{w3hxSri06fuJ$@3UknJf<=0OH{;
z(PKL;c?)(j2p!0P^dp&%9PJT%&#qVuCIofC3hjqo_wsyKkdJ8#{Ii;DF<2}wb`oca
z$Ha${0m9eoQa5R@^w98{VUNLS>}$MY5>3-hfBP7GEIti<M*3{^4e&kcC;E-^yXv3h
zKiWS(phQ5IfN=pI2K*El5ttRYKCmdLQP7THzu+msj^JnJIP*mFIr9sP-O|G{-m=N^
znWfO`XI)}_5z-<=4lNxzD)jHLI$>kOPKOKOQQ-^1Z$+d>tc~=EY!rF4gt<iL5_u)=
zl&ny4bV<47uTg<f&7+n?T`E<r)cesv(W9c5m#$rUNSWX=3(Kr2b24UVOm57X*udC6
zvA1HM$F+`|6t^bsL3~7fulOPHv*I_zA4w>iuqxr(#IA{sr0ArdlZPdrDqFkk2W3x|
zYg6ud`IPcQ%kL_Gu>9%r-<E%oQZgkerAkV_l-VgOQue1@O?i^ysxZC6s*1i9`&FWq
z=2p6w8j{*8_4BlnX;ahgR}QPZu=4XNK~>_aWK?NfrE`@LRc7EjH{B<_OnT+?#_65Y
zN2bq6Uzol%{c!r{>5nr=hBc#HM%|3I83QvWW-Q9soN+AU%Z!H^&djjP<jh)`tup&(
zj>}w-xhZpZ=9$dvna^xSTePi`t%0qZZJ2GQZMki??IYWD+cP`0N7~cu_3XeoKEgu0
zHMV!F+#bO-e<vk;7zU7!f3o2J9ujhuw)y*cg7d1c<dcm{Umynmh;vAm`U^$;;7)VN
zBEc8`(XSUtM;d4NlZ=$UCE4KHxk3*_yAC6z#EzsiylhSAWYQJ)UZV%dA~A@RNB&7j
zN04%m`XjYL+K)5^sX0;>Qhz#_j74fKMdSHsvIysq@KJR$4JBixvm{pff}As?k_CpE
z<eW4QX)&(fCR+__$vGjM{3P{-A2Ss9WAUH3ZsFNBq;_P6bV)tqz0=YW_~gzJyWvf8
z2xZ2bYLnM+w(;`Mk?v^oKG8_3(F3l(#MY#X*xcn3N{}T|HPRJr+%5%^UO11Jd`Jgj
z2B|0YA>(kp6P~X%^q6aec%J`0WU4?mu=`Sf(wV=9cZ3hgPVog9EaZ|T+}kQ%At}Zn
z(iUes`;F8=SPb|rCHrtDhUr+@yOhk6+LM{m+oXr#Heen^V(C1TdzNI2d1ROI9Wp_D
zhit*Bn}vvy9dFFT{S-1C{}f@hlt~&3*GYS%R@8+!_+E(rl}R6Zo$SH5w#NNw;(KJV
zIF(E>93cx0_wjxeGErPW2Ad*D6{!^I&Ea<%FkMI9H=ZTkaQ;x5MVg?j4oKTsTTQLW
zaMN_sRV+o83vXb|Dq|cfkk!T#WC*Q8`XV)_6-X-mjr62{;P+jUDoh}&r0>Zgp)26g
zl?+7t>!Lk%QD$RlKG}r-u2GLA;~+J;`!NmY?ntdzUZhD#gOKVWv3o6$*z;FDW4O%l
z($JaI<m1h7>ZQc+i{lo<FLwfNRY$sy6e5JX{?_n{!Nw~Arx;#oiI>gr=2eN|5pYPK
z=u(#p@Z5&;b)@5fg^E86hx7@!gJ+(^aEI;mz~;MYu!4UG>6`RCL8;>_xoN&OnF)D{
z|3A`+JO?)*hLr}UA(T<i;^(9voBnPRfL~JxVcOm6Nc_{NWy?mS4k2+?ERKLX-n3F6
zF@(ao4y^<mM&cp{wlCfa@{_NRgu?JK7)%C16eS#BIQM+m0|OkY2BVQB!C*A_;3vN_
z;5N%HNi37WfY$^;64+gXD2WEiBuNrV!&|Iyer+(}fr!-)k|2nZWHgyjIEv;k2|hlO
zh<k8lqD7(+&EZWk;s4OR^ubeB4cf#GtOG{RhuzUW?1}ap9YJS#-&y}l;TJ}NpZx%i
z0YswBa9tJfk>Dd?dsn?p)?;_E56KB~hFm5O$ur`jm1$ey4EEu_6%!g$GNyD)Tuf3-
z^_coGqhfZ(S-Hf?-i*PU8}Q~Xa*~|Ig8J{tPk6J9`^}J;$e2?6&1$+gsp}8deG=|E
zMf_YJA^zYmq+gIayQ(|SIrlmD-g*1ZggfK!jJY%FPVYON?v(%b*W2vB0C<1O<1zyY
zroR92IYbWQzqlPG#}GL&l^ld!;5@lNJ|!2)XOMxWkxS@v0r{L<A=AkW@&);lTqW1Y
zSL8aGNoJ9I_;0)S$pb*;dy-3LlSf!z@B{u^Um?i@{sOxJ)BElgFbvf`ti6Hm#Ks{8
z>1`x7HtXGqMOkb>f<(+#%K(mQI)F25UKkJjgJ7hSNS`1bLOSD4Q*l0vbQy`|D{v=-
z_@XZaJs`{if_@P6gm7u^2F~9gT|&Bz^exhKq&r9tkiI~A=uR_n{vPQW5_=Cj_wzIh
z=bw@OK)Q$YClW>wup#7cBq!1%Buq-4@^E&!(^J3-k|0Z5Q(^Ky<ZChqlN0@7iOj<p
z%ZFHktVje%$t;lt0AUDHD1I-*ITEQPelNng6jEvYUW#*^n#c;Alhj03;#>`>I`TkM
zjj69DvIb`u;aMVUamF~Xg#W|{x}qks-a#rfb@;aG2%F!$P6w%LhNFITzOUG$dqoGW
z5EIkjt@;kyv!X+&;GpGWD>}pqF%2DJV#78a<2%LV#pE@~%8O|jGoV+NLrUalJm{O(
zDK*AH+ID;k$95fK9d$ZId4Bfo)Tw$!hs27(8_1p42?Y#v7l1RrmFleMFjQz7;}DZt
zb!^?yF{OT#qfY%!QL(Wx4IC$1b#$Dp9~IlFQ$>f-(?+y)(p!;gYfTj##_|;%K57YV
zJ38t_IY_6xJXT)Yj`6XMDS3HOdFX+5ebW2-ASEx~sH49D2sAiIr?f&*IK{_Cu^aKR
z@v&%Or}`Bgz7?9b?brZKj71auDmdaARCM@PaKz&jPyxFw=Emf;?RcmTW=o%gJ|wqY
z$3rAed^EgMlp`LEjmbS|2Hf2DST6%BIO^mcj3J#n=EsxzQHMyp_^3Ya2c$T_i)3mL
zQpf@N`HmSqsuG`+1HzM&O9$~^;=(aqtH-l@(&(N|ZPDzPp<lbYsip9Xuw7qKf(kg<
z;YYLOR(^DpJcS*G`_UY^wiWk!u)}0_NVVcYOLiE>4)fVzH#@l4p^R01BZs|_!`{fj
z3JAP5ESz1kU(eW~OgJ+4V2AnaaG4!k>`<HK!++?(8|+X!hGrA^bZjJzv>-h>tq4_m
zl2Bn4F}tdfKxG-Rim}8W0V1K&Tw(@a3^hiQFyl#L7P=6t2|i`xZNg|3`}mN4j9W;)
z_}v{z{Y{~<b$9<3ps|f|{}y%kCEahVs|K}E-!<a?R`>59(hd~(b+mFg8AnDUQma21
zfYM@MKTN}#-OBjY2v3LM{$SD<S53%J(8WslRTp;#<J`vcRyM!tOR|x3BpHok7IL=1
z+r5!SA;qA+0mwfTcl)Bu9F))tdE4_hvhidXp0V01q3(44f0?zm*u6@s=qZV{cNE%R
z9sg}Fm5kxvN+@+WQXkaT7iA4Y9sTiiFly+7J41OJvvH>xdh|LhY%O3_XaFlKt2qtO
z;UCw)Vm(K_<33V|LD;npJeTdy#702<w7_paSo>??ZUc-E{_i%v6g+M!j??g^;9xUx
zoQ*F9#hr`e2J$}MI|$xI@nr&50FoKML5%TbB@mRGhH|C)4V$$iCHssUIhd5}KeF#2
zQgU#wQ9}_s#kd&r`tY{~^&L4BEoASrgq_B5M%$!HxLVBfHlT6hPH`tKORI~rcv8GB
zUZQm%wD^eEg&-kPs3g=8dJCh(+rms?jua_;fb^FX$-ZKem?4!GTOehjjJH`icwg3i
zPl}h^-|Kjyes8O9zjQ1ul}4KypiM@s0SkadDG_pISy<@HV|>zp1sV9yX*Nhl)e&R+
z8emWxWA+9{t|e&=oM;Q|=}0=0F0gp?0Pk50p0f<l)XNwr$Vu`MIYmzE<curiCi$A&
z0{7L+6NP*fs>0qTp}tVmXhogjkVL}K$`Dr!T4Z*G<Nx}FlSEg0Qc3v>Eej<LT(?Oh
z*Ao^6NSYuuMQV%mCQ^IXL(<9h1NNDGgq1#z$Xwi8g7=prtwcJ6at<RMK{|?b4Cy%1
z7bx>fq^n5RkiJ5?j&uX>-$eQv=@!yANZ%pdM|yzt5b1lQN2v2L(ho>akP1=vQzY!M
z4k?cv8QygS_D*%JgT!Ceb(K_y99Y9uNM6If3|EjO+;!mYQ`{-QodRH$1n9JP?Zf+L
z$q+1Hn&>Kv5}K2lu6bm(YXja11Vrk>_t)Na53?|Y-wDQ@0Ni<kJ3+km2N>~6t{<`U
z{Ey@k(q*Iqq|cE;@yrZ-FuTjL0=ka?-A91#BS7~NAp3}yJs0Oi$hR12Dbg~e8@P89
z>1(80NZ%m&ql7|~P>2!=Q9>a~D8yJ4B6lHj7b15dau*_ZAt=BbnA;se54xZqMvP@4
zU|a|o7XrqGfN>#UTnMO{UDJUL(=npcF{0BkqSJZ53em4Z^s5m4Dn!2u(XT?Zq8W(+
z=Ejg#NNrtHuwrEa>hMSDQ&9R8ls*NePeJKZ7?kh?yVko-la8)ufcUq#3IsmYb^V5&
z$Dd*R-T<_^V01xc@H7Y#{5=k{AlGF;+=}Nv0P5HA{tp~pLtMKsVxJ-RdW_gd7_pON
zh3gBvzZfG;(eFSa7+PV>h~c6s2wDo{I^73S82h-s1E#1Si~Ib_6ULi=Tn~U<>aQPQ
zi&lTFM4Q|n*Y7CvH+IDNlIxjkvTGxLGD?V#3$m>12ofyi|NOXq*6z8OOpK3ftX8jj
z{lAW`<=#1f@A$Z$0>bS45C<mZ{vUpd+oQeUI;Q=4)miN|d!oGw=z99}&o^AZzI=~q
zYx<9xLoMT#B?YtGt|j_+)ZfJ;^3P|*cU%u$cU_M$rhFuUUH|$4cH!eXfgWAQ@rG-o
z>wv2exM#tvIpeyA5o0<TK}i-@McliHXT-I}b>FoJ#|^H0*L>GOWH4i<&2fF~8R0!7
z*p-BPkuEdx^KsXnvGV@=<9foz6vwBmb{EsM{_}(WLi0j?j?J#S|C%|-b>-F1T;IL=
zzIqpw0U!1FU-`6WZv0f=x{g`?@&_<Mc{8-zZhQdVxJCop_~?6{-R1a=OXVoL=c=kb
z`S)`%#%g(7Oyec4FG1~zYl7>7^3<iH3yK4GM<BIU^Shus0}D>$nCoJ?FaLo4Xun><
zOcmn5xu>qHpmOY^$z1L?*opPm^|9`T?k8~dyzbKd6MTVxTwgK>xvl`~_Tk8>&?|D6
zL7uPwdH<hxz`gY!f%7vXZu#R&87_lzTk#bk?UVzptpF*<7m`FR+-m@ty98vMCZN5|
z@QsF?(+&}J?eUF+q|+Izx4J^QOn|*353<rCvK;c#N_;Cp?)e5%(>>S;-h@5mDfou~
z>B)$11g|@S*B!;{jzZmuc%FoB36ztJIawB8iWZdvXRCy-A4*Hbn`!ulLl#TNQ#d2g
zpQ`u<!rxsDd8*@E60%Ya@QRxFnjtg22HIT<-(d8o0qSpvFI%hA2+?1xZ$7+l5|`m5
zNO5fei+1>$ct1mUKYh{9u4rpFe0|a5?ih8}XSPmeF?zHF-zYBcMF0lN@tZ**3Q%DG
z(dH0z8v&M>6X@4T$bJS$f1lz0C0JwpAkkex3%`IR#t3W54YcYeVCMta-NSf%2MCHB
zg3RloLeRn?XyFhHMVS^rgpFY+hog~0P~etUfx|9>!;8Jmc0;n`8^odJ$D!uSp%%uW
z7Q&&1|7(S>KZlx`Lyf_!30m9~U+j_sX;<Wsk~pM9jPaYe-vQqM_z*jxhYUM>bWro*
zPz&U`hXAY29JFLE*E+Bl7uwI@XyI@S<#4ocIEHdKhLQvLLOul?jU0{whoHbA=*uDK
z&mm|6{MbHT40a-iodk>16SRlnpbwrf{bde=?7!$Q<(a&J+2z9fOk-i#XR6z|K@550
z^)~HrY}lr545`_?WiuRG)NPMro0iRSY}ckKp7J+Y2~5{9=&nSsD*;!=tf9k(kfeSi
zd-Wj|2EWz67qRhUO@3@VG-t?2$YyFuOy3reP$EiZy-@35S4^K$&#bjZjBORbeK;U@
z)SZj<yABfD-<&<)gp%ICf1uxh>*l&VrF41T=XqL@jmXmq_nAD#>SCo(l)|F4p@-m?
zdJj51Fp$DZptgl+dh9<zz>Y>X!(yqnT5Us3jKLOo%{N2;-$u40dXQO|Sst}40dv?7
dF(Koj9gjk^M?R6s9;`>(hY~5UJR14P{{u7)`#b;u

diff --git a/static/fonts/roboto-v18-latin-100.woff b/static/fonts/roboto-v18-latin-100.woff
deleted file mode 100644
index a01e70821bbb295d3ada8ca99f6a2a22cc46b030..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19936
zcmYgX18gr(xc$|(ZQHlDZQHip-rCl!ZQJdwZQHoD`TBp!OWtHpX3xp_Hs4ON`%Pwc
z-Q~r^06>7BCc6tj{;!Wk{o((s{Kx)(6BiK`0|0=Me>CwQn1BU>)rl*}EB|Pl003A&
z007(9`?6~xuB<8q06^sZ=m<X;=P*KSmRDwA1^^)Ie&UpVVBow#5^rp4=l}pff&O@^
z0RRx00rZkhV>cH<006q_$0P9{=$V1W%^b{af3%MuAIlHA^zX1M%?+J@VqqD7Jh1-@
zNC1ktji=cU<pBV=e<ZtxBGXlL3lm$9pLBmTfaMQf;9$OAEldqfezdY5&i)@h#OM7j
ze#9Sb_lFbwfD}3n+`z)t<tO&PG=OD)@@q*`H_@}PH~#TSDg5N|bI(BAFGCwAwuT-*
zxyaD|7zzIa2tM$uouRGik0$fO7k+#m*hif74))G2KjZwL2jxHCw=KZL!O8R|R+jaL
zSN!0BhJCEdV;!!a2?$656TI(z8(cvME=v`Z*9IT}fha_U_u*cE1$>-Y6H%V78EzWm
z8e<zH9OE2Q+3E3S(c`Ct^M(ndl;)3+0>cdOSdX3uiO1E(9J=)<kxQLvvEBH;!^{>m
z`0+|vVf|jtRkp2+Q@3}6cSrT{9}!@<0bU#Fx^4j<qHgszEyo=^D%)o}qO@@pYedfh
zJqqbSVr+Hy0cD0eYVL&!2_+~dX63FHBC(zud_vS-#2&N~G)weabVuZI?yo@>Bdoai
zqoH7%M4MWhtcQ+=;3D=m>NXMsa*qkifvA!GoYWlnt<s#HThL0|`1Z}m^RbSez0p-g
zu5Yu~RiAaa2NkdzsTt`3raTo*19N2^b!C0aj;AlXfiSxf3cIm$%LA6pRL$iu{^eB9
z<;WNAUn1P$J>0Rm%^47$zk@ylr9Q(aKK*GvLn}Umtv(~qALI5P(*z%qWHGFBGBC=L
z3FN}5>>X!B1}IA?-o0R5#u3jt;ZiV^OUzZm3FrlX)fNS-miUuodF;fS8yY)ShuoUC
zZ2h@s;gwQ_m&OdOP9!=Pnjv_<k-R7Q9=USYPM$)1E%h~1R;pUCE1S70Tft}So5-zO
z(4{rknNyqDt)Fx7mMwLc|8;xQ?mGBpH8CK*T|&31$+HaD>kgVpHMV!GDbcBDU7mB-
zJhdsw6~~aPb?=-B&wOXFyz}otSMQ@e9g=SiReLQvlfQ_x6t5PRIMEhM7SE>K*0{7Q
z#b4$al3JIi$=VjAXtt}a0$<S>{UNhf++VOY$JkhMYXzCIb}qes_TB_}is!X~t6|eh
zV$+U_xrg4mH0oTxa?9JYgj=?dUACb^ug3}D%X<9v$4IQ9*P2RNd$?iQjD&I?E_pTh
zDV*2LkKx(Y3Z;5-yn0}`9%7=d^`G(k1vdOLFYcAs_>AR*#_~F?gcot@$}?^OU+x;|
zcV-^##yNkiE13z$W5@Pc{Ypn`Kz(NBAI-q=MCXkuUx@PUd+wxrE@k`IsL!*xnU^Tv
z3x+4SxQg+6f>~}m_xnqSzkGig_u~}7X#0sLvyq*XmAKTY%+kwf+-J(jpBKwxHy4c0
zNik#_zc;xu%lLGwPXca_Pto5u^-SYWuh-=LkFL@@c0PjfGp^kcBrj0hlEHE<w&!+0
zsP*Bw{nkHNQtlSw=Xyb?zhN<%yxCeolr2sL!9}tUkxbb{@y5$Q#2*KvKgcb6pKz8s
zZD*a|G`74#jieruO5UPm`);L%v=*BAH^XvNw4OVC)vnL&e1TCFi?|;KFBv}gLbS%3
zMO8p+xa{tuJCbGB@vmc<J-h6+nR{Twl`*NoDokc6hZq&zYo=JvGpyBk$tH7&g*m35
z{T(W!SYw2aBYRC!Nk8>>Es}Via@q6lT<6u4&!3z=mv;({%u2uUX4_jBBp(W0FT7h@
zEr{Dk3k`PpS={&SmI|?D2l4}e=3<^eg2k{txg?r--D~BhOOz~qPu;MC#iX@SJVn0M
zH4%QfgDIeftPC~kZnSKawQR|iDB8joxdpGca7J8RKB@QYc3(6WH1<sF#B)go{sB!U
zE22gU#*&+)Bu_BJb}nO%19LG?crYq|FhjFG8}!2JGs7BHYhel3WlkRaV}My|0&DI$
zqQQ3`?7D5*g2<dv)HEs?)$mY6&5K1#BwWNTTs*)Cg-H)JERkBDX#9sYgAypIXquIZ
zQMX|-9)B{~ZZeU%k!%K+ib+0kG7S}`Xm4#khwcd;qfv}_St{~T>HZH^i&TnjqG2a0
zuk*OKUR2@y!n<A+%KQSFmy;Usv|~m*jnW=9hlE3vH|XXGk|w@%4n-H~7>(tP*1vh5
z)N}@F%yxs4Zi68(8hVXVVp;d9PUCqnVKJ#wH@fHfEo5fZ$eL8w=IBZ`o$6yNGWCge
zt+k~^>0;niiCv`x=^=WwdO2Wri5%HPhh~>jD@%2nI$@zFiBUbMU!z2sR~n8Z9o%Z0
z^;fa3(-I4KNmrO12B$$-7?bS=QlHyMZMuhUO#H9H17HjOK(Bo`y*~xPV_h~HL@B@!
zF*H|yjcpXJfphfd9X<><0M=j&$1RIdp3N{leU65`+XsG~?g?h<`tm?O6TQdsYk@y<
zM&o%C6e%4*K!6z#Dhk`OM)xY1e7L+gMq4%pPh8#AAY&%#7Cf0b?v&xmRy;sm3T44u
z?VsEKEk80)VsGU1Cq6LaO0Qrz6rxj7kwtc@Ama5Ft3rS*FfevpAPG1Hq~dW$Tgj0q
zkiBGeAFg;nj!W8B_jUv`Sz(%}W0F5+hkq(!Ud8b@y>b$@;JfO2T?wOnJ8CG=g0L6B
zBq)NunFg$MlZvg(XWn7=4~ty;ZX!)h`(A3NKQsYun|X-lvBz!#MULm5DkdDm#~w;;
z2_N;(co-X)MVPz{^^N!SaYZeq2L>wQ3$f^%NEjO#7yyhYEes44Ae5#Vdpdi2xr0GK
zf)f#O2Km85S)VjzV4-27?**M`)v9nXQ3K+!04SEwum6p4$OOn}jx8W`??Cj$R_-~P
zm1gB`9^H&)s>RlO#|h5xzp@!)Zr>T!RT*33LX0xTK!UdOT(mw~VpUK<c%lDMRLcWH
z*U;|<q4O+|NS#)Zy`96C&4=>^`yCdPFF}b^5r&=btf6uEObWygbvM~MYJ~I8VHOU-
z*|b_Clz*U?=zFALeMO1dGe_sqy<zQnj65-oGtT*(Y-#78PwVB@e3UQ4Q^)GPQEOB-
z1AC{&vrz_&{B&FjFd$h_l=ZH<x?vsLy1H>2K=ZF@!p{4$c}5`k(!EbG43~WsQ5@HG
z(vjj1>mp;CuHzEh$`<1$B*&K12A+G2%S>E+2Q(#A0IFZ43F0h<=Ame+F&}yXC%UMb
z0TX*39=j2anxVG|z-<@6zH4AY2EX^qZ68$5h)`}1_vwI#-hh#QA3Ju}%Y@QySMZW2
z8g`I`XT-FtPa1ZFrfX2PD=u0Dxm~<M#{{)pi?f+2^WkY!W4@H+Kq5CLn&Knjo`M|l
zYwDFC3G&q$+K4(|!UQ~D#DqLwOU`wYcrkpE$R&1?j5d0*aP&H%3qgycrt9aK08szT
z+ZX|I00V&i4@3Pj0H6YA0T91A0dQYw0Avs%01PM>02MR_fCyFxKn2GHpn>-R5P`J;
z$Pl0aFz{^v(0`ZlSl5jO5(gE;3^iZB=%^$Xh)!>J9LjJ6fTDMb!?!#!>X*&q>E`hx
z!qkI*rn(36?)puCMl5dPR|a{W`10X1q-PZ5wnyH}SG+z$B;HpL@NQ~5keGJJ^bycK
z!M;dniipV}!cnx!B|XgR&vgG8O)KT(8YCYy+_R+ZcWQ;bo}~Iqx_%vWI$qGY<boYj
zO6Xw=D$8#1VOnorf;=aBY=;{uLMSIeNv2%I66Q*bnjqS`g?Z=e*`n=jFpH=8;1;?`
zgl=&7Sz{S8;JwGz?EBfe^5+xc);_=@eYtBiQ#wCo6}Y+y8iuO=G|Td8o>4JjD8HYu
z`4{snQLL=%nDm)*Youlv?+UNl^kyVn!4wYEDPfwa@3@wjpra9DTC<6J%{(m<O-Z4w
z&=Z6*ZFuv~R2BdXfCK=4e*+La*1NhO3{b>T*m*kLDb}2n>uEFl8*HE$2?d^@81q{d
zlqB-q7l8AhkqJW$AiJNjwFn6b47{$%c3B~Rqe8~VZ%5fye{b<ZU5Jdmw=(p*uP0sE
zxw*NSJ!NEoK{Wt=M<ybG&I*!>2;;)47Q~Pz{gk-%(_kOB#am-i{^7%5gv^#_L-#eE
zKMJ)V_5j;}8a)WnzXI1Pq>n}F@<<=a)&l;NbLT0Tes_k(cC>GWUT~dTCKxi18Sw_<
zSflhR4=Y2Zrgtcu;RV-5fr!69{l?U9VvC;T{}#f?dPMiqTxAA#0*8hSfkEEmiwNtA
zVxUamR~I(%$Ier(hZiItpOfYiRd;_bH2AyR<oggfsn;4hrt=7O=&%s!rComLq-v9^
zHf~gs<-Zz*1W~a+F+l+ak?Se6%0c1@p>d%_M(UnLXVW6=z(k{}LN@t)d*oT)U|%2V
zg9iWX)kDEchn@%v%Z_>XD=1S)3y;-OdiCr0fx_Yg9O?gwYL)@4lhaALz2&0k)QM)J
zETlYK>M+FC8SljE{5u2+VQrHQNfIz)&QQo-khhARfKnb*C!fjgkcvmje8%H8!{hA>
zqkC3;+*nWEiKBZwz8Zh~5McTizogtX36ILX8_m?+^T+jl@u+ngl={Pq)b78VC{Ae6
zS<XnglMs-!t5z?cJ}x(Fq1?&4CrjA1REXl|0d0*5H3dBg(#$(HMK32@UCKXwC&<<6
z_Rj$zhtbtB@K4DF+0yfi+A0^m0A%UU3j*(!kWPf5>_$Ow5VpSxKw?zZB}^|7VasK1
zWIhgAFr5#Cz34EVCqh}3V|osKij^t?zmnOVDwBQ0xpS{vN`7Tyoi%U_8p}%5am{DP
znq;%_5ed@9Ro`-TFC_@}KL4fguo@q@D!Gm~p2+EL8SMP-@-dnSRfbC=z7M*(s^sn_
z@Tc+jb9ppf>{&Ri>i;x1wdE<~b{TbeKkQU@pT6X*l3p?IjPo-5hc&n-jMO@Fn6m?d
z3`_H+mr0%-h)GSB(g%~lsGV@mH#nLc%_q&roq8}b{-F^zE=Si|8#~S%cqatuG$x57
zN6re2qBK6OlaxwSER-on9@+zK_eRueHTnoWy!oK8tub#ZKLtu-8bq>|VR(Q$I;!v*
zoO73bDAZzDDHg3$@AG$bX?sp{OFZUk&K8%i!Rha43QbsCUYge<E+=#4iUhJIT5csZ
zeOALkw<R6<KM(hgnw_eQU~SkxoX#F|Bg!rIGnRa&@0|<9KrB1>AD6S`3t_&Bg1Blx
z0s(tN{Ndb`C&>B49tPz~WW2$S)zG;hs#0bdu??aahY2C<wEYpLg>X1YMJCxHl1iCg
zL5Hkvk#f?<Ub5Yo=5zH)s<s)%RWhF`4138&t;1zf)UBanE$KRr>_Zoi5+%$<t(-c^
zhB}+HY^DtJ7wKhCx9qi5%m}u2J7(I`e~ZJ^^JhZ6OYv;G-X2yk@L{tnVS8pXNlW6e
z{hIp|b?-->F}Z{#@Y@bj);7>%CpFpn{q47!3Ech9xqS`2XN-+M(K?$)Vx@eO<(z%?
zciGzQ<M6gT7i|EboJR7$W?Zvn1-W?1GAlW&4y@o=ip$++BOLfz%!<^lo=>hf)^wvJ
zOgB|l;3o}K3g~VFJAEAO$cfDwS4svo>|;2xY`rLkqx87h7U!MK`H7^@Y_S||0Culb
z>j7FE^41b}WAVyo=92zS1&-^Dr&vu9yxq9v(c7i+9CM`?Q|Mn08XUerrUpE|b<*rv
zEb~lmo+y)M4_^VsB($H&_`Xh!w8HY;p+_4<D4dTrS}cp8Q}1`gT9M2+#cUMb66#Nv
zcOLb#0(XM6ZONy<Nc`Dxd=p}OMvsVlS)1L8eG(pU&*(+<GtN`WfMuE`(Yp!TW?>sv
zqxFQFAIiLWG@okUTRT-l{3%8kW@VV2?1o{T#$&M)ge3!ZH8lu3hIqn*4g=7D-XzSN
zNMhPMX4ghtYnJSs(#wX~Ja3#&*~@py*yhj}_%a2F=XS782?S=_G5eqE&>s}EkVuGM
zQAjprj-o!=1vE{Z$MkAPDzXyah|!qpf0gg-(!ne@^za8$7{YAB0C(evMC{PDISZ2H
zCj)HqK^)-Z6M@QGFy4egf1wi1-^A;CjWh7FG-^P%Z{V=jz^G1Wkr=2TsnAako43I+
z6z=wQ_E$6QB)dS|Jxu@IVxc&%01k~9;)iqxS+5H*qD(8Za?7P67?2eacvTEKMaU^Q
zvw(<MO^B8yFI-bzuyL}~8rbSo-~N8uPN{r8bbf!zZExearnQsiBN-{9<WvNe5|bSx
za#9vaC?jr{^P>nkByfUL6=Mq6MFi+k{sY2eRf*@@Cn_bCN`ELLAajI}bUA@0vI2pL
zW?9sCN-v65LC~X2syY3nwA?+PbYFvv1w|C(f-}v_M%HZE9CS}VGoISJ9;L$@0RK}P
zZuTYB$i%^Xn8IXW#x*(IYm%b{o(PgDE-st<p`g7cN~sm=hsW`@+rp>aIR+9J$M<?x
zFIN;2PkLZ}>^EnsYd7<(hvVtDngVkD^=nlh7V>TW_B}&M8!MFRt%(|;Jf;wI7_6L5
z8pjk%TtP?kYKD;Obw9fO4G|m8>u)x_v0ZU|<+9X=m8NkG$)QzZA@Vik9cTyAJWMtp
zQQ$^t-m6)!1Ly3U;|4!h!((>b5s~=_?yJ$>-}VcCF5bsV!#f0TH~lt0*Yp4|{ps<p
zgG#Z>>wC%VaGp|L`|W=1LHIcR=efX`iyct_<~nfrRGAMBVQQ=_?Fwy=#<6mxZ*0+4
z^r0_2HO}_QXaGk>lypa*569n2^vBA=wz&vY5Zwl@wnzbd6OOZxR8i4}Ui|Hq*&Qqd
zFRbjuF$dPpE=n}b-*_xQg80o50+!SW!pY&#k_fMHrx%LxsT%9yruX1jYz3HsZCQAG
zYDM81%`EN9h{PnU^eILy4RgxlY0XYbbm+&l6*ecZ?w-iMdSAm&do6=z-XKg$?CrhZ
zI^$;WI|xqL@ON6wSBn3AsxJ+K{bCsG<(K_Bxr_7H=Wft#zg66x(sBhFG@+LFSMqES
zVt!CV#-)m`0wqbYr9}D=e*+uVK@}>)_ppDk6J2bSZ-*kvF7TCEq=d0XzR^p!WN6!L
zV~#e+=dEMDWm>p`q#H$RU@4idzC3t-!^3-BE<IqxUbI{ezT3gm@x1L4!Qhl04eT+N
z?0;;%HkWVfb>PU1bbFDnCg6UB797}1dIlgi0p+m_L2#Abn{4%m#XL&P$D)EJgA2iz
zbcf`ACUtq}%uyQ#vz8j9v&w-Z5=M;&NqCxrK(rbDHmcSOuJ5;cNSQJhR}TnNdqcLq
ziP5ph_@mY=cGs@Cq$|a8F0@v$iB~ZWo~y~`4arhHtdka+L3AJ2&Ml}fp<qsx8<#o5
zkrtcrUh_R@9g=k%tNAjOP`ER)xzqT3l@|8wuX?tA{&=nLXFjM}zuo3bHGQ9ipwsDQ
zFwSW{-s9-a*QJ)+cz765OaqUP{5Hv%*y<s7We1pSp0k|>qIgiIZlh*Sq^a`+CxaO=
zm}wU}nt*1>3R>(?U>65lH2+A#JEJtV1Cz~dU!09~B5KfxA>{1JL6s=3!FM&Z(0?5e
zTFtpVs$v>}fal^qenJSpq@bucU`-CHNV<x;Qv29l49Mo~up1^o$mKnnerV@EQAm0i
zL}yNuK{W+(&F*p5<K>U^Iv8G^OA8frWQwMu4<Pu<x-QR>LeHBX)r%rGf5CuG@{*wE
zK1Z_yLm>z;%%AblEXrkAu92cmuTUI^Lyk*rT*04Cz?HW8ranHiWT^%@8p#~*N=8r3
zManuvGny*H+Cz@59#(xYhrfqn2o0HBf(`BP9r8vmKtbXfIG}@+yPZxG>P=2gzLSfJ
zhlX9xpPwSb!+g=th)Q)Bu_Oo~8^mi6ha&7v2<<}{^DRt)cmX_)`1T4XlvFV2fp#7*
zxm_VyVhS8eKLi$(J)wx~qK<qyrUO&&`G9$$7RXM`sI5Z|8nYXlN&MH*8Ml;e1U1)?
zg*qpflI-zsz_`n(6EcS(*M%@7NOug*m8GFRlkYY;?Ey{MbbqY9oG(4VY7&Rp-8xs$
z_Sk-#$#-zAQ9JA!f9V-jQ$NTlnka*-HyI9V7LuIC6`R9wagpgw$%21=lP^x&xT5Ke
zkbZv9(w*jQw5@Nk7H>cqn$jb>{Ya>$2+LVnD6?thvH2d<nWi6JFN4dNJuA-`d)XS?
zyCM9MtMN47d3g9(8M-BXiYkXxV6()7PHvna`-+>&T6m`lN-?-+GQ*7iapP%^p?D?y
zeD1zlRuResDdQ7O^Ttr-LG9u0Gqwl37+dFDMIiNGZ0r}X>^sI$9##lS;af{~TYu7W
z@}IKw=t4EbL|(hyPybr<f{K`mm*<$=*c;y_<nDVkEF~40P``v!t?Gt%_Vu9g0ws$J
z-o(9YcBAp}l(M>io;%Ea1`voGl6<qlKzeGhigQ5Ms*?!%j=zO@d}78|ajA@^b*BC*
zz<yLj&J!Xize)T$dA1w<`y{rSquGR3OTpKa)s*kC4s#lKgTC;60`zy=XUjMkno*Rh
zdSAYH&BZ`mxo4SU)~m7@F>Oi7u2`FDQ8Z%$-p*^av2w9qsZH8Wr|bYxJ@P9xL-$~?
za<h|?fNK{&iFc7ixM?iAUd4^QWPPSka_9SPxh><}zgx~LPZol&qbr+LSa({N)OXBn
z%$?T$d|K&PdJUrXpz^EdoqckXZggUWL=#wmF>bwM$|W>43<EXrofrGJY^R<=^juJ6
z$gx&VI40Fmh(*c?SArC!n`u#2xe$geJVo{&g92$?`iOlqn%9G`@!Zk^4u4%&j3F)4
z4fmhbfB_^9GvAwTG`#N53o8?Tk9R^T-RB8)3_ik<vFjDL_+AX%cHn?l%zydDs9@|C
z`KwYXW-e=GAztIF4%1>`h;py^DAN{mHjTr^iZkstW}zczTyf}j!pEu}oUfKRn!z2k
z41a>Rzue0YwZ(fjeM#dsy&xnHpy3(B6mbx2MM8@)0gliYj?fTP;k6dcWs%FBF-n5J
zDXG~MWvo{F@rH`X&oxj}uxBj{t6^*=V`i!SleVy5Q1~9XL%>B@LKH<uZe>66`K42R
z8vNw~dQK>P6K<-4U?=tXO=~Pm(n67SS1a)XG5jy&<3m~_eO|bI)^exyxRM-AX;NCF
zRJIfIvylHuyfS#A6ntxMC#vSlxLI#SES5$Qu*B_)GQ1kzgEM2y&}z7XWFQ|l@c-!$
z^~-vg+6M!(o5%d@sc>D!PEJ;@!%5M89lFhi7+W)XapQh9-m9F+tKJ4+)ZQxkJ=Pai
zY5G|IR^<LlFxb^22~iY+NMo?aQs#X)MXDVW)iu>zC0t0TB7gn(cdI6F0|Rh!>LMfy
zP~{<`?$13Hl+!G6Cp?wl?S^|$##K=##Xp;^L6Fk1Hp?hv3;xIC_|00!^8gKU^e)ce
zPkp`7dX-4{8VO5)w%t{P+up+e3x|IGSwz@+2odGo!!jx_2D17zM3fqJ*Qx9@$V+#|
z^FS2;c+US`Al1J=JNG_rI4sl9Y0E!2G2xl_>X<<9!7~7Qk6S84#2bd|bHP*(=E);N
z!#nc!SybPH^ZI4M<+e+H3+?ZF(NVS;BI{svV2G5+Zw6<<Lp&Avggkn4lKL>WWVZyo
z>NdQqo32ZLimBcZC8avGbH$sW#cqS_#e4(lc;;L7+>L59n{a4-63h1L6sf6?!9?ti
zeF}2U@Om6Y$u2sK?#oALZj-a4AiU&I-T9~hL+tD=^|MQMA+U-R(IvY`T9<<CBP}x#
z>oll>VVwP6C9zXFuEZ4S)$}CElO~K2>ZKSqA5n+$44ZZJjN;_}o87WsnD0x8oudH|
zxJ0?NqPmL32ndDA&DLY)VT_Rik7HDK_Y~Y?x%UdZCO{vv`#62TGc-nBYy$2se94TY
zKDOl|P!daP?RiUbW-)2@PN4tXE3De^+=vUE^}jwZFp3B={f`@GrsMnDYW>>}JAJ<{
zOEvi3YOY}!?GpVtIS%>-+p!V`3fYioUqJT)Yx^vi?Xb_NrK5OBLmZXk9!~jxb+{o#
zIwf@Cb@E2kri~q?7R8SXzkVNIQ2`vy`*P1qB`T^@Ehzu-cXQ)U?1u`l@rzZvV}Oa(
zuoi9>r!SK7SVdYzMqiJf3kWVB?1bxyz2*|__35xyyUnS%SY9l7pNv|2)cN-ub~-!V
zrkQ@;8{d{p(CqNS1>|w3ob|Y%QuiASDP(~CY6`C~`zPc}DQs{?dQ4Lv3LOZ@dL5fE
z(C$ebus1>?T`?}Srpn38uV<SZE~0{*V$#>I+P*^cypZrl_4Qp&J2=#j#rwX6?%=do
z{@v-kj4GRWc4YjWN3UD*aQ?hrRn=^+$IoJTK(SG3Qj7C#wDSyZd$IX_xVUBR4g|~)
z@GJLyuNe&$3CnJ3Kup3M7NJDymHMFFG5h*k^68t@t*B;B8&^}%A>hslt(AR-Qc=Ev
zU56o*CSsEk&Rpg;9+V!XSpZ7XDO6HN^ovkMDB*)!>jp>lZQ4GZ07@T5A62#MWe_3l
z_r>ME*gk3!U@NNdgZs?2YR}H)8!E~GoZ|H^AFRFpDHN2sV3}|Am=Ar^Y0DiwsS@hd
z5fTW1mk57mK6l)+MYZFqHtW4cqunCF8G2WOEhQkg;59;NFdRzZaGs?B(Q6j6xi(7A
zb`?~0jMO-XNSc>zw7`7yw4+RGME@^e2#sI<ND#)~LK-zx_C%i$8q6u?fM0RmOn4x3
z7}XfnXfG66%wX|WU5iNoF1taOymc$PqE~)|tB@KtBGg7(8Dt3`VO&w-Oi1#s<?F|^
zVeyZcTaFiC!XA1Z0!*fGR*N&QiY^BwVEZGng<x;O`O)u;%kL_%E6Oe{)@6S@b>tF|
zpc=rw^`=&fBB^jPyWKr&tpHMBB^h+D1d%!k*|BCBy)byNQI&Q`Qiwm~MN|n)scC!U
zgHLFZqb~zz+?{KZAcCb&3m9?mo4AjSAj$h8Fbe|C(N3rMRenQ9>i1>B<2#U`EjGs+
zB_f9q5I<rk8%lI02{mo=#qO0W=}s>JP~N^jB^tV%D4XcM%1vkdMi|@HT|T3^z5ybN
zt2D8KrqlJ6?$)8d*67=EKpsj@;I-p#_81bGy?Yr!FTs#IG=UG46&wlO{8|!!(}E_K
z<frJx5q@0#XLTbLbPRpebwB_BJ|=D=_cgqcoawSsHi4Lj!nwOq;{%3nvA#1Y;E@)y
zO+*Y$W+DoO8q!YibYPXnV|HLtIp&lO8~~eL9@Zu413xZos!@RHX%mXAsjtMB{C8jq
zn}b@%+hA<Cl#XAK!Xl2l!;kf<!QA12)a!1Ib;5rLd8$e)c+^6gQyNWLH)?f=!ZJ_k
zn30p!8q_>gPBc=v>q&rcWa!o?i)!1<6i_jiP<7IO*K-TkliqAX5c!HMYOCLQTJ`a7
zSy%nHlZeh!M(ggzt)_LR+!=?B@zeg6hwOBssqoF>XXo-8ObU3y)1O;NS39<%6`A1_
zcPjOsIiPe({Wr>bv_xPgTx-6#4L%jUV@9<6M+Vn=ui<n`Kj^qj$hfya*rx{OF#S|d
zk;K9QFO=Yx$pH=ygg9<F-~08jVS;YWi@xJOB$k%qW_DwP==|-=od<4sFXHf+B7CKK
zOCUwLY)P15@*>~@v%ycM5O{kHE?*;eqf|WYAepZWH+A7g%ku=J>9<>h;Na#8@=-D1
z`oTstkBts%AtS^`;oREvpC9)jc=~6ipY_GwJH44*R>$YYqngQg7*2X?J%nkfeitv9
zFIXcZiqy}Ju@piKqLeebFoHu$k3^Dm$EDcF*@$DD)AD<l^p&^TF@H?PZ6MO<Z5oEM
zUdOREl5X3w#7FQdNG7%q4&ZmHQd*Cy3zs_L2{;J)&=LZ0gY`xlVRpNxyA@4I&##mC
z#Sz3qMn#|j!rbd|pUE4=eefVDqb6aI5pPmqV&4NNNr{+aip?Ti?#LGu`}FyJF$k<L
z0f~rEK!2K>#HbkksStJRwEoei<_#2uk0WNW%juB3H$oZn{i%EQo1+Mphx7LJEODkK
zvbNK_vDalEp82wtTp|N&gnX@YJ6_yK%C*&XOVc=d?@AXGe*+=301ZgHs4^(#v(o|2
zI#bwBPuu^5!XZMjO~;?ZB`*Yb8lhc~S<s$r%-Sy>HxWJ<Gr(&&do5~h5T)ky!KBMs
zR*IFd=P}@+mcI%Qa-T}1D|u*ZrKr6@e*+rSnAaLDG>(T%*`*`P^lauCoI~r_o|E9S
z2UT}K+Iw~7%AYL!6=Oteytn7{IKjLgo|fn87QCN|1VGc#b9KQd@iMl@$MbG$d0tLf
zd1iN5)}QyD5X@h$uMe~LdbZDT>@xDcGmsX5hCukG?QyVPtGiL!bu(TJlEwYJKmS7a
z>OJr9z)LM#jMNVg*vo_O1Ex!{=(z&Hp7jDoamk0rac2hY=7MP+4Hs2&tsOix8604W
z<i=7bzuF8nVYObXdR8{kEPEafVmYypczc+pJ5hVrK3m1rhYKhuUf}U=^pkiZpO2Pq
z`wQ8BD4LB5Z5B%I@I^aeyQC4O0nrQx%I<KhFb|z^_HIN7q(y0PV9`XyDq;iwSb5qO
z25#Wf_rMDme2iT@yM2%3;^_&y@eu!8KUJnyQMl|1pLrd<sHpBNk?r>E*wT1N7$E{W
zdJG6pp#ocR0dZtR#K}52csM#4lAIt(BG4H9@-GrGoCqseZR(NaX&5^xJWkf0`K`;m
z07OWL@hs>5ErW?QD&R#E!cZ?c^nlu#O5U~aR2LyHOWa%;I$DvoT+T1d%`dDI%15^n
zPn-_EXzKYUqY2)u3eICUDz}VefQgsf$}4+aQ}qj9%CIBJFMk0hGTN+GA(UP2#;ZGx
z;;>7-<*n5I-+Js}`@{^aebL|wM~&{5Yx=ioy&RKFHV3)+;fDE)5)f~N&B#C`JOh|H
z%)fFlJ@`rV7@bfP=r4jS4kNri*dbJ7N?kFDppr-ndH7w9h<wOkPFNL4h-~EMwX8p>
zpg7u=6rAOJ`^N(^aN$;i+_61OBqs~?7K?Cq3o%R*_zpH7fe;{ZF}yc;HSKrT8TOye
z1#cC-X2&1xIvk%*IFx&h&<j^G#Lu;kI}t7zJ^7279xV~e?(=VWf`PLREc=QKQVQLa
zd;ZS_nAX+uHwD84X{PPVbM@l(UI;d0oLcR7^;lWY&J5I*-Tu8U_aZxCdW)CkA{-_>
zkp^E-|CV|LYV}U)NtgJko^#nl<j=#!c~dmDY5cs5(wa&J4d*jq_*4$;=4%!ckGMvL
zL3Pod=Ptu)q;^oi<TeYG;}q0Q-(-{!XGJ{d|0&b5s>3>p*)|DnU{ue{_`0BWkVnIl
z=Col}22Zx`VNIFg%M@7)?XbERSj_#?yPiS4*u>{zgGPic%9$5=ds4xy6#1pA6-WFs
z;MAlT%fLJ?dLt?(!s+^ms7v1=<+5c_4|7kj&-x`y$&o_pw}a0_#TQW{Ivzqtr{HBp
z_$-pN`N_y3Dyxc|iLx`qhOvD8w%X}G_h;(SEdNw>iqD7RTAFjeFZ0z~@i61qazQ*s
zuikX}0*2hh^Qn0FQ4jxX{!le*8<*XZ>!7jm1wu#t99r!(|1bG!)5V8FcR|Kq8>kUy
z&;h3gAEwMQOcW7iKG{R_RU~ORV<MRIw{qn`DR`;Ri(0jRm5Xsry^IwIT>g6JQg)u7
zj6MoQ6kOgddCvu?_}xZ5)_8S&QMhEw(W47nT(<OC5teqgH*+;LdzfX#9efYLjKyzX
zYwhhC!xQLLJetFumB!zd=C?rp3wZ4?W(WQ-Gr&Qt07IN&Nr-0FN?W+=HjU5?Suj$;
zp#&8f7~imxC8BI*i4(3`Xm^;I`7q$1Gyo~Vr^W9p=pnHtk5o=pSOS}yDtPB#^ws^&
zinthRioBw?D0tX7WCPYvfsNp%1?F9p_ZixcV^|p<XSa#|rcN#R6`ukxHI#dS0njth
zs`5FsZxY2zFoack1O!pWmTcz>j<ms%##mo4BSHuYVdN&%nJej&6foF@o+ef(n@GM#
z-%H<6)WpPcgN`=Q5;TFgv#`~ukRzajM`DF%XpBtCSXLBhh1)8?-)9-MNBh8onf@1Z
zWgSI2<tI;zk^+(`dRR*3NS;jhM;?2FLc&`liaDct!fsJ#(dz#Izu}CsM+)_hzZn#2
zU4iM>qh{tPk7`v0p;o$=0!_V=jy)o-uqeS)Q_AK|gVv^)>_icmKH3)(;6j95&Yh98
zyRq=F*krMob(<r|D;0AE5Rm<xx7LGzo7`-1U!Mx&6o@VL?xzFw6*I)j7Iz@77OU1H
zUak`LtxV$iuM&i}IIo^?d<a65LQd50-%77dGd@bV$IHN_TrU7iOh6UV?V4TNDv`Ib
zv3iuFwGw8o(K1veu!Sp<2<3XmvY5QfCMa=|$?vBmcZ6<RRyqoGULaU&AZ#811uPcR
zk1J)iBNc4+*Pm&d)*?M$x4X6ogc@P+5&Do^b%KoopkNwOiaNOG1(3!2i(TCMI_dKV
zFd%|BdQmKIHZpL`pSo}mPJX;>6UN6iQTnvFD?Xd$Rpt$$UMF%kx5Hyq>)m0y`et^u
z%?qE$hwU58JC*FdxPVYj6V8{R69Ub00gIk?u}GsOA7@_=Ck#_IwoUXF5d-OvEd=SQ
zo3DY5`Jyn*TYEHdC;|z&y1@%vHpr?);>|d@9FO&I4t~1H3Q<Q`8!_tQeK;S&;9ueB
zLwhMQxTAZ;a@e$`KqF3kI%m93OX?$CI1C|qoYJu(o9)H|WBw%{L6@O890l}tu!63L
zE+B}?XVA0}PZhM!+WCK1$$nFC4&4!FLM=*C7lR4hX)=n{QY9(apz~3p8{1*YuGeU_
zm`ToV*rN8Pn5GH9<>fKmvXWpuvV>3F=9ZOhr=R27yqpG)Hfry5658u`IVh82hpH!b
zQ*2B)UA_U8r9_|W`o;Hp|C_#lAC=6I9I4y)R!V)LAr(TiC`+$UJBT(-G0|E~T{B6_
zlC*GwjBo*^wr1fhvuS&vXK)qiqOXl%K<;AaooH@7OURrxG|S+U<f4`HzdhLD^PE$6
zeC|RMr^es@`d9X>|4Z%cZ^N2r3iJsBZ8}G*!QO|^o$B0&Due6Urdu4%%=3Z%IMm85
z+`sid6&_lzpPjl8H2b$SqXZLag{No}iihJVhxQ7_NCT~j2vUOz#VQ#Md-audj6Lve
zjAxs$ef_N6cM(wBtfQ0Ua<mKytn&o-Ucv@~&O>Ga0_@y0p7r1pdN1F!4+po<*UKaf
zdHp7^<3z?L%<$c!-+B}b%fg(+Bong|s|4HnU5A8LV)8;wy(J@q!{!i60q$+!i^5J8
zZd7e-w|t^PLfG1K-ZGQsTSP1&;r_QcA@?r~eT;w7|C*_IE#yNDCD_Pjfi=`IODP!W
z1&-pUAdV&UfV$gt&$g#2$jff18w$`N>*;oDZDn7;wP&7IPun?i{#t^Msk2}%Rc7w$
z9{?+*5ls@u+n-n;KTye(Dfdf#jT<t%p3G!9f39>7*Z+Fj?1{_uHK%%ge2Xks4*l?a
ze4DwO>iS&KveC-wZ3T%Ktzvr4K8Z!G;ah(qTwn5+>*{hC?FeqI-Q_)5HftrAZ7~Yo
za@Na5xz=QLc%0i%Z}Dj(E?wwLt1NM!`r;fWHAOgOuG3ZKDSoCA=4wz}qw0>dmog^=
zmQg_W5!2(SbPr2~Q}mS!BY`Y00_VSkJ*>x9oSC;#wO(ID2>={K^{$+qNu(S%C&DD(
zHCwS<rJMjEdR1YkXQ-YzsKQA(gWH<il(~s537EC!TY)23c0LF6TlDE#L}$Im@0p6U
z#NSfW-IT}Yk6AsavK@0Z9}KUckPQy*%CP&CEPABQWDbyfL<S$VmSia>im*(~OH1_|
zEuXL5`;7l-ubij&ZZh~v?~QD5PVg>8P~B-y(%E{%ADgLmg=`i|QmhpAG-1FJeLCLr
zn_$;@ZuYufFA-f+eyX);_aHzH#U~ekA`pW^z!!Q%I8HDYr!R;-nNFC(m`SKsuPt~A
z_}P1nxmLg@4?;Pn5mO%$AT9H;APt|v#z1(G2;^!M-{<$Fy<y?d@=!V*L5BToYH?|S
zZIY>*Y!JC4RPeM#q|_V~ApdLC9x!rWml@`q1Rm&t+)Wa}Y+I@6V#-0l?K#ol?rqx5
zr@75&`gfA~(4%qaR(q7-<@aWuU6kRL9>Gr2&gfJ2o5@U;l$^Vrdb#!SRkpQ8&xel&
zAt^KqC4^duAH0`FL?)^~Jmhe`=77)#jl`~x1`bs_+N@;N#ID(*F<iS&0u+p?e}Mw_
zl+Y53!0)}LlGgNtga`$Y^FC}c&PICqE8|zxON--?_4O`X+t_sWH6i2AWN1a;nI;Ds
zw`P%kIj}XmCS}1I%|LUSB^T>R<?JJCa4Uj}!}rVKO)l(RL6V4VM$VM<@giJvw{bJq
zUz+1JG#cV;JUZmv+=`Ezd5dqOOWCI|*E6F%J{43fEwU>c*X{&s?uVK_Br?=9c%&on
z5XDb~oVO^N6pQbsdb}$w{cO=xja;om&0eklUYWr`m5X~`;+rB>SwnX-<H{{~4toQ-
zm3CnJ>ZD%45fbF?X*aM9Y2zkJ;VtZnQdiXIyrrx%fiu&ijw&*EJ5LT>t~nPrPF|Na
zyR~^&)IZurHrsi<dUzYvv;4aCEjFIn`eqB-G}_3%<aY2NW^Ok{*sLi-H_+)I5iNae
ziYY;WjD)lAG+N>pmgDZ|SHy56F)~<1!%SG4Ps3+5BvLd*%cE;h#qJ^RDm}3LwAT@e
z^OBIqKK*Us)govN@{lbCiCiP8HE6H}RWaHVel`8>AB`%E0pgyafo@LX;Dg_|-T2y|
ze0@#j^?tx2XTak%TAvjQIYrk~18ZN8zG*sJyiVy^5P!Vn>RIEDUdFhw;YpZ3|6Lxr
zt*VGKBLf+;rJ#jIi8A3Ug^ggon$P!}3#2aMPnxBL>8S}~N8K-NtI?I)azw~W(hwcG
z+|0jrQVcsq9}`C*^m|Jo>-$1EJmZH0djj><UUAs7)eEc9#e-rq9{Ed^|1e^*>J<I%
z#})i_>ygf9n`Fc2t2^Ux=1Scdw0+c~svMKN_*Y8rqqH^RcJlh)BKlwW+$y~_4u|rg
zM`I|r(ly)XRa~T*tUw{Eo%mGMAr2YbuH7QF@ewZscplV@s-d)c<${gUg<*1toA7hd
zyI@_PDT&Q@JLzsvveC$H;OWd;D>W|D2JXmuwj3M8PvySwTUwktG)DM$N7uSfZYl;E
z(|RV)4|iy`OctMj5gBI|C6z&A9W1QLn-!HotqKrRo=n&hCXENuDCk~|P?<NUhLA}3
zJl~V{gD?R7b|36g!(fO&#RSXr#_p$9bbqf`@ig+XX(QIUB-Zm10EjTzY|Z<dNzop^
z>G8^-2;q#*3zo}Ru*1poG$mF-7>w)4Pe{STz?&a*>~t#7AN69!b=hTixJ#$v=c{8T
z^w0DUUcH*FMB~6f*F3PsQ`|lg(1t_5s~Ag4q~vL$6>B~aq+*I9cLy<8ya1u18vRwn
z%-G`sg#s~5%A&({-D;=m{fC}~=wZzv<r75|mr(T<FwFK_i7duhJhl(vt!A(UsU)#F
zP6po<MAFYk)u{~_3^Vv#p05pOi+u8-|AeaQK>pNG0|_8hD$ptXW0%OL;@7FeGP-5<
z(u>(A0zNau*@g#*!Ff}%J>)n(<Pd%2EZqQzSG$M&m3z(&QF=zM=fd%O&4Ig5v@QAl
z{eDifcER$VZ9=F$G;i>^yGN$4fnY%-TNHF{K#mB}yr@k7(ATI+G26T#3$eUnrtaoh
zQT%11Pm|Ag5M@n+LB$sf8J>7iEmq-d<jSensI|k}gEF(Y848pkY6|-WI=rgXz3e>0
zq0Qobtfe?S!fwO0X<uJTEf!e7)Kxpv7{gPY>tFi350`ap!|7<auqw@owqeFDx)pS*
zS_YN(o_fNaX&6z^_!mL}xzQ~wrc`i<9IxzVUfGH-nG&xoW3<bxsOUFo*E*S666WNd
zL#J*X2}EN!`d8Rx(3N)Y+-0sVEL=#w(C=PRtj+aYb$9}*)mVL(eA^<t%3}@kckY7f
z0cL^OBrU7lSwMls<y77|X^gNKOlQVW>RpDoMR;->XEN~`l;dwz*#V`8f(oK;$T@%Z
z-w%+FB1vOX7~?|Sx+Y|q`@~6Ohp4O|a4rd=9|B^f1!pF-0RoLP&yl%OE1u1UWT&O!
zDGT_+Kx=bYIULo7E?6WG-gqB}&NoK-h2+$uCd?tcR6a*RSm2fJ9@&A>R#|E1R8b~P
zM0!q%nO8z&8Rw<je${hX+?Gm@9MTXRnUCbuAC64h{Ez5U)#!W#yY{?>*MnV;MB3ZW
z`NOZYtzOO7%kXzIbWZNoFPBEC`qkf#mV0wOJpEkpy;plFkZPxhqkOkRyfy3E+ExaT
zMSDZH@{_qy0$N9vQzos>jn(GUNn{!!Vza9>{J#EyGKr?FKG%<xtP5Fx2K6tuoTW*j
zKY4a`ULG2bN<{&n*QovsT*XEb!8KAt)T+WH@7QN20DO`;#F=6;F(Vdn<ws-nUdg?k
zx+PJvB3VDk4(w%*9u!4MC8**K>}iP;KFLG}<?WWM7?48!_SO2GY543XPHFYEo6Cn_
z23=bY7eS7@7|K{aH^YCYRn~*d`r4WILL)z0f=SlDtZK0499A1{ryzFD79FYAW=v|O
zZxK4`S=H3x&IL%?Y9V8?K=*TVeB7$i5XkJ*71GG&#FRXWBv9BCf0OR29w3=60<9m!
zRuYIGxR?$o<?Pei>|vs0E70dl32psehRQ~9(M=Y4yn6dMtdzg5(eLHEDxhKjgS$v(
z{nAEfaj~{mSP;%cFJxfJHCJh`B70+@eN-?LXPb*0S$A=P8$YjUJBB;fiSVcGijS?>
z$!dL^J;6{c_KaG_9eZJRf1=l}uC&MR(tJ385T}=?|Nih6)z#Bs<4N^tI+}Dc{J!&n
z>G7oWd%HOWTDzXqaz=F5X*OOH`TW?5GMmzP+f6#z*!(z|8lPE_uia{9KBunA;xekZ
znOPA}bn}D6+%C)jCf6k^11xFeq;_(d)6^c)Nw!m>@j*M9k^r-H9k+$|iD8@8h4NCZ
zXa4+N6Pibc-XHxbK%S=z#;U9LvzSD04v5(|?Gn0MRrHOE&AIC@<HiWntH9we7<@jm
zoAN=_Z#pz82(Qr1NcHZx{!*-zi&SclIPCUjsCu07J*Yg}Aza)$s_u22tl{&!tYqV!
z!PM$Lt!e!(t7U-W=LZ$lg#gM4=@n`Hg$Y_iu};+ix*@!ngLiN@_}sRK1iJjzbV>J*
z-ci8+>n6&B$_6eXD5rqxMbHH!1?lSjx~xT+cR%~=6m3cE&3KUol9k_~&H_<h(9%Ib
zwPdKW9Yl*K!uobRpA#>06>A0sRTdZbkRmrKkcCfC8F-N0u`+!|@R;$MrmVdk1zqKA
z6YU@pS6jKfLzoAq2yf~ObK&~vt-Avb)75x5K8IoDdd<CTvl8#FnZRe4JKwW3O=2VM
z4d0{BS+I+np6%UE(lirZ>9ZR~_FE^kblZY3dMs~^Fw~KNgFZ7uY(W^<ljz%7?%((G
z8ez$|_!{Ax>sNi8B!r<NJK#mH3Iv!m6pVXNx!fZ!=HwQZ>PwGc>={NP5Kk&Y#k>zi
zWbYk}r`|-RQtDt}mu)wY8OAk<c2d?TtQ}p=#G2DA--=1E65Upwemw$S8lz#uwQF^;
zX#G3vu~kX7HX<rEV%pZ%WbVs(P1<jCSlLgD`J`+%Xz8%wZF4|y+#1BqUqH;yMmO51
zrC<_ow23t*^=$l$);jt@3ASBPgirI{9zLM&Ztn51yx1`Sg4r-TvFyq-ZPW~$+lzpM
zpLMTozDZFFL$AGvBiYPJIV#tuxvaWOwHN)W;1)~TS|~y)$V-~@F*VYsL>1xHvjbW!
zOglJn5r%yNKS>*n6+ZincH^V4bN!PH;tI`o{(JXg2UhOS$NNBTh3dEGKUmxO6x7yZ
zaM^|KzZ9EuvKR7SZm+NG_C8!hop+l_m93ZlqzEvdcLu$_8?FL%G9O?wNq)Z}M-PuM
zkVT<M)o=u6!ZA|IiEy6+4{qUz4<67S?0kK@C5&s|1Tua;7+MkyT?sy6<8;aE|BN&W
z+<Q1%&GlrJ;fbEU*e61!os|H};TSNajquV#J})Tv>-o6nc?u2;;nnQd*^-CI6mxD+
ziOM@7hp7^ato?AlRA8CAeI@3LJ?G!?!gufGraf<M?iCDv=2R$FHLpIuhcoXeB^(^q
zP7{=6n^$Cv)E1Cbvv7<JlL_^=Ww!~`c!Veb{=WPsX1iMNk9w_|u)W&FN$PR}j`YaJ
zQ`TzH6HGUG)2Io}?9vN}V@F<?S=|+QlV2}TCp)A+p>4@Z=3vME7r^(86(BIH{RhJT
zbTSVjDkxahBJdFejS?qrXk1-cAI(J3Tn_tXI9<{Dby{Gbw5=Fq%9qT$TNBv38&3Jz
z3x#5CYTGPU2L^I;h;EN^^E1~i(p$5eJ8rwnaawCR>}sE<DMjhxcSy+P7K|Z6-9<8X
zlK{lS8*$#s8B<&ilQ+)!%nmw)rPS{^)UxyBG675wdsC)<3+#=O_MJEdL@`NaIKkR`
zl#^j88*zl+5r}Z?WQijuoUG_rP3u5B6o6lCYHnIW?rS!4XnQkR?iM>0Hur9|tfk$*
z6m$qvL%*6Z%qRk2CM{U5V>IjLSb_rUFt!lg0%C7@0vaW(W|MAlITgU~F2$zJ4#Az+
z2A9TISto-+fr3^HxI56>l%Y4F&X3tY<Y>AvUgMKCZ9<jC%m?6^mxPY<Zcpi+wnO9T
zOeAgz0~Gs-G&>&DYGKyE>#La>*Fw{p5a4c^|Il<(C{%#}7(k>kP0)o!GkF`qbhAYi
zE)IfTrOG2yR3d}k?h=-gDw_g3F}1?R@~Sg{@mF1M`)Z`8QqA55wffInmRlorS?eR`
z*8y=ULleGc$5~FJT=-?%O%)-XtVT26lMk6w<H;p@F$gebN;vtoVvlG1ANo!wzHbC#
zreFWQhT{dFzeG=QKksnu6z|QI;&nQKort<OysOkqf5#UJ;Xx4bt5vv0I~tLE3AD+-
zk_BW822k=y5N?`Na()GfzvBQwlDMcz1Te=JiX_uvsFhCIHiGxgX%NE=Ye`uTG;hSb
zO~zHmgfA_N{Z+;fTM}!NiX>S*hNu$Q-!i=)5jW{!b=vn)BMQV(fDpMku2Q!uO{=Km
zF{h?W+Ql+OcsC2~k0gtCN6EP<c^vmR7AqggAB1X3=)-0u1L3D52#_YFCR$gV$4C+`
zb8m{%S|Pd@io4Yxo6liwZW6A3@F>YE;G&+#m+}-X1NKI3%nUX>{<>d~R&1J>XI+<g
zzb2B(k4ZKtM7C9V%eB%ZehD3C@+sAuJlaaQcAjs)dpS?7yFIK@98pnz2!b;_pn3mB
zrkHTDAc}UY3W>ix)~N)&Kw}w+`-;-W9sjTgxBNrjgL41P3r^+)u6R|%c=bZf7bBQV
zqXi%093~BiL6X9mAFT*RDN+ReN&5vBu!Ek6Pw>rb#r?7Rl6Ld*g3((+8lV`X{IL`1
z&&&6gB8$)-^zU}m|5tG&q!QxmNZgvXO4J90!*|V)|2~tDl0mJi;Fh)O?puw?JPtwY
z3iUEQ<qgU`fetlHl@%%=E+c{0bGnMkz9*ZhNPj1P@cjWNI@A7t0yYiF^4zs+<8*eA
zrY~MJb8gP!#WPv#kJ2`g(&mI=kH-Ft;dNX88T(_-r!zF<=X`9)&&igm|DQzq(7R8I
z^kHa754nQ%>3fG7pR#u-e%#)nQ8;w(&{UcrPCZP!OWivZmtVLrgLFV>eO=NY^{nEr
zartr*uH^p~-E0mBCQ^>iq!cB>5T#7{3fkOWWB3l6*r*Y-2>h6xL$L-)DuY9J4rMb>
zNi6f!okRH$==Jm6=olH4YU^Ha?4nt3^j#P!>xaDh$?(^D)=5T7(HkCeFRsFjp_8VM
z&T7;3TBpG&Hpbrpv^Uv8BAB5(^j0v(Ab7=LD3WXptGQxQf<nmDLv(Q8&}g2$Y{8nP
za~X}`Tj^?#_u=6Tc(`e(obJR4J5EF-jchY~_WZ#UR(<MiHpx0EtKEp9LSjv2O|^P+
zept3{a+@nZk^`-tsXK7W#N#7^wU|=`YjBTHt<^S$?-8ogjtL05&^<!&6f(IMdc$9c
z>*GKDQTXec00N(9)9E}*fF!64Ba}$BE<BP0PV{KchY}>)7``W<GcumfJ15QKEFJP{
zp|q2uz0T5sY`F3vjEkoQl=#2)2<2OZChIu!1P&>3CJuh7$#XqcOwL}><GChnXMZ=h
z{FIB6#}Dj3{(i^dBl3og!YvziOGtRFN!IAmSuOe`*t$0CF>(ZPwCd4)S=X+3V8@m%
z+I5)KmC46*#sA=eLK5Fswx5#te>HLr(2`?87_OU_bZ-wEJJ0r8+qP{RV`XhKuh+Jn
z>9uWJS=+`anM&PzYPvF+bLQY7=R1E_)xA;OzQ6XBZJE#c$6dLaLXMq5bLLC7MR_r-
zt@;-eZxNa57BidXV_z=*-YWTmn#QTMLi=HxPbpvQo^<vrkJqWjYw!4Ut0QXN{dYfn
zikiCI+Lui@^y(YW-}IID)Kb>1yKTEp?+M4ByyvdR#_wr+SZ7;@IS<ri;U@ETAl)ts
z@!P?IzC|E+H0qr}+^xjrrDX-Jl8!;<MCV>)ZZlePnWkj4*1^v_p0sW!E^U=|E7Urb
z;=hBKhN_7dYc=9tVVsXfaSN+#jV1cd)GS&IXZ+8t3={xCSPj5_i&ipQ;mk^2Ul;P!
zGhPtq?#iBa+-9>Mx6$_CGy6CERT;!Xl_lfjBkeZZnk1ft@^8q#2RZpRNh{J8^9)pN
z+gIwqf1p6Nefa0Mx87Ri-Ioh5P}}~eRzUB*@G>>VdT|A7+FT1i>&4mQ)Mm=LgDm`J
zpBzQnmomGi)eAkehP@ulQfopfVOumT&^1fau6hjV95o?^3uZB9Ja{WbaipL}FkObX
z)fPr^gkWrDM#HtJSesBR27VKki}`JtA5<G7Ka4c<fj>%9<#4^&7ZRyHdfz`>{T2O(
z$H~=@avabVQ8gStFK2VMN!nG<>WXAc{LC!Ij0Yd4DCPxiGd&t^p=>2x3jAiB$0|sz
zL=h~m<Be`0b!o}t81=7_`KpR`;Q)#kNk3zlc)@ij#j6=FIx<CZAx%fqk?zUbOplH>
zrFbPhG@$+bCciIe#Fx<{uGZHh?(iJaE^FECkXhD@!D?zdC?zb`I_5*WDnvR5Ncx?E
zS(_P86;l+u1>MDTS(VhjMzKpU4a|&&FHx~Jq1YGrOHtn18Hy^uvdL*{s;YFVD;V`8
z?OG*0POzk36wG4Gc&d*Tc_AS|+f0v!|7e`#=hp>(``okWn(T7OuWqXPkXkN|K;fn!
zqe;#&89-)zbM^QT07?nln8ng*RJ;rT6_NB8uV$QInDOAQ6vZV4{TkC{<VG09B?R-V
zVKOlKSb*Au-ZBBL_Hv91v*MuY1%P3sxK!XTuc^Jm^<qC2q&76yj)`>bAm<M!!s8p8
zdc02Oli1nMGbl;B>Kr_pqouHJ!TijO2REcB_6qtLqA6E5g4zT-5ctbb7RUq4c78zm
zOmpQJ9sMBAbL9ETaSJjxGo1l<(I4b>Bl-Z3zu~;cdS0~Fyn1}ycnp~zojaKx9p#a(
zP0)PZ&^z;;SCHSvjP*1emmIbD>$IlcCGUjDY|Hfz#l0ui>`bSr{-L?|bP47sX0ZM#
ziammUh3PWf2*ZqGw_u*u42@9;wF$lcz+alO*86ekoY~oA6adUK{-ca`l6KXVNav{8
zUt7&MzcAxLB}K7b(9beG8cskuIj5QeYT+VJ`#>pz-Ax30BTw^$qa=njch?nIpB1@x
z+8Fp<s5l3U5##oF+Fi_tfdn8713{3q#@~OVU&8rv7%~oPtv&1iud|j09ApPs=0yV1
zP{k}!bk+Su1F{mqFi24|9Fvp8a^0KX-kca)L~>H+q$y~Iy5rQ@drNZJG2<Nnl8c*S
zXw(ZIG<Zoa(^v%$000000RR910wWS3Vo-=*4?Oh%83+IX0002Q@DVNm0002h0aE$;
zB>mM11PF5g000R90ssI20001Z+GAj3U|`Sr$HTzDsrF0dp93cgPy`jc1psNe1qA?j
z+G6fuNMV2i##ewk=^<Q?7>ok&N%G}KZQHipZfe`MZQHhO+qP|MSsT-nTWj$?(M)*0
z8Hw>ah)GfxnW?LNgLZNo?NtQ~(X}x_w?-UO1@WXeimKkI!M?m|Gsc^6NX74a(st@d
zjj0@MqCQlT8n}Md0$r%A#N~J=jAz--^h8a6D|C^=NGRuV#HPm>n+Hc^6ir~e7nayr
zIHIHBsWe128-@J|am06nV@s(52Fj_gCI8zm+fhf3AiJ%It(-HlKR@!a%ti^>UyFO*
zXne@2HhXVPSyVSAJx|BPM9GO7+~YC{kGd?oNdT4gKopYt=*spAwFooSPOq&w8dBft
zPlLIxUmByD`;WTml~`dupoJcSWNa@n=aAYL4&_;9r_@wgPvHGc!bX;`12Bj6QBnzm
zq!()2TfFmdNT^0}-ot2bhGCVjAG(`<SZs!3tdvAI-!S&4#sCu@GbAgD=qsp1Wt4|r
zTywcuhx+OY*7HrvvcJC>hY6-H`q=FlYaj6cOz2_8poKpMGD#fN3%S4jI3lyLz;_rm
zS+119D9X7i(=xYLe_6Eg4?qnQ2UB!0zF9`TLmJHR#Y9V001c_6N`v(3CF-cxtlvd?
z-5t~AF}CU&XhF@m|AO34LC#r3Mq|FDMj^-7oaoy*`co|`Lj|cPHK#(~`btr)|BbmE
zyIk68$m8DoUtGRiwtmHI<)Q}^Sx58Ueb3cjn5kcd%*ovR6LaJ;^eZ*V^LU?2Sze)C
z-}CbqX6IKfJ4pQnK?&&00001Z+C9MoY$Z_u0KjkCw%7Y`wyof7+qP}nwr$(CT?I9w
z&Ikm8PNi1~t_m9qpNocw_2QJcm3W5uocOy$D)CEdNZLt`O1?`gNsmYiWZh(s<zo3%
zd5%J=Fe+*(1}k<dHOjLpv1*j+nL4H(u0Eu3YT9T<Y4&N-wRUY+?M7|Bu8wYxUZtO?
zKd4VLgbZU1Hw}5lGR6+Z(Z(&td&a*em1&tN&)nF2*y6Jcwd7c<T1Q&1*hDtBZK3V0
z9oW}96plKMvrdDvwR5)fql<J6cO7<RxwY;_?q%-#o^qb8UY&QSccrh2ub*G<U*uos
zzZmErm>IYp)CRi*-v)C-%|hcs>q6hc_Hd_gzwnIkrtq0aBC;m(A=);2Fy@VA#0SJL
zC#od2CoU$NCv#Ios()&K>SXFl>O(4za1k+rC%O}}h*iXK;u-OWC?cnlYbYhvofgvb
z=+BIq>BKx@UF;<GD`({vak;#X5Al$%%eUqS@zYAq0}9{=9H<LggTY`LSOj*0)8G;K
z1qILqldu|W0ei!-a0%Q7&%vkgJ1js}6i1a&Q`7^ELJQFrbO2pPFHstnVK1g}E!++d
zz|-+cd;nj<FL7EKVHrmmwoLUht%?C@Q;-1w0RR91?f{Pf764WN1pom6000004gdfG
z00I&K1^@wg+EtD<Rzv|11PgaU;vW&=E(z{#8P2-<Zpvvm1!tpx)i-Y40}K+Thpyfs
z;0fw^7ZX<hc{k$}>v>OGzqc*#W0KE$-f#b_o{w|KH@jrWQX@}{2vLdzEHKBs5^zXH
ziI5~@bxfLfX3VxpDgigms{&Spj3Keg`VVI8WO&nxS|DH4{WR_op+u5bcOUSAf|HCh
z*}a=*kySREzpQp3O*fHbR<dj`t5i_DekH5DI}KT7M2|R4dhu>2O@WX$%NfV)vd;y#
z`e|fl?gun&G&BHs+GAj50E7Qo3@Hp)001f<0nq?>+S<UQy@5fSVG|=OlQzS4#*3?4
z<1H9Cw6`<8J}@mC%wnEc9%H2pVzHDZc$>+BSgdIwj`}h{7Q-esK6ao93a+)8fQsea
z20##s!f<G5OehE)ZomjM_PPNhV1m}T0i$SG#8Dgp@85j6k8|A8AFWE?v^x3)yH;n9
yMs5iz1S5|XGBmhhfHyQCL50amEn8Nm54@Fdf(9=Ph~$E!0dZF42QG(3vH$>W{#BCz

diff --git a/static/fonts/roboto-v18-latin-100.woff2 b/static/fonts/roboto-v18-latin-100.woff2
deleted file mode 100644
index d19e7b3256edb5912a26632d4ddcbfcd0df44d93..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15316
zcmV;_J1fL@Pew8T0RR9106WwG5&!@I0FK}Q06TF20RR9100000000000000000000
z0000QWE+`49D_;*U;u_p2uKNoJP`~Ef!_du#&ZjUUH}q-cmXy7Bm;*w1Rw>1cn2U1
zfnyuLe-&(8WrmFd40vvj+5+XaBj7w(k^JCCBN4*J0YITo$o~JBAjgO?wHv_u)e;Mf
zbW}p8SjG!KWQqd<Az<t!ccNac6zlb(gY~5X$zcE4e?E5R_*X$dI8@CUbFSIGQ^6x0
zZgB7mvab9)Co<4Rtf>9&o&oOUh=iR#kEgx=lT;qu<J<x4D4lx-rvsHCn%j?%6p;x6
zW<U!!7*(T7B6<jn9yNNTBWqNR3SkyiDv{ch#q;p{d+68EeWL`b5lK=T*U6%i8|44}
z_SJrU_DuH>JmOvcc!)}Eosg+0b;3mWM7kJre(%&8k8D{|lz1{}&D-kV>kaJzYJhM6
zoyUC$pWnBpp}9mBI5hjBH+86IuShdRQWd6_LQ4O0chbd}G{FJ-k93x^f`b`>olEtA
zZ3tkcHAcq<1z0eRbnawd(WV2U>Z^n$``|eV%T2#{n)L01zZZe%?0g$xc}T;uZE;hM
zV;HsPF=|)#%3<V?cE_2vNgLi#YUsXm4^W&3<xw7ClXPeYJ@2;9Y=p)v#gOCU=Ktv|
z+Zk!KCx^Xz*sTw+3KY%dibgMK)1^yMjsD2i2<(+?FUej&pMB)@p*N`AfCES!c4!?T
zbb$`=^;qVmOJ1Kgb&XK8ZFqp6YjrQ6*0)_kEVQc;v5!kLZ(O_-=#;v65%FX(P$?Dv
zKUMSFcL5Q$$c5#BWUFW#n{FV=DOPSum(l~h0|FqA4@oCdPFgyoFf*b}45&2;=O1FK
zQk7EK{NHsS{=fE4y<A#5&^1D>aKvSNoS^iV?sg&+#WAR;R(*{8!e*kY3~Y>DPhg<M
z*yR2n)J0L-K*BULHN8-|(%gBCCo>XF(-gwP$VgX|`f7)Grexxi>8_z4mu%M1w=?Cv
zGgQ;Yz_VmG3O_S|U;+RD0AVnWG29`3(jbi*A)PuQ-MS%t`XCcbfJ`z4vfL`zKJOq1
z2EYR#f&d^$BLslMk~?z8oz?Up?W2RdT_Nq`z3p5e?Nh9L-63rx0Qe}BbMmp??hxye
z!XP6CFizjlnB}+Q{mR`|+iJ_>f^1E#zb!O!k**YVf%aZys!LbiDqXFsZ(FM|HL<hT
zazdw2=e37TsNZZF2-vpT7D^ypXia_k8@boQ`K@(!bdw78LqTHT;*lD|kP%}hELgH(
z%Z@!q&Rn>0=Rqk*h;WgjM2nLkNwQSwW}0P=x%S!bfP)S>?1-a|Iqrm$&b#2EOD?-%
zz@Q<+9(&@cXP$fE?EqB2i(?j$oXNP5aHH-9A0g7*#*rv&B)Hp{7*NblL4=H7)&%50
zprRBkT5NV)wk2j?Qg)@P{!?;bcG%3bAlV-S2OM<BVMmgiS#!&6cieR^>Cb@ygN6)y
z;;Cnzdy%}%zE@s*lf2EYcPB`41~x;QdrJa=&J>_HW|ng{x#W;rR^6aLb`Zl+<;~~5
z!9r$1Tv{b(OzFI%mOR!Ob$!8^kRl{L886};Cm&^!f)LNalpt~876wH=bF!|u>YD5A
zWf(-bBXO=u1Y}nrC<TihiW{cHqnSizkvZlj{n<5O(2(KwTmd;0NGVvXDf$f<G-S9m
zA&5`{YsthIqU-Pko_glF7wsvcM3I<no&`fWIdtf70Is>-o-2f0xQOiNV8kayGOi~n
zJcVbTdohKa*9oICBq3jBRar0OXPZ}kvZ{`-pnUEf?L#_OP6RmlDA$%CuO$mX{iC=n
zNQgyPs{f19)N9GK&J^m)fC=e0Kkp&4LWBh2!($I5px&4<(WPnLk~ok4lucJx>^Ay<
z?%vAm!#VreOLJ2Q9{B~Le|pBn$@!A76!&;7z<&2`Kv%{0znu>N^w&Hv<vTO4qqFVe
zXfw<g)7{4Dl0|ZVYb@UD>-rVM!Y=xa+&>!b@2x75JxVUDk!i&7_p^KYc0Ob;TQ(^c
zUGU2Li%0tMDGUDJTTF4<bC^P6l8okKzPi}@$R2Tc>h4tknLxkHX43iZ7o{=D=>Q-i
zN@9iw_mO78JmdrRFc103Vs`H7!I04S2w#`8=9=&L<_Fl_htEZjcfpH)iamF@nVtLm
zQNWEaka(gRI$8^@859w;e}1`yK_>ZZXa7H2phfPk)&hX_70i%E1!r=8^#3x_{~t`#
zUU^#koE~AG$xs6ua)BmZRpnId0n7DKX0whL1Vx69es<U~{n+!;1deu%&B(HRm(8^L
z*Zc~f-@3hhd1#&*JU9HgY{>w?eS?U=B>y3dVT@$P7Mmk?5`F?`Q7UwW_<AD6&=<!@
zN&YA)(u_9IH#E~cMizXou+K0HkG&8(j#($e?9xg@8q#q(Jpvnx7DL30K#ZX%;IM$p
z5_L8pw#Ycb=LCl{+Fa1&iijIL?g;t8;15&4LM^WxmLr!@NYQ{0vtZ_!BX#T^kVu6s
z4S|Wq9ODHIvtc@8y<TFTc>@8QPLF+Lzay}te-k_AB+7Z0Ay-_-aYOk$H{HX~@2eRw
zjOFn*>4_Hz@ltGwB@QxTpiY9!7-Jw{rT|l*!3N9@%wZuAEQceu)FhQqT!{u!EtQa9
zG9;1+k%15kka&0!7nET8vBWa|v?E}X32e$XGTjX75=tzY#F7P>y)bo%VOTt2vBh=F
zi(yE%7|}=Pr8lS}*3{)-lRZwE#M)4KA27E&NZ~dVw1bYGFYl})({|leQ;pqZ4A@Ik
zy}XZ(ss#n9zb8@FUc%vM#xbXPxItt8-<?a4*(pvAR**f(bvN)dKR0hEBFYAUfWvnH
zLEw6{a#-jq3WI>P6crXY<l$K6X$-g7$`NIBsO7NG_HJFRBEkxbNH-6<3AO`GO>DMF
zF#-XSojky;J%%l|xM{U5V}ZYqx#C!Bjn&p!Z-b3C*=!5Z{^_lnRI9Pgc025}%WfDV
zqX&TK2l|Z~P*;y<0Ig(piFf6FeK|IdJAk1&A8!uWT~i721S1#q(0@?gEVn{(=mr2l
zZa#=vlN>R2H>I1`h>184MkgT4E&v?Kku(ADwOPjhdyhKfs^>nSVXupB9j!}sW#udF
zy4|;@?PdG1{e9c_cI~SA|35+GmS=5o%vsmG@KKfN<lybH-R6HNU2>dF>KVkz0H9B;
z?;kS>^8e$1TYuCAf}sWQWzE>r^&e|ED!PnJD#7+9kftu4yx#7#&$)@~-*@SD#Z}i_
zcSDa}H{EjE9e3T+XWWGL+2c*{(krjM@zzA|@BjcBz2_T3`1pu3Ie<3R&n#QnW4TST
z%Qo9<i=)aNbK3s0Gdi7h)zPwR_POqkbMCsQOTS@P-1k6_hn~4v_FSJAKIkv|Xq->J
zd+djw#{1=;mu3G=d@!1Kp-qHIM|-iiFgg6XpbCE=Obve|OuKwB78j;pzBCq=O=eo&
ziso3=s^(kMnikm1<`&w~jutz|IhIVqycbbe`o5*$hY6N3Vb4;S4CMf1b4#+CM-)-~
z`4vgp9o)V-Sx+JwM6!vU+SE@}O-W`{sOb|302l$#GlEGI#DS&wN0WLI$lDtaB<Aog
zz{f)nuy-DkIEJj^BW)RX($4tQNn?Jye}bxv-1K<v+=~oY_1#ausRLW}G56VQ%|ji6
zS61gn6@To_f5<Z2$kVi4T-FDAsIXE63uimW0q&qcj=3k1O2bc%$*=c0rpU8QFQy;N
zjtygJgS+!uO)Up&Qq@jjH|OH+GexLI<BLI7Aw_%OWY+0bB7wXutLiNA2xxnQ6(kd#
zjSUHT2q?nEK8q=7^1s|!HRBw4Onvy3nnCV{pH@Y2tVn;qv0M`}WXU<kjTt$2p-GXG
zY8Mqu4E=mJp@I(Q|9GE!A4ea(KZt@=M77UF;)l!OGl2bCM8Uv|i;hqTs1O^Bbs|2Y
zW2(U@2+M{B-Yo)t+optkX9{GPSY()2h%{3#^8|#{#wT2W0+b1OC<yu%AloH|`s5PF
zJ-3-q{a(N~N5V6ak#eS&@dTpPIa!s-Ycdq0njRf(ZBV`UeNsfKHy?t=Wc22}w?|Jo
z$Y6`)Op}s%(AiYpSWSB4iN5(V%%vYpyZV|;G?C7Ak;_nqbZKi<_{t76^kfeEHH}2?
zvoT|itC2C+hP?MQT&eLUsSp>F(f7s#^Yqf|T_RbSwPm0_oU%67)|yV7pcLIvNBuoL
z3@XN}qqXv?v$hR66;YhC8*_iS5O&<52%R=AQk?(CKWE<+A8-TrWAYl<7WA4Gnk``m
zV_BOTod~Rs4LxnsjOE--FMf)N9F!oaD!?Ki3j>+0E>xydW+b3kWc19UF>nsvw$QS$
z82S6-LUg~Oi954=3*XGgpl{C3m>kSv3XX?<M@Y=NXi>w*%B17djH}sR8^RKmpdhDx
zb$N+95;DK*T{aDSVK%d_nDw$n9`^hzE7>8udhJS^8f#ZCH*ae-Zi#HLG}J9&>*U=s
zlZv2>D53;fJ`b6A3$X~gJ|Y@>?SWB11!~%sUjpea^0HW?rJ4w5OeU6qIk0c<*O}V)
zO%;KvsKTnTn82s2>?0GPhPoq|Vs~B!feTLOuMI_IK2-|Jd5U2&H%^8<h3V>x(bg@D
zgf%9MW1XsrI*+DkFr;2HW{Hkom_8bOD)<5b7i+@Syo@L5|84c&tVA9(HG6LG3Z#Mo
zT-PXcc~vA3i{5Of@MlT<8QZcpmQlm$VkHU!S6$VNXv`n)l*}$z?XOnR@5s_$pfNmo
z`R_7|aj(5k|I_voi(RYQQ~Fr4tegfiC78M?v8~PI(6AM$uikFjsI<83v2c67$Z1C7
z!NaM;V%8w@P(bQ2?0S&ld6_1ozAqi2&g>X<sIj#TH<>uO3MbO<^`Yh^G;3RP$f%oS
zJ5HSDbgtNVfC{DIHK!taJwfF{ZCOv`usEJ%&o60IMmf__eAP#K4!a8vj8;5x(*pzL
zHdh6<(c1sS<;HEBLt>GIxgj+GOy{8hXVVVXDtf`2gd7zQ%fU{9?1&|v%jU`I&(j>S
zZSk6a$x}=*rnDBr$&;urUo9Zvkos@nu#eG@qGqju=9p1+xJ3BQ#ep#)u-LX}aXYaD
zF>)V68Zh`(4z{R1jX413lFAk{;{hMect%!$V=~=v%;5~ZO9vaoW)QJB4;ZOcR(lCL
z!B|0PortLseF(8&^kSSz35t&`{r-kdu$jHQz!ww{jEV680+~nF-CVvkbDLx(hZa$g
zm^-&)r`VeSL$DSAlY$n4n7{M-6nLCx(nQf@$1t8UiExoxp+m{*?kB%DHDd9t=I~Of
zZOdCwJz9SQ>2KD_b%v9Rq(Q2{R_>beyN9uoixi|N(gBmRi6s07GnGM#rYZ`m78_#%
zRnYrL&=ii6#@VN#Y*HuA%XIH9DPf2iuF7GJ0O!KTxg7s$<SFJ+kY4wOHs2&enQbO5
ztht}B=edv-_GGvLZmwf!uN{PT)iLLM;%yQ`xgn}$9O1$%=3U?@6XR6OKpj4xz!s~V
z=c|cK+W)B-$*GE#N41mL+Ch;-k;$n%nBxIaZbT6<>`(nEe#w6vzwdOkP|__erLOJA
z51SQpkJki!3w{d)wUpA-w1JNfUpQahp{A|Uztc0Fqi&a#Ch6UlW+A9`^O{b~4pVG{
z1qDtMwrEO&tLfUNNya?tE0%?ZQ9M|Nh&C=3iJpvtyz$lQseAdvn0+(C4j5UxQ#4T^
z2FjuXu#=`)X4fa~q8BmK=j8PN_OP3L+2qm|eX;*7zWV?XkIkTETyn1!IEk{VK;F6@
zkX@HLX_plZ=V?32w9--lzEuz+ew76yD;<i0Oob>a<bDA1&Lbj6^vbu|m)u&~RlQpT
z2#}TuYdo*un{DWqdEm6UCKkE2fs#OLF_OgQ2`2MYh^7>4G~JNxhRKS`SL`WiiwNa3
zYPgAi!AaHjI)|NBz0B0X>AFXjn%Sz}=A9e8+t)X4+gz_R6NE%Htr@f6ie#nZEzaew
zm2(kSjwEY#vp3PwkeijZfpAfJ@QF~dXt?9rpS=ktz^yY;Nmf=_>^6-n-BAog6iZ$%
zRyr;dM|DfMFlX2lS03t-lD&yE`SJ?o*tLIhq9Hyp^;PI8pt?j}Rc^$%gA^B(k*YN$
zJXJ0gSwt`#z9or#HzotpbAoGSXTa+Q?-r&6$Ee3+38ZTc6Q$^uQNaKV^n1#+s>m|}
z`VxgAK1SUjk%ROwh%F`DR7a#bkMYfUrfOETwKv4OWx;N>A77{+Y~ZHo5pTdc_BPd7
zlLgr#aS1&|0tFqd{jH92;4UU1#ej~lQ2SE+*dtS{ySll;(*pd)?Ic((ucsj<@{&0V
zOSnj1ypIGK-yk<;O*@{h{aSuP4@3|@1R#20z3`U^5KveLLh9SPY`1?cUFW;aIz{61
zCPGp9=?ChltXY{?Q6tMQGwNgL2si4}iJ%4%ij3!G@a@=ZpM637F_kOvD9ym{Dbz;(
z872xc+uKnC%dp4ZEOsd6{{ehF3{ew@DecT4YMRRt3jSXh0zMT{!pyNSb4st36mSbr
zm4#jX$_uqG@%|ULA9&F*2~shnA;xhAQO^MGZRNNs=ZJh3c1eiiIRiHUDg`2{1#YVI
zH_tynYr$|s=%GrE2-~!a1%n$wOu)!g-oL~~+C9q=m0(*kJ6uEEjp%Nt8`~HJ)&1m(
z;=#IjYiTdM*=6%ol!XPapH=~RxQ?y|(fyugXJZ63u8fghzG{x6xt|@LSL5rKQyYy6
z%ck|ouZp#E^iQz0^o#RAx%$UhSp>!TaJ}aa&#hh{*2XH4?c=+{vUTCVX*Slr@gB-v
zzLB;zzA@g%t7L9pZ*mf+&0RwmwHp1T%1UeqKFtr?otGE9#OYlyhd7FA>YbO%Zx|Z-
zG_gBgW9>=81vbumj6YX3{CHQy&(6Ei6i05LqVgbQ66@nr0t3v@epX)C#4N^W!;3!!
zX}{MXuBIz5I28@5dMZA(lCI-(NTwJR8nwYUO4`ak^+A!uolBXggg-c!lEi&bPaPB*
z<t&reC++Y=q>ao|PsKr1ry^$d^fTvRR;MT^PUJ$o1y0BTdn&&1P3DvQ>qqLnAA~=g
zAWq1_<Wt05%s)*nhYRjdIY^@<aIl2VfjN#eeiQ!NcW?cL*ux7vVw{q)IuAZclc#s&
z9@5_3lqbL5lz*s8H~Of(WBBn!YTAh>t!*PuE~3%_M6N~oVpCNNGLQrKDjtOMUo|i6
zBv#p1SUs<G27WGMeO>{B^V6Nxq(c+;cIdVtC!7LZP4TV)o7dA?S^B;&ANYE-kJttF
zuFkairnSC!fV*ATn$mT&JRG&|<<%Vw3J>13G>><b6wOtUA#ZP?qM<+FPZCHPyvgND
zE%Q|F$h}rK&T#uou60y66RCu(7S<WwJDECqe>~c~HOth4xK!QOSk+R$@V;$wvBoJ6
zvFs@nJq!f3ofs8G?Uw^1`!}iQ6CAdBBm83KgM+qUY0Xh?H74STyM;FbG333!U3n7}
zJ%eMLc9Oqvk6CeuM`dVRP>hr)l|<v)0`B1+RE=Re|IEIdJD=?gFCE1_2)LKlhHlw@
z+e_M?h296^w+32TKlNwju66cwtankQ+v8??UKUNYX5wBEON+@(zR0E-A@8-s#K1m`
z%ZJ!xx6dQ7fgcX;Lz5L=N)eKj{H$E}DEQ0^VlqC}JxZ4R`-XnVr7pyBAt=Cnvdqgd
zH|MvJn2>g`p!Gl_Wh8V}Wr6IpN(+F9{9j#B2EBJ>g2m+HlVKjxxaJBayW4K+sX1k_
zDWx^A7yv7p9zk}FRQeb<h5JR?52-(Qg*UmSdocr5jt#6R!ofB;h~C9*YaJVPdYOFn
z{2O<TkB*EOKZ+i08Dkw&3Zvg*&2=g9*>GEbo6Pu|;a>$#cXivO;pxwivq@glbBB$l
zat2O@tE&}Jn`c<;BucP|-p3xJ6H=5bnEUixUi)AF*rSF!Sr~Dz=82*vvAe89S^6U<
zCLF$3#7Y^XHx5w~!w$ZZ+M=TCg09A0Zl8?o`Z_mHAm@~IzH2Lvf7Mh?(J5>`Hj!Nf
zvZ?gLRjf!?HW<Ec=Y7tPybWa^y29^&Ey&-z_~ptvU>o0i^Ja!h>f&6j5A8yF;@kb{
zE7Mxz5H&Hq>T*HeZCF!pTlT%nC6y4{12jY}Z=Q3Wkwgy_cbCM|o#OE@ltje4rF?1N
z4^b2SfwcFMyJW=F{uF?S7z4EY_m$NO^MNYdro8y?OWZA3>v?nBwX@v(Mdnr3KEPRb
z&^fenQ4|{1gfeWWWu~3!A6E7vept+bcg61jL_|<oTnP*wK5XKBFhT^!@3+oLQ}c_j
zKvP>!d*S3PMLYlY-`%-KA8)+MmwnUc8rVdx=6i~2|AY^~U5JPX{>%Er2Yyx$GOaYH
z*$`Pi7_sEanXzEwY@+1{fE>{ipB{oC4ANe1ZJ?(1-K96??ir!vn9uylyPlYP=Y--C
zyD_o%yR~T<BsV`Wh+m$q52RmD#&6O|z)^qg9bi^;Z2fp+eDv%5DlAJlb!4fxnz%GP
zlB%gc7^Vo%(v|6{tgkT}->`sd`R0D+f!`c&mMK0AW_GOMIHTN|L=l5!uPVu}@~St7
z#_*1EFmrPQOqX?#LywbTf^7lA@O<K$YtZluQ1WG_um7+*JaW2V5$&dxU|;7RT=~fq
zNBHd+IuHe#8Aj&&PU=0BS<x&Ip@Cg*7GNT(JVIRBVW5~~pnyKEfrZKM2Wj69Ud>A=
zCS5l)c{elfiru9q%3?o@iR>E7d|{2U7iYD#m;NI6g=N@Yj6Iqt!InW1%;C>r8zxDx
zXA;F(Htj7RKD#_ikUtrx-<I3!Ip~q0-%bmVH?cIn^~pf?u5RoT@Z`QLQ6d$>gMg76
z$*LJ7Jp54o#s!rvh(>J-T!YFT*SIJ%iO7c+c#xdXH|CWMHdl&m@^Vt!(<O>MofG<G
zNpK0h0UGj$_8y1OvDhG;>}?0Qe7Kaus#hYutvE81v1tv)K)_aK7G#WMd1^=Pv{yDv
z*HaLvoBHT}-_Bl&1!&m$F51*a#na|x9A45J{&(?754z757}o$Of<S_ZbC+8%Y4I+N
z&tAuca%@k+)3~osy?b87SG3aEbKXfO<<Z6gn*0x>idUZ>{JDSp`N2f(`t*fra3PgM
z%xayY+P(LQOrak1h;s2R3Ekx;>Y4<g2m*D$w9gjZv-pI{f4h~wBBs}$$NRS#GrYWm
z+J+w<xs(|E3(tcOID4D$qIC=QPLxY5%6(%n%-by+g;X^OtY^N@O<3M%Y5jiD-K?kB
z(e)o?52A+vWoDE|t7!R1%DJH9F}XJpHz^$h$K44*-R>gJqliay%U^rlTFj*kbtN@3
z_3SD-Cn-A05vC;TAU@`2zuQh*9@iK8$os&M{c45Uq!^}ql0qTVsUh{1!_ep;7>4Q+
z%Ci%vM(^df$}p|U7k~uX+Uatgq+BXwH$L-atN`V`Z+xEqQ9<2oA54zIpf2af^beUe
zb!foBsQTBbORkEtUtWES=4=A<P;nw5x5+bK)|}O=7J)=SOOdaVUtntkIAi&I=i_4<
zsz;!aK|pH4RcFJ7DZF!JjHq=2`8z^Lpl2+Q=YPBq7l)mX4*Uh>@aOyeT8Lv=hz<A&
zW$VW}Z;(QQJ9k-^Z$-O&AcY2X?s3d1IKgnieKx{|sI$@%7(m$fx&>jI#aCc^6Q4w$
zKk*=;<I3A<JcIO0R>=-y;HxhPC2B&l3^Xm{4R&1Q{l5XX#~E-1>iEv4>xCl#2|jRn
zHbh4AO)3d_(T!*-PCR`X;~y}dQ`GRj9EWggPtCxU1)D2N=p@K8NaX1%c<W-`=2f??
zl|}#>uZ~bcYD-KIi~jTb$B1LdN5##EdpCkX%ik^nN~9S_jNi8kZ{Ra-cT8#|l3^pA
zpc__`MNG>ZNaaX8Lm;*H^x1Vck(_!+VNQ7@Qp8OJxeI^4kAOGti|<|>f=R(!kbt?F
zM{ocPF#GTTcqvlSa@W{sT|Ss8`Kg@yZ@1ra$xnls<V}usZLZq96Tc~c9IW2cf;6Ex
zeWLGS{n$gMiSwtBm}-GA1yJSY_L;9leB)OS?<f!;eCYhfc`kd-egbt6J`e;BubOCW
zGQZ=0C&aj=aNUAu{~~}Q65vd@W+}bL_)h2@Kl3LYHsh57f&2|v%h|PKUo|(5y7D)Q
z1bNgyevMD7Mk@s&2J38iC2T#zF^FVbWe6$+IZ$iEBWmXngH~*6Z`Z4(?hM>7MdsU{
zT$+!Fk0iSFJHPIKUB6ADTSP1t(@#!ZC=TH_l$%2?oeJfEqTw&<K@j*?un^`<r}7@W
zrInZ(*{!S_f87iUs_Qb-OUK%2CA@(f$}?X}=e^nY8B;CohGze!*5rnx<DABxe*f;i
z>Y`o$DFaP4(qL@=P*&rQ{lxm#&RE6o!MSM+XW1#qmc$uzb5dx}b8r97mEtnUGNR-)
zN=6R^_A8c#R|JYNh?uWG4{n@47$sw;Bk0n+YA${SU&p~QxGQhf;8c>708bM3OY<!J
z-ue0?#RgfsWoLA({XHSl2<2R&jeo=>HP?i5%SnoaV+1|YU0?p}eLeqqgA6Jb-?nwk
z=3q^gTuOBb+^?Utm>Wf$e6EFXR3#BE=ISmz2IunmuwIOvzP3lFaSZ)dl0K_@*zWho
zwFhJ!v-69RQX1xns&$RCxa7Rj457#{%;(hhJeACpw!mXb#2c?3qAYKFJ&~`wPP&Wc
zFUjB8P{-Fwlt%PSb{VUTVuXb3$+1>L6>>ZXzUk8{`dOu1B9xSZ!n`cp%F)@?3Xayk
zwr*jDrog@^BHTAFIZE7&!$9h>Vum@gxq`8tkSZ#W2>3q<b3F83fMXzkR-H6ocO!j9
zv?TrwTs^WxNPfBVH6>dj@?n(+#4Pqc(M(O-9JYa&w)C~tv9{Osg^d!pS{)F=2oAd8
z8LK#)wPh^M$~rdQ(mE~<SgYGPXsX%RYU$Y8t7_Og3EWG6Py$NGfZPqb$$(w{ryP*e
zh|jvkednQunzGL`bt@AqdoKrl;DC<_@Qw1be(s5uQ8+(YF=gJARkeluj1<(JjVw$9
z&D4Y~@j>1JSRZ>)O=}f4eYl|w$~HX+{h~P34rqkikv&bdEB=Z{!P_9&K|1l<7k?r%
zDSEO;@WiGTrqO(Wd`2;8u}0@juz6ylDg@Dz-4tyYe$~fsCSjKD-)193P2_4Cu;X_a
z$6xfS#7jB)S&q?`cCi|gB5DW^2KGQRVitIJq9uIal1_$B-Va~i!BWwl@0nHJhK;Li
zeW@22l@Z_@ogL|g!Djn-$7aRKGBY#7+F*7pC_Wi)byW=wg%Z2WmqkhOgi^{R04pc;
z7ngO9mjyXYX2d??*5-ty4c~z_?ilE6QR(x)QU<|Fqy-%u4r)N<T3N5YcBM9jPd47_
zUKrNa#oorn5oVZVg~hxp6}q|E4#j&omCJ@t)iubyX~0%`2cPfWAe*opUIWp{@UL9Y
zAaF$~M`o;aV>6X_Lv!Se=aQEVwr_38{@yxX+9HYuO~Z~>TU+**$0@@#07OJ#_g<gY
zxuNVF@=zV6@e&B=s~j&3?H~l$`p<fc={Zf{jbpV;98&6Zj7{5sHm0daKsmParLT;R
z7dguSt>oeP!PF!*(t?9h>A9x#mGtqLXWoo3KIhGdl*+D>M8Znv1nh}PesWC)p(iUu
zF?Fq}F{wVCEdhZg<0HBjcV{)>>Pv4<dZ)s|7d13$C6W9>+Ib@0=8MmH$|;5mqI|O>
z#Uf90UVmiiS-M@{^>$nE!S%owemYxP1@?b>aRK3PLj2ZacRoOqUXw;*y6_60Z$`%Z
z5q-<(xWHX~f#0T?*a^?qklghPJdV?T(TzhNU-{UNwR`yI571N2Im&*o-xk`wp=X}R
zkGm>EgJQdgKnI{(BV|4LT)}w{|Fq<8M4YD;pKh&`)wsR9=g(~IDC-3SscV#hhC&{A
zAwr(?Xp{FkvYem%b)GsD<m+;*!WXz)2x2$Z{s17s4bKz^HF_lye~=Nu2&)jQ#V{Y?
z@wi?%>Zi&Ufu($D<=d=HPK*$>t}|ov+rJP0a1ne@-^bRPGX3?r{IHj|l&5fO0N=U!
zZAz0%J=Af&GuUm%Jz^pZ_apsifG3}?{BwIjTm!K`w7z{MEbOwhf4@^TIam0E>YQG_
zYp7#LnrZ9vW3kI~S5Ve=Db`jf1-s{XTWj7rAsH$APlXVWk+I+1vOJmnI<^j~+Q}~@
zMWp3K5n49ZY8v=pB#>1SlV&_-(bRXL2nhuKlms}<{jmQt>f(T39@lL}XA}e6=p46{
zcSY;RmAj&3VuUv{RK2ETZlH`Z*Mk(VHt{_`D?apse`ZvKGf>t(2!=m+Onx7IKN{{9
z@i)*RW`+ygMU4r5fv7k9?e2&=-t;-U@sNgZ8Zq5BEi(NS265ayvkbY3^tkK3bqa$H
zpNxr&^^K)UTECS8ax4w%%3z_ws>bY8w1`iI&P~6Nlx%F&d|uK339!$$T6&+__pJq>
zp?%rG>*5eC0FNH``sv|d=u1IQi2+E^GQbUbYly}LvO8Opke4eP6X5&<6icx6k(i|V
zlGu`j`tXSO@27M5SdR=x2ha5QWUP0Fy`y_ZJnCXq8vj41_l-a40_ju2Qx%sAAB*F!
zS}$=a8m8cRL;9Yj-RE?-xG5Qwj`a#lhzWH_^QW}|7t}n=4QA&|z1^Ly)7d=l*xV4T
z?Qf)c`PWxM-6t{WFeS_5MP30$ojiXC6cs~N)WlswF}8+2FZw-w>@YvWeu{*Aq!yGy
zx+}}*JeOltXSH;ax6Sd#MCSP0qAcyyS>@QY&1I|-efM!bH&#?JmXl!?*=TcDC$#yN
zi;1_f3d+Zz&C4j!&)iqo=SP6Fx=(VhM?hAAUsPgQhU(O-SrT;h5@!*twrbT>D@cb`
z=3#^{#?Cx2%EHt;)DaG6hBI@(w<oGWb>lx0bD$k}N!L9QR;8}{Gs43z*d+l@2d86W
zr13giZO}beA9~)oV7A(1EXmgpFiEoC1{p?tkY*754L$t}*Z7xSSmd)h^DkPGycZP_
z0EX5O)GKM`i^~<PGPAzcfE&>(XcKcH_j<3cTPK&c!1{&&8?laA&E{{}`$FE74gxHT
z6UaMGI;nr=e+6dR1x}hJGs_;p7Oja46Qvw$&vq3MGwT7qG74)$wy;6iC~Oiob6W<~
z3&e>vjo~%P*WV&_Ev+pismhIE)7&f?_bjr)otRpbfeaA@8q1HIn8wjhE|h|C;RvKE
z{pCg0^X5|Dlu2vlNmU6hFN&&Z&GF=-5VlF|7cY8(P2oT4rz$KE(hpv2%8NV>J4ImH
ztQOMR3YV(Nqw*p@!fvVjT}8<BD^mIaNoz}<RAuXsX|@rxO^PmbDkA$I0wI9+EK#Oh
z&3}^Cmek%VtCeWJbN`1YNt|%b9)Yu8?RtCtRFMXO4Q4W<Fu-=a%IKu{Uum>T6e=L3
zbPeTz|CJ=B3;~kX7J^h|M|qL1aH?0t3J}fS33{DIm?=pJvR8%B|1ZpJ!T$q6L(Uy`
zE|G!3ySSj~X0#hEPKS++sogvG0_u>_pb1cC0JjwXZgf~&-}cx>qfGfm`M%2NDW!5^
z5!%B_+62M=oOcd|ylQrB9CgxaQVkp(z^z(5aB(_vwDRuZa2%n<?n#H$l<G>Klv@p}
z@Y-qwAa9#V%>-_NNucu5HEq6QFCW9sfo;9FI}*4Fkh6_8?P*U5e~F|PUU*H+nGdf4
z#XI%+j7e_}`|Ft=2{OVxKZpJ2l|PdbxD{?=Z<+~7p~q-t6GW$uBY|8p;yGQBIhSv>
zT|+$Xt7H6!aM*P?|ABvF?_;2a?u0K3fp^ASNX`$V9`6|O^q7*A!+vqhA^a%3;k;s9
z%-fhCoH~xqIl^?V`dR-FC6W0IyhI|=4T1x(l9#+$WUv8$6pkGE{P^<>g9yG^#BeGu
zQIsfNPeEJ!;TwFIIk+$uf4)L;7;A4yCXZ%2G#uPNL0SE0@4hPw?-sKd&P9+zSC7vk
zh-I>V7Xy?<0&5(FwnCw?!3Q3>pD)2f?lER#PGZUYD}J#cO(=RmlrPfILhef)s9RDu
zQY1%Zs(oH}p*98NeIr|$i4(?Mb1=Du4J<+sa14(bXYV}5bbdXfB3+Q3ual>k%hRjR
zf`hrg@OGoK^z^JxK;rYk^{5b3w()2G;b~uNe1h)q0|to8`o(AXT7QQuSR|MG>>~f(
z)Wvt1&#rXK%kO#;J-uGg6S=vkL4yn=s<86tvQCWX;3vi7HiA>G$lq0qup>$nXVF-q
z9L|=w9(`&*3#f6GulppJSIKGC;y&XipzxD8pAV4iO{Fo49tq#%4ttPKudoBa4im{J
z9e2%)-|N222&IU8qHIzyq*J=(<dZ@4O(?~eBM5Bo#b`hHb)hmfiaf4%_xO1$fN96~
z2X<Q+P+tLsP2W^Q0RDZfw76bpchp({hzbE3UiGaY5Zgd-Ctfn1$ZYZ_qujAv=D_<g
zZb&b6(^6<eAf2jH!*W~Q^^t;v3DYUDW}5WGz7<KR7^OC2_Qd4-VRKVKlYBhboprd0
z*yI5sly-Q+1P0_&FB-8Wauy6S9y_GjDX|qIZR<lBEMSO;ETW8&F5+Vv65)3m*Q91O
z4H}2aS&rA%x=D!kto{UA0apRw295+WYbhetq<Wd{4aL*23>Yx58VH5@&{stBG<g;p
z!DOGktAJ>N1_tJoo@bu!rDt8?2sZ<f9&$Vu<$c=Z<*TG(yJ`=xb<Nz^tdpEjdZj@1
zy$}e2bHj7N8Z1+nmp2{-G)OW|Bp!h?MJ20kp8rx&IpoO+d^`<gLyd$6xcKfVA#o#&
zQM1GkhjPokB|NEOGEX&Z*p@lY?*z{RG+_hZ9cdCro|>(i-0_!R_h<To)3-hXZ!wyT
zojpnM?d6_;R7@=^edZZDefyN=TYJpq6D8><gJd}HAjQ>=DIh(0rYZSZYx=zoY@$yw
zP?l_{-TjS%UobZV&sJZ&x`%%Cu+Hxfy!>_lzsqCK-AxmJz3F*kN}0`rW3?M^2NZax
zH~LfM>~P`-V}&`UR+p8Dx@CsCg`FBKgydO7M=%Pl98^u3O=rvbM;-Lb)r2?j24Zk@
zW$3F0c>N4Q%_&UI+M>2DRF^aj|If>x)$8&ax?CKZ`x|fow+7MeH2`2}s)?aw{$M1o
zP{k1uKkwfb5&;AN0Z~IgQa->iHYRkno-S~n^Wk>M5%PI}R~=)bLi3C-pbW<vd(qo5
zlU9=~#3rM%Q~HLHR84X-mR&CZz|i(%UO};?Dky056IIquixSY`tp|}b^CiM*0^UsC
z!E!cXPB>OWxG$HiB7NQ<jo$1&L3`Sftr+R}t`Mex#PM3VMDW5|-XTvM$<QUos>fSl
zZ+jYb)h!O&<JQ5;z<nsD?YV2;<|7u<&YVtgZYbb0uwbU3S(#cX9%LqveWe>is`nW?
zyoQeBMzp|cJP`uoHZh!}+!iIA{TyUxMol`-n+n+Y{hrBvsr(rm(8Dfnr`my_7+-!N
zko*HO9xi&7(c0@uG2%X_Ca2*rJ6KE*4Yivpp%A80s-+XJ&#g><95-1hRyaDBE6)|d
zq-^T*>nMv{DY2N|$rG{q;V}k5@q1aA;Z}#4p|ESZD=&1!1Pi|Wo!n-F&E3|9%I?vR
zLKf_7oa{<9Vi0S>>vCWI5qLab=5Kz!{eSte*|3gssG1a2mfv>vFjo0kKemtAS4l`4
z8#n35E>w6ZqggWOhm~ru6}U!nq;gjp{T(MlW*%MN1r1|;kO-{f`>MR#$KALu!Amib
zZY9*>I;C3D<*qc!8lT4Iw8owc2F0$S01w0x>3@O+&zHMX!P?zGw4`dPjdZ`tfsaV@
z)SLl(EY0ema2La*TzG^`Y*)4L&w2bQtNU;64L64!aWylC3KV>;4}rS_>Bh5lokU*8
zM(TDrM#pYP%)RyeTFhr9u3z#-lKg(*DMHEXan4Gni)x-eMia|2P9tE!uG|2?3aFW*
zpgBn#Xr$)L8!%sD;zmgs2sK3XiJ~=U@?|~ZP^vtNDf4|)T{QL9w}1wMGpMZND?JKR
zg93a-T$rKi@)Ouu3t4VZy$4lW738xLVNngND?r{zy%t@7O21LM>Y`Ny$Xdfoj0N%{
zJl;HAU|@^}XDuSmaHY>+o9xlpuL02$G_}NL(GyvG27TFrl7?c==NYB7b&tYqDK743
z|GodSpR}BaOU=;koZtLOZM<yln&*+X8!@m-HeggMvwb9}0|e7n3oau!`(a^~eG+8T
z%5E6VA;9&qQFq$xZ<7`R!Z2)_Q1Nu%g8}C?6f%^GRGXB>>-2lbnocOF^qm#w#q<*B
zTG~Z2B2;tzDMkna#x&X_{#xXEO#Ch@-E^xg!E*wnXn5fDK^azlF&1L)1s2qki;AU>
z3b_<QBg$jSOyKHusbM#`48;=bk@_FG{Y$z2?n%&Dx=n8(@DU$H^_?mlr$|O(3*Seh
z6HtG!T3u%|X=<iA>Ze{R;!{4s@0=Nt&Up}R5`E?RQ8dt)%=|1_J%*;6sGU|#dF;hh
z+@yFI3czVH18U~cJSb3`(t#z7KWz8w93TK#&k9Lt3<=WnwQ-OlPlLShoIxa_Oq@!B
z$7<81k)g+O2~?9{ekcljjJbt>KIh&OWgOGvlgXWT_GK;jqdS`OV-a>Z3|TK;Riv-B
z%O9iV-8j0Qd0fX@nV8RVMs`IZ^)$%Uc(lIX&^kc->^;{zp8L;Dhxgw5yYbB+dLG$_
z#qYLwLdssgi3wjA6H!t(F}Rw~-^V%C0rV_g*yRbY+Od_JDiT+zo=Ciz9i8m$;e1ZX
z-u(z-f9NY_7ITfgh$U9h+u32QK4cw9MBv2$a6*|MAr7DR0~~@F{OOmKpCdkSaK;FS
zG@h~z+|2>B&r|&VJ)UsFT(NfE94cF@Z;&&+`?8-VKz=q))?WC<`!zbCx@2j(e1!xW
zksM9fD3l07je&iJvE@#=C`EI6VkC0|y|yqG;7mx%>~bCjC!H;lFU>-;Bl09@I@!gI
zt2SZ~F%HJG8LpWM0HVz6RKNQDH9c?BO?h+6E_dcueL>^=u0pIA<!8U&?e9gsqWjKG
z-B~K}N8hQ~EU>s+T!41&vNZYGm?Z%K3sFH?R|Xi<31jl4YM~kIRuPiG9Bk=MfDh{w
zRl1r**6fZcg$`LS!}%i*A&@_N4v1U+F0<vjUaUmsZ#JOJ5tWZ9aC-VuNj&Uac>&A*
z?vuFzITMd{I$!lajBK#?_d|_%d4w@6qu^X`EgCThZ|o{w)A52CBF!frOU|QeYF_l)
zC}V_h5=W_;e1=5ALE#C#95JWD*_j4-FI9@hnDr^g=y8Wk7j_uwCTt925HJu1j!hd6
zMU^Q9OVkN#-7Qu2#(U|u=hg9N<t2`-^bw=jhdP!7PAZqPkH=k*o*G0|mmmqFt`E$O
z5UjCV8FsfQsg*=(u*QnbyZgcW2y_E#uO8ZIBZyGddJ3u7SNbQmBJukIlc|L1TM+hs
z2#zrv6}#%4_X6$dCbm<hFzWN0JzqB8LVRlsF|9X~|KJ>8Z1c%}a-aN4nk6rEmNTQD
zt-;T;znxBc9<~f(4?P~o{-FGllJxFbRf4b9G9kt|saS(^slhmH+#5=FmrYpPu{ttq
z>BLudJVt!Nc`64ow~}m`j>78v-<~*H<(5M8j3m`Oe8b0)ziT{z%H$t$5iR97x|U<Q
z(n=)nXrVie&dwfcefL8a7S~P-C}Hdvx(c><z@AGr_DNSFV(a8S3l;QoVtl+Ro1}-u
z<XFiy!Gc{L$mwG}(en9_Ev><yl^@$g_q8z84n8F%R2qi*RQ{Lvgy+lmr?s_%!}8$U
zjkJgRGj}7A^lIEYtL2Q0WcO5erNIo?h{O}&UkO3~YiG|TwYlK><|=QnPMj2wMjQqs
zq0>~c8v%Yz+fRBj3L+iF%ATOAOhj_u=cP=Ubf#{B?Y;yz)xdJ@hVKXSO`oUMZZY(4
z-zFje9C49cp-CfYh<@HhKJ}h7Y31OyhLL#Rj6UYnsx=AX9`A{50zwbxd1%y$nS6|3
zUgE}e2gA-o>$-AWLBe5^LpeBy{<XM9db#B;+LRKb#3`Ypd&l5nWQ~hEs5E^YlvqQS
z=Do5_9#}?vp$}iEIUN9S!Wzx@MVSHEAyVx%MHTSSBUKgyglcb>6`!I-%O3yY+|^Dx
zr6>acRK^~3Ftyu1JRb8=f1LWKe{g^N`;-W2YV)uxmpC0BIa(LHV|f!QGn1s)FS-}b
z3Pm`d#&h8<e1p>-aA)zbVzLXr3v7xJE!C{ZJtm$%i>h`U;kH1CUiF<yS>(C{OKfxX
zVseQ+gJtRB;kCcS<xv-t?pE6J6$gBK+?T+wlnc1b?KsX?7}?8)%evs?f_SMa8Ui2q
z7zeqT)#WPg`|DW?$Sais8RIn>nY%t2TFEr_sIRn^%}bo(a`}N<t7dqax!lTBukM*Z
zglBbor=rM<&BoZ{87i(=^5t44bNPi$YhvENu$f9<Vxi6ec!0{{yQ;>){BX4DS~Ii8
zGE(k(%1E=W5g+Rp(X{)@BXJP_)0eT|<q|)XH=D}M&VOH4myL!nNs*@^i5R9;NVoYO
zE!Bs<I!JBe6J_6Iw`opjOwMzMSxKI$sw?t#S}|tRDxKRzAKa;zeRYN2KIQsq1|^}4
zLeBZVAYXB)4o+>34_*6S$p!6czaT(qpzFMCJT&dt-x2ejo-fXy3hFAJtAm$qUZih;
zugP=zD*5mAe0QSE{&QB(SY2`1{tEYfZ(3ou+D2nah|c63^bdoo;#eJ=+nmxnu6V7S
z-;i$8w&`hNg|J}oG&jv-;}UoD1_j7(Q4>&weB}wD1V<#-$Wg%N93ttclqKSALQ83B
zq6J;ci8zNO@tP4|k`xgkM|og+V++-^5g&P+Bau{!WkdH!bFB&MG-HhOX9AJ>abHT|
z93mP5bPK&tnv;|-@Cva+l<_~I9;1K%JfAE=;{TPw4T2y5fK$I+ZW939E;|1{KaFPT
zs1`UI02>AXfB^H9IU@w@HUD$}UwT0*2)ey%iE^x<A1<;kH?z{2)2-O3w>ORx-hEwl
z(KEhUm{mRKHY55yjIxADsk7ZmyP1uNNw?Ap2i3|KWseS_a+3Vws$nCt-&ou5H#5Ga
zs)b0MxohZSM)dd24L;L`xN{vxA!8ngS~mz8mCeU)Cuv;iMR$y`rWNvys_}YyJK4x*
zR_tW&meI#K41N3im{Bt+ZZPa)7aNyW+U;%^IN^}xv}sFj>iJ&>v%9F2Ze>HiB(qy-
z>a^l(H1BSsv0K?x$}KLv@oE!Knf)_v%UvzqK~f0#TeWU}ruLg_#TuKxuDxSAF^P`4
z!;_3N$JY$Xg10*j)Mb|8?XBtt`g*AJv8Jjs8BuUH^)b~g-j*psbBnOH#hKpKHBIrV
z8<(DT$)YYSur7$J3nI#Y=z?x#V{4LK7VIqhBI|<gmS$E9*D<<HADfycK`kvs$&8(K
zzb;EUG?dp1teVE8QrFErma<!k&k1-|%(PX^Ry?I$H?OLwY66l5w?z|&(jqO_dW9Bl
z7Ud_)a-7fy&l+rD-?6`%DM7lZ#qr{qdvz;;J=x06#T%zgF2NkMZs0T=fxU1mE)IJ)
zao7z?bAyIKlP$x9>rnT&0&P)UsYIbU13yL5>YQn+TY#Qi0DxwCB+wA($3^`MKL17Q
zeOZW*w9_p>H!c9=+pH0Q_oh-8hqAU5KmahjC<X+8B@Y4h1p%aidI+K}Z3re%Q%JZ9
zNerQk)uk~YtlLn57)SUhSD{grLiq~Rkh5mV>K%{^P)^`4kvpPNnQRKptHLFfQ2|D^
zrRBzSt}1mVKZin;a#;q~)XBx{N)#%qJLjuaBJ+;p0#&LN8fA&GVv-F9E<CR75T(={
zlFIKu1!op~y_Z6!3YoGMu%@6zSIK9gM4@cC%2adowh%(eho3Of-Y}<DON9A_(av&g
z+O|cw9%O1qp|0!MTi)Ii9f&}z^`58)FXCMuMrx_&n<4Lw)cuc81vf?*_WQ{2UDy2{
zX>z>>{mHHDCL+Slept(uo%1jTc{ZQ>u$0!i1-LN8SLXY$Cg;H=a}C^obc=d(e#j4C
mUt&9Ad$9euF#QXmTV=ivTX4zTYwo`;<>TX9Y91iD(-uBmN~xCs

diff --git a/static/fonts/roboto-v18-latin-100italic.eot b/static/fonts/roboto-v18-latin-100italic.eot
deleted file mode 100644
index 1f76442670c03dd8b6646f1a1765d1abee7b3aa2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 18852
zcmZ^qWl$VW@TPZhcXxMpm&M(k;Ig=DAS~{%xVvj`3$nPo1P>4_Sg<5OfZXqYRrlep
z>UyfH=jnQ@tG~_ER8OS}002`40O0;x2!Q{I|Hpv9m;b$0*JcI)AaegF{a-8r0%-mR
zg(wSQ{}cajBLe6GJODQTx$l2Y1JDP60Zst-|3nx7mH%?q0N4N6_CIC<7y|48-T<Hf
z*yBG14S)~81>gnn1B3zM|C@OJBjNv)4F8{+H2+UU005+?r2T*Q0|3ASTmu0jQ~*&4
z0E-0P{Evhw+ifFMFmJDLk4PF`5g!qIHp#<ecg^9j`!&$((l`yUoo>jXNG7*VS>RPw
zcmB_az}$DtZhQ3cW*qeLhVi@$U)KMX4Ua=t9S4(wvCi+z#hPD2_lr|e8mqsZv+LJa
z)t{6|iRxb+NC;{$KR5j7<m95L+6&g$*6PXBkG=YhGW=|)NgUDH*M`BFDS{#x&hc%>
zt)!Z#LvG&yvwiL%n@tXCmgR4E0go7IY3e1gU0g0B!!!*H?+uXMg?Idh)(*Ew^HUsv
zc~%VUO0jTz>=qJBbXND9`1+}j;{oT2x6D@TF41hZpJym>HYmi<ELg8%^|#3hk%@R!
zi;~IKcw@I&F50g+w?`wJ8wl{<Tu#D2*}&91Jz5Pq46IO!ORo`Lo&_rdRnaJ+fc}QZ
zRVKxhbAo##UhI-66hX!r%2IjLq^LO{!>1qQ$giwjY98lH$RmvY97;+K*RIxfB&K?$
zJQB6wj3fpT0q+I+))i6ffJFkdYxs&{CY{KNq&wi4D$><40_q6CESKSk_l^CG_n+gF
zis^B2KPO2PCnnKIVQZBk3%uz>WlFc{oHfA$SH_O42uzhhs`uthS}CW8c~iF)>G0{v
z&#+G}uip;-5f4i-4RK~6A)J?9L8dCk4B13iVi0*;jP148wMli>bo;jB9_>o#`9)mI
zuCvh||IGtnaSn=q?g6uEnt~!cUo~PIuvI|<6z3?c1!`hW=mN>hJE1sGOmi8OQ|lG@
zoCve1;|0`yiCfL3lG5{o$m)oVh<!j+j1ZQZyKzgqwe!ecTq1f4aVa;<%8Q|NSme9N
zN6(Qwh)Yh9<be(zJ+Oy6=_?s|nsfd@_fjd`F-B@$KuNpdU3b^%$^LrtZ>YUIk_iXc
zo&4GnG(|pMuPw<ChC#IeG4(7eoX(@SV|qX>)s!7Da)wfbzx#rsXvVZc<UZqzj~U<4
zW;~yc>x7>87T{56d&1OZ!(7Q&Gk@No&xieW2)j1=4*ZQxPp9FJKFB>^PR$?{r?Z!9
z7mRx$hl)CWY}KEmI|i7_p|gUB;>&BKiO_0?%a>Jr`57m}!;O3b)WE%=+f1<uMg2|J
zkTh<=PST^p3pi4UTB@jG04W3MF`$mJMJ3g|wjIOK9k_{!Xm)nnet~B?<jv)RibJ-)
zEjvdF)XbZuhO?O5SG$%fZS6#R@WJZ-prWn)8(Rf1%8@NGRm+8;8?!%ypj;rc^;8R(
z-IlyPk6-0NOcHFHV4bv?$%9%YA!T+@^OreK!1#of&pf(#|7O@45sVjLnUp(8Z=i=D
z<;a0TX{&OzjO{=9V6-#>``FSMWjy!|6H8FsdLSeUNS763wd+6mMP^PTc$S<3V25zR
zYRrV<I2N{mK(x;-zwmyD&RHqb=;1Ay%r=3genz+Np&8+`{AIMD8~nR6RrVd1X^y~P
zBvAp^)b_!4RBHwR?pf|l7aFTjr6<V79H9ZV-B%{aFLypn7RDIKAYeeKPCNwVnc}Pp
z2J|cqw0}EFg&(cs?XUu?^9~)p7bbE9)$q<IR*Ys&67PR0OHv%!w46g0d|cjr$EPMc
z!cn@nVEd`)U(=|DZN&!0VuYX+nX!aRYKc9QD6o89yCChM$M#&-NZ&JNJaa8Ma(2VC
zA(~6n;OI(KjmW{j7pk1rJYq%}YXWC4mZ;(g@yx&Xejeh4@Y1J@$|T5ivazZdWbC3-
z3`4xau?e>+1#vUv>UvoVB#>#iY0&K)aYg|Bz2Rh2G!FKT)W}66;d5y_QFLVys3zBV
zUrin2bn#vRz<}#%#VKr18osFc+vE2|GdR?FvQNys7Yb7~11g_qBt*DJmP;1?ZIV%V
zP+mJGbN=*To>W>YHcBPOe7B>UyrBoMe%V!o#l4VC>AU0ReTgziAd5BTN%<oyWA3Yg
z)0a4H%Z-wmIE{kBMm)IIpeauCV!4OB^0G9G1(RV3@rkhP+hA!%|AmM4qD9tlKx8fb
z46gPLaW^^9BH^2lx)p1+pike*8~a#ZMn9TGN<C!AelH!Ep!<H0movg<9)F#Gu;S!J
zLbYG8_>l?p>qo(6#n0-BM8V7+pI_&^Xlu`NCJkXSrbv$jE`Q;ecjyJagX6-k`(Fe*
z@22U%!mJw(8!<tGbvM&%oIjVRhy|nOCpZ$zh2Z-XYUVYHosm(#9F;su3HI_VJGabI
zRT}@YmnzqTe4ATZ{9@GAS;&7l)l}zA^li4${?LX1Q@7qxUpH?Le}p{>aNh3Y%u-EB
zBy(BbP3db?CVm`L3!x-0H-i4cl?#<OM6Ou#$%?x{w$!EXpq|w?K5OE6ORU8>;Ys|s
zur3Szqccume=rpM^>43B=w|ECtl>8f@{lAAWK+yRhaHa`B2=6f<qek+Ous`!h1Cn(
zFffw%6tF}%(S@iNq%dHE8BMabbU|B&W8p<E?tm2b(kiNrJVRW1C(@u?LnuHKYXy{=
z>(h01u-5s`@tYkMr_J@^#H-|)Af9MDJ5eQ(!Rvi=bMXs7m}MvAf*5_W{~tR|t*`HE
zsN;k|_(lr6uN|B*_L%WV4ze(}-k3KyalC+aKEp}G?D>!n0Y365#yJ0OI$Y8MY8V()
zYhx>fmY1w}Y6(|sBXc~T>r%3k3i4-1luh9IZ5F!zo>PGX$o$Gd*H^}f>;znDPAnin
zTxQeQ!1-1F``{}(mRHZa*UJrI`xf-*q?u&g#d+qIxWWzH$gQM1V(r%rDoIDMS&*~7
zy9fF#+<+_8VrNy$`J$eyH*fGd6G%8Sz8KCOpVykFpm%3QLAkT{RDf;lnQQQ-W{w?A
z1j|-CqA^t5%_ERUUxafb)ZEoA$GzQ0P8+d7O2%#qY3A$(iJq75yV#g3YRp@wA9940
z8JJ~?+rQUxde@>fV`8(h8WAG!+PAN>tMZ&zkSir|Wsoa(%@d`wOya-_QE8?gVK;eq
z6_~<1Hq7?b)jPmw6ZaRkzwGBwJK9GH!NY84RB@r((G|y9$ErG}PkmudYD>XWKhc+m
zjSWme&mPiD-X?EE)tzbSnSOTdq-;^zere`^+$=w%={G;d<eP#cI6iUGt+rG<mEG)v
zwUo7vaX-7Gto-O)5MRV{`aqiqzkQ|-zoO)#keLQ63^UZ%&#a54X0V%DNc}~fKvQWO
zCsZbD^-`v;eQvabv?P;GThBd5pKHV;$kSovYSWs-N{RqbHl?{z@PsTSY{sWEjM>NC
zV~?4psZnUt{g}cWGgEFvs6=&(YCxexRT*oP-@tdN!MkO0eN{G6H*qbJ6-81Fhbyhk
zjZ{;)0Cosnr9he@(GGk8U4LJo!b?Ov)`4gb5du6gG$)uJrl#crKFm2-%4+?k4u%^M
z|5~mv2aKIp2#W9ykzt?1<Jq*r8Q`lRx!iDm;f$^Tnd&+m#$O80)OAL)p$%i11cA=`
z*0xFIpB%cITSDgUXf%Y|o(8mzPB|6TjnsCdA6`&HLz{lhUYzC@F5wMyG>phPCK6t*
zJ0P`j^X~pjM2uOq^GMvyt6m{G!X2#cr&rxgK>Q%X%;&qUzmBx0YP>k&)$V>Bb>MV-
ze_>8L+W=Reuv76np(3)qodF4EV7^yqGn=*0o~KzV{*es>#p|pNscL##K+#&XoNHS@
z)2H===|Sdah}QeeD3Rl@Jbe!LKcW<e2kqalM6N;Qqu%kI)4u3fZ=`_(hLf%z54=wT
znC}NW&Wjq`YWqgrUY<K=pdK^Ji=VsC%8v$Yni^;~3k88(VY$X(VqG=#+s@3GTsK&C
zH7;|Fp9Qzk_U}_Lbfa`y=QJ~O3xUCyx?|>uTz6<vo89w%Db3kqrg`XQUBDr9?v~+W
z6|4oq-5bSH1{NRG40xr9J`yBo6xs+0%k9{!dl!L98b-mNYll}N9ZR$AtL){vFm9x!
zoW>GvLYC$wF6`q&HMz9TR1QRioCYb~<Ot+3!~!IRc$OKRkLR^agfQC_ZD5j*o}m-4
zTTboYf?xsZIf7N~k438@#)`k+2R^dSh4p1)DNALwW;$8QxQ;p@SFwT$ZIYUb{67*Y
z6t;-6r^HuO+u28<H(fCIa^wG0m^(Hn6OW|uctI)lFv(NtkpR?B;N(xSNNUMLUCZr5
zta)QF%RiIh&W_bIS*+3wJF(kf8KYQFAvlB{N)~&gZ=p5CoNh9eny&dhp|b+{hR#bH
z1Y~LqXCj89W8Kq-$WZ+s?H4U>Ihw_dQmnan{y|@oNso%=@uKVW#&t1oH|0r@BRMqv
zrEpU6f{LJwqUaDgV)?wnuNZNF4r8#GQ<x3y0UeoQfd0wg*^h)EV&QoiN2OXv1$FsJ
z&k$WU%uv@56k<6AM#QO6s^MDo$bgh2t1cEItEKvXVX81nx|)1;bnE;djdbTsBZ$?-
zE>@F+X7skPh;=;86)~&A<C_#AS^A!7nW2Le5xP!u`YaH}#(LFWAx0!y+Ux_#Pcgh#
zd;Ah)y9P%@9eri<J$g&rX{=~QfTUrM!{fXzrH}DQ?KQl8&|M(P^GHJrB3AG9WRp=q
zEGNGsbOVDyMdygySChJ^#QftnV<V>~72RD;sTvfRtm<eZ=zzBrsZA1^(M}1781`}d
z*W$6tbmnMvr1ARjP@S@bO!o(P@^#McVmI05E0@LvvvFII^4!G{MQm&mkU~5iE~L5V
zH5ozKYqyjYK|+8^z{KkmpK4Yun9eqcL`+}#w8=W+5ssZjYpb=tny;|UC%k@wBQJ+v
zu`;Y_gdF9sB{z2LH$1>H>j+Ipqj703k3L0?8yZQJErRBVSR^ZQT#FT}U=d^&i=M*$
zaPx!oRI}upim|LLbdeyrMv2ah6f{*L%#`tc+74`rblRU*VIT%9uU+VKMlkciLdE6a
z(7`8Q1>X7kvP+`x)G5)QtFqB<$<F@v$9MN=j5og9vp;|1Pzf9HYA)?F!R!@F;!4)<
zRX@4c&7p|+J}d<Eq<+J>Ir`Oq*<3%ntOqAo`P;i(`HcucCraZrdI;^lgMyn~qvqt?
zxSnNHA2o^|JL7jIN41RJpBL?lAcUXM#HKZT>paFH$i#SS{(3;0%>Mg!t4#UsB00f4
zXYe9FrepU!yb~WM+*0@v5&L2NlINfTH+`bQE3D0xmYgu40b-z{VV8dBX*HWk!-}X+
zJ#lX}u7ScwP<Tj|83zn`%of}9#hGXaZEkS9Y7d)_wSIf3Y7y*Y&M~i7)F|TYb<f|&
zlEaCK^Kx5jYKY7#wYTSOV1?`|ApVl=MMUxY@|&ow8do3DlB7Z7O#3CzswW!2D_VW4
zEPqrkvPTvA0byf<&tPE})z+=c=g(wed{r`ssrcHS?W&%k=XbRvMmKh@VWI*zOCK7@
zTFOraD8D;G3fkDQE}fei0bZekiROk^vTkD;qr!kGXIiX)W`2W=>#ZG@%o|U8O!!JC
z=STfA?I`b&f(-)mlOE@G)Gk<p88QjmjxI~lg{}-({Z~++qp=`y`woWU9(_%>Cf%tG
zxC*WYIWxeEB=eW(IXMI6FkE!7{HJw1+y>Rsp(;`7!ZQNCit3}+lMUdtdr1mM{O{Pw
zZ3)n32;o}X+u+*@$QlcaMQ(C1#HH1Rf*x1756)zr>uB#G2l=?2KH@`wmE)1f6T5n(
zjdK7U$GiNx$+P)^@)S3w>l%t2#^JT>Prn|B$iyEE`H5ITIXgcE%mZ^Sq1+lp>G|66
zI;z?upBjy{tI+gH3#Lr+j@cVCC#C}V&C$k6aSmd)pOG0n1p`D)bMka(uqw!#h&v*C
z2pkn5j_vTvD}SEgoWedB&gXgDPsm-!#?t*?PGhC6OQF-u<(hGz!rG_I79nAKGo4{f
zTcebvuUL<XD^B3vYLc^Q_2+6j25d|7=$*@HD~-l%LZ)h7s>VM)_@u9HS+oTwJ~}Es
z&nlp~m@KiGv#iYq4!of2$JVrrhhca`2A=Y8a0hBF!{OywW=``x%@_45fV)Y?;0P@5
zYro?^^s|aT+FRmV{IizReV>-A87h098Z)9*j+keI*F2{*aFwZ|%4_O6T;5lL@J_F3
z_zglQCVcg&G<Y1ApHd{-Bj=PtvO4M%1nzqVKRU^c99|o{R^}kYV@X<&)lbv?#;Y=q
z@6%BSoTfy@r_tm((+(5Rc(xg^Y_1|{e~;SiUt9QxS}qqd4uC_R?Y69biA^v5vNh;d
zHKA8oz#8CicR+lZeRv%xeDTJytFxMy#`vR+Mylb5N>a^aF{Ns3S+m%Om3rRO;fhjJ
zk*OSCO?zb6`U|R-9X&4aCi~T+mcE>xvbjpy4}MWwoj%(i3#(mtz+=5_N|~W0L^=;4
zqTSQdWZ0MvESC9bqUcKVC<ntt58$T0MlA@+FRQ|nEYfDk)O!t=;w<$PsA!nrrAR8>
zv&1NeA>kB>*4^3F2(mOVhdDBsq^#a4qSh;#vthE_rYUFHuO8ZyJk3O8+;`%}v4F9L
zo!xXqV&z89%LhdeGo$U+x{9O7FKSymR#kbE7z=Af(6~CIK+;nnOs69{S@mxn70FFc
zeGbn3-gCmdckcdp864%J@S0;ae=$+lDA-}m1%;aH1Peb&UMgwM(~#Dc1JLb-o*D_z
z6`LlumiInlEIxxfwx(Gklo3+#{YEO3-`F(i4wToe;wZ=%(1?8LF91w}t+?{n_;Ap#
zQxm}3GVni$u82G(SQzbV+K%pRKcfysdJHx!c#*ACo2!nq^n-x{6Ovo<iOmNopSUL)
zz8C}Rfv-A~Q%F1PpLeEQ3Q_@IkF)9^1xiyfMx0WdnJ?B~MkIT<5#TVrYa*89-LW8l
z;sDsK&N8?5srE%!k)0i%X>;2QOQWc~@;=xA`YWgKZK9Dl2U?iPN_o9#8Pk@2_o+fD
zuX+_CiCgrH)f^8QTwz4^E+z7g_m-DtaLd)>Hg2NB%IQ|(r`!PR6ni4caC`OeqAzGN
zIcv_JrBdx9&_;3$oBxf3C7^W&5TAU|_XtGDyPancE*y6KW+E=F-+tGFm8f4T=2wcB
zD|-ubcqMBZ6)A@ia<3AYX4moR;qqn~ZvP4qhp+%Sx{u$m^v8tg$4T9RRF`m>Hyubb
zp&OoVc<=@J^|crDEjbmUz4nGqNq+L5LReY8gD)Kmp@B(JXgqynJeQ2g4GJz*z5D~a
z&6VA}3ju_Q7oRku)0BH=+?kTYbJ`PtzjHg|&X8lBK+)WKF)@`sH}Vp5n)udC3a4vc
zYdAEEv0^b!$zIyEbunZY{*%f?==ug!@e*XmnyY{N!EI2tY346E(?U!y$V7a!*61JG
zxrlOw^5!?ZBogf?s<Co#Qt;LKygsXy&@=LW+lqB{{hM{sUX8gP&eJ-Sj(63S#(fxk
z;_=1tkdBHqEO9=|WufFRN1)H76gHLzixTvX*Rqw$^=DKoX{(|}j4WkmeKKOk%^PV7
zmGCR0UI%g3asQxltKo0{FLhH5+CRVjXqIhhN*W5XGUuzxEyV+SzqAVWJC}az(qRa3
zUuuujBYfl?bS(>hJx=Va>pAH04Nwj-Wm_*h+hIV;j^=MMAsp(mmw?OVH)#33jqaZm
zS!#VX-!yoO;}t+0^Tx!7KTi8Cg=JbS0B1K*uRe-f4=RgdB_@2LLA9Vr)h2+Ew)LzQ
z)?FTSD<dh?uJdNtIrHUu0*5(3aALKcBq3itd9~wD(S0n9UvkDTum~OHnrvos;!;}C
z#*ablmr*g}Go6BknlAyj>?vjadn7Cyk;AJPZYN7dBe8n3L?pd~uv{|a0vdW5J5;5V
zfjl*XGQ_$Ouy%YqUX*e;vkBUVF2)>=%OO(#5dC>(Idm_OV768R(0#Rm>DVO)Z7?CA
zQn!>h4k4bt9QE92vR^Q}YHV(2=-}t`C!wX73X6B&u1)P53SLc8|0&;qWAHSYD9N<V
zR7}3~AYTF*%7Pi+n1Jf8nph{&gpm{Z%y6>)zU29mxvc>;eoJgj`O7WrAg>?$bkWPb
z%Z)rno56n=&u(ifT-qjX6&Gm(5|j(1lidG~ge;`hn=G-d-@GiCTX=AaQcnW`c&08?
z8|deyiD#MVQMkzdX6v!vE4dD@9*HG=6U#<CP;fpw?{AsAAp6te(RH*8aKA_&5P?t{
zs>_mhx9ArxvK(X;iE91B5^KJj!4W3Y#8lbS=gm#xfHg&-C_{hrv5_k4nd|Hy_0b=$
z{&+mxuB@EwHZ`LpiyTK;wUBRh3vrm`1UeWtIp}EDpYrjd=#@!)co@)zb$wl8>|qZI
zP?&HGJT|R7?tP(wig8gGN2!=dG<XwGGQS0fBy_L+W7Q?N_dHFK`q-$fD@kOF)l&5^
zMc10J)JyM3aIb6-yQMQV%Ri557N=o6WVNV$;JksaAk}%T(zp}#rd!#Xa`xw=Mk>aC
z_Xy4;_4eeMPOem=Z?Z|Mks-p(`D2D4=sNyy{gDdKgNk%hRB@PZ?>GRbLVC19-n*Vz
zaD-Pxjc6_5+Da71wP9x~2_bp=<nvlw?1B^@A+p-HM`JI};P>zaV)s~R{k{iYCDk}j
zh65rfW&#dpOn@|1c`EedFItoUDouS_<Vz;wm{-|D(xzR4eNSr4?vhdku|!Q}>dPMe
z`i)Uy`LgJn@J7A#Mge+?h(vARa1zV#4o`1tenSEr4s1y;xWE(7Qt<PllI`25)2lZw
zWhgW4UA@Eo@5GPs_<e9a%1I=Kgzk`E>hq=(^|;yB`UJ2pY%;H&+o%IJD71?`oRXY!
zcMfRA@`oehUqXaNd>8+Rhc7^-9@~yUw!^KAn%ab;;6wo0^TA2D)y$&EvW{Q&j8~Fw
zzKNn8*`=-xgz#!b7fzt8e~ajy?G9Tok!hT6J?*F7kZ|8nFUz+G*_BbJxZbBq{fY9v
z9G7<7dCZeGdSjDNZ#0OxWUaYeC4;oMktE|*y|>+b+D!ix=(M~y4-PP!mD^Wut6cz6
zviQJnOho@-1kTdZ-iZ8&GA;=nIC5Ds9w~DN#!vy0Lnhq>tm1_7R?#Yx-i$?{RnIp1
z0yu^zbh-VrZc+(sAYwIP*6K5&=DtWR;Z>Wa4!kDrOgd7p{tFcvJKt$)L#*z!Ku6MI
zSK_(9p&1ZjZd7ZkVC?hjs4`p8IAh2uUK`r8rniXFhz-rPoHGP*7u+u1{|P=CMsUG}
z?i34(!x8Y>A2`-J^I2-~y$)=v?I`PMn|lh8djB4jeSUmq(bly9L;8NUW=%u(<c`Ig
zTJV*|(el;4F4`n#rD~@JM2K7T3chd_JP-<-=R6a$B;DZ_!)D+6-qU&~R~j-E5_6n4
z414D;+}ZyE;&|8}aN83|MFs*3rY7a%nvt3Nmt>S_rzyh+<wPhwue@~^Q)n(#p?x<6
zL9dY%teOK($gdPC1>;q5Lsu<KJvA0%^uRez_Ijt?#CfzyfO~`(#cg<qF&A8c2jxd-
z!sZ<XY&&k8W$JZ_U`01?1iN_rW(j4$UHceP>Mw{thLcTo#A1BnMDip!k`?A~l0^IS
zYG80=(=|HjDW{ZC)7UB|immFKY(fFZ-Wq#f(LH<~sJw!e#<7l?*>~z-Ao4A*)KR(G
zB`VI*?;TJ4FX`FHRPcW77a5I=4;ZaRdsiuCRkL26%SQ~QG`!u{u=MSe5o?{ZKS-{2
z@TF~!9U`)JdoPh0t6sO~Fred+EO0DFW#ULamrO`pPL0ki1$#o?oySA5q@l^M1QXQI
z9@T@|+nDBxad^N2B%h*YF8qM<x0lyL@OPOr$o8C*6<&t&J&!Et=U@+FbwgL__Omf_
z+$Nb;L@o0HBH|1e&$m5hgFTX}-R%LU;!5NY?NHR%3IDbVr=jm(-Iu3iCBl?f|FRKU
zk~?lv7qKKP9M-26T4dqaAOJ)97UHba0K_yuVGfUtn;W7LEGobFhtKUwHn*SG#&C|~
z;C*HEZYi>DoZiPG<WFjRP=rpRLDUmhhy7E&5%8Uw4K{Wn%fMLbcu+J&3XX0zv=V7_
zjl`#&i-~N~lVw?EKJ+NE#UiOdf7sZjL*Dw^Dq42(diX89zl1=*&MYHy$RLXVtAS~U
zVhY3XJwFIaXB9G8WFETf`S@zy<0cU!dx;kH1wn?5Rfbq?beu{}TEY+R%^XutMv3Qg
z*bZJvY2H{+9({(ayUe=JT)q4QBHZ9@@-vn!$EZx4A9IOsCi?^KCaQewpN+Qte<>!)
z2w7sGoZ((iZHjC^wb$QSS^HH?Y2myz+@suH9@*_6n?kvwaBR99stmEXdVDg94Oafk
zBjkOl#7^FoD73g`GR?TtPrbk`O5fS6VLU!g%423ldR?N6Dd~__WW+IE;)(#6BM8+v
zwGRX5&gj8=Y}9iJfqF1YzLTR9rzFYE8m_El9R@k88yno-YLouNnxMUo1oZ#-=~OYP
z4UhhWEb?#QiyxxlA7;Glnjv`7OIn#%lB&b-C%ZQ7e|ay52|6ki^3u`PM^+vhtf(yg
zR#R20VWm;SD6Ad$7L(Hzz4jT9r*LT}KT(MplsspaKI{=chfwaE-_%@mSzN!ajC8wR
zh=)CSUd!xtHCh~<6OVIboR{G0>0o{uZQQ~xv6W@G98r^H_DqD-pVes&>;l}f(On;l
zVR~A&+BmdC2FFvPETg+a|M>LfK<YnbU+WfB2e9lYYJbydI<e4gtdQw<ev4$uw@TG{
zR1u$RL0Wm(jABFViF4|UFww}A?5TkFR41pjEP>qWiiHm|<t`Gk`48`*!Y%6$;VAQR
zwh{7T@g>syz(u(*!?(LaU|>D@Mmx`9A40{z5v#9cO}RZd55r|h$l58xUFmR5c*dt2
z*ur^B*2nkQ9NQ`6W9LPr!RIWHWGuj1;8LePY@xex&I3Lv7A|pwn8<}B+(?vFuAIvU
z2vjmezTehXirYXa?*1z9GOHJ0{j6A?8=YUoh9nb9Va6+wz?2~V#93*rL!ZxSL*GX2
zx0Xsjn9@7Y)}yM`4bXw^hCe@LEzo>pXgs=DDYr{I$*sDLwAZSe&I91!zRNslgE;rG
z5g+t}7z7fQu}=EjzI0%)Jh38&5#raL^BQ>)r1AJ-Qc8rw$HqhFknV>wPuBVbWM$QE
zW~c%0S!wyL2^&6Y&!?~cBO}7?++jx_VKm&wsLVsSk`Ez6fO0Cx_?<tR6ZEV-(+C$|
zzEVWHe5IbkFKjfAUYS>23ASB`5Jyzh!f)<0lAepy(aNRzv!m{kAYrbo3!XBL+UZA|
z<P1Jsq}5Fvnt@cX+s->ni2Ty(CjIvxmYFy+6J*~Dxu0c}U9Ene8?p}xGgra;)GA^i
zJ8d$D6mVw9`?;WCEEbpgN9@nF@%_sX?9J_dbQR>lj2#+!l$5&oq|ME$dNs4i^$~@6
zw=we$`sOXfU(}u)xAgQHE>jw>#4ZRggUkLg%?~eL0)8m(74K%XMXTc6qeFHot27AI
z$X|M#bghU*QkK$DYoFlk$}Z+A`KS{Hl8IQAf!a3#nCY7#7CeGC#;J2)BUGaEhSZON
zPRNVW0b{O7Mr1DPNz3VYU7>;7hyiY@oPQ14H~nsNiw2$LmpD0l;avD}ND-7Ix7;zR
zV1x0r3=Rm|U8hqvBdq4~7q8u#xBO67Y(-h<CC^U-fdJunJsi#{d7kL9Ls&-<L&;b(
zV*rU=op~^UZZu(`*N-D-TsOq=OsVt@8NI7l=|B|leI*5&rcy~Zxb`uqrbK6y0BqL$
zBr9InN?Xp0-c3UsBK-wJ_>1)eQUTb?G@EiPT;)mFA}r<=4cO1NTnwneA>xWF%qPbB
zh=GWj3Qx<u4CX6Cti8CC1ZJ(%wJWrM$~#Lj@ToNYM?Y3><gIs^C(i$~4Mddj?SP4(
z@Qjyj<6=Vc{vmkL`vY1i4;F6#N=u{Bwl<pO{WN14d%QAVEW5#evtj!&Wo#vVYwF(J
z+?!bzEs7`ZpK7ZtuhiARMY6^i@qM2TPzkek;HqZk${>Vy@%B7U0<=kS7E^-nNN5R^
za)-gvEgO}u10bu~CY>KhBUt>d^^df#zhjOA9h8Vo)u{lU%fJb|eiQ0UFBq~h1v_85
z+MKK5i>WvnbT?OAMiH2hR524+bzl%BH*#MgBuOOSgA+r3^P{5eu+|{^8@TYI`Qg?|
zT{yj^v)-g(v5InGa;cP*>Dsvm+}QJ)I!lnHwNS0i_{p4}lBXdE*jqHI%JwzD(ZJDx
z+Sq)aOzKN9b%EVNu`Mvg-lN|;5quD0+`ig9N~7K|`YlI6t(NwHq?=>nAs4`)2>d|H
z;&hi2giQwTiaEoeqE|6dcE;cjh@1AHFJ=$ITSEy3pq)Mik^|XvE1ipage@h=BH!>H
z<@jtRnbiJugOuu|3ksu_H*u5HOR<A?oh2&}z8?xhN%<9jo&04pI!oRVq;31HNu~a8
z*~k3|h0@(VZ}ULcHH2H}#yBqry#n155AHW->f<~ua7C7Lpd7A1O1XWrJ*hf9)k9zY
zyV@{zr;nI3F2)qLB);mOkzaY9!<0Ass0)Sn5@~j*u1#t@V(l1KHg#U;+Ft>UBaF&>
z)520GSN>l<a&(9#2+2{r!WhFJDc~&4W?cP3elQDt{@l2&tQwuG)65Z|p0iJgCZ|2h
zvyev1kET9_4GbX{?-!$7Gpe=~>GDD#;#r#fG<av)5i>w4Xila!{Kpl_!qoU&&M4=$
zzy?PdLa`+Ibi2ykmRVw>v;shE%0-h+HA4Jzl$P=+f`~CT@jb9$*S?K3TGR@!l~KmT
zo_k!1af0G+ED<&pHx2GrJz{Mdp;RjTO7Ms%jJ0l!EOSTt0GsCy$cgpIjxNS&IxW~3
zX%D<gBtqUR-ALL2Wve1YG-;h&KN4xXX+1{bATKp$)f_^p(i@u#aJa(N&|vthbX7q|
zf10n*RaBfzne;+5Q<F0EiCD*@0y%$5rRTrXpv5~k@z(Ek20e?QLK{xf!2|Xx{yKmZ
zpRV1Gk%3i}>_Fo=x#Gt0u`vSMn9nXNC}L^DT&No@<OWtyieJIAcVuyf71S$>uQU3S
zqmk>@dg&Ck*zpo~FnXX4M!ZCECP;}^%iU^+rw1hFgbYFMu8&E6Y142TNU-4N6u;qD
z6Kqui@qQh=Op*^c>?O%Wpg<Vrm0EF515>L}{I#S;RMPf^NR~Mx-A-c6n5NRr5SX%G
zvxj5!^DxtmL4*;!ZVH$`QES-w4lL5pHp^yGMO?13#P}$v|5^AATY62|2Vzn#Xt~3M
zx(uZIng6OQ6fB_r^fdD_Zn^32>y09r*iv*5lz9+(jO9;ddrR>N$veecM244EFnrdL
z+1-AZ&?>|`L<s2{Z8w4UNLk8+FLPL@sz=5R)lt9p7n39v=Z!uU0?mn59u*-n_;-2e
z`JX=u3+){K+27mFs2s`72Jy4~#v&-Mart(2%J>J9)2I!Z5MFLc@(j*ZP!Oh8Gn2P?
z#C;5yTOTa*IP66axgWZ?&R#8xHH>>M9Goa?XVup-M?~y>n-9LzT;iAys%)_$^F68C
zX7=I^wGO?%qzCtutEMFdL6mp<gBqAusF8@e_`lM<Q+<w@$=0?LYzK(_-86<~W?M(#
zP1#re#oR)k2DV`$-7foeA6(un9qv+8P{Hs$@y>uS<y;;LfPFxAqdSmRwFtmBE)0#S
zcoSQzbXMg}xBgx$BLSfv&W>>0$;m?(ft-nFGZUbTtWS{l)U$;=v}5j35FTQBi@AQ4
zTt8J&NpjR=i$P5!8J;0Y>;|w9tAqBl;4rIBiEZGY?okmYyEGKjSUr5(wo{Hqr#$vu
zLJLyi3`K!Dewq87js)J$ffHbmg$yzYvHfGGh`iLRo6PukbSkpJDXa*y;Xe-;tD3=6
zrJ?%=0JvLr`%io3G=X-s*2EysZ&8hPrh@2Y_j<#s^AYeyvBLhpl0w=DWTU<6K&oEB
zDHZ;GTjwxIUFZ0L@W_*WWH!P}nIPl(LJ5#Ow@14ez)ZgHiRJ1j_-v=DalcteE#FM#
zLobtaE&{I5p1ZOqh}=MqUR1uK+-Y8hjUyVOL_*<2LXM+Q7b!ZZih<JkJfOvqKe$fZ
zctpzTN5eohA&b5wmd(~|^TEc6yBN#1btC~%_Qs9QVA$!VjV+ufDD{~Bt&bKC!CzrM
zlY(}cfHUicb!SJ8rRlG7eMp0J)4|potdzL|tQrq0SJ}ltAY~x^;m{mq@+F5@a3T+<
zb=F!(hNQL;{3TW&LvbzozD;R%gVRVOs@#;tKRT<_Naz>^$rDN|P2teHrQS2=Zb(1#
z^44uq$;?oYEirH{6eS;@pm-7YuvWoByk(5|s|*3y={j)`(rRe*?y2s|z-;o>RSIky
z1@`AW7=O$V))r%yCDUs5c{yQ&E3}^aSHRqX+TlFyi5y}5kth(OItj*G#`3}IguZ48
zFhExL^ax#6vb&Tsu6u-qU0G8Ad(fzsObU5n&|j~PbPoOb`8g#s9egsWF+2}~vcc*Y
zISp<lmg;fMy+I{{i1ZxB3EKO>L==)rgqnh58GOo%iG-R0H<3vuSg&kNjyrS0%bS?d
zZ&IuI-}Ooq=DsM%2fpal@V_8dRz8(@Haaop@h;KBdXsOFFP$-l%X6ENhjk3?S^yMG
zur%}=f$EZ#6asT;sY4rU7S6sR&kxd7S4WU|dpZwJ3xYd`P<(4&+pM~3J%`nl!XYk%
z)ZO|=>Eqb@B<fyPVihRrt*<a*^#m35sfFG{vOMJCHdiY7DI$*8;;x1sb#W^Xj$Ks%
zi<{hqMY~lBVXX0WX>4v;wqBg2Uj8m2wOFJnLLifMgQQLvjzK6bKJh1(x$X%tXR^WF
z>&j3Nb-^E>QLtK0<P86nR~YXF7+>JV<)u5FS}EE&;R5-3pbl@Pg~y2UsdM7~5h#r2
zR*Q>0RUS<uChGMkB44#NnL%8YFNeMkP2x0W*4WByoqjtc2aB<V*i<q9<=!FQ9Nwij
zErOtoP)YbYiDXIVoR+ByOK7E=X}^$m`YNidw1I_#Kb+quf0zWUnBLc7+}r2U2vNFJ
zxxTT){eu9>7?hLu`^M)`(8jt>lXuew<GshT9Y|pu*IJ1g_?>rquo$Qb?KMeJBX{rO
zp1BBehH7&tx*LUP{hK<&9OV2qrDfbC(U{WG8(}!r@|Ejl>?94Xbad~(k<6&#kGx8{
zfat3D)?G);1-I{Q)U27G2>eMAXB%<ycOj@hZ0zghq9^|e;mBgPthTT+zTH<EGHwS(
zrF2e`<}Q@)nD^(Ld4FUI_MV1F$$%GIYW=Wx@n;QXE`1%me@`c9pKu{C6Z${m3SFeW
zc5#tV&Ks%=L&~isYN$NgNoz}-$b1+DaXK%^>rQa+r`5@pYg>^@9dYnKq^Ht(f06!{
z0>(yuo1uGzCzBj2%4$~ErSl)r!Q(@132VSHLN|ZPS>F4uL5x%JOG<x_ys2(+)2R#E
z{LFCcgYD#UAop8Hs*YLiTQ(n7vGMW^Z)CLvJjP3!a9BYac8>S7zQUdE<L`1~jz^Y=
zo|mA&i|d>;ElfQM%K?xrB9~!$&Zk={tO7V2Q%x1MXD$4y0jY#Kw`67^z1+=tf7KX~
zM*W5K!#Pdd=5t<O3z3|$O{HMUPU%#6PiJua`y>~q4(ngCn7QI^l?MSYie|1LHdv8b
zT;tu@#xRjXaH`(8ZGMdBqILJS5K%Y4v|75s=FiPDCrx<5eYLXZiI`lOrUSf%NT`yH
zk$fWYbvm!EnR&lB38UR;VS+KGDSnZ1ihw9hwV5xWbjBERd@VJh3$mPyX_ajd3r5>H
zz62^@4^{gpU_Kp5o;O}I_1X?WHG}mt?xAwFB<<4Je=nT^b`uJepJUN9u&7#ZZ#b3g
zkT}dLxzD)(F+&kq2F&E4+}&0z6AJrKqDxNY4s~&NoH_6=<(_ouRipdD7SXRL!1~ON
zApy2=UB*pmicF36n6l}?G&iC{`U9|IQtxX7f2@H7_IakmKijng>WbG`g4cXa(lTN{
z&Vw9v4wrwCJYCTtiD07~`Z<l|Brm?UUp}X{dT*|`2;);{rZvLp1&XnyOTS^tSi(KN
zTRX-G$-SoPp10pyo5$*Iz)@Mb`-9p->{17-auDKmdcI*Sp)%q)`}JD9<#XAfhZS$+
zhUZ;^pjf?-dYTP=AQa1?kkO)wNt(rBI;m_1Ek3>X1$Ay}lh*+S3R4dPLk}Cx{yt-H
zL8zKU=pe<#|H?~JlLZr&GnNQo0<I^VwiI_V&HZo1%IgFPW<rw6tTGsx89y}wc%m;F
zm(M@aCyAZS_6^H)f33o%Bf@C`S^I9Go8D~!D2A(gos&TLJ0h5KEVPKTZh;+M?uSb%
zMv8x^1Nfi^x6%p{ibWU}REJseG4CZ^@zP$^@ohybEX*TdgnrP?m?)K5S};o?l!1@8
zx_I`3zh)Lw&i2IhBJNL*LpM$Db$qSd`E2tFZCD!9fzbtPr_|=a`-clIM<Q*zvOI`Q
z$64T5;)$leDEd7E&TreXp5Z9w;UcC}KZyox@kr}q6r$Uz3rJi4{ktb2{m4<eu?c4U
zIs>~F?)zWtX!0WIGP9spwc|(rI00lLChk5NB{&NDLdC%20W{4)b{Y|1J>K0we5f(y
z0ps08mX}Dt`HzO9+!U0{Kk=|N2UO6aK1R?&<YV;qAT4h0X*f$*Aid3n5_srDhL^sx
zS2ueieKn1lR)apu%W^n5U5=T-pQlqX@NZR1)T4;MXGf2@9AgV}ttOhe>)xfZo+lzS
z@kY^fcw?*PP5Ga{4%-%nA3Nk5e<}{4Rgu)ycQS`><%MmZO0GOnMvDY5u}$kA$Bld~
zhHNWh2EMLDx7(hX220k;=3i&S?WA7lZsLZs($)0#gR(e#wP=-}5;?m-VVt!KI@N(Z
z@9PSMFQDvS%n}4k<Ur2geO3#2(i6A>rigsDkFv$=srL$p@tiGLSEt@0<{U4Cb?F0O
zJZ^yPRM5}50vxgAVAsgACX|A!Dz<bb3d~dmA3V7Tub({EN)qbdQ4#(Sc5pMt9c2eg
zZKFzjV)gmnf8bl`@afF!p?}o8MaHThK6bxl6q$_{I6qhRwKZ?QL|dWj@8}VE4gHWi
ziuxh95-o9;j^@xXju8h61)1?67l6e!*zRLl<K$Of;a@8&R(7m!(O<9Mwc(VK_L~3X
zffR#s@;p8`TX)SKv>7e`-iwd%+>!scqe!)l_}-J=acQl>)hm}Cs4Qx~OKJCDG6zmj
zo$X}eILFv0v}vo5EgrQyt$@o}F&sI0{!k0kyDoFrhTA9AgKujWq-gKx6e-Tk)vB3e
zG#y})EM@i24{9z=SpDXw5y651uh6%W_owV~PLCntzY(?rq-qZH+#d`y3Hq<`0T2>=
zvMJshS>f?Hr`74Ve8S$P8BY#f1KSg_uLtoG-fzmFDG<lJ-Wajy=(5A%&oa5DH>?kt
zmw<V8k(B;#&;TqOIc_^v-Wb%OJF=>6bw8C)D$06W%t+9nF09jerpnkjHN+I=hmow;
z!#A?+VzWU(*=7M8KGdrF9}jLj-xbfi-t5Idl!Q2@buDw7R1QXqGg?~xW7r(LW%s`x
z5DnvCPkQP(zb1(0Xbv<LoEPGmd&0gOgA}s%ZMZdMdLF1PmnPh2N=`q^zqk~o>WkYP
zv$fG+OD<!5Dv}hZ35HWDP=LK&Co+g`$3U~i3o?}F?xLneACj*6R6h{(eu<s4J+BQL
z@h1dB^S<1mRN~BU3$&0KB(o(NCkiP*L1W?CZ3s8cO9q?7yJ_6ifYf?%Tb=bBTznTK
zCq&*L+aF*8nn3qIWG*)9Wv{G%liYC@%8w(+`jnN?v~-3Pz7NqmAZ5w4(w}9VtF+c-
z8n44$4lN`VhTz?KeM?dcx95S6g*&7}%PxCMD|t>)yf`;@p3Pk_ymd65Tk7J*TvBeX
ztEx|(l!~A)MZm}X>Zu@5?y5(H8uL}a&k*e$%(TFVhqZ>-Q(=iS-G%Vm&j!*?ycOCn
z+m=}A>&{i-Vljx}_GM}9%MV6c4-Le_S9xu^5^!a$G39+Hx2*d|nwL<P4MQ7I=k>z;
zk;5Ktl||8*eG1b$z+2;>(&4z^CzX+&%Q{+JS_So@dLVe>g4>E!BVHv!mZF3KY%Gft
zgbTsKrFo!;w!b~5`l}dOh8Xc;AreKrT6zvL<5TVzIa&SS@L>U-<l|tg34In_lCuJo
z2a)=+jjbnGKd9(dR(Hn66tp#2=H)vsAvYn&+(4YUVYrai4;3rFzkm>`-ESzwB`6Vg
zun-VSlqx6YR*rb9XQoHi(O|f^{$T%!*HC7F%H6oBe5}NEwu_RM7~->ydci~{ySYKf
zJvTzfJ4Ta;A>SgP$Ct((Yc$*+-a^X?(g0};i&&Lg>D+P;`vdg8C&_p*CrD3;qBZ<x
zukT<TVQat8iyfxNC4`8hP$J4I+Z%}^O2@G(Ko-j4%}F4)o183+@|1GnEC38F0`WBo
znH~<*2oh01fn2MuLNOSdC0Gs#k^*&3sy2`*87p?uexj)CV;3<DMojN{_UI*Wz&==2
ztcU2iC<b(>lRfH3ht8RrKd=6_0S%+W(G>M2l%{<MGkU72Q(W~OGk-FBQenzd{uOle
zReEi-@jZ-9lX~b}bc2)+OSwR79vvRc5CoOokSIln-a{(D^gmZ;ClRLC+k?^XN)wkY
zS-~B^zxr>BxH(dyj|ghHn2L?+b^pD+j>=iN3dmkDzhs$SUw!@gJRWs{y~uKODCblp
zVtYB4ExgGJKL|G=1Gf^aB11;Op3*kvc;#r9(K*TIlRR}L!@*Yu|KipEEFLR*L(}mR
zRhjpX=)oqkAUc?`fTs>KFQpX}i(?X?I~&aKi|ku`WjPyTI=@Mu{)Zl3!h8e!JX>UA
z$mA*e7o0OmShzzjx%EQD1?TnbtdO`-2d1+<`yS~G5mA!;GBhGz$F<3jQ-hDC&(&MV
zsVUdHl9)jk`trACVjJij?6jL-n0(scZ#R*q#4F`L-)L>_Mer4ro{&;(D;<4k;j6W(
z^u^}C--2za)3zhBTZgoaEFxl9c&JsC=L}=ABap3edD<;)XHQoLAr*x-uW)FR;7SG3
z3E)T;wVbaj1GQXs6)jqCl0Yk0X@(|?f6a?FFKTnGrT$SlnZ(s$eKB_^I<E?D3IuFK
zQ7>iZ4VQ1iGgV5&Tbw5rAj=_WY7z8ZfJA;Wz-j6gD&=4AR;408K6-WaNh~u#HJxhN
zE?@Ay$abFU+&<RNdV+7uO80@en_**sn33}6qf_B(zWMwy6I}U(I#9wd{X%{SX$fO4
zcmGy=Ov(OwJtc$V6^(zINp-!2`vXR8X9j4q%+(H=VP409Xbr!a18b7hnSw|BvvGZ5
zjLJZ<S7x^Ip+CP3Z>iL`QY(O{29$BU?#k`d_W&d>baZWQ1saZ^p;l)*V*GkmJGSET
z925an2l|cg*cv>MR=EO*aqwa{S-Lx{hX(Q(@LglLE_8+LM94do&GXua+`8D*=vjz*
z^|5%NNcvO~x$|!J=}&hoR`43u?ttgR2tjBLR~O1p&t~F=#5(s=n_KIP-&?Hukm!WK
z(M%4Cu#YqCy!Vt&2*$eo6(NeAmk$o1dhwBN>jN}7gbBZ|D0#vru0k8P%_$NgI{qno
z2O@BUVsQCTl_$^jA2)FW0c4VY`>c&AZe~J&|H_PB6p{a?1*iSgXZu9%J!bwP8}|;q
zs1%`vCopu$1`9uyO@8f-Z|moph{*bRB3!KMnJj+l=yiq2wF;a%Wg&+4$JN@owa|kf
zg&j9g6F?gms3ps@0y%<VKoP<1x~Msb_xp-LwSYFusNsZJnBN^w(jvzIxZ2kp1|Ud+
zG~l^Op1(C<;DM%x!^4r;{BUXEfBb7)uOy_P5|ar(=nu#f>sYE}gX1o82_7PQ`ln-{
zZA->TWkZ1MH$i~At7<3=u?sNPk$1ulKNW1+<+tnyP!QYLGK8Y0%$mZdIoLa>LTX3c
zFJ~wi?!cN8j2%-#GuT`nPBN@6W-~-c+kLi=VW!gY32cXB-V^z<wsJ{`N#}`&DfTX5
z$>lIQdBj~k21ew7mXF4158!NXiH2x+o<y!mi980J=yqd%q?I6I#Hz)<==nXJ40epc
zH6Y#uZZd9?mLI%esj_ZI4Qo9s0(vr_7j0@l3%6}t?b;>_-XUR~RY6MQcAe-NS`dx!
z<5#Z1k;1O?K&6ZS8T#;}LtfdqNJI7&mH<aF?SKfkW=vz3qQ3);ZrcVFOXB0Za?`!O
zo|46;9qN+>T(3DOD!bi<XIZG4f~dRU(p}(t3X<FHxCyOG9+iTFvF6WHT0BS$)|w_|
z$tP{|BIdhB&&%XYv0BqvV8TmNVvGqc%c)YoDxosor2k@aVIX2DeL(~>O|2TnL-Rr6
z=hHiZLTC5OPbf>ujj^33X;ZS&BLK?k(Dg?+%_idfro3FedjjqZi2Oysbro$J^k>+<
z%mC<vCpkLFGo4-gE?RDs^%k*OVNUk=m&gb((QWEm`-4~cb;;vd#RM6nm6QxTHH2gJ
zSq<>uLWy7|3j+D@W1<bGs=z07v^Zt(NXzo6?j`CXsutH+3%$r?ia%5Aq5>^P3$RQ-
zL|1BNZxV3TVzygAeN~ZKk#J3_0I0TV%W!AI2elu?Vq?8CEWdWNOlFQB`LYQe+)mZs
z*W)zwU?ZVoe|ll>A!{2ij8j}={D{kL<!cvs)ctg*(b6TcLS|!R=H@!Nm#-qIU=uh0
zX*}CJ9PAk$UrYW8yHvP*8L&#oTJ;R&{K6cK!+9z1VI(8Z+BQF$x7zE)frpzG9mf|P
zseGd_6M~6kpl9cwp)!oK0PC^9A^+zATx>IJk;50#;`L_Ja%Eu=Vx`-wY*>=uvH?Cx
zCqq#dbl_keUWAMCiW(^x$HiL+^A2NtQ=g-8En6shgquIdcSOSFK^0nKxd;rdyd?@-
zHReW4(^l_f4EBY}$-aYc*cKHWM^$ikZIZO(0C6lL5UokvOC~0<)S5eM9sb-wH7=V%
z5aCI%!hq21HhQT%Y%zvIt|rc)DK$5ojFcLq@5;?3*V~0Mz(qy|CyUmWC9r{kWs^^Z
zrZN#-6~p2)0!urq7}1N0u@^GUkpiPl!nlx4&tEs>S7_-i6AsN2TFDnT1q^T*E8Q0i
zIB*)T5Ut#Z><k)Og-dOCxs?%s5s$Nvpnw+lv~Z0xgSypn^QzaE&NHq;%WA>5&t&4u
zaw9#D0I|Ebjs)Vi=ZOJYoxjlCtnrB<Zj2dlgoQqTN})wq<n}DmSsRzqRyFb&|0KOy
zK8-ZFV}=Xqkq5r4>CQJEOSTGq=U6!EVJ0~bYPf6?J7(%4GVx)NF%1;T@1?2%pBJef
zRc>GADkwi6!XScy|2<bT09F#srCyie%78NHx=Rr*Rr8>zgoWM%Mxo`lc(=Do<tx&`
zlJ!idQQj=x(lyXv<Y!w%yZBHX_wr|bRskfJA-_yde}$M56lQp-x9EnS@6w7-eJhcY
z04|JBwMAC%<+ppq{_!U%LUEFz-f4NbKOUiCkZS$&RQav%C#NZ9@&woSL|65_{}m(&
z+x8i^83g8Qf!LYju92mU@I4vDj7?TRS!6-~l5+~=0i<%EleWL*J`}_=2NpYN0zdZk
z&$$>(2{3GY$7h`v<HFxzc~G!QAC*bZU{Pcg3=gLG2ywRz4F?^6MU&c)M4mL5sXlrj
z1Fg}(fXOCq+d+z}=qb|q8@1pgV2zZnVaPh@6)Hsr`1re&P}A*S)}o%bt3@{Z2SSIU
zIx~QJ+E=S4ke4P%bdD!6%!R_(y)C!3<ZvVi$A}O&KBsgtS%Y#Aj;@~2<Z-Ksa@}wZ
zAR>NZi^wSCK?Y}Lrkez+p=-f(n)Z}f1eQ5uZ5I`)_yo|G3Cv#{%$VPIW)7xn`|v?!
zL0&lV>h2hliKQFKQiHL2P~kttzusxIvT5!en(BE_^1;s4usVa{XeTSOKf0$ms>nqf
z#JL2SVDjZeMr2B887Gf&gj6$H+j)KIjJ6#k$;gZ_h*fJ9h^sUpM?6X#M3ue7pR8m~
z<PAf_fB1yq@iQVa2mQEd$0;6Q93UWZ#Z5j33k0z(4`N`C@4yRD_<UXyArUKaAPk^D
zqwmU^bVc*=OhcwcC^v6)GRIN6JYh#R#00S#S8m!S9Zx&C=R+54pm_u_oDW>(_<1dg
zDv?7)M<b3iE@HPUo3p4ckRuSk4$1({3WJ?8brDI|xH*?e)EW#{k6P=+^vH>Cy_B_o
zp`v>e%~!3J5(}bXpO$2G>g>PE5F8Z|FKm6Xvu|`lIO2DmojJLWx1$*$Oxq?}LiR)C
zrFn|I<B)ryRe46n?mtZ2i3#AA_&rNwbfptkWm8Q>1Tv@yJlFYB@Nre0A!42s41i2l
z7@a^95RrDllFP)0D5Mx2%sEBBAtnHzLlxz>sp$Ts@pJ^BS_c3xQj6IS=nxiB{1W{T
z6%m9c*)@^It0*E&Z_>i<1MSBl10sF$h1<i@dbo=QV&z?b)VImW2*h%*P0hVxUEYKs
zuzrFZYJ*K9FiQyu#{c-b#Gof&lolo{m@Z;Fnoz^zR$B`Yu2HwY`IJy#R<kvmJ{tiK
z7FZySXoX!?oS{Vl{Y5Z-AFgGUO$Mwh;v?%gv)-t>bv+-~C6K|>N+J+-MG*+ZaZ{CG
znGHZzUpVTl(O&6EI!rfOB{=h8(Ar`p7NVFDu$(18B82Zx@(m5TM##v(No}DW2&t#*
zHZHH%MOFMnWuOiUda_TI3>+cVSA)!z`|*^Ep%jAjQe5dsBMip^E+UQ5C0xXWxN`Yd
z<a6xVQWyM3U!%cP5MjKKlfjxGc*l%vKe&zAQhT0<(LIM_gC_-&G!jy+Ht{5Jz!?mP
zu1lA^Oln63Cq6CjN;~3Mr(t#uz;gl%5k>J3ZGQc!83_>~(#VlM(C9!Tq=@Lwk_Dw4
zUrs&{!H|y)n1qlbadT-RNZ@sgmNfsAPYhInebz5CAd430jG#gag#Ylk>A=|ink#YB
z{vrtma8(Cysb)hm33^lYa%OVr0&p!4W+<<d?Hjj~sE<4OoC2vH7hv@Y#K3@gh!CNp
ztg(>OG;wW05Vv(Se?7KMcO!4oUo!m)l3<}=a7Z$wrRc}e^KmZIu7}7kC)OTiX@(Jy
zdmpPPYeurwO+=9ZF*c4_bI*K}3;+vZaECOYRx$!$0ZA;}p$N&s_{%{bo>F>RX`R*|
zZSp82plO*WQ@QQ~6ssM!I@ODNgEf|iXfvZdo}<At!u#u2S1n3v14j`un67PlS-|2n
z536d75|@M{jyGl_y9%k7reG@c3=-4AfW!}VyHZ2YQ9WV_W{=?<FfA2M@{R0QlIaAh
z2ByTT(MLn8a6{MjIh;(YrATTv#YeOG^MRBv-eg_4DjVVm2Glj&dE~}Nkt9vNdBreu
zu{AL-TK1GQt)3`_1kWxY&+18LmXc<~Lwl$Gt2Bmo16sq6D0eTdeRP_t9Y^J)TrTAF
z7JdoEiw=~Cn4p<wO2ts!h_)J7u{bPc!XcfJB*ZVmCPPBxn2>3^EOLr0J~$@@2V}cZ
zU=}=oo{v&vnb1E<lF@}!RC$!m7OFi%9isNvkzU#6Gk8)8PY2{1aorsfEy?mbbM%OY
zrG7-!5d>s7Xg?<O2&|bDZ57m)=!1pdZ$cZ{>zhIm84fu0cmtomn!vLsNRlA;A4Ea~
zi#`bIzEXg%bZdcuKvS&%Yi3X3B%)UmefO}85P|f`_d8*wVdS0$xrit(8YXmlXs{Vr
zsS3@2i!;S#qw$SjEVRF-uX_9n5jlH_3&`%Xl-QKh=Ca&c80fSgdA1RH<pp#>1SSG<
z03KaOx)+3;&z^z66uID(NFWpoMM4mdfO4ZwT{dnj)KGKq?I^|T07^Vrkis6^61`1+
zYLHGM38+c83@ibSp&y!J1)`dN3Wi3DN0&xWu4KuO^`tSaL=O!P&zx4UHGq}>myBU&
z>dq>cJd%TpbEbpbOPxs{;6=Eo#e%t9fD&p)kbY_p+#iwJ3DmM`DSCaThzp33ecz5b
zK^F%(XGFP_m?9Wm{t&Wy`p?iySCtS_SVGZLm^ck{rc{Ut0hp*|8G${f-NWo|@DWy%
zh6*fliQQ5miw9eh2(2h!>)JI3-djdcu^Xo=PSCT^J>WM{5z9hQ3^_up;A8X+CZN|y
zm7paTPDhjqAT(?s{I!uhU{Z>!kSUOLY%3T@xSvW`ca5}=h%z2wum=uR^DdduvCucd
zS*X}A&_pQ35T7&|(e<}HHLali;ia<e5=j`ih!hH>`t~D|Bql9$m{D+g1+eCcUoI1<
z+-10&QN*xWPmdiU-4KKV7;NW0h@13U8Qe&jXj+s|6L%(vT@?VWHO>V=iGN|1ltf#F
z*pxs#^Bpg=9cotpjk^XgWn0L`4n2rNnlK&Tpls=i?|52OfnqFzcw#CauQ^EW@4?Bi
zt3`7aynulb3Wb97HP<UIJT}MS(5E%2_0?o_*eY+_q+d?Uy?|~;K1y=znl>5aoeZ7^
zLeMr#uHzR2*hR@GMeg;71Pn9K9CJnIbR%>r=7fi5O(2z60eG`Q;Z~Oi`l8`OXPmt#
zwc~uwmK33-l$S5m;I<7Jhc(==G}9t)r`a(OB2I?si;|S0w0dZdczhR|7AFg`^2mH+
F-jPdfjko{+

diff --git a/static/fonts/roboto-v18-latin-100italic.svg b/static/fonts/roboto-v18-latin-100italic.svg
deleted file mode 100644
index c51ce871be..0000000000
--- a/static/fonts/roboto-v18-latin-100italic.svg
+++ /dev/null
@@ -1,332 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1092" ><font-face
-    font-family="Roboto Thin"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="485" />
-<glyph unicode="!" horiz-adv-x="395" d="M182 401H128L309 1456H363L182 401ZM47 51Q50 71 68 88T108 105Q131 105 145 87T156 47Q153 27 134 11T94 -6Q71 -5 57 12T47 51Z" />
-<glyph unicode="&quot;" horiz-adv-x="515" d="M328 1388L277 1122H227L274 1395L295 1536H350L328 1388ZM523 1388L472 1122H422Q469 1395 491 1536H545L523 1388Z" />
-<glyph unicode="#" horiz-adv-x="1097" d="M686 410H336L193 0H137L278 410H17L24 462H296L480 986H191L198 1040H498L643 1455H700L555 1040H906L1052 1455H1108L964 1040H1208L1201 986H945L761 462H1035L1028 410H743L599 0H543L686 410ZM354 462H703L887 986H537L354
-462Z" />
-<glyph unicode="$" horiz-adv-x="1097" d="M890 344Q922 517 758 623Q702 659 584 705T405 790Q222 907 254 1110Q276 1263 391 1363T683 1476L714 1663H769L738 1476Q909 1461 989 1347T1046 1047H993Q1015 1216 937 1320T707 1424Q558 1424 446 1338T308 1112Q293
-1026 319 964T408 853T608 754T815 651Q973 535 945 346Q922 190 807 93T520 -20L489 -208H434L465 -21Q274 -11 175 104T99 409H152Q130 238 222 134T487 32Q638 34 752 122T890 344Z" />
-<glyph unicode="%" horiz-adv-x="1491" d="M532 1477Q644 1477 705 1389T748 1176L737 1110Q714 976 628 888T426 800Q315 800 252 885T207 1099L217 1163Q238 1297 327 1387T532 1477ZM259 1011Q267 940 311 898T426 855Q516 855 587 923T680 1104L694 1176Q701
-1220 696 1264Q687 1338 644 1380T532 1422Q440 1422 369 1353T275 1176L261 1099Q253 1054 259 1011ZM1122 657Q1235 657 1296 570T1339 357L1327 279Q1302 147 1215 63T1016 -21Q902 -21 841 67T798 279L809 346Q831 478 918 567T1122 657ZM852 279Q845 234 851
-191Q859 120 903 77T1016 34Q1109 34 1178 102T1271 279L1285 357Q1292 402 1288 446Q1280 519 1236 560T1122 602Q1028 602 958 534T865 347L852 279ZM341 132L299 164L1184 1299L1226 1267L341 132Z" />
-<glyph unicode="&amp;" horiz-adv-x="1220" d="M452 803Q397 896 375 953T346 1070Q334 1167 376 1265T502 1420T689 1477Q803 1477 871 1401T921 1213Q900 1069 692 918L521 794L894 258Q1027 417 1066 632H1121Q1080 387 927 215L1079 0H1015L892 175Q668 -20
-451 -20Q269 -20 164 83T83 352Q98 453 170 551T393 762L452 803ZM451 34Q662 34 860 218L481 763L424 723Q285 618 219 530T137 352Q122 260 157 188T272 75T451 34ZM400 1080Q410 966 492 835L665 959Q840 1085 865 1213Q881 1304 829 1363T689 1423Q559 1423
-474 1320T400 1080Z" />
-<glyph unicode="&apos;" horiz-adv-x="340" d="M314 1362L264 1122H213L260 1370L286 1536H341L314 1362Z" />
-<glyph unicode="(" horiz-adv-x="599" d="M708 1623L721 1578Q599 1499 494 1355T312 1009T200 590L195 564Q169 390 172 222Q174 -6 235 -174T409 -428L385 -469Q260 -375 193 -205T119 204Q112 443 166 701T327 1176Q479 1486 708 1623Z" />
-<glyph unicode=")" horiz-adv-x="614" d="M-120 -470L-133 -425Q60 -298 197 -30T388 564L393 590Q419 764 417 932Q412 1168 351 1331T179 1581L203 1622Q323 1532 392 1359T468 947Q477 664 402 363T192 -152T-120 -470Z" />
-<glyph unicode="*" horiz-adv-x="840" d="M452 1019L122 1142L147 1194L477 1061L546 1456H602L527 1064L891 1204L904 1150L529 1012L717 695L668 664L489 985L212 662L169 695L452 1019Z" />
-<glyph unicode="+" horiz-adv-x="1126" d="M591 702H1057L1049 649H582L495 146H441L527 649H80L87 702H536L623 1206H678L591 702Z" />
-<glyph unicode="," horiz-adv-x="382" d="M-20 -255L-54 -221Q53 -101 75 25L98 159H152L131 33Q102 -139 -20 -255Z" />
-<glyph unicode="-" horiz-adv-x="599" d="M524 639H66L74 693H531L524 639Z" />
-<glyph unicode="." horiz-adv-x="436" d="M47 51Q50 71 68 88T108 105Q131 105 145 87T156 47Q153 27 134 11T94 -6Q71 -5 57 12T47 51Z" />
-<glyph unicode="/" horiz-adv-x="769" d="M-25 -124H-85L777 1455H837L-25 -124Z" />
-<glyph unicode="0" horiz-adv-x="1097" d="M446 -20Q332 -20 254 37T140 205T109 460L117 556L165 840Q216 1137 352 1307T693 1477Q809 1477 887 1420T1001 1249T1030 996L1020 888L971 604Q919 309 783 145T446 -20ZM976 1106Q963 1264 891 1343T694 1423Q514
-1423 391 1270T218 834L172 564L164 479Q154 355 181 250T275 90T445 34Q624 34 746 185T917 607L959 845Q985 992 976 1106Z" />
-<glyph unicode="1" horiz-adv-x="1097" d="M537 0H483L723 1385L292 1232L300 1290L774 1460H787L537 0Z" />
-<glyph unicode="2" horiz-adv-x="1097" d="M901 0H56L62 54L715 713Q911 915 939 1085Q965 1233 887 1327T653 1422Q501 1422 385 1315T237 1045H183Q215 1231 347 1353T652 1476Q830 1476 925 1369T995 1085Q969 906 763 689L136 54H908L901 0Z" />
-<glyph unicode="3" horiz-adv-x="1097" d="M433 770H522Q695 770 820 855T971 1085Q997 1233 916 1327T683 1422Q527 1422 411 1327T261 1074L207 1075Q238 1253 372 1364T683 1476Q857 1476 954 1366T1025 1081Q1009 968 927 879T708 744Q837 708 902 613T948
-386Q921 207 787 94T467 -20Q344 -20 248 34T104 186T71 405H125Q104 247 202 141T466 34Q633 34 749 129T893 382Q919 540 821 627T519 714H426L433 770Z" />
-<glyph unicode="4" horiz-adv-x="1097" d="M792 451H1035L1028 397H783L714 0H661L729 397L45 398L49 427L899 1455L965 1456L792 451ZM139 451H738L900 1383L798 1250L139 451Z" />
-<glyph unicode="5" horiz-adv-x="1097" d="M254 763L427 1456H1116L1110 1403H469L316 819Q446 914 625 916Q747 916 833 857T957 694T977 464Q944 241 820 111T507 -20Q334 -20 236 90T146 383H200Q192 220 272 127T507 34Q643 34 743 113T893 343T923 613Q902
-730 824 795T627 862Q446 864 294 747L254 763Z" />
-<glyph unicode="6" horiz-adv-x="1097" d="M958 1476L951 1422Q669 1422 475 1240T201 733Q265 819 355 876Q483 957 632 957Q753 957 837 894T955 722T971 480Q950 342 880 224T709 43T498 -20Q366 -20 272 47T135 235T113 492L136 641Q196 1027 408 1251T958
-1476ZM625 903Q485 903 354 820T188 621L167 493Q148 368 183 260T299 92T497 33Q619 34 721 119T881 351T920 636Q903 762 825 832T625 903Z" />
-<glyph unicode="7" horiz-adv-x="1097" d="M1106 1422L264 0H208L1040 1402H200L207 1456H1110L1106 1422Z" />
-<glyph unicode="8" horiz-adv-x="1097" d="M1046 1086Q1026 967 941 878T724 744Q850 702 916 604T964 379Q936 200 792 90T450 -20Q323 -20 227 30T86 171T62 379Q84 509 178 604T424 746Q313 789 260 881T224 1086Q251 1257 383 1366T695 1476Q808 1476 896
-1426T1024 1286T1046 1086ZM908 374Q926 470 889 548T766 672T576 718Q408 718 276 622T115 374Q88 223 183 129T449 34Q621 34 750 128T908 374ZM993 1091Q1018 1230 929 1326T696 1422Q541 1422 424 1329T279 1091Q253 953 339 863T575 772Q727 772 846 861T993
-1091Z" />
-<glyph unicode="9" horiz-adv-x="1097" d="M938 717L939 725Q863 604 747 536T497 468Q352 468 259 571T156 842Q146 988 215 1143T399 1386T654 1476Q775 1476 859 1424T986 1271T1028 1042Q1026 931 987 712Q924 364 730 174T243 -20H199L207 34H231Q504 34
-686 208T938 717ZM497 522Q641 522 777 615T953 840Q972 957 974 1023Q978 1140 943 1234T835 1375T658 1422Q531 1420 426 1336T259 1107Q205 980 209 858Q212 710 290 616T497 522Z" />
-<glyph unicode=":" horiz-adv-x="363" d="M277 51Q280 71 298 88T338 105Q361 105 375 87T386 47Q383 27 364 11T324 -6Q301 -5 287 12T277 51ZM191 1013Q194 1033 212 1050T252 1067Q275 1067 289 1049T300 1009Q297 989 278 973T238 956Q215 957 201 974T191 1013Z" />
-<glyph unicode=";" horiz-adv-x="363" d="M192 1013Q195 1033 213 1050T253 1067Q276 1067 290 1049T301 1009Q298 989 279 973T239 956Q216 957 202 974T192 1013ZM225 -255L191 -221Q298 -101 320 25L343 159H397L376 33Q347 -139 225 -255Z" />
-<glyph unicode="&lt;" horiz-adv-x="1031" d="M162 664L844 321L835 262L87 641L94 691L972 1068L964 1011L162 664Z" />
-<glyph unicode="=" horiz-adv-x="1118" d="M996 843H185L193 897H1003L996 843ZM925 436H115L122 490H933L925 436Z" />
-<glyph unicode="&gt;" horiz-adv-x="1031" d="M858 670L182 1013L190 1072L938 694L931 644L54 266L62 324L858 670Z" />
-<glyph unicode="?" horiz-adv-x="876" d="M349 401Q380 571 512 699L638 812Q743 911 786 1019T817 1230Q804 1321 744 1372T592 1423Q463 1423 366 1341T234 1117H179Q213 1276 326 1376T591 1476Q738 1476 815 1372T867 1110Q849 999 782 899T587 700T414 446L403
-400L349 401ZM264 51Q267 71 285 88T325 105Q348 105 362 87T373 47Q370 27 351 11T311 -6Q288 -5 274 12T264 51Z" />
-<glyph unicode="@" horiz-adv-x="1855" d="M1255 -20Q1159 -20 1109 44T1066 210Q909 -20 704 -20Q609 -20 558 48T508 249Q508 409 587 596T787 885T1049 988Q1111 988 1164 963T1277 878L1131 301Q1119 254 1117 205Q1114 125 1150 80T1258 35Q1392 35 1492
-160T1646 523Q1671 634 1676 739Q1685 929 1622 1069T1427 1282T1105 1354Q919 1354 748 1272T439 1032T221 671T134 268Q128 73 196 -82T395 -318T707 -398Q880 -398 1044 -318L1062 -366Q911 -453 704 -453Q507 -453 364 -369T148 -121T79 249Q83 465 165 684T392
-1071T720 1325T1109 1411Q1412 1411 1575 1238T1732 753Q1727 557 1661 370T1490 81T1255 -20ZM559 192Q564 119 601 77T702 34Q817 31 926 120T1086 344L1219 852Q1160 931 1046 933Q910 933 800 826T618 527T559 192Z" />
-<glyph unicode="A" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489Z" />
-<glyph unicode="B" horiz-adv-x="1208" d="M89 0L342 1456H709Q925 1454 1032 1355T1112 1083Q1090 955 1011 869T806 752Q934 730 1006 630T1058 401Q1029 218 888 109T543 0H89ZM268 719L153 54H542Q725 54 849 147T1004 399Q1030 541 938 630T675 719H268ZM277
-773H594Q790 773 909 853T1058 1087Q1085 1233 997 1315T718 1402H387L277 773Z" />
-<glyph unicode="C" horiz-adv-x="1297" d="M1128 445Q1068 229 917 105T549 -20Q422 -20 328 40T183 214T132 469Q131 548 144 625L177 820Q226 1109 394 1292T798 1476Q1007 1476 1122 1353T1227 1012H1174Q1182 1205 1084 1313T799 1422Q667 1422 552 1352T350
-1144T233 828L196 619Q185 553 185 485Q183 354 225 250T351 90T548 34Q744 34 879 142T1074 445H1128Z" />
-<glyph unicode="D" horiz-adv-x="1310" d="M89 0L342 1456H729Q865 1454 972 1395T1142 1226T1214 979Q1219 895 1205 811L1178 650Q1147 467 1048 318T802 85T488 0H89ZM387 1402L153 54H472Q712 54 894 222T1125 661L1153 820Q1172 931 1154 1035Q1123 1202
-1010 1300T732 1402H387Z" />
-<glyph unicode="E" horiz-adv-x="1141" d="M978 722H269L153 54H959L951 0H89L342 1456H1202L1194 1402H387L278 776H985L978 722Z" />
-<glyph unicode="F" horiz-adv-x="1147" d="M992 716H268L144 0H90L342 1456H1217L1210 1402H387L277 772H1000L992 716Z" />
-<glyph unicode="G" horiz-adv-x="1374" d="M1115 156Q1042 73 907 27T605 -20Q407 -20 286 112T156 465Q153 544 166 620L206 852Q237 1031 329 1175T553 1397T838 1476Q1036 1476 1154 1364T1269 1062H1216Q1216 1234 1114 1328T838 1422Q624 1422 464 1260T259
-843T212 551T210 480Q213 277 318 156T604 34Q746 34 865 71T1062 181L1137 605H707L714 660H1201L1115 156Z" />
-<glyph unicode="H" horiz-adv-x="1405" d="M1099 0H1045L1169 722H269L144 0H90L341 1456H395L278 776H1178L1296 1456H1349L1099 0Z" />
-<glyph unicode="I" horiz-adv-x="528" d="M183 0H129L380 1456H434L183 0Z" />
-<glyph unicode="J" horiz-adv-x="1101" d="M1012 1456H1066L894 459Q856 239 724 110T408 -20Q218 -20 128 96T67 401H121Q108 321 119 254Q136 147 210 91T407 34Q570 34 688 152T839 459L1012 1456Z" />
-<glyph unicode="K" horiz-adv-x="1271" d="M505 765L238 548L144 0H90L341 1456H395L250 620L518 848L1210 1456L1294 1455L546 799L1087 0H1021L505 765Z" />
-<glyph unicode="L" horiz-adv-x="1035" d="M154 54H877L870 0H89L341 1456H396L154 54Z" />
-<glyph unicode="M" horiz-adv-x="1713" d="M416 1456L758 81L1579 1456H1659L1407 0H1353L1590 1367L770 0H728L381 1369L144 0H90L342 1456H416Z" />
-<glyph unicode="N" horiz-adv-x="1416" d="M1110 0H1058L382 1366L145 0H90L340 1456H393L1070 93L1306 1456H1360L1110 0Z" />
-<glyph unicode="O" horiz-adv-x="1333" d="M560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1201 630Q1170 446 1079 295T853 62T560 -20ZM1195
-979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979Z" />
-<glyph unicode="P" horiz-adv-x="1203" d="M250 615L144 0H90L342 1456H779Q982 1454 1090 1339T1167 1031Q1135 838 993 727T628 615H250ZM259 669H629Q819 669 949 764T1113 1029Q1143 1196 1053 1297T780 1402H387L259 669Z" />
-<glyph unicode="Q" horiz-adv-x="1333" d="M799 32L1013 -230L972 -263L744 9Q651 -20 560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1202
-637Q1165 419 1061 264T799 32ZM1195 979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979Z" />
-<glyph unicode="R" horiz-adv-x="1310" d="M737 623H247L139 0H86L337 1456H783Q915 1455 1013 1402T1156 1253T1180 1036Q1155 888 1049 779T793 636L1062 14L1060 0H1005L737 623ZM256 677H684Q849 677 972 778T1126 1036Q1156 1201 1057 1301T767 1402H382L256 677Z" />
-<glyph unicode="S" horiz-adv-x="1185" d="M1009 453Q989 544 904 604T641 718T378 826T259 955T240 1120Q257 1227 331 1307T520 1432T766 1476Q895 1476 994 1420T1139 1266T1169 1046H1115Q1140 1209 1041 1315T767 1422Q604 1422 472 1349T303 1153Q281 1080
-295 1022Q315 933 404 875T652 771Q896 702 992 600T1063 351Q1046 240 971 157T776 27T524 -20Q296 -20 170 98T71 411H125Q100 239 210 137T523 34Q686 34 818 106T994 300Q1024 383 1009 453Z" />
-<glyph unicode="T" horiz-adv-x="1197" d="M1275 1402H760L518 0H464L706 1402H193L200 1456H1282L1275 1402Z" />
-<glyph unicode="U" horiz-adv-x="1334" d="M1299 1456L1130 475Q1091 250 938 115T566 -20Q427 -20 327 41T183 215T162 469L333 1456H386L216 469Q185 277 283 156T566 34Q760 34 901 158T1078 486L1245 1456H1299Z" />
-<glyph unicode="V" horiz-adv-x="1196" d="M494 142L507 57L550 146L1228 1455H1288L535 0H470L167 1457H224L494 142Z" />
-<glyph unicode="W" horiz-adv-x="1809" d="M394 94L496 334L1003 1456H1063L1220 326L1244 94L1349 334L1814 1455H1874L1268 0H1208L1045 1218L1022 1365L949 1210L409 0H348L192 1456H250L394 94Z" />
-<glyph unicode="X" horiz-adv-x="1196" d="M619 786L1180 1455H1249L648 739L1041 0H977L611 700L25 0H-42L582 747L203 1457H268L619 786Z" />
-<glyph unicode="Y" horiz-adv-x="1196" d="M589 604L1231 1455L1299 1454L609 549L515 0H461L557 558L179 1457H248L589 604Z" />
-<glyph unicode="Z" horiz-adv-x="1197" d="M72 54H1002L994 0H-12L-5 44L1128 1403H270L277 1456L1213 1455L1208 1418L72 54Z" />
-<glyph unicode="[" horiz-adv-x="436" d="M610 1610H387L95 -258H316L309 -312H32L341 1664H616L610 1610Z" />
-<glyph unicode="\" horiz-adv-x="761" d="M203 1457H259L577 -126H521L203 1457Z" />
-<glyph unicode="]" horiz-adv-x="436" d="M157 1664H434L125 -312H-150L-143 -258H79L370 1610H150L157 1664Z" />
-<glyph unicode="^" horiz-adv-x="834" d="M541 1380L171 730H110L524 1456H575L743 728H684L541 1380Z" />
-<glyph unicode="_" horiz-adv-x="830" d="M708 -54H-114L-106 0H716L708 -54Z" />
-<glyph unicode="`" horiz-adv-x="531" d="M497 1269H441L289 1537H352L497 1269Z" />
-<glyph unicode="a" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850 1009T915
-760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33Z" />
-<glyph unicode="b" horiz-adv-x="1097" d="M473 -20Q361 -20 275 29T146 171L115 0H61L326 1536H380L264 885Q339 990 439 1046T656 1102Q761 1102 835 1050T943 898T974 675Q971 611 962 552L949 486Q897 251 771 116T473 -20ZM906 552L918 659Q926 768 900 861T811
-1001T657 1048Q524 1048 407 968T249 770L160 274Q184 158 267 96T473 34Q634 34 746 166T902 531L906 552Z" />
-<glyph unicode="c" horiz-adv-x="1018" d="M430 34Q572 34 676 115T816 327H870Q834 172 713 76T431 -20Q282 -20 190 72T78 329Q67 424 81 520L87 562Q113 721 186 847T364 1037T595 1102Q758 1102 851 996T933 725H879Q892 869 813 958T596 1048Q407 1048 282
-894T130 480L126 407Q126 231 205 133T430 34Z" />
-<glyph unicode="d" horiz-adv-x="1097" d="M111 552Q139 715 209 844T380 1037T598 1102Q712 1102 796 1045T919 883L1033 1536H1087L822 0H768L802 173Q730 82 630 31T412 -20Q306 -20 234 32T128 186T97 410Q99 467 111 552ZM152 425Q144 315 169 223T255 83T410
-34Q540 33 643 96T813 268L903 775Q882 905 803 976T598 1048Q471 1048 372 964T217 729T152 425Z" />
-<glyph unicode="e" horiz-adv-x="1011" d="M458 -20Q328 -20 234 53T99 252T77 518L85 568Q109 714 187 841T374 1035T605 1102Q769 1102 862 981T941 671L938 640L929 577H143L132 518Q118 434 131 348Q153 205 240 120T457 33Q644 31 794 181L830 153Q682 -20
-458 -20ZM605 1048Q451 1048 330 933T149 631H879L882 644Q895 716 884 788Q866 906 791 977T605 1048Z" />
-<glyph unicode="f" horiz-adv-x="636" d="M143 0L319 1027H139L146 1082H330L355 1236Q382 1383 468 1469T683 1557Q746 1557 809 1539L794 1489Q731 1505 683 1503Q578 1501 505 1428T409 1226L383 1082H660L652 1027H374L197 0H143Z" />
-<glyph unicode="g" horiz-adv-x="1099" d="M108 552Q136 715 206 844T377 1037T595 1102Q712 1102 795 1044T915 884L951 1082H1005L826 38Q788 -185 660 -310T351 -436Q146 -436 33 -252L74 -218Q177 -383 348 -383Q504 -383 616 -278T767 20L797 171Q725 80
-626 30T409 -20Q303 -20 231 32T125 186T94 410Q96 467 108 552ZM148 425Q135 243 202 139T407 34Q536 34 640 97T810 276L898 767Q878 904 800 976T595 1048Q467 1048 367 962T212 726T148 425Z" />
-<glyph unicode="h" horiz-adv-x="1097" d="M256 830Q337 961 447 1031T674 1102Q798 1102 869 1038T951 853Q957 777 943 694L823 0H769L889 694Q901 764 899 832Q894 938 837 994T672 1049Q535 1047 409 943T237 693L117 0H63L328 1536H382L256 830Z" />
-<glyph unicode="i" horiz-adv-x="419" d="M130 0H76L262 1082H316L130 0ZM294 1422Q297 1442 315 1459T355 1476Q378 1476 392 1458T403 1418Q400 1398 381 1382T341 1365Q318 1366 304 1383T294 1422Z" />
-<glyph unicode="j" horiz-adv-x="442" d="M317 1082L110 -118Q84 -269 -4 -353T-219 -437Q-257 -437 -315 -417L-305 -365Q-258 -383 -218 -383Q-116 -385 -41 -313T55 -118L263 1082H317ZM300 1422Q303 1442 321 1459T361 1476Q384 1476 398 1458T409 1418Q406
-1398 387 1382T347 1365Q324 1366 310 1383T300 1422Z" />
-<glyph unicode="k" horiz-adv-x="950" d="M376 584L373 582L193 445L117 0H63L328 1536H382L205 513L900 1081H983L416 618L822 0H756L376 584Z" />
-<glyph unicode="l" horiz-adv-x="419" d="M130 0H76L340 1536H394L130 0Z" />
-<glyph unicode="m" horiz-adv-x="1791" d="M815 0H762L886 720Q897 788 893 849Q885 946 826 998T661 1049Q521 1047 395 939T226 684L107 0H53L239 1082H294L246 826Q327 959 436 1030T663 1102Q797 1102 869 1036T946 846Q1018 963 1132 1032T1375 1102Q1500
-1102 1572 1037T1655 853Q1661 777 1647 694L1527 0H1474L1594 700Q1606 769 1603 833Q1598 939 1540 994T1373 1049Q1279 1046 1187 1002T1028 883T940 720L815 0Z" />
-<glyph unicode="n" horiz-adv-x="1097" d="M256 830Q337 961 447 1031T674 1102Q798 1102 869 1038T951 853Q957 777 943 694L823 0H769L889 694Q901 764 899 832Q894 938 837 994T672 1049Q535 1047 409 943T237 693L117 0H63L249 1082H303L256 830Z" />
-<glyph unicode="o" horiz-adv-x="1103" d="M80 562Q105 713 181 837T371 1031T620 1102Q730 1102 815 1053T950 908T1007 694Q1010 626 995 520Q970 369 894 244T704 50T456 -20Q345 -20 261 29T126 174T69 389Q65 456 80 562ZM127 348Q147 203 234 119T455 34Q612
-34 738 144T921 441Q967 596 948 734Q926 879 840 963T621 1048Q464 1048 337 937T154 641Q108 488 127 348Z" />
-<glyph unicode="p" horiz-adv-x="1097" d="M473 -20Q358 -20 272 30T146 168L43 -416H-11L247 1082H301L264 889Q335 985 434 1043T656 1102Q761 1102 835 1050T943 898T974 675Q971 611 962 552L949 486Q897 251 771 116T473 -20ZM907 552L919 659Q929 849 860
-948T657 1048Q525 1048 408 970T250 775L160 269Q183 156 267 95T473 34Q635 34 747 166T904 535L907 552Z" />
-<glyph unicode="q" horiz-adv-x="1097" d="M111 552Q157 809 286 955T598 1102Q710 1102 794 1048T919 889L955 1082H1008L750 -416H696L801 168Q728 79 629 30T412 -20Q308 -20 235 32T128 186T97 410Q99 467 111 552ZM152 425Q144 315 169 223T255 83T410 34Q540
-33 643 96T813 268L903 775Q882 902 802 975T598 1048Q479 1048 384 974T226 750T152 425Z" />
-<glyph unicode="r" horiz-adv-x="674" d="M708 1044L643 1049Q509 1049 394 950T240 709L117 0H63L249 1082H303L261 857Q329 973 427 1037T645 1102Q683 1102 721 1090L708 1044Z" />
-<glyph unicode="s" horiz-adv-x="998" d="M767 265Q803 453 493 532L382 564Q152 639 180 829Q198 952 310 1027T570 1102Q733 1102 825 1018T903 793H849Q861 907 782 977T571 1048Q443 1048 348 989T234 831Q204 672 418 605L567 562L617 545Q850 460 821 264Q802
-135 687 58T412 -20Q245 -20 145 61T59 275H112Q107 163 186 99T411 34Q549 37 649 100T767 265Z" />
-<glyph unicode="t" horiz-adv-x="639" d="M419 1374L369 1082H606L599 1027H359L222 235L218 180Q215 112 246 74T340 34Q368 34 449 43L451 -8Q405 -20 342 -20Q172 -20 165 155Q163 206 172 259L304 1027H111L119 1082H314L364 1374H419Z" />
-<glyph unicode="u" horiz-adv-x="1097" d="M766 0L800 175Q729 77 628 29T406 -20Q280 -20 207 47T121 238Q114 317 128 401L245 1082H299L180 393Q169 325 173 261Q178 153 238 94T404 34Q550 34 667 113T821 321L952 1082H1007L821 0H766Z" />
-<glyph unicode="v" horiz-adv-x="959" d="M393 88L926 1081H985L410 0H357L116 1083H172L393 88Z" />
-<glyph unicode="w" horiz-adv-x="1514" d="M306 308L321 84L801 1082H855L958 313L987 83L1088 317L1433 1081H1497L1006 0H952L832 818L818 1003L730 809L337 0H283L163 1083L223 1082L306 308Z" />
-<glyph unicode="x" horiz-adv-x="959" d="M472 603L882 1081L951 1080L499 551L802 0H738L462 507L28 0H-41L435 559L147 1083H212L472 603Z" />
-<glyph unicode="y" horiz-adv-x="959" d="M396 84L406 105L939 1081H1000L316 -182Q242 -322 166 -378T-3 -437Q-41 -437 -83 -426L-77 -375Q-26 -384 -9 -384Q124 -384 221 -236L261 -170L358 11L124 1083H181L396 84Z" />
-<glyph unicode="z" horiz-adv-x="959" d="M64 54H808L800 0H-19L-12 44L845 1027H189L197 1082L928 1081L921 1034L64 54Z" />
-<glyph unicode="{" horiz-adv-x="650" d="M463 -440Q354 -401 292 -321T218 -129Q211 -57 222 19L261 265Q270 325 264 375Q241 535 62 543L71 609Q189 615 261 685T357 885L393 1120Q450 1490 778 1597L787 1551Q647 1502 560 1391T449 1125L414 898Q374 636
-158 575Q230 552 271 497T318 364Q321 312 314 265L276 20Q265 -50 272 -114Q292 -319 488 -396L463 -440Z" />
-<glyph unicode="|" horiz-adv-x="404" d="M94 -270H40L308 1456H362L94 -270Z" />
-<glyph unicode="}" horiz-adv-x="650" d="M-156 -393Q136 -289 187 39L220 253Q260 513 476 577Q404 599 363 654T317 786Q313 837 320 885L358 1132Q368 1201 364 1266Q347 1478 152 1553L172 1596Q283 1555 344 1475T417 1282Q423 1205 411 1126L373 885Q364
-825 370 776Q379 700 431 657T572 609L563 543Q442 537 369 462T276 259L241 32Q184 -335 -143 -441L-156 -393Z" />
-<glyph unicode="~" horiz-adv-x="1380" d="M1233 751Q1207 611 1127 528T928 443Q813 443 716 537L614 640Q531 720 439 720Q343 720 278 653T188 462L133 463Q160 608 240 690T438 774Q550 774 650 681L761 570Q840 496 927 496Q1023 498 1088 565T1177 753L1233 751Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="485" />
-<glyph unicode="&#xa1;" horiz-adv-x="404" d="M189 696H243L62 -359H8L189 696ZM324 1046Q321 1026 303 1009T263 992Q240 992 226 1010T215 1050Q218 1070 237 1086T277 1103Q300 1102 314 1085T324 1046Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1087" d="M457 34Q599 34 703 113T848 327H902Q865 178 754 87T483 -19L442 -245H387L428 -19Q273 -6 189 105T107 397Q107 514 142 645T242 872Q382 1081 617 1101L657 1318H712L672 1101Q825 1085 905 983T972 725H918Q932
-868 856 958T641 1048Q523 1048 430 988T271 816T178 562Q161 459 160 407Q154 236 232 135T457 34Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1126" d="M362 667L316 343Q289 151 199 53L934 54L927 0H-7L0 54H114Q210 95 248 273L260 336L308 667H104L112 721H315L361 1039Q394 1234 510 1355T788 1476Q948 1476 1031 1370T1090 1089H1037Q1047 1158 1038 1219Q1024
-1314 959 1368T789 1422Q649 1422 548 1317T416 1039L369 721H727L720 667H362Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1467" d="M1052 155Q846 -20 620 -20Q511 -20 414 24T248 153L44 -26L8 15L214 196Q160 291 144 396Q118 564 176 733T369 1033L218 1227L261 1264L409 1073Q612 1234 828 1234Q934 1234 1027 1193T1191 1071L1411 1265L1448
-1223L1226 1028Q1340 840 1302 608Q1262 373 1093 198L1238 11L1194 -27L1052 155ZM200 608Q174 464 220 329T373 113T620 33Q785 33 936 134T1177 408T1255 747Q1241 936 1124 1058T829 1181Q686 1181 553 1105T323 894T200 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1017" d="M1056 1455H1119L567 676H920L913 621H532L490 381H869L861 326H481L424 0H371L426 326H49L57 381H435L478 621H100L108 676H465L179 1457H239L495 738L509 687H517L551 738L1056 1455Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="396" d="M16 -270L145 482H199L70 -270H16ZM238 698H184L314 1456H368L238 698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1196" d="M1046 431Q1028 328 942 259T705 163Q823 110 871 33T903 -149Q877 -307 741 -401T411 -495Q204 -495 93 -379T9 -64L63 -62Q36 -235 131 -338T410 -441Q559 -441 676 -377T833 -201Q861 -122 849 -60Q823 72 618
-139L531 166Q278 234 188 326T121 551Q137 653 219 724T445 823Q233 929 265 1129Q281 1233 350 1311T527 1433T759 1476Q958 1476 1059 1359T1132 1045H1078Q1094 1154 1060 1240T946 1374T760 1422Q597 1422 478 1351T326 1157Q307 1088 318 1039Q334 956 410
-903T639 805T867 725T983 648T1040 553T1046 431ZM520 796Q392 785 308 735T191 602T176 453Q194 380 262 331T458 242L611 196Q756 201 855 256T984 401Q1006 471 991 526Q953 664 713 738L520 796Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="889" d="M296 1422Q299 1443 317 1460T357 1477Q380 1477 394 1460T406 1420Q403 1399 384 1383T344 1366Q321 1366 307 1383T296 1422ZM728 1422Q731 1443 749 1460T789 1477Q812 1477 826 1460T837 1420Q834 1399 816 1383T776
-1366Q753 1366 739 1383T728 1422Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1626" d="M1106 615Q1080 468 992 385T772 302Q666 302 599 369T517 552Q504 648 533 788Q567 954 665 1054T897 1155Q1031 1155 1095 1069T1143 842H1092Q1099 897 1093 945Q1082 1020 1032 1061T897 1102Q785 1102 701
-1013T588 784Q562 655 569 575Q576 476 629 417T772 357Q886 357 958 424T1054 616L1106 615ZM202 559Q214 409 286 287T474 100T728 34Q930 34 1113 159T1397 491T1482 899Q1468 1049 1395 1170T1208 1356T954 1421Q745 1421 560 1290T275 945Q185 751 202 559ZM953
-1476Q1105 1476 1232 1406T1439 1206T1536 915Q1558 694 1450 470T1145 113T729 -21Q577 -21 451 49T244 250T147 544Q125 762 232 984T535 1341T953 1476Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="881" d="M686 704L684 764L688 823Q572 693 432 691Q325 691 266 749T221 900Q237 1005 328 1066T563 1132H733L747 1201Q755 1245 752 1285Q745 1350 706 1385T599 1422Q493 1422 425 1376T335 1244H280Q302 1348 389 1412T598
-1476Q709 1476 764 1400T802 1200L748 886Q733 794 743 705L686 704ZM433 746Q507 746 580 790T694 899L727 1078H569Q308 1072 276 904Q262 831 305 789T433 746Z" />
-<glyph unicode="&#xab;" horiz-adv-x="888" d="M197 777L418 401H351L126 772L128 791L477 1160L549 1159L197 777ZM475 521L696 145H629L404 516L406 535L755 904L827 903L475 521Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1078" d="M854 396H800L852 700H136L143 753H913L854 396Z" />
-<glyph unicode="&#xad;" horiz-adv-x="599" d="M524 639H66L74 693H531L524 639Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1634" d="M940 1476Q1091 1476 1218 1407T1425 1207T1522 915Q1544 690 1434 467T1130 111T715 -21Q563 -21 437 49T230 250T133 544Q117 708 175 880T352 1190T624 1401T940 1476ZM187 559Q199 410 272 288T461 100T715
-34Q863 34 1004 103T1256 300T1424 587T1468 899Q1454 1049 1381 1170T1194 1356T940 1421Q738 1421 557 1298T272 969T187 559ZM649 678L594 326H540L668 1156H897Q1027 1154 1094 1092T1145 916Q1124 780 964 709Q1081 659 1060 505Q1049 439 1050 405L1051 342L1049
-326H991Q986 362 990 398L1005 504Q1019 593 984 634T858 678H649ZM657 734H851Q940 736 1007 785T1090 917Q1124 1096 897 1101H715L657 734Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="797" d="M802 1383H251L257 1436H809L802 1383Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="770" d="M269 1236Q283 1332 362 1404T535 1476Q627 1476 683 1404T725 1236Q709 1140 633 1070T463 999Q367 999 310 1071T269 1236ZM324 1168Q333 1118 370 1087T462 1055Q522 1055 574 1090T653 1186T671 1304Q661 1357
-625 1389T536 1421Q475 1421 422 1384T340 1286T324 1168Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1055" d="M585 805H990L984 751H577L505 289H451L523 751H94L100 805H531L603 1267H656L585 805ZM836 -1H25L32 53H843L836 -1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="716" d="M644 664H116L123 708L534 1076Q629 1166 646 1247Q662 1329 611 1375Q566 1415 492 1415Q399 1415 334 1366T246 1227H192Q214 1333 297 1398T490 1464Q594 1464 654 1405T700 1248Q684 1144 551 1025L480 961L194
-713H652L644 664Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="716" d="M350 1090H417Q514 1093 581 1135T663 1249Q679 1323 633 1368T502 1414Q412 1414 349 1369T263 1247H210Q231 1344 312 1404T500 1464Q611 1464 672 1403T717 1246Q697 1129 535 1066Q612 1041 647 991T671 875Q657
-778 573 716T374 653T190 715T129 881H182Q173 798 228 750T373 701Q468 701 534 748T617 874Q631 951 581 994T415 1041H342L350 1090Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="506" d="M449 1535L517 1534L288 1271L226 1272L449 1535Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1097" d="M300 1082L190 440Q178 371 179 299Q179 175 238 105T410 34Q573 34 686 135T839 414L954 1082H1008L822 0H771L807 203Q667 -20 420 -20Q320 -20 248 27T145 171L42 -416H-10L248 1082H300Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="928" d="M608 0L697 520H595Q377 520 262 650T180 988Q214 1198 370 1327T752 1456H914L662 0H608Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="468" d="M191 708Q195 728 213 745T253 762Q276 762 290 744T301 704Q297 684 279 668T238 651Q216 652 202 669T191 708Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="485" d="M97 0L72 -77L106 -84Q236 -120 217 -245Q205 -328 127 -378T-94 -435L-93 -386Q8 -383 78 -346T162 -245Q182 -150 56 -129L0 -120L44 0H97Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="716" d="M433 664H379L503 1384L250 1306L257 1358L556 1455H567L433 664Z" />
-<glyph unicode="&#xba;" horiz-adv-x="897" d="M597 1476Q730 1476 796 1380T841 1141L823 1036Q796 879 701 785T473 690Q343 690 275 785T229 1024L246 1128Q271 1282 367 1379T597 1476ZM279 920Q287 838 338 791T473 744Q585 744 665 824T769 1034T793 1190T792
-1245Q782 1328 731 1375T598 1422Q484 1422 404 1340T301 1131T277 975T279 920Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="880" d="M248 941L471 560L468 541L121 172L49 173L400 554L182 941H248ZM530 941L753 560L750 541L403 172L331 173L682 554L464 941H530Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1433" d="M446 664H392L516 1384L263 1306L270 1358L569 1455H580L446 664ZM298 140L255 172L1140 1307L1183 1275L298 140ZM1130 253H1272L1264 204H1121L1086 0H1034L1068 204L659 205L663 236L1160 788L1221 789L1130
-253ZM738 253H1076L1158 719L1106 654L738 253Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1473" d="M256 140L213 172L1098 1307L1141 1275L256 140ZM423 664H369L493 1384L240 1306L247 1358L546 1455H557L423 664ZM1248 0H720L727 44L1138 412Q1233 502 1250 583Q1266 665 1215 711Q1170 751 1096 751Q1003 751
-938 702T850 563H796Q818 669 901 734T1094 800Q1198 800 1258 741T1304 584Q1288 480 1155 361L1084 297L798 49H1256L1248 0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1548" d="M455 140L412 172L1297 1307L1340 1275L455 140ZM1265 253H1407L1399 204H1256L1221 0H1169L1203 204L794 205L798 236L1295 788L1356 789L1265 253ZM873 253H1211L1293 719L1241 654L873 253ZM392 1090H459Q556
-1093 623 1135T705 1249Q721 1323 675 1368T544 1414Q454 1414 391 1369T305 1247H252Q273 1344 354 1404T542 1464Q653 1464 714 1403T759 1246Q739 1129 577 1066Q654 1041 689 991T713 875Q699 778 615 716T416 653T232 715T171 881H224Q215 798 270 750T415
-701Q510 701 576 748T659 874Q673 951 623 994T457 1041H384L392 1090Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="895" d="M529 695Q511 593 475 531T368 408T265 317Q144 204 95 85T62 -138Q75 -228 136 -278T296 -328Q423 -328 517 -245T644 -22H699Q664 -187 557 -284T297 -381T66 -278T12 -15Q31 101 103 211T332 444Q394 493 426
-547T476 695H529ZM614 1044Q611 1024 593 1007T553 990Q530 990 516 1008T505 1048Q508 1068 527 1084T567 1101Q590 1100 604 1083T614 1044Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489ZM808 1588H752L600 1856H663L808 1588Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489ZM948 1854L1016 1853L787 1590L725 1591L948 1854Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489ZM1013 1593L1012 1583L946 1582L800 1778L586 1584H521L522 1598L783 1836H823L1013 1593Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489ZM1117 1805Q1098 1719 1045 1670T921 1620Q879 1620 849 1639T790 1682T731 1725T662 1744Q557 1744 522 1621H467Q482
-1699 535 1749T662 1799Q703 1799 734 1779T793 1737T851 1696T921 1676Q973 1676 1009 1711T1062 1805H1117Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489ZM520 1741Q523 1762 541 1779T581 1796Q604 1796 618 1779T630 1739Q627 1718 608 1702T568 1685Q545 1685 531 1702T520
-1741ZM952 1741Q955 1762 973 1779T1013 1796Q1036 1796 1050 1779T1061 1739Q1058 1718 1040 1702T1000 1685Q977 1685 963 1702T952 1741Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1196" d="M911 435H221L-12 0H-72L706 1455L771 1456L1051 0H994L911 435ZM249 489H900L732 1388L249 489ZM625 1701Q638 1777 695 1826T818 1875Q888 1875 928 1823T959 1700Q949 1631 894 1581T767 1531Q701 1531 658 1580T625
-1701ZM679 1657Q693 1586 768 1586Q821 1586 858 1620T906 1701Q910 1724 907 1746Q900 1781 876 1800T817 1820Q751 1820 709 1766T679 1657Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1772" d="M1613 0H881L938 425H334L11 0H-56L1049 1456H1804L1797 1402H1121L1039 786H1608L1601 732H1032L941 54H1620L1613 0ZM373 478H944L1066 1391L373 478Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1297" d="M1128 445Q1068 229 917 105T549 -20Q422 -20 328 40T183 214T132 469Q131 548 144 625L177 820Q226 1109 394 1292T798 1476Q1007 1476 1122 1353T1227 1012H1174Q1182 1205 1084 1313T799 1422Q667 1422 552 1352T350
-1144T233 828L196 619Q185 553 185 485Q183 354 225 250T351 90T548 34Q744 34 879 142T1074 445H1128ZM579 -9L554 -86L588 -93Q718 -129 699 -254Q687 -337 609 -387T388 -444L389 -395Q490 -392 560 -355T644 -254Q664 -159 538 -138L482 -129L526 -9H579Z"
-/>
-<glyph unicode="&#xc8;" horiz-adv-x="1141" d="M978 722H269L153 54H959L951 0H89L342 1456H1202L1194 1402H387L278 776H985L978 722ZM815 1588H759L607 1856H670L815 1588Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1141" d="M978 722H269L153 54H959L951 0H89L342 1456H1202L1194 1402H387L278 776H985L978 722ZM955 1854L1023 1853L794 1590L732 1591L955 1854Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1141" d="M978 722H269L153 54H959L951 0H89L342 1456H1202L1194 1402H387L278 776H985L978 722ZM1020 1593L1019 1583L953 1582L807 1778L593 1584H528L529 1598L790 1836H830L1020 1593Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1141" d="M978 722H269L153 54H959L951 0H89L342 1456H1202L1194 1402H387L278 776H985L978 722ZM527 1741Q530 1762 548 1779T588 1796Q611 1796 625 1779T637 1739Q634 1718 615 1702T575 1685Q552 1685 538 1702T527 1741ZM959
-1741Q962 1762 980 1779T1020 1796Q1043 1796 1057 1779T1068 1739Q1065 1718 1047 1702T1007 1685Q984 1685 970 1702T959 1741Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="528" d="M183 0H129L380 1456H434L183 0ZM476 1588H420L268 1856H331L476 1588Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="528" d="M183 0H129L380 1456H434L183 0ZM615 1854L683 1853L454 1590L392 1591L615 1854Z" />
-<glyph unicode="&#xce;" horiz-adv-x="528" d="M183 0H129L380 1456H434L183 0ZM681 1593L680 1583L614 1582L468 1778L254 1584H189L190 1598L451 1836H491L681 1593Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="528" d="M183 0H129L380 1456H434L183 0ZM188 1741Q191 1762 209 1779T249 1796Q272 1796 286 1779T298 1739Q295 1718 276 1702T236 1685Q213 1685 199 1702T188 1741ZM620 1741Q623 1762 641 1779T681 1796Q704 1796 718
-1779T729 1739Q726 1718 708 1702T668 1685Q645 1685 631 1702T620 1741Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1340" d="M119 0L243 713H78L86 767H252L372 1456H759Q895 1454 1002 1395T1172 1226T1244 979Q1249 895 1235 811L1208 650Q1177 467 1078 318T832 85T518 0H119ZM649 713H297L183 54H502Q742 54 924 222T1155 661L1183
-820Q1202 931 1184 1035Q1153 1202 1040 1300T762 1402H417L307 767H656L649 713Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1416" d="M1110 0H1058L382 1366L145 0H90L340 1456H393L1070 93L1306 1456H1360L1110 0ZM1228 1805Q1209 1719 1156 1670T1032 1620Q990 1620 960 1639T901 1682T842 1725T773 1744Q668 1744 633 1621H578Q593 1699 646
-1749T773 1799Q814 1799 845 1779T904 1737T962 1696T1032 1676Q1084 1676 1120 1711T1173 1805H1228Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1333" d="M560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1201 630Q1170 446 1079 295T853 62T560 -20ZM1195
-979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979ZM874 1609H818L666 1877H729L874 1609Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1333" d="M560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1201 630Q1170 446 1079 295T853 62T560 -20ZM1195
-979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979ZM1014 1875L1082 1874L853 1611L791 1612L1014 1875Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1333" d="M560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1201 630Q1170 446 1079 295T853 62T560 -20ZM1195
-979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979ZM1079 1614L1078 1604L1012 1603L866 1799L652 1605H587L588 1619L849 1857H889L1079
-1614Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1333" d="M560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1201 630Q1170 446 1079 295T853 62T560 -20ZM1195
-979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979ZM1183 1826Q1164 1740 1111 1691T987 1641Q945 1641 915 1660T856 1703T797 1746T728
-1765Q623 1765 588 1642H533Q548 1720 601 1770T728 1820Q769 1820 800 1800T859 1758T917 1717T987 1697Q1039 1697 1075 1732T1128 1826H1183Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1333" d="M560 -20Q430 -20 332 39T179 211T121 465Q119 542 132 619L166 819Q199 1014 292 1166T519 1397T808 1476Q939 1476 1037 1417T1190 1244T1247 992Q1248 908 1235 831L1201 630Q1170 446 1079 295T853 62T560 -20ZM1195
-979Q1192 1186 1090 1304T808 1422Q587 1422 428 1255T221 817L186 613Q175 546 176 479Q176 274 278 154T560 34Q697 34 816 102T1022 305T1143 614L1182 833Q1195 906 1195 979ZM586 1762Q589 1783 607 1800T647 1817Q670 1817 684 1800T696 1760Q693 1739 674
-1723T634 1706Q611 1706 597 1723T586 1762ZM1018 1762Q1021 1783 1039 1800T1079 1817Q1102 1817 1116 1800T1127 1760Q1124 1739 1106 1723T1066 1706Q1043 1706 1029 1723T1018 1762Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1030" d="M-3 38L438 433L154 795L196 832L478 469L888 832L923 791L513 426L819 34L777 -1L473 389L32 -1L-3 38Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1333" d="M560 -20Q377 -20 256 91L122 -74L54 -73L217 131Q112 277 119 492L126 581L166 820Q199 1013 291 1164T518 1396T808 1476Q909 1476 998 1439T1151 1320L1291 1494L1359 1493L1184 1274Q1236 1173 1245 1061Q1254
-948 1236 838L1204 647Q1152 343 978 162T560 -20ZM174 505Q160 309 250 176L1119 1274Q1065 1351 983 1386T808 1422Q587 1422 428 1255T221 817L181 583L174 505ZM1195 1036Q1189 1141 1151 1227L286 136Q392 34 560 34Q776 34 933 192T1142 610L1180 821Q1201
-939 1195 1036Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1334" d="M1299 1456L1130 475Q1091 250 938 115T566 -20Q427 -20 327 41T183 215T162 469L333 1456H386L216 469Q185 277 283 156T566 34Q760 34 901 158T1078 486L1245 1456H1299ZM891 1588H835L683 1856H746L891 1588Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1334" d="M1299 1456L1130 475Q1091 250 938 115T566 -20Q427 -20 327 41T183 215T162 469L333 1456H386L216 469Q185 277 283 156T566 34Q760 34 901 158T1078 486L1245 1456H1299ZM1031 1854L1099 1853L870 1590L808 1591L1031
-1854Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1334" d="M1299 1456L1130 475Q1091 250 938 115T566 -20Q427 -20 327 41T183 215T162 469L333 1456H386L216 469Q185 277 283 156T566 34Q760 34 901 158T1078 486L1245 1456H1299ZM1096 1593L1095 1583L1029 1582L883 1778L669
-1584H604L605 1598L866 1836H906L1096 1593Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1334" d="M1299 1456L1130 475Q1091 250 938 115T566 -20Q427 -20 327 41T183 215T162 469L333 1456H386L216 469Q185 277 283 156T566 34Q760 34 901 158T1078 486L1245 1456H1299ZM603 1741Q606 1762 624 1779T664 1796Q687
-1796 701 1779T713 1739Q710 1718 691 1702T651 1685Q628 1685 614 1702T603 1741ZM1035 1741Q1038 1762 1056 1779T1096 1796Q1119 1796 1133 1779T1144 1739Q1141 1718 1123 1702T1083 1685Q1060 1685 1046 1702T1035 1741Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1196" d="M589 604L1231 1455L1299 1454L609 549L515 0H461L557 558L179 1457H248L589 604ZM943 1843L1011 1842L782 1579L720 1580L943 1843Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1192" d="M395 1456L341 1143H696Q888 1139 992 1028T1068 738Q1040 559 900 447T551 334H202L144 0H90L341 1456H395ZM333 1089L211 388H552Q726 388 855 484T1013 736Q1041 889 953 987T696 1089H333Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1158" d="M109 0H55L249 1126Q283 1322 384 1428T635 1535Q756 1535 834 1454T895 1257Q888 1210 870 1168T797 1035T727 908T705 829Q693 766 725 707T841 573T957 432T979 297Q958 164 837 72T572 -21Q485 -21 406 2T279
-69L309 116Q360 73 428 53T563 32Q690 32 797 110T927 306Q940 373 907 435T793 566T677 698T652 831Q660 883 680 930T748 1058T812 1178T836 1259Q852 1347 794 1413T646 1481Q517 1483 428 1396T307 1143L109 0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850
-1009T915 760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33ZM719 1269H663L511 1537H574L719 1269Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850
-1009T915 760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33ZM859 1535L927 1534L698 1271L636 1272L859 1535Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850
-1009T915 760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33ZM924 1274L923 1264L857 1263L711 1459L497 1265H432L433 1279L694 1517H734L924 1274Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850
-1009T915 760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33ZM1028 1485Q1009 1399 956 1350T832 1300Q790 1300 760 1319T701 1362T642 1405T573 1424Q468 1424 433 1301H378Q393
-1379 446 1429T573 1479Q614 1479 645 1459T704 1417T762 1376T832 1356Q884 1356 920 1391T973 1485H1028Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850
-1009T915 760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33ZM431 1422Q434 1443 452 1460T492 1477Q515 1477 529 1460T541 1420Q538 1399 519 1383T479 1366Q456 1366 442
-1383T431 1422ZM863 1422Q866 1443 884 1460T924 1477Q947 1477 961 1460T972 1420Q969 1399 951 1383T911 1366Q888 1366 874 1383T863 1422Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1059" d="M750 0Q747 88 769 198Q685 95 570 37T319 -20Q183 -20 102 64T41 274Q66 427 210 513T577 604H834L863 762Q884 895 810 971T597 1048Q461 1048 351 976T213 785L159 787Q187 926 313 1014T597 1102Q762 1102 850
-1009T915 760L816 182L809 114Q804 61 813 9L812 0H750ZM318 33Q452 31 573 97T779 292L825 549H583Q381 545 250 472T94 270Q76 171 141 103T318 33ZM536 1382Q549 1458 606 1507T729 1556Q799 1556 839 1504T870 1381Q860 1312 805 1262T678 1212Q612 1212 569
-1261T536 1382ZM590 1338Q604 1267 679 1267Q732 1267 769 1301T817 1382Q821 1405 818 1427Q811 1462 787 1481T728 1501Q662 1501 620 1447T590 1338Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1693" d="M1138 -20Q1011 -20 918 45T790 230L787 216H789Q718 105 597 43T342 -20Q190 -20 107 65T45 284Q71 445 202 537T534 630H803L819 720Q830 785 825 845Q817 941 758 994T598 1048Q452 1048 346 973T210 772L158
-779Q188 927 310 1014T598 1102Q729 1102 804 1024T878 814Q956 947 1069 1024T1308 1102Q1441 1102 1526 1029T1631 827Q1643 746 1629 661L1614 577H854L851 564L838 500Q822 415 829 331Q841 192 921 113T1137 34Q1321 34 1484 164L1509 120Q1351 -20 1138 -20ZM341
-32Q454 32 566 85T732 225L794 575H536Q363 575 244 496T99 280Q78 170 144 101T341 32ZM1308 1048Q1161 1048 1044 939T861 632H1567L1574 664Q1588 737 1580 807Q1565 920 1493 984T1308 1048Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1018" d="M430 34Q572 34 676 115T816 327H870Q834 172 713 76T431 -20Q282 -20 190 72T78 329Q67 424 81 520L87 562Q113 721 186 847T364 1037T595 1102Q758 1102 851 996T933 725H879Q892 869 813 958T596 1048Q407 1048
-282 894T130 480L126 407Q126 231 205 133T430 34ZM463 -9L438 -86L472 -93Q602 -129 583 -254Q571 -337 493 -387T272 -444L273 -395Q374 -392 444 -355T528 -254Q548 -159 422 -138L366 -129L410 -9H463Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1011" d="M458 -20Q328 -20 234 53T99 252T77 518L85 568Q109 714 187 841T374 1035T605 1102Q769 1102 862 981T941 671L938 640L929 577H143L132 518Q118 434 131 348Q153 205 240 120T457 33Q644 31 794 181L830 153Q682
--20 458 -20ZM605 1048Q451 1048 330 933T149 631H879L882 644Q895 716 884 788Q866 906 791 977T605 1048ZM698 1268H642L490 1536H553L698 1268Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1011" d="M458 -20Q328 -20 234 53T99 252T77 518L85 568Q109 714 187 841T374 1035T605 1102Q769 1102 862 981T941 671L938 640L929 577H143L132 518Q118 434 131 348Q153 205 240 120T457 33Q644 31 794 181L830 153Q682
--20 458 -20ZM605 1048Q451 1048 330 933T149 631H879L882 644Q895 716 884 788Q866 906 791 977T605 1048ZM838 1534L906 1533L677 1270L615 1271L838 1534Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1011" d="M458 -20Q328 -20 234 53T99 252T77 518L85 568Q109 714 187 841T374 1035T605 1102Q769 1102 862 981T941 671L938 640L929 577H143L132 518Q118 434 131 348Q153 205 240 120T457 33Q644 31 794 181L830 153Q682
--20 458 -20ZM605 1048Q451 1048 330 933T149 631H879L882 644Q895 716 884 788Q866 906 791 977T605 1048ZM903 1273L902 1263L836 1262L690 1458L476 1264H411L412 1278L673 1516H713L903 1273Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1011" d="M458 -20Q328 -20 234 53T99 252T77 518L85 568Q109 714 187 841T374 1035T605 1102Q769 1102 862 981T941 671L938 640L929 577H143L132 518Q118 434 131 348Q153 205 240 120T457 33Q644 31 794 181L830 153Q682
--20 458 -20ZM605 1048Q451 1048 330 933T149 631H879L882 644Q895 716 884 788Q866 906 791 977T605 1048ZM410 1677Q413 1698 431 1715T471 1732Q494 1732 508 1715T520 1675Q517 1654 498 1638T458 1621Q435 1621 421 1638T410 1677ZM842 1677Q845 1698 863
-1715T903 1732Q926 1732 940 1715T951 1675Q948 1654 930 1638T890 1621Q867 1621 853 1638T842 1677Z" />
-<glyph unicode="&#xec;" horiz-adv-x="404" d="M126 0H72L258 1082H312L126 0ZM359 1246H303L151 1514H214L359 1246Z" />
-<glyph unicode="&#xed;" horiz-adv-x="404" d="M126 0H72L258 1082H312L126 0ZM498 1768L566 1767L337 1504L275 1505L498 1768Z" />
-<glyph unicode="&#xee;" horiz-adv-x="404" d="M126 0H72L258 1082H312L126 0ZM564 1251L563 1241L497 1240L351 1436L137 1242H72L73 1256L334 1494H374L564 1251Z" />
-<glyph unicode="&#xef;" horiz-adv-x="404" d="M126 0H72L258 1082H312L126 0ZM71 1399Q74 1420 92 1437T132 1454Q155 1454 169 1437T181 1397Q178 1376 159 1360T119 1343Q96 1343 82 1360T71 1399ZM503 1399Q506 1420 524 1437T564 1454Q587 1454 601 1437T612
-1397Q609 1376 591 1360T551 1343Q528 1343 514 1360T503 1399Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1158" d="M907 1307Q1054 1097 1040 796Q1035 697 1009 551Q964 295 830 138T514 -20Q391 -20 301 45T170 224T150 465Q186 686 320 819T645 953Q759 953 847 907T983 780Q1005 1079 858 1279L605 1149L583 1199L818 1321Q705
-1442 494 1528L520 1576Q741 1486 869 1349L1086 1461L1109 1411L907 1307ZM966 617L976 672Q949 776 859 835T645 895Q506 895 399 813T237 581T204 308Q227 183 311 111T518 38Q679 38 795 179T955 556L966 617Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1097" d="M256 830Q337 961 447 1031T674 1102Q798 1102 869 1038T951 853Q957 777 943 694L823 0H769L889 694Q901 764 899 832Q894 938 837 994T672 1049Q535 1047 409 943T237 693L117 0H63L249 1082H303L256 830ZM1029
-1483Q1010 1397 957 1348T833 1298Q791 1298 761 1317T702 1360T643 1403T574 1422Q469 1422 434 1299H379Q394 1377 447 1427T574 1477Q615 1477 646 1457T705 1415T763 1374T833 1354Q885 1354 921 1389T974 1483H1029Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1103" d="M80 562Q105 713 181 837T371 1031T620 1102Q730 1102 815 1053T950 908T1007 694Q1010 626 995 520Q970 369 894 244T704 50T456 -20Q345 -20 261 29T126 174T69 389Q65 456 80 562ZM127 348Q147 203 234 119T455
-34Q612 34 738 144T921 441Q967 596 948 734Q926 879 840 963T621 1048Q464 1048 337 937T154 641Q108 488 127 348ZM697 1267H641L489 1535H552L697 1267Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1103" d="M80 562Q105 713 181 837T371 1031T620 1102Q730 1102 815 1053T950 908T1007 694Q1010 626 995 520Q970 369 894 244T704 50T456 -20Q345 -20 261 29T126 174T69 389Q65 456 80 562ZM127 348Q147 203 234 119T455
-34Q612 34 738 144T921 441Q967 596 948 734Q926 879 840 963T621 1048Q464 1048 337 937T154 641Q108 488 127 348ZM837 1533L905 1532L676 1269L614 1270L837 1533Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1103" d="M80 562Q105 713 181 837T371 1031T620 1102Q730 1102 815 1053T950 908T1007 694Q1010 626 995 520Q970 369 894 244T704 50T456 -20Q345 -20 261 29T126 174T69 389Q65 456 80 562ZM127 348Q147 203 234 119T455
-34Q612 34 738 144T921 441Q967 596 948 734Q926 879 840 963T621 1048Q464 1048 337 937T154 641Q108 488 127 348ZM902 1272L901 1262L835 1261L689 1457L475 1263H410L411 1277L672 1515H712L902 1272Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1103" d="M80 562Q105 713 181 837T371 1031T620 1102Q730 1102 815 1053T950 908T1007 694Q1010 626 995 520Q970 369 894 244T704 50T456 -20Q345 -20 261 29T126 174T69 389Q65 456 80 562ZM127 348Q147 203 234 119T455
-34Q612 34 738 144T921 441Q967 596 948 734Q926 879 840 963T621 1048Q464 1048 337 937T154 641Q108 488 127 348ZM1006 1483Q987 1397 934 1348T810 1298Q768 1298 738 1317T679 1360T620 1403T551 1422Q446 1422 411 1299H356Q371 1377 424 1427T551 1477Q592
-1477 623 1457T682 1415T740 1374T810 1354Q862 1354 898 1389T951 1483H1006Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1103" d="M80 562Q105 713 181 837T371 1031T620 1102Q730 1102 815 1053T950 908T1007 694Q1010 626 995 520Q970 369 894 244T704 50T456 -20Q345 -20 261 29T126 174T69 389Q65 456 80 562ZM127 348Q147 203 234 119T455
-34Q612 34 738 144T921 441Q967 596 948 734Q926 879 840 963T621 1048Q464 1048 337 937T154 641Q108 488 127 348ZM409 1676Q412 1697 430 1714T470 1731Q493 1731 507 1714T519 1674Q516 1653 497 1637T457 1620Q434 1620 420 1637T409 1676ZM841 1676Q844 1697
-862 1714T902 1731Q925 1731 939 1714T950 1674Q947 1653 929 1637T889 1620Q866 1620 852 1637T841 1676Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1134" d="M1056 686H86L93 738H1063L1056 686ZM596 1081Q599 1101 617 1118T657 1135Q680 1135 694 1117T705 1077Q702 1057 683 1041T643 1024Q620 1025 606 1042T596 1081ZM461 303Q464 323 482 340T522 357Q545 357 559
-339T570 299Q567 279 548 263T508 246Q485 247 471 264T461 303Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1097" d="M626 1102Q739 1102 834 1047L948 1218L1012 1217L880 1015Q1008 893 1008 685Q1008 623 999 562L992 524Q945 278 795 129T444 -20Q340 -20 249 28L135 -144L70 -143L202 57Q63 174 62 394Q60 523 100 655T218
-888T399 1045T626 1102ZM125 520Q116 465 115 409Q113 319 143 240T229 107L806 996Q726 1048 627 1048Q450 1048 311 909T130 547L125 520ZM945 562Q954 615 954 669Q954 851 850 963L275 76Q349 34 443 34Q620 34 758 172T940 535L945 562Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1097" d="M766 0L800 175Q729 77 628 29T406 -20Q280 -20 207 47T121 238Q114 317 128 401L245 1082H299L180 393Q169 325 173 261Q178 153 238 94T404 34Q550 34 667 113T821 321L952 1082H1007L821 0H766ZM722 1269H666L514
-1537H577L722 1269Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1097" d="M766 0L800 175Q729 77 628 29T406 -20Q280 -20 207 47T121 238Q114 317 128 401L245 1082H299L180 393Q169 325 173 261Q178 153 238 94T404 34Q550 34 667 113T821 321L952 1082H1007L821 0H766ZM862 1535L930
-1534L701 1271L639 1272L862 1535Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1097" d="M766 0L800 175Q729 77 628 29T406 -20Q280 -20 207 47T121 238Q114 317 128 401L245 1082H299L180 393Q169 325 173 261Q178 153 238 94T404 34Q550 34 667 113T821 321L952 1082H1007L821 0H766ZM927 1274L926
-1264L860 1263L714 1459L500 1265H435L436 1279L697 1517H737L927 1274Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1097" d="M766 0L800 175Q729 77 628 29T406 -20Q280 -20 207 47T121 238Q114 317 128 401L245 1082H299L180 393Q169 325 173 261Q178 153 238 94T404 34Q550 34 667 113T821 321L952 1082H1007L821 0H766ZM434 1422Q437
-1443 455 1460T495 1477Q518 1477 532 1460T544 1420Q541 1399 522 1383T482 1366Q459 1366 445 1383T434 1422ZM866 1422Q869 1443 887 1460T927 1477Q950 1477 964 1460T975 1420Q972 1399 954 1383T914 1366Q891 1366 877 1383T866 1422Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="959" d="M396 84L406 105L939 1081H1000L316 -182Q242 -322 166 -378T-3 -437Q-41 -437 -83 -426L-77 -375Q-26 -384 -9 -384Q124 -384 221 -236L261 -170L358 11L124 1083H181L396 84ZM803 1535L871 1534L642 1271L580 1272L803
-1535Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1097" d="M473 -20Q358 -20 272 30T146 168L43 -416H-11L326 1536H380L264 889Q335 985 434 1043T656 1102Q761 1102 835 1050T943 898T974 675Q971 611 962 552L949 486Q897 251 771 116T473 -20ZM907 552L919 659Q929 849
-860 948T657 1048Q525 1048 408 970T250 775L160 269Q183 156 267 95T473 34Q635 34 747 166T904 535L907 552Z" />
-<glyph unicode="&#xff;" horiz-adv-x="959" d="M396 84L406 105L939 1081H1000L316 -182Q242 -322 166 -378T-3 -437Q-41 -437 -83 -426L-77 -375Q-26 -384 -9 -384Q124 -384 221 -236L261 -170L358 11L124 1083H181L396 84ZM375 1422Q378 1443 396 1460T436 1477Q459
-1477 473 1460T485 1420Q482 1399 463 1383T423 1366Q400 1366 386 1383T375 1422ZM807 1422Q810 1443 828 1460T868 1477Q891 1477 905 1460T916 1420Q913 1399 895 1383T855 1366Q832 1366 818 1383T807 1422Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1294" d="M1407 721H434L442 775H1416L1407 721Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1524" d="M1440 721H142L153 775H1451L1440 721Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="320" d="M364 1554L398 1520Q292 1404 269 1273L250 1168H197L214 1272Q243 1439 364 1554Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="320" d="M209 1151L175 1185Q282 1305 304 1431L322 1536H376L359 1433Q329 1265 209 1151Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="301" d="M-51 -182L-85 -148Q19 -31 44 98L66 228H120L99 100Q69 -68 -51 -182Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="495" d="M615 1554L649 1520Q543 1404 520 1273L501 1168H448L465 1272Q494 1439 615 1554ZM539 1554L573 1520Q467 1404 444 1273L425 1168H372L389 1272Q418 1439 539 1554Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="497" d="M209 1151L175 1185Q282 1305 304 1431L322 1536H376L359 1433Q329 1265 209 1151ZM386 1151L352 1185Q459 1305 481 1431L499 1536H553L536 1433Q506 1265 386 1151Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="477" d="M-51 -182L-85 -148Q19 -31 44 98L66 228H120L99 100Q69 -68 -51 -182ZM115 -182L81 -148Q185 -31 210 98L232 228H286L265 100Q235 -68 115 -182Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="626" d="M176 733Q191 806 243 849T362 893Q433 893 472 847T503 733L498 703Q484 633 433 589T312 545Q242 545 203 588T172 703L176 733Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="596" d="M167 556L388 180H321L96 551L98 570L447 939L519 938L167 556Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="596" d="M227 941L450 560L447 541L100 172L28 173L379 554L161 941H227Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-100italic.ttf b/static/fonts/roboto-v18-latin-100italic.ttf
deleted file mode 100644
index 5538b7e1ad89b322b9f67af462ca3935f00eb012..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 37488
zcmb@v2YeI9)(1MXMJsn%vL$z0mK)f{#zmr--XWCGA@tr&GrhOaYZ6L;P(pyv<b@<8
zfj|flLYhf0q?1Z|4_K@BpIOP42={*X_ueC!ZJM1ubLPzHGbWS}V#YxtY3*9KX)7<5
z-GnS%gr_6gb?e&W+~1#$!Tk+F!q2zs(W|9vnCS^ZHa<!Sz1p=$LD94i9c6^fNkjc1
z!zT`%e8KwIbwcLOB1F7r_>Adk^@`|KLKcs}@9jrT9zAjJuL(y8S#S~WpBX)L+GJuR
z7PLPdzlV>WFng3s%*XpQkC3UKju|m=mSWWYMEi^I``=?m4joZF?~SE|%m~N5a||AY
z&yQ?P$n0v|XN;LReb%zQ9ZunQJQJUsP(FO<!8cbY5;7g_(T^t%oi$lZ5l-Tsy`MH|
z=){p}?V6+kzN7g4vB~ArrhA7Hz`C?2`+f4%k&|<sFP$M|(IVV`L1gxum;(%n#6Utw
zIEf-t)NoUDw7H=>+~g)z>}cS}5PpoPB5u;AuUjZctQ4$G`|%rs8)9hMPn86MH&t0b
zDf-FCPnDtccQssp62VVy!BiPZe=n?Ww@2H>XiB50Xs4yrF6Ma3go{q?N9`FJenSv7
zjS3!*?7sD=ta#=NGjB%=vpj=@K`VtpL?F4|TXa0{K@=&t3vdwtE&{++DzZB?x3B%Z
z#NPpRm75e4*0(q;#nkC6F0v{HgCi^JN#_$z?V^|&YfBQvEF9@3DfQOUnDh*5jGd<A
zYhOsi1iOI%b73Twxa9&jt#Z=>x3S7Co7|yQh4rcEu(*nCqQmSertOQ13SwQyaI`w*
z3EH1Ddffy3NYGX^i1f64f+UhuvRjQvvoowmnB1v89ESt)a6gVsxH0)}IQG#ej{OAu
zlEAQ^94?@RdG6$bxJp86J1bSWllds(7*^#DE2uOE{2FF*N8+K$ZLV?~P3{<8*$Vua
z+;RL#3hR^|y|TOPycCOeOR-q2*hM>v19x`exVCRYgLT?%g_=%lpC~kMQ^QSk@a6^^
ze^<QZG&L*Q7aJR#r2|iE`{)jB6x~rGggfaY+E7-Up5IIG>@^{rP}0d;DAhA8B>7~m
z8e6XbJt6>^_cRne4fW%IkE{PC9lxZ9`w)_Wn+%2!F(Z_bV{~W+!)&OjGA5wkqNy@5
z;5NhLwpY3B1!@j|$(>=U%&q+y7;t81Wo2i%oKBakSg~3ahcnBOZcq$Xt7K#3qbLqn
zR+g*SU_~8qPTHdlzHjnWn)PdUsw?%#-ndfh&TS8V79UlzfLhw@PO^P{1kcaCi07w|
zZM{MJ9vhc2AiLt_?N=h6eKzXGGl#2=t?4~~$mrtfXLr63b>`X7ubw+nB?y&_^3Hm1
z%AMs)Bm#7kPnwZdWD;?=EO0m1vBYPiA2Hd$MK-4tlUu2BD+QI&wY|a^S0)79W}Dn;
zRqnI`cebgrIN*7jsj{s07P!ECVG|}j%f<R?wH6lvD-1ylBZ}dU-wn1qYRK8tCd5ph
zV-B+&n^wNS92$Fax3OQ_{_CxgiX76r&4Bf`NTWD%${cfe{PD?CQO|l}hhi}HZ8LC<
zEmDz;ecKLNYxDeGSFETjU#gtfa)tZIqUI}3Y4zImS~a<SUS7wZYsPoZ*QTAA-(}gM
z%DJtUozzz3=eFy;YC@O%ybe89&3HFWDhHbsNn`K#(oo<sh14M><bIuhC_tLx$6y?8
z;{0<h7B{hsw9?}gMp}7F96OQpJa&r6OJ}D@{h=wASF!3fE!If<=8iK}rq-fTwMSan
zQ^izSRQnVNW~AohONv6Bpen`Y$mSRa0a}V&lu;aL&tkQ?oGwm^^r9<I3GaDm^wgE+
z*s3G6VtKZ!&h~B1=YIPBlW)XDZQR=E&CA;IhHI8bMYY>qKeYR?6Y-|8eU=;%9RsH|
z9(r-=w#gf}&hvcp$h&_WefPu*uRS*M;uKHLX~CW|wzA)Vjol^d)TQ$lEV^&zYY;8u
zZD|<o#rdE`r3Thf;+6{BLKP$f;Ky75_iI#CT#(?ByZ`+6W9*&DTCQ--&<FC-q=v@C
z@^`{Pv+M<%K@dPWHmljDWC__>W|vvG7%}IK9S%7`6y{Ejn}5GSnK*8np-+BS?GtU{
z`w7Pn-O${<>kOhjfBH#~-=j`Ky>qp?^dm!Wa8{EVZnp3*Fy4VLh}lkJVKgdayYLaS
zKxRcePc5Z#f*{W+kDIkx3E8Usrq#_~D8$jWX#IQIu6LdO+G9UyUwRH`y#W6l;URG)
zBuymAR>PxAymclEB@l(g$)zeD-->gG;2csAhi+xMWU$Iin`}`;noTciPsY=ZZ5ni<
z6C$)#XX>BSZsv-&=awv|YqVKwovXDMQfUkAtes)28`&(`r6(b0(p3^3!M_%QzErtG
zOqGUOYH^F4KQm6Ob7!F|eZ#2b_i^^tS}64SJ}%+8QZ0o3RZ9OxyWXo_O16<lh(h93
z$r!@hH5RxbBrtwHxu|4wE@y~IA8)leW0Sq<vlgsaa1>Cr6c!2=;R(!~c$G*pe_JdF
z6gTKK1ceZ;IgRusVWE@t1u`069E-jr=`$<@C=0<nsuXL5a$$WilNwQ65Fmw%YXmUh
zKjK{`wt>_XNrEc)ARvG|Kq)D#uQ+INe3>|?Y@Q((l6Ev^c?4#8G;xsjsx>1MaJ#K0
zNbLY{{1e`<%`iO22H+XYGNtymu)drQcJH#7319|46a|85>qr+wkxk6vA~VR1J~wq|
z2ZOP&n3`UlzO%g&TE9g5nRbZSIRDgN_3If!ohwG4{G+gLLd?`pHVmOjv<~e#?en!0
zv>V#{+Edb~-H&LmYF}x;_L}!bIW3@(KW+gwX$BaVMLq?Mt%XVzBOe3SeHloV@9c#t
z$xJ81;8u#Y(5r&T#tyod!y>yfi-maS&)U64`ay&|c6+18*_buJS3L4XVkLdl5F2B2
zI<BJdm8d(v5`-wBN)@B{N25%Es)iayqR@;Q!+&IYp9`!_7o!em1|NC_n#S_#lLlek
z#iWFtJGXt4=1ij@N7Zu)39ot9iIP*;a`o{C&c3_vnLpljpM2l59FR7|=q3WvI%KM9
zteaZ{X(S+x^g~*sCDF(P)R+gQEzTWjs#F4y63TyaQ&VM5z|)u<%Aiiwe@rk{rq})m
zVrQ~X??bk)4+f?l7$k^Ct`7JrIA~?RW496#_HEnwt=*YQ!z+(pNH85(xp-+zqW1eU
zbDtj+>5RSj*uifT6E3|xP!x`AeBkW4T~z(#qvKQ5dKu@Ip8R6MrCGb*es1^f<4k+Z
zhxQl-ZWIcB)JKiv{0JQa^SKL6a~8$q7M0kHN9QYr+FmdXpEBK0H40&@uMr^<PONi^
z18gPJMP1Ym78duL@<*G})}Ee{*u7=-Wuec$QS=3;HjS>M$&y5?E#jlg8SSjbhztO1
zDP*!5nVN>SbeJecg!)H>4-XTpz;_^NDwIn~r9hPxeuYsAoQDvWNwu)6=GY_#a!L{t
zC{XDwOeuA`*qk&7Ohti4h9NL>^-a-^36%!V!tF~=&N<e}Z2$Z0v5Q8haqo_mS4PCd
z?waw$HsQALM5*WWU|~kpf={&D*Pq(|%x+pRqhcu)DuDHY-tWbaL2EXWMMkQo>>Pa5
zZDM+p-oqf}i|g#HhhQBv0AwR!!ozJW00U-Mm2tH{qOr=f+FOi)l19)U#u=?jB<m5l
zj+t1}CCE#w6+Dx5O?*xPqnOvNdH+QZ&OX$}61(n7`LeS;V{B#gki1s=Cq35Ec3;Ju
zSErhzcgnD>wrFR1H@tVj2g_G~zu^9#S3O9V(C0lb9Gtdj{(G}1eVk^kUa*dh<P}g^
zZ;YgYH2TlHh7T+2ryM+z#K&YPbugJAb+3N1f!MtIv?AUwufH`_p5p`;uM1kq0Y>A2
z(IPTk%`Glr$jLRiW2@LP#fModXvgZO9l!ig3$2Wv=eY}E^8|2bRZJ<wbJbLs!Wsi7
z&#1*IIDci`+FPI)x>W6yg@OeX^SNvlos6YRKy-0YhQ+V(gPbI5%;U=zEVm?SpI%=0
zeBT)BnQi6c&56`_YD#6-o#sxDk3FRQm6Uky@uO6n60dH2_-10lu?M&PBsHCRGOzBX
z1t+hMe4=8>xq7*$ryTik<jLx*Lv{{0zisQ;v*L&~=bzoU`U#cI@y)=E#Bo!Xj8QGQ
zOv`jzOzsRHPQrkbFh5RWa1+DkxD>-CF*rVEJHLuCRa$HN>z0DG{xDOeqxM%|!^Ks5
z=wN&n#TsD8%MMp@8p$lm;L2u}gDIajt5tlQ-t+D9P0xgeuKs$>?87~U>}J|L?ZZ4{
z9E|yi+S-lOlw%R3b{oeoe50vT5_bu&8fUM3?a*fGIw6dCd13j7+N0Vs$w>#Ud3I?<
z%ZjrDg+rSb&UxUB*Gr;d*B3~+pbGO>get^LHi{SEqi~A_?%3;v^@-Q(J?Evg5OuQg
z>n8kaAf`VU)%KwV@f9hLOGx6AkW2syHAb;YM8@Kvum;XdpvEm%1!`AdC{zLWQ}zju
zhj?NXagtHkrX6lf=N8e~4cQn?qo>51;$l#;Lh7r8YgEvt2y894SOsVUl_RF<OF_uS
zybxKrQT?`2tlOpf9YxF)J2|yt=(EI0L&e9XLiD4x>hA{{lmh!9iL4)@>3`@7WgVd|
zvA<`4QTSe|-eMGX(>{&06-C;LMyxL<y|={qptm@ZL58SNnOUsqsM<Lg<b>chH|VW0
zsaA($E`zuNRWvbufw8iX+RnnS#EqrcIL7lpXUt~w8;uUX>IbeS`mf=Up#xKwEg0J;
zB4XBn#TOi|^e?t<c{stmLi6T@tzjBsvgGsAJichk@b^aFH|o*#k6gL7tNhA~JL+ls
zYxPEfbkrIfuF6YEW73{f5O-dIyHwX2x!T0Jbd?%j%G4rvIJzK*vnz1!K-p6oqyxJ1
zOqJQS9dv{JH4C^6H&wQ&z2yp{i<@vIX2#8JBD3JQcHnXf8DKL+Pz+|NxX5KgwG6@K
zG?NTWJJBE*GObpd6_#ICcDg~3z8*3{+4bt+(ZVA?uWvf8Y;(9Ec4)WaiZfmgS)l!O
z_8IN4_TxT-VHK61IQFP{>+6@a&$r0Z0cxk^uR@P(Ymk>;tG+CEY(DLS;^mE}uKZ|y
z%%V|Wtz5o`&Um$`%yX`wez*R&ek>pR9F5<2K)bAsdGQ79r9IsW`y8fiUw@B2MY|r=
z9@DN|)K*=6t3yvJs`u0CuEM+85+Zm{Lt-RCVkpo|da9ve9F3tSJ|%*!CBMebagQ4V
z7?^=Eun>tkvS305P8~IrKLy>u(g7huq=@1MPnU1Y#LyNruA#>!tT{waYMtd1^j0_e
ztq8ZONcsVq>3}8@5<877R^#o=M0dw?rx%XVK292>nfNULHI8yM78E@=jt*2eutNb3
zr%uG3ixUP`M%50lYK-DE4}vk(K4rR1fW2Q>zu01DlEyD@;PKSe$4vd4ZSUuy<?p?l
zWZk`B(Z-l$?W<R`AEwdePyLgU@bu%_RNCa?PsxeybJ`QKTey5|(XkZkmBmkeAiVAw
z{mdilRp;LAn;(@K2V4rt@iu01I_ajyI+*`U*H41HW+D(SGK5D*a3&J*FArG&>}tBm
zj8G;mxoTU=)exq%>z*)XzQ=OIC&ML;DbudKxA5#p8ey+byM2G{tI$&8#b=j&eKa*Q
zOz8F4)QdE-jGle(pIJB7b?y8DqszbEfByZo+Re&qEn6?WR{q`#;6`lhUclHzKsRWw
zh9@Mlk%K?_zm6Hhcx1o;U_1gwi4Q=E0EZovLrD>Ve%&jOl?}u%UHQ&}5IHh2^|JQC
z!I9t5W<S%3g-I53>gNZ5?itrt_3XL#Deav@RGxF|484~|K2kpB;3bjao589A)-W<j
zr9Nw&Q9Gw;zl5&Q!ov()_=JJ3!Wdn#Ljew_PK2Ec16>7qZ%x6fdXP!QX9E;ouJqc)
zH$07}i&@6%eI9XuvHJaq!VAJ1o)J#j?ewf?Q1%Cu&jZR3(m|!6OgGS}qSk{EFemRm
z4Iv_f<)iKzX3k*oQ%~MJXSFz9seWma@TTyJr-XfZHT&{*(BnU#M+X_EhI9M-ztN*Z
zr$<MD8tq_22e0^@zS{s3!0ot0WzJ+23MUfei<z61juL2bMDRNznV&?uuY>mM!OOpf
zh!Hudr>SxK<sYQdSB}4<o$oJG@r@_e|J1pY)?J}r@9Z&<8b9iK&o?J&+OAKZJ9<Vt
zqtW(`mw)Tjo*r`fuqwCVW8eEfkA0Bu+RtFP*P@0hLI`tL&ttBmz#->GI`i&uzq{1Q
zIj?%&eCKUvg}7`+DaN;+?Dq5(4lzg;<G`p;BpEf{nLx(~|DONjm<wq0DYS$)D9OSI
z)x}jbDO96;zBBf2kVWH{m4Q<XG*~Peh;C{@DP$5&{M~spOZ)4o=T0R%Bf_E|oU{LX
zyX>w`ysmk^J=3k#_$l9?^<yp)-wY@H)zAoL?A?VPjo?y7{}c*}d~o%b@h`$fgGvQ9
ztyF`4S0gWEj=M~1V|K_t+8=|^<xMnPIMve=BP6#JJnwt11GqCcgdx;3x%x8(8RoM%
z5s=Bi2J!hf|D*H@oUia=vH4iMLwHlE{;e7s4#zHLo?$NU=@69$^fU;&ymS7Z`pJTi
z8TUy0<s>I1)@@4k{_3X?ek!aVA{3*;=qfwzp}ob@Zq?2os$Z$A9r(dnjWF6?dGM`n
za-Um=<$kvg`k|A%;VOjOqY43hA;_Z?G!A|u;?UK|5rO-fRE3`y-7*-8sij!zUE&$=
zgX>nQaNv8V-22w!0OOe4gXx?zL3f{mGsKb{aQV<Wb=iD}zTogl<{%rV=Cd$b;)A(-
zkXMHJ=4$6ZR42~wxqptpJ!gwyRB8r)5DJ%Enji@g>Go%7*uzUNO%Q2Bdg@c!@ASI(
z%BhdE=L;NR^p#Vqema((9T79*^L3p&UwMHR?w<L@>YklnI<39&sQC5k-)pM&%PXx~
zz54S?8hQM~4(Ju*w8w$bP<Xq$!XjhN31(e{`+CJu<{xUm{j7$G%+<sqbb%58kt%a-
zUty5|sa%VY98eozl4WJvZ;f+S(<fejFEvfO@rky9PJNEb_LNgkX)}e<p6!rcUp@c)
zC(h>{KX?^dCYh=I!*L!@@__TG{Ce!G(DSo>&;{xF{yERo`Q%zS+|YKjYHthcXTm|m
z)Z2d}-olLNV7!Z|@6@?5@V<W|-=10Z<G(SVrrokrQ}P}7zwm+fk~sR`=tmEG1OIN|
zKMJ<Ya5Xxf`TX3`COEk7!eN4#ir+1zM(bK=bkJa^;e-drAq8!Lo!6yc3KV#Qg6IeJ
zsdaYYGtD}o^frBN*`>ZQ@ozs!BLtVnLXRH!D<$RfIc=d(?%5=}>G<d7Jn*62vpG^Y
zaCO&#mly}i!@Sswd67p(sTMv$I^;ou#17tQXRJW5^H670C=Vhd)EPiAEYKbh>Qpm%
zUAH~R%?U1^m6ZX<M^k}&nz&L2#|IcX{?{E(x+@I?C;k%ixVH20Hm2wYzFxBU#rsUo
z_{%5uYky~2BV$hP{{4J>^wuAj->6P>#$SJVKQ-p1&`bBt9zXGc`^N9>JNe?A{cmrX
z)1gtniu^XOY$-oD@cS2zzPf345A^wYgf|6@nnD_?)EApzTsKIIsu?YVDQKD?f*}Wl
zs-@c=&#%s3Jzhm>1buA<^EOek#{0c&!57S=i5g{z0afT&4dTPxyX2poem;DM$kQcW
zmJ3puJBM5r*>X5rd+ozDSNhtHls=w%@#zaR(E<Kio%@;g>zvQmi62&Hp8xIdSH!D;
z;~;u!lq-=f(m<slZ0vM6g7`vE9MV4xRqFGqW!hY{7;L_n{uq%fJXYq3YN1_gxV~3E
zIr-MTXc}KRPl(bTy^V%79}ytag9J^`WDokJ-^<3Ce9gQd0&}?`$%CK5`3bWhz*uyM
z#B7B+#A3R76un)xD{d^kR_57Pw%^vlbEC=5MuUEqhTVSXo1dkjx9*iLY<c*0TL6f-
z&O4Z~p8@PJ=mP$D7aRK^%Pffa{UZ}3Ayq<kp{Spb*TR4eF)%|8G!AS5W$gcAVZ2bk
zjpra;)m+=`d9sx-SzF#hGz+^tC7xvAjHk75Q@9KqBD)3@qmL8`7^xt*g3#uN%LfYk
zs*MZdVxhCJq_wBZAm<QmMH^v&*n?Kj^n57PW40>w{tgVB1u{ZNXH^c6!a<GusXvhP
zRq%9lk2#m*TBf9i$Sf|aD<tsWyJV%kxX)N^R-}p5k166I+3C!ayOz>S^fFDmB8)LC
z!pzI9nR$o@B3~d-5`pUlc<RwHP@iI_c462j+VzhV?IzN9EQXGMpK>a215om^cZtvf
zxMQ(8>WkG0y4S@&;ULaH#4k6XO&iFS|6F5u7^hvKDu<<>D*Lzq-a?iQ7+F9EnW+~L
z2t`W(1z~5$E*h)7to@*TOdZz^i~er!RPJHWOcLG`z6O2`=%e48#wg4`=iuPxW-u+l
z$nh)APgo}{4k1}v--PZiKGawq;h7=4<H-S}>%CWnSCC015=W4}?N^8bkq7?|%nspV
z^;IJrT;N62F8x7&F;KjnNzgkriqe4)P<jj*@fhwsd@@Q*6$?ahAj38$)h`XUHN$)1
zka4lzoA3^HK^90|@{k&)dxw$8lj)OjHV6ls*_RaKXCHjB_|+&?urYs^8pco1J5CjZ
zHG=_qsyu8VPHtO}Gefn6G0$D|kZ?<qCC^f3kp?m)ARt<SG@?L9J2b#7IFqvxgmGrL
z>@{IB=KWHb8m442pO(YG9PGl6qP6GO_pjU+6Ho0QQ<@z6z?zlUlblJ_yAQZ+!;u(5
zHS>yJd)52(s`gKud1>ECqo>nD3$`DXcQ4<*X@;=I{p`b@=USJRgxH1Uizt=0EE>KN
zSZacZ%^S#6h=EUYlp3o0G@)N60!s#+7P*S)N0c8o98on>Sqx(gL^bjg>t<ly415gs
z+Ihzvec3DmtvfQ|?qS*|Mfafw85Eu`V|LN^Cm*Yu>ZBpg>78DhKK6k&k{A+EQcdM>
zW9j_+mfy_j7k6;Z-cR#lh7CMoAfAe`lgGR?r+MR+H??1cvhfq28MJ4HW|}^ahJ3?l
zyA^s_30g=2?=S^K+@e7P(f+P+MgnaikStYEVG4~J8_k#nRHVRQ6xce9xnf^Dz@_U3
zy1z#dl^82MzWy2_x4-Uv@M%j}q#<F;wFUd14R=O7vg+)uL}_>WzNHVJfBMnEL+U<K
zz4)yI8&6_ZdOEl-VN?)DlbZ2SabQ#u^oV={^U4v##cFZy2c1Wq|78Fv5)UYc^Ai-<
zAe#WpDu6V>9h|z`mGK)r!~wFjF^?5@tg^8Y%9GYznKAWn)>NnVmovTnl^NqUwvmKV
zW6|7!OI~l;KlYLN3olO=a`sbU@zk-xx?AMfeWS*{Jf~sZNvDU>1rzD*B^wTFZ=rvP
zNsG^7JmTT;n4lW<{vo}NQ61wsT(tT-=O;NeC4~DMQ!o!xnx()IbcZJ^z!k09^tuRb
z1(2dYD}gI<QG(s4zrmp_g7Po}5h|otmz?PlV~pGN-rPr@i4;Sse+-L^u%1}_>_Zt3
zbl&k>W8niaBFwxsX0vBa(PnMMuV+)6HSXDa!x1VxlypqW`}&!P_U&h^2hFVk<Evwc
zh2=Izjk4N6K6>A{p%~}mJDe5zI~qid{$4Yh3y6*)j)6SH%81$t1-9?DR3S5wdG8R2
zf=%rzvME_i*H&O`iyPdhl+*EvM;AA17S*h9>}Fd6jWufDRZ603$CjglxyU34TNZ6}
z-S%K)?Akrz4}7NNkrk>#w|yM7mKmS&et>yb{5RZpYV`Fh9uq5`Y2Jzy&n6B$Q~@ft
zYBIB@s#X6nJ}7B`xzOs=cCVH)UC<@rxk7>x^PvRND7)uYltGxlNVMW$MuzibmgYV6
z>XbU8kL>&`E2aI56`WX0BJN+cxT<B}m|Y7NU74iQYQ@OQx4-}7_UZHkZ=T<J-v~~z
zPhML%jow_f@hIq(B8!lSXE7gbq@yatG1!UQs?Woq5e!lZYa)(B<XHtUR84{X(o<_;
ze8XU6l*a}PzWZWI?!8_yZ+(~{a+Y&exFAm(zsi$8i?Kqn>C$zJX5Z7p(@}V`ZR>H9
zsc>zRrxV~32ovF3VGoJ0>6)p6o}&!Pi1N*-ATVoa3vscCDtAOdVD_)>_zH|NEpa~M
zv<8Heq(-!7K<r4nq;;aZ@NMRa?xaTOo@iw1#{0g_Kj$YCPCy`&z}Oe!NN!t|+lKVZ
z+F%(Zy2w~78*j#fEKV*M@d%T&$?FO3g;|Y43vxz16kC-U1l;XzTMxyQn1zjVC3gUz
z`Y65&Y=x7SHU2cDC^Lo=M9F^rg#S|OMU$D*1Mdwx0XRhBm=M!d=2_yYd)Nq73QzU$
zyhI;rDYO?>X{`*TnhFiH`ksfF6k=nv8sGm<`X1&BLq08D;-p3=D&n0|c*f>qKGq?#
zR52iX$BYSP_T!W%Vft^lCE~xS8EMu@e^+?FQqVvO6B*{<ET5=2F3My13Ca@puhx<$
z3_3mzHvL#jype(;7L?8llZ-RRuJzQN>3qgjc<%=@R&0{m-&j0<BctZhS>d8wF=5ct
z%VUMA)=h?vp~Cx{kuB56OO|g~KDT1cl9`;g&$MYiuAGW}xAtKe;ByZcupwUNpL;cW
zslT5=%H01Cvk+47?z8Zj|1b$99wBZ4x%MkywLq@5Q6qG@hM5rOn+ZYO({C~cx=I-H
z3y3O#`RNV^a0xxRB|FRKLuNz5^d&>L_-!}tpY-?$MU0By{>6&&!y^q+)0pEcc6l1q
zvsjNU+od(AClqb{d)=_-D_W1+dTY(_b2D2_*mU^%vk$M{boi6g+Yy!gLmMK#0k~rT
z_hdCxhZ|a8f)DN>6_D#me#HByGp8v(wW<Ho2k-Dk25BDfMrO0Aq;Qf7&<BIm!D&Zx
zMmwqC%xw4KoLY6z5FWaE#j=|@{cVS5@B1`AW<+1lY59Zahg1Y=gU`LVYr1BbGKYqI
z&vYyF^=Cdt>13iB&!c}V;^|+z5yUBj_yVUZzl8ITo@x-8XCBT;b_!Gvk#%s#Sn^~@
z8?(VITxq<EhE<OWPfb3YlToT^&aoX{tQfO7NW<DQZ{~9gg&az0=7h1&-^vo&_ZuFh
zVJ+PJp!T*tYlLg)Wh7~*h6ZHg@>LW5!3!G68WRYC`2dAO4GGtCAt_?(OjPOPWD_p7
zSn*Z%T!@CctuM~X%93K_%j-RjrAD7kUmVWnZ9eA0gMfh96#};_0`wn01c~56iA+xr
z5?Q7uQ*8p`k<6kERO-T`xT82RNMBG>1s1dhM|NiN6$rIKSH+MjuyC?J&&}x+ycycn
z@~@K2pFXhvbfhzU_p(LLSyJA4u;|-l%U632UWqJ~AKA3}3Jp2aHLcTgb00diZtA)j
z!yjpt8{O;T;)nMyo4i<Dh`yD3zZV9{gTRx9s#c#qz<3h(dieXsv*G<WesY0TuBQ<*
z^E|*?z>+NkvO!qJichJdSWDu7IcT*N@yrMGk*RqWy1(cL<>ytB*tA*Fy+XZak1ImR
zvgeI26v>0M>#pi=T&+9PkmB$Y#ib%~AuE=WsTh%;z^E7}H3vY=-9~;ugP`WKn+XZl
zInHC*SkYJ>p9QN5SS<lLp{ryJK4@w_Hib(;OK*2|_JS?pN@Rs|W|$<;8n^ko%%!ep
zP7E8mVqVvt!eLL>*3Bo(d}NXE&u!*Y!s;;beW@`#5e<So5kc7H<mw07FR@kPlg^nC
z%gi6JN{DUjdA{_Q27SfPZoh~&DcKK?6>I&jUO#_>L8^GrGzk(e{!vwFwC?rOPvQIo
zinQI~^|R5UDEg^$bn-~ruelcMoE6zuo9UcYMoT^wzpD0r^_@_C`$e(n=?m5GN{uOI
zk@sET;weCTSHGVh+Modp8Z*C5tCCRN@28*s<@e*kKkoOV@6jD?v@%-IT>D<@(uQ8w
zK5Ze~M?a>XpFHo=+nOvCU?CD9JEnCKzX4=sWM9z$UvUuXxIfMhCI<%mQzhJ*t_%;<
zhM9+yWg6=GeKP@rw>DIWZQ|+KaofPGx`yKD<wJ9Ze%G*PtXOqBdhHY;tT^O>mQP59
z43-~&r9GhRyZQ$Gpa1{l8*DCoW2}Bv5&L;28-))cs`A8lU9<r7)KqIPS`1B)OOmf9
z`EyAM+|dO{=;px?#H&JUd#c89-zA8{7YfSG%4Q~;%baOr7Mq~3kOEvHHmi-kK5>4S
z5|$leu$>H<u`w>AA#ESB_IR8l=e_pb4Wg12ro>#-+Gp>X-2R?F%Zm0GTN>6bxk;yv
zuUG%$hriHnHL;a<E-Cn<ZSz+<Gmf02{YuBd!xyN3{%dW31(JA>lZHFBUk%SO+>X%N
z31x;d^e>CJ(+k|D0yQz6dAi(*1wpCCauQ2H!CI0Gi_7c^=v_^RtTt|x3i3{xQEX?O
zkR>GxB>6&2`P?u=cvgrZWNhD%*_&e=4YjAWnPX`Ccc|3dI;nGU;a_c9ywxeU&fdwL
zyZ%yE|DHZlOT*TMUuc`gv7Rlb&q~)2bFh(O;*Kg{%k*M`GWwbKBXC(C*ellhA*N?z
zF%eF7*<78<=GL>#T8y)FEn)ABX+uZ#7%*f>yeo0fjL9R)yY?BfBu@Bg?PJ2A(cSK!
zOE*0#3@q;`+&>GNg;Cp1+e=-!4OXNJJ8l#Q5nv>^DXihZ<(7PnBvd^FrU42QR?vj3
z*0We{Ny`FE8{zcr&*b^FmKP;sy<y@9au#H4cl~=oW`Te5-{H_Qv$0dya!ly{NF!F`
z&D^;KLm(h+q{g}BTe(+aMsjQ5+CHeB5K8o=_1AKonIG?|<Er!UA)#IKwKsEIIotO}
zIwQBQp7HF`#As^RmHx<z2cL}k{PT!UPE}CDkZUpTzi)c=;SHx|f3kjb$q_6Vrrv+x
z-R}<@GM&s&&Hh;gp<{u9VDSf={3=Rdk|<WGsCJnxX2SBs=3!CxRC|HFnZ2uB9vHY3
zf!Vos=0H<z7M{dtxudr*HkC~HfQr#eE?>De3U8iI&&Fy_I<8(~f8i6Qy1z1YNLF~^
zE5?`W*}vVp=drlb(2&TbW7b|xEuf<m;bHB}`C+i`>!{6WCns(C!mn?gXwziygg1_9
z7o3bvykE+Pq+j5T%*U!aE?fP)i7hiVb5DLi(lIm9f-<r*8Ifcw*{&?M6fE0iW0tYa
zWmA~)Y*VPg3>QfTOMFM#q#z}|_W8sMZC=TE&1p)gSg|$tftTMK_iWqinIBKh$~n9#
zuR0}R;9Khs(1MfUkvA(hXn&l4_(b1cC+j>hc<dqCed&eFb9;MqyHNLqGvC}i@obhb
zccb>po|kFggJ=KPrv1WZUww?-V8k)vNrh_T*1z5<?f~(R9hXr|dmu3^o`=L4)u3O&
z&CD0Z1&u1Amx1#&yvl9hNr^}jFjX;^ml-1&$|97Qzr_@OF7E5%i@e}Vx8s?u*d?Vk
z^SnogD%#Szbgofb*09v2-EX9Ga<vskI#T<*jFL!Wx_qMg57*Bwtfy{^lNjNtUtG+5
zDkkvD$(&y*Y?WDU?y`?*`s1!DQlfG(e=&jCl4;Xo=i)=oC19Y!&mNO_MfejI){k1W
zv=a2~BJJQ;%WvO-;UM4SZVn5Jty=@BXMof*fG+qhGuW>PFEkI38=|c_p2Dc)&LlWC
z1Dr`}vHrB!RM{Zlm6Qg>?3En-#|%?tUhR)M+w<r3!=1*xYM}OPkPQ<^zF0T&XLHWT
zG&(6oppgPDY&O(jl_jhB*h4dhm=d&~o`3!0L}%i;ryl$+Cn-GP)jpn6Hq(I(Z>5=5
zzd!fIt4U5%o89C0|7b^;WE(AdsJq?s^`gTq%;uGgwr_ed*&3DgGd(eSbz<p`vAfTF
zds#U4+T!xAO_#MwY<+t9sP#$Xu8i5$`@2gMj}6{1r%nAH<NLPnF^=YhjXcn@!?2us
z@}&N4U8_41fo96R#SU1@76w_6!cZHyh7R5^EOuZkCt}&EN_~cNj++^9O>;QU^(}Ef
zDP~w%9yMF_F0YSGcUWWX=~myF`EuraZyKx^*;G<Unv;b(>DR|t*7uWsL)<iEq%StC
z&jwb6YEZu+yFy5bgqaXaQlr9{Tj{@~@u{gIU#-wED2C*&|L;L%yn%}lo_y+KUu^Vj
zaFfa@NMHbKsE4I8L}6=@%{HsR($kO;XeLtk1oyIW_eVw~r(asWVsUh_Vh9`AbMoP&
z1VtI&Z|cUl>Z9SCzFvKmPI@^ya`TsKu4(H>^cTrCZLi7tzBcRnHV-b|f!aNK%VR61
z4_W)zOGnqa3OjXI*Dmfhd<MOLUc-leUwWJFdg-Cx7HhZOxgfl~R;%9ok=9)MV=Yz@
zd_d3A2+X|Kgp*<kaGHXwr>QzdxsQv@4yg{$B=#@IMB+2Q4=rG;hXV`}72E|VZ5|yS
zlN6H|Qx<bi%z&5)G4o=K1Ml#%u(j_2>=u-f?Sdl8X93*lz#uby9Xg4?vSCplmxD*;
zjtkQCwc}?-nV#JEI2L6qU0aP?X?0mo%q}lCJEKCis~xxG*mrBU(;|Bd=gS%|5vC6u
zJ6CFxm(!vh9oTEkqV03F%LDq=>DT<E;ZTQOSl6)tD>WL6E1_#WobnOk%@5NO??>RV
zE9qKslkf{N?y_oD6w8Rj8n`e6Lqe!AV9gr(z*(W#+gai%!Rkx8mKK&`*N+NNs}Yzr
z5j)l}HYdw<>~hbIpI*7s1N0hbd&5N=w1UWC<gpm!pk@+oxo3iuGfkNw<%W(-M%xVw
z0_Croo6afTVR9E$xif=U8-NWaLvse@WQw(0j7}wi=O{8>#Uz}~rZ`ygDmWF>(wx~2
z@#t1YfY-IToB&M~KhR=NW%!n_S3f`#KbjiBDD|rL;Oq1=mvhmVOIDa-_f*7&Q7SZ&
zrKreu{a?D!@BXOtFP@YyuF-Dq{Y-12{mrQHQQD81AFLk#;2%rZXtc#v(CnYuh+f(r
zv8gbB%F1>{J6fhUGi79q>(@hQAPnz*lIND+mPd<q<elIQ@ii-Og`h+M^cNCJO!vHR
z5OU<vaPbPnBYrL1z_^4#iq_Z1gd4SNOu)6G3hwX@1TI-Zdjagr#dA!3YKsBcl#dJ?
zFeS>gZP1XZ?Ls;^%f>iELOYZ+8Q(y9Yskh;gNLl!7+=(^-K<8X%{$Ivki>hv;>Xf&
zfFz1^QDr@nfZaQof6OPTxK;}SVa)VyE3TP>8xWgQ<w%xh!n%!c6sJoIGW`+m??4|k
zXk*(u+iN`x^hEp8Q`K*?1wNTht%$znq_5o$XIV+pg>Ayi@@eF%b=5Hwl#|0rHx$$w
zSG(>93I$f#a0+FsYyy73V#M$&)ykI`@^N5mY<1P&H^E_p$#!9x=VygJJUH4^oZoTa
z5}VWd*rYMDqfE=&X`j=p!nQm*x&OW0>*WmZH*V?7p<`w?{~K`564nVH0nRKkUWb#r
z2mG^&hr|G<O5&NPa2{U^&z9KMLZ^lju8Cu=Wd%I7WbvLLOqLq(G$|`pM=GBLTtwIO
zfG?r|1Jf6GvZ>;rgIWz;5oH?CtN#L9Y3%-S<#S9i`#QG`i#+tznvl|vN&N>eH${$|
z)<J41_H5trzW$wu&YC;8qFMaN7DMOHAKhc<pst<!@Lc}SrN0DO_JY3C2(~kDbL-{F
zD4L3;GvYv|nu$o#5cvXso0v_XZ~bLc*-N#5xIg1h?tN{9b<=|aIFH{#3UXv{_0jKc
z<$g;>a!ga=<IfmWKz@rFY2rD4*gio=3m7%eV`bhbM6{VygndQxCWX_PllOm-J<a({
zamL!eMr=$SU4qo;MxF(2+Rs~eRTXyLzWnkhgNJyYkUwDB?Pdu1&Cmivku|RH^*TD>
zoJ;x#*YEj;7tDg>dY6+F!|^qw->471PEV%|KHpa@7^zhC1{H2~Lz`!WHMCH;g*j$s
zEA}cw0>fUGn#r7%bxz{D?MPVQlq6iNG5x4_pVpatj|fo|qDmYme&-6m@q>e$9Zov5
z;8YpChazVMNl?aGBI3(IYHtyJQs8@lIm{G5XLh!0Xngt-OZcw!bmZE|m<0{;Ix89T
zdyF*H7dti|92+u=;pY}+r%OHoZ{7d3-kuTve_wA8p`~EGJ*{-k^C&bo3{6*cDH#f`
z^tzymgTWsoNHSt#wVlKOs7ea&<iB@s35YsiuHR)_7PHPKBL$(?^5s@@;<;r@R$8Ou
z&!0Aq>N$CDJy8rDeecvg^#u9i^Xtd%I{VzlF*`1J-s(PR50y%idklJ1Ym9Z4;MYfm
zU&LdW_d8>eQb=~fFT|dEVHf=k%w&_t$Rc4I&by%97%?V?g{>Gnlim+*)uJDT_3_Tz
z@J?p)cXnY1DkFb)tgsF591vcweTRD?{qO9<I}5>gSo@FjcMgjw7#f8fBD?Ti-*@a#
zL+$(>*dxDcOND2p&X6{l$Oh*4bl`V~e<pG-9`jXT^+<9pbt0zgj>p36Xchx!sR@Ce
ztqA^9jg4n|7Z8q+pn>U~EIf}anKZ6Yfw1)8hwkJ+W?uUZsk4WfBIXWTc*gE>ysK3`
zl3>}ivuShl>OkMeQ={h1O`h`OnEoRkTYKQbYkQ_&pId*zAUd#SP6%GC##X{HQ=>4e
z9#Re5C&|o4Gb9&d8-9DOmU{dQ#qTp!qj@GIoOglB6xs+hM%6IA64ocNRY|prlmZ=^
zOkWBRfe35>3~&dmMS`1^$w6MQZ-Ak*C!?X~QSEFi>0aSC#WSG0&`|Nbc%N|awq0mE
zhaT4YuysP)oSy#lkhlrH5)UNw!(wxAk2Y#(z-p?R_%1dhgQS*`@mrvVhA<5g^Nu^H
zDfj<^Lo*{pkr>A;te?$RzOwZn3Z)`_TDwt~CeR%Y>^W6bSF6(6WzjWsT&DIQ9bX44
z<7YYO3JscqNSxj$<*xEOBmp#3==VScEur)Cp}@_em~s%152n`1<w@CfOzz|=HN~FG
z2rI?p&H=XM^lawjXeQ_jmAHq4`9`sqh{5Jxu0XT0DM*YhR1*rHn!Td+{;`UZV}F{4
z?;Lru+1l18N<u=+X(ifz&zi{o;z;MC1KGNT9Pv*>R`ny}4!uVkm1M=nlpmn4Y<{=j
zPtVhWJ)Q17PCpzudCH`7=>3C2#Kq-O$Ik88Du(aqrLnzlpB+WZsPyIxrY-fy9B&Vr
z3rC($KVO~?^D7EIn&TM2q~kPK;{&05Efddb)UTl51-d&B8w$wq!Bi4`D;k*kBw|?}
zU)Dg^IO*{7RY^(O*Hzm7M$X&DIkeYtDkLXW9+KVKi_$0R$<H*bc+xg`TAkmy{i4M9
zwF`NXpFn;WkUo5eHa0W-<HVt?*~KYLX5lt9ik|{~gKBy#C#o!da>Mipax7rslrF*|
z5w_w<|4jJmda27<PjEFAnM#s{EsLBN(yu-=duOzgIWa{EZ}C{G@Yr8B_Ss#SQoO3=
z!gp*Dt@gAJGu9cLW;9LjzgSI^MqPY+-}HiBPjsl;Y{u3lZI?e?kXw*jXIDk5d8-$;
zDH*h{OWnT91mVO1P^ZoNy<t4!k0r<;=s+~JZpTiHwCbAN4XfC(m2ZTS!1j{-Y%d)*
z>HeD_toV&0RZM5nMvXMGjWyhnNJfin774Sbe<XOpY8>22!BNY&NQOq(p>auZd2wZN
z_rwi|n-DiI&Nxs_)!S;#Pwv)et97&1Xlr$AwACMnz^zsoODU{%;HX9VTL_t!);?u%
z#6|(PvCPHf%ee#(#z3&W8}w8+7GKZSM~WZW)Uxx)1LhNAjm*xq*ii{?UL5t8q^S#^
zafm{@-<EGXXicEX6&hg*lZ`V*ZhkwtB;}6-OScMLK3}l>h$TES%3~BGOiK9P`%mwW
z-(4L!<x^)<O*{5uLhLfB<CdE(gbPZfF=}JX(wULv^B-Ta_v!vE%7%>JI$wF<#Li{Q
zAKtR)-d;T;n)m9tX7`f3wI$<w(?PpeO<FDf{o$pw4sE9_!t7g&Jjq^$9Owjj$g+#o
zv(?b$I=->xI=4U9&hHLaBjdT29f|dm`W7nCtONHL0SW__OEHxxC?Abl;VR}X6X23<
zZ)7ubHU$a?hZ0@fUB;Yb*yPA1uGtbPC**6tJu&x*dt)<b__?W-1=cMd>&+=|CVaH$
zecOi6#8dOuyi;zo9iFrI+gv&E4eib0o4rK4wB*LZk7(F{dui^KB}H>)_b%+eYI0Ha
zSFSNL4`}bqo4<)B-eg?3H~CY_mdbGzg}oA6bA6HoPyj+55o}|J_Y$w)vCAVu%r!s6
z*UETq7TIe}%B(C=ClZhk;{0jVPDQ+`<#Ugi?j&0pD5#H@&^~^l><RZ@F-Xh2lf~bq
z3$Wudz<s*wLYYr8|BUk+mVx|)k$s@NsGG;-1!izcm6~ejn|`FSA!jNc7ZI^BAY!<*
z^ijb^9Zu}QhWI&!kwlbCXK9HpF<ipbDTAjrU$!VjDbU`$GUmRiEtajJ!o3f_uB`~6
zLRkZ$MYrLV+IMxuf{-zu=Q|Fnq_MeD7uOMbbxu{&CRu-K?-U-TS1PVArpBvNJkPiq
z^xy3iXP0Q-ejHWmd~$O2s=74hGe`+NzXl0iEWZX>)<O9-cgwQo`iS53@w1`-cUd+1
z*g>iHXIbARtL9$k^#3!fM%m+;{h!lnAXnN$xHLcvR>W-NawI7B>+gh~UAO>gBdCfQ
zJivQX84bPO1|8z4nv|8zm}(O9(dvx^?eZC9Py1Ws-|{B_F!mSd1GErkYa@!J7Fd|7
z#ts{BICa8u&Vmf$z%4I9X90`WSoTgJQ$SWs!16w($tentabk-zm(5nA(aBb%qJsRe
z+7B$iFtPgWKf65ri6Vv<7SN72y8VP~j_UU&3Kxx@vI;Tl_NoV#{jz9dmG*XC{V*zC
zh@rxtue5JZ6RDZ@5~&3%)196Xu|kyGBTA68*EQ|S7A>CpNS{sLDJ49=#sxp#9yOsw
zOV(9niRV?ZV`Co%gC-bPf&H`1pU}ZEm<-9641HJy+-OHF<0p3+WKvnPGN39z(`TWH
zz;xai{gnj$m7FRzWs3q>Py;?Ut%w=0+#J7*u~{Kwu=*jJ@0h?g)NxYXcLmdv`Tbyr
z8o1zLR+=zp$7|7Dsy7^eCONA57cn9-H2TqbRS(8J{MovfqPuFI9ot^CnVUWGv9?@1
z{@~14H^rN%&~3|*nXhb0jF!7^|Er1czBSzZfYjx}-u>rqo$nFRyj%B`2dS_;Z-a1o
z`=if3^T;gf_+hc9-D9sV_+t5xveE8=3qD^lO1S6CGow0`vlU2Gk$w_>lYfAP)tGPR
zD8tVoW1lpNGutl>u_+$NViyYAO|*GPl#;3xD9sdUAXXBv3=A+SMajknkl0o3H`;RZ
zJ1r=cbEI3L^x}ocAK8rfSvn*1FvLK+kAqZ$BCke;K&h}+A>%kGV+bLj01E^0ry4E|
zArIl>WR5McJj3mXsV&>y8yZ^Pu4SJVk)29Ag-W7QKfPs7dDK0_#<p!UVpvkUHuY>)
zNA^U_;|sDuyhlC<4-Jx>v6~R~?!}S=ND;(~;be!p5%5(uODq8+jUCpkY_OT8!G=)x
znlooER=wY28Q->UlZIv4V;!!jaUJV4b2Z5>>0px2^&XyGkTti<h@8Caw%nptk-N51
zR7hL0=L2%jtIe4;y<WH`AHlPBWRG_eA)`h$XWHx~X(L^4FvIG$sDgh@q|f#N95%2$
z2R0g<kUq|4DUD7xnA4{(9XsYA-aH{Kq_e=21K;!q6@X0N9*@_s$D`R9ogyv7CXZuB
zvwZ}x$6`k^i`>AQ@&D%@k;Um_;;qiulqb_G7B5+J2>m!OZ4{aS;w-Y|Hv9S(a)Nsc
z0FO`y@MMt(VCO41Vv!<b2fjvA_}8MaG7CGRu~`mtQpWr?`FExaufnc8zM;Bfmr9$j
zCw@rk1w%Ad2aMtJQNd2V;(Yj6Onl@+{n|kdZNZ*r8l*dFOsjTXjB@1YHf_5Yg^xP)
z8Q3bNZQnla*f@2=E=jwwn<aLp$|UefnCW)jAF}{|2);6eoI<Mb5%`NRV!qv{kcG`>
z4nAaYh%Rb7_))9R1Uj(2kf*Jr(=2of#hXdwD7^qb3wu-c@9gN?MvA?uU=LC8i%&%D
zKzlm)1M!%))Pl9%bUtOX*ZV7320xw!^2rq7mxt+tC4ks*H#t|V$X&)ZzC|C(;dpvW
zJ_c$#Os2tuV$p?>-|GTjICj_qM6JCyrFoEEx&FOzIT!Vtdw!p#nj4<X1}!%z3V^*@
z0=HKL&tw^Y*wPKjD>!CXxw9Dq$xh8K$ZnP`1)BoMme1xpP$viJs-Sp%Q492Ug$)$~
zfiAWtgcX*3YE!@v2xGzcPq?ME54A*Euk0K(+c;_L5u`=NgkDju*e@F|$;Gt8x4jn|
z$BueSd%sAb&l<IM>GZVFzG%#SoA%lpq&~T8<g_B!xdt!+XntxVhxYf6=?%^SC#QsK
z;#a_&$b6d!d<5i@GVl=i_=J1;g=;Jqf~}INGT2}}$CH(+qOTo5a*E9-y|~%s*WkI7
z_e-y!JhPw-_#n-IZ;Z$MJpXUj(KvxG&^*VNh|NHY*;<;XVv{ayUOF#w`n*|3<E{Ey
z8lfK3Xhav*3<*M6Q3FBPwRR3x)IiD6R|5Txl|b>NT(#VpAK~vCw@&<h<LkNnH#Ke@
zW~tZgw~Sru0@Fufqy(mqBHJaB@!_mm@Ex^_gKWr+JTqy6bKC>gcpZMHzDDTC;=%LE
zHLp{CA|V<JnigzeUC@^arKa4<(Z@^nV!X0J^QY9%ynII3p|uv*|2ST$&^A*29juF+
zy8fG>!Q(DTzmqNp)pGu)kpy>yxJ2H4Vik)=*sI*>h&fidvw)JjtdZi*?!b{oh^l6^
z?^rqYk3RTOQ|I%+k5RPmRHv#bmC`_+0s@y*{fipJT8c0@KoPlQuMdYhgZUq^7v!l8
zLYRLaSFX}!17Uo3^Z%3dYY>*o5ynvki^^U1KO?Nj1}eg$tD5P-kam})X8*(`99^nY
zm3Ptv*SIYpxd5yMuR&YCqf%gm7EFIwn1)$|@R870OoLX`N44@DD|DRkV35h@Ve=!S
z(pDSQfM~gUFc7;{uvn2A>kAp#?R>}GY_Q0ha6jfgqJh!>EgE>&Sm6Bt`J!mMdsO63
zXt6?_`P29=#I<k-?n2C?B2E2K5noKi;r&DC1B^r?mfv1YNq4X|;5zm10LI1Do!>&t
zwlcQ%BTQ9KuDva+Z_|Ya*Clx#s=>FiPEojWZgy1<E?1<Gn8ZVK`9*B<;S)lydq%7&
z5d@)U=i#eMg|KO(n>7USPaD;w@%$sI(7f-ko!V#djrxw*P8|stNg0rj1LVPxQa`9Q
ziwFOIj+9#dw@B&D|1D5TAOCNGQo)PAQ6dZ#V-Yv}FFO$XyId21pnPv(m=l#k?WnkG
zcOVW!z@&Bu;!G?JV77#B2V(l>dgBI1NxC*#qQ5lJl4<wuC7$}Pyh2m4WW@6geWL|%
zUjp2(16)ba(KwsnY4v_U{2mw<84TEpQ&l4P-aCBT;hH_i0w9F^NvOS5qhr{XGHOzS
zo}uU4c9>azT!Sn{V47tkVawPoWx^zSQqku0>ppzS!f5l}StDkZ3Vpf_TV^qhxNp=z
zx{b~+*1oK_aa_fwS;M;wpi@Q;m?$)6mQpr)a<7=oS6hu#V|1@d3{#`@j&Wx2ua1G>
zX#k`O;oYg}SY=G@k1SLXG&!($4YUDn#p;?coT(z11<TfE78f(Pg!)S8&bRZ2ubNb0
zwj3BgeQ|WCg9^0WqU<oE5;mY+n>o$G!}^KIMbZ;nCv2NAeaHSeP2c@fd%9DTvU<5~
zy7qgpW#hJt-(im}VLis_&b@`X3GeR}A3G)!5uys-ztxv<!GcXlv{<c$Hl#mmkp^V%
z|KSM}z9@ozMu5Mmn1vRS21ztjM;ceF{LOQDgyz*cMrL-*bJxM<YXPiP6>N3bIEU9^
zJ_BYOrUYOQVke{a7TSouucLwapy4Hj*ezmP2s3UA`~iLX7Q#FeQ5Y7xt7E&6$m2h+
zHN~86)G{<;-+PNEo2K?3wAp0oRoZsw`m%_T-TEv^8hLMz<wD1Kjgv>V7&d$Mu$4{X
z2R9i!bGDY#aoC_Pg9?%d(wEu}8o0hM))ES&)cd#44?SkP9o(n)mv_<MU!FeA`YV`u
zQj>rTD}i4j1=mvB7rrnl;1(SZrV|5qv@=4{d8otTN)u}>a!xNo=!kV==SEwOPZ=~d
z%n%Zl`TG-5M%w0qt_yRb1i9Be?HAiq!^8T}=@mOCP2WFuK*O@$FT7nyjXhd+FY4TP
zVCN1kn|6Y&@({94uF9vOaUZ;^trE*@mH*YILA`_E4uso2kMs6m3o^x%Q<^{GyaV67
zC_jO39tr#=pK#3jVT;k(H(wF9iIlf>G_b9pi1#$K^(BY@7_Sqre~%9ZYYV0h($q72
zEglj!3a{|m#{<92N0HS|_SN(KB?bYZT4qI)E{M~8hBzIQm19-AE-R4`Zu0R8KS;c<
zel5b6tuPOQIWEwSVOiQ>BZ1CC#J~bJ*k&G}G(f_YO^dyDOHHO&*6gW?>zVTo7$2Jz
zytU?1ZO_!e%{8@yljuO<C8tmsxXGsQl4oM=CYzq+*zcL|EvqyavfxW4i2k=mShtzq
zcI6U=VJO_UJG5TAX-(}4`WtFv2WdD#B7*AV)zn!JM)vO(qXKFVR3d6>Z^Sm&Y%MIu
zX$^uS18Ub%B)vBL9plKSv{_9rdepSCfzH4;t$Hgpy@<JvR0N(eu~ci#_Hsr2Z0={6
zO+WYk1=<7ulvIw5IzDVPt%bcN6~Nb1Uu}jBy><n?rDFr`c^|~SIt&|no%J;2E-jk$
z{`qRN{-HMS-`A{vd>6{=94`Eg0yawCo3*WQpE(;P+1JWq5bqI%!KK%(Adl&AA@j-*
zQ0K71;L_`?_da=-7L5V5KjL^tZ3dV30S*@;*>X2NdPN+rjdW4%=+(?GKfd_Bgi0@b
z6RGl?)@IY5{;}p3E9*sF-#7KzY)tjq6+-D<YUc*kZc$TvJ#BrL+WA4X(`#yPq&?{H
ze?gKLR6Aa;&3aGMX-|v_-}#J>N<&|NR@dT?$L(2vVtlRWwb`iXwJU_SwY6(Fmv0|-
zU)yYa^xErbuiDx*ZQFv{W^{wv9KvEgK76Mwr5Mkfa0n~tkF<o%SM2;0=6jd#d1Rod
z(?;(F`50~ZW?;=4c|R_AZP{B>yMpexOKm@%_1Ztw)LswY*uUE@sD%W3^S@eCdm}jw
zJ@`&Y>ebd3tK>_1Z9Z3EKVek#{>0R@vVkV!n?7Dp)1Q*-2<dZP&`N8~_W42mcBrS2
z*>n=;1$@651HtnSKD@ky)&sqI%>9t*gNE0ZwVK)$6x{V+wX=e1e_vC3J$c|RwR3`M
zGj0V)pxcd`3YN!XXQSos@D%<q&J$*Mzx98yCXVLk35c`_PWc;OZ3C&O|1G0~0FJ<F
zl*sSYw71^d;x6s^IYMjH9wQ&uYcuS7Q@!5;D(t)<$@0s1-kn3Wkvxq&7a!JYd~u1s
zp7Fg8I5qX~;rNPI^VjBlI}pcuZ4cVkYgf=^cd6~iv0nRTP3`q$%l}!M!L7Hwk?gC5
zy9Sc%Ah=)9YqJrVqM`46tu&uW{d~PaAlKiUn(YwceQogCyzhGL3c9PdcFl_FgrM4N
zCh4`;lcTk@YuZi<s?FvGYV)~)Eu%p+eElu|=0FZ%1szt~N)65U{}zN^o3(=4te0K!
z60Uwk`~iQ%2<r;i9l;!hvP54*4R$}Y=D%&^Iog4KAS@D-M5j1fd`Ns%{6~tDilu(i
zH0c95LLMf6WXLsaQ%p(=<#l6c<6z@><6h(IAxcO^Xr0i>q2Gsf341i`uke!aec@k6
z$PvvV)<&F)6eC+i9*w*mH6iL%Q#;cv(;3rG(QTqPMPD{c<^pp^^9=JN=I6{GTc%iU
zU<t?3*p%4WR>|7Sy2bjnE!)<@b|Ee<ZhG8z@dM*`Cxj=APIxxqyTlfW>l5EfGAE5r
zT9WiuvMsq=@)Ie!DO*y!shO$or<v2v*c;m0*vF<Pq?e}8Nq@m%bF6k8&JZ&4GCF5$
z&bX9m$xO{`nAsz9V&=P9ow7D$M`w@A{y3+qPWL(o>t@t_sBUF$mpmn}QQn-qGkKTu
zuI2rhAC_M?-<jVse`fxU{KxZO%>OFCx}K@tj(U{^j)GN%d4-qjC)e*<|7cN4(YT`5
zi<=gg7k^XIy<}9$oRYOAdrH)jmr6due_xjNDV<chsB~-T@zQ5X-zfdK^be=vOmWtA
zws7`vj&sg%u5&)>eAfAf^IPX1u5dW@8@bxL`nt+pD_px=r(EY<@40TcZZ|MDsMDaN
zL8k@-8cb`ju)#wOjy1U0;KK&LHt;lzX_(uvWy3BFM>d>{(PbknILzmFCOZd5mHk2D
zjd(!F#h;_=vGd!syXRI@&)Xr%#%Umm5ETATe29$Duh7JozOsho3L^ggX9p6E(n)@k
zoRuz;#*o`@3w_9BVU%~S*q+RhMv-oG0rmy#Lt4^PBv(W<4fRJ$9cTv54Nw}Q<fE)c
z8HjQPr7p^5I-W$+@!oTiLi$L9$TXat;skP1X+}CqN4=+|)1;pqO_s_jq@PrQGMDtn
z9u3>&`J}&KB8!pjnkD^3`b%M?pP>@Jtwbp$Go_RI8SnL$_L4m57<pcHk~Pv%a!`pz
zyzZ#?9bBK3j(L9v%xS_u<YjuwJ5Fp#CW%eG>jew;Ds+%oz}Q5*MOxuJQ2dQF6y~9g
zPQ;G;W^_Nfhd!fS5}(ws4PH{po@2Fe3#o(m5B83*k2Dj%BKg8XQjYtn;yE&1{*LSy
z&w1ZPIfn9su$nZb50D&TwReO(0_&b1AV#Sf87qzQ{v$t2jN(6}K3z*pfcZypHqA8j
zC-cQA<TY^?Ss*#dO2aTx0guUT{5dv{luF{UKjU<iS@ah99B}+8?g5_PB4_BA-hFs}
z3xB!gb#XGOFK;Ja`FZlTA)M?J7kYm+eDA#?8N43g&nX=OPFE0@VHdICyjYq9Ja!;u
ztY3hyz2YDPl%AwajHHUtlKd>DBgPy_RQY$Zjy5NkP)^W%?-BYFIZuDV^+(<#!c_98
z^fKut^dv)2lEhiwUjYxpOKWKcIVHscw<w0zdckiL<$e?giY&b1t;V?oB^#w53PCAF
zc?hK(<sixqlvhxup&Vkg%;-`sBV9N>F`BxgF#6)O#pugd7;Oa>KV31}3M!x}MpypA
zX^PR!T?(TkMni#x;WD7K1}=2^VKfw2Ks$_n{Dsku_ZVg@=DRXM!{!af-)}Y5`e0rY
z3av8W-w*h^Kds3vNCP78kc;t3s(u!)kx^{=`&a<377=c5wer8+u4~tJ><j5;1JMwk
zS9S;_jnGHf@7QA4jhi&)bK+d*=MbZW#_&&;6&ZgMP{IL!bg$+g`$3kBvTQK0BFF~W
zh)aHloq=UmUBbFBS&}8ZCJ2(ip2{NbBt?=Ww1&52Y<AD@Wd%QoB5njhlq5Lu&^Ve_
z*h_-Z2net<HCBY-XVhbD;z#@ij643JRrU)SW(U>*L(M<-1pn}HK!$(%t^Nr8W_@QR
z2}j_GpF@F;F+`&G;JyLyBO$s$5Px4l_CO~%M$VDT<aP2D`H6UGecD5~EPNnbPm4)Q
zNJ~jePs>Vcl-4?JdfL%+Gc*?VF9L1sA$#%WadMu#i0!<;CO_lN?!GrIX>n;u{LO{|
zZ&L4{-W$Z~y+A^}&qKHP8|7D&{@zBOE1oAjr#@Zq>D*7}d^+>f>7Ne!wBM(7Kl$xr
zw!>lYzq+_BK^YYM_%3%(lV`}Y<P14Wo`W@f8h=IYC32O#OkN?ck|ks*c@2H8BG<?p
zWEs{czDeG~s)%>UyW~Bx0&(`wu`c2U`4U+9nye(N$T#F$@*TN})iA5c576`QkKXWo
zm3ajG{}{XxzQV>K4P^le2oX5b%ab_oMLCKx9EHsqR-QsRj&csA9OXR9C6uR8F8j)2
zoL@wF9fj4a@)h`5&=-Op5cc=t&<}#15cHIg_fbAVc@2eGYM-DiL-`ctOO!WJzVek7
zIDd`u6AF9pXJ5G==U-6%MEM-$FBFU*a6`yHC?1q=P%tTZf%eE&rttCuaK#cCP`Ks6
z^nB>dWGyBq`o#)akMjq5AscYMt{1WqD72u&pw1?o<4_WCy#?naloVV)gmb!H$ab8w
z^g>`~rZq%qggOu7+*&VW7tYxIhZV9LXN&_Y`0J?PD|#V&+$67)JEU7*c;wdiJ59aI
z-K~==L&U*@^4&BqEv?Pi)^0i^-!0_1X<d81Tg*#q>lQQHcJJ%xm$o`>b%znF)7qwu
z89Kr(W%4tA7`eJ%L7JQN=sOn2o_+1^=KT_DE=Tt3*C^jDv1afFYOn5x2FCdsz?nZP
z@Z`JYyiRFuF{@kOd;7W<wN7+5Z{07^Zcl6DKHsgc`+Vy}d%u49ZbJ=>fOY=ZI2~Fg
z&uyri?>6c!^yuqup6Dk1R<CC5_2}!cyBDoqowyo3@ZX;gzCVpWD;ZSbG;JRE02pX<
znl9>wrf_oD6WIfY-C+lW{aWX{L-IQH=-UP$+5uu{o;$rwzB??>?Z7EK4}ZpMW!mZ<
zeV=ZQ*)sgJk*w_5_i2(YelxjWqT2yr(^j4~0dKx%td|ja?&d2`r;+}BD;=bD;?u+-
ze$yJy!*kt;HK<e;a>-Nl+L7gh8xUjeQ^L*j4~^$n;-;Ac8adcAX~vLF&SZ8akLuZ?
zAPHAQHAE_CK}VeG4yDu7ZlQF#x`-VnhtdkQnHkRpv%^AmC@|xPuIy0G4jb6v1Uq=y
zA=RwEQNiA*U~g1l4F_H;x3XJy^%Fa!T2Xm0J8WQw*V)0#4$W9S{LL%8!4A#R=rn@;
zrkz+1(}fJ-ydp*$LSlr6iOJiLL}*)yS+tWd<b}jY>xc<*F~$%_Vh!hsNw|+-^Kl{@
zJ|>J;v42J~ib)G81lNO5^lJ)>ZIJI;0LPo|yT;$OA&Y$1QouFVjFU%w&kfjN<*M&G
zlJo@EYy~JMli65jKbDLpW6)X}{?cS2R<+f~RXhAzj^`7|NZfV6-%=k=>fx#do=m{G
zd(B(Z_}xe{4K=5d890tW&F*-67|L{%G<<Ii>Q6#D(_vXo!1eI|P=kG|woY%}<}}nV
z$J-3PdVsDNyJ<A$cMMurP)qrD{TA!pbo90n^3My%O#WXzKr$I+IA9xzcFO_%X#A=}
zHxl1tJ(`9m_W-6=@T_%#U!e_rtqh7nJ}QLmPVXI8YZu{Z?LP{&$%sroFEaGmb)@g7
zF1QYbuf8dsw!w%}jKXXj7vn$tjWYa4A@Nq=xC;NVJfd|t?!{ONkeWZ>nzhFEGi7TD
zDUR$3Yk{EMLbNNjZhKEpk}!Ps)CnYE^wg2#Ny3Do(<foY7L$6+!^YnlKXU3MK*-)_
zh5Zc_FnMelRu6aoPh;mETSXDY;kkQn-_W;EQo)8uEr^u}Vl9QxnDQu;M_Wpvs6h$F
z#G(>3Mvc~_5;fo>6lq9|f<c2J22cVBNEM>dK*0jq2gT6RTG}nds0n}d_?_8%>7@^J
zCTDhc9%p8L=j`m6xp!x4Y~BLjc>f;%9$%I(*T3Ii=Wq1a`(|V0MEe_^cqh%tc4j+I
zI2-(zoQ=+=K$`Ozbc6K)yg$=FEilf%2wDS=*OU+C_lNm9e|^w5lH&PGUg-hhxWG8t
zR6v^|`G>5oMoqvD&0>vx5)zt%PE6zd(CJuHx#-4BFwnPu3X$DnvlI;};eCm6-rA~Q
z9prJIRW&@Lwt;52O>*4S@vV*T&51C(q`@?s7ITrOb-4ZES}Ej6BkkdirbfP;!QI&a
z`Amvr(4s^cWs;!@Qf9LIZqTw+Qy`bjT<J0Mp!v`Os03ODl}V>rA>C%Bbg>V3m)T6*
zR?62x+o8ko`35=y9fgiT-$Li$c^<j|{R;gCH9}34Z-!c+i%=`n4qbsdpibxysEazU
zLfudg<WhGp<TDjmg&L~fm7~3H$j8hOa^!-^#crG-F1yILng%F9>|SDfi8)KmS+ptu
zI%RTz@;{o&zC-3!$$~?X*(mRtw`B)qMuJE_zs!|M8~0&~jY%M81Tj6t#M|0Cka)IS
zWAE^5rXD&2orQjZQb|ih9}<JSl0ml%bh|*e3v|0cw#)L~%yA3(YM>9HZBP?&%}@(;
z5o(3v;NZf+g@X$R7Y;76aLMhG+a<S4ZkOCH<7pxHb~z(L1^tLbmM$2(VC;gi3&t)O
zyP%dR)o4RC60Js})kw73_RG~h(dm~<zg+s|(l3`*EHoKtZiZO`l}MFYF7H!E9Neqm
zUIq6mxL3iwN>L((uPw+4Q!dv*{CBQKqEGpZPpgUHJD;Fcfpi&VNR7whZ?l-i%NY<)
zCcPWf8!6vy@v4+Bk=SW+e}crmLt=G&t?nG<Yml^$ezRXo#1dp?B2GocGpoT440Bj*
z>ZBb_@mx~yIOG9&TPGc8mv`39%C&d4oi+uX`~%OwHRM<?*X4ED$*GQnIKlRnBhYT|
z`qohX3|))b&^UQ1RIhjaU!m0AnnU*=gi9|7>#>tSt>XXb`r8vKAjd*yLmj<dYf7jj
z=-%wp;1crJz&M@Vg*z{Y$74uN37T8BhL`cq`z10stv^OO<ubo0ba;|PyM}dW7mhC%
zw@V{olkAj(;-Y&=+%-Q)8xk97b6n*M$oCO<iZml1$raf`xI^~Id-^*#cXgs{l9M+j
z{FO<NOybfck^ENfp)}=pdnY|AQ^H=YU36x4TStGHsgd7mvs@lFbG$SRohI!=$9u7i
z3^*^mUA|CSP(Qs=jojq}9hkuH%}{huAJ7|l5pA>5znON~>Nl5tM>S4zLMg)^`!zO{
zM|6g4<UFIjkyqsBzFr9%7y9-R`#iMN%P-8e(Sj3%Z;8&8tz-NNoej`T4{>y^S1vHh
zsSDX$!4i7V{>sU)h_F+1^{24Q;3>}q>*Ty5Bn@cY0YW<p4UzjU^0W+&9~{HeJKQ<;
zc@{}j9Nwq8%*dUL*KgrWWUQTxl@o&{F^jkYZ1geMIP)2M7vjfa=ajN@RvCUgmd;Av
zIb4Nxc{l4L?_eu!F}2uB+ws}hJ*`+xZLBLSV<ync^Mn6L@jTL<G_~&0w(fLWcRF=X
zAUzX520r(2PiEnLv}htvwrqSX-0r8`6#OV`v8kj^!>7{L9PXWm@v&G+xmchx@M$Iw
zpNP#gld*diK7sxeQ2!jfzUwoWHv_b9(Y9{^Yr_Sw;!41x6dz^#nPU4HLqAv1)<^L%
z^!PEPu6@>bY-;GsR(!g(_eO(3E$50tIw%~XorhVCa#*=JPQU7~{UWgbP7`0x>P;*b
zT>~vV$I4A4t1nHosu}E}!LAK?w1c4EBB;NTcnBt01d}X+sqjn!5tU)8#WB(%=r9+)
zmlBGd?p-?7mVS`%A$+_=E!LtIV^O=qqLyM&OR%WLS=16OYKqr<TD$<y_Vrl1ev4GV
zBIQTM%ZOi&AHi>lE9jwWM|2o!(H6ClcJAS@3bcuqY__wG57-B1l*KX0;+Sf2OtLtp
zS{zeZB|AtS#WB+2=vV~V%?$)&EP`<s!6@+4J<Sw5elr5Q04r2Iv`2N2MQJoYmbyW9
znEA^jwKurCbQdC>v8eV%<*zKrFolm4mlDn?&d)G;MT-{_F3K+>EM8nhSX#V*R9jLx
z=v*fv?213Wg<UyZMXp)*Y^BLuyMFbPX7V#nKegISw_%<Q=dF98ay_=0$4Tes4g?Q4
zYcISy^h)Pb-cef{iEJML_vb+FXfT)ddp5*O(WZY2r$ST2e9s~DIBA|c!}92?zL5HN
zl4l9=YL97M%EbqlcL<q>aOTD7%5yTbHrN)O={c;rvF>JevBK%K+G|4|GWeXGYj&}V
u%x?1q|Mb%pY0cyDa=3?Md3Wt)=EfWNch)|$pRd7vZ4SWEhn9~epZOQzkRbQ~

diff --git a/static/fonts/roboto-v18-latin-100italic.woff b/static/fonts/roboto-v18-latin-100italic.woff
deleted file mode 100644
index b8aabdfe58d99257900202874c8f5ecbc4677194..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 21268
zcmYg#1B@o$)Acj9ZJRr`wPV}1ZQHhO+dH;r$K0{)dFS^}zT~^<lg>Fg)v2y@x+?d&
z$%%;pfB-*B2^E0+-#yX(hyPFckNy8kTtrk1002t<(ZqjX3>E-ZFD@^q^rLM80AK?E
z0BnEX%dWY&l8O)j0FnQrBm7{3-4L-wPKkjD0D!FjiBtH2zS9N?kCBamJpcd&`s1kq
z06?S%(MvatT%8F40O;l)kHmkVX9AiqwKuc*(LR2B%s=SXyTh(BGjRHeg=PHl!2S=A
z02DK857QsY0{{r10054=>>zZT=EgSe0D!dokH_K%FA$JlPv#~D#y?v34`=%iAKnW=
z=0D<(_VB}re?SWB121B3<NOmVg9!itYyITc8eH(Z+1k$N$0z6flgHK%w#ybHacm6S
ze{xY!{)r>}4<Pu!O|}L$CO_Jb53up$D<u@?CA7D5`r(TI<%0H~@7n-iZ0~6D6RT+c
z!z+JqK*KiP?Y<5-@Cyh?9uvI(eH&a}2rf$nl-C*{0D&k(h4<lBhy{F<SsPK2t`Tk$
z;}T;NBOK!tQ`P1EX5Q<oi1UUCqnPH0kOIR5a9@vJ0Ex%d!W_Q!Bauy=ZME6>f0wBZ
zXwc)8lKlF;tcy&0Ij2tF2Jeo_<0TPbq!C^V>AHRqAEN&6ZCb7ycvOz}c0^gzU#wAG
zd-N!z1Bvm!yALR{+)?u{R7fa+F)^!mbr6XS+~AX<b|QA5RiIg-*P=TjkMl$NS&Xpa
z;*SP`?Go*(?K1A#?t)9$+o;<}49LC4%m<=|dh?R=;J1qNx~_q%?GxKKAJ0eHx^{+F
zm3clbo>%==74B5PuB4`<2bgkHG>uGE_0&}jtven*Z2H1%hA3=CPOT4E*3-2YBls87
zy%(cjxI;v^BYU{x^P96EJVSrH2g|%ij=cxcyoXo4|Fn6JK7UNueasMi{3eTGnU{u9
z`kg>7oXXaDN~DjnjN;V?)@>B=tQ{^1L%GaUEu4T}IHbBHSiQ`jB*SAX-qP6A`FGg0
zWy{8odk$VPRd{*a!17q4Yq14__Z!J;itmvtZ|(Rg#K%HUBW1O^6}zg1tEvrr)~=b{
zsuf*IW1T6rh0W?Y7jMNvXXUcTi+0!EC##tO@$CY-T~&^G&`#%%sbo_}=b9p&vgXAZ
zckNTVqHIYFxoXeOsqpM~2J<`r9(2t<+S4KV)^LsIiWB*ZNNdU8qEbiNlHVnBDYv!G
z9g6W6xdx<G6=^ayg((^xDu02mXbiK-tQ7VaZOkw>mR;LGrmdXHuAjX&L7w7yt>J1}
zHIrDiqGIl$w=N93)~{Uiw=CdR%w<-r>ChW+Lin;CIkFAK8vCrMq_jpFS4>GL7vPfr
z20exIn))(4+gPI1Oik1bjx<0_*0)_6y`N*lukhktc}~n)OscP}(@J;}r>;KZ7V_n-
zk$z|9({7yc$GVUivp;rjpEj&^w)r<?W@c*yOe8vOO#47oY~OPy-E%3~y+(bW&d<I?
z`J6L6!NpZh+!M@k+q&If*bngyG497HfYA;RPvsyxB`b2NQJJQf)40u+lRqz2#BMGc
zosnY5G<|P!WtQ{l)ExWY9-W}SZ|a)FpIooW`Te^}bKm(0!q2#NL->7;;+hPWXTCkZ
z1469_&+WVZ!JKlp7(d?!Lj4Vk`OAy74MfTOL=apg=Mc$+RTOWc97O!_PxJ@5Mc)(7
za+l4V)0_I1XQ-j%LsIEmluZAv<gn&q3;$+VuCnHHmyhc8nXL~nszNdM!=DR=555r1
z@fJ~K&{{6r`{>SOnRWc@SSF8dJ1wSO7;z;`YOqS<Im%&11-II1=CcedRbH~GJYr$?
znP)%yswkEip`*w?<5bd5y<PJpo~Jyv{5zKgRi(2h$Iq3WB16-%Z@jsVR)*gXMK0%F
zZEfbn9b-lMyZp><`?kwP*fN6!{y_6FPar{JSf5-HExc}ZvNNTM7CtAg*g;}aS|}bO
z-)b5N9ByFps3EJvO*$K`8|AHAvZV?(@Wrk{>#dv-R~Juey}Lc<O@&RplRNQTzXP&C
zlgWyyk%F*frzpu246vQbnc~2l%@Q6AD;`YItWN)UV)dJ1jj6UWhwCsU|H;<JEHj2R
z^B7g<yAN{NHfcp<$|!Cg`yJKzP)yB>MN1@H%q?6p$Owf=4>cl@+K_0J&5}V0lvF&!
zLdB@lI2DgSm25ke$kaqOi%a!OE^#Ui6{dJ^Z6TNL2_B<KjCe&d@=@_V8>>|^#U|09
z3zgSt!b>-*XkqbPHwtB85zW(46?n!WBc4WakD6V=KFSMp^B743Un-ZPn{=GU;zsjw
z!8<jbff}<zzqChx7>tHqy^L7Kt-8x-0Zdp-^2C+yd0`8gNhPv2)uko6idDPj$dXKL
zvO{xic}c1SI8|a-F+pmW9<4zZm`x&ACegmdxy;f+jiz2$=t*Ks7m8zyDDz6)VYHK5
zb+h3r)@4Rw5ijWqvs3>h5DR0fLtpZ98>wCA(DfJptMDM$q94#}KTh9ILvUZ0i3U;h
zH$V){(_3R5gKOj*`}v2Dzzu>m+Q4zkU{vHV%*>pjVej^XU#EM3nYg?>(9cHiF>@^P
zN6xB0Z-OGF0|*E({X<1zTi57b1(Od~md0tz$Ki=<x*MfUMO}lYGAA4}Tv$s6smq|u
znQHv<2EOG+2TSb?9kb&DGOlzBM?xXGek(A`OczGH-eOe>kOc(9P6#9cr+`#G?r14G
z5CyQ6{@sTw8I<LcveCI6#Y~o;A?lpskJ;g$j#yB32&Pv`q85BtS+6f;l<PnZC0Z2r
z1Q-WK(6`Wlm2Fb7mU}PQ?`AX0cI+n7)OPHpcKJaQ;I^BEXdJokCQ#&h?5SYFF?{Ty
z)Rpp4|I~vuj1?#t01zeU)$?~E1mKWxEd=5&_0!0QaJ1ill8oc?LQ`fK2HbFISw@Ho
z9Et&x?{4!)7a{`nBBWp$(xG^eECCv8Si0FIX+SEVOa52mkV%lSTpK{>-ht?gjqGzY
z3(e}?0=g;9bgPZmjw77Ge{D0y%&se}yDGNUnHXi9fdp;mxp;l7)UvRW@LcbsxQ+*g
zu5rK>Li<@Dkvgq1XFHcKhY#lq_B$-FK!OsfG7P)GNnQQ$nG}d0>TarS%n;|&ehv=7
z$)rX-lz*^~=zFwreN~a#BUk&;t#R#noIEj&GtTLZY<cI>yX|6YA<Bp0sq^o>VOvxV
z16!B+vtb5|+)P{wFd$h_l;y6brg0tHs-|fhKy%qVY3p^-GAj^t;npu0hRgOBQ5@H0
z%7G%AWr;CO$6=Xub&GKml6}i@1J5nSc{VP-6PgmrAJsR~7;z3m<4`o!h!4Gx6J1nQ
z{})?69-ASKs)3g=z;zeEwySSU2EWJQx(_OANGQ99`*grVug^%oj~%<~X-sLmD|o>Z
z4f}_LXVj#-UkY}Vru&afcU-gxa))@OwlQjjCTGj9%!j8j^@TE$1BtwtXo`=7dkS*I
zujyBUB*<4MXhZ4(31jdA5o7WKO<9*I;-&B@BInpCGTP{=qOt3QZUjyC+W&?&0QJw@
z#t4uF=mYG280wck02Me3fcVV`fcr`VAcGJAU_iM5sGu<bM6h}QDmW$p4ZI(K_%p>J
zLx2Lnz_$TF|2@WiT_+Yu98?f9)NK8{vx-<CI=#bTIKu$|irys--}=O;SH6I!lh2O`
z(*XXN>K4Ge>pSxqv9yU_73gv7!-vn1o>7?B5qU3H`T7izcwb4tyQyVQV$vzyPeAts
z`y!zsA|{InN6{vm^st~e+mk((R>sNohy0Jho(1iIV;k)C6x9&v`gP#RL}AmiGj>cF
zp}P&J44e6fNrPP}^1SGgEpDU;p{xWYnNl@#m<us#f@s?o=ADm6tCpAk9G=F5Yv?8s
zy8hv3twqS7*B)z&&u80e_9w)xoxgedO7~c%R6)vL;F@M=7^;SoEQ_lJMumjof&s!7
z4yHMxSQ(dbsZ*!6NR2SwRbJJZ%}BVyX&k5%!ZZ_~2~9CU2SdcP7Gt;C1zIGU(jpn5
zCkQ3l@RpxZ761%@1OR`30}y`ZOLZ4-6pdBB=j{YinMI3ki-MTBCBl*d=D%<Ib$#tk
zSAX~An>o5q#4$d5I4;pm!Pjb0RVO-)x3;!=GQ6K<H*5yW{GzkDnV)lyJC1pdN&Ek>
z0*Zsx0{j80^}_JdtCxzlwM}uBY047yP5QYtN1WV1)UcQ}`|7=+Js5Gn;PSyCG2-Sq
zVIQP&?7G5jFrqx>txq7fw%HPGbd_l>;2(rdX7w4_B^;3^L`lOd72=ag-w)8&UMAWh
z*7*B}7!hU3Js#VFy3@6Tk3Vvwj>#$ZBdTsi`sH)q;I^!Z#{&NP9cZ($HdZ)gj#ahZ
z%@3&E`C<O?7p!h9qq&GA(TG*^5EX>Pz{pFGn-qgNJ-S6hRFs}IXI6XJaCD>GcY#oV
zWbB^R2?+uQAZY9YrNmWG78Isi{x0t>UPn&hMS|)|ZjTGjk;H|IRU77!B;oZk`9eRS
zNbWMo@&M1r1=!1cK#he7{jD;?0K=kMOVs>3(~#q7d+kr8AY3R$AyBXdDNoY>_u6pO
zIW)vFEnN>}2`W{pT<0%+qm!!8bfiUUbD2is*-!PD3p7cWZF-MNJ|rr4a8D-$z^E$o
zky+w648*lz6A5_-m!S6#M!x(WxAi~hi7Uq4wM5Xe-mS%wS|7F_g3<%Y4^d;D*&l7i
zP%@)G&C49{*4JP*OqyrY2jMwig&DY>SXw~>4JssS!|E|R|9EaKl87MzxvYs;7D?D(
zy{{Vtmm@W{;UHOxU=ooU8ttW8MKPM%Bp%8Bks+nypN^KWWGnzT@{D*zYH7Kf8BGS_
z)YQhMQ#IC5*e_hA3H`TkFM$YFmv-N9gEU;Ps9ik-#^4h+#lZFVJu2#o`p&l+ojL^W
z`$^5qZPmt)ouNz(&Jpgf*6w?IKy02@a4b9P)e9iTwwsEHkLx^w8-Kd@c{>~7iZj(*
zo858#@cf{S{o0rExYx^uAjd{Rzq(<}O4euQJA)r#O<qEy6SUTUL!gJJR2TbvY6RY}
za49@9fw;m@2+c^-7TY|&Ss)WDWvMV&6Sat4lgFl8V&ToqUhqDIOuAg%K)q+%9nB;J
zX$TW31SS`z7iN36Xe?}N@rb+0JBGPzg~KK{$&1biJa+5ECA{0^(Ek?42Og%w_07AC
z_xhz7>w)(=BBxLvi&uY;D^K{4wg^I2`&#NtUd%M*_P8Y^txg#yRlD;pdERI)oOKag
zO&J!i_v(n>joma?{UHrayai0Hn!}>{LYL3{FjMPmp~rBHe|5^YBRoqJR3KmP48|7v
zUn5Pj5QF-1syi{6%!U4(9Gstctw;HuK>^xb6m2uL2!EGA`QTDZBw`oGIyhO}Yh>G{
zOxo(e-~@w3NRINEU|3pAWTI+{AR|nRs}8a#>0&vu&mN^wGFX0<q+p@`NbcmhlJPLC
z=u)9__|u+vU0%cb>2H>NjTVKHhuBUjjPCohjN=c^EY}C0FN31i+0OOsY(X!t^{;t%
zV!2L-rABb%T*juI<Www|MYc=z^bg~mN&fBEyNIw{K5v`J2jkx;@Tr^SF<5=41levQ
zcOk4&Bhwz(fPtt@74zVVAbLEg!i*Aa>0zi!nI*qW80F75)nOx`knd6UK3vlsY37OB
zra?;kfZ~l!{Cga)DOAHl6h?GWY%1A2_2{Bu+2IJS#$*0A<|znBUB>A?^Ay5uPo*5j
z%6Gk(wiqovI9&d>fPz@sobXV;Pu3$nL8kmA;3C)_s_0<t&cLnHvpM)y;E0J`L!|H`
zXq}-51KTH%F_mcuMt;9azbno8&Oa~Pl;^#e@ACp&?-=HDV+#!<dv!4gNnz1Q{`!1h
z2#uL)13(H}xg-s1)A_sR^7f|fq<1HpzRQwzE9rTIXQemF)LpOcX%h0NEtqC^b8|pF
zVFg-^F|5yzJQm)%vc7tARp>R$N406I*a&EalhH?nM(1|*Aux_+gfK!}f19S4tAD9>
zR40-b!(>#<8iomt-s;Uep%=YVdK5ckgyUnD>^3cjqJ3(|_ySGLA5ek1)FX(DEpkRJ
zXRjg~i3UcwEQ$WItjykp-@14l&!w-J+ssU1bpsBZyfwTSEDM;c3pkjr`z;+5eNtkp
z-$kS~XXM@h>#rVDO0zA|fZD8JT9T}xp+N4v9ww<t6<eaR=PnLp`o&(X8V}TLi41wt
zz6BC)vg89z7`^ZDIX?6S6XMu!&pUl*o%yc=F?67leIbS{N3BqWdpZZE3u~l_LW#Dk
z^v|KN@)cSdO8KnvH6-}ZAsh-ZwDe6j%jVn~R#zBg>I6q(Zl}+){`^W)+ASP*Vvogq
zMV{AF{olis)x3{}M%vxn+owMAB4Fjn&{=Q0Pr4C^k*X1$O&70cEIBL!teqJ3mrZ3<
z;n=!XU_w+NLi#UMNc)Ufkx2rFF{RPh@AahH{yE2AF~v{_<k6h#ULiW&3v{vfhj!6@
zT60!wA2DtZHD+EbIR2!s=r@CuTW9y*4U+IV9LIwyOyPr2Ifv;{M-rzsp}An3($HH+
z!Yj{I<vLyFtTD|Mc+iRKD@nlHbBc(6d%CWYh&v!Pu9s%PfaNII5oJfT2<moLKJLD}
ze7!YzUo9Ka5g!V=vgCN_La;hZsy`6q@Rm5ko(JinIDt*mg3SxLNM)q&XHEGO6N*!c
zV>+b}?>p-+4Fnd1um<q!&iWB;MhU}pJ&y(pT3z!$Ll_rESiaC9FX}cvE#&D%TrXdO
zfKKPmN+!2nM-ZNA-SrEFpPF&`?ks$FKTuF0ZT~jcyl&zb_kAASo_fZOb^N2)>HGJw
z*~5^#)%DB)2)zPmqt^w(;W~%mmf|Z2R6Yi#UnNtb@S3p_jj(J+1U`m_KZbUKnPr4b
zP0Yi9P=r=gJ1fNp1}YDJ>_qXym-jMpW|MrkcRw2NSbn>l5Ur(0u;tU^hH2^?>eEH#
zv^a~8DD89(vTP}+Ka9o_o`Dzgx!591GLxDFmxfPCQjIw4vRvb4cu-1e3a+2a$^kib
zSOttaul+Mrq@<yx0K<iMu?|?Y-VrH6vJ!H<#ha9!vBN!r{aV=kYnVXyz1{IPZ?&1r
z+a$NTw{v@XX1qws!>w@Ndi##!hSzS!5ILROg1e{TZy<CAbB7+oN`U&Or4yCT0A8}%
zE^sDz>||{tlL4-z!y3q`iS`$D|Ap***+3F$4JAqc5OKb{v62by-)QP#s9Hn{rW^%h
z6l_i!#RB!0HmOniHNNW;K$_W~A|*8z1h@CMqM{GagVp#^R{QVjSGj5XqpKq=W1}jE
zoiRSYI*%IHOAOYkUX3O^I$;D-0xl+}@j|sDV&%BV)fH=f?pI0xd!m}4fA4qGO8Ulx
z{apq()Fp9{eEKrz6+w-eXOfgwmPljd&dUa@Z!aw9gn4zcyx2Wuk&1nnF8=lK7*(3G
zTwqRDEAx3tl>1ub>7#JngXXk#ZS?EnvId0?%`|>>BTWw@SzNKgMM`rcY~-R+Dy#Yh
zu0b$L#&0f)M#RYW^@UAXikb6TJq4w6YQ}93_gj#nt?l=-((Q{W@l>V7mcA=j_^Q6!
z@>?gtuZ}lvq>S7$yY)v8-+TwJt<}w8Ct20xoI1|ek(M$uI_}k?ZVS&p=c~EaKHhg%
zx6iAW=C<Uk)m`7)GFEcuw4-hEwj4=WOznbhDQb+2^uJ@8of1VY#?E$!WZ>E=UaqRy
zhF6iywmZnCv%vEvFW#C+>9Pkx4O_38A()%SNWw8+>X8`&ZB>xgt(hb#4XUds9#7=*
zR&0AmO|{-{J3U524^GHNgbp5|qX_;LYQ;Qe#VhX*ZsyCd)B9c-W{`N@D5ZK-<?(fb
zQBmB$$<gM%bvn$c4~&}+c6z1Fc6zJcgL*sP@4s$bNtF<?KjK6>{F8^Bi33FJ2Fn}@
z);GEeKXxmup(s`?b)X8RJmgUNbY}3O3A`nUUQ&|AQ*=N#2?=>EH3Ek(8YLMm?FNT3
zl`FgklNT@U2@xyCw-c;tCD|rynhv;(H29heqGhgzUCv88M|#Vq0s|p=p6NGaZc_L|
zr%NJdOeaw3Zie(A8;nBKFlb7w>1paA|K`LZ$8o?y92*lm>yV5*n1IK%7NW<45dRw}
z^5!QX2n(q=_V>^o=1a(W%W}YLzT9_Yg4)PLFZ7@B8GB>+NEQJxqsHv1sx|uU3@!^8
z-2pp$)hC$uaphO=S=_0}UE67)sm$c>F3w7?55+9%dc9ygeyBfqH3TZGi7ViRP$4vy
zwzw%dylx*05Pu|3KJm2Nz_Mv#ltov#R)}2p*1yXt^q4-+)M^RbwgzI}@qJupm&6Iy
z*8XtJt+5+oT0WrQAEycPW5PBG)Pz?oH^@>kt8f);RCye==LqdyUcfV1$+?Ijl&eZ;
zvP>7>x&6+xNNWbdV2O@=MX60o0(wYrr8D3RAyGC3L<J^AsZsI0X@b%;q7buOhWm%u
z>ekKD(A4gmOZ0D!Ce<N5^RS+Jc3)@3VC*dUMd2k81*!5;AK$KE9~>WfMH`K%y@MIR
z?aQ&_J72jUb>D8Q=5hxInx83AhJr(TUpCbs+zT`0ylQs0?nE!!**bqy(5wP&56w55
zJzqH|noKqtYh8(@;^;HBOP~hHu=lu0+m&KL_GE2)!Qlz{2OARfqyd10kduV4PkECc
zLTm2(x+q39aqd1ZU-_K5IJquormm*C?`LMP-lq4#y5@>km6$fu60O`$9uFOKuS8Kh
zJ@Y(;@xIPz&T4e<EM54+Gy7ioxI)$m6!nztbd}OJealQRNGYS_e|vr8a$(q?S^$t^
z(EMTf=0tCQy;=T+(L(laRYn?HNWj6{>W3vZ?P6<lMkRQv2o)v5aE!02pV+#3haD(G
zg047k-7|rh`_)q8jLLiJ--~es1UZKyklpXdhNB$dO}2zDOn^5bz;K5xKO|1>eSsUO
zjwwaksRucspgNyseCPOKK30O5t#opIx%4T_18(%x2sHHXy~VOj^Kw9!h#2`o(;2f&
z2jzlyi}L#OnK;mGDzk};QStLA_U(kTd3R|?!N5#cakL10)i)ZJp}jaa9{MKcj}yE&
z*v=IHBa!bS@5RMTN~F_sY72t|0P+ZF_Lg2_{MVcyl%xCy40Vwya0k)}56A~7oYx@|
z6Mj`V(g(|{l`m6H2+>e1uLP#dPLTRO$~khFS-IOzo{s_KUDK)<9{%>{2!)Q{<>rSS
zg6Jrg!z#w8o^UCw^WJA)nRiQ}&xTsL&e!We3PNfX0`xVTE!VZ}_In+`w9_l(WClTq
zNb433#!Tvd$7O`ncE5@38yY%%kS$WqKmk4cg;kl5F96bad*7=GHj#?wE%a^gi-<pe
zDsS#Y6G>I-0pmTqonlLGp=9z(>8uAtBJ=5x=PX>B`#$u#j~+nCrWz8x3~7W~Y;yjO
zO@|7a{Ve_d7jhSqVpk!<xR|Bdh?H3NpQ1KXKILOY>O#2C!N&Ym`tE<V{DR@DX%`MK
zJ`ZFB(Ia)cZJR+kiUEr~iLs3s{_Y{s3jjK_Lt&#Jv%25DSdIttDwzI%?(g$Dl1w?I
zf)gCaYks}hc#r0Y`FT)%{-Ybh|0aJr@ehc!v)=Tp7Y{Ryi!~<e-+OkRjK1k~QHIPo
zC=b~OjpWlb%m^t(f&tS87g5X>x!6+tH2IFvgALR(e6T3qaXd&!_dOoteRO1ig0jm|
ze>K`zv82HA>8f#pU+~-Popu|QPr1y~;c?dGtt+%1wd!k~5rfdiuaKNhzv|*udFFAQ
z#-cGp1HUn7pbd!aR+&k3rZx`kimJ(BmNcDmM(3u0zNaWb`CLhc-sHUj;!5<sE3DU)
zsD{Y#aBT^#1-qM4I{bZz1Gyg&TAAPmBrkPq_7^K}-oCeSZs@o_5MI4fh1_6|{kXvW
zaaIW<PMqsA8VINK(#JdvT5|BZ>gsyd&78?`^AC(kB6GsdLx^r<T;A#FQ#l3uTjYoa
z{+Hr7P?Iv4L4vOHMeU}ZgtV)}nAm-M-}26TB2}GW?~6Nz8)2+<^cF$;b<#l2H}tdk
zRRdX`*Gdy(X0$Z%0wCw(nkFQyPurQdlrL^4RmzvnfwRJSP1<E~P5PZCd^$OezKnc^
zb^^&Fr;Vz?7{B?|5(C8icNb7uB2-ev!m3VrR{VCs&};djEUU{7i5V1C(Pioz?<t{+
zpQHTQtFhnONin>&o_Ucz0ZHCJ2hZJ@^8L=?MAa7~49m9gNPMKK%haQ*`>{t-ylbzM
z<W63X2-t)AB`m-nV?(#Rgd8GB<ezW7LUS60fukKa>{}zXIry&2TUyk**83B}>&Yv0
zHb6izO#mD!zVATOsV)w=K`;6fm&rEA%_rIa!>~}UqOah6Fz0}vN-Ysj%=!2wkpN+o
z^aV`z%}{ism0eG;#Z~&t(ITz2O}5IehtT`|NLWR|uXnL{{G6XotdxYH1$4@Fodh<g
zLC8zg*qj}1+$Snu+ZgTMY?zX8ngJEKZ$qO!I@q?I);Hfkm=*>nH`+cmAEmB`Ku7fR
zOvwce+YjmYQ~5#J(ztuN7tF2hj&{dg#r?k2yIqv>(b<mlQ9-<j@s(atDaDN3?t!=M
zG_x^rVw~$iht4WB4A<x)s9g=M8_}EYa-E~68hS5p?TLfQxSB%V-vrLaz>hlL@@?c$
z6?A_66L3Ow#MgIWNLWQ+AuLx60h;w$-BBLe643B;pNKdiA0h!IlY*K?jOam@X5mH<
zk3lZ(FKsyd6y0e0nZ9ij#)mDqF@&y7RcG^^JOu@I`idrpT(1~qe=*(c)-RGSuNtW9
zt{$HqIsoWzW1S0fF3G@x$P^1mYHnoij)tZbGqVy|KLTzozU*OC{o199p@#3){uzDQ
z+7nbM|G3a}YFU^wk<@=16aEz7B?>_(zVP0^x1JQ4o%-MGj*t4*H!fg%9GvUk)U@lV
zZvMvZ(1(Frdv@<uCEA;ve6Btb`zWGzZhM`L&7XV4ZEhJ|v{-oU=&;wA^yH#gv2-=j
z+xgA>QG@U4HMKMoum=+uq;(_A>e!YaPr6%Q$e>B>AgfbsQNM8g-v1cZp^kc#=x&WK
zlz~i5;Y+SQ#GsuMxNQShT@TBH%29Rp$Q+GwLz*pw8m87jATPJ`ZoV)@*qA(J5Y^*$
zLJQ#@`_feWbb3s)(5pt|qmJnMIM;Iv-tgDw_b*O^7DRACHO_zAeFm$AAEy%r^N?@h
z$bu;$hIoDcTgT=5>(AwmM30u6$!f0RVN&ejy#Fqf|7OJN!&hY9@WdzxuH^V9DMgs%
zIdHuoiAQ}DLr495{D6835)>4Z$8S-ou)_W5OQMbw+fXmL5nU~*XEnIi<@5I>j(Yb4
zH~t8aTxZm}+6~RkY*<A3Q(nNW6O%Q`!`)KX3uPYjmzkFYSo{%cOB8_X2*+htkXQ-H
zvHrVkKcU@~`PsLbR7&TZZw)j~1%m~d*1d~+8ZTnDD{CL(1)PuroKS-|6F3NgpI+Dc
zqn$_CpwH51h6Al_*eR=X<I&|w4TJ5EPw-5+apOCQwo<w{*$s}rdw|DYYh<y9!Pnkw
zBqu6TeOWZEhmU2v`DP&)DZR1VZ^zbpaXrI?;dwHKi9w+8Q|ZL@vLX%vdC{JTu=68-
z*yXi}`z5D;k_~<RHNb{Gjd*Lf{c_9i1e0eV$+6X)s(yHG6J-^jJ*r$7?1|7CHSiw$
z3R6v};oKzT_nLT1^|8t?&pOm$NM|y|^$knPq-^L<bji}}Oc8QF8(y)n!=kyZcwiNE
z6>*1h@dv%OGkR;X9dLNlm>+y!sRnDyyyn<_N2sJQnhqjBL)#6X!Lkcy{Rw9i;O63I
z0dEWX&!pb7ITB)>jSp<SAOK(v_3mlj21R|!`OcG;#0}4ZQ)gfy*IT!TCinn=gMi->
zK|!{k<=9wtK^Vnnh&ho4qT`svN#R?^%#rjRuU<c*@|%Bt&?O;u<$&1m*qnjnVZ{9l
z2M$)qwBme}69A%hUXVu2(ZFH!*4T*rw?N!6mRXWiKnw^oYE=TUn+CX^RWR##rU9Ch
zIih^XXrfWaR0yGNXD}voS=WV$2@~9Q(Vjo9_%FJ!Sm2A72E@&O8=_IqprOR?6p*6e
zHF~WtzQN3e#-qK!8-yB6gv*ULX|=3=9W`Hgh8e3yQ}s|M{nd0~#dt8S)fvHQXxSTQ
zy?<GFr}al+jtEI>vzX0)>6;5sv)P>jfQeGw74zEN<-D<Ei;Jb`5q{BqXJ$c(#Y~RS
zJ7*erKUmZu`jF2-H-j59!H2<<F!`|g1)zoLoCGz5Rf%#Z3~&}a)<AWfXGH`KFw}tl
z?tOd6=)vHTxWH=kTfdr31co^3t_FD?+HCk^Co@^O^AhmJJcG&kX1$}6q<kNYHFks7
za!GES8Zv}lIJRx@RM`#|4+X0J!kf6m4a(_X&<NCsPK*|6FNhamq{#aSz=(q5DF8x0
z?ALcT{->kZ@oDlL%B))S8>98=s=DXcJI9whP1_xr{wjQp+3x%wGsDBVo{ib>FYb3$
z0+OnQt;XF>RdE#N3{_ka8UsyHzUV^7<QRGS_r`*zN~aP~3G~kl1j967KRyaXntWi@
zGVrd2Pca$?#HMD2p-7-A*gq3d>JCl|FG05lIcIq@=@(f^V%4_f`_4WS57`}dY*%Q_
zPDd9wMh^SB!S|!b`)G2z_SXd+buv|2HdCiS<}2pPJZ{T^k9hsf<aF62Z;)j7I3*`7
zucsNyDP1d(<YgjQ=^mm9E|@7;Ax<2mQDKE>Sx-CI97@KmYNeEZ*3UzBpz`S9|JJY;
zLTqPwcR1w<8b3cz8M0ZSLK8>DlJsuoKb&xkR@;2OR^MKP2WHLJP}^5}XiaK5Z_;4q
zGakE~wH}!UaY*2!e(&TyPR`^uCyporgj948K?m%I`Trg@aLN^8?&shnMmVmFO=qs-
z?w^2&$cOl9e`xB{5l@LkZYKz#*36Y4W+IYoDI8j;3^=?xo4*u%Oi6!FX?9rI7*I;o
zeaTZo*B-Cp4W^<pkDMP>yP|ag1?kw3@EFpNL7`K_(>*)XPgOUrHB_i~V}*In%20Md
zEn71t6Dezt)uhuEM1Pcg{z@(`>o!sK$u#Ly1dG%rYsU=THz~T<HYzMCkC5FYz&YnZ
zuS>=E^U+>5V6c1V;iG<Ej+jzk{6ME0XRzEPv45}TWFIwe<#HH{*$>M@&x>7qe)=cV
z1Hl}{>*4m~bTW{*92VX~JO+wLe*&<clN=x_kWL#I?*{LPkFVkg?61@XKBhMh36r5w
zCm%p);3;Jc0I#0A{TjleiQ!sAJx0}|<z;t_=o&%oM1zJqu1RNZkuh_l@ow~3L^49^
z?HbwAgzyjOypdU89l4)YW;~!&n!I_QDW_RW6`-0FaoWDngL}EFWtw)$bpiKENgDDj
zk5apo=&5ZL+bFSujj*kG2?_B^?=09>@r!DkB{Wqu-$l0zs0nvJ90Wwn5<5%pSi>}W
zuJ&MeW2rK7_vXqu?$5;tiaKoWMsizoA*P!SRFy@6>4GdbzvROAV_<&=mHi%1q01Pr
zWQrt*g6%QDkmS*yKyHrrh_vs9Tb3u{TVC^lv9XSBx<zh@fR{w9En0E40~L@KmvWKk
z+&)kcPv%;Uc#y@LyDkPfF-?3_M=PZa#PAvw>eX*>PhzCo&Va15@TFdtLG6erWJk~a
zcR&C<wbuXxl`4_EZ<A}1YEWg~O->6le##tO=<9gp=+-hm(^RX8$DiG7ACvy6@-?-*
zl(|^;0=+P#;4@1LIVdWF1B)4Z17QWFRjNxxtKOpjHe}*N!Mwq@Lu)01kL+oE25({&
zC(#eC!($cKW=@~}{;e6ZVpcQQG^-v=T!qL^?0bp9q)Nk)pRtdDbF2YH^l>#_79GOo
zdw)P}s0wFa|0_D6KpY>oqnf4q9I^AYO4LXfn-=D)K&w|f-OWB+)*92@c+b@>Cv#=@
z&wX2!i{*Z@j9(3=yNTf<QdTZ4j<bbhl7bcdHh-JTX=YGf?ly4ygIi1AP3qs+VH_hg
z0xny0uuzYpXzlDF2D9yT>XD$7`7vs=1HsPZ!^m4g40t{_N{4h512gR?wX&43ATGVU
z5}0Fti3<~M4wqRoR$z!{`@B@X?ghU>Hx~EX<x3Rht#*sCoA?n`<68b-c*FhXWJ^fr
z74B~i++^2#-4~L2zxGz4$Wuw{VMbMusm~UGGYN#@&zp#=Ga>V^y%>M7>8Rv%(COuH
zc++7RTxR}y-M7vTM~uWt@%s0hXXc7CJgVNbZY#gHss`ITZE69O4wYcU_x>!iy!<yG
z*xkQVb#Ofd87d+%Ei7p{Ht(AGK|AEqBrt`V(-x}RTf=;3qmr&(_3L}6*IodmWqeD$
zp!Mh-^wb@6IqibIBg%|ojXiG^P=}{6(9zG!`hlZ{Io$>##~ATMM{ukJ$m=?%xXh<}
zz#?!QJMS;3Ke}$SBc;x+T=UvEzFnpB9~ZKoZHFdblho{7totn{(_d;gJ&-eH+v$}&
z4xi#6RAcrTF68IPR6;oSr1rU7e>A)fS_{Ohy&*oQyamF6BZ7NT#(AoDuid0hIP=Ab
zX$P!|TX=)dxK0Fek;-Qh{RXnZz7Lp62=!2HX8)J)v52f-o{lw-v^wSednEK#?V+w%
z!e{xtHt||pW`kI`@_K&B8AzKF9Wj~$`&FTO)KyVRf-)}SuILDv=bATF&|0t%;t+1P
zagE6oRrs^nCbD<fQaWlw$*kr+MFu4&DW;IcWN4jW|EOaIACE(SFZxO6M$qlORHKOe
zIy>l_zBGLS6tD-<z;}`lFHFpF>UcEaWgVAf>W(A4t~ig3tGwew_Ib?38$27OM>Z=`
zk0C%T=f`z68n*wz^vb@30A^mE=Xz^`F|kqS|F$L{$^SORN$UuCmQe!ES(ffuo|L1+
zB)@Jp$WB(W^WiTQsfVUGqfO@_R~<*Wevj{OFIhc%;M+~>4#o%bd_Ql`pI3I^+v;b}
z|G?+jn~@oi*t8U8*=2gt`=&v%iQ^Nv$=}H@FkBg&)WCqZX3)}dgNKy?mPtK^{qm5V
zi9(GNoeLjovKZ2<O)WDl;$4TnV`f;`{g02MJfKUeYMS$Q*|`D;2AmZBrNB0gu%Mhn
z|CPg9nzh=_Tc}!e^bS(sFWHJ07n}L(cRzU3joVw|s!2haS2eyLDT=kc`)o)ekf1QD
zR{a^a0PK=H@kBf6xCkutt#7VpO5AFb@ZT369op)1ihvdwjeTntqd$#h^u{o)1?=Lp
zEE6N3K{KvXj212u);h^H>b|5y2`|2`6gh;WIRE;sEL{g{8`f;T#w6BC?5ef+o`JCW
z8%;0eT74_{Ec7R>vQj_1?yFZffC(j({RByhf$6`hmvHpSa@*@rUb&X_oG~h_A*$%?
zL+OL281NyhVgUP+?$H^Sf5vf_)gvLzP*4nO=%XgBTuo4j)iPuh)<X@IE}fARDMwL~
zyvZ2tIu(v_?B=i>y)a8_;hdLLX3LYpiY~k)rl9c`*;-cerm=e#J3W`Tj5b=oIg4Dg
zt_+Q~O4sx%t;FUs=md_3x&q;?<Do%e3v4_CaEtnYS9=BYdwjoGE(tUBP1EuR>}b7O
z74-IyuR||$A2$69a^4^EaL%B2SS>DgyPvk+XW<6;>HUzN@m37xotuxqvXfS!88U$}
zAI{K|=~~S=)gv(if|vzRI&PVrE>o+;6N!5QK~8yeq$>snFeJLjCT=8cZcg`SOEPq~
z@Z+^CQTdYhiO{)jEe864G|^3On(><Yg)D|7%R@A|J8sL9Ali6xye!Z$b~ehAs00zV
zG(Fhov7X0kD{CvY5O&cuCJ9J8k=riVIAyd_Wx3cHcmSuZqZiukd&S=vdM`en-oy)!
zeK;=z5J#(RwOo9Uiz$B=bbDoLF6;me7)Hi2inO}Xv@{t(Ey#UB4~iwd5)D$Ss*O@J
zOm7=Sm*Y>;US3_ve+r;UXIqp2G7TD7nO6TyClh5jWyt{@izTnCjRJ!xW-zW;G38j>
zFn-i&4~e7CanCg_;@_Gw@6TOsJ(!7CMvT)qy&ta5OxV;1HD|ArAPI{aD&rzGIpupa
zecevY8bQ8A+g#PUE{fb#pPF2RU$6@DAPfF=>l)#Tn2Fan*j**SB;2vD8k_?^rysST
zX)=Grt(o9*ZI~7`%%`UZ#pn%x?Z+^P>DjnaJi(Q5TJI0aEU)%GeT6$sUyu4Q@$ud6
zW)>%w*Jrz_UI>qmddna{t5x*rZF@G0uNtYyJxucYb4_<)yIHs$!>d*GIDU0Oh|dlm
zoK`L8x%Gs4Ui96(n?9OZhO__;`6?0x4~h(rH2P7>^#sxsCL)fVRmE4IG`n%h8R3?x
z<c^8%mI31}<C8(9M^V-r5M@3<Jv<o9firYek4JsRd7DbPM5r)rT^9j0a@ApH)~X$^
z%D7cTJ(z2{xD?>SDfEpA=r4>)h)empeI6>#79JfEzjRoYl>+NCCVe{6ZZMdH-yYEm
zGpV_$kdi8w^`KP%+hnjEbKn2;i9|Tm??W~i_FDpfDS|4XeM7??dUHYh7VI^;(<aMw
zn8rx+9Ze4-dY|lRfy=y9jK*$^TDmCKyrD(|%$IfH$|sA;j{4ZuG6fgKQ#Ir@0*hJO
zg(mk;P+6KuY7}H1+HXgmEIL4^Uz7r72IJP4jqD{qdJtV0yX=`Aypmt{-4Vs!%#BnT
z+ebX+9?p}e+p|NK$4;eNWqO(~<LB}QlB`n`9?3IbYZBAAX>wyj($?o?c2Ep$>abI5
zwFfKHU;Zx&XXn2QHxI{7ZrR^o;CvrqzPj(B_gTU0ygm9S6X8hgVRqL~e;((<-fJ>f
zs$Gv0cpJIn1R_R=-m%+o)76!*7ppp~ENJ>EWzWc)lWT*JtPw>;&$ood=jwq$&a)vU
zpNzk99|&j8c_od#YRiT{(-Co`+4NWJC~9CM9Y7)0i~@Pp06?axd~;wZ(_+GOV}Wa#
zr>o?h)jFncF5@yfspzXU(}a-7*h{tNR8#@;(w4s?`x3xwzl9Ez3c*%t<kRd{%5^j<
zG+}4#^fI5xpi>JOH?S>{S%B0T8i&!N2ax`(OA20~sxtZw5hv*xPd$Rc+=D2Z<TyyA
zH9(LI8haSe-c|`q!oSwOx}Msw9JK%z*Xz=@RMg<F$ofrP+Bjc8TqZuJZSRioH3P$H
zyd3s|zb5s%UCcwORL^B6?mpmy$O}Z7&ul+zbbqb;S{>BAo+Wvy-F8hbCvFi`X`Ee8
zCUhSQI|ID}g|grLB8nMffkrmqNjB1Ub_rL(N@}mhQ@TZ3>ydL5giMR4G<GX^YzOT0
zhxZrvNB6S@_yCK8%|I?4D+_2qds9ETleRlIu1IHB&g)Hbz68#Q;T25|R62^+a~Qmi
zjei{_Rp~LEf_3;LAw>o042YK<{nN<);yb%kJx9LeUfQQFwS93E`|NNRlD%?n&`>li
zLZ>V{zv0v>tzv(Bs9tA2PrnkFtSu>Fgjs=n3>ij5&?@2s$7(HXUWfx4Fl^RV5Ap+t
z+W$VKOie_a`@L=|DHW5R1+oDhVmrg)mPxDMjJqrefkcjMwTv>JIRNhx-b23&iLaXv
z(Xi@wdaaD>d1EhsATS#*WH{k)#9=t$g6A+LpVUFy<0-8pM@3Xp{<9Trv#IaF+&n~V
zS}Hp&D>}sy35!kqZOyhOC@j^eRMMz3MufXA0(aBPm4lV<u}_kGM*pDme7W#Q`EhXT
zyQFAWg|jV^*Ol$mo7**q+iYbRk3^&`hx{o+=egCn?v&s+l}1rwHMz9El~)zB)K|{h
z>+eZC8Jd`Y<D1teEgHjyl=Uf$x2dv4#xle_N@tsJ=Y5ba?PPrso}1%<$5X!eYlMy=
zH55vv#HJboGp(Ro?i2{!aFgJ~zL13$4-lmFg6=2!U>Gc4K8?1$R{Jk+st81T61gv>
zLw)~J<C*KwY&~PqEW6LcY3J)e3saMuIg}fYk8Tk=x|*bS(eE+S_fxGJUS{0-SBb8t
zYL$gEX+cTJAjN*2G3nQwY(leSVDX+&sPWYtVq*qh%Rwf1JNflgzsRCYFG5!DeyVwp
z?DVv&X;qHPiMi|BZK9h+kX*KsjG!IIJkD^hY$U|)^b6}LOR#`fuD_aXC*P2!FyoG~
zRcIqUP91-`1(g&OxLi`qicwZS>)KeO@#y^)|G2qTAHc~nMwQdaW@Z;-6gKb7PIpe|
z6L@PRD{1bpE*|%?H13kqQ1>`UsNBpO45IV^&CRHB_AO(gRl_57M1lh~qNSn8PqY1N
zSVs;Y&#QxctDC2JFrY*p_4LL<%%_<Jq6PW^tBxWXt>$MF2=Zvdq+ih2A-AgAWPK{=
zC4MNw3~^<#v1!hAGtDI2X&_za3o}(pG~0rT1EbTZ^?0@H+Mj&-Np2bnZ^5E}G-Z$j
z@nEyl%6)L>NAwjzR)GpyE(E7FsVn<dWS$%yjEkKK6<kbI5AK&0?_bOE*;$|*xzvZ1
zdkZ0~cP_~I@GnX@B>)zk?~Ionwrxq}1ox4Rd)U|%m)|PG5-dh;oRAXYlGc!tSrYpo
ziac)X-DJ>drm3P~@*B6C%TpbD(2)1J+H{RsbyM}GbswkBXT7fPJ@|nr=UNkBKzC3%
zLftr@Hu{UEY2;E>@zafyh*hQk(+mFdW+NR_`8bM~Og(O>unp070SGaBbW)z~12kIS
zfX)j1x-reI;5>2c?L%~77d4<RWwlZAx!h)t2=F3|!%$v?j2LG;$H6_yERPfHL^)S5
ziYq=A+#}`J=&BhNWm64R3smsSsit>Bt&nI^CZOqzv?ayJ%oV?|imrL$48u5G=-+*C
zwQQR6L*KmJ^*zDcWyWIS?>=5?=NbFS^3DXF&T^e~K>rQ7YOrth2qx5N_pIU}<<rze
zSzGW|nUMzVI-A8{`*|SPK<bUu{V_c}JY<izCV%tf-z`?K0W<Z{+b&DP)Af{;jtvHF
zZQhU9sw+3H$E}c|=CK(cJ^6Ex+qITG#4imF*xPzKNP$orO01LP62QKm2oux|@zg-p
zxC{3k2yfyZ;WjA1R94<N{E+(^SOV&Tdt*;(uIc({e_A5c=SAiTFE(hrw+TWZlP<?}
z)-S^6I3E$r-<SiiF@Bv{kPSE43)238;eyXc(HbHj9%Q?|gLilh4-a5vHQpjg&_!}K
zM_L<0{Y9u;^v8ZImEc_&3L0)M*<!FUcCQ~hUOog&`S4qnAwDSIZmp`Y44&m(hJfR}
zd+VRO9NjvWsZLXkL8?gw`;&v^N%U#L0Y1Vt>&x)J_uAeDtHICH7V$?>&VOZcDchj&
zK3G+2z&L1le@J1RSyT?)8^6Vjq2~g^mOn0PiHFNU=-kb8e*cq^4C(ED&FEHu=7RMs
z4_c1JokD2z8?#+*aT#54>C4wOCw3j`o4Df3vDaDqw6yE)`x|>MCk(NC)huV;w73O>
zhqwZuc0obtQ5gd!VNvpCkxs9>#*Qp6ON}%SJ~7hAWm7O5V=;WG8_7{Jo)4p<1|q@;
z@;3<vbr$=q#D*50<z6bFEXmX?ZVeZooD1i00m0T#(J7O4$PYPV0RUx}P?S6^@InT0
zl!N8Gq>_CBqR+M^U`HX8Dpk#jFDj1$$B4-$baNEEr@$gao0-N0Vx^~E?qK)y<%z+I
zn^Ib6@?Stjq+zR@b@rB)LS&wgCL9YtVehus4%LtDO2rpp!KG4IT<W|sD$*E-UWMRI
zW+|ZkPWGi-V>xd4D$~#jP}AEGwlv;#X9?=^4|Qs|@dXLsu()lf$e7;Y{$8&GH>hl&
zCyRZ9bmnf<ybQ`G2Mo1Q1e7HaWx3RX3d$kOhV4hDbKmAWT0y7q7_m0GvGgw9FUj!Z
zXWu!q%-#G(<gtM>&p?6e)J8=r@YO25syU`zkrUR5BgDm0a2KGK*F)o1iS?<aKD@+s
zOPbth)kXnAY=>mHQ>s8sEZ~+Q;^4h4<G?B*9LY4ppvQ=TG899br3X_C!DU(Ab1)zm
zT=})Y@6t;zx7A7R%8Gh&bKr7ke!QH%fm3D+6MrBkKHeLnYrT*2FnM;xZ7EtpZ^84P
zJ6$(kYhBc9*+=bpAFTT-iRN(9;`S^paphTP(lYfs>xfOyp1i};@v(A)f-R%L*|n*;
z*K1wn{1?GN(YpXZ>r{A4q5-d1kh~dGrDCO$70;U0NpOq!ZGEVy0Fr47GRke$RrC%t
z4V6j=w#p{!0qNoaPDqT|BvWF2aZ;o;pyaTGFtAQDG(E7HhlP}wl!}z3SVkf*UV(^N
z=z&wR`Kh|}LUAscr^>=qNg96<H31?qZBWEls^Z_{W-{hYvh?CBmmzQ61|jq>5013x
zim@46ePwpLP75q3p;jva-t)#-qiO$Nut%R^1QfA(J}X4K=za8myZJd_$JrC|)+kRY
z;56QCjWw69-;ZntFMHElc1^14#&>EkKBgM4uSCn9L$4@*#k^0g$*Umn!^31Uv}!)*
zBlS{eJ$zMx9Luo%oA$QYyJGIaHhCcEuqf^RI%$1{X|2s#Y_P)UtFF~ay-d$)=CLtm
zUve8w{3R9A$JeP_Vsh``1Q6!i`|Y|+CPYd)U{4m_uzZqSg)ZnZg{RnnZVH{kx=aPs
zIF6zbW>0(=Z`1)y00#!cg%zaQXNKkz6*}B`0#DZ7EZHkVLJv8)l2KfbeO5<Nns<VU
z8s*Ip!ypZ>dkpW(cy(DHckHdN^$*3@d!*6JgKcBLqN}ftKBTXtm)G2es(kg>m-XGq
z_+k-BrH_-{WPQoD#gh&zOYtto>gCYqtOtvEHU9<z0PGyZKLq+KP6cnUz+xDr40AMU
zyNAHHZ;&dkc<5u6K&S-zwBmUnE^yVWK{7%K-L{IgTQ)!Q__92%xZuh}cI{H@DK?g+
z$hrC^%RMD0FCI4M<t2|lhUqlp!=OYnajPk|C^FfcyU0acDP<8ct|L5OK%?}N!UVEo
zF`^u91JMQ3F`JoJ<{p!t$5*@WR^$E{^U(P5GV705oE?iF)*xP6Zv{OIVYUJU`x#@o
z{AWRCyfx-k??R;=5p*Set5Z+3tsITzU&1ehN8K9XlcS;cR|!9_?Dy&_**ZK~1Ix^}
zPl~V8nIt2rRAu3SJYlT9(&*XAdn@<U$8Y{Bu@}2~OD-;o4{_C)?n&OqwPtLAcp2TZ
z_$gU`iQ4?H=GJwMV79_vrEkf6@nH=pLHoOi;}$3<OT?67lX-XJ{}yMj8fY1BG4s*>
z0=Ff~PfH53zBNurYK_;VRR;^=j!Dgp)Zo}E-TYgBHz%c-tRAsw@t-t(rzlJcgh~rb
z&zqt|?3^dN{+hp<Dr?-;qQPo;tNaruRH=RUW$rC=J(Es3gu$S}|9#9^6}9A+WQmht
z&x*Lme`Rb|WN$2}17=K?b1M71OL)QH@-$lbR$A%1RX#r)*RuQ&ls)poN<S8;BdK0A
zg8y@vhU8Q8&GJMB6TrEkodHTRE<@VHloO+=0p5jbjF^|4kP+b2P4WqhBX<n9)Qdbq
zPwGemxEdM><g&K0%pPzg_!GVgH6*P8CZtuiM6YqCfnr4_cH~~ZGq9NJN0P5IUP)p`
z@+swu{vpi=#4ts<j@bBkkJbjfUUhZM-e=ileDxusLx{V^`1;6NU>eL_ea`<nlX(NE
zSWM-|*+mHSp*tUTRdc)U`8aem>#K&(LBAGv7hItBHkyPvp1H~n#ErY#qSN*ESxJL=
zGlQiW%Xl0fENGuzJq~M~D#DYHK=&K!lZ+EUc+_~06S0SnU@Q8+0BI7I?T{-XSJA8$
zvgjLjnrN26UyhcO<xE-3Q3P2mBaV{x2YRa9uc-0bdyNp162&Jz=-O4&W4a=K63^q#
zx<D{O2qaO+P4PFN9D3$#FkjL(nE9qVD+dC4aRiI~#y4)>(Z?sRMdR*`Os&&f`-p;E
zJEn0LX=s~)xy_pm9vIQ0SxsB8BVjZkxGL#{Hqs>s26mhdsjt$O1A*0xeaJ2OReqIN
zIoC-B>Zw9d6>5-F6lPuTZLA}kS8Gr=BO%w}@*mNvYNo3}LRw3+bgA2*gyi_??FJ_%
zB{XLlwSw=8iv<~)!>$jZ&Ffk8vz7R+^fLLZ1?(yv12A-G765|l;%c-~X8{?k3NGu3
z^yEGifMVrqCmIzq!e&hmh}2nPCd|tnz8?@A6=$O<I^e!pe#WEKbH?Lca>k>@84xAT
zCWk!c4m+TovDgZxz*qmRGa^%ChKB|_gQ8BxOw6A<=Kz_<WpOobKt>!7>x${GuY;ou
zEg<8;Rdql<Uk?B>c`YPYOn(hUv0w9t>WbbR;OUi+$oe*WewEfoeLbqGI09RRk<{cz
zG+w(<S-ybns8pB<eqd&r_whsr<+kN9t^)tzO<J_mOQvDXnzz&Ak6U)nX%f}ENB0(V
z9vw=b2s<E`o=g=7^z13Lh0Vu;OBtiNKOD!h@G|JA+&y@a^v~I-R;xpBA>00sn|zK@
zPBu<b7o+E_XdD6r5pW1y6%Mm+N}g|mc8nDJri>Dh@a3n1x-T2``%pNn&a<kk5Soct
z|KKk$pWt{_5Wwt(%QI2A5|Ayjx-hZ&e0uOLnL{4ljNg$C3k0cw=kR8*RyZ`!kJvb!
zOViQ^;tb-ws>32E-$jEfV3taC-$-_78y}eYGU7ECj<F-%0@-UqQ9%OTKoX)8k`po$
zL_QU;k-xGNs3R*LxM(kn-{rElBtm9j|0w&^CbJkwtCr&@YPOHn6nt~r(5d<{xi1r1
zWT4MY`KJAb{<@TkT7KUxU!Obl9rc408J*LsEn?7VoSibf_nO`II?*S$4|y)db*WAm
zl2MK5dJgrk$1!y-0V3MHD|{o!Ab^DxK2W8?$EOVC$9J88S(i+a&IUmc3X2t4>m86O
zFXzACEyFY5`N%*!81H}EN8|MFqp_2~h4#{%3W~VCcHRurgc(x~g$8TAG`J>>XapDO
z8NxUtr4Gj1mro-dHDWzaC(v&?I>S80T9F^YWhY!emxZV8^XDzoQ|kmiNipzj7Zcrw
z<I9KdC~pq3A%}2&%qZuG^}(Uq_?=ph(98M#X5^`*PU%Eg0Kyw*t)f%V+JvH`o+N7e
zl1hob5{S(oSA3Fccp}-V|1*6>lbh(Wn`-2y+EbOsAjz_uL~@h(-_oR>9ntPb`^gG0
zJGnfD)EtWn;-B6l#cP_0%A@Vdol}2n%J&~XlPNz?R)0{OiYgb1Im`mMma0nDAe38#
z&Ot1qI_&ny@V_fP4yok?#+~EJpKku&7g#hC7!wsyX+gDT3yfKjHJ%sR(*zb0c4(ev
zRi$G_xkjuD4)vBAFR+!*7cxWR?XTDkfB*sD9zqoef$mB$JF&v67-+5tINJUj#X!Xu
z%nY#hl#J}ptOf@BTQ%^hwZKIH=$c@AdR3(2XcZBpvZ@Gv>M6vmD$=m5D&nb$I7)xV
z-HAj3zz*3;RE)y|od$S!QJSB2ZZqbxo=EQskWF(M{{TWdou@THmbH?JtE69^EE)pC
z4@_rof+7zd#a-JBUY3S2?$UP9(sXQmZdhhrV*JkyZBT#a%L>lwF>ssud1$>JgSQ|@
z7$A_y$VZTo^OaIF-#qyLUMaQy_bR0i{(FT|^wPf-N^xlk03IL&{rd^T=1M0J8^p2`
zi1E`-AU0y}6NuwTYXHq9JSPyNw^!;{InrX(VIumuff|WAbxL#BzH<jf<3!~C4!zX~
z5Tp^=uOQ=!fLt#sxtT{`7z8bPA3N-a{yBE|pEJiW=YPVyL>>?rM#mWu7U*^CaCv%?
zo=V#pm@?w!QDe|CS)JCi)1Yy)11!6z44#sXyLT8k-)bJ*duR^YjAo{)U)NkcV&a-9
zgWB~$<A(GZjq3woNFX!mC`7Vut079DhN=V-FYcZBR+tzwc!a$s27cVcxLNsCSR6>E
zXS;f(Sp-a_t;3#}i?J?nZP{nryEO(a88gvh-8XVVet?eyVbo$yf>AFU`?P2_Ez{T7
zQ;19vPiz{sdDMjG_fBj0-XH3j)(tXhR&Un6=Z41hn|sdK!YhTKN@okR6y99%Y+;?b
z!uhQ_@3V#RQq`v}`bjnEa5DbgZNy)ufB-<`H=e9QD^!8%Fu;qxZ>|V>SJelwl~^@7
z#CvO1u&pX<c&KXgK+#cN(j#ssmXluja?=hGcBTXiP7gheiqFb!*h<6$gSNM7VK5!}
zX}LM@biKwtetX`}A8Q`ptM6K~wQG9w0V^~7hIHsYH)2S~&I@p>8TBKFG#WT{>cGVf
zLi;u7H+ia>*lJ+kc72m0bI`5keREd!=uRyrz4R~KQ>emDJLv7@a?9q+=+mqn$-+oY
zI9UO#_mHEl-Y$jTMD-Qzgc*m|9_nzostDy7IkOk+Gk8Vr^Z@ITaec=dbq4>q-%j}J
zQM2{!XD9k&scW0;e0#L7vHO2Db`L;u1W^D$e@}LHV%xTD+qP|=Vmosi+qPA%*iH(u
zZEHKdzq|fT?@ds=>U#HE<C*@;hK4NdKXgs6wx!B8KXR=gi`k@d<HGe?wyRgGa``%(
z!+c|=aoRi>!-5U2_bSN(_bUH)PlIlQI645j&FB*930?4w^I}owQFEU#TPT+EWmi%a
z>#VUb2E$le(Yd|x9wK5r!uD@NlM14yA`mMDex{yPMciokjI*e>J8PzoG14igeu=^G
zLLvyve0|KHvlGviy>@4k=gLfhkBR^N>i{Ff;W?#t1(g^daV6E$eWlma3ujc<PFhOM
zB$*sJHO1dyBi6-SAFij?9PeK_*qL0@zo9>CXPhc->~bdAG*12M7nNl5*F?@`Zdt3M
zksY$(+yAPp1gii^f>L_LRoS7XE>AjyeGobpJ_L!UnY?6dX1GL5;Lz=?c%*$S5vz~d
zIl%E9I+x{<8Z77ycUc9hvk66sWTB$Y<Uw^Ny(vCL!0l(eziJ?ttMEB6P6WHpzi=*d
zj^b$KQln9x+D@MW$exlePdbEs$I%c{wwO#_GB%6l5;38sJ*Z{>o&@@bStxH}yYk6)
z@fR3HPd#N~6x7BRt32rtSdZ-za;Mi}Hd%Se*nGcB#F!3!3)_`Xwu{fjc43x7oV~(o
z_Qufc(f&o_g?S0BW<nQHqZ`4RqIM=F%&qArq(h8iE;^5<E0MNYRTrI4)0s*8SQFMI
zn$D}~RH(7{EHi7$xy*cqvr<a+XBv*7o>wcWiXwG+(ji85)cTPtnWpoSwplZm*eNva
zks4cA1m_1cZCOP`c{#O(zGg)OTLLSvGmiRS%z5Nx!c>#JfZHNQlAwe~d7awiq(j(Z
z7oAVjuSnal$we24(jJd_j<gRBLi}htza#cV^B8KmuS|xh{v@R+kt`hmBoB&G^ybb|
z@>o#CUp0{DNBA1*SkNDj1(<Kf3!=Q18kbX|G)YjhnQYh^rA<HS5H`_8XV>&g(l*R>
z(K$7JRBG@-@4=jNe0SEvd@f3-t7Aeaf2QrhiRqYt+9+;5RoV+7g`Vk01QbQh>lDxC
zm0aS*RJy9rJ<aW?<q;tRe<sQ+0C-IEj3{rc=I{{2#VF3F6KPZw%zc1cQxi4DC%Ioc
zSI`)f{zW>3O>oiKHT{CL4Rijf&ye=PYHYWzb7=YqYMhZle$M4uY21@qsovbftzCat
zn+jtnZF15fY#C~OMRjUTzankJR+rdmHGK@V+&89yD3|MRvCej?&dwBt=2#wsNFPIu
zy=(x#0Z6jv4*+=DUB`!E127B&K?%T9%>IjJ1k=47E7n?j=Krs=mIfST2U+Gt0@6^$
zj3~P5o@hW;A_y@^Q8OHqlf-ffD!OG(j4dKLsXA#24ny5`>g>HGnF(f`<6m-dQw)uI
z;Vu~(yd)RT5(NSP0000100002BND)z9X4MNJoNw>2mk;8006}B5iS4#007kiQvLcq
z{nZH_2y*}e00{sB00000004N}V_;-pV9)u-!@$7t<(J*Ra86kc2FA?{$lxsij@<^=
z004N}ZPEj<9YGWX&>roJZQHhO+qP}nwr$(CjY4eOn)HNUTXmL$ySG|RK_mP*#Qi@;
zBBfNgtBWH%l{6QzTOUGBQ3;o2RkV{$Y)@4TJ#-V46MgInzAGR$A*B*_CC4|_#YG}s
zvr%?RO(Uo_9itR9L9|48(bDeKK2+6p(2>_Hsuec+@}h)ZWw+^VsBXezpoxR(x-<1e
z4O0ixO>fkY;m}`~MiTuIHFQW+_tx{<Fv^UsdgJda=T*`3kxH+|ev<_w^(rj&g~vXw
zeTDZM^=kW$HOG^maZ+ruEmQ%tQF-hb8BxU72@#n!=2l-&(ABNpBD?IxHA*5rpYw`^
zC?$6MIIOn(zV|FLyZ5>*^6TREy_+K!Ag_9W)Uq$y^0|ZBi%#YV7OK7WDy^pHas={-
zNk}F~*hZ!i2J=3c&Wq-{iT!MLBAEJ&^kNjkvE~=5yGZQSKyTF^XH+-z(OEFeYk<xw
zHohu}?>a7`%Twq?-NYB%VI3dTJofn#c8U9T0pEX7{c%>cLwYkE*6hb+FBBH2zV?mx
z%pTL8{m#B+(aYG=A;{{@MpRz=>o)9TapZFU#rlf*5~7x`5^||9!Y2#hl}dmECJZ*1
zcNi`5;V`WgsqISf68pq!-e0#XWd|(MCs9sTLOqJ5y4g3Z$MvO<?t)D^GDbRHq2KsT
z&`?T9MxL_Yc+EsfsXBo&(-dk;OKAq3qK>r8<=ExY<U$#jr=Ylexor96vgOy`Tm`~R
z`Q<X@auXDnBbOn+Trd47^e;aFF*|;_?AX;m0h>MkDgb!eJ;4Kz8$bX6z}U9!Tzsl+
z+qP}nwr$(CZ47Gj?a}Wt7>o|Zmov^XYcOB3#<MMK%<jfs%D%(S;utt7P7BT;&P%S8
z+mZW*7v?SJEBF=o_XKqW?F7998wB@+eBlsLP}E=aU0heZS)3t(l8us2Qm(X|bhh-c
zj4i7m+bzqH_m<yLR8tIBoL2l&R#7fcUR7~aF;z{~P}MrsS=C$h0QGxKY0Yk}O*=xz
z(KXR6(tXnV^%e9N4F<zt!&hS)<64u%)Xj9t^wnI!JlFi#qOx?eOtd_<>aF#yM{Hr+
zB3psoYk%QTIZiuEIIB2&xJ)kO8tJ;^*1KoAcX(JH;Hl$T=(*xmd+pv5-bUU&-e<mA
zzIlG7zo-9g;C`@Sa9hX|S{gbKt_%2}Bp3-!gR9^H_!$vLLJ=IP7#S8>8QB@R7Wo*-
zjVhumqX%N{*o-)cUrksO^%A?2wq(!by;Rv$ztm^g5O#$l;cU1b9)vgGo1!03Gt?K2
zN6XM&bP_#8Z&4cNV;c_P3b+yOiHG7jcr!kQAL1`KjYx=_lq6M2bJCAYC2PoGa-KXV
z?@10-(IADi7Hv%j(Q$Ms-9s<aSM)E<E1@Y7E>W>W-4b0&^e+V8Xpx@)000010002)
z0FwX~09OD7009610000E000620mlFa00DT~b<VX_1war$(Th7FF&^PA3GQwg?k?Xm
zilG{6p$I0x<&3@EQItASAg{0tJG^n88ar>CuTt`j3p9Fs<H9doq}kIO7pwRD#?>~w
z7<cPV&VzHO&Lq|9(xEe?*0kG@Q&*1Fnswt)ThOShkXmaWT?z4WED`n~9sWq0HMb7J
zl3}$roH=)6R?@z!;KP3^YQNQNiJ20?w<4!Yn@-*O4S!tQ|7}w1pS$ADkUK-#Lo!0N
zMfNT%vW~U6_25+dTgR~*3CCgW7R(wqX~}x{R&j-nSLd=lhyZxnV_;@r`2Pinvlvns
zumAvGzXQYo004N}+Q6f|fkB&L6C*2=Hp6zti>q7XEf_eow==yyFfAL*VxCwYW2FpY
zv6Llvo5_M$tZ5;R`Z7Qk!zMO9cAyCguC<wfisjt~KoE+;aA;{vC<q;Hzz8(<x&b3#
zg4VbJqi9&fQ5*s9-+Z}`bKKG&txDgtI{F2>R%ee!ZV4&`Baam_G`L}aH#8tYg~>`S
dTUMqIyp?c*1}_YV<btCCaaQFAE{8_4006JeDvbaD

diff --git a/static/fonts/roboto-v18-latin-100italic.woff2 b/static/fonts/roboto-v18-latin-100italic.woff2
deleted file mode 100644
index 2a25bd1a772484fb54d624143dc2853aef77f2f2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 16644
zcmV)3K+C^(Pew8T0RR9106_!*5&!@I0Fz_@06?Dr0RR9100000000000000000000
z0000QWE+`49D_;*U;u_p2uKNoJP`~Ef#+0#&0Y(GUH}q-cmXy7Bm;*w1Rw>2CI=u4
zfnyt3gB9%9OMvqLq7Z$KyR!qe+mR9_;76heHVzOp{tnsypAzU8Vqrc7RG(s%lPa}U
zs$grT!)~4Fcuz2pFj@IMy^eRch{wqm`QeFBVx9k@0^t%X9LpM1Xw-v>z?WI@bVJRu
zX8HEfV3AsUg&cCoxt`!xllb?XAEB{NaxKEC&7LF!N{ZvO>|y}fA+*z^h>uVJ0vC`p
zKy&NHMr|w#7?nzjup_0%s2)`tJ#s{i=oBPM5G*34Y!stkUcqd5zS{4}Gd(@;uMPl6
zV8;$fkwW%cKIH*5sYG}pyPL>FA^)q|V!gKA_QGKlL1Rb=5`nOu;87TlI{$Oo=o)#$
zwI7<xqFI|{sqKf-uaqWfaq6wxlMZ7T8XVxO|6g<cf2Rr3>2$(_ff>H9AHpXRW?||J
zx#d~2U7^<QN<bk~{u=oM;Qw-(3%CD`FIlRyYsFJSn3=Cc%2PHDyTFqD%cnl6bR<5u
zCqSCfC~+a+0vD{TmF7yoQi9c5B#ObGvnG8PW&ct3Nz&72{@$k9?$dg6^0AK4I))z0
zz)@3$YVF%y@BaO}5+^6gGO%Rbon;@93^Q^F9RRF=tOH^NumZrMymUZiCPkOJ1@1C^
zimFcs?0=c6?SG3P0V2fNRW3R=o%aak%B5X()CZ^q?oJ5;6#(TE9V9u0l6#AhZ}&(J
zc@8O-c9%NWE*raZYj~;~uiZQdjvnEOg<96`G`@hx2{ls=-}oasXBScEV8WV<8|}B=
zg*FNi^MHvL^_9Nu)w%~MrICg?R>lg^WOU8jKd;@7`T9)fPIlWr{6R%M#sS9?G?oTo
zOgi5J$j9h3lYpeFLH_Uu(pzt&ufE6t1CYT6BSQ^GW}AoE<QYO3zyJ^tfRH~BKqp87
z{@UxUoq;;{{1F=g)Op}XdN@$$(bn-ypbj2@pF*=ea$hVH&_F!p3C)bI&vaZ^;?sxJ
z9G=7D*wC4ib7AhytHZE3IQkZfr&1}y3aI$`xbmyC1?#k7eqd|5DK|A*Y}z6vXb#T|
z9?kdWBvR>DQEP8Zk6Vxt6NLJqz*EsPaMO$@FW!6v3KA+zxCl{V#EO?7Q8v3=1&S0a
zQLd6xm1-@GHO>SRZL--GTWz!54m<6#+a7xzcEnM~9CyYQS6$<B+Z}h^bKe6`Jwu|h
zhZn;lmMost8CJwC5`u`~Cx>6NxC+>RgcghRJeHY5Ssi3U4wOJy{POH`<bX4;R9F2E
z&!O?*HwmVgH^<c$*b3WVJM1u@&12`_JY0Z_aLIf*hpxa?xCSn`19#yb+=mC|hdJ;F
z9>Wv!)4cMmh*V{<jhfq*N+!M2K@gQ)G5Jqy-iXg5X9(dVFizfja6PftY4F)oo@rHC
z*L}aKzjI9Q*cgy<gVTj)WRXlND0;3nH-H%oa7aywr+-N$An!yQH~}Z&6rAqXLPeyP
zXd-2qc_j;w4LMMTv}CvojwKpLU;<1emwj>ta22kBt9!l7ypaXjkOO5f94^BZxC+<6
zwQP=^S)~wFBq}8!cK~<c9^8iq-3!Fzl3_edf+?62yn#2&8y;{9PIs@D%ccMd<Ci2;
zMJiR%yK|DefO~Ks9#FbCEvHGARp$LIIZviHW?yo?@b`j@J?~=b!A}@IQDmaabGiJc
zT$7C0<H7RmsdOk+WcQ5vJ3EE%p-uy`XmA!x&MjnI#t}OswqAG;KG~sAPc4%=vQEm2
z{Ad44Jj$UByv%O9=|NsA&9WW@zXFsm7Sa9Hybn9wy1@g5SA7wbGxWBPTm1uQQcBGI
znN%r_Zu)k4KJVK<);_>O6#jU!_RFD#uTe(WwSF|=&nMweUPI(2Nz5(O<zoE@+2s}A
z&$GPFOC#80x)($jY;Zm=vS$-<FWs5Rn{<-MS<CZ$fCNB!O^Px(+wn*!ZTT-XSaVk<
zQjuAJNK9!~9&Yd~bL9MhU@(tdvXw@Ta+rPi-ZJX4vboa#L+K$#?Ah5d<!1CTe?cAd
zW?6aev2P<rzehHRC!yqN0qylD3Hb^Q%%pDiYk%KXPtmHpTI&IH-kNT6yS~(H?w=`G
z7{9MFDls0#p{1@ePtJ0)!d$JVj03hRjo8fc-rMZviO3GyQu2Z;1M{<|Y~zC7^=h5B
zWtlhgU#9JwukojN`~AVAdAc43tIKxT@Q->#Bw}PTPBY$ke!^%)Ngzv?skUs{>dBR>
zz9OX>C|9mAC#NP_sL|9ALwFi%5-(Fs5nvOSK({?m=Ba0@FyU$Oz=OK2?rer>K3SWm
z5-*9jf&g^_)eF)pR1&5|lt$6&#8^kHwZtik*C0W&bX77`%MACtI!)teF<uGel!iLT
z&TY}|P*$y0jV41<{SvP{j7QdesaGB*!Mdhc*QSwdwga>CH_0x02@X4soN$`XnQAmR
z>k^gAqq{3yG;ZH{cRav}w`!4)%0fa|CG0GzGR623nE*Y6%7n{AhDoqahZc9-Fr!C2
zq?*}C4oMOT4!$^LkW^^k2tlwd4VpB*?I>m#kr{p`qm5ye5D5zsma^E0v;tK!@nC4t
zH}#T!7n04u@#y%_6N0XJ>oRu3+^*$gn1b@+sIR(%A_4m~j?T8>^^Qg@<8COhHr<%)
zYPz++rs3_yR@5HFc6FZM49x+%e$~B?M@0h7|KFXN0KZ2&2m1pNhK-v%>v2|OEKo=i
z1~@FfB?yTFaSqHtNVrHQAzJ8VifsX)p-F4Xe01&$%InWF8<XcBvK~9nRA>$@Oh@c3
z3m`h=w5b~v;Q(@=18^g3g6Uykz7>om>h+7Gv(N(bEwb1WOD(h9FSnr1J-yPOe)6+b
zR$F7Ob=G5uMSTF*51+va!b?jX=+t#C_oWW6FH<Ke|AVJ`sS=QRlN}WxXne#H@Et&h
zU2_38^g00im1~@hXK>J__3{$ejBbPJLHu|EqS)|i0gV1Ni~rrb(*Y;l_kscm9!|AZ
z_v_(l1X`gKt<om>q-{UjmJRa%5m8{HvooK5mxE4u;3YW6j(CbuV#w{4k9^C3HA{3^
z1m(v|u6Lc{5uN`JeOv!^{>6G?H<~hL|0lm*A3<&KAz^@;icg~7yk5SyO%A<r-S>U;
zb;3!foOVV({hf8rc^6!C$p8c2&~El1gFW=fV^2Ia#4`o}=*9bxo<Lv(BXHwwfPYp0
z=$|#W!EDR4&2k&9uv1UF?6)}w^mfomJ9Ek=r(JN!MVIt(nac^+-O$fX_nggr13dUI
zV*X1Q=#}?w`{1KNKKbThz8ex{o*i9K3|+c)ZYzczd#@OA>`*cC*jL4<wH-M}6{FX7
z+&kek)=5q=!5Pjl**VTJ#TBkJ)wQlQ-LsxG!`t5O&@eOIjgP=r6K3%dAxOSfdIBu_
zR<KkHG1`p#=aZ)-eP3C+jJU>GHbL&&0<k>FI~auRhXAk#2j)Q8bBG}2HbO@qbTU*>
z-$x0gL}UsY$WH<*0VxOxqC^3RY;ewNmfY5T{qD8_<zL=GW!HQ#PR9LcivU+}!A>n%
z;3FH~mCRV{OVFoasonhu9x8q{TjW_ce-cwVsF}!}@)_edI*yMttyu^%`2Q*6|2i(T
zh1obi-la_nF{X^La|Nc!XyrmEAF*5*bH8;m*93ke3gT|G!(sgYOd|v|hce6rku}nl
zd3sUFT-3O=bQWp1@wrAVp_C3T*yy;R#U->7216MG<1|(&Jj{NROYPzGqZz+N68OHI
zr_kbl>o$(@g0cPn`|`{wW|)~M;iJH`G;_=0IHTiHMkrbc_1$<h8Z1XI_YKe8^wsx+
z(R{YC&Z|c5J0p9tAoL3YD4QO9BH&OgTLV)$dJB<H5E|!{2ab&>0h5>VHY&ElaYscg
zOe{yhmpkyVOeBwuTe4gXWr6`Bq|g|0qr{N+QQ|~T9B8J#5J+zB%gSwJIbTK(vXF&n
z;|woaxs}w?(6aTCqZ`RZm)fqhl!`Wan@W-@HD=c8DWM_diLSg;oiCbqjl3BWr6rYu
z(yc3taXatgYMeEZbvB`A2}L_E@^mL+Lz2g1G)iQ5)8o90=*uFp+p-wPJS#hm;JcW%
z^HJ@rx6bzxU$YBm67_J`>2*%6Z4*=Gw8?h9sccd=@Q89k&}&ph-9mKj+EC0px(bCY
zQd1VKqRf7tCx1i2cshU3i<M3m#O#v)|8u{4UjF>=_%AO=4D3TdsC?)X-cY(^l|(r*
zjRN#j&?|*yON@+*M6%Og=NISX91%)uCAb_?BaOAI%1UFT1j=(lW7AojS=rhlRf<rG
zPaT*&$N$8xJiMBGwCe*psYiFV3$Hw$kK-fQ%ALbJK0kB85w1Q3dWZ~4O=Prqp((u-
zTSbnz5GLD5$U99@$n8eiC3RrFtn*)}@9%Pd2MwpM<dD#YEd4m(sUvm==(k5F$Icy}
zJ~_^l2D!WB$+ze*@h$cYu_7ce?oLS|1^wSq@R#A)elcK<Lxt~4^KDiAfLs-LQnayN
z6ERm7=637Tm~dmAF+0GWtr|G(W`&9HNk`Wo7(MVIxVpiVR9Qw*)vJV#vNNHOUT5}o
zp3f1Iy?X}!lPI1Npyhdq{_hj%iX4}VTq`>#-34l*&OM?q@ehu~YZLcn_;T#lz0O<;
zLpXUGLw=zB;a9NXoGb>DAn@Mbr?PeUEga>cC|)wU&bwZ)*Nf`+WVu)#vJ)}qRPE8Z
zFj#kavm!@)fU~=4PJI~ZP6qQX3m^5aKIP<=*C1UP6w)lMVnzoUNY|Fh^?zT-dw=y!
zVS3h{WgP{%PEElTADFsueYJ;Nwh*T+hGpSuQ#Wb4#3G;@!Qy)f+l7UcW&_1Hl%DUj
z3boS~E3%iAv)=<C?2%jv>t2nGBdne}yhV1-Wv$<?{(1v<1_p&eI_g>05Ja`o2n_2H
zq6;%7W*}8fwQzPOPsK~xvAVGfRP|~#=}J5BOnRCfBKTNvRhs7m$y^GWNe0ZN?$8rH
zl@^5ng}O5Lr1h&DJ8|5=v&(z!j!TUo%)EtRxLJ^-R7Te{NyMKU9EQl~>&W^j;1vhV
z<Vpf2O$_mLEgUB<{NKlI^(YH^*mioiaccQbqBzDI7hv&5h!-(tm4p!Wkm_Eo$u-d(
zVMx#`arr6B2QDWifebtk9h`uxFgPC=$7)W-=oINkQrQL#u0$xG937t09w!*=hjypA
zma>s16Y-=cP0=YA-caAvebmlqNi+&KHRmn9E?xNY4jVZgo=ioU02!q7nTzlwXsLiO
zflhRBS@w3X<|%%D%F=PBml|2!_9}!70&O&uo#%agq_fR0d!?jfhEUgB`V@_c8Umk6
zA5~_KGWCTJu|wG*vJiDu#=U}?JlA)=c#Xdka&R!aGc0{w48?fu0$g&rIz+D3i6%Rb
z8p6=xd4+n`BcuocMAAPA_o*bI8WqT_=WU{1)5vBKgi`_$#MN1+JO+=t!A<FJD!!I|
znOCXvn2b@r-+UiENIYZD%4qaONcGbq0)au5<Q<MMG^5-q5!KpSTW3zy>ZF|2nN#yE
zW~ZU!Y&URTlacAs;v>w6NI0*k>TkFrt{Ry!K>IVT6=j`G{r1k+B@1b-dTPXyrcq<S
z=&uK1LS@dUn;^OMA;zjcX=qfQ?VM!xM`(@iY|50Hj!JsikRN=r^b3tg-ofXdN3ZO^
z&*aWNd3c^Ho}7QjH}V><CeV=xW}gb0-m(OL*<)e&<jLe8a!H?}^wN2f40$1SV$Up@
zwyUpw3n_+zvR9HmmyoHkhZCcC##n?Q1CR1g9y-SZ<h63Gy;Teun$SPWKv~r}_IhKC
z$E{pjozaW4jcq?@EI(QO`ZKYIaG{bhC0SFsMf$U_$T+i0$`=1sm{3gG|2=LABU2HI
zkxPsYX*2ppO=a#30w;1~7=ntZ^QE5tI&<pYpg7dsmW9(rxJv9C9frr7uGy(^7OHlY
zTGfUme5y~0!@}s(GK%HoMd^0IdR%GFJ>^6fza40cq?{}>tE&0`1ZtMvis5i_VCA39
zA?0gCT^d;7%dSR{E|dEmF^OD*ALUWu;2jI+gwtnJ2O=rj$gv&`-}?K{?D0C&JQ<sj
z?kg<~F-Y$LQ~5#12KX$=m7p>W9Q_EtHnvygU30Ui%*>rMJ#*sh^i`>rnsV}7h&V=}
zElel|HyahcEG|bU7DKj&eg8ME<in|lA<%;Wt@0=zZ$_T97UaOmhkOMIx)jBYq?uWm
z8`(`)I_&t-mjIrqmA^}+JHM<9)433_(4OZPA}W<#yP@G_>pzHIkUA0z^|d^lY&xvy
zutboTrf3dhs@PePR|y?=oJ`SK(r);lMqWyU1e3Ly-29WCv6nH5bNQK#cfw#LS{>0)
zh)aAmDM<<AULPqH-=GwV)e}pc6W>7kle04Mr%73xu2EU^wN#t1I121gv`amAE&>R`
z>zf^xTEezAVjN!wn~&`A_}36D*75b%hlpI|tC3Im1)t=+JdV@$qmnnA(xNW4?Qb?K
z8iVo1oZ_+V(|T^4j_2dzl9F_f7*yePd80Ohi%WUn(Gj<WDv(1mabc@$)T*#7%6jHg
z9a<p$S}x^<@v@(72R7=EXD+9m+y!<X)%F-wtz9b{VQH1-`e{L5yy_{BXc4B|+dYFk
z4H|)4SbiHlkU&$7&N=htKn8)^nMYM*V;-wi$Vo6Gz>ji1IN7?Nnp3@;?`1jtbRN$`
zrzEOzPlb*?&jmu$GwavN<g+pw90(lL8)%|#BMi{Icf59xf_+a}tf#9)FWIX_rLf7L
z5Bt6!ZV>R{=9zFqZ2hjYZvG$R^`|y(oVa`A#OCW>df;f3&7+4tx>cO!!x&NEtgN&>
z(QiVPkQZ^1_oNDjP^vjx(|QIHOF`mDlTUe*R%sJwAZ7+3Nmr_D*RE{$t!me*X#YY7
zW)QeQ(TXOmOFP~(2%mP%E;sSvp3t~M&$V;$;+w?A{q-?Eu?w1F7Y0$CF9gn$i32Uy
z8ta}83l^hX)YH;^aSYRwZE?bv_*?du22o-ci@KTPU3)2T`3LRb%(Y=iJ><oBsU&4J
zI(ZzM3OC}<8y<^`N*~0sI|zA`XWMRYo4Glgd6X3rqma~aD;^6MCyG~DF@G4+It_Fv
zi%A~ErXg$ub4L23W0S|RDR5(A&gf)Qa)bxB8O?>_U0lc?j<ku;<u<1|n)#Fz^0N?k
zIy9Z5I+!9R(x8`OY#74NX}LcpIJTex8%3zNRzH{;FOb_VcSrNsm&T!nJBBHvPnPbT
zyRjqChYG4#u8-Efduw$jMWUcMBzGL;hVnG4XmfxP_<3U-vWHVg(*@aRkB|gf_TWwd
zzRywZy}HVGQlBPX$&9w0Y<okZsak5!f;7U>4|$Pd7v++a=AG}v`Ht&d1T6G!0~wRJ
zyS<Qs6VRZfyM^?_4wKE8nThU2?&7nPN2uO|ZxAD5^4lUM$0FCXSj(~?yks?@=%OBK
z(vV=>DQ|oEX8bMJZ=lP!`JhGD@0wEhf7q}@Vmf~wNJtkMA|Wz1SsSG1YS`N%f~k7s
zeMLQ?%lO!q81u)R<=noi!Y7ZRop$0|VyVx#N_fLh2&>DX%?Y&(zBcx=fBMw7lP5^Z
zNN#7|RPv2HX7JfBDyqoiZ%NhWBoNIRI@*|g?+nr?&&H*+dU-?m45_B&QfuS?cf`9u
z@$)=imQBvxA&rqHclKgaU^HPohx^FSK~e>&rt4B;>#I45R(r7t#N&z4#fPL3bad}T
zfpVsF_8dN2XcF=KLh3@e_X;u*B(yExKHdN7vQQhTZDnN3J60`g`7`~iX(`#HbO?wG
zmw_1p>T}=H;L^SHT-x7X!&4K^S&h^zpGio{Fw629HeKTJci82T<p<p7K<@6&^Ua0p
zZGkFy79qYhn*~fk8sejMU#`%Faw6<Z3|!o`*!FeF{pqInaJht{(!=%isN75WPVe!B
z{I$AS{R=R?Qm)gIu>>|QjdHguF&;<;win09Vv8{8Ev0mdY`I2Xxt0cJiaEVN$0$f2
zpKxX}M=||)?g}nlcvAeq8has#HieHTW?h_XP-ZHG&0wR22D$G~#f%5pPVz2;SYOMQ
zGoGOXJoCa0LiKZ(28TH=apQvoizntQTMjM=Rgj8?r|KHtO~mVT?{Hfsy(-A7I={o)
z&s$Xl?vEBjk_UpFHrWuS+<kq|oKzX85=#&p;T2b0iM}A8jf;mELF3IXRd|JFKyLJ(
zsw8JXlR0WyFNW}THJouRK1}fkpCu<5>6=(7vJ`B#73hj;<nHz!*ObF#fAB_1vZ+_4
z*qI!5dUQyD>s>wupGP9yD{HYws!UU|{rP%BP4jh9E0&qJ4y^e$jTC$7uFf*~$EKfc
zG{G;B%|&m0x#P<yfaG?zv)*r)>xZgctTLR#aM+o<Q}fq<lHUq4VIe%1(*=1dE?;o%
z#cFpoaISGK6@svi>5(2g@p{*5tD*zd6xdbh-QIH&w#=a&Rf;>OCTux3;rfPp=WUp|
zh0}*vj(Za)^K*ae*v3E#AKocTXK8&rJNar-??m62A%N{auKns&2|Opq*&V$*9(5OT
zXH|HZ$Zi`>7iAMG*72Dl=ScUqaaUs-^JadW7i}k%%}xxKkx#9>>lA4esv7H=gIQ&n
zWnI?2tMX%yeJL^MMH!IKXDzXGLc)&u=Elo!ynAHsh2_1Ax%(wU1hH|M>u@7eNVfC!
zK4$C+@~-ZZeaf%IoC3%$EBygaA<PNsB-AN(ZuPiq|7k$wl7i|pHTV!=uZk3I$1$<N
zVyB<2^m3S=lDfGX*CNOALGO-xvE(CSmYMn-+qYA<K=kT(I9)T6b<2V>-fHfM^y**x
z$j$SR!<NrV{(rH_8FB8`rnNUupqI(RTNg*~7?`;KgHbs+Hg9~IE`MifO||SFW&9st
z1*YD}O}hc2r^mtg{#;f+*>&dNZj&*fjDzsym$DCdIA-R~z7n|z^4Y<SF=4gQDLsdW
z5|>W=_ygbbmM)kOUc4#d#aUk`;BchmEpcOyCh{#h61_UEc|wSDoJjXock#9FmII=8
zY3dZ30&&_Mwd>Bln4hbL0>zak)>RYTH%?Y?aYC&+f!3<{>=jn{GiWKqn$KEtU1I5i
zD!i>FXC)#0IY$vt;@`zr#AePZBYH%a|L3^6bvX4%-$n%`wFNf@jCZ!)PZhl@7)DBt
z$ld2NH~+~9WhD8iGQA18`%-K{d_nl}lW2169PF~h8PU^cH_kze?9@I;>~dzlKzoUJ
zmU??hEXv%w2BKaBx1MHCnFrxaGJ1M^E(h4xg?1UAELd~<eys#wq^Rbb-r>G)8=|eE
zy{lK|vjPpUt9XwyNr7Q!B1~)09+<G2&V5>T)>@RuGCCO)>|VV+*27&blT0+fhj*Kd
zZ&UhgI=>}YjbYZGe(RO@-|s`ArGgei54N|KQK^_D>d3I0PJyCjQ$X_-4x#I4JCMiW
zHM??8)sPQL){|+^_)FnuACTca55(q|Kb>C^`YyEvkJ~);wv5kN!A*fKs;5dEGs1nH
z(AFyQroR`T3ee-d9VYO9$a_(Ozn<*NF+I4(5`VRMv*gN!Q@pF=I(~9zaVJ_SZd--V
z4I?jFTr`O~NLe-Vu=YGA?PLNdHYxI!0ezJPdU7aQRB|`#UAWn<okx&PCdAZ6PR{ZP
zj%xjgPQ=q@@rr!Y6I%FvRV^XjJDDdx!RU{1n${0hBzJ>iicYods`ua3Ra_>6EKpjU
z@Kvh;VIcdCgGP*WV(iD|1B1Hy@#%t%5<`z*5Ro=QZcSrJ;e$$HmV<Ed@3Hp2u?zgo
z0Y+RVra3%sCGsF2`#H0fflnJyu4(}`HXys8eh(i#?0?)#Y!JlM0}($JTZUYTiVv*`
zHoXE(RxRc;Qa|{Og6Sf{xFa;qr+Itk9dyXE+};bsolZ^ZdcvdlKVw9){CbyEHYnZv
zalWf=b{5wI_d)u)liI6)U(d|wxo`{73-VR8PZnMNsUgGxH6L$Vv0=&!cb7ueGZSJ5
zVq`;NO4HWZXqf7;PEQD{2r=EPUgUxn+>vTCDSqBrz=?m1BHVuwvf9hj*{cIlii{0>
z_Qfj4KltJpfvVQOck@zv&woT-QYps`BAxhLh~=Y$nZOoEU7c>tFzmKc^QV2C^Y@kb
zsBkKlRbLiSfq+4$7_)*+Le)b<nGl0#&)$CwfmBuVvq=@i1bzeo8WPU!zF?h>mkyF%
z1rZtq*~h@Ish#MVEJp88>(iUE^P=@skF`J+*N0u3Z#w^aQP#B#qgdJjzOc0-BXfNy
zQZXL`)wj=nP|8XxW5bg;t&on1(_rE>f&wvtg~mpO0fmr1r<5uar}DpPdp3yZ)d7i4
zb;-Ukz~9#4`?88uKi1EdtEqW*j1H-*AfzB+<1$5NvPz^%o-MSxL{YOIf3!i<3A|bt
zYHXbCG5PCRN0pp<4Q`^x?UxW70+c}hTsmHrFcc58v6`w!h5hc8C*)V=LQ|;mFN(9$
zE3)7Td=?`oUPPFxvNxZ2W;o!@F-yy>C%7g}2j}s5&Dl;(u)g8@i_!w-8UMfqu6Pa;
zRH$Hm<Im^C`B4J_L35l5P~%hK_{x!i{I)+2G%qMO<BEut!vnc(e;;ekC^u5}@Nq+d
z@-zk&#K_(UWfshQ*Wy$36FAp`_j1u%e(pi5e4P7F{^)_^<ZiJZN{7)*d1U}1GZQ@!
zE*~PjKz{yh6GAn2TMJ-?RO#6UW^`1gC0?%0P>57AB^bi;U#`lPrL0Wle?`Zin#3(<
zCdqkH|M5s)B-=8@Us?)Z#-==}tL>TTN0x$!n6}c~%*!lXfN1-!ajgR8m9xk)F7st`
zXa9OPGKUO{YR{}H;#kjM2$6l%q~9_=@YD!`944o%pNiP?;2szZa*g70bB-1hmer*F
z|4ELT`EU3oXH@4QQn_rAPVoa^!Z_T-02ZE@5LW%VU51_gLle=f<6KCSbb6*M{Y9IM
zCg^Husi~u$h(Y&3t~iLu%b?e8zYWEvv_bBilgL@xqF~K&kULj*-0!YO(<4)0SyYiT
z#Q&Q3MR}kijxh2lajKPcx_(Mw<-J8oL$nt}uG#SzHqWm{-pFqX)q6tQ^y@2@dN{e}
zZe_xKfN67eCPFT)10Kaig<HveEpg!QnB?X$VsTcK2xLhgXvI*&%1Ta*JQ8S@dM?j-
zSC7i?z~r=+X3BnnQ=;(O%ht-?ND#9&2MV<mN(Y~$O6<x*?;22v4v{eHlTotYcuk>(
zm|IJhI?Q7!o$x45YlN-rhZ1`ps}NTjl*cHEv#K7SA@y8~X%;GHgL_XZ>Fi@c;{3en
z3`aXJzpQ-06hEQLjvf{yI?#*Bw6&o5LbCD&64fuw<dKpE{ZixP70L4J?eck`OzorT
z4%D${n#Z0s^YuT5oMoAD8u*r6KfufHY0B?4qC2;d%^<S8@oaIzg{17qLS+~Rlyk6k
z!!fj3*+gjG-TyH_KTVJIJtjLbr)s&)+EP9xvGnR=S7+ZXfl)HAX(`etJ3ORx<A&I<
z$|(jt!DyjnXY_gGBF)r!Yf@`xitK|9A@#>Q<Ym_{_SVd8cJ75;aHQBhShRSw6mwDb
zfBA!f(aH<c`ckQ+3NO^Hj<P<L%}E;KH1g8Hmx&5^!#qmEm~+fPDhJ`uNI(8QH6cxl
zLIx?x2`LKiQxfRd7f8LM6E}HqEHpCnJ(&3(o^u7v`U*-J`Hx{4!$oyMEDhf#bO@;p
zb8+$7qgO(!4no6oJ2Q2!Gv%4WwwFmc+s3X!e@xEK@aLlGy=CRXw?f6&(ZNNndoHQ#
z8?S{|Ky-xZaGOtf&)af|WSnUy+OZ)_jaEl>aFhrYlxM>Sf((1HMp*L#f3|$1awTjn
zQpBA|*_SPPZ;_A7E0-}M3M|RW*b@aNCW$g?`~pj48AGDLgcwCCm{dL1mm8L!hm7O%
z6)BPITe*^#pE-mnRcH9ZErT4KqX#C0OGueqc3c5rEH@ywB3~etY^aT>tNgs5UA!6j
zYqJ$|1zA`1>A%d98!?=LyY7oertxn{CluXDe7HAX0Dsu{r=*h$-9@~&d#R9*Ju)w>
z6PHy22~UVad7(q5Q!1c?NYhk#E<;;0V<4=+i|DLL3?5}CM==|*DP(PwC$Ag%m}Rva
zTVk>u#wp&9G<R{1CHt3x>Z;p89CA9VD-C~(J7MTf;?oCnx!is23c4rW?G5&1t<2{-
zL~Zq#{p{jeq2h;sV+{G~dHvD38TR#R%Ts627vzEJzs!Q<rJ<t<1s!JbYJ?`Z5d<Z!
zW1@}<MY@?ex<jsLF1bPS15gf<lh0x2@=nSI%R3(<VQ$|>`nFeidqr2Ge9*oPr9OT!
z6=s52minMxuo*eAsMg#-<5ZZ1X0n=0jclDu19b<a?u@vMQFq7)(=Up2McbSPOn7sY
zk2}U5?V!AF>75n8?*<Y>`?8rKNeL)FbZ~BhnSto{O*`U$#wLCoc}^%Q+QQSr#UtIF
z-<nMD>rM=dN=`xh;N!dWtpzDTa6_bDf7*U=8V`fa;~44Z;hXD?wnbV8xyEu>go_Z5
zQt_Yax&&@TCo&6R3Q*G$N~3$8Z^%u=wm9UwO<j7k<ni~Q3Li0FhNT8Z_P&pw8#m+r
zK2-9W<PA;8^KSI&xXj$LdTroWiMk=b{RGZm(3(F>8kdG}Yz->o1l~DHES}(f(g{h5
ziPqx{VCuC$Hh~I$2qRgSmAu>qVi`6>sCDjAZg#<CVg)8xuxWmAMv>cr?(H1i*`W-T
zR^oMJcss;)^eF!oB4aQZ%sDKbnp&RnCMnwgEjpObJtZ)JeX&oXL{qBw&f<yo9a0A_
zuJS=k%5{TqtanlF_*``jx(+;y8t^h6Frg5~Kht|1g0<<|9)0~b9|v@~d#dVXXN!eH
zYe`{EVaJ*x)C#Iq^JeoXs`!~CW?rue(7hE>#dU|vP5zz4!mJ9Sqm@2ssc&C0Vgiib
zR}bQe;)%vaiqEO5dWFUFA(!2AL1#;{b&r{MLcbOAuMPZHIYVS!K!QmqePB;pR~;&Q
zlfZHmRLdu81<pgSJr<r2o)mm~-CNsc`STk-H#7N?%P3@Cq(!)Ke7PU$9trZvFeH~Z
zZr3NbbYbF{GR_fGqUND<hOEAN<17S)ko$4AlGdj3>#;)NF=O^_D}Ownv2kig5j6vD
z8h6awr%T)>8BL4Jaff6=CPu}3X;cXU`+T-kf-;90^HW-0<LNWRJW?mu>=h*19d2mF
z?aK<ISKqD|NdrY|zKr(e)VDx#Y;vD9XXFi5<Jbs$q%+Fthtf5)GnW&hxU;QbwmYk&
zt;9e=Bj!mM+2xcs$H?0@QXwHSr^vMDN6o=~!<D5dq&YVQ6<xtT8d1~2)i;nzumDn(
z(vcx%I&~_`{skdJ`XK^7A3N@;Voy}4UjLKjaF86Gbkn8dp*y>9FUp_ibDesj;Ij#7
zCA+=M<NT@oX#<rhU9W@`4nmAMMmGaDZ@Lz$PMG~!_Mb_n@-ntDK48q?hnx*|@^$@E
zy2@9j<5xmFRAYt=ft>Z?c;EqL+H*H=T#Zhq<a0yZb=z1n_+&fvzzHJ%@kb{=pmV`<
z!BNtm6D^MWOc3x2PaUJD!y!?i6O7AuF*2f_pUR?)>ww}rybUl5dHj`Yi-U@wstT!K
zEu3F)*a7ckb^5W0m=)Gae2W}4npgwLL7|CGY*Yp08dTwg;@=ZOa6`b5<MQIeVfkL$
z=AA`Mr%m_o`HIo=KSkzIj%cN8NIPB!OhM1-RNxxb=B756KZTTCS;aKk_HbNiZd^Oh
z-;Pbxmui3WC^Kc2qi<xpE^#}(^0{Cx+7|&~*o{?t`6X_pS3VQU!_Zx%ted|5r+4ul
zk&ZCOGHbFsRW*L`8Ua<yyNgCh*xO^e=xGL@RgAx}nSBT^h1ZlBNHuo#Hxx#iS&=PG
z+d$a>E-7QD2qlfxd7MjFfSJNt`LukfREj3bCN$9U`2XQ+@*3upU)ua@IBaMfe>N_J
zj0qMwjYksLMai|ohJYA`Xg~hsG&VS1Fq4=C64=*akWQo=^E$DLV-Hd0!LBA$8!v8S
z8zhB6qnO#aa+_gJD?Us#c^ZrJilzd1llsWxG${}D`1DD;myH+68Pjx*8pGg!QfI4h
z!AK8c<$7l;BS|7LQY>`n<+N}sHV7YEb%k+7Vs0&Q)#4<VxzcObOtIt;DaLI%Znd}m
z7ZcA*&dnB_`gB8)u87Nvc4CH*BHXibz6z2JN!7g(r<n>#gbcL`mJpM3BdUUhl^5!+
zPDhf$G4`R5nmS^-VEK_4aA5_5uVdd-F{UVnxCch%TvdJ!*8W+HW}1<}@XA0zQ}k0$
zfO-#l%%|8~pFkO@X=psVaiPDCk?~`z%V2jJbYcD2326ErVY$EIzRXxIhJGPFMX0C$
zeCm@=hUt36gfx-Cfr(KA2+i5wI;glsT}+S!p*aQG1Qs=FNRiAB&V<3g#Jc&XJi0<^
zOG9$25lDC`zwlhZ(cy-=AuYTiGVN?YzMGJPa$rnG1tt_5-&vUyl$aPuhS<1z+5rJM
z(YPSAXJCXU9pa@EDvcNQhqpj)Pbt+0gcmX68?fQHxZbAl_{?rha+}m0$X5hZwq?Xn
zdKlc))0Rp}cGIs#7!A5n=tW<?e$jsa{F8&Kj=u#VwN=ML#4L!%5a~aX^r0jP?T;^*
z(Q7pFY31|jO4!Rxin@!oi1GLEsq#kK;Jlqxtj+w(ymYVdQG&efX<1&vWkECtr(9Qm
z-nhW{ve1+kOe8LDq&vnZCIs&3R)TVoS^9i?8qKEEaNA`#${V2^urO<9nzebRmxQ&L
zIl^ef)zTA>$KWv}d}8XAKGx~PQsY(hx#Aa7{W^|&WQunvo)?ejm$G1s#f#hh_$4ee
z+nZ@l{ub>Z8#R}BIv5>P5r0R##ne+=f>Vb^9^FjSjz;`xLlxj@f&Z(K%zyeoLNgkR
zs{w{acLX2PnU6J@U)So4LG$7%2ICf)j`fpa)*<A6dTPitD@^EczhP3-*neRjYbDek
z$3M<$r+@kE8F-RM6Qhn>M*wbz#eS+rm$XnGa!a_S+%j&tVZ{Q93lgw%G~+cfZD<Yy
zJMu5%^T;CxN2gH(J8T(L@8afV|HzR5>Iw57<9WX8-sG%4=gt1&ymelPbnFAxzj|5@
zosoaBpxKC=!<ag$)k8S4nR;mAjO5{LoBvW|gl-Bkris%CWYD<FkkX?GXt5P-^Iysg
zjqU<5hN?r4&(!p8Xt3!M(_9CP{L5$_d4$ECM%l!~pn4YrZR3$cRL_)|WhP~}bT~&`
zc5I$$Ho~|NRJuIf(uay1NXToWY|t*S;y^dLD1wSRS}|JK%urWJfkXL+k$)Mv%|{rE
zG29%1gZk7!cf^}+0q2NqbDE8?Ob~+|qE`oL0Y)Tq+yspEIrHV2q3s!<{}1jjiT@7(
zDZhqlD`q|ry0oHyjh?!*P_Sk7agI;`{9kL#c@WNZFsJ5&Yu1{&(S?&6BdX*zl$c#z
zS*JFfmCdf>8-T+6n(aF4S&emjjhIknwfUS>ms#kT03lOiDJyH*vE&J1esa{ylHj7M
ztZgz)O0f%H(~;xBpSUvwr_U-izI%rZoWFzFRXgdsPxJ0t;Q;=fogp}VPAL+G-auca
z%)NoVg&=PLLB0m#T%>UG4vF9Lrl0Oyz&UY7oK!=Sp=}p_XUOSuN@f_=!l3Hhb2tY#
zNWFDrc$?F(e9+|jTHT0^Aa$RniMAD;H}m2Kpx*k&y%}&t7SIFhpf$U6y)s|C?nsOO
z;2M<({K{K$Y2ed30{1uRP`0LJKc>CkAgH&FxVM9^W@MkESL<ln)zT@gFU!^;m=7>F
zSk9^yCbI#b^Ei%u#nsu*0{|oNEK&^5a+BF4!OBTgqaSEb*rX8HtJ5d9u}KCAB=c3l
z{sxyHlY9LiEE7M)2x8G2ECOMGEXl{2hn@qsm~1EMRuYd*^<bM8KK2KuoCZf1cNLc_
zi+|xCR#6mCnM9M-9iSDNkDI8{GcbxA848*7D2h;(fk$%^ubIj6!TQiVu{VPDb)F}I
zp)*)aVw#XCmP}=OB3&$!56D$t45ps?=k$@sDGsDbyYRiEPtuP#0Gfcq_5<f?llZuZ
znmy&m!E1LoIHYNNV;gaZ=}!h*qP;!&SRtAM4VvBnWnA8#8X7yfie{x?SW(G!Ds^X+
zFKt={P4X(cHEOiYt-Y%*knkQ?AtU1A?h}0i&%p6<moD05W9aO%!8gs0)N>U<6I%Im
zb2o8Wpd6_aISOoY;>O>tou5!%xmsBAyQowoM|2*XK)^1b>@!GI01PTt_!q>?;uOAM
z3q+IQgR+`te-@R8oG;I{P##~PRBB)?ri(&O8mxrbxL{ugjY`BWF<~#;*rclEVx$YE
z_Rx3nOp<o>@YJi62GZLsQee4Ho|oa^a?E!Zavh<s!+8~q20F~_3F${w94qPO3w8b=
z1nE*gf+IecFhM~xBB~faBr0ZiAy7t%4U)%-PGX<iOaL_z931nglSL#B(OD!DcL66q
z658_CP!5LLy<WDZKP-&k?X|=hJ$&77R>b1Ggqh!wkyPGo)}}x58?Z$T5Ksl!gieF5
z$jg(R=iuT|&VNp=IYfoZwuFoitEPJCp@rEjS#LOq*259wTc4<ko@IVnc@nwDG!RVF
zphyao&lPS;MDIRcc&(Tc^}9e&p`#VwAra-hoi9Pd_M+hl5Zd7*@vP`9nCJ7+Dv)YO
z)jbhGX2P)5uhG?m5sA<?C2yGc4=UZw6;g@7`#w;yEzd6*`@FMF9NJ#U>q=QKvTO>5
zhOV2QMZ5@pccy(-Pd@HM5@zoLfOUFSTtB9(ejuiQAnSiVA*GEa-Jqc5G%)}dyshX~
zD8O&m6ysO5{S>w2sBL6GVMLwn1~Ej>`CcG5{^>X3uYLYi{@37}rWUxIHnZ0~A#KCS
zMSGlaBoiPp=}~0~2_}hy9XhWJB$<q|U4K1x8q7t&d6EUvCEsX(%y*p1aC*l?e(!(~
zP8jL_hXF7(9TN}8fjZhaCF)Y4=`v62KZu=Xp{$QL#>niL0o3C1F^wCr1qC{+MQp=0
zRiNn)O2a0em@z%))BDok0RY?lD%9D^>qs1+kmb^3V1%i`Eh0>>Q~tzQ%=-l{WW}S1
zf{p+_w9Q4;s<_kRu=c!l3S;SCL-m?dSa%E%?pXo=IanBDmhlM20$V;U5lrbATmS&}
z7lGDzqJyMGn~C{tb~gRlfwgBsa|GF1O(YP=ymPnK?O^23PCKxoQ-9xu%Gw@f>jMW0
zCtN*SAd?m{w!dhd<b0MGgFv73;%@ix)l~OOB0bcw89?p&nEL4PeITi9(C}Z${Zeqm
zW+A>-9yHON9y;tvBBfobga`^nTp&u5-bWI=ZNrB>1H((c93)^hCcCa#vygE)d+4=m
z>$*Zf2312-0^F|VI22*FKv86OY8dgAV%j*)bJD{~3V7+Ku}Q_=8cFwZz_1|yDA|Q5
z3*bDNN3+C$@CZd63ox%-%40BF$x|Zn`7VkCbhnw!j@z7<PkymE|FIOITNXM-J`H^3
zcS<(3SR=QLF->Gkrm;g^SqJ;J(-Dd5`r`9;)b(e^&uBh4T<`yxyWO2foqCvWGB^IW
zE}Er$;8*;KkCMa!+c-Efjj7W}(pYTbkq*}$Jl&X>5|S_#Fwr(aq~A=xtU^|m1s%0@
zMG}$SVwu@)Df1gfX}6fB4lb4af;K7AaOzu>plM>SE0B^q(dagn1CYeRm}@X7N3Iq8
zi&)3cxIQ0MZ&8<4j@RvcB`9`S^Hm3Oi)=y|1qWyV07Ii8uAvO17fCL8<T@_&I30Zq
zjj%Rkre7}<zZw#4+KTT~n^0*X>qEEx(?3FOU=V8bByrRIgh3VO=W>ZCYK0)|GoxN%
zUlK-|&j=tOCgssZ?Zu)cyX<}<O-Z8#Y=MAtlGZYbOK?=9E@g>W1&cy7<8h>4ZAKDt
zJqxMTc#%|B5VnL+uk%9q$e*?8@8lz_#X1nGFjvyXEdOBMj@_&x`@Ny8S3y~6Vo{Wo
zHRv;5utIC?iEdKOfHXQYJ)2H)Bxph6CawiqZOb`iXPhZbbj(QFKoOK7U2)<Pb8S~^
z!enBri<_|Jc1k8t1Z-t!S=o3*;oY2rJ1mlgUui8GOcc@7CM#vrk`~%<`vwmK6f6Az
zY9f><bBkyF3Ts{!jf-ZwDiE?N2IkP+wVm{!7IhnytUKjd*f$*8fZ7&ojMSar<vV55
z9DJBVSv@<bED{bO)OB~QP#zqdnkg7YLXI-4qndRldq*mqUe-hw@uDo!K$amD^_jaH
zZPtY9>WhywJkLiihC)OASZkGR+2<CNezTZSM7&YDfFu*A#LnlN;AhW}9Q!?M?TZkQ
zP0X{$HE9sZ9q1XMt~zBKVjK$5Wiix^kcabPfJUEB&g@yfjQTI}!d3h6<oe|K<ohJ&
z&1%^P#(l~(Wt}IJp?pB!$dlL3k`PJjBZcUBU)}XlpvZ~4Boy&IKqS9A#W#EG@dvm(
z2394!YDaYFGkGI#!dmNbPSusbS|UC{hR7wU?!J1wdFSzwt}9G5aT+Ejs=bd?)2c6~
zOeV$w6<eoI4$u?*<z)SG`~3QmCjSa17qpHdY>;+|s;8eRbq0?*k1D*vtBmB;rvH30
z(mXm${3RGaVQSowv#4drxkXF`UKQKJk2o_i1j8ZeNz69bl$t&zoiy}mI+lgb{#O?z
zUoi+P;Uv5SuMiQ^0?*A;^TNM;T<?1Uiv-Rzf-{s7JSKn-bsplgu8^%9B^3VD4jO;H
zi=VJ7W~(>88fQh}#}Ib)G90GD+2a{I6u7qYO7SY7SunCRtI`;{Dzu`_eu_#gNl<8S
zq_ZwKw<nooJV#|a9Cy`*0NX*oi#B-kuI9-X)qi6j`>(Kqf|b2#XA*trDYRMB03EkM
z5FE9~SM$9|{)?LfSC{*7Kd12ifE(W_+Sof4asyr@54+qKnY;ZSicTS6VeOSN3%;!L
z@p|+a3bK&G*fpB6VSiKTeW+sV<ar4s*9z+J+|Re@yUM1UubY>+SApLkynTB}+O`SK
z#9C|P+7A$Jb=CA`Z(*-~ieB$A`eSrMj%($`6^&8*qBfFd-6gu^yOZR=S(dghc**lH
z0w-`sP0v|j;Id?g!)&VyyiU;o5zSUbg<64l&Q~%IoM_M6#4M3UYPQc2n;leJtBjPX
zYB_19<9Plc1=V(<kiVX;UD%fOUY;(Ke}I$6YUa9Menjhw$GI55v51EkrTHOs2LeLv
z6qtl`Nhp$->=Y1&mwG6}$|SwELx~*9`g!gfrfUD{+|>D-XF88w&3{gPI$|uhEW?(h
zdvOYx$Z*#h%q=>(d{6E`bRV)yKh8FG!{06yST0RkjpHEncbb8$$cem&mqbXK@Z7lR
zMtwE~;4}HzxoPXSH^U#(3O!;&d${uPU@{~989D9sNSRdd24BCVLM2XyJcCVye#NzR
zN-NBSqsTzRS|389Xc9Cl%UsgnkBcmHzaMKcxGmROw|g}^y4H5B-mN@eCsliQJ#*6+
zG2_ita~9(6>fx)u{B|t3tm=qd?&rS~OONs;W^ikFTSN>yG84kuklo26WA09bkNw7{
z^#9BCf<UhWM4e;<tIB2P<Ezni{!{v<>;&%fQcHtlm8_s^^E!EZ{SWXqe#W=wC)FGM
za%8KAv^c-sjgB+l`s3tf-V;-|H|+Au0_1?k)F<kEOX9CZyl7U%#zy<W(i@3zi2XSC
z4pW70yX*qhLW@+;;h0|}cuPi*4;*2V3^)+=JaZmZMQTo}C30T%w~1P3-r1GPIE*CN
zX@87tYPm7z_4qrjO^Ewg3fu*@Q|%P{o1hmC?1XWt1AFBuN#He73{{a##*1C;xM3r=
zH3-5o?cRQzr1(RJ_@Imj9>(+Q^XK!nQybQa-j2u6YWuPm)ke^mq8Lg7_5G?uqbYCP
zI;st=YSh6zo3!1iUEwbc1x_@gp&~%YG@vr!#F1C$y1Id<DPz;z;2b{B-=t9uj^p}|
zV34G0kXTv}rhYIe+7<TWy+0#0Jh-_-*X(dOjECBWcC@FHIPa_49(<+uY0-M?OeJf<
z$B?~iXZ#%Tg6{;@1+Q>DOea}hwxv_*_hLrz{0iGSQ^f21!JqNPjtl#pigv}v7`(d3
z81iudr;Hxm<v5=pv!lkx%~2gzS<&0Q>_S>32UK`@lRqHA(Fh+4iT$1uv2tI5AD4UZ
z2(Iyhv67%qMW-j3DUnXAb(Pm-#o|?a>LiFqtubXKlb%2}B|;Jk@U`$F90^#K0KMEM
zauC>En!wU1-QETWD8IDwx{5hNL_lB<LLr&XvUBHnW#(ybPSnHC{^I1GAVDosp+KM)
zJ}c^Q%yDKrEU2K%_C8jrPVNsQ&EuoQwRo(!N86>zMf<Ea^Vr%PhR@sMvCQtP8YTP+
z(h`>G*xq$ia{jx^rOVy6E40uk@+4PMwy4z^iZHkKieAa}?=E*;VwVS>^7J0B@Q6^o
zyKlPeakOIoSz(R_6Z`@TWt)C;{yy}5?O^9MNy`ZPlc<s|pk!H1Q8pf*O92qzrIyD4
z8>dS;l)Pk6frEt6<E&~hv}d&Fkc6;kLz}G}%W3u;5sl-vEvlI5GKY?I&>{5-F{548
zo>a+5GyfUM)oU%1A=K44vu;h0kOsmED{m{46oY|G<YOV@2cMmJgzdlBYG}RRHKYRo
z0POooQkem8emMUBIpOblt>}R`j1~g`1nNik1^}Ah{z>>(k+=Xr@3Or;oAui9&^O(9
z&+#oN?z9D|N^H)$WqYrP9nQ`dO|N1kb(;IL845>6Hj5@@O!1wNJyfc6gmK6ui-KtI
zhapf6hrlOg%m^pN$$WF8qJ8}29_)x2VeQU<y@xZ~vm6Vn?-Ju^7DuOYE+3OuI%i?@
zZX3<}JC8=du}yHULWIeF>$BjWvv%d(#ji)~UZ9~pY~c=T7wox16KHLZ<ja_1tDm;U
zRKljQ9#cQ%g&&eF&Alze&tFWiGu87m?MgGWtu$&2iK9pExUk>Po!e(`N5CbQGTTlv
zapr5dy}IxH&3*pG)^pk)=e(cSfw{zyy9P$4eOtv6MlCNyBxnWce|~vs`lfR;@^f9J
znSW}dl-R?0H<O3#=HZ_i<HStzZ-WMH0e+dHzHl7)#*3?6+kUQXzmH#@w?)3qPGiPx
z+s4au*S61GmXkAD@M@xP?sk6T!<@;^r|nIyG}r#S$Rc`xv-3r6Z9F<(?`A4*3voFm
zWYo&qNo%ol7B^9=dH0f&vS*>NW_?jM4DF}!Ru1J1jrVqqkA!&?w_?rfErsQ*6-w8e
zN%>UUlFXRa3Dz~yP}JQ_`8XlKKxo1U#{5YZ2A<#mKsZc*p0E(6z%lqqU8G^uWX{r)
zuch)VY72E0We`zF)l}IS1vC`(gqkVWpoUOCQ3hq47uGcGlnK;L6c8)S2m(AemQ@A8
zSrA|XhTf-YuS%l>4)p<`1_qspRZVBc;OEYqrv4w2?<{C;UT2lYj%=$*si#ssvsNE8
z3%PuoPM%PkQY5G~K4vOsy0@sldBn(rvduAqwj7di!A!F&yzidpt-ZF;4w7@e)KuN`
zzLd{n^5(5dZF)@s&;T$0=WP{0tK2|kqPnIo)2f;zM=#SL$H;cwSDn~I;w2i_U;58@
zQO%qf?9WuQAuX)PdQX|-3nLjso`B|yxu~%B&W_E7PjMXZ#UzB2LlKyP+!)I9)dF}F
zXE+WQ>ch7^K&ukHbfkNLCHPr^qTO*aoQ+gPW&tL-P~3{+z;DAVJ~<AD#7){SR24s&
zNzpf1lLk0H_Jv@Rs*0bq6H%f<jEN%>?*$7Mu^8vj{7*R-#lH)7{N9kbil6iq72=vW
TiVZ?qs)EBPEM6xPkT?JUN6kjW

diff --git a/static/fonts/roboto-v18-latin-300.eot b/static/fonts/roboto-v18-latin-300.eot
deleted file mode 100644
index 17b7d5cd256aac4674abf80e5c7b6f782d2e20b7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17481
zcmaI6V{j!*)Gd5s+di>v+xCejwr$(CZCexDww*~b@dT5}ecrFW`~JMUYgeze_NuP_
z*Sos5tONjHFAe~J|F<9k|Fi$!00S_9{SQ`9p#}hg{<HjV6oLVO|3m1Pzfu2J{9k|z
zPy;vuO#Vx^{}KpL09XSo0apJp008;Fn)!ds9bgAA2DtpEPyw|5Q(OS9|G69i4*&Vt
z089W@06Tyi!2ka-mj4*{f6o8cxd4Eey0pswUg7@-5C9810NY;x2O5Bq3w`b?X3}(9
z8_tTgo4boA89kp3n?3{gX`-|8XvpCf%=s568L*wA#UO<*zDAVmTwZ<ot&OSgHfpv#
z@_aWY_VI=Iz6(*@w?UPSO-ls}oqz*x;Jt&Zuz=a{eXe%eaD~6ife@`$o@CV)?`}+p
zki|GiRIAZeyPWBM)oIOgtg3p@x=GGG-Qv{OTDO*DY<DzxQU}*~+n2aPqYJc67dI{B
zxl&7N!tPqT9jHRY8i~eO9$oqO7!3wi1uLvLlS>)E=6_S$l<<u6!5VxZJ4hgNwZEb3
zXu83nJ0N4t+*10@iUgj6#okEz8SKe~ildM**0ROHCn#*LYwninsr`M?i_=_j@$zPF
z0uohWtX0(z_)WdjsIqr*AwOyQqb_Q1lGB=;7pSez9#I%%5G$0Q^PUzcX$R48(t|S4
zs#KD)>#RHcBU66_(ErZ_zxNpnrDm&_OT$<dX*um+mqZWuQ$|-pMYLsABKJrQj5-5X
zsx%rMB41veuN5)=Z}^xuN*hJ>AQ>e$;DOi5CRW5-o6*QyCCb}QwTLzhUt$P}98fAC
zHAsx7k~}Ju{Anfj!<DB5O@d85s!6Wt`h=v4FEWPMW{rOebMlNlH&NNr>2|OZ{9yNp
z{va(-LCi#LHj6}D^bhcKntiph)9zT%k3r1mNHwg?nsri##7h6ce-qjzwj9h`tg`%d
z<!@SA+YT<)LY<53x$GJM3vyT|WzYb102m?NmxN5dE5@?0@8`usR-qtum{?2|RuAVx
zEE@%D1qqVd%mJAjt5lBZ!LMW8Fo1M}I>B7PZ=f#F2N9v>*`v4-4hfaJy{Cvrmw-Wt
z7eqn*a0HnTBtk6nHCqJ_9#-oX@$4fRxd1vknTQ4}3qf%X&D!5^w=!8t$fp`-MG>kc
z|BCL$bL}=Yn&vqoL8{=cBrUXrh^IP4B*#^zXaP(c(U~TmSy83|-g>HNc+N0>uw@8u
z$W;KX!H^*(VW+;W?+)dEYcfitvwv6^dRIT;cQ;5Q#8JcTlkcUcNF<n0qjV*^C(IZ`
z2&2I%WT2C&D2h@_Fr&m|u!dYY{KLT?9aPZgNJ4c9S-vL@xi>IN{u-s(6r8-{7kOiP
zKd6o+u(05skQb2^5w~f;XmH-op{e1(y6@vbKcJ&O;Fk)Qd<ZW=inN@5wtu3R3C<vx
zO%453&iz82Dq>?1l8teN`v?Pn3^I_5#Ht#C^q|o!y@#<hB1)zjj2YtU7*AbG3jvM4
zjv!RsnBelGRu-@coIXww>g&Ia0}ih;Nz?n}*XSx!SX7Cas6DxGbn($$oeX@CVK$e#
zd*HiEqCQ5o9Y9-;5|Nd1nXV}iA^jD<a)Y)?o#=FUdlAo6;zQ}AwT550?5OAc^8};C
zA=P!*mCf)kC=%?$%SBZCWC^_o^eC&5P_VVm6HMU3lBB(;45P8!f9gclN8N=zUAPNF
zk;Nazw{zr5(G?@sX^`m_HlUKBk~Ru>kDguJSQI9csHPR;h817Jz7#&zp{OGaoBP%n
zQVavL^K%%jq%ra*r?tsd@<s*V`!v0pU5gdMv0$j59>Dy#FintVj%#GbgYR2sJ4Otj
z;d83eenZMawk5GcrRfio(IS8gvivFK>f0I38jytS`f>^BCn?l2hMm>eBDDh$)LbKp
z!P>G=Yy{U~TzjoTCw9uwurc}lP0;kXfMmqkfg+|*1uX(=AI-%MMLQT68|wDRU^=7Z
zvQH=6A%CH<*flj3L%33cb-|4eq3GQRq?@rT-4PxG&Uwio%ai+)5J)JQ@>#bBQ6mp8
zRHk2Vs9w~mVs%7=Lc2xF?{9*ePD2&k7j%hG!C-ZXf;(7do!AgaeAppSc}u`0Y)L}0
zS-FHEuXh2fcHGI_BwaCJR6EYtA*Po~O(<RFA=h|WR!Z1?5$-LBh@{p$#sl0`RR?7<
z4vsyctnP3#Z70(x<+m~Z%x+aJzsW)^@lf%<=9?uSkgAfjvm~*8T*ks3!lq_Vz2`)0
z3Lj;~ksop7AM<FI5K3d9qxK&rjU9?rAIwBMI%22l(jE#9d&{vgO{T^E1jo4+_|g<(
z$WbL8C;s9h)Tt{PnP?PEo1>mHnbZ3KU*ras8g8Th-NH52lh7sHnJu-q@Y|*eb;;L?
zx3VbJEmq8z+Y=;AEd|-`iv4?*^5T|heXnkh7cs^8tNu4~ypxKsM~CENGjXlOo`>V=
zVsdbymt?d(kNI%&fi?xZaOuYUP>c%6rB~8JZOI^Yo4ySR%~Gd@riw5|(N7YBqa>$N
zwyGcvEcrUBCP$S=sVZjhI3~W=ndtB(e$*rMlUI`dA9A+QozCoT`9ml^a^mQZk}yZ9
zS+!xe2yOLqPxZ4fYRNF_$?+!lqPwdAOE&{jMy(jl8s0U0(64#4#<mdH>&P3ngPp>@
zWaNZeR6B;|X`~Ykc}}C7HFJr5<XvJ+*!}7>`y;I~BUik&?cvnGs3l2f;#vx5S<NmD
zWV)t7Cu9qv#_PSno20=-lxC;P)0-p2u`*?ABr{mJ@YfS?*hwHML#7`-w^5c|FU!}q
zxzQ3|vx4^{FIDM@&-S$d4QS*Kq_Ykvq0xcuD>zeak{j|pr>H=o`){aHY~Vkx6l7yb
zTXbh78Rl8c!$lg^Rg=YrDu~#SU@)jOna#NIops_-L~zPOu~6!lxnF`VFg!_BoG5xT
z{K%)DS(fB>4$i5*&m@)%4JCgi@f5rD%yen(i7Gpq9LscN8sO`d#=$rUl%t|e(+92X
zxOlOEbO6eG))%oOH+7gQaw)-5qEHq&nCUpTa`Shcqr1r9E`Y|{n{-V+ITgHu)EQ+;
zn@D!oyaN~jA4w{$_tZrFSEe^}fw;|1u4{A~H1>(QA$&(LC!5Y%f*LfIt4h6hOn&=V
zkz6kad_%l|_BFeAFnBS1+fA)*n1Q`Z_e{>HY8&19P)OH1m@Hz<H+A!MKEIwv9pp;9
zeXlEs>VXtU%48p{jK@A#pfgEm%~~Mk8t1c8s-Q?0rcOUMLBN=gIA}IHJzB}fscTH3
zqk`Dy1Rt>$Ti`#fU1NjIKx5gKb5J7%)m~0smP$Xyh(_FqTxY~UMgW7JmROa3JaT+w
z>a%SwR3nZtxu|wN{v|iKhR2TOw97g8JBO9AN!g@m!WHv^j|RH<MT9uG7`lxHCx;Hh
zk3*~@NGc?*c4k!+pc<75DNa8QTY;G!f_G<eg&;v1RfkHPgpGzOg_|G^Ns228hG7~G
zZuU$LMFx@ti9tp)NGd4crbo%ODY5d-sVD$b;TEOo-#UesL?seLg6@h&vivepU`L7^
z{4R@z#1Yv`ARdic{=$qxqZ3#`=7722nn4)@n4mSrB%rqO+tHBmiyMFjg!K0|I~+W4
zU@4&D5lCoNO7Sp6wtg2T9n}qH@{(aw#H`!=H=4Aj3PW-?<Z4avI%&hH>I}!MJ$gJ3
zX+mLZMntjC{%wv}SFB6k2Cw!bd=-zjBHo>0CW975qgj6oiEPE&mzIkS7O5&LJ9Q7x
zcTU9*bk)J&Y(igNzJJta$p$<${c}D^`L;+WfKLN9C^}PnG%x&|*$GP(9bS4Evp;;O
z4!O-ogMs%Z{GOuyB9!FneSIsKlaZdk1O(6=1fMB%d~$GgkkG7fZGuG>`Xa5jyXRM2
zZ1w7S{qWC2LGVwzrDdjfkeX6&C+1QFO`><OJ|hn?kvprRszt~iD8Ywd)rqr#$z5hN
zoBNq7#blYGw9E?OjCK~2?Is5r{r>QxDj2MbYb*%Ys+i8H=FOXiZr6sa$|gq88^jB@
zMY$quX>nQ-zi6!kq@#rk0W`G26_YzH)TF1%lLt;=Eqc>>EATF@e6r>h-tKle#qtPj
zfbH>o1n}#qLP)>+a`u!#n9!slXXSG$)Jtn{DL3q__(d+rXDexZ&Ou|xP1rAhOuhY)
z{_-uvwO(*hjx4-Yxlce+9rJ5Kape~@O&L|9BEYCsZC=<YZ{sge5V`UW+cKu_cihoY
zkP)L>(!Zqo7rP`(@EMuX6Ei2Ac<@*<e=jw#(2Kl#1<v;f@TtWHy`aFsD1H{#V|`mS
z&bCE`=Try&;LO<}*nAI-s16>)0WS%CUvJl!Boy8TRU?nvI5V1NIioPvmO6F(ZquY?
z3{gquh(?`-Lk%n=>Kl}3DV_*##9vXkuLNWBd%b0DRXvOJ-t=Na7`*=98$DNc>fxP}
zu&jT45E96$B!J-_i$(CVK}v|D!^<Dg;BkxjJ8i6Q-k}YLA#o)uu}<n>Vj>#LcAltQ
z%PqBTrz4^)e6CDNp<@3$`a!v|MV1g<`BZ}`dxC>q-3o%c0$s;XAa<^h)(woC4}xs3
z?qu;nwql1V|5^P<aB@e2s=1?Wp0rV;qZMNZd?Z{%k?R3s6n!6xph-7kv*oNIUguJU
z0PpytY?Z%(RR~97j%7)kA$%nW0YC8tG@L`81a>N47&mf>;EB#L^P{W~>mD5nw!aq!
zGA{cQmrg?dn4c5L%ZEKSjo*&D#|+zWTn-OfBZ-sbSwZN~Fw~k|sNV5kiXU0rSI3;R
zEwcWy*)#J_Yhl7fnd+q`Ex*X;C!nH84wVa`$XiZkO4D~ImEdnfBuN~GCY7CYmlCrG
z$&f8~PiVm>susXQCQqTbs=c~)Nh$@BJ}Z;)u8bq>RmN+?lJjA1%l%8yMdt%Xt))eE
z2dj`=)*AzCIk0=hMv`*E);#iOgj;FqLuk<npOkdLg#$L>NLdUj%(xOphE%!?APUxL
z1;_E^NOu@BGQuk9lqxE`AxI$QLf*14QEcl@zbIE8y_06I_U6>;8mHMm)-2A3(|h8Q
zscfBWK&%-XYkSxZrSEd@v@DV2F-h902&bDR`!l9k&q~B-B@<CbUvq(+z!?e+%c)ct
zr!=*lE;<;=@i0DrUQNRvwdB+pVr#-F>rqUl^i6%9_lb~DS4J;`5{Clt>Aa>-wbeqi
zMpns-az;FW`;a<1c;&<C(H~0*5p$e_wRBtu)mdQVn)zXXRmUaNpAWu2+hAR{I37N@
zqEX7oML3`fGph7?b!Sy*LXEO<rBHw7y&fa6yyfxnU%{t%PL0*j^J51!nF){~B>maW
z1ZQf&*YIFj<EP&AvS@=rZp(UR8RU@Gidn{Mfn75uNjX%$bwjH!>Zt-44@$|@iK%g^
z5{mAqjrbhHdPy$?s@kuWV3W}_@y1}pzqfGH)}ek8DX8)Z#a5NY+#01L)x>PiJ)JV}
zrMXgp+`6<DM#x-s6`fpgw53s`Yg}DEcJqVX8CbKS#9mPS8e?*uhL9r%8!p|9+=PdL
zxxR>~7>0Hs1FF#QPXv(;yD>h<<tj+sQSd_|$#U0;@M$Mu@xTmMTy7OyWZtmi&P>^_
zlKeukPyc=dxtD2)nxbBDZ@~CaQHjE|K^p-__Bc)ZlzZX!*L%F7k46+rls<E%QCEek
z7<RVQCuZ3aoP$;YLm6HX+Gcro3A-wP7-?0Lb^#Y~{-q7#B6JWfQuJ0};YxC_;p#Cp
zSlE{V{%sVShMsCwJlHthV1FhL$MjgRy#(zT`_1nT-q9fs^C%uHaL0njVjlfPe{ZJ%
zsOug^q`K+Uaq%0ccoNmBEFCR?Q@<DQw|VGu>JiAzB*Yu*x6zA#UW*NgIAObeE^I~-
zsmck3Qg`;JugupP`R~>;h2!jH9w5MS2z%*si1WEjul3u2tU@sX8yYKYH(EbLTr@#)
zeLV`CD-#;iEbTyYb+GuYaG0NI2+@2(lq5hX!;o*}v2h078;_$dFNWJ1j{pm?xPVYa
z_ZW?Vhr>Gw)X~qJiK}D?p0aHsrAlLG6B5p}+ugU^RcvTQ;2Sf4#Wk7Q)>3F0wCUjA
zQ7>&_u?J1$>THXwS4WkzoXTfz82&mP3yp(lCinTvdEa14tOQBz4gqfJIi)``kI53U
zdWs@`$Cj>%>gNWm8?caK<A`peDx!@xD0NW4{xbpAi1Csft~o!6Eu8Ct_HR-HAaJzp
zhJXY&<)nm%=DR9gY1#HEMB(dr;VGNrr<B#mnw&U4j4Dcn9v*P<-}mMW!+2E7bI6j9
z9fDfUnp(znBRm=|ImJ>;?Zud_@2dq}89g|FVqEgXw^l=cPH2}ci#M(nV$1UtEAa3N
ztbVcn73HNaS}{9_k-oQZh`)an;ub__ru&qzyYU?ups|1OC#4#${W8MiKA1pht`$GP
zIcT7`YlO#syKa})+wWY<kd+=8q0`MOLaV%>K;^gk4(@RyJ<?xm$imqI7*q14=AJqf
z@_&B>1ZZZkjl)Q?!{AuE5`K^JoABT8-L&Tf2bta~ITr3MR88N9NBQt`@gG7AXM>8h
z0L9-Aj@DOya`?)uRZLF~?>k8fx?;s6^!;I`D#JsqMIQMSOTZvTB9sg(h)f3cmOrc>
zahRQ9`(pzD9h%07PUsOaiH-}C3LZ8Or)&Zu_^h(_s7dm<uqE0Z&L)?PIgNi`U$utr
z4?7OEOpx)NFG!7hwrXT4%mbvJw3@5tQHG7!>aGGu7McvHqa?vqt{}VRCaV!Sf~zwq
zY5dxB!r3(Lvc6X*^nxe#Rns9TN9_RC14}YU-kdL;Rzmz`jdc>uer>AUe9Lurg17|!
z8WkMoH9|B7NU^Cc&%r+!hVS;8uff;kR>5y}t>d$dxe*KKI8fX6i`7kM&-?|_;IlPX
z?J)IkZqzEElq?Er@ExgeNerT^B+9l<L%*$;YH|+da~(O#Hi*G<phVwLUFu}2Am&iQ
zec1QWgtCm0Lr6LCodxk|d>35~sj?yVHP<FPxT<7AT+gWSPhmM)v#KS7Cm0Re!i#UU
zT9vJ=H4v@yu$3foG|4&4a+nC$s?1P_N`(#GfCBX%c7e!Nf2ODc6}Wtg6mQ*w$C^J4
z`GVq8W6Qo$W4zV2sJXT;q@`$8oV|6VBL-p&{-lf05l|8C3RzmGG+XB$JB<sYSr9X!
zPxe`v42c&Z_E>onW7gH=;+%3)WTwVdm0IEhh8jXHj%L>JiKq)qF`?`TSGu$-EzO-^
zD^m4J;i%;gqvSVH$diLouu^nQuU}O^JVt@TC$od#4SK`;shu-=y<{rYVD_(SW%39f
zE-AoRWEhFkc{+Tc$e)OETT7Tqa;LC>mJl)tWnUHr{!QUSAr+8GF>OU>s}^aIMrXDd
zZy<hFxQ)r6x01^{T0DP^NW`;l9ScUgCgv$A*zpI~dVcHcJ)57BTs@lFsyNgf$L{wH
zvIp7EQV8@v(k*4;*Hk{q_oiF4ztDB6t~0=d-YJ_&ois|a`WQYjv|=3?WhCSep}J|J
z>MAa^VZym4GVF-eUaCKd;Er#?Yc%D+V>l)M@qc<Q9y#_ADp|xtS6qA9hUMX$S!!iV
zDC))e?w2UW<9);Z?w?+hqV7@{5pN(OFRPXvF#D54fxqQ+5f*3v<0o(Z=bIgbPS0H{
z!NsF)H9m&X)9RPx(5gl?!b)q*qR<}YW#Wn-&YCFw(Bky=sw3jBqN`!2mQT&*r|5Qr
zfu+BSQlNf)H!~U5{=kHV3FuV%nOy<1F$sZ*XFCq##r9JFzr>p0bTFM6!BE6JqPzlF
z>xuMpWc>LDErb~t`}Qb<FwL+Qi?D`pqO>PaX`3Q^Xsxpg^dWi&>Ir)*amnBo`c9Q(
zgl!_1TL|?jPW)-ks))9mMtXeBUi*_6&-hM^A%;psXFu}6tguUOtvV?YwT8FQT7NSZ
zY>*3E8-ze*v)~q`u?SI9xipGLi`t?t@<={(r^veji4PGVkP9z0c&IhabFoTGZC6!)
zrkz_Os*oC?IklK?MzIdK7t{coJI7R3BJc-^d>Qe<--OWCtcBT<7K{TFy+bJDIpSKz
zx;=f%!8c1X<H2o8o6kc#(z;u4^j{K=ec59$a#^y3wl$Ed-L$ZR+7+9T%7V5jT8CPG
zZXgYdE&NhLHm?b((+MSwB>YD)1-2`@ZBGB<`Xq|(!j6q>3Rh%Yw-)hB*)tN*_<OK%
z+c}U+HjoR7m{l=vjya%Md(cZ_Gz+2U{N$`a!);I$eB4fYRlp#6$EC|iCkZ*(>A@(2
z(hcK<^4hb&>xrvL;Sbs=R#4u$Zmmpe7#OLGCyhf0TNqPV&p5s@oq2xAJ321*7379S
zNp@8_H6_tRi19IxsDN1<Ul+d~L#eMdiD!UXq>~~eIK<_eM${jg-K=^+F)sL<WoS*H
zl{lQQAYID8Pq}21lFV(FUsin7d+DGLfF~!YKWKuIQZQuCtP|{M1v7yZ{CGnT6ZzeG
z`h*gq`uasal2Je!#-GE9Fs&zd9@Dnrh;6Ek#omA(?zRE4k_;4;*mp;V9QCtqR<ctd
zKAhqrlUfdzU&9uPM#$6mn}X4&<JXn*xz5@tyRhEHUITv4aShV+!tNOifeEGr87F`X
zONB*cZYksZDyvAx5)MJNh*$XcCZuW6{y}!!;z0$W?CP<ihY*QbPxq9p;NSC6ZAe`V
zbXJw-^T7PQv%fg$(F8H~3#;7LieXjGg{(E)Nj$K%Yh=^dKHB=dx(wAk(PSjNIn}C+
zxXlQ?G}gi4bYR$c#mkG)rOBQ0Ao95IW*>sa%NK>aa|<!D8kejd?B~O242A)xYtkGS
z87+umr$^p-3>TpXp6uQL?~GT2wlENC!fR238M{vH-1L)t_=2Z4@rBGNYvhrtt5*|P
znTzw81rbwoPsCsVPMs)UbTeI5jDTwV{ci0sAu|<t3m*1aI0T-#hL`3?e?q!n$cfcJ
zxC^S{H6Y}%?%%Bb+TZ1OS<q-)k^`IM4%k{mmV0JA9fVqI0bdD54`HGMCl9~J8~*D7
z-S8wtszWo&$(9rHtfH?+rYnM?wrag}4Pa;T48)DG^RKhFJPXw#+n}3M&&b=%e239Y
zNznRLy7N!iY5J%91T*==Ce#e_(g4vafo#vOoOQZwsA4g)Iw}}u+?ppaM+*S5{#&z`
z>}kG4(`__aS}kXsLVkKVH9W8tcl3*ZU(1Z-5}q`-D`5a)j?l?2+CP<x%cm)ED)0$2
z%L}Y7i0^)R{Gi~w2+7josBA<d+Bd(qmX?H*^d6zNiG!lyDBPj-ZFj5f&!js_v@9h6
z-=WBLU@MG%sH1DHU{MpZsD0KlLk9zq38>eMc+@7Jr7e#>98_HN=_Wxr^Or?&a(gJ6
zyEnGhV-hn>f6smuG{ia`PsGw>T$LsnCc?pQP)_kshR~)nB-N<pJN6PkiS@_PD6^~l
z5pY_pW~g1W!ie^>4g5&xLp;iQh7!cBe&&Vkqg9D#kF;Olv257)*5}je7gr+WRU}hm
z@|m}{989Ry`_srVU_0HNKECcw)yx5nC>=WXrE=ovXQZu>0cBC-Z})o|@g3jqWo98_
zlc-?pNk}L%{V6eE8p`cyo8b#(C=mr|otZ0b7WZCm(eH!%%)90F9~+poEFu6=RyBh+
zj#yUZU7X+Be43O4a<PmH<oS`{JPrN^B`kqt`XXaDCWaE+{x{FRr$xu%N#jb%q8NX?
z@k|;9<)$}mcKsTdQ?<UE1WQM6%6Q-F3u1R^;heJ7SQu)dokIT>c4I-z{9#wrV!HdO
zkM7y}QYt%zpLMeoCQiJBUQ&4Nu2TSCK8IN;1H6wpfg&w3$CS0RXHhJ?u}RT~;^Ngj
z!pYkqCfb&*c+e<!+LLQE`CXf&cAxG<C(I2KvHk|PxRjlik3{_a$+DqxGN!|x<b}*8
zLfv8X0OW1jeq^1?i5Sf)kol&ApFzdAxr@%**oWt(4~)i3s$PVHfH^o6&5b$7ZqV##
zBPtT32$DYWlTbC4L3f4StR{HqdXl)lpMpXbVduGqX9dHOa~Ovpf1+b-N8_pZMCVGK
zWL5oG=IE;LB`aTXf`vyMcFwton8EZ6530JupbeBB?wW7>E=RaOt{j!6t<WBH8;GTA
zml2_da$ge0&LSn_)Lx3Feo;0<w&>1v^MUC4)ryVbGx<m5IV95yY8b?L<#MInc7uMf
z7P)1^C<Plv1Wj3ZDaItBgzJd{_12&&R!PyXJ?vYcgiHFmn9VlT2a!BAP*z*85H!qJ
zRR0XW+hhNMrlUiWdH|*ak0UXCSSYKK8-xS3t-H-9k_q`Y%v$29`Zr$~uTK(d8&e=g
z3Ix$9koTZc8`}DT@7coG4bJS~J76?~^Z<FttB+sInCC5c|1wm-JE8|~>l(8~oGJq9
z12wqKHB&am%6*S5EN#R*CKf1(+SUwRY?YUH8N8SUzDCol!g@`~XK*JdNeF*f(Z`&b
zS?&SBN5dA;@FW^~+&Gi<D~*NV(A6k_8Ww!M11X#GBy7=G)ujX&?w4u=gALp#^aq5r
z<q^$`##tA_rlM0IJHUL?MvZ$mk27w?pA>#W@hvpGQ!z)51)e<)(NFdW@5w#<L4t+y
zO-RK6yFy@X(|Qd|^J;KW4?g4o6njEPA&;!9arzXdD!=b!l5%rIv=IWsgJliQd9gvv
z{96Zjg{4<vr-5;2_4TpbsRD~JC`FZPL08Ji7!LQGR6%2##ph&>sNwi|3gCmqB57g{
z<6$2R`;($ZL9%RX=<QhD0`PO8QLHt`BH{>pht`@=WWsc|8}ru*=-G7xVA>ugw5392
zY(UeU;eMelTHC@ob^}&4$PL2`BN`7lvez0{F6C<ERfU^Y3a)Yj_SFFEam_Hx-&F-=
z*VsE@)W>9VI>>O|6k(|YxUCDuJb<t5I5GVr1NP(qG2!eeLe{o<9mOPD8#F4jb3LZ1
zVgw*~10PxFzng7Wit@Cgy;O!Y35_NO0?mnVA3#&^OBk=|mFhB>=n*H>@-bA`Onnv8
z6Z5L>cEP%1euyQ;GY^^N=j3%-e(2RuarX>NL3nJEyBx*Z*nl_8Jn2M`7h1!K;o(?l
zZxA_3wY?4O>COSgv?k3`yO?`LwbdwX=v4!nRetf`aS@k$vJ40l9%3zw%__tXQBg4~
z;|j-T5jd|uD|%q^K~0yG?l15tCqE@|!w#X*++E*x1C6~L<Q}h?Vjj#JaIJ&N3yW0e
z^U88cM;9jg&VzqPS`5!>ld^#~#Uol!&K3Ttw-NBX_iR($cHE|qRN5j|Tm&j_mt?D4
z6JO2AnUC+5yx%og?6R%nstL5=Ll%3x@&X#rX{;fjNkyRB+?>Lx1ZU4MLYVx7;n4HI
zVOb77XcWwx;qb5qx#clO!5HqgP|owLPFE-Yh#oHraHVE~r`^Jxx&&I$;yx}WoBe2o
zkqwJcQ@Dk82-_P%F^-^`xtXtT5DRLdN~mk;spsFy8fF{}OU}THp~o!Nf~@D~8^Eun
z$vJUBBR3k8WA&Djp>Ml^(k%f`bU+{y9|3b|eEMd*ChVRHu8l1dZh`u?c`EIm1%I`4
zE|iLE^2&h-r0k3bQ`IX_WZWb_<AeaP!kpKwG9FA+Q;P)GV5&4=Z`y#Jc0X|>oYNdq
zHGNX|b)jb?aqE~!MsOs1Qf3GsnAd7al#_gJ>|zmA;ui-Up)ws7*r?*0O}}L>Sz~c8
zi#Co#o*tV1KJH=Wa&)YcQrky0V)Kleu*U!}FQVY#%h}Ec?TK<`fI3i_zv=!SJcWj}
zcfRsjOBC)H<26<9$m2OG2I9aFdj8I0Ygo^)?0I@ZLNa!%m+8L(%@!%=3QcykNY*zA
zT65W-g)p*Zj!i=cxSA$t%&@qI!&$SDhE5S5Fl6R1%(JBZK@SYFU<2p|`IPyr3HjlK
z^oA6>9OMxHz_+>e<CXB#$Umk1^u?gQYNMg6u9g^x(;;KhP^6AjXn7cx2B~}aroSDo
z?t+U21g?d07$5`gjHopCrUMz<&m#Y9Xswp*ZWbExFGEqh)oAa#7j4N367Axa6`Ulc
zU_aszYgBbmcmt`QT2bm6VaQEp<zYf65CAPu`Lmt8Y39Z6tJ$G!jZXLc1XI(u%@M~0
zv%0xi^8ts6H{^U!wiH+OxB1`8TGN<mu=t^?jyiwUxE#5gkN^NM{9%6lgOoHqI-)}H
zqo=WuF511kG@4lCA9lU2tOQ0q^B_94$8S6w=LI-?r!DiyN7=y^z5ZJl+qg0HTm~2w
zC?__`b|?vOS`o~E2m#2i+?b-+|E4QkdNBwqk%c0~nt@*3VG@mO5DkWonNM4donj-o
z@L=RLCpE_-QC5Ci$aLeRfNrnFGR>{>R8n{6r3Ku`!OG@mpN`{jK~9RGvAC->D0T(|
zN#6k^H1gNt*AUcD1Uh%anm%Nlg$Xrmw5i53ib*bC9XG6oqNbrY>-Rs}b-(^?*PG=`
zyZ}(Rl!G&xLy0!hC7d7Pt%|@^ww4fQid5HafXiiSC*X9-!WFmv;$7`h6VRP5Q&;ry
zv1tAFAwSG%X~krWc1<x@?#}$rGVO~*o=0dbH%%4p!UP{T51)HLs9!^Ht5GawxcS*f
z-8@4Y&0q$<gbp=my5Ppv8lhE8|Dp`bL}cj3_8-;~NsR#qAAx2XTZTd3`79|{sKk6M
zD5*F%&`fk-_6$$e?k#08)d@BcOu)S8kMY1#%VHIIq4E$Nj75CJ)M|9Ws~|_3+C06!
z6L1GX+DY;t4YN8mj^nrx+szq;rhXmi;ymbj)|iB(#x%YW0}j_o41(Mv<p#Zto4ep;
zOPM2?Gxs$Zi|@<_!<-G*?;x>Vr3=T!7Y{7+swqZLb}TfS*!?jkDR$p?S&{gbE0dOr
zZW1jTjk8~ICNNh4NSy)ATVut6uMV`uSz+RR677Fc`#SQ+Y+P-Ue<N~zv4O))P90f)
z_9~UWhMCV~H92X`(okYTDTQ}{g^+w`wojV`r#Cl)jGK!aIb8C0EN~(`CdIQ8TQ7{N
zUxb%39_$^SwYFKFBe%zQv5=$`F98{;Oi7Xo(a?bL{=9M}$G{pM=Wn->kxDKnfWanr
z<J0BvN5hOXgI(X1(>+-`bqo*l(rKqvu?p-Zxrb&qOtm0D=`u;Md{q;6{>wu8Fo^Op
zBp`9%&S<hsV79=Munmja5j5I7&0W;PvN99n<g5xPZ&LvMo{_5*9R-sLr|;w0I*Y-U
zh!!ukqZm9Kh2RDs!z?yAkw$-j!y5lrZp3qLLXda*0;;2c-Mv-`LvN~rWC^vaj?fM#
z2HBWYh;hwyx3Sm-!PDY%F0wFPHKYE5o_P}9QL+ukae$^!j2v;}i7l8Ka~20Ka-s9F
z%#j8cP~VI-MFWkSuV+MFRRMU?kuU^Z<Ic{2i3WJ&siMptJ%(8@4H-jv-<+Z{%0*2S
zI`IXVe8)nU1=Mc~!pJV3uBO7h(8jXb_gSJZgV6la{y$8TUOR8)KK5(|eb8!&<$knA
zIeu=eF|)AI&>gs9I;V8VBfg2dl>)j)eMy+*F0w=%V0Z&GSP=7xoV6-{ep!X$=8`;#
z`~{Y`tB2W1Jphxm2bmv4F?b&Dy(F`58f^n?e-4YH^8Z45oG^|sGWV`gzy1&>Ad>?P
zW57kMvtjO-qEV=1YGP>j2*xW;7C6)w7u2BXN?)}z)(749i_E%qfN5z&oThnB;?v&9
z(8`}7l`#=~>zLlVNqV8m@OF@ejbccs?voU}5XK#&6H<`7`qNBAk-?$A7B5O<VmgZ3
z%9)eO%Odb*HK9UMYr|>g9__BWh^ypa!0i?B<|zPA`CLeC01io~P3b=nKK^mj783hH
ziNnCSFHZ0OE2^@rop>U{@q$ItJr`!Z!)R6)HcNvXHLA8^D>~z7w0=;gXrlu}HZ8in
z4o8Ual;P1A4I8N3sAA$&Xepn1thMO8-371`mPkFH43g`EKT3hG?Av7Qx{BU2^1*p-
zCC2kmDoAOAD`zt~&~uz<DWcAmz!G;2#rXEpgP)S&F4rDnQnO+f6GVmE;>r?07o0Ah
zZgD@-|FK9i-xTwk1so!<_P@=aCbjuoSwcf%*NuW(NW#I$0Bj+@_4%1ugE~FmOp_3C
z(Wup(B~7qnrdh7k(c5DwlClNm8Zo@kJ*lF0YyAk+vTb81m23JY`1)9!aF7M6RH4ix
z*W+)sv*ekz*{z(s8GjbG4xc@!8=zP){R}m)&Ua~gTM(fNs%v!@i*5IB^k|U4$&^l|
z&lvtSzx)zT4lR`E?Ie)4Y97t=TeV0O4$gp;XoAv%!@aH+23{mwDn;zkQ8eqvvp`RD
z^dW;Tq@8U(OoJbz+#r1df<OV`Hk$s~Xp`E?TQ<2?(+d9fH`l_%y1a&4)QtR-CE7`B
zB3glLZo{lBUtv_=XzNs{_fMJd2w6)4Vj{nRh7o#d5+Y%<IQ24HgxNAqKCcgrCEE{5
zJ&~?$+5rlR$DjW=Z%u8R7GOo)_4~^HIfR(Kl8%~RPnpH(k#r7Htmfw^i9{X$j7hW^
z>P7YGiS~Uj1;%6cjfH^1>;U5AVA+9C+t~>GQw*g}#T8_kUY49loM1{OCP)}P_}h&_
zRa&rc1dzzY6j8ijs!ENI3Lnr%5e)Sk$H6sEHf3dIEc)W~-da06wm06H`=K`N+Vw_r
zw^MXX*eY2QE_3_wEjKFL<6IAJ?`FtHTRZ@gV`I|Pbe`K%XK3j%0Q32%=j4DBYnM0%
zKU0j|jpkg~ot=A|!Mg~b2BgpKQ5O82R`IJ^JhGf}bxuVq<`C(jg&qg(`=|tkQb3^u
z&}zm2{Rkwqvt~MK@=_Iy>fX5)dY_9~>G-C8?InRbk`a@3U#wuKkO&TJo~g_`6?=R|
zr4(``Ph!o&*jXyo71doB((_38Rq?IDzSZvn&jM4ojU40JX<vE=SrIcUd#*7Fa-`<~
z+g&8h612x)6gCq|)L4h0UPUlocC|X>K=~wvKHX4(9vdIdt>jcsL=M5p29Ob~{v(L1
zmSD3sUw^nOB_)8)Fd&Pi!NN8o+XbU3`I#**p<vJO^Ifm!+u~YQeu7kn6t@LigL<|*
zl`BmMAl4nxVzJ`OeyuZBjZpKjp*nd%8e)u!X4>Xht4nvJt?`Evy`AKg^ur8Ohrg_q
zd^2;T68RX;W>xp+O2rlXkRZy<4U{~$^6!hw9)_VxJ^FLTEOHDLOJ%0vS3C$JS=n+5
zq6WCLnM?;73<e^EmV#9kY;^-9c_UJ=iLb;`FJh!9&%NZC2AU^MHZAm1zL%8uuq^mr
zacAl;T{)#qVsG)&5x1p(D=-Y9lYe?zA6)G^2XtJ7r}!69BQ~`HVg$QC$^WDR`5@$s
zUXa?am5c@GgL>qNhK|RfoY&Ry&XjY`A#(8x&XmJSyblmrMLaBv>t>&^$TZN8HwA;$
zaF%_m!G4u_(T6w=;v{gzgBx0cMGBS*AtKzC?@!;5@Mo%4Z%->_W9G^W@pugTzn2d8
zIjE0+?rb$6AZwZ+hf;B-aMXwG=vAh7L=nz7s;}JiyImlWN2VRV((~BmF^HvBk&0{=
zv50ATC=<swiB?3~x$Ikw;`1X^g<!M0G$T*O>YwC2xg=G6NtJJ&m6?5%t%pNzc{}@T
z#80!pv?w^1|0t(E#NqHHjY+vXPbJ0ciK%99gXQ85LYEm>C+r+ulS=L&^Eq6+WQFGC
zMiX*oO^yGNzx8T)XJE7zvPLN=gHw3R$Fk~1*cBn7K%$_{bWy+fgF(fodOm%#J4F^X
zClzHcOIiK3td@`<4T&!;dHBmz&0yiaCo2C)=_D+gg*uv2a&ZgH)wVe^dWq-JGU^(f
zHGYJ3L-9V&LOgcdYXvBH)bo!uGK+uhnY!3Vnt_o%NO-MlRFy#qqtwjJ=mdPEupfS$
z9geu)mif1w%hB(7R=O-J&>ekzEfQ-#WESB18ESSt!Y}CiD(h_1=GR-hphjnDPB{`8
zyqkg5=5ITjzAwK{*tjA8ydR0S@dQ0JFDqv8fnZVF=o9HsdjyECT6DzF$vV;*b#1+$
zh&V4m^lT&Qy>NBL-)V?yS4z1pXM&rzSjH`YkPW9Y&7@DDEPXc7$5)w+9e@aU3lPvY
z))y#efv%vp|J`S3_3!Kp_=WK`@uBen^>NS~X4bS^4ASPH!BI^q6&O!UMO1|ueCyFn
zhyzcB+TKORK$Iz?=7X5Rx9=ke6W&yu)aUXW1OEAgT1n&vzVRbZ{)Y&ugM3ox3MRRc
z*0KW_C-^+Ha;*b0q!|tK%=#hA<gk-d5$zyVupT(QiVVPdoGj_(P89$<5cjV^ghW0X
zAdl%j^wKzIX!hD$A)3Yx<2Dp+lv94cQuTW@6YF6g{aK7L*p2ZC0?f;VCp76-C1#}}
zSTa|(vvo9#S=%vH@V}AQice+=?wj|vpPPZc%#?WoNcB$vHP@2c-JIF}`6Y93ED%dv
z*f~QfTEmEiL^Ea)igA&4X)RBrT;5ELJum?q@%c{*>X}&Ql6*aP*j*!m!hL@(Fd(cd
zq8!EbF{;v?RJ!=9rFtamAMLntIMM-WBrRB-uc|W0t?DG@-CJ4Vik5$9LAcd>2xzrO
z9^Rv@7PQG|s&XKeiTdS`bHW}am4C6V1FL4uP(&0#?iVXDAsAj-`19)W*Sc;PP7FvR
zeK*u7tSR)aStqDsM(r-g&PG^qY}TX@awR^WvyPk`pH#}|M7aBMh5<FZ=vYCj-tQN&
zQ_8cQNrtJ+Da;1<%K`4B?y1+{*Z6d-e)ioaN-9D`aG|-i-}LEDso+bNe@g?=4wXPT
zFPc9o$G>EuLqfjDs*+V)A}1s6f7WJ|1$u=Yqa3d>xuhnEMCmS_p#*Cs`DzGASb~EZ
zW8eH#Y;;-}H|5nv6GLVSNvfLyOe7a#gn3Y4(iX6*iwj?$rjujKu3EHZHT#@bvQv+h
zex$Q$liJBG@^NPDa?g$@!RIx=d7McYoIf_~a&hI1=|vQ9n`vd#q^H*5ijlcCSDJfw
zq$DpY*KukjTkgQ3%>4?VLk?4g(N6n&(f$&z!E3++meRYR^7a^!<!AU7KF~jLP2$KC
z5lRsrGV_PGknG-Wh_8T8#gJlWedbpiX`&9H2)tKQXr<a@ADGE}xPk!^b5p9FTYD~<
zPMr>1I?Wak33t>qElD{c<DTND(Y*t9wBP$G1+X*<%6s~h^fTU7HV}pm^>Ys{cl;-Q
zLWMaO^~bqC$PrmD?X!q_rqz}K&|YPGtxGhz3R~FXxE2rg9_{%@OTUUdKR$h+GU~Py
zezlfGc3+k@JbInwRDLR1C<=49G1`EXjs6<!W+mr!50TINTU_qm671K~gb8Fa1<Sku
z4A*wYr7th>Jpy@-G<mp}Jw8j<{q^m;3O7WaxVMHr?hZUA151qD<%4b~)fbUUNljWQ
zTgfi%MM*iA=J=s66WnGrT_ezNViBhBgLTAT!uo!B%R31G$VQnm9Xg^&<B*nNR#j6Y
zLY^>fm5MqIC*5MX?<RfsbJH~trUauz!~I9V%O*q+RYiff<(FrnMBO1Mj+dGk9sX)6
zN>ZnnEgt_P+knr=sq9^^o#jZ-n&+*_&4OY{MT#R?j#Qk=zDnr^sS;Z})oHHZ9gb3d
z%*mh49P^<LmN9F9&)e4{qPd#ME%Fn^b+N)V`kIEgX|<7R^2@dnDP7-_g!i}XJcj!F
zCG4y%4wd@btj)kV$$!74T_ic#|BaggU0EjfgG*6xrw@TfgY@0@1TXo}r78At2wS0#
zs$gvAT&NSl(1_MD2UEN>ttR4MKowGs$)t1!mKMpQ;^PH!Hr9D1)NU>cFFjRsp+nL*
z0Pa8uS&MzHqNUhCvyB-JMh&eQT|r4EEQg#0`T7ZhJxi!j76(+wQNE{KwY|oDEg3Y}
zjwx*WmK!}pKR+RK@c=XhF^h(&R#D;y;6+X(>1(C9&r2wu)W(7gT&)N?heS0C<flbN
zci9rHx{Gepk?C?~<zH%YGXh$uFbjvnX>oT-%v+6%QF~RaAY`)n>Z7!H-gC~+cR;nA
z?n6EsbMF&6{ODF^N>J%(jwe=uA^y;N%*lYT<8to~V51%(X;19@-cZAmj$Pt8jDhbe
zc?rld8iOnVgXIq9=?R5Z|LGkP_-|}=m`eq<=;uDFvRpNgRV^qa^<x*Cel-ne<m4dG
zafQhLkel5Qa_JKFd;YW>aJ$YSY_t{40k=qQ^%nenoE#hhHW~>{kWzwvmK8P$v3R^_
zAAL+Gr;pe}1ttDF^f|4JU^oUX7XfAo4{j0?jcD>=vW87wgv6zq7jn80h=m-uwkSgd
zn;~ROV;sj>5;Ch%<AK3-+`2`UeQMm_=@Ki6mES}`jC^h6LhEs(L-Y$j+#Yc{98r-o
zsTA)E&W;YTPoP_(pTBUD@(I+8l8yndS~ELtATU+NXqWfX^DP4wCoe@F0=-_{o=mA1
zkcax~*!Z%TwG)0(g+LN>5mG`$<NjD-b%tHh_k)2LU0f#-7b^VHX))i{Vj}Lz2k#UV
zA0%Ct3n%S`R?k*zgI*zBVH`~h+F=gcC>EOY&xAsbQ~I%dflFTWkLXw%uom9tu_nW)
zI`zI4<kS$%(VYsn@I@l~@<*-RWiXY_jT+SMHxGS#I))+3YP-`mOwhtdxt7k-xCBI%
zoELrl_^~rDRbm~2MzgPY`k0hVoKgHM<iufkWJ=;=X$J_U_2v(ex2jUS5(C~B3^!qj
z&~i$YaJZtfx?Hy^#CH#LGPW`ikuE|Ej@aF75=O|5n`h=R{yV|7A$_}utJTCbB#y*@
zE}zR?TGav<p{=O9ZlH4~u{EgDBXoI!ueV|B*?A~gY07Ly<O^LRpcrlLMnBmdu^f0`
zU8}ySJg>D@f@0EpQo{21j54n0%vjyG!^9D{rrlF~pODo$=d{d1Xx=$g>xfrlcpul0
zokzR&kb)a%JQ3P<QCEZq3Bm(_-pE9lOswwT4E{PIUEMF2SzfyvcNHy^6tEFMZ>cS!
zuNA_0TE_dISIQ%G&e|Hi^8!A#RwOrIMwxH^<#MWMLoL@=T@Sn}X>(r<KPX`g>oa9v
z4Q-!I2u#qXe<iw5p<9m;QR20z(q-%!9};}VNQ@-M&itJvWLoB)(x`E}OUsD1c#KXD
z2}MF(bW?huK=8wZ3KZy)!2jE^t=J~8iWeL*`WTLVuBJcNB95VkJw35`7y>^qSfU)l
zo)>>jrhiT?b2ft5eFGU}rfWk|msKd;?Y0{SiV^tZ2nP+NXPV7~hgJExS)*n47LJHN
zvBD(JBFf-QXx)U#oj}q%((Bg~|5Xg;H%R{z?O!BxDA<O}zL!LBE@9MW0h2Z$0ya^!
z8WUHBX6O^Cj5JsQ@&o!hMpqzw{sB082mtr@AVTrX31TX9OxZGnA}TmStL+RHX-Kt<
zDzM{NcVm=d>lY(aumNQ@Rz>k6lj#795aO*uo?A~>XaR8hQc`53k%D5b`%DI;Ggbe5
zd<UPKI%#cmAS#008VY2r<@L64h9O822iM!FP$pxE-^SIN$`Il1H<zLkG(3-R+*g+Z
zmzlgmd|kP;k~+3=KsG3>q4Mb8X{MB6CjpQIgCLEBWMomNc$pgZT#AR)B7-zk`?4|#
zT=)_@aam#se8wgsMK^tkKBE?qiC)F%=ba~J0c5iGu*p*aSf|U-6F9aMvP@YBo^Ujk
zz}YC+nfP@-DZwNuvO&e+#h_R$?E{zhj1QrXWUS#}FgM|zw&5JyNKt+MdwWEarv2!H
zZBJYx8Cb!*nn<C0Y3X+_^0R{qTG|C#GW{ZS6`y@pRMrNXdc1fbywT-1V^*T7eh6jd
zj4QaA0h5NmPb1vDqbR7|8tX*Y-hA~ZfNnanaJ!TsXhR=Wr;jBDYU@g$TzY@*7?<Ay
zA7+c;$5U1QzqP3v@-5HYP8+W9jnm`UX1weY&VQubBU998O~0|3`-6AgqIeN!Zr19J
z9~Q~C&dgg9G<@V$ld@t6C-=-5pI20}m#a=lteUAO8tbjtA+|@cm5z{5T1Gozrkl>w
zzG#KE?Q#Em>7ggLl#neTJ6tIJ5y}F7miDuXB%I;0%qv|EMIi0#p>F?t-A*&#wd81K
z@un7swijuu$^Eq#b48*+*+vMyIW-L@etd>{MkBZnP-_C%L<V6zfB>sU%;O9(d<4^o
zf@ipBDW`M3_pV@Fw`LZCmmyZgCsR4!=!3bD%J;~=alWQYs^oR#B=&|_HYmF&?dufG
z&m-tDk~PB2qd*7?T3iQn3|!It_wJL^i?f0u9kNpqK{vW&M)Tko>dRKOtkJSj|KHtQ
zI|6)^<T}SZHY~QIPPRTp$+*toCx<_>Pn!U9l0bplQXBG|NYpYT`7%$LGBL{X)<iy4
zu6`l$Mkljiy=U=0&=F-S0tKQz=mfT5GdX~A*bfHRomOg$UwbR^YB1UtPbVB8WW2My
z>By~UM*^e^XBomdsFql>(X@EaF<Q3?67J|_QX3pq;_#wn<O7*29v8e^K*Kpr_C02K
zbb&%4|Lb_y^K0s1gU8EhJwe^SRodGgRGkoZx~gHEfgu}YXrw{#f0@xI`%z&_#d7&;
zbwrq)gy-Vb<80@Fm+clRRm%1zESutk@$Ltwm5pGFvLY#o378Z-7)`o(R+T^fgQxp9
z#KaeL*^j<~?#F4fdDuIw*GzwJIIiJ`xXOJ5#4<#kH%}9hnS<goOP(RtWQ?QTCQgcC
zFdqx%&&5QK(Pp9Ap}v!K%QDJmxr6?;ZyQrYN4H#5-Dh!C_l&10#Vu?cPrHMIaFfr;
zA3TPBB<)_V?U#yqyzO-G-l7g*B5Fp0tQToCM5U@hcBY6Oe{2Z!C7Fm0Cv(1g1lw9r
z0|sv9{T&7rl41fmR#tVwt_~<QIFis%VL(8EKYv@$^@JGO18@7v@LNawygS!>xXVN!
z*P*hZpS?nU$p?fwOgTXLUmJ}En{>n#jZ*NL$+_f0H^I$@aB!yWCJyQ#i-O!V@|}rL
zNU`HXL@u~4;|K6`%A-R1y;gAVjZ926Dz>sQ{KX@|sLIPOme(h_U=@?QT{<3+eEn#v
zwp<A3xr=?t-#E<vymQNYUuxdo1gY%mSCW2W5uflN7o9LBCW`<3yBDfX-TEZQPDbA}
zq=zyoee}A=V${D^Lab0P%%%*bBClkL4x`ku?s%sr;yKB@A7d#>ysQvPR;uV5qtblZ
zGUqcZ5EB+?Q44QPKG<d|s%&e`##mHq6-<=rH1K5oLh3!%u9MXqR_Wdf7xqK`bK0#i
zW|$csv>Aq^&W#<$pyNGINHE3-m&?q(4IvL@U|%+Cpn9+Hgo9y(V55x6Xc(kV;F~j<
zXX4;|5ZjNZhQ?D|+tm#7Umr{2j`M|9j^;QZVGY?pyEZSVsl`8Y(Cu>7m+uQzAd34_
zvA#Y#kNr5*Yf)#GB}Z^{JTuAFQ=DAXQXrX^DEdMR=}B%y-LKIHaZ3i%b>nzGIF7X=
ztU726oC!9Qmi@AK6$&+?tt&2f_|+=GdxbKML;|<&e%L|wF$P!)9vK?0_H+*-+c=qh
z&qXpBpxL<&Y3nt6bi`9Y;I0yS1)PJV%|Y(v@X!dJ)Hy{dgcwBrz2x-L5yfMlySK2n
zQ3WMIIT{0vE!#zHwZXyI;EAFl1Vw}~#XrS`BHGm)Cy^_HOdNk{N1u^e^*tE>KBq2V
z263Eyw>mi$D!(toy@^G_(*-f3iz;AjmFy5!u6&rxlC((+;Zj0&hUX9ep8(GTF#H7O
zumCmdcbXA&nbgZNDTPz|oghM}GQNQU16*wuPEW7EftZ(~p0xMtu91Qx$<riGd7Jx&
z{1WukkL!U{{}Jd9q2i%hHRDK*!ivVMNyGS;h4CGi`Mi?Ft8Ud!g803YCkN+l8px1~
zW+e`&_muD?binXDZ-hzeJ46tL{W1B7U4TE7xa-`E`l3Nt<g9+vmE42vxHAyr6CPRO
zYA#R&HXYphETZ2067L%dS)74aL{VtCAxt1zDxA4aX9Z__Yy?h$KpHU7?wb)j1Vxa_
zv1M3wIpISSc!)+E0UaqQei`;&tP?vCEu@7Zyc{H|v%NpNVMd2!l+*GINcWIZEFG+P
zvjmTDL}alJ{UIcWiGFMUxY?qO5X?0R$D1_T!w!LDleKIdv0fVjxH#<<Rw6cYJXFFG
z-)~vTNLn-n#s7rld4z)w0bcEh)+38EV&MQuas?vf9e_4F1WjM2=9f*xQ$NgpX)6NH
z*#SS8p7{b;bw3Xmd#K+I&^t+7EA<4bO3=o{G1&P0c!m{5CAP=l+<S?5sVSerm<&iW
zu~XKfr-G861SUZmzy${+ZUpO`)0duT`bC|IykiqJ0HSe;m}6F`^cBo8f~WXW6n20*
zxf2vt6oJ{i3ffA0mi!wW7t*?H>xEZle0Fa2PuFGT2MX_-8&oKM4M4PFO@`^#1XG98
zb(Ntj5~K%-n~5vyUxEf0n8*9!-0iPuRl5}BcAe`zI+F?OW?qGoiOegLY{`hKTd|d|
z<R^6pq$bI!iI?R~HuCR$5rhhGxFPmRg*JHl?)RZnDX@H-@J2#R?72voN)uquq!Glu
zzg7?xO_r-`d?frO#B5VbGUK2w9s!4seHCMVpeVaA_QTuUtI6Oxk{p#8r3m{cq>q(_
z7CnYkZ7^GvQkfo<R|x?fPWIG4Md)UONs&RWB+1Pfq(WuPi3l<CMEokFd7BsLxyp!|
z;ExzGRuqu=L}w)g-=@Nya<v3arCCh_>>>M47Vo_{o=izYjV#zyi^t>zPcWD@(#&rG
z%C~36%@pu<tMrip#c(C^Mcv8B;XsS>kO}!B#Fq5oV{rf`<8Xoq^#KEOuSLffMFJR*
zoW~2&5cS@?A}*0;Z3AlTdp3nh83I{Ey%B;?r7XH4*HlHq2FsBi2r(vTN7FV4++Dzm
z>57MREF+wR7Gcknyg`e~wKQF-V7PtB7c@Z2wUd+SUi&*!A5_khYM}(<`=7XET7-OY
o^LnO}%p7de0JsO@@6QW{jmxKqm1OT$Q3V)}a%oEo{@F5#d==O;8vp<R

diff --git a/static/fonts/roboto-v18-latin-300.svg b/static/fonts/roboto-v18-latin-300.svg
deleted file mode 100644
index 4ded944a8b..0000000000
--- a/static/fonts/roboto-v18-latin-300.svg
+++ /dev/null
@@ -1,312 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1135" ><font-face
-    font-family="Roboto Light"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="498" />
-<glyph unicode="!" horiz-adv-x="462" d="M284 405H173L167 1456H291L284 405ZM153 70Q153 104 175 127T235 151T295 128T318 70Q318 37 296 15T235 -8T175 14T153 70Z" />
-<glyph unicode="&quot;" horiz-adv-x="588" d="M243 1396L223 1083H143L146 1536H243V1396ZM479 1396L459 1083H378L382 1536H479V1396Z" />
-<glyph unicode="#" horiz-adv-x="1191" d="M753 410H439L362 0H263L340 410H85V503H357L440 944H161V1040H458L537 1456H636L557 1040H872L951 1456H1051L972 1040H1201V944H954L871 503H1126V410H853L776 0H676L753 410ZM456 503H771L854 944H539L456 503Z" />
-<glyph unicode="$" d="M901 359Q901 470 829 540T575 674Q349 745 258 842T167 1095Q167 1258 267 1359T539 1475V1677H641V1475Q817 1459 913 1343T1010 1028H891Q891 1185 810 1277T587 1370Q445 1370 366 1296T286 1097Q286 977 359 910T607 783T862 669T981
-540T1021 361Q1021 197 919 97T637 -18V-208H536V-19Q335 -6 225 107T115 418H235Q235 262 326 174T580 85Q722 85 811 161T901 359Z" />
-<glyph unicode="%" horiz-adv-x="1513" d="M109 1176Q109 1306 189 1391T394 1477T598 1392T679 1170V1099Q679 971 600 886T396 800Q273 800 191 884T109 1106V1176ZM206 1099Q206 1006 257 946T396 886Q481 886 531 946T582 1103V1176Q582 1269 530 1329T394
-1390Q311 1390 259 1330T206 1170V1099ZM842 357Q842 487 922 572T1126 657T1330 573T1412 350V279Q1412 149 1332 64T1128 -21T924 63T842 284V357ZM938 279Q938 185 989 125T1128 65Q1214 65 1264 125T1315 284V357Q1315 453 1264 511T1126 570Q1042 570 990
-511T938 353V279ZM434 121L359 169L1070 1307L1145 1259L434 121Z" />
-<glyph unicode="&amp;" horiz-adv-x="1260" d="M404 794Q317 899 278 981T238 1145Q238 1298 329 1387T573 1476Q712 1476 798 1396T884 1191Q884 1047 718 908L558 784L958 318Q1049 465 1049 651H1160Q1160 403 1032 232L1231 0H1087L961 146Q882 68 779 24T560
--20Q352 -20 230 86T108 371Q108 477 170 571T390 784L404 794ZM560 81Q651 81 736 119T890 229L483 701L469 716L423 681Q227 521 227 371Q227 240 317 161T560 81ZM358 1149Q358 1027 493 861L624 961Q688 1007 729 1062T770 1191Q770 1269 716 1321T572 1374Q474
-1374 416 1311T358 1149Z" />
-<glyph unicode="&apos;" horiz-adv-x="348" d="M226 1395L209 1090H119Q124 1386 124 1536H226V1395Z" />
-<glyph unicode="(" horiz-adv-x="653" d="M140 588Q140 806 196 1011T360 1387T592 1632L621 1551Q555 1504 490 1414T374 1200T292 922T260 571Q260 362 307 169T438 -171T621 -393L592 -470Q465 -394 357 -225T195 148T140 588Z" />
-<glyph unicode=")" horiz-adv-x="667" d="M514 573Q514 353 460 150T298 -223T62 -470L33 -393Q131 -323 214 -176T346 166T394 591Q394 798 346 990T214 1334T33 1555L62 1632Q188 1555 295 1386T458 1011T514 573Z" />
-<glyph unicode="*" horiz-adv-x="869" d="M361 1000L29 1108L61 1209L393 1086L389 1456H493L485 1083L809 1210L842 1109L509 994L732 700L647 637L433 942L229 639L144 700L361 1000Z" />
-<glyph unicode="+" horiz-adv-x="1156" d="M630 740H1073V628H630V146H509V628H75V740H509V1206H630V740Z" />
-<glyph unicode="," horiz-adv-x="392" d="M131 -272L60 -220Q151 -98 154 33V188H271V63Q271 -145 131 -272Z" />
-<glyph unicode="-" horiz-adv-x="586" d="M528 592H49V693H528V592Z" />
-<glyph unicode="." horiz-adv-x="489" d="M145 72Q145 107 167 131T230 156T293 132T316 72T293 15T230 -8T168 14T145 72Z" />
-<glyph unicode="/" horiz-adv-x="813" d="M139 -125H30L638 1456H746L139 -125Z" />
-<glyph unicode="0" d="M1015 607Q1015 299 902 140T569 -20Q353 -20 238 136T120 592V853Q120 1160 234 1318T567 1476Q783 1476 897 1324T1015 874V607ZM895 868Q895 1118 814 1246T567 1374Q405 1374 323 1249T239 880V594Q239 345 323 213T569 81Q729 81 811
-210T895 588V868Z" />
-<glyph unicode="1" d="M694 0H574V1312L178 1165V1277L674 1461H694V0Z" />
-<glyph unicode="2" d="M1049 0H137V92L636 658Q760 801 808 894T856 1075Q856 1213 775 1293T552 1374Q405 1374 315 1280T224 1036H105Q105 1159 160 1260T318 1418T552 1476Q752 1476 864 1371T977 1085Q977 983 914 862T690 560L284 101H1049V0Z" />
-<glyph unicode="3" d="M403 793H527Q630 793 707 829T824 929T865 1076Q865 1216 786 1295T559 1374Q419 1374 330 1292T240 1074H120Q120 1187 177 1280T335 1425T559 1476Q757 1476 871 1368T985 1072Q985 967 919 879T736 746Q872 708 942 616T1012 395Q1012
-208 890 94T564 -20Q434 -20 326 32T158 177T98 395H218Q218 256 315 169T564 81Q719 81 805 160T892 391Q892 537 799 614T523 691H403V793Z" />
-<glyph unicode="4" d="M872 469H1099V368H872V0H752V368H67V436L741 1456H872V469ZM214 469H752V1301L699 1209L214 469Z" />
-<glyph unicode="5" d="M218 746L289 1456H1017V1345H392L341 853Q458 933 615 933Q812 933 929 805T1046 464Q1046 234 932 107T611 -20Q421 -20 303 86T168 383H283Q300 234 384 158T611 81Q767 81 846 180T926 462Q926 622 837 723T594 824Q509 824 446 803T313
-719L218 746Z" />
-<glyph unicode="6" d="M843 1467V1362H829Q568 1362 418 1209T252 782Q312 865 405 910T613 956Q805 956 918 824T1032 477Q1032 335 979 221T827 44T601 -20Q392 -20 261 131T130 523V643Q130 1034 308 1248T813 1467H843ZM594 853Q480 853 382 786T250 614V512Q250
-322 347 202T601 82Q741 82 827 193T914 473Q914 645 828 749T594 853Z" />
-<glyph unicode="7" d="M1034 1387L412 0H287L905 1354H77V1456H1034V1387Z" />
-<glyph unicode="8" d="M995 1081Q995 968 929 879T755 747Q881 704 957 608T1033 386Q1033 199 906 90T570 -20Q359 -20 233 89T106 386Q106 510 179 607T379 747Q271 789 207 878T143 1081Q143 1262 259 1369T568 1476T877 1368T995 1081ZM913 385Q913 521 816
-608T568 696T321 610T225 385T318 164T570 81Q725 81 819 163T913 385ZM875 1082Q875 1207 789 1290T568 1374Q432 1374 348 1294T263 1082Q263 954 347 876T569 798Q704 798 789 876T875 1082Z" />
-<glyph unicode="9" d="M884 674Q820 580 725 529T519 477Q395 477 300 541T153 718T101 965Q101 1109 156 1227T311 1410T541 1476Q760 1476 882 1323T1004 887V779Q1004 385 836 187T323 -11H301L302 93H344Q605 97 741 241T884 674ZM534 580Q654 580 749 651T885
-837V906Q885 1128 793 1250T543 1373Q401 1373 310 1259T219 970Q219 803 306 692T534 580Z" />
-<glyph unicode=":" horiz-adv-x="430" d="M383 72Q383 107 405 131T468 156T531 132T554 72T531 15T468 -8T406 14T383 72ZM129 995Q129 1030 151 1054T214 1079T277 1055T300 995T277 938T214 915T152 937T129 995Z" />
-<glyph unicode=";" horiz-adv-x="399" d="M118 995Q118 1030 140 1054T203 1079T266 1055T289 995T266 938T203 915T141 937T118 995ZM131 -272L60 -220Q151 -98 154 33V188H271V63Q271 -145 131 -272Z" />
-<glyph unicode="&lt;" horiz-adv-x="1047" d="M208 655L904 355V229L77 608V705L904 1083V957L208 655Z" />
-<glyph unicode="=" horiz-adv-x="1133" d="M983 829H149V935H983V829ZM983 418H149V524H983V418Z" />
-<glyph unicode="&gt;" horiz-adv-x="1061" d="M835 659L124 962V1085L969 707V610L124 231V355L835 659Z" />
-<glyph unicode="?" horiz-adv-x="930" d="M376 404Q378 522 408 594T537 763T664 901T708 990T724 1101Q724 1226 658 1297T472 1369Q352 1369 279 1301T203 1115H84Q86 1279 195 1377T472 1476Q644 1476 743 1376T843 1103Q843 995 794 901T608 680Q495 585 495
-404H376ZM360 70Q360 104 381 127T442 151Q480 151 502 128T525 70Q525 37 503 15T442 -8Q403 -8 382 14T360 70Z" />
-<glyph unicode="@" horiz-adv-x="1870" d="M1754 513Q1749 366 1700 241T1565 48T1364 -20Q1267 -20 1206 31T1125 174Q1017 -20 827 -20Q687 -20 618 101T567 427Q582 590 641 717T796 916T1001 988Q1078 988 1136 967T1271 880L1220 310Q1210 194 1249 130T1376
-66Q1499 66 1575 186T1661 513Q1680 918 1507 1122T983 1327Q772 1327 603 1222T335 923T225 478T291 35T528 -260T906 -363Q998 -363 1087 -341T1236 -284L1267 -364Q1210 -402 1108 -427T902 -453Q652 -453 472 -341T203 -17T125 478Q137 756 247 970T550 1302T987
-1420Q1242 1420 1419 1314T1681 1002T1754 513ZM673 286Q684 186 729 132T848 77Q1033 77 1121 332L1166 848Q1099 897 1008 897Q897 897 816 809T696 565T673 286Z" />
-<glyph unicode="A" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513Z" />
-<glyph unicode="B" horiz-adv-x="1255" d="M184 0V1456H614Q848 1456 969 1360T1090 1075Q1090 962 1029 879T860 759Q987 731 1064 634T1142 410Q1142 217 1018 109T671 0H184ZM307 700V104H676Q834 104 926 184T1019 408Q1019 543 931 621T686 700H307ZM307
-803H643Q797 806 881 875T966 1078Q966 1218 879 1284T614 1351H307V803Z" />
-<glyph unicode="C" horiz-adv-x="1330" d="M1215 454Q1190 224 1051 102T679 -20Q517 -20 393 61T200 290T131 630V819Q131 1013 199 1163T394 1394T688 1476Q922 1476 1057 1350T1215 1000H1091Q1045 1371 688 1371Q490 1371 373 1223T255 814V636Q255 384 369
-234T679 84Q872 84 970 176T1091 454H1215Z" />
-<glyph unicode="D" horiz-adv-x="1341" d="M184 0V1456H591Q770 1456 912 1375T1133 1141T1213 795V661Q1213 466 1134 315T912 82T582 0H184ZM307 1351V104H583Q813 104 952 256T1091 669V797Q1091 1048 954 1199T593 1351H307Z" />
-<glyph unicode="E" horiz-adv-x="1165" d="M988 698H307V104H1090V0H184V1456H1085V1351H307V802H988V698Z" />
-<glyph unicode="F" horiz-adv-x="1152" d="M986 680H307V0H184V1456H1086V1351H307V785H986V680Z" />
-<glyph unicode="G" horiz-adv-x="1400" d="M1235 173Q1171 82 1035 31T729 -20Q558 -20 425 62T219 294T145 638V822Q145 1125 298 1300T709 1476Q934 1476 1071 1362T1234 1046H1111Q1084 1206 981 1288T710 1371Q506 1371 387 1226T268 817V645Q268 479 324
-352T486 154T729 84Q888 84 1002 134Q1076 167 1112 211V587H721V691H1235V173Z" />
-<glyph unicode="H" horiz-adv-x="1449" d="M1263 0H1139V698H307V0H184V1456H307V802H1139V1456H1263V0Z" />
-<glyph unicode="I" horiz-adv-x="545" d="M334 0H211V1456H334V0Z" />
-<glyph unicode="J" horiz-adv-x="1127" d="M827 1456H951V433Q951 226 832 103T511 -20Q299 -20 185 91T71 401H194Q194 243 277 164T511 84Q650 84 737 176T827 426V1456Z" />
-<glyph unicode="K" horiz-adv-x="1292" d="M512 723L307 521V0H184V1456H307V671L1053 1456H1208L598 808L1255 0H1105L512 723Z" />
-<glyph unicode="L" horiz-adv-x="1079" d="M308 104H1027V0H184V1456H308V104Z" />
-<glyph unicode="M" horiz-adv-x="1772" d="M347 1456L884 171L1423 1456H1587V0H1464V634L1474 1284L932 0H837L297 1279L307 638V0H184V1456H347Z" />
-<glyph unicode="N" horiz-adv-x="1454" d="M1268 0H1145L308 1246V0H184V1456H308L1146 209V1456H1268V0Z" />
-<glyph unicode="O" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q439 -20 282 162T125 655V805Q125 1004 195 1157T395 1393T692 1476T988 1395T1187 1166T1260 823V649ZM1137 807Q1137 1070 1018 1219T692 1368Q489 1368 369 1219T248
-801V649Q248 390 368 239T694 87Q903 87 1020 236T1137 653V807Z" />
-<glyph unicode="P" horiz-adv-x="1261" d="M307 593V0H184V1456H680Q907 1456 1038 1340T1170 1021Q1170 816 1044 705T677 593H307ZM307 697H680Q859 697 953 782T1047 1019Q1047 1170 954 1259T688 1351H307V697Z" />
-<glyph unicode="Q" horiz-adv-x="1386" d="M1256 649Q1256 441 1183 287T973 53L1238 -178L1153 -254L856 3Q774 -20 689 -20Q523 -20 394 62T193 294T121 642V805Q121 1004 191 1157T391 1393T687 1476Q857 1476 986 1394T1185 1159T1256 806V649ZM1133 807Q1133
-1070 1014 1219T687 1368Q485 1368 365 1219T244 801V649Q244 390 363 239T689 87Q897 87 1015 236T1133 652V807Z" />
-<glyph unicode="R" horiz-adv-x="1300" d="M728 606H305V0H181V1456H654Q887 1456 1018 1343T1149 1027Q1149 887 1067 780T847 632L1211 13V0H1080L728 606ZM305 711H682Q837 711 931 799T1025 1027Q1025 1181 927 1266T652 1351H305V711Z" />
-<glyph unicode="S" horiz-adv-x="1213" d="M1008 358Q1008 479 923 549T612 683T282 822Q134 928 134 1100Q134 1267 271 1371T623 1476Q768 1476 882 1420T1060 1264T1123 1041H999Q999 1190 897 1280T623 1371Q456 1371 357 1297T258 1102Q258 991 347 921T632
-798T929 687T1081 549T1132 360Q1132 188 995 84T632 -20Q478 -20 350 35T155 189T88 416H211Q211 262 326 173T632 84Q802 84 905 159T1008 358Z" />
-<glyph unicode="T" horiz-adv-x="1223" d="M1172 1351H673V0H550V1351H52V1456H1172V1351Z" />
-<glyph unicode="U" horiz-adv-x="1346" d="M1187 1456V462Q1186 315 1122 206T942 39T674 -20Q444 -20 306 105T162 453V1456H284V471Q284 287 389 186T674 84T958 186T1063 470V1456H1187Z" />
-<glyph unicode="V" horiz-adv-x="1263" d="M623 180L631 149L640 180L1098 1456H1233L691 0H573L31 1456H165L623 180Z" />
-<glyph unicode="W" horiz-adv-x="1836" d="M453 393L498 167L553 383L869 1456H980L1292 383L1346 165L1394 393L1657 1456H1783L1410 0H1292L962 1139L925 1283L889 1139L551 0H433L61 1456H187L453 393Z" />
-<glyph unicode="X" horiz-adv-x="1253" d="M627 840L1037 1456H1184L702 738L1199 0H1051L627 636L201 0H55L553 738L70 1456H217L627 840Z" />
-<glyph unicode="Y" horiz-adv-x="1226" d="M611 662L1056 1456H1198L672 548V0H549V548L24 1456H170L611 662Z" />
-<glyph unicode="Z" horiz-adv-x="1225" d="M239 104H1138V0H90V93L954 1351H116V1456H1106V1368L239 104Z" />
-<glyph unicode="[" horiz-adv-x="491" d="M493 1562H283V-210H493V-312H163V1664H493V1562Z" />
-<glyph unicode="\" horiz-adv-x="807" d="M48 1456H165L773 -125H656L48 1456Z" />
-<glyph unicode="]" horiz-adv-x="491" d="M0 1664H331V-312H0V-210H211V1562H0V1664Z" />
-<glyph unicode="^" horiz-adv-x="852" d="M421 1298L193 729H77L376 1456H466L764 729H648L421 1298Z" />
-<glyph unicode="_" horiz-adv-x="884" d="M882 -101H1V0H882V-101Z" />
-<glyph unicode="`" horiz-adv-x="585" d="M438 1256H329L103 1536H247L438 1256Z" />
-<glyph unicode="a" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826 1012T934
-759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86Z" />
-<glyph unicode="b" d="M1027 530Q1027 277 915 129T614 -20Q388 -20 272 148L267 0H155V1536H274V925Q388 1102 612 1102Q804 1102 915 956T1027 548V530ZM907 551Q907 765 824 881T590 998Q475 998 395 942T274 776V288Q364 84 592 84Q740 84 823 201T907 551Z" />
-<glyph unicode="c" horiz-adv-x="1055" d="M556 81Q681 81 765 151T857 334H972Q967 235 910 154T759 26T556 -20Q343 -20 219 128T94 526V562Q94 722 150 845T310 1035T555 1102Q733 1102 848 996T972 717H857Q849 844 766 922T555 1000Q393 1000 304 883T214
-555V520Q214 313 303 197T556 81Z" />
-<glyph unicode="d" horiz-adv-x="1138" d="M108 551Q108 803 220 952T526 1102Q745 1102 860 929V1536H979V0H867L862 144Q747 -20 524 -20Q337 -20 223 130T108 537V551ZM229 530Q229 323 312 204T546 84Q767 84 860 279V787Q767 998 548 998Q397 998 313 880T229 530Z" />
-<glyph unicode="e" horiz-adv-x="1058" d="M575 -20Q437 -20 326 48T152 237T90 510V553Q90 709 150 834T319 1030T553 1102Q750 1102 865 968T981 600V533H209V510Q209 326 314 204T580 81Q676 81 749 116T883 228L958 171Q826 -20 575 -20ZM553 1000Q418 1000
-326 901T213 635H862V648Q857 804 773 902T553 1000Z" />
-<glyph unicode="f" horiz-adv-x="678" d="M242 0V984H63V1082H242V1213Q242 1379 326 1468T562 1557Q630 1557 689 1540L680 1440Q630 1452 571 1452Q472 1452 417 1391T362 1216V1082H620V984H362V0H242Z" />
-<glyph unicode="g" horiz-adv-x="1136" d="M108 551Q108 805 220 953T526 1102Q747 1102 862 926L868 1082H980V22Q980 -187 863 -309T546 -431Q433 -431 331 -381T169 -246L236 -174Q363 -330 538 -330Q688 -330 772 -242T859 4V140Q744 -20 524 -20Q336 -20
-222 130T108 535V551ZM229 530Q229 323 312 204T546 84Q767 84 859 282V785Q817 889 738 943T548 998Q397 998 313 880T229 530Z" />
-<glyph unicode="h" horiz-adv-x="1124" d="M275 899Q334 996 426 1049T627 1102Q801 1102 886 1004T972 710V0H853V711Q852 856 792 927T598 998Q487 998 402 929T275 741V0H156V1536H275V899Z" />
-<glyph unicode="i" horiz-adv-x="459" d="M290 0H170V1082H290V0ZM149 1395Q149 1429 171 1452T231 1476T291 1453T314 1395T292 1338T231 1315T171 1338T149 1395Z" />
-<glyph unicode="j" horiz-adv-x="467" d="M285 1082V-129Q285 -279 213 -358T1 -437Q-53 -437 -104 -418L-102 -319Q-58 -332 -12 -332Q166 -332 166 -127V1082H285ZM226 1476Q265 1476 287 1453T309 1395T287 1338T226 1315Q188 1315 167 1338T145 1395T166 1452T226
-1476Z" />
-<glyph unicode="k" horiz-adv-x="1003" d="M413 545L276 413V0H156V1536H276V553L389 675L803 1082H954L495 626L994 0H851L413 545Z" />
-<glyph unicode="l" horiz-adv-x="459" d="M290 0H170V1536H290V0Z" />
-<glyph unicode="m" horiz-adv-x="1815" d="M265 1082L269 906Q329 1004 419 1053T619 1102Q875 1102 944 892Q1002 993 1099 1047T1313 1102Q1661 1102 1668 722V0H1548V713Q1547 858 1486 928T1285 998Q1156 996 1067 915T968 716V0H848V722Q847 861 783 929T584
-998Q471 998 390 934T270 742V0H150V1082H265Z" />
-<glyph unicode="n" horiz-adv-x="1125" d="M270 1082L274 897Q335 997 426 1049T627 1102Q801 1102 886 1004T972 710V0H853V711Q852 856 792 927T598 998Q487 998 402 929T275 741V0H156V1082H270Z" />
-<glyph unicode="o" horiz-adv-x="1147" d="M90 557Q90 713 150 838T321 1032T572 1102Q788 1102 922 951T1056 549V524Q1056 367 996 242T825 48T574 -20Q359 -20 225 131T90 533V557ZM210 524Q210 330 310 206T574 81Q736 81 836 205T937 534V557Q937 681 891
-784T762 943T572 1000Q412 1000 311 875T210 546V524Z" />
-<glyph unicode="p" d="M1026 530Q1026 277 914 129T614 -20Q392 -20 274 136V-416H155V1082H266L272 929Q389 1102 611 1102Q805 1102 915 955T1026 547V530ZM906 551Q906 758 821 878T584 998Q474 998 395 945T274 791V272Q317 179 397 130T586 81Q737 81 821
-201T906 551Z" />
-<glyph unicode="q" horiz-adv-x="1142" d="M108 551Q108 805 220 953T528 1102Q747 1102 861 935L867 1082H979V-416H859V134Q741 -20 526 -20Q336 -20 222 130T108 535V551ZM229 530Q229 320 313 201T548 81Q763 81 859 268V798Q814 895 735 947T550 1000Q399
-1000 314 881T229 530Z" />
-<glyph unicode="r" horiz-adv-x="689" d="M656 980Q618 987 575 987Q463 987 386 925T275 743V0H156V1082H273L275 910Q370 1102 580 1102Q630 1102 659 1089L656 980Z" />
-<glyph unicode="s" horiz-adv-x="1037" d="M804 275Q804 364 733 418T517 502T294 572T176 669T137 807Q137 935 244 1018T518 1102Q699 1102 808 1013T918 779H798Q798 874 719 937T518 1000Q400 1000 329 948T257 811Q257 730 316 686T533 604T769 525T886 424T924
-281Q924 144 814 62T525 -20Q336 -20 219 71T101 303H221Q228 198 309 140T525 81Q650 81 727 136T804 275Z" />
-<glyph unicode="t" horiz-adv-x="658" d="M342 1359V1082H566V984H342V263Q342 173 374 129T483 85Q513 85 580 95L585 -3Q538 -20 457 -20Q334 -20 278 51T222 262V984H23V1082H222V1359H342Z" />
-<glyph unicode="u" horiz-adv-x="1125" d="M852 137Q744 -20 507 -20Q334 -20 244 80T152 378V1082H271V393Q271 84 521 84Q781 84 850 299V1082H970V0H854L852 137Z" />
-<glyph unicode="v" horiz-adv-x="985" d="M493 165L822 1082H945L541 0H444L38 1082H161L493 165Z" />
-<glyph unicode="w" horiz-adv-x="1544" d="M415 249L433 156L457 254L717 1082H819L1076 261L1104 147L1127 252L1349 1082H1473L1158 0H1056L778 858L765 917L752 857L479 0H377L63 1082H186L415 249Z" />
-<glyph unicode="x" horiz-adv-x="996" d="M496 643L788 1082H930L563 551L946 0H805L497 458L189 0H48L430 551L63 1082H204L496 643Z" />
-<glyph unicode="y" horiz-adv-x="973" d="M499 172L815 1082H944L482 -184L458 -240Q369 -437 183 -437Q140 -437 91 -423L90 -324L152 -330Q240 -330 294 -287T387 -137L440 9L32 1082H163L499 172Z" />
-<glyph unicode="z" horiz-adv-x="996" d="M235 101H938V0H87V88L743 979H107V1082H894V993L235 101Z" />
-<glyph unicode="{" horiz-adv-x="676" d="M637 -404Q469 -354 384 -241T299 59V280Q299 543 68 543V647Q299 647 299 908V1137Q300 1320 384 1433T637 1597L663 1518Q419 1440 419 1127V914Q419 668 235 595Q419 518 419 277V49Q423 -243 666 -324L637 -404Z" />
-<glyph unicode="|" horiz-adv-x="452" d="M279 -270H178V1456H279V-270Z" />
-<glyph unicode="}" horiz-adv-x="676" d="M9 -324Q252 -243 256 49V273Q256 526 449 594Q256 662 256 913V1126Q256 1442 12 1518L38 1597Q209 1546 292 1432T376 1131V908Q376 647 607 647V543Q376 543 376 280V59Q376 -128 291 -241T38 -404L9 -324Z" />
-<glyph unicode="~" horiz-adv-x="1402" d="M1254 764Q1254 615 1171 519T958 423Q886 423 824 450T670 558T535 659T441 680Q352 680 303 621T253 450L145 449Q145 598 226 692T441 787Q515 787 581 756T740 643Q807 580 855 555T958 529Q1046 529 1098 592T1150
-764H1254Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="498" />
-<glyph unicode="&#xa1;" horiz-adv-x="452" d="M174 690H285L292 -359H168L174 690ZM305 1022Q305 988 283 965T223 942T163 965T140 1022T162 1079T223 1102T283 1079T305 1022Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1115" d="M581 81Q704 81 788 150T882 334H997Q989 195 887 97T636 -17V-245H516V-16Q331 7 225 150T119 526V562Q119 784 224 929T516 1098V1318H636V1099Q791 1083 891 978T997 717H882Q874 844 791 922T580 1000Q418 1000
-329 883T239 555V520Q239 313 328 197T581 81Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1170" d="M404 645L413 368Q415 194 349 104H1094V0H97V104H195Q246 117 272 211Q292 285 290 367L281 645H93V749H277L268 1039Q268 1239 378 1357T674 1476Q856 1476 961 1371T1067 1088H944Q944 1223 869 1297T665 1371Q540
-1371 466 1283T392 1039L401 749H745V645H404Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1481" d="M1131 133Q1053 61 953 21T740 -20Q514 -20 349 132L194 -26L109 60L268 221Q144 389 144 608Q144 835 277 1006L109 1177L194 1264L361 1094Q526 1234 740 1234T1119 1092L1289 1265L1375 1177L1204 1002Q1334
-832 1334 608Q1334 393 1212 224L1375 60L1289 -27L1131 133ZM257 608Q257 470 321 350T499 161T740 91Q869 91 981 161T1157 350T1221 608Q1221 747 1156 866T979 1054T740 1122T500 1054T323 867T257 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1056" d="M527 731L892 1456H1030L631 705H944V616H586V412H944V324H586V0H463V324H109V412H463V616H109V705H422L24 1456H163L527 731Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="444" d="M159 -270V501H279V-270H159ZM279 698H159V1456H279V698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1239" d="M1119 431Q1119 331 1058 262T887 159Q978 111 1026 41T1075 -139Q1075 -303 949 -399T606 -495Q497 -495 401 -467T236 -382Q102 -268 102 -64L222 -62Q222 -218 325 -305T606 -393Q766 -393 860 -324T954 -141Q954
--64 920 -17T805 69T548 156T284 255T153 378T108 551Q108 651 166 721T331 825Q245 872 199 942T153 1120Q153 1281 282 1378T624 1476Q848 1476 972 1363T1097 1045H977Q977 1191 881 1282T624 1374Q459 1374 366 1306T273 1122Q273 1043 304 996T411 911T646
-828Q842 777 936 726T1075 603T1119 431ZM454 771Q346 758 287 700T228 553Q228 470 263 422T379 336T663 242L755 214Q867 227 933 284T999 428Q999 526 932 585T692 700L454 771Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="881" d="M137 1396Q137 1430 159 1453T219 1477T279 1454T302 1396Q302 1363 280 1340T219 1317T159 1340T137 1396ZM575 1395Q575 1429 597 1452T657 1476T717 1453T740 1395Q740 1362 718 1339T657 1316T597 1339T575 1395Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1637" d="M1121 607Q1121 455 1039 374T807 293T566 399T474 686V776Q474 950 566 1056T807 1163T1039 1083T1122 850H1023Q1023 1074 807 1074Q701 1074 637 993T573 771V680Q573 546 636 465T807 383Q913 383 967 436T1022
-607H1121ZM192 729Q192 553 273 399T502 155T817 65Q984 65 1129 154T1357 396T1441 729Q1441 907 1358 1059T1130 1300T817 1389Q646 1389 499 1298T272 1055T192 729ZM107 729Q107 931 200 1104T459 1376T817 1476T1174 1377T1432 1104T1526 729Q1526 532 1436
-360T1181 84T817 -21Q620 -21 455 82T198 358T107 729Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="906" d="M649 705Q634 748 628 799Q541 691 406 691Q289 691 223 749T157 908Q157 1018 240 1079T486 1140H625V1201Q625 1286 585 1333T464 1380Q374 1380 323 1345T271 1237L164 1243Q164 1345 247 1410T464 1476Q588 1476
-661 1405T734 1199V884Q734 792 760 705H649ZM426 786Q479 786 536 816T625 890V1058H496Q266 1058 266 912Q266 786 426 786Z" />
-<glyph unicode="&#xab;" horiz-adv-x="933" d="M247 792L523 404H418L123 783V802L418 1181H523L247 792ZM556 536L832 148H727L432 527V546L727 925H832L556 536Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1117" d="M936 386H816V670H124V776H936V386Z" />
-<glyph unicode="&#xad;" horiz-adv-x="586" d="M528 592H49V693H528V592Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1642" d="M102 729Q102 931 195 1104T454 1376T812 1476T1169 1377T1428 1104T1522 729Q1522 530 1431 358T1175 83T812 -21T450 82T193 358T102 729ZM187 729Q187 550 270 396T499 154T812 65T1125 153T1353 396T1436 729Q1436
-905 1355 1057T1129 1299T812 1389Q644 1389 499 1301T270 1060T187 729ZM650 666V321H552V1160H810Q957 1160 1036 1099T1115 912Q1115 779 974 715Q1046 689 1074 635T1102 504T1106 394T1119 337V321H1017Q1003 357 1003 503Q1003 592 966 629T838 666H650ZM650
-757H831Q912 757 964 799T1017 910Q1017 995 974 1031T824 1070H650V757Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="874" d="M756 1343H137V1440H756V1343Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="774" d="M630 1226Q630 1122 559 1051T388 980Q287 980 215 1051T143 1226T216 1402T388 1476T558 1403T630 1226ZM233 1226Q233 1159 277 1115T388 1071T497 1115T540 1226Q540 1295 497 1340T388 1385Q323 1385 278 1340T233
-1226Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1085" d="M609 829H1000V727H609V289H498V727H84V829H498V1267H609V829ZM963 0H128V101H963V0Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="740" d="M667 665H96V740L416 1054Q522 1164 522 1237Q522 1300 482 1338T362 1377Q275 1377 228 1333T181 1215H76Q76 1323 155 1394T360 1465T557 1403T628 1239Q628 1138 510 1016L455 961L229 752H667V665Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="740" d="M267 1107H353Q434 1109 481 1145T529 1241Q529 1303 486 1340T362 1377Q286 1377 238 1340T190 1245H85Q85 1341 163 1403T361 1465Q489 1465 562 1405T635 1243Q635 1187 597 1140T489 1069Q651 1027 651 880Q651
-778 572 716T363 654Q234 654 153 717T71 884H177Q177 822 229 782T366 741Q453 741 499 779T546 883Q546 1025 340 1025H267V1107Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="576" d="M315 1536H460L229 1256H124L315 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1140" d="M281 1082V446Q281 266 344 174T544 81Q676 81 753 138T859 312V1082H979V0H870L863 154Q765 -20 552 -20Q368 -20 281 105V-416H162V1082H281Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="973" d="M681 0V520H573Q423 520 312 578T142 742T83 988Q83 1201 216 1328T577 1456H801V0H681Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="503" d="M163 717Q163 752 185 776T247 800T310 776T333 717T310 659T247 635T185 658T163 717Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="498" d="M246 0L234 -64Q399 -85 399 -235Q399 -327 320 -381T105 -435L98 -357Q187 -357 243 -325T300 -237Q300 -179 257 -157T124 -127L153 0H246Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="740" d="M464 665H358V1328L126 1258V1348L450 1455H464V665Z" />
-<glyph unicode="&#xba;" horiz-adv-x="922" d="M135 1132Q135 1285 223 1380T458 1476Q605 1476 693 1381T782 1127V1033Q782 880 694 785T460 690Q313 690 224 784T135 1038V1132ZM243 1033Q243 919 299 852T460 785Q559 785 616 851T674 1037V1132Q674 1247
-616 1313T458 1380T301 1312T243 1127V1033Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="928" d="M221 944L516 560V541L221 162H115L391 550L115 944H221ZM540 944L835 560V541L540 162H434L710 550L434 944H540Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1484" d="M453 664H347V1327L115 1257V1347L439 1454H453V664ZM414 129L340 177L1051 1315L1125 1267L414 129ZM1272 275H1399V187H1272V0H1167V187H768L764 253L1161 789H1272V275ZM878 275H1167V659L1136 609L878 275Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1548" d="M370 129L296 177L1007 1315L1081 1267L370 129ZM438 664H332V1327L100 1257V1347L424 1454H438V664ZM1436 0H865V75L1185 389Q1291 499 1291 572Q1291 635 1251 673T1131 712Q1044 712 997 668T950 550H845Q845
-658 924 729T1129 800T1326 738T1397 574Q1397 473 1279 351L1224 296L998 87H1436V0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1590" d="M558 129L484 177L1195 1315L1269 1267L558 129ZM1387 275H1514V187H1387V0H1282V187H883L879 253L1276 789H1387V275ZM993 275H1282V659L1251 609L993 275ZM314 1107H400Q481 1109 528 1145T576 1241Q576 1303
-533 1340T409 1377Q333 1377 285 1340T237 1245H132Q132 1341 210 1403T408 1465Q536 1465 609 1405T682 1243Q682 1187 644 1140T536 1069Q698 1027 698 880Q698 778 619 716T410 654Q281 654 200 717T118 884H224Q224 822 276 782T413 741Q500 741 546 779T593
-883Q593 1025 387 1025H314V1107Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="940" d="M551 687Q549 564 524 505T405 352T288 228Q207 123 207 -8Q207 -137 274 -207T469 -277Q588 -277 659 -207T732 -20H852Q850 -186 745 -284T469 -383Q291 -383 190 -283T88 -10Q88 101 141 202T337 438Q422 509
-429 618L431 687H551ZM567 1022Q567 988 545 965T485 941T425 964T402 1022Q402 1055 424 1078T485 1101T545 1078T567 1022Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513ZM716 1571H607L381 1851H525L716 1571Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513ZM762 1851H907L676 1571H571L762 1851Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513ZM921 1583V1573H810L642 1756L475 1573H366V1586L604 1841H680L921 1583Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513ZM983 1809Q983 1713 927 1655T788 1596Q712 1596 640 1651T510 1706Q463 1706 432 1675T400 1588L310 1591Q310 1683 364
-1743T505 1803Q553 1803 587 1786T651 1748T711 1710T783 1693Q829 1693 861 1726T894 1815L983 1809Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513ZM343 1711Q343 1745 365 1768T425 1792T485 1769T508 1711Q508 1678 486 1655T425 1632T365 1655T343 1711ZM781 1710Q781
-1744 803 1767T863 1791T923 1768T946 1710Q946 1677 924 1654T863 1631T803 1654T781 1710Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1279" d="M970 408H309L159 0H30L581 1456H698L1249 0H1121L970 408ZM347 513H931L639 1306L347 513ZM450 1715Q450 1795 506 1850T643 1905Q722 1905 779 1850T836 1715Q836 1636 781 1582T643 1528T505 1582T450 1715ZM527
-1715Q527 1665 560 1632T643 1599Q692 1599 726 1631T760 1715Q760 1768 725 1801T643 1834Q594 1834 561 1800T527 1715Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1865" d="M1823 0H1006L989 389H393L163 0H17L898 1456H1762V1354H1068L1091 809H1680V707H1095L1121 101H1823V0ZM460 502H985L950 1331L460 502Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1330" d="M1215 454Q1190 224 1051 102T679 -20Q517 -20 393 61T200 290T131 630V819Q131 1013 199 1163T394 1394T688 1476Q922 1476 1057 1350T1215 1000H1091Q1045 1371 688 1371Q490 1371 373 1223T255 814V636Q255 384
-369 234T679 84Q872 84 970 176T1091 454H1215ZM728 -9L716 -73Q881 -94 881 -244Q881 -336 802 -390T587 -444L580 -366Q669 -366 725 -334T782 -246Q782 -188 739 -166T606 -136L635 -9H728Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1165" d="M988 698H307V104H1090V0H184V1456H1085V1351H307V802H988V698ZM693 1577H584L358 1857H502L693 1577Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1165" d="M988 698H307V104H1090V0H184V1456H1085V1351H307V802H988V698ZM739 1857H884L653 1577H548L739 1857Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1165" d="M988 698H307V104H1090V0H184V1456H1085V1351H307V802H988V698ZM898 1589V1579H787L619 1762L452 1579H343V1592L581 1847H657L898 1589Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1165" d="M988 698H307V104H1090V0H184V1456H1085V1351H307V802H988V698ZM320 1717Q320 1751 342 1774T402 1798T462 1775T485 1717Q485 1684 463 1661T402 1638T342 1661T320 1717ZM758 1716Q758 1750 780 1773T840 1797T900
-1774T923 1716Q923 1683 901 1660T840 1637T780 1660T758 1716Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="545" d="M334 0H211V1456H334V0ZM348 1577H239L13 1857H157L348 1577Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="545" d="M334 0H211V1456H334V0ZM393 1857H538L307 1577H202L393 1857Z" />
-<glyph unicode="&#xce;" horiz-adv-x="545" d="M334 0H211V1456H334V0ZM553 1589V1579H442L274 1762L107 1579H-2V1592L236 1847H312L553 1589Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="545" d="M334 0H211V1456H334V0ZM-25 1717Q-25 1751 -3 1774T57 1798T117 1775T140 1717Q140 1684 118 1661T57 1638T-3 1661T-25 1717ZM413 1716Q413 1750 435 1773T495 1797T555 1774T578 1716Q578 1683 556 1660T495 1637T435
-1660T413 1716Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1371" d="M214 0V689H33V791H214V1456H621Q800 1456 942 1375T1163 1141T1243 795V661Q1243 466 1164 315T942 82T612 0H214ZM645 689H337V104H608Q843 104 982 256T1121 669V797Q1121 1048 984 1199T623 1351H337V791H645V689Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1454" d="M1268 0H1145L308 1246V0H184V1456H308L1146 209V1456H1268V0ZM1067 1809Q1067 1713 1011 1655T872 1596Q796 1596 724 1651T594 1706Q547 1706 516 1675T484 1588L394 1591Q394 1683 448 1743T589 1803Q637 1803
-671 1786T735 1748T795 1710T867 1693Q913 1693 945 1726T978 1815L1067 1809Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q439 -20 282 162T125 655V805Q125 1004 195 1157T395 1393T692 1476T988 1395T1187 1166T1260 823V649ZM1137 807Q1137 1070 1018 1219T692 1368Q489 1368 369 1219T248
-801V649Q248 390 368 239T694 87Q903 87 1020 236T1137 653V807ZM765 1583H656L430 1863H574L765 1583Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q439 -20 282 162T125 655V805Q125 1004 195 1157T395 1393T692 1476T988 1395T1187 1166T1260 823V649ZM1137 807Q1137 1070 1018 1219T692 1368Q489 1368 369 1219T248
-801V649Q248 390 368 239T694 87Q903 87 1020 236T1137 653V807ZM811 1863H956L725 1583H620L811 1863Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q439 -20 282 162T125 655V805Q125 1004 195 1157T395 1393T692 1476T988 1395T1187 1166T1260 823V649ZM1137 807Q1137 1070 1018 1219T692 1368Q489 1368 369 1219T248
-801V649Q248 390 368 239T694 87Q903 87 1020 236T1137 653V807ZM970 1595V1585H859L691 1768L524 1585H415V1598L653 1853H729L970 1595Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q439 -20 282 162T125 655V805Q125 1004 195 1157T395 1393T692 1476T988 1395T1187 1166T1260 823V649ZM1137 807Q1137 1070 1018 1219T692 1368Q489 1368 369 1219T248
-801V649Q248 390 368 239T694 87Q903 87 1020 236T1137 653V807ZM1032 1821Q1032 1725 976 1667T837 1608Q761 1608 689 1663T559 1718Q512 1718 481 1687T449 1600L359 1603Q359 1695 413 1755T554 1815Q602 1815 636 1798T700 1760T760 1722T832 1705Q878 1705
-910 1738T943 1827L1032 1821Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q439 -20 282 162T125 655V805Q125 1004 195 1157T395 1393T692 1476T988 1395T1187 1166T1260 823V649ZM1137 807Q1137 1070 1018 1219T692 1368Q489 1368 369 1219T248
-801V649Q248 390 368 239T694 87Q903 87 1020 236T1137 653V807ZM392 1723Q392 1757 414 1780T474 1804T534 1781T557 1723Q557 1690 535 1667T474 1644T414 1667T392 1723ZM830 1722Q830 1756 852 1779T912 1803T972 1780T995 1722Q995 1689 973 1666T912 1643T852
-1666T830 1722Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1072" d="M93 179L451 544L108 894L187 974L529 624L872 974L951 894L608 544L966 179L887 100L529 464L172 100L93 179Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1386" d="M1260 649Q1260 448 1191 296T992 62T694 -20Q508 -20 375 77L274 -83H170L307 134Q125 318 125 658V805Q125 1004 195 1157T395 1393T692 1476Q916 1476 1064 1336L1171 1505H1274L1125 1268Q1259 1088 1260 807V649ZM248
-649Q248 388 370 235L1002 1237Q883 1368 692 1368Q489 1368 369 1219T248 801V649ZM1137 807Q1137 1018 1057 1160L434 171Q541 87 694 87Q903 87 1020 236T1137 653V807Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1346" d="M1187 1456V462Q1186 315 1122 206T942 39T674 -20Q444 -20 306 105T162 453V1456H284V471Q284 287 389 186T674 84T958 186T1063 470V1456H1187ZM756 1571H647L421 1851H565L756 1571Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1346" d="M1187 1456V462Q1186 315 1122 206T942 39T674 -20Q444 -20 306 105T162 453V1456H284V471Q284 287 389 186T674 84T958 186T1063 470V1456H1187ZM802 1851H947L716 1571H611L802 1851Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1346" d="M1187 1456V462Q1186 315 1122 206T942 39T674 -20Q444 -20 306 105T162 453V1456H284V471Q284 287 389 186T674 84T958 186T1063 470V1456H1187ZM961 1583V1573H850L682 1756L515 1573H406V1586L644 1841H720L961 1583Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1346" d="M1187 1456V462Q1186 315 1122 206T942 39T674 -20Q444 -20 306 105T162 453V1456H284V471Q284 287 389 186T674 84T958 186T1063 470V1456H1187ZM383 1711Q383 1745 405 1768T465 1792T525 1769T548 1711Q548 1678
-526 1655T465 1632T405 1655T383 1711ZM821 1710Q821 1744 843 1767T903 1791T963 1768T986 1710Q986 1677 964 1654T903 1631T843 1654T821 1710Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1226" d="M611 662L1056 1456H1198L672 548V0H549V548L24 1456H170L611 662ZM732 1845H877L646 1565H541L732 1845Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1214" d="M303 1456V1152H628Q771 1152 877 1101T1039 956T1096 738Q1096 553 974 441T641 324H303V0H183V1456H303ZM303 1051V425H627Q784 425 880 510T976 736T885 961T642 1051H303Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1200" d="M271 0H151V1127Q151 1327 246 1435T512 1544Q665 1544 760 1460T856 1237Q856 1179 843 1131T794 1019T746 913T733 824Q733 768 774 716T911 593T1051 454T1096 306Q1096 160 990 70T720 -20Q636 -20 545 4T414
-60L448 161Q485 132 562 106T706 80Q828 80 902 144T976 306Q976 367 932 423T797 547T659 681T613 826Q613 922 676 1034T739 1230Q739 1323 676 1382T522 1442Q275 1442 271 1136V0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826
-1012T934 759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86ZM653 1256H544L318 1536H462L653 1256Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826
-1012T934 759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86ZM699 1536H844L613 1256H508L699 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826
-1012T934 759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86ZM858 1268V1258H747L579 1441L412 1258H303V1271L541 1526H617L858 1268Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826
-1012T934 759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86ZM920 1494Q920 1398 864 1340T725 1281Q649 1281 577 1336T447 1391Q400 1391 369 1360T337 1273L247 1276Q247 1368 301 1428T442
-1488Q490 1488 524 1471T588 1433T648 1395T720 1378Q766 1378 798 1411T831 1500L920 1494Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826
-1012T934 759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86ZM280 1396Q280 1430 302 1453T362 1477T422 1454T445 1396Q445 1363 423 1340T362 1317T302 1340T280 1396ZM718 1395Q718 1429
-740 1452T800 1476T860 1453T883 1395Q883 1362 861 1339T800 1316T740 1339T718 1395Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1097" d="M839 0Q821 51 816 151Q753 69 656 25T449 -20Q293 -20 197 67T100 287Q100 445 231 537T598 629H815V752Q815 868 744 934T535 1001Q410 1001 328 937T246 783L126 784Q126 913 246 1007T541 1102Q722 1102 826
-1012T934 759V247Q934 90 967 12V0H839ZM463 86Q583 86 677 144T815 299V537H601Q422 535 321 472T220 297Q220 206 287 146T463 86ZM387 1400Q387 1480 443 1535T580 1590Q659 1590 716 1535T773 1400Q773 1321 718 1267T580 1213T442 1267T387 1400ZM464 1400Q464
-1350 497 1317T580 1284Q629 1284 663 1316T697 1400Q697 1453 662 1486T580 1519Q531 1519 498 1485T464 1400Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1732" d="M1265 -20Q1126 -20 1027 34T867 186Q807 88 693 34T440 -20Q271 -20 178 64T85 293Q85 450 195 539T511 632H781V720Q781 852 718 926T528 1000Q398 1000 315 935T232 765L113 778Q113 922 229 1012T528 1102Q653
-1102 741 1049T870 889Q930 989 1024 1045T1235 1102Q1431 1102 1543 982T1658 644V538H901V509Q901 308 997 195T1265 81Q1450 81 1589 199L1636 112Q1491 -20 1265 -20ZM458 80Q549 80 642 126T781 236V536H525Q388 536 302 475T207 309L206 289Q206 192 271
-136T458 80ZM1235 1000Q1103 1000 1013 902T904 636H1539V667Q1539 821 1459 910T1235 1000Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1055" d="M556 81Q681 81 765 151T857 334H972Q967 235 910 154T759 26T556 -20Q343 -20 219 128T94 526V562Q94 722 150 845T310 1035T555 1102Q733 1102 848 996T972 717H857Q849 844 766 922T555 1000Q393 1000 304 883T214
-555V520Q214 313 303 197T556 81ZM589 -9L577 -73Q742 -94 742 -244Q742 -336 663 -390T448 -444L441 -366Q530 -366 586 -334T643 -246Q643 -188 600 -166T467 -136L496 -9H589Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1058" d="M575 -20Q437 -20 326 48T152 237T90 510V553Q90 709 150 834T319 1030T553 1102Q750 1102 865 968T981 600V533H209V510Q209 326 314 204T580 81Q676 81 749 116T883 228L958 171Q826 -20 575 -20ZM553 1000Q418
-1000 326 901T213 635H862V648Q857 804 773 902T553 1000ZM640 1256H531L305 1536H449L640 1256Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1058" d="M575 -20Q437 -20 326 48T152 237T90 510V553Q90 709 150 834T319 1030T553 1102Q750 1102 865 968T981 600V533H209V510Q209 326 314 204T580 81Q676 81 749 116T883 228L958 171Q826 -20 575 -20ZM553 1000Q418
-1000 326 901T213 635H862V648Q857 804 773 902T553 1000ZM686 1536H831L600 1256H495L686 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1058" d="M575 -20Q437 -20 326 48T152 237T90 510V553Q90 709 150 834T319 1030T553 1102Q750 1102 865 968T981 600V533H209V510Q209 326 314 204T580 81Q676 81 749 116T883 228L958 171Q826 -20 575 -20ZM553 1000Q418
-1000 326 901T213 635H862V648Q857 804 773 902T553 1000ZM845 1268V1258H734L566 1441L399 1258H290V1271L528 1526H604L845 1268Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1058" d="M575 -20Q437 -20 326 48T152 237T90 510V553Q90 709 150 834T319 1030T553 1102Q750 1102 865 968T981 600V533H209V510Q209 326 314 204T580 81Q676 81 749 116T883 228L958 171Q826 -20 575 -20ZM553 1000Q418
-1000 326 901T213 635H862V648Q857 804 773 902T553 1000ZM267 1396Q267 1430 289 1453T349 1477T409 1454T432 1396Q432 1363 410 1340T349 1317T289 1340T267 1396ZM705 1395Q705 1429 727 1452T787 1476T847 1453T870 1395Q870 1362 848 1339T787 1316T727 1339T705
-1395Z" />
-<glyph unicode="&#xec;" horiz-adv-x="456" d="M288 0H168V1082H288V0ZM305 1244H196L-30 1524H114L305 1244Z" />
-<glyph unicode="&#xed;" horiz-adv-x="456" d="M288 0H168V1082H288V0ZM350 1780H495L264 1500H159L350 1780Z" />
-<glyph unicode="&#xee;" horiz-adv-x="456" d="M288 0H168V1082H288V0ZM510 1256V1246H399L231 1429L64 1246H-45V1259L193 1514H269L510 1256Z" />
-<glyph unicode="&#xef;" horiz-adv-x="456" d="M288 0H168V1082H288V0ZM-68 1384Q-68 1418 -46 1441T14 1465T74 1442T97 1384Q97 1351 75 1328T14 1305T-46 1328T-68 1384ZM370 1383Q370 1417 392 1440T452 1464T512 1441T535 1383Q535 1350 513 1327T452 1304T392
-1327T370 1383Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1191" d="M811 1303Q1049 1053 1055 645V535Q1055 376 999 249T842 51T615 -20Q485 -20 379 41T211 216T149 466Q149 695 268 830T587 965Q687 965 773 927T919 821Q877 1072 709 1240L484 1101L433 1174L639 1302Q502 1408
-296 1475L335 1578Q577 1506 744 1366L938 1487L989 1414L811 1303ZM935 625L933 682Q894 765 807 813T609 861Q448 861 359 756T269 466Q269 363 314 274T438 134T619 83Q760 83 847 207T935 543V625Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1125" d="M270 1082L274 897Q335 997 426 1049T627 1102Q801 1102 886 1004T972 710V0H853V711Q852 856 792 927T598 998Q487 998 402 929T275 741V0H156V1082H270ZM916 1493Q916 1397 860 1339T721 1280Q645 1280 573 1335T443
-1390Q396 1390 365 1359T333 1272L243 1275Q243 1367 297 1427T438 1487Q486 1487 520 1470T584 1432T644 1394T716 1377Q762 1377 794 1410T827 1499L916 1493Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1147" d="M90 557Q90 713 150 838T321 1032T572 1102Q788 1102 922 951T1056 549V524Q1056 367 996 242T825 48T574 -20Q359 -20 225 131T90 533V557ZM210 524Q210 330 310 206T574 81Q736 81 836 205T937 534V557Q937 681
-891 784T762 943T572 1000Q412 1000 311 875T210 546V524ZM645 1256H536L310 1536H454L645 1256Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1147" d="M90 557Q90 713 150 838T321 1032T572 1102Q788 1102 922 951T1056 549V524Q1056 367 996 242T825 48T574 -20Q359 -20 225 131T90 533V557ZM210 524Q210 330 310 206T574 81Q736 81 836 205T937 534V557Q937 681
-891 784T762 943T572 1000Q412 1000 311 875T210 546V524ZM691 1536H836L605 1256H500L691 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1147" d="M90 557Q90 713 150 838T321 1032T572 1102Q788 1102 922 951T1056 549V524Q1056 367 996 242T825 48T574 -20Q359 -20 225 131T90 533V557ZM210 524Q210 330 310 206T574 81Q736 81 836 205T937 534V557Q937 681
-891 784T762 943T572 1000Q412 1000 311 875T210 546V524ZM850 1268V1258H739L571 1441L404 1258H295V1271L533 1526H609L850 1268Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1147" d="M90 557Q90 713 150 838T321 1032T572 1102Q788 1102 922 951T1056 549V524Q1056 367 996 242T825 48T574 -20Q359 -20 225 131T90 533V557ZM210 524Q210 330 310 206T574 81Q736 81 836 205T937 534V557Q937 681
-891 784T762 943T572 1000Q412 1000 311 875T210 546V524ZM912 1493Q912 1397 856 1339T717 1280Q641 1280 569 1335T439 1390Q392 1390 361 1359T329 1272L239 1275Q239 1367 293 1427T434 1487Q482 1487 516 1470T580 1432T640 1394T712 1377Q758 1377 790 1410T823
-1499L912 1493Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1147" d="M90 557Q90 713 150 838T321 1032T572 1102Q788 1102 922 951T1056 549V524Q1056 367 996 242T825 48T574 -20Q359 -20 225 131T90 533V557ZM210 524Q210 330 310 206T574 81Q736 81 836 205T937 534V557Q937 681
-891 784T762 943T572 1000Q412 1000 311 875T210 546V524ZM272 1396Q272 1430 294 1453T354 1477T414 1454T437 1396Q437 1363 415 1340T354 1317T294 1340T272 1396ZM710 1395Q710 1429 732 1452T792 1476T852 1453T875 1395Q875 1362 853 1339T792 1316T732 1339T710
-1395Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1164" d="M1070 644H72V760H1070V644ZM495 1088Q495 1123 517 1147T579 1171T642 1147T665 1088T642 1030T579 1006T517 1029T495 1088ZM495 291Q495 326 517 350T579 374T642 350T665 291T642 233T579 210T517 233T495 291Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1140" d="M89 557Q89 713 149 838T320 1032T571 1102Q685 1102 785 1054L863 1214H957L857 1010Q951 938 1003 821T1055 557V524Q1055 368 994 242T823 48T573 -20Q465 -20 373 21L294 -140H200L299 63Q199 134 144 253T89
-524V557ZM208 524Q208 414 243 319T348 163L737 957Q662 1000 571 1000Q410 1000 309 875T208 546V524ZM935 557Q935 660 902 751T806 905L419 115Q487 81 573 81Q734 81 834 205T935 534V557Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1125" d="M852 137Q744 -20 507 -20Q334 -20 244 80T152 378V1082H271V393Q271 84 521 84Q781 84 850 299V1082H970V0H854L852 137ZM647 1256H538L312 1536H456L647 1256Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1125" d="M852 137Q744 -20 507 -20Q334 -20 244 80T152 378V1082H271V393Q271 84 521 84Q781 84 850 299V1082H970V0H854L852 137ZM693 1536H838L607 1256H502L693 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1125" d="M852 137Q744 -20 507 -20Q334 -20 244 80T152 378V1082H271V393Q271 84 521 84Q781 84 850 299V1082H970V0H854L852 137ZM852 1268V1258H741L573 1441L406 1258H297V1271L535 1526H611L852 1268Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1125" d="M852 137Q744 -20 507 -20Q334 -20 244 80T152 378V1082H271V393Q271 84 521 84Q781 84 850 299V1082H970V0H854L852 137ZM274 1396Q274 1430 296 1453T356 1477T416 1454T439 1396Q439 1363 417 1340T356 1317T296
-1340T274 1396ZM712 1395Q712 1429 734 1452T794 1476T854 1453T877 1395Q877 1362 855 1339T794 1316T734 1339T712 1395Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="973" d="M499 172L815 1082H944L482 -184L458 -240Q369 -437 183 -437Q140 -437 91 -423L90 -324L152 -330Q240 -330 294 -287T387 -137L440 9L32 1082H163L499 172ZM633 1536H778L547 1256H442L633 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1150" d="M1031 530Q1031 277 919 129T618 -20Q397 -20 279 136V-416H159V1536H279V932Q396 1102 616 1102Q808 1102 919 956T1031 548V530ZM911 551Q911 758 826 878T589 998Q479 998 400 945T279 791V270Q321 180 400 131T591
-81Q742 81 826 201T911 551Z" />
-<glyph unicode="&#xff;" horiz-adv-x="973" d="M499 172L815 1082H944L482 -184L458 -240Q369 -437 183 -437Q140 -437 91 -423L90 -324L152 -330Q240 -330 294 -287T387 -137L440 9L32 1082H163L499 172ZM214 1396Q214 1430 236 1453T296 1477T356 1454T379 1396Q379
-1363 357 1340T296 1317T236 1340T214 1396ZM652 1395Q652 1429 674 1452T734 1476T794 1453T817 1395Q817 1362 795 1339T734 1316T674 1339T652 1395Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1334" d="M1417 686H415V788H1417V686Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1580" d="M1462 686H126V788H1462V686Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="364" d="M238 1554L310 1503Q220 1385 217 1249V1121H98V1233Q98 1325 135 1410T238 1554Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="364" d="M133 1099L62 1151Q152 1272 155 1405V1536H273V1435Q273 1226 133 1099Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="353" d="M112 -231L41 -179Q124 -68 132 51L133 205H252V104Q252 -104 112 -231Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="612" d="M239 1554L311 1503Q221 1385 218 1249V1121H99V1233Q99 1325 136 1410T239 1554ZM490 1554L562 1503Q472 1385 469 1249V1121H350V1233Q350 1325 387 1410T490 1554Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="617" d="M139 1099L68 1151Q158 1272 161 1405V1536H279V1435Q279 1226 139 1099ZM383 1099L312 1151Q402 1272 405 1405V1536H523V1435Q523 1226 383 1099Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="593" d="M112 -240L41 -188Q130 -65 133 73V236H252V106Q252 -111 112 -240ZM346 -240L275 -188Q363 -66 366 73V236H486V106Q486 -111 346 -240Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="662" d="M146 752Q146 831 197 881T331 931Q413 931 464 883T517 757V717Q517 636 466 588T332 540Q248 540 197 589T146 719V752Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="609" d="M232 555L508 167H403L108 546V565L403 944H508L232 555Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="609" d="M203 944L498 560V541L203 162H97L373 550L97 944H203Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-300.ttf b/static/fonts/roboto-v18-latin-300.ttf
deleted file mode 100644
index a22188eed36c35e54d3e36f2caa7cc13cfcddb96..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 35468
zcmb?^2V4}#`}fT5-W{Ez7ZndsP(djNV%H=pcI<)`3s?en6a^J~@4eU9qUKn8)M$#D
zSc#@+G{&e&j3uV{OHpp`{m$$ycW3<l-~aphym!p*?e6T%GtWHpw0UMAln~;NgG5Z}
z&0Dn8P1RWlDcXR$gVH-@bUFR^-64b&<I?L)dY5i*rVTJ2CS=YTLg<BzE(ytFy`y&$
zG8)fG_Q3r9BR>k>d7F?inS_Y#296tRN;n~HB4h$9FEe-K;QT2sqTVHB+zz~da&Z4K
zBZ(UcKz&Q_+-q>&gxo{3$FIY)ctVDq88RrpFwjqLL;2Zw{`Zia{)5W1t_>w5{|T<^
z4#5qNJ^FEkj6$8H+K~LQg}ZzAsZ7Z5YN-E6-iU$y2Y=QM*Lhwj^G<&M!jWQx*qe~I
z+54v9{qu7wxz+y(@IA-#;*lf9jJ4&HL4ao@dp>e>&d7-gzC8#j%*OKuM8}?qHGm<J
z=!rY=BEDpV>}B-x^RI95GFnI(JL>t-ogcl+h=sJsv<L~6N`;6fS^R?Fg7`Gak|lxQ
zO<AX&4C={^pDZ4?WiR!Hw|YY`T6}INCPha2MT&lu`cW~GrqW2UhP9FKNnPa^<$db)
zKoAv$3RbJm@?wY1V4Wn4f9WR_TKfup=Lmg?K-Sv+rcF5f-lUPN_wi+r>lx&)fzu0c
zdI8Q-z0Tqhml=7Z((^0}Ewj*s#3ULmn#Gj5$-zN^`luLMd4#@rUVOXSwcEwhl~Sb_
ztD+JTq9SY8Ca80<)R2CsXB6g6f`~;-un1*9h{aH55senNvc#kSF*?8;!VZ4~b`<+R
z3G5{G*Ns)q)3XcM0cCW<>!pCZ5~)g-s-SY{G?W?vs!_Y($OhaT+2ME+&X8TjOF(0b
zEmaaiONr=ckW^-=!aEH|&oYZ=LaCe6Q%_(WH;oqmGK-th638<LmsyC>63XvH0DkmB
zbU<`!WI!a6S!Br^1Ox@)KCU8#-;{Ih2e!9SV;ALTS~Fu{25p!zDC38}y4aLw?FZea
z4ZA33={hBsuIodOXVWbTPuWU(AKd$k9w(HHu_cOD{X!B)iexdqHkv{#9tpgO?r5UB
z)_51RnDE3DXvahpE}|GFgeZ5`?e50X0P4VlU@Q%Dx{NYfs+L)zjHNXlH__6RnAn(@
z)Rekuspg>I;GpP~nCK{dP++ixi$J|0C^{97&4Iz@<htU_B}eWZ`E*~d<-_sY7cSbo
zjP~1{art1*XSWNFY+rPc4j!?vY5K?Ow_o(RaKZTS{Kn%eiwkFu&tExY$7entobtYZ
zc0=hJf-#qGd#szGJB!g4PGU$3sYiwrOKO58O>Mo)(5i+uR%2a{(c)1C1eF>kmnMcd
zT~;$%s-Qm;EY*yqwVdu(F_tDdE<v80&e6Q+sF>6c-nP_Kwc%8I^sgtnSQ?VQ_3y2l
zi;H&jAKar`&XBHMh6=@7|J;th?7=;{=M3)Nb%^5DRyf~QS~Kn4cju&+yt{jzp-<t2
z?ACoI6b>rCK5g%wdFeRJ(e*8yFramI!MK4B6Q$9K;68b_C(>2jCnSQ@B&nc?+I7=d
zm)15~Ldw|DWFOCZ;6tyGMgT4Xv~dxNi%>=l-ueK%DhH{j2!1N9>gaU2n))Q3pTI0i
z&5nnl2u==W#s~}sS{Hq92#Jo>b6kN;0+Q>d(O3f`5iu|%t!`ZvadbtGj3aC3@7uYB
zF6lL*<ouG!8CS=YJ)g93Z?AWoD?@$id~zsh_Vi|*^Lh>#D~1n!r_)+_Yw?o##Y&y!
z@BjVo!(|;Zzm$ia8fSf@eLB728@*-K^vzQI#GQlc3~$q6=wvW!GG2O<+ymFqfo?34
zo#${?<DY82=hsu0s~e+Sr8QO|?*gTkkgv}s{=_J|1qAZ3g;#vR=K@mv{nJ8x1R*HU
z-#^3<BM1vd-YBl}=Cs_V{dNwjGUZ0T(C!<$o_1@~DdEuH%EeDUS0*br+q7>-yU^7P
zj!2X(plm;sZSZHP=HU1+9vUbJhS<9P{;4T~5Ste4?=J}XUrnttU{`kbp6n`<zZxkt
zzO4*Z4s>YWlE%>4KU}3#X+n$k?Ue%x1Q8`wgh^r>a77<tQhB0;PL+6fmxWnKLa4<Z
zXZM6q)KxuA2aa7mL>FKX#aKF2Ib@>kq#<s!d8BgiyKY}y>LxzS%PFFxmHAV0#wg!3
zrAf-?jae;i$ucQPIzl|beNh;ba$p^L2N76A&I5xY{i6NA0sYLvIC?^9F+u4-<q5)r
zkxB%;H<DgsWi?WMrM~1OF#y*Vw}ev3Az6UySk6`gr>FN43zT0|CQe^Jsf@jqBy<#v
z!eP)o-Vzc@siSVR3{?t7C6az8bj)G7mqNxhA{(GtR93NK09Fhj^-{sPwlp?$nebX#
zyJMX?9c#CWPD*OYBo-wRw&}tnE+qp{f-9RzObUsn=K1+TcHSgCmv4o(C*ofii{8Lb
zE7_xR6*dw*j21up81z8(9@-cbaUrrX=wU4Nb2I~zur$<hiB=hf=qN$-Gy0p8{R0ds
zxY8T^0@+oX_}9JLH+~c!+`92VD%}3gwjIKrty|uqLO<n_@*%BH<EW0BX(Q#T^0od2
zB`=;U_x@4-roun0Z8Aji5#3?vFAY@e=m3#U1J9wF5FKlVlu#-<z>)=#-Gveo?Waqv
zZWfLdDr4!dfjZOjk;hOrG&3m-m<S^sW%uw(oYtB4<A*BzUai8pz0e3`$&V>R7C&RD
zyHkz9{4P^_QmMu~Aa&~2<s3(EppjBo`AGUlarU-F%MXtqae4Zu-%r`13=^!qg}RI1
z&z!gQ<f@_zW3C;}{r#|#3K$2Vx1IyWI5JhPY?q@9Mi&jDG61g3m?N!hWI)jbxgVu{
z<OCcJWzc?97-caUOWm9R^)y!IIU!1%?grPQxGP7h#Z)$yR&zW=Cqqiw8KQHWxG06J
z(F7@DnbCB4@!)lxHmz82uyFK+qH_;sj-9jM`K4($#}|IIX8ryXM+(KT)>FDH*!0fq
zQ73Y5oE%yjA9K9q#DgIxis!$#dG#_V)dG17{nHk7?E#L_M(uqU-GQ?Y-fVYCZFZ^P
zfR`z@l<7#ao8FVP%A4n6%?OI-LmyNZ>1Pm!+`nIF?ILWOZXGU!r_wKTlqGazbFsX<
zy4VcLHzm6vy@CNp6*5!~kEn{WRA4C3PBl95#)UT<Db(mfg9hr&U^67he%=hZ7H?x|
zpc9k^V`;eKQm(?YgSiAmLLCFy_^X0E)*Q@~6jdA<zDXBuSQncMHlBU-;OYlY{Kok0
zUc6zmysq2imck?9+z2JGqm6v|qw>Y+m21x(-EtwW3B%_!w8Kqzf&`Ojk|T@Nsxxq)
z(}vhbJ|9h5dwkIzU)COCbY@_(8{ta0TY{`}W4}s69MD^QjinKeOQ1R^+C)S~{j3=f
zvLrRtNUDoq4v?^Fd&IUr%1h-7W25)SoVh>j+?3Ci7jzI!zcu=7<i{Hp?BB0DF;uy%
zJnPa+`Rl7i52nzBUkmAMx?i%cn>{4=gJ19L*;j@>Y7biRKp*Le`89lk_Y`Z4&b4!h
zok36<&G@q9VO=&!7*_s?cuM#7i<P=Ix!~c$fHilFz+gzNcrsnCR=W<v8?-UlOgKi^
zu@?x01!~yibjnDxmOGQrmRcB*wb+Qn;ZR1cezk;AF5NEH3P(2CH@p_h4SD5+MoZwU
z;}DvwHt3jc%T*dvu$U5K(i<68@k>>6+3))^@+PlQKEG~VHYKm*XIk>O^GC|HGw*L+
ze==tOtT}u3%$@zNRDaaLT5)G4pSbnS$>NXVY8@PP_^TV`E9bnoPkHpt4zb0gU0bJ@
zY}m+XD9836@d>aILaLGea@FcF4Bo12n5k&@1Qt9sEcoNXpJ74tXCsi=QvR;g?<z-N
zxHzkFpdYT7F$JEHkYA9IL`J8XtC8wZ)9flO6t%I<J{VE_!H^N>r`>w4Sd?ACv=&5)
zQQ1>?y2kO1i;lb}Z0kF?<ld|$Po{&Ce#}$GDPxC7)b#P<(Jk)$=Z6Ekz9TjpnF2W+
zFQq|e_y2`3iEsN=T#x%q2Z+S|SlszRTn`E}!rEpO_k%b`YKZGbGBLQJeNKcIjz$Xx
zE|Xjp07ijMx(Eh34T4=9R3;oNKPxsA7As#&rbYefL}-NqSxL8vUyHjyg$C3QCSnm`
zg(j2|#~`zSfk=)^;Ed@sNaEM!ABb<VBsLyqeL0N5TugovKa&~*=42IEZjAs~mm#h*
zFw@hbOK^phGB|0f_?ET4*uMOru$(3oDYN=3Gm8OfSKHrWThK))=%TIcuF{1&vsl!M
zT;!Ez+LcyzXgEwygYE(`<s?thnkJH+=S5ctQGF0hc~zi7?9f7?(Yg9nXO1siE{qqx
z*}d=lfVrb)$Hm6ft{oE_M^}tn@^PpBO(rd#Td?EoXZ!L_P40JCk)7=QQA$JokGch<
zE_sub$kpCz&f1P~-3*Y&C0NX=KBdVThXu>%+F)jaM>g^kWHKAM4V=tzST|;4X%)d?
z)5T#dJ6)o=O&ynLt`9V)m{?|xq%{%H#t>1@Ms%7#iHwp2!Czt*A#7Mw69WAGtC^D}
zf67EdS^yjKg8m!bfc>NUPYlfaV8J|p-|?sO+mCH;_Q>c_wAMX9*{N*3uI&FLbR%ti
ztGC>!YW+(?UMOo0dU<_IOa5b{1NOc=;n}mz@yyz9^%}9goj{kroSobIqu(!Yw=Ir)
z!+LIP$!}NaO1kzsj0QJl>XrEDjxpx%=`LD{2GjkIzf^J+Iw;>JNJ*v2XN-O$z?HuT
zS2jR~ca=Rny%=txYf5&ia2NoZ(}^)@rr&T&kfGR3;=~B$+llC94}O;sy9o7`ac?SK
zu)e)&st{Ws#Fmu55Lzj>=^AASJWCw~Du%%kMveiRae&4L+{;8p%0grmg9o;^A3QwF
zfuPc=i(IczF+(X=_(BupgizY2)YmcQWH;YXRuCkm(Q%h40#0^mVv^Y}lKY?Ryqn^Z
z%k%1ys#X<wj2?LOd(qod*8g)ySwTl_I$pX#nMpgY+w)$ja#?5j@Z_jn)hd59<-?o8
zN$b9?i)U{fEY6>~U?#@(bjYaF7=4w=o3dCX0>G#(aq+HH=<;61Qhz5n!GoPVDZr^-
z0{IECsVV*#Wl~5q@Fe)bpk$;coeooeez@(QIdqO~=OgMHTwF(4f9~-QAAk5s2tD`X
z^KG=|=~Exk`0dv3=osaO@=`8WzBqmyw7{@`3fT9ASFM#C6db}(7G#7j{XbxxA<@eT
zR-oA1ajD`|@(&6M6r^Z|P~w-GLSm26)dy+i&6||(-&dZ}z#nO_^2=SFWxG=L(X5Y^
zYddu5FC%FZl}cXHI+XE62HTq)w(cr0E{+Io?8}~du4j6J1Ux|kP6TO@jIO$;i?+?^
z)DQZcn#9}I9-?pgIB{nApTZvDed_^G=}_w}I~>g4=}wxfaJ+Va$nKo_i<znXDiAKR
z1+~J&W%Y{RShI@6S>^u`b_u(!nXJAGsBbCg<~rymiu98`qpMZWjf)i5=tlMxxfF+x
zeuaFT71$_Gk#%fTf-CV?XGB#EL<JGfXetKWiV+oOUGN4m?dy6o<=LKhl|PqJnoNc7
zsegD;rK`Ix{W9wM+|8rgR8uAh!v0>lJ81kz$7llW_rqsf-cjx-fA8CATaX+XPYZ|G
zG5C!4WaroPq>F8<jcm?uD*D)6&xg4?`q&+P>|{`IJCb1(1KH0kJu5ChQ&c22D@G5t
z)LE>fg+-|UI>@O5>K9=x@Pb|ZeOi^gC^PL)RD`T}D;-weQT+5JiL#FS=hc^8G;(hF
zf+ac+2vC;UPxbVvUd%MHVezxizIafybM^f9;6Ny+SO2_oe$(b-n>0HAiDRdo?C!-3
zlh=?L_djSV90y-x${c-+DHBeBvR>oD296alVj3-w%SA=PqxIHJ!qQd3^$XU&0K_xV
z&stc1!`?q4Ake`R=s^6dwK-FDVp4TR!e*KxTrEFbJOqP9Ek|$0FCUWi8dSL;UF%w2
zof}kAH?2L|jDbuEm*WQY<iSsgN$!Ff?FxW&3BZ~562gQ^JBmE4_xf2Mc%bKAywvF+
zT_y_iUX)8V>lEuW0Az3DbNqBC?PTh~#*7N0i|c{|qP1J23l3t%coTGdzQw>#jAST7
zGX?EEFDgG#Tr9SnDBXD(rL(+@l)eLporKZMbaP+OUMpGRmMR#NCBV*MT}E{URxq5M
z{pw(3PQw}W#aL?;<E#GFOcH#G+|vV9ocVVAq$l$gWsglcw~z|7Bc%((qF=6F{O#8(
zpFa}jex{V|p!u}!s`J$R&Nk)7$3|+PwUjTF=W7(J@;Mwoo_4vg4A}C(%vy%*5g5eS
z2Xq84JJcK<8lp5qPWBYJF^%aDXD$p;=ERx+JP-zU!%XPvs<e%bq~;>}>wRjl{;DjZ
z1qV-_*r!YvI$7V-Ssq@z{N0efYgQi=nC>zGddx#$GYHmlE7?u8mNBQI`Kn#KL=|KO
ze~^<f#T-nj$yr_jn+BbMa`lY~SgyYX#k%73;qp1uy_@oN=WaU{>mmx&?%GR*g+;%V
zUHI+Um9i(o+%n~2#!u}i4cS3!pWV*TyF<D1DRo6}Eua_e!2G9lf{&CCGEfc<4P*EX
zHd=Ic{JvJia6;5v8nTg(bLh9u$d*0%FkzA}*rkbF=y0SPVE<FQmJ=!5P_l~Y&7Y}$
z$2^)hz5E|KVg1QZN|kqnzSeCz%e{*WzN%?m=`EbMELgV}qbL*9oCo~Jl3dxnM$L**
z<l+LVg5g|+aU`J%n<SEb+_^gwYPhqv5_3gPUJ5yi=fyNyX>}LCQ(~&c!q!Be{A;R+
z2`|mRCH}fsX*6U74fty550i^8?b~%urgJXjDo?*(r`To|{djus6`DI?;gq(+_U-z7
z<fla|53ej7vEc17Tk`jn4L?`1PG&y*6!gjp^ooHbsLa7d<EY@en7(kPZ;5-Z8Bs%A
zu28&-6dx&Dm;U0oE*;KHO11%K+fk|?X)NpP-g~A^yT}n21Xc(Y9~V^kF*~GMEJR&k
zu&HjUpR}Ep{Ji={<*{z!H9F*Tu=I%K-xR#OBR(#VJ$CWZ5%C+;UKMS^BY3it)Hb;c
zT^F&URV!1w2c~*R8rS2^!U#8adSSNp-Z<;MS%<1tmC9dqM46Ppxvz&TfluAe@m)%H
zVW%!bQxjU8q&2S=>h)msqE}De`~-f%p|FDzYXIjr)3deHXrmFdUfo1$n5@hnryQwX
zO*t@5SumN-y>~-OdU^Gm2U6^dj?$PVOI|JnfPgg(m;gh8uG>Y$go{bxqJ>oOVb)KY
z>t8063naaI!t^}@R#i;^B^R{JXGP7z7`kpbW-NYNp=2uEm(kyqD$B)I!Vqh+H9{!1
z&JgYiR~SU0fam}qs^}XRh+O(cgUAkqS|1aDW?>*bwaEH=k@b&d!YVPme601hP)%IG
z%I}HtN27dq(o$`)OOYBqI}@`k5pLPRf1z{Gp6sqOpsk5XX%PB|7f6i^dL~YP`B2O*
ze_y;aWJn+B(a=oPw_W*^KGm0C{8Zx;R0bE`#F&!PL;#uq!O8Ss`t;g0<p^z~5C11H
z*8sJjl0@5dQ3uFH$R9S(?>t`Mo`G?hSRiB<=q&$SM{a_8+wywhk3nvVsXCViFpI@S
z35T*6nF>XMwp9*azpgL&yH&3K2})`&+!V@Dub#xY_>VNQmZ^bj(s1SzRoLm+=(pRu
z?>rbw<9gCsV|D)4^TOBGnkbRl){88(Mbu`Jcv0Yv&S+0e(lO`I=<>zlsGJ<UHCTE`
zk6`9e#Q0^+;U1<#zG78T=mQd9F!0GahD6a!kL2H5f;U1TSq4FCJuh|Ov$}KSkXmub
zY6)>j$Ph5+5IC0{DAg3Nis3JWa23akpDbPphZ4M+dI^0{inA##2ZS)sL9rzObA)i9
zIhoanU@47ukPoyZcuyc+IUhIMeT1>xT@>OM7!t%ihtYaI!JF={Yx;5ih7YOX@y*3^
zC+#Tw^}WNNi;;?3;i<T<4qljT9@IJOz|2j@ipI_?=}D)aI=oFG8#{P)AKU*IVakYJ
zg-p7x2genGJzvbG<;nr-Y+8V-y|}5w#I;Nf4Vqtr<3#HpS?9$ExCcM6COK<l|FX{m
z!JA_Z%npHl?(Y}Ny}brM<|mTGyQl7r)r}lK`tF(U3U{s^v!!Ow2P<|7{#NDd-7ECO
zy0KKbrMwis`gv5o5_;(o`oAxF@e+Em3TZDJon|+<$4&!V({G$9NfzDMY?B;lWX@0K
zxpNY-(AwcGFf%bCAo_s&?o_K!4{JSGh@Z5_Fh)1}RNj~WjQo6o{FB=lw_Q`V9X!}+
z;mCp8d(#>(s%`mm)))JyY<P4%`szc5X~YnS*Ey!cp~r+);`3LbM$jvPx5$CdS3%}a
zDl~na$bgkS_~}(NyG&_fD&3qM0wg0mfZ3`%k|NCycB?+``wwr889!1t=DQO=OxU^l
z+dh46t==ufmeaWXLcbSe3A8dw3|F6hOv|r7Ww7@I>|X-MAsAyhvb!mgAq?KpP{7Xk
z4HwB8;F>WYS9a&7XypWFp9k|YIqA4^keUe^j|=oVHXmpAn+F9&s<SO{98yfZL?Y-#
zXgcq^;t4k<pZ%%4{Q8#c<&E0TP@c^`9w^M!?GBvt$LhEZFBU6*{QOqPvH!GeU;ngN
zer}idhEEv3Y>Ebz>Vu#c50QPj7e{RaClQl<v~$YV8pOr1cA>S7&73+-j9Ua2p5)R{
zc;o`g5W>W~JkhBb%b<3IG_aWsG$_*V_k#!btZv@WJ-Ok);Z#r*@y3AZJ7vE?UPYs3
z4Jfa{X-4TJegV9*NSs-6wb&XA@9^zvvlT92@}a4L$!#U0y)~SXF)dRkGOv~F>&cy0
zu$-K<OgV@@WUR}1@&=>VWfD~-t2DdSjxY-5RZC?QrpD@k!t5mW?HK*YN1u+m-0-a_
z@2%P`j=6pE0VB5FwKk1l)TYpymJKg&fBrnDYpV^V8|Q4H@iyJnXXof&L-L=ZpEiJ{
zU&43^AZ=tXZdDPB|7*sHrgLyY<b$5Il!#0Wvw40e_ZvijI*_3aa45OmPXihr%RjJ}
zj;9l5j(E4``0?WO{=+``#M(eOzjV?3an?!z0%Kq$h^GPcc@YsVO=Z2e4=W$BeAGS$
zxQ?Kqzk*6Y1ZtF<Q&6AkJ>lVeJen`6uyCOo%qKOV_2JrYUZ)Ofw5?Iv(p1#wg}J-7
zvUdn~(s~;))1XqU3uES54?5g=`hkT<f&>FF038z*Kmzx;@UBbs3t&+hkT)rHX_X}l
z>Y9c4I&!1f`1shExHzf7%NDCP1q}4QEFGuw7+B2{>^;L`eY{8~6%byxHgxzn((s@u
zPP}tCO|s7M5IDz$kxa^Dy&G4fI3@v`>WX2?H1xxba|;Vc(M_wBRQktaA##Q?P*2Kh
zPNb`qdRFGG+KWDk0wk{9Dh(2?6I6Utpqcd~C99x`&%mfMkwRI=edtcj&>;UeOVgfc
zyqLEs2s%QLrWQotB7!xLx-)q%>-mXIsyK}^OE^=5LO_Tneqg>C5ThRPCQejI-K9o{
zhEvj_!AAwOx1o?0&7UfJ6w;})Ms15Nlp0tD47iq)ugtL45k6bGK-gYjO%blmpF4Gm
zHC$?-jUKcyfOM6;?W2crYTi{^OE`kG3r$4wW^tCsTO#qUf<Efvx90F;cE<%|AF1(?
z;Z6fdYH)neQ0IXJ$ha(#On}T6dRGfss%m26$jQs&0-=U$7fA<TDmkl62p9xwC6LQZ
zb0SVLgNzde^_=kSf*aIp!tI4$D}NMzwtd@Yy?4I7<$_Rq!;AUK=P$xGzMMl7Ubuhs
z&p($!im!}%d6A9w^-8uRa40KdrX_&SNm%T95yPX)*mI#3&W1J4>!cwuMO60i;yUra
zHKbR4R?v`uTXP5+=A<DpW-AGIPu>|feuTc@&PU%C?p-r{Q?0ly`K$ME9chF0hVGlS
z`;~8$m(tZ=hviuR=`-Lr)}A~iTfENOQ;FouVXB@NrfMIoJ^x*jaJtaiqxA<Q38!!m
zesbxZSJk}=ff4P8-g#9@e0*!Peq`aeuRnM&Vb7|svukf2x_U2{4ZD`Vh!JAeF`;nn
z*$KhF|IlY_>_RFC%h3)Wk}iAtGX3o}ywHUORcNe0x?rf7$wXH$ofSio5eery4A~*V
zl9;%W>m$b(2>q@lR}sH3Od4+ulN#(h<Bi&Lpa*S0?bU%p_n6p<+Fb~sBAQ94%zZlE
z?o8D?6zAR08<qi>fzd&{%=mKhKFKEjiUpBNE=B?3fU8vme!da}%xncUxJInDSh>5o
z{a3pV-zwZZVcg>JwBg2f-^!;R7aF$DnzW7vWaTx^7~QF4*TE(ICJ*h}DXUG_ab4%`
zIJ#hH!ElD#5Ze=>wJrmiQGeOTNi*W6w#FuSRI7HOdDvhy+ULJrqlZ|qkW<ta3)aC@
zr9WeUuxF#;oWaCz2*@HPm8nR6wENw=Z?ubeOPA28Xyp0xx(wy<0Bb_eOpgJ6i{}g1
z2GAe|=Nk0F1@ICh=_JDoQqc=83J?cPgHv;xaNefLB$;^g03Z)XcR=fBz%aj&(QHa%
z%Cp!t@9F+S!uS_dYEd|L?#9o~3TLbt%Ehlm-<RhYG%*lArGQ3H>bcm#E?DCRqXta{
zQy@CV4N$4-I-*Z$>mntuzcQ@o9dYH$b0`$$LtoW>h@Y;0BdshKQg=~Q|BK(qPxTwA
zCvScN0Cv9-^A;d{7zZ=m>>o;{TuLj4+$mPh<|>c8y_ILV%DE!26tPkH#nD5>CNIy4
zJsUPE-=#vD2u#TM>FPDoAm#9A7o5p!VpG%LWa6QEjnvcs;5DMZ(rSy8rF6<d#9&@p
zNGB^x7YftqQR`FdO?pA8E5r&|=0b@{X)9U)k&!f)f$9oMap@aQ92#I6_m+t-V-KaS
z!~wJzKp?TPAy9gmj`9a>G*w9s&3Zo$ksg`(F{#Rs>HEY*FMaBr^%<z|F$|%+3=XVm
z5%&TPSMQQmr$&%2#_9joyYyH%UA|vfVx1ud<m6<EMT4_YUvni-Sf_6cuUT!`GmM31
z5sNo;=LFf{&22Kco1C0HasU{h$_rt18KYB^{Zi|)Fbzy_8iIp@{6mCEyZ8R|6WzTh
z{Q0qC(jQ7*^1Tz^Qo|6c`{C$4b4CZ{{Fi^WZvWc@<#s35URn8_hG;&ie?{~%XBG{~
z$x(jSf539P1KNIeXua*wdL~#9so>|ybzZ*&7n4!v&sG4zw^cVFH6@Kf3|$sr8qGmb
zfLL#E|3mul!{_1e?)vGcy}Ol@ooKbY*5=J$en}g(%P{}&{&&jDA<94Bp17CHYF|os
zNk57Kz*Pg;-(I^fa8-tAKub`WCCDWvmxTzv!qL1KJ7YR@9XJd0K?c=X!zPC7rb<8V
zn%Zj8k<8?*fqC0zwVB!bt?abSAwv1eGih6EjvGl=o@&y$sd;ifB=iDhElq-KdDXtq
zw0)QH!$~F><{jdi4G!I2Wx~ws7Z4r5Yzr22ePD#4c&=(+2=dFHbU9Jb<C%qlsC}EK
z_=7HnM1qr6ii+lR0vpTj_;Fz;+8}jV%wyooKK%GX9oWN_9HB#Y{|U5Ownl}yQ2f<3
zEY41p7Dap9$GBZyQF#1|>+ct?|5UFzQRa`H|B3Oz4<R(-=W2Iobja;n#%miYd?}Rl
zfw#6LETc#=O0H~&n`tpFF^m;Xx~e)J!&ueT#p)VLX~FU+w=y^<EZ$`-9?-W;4pCo2
z^rDNlNdtln%(rW<n^reggw(PJbJ@i*;$G<rci~Op=kiJe%;AB8`^jVO-yT15y=c|c
zNh{oGrZ7`^e4yu$A>Mu4bf&>WXw;`qub0kVQMz8agQb50*5CY~>nHsNe_So{hAhU#
zqgR;V)aLCp>0vRJv4}0GTTU}{%!^gSRh}_^Wr)QvNlA-M3#n@gNejW4#<CFu<<Sc~
zcn6V}dg<*BpN_is&iZbfi)Zfcw(A|b@14Ef-<>vbd-s=rPrX+%^=`@ZJ2rB6`pj0H
z)@<s&b@#3N@4nk(?}A19GvC{L_v<}7dI&}Hex1MI*}VDB=FE8p>S8{7n7y!GN6Ca+
zud1%*;<~Re3W+C=-8N7jq)`znsB?suu~0#Gr%Ut{2++68qT^}>a0Fu)nn(~EkYLW}
zCGKe9(@m-H8e;~)m*&q?M$!7pI-0AjD^fPm0Z8?g(es5{!k1RRtV@~7N!mQ~QkDRH
zQy`lwIGF+M(N-sLDS<g%Sx3b<3^ynWOk3YvSXik1E{f$=@l)YXyq&A~N&P^lbx8{{
zL$2O3o%LmPqooNfc($|yBwHOeV|7+k)9QSgSW_2Am@I}iW$(b(hIT@CbatJksc)ni
zOOqX4E>}%Uw%1a#40V;pJDzbqRS|lNxxzFph}o`Q@=#nhf9P0g790{GROkNY;1JlW
z@JPo>{fhE?^)J7f|6%i4g;z_roNTd0*>oVQU|9FwRQU4lKZR$uzVm*QHJd*<m1!NE
zH!gka#oi-l%-T=i8#F&Mal!B%XX@1-eM#8x-uzMR`*z44yf|mj!pMXLd0RiecX`>-
zxnnZ=wySL(yy%(t*sLzu?dnzb9@BlmxO%|mTwOKc0am8D!>Wzo>sb&WQn6Cfi?0vF
zx<P-wj!0W8S)DH#W4zGL1L+Z!7wX3HAj&#*O!hN4@7q}W_9yx)l+?f+*jl+tz4{E7
zSgMFsi8!X%JumU-w0Lb!KLr;l%vKgs_*fMZ4*3dI1<XFU#iy{>-4YHFH=`SFcyV7x
zsgDy8!vF|!T*{%UYa|6xmyR`YmUv9{IxcxPnz(z^#CnQ*6xE)r9>^jrtFa|c)uIt_
zX;7mcczhYcm!$qXlrN4RqqTMpyfLg~a^A4~@{hLDnBBW*)UKV%x4Yg|zS+|41Z_)8
zXqyv<l*8xFDu<5<{nl*z;&9IcUv6D<ciX~Vv$hW#H_@V8IwVu`L766%9#P5;T%bMA
zpI3HXIIHab{3^|4BWI&<Q1~0TtPE>un(WK1B_>j}c=KSOEtnC$6cfy_gcV?rxlmDr
zV6FvvO8hnyfnZ~)uS2rP{+>*2Z|3dgU)ew2zmb1C|K9%kK5WXYiX#^b#g24b0%dAc
zD)Yj+POAiAT1A~zi2|DD`s#bkE|{@v+x(85dJcYj=d9vo;fkC(rs~umg%9J*c?E-p
zPi)++Z+a_z?)1g8l(W5ibZQj8d)Z_bfn7vah|R=}un5-sKE=%5dfME^JekFGnz&nZ
zL(C9XbfKAiO)rDjB{&OO5u4cBU1)75#?xuEG9sQOk_(Fb9a!`R9+OE!vPo{xs4+uV
z0~UqKj$!;5X{Sss9W=_+cx$PjgLs(02y<M@5o)|!M1pKmf0;n7CZh?|YL4K(8FPYj
z1h5=a#mwrDFj{JtSxm;#h7RflCv?!8shW@mYBV{BQ3oE$LrB4b0)s<>q9K!FqGOq!
z1g;XDs}f$@6GxQ82ys7rq}whSA{}To#NK@S?r!DVo%HGeDlFf$uvI-b_gtU0Jx?C)
zG_=RC1Hw&>{LU-8uY&x}A5<=tmeN$&LK6>_Dp!9~c8TdllV&yx&tKC##8_=vR-0a3
zTXbuUI2j7A(o}e^+k(*_CR2%pyz@nGPHUDyJm?wWxpk%RwytS^(Dq{S3t=33#hnC_
zCbAgBDHZa^-`)#cSz^5arsM_v(Saf+!~7kWd?>@>WK2pI7_2Rj5ymYVl(S^nxy8zu
ztQp<AzxhT_>B5jji?1wSKKQN7%(q(f#B?=c)?rmVl>UId<xAeE5GWNkIb;R~6l8{z
zrf<RQC~R`4U<q00WA}rwISEdK(9T(V`_tLVgb~UBx@iO*P<~2$OKhC0w4q0G>5-S-
zZ05C{uvS>FI}Z8YLw0kL?>-pWJ{k>jAEQ6~(!q{aTd@92B;0}S19jT*K=$-u=7}80
zA9B27jjOsE1gp?k__41LDXh1irOk$Q%IMK|=%(^T<I?WYBf{FYw88M!P1|R+&RbNR
zn=>)(b3m9bEE47e!Wc4MHu2dLRReK>Fbv>^0YaIEF_4Nei5x1ApmdZ4z!{u?^Pn7L
zxHzgi-3_eH^_D8td0<i))G^0Hw7~4V<cvvHw)lkwbTPM$UHoFXnP>M-{knH*mpydj
z_>yJqT5j7kZR+-6L%a6qbEUP^MQGKiNt-qevWp9I>-7z-wLG_Y%HSrQ+P%4m(Qh$k
zv)Md}$Ydg$|7T3}kS}KH;BCV6gNQY$B43kg#@u_ur9TbT69qGph_>NA!3L0~IkJzF
zkNDqiVa-zI7J=pqba60nj6w)HujPQa<IV;nKLHoq--BRT`<x{6aMG~Jb7!opQkZWT
z@a3@{<D~}H8HbLK87m4e&#gN!3Bi}&Fi5+gd6Cd0JrQdlI>mi*zncrCai29|niRbL
zen7H1k?tq#$y;@29QAl`S8yBq<@_&gFFK;!?LrZ4FPacl5-p4F3|N&uxOo+d);QT#
zjJbgVnI^G4o-JXG7cNI9CbmpSU=R*a+SA3DUGO2j;W}{mB{hEn*Y&gsi6dU%=J7=A
zbI7Dm)PvJf9w5V_7Z5OI&^weG(3-d75;KV^?Zm1qGwn~WcQ(y2WR2>PRi#<bs@{1W
z-biZ@?=}VSOcvJCGTnRdO1*A9nKmd9!@}42uyv;{R2%JQz=Bg+HtZp7?t@{zx@FI|
z!Et5_vgpI5Q8*&?J=8gDOyg*4Z#C(IN8Hbi4FUWdLYRr3P{$=lC>s&>(coC>4=Z|h
z>9XaemSxN3yir32jv4#u7%6Y<>C>C~uKnQDX5HvnGYb2SnK`F`N!>AI8(5PCV|;@@
zTlchq!Ue(a6Ww^-0mR?!wEag|gY!ljOx&n}>=8ahPZ`y&=2jv|C@~4|V41gW1Ak{D
zc?7Cp@BS#P!8`AWh@H{i(a4U!gZ)r+kHBMC`8)YLdqhOX;ho(iL0GH36A3O8$?E|g
zGnJ`gSE)T#?nZ-N+|}4j@M~?g5znj*IzFe#Z2d@RI8F*L1b<k9EE+lAab0&L2Zb>b
z#E|n5_+|iXlGbdGD}mjbmd3pUP==C&;VVl%8PaK1$@oP=p>XY8`Qos}-3-DUyT{<Y
zqH!l9hEAWlU_rsov!CuCabb3PehZqR>CD(H1xT-ovFQsB<wDt?ujj`yIg8#d3pHEG
zWd!gG%?T*`sWIzt^EhclY$!N+T4WD3lLrFZJrLOLG_A`*3Y;aHKhKHrA1SisHIQp;
zF={|07TXxAmS6R=?)!0>I7-a6wh0m1TaShdAH3Kvct_Kj3WB0@t>5KZx6!3yV~nCc
zWRQ4HyaK*ckL{#_m~&3n2(Fhz?%VfpXE&fXFy6tebX}Qj;O<LivU$P~O`{ZlAuP6)
z_JPg0CxdpUJu;L%G&e(8r>sAS2;;sTm2Lc>EYF~M$_nuENw)pc3*Gm8rB6*nDoAQ{
z66VRUhX#%@cI>*WORGR=xRI;S(fnkIHd-pdR{-j9n1YsYqoo=vsWirM6ZFEPr4gKy
z7Q-W^F(Hx$o)e%mhOl`O!LNEsEQM!Fi=2LcX3mhgM-bt=`|gUj2d|t(%e^KFh2u|O
z{7szD(Yo~QwOSl?|1CF<(XPu`sPBS3PY)?SZBkyY6(3D!(bW3ui^`+B@^EU5jiXR|
zTY;XuF%OX?8`X6-M#nlE&bu_8uW7j8pxkYMU^Aoo%b4IY6Anh|L?TQUK@;V|m?=F0
zxT<T6iN&&v7K^_a_58YWps<iO-+1QeYMn(X%RN<e{Ci0`iQjKq7rjeE-<258UyazQ
zR(dyZ@{V#eUsX%6=<wfkuFVn4zPccgNoi#V#^tCW&Vb>Ja$3jEC#<;}F(}XnTVX^X
zF@=G-Ik~o6N5IhKdXY$d3s3J|d%9A3SeMgTU+n05q()Trb#F~vk$JTD<jKAMlBB_(
z-rO^<LH5+niS>ponwzogP@*ZPN=nIq#-nD<Zl8U(YoGDT6{bCOvpvyIg#R%PmTyz?
zsVp{o!%ou)WsI^L+9{6jWTNpVKI5%jXyT1yfDd~njl~GA(s}FE@CEpFU8ck3KyUUy
zuB2vb#7~w+38hgEEU^I|>$sF_s+qtboSYj>uT6AhLVS*;9>yO6iL`*ax@nPiUD6&<
zrv`)Aql@6~W@eyYBxVB*fx&8^QA&*T+x+v58a<f5=lyRlQ=ci5r|lg7^N~rVH5#27
z`^oo$)$`20<MR`izWl4#iP|<Ycb_|*E>4?qC_pIM8kpaIK;E7u8xM+^GgeF+>b>O9
z+rtKp`t9bhDxcjS*JH+@-py$I#G!%xM~Z7c*<E$rLD2q6P*hcYEyS|LvpG0*rM8dJ
z5@p9dS5>v}2F)WY`-JgW7oP+Rv`?ofDyF|WV-co@>+V9q0iY{JSWuD>EEXIR!##x{
zGdKxF>^#Ig3#yYaRgC*ZKk~xlX<rmSJ3nZD!&<w)H(!~1CHD7SADJ=Ta$v;PgFQFr
zEPPKF@<JIhe6wv~(fv6;P@nd1z1%&&b;+=|2De%;p>_G=`dzZG9Upu!2eGIkX+^F{
zb)@C^<%O}{MK-8o9X>tius9mgY607iI3{hGKI_S}qZ^fOXIZ#n#DBr*=UZ_*Q2T{Z
z&YXUl*5;@Ekm{6&i$7XFRJAy}E;nN=ZKbMnRy{kzK`xRk+gPcp^Z}RCwHX(#lfcFV
z_^*j`;ac{7afw-|h@Ge+v3UwPmY*!K%=N(-uCu!qKBXFEER@V;^s504obz(+2wlWk
zGPf8wBi091hsn%1aoyA`#5ar{)S>U7zC$M7UXa&2qwl~$!^fw$pflU{+Im6w`pu@w
zq~_hXe#QeH61QAx^=NtIhVnTzw_Z&DWzFyp8jIm^FE4ryKGL-OQPe+|K!uwT`(S`Y
z;R`JlF`+K85C1hLRI>^+_cUTcxoG@<jd*w^CX}^MGTc4&?YP3ig4>7*<pB@1HjQ)y
zJQ%iEckJa+p*-T@ubu;cW88T+4kpaGxyA;)%Bwi5HB(a|VrrO8oo9P&V7n!RKr>q}
zQ&lqqd4=11ng>8=(#OS&bm4v)7T6FpI+&8|uUftSP-6U{#5ixH0UqZR2>_1kGL#X#
z;3U17Zo|f{5bMVmxrQ*?ohMx~5AhV(<~0WQ@<XR4Zg@UNnDys|nTN!5wqBF1-F!J|
z=GbvFPv52Yf>u!Py|lqT>c1)wOE`yE4}|(izxybEf3IA;ul&K}0^(~8RUsE5NgepH
z_sROSdTb2njh5Ilc1(WV7;u@a()PaMa-kwd%HYBIzL}q}Ox;;NGa2C&LM#WVc`K=T
ztCz_&)n6D*&JqBVVF?aobNiw$V{4qxYf+?XyaAU9&Y?mkeUQfT`%btuZ_({0jlP<E
z_D8F9Zr!ypDKnqXxznKWEkqFgRd{aOmb2%TGv}mD(~boQCA)>%8_Va+pE-HiKew{0
z9RFi{=Xpztr_Ey_MQ8u~^J>V)fB$`jp1ZI)Vj0_4Zj1CtxTyORb^>-VfG^O&!@%>v
zR|I}Efd3^N@ikO6BpAd#vS?uH9N1Y<H26SjnpwCwV)w56U)o8}J&qprwt;R7q+|3i
zeG*oo1+&#Fm|Rff;G2pWh=XTdARmVv$%re^aam!AG26CcN&vjSU{uG9(ZhERZ~ta;
zQuCGxNpI=KbR0gsV@6(HM)I3)m{Z?ujus7*eic1+*TKP?@ZAQnZH+!b_SMrqsD|w^
z0$3oay&Z-htKQ$~5+RLz%7*JWOyqF!9D(fv>ZXdGqdK=+T0fy_&;0I*%^NkYS?3Mi
z<?MptP3nog3!`d9y;+ahdYgp<(p)hRYd5ysB<(IYWA`Qt2XsepFP&_$!A8r?ZN|95
z0I5H%tM>=~17tVN;!j|%REbR+gz)*wl)AsP>M4$ItM@mLn^Q8fHw!Z)O{BIIh6*gq
z07Q;6?Voobx{a_m?VD-MOz$a<liH?Cm^nR%d7x_A!bmx}jJLvM$^I62D6fx+IreS{
z-c2(H1&&Pb;zq~+lrm!cx|}k!V4&1rNCvDiWI2pa16hueSj(DAZ3Rz25<?IXkNYdg
z3)rRt>N3(F$rIf1g`dP--6s=f2wN$KnL@Qr?vb=$s*`bYNB!7eFp$B)&Lh*a#PNO8
zGsVJRQ;OzopLTO<%Eb9NF)S<-DhoPsJGAo<xB{3Xo_D&3L*_zwu`y>i>X+qq>6|O%
zcIlcc{F*VSfBPDpvIlfR8+O|Mmc}5O3%ivdrU!eI(D%>=>{=pX?Gft9BfDrhta`Rv
z38N>Nv5e~o4At-or&9An8aPzBNn?i!aY`{Q3ZO;oz5Zky{at$xlL?}M$2*Apy&$|v
zFVa}$<}ezlJP|EQNdR^zm_g^^%_d}mn4zl#j_1zj`B+tH*i~>&8{vGL349|!z}*ne
zkR!SSu<rK&<!j+P<6KSi2w?U&F^R#^1)7{c<Vbb0RQ7a=6yv;5lOLJ~O|Blw?Z@hv
zp?0`o*xbI;$|5MiY!(W$hnV=qk%uNUbN3CZ8k7*!G)U^>>{n(C)Ja}gg1E*4t2~O$
zjjG}FoDmW+mBpqb8A(NWIwT1;Z%R`7+&ov1>oIopKgxaa3_djCpMf(yM&_UUnr>J6
z(Ct`X{O#{iZ%1IaJbk6C9X+WJjjx&?{q#Z49SjHW2nWQ67=izFA35<Mb1Mr6avAlq
z=%Fo$%MZlt+Z@@AM`9qP-V$t=FI=Q*;@f3$hs!!09uTFe$SyKjGsBoA{C|zy$2?*H
zQ1wdWzF!cFT8qR~?}I~!PQE*9QQ*YMe_5?U^TI+z?~mAjy5Znd#g>ogeWp$D*e&q@
z+7yC)YXkVoRh3-0aiq0{YZ2N753kd}*XV<j7@seLL1hVWnK)v+)yYl5W*is|@~B32
zodGrrLk}|<h;UsoZN-4WBiV9;!h;9tzIDa_jMpuSP*)tF3G;UBZ~USLdV@us{Q<~h
z5QR`G`>Rn1pr0DA>kXGc5f_uNCcIuXwYKpVXl--pnkZyrd!_P*#^NHDUHp561(yAS
zb74NvDI$XfY``oqm02ROpB0A2zq^esxNt1LP&*Ob$UD+y6~<-Wr<02RQk3zESwi%=
z^P&uU|61Qh|B5%9`j}&?CfO<naxabA$1e2hf*}|0-hZc8ZtQ7D;b8)=N6IV9PWX_4
zG0YrAz)Lho3RJZk{{=60!r%*oG=h0$amr=7Z|$Ui3OVJ7iWR7FM$5eI2S77URK(V<
zV0H+DdOdvW!KBx}XNTZh=Y6eFf%EK;ED$!I2JymK_p38RT!XHdA&SHz%m3XB(d*`i
zCIiqiF&I+Dd3Qz)I3A}0oXe7qP4PfOaQ2cr@6PD#Ea$FrjG!LyI?qG<y<t7Jl108h
zBh!d9UpXJ#T2&SH0^6t3Nd!Ps3UORwSgU>@PRzm3lVG8<<!I*QRAJtV8Pit@%V*7A
zJ~S)S(lhft+H&`v-CLJzvsiX`jV=0f#hA%_N6K`-H6L)rkkS916Vu?)Xiug-%)QL#
z#F#DPG9AVrvGt;_n-1f1Y0M$<|9d)&zW?8+!vxHbW4}!?i0`@B#Yr}64XbdGVu1zg
zQwlYkR)ybB#9k>5Ov8K4B8k}Mi=IsJaM^qj5p9vNEWXIkAf!#1GE^BQ(S;+FaWt|j
z4ahuk;!Ppcs?ZW1U6{w_9smzpMG)q+vynE##79BJlr4fmoaSL<gP`rbs57u%*n*LJ
zde|0>PO!qS6Xv*-D~GYX(36<g+rX4DyZ4YsiE|H_!BCP!uPAdP-t1evZ0YPV>kLB-
z*)877?%5@|GWKhj)9XRZ+=7XViw3oL>tOr7CdASTBpWSREmnb-zbfe~2dHZRu_8iS
zi^hkthGxw#%RG0~2{xVToW<5`0gk&YRwLYT$?O~x+d5L4CIz*piOyRt3RRVlL)%Ut
zJAYO2%q`!ZpH+Woz~C-zv-^rwvXn=?7LOmhZpXZ4*M1O{l?@XT`wkzR(WxKfNKMd;
z<>(97IWY}n-Xn~|!WSz!put`-%tH&Hpggi^@#V_W5p=jxN$7?>ENciSv!LH(05{7q
zrb1vP*Cu0Schye>-8-Dkz(Xdfq{vketwOFdGWHVZ&fLPq*sU$Jw31WJVjSDkRramK
z7be4mtLk_Njm~-4an4W?*~Jj1Ef>IEirk6kx~rlvsa4~a-8N01xv6V<<5o*27A@;K
zWLxgw9XUb0Tea=pvvr$Hp=IOVq2U9Y4=yYm+<Z`2Sg*!|#*J4Jn`U%q*1UB)y0<~Q
zwhbGlw_%jg*7lE3g4PFsGKR@+DrG<nRkF95i#V;-S}49O`0|xS0tO(Wr4j_O4~wmJ
zW_}nA&SVZb=Y$=!n0Y`{PROhc%vqSLiSXd6K3=TR4Njk0uxRtd*~^9N7lUX3t+BIN
zzn}q~+V}5AGqaYDE8MbkS<7o*(e45j8Yh~E4I8l~2O544VWBWjcMKZ-E;Me9rr~pT
z%@lV($Wdm6H5Ass64-CI1S;~mS^~(Ihw|3&d@v(Xo>3(QE?iI^pF_+>p4Ga;C=36s
z!BHn4Qmjs<in2PJpw8vItbNX9xy)f^pseK_{{1{pm=o!-vM?0{Yk+A<ti-m$QlW(B
zKHyw4?=m&FnlDM+6I#I38n-ngF-vm`vovh4p10K+G$>pIJK{X}1P3P1`iX1<Q5+6s
zi2X!tAnH8Xhh-sP6;9EOY#2Igd61lyH4O%{HQJ_W0np;?yQbmSSBDQfwoZ#wE>Yjd
zeD5^n9(G?U%@x*GY@sHUT8~z2p=M>)b_81Vy`iBH1DlP_-ZsacfDN_Y=VF85!wdft
zg5mAe+y(TsBX<QRyj^l9Rg}GmTyf;CDBIU1cSuF<CFBxqu0c{!Hv8`s4oHZa8y561
zR(1u1qbf>SOxx3D(8hT8RMZ)G8v$gT2B#~{*&ckzAImNA3G|-rFO+i(czM(C2JY8X
z@j`6$4Go%#$z83bujVeGyI+%AgI&#?R#EmMa`ZL1jrNwRx%Fyp-csZSgx-LwH;1sc
z3ZZSMqZH28S<mV0rCb1=hdbpiARQdJxgN%H>($&g1-WY)7=&usi)?)zxhu+cv**VD
zHWA)5FbI*GLCA93aroT8dXy;z2C{^j96eew)-)XQeXtDa$Zb~JL(^%xhH)-g8H82s
z?RhnK0T##nJGaRtcjJn(7oj)*ojb}UcXUPWCB#ZQYLHa8!XsUBd#Sm3|DbHNp6}|z
zM^=4%dzv_?zk;s@*h_gecLDv$k(=95to4B|x!K54%U(qObmXomJJ=;R8!O1oAw+IK
z7z!FcU`WM%wgta|6ws|SRcoilsV$!NQuw|hdR9scwLRo(lxFt?RX8K!{!8uxTJoCQ
z@y@w*e^!*eh_I-lSIe&BlKXZ=?j>X)kB;VJyaJNiF1gRDxq0hRHd?Q?r*1_li>VJ{
zRqdRjq7?IOKA(#GeU;{H#|`992W$p1f%f2>g6|T+@zUCk7mPIxb}kp0CqSc?S92H8
zF|Wz3Q6kUH@uHT!h)jD;?rQdys<~N9k(;*^xotMvJ;0Tudyf0_RS0cGw&%>>hqyV7
zKWxU6XBBz$q#&B-z~0XqPq>a8itbTGDT{1olw$8A&J$QWHJ)%1JRwAPT+Pj3VYz`t
zzQ2L)7VdZEuq+{SnOEA0KeJLo94(Se9JgIm$jMbl`#CpfxwTP__PgXRpoOo=?bH*J
ziQ`r+dl8xan%vROkZ`!w+)K#J*TC)6Zz!Af1akA9K-p+LU&G1UlVxwu=Z-r0%r<L}
zzrD^^a~IHwj@%V1Jv9!(bMyA7WiJ9|E9kJI>>%f|IfTf~Aw+IK$kz^X2(j9T^90xr
zTK{mKz#!D><hgk%$PEi)SbMyLU%z1d24lxB9lv7nfl!!*(a6D`W><XIk(0DBOxxzd
zm%?K)OiULiid)1J;x+LP$wTTdEyg~?{dC*)27Q5ko1vy*m0_FVfZ?v2n_H^eGWTZg
zv)!M2wDefval_N-Il=R|=NDdXUah_Iy-s-j<=xqPlaJuj*XOd&-@a+SxxOcjI%BFa
z-?+@U$9To~7uH24_?7zm`{(+95>P7uF7d#Yfl~r61{s6mf;I*{3T_<yPKbL*tB|9i
zo}ryXr-gnUW(pe=wju0x*dO7^;p4(BmAooVtn^*wH!5dWF;uBn<xWJ8h=CDPt0q@%
zS9NjKt0t3and!YqDKas#Tja*bPow;!BBJU=b&kr5x)$9mdQ$X@Y8lmzR4=UlET&n^
ziP(tP`mrC?7+PaxjcYXnYev+pS+ix${xzr6oL_Tw&ChB+t!b?lR;zBU*0uW7`mWZW
zaoKUF;ycIRshwE6Z|%Kx!s_&|b1oq^p=-kR#0H5S5(gxXO`MasF0nN6EWVeM>L#^M
z8kAI&v@B^;(vhT(l5Qsbnrui8NUoLqMsjBIpyZ<DWyyPz&m@1Hd_Vbx+0R_VoMLWk
z9$=neUSi&5K4`vZ{@VOYiY}#cN{y5TDQ!~*qzq4)nX)0}V9JG*?^B+pN~x7nlT(|d
zc1z7h@3I~iqWz7wYjOR28~ulbx#0#OpZw}qhn>Hqo$tReS-*4-cN>FCcMt~uU_-J&
z>Ms=WyFFbYYlU|B-(I^&H)#YJqx+fUOHW81?M=oD3&{duJ&6=^NEK-YX-nsjMnW5s
zM1Lkr#o8nS`3sR`q@hRyklsStjWi9ZJ<>3w9D0CEK@4jnDFpZO$x5j@DHgYpu7(a|
zlmv}e`iUIVC6np8#^ji^5UB*$g=DF24>=}8lIzl7lCJZ@{WNk6JA@rW9OW_HFfvJc
z%Fh#Yf#k4sieyUXNs8`GvQ2tMsv6=+W9bKyCS4$*(r2V6eN48Cu_O^^B6cP1#j%76
zt+B^fYcdEhu9x6@kVca{DT?$Ic9N#jNc<jzn9qyYYyP@zjrf@V-fIXUtE3#VK`J6W
z`FrDFhn3>mo8$<~NC=*-5pR+hL~k_}ACN@xGBM%YL)Zbm{}UqP?5>-LwV|Jo1yV2k
zccW#bkM1+z+(bg@NwQh`n&gV3$XtC6d0U)EHj3|%BB>84)(^w|VPvkTM_)B2U4;jT
zl7E0W^k#_D9*aoT%cKkai)=@~4#54%;yN;0+=BkRM8@d7$RK@PGEUq_G7YVXpOlC?
z8U8*XM<okct^WjlzYG1cfV4tcS<+;(nSM%k8zzuE!ywXE97(naMWjG1BExib$!2{#
znMCu*0Hh|gKdC7UA_Ik?q`A-uzgLlEx=6B9=nuT~C;i1$uq_{uhQL)9X$g5pYDW^$
z?xy<9Y7*|F9rrP(dLKBtkM`V${d*tp-Y3~eO^`B>+M<jetQ@2~q--QsZU$0YM$3#Y
zb-hR=rzb{JuOvoaoVFN!*%N5X8|i`&X;YAX(&&oe#wCHK7+q<J(-fnd*Cj?rpdsf(
zKegQhK7mu)b)=IO^uuV#Ie~T<{b-5N4!(T68}bw{4CS;JCZ&aYxSi+Yk^S?Oh|&le
z4{1Pj>vU$kQdK>RpOaiR{Ov3Nze)&+#R>mIM*XB`WTca3ghU~_6-G&}VV!_VDYO;n
zt_@&`GZ;i%P^4eo-6Rwy;2#L-V2+5Qq!UCz(p7u}0Y4=-Jw7^}UN7kMI)1^g+;9}I
z`-z0N@xf8RrJMR&)JX;jj|35K=?pr7U+WCWEQ)xDIwi?qFyKG6pcwv=;N~WYlHS1J
z!AB2pc*zF*Yphp3DAoR9wc!OpyJmnoKJ1C(N<w3K+gbZ7;}^pLJ9_{fLx@B%7l8;~
z6Oovv4|{Pk*+TY_{p2(`2R-UX@(fl`673?K6TT5{n*vSYrU+A%DaO>m)Z8@Iv@gmZ
z`T+ZQql_(NE8aXn&XDt@jQm7?#hab&Zw8n`O_lkZ^_||Nwm)qTNU-fA;$iy`y2al}
z7z?(Zwg%Qut%t3L?oPg2ba&$2@ps4G9dI}6ZmsYBxWjfga{bi8CF06SU)S5OxjIhX
zCnxY<zfO@4$W++xpOVkW1#*#GLL9<0GM!vOo6E@O<Qka)-R(O0f_zE7f(>(n%!1~3
zkK88@$Pd8EPh<`>r-$Tc#KJ#DT){l@lz_T{(+Boi8HH*e2Cuh0v3@WiO-5pUv&Ei{
z;Jg(H-YYT?X}>)o<`)<x=nq0hAe})vi*y|6oIOp&`8*QSds)6Rdpd?Q(;dG;`V@)T
zVmFYcA>Bm!7U>Go9i;D&W+2@~`T^-W(vS8u3+JDZo*}XKezm9BIRA$9C(=EnzmU*_
zzzre)AX$+fB4JSSG!JJ+Ei63+u9DQmEe@vXGd*|#1}ECZ5?O@vH)>+Go^V@DWC>6h
zfE0*4OK}cG3dir|I9EoB!0%N!N2!Ud#W_YzWF5}+ks2V+dYqf9iEPAqteVIsoY4;~
zk<E;+sEKT`kodM1_l}vEBwv(ujM`>enpY`x7yI?CZK3fdQ;VU^Ei}8fMToc1T9LIa
zV!WxPMXcVkb7pjwX`X3b>p}BOElorE53)$r`56y#=4B<AETl{3P#n8vMp~L>RjT-z
zla<w=wnbva;0@%SmxTg`*$cp#-%7C7w&>#9nk-^W$IMQdmXhX`EX|r{Rf>!>wXmG&
zm}xoFyi#OVR&9&E0!F|(X=tblts&l`uT|UPrk2np)6%Sxg=Ec}$I9!H869aUnK!S}
zJhVW&KI3|QjFMMxG;_WI474~#OFE(`oT4Kuu^Z8m(UE{Kt9fmUdwkn2nJoZfBtZ0t
zx72D;+u|8-iNnb&9>L9XO!K;A9&d)xGVquinbS4%IH@H*9GO+g5)EKYbB-B-H~T%-
zO7D0}vpL61q-SPn9BE$ZIEfP<HphLhI13`UW$GowQQ4c~c+|T=V$BFdJjKDemY>xk
zxe9(B6($evSdae_$7Q#z%YRAJ2X$z`f9cX2sIMH=FCE{zK{R{AQ1Px?r#Dlohp>C@
z^%JUv8`&?9ihQ0G<#}zLF}O`Uo)X!|#{j_8{*W#Hbd225pN^GF*kPnUEs&dr<6b{@
zn8FST;dqe24kOrMF+04+4mNhE8m_)kz}_feZxqPB5qNDx1iNIvp0PvK2xRWZ4vX30
zDm&QNp()FkU}A5uL(>}E_fU%r!9Kv*q&xUk2mII51>h$gaNUx8f-w@PWRpPX*+yG^
z;;pPkq*5gDM3_gQw2&Afe*^WQBuIaT7=>QM-++Zx`kS!w)Q=ls|A~uA?zrrWr2b|*
zB=oia7GN2Uv;P*I?lXy{<<Vizc7{EV9{2a!fBRr1=ts~LMv#$Y0{%JlP%;=T84C`a
zjHsF<d`%=BPe<T>9?8K~YqV}4;yF#^4cy7YxpT!^WB64L)>Y-8tZ_IFLe9>3djQf{
zBopTLwK_WE`Cw9jGWsKTcmB>8JRN}=Sp9WSyBRAA8uBX!O`1ztwVldhFpotW8emWH
z1Tvm~>!93`NCVNL9F#T!wG777Jk&7|cZPE~$KXyowCXK*<T}99&;tHfR(B#W#6PxS
z4x387V?R=;TyEHF(T14}_S?sPzXN`IU?!jm?zTV=P+)cfj#Kf)|Es~5LR!wkaW1|T
z+<hUATgeW*cMN<VyBXsb+ar;!8lyO}JFEnPauZRm)VyW8t|WZmgwc5<eDLU;w@G+j
z|FOfd*C&&h%mcySdOK(Ia6ri3X9?Q^;SAWMI=EWF^R}Q-;y!U7tw9@zvUo<kAzq=)
zpdh)4Hv}IcRH!2~69x!l#XG_*VSyAX>_qxo3T0n0Mof_+#12S<P{w3d4&IlYzGuWM
z_U{cmQNMT8w_iC%ND+Xk1z^%+#grF(CDozB*1)_$E%Z+!=pY6EJ-042u?C=r#=t>S
z^jRD9Tn2WM?2LZvPBJk9dtu#GKghWikZ-GjO=o@PG&w^)1hs$cq|;m@-;i76HYB~X
z?(&59LOt6Jz=KhW8vRjcFtnavKp9{&0V1O<82=S5m{hlQCv}v+0a+kvVY`F>XY!b|
zLTZiF7O4wTH>B>iAF(Fj5%$A<Nctcx#J!bxe+|+)q~j>(eWVjeCy`DeeSmZwWqyJ5
zCDK<&UnAW>x{3F{LAr%>8|ho5`$!Lven9#W=_jOzsPku}M@Wy6o}lihNR;$~M#+wh
z?lM8WQ*E1JUDUIENg6=sY-oEz8r!}l*N`OKwczek+$qDIGEkKS>~yys#{1_<zH*Ed
z+iIYM_GFd~J~P`^yyFdwyn#8t?(m)VM~|{QY_+);?mWgFA71+p=<zzXUr2qVD@a$7
z%8))s3dA$4$wE@g@&|Sw0=o}^-G{*LLtyqHFMA=*%aLyd(ki6YNH=ls8>CxEw~@X@
z@?`&S1|>W}2~SYM6Sj5<eendjpCI=W<bHzOPmucwI6xafoC$u=3+>Re$V}k)32^)b
zIDP^gKLL)P0Bc6u3{b-i^ym!q=nVAe4BoCMXx9_8>j~QR1nqi)c0B<U?T87KYa$(y
zy4Xq(@v{VVc%t+YlwN|;OHg_VN-tqp!V{51+djsBhIj^ye}^k?(9;|69rwo_fwTd(
zdZBm0W$@Go*1|oGGauVkVB8<i9|7w(@ctu?uYB79^w?$O-hv+c5IuGV|8bt}^1cE+
zP0?;|BIr7z&xr1l!3P!*bV#QUG(PsR-3O(pA3yu~wI}p9|JZ&2b*aA|*?zYFS_hcy
zAKQOW=5uz$`HJnCZHjFhelkvoj}3aW?F7;u_1g7lW12Sq*qHu}kF8LvSH1qf9c^n|
zbAaCQu{{Nb+4)Btm`44-{5aszUa+0ge!cFjwwgWB-UN0l+Vt-?Y=69Zk6DJ!A2o+s
z#%oLRWw~uDo!?P^J9^~b&m4DbKia;x{fs{4JqhaiuOCnsKDN_n(G47L+P2w_+Ma;+
z{4i?H+3umonEgjklAo<M?p?w&V%unYU|WvkR$HlUvF#W#7%|co*gmP~;e*827K3}C
zHY4)$e%GF{^8V+K?J?_99G|k<ZOp3sA3ta>tUToB)NK3yzh?HaU3>jA+x^$ySMP!|
z;G-V@r+nHoJAJBe-M}b+^#h!syqVf<J3WAIY~w&}y!R`feb4C|mkMT`kfWaV<iDRC
z6szU2oo2smUx3>a%#U4Ap4y!Ff?~nlQAnNC{I;|B{RCVMBiqL8Z2kfN(SE%`nJUIX
zb5Ctwg3GawrgPcfU?<jI8`HX9^8u}X_V3$}3;bjIf?>#Z4ODj+N6v*_le;SN-1_(Z
zf8T-hcK!%lo-w`N6JN?`8Jyc6UlH0)P4L=yXgTiCB%0t}3+UZp&~aLW_qM~g3iO<=
zh#l#UFT9WVV*Nj~%WCkg%!979oUDPqv<}}o(0jgx)^ra(iEi+{JcaxapgrmF4dHc%
z@VYDUx+|gX>UbW5Zy3sn#h9#tFV>&nt3zpZpmj2>+7nt&A~YZ~zU;sFq@X?Z@b$)w
zczxt)fNwZ-rG}6djqo)>XKD=I-2`7>w5J8?Z;7t~ElbCmAJ#TE-ZqKra1yk*F2F@s
zd=0#v0lb~=XlHN0+6P~Ew74&Nowb>*YFU96t;Dwy*Y`qzgEjcguuutDVE^g-I6PSb
zygsMVt~1d6bkP1T<Ng(RemtPjT?2&I;q}qOb8{0=eFNON0eAP%ANPSlkz<g}u&5aH
z;~4bg7z{+2e!vLp!$6KlJ;$H`J30<;Fx-W3e6hDvaVHI5AC5H-jx~3VwIGhQ0FE_Z
zjx|q?H6zCw!&hrS+!kNTF(q<LNgPvHeT^^MC$tAzlEvo>8FjchVa<(W&70dE*ew!Y
z0X7G-I+l`UfS=*fkK-|r<I#`fF_7ai5Uc8sA`io(p5syA7!)`L-8lw5IR*{D-?u1}
z;ZEeZli=NY42&}xbi)&7zbs&w{V(=QEv9c^blLDevsf7Q8Q$pG!bIA<)wwH<Ejzzq
zB8}Q-w8OE(8{Kj2oY5Y~uASTBDSwldz-%3z(-i{AoUR01=?4uTkxycBNB18{;`4?M
z?oaCSV<UcSHM}5yG;}kyBxZ99NGJm(vsS2euq$Rysb>bQ9(|h(ypIItPTF&^b~i(U
zrO2OeM@en)AC$M^y1i4L%1(K9@H`#KHstAu`%E8Wb+J;g-wSA;-3!1k^&azD`y>6I
zr9s^S>gfSbQ3H+HF)Rg+jzU}waf1yo4wf@41B$Nz?n7DyTr~(9%?7D~n8gIl!(0sO
g8LEK2;}V7q3>z6XF>Geo0=!F&38+Q{SPlUJ0Jqx{xc~qF

diff --git a/static/fonts/roboto-v18-latin-300.woff b/static/fonts/roboto-v18-latin-300.woff
deleted file mode 100644
index 96663f0727fd754d8300397075e64981dc992df4..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19916
zcmYgW1B|CXwEc~}W7{@%Y}>YN+qP$RZ132f9ox2T>&^cqFL_N*+k1NMmzySEZ=2Lj
zPE-^C1o$a369A<D`pD=X`+u4Ltp8ucghfOF0HEX_PV5K9U;$vYV)AlIKimcY0M-Wp
z!1ngM?3jxwsR#l95P3g5{13){8zMBxDbX_l0Fbpmeu_WPcZMS_F|skR2LPZze>Bwq
z0El!yTFHiyt1|%r0NwbbQU4G09iTa;_GUH!01WJpj^ziPes4sTW(H0_zOej1njiiL
zkN{*eYY)?(p)>%%nFIh>_BMvOWttn?xB~#9J3kuZAH1L-f`6Nv82pUIgnw+d|L~zP
zXJP(B{&3zuHvSJtpv%Es&25~2e8sW=0AQ=1_?pYKb#SchjDB>IkUw#3{$R^&R2s*|
z!2Kr{sgoZ+g8u-52cm6jU}FLRNdM>nvp+g-Y)Fn{dpjrRAMR(Z0LcI8zHI=;_Kqe$
zzS1{8_74xl=}8Z-=Dr5k#|Q)@j{)BMz6CBX2=_+?l*byt4}l;^iTmMJfC+q*Srbv7
zt`Tk$;}T;NBNXElQ`zDEX5Q_qi2a5EqnPFgp8~@Ka9@j_1Bu7c!Wg{uBbH5_Znjzf
zziMg&8uWOjB)@hq>mt)y#-Y=*&a<uZcu5Ets{f^hcwIY>2T{9no0j7S9+mCA6;ax-
zf;p^fj~0cvFFv}m^ME|f6*c=piHIB+6SI8x7b3Ba3w&I}PS_5#67-MAwaB*c<Lp2E
zKMb&9Vvhy_t>Ue!tupS~?g9%~TPRzI^hn*t%=;pSdb5(V;J1pix~_rCtz%m^AJ0eH
zx^{+F6}di5o>#qA<?fWgt|X=;`xtVR)b&i2wN#aL&D$P6Z2CfMhRAG2PR$RP){`|C
zLwFaH-50}OIR6N7hIVmAXE&xnxc?1!_m_GP9eeksc@Hjo543m>KYxtbeN5qhNRY;`
z%u2&3NhFX7rLwi366zx_B760Kbs9xHYlln1P%JW42_>Kv{8L>Js9NMplHs-$YpQQ(
zUm0|5+O+ZGn)#)eDzrFiV0kRwG2aBi^Nr{=!TZRWyL$W-;$xwwk+NLXj8)mhS=j<U
zZP!R<)r=;kvBs3z#AfxJgS%v*vvk?zMYCh?^QVy>;q3ytRaK6;-%e-1RI;J1eN~ZG
zS@YtItLCXyQMNdSOtowKRA~A;gZZ6r7rJ^6_340YbFkWT$%*VmxVd<xu*8w3SfY3)
z<+jGTO)>r=$AHADJWa-?AVs51Wd-<(+AxdMN?~u_#teOZ(X|C+(#omy`q^s(<SCxV
z8m@*_Gl^9zD&`(~^TM!W?aDQ8(*kbETxQ9d7Of6Dg!j)QdzPVSeUBBTl-5xFk|{C8
z99;5B&{H^%sW1JrjU{sR#8`FzP#wg0ZOf(6`#ILHB_5nB&#`HXarLD&8gWme)a7TK
z0^ZzJlJCqsn)NfjSQk>`-;eEEr*+HiE&g?xnOPbEV~I}dlRgmTTlZW^_nb<0uTh_;
zv(qn8KIimLaB&r5_xLkhwr=+q_WyYQG3>=DfYJ03O=KfEB`b2OQJSWgQM*l-kv%Vz
z$8O9Uospo+G<<JxW|r~lR3H1_9-W}QZ|IuDpIooX`5j)Rxo>|2;bmOA!AqPYyC#F>
zns3c+gHY-H;__YlU{1N4kDu)Uq56i!VDw^b0Z}qP5das?K0q{K6~P@V0}*>1i2fk6
z=y}3k?68?}dQ;!@3^kN|NGf@YlIgvb9Mqg|;@b$zQPzC!@KL=!v-JT+Q7Gbi7`UMS
z;0@6nZ4yxit>Lu2k8V$vS;M=IW%B5>(_-p|5mUmT0;@2dp%`RPaI2YQKFhFD<sqHO
zB@+5Q_3UR~8O0JKcof-VoJ#Vkw_~2f{glg=cjq#vs&w|`__?%QXlPpcjXTrUOfT_J
z=yLAW(qc~3Hd3g+!^iBlXS-O4CDWhp4>TL|1QH~Q`N=8X#N+l?cB(|t!so;lD@asI
z3)w^XTTKI=-3?40C1iQ9L1(>ry{vgtwnV|^SCMPbS~Ew))y0!q_fFS&LqS9L_;x&}
zL_ij3GHDSNVi2b61O-`w0hUu4QyiGHS;B*1`GYB{)#-pIX0Ivch-x!)xDHeDK$bp6
zsWGgX$FMr@eUQtRNizadMp5I4L{$Al5fu+64WUpGmr!v(0~7`w)R1^;U7}GIO9ll{
zQqdF(C4)}=L_FR^vh747Qv>NV4ke>p;zSw>OwsP@Tn_EiFZ2dcq9w`5N5%Ur%x1|H
zn?!>S6dtEBFWsoZx%qe9DCD_$R8L1$;3<cUcxuI6s^8-FQC^@M$A}tuQaR+EB%{<8
zH=37o-l^&IR2XggC0+W1VAOQ#r9?7rRUJliU_zpjC$6;5bDKy^Dv>p*E=|#utlHH_
zmZWOqZJMi#3sS|vsp30|2~vY}sCBZyY~ndGiS|v-rIr?I)U`r_PvRrGQ0yawnOEu#
z!|hzE8+BK)E>q(3xJg$S?fNHynCKI2`jVeph^;yYu8e%ILj7R#en79i*gZc<!F^38
z8bs0G03kG2Z<TcfuAXD$XAd8O>j$g1f#Z@vFVCi*nmR+p+UW(qPWJ#aad~;5n~vUP
zW}oMaoK}C{07Xm(;NxTXhl;>9uhPB>Bp)m-jM9{i{vxXGtd}+waSfWt9COTYVJ+^b
zDups<s`kt6`<5H-FR?Rp%!&`lxY8{c3Wey9P+*psEQol$#jM~b4G4%G<4*!k0jYT0
z)>3pJ3}7o+*@G+Ym*teQ(YYPQNS2=>Y@gtZ+2)&!m{WELrc+9y5_nfxt1V%WYeNYo
zoEP#07zaksHBp0=Zcwt8dC%GJWHHOO?IcpywC$#L_(9|2w3>xz9J%i#kmq>ps$js;
zf9xXvE#am5Sq~$9(^0bp1AP;H{p>-@iQZlc`1}ldrXog01_l5l3JU{683?5r#`fm+
zc6MJtfPh4J%q~8N5Y{^l88{gD&?^B48ubz!EHwWJEMU$P`sbwLz7{eLGLmBh2;JQm
zd9jgwj%J}=zMDfcrJiiI@!EETGx#rU#+cc4gmqTN);JR(kJ1yPZa){Tjg(jxR1lo&
zeH8uWhM}$RbA`};=1-(btH|EU;mzj7{(}7u3(Oa%K&%ME%6C#%KX@hq;)A-IXc;lY
zzO<i#gLg8iRuARt?;-piu3uYLr1Hqoesrr}eI6xCOyh`iIwM`&zVvRn*qn><p?_*$
zxi@Ty%BE-QP=7YefRUSuO92KX3y84XRae)qVOdo-Yyqe*8^>+EE}EwKgD%{91;TLH
zRuIH+TqYdIvse}w(sUdaS(i5%HXwg*I<Dio#W+vL#kWIKK>4HiMj9i`plck6q#E&}
z6>y-5sOmGa<>9g!VyhZ>83SB*0Bk$@#-zV?*<JTQWeo{rcX6Kfx#{#7==QK;cRY<L
zY<C1MxT9eQh`EPNI(wyHhp9UUWIE%bg^}9CDzuGJ$~8Hf7&9N9M%3p@iTA~GW1`7F
z67I>#5WXf~@sl85ouCb=^2Lq8^M#Gc@-<~$CWscoCkUNmCrD|cCkjWd6FT8Ff7f*W
z{1X5wfH^=Dpbt<5<N;&>wt#5B$WN~i5C#1EnML{12cQ7|0U&&H0N}pT07xK&02okC
z019Xf00FEPfC7#IKn3pwAOLFtkRU(-VBo6&@c%yRzNQlkBnB#g5o)$}*<MM+ADv!T
zv+~CQ0E*Tj_N)1cL9c8MS0|4T0j3W8Gu17CXUBKyGh$%_uQJf%*oPO7K0U`Uem(PE
z&hq6MV(#7(fqMhnp4OyUx(^@jiN(DN7MPYCGBimGJHdHQXF5A;B(0RA-{8+ztvySs
zeu&PSn<*+1(x#h$vk8JNt3jp10odQ_yh*f}9@wWxWun%R%NUUiXc9`OV&hO3+dA10
zBBm1;Y@crWX;&+F7SB2XKQjs%Bp}hLOU)vAPI7Hw9lh^MIJ0koJ8S|BQ#ktjCq+?7
zYk?x7Lv%$;hMD<(Q{MujAfXs`X7)LZSN5ex(!WL27gPp>Ubb&lnX9N#L6g`}!n$;o
zN69YHoqNK><yfOv);xyg>U9dW5~Cjgt>o}S01yE9=j;vq{SAP3Uu*P+;71WdIr+2N
z#TDxrvJWVhP!f>iK`@G|8w~A2w+@GP-9=Hp=rX*<?Qp9^vTDcTnnm%7X6zy_q1d=H
zGrc|lkM1F_?`UXgct4svzn=7m4h4c-RB=V%hts?X0bo$So;`RDSh?zD<3^q;OvY-u
zK2U>mHJ;fFr&9gG*=mHh0$BL_&GROP2RtMzk4Y3}b*_wF`RLuL*uGHyuARE_>yh0o
zqwq=26BCaMrbv!12tJz{dKq}TqrbB_cn5{4kFK3BujkvYo?|cF%|ha7=787>fVtuC
zt<AsCTS)G^hKM0;@&ouZWb%J8vHM62r1hT4S6*yEbrssGd8`e`MqZ96meNI{RS7D7
zdJ2^AyEL&YyHs)7DHw)nHgS>^uo|WuTUBb%EEZTU0{7NxTL*W`gM@<`k=4SWanX_C
z*IPwi22Ne6XqVO~gtKW*KHQk;n;G251?c?itB|-8arTAc0fgcebp-Y5fD!4FCJP;d
ztB7H7x&^`YZ!bcU#>hurFz88x|1pDa0OjJRz>inAhBrzQjpZG5#g7^o-&eyAd^GfA
zL0Ru|e&T;pm#@Qhe$sa(&+3gUfV`L;RT!eUGebSeT||-j8u6Kn?C%*z=lpf49_qY#
zaIFxtkY8S=a8|qU_xn_p?0d~&#b=@Hk2ju8^8D-&(1|kE8eKyVOWP#C@fzP58bO+-
zl9+u_iV(<=l&}sB6MChK);e61NtpJx#g!<Dg)n$K)}nYJ)*xt2N%4HmB1d$Ycai!r
z<gK~t{3>ze=&VBF2N|Y?qPDlTwxi-_vT-FP#Ry6^3c8Mr4KyrL5Cy5Z^z7(?nU#Kg
zldg}!Rb;`i2tKZ4OHW#Z)oHy=<xHMU`Eo2=kMp)_qtz-Si{ZtbsSWQ+<9X!w;duKs
zoh?Tb*)$s;xs}Y&mDHDA?*04Ohv~2<0M$6<vn;ca6TTY(+94hkP9Jt9iS`La$|Ny{
zFb0E3bc}Xu5LDn-_6XeU#ccHK>cEJ%=153k$?zvbcA>3DQapK~6I17jrNgKxTl0aj
z$<D~9Qn8-$?MPPB{x<IVoueB(-fZRYP4v~K=w2tT-!;+qoan<Dhqv(b6=uDfmv>!P
ztM5`@5X{;E{zi*9b1xg|<s^`j^?;<^BxkLk0=A=i9+vqZri01G(N&?IN@CeE5Mblf
zPm(QpAIM#KkVGhvg^FCk(#F&&Te^~Aadf^)DBcCz0}P3QlcOm8ImnWQol-VMN+U(t
z-HU^8id<(((O1%h?C@H9b&g2=1O4Ja{z8Gr(G9DK*;~s%YEiNw&qpQs&d|hg1asMP
zJv{+<%}wei^MO4fua-j8&!HndZAPBQp?`a&^UXLXZneeSb3IRC!{<}Eo1Ips+k{EM
zGYMYp*72?f)#_Q~%XI9Y*L~NjE@z+REN9xy_m8nQGnf7+msVzW$jGHvxT;>#9kRrw
zAOs_bTD?ZB#rS%)QFIvt!ZC!aZ|d7>DK(iC+x&~mz=5QWGFip4ARs3s^hN}jWamiy
zxpGVxiW6TLe}Lh@8_0g`lkVFdhcu<9Y+28285l6zn(h8_n<ZN))IlG=^*f}-_ob0b
zyKX#R0df&Kr@&D-*i7%#lH00g#Mr!kDrI6pFp}~12_ocx+J8wV2m;!#nl=rEqm-6f
z&qZVVY;b5D_3<e3E>ap^qWCrW{RW;HK~v4?njAMWaMCew!;+7i5c!2rF5MzdreZv=
zgCn>gU8^HCr76Yms%jk>DSn~eFjj^b?9QUdix<Hej;UK_lI(pEg_o;yN$8!%!Hq5x
zk3NmTtI)j;yO_dfE7&uKryAihNOTiG#jh*6B_k5HCZq}}4W3!>FzZPK^r)H@Gc{6O
zGLjw70>+0)9#%NKKO^&2GjwN10hkI5-C4UbaR{f9<Bc*iB(-<_<J)ii+EP^B@LPtu
zr0Z;NN<B=@pWn+M3d8|aoHxS75#<fo4No>#SHfA_Xa!bRUZpQGR9{5s5##AY6WT;)
ztd-izrADX2sk(XA<-EBB3r4_w)%pWuK2h`zTy`Qp_Q>2=Co5#0skA)9w;|<|<U`1P
zHg2c1`ap*@y4)^X=Xy`TZf<^kG6>iL5)|#uU+6kQFq=3XJLQ*{+CZSLS?v-t2CGC-
z@zM#11+~b_@$KjOHl*CurZ3T&>*Z=2_Vsq14}5>nLFJv-32U;y@<=4s`0s=1#c4!t
zKPo<7vhS!HW==LJ0D8HsKNc3%PC2A-#aIbc*$IPil+X<Vn0lUD1R_$k8tJg6LxN0B
zurG|V2wF536r?C{I3Xx9;f%&ys48I`Rqjku%NezAzf)&07pcPZ1Wwmf{^N@wLWk63
zj`0B+p78mC8cD2XP{F_WIfs+!&c^I<XxW44F1GhVdNb=ZF#|I{ZNJyktti(loj+b4
zdy~kgep&HJKz#^IT5?d)Pz*{H6(_S}Xu>LUWs<Z06=xLkBSdh5=KjWnVf*Fg2>tt)
zoY@28AoBP+Do-Q|q&Yjw!pg3qlz+=Boc`G-Syw;TGlGFJ>g=l)T|}5G$Nx4oN~^9+
z!)cId&GOnE-H?Du<?iA<myNyreEjn(m$Dv;&~ECa+4wx?b$_~Oo0n@Y0mF^zdm<^C
z*&`~>R;$I5xOm|=;NMelO;;cOnt;iAKm<ISb#)o+dcgQ@F&k0=TjD|SlR+q@SLCk&
zlu31b4TWS~Vq@>el*v`N>#R$hAfcq$(t$%%b8V^oMiy1`t=zdC-h!?`NE`zOMQFG<
zcSeYCZ~V4^TVgoAF-q~_**x%9g%uVwiR-YFl-w!A6QE+zW5`E$?r0v_;HU&hih#V8
zJc8d_SO@*IhgBUmH#WzP=LfXMe(sL@m$?tfkMF5=TVysDj9si>KzbO|5UzAVay<!r
z9%hrFFm^UQSu@FdPH326X=kvY0xYm;!RhMIvHUI!$w}>A+(1Q$y^VjTl>8-hd!y~?
zql)ed)P6M#>jOK-+Q%A7&n6HoxWNTQgCr)oAW+8>rf)P7H9n_F9mqMy$jNy>S1O>J
zdeiWU4aooTLY@-ysr4A$9jIU?KD4^~yZJWy?cIDa3Tym28G2MWP~f!x5&h8O=hgZx
z&q#0rN#L2pp%|2shJ45@0#Ud}4xtSUoNrE*CSrG7Vd1WP8rILTcyer|d^soJuK;SL
z*&iT)02RTY6<MzGhln8bRr&zqs$ZAjRW$ECC|Z`%Vrc<<uG9)Cwn~Ddp6qZWGstr9
zcB2u7RfsYIJb1~tgf2|fOJ9WdL7&sIks*nUNnAWKO8GpU@|?+O^-;}<sq}9eU-zLl
zD>3u8SMs;f^7G-J>zu9TQ|pag516NGJ@)Usm$eroR^+X0-=nR~29Im<1#Y&le`YOG
z%QWns;$H^Sw)u;V{kRSHzwPo_SUNB0cgX|cnE&<aQxdVo_G1gIO7{iAW46X&!+_5*
z$kRZAj|D8GG2JXopCj(IvJ<r?C}!pl7?BkHJ|&>y9K-^t`zI~s3a^;H@Nrq^VP_WI
z#eTk}v`U8#o}Vcm;(X`3&b26KqoL}Ia*e}I^nKfj$~Q@t{2)`3MJqRkpl|>&PTuJG
zvb-z?-Q!=+lrHdKUyu&$p#K6^Hbnm}vm$(@giR2+5l8OUjm8#$<qU}4>qbKhj}h;v
z1I40e;)U;rDfW#DMMAd&FhDDN{hAGzrohaIyd9mp7bNb~{xaqq!;LPHEnU$Ka)r)?
z2_f(g_0EMvH0(g2;q*r*Fcbj^T4U`$F1CZAJ;|LhPHr$p3E_b6Mx~38ft+~c#xVz`
z8Q!CUEAg+S;VyzCRZ<W6o%I(AS1N87*myMM7%uhr2q^T*<Qw`DN(U6V-JIS6wS7i0
zE@W9P%j&pH({@*$3ywxv#-c5b4ONGU{w<_m;SZ>3KQ)fOb?a@&GSSh|3bg&N?vCr3
zK|+|}X}R#YN)>84UZCnJ-CKdQKABQlJ$8@hSE(?jX&HQH!Bp;#&s#_0$KMsC^7xwk
z-6;2>Qs{2K$>Yh@FH~Vlt=zAc)J4XcIbDg2in7*c25`x@VpNVH2M*nkAnCnWM(zI?
zOz*xKQC*z2DrOooi8kbwXlEJvmst`GfhVv{B-0w!&gzHPEg{2&SA?Pv4<e~<tH5z^
z8{91PPPC-aFo7O)CM`NBidDK<{@sAnEbLU<a**QvFt|ZmIMDSgclc+e#+);L9{2jj
z%m3<^l1~UBIrZ{j<5uBT{rfFua}lU8F!A;DbNhRLt)~7E>Ms|)^w{?&r)Ch_29az~
z8uz`Yq4P2Od0H8Qih#h$O<eBSDHB$zO6XwwuUDi&8+QK}(u6Uro6xJombky;ODItu
z5P6O`!5)DqgStefZ=uAVqklG41TjY>i+>~0af$uSj@T#PfBBd@ZmssluTEnYH!f!u
z6@>H$kVCPoPJA;6kwhoiE3*#eEj$$uha2kty(cqeFa+1D6{!a;1d0X7Wn&;n`xay>
z9`~h}1u`_86>`Io31>>@4vSK%sw_x2AB6EaicPOPT;z9R#cX?y)oJ8JaoTP8EfDG{
zt!{I1bu*Nly)$oh1Wj|oU#j!^jYAsTZjd?w^;s7bZV_&%p=yc?s<Q)y!gJm>cmAC+
z*fFt(q<0n(^kwJe80Bx3W)VZ?HsEofpgfJZ4j$R|Yq?(qZp^d3hNmE)_}koh+8?Lq
zce52{>b(1>luIGTZK^8{$&I6jANg?IF+!Qj&+!aJKlIZH^qp6q$Ty5~L|VagZuOSB
zb}Ihl9Ee(=PERB&5*%r^mq>`>Bq@pDi$v26R%NqU<?F8TgBkh*9Bj0QTXEHGbntrm
zoxi(HYq5j`dQrsC7pmgtt{zkk7F11+AHH)bjnBI8gf9rpYYrd}5y7?da$I67R`N+6
zeI(y-dqM)1YzS#9_S^q_X}pKbpG%nXqGLDjRDz+^>mx`^Rq(@eNudVLuen(?U;cf~
z`F;R>FZtac;-1^^`*X|W$m@$_i^y3C4qSqFmhqst6Ycm!6dJ*M<%T*D-fUF)9`QtI
zk%s$rSg|0IP*_Bny|}!!)m&6r+Bv}-p{d)JHO+6+PyWjbRqzqv3kg%usd9s&^KJY^
z3#LWJ9GzIM@5R37VUyzaGif9c+{ee_9q%>&<2t{~MCwe0lt?QSCa9-A<6>-@<aphY
zWoWui6;9eEfn%uvC?{#`Lp)M}nnQC??_P3yauPN3I04hTx}J-C$HadJ4RH3)`?gjs
zcy6__s!Yk2&I1LZkx+L_>wpPxCQgNxdrW)hI1p$lqqjvl&&+z_*sT~W>d~Y7b|7)J
z<q{QVn9_x^`SQLySiLT5>oWh^0?UO<QceHJ;?6`J$9KbW9Kjn&q7O<@zNx4_P#ahU
zDPq)``X|b7<zORHt!A)=j_aF{|AXozyLoP%4iXeN0NS!MuphT~_7|xEwPgQqNx1_P
z1XG2r!e%CotuQgvu!pgV^(dCk4{Bpr5>V+ltK_8L6tM+pTBEJe6j+#}n2!U5tz%c(
zcE|eyQ{-F5M>%O_%EBGegHbtYktS1^QyNqq*yD1T=x*`xE%0`jp<clK^CBX?162C*
zb;zWc!n4tkmpqfSJV|NfjX6}jH034rX~GeDfKZFzKjk)f00ZIv$O$D<ras#P>-$Lc
z+ui*$qTwl;GcoqGF%=={B5}h=&I$H35zmJ`xhNA4zYK2!%KkEDL8;&kJzMS9&z5ui
zZ+~>%#3;8y8fCvr5#!AUrS8vwUl#H*uS&0{o~x98(Ma)eQuI}Zy4{G1q}TjO<DxgT
zp^nbV&Ics;K$Hb5K%F#9_PytY<$-x;Y^t-(w+bVfQNHic7Fj)`<1+_FX45!{X8Uwg
zg;eiuYBfFy4*H+%Mi_tr6vJU}v095j^FSH;L9HjlI!ijqe@Q7hN+ky#V#Z+BmdaQ~
zs>TM1hCLa39$CI>wEzpRkzBXSIyF~1A<(7}2n5~Ccd6UMZNDzv4`f|+8a;{6W)Q)n
z&9bFe9h9z)!*hH>ye`%Rc-&zqz-{#S8737NSlEmM=;=j;+N!>`xX>IWTY79upEt%I
z`9P?ODrby2)_>n(bkyX~+o|sd`CQw?k5?iTPOhiSEGF}-@VIw)+%s)TCVt)~qh_pG
zRv$Ma?};%G00BF}$qdl%+ju&Q%4K^eM0{Xq;uwY@Y6HzN>aR71G>~dBZ=yjZkvcPr
zEs|!zdJ3|fmrP?>s^ZA9JI@4)w@d#Gb|Y3M-{!mXQx7$GRNeTQ!12?&X+7KI@uMT(
z`>B9)3ZJn#%u6v`st@-Ku{JB&s=62*CeOX6DxpCmx&ympb67qoe(gybBbdLXFBbCW
z?qGUVJ89+Pi}iXn7xX3NYutRrmdr?iKH0zqor7vmbE0zCAxY0*A%efkA0FNLzT(oI
zITUGmBX6Ug4(MawzMH@A;ws92D+~<_7lom3WNY8aztpjO9i&u>^y}~=01+hS_QISw
zR*jdVel;LDis&0oQclFS?A7UNI(u~AJ2c<lcJ3o08lK)yN$>pzl1J7720t0-$wn^4
zv2v7*in2_&_GE@D$@*A{i2ft63rwmjv@39IRh&0uq!9Gx5^vhx$*x5g8IuraJT6sI
z7!qd}<sxOf;X^dUcTFR!T~}aSUI3&B_*W=B?YbYMH3hwUz<~ai28e*=J|ywa%u2WD
z&ohop{cPBaFgFUoiS^Z^eNOeN5%e1|029>8+O0Z<9rl>wcwy|8C4?qJz*RU34GRB*
zjYk9?{O+X;q<JgvY@2Z(r+u7Td80|#=$v@Z8;h7a^ZX2kK+cf8jP<o1xpNQ(DP0l&
z5;C@5qgrf$FGDEFmoda7-2>eq)r~wSDF*}3%mg0J7kvQ-={ky^pS$>)7l4tPH>Xae
z*$*r>BkZ8ah4JZqU!onnRxXqaR$?WqIC7pmiKcvY0o82(A=u9xjC3YFWRaxuWYz)z
ziob3)+m11lBaXs#0;w&87H!QDH3}yTSQ{s|-BdjOUT4$!M2^AV<!Vh9p+VNZCC;fL
zEke}p^OjG}j&$r9-`>18Mv^><vXoWC%tF6Cp2G46q}U*l0sH|fJi02QS&FkeGr@C*
z{V%%%Kz)$6T*^fyT|~XH+K46lK!U;k5aRw6urwT{C<=K6Rm0Tcar(Us(dyOcgR(T0
z9sEqo(s}%u<E%v)-di|h8SJR5_<u4Y_Qz%a;c?mC+8jketW0K6(_&6`PwX-#;^ap<
zRhBbjPp+OgTv^*jFP=pr4mH>(XyBW()r}Z5W)8xwV<=DZj;wv)&3(9=z4lvl*!1A?
z+}0tGdaX{8db?iSd7szT_{2_ZdNR4qZG3c_AGINKnXJr>wj3Ar_3U68y{`fotcj4+
z<Uv6BQ430=CD|s+)ai9o9jTcc1+{}(9+bN+P2KB}aT9M<zB~vLCU3DU9U98aJCX3`
zl{QJB<ED6Wim=j{cV|2FR-S79w04PZlUKsj^-=nD+cjZjY2n=Qv<bglyx(d#-Ynt+
z`uLfm)JADS1;ixK@%qft1wGzF&Gh@E#PWYFDC`yI(=?E$qs*&Th}zd9^}s21@-{{6
z;E~I&|IH}Nw5PkDH{0jcCGt6EovpMVnlc)0r@{U0tmdcu=`r!tbL`{jK6Hd{E3*9(
zYsi_@>k(zZnY_Z-r=tEvr7m`Y3aL7Ni}@xgrAO+{DBYkW!U92D6CJ2-WEyC!h{s>e
ztV*9yP)a=Vao6RA>@-wP=Id~DPU*GGgTb(~)$YUIjY5hu6qGXnZJ0thv+?o>qU?EY
z2JNK>{9Xz=Y#Q#ro5;pAhKdVE_f%^^<rt}~0z(65b{p-n642m4nsgW64E#Wa#pX6R
zDN{lb=tycG4p}UmP=LN+J&W$4WGlz_ZDVm-eQ5y}vp${Rm+eP|K(BlWqkVJS9y~dn
zHty&99r}8pSIyP^6f5tUKVx?v27t^2(hpk$B^!wcR!4ytyTv_~Sk2ElOUKVPq$H**
zmW(#B%}e*BD+-Pf^(aWHuCgAeQlJR;4EDp}YWC9^7hUs=35^v{PYqcYGQCcD81Qx)
zp2k+x%$|+j5P1>4_($b%B*A#Qs8gqdFSi|NB(r4yF3G7D1jQ8MIYA?{Z{!Ll_>jZg
z=UY@jokd=mK4zS<cel2$w9-jZN%^Ohazexqo~&Z{^JezNDrPI)!TFNcVDGa*j-u}I
zZ<`BEF&pM$tsPz4_wD@d=DMw`wMH#2X==IchbPcyQo<uM!3r#awh9PFe)hq5Csi%B
zJMXS_tYe8;yWR}NY9I70cu2zIEOhe3wb+m-c|$A?KZp6)MjeFJ!2x6gMBLkrkeQIT
z!(sj4>J*iwej6-cA%5i^_(hOe;_~>q;!r53$vdSCw4-ukfr=Nw2z3Jtu`F}4S()+(
z8M|Ov+`Px+at+XG-L-*7nneF5h|rk!F+n4KK3oAo4P$Eh7!T!U&T%LxF(ZyKbAKK_
ziTkJBxGMozz?7++7h0>Xs2i1hDHUs&oNQ>Alq4KZO0#;?66efKhC2jJp;l8<n_0-p
z$2&hN3<m9#vPIBiU^IyA^uXPSJ}n7$FmVm0r}rRAUOLi{$X3I=Ax2DVd35w-`jFi+
zmRlLFn6;$9#Sw%&Mim!801QMWTuG#dS50JI!W^Mb>+kt%w?e#DqN2>w8zn;EOECd$
zY}~NefCw(B15p-hS5k00Eu-f`dG-%X@c;|5V6-trp<uLS(@+vsf~vK*H*BCP+;(pC
zo0T<%+pYBIdZ_6Xb`SFw8CxSfrlXU4D)+Dkww`7i=ym3WbpLO3`YetCOe!{KCwR<4
z#C9p)05ad`k6L%1eZspHabY$UBJwqij}#23*C?6DA$Nwvm79gygq&z$0;6`}Xp(p^
ze)h)1f8pZ1WBZ};!!Cmea;Ul_3i`bVlCxgQ;7kVVZeu~DEeY4j?^1ke-;FwJP4|l5
zU4<=rLrrXadNh6?+{RL)z{VamKHsYil}DZD`%*Ow9pbXcj6wBO(Miz;yN9j{9Qrub
z_J-<etAa=<FcR)<At;)wf(6m~N3<lSM7v^U_@>9vDssLrUm)uNk4DW)(knSlwtNi<
zY+QDgSGMdl+bL52uzO;#uDsdwN3J8uB#>?EZj}RQD240p1yRoT7c+xrLu%@A_r`|?
zWWP<WZlQ@azmaHf`?{dc9GWktw|$vRzSpMbEp4#dt^o6JAz;({_8X!VD7Igo;Mm}C
zAE+qpLtw@@Uo)b2P&2m~M86Iq(Wpf@mpTCxCRIqr%p2_qHbc~VNJBP}V;Rv9n^ov!
z-US({`>=@Ec%IAf2(aX?Gp2Ws>VZNw+T8f_P}S;_!IhRN?YNd_xN<jE2V&eHw7JFu
z+7A+u#yaMQiq3;Gu^l%_aTl$I$I(o|>4$fPHn@D$+zvnQ#3Y~Ya2Cv^!XW0_@NF`6
z?n`Whhj=q&6v>@O>A9N?XC4wZJ02{Sc{<+vH|=OKIXqwotJ^NfKT4=jr5V)k;F<1S
z1oLxLs`FE#LbYG*x;?|uU_2Ze1(Z_2sQ{0Skr4@j8E^ra;+_llvxUoC!9Dr)&ZD?)
zw*^!xUk>5(b1f~;2%mR@FGmQ*1@<-M4fYu$NVv`k;u}GIqe<1+jWf^&$h>f1zEyyc
zKMik`3@o-q4WcFT`x+-XulKwA?8h8PTB~HV8;+;kzRMX@dav4$6m9(Z5g-USpjfOd
z_OE^1ORWXax)lDB@_}NKCy<}fTN5eF5aWf8&yZG<bn$6aPZei8j-$gd?uy57i)uqL
z50V?=9Ipw;Aib!+nLPi+G-C!Pq{qsu+z)WSdbfWB<>r1^wR;n$g`?y<oTfk#hm??_
z2Y1I{rJ+&9F99KtIF5?Nu)7QD;j-ST7Km<rH<Tg1!41+RsTE*K9ai2g7Mr(sI#TAu
zY&m{ibOzClKRR%;DTWgrJ_TkgNJ>TIW#(eXvQtUgK>;tML<D(j2+5SXGc$Tpj(rKo
zn2kLKzGul2q~LWm>?IyXuZ9Jikbc2Uy~C?KV~I$5P~vm}f<Zuk@wTJ9eG|1m5c`%s
zFzD`P5o3hGU(+7Mo`67Vj%BzPwnKpm(T<XnB>yBI!55{u7a%WMHEd$c#W5>Hmv-mb
z(Z`3;$MO~tq%15&J3EGbi}zpN@3d<zd=ICiNqf1Drd`8kcmy)wiawu9Mpl;OuY09_
zJ*&6R<aeKRRc9(+AQ|5c1?UP^6WrddA7O7cZ;h$^Tq9uBxiFgeFxAR4?+ky`>~^(9
zQw07lU@ZM6BQKT@kD!(6UC@wOd|<Ku`>Eu8-Bp?o0n_vO)XV#7jgE3ZvRZF4T3Y51
zrhL9!+7mCubYKQQ#a%OemZp&Z5~EL|XGejltp~4fvJAx8QJ${uo+S)ZMl$PN&R*!)
z%2wj2Q3z_4>?n5or$57{6!o!Y+06WC%H#6r$&Z+}*bSUc=iYWK7Hf5XCeul#gRMb!
z8W>jU0IsZNr99COD92?IXB3puWim5TM4aW!ESgPmJMaxdY{>Esjp_?5RkB+J?yqVG
z+dTuqLGml4UgaJ^r1%`wV!<YFYFY>~IZl#eln0CTYFG~K!Yp#7bQuPp0=1R0IpkpP
zQmwr}vTECV6LMEgb#wOH!IH&#N!-E}!Pp*D6yE~R>soYwPn<`1!Q}JxsjaOqqLcsw
zfZw|MExwmWw_<GP$O_|?Kqr_gUgh<cP_;WbkuL7e@I3k>(t<~yzs^{-9Za>BErC&7
zsBK!4uh_SfzcID9+(hv?Qq{@<=EKJ#g>Y$xzlz68@qI^mwtAz9xwLwzV9UMcV?UuA
z6Vn%D-9<zIvusU_Z`*M~?{bBNZvxO8ukzGn8UMni9FTd_PC`P$#Fr{U`pSf%!&tq7
z)C!9mW2kcch?%06`I5}uPjyRq^p<dh(hypM$7qF6sjEN8RdlCF8+-LI`!ejs_PCPz
z+f6U7pXX#I2ZRTHDzm-PY_x|N|9ILvneW{IlRJ~A#U|}h%j;^z?Yc4u!V6cu{=)vc
z5CYGq+s}<YtK+0)P|8=Q@nsnd#@A)=B4Qmzz&N!RN4xwg-3_`AqRyJ}j<EDjQ2_Nw
z608YNhDiyFQ^^&TnHu!yf@rKUvYDX4*pWU-|C^Zl7r#c-!R-mF2eD+@@1rrTSp*Mi
z3t9E(>s`6*H(oWbaWjSSEw%R@y;EyzFTzn41Zfk@w2MS#adCnRQCKibe%pps>pT2F
z`7;#Wem{^<XASyaM9!M{nteEw%`VuSjq2H5lo?XhcNOYC^{v9RZsNge2&|ukuocsZ
zaFxBu`-Dd1G@-z0;l33+L2>#q1#9r&MEv9LoK_;Wv;#V0$HX{_XY_9L1c4Jfnee}w
ziD=cmL4h`nPw=#@QP01J-0N_|PYu=0<63bK8Qc|Se!+Y`4--#Uu{@=JYPO$t+qR|<
zGgfU}wNLqMr#c5tPHG1gTvDS~KW&4S$+QRm#L?kxJLs1-B94c_YhjsaB)07b4KJ&9
zHQ5`U_5NzAB2N80`&};A()bIm;!Wm)gQNpUU%f1{Pfqz*07ewj>|CREjCe@^BfT1%
zMIPwIu-f<{iaHHeSY%9tH3C&(sRs9yGYC*Py4KR8fokp|9ssAP9<;1pl2R>6GE9OF
zPnIYl<*a0nWI@8{#TRi)MYalo6L1R{rDl{U|K$3m%SrDzkT%GP^Of!dkUo^5RELTo
zNvM#j`^XngJVSl8h&JAx73WlnWH({P#1^NfF*-piO+T?DTB1;aFX5jUOZ(T?aVWRN
z8DV*a>*=NZ^)R8JQG9(Z=<p7$(A3{`7t|kgw|U7kmG?w}-^Asl&Fiq+>0JN`ui0~-
zgzOXN-EQ<*m@V}_xz0-ERiV@EsV%r<gj8`(kr)-HE$TzBoBXWHOMm_T0)8gLVFtq+
z`fbAMQ^z0$t-qDXlh?V$9iB%Uj?|5TUR33y(3ln+l>T~5T)+Mg0dkH5IM@*d)4ObS
zYh!v@elgzM-1<cS#7-VQPa%LIfO;?%sWrsuw#M@w+5#0>qLM-*#S&Bo24tb@NG?aI
z)yd(Q&PObIi;Lb)rHqDDE;{`c&X>L~lfz>ry<El<)_Ptwo7e00CxLzI>R^#yX|ZOj
z>L2%8=C{>??ddD^PUi*4l$l`07$4<p^z-(?D9eMLFsx?k*6hUsjr>cloj$rCASuu&
zJEH&~&OwQM^{H~Hgm}(CHcP@`|IT-}5U-R!WemnGe6d8<ZRUI+y3S4eU2I>xMY};H
zLZy}vtV!(h(^T)$uo*SEs{*7P3{;l{%>Jra$1QMR8Emb(&1)IM$`USMXvjuWQAJQP
zBO#(-7_*5C&qjo+k;r>Hw+p&oPNR&HA6N^z^FS-GoCO<-Urq)Ey&ph$&BhQyqFd{%
zH3y`zZT9$VH;}hSU$CA*cJGt*MBQ~`2Y=AvCH>{Zq0p!=<Q&Gmi`hOD%$K=pY?~Bn
zSZZN8H&lJJSpMr(iDzdB5H6Br{!nhh1%*tA7jJmAp2dblMepKqsp%_JnFOC_UFs)i
z|1%MZ2Ap3`l8#Xft^8&`YDAXo9q~DG&H!?x!J%0<uN)w71;)hgwOYGNt*WC=CwIYI
zYBr7b_ZgMmj7H11D^LF)c9&PrY=xa(9_u-v-)%2<2L$MbQ;8x=u4b{z`I6vq^pmIB
z!td<lh8lX+9is5{F1hXwq0xl~OVLx-UC2C<u0=@Xw5;r3oT)C?4xD?^849QX{ph$*
z&pR^YN820&NPZu|L^U6>KW6LKzpN($I($EUN{%Pu0j@jsIuQ$UfY`3g)P31&8C`i7
zc<hE|I}O(%BUL~4T4AWsmi1EI^q-9JySXqqnb-6s(mfM*#sG$2jzuFcXY^qV!7PH1
z!AQ`zW*VBtP^m*iEIGiXw}2^Z#&|@;Av`w_ql`@?H0*-l1)PM92Th)|tTwf*wgEP}
zM{L{}Z%<dug$Ajx#sn?LJ2e;cE~oRVj1JM5i!H0($KQjttv355musxj;|;~XF)*|n
z2zcy<!b^01HqN0X;dpDd$s|Z+a>FzP9y|ade}PQ8=!@V5u#}%xi1~u~VGHph0W-BH
zc@z{IC^2l>2Z)S!)1)5+hBG}314DFT=&|Onf-Ci8fniyi>)v{ink<qi`-1pWm}6_$
z1`~@=Z_j#kC`_(n96nZuM1LtdYi_0(6uqtDcvldF0(BnAK$4fYTZb0Olq<+a$-ev?
z0u70x^V_e9CisSg=OnQetGUuBK3cD>3{`_2?FEH!Q2OvxP}-0=;ur*J(ZXG{iFRhT
z4y040C1G#ccG>JDG?)<k@C`&-2!P)SeE?G0!5$P&ut>K&Dv|((J-4Ecm<$OmaFZgH
z089ysWevuF+@%J6&5Ud(5tGu_(`JK9K*{uru1|mFpQWeiiw9510pY)x{`#C-{*fwT
z)HUS$8HrkMksdllgfOxSw`JGzQhxnM=bF#Ba2Q8M5;taR6eybFTPhW)f4dGF;a?^6
z`804m1LPE7xCN`}wa(<yO}dR#0tUJ(_{VT^8J+iv;>aR1u(v$S&U@kPa@R{T8SH)@
z^ZaXrAyca6LUcu%H4bB6u?Ecanl6APzvqo9;0Cy_Xg#6p%1vp>Be)a7T?}6X`Ns~x
z1cW|dioRK!`ZV{#?+m{A1}!J?dV&6Xvo{`oGfv{=E0e8zzBciBf{_3eP4m|7z+Lew
z6v?5SgJ5`$GlyImia`dL3(~KptNS)3+}W3z$tJzMDg5iFEETJG5u!=VGja^mb0f(R
zq=2e_WXEcv_OSJ-lLAEO)Sd7%k(%SgooBPUWu)acz^>m+2F;}?jC+~i0IU7mF}HnM
zy-8>=qtjsWxPFcM71zbxBcn>4eAb-7cml+NSoO3HkRlCA;Ftt&9}I(l=xjID`3p`u
zaUaPFnb?Abl9))dWe(`62wXM?Z}LKHKp+)X>M}L<qmY~tPTrc~g7;~V#Go(YSkG_}
zJJ!m7xjYW5(__h`PAWKYK1M&C$~G^a2_D1@g+dQL-vNR1NBCXNfv!FHSdeG(3SZ4H
zC;s570jMyP*r#nTnGa(xpoC2DGYw{egyTQG`%+#&ew0jkE__h-DC|7N7!w5H8s}OS
zpc5C#xU)nMr+qNEZ99`{o+|}67B5iDCQ-!7A8v&{pK}imJxhneos@kt&+d|BERJWG
zrYV}j6WTrquT-a<jC4}mQy*j*-!Ko1rpm^wLxr!CxTPrTbbNc**u{j2N+s&No;{l-
zUYZap?pCU!J<g`?fl=b*Qj6W%sVT(k{G5_l=<-i}qg(yHcX(Z|b{qxY4O?y8Q1h|U
zuyA%$m4(CD0!COz^1K5<j-T5kXb{|T)iy|>$LHbS*{5QgucOwys64D(dx2K4j9@a6
zj=>|gSX>?)B!;nU`bfH!vl|t&W?OI^@35;@T0Pu*aB3^<MmcOa@N9Hi6+rQp2j#Dg
zHD+3`=psPml$y0xp+#`$pXEp+P6bw09_6g?T)N9l2dFxnuW0nInb5u%De1GbwN=uh
z1m&}lRgF(T1A(n<an$Z+Q`rc%cg-IsZEi+Ys6}nQ3@t2nZJ+V^c=q@SJNy%Kd!n~Y
zXKS#^2FDynE2-hsC3kdJSNw`6+drPXPJb$U_s4nV^at>a`6|kh-VTF`2bkU@kg)h|
zip-;-X;~=49&%*_dzyB>7KBB@>;&8EmxDJccJuGGd#_65;eQHL6mT!4XJ5q7##(X*
z4SPA4=W`bw1!6DMRPWD{D2##+R>hZjdnHqJ=hg6X)t?cih85W6@kSbhum%W(XPxZt
zT}RQg*?t(`e$B(z5PoCMn_W)6cAIAwdhR<V@qQq2`E2nxTh^JFjPiX>El>r8gf*Hs
zGgwVI5KnC)rn9<>AAO-}#X@x*SLLwI*$v*#7KX-re@>OvO6i$AXEIm$IVH2Z81L*j
z^uNJBi&%4uT1i8Sh?H3gVvx+?;N(-960KLF3bmDEX)xOC;TIT8Yg`a&--JIL)RvXE
zcF4yk6i;L%80VFR8zl$|nv#f9{2Oi)<c~fI4%S=Pr<2Qll-T-<9)@eH?6jS>bPn@(
z_*>znJEce~HhR;c>biMXDz0K;`Y@VteJu6Jw`s@fVEZ;E(I;wq0{?L+yjiNGQ{!#l
zYIDvu2g|{ly<7w}k9GsaDhiBd&nD0|QFPY@?p|v|L2ZJYv1r$_!rT1ZHRWAcptDtw
zg!`!g@uXYvgYBSs?coZh&efvqCgz@JFj6VjeTrm3mGL;s($n-dkJlvWALOk~NvV|r
zrS|$>Vt;}(^zwlv8r70)aD=Di-0g*NTxmXh$4Ho!gmgJ4O!jh>_DnAceM9U5UBU!6
zIJ4nAlGFv?KhqNUa=Ubfs`*|65ayCCy~I^Mmz@~{BgeHyL8tZSbq7qpt%3~hYLjW)
zH1$5A>`S%vFL{KfHfMntT(z~2df$n4nc$h=L~35*$jp>4`O8%mw0mh}R!jXR_*3mm
z5Iy9#@8Ugy@5D%m$wDXidYk6aX9*b!YWK1>7j2KeAkz+~XCPJ7F)F;TQ?3WM=5sI(
z;Yc{@1@MsWPBw};QA^8Ys!4oS&1OD+7VAWWh6xIf5VU)0MULNhJ<I&7pRa=YL3@u_
z;fO{AqS6HP`+;9xW<YwfUP|ktlW1*ct3+z|QG*#&#s84!C#_i4=Jt<EY<=4S)9+sQ
z8~cLT?Yc=dn=~10Zi-JEZg}~_C5t21084jB%q8$d(k#p=;=Zpv{I9zny)m`!#BWdp
zbDwImz>^S)GPuXx_##=0oiXV_^m!wm9EcZVySAY+W#ZynQ^)NwS(cH5YsL-zSZ$J|
zJ8RU#)fL0?P)E``EPs*#nv~ZO(qoxJ$DE3}$YQ|+%OtG>_$)`e+4^@GY(KWokKeMl
z{X>6{la6?GZfXsZyov%(@Yh4K*QfQ8x4Q^zvt8!G@1J)ywItDLa=3gJ8@wzGO1~yf
z+s#F`sze%#PCmB%wi*0xu6veeL&n$p)v|#>*9Y-$P#3p%z#h$MW`sh4k|@$~S%tqe
zB7s>Dv7$sV2%xZ*1;LeA5<o^NRlQ9vy8Em2IK$<-wmrxH!ZJvs$rbo5xb$HMo<KuY
zcl_$kh^L}ZA^)<BZ3SLT!DXbv(V+wy@=F?alg(x@y-ts%JzKO{T~mC9Tl_a=G~_Hh
zIU!xWyys%&7?tX;pZxM?r?4H2%zVrhTN$~cRvgHZrI)UjN3?OG@^Sx@KWL}C^^(l(
zSCckRm{EzV_mJCV?H#LBL$?Ocd8744k?7^J%JLjpoW&adiCv{?gJu-?!t#1(TsTY!
zzd79cHGi1Z<Z0LGOL#^2h84*Acs<bE{2yjM9h~U1N;uGO(b4hCTP<@6l_Coe=5aN$
z#qVMpJ;KtiHT_B5c)pr%ptXkb6};0$0M?w+&0KxXRl3WosixEV18V)?lZ4XI6rL=x
zJnNWX9!gDuE@9%y*`Y|!@$9nnTS<KP{+jc>AjdXY%;YM2XL_`L89T-@aqW-*P{B5>
zzv9tqGs?OVK5P7YB_?;}E(bvWju!U~+?U7=m_T5T>fP8fCB>2R`L~8}VhLwg>$TF#
zYDV9z*a+rINsInFEv4IRjfR^knT(FKEDB7ey-F35YXE*aX~3n~DB0$^%#f`nQ%BaD
z%IRi%$^L`w=KQT)`2e_E)fTCZI66~km&tb|vH>$@P#>tX9g;K3i8`zx^vt!fAR!g%
zg>?&(q@4Ny5lMOhmPnzo@#inF*yQWHmjrf!DWNveWT|(!(Cia<H@;egB_PwmdS9|R
zWF3LqyKDst`7epu@mEm~y38Q7+1C(C!HNoK$h=~n)l$X11P=i&@48KtW<-L34#X}0
zC}lBo6d-^dz$k=28K2M?t&S))E8rwSU7hmPT{)6bL*2n54F&sR67<g?P&%?1m8`%F
zjWSJL)Jj4M8Ot(wI*~M*5_1xJFLRAG{81MVa)UbTLLy1@5h0|2I2on&TPcW}M|&b0
z>e(2`m3Dg86^}(f^DFhP&K*9qADeT{b88h$ZlTT{pb<vv5&o-;jT2{(&?SYp<DJMa
z86yGp^FFD&gYwtY4spMm;EvxlF}b(cz}Sm8C%|-3Xnm0kGFV@oz#}BMeW?;$rAqz)
z-R<Vw`Gx5#t;4`|^SjY8_Yg5Ah5GrCOtVRpHk5ogE|-VhPGe``^qW1qwRlpr;&~X)
zw{$k#xQ!-C`MRfU6Dc;HF~gwB81|QkM=@3dQR`j%2=s$O4t*iqer2;I!N;UILdsv}
za8o0Fv|?UOaSa~hf9$~~tF9LqoQ;gv8nKodt@V5Uum-bN12Q>k5EB(sUnKFv0y6gE
z;Kk5={M9P%kHAn{q*Ve~tb#mZy>f6p`LT21<S{R4e`_J<6h={nshL`t023oz73rZY
zhI-vQ1$!ik7RJb<)%~qQN6wmCeDztxS|W-*S8WsntUXh+uxfZt6AUUKuHpeSlJ}Od
zx3gVpGt^E`8*r**H$9CP!F8~U<p!|yv#^x^lq<g+J6oZIt|b^0Jn?8xW<o8dt)m@5
zS0&{4BT_{=Vi7WL^N8AA!2}=xof6@}1Se`7TqqOp>Epj7Fap&-bNM=Hgh0P?Fbm4Q
z4`FA=?}X-o<m(WW4cvxyBBLHfQ1=QCKCYs@YqLVefQ0CgTy%wpt|16#RFMQL8F-Wp
za>sVkE|nrUq(-$lv@otKKuvWM6W`>9qE!DUFAdQ0&zZdz7tEVqFtSf?d*9wiQR{vC
z_w87*({A7GJ1O_?)f1<)9Vy!oxE2$*;$TAMoLF!L+LMrfh&v}%DIMk?@``j=i2whm
zbQn7Q-{~+6jR0_wU}AeNcJt89!T-7EVo?B!Ko%qnaA5qh%@=*t6*pfb7GhMqviTxT
znK5IeJYGag$I96#DgqgMpE=V42RmhyUys=_H1{Bw*eZe$=1KDzCO&10bsU9huzT-C
zm4;qPdOwYO3r0Sr9OBWdYKX@cj2ebyk1ZG(_BERPy6C#RFucXUyj3gbPu!@<(4@6G
zn%1{ly{c#_TF~!F+``FIm*);^^~SM|10#);p3}%k)(K%?fCv~U86%@yQ2`&%xNI;V
zmt|fp@_<bRKCZ3VjF_v{2<5266e*O$olGNl+?I<tLjEAQ{p?AL*XGUL{@~)g*G3vg
zbZehBPzdWI|IlxF&ZLdI7d5~6wIHu)WT`W7%!t%3gO~+R*A57#3OTW0z6zHW28tda
zgUIc%hzsPEW6>D73hse#JFDZfeL#Rzf|~-uQ)Y;QS};k{Dsdt$jT_KoY%!FZAi))P
zVN1}O7>^}bf*n;nzAPkEVXO73B)C=)MPN^hj<MaVH&rA!6j(YfFo@q(5l?H|q;-$2
zv*&K@-lj?0l~Z$9b<fzDK4SN9Q~$Q@d-i>^U2ojFN&n!`p)E()Y$I9@3km7hWLS2N
zT&G!Tr{*o+?0^n5?9jeZ<2LOmWwbAQhV#kjjf65rNnQ$Nc+sST$I8m!ik0X%z)P{{
zi)gi!1q%c00le_TJehkDwa<-M8LHdc(9oR~g%=wulJe4^HZvzL+ctH60lsy`gp8>A
z-sXc$L%MVvJP7sfQ;==jzIRpYo1dYc7~v*$tfNMa-9DUH_`UE_yhwEtX`m1QuLom=
zZH4vJ!e^eqdg2Kjc6kEpU+xKz=Q7Fr*0bjhu;+Aq5hTkYrjcjXsZNk*4!YjOr#g(T
zcQqy7EMV_C<oPZxhnY&=Rlwjs%$^DHAU*O7O$C`KMJjJ>k5}S+_Vf|YFS99Ao@URv
z_k_l3&@*2%3P8NavVLJO`c*p{3!qXQFlmrLHxL!*2BN|s0gvabSbZ_SFqpAn6~55A
zs>_1$+%(M?^<vjFa`oAX6Xjc{MafrDz>jS2H2E<~!j5#j;l&ne*x`KZ#TIH#>TR>V
z{xpqn9K^EhZA%n{8iBFGCNsYG|3@4504rAzg#q}Vm)zajwr$(C-Nt%RZJYOP>{_vF
zM77PJw%cvgot~L9ncS0|IFm2`;NrdA**UZx0li3_XDwEuw9xInj&U=PT~_F-UT1J!
z4a&<dBQ#hejY5;{+voX|A~jm|LlwwAD?O)uWP9Ii$PF?z_{cZ4Im^^b{a0(QEtl?3
z?ag^zpjCfVl$*Oe(|}&2js|oYp}Tq=<9I-q6FSA(&XhE@mj=`<+h=PYp+3whqLfzT
zQmz68H4=Ie#;_JYpG&dUInvG3UA>O=oIrLlr{9t05w_+L8tq2@+g{NQd_`3~HAp;b
zi8bUpSm~jpJMw(gP&JgaEP_=xtg%Ra59oSA_x3u54(J9#H}pD#e`*|Q`Biv*p-UOf
zvp3mVb5$SvtaNwt>7#n)y;m!mlz?8O-mw;yaViPj-s>3IKz0?OVKtACwANf*Cf%9Z
zd%HgOsm_!lf39AVQ@CzO3Zw_~eDDY$Ex(Lt8PJ@)HlSN2b(HlwMo~bw5&F5;8SFyw
zJl$I83#{$zDcg^*i%%(1We}kXWJ<^9c0ZN;oZKLDwwU}-_okR?-V|IV!p?NKTbHYT
z?EZ)(-z@>XNG%BH21y-dy^gUypc@H&fwi3}X|453K(&v4Q~M70rdXkW(~8lP?B5T2
z0QJqA6c#lk!QX7N(Dwk9i$404Sa+n9igK69zZ1>?1y!SyM)O#V)|yXfN6)Bzg1dIx
zP>fRKW=d5~;ZxIgwI;f?y#?gydSQ)4YH2{%PwFV^b&M?m-B9RfUT3f=FzyCIUoe_y
zZ?d)KGn{sW)7^aTaG&CITm?!A=|yTeYjM)EVp2z0uVZWrWLFmYg4H}i(pvM`LEGnS
z*JmF<yb}_AvW_mWMhb<a@gH1O>caqd+Fi$mK?G0?1JF;bW&cGPft<^$=A84>`TJd+
z1Az7fqzpoS0=l#*JAvcPBW*VXiFS3Pab0X_BoPekF|OGonxq9#ni;KQuM4}PG5}a1
zMb`|!fw^;`^5i!tKS}@J%LOO^0RR910wWR-|I#a84?Oh%83+IX0002Q@DVNm0002h
z0aD}oApO+|8VGX$000R90ssI20001Z+GAj3U|`Sr$HTzDY5q&$pDU*nPy`jc1psXk
z1uX!0+G6fuNMV2i#!pZTXp<fS><Gdj0M~T?GcUGn+jiEr?Tu~QwryLN*w!(2a?EK_
zYaYHq8}$U6l?ztNLHNo@j5U8?xctU2BLoxGax7C@(NM>tuFQk8u?T&X6FM3{uv)i8
zJ+_}jXDE@PXfPe3Ipj)76l<KoOk*YbNOhJC$9idsX?hQQY;G7WX&mPpE}5M$*X)Z+
zvYck|e-c)khjB?Y#7l{Xy;+9k-EqnK&AJnmgz54p^F7(Dg7b160df~z%t6>A|4`r7
z27ToVy2}I9koyQSeqpa}jt+c7`@mI?gP|M|FOG=e8n;S)gvl5TlST+q2hd+e@jC|F
zjE7inyiD7qe`S6ju~o+giN!XVilEGX6EIAj=6_klsx_$2x=s2$npq{#Uw=ji{TL1S
z_E-Bb#JGhse3vw*U^Ty&NiZhL8ibnndFBmJ!?=c>@)mJ=G!|R2NY+cRUGK+K3B@!k
ziRDRHtS#PEU-+oca3Om&0Mld~_HZ6=<3INDPNP^pLvO)Cy^Htx2xF}>h_Sk1f<A@-
zn<FYp2ZUyx-wj-pQ`l(T;@uzQy)1(R#|o4g*lFCuA=_jOv&A4xkHRiB731|(B$?f?
z(`tk1#xO)tKO+(?RScq4B8DhWes91Uvmp+sNDQM$y#f8Wp58nwZ&`)?;(`v`cYkXq
zk@^G|nnC_#PrYdvMNmI-CuhYoq~0`)BB&p^lXFInGjeGLqhUs#ij$GAjBMq{Y?Y-4
zs$p6xeap#J5zJJ6nVDj4ij|QgW+*@7UfM^V=T5#~(zV?D6vpi2mysPbNC%p0>6id`
z+C0GnkRw3=0KnME`eJi78oh1Xwo!Q7wr$(CZCj<c?b3BC6pH4#=PLFqizxT1N~><D
zUaFnya_YY7#p-?PtLl#$lct4clIDrFnRb~@uj`>(st5X+`lb4f`o{)?A&+6IvAA)R
z@sp{nX}amQnKkz@?=fGu7%UYmT`c=7U#&H*3vDV}Q`-gGHzps`mf6p0**t6)b}GAu
zy~uv$crMFr;d#C-e_W7-!NMQ0tT;$KC$UmeS|Gj1DU!3oZnT%T?{b(OH6248x10fI
zYv+9Dedk9PcJ*{^c3a$i-H$vaJk7m&Z+`DXUp-$d-w;3cSN2cxUkU^QQv;iVnjj3;
z2`&hp4)GyhD1WGCsB`FQxOjL#_(!B#WM{N@^lhwoY+u|LFAzVP=#ZF^xC%tz0|1l-
zEx;f!4$J~)z-#bZcFK9>3UU+qk^CjuJb55hGxabH(@oQBGtNwl%*kv#TRVFV7KBw{
zOV}NbhI8Q-c;f#HC@-plTBCkwDq4tkqNC^zdWZE`z%nj@>*LnAAD)WW;KTS9eujS#
zjwA>rl}Jm{hfF4`$To70+#+wNmU?J{7NnJEOWKu=p!4ZAdX_$+|Mu3D#Z=nV$kfg>
z)HDGAElrLZ000000RR91?f{Pf764fQ1pom6000004gdfG00MFV1^@wg+D(qR3c^4X
zMUN}mSX)kIXWR-wD-jVvEL1E7ml%bR35g5#evO~umwAgJgv%Yyyd9`<p+uov2ln8&
zK$E@WA`PC7OSyPC#}!(999I?pI&QG##}rG<n}izySMC`4bm>WkIaUe?@i8ojIN^yV
zgpy&Mb*1QsPbw!o^`7w*u^i>QY*=R1suVp4IgqeJJ*3K7BD5cm9s`Dqao33Rv)Z{?
zvJ^9-BfXIDI1tMxWqtiD34yX9H^qD+bf?^5$$}{}R&4aP(QdkbDn>OB0001Z+GAj5
z0E7Qo3@Hp)001f<0nq?>+S<UQy@5fSVG|<{lQ!cfUPd6fo!81hQ%;D1Lz`hcV{W9Y
zkt~q8ovAK8zyi!-E=%w>1G89~Q~a#JELL|bh?eba6U$?)ltC<ZxL%GxClgh15R21N
zUqwm)#NvXh<A$5Zv#=%IO9y1}CO$rPpu-egYcnNW02Rx-4S*mNh2b!P2_*$s+A#tn
z=mv~{30mU@jH0=VIEo|S{hKfMagIFJRN1UK<bvIrQ<BqLh6d5;V}$}8ZWs_84am@7
e@>(mNmFa`vHJqWt3j-3lIMaZ%nEC@AHdoQ98U_9U

diff --git a/static/fonts/roboto-v18-latin-300.woff2 b/static/fonts/roboto-v18-latin-300.woff2
deleted file mode 100644
index 52c5845a7c3803f313d8905ee2f83ac20a5bc9b3..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15440
zcmV-WJg>udPew8T0RR9106b6t5&!@I0E>VC06Xgd0RR9100000000000000000000
z0000QWE+`49D_;*U;u_p2v`Y&JP`~Ef!8#FzhDc4UH}q-cmXy7Bm;*w1Rw>1d<P&5
zf;t<Qd=>22OL!bWWbQ(raAW9U<A4C!yQ?T_2j!F@`~On{Cqsm854Cz%BNVJ#QBVw9
z@!8hx%fW|;l0?JUO4$@g6o0#^T4SkB$@5)(;^+1&EuI~NVv~2yr?D#(0qdk4qo7HJ
zs4%Dl=&WeAwa2gREK4h`tErdvDO%_05nB3)_viV!@#ns`H|PZ;1jRS~^vD#y8zV*z
zaHB#DqH<<`%8IAo7$$ZPBPkh}HJ-2bi}y@V&)ff10N5pp96KPDieprQP?%JVjA98y
ziuMlRHi!1p%PaL(^2Dgb!XPbLri3;oMg;27BOasjRX!^9pRxAOTycFJQm1w5wv*h5
zBsf6-_3C=}?e0rKApt^ygS%{gbjW=yD$Nz8$8~4>)b&bi^E;Mx<PYRavSBXzdZ%~8
z#&FaB>3;sOZ9*kHOTKHefe$%B>b=Wfai7lKSxdIhGr}M4@_rSdIxTm&+Li6QCm;I$
zDZqkhB)gOBqWw(~qLNrL2B>9W2Oh%1H`l*5H`6(JKvUv;E|75hPkw<v30GrwC+TLh
z^X3EZ+Y(Kgvs=hVlqD9Dh*W)9ww8sgtuU^-!n%T`r^Q}UKzR|GAngCvQoFlBa1rhj
z)e0AKszS~FneEKZEF1-h_JWrb?yhi2fm~HpUxY6JC??e^U|C~pt5mHdh2(#!n(co8
zMMWI7>s)l6-qSBA2cBc9Dsn-3F#xGR!jX~_C5MoA_X4q00(Iw*LU*-FU+LJDNo6=m
z(TiepR^&g{v@&4a=9Zd@Weox%!HJoaX6oz8v1Zx&>$0Xb*8>$r`V4~zB<BYNqwD^=
z9|ohzj2}cG2~wc~(x3s-qzTfh71E&tve05kw=FPo6A%OgpbdZt0YH!n2!JLBerQ)*
zC5i^)TPq5)!T8R?%mrY4UutnK7^4Azwb146y}d9O)PXP)&0vVpY&)|`?t>Q$g}G<$
z8J5Fq9-RGCF>en462sJSMd@NjWmo<cTGV;JT5C}o)i&?_(BUPf`E+U18HO-p@@H)s
z<16OD&HCrfKryN3ZRDB8Nc~%)q0^#Gj~NS=tXQ+>z?lnIZajGL=F86vL4t{dixfpH
zmPDL*iIT0f${K6Q^*QFa6HYqiw0>utb<P!6U31+HcRlvRQ_sBi#-Jg?MvR+)ctnB5
z3x_v0Uk2_nfarzffEfeq7%)pLyZsLyI0Si47^T1{1w|<&O5!NRL@74Iq!|;JQHiwI
z#Zg)v1MAoj_9fOaj&p*OoC@#dx%)ieA&*dm15tX+6Q1&nHw-ewFeBk;#=K<=WjLNu
z6Q?2ZIrFV4_eLaiHKY^4BM*3Gkax!U=9#;c(HN*~qTu!idz(616k>B&d@jk^%d3v1
zhJ<R(5*_JAql056*1&16rP2c!XrnZ`mM=Mk&MxnGdTw%y+uYeH2OX1EV&<G|!i)+8
zL4**a&1Q?UTZw5Ev4*wbKt?_02~T;pQ!T=b3nYjTVpz-ok9opVo;@)x7=wh9cr0|{
zGJ69C8Df}`of4R7#%49^*r0u4oN>m>;5K)5szrnpPQ(L?Q*U;biKpewnhk;>h8Zy^
z^M&K4=Nw7ii_Z%<oeZ0qFH#GK3C_E_8-p}7PSd5C*LXE`a|^R9n0K*JkYtV3-y$db
zROg0<bZN~Q9qG3|_aLi6L4xVPRs<R#-rDKHWJcb)*+!_|WY9rnnXOW?BZu<fZnLqx
zt!=Qqz<mX(FHyrzZ{~gK(qpxAXutF0K(*8S)Q<!E0dA@CD7~#nwN4zI_@0^fy?bgH
z0LRdRKPDFaq-^1<Qi|-Neq;;&oLKOu+|*EeBZd*Ox+N_Bn0IF%&a1r5kdOJIDx^$5
zcc=3viul0{q$fu+o-QoxT+HiypaTF@Z?R&Fo$Kj>+nm9y#B+D&K$b=hfQgw!Ip4VM
z{}?eZk1z_e$*cTY!|^I*hGA%e4lS>(uVzHnC}G@QDc#&{tGwuMOc%z#uf6NV35AI(
zuzltVR4r7{{6ebIe8qsolb#HB{X5aC^0@Y7?FBHWxw=p9zN&I{KcQkl$3Ln=RnVh~
zoT0klcxTRS-kzJiDk@LP6m9L~=@WU77bv&kovM}vo{!RX&%&-`*wLQ3kBhsT!5of@
z@>TurPX($cP2<O=P{+1q6$|{gp#@=L!mzR7%vhn}aiPJ3A2tD@NrD8KOhjagNYPBi
ziZxA~IMXFa@*grX7FJrv(gqvYk$cA8Ya?Qen-CA<ijK~Z7A=ODm`t#-nJ{ApW6s<p
z7A&w>vV>T%La<{;lRbM{95^uG%o*as1&0R@Iy`yO<i(3IZ{Cdf@WJHEmo`6s7z709
z0t8SaB&07$5OpFVG?Ajvh>78%MN<<imYz6qG$csCmMD>iBuRA1$f#Lq6+^47W@3%C
z46U<{2?Cg8a{B7~oPs&+G?sqn5U#iZx#<o~cipA!9tFAq1N1%ijJnreqj_Tlj$WW4
zSb~*t@(_ywhTS-Z&Kek-kHXj~L(U50sxa<#UBtR+3Jswz^aMj_38u!%1wlf{Ae00y
zXboHp6f#?Blhz5u_Dfx;8=ZDX1G9(}X7PEE<yJ7jP_P6?umq>UaTLY?1l?fh2~21R
zE!3LNAl!Vsg5jf-2&>+9nY=|_2iE?KiT40%m)<NOA^7sB=s0jy)Xc4Xt_~NeYi7o(
z8^S{eZi)&q!AgEtP$Y!0aj^TQ-}XRW4w(PHJC_08ee<$X!3~7Z1p^-_$ti>gBc}u4
zF!ikfK}nQ+g84`rd_=mOB*?eH2?^AVf6rifrgx9>zC(4xgyxq{7F$$=9ur~j=wL{y
zNheEgriUKl5cZLCfNML&U^d&Vw%S)!e6biGnzq|!s~vXQWw$-{=BFXXANPKhiWH+9
zaM1r9au^2Tm;wOryrGEz#EZ)rpi_D$;P0Drcv*ehu^w3Ho#hP+uMHQ1KbUqn9sU8#
z*;N#f&}#sIcFCePiiB5R&1Aolo~QYe(Oqam1i%A{#t49pT3zmcw5MHk%dq!UXfeb!
zQ;+NEsT|UnG$p5z=A;+NCyU8F=cG!75+vOZv`@cFZX5AI$f)6Zq!Br})boi)zGaX>
z&eF^op!(tY^ycE?_5bC+hu^DJrBaz<X{4-Q{PlbZ%SX-{fD4f{&X8}t-nN0<<(BJT
z->At=x7>EeUCmnDbKe6GJ)+R6twsB)+jSWA))=L6G841`0NQ&mwE&@m4)_@)fLhYq
zu1}88%^uR_UXHSl)8x_51^VPg8n|R{$=KU~oI5<^GLKNu$N<l{$#Y)N%u9y2Cx>Ze
zg!c@{547=-Z@lI^KWOJCe;JkkkV%!4iO>bY!l4_uQCJlArm!UJLt$yy$HKCaM{uOD
zeB`klFRUDSA}0%LB2O3AN1iQg7<n<52pc1>5H?3XCj2k*b)mCqhyM|}Seq+OidbF3
z<XYsiFew6@2f*2<;M7LUc+%Ogjjd1Of>wJ0hZh4=QovD0ps)G~#zU=XKx_j7Faz-Z
zpfn;R2M}5!l_OOP{*(h6cyf|0g?J<>n8&A3iY<llC}hpGrEne@K;dQqQIhFWQbx*x
zGGt@`IX5+fqM7yX^eIy&wI?YMOXiUjL`%4oztm*t=A4;Qsh2H9(-A{+%cLkF=NFEd
zuPT?n69g}0>$rJ@BvL}v^Gzs!zU<HCk^-tf;vn@i?h7fK?w*>fYvvg_Dyg~Y*2+*<
zW@5wqRWnFsGNFDtm#Q~yCbH?$=R*3|Do4;Q;6IMS%>;5(ACbxG12<tPA?uc!e7C~4
zr8IaUVu^siN#sh~HF=b^KuTJ&%_wc&0SnYl%39~y=MOAht`6-|(g)Tw`j9lCri&#M
z*)C^75<INe;Zgp#(Imu403Ns){{&XDVOJQu{p(SOMYaF0yz`@vmybl9Z#(p#0>IZq
z?4dU2V}M`+d!KcLfI}w6;xLYzM?@0<CN4yPIIOrx#^^U4gs3jC+EmDiEG#OS7BMQp
z@}}k3_;(B*g**WX0-9_T5<}3SqY!jL-@K^49)YCF^FB1$NqOMcm_p*k2i4R$7`B{}
z-o1K04p9#-j8QY|DSQ_UWozf)g1ZY`g37KWZ~K((qp58ZtTSvh^WsZ57C)MPA6mB2
zMLxA9msmo+?<?Je%1t~?Y|rOI9+<z&&P^rHR;Aoqc0Ta%z-_Qur?_*4!f0(WZ?C}|
zGh4fJu0$TgIU4IjZ;de~Y0dZC@%X^cgHGYW^V~!|y3mG_s$?ItoATw=L44?5iP)K9
zPHB0sKZoM8>I)8WOu?7u4NG^Ru*a53rZ9^DRZbt7y>n^Q%81fxLC_-Lejru=Mf;B%
zP&5)y)EH4c)s_b;Y6QlOm5T}dLdaTKdibDgqBvmVIyLJHDbFRN)EJ;@On_B(ghqXF
zyN|^|c|rA0w%7@Ci2IbHGVXQIK(m2jyA9+j?2^K5q*`<RMHzNVx9arxL?4eRJPjs8
zISN%`gVjO961G7@HC>(}*>&pjT|cqeOMpx~b6ACuF^^Q`hqAnS*(tn4&t1C66LCtn
zcp_dq(hOMI>Z5_oGnXT#V!TjEBgj2QWCHA<;RvSG?aL@~!3l>oxhh3%KuUKo;9>~1
z$zE*@oP?Oqr-$bj=yP+b+dSlRX`~Ku4F@eTEzJUElZl)e&}<lK=z`wEbzt_tg_{1G
zPim`$j5B%-a>4M-P3=LiiwsgRUB79r+306LlZ54+<~AL*XtZ<n<<sj4Ductu>NfO#
zvZ`jY+5WSscqaJ1*{|D;_whfS({9t&%OkxnvSBAgrVMj8C$?*|`pUFx$A4m1;uI`y
z8m!Dti88LKZUfw{D%XKxTN)^yWV;0@Hh*J&VAr!D%1N<f`rxq-p6RY8hM-06D(ABu
zRILmGc4=Gdy<rLW7VLVa?KJ%^*>jDbdU%uO&C#(mS?}WdW`?IOcwWwY7|@MU%#V0>
zOX3G!v4Ml?c&f>bkN+*(Z6N2NEIuP#qY<0vG<a*A1RiA#H_2mpQDfjKep(fjN?Brc
zd*ltkyry8ePWo4=<KZLlm`3GRhQ3MM!o3-Y#*evAy#kk3^k2Elgek?Grh#V40tj9u
z<J;z#E^pw~CB|2jaOEa;U8nZpnxIZFFlGc6+bFoQomqm|eTWTzK#FH})rBMS-|>Ge
zoJj`gQ>EE7nFR&2^kQ@8<icUaqyn(%n#xl_aQ=$6@vN(Z5N=3Rm;|uBsEkz8E@i0x
zDvZG7<;ER<$rrTSW&jT~Sspak^K$75-9>#A1X)#Q`6a7n8?4@awWb5d6?y;{eB%Y&
z8a#_C6TA1=JUVS0&<LLK4IW&6(eJB@bTCeW2cb%3EIWo2pr>?p11+s9SX)|tFeE3X
zp)AGVk735~4WboEBMBe#hhuz8WGR~k0$~OrZE;|{^RFnjYkt5S58^xHqG3JsNplXR
z4d4y|njE~rN52Z_q9B81H@ZvaY`NrplE$f(6*x`4PA13G<cl-;RDYyc|ATs>wpv%V
zr(N&_JHm(8ROy^AM4gMZ4v!~;LbeHP={YhD*IJbPkK1FqMSvMW)o~WVS7b{JX?O&R
zd1SPpCD0ZzFoK2fDk4^fyf((emdxWh=_|fwBNQ}}N!8GX@Y}$o(hrQs`e1#dipzM2
zNaVo=2R8R=F)~jQ)1?g-#4ufaKF1Xe`_$`Wmq4E>YiU$a8-hlG$-O>cLDlWc%@+|&
zQKpzGM4gg`ssa`c!IuN!#sJ3Nynt@r<1PF5R^4nQcmcdZSgKBLuD!T0n+P2>kREQV
zl7b`PN`5qqEz~q!_<xo>n~po!hkZ406nGcl%?CrRZID8CgsUwe8*I{?jhfMn_W&*H
zCXSe*Gv+q^S!pw2HoYM?^agHN=!N+$woAWie8uB-We8N2W|0^B=<dOWnqRPvu`9(X
zG3!W)k{Y;^=3RYH<Ju+)gp5~@d2zwClD#-A?DWAoa^F~PwyUQX`g|Ikoy&_e6ahn$
z5F-ip)<D_HbVfOPb#lql78%^!afHSVusX;?lMS02W#eG!#2~cw*F35}wj;PBa`K35
zn@$CsY^zp-9UnL=fxx-l+CFAj705g5k%K6tD&AI3LFC5cxnku4$mwn9Pp|tAxx~m}
zy)IYF{DgxUSs&g`vspM+m@nYL-LI79`Sg)OTM;Gza20#^sY8q*Xc7<vj_Id0AIJ_;
zKp2m%E+2rug#}c$Fm$2A0hL6dl@D~7I;R>D%S9LSvw6NBeh^j!u!0Jcsj43I;&gst
zL^9V*YJbr=UWh62Ih^72LeuOhOGL*s5-8}+J)dtrDmMs+6p%2*Hu76%1_ao1C1bCU
zPT=2_^_nt_g<*$oAoi`^EjXZl8i!EM$S;NKqlWE3#v9>Hi!O?ill4G#I(6dUHwX|=
zSSpw{7>|s{-6>_-jc*c9_e3u!ITwcB7FO^8<(?tA#MlyUQs8O%TNoljzXmXh8Ikvh
zH~LV8aY?wDQn4ORbkyGg38RQqwHCQU;#MUx-%!i*06|TOqXPg!jn!xs^L{)1alJT7
zOot?j6OI%SfD99+Omn!xh~tXFsU^oD!`)|#p%+}mrb1q4nM617{`)?Z!yU`RzFYgB
z=(+bD2v&2h4HJ@qgerd;{QX$|Khdw$qwak3)^3CR{zni?$jufRZ&`~bDjR1PF73RE
zS-8Br|M@Jvx}h(JTT{dY^V5Q2Y9gJBa7{~d!kwqk!*e_CJemfpM1n@Hu#_QnwJfQw
z{YO`Ox=lh&JCo7K%M6wZ#L#`bP++iKAQtrWz|m1ElUhl2ZQpuYGi`be=}3v74$1p}
zqENeF4At8cOAGrxVy~k~CEM#nAF?>?jdN~tD;IT@XI-je<~3*5GIH1b3I+&2>UPaM
z&tv5~JFWOo);`}ChBJq%Xl*0@?T!}KB{%MGOxBhpch`t>cyVdXNnw8@bL^cXaDJf_
z7GsxEk({odgvuJsjx2}Ugo+!U47;PQX4;9}=<j|mQ|m#A&B|eRM;+M?H{2sj<RFGm
zBTKHiB{&^*46$laLZ&@kMJBXrBQ1|QvK+6u5h~^O7rt<aIDvAA6DQ%MsTS;$C`a;r
zB~RmPx{KPLh9_x{2Z@7^Vjl^K!j0G?NxK7Jez9Unl{D6x{BD;A=m+w7Hi~1eYu0yN
zmyTvKqm-qzvY{qq<e4qwyEmU+5K|{$Zw&6-e5@<3S|<6c=l|B8#-Hf3>CaZ_?z$!j
z{0KY(0tC6RfcU<5FZ@tmz$e!#F0$V@v%Zd7cxAAJ&WN60A}7y1To+;3A3LuUFZ_*|
z1UtmUmfO0rJ+iB-i?W4H9FRmBm`5{a9^V+krwAw-9Hp$jgu%~mmXdB_V+NRD)_7-G
zCBLS$V4%DQOgxu(?J@c>5hQk4sw@6UR#Uul*z}CQ{jHbQ(>Dnu{nu2N>gkvN+u_H5
zZ;ia(lpCSQ74gb)t7@iu>$>JEyjbd1M))(LLHsUB8>iiJ-tPT=l(9!L*SYw|)9m<l
zN$n3{TNvM3{5G0Am39(~8JT!rmCe7`#^<l1O`9W>pGL5ho9zuT!!YAB7fH#&2sM^^
z=_q^f@8k8&KLbO|{BgE=gj&3iBzkcz;nfXE#Rci(o!X<9_V+i{Rt`3brCYK1Eotek
zb;${>l^LA&s^s(L4JLuZ7y@%R9=ny67yWuBDe2B<C*#OWmn_770BbEF&X^iI0giB0
zNLKgzzHH`-o^<j$?}w~%do|dwE=CBfD~@ewL@_cCH<$EVQ#qqwIHS!tvmO^BE<J;(
zPcMX&801b*TyQ-eY|KjG(!qjsNHHDKcx$SaKQqUV3>ivi5raf&P70kW%1iVcKv{+F
z5Y+&otqA$GCyg8ui-!6~jE`hzd}LkU)e!UV6gSF=qV8y_e^Hj=9Ph&@`=EY9z6eo<
z+;rcVOg!+tify=jC!kA1c-$p*Q6Kj!>!q+|yRp{3r~LR=Usb71Te+p%e>_D*+V}hX
z<KgDI{)7gB!?^^*`m*BU(nJNCfQFB)1l>@Gt-Qq{&pv>lI$wS4A0oxIge$U-RE)=u
z|4`hI81y97^ws5Z1XWdW7}s*K9hs@wohe-~qQl3F2cPc${G#DUH%Ap1IXS`6_}9?#
zYS$nA=S(d!dghgir0~z6#^m^9-~K-HK7gP~yN@)~=uD(dR%;z^9N2T#=E2@)`*bA|
zezR;J0D-;}18wfRahU)?rQ)|K?esQkXyvss0D?-xZ$G!)(n+_&#7_?0c1gB3UjrDI
z>*xiEZS8q-XpV8XcBP58^!AhtzlHekZdOJuNzd-20m#9LA>T6xOa~YMK{2?dT&BD8
z@HCIXL;~jjpWc1Fa`o}OSw>BBO=(tVFJ!as|GU@cWq&{AJ=%?XDnmGGP}LGg7<Lus
z01y;YZJ$VRs#ubHSaM5u`*E@vr=Ch6Pfh(F6l{ec#Fr`;&-?e8a<}RX>cN9JN9T!*
z`Ai*1W7~hv>~kfv+4_(sSD<^Lir7TlZs`fN)x{6i+GXPJwO7_(s&BW|cXiWo*+0CI
zdcL^)=lO?%EL!(qTUqIV@DilP#W^Wst>6sDS>~CigDT)=;MF45o1+O#_3E6N*AD5;
z)|-n1Qq~rvcbRLi)f#UE@`BvC^KZSB+*-_Tyq2LF5xz57mpmI=Ie0m{VzRBvKg<Mz
ziEYcCWMl0M@qC{A+V%V=1lBBrS-g0K&zmj+30+y7@Od)2Hi|F5x>W(>G*2fmDxP+Y
zwl5cB?5u1)gBLRVMg24{MaTZE;1RH*?$!%x>9f7RB%ZyFyVbY8fLmMaxos5P&E_6$
z`qOsmsUSxDyiC)ZO4r;vcLO@5M}Vg2oxP>=SdOZ~KHw#Y+1o@povWC;?=&UmfR%ua
zP=VQ&V+*&IKfEg9G1?dfA74FMF7ya3KC*e3d-8GiX~yZ3o7n|=@36_ZgMsHHURmSs
z`&u8res}|*k8fb?0X4b(X>m!4rYxmZ0tKY%9RM}C17;JTk8i3R_L6^mfvSGpPwhHY
z<NQf92~9eB1oa|n>p<QK8+nN^W48(4sH(A!)EcRyuWvD^+>{JfW4s?7Xm~$#S+sUV
ztQ*)&I_>x#Q$9pd4}N!D2)V*0_@~j+P4(sfK2RNgMBz!SBm#7xr;`K^$L^n&q>Ei|
zeo;!PC8|cgKrB8fYI%v#aAmb-OXX1{LP-rn{*l*ySo}KOMfiF<HCy;>Q<_haX17$v
zHwa&DDy|BjJ4Gn}d8j^qhs;OP0Xh(Ax#Y$NgHJR8kiOdduJm5O#Giz_cS?D0!i=Gr
z_c@GDYc;CCpO3ig>1R7$T1Xs_Z+z(rF0e9iw7-x%vIqKy(>D!m$=FHT$eToeQgnxQ
zC%3eAm0H%xq#rQ|i;5$qiKU6%#6>9od#E~ok9=8jBk}b5%g>idODMR9xedGWatTi$
zwke%ldw1xu#{Y7&0%QEAzguNhM-uEQrR{+w!-ISAQJrm*z`2X`SzuXtPAZ{2Q<e6#
z@<H@q1rQEqU)b5XeU{6P!zO#K!Us!otFzB3KthMKh0Fa087d=|!z#)hmYoh&C)1Ow
zL4Xe6BVufIN$JAur-G$!3W-<k6uBa}_+^8T?vQAJf9E1<Jdze5#n=Gnfn}9hSqYE>
z4YI{c;07S8PfsJ&Cn&R@fpAdn30%C-FieDtcI{~4o(Rn<@aNOa?3>%Qe;wKk{(8d6
zxv^vEPgkFq`_bFr_jmmO(|@^{7*RL>>zb9R!VJG`L-%Qws&s&OOpq+2^6yXFRg$EO
zueQA}i>}72p`_IlYD1z*TR-IEIdJk0sYP-HaWDW>rj_3q!SDOTM(ewh8^{59&EOgw
zzO?OKl$!WeZw+Dv^JL6(I-CZ%6g0Y_zht9t21RfqP8ilWJCfWIuC?$)w}p8ivW68K
z!^L^J#rVSQsyrNMo*8!=g~P9UvOy_a12v6R9u>6@?XvG-=)-kCQy<6U=CTs058W69
zZq~+Z=<L3bv!)plRc|}G=O9yK^sckNB>2~NgK(<bo2I>m#f(Fi@Q_0&IO9Ui4_3l~
z5IGA&j2!gr5z>C#&d0_~=oL6-Pnh4r;vOgh18ssc5bu)|d$`f^Y~>u-JZwIPr5r7v
z<MC-XbdsBR^vS0($<%<xP9XGwZ=|;p{!IR%6uo52SEy06hp(DAgNcPAteJ&8y|%5v
zd(zKw&n2G%N49UZ>K}6c9O`-P+fmzI$B%>Jil1C<_wPgl^iyc4jK!x2T=C`Kev2`S
z-wzBwJ4|wJ*Kc_;@Idm{+bn%=ux*Q{r{x^_XLZYHqAl~BsLn@K9}!9;MgXh3htlj*
zjQriqjgk82eX*=4ct;ljD4xWWDMl*{J1!IR<zVT`Xw8%<ph#yfO&0DR1fTZp-#qs6
z^!*Km{{45sI~BVxtxHxet)H%Lg()%|)M18riF=9*)jSjkwS&0H>^p($li^;z`=-BV
zW21|~DK1Q86$&b4xDp)6T9E2wGwVuv)Kpqg?derh$Kc(0oYKx~_w;UQYs%s`<+Sm=
zeA+t`+aBJCZEa}u@-|IkWG1}d%1lUnkQM(fGb`!cJr3}qE$N-vuG^7UGr8|BA}~uB
zUyLQgGSoM8DHL%r=Uo=5W+z@QJ_mj)H?sP;9~GAwdD2fOI4ip8_vu?vW9Ka{q>`5C
zkgAo=uDZcYl9Od%ty2iH1LMm@qo~>VlU~~XS&{XSv)3N}c(n``jP}$w_oq`_i~>s?
zYBVSHhcG@lW$z+(&?pEGYh<0n!g>EAgdNFb@6c2l|9pzfYHItYZ`pBJbYl2kI&LkG
zENiUS?Aa9gb@pCWZ>}o~dw4TEzCOo4jnxnt9*K{EJ&Y4Hz?8aMd8fKs^t*-4x(Wi`
zB_&a<j%UZh0K$GI!ER;%u`u23W4|^tZNDP&DNi4J<?bE9p(RsM(JiqJSw>zifo^^n
zYuj*1Omk8iGoPDg5OB!b$@MJR;B{-_vjTP!JTVD8dL>-*2>PZ*#XfOX<Xy=O{z`ey
zbhp411kQ?rrZYl8y^ccnrB($&v+l|VX_}2#VRalUHQU7I(D}$R=~-!Vn9Tx&y`A5n
zpU4g8Vddp*i-&a9=vbLVghU)tK`r2Na!}}8?n-{a47VT~W8v$Q;^kvu<%KXeLm-Tm
zp++1Gr-#r}gQ@8u>_7e4BGbaGqRha-<RU)G&cxNx#V63$4j);a^Jg&wgQmq|w$^%l
z<gR#lyF!9&42`|)+#Hd1aC~qTgPxF2$6Rm-v^r3)R*0!)BqcVmvEjxzS5Kb+2XpR<
z9Ua;OEFV6AKfb33&b-3v%Sb6FAEk(a@F=PBkdAA8-b`6KKs-jb$z+$@qtLEqU6cJc
z_z)l{jfN$~QP&67_gzO6zl}ESEeWWONS6vl5KYg+y)}HLkJbjPmW7u-xAL<H-vv{r
zMwSak3JL`yH9_T<hYJe3hH4`u$i!4!7&#e4QYa~NWDd<-PEJm_6H=*18yt*s#U&@E
zW+l*bvLMAEq<MYnl5k<RgMgpsrg>URMM5k&&IG!Y0i+M`s-$>6O({6PPY{gh*?-ar
zV|OTU#7i%KC+6&%6CgxKdIvhYcm;kVgLWgGozW4fhzt8{I~+&}M%CidZ;E<73-_^(
zzx82ZR(LD6=uK)jVDy`5jbufcO7g3iq|x2D?VevIb<ZV7`SZPSkMg~_FI$}aSAnio
z?k1Wz#OVM0azotR5(Ef}UPQL69&JC^(_SJj-3?;rMsBv3kF;jO4<oG;4!Y@HaL111
z_@=uQY<4$!ige;np&ZL$7IB5~p+-K$o>c!dr(o6t&p=j;|99Lm!bNUx)=Z>9utCV<
zh^)5$*1YPw!X>d?k`#6!JE=JlAG0IxMRyNN5UzqZ2pb|&ryhPlitw*fu8cn7_h-_y
zz4MYy^HBZ+{;Qfm#_m`doOnnQ;eujWO82BZk8z@+PB^D8I`H-<u{OGv@b5}CJ83hH
z@hJW2yPdNrz9ZaR?H7;tFjL=lIX)e~Y_5#?DBPAc4(i*AhwVG4?B0PS)C<@9u?S%e
z3Z2vW<6emQqm*aVXT~-Z5x@F9_gsfPe7CT71vyN|sWvEVG0+D4vhY+@?C&R>>_~rA
z=enTKg)r-=w`KHb>tRd7gC2+N)&1+|e_gx24QnQPcM!JU;*@v&+>h%xQ}X6FY53km
z5K!v^1E_6xce&_eE?G5cbtv&v=a3*AJVwj|L?`yfRefH`*@1S#`Kf!p7FVTqLv0R2
z?jBs5`)*s^gQ=9ApGtI6M;}N74_zN`?WhdYtOkES=45j3WE!Oyu&(8^r=R|K68vXM
z-}I*q8{`<6TS~^4_ItS(8HS0sGjeXo>@M7->FKXMbyHt&9hjW??tkI?O}nj`q~3Y?
znuOy8ygt6>l`ookyq=bxsGV>BiJYXpD6YgPR~M2mkBVqf_mZQtzL}Z6o`oswtd*IL
zp1Fmdu4p-!NOgD2i@K=u_5wmIAd>E_YjLW7Tus~5?1J&GXYw}s2$~otfldstZ-dHs
zI#|OHpjb+B40;_(cxDZAkCu)B)|a8z4iVm4!+hh!G8*Ygw*nJZ7oS+M%tr78HS*uP
zpu;@e(ZLW$RW~%!!xJ6icHp@>G#RfP2gN|V+>UO6a{QfzA05yPISy!dY6peKK^E#P
z4{O|W@8-vgH1sLiaLO_A&&g(Dk|zC#v8FM<v0cY(eugz4myIMSM9o}(^Q6(Qv8gfN
zIH}VDV<G?K=9SPZgpR?HOKCZ9C?@s{`#Z|{oAy^>3Btj27>!$aEEG%FFXiA4Ytmmh
z6X@N|uVDW00Z9d&un${U*7j?_Jj48sFZh@CPeH%Ad@}=tgI$xKHxuaD-BHfcc{B(R
zHk;yU;>A{@zH$XT$A4{Y_dMVoR;`7tDapk=NLOA%!R0iL|2^G=+fMb3^A&tsMM1E9
zFaHeG>|a~|e}jBZKHfKe5I>kJJ~R6OAp^p#-|~ph*5$1D(~mtiQwn0{r_<u{xExA(
zoKzT2$`WaAb-CLK8R+M6LP$LI`Iyw`z&?AwWNIdtPAx8Hrq(uQnr_^EG9#86eh~-P
z)(yf$c{m_3E^dKAK?OIWZxEsepCY_qOe-TB|5>X;o}rf5YI<^NH63f|5oUdG&c@FO
zl}C$X<i~idnqZw9&`ze77~3Y4!`?Qyzk{uVm%V`@!rIQ>$Bw$s$J#fMmQxS|*3`yv
z3YsCytv5EVEdcu9rKbXEhWG~=y1>Fi@NQ1Q(RD$na41v`Dt8Eay-S1<l^;>q!%4vz
zyWL6EYiD}C%L2Xk0UPMW$^B?(JRz84{|eNw^I>jekr{GyOu(y+hfKJQgP)0=+H|<R
zxlJPyfQ4=OTI*QYJPfE0HP~5az+H#2IL{ldaGP$OsC#S+cTN}ZCU&r|^#XK#0HU}3
z1EH>zf;o5iTU9Fuge(04=vuX%y2>vAXT765i{{wR>6z2r)WA+q$!zC&xl`_vyX79a
z*Wb5Q(Sg-Go0*xj_+$U@7RE0bqvJ1ebHp;&2j7GF=VymYN9ZsW7GcGBl<&goEIt*w
zgYip7>*h-w^+3)av{hL)+hF_>VVf^Wk_U4Bpp%Q;gS5`RDVt#<or@pX7E7o!sJ|#e
zIw#rI)4<Wj!<&y^GM;a~#5WJ*eCsQv>W8Zppr9TBDJUke@t0USe3`{GVsmMBg0s>E
zLJEbC3{qEt3@TFi=1VksAm`hKaAZ}!Ky8CPBZ?#IoS8r(*eC~82X!m9D{e`#0Hs*8
zSuwXQDhVXnR%$@pkx~&SrM3eSo(MJ(rWnH`0^R(p0RV9D_MkKjkbXL#|LfAx%UOAT
zpdW+R?tJzi2G_i?DyyddtX8CF&YA*6fOv9s$^gX6g3|l{arNn}ecdrRYDMQd@<F9{
zNa=5E{C24AbbxL7(M2}#uJv_f?K8V_O19*C)~UU+vvnZFtzC!tajYb~jGfAbRDRX}
zT#gk{a&?#~pnb9P?np;zDB*z$H0>XIbe$*1hA!KgfjoasDbNAv7HG26j;GH2tDV>C
z$Ou?0^Hcq;W~e6PJ-!n%=_{uzZRnX;@6KB~-XDMwpuMqkm4O?Wmo|Xj^-Vst7vO>1
zB<=Zgsl&vH4LsNYde^t13weEA{8sA=bk=@Dr|O>D6Jt4n2Rml<*#z*n))UzqXmSJA
zyS~XM{|56Hth<qUb%S7iJLd)DKIEf$|0`9;3lt=gNS-0x0bt-O-<~wmz`qcpL_A%8
zj{&BjyGLx`uS}Acv~M1Pn-yZExE~7AJWs02A*qp|83Ez%QThMf<*TtV`7l8U%oj!x
zfCNU;50StyMHRV89VIDa%J4*oU9zh-n;SgA4`$>E)(UYtPe0A%Kkh-36MILAJk<ju
zXeXh50D>`bvLhW5J)0zwXGS^LgPpP`i;Gx;b&Yd!t`@`Vz|X)68y&{D6{iQ!f`xGx
zpHd_a-|-dr4v6AH7pY?&j-LdJGg~t_y3o8bW7^H<ta#qyqq20b-rk=$8NZFv(1@LN
zW<r$}8Z^-u#$=pA7DJP%`|*#vxcHH|Wa2d<${2p0$_|sDz7AwoX{?EpES|2HDWs-5
zV4q*a0ze)%la+b()L>+7iz+2reba#KOO3Ip6}qV#I??kiP|Mb5gsd^{4i$2ps;=P5
z4g_jc3#_VA-;Nl|gd8E4$!R6O4h9KLhE_glzL3o&Gz+7uT4`3E8dAJ4Q`fJA_SAl1
z?E}><iyaQhp)y<?;x87^yB3>n;UDk+(eDoY4@GD+_Pvy)>Wuiz`pJ>$q@x~-yqrxA
z78e62e91-0Bm|Vc?TLX*@Zl*dc^PNyPBn<KKtz;6iNv&yPlbl6Ry<M^+OMaDyS|vC
zQ5fBJBz$!S3jmY>*~<ii=rbyCK4c(SeBRAr8p>Nang;~L7|10of?cr7^Qm-yvW@S~
zQ82V#tK=*<mOq#6L(kCrq*HI2pQ53@Vn$POLpcwFns}tvyC^{6%Uze2jvpDm>`{9)
zqh(0qLB8H@<t8d%7r8KJ5X~DmCdq(16Q%Cik&GNlo=?;O5!53B=_;%op0chzE+dYS
zV4BIUm@H<a8>z^!iw9`o0rSNrrT&6Hk0<_}ya1o!5XMWU-?)1!-5n^<P31=`!+QL=
zsF_Xt;=~IT;Wr6xK^?$qQac($d1}VEB8*hmIfpjM@v2Ek72(7J;TFM<j~e0;Q@2!L
z_MYi}ls+Ytu?hQNbgbIa3I)v+s?_=E-K^W@zBf7niYdnxf}B+@@~}ly71(Bd_+<~>
zYOz@(v4ApmhRmU=WL4JDB3J`Elesc~)3&)M$fMb8onB5lFtBq?-xFtWS+oTu0RV$M
zxD5b{(v95gG*+(U3@Hgf86Y9YFgWXU6Kzt29<2=>&T~HWq`E`b#2y6U0RVj|7Vn0E
zd4v5%Xy~a-x`T^+i;2qHqD92PzTHa0ee}RC^S~!%1pQ91pb6e;h7O<H68k#^A;CI>
zpvKeVSmXk8R_LZm6t3F_Z^>Xa6CWk3eC5Rr*&<gSyiWz{w<bdyq8Cf0N?~5HTy?l-
z_HkfKX)t>;!((7Wshsf?m6pnD&J~>}sry#0S4!+LO58r7b6of`Wf4w!N+{V>2kq4F
z=t+<eYj0(RMztxQ(rJ@q1D8p4UQ|pW@?xmjGL?9dv(9R6c8rv2!Hk_9bXY46s<#~?
zbkpFhkhCB-Sg)^F7=aO<LHb@rS61uCu7H6!Wb_-U5+q#*8xoO7d>b6DD5)nKSak$h
z+Gn5b;=)a!he!EWy>_pLX~be^a7YY$4msFB`qJN}q5Ibe*x#Dp!nk2T^nqp<MlouN
zkmxRvJAb#*c9W4&gRsjWVCHg?Vun2~8<o0FvfOl&4h)yQ1<JUR15bfKnP-Z^Tk%uL
z4~*EjFaHCK0-{lv)#fw!b7@WLI-{uJam|hmLW)uOxihC)vxo9i4q&7)LY?V)IPC~&
zCP_mkEJl4D%Gr&hN|+W!7x|crKS>0-gK9~MgNHu6nK_iF6k0))H8wZR8`g3?Bs95d
zX{r5<W5{f(QW_BLy^N}L1zpxCUSVLh<RS!lh!(UdB+T2hh()Y|@<Vyt<tYNprVgHB
zDbl)(+{o|IfYB4l+-P+pb2NnaJa@(<ZtDA`3S5Uy(iR%WTs29Tm+f}x%61=pgRb1+
zm>wg=Y#C%{M$_(&(vn)UP6-$d{)Wn{W`rw(4O7yj%DHagszf%XNRB;h)gG(r!7dZ1
zJ(K`giOvOuckKx#Y1$e&5e$qm{FK5%Av`hP7u%9x!lspxRWP<7S%TQ~ea{A8syr3r
zt$7TD!&CP!?N1ThY`{@SmDta&2j>Avh7*`U1R|qBV?0i3W$`2glE+A*Nh$A5YBS_+
zk+jG<;+M}!ka2Ivpv~jyklrpVB&5MsX29!F-=Y!~un!|aD=kWk>Wff554lt=SS^cS
zS)UTa=p3Ie=+zbt*;G4{Nt?9i*`fII2mqv8=y`ci%{IY)eB6oeB~K%->X9n3W^$Qm
zu!)-TGBC~yx?%?-tDcL2=mIcrKQO~>k=m&XQVo9R{<;<A+U5~e)k?3uq`Ec{SJ7+V
z!M!!m^uWwkid3YqxA;rPLWsjs){SCwA&6t7Wj#~F5N8`yIbFs?SoOkBxA2&ZsJQAP
z*g=mvh4^Z_RuQlVby1sZ?bX5J!O~Q$kpg?V2MGl!;c+5V+A<Vn!8qM5HN9~6>iYkM
zcYN(x{*|U=arLgf-|irceiOz4N;fzdjpVRtT>HDT={xZgUp_49N>6kZUR!OHVYCqn
zscE7mwWYB6<C$!wQKGr?WwY_R_$o7e@xH9$+i{_GzkN1~6E~S>>mSIR1x4|*P~bb6
z3~<+UhL6V3mtC{#L9h91g^TC=-cT-sqwn^o7R%gywrTHu;Wp^>y!#dTul2%gCu4P;
zfAuyJ>T+_Nyi9&350kwO&5N@wRgXQ{HdoaAR0TaXGydb(EBdj^Jo!`ZWT{4Tdlyy?
zYbRaicnr6Ggx1gduh_#FuRAw=KGlEde#SAd>V3-narFej8>#gk{)q`Eqk35ptWyP>
zENXox90$aq*Fm-~)U8&Xj-If#)}6e}rEoacsbS-iNaX~Wg5^8eo9Y)Ql_=F1Gvm8;
zwMv)e)mR_;m@o|_hG;fQ;vxO3#edvH-E(>h65^G&caGKhu0XlQaFs;|ZSSS~tQNyI
zASvq?(C&ITC9Hr=0!l9^NJv_Bqc0SZdae|oL)64l6~Kcjp_=_Fr2|f3(y*iPJBPkl
zQdI!pHyndH7|-x+zlIN9+$3;bdIzbZ4h4<ljiF&$Wof8o1pBh9@~K9;?~3sZ+hZE-
zh{jf>`W`3$^l7rUoi<SPhg{AICF;^ioN0P^f=EonQ7W~kc0-)itMoTe3sj^2Fbe9W
z>R2mO6xO)_lK3{=DzQ~GbSGS@56zxMkZq_~-(#D6Ggs1vgmdulEJ^8#H>2yhX9}iK
zcjjs2eZ5Qx&UWJN>8>N(fjwm-%**Xg=tAtcFV!^LH$nlpA%d?7<&VVHiqb0a`c|1>
zJ~2)2YOJ4Ol*ERk^E#G&SK#3ocV^=u>3B|3f}eNkjSh5vnk&Y_nDbnFQ4PvdvvguH
zj50NKj0YU7ZO2UeKK$pCeag?^S<&J{`{^aGsDKR1!Uvh`CEqKxoodgN-gYLyrgKd4
z`)Tl<^De+t>7}HJK|22=rMA{4=@e3^tnj}%CSz18k>Ax7ZAm@cF9i8=vAvXr7`&MI
z>&WLUUKIiEm|b<nA6!KbbR-s6n(2|MO+D}N?Z=Zxe`kNFhe#65n?Z>LcILJy(&kf}
zXbjTvY`aF)U#_9s(y=x02{zeR^eH&zLRj$OwEMu*$WIzjxr_1(a|wv+YD_+NlImzq
zD?LGM=DMnR-ujgXpFTU-&dK4Xlesq<RSFi9;)(RxG>$ng&+*YFiq(QeTR>;O*?%O_
zDW<S7l{U2gOODi26_kV6?gy5zvC$E6N~p8q9^w`mgierBCY+ixDy*Eh+TC^d$HbhW
zeko&DAPLA$`BRhD$-HaG^kdZJXs$!fpAwt(Dn^yw%kK#|MVO%0FLk<+#F=;eF^|%(
zu|_n|H3gORNf3;R1lbF+5W1%26lKg0+y-)2OW(-cWZWAe9n**<)X|#M0A~Gnu??A_
zSce?h7tc^o^j3(aG;WU=$BS|tPPNy(N0SOAB<00=!D{444AG-MW;Fk5AeA0zrCsOJ
zREHjQc(fxGo(fNSMEm-2UOaz;htUu10a>?A%&E24S2;Byt=$vTfaE&cv`sM%Yo0i5
z@uVG0-lX#G!*5=Yp+1c?hcLMlOv2lqkIZ61snjW`;;8!fqz*Ef8kKay>P*%4DfTK!
zwxHcw=+ijR&5aADu&E5j+Lj6>uRG99=EJCq+f5f^h^jTo=F(M!|LZa9#c^}cMl?4Q
z9$c$;n~v4CjuC*ODH|qZyiZlDuPO|in#lx*fj47=nvkDJ@MSNUHL3hHX~Rtk<gv5z
zd^+{ngjzNeu5EXX$kL81u4-lFOsxM>c8y6dyScyb)1`FYZDv0rJG@kpI{&KHt-;v9
zUM-T&bmVyzd$V~-j>nMhzBy^*4RfRe5hpWZUmNP`fxRnkj`X8{mTP#3uu2Wvhjeth
zwNmfut(uD2$Xtu-fCcF`){J+1bEa>VeRl<@E8Xfst)7(&*q;vO(CSu~6^GgKisLL1
zkt5RW+nJhpLrSWvMLZ$}1@tkHkWULy9Fs#cZw>GJg)BT`<=kqAc*UoA{+QY@D!*Dt
zD-rYvUj#ng8(7E-i+GLrCgN@8=ehNjyEv9sKF=f0;xZdi<0~Z8^Vm7v9bd@6Bi4vh
z#2x2W=VnX|`Ez0mX(WOU5s2px27upf!2pFwQfh@nEQ5#X+jK-U*eFbs5;astj>X-~
z#B%30$V?egMGu;LN0K$4kBOvEN*#+0sTmpBvm+9-)^wVYO3DJ4LSvX%X;&)mBNUO*
z4QWlF4IU0iFi@ou4CG8^kN+XmUGkS-{zw1$?_luLGyni_{&$ug0KkJ0_0=!(?*k3v
z14RHdU;qFRP`huh4WM!1Kjc5b!NU;P&BR<J!))~D!x#CE^(C^jw~J|lqV-ZvzmYux
zlvR#JwGnq_n$pceMmnDg<~ZJ3K5dzfX64`@^GIVBJ7^@7`45yiI@OI_K5baO@hGd?
zO!aIKy>nL3|Ka2wAzx0KmM?iPhFAXrR=MSCCwXz*>ny^xgY(>{ZR6-%`%as$rr-9y
zt`%#q!+nyZXSuBZ>go5U?s$BAh<jgU)K|of*LtS~hoJ=cO+qIXsvucyC!+~A_Ebqt
zmfZ^Cs>O`XUmqG})3|2!xR-TP*%@=!&d{39Jie>Mskl<v)wMsT4rEpVL;i`^%>m|{
zI?R}Z9OeyV-s|jY!XHx(I*nCn`T9XG>Ud>cAaTvh>647c37!4OoJrELWm+&ZZJt|I
zb)f1kob$pTaMEFE`--k7ME->d%T#q!^~@W@<2&?@PmqSUUOOwa%`Qc2Nzt|gGPZL{
zC!b_zht&=evHNC^INFr8+j%j~v$_`vY$|E9b&kt+>?&mMP?9E5S5+yQ4D;7Hof}Wh
zh?F)W`HfUol_9<G_~pi`)>yH)wpFU^3XwWX_|+iq&Li$TTU*4T<IUJQ*;e(2h+1YN
z#G7nV@FP47sV8RRO*Sd`5nd0Wu%_hkD;}3h?YO2^OskZ|km<m?+L?b-Mkv)1G@Wvw
zK~ttJ(-hM5$+0cRTwZHDr{^A~oS;r?m;h~^rp+@VApq|zWk8BpqCMU7V6aEf#b;7C
z2M)Cc03?CYNW@6eNQ|!1BA!*G!AOF+=8O)x>y7G)cGfI;@>M7_PnNlgk(@Yi{DdT-
zyfRd_%$)|wmCi1kS&%(7O2HHf?=@4AOod8i%3vo-o-}!i<speAwbVJYl*pC}V#7j3
z=9ygE*q!Cfowp<NyPGMs)t~1qmd}g55oOL!s(fVWjlE{Flc!MDrL)bGE>o_H6?$rW
zB0**m2qPw7Yxj5uxVOVn&6nW`$4lFW0&GBtv@shb+==1~=-uh%pmtmykg<VYl!LI+
zKen9bs8}u5^+GUQyfoP1+;E8|lry{`DTMcH7|tWLoE`vIw58SZ$V8f-Q96)E*3<s<
zVL5x7jJ@4dt{vSeSbNP0Ak@`Wv!Q@L9n@bakcUu&t|6N$Opu5TG@;4ik|RNhmvpkJ
zLKlUg<SLhy|I!I8t<WSIfM>VqFCN12S&8TGnRFtXDnu%|%Bu38o5&>ToYV<G+e%dk
G1pojr7X{-0

diff --git a/static/fonts/roboto-v18-latin-300italic.eot b/static/fonts/roboto-v18-latin-300italic.eot
deleted file mode 100644
index 8eb2292f007f9841c6b8726e859b41e6a7a4d4e3..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19292
zcmZ^JRcstg(BztV&5UbiW?VBfQ_Rd5Gcz+YGc&~uYi4GM?bwMara19^|4H|7CtZ(P
zHPvdh=3z!^O|_9C0N|+r06_n@U;+Pw|Hq)9n4$h>ucSr?0E9^XpYVTJ3<aS0AL?y~
z$@D+?e;WZn1K<KM|Ia=Da|(bGzz$#ou>Fq#0H^@@|IiHJ_+QN8KTZqK0ayXt0UrNx
z7l8AB*_;4Y00)2zzy}ce-;Dh~#`nK7|9@2}{-2rvfP|*3+W&nf000Kyqy!MS0tmhV
z=&P{iui~aHc65<!IePhe_*1b8Iq{gX2p*@ptB*&VZ=u|N=%oU7(sY<*h$PoZ^W7?I
zFF$p0j6BCJcgCK6PDs4}MSa_YDIM6P&BbG&MTAenM>h7|B~V(#Y5Kg-IBU8h+T%uv
z?UxiUTjAM`0*IP+y(i>qK-g_2jW_G|D@78d<$@ON2?}Tk`M>CI)GM%ext6f%$kg{c
ziu@>$HZ_Huc`W98E^2*+dtbSr>%bwR{M(X1oBef74uhCFoPV#rBoD3q=h+aryM!Od
z@gH>6?w+hl*PDZovGfFO-&njDA+vviH_=jOq0dA!?sJZsg!}Oc?xqFKCC=YWY3(eP
zdw1+?Z#VCTs8{H9LE>JVs|FCj78mP}LqoFfS)C<Ex%epI8p$B34K_`xXgfP$(Cn}6
zth%$CWn*$n>F*(`%dj|RJs|a*lIM0>_>|63CjumOe+OpUrRZ&<(_=O-BNR}4jJ6gj
zbQq;(faVe}g;oqr+%*s4tJRNjjg=83@*N!W8ERn)_e#kqFGQ%5hgo~ddtVLmAmJel
zU%QYc^jsp<JR*4=)A=nUmo>RQEDeNR?}{s+`D&~xoojgCs0v;%79EH?;_)DH&EQ+>
z-zIjE%<-3FJ~WRReF=Ha6nb!_2$Czy5|IJfjU-H_NCOs`->nDt@6j8WnrWL#4WT0+
z+je%LHna-p^b@4Cktf&;e-p+sjR*&5ML=aJ=SZBqC2AjP2kx2lR8_fWK?>E<h1oov
z7f8aKLpCfMBLL@>(G^yZYAkt^d=N$n$c{iX_od~VS=bm_ln}^~Q(PJ<502;*N(&8|
z6(w?xjzkc`C(%-41@AVnjhSe3mO|U?+|Jm^R~blB)z4MXN?s59qQhux$ShF-O0(au
zZ1_Vp{STR=5}Ceq4_KUQI&CbG5pg#y8SxTx50uETY7Yrel1z{S6?v#uAY5_wDes>U
zj85jP$#Z06SS_Wft)^V2v%ZR0XPEtglROG`3=!@0b*D0Y4u$RS`P22GPw<oDz`W~b
zgsWzuogg8$nZoI;FQ4mfW{ge=Hdk2cjQ|!WM)G%z=m_E-fgdjzH)7jgMoR#*34Oq|
zcdZ;HN`YTNyjG@$fHL`uj)2*0^n-xU6`?IcF%7#JQvw|m{a44E!Y|-8S)Q6i^_+Rp
z{ME&Bn7(Lc@og;~50#yEjsS*>Hx?P)?g;#F7J<YUFlD@waeR1zey93Y`BriTX|!EA
zq6L9TZ!ULn&0tOxo=nbxqa+j;#_-L$Kq*s(aEY2<V+VqbiU#(e<<|F(XTtC_%GSC%
zcHKpdqgAREx0cow%%Q9g_vtiq=FXmpdo0QEZrNH$=(csYV{1#S3LBAlZEeCY@L%|X
znZ~FAhaKILyaN#=S$Iu#PNBR+$v6e>u37@&B<45~>XS(%X^ZI<jGY8&oM^)9>F$#W
zt?C~f+NBhM%wFdzu4~H;U^@HsxX{%fu5gIBoDOvaR58b@jDq|?zK9j^)OSRgT0|r>
zL0Yr-x&xKsl>Hyo-~cKqb@gVMLHM@k-dq-kE6y$S72Vd>88H+h^_pWUlP-eHI{+7E
zcq2SvIo!XfB~62yZ#@e3C5lQkv|MhzDbeIoN|<s4m<+MJN;^+%#^(PLD36;V3^%(N
zZwdYk9@g-8fT-MKaum?s@Olw+yIwm?4Vp=&muZCMo;*qIof@#fD1_P!qhympT=%=6
z4j^35)F9BfO$y%$$1}5b5gARF(v8rpRor@90Y-%=9-3e)CQmtKNxKIr0$S-#3M!s1
zoB~fqhSX1?0}MhR-Q-i}*>cgDt?8)NLj+K=utF-(BDD<6OZ+w<A&9{qTf`na1@Ph?
zJ9DNI$B^M%)TLunIgwPpB`k9K1o^HM8!|~=z~hz>?^w@ottB|O(!2m$9h?GLi7Vi;
zy6X0@Ve<-`fZTwZIvYP)O^bbaJhLxW`Q?XHvFxf6v#>m1`woIujF40IsodpilBAaz
z^wExdL|vf``AsD4WhAshi+!i!ez*517e_pjg>gXAaB=9nygwg}Eua{UYeT;_2w|zn
zwzRjL1pDV!7kb!!Jab!t4P1|hG$5osFfR}FGJSH!jIQkD|6ovP{)s2S&b1rmQ7u31
zSElVkJ#S?Y7hFFpN}Q){JbB*Y99~u=rj5{+c-k%JfcL3}&Z;(PpoR=jDxL(n>%5&R
zsnl8G#v0QVN8(G0sltbT2B&Sh=7%$lSIL<N<%JB3zx<&wRktAZR6{VvDIAa%JfKXl
zTb9qTEwznML-yRAxjcLrRL3ddqy#v;_i*t(-!ts1e!o(>{RfSZ(E!lrk|b%*nJYU`
zj0n~(VpNyPw0*I2Q_T&fbG)OQM^i~eQ;C~cyuGMW{#d)*aqcuCYC;e!FD5Eo^!oiS
zfu<&w(47?i(sX>ZZj8W_r7jiJ-D_Q|9>rX<``Lbk4BL^4hObW0K_&xKxC1#RkB@gy
z=d6c}Nid#(52f`iMd7=F`1h{gp21dj@X%Ko%h_fPU%|GpYg;gp;zN9;Sp?*mWwxRT
zKU%Z|j9Q|L+S)k;TSE5UNC@tCdfAb=Y4t|GOL^(XH8q>J-L?E^fXB*z?9?x^VgCph
zbqJ2+O$Pc%J0Np7-<bGL#R6)Mr`?yD`k-ga8=+uu09zfC12SYRsL0%<5@9G^64)XE
z(W2Znf)1|nLe-r?`-Po`M~1zymp2ziO`Z1k>$lCwvYL&Ius!aVHk<|=Q^@DSGUP|q
zaxt+kxIK0(I`??sAS>@R^9R?_M_Qn*OigYsX^8G-2`CQJ5g^dxA9@0G755Ipc$mUO
zWLYU~jTPLXP&(-Af?i%l0~6<O*;*vc_l1*#`dK{N_&N|cn;^3aU19CG^6T+1ldwOh
z*E9W0u@_Uk15?Co@-^H4`5ULgn4xxpXN@=e4hcUkyW}dqShY$-e!W38XSe!n9$U={
z<G<Bouz~)3K50<`w$imCnYP&m@0hj;Ct)*%v~dnk6wCDjo}!>)1r<K_S-ca5A;aF|
zT+}=UX5;#5k`1ot5uNd6P6~Sa_IUR6))l59nHJCx)igReg|f`+<keywF^4eX;0kRf
zb*70B*n11g9Sg5(No@WewY|YV9ykgqg>iCeL`Q|&1i4$x>`E5Pu}I1UNLx?@$Q(NA
z+X_t^Iqu#Hahhu=Yus6`O5ix?6pj)GkU3aWyk(YsSUeA&k06pW%e2Te#IiOMhDihz
zQ%)6ANJdZUC&9eJ1gilHim8BApKed3maCB4rm~>Kbft8L1?>(oQb*`1(4<NUH?Y&9
z_>LlT0ENsT%nW8Dx`-{*bNEX!A1%c&7Jv>p78rCu5jDK&Y(z~+VYoUvB}@Ph4jK-W
z4Qip#5;TF$;~-Q>ICg|5tP)oyAlbfrM3V*Lh$Xy=^per@<+><1MV&ATu1UQx>3P6t
z2s^Ctp=Wjk)Y8YBN_*Jz&XKQujG9?#jD4QLxkCkZ;${0WI=bUL$5$$Q>r@XPLX>S7
zc-)4$1OGP|8m8S#p@6kMs_n)MM!bLW;N01;&j$1HQcouc2VLTtViYebHBZn9Wi?CL
zfUw_q0i6x;a!6JdFXngwQ2}*+0x4&wEPut0X;Us?FpexZo=Hw_mL=r4kF3P7?~&wR
z;X-=P3z?jC-9V}P$fUHN;}#aDSJ0}`#n_=TIlJum*&Ut6FQ4d|xN3f~E=A~3tZChi
z!SZ=7_0~Of7xhBEkIF|zaPLT7*+1oUuO`KbuzxpGiW$M=kBDU<irQ0ZzM2s)ot2^V
zs-{AgR^s7mf@ZBbwILj>Jyd00qU4!aK`g1A&~%R47O4(%)Y`l|WKT#m`lJft<2cv9
zoixxJIH7jo6G&m`V%a~JKlQvTi;rY!L#iD}P)ZM0kS4dCIr%7GUPEm}p{zc|#pJMm
zhLrX2NtY{ipj|p>jJL`1a7qRrvkCsiI=4uz^iqK7h^rn(?d0(oDxm#6tc0@W-LD-;
zl-Ho{H~^aTyr)f>Sg#w-HgK+ufw+hrnR-kQj2#?d&ZZ0~4{87L4dKyVF8?Wa3IU|m
zi5m|JVv2n+ht6^Mi9~4=IX*=__$5W#muYl-XC$HEp=o)Ecm8wac0rC5)~sMWP$CFy
zJ1J<@U#`D#r|(Q8N0x|z@eY(GSR)}JN-1fJFl$F=KN{yU@lN^v{Xx)^=a*2o?^X+p
ziJ{)b+~v*;t1v3}_vvMczyd;s(`pG<NFQFEgqwyMKr8i%cl>oR(p{vc+7}>6M;zGE
zK-=-(jo8=3)Fa;3y=GLhg=^K)K+$ax0}#*Gs(rY$hVLn}x5t@B8Nfw_*znkipoGWL
z3lXyuvcza>my0~GZ0k&KBzfSAb0XGcJbY##ERsRZ<UO(LR>K2_)vv2ia#1M2G;qFH
zKH~1Za6BRTf;ua<MwmaKj%q(G1>TvNqv`=Um0}lp^4sYPYu?Lc-sq9r-Y{%i%i?dt
z87bz*{$GV!DC`0*7GC0W#P(F<yG_qfhN;R(h9x0w$pT~5C>&_l?B;cs^trU+3#o}U
zI`fb7-rk*Myu?Ui-m03G@-d9YFvo8ktaM*3IU<@bvne);`l3(@nlxZ1&ezPLfN-1a
ztk*y~Mn*0BOdO|#byI;VY&UTWd)-(Zu)!xw&>1T{Q*z-c75q<Wa-D+Rd9hXN%VF-)
z=sJ6>fEkL_d0TN{pDCRun*Nxf$Tz|SScPWOfKx1?0}&awzsSLUv5@jAJ;@(tbUWB6
z@WtD=byot_O`->aWVkvZ)9Cc>T3-*cG-h^KQ&(PXA`q_gp_tdEuy&Y^Ah2U?#=jy+
z)OQ)Hl1O)<H><sqBu0J^nh-5t79c~+@`Ty2{WC}k#OUez175`fnSa01!|_IyQuLHP
zN8|lDNmoKg7w^I*|7Aq1_5)sDzD7UFm_j!Xays;Co{T4@z(gU!R$fnCi>6PQ=5Q5f
zFcOxIC;N>nA9=>Uf|<ulN(w7x-r7AUVUNl;Q7tfjCd-kK?Md2{h$O!qN(qb?sC8OB
zFW-tkfgpUh;wLaQFz~mSuft&Jr$2SbMTiUjz^(48>pn|Vd9IVfiB*USPG}zl)BDHL
zF(!P&-==A32v(V$JZQ-2TlRXR&~_x2{a%SwRJM8ec3lGA+Y8LzC8zM>RIDrUQ@JoQ
z8hk@U^(85~+zW--C50M65xOKk-4oTc+(pT*<iY)n9oACL<+FmI)<py9O+WfHIg(<o
zIz3yAHp(1qwq-ah*O8wBozNz7uzoLQA4$7Yd&(JlD4AmtCF026f;fC-H7j(z_{4}c
zAh&x|oL3951OLs~ttoIJ8f*%SLh8Kc4-Gk5d<^kaURXxpn?s5<@x@@i$6drEkVgg)
zH)Js58vmi%gqcrqm7P{a%U$ZRyMn4i9Y>@&NF#X@5gy4^qY;Y&wFFHKRwMkO0q!c9
zOce{(g{_6A*f<dzE$QH}j6yR_8hhiDFsNQ=-`$?T%}wG~!ap8-!I+{EoVAsd!$Q+^
zj?|olf)&gcj&-Hv?kZdAPZkccm?rSCrAJE*dG4`Zr(UPPb#8~Fn!|-t&_XvnO?mpK
zRMX*3u#FvTDvCLpj3dNEg5#Xj)vcH1?+PbUD$1Sr$`82TnC361iMGoDOHh!oXpI=%
zlS1<I#j^F=i?U5y_o@psZf2dNwo^MKQ3VFm?BL<#@)}~93)3K=0BpRX><WAkfIc@R
zbI~{Kns2Dy)>eGVY-J?9sP)4jS|VJP0n}_76<Q*p6+}6g39YSFS&{;SuSpQmd|HK5
z5&I<~ANDpkf($>}bv6z`J?gs@5b=e^Jj}MrHnz-XbtB>lLQLxuuRsL=Go7fyMfhi_
zYSXOp*W)M<ZO>X5r>s}n@%4Ag77JRpe<Jvmj_A8$=Pbwnax0Z>27Faaokp`nkQ;v-
zK+jiChb)t#urZ@(76h)64QhlQvn~g;^~yChrl&NXlKJ{|bQAt4Ftd&aO__#E(PEZn
zIOQ1+HikANdRggn{xRcG*l%AUuk;_?vW?<6%Vns~l1tG>9*ptfoXJ{bM=pnYG@T0?
zEXJ_upt>LzX@muQM<K!-*j=q<Jt(5Sg(iJ0V4RJb7?7_8J5@M(%RzD4)t2;`TU`^P
z;31ePQ>Md%9O2cX%_wCyQ0R|4vm&YJc2F0v&<eA*P@YPK5Wiv&5gd`LFQBLCCj0T5
zE|-*K86Bc|zvG;yn#)Hsm8{BC|C}W_VWQ9S&#+hAF)ah&)`ORx4hgcb^RE0-O_hQ$
zJxxIk2@RdFou#(c3O(N$12w7m+s?|M*)LNf&Dn0Ki|)4d{;B=C6Z1or0BE+2r_li`
zfPZ=MKzN5Utrgtl(DV0ZI|6@tEQqFil1j2GZ}ljsj}0~O7%DSvT@22%&x;v5iPDlr
z;Rr2#5`-$aJY%s&+e)>pawTFKl7D*9o5`nMN~}CsVvS<>68t#HfYrZPI7a2`k%ntL
zllG_WnBQ{$8=#jLUjz+(*J^1&u{ptEW?L>(lCuuz1rg2@hUol|d#K><8r~J1E;y)J
z44IaS1xQ^{WBi+uTq~W3;&}H`%Xdc2CknBOaM16me6QsyZG|6uUVdSf%8=V)@TS??
zC!{JOul;WO?#E(`XViUXY}zRs4~sKtgWD02Svn31%Hp3OiR-PyVt&Gl;<3Ng8>BKM
z+{CDS6p(1O_0gK5u69rFDW28+M;yJPZbx|?w5P*Qq<kX6DOf2rXW!*<?;=gwV8Jry
zH!7;0#YgBm5RFNua+Mg@$0b-8e`@XA*_UwFJ{1UZPE3}AFVNPq<Xf~8Qgz}FyenIf
zihkZOW4bTE5QZ;0pDi5avRWCHH|BlFyD3p7Pm@n;M3a_@o43Q!B~-V23L8}&TtGwo
zU7n2<luv6EwQi$F%&;QzCj>c0Dl+FmRgWSXE+KTNp&CVgr&p&S({@8zuw~>|uq@bZ
z+r)1g$IXQFvb#kRz7I<wrZ&_*mK*fG_t9LHqHH=O5v^bbG?KT1{=CzMF=qV^8UIp=
zBpvamUp5iW8r3ojVik8e^z}}tsbThm4KIeLo7hB{TDyOfp(aj)@~`nxpeB)y2c5Gw
zIpRatEB(KIV*|2|R%e$mS2)WVwe*vc*aJ5X>a91cFTA(N&H=2@&Q#ob)`dNOxh!=4
zL4~{QjPq!Qb}4=Sn`ALN?^19sW&OSrUiw*7zt~pHJm^ogmcjOaEv?1=>-%tOnmK5g
zlZ<D5<`)D7+8a*3!k%-*(XF;-<`1UQ?jhj=?Dk1sFQ~UL7kw@TekQ94hEz9}+cqrm
z?5SSv`bv}%y&JigC!12UPA~)?A;(zb%!<~@LBt8ZoDW3kskm0^Q^GSP+F~I#E9`O7
zcdEPuP(KAg(nSG(m2Jq*?^P5br;oYbCdY0C#GO!1SUTJPqM;2iMk@Q6?raH*nW<(w
zFkfRTByN59wi^G%T<9~E{%HAoXMx+deJ84rVCXbEAWB0e+;B1U<uxID=FC1{hWExU
zsf0fc#wYdDFsg3#qOg<?Dn7$fhdIi9cl80f3i{HpHUTO88*Sh`^KY{KpU0r5CL=SH
zyZq3N6?-<$wJUK(t3O6M1CnVg6noQAY<D|rqa1Mj;|A=zl@%#->DWZ-<Be*0#0{9d
z%4*-9%md#7i5kd05d=SvbiSx95SMqDLiN+%bhkyZlLq~{&Q6aHY-p>{bD9KRu#NDL
zU95TKdBW#Ah%gaIi-$KPk*1{{jEE0w6*3Y$6Bf(TQ~m(2P=-8)9^W4ll-Cbnl3-ZY
zr(NAvrCK99F}$ke<O!?A){-4IZD=#AG~pHeUW||NC!SR+Il7kBeWs=U0b{&R25t}-
zu6V?lo?8_Hym@y5k+RVTOaD0jj#R2+bo19?Z<M}6(&uj_Wk(=A!ss@FA^`Dt0xs${
z_Dd0QTm%2wxox*CEo9K|9Cj_lO#fn?W2w+je9l^5tH)?dqbgjwhK-PQa;<ZTF*V{W
zY!??7wKCx%>%D_^2rt_Zl~tLXXV74kbb%v}XmJ>7O>E+D{#74#P-m(50Kb1pJ<iN1
zfbh*<60rfp7JXd`g1g_TRiqN^%}DfkH+Qs7oRJc=u5J-~4Xw^r+O3SGEW?x3d--==
z5v~vQV~shL!|WQBVcI5h!A)=g9-wkWZFR;FMo+qdE@igCS*_{mv%0D=|N0|ovs<3>
zShHMo;xs3nA33b?+?#usI3LM2kgI8UUWO0IVtTFLr%vXbDD+e(RVcL2fti~poerDX
z_~>@I^-_s#RdbRNrCXn-^9S)GoG2KZw0+h+;+?f5o)ca*GSH7HvjV%K-ftYIO;9U@
zMS4}U)V(@^vsW2AIXXXq-%3$M$M&;8O5ly<kv5W%$wYaD>uoCKqFO1q-5TKvM~0J^
zHs7P=)|En4@`#ELhw1xC$#P)zI+%JxDBur&L(X~Cx9>QnI*6(v*2wEs$e9D)0Jce|
z3MwH^H+}>70?$p7BI6EsVQnqr6D}=3FDyMs)wr^#F;=)Lt53sHQ7gZr(E!<C8!N%r
zT%L3es6X0+QCZY~hk0E!WhA?6@HX&i|C}XRcZljV?hvS@TPGazq=o<^zNha(`2YL$
zy9TV!W#{j^Rmrd~g=*w;>3Qf%$up0iPu_5~DDRUKylJKuht}t8`<0A-AEXpE*%#K4
zV@g`3yp>}8opo|=8)pa|GvZ@<%?9-(kMZ#4tggJYV0dmIr5Bw=oa1Fqd#9BtBA1ZZ
z=HL9H1>{($-8ym8<XxAS6t6U;p^0L=?@l%#^yIzI>;dt+W{6k)v)qrgE|kX=&U6{6
zb#s038EHn0zNi?`N$QIINr4G>?wc{d$%m>EJDjP>kj58}irb|r9QL;w=;cF1u}7ZD
zqzOCp<i}3C#xHfDsZ(-bHkoO=`YHbMui-5kSiDUnqNo~w3qt?GtgIql2@ZgXfl|rs
zO`Y}Rv&CEe<I>~BK}vu>l_eb529DUq6f;LlzcbZVn=~M%QZvxy%L&n{^3jsBty+1e
z<l1iKa3L2XLDKH27-ul&{Gv1IMU1vi0b}ZM7Z}L?9*SbuO8$kLJnD?Wf?m|bI?VBi
ze{!p}M)0?%MG{BOYmc4(#QY~oI5oC{aMqxa)y7RpA$lOu84}u!!gD1}qajVR50omG
zL~6^@d4?U#M>)C%S?_-Kxk6rUOyBsmku+X3r(L!;JGLTb$ZZDr&~lIDB~dJc3?sT9
z-S5}kJ1f+#izh5)M)~0A-P~9L9(;YGIt`bGq2G7oKztd!twYP-m(OU9s7H~hL+4q0
z#+IF@&2h^SuZ#)Up$#v$?sxG6ze#!+e-beTa<A{g#HcH}k2W&=S~CX?t>6wM)`PU9
z*6y@I(NEOryCyl`F6FFRmNLr{wC4qdQ?U(cjLpVcA78rBr5Y)pOuYR;*4l`)-<CBK
zfNsMi@Gh`po;5WDX|eb6{a_M&{bxHzj4!heuo7$|&W1d)jp0hZjzq%i_oL}40-;2u
zGLC0ck`7<cG+vx!vK8fZTEYhL8Jeo}sgS@tj|_tCg;|T&1BOecJel9Hf6AqEP-XP7
z#4-iG$QA1aDoLpen`_+S<g|)$s_`}D^razrmmE9Ni-eB6!6qVg8*!l2mfNTs-8E<%
z0xjCQGn}aQ9hmxS1IKfI5em|#Mr6eN_$<PnZD>fYWC|!(FYm1Yrc~4dW{aZG?Q#s@
zzGgss_3~r~UM<D#V^6S3itkR)&2w=)O7)3{i#UGc(`;PafE8%nR!G;DLngclI*pT6
zw&qm7wAoCN`BhOTa)kIL3);`%6)nb{#x59w%&Bfc*!zyZ5yB9BNKVSR(#A?G;{$au
zPMu$yp*3k;c8BBHhDVfv3wPy>y`Xj~he`ET&HK)7j*;v_ZK>NZO{oD)yvJfiX^R7v
zG)yALxZ_BOPKh1$C)<_v5_F^aJC7cSCY3KX5$|Pb+LvR+=I%z1z%^y}D9JrtI_?Ra
zL@(~F8r0?M$S$FEF8WrG4cZ^}adlU6=#ugit%4q|z5Xr1cxXjiD%eQ=GdzAq^c^&l
zUq@OImUktv*Tf(gKMetW=d6e(U9$irz>&^G6r8q<le`Iq037!n4F42tehYU<CRkcN
z0s$N_rnP0cvY5mv7elbSYYI<Q!>q8R>h82Ve!vz=a=?Th0=y|J9}0DJlL7USY+Cm2
z0u)Qvlpp?H%16`O(h6!I$RGxz?FX)=0TYqcUKmca(gz!jfLPtdhdUKD#+}L-4J461
zP2!2p|MiJ1>JIPx(vj_nMPusEMrtko^pwupmhI7gdfuV+_>&0!qAwj<gAYet5lu=*
z2HvM2T@@O!5w$d`sJvytr2#cmm!L=)x;ogh#1-MDNb?(tA$945)Gv26(BD($>$P~c
z()hNB1^1BOG)BF^`4Q8}cM=hK7wijNsfQvsraxWJ8A&u`!KaZ;naQ$RyQAPuAB)BR
zUW0IgEwh(hipJSP@m6d9Rxc4o9_}oWrYMJk8DjHtKUo0>p3Hh-_$R7+EQURQ7=&%C
zoFLD{07^1+X@)`9W8_9?$7$&{pT(1sd5iogOT42qzV5FuEhA#N$h;;)AO(UpTS1mX
z%dFeU>&$;57~nn2G(ct?Fp^KZhfxs}Bc+9he#hAhMa>sfFlyhQx`*bkGsZr^hB8O8
zdWw$$xR<O_`yPUhpab_#Bm4(-iif_s-euuQW2B47s{NfiYc)aiU1lV$^eqeKQ~=if
zO)hE}p@Ok{B_mzV#;D%I6aYu8=-1-M&m2^)m+0&Xac0E#i3myQ`<X8q2hEm9HnYMK
zVSu<$4xP`1J8ThP9wPJMD>FtNh(<WQzo@rd%Wm;^X2tXu9_P4Br65(8M^K0vG-j`4
z-}#ZEagW^^nggu*MO^J4Y34OkI5L1nN)LL03F_GxlQWBA9n*+PX1D9LWehQwz%nH1
z+xY?k+r{7^M}sb_zhcopTuT{^N#uW?k~zB7y;VDXU+dQ%ggZ`{Fr3SHg;vmr-T84m
zN?B9?HfvL|*;ywD-&AckfUP(T-w5D{2g+OG{|y&SF12LJ(HZWR(MXyAD40ekl?;B}
z)HGt46d@#nSA1}yX03tc*#q7$O3rV1$&B|EO4L36hGatA(tJ5<*b31fgJU)^wEX25
zNFCTVk2TfYt)gj!gmA-~0=7TRe7Rqr_1dX9&$Xb68%jO5eY(KN3_kYyp#k({6?KcI
z%o$5{==@lnpG*les;)9r?m_E<BAom$Xz&qE4uPxwn;5Js|H<p2cW-uALUAs6W2QF)
zig}1@XrS*GYgiG*NFB&{i?+`S-KGFUncU2n8Ek=M)K2MbaFIiXUm<n?{9bZi_Nym6
z)tLw$7{%~dZb^HU0h<T`&TG~oa2$JmBh(d1?-vI)-IZhs1};v{27XLGyPeE${+k0>
z5wj;mE|jaNL1cm=D5{LlALbAH*%nV6nABZ;Zca%{SzAYN89&Yo%#0dOGF!TPhtGSJ
zu*z<!Yc|AQO)SZV8j=|nq}hNSUUS6Lb<Qgz$lv>N9)U40q<6dY3p?QDv>5?G!crL$
zj2J~@I00zbUQJV)de|Vpp{3(G{u(ds9-0l*3M0})>m`JAT$Mt4<KemXgH>jCauf@=
z$NX8}Z`gy!+5%{arYn6O(XPz8B^A4@z!305jQx`zD$$nQv%{+Z?c2Sa=*XybA%a0!
zk~q>P0Q;_G2uTEjy<r}HpoWm#LSV#q15NpL&U4h{L~C?t5!5R3_kt7^8|r0@IUukp
zmq=a61;E9fIbPoeR2=AKn%6<Wd?%y^u`T<Ct|~(jv&B(g2t{FsKTtW{ILQe8IXXAW
z^o=3B7e-jOfH%#K_-8vc8bd$ea}*hJ7mwOLl-+~~&%Y{KHJ>@)Z$fZR^nfW)Q!NcV
zQO0DfE%g%cRl`Ll4pW~XJTo<~Y+RMWq8HX6j}k}CKvjW-MRW;T)v%cGlXH#NA(fW2
zjikgu22%?nF3%Eb&F1>UUbsXsGMtZI^?g%HG^)Xa8`37e(b2p4#3m*b)YVDLGps1Y
z)Q87Gba-g6=J|<tDdYs~K{TMABBDG&&0`Gm=~*GY=S^hLJtxO^U1Q7#Gu-&p5EgbO
z<167IhT8XA$;7L(U_ye$%zv_}@T=4RDbcg*VRJt{{e4w}gb-eX^lp4_^oz#+uL7h}
zv4Cb^u&dB~(>;o==ns$^Ix_EIVUn;j_tdSb{oCSXn>@9FwY_Uid<*p4%J|Xh)K-)%
z)K_9uZlb%x#Hmw#iYSe6bhUZ@ExJn~6RfysOJ;<P!-LPpTDvq7vfF!WRkIW+OJ(;Q
zsp+e|40|(UwK>P+Jp-x_PJyeFSs#~~`~`ZGk5Kd@<Mok@jXn+yuA$^)BeyrjT1BcH
zlb*3)5u&)gu;0uH$HWeoQ}D@>1Pa(+JCQccbGCjTei(LTG;KosIu@y=3np0X|C<47
zq{=~$&<lCs5<X8)=TB+P7?Lp)H{z%tokuYBc<>?lfEE-NCtf^!PvULAa<x$Y7)Chn
z0cvhgg%jidj!PM%ilDs67`Tv{6+!;!fc5UnRNi=NDo3U@kzs3@)CH*>mJ&7J+Gg-`
zo@nD6$i}K7^Q4yvF%H799zRl9?@jCIqNa!z$$*ey`MKI6U{jR`=j}tXrGhseAx+Mh
z0<3XTJmE4hh$NYl_JqiZgDsAg*Nn&7Gf-Q3sFp=BYo?^924UH^9=EWxVN`xzr!sd_
zoi%bs=mtvK%G0dha0Dz1i-%@i`|Z;{-y9bQ0?yH@zL0=mtdC6bF8{v8*XWXjbI=y<
zoXDdVT0xa)zV#<gUBe6<Dw?AOWnROo;zB9RXw>H#$5-`tqk*q*w=?$qSfojiZzroe
zlsRDq#r9vO)!EI|1iV(7zsCoZ)@7%WsS#(R!#Mr3l22EVH3&%73`OCbQ?ybYAeH=0
zg{S5~WYHX1liDB(1@&V+8MB#9*zM!&?IU!0l2xXK;TuQ7U4pA=29ow~5zdXb)L`(r
zT5kuhSGhu8c|7(GF7-+Pqtd;ylJ9Z&aV7S4uA<`X2t*wX^=e3HtC#?`J)<cHFKWf4
zgexiRohmVBMC@fM94Jl5Fxbg0U5#3`Iz)vAUj_BjXz5ptA<B&jWErp6BdwX#kn_bN
z*&jg&*C<a!B5=k@bDOgC%|XcF@|u5xmF@+uhK&jUw=uRaC~ssUuTZ?wji8%dihLSF
zg@HBD_`uism~d@cwFkhR`7-6H{dB&Z4vFZ2zyZ>z;q6%rP3jWv_}p)azs(iYep}&U
zq}~65B8qm{Ox2g{Y?p+yI$0YI+j6=x^Q{3k>Kfm3feHqW;ck~;B*|zKB@tO|iLXB-
zbejPfMwmZ~p<>A~M2Juwd7v9ZBq`MS)SBp$Hzq=D?bSVXuhl*rX06^*%q}AsjtKF`
z9go2%ycV6m5>e?Qq?NoI6QY&8TQ-$B>V?>+p337Gwilf-*<Ei>B>sUgBdTFi0Jcr+
zSJ!bx8Sdv4{WME_Y}@X7t1B6VTf({IvXYn@mU=Ah8Cw_>8P-3dgbzvtr#ugiu~{3-
zzhv+9*TfK)w=`SgB(xV0P<A`1LoX4TL+#yBKQZ*oBOk#vy-FA$vIGUWAEnm6sUen<
zSc<ijQ#1Y7-eX5oVZU-G+eu0G`JynpqvWtgeVk$IuJh(u*5ez&HE(oS$b{6)DXDZG
zSY`UuSWsOFKyw&69D9-2J0=fll(Kk6dmdye4+?7f`~r+I6KEa!D^P%kc911r-!VHN
z?8`jENJIm)%BGtFahU8QU5_-(gzj9D;&;qVY@s`JXE;PYBs-<-kS&-GCErdmO7rBE
zQrmV4EJ2BKFL8wRhv#ZoA`l6mNLd;naM@CuJ6QwT;#Z+V1R@A4WqeEoFoZw-2c)k~
zxiMfb?roo8YW@^jNFRfom+v<WpB+pnawwr91uwa9TMZtTX6I{d-O3>06ow_smia+f
zzcL5x1EDIO5zD8s9G}rvr<AfkBD3l5CGJ{V>V1r;AJ%-y_AJB?O`J%y!AIo#bM#M(
z3^_(j`xg1!Ao)1z?4k+VZgr`sT<#0c9*AGN{`aA@+zl|4b{eaE-O*jvR^b8Zr|p^o
zqHekoJP$1nnO^Xk+j#<iP`l=7j*Ras#ug^DX#TzH1LcHcktBS)9BuD-k=LdzEo@9P
z@4FH!%z5|3qoe24V2nGq1sfvJjeSWwDh7q3M9&(CwLa67sw@!?XK!{!T)`g%iq}v@
zV7Hy&D5I!nG1L9irph<J9_`?;WFbeCJ(7(qA-i;aA`lZXJZ$E}<vS<6EKjN<MsHf9
zi$#36qmsqD(}jUhu@F}*u;eql%ndTQ5TkMoYZ)C?$^vKs<2cT;_5ZrSGUInqRn=ZD
zM1RAnL<Cu=AE2N{BTjr#Wapy_A(5_(kT|eaL9bcbgUdy+fR|okF#V@Q*In~{8tWcs
zO#yTDPGXlF>SjL^Pv}p@{l(Ou<y2HqHFLbBK5tS-#%6~PGNUKXYC)Ss3EJJ*39ghT
z^tL8LX2dVJi}4N8uD_ZL%lT%3G0PIuFafPm7bPQ4zGvbbyb9^uTFAhm30U0%{<s_I
z@Ppi24r_+*X@z8{z+(3RG>t?rsTEY2dA>{$w5xy!0S0?}c&*AJx;*PzTy#*CgCf>{
ziXAucJao^rxx;dZ{ZA({V*UdrF6f2LGF{&zthU>f^aCiv4)$6{_^K9CI_6|UA#0T2
zBK{2DL=BmR0legLsN&AWBDMgI7IscyM-(>K6ta%ou`#s{UnPm9v+{YlP&>GE--fpn
z`koS3WtS!qd}az*gya)0i9d2QfSGN1)C*3p)UWsusI~DCc^7sOz_`^cO*NY5pvS)P
znjV@;S38dJ0nyJ!-YZQlz0e3SH$j?O90ge}zC(jglU8406Wz#=is9uG{EWo%YRAdL
z=xevp;ArX~#y)EK1luW48+IGQ1`W%HWy$_yGL|Jg{u<00AajC@80;922j`3YePu`9
za+MbLxYJJ#@i{Hr(%_IIQ_?dB0B<&5e?2;{HHw1S$U=x30vn|}?t?kJK!)Jt(Veah
z)XIIFut9f%SuQWgT^8cvbPh%z!`>1iM5fgML}Pw3%3t9QU_b=7>eg-{eDgN_IQ}?*
z+jqH=yX|lDKgvnK052`hp$QF<ezO2s$`w7NAl`&-lhov$>KexSY6d~qliQ4Ixj>M-
zVI2*{U$i;sMI`e8iEQPYN$Qn$U38fif7UywMU6gm1^ZMrIA7gjeCD!@c+v^e0+-XB
zJZ4QpZdFl(GfnGsz5yZw_|F8TM6iO=L!lW&ECZ^UA%=jH?P&#uVM_5)@kog;BP<nP
zfruMOFR#->OuFSZOW$OMVXhIxBk)TVlZw6dptN|9b0x`MEvObu6v-~4rc4zJ-9*0?
zfy?R>s>u9atrmByBRnz5oMpY5@zt`=z0DW{Py!J>t$>f(=)*GCwx{$v;-J696lz&c
z6cd{cq<}G3|FS~zLSFk3F2OAvkLa6OHTG1h+eKX-Ks8<-$Z-WSp+sr6MNTq)%Ht5N
z%U5I0i*Scd6Rd5sT@QrR@wy!s=%LC91odPm<4J~pg=SR0!TVOkoD7Gr(E38)DA_DT
zE#QG(B*=ZhG)!nuKu5y46`-K$fh8MndRA`nBW#=s;|o(A=uQT|e}GJNBH|1Wp?>PF
z>WE*4p|66lbF~G>%o%NA{=4qN4vO(BrOitWJUy<93~Oj(e)8Njd2AH%2pf*`lt2j>
zA@~xU(jk&*sbna?j3)MG(1D@YoW`kBF5vjvLI1?jc?oJ~xuYD~sW?n>#K0BU&w?1(
z2BfJHg;ms$!1nokL0qYxXMe2LxJNc}c|cpgc0xRo6QS4DeBR3}-GM>hwx@2Vg*>p*
zD0``%#FKJ735*I4ni>Iq-L_<C@e^MAGVPUiSVYU18A|{*3JKSp`*2}(%Zxa27h3q=
zrAJSa*GxU*4+{qrajqP>K9lwYN_TQJidKS!OV|V<O6-BD8EJtSB0~vJz&S=lV$sGv
zPWS~b-$VkR<)St@spR?NQXwW@x3e54ctnvYkH`)Mhtc+csWMMESX(;8U*~ii5;R)M
zsMXU4Tu2qiaxfHTJHe!P1&6yJiT+_h;LT`6qz)?7A|474VD2n$E<_RG3j96i3uv8p
zW)@oRV4~GnT_|5I_;@D^_vag8s?cnSRjQqMMs^&qwFB$k>eP|kKl8}E00VV*B`byT
z;Nt>0PS|Gp=8ZQQ>B$7#p;N`EG(22dA-mO>EROBKro*ACgpuy}aR8xxiAfV<alQRI
zFfuAH_pSLzO14$XazdtjEv49WlI?|okRLeo45j5}Y<OIp-ZsBX)S6vDHFqdMy_{vR
zmGUz|dEn`JjHJ5XlsyoLj<kDDo<I|Hu`SV)u-o><Vwm0T(T~gf?1lpEHltu_|Bu%8
z<$@MkQ1Mo`wAJ6pKbeY_@6d0<fD=S;^gUo>-^g^r`k;y{oj*yO0bb7sopU8-rWM1Q
zOkT;z3O+{LpZhb3n7<F2$jY-p)t(0RT4ZFJX?~|^brsKRLx9$nC_He|BI%ppSq@(4
zGxew}Bns|{@#k1T213`I-cZPOz=5qgJqBFJ4_bskWyjt~0qZ&3<29O$O`*da4?(q@
zTJ_TDhPjyAwJwfD$QiLku^S{&K4k&ZQo~9_fZo_M#!Yq2<iaSg-YiXRA{ufK{<zZd
zN+DP39z(9Ikyd|agnaV%m`h#muwV{~|I4>oFM;7u2|Seaj8Ry(TPlkW4-`!%&mxC4
zT`tn<Ir0)3!8trbAaWpw63&dOCR^(EMa>#^r<Jp7+^_tJ*|FU9;}a(Mx_W*lw}|*|
z%=YULRf{u)GCnoYe&|G5KpZQ^E0o~jb&pQd@SGqUYDDt%XPURsL@opLM(Nx^-X%PK
zg<O$<oggCKI2kXT+WXdCowziapC`f|bw)1dqh0^z^pCwBUm}NS$FaIJV~jFp&G6xq
zEj<KsQ6R70IL_E6clz|P)U#^YL=s$eOAgb8TiIwAIE^-q?9*vHv)v*+Cn)O_eKk&l
zO4G2*tm*hL?`fps?}C}j<z;nv@tM(B#ad@<VJf&oh;t_t#RefM{11Ducc;$W18cSR
z40HUUYaPkkf=Ur3Z3^Uhhqc5jcik+OoxF2%at0mU>SYEwXn7Wbg>xlfj?YHs<KXF~
zY*!4B`;taR$~VTxP0d8XZN;cEYU65i&v-&Tz||L6)=1qy3>jBMP~5kRy_+b>ViP5n
z#Wre+{S(o;NGR-n(>$ZLKvK<c7Bn7vA#O;L)WPD|3|pw?&QPQzbbXKmF*XZE(!}oA
z%<86Ac};uG|B*QT8Zrd`s3mE}Y1+pvdH+M2hWKvhm>2@dVM=vE@8Y)2<riVwP1Nl_
zWViZ}Nb2LxCxgN&q-oS4sBO;FlLA5%!Bo}yg{})VH|@V+&v~~o6fR=GN_*#GCiVK;
z#BdkdGGykvfe)C&Z5k#_`F$A<3oSB_N$uurR~`eBlu{+*1QTWDF~v}Tks|nN9tb6R
z8oH5J#ff%|2)|gc<ZhsI$$6;fBx!P6a!025WcrEV93p>&F89Ps%dY;Cy;Q%eT!8~)
zqqOPW6_(mx%Atj@<(VsS%KKMxXw<i@yvQPW7-(Yr_y=NWhw^DuFME6K30bsl594DU
z3-x;jM{cdT-tUvlo~|7zD)rI=N~cS*?Srp{&PU{fGO5RIbrrs03rCEZwn$Ttvlv@M
z<&InB@z54sX*f%i6@4fQbO`1B-l-V83cN0V%+==61Hav9M6c!-*Izos^qi^d*R0(j
z|79~#3r}05w|}lwVcx^37<Pxf7)tc#RTNTkzEpqrFt2=2pz4`~;CQDBM?%-DS!$U5
zc1T_i#!Lr=^4L+#6$R^h2#9PP<XV6Vw>X_~1)<6!rsQzKOPgr6JLhWvNyq<M<R=?a
z+Nw?j3ocbDG|yo=>~h7J)?j7xWR2^OwzrBPei*$?-p8oUU79NlH`cVx-xOy`ksqf|
z2vLP&^!uw?*bT?A^x%q*(9va&9kEUdh(T-{RYxTSmTuAV9}PNz36LU}^qUd0@O!8C
z_S`ZaxGX2`s<=ca2YXN=$m2(g4S0#+izL$u7JP@|7W}V~;0xoCV*}dVHe8YhQdHLC
z{@H4>3H3!=vU!OTMUKu?ZVOC_$A*&eO^fZuhL*~`dO?OWoQ;eUHtL?O0q&4&(5x;l
zJcn4yY}aW1Ul&EyyZL#p;_Q(?k-xTy_F%3R{Z$F;2ydiubM@`Ku-SenLj*?cZJ<#D
zf<ZL5)H9y!*|HT@93CPUNc@B&b<pzU@TyKzyDBnkLq7E@vTmlIWnpCj!}F*LC?3Z_
z(4bldKZBc+QV3pg?;Sl++5m?%`KV5~){e}AuF8!~a_?hoH2KCC1wOa#Atov;|Hi&n
zJhY{p{)hFj!%K(e=qiAc2}Yhntu@q@Ty^3T`7=_aXtixDM6L&03YI{rSO8u_CbZLd
zh58aHBpbZDA(6lch*@hflAt<9<m1lTL@dBa9wj#bPxr77Ox06PS7F3YZ*S4rzT4Yz
zL5qdBP>mwswd;6VNPt^xN`A_aH5W~OVuUA#25*f^SDiXc3ZQ%HeTj}n&Qr_6?O|pS
zO=Q*u51%w{)&0z|KDIrXjx+<wW1sOz$aeu_RNaQbdxY<w(MsdFF(MTz8ev-PosY-~
zY!pT#vCuxLM{2gj;CGu844tEIv1LVuN26#IUKCv*Eod!)B$=rag~<A0u0^cuTx<gv
z3Ita&1bOr(XsKhMb$IYS)_&<+zO*CWl=$C6s(=00>(9-fibS~?8GDmoxV6Mn(_&*K
zGfUn0mK3IFaMKFXmhi;^DJv=I(|(ACuvE~b5!N6~x{;v2iI`vPn;O7X2{Z-EDu}QV
zX3T&PX$r|WFf6*b9Ssee4+jM<QxSz&0A`u*=>#w>ybJ*m^O_K>8H$EM8V0K_U@m9<
z3U^0R8dl;j$K5PdCdex#L9I#eeqP&Gau#a(Cz)DO6{gLh4@N+|I5z${xc(ZGW#iNW
zgV6q01bX!h=GOE`rpZSnyUn&Uomwy9*A6E$&aX7Ri^K5H!-hBp)-#T@U(D^$R9Xq(
zn6sdG0)L<}@iC<Y=hRM*AQ`Lw!eiaxod_XYG0~+d9-et_$oq;~nUMFb9sg&^%(y=k
zzF}Bso8by|NFO%ssWH#AJVIEg$2!(RxQXbajyuY>)6a5(U1I*lN!p*W)T<#7AOkOa
z0HU$Ewf(I;Wop}&ada7>fI(e0#~0?E;N%!knS%hLrcMu`-WMkG@2SxLiEckajNFS`
z_oR7uWuJWLnXT2>v3Ub2!PE0Z6B<Ro1GM`i;UZ_mw|m8lC0QqixqUM~ob_3m**F6)
z))=zQn0!$*=1i0<*qqKnXtm|tAX(;Kp~}rro(yoA&em`}KB?BlJcVad@<$+75i+G@
z#xzmb9-!&8w7kRF1SV0YJm;l4sg+a=8CJ|JmCppJ6uUPwamsTINtVBc&Qfv+^G2M+
z)^gZtcOJ=^D#$NqT>~>=X(Ch(!u-3MtkT+!(CD9!Kt)Y%Rg!H5H%=G;kdZuNG4igU
zq0l!1Cm?LiMOdAYu*678#FSo8pbWxBsuaI&<Jb-rt`k%j&f!s%LQ9xcOP*{%vKR;b
zF!$J6{~^yn(P1uXzgOC_j<`h<9${;z)GDm!9%pFO&RIFrVT0v3XU0S%Z5WjnvhJ7g
z8zkOV-nJXaKv&;qkJ&G$L#thg>ar^+2h`issjO<Y|FQ{I{a#x5UH2z-%R^W0W$E|S
z4}c;zw}XP+>pu^|g3CDo!IB-<6MRXjbsC}ByvM4o+RtPTOo<eji<bQ^0A#ulgp{=Z
znqSX{KMD(wZ8<WHjoP`)x!XC2fgPt~f(Nq4*HVU3qW91IzQf3KlU9<$G^6qdTJwv%
z`hWoh`DK)CPWj3<65m?wE%CAI7%Ul!%CZr;6|AW?PEnlL!%cIz;lhp!zbe!^Y2DRR
z!b9y^Aa-thGQkWAk-(RJgQq5A*Rs$lDVdpsg&pvzDd_2B!qR6@gHcAWfiR0QVZ-;~
zGDsum+b5lA89;QJww5@zyDOS~KnA&n+yNUI5wW$h^pn%ZXpjE>gI9g!LMSXLHjMqB
z=J7RnT1LdGf|17%4^f0)bVsMVnzou66i&V{X2l0j?-L`M(`ZO)5mI4f+GsGj-}gVk
zA0gcCLf7QuwlFTXWjH@GR+kkTzY{ib?8?9nAkraUiSCm^^+5+8S6;g5(B(+P6Ic;u
zUuu4(Xa8r@&5$qRKNgnt=lIn));Rrd3Y9n*!x>n>Id=coGu}4TZ}&A8l<-pKJOGSb
zvKXJ%HU2&~C1Gds$c2JeIdR_9wuOoBi(`lFTRDOC14e?;kNo4&5yr+0SIDz$3;BkM
ze?_?OfmmraboZgH2#f6=QH{Qwf)`R<f(R_phb&nyC!rT9si4kKY!gr*>sL`<R+P+h
z5|qqH!#Tk%V5+XuASsaSmf{Iuk6m{ZF#yf5S!xk8k2+v#wA54K@l&5a=#(=fa-6Hi
zH7WKPFO`Mvco@4dmvUw5rSxG#@40iJD*hXk88<gQuSOVN3SVHQuErbpsGYOmRu_*e
zj9rp|Dlee-tij{QOhJwR<-r@7+Q7M8qd3zt1AQg3f~Qb|+Cd57oUkU;B;wy4$JcI;
z>u0)3{Wx^+nO>LG>DFgxr(>8%(ILTW+gsSf`@|&Mk&sbt=#&7+T|}d-c23ZV($A8(
z<wk8C^3xOBN}Yd5;&yUQ9s9a`>2Jw{=hfEdSfCm{+Y^>QA-~a^8Hu5N;r8|4=DCCS
z#@Z|ZvhR{YL6RD>Z!fWXBQbP!7Z8698;o*EPnnFzxVn$S*wV-Jz?8Cu=D|snI5Yh<
z#`$ST?oo#Bc=eouQFk;p_nQQrP5RGvN2wiMWlBpb#z{Zs%xx%ic3OP(q`{`U&N&Vq
z0L>F69ux+r0D3$?fF5TlZJl<jI$hsDgpUF#r%>Z>*7mxJ*p##}U9RJ$l@zj9H%$rN
z-%MoCY91p~N1R(DYo~la*XF^2=;FD#puMLV!Nt4YD-{nhF}7v=zJe-Kqc++z9Rj$|
znTEMZz3DQ_r*GCmw}#VYE@{uEBv3w}gsI20P-7!-$-RD9wXjV$VnMyBf+M*y`;^HE
z{2#_6FEOycjjJ3EFGWIUvCIpFP!IyIV4Fi<$Skxfe=p$>7<bEt<-%(XRo_Er&yIy#
zoQH^oVI(j%i)?AUDzR8hFTZO3Nsh{R?P6EKLG39-82Hd)d2d~Mnx;2K>EMq7Nu?NT
zxeP&7ST881NP!J-@gRv%zyes8a}`Z$x``W_+MBBOS&FUZxe$?xQ~mY|XC#(T$ZMH1
z6lQ)&cr%fR6ZE`+(Lvj5D6w9iax?=iK==&PDvgMN@4=MK=|pUf^8>n1?ox2>AHzq`
zCw;=em%V5}3<K0W0ZhuBBJeDTVu1J_C2A?e5kDXNjE-F=^=~f3)qQPcTU|QHJCZ{>
z<$ndx3NQ6!#%x(J|40Dez<pWBM|55kfj`FsI!G>X2Fy=T8Gz$b&}gZi$be#J#Y%kK
zHWf+u9lM@o5sBePO{BREk{6;g-0hga<<D$NN&Hz?3WrkDHq;=6Wdez%G<r;`mXi39
zM`#Fo-A3p^p)p6s?CvMrQ4fgZ8~70lp#)21OLZ=iB}#m<;?SOgB{yQqGgrCj$wFc?
z5QAdI%xq+J+X2%9RU|_T4n6m2(&XRCa01!pKp&2WSg&!!F$tR{Euf}5Lz><h02Y=2
zreS<VMS7;D^D<%;Nm|}#+SDZ5YP=GIJs`nSC~H_#kf#I!k(vy}it~(w*}nvg9@riF
ziqniuD~H4d6fh9iONjx1ehSAT3W$y2lb;BDb|j8lgW`l|5*7gW!{9MY_`n1*`xf&A
z#9RQR)@C~-S^Fadf^idYwCl@Y{GO=2ip~9bCmNRN8uomiVul%h0U~Y55vV~6VfQR?
z4ydxE<5ZS(W<~vn6{|Pd2YF=F0)Ko@f{v^)@<U-mT;PJ<7G!#eH`?stE65wga=?oN
zk0ySUsg;?!Nfb-J=cjG-fwvq3=a^Et-eGFn@0Dr<Kz1{zqa|gaiclL#bC~k<2ks&#
z<!Y=3Cc<GEB_aw3=-Wzx8Q}$@2Ug?wu(#+O0)Pj~VoevNWX6~|am|oI2N5Z4JJE{3
zFwl=!7AQ~9sH^0{GTKcQIMZ--Ax_{4VNSs?dzY<8mNhC(^CY!_k7ac7jaZfSq*I9t
z;H9z8tyNq2-S8#70Qtmc(k-mk?<bRylld{9pDmIMlFg1_+eAq$Ml4hh0U`6YCeJp-
zSZL#=LNX@aiA^dpIBbRI%O7UIO93EQ)()4kz@y+mjn$NYzf{x_#p*ofz~(GyR{yP$
zFM#Do05ohK0_{;uXQ}gPNzq-I+A<(R&LZCi50}=ni$1($WXMkFd}Sh--%L$kd<X&+
z&^O?^lZ4ew>uZl7&s{v_w2R<Jc>RkE(8mSR9u*6Sc{%euk$4f4G&i=Q8j#pQZKhyJ
zp&L(XF)bn&o(h~TsYg#88;6{SPy!lKsU`_YCuVdJaFD)CzBrmwM}9HkGna=XyC9Mo
z=Yc@`fxMYvOg_Uy0JXF!>|x{G<>(xedM~<pYjBEa<<5y$UV(DRNM?mh_g7z#o@_#-
zx=qRWbPd#1{Is#qjlhsMaiXZCrNUi19s<O|;Fv&I_N9k|5UFg4LNn1<)=p%7to)p1
zV6oqT_3$1e8ATofFB^9m69@7(j?OrSbs(bBFUO9EvKoV5jS(-JKD~{_?c_e8)}(!3
zJ{L0O54LCo+;ePCz0Qn`VdAZ`!4pCv7cl(**7BSdiNQmByJzR?OTf!Cn_5q&dei*|
zT`8Rpbp3-bpf2eomvba9rzjQ+$$~5`kh8&I{t@*VB)qm02@Q{pI4MX(3!AptQk$&{
zW<ncMWCWxPGSnu<WI%|~B5y8JB<r%YnWrv-(o5GJgNvEm@*3v5#Lg8U;7TA35+MUb
zqR>Gn`wg7~Is>A3i^m^r8mdYmeH=vxd%&w=srG1mYH_th%_2dZssR9XJSM1}3Zcuq
zHKr~hyJ25g23&6Vffb*E<Xf)K$eL0ho5YmOG|%$s%o_#I+Q=?{VyX+67{4Pd7+&D*
z;^DsVu6VyCV?btXxYs?#3IR=$Nt*R$Fi;>Z{Z5{S3z%VtV5mp=@qmEl^ExCUZm!%_
ztx3~1t9GmUlRzM5bORz338Nl|evmJSg7k3$xdc5EE)|#}J%wH5y){0tW*jZc0<8l<
zb3p9I%QAhLn5z$TD+HK!3waX~W`cyK68)obG>j2Scnhr(pq<%{0PRf1L`$Uw#S@R<
zSN0XR57f$71P>Gg2YeWWZp=AJ5?p}|E@C1q5F$M!Q6q^A&Euav7gykMCJyf-o6~OO
z6sg1pZA_}KQY1~wf#IP*uEp9aEL%voN{ep=Y}~PsGWW?+1{?bmv=P&g6Ao{Hbt)K#
zX$TCu-|u_Dv}XcVPPxENgMm-T)fo;tsUnb|IE_Y119Dwt0KjP&=iH}Q$y#S@KQ8N!
zU<HW`EMoCDNTwtt`j$7%(IcM@LlWY7)}b(*e0ng43^4i5uf^N>>RI44{HaJ@oJf&p
zV3f##QK@d&k`QAI)5!rNL<$BT98%d}L6)7iDC2uNKEONBuda4D=#RNq-VlI>q-ZLM
z824IQ1qr0d)LKQnJ&yT|;L;_Osyo0t%KQ;Hm*>$ln0<B_jL#6$FaRJJi`?uklV9Y(
zdW=Ycv3<FMIj#fhP$G&UyNIPYrjl^>BYtgRppi{skcm{=-|V6N;6=7>C@u$WEyREt
zB(L2fj_g|Dlc(E!hHp7=4K8v^h8gb39Ma5<28hBpP&Z0LAEDO^q7OzOfp>6lTN>aS
zG)hDkIe|}j_3Ain!3TMQxV^yT5Jke!QYVVEK*$a8b36<AYZrhAs0j3=OE)C^04_c}
zM1n#h8&SZdDFBGa7HnbubnS%$P>A)6J8B<?YjOgW3n<C}&zgvN;6!nnO%rsCq3P_E
zfa@j5npvO`;Z-G~N;)Rdb=D27TyvkLqC_xEqbt1w%Z0)+Fv<4XZb2D3B(Oc)dvwO_
zqBPIoS1Da`f{`F^*hI+&Anp@IfsCjSfkteAy9?ExWC(3kDbx@s(#v7`<OBd{003%%
zg9oJ8q}P5!wXoB~vdH!+O7s~NLe^d!p8;NU$;6x_Ro#s$&}~4>R${quwow&Y9)wii
znqZVjS}52u<K3KAG!al!dleQ`mEsox+m5ikCmK->GCCzU7)PK4or-yqp%arHVUh))
zA)VZ?Vjm<<kocwIA*xW5EgbXg3C9O>5B8FAmKEU5VRWQ9vLweLVa2vf=~)5~7Gg|t
zXyh*H!Ojw3z(?#9v#>Vo-1BZ_Tx%EJA>*gEoG^|7IDbMl0j*hx^|BjtaIk<`3}wJ0
zy4I9Dxl;Hd9IR$4V=61f?}ti5$G~U9Xeu)96y_Akn;a$9;PLr#Msa53Cf&vgZBOV3
zP?pv<I%fH%jtSUm++5OGXE>_eV0^<$=B&~{!bgJlB9}7;;lqy*h~4p%dR%KE5Q3i2
zs{trgV@4@s0Y4MIyyl-8bJIf>5E?0htbB<BX@V3sb!iw(08L4b2VNott!T?%2!d<f
zVQ_`4B11Q;(ykl{i0aGOL_bF8$`fSm-Z+TB3uhp*Pl}FvA7E%UyWiB0u+xSD#GcK|
z=CcZ4W}6qm0AzTD90eB{5U~XpZU^37E7vk07DL*})vtIgM8ioESyzvpprf7!-}_x_
zc(+5C%>=mGCZ*&h4?FF$Aq37b0*?KaOBJQ*Fg{-N146!~hyV-kJdEVMMH$Nk*TpVC
z3n;{u1hx~9JO`SQ)qHX|K@w^v5-%bmg*T>jK{XOOEL$mFHzMyQ1JCT+?P?x6oWRpy
zly)Ij7JT_iqG^7-mreVw-LiDM?6`6^>?k*fk-azvSohqe%6(S&+3|6lmp%Z>AA@4T
zIs4GTdL<26gV@&;f<N%3$#Jo<aj{WxvLfn*h20}|CIJm7FZ+4|eE@E_ni+Zm;7u1f
zO&2?bOM}v91ayl>SI9qNz&t{Q$XH6O3r!|~$$hHJ2_Z*14qRp&y6h2k#+L3)Ea>vr
W>nb!7Li}W#2M}JSWwdiv7=B<mstI5K

diff --git a/static/fonts/roboto-v18-latin-300italic.svg b/static/fonts/roboto-v18-latin-300italic.svg
deleted file mode 100644
index 758402b65f..0000000000
--- a/static/fonts/roboto-v18-latin-300italic.svg
+++ /dev/null
@@ -1,329 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1113" ><font-face
-    font-family="Roboto Light"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="493" />
-<glyph unicode="!" horiz-adv-x="458" d="M243 405H133L309 1456H433L243 405ZM56 70Q58 104 84 128T141 152Q176 153 198 129T218 70Q216 37 191 15T132 -9T76 12T56 70Z" />
-<glyph unicode="&quot;" horiz-adv-x="580" d="M361 1390L293 1083H212L287 1536H384L361 1390ZM590 1392L522 1083H440L516 1536H613L590 1392Z" />
-<glyph unicode="#" horiz-adv-x="1165" d="M695 410H396L250 0H148L295 410H48L65 503H327L484 944H214L232 1040H518L667 1456H769L619 1040H919L1069 1456H1171L1022 1040H1243L1226 944H988L831 503H1077L1061 410H798L651 0H549L695 410ZM428 503H728L886
-944H586L428 503Z" />
-<glyph unicode="$" horiz-adv-x="1111" d="M837 366Q848 465 791 538T587 670T371 785T268 916T242 1088Q255 1254 368 1356T658 1476L693 1677H795L760 1474Q914 1451 990 1335T1050 1028H932Q946 1181 882 1274T691 1370Q557 1372 466 1294T360 1090Q343 929
-489 842Q527 819 639 773T811 683Q973 565 957 369Q944 203 828 100T529 -18L496 -208H395L428 -18Q312 -7 231 50T113 203T87 418H206Q193 264 268 175T485 84Q625 82 724 161T837 366Z" />
-<glyph unicode="%" horiz-adv-x="1478" d="M206 1175Q221 1307 309 1394T521 1478Q636 1474 703 1389T762 1176L755 1109Q740 968 652 882T442 799Q329 801 260 886T199 1099L206 1175ZM296 1097Q289 1002 330 945T447 885Q529 883 586 942T657 1099L665 1177Q673
-1272 632 1330T516 1391Q435 1393 376 1332T304 1168L296 1097ZM775 356Q790 486 877 573T1089 658Q1206 654 1273 570T1331 357L1324 279Q1309 147 1220 61T1010 -22Q895 -20 827 66T768 279L775 356ZM864 277Q857 183 897 125T1015 64Q1095 62 1153 120T1226
-279L1234 358Q1241 455 1202 512T1084 571Q1000 573 942 512T872 349L864 277ZM350 122L277 175L1162 1306L1231 1258L350 122Z" />
-<glyph unicode="&amp;" horiz-adv-x="1232" d="M428 796L391 861Q308 1014 319 1137Q331 1289 432 1384T684 1477Q811 1473 887 1395T955 1199Q942 1033 726 883L576 779L887 318Q999 466 1029 651H1137Q1104 401 951 229L1103 0H971L874 144Q680 -24 462 -20Q282
--18 172 87T74 363Q83 472 162 575T428 796ZM467 82Q639 79 812 232L494 701L483 716L434 681L382 640Q211 500 195 363Q178 242 255 163T467 82ZM438 1142Q425 1023 524 862L704 992Q828 1089 839 1200Q847 1275 800 1325T676 1375Q580 1377 515 1310T438 1142Z"
-/>
-<glyph unicode="&apos;" horiz-adv-x="348" d="M344 1389L281 1090H190L266 1536H367L344 1389Z" />
-<glyph unicode="(" horiz-adv-x="643" d="M736 1633L757 1551Q597 1442 479 1245T295 773T233 240L235 174Q257 -226 454 -392L419 -469Q219 -320 151 -3Q110 190 120 392Q131 653 216 915T434 1360T736 1633Z" />
-<glyph unicode=")" horiz-adv-x="657" d="M495 577Q436 201 280 -74T-103 -471L-124 -393Q65 -264 192 -18T375 572L379 592Q403 761 401 921Q396 1152 339 1311T180 1555L215 1631Q371 1517 448 1287T514 769Q510 675 498 593L495 577Z" />
-<glyph unicode="*" horiz-adv-x="853" d="M417 1003L114 1111L161 1208L464 1084L525 1456H629L556 1087L890 1212L905 1106L561 991L727 695L638 635L484 940L234 639L156 705L417 1003Z" />
-<glyph unicode="+" horiz-adv-x="1131" d="M637 740H1067L1047 628H618L534 146H414L498 628H76L96 740H517L598 1206H718L637 740Z" />
-<glyph unicode="," horiz-adv-x="390" d="M-17 -273L-84 -218Q31 -86 53 46L77 188H193L171 44Q138 -144 -17 -273Z" />
-<glyph unicode="-" horiz-adv-x="578" d="M512 592H45L63 693H530L512 592Z" />
-<glyph unicode="." horiz-adv-x="484" d="M48 72Q51 107 76 131T137 157Q173 158 196 133T216 72Q214 37 189 15T128 -9T70 13T48 72Z" />
-<glyph unicode="/" horiz-adv-x="799" d="M13 -125H-101L764 1456H877L13 -125Z" />
-<glyph unicode="0" horiz-adv-x="1111" d="M459 -20Q342 -17 261 42T143 214T110 468L117 576L160 860Q207 1164 341 1322T692 1476Q869 1472 957 1346T1040 992Q1038 920 1029 853L989 595Q936 278 801 126T459 -20ZM924 1084Q903 1368 686 1375Q524 1380 421
-1251T281 875L237 593Q222 472 228 378Q236 235 297 159T466 80Q616 73 718 193T863 550L911 857Q930 979 924 1084Z" />
-<glyph unicode="1" horiz-adv-x="1111" d="M571 0H451L679 1308L268 1162L289 1280L797 1461H820L571 0Z" />
-<glyph unicode="2" horiz-adv-x="1111" d="M925 0H38L53 97L683 720Q882 921 901 1082Q917 1207 851 1289T656 1375Q516 1379 415 1287T287 1037L172 1036Q196 1231 331 1355T660 1477Q841 1473 940 1366T1023 1092Q1003 895 775 665L203 101H942L925 0Z" />
-<glyph unicode="3" horiz-adv-x="1111" d="M427 793L542 791Q693 791 798 870T919 1083Q933 1215 866 1293T669 1375Q531 1377 436 1295T315 1075L199 1074Q221 1253 354 1366T675 1477Q854 1473 954 1363T1038 1079Q1029 971 954 883T745 742Q855 703 910 613T956
-403Q940 212 803 94T468 -20Q282 -16 170 99T71 395H189Q177 261 255 173T474 81Q624 77 724 164T838 399Q850 527 778 603T558 689L537 690L411 691L427 793Z" />
-<glyph unicode="4" horiz-adv-x="1111" d="M825 469H1045L1027 368H808L743 0H624L688 368H27L35 435L862 1456H996L825 469ZM190 469H705L849 1289L787 1206L190 469Z" />
-<glyph unicode="5" horiz-adv-x="1111" d="M233 748L411 1456H1122L1104 1345H499L367 853Q486 934 639 932Q818 930 915 800T994 471Q974 248 843 112T508 -21Q331 -17 231 94T130 384H243Q245 243 315 164T514 80Q666 76 762 184T874 470Q888 624 818 721T613
-823Q460 827 329 720L233 748Z" />
-<glyph unicode="6" horiz-adv-x="1111" d="M955 1468L943 1363H911Q673 1358 510 1210T270 783Q422 960 643 956Q758 954 840 893T960 722T985 484Q976 382 936 287T830 121Q694 -25 501 -21Q335 -16 233 95T115 385Q106 477 139 674Q201 1047 408 1257T939 1468H955ZM618
-853Q500 855 390 786T249 615L236 511Q223 396 250 299T342 142T506 81Q601 79 678 130T805 274T868 480Q885 641 818 745T618 853Z" />
-<glyph unicode="7" horiz-adv-x="1111" d="M1127 1387L310 0H180L992 1354H191L207 1456H1135L1127 1387Z" />
-<glyph unicode="8" horiz-adv-x="1111" d="M1057 1090Q1046 972 971 884T766 743Q872 694 926 602T972 395Q957 208 815 92T465 -20Q277 -16 167 92T72 378Q83 505 168 601T400 751Q310 799 266 884T230 1072Q243 1252 374 1366T697 1476Q869 1472 970 1366T1057
-1090ZM853 394Q867 523 788 608T575 697Q421 699 314 607T191 376Q176 245 254 164T470 80Q622 76 730 163T853 394ZM937 1091Q949 1208 880 1289T690 1375Q552 1377 457 1291T348 1073Q336 955 405 877T595 797Q728 793 826 877T937 1091Z" />
-<glyph unicode="9" horiz-adv-x="1111" d="M879 673Q803 578 704 526T500 477Q386 479 304 544T185 718T159 958Q174 1103 242 1224T418 1412T654 1477Q826 1473 924 1357T1029 1032Q1032 920 1001 735Q940 375 746 184T251 -12H202L214 92H254Q500 96 654 239T879
-673ZM520 580Q634 576 736 645T898 837Q912 959 912 1008Q912 1179 845 1274T650 1374Q553 1376 474 1323T342 1172T277 963Q266 862 291 774T375 634T520 580Z" />
-<glyph unicode=":" horiz-adv-x="427" d="M287 72Q290 107 315 131T376 157Q412 158 435 133T455 72Q453 37 428 15T367 -9T309 13T287 72ZM191 995Q194 1030 219 1054T280 1080Q316 1081 339 1056T359 995Q357 960 332 938T271 914T213 936T191 995Z" />
-<glyph unicode=";" horiz-adv-x="397" d="M180 995Q183 1030 208 1054T269 1080Q305 1081 328 1056T348 995Q346 960 321 938T260 914T202 936T180 995ZM-17 -273L-84 -218Q31 -86 53 46L77 188H193L171 44Q138 -144 -17 -273Z" />
-<glyph unicode="&lt;" horiz-adv-x="1026" d="M212 652L836 352L814 231L75 612L92 708L964 1087L940 954L212 652Z" />
-<glyph unicode="=" horiz-adv-x="1109" d="M995 829H183L202 935H1014L995 829ZM923 418H112L131 524H942L923 418Z" />
-<glyph unicode="&gt;" horiz-adv-x="1039" d="M820 662L182 965L203 1083L960 704L943 607L54 227L77 358L820 662Z" />
-<glyph unicode="?" horiz-adv-x="912" d="M339 402Q352 512 400 597T547 766T686 897T752 996T784 1110Q797 1223 746 1295T587 1371Q472 1373 393 1306T287 1116L172 1115Q196 1281 313 1381T596 1477Q749 1473 834 1373T905 1111Q887 924 699 755L586 660Q480
-565 449 404L339 402ZM256 70Q259 104 283 127T342 152T399 129T419 70Q416 37 391 15T333 -9Q298 -10 276 12T256 70Z" />
-<glyph unicode="@" horiz-adv-x="1824" d="M1229 -20Q1143 -18 1087 32T1024 173Q943 64 867 20T708 -21Q616 -18 563 46T504 235Q493 408 569 599T763 890T1023 989Q1100 987 1158 959T1274 882L1139 308L1131 231Q1126 158 1156 113T1247 65Q1353 61 1433 143T1561
-380T1617 722Q1623 908 1564 1045T1383 1253T1082 1327Q842 1331 639 1193T309 802T175 274Q169 88 231 -60T414 -284T703 -362Q870 -366 1040 -284L1063 -366Q912 -455 698 -453Q507 -452 366 -369T150 -124T74 246Q74 469 153 689T375 1079T701 1336T1088 1420Q1284
-1417 1423 1337T1636 1102T1709 745Q1709 531 1646 350T1474 73T1229 -20ZM609 285Q604 189 637 134T737 75Q830 70 915 144T1040 330L1170 850Q1110 895 1028 899Q870 904 760 750T615 357L609 285Z" />
-<glyph unicode="A" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513Z" />
-<glyph unicode="B" horiz-adv-x="1227" d="M73 0L326 1456L736 1455Q945 1450 1051 1352T1141 1082Q1130 968 1058 884T863 755Q967 723 1025 631T1074 418Q1059 228 921 114T559 0H73ZM317 700L213 104L563 103Q721 103 828 186T953 416Q966 543 896 619T690
-699L317 700ZM334 803L653 802Q809 804 906 881T1018 1087Q1043 1340 733 1350L430 1351L334 803Z" />
-<glyph unicode="C" horiz-adv-x="1300" d="M1150 454Q1099 229 943 102T562 -20Q367 -16 252 118T127 481Q124 559 134 636L161 812Q192 1013 285 1168T513 1401T808 1476Q1016 1472 1133 1344T1248 999L1127 1000Q1127 1175 1043 1271T802 1372Q604 1377 465
-1225T283 803L253 603L249 513Q247 395 283 294T393 140T568 84Q742 78 859 171T1031 453L1150 454Z" />
-<glyph unicode="D" horiz-adv-x="1311" d="M73 0L326 1456L705 1455Q874 1455 998 1369T1177 1130T1210 794L1192 673Q1146 370 950 185T469 0H73ZM430 1351L213 104L473 103Q626 103 752 173T960 370T1068 658T1095 880T1089 998Q1066 1158 967 1252T711 1350L430 1351Z" />
-<glyph unicode="E" horiz-adv-x="1140" d="M977 698H317L213 104H973L955 0H73L326 1456H1203L1184 1351H430L334 802H995L977 698Z" />
-<glyph unicode="F" horiz-adv-x="1127" d="M972 680H314L195 0H73L326 1456H1204L1185 1351H430L331 785H991L972 680Z" />
-<glyph unicode="G" horiz-adv-x="1368" d="M1131 173Q1057 78 919 28T610 -20Q407 -18 281 119T143 484Q138 566 149 644L174 810Q221 1116 395 1298T829 1476Q1029 1472 1149 1357T1275 1045H1155Q1148 1197 1063 1282T824 1371Q620 1376 479 1224T296 806L272
-650Q262 585 264 516Q267 318 360 203T614 85Q871 80 1009 211L1075 587H696L714 691H1215L1131 173Z" />
-<glyph unicode="H" horiz-adv-x="1416" d="M1122 0H999L1121 698H317L195 0H73L326 1456H448L334 802H1138L1252 1456H1376L1122 0Z" />
-<glyph unicode="I" horiz-adv-x="539" d="M221 0H99L352 1456H474L221 0Z" />
-<glyph unicode="J" horiz-adv-x="1103" d="M959 1456H1082L907 433Q878 230 744 103T410 -21Q222 -17 124 95T44 401H166Q151 255 217 171T418 83Q557 79 657 174T784 431L959 1456Z" />
-<glyph unicode="K" horiz-adv-x="1263" d="M523 721L285 516L195 0H73L326 1456H448L313 680L546 890L1164 1456H1327L616 802L1110 0H972L523 721Z" />
-<glyph unicode="L" horiz-adv-x="1057" d="M214 104H912L894 0H73L326 1456H449L214 104Z" />
-<glyph unicode="M" horiz-adv-x="1729" d="M484 1456L781 174L1525 1456H1690L1437 0H1315L1426 639L1545 1269L804 0H710L408 1279L305 633L195 0H73L326 1456H484Z" />
-<glyph unicode="N" horiz-adv-x="1420" d="M1128 0H1010L413 1248L196 0H73L326 1456H444L1042 207L1259 1456H1380L1128 0Z" />
-<glyph unicode="O" horiz-adv-x="1354" d="M577 -20Q373 -16 254 121T124 489Q120 569 131 648L151 786Q196 1091 371 1284Q550 1481 813 1476Q947 1473 1047 1411T1204 1229T1265 966Q1268 880 1256 798L1233 644Q1198 438 1104 284T874 54T577 -20ZM1136 809Q1144
-872 1145 937Q1145 1059 1107 1159T993 1312T807 1369Q607 1374 466 1226T280 824Q244 619 245 521Q245 319 333 205T583 87Q796 82 935 241T1114 661L1136 809Z" />
-<glyph unicode="P" horiz-adv-x="1233" d="M298 593L195 0H73L326 1456L800 1455Q1004 1449 1115 1335T1209 1028Q1189 824 1044 708T666 592L298 593ZM316 697L671 696Q844 696 956 784T1087 1027Q1103 1175 1024 1260T797 1350L430 1351L316 697Z" />
-<glyph unicode="Q" horiz-adv-x="1354" d="M851 50L1067 -183L976 -254L734 2Q648 -19 570 -19Q437 -18 337 45T182 226T120 491Q116 573 127 649L149 798Q179 999 274 1159T506 1399T808 1476Q1012 1472 1132 1335T1261 966Q1264 880 1252 798L1226 626Q1151
-211 851 50ZM1132 808Q1140 871 1141 937Q1141 1060 1102 1161T987 1314T802 1369Q600 1374 460 1224T275 818Q240 613 240 521Q240 324 327 208T578 87Q790 82 930 239T1110 663L1132 808Z" />
-<glyph unicode="R" horiz-adv-x="1271" d="M710 606H299L193 0H70L323 1456L754 1455Q972 1455 1090 1342T1189 1035Q1174 889 1080 783T828 629L1076 14L1075 0H945L710 606ZM317 711L677 710Q831 710 940 800T1067 1036Q1084 1176 1005 1261T772 1350L428 1351L317
-711Z" />
-<glyph unicode="S" horiz-adv-x="1187" d="M936 365Q959 553 735 641L544 710L482 735Q198 856 219 1092Q228 1208 301 1296T493 1431T747 1476Q876 1473 977 1417T1129 1262T1169 1041H1046Q1060 1189 977 1278T741 1371Q583 1373 471 1299T342 1095Q329 992
-402 920T658 793Q890 719 980 616T1059 368Q1048 248 975 160T780 24T518 -20Q379 -19 268 37T101 190T56 416H178Q163 264 259 175T524 83T806 159T936 365Z" />
-<glyph unicode="T" horiz-adv-x="1196" d="M1268 1351H785L550 0H428L663 1351H179L198 1456H1287L1268 1351Z" />
-<glyph unicode="U" horiz-adv-x="1316" d="M1306 1456L1137 471Q1101 241 944 108T562 -21Q421 -18 319 44T170 218T140 469L309 1456H430L262 468Q241 299 324 195T568 84Q736 78 857 177T1011 452L1183 1456H1306Z" />
-<glyph unicode="V" horiz-adv-x="1235" d="M536 180L538 149L552 180L1196 1456H1334L580 0H463L166 1456H289L536 180Z" />
-<glyph unicode="W" horiz-adv-x="1791" d="M408 389L415 174L502 387L974 1456H1084L1220 377L1237 171L1319 397L1739 1456H1867L1277 0H1160L1017 1144L1006 1278L950 1139L444 0H327L193 1456H315L408 389Z" />
-<glyph unicode="X" horiz-adv-x="1225" d="M642 842L1135 1456H1287L703 732L1067 0H929L618 634L106 0H-45L558 744L204 1456H342L642 842Z" />
-<glyph unicode="Y" horiz-adv-x="1199" d="M600 664L1168 1456H1316L643 542L549 0H427L524 555L174 1456H311L600 664Z" />
-<glyph unicode="Z" horiz-adv-x="1198" d="M151 104H1020L1001 0H-18L-1 99L1051 1351H241L260 1456H1223L1207 1362L151 104Z" />
-<glyph unicode="[" horiz-adv-x="486" d="M630 1562H426L150 -210H354L337 -312H14L323 1664H646L630 1562Z" />
-<glyph unicode="\" horiz-adv-x="793" d="M197 1456H307L623 -125H512L197 1456Z" />
-<glyph unicode="]" horiz-adv-x="486" d="M165 1664H489L180 -312H-144L-127 -210H77L354 1562H149L165 1664Z" />
-<glyph unicode="^" horiz-adv-x="836" d="M532 1294L213 729H93L509 1456H599L762 729H653L532 1294Z" />
-<glyph unicode="_" horiz-adv-x="867" d="M736 -101H-122L-104 0H754L736 -101Z" />
-<glyph unicode="`" horiz-adv-x="577" d="M525 1256H425L249 1536H383L525 1256Z" />
-<glyph unicode="a" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603 1103Q770
-1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85Z" />
-<glyph unicode="b" horiz-adv-x="1111" d="M986 536Q951 278 822 126T501 -21Q395 -19 315 26T191 148L157 0H45L312 1536H430L317 925Q456 1108 668 1102Q823 1098 907 987T994 680Q995 616 988 557L986 536ZM869 559L876 654Q879 817 819 906T640 999Q421 1003
-297 777L215 287Q244 190 314 138T486 82Q635 79 735 197T869 559Z" />
-<glyph unicode="c" horiz-adv-x="1033" d="M465 80Q583 76 673 145T794 333H907Q877 172 750 74T459 -21Q328 -18 239 51T111 242T85 517L89 560Q101 665 140 764T246 939T403 1060T610 1102Q776 1098 874 990T966 716L853 717Q855 842 788 919T605 1000Q481 1004
-386 928T243 713T198 418Q201 257 270 171T465 80Z" />
-<glyph unicode="d" horiz-adv-x="1114" d="M94 544Q117 714 187 845T358 1041T586 1102Q682 1100 761 1058T886 929L996 1536H1114L847 0H736L763 144Q622 -26 413 -20Q262 -16 177 97T87 403Q85 465 92 523L94 544ZM214 524Q206 457 208 381Q212 244 271 166T441
-83Q552 80 636 134T778 278L865 788Q836 885 770 940T600 999Q448 1004 347 883T216 545L214 524Z" />
-<glyph unicode="e" horiz-adv-x="1036" d="M475 -20Q345 -18 250 52T111 244T79 507L82 541Q96 691 171 826T361 1033T607 1102Q728 1100 811 1036T933 858T957 606L949 533H200L197 509Q182 400 213 301T314 143T484 82Q580 79 657 119T799 226L869 169Q796 75
-696 27T475 -20ZM601 1000Q471 1005 368 908T213 635L841 634L844 649Q862 791 794 893T601 1000Z" />
-<glyph unicode="f" horiz-adv-x="668" d="M129 0L300 984H126L144 1082H317L338 1229Q363 1388 459 1475T700 1560Q758 1558 831 1540L810 1441Q754 1456 703 1456Q603 1456 538 1391T455 1210L436 1082H687L669 984H420L249 0H129Z" />
-<glyph unicode="g" horiz-adv-x="1112" d="M585 1103Q682 1100 762 1057T888 926L925 1082H1036L854 19Q835 -117 768 -221T597 -380T364 -432Q262 -430 169 -381Q75 -331 18 -242L92 -172Q195 -327 361 -331Q509 -335 608 -242T734 13L760 139Q616 -26 413 -20Q261
--16 177 96T88 403Q82 582 148 757T327 1019T585 1103ZM213 523L207 430Q204 266 264 177T441 83Q541 79 628 130T778 281L863 786Q836 883 770 939T599 999Q446 1004 346 881T213 523Z" />
-<glyph unicode="h" horiz-adv-x="1100" d="M313 899Q469 1106 681 1102Q837 1098 908 993T958 704L840 0H722L840 706Q846 763 842 816Q825 994 648 999Q543 1001 452 937T292 742L164 0H46L313 1536H431L313 899Z" />
-<glyph unicode="i" horiz-adv-x="455" d="M179 0H59L248 1082H367L179 0ZM281 1395Q286 1460 367 1477Q406 1470 422 1453T444 1395Q434 1357 415 1340T358 1314Q277 1326 281 1395Z" />
-<glyph unicode="j" horiz-adv-x="463" d="M362 1082L156 -129Q136 -280 51 -362T-167 -440Q-210 -439 -276 -419L-262 -320Q-207 -335 -174 -335Q1 -339 38 -124L244 1082H362ZM278 1395Q280 1428 303 1452T362 1477T419 1454T439 1395Q436 1361 412 1338T353
-1314Q318 1313 297 1336T278 1395Z" />
-<glyph unicode="k" horiz-adv-x="983" d="M396 543L236 408L165 0H46L313 1536H432L262 562L386 676L857 1082H1016L484 621L857 0H725L396 543Z" />
-<glyph unicode="l" horiz-adv-x="455" d="M179 0H59L326 1536H446L179 0Z" />
-<glyph unicode="m" horiz-adv-x="1771" d="M343 1082L309 906Q455 1106 676 1102Q790 1100 865 1045T959 892Q1033 993 1131 1048T1346 1102Q1500 1099 1574 1001T1636 728L1634 705L1515 0H1396L1514 707Q1520 766 1515 819Q1495 996 1313 999Q1191 1001 1089
-920T960 716L836 0H717L837 716Q866 992 634 999Q519 1001 420 927T287 743L159 0H40L228 1082H343Z" />
-<glyph unicode="n" horiz-adv-x="1101" d="M348 1082L312 897Q384 997 478 1050T681 1102Q837 1098 908 993T958 704L840 0H722L840 706Q846 763 842 816Q825 994 648 999Q543 1001 452 937T292 742L164 0H46L234 1082H348Z" />
-<glyph unicode="o" horiz-adv-x="1123" d="M75 551Q93 708 171 838T365 1037T618 1102Q752 1100 846 1029T984 834T1014 560L1012 541Q982 285 831 130T467 -20Q285 -17 176 114T69 460L72 517L75 551ZM191 517Q178 398 208 298T306 140T473 80Q581 78 670 135T818
-296T893 526L896 559Q914 752 837 874T612 1000Q452 1005 336 877T193 535L191 517Z" />
-<glyph unicode="p" horiz-adv-x="1111" d="M500 -21Q407 -19 325 18T191 136L91 -416H-27L233 1082H343L315 929Q456 1108 668 1102Q820 1098 905 989T993 680Q994 617 987 558L983 530Q958 355 889 228T721 39T500 -21ZM868 558L874 653Q877 813 816 904T635
-999Q530 1001 445 948T300 792L211 271Q243 179 312 131T479 80Q624 75 724 188T860 505L868 558Z" />
-<glyph unicode="q" horiz-adv-x="1118" d="M95 545Q130 803 260 955T587 1102Q682 1100 761 1060T888 935L923 1082H1035L775 -416H656L758 134Q619 -26 415 -20Q263 -16 178 95T88 402Q86 464 93 523L95 545ZM214 524L207 430Q204 266 263 175T442 80Q541 76
-626 125T775 267L866 799Q835 891 769 944T602 1000Q446 1005 345 879T216 545L214 524Z" />
-<glyph unicode="r" horiz-adv-x="678" d="M707 981Q668 989 628 990Q514 990 419 921T292 744L164 0H46L234 1082H351L315 910Q374 1006 457 1056T641 1104Q676 1104 723 1090L707 981Z" />
-<glyph unicode="s" horiz-adv-x="1016" d="M730 282Q746 420 562 482L390 533Q153 613 166 800Q173 935 290 1019T570 1102Q729 1100 828 1013T920 779H802Q808 876 742 937T565 1000Q451 1000 373 947T285 805Q270 676 443 624L568 588L635 565Q861 480 848 288Q840
-158 736 75T466 -19L425 -20Q316 -18 228 22T93 136T52 304L171 303Q171 201 240 142T430 81Q550 81 634 135T730 282Z" />
-<glyph unicode="t" horiz-adv-x="648" d="M465 1359L417 1082H634L617 984H400L280 262L278 200Q278 91 378 88Q409 87 475 95L470 -3Q411 -20 350 -18Q245 -16 197 55T162 263L281 984H87L105 1082H297L346 1359H465Z" />
-<glyph unicode="u" horiz-adv-x="1101" d="M764 136Q635 -26 408 -20Q255 -17 180 90T126 389L242 1082H360L245 386Q239 332 244 279Q251 187 299 137T431 84Q551 79 653 139T785 298L919 1082H1039L851 0H735L764 136Z" />
-<glyph unicode="v" horiz-adv-x="965" d="M408 169L870 1082H996L435 0H338L113 1082H231L408 169Z" />
-<glyph unicode="w" horiz-adv-x="1508" d="M342 249V164L381 257L776 1082H878L985 255L991 153L1032 256L1390 1082H1517L1023 0H921L802 858L801 918L778 857L364 0H262L147 1082L259 1083L342 249Z" />
-<glyph unicode="x" horiz-adv-x="976" d="M484 645L835 1082H983L539 545L822 0H690L464 456L94 0H-52L410 557L139 1082H271L484 645Z" />
-<glyph unicode="y" horiz-adv-x="954" d="M408 176L871 1082H1004L344 -174Q271 -320 190 -381T8 -440Q-30 -438 -88 -424L-76 -326L-16 -333Q152 -340 249 -135L325 16L116 1082H241L408 176Z" />
-<glyph unicode="z" horiz-adv-x="976" d="M147 101H825L807 0H-21L-5 94L781 979H168L186 1082H953L936 987L147 101Z" />
-<glyph unicode="{" horiz-adv-x="666" d="M476 -402Q326 -351 257 -232T206 58L237 285Q243 338 237 384Q217 531 58 542L70 645Q300 654 338 899L372 1146Q426 1495 770 1599L788 1519Q532 1432 489 1125L455 884Q419 673 228 591Q345 527 357 374Q360 329 356
-284L325 57Q317 -5 322 -63Q335 -257 506 -323L476 -402Z" />
-<glyph unicode="|" horiz-adv-x="448" d="M136 -270H35L305 1456H406L136 -270Z" />
-<glyph unicode="}" horiz-adv-x="666" d="M-136 -325Q124 -236 166 71L198 304Q234 519 434 598Q374 626 339 681T297 813Q293 858 298 904L328 1133Q335 1194 332 1253Q327 1349 282 1417T153 1518L185 1595Q331 1543 399 1425T447 1132L417 903Q411 850 417
-805Q437 657 595 649L584 545Q348 535 313 275L282 44Q228 -303 -116 -406L-136 -325Z" />
-<glyph unicode="~" horiz-adv-x="1370" d="M1240 764Q1221 609 1132 514T914 422Q795 425 681 527L591 613Q515 681 439 681Q263 684 222 451L118 449Q137 606 225 698T444 789Q560 786 672 689L767 599Q842 530 920 528Q1003 526 1061 586T1141 763L1240 764Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="493" />
-<glyph unicode="&#xa1;" horiz-adv-x="448" d="M183 690H294L118 -359H-5L183 690ZM370 1022Q368 989 344 966T285 941Q250 940 228 963T208 1022Q211 1056 235 1079T294 1103Q329 1104 351 1081T370 1022Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1092" d="M484 80Q604 76 694 145T817 333H930Q902 189 793 95T524 -18L481 -245H361L405 -14Q308 4 247 57Q130 159 112 344Q94 521 145 694T314 973T591 1099L633 1318H753L710 1097Q851 1072 926 969T996 716L883 717Q887
-841 821 918T639 1000Q470 1005 360 872T227 499L224 419Q224 261 290 173T484 80Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1145" d="M401 645L364 376Q340 200 252 102L977 104L959 0H-11L7 103L99 102Q212 144 242 367L279 645H97L115 749H294L331 1031Q358 1238 484 1359T791 1477Q955 1473 1045 1366T1119 1088H997Q1010 1211 953 1289T776
-1372Q650 1375 563 1283T453 1025L416 749H750L732 645H401Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1447" d="M1023 131Q831 -24 620 -20Q519 -18 427 20T265 132L85 -26L12 66L195 222Q114 401 141 601Q172 829 338 1010L205 1183L298 1265L429 1096Q619 1238 819 1234Q916 1232 1005 1197T1164 1092L1361 1265L1435 1171L1238
-1001Q1324 815 1296 614Q1269 399 1111 222L1241 54L1147 -28L1023 131ZM252 599Q240 507 259 417T326 256T450 138T627 89Q760 85 882 156T1085 352T1185 616Q1202 744 1159 862T1024 1050T811 1123Q681 1127 561 1060T356 868T252 599Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1034" d="M531 734L1010 1456H1153L635 705H936L920 616H573L537 412H885L869 324H523L466 0H343L400 324H56L72 412H415L451 616H107L123 705H430L174 1456H305L531 734Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="441" d="M2 -270L136 501H256L121 -270H2ZM289 698H170L302 1456H421L289 698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1212" d="M1066 439Q1049 240 793 155Q940 55 924 -131Q915 -245 848 -327T665 -454T418 -495Q210 -493 93 -378T-7 -64L112 -62Q97 -210 181 -300T423 -393Q571 -398 679 -327T803 -134Q813 -46 761 15T584 120L422 173L342
-204Q84 313 104 543Q121 742 368 829Q228 930 245 1112Q254 1224 323 1307T506 1435T753 1476Q954 1472 1061 1355T1149 1045H1031Q1045 1190 968 1280T748 1374Q589 1376 485 1307T366 1115Q344 948 542 871L777 791Q936 734 1006 650T1066 439ZM615 729L483 772Q249
-733 224 546Q211 453 267 388T488 271T668 213Q790 231 861 288T945 435Q957 526 896 592T679 709L615 729Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="865" d="M256 1396Q258 1430 284 1454T341 1478Q376 1479 398 1455T419 1396Q417 1365 392 1341T333 1316T277 1338T256 1396ZM681 1395Q683 1429 709 1453T766 1477Q801 1478 823 1454T843 1395Q841 1362 816 1339T758 1315Q724
-1315 702 1337T681 1395Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1598" d="M1101 607Q1082 455 992 372T762 292Q620 296 546 406T485 680L493 758Q513 946 615 1056T868 1164Q1005 1160 1076 1077T1137 850H1039Q1057 1071 864 1075Q758 1077 685 995T595 777L585 679Q572 550 620 468T766
-382Q964 375 1006 606L1101 607ZM219 562Q241 345 379 206T717 65Q912 61 1085 178T1355 494T1430 896Q1414 1038 1346 1150T1171 1324T932 1389Q788 1392 653 1328T411 1141T254 864T219 562ZM135 722Q157 919 270 1096T560 1377T933 1476Q1112 1474 1254 1376T1466
-1102T1513 735Q1488 529 1371 351T1079 74T716 -21Q532 -17 392 81T182 356T135 722Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="889" d="M657 703Q651 751 654 798Q555 690 427 690Q324 690 264 749T209 900Q214 1014 307 1077T560 1141L697 1140L706 1202Q710 1237 706 1269Q692 1377 583 1380Q507 1382 452 1348T377 1238L273 1244Q288 1353 375 1416T589
-1477Q706 1473 766 1398T816 1200L767 886Q752 793 762 704L657 703ZM450 784Q563 784 658 889L688 1058L562 1059Q455 1059 391 1019T319 905Q314 846 349 815T450 784Z" />
-<glyph unicode="&#xab;" horiz-adv-x="915" d="M228 786L426 404H331L106 782L108 801L456 1181H570L228 786ZM528 530L726 148H631L406 526L408 545L756 925H870L528 530Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1093" d="M872 386H753L803 670H131L150 776H940L872 386Z" />
-<glyph unicode="&#xad;" horiz-adv-x="578" d="M512 592H45L63 693H530L512 592Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1603" d="M130 722Q155 929 270 1104T559 1379T928 1476Q1105 1474 1247 1377T1461 1103T1510 735Q1492 584 1421 443T1238 195T990 32T711 -21Q527 -17 387 81T177 356T130 722ZM214 562Q236 346 374 207T712 65Q855 62
-989 125T1231 312T1389 589T1425 896Q1411 1034 1344 1147T1168 1323T927 1389Q784 1392 648 1328T407 1143T250 869T214 562ZM655 666L600 321H502L634 1160L878 1159Q1011 1154 1079 1093T1141 919Q1131 787 975 711Q1058 669 1067 571L1066 509Q1056 433 1057
-400L1059 337L1057 321H959Q954 357 956 393L962 465L967 509Q974 584 947 622T842 665L655 666ZM668 757L839 756Q921 758 979 800T1047 917Q1067 1068 877 1069L718 1070L668 757Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="858" d="M851 1343H247L263 1440H866L851 1343Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="761" d="M249 1217Q253 1323 331 1401T511 1477Q603 1475 664 1404T722 1235Q718 1129 642 1053T464 979Q368 981 307 1052T249 1217ZM339 1219Q333 1157 370 1114T466 1070Q533 1070 580 1117T633 1233Q639 1294 605 1340T508
-1386Q444 1386 395 1339T339 1219Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1062" d="M628 829H1008L991 727H612L543 289H433L502 727H100L116 829H517L586 1267H697L628 829ZM842 0H29L45 101H858L842 0Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="728" d="M659 665H103L117 745L488 1066Q598 1164 608 1247Q616 1311 580 1345T481 1380Q400 1381 350 1337T283 1216H180Q196 1332 280 1400T482 1467Q594 1465 658 1405T716 1248Q709 1133 560 1004L497 950L255 752H675L659 665Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="728" d="M345 1106H421Q510 1109 565 1149Q617 1187 623 1248Q629 1310 590 1344T485 1379Q418 1380 368 1346T299 1247L195 1246Q210 1349 291 1409T486 1467Q598 1465 666 1407T728 1251Q721 1133 559 1065Q690 1021 684
-888Q679 781 592 717T380 654Q262 656 190 718T122 885H225Q222 822 265 782T385 742Q467 742 520 782T581 890Q594 1019 417 1024L336 1025L345 1106Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="569" d="M447 1536L598 1535L330 1257L218 1256L447 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1116" d="M358 1082L253 448L247 368V321Q256 87 439 80Q561 76 657 138T784 311L916 1082H1035L847 0H739L766 154Q645 -24 441 -20Q265 -15 192 106L98 -416H-20L240 1082H358Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="954" d="M566 0L657 520L574 521Q362 523 250 650T159 980Q182 1195 334 1326T710 1457L938 1456L685 0H566Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="498" d="M178 717Q180 752 205 776T265 801Q302 801 324 777T345 717Q342 682 317 659T256 634Q220 633 198 657T178 717Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="493" d="M131 0L109 -66Q250 -92 244 -228Q239 -326 155 -380T-75 -437L-74 -358Q22 -355 79 -322T145 -231Q154 -152 51 -134L-4 -126L41 0H131Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="728" d="M462 665H357L472 1325L234 1256L251 1350L579 1455H596L462 665Z" />
-<glyph unicode="&#xba;" horiz-adv-x="904" d="M585 1477Q720 1473 794 1377T855 1132L845 1033Q826 879 728 782T485 689Q350 693 276 788T213 1033L222 1121Q239 1284 340 1382T585 1477ZM323 1031Q311 920 356 853T491 784Q587 780 654 850T737 1042L748 1133Q758
-1243 713 1310T579 1381Q479 1383 413 1312T333 1123L323 1031Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="910" d="M270 944L494 562L492 542L144 162H30L371 556L174 944H270ZM580 944L804 562L802 542L454 162H340L681 556L484 944H580Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1449" d="M450 664H345L460 1324L222 1255L239 1349L567 1454H584L450 664ZM327 130L255 183L1140 1314L1208 1265L327 130ZM1179 275H1303L1287 187H1164L1131 0H1026L1060 187H675L679 252L1154 789H1269L1179 275ZM801
-275H1074L1147 660L1108 609L801 275Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1512" d="M284 130L212 183L1097 1314L1165 1265L284 130ZM436 664H331L446 1324L208 1255L225 1349L553 1454H570L436 664ZM1290 0H734L748 80L1119 401Q1229 499 1239 582Q1247 646 1211 680T1112 715Q1031 716 981 672T914
-551H811Q827 667 911 735T1113 802Q1225 800 1289 740T1347 583Q1340 468 1191 339L1128 285L886 87H1306L1290 0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1552" d="M467 130L395 183L1280 1314L1348 1265L467 130ZM1290 275H1414L1398 187H1275L1242 0H1137L1171 187H786L790 252L1265 789H1380L1290 275ZM912 275H1185L1258 660L1219 609L912 275ZM390 1106H466Q555 1109 610
-1149Q662 1187 668 1248Q674 1310 635 1344T530 1379Q463 1380 413 1346T344 1247L240 1246Q255 1349 336 1409T531 1467Q643 1465 711 1407T773 1251Q766 1133 604 1065Q735 1021 729 888Q724 781 637 717T425 654Q307 656 235 718T167 885H270Q267 822 310 782T430
-742Q512 742 565 782T626 890Q639 1019 462 1024L381 1025L390 1106Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="922" d="M554 688Q539 580 498 507T372 359T267 265Q125 131 109 -17Q96 -136 151 -206T315 -279Q425 -283 504 -215T610 -21L727 -20Q702 -190 588 -289T307 -384Q145 -380 59 -277T-11 -18Q7 174 198 349L336 469Q415 547
-439 687L554 688ZM632 1022Q630 988 604 964T547 940Q512 939 490 963T470 1022Q473 1055 498 1078T556 1102Q590 1103 612 1080T632 1022Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513ZM861 1571H761L585 1851H719L861 1571Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513ZM947 1851L1098 1850L830 1572L718 1571L947 1851Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513ZM1067 1584L1066 1572L958 1573L829 1754L635 1574L525 1573L526 1587L796 1841H869L1067 1584Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513ZM1159 1809Q1145 1709 1089 1652T949 1594Q918 1594 893 1604T818 1649T743 1695T687 1707Q641 1707 608 1676T560 1589L471
-1592Q485 1688 542 1747T683 1805Q721 1805 752 1788T815 1749T879 1709T947 1692Q1039 1692 1075 1814L1159 1809Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513ZM522 1711Q524 1745 550 1769T607 1793Q642 1794 664 1770T685 1711Q683 1680 658 1656T599 1631T543 1653T522 1711ZM947
-1710Q949 1744 975 1768T1032 1792Q1067 1793 1089 1769T1109 1710Q1107 1677 1082 1654T1024 1630Q990 1630 968 1652T947 1710Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1251" d="M909 408H271L54 0H-79L708 1456H825L1106 0H985L909 408ZM326 513H889L745 1302L326 513ZM631 1707Q633 1790 692 1848T831 1906Q906 1906 957 1853T1007 1723Q1005 1643 947 1585T806 1527Q731 1527 680 1578T631
-1707ZM708 1709Q704 1663 730 1631T802 1599Q850 1599 887 1633T931 1721Q935 1769 908 1801T835 1834Q788 1834 750 1797T708 1709Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1819" d="M1666 0H871L922 389H350L59 0H-93L1015 1456H1859L1841 1354H1168L1096 809H1668L1650 707H1082L1002 101H1684L1666 0ZM434 502H938L1047 1320L434 502Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1300" d="M1150 454Q1099 229 943 102T562 -20Q367 -16 252 118T127 481Q124 559 134 636L161 812Q192 1013 285 1168T513 1401T808 1476Q1016 1472 1133 1344T1248 999L1127 1000Q1127 1175 1043 1271T802 1372Q604 1377
-465 1225T283 803L253 603L249 513Q247 395 283 294T393 140T568 84Q742 78 859 171T1031 453L1150 454ZM597 -9L575 -75Q716 -101 710 -237Q705 -335 621 -389T391 -446L392 -367Q488 -364 545 -331T611 -240Q620 -161 517 -143L462 -135L507 -9H597Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1140" d="M977 698H317L213 104H973L955 0H73L326 1456H1203L1184 1351H430L334 802H995L977 698ZM839 1577H739L563 1857H697L839 1577Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1140" d="M977 698H317L213 104H973L955 0H73L326 1456H1203L1184 1351H430L334 802H995L977 698ZM925 1857L1076 1856L808 1578L696 1577L925 1857Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1140" d="M977 698H317L213 104H973L955 0H73L326 1456H1203L1184 1351H430L334 802H995L977 698ZM1045 1590L1044 1578L936 1579L807 1760L613 1580L503 1579L504 1593L774 1847H847L1045 1590Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1140" d="M977 698H317L213 104H973L955 0H73L326 1456H1203L1184 1351H430L334 802H995L977 698ZM500 1717Q502 1751 528 1775T585 1799Q620 1800 642 1776T663 1717Q661 1686 636 1662T577 1637T521 1659T500 1717ZM925
-1716Q927 1750 953 1774T1010 1798Q1045 1799 1067 1775T1087 1716Q1085 1683 1060 1660T1002 1636Q968 1636 946 1658T925 1716Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="539" d="M221 0H99L352 1456H474L221 0ZM505 1577H405L229 1857H363L505 1577Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="539" d="M221 0H99L352 1456H474L221 0ZM590 1857L741 1856L473 1578L361 1577L590 1857Z" />
-<glyph unicode="&#xce;" horiz-adv-x="539" d="M221 0H99L352 1456H474L221 0ZM711 1590L710 1578L602 1579L473 1760L279 1580L169 1579L170 1593L440 1847H513L711 1590Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="539" d="M221 0H99L352 1456H474L221 0ZM166 1717Q168 1751 194 1775T251 1799Q286 1800 308 1776T329 1717Q327 1686 302 1662T243 1637T187 1659T166 1717ZM591 1716Q593 1750 619 1774T676 1798Q711 1799 733 1775T753
-1716Q751 1683 726 1660T668 1636Q634 1636 612 1658T591 1716Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1341" d="M103 0L222 689H47L65 791H240L356 1456L735 1455Q904 1455 1028 1369T1207 1130T1240 794L1222 673Q1176 370 980 185T499 0H103ZM643 689H345L243 104L503 103Q656 103 782 173T990 370T1098 658T1125 880T1119
-998Q1096 1158 997 1252T741 1350L460 1351L362 791H661L643 689Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1420" d="M1128 0H1010L413 1248L196 0H73L326 1456H444L1042 207L1259 1456H1380L1128 0ZM1240 1809Q1226 1709 1170 1652T1030 1594Q999 1594 974 1604T899 1649T824 1695T768 1707Q722 1707 689 1676T641 1589L552 1592Q566
-1688 623 1747T764 1805Q802 1805 833 1788T896 1749T960 1709T1028 1692Q1120 1692 1156 1814L1240 1809Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1354" d="M577 -20Q373 -16 254 121T124 489Q120 569 131 648L151 786Q196 1091 371 1284Q550 1481 813 1476Q947 1473 1047 1411T1204 1229T1265 966Q1268 880 1256 798L1233 644Q1198 438 1104 284T874 54T577 -20ZM1136
-809Q1144 872 1145 937Q1145 1059 1107 1159T993 1312T807 1369Q607 1374 466 1226T280 824Q244 619 245 521Q245 319 333 205T583 87Q796 82 935 241T1114 661L1136 809ZM910 1583H810L634 1863H768L910 1583Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1354" d="M577 -20Q373 -16 254 121T124 489Q120 569 131 648L151 786Q196 1091 371 1284Q550 1481 813 1476Q947 1473 1047 1411T1204 1229T1265 966Q1268 880 1256 798L1233 644Q1198 438 1104 284T874 54T577 -20ZM1136
-809Q1144 872 1145 937Q1145 1059 1107 1159T993 1312T807 1369Q607 1374 466 1226T280 824Q244 619 245 521Q245 319 333 205T583 87Q796 82 935 241T1114 661L1136 809ZM996 1863L1147 1862L879 1584L767 1583L996 1863Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1354" d="M577 -20Q373 -16 254 121T124 489Q120 569 131 648L151 786Q196 1091 371 1284Q550 1481 813 1476Q947 1473 1047 1411T1204 1229T1265 966Q1268 880 1256 798L1233 644Q1198 438 1104 284T874 54T577 -20ZM1136
-809Q1144 872 1145 937Q1145 1059 1107 1159T993 1312T807 1369Q607 1374 466 1226T280 824Q244 619 245 521Q245 319 333 205T583 87Q796 82 935 241T1114 661L1136 809ZM1116 1596L1115 1584L1007 1585L878 1766L684 1586L574 1585L575 1599L845 1853H918L1116
-1596Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1354" d="M577 -20Q373 -16 254 121T124 489Q120 569 131 648L151 786Q196 1091 371 1284Q550 1481 813 1476Q947 1473 1047 1411T1204 1229T1265 966Q1268 880 1256 798L1233 644Q1198 438 1104 284T874 54T577 -20ZM1136
-809Q1144 872 1145 937Q1145 1059 1107 1159T993 1312T807 1369Q607 1374 466 1226T280 824Q244 619 245 521Q245 319 333 205T583 87Q796 82 935 241T1114 661L1136 809ZM1208 1821Q1194 1721 1138 1664T998 1606Q967 1606 942 1616T867 1661T792 1707T736 1719Q690
-1719 657 1688T609 1601L520 1604Q534 1700 591 1759T732 1817Q770 1817 801 1800T864 1761T928 1721T996 1704Q1088 1704 1124 1826L1208 1821Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1354" d="M577 -20Q373 -16 254 121T124 489Q120 569 131 648L151 786Q196 1091 371 1284Q550 1481 813 1476Q947 1473 1047 1411T1204 1229T1265 966Q1268 880 1256 798L1233 644Q1198 438 1104 284T874 54T577 -20ZM1136
-809Q1144 872 1145 937Q1145 1059 1107 1159T993 1312T807 1369Q607 1374 466 1226T280 824Q244 619 245 521Q245 319 333 205T583 87Q796 82 935 241T1114 661L1136 809ZM571 1723Q573 1757 599 1781T656 1805Q691 1806 713 1782T734 1723Q732 1692 707 1668T648
-1643T592 1665T571 1723ZM996 1722Q998 1756 1024 1780T1081 1804Q1116 1805 1138 1781T1158 1722Q1156 1689 1131 1666T1073 1642Q1039 1642 1017 1664T996 1722Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1050" d="M17 184L428 550L155 900L242 975L512 625L906 974L974 888L580 539L865 173L779 99L495 463L85 100L17 184Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1354" d="M575 -21Q397 -17 281 77L153 -82H41L218 136Q117 292 120 516Q121 613 157 823T301 1195T567 1427Q683 1479 813 1476Q909 1474 998 1441T1153 1336L1288 1504H1399L1207 1267Q1255 1158 1265 1040Q1275 921 1258
-806L1236 663Q1203 449 1108 292T877 56T582 -21H575ZM241 544Q231 361 291 235L1081 1240Q988 1366 808 1370Q601 1375 459 1219T275 795L247 614L241 544ZM1151 986Q1151 1074 1127 1160L349 168Q437 91 582 86Q714 83 823 147T1009 343T1115 668T1147 901T1151
-986Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1316" d="M1306 1456L1137 471Q1101 241 944 108T562 -21Q421 -18 319 44T170 218T140 469L309 1456H430L262 468Q241 299 324 195T568 84Q736 78 857 177T1011 452L1183 1456H1306ZM899 1571H799L623 1851H757L899 1571Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1316" d="M1306 1456L1137 471Q1101 241 944 108T562 -21Q421 -18 319 44T170 218T140 469L309 1456H430L262 468Q241 299 324 195T568 84Q736 78 857 177T1011 452L1183 1456H1306ZM985 1851L1136 1850L868 1572L756 1571L985
-1851Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1316" d="M1306 1456L1137 471Q1101 241 944 108T562 -21Q421 -18 319 44T170 218T140 469L309 1456H430L262 468Q241 299 324 195T568 84Q736 78 857 177T1011 452L1183 1456H1306ZM1105 1584L1104 1572L996 1573L867 1754L673
-1574L563 1573L564 1587L834 1841H907L1105 1584Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1316" d="M1306 1456L1137 471Q1101 241 944 108T562 -21Q421 -18 319 44T170 218T140 469L309 1456H430L262 468Q241 299 324 195T568 84Q736 78 857 177T1011 452L1183 1456H1306ZM560 1711Q562 1745 588 1769T645 1793Q680
-1794 702 1770T723 1711Q721 1680 696 1656T637 1631T581 1653T560 1711ZM985 1710Q987 1744 1013 1768T1070 1792Q1105 1793 1127 1769T1147 1710Q1145 1677 1120 1654T1062 1630Q1028 1630 1006 1652T985 1710Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1199" d="M600 664L1168 1456H1316L643 542L549 0H427L524 555L174 1456H311L600 664ZM916 1845L1067 1844L799 1566L687 1565L916 1845Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1188" d="M444 1456L391 1152L696 1151Q819 1148 913 1097T1053 954T1088 745Q1076 617 1007 522T822 375T568 323L248 324L191 0H72L325 1456H444ZM374 1051L265 425L572 424Q729 424 840 512T968 744Q984 878 908 962T694
-1050L374 1051Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1174" d="M160 0H41L234 1127Q262 1327 371 1438T645 1544Q785 1540 866 1457T936 1246Q932 1199 917 1157T846 1023T776 894T756 814Q748 756 776 702T879 574T985 440T1013 316Q1004 167 885 71T603 -21Q523 -21 442 0T308
-62L354 161Q459 81 593 79Q710 77 796 143T896 315Q903 375 874 430T771 558T664 690T638 816Q643 865 661 908T726 1029T792 1148T817 1240Q827 1323 780 1381T647 1444Q529 1449 452 1367T352 1128L160 0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603
-1103Q770 1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85ZM745 1256H645L469 1536H603L745 1256Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603
-1103Q770 1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85ZM831 1536L982 1535L714 1257L602 1256L831 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603
-1103Q770 1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85ZM951 1269L950 1257L842 1258L713 1439L519 1259L409 1258L410 1272L680 1526H753L951
-1269Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603
-1103Q770 1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85ZM1043 1494Q1029 1394 973 1337T833 1279Q802 1279 777 1289T702 1334T627 1380T571
-1392Q525 1392 492 1361T444 1274L355 1277Q369 1373 426 1432T567 1490Q605 1490 636 1473T699 1434T763 1394T831 1377Q923 1377 959 1499L1043 1494Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603
-1103Q770 1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85ZM406 1396Q408 1430 434 1454T491 1478Q526 1479 548 1455T569 1396Q567 1365 542
-1341T483 1316T427 1338T406 1396ZM831 1395Q833 1429 859 1453T916 1477Q951 1478 973 1454T993 1395Q991 1362 966 1339T908 1315Q874 1315 852 1337T831 1395Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1074" d="M719 0Q714 38 716 76L725 151Q650 70 554 24T345 -20Q208 -18 123 66T46 279Q54 386 119 464T306 586T577 630L798 629L816 753Q828 864 768 931T591 1002Q473 1004 386 944T276 784H159Q179 926 305 1015T603
-1103Q770 1099 860 1002T934 750L844 206L836 119Q833 65 844 12L842 0H719ZM365 85Q475 81 575 137T742 298L783 537L592 538Q410 538 295 474T168 289Q159 201 214 144T365 85ZM515 1392Q517 1475 576 1533T715 1591Q790 1591 841 1538T891 1408Q889 1328 831
-1270T690 1212Q615 1212 564 1263T515 1392ZM592 1394Q588 1348 614 1316T686 1284Q734 1284 771 1318T815 1406Q819 1454 792 1486T719 1519Q672 1519 634 1482T592 1394Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1690" d="M1134 -19Q1012 -17 918 37T781 186Q700 80 584 29T336 -20Q188 -18 106 65T33 285Q45 449 174 541T510 633L765 632L777 721Q791 851 741 924T583 1001Q460 1003 372 941T260 766L145 778Q165 927 289 1017T591
-1102Q710 1100 789 1043T890 890Q1055 1106 1277 1102Q1458 1098 1550 970T1618 638L1603 538H871L866 508Q855 431 863 356Q875 232 947 159T1139 82Q1308 78 1470 199L1509 110Q1358 -23 1134 -19ZM358 80Q445 78 535 119T697 235L750 536L510 537Q366 537 266
-467T153 281Q144 186 201 133T358 80ZM1269 1001Q1141 1004 1042 913T884 636H1499Q1513 729 1504 791Q1489 888 1428 943T1269 1001Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1033" d="M465 80Q583 76 673 145T794 333H907Q877 172 750 74T459 -21Q328 -18 239 51T111 242T85 517L89 560Q101 665 140 764T246 939T403 1060T610 1102Q776 1098 874 990T966 716L853 717Q855 842 788 919T605 1000Q481
-1004 386 928T243 713T198 418Q201 257 270 171T465 80ZM473 -9L451 -75Q592 -101 586 -237Q581 -335 497 -389T267 -446L268 -367Q364 -364 421 -331T487 -240Q496 -161 393 -143L338 -135L383 -9H473Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1036" d="M475 -20Q345 -18 250 52T111 244T79 507L82 541Q96 691 171 826T361 1033T607 1102Q728 1100 811 1036T933 858T957 606L949 533H200L197 509Q182 400 213 301T314 143T484 82Q580 79 657 119T799 226L869 169Q796
-75 696 27T475 -20ZM601 1000Q471 1005 368 908T213 635L841 634L844 649Q862 791 794 893T601 1000ZM721 1256H621L445 1536H579L721 1256Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1036" d="M475 -20Q345 -18 250 52T111 244T79 507L82 541Q96 691 171 826T361 1033T607 1102Q728 1100 811 1036T933 858T957 606L949 533H200L197 509Q182 400 213 301T314 143T484 82Q580 79 657 119T799 226L869 169Q796
-75 696 27T475 -20ZM601 1000Q471 1005 368 908T213 635L841 634L844 649Q862 791 794 893T601 1000ZM807 1536L958 1535L690 1257L578 1256L807 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1036" d="M475 -20Q345 -18 250 52T111 244T79 507L82 541Q96 691 171 826T361 1033T607 1102Q728 1100 811 1036T933 858T957 606L949 533H200L197 509Q182 400 213 301T314 143T484 82Q580 79 657 119T799 226L869 169Q796
-75 696 27T475 -20ZM601 1000Q471 1005 368 908T213 635L841 634L844 649Q862 791 794 893T601 1000ZM927 1269L926 1257L818 1258L689 1439L495 1259L385 1258L386 1272L656 1526H729L927 1269Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1036" d="M475 -20Q345 -18 250 52T111 244T79 507L82 541Q96 691 171 826T361 1033T607 1102Q728 1100 811 1036T933 858T957 606L949 533H200L197 509Q182 400 213 301T314 143T484 82Q580 79 657 119T799 226L869 169Q796
-75 696 27T475 -20ZM601 1000Q471 1005 368 908T213 635L841 634L844 649Q862 791 794 893T601 1000ZM382 1396Q384 1430 410 1454T467 1478Q502 1479 524 1455T545 1396Q543 1365 518 1341T459 1316T403 1338T382 1396ZM807 1395Q809 1429 835 1453T892 1477Q927
-1478 949 1454T969 1395Q967 1362 942 1339T884 1315Q850 1315 828 1337T807 1395Z" />
-<glyph unicode="&#xec;" horiz-adv-x="452" d="M177 0H57L246 1082H365L177 0ZM661 1500H561L385 1780H519L661 1500Z" />
-<glyph unicode="&#xed;" horiz-adv-x="452" d="M177 0H57L246 1082H365L177 0ZM490 1780L641 1779L373 1501L261 1500L490 1780Z" />
-<glyph unicode="&#xee;" horiz-adv-x="452" d="M177 0H57L246 1082H365L177 0ZM611 1257L610 1245L502 1246L373 1427L179 1247L69 1246L70 1260L340 1514H413L611 1257Z" />
-<glyph unicode="&#xef;" horiz-adv-x="452" d="M177 0H57L246 1082H365L177 0ZM66 1384Q68 1418 94 1442T151 1466Q186 1467 208 1443T229 1384Q227 1353 202 1329T143 1304T87 1326T66 1384ZM491 1383Q493 1417 519 1441T576 1465Q611 1466 633 1442T653 1383Q651
-1350 626 1327T568 1303Q534 1303 512 1325T491 1383Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1165" d="M912 1301Q1049 1085 1045 800Q1042 681 1018 527T925 249T759 56Q645 -25 506 -21Q383 -17 292 46T157 220T125 458Q139 604 206 721T383 904T625 966Q713 964 793 928T927 821Q931 1059 807 1239L563 1100L523
-1179L744 1304Q634 1408 441 1476L490 1577Q708 1504 852 1367L1063 1488L1103 1409L912 1301ZM916 686Q884 770 811 815T639 862Q481 866 374 755T245 458Q227 304 302 195T516 82Q666 77 769 207T901 558L910 626L916 686Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1101" d="M348 1082L312 897Q384 997 478 1050T681 1102Q837 1098 908 993T958 704L840 0H722L840 706Q846 763 842 816Q825 994 648 999Q543 1001 452 937T292 742L164 0H46L234 1082H348ZM1039 1493Q1025 1393 969 1336T829
-1278Q798 1278 773 1288T698 1333T623 1379T567 1391Q521 1391 488 1360T440 1273L351 1276Q365 1372 422 1431T563 1489Q601 1489 632 1472T695 1433T759 1393T827 1376Q919 1376 955 1498L1039 1493Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1123" d="M75 551Q93 708 171 838T365 1037T618 1102Q752 1100 846 1029T984 834T1014 560L1012 541Q982 285 831 130T467 -20Q285 -17 176 114T69 460L72 517L75 551ZM191 517Q178 398 208 298T306 140T473 80Q581 78 670
-135T818 296T893 526L896 559Q914 752 837 874T612 1000Q452 1005 336 877T193 535L191 517ZM725 1256H625L449 1536H583L725 1256Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1123" d="M75 551Q93 708 171 838T365 1037T618 1102Q752 1100 846 1029T984 834T1014 560L1012 541Q982 285 831 130T467 -20Q285 -17 176 114T69 460L72 517L75 551ZM191 517Q178 398 208 298T306 140T473 80Q581 78 670
-135T818 296T893 526L896 559Q914 752 837 874T612 1000Q452 1005 336 877T193 535L191 517ZM811 1536L962 1535L694 1257L582 1256L811 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1123" d="M75 551Q93 708 171 838T365 1037T618 1102Q752 1100 846 1029T984 834T1014 560L1012 541Q982 285 831 130T467 -20Q285 -17 176 114T69 460L72 517L75 551ZM191 517Q178 398 208 298T306 140T473 80Q581 78 670
-135T818 296T893 526L896 559Q914 752 837 874T612 1000Q452 1005 336 877T193 535L191 517ZM931 1269L930 1257L822 1258L693 1439L499 1259L389 1258L390 1272L660 1526H733L931 1269Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1123" d="M75 551Q93 708 171 838T365 1037T618 1102Q752 1100 846 1029T984 834T1014 560L1012 541Q982 285 831 130T467 -20Q285 -17 176 114T69 460L72 517L75 551ZM191 517Q178 398 208 298T306 140T473 80Q581 78 670
-135T818 296T893 526L896 559Q914 752 837 874T612 1000Q452 1005 336 877T193 535L191 517ZM1023 1493Q1009 1393 953 1336T813 1278Q782 1278 757 1288T682 1333T607 1379T551 1391Q505 1391 472 1360T424 1273L335 1276Q349 1372 406 1431T547 1489Q585 1489
-616 1472T679 1433T743 1393T811 1376Q903 1376 939 1498L1023 1493Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1123" d="M75 551Q93 708 171 838T365 1037T618 1102Q752 1100 846 1029T984 834T1014 560L1012 541Q982 285 831 130T467 -20Q285 -17 176 114T69 460L72 517L75 551ZM191 517Q178 398 208 298T306 140T473 80Q581 78 670
-135T818 296T893 526L896 559Q914 752 837 874T612 1000Q452 1005 336 877T193 535L191 517ZM386 1396Q388 1430 414 1454T471 1478Q506 1479 528 1455T549 1396Q547 1365 522 1341T463 1316T407 1338T386 1396ZM811 1395Q813 1429 839 1453T896 1477Q931 1478
-953 1454T973 1395Q971 1362 946 1339T888 1315Q854 1315 832 1337T811 1395Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1139" d="M1047 644H76L97 760H1068L1047 644ZM564 1088Q566 1123 591 1147T651 1172Q687 1173 710 1149T731 1088Q728 1053 703 1030T642 1005Q604 1005 582 1029T564 1088ZM426 291Q428 326 453 350T513 375Q549 376 572
-352T593 291Q590 256 565 233T504 209T446 231T426 291Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1116" d="M631 1104Q741 1100 833 1054L940 1214L1040 1213L901 1008Q1015 883 1021 680Q1024 475 953 316T750 66T459 -22Q361 -21 269 21L161 -140L61 -139L198 65Q76 187 69 396Q63 592 134 756T337 1014T631 1104ZM184
-425Q181 262 257 164L775 960Q704 1002 625 1003Q502 1006 402 931T244 721T184 425ZM905 649Q908 800 840 904L324 112Q389 80 464 78Q649 74 774 235T905 649Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1101" d="M764 136Q635 -26 408 -20Q255 -17 180 90T126 389L242 1082H360L245 386Q239 332 244 279Q251 187 299 137T431 84Q551 79 653 139T785 298L919 1082H1039L851 0H735L764 136ZM739 1256H639L463 1536H597L739 1256Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1101" d="M764 136Q635 -26 408 -20Q255 -17 180 90T126 389L242 1082H360L245 386Q239 332 244 279Q251 187 299 137T431 84Q551 79 653 139T785 298L919 1082H1039L851 0H735L764 136ZM825 1536L976 1535L708 1257L596
-1256L825 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1101" d="M764 136Q635 -26 408 -20Q255 -17 180 90T126 389L242 1082H360L245 386Q239 332 244 279Q251 187 299 137T431 84Q551 79 653 139T785 298L919 1082H1039L851 0H735L764 136ZM945 1269L944 1257L836 1258L707
-1439L513 1259L403 1258L404 1272L674 1526H747L945 1269Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1101" d="M764 136Q635 -26 408 -20Q255 -17 180 90T126 389L242 1082H360L245 386Q239 332 244 279Q251 187 299 137T431 84Q551 79 653 139T785 298L919 1082H1039L851 0H735L764 136ZM400 1396Q402 1430 428 1454T485
-1478Q520 1479 542 1455T563 1396Q561 1365 536 1341T477 1316T421 1338T400 1396ZM825 1395Q827 1429 853 1453T910 1477Q945 1478 967 1454T987 1395Q985 1362 960 1339T902 1315Q868 1315 846 1337T825 1395Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="954" d="M408 176L871 1082H1004L344 -174Q271 -320 190 -381T8 -440Q-30 -438 -88 -424L-76 -326L-16 -333Q152 -340 249 -135L325 16L116 1082H241L408 176ZM767 1536L918 1535L650 1257L538 1256L767 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1126" d="M504 -21Q411 -19 329 18T196 136L96 -416H-23L316 1536H435L323 932Q463 1108 672 1102Q828 1098 912 986T998 680Q998 617 992 558L990 542Q954 279 825 126Q696 -26 504 -21ZM873 558L879 653Q882 813 822 904T640
-999Q535 1001 450 948T305 792L216 269Q248 178 317 130T484 80Q635 75 737 196T873 558Z" />
-<glyph unicode="&#xff;" horiz-adv-x="954" d="M408 176L871 1082H1004L344 -174Q271 -320 190 -381T8 -440Q-30 -438 -88 -424L-76 -326L-16 -333Q152 -340 249 -135L325 16L116 1082H241L408 176ZM342 1396Q344 1430 370 1454T427 1478Q462 1479 484 1455T505
-1396Q503 1365 478 1341T419 1316T363 1338T342 1396ZM767 1395Q769 1429 795 1453T852 1477Q887 1478 909 1454T929 1395Q927 1362 902 1339T844 1315Q810 1315 788 1337T767 1395Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1304" d="M1401 686H426L448 788H1424L1401 686Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1543" d="M1444 686H143L173 788H1474L1444 686Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="363" d="M389 1555L458 1501Q353 1380 326 1257L302 1121H184L201 1230Q231 1422 389 1555Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="363" d="M227 1097L156 1153Q262 1277 288 1402L312 1536H429L411 1422Q380 1226 227 1097Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="352" d="M-28 -232L-95 -177Q8 -58 35 66L60 205H178L160 85Q127 -101 -28 -232Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="604" d="M390 1555L459 1501Q354 1380 327 1257L303 1121H185L202 1230Q232 1422 390 1555ZM633 1555L702 1501Q597 1380 570 1257L546 1121H428L445 1230Q475 1422 633 1555Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="608" d="M233 1097L162 1153Q268 1277 294 1402L318 1536H435L417 1422Q386 1226 233 1097ZM470 1097L399 1153Q505 1277 531 1402L555 1536H672L654 1422Q623 1226 470 1097Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="585" d="M-30 -241L-97 -186Q15 -53 39 87L65 236H183L160 90Q128 -107 -30 -241ZM207 -242L131 -185Q236 -62 263 75L291 236H410L384 71Q351 -113 207 -242Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="652" d="M165 745Q171 828 224 879T358 931Q434 931 479 884T525 755L524 718Q518 637 466 588T332 538Q256 538 210 586T164 710L165 745Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="601" d="M217 549L415 167H320L95 545L97 564L445 944H559L217 549Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="601" d="M253 944L477 562L475 542L127 162H13L354 556L157 944H253Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-300italic.ttf b/static/fonts/roboto-v18-latin-300italic.ttf
deleted file mode 100644
index 4f6315e7bdf611b9bf403b1c6c75e4e1103f0ac7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 37232
zcmb5X1z=Q1_Xj#NS2muNC<$@FLJ|TA?vx@e*5Vc<1lI@&P~6=eN-4$J+#;prE6^57
zi!{`r)M%m9-64DT{bqJ=c9)Ouz5ff$-o3kX?>%$o_&GC6C?Uj(7nvk<Y~SHAWsYJe
zWbSNyI-+CuZoSU_bGs1dcL@nP*Rj{rZS#hiPY|+dFCp~pZoM)aObbr#K}adCAw!3c
z&!6;K#J*1mDf1&l>N>o5T0-V4@-9MVcgOdA3nq;k|IGcQLxjwH3fG?*l|OY7@gp|e
ze;U3I8Z~Zu!SW}@CE&YygiM}LIAVNhs9DkpnQq4S{}hhQA5pdT-SLD>+m7?xLVOUk
zE@U{KzZ~Z&h2y7{ZpdwyhVS3U^G}YOI6Qw`izkl~GUW{J`PumV(n(Sr`wQp%`h*Gj
z<44B7*Yb0~w;$gho-}dlG-o~;0eAo(NtiTc<fJ{>32O;?2G6Ihh{C^<Y5_wMQHehZ
zBB5lW7G$<qtWE4eW;?0muc~<U7q7vU#7;W&wX@8a3KrM0pEw~nAt5dMX)+_YQd3+9
zlk4Co4)%agv>?|9!LARO*&gyqR(4{dB~h|aYN1jhZA25LT8`%Ija>aF{bd?-mr1%#
znZu#j@9$Mij+w0FfrXVi2D8D7*<iv*uJbQiA>a=onU4T17@!3Mv<j1A52)KW@n*~)
z{p_^TPBXKzZOOJAnwy)G8(|7zX}?df&(IgKhVjW65^K=D9^D|v+~1g#MYEC<Ggt<m
z^}gJUjZ`^h`IB&Bmon|F5{R&yD(#Zl?pK+WO(onilE2W=?R#{|zt+BI*L-DyewAKW
ztzV`W2=0=F8+;6iV@Nz%<AOK{Kn5AeG~>i<oCq`ne1YZ~_@)L&bIl+IG|#Zt%#5la
zl4o3UrM;$@F1!X-+5<By{Jg#m1ita1*>0`0`<d-wqH{#0otW)W;*&T&f<!={oR?@z
zM9YzQ%P}RR;d7iNvQzp8YYW!>ZK3K8{WmL(+fcBP*4tRH;Zw^`JN`23|E?>TPV4Q|
z-=|yk0=jh&Jw24})<qktcN~Pz{-&o1C0(6aavgOA$sn_}u=<%8&LdFaj{*A|s7Sy`
zf`N);oFsEpND2O&;>`XDIDl9yY}A7f$y^cTIn`>3zV-xjMP1LQ7;<h}N?KZ8Zf;&)
zjwvF-l$@KEo~D}A$cTu@2$QOsOv!omSzeBc(_E=T;8gvS<?Z}}zpO|uNZz{HTpTj{
znT4l9ENjzlH{W9p{^nHT$i!)TItP{nZ(6bZO*&!tx}wSJhwZy+dFyiIH)prJEV1pg
zp6wGkuwL;S`>ut)`fA|Rvn5+K#&&`mUv=J7nk#RUU{FVGl1G}66`Ei37JO)!G0YWS
zYl+vo;<Yijv1z8gai*XT2}qF)bfw`WjiU>s8Bl2t$gHr)zL@bkO*7l$EA8=__B3-v
zhS%ru=8A@%Q*cafF0f((QqqC3NP&^OJQu#eN&oXZC7niI3#}-hy2#%YS}}d{GXH#2
z&#pbEg!uXO>fECwh~5Z2I<sgYzI?HC>SF()rXEjpFADK9J=yK4qCm%Aour};@}~L6
zWclFib}Np^?9el8$W+FPhdnu@h_Uj5s`uv}W%7a9PtM1eho51C@oCYBZuwL2<;XjY
z<gs8niL`KjBTrV|B(Wr&G$18fTuwud**LR3sFJ^CyJedS)Tss@BXJUGkX;x~!Z_Il
ztC5`S!o|TJX|Aa0p(riU^<^E`m#VoU%kw43EuGUEM-?cG=7O$Fk;&--p}D!Xh&-AO
z{F>AVn;Myy3*08Bsq}DaufU+UH$Ai2FZkw0nl~wKT;i6^^YdT3b^Oy{|D9hRKBB)C
znBDM@*|KeP@bKd^0{w<`9Xd~nZL_6(^Q%nWQM7Mkp`Nq;^!>wMt==!QcMpxf<~S^E
zp&x`M*IvG4`c65i<k`9T6T6IHi=Y<Bt8!a9QOG%)#uOC;^$0t+jH7*94d^;j8Lxjp
zU&R#@^t$X%HJ_M?SqrsT#TEV_N(fmRsWN7Zv__iJq_jM%m9X34yMI`qu!sxEm)h43
z2s}jn)%>30^<u{@U2m&T+V{i;+T#4%RAE7M0-?_NdTkb>4uMuRYid}y0Zj<MHzTI>
zT&pcFH$9D|=S5g0)kJ@8reC@f{vW-u9L1C=1<BjD1<66IjlS4%tL(`+^heq!?7;4?
zX{)EYPSG3cw+HtG{8L!Dv;;Cage17ckc^3z1qoC}V;E6(e;oZYqwvhsJOx5AHBzye
zBq^Oft6$HgnJo%C(I-Ro{rmcDz5k^2{kZ%Ybeg_u=9sDa&E_;)f3GdaYge*Xt}CA;
zf#7c3jB8habA{?54!a~IFqgG1`O9X~qhWflr%IpF`-jozdz7-flk_<H<s|wpFmqV{
znVctQh>2K<-7m93_Nch5Y$;vHGu6^=YDCnuh(!J8y!rE2u08`eGFW$JWhcN9xQ=C3
zP!9wc9|S)mdWMz0$GVS1@A}Ta$j4+S2_VUu5*Q@#&n*BUoWTnflJ{dl+IcR0nkD5V
zr_`5N&SRO6CudXIASF42)dwD&+nn>H@xZo(IR$ck?1`-G$Yh!mJVnZ%JX6i!`f`l(
zD>*`Wi&#h!d0Y!mP5}h=a5MC+YpQ&dgkgzr#D;l>1s&(jp;_4q1bUv$N?dFxF+v$g
z$RxRher}#EmtHQ~(^)pv&7?seRaB_Vzg8ptH_F04+H)<nUa0C<K6c}kx>>d`srb(F
zaWs}@(H4sAxbt{BUDsdN-;w*!Sd*eV{?hMFAG~U_WcuYtnp1|+(;$eVhRO-pTTNX9
zP(W*nA#RKTXfjdwK;_H|$uka(N&Hh7P02PTFExiXE4{0a45w9*O6=O=6PPX7in19p
zE`s#Y{3D~PXDbvB3H`5!NTJ+bvxk~1{Jb6#BtF%`Twelp;hrzKy_N^5<&ycP+!PlE
zVK(fjS`x~N-?W+M&sl!C#?&Yp^4f_vEn#;ZZ?HT0Y~owb&fF`@r+3iT|6%fteHZRI
zu5g}c0+}2Kcx#h6T6&$j)$oP@-Vg)cYQu+y)Zp;aOl=6IgN}EjLnxc9W%BpW&{cSE
z4>4DmJkV-^?hDKn>0Y0PrBi;J8s>^b&!=2eHF$VnDmMsJnQJ?j{>Q*G89g+0(|e&I
zi{>mn8$B(82EOv*CA0sg1rsI)nDw77zWhZ<anO$C8!v?ftzI8KONwSY7tY@<v%O2{
zi(fMN(<9^Tjna>op8Y|VzdpXuF3ZQ(&E6b9DQG<gvlkA|2!JH&{0Q<EVu|Y?>My$x
zQNcVTu)|QN-15`>)IfZ#1&dx77&qa#NTE425n`*!C)SVKl(cq?^^=+{th&Xd)h+1<
zBlXpEQai~}l`1vtg_)V_{8}CcSYpX&Ev#l7?&kuCVrHl@GlqGM=lam8i3W4{OqrS`
z*u>uj`|_j7Tv5XVxE3qA!@jU3Lij;BT1_ee(i`P)8_YE+rf)U&rq%J>{E{s%zGe;6
z?_a5SYcg9tXY)C8$nr&7=CL2x8x!@g9*pS^E`F~6EX$v3D|X59O>OJzvOHEulCPzE
z${7*`{XbGms#Ti<mSnb@-I7G`o-s0Eh6}xK_7;$uiJ09ZQ%w9_MYLxecJsp&WlB~F
z#uLZ59m#b(l)sfEQrMSJ@qBE2aMCM532=9w*!=0#y<LO-d$d`6e&5wl|HPJb7j37X
zE&envI5>CSup!%q2U`{?XGSaf4gI?cnU&v~Q*idNwX*WLHt+&1qR%_Fuw^3)r@mgy
z*r=DLJbRsU*m2O*M9iZ~avmXX#BB0mD!vm)+=7PEWUdk9QC08EmFiV}ZkBc{WAATJ
zIu~$@igRzKa*0HeWO!fmv|3r&967awcY)U!H)g{@GvNki4aK2lgmc^7o&j#opo6qb
zyd3YAF(iXcu88p<Rg*Ge&`k@C$>6;q*u9t*iolz*LF&MBHOm6I+_2{|N^%?Z9OX8z
z_i|$3ra5EA`Gx9tE6;oq8hCJB|Gs{~)O7an+qXh?E!cV^G<3(3%{PY!Eh}C6Y6xBz
zT#(xqS2WCiY3eKAaN>IAe50&`qmJK|<qxWM%{eHumzK?Yj>*TQ$BUkWEjqt=I}B5<
z$JROjko_R(qDU=HeYNZG(SZ7_ZX5*yM}Y>8Y&fxTMkj$bKKN*Hut)o71G~*fG{d#?
zMvcHlI`mvihVjFbVMIyJ%gH6FoS_;u1SxWw1ZpOBy*PTx-Y!9*OFo=)_<}0Mx6sS=
z_p^g){Y4w;pHI2cJY>-``MX931?Cj7XNQcI+1!ukuK9fdlfSt>>9oFCpQ{wgH2#9T
ztgI~i&{>&{eQnanic!SrBsJlkkCB@|D_MUgl-nt*q;2q?x$hhZ-yeOr6+?%hPddJx
zk8f4NV<VJwAzw>x$gObRTq7nwV8M%gYXCLOBs8S20mJFo%c6ovp(dI~P4BZw5ssP`
zsW6Hy*WaH`XAY(13ot8_=pN}W=>^cT2@pVF*(G@MnH9uCfOZHg*>eiKf*~Z{?o_>R
zlj;qq`oJdDm0FB(JQxGGbIBd)oZJj>H*f(ge0TutBSsVxcj4_yrZ2RV!%Fj{hK{-6
z>`zP8qDZ!pW)|xU^7Z-iI29ds{v~aOH53Jo8=^&}r1HB&ne8>*ROAyqNCXunf{H3)
zJSG~qI!UI+%tG@+VEKE72Kfb7NQ)364&!VoSL^v)&=7Z6RFl+_;T<R^jrIy2da*~2
z8a!(3)Lqc{-|gFSDAamp@|gJZQr2VjnA9LKxgK3R;o$xuqgqa0Ewe>sbl)XezO?6+
z14D*9t7}P_j0aaJ<<XVSdK2}CvI<sFM>1Wj{dgxnvf5^Q2aK#vrai}HCsx}>QjQn^
zRGylt1-njy(Z^iT(ktc>UTM#P>Bl^tZyj?*s@Ey>QhU!S3`2-$;oYXES^1bFC9nu&
zhBYsjfnx}hR4dNm`=+O*utp871ky#ehKDhgy4+zKx-pY{wfAJT$CjQ0$Ebmue^~iM
zQIkb}O7j+DcITValHXtaMIYl-)fvC-f8k){rVr2R_craMadhJ4H)!PAXKp$Im3D0h
z9ZH|uyywnOlfu}@{^R>f((IW>=&ZLGYn<(P?TJqPC3!E+edT3pTOrB%_qw0{!^`^3
zEmZE=vmc``(6-k<r>AMJqmr~+fBWqZ^^NCgqoETeW&I@Pmmw?qm7fW7RzNrOgl;gw
z;&@7vg>`S2dBDI$x*j*k2>A((h!f!>a{=Wi3qpqb;l(mqfcTWNiUf0>>kvs=;h6i;
z0?AfHqo+H@vz*m*vtEd>UUx>NaPVIzz_I|agg~3blOioTA(2x+w1`^a)#8T9$Ns1$
zhiEFuAv#mbjD{|m7)>WvM0zM&^NWn;cLRA?JfCu_CEjzIm7QZ#IGMXuNU|g;E{iZ#
zfhx&OP3`2MTd%)w4qRPcIL$v)|Nise3hCgTH!Q&`7U|n*tL?9cMC)(s*A+We-Z(tv
zK)r<1rLW#)XB>y=zID%RmJ2D{I>!+}Ath!w@5x_68zhkKT2NvVU~^$y7*vK95CI*b
z1%f5?(9GiSuq}lsmsj)wIOp~%+!+LBtRPOSDV@uDA{iD(o;)i@zx2iHU;9e|G4Zd^
zpl2(;W7GHVxTt?yCr)Oa))pN7E{|UP!l}wM`0kTW*x#bL+a=jaKBC9YgL2-{f4|hf
z`0X*0`pOybEuS}x7!(u%|13oK95BNX8+DE7k@LkdALzk6pO;|IshEfcfE+ptgo8=Q
zwZg?uO9%eT5BxJR(pq0H)$gQ#MCC12&*w;fkr#IW=STE+PEFUZ>noLx4-)BeCv8*K
zWcL{v*yb?42p9uNZx>KLA)achI#3l>bs&f+kPh-DXfTDZrS0P}2|9=6Dy-K;>AGWF
zA^XQ#wbCJtw>d(FvJLEI$5GJwXvfD~vvFvS0~&wQ{{Mx|G=ITEGkDnHVNiTDoCw)+
zyE#$1;+RlU=8z`X9KplcdbZ!ump}AvJaeh@TloR>MiS|(B?uqd^=O~avq5i<h@-}O
zW=Bg3;?!tQ%JgNP)M~o360lKZGPia?cEYEY^LRu<9@|;}{@~@RASEz5lMbTNrC-!i
z)4{D*^sj111u*I5XDMCUR$pMHe;ye!QexD4x95}lXahQ4k?&pDd=S)EssFXTO^1tL
zGi4qvEp%a187k(s=OgAe04gxR;3q>`h=@b=toy4%bogV|{W0ra4wdk;c`!x<!sTJ*
zWmTV)l{w0$NGVfhU``)X?2ajHC7)B|Z0IdOA(5IcC?1(00b%22pW+tiimPhC$7+hV
zp(IOFMApT1v5zMr;sacZ2YKcI6qh6U_@&a>@?$miKQ5hl!&(+Pf6=l_(D_yLvQw77
zIKOtkEWf(PjjK#NFNk#20)j)TrH+rB_XEoO43zmKAcTo3<dGmvO*N#vN#KaPmo%9L
z{?s1>T=Xp)^PHmz{b?z?e$`P0VE%cR<vONReddBgS`9c9`2C*Ac=(y#RG*cd#~Cc=
zL-w+@>awG}5bWgUC3P#_hLC=bK%LJd7!xiYC<ck4h!epCd|Z@p0RSIQ90J54E8Cyt
zV0<=cF$qU{m)2(AJntx*SmKBotiL;ILK)9a=?a4?dxjN12$Y?UGRLB7_>>WN>ko|6
z0PdB$!1M|F_+Z?JNDYoe9F`NQW)cTZmz1NN+H&N=V#lG6${oe5_eay^+Yb^H`-6D-
z3vMfxg6IDL&xgVOeq0MnuZ26<!_4+rw`6`aZv>dVy)Q1AlfCIqaj6#ALrNSR3n&#P
zBOcUHFgtiX4Av2`u{KwJ4v+)GGLF4SO$*<eq)0)L$^StBZG|80x@G(&{a!{2t$6kW
z8krs@Q`^1n-Imhq^A{9p=Fh8o_uP6-zp_PY-KtI5rLhv6UB}g7Z{L*_+L9`KTwH#>
z4V(rbe%MV55HVqU05@G-xb?|{7!Ix$D2bpCl44$l3bG>=R`20)v<e$QPEIwHKdm#W
z%t3Em`OFfgfA+1uhYmk-+h*RiPG7@%IF3Q_s9&AC^37;!-?sjcjLb75)0|BH1=>9l
z^!>Odi?|lItK!`d`dH}(fAi=;oCg*=Jef4lX;yY>B;u3F^}RGZM?aH1$PafRU+Q&p
zz;C^uTySZkDhEcyy-KamU-`vf3aZh?=0~60GVX2t>w3w@o_n80)oSo<M@qu!tRL6*
z?7HDC+Ilx^$)CRI-Se=X&z^48w*2iv;Qu}6)qxkj1^%1TKt8(1fd7{S&qb2qT11qv
ztRl>I#XUM7Y2qV5jBt@=7Lvnm_L&SVP%s?VwGrL}7Ya^kAPh5`DVZAc!Y=9~$CNwh
zv0FdbLjSYlA3E2uoEC2V*kakaRo~ABJN961?wnuyewJfP2z!&BShM^fpC3fP!5P~z
zKeb4KW)q&ci*kH8A|7%uo=XKeK7jLHXh1w?An=D5#c*J~?aUO>*N()Q&)m`6OqRku
zaYTZQ{2~~IC!V>Bj@Y7{EA5ZGeYT~3H{5^i&kN^V9vN63^1|kwUzmf}o&4rRP~h4>
zmM{B!VqjV5dD{IeI{r-G4$;$pm}Va$Nt53wUys!LhB>3w<aWNcrnF+PL?^vId-IF(
zc8v8!LKGywVdJ~=<36@e_4FW3<;@qekqhQp`wzY5_hsMfu{ODl(((RjrQ>Max7_))
zQUmw3k``L1Eexo6gaGyl&Km-_BE)BQC4~Bb11MRy1EthBkfLAwV#U=#mIKrGhwpoK
z|8I$hp+M5_>3_-6jN8kkkE>D+TvyeLcIgK|vJWH71tfkX`w;@bglRMxs>R?njk@Do
zsgYc3!AD_HEQHNp>If;)Z<HU8kC&_NcgH;`GAzW@MU2y}VSL1kkLb4GQ5NG-f|d*o
zBf{@O!$^XbRM#O`9H7iO6gC$qQo4yE;Z8T3`p}yb7F&AKy|W!!(W=14x>~fbj4rtG
zft>N+t!rP($@ja<r3;rmSi#|RzUQ9jK+?;F1s}uPhq8@{5Xw*Bhl56_(0Z!tfPxTC
z^e*EF5DMMSqk%xxT>9f?$4hkFQvEHRY+?iSolB+8tiVyvk;2Lx3)wg966Z41sVFJl
z^Wp=M&%78Axq)y!k1N|8)|WM2?-(+;EMMQVgl(3hswOzTWObzlc!KjMNTN6K1b@gR
z&tQxhFlgJGu#s00{wiWRiiZj{e}zY>T}DP8kMEc^Nh57libamC`p_o5ZZ0ewF5ewJ
z7^4c&FR_K{Z17VGL3#!uBk%ijdEk|>!9YM;rbL>^im&KDT(Ri?L5)j0wZ^|;1*Vs9
zw+qgBj7MiBo(n@Q3D2w<)*pgbAk7OCXmj-V_dSevl75MPE1r#56?#*Yp!f`g`&B;9
zfenw&!(E=I?e)w08Os$KepQ|Q&*KFu=bS<8BX%E8S4mx;7@I-j8Z`-19|;%YQlAQ!
z3w%trWEQ5MFQvQtKQ~?paa?9M9JK-ALgzO28{&5o@&;lsh6Uq|B!pRjVs^V~pH=EV
zawMmff8}pju*$DXCOp3rikuEYRj%YKk{Ti^cRW;zm)IbVR4IoAkFYP4zoAjkNU6^6
zq*HPal1S>2g<5b%eJ-ej&GvM+Mv4YwMk53#ATmN1;v^B@@DQ0MMGJZl76*H9=JCwn
zR>5o#;t$^9UJDNv+AciP4uP5Ep&;&*`$+sm_}?Os1gW2cOg?-e6{0_v3w`brnRpmB
zFFlEeVA(qg^Y3zg(vm~|e)E3Y_^CChw5a%4L{V7P;TKL=`uj<NOi!NhR@>TVPu>gi
zpO}``rN=<V4$L0AqYs@iaiPqn4`2BrlV98BxZNkWQP9)!<ielnoYKBixVFx4-jnVC
zvsOe^3Q#X2qADl~;Socgga*M0wQQirm@x58wQx{f5s1L*2!xl?<3^Nk1cLG8O*&L{
z4o~Jl(V5Z(222t^$(3#;>yEQyo~@fSi3S!=UiSXB{Sq~mn55E@k7x9(xnksow^$VN
zsFe!q|HOKgICh*;<<H(|-HZ)+PLt&?^@#k@lJp~|n~u(}r7M{EIP!#Mj!&r8LP8W9
zLo!C;O@o?b;#F>1m__8LEIy?|Ft#u|Iha45CvGY6NlO<~$YbgBdhv<4$#Kr-=4stR
z<e+ZzPfgwThB}!ooHpatp^~(;yS%LU*$c9?^p7odM_=61Pm*u$qcgY4@@D<J?av;;
zoIH)_Pk+pb4b)zs)o?{|Ynbga=ETo6Cqg0`0}$CzLzfteMKj6VgVTb<foDFwQ&EsZ
z2_Ev~r8};8CKoArDxV%spki{6?&hbeX>jE7%d>{=tUsYx|8ru@itC#W$;?#d$K;X;
z6ZbdmQ**(n&6jJkgoD&HTVhZ5W<&0i)dyAi&bgLNX}hjVcF5AW{#4ILl=1hQ7-d^<
z<z>uG4MZJAYGJO-y_f$Xj00nchTEgX`wMqGKGWMw;BJUlK3|J;bwV=8D^ui7>+^xa
z%rYgqGi->}sy2*H0SVHN=f2u6SPI#AZ{GA5x`y~UY*J{;6~l*aZSz>Cx74}U8nS7U
zb#WM5@%xITjWl$X#Ae@J+9_)Mn?+3O-mb~ud`VYcv(wO(S3!HTAg)@eHBbv!sD(!G
zf*_a36E;DDTiOVAG6v~GmBxtepgpe=3_FSn{d~e<knwg~B?|U<Tns6kJT65dO=-yx
z9wwgJopb1@^+<U1`PEH3g*VO_G0$RqVEy-ybaU9cT}K(S4iB9>ZT7ILT3i}f^{#S|
z+zU~Px{#E~^+ZlBnOAzcU>86c;QG*@AUm^rR7O>lCJ|8x6&k<~+&1<KuWI4qOI{x3
zEh#aTwY@2mLMG(pNU(%Kgs9?yfB<C*3bp3C!|!eiWu5YO*H4{z(zfvW?1Djqn{*zv
zZ~dD!YOKDz`GBm>zjIfWN{dDuZS{1_g2F9t$=#&heYZdOXmRC4nPoTV_t-XBe&yL&
z&#Uqmuf0eIA9K7kXzz=%Trh(En?G4n{=$sb$Be!w__DJW?5;Jky7*BT69!^@REUu&
z)(GP&gllBqNDXESGC$dd5GLm`5fN{){r&AL!;6cH5pt{;eX_&sVn{-1-aE4V?n{o=
z?6oG1P(?duuA>H^VW<N{b+K{*+A-M3D*4b=H7P-^qn0fQStU=##}#yfn+QCsswwTo
z(*Kn7R(hl-DgkL}J>;geNgInPxmH@TA4*f0{)670o>nd*Mifc9XhAOT4pqRB|C2&M
z6h2ub6qF+G5}sLM_6CAVDkc^4n-h^|vw4z8W3GiATu`@dNM7Qx)N4sBlP8X{lalMo
zO&@gFv{$BK!$aj8@=4kxF$>wEr23R*x@YPi;3kOla1pMcRfFjS2O5)Qn1Mo}Rfn(w
z7*8pJVnO<v>L-js)r`_$SQlc7Bv&|#F5lg;ga(!zoI!8wa{NGx=Ck-kdZ9|H8cd-Z
z^&H1KK*Q(fRY2n#{WG93W`|D%&3Unu29}~Ph4)F+$#PFf$5JiED<<nRwf`+7jdA%X
zg(%oDQHF*{zzHvvMVW}u5UMylToV;5hRTUEk_!~X61-{DW_8i3jrK`e`{|TT*3K8E
zZQT&eN=k}VCG2F`)fzKON^5>I^<vWOk~4Bs`z4u87&dYulP(;MbhKixH)~WOvFFMh
z4cQeMW@76nIHKjIeAI%+<nD+{J*9<)M^sBqA7SGohQw?dW3ysxRxvhNOd#}}uRCdS
z4aR3IbYRNk{~7lX!vX5kBgV3a8ID8ANIOJkW#}$5Ngy4x2$7+&BgVlsG&h-ipf%!$
z-i1=!5%4jJgaYPzi5o|-D&X@+K-59jal?X{x>&b=yLjP$`h>7J{rdYSQI%5?++yK~
zaW77@NY-uZc7I!grSG81Vu`K#d!x-s^tTm>syCXHyfsB)Qz~aAp8pfE8s`Uq-uab2
zRQghW3id@3nWRO#G%s>!hLjhw+@K?29T_KLT!xf42v?H=glp(04qVE6l~r@q?2|;}
zDO4`wOoFsPRv`=(nl8~NhMY(L81#J3h+-;Fh+Xmi=7X^P<mjar|5By0($R;S^-EZm
zzvivvaMq=}<EC<J%ZsXf>r$&`vB&h8?6D!cPolt}!14FMp^|dvGG?l`K2#2bMnhQ*
z8LvepC3Ch$MqF~wln*!gj8(9fG1ltPlq&JkC4>w4!8^9Y&0Mee984-vKM37LlWh=f
z7-3$XD_d+BR6`J~dSl4WtmH|0RY}3JE1S7NHQgkYlng)AYC!yg5!>I6Wr>v0EQR%W
zYTf-bmbP1!KYzVtGdg(hNm(8?h=mOtBPmstZq8xvL0*KCj+(z$w!p`H_mLOXdJ5hN
z^Q5^E`{$Ypk}i!qAYc_tR&Hd2NcMVqttqc2%q~7tl+x^l5y_d-2Yz(fSVxrH^zhIT
zEJQ%z{6X3U{!N4B8Y5!LE{^b#xv}8VSk9%AUo6LFP^@59*fpUZ)z1;?ZPX=*zV=vi
zMT(~rfXqz?W?fv(V`toDig(o@m|&jsh;xHncFX+I;U9xd-|yLV(NwH1m@s8~K<JT~
z?Y<25yZ(Ib@%F)L$<pbi`)Q4(EpxiRvgiO~$JXYTv9W#UG)#$n`rO<X0x0XTb_gvf
zW>}6xNgwAAtW4<!+b&-V_p<Fo2*Y3&QKe&?7z6|t9DK&>T77HcxQFOfWr@KfrH$$z
z3{WhwFoi`%fP6qldECge(d$_sSw1RdBjVdC&035e8eH<4^<1{nP5*wFqkhZr67?Hq
zVQkf6c6}HP2gIY{Q-nfzak(1eC07Lv7(n_MpgxMxQ*mSwx)4^3PewM?1sQ^LTw%aO
zL%c4TRn57xWn=iX;;E`)8v0b}mAHkaXQnOQqe?f<vJ;NSa~lmDAt}>`N#+L^IaVh_
zMcxIBDrxK!Z}7pYh|w7U3-0BFL=+y0fMdqPbv!&qug!A2lmA8W0cp*Hi?}Bx>kx1H
z5tTPqBNybu`abmOg9pQ*5`x_msk68ub*@9OIN<T&4@c_qXzz5otYEBKn-)ByTMJ5P
zq&}=*>ZE_49warXx==7mYWm=!)W3O)suy5u0SitPzDhR$v2Uc#7_pCR7UI}YeTEyW
z5tletU57_T>Ld}VL#}Gbdf0O@^S{(ruBF%XU+1$0^n~MU$LI8t-k4>uV8F9qe@yxT
z@Pv}~8cKhFW*0~M%!;r!3>XDXL2_y&gbR|20B?TfGvqS$K+t(&s@_@P7}x2!5ot|>
zn(xo=dVQu{TKXVrZ5d-B!%U{Do8&rx;(K7_G@$T}<rz;jXw}Ds|G&oa*0FuosyED%
z)v?XWoR*Oz2TMhxhJa$4>Jy|ewH3Uf3@tW}hxds+1onQW<{#ot3VZXc7Ust*7P;Ky
z)fL>Dh5ELpM#^wgOyCM+!y+Rh=_ebP+2U0-Y*)~|w4_|x*Xks7lTywW1xa$epAvjX
zpOEwO!8?uWuL~UI|L5OyP+|8z`qf|G>)CosM#i0%O<xnM1(K01+h{}v|Eo&g1_ir#
zBn=s<|E6LEhO<;3!+NRB5aY?vf<=sn*e#h@(xXLNMA`zSgWeUlN(~;z!ZLvr=;l0^
z?!th$eeNEGNtH}YSxn_R2`QJFKW37ZIFqCd=#{W`aabG%w=?jE<oH~Dzy3-;n)B_A
zZm|=)X4L<xMYEwx5}s)I!?CX#Wvurr4A85-)}J56dB2$Mk#9<os1j+XDelU2j_XQI
zisV)*s_uA@aS#t=_?bKfTac4jzXVm`wXzE{ASf&yt7A-DbwxztKZKHe)27WSnbN;&
zS9|S3TgBXIlZJG8vR6?!tJ-!}mI`{em%e2?PBSULe+R}&i@2@yK;J@(pwA@Ge=9A}
zwe}IK<P2NMN4p9#jDQmiVUDEAf2}BlOax>mmFug#+=x>X?d7zD!JTnAHT9VG;A>@M
zA}ZE1-L4EUGuRm@eW#?sR_m>qy!-%R>KY7SFuxB2NG8741_g>7MON;1Y0*|5&#LgM
z*QgF=@r7(KQg~&Xd#Rg<X~857i=cN)k0(x!{dia1(t7zVimcXA-|wnZT6e`JcqsFy
z9rz?tTF_lyTC)0#?atTMMg^xU=zw>_KmIiOoegxxHk4)j`E&Q30L}R)BJz`vbB-rt
zG>e-KxxFmLVg%-^voJNSqJ*=iZwMWUPp=w&7;-Q%?O4x<RgJ-Xm_Bi?2%$h#Q>rO3
zFA`dbt4>Z3)$91AL=#<;8r7G5V6Dov4xAj9deZu0YE0FMy(cVX!Bb0S9g9e%Pg>am
z{dfB?Ryc~*`J6@+(i-plF3UF#mLsV3(mwr%LRgwX&b!Js`BzAb`lOAPl9|PEpW>-Z
zGh`Ik>)<_TP_N86kMj5|I}{2v9f48MN?tl(2h5RqktU=$O_3(5^6WY%BF>wtDml-+
zH}Z6c<DE|Rh>72~V9>l*FXg}3;X>yNy<=l`&K+DeCn$Z$=8+5j*kiNwIaxOMmxJ@R
z$*gPVoddVOc<JtmBRvnSlv&3PM+P5!`K=oj`+Ksf1COs7D9Nk-Sw8#6rLw&60qC$X
z=8mtHjv$k@0I#(pLJt^oSM5NPK%P(6Oq3TjcnW6~kD18}XZ^iSF?pcW&`P@^Odl{d
zqFS()!ub?JX`sM^|ARS->;V6V?2nCpzRGc*W|;NoQ|LgmzOPAn6Mes#_DSKdIZiT<
zea7B(So&S*tDm9m`(EkCe&+rggY<k}NKX@LWw|xRsZi)Gj6_qYR2K$3Y#6=>m@O<_
zw7+D2iT;};RXL<fSW(TK-{>LoYUGHsNJ}zH%Wl=04>Q|rPk>+Hj?pH<%1z|AYn&*|
z+r~ci*cuCO%&&RK=tY5T16TJ3SZwK0oLWo+5sXVTSJd)+YER|JQ5BIX=32*<Bju}5
zQb0FpuIldUoHE2<L~1$&P=p*Qh$mgHV{wvoX8%R^=2w1aDG5EWWBpBYK;g_i-E}?8
z^7nF!|I)AKzxAQ5IArUpU6r8`7r)=NT+f;RU3Bmy+BvjrRZvjbc6#c~r$@Xz<@vr6
z`}!hVe}XA1%lekrZ4^KL-kW_!o}BbTUrGM%{F>u3TUPeM6WyB}*jqRKl|ge0RqND#
z0~R#k^Pwxr(v!d@uM&*oi3jgxWA+ff5{|D(4&$r(a>bHtRZU7uHQt(%(y%^;ugzvy
zo1H-q8SAtYlQNWPVv%-yc1DtGwRU~f6H8>0^J|r0Z9+6^Fq)7pT3XX)d^XZ}B#Xah
zxc$TWn8f-9b?4$FSNJWtB8Mbpx^qriK>b{Pc|hiI5?~HsgP^N~eHaqJ?a~Uf7o9^_
zMS7j)A`swNL~E~)0%XsrTa$5f!Y#CT*hP4ec}fJ<r=?htgGf)4Rfd(0qSlyK-0<RK
z`3c+c<tsOY_=R2FxMWq}Fzfj-Yb^o6`S};?RQ(u1!!Er}2b>ExFZp2pYW>#_Mz)W*
zLx)~?k;X2MjQ(EV`=6KeZ<ezmn_rOSPxd}}<`X8ru<BEpJ-=w!oaZIe*Y!Tqzhm-u
zbmirhUzAJI?7#JEffwlTYcji_KYR9?zU_i6U!X%VvzM7BHN(u-ME(3EEzY&72CHd}
zNQnp)b0(2%i5M|brouf!jj$_boXG>kW>3+!W)s2W8Fm}iT_TDS=lP0<9+Et#Kwes&
znw-S7EzhxW-KHW@BQOa^CAC4Gkzre-O2cQ5nyxA@?_T0B%OT^tPP7$<9(|^0dSG^F
zfPQK6khoc6XZtCSv9np3<BA7Pd4{%3P8cV#_FdKSvzWZ8Ousm&U-!`mXpc_KTJp6G
zW5{}`K-vL6cw69)$OdntdCngpMd#7E(qYLDwQX4CiNT7^2KYF93JVc3fPj+<OBy(a
z+N20Nm&T5P_$6bV-zW}Htr^jbrlc*|sl~Nx&k3)3m2y+DR=K&GdWC~vP_N;FR)l#7
zOvIr)r&@9_59QdCGqqHiM>y=Mpy*U{Dk!>HvRF;fEVClXL%v$wB*8byW_wPhJ=I*%
z*7KdnDj77%s}WOJo}k&>YNAyj%^{P7c?{z?(v+OmiouCbkL2PhJ$-KUJv!*M3R-hj
zq;=(O{pXdOEXQ){T}6XG9Ayq!^wIoP`Y-Q}rf=sBoBzjxC8mJwz5FS>bv8_4@H+FJ
zIC`jOk$>2$yV$$$(7|uX>~($jxlQ_4A54-sg~r{~zh%;_e`(gXrFUk6l7H7LbMzOa
zj#Me1G{0+|VJ*8Rwlb%rJYKKM6Y@aHp6<K}OYty|e=Dt|Vajeul4y;|+)fdTWxe)W
z0QvDb?B&>NW&@N~`CQKZDP3nDf*S%6J#VQ6xT5C>GKaY5OSq(bzMuv}Gkw$}#74L;
zZUr5yDh~;$5jmn19XX$W<sBmjmdo;%kweP|tDT#*8?34wTDBf0pC7ZGv6aKdY{u)*
zmVJh_Z!vHPhp8q!t6${b0aGYx<D2y5t|cTd81lbXB6AbhE3&F7!qwwrHdM4Nhtn{d
zMrT;`1sx`I&?lJbnhq1!RJ~`GGNcv-dS`mFfS!C1EHeC~*cSGl@*m)(w-zGs;_@>8
zdu6H>`Gg1$ChQC@f@h(s*B7B;v7>99s+bJ1Fck~tjYPW|$`aW+$NM34>VyElPAz+k
zu#7VAFP=2VWZKZ`H@cT?=}y}W>(#mg?bmhM5_kmpQ|IK0NJTMQ&OQgUX^?3lUQsR|
zXhm58pw(zJR=s0G4ho6I7t{K}h>Q$EL0+p)w6IiBi-?G9Y$dNSNbp>MapZtAVE6HH
z2;W9<kI6*`h#Ct*NKXgI{qh>BYPUA+Mp_F)pPM{siOIBQo~j(3S-e^vCG~!y=U7v4
zMGv{BR4c7T%MP@C8#<~K`y%8Qx39Ng>>S2s7Pji%qum^ZuSd9r`itHogMs=BhWZO8
z>Mvk89S?;uk3t9}AtlsfNMaFuBvvV%-K769NhMVOPDC|+5OG)@e=5{eulSQsDBmYK
zDSQGW{%XWse6lngncihO!Tuc2nnfIdDanM`Tm-Cs_+5G66CQV_1*28}Q)TDl=9ioq
z7c>2ez0+Vsn&qaBh21m1Gs!b2NYaCgTQymk?)Xc&#W{Tm_~W2b0ox=+GkL9W7ZD>v
zwi>Z;)ZW@SL*^1}^ulrn^m_jbc>LL)-*qrQ%Jj=Os7mj5$6b%H>2!dU2(H5_d#ot)
z_qdB(Zsz8>3L4ckjWtM4&0u`Fd<MIkoJF%zlHnj`!J9gvcOmytO%sCZVJVa^H+Auh
z0gT6}<-r&#O15}W5NcCQs+V_)Sf1w;X(;YwsHQxZ2+o@qu|ic2tf51v`uUH_%V=9;
z@vw1HH>qvYZdSip7|D0w+^3Xdh}u1B1*w3AGlAENbsut0wwbV0on9L~^(PB`+=82}
z?=W~Y<kH*hh%^GeBH!(#tri?x6XS!_u}8aQrMNS<989qy7=ubHi%0qMyhD`d6x1Lh
z7eZQMWbR@@cjAF{TC_emz;<EvqV<9PmdhnU{reAH6dD-Nzu$-j!O8{s{QBWrUz6pt
z8~Q$XL2o&6A(NMv4VbV9xt1cX>*L5CDMhkF8f>?q9FT0M9SQ&ZGejICm7}nH_K{I+
zGmblGDDk5va)2GiyqR6oCH!3sBr6-&Ae66k7T4?`cTuy*ukFV+<C^E$cb;nmrx@2f
zhieu>8u9yY6W1J&uvQ$`>?ga~7UMZduwIkIH6jNzgWZt3!TU);l`cz7<Jbig$GNd9
zIvddik;CS3jU;nLtcOtDmYV#i#e&!-iq8s?{G2X<{tzs37KSUL3oc=WH{eZGO;)*u
zhIk086WVKk_)2r|gz*!0#uP>0ePPdGv-RxKZc*pCK`)jJCS@@DxOMBp7OpQ@!Q{oW
z=)sG!d~N%=W2H|nr`-$-pCXOOoWP5zonnVxvtp+ltEfWdaS+u#M#J9|eB#42MqpL5
zxK@8yGQI6H&OlzVdM&`!DF91E0<c8HE4|OD&|6DdMNhs<0xIvY?2RwW;SKBV)wxw)
z<v8BZKiw=pC3UqrhCI%iTOF6Wvx5)f=s)A>0=-<Z7dSpIaO|OLBzR3&(nf|$*Q9qK
zLmG1#qWQa4-e9SUEb&OB7U0jl4~@#)7vU)drBXAwvUE`Ef$$yk_>xi@Ng=SY#nv|c
z=RP!qE^V(D)0(~YyL!P(bOIgR1x4+Hdh5^WYdh0%`UcoMwVg+m66H3k_|i~STc`y!
z$l*^w9Y8Yb3q0PFFgZbTJ{Z>GiO8YV4i<b{n>)?iobav!i8tHp@W4(*J&&`?mtUf4
zj7LPQSYQyz10s-BBCZObhpLfCSn(xAv|&2M$LN*IT4~c}PpTLx(Z_G@oHlo;)^^dv
zb6EiamWaf&`mek6LjldDh(X8S(eKuYl@>=;{ndBP{99X_s^RkBUAMO1&Zm26`^Oqe
ztX;?bKaMXhnY!vj{lX5$8l9RY{WuGOtvB^QPta+7dsihqp-8i-Kb_r^+f<LkSm#y2
ze6?af&Em52ES{B<hU^k}G4jJ2Vn`f|(61KPJCL1M?3{;;yz1(>g2N&U<WG}RVMg1G
z)rj;=Bbr_Qp8<hE%kC}H&owD=WRIsgJ3h0Rw_p<+y^=}=FBQ!`JBsROa5~npl2)u*
zxSy|stBq>8`)V-aSG}|t5x*i>f-GPZOZ1IQgTX3VsKPhg;j8Su>a4WHa1pjcoX#hr
zg|$sC*DD0!aKH^Aki-MZTtnv~Q`b^*OXJ-o=VNa@zkE-i96vEu^=q=ejpF~)bKRe7
zSby}wq9ehkrW;zTO3IK_HDGY>;;oVLs7s$I^1j)bPo3^mx9RwGrL8xdlk3(R-kq@p
zqnl4$J-tnKpRG@4_bQT=y*og=QO<AGvB(J5!wy=l$-7!go3?xqh}30Q^4Df==^$z*
z3<+2hva_afVvJv4MhFoR6R0T!UXaSSRY8%>@ywuBL9mRXe5;<qg2eY>nOcnNg6862
zZ=P9^=+Rf4^u6LdS{+v>2p+GP5IC)(f!8%4u*Tr&>P5=f+kpGMU<%dk_C|thux=8y
zZ=8D~Q2WL!8EvjQQ@-s)B9HRR6Uxri?eXor^?Ut;D0{~l6f$C5c}3*Zuz$3YUE$Av
zcH(q&s3S!Q^b1;3a$ryTrmCnuCptFzW%XM@{!^siXTRB$jSBG(Ew{08L&l7f*b9sI
zzC`=YT`RMhlY%xJSJ;%HH)UCOULFzmM3))sBzbzj1*2HcE;NHKpEhKSv_(2~dQi*!
z3E-p2sI%y%*5-K&vQ~=_JHhcfi)8m4#b8=uj6xct5JWS_h<KYhQ;Ue<+DD6v5PL+_
zjN|nrNZ9i2N;FcF6R&0yowcZNVPC}f>^#EP+;|6R5vzNsHce6)v>LAi#p(^9G&h}x
zY&liuMM@$zD|DU}nXc7KWGQ<|{*-0qC;JA4EV{Lz@9tcA#viplop3(;*6R0ay^^qQ
z*v=c_)=f({UaRS^gx}Qfl;~If>Ci)#pZR3=+VAJd?D3929beXMW?}o0ot8}R=E!)e
zKa)Q{z4aCr-zcB72W@vHm2y3qOXyJ4Rrb=97@l9ZBch73LA-_mZx3x>0Id+rZNZx{
zpY*ef#EN)_n7Xa{<7nd@WDXC!=7M8|jhK`sx!z-kL^-mmQMhzj_k+Qjk}1JpO{=%i
zc>h>^Hh&s@9Of&{=Jsp0Lvg>a&oW_PWB0XbvRQr=8TB~mltL}mwH_^2<Sy`<>Yj1I
zdj=y`N1LMp1@FO}=EF_oMk41RFR8?9K9VZ=CK$fe1AL;m4&gyF*W9I9Q{1XVWvRJB
zlUP~Fgn?s6ESsWAEA@YN4I4Oa#F8?Tx{~_qUrJq>+Ob>tTT|FIslB7BO_$U6<?eF*
z-Sq0r%UAXDCnQ?uS$d`H`Wv*<%Z}d94U=N)P-&C?d#g=_Ro^6FbzECmD&L|a=N|kk
z8{#?zTC}T5#a)r3x+L&_Cw>jz$Ph=UwiGeP|9^Ejt`h7p6dsvW-$ESv&!D|IBT8tm
zl1a<2Z{N>UmNI8fg(^*-?k>aGbj4MLW7_T5YggslueEB1EgrXQW{(?nIDZZp%9P)@
zt<nT9<B`Aht${Np(inoP7_kB+i0BIb@9q52G#2ra2w17xv~ZV|iru}8onw6L3qcKr
zu~D6E;embQ_T0+wsxZOsL&5^Fz;Ls`aPvwba_aF~W%iKj<z(cOLQ70U<O*e5sQHO!
z)mEJnfl8m`G~(JgOr2Ww{!eW;TptjTl|g%c*Zp%T&*}&s!Zz3(<3_Q69&8-3>ht2_
zbNXMY^#lDw_uAy0)Uun_rBSp!w#dWc@IuGYa4AIo-OTi#f7EaF>AmJ4=bZM=uT8wd
zDG9lV#*mUxO`38h0KM0)<gX1M#W_N28Q2$6RH!f_<YXgpus8CxJ|G&smM~yjBzufV
zDO$sMl3$B*T?D*&Yp86VpWt%Qt$3>S4%AFKEC60WZzZm}f0Pt*RmFrJg4$x`OWsI+
z`m-6QUXBWN#F_m=mQHwOL*2DM&bXA)>)S;OPW3dic$)c%w0hROcSc*xE2d0;W13t!
z=W-q!r&t%rPs;12FI>S?9aR>?y3X1xtK~hH%WO@_f@QM2;-58E6jn8LJh}OVEFXY<
zv=9~eYZ0v2E1f$Mzv5+(D-DsqmFl7L*N<1#B33J$WS4ZTMBtRmRJ@vyx5_*jYKk{y
znxsKkIKU&Q7_})q-Nap6sU96S=d}sAT_^d^AbR3B4Z#+_jNF$`v0}A>hy}ua$6^Z!
ziR{eQfqWTDrql{PwlatZ-a<XjIc)ffaL=iT6y%6V0S|L~MFFc=Nw+Se5YFk@rJ$SK
zuzpr&lbn~4*;N_aYuebZ-KUM}R=;(JMp<n-bKblv|0>N?-UXK-fPlSs{7_;JXt;-f
zU1CLs%FD_C2w`5Qh_Z<!EBv^m`ivKyr(?1k#Ic+PdD6^~$-UxphBb_<-!7zI$kbkG
zE!(tA9hjnA9Wgb$LuAXw($Er?l#x`%z2$@KsJvPV!&<G~w@BBkt@&rG*iq#*eAbcd
zc9s!RP|%vg`;web-&Sq#v~8LqYA)bNXWC^<higkop32Up3p$LBi7K|lskYqd<%`Fk
z!<F0RPV@-mEWc86Uuk3<fK2zMh<7@UsS#CVjh8z$o-uRblsE89=d;czqLHh(GFp?}
zR{}}mnJzy#D;p!{nR7L^-Kd!8Vr$|zc_lNJmA;H|oR;(1tAIF-tV1-+gj%FOM1)|E
z+==Z5JZS{$Sn&CJ@;iKd=G^5Bp<Brh_#_l-uUyr9JQB;-(3*{>ic)U(WQm-K2ZBg9
zBysH~Mb#*dOz75ibWChXjl^H`7A)Ve_QIkj<x8G@{w0pfy{rZcmYzeDB~p_@c>GL|
zK!8W%!)gbKg~MJ4jWv2+9oxO@0IH7e(RCpEw%4d3JyLrNAKDdTY>T~z{>4s^*v%=7
zAQoYzdoUL4>LkVCNXZcL0?R~{gzw<QcjbY;;c|*$%51h|UQhke#UWoXI&cb0)#uVO
z8=Zlxg2^8Gsc{u5ZzPit*^;;lOChP`xXtvvQ|QwdB)dL0OrKAe()oPGej#Pj0i^~c
zBzBYndGH72VW-)~k4r`E%dqP!-(QN1LBQ!V<tSn$2gp>!O0dq3YYZd4f|3I4Lj^cG
zIe)<ZGjEbQWTmFottarrJBm_9L+Mm|a&=;bCszlR3!Y#XH`l!@7hqyxujM)-&y82)
z9U~z}BI6@7Bc(w;A#T(>dhco$X||_Tax*xcOV?^+-lRf+LY|ti1|&Hz5^^;%BGSY~
zs)^S>AkGk`kClP~&Cf5w2BalpH@)9KT0Un!UGo*o37Sir|6cG+)aX&K{N0Gr?G}A(
z9No-vtbKbf*ebE4v2l#9rOGxN?YDP;;)ftXUB=?aB{S*n_d!bky}-~Bc2xQiy!t=)
z4V7+Hy=Rj$*wF$=ze!MCx78@vd(ou8g>w;fF?5nJ<_*if+WSPF%zG`&LknRbj9s-A
zs2V`F7<K}13a2OvdJvQEvpPm#g|CjmUYR-54jr=`GsnEYcl!GHlBs2DZPvdme;#5v
zutTs+X8NI*8EaOM%jm+X)3HznriobHBiF_1o@mm?1-;n(*8o@q%#5KJRw_1E@Lv4M
zx6^{|fQ#W(Nohx=4yucy`NX1p3DQ(7;o+NZyBGFEqQ3EkaV?vTa<Ahl<*R#a5$Cq`
z>-UnAOjFi`1<onr>v;hA!e>u27FOrJSlfg3NNN%wPRH7w#V(kAkQ@PDD#93m&s?PA
zn{@8{|6kA_;cIpS{qdrV0~DK7X-_xXQ!2S(A_6=Q&j}xHVjk27r(2QWaBod1W~q7|
zQ@hsTxw#|eT5R-8SnLP8i#H{dPb%JIGyiS<>rn9_z5OA%z%_I31x_IpE1VYWJ;_+}
zg2rs&?C}CSVj^8LsSW{N>X7OGzpzpVSgGT}3Mady%8FD^tcvf$jnwW#1PU%shuOq=
z*SA*Ohcv~k3p6x{#B9Ta^pHWKYc-cG^4tcj=E}`2m<=ra#}@J0rk=C6I!Woj>-q}9
zusm>K0z|N2-wD3TD`f7}*$el)#9~wK*HTs`8Z^S!eNiX05gRI{AX+s*^Lse^7WGj4
z&RaBTEJAo*kIcYf#|Dv*2^R+*^>pnG`)~>_;eV&#9+`lnqy#{JAw@u!c<+*H04gey
zxIGKMn5!7RORh%@d+(AfQV#=+)PqPoKsF^ge_>OBjbKs}`*YL~m7mxS7ToG05K(Mr
zJgnNcKsl4e^AzqtM0-v}R3=Z5HZP!5kt7llNQ7Z>^YUm^d3i{%?cluf^3V|5zI<k#
z_SD!A8<ihx*$c-Y>D1=Zqc2I)sV%b(oMO!)<|%CU^dn6>_omY98Am|HlJj>q4lt*Y
zDVpEI8A$_Hk&)zxp`pCK^HCW|El7Oz=#->ZQ)Dv#D<^6DzvU$F{ohiO^z{FCN)k5G
z-=NvC*c*=ThU?zbKxl1au+=gA>fLZphEg~T6w1|WwS!$1;)!pI8z>wZ?`?5mM}lTi
zduGGV;WNzTiKCPBXJq>ERJ|UxbV{eTzOTH}hDAGcIwyx)3ALQRvQ>a77J1=tuU&D4
zH);T8)M0R^(wi<#OjKN8S6sy;0_0}b2XI=$Jd}hYxr!Q|Q!O@_7vysr3L4(TO*N1g
z_oUpU#lwH5K2zxhi@veTW4*@DR@H+u$1Y+crLJvzjP+ByckbSuuBHnH+)Y_LZq_Dj
z8#{uw?LgVcKArnehEXw+f>Avs#ltpAz)Ia%*J>xkWQ;tDSR7!C&ai>__M={C)>NA?
ziD3B2K^)IMV}fNA;~A51o>D|$!Zj8!PD+l%?HI$wVT}R<^gDwGPAe=?)kDS8mj;-k
zseI*9^O5liejcF9I92T`#q~qV^=qt!Uoo+CkIeSZ?r`l#eFJTllhwOuVz(}X_>8r~
z0C!@>e6yFvV5*}C2xiM305u{iJ^&|A;-JW3lb%>aKh^7*SzC6~QH!1F$31g@=Wn3U
zWaPXP5N)2O#k+PMfa-(Yhu0LhJQ100<B`=-%sN&c#hiiNEu$);yq?YK@Bp$F990Jg
zu3_Rl^*hLJRit?O0zlVhg`6OeY~y*h$Oe43Tdq<BF0tEf^?O!e+K|_lDMy|uU#<ik
zER@yfCXZdbUK#LMw@D_YZ>R1Pvz6|xIt*8pC)#uv!Mc?`R%2kRvClAR+R(+1H6A~v
zoK4jmwCM6w+g6YFqK6tk{$%UM9i9aJG<N>Yh64|rekN&tF8aZ5RTxnmF=S)>My4Ot
z^scIju*|5Fp<(f1nPI++iv_hJ%!?ubZ@CME_>z+9ssIB!aKW3Lo|lu7j-WRJ46cFG
zyM3pODp%Et((>{k#rE&Dh`<^&bXdz_@v>jn&QFd<4F&Dfcg>_3FEDmwMdQkQ^l8<}
zS~kqdpIp+t>oE8b8`xrooulDHyZ|3!v*AMsHNjm23-=*}udx}v#u2x#QQgni*Fe8*
zY>9+fK)-|He(;yLt6>z{iahZqwuHT@oI;;N-p>@Q$e+oVgY##e#HJ_~aj(PP_wva(
z&tOXd*DJW!5z!~w^}On$Y}n7pnx?q#c!;e+4HNHu)ceU|68V#3-2L3YBfyaI<UTF-
z7b5b{A}1DyJ;UR~ZVbF`&5$AnNMfvpR)q@Z_Qee7@F*YCKU4&Gy|-Edi+aW6cx0v~
zAQ6_84ckMxwu`hSdhHjPDkY98Ic7aJ&3oI()%u48UK>a1Uk`(;Q&GUScs7t^6^>J$
z4J4_f68jWaV01lA%~%>qg;+6>_Ov@~W>A7qMI1Ll?p=)^?p;Lx@bs=mM6gfq?CN{3
zBu-E7>U)QJ^<HF(sP4TQ<#6o{NUHD6e_ILkA>i(7Vy@os*2kcCv+D6oslLl9T25Od
zLL_FV`k7&$*lPgEptBizTfSo{`lk!8e>#2F`8Pfnduy87;PcvUyfme43}~to@a~cR
zSMMVF*&}+pVR!e=tG@S2^6evfn_VMy_x5x3<|8G4&^CZ@IN<tMK!_id;4|m^!E+a(
z0Qk%)?z^Bj`^u|#5n1KwU0uGXdi8$O#36Lud!=)mr+4+e{k(erVd4;?H;2%<Pe2G9
zDkH><^0dE+tfm7nqljuCIUDZ2R_x|y>WFK(A;Rfz4ysVx(F~D0;G?MZKYACj)JOEL
z?bEwO^}ScptVi^&>(e`_y7y|@jCTJoNb30XM*4`uE$FWq?TA?s`-cgB;+X?Jo?;Kp
zSC1#meV2!O7qJ?i-qmu<z?G{v=O@>_SJG5Z@9KL;`rMmy2zm<$vp9#i_OCKE!sjgn
zghliN+Q=BEA*+pj%w2mBsRX?{xW+^9yKzSE>J5nMyPwH-Ec(!^cM+Zah~AlAy-z8B
zRo{ChS@wwD*`D6AP5HRG_iC~cwB)9gYDls?y`{T?uK~B<nvEiIDfU!SIc2-XvkG&h
z81kX|F1erBo4e#gN4+iIi3j~r8-@E!r@e)I5WB#Lk%G$kJQIXl4QPaB<YAN)H#86T
zE~15x=$-1_Ti}J?TO})}{`Z~Jz4~4e<3wLrgJWiK?aAq5gYpNU21ap*_KW}Ee22ZY
z40(VaY>rotqPn67qUeSU;5~*b-?{H$A}gJF@VDLg7BYa3(2xPV_iE)8S8tAQXItkV
zfCL3ia;S0(pQFG8cv?-?A}`^-i;&0sE>Z5$i2Vr!R(pxw?a3t%o~nB%{g2*7blf9)
zCwuo6SmpNyR^g0$>je%+>L*Ci3%wv95pcU8Sxx3X0&Zh|UA?&$L2p5Aa|N}D)yrZ$
z{oLdE&;y~cv-ndZ+z>w8yNDupVBo5HZLh)KqPG~2>)tEL0#EPidq;cUThIx53kX+p
z2wkgW1%%wKFp(l?%j#zeX}}@0y6)oYE$)KeoZ5Qh0B?klpD?o#q%U}hpYhsGm`*GR
zefas%>VF%_Y1*8=$%>@_{PbQAX`Xaa`b@enTjZv45BaqGjnZ0qQw>&&)nAdBI^mb;
z*T(M&zuA5V{BHVp@OK7u2sjg%7&tZX<-k9J@`LsUoelasxLNSfV0-XSA^k%Rh1Liy
z5B=3#(>%<)#{89~zGaAIi{+f<hQ(>EWo>UAZvE9Z)b>hP{ji;3|Aa3Je=ov6VqnB`
z5wAuziCiA}eN=wbhtbi|%cH-lkyoRj#>+7*rbEm#F;`>m#x{zb6Z=}tS~WMusd3}t
zR>U`qAD@tzup{9>!llF&iTe|OOKOy~JQ>@oCeKYilKf7JHKk?Bx|Cfhr&Hcb`7w1!
z>N{ycY1`BOP9IaNb*-DV8`VBuC$&!NI`7tfrtZ<Yzt_vH*ScPpdWH2C)Z1InUhho3
zUo#>y(lXj)49=LGv7mlL{fzo6>fg(plKDqg*R1la53--k-rPWHFuB35oaCH!IWOeA
zl5;iZi=5vZ1~iPrzqE!M8Xj)=dc#`{e{JY!6y7MYQR7D48Wl8}(r8Je-HlE)dcDyH
zjef|La%<#f=eEdwDtBz|+}xG9&*z@WeJ>Y#q~`_arRHVlJ)SotuPASJ-kQ8Ud8hL(
z<b9I&d*gt{iH#dKZr^x7<0*}oG~UqoaN|>$T|UDs*;>~!x_C%v^FK+nA3h-DjbAL_
zenLK=J-@!+%<+MLuHRG;g+H43lQ#0->2&?kA8{Mr-X^)MJ${pN1<8{8kgm!_{BBz%
zX+Z~)SJ^x=fvs`Qm!2k5@XI${=|bmW)|O<@yQIDp@7#v|WAFo2K{%$NH9?C(n~R3e
z$#FFP**bcN)TAq%hw-zXUF4_9BsrAiN~_6XQv&HM-*HyRmq{ljjLcBtNhf(4+9;g&
zB}<jXq!WuF!%=-&L;e|`Cz4L;d3?7VturZ=uZ!a}`ET-={2a-U50e*_6jCm~NA{^s
za$bJR`JQ}?9F>ncf1>wDh!jmO(0k5FQhPE;8tz=k+F-xH1|$_QX2|}equif7EeDad
zY&)4H_a#=jE2&T4B+ckM`VZ0#*L(GQQcHe<)R%{oc5)y5rr2Q8o9zQW{vq|*V$uiS
zjg~Hu$;w@_PO5ZXkzRK0$MJi%l{BU2NHW{%ELHkr74tdg1GzmJEKhg-sk}gf<N(qb
zzi7$iGtO_Me4?u@$s}nyxh$;%E<2EUYCAGk>QDY=|B^rDG*Xk@B%{!ZSrgRU55!&?
zFOwzoH*$>r=sbbXzmpb|x22UNPB}n6Q@$aUs+l||ZFPQSig7+C*B}<)ueQ9GJT7k}
zwbiX83iCf%o=UpP14#?H!1*nGgETR9CcRCKNPB50igKrr`_dS4Rf!@8ROlu;mb`?v
zoep(A%LbCuY$(~oIyrZ-<z%lS1Bd;{5VT-vK4PRd1wC|<OUMzq5$3-=nWYxH8oS~A
zgWVt{Xh~=i&i}@-7Fr5gJ2Zc^#<<4@ejl`LXq(VZqRl`%#OavRrP6|A3VPx+^-$yV
zC1{J&m%DM=@@@uQaoX}}peasQMiVr}>E=<5(-COMyK!84w`%&~H00etJDh%u#%ag7
zAN&e_H;vP=t(L!hznNYDz9#fVgOkPaM<U7nXgz2HqHI-ia7n!DC|xH7oc-M*0PkiK
z!ac8cXyUJ9w{9Kz6OvGKjCz9t(^f_j2*s}x!;;{;$|vBTgcI~3zxeyfxEaF_$YD2N
zCP^}0u&k;2k1@QJ{ZvI&6*T<rqvD6R;!N?wcf7ldtMP|d#$?7nRU~{So3K}s#84`S
zOBE*06%)RY@Z$|Ko+-<S?BUmsaBCC4i23=+5<cVb;7<iO;?CHD>ft}!)%_<f#1+Ol
z2hH<`FZc-De=-Iu#?Hqdi+3Cc{1^aq6cU+s#d%}kM@D@-K^|Zh*-Z{3I&zj=B=3-W
z<Y#!`*|ZnC$ZoMu62cN{B*Y~oC8Q-ZO=zDmE#YvI6&4%+3&uTmlV@?|QF4yFiR%8Z
z$uGFFr~67<LR3PmxUz}YmDKr{^Dc>SzD5F^=V4v^gN7n1XMbl?$0f%J$MM^<ZkOLK
zyIpd7+U;St``xbd`R|{t6k`w%b-&cXu_4-E?++jO{xo@+yn<hf{117R%potqR(y-R
zO)irw<SMMSdE^?#TuH8zcgcL%M(>gL$p_>^a)aC?3&|q#CAou@3SR*$Un8%$gnUE3
zCEt<nQN6H~{D>Xc@CVJ}`r{O8{BfKIyBnW}1T^F*fpY?!x!Oq_pG7;2HXQAUyK!xK
z6zwe9M6`2g7tl_lU39lOIKGMY4jS)=l@+3)>;YpT7y%Jh@eLerqQTN6AEAAUb`9+_
zw9nDzquoaP3hh0#d+xRn$FI?TM&sB0;%<v@{1xplv@g;AM#BsOH-!9)=0N)f4NNK8
zQXDz8@WwTFwyOz`gWLMt5?&7G#JG4PD{;K#YGf6T@FRJH-AEE_XehqGFGrJvD6|@Q
zzYfP(v^c!qh+~qgku5l;xf<DuV-vKd=(7#S_O3>D;5g0IP}xBeFb}+uU0klX8rf|p
z^}5*oyZ1$WZe_ohsB?k6ea#AgX~^IVJFS<H&|!3YI~|%~XZ7r~PGW{#s+aJXT}pkd
zXW!(02}=`}b{erX;jx6m{1J9JRUGlf$ff-<6YQi{-_dw|s&Asbb-$SEw<G)YYnow~
z`E76odN1vV8;o(^07vmrrX$0y)a#O9m(sfT?a|jhyM2tkb^CrXiHQjv?B}}owV!Jr
zli06chF$%C8aw}>s*Wp;@4fHwc>I1Ki3Tb@L$pQ^tuYCrQD}T7{w9JHP!o(2Y9nG1
zY;C6rnNY_tQkzkuG1F<ZN!v_2&6Cst8&heM{+vXuF)jY=sL`Tc#+mk?{KfWj_Pz%X
z1>4;@d+$BFd+yoq?%jKK@7{X{bVS$htsmoR8=oKcO`a0=yAsMO!^PQQRn^ue^2#c6
z$A??m+OpdyLG-wL=y4Z6RT+|?%PNj#fIz6rYAHn&o80l)!pI$;J01<I=1mDF<S#0#
z458w9R7}hdPYz89C*_Cp*d*ukQ@icKwzA42#au0GyZmZ<dF2r`+0(nJDm$Euvcc_L
z0dR}(q?9T7;o|LGK~-IOC{NAHKBDqGz4PEF=Y?4h&|xLpc~(b?McA2AH0{Bh4CT*L
zomPF-{OM!a?X+L0D=jp8o-H*Ip7-T-ON$II?ujBdOQ-MEZ>=iIl^pT)RUtR8|EaIe
zm@ry+2{WfYkQI=<#DR24TWS_PVx%M=XsuhAPps-lO^rt}w>~<;8P?{G(hRGqqeX&E
z8CG-0+$?y{NbsTrQ?rOzCP9M)J0*Bm0xiL~EH_89<Y<;0%^hhuWNXNgL)p6}!MGd}
zKO@0T2~J3$C73JerUoU41XCvw%q38)8u+@ZRyF)N=uNd$ZRAS*Gus+gv3<mKlG$IQ
zGVM21K+jYu{d-vp#S&%KkKE&JR{`$9nLbv)__|fVUa2zTc}325hLN7@{OUQmGhxBH
zeYm@CaYuSO!smSvwI#CeQ4{IG+%(>p{W$i29^v~~MSDE5pQ_5$zp)k?Sc$V$HLCTh
zj*>Ld3r}Yq=~wVUW@;Mnb!vmE<!Aw=TgyB|khg?4;DgLWM00I6N407*DI3wLmJvw-
z@eS%(s0j+PHa(hp0h~2RSdYAs(#ZJ+Q&kwbo5|6D7NTPT8a`zHfgaWP(IK*?jBq|F
zV-saA;(5eW))9y=K$}g_S`et^sDU!n5$kGL%NeCyo8c@*tH+t~TFU%Hh*?_EV;YDm
zSwW${F*pv3)S<hPf4BO1Vy#)tC;O?9Sa~*<$n%0Za6{CpMNMoad<oB&0`L}h*lmQb
z;4SV5?Su!^TjcBFULkMhiUF7m1=#0iffor1x$<Qa@4Weo%T?Cet&JO0R$XK5^D1k@
znx>7s8z6UCnc*_Ip091(h=!71h!1D6MK^B&N4rhhkaa)bE%>E1$tv=6c)C43p5s<A
zMwQ>w!=Dkx*add6{VbnHzG!c=ckplRpF&@F$B6e#^vv+)c$Pxzknw`ZA%91V@8&%=
z*Y^<P`ipMv+rk`g4myR<$;ZmsWM*|HVE0bq>B3~{XBur{hI*L4EEZD3vzVEkqvld)
z3#qwfd<%9t^;W^`O0`<4R<j~;7o~em?FG$P8|awo=D!ZVS0BdML8sJN{&RgE>mb(N
zaZD`~>K^owcbnzwa*r{8BWr0bHA)B3D4_3E8PEh>p$huHK(kC0(iizQ`AzjCv;bNJ
zl|d_@3Vlsg=^LtA_o~%UJG?#Q-v{l7jv(hZ(EHF)=mY4t(5J{e4Sfdv9r_2<1DzrN
zS?C;e9=ZTsfj)<>Lf4>wLA{*wI&=fN2|1j*53<xstWXK1-Br?hU(!EjL{iAdM2oOf
zXK9DGH!i4CkQZ(kZXcYJa8A;yyr5H|50n2-s=mLAf7?w$!V<Mj|3JN>50EDXL`rx{
zSfMX-6^=3-`4&MkoSSe`&DpO~;|2WFVJ37OIsu)8{sv_d7oa@^BC;|-w-<DKLAMul
zdqK9>$Zlu5i*&o8*Py-78F*)*bI^I{0+fUV2MLa>{6vC-1c$nCNbQi?A+<wlhtv)|
zz(TI=O8SG9l*30|I$-R8u>-~q7&~C>fLcJe(i&Q+(N=1-l^Sg|<#H&OL%AHv<xnn%
zaye+RSOsah{09&!(=B{?@`s!w3F$3JZ$Wws(p!+;A}A5VKN9qZs#4zq@qcoZLVGHq
ze_8{F|7e2NN@|y0hS*d_7?%xZsrm$nXApk_)O*N(!{Ak~e?^UbLh3iEvENZ+-RgDz
zCPKeJO<R;ZMcHws)R~I=I6jq86n1Bf!%7sVuh3Flmmb*;yP>{~(^utFwc_**eLb?b
zADtpjz9h!HI3e5P`j&oCA7od0LY&6d*6%~_xW_|7E!MeltPys%-;SQwJ^o*z-ZwM_
z?H#B4Kv=fd2*e8iKi!}{(G2>7=-zN!x6~37%?Y{#Wx6wm{?F|^8BNAIH-#%>SV?J;
zTJMR?<L(dE$enS69DPk+($}d|Q<Jo=5gn}yr;kyh9>O#FpzhQTZ7-dx=8yU^H6~+5
zg`{*n1>VQRDg7h;x!y&1Kp)aObr%T&TxmP>M*}tdo=Vdb;f>J&(wlmZ#)-VUJAG5?
zl(0|Eu4N>6S4Vjn8Is<#W_@YI#Hsq!@NxRe@O+m`&wz8oyQPc9McSvEtB0%nb_XWN
z`+k%iX%Dm;y@l3hYJVW^l4;)@_8%3VE{w*Eyd7+@(KPy)?CI0=_DX+O|FyqQ$Mg&R
zVYuIfo^sRcKd|r6t8ry(8JinN{}bK2t!281)8_j0XY_L7qBd6~his(0TCDV89BuV4
zce1%J7^hDQLi!Y~?l7V0g@#Ezjx^`)<lo8R?j7rFb3c=DKoZ`PwoK2Rf%jnTJV;-g
zkCl^vB{2tH2s`~gY@7x3y^HZ<v2)6Ki?RZLKbB6l%2lhdE+1e%rVU$Zm)eKDv>#u9
z-E#q}=`!;eE10k8<Nje|J^ApX&ACULb7z}#XLIfe#81TEhnz2SO-{n|-Z(xEX$4rF
zVpS($^-RM8dI)c!=?uzKh)>~p>P*rU;j^%nW^u2WjSpZmJx1R>2cJfHLY#j-KAw_2
z!5acnHoqyG*Vu4gthh3;D96W}a*i_POrV^r&~-IFff7GWtxK8ZeVg5sXb(Qy*n6YF
zU?2N}LN+MKzm|?L`(-mzbc}L!WBbKn{e1%eII~5GSahe*@Ka`re9ZQoL94T1=LfsX
z)W;PN^cV!?sf>$Yx<N4AAef2FbP$m`%rrRq41zXe?>uq{cB2hmlKWvekK$7eYKaE5
z1cTZ=2DMQJwKRiTl0hwCP!qfspz$KSWsve1q`U?x4|Ti({@3uyd;__P5=!gv$Drmn
zsHK>(hs{`a2b#2-QOB!1Z@$;ym~L>)G&rUk95W4$nW__yeF}~~gQIN_v<-p@2EinQ
zU_AI;Koh~vW3clwBX$#gqzy6&PRmc^+#ox`_+_%#8(dwQ{4!#Z))!w=9pcH;<IBql
z=Pxe_s@Y4HEhb!AQbD+U*%HF?<%@_lIYokub>d=<JVTCbj(qDjHq@($&o!=DtMWIj
zuUn%YG2v_zKDn{Ez7gBZl_Yb@HiSeZODWuQ$dQbv+^uNqqi&~z`zDY(8c8MPE`}H>
zn)sg}X`x!ec+VzuB}tku#iV)5q$yPgNmB}6>@hi)Na1@ww0+@?V$bC<KR^q#m|1Xj
zk&&LwEFbfH>TPCJU9DXmW>W`0<LfhTGk@?7D-nNTX22zlE6e5@PE_xz?=UiMVqMrF
T-j91v{aPJHqD3noOFH#mO4hV1

diff --git a/static/fonts/roboto-v18-latin-300italic.woff b/static/fonts/roboto-v18-latin-300italic.woff
deleted file mode 100644
index a3bfbe3526746abeba20ebe63a13bbc07112f4aa..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 21776
zcmYgX190z7xc$}Ut!>-3ZQHhuTib4LZQHheYxmYRU;l6B&AgqQY`(MSWRl&P>}K-C
zU0zHK00j6cs)zvO|LO#XpZI^7|Dyk2#6?8K005xmA5Q!SCSZYJb>a&0%0JvD007nx
z0KoS3zU*3vE2|0t01$tEc!VEJup1#Z%PZ3}0RWJ7KR(4D7`VU@D;nDxIsgDrpg)>w
z002a00Ig)x*v*9i0Dx}#(P;b!`cBY1GY4~9000K|N5}GmF8?>8N^?W!A1|!HkLHK}
z0VLp;xs9jU&!G$eAlL~2INC+a+7MWn*m?i}a*#h7^B=q*AcA~Zm>Qb=a6f(k+kf~-
zT(GtHA%D2CpP1+eB(O>F#um0N|9PhX0N@`jNJ|QvFqw_L@sCcC=jS?p?ipy?hF7k}
z*3jdpT^ZxYNAMp&@PMD}3~fz+IF6rq?MGLIzsR@aVDIb#0H~n+aH#+3z6}8;4o;>&
zUKN_3c<)EYU%*I^=&=sh&j<vhfC1k3z74J*1ec`>%4-7<fIt+Y#QktDzyv<dtcfU3
z*9<p}agDK!5sq<=sqFN4v*__t!hXYmQA+biNP%Gjc&tY+fW+fyV+`N=6U(K}w%Bg`
z-)3eD8vJ;rtgwDB=PKJ)#;M!8!MmgScu5EtX@J*8x~^NqgQ)v^o0jVi9+l&>9Z}l&
z7jsn40WAvYKw|vw?!&KH?x^_}N~B*wF)^!mwGfH*+~AX<_9FJ6m7rOo*P=TjkMlzY
zSq!k^;*W-cZ4zy2ZL%IZ9)e3)+bG*e^vFFX%m<=I`twrr;I~TidTv3hZ4=u!AJ4}+
zdiF+F6?wkRURQnA<sOv4ZX{+T2N?2{)D29PbySu0EjymRYzD$?M!(pMom(C-ZKi83
zM({4CdoD)5aE1tRM)q*V=Qn3Tc!maj21<QK{`vH$`3$f647U1=K7UNuf6U;2NRq~|
z%*((iOD2#Br?PdN5*qwk{^i{Z)@2;=tP?H;L$S<MC7gg(Fr>C5ShdWbB+Fwb-rUgG
z@pss*dCS(Hdk$VHRd{*a(CVK==VCJi?>Cb76yGCP-rB#X5MN7u&6L%u7Ocu<uF6*M
zS^Fk3>lQR=&2^^KW;W~RT-+5)-IdF3Z<<{P->fEj#J3CRHZ^(X0ejs+GpWY*jx{A(
z6|IXi?wY4ICAs1lGPUlVQ{ma~4CZ(KJ?QFv)TcwTt>J2~6=$*+k(T1Wg(Xfj#gfHy
zDYrE)?Mm?%xrQXx<!Q3E1u2^Cs(*p6sEx8otrhndZOzd)mfc!GrmdYzub;g)L7w7y
zZQyEHwUSu1qhju%w=Rr2*RS0EY+1ssSjeu}(4y62hwx=Ra%3BcHS}6jN^6fate6o~
zEWjoI4SoveHS?o?wzc|IJvC81Fj5aOS=V}L{C<uFzru@i<ux&DIjOO-P9xz(l)Czi
zQ^1$EM)IBchi2o9Kh~Ahg#EE&`?P+wqcxyDGc#K=a3axpW7-#@eEXg|>7Gm3{x$0J
zbbj_F%J-c92`;W;;vRpF+s^&|!eNMSh+#iY5sapvXetNUIa!HIozg75jM{y+jO=--
zJa%)@_>2Tyw()zDE3=GGxB6ee?ePiP`=*|0{K@s2y#LWvn#ayZFkZ&BJA&l-FSlf{
zJd5r59S|ygcy7P-59XA+#rXMN5UOuj3`TF(RuE;26G3p1oI@m2R#DuEG7#~{!RQY%
z%ibsK<xbl<=QoWluTUeYhoq9XDA~SSsbQ_fX8z5vTotY7PG7a_Gdo{k6vZO$hrtW_
z555qs@n%sK&>Akg`{<5j*>$|@SSHUddu^s37;$9`DzFNZIf`KhMfaL%=CcfIHD1!G
zJR)KCnP-28$|#l?q2tJ2lT?yV{auSBo~JyvKX<MRYRYF%PM<3~g+^wj-?($_E%cHP
zg|6q`t*sVB?PG-oyZp@V`*zEPSh5580YLLHPawf!n4eq{&Ajflax*1LmcA!$Sixe_
z+P^$SzST7mINZS$P(oIR8+A8YHp*JI<VqB6;fvgY*IPIvt}dR`dv?3e8w(nHCU@ew
zBm=WSlSzxHkb*JgrYOh~46&TcnBu@(%o84r${);7txpHNF#F6f$JAPw!*!XG2eS<@
zN=;zRJx4Y8?t@*oO<NF|GK!kUB%>N0il}%oX$XajxP^-c7@#odphhH8>l2N$Su!Yq
zl8R<nC>eAcrsDCYlI^AvnHouFaVQz(6Q|NpV2bwE7IJBy;L#h!h*qQ`AC>O2F<Yck
zY!eMTQFxsvy!E0A7Z%_3qJAwbqIx;00na#Q#8WHnQL#%nM0ta5{zKBllg=gYA{nQ)
zywSQ`@JUUlr^0AADCssB2BW6aC?%40uj({j023CII&q_YUf4orQjM%hb#0EWWYwuY
zwjx!ZY}Z;_UXm^bPL<eIN{}9=L#>wsW|PR3O>}5>DYddxr>+wgdXgB^gW?z?%)HWY
z9PQv%+pNEeb)At|#7(-w=rA}5!bG2HH<0?=MrzYNbYtXy6&?Uv^apzF!|wf=6g<{t
zqd}Ac3=u=~^w(I&;2Jo`exBhYa06fsws73C=;b-|Gc#wXSi61T*Xf>Mrmim!bhFWW
z%p8mSk+T}lo1jSP0DOFmfKXA`mNnW}!Q{i0rE!|Fad@KYt_B%1QMcf!%n7FqSJvVI
zs!}KmrfUDZ{%`rwff9Qor|kH^j4Qo@kx+<ENkwMa>4J#YTg(ap(!jvj34tWw6p)I?
z9c?8?!a%l?zx!~-19Du_wz{{Y7|9AVgdJ1-F+2Rz5eq7gzv+~ds080t*Xv3c<l9j~
z2^WRE046~Zbj{RYrJIzjWj+fIyV=Zg?YoK8HSK$;o&M1HIBn)3n#Ufy3FNt+d#V_4
z^dEb_YD@U2e)@xTI3FpP0RZTe7t-1R%N#Ut;GhAHFatU^fQO~7gNAX0jAf@+b+$0Q
zOXVK;=FCYAKWSbtxM7f6q)_<gqf5O;Lp2Pmm<=nCU?0$hy8Pch4w(cQ%e4iB?j4A}
z*vdUevrw<zEufiEPq)~5?>NC3{x@yLnA>-TbyddJxDfpsrzb|;c`jNXE3qo5AUN0m
zD5~Xwp>61QgV1>vNTf=u$l1>2%i+WRg8dE)%9o%(stCi%ch=B2d?o?nhq{|;9W%nd
zbeMxfa5k;h2<0E>CHx+3SYK75^32tFbZ=OD9w$po<BW4YBVFFP^l81=T8Q$cf9m*q
zZ`2x<L(kT!@oba<BR><D0t`qN6lJ-qu5MVzvaW9222fu%P1<>1G|vhIU%2-PhT*XN
zMHI(zopL14W?5oL({)^CUEN~Xgk;}x+Q4;>ahZ*a?|`O&3PACTG(nt0*E|$WHReMr
z;6xKuGhk%<gUe=wt!C(L0&v>}u<aU{kizeAxb1_=84<|s;XEDi&>1k$?PJC6dYMqz
z?FwG-M8gge^NgBy^-05yQg;o?cEv@DAh(NG=$N3CYjHL+W<ETPX)KfyA4ufIM3a9c
z+>?_beoepPCqceCLmN@$OPGM?i<pq*YstAz5iNyJ5xT@qk<vs@6^>mebRlT5*L3}i
z7k~<20nh>%0Mr0~0CE63Kr~?Nr#1kH0fv5BQN9cSD8N|&#BWXj+*cX^8H5l31Ih(J
z1&sk9g4F>~z%c-*;C%o@U~K?01SkLud<_8p-)TM8bz_0VK?N~F&DSqGDv1Q5)9Y*g
zW;p^t(K^N9Tb>y7%NB5T|L`Ni)PsMfx(D*^`ptYsEN$Xd26_JT<-?;-&ozqQ$h?=g
zdU=Lexc5Tj*~E6BHEogU$A^1j@u-3YrX`0AP143ra9Plu&B-21E9D$8%=)TxU`aIy
z(S36_Lq$g3au;+lMYLlztaLmCtF8VsjTX}j`}C+n)HZe*BbotCLJ3uD66$JKFBd|@
zbmEHb+e1I=W{tq&RWImoPC<hVBsO!YRiwa0t|OwW|9uH({w;WiO@LtrM}PmMBqn7e
zSVVM$u4Kh9w>V(tS3ndj9K*rPv4HW)vGPb-TSR?9Wk~34_g0m;h8h(-jSVHDM^|~A
z>>Ay*FG5_7HGXBoYgDdLuUIEJ{sGWV4nG0_0f2wj-oW4A00fWqsxAnhU!%YHxwNll
zT4*$fTQ=+JkA#?kVcBRAttjAG^Me_OA7WwH5HnA^GxdaO@8*9Y3n4@PMoyBFKqyMu
z?&s>=N{Mz2(${<U?{i;Y%&~KGb2EG5W`;qA1tDN1K}U=yL<}MXB`fPUiyB@ZLbY)d
z#N?mY$DoKEVR8`c<fFTYrW>xOeTxLI15ej_P^AQaDx&g~i~NT|AXoDzZrNZKtneQ&
zTc-^EY9&6teFQn$Z<_F-LNSWmB?tD=+EQzNOZq>%o#_@>19q*49lhF0o6HVhATV?e
z2m`@r`+@<4-TU+^R443#_l!lDnuB8!)T$)v3YUDhtp(pF=R&4*hgIr3$92W|4-ZWb
z4#U5b{PC|dYiRr64sgmr*)6mostf0zSIL)zA8~HWIZzq8q_g(+m;k2P&>-lJ9S)e@
zS<;lwNR8Bgs`PwC{>rbv0>xNubUQ!AwD2-D7T>PBx;PfQq3VM6DIf&+4N=5~a%ddo
zbEG3->PXgSuufGeE~6*4A`N3HW=}5%F&gi>sI!`jP{vpI%`>U9vgzzwP&i{|7X$I_
zU}5x5zRYVKLo;*=4cqRS(lK-r4W(#o2YZNh6BBQv&3-LFeoHIkT*T>;Ur_N?ceiqx
zPw$|S*f0Av7W{SPJXg$l<UHrA|7d!oZ+yDW%(g6>VY}3AlAILG0xxI`o`;wHfLqDM
z8msw?nE?)(iu7tq?SfS@OvTb#9q+iuPy=lcGcYaWvR0`z2?=J!$wn>mB0#5fHgJs_
zOI=q`jf-e!DX1u4L45A0$da~J*EQ9Zlb4f`n~{*89g|QV7(^BKa*}GO8hg5N@NOfT
zjNBh9i(+0dS&<>XgjH^eOKX8*@Y6gSbF`si{Fh<I%l_Ro-oW*Gf804WVlO|65SQ0c
znMAnLX1KP%KKGJu?L=OU+wk0RG@<(5`j5Rw;3hSL+j|3IY24fQIwn3%pG}4{uUB%|
z16$(8X?Ru1`BavH>9h<Aa}GAO9B4XkR|O)x-e?qSUqc%QyK(LB(y7%2iVR^iWl^H;
zcvZp_$B-y<*%ay_O|t^8xliV}nYvB}^~^Y5a><)c9CI355nok9aVc{RMKmR4w6R-%
zLNqKw@0`C6c`?CzO#DItB@A#%{DNgtDySJXFO#<n8yM)r#S$++hA*O%i`bRV)6s1Z
zB@74z^;X_hsx`Dihl?-S>h4!1@wlxx`xLj>X}_jzDsKMEoHK_t^oXZ$hslwVPO|dX
zRd!)IUiz{r-uvB+vj<{lCU=$flgZQ34R_252HPnlkK!$D4oNo<V>~b%fqsmv^%y6%
zwHsL4t+8*dT@vQ`p%mY`=Aa&>TYeSN#PAHoM*H88h@?q7y6R(M^V?i{YtNqK>EcJ1
z{nW(lJ;RhLh7!hhrHfdU5f;BSwA?@?l&2URyQE9Z(`f%#6HHvWGfPN6=Rs#upb_nJ
z#gU=E^|#p4$ELkr??dDxeYW~|d<ETBWji<VYYm>sjwcbPp#fD>{mzmyl`*2E^u`^m
z?$>V#TI=hL&j|j_PW;36_*m|PzUek1*C8BMbh<3I*s^0goaEj@{|r5V06}S%)+~Z2
zoLP~i8LkCVYo4w+XNwK~#}1a+Pk3IKh|#N72mD7i48fXk^%}#!0%a&(FWoSWv$m|%
z6D6HOm!V(o>u{eVNpbw<9oucE2?hyKD9oQRN{`y@t+lLe_qR(|^U3MDB1mweM?fml
zOP7bpIALrqT94-Hq^x8<S{W%QPt~-=yrh`q#vxmgH3j+E7wLAOyd|w=i0fE5N9#?U
z8Q?~$n?kNOLUhdv@fEM<K)8DZY4gUjt5}!#@RvXkWky6z5)OfXsXT`ROhIHrAd^KK
z>_pmt*Er`e`?oWa2^oviP10<j2`Mc~-4-LV<)bgcJAPZdKR<1`^uoLv+B~_isA@AB
zKcHNyIjiV<m$EwKKvY`VdO^b?UK+}0P|xX5y;ITT2e#Kdp6K&{;KD6?@hRU#uh64h
zp6Uf$%Pkqrr~R7Wh-MCJ&f5dd1_7(ug?30)8W*3Eh@3NTD4tHf2`}HfU7y9gKc?09
zghwpexBD9@54<;PXim8hLGH~6PP-hr-M<wI64Zg}-!EPV7u1(86>2c^O?5OyOMUB0
zt6qrbtrb_qiF}Tny|TU5uZW)y9ucdegO0J4MSYy;IAFFBz^HECbiUlmt&r)+G@i>M
zEC<%d(6LXAMW+h{Lm~jdI+ZX+u8Psx%IEUpO_W`q&le5GC|o&~oGvt5r`gX82L=8+
z1Cny6@L`eJ=Jdqsszy$w{8FSJKQ(oNqfU(YlKuA}-=-^Zxm-Ao0*l#a^ZKJrKFRgW
zLOlievar0wl5eRnw(O$b;&wr|Vl<KERc}*mDV&y~P_n+Ch-C->5)33hbU`vczq}L#
zxlq$<DFryfJ(){7BF?J+x4x-d(jb{BN%5W;n0xb{Vc90#aMcVq6l5Y$S;lFb!$~#x
zIx$|X8sz&{yttl_&~I`yBRaSnPszHriqObk=DO+h=lciD3LWaT)Ta@6@C6<X%|42d
zGv0${x$NGj%Vm^EV-IKJ>@@lATeSz=YaRnBIm~X#UT)N0m-sULf4y(5pIHH*vgvZM
zrVlH>*Q}(f*AY%x8Ifh{zhV)XL>&|3m8XR)b|Y#iVD=;{lKlPPs}1sW$(+mg7g2+s
zft)QPXP4(thHAw!qz_yR?Cp1V7&Z6ACsG>gzCXOl#llK#JjjQd44(Gy6O;!N_J$AA
zrUS7fN97@ztoe1l_F$CtZdQuV>9c~=Yv8gZiEdk7?^_hQycxN^NK5i?Fwd=$oeFk8
zc%^zd8Fxfa>scG6f)IgW=K(A-PJ)Q(f0FdNDwh%sL<k-k3Q*J^1HAphz5T2LY!G8x
z+M-;e+Z}|8|FEFUE~zEORpU2L_%HC11+Zl4`(Y=g(9U@eHm6t^Veiw)6Tx`{2XUhA
z%n?SXVqg@9szv#7Fon+td~8`i>E&cojg6fuXIBiD-N=i5`lw75EAq9DhHqr}8y-x=
zVTxB0ff#!gvM}Nf|Do6^e}SuffAxIDj_b98TfWk#?q-6b&(Xb$Tx)XaA8CKV^YaZt
zTgNrN>@S{e%A@?0(QV0D&^{|!rNAX-8D~GVKE)9cfQD87Wwmtpn>1bbn5irijf-99
zudg%Z-6dvvH*XTkS2@c<skWJagc1%@-Pe#2oz&(C^MQSc$B?KDn(sjlF+I4t`D9M1
zG+#yo_aesM?&Sd(@7gfXkye2XMeIwTZSs0C<F`#h&8#piT9_i|LXu06%Xg*7D7)Di
z&K*D26h37L9g%j6IB#M-CZEIP)jI|}N3*+`EC8e&U=GR#$5dkRJgZ{<a4Y!%1X52l
zI6hb#l&j#QnzKmm)!eK>7|Yo|XNeLbAbjmSnJyR?XZLrzRgBjor?XY~G8ng*Hz)SU
zHgd`RSvz8BD3m`>%Ji`ci-K#(9c4~tN+fxT*n7N?Qeitom`LeeCx|PJTga&yTj8qv
z1k-UtVfw@nbL}ur%d1bxZ75u$cpMz${8ehsJI9cNgKRG!kXTVR|HrZI;?uq?{_o#5
zx++fA7B`7O!}M8y>tBd$bJW-CzA`B3{U$@s+hJnPaB&>>>58vY?DKr%_nD=S`QlC)
z7YLs{kE3QLHwJK&0kGCoUw?pP7DWZ%=zLkNJ&R}0juHavhZV+&v914d#Pt~*<iw$n
zs~62+wb^hjUogE$<2w&$<X8vtQe(m<5);$nCcgZ(T8h6HI2Mv1Gtt9h^>qKY8!vi2
z%jcs=<|uC=y59L1Z2b{}Wtk`2v$EN=+kSCb7zAh8?qR+{5&6%D#eDgCINi_Nd0(?y
zB#Stvh~kP!S4l(Td(Ja*w2RBp;}o*2EWpafl`oSm(4_7QHvFBEddv(G1wK2l`g4tU
zGfGhNA{XW9lIN)!)@;{l1G9&)b}_YTO9zZJz;#F5rx3%sZa`G!x(|{w)i=XH7<xir
zqSM2utur$uI=WA~*}XI$GgwiP(I7qCEunXekKhjj^xq~kK8(T|l!uAPw@!)Q-&>Ua
zt72yl^!~GAR!QVyo%qq<pr;ODT|!xbuy8&%kYaUmF%r<nL(+1*&5))JUXsGk*$f}0
z#Xf<!wc;~8)g0Pc>}k^Tdy%~oQ1_ukeL$L4B1XvHDUgkoT9`bMctee1Jnr)al{zd}
zu0hJfW`>&?1JFyS^ere#gZ&p7@3bev&Km6o38)LeFoP82g}EdBX&t5GBS^+2Hs)yG
z@7>r4AsVx?Sh((iOV;`jN#M7!To#Wn!S9V?P3cXE`(Pm!*QQeR*Iu^*YAbTGvJOV@
zH3UQRDRNrBUc;M!GY6CzWUJTmiA!rs)|O)*t5O$Jjvt(L7epY^$CGj@<`)^b+FR@d
zeU^kXsAJmw+RmhCoh=jPlh%q`{;o2bP-#6;SW#a$=6F2(W+ldLv<`@{F};N4?j%QI
zx3T~$(Jf=8L79|zYKy&KtC~CSCL7;kf5KqUVoToC{&KNP0s~UICl|XOQ#<_FiTf^y
zsfj;2?Y-P_pX=HCykB3%ZpqhR**iNQ>v?O}whLY=dF&IWbk2PK`y?qufwyh1gD+$@
z%@Jg#*Wc#o`&=pSej$Ehm;AL4Gu9HVa0x*x(D@wXW=&kc>-8{ffp6t|&+LNs$Rjld
ze>u&*v$~=$5Cbkxu&^G%L69P~-kb-do(w#Pmk5Ib8Dy?P)#Z(T6cG5$G=?9AY;D2^
z4}=2aA;fOFMBum#LY~iZXkgwj#rtp2$Y@eDVR7@oVO>h4AjYIlk3Cuf1Mvh>AZi$E
z3f?ikQcNulol5?X+Jyz>;yb>VW4Oq!VtfU2;#wk9f`wA~R@fhachPD_vx@GKo^<y0
zgLI=LpI%-t;`jj)ndGJ%IjO5lp)C6jE4CV1Og0uq!RO7IJ@Nb>TYQb^Ni+*>g-P1l
z45DWC=Bz{*$y)qepFeVsjbQXU!~ZtJ=C@gAQ|1yN?K3aog#rw`hF2e?&EP78*;zUG
z0<BxA!Xh7Qpy!a(`XoRnNaenIP;Rw12<$!>oLQI_sv|a2r1m=SB#K891kFn<(|SEF
zvjmV)aG!~ww>6)5b6fn+NiRFK>QUTva-1LDVO>t6pfiXLw&>(LYyLdY{#NS?JNXMn
z#%XWatACaDd~89~>j7Vf(V8`24rhMOoTTB*z`hysZQKR=5AN+TW8R(si(vv4_SOh-
zq59NEj_C^>_r*MDOG}-4?yATq{AA>g*OH{q&yxD!73s2iaj_|D-RZO(;?}|v%u4mI
z$tWkZ#GFU=yhVVXSGf4KDz?d<Dt0;|=A1wd+#j><(rRr+C{FX-${W3daoOj;2`~88
zuTJck=FVB*2d*z*&x&N{g`4<+X_>#GGX*T(@fT&_ihz%f>Vo+x8+JNzx7qcb<7Vky
zl5W{r9Vzspo;%-f(t4mE(bRp!@fkW30KQ9Su_C<NXY}@Q{ffpu$4WvBNIg-?{GN$;
z6FI0PWR|fegl>2QDP|5L!Lg@BpAI)xo^>YSE(L+%I$xr63h;IvCBCZ6M3717ZbVIO
z&1yEH{&?e9atsaIm-D9dRskcD59d*&5E&0Cmj1Su%U28R8ktehVqR^OaA?LG2aLwp
zLs)`dr}y}e0+_#z$HjON;T~|!>SvBOQ3W_~l~gpo91Zh39hfAud2(Vby~mGoqtosg
zaVOwg!AcY_`GHAf>ek|X2mFMbZc7XPVpUSUV*o#@NQ&q_P$y7@g=ya!Y?YNFZFMAP
z({riGz8~DRuU3Z;-lNg9Puci!c4!HnqNA%_mp&Zn>gjQ=y$2C0!!c#@T;HSj0ahSy
z(nhGzRZoZsGb?n;k5K!Gd%8s6ZC=Xp&v%2aZ%+Pg$<E0~-A<ohIf+g2+aI_*AKuCH
zy2PhM!$VnpjlxoZ?ZBJgK&3wM`Sol0E$gx*%93B}B(g(Q&a2OIZ4sP+cU2@+DY8Nh
zHDHxN>Uhct3Wz=fJ7S&Z!EquQn!BJc5A9qzqRWlBiz6&-<1zNci<h!MF)Kge%y=98
zLA?@s4hnma930Y_RZ)x=ydHjY)}b%rf(al+Opf@KCXE0)S>$Ar`#u*Ydd0JOK4|%H
z53x+T8qDzq1_%Xa`}b|&%!iVgVFoW--apK<bP-7z{GE<1c)VcIZRU0o&wPzCE0JbY
zpL6h;&csuepMGIe6UJl-if!k5`H#Q~QkK^Zhw{EwCRw6x>lPVgE*0$0RLlXLwSFmC
z!9vb8p|=!;XiIIUt8Vm}ej7ysCV%b8vhgC^<+|9N$)s9H+9+bnUsrwnyJKCdd^8E*
z+F?&+4IFG2)nHJv3+VkCY8A$5|G-Kt$UBN>rMXJBO8aLHZPK_$`3jb=vXyWl_72}m
zW$Ch~Q}=Z`mWQ!_Z1+#B>r|UtzA{dPua)XGzTD95Y_+^1NTm)|U?sf_=XPP4(f3Vi
zwzc}GrOykG_gUNr^=~OM4RXEfs6^anZyIhheliv5_{WBPr=FGH_T3#Q`nd$k!X6is
zV;%q2=>thPDjI14u4^1mvX@z0vBtB#QAAcOFISYHh8D+hmEI;bok6*qf@M#Ot=(QY
zD-E}ewA$$1oQb#JIg#febbjKbODLEg*Xtm2%zE;+WmtHGJe3ZO(r*a0iU{cCW^t<)
zE8a2SfAGXoLivq$i@*mM8!6#cIO$#z*?e3QuyH$mXVLB!R{ZC1o|Raf7RAvfTV&V$
zc*eS;Vy1IoDtD^?ZCec3|4FJ$#Vdm30G=@$L1W`%B@l0pNO>_f6Tz__f}&uflK>zJ
zIttCXAP<Hwzh*@2>#1k&{LObEmpi1s)u`gA*oA;kF7+^qV#&E^_4n%uabu@(c$~dA
z*T=P^V7jDUdkR@=J6>uf4~DD!*628FgbE#qhbh}ox7cjwyCf>z$~v1MGFdnmwN{N>
zoyM!D>Ryad1uG7Q%zRm|N<46ZA>e=~pd1)=Kf5gS^Dt@L9={n03R(UVu6z>SL(qzj
zX-UlO@K^J)LLs22coB;<>a`9bUqaMAF}7Vjn4eTi@*5fN^X!8ScLyRB#g$m1^R2&l
z6POINd>?$e+Wgl3Ff<cT>RI_JFnRkYJtlq>0bw_BM~dDK0r><haT=WnDEr0$`%@RX
z&%dg2INX|efobHM7)o3RHLHEWc4UQ*k`o?Pc=X&^za!!RBydXewzm4c`l;F)!b-z6
z8{Az1?f2ZJK9+dFi8&l`8=!1>|Fb$qagz`xm9lrS{t%KzX!1_gp4K(As2Xp-hf%zR
zxSn5vP`C4u#C`6Z4|<ixqd9O<>pH+S2YFcH-d0^Yffz{RA1EWHlDN-?9J?UNCKk-E
zyWIE3$_@6Tam*7mMz>aH`5W+Vy@8e_$1$oqniCGQb${FX!UPB^1Sl1l>$sqtj)=-9
z5ER_`ZvHLV<7>Osa$or~U}L*Vq$5N$G1}QX)GWzZ$M+2?u!FeL%=_|va_|Y65;VsH
zyO`ip11^PA{KSEYNs*hw7QffxG%jR3vD2EcIz=oFU+gXp2MkJf$&^b!3k-%FI6tj-
zdY$tt$AfuIX<w0Nrn6+L(`;T(C`JLB^K54h=LnXdO@k3#zAQS#u+$Em@g{P7aQL>2
zv-4obUBjQ;DsA3<e~WV8?$E_hS6pWd|0~kG+pxC*qItQ->L1Oj!e3X<6@FYN6Fz6~
zeS}-zK)BT>BO5Oy^#q|VAoQDb`G|9{ZSpLTFe`NExmds1xFngY$`=rKS+Tv3$mth$
z00H8`y>c9fGjbf0pI*<Z)EgZBjOmg78!g+!2PeeMY6t<#jo}Sy25;GB1R}Edjlhgb
zVra~u&i!dC1uz4Ns*k+f;uRu-t3i*IO!c`YS*KDL8f7995@vB2-2-BV6p<+-@o)rY
z#V<KyX=1#S$fa^`)+vfA-Si~tDbOO2L>DanTun=PDiN4$v*&#ac!b!IRT1bgLuMu9
zHo`u8NshYvkccRFFz~5Q+fVY9-Js1b<GuF$qp;_krUw`T@G8y`eM{Z@kMi1J5ONZ7
z_bWcY0Z8MB&1Fo9e7gK?Q~qR}@!Of%^S|yzY%qRl@|X|IX}S|;OaQa?Giy6Bhz4P-
zCilLeYB&TVtczO45e0vmaxIPt0<fV+xWM0Un83b1^>gT7zY?#2@|1ZPaflEhoi_5@
zXXCatxebY!4rR6Ou8u!JDPN%}$G$DR;;be^YdeF8S!Ah`9C}MvCw8~Jv`X@NzD$_2
zAG@SZ)3iLED1`hDo$gVhPIZil@nPgEk2!KdK~*a_q;_Dsi3lP^ML21R_)N>CP?2?a
z3zLrfXPLDS`79`nAQ|7o?T&Mzb5OKzKXjTaBf#Br+`T5YSC1q;zJ6XM5Xej%**i$=
z|A|VWeb?7Nl}Tg2BYRoXXVyn7AYZ=Ia>oHe%`x8=<-zL$gJUF<A%<g^m@6kiURALY
zT>nsES=}+yR0zp-LG<qr5$7d%@v7jSD!KD`kf~E*ZcC_)3_7sePfQTJFH|x^*jIA%
z$-g@bJv3xt!z)&yfE#4;`we`RbXTIrQM7Bpsq=>?Yl8A`z?g4^r9hZ^{YycURm_?a
z)uzPUK(JhcHU0QRGq9L8J5pt1Q;Y`;E-Q!^?7RtcKq!7m=;;tZB21i~leGzid6v7)
z$_5%$@1w7n;~v?iBI`%EubHlmB*mvg7Q`KQZLUhlocHE(+v=B4_Sq5>(x$@Uc9pBX
z$EqK4vSaO+4|Oo0(7*d?4tSw71np|Nqq|3AJd4qhZLPClCd;y%s-i<{`r#r@ffCRj
zQ9uSKSV^?yOzNe`D{Q%QiN10{e({<$ltvjCq^=hS4|<doRY!*`anOwjaS-{2A1!jE
z-zj)lxIg6=t`Hk0psTT6Vytl3{?&=P41C-XK3s`s-H0=?!Np=SKdT}<Vg)d0G|OPg
zcnh(XO|uji#)g-3PSM@O1VTf9nkt0ntkF|Tks3U|jJVa>+uW+ADrDfL{K22d<g)D-
zqa==DkmtzwoV+=VQ5CuoN$@2>ai7{&WValk-1x|9bOMLBTCg12ZnhT@t?trt3YfUR
z+DwrYys9gt&5NPKYrloQl=6C9yW1TMG5tkRv-8LPeLA_P&G{HF!|(RYk>w=)eX4J3
zlyVv~^lLg-q^Q@U1_t0MJ~b&<F`s2^@+hfr%TCxKQ4g*0blChx$cmS9T~}Nhu1SV?
zOQyZO)xbkTPcL7Rx}aFPK0RTa89(J4wa_}-mN!((W?3ZV@r2`^JSAR@3E(2v1qBwf
z0C2T0L?I)!+w{{^93~|b3y`<SnE0fclD>NMOTTs(T~XdDDL6T~ucNS9nkwS3CgKA1
z12j5In?=owr4eD>PO8AgMZBB?FTa(A(iKh$Bn*xn(-_RlH5cAr8!&d7ZeX*jslr*_
z#7_G6*Q;eQZ$}gDNDRmkaF*pAmP%ytn>OmQ3g+?&A3(gIStDvk3q+w@k(|85&+suZ
zQnvCV6VH0|JeT~1Gz2;NV6X);s2~jFD{^5{Ja=hSpv?1&xpODPLqCES=OH$>o)xZm
za9RbhDTO_Q$1S>3kM%$#qGu<WUh@5y@q@qen-0Ln6bL{F41Ou)ig*hEqm<1Halav4
z8mAl@#|VL1i==-jnW~~t(EO&6`{Gn&ET|ly@YqDoiC(YTW<JZQdrKO}uF9d4+iIE#
zzrVjXp?px;dn`MB1zYaPaiTO-`{G<*a?RMk6%Li}JKR_7>?HN8)+|&C%A<E-A6iu?
z3tEkJ7hfn*;2gDJhcrbhjjway1uwroIjG~Jw$>2cu?Rq?nWHD?t(WrEp9>g*r;mBe
za)>@_92_zDh8is&nhPatOkSg7Rta;n^6&{lKlo$HW%c-yPlqM{nN6f!th+yhWY+GP
z@`^veJRoI${*$LL<6qtiHEPAa!|RHj<a6-rJ}icpZ&|1+YxUxV4!YDvbU`Rc{iAzZ
z4QM?JS?~@*_O4cj%)@DI>IKFhS+ddt0if<v3`eHFVBR-kVqJiBD)At;(1-rI=qdj7
zYn}ctmWU`BKR*;Le*Wq|$1(cf6XfyxuAeBsT0B4X_Zi1d;sU)FLXQZ!_{`QiNg<$=
zEDraj{l|;y43_fEd@Je4^<0OMLb=_YcM|RFdFU25(zMy4I7_DcE*ssl3p`|E->-p!
zBV7Jb8JrZum4KVgS0N%CEQN!Hu@lMp%nRu1yDCp!AjpmnQSj(G-nly)yAoT0Z438w
zHK=;2a5)#7aB2`RSZni+id6IPn~ygmUn$5cOZa`w3Ddrhq9SbEnZd@2V=N~*Je#j<
z%8!h5o4l=A(`M!icFHSqnGnF^GGs~|nQmtU?-;%jf#xcKOr!ZuDXdcZa}VRXMf(mk
zimf$H$eF<)0&U-GF80OhOP4dg9-Z0P9g?wauutugT!Z}~HQq#OI^F9Ztdmqwbd0kx
zzh}?zteFQ^4i$H`gS8%l9ES==;<JiQubQfbnrBq`x1@^x++j3T9O3nzamQe~o<K*D
zdcbomZ1{yIo{e2}uyM>B=FdXKf3fZ-Ii3_XD!+}4;$$M0MIQsi{=9_q4~yg<eXd#^
zz9_9-!ph|^7z6`f3s)y%+$nRXVZrB``tb#fP}}<%O>$D$=&jyUO<NdDaSbB)nw3VI
zZr&%_QC9J<M+>TK@=>9@U*sbM0;`^A3vQb2$Y`W!QWVnE3PX_z+@5SMjoV?V2rxHw
zZ7WKR<YI7a$Guj*#XU=^?}p)>c2SO?V6gQDT}FgGoS-2<L5eoANJ3fA-Bx$=l|tYT
z@MYT!Z{|3fb*oW~XNBHD4NVm&nrJBfM~&AuI{0j?_K`G{!FiNzXxzQKn@b^`CU^aw
zJ_}of-SYv4BAINz)A4oob#g!ju9&b)Eog4Q{cFyUeLjSCk#7NR6w@Ga`Pj@`_NM*`
z?g3R^4iTSZL9Bp<xTXwzrP4+sFTM|UCG%SX*W9FpoT2l<kAx1`C2BC*aZKV>5zbl5
zm24lA)zCwkjF;<15Xq#wC{ALDMTj(s-edXXYvUd?@#-3&cmxY&{vtVX*(HBsS3Fl5
zh)?^XSjZyyEm2MD41RRpYiZk8D;ME+S3Ei~@~xdVe&Mv{5e`&rOy2kAr$f9#a?te(
zgO(F<(SNol50M$lM*G)va0`;q-nFC4#=tp*p=Z@b&wpcQ5v1*~Hhuivj;Ar{8eRm4
z&V-_6g;9>)z_p?jZ$SW@(phhYo{Hb(bzQ6;wap){%=I1Y+KwTnFE@fD?jmRe78Nn%
z`A*Vh;N?~_HrXfb5v#Oifn@dy8flogScoUfSv=r_onuq2tmASKMAQQ-^=pRW__g{*
zQAtO0m;L(W<VA&iE6`;*@g98a>2qy>aSsXXyr=tq?wGS0#%RcodwUiKlh*C^NBy1C
z+ryEiC2rcx9;ym392%{bFMqS~jr2fW4xEfo>)vsC<||Z-LPz;_%%S>R46qRpnXxr0
zt(c}EPbOm*%vL3pq7x{|rg}aHYf`SEPiK32lne?Dt#FI#vxu~;R`oKJO2l&i*|SRY
z(2<52TjovYp<?UzX7u-hrfa?vEM`LH<|}o17VNIFw?(*X-1iE_v-N-kL9JKz^<1Pb
zeoqVZZqW-wcw3cmyxaIyQ>uEH=VZuuM*;{YV3eF(SgM1Pf#bZ5^r?#=;<cn~vsP~<
zZM(Ilwb!I~Q?m}M*rt@33@*k>=d|2*!#1CLPbnv_X40L#YIDZ%t5x`eAe}2}-Z{1c
z9kW@;-vZLhyXC$t4!AX~HL4(pbg*Z})X*7nB1W1A<-r`h{i?t37`11X`bBV-A$BAN
z4{{(myQMJ&7|I3&deRaJfxOBiXSoF0I=<O4QdMOD{Y2FIZsiGTA+uxY;{7y=W2sZV
zM%Jd~+L5D=Dnf(vTS32WlZ^P*^*aB^J^gA|I}gWiS*0rLwgJ)3pUU#uHRh(g5<~x2
z%VXYoAJeQjv!=B4eOVXB7vW=#o7s~gwVucCzA++E`SL43F1bbkCt8hm`QXvllLT6M
zno5bI@|4g;GHvjhs6b?%U;;I!D$6UIS_eZxQ_?7DEBA^qN3{p|neza(iHfoS!EaV8
z*AAC~lI=A4(L>4Qb$pAQHe`hIl{qeiJfBWYr|R<xD@Z(6pqWp2k63X@yI1+Gzn=))
zDrc>73mXa}i26z@>$Fw@?o5c9bzU=WF_(gA(S<8gch?!=oai6UQTb=MpsZmZMN&#M
zidg3j=_Ry$V-vMR?C|!5LqeG}m7b^h%bFWGSMC)aZfmQ@?q(XjIljGn{o=45<NU@k
zEL9$EcA_d%*Grr(oAkAEh_fFjhdcAnN0t`2zfK=_TS?+xI2v-d%9pXQTrUGD2vX0_
zeahh38jJyRsNXa>j|WCl|M&r*F+e9a<6wIXl5h>;FXkWb{{k@L$0P*6-72KAQ|jm(
z+2%?uX$}&xl#UaBp9_OlgtRSrRiQ1eN}1j!y@V~)!TGif_~I95HuFYU1ZZw-6qQA^
z>_mH!-x+IxO%3Pmw{E5OtiD<NQ`q2JecR6iVlXJ-eTKX&7XV$&>zFI0B2>ys!!AP7
z1C9QNPV+a9pI-kb!NZBYJ^CA1=eF9cfLb%U4X-I6!|F3t{?2ZNy|Y5yu!+c{&%eg8
z%fTM|{H|UVXXQn)G>!Z(+s)>70IK%eCf=4nfaC4)0v2B@x#RIzVmOL(rLt;B;utD>
z9Oe5;RfCukbR4BZCt@y&)}#`U^;95CPp<k?H!1&N-%4}qlpwMB#aW4Eerj);7BIR$
z>-EHY3(sN+>c*td0R3m3Z+R-)^}ED@$P#6dgQ$bU9-7NrjCoi$gQq-xP;dM1)!d<l
zy8%AYX6)gZ_qUksL3!ED)v&p1`YJBL+r$B1d3S3k1NX~hbch*DO6}5zOa0A&xG*wK
z3G`FA1X7Gi5QH96W1c}~g(cYEOr&SD<Ecl#4~r(^q=cA&6|-VAZQZE2R5VL*^Wv#w
zQAO7sAC-R%g}ro8phC)2y@-LIGKmPuS^#4&AC^pWcqeft4#$;mYig&#8Er|O%9+Qw
z)Z0n^V=SsjPr_1R*RAr+AtxBa8KMgy|7{ITq_dM*Z>MSeY+1rg5TM3--T-P+(Q0C3
zK%IhyFJ2!x6+h6Amun%rM~Sa8LP>NQtmQcZC(l<RzadAX+cSfL=;ixafEr4;0#m52
z9TdH`mS&amjS(wE-y8bYi)^O%u-%oiUV9B^kL?Em*W-aROw%m>_2<&>H2UdMDO<H6
zZXwRyo%5No<Xz22=r$Kj*zB5cg58yGsb}=TyXoWXjy@7H<FVCk&;bdqTkuxY_TMY^
z`f*gUo=7mzplVg3nT<)MAoL)X5w9w1y{be+K;$b)KI=tpB%3|77h<zF#{`fOb9p8t
z8xWbixpX3A?9WdPzQg%pp!<_uhp=l2ebuy4^`5u6DD(i5jU+6d=(_5}@i|T6lJNx?
zZZt3@E37omem17V6X*6t*hk@@rpcrRBlFk{RD$Nwf9IT|$8hN%I97XQe5t!F8Fy_N
z>2?%LbZ{3Nwo5=u-Nub*T`h(zRivCI)FgvugK>ZQ%#syvi3!r9j^hVO03_jPw}yLI
zCwJmtdqU$039oRQ!L}qg(}IkJKorsCFKSNA<*dRyEFmj(vN5)cYU;(CDmYp1N9!l-
z+>pgyI29G;T+u25UvjJwkyzCvWb=~8Kf7rhBKYMg&CGyGyt16RDQsd1YG=|6X>DWP
zGF8f?2E++i!p2jC5H+Lq?3hr8xOOikoN-!4Wob$w-r}OEhz~3{pJo(QZNpZ&Z=H8f
zPV`Ae9WQl)gLmSo5-|K3?flQXCyEENk$6vk6ndqgmIqi7LC6C_<Wy49gVVw=uS4+A
zo-W+pPc$r-kp0yr+*+Ht9xr>MJ!C9z>38^~jPC-kEcBg>ev()BY8u%M@mwLL`617Y
z=Fq0GXnRXJnG1!|`$ZSPz^vPPfJp4zj*>K!$T|=xk*Z949#N!e;EQ_DgUdDB!I#pc
z4FJ|ZG3&*b4I9=V49!YGqzK)F?e$*?BQwT64ct;?48w;-eYZI8*q$ZPdBm{KSFv^&
z0!4w#!A-wt@S)uFI&9*R8*MI*5PkG^(Cr;zq4Zxzhp25$+dPc;Vap0|0l)lS=1ieK
zDSRjAlqtS8qz#j0!fL9LG>;FD;~(Lr1*d4$ZCfvH>mJNn%XR}5ckWXpDLe^<u0o|w
zbL9|XNPGB!?ECITX?-(YI?5u4{wgI}8K7atI|1qT`4zM1gqySvE9H^>0zsmxfo`0j
zqX(>4?y?pWFMk4JX*&=aqZzJevpBRBSDHWIE=RCC^VNjC_}1Vbr?WdC4}vZz8yCTp
z62j8<XEB<`WlA%Ytax&@64d(2R25Ca=QPGJZy{rhwuy9?Bd{`mcZJ)?U~;Fbjdo0J
zyU6eL+V9C0;}m&<5t4=^Y_b>T)41C%o3*)`jNK=Z(J3YCI-8!JM0cgQfSx|O#4$$J
zH*sGIT9NS27vNfLK*vz@aj<jO+UD#tHZtZiHkh_v*_ug1B5s!K?CYhxqNg9}8?Y#x
zSegL{;co=+ev{DP2Zs}Ra4XHd!mZ=~G8I^V23~F>chHFCk5M_QbMWO$$IE#LxtsRd
z6uma-5PFdIHYWJjXoW<6^-OJ;qJe^71+$5H6rBhnkFFP<ljd({^U!2n6B~SoSS-7B
z-^tmleiD8Ao2RWwvUq{zS%1NnZzT#aCRmOVM4+e&+wUcEKaX<dkyS?fn}xgo^wYcN
zU9=5%`TL><8-k!p_Y*LF;>RxF04p#2DanJ;2ffJ%pZws=T^Ps?T(S=yTck2Id8B;n
z3gK*sj4Sv1j4?NNiEGdoz#vGL1#HGEFZ*Qx3ykD1Lc}hb;3_F7w#JTE7OrmYq2e&I
zd1Kn(Vt|UpLrUNvB4%}779u>7SX1P>ShEt45wPpc=A4%h`>Gm$R$A3#gnLe#Ga$7*
zAET)3*YF1(?aA1B0}cxeV|z$^jNvr$?`2W5Rdo6B^m@cY<)~^3#!VHY6s-uld-xos
zaiES0m$FDJ5Y$zhK{ex;o8wVXbEv@N^2e^<CpbMMBk1Efchz4C-6HfA_^k)3;(x1;
zo?itkMgu-FX=qRQy#c$Z?VBs319XWJI`OdDGyrHDL3yCwFUkOuv{)hNix8x?-#M)X
zh>!x%IDKJ2eN_kOg$caMBe|y}xognwgaSMp=xKH4PrKK{%pFsbw^R2Q8Ltb{`_JrA
z=J4?rfTt<Hzk%#(d`W$|l8Ce67;`QkK$p-+@sPr**~u4M&Xg@v|BfkkFxW;}ku}Ok
ziHCz89EXFf{!8&vRfEZ_+o!Flp7Pnhn5`RcC`3l+Zx-^pLeREji^XU6({`~t-16;&
z&#L~1?jF<Dhx^8r?huC8IZ~sE&E;?V#Uz71BLYFM=w&=fJqq1HBdSZy>oXKgh#E~V
zg{{bM7-CwXYLf4SBeHURc&ERNkEZ!Bz5fyShQ}%a9#>hx6+9=fbJGL!pteBe{p&%K
z5zz@!oAOJcOEy>eOEvS|^)d<h4R*Y#qmgU(Snc`9?qxSv<6)LVr3zKD2ItwF^GeqO
z)e;cU2P`}ecZY`Yhta`@h9TWUT9pC{g%mpQcOD|#otdkoX$7*#u<RxW6AB99(@t!B
zP&}CJir-a?jD@2%ErRNK@z%1_%%58e1#??;tiRIUdfHo1G0Q7Jftje{#XhIb;ejS)
zvn*Z?!7TQ80fo`{%9AdSR$rVv1V$FDF}t+;RWqAVzGxEJYpRve&b6_8ZetB297IN@
zVBopCnds`nEMVhqhm@2;aLVyz6HO%tsb@=?zof%{E$ywelski0R-?;!6zeI(lk$9Z
zJ)OH<DkwN3^W6+-uWxBFniz__>ieoqcXpST<A_1n_I4lL+caS}+wR2gvdLe5JL>3t
zC8J(jqqiDuo;=9h9mr5w+FSVNiYUK7P}P1liJ0XJuv9_-Lg4{TjqDJ)Pzj^6jSe_+
zwVe--q!>ZGq>~k3LET2^MbZzH&F9XA#Tr%Vb;J?qe^k_n3!GyVJ`2*`u!GWkx<$N;
zC3`x*IFef)m7_clh{lUk2os&j+*e+aB)CU2jW;J1Pa|L7DGAsrcH-X~kj{kUS+#c6
z`;wJaBYMXD351InX5FYeB0pXj@=r<mMX0CuTs37y5{wyFhoMrScu%_!b3B@FV?SUR
zTc2sRO#e9kGCB+(v(}aj<mcVFd<}IKpPuD4Qpv3GR!T)~Og#J}*nP*gb{amJC*^WY
z^N-n_d&Q2+PPRYkTra=b8ul{O@wV*vmztclYVUK2`T6ry@xoQL071b%w<qi+lq&&9
z?(f#+A+_pm3EfX7KN~f0RnA{2San#|D)+Oc^JyK4Rs=>FPQTNkX+&AtOd0N@i5@iN
z^ZWPT6-u!#J^!?Gv}bZlA3PpchR!NC^RSO|$%Lctv)*`)477gSQ7Zl9lOLYz<(byz
z;8qbm$FPdzFhTg+=BhFnwGKNc=f%?VsCT}*JFi~B!-~CBM;a{F)r%HCQRaV_y>1LX
z`FP#gn1pjHGJ%5DPVm=Jn+ki1Tqnu1zL_4S?DmZxK5N>u3=_))5{k0%uvtGq20hbm
z`hq{^G-mE&{t8~riN87QZ>3nKs)3L4?YMtn{VjK{%>(>=60J19P_9`xF6Q)h(TBEn
z05nLFYCf-8Gk$<prv+Dg{&1|x(PfM>osM5EeU5ZQJP(w6hs4UWKBb9+jW;d7Y%~}m
z2_1JtUWPUz&*s>Og+%rdWwA9wOxK841m{7*9y6w)=JTW|fgVqrb_UBW>8CMnXqr%y
z5=BwoOW}Q&SfK11BnxAQ{=AkTSNg4ZkaUZFwxjnd7lU3|i`j4)%y1q$d~UA-lRRK&
z>3-L2{oQmfcj}BktMxgk6Uoi<xEMjIYaVUG-E~l4sk>D^`!M*>*qCLf3?+%*3I?2^
zAa*|IN~DD}Y*vqgdyo-HN8_-pFv7mCzkkSdw^Dr)he`5&^NZo-(U5rIeY~?obU@47
zf&I=woZO1u9!0Fi3TVnu)&=>vj%+nU|Fzv$m&cy!tZ!3YCGWlVaVzoJS@+`MqK7Rd
z^K=psygq)4Mk=}#k2dsN#!u#Ml76vp8VQ^+C7qj=LFtO5L!dOpV@6ykV{$i-w+|w6
z0}(#cbA)a!^MsX@Nlpqqbtv+F6aj<TX51u$X7y{0&!q3KVH7l~Cnxk$4@riGUxoF2
z%J>Vo<vE@G^6Q1~dd$jJV9jismu{y+;vX&U`R0MF+QL}+Hg8`3-$P46Cc#hMlW@e7
zz16XlR&Z_m+_ns_S|(^C!m(HxyEo%w2{~_l*Zzll0(0N*JUH^uZe;}qqATS4fBeC(
z<gioYypH8{yqqWfXby(f8l_E{Y%|&6%m-QJ(PA40yEjM|XZ3B@rm8+W>p|VirUqXd
zzYS<U$=sZb!W^5*_2G4vjHwNzHK7a0XDif)<0dfb^;L;%)CLn1yF0x_&p%-FE$7tT
zU#M*g;ce7u#cJJ4xoD>x8&B6zzxZY8(F-v?Yt&)erAB;a>o`8<Dw8y*h_y?D%?}tn
zrCvMvoAulq{XM!>mJZ(S@)BSxH_}5^*EWsCcm46I@LTp9ySmhydK1sEfQ8*QPS{M=
z0<8)mm(Yx{sp0WY`LM)f9^9E%{Js=Bw>noVf_;vgs$azRF#jiQ6q4&s2~ZCjGc6g>
zq^UQ@sb(2JHuRf0y0nifE$R^<p(h)OldF;5`-s++Fu2TR><SMlTEk?aKs^tE-a^$c
z^JMU*dks&e-4W3(Zvwp)Jo08u@nrD|JH#Xr7cF|-@$9G5Prncm;*K>3nih|Lab4}z
zKTf}#*z>yu#ix6iaU61fOjgdE`_?FndD-M?uTQ0Av#)00v68izcA;yg&0mIPjb&L3
z$(&h2<)R)-DPEOdyoAza|E#hijGDT;l$@mW0P~OLZ=!TH11oluSB}IjdjS9;6a9|V
zk^X`JXdtj!xk@{h@p?@xjtYxgIZuTsaf(wR1686>Z`E^3io%z+qz)Q8`_=IXnL5%x
zgVD(o$fR-EzE4l%Jh_3u0-66F=nauQY2YCRCuvE#5@{d@-a=$O3MlK5f;52?I1+Ry
zU^&k3+Ia-Vxjj1PbfpdJ*6XCuj8tc)G^Xd&F`3<_j_6wV$##wEwdw?b;5z-4%#hxO
zaPVxN7*NJTSj4+atcXw%eOeaLAy^{F%1Nk;*{g-C(I6J5HOL?{Op|)Xr44BqTepp=
zuW3rp<QA=3Bn?QEt`D0M*3RCdF&UhX6H*fj`D*zfK1x@TP-qW3ZbRnvC;7D%_^9+M
zyY>|9s3-);$$65~dxmDCH)R_rU{fWLb0I=_lnsa2Qc{Gn(@}A|QPB~3mRQ-AKCNis
zxK{wd7TOUVkwH93yiZm}92hgbn<CzMYIIaYt~HK!Y&?C&{K>C#{Ay=K1gLPGJsGJ|
z?~?)IomI~(-sfZ5jEIiRv&Mg$kw1M&!3(S(XK6NmnNge!YY>0?8u&vX1iNTQyh8?d
zeXXEsE&L9A<+{DXgf_uFb|nOAd$ajmfu0&#v-hncmD@X5{uJ1~=h!wABck%`)w^bn
zijK*TivKmEc<H*;7Z)@sTC{V|8P3byI0_rd^I!zKN=zY@`)3AKS$vO(g?VJG(H?nB
zx6J-X9@RZ_0RFD$h^+2O-G>g&WPNE}@fZ0Qwz0lgLjh92igp3-la<7>GlDGGhn<91
zlbN|uQ?cU7hv$s9Ie0$xhnKRxz-Yi^oTSY`g*G%D5Tk1s`lRwHaI)zoR5lS$Dae6{
z`*W=Ao{XNoNL<>SP;DMsjOOtX`vnTg0VxUy1o9`vi!xG>y>SPU+qSR~9aCS#Y4Aq;
zsdSWMGB5>i1e@Q!dPXMOqEf%&9xY~;s1__&<=S;PpQ=(BA6d!OiV^F#TFlkLI(J>s
znHav;axD?(t|j7*cBV({adxMj4Aeo~G5TH2>}FST8FzzI_{8%%^WN-0rcV`C1LDZA
zGrcP6Kt#kaNrcWrwJ{{vVBWJJdpgP=v*F!-k@OYw*=jFZPNH<w{P&#aB1VmP@$W_$
zZLw%$Vo?cBv-asxyoun1F|in}M$%>*>btwY6o5>qHpX#d9hltxAz13S8xS19N6C*Q
z^ndRgN^Y0GV<V~fXbxbQ2tYoUBOnYSAxEDyt*?^Ntv;!)7RJ92hMK*(6-Y#j!vs$)
zV*lz0r@lHya79$d#50Fu>Y-znW9I00cTZazmp`R&waxmM<<CPnjrk$0OlI1l7cg#?
zlaA5+DbrY?3~lPE?xD5iC`Ns6sM`Fux-Ven@1?pz^%<XLVLQzFJ_Lz9xFh+%rc{;i
zII2juBL~?xwneiM-a4KFUfp90e`RyuzGo_6s<bN9Fgusm^DxTi?>vifXs!FAwuezH
zCoqarpf)UoN0}VX8sVbhKNcyhk@EkP{o#7I+amUkMnYnl|D9rXC6;l=L;yVgW5T-|
zU)gdbKkR(G7^R1GOl_VFOHUs*$6`b0LSx?Bk+-3G(ZswBHuK-szYgUc(%K%PIc(&r
z3Y<)cRX7#zK811foW^+mtZ{-nVjw*uDQ7Xh)PiaMueef+HEJ=gh<@|Vl_vT0y9VpD
zf29_m<tfZ<5=_$Niu)ICdD+l_kG9QM4C0C4g3bQQx~3f&7jkAXF1%z5e|1BTS(_@L
z;NLZUgkV@6csRkBP`vk~V8Wa!v*zzQgJTl!*N|4k3mFky;JT7oBRrTSf*ty+0shgq
z2)!4ri@vEioa^JqN8nTggm^IE5HITa_z+z6{~dyRYyb{HJ^=cHg!}E18{xmH2bGY2
z%t60Pt_VH!uM9nizyn}NsQ3j>Vcal6HRzy5#m0H-FO@Q%)KfpMh;$|k)-50+bz8?(
zWpOZ5YD@8GAaAyG28t*uG8t_L=N1)(m~4Bqv32S*V@x(g+qdY+&cWn#Nx{)Ggq+?u
z^T27`EPSqnXH7fOv{NrcW=%f=2uQ{6cr2qi878X%{t?Lt--x8hUJi-;9}!74SbX*P
zkfd5oL^2<VN!tFO#U#J}e-@HNXaDa*l7K7zW`{8(Ozei+)5mH@{LkHRPlX`1U_i{c
zV*I#maSgKnwz$lXtlSnC{XE@V6hA6Kdyb-yrf7ALrDF=R^?C8dRyfkFq1kDoW~<^?
zyn@jb0~6ISpIvdqYBa*X6abrba;aeB!@Xk#KyDTn#D;EIzd5eYQ!z$dwK=ZhSq+HQ
zmEC7^+}=~rMT@q+bNim-X36rw8DkdU;Uu$l_b~x-w@%%<p_Qn(|J}reV`pxlxM&z^
z-45a5y*u?rnDq)nBJ0&NBo1s)9fqqho@%F<syK=$4v6scfm}9yQHg95E)jG5Xt2l%
z57m1{(N#^ccuFKb`3)S&BwV;EmpHhQAxOJ3Xu#Bw`LcW{Z`$G@B@)qVmzxidla%gH
zcOEOtnIyI^!rC_jFkUvHU>C*vXSKWWqqYt;ORLu_cS6_B1Nn%x0l?cxm|yfV!XHIo
zU^eyX3{c(vw|IjVpNl@x>X>nBe9K(}pX&?U@2vQZNvH!t8Q<!_R5i}C^FW;N`{KAI
z^vQmW@JBIgSp&ozt>ug;jqp`pwIYO=M%41A561eW^H>?arDLS5R5DTI19GDhPQ((?
z!%LgbXPl#~%V>?IBhM8rm4XhAr1JBV#w=Vb^>5#Gq9XO_*lj|6sawl-LuKjdR_%u2
zt_AI*2DBXW941o-FKpj<+~^`aMQiXx=Vw~C?9dY(YTTjAla1ST0St{R{>DRzL&(oW
zHNYc30aYlD=yHUAg+*w9Cu<_q8F4BkG%nN`s-L(jcxp65^m;eIUzGT=rAqNSQZmvK
zQ@F~l>^QpHXYz<5SuQOoDhift|K12UM4^x&Er!I=fXq%^#xaG3diPm1ar!=tk1T6k
z_BDD|uD~rCre#mc@0K})ts&Oog_!LejTG1iQ*a5`{B|3$l-2XDHA>i8<A`^yQSyKF
zbxvV&1W^>eRoR}7ZQHiBeu{1LCAO{EiS-=YdW>!3CAQY;)SRxbw`#gKi^2W=ImKpG
zo$<QX0JoE`%E7_y2Uk#^Xp1r5t$Y=~YMc?w0aXi|Vo<B7)H*FpQ3^rpAULlv=ec~f
z$kzqI90F4+WKwoX%pR{Q6%X(@{si=4nX*0|qKxF^_Xuzw6(S-|4T!>iVoa>O@C+{x
zH-@9-u^0KD(Y-<F1z`<JYUiE>aD%t7J}<niel}W8o?t3=kwq#gev#F3R2nnmNZ}(>
zRolow=9AHiab)Jl;j9inHkxnGGLYoQGR|ZfNV1H3mSuaTnr(P>s)mvG2-cOgp&}vE
z@bbdd*iBDk@u2mJ$fwbb9NJHohjsylUSSq@=m5*jB3#<}6}qp<ZJJCPFX%Q-nv)%s
zI5vlMq~alI7JYTJ^gX)|Wp)lamI}TGbY`&!R+5OrThr_$;<aSGv}T>Ch&})>OX{Yl
zu{R!cevNM7(0=;tK^N5MoS;!sif5fH3*L+=NVA@uL+cw<bc;X(Dxmp$g`P%np!Ml{
zK83z&ws2^_wbMg8r$Wb@IYA?b)^6kwE`ey##<E2Run5Y9!P#Q+vvBh>qXpAM*7G73
zO+`YC%W7srPvg}*=vo@x&Y}IRp$A<@qboaffVE*=U36`Y&JP-87Id_T!#@mLNGn;M
z>8y=Qr6^R~^fX=?w7wrJrqPWY+Rv(aXqV7vZqvwN!{8QT`&XIGM7*8stB+YTsHlq~
z@<<hU5cx>Zk)R{!6%lCFfT+GgKT+suY@r9;K-D%99okQ8Jm^MQbXXDNr9%g33*~ar
z4HfNo##PWLy`Zzo)51}S6aNMk4^e6U>S$Yg{}7$oIq1YA_-MI*=#BjYTwqYrSXnQZ
zkavAPU{&PCO;2NEJ?LsGZ6r$CNB${pwuZvqGOpSz`Dpxn5k>#lY{ZM`8Yo1pjHg`i
z*0T2pAowDMm{uoVI@tRZVubMpguM@FVZ~FCkWsLl3LP*mfVTGmovnBguTK<Kz<43z
z-DRt7pqx-q?@N@FD)1*jJ@t^adX30MSI&l>#wL2uRaDwY1dUpqK~!92(E>-Spxq_?
z!qE=UVvl@R)wHjIM(G6|jAQjOa@bFn=LvGCuLLa)6*oPN%?7Qn?Jc3wMxsOeX_<$1
zDUH4g+RkBsMBH8_i!=wxG&@2?Un*M|Dv~y?f<|xaP5%J2zhQ#_c-mdbg<%9R3<JPa
zWOx5XJ3{pgmzd8vKaIcN)j0rYk3p&l@)OXcjT1NEcyph;wn0d=s~Hg1MbR4d1O|4D
z>+I=)>=B@p8LeZF3%g=>=&eGEt{Hv<bLT?k$!}18lKuhNSp^;d0096100JWtD-mgS
zUk^O>02v4X00000#PAU=00000)d5oH`aAvA2{s6G00ICB00IC200000c-muNWME*=
z`NzY+z{&E<`d=ES83zO7W(H*N765u!1`PlJc-kz|1CV7g5Czbir1Rd|wr!iEuiC=e
zwr$(CZQHhO+xBix4^nkvCuTaDB08vd(N3e74#HI$hXPasetR7I=_1Oiy4bIWpuL{N
zLrpbwrZ(`a;k;H?LSFS0`AmAABmG-b4HZYyY@(z{Ee1!`V{3HX6txCv)i_>D8a}Fq
zjuaoo%tWkpGr&tvcoUt0$0k8vn;stODq2XnCPv$l@aWWNLRFB8K1h8=c$`DhHdc7i
zlP*D0bfq5%p(V&mYq7;<K_9w;<qqQzo#HFB0qbc!zgN!@&!ogL^_)AJAk;HWc(|^J
zUsMQLsfLV=iBPJIY7_^R^j!3(nn*-`<Wnb5T3z`6*4&87J8zJK0?0>AP?>7*Gpdj3
zdb!-kPvp}hQA65VnPcc=pJIx+$Y;%NUMcAtJsYLeL1fmmxu>m-?&=`_p&-<!Ui{6j
zKpcvN5^5JT?d6xI5&k>n(9!h588b!hG8jXg%4lP1<A?r*Z<Gyb^-Z)8-E~Rarn>yr
z?8Yed85`6)-X`_0%}AU!<B`s;!hQP^7o7xHVrKI*H#IMzR7fcImXnqujHV-}GaD)7
z{X0<?_^B?+QgeQ#j-sUNMRm6*f=ojdPj|*|(;DY&3aoNmj8|>2Q_NKjd6BM*UAiF_
zYY#8bW3kkd++i&=5OK{={wVvA{{Rp5z&a`_?;nKzPWLGK27lEz&_iSrM#?`V%^|Xg
z$|9yHA#+R<t;HNMLu?m)#Txm?i1?SbEW+EQ0}B9v7zlzTecRt<Vh~OQ+rXN~(-mKA
zWo%{RYR6Q@6gO8KF_d|kjh`Jm89VhGKkolJc-mrMU`T+&X$(6VZ5WR;l>r)p2Oztl
z004l~e%rPcCl9r43~Jl9ZQHhO+qP|<y(?0RLZSwuaiW8wm!fR3L0nSYKzu~}SyEnd
zNve?!l>U+VWC!H5yn?)re6)Ov{IQ~nqCi<id0Z7x^-~>H{a3e9uUDT^XJ|@kT5EP|
zerlU)x9Oa^VY)whkG`#bj{bvzGPE)*F`PC$G87o&#>&Qa#y_UkrekKxywaR$nPj<V
zRal!_*I7^6O4z2`zS-N@A37Y4>5dOh<m~7?>MHK4;u__;;d<`|?lJDOp15bBSL*HV
zo#7LFJ^TUx3jY@W<-m-<=D^<|2u=@)Ly^$f(2mfpurXXVJTJT|d?b7?{3FsTax1Ei
zE{|r!y2i`LA16R!e=?FRpS+tImD-v5M?j)HQH$tIOd!@1yNTn(AJR%j$qHmkvJW|d
zvQi{9gZfDKrT;UvnPJQWwl2Gv6LEdGReXq_$8X|~@i+K4{69e{c#B4b1;TdWobXim
zBjf=K2mlP~fsUXrm;zRVL*N{E0KP*JbV3%EfsJ7|I2O)?8{lzx4}L|(kOoB%i>jkm
zXaE|G=AgCc2)cltqkmY50~q7VxEbz?r{D#6J3dqh!%USS009610PX;g02TmP00jU6
z0000001f~E0ssOG00sa7c-nQ3wQ&Og5CqrEjvbmKGecr#6lG#&rc~9a8Wp1obYh;L
z`?-65U>+Y+OiV8THfZq))})$zl4WvDF275u#ix7tjCi@lXW6FG;;Wdb@<^NnMN$Ou
z6ClGnCmeAsTj!Oy%ufWb)H^ZU9EjZ$k*#Csbfp{0OIk>gllO3-NF0}t5!U(YRKE*O
zBGT@$HS2v<md4z)c$`?{#sgh=$|bj*i!b|T?T^_fElY62p)B9917#C}vUsK9+T~Za
z+2Pej{Usb~<~xr(^Mg@-zj4P=4V+g#(*OVfc-muNW?=aL1&Fg4QW&rR0AIfY!~g&Q
zc-q>)qrHJan_&|p50f_ICSFD$xt-U_KvPbLfkT^NJ7aF7n~^M#xt*ylJ-`CYVlGR7
zim^1O_*sEjtnOA2E!){9md98rgIMgjk**MR9Dz<Is^TCPr=`A%lmLju1y{#imf&p$
zR>!ljCEZI0Wbr0GK6aqP6kKaFC0qa%%QqE(KoCXIvj#{VnUZcLtORhd4#?Et04F3P
zNI?S3YwpB<pMe_hI#AQSLKmp{Hj(TsETAJfRM5f(2Yir6B*4M~ZYHrdW2Ac_&*a&{
X1`m8-_|pXm(4}C6AJP3;MgRZ+-aMo8

diff --git a/static/fonts/roboto-v18-latin-300italic.woff2 b/static/fonts/roboto-v18-latin-300italic.woff2
deleted file mode 100644
index db95c87dcbf94c18aa950a370261c1b84f2545e6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17124
zcmV)2K+L~)Pew8T0RR9107B#d5&!@I0FrnB078BM0RR9100000000000000000000
z0000QWE+`49D_;*U;u_p2v`Y&JP`~Ef#i6B%ry&xUH}q-cmXy7Bm;*w1Rw>2EC(PA
zf<GG}gOlSrY#abQ^BK@b2V%EFst{-oKQa((8~_UW<m~^Dz{wa~V`8-sWdPw|*uhab
zv7<z>c$DeFGI<bTpnk>cC-zyWHHM<x4z0zptB$XCV)L);Jp<cD{v@Z~A%1Ru_ih_o
zzipHtFv2E7l$0u|64<C%5fUY|L>pkEh!YGfKn3wDMq?ymV#P1v`M&+0x82p%_k{pu
zz6&r6vLjH)!T{OmA#iACjY50}{_*$R{rjT`=})rG-U}5)ih4WuOp8iXfik#r=q1D>
z$+vX&S~f>^$k{NwyZekqUut^ar_(;^{+lu7n9KjUWt!blEahaNiw@Yb=diVl=79Zv
z(GheAt6e!djt{Pur9IO<A?<9u&9|3=|4%t$0kkCmT>{7e8c`D_KwSdZSkxBH<>hlB
zxI8cw$jDatS}{9?VW;Aq3tWJK9Wd#0e+Qob);_a!=cWGVbEXn@(?Jl9(TVB){qs}v
zQUUG|cYv3O+{zJl&ZtF_2^+D(v5k-`j9k6@e{-ds<Y>2m<SHB}Sy`cG{!BK>OqM3Q
zN7-Y@9hX@F`&OvB-7O%wI$%{<*;ngobsdpV70y-Y`u~|LKYh2EW^9YCLN-&Vlk4Qw
z+wv}n6)}(ADYgq{M-3x~kO8D`jIAmex|r3Wk$m)xH`!PA!_0V#{nk6ARfu`G)P27&
z^?%xP3cPVKODXfbC(E)b5BM9GG4*M8-t&VYK*9;yZOfWA*Q>sI+YUD<BS-=Syo&*Z
zVd{T#Zy2g2)_|NvfpX=7N~D9z98~F`>Q3Wo)%VtC7tDwcppXNAp5Y*X<X$fTs0^(^
zxZx(x^+4tM-0W1K^0MrN6rl3zSYbL)K>z@F7P`-?UXq;-$N*mnf)R$=S7>Y9rFR}$
zb6^gP<->Xo&G9)iuMWGy>Y(|HV%ABeUv{;jg!4&NR$VLCp2hr5x_6mNr)jHCZ*;`Z
zfms-1>6tk+V0>OJ&aCK3D;xEOQ~$OEBs6qfODwb83M&~fWWtmgbC#^xu(ifoZrpkD
z;m2QqAR)qpixjOzt9BhmoN&@9r=2ls%(%18Iqxr*TsG~Bn;v-Rk;h(`_0pVIUYqv;
zWSJQR*5ujXu%+lGMG!YUhVUrjuy3{`LG<^(S(4|RCtUKLYk?ac1Q6JBP+kemJ7IYv
zvY4_y@3loyC*9GB1UbnmPIHFQ=vJP%%^mJ?kD2Ix-h0499`Tr2UNXlkUPo{8&RgE`
zKAO)PA5K8wIeV2v?w5pMD#><4mbt?^FWF?CZ63SHJb^&wKR8^!wAYalG9xHQg=b3I
zex!mdR}wFkX;7U$1Pt=*u@g?b5Q_^~(0Q-ShVMFuL_Z%{EnMXq*SRseJQ5tODRVA|
zOWtq=Zg>!w$ohJlx4^YB+Ubby=ZyzE<Pnd@q;bhSSKRO*kb3U(fQLNd@h2nhSV9;J
z$3_z1`dRRjIbQL4Od>qxIJD78cVdZo=FNNzu5)8d8c#ev`1Tx-V!_!g9L?<IUxGPa
z@mk^5Z;oi^ypVhno~IB-Ua`-2u}+S0&&Rgw-7`!aIKf2C3%_<UbImjFPUk_H5n>as
z{t;;zRFEr5(yKCORcBmRZh=}O1G!_s);$OS@kcwR#gv^^IfgIH=B0&Y+p_SUcF*Nb
zZ@{~}UEQtgK>h<*_-+!6c{QI>lpTS-hbn(+dFFn3zNEeI8Ed6YK6h~XatodLnh#f-
z@@eK@;rWsmdipQLvp-Y&q#vx7v(NSmJ^i=h>A&u62|coivbwZAES~#2a~HqL^SsU6
zQGB%vGgUfH`B-K%V=l%0?8x!VrxzP17xE&XF#rG--eN}&C)4z~U}0-srUhT!m&0ky
z2mo++>N0V3^I@zkb$2TVKjzK!m~n97eO_V52aH%gR;&8DR^Mahp1&JrZnB^Ktn`!S
zuO7ShCx2ipe+H)wf5}2c6w-8u1#y00p<$$!SCv06))y=vdsyoL=vZ>Mal6aUrTvEm
zHcEfKQCi5VE%<F*m{eZQ`GHlrT3?VoG?Xp36O|`E<W8RA8JMZOQ1P@ATUyUO&-53<
zo0;DBCBK=MIclEG55CuEpZmjO^VFbq#a_!gHQ>J>4TQsCI5?0cRv^%2io((w9L`)U
z;>OKlo;<1Xv!1#jL9~Pkqb))d9W`n!)1uRI-MZ-;@tA=ZUJEqugK!u#BqT~`Xq4b^
zsyH}QEwKb<sihWKW*N5SmV;JUfk>Y|Dgy>+3>i{n!USZ>lsrq87_3;KvSv+%4I9c<
zTMcK+7Tp?ausCx@vd%hkT)0rMC1eP>KZ1bCA?v&3ELL$1C5GdObQDp_w2NHcN=X}3
z^}SxEq!X&@fKiPxC3M0l%-A<$8+RVjU#@_zx`FCuF(utCGf3`Fso;Uf$X;AXFzYqs
zUXdbfVQ2E#=u-5sN?u8nVOBAR(N`s}5@siJ7z<@OCRCw_f^dZ;G{KXUyMa8ILYD*y
zAwvS;pkPNA+C_A1Ze$@V<8w!bsbdaPe<9SQnWBfn7I|Tdd?xQWR1rc_%ss(`A~fW7
zJ_dbjLotTE@g6adKfA14ofpNGZKx5v9^|fl%$Wz=ulHYX+Hdl=AF}#RA5V9eeUQ7)
z$E*DTe-CwM3E|BI#B5pw);;Nk*Jh-FrT=&59zgfiNrG5lPO|#8uCEoPWdmQ4lK>zX
ze=vYxI&NNo3H%}=5+-92GIcv$0a@*4itW>#?<l+X(g)+Uf9l1u%lX=&zRh{}Rsc|I
z$^l#?j{s*kAJFEpiLG}8V7Eb#`S)X1quOha-S+9X-vI*-8ce8M?L+e95Ry4;$gm@h
z!a(xW0D$_@p^FF*KetQ(c;@U7`Z@l`%T=cx#lSLkN0-3mZXXu_0j*<5;19sxbr;})
zUj_gm99S|uxfcOFU2H3z8R~b2FGm=60KgItfieIX3iay0vSTi|=9Nzt;2Z&Up&rzu
zv*dXyJawKHZz<23=fo582DCT}3jhnA_8GtHxGC4Y_8HcH7?-EaTRgSZC&T>AgksL2
z<}9%Ad*SP?4~zBxFaCe@k9fO$c_f532(|L*w<irC(Df^UDN!>G9{TC^<0VF1{N#G;
zOO?6mn(J=3sa%CyZoA{IduCMH^ojOISE=^KTkpI#uf_*-008*zed=XE7%)JmcmOC2
zedxX57<~*7XAg3mLB_~noJmgD3zRU$HOB09M!3OUE^?0<O1aNtuJVMZl=F-^ZrN8<
z@|sWFx1ZU>7k=`BU;L(uzxkgx_7637!F;H}t4pA^4DU1dmq1+&`%Vco)UaQbKw}O2
zO$lr+^Nuygl|WOOcalHlqJ`5qgLcm09J;uG3+Uz=4$#95+`v}e%$wOJY<&e1Y=3Mq
zd>BEml@f)C5u}&5bagKB7Gs?W0LbrS$X5?MRv7zF$C;XFeSkvO!<UTwrc7ZQhgUex
zj)1uR5(xl6M)!6Z#rKiJ5Ps;<5x7wCjo)gADd_2^^kh)?ES__clMKdOF2i)c0au=_
zCquett&^c8H~EKXhw^H8HE!`Wymh?9*mxOX$&9=vNT>-l;K@M1BT1(H`bRWncA=`v
zrU{{;)_O9+U8E2~HKB;|l5d@oOvEJr>p|qC>k%I<^$qb0krg|s%IutYd`(TBvuxZq
zL^kfEs##$XB<UkIwlPUrDUu73Rtk&EHUgAkCrUwRO-)v)ttl&36{<Dbp_3VmZ*v5K
z&UAK#GPJ~5+r_?HjpCK7CcI%C3RRusIO)kKx*h=`&Q3RvW@sf<SGLlbBbu_R16}v<
zGFZi{3Ek!iJ3s(&BV<suKI8;giQZ&}s>-wjLS($E5ge3Yu#llEvuir?Kv>A(RlrG=
zM5_!ZMPL8w$N*c&`+xOg1U`CvC`^y)P7iwH!7?k1&kK|tM4ipL0tW^ZWl_(d3nSlQ
zx?uE8=0mKns)E*6dSP*&H7}%87_BR|?%Kisr(KZJR}HhEjBrJcGqnpUx7^Sx%N_f)
zgxlG?AOFMKI2Ab|27RACL^MWDWR=Woa+DjdUPUxEGu6bt%{?O3Mz0f%(dc#Lz1_x?
zCNkQph)h#t=Ij?i5gV&XN4|QSs7R(t-u4&0wA41ZK-;RxD_N1H^IFv_;xt_9RbBh-
zpl9lu9;VKBdEN_UW|}^E@2Q#VD)Lb!NgJoOA43<-Z5x?YO5QC3U8Yp0+f*CxYafq7
zq7+^ALU#*&ZFosKk7%qUs)~J?#MGpCK#H++=AVdy;{0?}@If%Xy70^I*Inx72l2p1
zbs0XAlU2ZZKc~8&*Bc24WtLSuarVBo>>M-BI!Oqe)z*+vUw`i<WDF6o^(H`*sKkkL
zDuOUmyD2KdeE8b-wpZ@eq68N2ZfuB}juDOmZQO?OoSRFywc_1(4dqmcQS2lF3gH2X
zGU?4(HCANHma{vLqVzFom-%a*whNk*v1dqXT=mhbtI8~uJ>AWlrkN|WSz!}Bn(@`=
zg)b{U)d~cwMwPOkJ(^Lamri7%E=<WYf*zg3cSVp2*KwxAT?ZsaZn5nij}}D@zrYgi
zvhHeo!B4q6v{?LX!7s32Toek!A{9KRk};V{+JI?HLY92FU?v+j7T|-cYR(?zJ1T@}
z1@%581}X83s3Wg%2lKFEt(emmc>(XxX2L;CLg}OejP6lwayfnW6!vFJ!b5bJg~sQB
ziqK*HD2}=9F8x~#_IVSq%e|T%_2zo^v(&Rzn>q9B+wez0ZM-H>W-ho1CaGt}iAq?7
zPk4V}`fT=SQ6=}rQ)g0h7%>_C<%Bnsf(L><I9}|dRIx3E-9Z(1S*zM1w^kF=jfD!a
z$h;u+StS7vt)nnXb@+{m(n+o#XBN85Z9xJpg`h|!nITIqKWy}ova?53(NBS;q>%TR
zRYgl7EXBGom<bUr)~m)YmtFe7h<P<0?E#OUgVOtOLm0-;4?M=wjmOY%<=>|!#7+_k
z5!5WbD<gk)N+QsiqU4buWmr|y1GTELDAES(sKe&tz8j^xH>p#yo2!*!J418J;P_FU
z)B5fER9Gnbt%S-^qtA_dV$NI)lH;Wk^Oaj3GcyOvfz@lPppR`un7tL=NKNk(ON2-F
zz<dX~^Vp@b0|?7%o}m)6YIYKck#dsv@i8SI=NJW~0};-_KE^eNG8V6FWGz6$D5_|)
zfOpjaUE|AW>#!c=4xVZzHMxb7J9eGvm=Ycdc>PF&6xrwuwn<lJs+`beJ!(RXf$3Xt
zLvk(<R;j4=qm2misIZD&MamfQ&AxA?vnarr>s&u7`UwVA6%xdf;xNV*C6mSZ(HA5T
zAPXt5#IRxrN8&XwiE`|%l^uT`*Ix?HT8WL(UpW2|6Ba-6oQOQu)wJ>89-yTlI1J`0
ztA>k)*|5aF1Xauq&>oy!zQ9{C@$ikd;wcJT&&f|HW0q%3=o%}qhX^yPR7`pwmYRuH
zcw8!9=m9iP-!N21oR$e7qB7{Cl<GpyLL?Z&21KlLu<4Bb)YC7oqge=y{sD^Agcw}o
zswoNk)CD)LPw~>b<;hVTwXrj(+<-`_1De@}UlY09$9T<QDQvtc5obCgR<mQy>dJUz
zC{dRYUE^@if}pqP(@lS~`U>SyN-_CgfddGe6zQZD@ivwbu<6oPN;4%Ca@=C$)%C)c
zk(W$x#m9WmB-zroJ{Fz%BG1qPDzS3xgI&l*$d-6{5`?o!Gjbg37;1T`C_y(U>YGG5
zXpUc?8{yGB<wz_|UXt#{S;1H!L@}LM+yz<6@K}1E9T$&<vxTB$O~;>eZ@Ft^$#SIr
z+#dW;UzvoS9Y}33UstFo9|}269vEja)48nVu1WQQyf@B;AQMfxSEzx3(i&7-uY!%x
zLx5mMYQqG8u7S*MG!ym|rWQQ(O0FJM^*}`8%0`>a`pwIrp~RM2%^vB}0vBbEY5dyP
zJ{&q8{V*`H!l>+(c&3{s+Mlz;#KxTaL&^)f5B}czRXX{`5?Iq|+N%ahKvR^3qyV91
z7sIq?JQA(q@alSD7~%r^OJX5TreEg>LgG3K>2%w!>Mg-ST{GtGGW3x(fN$#Aztn+$
zbyD&R4GDysWA^jH?G`uNs?nrYV_#YYzsItSd4*6bR<(NGC=tmbIqTw%B;+{pKpBL)
zat~y-Xh#uHH7~t~*If&vO{IG9zn>EMD9l$HEi-)U30T?a`9DPi!NoWS(;Q8}`zcf_
z1tf+SWxh%h&!o;G3m@U41d=dDR$xWX&bTb`78;`R)o#HHTUkR(01SL&ol9-D*fG1r
zqz7CT$P!~pFtamkSxPi7H!BfXyRZVqqi*rJ;)KP5ovcH-=&1qJE5AmANMmg#8x2?u
z>M7vRS||3qOlzW*brk1N_91ezFCA=fL-`9Ia(=VFoqQ9La}G!HCk|Ou0*X3WIIoT#
z(v%2?w5Qh9$D9slp}e+@GP|k)?J_U;137<?pBy00zLppnSgn)<TM-g+Sv~mx+Iqoc
zpKH6kh|x;AfUX2Bwooy&FMf-Ddi^wz@0|v)WRdaG(z$3s*4y#n7={ef4%Vg^$W}hY
z{MFpWA}tcGnQ8InBzf&*J^0an>^2e*aE>GF<oy?YKMOM-QO~Zbwg~JM_bWZH=UPPX
zC-dYwGtwz+w*yg*i(Ny%CYz3hh30(TXhSCz{!7Xx(WU~^j->Aob}%mLAKf!sU0Y;8
zP=n#3d5bU?)PFmz1^GP`mrnqqYyu@j0HPeb)LHzACYkL+FtQ3pqKvPt=`@0Bfl^yC
zd#wiVnijs;5uP?sY)f}E_H&<zz0&At>hCcTt8lDqRZ|zgx$74mLE19HWJjyFZs)gc
z*KOO*Z{7YFkN&u2<R>dauDOdZ{i(ZkM7PP*FP*v}yIEUUo9WOZ7fav$d|HNUUF2(B
z>Qd}@%^DRmI*U#eVioXM4`U<V+Y}V^H2hSbh;^R6`}LJ$Ox~FU-kBU~U$)yQRV<-*
zwI8m7weZ5$V*1MtW|?d-4`rjuesU4XfmtUTkfKajv!7fT14&VS*&fgjW{DWFa$a&#
z{z5nC3&nY~1hpJpX34>W1yG18_K}N7Ud*zg0SU^6n+}i*qai8MSLg|Spisz&lk+CU
zcx8FR04U6(##3Innp&(+aWbe^IloxP&cBnIN9*|OOgk(@9b4pt^xgN`+63m)87*of
zsl2~C4|KdNk7+!+_dXhik8aTSlT)`|c^+^88|bvXJ&0NEuVq!?((bLKRxP@CL+@}&
zehf8T&OIv5Ga8mwN)#&6)~pQoIFrEDC&kM9ZBKn)UA}|>p}j)m#BMFmsaD6;%f~5y
zQ3?BL<TU)FowdYb$%|ZhuhYf<&szkUDD8vW39qu&Bm`)A^kj8krfHx^njfyheXpOQ
zAETeYIw#RJ)2o1)6r8<#S%^)S;orJm_Pm1GL2kyufalVH=X<yryM1p+RdL+GJiAPx
zOsQU|(8xQ*S@5~Vj=#k*aM9xN3~y+2be-V`ZF)hrxuRYc_Yzl#^@-eGpjuMON>zOW
z+UgmC49Wf@zJM-dhh@-oHNz0s36@u#A@vciU^+imEn-TEk#Y@r9m!Z5>GG$Q^9IJ8
zTvr<@(|K`slf3BPBTCj=CCnI6`h|;}URFWb&SF%HE{!bOk`0v3F@BweN6>}4_-^jR
z?3|6sY_Q7kqHNf4b1SogQC8VgjH==2PUY$xpfE&zei9C$sYk2<a!UK5a?`Y>>BAHW
zYn1(d5}iQLUNMHnw2Cc<YEc`S8e}xniW)mwD0Uk`iAmF)N9_2Ab{Uej8EtY7Cd2<%
z8pl0E6l7}a@BZff;qz1M^vJUJV&6_U1kV!KliVjn{4$cEi%*8KU|sFDV$^}g?y(Lt
zx@yl=qE1wroMdzKG%b<$f#AH{Q=vol2xY^ac^>!a#pDFvQ9I{NP2*@cVfqR4Fgctz
zVJqCW%h8T6f{$v{;^_i<w%NH-Q7nvt-TV#5=~;Mh<@JPhq7)N_lv3kKcTHA8uZe@a
z169;6D>g|oOgS!>%{;04`WiZg9^PXfrWW>(H=BkU1ozAF>BFSiQFH+Pb(^s>mQlQ|
zzZ`YJyT_R|%+f78s$d7YH%KyZr3q_xNKiFAbAVAs6V>!cU^$xDS7!dT&m(FwF%f0K
zoh9xMXeG?eRbTIv7sCT+;x+L)mZ3hfT2Q`m6~TxmSpEZ<s`DnY(B&GNTt=?Zfy&WB
z6a%*<C!VEcP~(kdLVg0}R&B;A1?h_dJleb@U#Wcc8WUSxPLggIVHGE7)iM)@_Ko`T
zqVIWlj73v{VyUrz6Fn`ue{!#HlrcY&p2=@aM%i#%<)YkdptSq#)Na&?_D?bU*e6fz
z%Zy5jQtuu2(){BL$2h#jfOk6D^SXQ>%#0_7`lfaU`(fc&QW3F$I?%E4{l$9d356EL
zm9}!81Xr8Tb4h6X&KNV&N#Y4H=WE>%_6fDg|M^Aa5>MnW`_j1=>_Pp0ihk`Oci<>k
zw5Q$v#?!4MYX0d5FJb2~#qCXIm+lrO-5dXIN{Dtyx5pv~`&*V~l*pa-Lt6=tOf)~{
zTHfd^oav}AGLwneZL-{EU_wC(>)lv)WL@Ao;nsQ90cuv`zPwcejhqp(gn34O_UV^X
zf`CY{?e1>8nO<1eQHkONYd{Y?*TpDS{?Ck}4@54{FBm_w`16c-4!xq2XE85|r^+Gq
zizm%!J-yg9^mbu7m4ZWi$G4zKf}-IHy4n;9g(BC#nvxQ*gT%Kd%}@EdvF^z7K>x3S
zbVJ2sY^k39rYto~<icouia^)DwY&Zp+hMs<#qE=)wjftq&dFAR-*2`cn{`K)#!37d
zt<x5?`rN)|@!mYv9a%aj@!JNoR;P8cgKkms@%`8(_%E9_OYoz5Deu-dib%x>Q|Qwi
zaY9P!=<n}BmkBBc%PC4d6g%jIO`dqw3jv|J)LxR$7W@d=ke_=(C-+1i>y9iht6nFo
zzQF(StNW&A^Fx+T{kE{~67A0vI)%<ZV~^)Co67c9q8c=HMy1b?di}$6C~A0i<Q(#w
z8%bt6FVw5gYSnn&5u9WT%wCh`uTXcEaoRBb3T$_qW2G00Mf&T1L~&j&v?|i1{St&G
zikGZ^#%O((f5XZX|NN1Bp6hAHy^KC`D09e%>dmdzH5?otnjjG>u!{v59|;XuAk9y)
zOY6#M6Go@<ExSTsm*+9nnVgDE5f&}i{ZD%u#9ork_M+PaMcbtW*A>2e-)SC|``|M1
z@k@M+ds*}K+sMQX;Na6koNiXjw*Ad09r&0T8sB>pw(iS<lJ_nLQybIgiA~6l>Y>o8
zcJa(w_V!)aW%P+ney#W(E;``8jkCTG*ynrw)hS59{vs&ruKJ@j9WgohW(T@OP_kM^
zb)AgtNs5H@QV)U$?_Y4nnN6o}Z87-8XO!k#5P<FnNAS&f?biM-6b$05OVSiiJq;dp
zno*U?zbEH39r_qmffZwyGULxv^YR%jdk%M?t?*eZtC-Gj-h9;TwcC*^w9QmWlk8h$
zEmi}bWTc;?7UeNJ#)o{+%O1Xuv&$^=s7v1RKPq2x673EAcFU+O_qFG&D9=zGHk}{w
z6tAJSJj|t*J(AzI`+6^NFY(JH?-2F;ysgr(`jh2O|J4{Qk%>5MvV5bCa?;(P+iK-{
z>Ev<?{EFXm6({XtojI9^{9Q_|u&B}4l_Mf2$nrv$YrD@Ubh_M1d01nfyU^<hdmTGf
z6A;{?U8dZ+lG_}qmKU>9VYZ^$s9li25&Vm9u%CFjl9PCz6}fI1UuBxTZhjh1aO4J$
zIO@;?W$D}tdKp}5P_Yv?c*F@$m}UpfUs<N<%v@tC-F`Q0$KAA5PvgVb@nMU3x8KAc
zQmWLx=Bz+=clR9+&wy2M|2}e&Typ7_FG1~(06U+SE~yYA5ge2%Y!Gql{~bC2_n;$Z
z@$OI!xu7MxR3EKRLl-mc1<OB<f@5>VGzmF4J*(1ohq4yL3`Pk_us3w2r)Engehi2+
zH`E-vMeIg<A7kfP$zn)~!gfdwi_rs=|J?8G;+VR`c&rt>IM2WCBSJ@N)I?coy?-Wl
zpi=B`wf8qhr!_6nd$O$aSV%Uu8=b#L+?@$vK}A;%%1389q7|?nthai=D^f$Tzm{~V
zXd@O4x31R<Op6lZ$3TWkV_pAsVmsRZ0*$F9<pMbe=z*%lThdTEwl~EpH0b}uG3Due
ztb=gr>*9O-2iy{PrY__wy-t(S*2bJ`D8;03Pm#wgqgu}O!!l;7?S(qw1{jTX`Pex)
zTe?PGi~(_fN(fiZnjFdj`t15m(+MTi;h8~p>_Pcv<!$2!8)1_xTYf{KNqlJup2I2n
zmmT{zb$BLGr`0D0+a9PFtkaW0i(kgsRB`QkdJ#&15r&aQmLYD={O;YT1zk9~sCUuE
z#$A_)9cbS(be1?&7Wrau)`b{>?UW1&Q5-s$uqJN(Z<UzxOaazOxcH-z+fvqZ^%m+u
z^*7{?i^jyFvmvJVVHqJ29xZk%DVh`G$AH*<SW3HXEeW(F*!kjo%%#mg*q3IkxXYUU
z@)Wnde`h)BwdXQ6q-zc$oxAjx$22YRPtI_RqshQ|gC4c&+bh>~NbqAoLfv^aKkIJW
zcJ8z=wcKx5iXQ_~H3gxy=AovkM<@%nr?F$*;wRE`U>DXpK|iP{9+!yDg*kC$N3mQu
zy<<^s{$+{e@?!35QZ}4y(M&6PC814NOBE)pwMSgyPA8{8BS_T8$9ngr>@7WnH=8zL
z74URJ&`(AiM{Pmh>=xlDcAp6EE|<{7t1nh$#bGIMC@be0zLCcs@BZG5Z6~||i*7rA
zlaGMA+>L$WmWgra2kEMvbwjs^9jO04HpNV~Q68-Rf3o0*GcgL=o_kb+65;-2>x2-p
zMtDth47QnY@rBl<%qX4~Bp940M8U1T1_4^lnYi-<Ny3tv?U#uiX#W#*PAypqNRil1
z@li3_fcD3(i3sDWhnFYCVLgPu{#Ct}rfYIXkePj^MkBfCHK1RVBJBg#(R<?Jp!Nrs
z`-@oB$88T7&->6%k}BWr>x0|i<RGa@OpGbdO@rAz$&_Gb@qkHzwu9pH_4F~hlIweR
zQHoRHA>YU*Vw4#0t3^^M-J8l+Q}8j6zmLb>m)uZGi^HDT%MoIG&nCj?2KpxP^>ggl
zaYOmoe>WBPy&!gCZFl8IbB>6!j|V!D!lUB?FbUzZR4tYqhf8S_*2482`xehO6>7^{
z$1>%u#g>7;1D8f94_om`!#2c(<$T3B>mv1+)_l2~Fk0%O*-*ZmsdWYjoh^?#(t1i+
zg;)N3Dr>6wiY}909?)@U@wb|a6;5wln|9>JLBFlE*kgN1G1DIH4EdECotoqKu;W*=
zB8{{~32gpCDQexrrZ(f6kDPw>7waRr&D*Fn{v3J9cg>$>5y1ks&w^fQtod2{=BS@=
zEv-{`wfc*VZuGPJ?e#V>67W}}3EWLiC}f4P#vARsQ{JbX(@7qyz0_W&t|UZ<RrzaZ
zcs7}Ade0qHd$~S>+p<-TDtJ%PLh7%~!h-pFUZwwWx(|;QBQchh5E|&==y?cR{zd>f
zTVx|8FbB(si3)Xh@`C<QD3KRB9y^>tBP_~S5+&eFoHrUczp6&p&iY8ua5YbyrP}!5
z)Hcq_7t&R)V%QVH1ojA9#t(aUW1IYn2hx>~>Xh5B5?eC?$}j8ALHh^~sfr&lpKax`
zpv~nvbfrVVv9}>xaEZ+i2bn9>p6DnXV+)3L7O7nQ_v;a~6CJsW_vg{`vbTuQMr`o7
z!fqX|H(QXr_H)@-_e~TJM?9R|hPS$gAM5cQQkhbp-F>8dAi}S7-<kR;6a$CWIXO)X
zxJ6F%2cA&9sB(9!tYmMbpT*Z4TKLl8sD_U4c&r?KYv}vMsl|(e=8snAq7w9}qW>Rz
z&f_OH8i^nESRvusmm^rgVU~{hmX0B;;9%{`A*>LSg^y)fkU@?^QgRNWmR*#T{g5a-
z^c}}9EKqYC>jXKga@SmN8Fmf6eT7eoA+u%Qku9)=aIc<~O9>X_6|C$t^-+hZ+&TQh
z&!F0P{3to2de6(?GVCI{^OiF%W^C>nZa~}MwHjuw!k$UbcRt%JYxhm>EL-_@sq#sB
zL`I35U@n*4kWCArh2@s_7!~3~;r|Y;IqJC6^nT6%AU>PafY!9S)6Hm3$MBw7RF7I8
zGIq*&aZgP@Y=c#(VGp%o1N+f9N`g(h@JdQ7y*Or93^qwx@yf_hS7C;$Fa^({u(xCN
z@|RfkRnKncm0^t-v*`BEcq2!u!o-UW(N`wW5LBJ0jZz#{zVa?UeBv}Zj+7>9qq{bb
zM(b}#DHcdY#Bf5^iNfA0P;b1Jk&=pez;s8Bhk(dTJ-D$D3X!y(nrmpqjG%;A_+&*T
zs_okdQi^=#T-}{*GtEm%B}S^foFqlnk{ilb=OQC6o<%aa_*_G@;uyQVUgha+Jfj{{
z_d+JCDcs{KPQeC@zVXg)z5%P7QC<0Brl1UKz*t2$z9t&{Wo#a@f$Zq=4U`kA@<<t!
zvK|lr735e3#RI5oY;fcfT|7wc=ANGDVEBIE2Zig&Zrt`WU>n$GX0|qh6%)RQ)p`~s
zZRv@J;V`cr#a^Dy4kh|!jEs(S3$k&Hj3PQlIEAmVi;Y^d%+a<0Psn#Vn(lP8nU&Dw
zbToq^|4ok-uV>%fsmt)mwo8kp_!qf4t?>nMA-IQtm9w`>1T$c<gcL){ZY`esGPx^A
zq1E3r1QVD=M0z{fJAimcww(Yl`8y<;N!}{qqaf;YEL}w`CnO&%E`TD~Sbziq{Xict
z|72g11HD*A@CBKwKS4X7DP#a`#dzz)T%wNw`Ry@ME*dXTOCviXu}Yq*(j`57866_H
zN+T&U@~|hGhspVaTkzTc3YQe`8WNw*0@fXw&f#f}25-qVu9iN}@EWH~!M<)0aT6hS
zU&>|-ct>N|_PJzlK3kx>(ep}YQg+J+Cp^+6k!_;WHd%>U#_27T4V<otvyJHSNRLum
z$-(%JOB3R=wDi!5P#BFWYni#!FiKizWe64r%NyuI2OP&&9Ac*UH}7q6tgm3T(8XzW
zsW1&~-K4Tn2$cJ0C-<N}bl?iBhdnkrSS|7PQmP&I=6|m-4)2dPekCrE2ULyAS8J7b
zIy=ie*$I6vyw&UkOP|R7-kMFnNw<va@#EcTcw~?}BeFWeF|ayfaay38YD!nK<r?|J
zC?~RLTc+%Od=K^%#JKFd=eX55$D{;{hKC*O*H!M#7@IdprHCkEJX@iGcW2a^xn&z%
zZ%R34v(YH-L&U~mbd{iLxq_;C#Ii&fq7-Pj^I5RxW<nWuzo?6BRYdelRGpNW8W@5+
z>~uodajKA3R5LoquU!i)9VM(gGQ-x?EMu_su?%luRdnvHLZQ79y1YPj>i*+hgj&?M
zn_9F+Js^EV)io^FGPR}IPU1su{V=uz`R-V0p|>H?rveJ$Ksh}z#VWnEajleSXQv$$
z)uprEm*O8O3`8PA*G|PP0qdS|bK$9!l~KM)Z}_EH3*5Pfyot6G9>4Yn&_Wm`aZM>G
z56TJ@GqP#i)?dSi31YY{OFnwny~pSX8Uf0em~oH1sGf4}wEWG@Vr(DklP(QuFJDtE
z2!coa*14PNegc~>*3xpwQCUfAO}dJ(3&*TR1dND!W=vk%O)H{8)jhNr6C0XT{fcqQ
z@~uI6=xAZ^Ls}7|sq)?Z(sC3Gx4W3FLm%>oztt@BepHYq7<V*`zwg>ubyK>``{YfH
zfacIxxE0-fB0s|JYQJBN+6Y$&iyx95o9(m9FU#j#{^i2a;2A#C*3#!Kl~w$6{8;Nb
z!zTgDguZDgTrYWh9H^PjDj;6Mrt8<p9odG(g76h7y>X!Ga&9i^I`MqHEBS<4Keodo
zmKV2p-3o7zhh1#XqF-5qwL1!Uj>>i#?r;SCZJ+o{J_7Dsm0goW!J=1^5ng-fI<W`s
zeG1R64b#vj6?YbQ$Xs>?NRLW;Q#Hbx!*;^uFZ{#H+aF450z;ttf#cAMu5S&)6}B6!
z)K&6xd<%Wx6OIKt@mrKm8%NN}_xruBS0N5-U@*Ra6S2f&kb>*X>n))Mkpr2VclP%z
zJK|l1&NpjG*H=8Q%ZJB^Cy>$vGvNg*mh8dUSly9^P7+)5R{Ay7&ZB%dwOL#2U;d`1
z5|yK4b$-8Co7w76-|FFEtfTSBMpTNf?n^Yrx3DVey0VZIoo~uf@PfOFu}fp-1F7EZ
zy7Cjv#uGniDWLes+2J(6VEpf9%$iJr{^A@T4}LQAfIh+;e~$#dx3}$DeM2{=__gMC
zdIlbDmKJxeFyb<^12lAEoy^ts9c=G~V2tQ&u|HgT!%p|ck_hcwE9D@rlUbrvB~NLS
z7*ACj<1$U%)>$OwFDg)~5V5n=&vR8@JDBsuD*4JaVzz{LVv*Ws2lI?_rP@WUV#Own
z3GYe|%fvjDD%D=eqFub>t9HF1`X}>!J;S2>2t?n+4St^C(Vj{(I+GitpXGAG^Rsc*
zE!oqJ++()&)e~j7MXt-A*)PANA%$z?VA7^Z3#R(9%6D~DVlgmZ6C{h(l3_cz)f7rl
z?lv9+tdJ9ncb>w-ju7O`7&a@v!UR~Tu9T9f#fK-cpR=a#RC@?`Xq(#3&Ia2ZgL<3<
zJ&uq%JaY(-J;ai#?7wwlCzQe#YxM-NSvJfCO%<GMw)7_+`y)b_5ajTDYf)1Q_koR|
zv=|p|q4}l1;@(A0g+lMxNH+|DA>89DaN>+GcnhzW1N<^H(l@^3EKYOFRd?P#x*dvO
zyNyOdo<-(vR8THf>MwTe&pcDSD5nKqaiD6XmYj0M-D5{uw-*ORn)8cL_9dU;R4DYF
zJ>Cxei&VR`apH`W)z;X|3(<5-Joew=Hc2i|7&i(J7nfsOE79_>ykm?Gx`cDE|9B}D
zon0-nld+MrZ}+hnYXx>`4j}+07cr!q0Sa<+4!rJ<6)1l<yUvZgy8cs}{gG3^3eM-9
zOwv4Ag6tkB=iGv9*WwKUL5<nvlXzIN`>eBeKw8lzVhV9%e|rH+hLw3RE*@a^9!~ba
z7beHc1rgnRg4}=)^fAuV4p66tY+ei_mBYhxpa6>Ni0MSh{yq_s!s@-0B9fEx6*NCR
zl`M<5e&It3^c8w}q@)wQiS8Z|3GMfu+!H-Ib(<C9V3OcXlC(M}*@vqWk_QS4VIEeS
zLx`qq>US1cpj2Ygj=W5mvMIaeif5SnI-iUHlD&7Zi<@t{zu|rtAD6Yx8@!@jJe};F
z<Gh5kLBYY<g1pVd3}U`)j|Aqyya8IB3#Wa&_IvKC@2o$CNqlyHBX(zv<zjBnboWjb
z6MdG)U9p*5F3!alaRp-8p*rDEPUqL6dufzi5?tGEWwBSTO5%=P6}derTvl#Gq3k&-
zSc>yU0CzYVXOCr8DX${Ifp$>Op&wNB42yht^xkqbNW5jZ0AQIt1l7rsZyhY;vD04z
zz{KO_IvV>-XiW9rUGJ)+C+eT7z-8N~x4Nv;`zxM5whOrEO&-91sT}}IwG05{wD>No
zv~K-ceVdYV901F3#ttL5X{t-L_sfYbd+D_OcE3Gf2kgPN!Cs1l4PX~oB6G%R_zs)2
zv}k-^y1~Nm&4W5_Fo5I-ZI2p9{;-o}QSP{zUtxu~vmW+#MR-Cf*1m-S{gQoOqsMu1
z=CQO$WB-Qqq^M?3FxDvH!KC56CBr2xEvhAh8irw#`q~WNrZu%euo74;ezv-UM5U5Y
zSb~(Jh6uJs-JM}3&S#uF0<g4b6ffPNcKBxPC<c%$AobbFAzBv+>f?6Q1b{)Jk$8C1
z@TRT-mE^aZS_20;eeio-bZNui%@&~)>VV*{%{3#3fClBF4Up760s6L8lVM9!LsA+-
z`Eu8WJ~=Pz-=Lz&k<B5pYONh5mNq;DMz9Bxlz;`qode+i-;vhc{~rL<@^d7&RR;E-
zV02qa);jrfD|I`j&Xjoq5Kml#t^>r|tg<uy`_~!!Yp^#@d5wj4ox8dd9b2Ot*N%3p
z-VFeU{G5N=Cb_!m$v5t{s;XD(^i%0{AJkLT6Jw~OQBAGmj#1vp&MByxko%Ma)mV3#
z59R-*SH8umqd5!^?%Ub48b<98>=Y-D>@fWQvK8zd`o)^!1`xizvqx-kiY)F3{u_)0
z`|a89f^qh5Ah(YvzOYjy&D(y4Tqw4UweBBNeqJw?olR`?)|f$nc;3#;lDwP8H_(dj
z%H!+jthwtUCNI}i%^$PivUix%?Z=^blgk^R-SzYAbSggrAN}O|P6_s|_VerA<sVt6
z9HbwAmyY6BZh1{4p_Pc=@vr;yGta!DC?OHQul)1BZ~yxG-yS;b<MeDy@rdnFfV3O3
zVcs%Gpg)hm(H6dV`&t8RLG_fR;j0lv+E5MsZrDzLV<Y@{oRM^6N+BTp6;<vZxPG4g
zJ$}Am0>h#2ZvZZEL+ZWA(87mrdZdTx8hFAhbVa9Bj0OJ%-;8Jom_~@qXqZNFU+5ru
zPtTQ<kfVI28Ra3gm;s|H{!vRAljUP?ibqW_O@mc)g>AGIxC-V>(-ol$UMGc`x`+48
zrjte|Za^#L`a$C%_2<{GjMj^E<7BRP@ApE&M@WMyfrqFK4s_rtPQl8TfMizf=fCb9
z!ZaOC*gKSZ*PD3sL~A0KuP(GCPs_nW0zoz<YSi6VD2vh#GWc3nzNT6kN3OrwxR9(q
zFkf&dKaVW?pY2!|looK<mV+u8B)LwY20b8K%p(mLONM{qPCrC2EYcrc`h7tHA+GWV
z(p5H_w#dCE0TVoc9cqMN;1f}8CnYMLFA0GF0G^RrRspF4U=T}0&~B6aMi2yTE4UGz
zuii#8Zp;}m96L+w!F?l(HvWqd%Wnv(6&9BqFKZ-glSOz6R&{?F4E(Ox{Q9Q8FZ_qM
z7x9<+`x{AEl(K<q+#%GXERPm-mG$I4BteFh?xnOMyg4U?h|SdArLk@cj`h~O2Nq;`
zjP+4bDiuCRfmx}Z0>N{n7Q3bxx|4{_Y55*(7%33|O+Xr@1Qj+_LM%i`SEW6q^nBJV
z0RvlufN%)(5T~bOiBmS@yFouQRH$sekG&hFtUqxFe!sKX+ugCJ?%&U=?MD`PZ%-Mg
z+fCKzSf}zY<C2_LaSqpXC{Rp=yckiod0|?<>s=}qtNpY)BRxm1+h>HJy{&PgIF^SP
zvV*>BuYeqY!jmXqj0&U_vWp@`+m%uTJ`xyI!<Wr&N)1ML3B<Zs=NqLLfILdh@yRq$
zOi7xq=PrmHEYJTRbpF-83NFB7q=4uZhsa!l;Z+$x#MO7kYYz*LtJbKGxZKq}h3Jbm
zNmA~KVhdVMr5!SoJKENvEj-s+4n(%Ap=nDwwJ()P=xU>OTlHVI;B8{f{yAYkS`RtV
z<EB5lHzi|(uTHZg{Cc#YVBw$@V1xonESXkrhd@{zn=*-0{*I9_c;C4f0p}Mo0%TY^
z!CmKnxC3uFo3)il;p}}=`q?hhV;YORU>xUjsk2#mJ`ah~((;ibb&#6^Ya1+rf3mP)
zD>YjV(s+PD8s?4pQE_+OZ?UnRH3USxe$2v_iBEda%eB(OMXmuu%IewA!Aled52!*d
zhdNk8K&5Ae+m(!LUsbSOJ9`tBIiU1U1ORXtgX9h-%E3CjeO&xxQ8EU}tbGZ~(yM!5
zE8TKXZGtSk8wZ0Kru%z_**Z!{xdl(jWxZ^IT|LL_TmwtLP(3su7j2Uk=O<teAqpGm
zX;R_HvN@#}rdTC?a>ImaCN0BNcPE?3syUJ6^yF?C(sVut<I=-kBiY_LTDm0mD}ZbO
z6{NHoi9L5vK_&R146E3+{aT2unz;m28vEwwfgMp+QP5`vtFmJqL$`*<&9p&LUI`@6
zZpM2)eUyEv8_>0_zrD83h(FTzRV-p+oNC|!i^>ViKs&s#X6xW{k5z^@Xsv>()Y!>h
zf~RExv3?&6t}bMmJkE*_ds|d&j?+erN!9!RMl;!b_RksaJ1=^SqcNdf*G8;hqoc7n
zk-rJm-;99YTlqfWGp!kntx7{JE2y)&2?mpvxEc~-TuEWO!RX6uwUDyJa}En!<yxf6
z!GhA?P;9DJz}7n<lV$BuR&Cz;9g?ID)KB^gY7&xW0vlPWY$Cl)C{bIY^r~M*wp6Bu
zU_@WLQ(Bu~_H}?7jjU@_4eT?pv_^I4nqCPU(Uz9&Lnu?(7jr=qCr)Bb3!wxsvAu1-
z30nq4W{9@nw5&qRe9T1}JKeahWU6N9hd}*CkUkFrqd|=}e7~wAjnW;^Y_KQsF4Zj(
zgG|mhdx&)CHeb8QpRArdu^nL${01taf~1Z(R#xu$<dODFtkxd=!$6b?XNBGfCg?0<
zWqKWSPS&rAe$_{V#!l*uWvLw)SvlDmGx)sLum)OA?bt*Mc_TlzdUX#Z^dVV~QWT0r
z&5m+|<VO0fQBn)g+G;x!=bXACL6iA1qbt_qK%=pNDQ-<R;~0U<u`8ISK`_Bh?wZi8
zoNwu6+py86+KoC5g<b9{*YV?CDNRp9mng-=V20`MB!l!bpR^hS=(yx68E8oF)Cw$N
z5d{h-%aq6Su5?qK5Sp>^QdZ>p7bkkUerE^{?qX7o>k@2)!|LwuF$9Dw<c*vUZnRMC
z!906Xwoz}?r>|4-YQ&8!BilFcE&v-O%>;5sa#=~GRIH8Eu8qipXb+2iSs{_LYpS{d
z6D!KZJPUq#99F}(Pp^RqZ0mla!{#3^6tOuG<3>viuoB0qLBv+fzP_%5hLNpcc+Oq*
zU3n>TJ_`gN@{!SbGeE0UK#lx-a*Bg|2-S}wUumYcjW-Xep=2fit3h|{FdQ3hkH*u0
zqK055h#ZYYXw61H#lqOc4u>IjjFUa%Y>y_x&gz!3^wn7LTVa7a0kD%Zp_Kc)WaIUP
zUNrk<5b;nn!YLTUGzAk?t}k{l_jZNCD>dcAZy!z1A2L=5QDbN<hA-BTM=zA>%gBch
zK*&kP{-e6|NWGK&%a+#asn`#Q)q4?jgA!xd=c3dQarpSmB`T`-?*?~r#{J>Fu<$H;
zCh+a<^TLLy_Hn!G*^kR0OT#|Ic_PX1jgo2*U#$1(*>y%s_kn#jEIBP-M-u9X#SWb&
zAaJseSzGsj312HUGmETFo>9Smdu3_f$zFG33U#io+2m}U-H-aOds)uB+Ew0Q26s+&
zO=&MT?aXaS=ywM0ZFb|&?(qxzd|H})y$vP4;WcEVYqzhP=U>ivEbLi6alV3E(Ji7~
z4@}=;OtPUQal^{{B_hNuj8f$)V^4-(yg5CFo=W2U_9|(Twx3ltjGEOho@-o6W1D*a
z^%zc`@&<3hae)@?Og7189L(JeFJ6@;(Vw>5TlB3r(9~jONA6=r9XRh-pZptXsq_p-
zU+>sJH1-xHDFB3lB59xuu@APPXbo}I5+RL4W)*{ZEBAgrFweWx#RM7xduc`0a;>*J
zj9BYQ)|F32ywczcqo-+X&76c;msLQk>ti9+Op#j5jFO<ycw2O4BlSmYXv3XJzMm1t
zQvXtku^f%QH5-;8zmq0io^9}9^(^y#g>pzO$mhU`Z)7hwLn&ac^#Ehv#9PMZD02;9
zV<tZ+pYNw>3gp|zWDKKRrdSDPZ3#@0&QuxIU}NG4G<i9fTiI3a5Jq^BRxlJZOwJ_~
zw#>@vmCX^;3tb2Te~^V7f+&kE0N_Z83r+>w+9abwN~$HU)Erdo;;`aSKn+$yel)u3
zvR-k<RIG<i9Re>f-AI01%ZIXi-D^qE8b^#~-1D0gsxi)0G_&KIzlX=~t#}{vnTDs3
zWzoz_u&*uO%+;5816iBH;^~C`rG}B-Utf}MJu)on@`Z%B$zvaH(N}w>pv#Q!P5n;t
z_B21@((;WQ7d2UpdJ^VUSxo(5Gqme!pMzgRipfZ)&q7Q)jGl;-_?D#vlQk$2ZaSj(
zzMWGKZv#egdDvbusn2sAG?Z3$OZO=iP55M!!|s}jwNt7Cy1~J9Z}UPfunYCCyBXI!
z9-n=Hf3qobm&Y<<zjAC;1$$f7BlMR*006dFB~HvrNcv{pYHKbK5}a&dd@Py3keEn5
zJe6nJEq$^8I&9Wzm<uPG%BM69JT-diD+k>g3w>-d&WElB=0^m;6pkMXom-Hq)5#(-
zd`IdE3jZ-oALZdJhMd444FJlI1G)XAoBiJYwu%|^tcji|r9GKa3#}jEX1FeHubTRc
z<$e*b*%F3{0WhK|353T7_?aw01Tj%Ubnva_XGSnZutWZh{J{4{*ArO9?jRSe-LMMJ
z$%BMl{zxP-K#XU;wX;k`=y_XSH=4<D1N!b|_RSXvXg75or3`Emq>CwbR9~USe;oJU
zShr__7#Oy;^y)}D6pMm|_kU!*l%7s%+ukBTscY8*Q66j>7BZP?a3<Tvc&-r&%38Ui
z7r}__s8n!&mo>1OcEhfVoN3469x4`QvF98UjxWk_64iy9<4c+h6XVuKri`6fFHJA%
zWeB+7a;B5}ZlwFOr$cv9fG%`2eV-iMV^9YVsWz^3u)IA|jsQacA|3TiRoQeh*ygc!
z$!Qd8ZSmu5PqOGk=~POvb+DxBnTFANt4HRHVNz{W-IQKC)PMgho`)P`AK$aK-IKMO
z`2L~)QBBs(!ns`koA3I$R4ecs<Sn?Wn|drl*uHat4gtNXPt|)Rm&1BQLo89OD_V!M
zh9V6uWItw*+o8hlhP=}I^#UB6sp2Z>O?|PI(|t!1<uqZZ<Go;uv$ie`&njJN(&*Rl
z(va+NyJCG>OUvw7V5dB}97xAKG_-@|9hFHaOy!gRanRoam4zJ%g`hxG*5z6xI$QqI
znRo*`(WXy85fvysv7DVoG!63@*ntifWiKpDvK+j8DgV<QIv6pL?FvmKd4ZghREL7f
z&hD*1>wOpat`FS-88IXI7G*~#+dlNU?9Um=W(pqhO#zH>iM)pH21)0tpJ5}r<aC{J
z&bVe=P&#JQ+u3Ff7BM*2rh_H-*BQ5rhZzsP#Iue!+KRY-*Ij1p8^>b}F|Rcc?q;-o
z;gaS$W0SEx+ILl2bWa^w5VN?ni#<!~H5HpJSenYz{H)0U@+YGSs5nO<l;DW8BCel?
zIY%XFDWoD2aYNi_2d1_Vhjt}Y(IKuU#LXc^@5LM?KTz;IEEGbB3K0(XBB^jHl0w~6
zNNW%mw2(0-5k<G96aoY_%tpYAa%urDicLg@Z*FaiUgl@c<)T@u|4v?X5C8yxi9fL~
z003}j`2X%7o9`Wp`9V1_6c_*ifPmbq_jCX#9Vq|!9|7>&Xo3&3UA!&u_k)}L1Lo!A
zcGolPV4mxO(Z0@hL>R3y>D83-87R9`c#g^plmor-lK#|4PX|jbN`qdu6f0CIB{>`^
zFLlc}KyB1#pfMgDD6?72=Vk*t9`~Nj;l9jm$tzeI+*$}D_y#LP&8p&7s^Z#*N`In^
z=KAd{%B${#J89pT{aS?m%evl4uLle-9r=CBo^1h~?Z0xX4;k#id>pSZ=gB6=t7J|m
zkuxrpW$*7cwxomUHHAxu32Zut+M=*SaN3jpm|`=o?dQ?G)o9y$%iHUcb{xkJ&Rj<c
zsy+1QZ~9dwxV-_f0#5xT%}H77rIvX;)AMBZVe<FY&3cT}{@)ns3L_rl`L~@!b#8vF
zz36=i%W(qMFXqjR^=DfnbLP4{TO_x$vdvM-4D+l0_M?|ls~LitAucNqIwJG)r0Vh2
zq46O{YsR}-<<e}RzWO~`Z(QGSJ7;(1cB<LgD%i{2ir&Sw+pXBTDR;fB&f(b+Y@46A
zV}jMrUC_>q(~KF+dZT}4vMWnj|0btlq!<|~wv3qcRfH22V@J7Vd)3*s2plR@bcJHf
z_vUlWNbX>6Epf2TWVVySO`HbTy?if|pykn%Uo1z*IF?az%bL*!lIfv?V-%bz4n&wE
zIbF64qU22+t!}I|<*;xNDK~DXBcJ2Mk?|5oh~r}s`)EN&#|4g!1x81g_zVyLA8n>6
z1TpIk049LJ4nyjF5g8u>`(OY>0pk&nvZxUlI`If(snV$l5beGZBs#ACQl|C3a+D!c
zu53vJ5()7bGh{S%@VLl`DVHi?OgHJ`=zDvI)OG$0&B=U%%@br3t1O<rlV#Y@BHYX4
zS?S%7#Y%lXySV*N<@Gd3GRu(!P1lG1850(4)IQZhW-7ghc9Z;Ep-k2cCXsmkK)+0}
zQzp=tA)6qr-kBiXlFz|sd2-{(nYRGW^fdfNh7hpu9au;f@AMOi%jm0QU=<jGbZiwI
zVnFi^jx($cSEzFUc@;Pg(?Zu7tDW3t$FV|zuVp(AiDSyKgtB;V>l~tsbv$4SQj;XY
zTHBEOF4cJovY&(L5~V39Rt7pMc#v8%mL`tzFrSRxS1xeZoeK;xnR2US;2Z2356L(%
zXUKQ$BOEG5nMI<ZwJI);hFXLS`Ur=7)C{#zJ)|xm4O*>=kO&ZFspo_<)DN|Ye<GyO
fM>rI%HmcXu1-`b%Yrx|f@E9z|ZtilJ0{{R340byV

diff --git a/static/fonts/roboto-v18-latin-500.eot b/static/fonts/roboto-v18-latin-500.eot
deleted file mode 100644
index 849f4a50b77c70405f90dd39da7fec46a37278eb..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17596
zcmaHSV{jx+^zBS+8=INfww;M>+u2wfOl&*Z*tTt38*FUs##+7K|5d$L^}f8*b?f%I
zeY&eZb$8vm-6stI>`DOuF#k0;!2kIF10diD_&<FmH97zQ`k&<gq7VoG{SQfOu`c=_
z|NnvnpaJ*{u=vkB|1%Ik8DI^t0@wq*0M7pjG5#C12H5_`oB-wk_x~ca0G<CL?f{Sf
zG@k)3|IOe8umU&$TmU|R(En!a|1rM*l>h&g0RTx&Iko?HF8}~6z<Le9nGWEp0#IM!
z%wNV%S#Ikh+i`UBb@8X*<Z}`*WfDD3c2*t^yW9fZaOxmXXL%+9!vyeE;&j)_+*1Il
z0jr<|r?dHAK8w;{@M!P5uu+JL>1c6eX=sS)V_5I|MDdGQ*|%Ks?z%Rz9qWmIa6-`u
zI2wx5Ngrk8PSR^KrA+iTjSs!WDR7$N-%A#-XGjT52yMc)1<}~j2|u2o{~8lUUACl@
z0mg|Cr*1i>$MBB9iKwVRGX`VbAKKEZeC{y-Am$RO@=Q8~?@Zu@JV}-hzG$7<;D#FJ
zih%fs%*zW-cTI<YC6$miF&6}nu6U8L1=W9+zX{rL(#?ZubU}O}#cRprMBFm?PvgR5
z6t?OFrk%oWxM|*oaS;LTedDj9gZ&7@#k2XZcr5*{-w+ywZ$UKjp8DvY@zty7{sieQ
zZSVNii2R@gLr837bSkKH7MiLpUe9ys_X@0jv<^tc)XS}r)z%-#a<a=JFU5n{i7`=h
zyZM}8(9n9ap|v%_JkY~9sD*RWcJ8DzjS3GQDv(-PJk7r;T)9WOw=Tv_H-syI^6gO*
zSg|AvCA&-5PM!vVn+HpV2eZ{9s6d6zO_s$172hx|rJg+(Dg8LPATv&@wn<h_MH~c3
zO_SKeuRzf6un#Q69FC@6bG{rW?@^ujE%0xP4)kiIbUQAZ!f*PJ_mQ?J1QtmcP*fzQ
z5G&Wz%R<QddG&C3{;3#gGF>#8ko|j90@SHxW%y&{Q(X76)n(Hk6K6;)g3^$m?Y=`O
zJdpNKLpOYY;*Hi-`H-m3f@|1o*r$ZNgaV2-*-V6g$84rQ)ERC9KgDds#-H8?#d0$e
z<2MaIz@NB^c&1y7Q08D)ulo{Vn>L@PT=<Z#OY6|WCFXYKb1lXSU}SZV9Jr9dlwe-6
z1f~Wx`SFuZ)6HUm;tq9D<Eiex!G+>CVGTm9VrDoR%G?oC?66D9Ur*UZ)fTf{#t$yR
zO;R_{eQStH$;fE(AWlhY;RbY|f@=uOquH-N#jh{6?>IQY)7h(dA0&M#L{S`A7Cm)Z
zTx#>0<aS;#s0`-AiKra~>?CIVGnNc<*x7b668O|4DHrsnpD-Q+PSDFnE#9Q94&X8%
zpEu~oVkz;Xw<z<>{afzCkaCmBC|zXb-BwlhKtyq1Kq!zJz=Qa?idk@(DSTI*h0~(&
zA=OiD?UX($Q@D75{O&RAE9%ud8)jGVtZMd~t>nt5tMDrG3U(C%PySOVB00JN(RKvJ
za%l{XjKpPLAfNautF~)$+6$4~RN&4!?BOj;ju*AODK{sJfQ!~6<rx0Ba-sWg`3xe7
zNi};Ss9br0OTD|Z5UwX}J9*y%(~Zg11Tu5G5F|_v=+y4m?v~}f^?{_CLhXe8Kzlpe
zFg`X7=}nlkn_9Wz!=8?#&HchLS8c{L)KZNVYJd!<_ovm-2b`}K|L^=k??rmlkKDWQ
z!vU>b_>b|}dyKYv`&v5>Ygui4kZ~7fJ=sSRXzVUh-*Y<gFfbh>_arUdMg$<6uJjSj
zi$(LBKRU|*e1qHOWf@C4owQ8~+A)aZwT@zfx5UIAZL1jVF5%w6o(k7lSm@*f@%Inq
zOxg$Z2Ps6~L>O<%!Y}mJ4#h+hM+oh=k+f-89#tHqeA^^?lvRh-dI|fXiHm}|gEdk^
zq?DLhv~&A6P1ba{e?$)zfm9e=lU6RlQYfPuQ`y7_-^qZvvk=u(DT0q=0aLT6<+di;
z!B0G=B4&n?N1cEJ^JJBHA)Rc+i;a9tgfC&?g7C;^<2%~~B;F~h<c=XGX?dOr!Y_oz
z<F2WbO)jOPY?^&`u`F0YD4L^Zs$oH=<kK0eaGF_N+Kwi!dqDvH`e}lUM89b7vJ-Bf
zUL&*3l{}}0nU$1;!r4jC0$_iSaSR>4O5Y?4(`FeTujb<Icb1p!`^e2?{$f~a6wCZq
zCcGhoWjua(F`?Rirz@%VOEf~XMU%srA4W`)P4b&n6(9B2{Y!2ah+|ChvC~v%Xx+;$
zT<cDdVq~X(6@K7Ri0%-dW%a*?9WS<F^;SWJa^fM>@dn%cQ9G_!Uq>#{G!BETW!D{=
zcYHA02@SF7)SS+mZzx{najb*4SBqD3EQ?jB>M{^fGCtj*7;cqbY6RCR5cMbA7ZQTX
zgA>i)9J4*{vgPF$5`o(X1j*lNO!*?C!Jk`9{RM_nNfASovy8vv)b^gx(yTN$QROZ4
zDf#d>cTuv84pUmbjH-6P?g&D+?utkSja9yF0zOCpAEX4B1@^sWqQ4>nJ2KFQ{8&i+
zZJZ4%U`M94#Lo1&CaB}j{b=2o@D@BmZ0P~5k^MQNf%;Rqono`l;gfuuFM;|so%#j9
z?)Q9J3(AA1(<55gk7pS?HVrMPU>yH4Pb{Ep?UQOUp1yuodiC49NzR(daCSe4A`lvI
zm+OidimH-HQz`eDc4S#$^noj`ByZbElW1h-IRJxa(BO7f+bqDM_uY$-zu|mUsh&8+
zwIzk={;<`6^rJTt33F!eut*Ub&d)p?eMRdoIHfnb9H}`M%?}$XP5ES!$Ub`(vq2j$
z9_PKAiTDNKg@^go?LpSsprkkpi(jOMZ_Bb*SYrH*l>a5WVE`MocZp@oCYSPhCb`0n
zPxSaHvvN3f58r`|L|BEKOymkfqUITl$jyCcGKOldoet`jMp(VI5{XQb>*rtz6JGbs
z^R(hTLWkuFceF>&Ra}YdNb#u^uq(kekf#HD5;47H2}**mH}KP%*t94pI##r7ujct#
zUTfe#n-ytNS1SNl?vf$G(HqrnWNc9+z0dk%saLn1#_j1DiqU@GjyQh;kO>{?N`Dde
ziZwR9>r(kA0fptV6DUS1lI<(b=R=z`gb2_MMZl+DCa&#DBZz;+pzk&Q9F9{^W2r8I
zka{**V;WznUXXqokjW~$(wEm@?<pXNcKYM<-P9+P<($y7!0fsqE+cM?JnXDSTY6{4
z$eCU45dG(7CYCIl;z2qXm!0vdk;rc9@n(mQ7WNjB0ls7nuT6+LRt7N@LZvaWnRQ5L
z0{e1t(P;paN;6C_j?6pEgXg-B!9T@iV*Q4?I6H3D=(I9P!T`5g$E!43=bhwWSg9;!
zFdo{9cn>3H89rF+={s4jhIigXRAJ+wt}#Qk-6NbE@W4-U<Ko3PupXFUaVr$T==%1&
zrH-Va!OrP(wO*6G&R%O#mm0j@iVvHC#$+y~Hhueg=tUNnoyb|mK{k#746<Mz3JLWK
zwI}4n4mYCyjBO$N4kLiy!b**VR7g1^J?SD|6vK%<r&aZGf)WZ>!kEg3)I5SX;ua$$
zT?^L(*b#%dLx>N+5QFH`_YcRy9RtBbBmAkeal7~j5V`zeEf@{nAHaX-&mf{MM$lI?
z-d#MiM0SP@Xg2oRmnsIVu;w2{B;lW+#}Er>2COmI0WOql32zO|^#huMU>W{vsOsPI
z4t1S`*FPTcJF;h>4F}VB_rW7%r)iYVgUvOI!#S6b-@W<I7k7SZad~{q1l_Yk9j{T=
z$#r@~eYw(k`<f$WYK1@Gz5;}37Ot5c{0{n8sWm)~x{s@h4vLA@1gzfgc<0H9QN7b)
z8(Hnmu0~YbrL!Nw=o0}3S-)xJ@f$=uQ#adHCfi#V{Jy?AY5iqvFcK?|Gi3-*XH;YL
zbDVLKEXEvKM2~GZKx09vN7UtmvB~xyreM0osNm&IT%HM-BzefH_a^#kN&)8JVKe1W
z7}$C%^T+55u|j){JWA!_*4@Kbn@@R(9YlAsRh){S%h8$e`s92vu~={Geu7i-OOBHI
z9ovID6&r3amre#Z#^mf&zT0IUczaA6vfV%k!YWI}zh&ObDof47bF|W2i;FvL#QH)f
zeea<YpCg{xX=G`U<Utc*Jq~jSW&Yc^y58IZ=;O>6{5{Ou^-Hzx&1f1jvCU98eFh6a
z5&E-(@Psf!I^FP1#1*Jri!XXBoWE)s6lz?Ae>tpQ0oOKDGH;4XsScv+;JX!X;<2i4
z3Y5AktW~KSqNvh8&)Y?I63y^b5}|cEp<s;HrV3T*J`IUMxOa%e*=E!YQWK{s!l+th
zgd0E6)GhkWW?t-eb?NL`aP>Gt$O=<U4BIF^FGHQvac4}6$#L)HV=k!2RLt%RMkNm&
zPIJAELFd#8+to7<q`is$b#LfPRos^Si?Cm|i#&p86S3Z3dH=p=WvB72>3Y|orOaLm
zO1=45Q3m{bk{r3kYyNArG2Dli!2zVd`%i<#96o$Vy11r=NWRbg8}CrX6hGZOc{IH8
z(Zy%UHqwr5IxFDfcAo>Tv32o|h<E(?a`wHNX~`7$%3W~t4p{gFxg>%oxo<#js%~N6
z4Y&E!kn+ueE<^I{!r~)YFj|T4dm(EB<yS$uJTE0OyY0O=Gsd?P-m9-8pV6e76WJv%
z^gfw<Qxe7kd3!MRUTvgfIoCV$QN}}c5dWfAri)u>xVsBxg|pl_IP)qhNrTsr#tt}8
z2+lvBFZIFjRr5jN=aR1+2=h{lmEgT7cwLR4b_lh1T{D$as48L{c$jcA_*nX|5MPp$
ze2(4_1?o36i!aD8>*tbtCYk}|v=jClM&cqv>Fg1EdcveY#2S}+{yC@ol#!j&BE)$r
zm(;$-{;rR>v-J`)8~_1JcjRHuxdDKcE~@hZ^E-b|ACfRj*=JDU2YewnHZT}H^R9y3
zESd(CLFY1!hLeU4cb&g)<|l0b35yyPjcJ5^`QqeW>mub-H>o&m31#8OiUJx)-W}J9
zU2TXF*JgLmRIxYO9O>3xqm<|GE$!?#>j4t##oryt7y^7ld@vz?sA7puG{^f$a38p<
z(p46mGE9YhFrgZTb(ji2Gea|m;v>qR!C`CKD&?!x#`EU~^VcxjD?5`QePAHmrn)US
zBKEmCtIX<j;`I5^P1h=IPUvCGBAh)=V3tEJsW>uGjr_1=G9EV$1#*g#MWaPnI{tkv
z<1=109^xA!C<#=NrLm{%II^x_ZDPz(%C1iA%bks^vE*Ys)=wa?ZD5WUl|pr%_8q!*
z1G^2|O(b6S59zAla@qzB8|Z|`Yabi)X*z!sfG0DVrL#rZC!>3^E49Ugf5jv*f<_um
zX-~`W83wH=cYMw&oKqe^TPnyk@ntCPr>4593kdZzy4>+XU?Y4QAu08v9XSQ@z~Se`
zUwUqs=J?Safh&D|RvLkqg3qzExQk!Jf9WSTQkmn>L9jzxX(OqJA)-@9KqlwG1feix
zTWyqMa2LCQpMl9D_<@8m_XA*}eDLzE<I5;3ji$21KFf^;i+vHj{1`5yS{R*$3bd&z
zi6pQO&ciJ4x}xYO3_83Vj`X9i)XK^)jolYx=7p(2tRc2-O@b4T;X`3w0^Eys2ww&@
z`LClnM!(fCCB~Ml)g_vPq%S9}D^>`4&2H%R8UTLAmfzn6rxD=z?R2ML*s8BLR(<W$
z86MhDImbe>3X%eEHK=e^tyA<150oN?I(Q!5C<;!k-cnhj@JK28YLP7FrR53C?J^3b
zabA`~PS!j8IcY)5<!o2+5$eJd+>!Gev%P9aT?>^cvrZ!e@oF(m#IS%n32WZ)JMI8v
z-)*Jn7ad{E?7$-c|0D9$m!%L#li5p}$0ndrVjOHFkBZX|^*9Bh<hyT_5-^Pn-&zXM
zwsyZHR)NFcukq@|>{_Zt<v8pbm{Tv9X^@W8Q}N5=?co$_#G?W4&EZ??Hc71ApJ~I*
zi5Os8JN(F=3}CWZ^+$N2q<)Dwd=51|cD)|4?IpsM`EfHB)W+ORo|F<?XENA^eDdOU
z<b37F?z2IGCeinDj<g3oUXNKwS~Y=M-fgGl`tj^jt*KUSAU&caBv&!~)1Zrc-JNg!
zlkrAr6I#5TPQ=SrZvuu=zikfrIhvxrvN^t<-Ay9pNh8lC;={!@QmoT9dOhgie@lqi
zug`JQRwWj8tvJ#vj<v8Qxo1W4*uFX<pI=U}msH)=vz8?&LCB1@6906ZyEU75JV}?p
zwwcnWO)0eu(o#h1N~$-MZlMK7mNis{-$N7&K<FOUToB)%wJdM5&xSX^?i>TTP>37L
z_7B##%i87)qC94MsTOQ3&^7fwg9zznSsQ|thAoXJCzY;VqVDvN>_!-vd`u4ITPu@w
z1g*Km1tZy6sx^xfL*j=}h5ApnUYok<$E^8rM8lN%1nq=Q*9CvWhiHmmF>sKLE%9gC
zK!&W<tbv`T2$1~ApynP@(a@oJ1h~e%T=WekcZfL+zxILyG%5%EYN7H5T4eAC6?8Ji
zoZFf6t1tt9SCGi?^&!qVn^84_MyK@DfPu10Oo|rY2u)UmmY5qdS<J1=aXu%NwiFj#
zs@;c5<<C-98d!o*E@>M>AqB&pk`wb!WuNL<Ab@w<r6tIzdxF!y(Vg^vm_D$yFTHWk
z{-PC;h)<;Ae<9=Y@;)wVL10<y0mA%vB9d<`h<ve!Fcs;=WLXv#j|{HOaOVZ_0RbR7
zX$}@;0NZajIEtm&e#+-|U9mU<xk7<zN}F#uHU2J^Dy1-#&BynVw4DiPjItVEbY=1-
zm(yna0TY42l0MX^UK0v)q=c!5$f7Z#mg2{Uj)-|9PFX696yG)`?1n_tC422Kk03|@
z9c!d09I72xj7`S7YclbhH9rb0KE+7FqfTVXk79UR;h5-Gqhy<$n7Wu`U?ih3HjO=F
zxMy}7&Kru;WVMNciuVdO?8+QXP@Mxc>ow`m%kqI5SV0wD2hkHHdaLuhP5fXRc}!<w
z)*h3F<K*FF=+w=-Lx<Lv17Z1wq1~ED3`hBb8%CI}cqE))qyzrgGQQ|eT4*t9*`2QN
z2-crmq6hIg1^`uV`_&8Ppyai;Z~Kx!m=eV~`>A*W($d}R2WoPwYu2VRIU(DZreHY6
z4~|}!lpD|3u)O@U30i#tdqHl+ef?n1{(OQI-*TmOGbGGRUvA!k7~iI)CJ1A(qB}Ui
z2u45OhnN?cUGf0SZ*2CH*fgXJOy**MKdJ$*Z{a{r`qUPM9RZS%)$g@^!JtE(0MQ#K
z;|!rQ<Ef0pAlhd}DN2FEY3j`>kkc@_cl?>Q;N?y5C*<l6r=^(}SKvoE?nvgcx3N)E
zyN$h{z7>vZo*bpGs)I2`T%~H^gnWFBZZj14^#zNxB#{5?>)$LM_n-`8O6_<4h~)3L
znn}qm*{L$>)P8uM5m1sv@a*FyVD|Hm7!M9fMLz6EJXm&)z`SDL)d)6LrX|!Z%V|(y
zT|>geyo(f8e4E_ZO5Up!5BOV`oUP1%99Rp9^AK?6niRY&@a2ho^AF9;vC{aC^_PES
zAgI<bq62%X=KFq8@T_6f15%khUrr>F46<V(VLcJb_!lmqV7MqeNhR`k2_dXcMA^>^
z01I<jJBoD3<VelP?p09dZJ<(6FM==?8rg<XN%{{>B-hRrk@V<T)3mW??9#Tp-x+oN
zDi_NuknuF%iPr8<KY}miS($Lm*7}raQ`&0e&Hc@81jwn_kB`5VVGvw(hZAzUn0*N0
z<Pl|*rOC<H|CS>;YYS%7QFC0nW$drQ;az_n)L`gd)vj@|t9mT+hY@B{y=Vg+vLVH?
zp>>$^;ySFiNaTV1OSDrYPnxRZ<Z+2!x(pU5wq~Y=AW8rQ6f`kW8@CC%OOwJ#bT13n
zN8Gd2g@@xqQWsM6mj{iFpRc+x;?4&|3Eq$OQMi%sOhNg~sYs8Wf7chzW~U1&QR0x$
zheDH7;mk3d<*eq5&tX;m?)~EZKv5Ue0XG;F687e(uP%|Rx7*X>g+K`0Sf)=YuWh?X
zyzMxwa3b4bJt(!pkyx7W{}fG47UTB=)p2*1b|wk5hz!!!F2`1Cb08E^5&{URZ2H~R
zSUB|~>4x}N!D4<cgXU>MEjXB2Zi@XlQ&DI}<=SIHnr?7h^JA^i^Q2B|R~S)RyV)mx
zKJ5b?cIcl4<Eg6^xnu&@?m}DQd+=hE7Gr2h%B%mD=vZz4VT$}}nz*@VRy&g<+lxK*
zA+?OrMZYp1Q(xEL^M|{Cpf2QiB35e9)o=fgE*(vbd&^NcO(G#9+7_J&;w0keUCdr}
zYYSa+eZesi#;vK+g>ofzw^kVq9UeDUv+!$O;qM&In$NgGKjj8C@a03lZ9M!v)P`os
zLycj_5ELVZT^*@`cFAl9p+qow`#efV(<)hqMoL&+Lm%@LP%*fHlm`YormR~V-fq%*
zuS&^VuPBK$gdP|&^840bnVG33j`)po{C~XKiKzY{YNw5dY@`{T;8b;gS4_3gNZ(%V
zB*NIuUhz*6sphTIk`zVzm7b~Y^%&G&2NK7WWV371osSPnn)|-Hjo3rkK2p99D2-|W
zn@4GZ>GtE7NX18iK`b&j)DpUdJ(Wl~?H^I<<>C~Nzx|PIz04&x9mYtW1v?z)qK$$~
zK9Sp|nJ)pXgvvof`1&iIuC#!@Drqqn;#7VkhVEGTYT3A&IVsdX%cH9K=Z{o9j92wp
zpyL#40((8ypRcjsj@pdA50&Grbw|KPZ~X~6e~#ySLt<XS@tue0kFE4p(9vd%3;8D2
zCOlQyeXUpQF7SC61<sKd&SY~QV7AK%HqeeWc_c=G<}kp_KtHs!nQnAiojcOw7p_aZ
zds~<ogxZ!cy#;%#*tdgeemU;&WBEx;`{PB1{dmel`w1K>;V86rUQ5xH<c##-+|9Xj
zroD$)J3{~L5l{B0-%f2JQj*^?f`l{B?5Z}gevP(ZPEm8$no(Z*O3#y3EaMcLrT(P-
zLnAgE8Ii#X4;Dk36|P>Lt!~#%O4<+_F@MoK^}BxX0W1K;v-AXLiA-vqzJx3SP?wxh
zJYP=3e;;ft5l*A4Rdt-xxj2T>7h=yVDG@+`s4(VZDAtV@CS%e^WCem1xYfxWEv}(y
zk_6=R!%-F0kU1<nb*8IP>SQ$Y;DB564*szUp=5b6QTwTIC(VT1@=|+bmF=+S40a0?
z?kzro4n^Pl;j#F~N=x$nvh!dWygU7-ta6SDbOwcE*m&jci6K$zZejJn?3(f0I-;0J
zr+j(|ER``BoMajTJYVW3L)0?hX+0Qag_Z#!Du(_gQVWia7i`oiYe|Ny_c$O$IISd^
zB<gNxE}k8XvZ_Sn^mzIF;$(P}ZciB&)J2?c6^|7-g=N>!vLX}PTADme2NnM$ZtQQ7
z0*-z(X-(HcW8ya9NHXpX17xyP>Mb3yhD}h*{M3H+d~N3sHh+e@Jrbp}Lw!CCePW(i
z^3yXzG}U$q`Y(G;6!!a#BYiV6PtFD5*C>BXFU3!_baTg|sD}i|YjE~ifcOGZTAf#6
zO5;&!sBQ@0!Uq=ifrSc|t^SChiftvAGrr?qL~Sn*_+@B9QTorFscS~j4KuZIW>27r
zj-1VFGH}(G*Lp;mS%|9%H75PGBQK<U|NT2bA`g0WBuZkq<R+q-W$U#3r<s3k1lZNn
zVP}qC-AQ-4d=Fu4A~ZTmU=ae@i~?y|Y{S_2L<DshC?tdg65w(S!{RV@6;6oo|M^OX
zlSoAu5{_Otk%ld|^zXuKo5EZsN3<kXGgU=Ke~>a`m044#u1z?3$E!NLy!H!Tg2_At
zQ<ei-#+7TQhKy>FMUOKN2xhrJMNXCfm=o|Ggm)iK0i@tDcJ6oT@RiVsjW#0sRwHjT
zwu48w=N1T!SqJ~#VCd<Df0g}UQRnCl)^}p|?*{)=@52PPo0hx!8{)~@ajJ+govGxK
zjnx*o{11LdQ6m?ULE#4iuwLKve)mjAW=Z}_8T5>MM|r!9y>{xHx1tK!Ye(4Xfq6B6
zN2cnvVy@aPKwSxaNBzk)h3}mAD8(+$`(8&H@b1eQO*t2meXG{M9jPaQlgNR-u40*|
zguQ}HW1YIUnBTm!&5HFI4Ua@j8V&1bzfReWhGJ~T3A=O=bKmSg6F@_t))`MrOUxYF
zbo&8DfHb-w?_tNfU3q`uuI<gravkebc+WkXTiLDNrqrHGrL+@tr=!oT1c_})@?-f%
zO{+Tv@bUH2+E4w>%-I8+ipZf--&7cI6a7Zs%D4OBj?%T55i|iFbyyh8aWVUK*x3|?
z{D4meF>6T=yl5tW=zgg@>eqen^(Z%=cK4hnpcpnwY2_eRaSvP-C*tQ9poP2O-0cZ|
z`+bKi(t!>wk;U*;PtLqIrH)6t<@_@t&daD)A;!fO7Ojf)s4}bJW{LM};o9?|G&Y4a
zy5f`jPggcRr>Ysvu-DMju~>XUA*s5E$%q)Dsr^-bX@1<3BG&-9)M!2aJd3y|p)TcP
z7}%RDw;4VlLT{BFX6n~bI$P$sC$)I_ywnJoRvm2Zo8G@`dZCv`I*nvdVk&p1)3UGP
z052;-l)t;L?p<mIRfY7AK8Th9ctWT(ii7p#uL0<l?ARz@;eG7gWrowLJky!lEPhMj
zB+&EoBsqzH+B(#(sfPm~3zTM`hhUq|!of1jmlw<W;tWR=in%+2hs#Qr?8AbMKQUHD
z?lDp$l=>aZD*XAf;zA}j7ApRBmB}z9KTh9ao1q(P!;n7orB-`FZCl()IzX^yPQ^WS
zGJmyEk)l&jJDE#&8~MLu*=a#7o3?6eAQ<P8Se?qer}Ujm^eO~3bEJr8j{%VruazcT
z;P4#GmYiLaRM7P;pMcfJw69_rly4Rj37*dXb=vcSpQzO)UB%QNDuv5zD(s-PYhbRE
zh<)1_+P#Eet)3x7M;qLImTdzU6tDyT&$d!e0@sAg7oIZ;hQ-aV4o6`<#+I&eKZJ+v
z`kDq@sOr$5^XVbqjjxZGwO8^CwUs!y$LN+?;Gnz#GXoCi0vnF8^3M`xSCp<lW&uYd
z-4aTBU9p5plkkokPZ|wH#2CWtLE+?GJf)%5&xEzZbbD;#J3I&&Ay}B}epUa}H-+Kk
z-3VbemiO-}3sy;4rYM>n5?*Mml(qYmZ7kGEiZQs4Fjv5E3MMFZq#-z{PE`9O^@pa3
zmiJ|WTkI&_3mu22zs6n?q&)DXDRyf(6Uo@Q$*q!<^qOR>t?d{0l$DYkI+t*OB8car
zN*HO(nbfty*Iy<CO*GYUsk>E}7jcL$;2*a-8RPw6F2A}jJiM%%NqF%!@kIID{@I_!
zwNSR;KskCW#lx`iU{`*MD8d(VjHvSlKMU!EK!WOTWAQ$D7g{{Cd~#S*vPukL^%HeS
z8YNwozsXC_V=&aDy{MqKln@{BWJ)=QmY{0W0csEGfaopK%Y&*9Rhe%}c;)fL4%>(u
zWa5mh+k+?jD|1Ekl#qHTKo%Jm6?tUX8p=FF(2o3P{a?!zU|9B3eBU>e&-pA29-{~S
zFh<0@kc+347#1g=!GwR92960@<9p$i>v&`r%ww>NUTsI>wqDg@D#1*o`b^m2vsptW
z<oB48a!!U8y`?`YtETG|o118-TV*l*(RPA8dDt6aiG?CyE_ud4WKOg7a5`bU&v|BU
zI0-*I$hDhvLZw$tU}LIG#F%<X16DJ?rVtV}SX*XJe`?&EdPI+vxReI5PEV1Xb{>ta
z@=F8?an?+hWguUhS2zu3i2uQ4m<GzD$>{NwD8OXS%VD&7xW8y=FpV6zvA#zJ;hZ-p
zxxWCL*7_aK)U#_&+=N6RIE;9?wV`7}o&p@FAzbVe58m-@g57imeE21tM=iZn$5X(t
zGND)2JW(|&kR9nw*bnIrg;?8cg<}r{GgP<01~SPT!IfY@sZ5d(y$M1K#?8IKN#lp_
z5t{f{{4g`_)E;!|j+_-uv;lu53RezPr5XspJYiBTGThw7N0dmm|3((eNls!Dv%Nu8
zrjk+t$jmS5^~sG~lk{L3aj^$zdLTPN>LpH%$iD9T^)gXC*R&{F;u6kB$Kr$-6=hkH
z(@?5r^?-~d^k-^H(Ra6=La-B^_Ct)-YD()?G=jC-iXp4EN{XJfO*z*xfMATfAvwuj
zNdkOZTEQLhD<=!?mP$^*{6pocZxD5;vEyQzoQ5_tk-JudZTrjoQK=2ozGYWPm-ph%
zhL23X>Iv)bdAQ;0dH~xfqCN)w5;_($d1c+3#CM8Yq~~7~Mn^!gYIipm8l@(4;s)Z0
zGWh{c9WB2?^?M`D^6P)Pg(Gzit0flre<I<8@13mg!=%$joQ6ylD1?bP+v5<Ag#cEc
zlI~L|onJ!TXnzYw-f)KS=1_}+Yem)FGjeE9O1XkAa|V2Na8s^m!kR`&@`@tY|KQFM
z741)Fo7XfAY`4)O3*{so)O<px`x;rg3ADg7kJ;jp`$Y_$Mq(>0mKf=IwUMqzbp9KL
ze1kN?Gqr_w0Ux8m6w-9WSWHAPkQQgrp}BnC9gNN#PNS=Q&YNve+sl%>mULuOg@PD{
z&mV=E2;e7aPS=w7=Q}!{t~I?`_c4gz9Y=a7S_T8?csup@!sFt?ze}^*8`)?tgb=F^
zhmS`G_sN1^Dn8KR2fra(AeD*2SvdC3<Wt+N8_m;mZexYhXOHxa>g_c~%&N*(4k?VB
z6cV@cn32e4mL94|fr!vPv|6681w+h>s0+DE#H{b6d{y3dc8=>j^(x9Jau0bEakfoK
zAo_TmalNAKwWF(TQ9C$NE-1yUGSTuVY?_t*+1<!0vTCmkg{E(1u2u5au^CB3G$J&d
zxKd@2RgoFqQAVZ@98-B6YUnIU|86dKaX;?T7ZwQ=Mf%@yD~?+#O$e~N7%Bsewv`VO
z85GLVkUc6|KI^4@b{Vhgis2II_#b6uaLuX9XZ)P>@7&+Z5aC~eH&(@hhCVVE9^XI%
z12@JV^Lb}X`0dUAJ@j}ad!qC0Kg-}CyZO2|LMG8mm8{j9%oF(g#>TMjm)Y_8kP9#Q
z6mmhZ;>{qr+E1{A3SBq~`XuPhP)p8CzPA%KeiUoIzv3}e6%61Fter^p6`SK07BqVp
zN|~Neb+IP9Ib^y5+g4-TB7@gHUOvAjC1s6&_tOA;E(PWZvDtQ!?z?3u&pa(>CnEt&
zMA_o^am0|c3CK386z7Ebf=L}Sd?3R2I&AP3I{7@(y~dE$AeF*>TT1TY)G_Sk&R)zB
zpp?Pykza(!D(<W`flWXS`;C7k2t6cOCo$|>9VI;qS7ebOu~fK7hWHJQ!CNvPsTuCF
zot2#|)p|b^ON&oG&%R!&I87FFAt`OYn!N4n{C1oCtNbC9Ngb|OJY;YI!l9SZcHhT{
zBsF$@Ms4mSEtQiIzY~}mm|UT|9ecaZAS_nKN#w|c*hdSfn<m;v^sLi5LP5Na6gxs+
z^64%U0M3qFSNaj?5qrdDhpy^%<T48haH-XuZp51)^5B&qk$la<r^~fcpx51x1FO)$
zD|Io}YQnCjiCtjNoS^e_CYlNzWW)l3DGDTDmw#cZRu3BX_jTQp#9K1ZCD%aD{w7{A
z3cztfl@)Cv$WS~Pf~w&!U<szRXmNt_f2q`=-Ze?2`0$?WFhe@unR*(~3-Cgmbl+fn
zA(r<oHw+$ScB~M*$0lsfgRs-r8jHmA5x|69nB+%6t6Gu39H*FniIW1sni!e*8fWPb
zV%I?0EGZ(4@+_%08T|+?_!=Eqt{|WhD6<^u0ZhLyWht?5TiuN9Dmq$RI&q>5E^>&%
z(T|t<OBNg4YHGB!Y;Y;OR)vXNLQ?q{fGR?&?1_&$0~k<SPHGJEpFJi2$$gqbQo!Py
zzvz!ANs=-2(q)8zH))WDTkCEke(XSnsGK!2U6R!ReArZowAodJ^?9#Y^zI%OSp50}
zNx{ZoR)H>>R0Z(tP&oQ-9y7s<k;4g#0mtQ=s_r2-<Nb3Et6Kbvnm|GOLuDZAy}s3x
zRm>!wRYV&TFQ~?WJ5jn|6cFa{1bw0W^D2<kG+~s2^MIoOlKjZ2zq&kwf#nopOW4%`
z)oM@;#m$6Yh}&b(sAL}&1Ev9_;*_<Ds-D_JQsxkxS@}V90wzO8iSIApH~10UJ^oP)
zFO?q;1-uwns#L8_{t+j%##lk&)%fcV)|OCHFOamjFFD>K{>$m(tJgZB`$MUmh#`7C
z=Gm_D3ERDf_P3<Pu`p=7l>qg5>IlbeLcJ`^6rT*Ms|)$>mb_unm*zE)jAZ%LgIt>{
zSm+w<pdrUq9K9qI_84Yh(c!dqYEO+XgYmB8R{vK9!=NciE3(cS`%<$gtWd>T_KwZ9
z*cL3*X#fT%=L|m74-!Cx3b26eQ8S0dwyl;zMZ8lA$ArTsuJGqRjuGvOq=GNdfrf1H
zYK4>yR+UoQ<I?{o%q{W%l=kN~iOuXcU5jz0(IE9R+#?=fRg^P2Qlu89ChoX(bimBa
z7ZJ50Ja#=L^7mR~{AkRGOrSX1dTZOwDFd)Hf*@*iAW`<Mhmy2M?(caT>dVd7s;r}q
zOvAS#8#i>r4S;vm=%-=~_-(h$3>s7RGkk(Cbr<6<Q4~D+MMLoZxv&*=3cO(2a6Wrx
zwMYkLUVTjJ>VF#cGCWBaW@FAlffNLG0ZeR7WEVF&t{g&Y#hmC|-V(^K=OH>@AxPQ8
za=DQjj!iVa?DQXru-M2RQ)OgBvm55!JwS!dtth8?b*ex<w!x)Vyk!e8NeZ086@C%v
zx%RJsGCfSq4Q&ha-};|t`_%R<kTlgj{kBiJb=B!Ts?nT?vZa+riyjT&k#q=hcMNuE
z%@3Ry6#BpJ=Cb;DMXLN<q)1lpCggXi)YWro<~faUcF#sVDWI)w_`JH?jS^=ruMSIz
zXVQ!|xi6*a2ao66O<Zy&Tv9m05UQ?y5C676Vp@nL;XQYbmR&sQ7W%f_6c5>QIb_Y2
zzVWjsB36ipK4`k)is-6jSS63)@RJU9wdjUW7m;u5htQuAq|kr=tJ+8wB7Ipkg9<At
z==0Tuh*jr@B?1}PR%s??ZC>~@IVR?eR1N6KriN6zL@Z{$4Q*F<nH=Sp#Cul)WdsXV
z1mYZZ?B`Rr=z7=g9X~@I_ns-;#3lG2f^*IeIX9oacOB`k{cs-sjWl53$YrCXFy&Cs
z3xy})a3dHib){y}fh+)dOKMKFWsaBI8X9z_VqeJ21p)p$F%u2c7~;@p%{Vz5OpoTU
zj3Tr=tZ?tv98NHeG|pbbJ2)+O0p3bdI-1w<-c-`W>r?#}(Adn(2<8>$${kZm!I99(
zR!t@0&<G@_b%gBgT+g?qisg`T3+SI=38f!n+HH$ur9=&jzlFOAJkP8wxGGu^biBy=
zO;V1LCozt}+3?kxVMrU#XHJqQnkn-(Q+$vxwwuGCz(~eaJ#AOHoksLRC<(nWHo|Fo
z^-z9@m#gM2l1YjeE;Y(6By5|B4=$0vej;z(Mb(%wJ}tl>tGn4|C=CYvumTt%dsEix
zjHp8*&ueFs)~1*<O4LPe2d-PE3L37yIP;?Nht6ps5IB7(hZLq(#;73;(u80{dcdPR
zk@P#++*3=}HhYttvH#}YmXfv-)69clBqvA2rfs=OV8tq>EP1q`RYjkmzq6Lb-~Bkm
z?}7&`LtzJ4F3XN$Or6g?=u(*lxFeR=)`HxTi5}Ha%o7+D=T;D`=0d6Qnl^|^@J1-G
zVJ5Y$6rgHtZ5AinSc&Z93pcXmVY%cB=TaPkM4H8LnFwZ~?$nnVbHjwFHwJCZ&)Ek7
zGu#wp^B(O*ZbgM9SCq?fc@pN<p()2_>+?GQY6(}p=i|&)IggUOFIG5L$!k<{qi{w|
zFZ}qTE;NV9^-7&_of&09*f)plAPSau-eEsa+i?BUwy<<uQ}`Fno(|mecC6^bVm!_g
z<i<(t#d+cF3Ax#rsUyzye&LxJfEpb!4;#zVP>upezgCyWU?tx@GOIY|)Q5f~{W^cr
zd<s1MHBDEbD)3j!!FJfh%p4h$Nu1S8$=o1h6FW`}=-t~3aDkhG@dTO?0~m&iVZ06#
zq&8V?4gp>d_=gISZ>PU0-b{VZ5)tG2SEVU7f*f6+a>D<46Qu@c9e;zV985XRPjps7
zWqTFX*tff{jKx5~S$R9xn1nAVem1)SH~Dzc7`cRN=;aUI;FjLY>HHHS8H2Re%pNav
z$I5mTP1Yrtj)uFjJbxFCQ;K$&+f9sETK@}g=Boz&Vi}64J`wTN&>o?tp+z)`B)n61
z&Lnk0>X$DT+E&Raf`oBRAw>=qZ{u94W8acZC$x}86#E9<t>7t>S`UFgvP`Upp|8uS
zqS^d3;z#W6H8@9)r}f7QpTZ)OJ(0my@j4@Y-e0XqUgj0wMga+Rc%$nyIB9$N^uT>Q
zI^0_|Ttk#7#&O-2s>=4IV3Y_|db~!2k|?$od#y2&SfMI=(I*oosrm?un8<thc~EXe
zmfTa-*RQ+RjH#kqv^(kuio0~~8kB|9_b~>_EpM|_G`psrh!&W!7PM|S-)U`A!dCR+
z)bpI><I_3QB*&0g;A5W=hEk9WS5*-P)d?+fN2!{>c3x3!n#WstU6EeJUx5S(NxZot
zADD#kX)pEnXfW2ZOt4s3QCb%DZ$9$fC(x5m)<br{*UmBuS1u_ec$t-Rk9xUG<-(Gx
zS#V!Qk>=mbeTUr-jDaf#QFi!iq5%bhun`lA@IeM$0)DFBE0G2N7U`vc-L=?S1=^0<
zC9{IFv_Fj#h#Pc(w}kOdmaDjGS7m+LlpJm7$#g!u7t$uEKoQw<hqE6T`t<4Uvy2}q
zQdnZ`YzvOaL}ywUh@W?=kL1a^*Gq=ie+<V$2Fk?OmIFh}5F`wi#JAQDbn{iduaVc<
zz%QOgZ>i}|bKW^mdLp{<AD7{3OnZKkP>gV0AlsLd=w3-W1?r%WTPPs2&Y!7(eitt&
zK1Jg@n;@SC9qpywY!%p)yP(Y`%Lm`fVC8R(7k6{yT8u^7B9uMZX}9lkIZ27Si;PJN
zj>$KXOGmJUPPe8!Sg3p!IsEOURFTGw%o|r>4c}<Cp%15KcQ}10Cd?gNx;q?m;_{08
ze#mq@F#0Tm7B$bqwAJQ->@?SCmityI(Mn(akF1rAHRfY;GlMrm9e>q)1z`7OF@6sE
zyNCvM+TDmThRC)wm=*T+Nn(>tW<-RNjCA!I@;-*#K_I#b_l+v&(>4oIs0t$!hr5m@
zXeC@~6&Vj{FUOlDr}(va6v_3q7LCxgS{0v0u0lFWPHX8ZpFq-0XIH?rADO5(%8o-0
z&}BWrndHq51!M=+Rodv-256Y*WJRu)wy*&Z*-A!|qz&2++wZ~vfD+7U%i%-n^w{K7
zWo;b}9s&Mx0eArceQqeJ1pm^Rpb|F;J&TSk30~BwWXh#dx8H>wG})UU4=>hcVVom7
zft!GPq6#MG!@{jt5_DW2ZW-`)&!b(`gkatsWlbxE5nj-Yf!~9=lA5@byeGgK4(GLV
z*umq)<3^^4KwwA1Z=HjOysRtPE~rVR>b7-9!qvITCWFCDJn@US#ly<SMLoLEBloX?
zo%4KgeTl)429B^2%>fD9;AY~4q14K-|HS10o~T)*Oxl+XK14i)PSx<czRT@OoaYgl
zPqF%tzzeyY6l4Cn;7Vc-N%ERZICRv5!ciqzIME;q!OPT~_cvbsfYMn?&9(#^oKSqG
zm+k`qu`DHJi*uf`t>j>{gB2le4TBY9K}i-8w}K7T#xX`cdze`^H+)o>;ExQA9fm_~
zX*Af5F>FW5J{?3SZ+>(sYcz;WpV3sMHpLUXGyxWf+_;l;GVF5sWU3FE&JL`IS~Kit
z!X>{(H>*}@-YF-rf64&Yj~2}lp82qwxQXU<(eo)ZU=g@2QjiVsdv3(AU`Nllfv;U0
z{%CtmF}RNhH7i%?2m8=8#vCO&Dyx8IxTnYWuP&7pQkuA$EUCgayXN%N>w+Y&$_O9!
zq9xkGe-{~#XzcYb_!F56bD0j|F;_kh+$->?n&p`wjwQeb!8O3o4HMUWAK<{@*EsbS
z83~J`&aZPSm*j;1xA=C_-*7Jx&Og-@eV_=S$p4eq_Hz~3W_t^{JT{lzg7XrE5S?Mn
z{ro3wb#EP*3TLRb&qN)KH$kZ-nJ%tpb0#zV0k8$VUsu{D(3tZ>aJt%Mk*?|etr?c2
zDC@!NKM)!zR>~7hn@(@hdaP04D1D4i^ge~4HFt;6rxK|y6`y666Wigr!8H|Kk6rJy
zzi&{T=mUs}g!Le$o9fam7#v$j)cJUkmIOeRe<p^#Zc9~@fIyIcSTT1|K+<J*5*DMp
z343__Q6(AY(%CGhs=LvDRmI2#8n9t%HGzD<JVg#-Nqp((wlt9Z7W=IN+5$%m*@){O
zn)s_UPD$xkWtbMq0CC%6>pvmB<hq__r4T9f6q7VCG`doTT-5?sDT+rF@(`bGLOUd+
zB1P>4)qISX4~NM5+(s<!wNo<lD_5JI;v%C3KYj{~hX9h&7`;OoLTblbF3%O7evf$N
zuDr7RwfCqUwPe(0o4SE%dbL|3HP~TOQR63a$8XEDCQQx|EDBvIC!NflGl7GP1?@%{
zR&&)SZJrarEp|eMchh<fzB^+<8D;)51iiGm4{efn#O=xbbS^MyS-!jh7r1A!<L%_m
zAW5zDc@Em+l^!2pSay#H^*&clGzyBq8%WWnM4VYX8<=8b1ibvCYG3E{mFYD=61Ro_
zp^Ff#p4;r2!=@>o5Vti|?Y)Gl821fl2-CPiq$P^Pnk?RNYF9|-9fwj@Nx55RJH>VU
z%+xr)4s^A6A@JRM_FEdk=t)xE&IWZ5n*^ThQ9THYjS2Pl;qfW__*=^}5(e<k96(L-
zB|QTM^_cAn@AYFCZoiO>Jk@NtSl#2l%SGiVU!f^ke1ooET2if9-ow0fL~>$@A9ebh
z$gFQUb7H$18(NCm3JA9Nn3m*ExM4PYd04Y<j7$5n&{6?uEH+-1vNftj9NJqG)XbY~
zj#4%sH$5v|#giYJd?wTDlI4vuW#E+M*o+@>pceQb0p83^Dt!}{iRVhmR;$xE`3Kvy
z&M5U;8@OCIa?0E3rkN^cnGKmi{Q`;)eS|7Ki+!KA32BDqhfWWZxuAWbz?P_0Mw{i#
z6p^Zz|B-FxBxV>1zFIwn^4{8E!Q#odd{fQS9X&iJxWNp7rG~l=B=xa+F8!*akH7v%
zmf15G__KvmpSl>v9*a0)hbdE$oh@^!7#ikGT+<i(^MqgtG^KD~ykb!w9%@&EDK&A;
zS|$(#T5W^~U|>9&nmQ1X7*^RSR{s)kF0x~?v5Jm&nCfK_{AL3SJbuB>hFVNO<NnLr
zAC49Nn^MQm`a>Qg8xaz&Y?h`|4TiaHwplXZ_y*(yy#O&j4U%(#;FH?npJb2@i<vpx
zzO;&QJ0Yc)Xp~DgV>c<PfTJ*?K)o+Z1qnnHXFMDnMA4^9N!-UvYSJija4fm7GqzTa
zI;Wj51kwdV3l@~0CeWqz^-OW~K)>1PCA3@o$!O~Zc)D}$U%(2~Wh*%gJMLy+P4RBC
zyKuOBPQ(y-7?EP$Rk$PhRV)QqSj)uUpOyQRevBd$m~m4&#H`?0+sbg9nFt^&)^WUw
z!R1fNf^>oF;^bM(ZdDIZ{OSHz${f#_qZtk*eFTr1?8aOk7-km)`59JnW8q+H+$lx6
zlJW9l7gCl7;WT<pbHGE3AufM1j-+bB1Y(l}%#^#ILi#vD(a;-0O}5WsrbMGRR!(5=
zYmU<|B&vQ0r0IU*;Xvr&HIY&MpY&Da!7<*+Fo2F)CA1N$9o`@w(jGx?w~vJT)YWPg
zIoB@*msf_FNi5;GaL4p;ymg0Sk4RC({6YJMWORwZ>{vWLfGFHASQ#+72jW<Ok5Qzl
zX#4Ify<T~lemW$b1~(VKQm+@qVEOn&0#vnOy0&^GR<X&VU9Ju-Fl79RjRJ72Jbl8c
z<=Xy;jn{+6MUl)4=(*2H&T(@sJK)s(N~x*KHN)LG&6V)e1tzq`om@kl)+L{;;K<z$
zE}Yv#f$b4-{vi=hhxTv7(goqs@vFFvtdWl(aVVTf+W6Z%*YX`S{dYc;#zdY1%K{(R
zseW}D^YLFbPTTo>v~aHVwB0{&+}|q~I*j+`*vSY}8qLA2YjtNA?xY4!60lY0FfWb2
z6dK+Xdr@Qx@U6KFfy<xcxwymRX%{UjCYK&0x<M*H>%omwXjjbb6NW<l108r^1TllA
zNv}|n%OiNyLM^lqU|jqV_3dUPeU3m2rLf}uLv6iz)Uo^gNUj;!p*q8FMf5yMAt(^*
zaH3EMltH+(p2?OzW0{xWiAe7#Y<XHuNLn@3fMEVB<w>B|fV(K;rOjJYG5#axpqfbE
z)VB)*XHdHimJ6#aUK$miIqC}SS4`2J7+{?lQTyJ;Pq@ndPdE!hNz^e|^>^jG*xZ3-
zp^;nGQ5$;R`I5%fl9H6sKK}8Q*cvE^U|b$VW&=(dDlW67n7Y!wm&S9%#rJJM^tg*9
zYBJmk?|#?3))2ehP^NkBp*gl)*ZuFUQaj<Cm}I0*Qb`ah7}8~Y$GWL#xhrEfmeMvT
z(eNO(L=#3)YTp$?1l}yBN#*XN?{n+sBx=D1*q|^3no1xRQ=t|+mNK!vK9uB79&#Um
zFmBr>C;pMv8PPB?=M6Z<MSkbWBwGrdu_1FIOgm)dp9Y?ED9@(C#4p@x4JZ&6<(lC(
zM0V|8frwKQh;45cOxre(zIdY7U{_gYQtZ+*eTgDuhimf03aZ{7&RcjR5lnQx>atJ<
z$;H21wpo|ym{TvYEa@^@feM(O-uJT1;yff+|Eul%*)7;Wqg)xKKk?X0NSyPah*s}2
zR7$IWNdf%yPC!kX$lFpR=0f}GvW(lW^_d|iP;HAg7oo1|J}&tu0@<8eql0ky9i@&;
z;V&TR>q2@IPI65#B*KY_N(+q^R$y%eN@?epn%vT8P8-#bjkbhuexoMsvdq4e74F|}
zzV-$4d&<)&AQkmb#u9-jv%GJ}b*>~%Jy0U<c#+U-xW_(Z(GqaZYzQNe2F53_=jOhl
z*p)kS)rNRuc$Gvc<vo=f4}eyTm4Avz7fV|i>{eJ37nyg<55rorN`-!J7KZgfbfz^^
zK~M6R;3|Wm<y`gH6FzxVWm4bB+?9fts1|w|)5$;UK7~fDp)`^zg!DPdOHo=;B>JI4
zdyLF1EF0qW&1aLWP>Ju&AOJgc`?2t5W8$zVHFHQv`+c{(q(cZ<#{xbBU*%&kppTa$
z(1ZOuJ60MX4}^h2ptI4nOG6|x8rfZf8an2>fGxgz?`4*1Q-q6S{Apxk$SX_&`9y+<
zXlIQ02xd6+0cBv-cS$%PxlxvgUvu>eAqeB_yr|g_VNP|Z7!^!I^uT3#LZc{SyeA9j
zlj{Q#$>W9bSiji!gaYpaKz1p(Hkwc*1CdhjcX@Uqw#Tq*TFXNxj`krQSKyR<vTdB=
z(#M``F3_^E01+*MJYA<!PX!geNt-en(!t7rZKaZCB5om5l81c<!7dOZ*VMh`riK-J
z;Ph~?MK^f+3FA)gM@c5ypu8}Cv*=3Aak7I}K}l&%U%vJ=1<b5TC1_#hG(u*h(_D-w
zqQP)1N9LqC0rXu2Ai@-C4@hT{J?!jvt<uTyrvi2z%R1x!`&_``%v#s`wH+OOW4iEu
zw?T90;3FKEV0Ls^h?w0Zz#h+#Cto&&C33%tbk}c6+atH^^!5fq!p6-`p_=$#0Xqc5
z`#i)U?&^Sv5g`<Y>3<@=bM2&n#rkm$Mk$)|S<^FY^!3xkXqg}aB(MV*fSZ^gZ~?Q*
z=qV#4unoX7c%kC~J^chT2P6rx3K)k|5g|C$^Lch?v?dUf(2_K~kyuoLg|>d5qz<Q;
zWy_bP9K<=x6vM)%7dmE*o6eQl#6u=?Q#lr>tcz<WT2~h*qzq%_7uy^2t7r;y--xx$
zKXr(wXp#f+zmyE_K;>|<&Vl?0%8c9@UTl2?BNBs{9YUmx5te+zwgyPMGc0e)e!(eq
zrD6oe2Zb}GVUVjVdc^=BZ|G`k-ck%88_|AfG(<$t;0VhnV*tgO(5-<Jkl&rm4bdY}
zVhTo}#1Gzs0id@QrhXEvr9-~=K`5wR1|S~h_sj&*fsHn80hmaEo%tmLW-Q*m%Qk;H
z+JXnB+4{L9Rf0@NevreEHxFiRmnIX<i2FToxUKNK0LXJU4s2;bTt@7SvpCEd{Ji4U
z0VVzVRNu=2Z6<6uVm+yaAoA7P<{(cp!e4uf*{yadm=6C%`_7LBY!q~2a6|*Sx^_uu
z36O*{t`rAybL>yCjykyk+_2J+XDIp(J7$SQEU+{bb_NQ7%;IPuRplNahH$P#U-E-;
zYsnY|#et54NJ#U{Wr+&0AvYo;9c7r!k0-qbGA1R;M2`~=Lmi=W%xFv)(t-Q>ku!M*
zPq~T3rj}=Xj1JIjqpo@#29T(7hY`BwmckTcihwN2jzk`+V9J6p0K5#70n{mR91+-k
z0won?vBQiVb;3GTj*eK92#Kz0uw%9M-{7FO`Yu4*9lem%OI94d28qW~dW!bgtgtpU
z;__>9?^@r}3+O~-L$oAnV1hv6%7C?jGOpngp_>GaK46=OANW14-Y86MHLJFyTvKL)
zx^%}UZ$#pBlkX%$X9mR;YK2y#85jTwYIt5dOh^)xEVzmj;dhVFP>9XicII`ic!RCM
z97uipEFEN{6Q;jjlqYa6oSj3wdfg`D4&Y5)5K?S&$tW^+kToYt9B>hLpYC+fEBbg)
zQWb*iO&=E-dBXV$#DtCX<{-tMN#utnn;hQsl|)?Qy_oDG8p-hWSQd9C`@rMH^V#<9
z(cCC9=hiGyw|Mn~l;UVRK+qFoUR_C);_sW*iDexq5*23~YlXEJ^gW7)c{1<mV5H8p
zoa?3-r8LpR>#&G*L<74b-_of^);+ZOX4afi4B%}v_#9}C$VmJ9qKrJ)gUX^!;Kn8h
zpaJQx(De7v^_TZ=?wW?vdcKp!7Gw>W_-?nN<>zZX=6@{Oi46&^vyZNN)H{T?he>t^
zNmj|i>W)DVztJCv*;xN!;cGq)kv{$Pz~kI%1nQ2XEe0YwTo8-C(1cx}5h{P3EJoT9
vt$7yd$T@{~uytU#D|rg&3XXK~ULnN;6fJKBvJ|o)a&<{0bIcK#Jr)K+4&WoY

diff --git a/static/fonts/roboto-v18-latin-500.svg b/static/fonts/roboto-v18-latin-500.svg
deleted file mode 100644
index 67eecf442f..0000000000
--- a/static/fonts/roboto-v18-latin-500.svg
+++ /dev/null
@@ -1,305 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1176" ><font-face
-    font-family="Roboto Medium"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="510" />
-<glyph unicode="!" horiz-adv-x="549" d="M382 429H173L150 1456H406L382 429ZM143 115Q143 172 180 209T281 247T382 210T419 115Q419 60 383 23T281 -14T179 23T143 115Z" />
-<glyph unicode="&quot;" horiz-adv-x="664" d="M275 1399L240 1012H101V1536H275V1399ZM576 1399L541 1012H402V1536H576V1399Z" />
-<glyph unicode="#" horiz-adv-x="1250" d="M719 410H495L419 0H251L327 410H96V568H357L415 881H172V1040H445L523 1456H690L612 1040H837L915 1456H1082L1004 1040H1212V881H974L916 568H1137V410H886L810 0H643L719 410ZM525 568H749L807 881H583L525 568Z" />
-<glyph unicode="$" horiz-adv-x="1164" d="M819 380Q819 465 765 520T585 620T389 703Q156 828 156 1073Q156 1239 257 1346T531 1473V1691H691V1471Q865 1446 960 1324T1055 1005H813Q813 1131 757 1203T603 1276Q507 1276 453 1224T399 1075Q399 988 452 936T634
-836T835 749T958 658T1035 539T1062 382Q1062 213 959 108T670 -16V-211H511V-17Q313 5 207 125T100 443H343Q343 317 406 248T586 179Q700 179 759 234T819 380Z" />
-<glyph unicode="%" horiz-adv-x="1504" d="M99 1176Q99 1308 184 1392T407 1477Q547 1477 631 1393T716 1171V1099Q716 968 632 884T409 800Q274 800 187 882T99 1105V1176ZM269 1099Q269 1030 307 988T409 945Q471 945 509 987T547 1103V1176Q547 1245 509 1288T407
-1331T307 1288T269 1173V1099ZM799 357Q799 491 886 574T1108 657Q1244 657 1330 574T1417 350V279Q1417 149 1334 65T1110 -20T885 63T799 284V357ZM969 279Q969 211 1008 168T1110 124Q1174 124 1210 165T1247 282V357Q1247 427 1208 469T1108 511Q1046 511 1008
-469T969 353V279ZM459 109L334 181L1045 1319L1170 1247L459 109Z" />
-<glyph unicode="&amp;" horiz-adv-x="1309" d="M86 393Q86 494 141 578T358 779Q273 886 240 961T206 1106Q206 1277 310 1376T590 1476Q749 1476 850 1383T952 1151Q952 1060 906 984T755 831L656 759L937 427Q998 547 998 694H1209Q1209 425 1083 253L1297 0H1015L933
-97Q777 -20 561 -20T216 94T86 393ZM568 174Q691 174 798 256L480 631L449 609Q329 518 329 401Q329 300 394 237T568 174ZM434 1112Q434 1028 537 901L648 977L679 1002Q741 1057 741 1143Q741 1200 698 1240T589 1281Q518 1281 476 1233T434 1112Z" />
-<glyph unicode="&apos;" horiz-adv-x="346" d="M267 1411L241 1020H82V1536H267V1411Z" />
-<glyph unicode="(" horiz-adv-x="714" d="M128 592Q128 823 190 1030T372 1401T626 1631L674 1489Q533 1382 446 1163T350 660L349 574Q349 271 434 34T674 -328L626 -463Q492 -397 372 -233T190 138T128 592Z" />
-<glyph unicode=")" horiz-adv-x="722" d="M593 576Q593 354 532 148T347 -228T88 -463L40 -328Q190 -212 277 26T365 571V594Q365 872 289 1100T71 1467L40 1495L88 1631Q216 1569 336 1411T520 1058T592 654L593 576Z" />
-<glyph unicode="*" horiz-adv-x="905" d="M332 972L27 1060L82 1229L384 1112L369 1456H548L533 1106L830 1221L884 1049L574 961L774 695L629 589L449 877L271 598L125 700L332 972Z" />
-<glyph unicode="+" horiz-adv-x="1141" d="M686 801H1066V579H686V146H450V579H68V801H450V1206H686V801Z" />
-<glyph unicode="," horiz-adv-x="450" d="M159 -328L28 -250Q86 -159 107 -92T130 46V235H349L348 60Q347 -46 295 -152T159 -328Z" />
-<glyph unicode="-" horiz-adv-x="672" d="M596 521H71V717H596V521Z" />
-<glyph unicode="." horiz-adv-x="572" d="M276 256Q344 256 381 218T418 121Q418 64 381 27T276 -11Q211 -11 173 26T135 121T172 217T276 256Z" />
-<glyph unicode="/" horiz-adv-x="810" d="M193 -125H2L575 1456H766L193 -125Z" />
-<glyph unicode="0" horiz-adv-x="1164" d="M1058 613Q1058 299 941 140T583 -20Q347 -20 228 135T105 596V848Q105 1162 222 1319T581 1476Q820 1476 937 1323T1058 865V613ZM815 885Q815 1090 759 1185T581 1281Q462 1281 406 1191T347 908V578Q347 374 404 274T583
-174Q700 174 756 266T815 556V885Z" />
-<glyph unicode="1" horiz-adv-x="1164" d="M767 0H525V1169L168 1047V1252L736 1461H767V0Z" />
-<glyph unicode="2" horiz-adv-x="1164" d="M1088 0H109V167L594 696Q699 813 743 891T788 1049Q788 1153 730 1217T572 1281Q454 1281 389 1209T324 1012H81Q81 1145 141 1251T314 1417T574 1476Q786 1476 908 1370T1031 1075Q1031 966 970 847T768 575L412 194H1088V0Z" />
-<glyph unicode="3" horiz-adv-x="1164" d="M390 839H538Q650 840 715 897T781 1062Q781 1166 727 1223T560 1281Q462 1281 399 1225T336 1077H93Q93 1189 152 1281T318 1424T557 1476Q775 1476 899 1367T1024 1062Q1024 964 962 878T800 747Q920 706 982 618T1045
-408Q1045 212 911 96T557 -20Q347 -20 213 92T79 390H322Q322 294 386 234T560 174Q673 174 738 234T803 408Q803 523 735 585T533 647H390V839Z" />
-<glyph unicode="4" horiz-adv-x="1164" d="M931 519H1112V324H931V0H688V324H59L52 472L680 1456H931V519ZM307 519H688V1127L670 1095L307 519Z" />
-<glyph unicode="5" horiz-adv-x="1164" d="M174 722L253 1456H1035V1246H455L415 898Q516 956 643 956Q851 956 966 823T1082 465Q1082 243 954 112T603 -20Q403 -20 272 93T129 393H364Q378 287 440 231T602 174Q714 174 776 254T839 472Q839 605 770 682T580
-760Q514 760 468 743T368 674L174 722Z" />
-<glyph unicode="6" horiz-adv-x="1164" d="M865 1463V1262H835Q631 1259 509 1150T364 841Q481 964 663 964Q856 964 967 828T1079 477Q1079 255 949 118T606 -20Q388 -20 253 141T117 563V646Q117 1029 303 1246T840 1463H865ZM604 768Q524 768 458 723T360 603V529Q360
-367 428 272T604 176T775 257T838 470T774 685T604 768Z" />
-<glyph unicode="7" horiz-adv-x="1164" d="M1078 1321L496 0H241L822 1261H69V1456H1078V1321Z" />
-<glyph unicode="8" horiz-adv-x="1164" d="M1026 1072Q1026 965 971 882T821 750Q935 697 996 605T1058 397Q1058 205 928 93T582 -20Q365 -20 235 93T104 397Q104 514 166 607T340 750Q246 798 192 881T137 1072Q137 1258 257 1367T581 1476Q786 1476 906 1367T1026
-1072ZM815 409Q815 517 751 583T580 650T411 584T347 409Q347 302 409 238T582 174T753 236T815 409ZM784 1063Q784 1158 729 1219T581 1281T434 1223T380 1063Q380 963 434 904T582 845T729 904T784 1063Z" />
-<glyph unicode="9" horiz-adv-x="1164" d="M798 609Q676 480 513 480Q321 480 207 614T93 968Q93 1112 151 1229T316 1411T564 1476Q784 1476 913 1312T1042 873V805Q1042 411 864 204T333 -6H304V195H339Q554 198 669 298T798 609ZM564 670Q637 670 701 712T800
-828V923Q800 1084 734 1182T563 1280T396 1194T333 975Q333 838 396 754T564 670Z" />
-<glyph unicode=":" horiz-adv-x="543" d="M527 256Q595 256 632 218T669 121Q669 64 632 27T527 -11Q462 -11 424 26T386 121T423 217T527 256ZM271 1105Q339 1105 376 1067T413 970Q413 913 376 876T271 838Q206 838 168 875T130 970T167 1066T271 1105Z" />
-<glyph unicode=";" horiz-adv-x="487" d="M250 1105Q318 1105 355 1067T392 970Q392 913 355 876T250 838Q185 838 147 875T109 970T146 1066T250 1105ZM177 -328L46 -250Q104 -159 125 -92T148 46V235H367L366 60Q365 -46 313 -152T177 -328Z" />
-<glyph unicode="&lt;" horiz-adv-x="1041" d="M310 631L900 407V164L63 537V730L900 1102V859L310 631Z" />
-<glyph unicode="=" horiz-adv-x="1146" d="M1007 780H145V982H1007V780ZM1007 356H145V557H1007V356Z" />
-<glyph unicode="&gt;" horiz-adv-x="1066" d="M746 636L128 863V1102L992 730V537L128 165V404L746 636Z" />
-<glyph unicode="?" horiz-adv-x="996" d="M350 428Q350 561 383 640T513 813T637 948Q677 1009 677 1080Q677 1174 631 1223T494 1273Q408 1273 356 1225T303 1093H60Q62 1270 180 1373T494 1476Q695 1476 807 1374T920 1089Q920 926 768 768L645 647Q579 572
-577 428H350ZM333 117Q333 176 370 212T470 249Q534 249 571 212T608 117Q608 62 572 25T470 -12T369 25T333 117Z" />
-<glyph unicode="@" horiz-adv-x="1832" d="M1741 518Q1729 268 1618 124T1317 -21Q1136 -21 1075 133Q1024 57 957 19T815 -19Q669 -19 594 101T536 422Q552 585 615 716T776 918T984 990Q1068 990 1132 969T1284 882L1232 319Q1213 121 1346 121Q1448 121 1513
-230T1585 514Q1602 883 1443 1079T963 1275Q767 1275 616 1177T375 894T277 471Q265 230 334 56T547 -210T898 -301Q982 -301 1073 -281T1229 -227L1267 -364Q1206 -404 1103 -428T894 -453Q640 -453 458 -346T185 -34Q91 177 102 471Q114 745 225 963T528 1303T967
-1424Q1216 1424 1395 1315T1664 1000T1741 518ZM732 422Q719 286 756 216T874 145Q928 145 976 192T1054 323L1099 816Q1049 835 1002 835Q891 835 821 731T732 422Z" />
-<glyph unicode="A" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543Z" />
-<glyph unicode="B" horiz-adv-x="1292" d="M148 0V1456H647Q894 1456 1023 1357T1152 1062Q1152 962 1098 882T940 758Q1058 726 1122 638T1187 425Q1187 220 1056 110T679 0H148ZM401 657V202H682Q801 202 868 261T935 425Q935 652 703 657H401ZM401 843H649Q767
-843 833 896T900 1048Q900 1156 839 1204T647 1252H401V843Z" />
-<glyph unicode="C" horiz-adv-x="1337" d="M1259 474Q1237 241 1087 111T688 -20Q514 -20 382 62T177 297T102 650V786Q102 992 175 1149T384 1391T700 1476Q941 1476 1088 1345T1259 975H1007Q989 1132 916 1201T700 1271Q535 1271 447 1151T356 797V668Q356
-432 440 308T688 184Q837 184 912 251T1007 474H1259Z" />
-<glyph unicode="D" horiz-adv-x="1338" d="M148 0V1456H578Q771 1456 920 1370T1152 1126T1234 764V691Q1234 484 1152 327T917 85T567 0H148ZM401 1252V202H566Q765 202 871 326T980 684V765Q980 1002 877 1127T578 1252H401Z" />
-<glyph unicode="E" horiz-adv-x="1158" d="M999 650H401V202H1100V0H148V1456H1093V1252H401V850H999V650Z" />
-<glyph unicode="F" horiz-adv-x="1125" d="M987 617H401V0H148V1456H1073V1252H401V819H987V617Z" />
-<glyph unicode="G" horiz-adv-x="1394" d="M1264 189Q1185 86 1045 33T727 -20Q544 -20 403 63T186 300T106 661V775Q106 1105 264 1290T705 1476Q948 1476 1091 1356T1263 1010H1015Q973 1273 710 1273Q540 1273 452 1151T360 791V679Q360 443 459 313T736 182Q930
-182 1012 270V555H712V747H1264V189Z" />
-<glyph unicode="H" horiz-adv-x="1455" d="M1304 0H1052V647H401V0H148V1456H401V850H1052V1456H1304V0Z" />
-<glyph unicode="I" horiz-adv-x="578" d="M415 0H163V1456H415V0Z" />
-<glyph unicode="J" horiz-adv-x="1137" d="M744 1456H996V435Q996 226 866 103T521 -20Q293 -20 169 95T45 415H297Q297 299 354 241T521 182Q623 182 683 249T744 436V1456Z" />
-<glyph unicode="K" horiz-adv-x="1291" d="M566 629L401 454V0H148V1456H401V773L541 946L967 1456H1273L732 811L1304 0H1004L566 629Z" />
-<glyph unicode="L" horiz-adv-x="1108" d="M401 202H1062V0H148V1456H401V202Z" />
-<glyph unicode="M" horiz-adv-x="1793" d="M476 1456L896 340L1315 1456H1642V0H1390V480L1415 1122L985 0H804L375 1121L400 480V0H148V1456H476Z" />
-<glyph unicode="N" horiz-adv-x="1454" d="M1303 0H1050L401 1033V0H148V1456H401L1052 419V1456H1303V0Z" />
-<glyph unicode="O" horiz-adv-x="1414" d="M1310 690Q1310 476 1236 315T1025 67T708 -20Q531 -20 393 66T179 313T102 682V764Q102 977 177 1140T390 1389T706 1476T1021 1391T1234 1145T1310 771V690ZM1057 766Q1057 1008 966 1137T706 1266Q542 1266 450 1138T355
-774V690Q355 450 448 319T708 188Q876 188 966 316T1057 690V766Z" />
-<glyph unicode="P" horiz-adv-x="1309" d="M401 541V0H148V1456H705Q949 1456 1092 1329T1236 993Q1236 779 1096 660T702 541H401ZM401 744H705Q840 744 911 807T982 991Q982 1109 910 1179T712 1252H401V744Z" />
-<glyph unicode="Q" horiz-adv-x="1414" d="M1305 690Q1305 483 1240 332T1056 91L1306 -104L1142 -252L832 -7Q771 -20 701 -20Q525 -20 387 66T173 313T96 682V764Q96 977 171 1140T384 1389T699 1476Q879 1476 1016 1391T1229 1145T1305 771V690ZM1051 766Q1051
-1012 959 1139T699 1266Q536 1266 444 1138T349 775V690Q349 454 441 321T701 188Q870 188 960 316T1051 690V766Z" />
-<glyph unicode="R" horiz-adv-x="1278" d="M683 561H401V0H148V1456H660Q912 1456 1049 1343T1186 1016Q1186 870 1116 772T919 620L1246 13V0H975L683 561ZM401 764H661Q789 764 861 828T933 1005Q933 1122 867 1186T668 1252H401V764Z" />
-<glyph unicode="S" horiz-adv-x="1236" d="M909 375Q909 471 842 523T598 628T318 746Q119 871 119 1072Q119 1248 262 1362T635 1476Q787 1476 906 1420T1093 1261T1161 1031H909Q909 1145 838 1209T633 1274Q509 1274 441 1221T372 1073Q372 993 446 940T690
-836T963 721T1114 573T1162 377Q1162 195 1023 88T644 -20Q486 -20 354 38T148 200T74 440H327Q327 316 409 248T644 180Q776 180 842 233T909 375Z" />
-<glyph unicode="T" horiz-adv-x="1243" d="M1200 1252H746V0H495V1252H45V1456H1200V1252Z" />
-<glyph unicode="U" horiz-adv-x="1335" d="M1213 1456V483Q1213 251 1065 116T669 -20Q419 -20 272 113T125 484V1456H377V482Q377 336 451 259T669 182Q961 182 961 490V1456H1213Z" />
-<glyph unicode="V" horiz-adv-x="1325" d="M661 317L1031 1456H1309L785 0H540L18 1456H295L661 317Z" />
-<glyph unicode="W" horiz-adv-x="1802" d="M1290 360L1514 1456H1765L1429 0H1187L910 1063L627 0H384L48 1456H299L525 362L803 1456H1015L1290 360Z" />
-<glyph unicode="X" horiz-adv-x="1296" d="M649 930L955 1456H1247L807 734L1257 0H962L649 534L335 0H41L492 734L51 1456H343L649 930Z" />
-<glyph unicode="Y" horiz-adv-x="1248" d="M623 766L958 1456H1238L750 536V0H496V536L7 1456H288L623 766Z" />
-<glyph unicode="Z" horiz-adv-x="1233" d="M386 202H1164V0H80V164L833 1252H85V1456H1140V1296L386 202Z" />
-<glyph unicode="[" horiz-adv-x="561" d="M540 1488H375V-135H540V-324H132V1678H540V1488Z" />
-<glyph unicode="\" horiz-adv-x="856" d="M20 1456H260L868 -125H628L20 1456Z" />
-<glyph unicode="]" horiz-adv-x="561" d="M12 1678H422V-324H12V-135H179V1488H12V1678Z" />
-<glyph unicode="^" horiz-adv-x="875" d="M437 1190L259 729H53L352 1456H523L821 729H616L437 1190Z" />
-<glyph unicode="_" horiz-adv-x="924" d="M920 -191H3V0H920V-191Z" />
-<glyph unicode="`" horiz-adv-x="660" d="M521 1233H319L49 1536H326L521 1233Z" />
-<glyph unicode="a" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978 738V250Q978
-104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175Z" />
-<glyph unicode="b" horiz-adv-x="1153" d="M1074 530Q1074 278 962 129T652 -20Q462 -20 356 117L344 0H124V1536H367V978Q472 1102 650 1102Q848 1102 961 955T1074 544V530ZM831 551Q831 727 769 815T589 903Q431 903 367 765V319Q432 178 591 178Q705 178 767
-263T831 520V551Z" />
-<glyph unicode="c" horiz-adv-x="1072" d="M569 174Q660 174 720 227T784 358H1013Q1009 257 950 170T790 31T572 -20Q345 -20 212 127T79 533V558Q79 805 211 953T571 1102Q764 1102 885 990T1013 694H784Q780 787 721 847T569 907Q451 907 387 822T322 562V523Q322
-347 385 261T569 174Z" />
-<glyph unicode="d" horiz-adv-x="1156" d="M79 549Q79 799 195 950T506 1102Q678 1102 784 982V1536H1027V0H807L795 112Q686 -20 504 -20Q314 -20 197 133T79 549ZM322 528Q322 363 385 271T566 178Q715 178 784 311V773Q717 903 568 903Q450 903 386 810T322 528Z" />
-<glyph unicode="e" horiz-adv-x="1099" d="M601 -20Q370 -20 227 125T83 513V543Q83 705 145 832T321 1031T573 1102Q794 1102 914 961T1035 562V464H328Q339 330 417 252T615 174Q782 174 887 309L1018 184Q953 87 845 34T601 -20ZM572 907Q472 907 411 837T332
-642H795V660Q787 782 730 844T572 907Z" />
-<glyph unicode="f" horiz-adv-x="726" d="M210 0V902H45V1082H210V1181Q210 1361 310 1459T590 1557Q654 1557 726 1539L720 1349Q680 1357 627 1357Q453 1357 453 1178V1082H673V902H453V0H210Z" />
-<glyph unicode="g" horiz-adv-x="1161" d="M82 549Q82 801 200 951T515 1102Q700 1102 806 973L817 1082H1036V33Q1036 -180 904 -303T546 -426Q427 -426 314 -377T141 -247L256 -101Q368 -234 532 -234Q653 -234 723 -169T793 24V97Q688 -20 513 -20Q323 -20
-203 131T82 549ZM324 528Q324 365 390 272T575 178Q722 178 793 304V780Q724 903 577 903Q457 903 391 808T324 528Z" />
-<glyph unicode="h" horiz-adv-x="1137" d="M364 964Q483 1102 665 1102Q1011 1102 1016 707V0H773V698Q773 810 725 856T582 903Q436 903 364 773V0H121V1536H364V964Z" />
-<glyph unicode="i" horiz-adv-x="523" d="M383 0H140V1082H383V0ZM125 1363Q125 1419 160 1456T262 1493T364 1456T400 1363Q400 1308 364 1272T262 1235T161 1271T125 1363Z" />
-<glyph unicode="j" horiz-adv-x="513" d="M378 1082V-96Q378 -262 296 -349T54 -437Q-13 -437 -75 -420V-228Q-37 -237 11 -237Q132 -237 135 -105V1082H378ZM114 1363Q114 1419 149 1456T251 1493T353 1456T389 1363Q389 1308 353 1272T251 1235T150 1271T114 1363Z" />
-<glyph unicode="k" horiz-adv-x="1069" d="M476 464L368 353V0H125V1536H368V650L444 745L743 1082H1035L633 631L1078 0H797L476 464Z" />
-<glyph unicode="l" horiz-adv-x="523" d="M383 0H140V1536H383V0Z" />
-<glyph unicode="m" horiz-adv-x="1782" d="M353 1082L360 969Q474 1102 672 1102Q889 1102 969 936Q1087 1102 1301 1102Q1480 1102 1567 1003T1657 711V0H1414V704Q1414 807 1369 855T1220 903Q1137 903 1085 859T1011 742L1012 0H769V712Q764 903 574 903Q428
-903 367 784V0H124V1082H353Z" />
-<glyph unicode="n" horiz-adv-x="1139" d="M350 1082L357 957Q477 1102 672 1102Q1010 1102 1016 715V0H773V701Q773 804 729 853T583 903Q436 903 364 770V0H121V1082H350Z" />
-<glyph unicode="o" horiz-adv-x="1166" d="M79 551Q79 710 142 837T319 1033T581 1102Q800 1102 936 961T1084 587L1085 530Q1085 370 1024 244T848 49T583 -20Q354 -20 217 132T79 539V551ZM322 530Q322 363 391 269T583 174T774 270T843 551Q843 715 773 811T581
-907Q462 907 392 813T322 530Z" />
-<glyph unicode="p" horiz-adv-x="1153" d="M1072 530Q1072 279 958 130T652 -20Q474 -20 367 97V-416H124V1082H348L358 972Q465 1102 649 1102Q847 1102 959 955T1072 545V530ZM830 551Q830 713 766 808T581 903Q432 903 367 780V300Q433 174 583 174Q699 174
-764 267T830 551Z" />
-<glyph unicode="q" horiz-adv-x="1163" d="M79 550Q79 804 195 953T509 1102Q690 1102 796 975L810 1082H1026V-416H783V92Q677 -20 507 -20Q313 -20 196 131T79 550ZM322 529Q322 363 387 269T569 174Q713 174 783 297V789Q713 907 571 907Q455 907 389 814T322 529Z" />
-<glyph unicode="r" horiz-adv-x="720" d="M691 860Q643 868 592 868Q425 868 367 740V0H124V1082H356L362 961Q450 1102 606 1102Q658 1102 692 1088L691 860Z" />
-<glyph unicode="s" horiz-adv-x="1057" d="M731 294Q731 359 678 393T500 453T293 519Q111 607 111 774Q111 914 229 1008T529 1102Q723 1102 842 1006T962 757H719Q719 827 667 873T529 920Q449 920 399 883T348 784Q348 728 395 697T585 635T809 560T930 455T970
-307Q970 161 849 71T532 -20Q399 -20 295 28T133 160T75 341H311Q316 255 376 209T535 162Q631 162 681 198T731 294Z" />
-<glyph unicode="t" horiz-adv-x="681" d="M429 1345V1082H620V902H429V298Q429 236 453 209T541 181Q583 181 626 191V3Q543 -20 466 -20Q186 -20 186 289V902H8V1082H186V1345H429Z" />
-<glyph unicode="u" horiz-adv-x="1138" d="M780 106Q673 -20 476 -20Q300 -20 210 83T119 381V1082H362V384Q362 178 533 178Q710 178 772 305V1082H1015V0H786L780 106Z" />
-<glyph unicode="v" horiz-adv-x="1013" d="M506 308L735 1082H986L611 0H400L22 1082H274L506 308Z" />
-<glyph unicode="w" horiz-adv-x="1522" d="M1075 335L1247 1082H1484L1189 0H989L757 743L529 0H329L33 1082H270L445 343L667 1082H850L1075 335Z" />
-<glyph unicode="x" horiz-adv-x="1030" d="M513 726L719 1082H989L658 549L1000 0H732L516 370L301 0H31L373 549L43 1082H311L513 726Z" />
-<glyph unicode="y" horiz-adv-x="997" d="M503 348L723 1082H982L552 -164Q453 -437 216 -437Q163 -437 99 -419V-231L145 -234Q237 -234 283 -201T357 -88L392 5L12 1082H274L503 348Z" />
-<glyph unicode="z" horiz-adv-x="1030" d="M384 194H960V0H82V159L631 886H92V1082H939V928L384 194Z" />
-<glyph unicode="{" horiz-adv-x="687" d="M609 -360Q256 -261 249 91V304Q249 529 56 529V707Q249 707 249 933V1145Q252 1325 342 1436T609 1597L657 1457Q484 1401 478 1151V935Q478 710 305 619Q478 527 478 300V87Q484 -163 657 -219L609 -360Z" />
-<glyph unicode="|" horiz-adv-x="514" d="M341 -270H174V1456H341V-270Z" />
-<glyph unicode="}" horiz-adv-x="687" d="M27 -219Q203 -162 207 93V301Q207 532 389 618Q207 704 207 938V1145Q203 1400 27 1457L75 1597Q257 1546 346 1432T435 1132V932Q435 707 629 707V529Q435 529 435 304V107Q435 -80 346 -194T75 -360L27 -219Z" />
-<glyph unicode="~" horiz-adv-x="1361" d="M1244 786Q1244 610 1149 499T912 387Q838 387 776 415T636 511T526 596T454 613Q387 613 349 561T310 425H117Q117 596 208 705T447 815Q521 815 587 786T726 690T832 607T905 590Q972 590 1014 646T1056 786H1244Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="510" />
-<glyph unicode="&#xa1;" horiz-adv-x="542" d="M170 662H379L403 -364H146L170 662ZM409 971Q409 915 373 878T272 840Q206 840 170 877T134 971Q134 1026 170 1063T272 1101Q337 1101 373 1064T409 971Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1149" d="M591 174Q680 174 740 226T806 358H1034Q1030 222 932 120T687 -11V-245H487V-11Q304 23 202 166T100 530V558Q100 771 202 915T487 1093V1318H687V1094Q845 1066 937 958T1034 694H806Q799 790 740 848T590 907Q360
-907 344 595L343 523Q343 347 406 261T591 174Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1205" d="M509 598L516 422Q516 287 452 202H1148L1147 0H98V202H180Q219 211 240 266T262 413L255 598H94V797H249L241 1039Q241 1241 366 1358T694 1475T1013 1366T1129 1073H884Q884 1168 832 1220T685 1273Q596 1273
-545 1208T493 1039L502 797H813V598H509Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1437" d="M1085 107Q926 -20 723 -20Q521 -20 363 106L234 -26L93 118L228 255Q128 411 128 608Q128 808 237 973L93 1120L234 1264L376 1119Q531 1234 723 1234Q917 1234 1072 1117L1217 1265L1359 1120L1211 969Q1318 810
-1318 608Q1318 415 1220 259L1359 118L1217 -27L1085 107ZM313 608Q313 488 368 385T518 224T723 165T928 224T1077 386T1132 608T1078 829T929 989T723 1048T517 990T368 829T313 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1088" d="M545 847L807 1456H1076L735 742H969V590H666V452H969V301H666V0H414V301H106V452H414V590H106V742H354L11 1456H284L545 847Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="508" d="M136 -270V525H365V-270H136ZM365 698H136V1456H365V698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1272" d="M1164 455Q1164 271 993 182Q1128 82 1128 -103Q1128 -276 993 -375T624 -474Q378 -474 234 -366T90 -50L332 -49Q332 -159 410 -219T624 -279Q745 -279 815 -232T886 -105Q886 -28 819 17T565 118Q377 169 282
-224T141 356T94 542Q94 726 263 816Q198 866 164 934T130 1102Q130 1272 267 1374T635 1476Q875 1476 1009 1364T1143 1047H900Q900 1153 828 1217T635 1281Q512 1281 443 1234T373 1104Q373 1020 433 977T686 881T977 773T1119 640T1164 455ZM601 673Q520 694
-444 722Q336 682 336 558Q336 477 385 434T584 344L763 291L809 275Q924 322 924 439Q924 520 856 568T601 673Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="901" d="M93 1366Q93 1416 126 1450T219 1484T312 1450T346 1366T312 1282T219 1248T127 1282T93 1366ZM550 1365Q550 1415 583 1449T676 1483T769 1449T803 1365T769 1281T676 1247T584 1281T550 1365Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1604" d="M1118 596Q1118 444 1031 363T783 282T529 388T434 675V788Q434 962 529 1068T783 1175Q946 1175 1032 1093T1119 861H963Q963 957 917 998T783 1040Q691 1040 640 972T588 786V669Q588 551 640 484T783 417Q872
-417 917 457T962 596H1118ZM1384 729Q1384 895 1309 1037T1097 1265T797 1351Q638 1351 502 1269T287 1043T209 729T286 415T500 188T797 104T1094 189T1308 418T1384 729ZM87 729Q87 931 180 1104T439 1376T797 1476T1154 1377T1412 1104T1506 729T1413 354T1155
-81T797 -20Q604 -20 440 80T181 353T87 729Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="913" d="M608 705L591 773Q514 691 390 691Q272 691 207 752T141 919Q141 1029 225 1089T482 1150H584V1201Q584 1328 468 1328Q403 1328 367 1303T330 1229L157 1243Q157 1347 244 1411T468 1476Q605 1476 682 1404T759
-1199V883Q759 786 785 705H608ZM433 835Q473 835 515 853T584 896V1033H478Q402 1032 359 1002T316 923Q316 835 433 835Z" />
-<glyph unicode="&#xab;" horiz-adv-x="994" d="M551 537L798 138H631L343 528V547L631 937H798L551 537ZM654 537L901 138H734L446 528V547L734 937H901L654 537Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1133" d="M962 374H762V634H127V805H962V374Z" />
-<glyph unicode="&#xad;" horiz-adv-x="672" d="M596 521H71V717H596V521Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1604" d="M87 729Q87 931 180 1104T439 1376T797 1476T1154 1377T1412 1104T1506 729T1413 354T1155 81T797 -20Q604 -20 440 80T181 353T87 729ZM1384 729Q1384 895 1309 1037T1097 1265T797 1351Q638 1351 502 1269T287
-1043T209 729T286 415T500 188T797 104T1094 189T1308 418T1384 729ZM653 653V316H502V1166H783Q936 1166 1022 1099T1108 906Q1108 789 988 726Q1053 697 1079 642T1105 505T1108 389T1122 332V316H967Q954 350 954 510Q954 586 921 619T811 653H653ZM653 787H796Q865
-787 911 818T958 903Q958 973 923 1002T794 1033H653V787Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="987" d="M842 1292H155V1450H842V1292Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="778" d="M391 1476Q497 1476 574 1397T651 1208T575 1021T391 943Q282 943 205 1020T127 1208T205 1397T391 1476ZM391 1084Q444 1084 478 1119T513 1208Q513 1260 479 1298T391 1336T302 1298T266 1208T302 1120T391 1084Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1098" d="M668 899H1011V700H668V312H452V700H95V899H452V1276H668V899ZM974 1H125V197H974V1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="758" d="M690 667H78V792L363 1053Q476 1156 476 1223Q476 1265 449 1291T370 1318Q312 1318 279 1285T246 1198H60Q60 1314 144 1390T364 1467Q507 1467 585 1403T663 1224Q663 1117 557 1015L459 928L319 815H690V667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="758" d="M268 1133H349Q481 1133 481 1230Q481 1265 454 1291T365 1318Q317 1318 285 1299T252 1244H66Q66 1343 148 1405T361 1467Q504 1467 585 1407T667 1241Q667 1122 532 1071Q681 1030 681 888Q681 782 593 719T361
-656Q226 656 141 719T55 896H241Q241 858 275 832T370 805Q433 805 463 832T494 902Q494 1003 360 1004H268V1133Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="667" d="M307 1536H584L307 1233H112L307 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1211" d="M388 1082V446Q390 305 434 240T585 175Q753 175 812 296V1082H1055V0H832L825 86Q733 -21 586 -21Q465 -21 388 34V-416H146V1082H388Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="1005" d="M644 0V520H564Q334 520 202 647T69 988Q69 1201 202 1328T565 1456H854V0H644Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="578" d="M142 714Q142 772 179 811T283 850T387 811T425 714Q425 655 386 618T283 581Q218 581 180 618T142 714Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="528" d="M318 3L307 -51Q457 -78 457 -224Q457 -329 371 -388T130 -447L123 -310Q189 -310 224 -287T260 -221Q260 -176 225 -159T109 -136L141 3H318Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="758" d="M514 667H329V1237L128 1189V1335L495 1454H514V667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="935" d="M119 1121Q119 1281 214 1378T465 1476T716 1379T812 1116V1044Q812 885 718 788T467 690Q309 690 214 788T119 1049V1121ZM294 1044Q294 946 340 891T467 836Q545 836 590 890T637 1041V1121Q637 1218 591 1273T465
-1328Q387 1328 341 1274T294 1117V1044Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="994" d="M260 937L548 547V528L260 138H93L340 537L93 937H260ZM633 937L921 547V528L633 138H466L713 537L466 937H633Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1488" d="M475 664H290V1234L89 1186V1332L456 1451H475V664ZM453 117L328 189L1039 1327L1164 1255L453 117ZM1316 314H1411V163H1316V0H1129V163H771L762 284L1127 789H1316V314ZM943 314H1129V556L1115 534L943 314Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1579" d="M410 117L285 189L996 1327L1121 1255L410 117ZM466 667H281V1237L80 1189V1335L447 1454H466V667ZM1484 0H872V125L1157 386Q1270 489 1270 556Q1270 598 1243 624T1164 651Q1106 651 1073 618T1040 531H854Q854
-647 938 723T1158 800Q1301 800 1379 736T1457 557Q1457 450 1351 348L1253 261L1113 148H1484V0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1623" d="M594 117L469 189L1180 1327L1305 1255L594 117ZM1437 314H1532V163H1437V0H1250V163H892L883 284L1248 789H1437V314ZM1064 314H1250V556L1236 534L1064 314ZM316 1133H397Q529 1133 529 1230Q529 1265 502 1291T413
-1318Q365 1318 333 1299T300 1244H114Q114 1343 196 1405T409 1467Q552 1467 633 1407T715 1241Q715 1122 580 1071Q729 1030 729 888Q729 782 641 719T409 656Q274 656 189 719T103 896H289Q289 858 323 832T418 805Q481 805 511 832T542 902Q542 1003 408 1004H316V1133Z"
-/>
-<glyph unicode="&#xbf;" horiz-adv-x="996" d="M630 661Q628 537 602 465T502 313L399 207Q309 110 309 4Q309 -90 358 -136T496 -183Q584 -183 637 -133T690 0H933Q931 -177 812 -281T498 -385Q292 -385 179 -285T66 0Q66 165 221 328L313 421Q391 493 401 608L403
-661H630ZM650 972Q650 916 615 879T513 841T411 878T375 972Q375 1027 411 1064T513 1102T614 1065T650 972Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543ZM812 1543H610L340 1846H617L812 1543Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543ZM757 1846H1034L757 1543H562L757 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543ZM1030 1569V1558H835L685 1714L536 1558H343V1571L614 1847H757L1030 1569Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543ZM1052 1824Q1052 1714 989 1641T829 1568Q790 1568 762 1576T681 1615T607 1651T559 1657Q521 1657 495 1629T468 1554L319
-1562Q319 1672 382 1747T541 1822Q598 1822 678 1777T811 1732Q849 1732 876 1760T903 1836L1052 1824Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543ZM331 1676Q331 1726 364 1760T457 1794T550 1760T584 1676T550 1592T457 1558T365 1592T331 1676ZM788 1675Q788 1725
-821 1759T914 1793T1007 1759T1041 1675T1007 1591T914 1557T822 1591T788 1675Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1363" d="M963 339H399L281 0H18L568 1456H795L1346 0H1082L963 339ZM470 543H892L681 1147L470 543ZM686 1940Q779 1940 843 1879T907 1732T845 1587T686 1527Q589 1527 527 1587T464 1732T527 1878T686 1940ZM574 1732Q574
-1685 607 1653T686 1620Q733 1620 765 1652T798 1732Q798 1778 767 1811T686 1845T606 1812T574 1732Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1925" d="M1879 0H981L966 340H464L280 0H-10L825 1456H1817V1259H1171L1188 851H1736V654H1196L1216 196H1879V0ZM580 555H957L930 1203L580 555Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1337" d="M1259 474Q1237 241 1087 111T688 -20Q514 -20 382 62T177 297T102 650V786Q102 992 175 1149T384 1391T700 1476Q941 1476 1088 1345T1259 975H1007Q989 1132 916 1201T700 1271Q535 1271 447 1151T356 797V668Q356
-432 440 308T688 184Q837 184 912 251T1007 474H1259ZM775 -2L764 -56Q914 -83 914 -229Q914 -334 828 -393T587 -452L580 -315Q646 -315 681 -292T717 -226Q717 -181 682 -164T566 -141L598 -2H775Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1158" d="M999 650H401V202H1100V0H148V1456H1093V1252H401V850H999V650ZM753 1550H551L281 1853H558L753 1550Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1158" d="M999 650H401V202H1100V0H148V1456H1093V1252H401V850H999V650ZM698 1853H975L698 1550H503L698 1853Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1158" d="M999 650H401V202H1100V0H148V1456H1093V1252H401V850H999V650ZM971 1576V1565H776L626 1721L477 1565H284V1578L555 1854H698L971 1576Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1158" d="M999 650H401V202H1100V0H148V1456H1093V1252H401V850H999V650ZM272 1683Q272 1733 305 1767T398 1801T491 1767T525 1683T491 1599T398 1565T306 1599T272 1683ZM729 1682Q729 1732 762 1766T855 1800T948 1766T982
-1682T948 1598T855 1564T763 1598T729 1682Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="578" d="M415 0H163V1456H415V0ZM416 1550H214L-56 1853H221L416 1550Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="578" d="M415 0H163V1456H415V0ZM360 1853H637L360 1550H165L360 1853Z" />
-<glyph unicode="&#xce;" horiz-adv-x="578" d="M415 0H163V1456H415V0ZM634 1576V1565H439L289 1721L140 1565H-53V1578L218 1854H361L634 1576Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="578" d="M415 0H163V1456H415V0ZM-65 1683Q-65 1733 -32 1767T61 1801T154 1767T188 1683T154 1599T61 1565T-31 1599T-65 1683ZM392 1682Q392 1732 425 1766T518 1800T611 1766T645 1682T611 1598T518 1564T426 1598T392 1682Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1368" d="M178 0V652H-9V822H178V1456H608Q801 1456 950 1370T1182 1126T1264 764V691Q1264 484 1182 327T947 85T597 0H178ZM660 652H431V202H594Q797 202 903 328T1010 695V765Q1010 1002 907 1127T608 1252H431V822H660V652Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1454" d="M1303 0H1050L401 1033V0H148V1456H401L1052 419V1456H1303V0ZM1093 1824Q1093 1714 1030 1641T870 1568Q831 1568 803 1576T722 1615T648 1651T600 1657Q562 1657 536 1629T509 1554L360 1562Q360 1672 423 1747T582
-1822Q639 1822 719 1777T852 1732Q890 1732 917 1760T944 1836L1093 1824Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1414" d="M1310 690Q1310 476 1236 315T1025 67T708 -20Q531 -20 393 66T179 313T102 682V764Q102 977 177 1140T390 1389T706 1476T1021 1391T1234 1145T1310 771V690ZM1057 766Q1057 1008 966 1137T706 1266Q542 1266 450
-1138T355 774V690Q355 450 448 319T708 188Q876 188 966 316T1057 690V766ZM835 1543H633L363 1846H640L835 1543Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1414" d="M1310 690Q1310 476 1236 315T1025 67T708 -20Q531 -20 393 66T179 313T102 682V764Q102 977 177 1140T390 1389T706 1476T1021 1391T1234 1145T1310 771V690ZM1057 766Q1057 1008 966 1137T706 1266Q542 1266 450
-1138T355 774V690Q355 450 448 319T708 188Q876 188 966 316T1057 690V766ZM780 1846H1057L780 1543H585L780 1846Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1414" d="M1310 690Q1310 476 1236 315T1025 67T708 -20Q531 -20 393 66T179 313T102 682V764Q102 977 177 1140T390 1389T706 1476T1021 1391T1234 1145T1310 771V690ZM1057 766Q1057 1008 966 1137T706 1266Q542 1266 450
-1138T355 774V690Q355 450 448 319T708 188Q876 188 966 316T1057 690V766ZM1053 1569V1558H858L708 1714L559 1558H366V1571L637 1847H780L1053 1569Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1414" d="M1310 690Q1310 476 1236 315T1025 67T708 -20Q531 -20 393 66T179 313T102 682V764Q102 977 177 1140T390 1389T706 1476T1021 1391T1234 1145T1310 771V690ZM1057 766Q1057 1008 966 1137T706 1266Q542 1266 450
-1138T355 774V690Q355 450 448 319T708 188Q876 188 966 316T1057 690V766ZM1075 1824Q1075 1714 1012 1641T852 1568Q813 1568 785 1576T704 1615T630 1651T582 1657Q544 1657 518 1629T491 1554L342 1562Q342 1672 405 1747T564 1822Q621 1822 701 1777T834 1732Q872
-1732 899 1760T926 1836L1075 1824Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1414" d="M1310 690Q1310 476 1236 315T1025 67T708 -20Q531 -20 393 66T179 313T102 682V764Q102 977 177 1140T390 1389T706 1476T1021 1391T1234 1145T1310 771V690ZM1057 766Q1057 1008 966 1137T706 1266Q542 1266 450
-1138T355 774V690Q355 450 448 319T708 188Q876 188 966 316T1057 690V766ZM354 1676Q354 1726 387 1760T480 1794T573 1760T607 1676T573 1592T480 1558T388 1592T354 1676ZM811 1675Q811 1725 844 1759T937 1793T1030 1759T1064 1675T1030 1591T937 1557T845
-1591T811 1675Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1092" d="M77 364L393 686L77 1008L225 1158L540 836L856 1158L1004 1008L688 686L1004 364L856 214L540 535L225 214L77 364Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1412" d="M1314 690Q1314 476 1240 315T1029 67T711 -20Q547 -20 415 55L324 -95H155L300 143Q105 338 105 697V764Q105 977 180 1139T393 1388T709 1476Q906 1476 1049 1375L1136 1518H1303L1156 1275Q1313 1082 1314 765V690ZM358
-690Q358 483 429 355L931 1181Q844 1266 709 1266Q545 1266 453 1138T358 774V690ZM1061 766Q1061 932 1017 1046L528 242Q606 188 711 188Q880 188 970 316T1061 690V766Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1335" d="M1213 1456V483Q1213 251 1065 116T669 -20Q419 -20 272 113T125 484V1456H377V482Q377 336 451 259T669 182Q961 182 961 490V1456H1213ZM794 1543H592L322 1846H599L794 1543Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1335" d="M1213 1456V483Q1213 251 1065 116T669 -20Q419 -20 272 113T125 484V1456H377V482Q377 336 451 259T669 182Q961 182 961 490V1456H1213ZM739 1846H1016L739 1543H544L739 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1335" d="M1213 1456V483Q1213 251 1065 116T669 -20Q419 -20 272 113T125 484V1456H377V482Q377 336 451 259T669 182Q961 182 961 490V1456H1213ZM1012 1569V1558H817L667 1714L518 1558H325V1571L596 1847H739L1012 1569Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1335" d="M1213 1456V483Q1213 251 1065 116T669 -20Q419 -20 272 113T125 484V1456H377V482Q377 336 451 259T669 182Q961 182 961 490V1456H1213ZM313 1676Q313 1726 346 1760T439 1794T532 1760T566 1676T532 1592T439
-1558T347 1592T313 1676ZM770 1675Q770 1725 803 1759T896 1793T989 1759T1023 1675T989 1591T896 1557T804 1591T770 1675Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1248" d="M623 766L958 1456H1238L750 536V0H496V536L7 1456H288L623 766ZM698 1846H975L698 1543H503L698 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1226" d="M391 1456V1176H632Q876 1176 1013 1057T1150 738Q1150 539 1013 420T633 300H391V0H148V1456H391ZM391 981V495H637Q762 495 834 560T907 736T837 913T645 981H391Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1255" d="M378 0H136V1105Q136 1319 250 1438T571 1557Q758 1557 865 1464T973 1201Q973 1139 960 1090T912 985T866 896T855 824Q855 780 887 738T1009 622T1138 480T1179 336Q1179 165 1071 73T764 -20Q684 -20 599 -1T475
-44L524 239Q569 211 632 193T750 174Q847 174 892 217T937 327Q937 376 902 421T780 535T653 671T612 819Q612 907 675 1007T738 1185Q738 1266 692 1314T566 1363Q382 1363 378 1116V0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978
-738V250Q978 104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175ZM694 1233H492L222 1536H499L694 1233Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978
-738V250Q978 104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175ZM639 1536H916L639 1233H444L639 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978
-738V250Q978 104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175ZM912 1259V1248H717L567 1404L418 1248H225V1261L496 1537H639L912 1259Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978
-738V250Q978 104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175ZM934 1514Q934 1404 871 1331T711 1258Q672 1258 644 1266T563 1305T489 1341T441 1347Q403 1347 377 1319T350 1244L201 1252Q201
-1362 264 1437T423 1512Q480 1512 560 1467T693 1422Q731 1422 758 1450T785 1526L934 1514Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978
-738V250Q978 104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175ZM213 1366Q213 1416 246 1450T339 1484T432 1450T466 1366T432 1282T339 1248T247 1282T213 1366ZM670 1365Q670 1415 703 1449T796
-1483T889 1449T923 1365T889 1281T796 1247T704 1281T670 1365Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1108" d="M771 0Q755 31 743 101Q627 -20 459 -20Q296 -20 193 73T90 303Q90 476 218 568T586 661H735V732Q735 816 688 866T545 917Q462 917 409 876T356 770H113Q113 859 172 936T332 1058T559 1102Q749 1102 862 1007T978
-738V250Q978 104 1019 17V0H771ZM504 175Q576 175 639 210T735 304V508H604Q469 508 401 461T333 328Q333 258 379 217T504 175ZM568 1630Q661 1630 725 1569T789 1422T727 1277T568 1217Q471 1217 409 1277T346 1422T409 1568T568 1630ZM456 1422Q456 1375 489
-1343T568 1310Q615 1310 647 1342T680 1422Q680 1468 649 1501T568 1535T488 1502T456 1422Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1729" d="M1254 -20Q1001 -20 861 141Q796 64 689 22T448 -20Q272 -20 172 68T72 312Q72 470 191 556T543 642H734V713Q734 804 687 855T551 907Q460 907 403 863T345 752L103 771Q103 917 229 1009T553 1102Q776 1102 887
-969Q1018 1104 1218 1102Q1430 1102 1549 973T1668 608V471H973Q982 332 1058 253T1268 174Q1405 174 1512 232L1573 266L1646 100Q1576 44 1472 12T1254 -20ZM495 164Q553 164 621 193T734 266V475H538Q434 473 374 426T314 308Q314 243 360 204T495 164ZM1218
-907Q1119 907 1056 838T976 642H1428V672Q1428 785 1374 846T1218 907Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1072" d="M569 174Q660 174 720 227T784 358H1013Q1009 257 950 170T790 31T572 -20Q345 -20 212 127T79 533V558Q79 805 211 953T571 1102Q764 1102 885 990T1013 694H784Q780 787 721 847T569 907Q451 907 387 822T322
-562V523Q322 347 385 261T569 174ZM635 -2L624 -56Q774 -83 774 -229Q774 -334 688 -393T447 -452L440 -315Q506 -315 541 -292T577 -226Q577 -181 542 -164T426 -141L458 -2H635Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1099" d="M601 -20Q370 -20 227 125T83 513V543Q83 705 145 832T321 1031T573 1102Q794 1102 914 961T1035 562V464H328Q339 330 417 252T615 174Q782 174 887 309L1018 184Q953 87 845 34T601 -20ZM572 907Q472 907 411
-837T332 642H795V660Q787 782 730 844T572 907ZM682 1233H480L210 1536H487L682 1233Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1099" d="M601 -20Q370 -20 227 125T83 513V543Q83 705 145 832T321 1031T573 1102Q794 1102 914 961T1035 562V464H328Q339 330 417 252T615 174Q782 174 887 309L1018 184Q953 87 845 34T601 -20ZM572 907Q472 907 411
-837T332 642H795V660Q787 782 730 844T572 907ZM627 1536H904L627 1233H432L627 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1099" d="M601 -20Q370 -20 227 125T83 513V543Q83 705 145 832T321 1031T573 1102Q794 1102 914 961T1035 562V464H328Q339 330 417 252T615 174Q782 174 887 309L1018 184Q953 87 845 34T601 -20ZM572 907Q472 907 411
-837T332 642H795V660Q787 782 730 844T572 907ZM900 1259V1248H705L555 1404L406 1248H213V1261L484 1537H627L900 1259Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1099" d="M601 -20Q370 -20 227 125T83 513V543Q83 705 145 832T321 1031T573 1102Q794 1102 914 961T1035 562V464H328Q339 330 417 252T615 174Q782 174 887 309L1018 184Q953 87 845 34T601 -20ZM572 907Q472 907 411
-837T332 642H795V660Q787 782 730 844T572 907ZM201 1366Q201 1416 234 1450T327 1484T420 1450T454 1366T420 1282T327 1248T235 1282T201 1366ZM658 1365Q658 1415 691 1449T784 1483T877 1449T911 1365T877 1281T784 1247T692 1281T658 1365Z" />
-<glyph unicode="&#xec;" horiz-adv-x="538" d="M386 0H143V1082H386V0ZM652 1482H450L180 1785H457L652 1482Z" />
-<glyph unicode="&#xed;" horiz-adv-x="538" d="M386 0H143V1082H386V0ZM340 1785H617L340 1482H145L340 1785Z" />
-<glyph unicode="&#xee;" horiz-adv-x="538" d="M386 0H143V1082H386V0ZM614 1252V1241H419L269 1397L120 1241H-73V1254L198 1530H341L614 1252Z" />
-<glyph unicode="&#xef;" horiz-adv-x="538" d="M386 0H143V1082H386V0ZM-85 1359Q-85 1409 -52 1443T41 1477T134 1443T168 1359T134 1275T41 1241T-51 1275T-85 1359ZM372 1358Q372 1408 405 1442T498 1476T591 1442T625 1358T591 1274T498 1240T406 1274T372 1358Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1191" d="M834 1303Q1088 1038 1088 637V555Q1088 389 1025 258T848 53T593 -20Q455 -20 342 43T166 219T103 468Q103 617 159 732T319 910T554 973Q700 973 813 882Q764 1051 638 1173L434 1038L356 1147L528 1261Q402 1343
-240 1385L315 1580Q553 1530 730 1395L910 1515L988 1406L834 1303ZM845 663L844 681Q812 729 751 757T611 785Q485 785 416 701T346 468Q346 342 416 258T597 174Q708 174 776 274T845 547V663Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1139" d="M350 1082L357 957Q477 1102 672 1102Q1010 1102 1016 715V0H773V701Q773 804 729 853T583 903Q436 903 364 770V0H121V1082H350ZM940 1514Q940 1404 877 1331T717 1258Q678 1258 650 1266T569 1305T495 1341T447
-1347Q409 1347 383 1319T356 1244L207 1252Q207 1362 270 1437T429 1512Q486 1512 566 1467T699 1422Q737 1422 764 1450T791 1526L940 1514Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1166" d="M79 551Q79 710 142 837T319 1033T581 1102Q800 1102 936 961T1084 587L1085 530Q1085 370 1024 244T848 49T583 -20Q354 -20 217 132T79 539V551ZM322 530Q322 363 391 269T583 174T774 270T843 551Q843 715 773
-811T581 907Q462 907 392 813T322 530ZM703 1233H501L231 1536H508L703 1233Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1166" d="M79 551Q79 710 142 837T319 1033T581 1102Q800 1102 936 961T1084 587L1085 530Q1085 370 1024 244T848 49T583 -20Q354 -20 217 132T79 539V551ZM322 530Q322 363 391 269T583 174T774 270T843 551Q843 715 773
-811T581 907Q462 907 392 813T322 530ZM648 1536H925L648 1233H453L648 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1166" d="M79 551Q79 710 142 837T319 1033T581 1102Q800 1102 936 961T1084 587L1085 530Q1085 370 1024 244T848 49T583 -20Q354 -20 217 132T79 539V551ZM322 530Q322 363 391 269T583 174T774 270T843 551Q843 715 773
-811T581 907Q462 907 392 813T322 530ZM921 1259V1248H726L576 1404L427 1248H234V1261L505 1537H648L921 1259Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1166" d="M79 551Q79 710 142 837T319 1033T581 1102Q800 1102 936 961T1084 587L1085 530Q1085 370 1024 244T848 49T583 -20Q354 -20 217 132T79 539V551ZM322 530Q322 363 391 269T583 174T774 270T843 551Q843 715 773
-811T581 907Q462 907 392 813T322 530ZM943 1514Q943 1404 880 1331T720 1258Q681 1258 653 1266T572 1305T498 1341T450 1347Q412 1347 386 1319T359 1244L210 1252Q210 1362 273 1437T432 1512Q489 1512 569 1467T702 1422Q740 1422 767 1450T794 1526L943 1514Z"
-/>
-<glyph unicode="&#xf6;" horiz-adv-x="1166" d="M79 551Q79 710 142 837T319 1033T581 1102Q800 1102 936 961T1084 587L1085 530Q1085 370 1024 244T848 49T583 -20Q354 -20 217 132T79 539V551ZM322 530Q322 363 391 269T583 174T774 270T843 551Q843 715 773
-811T581 907Q462 907 392 813T322 530ZM222 1366Q222 1416 255 1450T348 1484T441 1450T475 1366T441 1282T348 1248T256 1282T222 1366ZM679 1365Q679 1415 712 1449T805 1483T898 1449T932 1365T898 1281T805 1247T713 1281T679 1365Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1169" d="M1079 582H67V794H1079V582ZM576 1228Q644 1228 681 1190T718 1095T681 1001T576 963Q509 963 472 1000T435 1095T472 1190T576 1228ZM435 278Q435 336 472 374T576 412Q644 412 681 374T718 278Q718 221 681 184T576
-147Q509 147 472 184T435 278Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1160" d="M79 551Q79 710 142 837T319 1033T581 1102Q687 1102 775 1068L846 1211H991L889 1003Q1085 850 1085 530Q1085 370 1024 244T848 49T583 -20Q490 -20 400 10L328 -137H183L285 70Q79 220 79 551ZM322 530Q322 374
-386 276L685 885Q638 907 581 907Q462 907 392 813T322 530ZM843 551Q843 699 785 792L489 191Q532 174 583 174Q706 174 774 270T843 551Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1138" d="M780 106Q673 -20 476 -20Q300 -20 210 83T119 381V1082H362V384Q362 178 533 178Q710 178 772 305V1082H1015V0H786L780 106ZM696 1233H494L224 1536H501L696 1233Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1138" d="M780 106Q673 -20 476 -20Q300 -20 210 83T119 381V1082H362V384Q362 178 533 178Q710 178 772 305V1082H1015V0H786L780 106ZM641 1536H918L641 1233H446L641 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1138" d="M780 106Q673 -20 476 -20Q300 -20 210 83T119 381V1082H362V384Q362 178 533 178Q710 178 772 305V1082H1015V0H786L780 106ZM914 1259V1248H719L569 1404L420 1248H227V1261L498 1537H641L914 1259Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1138" d="M780 106Q673 -20 476 -20Q300 -20 210 83T119 381V1082H362V384Q362 178 533 178Q710 178 772 305V1082H1015V0H786L780 106ZM215 1366Q215 1416 248 1450T341 1484T434 1450T468 1366T434 1282T341 1248T249 1282T215
-1366ZM672 1365Q672 1415 705 1449T798 1483T891 1449T925 1365T891 1281T798 1247T706 1281T672 1365Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="997" d="M503 348L723 1082H982L552 -164Q453 -437 216 -437Q163 -437 99 -419V-231L145 -234Q237 -234 283 -201T357 -88L392 5L12 1082H274L503 348ZM585 1536H862L585 1233H390L585 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1175" d="M1079 530Q1079 283 966 132T658 -20Q480 -20 373 97V-416H130V1536H373V983Q479 1102 655 1102Q852 1102 965 955T1079 546V530ZM836 551Q836 717 771 810T587 903Q438 903 373 780V300Q439 174 589 174Q705 174
-770 267T836 551Z" />
-<glyph unicode="&#xff;" horiz-adv-x="997" d="M503 348L723 1082H982L552 -164Q453 -437 216 -437Q163 -437 99 -419V-231L145 -234Q237 -234 283 -201T357 -88L392 5L12 1082H274L503 348ZM159 1366Q159 1416 192 1450T285 1484T378 1450T412 1366T378 1282T285
-1248T193 1282T159 1366ZM616 1365Q616 1415 649 1449T742 1483T835 1449T869 1365T835 1281T742 1247T650 1281T616 1365Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1321" d="M1432 621H414V817H1432V621Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1584" d="M1744 621H386V817H1744V621Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="448" d="M282 1562L406 1485Q315 1352 312 1208V1056H99V1194Q100 1290 151 1394T282 1562Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="444" d="M175 1024L51 1101Q141 1232 144 1378V1536H357V1398Q357 1295 305 1191T175 1024Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="462" d="M173 -298L50 -220Q135 -93 138 55V202H356V69Q355 -24 304 -128T173 -298Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="788" d="M291 1562L415 1485Q324 1352 321 1208V1056H108V1194Q109 1290 160 1394T291 1562ZM627 1562L751 1485Q660 1352 657 1208V1056H444V1194Q445 1290 496 1394T627 1562Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="795" d="M188 1024L64 1101Q154 1232 157 1378V1536H370V1398Q370 1295 318 1191T188 1024ZM522 1024L398 1101Q488 1232 491 1378V1536H704V1398Q704 1295 652 1191T522 1024Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="776" d="M177 -318L50 -240Q135 -103 138 54V255H356V69Q355 -39 300 -153Q251 -253 177 -318ZM499 -318L372 -240Q460 -98 464 52V255H682V73Q682 -26 631 -136T499 -318Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="715" d="M136 771Q136 866 196 926T357 987Q460 987 520 927T580 768V731Q580 637 521 578T358 518Q259 518 199 575T136 726V771Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="626" d="M316 537L563 138H396L108 528V547L396 937H563L316 537Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="617" d="M251 937L539 547V528L251 138H84L331 537L84 937H251Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-500.ttf b/static/fonts/roboto-v18-latin-500.ttf
deleted file mode 100644
index 55b559f6197a91883ef8d79c14005118195a9848..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 35588
zcmbrn2YeJo8$Uj?yLXqKOD6@=NJ0zg2}Hoqdq;ZjgkD1L9i)qhf`FnRNV%-2fJzqu
z5rPUT@+zVzDhLuqh1}l%`^?^6;l=m&`~3cQncdsn*_mgadFFYZd7ft`j5EeUaZp%7
z^CnH3ndX^njLrBGcLz7`(7yAj=<mK@Y-T;i0v<N+{7j>Qf!4PfTULiLey)AzjO<C5
zlP@whArATb4;npS+=<8?*BF~Pi7~m&pvjXGvf|9G8Jkvy=e>uH8#a1LMb$SMn|uuK
zzdvli#Bt1rg`vLlcpflp)U=_y(xiuYR*SLXYr_YRo*EeyAfx=5c>eeBAp-_iZ2fcs
zV`F@9oj)8m{O+1}FgE^gTvr`FdeYPnZ?|oa=S8Uhol#>44d^|&XgXt~s-etpMh}=e
zPOc&c<C@-27&Bn>kl2q30~ni*`uN;&V<%2>jAnxY&mMX{Zo-gpG1B(xj7>%TyfZV=
zGr1ZtBr`MfWdSUhja37zAt9l4Z2?vrE2E=X9DT(xu#DMQ)9yAYBeqmZXwXAkFkCQe
zgC43PF}$go^pizD`G}Lv@0uE*-w4!iNLE|Wwal!<#E?Weg!2$CC-OX=C|9%BlTPJp
zziEegzz>qFX<V|~O}2-xnJo5M(v(Lb(o}n2sqa#$FO%46$9=wCz#qu!spg<yg4}Gi
z@h8C<05}5xXQ?^R=2x?O;+L_1^gvD<&&bT;$*4XzKRYra+?<rkXJ3lqO#7$R+*U0X
zw%~ge`QgdBty|YEXw{0L)*<pAQjwWx%$KF;2$4~?oCJhOWk8P2Qf9Mc*kr5Cr_AO<
z#mmVdIVL*ru;gd=@pK$aQ?yx9z%n|Z%>F3ueY7N&#k19VnF3w|$yQWgH7*4D(Gr3F
z7(9s~^j8j$sQHyMN}23#pi*Y5EIJWK|1z6@MyZd-Q-AaVZdz@j0Mu#=7nvi=Y|Lt_
zB<@rx6Ua#pOU_FaDM!u;LyAZi3CFNx>EiV^Z?yS|n+nT$NV}cwzC$Yet?)mO+U%Ts
zz3@7JNgK*v+QRE@<=eFWl(uRgZPA8Gb$DII*<eSyl4{<>YO%R$jr7`R!V{YBi$?ky
z%}>TfveEnmTqIEQqXQDC`O(%=iMyJw2Ky${-2iK8n8)3;WM8_QY%Q(fzKe$DrlzK)
z=H=!W<mE&}Mn)v(rY0wuBf=w<DiR385|Nyjnwpmr9+{J!FXxP^X!i5Dz1#L3xj%kD
z|4}13TQ@lW;-RglFPG1mG+_##`OMfJsk8pvaV7lfwdg-j&0afvK(`TnI}BUgbJwR~
zCr?D)J3V{(7>vO|j@zbXrVm*li(zRjkJV)>Ra4<p1fR)j3oD~ztT<K^$9&Lseuk}1
zhUk4kcm`rpfQuAD3@Fd9%;uL-8X~z+ft#h3JT6nLwkl<|DjBvEYiUi7`&F!^+3w5C
ztgzht9E=OJKRGEiFG@5%FE2M0h{1?)K1%R>LO3&}@u)$&m#^5hYx$D>yW2k9piSG^
zt)<X?OP224soi>Wcl!oKE!)*^&{mUXNgvHpHZI(?Ygvm0Z@j+3-1M1eTDEN3wOjLw
zvc)@gtZY7i*Un|8Cfz!>Zr!X)msWqYP$skhzv>FCg_usUIE=t7_L5pVJBKh<+iJ6x
z(Xk4!M4ZZtaAJX<Sc7mX;i3`|PC_gZgIdiumQHd)H9A?V5jCk{`m>O*N^})nDU42$
zA<;P5Vy&f>-PEJTR~CHJ*IJt4zAMmI0HV<`1sbyO{Jb2iB`Pt^oKV%2UBE3wU~+g=
zK|wyS3fy%a^XfB=%WPXe?mc1<kFNjO>?_)joi=M7G&{dBW2AN>e(L<_VPoSPbZykU
z3tu*5*QAjfn!Wkad&_&h*rtVcVCr*P`5ya#lAFn$_>{<AB|~P*ySvP36J5}?ZbvW~
z&N|5z++T37$S3hGC$r-IF<TFr7HHEX1@Fw&vZPnd{g{<mRZB=HTF-1shAj}REi5-Q
zv>?hX$rfv9lqFS?=FYsgICJHGAO7Y`nTvm)A$9nPZ{^J!ts1Gd)NXdwE@>$<mo(xn
z`O7G`8p`d6azm-yuyCW?AYz%}l4MEC4-Lt)N@-~Yk)fecQpf3kFUj1nf8(n7%(?gG
z`bb6JXoIx94VO&f|KZtDJd&SX9=EiCc1j}w%~`C}R-Oc&8pIOxmMZ9SMGTg*XdBC@
zWb?(@H=`12ODQnPIdV#rDa<0vX}pbgv4GbOek+()&)3eKS$jZTC!g=WtAuygUY)q7
zyY`@%CulzprCOS>bxIB89p(?-jlxK3f(FcP8nDU4LlYwsLy|)h^AbaHq<ws*w(zz#
zpU=K6Cw`-~=cV89=c%kX?I7>NeuZ3#R(<{a1wJr}O>Th&gs0^bf3ld(TNf18<X>|>
zLOa;5*OF!*>@U8IGMY=iQWxnHjFC_VSyam1kPsMoiBcDPxfCe*o}wC;IR50XLSOP@
z$tv>?5H-@cF#}a*jE+*~SvMB~5_}*xpNBVT)v8IuHmx{oTUfVst4VE9n&em@X+j={
z0pmJ{GIWK^tf*w3bNr}O|L81pI?2%yj@wES#&94o*Fu%!Dx-E{T_Mh~>jxP84BjRf
z9gST-YiWqPNrJ1nFVRA)l$<2VdDhUJ?9i|@F`_IXf@>8hNx$B^eOLbV_q)H!<>RJL
z87EJeUNTOWhG?g?<Gg@pRq#Sys9n%5hJSMO?PJ<I=g%Dakg)Uyz;&43hL%*QQ<4dw
znGDd}3J^0<6O@cn*$t8^$#fU0PI8DTFC|BE+}Acqb>fw^(?7X{vO7ZZ7Xb^=tb-a7
zLp(^YA_P^0{8trn2<ce15NoNgM-`F!T?P*CzDvqg9?y4j6$rC@!L7lAc%o8Nk<M?9
z=ut9g^8E5?-#z#FpEFiyo2A!wN+BgLw;w)t&8$V2CtrSl^xcix0>IcFJrw~MtF!T{
zrAAE`jKP30*nrXCt|||vRzR;(<2fI%Zsoj>`ZRvof~}<%H+(j3Ev@FhR3oZ!dJSwf
z$$b|cn)9S4Kstvj$w^h6(wI1BGGDxY+=9{L2F@;@a(Us^e`XDuI!i16`cv(X@_D1j
z&tJNDwcMOf7&Uz2_+H}<4*UA#z`eDq+oqqob^UPvsZ%FRoC%7|MPGCW{rZ7tw9>o5
zOMnOlLNbH<DtZ$=l?_srIcZs{kD11<8Yps66C#pn@Tc({o)}`0x4->%x&2v-H0hCj
z4WAV%Sx##2^Cs)%FDtr9{S$!idBAre;Hb<-t1(sLQI-x22fn$1??7Ax(ue>aJ?YKD
z0|_=uMrn*2kE+QMLw5tMrQsfTL&E8<S~-SzFL+BB*pv)135^J6z;0SjWF&MQT`pPn
zwU>kJ?^hc#r|c&O`}U0XkN>YhGY5~GwR~Em-ucp}(l?)KuN7(!zWYY|=ljFO<F_qe
zv?)0USS>+o3QX^^aOk!})QE&c0wls}GiDQF{QOs|K+GPjOSLd(tI!hqRT|-L2DK{I
zeF=m|B%93^S34Ml2uqZcpuvSlX6IW|<pEXB{}EO4&hc-xN1tESe&;2;@9hqY;+K9o
zd#>r-v+~t5GqihOe52jrjku{ZpTkvq%bu-Uy?XRj?z02^(-d@)kNz>UoG0)D(M!}Z
zChv}6PDa3aGVx(0-+tI3HMIxJzniK*{6e{N5<GjjlP5;8L{^hcQGIKr6SjP<wiuEt
zwyI9v7=g}@FmNVll*qEWZv^G8j*(ZLkN4_-Ii@-usln9+89+kCyAg)YC{1x+0)Jo<
zt`P=x*ic|(q4p6D-M<uROuq>;w2Cjk(jLtm*LU>2^Pk-NY~JT{W?h>RKj!eL(T7JX
znIm^*<{g}L?7JIBOAcpe?i_je>eY(<qZTb3J#y|$$=+{9$&kU5CxcS@I36mY;4=|u
z{V>%xN$Boqb)>V^UV~9ENNROt2q|zgZIKz3JcpyoB%$SlSBAP9N5a`dZ9`k3*GkaO
zKrJjJ!pcm^dEhv5HiWFRwQ`l|+mHP)>B`D$T+%jcTPr7j@#D3YbCVZ-I%~ExU>*<r
zdd)BMwS(H7Cfa0epnO(7%Y(bL>i5d2y$hGU;c&3|kg+c-9a$<1eZ-iBg*qO|9dW-l
zr2SIdPs5!b<&K~xYbZ&Zr`c=rLZuz9qf}<`LEAitEUrNhz-)@ZWI2N8OYJJ&lbcFY
zu9x$Y<9t#%aJZHamhZ|}KuZ>sEastQHW`yb4;)ymrHcC!<&j>3B;T!gRqjhk4mf9D
zb(Wx+%U+kSKLHvc*L7%82$nqQ7yAaef5kRw=J$8C700y|cL7a3#~<=W^k^lP%=)Xo
zRa1yQ(W7zB9`%~nCV{Av(4(bsZl#0tDVCus%t~)sz2#njRahJ%#6vU#y=Z9B5y?(*
zXR(+qvY~!sZr``j$(U+=dUhRAF5NkK_PdQU8cBb&db$WR{pNhnqAed(tKYoupaGpr
zFPwjO`<7{~*Jx*-YN=2CCDu!O%KVjS4a;YZFk5}9aT9{+DXT3Rt*Mb=%kh|#(fB7t
z$_H)oAu2WHP*1AC;$#cXz<j&3&^^(zMU>fcz{Wi8)UcK&dt5?#7P&8paG~j>nQ2;9
zkRJ;2jf|4b;MN79EHO!uEap&!uA(SM)wI;G(9o(m*-9uk6H6}$qp61ZlYnoIyj?$M
zNvm})gj(mE9Mff9x7@HrLl>AswBy>bQ`#lfH{e+wf3eHEMXB{Kj?lFAz54nGe8cBG
z_=gWuE9Agd9rOEFNzcw0yFxNQ)V_VGO`CgXw{!FA8jb9qoc?+rAJ3Pb(pKL2UEBUn
zwWMX$vc5R~8BgV*{O$W+YeTdZOIP;m%<qI<0;PcTO^v`)Es(y=b%J;6>xRwAz^b91
zs=kUadiZ+Lx9TVE5?#Zr1DT7neA0e?vi6UZ`n{B<{cYdOcYMY>YkOf?>LA5Sy<rGr
z>%rB@niRw$A*sfxk}j!WsS1Hr$33U?lEN<KFNz8EB?`PZ3cNSiJ-$?*;3y&#NHnYa
zE{W|b?#s-qoRGw9h0F{(=jFJB<V{O)3gG1Ry!<aNjT%0Ap7zh5+AlnM%Hmtvr+-gg
zG-Lh)lkN1W!P{yjl+OI*nzUA{J9)(Sro$r#juJDzp^z!RVhmPhja1n~oA5F)x%6vq
zQwizU9%=+p9VrG<T3#-Z6N^etB|;*>N>ru%8mWE$&pz$1HS#(h^49M>wNgdsbE{r2
zm3D1^enU9F`m^@vb)I>4=>=Z6TYGr-<!68YdEV{67jLHd0O9{r;NKtozlADA3Zwz=
z5l&w5M7$Fk1KemNBnP@LomdTp`9e~X<q(3Aw3+pM-*H~^wb!+aAMSYlqs!8TQzqLU
z?bP{}7q!#7l^-7c_|MNB?>q$eBbeF<m^$h-DJahnye@sv-z@Y&Sl2w+tm0*hf?=}M
z#}hQ@f;1}>N&d;cTY9geg<NWHBXyOQYenZww)5H;;=lw$7GUrN*AYDBiR0qQL%{|Z
zJm#V_BuEpbYUQu(@7U#+?fs=z(g^ztR9$=2Rt##n2WqLpx~u;2WChVH^#>#KHyZAu
z7XSY>8&j+J%S8B9GQ8EZ6f>#rpdn~w*-BKhlqe_&GqwVfLdw1N+AZ~6?Z+2oUXRC?
z^D349uA%+2yHx(D^h77^bE(<~!-{wCybBX}D?ahw4Q~1K&bZs!qwc)&F(<xEl|-Ml
zeL|mk%_@!2>qaZFYG1RMWPz!8m=eVVj*y3O3S(}i3VVs&E<IZzEwN8C+3c^vAPwwo
z$6+h#mND8yp~m!ATo~1fvU2#=iV9@KTj`G5@(=hK%raGzu)pgsduhgE&I#~5$sPTf
z6G9Uq!z`I6-Kx+YUHRefiix9#0<H@A(t{sAnN+f5iYI0QSZBQgFG>=k%IIMMx4~{j
z-xFq-V5|p<*>ooLQO)|*5OaxH>H|<L0y_oZw>(kGf8B0h!FTg)`}a~kbXv)N4O1HX
zGkdvapHV@U3Zm;&wAzGurMm+j2f%YgWoD%i>E`gY((@H#?B_5>^m5F__!Y#)JOOQ9
z9bgPtQJo>0#f9M=P&uQad|(LX1Zbi~zbdv&x8TapdF40Vj~eVN5j})Koe#sAU*oUw
z?YwzKwASfut#dT`_R(uf?}r`ub!q;iEy@7<94!H0>JXcv@Y9#IQMuF3L&}1eS;4D2
z49XF(8lz8@OhW&$h!YVNryk%S&nUZn3X$g{#rM%)0Hj<A1c!wrFjc|WwqkU*P!%z{
z!69Jx*AeF>5nQ-}MDUn15=Zf#Y!PcUL_&fBD_|~}U?3961e0f~vR=FMR;l*u3;YEh
z#s~AT4cz|j8?POb-rMoU+md=k`(W>0UUaF`W!`M>o7&OKru$H{9lv(Dr#<BCfm1Gg
z4s7|sx7J?u3m0=7KdUXk3AI3nK{m$ZOZDf1_dLduA<jG;0ianROo&}2IYr3Z)U-st
z)-I+0!Q-``?Am8MbIGbTv$eBQW&8Ign|A5SZy(Q@I(el8xcWO3Qw*>f0o}HR>Z9wn
z@S-F*;qtQJxQGqYk!ZIRAT2P#eF=cVB}<egg>*JU$O@D~%DPb+y<qag*R*r>o7tRb
zEj>VJ)egR~{g8BM=Psc2qIRjr$@PB*dZYG%ra69j=C=00joEL2*&r6hdaI^N!mbT}
zgVosrFZN(?1T|O^!Y<g$wg`L+?;GSbJW8OED6dx0Kyj)!JOcWdFe;=aN^fdE+9g)O
zLs!n`&9&d{C%7_q&7y_cpHi0nqRDpS%DNBp?5_k$74ycG%#~>Dw1RwE4y>oKp=wAq
zn$+sF>oqs53}IE77?xC-=74IDuP`oR?&oPcl)Ru+lSE#)%O0By=cYn^&dY_m<K+`F
zCddZsl~*p&whjM?$KTxe+tP~Fi)Joc&%0dcul;;?i}u%Z_SarqxQI{bKfJi%th2Ts
z#$B8}VP0{+4kL%m+d1x?FG?;fo4Ir(S_i|ZVndHuSccv#FMY%40#YTs6b)fvCKN+@
z+O)z)S_5SP)R;Kshx3H9S-{x`DAmg9tLVEY<IHO+W(<CBWr~N8S%~F9214IU2nkU>
z(7yQVp?0-m{Tf~s(kAB?j4A$i<ntBT>t5oy@@cA_H2cb^-OTEE&1b#zIWN}dVsK0h
zVvGvN6c|mU=lKL4Y5(I-`vc54>njr<c0jqDWin>IiC+PjW10ekT<!C!!Hb_hS)1{+
ze5-ohs!4#L`WcXf<p2`=<%IDZli&46n(e;!t9G+ovpu@OBR}WEl@<>>C~1$r0@ppP
zGy`<-xGO&cI)6jzdV%Goj~HkdY~BJQwg{=qX~3yw{RC${UFk}Sjv66xN$4))*}SUO
zf}ha7(msM!`zk-FHRo03SEV3(ZF`awY5zs~M*5U`#R90V04g8&&qQ@zP>H$?o@zh^
zln@|#ouD>UIF`5Pm9$El7R93_O;Rg{+iyvg<c(BA2h^|vHTbe-dJSHM8no<5$e8Af
z=^X46CO7*~eNAvWp;{9Dh!Mz3jNtQSzelH}-|gW_{JC?lDMjbEQH=|=_oX=VDzvSt
za8SVp>NQNf>~UxYge7UhQrzpWYs2|QQ`tYeKClSvggX|<g8{n?nL{3Zq6|YDgPjyK
z5PnbUf6rw5=QGqB0Q>C@Q7<em$jvh_U-WDO%~HJ7@Gw-HmlKj4K;H44JI$;9uKj_z
z8?_-%`by42&1RP7HCo(Ku1w_?A=^-miAKH*Y6L~TtzO_Y-{dtuQFdrK(iisXC{1=W
zq|QJ);`BZ+hL$H{GP6u%{MlGBQhxsEQM{F<T#`Uvcnf%h9X}W*e49*WqyxcnybMi9
z9~{DqMtB4z_@2}5^9bb<&!D+nPiVA{U^S`&>R+lx37>&2$}JnCK-*EU9tp%6^yS8~
zVBJxI>ixwDfeU!uYgQfVPXedNHy|`Fv{q=nP^Axv9Z$0+CMU@jmjfL7QED3Gs$k_g
zx=q{gibREkM@6L2<Peit^2f^7fJtv`zrgw3=lk~WTwFf+<5@>;$kpxk7IP97ELqwo
zzS*?H%k~~>-epMVq8^*NAKj}}TGuUPf3v5~_wCxOGhtvRcy2au7!2>$P&G{VZiVSu
z3%LnFP(s}@kYIF-c;d2em;$J$RX=fhER5m5eP7{Z5wg$}1?Hg85aIo@gy=K#?C(B2
zQXFute1v-XM)}OiTZ$TPoiJ09LMyZ@%Sz15{^?BZs`j_VW?QZ`TDf}<r~qCc`A_s=
z9BZqx%2fb|PC~-#V}NbwHJ<dO%0ARJYFIFtyvXen=^o7(#=vt<5I}`pK9`Z*%56lD
z>h_wd+*Br?EBPKuiq8+n%gr~HDZMAp<#YBGw;Qs5D6B_v^k2OCcklL@`sThg+g`#o
z`KM&yItX60p=y-yq7k*p&|}OVMmYm$L)jO&Hd>&XWb%Kie&R&9_B0zqarDw?;P=kS
zjsm8WiKe6ivVRnWKua^Xzjbm?arw1?(eE7jwR}#=^GzE+KY6Z{@{ngtm1;a>;}-Jl
z`>!8b#4pT$k6`Z%*!_X!2+SB4tC7M!V~eyRbV$dx0M7v2m<FgZOrSO<<G|6Fi!oB4
z1N~yg#z^B2#K&aN>28bzCv`;(?^7D!9s<w+O0Dj$P(yvhL>D@!R|lCO;&qF7Xh=jN
zxq!%uC}WbIhyWO=$4}aKvu-^5pWp5E{a>E4bHsv%U%fVXMhL&?Ga;NO->>qjW0m%!
zrVU)YdC9B+Bjv3tW`$0l1$rW<?-g?d{6NpBmWW6fJ&6`l@Dz;+!3!R5E(SJqQcumD
z0=EG6W2PRM?nR^p0uhpvA|lA`_UY@dpE*#}!dxwH-?eM<;sb*YoC-bS^H%=@6$qr0
zSSPKk5&-N+gVQZmlTuQNV3Wv+=fN%waKxxIE`$aV>V#UbGh$jMSy-*S%_3@W2;Eg9
z^oQVM9v%o9#a<3iow5p?^Lm6nkO467F(T`9=hUHM|F5;bzMJy>QxnI%Hf_a-{YQSk
zzi9Gv&6_?qb&-@(!PDoBe)QAj2ZK7STeM(K%MxDu!S?rN^J_DXkd&DQ=KeQEjFmN3
z{hS)1RUaurFdMCOIT<}wBNA?YZZd)Z$j?cjDKL54g%N;{n(_|sX(}JkcU_C}a{1J9
zt;AkmIy|n={EA1YRbsOM#2V9ONSHwO^uI;!89)fl1lT1bYybigGdx51oVFBq@ZOyA
za!qT#umueIN+FM~)2daSf|f1ez<*n7%@?800N8h1t8x^@^Z@&=*^U=G7IcX2_4KoY
zCy<#wBBM0e?Vv#GLnt;XEl+R&xEhQo!s)MXZQLL=bDA7sK=Wwmj{PCWd>1O)-EcuW
zhn|!Vtaw{xi~->_{tcx`3>CLk#)q^fmsLi;dZJZ^UmI0k-iFtNk~oHcp#8+l#%f#5
ztYUdT-chS>Uk1upfu5NIXuK_01~di(a$+60MpnFqh*I-3jHAkIs;YR{n1xg``cdeA
z#)T-!xG-V|M7xA<le*g_BWYxDS;S|VEMoc(4bg*<Ay^UJ5S0&(j0D56PKstrSTeC>
zB1t~LGU4=B9VTCSYrj<9b9m<w5xm@VWL^DorEvVB9Xn1Rx7U@94eQ^dg*`?(b973@
zJ*AM^CB_NbWo2Dd`1FD1C-4QYrUXH=2{NE}sqj2VXlxkk{$2wI@Oq6L-q$kqB=2M{
z?=j@L7JzNmT5Xm+Px@fkphXoLK+<JheLxh9c)_M>Kx`aQF$lAglVf=?P(#ppi85$O
zUST4L@B`LZR8%;*iWtTC89x8^vwv9sH4pLUGj49Usog1G{$Sb4X;W56X<Hr3v>$)2
zyRBk5&(eH%esJv2YsWqSbThU7N~ROKaR{Fi&^fgpS9cn{E~f0pg<!4*KQ)vg_5VTt
zL1*U>8F=YGO6Cv8)RE=a{YD-<{oVa}Q=f0xXv3rhQs^V?a*5qxx;kb)W=s#wuO6A9
zCCnCbxjkAUp(UhKjDAd~pq6-1wwGiOBi3k%(F5Mvg;#$(S+#%wNDe`Nc&iqt-!2aN
zvb=criC@YWOj^^d*{Vs4q*RU9m^1QWDz6yFGal^tU<SWE`LI4Fr2}X|AZxDrirDBU
zXcU5p7=2)vm=O`|Y5G=u{q+zg?i@@4zfsa#nK?TP%Ws*xZ_Z7Ud;83_$0>!=RtC|y
zX${@+9O_PGBURtDYOZnP)#Y&*DseQnr8wcK2YZhc(Q_U{TMdjP&+mbNz_>uEk1ftx
zTGc&()WoWS^T~-}iNXSH1n`0hctr1#r3RR!*xkrTNK@(Sk$-o7=k_}%?v@Yl+F?jv
zUS)gx`==I_O}cHGI;j6(p4zZUZnf?^SG<4h#b$k4HK^0z>2A}zt$Vxw8w0xbX-Tc~
zaom<Bm>NQp>7p_ZO(qNt3Nw)D5}hD_Xe+{xP4hqx&pQRKc({agHHQQWX)Z#ej4&s|
z%mTe8gzr6iH0$XaH9NP3b3`>Y)c!eOf2~1*-}_N;y$?CSEr4qZu>Kdg1aT`vsuQhx
zF<t?e0i>5e5sE$a2a`mw&EsO8tdgn1_(Qrb=u-|D`JwIY@;6Hxl;13#ec`0^fxX#<
zIkNAg(}bl+2$8FR=81M60{}sC#)WIxGZV2(U_w}1a`?lWkF;f<X^SghQ!+m~t@GwY
z*p<%X=M$|yMv-3P(~H=R%7mD4O}LnFS*a%d<R?x}IAoe<hlS-RIeYGCU!A%2!x`<%
zJNv(Rm$#RGeRNv-$sVl~+AB-nQ`_Uw_FI6>+vZ~cC2T&%h1cxYB`}zuZu8MkkK260
z$i*VVxs8c8zrcgEw|Q6Xk1xN#6uhhU4iAv7@WJ+9?O*c=+A1kUiU33bT5I_VAPQzh
zD&i$vBhqU&Cwc>{OJycu%?%c$i#R5aXhXtABBz;VUKD0><nH<F8ke<BgYM)N)$ZLV
zHd$N9&Ahkt&7&mkZs_}R<Mw@&JV4M1I5`FgyzM~-8VpMGnn?a%+k@sxMHTC$6#GrN
z{fQG>r7upsM7>Z)+bFFy*N1hxKn)evZ3gX8bhwb&mC#Z%qgfxOiKQm@L`e-bk&z8e
ztt#i`Cg)}6<sq~riu~Lb#KK2LNdvU4mgC3ew{4kw&3o~uZ5+h=U;a+L@%e#ovRBl3
z_~m!KdVhcUVI4rR554jXEIPuL^j}f2WQ5|+?A)o{Hw(=?7BH6p=1PFs6iv}ujEo;N
zj77*g!5mVF;tOpd8Kt2fFq=ZDR}p7RKJJ3lyu4IQ9w>4@Cjyfp1Qx{Fly}}yY?<$<
zCr-Te_SbbCWj}T8`pZQ}-4!`E51si={qDo}Zsri)O85fhnw$Z=HAG$H6<~;1QRPa4
zDC7*9(tGkPDA8D30y*aCCj#w6ky=Kqw>HSdOvaX+>?#t?XOwG4R<)Y-QsdOdZI8dR
zzSW|&jnf);kwb0Y)>)P~yvv(kKeaGvTo>pQi?#LqMWrop7mRs=MPHj_v4WfGvdoK_
zi4hI_5L>mlHFTZzlGP4$t1n{^@j$yTRni>X(xPFb7A+bzY$0uUq?ropv~FFepfwhG
z(aIEm#m|(=5?DVqHZe(Hfx1EXbqul<Lm52Ni)>{-u@(S6Dt#qTh*(+^o}pF>0b3T~
zyIw9dVG%*ZA}uhHF!c`A7og~N5!n(RDYfr0)%=6<;kq;Lo<INYnJtHuA1sr5{b+?%
zWO#?ApTzz0OA?R27I&E^Bz<>1?#s>nOSCgB$Tq?m+|tTS(@Aio;cASCXwfkj3Rx9u
zSa=P=?<Jgk%G4^LDZmQ{zNcLcbFeB_TX2~gsXq?&a%rK<qrxqTuoY0`ZW?4)T5f)V
zOCCqTdTX~7NeB6(pE{-0w7jy(=ON#4>(3E=dkpjC1yWbrl4s7H^Bvpk&`0;r{c`nS
zzY+6?-~Wi_jC~w8P3@K6VNa_Dx|FKdAkd&Q#5-xh;2@aL*)W%d^h$7#4hkJhbzi~?
z1+q-Dq+y)o7NixB!WdN$g~1&T_Ztt7gbJJwZ2~b;O8u=LpW8BT<&wdp*Q{K%>DY-)
zYgerwIq=z46;sC?xprjq=nuX*GJ52k*$dY!+x+2~*PmOnc4Eo;wJ&TvcYO28wbG2K
z7fL2y`0ad2iSWeuqc?KF3nCFo&BP2;?+q{GyL)2iPccQRg^S@%OUf|Hz^FV{aA6|k
z>v0)~m1op7HhA$6wS<9*6+{S1j-ZhUP7QlEeW6;y;)^eWqohP|>p<<zUo_ZmwM!M+
zd7i7C|6AL|L*(|-0DJz%<uAYwn*PG_jnX;lho#_WqXj>+fJ+&1{z8I+p2%TR6N3%<
z0cqk(Z{EDA-Irr4ZpvpQ^5*u`QsEUi1^-rkSX>esJWairV6|nU7tul*U<n}21S+a-
z0vY~ob-kRns#KSj;h>$RK_050e~?(5ldZp!Z7r?k@h~R4mR?P1n#bL$wbF2xSQPcU
z2qzbIJPLSDtBs&g5%@|`b6(113e3o`5ywlEPg(Ki67Bvk547v|H!q#Ga`AibAL+BJ
zVG|zq<2@cwzIN)2XQ%Q7CwkgH>DXq}py%JJJ#i`j=wOe*hxVTS>LMRAwO{+Ty$W*1
zyfpe?&+Mgxcc1_6eDU0Vow{@zKK{iq5pmUKcI=vwXU!<-IDqJ1`BqLgorlLJ1RiG~
zOAWTbz9*SnCT`-w=zc-}=mIiD(0axc<42#ylbbY|+?b!$&!(=~O_~gD(j-ei(VV{<
zA_Q)rcVaNc^4U5yzMu{vF5Zf@GIY#wj<p<gQ4Y;=)5~n>8LE^c!jvWW2M|pM|A240
zSdZnKae(<+eQ_humo)WKt2=^`256M~QjO8Wb<<(P_i?ufF_9_mOCe6M*vz?}%DF&K
z4?fFF$(5=mBl6K2sw7kmO+kPfq7kfmaDvizzjo|{qg%G`-Q2r-?_tAx_2|iWY|wt&
zzE!)sc@vhO7V)r+5AVLmTl2ZR)qC%02TvT=-hE%{vhmf+2gdKa{QC3#J1?DFGI?>w
zfs1zV%5T1=UDx(#*LUvb2|Lg6o*#Xr?a)SPJI<crJ<(GurMF~SofZSD;yN`@w<-p@
zqh7;-y>KFMIfVl6F{X7H1tSMt!vrmE`(@a|VdM0`k=2hBbM?HH_bCbsu*O+yS?gKb
zSbJMXS!Y^TSbh7bhpkv>0ZHr`NQxyh@$N!^L#G=gKL_Sg63k%GG-HAjME8N1LElpU
zkhU`?FL-0`&`Awj?%lt1*-J6nwrX8si`#USjyLHvW5k$gIdgI{gNDyryHGndpyT|i
z(aU(ftnLhv&E42?d6B#ev%gKhQpEEn4&4v3Xbzt&pO8}!@q@KeSU`qp5qwy%M|j0q
zK_en})QL0pMRH?4nJZXgt+*(YRtsfe9nLGN-&6Gnd62SLy^3R&I2sfxlmSD&8B&@s
z6Y3@>yj5DseW_OV6IPnah~b0?C%Omy##`e-zuA>(8HO!8qcqOrg_O8#x{I~7wP<*h
z7P_C&`17Q|$EcGyFc}IF?HL{!6_E@vl$xAIsu6fka<|6`(G>DHvD#B!;L$Jcnc6Vd
z;<qWVQQIx6oAznmXQlMjW90bpW8~UP+b?%oGOOh2%44@TiLxebYtwjfgZySsarDn7
zm|I$zc7qQ@t6ZTuzgR-%v7Q*jLw(cA-cj0b3fKZ#pCj*=o&~M@!c+Q`%AC<TPBtO5
zZ0ZDkIjYG`g~Ao#zC^jit1!RJ%?}euNHT{<@+HMDZ5%av)5|0Cnl>$N(b9Bk%e76L
zu5Hn#HqXm#(`I-J)ZY)T$a19uGp%6OLSKOg5#pMBBi8&$EAmK1^pqZ^Aky~__?u!)
z!jRySkx<UjU}-b&rtSJt+r)=_$+Ii=%N^wfA89lB!jJg0M`%27S5Mj`siya!Gxt(`
zoH{cJGp{vL0w3Yf79-tFS0zTi5EU!=iIzyU_IMZ|?!uKu4+ZwIfRya)PIVe26f7l5
zDk7RIkI&C7Y;<_nlGU4w2d>}~rA@QAX;|YLd5!WXy*PK`$f4cF1I_|zjkF7JRz(DR
z6~UQ2G-+eJ2!96PRCyFJoS7J=mEI}h9e95(k5|`_I~WKwd%)?duR4N#!y{&04Mjv6
znieZcAqQ?1_bX^jPWEF>AvsJ$;9Ay|mdpb>F3fL`+3@h|^H*<Q@_gy)C2t;XTJP!l
zi+d}h2P8wk95i#<h$%VMR~65mGd?x1pvDlQ<Z<v|w-8orNJ<HkQUb`r1alx5sxT}`
zP#k3}|CGh@Pl_(d;St)eC(TT|g!k9M`WKJ6YA73^20B-!Qg4b5G<1J2vx*3xF|2+r
z@}qZL%m*m*F#f3ifqGa24<W0RFsKk?P6KP;3#A^#Z#-50t)=&K)7svLU18zM`P1ak
zN2j}vEYKR5t`fyz6_VT)dYB)psY)JeH-*W==t%)E*>qsF5)=g856k8d&6F4-E$r~4
z_80g25lWzscIC3;Awo7dTO~E+yW~zNH%j$!mW!YU!P>rzz1G92S?E2rs@3Aw?TQ+<
zk<JyiYghOb?U2CPXssbX3oa7G@>JhovfsJ<urBks8IvOt^Hic5XrZ7Tm5bON=;k^d
zr0LwSfH&~puxFE{QS;^<66E~Ybt5J(%czl_Y<iaJnu~EKnfAfTREW3;YNJliVoKwM
z1)^s~gi4agk-aD}ImAM1Go?dk`PeX&SeUsE5wjATBB^pM4DbNR@<yt!ZqEi!F(Tx|
zoCCGs5$QKr0Q^5x9Dz8@gq$?4uca69=ormYj`I9t@4vj|$o@VZ+V$dn+PCYY4A^$^
z#EuqQPoCOt8aQUufDQx3j2=qzwGZU$i$cC`_9gkcna^f)zXvR03rue!Hg1RGD`_Ln
zFY{RD1KZ#(2@6@7)f+XLS$GFsZaNSAAuqcJ-ICrdlQ!X<*X0=ZJ4Se&cxM>isQ?e5
z^4}2e?2;RxGb~ssn<;HF>Pc|w@tIk`WFu{k{5mYc(a>E7sa8E&(rUF;c8ZEbWKJ|j
zmKaPllTU=N^zoUzD*vy=K#^ii5SR<*(_(Es$<!RNOa=;l0Ss1Qq!UAf%#M^MOL;Aa
z^&HrvdvUpR_r!%8n|inNlm61(b<*=Q*S0SnP~5lA;LfFGXAi!<y-$mYdE9LwkQ@(y
z{B9V5!Qc}!ble)#Ah(f;v}9rfhMi9h(ZkDOz41_cY~HH_R4maadP4Z>W2+lHrB<lO
z1YaE1xxg3*p+yTgVdY4aE!`?+2Wx%@wQuCc@^$<45UHyDhj8hIhj;k2Sl&h3W3qjy
z4gXNf=fk9>G>+P`EAnk+G300+2Cj&OKSCGs%~1V(>6fa=B9xK~izLk~O=YS@5o!_!
zgg+*jVH}I7c@*as&fD^O+Nt&YDPC{Ac1j$y5BVspr);!AJ0cF+kqx||c9dovBOI@o
zl1#rrb|xTRXt-+C<AnruVB&5|b<)TaLlo5*t1y)&ixW2WpzSg++xPUb$I!}28uh8}
z=^sc$L@py>rXUrOD72m>svyS_8D<KPB2R~8G3BOlux11?Cn1RWz-tS8?OJ<s0}od}
zT-|Nwb1(CXCe8VSZc7l$EFG<-MYS72k+&4k+<L=rC;70(mwA)@Lspj`*G{&+I9D!w
z24T%UJ0?_I%ct;Lj0uW>pAGs6fF}W75aCH6!4&LluVCH=4>QCFBE|)2ATBFN{}q(s
zX`dw@gI8Px+zGU>NJ*we$e5RB!?2OYm;C+*57mAvzh7SdVAk3d(-GW!>$fu>-PI6k
zt)*x&^S@ar;%%2AK4lZ4HfpgxYO=@vEP}rpZecH%txMztnS`$vt4rhDXjhXWNU^lR
zsO+`*3YN#~vykv0Y_=jcT!A7$7EGZO({x-{d@OwW{hJrw`y#e!WJ9&%SEoC?nVOY8
zCx1ZCX8StM?%m;_qIA6S+k3kj3>@DutyY)y%UZvAC@uPATuRr*S-qAn?a=*f+l~YN
zBC2cQxNTmjbO6QWvU;pcmFhPjz<_^DYH_UN>;<n_HN#TooUjF$M7&2phPpZc8U{2R
ztGlTbf&^NO%~0zwu_V4u#)0@c8FeT?r;dY8{pyUR)6qH?>tK$tq7J6>o;E9l>m+*=
z=Z!LoP|9#yv}oaco;x#Q`kadcX|8O9yNQWjRDKi|csm1oD6+>r>5Jqd$OmSPAMGm|
zURi8A^V`oy`*rU%@xJ}TZ^te;^Z9S~mcAPoFB@6EWwT2a8w;1FpBg^3k6d%m94kLH
zI{cNkU2L1T>}lR>SdT_w>kchiB5C$tmp!|sFlk4fqJvM>yd?E&*08<w)ABi0#$yEu
z8wT1cGS@=XKuwH#i@w$w28?P>%tu2eL>n~ba*YIAM4UPd(jmdZK7>7gJRI7jL3;$$
zke$e5n*oe^1T}?Aq-By2z{EEyRoDSRYOnyxX{i|cWZxmOlN)KXZ?0H=WA^w93)hX$
znti_Ap4qRq{;l*tyVX2lM!VV1t{gLVnJG&9OB>s1hxX69**BIx|I@5qyQVK0J)u*L
zli5qAj<!dKX4ZM*`Ppxr*$bL$%$`#Ul=Ju%2uavYRrFXj#5X}X#gX>Dcx<sQIIXXt
zD3vOn!VuYA52D-;&_qmG-18~d>Q^*bDX0jL|ImDC^Nz-?@M*07lA3+a)ix7ax1P|Z
zqE%s=HidOblamoyH$|zhyeFd5QqV_ADw)g(QV=$d$<ChgiaK!l5i2Po4lqHS$jBEh
zn6QWK+g8bHODv-<^B{DgCsD@`H%4#`DaFL3!*srEcCzJsicTo*-hA!QQwUG!)3e3e
zp%==Fc+HHuh*0n?)V{2lGh>+uRY+Q0_M&zS!3tHLySRbpZyqQOi2PvZ`abrZA;*Xh
z&xf{OfY}1YR3KK<D{A3Mv6@228@j&XNBn<{Rrs%1O{L)b6NptPFSdR7effgPMySGH
z+9iZ4Shm@}n1V>nho&8eov{iWJBBenAF~zjm>olzGWfAGW@mmm;!3F1gB`am>CkPX
zppk7*xvr7HRvhE(QxUpgNFSlM8y7~Cy_K9GFXpF)GSca7p&4FVHGrjg#8Hwx#&hU`
zrFn>LQf$!oSO^oMOJ|yui-e7nM64z4>|#l;czNfvo!VdPrM2AujTt-T-n532)>A&3
zHE8&RUa#!uYWQ<Ja5pd9!$UWOV_D@Httc)~sS|YZeeK-wOTb$%$b$Pyd&Dc(VA*Vo
z8l96%z()(c0ms@-oQReii1qR<8zF!KCq_JzYVr}0e;H9CTr&gwKO-Z9A~Q1{i_G+v
z9BQ<9&z4k181i6Wwwk18QPgZyz6Tq3F7u}8BMZ^z75dCN#mUcm@!;$KEN=Mj=qtb3
zyZWy!>9M+b`{tia{cFYI2j6S=?=PM<W$}`!B}?V+o|ziX-ySce{mnB<yY$6cz1vHl
z-BKfa%hL__Vc$9~`R+b^=-7@UhYv5C7Cm-4^v3ndb-A$_vrEiJq2sE-3buRcK!<TS
z*d&NjGW12034u6<@Q57<w#3tdI@v<18#yRU$YBz5@rYy$_B@^=H$J)H`QtozweqX~
z=FNdToM?8cvQo-1*MPMt92yDUP=igV1x}7I#QOUYJJdJ!gRBg6UxFpN%u8^m35^22
z9p1Ii+*$nx%$gI@sCGufrw2Z5t}$cx)Tz5?lw~w5%B<bEG1@m>`C9H~`V$-wt8Zbb
z^+Dii#yi12@je+oGNR&z>k|%IM56|KIAX}q=y3^WsBpo!ouRtTRS21GbNZ*%9Z@qT
zHShU3{p!Awo0@O>dCa<ydI5E7`;6Jpvu*~>?Y2mxm5p*1)>3S{&f0uZMEB-PqfKS{
zy+v&3&?3^~2Pp}BgBkI`tg`CkOX|5kF%evVWT^rkOdD*GH#-?_Z5}hTmwcHIGsm=D
zv}WV-{+Fnf9BlhF1RU}4QUsqD61fbv5RhUToXt6y(C(kvQ@%VxVQm+z+p>I^C?i`#
z6aqVkGNN6OV1Dc&!d&m0&3k7&BVXl1wJYuBtbcA%pE9&=l#(FbMN3lIb7GeJ9LM|?
z_lpn}a15}evh{&9`(4j_VV)|nZ0&@!n>j!mp)5)D7gihE+t7ru3+nKw7faOKRa?wa
zMk7k+5D*1ff6wWzTpg;NXt(U;vxi4b7~HVkstq5%Gw45rnWd6hY9fCP`5mRo&ZsJo
zg`hQ;b%d<x`Yb<f>9oParcN0)XqqI;{iaPDn9_I3#6D=na>t*hYMfdTiY-C02MGTJ
zt-$Ue@?xAh8^xAOIhf;PR}ewxn2pd-k*Mp!lCk|q4zKsuPVG7z5K^=@o-YpLc#*R%
zcrVs?4?Abb7BO3psk5+XDmhGkguTnI@BHg8d6zalOq<SE^EG%cosE{qo6^7weL*mA
zpW=lA?BchZHs~8Iw%r5Nd9aNfG1*Y)E}(o9t&X9&tzjL&o<5lDqqM$`J4z<J&dF?*
z8X+W$o-q;{U8EsK#9L&WN{$rqU&$E4ZmSHo3Gp<S!C*|mznI=(eIbrw$iEXD79W-o
zCin5Ox<q=dP_-fc3OgNQ8kqp#xDn5uoWNv?7e~q`c1j`R2yiFws9daVHgDfJreECD
zxelgX_1Uv$&)z^@%U--FZs?E~UiIaJw9S056ufUw;`z!vflDjru5|F&_)n7dytZ;K
zwI8DuyRc*doBy&48@5`36<Hb$+pz>MDpR5`$BKe)qeS)9*NR|L9qp7l0#Sw@?4@dn
z-9HU^<RyZH?o74^@Z7L6&j5dNy8yQyJ5<m%351IVh|P%9F`-A#V^Ws$!RxQ{;uA|d
zJl8&D`Gm29FJG31A*6fpfmU<g>75jFHgmv$CJ3g7N};b_tc7+&VxOl_5AU{!H89{8
znuGzeK>~t`1aT0^2q^G0jRescwn4q{h@Ax=MrWeWbU-n+1^lGVn-G>(cWA3q*RGWV
z@GnkH=S|8@PX`_B1t0<SfOk)3K8yv<u^Per9AK>mIdV`97c*P9+iW$QI2Xd*fLTCh
zT+{>&*EAa7Ww!E)4DsrxYIvubVF^mXh1jQ)hE5G!)SxFYb$L!(QsEnWe2s$*l<hH<
zHoA@G&CVqciT~Y)a5RNbKYFZ$;FFv^n!0o%^=P@aLb)J1)mR?k-MR8&(ZPBT3#_HF
zH`FkX)wjX`U?9i~bzW!?1{?!*@o0Ixagm0LGy_3ZaZ%N{@E~N*9l=Q8dYCzE-c|-u
zDS*Kw5Q$FOUN~~n38|0<`6PO-6ajv8!qMqSTj8;AL?<9OMbSDEcz-aAv3KZ`y+1MN
zUFvE>5%>1~L=u1gH}4M<6Q~GrB6S!W`aR|{`8V&+lYBp5O_C&sL8fHu>{wVc4Dejb
zED$>)lmu@ZIcUh!Ms8ThTRZ-gcBAExhqQ~MzJ?rHkzpYhW-Fr#*TeyiSE~oBhqe^q
zzQn-Ry+CBTfFw<WlNynC@R3Nnx2##Wb<5f{+ukdgAWs>q@CI9V@7}WU<$Zg%1nk;+
zaMw%divmEj3lLRh^Z(n!Wk6!^N<`u49xm($dY}XLVV1_fGncJl+ZdF)$9!CVV&yG)
zE~~nMRYR)^0qgDDQe&&qf;qJ0|DTVGfBJ7eE(v=DGwFyN0Y8oRZiPk@#mK`b^4zV^
z4Y$oK0)uF`LVvNK*mJi+D28IU!kj#d)URK^_q3OM`REU{XAcMQ!WXu0pT_^uQtn3r
z*X@DpeSjebG4g?8-mDXr@QWCLxV&MA`0#MMs1`lU7^`$WHYUb41j48T+=scLRh?V#
z#)vI=p~{e<n|AnfIt;N>p%c-Tfw}y)wkNzn^93umub8)2I%Jwq(zsFMJZ$5)VZ-{^
z#nY$0xNuOXS#_FJgA`~B_z%fR&||8wzG}F>BL<{EfKv*HA#1e5h~*~=;2yA<0|W&i
zgf!fJm&|i9?n_WY1oR6x#3F`8#w{Xj3~DKR?Xtk;BTJUNvG}<+?|ri&y;1O-ye4we
zi~R;RT{V5mi#s=EeR@mlRyC^X+GhEai09;^{|WcryAT?{x}xDQ6H?r8U<(&#EI+N<
zg=c%8w)Yfv!fGQ;mG;=XNOLwoXEDZf7}kDPWiP50J%R<6IqVRQW0Dg)Lf#n_y6kgU
zZv)bwX-k67cy7{~q-{xZp939|`X|BC$&##eDoW~*ghh*GN!M{z8tnm|ltjioH6WVe
zEm4;jO0jo_cOZ)h+`^=ng80aq2YTRS-lpJzu-qhA@eu9*!uW-+tXlEf!ttBt&EKT`
zkXO{OxTxrbQ#t*!q=u6U>d!5nK5gXO`UR6lOrC7Np3^fkvu6%}vuoG1Ol&J4v1X3H
zr0w7)VQ?D{Qp5E<!9XEi>oW};2>C`sPO{R3e<rl(O5}_1+=m;3z>`cM#=OZyZw@sj
z3R4J7g|qY1vJEdGVj_NO)N}Td-3y<6Rl0UPZ1uE3?UEbi<}|Fw^Xo33HTAU}FFf_d
zSNyq7dvcq$XxOf9K@*xWwU$;&yG;k7weLieHX2&HV9lhATS;pd+Wkgo_j{e%y(^!$
zc8`4RQQkh0Z?`DVst<Z2h*9_m+ak{)(_xf_@Ev!ZVn9)y;m$hqrH#(A@Lvj$&smm`
zOvoq7a>I|1R^*A+>vL_e0<$7QY~!6JHj`FM+eK^ldDbkn5~?}Ina{aXvIHj@W?Yg3
zP66zEMc%y1Y>{f!SK?yYV0Kcw0g{(2hci;l%iuA)DAPu_GPb-OONV$mY^8g_GM`W?
zd6?=EnF$u+xx5&I)YB>o`B@oI3e|=7O>u5uhUIL;D@X&tFZI3m+}oHveRKQAmoJ<u
zy(z8OElqdrWhSlA8rbhOyYo=%gnkQ!-?ot@UrNQU>Ex|#0v?cWP=gQ`gr5NXUk0Lv
z$8(qP6YktDWCVKUE^w8-ik)=lc9k9MmAjTJ_Zs#gFQAzxqQWA*@<^^c#q2kf=-jp3
zRbuEhn4$%h=<u$0<zLOa^J4hcs7&iMVShoZhHCX_H$3D@L$6!dG=A3c2=~bs*TzyG
z_p9r;VYhgF12-<OuF=}ZbC>WXPsmOG;es%!=WgICdlg&ygxprI+`g{d#q2HQcDCCE
zN!T@PqDk#`oB_Ps1mu|0P_H^(aF=cbDA-KS(y>FCG|MA*3CnZm7Wx^{fLYJ&_!zmT
zTL^N!>{X5ecWzhNKF-{5=1Pk!1i7BO*fG!zxhuE-H8J>gyqKaaL<QLb@-^sTK?SA^
zTZ9u{v1gT_Sz4MvG+XGVE0>8n;a_r>@UPstg&sn!OZ3W3G^>}rid}W*c9os%m7Ac|
zbFX370Ikyk;wn4ID>qTEp1YWvP`0xdU1g_Uvt{ViEB5FS?X2r;XNVgX7Y7b?mi~C|
z5^h6o-EtG=m4{lVm$-_RKA}Vd&w7ajub#UYt#iTas=v}TxNF2{vtYbj5%AU*@X`oy
z@e)H4*!-Qai2Xp!45cG#iF%QNlN-2mIaq7{OYRch2D#C?s0>>zuRPpYqM5B~``_i&
z_RMQ~;L5wEJ^!z|)4lSZcjYaf%9yj)TySPxvlZ%C(A(A5)vnd-2E56S=g+uiE70?|
z*Xq%p8pz+=$$jbz?jv@A5cp~7#Lp{k{0PZK6Xkd(jF0Co;YB)rd@^jtNYL{TeyBv?
zr=bf!uJR086?sk6W<785C|8?Zc~h>z2_pE-0hG7GgsoH=1z?$3lLh}6*c4-&AT_uR
zJX6vLkGv&`uDmW+iot8%Mc$#Nht6^>Y?UL~;mYkQ+2A##Rg5=%=*nH}XouWR%)4^C
zdCfGqGyfJe&`ChO<{3^D1=DSu6RWg~NPW=<osolR^c{B}2zf&-`?uUB{29FuAZ;pp
zl}LR+C87_yy86IXp3$eGb^)KBcTINzA4*I0EKT&14qq{whZ>zNc9oZOP56kwUBzlp
z(Via8_Uw1J#}&J1aFoY$m+*Fad$56u!BO-))E+7k?P>37kE=X`pNPByT0L(u>?BTD
zU3uNyM66B}u=WwKmhecucEpDp5Q;paM9O1k#f@Agx)w1;T@zMb%#IlQ4Svx`)(+9;
zbVa+vK%JK|F<+wV{;uyP=pK#u38|0tP!5-i<gxOr@)`LTg)7yRr<L`}2~)Ufsp-5q
z$Gq8m*3!cAmgT7BW6Li-p*~qY8-1JkF7Yk*Ywow!?=yct|B?Q?{7?D+9q@F(pn&%S
z{toOMxHX6c^$a>2^ha<`@L>E$5zU%m9d2D|ea(8#`g=$~NP5V=(BRO)p(nx$!sdn9
z!|R7n2|pR(7m*UNHsWez^~hC`ccapyHb>p6lu@Z)rM;CNL>EMli+(HmTueYr$C%YI
z_hY-o9*T>ND~$W1vTx-*RcckKQ>AOXPkd7R!1x{U4--ZwtW5Ye(Lb?P;=shUiPsWu
zB}qwfN%=|JlFi9Yl8;pltvV;ADCJOUNb17WA5tA@i>f76>rri8wJX)GSNo-UVD*gZ
z?W^~yKCJpn)sIxaQ2m!0<{Hs8(rfIkajIsunzL&~*LuCy-|0!|Bh$aFomhKb?Qb&z
zGS+4Mk?E5emsvZrQD&FSk(qPwU6T2CR&Z8oR{gB@S;MlXXD!ZpIqN{y$64QJJ<JZt
zu9jVt-6?xS_T20jviD`5&i+sK-5hgHm7KhsHaUHBCgm*8c_rsi&WAbIa(>HIa$|F|
za+~M&&7GXPBzH@$E%$Wp7rA%y%z2gaYUef0>y|eLy-PhTC5LVsqOR%}T<=d7?SmVP
zow^rNo6eVcr`r#!+AsU|_L+!FUl4})$Sc@j{TGVR^dzOQ)tGY(QEssQ3Z9#;vq7fH
ztSeS}bi#tDx!6vvn!Jp~DkacOPOvy>8~z7NJ+?%y!6f7#f%FDaN2K;hxk&SnN|2f&
z4M*xD#k2YRCstbtVNWa5*;=Irn=Ajo>RGC>UZ&10)D*zho9eQmrb75z7b6Y9^#oRI
z+RxTYjo5Z&JWDtE<9-*m-U6R2;yKrw79)RUaqh2Zc=kDKrF@Ni1#FfnorPNbSf<I!
zsw>x-MY+T}NLg&5+?|Ev93YQmdGcl^OY5;0SQpk)na5@-nSg&GQft;(y28?xWvmnG
zohJFSSrT`=t)%1Z&sLZpAn!yrO<9G!^xm_WFP7n)h<WHP=A%qtQ{+Ecr0G6ORLm@1
zzR3b`?j-GJbtH-H!#UQ}k(EeQ*kWZC8?3y|`kG$G>Zc;+&nwtc<!{zgUc~yCo3L*3
zTDDTY!MZ7<*&K2GHQOZnu{laB)(@-A>LC@tOEnG=EbHVutSNA{O0u%ixIb6k2{>-B
zK5!5AFxO-qu>IOF;JlG#k>i2Vgtav-MBkkQ-hN_B&Bs{_WhWb^tYwXrrD)d+@V&;c
z)s_Qnu%(dol7B=$sBEhIC7W)l&R#ZWvU&U%8^qsdIs5|4mc!X7IhGa4J}g`Mm@PH!
zfR}Cp8zqfkU4Z9wz>^0$=&LMXTa-6gCFOmVZb{aYvmJABZjDqxd6C*9wMEKDqWjI9
z=O;cRS|++Qb$9$F=!t0R@dWx3v_<sgOj0Aq8KN(oKSnz0qAQ{;&qOrkkpxW<-8?A~
z9f5{ClN94PK={P@U8FZ%^g}e{nLs;4KSm<j!B>oT%P0-Md`CX4sx|cOEjWNNl<9nj
z$;w9l2c!Wry=2P4EAjeSzQl&o@OQER{F=*H8cvOo#HV@t_RU!lV@Zg&1tN!9UXoY>
z<6G&W_&+TPxRh~0T<4yzuY$s0XE&QH_`g`PViE_F@j<k@$)xz0@iCdOt(M7b5*Omi
z2S*9}jwrIojw7;5K6D}Dt5{5mNk-8q!)%hwibYXO7G#!XJj4S<u~;mM4<4GuOOmgT
zA}eMK!K28s8Q_SLeSGkS_XnjqKcY4~G_DCy_XkB$3!EPXjTLRD_Q&BD;egJ5K*w;V
z2+h3?@S~8I6JCPZFs<)__J5R}W*6Cy>@IWgEZ$i<EnStaC4?u$BveUAN=Qv8OlXoY
zDPd1iC^Q-R1fq;>>=nGZj~!zlVFCD0>>l3i<a{$Mp;AJec(bm@o80lh@dJx=oM3*A
z<A@&k8|gk$Pe-BsjQwr<f$Ouc&$vGQ`jqRFt`EH4<9dy6%fDImU$j#L_2(k>B|!e?
z=MX#0-ed2x57-fCX9w9Cb`}v3AG7o96E>eMU>DHlGIoi5$`-Ok>@)T`yUebzFW8rC
zF<XMU!}sh5b`w|u&tc2hE%r0}1^*B1Hd_w*B|2yP2WS06p~i=B9_UQe4+%)Kk*IIB
zITPu!uORI~8iYjiFG|q5fl-G3U~DYXF{BTX4k4X(rg=Djgme*!@|8K$L7Wllffg{d
zl%X9AEn#RWV_zZt2k8RRH%Q+iEkwGGbQ9?_q#vDWG0s0B-9@7J?m5#EoPS4pfOG>1
z7CMF=1a27n2g#0f3kic#q~$mhwNSbPTu~?jl9;EE)(^dz_P3JIE=p__&R6wBF?7;3
zJ;D9M62g$ek!LN=m5^fa`#GHBkgDMK2Aq@h#9qWXRZr|Coa-VLBF`qAo9GFvD_FuL
zJ+Un~qaP@-t;ARK#J1U3t=2Z*4&CACT-D<scPz3ssf_jA{raZcc&&tlrX!lzc>i>p
zRLjO|B&OTsS_#c;a!RvK-IIGHEKgY8a`5tmW(mUw47MpL;*1AFmiNd=u(8hFN8s3{
zd!ntVN384TkRCk>(`^bBgEx?Sc@Gp&>?{ChaVx`~ZZp+tonVtwJ9O{Z-8Q#LtgWa?
zkJ!Y-gr>G*9lG0&HHl5^(IeevcEJc(XN{<&Lu;vJGuKGB`RFBd?rtlJwXq({ms5G2
zyC)~w<}P0zyBsYru8(<NALQ)u8%3TsfPtn5`P>dD3a8}6Sh|s%n4Aa*do)S6`PORP
zxqDN9m<SO4YT0TvO}F{ivZdn`PzwvfmnJOl-2G4yM$4dsK5S{1?uS?{`PR4|v9@FY
zo3QjCw$m~0Q7Z#$*@~7POkh2`m!`8Ov4>c?e5(oW2h_A7j#=eFQcaF6Q*nGZxG*y%
z*2;WpvUho%+Ersh@bg`%T~T&&1pSg*JXJd}oPH^;d#224@sUAv&pfE()9F~gQ}bO*
zQLgh{pI)sBt4Gs4-vxu)6(-X!zbOOT<R{WE|Fu(k>-PdC_ivqFneGMFsu~v_K)-?-
z7u1Xo#V@8>gDe16?;~|?IG?E6=+GgYPom37>eF$!>_>+=bjXOqz4mk%ONZ5T*iQ!s
z9pdA73B6H5Z<Np*C2DX2UK^W0m-Oo{9pV#^xgQ-?)8Qf=9CUb^@?|8^8+6F1fy2`{
zFhpaX#|Yelbem0JD)!3jiWQ&jSbwgt-Ru;`Pq@|}IxE&3IqI@N?FGb7B{F|Rql7Cf
znHARjaC0RVVLryJQZMMd3Nx9%VZ<-#<HLrM#8Q0myDyUdo5P#g*ZEswL2Rn?x9o9W
z@%U|Gso>uFyJp<q<NO_jSgg~~BF3_D*hg*x8^MOL;cODPb2fIY&cZhVR-m!?4nwrp
z5L~sye=r!tYU5W!+!=*)C)ZmO#nlit5jiKY$v6&1&Q5rHAkrkH1gznqyCYZ$8;vJJ
zP;LoI8G!s<#ak2cY%J;^2x_DL99F=d5?2IIfmdniUZoM-lhBSr?AwsRrigEClspb;
z5Lz_^<&8x>!|-$zY8iw(V+5=dai<Mh))<z*cCdpqg>9H>&jgml$5HH_bLn@SNBloY
z^pFJkAB-NOp3pz-@Y@d_j0U*d6g@?|^i9KY9=;qhb^(ry@#T=9w4>p(Y$cAbu-EY3
zLC6JKA1a}!03<7ZLonb=CD8xD%tX0LlV)wYu$V#9CX8Y+!zK(F$znzgm^21`OA?hV
z`r@sTLne#?g!DcogeBq(*p%V8S}*c8<w^2Y#1vNJh4OXzH^q$qzFGtY%11FvK~g2D
zwp1hylqM+w(qd_a(oEVR{Vi!q8+<#-wd4j$ceyvx1eCFY%E9~BJ-)xm75Y~(yS@QR
zGv^m&xW3($?trN&U@~KcR{-pFDbR7N!Pij({gVkw$VEIsKGuE}f+Fez2T!BVTA}CK
zvyPyP&Y+;~tS9S*wTJy62iHUXy#Q=_>N`i-F?O7tU?)9vo=@3T_BFc(O~6yPxh;C3
zj^h;I!AM1osi-p&S`oz*ggJZwkyZPRVSN%yaTKxIj!Zxn&YC*DVa*-CV&%@StR+%w
zq|QjsAa!;8$a*+_!OqjSuv5$}wi5TA$NL+RUP3yAat<TChx9(u2S`VdK0}$GBV9(i
zg7gK_mq=gX{i{e{BV9xK57PHYKOo&i`Vr|Tq+6)-XQW?{enq;Cy6+%y#FQTw$Mc|x
z?x5az+83C8)Ny>v3Zaue<+#o2JO0ByMN)A00`A_yoif}h163)&PFKfKlyZrUc8tP)
z(qr&{Ase&Bjy-Id;}yIU2#hp@@3O1o21a3+xD$*!0l4!k?gWY2Z=%O*JAPwzkuD%z
zL@GnNgcOcvR?vghSym{pdkfgT1?=7ec5eZ*w?x@1aefZ@)+22|dI9Mx+`EeOHPSVt
z{~&?x9UD<%bF>cYt5D8ulye*9+(wVw#yhw1&TYJN8}Ho4JGTLMD?rj6T%i|QLp4~?
zt2gkg5-@%P7{39G-vGvM0OL1+L#tyU{%77o_B_%?q?eGWmABE#+i2x&wDLAuc^j>~
z4a_tLOf8UFBDF^9>=*}#HeyeSN~qHxkZlBH8v)ryK(-N(Z3JW+QTsU5J`S~yL+#^G
z`#8cW-jG?cV?XQexQqVz7FU6wzJ`uJ*Z|y-@INYk!~I{7cOISwVeWB5U^vKe5&aX2
z=f9wjzQp^#2<(n_>_h*4g52BCzsJ$P$JmPw+F5=*e$jEMI8vN$E0iReIsj`}w`&Q)
zTnpN%#|OG3eH`C|#`I5!^ZdjUC`Ei6Z#phJfBoY4+4*ZR;B$T)zdFhse>nc6OUDJr
zUB^=JZJmeG9cbi^uaMrN=Z}9JzZ-WPq}k)+c*Ceyzy3cR9X9VA7%BKT?f~0#{t*Y#
z)&DO)Zg`9r^m2@=$Ip7J>8|l6u<L5m<GGQm{PBA<=k)yOIrK7~SW+<McJ%OkNB`~a
zk^g??zT^1O@g3g3srMu(?O#8R-t@?E6fOD^$FCg4j^mEopu-T1u+xqk=&?YN<7XD)
zh{nC)c*Yz%9X}vt;*F(_?x0?hq*liP$0=72zr}(z4P5-5qZ;yyem9;`dH?$ZYD1sm
zc!z3t(0uWKe$ZabACX^BGqwF+K0%JbPk!R~{>k_CyWk@D{4YFuzwM+?%qQ{I4T_|A
z>|>>CM`z=%lO8}f@M8T5eaGYD_{1T~!4!8C-FCF_c=#_r-4ttN03X2zbQp%?BF8O9
zj^-TYbYHuUyW5en=?Z6906+z=<G2)($@y`-=KA%u@k>AJ7<YV!5qTLLk3NRBre_dG
z$9R-?%HxK|PtfXFk4xuINEGpLd`=j0d<v?28%M!~o{+mb@{n!g|M=0ods`Bc(2Upo
z@#RFz;Nqe9%FvUlgV)xAe&h=sqyg?Vh1MPo?WiSqZyS6oLqqC<_`$CDCP7E)iB%81
zp_f*L)n+-gtmoK9Xj(7fTN@hFf1qzcj<IJjqqzfFLUEjCe4|9&QKIfxQFkorPQmk3
ze4|lL8pdQbeCa>RREHF-jjta{%fOqN_(npD%fZuJe8T~29gLm2`1(P|DunL(6uy-Z
zsay|r)W<gft!V&SYl^QK>x!B|?l#9aLbT0Cv`rD(p91}_GjP!bUyEpGm}sXj+Swbh
z_QBT|E$)k6r#4%Jh8V@3$2V4Jic!G9M*Jo$!~zQk0p}su$Rya4j-p-1pf#GHH-3Wq
z7hqHJgD&_fAp8vWBr|M6UjeGCz?~0pcLV+LJuoN>43h6g$6$!SV2HqAILZtGMyL<N
z1s?JLRPdEBL$8S=;Vw$xi{8$|odSG=1lIfn)_eulA_UgL1lEED*8Bz5tO9F<ua<zg
zHNNzp+&cj#!jvK~C8Lj@!ToOd2Eb$511%)#@bSQ!kHA`>n6*f-O|1YVE5&?eEn5fp
zNz)DycnlYK3=wz?7kCVZ?e1OVAv~G|9wmW6Nnp@dV9;M+&;tDZ2api%WPv*ccC%jr
z57D3x=$>XUeyAO|{g=5<4bnI;z8oll@)P}88uo0Oz*;r#)CI?8|KEZf6&P%M{e6I>
zpJN!14D$B{k|9CfKv}R(kO`oE5-So9xPA_a#{}fDrR3%3GN`2$B_=cI<YcBNGMIr$
z8!+jSSDIS{I<*9B5~$D41jIlyfP9cIAa;OwpuQM{2Dz3E7`sNmkS_p+-5#ha4xlOr
zAO`j_!SaiNCV2t-y$gYSUnDg$NNSdV)dVms0;&lBii28YAiF@OFak~K0+OKBC7{v-
zBnBK80H#4k;79|+EudZ^6L2(eE|9+zIPwZ{HN*`zz&KdWunZ`^0=U0w6>#MwXrvsZ
q24WTyFc)(%tY@eK_N+@7HZW`ij)-h#*ut<CXd)vpoy!8%F#rIf2P(Dz

diff --git a/static/fonts/roboto-v18-latin-500.woff b/static/fonts/roboto-v18-latin-500.woff
deleted file mode 100644
index 2633e1525dcee3d8b43790efe292a4c415cdcb88..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 20012
zcmYg%b8sik_w^?>Hn#0-Y}>YN+unF%+s?+eZQHi_%kzEzd8g{k%sqW>&z)P<UER|?
zZgQfc03g86Axi^5`tKSE`eXl(`Oo_Q4>4g8Q2+oa@rM)pfiYMBSgn}6oYD`s0RVvA
z0RXUX1DLzZVoEB4006|y50CJJF*ZZQMmZ(=-v9vQ&X1qs5A>ZEiKmTh4D0~_DCQqc
z6#xJt-G^4ZVdUye002NA{AjfQ10xQ&l&QU$4FCYc|D*e<1E?eHgQUXD!0E>q*7-*R
z`#(Sekj<<;On*#&0D!Xs0I=LBBL{vnH@0#A376(a^HT<RK|_ZHF*h+V{^9<657z(i
zku&FL{zLw76F)Zo4@jV|!Hdmpod5H^004l0%0QY1FJ$Db?TmizCFOtOSpC74wkyA<
zje+}5EYklygWx}a;DI368rYcpaMC~ae>#8cVNO_kJExy`Whj0)<o|TvHUMLLN0T34
z8SWqZ=0~T51zbSsz6RIJ2m~aL0p9bz1uicLm!Sg6V-4VkKoq3J{cy|21U^cy4lhg9
z_+t|75^WPL6zvpU(eD0c-sP)^{e}UfnBs?!1oIo<z80MfVs9#iCpO)=9UaY>Y{VN|
zrO$D+)?~v?%@xvUbM2lz9D!$Ob}4gRrhJB7AeZ%h`LNvF{<i$<*WYn#w75!jmCl%1
zdar3Mz3CIR&PUW5qla_7yC=5a>7WFlL<F9j)LU<&b^pTR5rdA%YRLBRkn~L+CX{u`
z>C$l~rFhcLq<$-XM<)+BWM&x;h1`y~n|6@+T6{c_@O>G7yc(-~M8D+R@+;EPOUua7
zO0pI;ooeaq-)kPf%Vi7coplpQn5KUiFCtdQnJU$V|4AY-ju+!Kk=92_Nb6HJWz4{C
ziOXn7<Crkwg_+c6L{(OtymtqpH>Sm289-~Q%R+Z(E@_W_e?{#+V*5zmzV-U*p>wSd
z>%7<}#5?+hcgPr{AjSj7JSWUV+b}1}#q)r~NPa=?(Cz4!d6M1FQT)q<Fk=-3;X$Ds
zxev)Sbaf&xGildBHOzL&JVf<WQ>O-75IaK%T}u#R{ZV!J>hTk6v#i@SYx~6R(e2Ia
zGYHRZ64_Hx?$m;(ps`D@<Z&%GdaaUnt=wj<8ux0oOlPf%=W4U!msWpv?;8bU2E_p}
zNXh8Uf*b>V0|VbfEd#ToG_n{1$J+VGuNVu~@KbBZcJFTrJII>j&)sNm5}M<LT`zAk
z@3dgxF%8M^`gC_F6L!Hk;@22wE=BehFY2_T<za1}!m!6bc#DpF)MRoH%lQk=T<Qg=
znnmY}jjfBvn<!4PTP4p{RYoqFHE?UCzT06~ciJUkESh;LZMt@gnpN|jHZ!6!rG=R?
z+S96%_7HU)i)3EJ7Ei1BRcpnU=>iTf>_wh6ODD3AiPbD>2&V=-`C^Sxi+Q2{tAe#7
z?U9!)H0~;Gxa!HOQTDu10K0M3<NxL0SC>G9SqOd|<wM2|vabr_nmX3km=sQU8LUr?
z+ppVSe6%EN%m#fZq5Y|KIc^?eW-ABt&Yj!%?%lB*?^0XWc-L-hdXU46GG0qJr@fwG
zjq$*HQO61VLj@WkQ7lDHT4lg_91Q>fsdiq-Ro<~%|7f1B+6m5?&u{0rZ1kAm?$B<a
zV4*xdZ_W<15j6sDO{>R}l#PA4(=Gh4>}|(wE4yHPof{W=eHNRZi@Z!L+g&;I=m$NA
zuWdT-dFOBEkXOG}^Mh&hN%0!j(WHpP+E*kiH=TK?^**H~RXZd|vuXw>Y;`w}e5R$f
zo3&c<hZi4pK?`<_^p1bP05vM80vxZ#oL^m-n$Asj-kjEV?dTDd@O&`u^K2hV5#Zny
zcrQk&urYy2R@T1FjRB1*z}&+una#MF+i*Lp^vlrw<E_RplWN-C$CezrcklH;l`@Hr
z2Gpv3YcO5-mAkFGb|_iROGecoJw4|@ed$&!-*)KH7kF>HH1)nj&cWE=oD$6e<b>WT
zH4y&x{9b*_z3)7Uy8BkAx;&@JvKv^Q{i8RafDrA4J}qay6l>oaUgz-Hn7rfgUh9}w
zooA=>?G|Ggr3VvjA#C>VCZn-Yl#zr#hT)V+D9EXTea^NdVH`A$)}$4fA|X*lnnSn1
zON`lYchXHG^(#a0*^_1_NN!5~#;#-1z9Pi+=J{EV4>RMchPFgXqB~nlhL}NKTIAvr
z!kB|3lm>Oe(s8h+l63VXv8%r`u}StsDa~R~7}Olo$P3cwi8TlYX%fBBBz{qoCaA;@
zT4IWZ7%S02eLb7$P*W~RpkWtA(Z=_)Qkt|M)Cxi0PE6hM35(j-MD>27TrQ7bNcX-`
zhrh7+5tybV)@Jw^-yp_v`2Hz4aFo8|n8N&BmSnInE6yqtKO@aWDg8IoIgm6pw^4nJ
zGHy3fk^`9}K>~?M#?W*O(iU+$IaRChFGu{i_Gs_IhD%qXfhAd^{GB?<U?s|Ze&8Rf
za0W`n$|TT)x^7(}R!QCr(jeM+8BUgWu0sD<iHT#<Bh~Phgm#P=4#mDs#Tbq?HnI03
z^UosKVVqIpl!4UTMbOdR)B}S+V+ASVUo!E17vd+m8L-lSFTO!OZMeArKYhMT6o{g~
z0b*#5-YUxoTph<qlg;`NTpw7S4IGyYdRZ3z)YKU&)=m%jb*cxLiOb6a-E`D06Z<@0
z#I*YJ2I#L;06sp3f2as-(<<$&K;psD!YEDYC_GVBN1e2(h-=V9`j}&y3rkTSRSA^&
z?<&8X-fy|#zG6E=$IQP0X;-@WL!l7u5(-Q*llkGVx0vPpqyYgjWBdugNg(Bq+ggea
zgaNF@D|>K7eX^WVHafS%7>V*zgl!Xi(c65J;d9Ck!E{OqR08iRYqiA;a;+$#g!4k4
z0OP=Lx<+cSk_}3hQtvtYolGX#)}46j>ek)lc0Xu*oEEbXjU)G+IPz?dT@?&C`j1`Y
znqpq6pL`hUo2K=?gajl71h}A8FoJ*-a0i=qjr<)N=;;9r$j|ij<iZzb8hE?;`MH5Z
zfP<3~vWEJ>!dhI^r(&RBU>pY>s8_19F;D;qnE(`_FiijDIAk1TB-;iMy1Os(Vk7$;
z#Z0|?H-~0QJ=tXAwe1LJ@RRbUXfwO^u#SqDYG)$kQF>z3?dQU^kz&jIa)NWckHQ*m
z7}~mCR|xHA{&=dC@~o|F-Yj11FWB#}z&vq^U*%y~c~0u;2hSuxd{B22%_D}`m-aJo
z2u>zd>Y;pn-Gtx6b!*FtR36#dk8X9V&!c4VDIBp*XQYeUm)^}6n{$yq^iORo_lC`p
zS@f*!>d%I0Fmh9|Nx*<a0TJfAs;as*EUT*eEdcdp!?>;2MdLJo(1lx%Ko}0|3ZfW}
z%Y*}YCi4PAijKn~%kn0}1|-|2<2tTewDWZA-!^CpD1Q{+2xG(<bd3X%pHT%`J_nkJ
zsy-uYE-tGfwyJ@bF~D^Pz`CPvObWlt?z#smYe*owi}SS4O{dR5w}%z8<7rG`yCZPH
z9R=G@%sp(<(IW*rOx@8h(-9jbjMOStu5FA`rpeLBnEvoIqCQtbyf2;;9Yy{TcTY}+
z_%->8p8)yl1Z_x_CvFU$Cu~fXrzz_)LA3B^g3vi;f|Mp|qG04Yt^+}nt-9l9U<IH8
zOaS5l**~}dI0EVbJ^)pK9zYhL4+IJ*2MqiuP`>m5D8Ly2#BUA&+*b+!34{;;1Ih_N
z0gVPAg4F_0z%c-*;5`6DU@ZU=1SkLud<y{dU)AnwIx#?EpaK}7W^0#i6-4||ssF0k
znc)3<44+1Nm++2YRN4w)9v}<}mvXo7=xQN0rd#>q($|et7_K{}hxftem0%s!oW3OB
zzQ6o=Y9MC&JAsxJO{HMI%xg<}#l{Hc90SeSTV0?e=szDf#>2fm(uwh!FyUe3jG$Co
zOx(?62}x&t(1q2&Z&i_-vE&49)}Ys{XJ5wk_2fwNBR4kL6IBTsNfP5Rms<PRphb*l
z&RIjf^|CLQ@XQ}X!9TO|?8U(_Ji4vI1y4I~pj>=Do7plyAx`c5%~M%ACf23WDE@(k
zODe02FX`u&gpBtIi-3n=aWb*bF%ZVM_>5AY!Zb^2Ok`*9R+!ojIyZO_2at@IEN0fl
zD9C4;7pf4iW>vt|8xBf0{4@3i=v4o?{Ye@S02lxX0RH|4Ah@qJcthx;3_gEntZuez
zpCxJ2B_$F=&Cwkw5&)AuY!!tO@gSy?1aDP5kU<AZUZ<e`)g=bj3+}JUCF1L1jZh?o
zmUK+`p126v(0#eRmULyxptalT@VLGogB52$<S!-T;0M5+^xy~TCtlRBVMIORe0f5!
zuPXG%a{9vB2ZE%#y6I~P6UJDq1hM(E@^9CM(HQ2+jm108QIX^OI=*ZrekQ>Hje%9V
zfo@5cBV$|rL4}3H{EHZ=s8A_Cse+GQ6eo57dH0P96HIX7C=r96L0V-6ji+bW16Ix3
zGVQ$q!9YXn6~XH829n!V2?c9tw{(JgqT>8EAIeu$FOR%)Q#H%;)c%LhYlaJVBv~0k
z<Mdc*E?#J&H@yXv`LP@f=(S|=L6z3DncquzcW~9SN^4olZV?*LPp~VOSq6kiIlY&J
z0QImbi1Uf)Iv2~?ARD%Hg!llDU(z4esauP6fy70S@YvZ|ipC?pKZ<hE?T-r(;se}b
zTuOin_bZm>HfOr?*qm4t<ZF4l5ofaYVZIl9FrND+Rv`vQz(>f6p<oNUJ~(lHScmZ9
z`8^gC>==s?lPX_B9yN!s<L0^r-%+b%W^$+|u&^Y5uYhsAGitpe@T6D1jK$hCHMd3<
zMj0BLH&<=SJq*86>~~A9S&x4+?u$JTVn*?9_@CJb<0trDm=V7^f?!6S=X?6=>ub<5
z3e>|}_BpqDR;@L_)SPt1usR>YQQN4Gx8n<8GgiJEeEoNN6O7Vzm4~0xK((M__RyAT
zI9pMv=&JP`R9Tx%3=SR$UPx?sP;TcS8L*a-s2#GH=p{5nl?D^CYAPlpDO?K@x)`+x
z^bxkG-=@2Ib-xZTF?xH(X2j`@2(VCtx8ruJa$jrtw?BK(EcPg#dbhlE-pghi`l-U~
z@;dXi8Txq2U~D^$tCumA4dvlzd)606(Cc3ZF$a7KL)E+c7qUzq0c~7yC?kqj;+lbD
zl`#;%;?@W&>5@64pt?%%W(*Tq4*NC{UHZ;D3tmqv4@fPlF_#|p(R`@B*G2i?tRA$L
zyLL@Jz4Q>CG-FZW>S;&rXY&wgp{Dz>l9Cb<h0)A7-=O<f$gQ-ba54}VI^EhoqumZ4
zuJx|PTAB5-s(%jG9j{(ZabE4NO?IiPbvi+zHc;7t-I+wyS)E41foSzjb{d5iZ%^yA
zTCA6ARUTzdS4&lq8Pgm8YyuVvwT_pnGF(pQ&Zg1!R?rCe)y7zYltJSV5nOhJT3ze1
z94ec(^4#W#FR_%-G9lOgP@reZuR)pwA|v+(3se_J>XQ=|V{x5U4Av${yk_*GjL910
zk-0)M2LH1YIe{tQHm2f?IG4%lnh9OFkSY=E=NL2=kDODy^sFLfRX|o!k(3qFB-0nH
zCFS9f+0|K&%jw!&IbC_F+3E++tp)$i_RQKiZOC>epnJG4+&z$X?wzP5EXc=pwOQzZ
z(PS_mZrQa;zkItp>C?q;un>4cuOu04*ZI7+)#A##CG5NdmqB%PO<N+P>9p#M`2-+3
zBT2^LFY6N4%<0&ggnaa|;U$~KL8*g+&P(8aloivT2+&)>iSmkxWDxfZy_qo=YcZ?O
zoJFJA01wTR^QC1pxaT0OJsQky@R9ApyUmI&bj-%@7LvAZCTWx2CLFT}($0$c=VJNT
ziM{C(d(}|3d~^mxMd(L0hFgdVmE)0<6^CI&qis0sZQsW)U1+tFa9X@2obs~Yqhazt
z8Bbz|eZi1w$wRi)GC2AQDGHOZYseAXYZ+u7`1Ai!@T8i{j?l))G+3|>;dFketPh#1
z87z?s)cMmaPF6)glFxb|$ytv3pn>Q~9IegW?cLoW*s|awhIb~*>*MC;c1Hs-_;(w;
zzJ@sf)zIaZ;6(s*CS}%*33G-ZHhkFGypm%{pJkwU2<yU~K3&?BkAP`*0YdPCb`B49
zOR!?KooJLW5$;(4!k}(yIrcVa(vY%8DHmxz)pyR48QaWcfuE0nISR*e*-E#5|J|_~
zDDX%<tbM13KUceGU*nH5Rt%DVdrO1^U<vgf{S@^(j86o>yO$~`=UeKsBCm3e!3ZjQ
zTU0tU4NqJ`s8>d_(K3Fq7&Wj7^HH-IYZ(o3r%of)-pd+zOkWOLI;TlJ?(;!nW9I-x
zhSpRpEQtqk{{#m<H`9s`CQjkuT-pV5!)ZB%_f#sU@~<MRo6lnic;S*|Io{bn7I>I4
z&jOxRbIAiHNvoYUN}Z_o?}J{W-7oyuYnZ_T@)&&DsH{{r&7PnU4o9q_0?r}|5R<>-
z2a-2x<OrEW5cFAmA7J})uDLo1@c!VxQRYY_qm?lM0RwFWYtUc_gZ^NyNrJc)0+P|q
z`*kJ8xYgLSbU81JD*Q9Q_$LarA%o!S2)XwTAu&$0;F5R=G1xtSpTM}_<v=P_2cpv(
z8YwBHYgNb_C975k$ycUoXu@pbEfL%Ce@*N`@l|~s)ks8+cy@STvmW>?_?|qNC>?2!
zce~O&-)jDbL2M`?HYsNA0x~kTdBmc(fXz1s^RQCG1pB8euT3gO%q+U~N51I;?Q`;1
zA^n0UEbbh->itP@E0$x$BKxBMn%-gvq9;m~gUaSo>ZZPklUj6k64zT++2DT7WY_I<
zA`qC8_$`870$-%rK};Hl-<4t>2Nsv%NxP9}G%xc(SpD@y*=wkg;cO><>;p9g#`~3V
z&tG5y*OI$)n1C5c8-6Mj$m@Jr<+c+jR*W%0Sd&p+EIxRbSDi{2Q|gS5@R1lpI8B53
z0Fc4z=LUD}a4XDo!-2K>0}RVL$(QN|>??E-NK<)VGkMN@0yX#=q|f;6Kfd@$$jJQI
zK-QuJoswG(6#lctji{ks+DQ$&7nc5A3@iKPgsD171${vrd1S~cO2CKzW^rH>+rys_
z+1yrX*4A|)opCEz&C~B~F+YyEUx%-KcMbvyN@y}?O5L!&u(sdQt)~d4ecMF7UJu2m
zQe)AlG|U=7Lb=y6oKKw~L(MTrGK>r{2~DqLlp&klYEl`9r*#9`)f&hzng#12_AP3N
zlz$sFSu(Gsd;%<m2~=}+a*J6xWO4`|Y8+4Hq_%qJzX?gVHwgT4xfhNF!Z>E{yE8a-
z-aZ2D_diJP4%W2}2rYvPr_8b9b!fesY#&cY<>IDQ`Dal0r3>~8fZ8?jm7|c(0}Jsm
z?5Tl+E2R-4Evku4TFR)!UxYmO2b=f$>j`?~n`ImLX%_r%>#9v@!Bp7$vM$sYCz+T&
zLp4HT($u^1nCjcNbD6H;m_=E>1YfYN3xl>G-3k)T5x&wMLvE?QJf;{B0L1ny!|v+0
z8Gpo{aJj-0eV=(K)41E@t`em5cwV2Q?22VtIVe33;(oP?ISv-?uE#4PL~}jPPm|xr
zkdWJ8`yLEM&-oA^O-$kP`uui%%t~Z4*Z1YsAEEOi#Im@aY<Lzj*2!GleEvITK2=4a
zQ6mHkTPWiiydtQwf?qpTMIDW*rm<Y0>{IjvTjDqg3|@~%Vnwyc4$OjHcEt;=LT1bP
zc;0dzX-6czln|}3WOuz`&9TY(eom?6@Qq2a6K2vqO%gWJPezi{L9C5Pmzzsh_2#SC
zVD=PvX=1{Vu(lFA5c3x>gan|)7?%u=dGNHcygZ&i4}TcL%_BDFw=-TkqFtexKwF<}
z5&^G5xC{#WEAm?^f`my@#56H<JqZsreeaeJt)OGxT$@o}Jq8>)HsqYZKe;RIJx|t>
z2c|a&LenSj1P%s+^%q`>FV%wqU*NaMay(2=Exz?HUu7jFgJo39JxtoN7q?}sJiXIl
z_dEL7(foPiS)(5L?h82sTHIOrT0uSyHI^-&{5aXti{+tNQ5+E5I6OQ~_OiggA~W^m
zkCyGnHOGWtOy9)!+Z4>67Bm}8f)$JAU}T-P+g)-6^}CC8Uaq*RQTW-NH}h)}(Kk6&
zTVsXUzD^BZQ=$8dSj^W<xqioe<0-t`4F-beCI@{Pw5ZGYLiBgVM_v|~g#yH9Rb8ts
zPz9$lo&AztN}ETu>kINBEZ*k*VG?D=&%4Nfb4m{jw_FUspHhQl!?Ma5W2qM(LsVnQ
z8ne^XNn21(Nh~pNq~w_D;59+vf;dF~L?i!GHA2xC@4G5ZPu2g8Rk4;JLOf?rV{9lr
z=Y8mRJ`e!@<WZ&CVYeX1#Z@;RWlLGi5oBfod%(=0B3wPj`TZ>akVKbbM#kLoJL<1W
z=iAHcwjfjXXHe)!ksyCXjKyd9f@D*)W-tr=h##-@{LyHLjCg&6C-Jh{vF}RcQ0}XU
z@ohifNO92O9-4B+{bi9~0jRMsMD`ayc$~;R`txNJUV1e!II;hNxT8OscU~)WO+^qM
zl{?kB@C2zO>2@7`_t=5v9~0J;?2!6usn-Mi%o`Y462JDPf~s%PtWi8HjWhoO2Ri_e
zD$t*dmTpAgSq9Cah@w8&xH==$k~QdxxHK?!?|<@}R(Wk~BSAPh1d-U;r;9fw5yvDA
z*oFy%(AGib31g0i-W(koArU#m+=k{~uy@mX2W}{=zE?bVkK3<KWRu=x98;)pA1$WR
zy9YJ4dxwR(U$uIL#Qocty*ypL3&k5HP7KgkqrhUwXONMa<{G8K(KY>xXYoKFnW^c0
z15h+epfPY0w!uDp!QS`Nx_91bwZNFX?;xbX$yjQ1tBQZztTj8yFg9PJ6Ria#(2w*)
zF}X$~hw(d~hwYf~K6u=C07oC+>37=*6ASn~glKHflQsKXMg`pvor$ABNiCLzjL<Zi
zU_m+x=ZPs^as^l!&3~!&tT*otS-e}t9WTg4QZ#i5k6k0WlQ&+En`0340DH`hyUZ>R
z_EA*30(@}8LB5tO)Mtw~@_Hu)OKqX*_3vUW=WF4y$xVpRIyUxd9e<5=6LC^T#O>$h
z!{%~>L~GK}%gb`}1@<2mD&7<LTHxD)W3@l+sktW}dEd3Y`2PwO9YQ4~Q_bi+MaFng
z()vDd`6d+(Ub}3iY7ffklc@YF+tuh0RW=q!aJHvW#Th64<7s_50Ua*4mf&@Fd@uz8
zTpmjlp^#MCU6J7DiUzHRmVGMR)w>vjFuEF{NFOUwHPbHVE4tQ=7vsw>*;Y`hWa}%D
z=RL7jJ}iBxQeG&|lg<feFIzst<F<owfAL_RA}FQfL5J>JgEH+T^B1RD&H?}FQs$vH
z&Z|eE1}f>^ZFP2NPI0t1yIkdo|0U@Q3sj<RVE@|ESli$$&E-L@T?`z29%&4h(7Prv
zQTzMxdd|%WLa9wMq+<HYn}yD9%Uy2jMaV3P#3Pl;?q4~E*AV8;?<PJ7GT^CX7D=nW
zWO70El$4rNS<Wbt@-(vRdyce%TncsP=-N5(np?c_0<RBGc*5EVk~OV|oB@i&z1THz
z=YsO#@W?t`nlWlAG0r-LPQo6sWMSu*ah6SG;QTBDRP&W%@FS4ITa<}m=ID)*)M8u;
zQd(VC$=AYqO9r^6clv^=#`$K>$Tp%G^7nHLbEkk)9MRz><NB3%5r_xkY>hgBi|cez
zLlUu9cJ-GiTVi58K9)WugfLCVg?hQ6_;|}*ax&#V(SZCt3y0Prrdyg{E~L|xgoB0v
zeN(7HDrejCJm|$*qMS|mxWUgwG=WKKzoh9C#Lg_*V$E?G!6@+pe@YtA0%>!ja%B@#
zj~5NX)^A=<{InT<W6dD#9J_6A4E)WuPe5`_!oJs2?nFgab)Ko0Yh1!|VF_eH-Mdcq
zUv$Xq*2_M&4Qe(4uT{3xclIvNu<m(c|I<tFQD1TQ5J|LB7o}fzwN$2R4MW3@LKzs5
z$?f)4d<x91=S1J468Fh88Ip866wCDSLE4>PCwlYHcj!jR^_0j(_E%Nvlx#liO(q-(
z7$uy61!$~iF~J^)!V3CP=xmK>HXTF#BaX>r?sd%8s$Y?l2ZlkW@N8Nz&rD76LhEd}
zLt)LAxz?S6)lcm0XEgv8tDIkoPw(ppBlXZzTYF5yz?~+P%oABIGhBLR=7F`P{OU<T
zS7Cu;_nxw3#K~i-VgYO;IFVx-(Qa{Ebg)GuE$&p7vS0RD0(%c8PNoUn_PEQaqqp~u
zsCtEMyih$wOrpm!!`4>~`A-&vhn_^R$#9FQO7GCy3=ypPFR<ZzKp*@%D9b07Rv{|N
zV-6p>Vu{U6nep;TCLt%{rH+D!@OR@;GkYEf`+0i#C+k-Dlk_^AW_N)qrQ?Ub2hGFS
zBlk(wllT+aK|{~j=?N@{f&0s|YQ-^Gar4dnHv&ve(Y!A<TZdo?#|UQ00DfnC6l<k*
zx<<vNlSR?3Q&YzJZ1{KuL9B>+il}fDzs>=7){wgkcApA7tP$sn1#YDhj83v{ENMaz
zgpxu<TDf){BZfc2qs`NLf3b@ylJm+J)>f`(^&_^0b`>q|A`lcJ?BM|p#`uE;q%NCy
zg;>*NDmjw9Ku8;e3F>Ify%n?SD0^@B^vg`fqHqIldd@p&1W^1=8S9O{bts6XUxCfM
zK5*#@t!QJ-CK4R4$x4QGN|Gmh?NF<v+xSv{_9<KCY|)X$MyDwbu$h&uZ}Wpv)$e!~
z+r$P;{YzayZrNhQI4efWqr{Y-B&4u4Ly+R)ausBO%~!&MP}r=-zIVYWFjYutXE5)0
zUgJd@?Q-i2Im)TLBS3T-bsX3S9=W<gx=jo6!4PYd%Dr=ABB)~RDoV=<gkQ<(-T%3x
zSjGxUP!OV_ghC}tg|%Jn${WzW3qk-Kel<Hz_Usqc{JXA$gjJ}02|jR8A-6bH8GI?J
zQxCzMMDdo2xWTX1XMEcmoHRTtid{uFOE6+rtPg&wqLL%Apf)fNAe~xJ|4kA_+-yxK
zG^;uKIvunB)A9Vw_WFA6q`{j!`k>zk5(0L}Tegu$Z>PI~0)AEyY!A0(4%~<{Kq}gH
z_;ndJ2KH!OgBEj4hMR5XX<pl(9Awy@4wXMT|BjhS84g-2XmFH7HArKunvsyptq_tW
zLL7{j4$&!pQae!p+qcuP0|4jIM8bhXBA(u+OV&yn_U1Ge^@l8y%K-;+?x{#0!hjBm
z87BlGj;Z#EzXt`I1DUmxLrmv0@+wNq=#a?8X>>$b128-lg|!3=L{&;3rc-FS&30;)
zS43e*`;ks*AF0Byv|3u;H8!eIeY6i%us>6KM;BhPiKAJfAEOPMgp|Wr%A5=rJ%L|>
zg)P-ushTU4pwWbC2XUq|g+y9m0=N7&o@7#fd3LnPbx&~&zJ8}W?wRevrBn<yq-xwB
znTfGw*c<m|_fNLNo@K5Y={zTRiJwH+hWboybu5%v)lWr%B$Q3b6m!D{LRywdOS+C1
z=Ava)0o#gnsX|G7MLg}6sJ$HJSzh!I32K7(X<V%L)az*m?WK`_KMaQBd}j>yA2{)$
z%S~<nO>1<xFpi2YI(Q4@hHL4{mbU%d-3UJ{IA?x4wJEtI_7WLmK+=#zSRTQ7j$Agx
za%MsE0(yJl@fYcQ4n5R8e)Po}VSt-12RQK^PXJWAMlHZyYoa^#83v4!w>z6|X#;Ke
zc`7HS_;S*M&3s!w(LcEM_#`@qcbaack!|)L1mON7k>3Ls(jaj;`3ADN0V;7BD>hfV
z5bMHA>;%+r%F1=GgSFhlM&bC85~W^VRx3?<*BKmW4z3dW@;YlXOUZkl?|CQueQ^Fx
zmCdGu(~mR8FTfhC<qZad2b+{{)6pHijr*RWpp&U+GuCkxR)Ikce)kqr43Zi*5c-a&
zlU$75ekpYQDF?P2DW?AU84e#cX80l&zWLw${>^XCc=V8h3qijsD$e}pOhMjUebq;R
z#KHjeFNcC&oN+~dnuw7*@_!8g@aGmO-}JkCukXjOihymg{bsm~q{q*rfCSi+i0Ku5
zV;{}K`8v`Ac*5%m9X>nB@7=y35v3^P5{eaYz2#IwjIHFxBg8k8SiB*RGvMnhPT^1q
zmAY7Uk9fDzu+S@y{J#7m5ChiwhV^Bwrp)b}RY4_Mm+Q%lzKu_iCv;4?7w;uIzf<9%
zPuaqX6S-D=a23ku{XJw1zCCp$1gc25oTRvH$i5R>dza!7#8}O;ej>-ey?y%&AF<N0
zB4wo1)pf>2?VoQ0&PA0&QX`x^G@P0H&mbOO^DlZ^-fj;^P?4dRT(`sX9Iw<FY&seY
z5W^|?noN#TSGr!Tx&09w^~H@7LX9~#oSdkeKWnWTX;6T^Z7cu}bF$CoA9*_^uqTyM
z_9Ruqp-HtO_qhwk39zHL(Dq#7A$(z;qP;I4)dmVWv<S3#ZZ!~ZW9O%dIV8CKcN9Q_
zblVX1^VZun)iY5ivSn(S9H$qL)JvjzgxKv?!=9mF`n0V8$eSTJbj5nP%H~5dEl>(B
zLDekIn~Wc1z*3z)l*=;q2~Ve9l1zU8d751=XF$m5WK&-*fQ72KAR%=OLada)crQ6R
z8k>wn265tWArW?~ZQ5RvO>0A00Nt<yah`bxH7WdFSuU<7cI>4z|2OZqk23fsj)L|E
z_+l=B0|}?>711$8odQS^%zJ)JVSp77fjX#vu|*GcAnNlOB-&vkcq+FH_>45-`m7nW
zaojn>;>Rr@sk{|eqxJWA)_NsQ$}b{zoaJ;5LFM5&Axzl1+O+AaRxK13&4k4rG>HX0
zuBVM>+`AgTCIs|noHdVBOjIdyRb~n_rlE<|w#N+%H6CwE@oqd??cJA;(c2=qfvA-G
z;3p{r9b>E#h3E4m9jL<S9!W$zFzAQ|)VDISm_e(fT;8?7`qG5rmf_qaS_&Jb<OIrU
zWpD2he~u#I3H$Xn@Wgxq$gtu%KjFf5O}2%3vu9RkDkU<{UhstYj|TNXjdDnJQaz8U
z?#~51wNHOoU-P+3mgdp^y^v`%nrsH&U$PtOP5v9NRa?VFFbcT&>#iRQyOSj`ObbG9
z;S#oIqT^(;xMDoz97k!*s+4L4Sg@b?yZB^RXm%gOWS^drc)A}2*Ed4PzMh-~`Yx&k
zEc>PgMo_KE$5aWnQJE4v#pvmBa?(VMO07D!a$bQJau~%UDn=2@THq!_Se=JzA#}P3
zv>V|5u7yYq>}~|)H|=|wS!TZU*(|mi^`=rolf6)&DmknlBEVF*(bm&Vcsap%2lxs{
zBwKP`h=55G9sR#+Tjdk#g`5KuaZFFnJs%rMFo$nhax5Pj@jhCjw>&b>kCYCAb~&fj
z;*3Upd;F|+no1Y$alTwYq2p}>mKW<uVchYoL>vpT2XW{VR<SOYQAmjSW@i(81it}h
zTttr{Dm-5pT1n@egi9!q^*qq-m!n&8Sl}PXib<YmAN@DoT=?GhHxv7Nc{*IMXF=uG
zmfsELF-{vGW%~Tx0ThH45|WKq>u9)Kj{@}<s&MD5-WBTuw$$(s>s#Gcu2M@}Idu^3
zm5E@z%GCZ4@r<+ZX;f*l$V^s}c<TYmX>MZvRHTJHIHvL#j=TM~OX^0ju*(=T*$L$5
z9V(ro$4$%}L{b_DIiJ;&aPvN~8uC<l4fqy7z3yX=$A;j`s<sun8n=#Zx)$>6wa4IK
z_lDSZO!(8OBSC!91ZCdPU;W+oI22ndE444KQw!r}w+?Fc<MW_8P_gg907$lhD79f9
zWg>J9$}3_IQLT%U!AqpNoo!=VO37c$q{k?mI4}e{`Q7FDyyef`nk#zvkGD$sykn!w
z(?Re8`U?07It|yp;$3`x*UR?@?P2e>J~3<i@1(~!I%=t@yAgfe3~Tv7!Cr~1E)(Q)
zOh?GCZ>h00NcXosCKJO0QLO~E#G)w*1RVZt@qFFy$=pT9K_mEjVjw!tI()hRjG<zN
zP4NoMX|+pGzyyk6J%iRVl%hl95CCGv0@}``DvKd^9utVMA)bz~>fGJopmP>I{R<Oo
zo%O_(#;kL>TQ8~-I3CvAWX!fXw8eE}Mu1(EB7R(ihz~y`g!C9DDYYH<Wt+UuG$!oZ
zW)b{4g;J@dy~A{H{Q&3Hk%IM|n`g+Q;JIu||8_4dP1B0Un<$d#zSD9+%Lo=04wj_k
zWcAd@@*=QnLbQz>>xFDyS{!?l%h`*(?~yg2((T5agPiVFKWYz!P4w;0g^FkTW!(iZ
zP_NU{j?c4lbvH!l&Q2R_kMi9S?!dWBF$?%2W+{W+OjABBkx|ZqRm8Jl>I~};QG|5T
zf`EBz1CFbQ;05I)?%F%=c8(Z4mNm#Q_nX`kaZZXHj{DUB{IevEYuC%S_oO<{$ctu#
zoNtM*)5wD6%cxLpW~mO!6^iXT<Dd*X0agvjLqWn790AKt(wj!oKu$Sfli|KZOr_4o
ze_Shua@B!pe8gMa{|Xlq5wOXbZN1)h%2l0`*<`IZL>M@~l-vX^X6V{|-JM)FPU!p%
z=rlrj5!V9&0t<38XK)eh@;1;(NtijaiG0#kmYq_6)EA~u#>*VE{$!~MNnp-3jaV+^
zixgC%xywMs&7C*d>acaXSnW_NeF*DO0vYDk;QYcash&`gIh6eQARZK7;8+9t`=*Gc
zmz85-=bTO=vJ~alECq}-gG*<$H&6r@9g(?(dZAA&@MO&%I`x#F@9Es}F&hq=-{R48
zTS19JTpsR`AL{G-wFAYQ=>ZE0^7DLb+;-J<ir7@M{=Z+KK7fJIIgLM|d5-SV7vs7Z
zl)IwW8+Bvsuk43Z@d^?<6?>Ko5Ec1upd5#Yhts0zbBYCP`ZhGtsI_C8!j|nwN^^#~
zYeq0xRdhCFyup%Ju9B5`pT=3!Fbzjrdi`$?82Lh{Efq#v>*(}nqK}*(hx3u$+w2Q&
zD-(Hg-JrU-?pl`gUqHX)qsK^n3)--mgt-K4#vf$Evc>d`s7xWKaiwNFG3$kG3^`Fl
z9|oM^&F5$}RT)fY^LG%T1Li5xb6FG(gQCCNS`3EvJV2aMXm#tZ7SdeCQ!25(ro5yi
zVMMcAJc!tyU#gH>`%7f9I<0%(=%?&7TCHE(Jt~sByKnbSA0t!tCBRbd@96p35>tkm
z7<~bT5eNQ=7{o!O4UWZvmn*M?+1n!4ZEA^k5`pE3a>ui<xpzaMLxi{GqyaSqf)h3>
z`A^JSHgtLsJzvcQ>Nt_i6#f@)Su-oNt(uZ_c_@yjc6A__!A~vS)HauW&lY$MOYbnt
zdy&>SM@l})<Bw@*f@z{kq~+>;h2UA%DEJJ8?B7q9>j!0s3Z7c*u{r-n7$kBv0*Gn_
zKvJoPnY|-jXhpBZ9f2<m2Gi-D$~_r1pO!t(7PVTkM{Q7mdG2EaF3K}2x#KJ8D^G8S
zZw}JO%%G8Zs#UAfN-19TZ9M*2d3tbo7}`uEmc~CLtLXpcC5-z-i(d8F%h$OdncvQd
z!_TSC;WN11C>WMCz8<j*ly=J|_}=@O_HI%0*H1k-`z-#O`~y_MSMhn}{cxD~vt{|3
z<M|Vnxh~i4y{U8Vl9+FTXMxG%t0ybPw=I#W)2@VWGc@K^zmTJD?I1?Srp!}Iclb;C
zYw#OV^%Q9)7grs#{(yis`r2TWcyBT+XPoc(JYGnhgsAHy<znbnCjEd-6g{zifu&U<
zAwVX5K|vM(>|B5f%r`#^RpLYgr#dow>VmnSzX~ny+R%QSo&_J5HQA^sD@L0Ub=e_}
zIsXBO8DiI3TCAfcWqubZS)PRf;+*)v<54Zq`!|e1dDzxy4!d2lN5(Zd^j7N4-LxVN
zcRM+jJ6N()zQq3PJlarN#i&CuI#(?Md4TtQq->v@&3diA%k6nfDD>%U7THEe2+w9s
z9Ir+%43+{pZK=!M8>LZnUZJ8uY&4IlWb}C0KBX~7cb(7lx{<cx-6cCGCxx$hpUbH!
zzf>n<G}f5y)nQ#0rT&uW?Da6km>N@{NtZp=6F7A6g{ilvRXypBfj^uITv@pjT<Hpo
z2?%{JXcJ9^(n$o^YP{=1*d~%Vb%>qEz3>@M-><t+Y&DI{&!@1fxT~uxx~thY*tgC%
zPB(=Xf3|=TUO-3uOiH7?97o0(TOb+S09IOgMIwPf5?)y75c`>_AuE&5>OH%6zfSXN
zmCdg=Z1-T_QisTK&3UjS!#SPV`T+Eu*-LR}26NmjA^!{4OchSc|7`gbzM-xan+D|w
zl8XRnX%k|mk8>ehEW9|+dp8OZ0ZI7g14qxNf-b@6z~PW2ljA!5XVvgkd;^T2jZ{g4
zRvF^=4)W^r<eM$Em2;gDu5Uv{h2Vl}y2H>(!Jf3ah*HcQYT{38Y}gq;%pS9A;7uR1
zb5v$trf%vJkA>JHPDqLe5|d%&fo9?sSuBj_r$0S-M4VU)4h9WVpI8D#vzKr_$FpLy
z6Zjcc_nk%f;fMItwi8f`oVU~EDy+jvWtg%}>qd1yBMtj`gj><q$(=CUNp5K=6tJ@V
zJK5*8op-nGZ!onZ;;)Sf)zXyU67Xlh3`c5~O|2nUU5<dM(#E~z9rXjzPbItPzn*oN
z4S?E8?A6KI?`#m#h@moYp#rX0PHs&}PGd*jW9}t1*PRNp5<94VH+Q$3FXo`tloY|X
zt=4jL0--d|PM<5DoI&%?qbJByrvc-G3`C=8EOza3c~h$%aRM!^3PUM12ms}y6zp3)
zJM^sVcjq}1b@dio$`jbmJDBqk6f;;#G5($YNt!NCberV-c*{v6CDsevX`C~|(CAl0
zwGUm)PCa0xXau>-tBcrDZ}PJ-=iyk*1ewp_ia7RAzN4H6a@a6Um02uWLTc39*?734
z=-g>bBY11@yqLg3eE+O0dTz*v;d660s6848^wb@5OW?E;dj60~o5_RV6l2;Oyhuqj
z8PL@Pyef!bnh#%!k2EwgjyPrtyWl=krlg8Xs504R-QWm7?%nP~!dFoivXy%}i&(-f
z^JuN4o{jk6nv%6jO>{9HpD4;Ws-n~8v|ElVe%!WXXl_nj-<G^R^dChIjc)G#M`Cu?
zzz9`#x(LB2fhWVXLhFvQJ|?UV-$#*gu5Ot}fMw4L5(BLBMR^12N)!7#b@a0yi@;iC
z3mWS)5{;<`^79a&RNF?RgggC2lfzhU#AkWfuTJJklnki)T@0RW=yZ(a0YIJ{;&E*1
z*7(4;xlTe}<1KOsS&cN4MT{anZiAO2hbzL)trSFRyK8H~`u(Kd{yNqtfEf_0NMfG5
z_9ri09VB~m7v3Yr`#M+sLa17g+G{qT(+$ct!WA;>#EZ5r_PulEXs7(L{ZEGEK#Mo&
zNxZ6)R`d9TWe~k-gH_5c**YPR0Ntn{I=?@^c#?~N=NEXi3@+ZX{Bh|=w4*=k-%%)N
zNM#%^5qKn2o75Prx2n}n+4WM7dw51c&4CDmR~YL>D~+P(mp2s7>)M8ts>#H-XG_d$
z5Aw(k<#@F~{l?MRy2iAZ8!+ZE;qBD8219N@=&d@M<s8%%!tRXt66LKmZjk!fo$edC
z+vB4Z0lb-Z)UxKA^D_#DA5u{k=hJK`@_QXu!+A*Edh<BiyPx;d#1b0zG@4EP7A8l&
zU)UG169m(Hy3FM{#70;3GUIz2o(!04Cxkz<)EZcLZR3SkM{+iw;IEyahFTCmAb=;T
z6$Q^j8azz|*`>*IAM(xaH0Len+XNb6CQkt!>i#rr-gKg**z0@qy_qW{9MB2VIw4d|
z!L<9H`x~sjxo|O*mV5CcG>CDhB5m0+SN=w3R1w>7IT`Z(fssXZ!<-?(u1jQq;DfD<
z#HU5o5FFek7T9fJ$-IA3xWKM5Ssy!oNfXZ8eHPxPQ^f5)Q;MJNa(foNZ*}4M&DrSq
z`tif`X#!8JQ{H`F9&JXQR!2qz6%lC51*VBFn{KmBu*8{X=W=2SHgm49oo+oR|C5sK
zU45AvTWM9Y!am(cH0sIsgn8NvLIi5Vreq2DuWg}&<QessS(aJ<iZ)-kq3dq<KV-tW
zbjHmGFM+V1frWX5?z|adHoI*%{FyMm^5~_ig)n}gBDp4dxUnG-fiYQsYfh#zBxN<I
z-`dE7a}p%k1WzF~5a);%&=$!>DrPcDzo--k5Ds9NfmsBjm;NGu@XJ;TXdIBt&-Rb;
z#_bh~=?7rA2Mtj^ELwFW!n;b}=+YMNnYCmOi&uRd)ZShGemKMNV%OprHT4N}JN!+b
zDj~;EtEiRjG8>v&s1LLE*rX^)1ig#e?9lMX<NIi})0Kv=9UN?2kLI$;=1{D(LBi>w
za-CaqJW6hfB-yp!wFM?!tH#3_4bH+Fj%Ah2+~U^4vFS1CRB&j$p>oyid}S`fqVi)&
z$B!#%nHC&m5a<ZeO_*35E@#0sI0n$NtOh~V4YsDNVOjWGz1BdDI;E;wC5vsLT$b<Q
z_Yod-pm00Cw`Zo5OrK7{G14h^-0dyhmDfF(aFf<-dhfaZ%DmkoYZRLPmsZPaQT2S8
zU1e-({Qy+b)TGSLpwKL>N<(oh3Z}xVs@gutpWhn(2)ml%5CIxd|EdMpyTN>Kemy1D
z7kieOMC$70vlYG_>1-iAd8ym1z7x0P>B?Rlg-h4Z*;%aLZOE8(>7ve3;9MsRxqnJ@
z$jwH(WclM2w@uG{{ol6}nG5Y0p1ElxZs|Y~zmNS`i+~W@w-v|gzv?zs8C*)I3L?MJ
zKI8;ek1{?H3^W(bwLTNZKC)%7Y~D(%b$p#=)fCi|1zMw$E*G(X^P_EQXNven3OZ*~
z!=>Xcm3TEu^-(55Hh66FA@^lxRN2DOVL2%`bF=k@8Yg|`ZUzVy7iIQuf{4_21_sew
z)gl_p$DC7qZ<of~SDjlvXK#Ca1*TcwM{yNJwwD`V{n!oGu8qz%Lm!$VLNIk9SRlox
z3JSJ2<TmZ>OLi-p9m{|5qNS<fr_;j1&%XknS&av5sxmxICb85UwoNrIZ#P5c%cIgD
zF+$~6#}*cXDM|&*I-5*s-JF}#Gwux%R}CDt%HjxYQWgE^umc;ec>Dz8Ec1*rJ^xv;
zEIQ|k$n>T<g#HV?B@P$_N-Ld(%>6rJHM`*|^wZq8bQ^At%Z%uzbs3AN7Njm+<vtr8
z3;I4Ulk-z0E{nUG-49B^;zPK}3pi~^zbjMU?mrgYN*>l29dxf&WEZE&rm06<LNF7~
zZ1s3t-d}kL_>I&liz8FqH>EI~6GTXBXdLN9l%Ki~J5p%aoe%lT<R6$rAD&YDYC+v!
z%~8J+y&kFU!cU97`f`MaS+C7EBEFW@U*Xu^!AEU|nrwNRWGpJ8SZ#ivF_MtaSO(oT
ztnE<L$VQeJk&uzJoks6GXm(b>D|-yc$1MX5)gmL@g>ZBx$Fd7P#;B8H|F$}e2d$2V
z>!1ptwn)fNVX<w@94be4Y-7{oZTXW-Zv1Th&-><ZPg=QOHCC14<oAdh%S8g(jbcbk
z(G<c6rDmnP$zc);h0P~di{HqtO+}r~I&4WQUbe)nZyUJ#VxPXtVqlx<{kKq+;Gw1r
z<7Wy}gK8f8@a-V|VEx^=6l!)tMT4@y`@i$`+XHY9LK~jFY8C$4L_E_7OkEbPxSHzK
zG!1QOJ22^cY=nl!7hMolbz)+$IKocijyp>NHrr>qRJEW?{+c~O$b(TJtvroreHvYB
zg^C7>M|iR^L5v{7EIqoEM0J5+FEezTs=3%EnHACOn!fS4?I(%#;4N!7QY|@+-zGgX
z|2lbB!wz<mDD=t4R-&V<0#ED4?n#(_^H*ZKA7Zq+zfnQXM6Lyv7<!cgFA`$1ju<?l
zRBK?^>JP7-l_R*=YN!C0Zo!D$?I!uL!q6`_D16%0ud16APgeY%&o|Y@@SFN2CiFt}
zcv!k?To00p_AI}DWwJHl0~)laMuEk*RW<FEmy7?MmhtFu^(a<d?K^(&Nn^9s^{NK;
z^Bb4X6O6~3^HuPz(=qD7B)YF>I{^kRMiBD1Xj31Z526E4>i1UY*(mnb*jhXKqM&;7
z{m8D8mK+X8oxb2oX}C3Q#!JDBdQcBUdR=NZ4oSXsD+pIqF~oDI`v~TcASC>3)~|K^
z!e~>NGtjCNG|uoXLI=GK>!Ji6)YXt7v*k+O=)mNN=g*}Y1pZ!WQ<#ClmFhBhPRQav
z1BA2J5)>Jv9MZ~GZ{^k|{@2v~QfrP+0~Yej7pF>Zk2$|5XG)uB&#T<F=9F_9>T~sv
zNlIv`naW)Ehy3;PUxH?2-e4wX{*;-TNOcDZ@XqqG;uEfCy*=!YzXpLO>0^Vb{9dS(
z4Ruti#7MK9e<NMORwd>pba`y(dgPUm5Kr*MZtaub?$))*iL>%ts%PA`1(`x!hIYxt
z^!^}jc%@3v$q08MEpfDghsDc;^4Isr2wF1lJ9QTx<>l0KIS5=;oRtU*Cp~rVVx)x&
zk-H+*77}9KwK=BIYOmc^c|vQ4H2({}V5g8o*5*_m?p@!ZKiM_P6JpgbY|dph7#bq<
z!W9oyCFmddfNMa%omcOXUYjy)#q34aNxQ)xH2UZ|uUeIva9P-iO*phO+&~Uh8}HRh
zt$=WKXd2-!XW_4_huTwJBiIQ5%wK2qa^=A~>j$&1#){eC_)0hUONNa(gL6{zRxPTJ
zaVfAz|BBN+zP8vL#10xwbA{n;vo{`C3DCGqu6$kY1^OPmWmwuF>q9^UplR%=sA$u8
zZzivJ4R;K@B7?(IV(=OFfYLzvkW0IhcTK;z)mzY`C4Z8t2vwqs0<GW?oKWX>=2f+F
ztMUS)8MfDgFy|gS#x&xv8nHT)QRgFrF8Xyve~2R^vPVS;ILVmPc~!&s(Di-dxFt8{
z7Gk9OnTo0=$OjslQ@p%789=0&6CuwkHbkkJ9YY%x3M29lXYb=n$_XcDSqF7#cU|HY
zaiZ4rlaoOBoWcV-;H7n8Mu91eJeFE7@=}HCr&QI6GFnX(Y+>`*LY3E=hp_T5hQ&)5
zR4*5Z%4r}PhbKB=4#ZdwPq~>zGOWo6wNPE46og<cM=I>ueuqx>+<CfM!9rH*W_}e0
zv>R&|9Ih%5hE*<GYjV}u8TUT?CSdb+z25312P`@tPK4udpM1)>m;*Fo!S`}I+l}Z&
z@-TwY<@B^eiSoN6);m3JodE-;6*uao_uJQfWZb3-#+h0JBy1@B4dxU20gxjJE@PU%
zaD$}qE>zS;yso}pC6NdIF<JeIQVStGTk{xO&mC*Lhhs$54ndZD<OYEqZnhTSFgtQn
zU*+}PT~Pq3(die8h_oQ}sjz_X8V=DDKilqxqAf;e+NeOcn)40rAy_qsQd!0t@E{5o
zr~g%o2*1Qo&L#_K?3CII!>8gBs2E#{XnFX+G(&+|DcIRt6=AzYQylE4#r%tfGI<M{
zdm$1@qU`GXb+r)vmp^7zdQ#$&<w6Wjd{C>I)Vxj1ne1XYD8kqnHj8-y__aT$bx}2}
zLaY+YT4}M`^?Vs~`Mjvh(jS#}TBxZpE1Xngu`bt9A?riN!h(_EStC+VtYf^{;MeQA
zU$kVA1LK2(c;mziLDUn6Ah0K-%SZ<8)_3YY;~;?Yc$cJ>@;%SPX!Er{bao_jqJ|uD
z<#VEoYLIou%y*{IoMSuuo<qIt$J8DN$;jY@)b52xu|(_<IB_C)nF^pIv<jI_-0vX%
zCWJ?et2y@cg_ToZ!97-Wd_A}nOneILAKh`E9x7L6oPeP~DCWNxzXqUcI_%Pbkro*5
z)Lo)FxCOV`F6cXy{un&{z1$Ojuhv!R?N{BcSs7HQ*~(bbo^{?YOtJV9PA^<a*O;Z;
zYBgAmh{jH)e}6IGQaAXZ_{Fl(;&dF^h<~|R-|II#B*evQj7cXs3oogllB&Vc|9=5^
z4Ttg-?!96M+!-#gh3@YF{Q!?SI31S3#~@V7aruJAy^l{-&m31(sGQuABdW3mbN|;l
zF7)+(m*c{a3V=@t=1RL2hQDUFLj0=T3jH+RyA@Jk$agEWr)qKEzI~694|OQ_IC<|#
zAj)`u)20dN9}@pGgs&0&3-6^gghQ?z5D}@~9W2~C8-`VB7g>wTcPb3^xGIHe-8&VU
zJg&O8;0+HoRqRx#t%z$R+C$uo*1nU19+2I^4V%wev}w_dJ@~LRHm`A`#;Ir;TC-+V
z#N3GmAIu)mX-eHD)c`|VO8;RY4opx5`pCi2F>Wj1?-_v&ue5BCY9bHXH2&Z&Aq~bV
zUp8DN)8;sh2gO{tl|2c$6yW6L3j&%C&zrY>?#f+HZmp@+C}>)06Cv({zV9?$GI9I|
z+t$_j`X1?4)lzkNv$Syl2+{yJ@722yhO6soxhEug5DTJe7ec(3>?uN>NgG^%ce}da
zX=^}uIj2n!NoUaqvR0{J(Xui|c8v4f;Ue5SK1ahCd`895obmLyWpN+J3EBHQ#Py4#
zkxq!yvr}eVhd8=u(HZw6Z54)js>3*@KxF^0IOU5fmKwYZSt=$|O1itM6D6l9#RI04
zIKDw4et*pDPnIm&JbTQ#88g?BUsE%)axydDFS7TmgR{n^H<+F?al-KF4bsOA%g=ZH
zXz!Vn)YFc3b?us%l*IH~v$E%S6X!)V43L9kVigHdug?tkv~P?DSntDmfT`1~*Q@s7
z#_B%#c#BCzfvSZS?b71ow8Uh0mXJkg?>6c=b>7a|?|q7I{%Be{VL&@;qZE5qeUw&j
z;go{STi<{4+walJPP<c@w#aH%FTDvv?XB@*yi+<PXki-wUJEAm2D^OGfr9SWQgpw^
zjqcaJ8r{?T+SB*#<@fF6_vzI|j66r!mfmw%IzsQ+<$jksr4j6YR~laHe%EexU*#O7
zivB(Po-nTsR>GXD#5UUf#%6da-o)?T>;AGjEgtT^&%IMJ)_?(6Ht#ur_=IQkqF|1!
zuM+LfL1~<?+w@leN%61bD+1f-RzPFqQS1=S4jb9EAOVdn#99wIb}|)WREPE>)G^;E
zH+1pbz>F?uE8k<C{w5ziTCt7UTemm;>)Pd_!rOS!PCW7DUS@a^Y3O>=?BNU2iT0T9
zv8PSL2@ub-wM~!}rTvdO?g2)UAPNKUt4Vt1);`;|ZQHhO+cx4;c<gg{_D!rqM;BeR
z;Te6k?^XVunx2ib`SKUK=54d6AZfFgOpoU$q}QmYfyQKHS-KtcQF@jlJIB(Ep^wuG
z)sE6gOSi0LA}|Z7SSOZEO3e4%N_wi`Ps1Nm<JCgS<jh>pEfO{NU+0qD@U*H&L^0Z+
z-uS<LUv_$nb<uxsAag@sR2M3+p6X(>A-zWJOQEwZ-4*&M?N6a|Eu99vknU(*Hc1zF
zZe<>k|5~dH+?OWObN?LDgYB;zlYW^fvL!*Up*DfWOLI}t{yVKV#=1fu_1mS$E@Si~
zt@p&zpcncxgPucYc>Lp+kvipg6|^*~pjcLc)66ZBOxd%FS79r&W;<eC1-GcHm!j9G
z4}r!jPBkpu4*Dp4Op#s7(v6{ylc(B+vTIs80=-Z<!RkeJUC(XCb0K^5aL+rKapq~C
zT!Hf?J*3wtS8KU*Q(&2PFh}WDio_yIN1zvy7xWjpyyw>7{>uI_+=DLo1t1--vu8-U
z><1Dht^3I6N-DY5_5;>NVQsPpYn?_~x{WQPjEU0GA>q8HiPrfBdwiG**(R2a!!BG;
zR5r=B@Z64i7SM~S=;<-~Oszw{ndi0>KkQ%Ul07xF?`Nt{7p^|M3j~jNfSI3*n4jP|
zLpAARNUu@dd49BXt6N5~;rZzi&a0VdojB~m#TYYe9nWnl_2#ZNhn=5VA7b5m*H5b=
zXpL%fj3}}o!LF&Ht^FtkwdR4gbDdvexz^P3L&>N$SG8W@yntTl57oMCl18nOFS&UQ
zjFdGnMo}8yx~(jU@?|y8>L_yz?&BEXHb$v>jT%E_{)1JqjAFybU~D+ATB3En!5$y4
zOj=z_#L?nH+Cex@$gAnOjbz09H7NIRf*H?Ej0f*7qM{`0HEO7gCu%ARjAFy%85Yhf
zO0-TKcHu_!6&BS*zE0%Ur<m5uO6#f_ddP+or$}N?B;q5+avtC1{SW+2>rMc8+Fi$o
zK?Fez1HeVezWy7f1O$8@N1b!NI^Wl&a{w@&fRz8%1JI>S*$EwQ?rFOrNOZXyFxJJE
z#xlXcjuDOI5lzw}D9w!4an^-vMP&d`WZ3Q6<tH#VE><4=0_6wk2j|NLIRF3v0RR91
z0wWTjWwMT64?Oh%83+IX0002Q@DVNm0002h0aEPxB>mM1TnKXj000R90ssI20001Z
z+GAj3U|`Sr$HTzDnf*)UpCe}sPy`jc1ps#w1)~6X+HH~p5FAYu2771T+;20sZQHhO
z+qP}nww*$3+esm|FYgd%tGd1&tL<QF6aKunAxs>Gneo(-t5g?lcbBQ<qEObWNJ+Do
z?&c`*?EoT48*+O)iEO5m&t#^bO^DI{4V3vx38k2lTIr#*QSvDDl`1A0J-u5bl|RTP
z9T_1B>29x+`Mda3a;5mw{mf{Wfx0duqouD>N6Rf~=$0|s<Ybn#Ac^})>q|5GJ5Sq|
zDt)zolwekux7v1`f^ts#rK5{W!k^#$NOJc(3FI>0$q|a16!f;``CId6+lVxFGS-YH
zg_NeE^q{jOr<n9s3Q@|OB#8{5q^{e+{6rVy`PWDi&7T<Td#Zg~(Lsh%EI4iu#mr&N
z7!)!K_+DDl&OYH^_mCLkBbvRz&zdF8GSVBvQq4%N1Z_-I`brmS%NnY>DO8c{{N%l+
zzdWa+?L!q`Zpzsa46#=!Cr#)UET3bN{gG}`kZR^BnU!>A63t~3BkdjX=v@spztcqP
zyW4rR)3H_DVJi3%QQTLKdV1$Mzw6_FD!D1*decDmGFooY-?xMOGLL#Pf?U#{Vls}N
zCL+VWTTSinGE&Lj)OT1(dwZIWE&)?~$?4&3r<S*wRNg^S+P`URBaz*HPfD|o{%$S<
zO-mY^29(x&PNMrsqaIY1UQCtw{4bkH@?ESD;d69X3I)%jeU)NL5hZQ7K5r<$-4^s%
zy>#XM&w@UE3-v4L)<@JW|L%Zan){S(AH4b!b?Q@sPN_HFBzef8Pcaews{{9`xlUR1
z!JjWtcRnTH4nMyGvuWCR0001Z+C0GnkmNuB0Km0vd-HKdZ`-zQ+qP}nwr$(CZI`ZF
zCX?06I8%05UO;|8QCsmt=~CuXwpA`r9#g(h$yKx}uWFL&fZC-Vraq;?npv9T+G5&`
z+P&J7+7~*94(g`qi|B{yKN^Y}#v3jg4aSzn<;FwCZ>GGahNfMnZ{~{TxfYqFhUK{B
zlNDPVSvOk$*d$vs+i2S&+X>ryyU8xt*Ep<>Mveo{tj_+<->%%QuC9Y_gFEdW@4n$-
zJYzg>y@Gd^_nA-f)%C6Reeq}YxASlGp9q)&<pW~_AA(hb+e5)nj?mSxKD;WzN3un#
zM0L?bv_W)9^hd09Y;^2y+!*KM4dUbDx8lzdibN=pB{46lNft`(OF2?~)A`cdDLXZY
zdPM!rG?-4%)#(ZJ75X0if-y4^Q<ka8G-YNmdzdrK3s%GWS%F>69^z=O5AWv}^WTJo
z&{DW7#>M{PUCAU(kUjw&2muik0F^*X(D(nL;2X3;3g(7oVN=)x4uP}bCU_D)gg=lS
z(I_9PfSRLzXewHRj-cD<E!N-&&WuapI=B-af#>7x_%ObO-w+iE5=e@YI;0C3O6HJt
z<OsP+-e%VPo2i7Uo~f&8xM>~$$xn_B000000RR91?f{Pf7648F1pom6000004gdfG
z00J-o1^@wg+G1c};9y8&U}j)s;RLedfEdDNWRL>#AZ#WEK86Y?n;A)*1&PhdpvKS!
zWwQar*Fe}nogoaz09DRIc0>Ub1kk&bzkt}7#J0v!+wR_dY7(7#W;xW+HPcs9Q8iRp
zv1B<YoazJ>O(lhMZ66jC_BDgT!_U@0G9`m(-#GTuLMk2a(P6Z3EmbumEtyqG)bytB
zMJaZmrlTzkELgT`)9w$S&41VC|6L1%pliosFcDbrrW^f8x0I}-uaa(4Ewz%iaE&gy
za_-Qv8;`N`^4-!GC=WIC0001Z+GAj50E7Qo3@Hp)001f<0nq?>+C9!gdPG4KhT*EV
zZCkNzJDJADB*rApJlIIkTt=4COXxm-Yw|u{oqG$vs=8lR$C6wlsN+d3Cv)1~=CD)8
zWOXdZyBk9eJ!MX?INTaEqlD9ajeZkKRGW#LV_u5}CD~gUYH*^Y!|j#5vbEXXxE&>b
z+h6Prq7-+#^PPT_^6PHBJX76n&vm*{>iUq&q(W)Ny6U_JDwfn~r1V(d#KVbgJo#+m
zSIJ+nY~t6+XE5ZV<ra7XO)i=(fiv&{en0_uUHm3F1h&8v(E4cGnGZ`;9(aB9^A`93
W|DXVd@Ly8^J3v!{7$S;TKv}6O&a4ao

diff --git a/static/fonts/roboto-v18-latin-500.woff2 b/static/fonts/roboto-v18-latin-500.woff2
deleted file mode 100644
index 8dceabcf6bdfdb0f09be31878c1ebfdd0be943ff..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15552
zcmV;xJU_#CPew8T0RR9106f3|5&!@I0E^@R06ba%0RR9100000000000000000000
z0000QWE+`!9D_;*U;u_p2wVw+JP`~Ef!92Nzy=G0UH}q-cmXy7Bm;*w1Rw>200$rp
zf>Rq9eI?V)5zp-arhMuR9EErsfLm%9Ma`m|l4Sq?EkUyZgIzsyYGx!@e{ae)v5nH&
z4Xsw}<f5P6-J@wgeb!v<7T&fy<?s7eow9|X8jLmVuhnf&JuF+rp+c+5WGC9|uRWTJ
zO~)?kj&YCT?KtZ4RVSa>PW|^s0r}8dpolmI6o?W^a0~=^P{xkX*eAI^&(H18eeW%j
zF-F)!qP7v~tobE+un{Awj091{8HIlAexm;~8><nM46E=5^8Bx<wsMqMYqjQf@hYV^
zbi*rRcNDz;W|JIZr32V;{#Vt+Cq<S20nxgoPo=hDtN=(!w&^b0y3$$xLdqLy4@=rG
zwmRRGWD7;POn3M81OQR}5`O(Q+<ih8hQeZ03`T@3JPI!n9uLA%b;ASvv3wV+ut=Jg
z4wFV}peik@;z-cha5Ty!xc&pQ%?^9vhPpD=F4DrnB9v4oip><Guo(yzq7qhN<TfjY
zIdyi<_`Qo#SGtf@Bsd!Y%5a9kmGc*_o2mwaq)0UjlH5YUjZW$KR;SPJdxkON7Tm6@
zHGOdZaW<3jRFn$=RijY2PK~MZRlo}eA-H$ye?QWU)NM)bvEw*#+I^)I03RSei(0!&
z`{5O^1$1!-q<zFbJWp$>-FN@yAp8?{nU>`WSA>ugdl1;0+X8Qiw}9xXA}b>+ET9B-
zWORkEtZ=edOG`SVa52M^o&PgnksvddnE{&Z-M!tJQP^GSf>xI#eUS9|!iT)44?5kw
zQ;>~fVj)TToS|ccZ)OxSb#Vi308L>^=(qtxW(Lgum#NzRcL*fGIYYY&sdH-TJ-~sG
zJ-u2t9ryug&vzhAA4H9YK?!sSnTr+2xLpSXM^<o5o$S(8DBZd%-MJ}kvD%nrDWkYZ
zp?zuLZ}v>ElZsOdauCvOnhQ&BpXsL^!)e`??M>T>rb-<AI5eR>6%fXM`16Auw#Av_
zwF>i7sHi}dm8hx;ty+avuSNR~V!DrjFaR!qzyUyLJ^-*C&LSkbKMf3nvER=x&V{i*
z7pLXG*guj=^I<Fk0DKg>WctVAd|(1?HG<G$*zrtPW47PxOzxKV4?osN-d+7^==jJ{
z6oxSgI>yILN>++WuF~ORRh2TRI$YmtbOOcss+RPO(R8e_#of|t#<mO{??UUR9%&qU
zE0^#t+7H9il$iS85<%%4u7QP>wT-R4gR_gPn}>Yr^cge#`~#JtDs_Y=Iwme*bIsO2
zbr&vPx_ss8wTA0AZr*?JP>LUUtVxSjZQAwd)u-QpK_7gCcw_`YPGl-e(-~=E1TlyV
z2ZHAl;r-n#0waq$4<cT9!YA+e3j7E_P59FzvMDNWMd!6Rk*v*oTO_sNcGwG1xX2|g
zbA_w+c^zKxl2^Rujcx9|7FubeonHFrXMjOF)H`o^$9wysAs-JSF&WIibp}R*uj2WD
z#v@P3vu<j(OwVIY2#Ex9;da2nk8Q+6gb@+x7n4PK39u+ZDl%JDPFj_H2s|RQ=r<gE
zA&CLdgUdU|cYOW^I$7SE;(5YT8hJLg2%P|@Omn=DPhRr{egqI+qz%{3$z}pI#8&>a
z%?)Xxl{VU+j?|<UhflWn3j7EloV7I5LMv^wKcC=FM8io8ee#4sofm6tqF07}l70pl
zoSH@u4k25pWqUC|w%FoB02+BVwE>^x^Tm&VM4b@f^8Cmg5rbpx9ySv#w9-bq?X6HB
z{R}YZkny|Y%yNe&AH?J-94~B|mCurb1mmCgspKuBqHvIp9bT}zi67<}4*k<fL>|!0
zMP`rBOOr*JZG8S-Rk?0e8f?pRCSAi;s@d>Y{PAFUAqYUbzxgnpiAAl@1nOmd7FFL`
z>Rqv=zL$C1+un}w%rzz_)!2{x#ME<ruDa}qI}H;&|3AEye)*?E^bxMc<(*kPiW2J8
z?d|G5=g|+<CIAsp`cIY7e=tq=#R`}m?N^mvR7t<nst_e7;d<Hhj`E$^^x&#C>kd#G
zck#MX4~(iwAl_eZZ^mP5F1x`#w3j|%#_H({-X#8peiTFMn~nojU7x28&3md&QxgCI
zLE5^d?XaU(dbx+-`4a1UE^jv#AT&Op%#U~>Y-*@{(3HQ&tUbRq{NQOl`j^yOwZ&m_
zY4S%|<`;ySO>j+=jTEQ|m$vK+y}H@jN=7fIFq<ycasbbO1d+jGP~3)c&b@^`3aGq{
z(ln^iaEm+CkkFHMs$w$jLz!*Z4(MYq>ts1eR!oJ?d<0}V()|X{>w+)y62D(xf89p&
z)1Ef;!VP(BVwUE)(;B<_EEtf2R}={p6MhSBVM9n<SRONkUOr>|gpLpNPY4a07@?D+
z{bsT8=32ki=349R&zI@i?Ry5pzXCcKgSomDV=<O-j0;FHOC4jS`qqkUlqOTQy>cAX
z$XSt#iaeAzMcHy4J5^1lsbIQtXQ-Z+(!G`8Q!xyymI;xl2sIQBt1v>WHGmaBg>lM?
zSH9LUzB-JJx4@12Dls;$g^t^<<8*#>;VO3R-Siu7((XS-PoA-xgrEET4INFh-%yKo
zOg$$PdJV$a%d$jY^kWfys1c!xSU5Ujj2#psQ)AAGaaD|ah0j<mwy?xd3`9>jA}Df|
z_(1~5A(jLeBF2S7kx1o=s?Zpl7gLyy_Z>@&Swo6hdor@oCPo~JzKBF$M6pOcoDqcX
zF!lr!mT+KfYKM3eJiz!N@6jUWcRd4JqbF;d>XPuD!dT4*(OzQk?^1=0O}(mFUDJY;
zff_t3LRHG3rZ822^S6>2O`vJh<6uvw|Bzph2bTXS&qW}~&B{muHzm_f_nj-t<99KH
zkQ@TQVfLp1g21G_21}tL;Y;y3iB)L3%LXu=qHtK-(+<G-3$hP(yQY2G@p4c@><{43
z*J8_&(Iz@=waozC;t=7Mbl_Wvz1bB&4>>(#`M#KG*p4{tkfV+{?u3(0wGU^E{oQ9Q
zP@)v+tUBkM_ZJKzG64V{uRWj90PSS80BS0B<1f;`F&$cTmjf&HvwgGAcS;{nfXQ!9
zz-W+uZ!bU$T>=22W66Vx;X`vbKCE)#u|F71AR>VPJctoY0Prla*Z*I8%^gn-_>2Oz
zA9dZSmTG%fWcp^(Oqn@zWNyTz;*&Xh`iB)__C4*i26r_Y^hFrecmvZl!)XuSe!|!E
zG0G5j7zEUJ&(8Nb1<l^ew*R(WERiBG(71DSu~YQqP+dPsYyr3s@v{uqf8RT{g3i6~
zdH?+~m7aL2(KAh!Tj9AEUV7!VH>#}sUih=Ctuo}Tci#Iz>mx1zKwrI2YXyP_5B#tg
zz!K3%d)NHUK2DNiPEpTku2Db(x4B^MP{CcEa?LcN;~B5G$7|lOjAq(-LI<5Jr;C1`
zn*pjA<TK6Y3oH4`Fg^U@AFBD6-wc^iw1)CN)}i(stj?o;Zy*P2>ae>UtgFL*bFjV+
z`_I9Ky!aiD1)>~m%!^IJu{)a?&qTH|naOO!5=*u-1vxwL#FJf=Qp)b?NvwiB?^|V@
z+D|9!Webls+HIo`#p)~;AwjUj$iQ*807RpSB5Vf;s6*b9C&W#GGjb3SYe7IGK}0tJ
zLwW-N76U>C0ko?F0stgQ0Lco`oJD9|lnzl`yi7RD!V}`9B$9~DZI&mA5~U<2A(5@=
zDsYMTj>IjzRT{G>u~w}0OVx_K#hFQ|Bw<kq(Njv(M%jx2>d`DQ31OqAq#|nEyl+}m
zlw1np5_Uq<Mxj-l-P@im@I`)0L6Zbz$1OuNp&GLMWgMySl-W!hb4xaagk*!~PM(B)
zbpM38b8(i5r--4^ZQ0GVR@GWn@N9_M)oQ(FrYP6*Caqc2bOsF>-y=w;Q}mL!g_rS{
zhcv3?0~^F-B1U^T?vuq+O0pyYYK@oYp{RKoV@pVhmqZ*aJv^@DtQD#jYt@<y3LvE1
zFrj+za%hm?Lkq)kq?uYnimP=5RS0l*JPE0&)*T^w^sE#->yk*Sc5Cr-;KKArK&tNn
zY@Y(C?S15wc$ESSV*vb(Qdpr9E+=Xn99v#~10F1xR4gzuOHW9t0Nhqf1}Dy{!KiGN
zgT;2E?a~=9s*wu2q?1;p7IKTvZtXV31Of&UWYZL*Ti8%e7Iv%)gYEZ&Lh<xjN>+%q
zdn3xSoJQ?M%42WIQJ$-Q$)`=}tFB|4KoO~x|0vKHwAlpK+bN(J%3xFEOcMoj;iY!w
zjn$+T(d5Tqj9uf^eLuN2vl(sD#E*V(`MESY{MhN-RoC@9GYngoZb!xpQ9g9!a27Y3
zto78*x~1=e%JRMw$9$(vrf)3ydJ~cLji;keT`&dOSl4J{tjU$4gWI|7qI=P8=l1B+
zQ246Sx(Z^HqAz0R+stgH{~JAu;~%yECzz?E@JdB4rE!QJtw-85RM9bl%4#U2Qh{fP
zt29O~tg%g5cmO2kDzGptMdWIMX17`(GzOF_RnCP=T}4d8(%Ov%&@8Yotsi!n08MPo
zvKi;1L1WMX2sOP;d!ZQ^Y3t|hdc`}>xEqk=7(D-9AMy6z2T_sF0#k=j&!W*yI*s#i
ztnDJZaFFbC!91QA-U!x56mFWep&o^nm5>g)5|m3ry9j9&T}#{tfAhNF^==C{$i%aN
zWg5Xj=1?5kEBdvg4iNa*TZ2n<&k{@*{u)$#wxqYa<uf$_TXWV}ZXe*qBSa>F4!V8I
zlqm0+C>n@<_y|Xlhq@X|bLnZ|r!24*-GcUC-_eDGlUgoCi(D%|Fiw#BFkm+uvdWWj
zfNs9kgT{3QPC{wLgCl19H3T}Sqi1UXY0l{dkpT-{f<eo#6kmi?BrvIOd--N~a-xAY
zJiLzd7VA?7EUD(x3>LZ0G|M%2InIu<Tp#N?-abV>G5<=Cv1WFb@0#f5B&i4382>%S
zAEh5krc~ZktHi3>457L2C{EgGW4>y=$8vjWp}0i!V6Yi4hY&4eCqm@G8d<jjJyzzv
z<BKI8h<Oh8TbKvxHHm(3lH}q)?Ib9!!mb3L(d*WSTE0h0BnGvI*=u839cyQmRxnZ5
zQ@Kf<n>b~aq8lZctz=Z5Xg42Dd&K{uczn^L&56-P!U0Dercc$sL#TWs37VDl_tZvj
z+?t3s(^^|B)8$0(33>C84D8Okve0gscy9|unXN9n*pqM%w<Q*a4z*LckLu1fRtaW`
znI^#%QJS5nYIjfW@5<@Eip}ekw9w1c=0KbS?!!HTF(n~cF{Q{Vl|YOf;*|C<U4jAQ
zjv9PP%_Ibdl!kO>3FG7_E>hriG)RMUd19Kipaa}7Ny1{qF7cSvvgSIvP@Fate@9eg
zmq3qFY{y8!7!7u>)C;u;xRWwPe_j_hwPZc3D`<>52&6mPL;YJ*7J>w}355dcirjC5
zDjhVr8ZX+TNejKfJysi;6!vJx{<1F61TW#&*7n}$BR-KF+zxH+NyTEOTagVip#`E>
z&?CrtJ1iXpdXXN7%%eFKz|OWnhr~AAnxSbKO~w@63DDol1iW{6Tek!Y2!@m$B-rfp
zqjN}LEB~dc2X%8;dkEz6&SvnamG|Qgb#Wp=glIJBtIH0p81Yz*N=9MPBx1+(>HB8o
zL69juIx2|!Fc4SnOrdC?Dq-P)5p7?X7h;av(*mQ8a8rUvz}ZAvQ5GiP=Kjfw1(gJ=
z(TGx6FHcF5A<3y}3GO`Op8QK2Yn;;5<lyUbK)*X!1hR!6F~T%Tj50>r1`Vk^io7FW
z8X5`IthaYw`JxRqtkxPRA1iotaF9UzYS^K62R-5(0Nfj(g=)Kiq`NWS;hRdmSb#^<
zm^Tk%EKg8*Hy=17?+~1G3!<dF{d5P*_3<p;KH8mScE~-0B~NUYHiyb>PZlof2BYV3
z{pgSA_F)hmHJk~~zvy5`A;c<k&GjL`ZxzyG#{@1*^EoG@FCW%urBqp5H9$o;?!zSQ
z{S%;sIrpg*Q&j^JsX%h?KNQ4+)fRGVuF?mi>PHT;@1bP#j#L`8_yGRRM;_d^cdG|6
zdKxx~Ic@cCZ~(0iifhrjW@dnDhG`s>jK{~cXF#?OFO6g<F~%7B|Mr%t)$wE}*q)fJ
zZN0OF1t2*HS^W#XBbq-+a%9^cy--lnbSFFH65{9}4-eF3x5A#|WpyuFOtSO6$Ujv_
zypy274=FAyLiO40AY5P-1q`xJZb_f}V;&pIkO+#EIH^P)j)hw|f;aL`ES+0(`Qh(K
z$#j6A!MDR#Pck@o1wbW_k5|9MNyle7PX9vULP5KKS`x)(&9DV<8seoI2kkCL=MDd6
zCl&WRHn9Bol)4xd*bHb501~@ix>Y9k7y_+En2<tx^*#c_+m5&9x552GF;Tw!Y#<}C
zaJGwzRJex^g>^U7Sa0=}6LvbposM?6Ew*qx3M?CzNEB%fk0S>Jei=Lc634`p)d03i
z_{0~kQmU666!R$~9Holm0Z?VWNztK=q)vU(*pcmfut$4}B*cc5!$#xlrQ0_ec5RA^
z?a^!@4G=i6)f1yV#cL!`AV@o*ErJKfV<n{iM~ZYyRifyE*DRFOgwmB7euo}}Tx^eV
zyNgo^e%t~eh1lv>uv`5XR(|Ba<Kij*tiC6Rz>M=)7ol=n^`Ve#aA_%CNZB2slhO$5
z;XiZB`{C8yUKU<wFdN?dzm4y{)UeW{N5W^f;=$1ki=a|*08BU1$Ku$cSzi~8<!sAP
zPMdKmE_rX$<%G?WXXXl?;R|Yz?NzCyzK3X!oJCo+;LpEwER?<f?s#1KE7My|*L|k`
z@%b!WOC!qGKj@c(*_qc-U#ccoPAaV3eAIZP_w%i9tdI;hvcHd;J;nFm^~`G?-r8KJ
z+POuY{BYUOsNwR5JKtHXL>e_LkSztN<<!<BrPS0UV&ZG6llV;)DYcSj=0p=?JQ0gE
zGq+{o?9eAqtMeKw`3Vh`spz<>nj>{piM0}@mUhN4j5QvQvam5SHn+k35k;Xd)2LDC
zRNDlvz?xe(h!lhXRX;yQmQ8ghIXmb3;@#0l@P>@+CE3OGE5DTp<RY3-Z2kG<ND9Fy
zY=hxM_lk`MW!DkCSwZ;Ms}cIPRtU6>YazHjUXfQO(RC>1+N;RY4=65NEj5MG)FG_|
z;r4ZF1(9kzF8m`Vq8Myt@+7?Yn~Dch;|XpwJ<>dUC~qP)@tqn!#^{4V3{QF<d|-IS
z!Ct543T>Z#>%QyfsoM40_T#%Y__ZEyK9uQo;^NDbQBR_px0+c`Sb{C(Qgob!zSBh>
z;C1C8a2m2QmlbVfWJhF$2LDX4=1_es&J>Qv(y->I2cr5<uU_d_K%DY|zBT^%;gg$~
z`iT6k{-@9H9L3bX8O#RvMKFTf#QJeFq2m$s;7+j-%)gyX&+u8@h2v1zQuR96m*!A>
z&6gJA5f+;sE#fklpOs}Ve_p;E81X(i&m*eB>WBwACm4t;3h)h}hPX$EIEzBU?k;<C
z*1oUZOpa=Bzr;8nbthtE@8H8GPG`3$k<ADUjb%`8@FRKYp-@ff_ThF@kttm&`yBGY
zuXEzH(d6T}#zo7=`<hJ8IeY5IENrs6pHNrl1ifeXg?F-9ks+QTQDsTo#KLfd^C{~<
zor8BLk4=kxZ#EjIMRW{4(R=-b5WZOB&yuu>p*6d_>#*WD9>d{o^ZOn|-;#-`^g?=F
zQ1!a-Pc>}&)9_a<n5w#eV3mtnC?w)8Z9u&1K{L_aPmk;h*0`<~Q03qK;r~aEKR5H7
zLj%~HWmbHke^kt)h{$8V69OZ;{b^pF0rc(wIz!`yTR6LX;3c;;<HnnniquCS9|hAS
zj}o%j(fg-Y#rh{&`F=4rr?9TK;)m}qYTzVBSNmv(Sv(a%2=qY+fhIa^EaJvbxlmmu
zUCzCU^n3Ba4MZE%0nt7jzFyCTmkjmfMWJ0t?oM{TWE&BP+?u_4zw2Rrd0t5b6OIF=
zi`)#b7!#NVkAa}D<beB9oFDDtzIMX`O*{{e%gX&AH?e;|OL8bJh{(QR2iMY+ALV+-
ztx28&hZyr=BUgu;sWMx8zGz9u+UJQK=RR2^jL$jv{q<jUn!bL2w*^P8y^Z~8_=ope
zbD_y1Z7(02LeOz_Icj}*OI|HFd4X-HVFRICOP@*;zC1-2%6J^By6=q60cfP?7wGm#
zs(+c!CHir;Fltt+^~=GGaYY7~?)UN)A-(W@4u|3%5aAm4wa~J8?cnQ65<gDMRHUnk
zO(e`^>Vs=rKUqi~{`6a}I4dcwQuq-K#ctJnJ0K8n6^al!0F7)KyjWjuFoT`1&{wY=
z-JQCwR5`x<4`_(6J^Sy7uQ4^rZs6WjCqN^cXWFvt2u3Y_IKMxDN0!XoY{nt30lmTA
zhy7aaDpux0#Ac~D1FEuU!UvV--!Di>*9kvkA40aqh_gck`=gf!&N~p;zz9E?f9ebO
zCqCKbw?)}+@W|g2u5yLHe=ib0U-kXkcsxR*(gMAiJchb9t)gjc&!aez+)(?+NriKI
z_|j#Yj7h;%)~|dvM@NN9rX(c@2~8q@mr1PBx_i6QvfB~%Goq^p5ki1J=W}-L`uSa9
z-6kvhE0FM_Wi=Zi-_Y88pdr@;XjHA_n#nhK%GU{C!19R1x4%I(6`cTjNBr0=Syj{a
zZy1xIa`X>)<dx48|2%tTvi;}slsZ3^#SBYNi3aH^30W=kaaZXMKZXuuYkz*^E&Lv6
zZo9qsZ;9dhKS#^QeQUebxvRQ1Qm3w@ar1))jL1D--IOvC4MDlc?l=0MC{JgH&^a;j
zpgknLMFyGY<Lc)F8;hD09(%b_yB*A*WBsP4vAIzRey&#86dTW3wrf>L$D!2^yJcuu
zvx$EemGcWY9EvwyVtuUd|MeS>D%J2S!r9l>`@a2mX7~2Y$lRvvf(%v2m{E@5VbvRl
zPK*k_h%1E$^{j6B?vud$Iw&dJ(I=jhYda^}#x{TP&AsJ3QOo4>*|#-hRqGcA+pY8t
z>K{Bi^jNp3Y7_LwviZod`1~V(O^#*fD{90}?tWlcp>_baH8bfZ>g4FcA%GrP*_#hA
zn(|daX2Oq_Qdhnh0C(0E0*t1@-fDmzS$$5KSk*i;XS-T|VRhC@pWQF$7pR=bS)Ag@
z3{}Pda=dOZYszQ45*q>CX91dc-IHwNXAKiM(hH~Tqx+usi8Z{=I&UW@)`Vf1{hX=f
z^RL^XNY)9+Q}VyNY)1S1686v@0dx>u^^I&9du}1KLnkBegq4~k_Q6uhsFAgxdT+f(
zXNI4+#fEq)y=l^m{&JTEuK0^#-8cB{8SU>4@z^j1DJ-TAIAtYdHCR}x{v4DIH~29w
zil7aTI0XUm9er;#cD`1!I_Uya&Kx3E5Ej$z?V#}L*r}a~x1;_(Uz_~+qoSDm@a`4G
zMT}}+UR)H6{D86>S>_p$433(Ymktk&;@#&}wpDtxjSruPq2(ld8QM*)<VS6fc(w%9
z-yb9+U4HD{0S^^dWPWzfec=whM$HW7RD>tT#bAADcltg`Km9D{bcbc5q92(?WHULv
zyhFnya}qn8B$9?j-63R>OBOm-QUq-fA!9^P5i;>W`77T5JzX@0gTj~`u7DO+RWy|$
z7X~!y;bQUS2e$UZKb+4Aayxa~VR)B|R;rmpJz<JAG4KA@>FA*YP^pkm&e;FTN_ypL
zYttyGVf_0*hNG*mjjzK2G_dh~g1Fk3Wf%q)$(aY&p;A$djA3iZxM@+ZkAu5cHku<Q
zk`pb@mPP-4S)KC`thoEN%-)D!>#K4%<kkOvlR1*u^R>Fat0JX8oRQpPh7^<kzt?u4
zg+c>~z-xKN%A>?~jy<!K`b68$?qv#K5zpY!xwN?M5X&=v2W`gM{aCV;2LP=_^xH4E
zZs?6{=Vw)14=uwiV#|!4M&on^UeY3c)2h~wSr<WHOU|=TDTW+HubqKYkl(bd&$ZiE
zr@Xt@G4%dgfymp3WM}1xHP*Xsbkz8^on^Rv)~E9$+<Dg<)oxo7;S7=o*#qORv;vpz
zZ|f%+OPSc#_E;aXIHK*<($*qPR3D&FqDO^ov%^<J7w77mjaa)x@(tn-t$j99zl>?n
zrNb4_-yTSfYxQrpg*52ItAXBudqNI$yXnQ_o_aE{@;GH5?trc8-v2^ZL-*OLVh`-K
z`Re@eF+R5MNiuj_`_tw7Boac&@)YUth_)0gW)L<MRHnMBJaVlNMfM@POS!H*zg{=^
z;stiD?eQHAwd4j}$scdJPdYU?zg(gHds0`IC|eECuU0E4t=-WR|JykDmu<W4+j)HS
zjGkI@yJqux*TnN1bwkf@Uus!z)6}&XmKXLuNyA0y79=1}oJE@Z5C`kq*K%+iXhuBZ
z<T<2GFcDrWSOhH>1A)tQ_0Tvt0*%wtMdJ`~G|t4b(UIXJd2L;M<;cuN<+l^>{ysT<
z?2*dK^rViH&nLQeDR=%SzGGb~flhPY-0u!PB&)&ox2@D2z6r4txIbpf+V^6RvsCA;
z@gnI@5B`0#_0|8nFA2WBE{@)@zA~TO$9<6t{-vzxsa?_R_>^>Bf=AKlL~ccTR!Vwm
zMj>@zXge(<J2fLamr^=4m{gRMlA56x7s(8q?WH~Hr3cKu&z<g}J?W(dOv6tpT$3cr
z5+~o*swJuAsa^Rkh2%k!Ao<@TCgno;vdaC+6C1-DCYZr-U7Z8ZqpMMN^zHER2lHQn
zi#r$z;VCZHEVxeHI`=et14#veoi&ay4J6;QPJVjx%bu>8@05%fW@M6!HIZQ#=Q9}M
zn6DXVbpWsIe=dsPZkuzp1@e@7l}_N3d6Fx3nh0bV66uLVh9Qs>>aYHtK5h1bnBQ~@
z*0bCe+SIpPTHa70C?-2wJCMBjVe~K`uCt?~m3t+pN}wWFS6&7#FFH;vJPxjc$=Bu`
zCxEM`x*c(2Z0uOKV@|gtdSd9h@Ay5(EY|@r(wq<#78l_cRLyMk){3FQF`DWPvc661
zgv5djj-i{Pm22#Io6|Lk6g*%%Rl_06@MPG8#KL-{vfTrMw@d&}_h2k!&54j_tyoac
zi>5P-VJccd<x<F8aM9pRb2!4Hgqv<gGSWezpd=u5AEa{cozgpsN9ZGzf|5shg#m$u
zg^!9$D12>Gls3c^PeJ2-F=&Ge!}0dx_M8VCuW_&N2MVgcLPrRg=0eYC6^RgU<V7L`
z3Ww`-(`xeh=|wR&{QbP#?2<!nID<z52^_c6L}PW>+0)$~6_Ii2x0!wno@UPZG>R}f
zonOZa?LKP?F*F&w=*0zM%N2A0!vj}`PaiRbMuAcsVktFHro2f0R4Uw=k{xcYGqeME
zEp8kct4*2TuU@i72TTDPc`0=ginZY3ET9G!SQs3SJ!~XaDNxGttEU%9B_L2&FJ3{N
zx+Za4s|_mbf=;Mq1%)X<rD<+A`-XJ-2dgk;_l8PJdxy)LB-}}XR+diw06D~s6nM>&
z6yS{jgTeG1P$VP+W9jYZNT#^BksKZTJi_1OeLsKWN%uWnW#MgSk_CDf^}ts*Jrs^(
zlmssz&VwET#PMyu-nBUe(H1@%tpew%j;bh3<`Fb}!j<@u=Kcn719-Lox^@^0fI(q;
z)~CFy7qYD)9_J*e&Db8gk%3$hAQhTgM$<g)(yFs|b`Aj33<mJ?sF>p(P&*>u+sfA`
zU3Dq+ShlK#wx4hGyVdsyU3lcv54r7$yZY}%JC{Y^kvlB|!_gVBPm<%qL5>kSgw^$r
zPcE%?*BUFinT8yMox2RPY0kDvz}G+M9J8uB>!3a~y+l>V&CwRAVdm7xx8hqlL{C@{
zoXJ+5;$Pz|$p`+dz6mp5vEd2F?-ZAA*T3mUJG*#0I8z-EpX9TC>qejEbK-d8pcmWN
z`^394NqHr_M2h|(rqWDz!9<7M3FSkl7H?&M7%nI{$x^fBl?N+vKWpSzXh8S^<jmne
z%#GGn(NgP~DM`<xqn{@TLN;d?ak4_3)N7){r+F3u^`X&(TNiLc+m1qBE5jlnZ4*Rg
zx|Xb@Y5^;yIw&|{ywMj)MSWiW@wM3$i>G37rbtg*3@=gM0cDB|!%%%JR<&X6o#yr^
z_9szknO^h5wJ_|AU3WZ+&icwZH@juWwb;b%B6&mqeq1tDIr^k?4mY(T6Z(CTRQYc`
zvLPh>Xq~+x8^18&=nD&}9pZ3YS6Fpg-f<$iXaaQsNI9$!UM-WAy%$sqZOD+@EvShM
z7%4jVJ3V1Ha1W!d;^DJbuSnMUR?{4C$!)NCA=l~bcfPFa2UiHQ>9`&MtbW8kB-HIr
z$|#{brd>d3SeBrSXJE{4$&K8`uf048_KA6%+ZE2>b`DhWdYN>7mod28mXV;qY*!2p
z2`_~}-tD<5D9R}sl;ta|H#_Kk@p?=|T@-`t7R9JzMS$nk;IOM|FcbBw#t3&~#AR*z
zn;=#u`5fEVpkC=L=4y^~5KG{yf720i)<F#+SEUqb?!*yG&tFLb64Dor?*0rM=olxK
zS-O(s<GXOQ;X;H3ktLR$y~YJ%)8-Y0Ml1_rf>`n7+C?D8EmYm(8;oUPpDHexUi;g_
z>(MEhcyU)I)6<8+bU)(~7Utu@q=HC?4UT+WSACqTaGYBW-rrjLNWK?-T@S7e$g#ZM
zyA<4R@As5!yj`Ck<Z?oJnxVo5ERIWq8d4kB4XKTL|Jo`2$>tnWp7A>Am3OONrraad
zlkJ&iypu;5A;|ZJj?W(sU}d!rIwx3VowQU`ok&!p278d*Ojp`gcs?Sis7y;>;w6h4
z>2wY%ndsn8(GBQ$HFRqMQVpQ>i@ZG0;WUC5o|)jQ-FWh%DjIK21QqFyvNn5Fz-t#y
zxn4Cb0PGdBci+ls)*6+S)MjLr)|Td%lr&~$lr@xg@2RCz#Y#JC8NuQOm_3V7{U3*A
zF8Z!{uI2a2y=9mI-+O6m-8(P+-B?<Jtz4o)_8K}qnH#~pou3lh5D#+ik|0p&(Rv6Z
z0*MYhefm^EW`fIJH<YPAotGNHsLtnQ*Hsm1-2X7xv8Cn;{Pd=3W{ft{Oo!&uSZ`fF
zV$EvHWoqTZXdycBhHT2s@U)b2rawF0FhqyuS4fYIE2JwQ*WQVSsZstp?c~<kjo6)2
zBkwQR)Q0Ohv3QBm%-V8J@~uixuEBo~-*kdOb~=;bUT=BY3<HNjv|twcx&}xO1qHAI
zSW%%R<zC&rh?qW)aq`B{f$8OuYw_{ZDt6s;;40w1g4*cSkyRPea6np!34m0t72YDq
zI0Z|>{{a|F<yVKYGI%piCwN<>OLqJl*>S9CB|BfL-g#I{TREKOS4;VK9c9c21CG@w
zm=^gWwgnsCj#S;DRw_L;u48QsI*xKc9^Ur;0|fpJ>yY@XNdHOUgkCmp+I$>c*3`VV
zspdFqeqjSx5uV2|wpRgsw#NW=$`OvtF>~CUFelBa)akC00{wuTg;z&CkJ)jHdzPIW
zJ=eK8d4t>IK04c{X1o44oNUj^13UlR&;Md`)YH&RN6)gevgbNDsBWP^t4MpAQh7b;
zpxrZ#a&Mtf?vay^@+oo-O`yhE{x{CjVw|Nd?Ocl_qbUR;XQqhIOu6@L+(Lmz%clog
zMAa)U-i2Y+K}Y6~(Sfv}tRq7SYNpHs$_#fx54hBWj~E$0y#-+Wmcdk!_MTaB4JB7r
zcbHcGsHdBjm|bT^#YH$vR8@YZ!Xvdi=`d=sO{-nRscb%triB8rQIxgZF;QZfj=D#w
zYA6e$I0HE(aWRG558+jhdo~dCK+1c7vVSIedj`O={5-pcK=$ZR!t9TvZEn|!qre{p
zXlq+9B*k^Vr)6Z%>?OM^aB5q_GEuyZ&sFY->+?01VgS3n0JQnJ)(60~c2wUA1=QNA
z+s-qtt!|{GO~661uI=WQ0;QP5y=#4y%TLOuSXfv+CIqz3+bwdsJ0(u+ldF;boW$Sn
zEj57XyQfFa8B4RM34pF7I-p^zD9*HN>7J2(bK~9>e`vI-TOvJM-^AMuPIsrI3WLSk
zUBOUr>XMR+0f<i&eOvqg1#qD99ripzws^|tB=&QHsl{y_hYoNc(z=_R2WWqPSP!sC
z6sO)bw*Tcs?!~=rKEM+@Oo>d>FMtD;?{L*4b1!LsUEn}M$;Him)vrVlng1_$Hk78>
zAv^(eVwZNa&rB8I|0v02ApCgt@(e=}P?&`9Q-EUUP<Filc4kv@WcfHDpEous7a>D(
zM0R29vCk>8{RJOhG;ap~hE2qE%Eo4nu^6+?wNHZ@QRqd2c06|YIrJsY&>^nIGw_fT
zdh}N~Hr%7HjUr%O5~aJrpdGomE~q+omU618=tn};g_=GPy2`(`(Tz=BeOgPiLyus}
z2K(|J+h8kK&GzOM2{+Az4CS7@TFUcT(_Xpyv<*j!U&r~wf>7$VFcdD%KUAe>1dnA<
z&)f`-IPx>uuT>%mU-vAMbmz%2%%+QFX{OX`@#YxZ)i)w<e%hv+6q9EQkKzGCc|aF*
zVms+8yeNmA#N&dDx29V*%QSZ7YMYCu?|mHu$v8xE+NEUFTlTkAGtsB&vytmNL8f0f
z7RcKcpp<U>CE5c>7iK2IZOv&p!HyJ}0VN?#<(SoR(RvYMkZ0fK-$kgo@&lPj({R8M
zV<2Y4-vshA7Tro>Fl^ZZ1N;_Ck_=xhOo8wS?Oy=@b&v?sS8ywuKRv*d217=2r=unI
z>hwfnx=js1zGJ~rb-#>|56Z$#N!AU2!i1Aym;Bk7g|F7HBao;O5>qbLSU)>*;+e;7
zswF6)E6GYCrf`Od!1NglXZQF3ro+*GKLRT=WXQNbDoSOtStZifND=xtYg4O@wCuNZ
zXiSBukIe{b+YN9-djt_yf(?rBI3o2HzJ9BNOz0_r9AX@+pbA^&an<ZL(Cd2TFfi2l
z8WNeg@=96%@)hB9=Umc2U|PJ7;jVAS!_y$CR*u|en5VrB)F4q}nS=i3J2cX@wGxm;
zNh!F){Md$oz}(FeVrCILrly^>B5)$9TSnmEJnZmt7VE)ChB=unfwC3=y+Q&y$r1Ic
z;%SF9B>a%i{@u{CYwlIyUU1J1ln5HSPx0Afd290^f<Ql)KE?Bj&u(~l7hkpNo`Uk)
z1W&tbh79DQaWK0lvSl3~LzgQ%@tLGRmjdQy7Du+=T)P!c8|P9&W81oGVaE}nLfNog
zWnH!+x@MVn%-W(VJr6cq*KfHVCbz42?v*FgK}ffRr$twgQz0f&IZ5cf3B$?(O)M|R
zCEUTZiNLuXWxNh=H2dYI#xJrF8OCX%8Gyi`01r1Tz|9HSeOey;Q9&u73=k0SM?AZr
z{aT*k0#|@n+Ycb)#8JLF_I5#^xJn*yw{-xJhrLWi7^ua&RF-=o8Mxzb8@jWp!1YOl
zi1vzowNXWMu0DmVasX!^Euaj*0DIiqokPllq=O+sHCT^8B~mM*=pgN~Bnz+GGcl=U
z3U_3XFkh1DYPcnhtr51E>|<A;u1Gt!UU#_dz2~R~B?A(LImSI*4GB}C<Bhf=-7eaY
z3}Y}>`0hUD<%o}J%JZgroDUnvh?;h7(@H!+lKCep%BCLNBMV-E0`g_9&t?U+f|+V0
zz~Ic_scn9WDUEgrGM$TVtf||Z72C9pD6HS=7F1U?6A)dw5eP-c3faj)MU`$q?``b1
z+5ry413X=kh=azfR>a~~unjcR4%3!&-eyeX#UY%bPl|4!?p;xuKt(=zTxg7Cv107A
zQ|K<f(sOOF(->bw(u%5@<sMuAe*~>&qMh0@F8~27^3A&2xWeUL6Y)h+hyUP0?=6Pe
zN_LXD3n-i<*RT)WGP0r)exwxWdh4uUi=s*G#^xbJyM16c8SS_jfW`y@;z|s%>@)?X
zVY-EB030qtJg^?R#pCN)-`~*s8b!2Co1iE|GZ!<Yh&Wjsq6hB}(2M;mz4u#-eJd4A
z*I(Kxt&9Jsr(flF$t>bS=#z^=TZk|bdYVG5s@+}ZvUJqq3}l~8K4eS@Ml&&A&1IOQ
zJC9-<<d|fz!Jy@{O-HnYe4jo;Ux(xEEz~+j>PF`kYhlMp(gZW9Gu4gtR<T!^e{(Tf
zGV+kWOCuuNZQOLT3c2XABTR#lau7H&_#P{f(0Wagd@DE_YejvOCwp}%DW;8cP-O*}
z3Oo~q+EaT^3wF4VBGk55i5WUvgtK=EC<AhLjwFIDkfk8%grA1Y)La)@4Af*(SBVOp
zwqZ-Aq2)77gJIVIZF{$7b^zL&`9MP(V;KZRd-$9h6}MR+xJiz~dDcmlpEGsNV&P`N
zqo{#(x<;3E)}9(QjuM_WvUQ@G$9%gE*Ram02f4d!9m7-JEMpjK7D{(%)Jdta?f9M%
z*g^RjMYjQMH&|$iGJo3j451JfkT<}3*aNi)*Jj1rPqFjn>aUA+v94W5_*QVSs#|>q
zfl~LY$C(ZjYe8ucc-~7frssA$agRkL@lk~)G^1^w5*iqf<u(+Kk%gD`obaZ&=r>ZV
z(FL7MTc46z927&koNKrKNGHVYRPRM`rn042Aj#WUjcJm!GT2p1Oo8$!)dSAsmKE5k
zGFi*mXE;sGBb(eE$ViD*TDP<`M2V{BEQMX)na5KGo|~;68x-y$*;nYf(8|3pG8D?h
zSb1qr2)W`qEz(0H=M&y7VKTL@9~Bg0FWCl)ji)eS)BR?~H*LKLkWj|$nt5y#cG$dJ
z%hd6Jd+>8-sa+-_Gg_<sKtghI6kkil+>-OAAKVgdYeg|&8*De89NRk_Ps&r0|IA4Z
z=QS0#ILo{H(_Qtt>_4s0Ry~Wu<9vH&^%@L;Ey8`3x~VWLS!u-d{h)`boJoh$J=|Nk
zM=!sjcoOo@t2e*T#Ri;Oe4%;TenaLslmacXlJ6rCqi6*ed!!rHDRMq^>=?z@&Adp;
zN^4X}#WIOk#X8Ci?iRC^qicOccD5qPIuo(V{s;IsIm?9sHx84P<Rp2X#3s4PqGU}h
z7ye4-5;!AER+-vqVS9m<gM%oS_V)?dtk8Agj`!Xy3oI<R)mX%87k4;TSZ3{WvX(FB
z#e#n3sI~C!ZY2KGMAlIpd5a6H$#vn4%Tq=Q=0t1BtPyNyPH15HqrH@=3IZi|N_HmZ
zlChTX_@^Pq8)6|{`AO%8@l;z(Td@i-56e+$I4L=-x3PohZCG!Sz5|pkFitlTwA+g2
zj)?}An`{%7GKl@f!)s&ZkR9<${$$KD;3X2frp%PGd3t>%inG(>&;Z9IlQx(qc$5Lz
zBBd|40S>Aa2kzBv_JEQ4N>(V<qqPUxh*RT`yl7RTEJt9m(mF)RYk!s5#~m_=`<3)2
z3KXZw!PkSPixUb7zSksiXP+jCEaW?6ZQhKN6?x1yu@vNiHK_qnnrTSJ70-NFju%>f
z0T=s{+rZ^X{TkcC_AKK}CdJZ-U4BP-Y~vl=WBKS7W7=%Y9N`}F@WoV0*2M>2uqc7*
z9iU_P6nV5AD>O+*Y}Se``y^|4wO&z-`W&GQ&Qd*d%8=^)GOxX-g*Dx4(UaTbenZGG
z9AU=jaUY=rImZd>!&OxZ04IRuePk7sth@Q+crLNClg&fyvwvEXKW|P>0Rf2I*Ssv6
zThIAcR^ucbR|g#aJ<D$B+WR=q1_9BL6X|{XTfFec#w=(f;Iw7eBa`qkq<)tki=BLO
zkmbpKJpGby{U|u_*N^vKT=?A&v-m&+)x8-sSdKWC+zK>AA4v7MN~&~$)x=ef0z?Qa
z_HSkCRDKn^vNd+h<=f~*mm=Gg+(g%1a^bXvhI24BWlTuhn$fvbXf?_3dcH7t_p!c?
z*F@(+kJ}CVX6Z^Lhld_em+f>Sp8Y(4eLnNeP5$kRZgsfJEEO?tzZ`_zpXcxafJw-+
zgB6Iz3pta4;H|a8n+RXj-&}p(Q3N(`UVCrmEp+m#jif{v(&4%iTXAdSJ&0RkC!eg(
zaMqF<tz5-6ozp7y;_NjI+n&zg*uppe@mc4hxDBQ~x4#ZbfUejOrgB~d15@~JQ6#|x
z;K_5)|IJYZDov|qRU2^IXWCtQ2yq&>JzSE$v_2bPJXofV7d8zH>V0%+y#nNKBZZSK
zpnwQeV2sR@hDbLSi5pR(`fq4flD8;v5qRLM*2p@O-r_-o{rs9hVt^8MJ~T^ONk%TM
zWi?gTXxz;iEONirvwIP6=nj*$Nx<0HrKI_~MgL0=VI1M(`PkwMI2tXck~Rq~gxJp-
z>zV=u8LV`#?3r-%?p}2@P_}dA^C)Yqsf>nwicL3;&Sk@OF>`jY4df`!Oh|G;vOX&=
zgZ{cvJ*`cODqJ;l{F>OA7r2&QyD<YFokg%R0vF*0;aEQ6YH-!Da|GijT`<t1a;)uZ
zXVF&UH1Zw_6o{+w1*Y<Zb9g2kd<T9R@-VP(sLcR_ConZ@)DlTG>CUcI1-i7}n8B+v
zEjExKBG-s`s%;N;noSomHb$)0XpNU52~+}t|JuHRHBQmPx9|#YU_VI<1wrI6<x(X|
zvm7obrwvmw_Ol7=Vq-0jX44S-lsti}SjMFthTHbi5-Vd@^xK>bEj*Z<zbYm8vR80h
zHjtSduMk_SJ=&!KyvRp|hzW2s4(7tExvbK4ZoWvvnL@hFIV6G7{I?#y&9C#@Y!~|`
zCr)9P7ILyV@H&SyBjSJg=a{V2x{`a+UrdoQra?)Wm`UNWF_%7b$&C4Go)h<nIL8r7
z5;{0}zowNw17UhpTr#tRmUD#OQ>Aev5)%82{hl!GWv13?A3cTp(R-G9ac}`SM$7)Q
zm*JAl`04*(N`8J%VfJ(3fuj2;pup@9m`6By)XSqL`guD0BbyIEXyv**P5ooVj7h(o
zi*xQ%f7Zmzw{`M5F)nX&3?A?~0R&bd^#LAz9Xl#4`(99QGsEO`dt=TDd3FcX+1Hsr
z^)y4&i|N$yi%wn6p8D;lb~8>2$rIpfGpS6kT{VwWaJ}Ah^SaKBZ@)9+mwusJh3}@H
zo=(S(MxmCj_snlU<v8P+gLSwL*Wn10Ev!wqzq(dZ&sblcYM!{)oD!IePMTXvq0yQ(
zblJeVk$&dyzT!5A<3CUe5CDA9ngB42qZCSVL=qdlkg0QyAZZCr2&l+hoQWybV?R!u
z2+cS?2Dm=uL_tcBK#r2%rWRb1A`(hR%m~q?iIh^L!DWwCxY2|pl`mmJlq`~F(i#^)
zC<6<Og>qVfd7<zV1^nt_X4&?K&0kS$_`lopWE=nhZvApC3IJY?>c5|=*_TDJFG>Kg
zU;qFRV9Y!L0BgEXl$(_Sq9*#dYorRG++%L6+4{<tHa!xj^qg*&l${{rL{rrR<#nHR
zuQG1Rc%B=^*Iqs~&C0$AYo%F)kK$0Q#4fl3mtilQ`CP}<B+Je#ve7ql7T7o!mG`=7
zx3!p66D}8OR$uzc)eKKiuX8h1_MXX62nQyVbU7(R)NT+JZxiLU@(D#%;*5SEXPN)B
zlCHbOD<!<y;IINV(}fX#CZrrKZwI1s#Es=}?Va#w4aW%+Jrx#>1LZ8IoB-;2MLMgf
zrpWx_z~Vww`(3fPII!mWYSEOKKkF!M&}zLJaVDk$>KJCc*xdffXumNXI!x+*Trst(
z&hRJ<PQNkZHdI+nR5j63=P&WQOWY`MA|tBjyXama?(!7b8?EgZA}7yMeNU}+^ln%>
z{t{}~H2-t%UON=dC7XJiSN&mKf#ub(@~$?wd&F&{sLM{s6)B_p{Bf_y@OTQ^<+A31
znt7%A8ss}iWXwjhr<!v9w5*h@zuTnVaxp!irdrJFHx{goU6;CwGa%($=6s%TYLVO?
zN6}1hs)wq#inge7D@$1KB&}htvqt<>+C4Q)<}&GR7Re#da^L{$j$N@52VplH;PEb!
zH-m&hlF`-Vo0O8RL0Y1$6a_Fc5fduTw6|YULjvSv0RSYET)7?OV?k4mO<R%m#kuRP
zm(Gv?*;oL0OK>3opR8vj7!3jdzy}zt4IKi&ln#gDEC7fHr}L4q;?KwM%}d3bQVE<-
zW2uVL;XHY!d|~dGtw5pqicN2p44F!a!3i9|@$C|Wj{<_~Txl2glP`sg&I)j@Pi4VN
zG@3TY(-fPdgQ;Xeut4$+mxja;)G$9wnLIO^u?BM`wc-d@u@YH4-#L~ob_REt>dSC<
zqUoiemM&FD4)$;R+_(&q6q=<|WJ)8Wix<ma54kiY;Q4;i66`CGpV_<wQ}ZHq9CZNP
z;<6}8sy&jWb|lzAU4)O>p*lS@9zngH++lW*DCYZ6AMudQ^wX_xJr=BRGAomDaNnu2
zrtlHfacB<KqbeGQo)S7!I_P33T<peS#`w!^dgHJvQ-kGZ<FMx@2fCTg=4_lBi*dMf
z5(C^OjKh<d4~yVp{MqhyqihYRtK>86Nch7;ee24XsHBeEppcr<x^jKycwz~#Ek*V<
zrFBYMfo;9*jEzE*YRc+n+7fI_bv<#9S^(h)2lg3gl37}p5Zl(<o??pphQ&eq$xbt<
OB70jBnzl{}0002jPYUn=

diff --git a/static/fonts/roboto-v18-latin-500italic.eot b/static/fonts/roboto-v18-latin-500italic.eot
deleted file mode 100644
index 148c4fa0858fd3fa0bb719131669a356c0e593c6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19148
zcmaHRRZtvE)a48eu7kU~y9XIugFC_99Rh(F+}+(Bf?FWCLkJq&-GY0P{r;`mhuw$0
zUAIo3b5Gss*Y3X4N&vu)A^-sQ-vR;t2men1f%m}w*{i5C0sv6y|0Dm0g+Kt+|4`E#
zUX%a9|2s$kngCaT#eeDbUs3^70oDL3fIYw);QXHv9iaH1ZVqtzPqF-uGXQk|t9t-E
z|KqLzm;d}c01f~*fEOSL5dGhb>pv#=pOfkT)0gW1=?VZqwB*(Q?{fhF@BpVcfUqt=
z#0$VAhcj~;Gj6%2hhoRwCD<vHjFZnpz?wmHH`Y<PJK%B&bjPVvfI2I(5*Wo(pCwFm
z&QIS5k{WV|SnxQT{}r?-eM3Nh*?^BkQcgpUB}+v|N*l(0*(Qpc#m>6qRrJuak!xQ{
z_+v*FDjVn6$bgq!Qo3rWqf8Y|_tbFxjT)2QocK;Q)-Uj!6RoNF4>=;?B<@3wWCW4>
z#@srQa8aLf)D(xt<o)hUVLZj^XXt#_LQn1Rf}lq<0EpGEp*opH-KF$pL%EIPit%<5
z^jD9H(rygi9?f`FmLN<21cT~I+iFn~IvN>Qi_Ct>c0Cy6N`LD3W@|=K*doJMKOtHV
z|2Y%lqfahRg<sPhhM>jYSu2KzcRcmC;J!ra^yI-j91GjvWJ94`_QdK?G0*_P7q92%
z+-x7Y9g~ZH?ZXufwSsW@h+Mf%UN$zQ{B|Zxg{ok2y=he{z7AoLzt0$&(#jgAMM?C*
zjE4fK<Jb`hkB(i%Xp2_e!Cwqqhg#Gptr?E7Npa@m`yeV50vZ0g6Xga*`x@aK#ST*J
zz7b<-!BPB-k|eo7F~y$Xu#^s#Ee)nG?M{?}cjlz%$`?#2Z52@va9(gNw0g6mgJuXO
z4+k(ViPw)Fj}>9S%V20_`Qt8g5BHbC%?6r9H6=k7T{Q+_MB?ks*~e=KiFs@a9u^0<
z4n#iCX-}dT($yqgWPU%c)HuewEr$?BI1*qE#R|r`AR9#;ja^@HCY7_yS>ioS6(!FA
zeqlfj;v%RvTrmh&EN~}xKr~EqF6t|?FLE$Q7xW3fg<{ampuY{~iX4d6Nmx|t*1xAY
z4{RE7d*6+~jU=RI`n^(`h2Ic1duh2b#aH08=Cr-Tlh!hqTw*xO*C%y<?J;!hr+gl!
z?SwN!@|9<H^&?}bf6^-m3Fnm^>>93vsV~=G1Z9K+o-wn&uDK|vq4mqhWESG>-N*%+
z7!h(xMkFV;9gVn=;z*WRmcb@alR{Q>F{lTQa2t@e&#?Nw{Y<82+{l~ZUYNKX5l#uE
zXW*?HmFA6`rCv)^M;#I%B5KUFeo04!L$9W(g4!d>=p^e)WfQ^>uEDM!*r;2M>^{9l
z<h{}xU_In{(IiD!h>d3~cK38j3gc?RfmDa*1Vk>^r~lzBQh_A7pw0tZE@*5k%0RSn
z;dT{m8Aw75O<Xy4^H>@Wa2!bz129#445he!%XrV0{{xxa!Da@A3R-p^uAC4+M3CM7
zB{u7@bAP2#DBG#_F0S^z-}~8csBIK;<=xB9V=NtnONMw$*W8k^T-aW<>a5wl);62=
z53d4`Xl8krK;77i{P&e;!~>p<TPM>9CVMSkx&<h!q+Dm9)ZN+7)Dhv&o1M*oqa1gm
zv4)@%+nyf&r0l(G$*W{$Q*UUivFFfgEd43mFuGheml6<jCb*G<u)tPvR^mA8hQy4E
z;;L4!mlx#^(^12`_OONB-kJTUHto#lqAO67HC*lx@)h=PdS>z&rWmNuud2-u_bxb|
zm+jgidz8MlztkBq?w}iT{ewtZ=||mh!QPTpfAfYR{gz>7QB-c-s189Q?_@&UX7ZuQ
z1U4yM_chnVk*YnB15G`R5YL8nmiuAM{?hFw!?yU+y;8&E5XX4YQfk=Q=iN7C+1SH_
z5L`_R0HX@Fyw5+QQrDZ5Ip#M8(xYO;)GBIn=>6W+L{%#b;u0~gRHgLlGI_KDQB+Or
z2GV5Y(Jy$>x3THqO0-PP5QOQuy5uZeOtw%a#KEk3)ft0gr7bR>ad{fxBaw{Ej6SJP
zXS{8{G(T|;9TSSIMLl;>ZLBf6I8g|U>QUe5ESc4aB)0{EB<++8c5PH=*iN}lk`i#N
z<yo&(EhSN#%gQ**R}y-j$mQgAq(Z>T%J_#Tu9@?%>OmRdxy|P5Y;`rKt++sW?A*B*
zNrALPlexIHZ?dIi%f5r5l?Ux^qB~#{PZyIZks_9RbCVL&o8cfWHxXX$pu3ib#5tSb
z`k`PQMiAiYt-f?Q0#`Yr&f=$g;jM<?+@bvhCKY@ZD-}YiYMZ_jbw+fn#jvqmaA4IE
zi6FI_#qpy5GgQi$pepMupO~(cK*Lq(TUn`}Y_V)_Pu2)dshS`-!xnB16T}ygU;lnB
z-wbm|m{gP)A~UL_JyUQ25pFgB{V?X{?);*n5MQ02$|O-}puyGgPn&ZBZ{GzhOi1zH
zJq0qO3wD<^o};h-B?|^vRIUThC?(CFKdlSzwy!K--pj6^z-5WMS6o8huJ9k%@#qIm
zTAa@f_#OSQ(1@V_vaM!`vv{HSPP_B;c?XC;w1Kvm0E6K#2IGe9rc)j86JpcPIW0O^
zylj$atE5LIG&^^PdkpY@y=2L%bF`zxV#S!x@itQd{#>Xt)^@L|m6rUUZR`Vp7WYu^
zTj0W=1GYFar-%tbHuaB>6A9U#mdZfxa%hk;nNa^kK#yIk*Xj>K3lGDlrA3{+?nb+G
zL-P7?nP{_8jJ=<?O-4L@?{>OqsM^sB0oYWw8C+OhWK0oWv6NGzG8D9n$=q_NPCQ<<
z2>^5P&B*cquP=RZY8u4#yS+yzhO~E&EI)srwUHA<xicYZbX2e<hCy2R(7dx5#=CEK
znTs%HJO9uzUR(VR*Osnmz#%2Y{9Kx3^`cBXgCQZ<ctE1lyUO8o(~G9WX-<>;TScL`
zzyZ;q>o(i>$#;-yioa%Mn!H+eKp|jBs+}HKE}7bw^FjWyGAK&6saB65ejV4z3RX7s
zotfXERX7OsHY36i)Vgq=ZfHce++HwZ7abFd8Kg0pDbS%eMPGd;L~f>0j(B+}DNE8{
zXQvDi-euvmHrC~K`rW&71>1wZ<2Z<BssAjzagpw%?jI4cT$LyOm!XD;o8M3?f!H^r
z;=x4arqX&h&5$8dx`5Y%)3$T*iC6!PKaoECzE?HV&TAmYjZ1DpnP9!-*9B;SR_Nhu
z33E#Q*aQhDKwOvNbS<QY_`;0guqQ`E(zDS+|NGZaX=SRqg<1qgd#@aw=URTVsolH_
zWG+gTGD99dirH-D`8-J}I)A)metF-v){{?Bag&o%5K;3R@T3e%<`~J^_iBP<lP*Me
zJV7t5v$R2}4p|6Y5uG?Jes1E0-v3eZ&iU8b9$h{sg;N3*Mk0r7H_r?Of3`0oOHAjd
za>~Rd^e8wJT1d)|nZ}7W!<26|6GNLu#OfI8HLc##O0ysPP^xME0D16*qryN!qMl$x
z_&7Wj+_-N<`8>P4Dp8t(<KQTjB*vt4nxYtDoP1%p6!s{!B4*vWar`h<<T~VSn)W10
zu!qbPP7}@v<ULTiGsn_R;14xVsV{;Vt}!wpoZW6JbBCLrIrZ`r0v(D{VkfAua0wu=
zQvv4$sC6@eW9_fb0CCB~z86h|U?FxxZLs|Tkfbtm=8DgdNaTCYGPXw9&IV{UqFun#
z_o{K!2XsB!Z{miR02uH0;;hWqr3?Qt=TVEaujrhyFBLQKNPw;Pp3dA-Gx)%OqpxcY
z=OqNkf$L1l!t`Xl-VQJ9JZR*?<7Hccto%PWTf0u4RNC;^;`U!FdRr_%dGriy;Z>(4
z#feUU5dA3jJK13m#8(cSF;^1I%8X61Q7nmu)9HvZ4r|Jcr}+{sBLt<2e?fSyq=yYp
zNnkKw##>Rriw6+CLoPc?6*60+uH(nY<r~RDaNj+DVVTV5qbvP0&vDYK*?~LiySQ(&
zVZv4}f3TMZz8ArT2$k|CV~qT?#&+iyB?bJ7m};92UM_-CZXTVc{K(7?uC_l~nY!Sr
zk$)vy!F`li^G6B!cWEn6GCZMrTW;K8z56fc4?=xjtGO>Y$<^Ly5ukDDG|3$E_dr{Z
z+)w$G2`@Ucttvjt`vbfb>01;X2L)>)!k`lVRv(I0)|b1CDyJWc?LQGF8wM(@jYt9;
zgUypb0HPC?zwBMrX@WT>!zABw>(FtU6bfd!uO%Z)9jxE5^?sFpwx4tO8j?&`fxAvd
z-uo={=5*bAKFN5;ljp}grEIm!vF=>Zdara*VfFi7pRi^d%>*fRs1<0@iCo?)+KsIt
z7Mg)L;y4>&p+8#ifwy0WBn<O2>Q#4zDSjg{bFL*M==<*{4-l{12>x;<LNr>hKN1=|
zEe6l`X>TrBiQF3E&GSK%>C7DDKm&cdgz(#qnG0(pKmxKo_amEY&G5i_NI1@(;zG9(
zJi&rX<2YClG++m!bLdQ&fX70)pEpwXgZZ)wpHagmCZ{k{MWD`pG%K{y_L!;B{6b+n
z4s5MjABwm_LcGx!O4RC$^ZnSq(9H`Cy4OKp0yS>wmvw%eBbNm<QWuO>djPUGVKh`9
z=1tH;i_y%yP>7N9*Gn|9cVUnNH<F3~fkZ;2(ysl`9U-N;bEmzA%kiQXi|}QnK~8Q5
zBeRUV9E3R!L2v)_LZZx1h|$OzJ)T<0e-dO2Y22bzEU>CotT76_@gd)86D?hSw;gIj
zVaC#VVe5`-7cyzGsq%jH3~3Q|Q4t#H@UFT%8S%!i6ovU{q_ip@2ST`Pp(veQ@JvRK
z%PH}={ZU<5fgn;!SX<JDw7VtKN&1N&?e<h<I1M|ZT_VueozRV+BX-O@RI*5ma!d@X
zz880`N=kg3j~G$r8yR8zpYK-0R3rf_J1nWvvK>$RNcO`FR@C1wn#|4baMYwgoPz)s
zxSnnOGa3o3EG*JpEq$%FP&4(YMyc51QMnXEg<)-%EWxBWLc&u8BeXj5*+15KmT6S1
zU*d=E@qWmiK%_8=woGoBd=Q?$<i09$H_Kp2*ci|ie{Bm18#~0XV>%9($Kw@=@hpt}
zY9cHROvRqwy-29BgjT2ZhVqjU1O13?vUy5J?WKQTWa{4V;g2fXYjFGXZDEVHJ*rMC
zA28ITFqsYa;&&nZ`nJGS_gLsTo>j!&mxVu(rZL+OXEfj=gGMJS7LCaf|H<qihYQ?w
ztRQG&h11!JPQei(tM3Jfs(=FTz6IH9ogi_0%vdY32WYDQ#)Pl<Dr+an9>{OrSUl`e
zJ}JyT`0+=w^Q!;>K`S23@^`ytRO#<%(|Z{meMf#E2Y}EhGN}R(?wOc`YRD?v{svz8
zs<=xcG@|k+;T-We8Jr6`e8XjJOx+(DR$=<2^dw>}&XUp4`5_WC5Ob~O{JDaa0;W1j
z{5HB<=MD~!9Th!6bWLQ!6~6oBs$ijW0UglN99g&n1-X6;*{)$ut2e4b8ugZ`C<_oR
z<j+UqAKzBP8;8v8l}xbHp~4By=vc&$R*GUyNwVXocY|JkD$;I-Wjc{;BYD?FKT4|a
z*?Tfk<39c!D2G;I&gss!`m#PlMO9^h`g4!5h@qwOH^zGSAAZ9wuIwoPS%PydvD>xa
zf^Y%V<}XzGXipaz4H1BoJZ<^wSQxqS!Qb0HL}_~%Uojv32XEBXFMK%^5g>E`4zaPy
zr#Ic=VgPC7Nay#qw#;Ycax^VEFzu%!{&Zc~sAQv8Il+2PG&b|%xjx^{4Pw)-0YOZ?
z4T#R%&S5w`nr!%Fk4J&kPm<xlzYWM<z(J4E{-m>c6;gz+yoh*XP97qbqZZ)SNJS+S
zt>w}%L;ZD-FX-wEGBH^`Ns<)0uIL$}tmrNfr~mUkyRlF(>msupP6>jnDfb$KR>FL`
z_6OzsuljrE029GaI2^-SdN`0F?7!{7bdwq7^~n)J)pyEp5xJ_fk9@`y%UAY9DB&7y
z`z_EC7=m&8u)TZ1c|tPo{;-97(2hHwx-CtDN&QBpI<)d|ppy;d&$_E<zsOPQ@8c5A
zNKHoSDz3}<qWtkemvO9mbTB62ue?+qX$^bpQtX$uq{<>~08t>&^6k-^*zS~bzZ;7u
z!?T3L?>U<oEwQ>Vqvzyb8gvlc)fbDEq*p_<A!h0Zn4+Dx@BCfKSZYT4Z=mzN_iIrB
zP1NTR+6P<2q!edBlu-zw<~M%4IRgUI<b)Oh%<S_V=R`g{2ZRb*rI8<BMo|p9mPT?b
zm<uX>%;?`VG6Dtz{9d#AmAZbG7F=^>6JM9j(betZh*eYdrj4jbCM|PfP-av^caVQH
z<5IA8M>7u;=4LS7c2N8bD)YTgqadl?7pJ-oLDr7&&cBrK{F@I$Rd3Vkw{z^&_sPOI
zalVfKFn*aaSD_eCeu~odfx~7;gZ#eo?GN4D?<g498-v0i)vmIrCu1FHKn5dp^G{n9
zYr!UJZct8-fF8nw!MQNICKLKoi>3x~C)>m#G|^Ay0VQC(*ou%UX9*&Zn<awD438u%
zRQv^1$c-vWO85fZzFp2)A{~XIEaa25b7ZTVq70LEO97-<sJAE&QJ9-g7NKA-IQChy
z9*+NS^hF5$c?-Qo8d0!%8wvSu8DmNtlYrFgvU%$#!H!-_HsjJ_!ZL?%-bJ<8l0wNE
zI%pm#(gXik!rN7;7cH4GOPla6KjMZ6FT!%adw1cnAve`=)?Rr8<#uKu;4WQ2gQLx*
z1>RW{WnP$B$>q|-v+4~HC1h<0i`o=RouG!iLrzAb3J=V()Int(F_x5oDNjFnoP=Sy
zBPU1W%)`7`^8Estx7huikBgo%R%?HySpF_cO*;J?jtwSD3qc;+)<}x6XjJFN?|t<5
zig41i_2tv6=F6a~$_v-EUu}KpLBm%7D#l;+M>w8>M{TUbST)-X>o=%s2v(Lmf2B-N
zS_-0;YQLMbUd@BVPfRd!ya9LaU1EFO;cGHTo1YdTwS2`Nd-y)bpI9j)x8$(-Db%wv
zPD$$KVpHXG{T<v^5ahFw!CdtevvFZ*mA<?FccFTEQcR~v*<gVFLMAA*Eo+nPUrt;_
z=C1G&Ug3H?6HN2?txs@fk{ahe&fK)VC!zV7>n0GV4s6S5s)*a{=!dHZtzeZIa}iNZ
zD-J;Vj3pW+;A^+89h7Y{rmf!*E>jR~*7=*p6Fn|%iC&)SVSBuOvBh+&4E|ESpT|xA
zI>}Fkg9UePgT9!|gt$0kX2Z!M3=`OppQ}QL94FZGl3di+=_DcQNNUIO7Bud^G=EPN
z#uO_QJVpk$YoQVQV7zvr_cLCmJ)WE7Fh=J*ZqANn--Y#xsnuwvWjX(ePvbzw^eMT)
zE}xF{d$Z_XOKbANu~ml9b3m=>CZ&L(Jh2#`fZ3XMjcVz5JqhBXwD=F(m0PbeBgk$T
z<ZIv;dHpNZw<AT2ntG`2%dfZ>l1&vu9G%zY@xoPv`ut6NUW{#b+V{EE(2rkV5TkYO
z%BHL!Fl8eGynPkAq1F%0EadP~hw`)<87S&J$K-}WPnCj(uchdaH)1#GE|#@cQ(cR+
zw&&U3@-b$Zml5wE^BDhp+0(~}&`R$?ZI|Y3xYD<g`sV7chp7*FicGn5HeFy}TD2Sc
znXKgJLF?5HYDrtrK?VG5kQ=(!DU!pRR_IN^<1AZO=DIpF|J3N6SDf2T;os265X~_I
zo$ivU@wpw$l4W(`BSR<S#tM6TIl5L}j<9h}2pc$n4d|#pY#?XQqXX2D4Th&og0<&r
zlB%8T#`y)+kyxDcMl?p&i^|1jE68lAGs4_pCt*0hxas`Uq6kv~0B4yieWB!|;(@dn
z+B$?I1nCOd4r5LkhAYq8H#J9OKF}o)Z;9iYsIR5+PvNwfiCWjwF}FC#CiVa&W@V>`
zQ>Wa|zA$<Z0dey4F$Nw045ngf6DLo<(KhJ2c||I!T;m>N19Ya=Z){a%J9DUa&1WX8
z;m3WA9ju%Kn;TQoJ#?(RE{3f3&~1NaTTUV@piY0e2w!rhb7L=;%K7DFX*Kf&Cc)T`
zi5l^i<Zg0d@F40Vl`Ae6AduZOEp36HBEou^BfyhJ{kd7)8}s#89Z0e`2}hF^Jt(sy
zcSjkuL{>Z_&0UwdUHe3Zwu@H+H#w5$O;yzL87P`=&5zPF;n>Ff&Fm?g+F9-~6AOu#
zZqvivE?INaqTJ=YnNXChf;3C23!^2_$y9X0=k~cqJIWzXpCo0d7Br~LJh_apqNCn_
zScpkyXM;EVm9?5sN*12Oc$z;Scd<oahSr(CSRb^G02YD6Ri~=$N3LO8YGa=U>mk-6
zom!Z}(UI*mL?avp+eR|R?!IEAdmbGg)eIwv{3Ad%v`McNHdr8X^h@F-*dtI+;32W(
zuXv@_P~a#23;2B!x!&R2EIf<&k&pOm<6yPIS%@jQY)A}292^2vfZTr2qC}jq0l>l3
zym-X`>|i#rq%od|t!}nNP`(kKWGSZq1Q5MILpV66%`%(4%EvNw*8*22#>yX-EFR3+
zcz4{jAnLXilj{x0iJ=|fj{f~lLqnT+Z2u$+4JkVlu=-i47=<46c@H95OZ9pF;(}IU
zPkKyPMfZxS=KhM5sf~E-noHNNa_9FP0SO^m`sPzRgoZu&zbgx#J_&=}`gRL??K%Ov
ze^lCI{A(>mGljyCh!&$uK99d2mC{x}*%)_4&*kfuOUe4gKw_EPIiA6i5aU(9j?$s!
zNq}asSo9EI02PDUO3zDUY@g8I7lyXS#73Mvby`&3)3gax5|%4KX{~cnjycWU>%x!h
zOTUp?@^<X<Iz@D5;ztcEJO})yITWdk2TfP4NLpzH$5*5>FQxszTrbkbVVP8qyqFgQ
z=3Z|7_`{~D+>535&zFu9RKgy3q|3xv7SCUKP~`*Y4xD%5GY)o!{N26+n*K~uX=iHv
zmefOyrUVl+k>?y-h=e_(T-|v0<K}hD@GPtb2FXOtNTRXa3og%C{IWEg87NzBY=woe
z6;;8kE-t1Vqp(uV=Sd#sPrKF8xE;gQ05bpmWrb6H&rSlghk$ZDN}e!WXhRoER6R%X
zT6bNCA!-Ik%BrGab{QZS^UT12wU0l5Z9|3$e{prL4X9+$hiK0KCC!hhhDS;=k`f46
zn2sAhLqQ4vZNn0A3`JQZLpPFf;|NA21Q)PQ^*Zp^8_IrMDGkS3?NPp9b-j`nV&>vM
zwgs~t!H#;WwIlU50gF=Ev$0Xx3no|HvD={iO!;vd0ru8<)#&egZVJrCy8<drUbp*v
zD(|-n<Mirjdxi%8+D8n=;P^l<z8_z`%iLqB!G=q5U!Z|;x7jrZx))@>?9J4pvnzxO
zpV2b-K44dI{X-X$`wh4nwjyf*qGLyN%i4;d`{8Yg71{_D;S?ewCJoJ0GEtZkxkZ^Y
z>Y$z8Gif5=biuj&VyD@8l%*2ZBI1|fSk|(o-ytv{bQQos)F>(pM~YiMN!Ja8bPy_}
zC*}AfVJMg%4Lb>K5b1yX88R9hR}wn_3{s>U_H_4CgL6{|vYa|V6A?%naw^L>S%M`!
z)`?AIGs+UX%7QxTLs;)989HghQD!x3rGksfS0D=}{DD5OM-(@TFmt<j_mWbu&B(xY
z>y(w^#qQ*|iKk(0IipY^O9D~#XQ2NWWc&D7t)~f{OoK}EhHAe5aP?x;T~M`4vWN>l
zR%3JO#RAht71j{<dnh}H=7C$Y)D8M+dKdT0r{GswV{Kzmg2H^t;^iYJ9c#cIBoa3O
zkwb>$$mrEW&A~UswQ@)_b1PW5@?UB>TYIgE;bZ>|myj_-TFcOnlrpK?y<}_6P<JM?
ztdNnWJ^1wf*bC4G(@d}K%9jt-udoI_AT9|&&OmaD{hO(OkH&NAV>m|?m6L_8qiRuF
z%F!gVp<_W%BCaeRC0<3d)T5|Q#Jpsny^w*ais`?fTa#au(wTBlS4$s)icElmxl({u
zdiZ&%?XGIh{6>&y{qG-h02LiLL9#+@bz!}JtxI^{z`!B8cNsSMOpo!m<b&TvKx*Lk
zFa&wJs;=0Z>*ax$Dr;A-G7g>}m?gh)39_<K-QN5)WRuwTqlkB;ax>ahLEhLu*CZ1w
z*?-@;IJ_TdQ!GNUQwrgFHNlJKwOpt*@_Qmb=VZrD0e==Zy+iQ~xMeb#?&{MKs6zC9
zQBBa)S`71lP8O=q;I7oxac>$X@?OoFbEAWc3pI(A7}+C8In{TVA&GU@H$O&9dTQ&1
z<n3r)J0|H;bJ(M7d{mIr3PxANr^QRm_yGIP#_L_Wz$4dqcceo7NprxD^?;o-oo7qh
z+z5&_s37BtJ4nK$H_0O()<o~q8+6Q59krqwUB78__@N^2p=u*uy&8aJky}amF!_av
zJ|V_K>k+bAO!{PRpGRHQd5D=Mk;|b&8cJ+W#*9H|Rp*1+jvB2UgGM81SI!43on@&e
z(whVMG<IxBr+b*2QnrX#bqn01D$1tPFknfEq<bby(T7Mg`q>B-7eKtyP>-!4jXqI#
zkrZewJqQB{LPAwS<xLHtD2_2xzTqEYiymO%Gc>eZ8ziz3=FZ><GZm&aos=Kbn(Je7
z)bumVsL`F~3h~!ldBNQ%@M8OBkfoxAPMc@OXh_s1vIZo5RtylIdIH?c0B4dR3xtS{
z(HV2FMay*Go-vB}{FwXL9D*;gkN(PP*j_V)*14eHitUwnjl_+ccemMpj1ABrB~3J}
z0<nBBL!?;As=}t%WiwD<;PF|s&h0n*unlg7=Mbvt7mj$c`$#I6>5W_J!bPlzBFYcV
zk3A1xo=ex*AVpjb^9Vo{yZd{L8&Vw>W?|{<nlk_VLF)J!Z}S2Uk{R5X+#smuiq_eh
zk>N<6OGR3|!o8Nvt!9+Al1+LJPO)dEMgRj<uubMzKyxM{>jfNrY973_9Uxxa9dj<>
z&^JYFDo`TJG2nQ}p^M7fu3f=BmJEjzpLbAU|9fxpY*+0_jtMaf_qt{bosNo1+Ca6V
zMr#fH_j!EbMPEC7uvD2FNJJa!8yqYdN(L#ytgG#L7WRyPvo%1rkX$`H36LCjLqezZ
z<(B$TlA6n{I~mZ@ZjWnX#d$b13TFx8X`h#G_#R2a`4!pddJ7Yxag((oDUJn>aoo)M
zd2f^g&a_wLnti5=P;SPs5>Ldd?}|g+^*0P1w8p*5_+nm~6%@(5??EU+Jp5te;kJku
zFWAZYv&LYf|3VvMYMu|ftdXB@202_x_Zjn49oYiJClJFRz1V`kvM5xKEcmsPaQRTq
zphP;j;Lm$;<#KqIN!>o9xlKYGuMwGTuS7vNI;t`zarSAejrw4#hK~?jVfvvu3*-0Q
zHiNhindL|I!0g}<*;RmxAL|kVY9IbWYdPH-?lr(>h~s=XOL);6O!eo%H5h1wBQYX&
zk}yqwladnZj*N{Lg-k;E1ov0_)B>^tPf02HP%Dl_yOQ?n^F>_e%7i3(TIjX0mD-_)
z)YQk}X<8QTB+5?FKS(7LBbP+qbzll$!?~wqH)vV^-)GmA#Y(7$N4ZGGwkri9*C{nN
zDt|u8NQ;5fl3KjTb~{!~dX3~>eiXQsUWlEZgyW{+hh-S9XBds>pzEu`C1}eRH{Sc%
z>dWUS4irj}uUDo6Uy|FJFT9?l>{`~Iume9T|0>J&ZMe!9FV>0e^(ffd8v4Yeyz?<>
zWHa=!evp>WMkI{;$GfB`+6iUG5Lfm>oBQ?0@B$~ERzTg&ai<kTN%Z0cVNv~nE2MHu
z-<*=?i#Q=T?uWZ}Y<1^(%q8_{GyXucSpj|I@(HCmF^kzNsfC&^S5vzo3Bh!uNz=E@
zZsk?#)g(#3kU+2Ts)Xmlj1=1Bp7?jw<awP+DQt9H0zC<(T=R5pNPP>2mIkVhMzYoK
zUju9P)c(CZu6_KioAh~7FuCh8j32f^kFEtj-{qBY)YD+U$x?_CxpKCsQ7TWFOZ)BF
z7P!AE6cD<n&~{#+l0@*V?Q~v!$?!XC98hWw@`3EJ<D?jTHN%@=0X;K`MWd4<%{t|{
zZW?faY-8?oL_>(jXUtkYeq6k&h;HVRA*NV5z%)qZv|VSHfY&sJQe1&eG8xmcZabA~
zBot<td)?oDT6hS(eYco}9*jd53&sq+(pNJQST;{WMZl*E;~Aw#;YHE-b}Z}}BVJrp
zSunzJFR7ISITiAlDn{k3_+N?i@nXq7EN8=~Jf-23Fdv`KWYjy!e*#m=*D#gyudM4m
zg#URVr|L3Ti1=9GGI=q36S~nRUL&L8TxAJ-_bqq_>pmV)*5Fl3%BNlJ93E9FRv&Q0
ze{6&(O*w<*@i0gTKV{A-95V4s?hu6o_;(UI#|I|8|3-(9JBixbGqdoUK?=iq0>BQQ
zm0fIte6VPSQs{xVQ;lLc34^y|H^@f{bU{N)&x_fVQwBDKQ*<SO;DhzJGF#Kp^iA<q
z1lOj+nL|3Q!Trt~ir&XjIYT=V(y#QNk8nexO}@C>+_h2Dyj1Z)U42W=9Ef>6%NZ%d
z3(T`fn^Dz6`sr*lZYcLB)y0d`11Xw_-oQn5q#Fiy4nD>$lGAvwAFRwW&cnD=Vo<n*
zR)3j5u?aTW31jR}BgIxtgi(m=+!VXH7b0>B#TpANA!CZ({mN2^5u&~K+F)bG6nqS|
zuW-dcmf*9?{Wb<e<cIsbpJ>uD739%ih;o4zCh2K728O$Vcm{pdUT^(wB`j@DI%I`m
z>jXs$-1+UhWC~1lla34+h_)hA;a9;q*+pOV^5uCAd_L2zn2(M9Kse4?M_m|iLpH-E
zKDzV~85zT7_)HmF#t_FgB2Fk)db@wQzo_3!Dzn};ePGfDx`HFrnEDH`oLJKd^0{1r
z)q0VJ4MD6d3=bsYEXHoJh_R>6Fa&PAVttGY5<8E`p4n)sg3^5b6|2~Yh)w+7`f+dw
z$F`smh}aEN^q@7B_Qi&?4&;yl2_%>H)uMr-Gp?>_?iWA3HvGluO-K4uRrNK=AHR`t
zDVAV{8=&b?N+;%I=f`7V%^z+;6se)+NC6~G`?*-pK;wYCG5L!rH6(naSF+U+nMvm#
zo9m0~gcA?(?Q1a;A2za$u;Nq(_B|Qp7p?|qp8I^we#4$1(TY8J;Tp|5ZFz7on-;D*
zt2`HX^n0QD2rY{Te5JQPCRQC(J0NB>e3GO#dnH^rGjJEj2;oY461n|{a1An}t~vtL
z3rV%#86wWWV?tdXDJThM@(fv?7V?zmzX{hU;dY89T<(w#PuN$7^RrNYM+sv+#w&9o
zPXM+4EXm)%hibr7(1*U5)kk(I6=+06MpemVojC#oV+XXdU#*ii#~8r~o}oNYX?=N&
zDl0?q{!Wq*=4``e<S^DId&qEcN%rgH&0fUt0;QyEn5p&Qvln>h@#F!wnv(ZbeP&ks
zHY=G(yoB|&img?ay7@c-ZiyJ3Do%=Re*{Qo%cCC)hk*?6aA!Cr|90U1wj#F9gtGU^
z0*YX|X_BC5M2{tf=d;tfzE4{3aSfaN_d|)2UWdbk>}1!7X4iSry^ufWaqghnEusS%
zQkxF4;2-$IU%WMFD4XV~QOPT(BpOy6XQqhmgs}hW?R@n3&Fd-_{?GP~Na!!Raoji_
z`5xTms)gO(G)#|I7_iHfYZIzxIFf@-+*HL6ejP~%3XG*DTX3I@6n~6N_c?hj@FUM3
zC}?L3(B%+7CFO3PD-Xydj%UQ&dOCNQK=m2?Gc6zS>jg?jC)YzE!*L&Auo^%j4||QO
z75xXsW*VqnVHlG&#hANJWlDS|m47iw7ET68Govgl&Yu9o?iu229nO@X*GHaYng8Wr
znrvs{Ea#`ciZwE|DTmStepjzLuk?tZ`lr!22ZFz(@;lPs#eTeiO+Cl-ZRs1+n`1sN
za-K!c__8E{CX(ySz(o2Oi&j!;QX`=8)JVVH6_YSs>B<-!aV)lYJE{&H_`CWCUl^vC
z-7l-uK)<#Uo|k|=uoK@Ja0l}ViFLH#Zh~$uFziyU^>c<JdH<L{fRzW1cA^LYciFL`
zDWvV*Y+kfh-sYN{mxwZut!kl#gSn|{B?NefJ2WiM6$P7{Fu^-GBP@}U{)rh!K)4zj
z5Glv^;e?y33!d}pR6-wyo<USMJfLAL+5(=(A_X?kl@#`!BlDsE<U>Vtt?y5uWhZ2$
znOi_s%!0h5C+&`M;}QiPPJwS3_;??bmH>j?lG|BDr_|{`4gg1nivsrDa9%|YT`J9>
z-`$9eeEowd>FBXJZ;P5JxI^G;X{08d@%ls;y&UR#5@?{V!Rn?-;8$IMY3x{1_l`sq
zP%Z8o1x6J%p46JI-d}`GXt>y519MN7M&dtmpU?&vRPoZ7c}@_am#I0aErAObr#q*f
zQ(N9-&hC%IDX2>K=gRMPRK5^5n4Dp!!cV5<wdNP_{*W--U0sU3U#7gL1(AP7ji+Tt
z0QYl~pp!ny;Uz{q;G+P`4ogC74T`JNgG{U3vD1xWTb4>{Uk^fFhgJ7nt+}+u5S+y`
zDNzCvQW1BA5z!rn5&@STTLogW357z<6wB*9_cbDuK?36MKDS<2XRV`OF#>UO8ZMEj
zDBiiLdO*xh;(CPu0w33?|2T5esgt>vET-U))o166`Mm+Nr20#R2^q-g;${LLkV6%<
zDycM*zSV>wkqS5fkU+T#pYd9)R;;Jc<<8xT=|&g)+gRTUjgUg>QwCnq(sd0;wL8{V
zRlSK{gm;NrIdwg?cg2|D4xdukvN&H9*Z?KiUH-*g={m44`~s688VK4kmR0P;P%TI5
zfn2B=tFl<RO&|I_EzChlFRaMK`64KAt#c_eEByB<1%os_5AA(uSEo5rDlPh~XVKLP
z*ikp&_yB!+Nvm5VK5OL0Pxg&EPN?#o*43ACDKFfb;QQvrgYZmLPBz+#7qhLk_wIeq
zpob)sWtEPbVi|Qx9EB{d@{s2at$+ci(c2JI5h~Opjc%ZYji{=<+&HimY8S-(y}W_#
z7_pzum2^_ku;UXKnaX;H?*8+f^}tA_vz!<I3fYx3%@x@Xgj2&LCsd;0m4mXUR=xr6
z_Yl9RWh49zCl_Rm(o9<<0&-s<zO<iXdNy75(j+IV_;^%6f?~Xb3iV@0KULq9fP8WR
z7GOBVLK4QQJEy_2+}!zs3v@<N_y<|wPA>qA&PFKAEO7I1!RJOVpZomY{b5fAmWh+T
z5IjVGBWS-|x}v|%y<`lyI(Bg4=wg@eS6KM_FM9q!pdC&*3=)2#dFWvj(zAYFY!C(s
zb)eH96naPM(*Da@5kbEl6^iY;Cxf!#c8q>js*CtsLCnET4FK4TpXV8%gj<=lJsFU@
zHRhTs;5>;Fz4M_vX2vQE6jAsC;qlBdzV0K({NVc<YGA5ZyCeXChj;aqLuOka^(DA{
za)iOgpEY!2`$XtOhOMpc2*U{Ikyc9tRs^qfdJw&+J_~&$dUt}18Sl=tI$2g6u2;`h
zXSVThpfIcBrGeh%>%`os2D%)i_4teXnU6M1b+I{HuL6yR^$sG;c2~hn?3ZHxh{UMd
zMkj1IhMXf@J4HKI<Jw`7or=@gKoX)32L??9>`yqjNzOvK2qmCw`Qc}}8}K|b|G3s!
zTrNc(U+H+2;Mgq}h^6&(`4G0oz%EG0DV*O!*ZD%;Wo|_!AXBnsZ#=OF9~RPP=Qus-
z{XJ=Ypj9QPX?ljN)0wtNQe3rt{=)R$h(dVzV_M(ka>|)p2Lr1<@C2`dByNO^0q@f@
zr;n0hZuT1SRzj}EwH5_Py4&Da`_}Tv?^lD3fT&Gv;nIiv<1>cHPbGoT_J2=naEWjT
z-VPeA1$z#9#sBr<2d&`vvVbp8eMl1>`lus(2E;`$s(wJv23F2Dn3j|u%@QuckCJdP
zm{%1fLRbw%77P~QN5T@b$h?R}%~3AVNyAD#PqRq{;>b3px(BPo;$<%dnzJ>}@cOvv
z%BPvs%%tjz^p^aIrvN#ZLMW?GB8JjwW)jI&)2KH{L9PzR{7AKKqyUCBUO2c3B6Un2
z%ASYPmr;-Kp8b}=SDMln;sCsHd2+hVIm^8p6t+LW(-Fl`W-ZK3Z5{d*gwjpS6hex<
zjMSz-U|SD2W~trJ!{<^12CVzZq#PqRtL%-f@Y>XuUemU2WVtd{+3{?FUAynsAoe`b
z3)wZRWKM&eEU(1!$&Uih*~p1l7AJ<bbdBLYbSYw7UsA9w#HUI@WgHxXVBlpS4EmX}
z%5n_Nd`(mv5M6P<mI?z@MFAd9%kB*LKjKQsqUa`%HjXSJM{cV!AkDj<UcWPNV2&eD
zVCi4;Slb)do(QcZSm0=Her8t;icBki7f&nali&ET++fS*qCQJ?i$JDs)ag@6lxg!0
zsK<DWLDy&5Ma_zgC~pgpJHRa!t%;C}M2T(4D;J3V-Bi;K{uNaYadReZg~oy|;Cq_#
zu}2_;7Pd<O16Z-zT2#tY+viSc!SU&fKQ8P|rtNvbwm5kN!y2P7DB{g|Fnri8zXv9-
z3?_CBxf@I}J#B|#k&Zq!AD`DW^sI0CVyfG=Wk8c{m+c)lXUrQ=z#kUut`~=qv!q<(
zd~t;hxx$w-+6WS67BW{hX`E^;FPTt4QlD6v4>kY}7)(adPiYNRGjZf4Q71ZmZ}<pv
zpwp4d9j=phkOjpf2P6-2p7(uB!BO|WHoWlv2lPSBo!E0n%S@n^40ZLuG%mpZeS=i_
zuW_Cj4k5L%8)=*oTaf|-b;I(2I|>J$s5$k&0StPs)J@dL>aKqb(;nRXZMSD2GffHo
z4G2qd(Zia5j0~=3dXI*RMxnW9QL#QXzwT6+PzfP&7k})f6@IIwk=vIn=Mb9M&$@lu
z-8Xv^_eo#O#XVXJTOQ6g=dQRYr>1PT>S$}m7n;0x$Sbe1gqU~q&D;GhJEe#CIp#1=
z1C;%Jc<+k>+U7ip-B2=j=e4xyafpO6GATGu*<)l4aBg?#$zpKA49IsG8WZveqTDDg
zU5Z19)4V&cKDpw|t+8yoI3<{H!m6(gc>O1T#2s9NhK_;&X>zUDeDd;dNEfe+W>UOg
zx`TYiC8haXe?)!#A<G}ScJeeM9Qd=;MC%ko#}6N?n{>w_Ex_=;A&^!}etre7jaEe%
z_#)YYUWEs!iNa?f37`8qtsJKAZikf5<^tJNct;UJ#bk##?f=<7!M4JhWAF?fgqFF_
zT40BhVLWp8%zrF>5%rQqzUD1?pZ=tOPdn&dCVep^t>#ZBIU%=4>M=iw8-Ed2;eIZ|
zcRDPBNn*cD=6Y4M+v}(>Z%P|bJHPdh6eC|<1l!hx<0n1JZKJ1DAGrb67J0V7UOH$U
z(>5V*9rMH-WE<r?45uwzl(Iy$w-9qptje)h-uElRp2wi{<B3_r#m?Vmp%k^|h%d44
zpar}5x33h_74z)|V9CaGUru{{Dyp1-^bdCQf|xARCEqs<EP8Q`q;~#N`}!f|*WS_N
zBz5P{{h8vjh|h}ZBhft&<~btK8r~kpl;;rTLnN1?M<#;6QPJ6tp@m_qqNI=+`eR9%
zRc(#iX;CP{wUkA%CEN=CT!PY%yF}nt%{YD&T@n=hHuJCYdgu>qAKXCcu&|9^Co^cI
z2tNh?a|m~w2o-kG7bp3LDoq86WrVfFYKi~VJJzl;k^+gLN>p;Ke=kIEC#2r&{CCrH
zp1OFJ0ABQV4$u_k+`maaQ=XxNyfNH1FU*$~MfEYb!mQew`hZ;fk@O3+XO`pOlt%w4
zQ2i!4^%I#pb7w--3M`+Eeef4KS@xC-@=#x}j!w_2t}?0d#TZ*5nf7soNR<^V15ziC
zsJVoE;C<5}bj6~Fte5ttQR<~|$=WqzCrIa0GzMDlHAmgl^YU7ZDSGlP=5r%S$YW*t
zB_q-vHEFr;Ld{zOAM%(*PJFGG`jCDapDvsPtOQF6@w193DH~}CF|-ftrbFr5QOMOy
zOG%xTx=@EZ_Xaw&YI$hR<Kc`V&Y@m&^5e7%4-x;I>8wBvVgP2Cw3hsc!L*KYjCPc+
zJfaM(Q$_4Em*#zZK>SxSYu;r_$q({L<btbK{65du7A$=@%s4+LLrSz8gSK}OC!t<F
zS$o@RJ3F8%_kV!fHA_wVjB$~JLRp0ED)~By1$Npt-$e3N=0=E)MX`2OVG1jbxXm4&
zLTo)EG&*Q3ELmUTbN#8_@a(x*k(Rcz%$lRRdULL9g+H@B!lTM(HUlR!BE|%$^yY1T
z`nVla*q$@`Q5rGNMG+7d|Co^wZCO^SXb&m_)ylLCi-mC$-`>5OaD`$M2>{JcPs(z>
zWjdK$z_Xi}rF;y7Op6y=b6v$rVNDLPpbTrvB|*KM_Bv6k+{seU`sdMDA6yL5T*HvQ
zP1mH5$Elvk@-r=WrrD{F=C<)y36>~TqtN;y&E?P#5g)4*%^0T}^h*9f3^0B90;ll3
zPxaXEi9LE_X20PZ*gPJQfe4GYXzK8=yvHVxmJEBt4g-zW>;Pmig73;L0xr0np8Dr?
z`&Gy+!_I&+nbhCkt8*PN$c*|p>>N>B&H?aa3BFXQ<Dz@8h*t7Y+FxOy>irds3VN~P
zQ|ZI_@RPf#U^F*ugG1Fppnm76Q?bn{gG8E+J8n}y6DHiOcLPn*M=7(E&&RTG=|A;i
z4ljuS%9SjT%x(PEkjJ7PA^Xfz)SZLE0WS+slZ(e7o+{RZtLbYK7rE-C4x#)MK^fOf
zwE57&#;nv|1UZa%_nV19<Cyp~_L()&TEBQiBg7e5jp{&>Dt?!JCFK{t1GgGs6e|w0
z3upIi``Yq1&W@omHwBWu+@zVY%+MW#W0YyO008N`R}BJy?oU|FydA;cg!<i|9=gcD
zRZvomEhi)=Gd@Z7%oK6I9=L><hVm2B*fxyr15uGd|0)i63oQ<Ns8M&AWsr;qd!E!E
zP5nahOxp`0Vn&`IDuVElsoA6qk9QIkDt#@#WWnN$Acn8Fg<dX(d)2q^?dw{aD5+@h
z6li*_<K-LW;2YJ^LhMIq|7)b@*74@GInexV^KK=FDD=)?Dzz`@H4xEfQ=Jvh4KHF<
zc1~yJE9YXM0=EKaD24L$Fy^<q-+%ANW(d8s_l}<{Q)8x*WIowp<8_#cY<zgf#N&8d
zO8=|FIOTVJz5ZuA=A}|gNbG`<uUmC1GPKAJ@;meNts^z_2&MR^0K?os#UlTsfPwx+
z5UqrCo1w7jXy>HO1G?D-2Ky(v<gA+lg)r*<@jIJQj;}cE9QSP9r)}&0ow~_*t<&|I
zPhZ880c4Jnd^Ry_0e4d}A(;2Yd)-Pu4O3&T@rvDyh4tMtFl5$It4BX*7qsQLS1};2
zZV)vpd+oWcO-5iM-zE>2y5ZE$YAuERR5>*_23UH*5DCj2B1NJ{JIBk76o^ZaW9*y9
z#`Q$!BZ>o+A@b$A0e^DxZ(<d{p!HynNQQP>t6P6tK(X)kA~8p{qLJymsU_<?KvHN@
zI%b(c3@_)zP)~g3W+m#!mht^s@<f(GN@*n;<H7zbZUp~}OhEAuQl>!;l0FmdCX^F(
z9y<Y@@tDYp+>&~>->O+Et)o_{N^&~)2L4g`z;f?{16A`swy}HrXIf^0<VSC6{_4d3
zlgE6j(+iA_m!<L{V`b`bFCX*2shr@Tbw)F;_?Gv3M<$d3njKggMxNoXJ(T9K3_lJO
zFY*BZrHK=k1KCV1WnN+Q-XV*4@``kW>haV$ur-vaL)gztZZoeyac;w=5ax|(hZxyv
z4)KUtA~I%RYereqE?a;9?YKaLz>pp0Ee+elh7&6jCZCAUU_*pIIG$)l)z}tYAQ5od
zs1WP_yhr9pG+|hShgf6$!CvVM&F%+3GZzVyveQ|{LA*I6S~~%WRo+_=BUl=Aq#0k$
z(`2*cE_MFIhB2`9Z<#-qlP2#-$w>CQw;L->RuogGf5q_a7YCIWD88C!6IQTH!$Sk0
z1B)(cL_)T6^s{*rK-I*5kbaKMx>-$$3K-~@gP=A(p&WxAuwq9PN@SAUHY^c(cf%=U
zAC-IIEbk4T<8flq?8eRs<vxH)LYH|<3>pytMEx{0&Ca>1wvfIi2P;C{8fGh&f|5*R
zJ|!F4<$cV0u28cqK7`0nk*jpgb>>|i8FcveVXz}jk1mpvj}V5mHM)XLkMVe=jx_b7
zBy`RdpNoQ#k$ogN44TFTtcYB+BA~>tj>#DhXA!C;?|z*w*GC{xw{IMI$gd*|#4@?k
z#JH^uhtJg-8{wLKz_ZMV7`EAbe&`Skh5JT_pKXC4TosPB?!3KhT7qfuV0<GwpTN;)
zpyZ%~0V{<6Z%P$m(kA<?!`9a$ymMK@%j#N&)uoaJO6@X=lsWy8?XxCs(F<DN%*1KO
zB;WcCUCO)++Nu^gFSX}yWb2eU7{Y`Nmv@0<k@ZlMJFfqZ#ev*tgs_`hQrC05kBu1|
zDpm%3l%5oH{hTJc_%|sLtntqc0`3P5>y@~?kf#B2?207O+F!_ATQmqroTBM~&~j!h
z^1pz(*hDmNHW&OK9Ka^JwY=W7Nu`a~%Gsw^T4d`mm74u$cM5ILxB_-Xt&}dz9((j&
z3B>n+N#_Kr>_&a43$1!hyZdljktDQOv{{1g!|pjS#Cw>XZpm3~eJW+CF+4jI;c7;j
z{CS&@{!rsKcjluow1<q^v9&EmfbLfk9xS9y;!jSByv3chR55r1T?Ez40kES{4A#6j
zyIuqnu=Rq{?lHFV$`DvrmV=>^9RmU@=@b_!#wrrh8*4bsjoS>2FZg1p`zVWQq)rcE
zG-66SH68*=XLdQCK*t(`4B-_%I;D?Z*kzFE?Hn8Sm?HG>pGO`%p5jQ?#I}L;h(YPP
zaD{laNAv>f`V2fIkN1lOOXWX`>Lyktj9q&d=$y`axjM%*jmWexMcXpPN{!{uq6~oy
z3T~5BGgJ|ZKk$4IZNk6acB1CyNP^oh98cf9IJp5o86){{9ZO^xJVFS|lU#$&Ba}rW
z61ausmAQGkVZa?2^Gk*Of{B0gTO*g}`q%U+stBp4%PeB7hK{g2!eq%#hF1(ldCdMc
ztK|652l+(?ijBs2c4-S@W*HvC5;(EgC-;`#0q3IRw)8SKASr44V=KxGbR-CK3wbAD
zg_9k%cu1=bN7+dtG0CJlw6}nZYF_H|lLe!K|9ICQsWDh%$q)M$Hux)MRl+AL@pwp>
z_P8yP){zG!JprTV#YOR5htmK3n%cIbL<mSfff0wH7GGTE-8F1sdYkq}OhvzA7oz+z
zD0~DltNOGlEdMaV^b-W}n`F8W?#zqCx)`Oy&4}p&l~D(i9OUX(BhI_PX}i_4$+M*S
zC;j)_GYWj^BtB!}k7~UPM9N-tT&WSfoK-DOLU8?72=J|PDa7M$YUyyO=m7?naYaxe
zG68#cFG`3|wY0)Fp_MaF4XZYURUxC59DDtU>!7_^=J70PoVrs}q{Dg?vp4hQV7hA}
zGFPhzU!Gh(ofRt2uch;RAekr;Sjx5y)k@`$g~P6-#H9e^pH)VG(vO<a7uH(7!`y&m
zI-RQgYy;O;{HUtf<Q3_t*gIZ}o;g`OHsOuh;BU<jjNpgkj2kdl6uQ3}{K%LJ;Rj<x
zG|yejkUCt+<kFOU>F>KDQE{E28il&U^9h9&ewnDBRC2_`WqOD_hk0?#;pXz(=!y8?
zBM7Lo#C@owg)N`QV<hb2>*0};Zwn8!&w2P&=7z|GUolDR+&>`mE&j`I9*WUxh-obc
zgCYf@C-~e+^2bGDD)ETJvXQKbqqF|7Zb{+baQYH`zq{lSTlk?{*!jN#NeZ_0NPa?D
z8J6)42i3@+hH*N>poxL6*a<QwY~G6zAYMcvxuc4)B3xuBwjnIQX8oD#L9;wm4v#B;
z5imtZV^vB1r4=yqvaI1CPzsof$wZ_!Djan0^XG9pV}s6E+L6T862Df(fJhGPf9C(=
z|J7gZgUV=0D|W`TcqRYlG@rFT11Bw|BE`pHVj3$pGvMU%l;+Sbqh<*qV2ma<OG5r*
zQP1N;h6?aGaF4co0#}l>&Y;u~^I}=;ilwU5hJImZ`8QrRwh`zIFYG7biv@Ym{|R1E
z0QUv+Z0jdLls&B9R91a1y`^HvV1CMYr;CR$kcW;=Y%1f~!yYa3xg!Qw8Br>k5J@do
zntnwtqms<AZ(eQO>cKh@_TW&^haj1`tqBeZ;WW#RB|Z`8{(ZbK!=9dM2b%7RM3&~3
z)s}s096z|qX2Nr3cB#t(+V^UAjkXQ@Ws@nJ*;~z)RE6bEC@z_fOIxEX^p(bS`zlL(
zYSRAj=_|v$iR?0Sl{36!9Aq+4EtFXVcV{s>msB;H26N>^&PvBDY{{9l5aK^>@5A}o
z<{b?nU-wdxej+OH^c6&#xr1x@BGru`-_;}e5*UKPLoAa3INkfiU^W9{HW{i#S;Flr
zz)dvFL3Y3ZCrKXb(BXmPhNpmfH(@YEBc|lfN^@f&OeIGP#d#|Wk~%po#w^1QV(Hf_
z))Y<>B1aNh^sKdtI^FQ86zvf;7i$=V*&H7zCCIpOGpJm<mHx1+jl@RwDvNg{;8jwi
z_Pi$@uU>L&40)HCO|39J3`!k-c}7o2@*aicIe>cO-cP*zsX7u`L(h6pdFzjH?h|6M
zaz>DSKS8YcwA+{;Zehu3)g+dY(y}CI-;>c6YxEwh#e1aDbPhlOdUT+vcRX4hXkJ)3
z=TI>W&pf`J7L}BZgbn|`wZ-AFJQ3E@FA~td%4J-HXCV?aGFLIot;=HgI~w9yX<UCS
zE^Oh0lkDI5CFXe19hmK)r@`<Bhe%k;veWb}qFK`<u*LXrm9yXBQ7PHd%VS}-X92mA
z{fN21%|#%WbM-1;xF0B+no+|b1Ci7YLm$A}sewke#gRXwCZc$F07^}c(z;S%zGohE
z3Bh%3Nm=bC--H-ur`&CFxu(GbY@h?GM}`3{<BYuq%cCF8_q>g$B++l-hCd1+1p|uq
zshMFqokia&nXVj!7mZEH>zO%=ha1U)oJAyuhN@8kcD)Ng-d|W|mqP#o=~Za*Q03Go
zR=#n5h$Y&~#j2u>OVX^motCbZk364vt$JG);APZxR_{>*!RU^Z5z_C@qG^kv)niRg
zPLPSm^s1$=La#ktcW1&8!A*jPvh?#*z>PL2($6b;r+gl@b4{<n<6uhU$1-e}^rA8<
z(=eKk+j)_$5ov0!DYQtP{~U4)qQr0N`yZYgapA8~a2%k#;}D>;?}^s>u3c^{>=$z0
zz9j)31m;W>V-nO0GA}|q`l$&20p%e9P~I~+&nby@m^`yWDpDx@y*tC9(D02?A1~|_
z3khP6hKM3Z@_xKiPM!-ec{l~+-2!KITLNcKkINGS1Gohl3^Dq2QAnmRA=+;Tf)JHT
zaF*5$q}x#mMSOyU=mt}m7^glCS_WlO!rJN-MuFB**OB2%xHE_T!c%LfN0A_F0L;K{
z;c_(Am9dnA^&NXlvSjFv5StjIhB#xUPLat`Uq91s(Q~23Q1vpIJaen`h|)K1*7|_f
zsQhkmZ?gj|oN4R@7Vbzx7?)A+6$NvMP?muQPUi#e)m1Vs<l0X-%x0`@^sOk!Dr-Nm
zN_rdp6Q_L2oO!E)FE<f=zGS5>|0w-_-Kqi9lS3%*UfMVZ3`gW#f5yNw+-biZkSX5J
z6;yL%mKymOe+KqBDNt;ISnsCUWnh30`Fgd4$)F_{N_qqTX2@A;88GQne=Qzn4$|Vr
zqX*_1WGLQNCyN7!5H16TrlX(uL8yFe`)6y^SQESoS>VPCqNM`7IyUDG>v=|-{0>`+
z5rJT3UcB%J7;>Lodsj869m8OE8*fO)_byZvG$bdfu%}Q_K}}%jTZri|#Yq6H*(nJ>
zhm&%Xmj8(#QfWz`DkY>tRF~d3&3%*rRw!rofSIFsdRnP$Y_DlN2f#{=^C!>_jHMqC
zfhmh8@GMeA6BCSV4(6n@B6`aTkHD;z`FwJOWE<tSICYMstJP+09!aI_j8n^I;mHxO
zu!fOf!|jtXRw$Ja7#y=SZxCRu@sK=&OjM7c95SiGl{<vN&XIFE7DF)lhdLosIZNMI
zh||*BxDklM6vq{n&&VZ${|iaJjY7?0O14@BZ8Z}m71=ZdUA&p$V$V9A70MA@j3j+b
zaiPNj!^cR3!hSo&0}4&%bx?r<=N*(X`X{0#bWbX524YD38ke0-!d6$%_zH#~`vJ`3
z3V;F`A?%%lJWzZjm`6)pFMJ0i0Fn3@5Hbvbnh{|#Kt0+01d~Y%6B$fAWFl>lQO<fE
z)Q@+}4?W*hM*sx)GFb}0Y~2GJ<Zy{$=bYWxI7Mg~YvTaYTVNHjNGNqsT{RGeOBNhZ
zhr%P#GoBnkjla~&(S%SG1mb4AUkeKhUo0ykW~2QDuH-09(lAUpVxptV0;mkeEvef!
z%Onw5r<XWnh&p>LUkNRk0&c1XLph<CMal_yju?yiB{%`+3jLsDK{hF+k68c<SgE8J
zqrA-ZfwE+L9!Sexpmva^e|WX@&&J3-63)9aUTtZwV@p2D=K&xa9+_{h#3N(0kF?EU
z-7b@QYMFKC0-{2OJxpPub0GfWKo1TSmDM$^=}RLmCxPw9Zqm!UwV-`HsXh;sS#bl6
zfhe#3uqaLF1I4I3gxWWRFjYyX13Nh}m?eo6c6%yfn}NK5u=tg5LxiGILxGFD1LdLA
zi<)<#BxFSxQgZ~XbN8Pn@Ng$MNH(=Mjf*0i4b2se_SLj-tGC`ajk|smF^wyl%&HrL
zN_Lk}71R-uzE2b`7`?zq&sPu<Bz{{MZU#dz-HA`@chJ$BEYKecHZ>Zk7$!}4(qyIZ
zZU^h1h#o_SbUvV~u-zjTyw%uIgUhmS5Pnc?QyH+{aTKAw^wOykxh>$$r04)g-?T3%
z6a-WarQnN&OmeS>OY2N^Ptz6Dkj&B@M*a2cWSVc)rQO_x>uTx#C?lTQ)D+|2WJTnn
z)Q(bjJmQkcGbdUp%t7=Ce??1scI(8AKhUg75qBuFi=gOno1~!A2R%~=$}B9R2*m-=
zrenT-<q?l~dj@db`)81gfeOPeMm)$wQyK%3HvcpNSV!=cu}?kZoirWkinkORE%3HU
zd7pUd<vis3!T@WYoOnPQsi73Y)yF-?LPyjA<Pc5y7flA+7{~3?g}RcGL=rR!6PUoa
zgUnH-0Pw-chIQ%TkxF<pnLPAq;S7r`EDY;dtSu=4Lj@>PhDv`+;-5aTL*~~jUy}=R
gNSk|?K~q6Atcc{N!e|$Mjnf{4IYZgdiPTw0nEkBre*gdg

diff --git a/static/fonts/roboto-v18-latin-500italic.svg b/static/fonts/roboto-v18-latin-500italic.svg
deleted file mode 100644
index bed50dcf2e..0000000000
--- a/static/fonts/roboto-v18-latin-500italic.svg
+++ /dev/null
@@ -1,326 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1153" ><font-face
-    font-family="Roboto Medium"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="505" />
-<glyph unicode="!" horiz-adv-x="543" d="M342 429H138L294 1456H544L342 429ZM55 111Q55 170 92 208T188 248Q245 250 284 213T323 119T286 25T190 -15Q135 -17 95 18T55 111Z" />
-<glyph unicode="&quot;" horiz-adv-x="654" d="M391 1388L299 1012H161L244 1536H414L391 1388ZM683 1388L591 1012H453L536 1536H706L683 1388Z" />
-<glyph unicode="#" horiz-adv-x="1223" d="M662 410H451L306 0H136L281 410H59L87 568H337L448 881H215L243 1040H504L653 1456H822L673 1040H885L1033 1456H1202L1054 1040H1253L1225 881H997L887 568H1099L1071 410H830L685 0H516L662 410ZM507 568H718L829
-881H618L507 568Z" />
-<glyph unicode="$" horiz-adv-x="1139" d="M766 387Q775 463 735 519T577 625T387 729Q217 858 231 1065Q242 1235 356 1343T650 1473L690 1691H847L806 1469Q954 1438 1029 1317T1095 1005H859Q868 1132 826 1202T696 1276Q604 1278 542 1222T466 1068Q457 992
-497 938T653 833T832 737Q1016 607 1001 389Q990 216 872 110T565 -16L529 -211H373L410 -15Q242 11 154 132T75 444L312 443Q305 316 356 249T505 179Q610 177 682 234T766 387Z" />
-<glyph unicode="%" horiz-adv-x="1469" d="M527 1478Q658 1474 731 1389T796 1176L790 1099Q775 962 683 879T460 800Q334 802 258 887T189 1099L196 1173Q209 1310 300 1395T527 1478ZM356 1097Q349 1033 377 990T463 944Q523 942 567 985T622 1099L631 1177Q638
-1242 610 1286T523 1332Q462 1334 417 1288T364 1167L356 1097ZM1065 657Q1195 653 1268 568T1334 357L1328 279Q1314 144 1221 60T998 -21Q874 -19 797 64T726 279L731 344Q742 486 834 572T1065 657ZM893 277Q888 208 917 167T1001 123Q1062 121 1104 162T1159
-279L1169 358Q1174 430 1145 470T1061 512Q997 514 953 468T901 349L893 277ZM374 111L254 190L1133 1317L1253 1238L374 111Z" />
-<glyph unicode="&amp;" horiz-adv-x="1280" d="M56 385Q68 567 266 707L380 782Q319 894 299 964T283 1098Q295 1268 409 1374T695 1476Q788 1473 863 1432T978 1319T1013 1159Q1008 1069 956 991T785 830L664 750L878 426Q961 550 982 694L1185 695Q1161 423
-1001 250L1162 0H904L843 95Q667 -23 468 -19Q281 -17 163 94T56 385ZM484 175Q552 174 612 200T728 261L485 630L451 608Q314 512 297 393Q285 297 337 237T484 175ZM501 1105Q491 1036 539 944L562 902L661 964Q790 1046 802 1152Q808 1209 772 1245T681 1282Q609
-1282 559 1230T501 1105Z" />
-<glyph unicode="&apos;" horiz-adv-x="346" d="M385 1399L301 1020H144L225 1536H406L385 1399Z" />
-<glyph unicode="(" horiz-adv-x="703" d="M128 588Q181 953 348 1237T764 1632L800 1488Q458 1224 356 660Q319 454 318 263Q316 60 366 -91T514 -330L458 -463Q287 -357 196 -133T112 389Q114 485 126 571L128 588Z" />
-<glyph unicode=")" horiz-adv-x="710" d="M-71 -465L-108 -327Q104 -162 224 117T370 780L374 904Q374 1325 178 1497L235 1631Q350 1561 431 1435T552 1134T588 779Q579 500 490 239T255 -203T-71 -465Z" />
-<glyph unicode="*" horiz-adv-x="888" d="M383 977L103 1065L182 1226L461 1107L506 1456H682L607 1112L909 1224L933 1044L614 956L765 685L616 587L492 876L272 600L138 710L383 977Z" />
-<glyph unicode="+" horiz-adv-x="1117" d="M701 801H1070L1031 579H663L588 146H357L433 579H61L101 801H471L541 1206H772L701 801Z" />
-<glyph unicode="," horiz-adv-x="447" d="M8 -328L-119 -248Q-1 -90 26 29L63 235H276L250 74Q210 -173 8 -328Z" />
-<glyph unicode="-" horiz-adv-x="662" d="M565 521H54L89 717H600L565 521Z" />
-<glyph unicode="." horiz-adv-x="565" d="M48 117Q48 178 86 216T185 257Q244 259 283 222T323 125Q323 67 285 29T186 -12Q127 -14 88 23T48 117Z" />
-<glyph unicode="/" horiz-adv-x="796" d="M67 -125H-129L701 1456H898L67 -125Z" />
-<glyph unicode="0" horiz-adv-x="1139" d="M479 -20Q290 -16 193 110T99 465Q100 539 109 613L148 873Q197 1179 337 1330T699 1476Q887 1472 984 1348T1079 996Q1078 921 1069 848L1030 595Q979 282 841 129T479 -20ZM838 887Q851 1001 851 1049Q846 1275 686
-1282Q564 1287 490 1193T386 894L340 577Q328 474 329 414Q329 180 493 173Q719 160 784 526L838 887Z" />
-<glyph unicode="1" horiz-adv-x="1139" d="M641 0H405L607 1164L239 1042L276 1257L852 1461H888L641 0Z" />
-<glyph unicode="2" horiz-adv-x="1139" d="M962 0H11L39 177L644 758Q813 923 830 1057Q843 1152 798 1215T663 1283Q552 1287 476 1214T384 1013L148 1012Q158 1146 229 1253T419 1419T676 1476Q866 1472 976 1366T1074 1082Q1057 878 829 651L767 590L346 194H993L962
-0Z" />
-<glyph unicode="3" horiz-adv-x="1139" d="M416 839L545 838Q662 838 740 901T829 1069Q840 1168 793 1224T653 1283Q559 1285 490 1228T407 1078L170 1077Q179 1194 247 1286T424 1427T661 1476Q856 1472 968 1363T1068 1069Q1061 969 994 886T800 742Q973 662
-984 464V416Q971 220 824 98T462 -20Q339 -19 241 32T91 177T42 391L278 390Q274 294 325 236T476 174Q585 170 661 238T750 416Q762 527 705 585T539 646L386 647L416 839Z" />
-<glyph unicode="4" horiz-adv-x="1139" d="M890 519H1066L1032 324H857L800 0H563L619 324H9L30 484L800 1456H1053L890 519ZM292 519H653L766 1130L742 1096L292 519Z" />
-<glyph unicode="5" horiz-adv-x="1139" d="M186 725L377 1456H1139L1106 1246H545L442 897Q544 955 664 955Q849 953 948 819T1030 472Q1012 253 866 114T505 -21Q323 -17 210 96T90 394H317Q324 292 374 235T516 175Q627 172 702 256T793 480Q805 604 752 680T594
-759Q530 761 480 739T381 676L186 725Z" />
-<glyph unicode="6" horiz-adv-x="1139" d="M972 1464L952 1262L939 1263Q747 1265 606 1160T385 840Q517 968 686 964Q803 962 885 899T1005 725T1031 484Q1019 342 948 224T763 41T512 -21Q339 -17 231 102T108 415Q99 522 131 701Q196 1058 408 1261T949 1464H972ZM617
-769Q537 771 467 727T349 600Q338 499 339 456Q339 328 386 253T521 176Q629 173 704 257T795 477Q808 604 760 685T617 769Z" />
-<glyph unicode="7" horiz-adv-x="1139" d="M1157 1309L393 0H134L895 1261H169L200 1456H1180L1157 1309Z" />
-<glyph unicode="8" horiz-adv-x="1139" d="M1084 1080Q1066 863 828 744Q917 687 960 599T996 405Q983 213 839 95T482 -20Q288 -16 174 95T72 388Q90 631 363 756Q288 810 252 890T222 1063Q236 1251 370 1365T703 1476Q822 1473 912 1423T1048 1283T1084 1080ZM762
-417Q773 518 723 583T579 651Q473 653 398 582T311 401Q300 298 351 237T495 173Q603 171 676 240T762 417ZM846 1072Q855 1162 813 1221T687 1282Q596 1284 532 1220T456 1054Q447 960 490 903T614 844Q706 842 770 907T846 1072Z" />
-<glyph unicode="9" horiz-adv-x="1139" d="M247 194Q459 192 592 296T791 610Q655 478 503 480Q390 482 307 541T183 713T154 961Q167 1106 238 1227T424 1414T673 1476Q790 1473 876 1417T1011 1256T1066 1022Q1071 915 1043 755Q979 385 769 189T235 -7H213L232
-195L247 194ZM562 669Q636 667 702 709T816 827L829 924L833 994Q836 1124 792 1200T660 1281Q535 1285 455 1161T390 869Q397 780 442 726T562 669Z" />
-<glyph unicode=":" horiz-adv-x="537" d="M299 117Q299 178 337 216T436 257Q495 259 534 222T574 125Q574 67 536 29T437 -12Q378 -14 339 23T299 117ZM189 966Q189 1027 227 1065T326 1106Q385 1108 424 1071T464 974Q464 916 426 878T327 837Q268 835 229 872T189
-966Z" />
-<glyph unicode=";" horiz-adv-x="482" d="M169 966Q169 1027 207 1065T306 1106Q365 1108 404 1071T444 974Q444 916 406 878T307 837Q248 835 209 872T169 966ZM25 -328L-102 -248Q16 -90 43 29L80 235H293L267 74Q227 -173 25 -328Z" />
-<glyph unicode="&lt;" horiz-adv-x="1020" d="M306 626L840 402L799 170L50 543L84 736L963 1108L918 854L306 626Z" />
-<glyph unicode="=" horiz-adv-x="1122" d="M1009 780H171L207 982H1044L1009 780ZM935 356H98L133 557H971L935 356Z" />
-<glyph unicode="&gt;" horiz-adv-x="1044" d="M731 641L170 868L210 1097L985 724L951 531L47 159L91 409L731 641Z" />
-<glyph unicode="?" horiz-adv-x="976" d="M319 427Q331 552 377 640T525 814T658 936Q752 1044 734 1162Q726 1214 690 1244T597 1276Q515 1278 459 1229T385 1094L149 1093Q166 1271 294 1376T612 1477Q789 1473 890 1370T977 1097Q962 920 773 757L651 655Q557
-569 537 428L319 427ZM239 113Q239 172 276 210T372 250Q428 252 467 215T506 121Q506 60 467 24T373 -13Q317 -15 278 20T239 113Z" />
-<glyph unicode="@" horiz-adv-x="1787" d="M1190 -21Q1113 -19 1054 18T975 133Q844 -23 705 -20Q591 -18 530 72T478 323Q485 484 564 651T757 906T1002 991Q1087 989 1153 961T1287 884L1153 317L1145 257Q1138 194 1158 158T1225 119Q1314 115 1382 187T1494
-396T1544 706Q1548 840 1519 947T1429 1125Q1304 1271 1062 1275Q895 1278 748 1206T484 989T300 658T226 281Q218 108 270 -26T432 -229T701 -300Q867 -302 1040 -227L1067 -367Q929 -453 700 -453Q505 -452 360 -370T136 -132T54 235Q50 456 129 680T352 1077T679
-1338T1064 1424Q1256 1421 1397 1340T1615 1104T1696 748Q1700 537 1636 354T1456 73T1190 -21ZM671 307Q666 145 772 142Q828 139 887 192T976 322L1105 819Q1060 836 1019 838Q889 843 801 718T676 363L671 307Z" />
-<glyph unicode="A" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543Z" />
-<glyph unicode="B" horiz-adv-x="1263" d="M39 0L292 1456L739 1455Q975 1454 1093 1353T1198 1071Q1180 859 939 752Q1029 720 1078 635T1120 432Q1106 232 960 116T573 0H39ZM400 657L321 202L580 201Q697 201 779 263T876 433Q890 536 845 594T696 656L400
-657ZM432 843L659 842Q781 842 858 900T949 1057Q974 1244 760 1251L503 1252L432 843Z" />
-<glyph unicode="C" horiz-adv-x="1307" d="M1194 475Q1157 247 989 112T580 -20Q441 -17 337 46T173 229T107 502Q101 616 135 812T265 1165T502 1400T815 1476Q1032 1472 1158 1340T1293 974H1048Q1043 1130 983 1199T803 1272Q640 1277 530 1155T382 800L362
-667L353 565Q345 462 367 372T447 234T592 183Q871 172 950 473L1194 475Z" />
-<glyph unicode="D" horiz-adv-x="1308" d="M39 0L291 1456L685 1455Q867 1455 998 1365T1189 1115T1225 763L1214 684Q1184 483 1082 328T817 86T461 0H39ZM503 1252L321 202L467 201Q665 201 795 326T963 673Q989 825 982 938Q973 1083 898 1165T688 1251L503 1252Z" />
-<glyph unicode="E" horiz-adv-x="1133" d="M979 650H399L321 202H999L964 0H39L291 1456H1210L1174 1252H503L433 850H1014L979 650Z" />
-<glyph unicode="F" horiz-adv-x="1101" d="M961 617H393L286 0H39L291 1456H1191L1155 1252H503L428 819H997L961 617Z" />
-<glyph unicode="G" horiz-adv-x="1362" d="M1168 189Q1088 85 942 32T616 -20Q472 -19 362 44T188 229T114 506Q107 626 139 812T253 1142T454 1369Q614 1480 820 1476Q1039 1472 1162 1350T1302 1008L1063 1009Q1041 1266 814 1273Q644 1278 535 1154T385 794Q362
-657 360 570Q354 391 425 288T634 183Q809 179 922 270L976 555H684L718 747H1253L1168 189Z" />
-<glyph unicode="H" horiz-adv-x="1421" d="M1162 0H916L1028 647H398L286 0H39L292 1456H539L433 850H1063L1168 1456H1415L1162 0Z" />
-<glyph unicode="I" horiz-adv-x="571" d="M299 0H53L306 1456H552L299 0Z" />
-<glyph unicode="J" horiz-adv-x="1113" d="M875 1456H1121L947 435Q916 223 774 99T422 -21Q218 -17 111 100T13 416L259 415Q245 186 437 182Q537 178 608 245T701 434L875 1456Z" />
-<glyph unicode="K" horiz-adv-x="1262" d="M563 627L363 444L286 0H39L292 1456H539L422 787L575 946L1077 1456H1393L745 799L1154 0H878L563 627Z" />
-<glyph unicode="L" horiz-adv-x="1085" d="M321 202H963L927 0H39L292 1456H539L321 202Z" />
-<glyph unicode="M" horiz-adv-x="1749" d="M606 1456L819 342L1418 1456H1742L1490 0H1244L1329 493L1458 1100L858 0H680L457 1133L366 467L285 0H39L292 1456H606Z" />
-<glyph unicode="N" horiz-adv-x="1420" d="M1161 0H922L467 1043L286 0H39L292 1456H531L986 409L1168 1456H1414L1161 0Z" />
-<glyph unicode="O" horiz-adv-x="1382" d="M599 -20Q457 -17 350 48T182 236T114 517Q107 642 136 809T241 1113T422 1338Q595 1480 822 1476Q1038 1472 1166 1327T1307 935Q1313 811 1285 651T1187 356T1014 131Q836 -25 599 -20ZM1054 767L1063 873Q1069 982
-1044 1074T960 1215T809 1267Q683 1271 586 1196T428 968T357 584Q347 401 413 296T611 187Q784 182 896 317T1044 697L1054 767Z" />
-<glyph unicode="P" horiz-adv-x="1280" d="M380 541L286 0H39L292 1456L796 1455Q1024 1455 1154 1331T1267 1001Q1249 789 1094 665T688 540L380 541ZM415 744L698 742Q832 742 917 810T1020 1000Q1034 1111 979 1178T811 1251L503 1252L415 744Z" />
-<glyph unicode="Q" horiz-adv-x="1382" d="M939 86L1147 -114L973 -252L717 -8Q637 -20 590 -19Q377 -17 248 129T106 521Q100 646 129 810T237 1118T431 1350Q599 1480 815 1476Q959 1473 1066 1408T1234 1218T1302 936Q1306 850 1296 764L1284 677Q1222 275
-939 86ZM1049 768L1058 874Q1064 984 1039 1076T953 1216T802 1267Q606 1273 486 1093T351 584Q345 473 371 380T456 239T605 187Q770 180 883 308T1036 679L1049 768Z" />
-<glyph unicode="R" horiz-adv-x="1250" d="M662 561H384L286 0H39L292 1456L751 1455Q988 1455 1114 1341T1223 1024Q1212 883 1129 780T896 617L1111 15L1110 0H848L662 561ZM418 764L657 762Q786 762 872 829T974 1013Q989 1126 934 1186T767 1251L503 1252L418 764Z" />
-<glyph unicode="S" horiz-adv-x="1209" d="M844 382Q866 526 687 596L606 626Q380 705 285 813T199 1064Q207 1188 283 1282T485 1428T751 1476Q887 1473 993 1417T1155 1260T1207 1030L961 1031Q968 1145 911 1208T737 1274Q620 1276 540 1219T445 1065Q425 938
-615 865L690 838Q919 756 1010 646T1090 384Q1080 261 1009 170T813 28T536 -20Q393 -19 277 40T98 203T41 441L288 440Q280 316 349 249T547 180Q667 178 747 231T844 382Z" />
-<glyph unicode="T" horiz-adv-x="1216" d="M1278 1252H838L621 0H375L593 1252H156L192 1456H1314L1278 1252Z" />
-<glyph unicode="U" horiz-adv-x="1305" d="M1327 1456L1162 483Q1128 250 963 112T562 -22Q344 -18 218 110T102 444L105 482L270 1456H516L351 481Q333 342 392 264T574 182Q709 178 799 255T914 476L1081 1456H1327Z" />
-<glyph unicode="V" horiz-adv-x="1295" d="M593 319L1129 1456H1409L673 0H434L155 1456H417L593 319Z" />
-<glyph unicode="W" horiz-adv-x="1758" d="M1211 362L1599 1456H1850L1296 0H1060L959 1060L519 0H281L183 1456H422L470 367L909 1456H1116L1211 362Z" />
-<glyph unicode="X" horiz-adv-x="1267" d="M675 931L1053 1456H1351L802 723L1120 0H846L626 533L238 0H-61L500 745L189 1456H461L675 931Z" />
-<glyph unicode="Y" horiz-adv-x="1221" d="M627 768L1071 1456H1357L715 523L624 0H376L472 549L161 1456H422L627 768Z" />
-<glyph unicode="Z" horiz-adv-x="1206" d="M314 202H1062L1026 0H-27L4 176L913 1252H195L231 1456H1255L1225 1284L314 202Z" />
-<glyph unicode="[" horiz-adv-x="554" d="M663 1488H504L250 -135H410L380 -324H-17L296 1678H693L663 1488Z" />
-<glyph unicode="\" horiz-adv-x="840" d="M172 1456H396L712 -125H488L172 1456Z" />
-<glyph unicode="]" horiz-adv-x="554" d="M180 1678H579L266 -324H-134L-104 -135H58L312 1488H149L180 1678Z" />
-<glyph unicode="^" horiz-adv-x="859" d="M532 1188L279 729H68L484 1456H651L814 729H625L532 1188Z" />
-<glyph unicode="_" horiz-adv-x="906" d="M756 -191H-135L-101 0H790L756 -191Z" />
-<glyph unicode="`" horiz-adv-x="650" d="M598 1233H417L202 1536H456L598 1233Z" />
-<glyph unicode="a" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174Z" />
-<glyph unicode="b" horiz-adv-x="1128" d="M1031 536Q1011 371 943 238T773 40T544 -21Q363 -17 271 118L233 0H16L282 1536H520L412 977Q533 1106 699 1102Q856 1098 944 987T1038 683Q1039 623 1031 536ZM803 670Q803 779 758 840T628 904Q485 908 386 766L308
-318Q352 182 497 177Q617 174 694 269T794 537Q802 622 803 670Z" />
-<glyph unicode="c" horiz-adv-x="1050" d="M488 173Q573 171 638 222T722 357L946 358Q935 251 869 163T698 26T481 -20Q342 -18 244 52T101 245T71 521L74 556Q91 713 165 840T358 1037T620 1102Q796 1098 901 986T1006 693H784Q784 786 739 845T607 908Q468
-912 388 790T302 446Q295 177 488 173Z" />
-<glyph unicode="d" horiz-adv-x="1131" d="M68 542Q88 709 158 842T331 1040T560 1103Q725 1099 818 980L922 1536H1160L893 0H681L697 112Q571 -25 401 -21Q250 -19 160 95T62 400Q59 462 65 521L68 542ZM298 449Q291 325 336 252T472 177Q609 173 709 310L790
-775Q743 900 608 904Q472 908 389 784T298 449Z" />
-<glyph unicode="e" horiz-adv-x="1076" d="M506 -20Q365 -17 262 51T109 237T71 500L74 541Q92 706 170 837T366 1037T620 1102Q823 1098 924 951T1001 568L987 464H306Q297 335 358 256T526 175Q679 170 808 308L928 182Q860 85 749 32T506 -20ZM607 908Q419
-914 325 642L774 641L778 662Q785 708 779 752Q768 823 723 864T607 908Z" />
-<glyph unicode="f" horiz-adv-x="714" d="M99 0L256 902H95L127 1082H287L303 1198Q329 1366 438 1464T721 1560Q782 1558 862 1540L836 1350Q792 1360 747 1360Q662 1361 608 1314T539 1184L524 1082H738L706 902H493L336 0H99Z" />
-<glyph unicode="g" horiz-adv-x="1136" d="M70 542Q89 704 157 835T330 1035T568 1103Q746 1099 837 972L874 1083L1090 1082L911 30Q881 -182 733 -307T371 -427Q257 -425 155 -375T-9 -243L117 -100Q212 -231 365 -235Q481 -239 564 -172T676 21L693 97Q568
--24 409 -20Q257 -18 166 95T65 399Q62 459 70 542ZM305 521Q299 470 301 411Q303 305 349 243T480 178Q615 173 716 303L801 781Q749 900 616 904Q496 907 414 811T307 542L305 521Z" />
-<glyph unicode="h" horiz-adv-x="1113" d="M407 963Q542 1105 714 1101Q868 1099 942 992T998 696L882 0H645L763 699Q768 742 765 779Q752 901 621 904Q489 906 385 774L250 0H13L279 1536H517L407 963Z" />
-<glyph unicode="i" horiz-adv-x="517" d="M268 0H31L219 1082H456L268 0ZM253 1359Q253 1414 289 1453T386 1494Q444 1496 482 1459T521 1367Q521 1310 484 1273T388 1234Q331 1232 292 1268T253 1359Z" />
-<glyph unicode="j" horiz-adv-x="508" d="M451 1082L252 -95Q230 -263 136 -352T-109 -440Q-173 -438 -244 -421L-224 -229Q-178 -240 -140 -240Q-13 -240 13 -91L214 1082H451ZM243 1359Q243 1417 279 1454T375 1494Q433 1496 471 1460T510 1367Q510 1310 473
-1273T377 1234Q317 1234 280 1269T243 1359Z" />
-<glyph unicode="k" horiz-adv-x="1047" d="M447 462L313 343L254 0H17L283 1536H520L368 664L451 750L795 1082H1098L618 620L934 0H677L447 462Z" />
-<glyph unicode="l" horiz-adv-x="517" d="M268 0H31L298 1536H535L268 0Z" />
-<glyph unicode="m" horiz-adv-x="1739" d="M425 1083L404 968Q538 1106 724 1102Q826 1100 893 1055T985 936Q1135 1106 1329 1102Q1487 1098 1563 994T1621 701L1504 0H1267L1385 703Q1390 747 1386 784Q1370 901 1238 904Q1091 908 1006 743L1003 721L879 0H641L759
-700Q764 743 760 780Q744 901 612 904Q479 906 390 785L253 0H16L203 1082L425 1083Z" />
-<glyph unicode="n" horiz-adv-x="1115" d="M423 1083L399 956Q538 1106 720 1102Q872 1099 945 994T999 699L882 0H645L763 702Q768 745 764 782Q751 901 622 904Q487 906 385 771L250 0H13L200 1082L423 1083Z" />
-<glyph unicode="o" horiz-adv-x="1141" d="M73 545Q90 704 166 834T363 1035T629 1102Q768 1100 869 1028T1016 831T1049 553Q1033 381 956 249T758 47T490 -20Q352 -18 252 53T104 249T70 524L73 545ZM306 408Q311 303 361 240T502 173Q624 170 706 267T810 532L816
-630Q816 758 765 831T617 908Q465 912 377 759Q324 666 310 545Q302 461 306 408Z" />
-<glyph unicode="p" horiz-adv-x="1128" d="M1029 537Q1009 375 943 243T774 44T544 -21Q375 -17 278 99L181 -416H-57L203 1082L420 1083L402 971Q526 1106 697 1102Q800 1101 876 1050T992 900T1036 682Q1037 621 1029 537ZM795 558L800 631Q803 760 758 831T621
-904Q487 908 389 781L305 298Q350 177 488 173Q606 170 686 265T795 558Z" />
-<glyph unicode="q" horiz-adv-x="1138" d="M68 543Q88 714 159 846T333 1042T563 1103Q735 1099 827 974L866 1083L1080 1082L820 -416H583L681 93Q560 -24 404 -20Q249 -18 159 95T62 399Q59 462 65 522L68 543ZM303 522L298 450Q295 315 340 246T474 174Q549
-171 604 205T705 296L793 790Q741 904 611 908Q497 911 418 822T310 569L303 522Z" />
-<glyph unicode="r" horiz-adv-x="708" d="M724 860Q678 870 631 870Q475 874 383 741L253 0H16L203 1082L428 1083L404 960Q515 1107 660 1104Q693 1104 751 1089L724 860Z" />
-<glyph unicode="s" horiz-adv-x="1035" d="M663 300Q680 399 535 437T336 499Q130 587 137 767Q142 913 269 1008T575 1102Q747 1100 855 1005T962 756L727 757Q729 832 686 874T568 919Q489 919 433 880T367 778Q353 687 495 652T705 586Q903 499 896 314Q891
-211 829 135T661 18T438 -20Q261 -18 145 83T30 342L259 341Q261 254 311 209T448 163Q536 163 594 199T663 300Z" />
-<glyph unicode="t" horiz-adv-x="671" d="M547 1345L501 1082H686L655 902H469L367 296Q364 271 366 251Q372 186 446 183Q483 183 530 192L514 2Q440 -19 365 -19Q241 -17 180 65T131 284L232 902H59L91 1082H263L309 1345H547Z" />
-<glyph unicode="u" horiz-adv-x="1114" d="M685 107Q562 -24 377 -20Q272 -18 203 32T104 171T86 382L203 1082H440L322 379Q318 342 321 307Q331 183 446 178Q603 172 700 304L836 1082H1073L886 0H664L685 107Z" />
-<glyph unicode="v" horiz-adv-x="993" d="M442 311L784 1082H1037L504 0H298L100 1082H338L442 311Z" />
-<glyph unicode="w" horiz-adv-x="1486" d="M993 337L1290 1082H1528L1054 0H859L764 740L414 0H218L119 1082H343L384 348L726 1082H905L993 337Z" />
-<glyph unicode="x" horiz-adv-x="1009" d="M511 728L766 1082H1043L629 538L870 0H622L471 369L205 0H-71L356 560L123 1082H371L511 728Z" />
-<glyph unicode="y" horiz-adv-x="977" d="M440 350L780 1082H1042L401 -187Q267 -443 48 -440Q-6 -438 -75 -420L-55 -232L-12 -236Q74 -239 130 -204T224 -93L281 19L100 1082H346L440 350Z" />
-<glyph unicode="z" horiz-adv-x="1009" d="M312 194H862L828 0H-25L5 171L653 886H138L173 1082H996L967 917L312 194Z" />
-<glyph unicode="{" horiz-adv-x="676" d="M461 -359Q303 -308 225 -188T166 106L194 310Q199 355 195 394Q182 516 48 527L65 705Q264 715 295 936L326 1160Q383 1496 738 1600L773 1457Q580 1387 545 1125L516 907Q483 710 298 614Q371 559 398 478T416 309L386
-79L383 8Q380 -162 511 -220L461 -359Z" />
-<glyph unicode="|" horiz-adv-x="509" d="M196 -270H32L302 1456H466L196 -270Z" />
-<glyph unicode="}" horiz-adv-x="676" d="M-103 -219Q81 -155 122 93L156 337Q191 532 381 623Q269 697 255 841Q250 884 255 929L285 1159L289 1231Q289 1401 160 1458L215 1595Q378 1541 450 1421T504 1132L476 928Q471 882 475 844Q488 720 623 709L605 531Q405
-521 375 302L344 79Q287 -261 -68 -363L-103 -219Z" />
-<glyph unicode="~" horiz-adv-x="1330" d="M1226 788Q1214 614 1116 498T870 386Q789 388 726 425T605 520T514 596T447 614Q312 617 278 425H91Q105 600 204 710T449 816Q531 814 596 776T717 681T807 606T872 588Q940 588 986 640T1049 785L1226 788Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="505" />
-<glyph unicode="&#xa1;" horiz-adv-x="536" d="M175 662H379L225 -364H-26L175 662ZM462 975Q462 918 425 880T329 839T232 874T194 967Q194 1024 231 1062T327 1102Q385 1104 423 1067T462 975Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1125" d="M502 173Q590 171 654 223T738 357L961 358Q947 217 840 118T573 -11L526 -245H330L378 -9Q271 18 203 91T105 276T90 520L92 540Q117 769 240 914T556 1093L602 1318H797L751 1091Q883 1058 956 953T1028 693H807Q807
-790 761 846T632 907Q489 913 405 780T320 407Q320 301 366 239T502 173Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1179" d="M494 598L472 424Q455 294 366 199L1046 202L1010 0H-10L26 201L95 199Q195 235 223 413L247 598H90L125 797H276L307 1048Q323 1175 392 1274T570 1426T806 1475Q986 1471 1087 1363T1181 1072L942 1073Q947 1168
-906 1219T782 1275Q692 1277 629 1210T551 1031L522 797H824L789 598H494Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1404" d="M980 105Q798 -24 610 -20Q415 -16 280 106L128 -26L8 129L162 257Q135 342 125 428Q106 575 150 717T296 976L181 1131L332 1264L442 1121Q617 1237 795 1233Q980 1231 1116 1117L1286 1265L1407 1109L1238 967Q1300
-782 1280 615Q1254 414 1123 256L1234 107L1082 -27L980 105ZM306 599Q291 489 325 389T436 228T618 163Q731 159 835 219T1011 388T1099 616Q1114 726 1080 825T969 985T787 1049Q673 1053 568 992T392 825T306 599Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1065" d="M566 849L925 1456H1200L745 742H966L939 590H646L621 452H916L889 301H596L543 0H297L349 301H50L77 452H375L400 590H100L127 742H374L165 1456H419L566 849Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="503" d="M-20 -270L119 525H342L204 -270H-20ZM372 698H148L280 1456H504L372 698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1244" d="M1106 463Q1092 282 892 177Q989 73 976 -95Q967 -216 896 -302T704 -432T439 -474Q215 -472 90 -359T-31 -49H209Q203 -156 266 -216T449 -279Q569 -279 647 -230T739 -98Q760 22 575 87L429 135L340 170Q63 289
-84 534Q98 718 296 821Q200 930 213 1094Q227 1270 376 1374T752 1476Q966 1472 1083 1358T1192 1046L956 1047Q962 1155 904 1216T741 1280Q627 1282 549 1236Q466 1187 452 1097Q430 963 620 907T894 807Q1123 691 1106 463ZM465 723Q344 668 324 550Q302 414
-484 353L679 289L719 274Q848 333 868 447Q890 576 696 644L465 723Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="884" d="M332 1485Q386 1485 421 1452T456 1369Q456 1318 421 1284T333 1247Q277 1247 243 1281T209 1363T243 1447T332 1485ZM653 1362Q653 1415 688 1448T775 1484Q831 1484 865 1450T899 1368Q899 1317 864 1283T776 1246Q720
-1246 687 1279T653 1362Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1566" d="M1091 596Q1079 446 987 362T741 282Q595 286 513 394T445 669L455 770Q474 958 578 1068T840 1176Q989 1172 1066 1088T1139 860L987 861Q992 951 956 995T839 1042Q746 1044 685 973T609 778T594 627L596 583Q601
-508 638 464T742 417Q909 410 940 595L1091 596ZM233 571Q252 367 380 237T697 104Q881 100 1045 209T1301 506T1375 887Q1356 1089 1230 1217T912 1351Q727 1355 563 1246T306 950T233 571ZM115 722Q132 872 200 1011T381 1259T627 1423T906 1476Q1084 1474 1227
-1376T1441 1104T1492 735Q1470 534 1355 355T1067 76T702 -20Q520 -16 379 82T166 354T115 722Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="896" d="M622 703Q617 743 619 773Q526 691 417 691Q311 691 251 752T194 911Q196 1026 289 1088T551 1151L655 1150L666 1203Q670 1228 669 1250Q662 1325 586 1328Q467 1332 440 1229L268 1243Q279 1354 367 1416T586 1477Q708
-1475 778 1400T838 1200L784 853L780 795Q779 750 788 703H622ZM457 833Q526 833 616 895L643 1033H560Q478 1030 427 999T368 915Q361 877 385 855T457 833Z" />
-<glyph unicode="&#xab;" horiz-adv-x="974" d="M530 524L696 138H548L329 527L330 547L670 937H849L530 524ZM622 524L788 138H640L421 527L422 547L762 937H941L622 524Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1109" d="M895 374H699L745 634H128L159 805H970L895 374Z" />
-<glyph unicode="&#xad;" horiz-adv-x="662" d="M565 521H54L89 717H600L565 521Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1566" d="M115 722Q137 920 248 1096T534 1376T906 1476Q1084 1474 1227 1376T1441 1104T1492 735Q1470 534 1355 355T1067 76T702 -20Q520 -16 379 82T166 354T115 722ZM232 571Q244 440 307 333T470 166T697 104Q853 100
-1000 182T1248 414T1372 736Q1393 895 1341 1038T1176 1264T912 1351Q727 1355 563 1246T306 951T232 571ZM654 653L601 316H453L586 1166L846 1165Q989 1160 1063 1093T1132 913Q1125 797 988 721Q1061 675 1068 575Q1070 544 1064 484T1058 395L1062 333L1061
-315H912Q907 352 909 388Q910 421 922 516Q928 579 906 613T818 651L654 653ZM674 787L803 786Q877 788 927 821T988 909Q999 968 970 998T851 1032L713 1033L674 787Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="967" d="M926 1292H257L283 1450H951L926 1292Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="765" d="M230 1199Q232 1310 314 1394T507 1477Q606 1475 673 1399T738 1217Q734 1103 654 1022T466 942Q364 944 296 1019T230 1199ZM366 1201Q360 1157 387 1121T463 1084Q518 1084 558 1123T604 1215Q610 1264 584 1300T510
-1337Q456 1337 414 1295T366 1201Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1075" d="M696 899H1029L997 700H665L604 312H393L454 700H107L139 899H484L544 1276H755L696 899ZM852 1H27L58 197H883L852 1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="745" d="M681 667H86L110 802L452 1083Q549 1166 561 1233Q568 1274 547 1297T484 1322Q426 1322 393 1287T347 1199L165 1198Q175 1319 262 1395T480 1469Q607 1467 680 1402T748 1232Q743 1106 593 987L514 927L357 817L708
-815L681 667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="745" d="M345 1133H428Q489 1135 527 1163T573 1237Q582 1304 508 1317L485 1319Q392 1321 364 1245L178 1244Q187 1349 270 1410T478 1469Q607 1466 683 1407T755 1249Q752 1190 716 1147T597 1065Q715 1024 711 895Q708
-784 614 719T381 656Q256 658 180 723T103 898L280 897Q284 808 390 806Q444 806 485 834T534 909Q547 998 427 1003H335L345 1133Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="657" d="M437 1536H722L406 1233H200L437 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1185" d="M461 1082L359 460Q351 375 353 335Q358 178 491 175Q643 171 733 295L871 1082H1108L921 0H706L721 86Q617 -24 477 -22Q369 -22 287 35L201 -416H-35L225 1082H461Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="985" d="M530 0L620 520L564 521Q353 524 239 651T145 980Q164 1191 313 1324T688 1457L988 1456L735 0H530Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="571" d="M158 710Q158 771 196 810T294 851Q355 853 394 814T433 718Q433 659 394 621T295 580Q236 578 197 615T158 710Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="522" d="M197 4L178 -55Q240 -69 271 -111T302 -217Q300 -326 211 -385T-45 -451L-43 -310Q94 -304 110 -214Q119 -154 37 -141L-19 -135L26 2L197 4Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="745" d="M510 667H329L428 1233L224 1186L251 1339L617 1454H640L510 667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="917" d="M586 1477Q730 1473 811 1374T882 1121L876 1055Q861 891 756 788T498 689Q357 693 274 791T201 1044L207 1110Q217 1220 268 1304T403 1434T586 1477ZM373 1041Q365 944 399 890T504 834Q583 832 637 890T703 1052L711
-1122Q719 1222 685 1274T580 1329Q500 1331 446 1272T381 1113L373 1041Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="974" d="M303 937L523 549L521 528L182 138H2L321 549L156 937H303ZM665 937L885 549L883 528L544 138H364L683 549L518 937H665Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1453" d="M471 664H290L389 1230L185 1183L212 1336L578 1451H601L471 664ZM366 119L245 198L1125 1325L1245 1246L366 119ZM1222 313L1322 314L1294 163H1202L1174 0H990L1020 163H673L686 296L1118 788L1304 790L1222 313ZM875
-314H1045L1096 559L1078 535L875 314Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1542" d="M324 119L203 198L1083 1325L1203 1246L324 119ZM463 667H282L381 1233L177 1186L204 1339L570 1454H593L463 667ZM1336 0H741L765 135L1107 416Q1204 499 1216 566Q1223 607 1202 630T1139 655Q1081 655 1048 620T1002
-532L820 531Q830 652 917 728T1135 802Q1262 800 1335 735T1403 565Q1398 439 1248 320L1169 260L1012 150L1363 148L1336 0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1584" d="M503 119L382 198L1262 1325L1382 1246L503 119ZM1339 313L1439 314L1411 163H1319L1291 0H1107L1137 163H790L803 296L1235 788L1421 790L1339 313ZM992 314H1162L1213 559L1195 535L992 314ZM392 1133H475Q536
-1135 574 1163T620 1237Q629 1304 555 1317L532 1319Q439 1321 411 1245L225 1244Q234 1349 317 1410T525 1469Q654 1466 730 1407T802 1249Q799 1190 763 1147T644 1065Q762 1024 758 895Q755 784 661 719T428 656Q303 658 227 723T150 898L327 897Q331 808 437
-806Q491 806 532 834T581 909Q594 998 474 1003H382L392 1133Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="976" d="M619 662Q608 546 565 461T426 288L344 214Q224 105 210 -6Q199 -88 236 -136T351 -186Q434 -188 491 -138T566 0H803Q786 -179 656 -284T338 -386Q155 -382 55 -280T-33 -9Q-18 170 177 341L286 435Q381 521 401
-661L619 662ZM701 976Q701 917 664 880T569 840Q510 838 472 875T434 968Q434 1025 471 1063T567 1103Q625 1105 663 1068T701 976Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543ZM945 1543H764L549 1846H803L945 1543Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543ZM939 1846H1224L908 1543H702L939 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543ZM1169 1572V1555L984 1558L867 1713L694 1559L501 1555L500 1573L801 1847H937L1169 1572Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543ZM1225 1824Q1213 1705 1149 1635T990 1565Q966 1565 944 1572T868 1609T788 1649T733 1658Q654 1655 627 1554L478 1562Q488
-1676 553 1751T714 1825Q762 1824 837 1780T946 1731L971 1730Q1052 1733 1080 1835L1225 1824Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543ZM628 1795Q682 1795 717 1762T752 1679Q752 1628 717 1594T629 1557Q573 1557 539 1591T505 1673T539 1757T628 1795ZM949
-1672Q949 1725 984 1758T1071 1794Q1127 1794 1161 1760T1195 1678Q1195 1627 1160 1593T1072 1556Q1016 1556 983 1589T949 1672Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1332" d="M893 339H348L174 0H-92L694 1456H916L1198 0H950L893 339ZM452 543H860L761 1145L452 543ZM646 1724Q646 1814 712 1877T872 1941Q954 1941 1015 1883T1076 1740Q1076 1651 1010 1589T851 1526Q764 1526 705 1584T646
-1724ZM753 1726Q747 1686 772 1653T840 1620Q890 1620 926 1656T969 1738Q975 1781 951 1813T883 1845Q833 1845 796 1809T753 1726Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1877" d="M1719 0H848L892 340H413L175 0H-121L941 1456H1912L1877 1259H1251L1196 851H1729L1694 654H1170L1110 196H1754L1719 0ZM562 555H920L1005 1189L562 555Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1307" d="M1194 475Q1157 247 989 112T580 -20Q441 -17 337 46T173 229T107 502Q101 616 135 812T265 1165T502 1400T815 1476Q1032 1472 1158 1340T1293 974H1048Q1043 1130 983 1199T803 1272Q640 1277 530 1155T382 800L362
-667L353 565Q345 462 367 372T447 234T592 183Q871 172 950 473L1194 475ZM639 -1L620 -60Q682 -74 713 -116T744 -222Q742 -331 653 -390T397 -456L399 -315Q536 -309 552 -219Q561 -159 479 -146L423 -140L468 -3L639 -1Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1133" d="M979 650H399L321 202H999L964 0H39L291 1456H1210L1174 1252H503L433 850H1014L979 650ZM889 1550H708L493 1853H747L889 1550Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1133" d="M979 650H399L321 202H999L964 0H39L291 1456H1210L1174 1252H503L433 850H1014L979 650ZM883 1853H1168L852 1550H646L883 1853Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1133" d="M979 650H399L321 202H999L964 0H39L291 1456H1210L1174 1252H503L433 850H1014L979 650ZM1113 1579V1562L928 1565L811 1720L638 1566L445 1562L444 1580L745 1854H881L1113 1579Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1133" d="M979 650H399L321 202H999L964 0H39L291 1456H1210L1174 1252H503L433 850H1014L979 650ZM572 1802Q626 1802 661 1769T696 1686Q696 1635 661 1601T573 1564Q517 1564 483 1598T449 1680T483 1764T572 1802ZM893
-1679Q893 1732 928 1765T1015 1801Q1071 1801 1105 1767T1139 1685Q1139 1634 1104 1600T1016 1563Q960 1563 927 1596T893 1679Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="571" d="M299 0H53L306 1456H552L299 0ZM562 1550H381L166 1853H420L562 1550Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="571" d="M299 0H53L306 1456H552L299 0ZM555 1853H840L524 1550H318L555 1853Z" />
-<glyph unicode="&#xce;" horiz-adv-x="571" d="M299 0H53L306 1456H552L299 0ZM786 1579V1562L601 1565L484 1720L311 1566L118 1562L117 1580L418 1854H554L786 1579Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="571" d="M299 0H53L306 1456H552L299 0ZM245 1802Q299 1802 334 1769T369 1686Q369 1635 334 1601T246 1564Q190 1564 156 1598T122 1680T156 1764T245 1802ZM566 1679Q566 1732 601 1765T688 1801Q744 1801 778 1767T812
-1685Q812 1634 777 1600T689 1563Q633 1563 600 1596T566 1679Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1338" d="M69 0L182 652H-1L29 822H211L321 1456L715 1455Q897 1455 1028 1365T1219 1115T1255 763L1244 684Q1214 483 1112 328T847 86T491 0H69ZM650 652H429L351 202L497 201Q695 201 825 326T993 673Q1019 825 1012 938Q1003
-1083 928 1165T718 1251L533 1252L458 822H680L650 652Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1420" d="M1161 0H922L467 1043L286 0H39L292 1456H531L986 409L1168 1456H1414L1161 0ZM1265 1824Q1253 1705 1189 1635T1030 1565Q1006 1565 984 1572T908 1609T828 1649T773 1658Q694 1655 667 1554L518 1562Q528 1676
-593 1751T754 1825Q802 1824 877 1780T986 1731L1011 1730Q1092 1733 1120 1835L1265 1824Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1382" d="M599 -20Q457 -17 350 48T182 236T114 517Q107 642 136 809T241 1113T422 1338Q595 1480 822 1476Q1038 1472 1166 1327T1307 935Q1313 811 1285 651T1187 356T1014 131Q836 -25 599 -20ZM1054 767L1063 873Q1069
-982 1044 1074T960 1215T809 1267Q683 1271 586 1196T428 968T357 584Q347 401 413 296T611 187Q784 182 896 317T1044 697L1054 767ZM968 1543H787L572 1846H826L968 1543Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1382" d="M599 -20Q457 -17 350 48T182 236T114 517Q107 642 136 809T241 1113T422 1338Q595 1480 822 1476Q1038 1472 1166 1327T1307 935Q1313 811 1285 651T1187 356T1014 131Q836 -25 599 -20ZM1054 767L1063 873Q1069
-982 1044 1074T960 1215T809 1267Q683 1271 586 1196T428 968T357 584Q347 401 413 296T611 187Q784 182 896 317T1044 697L1054 767ZM962 1846H1247L931 1543H725L962 1846Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1382" d="M599 -20Q457 -17 350 48T182 236T114 517Q107 642 136 809T241 1113T422 1338Q595 1480 822 1476Q1038 1472 1166 1327T1307 935Q1313 811 1285 651T1187 356T1014 131Q836 -25 599 -20ZM1054 767L1063 873Q1069
-982 1044 1074T960 1215T809 1267Q683 1271 586 1196T428 968T357 584Q347 401 413 296T611 187Q784 182 896 317T1044 697L1054 767ZM1192 1572V1555L1007 1558L890 1713L717 1559L524 1555L523 1573L824 1847H960L1192 1572Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1382" d="M599 -20Q457 -17 350 48T182 236T114 517Q107 642 136 809T241 1113T422 1338Q595 1480 822 1476Q1038 1472 1166 1327T1307 935Q1313 811 1285 651T1187 356T1014 131Q836 -25 599 -20ZM1054 767L1063 873Q1069
-982 1044 1074T960 1215T809 1267Q683 1271 586 1196T428 968T357 584Q347 401 413 296T611 187Q784 182 896 317T1044 697L1054 767ZM1248 1824Q1236 1705 1172 1635T1013 1565Q989 1565 967 1572T891 1609T811 1649T756 1658Q677 1655 650 1554L501 1562Q511
-1676 576 1751T737 1825Q785 1824 860 1780T969 1731L994 1730Q1075 1733 1103 1835L1248 1824Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1382" d="M599 -20Q457 -17 350 48T182 236T114 517Q107 642 136 809T241 1113T422 1338Q595 1480 822 1476Q1038 1472 1166 1327T1307 935Q1313 811 1285 651T1187 356T1014 131Q836 -25 599 -20ZM1054 767L1063 873Q1069
-982 1044 1074T960 1215T809 1267Q683 1271 586 1196T428 968T357 584Q347 401 413 296T611 187Q784 182 896 317T1044 697L1054 767ZM651 1795Q705 1795 740 1762T775 1679Q775 1628 740 1594T652 1557Q596 1557 562 1591T528 1673T562 1757T651 1795ZM972 1672Q972
-1725 1007 1758T1094 1794Q1150 1794 1184 1760T1218 1678Q1218 1627 1183 1593T1095 1556Q1039 1556 1006 1589T972 1672Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1069" d="M35 375L398 696L147 1019L305 1158L555 837L917 1158L1044 997L681 676L932 353L774 214L523 534L162 214L35 375Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1380" d="M599 -21Q443 -17 320 56L202 -95L21 -94L215 146Q107 322 109 548L112 627Q131 895 227 1086T478 1378T823 1477Q1013 1473 1141 1374L1253 1517H1432L1236 1273Q1292 1152 1306 1024Q1323 854 1286 649T1149 287T906
-54T599 -21ZM349 522Q346 437 366 354L1003 1185Q941 1263 812 1268Q646 1273 533 1145T379 784Q353 635 349 522ZM1073 907Q1078 977 1072 1048L451 238Q514 188 610 186Q786 181 899 320T1049 710L1066 831L1073 907Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1305" d="M1327 1456L1162 483Q1128 250 963 112T562 -22Q344 -18 218 110T102 444L105 482L270 1456H516L351 481Q333 342 392 264T574 182Q709 178 799 255T914 476L1081 1456H1327ZM928 1543H747L532 1846H786L928 1543Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1305" d="M1327 1456L1162 483Q1128 250 963 112T562 -22Q344 -18 218 110T102 444L105 482L270 1456H516L351 481Q333 342 392 264T574 182Q709 178 799 255T914 476L1081 1456H1327ZM922 1846H1207L891 1543H685L922 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1305" d="M1327 1456L1162 483Q1128 250 963 112T562 -22Q344 -18 218 110T102 444L105 482L270 1456H516L351 481Q333 342 392 264T574 182Q709 178 799 255T914 476L1081 1456H1327ZM1152 1572V1555L967 1558L850 1713L677
-1559L484 1555L483 1573L784 1847H920L1152 1572Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1305" d="M1327 1456L1162 483Q1128 250 963 112T562 -22Q344 -18 218 110T102 444L105 482L270 1456H516L351 481Q333 342 392 264T574 182Q709 178 799 255T914 476L1081 1456H1327ZM611 1795Q665 1795 700 1762T735 1679Q735
-1628 700 1594T612 1557Q556 1557 522 1591T488 1673T522 1757T611 1795ZM932 1672Q932 1725 967 1758T1054 1794Q1110 1794 1144 1760T1178 1678Q1178 1627 1143 1593T1055 1556Q999 1556 966 1589T932 1672Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1221" d="M627 768L1071 1456H1357L715 523L624 0H376L472 549L161 1456H422L627 768ZM882 1846H1167L851 1543H645L882 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1199" d="M529 1456L480 1176L683 1175Q905 1174 1029 1057T1139 746Q1123 543 970 421T581 299L329 300L276 0H39L292 1456H529ZM447 981L362 495L587 493Q715 495 801 563T902 745Q916 852 860 914T698 980L447 981Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1227" d="M264 0H27L216 1105Q244 1315 372 1438T700 1558Q867 1554 962 1460T1044 1209Q1040 1160 1022 1117T956 996T894 886T873 815Q865 766 888 715T979 588T1073 456T1098 345Q1089 172 965 74T652 -21Q481 -19 368
-46L436 239Q539 173 647 173Q735 173 794 217T864 335Q872 387 847 438T752 564Q626 698 635 809Q639 866 664 912T719 1003T775 1094T808 1195Q817 1271 783 1317T678 1367Q588 1370 530 1305T451 1104L264 0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174ZM777 1233H596L381 1536H635L777 1233Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174ZM771 1536H1056L740 1233H534L771 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174ZM1001 1262V1245L816 1248L699 1403L526 1249L333 1245L332 1263L633 1537H769L1001 1262Z"
-/>
-<glyph unicode="&#xe3;" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174ZM1057 1514Q1045 1395 981 1325T822 1255Q798 1255 776 1262T700 1299T620 1339T565 1348Q486
-1345 459 1244L310 1252Q320 1366 385 1441T546 1515Q594 1514 669 1470T778 1421L803 1420Q884 1423 912 1525L1057 1514Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174ZM460 1485Q514 1485 549 1452T584 1369Q584 1318 549 1284T461 1247Q405 1247 371 1281T337
-1363T371 1447T460 1485ZM781 1362Q781 1415 816 1448T903 1484Q959 1484 993 1450T1027 1368Q1027 1317 992 1283T904 1246Q848 1246 815 1279T781 1362Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1085" d="M659 0Q647 40 649 101Q515 -24 360 -20Q219 -18 127 70T40 295Q48 466 188 564T564 662L718 660L732 734Q738 773 732 807Q712 915 589 918Q513 920 456 880T385 771L148 769Q155 869 219 944T389 1062T613 1102Q790
-1098 889 996T971 730L888 223L880 133Q877 74 895 18L894 0H659ZM415 174Q490 172 554 208T663 303L700 508L587 509Q453 509 373 459T282 320Q274 253 311 215T415 174ZM478 1414Q478 1504 544 1567T704 1631Q786 1631 847 1573T908 1430Q908 1341 842 1279T683
-1216Q596 1216 537 1274T478 1414ZM585 1416Q579 1376 604 1343T672 1310Q722 1310 758 1346T801 1428Q807 1471 783 1503T715 1535Q665 1535 628 1499T585 1416Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1687" d="M1130 -19Q1015 -19 921 22T774 140Q602 -24 349 -20Q195 -18 105 69T23 304Q33 465 163 554T524 643L715 641L728 715Q734 753 730 787Q713 904 594 907Q507 909 448 867T375 752L138 771Q145 869 206 945T377
-1063T610 1103Q825 1098 915 970Q1070 1106 1255 1102Q1449 1096 1548 961T1622 612L1601 471H932Q918 335 977 257T1152 176Q1237 174 1312 200T1462 266L1520 98Q1455 41 1350 10T1130 -19ZM402 163Q516 163 654 265L694 475L525 476Q418 473 346 426T261 300Q252
-237 291 201T402 163ZM1239 908Q1143 911 1070 844T951 641H1389L1395 674Q1402 719 1398 761Q1384 902 1239 908Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1050" d="M488 173Q573 171 638 222T722 357L946 358Q935 251 869 163T698 26T481 -20Q342 -18 244 52T101 245T71 521L74 556Q91 713 165 840T358 1037T620 1102Q796 1098 901 986T1006 693H784Q784 786 739 845T607 908Q468
-912 388 790T302 446Q295 177 488 173ZM513 -1L494 -60Q556 -74 587 -116T618 -222Q616 -331 527 -390T271 -456L273 -315Q410 -309 426 -219Q435 -159 353 -146L297 -140L342 -3L513 -1Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1076" d="M506 -20Q365 -17 262 51T109 237T71 500L74 541Q92 706 170 837T366 1037T620 1102Q823 1098 924 951T1001 568L987 464H306Q297 335 358 256T526 175Q679 170 808 308L928 182Q860 85 749 32T506 -20ZM607 908Q419
-914 325 642L774 641L778 662Q785 708 779 752Q768 823 723 864T607 908ZM754 1233H573L358 1536H612L754 1233Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1076" d="M506 -20Q365 -17 262 51T109 237T71 500L74 541Q92 706 170 837T366 1037T620 1102Q823 1098 924 951T1001 568L987 464H306Q297 335 358 256T526 175Q679 170 808 308L928 182Q860 85 749 32T506 -20ZM607 908Q419
-914 325 642L774 641L778 662Q785 708 779 752Q768 823 723 864T607 908ZM748 1536H1033L717 1233H511L748 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1076" d="M506 -20Q365 -17 262 51T109 237T71 500L74 541Q92 706 170 837T366 1037T620 1102Q823 1098 924 951T1001 568L987 464H306Q297 335 358 256T526 175Q679 170 808 308L928 182Q860 85 749 32T506 -20ZM607 908Q419
-914 325 642L774 641L778 662Q785 708 779 752Q768 823 723 864T607 908ZM978 1262V1245L793 1248L676 1403L503 1249L310 1245L309 1263L610 1537H746L978 1262Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1076" d="M506 -20Q365 -17 262 51T109 237T71 500L74 541Q92 706 170 837T366 1037T620 1102Q823 1098 924 951T1001 568L987 464H306Q297 335 358 256T526 175Q679 170 808 308L928 182Q860 85 749 32T506 -20ZM607 908Q419
-914 325 642L774 641L778 662Q785 708 779 752Q768 823 723 864T607 908ZM437 1485Q491 1485 526 1452T561 1369Q561 1318 526 1284T438 1247Q382 1247 348 1281T314 1363T348 1447T437 1485ZM758 1362Q758 1415 793 1448T880 1484Q936 1484 970 1450T1004 1368Q1004
-1317 969 1283T881 1246Q825 1246 792 1279T758 1362Z" />
-<glyph unicode="&#xec;" horiz-adv-x="532" d="M271 0H34L222 1082H459L271 0ZM743 1482H562L347 1785H601L743 1482Z" />
-<glyph unicode="&#xed;" horiz-adv-x="532" d="M271 0H34L222 1082H459L271 0ZM480 1785H765L449 1482H243L480 1785Z" />
-<glyph unicode="&#xee;" horiz-adv-x="532" d="M271 0H34L222 1082H459L271 0ZM711 1255V1238L526 1241L409 1396L236 1242L43 1238L42 1256L343 1530H479L711 1255Z" />
-<glyph unicode="&#xef;" horiz-adv-x="532" d="M271 0H34L222 1082H459L271 0ZM170 1478Q224 1478 259 1445T294 1362Q294 1311 259 1277T171 1240Q115 1240 81 1274T47 1356T81 1440T170 1478ZM491 1355Q491 1408 526 1441T613 1477Q669 1477 703 1443T737 1361Q737
-1310 702 1276T614 1239Q558 1239 525 1272T491 1355Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1165" d="M933 1300Q1024 1145 1056 983T1066 642L1054 556Q1031 389 947 251T745 45T490 -21Q363 -17 265 47T118 221T82 460Q95 604 163 724T343 911T588 974Q726 970 833 881Q829 1034 733 1172L509 1036L446 1157L630
-1265Q539 1338 374 1386L465 1580Q687 1526 835 1395L1036 1517L1098 1396L933 1300ZM834 685Q780 782 633 787Q506 789 421 698T319 460Q305 340 357 258T508 172Q626 167 707 271T814 548L834 685Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1115" d="M423 1083L399 956Q538 1106 720 1102Q872 1099 945 994T999 699L882 0H645L763 702Q768 745 764 782Q751 901 622 904Q487 906 385 771L250 0H13L200 1082L423 1083ZM1063 1514Q1051 1395 987 1325T828 1255Q804
-1255 782 1262T706 1299T626 1339T571 1348Q492 1345 465 1244L316 1252Q326 1366 391 1441T552 1515Q600 1514 675 1470T784 1421L809 1420Q890 1423 918 1525L1063 1514Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1141" d="M73 545Q90 704 166 834T363 1035T629 1102Q768 1100 869 1028T1016 831T1049 553Q1033 381 956 249T758 47T490 -20Q352 -18 252 53T104 249T70 524L73 545ZM306 408Q311 303 361 240T502 173Q624 170 706 267T810
-532L816 630Q816 758 765 831T617 908Q465 912 377 759Q324 666 310 545Q302 461 306 408ZM774 1233H593L378 1536H632L774 1233Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1141" d="M73 545Q90 704 166 834T363 1035T629 1102Q768 1100 869 1028T1016 831T1049 553Q1033 381 956 249T758 47T490 -20Q352 -18 252 53T104 249T70 524L73 545ZM306 408Q311 303 361 240T502 173Q624 170 706 267T810
-532L816 630Q816 758 765 831T617 908Q465 912 377 759Q324 666 310 545Q302 461 306 408ZM768 1536H1053L737 1233H531L768 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1141" d="M73 545Q90 704 166 834T363 1035T629 1102Q768 1100 869 1028T1016 831T1049 553Q1033 381 956 249T758 47T490 -20Q352 -18 252 53T104 249T70 524L73 545ZM306 408Q311 303 361 240T502 173Q624 170 706 267T810
-532L816 630Q816 758 765 831T617 908Q465 912 377 759Q324 666 310 545Q302 461 306 408ZM998 1262V1245L813 1248L696 1403L523 1249L330 1245L329 1263L630 1537H766L998 1262Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1141" d="M73 545Q90 704 166 834T363 1035T629 1102Q768 1100 869 1028T1016 831T1049 553Q1033 381 956 249T758 47T490 -20Q352 -18 252 53T104 249T70 524L73 545ZM306 408Q311 303 361 240T502 173Q624 170 706 267T810
-532L816 630Q816 758 765 831T617 908Q465 912 377 759Q324 666 310 545Q302 461 306 408ZM1054 1514Q1042 1395 978 1325T819 1255Q795 1255 773 1262T697 1299T617 1339T562 1348Q483 1345 456 1244L307 1252Q317 1366 382 1441T543 1515Q591 1514 666 1470T775
-1421L800 1420Q881 1423 909 1525L1054 1514Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1141" d="M73 545Q90 704 166 834T363 1035T629 1102Q768 1100 869 1028T1016 831T1049 553Q1033 381 956 249T758 47T490 -20Q352 -18 252 53T104 249T70 524L73 545ZM306 408Q311 303 361 240T502 173Q624 170 706 267T810
-532L816 630Q816 758 765 831T617 908Q465 912 377 759Q324 666 310 545Q302 461 306 408ZM457 1485Q511 1485 546 1452T581 1369Q581 1318 546 1284T458 1247Q402 1247 368 1281T334 1363T368 1447T457 1485ZM778 1362Q778 1415 813 1448T900 1484Q956 1484 990
-1450T1024 1368Q1024 1317 989 1283T901 1246Q845 1246 812 1279T778 1362Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1144" d="M1044 582H61L98 794H1082L1044 582ZM508 1091Q508 1152 547 1189T644 1229Q705 1231 744 1193T783 1099Q783 1042 746 1003T646 962Q587 960 548 996T508 1091ZM366 274Q366 331 404 371T503 413Q560 415 600 379T641
-282Q641 223 603 186T504 146Q447 144 407 180T366 274Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1135" d="M68 544Q83 662 130 767T255 951Q411 1108 634 1104Q728 1102 823 1067L920 1211L1075 1210L929 1000Q1041 868 1048 673Q1050 615 1042 532Q1022 373 945 244T745 46T475 -22Q389 -20 298 11L197 -137L42 -136L188
-73Q70 203 62 402Q59 463 66 523L68 544ZM291 399Q290 336 310 275L714 890Q676 909 623 911Q523 912 448 848T332 663T291 399ZM820 673Q821 733 803 793L403 186Q443 172 485 170Q606 167 691 262T807 532Q819 616 820 673Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1114" d="M685 107Q562 -24 377 -20Q272 -18 203 32T104 171T86 382L203 1082H440L322 379Q318 342 321 307Q331 183 446 178Q603 172 700 304L836 1082H1073L886 0H664L685 107ZM779 1233H598L383 1536H637L779 1233Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1114" d="M685 107Q562 -24 377 -20Q272 -18 203 32T104 171T86 382L203 1082H440L322 379Q318 342 321 307Q331 183 446 178Q603 172 700 304L836 1082H1073L886 0H664L685 107ZM773 1536H1058L742 1233H536L773 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1114" d="M685 107Q562 -24 377 -20Q272 -18 203 32T104 171T86 382L203 1082H440L322 379Q318 342 321 307Q331 183 446 178Q603 172 700 304L836 1082H1073L886 0H664L685 107ZM1003 1262V1245L818 1248L701 1403L528 1249L335
-1245L334 1263L635 1537H771L1003 1262Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1114" d="M685 107Q562 -24 377 -20Q272 -18 203 32T104 171T86 382L203 1082H440L322 379Q318 342 321 307Q331 183 446 178Q603 172 700 304L836 1082H1073L886 0H664L685 107ZM462 1485Q516 1485 551 1452T586 1369Q586
-1318 551 1284T463 1247Q407 1247 373 1281T339 1363T373 1447T462 1485ZM783 1362Q783 1415 818 1448T905 1484Q961 1484 995 1450T1029 1368Q1029 1317 994 1283T906 1246Q850 1246 817 1279T783 1362Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="977" d="M440 350L780 1082H1042L401 -187Q267 -443 48 -440Q-6 -438 -75 -420L-55 -232L-12 -236Q74 -239 130 -204T224 -93L281 19L100 1082H346L440 350ZM719 1536H1004L688 1233H482L719 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1150" d="M1036 536Q1016 372 948 240T778 41T550 -22Q382 -18 284 99L187 -416H-51L288 1536H525L419 982Q541 1106 704 1102Q861 1098 949 987T1043 683Q1044 623 1036 536ZM801 558L806 632Q809 759 764 829T626 904Q493
-908 395 781L310 298Q357 177 494 173Q612 170 692 265T801 558Z" />
-<glyph unicode="&#xff;" horiz-adv-x="977" d="M440 350L780 1082H1042L401 -187Q267 -443 48 -440Q-6 -438 -75 -420L-55 -232L-12 -236Q74 -239 130 -204T224 -93L281 19L100 1082H346L440 350ZM408 1485Q462 1485 497 1452T532 1369Q532 1318 497 1284T409
-1247Q353 1247 319 1281T285 1363T319 1447T408 1485ZM729 1362Q729 1415 764 1448T851 1484Q907 1484 941 1450T975 1368Q975 1317 940 1283T852 1246Q796 1246 763 1279T729 1362Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1291" d="M1402 621H412L454 817H1444L1402 621Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1546" d="M1707 621H387L443 817H1763L1707 621Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="445" d="M427 1562L546 1483Q439 1342 411 1215L382 1056H174L194 1180Q232 1411 427 1562Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="441" d="M257 1024L138 1103Q244 1242 272 1371L302 1536H510L488 1400Q451 1174 257 1024Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="458" d="M26 -298L-92 -218Q10 -81 37 48L65 202H277L258 79Q223 -145 26 -298Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="774" d="M436 1562L555 1483Q448 1342 420 1215L391 1056H183L203 1180Q241 1411 436 1562ZM762 1562L881 1483Q774 1342 746 1215L717 1056H509L529 1180Q567 1411 762 1562Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="781" d="M270 1024L151 1103Q257 1242 285 1371L315 1536H523L501 1400Q464 1174 270 1024ZM594 1024L475 1103Q581 1242 609 1371L639 1536H847L825 1400Q788 1174 594 1024Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="763" d="M27 -318L-95 -238Q16 -78 42 70L74 255H286L257 73Q239 -40 178 -143T27 -318ZM339 -318L217 -238Q333 -75 358 70L390 255H603L573 72Q555 -44 492 -144T339 -318Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="704" d="M159 764Q165 864 227 926T386 988Q477 986 533 927T589 774L587 731Q580 631 518 574T360 516Q270 516 214 574T158 723L159 764Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="617" d="M294 524L460 138H312L93 527L94 547L434 937H613L294 524Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="608" d="M294 937L514 549L512 528L173 138H-7L312 549L147 937H294Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-500italic.ttf b/static/fonts/roboto-v18-latin-500italic.ttf
deleted file mode 100644
index dcf655fb2e014a7b9c816c8912b174e8ca25ae27..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 37120
zcmb5X2VfLM`#(N2yL)%(mt2xdBkfXvBm@Y_C80|%(tGc{_ugyhiu9_0bT2Da5fo60
zEeK*mM8)<Bb`c@B_y5e?ZSGEaf8X~XnBCjG+1Y2FdFJUeM<^jA0tcBSH*4IasWM-2
z5HkM;?hb0!u5HJQv0r{f$bv#bf*&>O*!d~@0P}G|*3=?|UTxbkx8|e|ZPN*vdI$CU
z4IJHn-1+Ezw+NYz`cmtGQzj+XNH9E2$lOi%zSod(Lq{(yPdh}&tVMYK%+UT5#}N~;
z;C+|zeelpx(}%Qq_2=gJE}M{XyM_%KJ<SqnauG7E0lt4YY;gZU<)3~qg^-Ew;JRQK
zZUlc8`V8KG2G?oBMo*fi8uD;GNyht6j2b(zf3s(*rV=v#9@@M;y8pCsQlgZEYyN!l
znEs;&r#xS8DB$}8->c)sPMqZGPX+;={rvlJ69$hf`h5AHgv@Dx@4FF&e<xK2h9qJj
z0VJ4&k+Ev9IXpa~$PsLIkTQNWh+}{_hLjNpY0}NXa^p)`a=q^2g5ZLf>vdOUM)0Jn
zxKBp+$s|sWz*}mt`$mZS1~WTCZ&k06k`kUGg;N?%r4*V^Q>4nyI_zSB_LKGs4Zh1H
zO{2`|R2+}?C`RXOHuZ5ho967p`YdC82qSja&n#KMA4=+|EX>RyN6SG^f-@L!1_RDg
zV~8U#t6R#)@qcu8&@u<jtzLuLEP1q6fxRF)(qJ@X&@S(6d!$)g6&JN>RcvoZkI2%a
zbG2JD)^b8C#+u>HyQM$ac>|}j0Fv%TiiGy1R3L?w0YMI9nZuatkjxHKnZv|iA>kbg
zKhUMUN;)2-A^fO}(w4E{_56TVYooz$(4TmcMAo=l6;SJ_Hscj${Xz@^`XdG*4&TJ_
zL8uhWI1(!5mJ-R^O}WfbNem^9L1m7h+)|Uzw?P;S+%!8P0IJy$DJn;oIf&U2Bkm-Y
zaTEb|n>`OD#gZrG@nW=zf}_R8He6qKaNX^MM`M3TpvrRxp1ZOB!1_xGcgNgF_;uZZ
zfa_zg(=FN%x@89~+DUh5{dn1_UD}}yVTH5^1WBH9<;d*~TS*pKpeAMKpc}*ym@B#$
zfbIq89Z$wZa<r%8Nw`Sj9cM`ayyF38M{t>H4oGrelv=143(Q;^>vNf8cBGc68Sdwj
z%%xSl-=Vt&85x-w_JRVtJ<k{&ZL}5O60{K=ZH+b>3`V2Po{?d<8gN;_w1D<MHa{2|
zboW^0?N!!q47?Z6xofZ4Apz~auYW2m=>D0sZRz_R0r!nV1`J<E7q%Whz&`)|gP%lw
zdOPX2b8}ZoY}|m>qlV-x`1Ht!mJ1i-emh6!E@f;Y!3;g_`cA2*TqYr)i7Lbn3R$IQ
z)~U-omuYq=W&DVd!ZAx63qkpXxsGBt+Qih<(PjgtY=U0QZsIHrXI|V8b7_pvrOoU}
zD03v_I&9|B9H09M=F(c;OP~p;0Xi~)3*br;=)fm|tN+(`N+z|ku!YZ<3}L4i%-L)*
zhMY_@78cj(78GDCtX;Q<iM_VqS(733l?Ai57?hyXsY<cEZs*`YoEmg9Ie(odjh&{v
zB_Evk^zwZ&J2<!H@`Kv^23;BJ+O$o>ZjAMAsWJKBoHk1j$ZX%DhO3Wg3z~FftYfRT
z&D-JI=0CNShqeXZ%W?f6?*@JoNo7)tOj2|53pj3b%#QFfeoXOj5<dcr0VZSgnU{cz
z1Wtev0Wo+~jS{EQBrh?kHupE#;sgpUt?B);dJPLm4CpH;uqHA=S^NewT2nGPT9xPm
zyJX~qXE9i<cCe@nTdJWj_^k<bE6c%m5BJ{CPEm$WnSQfl)Y~z;c57N)$E8>A(UXm*
z75<*OJUn>VxWMYxf%Ah6&F#$x(fKD<wi>sp{=plv)L~uM9@{&#)6UFVOSNB)JnB0|
zX15b*EgKyl-EV5YY0|DHy{gvhFrui%aLmoMQaRlq_+9jqxSfZ+(fOUWw?D2-)fO{|
zEJ}uHHKb%iKN3#Nsv*Jx^bm)X>j(xrv_ufQl}PAVgw>eA(C2yiwC%$*?ck7f$_5Q6
zJap2;f>~=iniY*%t37nS^WM3)wQF4$kD#y9s{OhU>RPYmvUY~PkXmLnKu9eDPU|3O
zUCJzou-MI+_UPycBV(jl`i)=W<cmcUUuY`_ysX{Ua!dBITsn6a-FtXRQ>V7)xb}nd
zPi-S$9?Dutd%=T4NwT}AG6q-{lc+2fjmJ0wa1O|gL7&s@3fN$}Rk0W)DU;6CzHdvd
zIgVDeT8#F_#^+|;S|VNRwtFh=t?eIotef`h0GguR8^bYEmpmg^lTVN!%xg5pWi9B!
z;H3+P#CdLtF$G*Vg>zi?8Xcdht!?#PYi(s^I-%)zQp#<uEiJuGp93zIYo}-=`H>h&
ztZFoIPRMalDtkp8P@W0G$}<{FbEm|oe;8L;JJoK-)c1D(#o;Mn0jwK)7c(M)Kzfx@
zFC-icdkV|fsExW<z(v%q?)r^3q7tCDsixo%@iwj(h*^TUP%8Pp*DeHWl#r~|pRQB8
zZR@(V+fJ_gG-Iu57vtCx@XvKElokj{ZUNTa+)LLos@JgEXkMd>QoT248*&KbWIxw;
za<Os+bd^k+tJaiMK;W=)jm14=ezR5APdI|3z1@OzD^2uXR<EJ(NoWUMTEWx6;2E(L
z<O@b78LW}kXbb(~weu1U$gDwQZlAfpKjmpZE(=k1%~+pUEtu~4s$rz;yxX!Rm1#{{
zO_3koZPmi5UDDo_)=sGYl~FnKu6AK)o&Oj^=osMeXXswjl;hC6irqjfpfg2h);iFt
zOcdTZIk!~u0;@8K--Y^QvnclTJU0K{Rc&oLYmg?dobk~+Xgvs;M1AEFi6LFpfY`W-
z5%SX@DqbR)x#s3Dn@deTF9{ZR)hPFuK$q3~CD+{Slyf646^-?n2WimY&X>1HV7(87
zhxF(%c9Z#D;F|j-XFm@Kzgti1$(EL~CVQ9koh!@F&ZSFkPL<>v>N{W8)h2No%y4}#
z7b$O&s$_&}%F3>QIShyi(-9Moi+Ij^h34i6GnX2@P~noRH`Gs-t5H=b?_Ipvkz9sj
zsm=QUXxm!zpS>^`qpeW}IkOt`$amh$OuB3S<ZVGgeR}sP3B4b%?6bKSz6>!gnR_HC
zMEm6C%!|Y2d-BkMqc;Z!PaL&bYDVV_A2^<|3BBp$Qv<2|*{MM<)@k=v^^1SVbm*(o
zXurvlyll+aNfHG$2VktKg7yQ!b6P%ufCU5M5{3rIydyNXlzF?r6?DqGt(pu$_*xAS
zwa_!Jo^j?u^Joef)C@=JOGWn!ojal=sMJO}e0&TuUeM0a#=E3<%Db|GsThMEm{}76
zOC>T|jZ5T8lp7!lv{QWyLU0ix#=z`Hl}5^00o2~oI4^vvV&vrK2r-vN`rHkV<agCd
zagjKIH(5BVE64-8HV}xt%sj4W=_B*XIrb>U`To!$(@tNCh|q3*bmD8n*T%s;$8HP@
z9x=SZ;Ogu{_Spy83&l+P<HOIi|H$%Jr-w{r(*BjRHZzt}ne&W+pe~DYiddnq_fcar
zGC5GOTq$<<&`(zqB*%LQs`tUQY9wL&G4wFT+ZRrR$=*v~-k6yo8-+X%WxO*P_6U+f
zx%z00^mI#lCo<%9?b~*X4ou$DIyiXsH_MKE92St=kRG7TwPWp8Ru7_mx{cZx7Sc~S
zb(ON~H|NQ0?&k|u-=8nZKb;@>G964eI9ssp9R_F3+kl=foBKSULrXwQ+c16xlJ^9z
zB1VySOYt8#;$bJ0rf^;_FLuhBll|?ink3y&Dn0sIzJCFdp*Aqs1iDf*NhQ_D7&R`p
zI!8vFup4m9^kC8g^04T%V#0-qzcRbbk?l_yEL)I3NF1N)Fg$#b=&+beGyHIhSqZi*
z1D*DQbbd&Kz634Zt(AjTEIyy*IuSp0?`jIs?tFOun~(?^-m1AFlm=g#dc22rJZMm#
z5gUSohV&lwY`=ic9ed6X3h2_l*L=C~lc`0H5wG8u<u8u^KD%IduQT7s(x7AI4+k$~
zY|ZGQGZ`ykk9$mEY~GMQ6Bt_ns#@*(Th0YeVn_z*sm5kj_E1%n2Nz<h=(vamE~0^p
zQsV8Iszi%PqvZP8CYUWL-b&SL*rU_z2F{VdX%oS0A)Qieb{bt!pNVdR{r+`>20pcH
z)A)TIf<xBaT{`(lKckY+K<lNQf#_=4a#8gVS?bnp_O38vkMr!>wMC3gy|ZlHZ;NDU
z{I&TbcWJA&X;<l|taGdWO&4sI<%j#bk0LG?$%3pelRKe*5swM<iwLqxYVUHnwm{=J
zgZr7dGhJ#AiZh3E3am*EN*8e7K&&b;nt%@<LQJUF9n(WGQad%$nk>4C(~>HU&0!Pn
zd`~C8K__W^rVgNk<VfizD9(u1g%w=}wb2)A4x_nL_Qek;TZxxn%U?;8nv5=g)h0ES
zg0DJPUja<HWT*6r+~Qv_2@S&yQ#yyp&OUR#Us*DymQTxO^S}N^Tk(dr@)3vWIoGe!
z7tlCjNE+#<CZ=cbaZWTl0zKpGCs$K3&Z&Hy6TE5=*YHTLDpyF_05AAzh?#3JY7|h&
znIWym>;-~vK(vC+-TH{Z==M-Rk+Q)>Q9ro%+ev*QOwEfrj1RvTPRZHQtD#}9&FB-U
z-E37{*rshkVH<jAw&QTxs42DTQZ}$NRX>pB_YRi6Fr>>W?M>m%D5~26?hN#=rdHdq
zM|l?ZWiv8QO>Ex6)4wL@UskT8mXAHjCo@;}gua3cRjMWYKEdJy<(@Omda~EFgg>E{
zxwMkkY;<H{a{E*WHkUT`UJ6Z2*gp1xhyrxp3j2q1%?P1wfVDE%NfEdM@odXT1BZ<u
zK$09`jb;XF;9|of*n+(8=_!#5S4@}@VBGoDqRxvOEioA@=XPJ-#VFUVGyAs}wNHOs
zY%~r3Z0Eis@g?6}&_3TL%R6W?9ed?<8n;E3=YQuMsEjC_T4{bxl?A0~QLJT~Z4x`a
zYd39sl(C}f&MS55w_x&GYB{{*X0vBxX`S|kw&Ls&?T;0dwOZMQ?xBU(KZm{2qg0Zf
z*REW?u03;+wtilcMz*HEhBM{yH^9AX4|w)b@N6SAfKI9$6wGliduhvSfatC_eFzL7
zGy@+3lg#)-(D;2>OQ5(5dcxFz5@5qwn(h4JsP;gLxJ~08YN2$~K-y6|0{>b&mc)8M
zCB=**@)<xA0zRKeMyWAL$-L<pvm>O8AI%<$*R^v$AE3ip=CJ0fJFT>LX{Zl@8$+$U
z5fFyidl#O%(n{XT>NWB#iXe5t=xvguxK*=sp`vA`XFBP*d-p>le(f>97^;2t%aOKJ
zn!G10w8t>*;ny>^gvQ>~T#AFzw~yTznS5}{<?q=#t%%MVHFT2vDxEa&RU`bulni!#
zuY^D|P9*KrAkjBBfAVv*311#ZED4qXxM~(BxI_K?Ns_rV!54lC)ukFI#|V&Pgw@6+
zzaflqpOI{l52kC5Usqh4Vl*^<gT@~I#A*6dnLhP}TN#l7rkn}gsI@Kq?5_5!EY10K
z(*(Ml7VeN_?XMrUt&o&IepozY=<&W%5Y53{<s)<lBNT)YYOV%ax!b`JXm*5oM#fK9
z({+5V6bE~O<wM~!KmzwQ<p}t4m~691)|zQ<4wP9=OHNSZ6l+l8yV{xaRZl$g7FE*Y
zi~$>$0M*B}H(qahMZ0oXzWexF`uOur<JawxfnyHgD+0pyZsZC=)x}_iJ{x2Z`YgPW
zK2!_J_f@$Z20x?3P0Yp=p)RIK*PUnDuzj}jf#uT1G-v;&tO+a88eCNz?`Yh{;&8kO
zI0DF1ZaAJemDB+D><Rc696t8AcrmnTXsIdE8_vrk|0<Ujr8y_HVnuAYb0dFaTfA|k
z>pw~~^nn!Um`SNNjEwumetLjTUC@a!ow#P~>!k!$#d`-zO%CA{=t$1>btzS^kuD4r
zPHT3-BQrsF&@Tn2v~!PvytbWo>)6^`^8<_x_D<RL-e-TAe~$k8;AfSs%&=zpOXCZ)
zTdB<Y+OUy~&i#GsG&+f<bQmkkf83&!8kN6)T;BEN_n6$1R(hS!8emdcDn_)EYV@)A
z{RTD=>?lwl<qE>%vZ7+h0}R5_1gd@1YGKE6M@OCnM~7VUV4SmL++WVWMzATv|6)s>
z(-nvFc{uz5M?M&)J7Q7Ejo2r$A<<wS&3fQ`0GKI}VAb@;r%+;7gGH3U{ji_TUm?#-
z!sIRu@(uz9KTmS&o>n1Wq>&GfCTU+^d*`FT2cfSIS`(!>%B33*W%)ms=r^*wWQLBj
z@px-6>G%Zd6N<5pEYS;{s|Nv%L4x@Rx;!?5%pk0{YH(i-HcU3K-hjv`5N3zUPE%Ok
z<)?wL$(!i|TE{t!Zr1Lxi6^zjK-|EcRCA6k|I!1IbO8`4@Ffer{lxj;I~zf0AbG?r
z8nOjx<;$FZUB%>b(}UqXfzdHfK&9WH=wmNlSYZxus?Z}cDkYo|92-n0Q*_kmz8Ybi
zVZ>FS=PGbUpy;**Qp{$tP+JhQSy-PBSy$S){6XjW&i(2aJ=;G(tmyGRxyPe+^giqR
z_?SG}IYi3=pdK0q*8(?at<pelE4xAWbG-NsiysZ^vsPt_(07dD#7Rwrb|@%!`OjL>
z@xPou(@Q5F$d<?V0m~1vmFrg{;m1z_Ux<M1)Lf0VrSUlp>r?kwJ$dQ`!YS{iLe8^&
z+{)0C+`@)40649<R%C&S#Dxw%LO+VIv#zT@nr1TA-Z=co*B?_FY$#eWRQ)u-P;+X}
zITxk}1}<83<V#zmwBWDpvuPV@>AG5$wcCHq(#~nW_t+-Ij2L~oza($a-uv$42eLv#
z|8z?qMFtiF5$SBJ21Z8lo<RBpd!&y*lTO#V!KnsO!NvZ;>cQ%KI3H*lBdgSuVdmM=
zb>UBE_4&(5AKs-P5$)<@?PnUl<WP9%*m2rBtdjF<NTI*qz47-uY}t&lOBG0XMh3ZL
zB~I9>8NjvVw#g8POY=Y&iuo0)L#WSsN2s4LcfdmS^An|8jp>HW4EQDl#}zi1kx6cR
zGXy>azNJHDM_r^{?uVK)*id`>#Qh(yy*a}u2L{(W5@5)i*7M@8p@v#hyYKy~a+k{`
ze*{xT(;m#GEofr*1+ui@@wP5qx@u$S{SjkM^^*+RM(xztSNcoPTYl&L;?nG6G3TtL
zm#W0Xa?C4UjqHh&Sq)=C$cFj(bTJ;nk-?*|WnAL=x%R{iQ)<H8HW)3&6x~IZ&NgWO
z8Gylf`+j+N(7p{HQSFh|;ph2B!otRk(;l)K&i64Ici&$1er@NzFjmf%P8vU5rkHtY
zuK&odLg%VN2B}ijtcscENA(qvJSi#ALsNhaQy{`;3V>pKX9PlcX=M(??lQe~Kt=_b
z+)W@%Wn-qtEnwwl6x=ZtUOlOG^vmtPIvZfx{Aks(8{^~$#)*?A?+%ST+v=MWL4m6u
zZ(Q@kEafj#$^2=%>72Dq6We~gX4Y#%Bx(GW`E<e@iB0G~w?%x1&o|CIIf&6I*A~-R
zOBfr0-fn}eOvN}EVRs6q=O-j9SUnUQKeb2r`!NBy?AEmApFH?fYn3JsfNGT>-{n5t
zp000|T(lcO>Z)ND?l*e^>-BSe>#Wyb)uR%3u`#<H^41-&vnaWHQ?=tie(DU8_CDAf
zF=gh`W3f=2%JY8E?#UR!_cEmS%4@8EeY9n*bOW$#MIU)?g@F|MS^0jtrypajV4p;=
z0*n$Q7fce?p2g4@XY$Y557a>G%i|xlL%WomgtMU-pMqg;D<Pp3z4d#8AGa2AQ=ixR
z>%0RXB&v9~s<=;q6_CI<lJGyzLi1oNEPCv`d2g`R{HFmwSEnc6rz7O1kJ`y;k8gpW
zpOYIxmbfmU|IGkhkS^Q(!1AMOeGmjBM(`e^8xlS(RRd>hMJf_7_{psuxlw~j=oalS
z&>6I<^D|mc`{|Z8OZ$-3(5_Ik^a2ZU+MGEo%K0Pvfn5T|b_1rT0h5W;a1(|fOybQt
zc669jBHr(QBWMr9F_E63iOxAaANIp*6p1iLc~9q`EL~c``wfFt{toX5AWhxx@M~75
zZC}Dh1Vh-S@YpEcNvZ}YM)cUNUO<Pjrx<B5yO;L(>m+HFvu2u160cr$$hF=%%-{O6
zc7`1{tj3H=BhV$e|J85m_<1wY8J?B^PbS;AQ`?oOO{7J1l~VTif!B;5a6RC#YazRg
zK1h&YJX3?KBDy9BPc&%Z@EuwQ7S`X_@$MOTcO&s`_@Ypo=5o8$rz_mD@-q}Hcs0+H
zI7ZhX`ZF%^dF=(m>W9@{Gj!!|Z_GZCs^RUJgMKr|D>utj=ypI3f0e?yf`srF5-cK}
z*XgboUwBR4qvf-YoK-kxrn?$S(a7$RNP>Gjbh`IN5HtlKnEg?{I8~Z??i`2Ws(g)g
zK|ELD7^S&t7^S@(5_hv53zL#0=w0q<Dk7e4jIu7rKhorDG?&YwRM+>?Ex8>@Mz+Q>
zHBe-0a4jIiBV$E~9G*2Va&_&tg7lay;^l!c!XiMTM-03J#tOHQY6;}tum%CamIO<-
zrH)1J%>|W@SCq?!4DSQb#4_L`6|UhtM9MR{BBY0=;6j1`hiAy1naYhM_G~a)vUSyI
zgNer6+Y)LpM9yqIG335+-i;}xZ-sX>NfA^_X*Dk=ef*MLL8exf>&}*0>9Ru?S<B4S
zQ4(w4m<`(4iOKK2pea3S7e*XqEsEczgS$0)8n`jTPaX!`hQr4&M3vqC6ZmuDfg2v`
z1-S`xP)Co>6T~+a=rM%w38Dsx6Songyt9WR!Y9On@i8#;Jktn5k%T!IommUrH%ib-
z3hV{4F>?9abC37R_=E=jG-~?3?V#U#Jvy%$*d}}3w5`!57PD9TbDktGonj!)Yx8CK
z_8WC_N6%#PYOTRCMLK(=GpCtC*ALQ9atBb_(<-Ty2<Y4-7Y?2lu6IUP@O|k|mBYCo
zSdB7?)Ut3t84eb}hs7<Kxy+7^j<Rv!4Ms-4@4PVLPSE1A@hdL&2$RB}ySLWy!R?-1
zR_rnukFcQ~=}5-_iLLx=lWn`JM3%oi)_V#p*xTCg7=_xf`Icc6A`r_OsLCRi1-yw-
zKw=gj1%YcFa6NYI9Uso74Kk0Vt3l%A7e2-i_?YS78^T#><?KUHA%Z?4JIL*eY#h1r
zy*Yb(5Bo{`^M-lO!Hvg_lHmtq&mPMMwa;C;Y#&Q}kp?c5<f$zC5gE5!X5XBxSG)PF
zXPCU4UYiYPJfCy5p+zydJ-j|iWQiJ{oC3%k;b!>U+~Xj6pm#?%UDP-t@}lB$kDZHq
zKaTZ2);Df!92<WuDJ~Z$bxj=YeeCBr7e1GUcqbFLHNw3Fr&<EscKbgxMOYxn_TgSy
zxQ<e|GJ#GTqzp+B?j!nW)%yd3rHJkSS^oChv7yec0W(H!o<FVe?W8k(=o`@UgL*_t
z%kHhKvX>f{!Q1uey<zirFr{Qp|B=%32JIIbRV}+&2Tpr^!K(Tg;z$%3tVTt1XQI2$
zg4}r09Uo7@`*Z~OQKgOz<m36KHt?WRh_{zKj%q1G{u_6PA=S-ZfQ}(M#m4yvkERaX
zzB_rBIqtI~b=$>d=X4$w7IriF!|l?NW0Uq@WGv!rAnns}$gy%*|IGE5)>eKBqm_Vo
z_7YVV@oY|iHqU4Y$aP@-C{dWj5uQHjxkjqNB>a4ELHg*!syRY1(P;OV;Gn5K-2sXE
z>BSxrwOif33}nY}?x0gE92<Q6+^+McmgQwj)Sl@dznrLj^x=ee>doo9dD4ps;j?#c
zIvF7SZeXle=cR)?*IGPnPb^D(o*Gs#dG1*H`0kCz1~#a}nuW5wbaw0MGW+UWoqBn-
zN6eCx1@!h*S$h2lMl%GX`L~#xEmi8#WW(KaQm7C*T6F)m7+pOks}jbQB`$@19Gc*P
z7_4aS6cL;sAK>!dxb*Or=PZ-%Pf?_hg^PwQy$}8;U05x%o3A;WvsbgyXGm;O`6GaW
z`Grhc7NC3#nHWauBT^%n6-G?A(fvTHpeUG7aEyoK`lgk-{ZEol-U|)Bf9C$%&FdCF
z&67&yVj5*{gZ!6*qLz%c0JQ{bO{s==2P4ANN~I!WgOj74aVuV@qeV~)2&B{}hJ*>r
z69J=hOU>S(6ObYqxL~kH=hd`ZEENEyX3z_lqR(t>&@8fA#@x6om73S#kkx4^7e5}l
z|7FI)Uk`dtevU>JBj2?}A)su=XCVT7a!Vk~-=n2ZKR=4rRY5UyUXPZE>w*;?E%%kL
zM+@@H?a`v=mej^*-QU!acB8pkGOeSz=zCMO0|rvQsS9nb)pV{0M10JwfJg$D7q1fU
z)gjUcNjPcpFa|W}J|AmJ%!C+*L6)VEX==2OpVp6s_;tu{1a!}pc%>fJ6&Dp&EH&{s
z4yLUL=YY}pOk3nuVrYz<V6FaC>r1~DdLU}aD?^sXY&gGTvt=@fST-+uwzD+rC-G@<
z_vQCrm1|Edky($H2W9!%8D}GQE;}8mC3~Ztx$I0<`gDm+FaKFC<~`<f?h$$%K{~0-
z$9nYZv0o?s^b!%^<PwoeTrc5_)Q5BGz3~VC#h4W*Ha+8pJY@dTAxk;Db2rG+_1BzD
z*x9V~sS;aS?&R<>QUt9j6Y!a#Q#MiK-8o&z*^xc`^4}~H(D<g5aHZ(q5}D^zLO0@8
zKWA@XcS13O4%i}m^Dob=xY|3^y!F>-ORn?@xu*>7F=KC(VMzZ?-SR_CEM+H^!7A21
z+I(1hxJqVg{@yTY_*_Xkzkk5IXJmPE@9CW|b1!NA<Pd?^L^9k*+pFY(+fUUKhM_)<
z1%7otFS^I^>s9!Cd@{Um{|Ge+g%3>54l)wnC=nfXYkaa2x%l0=2m1H_iOQcu%sMo5
zQ+tX2rbs<|E*a1%r)0`*7W=&RaH%9uLT>%1blg&8C0(3Ww|<NHtHH*#O4DWOEFY8F
z=v$%aTQc&2WcQeWBgXunGEC?qdfx;Jgf?a3xejWOIQjaVc>nxDffb?(nfYK~PzQPD
zq8LE8fNC7M`n|b_du86#%I^=DzHRF<C{#b8huvC@&FNNa!GxU&Ea?ypm@CP%N7F|c
z)HzvZU!SdCr}@$qOlnd{f0`gm>K->IU_Z+pF+ZBA0ioP0=A&8YLnRoPeo^5v4DyRq
zsR2Rmq&y0RflmZJGBvI2Mz!2+y%yYm^~;#C>r#rPUV%ujiH8K3`K%O%_a{KBz6eVy
zjZ9T-BCp^H@7J^5R4HC)(m|$pj>v={+FK36fh#g$K9b+xv8pDD>c`~7$VAqgr@;AW
z30!cdiA;AcKDoDy8%Q!zOrVm(nBvo>W&zt6u6>^Wo>6hBhd*IIvM#OKjt>Z>360+}
zDziVBQu+h?h7Ic4Z8FUs__Vd#v1iUPc6JMG)tR-a-?Ld_*V98cx0l$}9kgo?+JbYV
z+OGTTsL~L+Y#%jRL@?dG7A^}N(UCALBJ~U5wFMDzsVH(OxZUlO6UiO8zVZ+b-w0tm
zbHxq1jkTuTh;)GryI91)Y}HODy)r~%hL-8M=9aBy%?ufQB>8YPrJ?rsG3WEKkqxDQ
zvr%mCGB)BEHFAhsf<M&&tFn;xDivODH^gEV>p%)Fsb53@{0I&)*G+YKs1kDohR&aP
z!m|tp#ocj$6DnAqWMfBWo*urUb}-n!ECo*7-hbKsS8tD8D6>H?PiJSG4byG26vHAZ
z@bO!K4eNNogNmQ*jnlyqWUF83ZUU7k+|>Xg;0Xd!9({#&aXNo|@2#JxU6LNZ<(3^&
z;aPf!k5BZ)=}r1cOTP)Dzf2%P*XdLe#NVtc?o*&R>2P>_anhHx%1>Ixg}&PJ7YE*{
zLc6?7+p`}Yzs2r46XarND!Yx5ah*o*Er8D77pH^e$8vQpD<IM3n@R%RzBu>kpT0P_
zb1d)<rchwV<)TsAfL|YO)E;Q}=%F7TvXAKi=N;#_biB5PRcC=5p5s~*IRfy6k;WKp
zu0^^jMJTX3Sbl^qh6dacqrn-FFCBA?q)^PnOw2?`F930hcA^I7+$EnCG>OdWGA^U&
z_ygL9-Fh74A`*)@BTLO%jgt{9psw#A^X~!@e{Y=*f=-hDruzTttt(_1spW?f*)pfo
zCfO^UKYxh5eQ__JDb=;jl459p%yvXu6Do=Rhx)kLV$jimP(2Q8@*16Lq{v)HmoZI+
z0|yD&_K0+=fv<pwjz%hlmA<=Un<YV!LzaYJN=hoC18r~EDy5umQ4o+QNei{jdA}Te
zCns}8kQ(^;9olZ#nx@*LPv7ikf4<wd%?=7ZC|UcBegOZQ@c#WP)7%29;o=?|x<~uX
za26QctUbrZ8fwFev#W6)pNFR}V&MnxOLS-g`p8vpt507PYc%dwuVF+N3hWSI^;s?G
z;e5FaCb>v3SB9Rdl4?6UE>uwx<@xp()<*D-EseOGm{g=~|E$5oKQ8oaxi%~3+vW$0
zmKXfG|D9?Xv(T~6zR(U20iJu(Ir3E`UqzF8s^a0H9JVr5vT}bpUuprS=#$b7tqmD#
zTzB&iyTL}NCP8S~3ZP3!c}TmFuLfUS-+s=dMkz~EUk$yquET<HjguPpHcOF5zn59d
zNomsSFWr(^>j`PYdqGoheXFgf??H-5h_TmKgWN0eu%e84GzFnB`w<>6$Mb2Puo#cC
zKN@K;WaJBb<)wGFJf`2boYJ}_UoEiVv8L26dRlH-ScLU>tvJ24b_K}>B?G!V7UB5l
z@=@TwQTjXe$?i|=MiIR<3amtNfuY7m3H3JWANrQ?Q5g(;*_Yepp)U*L+9ZpLjHVB|
z&5QgZ^yaSIi`7RiFAim~58kMDq1vKn+2_4Ft~t=_2piUcuDVp|KlkFF{bEt%H#9Z%
z%db;D*xG-*Y|tM3GGaELuMfb<_99NkwXFo9ZMivzUq-F2eyE8Su{0pj-x=<o+RIlT
z!ZJisJdzb*r&@%Sh~!#-_aVqJ-I!vxf>ycTLwMoz$e9tY`JbZ0yR-di<#Jk+K?yP2
zZ5xx!D?XWf>}}J}N{5a;=7v_H)oiTG(FJ{_t5;Z>div7ixtE5^@+T)~-=Q*FGVVW@
zpiP=w-zanCUon@mNkcU?ry8fxRB!xJ=SO_$6}$nk?^C?<368GPD&9+;00W+A%;YmG
z!VcyLJIZRe8u`)<tC5O$Y(ar19Bz<qoH%n~>85F0;sY(+hD_Wz<|Xy?vV+qP)QgN;
zICfL{!?4C%hL69t#>~$XuCE*p7wC*dTjzD|@+?i5ymj%KNiv(Te%tEPFJ9U4+!8in
z%$4b~JpGfYV=hfYMIH~UiIH=Ft3;FWYS2IR89nOaHG_lriUie2c@ly*!Bz2DlZkLi
zfKSFGh7MF3R^~vw7wEw}hNB9aP!v~jARrL$;Q!p=Lp#C`QXVUyL#ah8`aE9yES6^C
znE#-b_F+7&8mrxi|LdA2wP$^u1)EAXYS(Gb#*$6!Dxb;sz#kt9{%C|RLSKuchcJ2Q
zEDP(aFh?!O*NI&5Malj<i|%N@N%7_1NSE0Iv~Wwa$)(C$$Pq6hi`2~G+Psrkp;!yN
zfUnPjHYBWMphaaSu}~AMPJ{VMQ(q+(?qdF(8kfXXUIcmJI^&^UpR{l_+x<9ZYo3qx
zn{6&F@?HW#5FQ?FHV-xg&nnDiNN}@@EOL+5n*qY%YHvDDNeoqBjD}wB9}=+Umvwg@
zE58`#Oq;enB<l1t-L)U1Lf`5a5=yInee=hFdxlBFC$#Ap8ck<)`o=kCdSvv83zg?b
zMxUqeA0Iw!|MbJ%CHB>uBd4<g9j7&{Zkzh&siC9yILerO_boaKDdp8_^jI=JYf`d(
z%Cfo*!fH>L-<Vro*W}yMLgig#S@0}OhXHe3sR)fY5EnOyb-Iy!VR6l9zP2hgqgH_e
zhN)lC)&)(Q<`*_@Os6%=D{PF9jg)sA)yQkY8ux2HJ--oaTpgbqfn)bUM&u9RI(&s`
zG1;tEt6hg9yqd`C$5GGg&jmlt)oIy|3p=;zBzrEe?F}3S=Gys<z}#ab(2SfNl}J3E
zuZ9M4ea~;vDFjih50TrE-(vFiG8bd*z2w7)DKFNUTJ<qA7^3hQDzm~fVA3MMi+O&q
z5iV(w5zNyWGm#=JHwr$z`I$YTftIoz&ux)6Db3sWo>_@0t)6-@$ywJz>6ufs#mNXu
z`Rk{(lcxuSFTX=W)~YmdO;q%^+TL>~v~Sn4P8;^i^2aX@K68u72iDLY-5Fc`Fh09g
zH_3Q9<{j-ZlRu+V-?&PtB7dqaue^a;KN%~rH?@5iuV`B?%ko9aB_%n_UY6Pc+m(>d
zF;<PJT!kYm!t6-&NJ`;N;!{Je%oPY8?sTV)2g>3afwE`>%6!m<uv-Mj+Q;#?x^qK1
z(f_+t{X1X~0Ww=EsJ=iCkb%jAal&m1tt7oBxIbhZqGMwe)_e2_xNl$GKP*V5#@18g
z4+oVln6WajK&AoO@g_auJ9ZdiGS*<{DkpZB*?;0}njah8N|J|$j-AcehS}QQ;+)(C
z^-83A`5D<*MbLtjNJpdtSVgcEn->_#R*HQQz&Gd7DbiIb9T{m@2Z^q_S9PHie(8a5
z0w91X&AnL7xiLw~qEo1hZ5Lz@<z9xSokR*rL-K-J{8S^3v|_UZ!Au-0i6dVX&DoAn
z|8)x1eR!pjULq5I7Vo8+5-gHuQgYQaS@`kNK-FpHG*ESNN*aGta;}=3jBMv3pQoxM
z7xAxB%#Ipmjx=*=1MhbtPUJ_LcJ91MLl!54B$FB6A;6ObZH+cqtwtM$i@SC*twNk-
zW=@R0P5Zp*Pn;#ebFR$UMl-KiqlVwv1R6d?Pvx&)OyxD}731<2MizoaiO(qv8DQB@
zt)1U;a9~jF?j`Jlw`l+OWq%sYTKLfvN!~+q4(+6g`()7a%5mCDQU|Im89%9YwLwYK
z6Y52zr=|3*-&kHoS)+p5b+L*KNux@zbW%A8eiExPnQJCuA*s(U1fV}YiaVSG<JdMO
zcn6;iccsJZE@ndz)@6CJ7KF9P2MN*+SxdfB5d0#_OWYinf_UA0!2lmO#}t-Ff6Mla
z9k_(ayG9LJR$?fqVQ*(J<mVQ2l3yBofU(WPC%ga}9hu#tZLJzD;KKv$QCX480Yw;T
z?jNM(_B-|zz!dz~`dl8A^~s@Dl~5j+I2NSDWA^aQ>hjo<$H|wSqE9Dl$Le0MtL;su
z-RoTMUw$b`Dv}mn(q_>`m+17z%0<kGE^I6NRXGQI^i)kE$IHih)M;1vX(QqPjP{~K
zWrQ;b6<#GyeOQ!c^7%4Y+*K{&Bu2u$dK1nbqX&y&OkoF{M`CD~{=vqqD#eY0PXxZS
zVD2-DvZ3vE+LvuzN@F`Vs*+2a)uPikF}85noT+ujFu**Nt!57aa~heT2Ke}}{IZ@!
zBnvRBG=_TtXCdt%hNIBv17#o;+BZBqHlMpN%6N|u-SS~=YJ!c2pwX2)J~5E-RnZYH
z?gdTcLnq`kk!hpdJJx;L7|_z%JK>dpeY59pR-_gk;8{7dV)o`zc|<`+W5~2#@@Q6A
ztx*WWs`KG9m^5`j?XDSB=8s)~u8yYNSz&H>h4ZY-$es8=#2jp##F1eK2b|#1$2cQ`
zhYc|y35&!fu}GX}IUT2!w2SW<h;|KH{^#(jc7j!I!P?vqA5W5>^WD#zB4U}kH&r+^
zbhnc374uC<0ZM!vNeJ(yX2PJN?+!6BW$~sSCHG(bC~VluQ60M6qcXfG&vdT5U6N->
zmd9^(8N-USy2_`#moP}ATS_T3kSvvnH7Ra76oC2BA=d&Z;Yu3fEEX=J3kY^PVG%tF
zuiuTd(5x?Mwv(Bt<hpX52GU3E(E1Mc6fKoHW5&g*k|&=WOS}SnV^`jAl_6ut)3xii
zX;Y_m8}?RR1kTzP))ouLfz9h$U78D75K5|gc7PE|D^i4f$v?!zCk4Rdq=)5nM#wyf
zI?h@%Gwp9$>eZ)AeUU9U2XrXRk!y!`u0MLJVU?jroe;xvj*UB*mGhLN@URslJBRnx
zjSXRp`C)@oxGYkGxiFEuWQ<|4S&Ue%O||0#--)MVtZ1_!cQf|+;99{EX*P0JLtz~~
zrG^Vn1CQ;8dL);i4ZKG+RuZ!t-HY%x&7<``iWJ_2?zyLc9mbshwj8YG+82ThVIOQ>
z^<t1AaOl4ArY23>jtVy6)NWLe@}_)g^HY1?gTAu$sWAt7YAyPYVr=rzrh|qvHf0cB
z5y&9RCkt7=4NI4eWE({na36j+rK)lWdd)u4nr*^)JN6_nQ6o9PkbsTIju65+%Bt7E
zGo^Tj;}vzue~`JxpKZ*x;+ee?^FE_zHHv38;F+D^HoX1q;+X@`APAn>Po8I6_4g!0
zLrn(Cs@H%`@_{x(vLPDJ*Y6EfQ{3zKAfR>sL@Fw$>b?Tu#pV8qRCocr6zS2!p1g!l
zUo5XL;p4snu1ayIU7maCKmm6I!Leb~JsWIfP}ja4riBKzY}0XK`2BFL{LINKAz>Fr
z_l>04EsJY&k4I~^VbY<lEk}>-(2udfU0=Q~%kLa``B0xOD{1Z82+q3wAT2>duB8}^
zX|UYF5aXNa#<gy?3B(H;(iw;D301@0D>B0UR%AH*SKX*V?n+4C_6fOjs`Hh95uy@!
z09NN<!5J5SqG0v8;bi&dY%S#{?PEDZdfVn)ZD&z7=O1<0qQ~9nkj}J|c35$|sSSHm
zgVD-n@EK<#H|0oq2{=R{-!w!Ga4*3M$W;RagyUG2L~0HdUR!PvD`hHDtuZyZzz%|8
zY@w3fLah{w-@$`NKHl+&j+m=G_jt!+Z6lpZ8`4HAv~#rKZlt@vwt_a$UgvS-DA#Uf
zlX4&OHwC$EUDZT)ZX4VuZYPRv4GHzpZ{`EFzWEl8^fE^r-!{uPvW4^`WGwR~j+xwd
z0q-VXD`w?;4Dk$p8Os+b^gskHk;F`KF9LhPblo;{%JK7~m}Gf_=AS(~Z`{il3q!+O
zUeWGq{iR4YyWaeLUsZ`?Ws1T1Z2f+YuhYV#<Q5z0FOIL;(qKC0Dw7AU`D6OLgW6#2
z@>Z7GxuaCSjiR{756@9^(`My2YchpeA7SG&caAyVha(u7Hr>@Qk!izsRWSX74+(<O
zB@r|afp#tn-JhVh`MMq9%JIow<MPSM`LAq)V6tGfnOn1E;WggA{dbsId-uok{QJ(W
zoxhxSI4pGB2*sg&Pw9Wozx@Z*Zr~zai(_p0_>r?@PABom^J<OEpd8XeO{vChQ6Dz*
z&qM$Lw(tvbp%tod_n)sTOihjwJ~cSes``2mu+N5j9d0NLC9zFUraP$u@&m(Vug4bx
z@RT)by8l`NRD>7LhRA9C5{#y5%ko*k!`BXtZ#;BVw<$rUnoZ{f$TjQKG6pnh+GBF0
z-2Q{VWcjsiHM(wjDx=1b&0`9WyeYGWZ#>n#MXe#NmW(ax-MyE+buU?3xD>P*=K9_+
z4)NG5tb?jYG?mqFz{wrzMs68D7I{Xg61Z6<otwqtB38ff;{g?(L`eu0HAoRl3W9R6
zGNsfv`ztbtM=_9!8JQ579a$$*?ybhVA1QW=qvG6SNyWLvJfEx>`DA^I$Kvy`bH(o$
zBjN1lVi&IboO$3J>0bP*mEElX>)Boxp9A65>OPm1%%uh1XE23QGcpZA+ep)`S%Wc?
zyDqseP|rsz;0bBmvdsiXHbnDH7*ZhfGvpBy&*UF=ZaHQOq{_GFLa-EZYS*dA0G;{S
z%#V6(J$?RCT$FQQ=+udwH?}Npc)k3@gp$e!My?AEXd|ua_e?c<!eEp`Egf6$k=aYn
z?p9gLjMT{z>(s(BU~@;N%v%Pp?r%3&E!)mme&+t7dZ&hbK&3uy>o;fLNlTZe<Wyb7
zXIoRm6k8gy;o+%D`m1Jlj+oi(sO%X>v8$U-!$R@mWNVHS4l#2swqEetGywaz_<Bs?
zPV-Cuq8urnWC(#KHxEKk!fF>>N0(R9-kuGu!Pfovmd|~&UvS8>JBv$3%Kh%tKh<+@
z&)e&-)YBdoJUjQ0Idu4dDKEq-kz2JhFL!xSySH4D=iQpW_Ln8H+<kM&vgxB*R6k#^
zaK?0JQGbP<cy`)eNhv!5Dy~b`%Ej{goStEMbyZ_TjEJu-h7ygV0lojna({4lA&0q(
z!!Kk2-?l~fZ<NM*Wi@yVOs<Lr^ANed*;sO9d6jhOW9Ruc#dX`Xs#m-1>eh9O+VjGi
z-k??LLaw$hEP|fd+!<Je{lZ$*;i9%VAg=0~Dr1QN;7)^ov#Xlr-UA~`cx7=+^^BaD
zTKc5Z1HryL1!D}Cj{_v{o6($925+0NYwe(63=0<vV$3{a#gj_iV`WHp3kYza#$kQh
zZ2O{5-~L;l8E0gs$gO{@@6vPd)@P=eB;%JflCIClAGEO@Gt&rdT;;0M4<!b(<SEzN
zY?qmBE&X88h2oAoHEjiBN$csg1()j9nN`0o8){*6{;vz`)N$?(WzyM~I&lr-U05!W
zuzbSdz3S$ZQ=5QZ|JTfB-EPq}4sP@L?!yEv*)MI!lgrHW_dL1GP}9L&J*h3hk;~ql
zy?+2wTRPq!G2;cE%KW<`_2|8LK<C`$$ZUz(qy4o=k|$$}n_bSEvqUa)!<KVb$rXt$
z6l?GZeH#{-f7X~jTsn_*XYtW6WbUCZBkf#28B4G~5#K>(gBtJNK?WI0(Vj8)(+K<)
znfV34_2zkO&g^Aqs)dN4oh8>VsR^9YHxCFN5a0Dr{>lYcy^O{TEbT%1449&|LIqRw
zyiRTyMjO_bzj?9ij_-y?)=W4~EqhzOFLiLQo=$VVhV|5s*S4Mc*2LDkK26LGFqr0t
zQ+Ycz@1}JR(2!@C1xu?hYYk$hV3<jaeR5vA-n{9gWx(ZAkWRNCoszNcsffI$#<@NJ
z*cqk@G$FGi&x0qwJY_)@I_CAg^n{qULT*_(zcU8#_^Mh<oUj#zx~3LnOj51fTK~vd
zw)#sgi&ZFyaqj1^bD@vO;kH?}7x~<|Q{8(hymXj=ev*U>5{R2jk*kqs#Poz}Z+Gty
zRv}h0Iz?{!Y5jzgHTJ!C;YwVzb6m*CVOzE|Z1fH^xElMuDLLQGd=CpL56|2aWi%a|
zuq#1&++lG6eNizgrj9ImH<ed1)~Ee3ti$~Mqcw|nN=n~d^%^4EwoR$bR{y=BRkbgS
z(p!7`SNhE)mF}S(>5P>LIaRRi03J9de=hAbz!K-XNGZ_86!;|!@Ix5jXdyWB&Fc_9
za{E~ELB`TQ#Mz)aV4;cGVML4x%Rh`seA%t!S)W6rGBb_FOw7fdrzanIgVLO3@=xK?
z)-7@bjo>ou5g^`g$bz0OJb2L0!vgT$s4_<sK1RVcDg}Fe`oMEoV8tcyT&o~YL@c;l
z+Q)<UXmRfjGZyvkI%TAxW>(D>21AXknk|(MJ?2jC)P44(PL-c(UM;JE$RxTge<oc~
z{veU0k=R@i0Z$WpVM;PF>_OoZQNuPQkS~xVh=9Y14s9Na4(3yYw+^I+0S@wNP`^En
zajO;EFJ1|r-zO$#WUWeV<DUy$(69Q2)Y$e3$`4alh9Yzz4K_{K$Y^(&N<+96yp4^P
z_eeFcK5EyOr1iTE_`QW}wDPt4-f}WzNCU379+i_>D)d$(sZ_CJANNrU_P}Mn7#%=l
zg(YdT7tljfM<!G%i_9>@wOuuL=dAD0Mu|+Q27b)jV4hw7D*W6+Z$O`Uh$s`3iu^fB
zr;bQSEQ?N;N!u0k_b&Si{*yi0O&Ue6qK*H1=fJorL*f%|SZvzOcFX5)nR$oz?WCM6
zjYmH+$g{#5@GNaBya5|!BDDo<8Du?DPmN?fZ4Y~%xpr&kSx@2um4=g4HAL(R36TKn
zjW{Cwb}U4^8U*42-C)%}#LpNTmwcmA#LO>dOo~nZFfn3|cD~)N^`}paf4^C~7uKCV
zIq3?=?+zxjr=?rS>$9qoC$A3)5rX)*8X=@Cb{UH@@*&U2-)WfLuje>soZYv_I95Jr
z7Ms#1YtY0=0M$kET))XjvEL!~K#~aj4iOZKsL-bfX(Y~+^d=>2FgzmI14+z0W)xNg
z<ETgO5Z{3<W8eDEDDCtz3)be)#gTLgo^$<;=a~K+b_bG-!nq@f=ZvsfC7N-IX-AIH
z`g^4V+N>yT2Hi>*;mI$_SWtaBxNZQ<9ZX_8V#l7UJ*G?Jri~Swn*#1Z@G#w1O3~~A
zG7+8;zPBPsO!uY;1atV?xbDk45V6f5tJPq!UfNwzm=3y)TM@m^h!tV$48$aTTu{)~
zeOAH2H^8^H$PjuFjv_VvL|AlEbZ)fNyVT<IAZ!hveHank!ltV{Pr-)Krzu=sS);*w
zd4`-3xe3Tmh(N5*YJ^GvU0y`J8*7IGOhGe-_nc^)F>&+fgCk#x-Dlk&yXz_1{Fi|%
zYxM2A{(LpsKURCuN_()d#&rjdmssli@k}cDdn;WvZxyzFg7KaBu8pyyFRq#gj9?Z^
z4>4o^>wcKhhvk=SQV|<{5j+rSD8dGfBC%w#YK-H_nLJ*vugnpuyROFzWk8pBLN(Mc
z{`;c2iWGD3E9#X~JYw$Sf#C@OKI>Pk_5vZpj65IJXh#|(%-FoP+jb>y3bmDAX!Bgl
zqB-MkR1Wzl`MvF|^G|2)V<8J|fA#~JW>_!hv8zu}EM<Y_BUazYdknGgo*`oCvzw&I
zOVRr!d`)^+g!-dj=zan}v5q134f6fN<HXYe`1Ge4MjoMXZ)Ir1W@qS;)hgMfoul)6
zPYVnE2<va|V^z-1(72yp9X<L}*FEJaGws`_2SDfD8GPabW9H;X@fannAu=2Xr^<x=
z{Dx|A`*lEQRls@pv=B(vd*e4sert)6p_e4<U8{<Vs``cBFjuH~ylES%x%XbiMP*!6
zhGN5o&p!s!C#9Z8d3{p8`PgD!q?U2FQU);d?-fc|bLAOtD9d8J5jGWLF4irD#C~zK
zj=pY*_6yH=_<EZSEsJMNy6z@{``fh5+vNk$c7eElC$Cg2Xrld3-~u#JgL#NTS|SL;
zO&Ny24e_vFkE#}*Jv;qS@joKg&j;&=K7Ds{F-#diU&jB0K3}#1^rZ>h!S1T^MD(Q#
z^jWR&((@RiPIM{mRbL^oUmdC0EzX{TRbOU0Gz8=}WYCW;a{vC4l%CVgp*NF2h#Z4J
zUf)w!Wy)8B_3bc3P#_JpJ&IQvntS!^C+L!|5TmZIAr9wAX-|&y#eqIJ<>+|ukMu>0
zXvTku^oczxv6&oCCFLf8XP?%8MEVN;d!+Bb#`#7A;t<IKIakv?WrUflgDO&5`M~I^
zrGNAT%tu5&R_M_WJ@#RB{lZqlgC7F!*<1~Gb5F!RjGlQZQup+i==cD8^-Cq;c9K`9
za0hEerU(SQ#a=5jBaC4eUpq}-R1##isLK{D4+@LGwsc*l!1LODiZxhvY*@43A<OE9
zHTxX&cl%gLI_{`GRx)C-KXv`#`kgJtXz>^)`)7<(hpu9^-v1-U8Swuj#u=Yz6N6~^
zUt*l!{tqEe`oaGl;$*I0G0rovuKb@n((2vRO?lrPX}!pY&B3`9-;p**Y->=lBQ0bQ
zR9O%tG$Ol^MGs2om2fIi+Y7e$iq`R9UIbR^Z+zi}#q=K2(*BGAe+hK`#@0zuh>DFy
z=*zq2SmX-o;OOg19Pl&y1l&}lJqSUJZAZNs7{2?_dSO;Q`_U%&>_?k!EU*{wFd?`4
zpoV}ya7RR{v2YswGG04vFKjd#>l{xln6_1R$a%SSnwyLT`3>{wLi)@Gx-piqMU&?2
zz&@cvXl@#%EsFB%(@e;rX!L0!C@E6x5>`oMtn!~{(CJ-}_`muF0%tz(8bkCrpif2w
zcdaCND?xl3xst?9EO$5Tybn?;+<;b3wghV&YMivUdb{33X2|l1h0E3l8e_4c+tbC0
zBn5WK>tHbENoiZD)N^E$l@n*~VytvklQ-@JXx-|i#mDt%lV7toM#%<xc@?ANzw4~t
zg^IjRIJ;yobSe>9A^?(a1A_dB7qu4e(o<UBcs7LXboOU+5$KbUHToNyC)t3lWaN#m
zQmyX1QSA1OU#q}T-_=KGQu-@}_~E{TswTeL!cjH%#1~b6uIj2P^*#|+HK}SY|L{`P
zb5-B3DvkI3;R98Qsfq{Gkg8&}E%Ym&lmnz`m8N++0LTp$sRnkDO;`Xjkwgj#e9cHl
z!Jf2Sl!(u4w$z~M5Ltd{$=nT+w55wIzc^#cn%hcV^_s1X#)4|OZF7~ZjH(TdhMbJ5
z4Ook!Zk6keA2%1<v<{lpws_FUIgCxxnpDm$%&J_o7M+z@wMNy<teT*wJlCIWfxu7-
z-#Ob&Pspg`UO6s81Tu8YRIH+9VZw{da!-U|>&ILs_2wxfzCmRkwej|r>ze+w#my$r
z6S@p~LM+Fg7hRAU4HC=rbegKIT92M78&1!gzal`1*2+JL3JIRNx^dm&V2K4iU8}Xx
zkWKAHD<;n0$7IL4S|8q~&$3R3SwXXy*e;!lYc%4vR|#9jT*_;(VP1p{vq`sMgizq7
zNjQW#uQ!Nof~|AZW9wAZ^S5<SZ#FBDWaS9z9Te@E-AK~+N)Zv}<=E)=TjdPu9P)jq
zSdYZt$+K?xJ2$XR*vo^rb=bEpAr(<iv^5iL{jR)<I!8pESoiw`x$?H~3oFR}<1s<r
z;y$*D{V8f6^?kD#LSCCM9Od;q`}H$~T!mHbf(4?9*e~C+Gts^01Y(wY{(ugWpH6{o
zXSkg@izlj-GM`WjGK|4)eAWm+r28qO@S-5Ij{hu-P(%5qT_U!Cy(4Wtn@37{O~#*0
zJTb;^56PXMxAATwdAikYw(=mG;oVA-t<>u2TS-!_19lqTgT5U#B0mm(S03eWOncG-
zoeqR3;+P4>uL%J&qV{E<+LN&*UPbK+G=%unK5DdAw7r`A=B-`Pc9>7?E5@vf+G~;c
zX6F_-+-Olgb&eV(cOCc$M$pQ%prRMgRXn?fuB0OnXXVdE-h!zpsAaHL$ag12EiB-{
z)6?lIuE!W}T*<E(>*9VD4-Ra!u8xC>D8Hvy|EfKio_#`X{`*UumfUUEt7v;QdF2VU
z!~JRpx@+_PkzZ(Cw8D30tSKPOaYN|3<!wcX06t2Jrxnzen)}qAOs05i3)_p=Hu%(z
zz>f@MAj-=rV6|(aw{}I_CZF2bMh+ora|m4r1cd0PvP6s?vh~r*T8xYsJ%x{e8y8}q
zK0!Ts9z0L*(u1&LIb3P~rS@dxSr%}5fPXRFuMVd$cZ;iOKt&z@b~s(R>#Rl6f`AO|
z<oLD2=?ZlOUDfAw<=z!cK+JzciO-IfPk>nOpV&jpr}kv}jkk6MPx8>Rr)>_qyY1EF
zOK<H8Y*;-Iy4&UuqPBq0Dj?hqygx18Syw<fnZD+2Md!PYAWth|XCVVYD^1+}Auppf
zkLRkwL!x5^wdG`=+LLLUC)BRy)AkPr>S^0RRwHlbpDkDS)|FF~KP&34?MDAqH`k}G
zq`d2{E9S&J;RAK|rEf)F){wjSl_AeB=v4G2|CXb+d-fM<g?xt{)Ndv*IGxrJvtR7|
zB6``vgA?pAr$bW_PD$}V!)s$FF|^{YJsGt0@7k$8wXtosr#5f`^78c)a_5FlrveVq
zPqYkeZ^UrUKX^3lJLPY*umYb9r184H^%lh3<Spp)9(9@1r|#sein<jZ7k$?Ax|ftk
zo_6`HuMCf=2eyiq^;yqrf2q9Xt}SMLAJ^Z2E(Dx2Q;Z|uNX9_c_Nf@hiZ@1ka3S^}
z5SZ)e!86ZW^Sn_=1Kt-MbN{S8nZghFui7@hwmF`8+rTr1_@6E7JVUfBV0PDC+qnYf
z3Mlk3ao6Rvhq`=BX7e!-tCdAhx_f$Z+zXq~CU{TudH&DZlW9BD1|P#lNjh%abvXRI
zMZn)$ui@8<pbpd!vtR+A1@85*0+!wamdP~E-8%L+i*RGdT}M2NI=mNXo#N9^_#M1x
z(go`S_!U8ZBotm&h#LI5U&X)e<T7nWud(@3lvG{nE0svEN#7u+J3($D_ma=b_pw{w
z1w(*g3U*zx8h4u_Oo^tdrdFm&rso2bfD3_v*k1OtpzNS=K?j1Pg1ZM#3Vtd0VMwKr
zsUgQh<3dM<eiT+K>`>T8=1S%^=I!S1!ehfbh0hFsCj6D~FT<S?l_CyVtd=pBk0Luq
z9*wFKwKVF@=$PpK(X*o;Sesg(k1@wAh&dlyH+Dnp-MGlOfpLf8eu>YDpAo+<{)>e4
zgn<c{E7>dUO$<!TN_;m-N_r(ZKe=IYzm$xWhAE3uuBN7?ZcTmF7HX?&8(@3R_GVgq
zT4q|qw4P~`)4oe@lU|Y$kTD?R<ILA9*RH&|N=%hmRW?@5tomJ6YSw_PgIUM2&Su@o
zX4$FP)v}AT$7HY1-jn@$_UGBZ<j6Uza`se<tTr__CHGwQnCgwHZ>SMmqkWB6Yo^ug
zQ1k1&4tYcJX5_8R+m)y0UCH|#|Guf!vDS!M^J{IYb+FcnT32d)SnFQClpmL$kzY5z
zQ~t>Osrk$Ecjc@37xQoCf0h4tfw>^FAg`chLH~kj1*;486gUbl7u+cL(a!8K@ZuNQ
z+uDcNC)k(SciK<b-?4vXzh5X9Mi*ul<`p(6<n+f!nAswF=l$BZZ&;l_NvsJs2)X!6
zcr||hkaqaxQA6j40n<zqK@<Tf;!oPZ*TcL2=-+4tg(VR?TTOP$mq=}SB6&)AjT}cV
zcMk1A*0OVC7<<dLUYbUR%DqWldd{_+ZGeWIPpV4^uDPh+59Mc+Ae0Q00F)jm15uWs
z@HSVoSdvA*a&3{yNlkeG86ZcJT&avaXLw9%Dz#jD<ey2V5>Eyz2_#b<jq)_EJCKpe
zDw4@+lYF^5!B4y3eqEAj_z>T%L>Yqbi8v3EzruH?Nt*mR*`~yjo=O<mYPgN~+wZOm
z@|)<}3D-BQs_SQ|IXR5;45=q+ES0#Xvl8s~SC^#9!-!dqBZcxvz*~#d#&W;D@;KLD
zcy9<(ND?h~1!J>f{44=UGQ5qtJxPc>nH0&xT$khtsDBanf=B|}iRXKemeQAGkn$dx
zD*fs@EnRaR$N4+9hg7FdlFatFHY+trPZs0)Rvt`R%UfL!lv%_iS0Od&U#@%dE!Qn+
z61iqbBz>fL<gD}_X(4we^ThQfgtDFFuAE2W*$-F`@dMTutV7oQZrA71C$QgYBeoal
zx{mvIr02x5OgTbM8w{k>P@Qa$%3L29JG++3ImD(6B2n^7z}wp--msB`$*V|Hc^auJ
zk0n**Ij(nEBuO<cB<<i$c}n_#GWH^QBwZx8l_0Xs5J(o#*T_+Nnv~G1u04{0oRmVy
zM)ugXo4rnUD2quR8%}z&ey+cP=Pv=zAkaY@c?8)euO_YJ=Sg3~19xFRxW2~sqfxB*
z{0GXf_#B85jbcMFq2!^IpbSEpjj|kN1IkR4eS(fbmrAkA#p&sZ1@t9oi_@2<aN6=M
z6?DaE%eQcv@+pF*INdy{a5@4F`4)~#-%>$8oQ8Z0Xou5}UO4TzxOBpNH;&SRAy({<
z8fpVDuL*rwpUL8UA2Vb={R7f~C|i^~Jd)%-OV`K{KK(r`0H5Yz*5K3#Mf^2u+qM~h
zLn^YAHA03Mw=j}S=uZA6eoM}Qi)4741Qg_#0F#Wy5SvvLgMmqK7%&NonkxQ~sjDcm
z$$&pz1KS-a;zC@Ra76G~mhm+HaAa6nV{(6%6xk@_D<&Bj9#xpQR*a}D;TJFX7qX1t
zgKWZ=$O^$9Gnr%w_c%QGGXNaXvdP3R{r=FZ=TE#1-|5#JQ12g_!rS#f8J!h<=lxH>
zC*Vn(`F0k=h)f}jk%gU%RTeS$6hh{ZUGR7uA?L_j<bCoje#_29YtWADE%qt9l^mHI
zmz<cKnw*hboZL8hQu5){2xuhyF9dDu!alV}$Wih-xrB|?zJv8xgLd#dX-SSrP7qHP
z`8<hr@vgh@nx2O@_zh?j4^e(Y>ESANUUnXL9=kK=&dfVA?o7Qi>CS*V-S1TW;`iID
zMIXdVJ%_3|<9D7(AK#l#{Ct|cLS7|j$ZO;*nNLoU%j633Bi<(Okax)fvXH!oK9`Ye
z<O8yZEGE~<4e}wmNj@SU<JY&AlCQ|u(DJ_lR=y+4$a3;M`2i~%ekAuu3Aqn@AAj_&
z=e?Xl^*@et=&GXdaY#m)gTlvVm#3V-c{j>olz}KmJOz6t1EU1vLC9E?*HPX?IgRp`
zr_9Is63Y81yk427oWl7U%1xBZC?BDGjIsdb6O_+U-b1;K@&(EwlshQjpj=1!)>D??
z{2j{ADEzr!JY^})h$oN-C|{xcg@O?TZU}*7CQg*^Q7|b*DZ!aj3orM9s~YYiYzwZz
zb1iozCMWvE3t5db7A)}sU6HU`?n2fAg%*@Z++T-t3<}pfpT#)=B@v(DU`|eT7qS`W
z40j=0a4teAMjh;Qo!r=6uttR><EILFAv<u!IPgMta=zj&WS4_vw{iru>xS6w>h7ng
zYq6torP2VYZ=W0o%}!2kGQ6>a_RDdwYzM8HlH-uFlbbrE^rjuU*}5l}B$u=pRFd2@
zd078J4mn+%@x|bh?zzbh(y`lc96NPOaWv>2U-5Bp_wL0x4w*NDCs4bjI~o|_X#i(&
zE7zIhP_kPkJEV+u-P(6^%xfI)XwbNOd`e1k6UXcAx;b8N9G}v?dyd0U0V80YJv_z@
ztufnSsG8$2xm)Pi&Cwv<LAsZe@b)@(v!yuZm6XJnpa=T(>;BiLkgVia;S_D)djl9~
za*EDtho*3{rNr|awiH_mAne{a#}Sa-s$;h%05Jt124*|5o8&lxvK=`%1!p78d0BEv
z$8M(^V73fAWg^QubvsS6rSHdek9XJrZ1S>GX5h_pkM}Yp+tFazsbtclTWJny9DkbR
zNZ&Wc{opJIvIA5a%CaanMaJ=DSaJ3Acr!6&k(0ErT3TE<KAvQ48q~B!@lR6o+SO99
z%qi=nTyamSUO6c`l;1N9Y+pYoo_{hnsO5Rq)U#!Al~{f+VBw%P#WwyaaO!~81u6Vf
z(7LI;-1mZ~^lMd6iQfy!PD_Xk=AS|v*|U-&@QJAAP$PhKkC8erl1@||{Ln6vPU4r7
z)Nzq?vRXd@_xkd~Tz<$+z!z=#VJtta;fI&_!Nm_r3GOE*^Cu?rCnl?5|6gP0A6(T@
z#qsm*yLovDki3M~CV(9y3Ifs)p|&(YAcOfGewc(bP+FQoN@?@UBvqNwKNu@Rm5jCp
z`(#E(Y_U3ZY^OiQR;vVMoN<O<O^YRgSbP*rlb7I(I^!SCTR&&-d&wgb>h7Gqd(ZBk
zJ^S6gd(ZB>@7@B6brk5S#;$Ad$pSL((BQiooYlZ+uvYUeo3AA_Shj><EdkF5oZ>3{
z5fqayc~!o_nr??|l!tsS`|u~ZhQjfOB+N5PA#<<H;!C`_{!d|V7t8H#uY|ZihXeU?
zTcA%uJUy11&Sz1veRa-M7nDczuH|MBe-QHGKAFpz7k8L>zm|ym`PTE3iMX2*Pm_hr
ztX}>A@%}_SOB$H5)-$tq%3ieJBfI5M>0yRmE=Bxn`SZjoNbP{%DlME<Njvj%A+b_8
ztsLtnN_E?_7U?EumwbhA7dh)F{V>!6703q5-6Ky(8?t(&85w(!IDIayb249}mEBF5
z4m43c3(<0g{eE~->w9jHcIUKpYD;@)c`;A*E|afXUx-GX&`xk@L3Rf%*-fgaWeas`
z>$>68qStyUqo?Z$@3fi}*&Y(}PbT@tCf90kC!Ky5HOSL~hW`j?JS&m3k$5J*1C+om
zqj!Du$X>#IcpvxXZxZgu`?&KyMfe@*B|IuGQ0`6cCv4ag(>Ivv{}FwJ%25e|+#=+<
zUo5X}khweecD2gf-CZq@%iPxHo_5BP-idW@#g=-!rK=qcwY(B9x#x&(tg?J^$mT8c
z&G!%b2iavV_FraSFTgjn*I{@C-GGzj<U57VI_F`h$K_4r&Ox`_`Kj}7C+^nb>-<ao
zC2o^{JJf}YgDQvems9+>|39900~3CxTb}U9nD9+*6FQZlQ-G&*XR_<G0NZ#Gza%W7
zhl&^%cd>haHx^#8tm5ApC9;-YtETTZ$(I-<^<1k>vQ6&iImaE`KM!%=d=4~I?WE(<
zCnx0h@`n^#sb2==qFlm)NVSP#wii~Klju{-uez(a($=uY(+{!BWrAoFijPY!w7{&B
zLQ{lhVJS0zkqR>^l~5H_1Jy%Yphj~|wwe*XUOOxgK)vt|Q$7M6f!;#Suc6;SZ$rO@
zeh0ma%=e)4(4V3Ap$pIe<p-gQ&?RUHx&nO&U4^bee}jgp^CM^k8iiuiJqGEwI!@T|
z6l0=^(Yr7HKC70M<^w6lmR)6Hvc?QaKjgwa19uG0IXLGSRW9f>n&U`$N7_uQeBHFm
zKC@o-n_tLN<|t)mfk-L8{WY2>*Wql-$%Zo%&M2HLTl-adywHsEZq;!)1D%D=LGM6e
z(n5@fP(oHN=njMKFz610?l8y>TiLxFpC#WR==;!f&;Yza=pu9p8iE-2CW6EYT2~2G
zK{e18s23W5ctDRbG0Ma!6GQK6G-+a9xS!T&4e9i1lvqB9M?pLa;!zNff_M}RL*_}z
zg$_dz=m?~(jM2&%t&Gvi7_E%a${5I0pi?DO1=T?HrW1`Ka-Yek&KYPHL9+;&MbIpQ
zW)U=tP<tn}cT#&NwRci`r(#M8zkJ%fEKTM*{qq55vlxA)%x2AS9ClvE;g67aAE{Za
zS)vx<EOVCr$t8V+KDt2p5sPk{`6c~(n%qC8e^1cAeewgtmnT58&xQwV_&vgEBspoD
zK~2(5rR#siv1(HsHmEvtg)!#2oW${_2S$o@<|T7J5gRcdC1U&0FX7CnImh!)|I$-)
z##}cCn76$-R5@7kW&nCk)2BLpmdJBPR|Giovt+&A`NxIkl^b(#rQpmMXzTGBf!g^0
zr<>F#S-_K%Jezv-TCLn<Nzk2W)70GL`o~nBu2oZ=m&22BQ%TvH+iXoO<HaX?<bTs9
zIp!Kqhl{!D^&}&0T4%Ovk~vO`E)Wiw$IJ;6V;tsih5gY)=`mfA3X*cn9C(kCCgw%+
zAyh<(1Ez`5t9R0ndEK0x=;7BSJ052i|GQa4e%tTKG?jO2$7rKZ3CFZ{{o>569qnb^
zNq#$;we8cmEVJw8Df%Sl^p05scPkukESnggtV1ak<%*x`LN=v7$xe(1#*Nv?XtTXP
zk#^cxIV_D^ZK=v+%Jj#{5u41zJc45!&L;ep88$28iK|@s@yl?ZhnDLZM|KVv1;+>v
zaA!(5eXhcD=3+9IIJbzKzj8&MXU0>PwAQ=~HZ)&G-pLe3N|dqsr<Bt~lsk%b<~>Eo
z^fT(-Ahfg4O>!?LkM4<ltc%~++m5{x1}HWIuWyDAF^lKo{n$y1nQNC~A7x;Jl)x*)
z(w~EMRK?s|i@yU4se%9RHsa@FBW>eZxb4`bpJBJ>+gMr8N(4*m2)+=DX$X6Z`<QHD
z6*R`Z#KG<g;PY(VdA9C(w(fb<y@2$E_&Lb=EZ5{Bybp~Qa~CYcXCiGGC5!O4W5ul?
z^)7rET~~7L+>6h|#wx~kU4_q=)%XzB)*9@D5_~r8DWm>!d^#<w;9vjRwxDgBYpp*Q
z`>!4>8u011owIE_Gic{_bbSDyL5m-x*R{>*)<Vpa!}xjDQp^K`2ysPW9w@wto^P?Y
z=CBWSoObnLHKt)Vo`!#hy{JrV!G1J+mwl)Jdr1RmH3)V=u#3_kS3uBj5!By&JOpzr
zf;kq!FfwyMMEfvoaST`l9ai?Aql99YXYta~Ux0HDKFgw(X;I6tsNH5!n{83cwy4dp
zsD&(QidPjH*Wi5?DZfR^wMhBt<1O&-!_VXw)2*~nM@KLPwV*|9mR+?t>}efDlU}=C
zd0L)9f3>u8ERJD|V~)i!Y;g?peY9VZM{x{T936|GV-d`-2+ptwri0%QnkaUDi=E4U
z+bH_z7z{G*bp?}2?O;32+GmMc99&<#VA$r@@t0n@t*k(**Vi==me-XQ$m$K7Y6&-%
zHWJot+CbP)S3{~TsS<RZl$LVF^Jgh%4rhT~?Hz5h@R6?OowBrb&+cZq+lH%cSlRwW
zTbFE3NYZt_10e&++6u1@uSL2ZQ=U(y(!0w+z7y=;PUH%bvJPUEY15xaQZ=jKqnvL@
z$@7VnJTKTho8>3u*$iJTGOrGm7GU%%PoIz1dV}QlF$R6?PI$WLD$!vV@rRrrW5?Fh
z+S6e*eefc0zd6QRY<|w3$V==+=stN;zQa|VDKGOa*lyP2ukhxaS9vn#b$J7cKF0YS
H$dvyA8@`i=

diff --git a/static/fonts/roboto-v18-latin-500italic.woff b/static/fonts/roboto-v18-latin-500italic.woff
deleted file mode 100644
index d4d8b157f37b3da8f0e38f3dc5c4250df432670f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 21564
zcmYg%V{j&2*Yy?Kwr$(CZA~(<ZQIGjwryjQT(PZ*oyo*}b3fmo?^LbsTC3MSwR?AU
z_c;v@B}qvD2;jS^^8---TPFd&`Tvyv*#F<8#3dxZH>Q4TQr|F#2!d#kQdUy?*0ulu
zh&uoP{&fUre^p9NLlgjjn)}v~z5(PiMQ&A6V`2pWp!dGxRK8*Cx=iL}W@q9E0Kl++
zdujmyF!>?OvMn=rS7HDF_VC-I{~uWJAr*c&TG{~saKhid?><0!BHqcXElpg$W8q!D
zJ@EenGyu)g*6YVN4Fmv$%K!k!0>$ndX)AL(PXIuH`rGrp4e*SH4*g|iVPgKRC4O_x
z|M0%C;BNITerx03ob(&y@SBLqR(7uc#a;pcpf=z6wKYMqCEGffefyNPzw_Aq#*S1n
zEvcP}=XWlu-}?a|{tsY;U_|yNb{5~7`Zxcs4M-D7k)WlcgUffmYRumn#(%yq6M(s+
zv&DC;n)Eln|MqF~Y)3tKZXgV@fPg4tLk_&{Kq`wOWNUy6*aC#1kVR<--aU$NK##NP
zqAD|VA}!+F;_TwY;#}gYyFFj6`utV#Ua{d+e+3|=!Lb57H{#O49Dm3WO3n7}#>KIu
zn+Yb=8uJ`)wAt~~@rAY8-FW7WMH8A@UMbvEs-NQ(E9HJ&-LJNHzpkR7Bu?65Ce>(b
z^v2IK`ONAW&7NxYK48?F-Cr2pJ#w*TffIw15_@mc?Yv4hHAW;Oha6MZQ~n`DHMY2)
zQa7k#%)+0R6UaQ5V^#Z#OCNE{$u<8S_IKR#M-RFG&-X`ip-=Po7jupGxaa)8!m12R
z@(M}}vYe%DXL<$)|8!5@l=8%k&ihGaeq_CyFC*6_{ZMO)icBLnPnHt2kT*t6$sAJu
z!IF*Fk(Aw$$ungp2sdraf}yTD{m&DG$(#XiZ3MHeDHqGBy}Uc&?FFO%nCm@#_pi_A
z0Hb?zMDOJR3E?pc;So!`ij)8X`+_(dL(76BpTIpT3)Ll+Q@^uE&S~B-PZ^2@N%lHA
z(!EL*+7RlG@b#&}oV0x>%?SGyt1!(oU4wc&QM_z1EIm=E%?Hh~>xU2A?aF@l+}%@$
z2ai{uj}StSX*6$DrL&&`#jSlt<qsPLaT_%Z8&!52bp+Szl?EHN0@vHsD0;(rgRj&q
z+0=(*VC56HOG?a4EzCmq4b1G$@@P^>JR29|DDgizqt0xhyM4c?9iZz^KKA2$$>~p0
z_I-RQeKSKrfjY8L%~_r>7TlsqWH0fqe5%|XK6IJKt7G~CB@qvigv-uCbd*X^t3^w$
zeA>krx}_J(t)0s!+vqL{JLOL{wPtR*^#~gk{<{&lclzZK9J+-XU4{<Jy0wemc5{*n
z6(u<e`m>s{j!;cK%alH3KOfhNYB$QRvP7Joxl6t4S56flQtLRhkj_j5ilka&mkY!H
z*9B)!=7S(tc+z#|SnZ=ttKvng2wv;D*Z->lN}ouyWf)Nt&3*PQn!g6}hBodeP!2z;
z65cP~1LZG@5Cb_EyU7rG_;5y3zK55T<=Ww*Yws?RXMY0Eo7~O~;f)8E5%d^~g3rqB
z*`RksYclAc*pn3D-^Ds%u^go?dX=DsJS_kKg??e!b>WG}@I;}Z)+zqEAFFFp9#(v4
ze|SGgs92$pFK-X#xE8UmuFXUFudM^6vmK&{yj|yA8;4LLgIhNyV-CB4%fcKR`+X&>
zxO*d~&s|2}Mb|Iau$O>NtHW8WY3X|RiL~g{h8I*D4}(RR%^|fFO$StH%Q|KkJZ%rJ
zBDR%{+l>aQ`)5CG(VyJdSv`%Q04-XWVtk+0e3U*MUDq}TUtZh0Zmeh;L?O7hMXq<X
zXh=wE!e_G#`1s&78(aVO)}Yp3p!{PTIqd{Fy9j&hOslZNlbz;p(^~rdC)PZMcW=!g
zH43TDCUlxZ8*qI@HT#|W4(Pe<D`s_I0|OTzLs>R!Uk+GtmxQl^^v(XHuAz94yfW=U
zR3yF{^-zJ1!ahT*gKq+<h6grhh5~2lid(qe!xOjQfH3`~Aw5^2U$*}Bg04~X@r5T*
zgSPQ622U;*yB+3mYWEiUVtCwNZDzm;^zoEP(<quWbhHf7Ay<3y2p)Q8TZ(ENiLlsG
z-QRyfS6K28?&RCXo7a9L=1p5#pn9kco4W(${Uyknt%`CV?&l^oP3=k5B=>e!OmRYd
z^r)n##BoN+X-t~L<&)rl$TBvQC#<vP;F154q_K=gXV!Agq$<v2BGVxrrBC(6ltH1R
zNYO|hwZ@SQGgo7P`Fyf8prcul!Ne<xWk??8q_OBeY!HL}J2mrHNL<pfK6da6{c3d_
zTYm7BF6x;hfcVF+)P`(7^IPNu9{<SVLudIro*5k0$~2Rud1+3C<T-gh8u`Q=*I<f_
zf>v!HP11g<EDsuaiVP~7g6R(+v_0}}dWK#}B2V(9{>0$YmRnz{i8W=b@|`yMXbt+m
zqToo{C}tYfnl$i~rhY?GPFcZhiV%im1zwIfzLLNMnW+<sW6h|Jly2;J9@U{<)p(u_
zE~&R;tB+FnG5iVhUn3a>%it6H8HXmp<|=YzC<@6#m(r&N+3@m-mtSBXcKm#R?`yt7
zESPGb337P8(K^RCLKDw;o89JbgdvC~I|M!jtjb)bnVEA8+`R$Fn+z`q3%BQc#@X0?
zHtt2C=vnQjEpU_!01**(V7LT)+d9LGNb2Fr(gc0Q1R`l|Pm}x)3HOkxETD6y8%OC7
zZ8?k;Yi&UO;Fr?aP?>|Nb53GV=Cxtb?{KJY85K5#>7uBYzc^LG6hT4pK;ab7G_b0N
zT|HGNk|55qwLb`@LyEj|b_RdPuv3+1NV=wk;&z3mqZZViLK)RkXhq&MHX6#9l{(SG
zNfyPt0p`I`jIDGK<y$ly6}}6OdpT^1oqNf2b)Ea^-2t#f_#KvEI>(-SNmO}W`x@8?
zOz-<>^<{#z-}T@aZA1|l1^@<n`JVCvzyior0_ACu&qWDZNalkz?@2j9%~H~;C~{c6
zrWy9XauC(T@3Vf+`C$KcLaqoP!dmo*i*68EJ~B`#!NZ1!-TuB&dv1hHf{o|d0mAnW
zB%bXQpJLhRR__)tf6z_0+4<}`Bba=bye-bsp*y0dI=;@86m5cu3}g4HWMjO{x~Piy
z!sxxEo*#~(Y0w=?|4BHR_E%NzPM%<{Al@hZS4423G&M?91a6^=w)Wu@IfxL<-BkOy
zDc+Ui90HPyMXh$Y&`>|g*I3iWsw%Blp8kVJ)B4i{W%4hc1ebG)<=rda_RH;s7(b@R
zuC;%r?J>DboZZ?_rkQX`GYM&+fK(9)_Pg5JrVU)1+U6Yq-Brt^z0YOqtZ>Ms$ACx#
zKIa;;6u#S(6IBlT67w$ur)7@SZRRa#u5IT{0*^S?*@VO{SZbI+bpL2`<T)&zLy7NE
z1!fTsri7+33ugfVrzxJMiH|wJeGkC7XKYS^xX<nW2VBvVSaBc!@qnMvn3?epZv39N
zIko+s$R&R){4g2+m_^Tk9Q+tv&#*#ILaaDyr&N``IeMioPb*8-{o}ayLOI!ibbeec
z)qB!EDoW(f=@+6D=oc4QQ`$mlbI3w*bIL+pMYk!^rN}7~*Z3(4`q-)B@tdR`Bwen$
zp6}xYpao2Q4{P(jaS3n+Gy(hongAn!BET2~98d)q`F5ax8UxTlvjNCoJOG5xUjS4v
z5&#@HF8~uf4uA~N06>St24FxA0FXiT0H{#l00_t(!2ia`o*M@7AX4BW*x{BNS6$Vl
z!m$~Rb=+)-fdi(G<AW=N$8Z{5#c=mfrX(u`yLXHYP+PN|LP=ShW*W>lJ+os65Q}Q?
z&RQ;?G6-LvfdchV^TWL$tExZb;6AMy$_J%@#0$>BR@|L#FfvRZ4_lK_zFt{mgl#y8
za7tz{njIFNmWm`4^L|+3T9AJ=(b{p9L~b`=H*DvhCykAiD2igXwz*R^iCf82lW|r$
zhc{p)%;zpR!+nkNu2u-G?j<2Vatj@$A+WvrZK6cadT(Le{65;baz3EW90IK}IC`cw
z<ua)oA);i}wWU{#3(CVLhr}fyBXD`yxEGj7;@$iv=+5BUWp$?VvIVPu*pIrlc##E>
zk6SF~G{vhZ=UA0!kgexdBQ%?i%C|I{`vVN>BL99@8w3CffChkmeF2a>H)?#Le9=dr
zo?Eti^Cq{C7<&z1KLUjr!**m64Z#Z0yl*%{ad}A>s?jUGbt<C^0*TjxjUiAl;A9*8
zK}gzPW~U6M?1Vr2A1A1~xqRBYZ+gA{z2XrE4g&UQgQ1LxK^d3>iJ3JyGeSZb&Im)+
z!J^ky4y71`aASg?S}xB->LN+eH!HA+0K9->$zJndK(896FV%#{!flF_hZyHGBeow_
z;<{OvO1GlEz9T+jI5YMiZf&C9`?Ncdr@mFrN?ruG_GC5G$X>m{C-e3qcQcY|L{P;)
zcls(ENY3Gq9e;g9oASI<&IwD3{P;?FPzqTThJu8(OftVet$K=m<Ns4{NT_`oRJY+)
zu$TpUQQD<;#i@dtV*K>f&aaBUj&pX^%(g|aZxT$DJ7F84yb@{~stX40{-=LV2L&K{
zmVWAkQ#L#H_uir+qi>B2!-xDARJK5tX+n4}=%NSoB>?M5XX6OK-c-yiOCuiMdI>-t
z2M_dB`WppcF~+C}?81j&BgmM9!slrYKvsm>w?!?2k3=B>YJfXJWR<L;jh3@Uql^`M
zVEhE_TVCv>{vibiv3%M1H-9}wVBiwwNUJCYCyM$~(F67)p}A}i{gH|1MMyw5*J^wD
z1c^U@?QVXJFG<<c=__V+<=V)H<?b=VCaGVj-^j=9Qlmp=A|$(Q@czm%Vj=&-L5tB|
z?M@k29tsfr!-7MG%89K4@pyuT!&;R+Q0nB*=}#K(4d)TFGvbwNqLDcfcrpA@E1W;N
z&11^+*{v*nB1ssUdr?yoCLqJu%~XBbihrKwMO2ofZ>YN}Wn?B~u9wu?`6QY)DJ*FT
zRCgLS3EXASDJISoWu5uNdF3Ud+ZLJZ5Hs%E6V%sr-LAa14eZ(p{eIxJ5(HTLl1dvn
z)0)Wr5lm<k2jX$RdvW(~KL=e0Cm{Nw+#OA42+bVU4_IvtxEJ49&%E8;Qmwe041aNh
z{lg+-M*)D~GrXx-k@vvGrczabavddNI6H@g!~ZdFmijIzpOEIs7(4LgC!<n$wdv3F
zlxZ0##Tlj_L@t;R#jvIT7Zt04xu1{Xm_DQi_hKs3ffq@~Mc&kj@~P~p_!Fs^shSxn
zA^v|_yjMI#SzQYXUToM+=O(;dIIYPK{({pm6pJYJYRXR9W)zD!%=n0qWf|sk*`!dP
zD*cATxenik=k>N;P&@eW!zJWX=nzJn^0S{X3`RV(WZ)@4XFm&4PSCu{eiWzXk`p-`
z$a#!;LTm95Sxk#a^J3^GUZUt0%Z|U_<b2{yEF=Ixa!g()=BD<|7r<6PQBH7Nl(TNE
zu=@nZth3Z%^G^g8x+3fL-I1OVC$kht-~kWypoK6-)tOT+@BP$5a=F!35DwYtC}dF&
z*rnM2<cu;BPoVsolBQD5GKpfz({Sb9s!a8t@no5HG!Y%99dUe9zV3<-X7&Z%D|LtV
zV0D?57qQ>#`yMdz@0jXt<o}fmMi~BmX3YnQfjz=`%^6}c*m$&lpvf-i7`Hbw`!v43
z(OK+ly<%PQ?*6ROPXoRk8~%{v*wg#9^tpH&pYB)1an4WLd*uiiwAP1Rb@H+d$ZGi)
z!=*jvW>a1~q;5e%YAb=HcD|?GC<G1pL#IXiCHglb?IQIG=AJu19;KPPgk0PyPmjpm
zGot{1TrSk=cAzC>jAJ}-V{o3@Z_4_p@aY3-wx?YGtkDtN7f$nHmtdf&H5$$h{Vj<2
z)s<mYH&9j=sX%FLq7t)uGv~5xlL1w<!0k`#?$E@`eN;Cu@|6uxVYJm1$$9Wy$8ok$
zqP7QkT?{0+2}pea1Q$}{-JtLffSdYdphnZ|s~O=-5)q!yFEp=U$T}&y!l}bk@`6`~
zI<Zb^`JV#_I0V)kG%M~NU$HE=wL|Ogw|Fp)Y2SVmoK?OHBLAlG7-I&qgWE_mIK!Ww
zb(J9%&;IZwft042GPln`mpa28BWLtRi&xUrwES9A)G>rmw0a<m@2+$Wl;GNrNyU^)
zMVo{42SJ5Sp@>^iiXk<HH*Ya#oDx^~OpP2-8mgwI;<e9y-JgMi&r>gv5SWJofWZ~~
z(*f6LN(2o&r<;SBOnl@IEO1{ZYTy|`_b#tt!9Lpr)r3)N<i72-uhSOm_)+_zA2Nk_
zh5N%jW9ybDw26)FlqF^;--wfF_8@BumO2TnmCG-97)C8Ce=Ke%lVJrM5cFvwlnlR*
z3SH*1B<Vgf+U$13>=WqST6KjcY0RfC({n0J577p_oytU@Za;4k8OYHph^49Rx`yvg
z_x?KFjBTBAF)){1KGUc~17r%5G#QI+oo|JAd}>#)8}Z?zgG1HET0tEj-dwlq1xg%&
z^>~Y3IZ*5`K><4p5&Y9*9pMA_v;ep4`_#xH;Ye0NLp1z9)j@(tr1T}Yg^P%%>Qw(t
z{KVLbqN&)swy<y`wN4gJpMAdc1Ds6(7PLE{MMaQw@Gxh7NLz?h7zIynQL<&nu!AtM
z+*Uh73$Zx!fKFgworG8V|77G4^)DLa_HApiBL{91*-lO1bPxJ!wO5&+oqf-Q+VN<5
z=l_r{InNgPzl8QAB4PRQVx-vIz3p<SQ?d}s)4oNOz}*B|8;90Z8Xgd3givRQ95GAH
ziGYW#TXuQ{Pf4f_<Ul(8gRFAx#8<^&1t*=#TQl{hcdqi>RB30$EHd{9jU?~HygT#w
z^kdypVfKnK+~sP&QB{j-yY>F;bckIjdLQ;Kz8fuPn?<7Xn3xkO=E8+Xld>DB-Ot$%
z`Ax=7f~6?P0-bz81=+t<a1gd}@<r-+innO|HIacHkHZHe78r;LP>s9mL(C9P&kCXg
zN6x0Kpnyj?r4<F?jzKpGZ>vFh*cv$QFUn9^jD<tW06nM(%-W9%;OHfv?q&cdtJex1
z9*ZD7%W;NnTMOD{x(b3E1%q}z1!hT`M1d9`-JWIy90OFbjd_G6d71Bcn5#QfgXPhg
zCrSDDs))myt0i5M81}3i;tbM?hwSjRtJ9*ome6VIB!rg@onhHpfR@J(Y^N$YPsN2^
zi;9LV+NpT?1aFG(int3tm#@Ubk^2haOOp8o7esX3tciE4RI6$EFfWhhJK~{F4Ee1n
zg;^RIQ`q92le9Si#6;*<poz=`d<F9lbg;Bq^+9Jry-H{ZQ|RD#?C`3NI%>^PHC1QS
zqz*x@LUVg5U19u^NM(^fQgHnaY<;Egb54Vw6WyCQ@O1r5{O?|goNY8)NSoAByo~j=
z5q>`Lx<uxeOgSC!^UF#nsHtDeJ!upW8C!gOcO2Z{b^qEVdU=s51w9BxTbREn+QKnG
zgxls`&_tqjtJJ4R#pINg@NZ+#pbs)?sNj0V{}%Q4E}PzRkettZlpNv@5T~d%P_(99
z5)&?gnjJc7*-6GaUUSWvHRUI3zGB+E&~dmHnAF#(TvitTfL9M`4rIw;a7&Ps5Kmav
zPc12`9ItWgqRmWIG>-t6H99>&>XWSn$(I3}>@^f%mpodbvh3&5HFk8zn+He0Dkq#)
zi9d&WB50f`n4Khe5Dl<vXY7T$-?+|wMNe#DDl7Am?9mV%UzPgG$?a;Mt-OID^ewsH
zPke!{#T9U+6qTDl$f1Frp1$A%Df9varC9`^VU@~IOM~_vH5}6V*TK?2V#t-|V7l`*
zusuM7{))(D!W}HVQ#iGbf)n4hQ*w-vC*=@Dw>u9eMm}*B^RYG?nJ){z804t1(d;mJ
z-<g3tsM?I7BD!XRNm57^1kzM>H8o)_aiVTDpIj1%sLtrP9sxl^%XVmeKNBFp6Z%z|
zog<o5Gu?6gqq;1RtT-IVNRXZ$a3O#|VYjM_7#XeT{38|sYC|AKhnkMgI;FK!PSI-0
zS=w0#8gdX%hLf>@BOt$cRbnqOsHCt1g4vXO@mM*r08h4ou}SMe_u%hZmeo*g{@!8x
zK6zN}QjjBa<GvCIB&r|pQ&CLiI<_=Nf;l5;ngaUNX8@C*07yH&!D~2L`%w7gPTDU3
zIAa4rfXGIb32i&GFEa&e<ko4|Q!%Y}G*hl77>4gtZ_}ln#S0naVvI%qL4BB<YaW_#
z01q!q)U-~^dNG}Uv|(I%h$rW45=auHvb;pB{O5ej27r(`>!7m?;>RwlZRl3zgp6Qm
zYSx}sZ4vk+0!?`aI3Aw!Zp@j@e2dHtzu>byGkAFnV|MUP&irbbZ&q&7N}rguu8*f<
z+llf}1<eDlD0>B7su1PjFqlO5U01#G&i;PveYl;9O}LQ(h1wQF4}ev~hFL4#esLwi
zNG{sQ?N@o8oCUMGJas$axf9>ufYMTjrD!us<v`AFwDZiEBIVJvb5|#*_W@%@YmudN
z?WS?8E{ZhLn}I$FyZw#8XwA@yRpEN&hf8_c0@M{y>ZHg~6Dd;kOy5@LjilaLg~n+k
zPLpuWjnAuKd$??-1!)ca-gMVr(mz7h1A1zFUnWIm*xp|sdn3rw{R0$Vtl>yDjp^}y
z&KR)!q7s9NdP71{eySD2T5INNr6LD6Z8!{`p2p`k4AViEu09%C&vh`6Ru?|Z6)EY}
zlRSGJ*;uTf4FioPiGhYY1lQp|wfch{26ISbjZ_(XeKd4j2-|#M4wA0+ZU&`2-vs~_
zwp@Tij6pE+0x$!MA}+^}*)ct9s1oNTsS>axg`jX^Mlp>T@s+>TwoZH88KAlMv6epl
z{t}%D3|uD9Vx!<(@WBSD!|Z)4D5C}V0A^{(z?`Bv>>vX15EW-Dd3qmL>X^^Q;ujqj
z;e_I~1ILL?0_OH{^a?Ho#D0XInqy`~pjb}P8hbS}h$B&rdu-FF1eZBE8JA&}*XbGb
z{U`9L^1z2(M2|qvyK7>#8RnyX4>r!sAwdlwI8x{hK_@5c<3OrMfaomUnd3@DVahn3
z<3a%!`S{^tVpBeNv18Jo6_pj2t)-wg*qd||Ol;-@J2oLN_;XKGPArKkH+1Q`(Y1Ne
z_4z-JcNqAg+EbC*6G7sm|K6JD)W{o0H<>TzuneaILeJDZwxyeXa&S=HhsGn`zS<pm
z1fRV3nSknpF1DEz@pm*^;9!1sH8VS$&iiX4*?^8%o?_;b2sEhONS*AdK;*8Ysn@hE
zFR_W)afEEVv1k<e8JHHTLZXyo@SRgWlPf#Z=zGJ<s^Pz$BBiQXRukyCfWSuWC%b=;
z%AOYkHyzwMO7wZf?S(!;1V62ZpHDo{06d}fF3@~Iu#$d5dCM_ddCS!jd@R+|dTDBZ
z%zn_sXU8}_S3Rlww5;mzR-o4_-6C3r=@ymBrc4H(_*ujf#s8wg*PXk>k&{_@)l7JV
z;U1A?a(^{?YkS&GLX!O(41QB$n;IYPv)at%4nU5jf75AD^C6Dk$YA-a_^O>oP;ktc
zki<acT{ESD0wPDXGOok4qJfSEtxzQW-gA7+%8KK35Fsba6@#6)Opt~rrMXKzC#&!%
zzy5ds0qWT3YL}qHa5QK{L(Y&OziKN|DxNDMPMrB`c6xD-9DCJ^o+My95LtF;x1av(
z??y!AeYlDP2oXitsIO!<P&II@K1-W`;B+Zg%L~{_dYgh<nIj{sgDE`3J|~jCLv&)m
zdmZ#N2+eNs4A!#7XK?FjB<hEQ{{SM~7b~&EHi8^r3|r&B>y!V92`b;41;Sr;kdDAF
zSJ3vd{3<_ea8254eW%ti`{?TU5iGS6Kq2{Z4SdT#yUyOh?V%OFP5ono1oQGj`kt34
z!3O-vnb)@r=mK}l2QvFtsjn^u<-rln{F0Ik!~q-uiyYX+bLflokIfx}J5BIIov4qt
zPpAhe9YUW>z;4((R61iQ3AJ>UhY&UpF>clt9Nv-lUC>EE)ct;YQ-jh<npHDEa7z3`
zm4)j?Vq6?O@=1OsDL=*LpwUPv%JNC$D*%p<BO}M-=D^bwB|ET-W|7P%%?K?_&pEZ!
z`V#0CswL!TE<K?wfwfWh?$!=;D}8o(l)o7c{_|v-@LEDiFYr%DNSxo{FD=`n$xo2b
z$8AX|RIG24r&Ef_iqPN%f$0Os5@ON(H!4VT!uX;gBlJ4(M%UwcDcC5;SlF;df(Ssy
zmN|HKQfJf_=1*HUnE~(52Sg9DrN_rZ9%-=ZF@S}_f&lQ{e_-frSL&Y;GeXhZFPR-#
zF0!j0zwSr$zu}99Wc1lqyq9X$@U=eWxGcJLLBJsf9JK6vA+^nfUlq2F$%>|CBmJPU
zOcioz+nYlvRze&w&%N7E7!#rdW&eO8R+Jbj#?YJ-Sy>l--xyQIN5-zZbOd@w=98W`
z%HI7YW>piDf1^sL3*fH40b}y@#8c%|W)#x&4?~GTgv|aOueKwlvU3BD^!^rN6VRUk
zYZ+@mFD!X6Xdw=L;%|*w%5f}+BR4|vOv0{GAfKkyJ6584OjxLzLp@JIp_+~U3^U`$
z3}Zsni-LKTv-52Hm(HS~_yTRz2AQp0aqH>jT**>e+|tTbo32d$!tc`~Mccu;USL=A
z?DKk|A0Bxy^sU)M4}05&aPS|Y!`V)61S@2EEVfIL5N6r~FsiX0X#f>G0JMMSE2o|Z
z>XZzw&}7TOoc2%$$N=p`fmafJw(tT?J3EBQrf{Nc!z+lykNzX=4^YfJ$}0EnpD-`Z
zO<F4C#Z%oIJZ(biOg|<*A}lVOqF3a(r%+L|(_1eFk%jjYWT9${=fd+DI4CqK(4W#l
zIlGz`oBqIh`7C=`zkcR$ADiHW1`*Ey6cb~tLQ@<*Tf>`PR`cXKIkV!pt||2r3647h
z&q5SKMPO^@Q@7kf$%X@usFu2iGk)tArD9gkqB&pg#|KNV{n5cg_4O1gp;bDj{3gsv
zjXlQp{y&Z8ovC5Z_fk-96GTZg$iw!y)A!}q%rPi3?jxWmw+)IY830@lfc&RZ;6{~B
zrnLfV+S;XfP0F*b8>4g@>#1M832j{1T2~@@lfG=T`x0tUBHsoC;fT2U>P+{tGD)np
z5{d<`k)(Yy>yHvp2VynP^XQbx$os)__Cp|@h7F4drZ`;fCy?NXkp$T{BUFgKwmJ4y
zDqHiw1`s@rJ_br?DXZqS<U3fsvXVl{F>*9Wd7NCJNR1xuZ5E($EsVlRc|hcLh<nTp
zP=#F0`>+_aQtcOEs0Di{dv&uGs(jyW+T%L|l9<e(gww|%s8!TA>@_|uc8jHQK0$u!
z;t_s9#}n5Qx{<>qI4FDhhqFTf(sPTS+m9cWu{gAq?pkHPWL$|~h)LkV=RJmm&8h4O
zUS!0)f{5lBxxqC58AimV`f#P{0I4eConf;6GMeA>_Hw91K4G~+8Gs{SmM{xQnJfhI
z(q@3}=;Kf#O1|LH+{~{kgq9n(cqraPe4N>U!zY%vv_A<^qcE9y1|R`mk}l>n3+~MF
z?M24H9WSyZZ9@aAbw!G_{Eox2B^<~zg03m~KN%tGZ&wtEiC^z5kSd=(Ngh{>($r2X
zI#8vFL6p}77SPgpHCedn<RXhZYIf@`BQ+_9TsuUmKYhNk7sdd>jup0o-tGLWp-Y+0
zxKU+2j;ENm!U8q@^$Q-e1vmCHySY;V2nK{DqN8ARJg}Ot)|ymK;B`go`A+jpG~FX<
zNH)DRkH!uTL45<Q&p;W?+8o$k9eS}S7D}Hq<*8QEk_0i%8;y>GBLj!zZCStj%y!!1
zsr#m~HAKJwG3y?S61EfQ<lcuy7c=23ze~7?Q>MPiwgiB=nA&wh1o`-N$W|)Y5ni(M
zvvi0pPcXXZT1rT59OKlqi@NWU$~VLnys?0nI@OKC`jx_6m8C*DNlI`LLzq03X-IkC
z#%+F2G)bpw54k!X=Ukx$(x#*}yfrB8&^wZr7U(LLjD9LX-sxvj9EuL*W(1bPtBqO-
zYWV;)@pno_lnHyTXqrwj8W-E!BSi+?j%`zcJzd(RUV)|yc}pUMK{;wNPmj&%y@<eD
z!96X!8HSdY-;>aSVk}{(LJf}H(@#rWaIF-YC-Y~zmhxsS(q3ZTbUqk##?KsnX>ej}
z@euyZk&)K}9+Xk~Wxahw$trVEi@Qk4s3fUbr70<R6&K$Q-n&5Y=z4J+2p5mJJpF_s
zCKIE!An7)Wn<JvDlzWJ!Z9ERY8%<!phf7y2?o!|He~X-(9MrA}cln(e^m(M9H))`v
z_I=v}9Nv_qbZL}fpn`rKcn6s+O?=OUXYxE(JUHSKU&Eb)=!bjKX+cIh;NUi%zG}mA
zlfhta+z@$6F-mORFScRa7k@j&Zp-ceF|^;q#f&lW<)ej$81-~-{QEn-v;FG|xpdgd
z3X6Mz4Y~LTiIclMoq^&oo2*l<0?J42C1qJvCBI%7d;qj)fH+fp416m1u&RIqLO-or
z)1t#X$?ApvRxQau00N~-V>ToWky4Nwi}I~H#J6!Av+amzW<7=PGVd<m=9mX+g($7T
zQ|dgo+1!z8_0Lc*^{YiicEW_Z`T+`dduYLp5*N^x%?5!~ZZB;;lph?wI3I>IH;`Z?
zP{P^KHYXv2P|A3v`z|YGI4Irnr@quoXaIV=bHY6w5nlXnq9_=T`IH`7{A0owj-FV5
zMpju`BQk7Addb>ZhkA1wSlb!yKkTmPRIjE@q>4kJNJN8Dbb`3%1L?IwOkOv=%qi^=
z?!U+5AQpAEVtJOa`V`1j^38_BJo4+ipk%``sEu|AG#e0L<WAtRql{3~c8#TLaclY5
zb}pa**L2|_$jsu1jeOWQ8V!2B1vBN~%1))ape8N_I8(`rl4;~m+A%+SvciU~Dzo|0
zrYlkp&7DIn)S&FPak_``{XZOs<M%nN-SIHc?|)uW>HRGtOL@$d8h6%(dUK!PQ{@ej
za3i87kY?l6ODe$4Wl-%6&;QC91xa*yrgb6ph+#;xjx$#oKJbN16QIv#(2v}B`6VCx
zyIP0+g@*pz{n->}!k&=;*qL^e2wc~&wlGlbk-pA-ezBPcTIS1p_Rr_|<5BhE<M8{u
zg&*j?mq#k++s8z>R<}EDTr;D8prZdGNfyEs?DM;7jD++s<j7APZQfL%I^ASLz%4b8
z&j<_ix;<78-sOcSW(E!XI<{ex3-_1fTq~8GsJP_RP}GE!zJFnqfNWi!h3H)bQuL3c
zQtJ0V&y``-rpT5-uW<(qHjGlJf9|``!MxrpIN;q&K8)aCGf?}HgSPdVo{G@<A~HjR
z##xvmKF(r8$9f74szgHlj;kAJQZ;&qfm-Sn7MrL{e%fH4@{GqwONPh(W1pbxZtaaJ
zYDd$KovNu^c*7Z}oX8+%*f_X0kDZaL=>%tyIDnrFbt@{|T|I8AzWHj(nthhqWncY3
z6!<4)uQTRR?IOFSZCMtG)Q`Sg1`<*uf;r*I@49OP4bfj3kkkV$#@a;V`x70wVv7L@
zCfp>hOj9KBD?h6^A7y@_f>bw)id46OzX)QM9$3<>(NqX`31c8jZ(EQ$h*VDdCZXI_
z$Y)!=^iT(pIGZU3p7tl`uTm7$5IQfEveD2nE+`w|4|CPzp8@vu>zKtV@km&bW%vqG
zt*Vx~jhHZ8Fs|E|iDH%R#-vergSyIPeZ290%?=^+`3tWYvDMt|wt3!6Ru&c}&qBOB
zw}b%QH5-`;JaU&ms=>}ph{(=IsqH+xYGh8Vls=b+SiBknPP~$fasd=L1O3N@DzOag
z!7(+Q9KUJFm)&KI&sfIbTtdLB$t`&}t#6GG4cu*qafuFp2akHi;Pkv)K=-|twNvmK
z2sqJ7#>n-;3xY3HE~m=xvxR8Ssm4dfJgr_P4xCC_ykf2A)h79Iq)8td_HR>NcbJH;
zns4sK_1EgS^Q@ZhyuZQ8F+FhXV1yq|t)Y<~BdpCe_sN9(X%iEb7(JK5L!v>_LT)*~
zaZ3q5G4plb9q6=yUeDm`r4zQmO8XocKf^@`htl>@3Bmv*1;rOe_od6a8wC!YC?8<H
zpobvw73$qd6>n93Y5R&dFuW57d<B9$5x)$vUhK^w<TAgD4fOgj;jXnFFVOI*tjPg~
zM>FK_yu+CGJ4V3~1%zr%4%#5-DzUYS%FukX^zhN!+2i%-u^G?=so>k^zUmPV+9Ho&
zY-G(2SI~ttelwj{R>AVt`hTQ~PCrI(*~4uDk^Uh)$b72PFyL_eO&*h>V&160`}|0#
zU2op$f!QQenG&g(9y5QmdZvc)rb4^lKKqTZL2nrDILYqm06KVQpHD8_pUgM_tvji!
zmblRr36E}^lqMGL?dFuIc~f5`<Lvxt$)>g%RJZJGcg9wK80R25CP?%v=<U?XO96Z$
zkj-d71Q0B3t&vYfAOe~}%ZHXi+izs>KzRTimk^9{iC!7e*_20^;S2M+I#7i_9pE1-
zzFDNgNEZ~NMK=R(c&3O2osiA~6~%qow?WZodtO%bFbLFo5K0YYeVM~L#aa^R9`>w-
zk!<TAhG`bcQ+0*%OMrYj<-u9OzRxK>N#d|X=Iw>~;URW~_he77eQ-Dzm&@GMgYY;W
zWCs$sl+GYh53LYHaG!P+uk7Ypj&FlUu=ZTQZ+#(W{%TFLv~0;ASgnyXV75QQ#<nF6
zB{9Shr5KIuU@APLOJ!y_J1jjV>zdizWI4@_$b;`wkv^yX@)r42%B-hWBR~-Rh+c#u
zRWL$4Q*>8}h@qi5Clk(pPJj%Ef=^980)r#ao=Q7t9I!2XstU6t#Zq2DM=a0vb1WKW
zQ$jRK|5-4UV!S<43kEB<)4}5`C=z0n9k1w>P04Es^9QuX#}`C+WlSuV{NQY!8)H*a
z5G4)`)XbRX)@^P3;^Sx-?x_IpU<}K*%ZwH<B$iwlKU$gpbr11xN;_u<E9PIW>udSQ
zpIfema{-DoeW9b$e<Ai7VcSL_xpTQ=SaWs`<P*2Qi?it=olya%6gX+7PS#0pm)bcq
zSTTzN9GI4IA(~V%qbldAX@kfXdpAg{bWdsBw|lt}r!L%cK9g@?`1LiStx55NF6uvJ
z=+X0t=YnV48@l4tMDFe@8*kT*L8%iH{0ezSY`N=tsgbFSwWz)SVHqgd{jA>c(^q|+
ze`{ds`m1dO$=sAf+Tr%dojgVSf&%c(Hdl{ck@(CPzgSRK^*tN3Qa^p*ZR9(@Tn{<z
z{pSOyM%3ao6|n^+)o$ZpjXrRIg>DXO;%}(rN2-B=epzGJC7Sk{gdWZ`wUu#=%+Lx0
zCz%HkT5B7{r9nO@+KXXfIde?>XJ@ItHPKeNVHJBqho|Q6bM%ol!FJztU9Hz}(4bM9
zDrMBSxci|xOQcJ**MndE4kGlqD(gbmiZ*)_UbYP+`twtEFb)`FRg(cjO2fFXG9T1&
z`x_}dW*c3mo^5dxB`{{M!9|~Z<=>w&-fEVru~!uGC<bRkV@7xZ6^<P*?;IKABAFnc
zRckmg+s32q(+pROiw8=iFWyx?8@Gonp%$LRKJterznfLrED4nE&sJyZgd?y$d}o|h
zF!#C0K8AauwP=e=W+%Mq(a<7E26VSkrLt{t+5lz^UB#8qU^T0*2z|~Rqs^Z)CC5%N
z2fNG$zJ33CoES`X53?Gt((<8!S*d}$-Vcx>SCr)NH^V*KM5(Q}Vhc$ge>l<~_{U~=
zfyz$8ZgJ6nMb8F|{dL(0(E{cuqh%gC`|r-*vI&Rto61@yO}9ZW2<b$Byt<InG4v9M
zuG>m(rkzDmlLv7NXFG!0z97G5A-A&VWv-VZ&s^rvlE|Bkn~=mVo)u8vMPaAaUrl1&
zQ9Hnyt&qbuuJ3>3x!4(H3vTc88u=V1!=u4=f4SGXv|{!I_MI<UEPo0{%s0$9j*eF3
z-$?e{K7ejMF$;cX-~18W;Wy?-Nqg&$%a~rd@B@q!?vu8+k#@G0)>UY%(unIp7?zeJ
zhF8n^=sc0^N&KDPQfhT(n%Cv=m0o8_s<VZXNVb+TLa*a@p`0J}pC#OayON`(fMI}=
z3b%KwOJHGoBmElp$ubI?F>t<9P-#d<a|^IA6!LvRl}%JK^vwxy;wCY|5BUg3ZL!*#
z#R37%YPt#Yz2l1n=MYxo>HEO|>E~M-%^Hnu(+hj7^4JmmFj5q*Q96LL4>D`s)<kbl
zi|=<_G;%(MkBZ*en18Mm5%av!sCI(skkLjXYI&8(<@AxEb(9hYRd(ZG4wo<FE_OCt
zfSDbh(BA}{nn9~$Br+5pkA=uSaliNkjm_!t+OLuUSJ3XZIGXsyWas0AlEr+y;3`@c
zz~VMF`tv?w)pMDSm~as6(zvIl-gb6Ga3Au5q@Fm?+q;U|5u>4MKqH1W-1VGXb6=wT
zR}$1eVGMJ(-+~ZHqL!6CI*}jq$MUJL5u(+}pBkag0`QcJW*=`4sY;~At;|QdBO!FK
z*P*XoYFzXN_4;8Pt4!O0jLm7jzkp*A`hv2=sWQ?UuqmZ8Rg0grU6QrzBPM!}4-0<n
zm|Lo!11P1t2Ojf&uc3I+Dd;d*!VHOsnBx;TnV<Hf-lH{Cl|ynr62x!`e=Rq>2FXg+
z;1Bhu44bj{h@^zgoU$~~>(>ni3~AcP0%lj4u}Zb-2%hwsX^L_!n+>RgWGxIO3}?=g
zXD<~>%CSda5oIhFyTM{NH2MVsE*fvMxh*$ZYJVrD*m%?Qhh{L|b7dK~-Uxn3_-N&@
z`-;9XQu5_2Klt2aoN>N2x@f@KJ~rPL7Y|2VW&2lPN$&QsIrHMKS?Dfq%v65yu(;ma
zE3uHaGYzP)ea~R1Ea#ukQ%twjVDUI%fH}%@paAf?#B9&LTadZGwDPi_q{QGEU896a
zPiGt2Ck6%q(&dI#!Vo`Rpxfl^maF`AV=x_cFH&1D@6BBHLyp~4b&D`RHs$Mg@mnht
zgt(xv?@KX~JVIl7hS|YvQ*A6bjm2w6FJ5glmL9rKOFDsG>k3fz*GU})_p2aLWVw@9
za;Nwpyv^~30PV5k`I6zOHW*1-E(&_%)3OJKtmwj+nN~@TxTD?@j0G9^zY+`(njk60
zg-sdDP;yH?-|r-9a#(n1K$4EbQ}9+VInQcFHx0MMIic-%k7i;;Mctc!ne`ylBIogf
zY!bF>%kA=3;tTOGdrmM|=`#$UYLGk<r3zTa(+Jf_8mwNC9sc_jk<%44{;9!SjwMP*
zB)K$x9aWlActe+f(ur8!=Z7O2<XcH!*@Vd3haEG|2i*DhD^=kJ)tQi00Y<TS)lo|J
ziaHVgH!z)61E-O`W(-$dJY{WxSmUy9hAH5zBYy28ij_|xwQztvV{Aw=UutVF-nHem
z`}yuB!{7)r_wUpyol>F-Ygziq80v-U8Pnb68aBvLJRwVN0oNnKA{upTHm;Mj5xc{0
zX9L<G-6N~XoJhvpf9$FRu4S^WCz)WBGvN=zm+Kku9C5jEb6xAeyx6QduekI-k`F1?
zscAuN#x#PlPa)(DFN^@xHTcb2?k#<82&3Oo!UbDn%14xeUEryM)1$aELPnF_f{<Df
zYQ#LyfWI!+-Neu%f$VeWm&t5d9G2ohX0{~R1eN!Uvbw}de6fX!19}WGo|%Cd%Rl<g
zp!-fe;J{^=<L^bI6HH&1JP&8OCSN(!mIeoB?ykk-63rudMogB~QW64&O;<6>fxZXr
zpVBK(_jD~0zRRLv5}uT;K1g<{svG`!f3!zGsp%X!1Q*8Xb<h+h9?|gK4PmcmaDJ75
zD^Y39T8t73I|}nq@IGo{D`XpXJ%dCJ@$%WrR&+mK5X9%m3a^&e_t`SzCcG8?4g$#=
ziqv1f64VSwa|;`+-b>tDA;;tsY|UllBQI7vAZS7>ysUqS!GnY<Gw&S?fdq<V#6maA
zdy>%%q;<2mc|nC0GX$I9=^?cLC2`HJgA{NK<V{1}7a6UwmZ?t1B9WGmo9PkkBwoO7
z?-zK5YVo-&kchm*PSfg8m#;mzrjC9vs5F?UHhUs#ae59lNR^UWvDz#&%xyCODe8fW
z5|*Vw7b%G2mASCN_p=UQjGM2F-hxOOFQWG*39ch_`^U&vgm&AheIz|xjgThL*q{|s
z4JOO<d(V~stB4hju>-nX2vgg^&Z7nAgE6P@{*=K+ba-i}xJq<R(rY!Ib|)b)_pM$e
z5X)C(QfN;Ote;lzB?@G$o6D;~>Q0RX8pf*s$&va}aDZ5&K5Kr<QU2+?=ba<Cp>9}n
z4av?Bez=Rh{yez$V(<(PIZMcPW(m>^`6kmaicmEJZ2(*+JENq|Thnb?EyDsEI26!)
zDvD%5o(fv9Br@^qnc5jrzm=C{*1l3a8~-f!@rh?4Y>>9^Q$#%VonK{lfAMibajjZz
z_=Mapos8?w?P_No0uN%V?H_uu5<_-xV`QxK6)8^n14*%pZtbyT=*Hka+xL0R+$^QK
z9NhSix~kZODfRfAf;sbnu`^ik`)Lf7nG+B6pniU=;1D=UTmuQE{}6vhn&K^O`S*vA
zJYR*-sdRvJKZ)Wh126K*2-}vhii-~Qd2|iNMO5rLX07OG3>aE39AxRDvtCb3s&Jyi
zpNS2QVlxZLT!L`8ZNBO!*B&H=DybaXRkow%m~Dc6bAIr$TDY)Atn`*(fez3T!cbL{
zkxwOo0ZfT$By-QvCbc~Puo7r&9p{C*oi-hl2M1#WrUhYr_cPk1K`8<d@J(el?a*!z
zfi%oDBc=E=Q>}+;sKePdfnVzles7SOSMy=vS19L+=@WQkG#vG`2!(LS#-PjQ>V})s
zvZ3mi4oi-Y5d-6cu5yBcPA)S}{bqJc*rYEOEh9BoIhrZvSzR220vh@x$L!3}a@ZX9
z^BO!_o?&h_lMT*VdPf>GXok2`7s-jbaWXA>c(hVby+j~m+^1}626$AjHNnH4oXh5v
z$S_$GgDUf%TYZ(P9#!-bAOTQS61_fBYyEbU^U#&;JHk5E9%rKk30!raI!x!`*97%H
z*Q<u9L&EcT;}_s=5@YbPuRascgQur|U*6QV5HQ0QPKfCt5XR4?4%Uz%s~8AoUfeP0
zmQA(~L<JfM!2~KRa6=~#8qOiw6`a)0L9#1@z9m5cj5U*DMP+Viik_Ie7IuU4gTi+=
zLG8+(E(arbi>s^;pK6MqY_Vo;PaKY(F2|w(b3Ttjzvhnbe4aU3-U$PNf|@^!sm?~;
zo**Zj`aXL*qMyMX*3~4ObbLv7-i_?{*)oEv!jujPd<2KepLL-;iJ_g{A0;^Fr2P{7
zbIUXDb*{SQ;Td5xWt9l}&Ea{uy7CcL#)0GJC<*RX+a)0aO_B*$TSSE<0*2kP<8N<9
zd~5A*&Ka4RafwWb$)o)3qX6kea3p9@OlCC$uh&@C8e<ekLl=SK3(1u?{}K;@;t1)s
z$j{(sZaN$8gIZS9FLR89U-mVHBim|%R5H&3<sPMYVcfj|9KvvfPoZAh##%>-dtOpF
zkMW|pnj_s*IeTiRWHEt+B`ovAHVA82EU9j~ge;WWlZwhx?+@Fejr1r4Unnu2${?VP
zo3I3Pv?iyaWJC@=;8KTlOoBU)+B!((LuCywtVi&+T`B3^{hjcfDm$jE0wuQP4I<Pa
zh{#Y?YA^&>)pjwANJZpOk}b3;oDDleDbn3VF#?bpKPJ&c7(`*S_F@b=wtKXu27_g4
zg7byvL3G4rP))2^4>^unA_FF;XryN2Mb}<AYXV;Hx18#8mDnIG4OH#vz#0&y?bREe
zHmmk4w2^z6*spJ17)iK8TMUo_{`qc#;O^y2M#AeptloD*rIG-<vsHZC89SVOM5w_$
z3`37KYvqJ$W57>6*?W6_`x4f7A%L{FZ(ZMJq7ugGB35!F#RACqR>R)Wnm5_cCHs+E
z{hgn^-;;IdpdR(ws5@qSxV{is>4@G{b^AxUJ2$ypkRURD$073rm5@JuAA9=?oZ}Et
z(;P$7V~KcTm<6K>+zhWq9F@@y$DLaBtta$5kqbx}#|JoJ<X@`17tF-KjWqmJT4g_E
z`lN$k<V@L<KWVD=0vA<XF0tyA)$V?fbD$Us+L6P2kWnbq4!ugh-A;!b=)n^#yF?qR
zwJ+l{RBjgJmDsJ*S~kVGzCMGHIM`P%nyEFH@Ot5ml@Rzx6qGq|T`ad58a@^^o^|%V
zc5FV7cz&8{{!)ER;f{AL^VK0@2aS%!<@&4jw>x^BWm`y21%0@}`6s3%l!@zY4WeP4
zx_K}1vEET0v)jWj1)@v3(H4mf>owdp={o%VZi<k6ew;co7MwbGO{H{@pHVu$wO?Px
zGh-82k!u+zsf&w?xZT`zOb7l|i-QO)+kn4EmTB2Q!52?SR90;?KbIU*0R>WYP8U#=
z6VidO3mKN#Qv!O@0cd0X@{;oW8efSXizso3utGU3(d3@i36(9NuE!6V`A4>bUXP}p
zksgUZ&qwSpnpv|983Z^@ex`kp<#SnW9$<W|E(MQ?M`hF)Y+O;EE@Qa^sp)9^StSiN
zb)oDpgF`#R#MM8aT_yH4L(i#h<Q!Z{Z_Fa!+^x1CKO(W1;;VJ+AoT2NtrS`0YCwua
zIGBYw->gTbeki4xDmPZ^`IZ7@*YWH2`(3<-mhrMOmr>Ldj@qCl(F0h(sZxae&yT$x
zqo>ifJe6+B5JSv%w<%t3?zynx92oR@lkfYNpT%zkdL8O|m!!QiUPV7entwhI&~y)h
zZ~i!1ve`D$yk;CUzm5xD?q?t^S^ZrawkXwF>&NN#8GE*K4+6^jIMgDbO)Ut|Yz3{E
z0)K~6-yB_l%E`_O+%<v!{)?ex?En}jN@(VVEtbX#U`KwP#WMLV+eZoCK<qSNX-Zd{
z6)E(TXO}<U;OAaEg-Ex_A%8RSsZwpzU_ERbx=~u%E>#hy^=k*Euni%j$_|XVLX$IX
z4if~{1GGZIr2cvnte7_exM1e%6nI~m1C5wU;~M{Se2lDuF3T*s(tqE-c9UrKcyqci
zTARzla#uepN)SRMV4bwW;f=xQ>59wvUzQW<!W!pSYn#svN%pGzyzv>HRftW>Ig;Tn
zN@k%1j#lZ$eaJi{I^U7?TP-+`)^Gw=&g5y6fl4|FdNZbBrbnYmh)x_{QK2R{oPYjq
zL6Ao|%>H7%y9MTNs3n)izrbVaIkti_&L(Gzf6cV|8M9CKqPlKB<s=xIt6D~l>E4YW
z`+{0pO64XZak{l>{^f(tOc-!CWZS^h+QMwt@@of9nAdA<?0>jo)?3(TrS%8DtF3{G
z@B?lIl2t0L>F>@AN<><m6FxD6;w_#^N{9G-p)%c^#Z{a7MJEi`NtHP=D^d4oQEXM+
zh9@-#QrtDQk`(OBcs_f-WbE{r7v++ZlM}NcGF9>81LT<td+N}dX_cJp&iGDzY~P$Z
zYV8kIthQ4gP_8d8@)U3TWZo)?>aUsq4UM?-^~JjXlu!_1Cf6(UqO$EE!d)e%v#a&j
z`iUBju%sY*8q*A1=B%Z}0EN#|xpED$F4x`zJ=;^@;U`<{7m{B#b(dFJrm3zDU-CKo
z8x(?wFTW$RAzfyD{ugaKTGUV@;XEV5yUsh!I-TG@Yzf0ZZDYx3#AjVtgTuF~ukz~z
zn0r*vWqVPe{>rCG9zIcfafg1BswH=8wd-hiANtGdBgF4Pvvo~iiO*xZSXMT@TaKxp
z+q=sou({}~6<8+5<`E&CMTX`s{%0%~t8C~Ogv^|)NFyJKPQ3E2q7<~s=ezCl(3SRS
zd$EdI=xYlTsnyZ$MU#ym!#<o3r1(eSphUL`7Ppy~`E*sw6+k$0T<iY=krQt0c)JLJ
zhV3FHP+LrZxm1{jQ7<6$pUvw8voFTVK9FKce*bo*f`3!UBSBIOYrDn%j6V!XPL`x(
zx)!&eoP79g2x}ISd%<|~CSrjWro$dli1&%r%OiMN`d%%4ZwO7O(vKlDG>Q!>ItS_0
zK7I<%SUBTV5xhqWb34yiklSO*NU?79x@|?VPW8H3Lg$?P$z6NRp47EUvo^J=H{q2;
zH_3H;N%#xcKy#)x_;#xl3r&m$(LE@zY8w(z?9YJfT)u5k*?O{ImGGgE)IyTz4~#n;
zR2^P26!Z<PIkH|<hlm$-^ZM6b7a!IsQn)j9xrwF@@DR;}^$7MN5a%&3cnca$cH=sr
z71;3&X!k)Ac5OZyEqv#@wglwmHDPeSLSj)owOb_+#dhpdM}e5m=d(j0a`3EkDm*xK
zWMovaElCXTup)o^tRDdcO9_CA2>3G)e@5l9T#7S$hJWWj2&aySj4rk(63}5;!Jfiz
z0W90Cd<sLr<^R&of#Fl~A|kI@oyw;jmlSN8d5ht8oW$bs6ptkE0*?l~06PG7eLVrV
zg9zyLwMKS*E$jrC4%w-kMZG~8paB^WFB>gZUhT-dH{h|T-b<676|WW@<sTwuj17;y
z7G;_F^^8ejv7ba+<|t=7?pS;B*!YiHcii>-$>WnQ0Ulu@=sA1?7=c5^ysnS4hpyaO
z;953?Hk(KyW4`*^#o7IPk3-VzemUb%>EKytO5f^(Cr;|ka7iiqgS-MU#l?aF+wlmV
z0Td@X8VT6Da=}tG1n&nTF!Pm%B<@8ZMtZ9gvmMxy_O87SVb|A?L74*=+TbD<yZW2n
zhsy5*E*VSQ4#xaG2|6K$NjH#k_y}yg2k%#Ag(x%NX1IXf`3)FLxjqqKpk;URSGkj+
zBWF4uH*GB6+?2vS7;Q!+LJ_7B7%&lS23B=6g%g;;-@dGbY!fa}{8q{a-Y*R*T!$yJ
z*GXYKZJk6-G^DcDMU~!STU#V?yC}(Dntm+E9%Faeac+?{;Knf3K8!TE<%#2U3Qpb-
z>+ec%aH%V~Q&@e11+WSlE_i)e?-t5Itwuj%c<+hQjENh+8e)4jY_DTq*p6nf&2NL2
z*Xh@9?b%vzK$!Bf1LmNh77YiD$0+`z2!xmZy&0~Uy8=qkj!^UmPJ~{0dBt1+*($~l
zah-qP4-<b<deMo~(dhF4fouS{4;li(z(QFHkMLKOIEtU$rQ$aY+2Gktb37^d^!^po
zzxJ;<e3??-z#>U*$%&ag(_zbw*bOFU>AChVW~I*=cdd%?v)B)}qHgz2mC!~O*y;4g
z1SUD&O+lBNLE6efGJM@PWVaXwLRrQ#EL>fe5+7LDr>fRemEcuY>vW2r5pkmB0GvBv
zlEg9;zO4+MjS=t2abPFjKDvJHv>?-GwEw1rcI9k0h5!1-=+R%6-4&XdVZXjP6m*8p
zkYnc%GRHoO0El5B9;LIC461{-Wh;;CFh;8yn0fvG_Y(2AV)>vN9aK}r?A0L$_1??A
zK@~cv^8ar}va2^FfP7uV7qhTZ(o;K>gn#Bc**D)T`^4v*_bnO2zJ8@adEXN3ADr~?
zt@i7(GG<J=>SKYDEy~8NWPb_ggZ{@a{nO9{2OOgV$`f^vpDFMn&KN$<5dRh<KsE4+
zY~}u|n&bcLgjL62)#T%TaQPsK4wC*$<cn65FM-pJ`dw9@O1?zjh*g{?IV+eh4*RM1
z?cusT!`*R|dS*D(NZBoK@GoVcq-0TC@9AdKr!k-SC`gId@5E&S8S(mc&f^>iP0mLV
zLQ`{}-u?a5W77XS0MHzq@bpYyxQY&yGktdOj7%R0@<pP9{L$E_XZlkAJ=6EEdA`vA
zAS1Q{5!4NEbHgj|E?I6`s<R(){_MxH^6W=>?!!^`8(NMNff0m(Hgd2}dImFlG@xj;
zGCinxt-OD^Bk*lPMWqN;@K$%d<fI^EqnZRJE?BBJTjjz9OY}jOqA1jTio=e2O>r2A
zXWgoO9zx`GtM+=}pYE|3ANAB8i=}gHw*D&n6D`CEJjaPD=QzXF-FnZ=acch?InIb^
zC!a*?e<jEH!+#;g2|xb-r#MmB?*O0~*#5+hwBgU#krq8|M_Rq8+L4yZBx=f1hNKpe
zTSE51k$oahL@Rsfx_w>gav;S5)8YDEyB5N`NJ;olD1bm$_6K?%hk!^hnx?*@)jKza
zSKf~nsS<9og#Ou&R`b;TXweh<(MAUBN1G^7vihl<Oo>j}iLWCmZ5sS0LOJP9Yd(5D
zAt&Zd+e|zp#nqsVMoO*Uv_6~<*Q|r<!w_09Y0fr;=H)?G0)%bT>o<nU00BG2X(Ht$
z8{Z`?idU?9qAK{Evv_6P7=xog+>F4FTL@BZ8ybl!?L;d|%*CqMh~JIlc@479*Fr5!
z(xg4LJLcxiAmrHm!nHanjBe=mT!w(Lu6s&nQA)uHn<4H!vgPuLGj||Vw4&wPxBg!r
zXBFT!4uoMzwv%P%-SVQBnaa$}%*<`d%(!sO_f%%)_UV|JnO}|>;<JCbiIli~3Vj~W
zj5JAPjsH;Z=#H7`X=4XgmepgghOlc&Vu0#wn%rlO)>KspfvC4tXWKzx{E)ZLOZ2jL
zQaYQ-p8RhL+xP$>3JEc@wMl7bW~((RAp6fI^S;q!bf+al)yMx&DlPC@sU8w%(R%U4
zPxK#jLsuqTjMiJ}#nzKk`YrtxU0HG_MQ}<<(J^K96!ay^-BfWgXELSq`pXdAgs4pg
z3s^T6v+=@nwqEJnbEc}E+OhEgMR{bTsvcUiqVZ#`yritZS=L3xgNn8MY`u%yRhX@J
zW_@Z$=XPAOcq3ygr>`4SH+|j)#+G|~<QCWD=ayB_bvb&eo|9ij7%4Y?V_T4+HkNWW
zpHCsUD(6o|THsx@EINd*Q7%TaR;-vQ6RaPSI41Af2rokd=N8uN2-%Ijoa*wVs+=S=
z?(?AO*?#>OtW{lCHf`P;swH{<eJ?RGVr4`34s{U<3m;I?-|Z@()wO$<Z9d4<)6Erc
zeN69V!;iD7UMZ;~hu4*Mv(_+s*e+&hHxxHHM3%9KNPK|qNUXJn!CL1bbFFg{YaMXG
zYaMXw*&apJPMF+La4~YDE_RrAvpwu<?YhYv6K&ysB+FK!ZR-K{kWvI&$H6)6aIZCO
z{i0nnnG;}Ah3RV9N_o}l{>!v29%TF3Z=g@wXO^2TGHlM)>t`+!i&eEji0ZZWexcdf
zlHY~c68!^r5tmn>bhplGR5`=MUh7v+6Iql{lmCn==&WmL|BsTiBijk$kxF@wC6`)W
zTqtQsKKao=zlh|Oejl@aN7)*`lqB2d?RZ;Cl6r?42G>V*SFvouclo>1akL7V5nK8q
zK160fKP%84`a5Vj4UwF-ZCCr~2J*9m?P!61&Ykb0n<$~xBov*CiIPQyGsI2i(p*~Q
zd;fmlv5j;eol7EcY{G};QW3LdhPTF2CpD=Y9KD)eHU2RSuBhqmV7{Mc=b#<!06)cD
zenjO!d+1FEI!dBD`sfC7)q#$c=rGWTkNikG7zUIX%W%#@?xFD^tjL0Z8mxd;dJD9N
ztN<-{0J;P^4jyv4!C2;CJ4B!h;9(*6&^Q7Qq5p@`E3-#0mye!ijQ~FuI(?Wu<#wKz
zVm`>SPMLS0JuK3sLy1YA&XSmFAJafXeT-};9}M>_nO56Op~NU)_`K?5%`2`71|Mo|
zkNY}!jQAXA5B&<X{GF62(bYb>fqdp*J6WO?(A>jhcnDo8oU?;{&Ks~I-yjigTY<8W
zi<oo|9uGN32x##NNui%sTMM*@4s@W41l!-as7<>_L*HPwM6ldO`_0ETjiy0tvA`<Y
zOJI3TY$E<xCi%Q;BwvyWk`!R2^25{hy!varHI~AT$@j9WzdfoS$}fnrkDZgp5T(4G
z(gxmeI#i%NwAz7gE6~hEK_e&S!EC0;YA<n?xX9c&h>{TcjrN!M?p|2v-u#zTn;E{k
z2h08wSWiA!>B4|ZV4u<c2Ft5H*9f*8BG8{{PlM)FKhgNhd_R&9H3#E3l#k;?8g#}a
z+XgfUkhx(z&n8EtUjv>wXWB#iIneDSnu122dj+#uA`726+cbg(v6&M45?GAMdh1=>
ztqkAB*pXa-Z*p%b>fC|$(7`4h3ZbMViJ@TNe}9{ht-zBpb`@-~s({}Q3+oeX>uKCN
zEj}HGV{Hb<PT*1WC;tO*#39oF0C?J6$%g^LFbo7h^UY%aMHzt)ot&+{*19xq*U?%4
zXeS_L5b_6(L6fo*I-b0zX@(%thi1SS7yGm&5e)1YkJ(!^NgoF(dutqfyD%em2Y?k)
zbj|P#%!`Ya5C1^<L%IXs#04w>000310006b5?wR#UtbSA^#B<N000000L1VSE&u=k
z0M!9f@cKdh)d_eAa{vMW2>=2B000000C?JCU}Rum&-us0z`$w#%kf_lX9WiX<7NhA
z@D>1sZw7<_0C?JBp2m>E00oRcAsEmmJq1V-1VI3e&dTaN+qP}nwr$(CZQHhO+qP}z
z<;-#M@fu|W#Y9FLf!TZzS-CCp*zH(vf#gmVjG~=rL<eM?>4b({9oe0oGMFYH1EohQ
z6HR(*`&#Oy3aS#Qz^aO>s|F~~m?J1Mk~()}iur~#TnBYH98#K781H^X8k<h$@k=DM
zQBmJULqcw@itB$FG_}K#kg_5@SBBviTAm#V-Sb*EOf}GYc;EH-j@E5PJl=(AHZrQ(
zkeKS;z(#&6dwD-*^9H$3N#vy|gk}2fVyYsa86ur&2#)BOakvpeaTH|Yrn=sA$Vx|0
zlUvD0oi{jH#B{z%Fph}Oo^SW4wylcb+#Z>^ksRbU+J2vw1w}NPsr{><h`Eh=_5?bb
z*Rt81mi796Nb``&`HomLPbS+ms7jIK0oO+{o+=+~Hw5CuNaK8zXM9brnRYns#y}0z
z3p>mS6z1~i<^4bCIP@L&I4z>mV^mNLX*3S;Y`JbOqr0Bf3<@G=wfvSD@9j%=IX1g4
zR=cS%!JLvaKILT~Cr4ac58-(w67o?*btfVu4@Uv+gzVfBNw|j`r*Mel(-)<Df+LSP
z;}9*x7qbsHY*0*dgP@PI9V?v87~&j}dB(*?6C4xitIVcdm|^=PEj31UswJQGoNw!T
z>S+#2a1%`95h%)YP}BYJ3q6**THjnn)bDrdwSEUt5ma0iNTpRnR6W&Q4OSCWSGB;K
zW6h<_BI3zYfHYs8Z2ixZt^fVam0y~v|9LZ|xe1Ww$djS}dCu~GfAiy)X6JvN?8y3`
zRVMp~0C?JBU|>jq!?_G67~L5!GBq-bG6Ncd2N=1c004l=t!?vL>!;ebZQHhO+qP{p
zs%<l<c{3SRbJZl(QPm5zMjcj{RX0%|Q-9Eu*PPZGwEeVibUximy;C36%lgXtKKi)^
zjp4M>XdGm`XG)lQm^PX{=7#1z=I!S1mWZXlWv?}8?QFeegSO4KTlR>(ntiGLl_TJ&
z;~4Ci<v8Sc;`rl?I5)d|u5PYd?z--6o+6&{p0i%Rx21Qe_p7g*Z<XKfALTz4C>od-
zcph{ITL(7>KZlgipwP_Fqc9h49lj7Dk+o4{REb`VsbYuXC|)w&g5s%?)EMd#&C-kM
z!;F<F%CutUGH2NkE3hTm#%y2q6<3X$#2ffl{B7ZcSXf*r`K2M!d|8lRDYVi`*`(}I
zjwz25c?mj^N)$?TOUy~ENt{SLNPJGJlT(vxQtnj$G?hM{@n=eB=4H*<n%ToSHdib6
z4AcVcz#uRMtN^>fMerd13s@U=f+OJqxC!oq7vT-~9;r|e@u(=OgF2)BXd+sHcA+!q
zCVGl~U^^Btz?E=IJOEF_Yw!+y0bj@ONFMPMh7=^#NjuVuOd!k2K5~UTB_9f?3wR3%
z1weta1#0{UM}v&100031008a)j{p_`RsaP60RR91000gE00IC4H~<C!0eISdjsuPZ
zP#A>2wf6uUy<lxCSlbF$wapkkPEXU*H15=H<~Iiz#lZl5gJZxCRN_8n_^HJGOp+?c
zvI}G?@nAzd#2nd5JghiZiKqD>&pAOtq>13hiHjJ9EjHK`4A%q&CqC@TZV6yzP0=Yn
z!SGhwik31vQE7yPtc^8Qf>@+6so}9ybrZ+WEiwM_DYN#NGEH+|rQ1=(K>{V7YizR3
zKF2lI`%TwYyZ#hsA;b~uLb8N4bwg5hu`3G_!O41M!%l!GcIi3~+;Yw(PrS>nmY8f5
z0AYSWDtOvsU}j+W{{@J%7*ZIp003XV1H=FT0C?Ix&I4`(02IdY+MaFOw!OufjbKJF
zFUD|@)$K8Qlpdjd|0?+9=}Vr+(&SMzDSS$ss!8dyE5)#Vu)U_pp)fQl!pi>E>O!ZK
zVb$t*XH^cBdVZ+2BAZH+nQ7bW%W`d0x}%M;mLe+scy}sm*jgNHD4;Ta9j^{nQJJ0&
zmwPLy%zsbY$(iMGf2p^G%Gz9AoNb}9P4zXExp>Csu<7O5@|l;5{Au5Nw(`#Bf%R<V
zz3&~avy~6Nv0|C+!5g#{%VG_#;0N3ggR){0um^8oFPGR=IW1Kb%F5+<4}Ks5F&N{n
Qt&#+^H40-w92$~aRoKJSNdN!<

diff --git a/static/fonts/roboto-v18-latin-500italic.woff2 b/static/fonts/roboto-v18-latin-500italic.woff2
deleted file mode 100644
index 1b9589945e075f9a84df7d006da2309c73722912..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 16940
zcmV(?K-a%_Pew8T0RR91075JP5&!@I0Fm4P071q80RR9100000000000000000000
z0000QWE+`!9D_;*U;u_p2wVw+JP`~Ef#Q6D%L)sFUH}q-cmXy7Bm;*w1Rw>2G6x_G
zf>;~Vf)#9BWrmFd7<fLT?|?fD8wX;Znb#i~sM&+krtJR@37igr{2i)hjDXFc)@o~f
zl}Uq_aYSSv4Gz{osK}+lD!$);zG3nC;WK9VWf8(g=c?;kt@UST4)<-nCG>97JK9aP
z9VVRt?&OF@okRTG{_fo(VXzS;EujJelA=UyRE{dC8c~i&2@$ChP*Kz&1_lD6Sb-QQ
z7MOtX{YJv`k$*k^tE;QeJlNk*WJX{JAd^!lvhVD_*81utR3%^mb{2GX^M_m*>^&mm
zMjbk{LY|N(<On$#enH3;@@%-*CmfKxJ-TK8kP0KJT^k&LZD7O7!f^Kc)^s9VB+%@O
z3+w3J3(`!ufU3e&Vo2$KtFF@3nBIR*ExGNRFIh>6oGt+05a<7qEhjSVlN%M-a^{k}
zz1fFLIc{?}FW{*N9}MMWS*exVUf=gq2nWhzMUvU66?h=NZ1$$pdN*}n($O4H<TddI
znE@z?9qo;@UmA_pz-!_)vrZojfEjR*5o2VooI`UE#fYhcFtvT&X-Z{h$*Iu+)K`?6
z6~L6i0wjIQcd}&P$v669JA1l&Wuc<JppHdbl(M}aPXJ@3u&@4qs^+)v0tBhBusp+c
ztn6+}7v+F-pqz45LXXf6L{K_1!QJc-vt|IFLku<njz5G{y8Aixzv{oqn#BacR*@}W
zj4WRJ-L;>7Sx9ZBDY33(gNPf$E6tm^&$b-uJC9B^LFCZ&Ft4cBo|(eIIO$FSgb^}+
z=R3ntsM-Ru5d_MX4JuR!Dpm|CQwFM33EH6s)T<w6)Cvf~06+r(0|WpBWrF~q(6I&X
z*0*)^1k#VnPK^iBk4ue=1JX|pO-}^UZ~y@BLVJ1AV^R|V2~bvsBMdN<e!Sm}+uUX-
z&AIszAL_$oKA#_&F#kWy3#&tVtE1|a(kk-`tMsPTE2_F}Yj6Fif9<Gt?>^VhE$ur4
z${=;l&FVAHHDUe&dOyrRolWRHqHk;UE1-N!OnuYh5Kz%DsZyg(gC=b{^yu5ffDsd>
z%xtk08;2toZrpkB=F5-2K*1X9)}+~}Q%*bMtTE?|n=t9TDOX%|&2=~2HRrJ>=DoCF
z(JQaLv1|oolnZc7u$WrQjJUhRLClcoVC+8-?QfZC%xOi35f+;~WtS!P3N{XS;C0E~
zd5xR*{PI?y%4)KtQPbku5S)s+)12WfW1I_S^3*+Mxz7V029L62j>kM<o&^?p#cSRK
zZ}Z+e-m?@e=dG13A^%K{?&)<HUqTA^58xT)8IvqB%`&shy9<XCxan3Hw;$QtNN~Bp
zJLCLwM?&J|B~f9llx0X|dg0KqSP;qB@}*ErKo}ZJUdZt7Um?)S2gWNmxy5bnOr3>*
zfg00nUzA<mvIlG&@Upb7#%B!}b`woB2aodB9FKXT=B>|PLRwJSWtlx-<A4`6JYtT=
zJYoK_aX46f>GCH+o)LNE<ujGEVBMnT6|Z?SO*}?Qh|)+4ZPr1SS!Ou`x4AP-CcCt-
zhmAw#kz`(a_db#2kE-VF9uadq<_Yt`LXs`=ir2jH5Pi!L<s9LgkNootLeFa!`Cll@
zFr0jlviG3E#Fj!RdCBftLb=7T<H(tJ9`f~;+3hFfu)N&JyzCxjnN*nxt(jrcPXtoI
z&QFAc4qJDJ1MuJ336UjfT@*F>>OvMRP!X%HE-ltMnAuU^`@E}`mHWZ$D7W)}zQQzb
z=3^=no6r`nV&&06kI*mw`J8+Lzu)A9Ss&S|K&`I?E9c|r{CW)l7SVx!jvf4u*aQ2j
zWtly=pT&WHi5>WVxfP=3Bwlz3cT_m!@15&<ofoUDzG}szyZR7i0)T8h3wh{n+oQy0
zGRx^9LNwEPnNR5R>>ZIvaThITV0B*>SErMGQx);eVE`~Nax52G_liac@Anw{Pf>64
zI2d2Bp5|YRHCNDG7++U;)3cPNIrie@2qi-M;4e@gqGb-7`=);~Jn@%AhdIWPta|u@
z4K8xkIbR8j-Wz#R`1kfz`|<bIb^wwIA5_eJt(N9(^!D!{1^+<xwXN!|w0hCqd<Oa}
za<hH4f01DIam=<2c9NCM<{8UPhWXW$*}q`@^q{V!ByW%Y9xvJ5Eatd7IA8UhMt4lZ
zjSu8sOMC27Fe(8V6~vegM)aByRT^;C(?@1x3*WvCJ5ty%vK+&5+<02U+bHo1D+>@r
zMO9c$gBI%AE?di}dD>oj!|NN+mi{oC%!-6ahzv3j8O&NEMa_s%H;{(G(=rs=hDyhX
z(=(91VKFjv#)iVgNHaB(HX8;rL$k#QvoQp=hRCia=2j62T;>kP0|xP|5nU`|LXKcW
z1sbv-Bc#d`za6F$8sTNWC8iQu;AI#<CPElG<s8iTEfX<e3f>hrKsVh%aaV<DW;{gj
zC@f~qJd&3?##!(NVy~4fA|jHqh@d9UVG+v{M2cBQ2BYOAxU!lN8H`~~h_NDykVQ<G
zA}my4Sedaw4&)(Af&`Z$UNDf4q2bo>jLj2CNS@wdNio%AFf}`d>g^)Vp@;}eM1+;H
zoP-w#A$W{E!GtVSh-=M*yyegcCVOiMJ|T5_mRPlyt(v)6^1MqR-r|8a3V?GfcTd-K
zTX&10&3AEeG<UV|HurRK>bkePgXd^TA0G#=%o>4RIN{MxO-cZ3|5Khlf%Q+0*%k^6
zglyiq{Zn}fslb(FD*zBoe-J>hJdbx^IcN#5kPuw~lC?RDfaJ}O9?N_0eGm>Oy)aJs
zvy_#7<7$t0HP^!dA+1GF74Ksr1PCO$P8499!)7`om;r~!YTjDRW)%DEHDJF%2OKoy
zP<~~I^u0MEN1Aj3!;Ttp%yAfqMUIQ%e)0H!FZj1FJpi74+zS0rRITE5l~1TGXQkd_
zySusA0SG7^mxF(Ss9jqD1@Jup0Js}2L1h%6u{$s8R{5wXw;4VjZrm9FMik&k0)VbS
zkNuDBxM{b%_R%W5#_*`=nyV-0)a$s;>$aZP$NDFQbcLa<{QoLiDEMB-cR%5h+uryD
z?LJwx_G_5s$Lk;YmPO(@kCI7X^~ZOv&)lkCOb#v|96vbrix<e1BU8FCT$(@s?dco9
z5t>dP1daQ;vD<s*LZdEsc|ZLk#csOgwma@BQEJ9Lv+jG~p)%!N;X7TS(p&Gmw`5tB
z6*K?<`0ag`YC!1FL0c;Tpup?tp@$RnW<vl7M{;P#Ne(kk5))kHl%A%LOWa~y-)59M
z+~+b6ct{bCnCB)>c}5A(dBu!=O&M?a$RquUaz68omwe|375wBcZ}mT_^r|MZ;=*fC
zu)~4(B=@4A+Qq&`L9L7Zh=Mv7`w0a*9fjk`2^7>j3a60MC}?mL&LC$|(BvwdM?tHr
za1jM<j=~Md4Jl}M6>g1Jc2nWmKtY$Q@F5DiU8UpxpP+}P>*{r>w=C6B`Md>l7BX-S
zxBvjwJ_M`UF=C9qe+$v6h}t(K-ZdCYfVD{y+a@r|pXd$;zx@mZ05Ab%2asJQgz%~n
zT>W6PAsOv=6~Oh(?!^LzRDi7q)HD^K^&9}H1`{bL9~F-5`=dg@&o}qLsUG?13m%T#
z8Usw_#ho}419MGZiVv!d3UIe*!<i!&Eq*QC_R5PM{}uT4-RGmVBN+?$HVt#Dmm9+l
z6Qcu}kY;2>jbI=5{qHXcO9{~sG>eF&EvHtR7vn&WRmyO|fN!VLM`c|cWMaz*f<Z6y
zVIWmkHu$4d$=_63vYwSj)5~*g1?2VJsW=-@qtlf2Sno8US{uHPwmwvgee=;ne$A=f
zMI`Wj@8;W}jQ-v<4dtmo;d?YraX2_kUk~&4WTusb8_1?bQjymBpMeXANU*GS0qhS=
z_><QN6}r}}^lt#<$K>f#de;WL(AehCAv^@G#*P-I5Iv(x3=km&(hM{<M<G}xsGJ*g
z$64>dpcNjoOXEhzCRvw2!Ac-#f6x(&C_{|hA5<IIsDusdG_GB>j_%(PaC#olhp%<U
z?C7)o2h&CBtn^NEs%h!i@TBP6Th?hkSVk!u^sh80R`5kDEjLY_$(^jc5}kMA&MRiL
zkeqTx>0Xs)s#GW1$yQVwZRl1NzS5Por><s3dl~4|QMK(S-%%Qs(!mz9%)K83)mqd3
zL~ErTb9T_4=w3=AUZ15{G}Sr?Szhmq-8(6?ZaC*cSjOmuwsg4Cr=D4TQgmtzYpPu{
z-W67W;2`71^aE)rm>x}Y39!iK+y`gOtbX^T<q%>~*_%CJMj{|#_xX_s#U6wNri35Z
z<E&MdoFfuw41x=PSfe)PGlN<q0$EE^8)+P;I1g3DKb{G@=DkyQ80h<_*V&ccOV4ao
zETf1)K2-EeV{RH2*lZ7_r%Dtm#(hzI-Q+N9`OJ6(Em&ylI;@O`|C3xQ$vyfK?I7B%
zP`Nu1eW%EnKK5=dag{2O2y3!jz+$M_M=ylPt8Js8YL)0_q=_3nGMJITqM{3qqT%1t
z8dl8pme`Ft{#&8mJS$BU0GDZp7$2jiBTfvuNfdqRFY5uzP8u^O8abjV%NTMSiW~a}
zqa3lw{P^iO4loxwVfv_-@&=VK{qs-jw;5O2yU0>QtJWDE{_Qs&N^9dR>U7RL&e1sQ
zN9G&L$kq00u~eM3AquXJ!#OgGq%9NHa=sFKOCC@nN8|`Udttf_cM~Iz(RgV+rMaD2
zm{F2nc+RO4_Wk;nS>ScG-mC=DmbL#UW@?zZT$U!f<`olwmX|wpx7S16H`0*QVDAr<
z9sa#2&Aq-fJ-u7YQ;wovUM)YsxzJ<Lf@yzBaOF>eT8_h1Sm9h(xo5j#{?I^u!{K5-
z-j`t810I~pd(juu&b@vld!6Ad-&*9!Q#ls~IL71X*}GMOAy^bNnyOw`0}%2wiaZLI
zLyTM@N<l1qpRvgBc+}`;O$;-Nl=ypFUXA?4f?Moo5XBkHlpvSyVRn6ci^Vo0^3NKq
z<V?<T-MicDkkS&&;BvLvKZ_+Q{i^+|T<`#yiHf4$3w6hgQE2afenBoyuJESi`7KVV
z+_z8>gUE8JRjU0=F9Y^yIcMnBDL+l$Z=LtVlg{`YLoD{pZgJ}G-QrC(yympuO#Q3`
z@r+*!a2auqmLo$Z&|^QLT=RE55)2$dDkfpu7>zR&MR4q)vU%d7kTk!ku3j5r_k}f8
z<K7|F7KyNjt1Cp>&r*6^%@uB9$PHDaaygbL|Nndh3f(n&F)fXZwFV}Ps}m2&<l?)i
z@^foA-$%^pLj7qyW5de&`Ayae1`_0)JSFi52ya3lWd52YOQEF51g@v3yV>kEkfX^<
z5XYyG2q4kwqBwnnGp*HWMc<1Kar9x{wh6VYEU$0zsHbt_mvOgdjpLg$u1W-oWOwu;
za|&=k^Z;2>atN_IgyeQFinIk0c##m7_?`GBegKRAEOg%6<L-Y<wpi}%ZR-hrPwa?+
zWv4+yN=paUhVnHrgrSN}E7}p<Y%EGgHo^z8>7?ZNlpk2bS7h>&Y2-I1p;-6QDUqap
z2Az6kI_wG@EK)N^<M^#P0fLa`bHkd{p{7763bFt!uwhBMqQ~;toT5)Lq~98vWiF*z
z3l?FYuSZ44Q3)BIl^b?6M*-<zn>Za@?}lyFnw##8%$n4$z#TY7vXCgF3Mx3yd}Q2N
zY>^q#9!Z=P>K}8_47X#a5*KPt{f0mfE$`dpk(d%8i;N)_tPx~KXy|3C)crc5$|{5M
z7Dqnxb{SBw{Gi1hy7kSu%2NH{Rm>KDNx-=t*+^}*Rm05Ukg0*nkD(hnU5D<zMA`d;
z=CSn}+9a42@}a})Rv0U0KWE~|#%hNMw0_nvu}zxs`0k}UAw7fe%(Nbu$Y3P|Q+TdC
zsMl^@1IP07w4gqtq;n4~Tvv*76tHs<usV_~{ZMCdNspjf?TzJampGdL<JGpFXlrl8
z3X3x?@6@9fKha$<u~Q$FJ0yP=uwMr*>EaZMa#~x3z(M@Jls*2psAMs-r|J1qW};Tu
z<qWI$DYbVZ)x_M24}{DHvkTQEQ`x|^*wRE(op=*vcNC9BUg$M3Tz_`PkE5hWg+$g1
zSgda=s0NWqvVjORocX)cTCxGm?r|!+b~;WRN~=W-vJm)GGs<tu0I+IgL)Vx(fToHt
z1?<vpp<9UYnpS(iyq34A)lyis+a2x@DLsN+!vzvQj|_QP5hwAFfDwvnVRd6hgDz$D
zZg5wZo>d$+Vzs0`?o7CV;!k&9NPl@B1-)b8#m4taQFW?UX(^W;`D*)(F+^(z6uIG|
zkP_*M%n;8VxlSOj>&XTJp%jzp7q~IGZKHn7*81mJ9#IN$T_TveMW+SrvMuH3uZKD|
z_JckDFp_7=@69WZIASR`Eyw-tdWHMLTJ8?V&I!s!HfW!}Ihq!rxIPhFSW}0jNQxzU
zx=}?kNQosR3SDwT;y9HrHNYD-XiH^2Heg|q3IH0g@3xy_2nE_m%5ei|oVCiIJJd6P
zy=*zK_+8uSTFpn!7Muq^-Aqusk<Y8RqE@25vgo0?Vd@)Z?f9Cx{l|L<0f9V9s4nR7
zDDtt27s&mnpybg@ubt7G?EUtqy?b3_)-I~#qbY2Ex#7TC<=O6fvjM3`L31TSh%I+&
zIDZ-1dc%=x#qwzWk7x3G<3>^dVssyy(0Acc62_@h-_YT8AdF6Qjj+m9@jQ1ZhH#hG
z*M$m&FF^GR057<JA_D-PC{kpT@sXOj(2HPT1q?(<UPIT(7tpUYjTWXHhx$S%b}ENc
zAL?SeS&|p;pIPNjJwR(na@?+JW9!V$)&tAMKb7hHm1y)%rVGEjdr%GDYv>-VUJBP=
zOfb54Uj2MII7l*_`FG$<-QOaTgKP5pP&<P`KK&+TaN*$yOYKpo`h3HhrqASa%cKI&
zYH!RR<|WZWNe(V?Zz7jZ779J03@zU~BdUD9LuG28)RE7mbIX8G5Lp%qqv6ifB89Kh
zMW}v|xE=2(R53bGi1J~}AhCeJrd6C6R4zy|^sXQF@ut|2oCxNIKE0FN03!SB-$Jx&
zkeH8mqL-c8Ux;#H>j1tOXHKaZ9a7B4SsS~DPI|giIb>&?ov};kXP*F~ozP0Av%&w{
zGM#G-`PAbVccgGOC#h9$p$;z097F+Fqnpc4oHvde-NAFqa+$Sq&t=tJ1royDLp?vS
z%|S<a)95r@nm-|D1v2$g|4SCD2xeqZgSTZ8Q4iT#+dn4EjPFK`@wKxzv=5I?mlVtN
z$mw)N$Hlih=*K%7eNRxX^CCv-soVhP;MH)gP;bMM12HGYi5f7N>cz0Vtx`GD|4~b-
z0Obx$9W*LUwb}E>*&iJvi65mXMl&S7+>!8c?h(&eA0XiPY)FzA+2YeAv^z9c;W4u`
zL1EpDV#?b2WRBpCgCJdPKGkOT8yTWqfeWuwIz#2gtW=NMHz|G6>Nd41s-14;=s4W#
z%rP}_aGdOQW-D9fUC?{I;Ue=X^DLVDgDn6yiM<x-Y?RnAk2{0Tf5#R8hh)F@kFF6*
zmsGrymZF1u(M`z4HJp*VzF{*piu%5f@PcNZU|+aQ>#t7AR=L0Rnu^K!lQMz;>;3(V
zQd$tVfQu4Q^Dg0nB|t8%on6kT#KzE*8QL)8+QQ2x{X5Eiq>&vT@Y?e!(Uh>j<Nz25
zD^utJ%Yc+#esV6X0Gvn9=V&Jh;iY>EOov=37j<Y;Yro8*9559XeHvvh0TdjS9)`uE
zmU3zWH8C|U4r>9ihI@zt#q&putX2%I!dTrp%GdvDHw?xkhox{%-8(n;OX1GOsDMc0
ztWh{k6}cxer!00K9Y-%;;71n-krAnWFcE9oC$xi_8`BaEKS!+pp0N4iDD%q1IF!2U
zGF!ZTKT3yv1rATBh18mw<wbruHiRCm2u+e=<&T<2>~FMpIN<_!_-eaRA}IX8MjseQ
z^=r7CRuJ49WbY-XeNhf+?_RmT=KMW9s|!XV4_7jLjl7Q#V`$^@%lFVET6{`7Ch{L6
zkF&|H2k%cmLtUIk8Q8IK?g(pyM2QG53WPDRv6dQ7iHgh#fN^kFW$-T&*OTWC{UCok
zC6W~AmEsEhA-^#3+vE%+-?q42Ufc|m;XsDlGio_)XYJ>O;xd$u4J8NPCh&2wGTmEK
z`pT`vMX#_Qv0<^NHis61Y_LL~79W&{y1xtUBlvRT{5PhEJyU<PoUS-w@Hu_`Ux}?u
znyvB`oA?wPrOUQzb9|kbYKuB4JjDs4!t`}NCAJ)(<^>$NdT=2yPK1|cx0&w-lfxLE
zOMo%FdS?s?(3KnXK_S7}J=u|gUd(C@llLu^vbnLDv%P`;r^Ggd6C&mad2FUrQF|4Z
z0<({ix(Pj9&MyuXLr+*@WT{<hkejGx|H2nl)Om>#4x&<%SyS7*`p;-Drn>XJLP<Jd
zj5ricovZ2s18|5Vy`$3W)p?-Q*KUaJq9>i>^4vthWo#Ui>TNYZm(X2)!t1FH2V8Fq
zmYNYO>%jjsQCNr*{8C=z8{Y9yJmgN<s493WG9dWzd2R{gda4P}3eJHguzZz1A~N$S
zmMb4RNZ`>gsl53#w9|PS1H8Ump*VUJH*Fgto_+~(TGQxZlBZ`00G!kNSY^RQ=o6~K
zZs+qp5t{KSRuvP5lAQ;!hv*N9`1UKVJ*z4M+k<=jMfEMSgcM1PT7N7h$OjXrIInkA
z6TT>@1Sbf`cw5BBDb8}2uNzn$JdgD+QX{16!8God$`h$(LNaM*Q(q~vH`A@Mb{gNS
zbfr`HqM%v%TDMKTjoW6?7^B$e?@X1v!mBv~V@oy|bJ?aGI|A##;{yJFq&7n4*0g>F
zo?Ca~4K#<oeQ}RJ05Nc%Fo>J`q4r+90(#?**50Uqhf%WMCRr85afzU+Z%JhtNoC)K
zX9eG50yClmzk9Cx7OekG&fxg=7*H1eu9=bjej8mw_urAHzXJN=I0{F#rL1g2-PB7b
z9M6=xRp}iqU0?tHs(hzZgFMT_{7RAXm8`UTsiFExK=<@hP4}}Fz9{(Sxy%nzEpa?b
z|3AU6)%ET@_Lx}tQ8t}P^<+|vyk3J6)Ch@hj^4}~?0#Y9H)01N&%~)oG}?Qp<|TT7
zfFku9KG(>+iWbEkZm0K2l49`j8%Hxj{IGm<zA<Yf`8D}O@ttBcgnLd``rkfRHc+;5
zZ#=MwelV_!%xwDc+h3E0We3U`+4RK3vLu`y_`*csee2Sp%GEC})aUmgrcC{c&oi;_
zkW2O5SNH(cVY7wVzX<Kfi|j@9Hme_6CdJ?rbWdgm`(ab~PtkNce4^f|j1XU}pYUQ;
z?LYfQ9q~{dgTK_Tf|cJ3jH{IDft!sc_qjrZL%%=3!l5#uG@;~#tRzGP0s4~#Vs%Gt
zT;*Okk3AsO5_4P5{*0`~%CVW`q|1o^6%bNV^V6_&*posJVHS+pbEFsDjz6I^k#lNJ
z{0eV^wcsr;_cpHN8zAOZmhxdH?1_nRSzH{Y?_T^y?_WHwd@W4d{i}fDaYOMfhxr~o
zLVs4_hAPG5<~NGREs-i-dk!i?BdwBkl(c(hu3HpKQY5wTf{!9R0l~;&I9Afy_P5f2
zV42{lB2%LBfuJh*h;SA%=@z#_H1+zjX__ie%<hUlW)-v6>AW?VW_YBoo;k8cU3tKd
z@*`M<nYIJJ(fG=;@)fx?M~v?2-&DQ^<PO?u@NRbtzxL^oJ6pqSzFVV0xhQzfoZj%9
zNwux5W7VCfZcpkToIW*0>;6AiXS(n2+jD<R?aR4b#dEo`su6dN-`D!5(r{9?G_MU+
z!%+dgoOnQDYPl8C+1_r<xE#y@rn=IsmLVa0d((^u4+_x5>x@0_zldB-3HbC72X42&
zqH;YMlyyf?e2A7D#|raQNoIcq<?8kV>=^PdQ{_Ek>;)g<w6gdEr~?V+aTC-ftpsk4
zC#*$bHBRH}%6H;2v9>X>A);s0n;}nF6eZ&R3{YZAj@$}O#;V}d4(>OhW+g_)?te>_
zb?6AX^ZeM;KtG-rszTjg@bd(kla(BE?+)^fqI|3$1!Qbn_knQ&+!Id9uNXv4@Yo_@
zY=hrhJ3_8sJr`D>@Cw)4T6txt91VOA|H-VzZkC5FQFp3~^mh>6l~-U_(N$H+CHl5O
z5<j~$7PjE{m6`cgA@i~D%bqj%K;a3XpWsii<+_!HlV{3$<wtsi)1>yzO%1_G7ZItk
zQyV-%T%eG<P~?62k=gPM8fhaZ+FOCYRaFXykzavI;sZd{mzA4Q|8)<a0<VRex#iae
z6}6x=w6{zqkKvG))rFeji5H}E>;5xymxeL^xt>@VE~3zLUN55rWnz8fl0#)uX;Wo2
z2T?2BJu7-P?c@sYG)IM&U4#|GZN;QC!b*cbZ5-MP^@7RDRhFTh(`3CP$H17wt}k@5
z-zuwbLQ8KI+jr(@6Z~w;V2;nN-7dA8w!2Z5Wn#w}{;XhcbSazJwhrfRlxCQC-|A{t
z$i>m_UOo=m&u*B;K@S>NCmwb=>D{KR)Y8gRC=!-&CD@IFlc*E5+!j5Pes+a-&Ou)|
zy%^htJo{C1Z-3yO;lwKIZkIscEK-BW3iX&tmUOzQL_t;Kany{}-xWQZetLyBmT_sc
z3_ex{Bg;r>sP~QJX|KTOYC#`s>QNQEQWx-(-XeUkjrgg07pjDpYXg7K8kf>=(Gdk)
zEF0^eWbMO;@+0d*P&4vr(GQ?!5j||o-KChlCB*Ax1=xNRk`{t}VA#w(1R_bfWd~3c
zXpVB7!ZK-}x8UqCzF&<WEJdLO9xvBtRU#hNGZtgDhIycdbfcgEJBa-A*2d3*yU)%_
z=%1|gcGLz(UJ}N%{6FCAurj|YAIQNHtuOhk=%o~*6s&7lrY~WGRlp<dcI01Dxai8a
z*K;6|lelXqrr2fIw2l#`<Y;@thcJSx|95T}9)u6aVC#DTIbNO|=#uPIOZStpwUWE&
zO&G;R<+a>#<zWK&_6qD=1kgL2>kWL<?K71&S!^JjS~GGwGEkj~H)mt2Z-vL$EQef}
z(@!gph&d!bGPHpZG!&atG>W2ORk+DfYF7H072Y|0C30>mt^*%ZOe&^S?4Q}EZl?^y
z!qHzvPm`Op2$K&+TSVN{-+qwmH<=1r2wb>8&^LLmKJPU@67uiCzfiGG`A<?mnv%)M
ztOMF_$v-?!26{XusI$J7uFhd@)*{R^eO_3Stt!VTiR!8L&DwBst>UDY+=23|NNLJY
zw%_)8RHttHN6|wv*BlLK*`*Z5@HBbNlQqwbT*9^~)lS$b;bk8wTo?_uH`vrm@{xOm
z*<yo5#)eb$e#Yx_{miJjlUvolD}GTrKjxRjrq^*C<z6AX1AHTciand^K8fs;x#qNq
zmRm*<8NNi8n_KhL$RjM$(6Nt2Jv8;E0lC6_c3PUHvSJygIDUqHc>3{9<OT~Jl2WXc
z<*fsvh5ff2ZoE$J$9}IVH8o~C@{j}D$e8WWTkpu(`gO<$Zr{dqdkW~)v(w$OTJJ7s
zFU3k%>@t2zFJ?+EepQ@M-0*yA!^>iYU3XyHe5il2JF3O+Cx43d&*QFmi5+4T`UdU8
zl&}0zzHAM{m1Tw{Mmv?Jo7emjE~uJ*7+ruy(A9^;;~xMn$SukpabZCzJxTVRmeO>B
znR(1{{uy*0m1Q><XSTI&m-ZxkiSF`|iA+yzYbr^oJ)Aa-Mqzo%U_(~>{u;AU=3c4G
zMV*Pen@e?yQiT$%F1KbyqhxeDtM;LAM%*>snt69q(B14EGZxC>Zc#zZ=_~Wn&8m`>
zYSK-r`s=^xtzY-3YBt}5>!q8&-@fuMg-Iuk$UGzU$xw<fKQI3JT+&AI7X8?z=#Xu+
zeWa|~gCBi&V$a~O7q|<b@Ui(>nJ}v(l;+OL95t`k_ElnKu>Pl?yciW6PwS%}(YW;z
z&Z74Vq>D=cAD5OB4O5`g26r7gSFAKQ*+X+NtzJIMfXNdpKfd|=)&jl>GewL)X;s3y
zc*DTPa-*J&wS|$DRfv^cX4WQKOU26T#Q$%=(sGTpt|zr|bYBaqM|}_Id&v=^XKp?2
zgu7AeepK5Ga9lfIR~P_uYGl95$ly2}9}8?RVa@1y3DIi+cLttB_H!pPL?%S9{08H=
zQDpyUG$T}v(O4n=>>(|&4jYDY7izhzDY471BK<C%L&uTSRGoio!Z|y+0JntLtQ-^q
zQ%~pZ-v;`P@C1$nmVu<B4$>)!g1kbQ4R<t>^EUYz(`q?|He565N)I<I(kwlanq>Gn
z<H80Mv*y4$nbbRC7w1C)Z(cxmx)+t2)S~?RmwEYEJ6hX!dA;}nR#&v#vw>z*)nB0}
z(@rMoyY41=xFb-DYbeDf6VfUi>^Bg?*U+-4X0Xwk2}DrPIx7oQSI!4)7-89XV8|D%
z1bxP@Xq{4>9a2IOM_^*#{zMoCOIu(xO6lGc2P0v5V`Z%WCi{(sF3ujV`u5re9v&Ol
z6&E|nPdjcdp4nXNFF(yS&6**wejBfuGPd8}<{?q$B^lyQwTwQ@H?g!GIS$BKhnovw
z0jw{=ZNud^W;mO6Bm_Z!vE2zCla7W7Buh3eGyuvtoC2iif$TiU$67LQp_=yIZmK+W
z#K#iP6js4J*iw`r0LV868n_!K(tI;<0jV<HK+aU_rn2lklgI?3rv$E}1ZzgzTv8wN
z9qv!c10k<%2|HlCn~~S~Wroe1k0_Uzd>32z$Gj|hSCjl=9SCLx>pCx*IXd-DIyoDe
zIynyaI<ciLAkFzLo<cBwIAbp!R#)JKxjWowy!92Df7_0SZMvo<-I9<hVWKi{u@3E-
zrnKNKg!=B>XhGFz?-ZpCZ$VCo+CSize1aHa9cKfbVO%;jifBU&w~n@fE-;Qq3Abc0
z7_p6%H17jJ-fry7czPnmjUDU+-C=43!+V8s6x}_8PN2)zX#0hZo<9&D805v=vChPl
z&8hEwV~YIE3y(_%+tztJTk%l0j1*i`x{zwnEM{*%&GbqMr*K=8XLhbqMy&ZS%g(Bw
z<}v04J>fr*zqUqiHS%V)qa1r)(=jmlG42R_fjNs(C-U{LjKMLqJuInqWa^7y7JWNo
zkll9KP^PU*5%XlatIcdRbK>I$a4%NX-%9PiC5*Gd+pe9_d=U(f;9iO=|72wOD2fSm
zB(8#a@Z+7(r0`YUFH66H{<;<6SwY*J=d0&%J3Lq+luVCJ%8fx>(hBvSo6McnZ<o+s
zG<KHOuA}T7+$v)cnY<ygyhT4jf;9B~!dY|xCYxJLL|Mf9@_Z@wX&WPLIQgZdM5B!X
zroMXqQ6vXze;dTb(u<g7ezrZ#v@`Dd4hQ@GpjJ3?n7E7FgByN*4$|0O8yV>tm^aMu
zpxG~r5<+uY=G=4OeH?dtTlpxO#81<uW?9vp^zw|3ROktt^x12T_n8~rHPi1IO|6Vn
zyR#p}Vmkw=&b3Z<Mt9!?WA$Yl%1*e(8`G;-p@|pEug%;_{3z8+eD6NyQbh$;fG%tg
zeoW=l>dHSpD=k5lDApIX1Xn&Q-;#AQ&d<JI+i!AyQ$x|^Y_lxl^rnzqxB__KxbQA|
zW^{ij#>4HoB{>voVQKq7W#*xox|tKFe$vUo$e81Fr`Or8=Bu%T%VeRe{bo}K4n4AV
zK34KVyuiCoPVF5}Q6LOb3aM)Y^>>nr3FoDV?#!+>_@$}=dO^Q65e=s={%u|%ae95+
z^IW0L4N>kE;h>4{@=3UeDpMDfU!R2?7?V3p_3$x2FUjmHCtWYj!}g)j^bqWWm|@RK
zj7E0uo-g^g<v(*A8!O;e2cQxZTHyIoE34wG)XKiXUrO(<T#Pv|onm-{PV~AXTA10h
zakI?+V>HqF0XDoT>i$#xXSebtE2r_jc0kG*%c0UDOjGF&up2&lC^xCKo@9r&A*S)m
zn>^&1J<VukM*~cOCjxa`2S#q7^XM{7>b_X*PFhK9*EXyb*BWHrZE1GRJO}dNF@GJW
z0l^}wgp)NsKZF~XaU44R=|Msc)_0NBPY97CejXvFVBG?lzOBO^ZlEN4(~f-(@%BVZ
zcgHc~|38R~V(D!|trG~Y7pdR~54ii46a>0wr+adX^8$T%X|WzY8!gu9+S>*C39r*-
z+i%?5_>P*v-w`BvBX+aygfk``v71OvDQpUcpBjCcd{;~+(n|V-bcS<mwM>C**KKC5
z>T5X$3+#7}sgmK#_1_jNS9u{PrNMKFtdQo*wB8fVQF<mNZI<nl*e%r{KYCC0xJYu&
z&8N19!L&V+JHPd3<xYsC<zH6n`i&3I%MI~^NxUFwLU>+kuwPP|zl17vpm6tG3Gyf%
zVTgtgJ}zdtmmb^F)?duvCT2Ms;<jZvlbQOK!d@h+JW5!0ax~@#Qxyp}v!zpE3-+Wk
z;s>+sFp#X?E53cdWOa`P!A|TW41+u5bgl;}1;GY5d1%AlP|0ep_;$ZqGxr2zr72@k
z7xGkDkNik8pt~xK{l0S^If31(Y;mJY`MSw7Q0)rM;y#ccxk;WW^ZM{~Twkg2SIc-|
z^T5m?p+GwKL0782(&4&uU4R}Tb^OEm(=Z;!3qO(<{`zV;sWY~0Xu*;vo?bo#hd=IM
zzz9)2{{8Yebb^hlY;ogD**a<Pu2FmIbgFEd_k+*p@{?rYAjy+2t_&fDPd-L*Z$UzC
z!jVycX2I=`1mX1eN(}s~6`@&+Qej2^EPr7?dhq=<6^;pyox=v7fBW0<QF8UVD%4_B
zd4$p^Tr0Y7_((a5##9V{Jr$}I84w(i{ZBl}3*%wp$Hb1vC;4JLg7|s+S9d-;|I;F7
z6b@vX0%Z1#%I)!|l^j_*1&1CV(EVS6V_1|~|3bRa78o>TS;BZ&RE*M4{>jclm<iho
zQRES@MfthF&OR$5$lSs<LB&di-WHOE_4{eZx>yHBW$!?#DCc;05iExd0&+FMT5{s=
zv&*D|`<yzhG&RUvZ#_3B&rr>vy<I1|Zk#OWm2QmE%d=PC>SLo8X@-(f(&2(qSO6O{
zuy8E5)!EA!g`?QL`Pq;MYt!aW+iB_OIvB=obJNmx*3-(h9bBtvt`p;Zb*<*-nqdQu
zkz+zm6-vePM+de;KB_uG+G!<r56wR^r|qI;z#0#$gOiO^TQy0Fmy^DOM~v$_%UC9p
z!DL7=ZIXAKlp8#ekp0WYv+vq5?=;!p?kM0KdK%B1ddM_p7nw=c%z27475N&gk+nqs
z2LO?%n(0Q(lbsPTjs>~U{`(Evhdrgxaj5ASY1>z`mt(cirFRY%(%2a+0k9b3eJL-s
zu6C(+U}DA584ONUV2%Cu;8NJ?`6b8ins?sf)e!Yqb0gBQR>N>HS=fE#TDymv5*D2R
zs1Y6G5Z8|bkPil>RXh7=(S!PcKB$NEq1@s1i$FvxtZdb`*28}o$VKwTw?)?aZ}Oc3
z!0Rb+{MezM9@LHM5i4pz_Bfs2i3Yh*9%fo&|K~)1t<wth#QId<pmX><fkpCU^wuV=
z48;s4x;Bb>qG#BrLP=RBUeO0?2ifXqiLz_5H8CdGKSwT-H(vGDdJ#*JNX$?&R=1Ix
z83E(~Z#Y*s?C*~A?w$9CF(3Qq<AXYj^b<RdWplzNmJZDp!xnaOtx$nN>=V=u1qZC(
z{Ii{Rd5PPV)w77f2SMH4vfM)x4|5{W9^%mAk=!n{czqvhI`{m9t1HJfS6o}T{?0OH
zK#Gz;j7Zl5sUnO_?Z~AA9AO~*JOB?~nBG16KLFO{zj3=g)3zTSXWJ87)jTu@VIE%i
z6o9{M9W)%gXdTvc@$XsVIx3<2=SIaUzZM>;ldUjQHfhZb(A_ow^zvUH9!NyB*UB1J
zRTZ_0|8h*r#T}MkRTH;9tP=k$zoK5Rvzn@9Y5}=#{<6;4TQ&6+f61W8b^p4NegOB8
zok0)ZNWeF|;G4U3+X#MDqsYCH(%09i;fsA?X9mHR^C>o6id}PO7NXntkK1k8x*|nt
z|2O<AcI(9D%~ISMK*vzSfrx)zFKrtHhA}Sh1@L!ysZ!p~CmVp}R$#UNZi6Qj*H^d~
zt?y#~axkO45k9m#)4XqN0|9wIwhhL<1c1L<KOw{p`d?qaF8k%0M!y2?;`Nnr-d@`V
zIxt*c#SNTW+qi)aj8g~X_}->Z&!P#$`qz8ylgZQ(+5=MH=f3!hCK39xz_Coc-hLv0
zCGZc5V*1it*`dRH{tV;~USD<0@4_DThx#>yT|2B*H-?7(ugJ_7p1zyC^xwHq0*Z@e
zQIKV_-GkG;T`))N0ph{yj2F<iI7kOS@eyq(@E9>Zq)D?y-#0}9F-bI=8iOWMsY<9k
zRTWuMR6fi->LS!W3?6;#FU_fb4K2^pWa?<Xc{B#GBkaH$t}PaCk$4HdQ+Vj)y|_g_
z!wTIu#l1Sjcb>tP{CSWrvT}RLUeM)N*R-cD9$5<f)_*$sA(1^9@u(P}3plJC{M0w_
zXIS9-eLZ;g(e#j}@IZ(-Na{-($a|wJB46I_=!FV;`4am?oS+YTkKhGSiZxerxQ`1G
zvDi7_IpIn9ro=N73lA$V(+`C((Q04#Bqczi0lG}rW00iIjujw03C@d~4S@|Q`3zB!
z?|T`~+<YOa8AZyhiV`EZuJ%r!d<)4R8WcIg$D-S}ek3{%zzzW5!2DJxtY$_9Sxr{i
z%b?#68c9$Vm?$H)GL#CqrT;96H+T1*{Dk%<fyoyHjt+{orwQDSbBP^xi4N?-H458^
zGB>M;^t&|ypU{rh*fn@qNfBb86FO>%gxn29VwM08J?wd2Xd3^5VYq0V>p)!u1H(b7
zL@-n_n-<4UWXAT?<f--XqAm@ze;PAlIQM55B&mif7OvwO#KVQqC_N*1Ix7``fLf4^
ze+P;{jB$};lt3D{FCn4oR^T4reNKxd<{UpqC(Jm>!AGNmqe?k*?BQh)G%#I*7Hxw7
z>Pj1JWKk~}<Lch60G9T~Pl4g!#u8U4`JxKMhErXoevtF2M>C|oQm|n=m!Z)SJPuK`
zc2v<fzO@W3`wsv1g+Kq0cf^~>em#+KJ$i3)>AU05ksxcop=@928#XfG^r;#-Q_|j_
zbj*UP@*L2qf!0%_MegORoPzhzBT35Bk^R!3erD3`Df<p&7hU@Ex~Ttl$Z3mx#V&UT
zPfs{9<x;CDnlFG%NTA0-1Fyc<u(V(z)!-|ao&EeM>EV(Z00MAmQ66HEyK`k)RXHgY
zTBsK)t+?7*ab9>+3d(~;HIGXyTf3;@KtN_Nd1{A&XK|Mkxf*=q8o78DOjkuyhIC8p
z^hCzNhdEWSzmkOE!7kFS1pq8e5ghd6P+<sO&x;+(Q$D=Y{s(dhbLFot{(H{zl~2ou
z5LOGQ!jCNEu&S*lH3uOP$R&SAJlB-Hy5v7B#~;Y!GA9($HxZJB78XYf09YzU;*9QP
z88xi%&;gW8X;b>vMBrFzE3C7D2I&%@4DsW-5QtPOS5wkRhy+JirzJrXw#L~8s|O!4
z>x-1Zmt>iASjhDd2kJE$UYBsv*^nUjaS>p8sUXP`%H)4ZR?B!zFel3-H-eADi_&Nc
zx8z<CxVQb{uFBL+$zJNC(V8Ss6(L<9y&l@oxgD9Q%~FI~uU511Xm7Di?zW}xBBzk`
zva-OY%#SD2{7w+CO(`mN2Nq@8gZ{DceW40)U+(eUnP=7)S==(yb}%6aG1o%O)NQ^^
zQC-Cz*`(_7+*vE{p>z~65c%KDEG@T+H0+fj%Aw$Ms#jY_Zf^FRj2BqU^6+_zvtA=S
z^<V-yrb|E}d&7(E@9RB1gGW@d{k4xEZK$Lt=}X$<s3?1`o#vT!H{sI2?wl-IUnS&o
zpclD`xzruEL$x957y(_IYA6~-C~SM~XGOrTY<Ne7-|KKk=XxiCb}2+x!1!jBX5%|^
z$w)M^dql<B9JYaO=@|*^Ze@f&f-&09<Cj#q{WR{_FaOwOoIjxNM|2dwjQK(uruisz
z%BG^VTV=7|w0R9uWvhAwJC*<di=u*f$)TEE<m-nL>V#zYG{Hd+gJ8!LI@Be4zdyv+
zzELSp<V%`P+b^hhY+y$(+emI3U0hrks%EVH@d_niBka(`2z?S@cLeYt!-hfcxrrj2
z{;EVniBMnwRcH$;4Z@NGz3InjBfWu9k?kskC?CZ2mufb&H*LXd!Q=psa<ez9o>*EF
zuRy%am0z`hpH9N$`7&^o`A<MS_z-x{uOPw`wQ2@X?)EL(ftDDB<l9*<;Nq}`$$kV`
zm9Du<9-@8QfX)&AB;2>${qiXeOM}Z*UX8D;e-xdBuuailKtWk>9jOXVpsPy1wGOA=
zPiPhD5s_V>Iyhdepn^;7dH7GwA<n${qc5;@&eWWWcFM*hbge4@brI@r4Lh|QGLZ^w
z@)Dy}RZNI7vmphlvwJZ{C5*O%4^Xz29=HndsgFT}<RW2kxKbHHslh70-BBGiSVh8B
z2pu_8eiMOD%902rnw*vOL}Ltq3GS|uz_fKWR2OUfw$*om&l7f$10GTHtb~UA1>;ov
z6$CHH)}GX=T|et`8>j8UR~Yq4(#2*ZPPhU5Lu6uHQn{8?fT63pGq!plU1R{AtI~&~
zsW$$}-j4g&#BNNQIdH-cjmL5}0m=_W%B5BVR_3Y&Gq8?kIiCF?mCeaBtsGh_+7sK$
ztPPvA1^;l7P+;(pJ)>gXjX9N<FzHV+FT5ZaD)va2>oc+@FuO{OT$Wig89_i3q_gfF
zJIIkUdz!qhrSNgi-=xfmj*VDz%z-HJ7M+4(EK|eIiE#-qFZB<L=eO~k43qNhuIJwI
zaY;RIk&r!O5}f7PxJf-(#OrsL9Ix`U@`~7vcu((R2=acumy`$@_q&jXOF*`v<3RE%
z3oBt}#E7Uv`o0-iIK{Oy=W)Dz9nMhNgbRc(Cad+b@0#0`g71}d<}+w}nAy>!d=wYi
zPa>gXe!aUTq%c`PS}D|(kdHsS=`kZ|<4=_jxMJ`c<>v(6XL7IQCHtr&EpLDOF<Lk#
zI*x1Icf`LK-@m$?AHUJRt;f&z_&VX}`MZ`9nCjR*8wFycp);4X6^G~%H2T993YS=9
z#aTSYG>Uzw%v#*OSY?NojjHR>7XeF9f0ivaIaXkn#1Xkg{)W_!{E7k0Ci2iOnzrax
zEd=VLPyGVLLKR0C&L#40gcc94$m-ytUY$ia)Dr6dj2sR=)!u3y+zdPLXgHDl7~$iK
z1~~xgA!4HlixLvjL@b*LP50`GDog5$j|f3(6G?Q%KCCIs_xHJ$We>AcR}J5fpmHLM
z$NVSMf@U<<ORAXghEokze;n%yoA_@XWquq(32RM1hEN4of1PWeIih`lu~j#~hW?Y;
z{N>HHH>T`YURF6#<W%!hj1~ji5&@MoHjY$EV~-$8SSqP_u1N8aD9MiQMN(ARmu1N_
znty;3D(Abx=V=mQD;ES|ZGgd{U*eQ7CQLChA=)h;lW=XGZDa@UTXPcg5=K6rD>>ws
z6fOCsX!Aw(uk*=PyLB=euMswz%>1ZW8!v+l$9>Tp`t3tCrnnJoe{>pCI0X#Z@StQ)
z(4VBrHd2m3d^uUGPBS}jtYjvcOJ=U!$K_)(4?Ln>*2ziE!Q<Gc$Bys;`}y%@k9+aU
zBPNm|SUmmqz1PV!ZSna7q!zz=NK^G)!=-<kkl(&G8DrbH$!2lR>KOPU5o5`W!^5j8
z7hKqc3`5li<WATLhhdVdiBwZK?N#2Oe^Nfh1wBzgPuO%{SoxPR*iX48%)rc)E7OHF
zFG=z{<)BgyDmikL*7?fnL##oB=YDOw0AcH`6b}F}Ux3#MY6a?M6=e&8Q|vMtPEG%(
zBOIl1c1xSew*qCc;(!nakIw5P6KD43>X+b6)c0?Y+og1E#L7Wk)_Jh$_?>DP>D;=D
z&kspBzUu0Kq){#ljyxqlmd8Tb(LD3Wjc<q&O;*3nGk^S$b?j#1?GO`yed?Q?2#zM9
zxlr?kB>HdHJ2^)zp?iUK{1)KMrX_^|hamB}xr}S!co5b~vbXF>4==WHMK>~34C+w=
zK)Hgchh@sNz{F|bUedp%=?X)F&^B?kIpYp?;z`UjQ1fFVNf-qrdC^S4$<OumWuSwn
zomz?W5dMWYM*{X(j$HO6pPn6xO$qdYk8A7r{+!!ceTfEjrk3_pefS}*8M~K_WlsCC
zx}<)iL|NKG(b{IQE`BBK7b%AlTMjnl)m*4DB^c{0`^czPE--5x5685M`czeJROtgM
z{#bX`2e{*Iv{+F`;IMPp!Syt+mVu+q5oc)lW?RA>+1dGVvMT7S58ecg{0b|Iu{+{?
z)z1Uw?0A%3fm;E!iHrmN^=-`xG+A?Hf?(HZ+iTBe1>WIU4j7n|xx;D(3L|Qmzv0BB
zDl%RLe{~75o7<*mIn}Yqa424{>>@VRfUgygz$)(H;e0Ue203kQnj*~pcLWg}8d_^G
z|Bn)idmnfk?~YO&&}pZZW!*M)IO@RW908xa^Zt+B<LBr5pNhH9Kki-+`R20!-9O*I
zR6eVhACB~+mR`OWTEIn=v<#IaFN>sOhz9{2+>(LoW0!tS{5X7b{vG(dKxt5gy$|bo
zC+YP7A6}$bWlDhh8>qb+O$p+O5+$!zrxHgS3C{xE3YW%5wy9tkgqIDG2C;JaMG~MS
z%#ry?A~dznsT8VJ|KRo)hxy?XzI#j}nwuZ2e?XVGt)5@bay`WM3SbZSG7yi{<OrWn
z)bPPEq$mC3V|m2sq+>NNNYu90sc8_s4#-2kGC$;NUap6{4*6<G{3dUIz<19dLi_#)
z7_#+_z`)if9TNOtNBFJz6~1PZLk>euI2ym>(>%{(G{Gmoq2QJOBN;^gEVvLAGgQqO
z5M{9FdPs33m1ID!f$orE5GHp73yT1!FzHuL;S5xwoX;?f^^RsW)hLt!Ivf_UNGz9_
zj(0LCfpgfxr+x!Sw@L{B!T^dxL95MD;Z|K)#Nns6Ua9xrzy1{8{7)JJMEJ_5?v?Qa
z0Kn{U|MRa~9Lye?bx0Zv83q6VAV7Tbo(2H<dWrl#><j>Yl9<8DY!YD=_@Bu$ik;1{
zYW4Odrk%!ejXAym*f9L;tZ~sbo!v9bwhm-A##32M3~CddDVy!NE(Cmp%38?y5l$JV
zk92KGSvOv$ZT_L#VZxe4d*0T#{ieJ0)88MdEg6wZmRct$=M+!kE^gIaLYdmsT&Vvj
zDYF%}S<0_!7nSnh*cH()AF)0~r6+VODgH}X`}Wky{*tM_sJBn#RcYqqv^S)ly`1UK
zdR8U7s$6X|N*#^S(u_KeY3nnstAaZ@-<ykGi~RT#TAxfLd`7lw810YV&tcrrxzwpl
z>jFko$yPVh_QRPkM68=K=jWW7cXAvve^dQ*#$O80QCgQS|B}q>j^x<w`L^<q`ck^%
zdzSl2p3HQ2wl#t#-?@1cyS?z$Yq~UG9awBVGWCx4dT+K>z02L3`T0nGnd&M^X6l{i
zvr+GR4Yoe))J8D8>1dj_b9d*J^4>ssMG)&F)cP8kt(kDYo^59_>m-_8kQ>FKv@7Pi
zqqCfM2UhR(YZp9SR2>^d(HL`hoKiKerhgKgoOI3gJH0ibYn9Tg7=aa%pR+12>Ya!I
z1Oog0PUGCMI=Yra?-9IxgTZ>2g}ekMk<b6?a~=h8lp&!<6%pi9NfWuXy*_Mxa>Hek
zRbOf<t#4VsY7iD0pyE@b!lI=3TYs`X(_B~|68#ET9vh(IJEOv){BW$_MCEmW0QjJe
zIB$66vH%bQFxd4GMmIzf1%Z7i0D^$|6p*x_DKIoyQy}U}W{H~uZ>=E+`tCgy;^{|L
zk|fKPD#kX^(kalTW8)ksu#*%?CSK$;*%F1*au$sE<=r)Wn&KjT7AaMRO(STrG)Y)T
z`dSK{Qr^EYcoMLs3l%R$IO2c`BkxU{rip=1v=Oas^%yd>_<)8)v)a%wwDykZESU-I
zSu&kgq9<8sIFgnmskW8TYeh<Q%%$PF9I;uk;mm`L4OXaHsRIG4|F8Fo6=D2A!4c~|
z2J0LhLUs8#dNk~R;N;OJS3m7MkS=#}7+rN7i&ycp*!kwV%1z%x>~EyCuWK~!$#gDR
zTI<Qf@3D2mZh)CzThGJ&?`Wbictr7|olTTIGV_s+28!dV{&@l5(HReSFp%?@^%sO%
z?`N&9w{9uVa`YHWy!>PE=i-V-`87)WgkVoxOX;8BljITJC$<Js!C-GE+NJbQxY$W{
zoqfb!CGtMn<`Ets5mvY(lfXlq)kh%mGW{BRyUxC4t+KCKYpT7WYzV4-XFR*3Gynhq
DJ&fhV

diff --git a/static/fonts/roboto-v18-latin-700.eot b/static/fonts/roboto-v18-latin-700.eot
deleted file mode 100644
index 0df88af13d65639d123639ef8167d972e0230e45..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17391
zcmY(nWl$VU)FnK)!wl{)xVyW%ySuvvCk*cH?he7-U4y%8ARz>Il6`jT``+5UUAOKz
zw@#h@(Lefj|B(a$X#Y#-{}wFZf7ky%pa6aUhbXDh0stZZN&Y8_paA6moAgAm{Q95f
z{{U2g2EY|y@n3rVmjD1FK;pmZ1hD!K(*Se;)&LKHC&2!{p38qW8~_#oJAf0w3lRK2
zjO{<h`=1i`|8XJzzdQf{2~AnG|Jm;U126z<Hvk71z)1$6>cX7AjGeOF)<v>o@8<2|
zOTjGQz-7$Dzn|=^IvRHQ4dsqmFBjr0&xmW70REXc-L*XT5J+UeB4EMcZ2p(mqU;?G
z^>r5}3PCZgJdQXG6(P<c(C+|0egT+$Q<-|&cuBac?Lv<k1RsaLp{9V=N-cZ7I+H2k
z6t_2Hy@ke?32Qr#OSgYt-^a>~f@6hm$j5r~3+inlp#wcfYzb~RmSCf%^8F#o>YM&f
zo;M`4`O5F7hy6c4sStoZ0728^d}blF$e-|vvLESh^r6oZD*U#xU;CNi=9M$)x6Rz@
zJ@qtpw9q$_y9V$-ZQCzEJf+Nz@pfN$?;CKgV#c!4jv2!27h2=rQ&-USZ+gSkHmx|i
z!{RKTgI!no0_8y>`9imx@uNhxL_|kX6Poi#<l8@kGFt>_Px@e*DSM(edgaK|cF{}O
zGRxoD-6|N5axc>SyVIQKjgc8bNY!ACtdH6zpEm0^9gK$T1RyJ3yv4An*xAxa(3-gP
z=3y4ujQD674Uoe0=VD!`ma*?h49Id#zw)CBw=jr+V`qng5*{b870t=fWJsqgWo@;K
z3D0;5ZD;YqWQd_VgZM#snZoLC-{cIOR&0x`-mQEg=RE4Gp|Bu~z$491HROD$<Ek9N
znkL~G$OJ->*s!`MRXmK-mMo;4yH7iM#e-T?7sZ1%2MKj9lSnU=ki11qR}94nRyW>7
zNm%uV82`H}9JhH1aOL}G?r_hDOuQeA2jb?>PMPuygo|W`?!iyl9C5)=kFOCJq`q`F
z8b|1x5@bV=p|Bz0V$tH&?>BsSY%GT+L&K0L7;Ic10lDIp7@t@pl@Z5JwawFUyuUc^
zN`~NK{d`>vPd(<$`TQpfogRNrE>-XItc#vn^g=yLXBWVXV7Pvn_Rp9dl5sXyXA-(X
zDf8GDBMH}0e^4~jA>pVwX2Ohpgxtv=>K6uCMbnwqz)~`rAJYk?oEE%WJAOlWGo%kP
z%VJa^)1QGzk?BXbDC;so9ntUF<>m6ze`qO9$L{*v2dtW=?c;^mqvP+m5dBJ5VeV9v
z;8|>T_yHqO<ys&Ov1rI0Lv$VaV%#wFCtYi9n3zK`Vb)X`t#Axu<flpQR2euvA(a{j
zrhyp96f+FPK^tzDxet@Y4zMzSg^orB;!P<Qa+vGJn1StiZn1FifekHDp7K({66|Op
zZctNj0OSr%VZaN_&5ke1bk59<nI0Gzrf9b*+{IUriW+zOXZ)1psfEk6M%`a0D`Bzq
zSHT_^)$Z9y8d+Jp(kC|Hrj)9A{ns_Dt{rBDJ}wIfbKl#_Nj=*LwlJ;MTBs1yeTwUv
z{$@U!qx)+8@r>(a2AjNb^`R6lH{nXdQ+v^of0!4+uIdh~f5IrZlCY~#gVi+g!-Kdl
znDfyjYO`QAltT*zNQZ1S%o85KZA!j4diUny^Uta#Y#U1M_RCdd{UTA1_pFJlBW7%w
zW4~YEMyh&k*hU#to<b5bWx8a~W_V})kOS0SW0@!P#3|jvvv4U&IL)UOsxUk7j(%J4
zb_Ej-;ZZr+bh^KeQ8MwkCMtS4_};>3Dbl$3T*A_}Dl8A1*a+Zs($=~EY(C~Y)pS_~
z`@_Whg&?{FGHJ$au&PFRTzUvv-@t#CHi9{Q7DGmrj-cU|#7gf6&?>q`xqdCPqyv;W
zrLCmKJ*#QTpQz2xa~(fS$JTS8>Jeb%e~)V_83QibP|O@OkvRaU6X6*tlk`w0E^+T5
z)YwZ^z+I%MT=8^xXw7w+^ZE*kU~uRdrEq<EMGBbGz+^3VlCuRI8m$6qb4@C3kdf?m
z$$$1@hWC(QCf`|<=Js;XQDPQuXqQ|w6&EWK-WvwP;R7=E)fI6HFNH&pxfNksYi<-}
z435{#2uN#~{w?}Ow0_(k<2+idW_%UJEg#MdQdYzbnm<2<7YvpOzlbE2iC^oisj=7Z
zN(xaPgOU1e!$l$Jr&MfSs|@9!I8D!rI)yTg!OlSB0LHzkF4Bdp2bmyt82F?PYwj}P
z2)^sj*aE!qDuW%}_4jaZzQaT6>V%DtoAagnbaU<q9aaZOe79(4n~})4qbIMQayyFp
z(hEch(y+P{v8v^69l7RAsu3-;tgy5ZaT6rSG0X5ycfR1=rM4rWQC01uGq0w3QzIy#
zxZ(i@zFbUv_DRVI1`X^i8)2s?5i?j6bb6_F{7HJr(})yLbR2Z&TE|3(MAu@##%Q6*
z-*Cgs4FX1Qh77v<8&~%LPZYneY?a9P7QPGxzoP^g29k!{>9@Za<#8h;L?p_I&NSO5
zz~>Czbhu4ofA@g1WejPJMAIKK)}J!uS)>_&oEF=B$=_<~%qawqAukv%f$aR#mM|fo
z`lX3H4IEM=()m1Vu`UY4#6^skHkOgH`1FQ*9CmxP-+H8=210^gax)P^QT8Ko{>WLT
zS=i7R^<W;Z%KH>iFZ79d_1jPx&^T58D(hlarQ59cL}&SpEr-=IQYw|bItgdy!u+kX
z=zYnyW;>D6uTKgfM5pRYN7;XuM0sM#ZY9;hOpgV0s|u@};TwTQ{oD+d9M+r=^0z<U
zJ3u|=Mw%^Q2hJ*g(~kYwh6=jr`{32+`H+GkJxtS2b&C7OyqvQ%_pUmkFB-+<D{bRp
zvD6(3d~Se(EnAJ=>l%#@h?}7{G7GIxBN%Mgc}iy{eHhCnIA^&aD51^**?RItwi{-Q
z^watO!|<=j?4V$Y&ULk&tZgq(>Xmf<yPnY8wxA(TYOc0l7w>&Jx8eVV+96Y(1v7x-
z*Q`wT&(YljTzkV~u`0+i;SRS_%RphSOh%t%2@+Kk;<r^C2PEUDE@|lljL0VQ($Qvr
z=htcxCiEd{JbF~ec6hLX8hLCE`*vP&NHrF;G}$l45{T`+X2A?9HeNaZ-LhgH!Nr?u
zx4E4&dv{;kx~+N0zWEQvp}imT^!Svv!?AOJ9XnvEZw34xEFyo<In9sCGgmkQ+x8^5
z(O3zQI-H+MkV%jPa!=~}7mp_$DICq^I`yli#LBJWNg=7X5E<B`;XHZx5M1~M3Nb_i
zD%a!GgJ+h94gkuMu<qabOyLf)6s2+r9Dn;}XNMGX?HyB5ifETuaXUDwc`q$EIS+O_
zfH7feDjyp)hWLWWj||#r-+L>2sA4})o=)^5_PM-5?vdcqU@l+b3Y}U8d14}rN4GU)
zh83JmogK2DdovJ*$c#b;GMS{n4|z#~^NRUuG^Jwj<WBY!8=+Z?S)+B}SV_io-l;KY
zOsrJeEcOx!lPS6}MR6yYnIbv76gquR2;wX46dRr}!k`YVPCTM<#30TBD?UCn097dp
z6R?6s%Ijtdjuw;X!ly;ZQSJ?GLqpx^qEmCADj0si{hJRz2}ew11#cLdNgx47*u)aX
zr{)a@#17$Jg$XHVBeF+w0qHrGQ->srK17NkcD|R>i070H+%O1`*j9HA_5N+`_p!?!
zcXPb$+I}tULgmMuNAbbUiCz6dTCZ)B3cC%W)5>yZtge-v_jqGT)Ry>5+)YV4EKGVf
z-7|pSe;_)G{`W*BCeD^|ffez=iDn@<xW}a_02v%pPtkG5u7D@uhHcso`cswMueu(+
zI3MG?_{f(2gMvSBB<gUlW{h-H;<>W6(kfT(S*~uEf2>I2yL#_S|CHJQy%zPQbMw9z
z`q8FelK4^`y;67e*zxPD$faW~e}nen!U%3l9Qe+7zXw%CWH<U#vL;qsaaBo{t361r
z1|O`EkZ>eYf2LsCNh8kw$paOUqWal_(K9JG^0nSp3I|gCU8BsX(+2$4Y!_`*o8hn~
zQbD(E01-Hq;jy4K71gY*I!j94ksPwavaKbvtXEi4oCvmpWoYvc75*D5Mf|YB^9Igx
zHYkM+>>w2V?KOtN1;$3QnZb#al*4wz4MV0P?jdF__FWIL1VLL7E!not@FzoYAHW)4
zPz7i;EYqy2xJsqYnVupz3!!>h+6}!hR|al7I<j?SNIZn)S=YX6CAowm^8NT4LN6(U
zoLj%@Lz#4m<r_BzjVTcmH8zI}s>Xp|ixyiEfvvDFmJ_2wH)9;iU!CkBC}8Ow?ICw1
z!OZkR`l^JWK6#TYt6%X`VjA``3OdqMTc5#H-d<`BC0-<Bf(<+OA=avS5$jJO2}J;V
z4Mv9hu46Po8UVs)qXwrH)1PMm@@Sd1H&bIrgu{w7GFa=wuU!36%gF{hh4yrTZJV8C
zd!WFYNT;;%4I6+`<m(VdN{K3V92r9$D!e$k5gwoEHw;u3BgM_TJB)^n)wxmQGe)}g
zdZsSD{TCk~Mf&&wb+yv7&<I0Z6+|rgv|sXs+XUKlH6xnClYxYOZ=r@wM0$f8PmoY|
z1<Yi^28J9mc@I#3^`Xkl2qElbG&oisT}Z#EOq{eETONfnQScDwA*i@r3LP`Mwo{_N
zlLG0&H)|mEyQ`s*<l^SqA|+qtVswG(laJ{dC;qlTZol+?sWBRzV9sQ#hI{37+v{;m
zb&X!*z+aWUh{z*<k%VI0^WzPz9_+gb-E5wL98xz6Smd9itR`LWFLcooOe(tEHFdM!
zmxb_r$cK1CcFP2Qls2JUd2k$2Tfck^_C0H=s#jwY)S3_A(f)mW`j=DuBOqIGD|tB4
z{39<|65guE(KAqWm8$zdX+v%Cc5BNYl{9j=mlI@pTd`S5I5?SK8V(3478`MM2VN^5
z08XOgjG05cnW4}=P*zBs-mUKHzx7_YFGcp(7M^-;Ge*yLM6O3~qPl!91>?;I*+@LY
z4<kVhmkMu0Byv>M;U|41Ddm#&GvIIDkCF|bHoK==_%67lx%0&Vr$@QO9(p{ThZP;B
z(rGa&&Tl_YQ6ls=tgdhTTuw$bY-)`-t%w;_jdqJw**uXwGLncx=Amc^0V+!<#+r0l
z%#oN+8ntM{Mev(*U@XpIF>J?loP|p;p(;OSd^>h#geC9cUpG7X)ps%~W?Q_q&xGI2
z^~dtC%)=o|g7bVrBr<5BxEfOgFm|EI3kw^!m-sNTKFM3d=Z%84cr$WRR~yYm#Ho`(
z%@1Lch?P`*U$i%^Cw4ItF(Y8C8_BC6s<Z5PNJ~#0fZVo_rJ7|Zi4D9cWj@UaE<-vb
z?l1aM;wUb@<ZoYp0jmZH7{*o*o~tTo{J&At8kFsi<@;w&@^MMCWyQLPJ1V(^aD-B$
zq;Jcv{#2}O>JfFu_5~>-VB43-SPawiB0ZkV{dm*yLqj1@gyUKJ6By6VY;P59E+Pz!
zr>69tPF<7}Wb`UqdP>t&L-)p>lN<~=bnqcnkVcnNp3>vLXAF;MI!#L?CtXFQN3o43
z*Jh?--tvjfZxa*o&FJB#rpCo@kMxk?&_}9NrdgF~xYjse2D^@)FmQ@2H=!(oho;fo
z!ugpBXvey>JatM}1r+BN^$mW1G*K%Oc;FqlB^K(_cnC}AyQ^$TPW*sYTitRY^y7GD
z$})421XgIrNF-3~38Q325h4JV-$ZTG;A_~n7YAw-=+OAvWORw`fp>ltoYKt^h$q_j
zddKPL7`en)l4|dkS~j<ul$df1B+wZ^mM+eZC^fE}8+e!(8Kx{*0ZSwKA0RPPbq7~O
zHe6Bx?D)QWxM<le51y%*k|8h*XKfo`j-e^~8(s^sr=Zl$A`X0_W(YZXcnVAteE38s
zjYEBlI1FHw3JoqW#`GI%@;3dr>lJe?rCMP_cCO+qzGOR1vSW#gKR?=oMLVuFIB%0T
z(@02QZ@<Lt$Lp>!ihU_(-$<6*@{LMCdTNKmmqa(C=G3n8QUat1C-<Y|2fj|{CsTlW
zlAyss77m{@AzO@A|87>))BsXxl~`|cXbigm{rB3lv3V0YlwL-1m6WUAxHH3)Gq;b2
zrE~%>U!H11!Io4wz||NX2Q)j>aQ)W5LSvt7bLInyJR8~T^|th^eq=U|t=u9%4W8fB
z#I=ozr}9qrVj-7008-JK948H1cr9Nz*u=?0K!v1!I`VBLN?!>dWESv(@h!jsQp<?Z
zpW7)Wck;RgDHLZ7&j(`F=LuY;>dh>$!M5_+Fbe4pmoIj;9X8RpL`LG6(4n>B=<z@+
z+s3*>>v+=e($<E4b}#?A9Y>q<*3_?+N0Mu)%yPLzq;a8%q2ww}E5*O2Pp&ITACe6v
zC0XytRbsPAhqtVPs4?P{l3YlV+C8zz+Q(ZK6Qfa0y#C6KbiW%1r)Q>o$^FJ?+$cBU
z91uadO2bBCm5nc&kcX|&MW{?@m;IBdGO!05$B@oW{{l3nz}90M{k33P#7z6Ey5E1(
zPi%v4sE;kQzb^3UR)@~Bo)E>kyO;z8r$t&8hB{BaB;16%8D7~{=E|da4@!gY#6(#!
zbi1z(pVyibN)RT-gnraWa)cN;XC!;`+7Y@&v$*Hyp2~#4c&JRtDEa5q$_D6+FQPL=
z*JOPZnNI!Chw}hX`cZD7N-NaEf)2JmXoVSD`)B*0YZ)C<w+=shgBb2m+fNX6>i?=^
z5+zhn8uuIIEkVouC_sO>nYvI2%B6Sn(FrDA3yukn{WEM|^Hk_wB+Lt!P9ni2#~}JQ
z&{o97%5pUFrT_ern0^F##^=2nZ#d}Wv<q90MP=Nk3zde78|n|NMXbR3DKkvdj|A3L
z*NVtPUR5-ySWD!^aVl_Xu{6!4V!k|f`iCeeEpR@Y&{gP`&=cOv!Nu&sMq8s^Cw@I<
zAHymJc4k$wU<Zh*otusN)MBYY$?uTOm)?;*zye}&Iwxk%`1zrrHUGURy<mtY`%!XS
zY1QvK+p=V3=(<#wjEsp<q^(KHi%FYlgt+qe?2o{WNfGmI;yHj~P8xAEnBYhG;=-vS
z6pLDD3>jjW2SM3G>F{ag)Dr**U{}&Y%nZ^IIMRVbN!-OzrXUnVFzb6I3S`5jnn}O+
zD5SE+q1=-AHjxw3j@wQxRGxaz)Q~NL7M*Hq4UA#J3<$x{We8in2t|;AFo#o*HOh71
z!rErX{`WtoSc#-)Cz;-wCGogPnyO$(rVI-T>(;djXImWeFAt_Q)qHH#_pF#A3R4xw
zfD{y@bf5>3RGuFMYDIky5}#V+CYPdu__xz#WIV8m<4LF0Qbm1iW0NHFz_nRkZ!AF#
z%-}?&(`jV>6#L;eU~@w-`&|03tFnv34uGiGYBqI)_?_LV3#~yJvjCfpNmt5QoP&m<
zLo?5b83~98U3sC4fy90-cqHD&eYcFXn<<Ryh~f55Ll4o$6;+gY%C1pMwj;s5>ZVlL
z^0c~~Jj`l<@Q*?Je!P$ITZ*v|WTvh4W0DFm>SGx3Y}4+}%!vErqEJDkm~>T0nQ5s3
zZJ0%Z%4ZKQ2o5|<)X5rRvE(Z%TO|d*j1)RyV4{J=ME*yShJARrpC+KaYMifUEqg(X
zCKk=qo!~m;?pKTy9vPUsQw08u^X6^>{DBg%WcKWF5(-LYG%qh6B2@DFB4kHF_#c}@
zc10znbC{@f1%pePfVc1P;D-jlmkjZ4L)k@k%;w?NmVx4;jh0h21w{@Cc_T`HGIv5t
zf>!=276&z_hU?88YFJq;d{`1mwtvdTlxMsESWtpt_Fft<#kx?fTdAQYDZP{pV{iL#
zU6wM(WF`1hN?61zbMc2lDd&w*S+Qa6VT7t!bYs4+31XTP**}VT9op<~v#D0%*l&mV
zeg+*1u8>QTIXeJsO#FPMy<5kbv{J|uR8K3ne32AI7KI*Ngw;>yqt?72r&a-wqRnOU
z->E<KqjbNruqsP6B87>##i<B(n-7Sc1cKz=SuO8|0Xhogvy=BrTt6J#+|0xL+2bPu
z_GKuw;m=kv?JC^k+tt=fQka^kKVlXQ)aR9o7`By%tSXi3UokT&OdjF%>YG3{QC2H4
zQ}xsJeN_^~6sWH&A;D>k?boL`hlaQsoRsha7=8pYoTyYfO}mq(48xe1(0l5jFUKi`
zc`6yFS3}5!VxMWEjRwbQPRtR3{mxv&O4QU!?<YDNOiwF$a?%p-IL^FC0&Iwj;$H8h
znkcW6=%_bNu-`;yhSQmG7Ar?E8UKpvGvFWLDR2DXq|^I7$0kel-`&BI`n=(9;I$u_
zaa$c*h$eT23FeKd&@6fR9QZ5$klwBoS-zN?mSLiT5Faqh)B1>Pfa@&kktTL+-vP(L
znyjHddRI4g!&)ow7iew6q?%ITs<O}?U%C)Iw2|Ro_#is9K9XILtJaYiP^USrN`VMR
z9LCNP0f33m$qc@yQfu;Ol)A5LXH!S^V=%_*vO4NR8CwF&$!BE?hMImaq55QD$M7nw
z{1(``vTw*dJatOG$>obBXQnn!XI@hj5}p-Fpe727h*x#QQJFnhD4ajdB~WO2I{a@B
z58)Xr8})scr9G);UVJW)8@f4jq;<eb!(Pe28ruuOKbLN8vejZ|!gY2JYQX`WC3sze
zF1M37JPI8~DGAOvw9-fVc>PYD&XyGPz-r}4s!4L?Nfa~JqH{iLC!wi@@r6w=8(c#S
z&y)ZNnOW|Q2;on`VL>@-#6b;6DBv<HJg}1L_VUIN(HX{x7E>iSv*@E7nVur(LJ3>u
z8aM3ZGVnhK02p)S+bldgo~F0*z+I?gk(7>wATBE5q4^F5a{HNzBiE3baNoD+qIg8j
z?mYao!&tOjU-1d}I4;(I!QFeL(r=@M$$9IE1!ow^0%LNg#r3x0FH(mjm}W2D9+S?V
zil}>i2(zwCg5u2;o2YS=+?1qe1~w(}^5?HZiS&ZcHwK+~=CG(imo9?ra_K{)-Z)TX
z_94I!ZGD{%?0b^+xgc5wLigB-+~!=7+@^Cn3A!km&zFim^70YpUXNOxHhS;G#!Nnf
z$T{KIj+*Ix`2prpHreqXe}OiuHQ^)naa1I8HP}=9rC&1LRoTQQR&^t{>tRz*sNT9_
z1!QAEoPD7?DIu@LSCkd(7dnzT4e?C|gck4W_gcT+V>)?T5}f_6QrG#suNAr^mE(yA
z*K?*aOL3p`>(V1I@o^uG=L=!$vzrP>!rh`;EVDp|`9xbOmJDMCFAD31^$*6Z>-B-z
z{TEjrIPs`+>GL$oCf}NN?d!D~xxWKII|#tj+Y3ZwJ}9XPN0@1kl}MpzVRMRrX$RO#
zjnj6LMZq1FxXbF0Uq;;&i7L*eGS95XS#WxCs8PJ56UpqwU<#GbnCeJ5EQ=hl>w{Bp
zAKM%AMU(3VjxQ_|^aKiC8G{u@+TI~LNfRAgk$oMpPa_3=)g;)v6xSo5xYTfN-RkMv
zeP|U)k^#$~#q{65Ccr2yA!^b|Ld<}cHX!OibAt9cTXIKjHMcFAGRT3g_Lj%@S*Yfh
zda>X=JIRU;p_lLHWy)U{lRr}&S0d}`{eBHm6E}lhqwpNsK-qoprnOZU2*tw2wh><m
zf*|=YuC|>wZ1bxF>^nbb*EKOB2QngO%VSbZ6hWa;9$%8Fg^DADS!8qpFY_sM{1F)X
z%#$;vx_hMTlUv4>H8b<+=<5&4jXua@1?tmhR#Qqk_2OqVs-xxKX|9At(oK7MLNga`
z>t)!NQS6^^{4t<c!3ayHx?;L67&*fnTADf5SBB!tG}OM>h$f;~d#BHvpEhyHfM-@3
zp=lY)#1A3D04Af7hcmL_6vjFJHrHhHwus^5+};;au075hEXE$X0I2JW8a`j;E8yZd
zY5sJ9kWq%JK;MPew#+!N**~Tugzt{gSjwcZA`-6$k}sl?Td&>!>7_E#?4#N;fOgd4
zjg9=O0oGhocr-z7)deZ0L^yisy(i1{Y1mx$`--tLjHDMnJhA}p(2j=U-S8UyWoo4|
zWau_QPbs?*@)!Ay-tK#zx(q-Co{FediQMt*CG)G-h@GK@QJ3gCSW-96LzfQQ7G9~)
zOYGo|UaU73j|Zine;?RTv-XN38D0S*Qm_EfHm)n17aXUb4o7yKLT>Jm21rKm=rS&L
zVbQ#0jV%K8RDdKnBFvx^3lGtGuM65U;U%erPGUMl0rd~%B{H^ccPA`tik55y_olu1
z?Q!=ac7`J1fg&DoG{RE|8@`Unl#(MvPoNV#+vt6V9PVnxS9bBuwcYoh0ClO2SHs|S
z;l!SrK@||yJhY@*g1>=j$Mr$w5*?XenP2iw)zebA$wriT2Yz;xi@v(#^@S{@-m!R@
zJUGQuE`We5-JRV@0oetuS>6G_0zcX$R%{9$385eof`}L17USbs+u=g)I27D<E%@BH
z!WAW@YyV`qlgUbjis51D4s0>!^>i&Pr3|>DKi!<sVCb$7x;OIa+$|U)Hu3GV+Zs9c
zFku_=k5SS+K|iFBhuJ%!AvSG6I<g>yB;(0T?#HSu2`vi-^_uRzKJCip_yvC67f47;
z2}N|TgwnMaQq2A}A&^5eHV%q{UAFy@vYHVk%hJV)87dIH99JxELGk%Rc)2U=Tx4Zt
zVy_Cww2!^XSnHCpn9(`a_vnRa+%wnJ>+|UX=Tq<~gjSNNVv2P_8FvlP4Mmvj#>u-=
zI?zzi7erInyFO(2qnM@K&Z$-nf78GY4&^y7m&t(~{H%54Xk~ucC=~9<V=Tf>mTsPJ
zGGx|P_W>(PIYW0cKCcuXjxe0_!T_GeDKFe8#8Gnp{DTz*uy4nG?<Wehc9O#gxJu}<
z=FGLzKey*hQc%zJ_*4M>A><@T?21bnnp=~L{d0IECNL{zsZk}XcZhh&l8iExc@mf;
zWcMD~o-<UNLKK2wKF>hNK#=p-Nf{CS1#c<XEyptUlpk&veY>wV`R;M=I^{d2^7;>7
zs_XX*9NeYcR4n{yHG!s@vOZ~-L&?@S=+Ve__&<Y!yruQZCzmPR-b&{+wdxFFutqOG
zD_p~9!W6^Pzt`J!z&ojLLKPKZ`U(uVGDYaV`ncXREeZ9(Jr}l3Wk`Ii*lVI()hZ7$
zf43{raRjiOXwjA})OHF}8M{m5FF969Ck1z8{6L(eJHg(3DPm3kp4(HND8^6O=5X&8
z_OlxA;r9jB_nN=h*PZM3Sq@ZoA+IuZ=7eF#oEyM>x8SfDjV%&RN_P$_d-}xhA=FC~
zhGdQ{ZK0{v)K@>&tYEnu@k+U~03#(h5uz0ZsjVvX(m#HUx-m3o85%u463mrBM#phH
zU_yo996K(}zG_YnQ*~321$U<MFdakRS$Llg-VH`r(@q=KbzpO^v_0|{q@!o4!^Gao
zEPhcqoG{(s@G$bSIMv?0)rUB&^iSdf0>dd9Ff-2nZomX(%zyj+Bu#i?V!M1i+=7E?
zKcu>)_yY@q9?5{I(|zY3mx=<fh9T(0PtW=H;8{8-wUUaB#Dm=1sHy?$-x&1SsbvPo
zFX)ALX6Zwyie%0*hp7hgRnMT}opG;F=vbs_ru8IUDb9+0Qc&SM>4&M(#v>Uf;!vyX
z_%VaOoT;I*4;K4@DTm+s43!cCDFSrPmu@$^uqU=07Zv$qSlpi?H*7fTSQ;G07p&t&
zYi{mKuse9@=ikGW$V3A=mcwF*Mq9#ZbdKOvC|^imcr@M=XR-vHQ3QdgSP543*a5j$
zIiL|CC|R25U@>kt{m9RK#PI_RZxe%+Ox16~m<@_bVK2Lzd^E*zG2NTrxh95xJo1W6
zSoiMmC;<<63de>Z46#A0aswSW$>`>Ds8YDa6m!lD1Hl^D<Tt$USW0_wkQtS&P5010
z3(VhUHJYxcxQ1t8Nw%ViN0qS5mP)P74TJ)?x+Ec*`Jxas(SrB4V8)Ce>j%u)gOW=J
z!sH(F$@CD<f&eG$D8UsPN#6N{vc7H>iQvaOHe*vd{<0QvHy(GF54|^%apYFZ7-uNE
z?<MMWR%Q=$_;RUy8Y;zrEVt^^q(gbabC?;iTS}jwr7XebCQ7;{-DhTl-K}^ixdYJs
z(&B88!9|rEF({tSE~<k}k{{c<50U@Q1qL$UXA~>7H5NC|ed??1vI^JCQbVdksKf}c
z1O|>&nKN`17P)LNsRUhcd3E(x%lETlPMa7kg4+^GO5SCt=dh!T`Q*$&+Ac+#!cS4a
zB;~YGGc#zl<8`ABwLhCM&ILcOX~hvSSseg%k^~uU5?61%5LZ!y;O^N2MtC)$Dl#L3
z<W{!yJh<PSegR<V0&_f6L;^Ha?zR)i>%C)++5sjx=Hh)!I0@au^E{Ou+t3`o<zxSZ
zuW95Ej}>Mz+E>%nvWMfd>z><V>n{`RwLQ~NFnkw0f%>%eQ<Mb2-a-?pN5iLbpAr1E
z_MV&~UflLyRkQ5LGJj~ISuvC;Jx7I}9*IMJVb;gTZ{_Q(Le+_Jm>j;07loPyR(3EM
zSMJnNH&C=_GzKkEK*y|hb1Fcb;w*fM(N=z$kXID-wAxSSaTgs{b$iRQA5pj$3=@)x
z(;P|+1>2Awjx;IH*xkF^G^ywfaA#lMM^%JGW2{>$yjYL4l>;taEN7O+P$~^Q9pzrm
z{yg!8t#M+k%6b&bZogu_a+j&nnhOq$$fI9w5pXSkz#LFnQQSl*j;1?S3wla#ggj6?
zm%%5GoUvF_ik2MIXKWj{-_EVda1extHjv^Cn1+fIN^0O!6b94?`dc>z45{lH9CVWJ
zm^wTmA9W%zQTF3}zXL@{w<;lztkPnw`{J)0W<3{2bFkeno0}pQ)q2}Q9t*Yvp!6mB
z=P1qCbvHDqWE~|WnhqU@H6OBi^I(Rb;f6wD!aB*Dx7v(8*{AMkN0XhtF>`vpsRV*|
zN$23H7nV>->l|`lHEc5=jh;1Bcx=6RqNsT_VL|cFqci$@1%mUdc}EE{xPmi_ynYb-
z#kdhtG8i!yMiS12<caUp!eS{Z<bz=JE=w_{*wYhBgp#|@MpnM%LiERf0ZS;@a;)@Y
z%0g!^pDRn1D3oAGihN<eSFEjHN_BT})D<QM1-ewnc11+2E{rW9HtglcM8HXRgG(^a
z#oYVVzhbu}#AXet+x&`O6cee!N+kRt^pE5_o$;ID{m{y0=<=8%J;}1!1V-q}Up4~d
zJ7T`b3Y57D86ikiwh;O;0Q4Emip>GW)m;ffRdShZ#h4dSvlSKH=o~~ki6N^?FH0xq
zu<bM%OdfErMpDq=@)R8hezCb_A#>>5T|s0W@yWrC$fXiSyPkaHP<`(bB1nnS#ZXT*
zxsqi>hS)pXVKKG)tE2UU7PUtUQHfDAIO7l!iQj_WPg~A4TOZpfynQuALisreKe_Km
zROP4X#(D{zy_Gr-ckn%lJn{n@#;bYv%9_y%=?}_h+VU5&p&W5oF+1x)gaHt#SIKY3
zECDgu!%e!5@^#5!qL5X6`Bf)5R%D)c44EX-?n-E0cZ+7c#yC29R2fmK0KSTHR=zN|
zh$IZ9l#SlkUSab!9`g3?d005WHY=&bGq#|%9ZzyOoP7aPd_$0g+%cVk(Cy3US}FHd
z7=)mE!1Q;>xW`j5w?vRo&b;(df-UXH8?ab}@tS5W!(6R(szUy$8TwbAHD`w}IeSBX
zuXLPT*v`aUO%v`?3@hJhxrkM>6In4LZ6=;9d_rM{P`R1i5F?yCOp(gP*=M&+Z3Qr`
ztg_f|f~uyrtr2H+You7;ny}3$!EO^GH9O6JJV4Nl-c?y2`nZ-hf*MuJWvuUD98EQr
z%XhL6&oqjH@N<GO<Fr-o8)R=;`QlhK#2bOH91uR;wPnR{J@74pp{nY_CB(rC**x%j
zxLhKlI#-*-L4Z)^aw#>UWsn6ga3DY}i9na0e-8FAM-Q2tPc&X7_m~J#IS{#n_+I~*
zI+BW=v=07-$F7XZo?upWpbU>|Xnq}`n8hrvBrb#i|3nzbKxdry8A2Le<2ceT-5kJ;
zHbTof!7rMuHg{YRXDVIoBwIQ-&b8gX+^b@N*}c0NfbC$5=@Mp*p`_6?UAr0W0ktI;
z@Kq<jBK85l()8U}U$`hU>BRT_y6DwBA2%Y3*+JT33Hz7U#o-g9`XGko(z20_N2^6K
z1KshqpqzjXN~)E6qht(E&TXf+AL43`Mh}*lkrmRbTi|z)u{2cm2wSm)))Wk#&<bik
zl%II4Rdp&f;u$t0dQxTC7Ro7&FIvTv8Cq@%RpATF1t;iUPU!Qr(!#~5gC8myrrB-W
z^7o7-l^PJur`F0bul%x+FiV|&*~OnY2(1|FXXJgk;_pvt`o5N(;w*WPSO6x<ktNp0
zy-&wiz4R0BeZaJz=u|iQzfpB>!dj{<<U0IbBrkm(<k5aQTcz2~k1`(+F&>F&SMrBD
z5J>3Vg&~qcy}2gSApRj+*B(VJO~2L)$i-FWb38$+lBi``W}MT`BOl&Ggo=EjA_zDH
z@)T#|e@<4CD`_7h7WERNk>8TYP-^*I?Y1h^plfFeYgfB{0A-=#{PP*e9>6cj?BNMw
zW7TzJwNLMte^X8@*qN0sBMYilBir^)Ldgvx2qVPe7vMl;o9~T+-PJa68jYxd1M{i;
zL@K{DqjTd_n@**uQmL(bfGJFvFEMjU<)*qXs_viZ>rdXs=krLiEOtLlIkE`&dSYgA
zq`{Q-vw`)yT^o99z-|Tj?FgriouP{_OIsh`;uK$*M1r#<zC1IZyI0UCTAA1yyUq}`
zs!1^S$IJFJ`cXz3S_{pxJ0q`4?k0n5i6ut!#Q-iMC3>Lm&r)4wdY|@~ZJ`zU+QkIp
zAFY<b(DnZc#?lZ~Tqe(eP=DnS33nGxDPZ8PAIfdJsG-xzebY}^778b&J#qyu4#hAG
zb!H?I3w;3Y29~G>3JkKa_qjlwvz8%#+nzUMSv4l;F#dAlxhJ{?89)5&2HUTRwiG7l
z-qD3nt&9!|0-at{kJN0z92%3TN{{1{pk5($Iqg5OaMS8B#Q5I>;(FiG=H9~f3luB&
zxjYp`WvqRahO9aqd^U{|4ZBQPth*$gx(;*I!h41uWEI(~Uz$k>0FlQq_#GE}V)I~I
z7@<{`;JpwOomprrzT98xiWhs>FNA!KcqCkimkl|bPsG?5`nSNrF)Y4hOK}cj20?Zh
z$W){8VYv<>oHDtYuAluacEwK0zZ*-7PYre$wO7lFSSaYBt3zkJgX86plxV{bhj<E?
zlJ5=dQ2=86D`bpe(h9*pCjyASCB_kMifAUQp%Dys1{@G+LkfJ7L+$4JrBN&d-5cJ*
z3OZ$^POLT!CTUy-B~;$R@L8R|sqd9&`{&$<>6?1QeSm~QB&BMX#n(}^!xUGuXy(KX
zIZ2ZvdF1HqH!2fNTkK0~VxYs>>z|B$Qi!lfsJor?GCy>!hV&iAEv(Qy0-zVl{RkgZ
zqge?^U<yJCB>|5T)C@V-(4}x*tE})A*9ymnW{iz#s5EV}jq#9f0RCMq5Kf(am6YQv
z3kn}^D5>E+$nt)rSiqJTR@V2Bl8`~LV9ir_$RDm-iBYClk`tqDIfjKP#!7=jB}pzY
za}-Gzq*pWM57T^@A;sdbpSl8~iKg)bKi<L>VsK5z%9``Tmnl=^m&1Nv=8k+W*K$|e
zZNB)c&d#0Ql3e#Re$&<~)~x3?H5G~z_5%9V++eC4%hfd5a`q=9XV8BZ^;}M;-3r-#
zz5Q`UQSFeGM1Re=)WSb6D!otW#2{q^54or-f&wW3SxUC%&_~X~RV=MMi1StXcNrSI
zsM2Zj*qaPH8}XveWx&~-ZkGn|N2Nz1()K1UjUpVPsy8A8>YYSNfmk1GB6B~GBHTl!
zd=M0T@rm_ndFOLx@xltDO2GrOCi4qY$Tp;z-Cuef*KN+h@L1cy;wJJ^PcaNP4Dz6b
zlNLA_aJsJ(v>p?P)=^Tn1f4#sDP=QXoekxyv-6wmyU=t5G?Bl=qx}@$ixNy`sP-wT
zgHf=*LKXki9y$NKnS*CV>nZ}-m1@k_B%uf%F=J%g(Xt@tu8LtM>zD(fb)Z7wsxsJ!
zknqWMbNXftgQ1bA#7@-PPcHP|h^b=Zt@g)tDw3T`8v4Y>vJ;B@7Xi#@eh|`7A%N*`
zn4&-`^)}?U!Hu7UL|Zrb=U0l40|2O?{NgywMzWSb!hC?+EnUr(do9fL>ibkX#DtgW
z{n_mmk9M!|xWts62u3aba@8Fch%h9~jLUPQ{yZBVtX8yiqi%SgGqT|eeJtyDgX=Ay
zW!J?SHXP^0VAT*|KPz=t-HA}X45>qCz6e;<x@0f;BRE_y4Tr7!RqR#R>N7bVc`N0j
zQpF)raSM1Voxvaz&y9&-K9lkV5Kwu8C2nc4+-m}Imk`f>HE%0l@r+yBE8RH_tzjnK
z-Dw(9&z<>V(D8{TaEO%P3;wBZ<PV9FZmuo-wqlqxD6KJ8q?z!ijm%%9FR1GM$Ac+i
zG$5<R#Herj@#rUGI2RNSYwQ#uB4zf{S}F2zbUKGX9!Pcfgm>(8yMI7~q}QYzCbRLs
z=kOMuqKGLdI<$LbjO9g6Y)fGwm`DUFP@zt#9l2yj@h2v)D+&F_q?(ba@8H<WpDAyw
zp8N`Q?f$t>VR+3l@?2^bX;PZuWRJqM$F9qhpHjc-&}6^M5u9P(Fl<zKDLx6;r~u6u
zMRvu!B82_b^W80N(72giPNh@YTJ|e6)LSGnQIlk0-Qx8_jTf&|v%ba(*^?+5*-~`F
zsJgjtNOpM8I$fsD-c_&`M;?hgan0&ox(^+fZO5*%MBY#31>(o#Qrjb@BXQOr#}Jc*
z-KeV`hpz|C#JrXFG@bA%M4{pKQa?owQ}m|Bp`_uqNS{*m)hZw%%{cU!2O_7Vi5|h5
zG(%!8EY^S;tTGQw?Rs?Q_4<H*`Ak-vv)_B?ICWuCr7-VlPx|t{!MCMOe9;DpdR!NA
zgckOEgASU(n1hL7n`ugcf84MJH1L~Hk*%<-s(*;8)3-wgFJpDS=wg*9c)8hm**EY1
zL8d_G%L>iCO!!0d0#S~3&zRvAZ$Ds(u<2yH_AGVWNVud=rTwHc{$?PIs5*3eM<F?9
z$tw+a*;g}@)<sp*m|eQ}oqc15qZ?CaDhIO#dh`KD2{HNM7c#Xw!Uy&NOoi?ueD~FA
zDg53%FXDUneh2`NiIo~-b<*OF7%3$qub`o&O{b)cPR~G{f>;67q5`VtBEwWiqTpU4
zq?J1Mz4?n7!&gXb_R}swSfj(v-bH}k9k#2`BlQcB1a00hV>M99>*6t21$R<aGRAQ%
zO&gt(3!QTeQig}PlA9X&O*(y_9`>oFjzF0sd&OeU8f2h=i-51&zt9cYhf7xMaA+#o
z2^=cW6MD`UcDJ~6F3Bk`N%V3x!8Ik!Ih<8a*wLtA0B-cFCo+CDV)^94HTd_Idhnr8
ziFa4Bc!z0e@1AdGwA%E`Nz!3wM3wR|H%sy&_(^eZnG=e$8Z}tVXgY|jy4kp^<R^jZ
z7xQdr0Dfld)Au8Ih_bz)+liqP`DO+hw0gY_=|%m=?lz|YwR1cmOb?`Fl!R>d#U2Kt
zi2^X!vYP>EZ8zaQv}NE1CF61w-ym{8!AS*#JwT9&C}5K?VvD(e9~SlQbKfGt^5Zg{
zI@gSJFE~&h@!K-ozbf^PrUSP<l#j+=g<bCBmy_aOF<mV;-Lh}#Pp`WpKFX_0md4dW
zi#P*}3=Hfw1sUjHHEz+Z9+ISF2zVkj01<Y3sJ}Wx^q~;TKE5dxI__a-ZcgCP?4SE}
zSO`WGH7lXbQ4TX?cf+d+P{qSDH-O1D$ev8dLpro@QtpPF4|EB!b}{kY8G&psy!zsq
zNvP7)itEaM`S*iDy}ihUJL2~%j#naPF@fhT(9wU;d8?C`;doo9beYrn?)(zIr|KZL
zC^MFLe7~m52TTpmV3d?1Ad{ofrzzglvr$!A2h2+qpp3stnY5frP>wMD%#_1eOH6>q
z^ge!*P<lsv(k{c}Bx|N&UM;Y;4r{CS#tg+B%~8*;CO3~nAX5=({)Y$Mol3P*L?10)
zJxu5UGuDy8R!JFi%#YK4K7y2^Hq<EqQB($^DWfUlTRdG9ti}Z8Ar0kVTx;MrghI9I
zh($VIosp^3cPO&T?ALCLNb9XXiLNRxDo{^EO)$(@A|w*@=4%LP#mjLHl~U@_@R{fQ
zs6A+$u?~w(W>}L(9+}pQeI!%(1W0pA`7|E|mrK$oWIS$TbJ0+sCZIt-O26u@<|a5;
zuTgyGrEEnNr?}>a4;9$8SvJPIs#FlbFPl9Mq$rDmA+(__wtL8|KmKptxo@6JeJWjO
z_-nJVC=S20K!03`r5rw0!HmOTVkqWA!E6lj?9z)ti=|%Ya`7>{SR$K}?n&d07|Y#e
z=Iye*+@i8-WB&ugvz=7J^;UK{n6k9kY(j9{>x6XQ{;nm(Vp?IrRXSshm8>1Y=8lZa
zq8J5K4eP?^Gy>o9N$wN=`>Jy%^9@15T6}gaa*Fe0$<C9z*9b{{<ud2aj5Scq;n>jU
z+y{^`V+Pj8$`q)$F}nU<=YH~eJNoQ|kc))iEdjp?oxK{wruk#MMBT=*X}S2GD>c~?
zIh;gj;e!#H#9?RU$!SvZkmLkC3X3q_e;NXMg}S7^VVL0OlLZ67@f+Dyv-O+4R#B{T
z><D*Sw4{LK!$0(i!R1J+Yoih05Qq{HyEBI0+ytwe;`ZP!Y3qp>SpJ+n)SinKU|V)X
z3yrynPnckLtzt}Li*I&JAoGWoy~7g3TDr=yK|idvR4B=wmX0Cv{ODm)Q4_dRDTauL
z;8*R8vV_33Z>MuQ?gK%hhvz=fl!uf?sFSxMdXdK$@YX07I%7NW^LjC9Att5R)|O73
zbJgj6-_ZTG8W@B>=uOiWEfHMUsNr@B7|2!HXiE8Kt@gGUB30}ry=_lmC@$+^rI4sg
zH3QYfn(*-n{}Q)R%9P^1JP3XLEKU6rnR$O>|HuST2bT<i>bHSdB2>s(P^Qo&vSrO!
z6!^ym1p8372W7VKXn_Nxhz{fF&1_*0R&CU&VZ$km=n@5}m_ozYuz+3H?e|R;_0)en
zV(fvrP#8gu!ck4=C+O&R-WWECe3e*q+Q?JCqHVQ=T+j+MdL=R>NN#R7)TN4+VRNIF
z%+L~0r9IRa_(Mj@QJ0rS**Xg4DUs}9*?@~>vbyXuK=}-T5qJI{wZyP!<>4XA$h6Q%
z%a`(@Q`wDIHce%Syokw_6g8TUTrE_KNDqh#k(g{x)kEk?lx6}W?1=zK`h)^#Iewak
z72g3J+N>iwyuoO$FIX05=w2BaBZkV-%?LI&TD6i!0ylnVLz)|4_bKQ>pis{Mnvo}@
zsVEt?Tf%T(%xfn9*Cj&|!IHI2H)>L95B$4hhohhPio|3+q=1l`t&yf3jnY$ji|tY6
zUWh7#s&%97QJ|arj2*}qbVu_+Gu<Yk(C!HRt8j+ENtfr4E*iPyVRpB<OnP8-J&Y1|
z+u}1#ehA{<McjZTP8=T>0;XmCi4IgBeWP313CaQ@3JA&cVyA}bm|?7mnK$D!eA!gj
zgx*ocvNP|Zs={8lD22YmZ*y=&Uss50(Mac#)$Hr9Jj`v>boMW<Vqk%lNId^bF<@WP
z`!)#|bmM%G9*$BaT8v!l^a-_`)*<s%X&6j`w!F#n;eD-vi=}7P^UU+nI$fuvl?NpR
zt=fW06#a`Lf<*;5PY_+RGf_v>$yJXDf5TO^i#oeuvl}Lb#nA=UDaoB!eS)X-H?gbv
zEl%ETjxBQq@6)$v`D9T5HQZ_|E6My2d^jvU?JY^!4G2tPAWjdOv9R1NmU=)@v95(*
zy31(jhOE^oMSp{(=vSG5PcwLlb5g^`N@Qfu<F$qH##C_Bd<T!$Xncv%@CbZNRslm%
zL#PVNE&l@f#Muw|!<mU_S60YQaS?*C(4uZn1roO|B-v=)1BrYY$40K<E|kMFPW8Gb
z(Br{!T7?)fq!fFS<+{YEB$c?^s1T(Adx1W_09yl4k+9+^&$k`)6JM}6v~!?3hthDm
z7#)^M(C{z9@CJF1%{m-MEmADiw?>-L<n%*?W)=z)K-<Z1G-$6VYBdBh!d5@x0)`Um
zN`O13_%Kq!ijIft46MfB&(w^*Fe$-{@%v9Pa9VE=#4b_*8bO4b27|0O>2Qr+Y*==o
z1EHcO#$ZZbQHgK=J9#E)#0#PFUZR0YU&nu-vMnT-+m<PYL{^5<P2>@kVMzn>blk>V
z<f$$^!-_%%&VUq(^;GIe5mI6mE9&OSiVrBHQ1WBs(&R7SxzQ)N55L+YLCPB#FF4lb
zw1N1;^D9Cl@DdE3)I(tWXbnR0f+nT0pdQ@#6(0lT=1^s8p3ju_zRrw#alG~UT#ND#
znrm${&6vbH<*nJGZW>*aU+rA7i-L=%L>4F}U2JAf)|cnUU)|3ctb&fLwlL5IgvgY8
znc}gWzZ#ud0j>|^yKORfcWHIzq#b*2Q?jpt>0gRY7Uq!+XnfB@^9bTSpl`uAZAf41
zShk-E_*N0vL)j@1LJCi8vMGQUa%BIMo<vKdy4A2Ln@&Y>!|HEglXIf73()@*dyuZH
z!~Q}h2mCnnJWHiY$>ZoXEI8#d$zJ}NSQS-x?o)p3;-n32-k%cTi&;sUuV9B4bG3*|
ziP@U5h)%JHg@%00%W%M-O)iRNzU$tXcb(K=dR<gmM#b~Z!B4kG1_5ecD~fy4C~>~^
zFSO(_WWCeg{>WriNR6sKUHo_&qno7ptLgR~A{=;$GAj)ELdyhDFQ%WF3c*CfCtIR&
zEkpPnx4hObrAbIc{&3c-v}Du{lPl{LEb5_~-F=*God*N0>|w!wE!Bl?kcDm89{)(r
z)t<p;eDs?Aw^shOEKA&li27(m=NOd4meZP#)BMXCn-skSaWr=PYRtzEg`n8j1iV~p
z9ljuuU|u^p?ldH=s3v}4Rw?uM{MEAWezRh~4a;Ni7sV9oRFh6mX$zt#&3;q-uy&n?
zhr7U{$ArKP0WoqKoPMcd9=$*ft^gX1cHdKO?!#Nf_du9glgJ_1<CT9_PYW~d%UIh-
z?Be_de+N_~Jpt__?q(u-hTGne-l!@PcI_6w8@@6mo+!Jb?zTU<!&O<0rqCaqRTaEQ
zJ5|dnOz13~iVVt2UY3Yu@lpQvstUxGSsaLbm-TMLLFf`Q&|%M(I7g!mm7y+q$-*CD
za#NS;oqK1=M`!tYszOsV)4#pnCkV49C5FxmMQr9GXSUgy^2;^5*rH~!GknU_0L?Wy
z4=^+2D(-qUH+IOR1<NGrdMq8!{o_D0>{{BH;|y=VN3!|eYpwXS<R}B&O2>Jco5c(q
z<K1j{lFn`1Jg<SkVryIsgz=kW)IrcJ+<D%7*g}+i0rnunbjrTAAHOjITwhn<<PmSd
zY2Z<?nq8}A5!RsQ+sDG`geeVnwLMf#t6P8NnW+Q%c(*Ehp%$wZcZnl7f@s)A!8Tnu
z{(KUCgDpmlkC{KCEvURdbVe>#a}8*)B%0A>wmsio5#|QxED(*-pl+IHBeZ10@K>c8
z@#h;wlX^47$zK{2n}Yb~j4*p|{Of-zn0rH7Brg`r(U%5$NrU?@R&jzW<>*XJnL*Br
zIq)2wCD}T<GrtD-{$5oHmelbmBP#z4rs6zcsMA8a(CZ1Q)qI3+A`7P-<&QkqlKDV1
zVxcj*(ji(*FO{rxsfee58MY89N$?NW#A;PPiwlmIXFtZ<wve4D0BroP0DA+3{3-&D
zns}clzx#olD3U2hx>{gFj#<L@fhI&F?csz=1S{{tVFNWTGgpoTH)VNu@b@e`8I~#x
z;Z>~tNI8Id306_T&o3dC;gJRZQCNJT;B$4;XQ3#R@}w&GoC0G^BYLV-gII^9Y8XOn
zM}?#$?H5fE6T=D{5CxJ0P&BL(iqe0i%KsLwZXROih$WZfAw1F)BP$PY6_H^61(r66
zt~lWTF@cO6q7M<U_)lu}A}lpQU>*?-)aY6&^eZVqm*eJBnN0H#$$v^&r5u%#bmb6e
zfkwa(Mw9n%4t<3nGzoNLhf7HgATk6jTw#Jvt>8x>M^GBb&a@YT5WfeLZFhQI5_E`f
zYoJp1%44+~{Yj97MTm?!djPE!NJ*Sn>^?*tutTu$#(1V-;LjU+O4u~mqrtu1o({8H
zj1>1Z2DYUV#)7(`9+`*Ky^i^4`PGy+YMQkG3O!%~DDtS%maUgJY5~HtASTdkRV~ON
zHJVw(Jz^?NP11|^mn^_nHby4RZWn~1NA5iioNzJ=ISd<kiD)4VR;0a&cAOOW<0T1!
z_!4E{d<#ZtWnCIcPH?p8PBO)qXpBe3OK6Y+GU8`JLNE`n-J^l_5_@jzyb|^Vo$t{E
zGG$&m17WE;tlE3gjW>=+dzApdUw~I+0=(*(5QaS0mE#S=^p9Xcnswl#Xr|l^Ms`V)
z;y*8!(?8-l?I~W*21AG<pu^4<<behoF4eB91Wq>qn!~nnB{WSSUf>QmL%K0<^5Gh5
zx=|sd(5J#TMkMkO=F*u`6KLdHIb!buy+W6+6U7@v3<Icv$jH@MqO5AiDDQ{zLQ|e(
z_-iS*YY#xodG~Iv&lM!lDS9COf>UGw0{7if3vr!TI1H|gN49Hb$+b9ixi<z9!%YX3
zbCKk*0~*qb9*88FTj|Xo$(Q78Kn(?F_E=^ZeAt0oV=B5hbA%rL=>nK0_ydhm#0R=`
z|9=xB8Z@D*FaPe?sEf_boeAvg-Ohw|gC$K?F`_el(u`#Ixr3#OysJ8!puFFV5Cbe+
zV;5Ld>`bvmz88l+r34C`hr@HcG`v^Oav2$MnCIrgUW|8`ro@+off2-Aj4$mDFv!)H
zauU}1AzUV9ovQ#=<Ahq(Xw+6guRhO}a&($ucY*BLXbJJo(w_6Y?EAekZ{Kw);Hv>8
HQDA>gAqLb4

diff --git a/static/fonts/roboto-v18-latin-700.svg b/static/fonts/roboto-v18-latin-700.svg
deleted file mode 100644
index 11db87dd0e..0000000000
--- a/static/fonts/roboto-v18-latin-700.svg
+++ /dev/null
@@ -1,309 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1191" ><font-face
-    font-family="Roboto"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="510" />
-<glyph unicode="!" horiz-adv-x="557" d="M405 447H165L131 1456H439L405 447ZM285 289Q358 289 402 246T447 136Q447 70 403 27T285 -16Q213 -16 169 27T124 136T168 245T285 289Z" />
-<glyph unicode="&quot;" horiz-adv-x="657" d="M266 1398L226 987H64V1536H266V1398ZM591 1398L552 987H390V1536H591V1398Z" />
-<glyph unicode="#" horiz-adv-x="1220" d="M667 410H474L402 0H219L291 410H64V582H321L371 866H139V1040H402L475 1456H657L584 1040H778L851 1456H1034L961 1040H1180V866H930L880 582H1104V410H850L778 0H595L667 410ZM504 582H697L747 866H553L504 582Z" />
-<glyph unicode="$" horiz-adv-x="1175" d="M790 383Q790 465 745 513T590 603T402 684T267 777T179 901T147 1070Q147 1239 255 1347T542 1473V1687H702V1470Q879 1445 979 1323T1079 1005H790Q790 1125 741 1184T608 1244Q526 1244 481 1198T436 1069Q436 993
-480 947T643 853T840 763T970 667T1051 545T1079 385Q1079 215 973 109T681 -16V-215H522V-17Q317 5 205 128T92 457H381Q381 338 437 275T600 211Q688 211 739 257T790 383Z" />
-<glyph unicode="%" horiz-adv-x="1512" d="M95 1176Q95 1310 182 1393T410 1477Q553 1477 640 1395T727 1171V1099Q727 964 640 882T412 800Q270 800 183 882T95 1105V1176ZM287 1099Q287 1039 321 1003T412 966T501 1003T534 1102V1176Q534 1236 501 1273T410
-1310Q355 1310 321 1274T287 1172V1099ZM791 357Q791 492 879 574T1107 657Q1249 657 1336 576T1424 351V279Q1424 145 1338 63T1109 -20Q965 -20 878 63T791 283V357ZM983 279Q983 224 1019 185T1109 146Q1231 146 1231 281V357Q1231 417 1197 453T1107 490T1017
-454T983 354V279ZM469 109L328 185L1039 1323L1180 1247L469 109Z" />
-<glyph unicode="&amp;" horiz-adv-x="1344" d="M71 392Q71 493 127 579T335 770Q270 857 233 933T196 1093Q196 1263 303 1369T593 1476Q756 1476 860 1379T965 1137Q965 963 789 830L677 749L928 457Q987 573 987 713H1233Q1233 429 1102 253L1320 0H992L917
-86Q756 -20 547 -20Q331 -20 201 93T71 392ZM561 212Q665 212 758 270L471 602L450 587Q361 511 361 408Q361 321 416 267T561 212ZM455 1097Q455 1022 543 908L620 959Q679 997 701 1033T724 1119T687 1206T592 1243Q530 1243 493 1203T455 1097Z" />
-<glyph unicode="&apos;" horiz-adv-x="331" d="M275 1389L246 985H63V1536H275V1389Z" />
-<glyph unicode="(" horiz-adv-x="719" d="M124 592Q124 821 185 1028T365 1394T623 1616L679 1460Q533 1352 451 1126T369 598V567Q369 264 450 37T679 -302L623 -455Q487 -394 370 -240T190 117T124 539V592Z" />
-<glyph unicode=")" horiz-adv-x="722" d="M609 569Q609 343 544 134T357 -235T96 -455L40 -302Q182 -195 264 28T349 541V594Q349 893 268 1121T40 1463L96 1616Q232 1557 352 1402T539 1041T609 614V569Z" />
-<glyph unicode="*" horiz-adv-x="928" d="M341 962L27 1051L86 1232L397 1107L377 1456H573L553 1100L856 1223L915 1040L595 951L805 685L646 572L464 864L284 582L125 690L341 962Z" />
-<glyph unicode="+" horiz-adv-x="1118" d="M694 815H1055V554H694V146H419V554H57V815H419V1206H694V815Z" />
-<glyph unicode="," horiz-adv-x="500" d="M186 -365L35 -286L71 -221Q138 -99 140 22V246H384L383 46Q382 -65 327 -178T186 -365Z" />
-<glyph unicode="-" horiz-adv-x="794" d="M673 507H110V740H673V507Z" />
-<glyph unicode="." horiz-adv-x="595" d="M126 142Q126 211 172 254T289 297Q360 297 406 254T453 142Q453 74 407 32T289 -11Q218 -11 172 31T126 142Z" />
-<glyph unicode="/" horiz-adv-x="765" d="M202 -125H-13L523 1456H738L202 -125Z" />
-<glyph unicode="0" horiz-adv-x="1175" d="M1079 602Q1079 300 954 140T588 -20Q350 -20 224 137T95 587V855Q95 1160 221 1318T586 1476T950 1320T1079 870V602ZM790 896Q790 1077 741 1159T586 1242Q484 1242 436 1164T384 918V564Q384 386 432 300T588 213Q694
-213 741 296T790 550V896Z" />
-<glyph unicode="1" horiz-adv-x="1175" d="M801 0H512V1114L167 1007V1242L770 1458H801V0Z" />
-<glyph unicode="2" horiz-adv-x="1175" d="M1097 0H99V198L570 700Q667 806 713 885T760 1035Q760 1132 711 1187T571 1243Q473 1243 417 1176T360 998H70Q70 1131 133 1241T313 1413T576 1476Q801 1476 925 1368T1050 1063Q1050 955 994 843T802 582L471 233H1097V0Z" />
-<glyph unicode="3" horiz-adv-x="1175" d="M393 856H547Q657 856 710 911T763 1057Q763 1145 711 1194T566 1243Q483 1243 427 1198T371 1079H82Q82 1193 143 1283T315 1425T559 1476Q790 1476 921 1366T1052 1061Q1052 961 991 877T831 748Q954 704 1014 616T1075
-408Q1075 214 934 97T559 -20Q341 -20 203 95T64 399H353Q353 317 414 265T566 213Q669 213 727 267T786 412Q786 630 546 630H393V856Z" />
-<glyph unicode="4" horiz-adv-x="1175" d="M954 548H1119V315H954V0H665V315H68L55 497L662 1456H954V548ZM343 548H665V1062L646 1029L343 548Z" />
-<glyph unicode="5" horiz-adv-x="1175" d="M142 716L226 1456H1042V1215H463L427 902Q530 957 646 957Q854 957 972 828T1090 467Q1090 326 1031 215T860 42T598 -20Q466 -20 353 33T175 184T105 405H391Q400 314 454 264T597 213Q695 213 748 283T801 483Q801
-607 740 673T567 739Q464 739 400 685L372 659L142 716Z" />
-<glyph unicode="6" horiz-adv-x="1175" d="M883 1471V1233H855Q659 1230 540 1131T396 856Q512 974 689 974Q879 974 991 838T1103 480Q1103 338 1042 223T868 44T613 -20Q383 -20 242 140T100 567V671Q100 908 189 1089T446 1370T835 1471H883ZM601 742Q531 742
-474 706T390 609V521Q390 376 447 295T607 213Q700 213 757 286T815 477Q815 596 757 669T601 742Z" />
-<glyph unicode="7" horiz-adv-x="1175" d="M1089 1294L526 0H221L785 1222H61V1456H1089V1294Z" />
-<glyph unicode="8" horiz-adv-x="1175" d="M1048 1069Q1048 963 995 881T849 750Q955 699 1017 610T1079 399Q1079 205 947 93T588 -20T228 93T95 399Q95 520 157 610T324 750Q231 799 179 881T126 1069Q126 1255 250 1365T587 1476Q799 1476 923 1367T1048 1069ZM789
-420Q789 515 734 572T586 629Q494 629 439 573T384 420Q384 327 438 270T588 213Q682 213 735 268T789 420ZM759 1055Q759 1140 714 1191T587 1243Q506 1243 461 1193T416 1055Q416 968 461 915T588 862T714 915T759 1055Z" />
-<glyph unicode="9" horiz-adv-x="1175" d="M775 582Q662 471 511 471Q318 471 202 603T86 961Q86 1104 148 1223T323 1409T575 1476Q719 1476 831 1404T1005 1197T1068 888V781Q1068 417 887 209T374 -13L303 -14V227L367 228Q744 245 775 582ZM582 692Q652 692
-702 728T779 815V934Q779 1081 723 1162T573 1243Q486 1243 430 1164T374 964Q374 845 428 769T582 692Z" />
-<glyph unicode=":" horiz-adv-x="578" d="M381 142Q381 211 427 254T544 297Q615 297 661 254T708 142Q708 74 662 32T544 -11Q473 -11 427 31T381 142ZM125 961Q125 1030 171 1073T288 1116Q359 1116 405 1073T452 961Q452 893 406 851T288 808Q217 808 171 850T125
-961Z" />
-<glyph unicode=";" horiz-adv-x="537" d="M108 961Q108 1030 154 1073T271 1116Q342 1116 388 1073T435 961Q435 893 389 851T271 808Q200 808 154 850T108 961ZM208 -365L57 -286L93 -221Q160 -99 162 22V246H406L405 46Q404 -65 349 -178T208 -365Z" />
-<glyph unicode="&lt;" horiz-adv-x="1042" d="M345 618L915 417V137L54 502V738L915 1103V823L345 618Z" />
-<glyph unicode="=" horiz-adv-x="1172" d="M1030 746H136V982H1030V746ZM1030 313H136V549H1030V313Z" />
-<glyph unicode="&gt;" horiz-adv-x="1058" d="M701 621L120 824V1102L991 737V502L120 136V415L701 621Z" />
-<glyph unicode="?" horiz-adv-x="1019" d="M347 447Q347 587 381 670T505 833T626 964T656 1071Q656 1240 500 1240Q426 1240 382 1195T335 1069H45Q47 1260 168 1368T500 1476Q712 1476 829 1374T946 1084Q946 999 908 924T775 756L694 679Q618 606 607 508L603
-447H347ZM318 140Q318 207 363 250T480 294T596 251T642 140Q642 74 598 31T480 -12T363 31T318 140Z" />
-<glyph unicode="@" horiz-adv-x="1833" d="M1749 536Q1738 280 1623 130T1312 -21Q1226 -21 1164 16T1069 122Q969 -18 808 -18Q662 -18 582 105T522 430Q540 595 605 723T771 921T987 990Q1130 990 1231 924L1294 881L1243 303Q1233 224 1260 182T1348 140Q1440
-140 1502 247T1570 529Q1587 878 1430 1065T963 1253Q770 1253 619 1155T381 877T283 463Q267 109 425 -84T898 -278Q981 -278 1072 -260T1229 -210L1267 -364Q1206 -404 1103 -428T894 -453Q630 -453 444 -347T167 -33T87 463Q99 739 213 958T523 1296T967 1416Q1218
-1416 1399 1309T1670 1001T1749 536ZM744 430Q733 298 767 230T877 161Q926 161 970 204T1043 328L1085 801Q1046 814 1005 814Q890 814 827 716T744 430Z" />
-<glyph unicode="A" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543Z" />
-<glyph unicode="B" horiz-adv-x="1307" d="M130 0V1456H640Q905 1456 1042 1355T1179 1057Q1179 950 1124 869T971 749Q1083 721 1147 636T1212 428Q1212 218 1078 110T696 0H130ZM430 634V241H687Q793 241 852 291T912 431Q912 631 705 634H430ZM430 846H652Q879
-850 879 1027Q879 1126 822 1169T640 1213H430V846Z" />
-<glyph unicode="C" horiz-adv-x="1340" d="M1273 485Q1256 250 1100 115T687 -20Q407 -20 247 168T86 686V775Q86 985 160 1145T371 1390T691 1476Q943 1476 1097 1341T1275 962H975Q964 1103 897 1166T691 1230Q541 1230 467 1123T390 789V679Q390 443 461 334T687
-225Q826 225 894 288T973 485H1273Z" />
-<glyph unicode="D" horiz-adv-x="1331" d="M130 0V1456H578Q770 1456 921 1370T1158 1124T1243 761V694Q1243 491 1160 333T924 88T581 0H130ZM430 1213V241H575Q751 241 844 356T939 685V762Q939 984 847 1098T578 1213H430Z" />
-<glyph unicode="E" horiz-adv-x="1152" d="M1006 631H430V241H1106V0H130V1456H1104V1213H430V866H1006V631Z" />
-<glyph unicode="F" horiz-adv-x="1122" d="M1006 595H430V0H130V1456H1078V1213H430V837H1006V595Z" />
-<glyph unicode="G" horiz-adv-x="1395" d="M1282 184Q1201 87 1053 34T725 -20Q536 -20 394 62T174 302T94 671V770Q94 988 167 1147T379 1391T704 1476Q963 1476 1109 1353T1282 993H990Q970 1118 902 1176T713 1234Q560 1234 480 1119T399 777V684Q399 455 486
-338T741 221Q910 221 982 293V544H709V765H1282V184Z" />
-<glyph unicode="H" horiz-adv-x="1447" d="M1315 0H1015V624H430V0H130V1456H430V866H1015V1456H1315V0Z" />
-<glyph unicode="I" horiz-adv-x="597" d="M449 0H149V1456H449V0Z" />
-<glyph unicode="J" horiz-adv-x="1144" d="M717 1456H1017V448Q1017 309 956 203T782 38T529 -20Q298 -20 169 97T40 430H342Q342 323 387 272T529 221Q615 221 666 280T717 448V1456Z" />
-<glyph unicode="K" horiz-adv-x="1300" d="M586 584L430 416V0H130V1456H430V796L562 977L933 1456H1302L785 809L1317 0H960L586 584Z" />
-<glyph unicode="L" horiz-adv-x="1109" d="M430 241H1067V0H130V1456H430V241Z" />
-<glyph unicode="M" horiz-adv-x="1794" d="M522 1456L896 400L1268 1456H1662V0H1361V398L1391 1085L998 0H792L400 1084L430 398V0H130V1456H522Z" />
-<glyph unicode="N" horiz-adv-x="1446" d="M1314 0H1014L430 958V0H130V1456H430L1015 496V1456H1314V0Z" />
-<glyph unicode="O" horiz-adv-x="1414" d="M1326 695Q1326 480 1250 318T1033 68T708 -20Q527 -20 385 67T165 315T86 687V759Q86 974 163 1137T382 1388T706 1476T1029 1389T1248 1138T1326 760V695ZM1022 761Q1022 990 940 1109T706 1228Q555 1228 473 1111T390
-766V695Q390 472 472 349T708 226Q859 226 940 344T1022 690V761Z" />
-<glyph unicode="P" horiz-adv-x="1321" d="M430 513V0H130V1456H698Q862 1456 986 1396T1178 1226T1245 974Q1245 760 1099 637T693 513H430ZM430 756H698Q817 756 879 812T942 972Q942 1079 879 1145T705 1213H430V756Z" />
-<glyph unicode="Q" horiz-adv-x="1414" d="M1324 695Q1324 491 1258 341T1075 99L1317 -91L1126 -260L816 -11Q763 -20 706 -20Q525 -20 383 67T163 315T84 687V759Q84 974 161 1137T380 1388T704 1476T1027 1389T1246 1138T1324 760V695ZM1020 761Q1020 990 938
-1109T704 1228Q553 1228 471 1111T388 766V695Q388 472 470 349T706 226Q857 226 938 344T1020 690V761Z" />
-<glyph unicode="R" horiz-adv-x="1307" d="M669 533H430V0H130V1456H671Q929 1456 1069 1341T1209 1016Q1209 867 1145 768T949 609L1264 14V0H942L669 533ZM430 776H672Q785 776 847 833T909 992Q909 1095 851 1154T671 1213H430V776Z" />
-<glyph unicode="S" horiz-adv-x="1259" d="M885 382Q885 467 825 512T609 608T362 708Q114 842 114 1069Q114 1187 180 1279T371 1424T651 1476Q807 1476 929 1420T1118 1260T1186 1026H886Q886 1126 823 1181T646 1237Q536 1237 475 1191T414 1068Q414 997 485
-949T696 859Q952 782 1069 668T1186 384Q1186 195 1043 88T658 -20Q490 -20 352 41T142 210T69 458H370Q370 217 658 217Q765 217 825 260T885 382Z" />
-<glyph unicode="T" horiz-adv-x="1267" d="M1226 1213H780V0H480V1213H40V1456H1226V1213Z" />
-<glyph unicode="U" horiz-adv-x="1348" d="M1232 1456V497Q1232 258 1083 119T674 -20Q419 -20 269 115T116 486V1456H416V495Q416 352 484 287T674 221Q927 221 931 487V1456H1232Z" />
-<glyph unicode="V" horiz-adv-x="1339" d="M668 361L998 1456H1332L825 0H512L7 1456H340L668 361Z" />
-<glyph unicode="W" horiz-adv-x="1791" d="M1264 420L1460 1456H1759L1436 0H1134L897 974L660 0H358L35 1456H334L531 422L771 1456H1025L1264 420Z" />
-<glyph unicode="X" horiz-adv-x="1301" d="M651 954L924 1456H1269L845 734L1280 0H931L651 510L371 0H22L457 734L33 1456H378L651 954Z" />
-<glyph unicode="Y" horiz-adv-x="1266" d="M632 800L935 1456H1263L785 528V0H480V528L2 1456H331L632 800Z" />
-<glyph unicode="Z" horiz-adv-x="1241" d="M448 241H1182V0H73V176L793 1213H74V1456H1166V1284L448 241Z" />
-<glyph unicode="[" horiz-adv-x="569" d="M552 1471H410V-116H552V-339H120V1694H552V1471Z" />
-<glyph unicode="\" horiz-adv-x="864" d="M0 1456H295L903 -125H607L0 1456Z" />
-<glyph unicode="]" horiz-adv-x="569" d="M13 1694H445V-339H13V-116H156V1471H13V1694Z" />
-<glyph unicode="^" horiz-adv-x="895" d="M448 1186L274 729H44L343 1456H553L852 729H623L448 1186Z" />
-<glyph unicode="_" horiz-adv-x="914" d="M912 -226H1V0H912V-226Z" />
-<glyph unicode="`" horiz-adv-x="677" d="M565 1226H328L52 1536H367L565 1226Z" />
-<glyph unicode="a" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987 719V250Q988
-96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201Z" />
-<glyph unicode="b" horiz-adv-x="1153" d="M1086 531Q1086 271 975 126T665 -20Q489 -20 384 115L371 0H111V1536H400V985Q500 1102 663 1102Q861 1102 973 957T1086 547V531ZM797 552Q797 716 745 791T590 867Q452 867 400 754V327Q453 213 592 213Q732 213 776
-351Q797 417 797 552Z" />
-<glyph unicode="c" horiz-adv-x="1068" d="M561 213Q641 213 691 257T743 374H1014Q1013 264 954 173T793 31T566 -20Q334 -20 200 127T66 535V554Q66 804 199 953T564 1102Q767 1102 889 987T1014 679H743Q741 763 691 815T559 868Q458 868 407 795T355 556V526Q355
-359 406 286T561 213Z" />
-<glyph unicode="d" horiz-adv-x="1154" d="M66 549Q66 802 179 952T490 1102Q648 1102 751 984V1536H1041V0H780L766 115Q658 -20 488 -20Q297 -20 182 130T66 549ZM355 528Q355 376 408 295T562 214Q696 214 751 327V754Q697 867 564 867Q355 867 355 528Z" />
-<glyph unicode="e" horiz-adv-x="1107" d="M609 -20Q371 -20 222 126T72 515V543Q72 706 135 834T313 1032T577 1102Q799 1102 926 962T1054 565V447H365Q379 341 449 277T628 213Q795 213 889 334L1031 175Q966 83 855 32T609 -20ZM576 868Q490 868 437 810T368
-644H770V667Q768 763 718 815T576 868Z" />
-<glyph unicode="f" horiz-adv-x="734" d="M190 0V870H29V1082H190V1174Q190 1356 294 1456T587 1557Q647 1557 734 1537L731 1313Q695 1322 643 1322Q480 1322 480 1169V1082H695V870H480V0H190Z" />
-<glyph unicode="g" horiz-adv-x="1169" d="M69 549Q69 798 187 950T507 1102Q685 1102 784 980L796 1082H1058V36Q1058 -106 994 -211T812 -371T538 -426Q419 -426 306 -379T135 -256L263 -80Q371 -201 525 -201Q640 -201 704 -140T768 35V93Q668 -20 505 -20Q310
--20 190 132T69 537V549ZM358 528Q358 381 417 298T579 214Q711 214 768 313V768Q710 867 581 867Q477 867 418 782T358 528Z" />
-<glyph unicode="h" horiz-adv-x="1146" d="M393 964Q508 1102 682 1102Q1034 1102 1039 693V0H750V685Q750 778 710 822T577 867Q450 867 393 769V0H104V1536H393V964Z" />
-<glyph unicode="i" horiz-adv-x="543" d="M416 0H126V1082H416V0ZM109 1362Q109 1427 152 1469T271 1511Q345 1511 389 1469T433 1362Q433 1296 389 1254T271 1212T154 1254T109 1362Z" />
-<glyph unicode="j" horiz-adv-x="532" d="M417 1082V-59Q417 -238 322 -337T48 -437Q-27 -437 -95 -420V-191Q-43 -200 -4 -200Q127 -200 127 -61V1082H417ZM104 1362Q104 1427 147 1469T266 1511T384 1469T428 1362Q428 1296 384 1254T266 1212T149 1254T104 1362Z" />
-<glyph unicode="k" horiz-adv-x="1094" d="M504 434L400 330V0H111V1536H400V685L456 757L733 1082H1080L689 631L1114 0H782L504 434Z" />
-<glyph unicode="l" horiz-adv-x="543" d="M416 0H126V1536H416V0Z" />
-<glyph unicode="m" horiz-adv-x="1773" d="M382 1082L391 961Q506 1102 702 1102Q911 1102 989 937Q1103 1102 1314 1102Q1490 1102 1576 1000T1662 691V0H1372V690Q1372 782 1336 824T1209 867Q1079 867 1029 743L1030 0H741V689Q741 783 704 825T578 867Q455
-867 400 765V0H111V1082H382Z" />
-<glyph unicode="n" horiz-adv-x="1147" d="M377 1082L386 957Q502 1102 697 1102Q869 1102 953 1001T1039 699V0H750V692Q750 784 710 825T577 867Q455 867 394 763V0H105V1082H377Z" />
-<glyph unicode="o" horiz-adv-x="1158" d="M66 551Q66 712 128 838T306 1033T577 1102Q796 1102 934 968T1089 604L1091 530Q1091 281 952 131T579 -20T206 130T66 538V551ZM355 530Q355 376 413 295T579 213Q684 213 743 293T802 551Q802 702 743 785T577 868Q471
-868 413 786T355 530Z" />
-<glyph unicode="p" horiz-adv-x="1153" d="M1085 531Q1085 281 972 131T665 -20Q501 -20 400 94V-416H111V1082H379L389 976Q494 1102 663 1102Q863 1102 974 954T1085 546V531ZM796 552Q796 703 743 785T587 867Q451 867 400 763V320Q453 213 589 213Q796 213 796 552Z" />
-<glyph unicode="q" horiz-adv-x="1157" d="M66 551Q66 806 179 954T491 1102Q665 1102 768 969L787 1082H1041V-416H751V93Q651 -20 489 -20Q296 -20 181 130T66 551ZM355 530Q355 375 409 294T563 213Q696 213 751 319V766Q697 868 565 868Q465 868 410 787T355 530Z" />
-<glyph unicode="r" horiz-adv-x="747" d="M719 811Q660 819 615 819Q451 819 400 708V0H111V1082H384L392 953Q479 1102 633 1102Q681 1102 723 1089L719 811Z" />
-<glyph unicode="s" horiz-adv-x="1053" d="M697 299Q697 352 645 382T476 437Q90 518 90 765Q90 909 209 1005T522 1102Q728 1102 851 1005T975 753H686Q686 815 646 855T521 896Q448 896 408 863T368 779Q368 731 413 702T567 651T749 602Q978 518 978 311Q978
-163 851 72T523 -20Q387 -20 282 28T116 161T56 344H330Q334 267 387 226T529 185Q612 185 654 216T697 299Z" />
-<glyph unicode="t" horiz-adv-x="692" d="M457 1348V1082H642V870H457V330Q457 270 480 244T568 218Q616 218 653 225V6Q568 -20 478 -20Q174 -20 168 287V870H10V1082H168V1348H457Z" />
-<glyph unicode="u" horiz-adv-x="1146" d="M759 110Q652 -20 463 -20Q289 -20 198 80T104 373V1082H393V383Q393 214 547 214Q694 214 749 316V1082H1039V0H767L759 110Z" />
-<glyph unicode="v" horiz-adv-x="1035" d="M516 353L717 1082H1019L654 0H378L13 1082H315L516 353Z" />
-<glyph unicode="w" horiz-adv-x="1505" d="M1052 393L1194 1082H1473L1197 0H955L750 681L545 0H304L28 1082H307L448 394L646 1082H855L1052 393Z" />
-<glyph unicode="x" horiz-adv-x="1042" d="M523 759L705 1082H1014L706 552L1027 0H717L524 340L332 0H21L342 552L35 1082H345L523 759Z" />
-<glyph unicode="y" horiz-adv-x="1028" d="M515 409L715 1082H1025L590 -168L566 -225Q469 -437 246 -437Q183 -437 118 -418V-199L162 -200Q244 -200 284 -175T348 -92L382 -3L3 1082H314L515 409Z" />
-<glyph unicode="z" horiz-adv-x="1042" d="M443 233H972V0H74V176L583 848H89V1082H956V911L443 233Z" />
-<glyph unicode="{" horiz-adv-x="676" d="M586 -360Q226 -259 226 105V304Q226 515 48 515V722Q222 722 226 921V1133Q226 1318 316 1432T586 1597L642 1436Q566 1408 527 1339T486 1146V936Q486 710 307 619Q486 527 486 300V88Q491 -146 642 -198L586 -360Z" />
-<glyph unicode="|" horiz-adv-x="518" d="M348 -270H173V1456H348V-270Z" />
-<glyph unicode="}" horiz-adv-x="676" d="M34 -198Q186 -144 190 92V304Q190 530 373 618Q190 706 190 937V1146Q186 1379 34 1436L90 1597Q269 1547 359 1434T450 1136V921Q454 722 628 722V515Q450 515 450 306V89Q442 -261 90 -360L34 -198Z" />
-<glyph unicode="~" horiz-adv-x="1328" d="M1221 793Q1221 607 1128 491T888 375Q814 375 751 403T604 511T451 591Q393 591 357 541T321 413L106 415Q106 601 196 714T437 827Q515 827 579 797T724 690T873 612Q932 612 969 665T1007 794L1221 793Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="510" />
-<glyph unicode="&#xa1;" horiz-adv-x="578" d="M170 639H411L444 -369H137L170 639ZM452 948Q452 881 406 838T290 795T174 838T128 948T172 1058T290 1101T407 1058T452 948Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1178" d="M594 213Q674 213 724 257T776 374H1048Q1046 229 950 124T698 -11V-245H498V-12Q311 18 205 162T99 532V554Q99 772 204 917T498 1094V1318H698V1093Q861 1064 953 953T1048 679H776Q774 765 724 816T593 868Q491
-868 440 794T388 559V526Q388 358 439 286T594 213Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1217" d="M564 576L570 437Q570 314 508 241H1161V0H102V241H194Q266 259 266 420L261 576H99V812H253L246 1039Q246 1241 369 1358T700 1475Q912 1475 1033 1363T1154 1058H867Q867 1143 824 1188T699 1233Q633 1233 590
-1184T546 1039L555 812H864V576H564Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1418" d="M1073 107Q914 -20 712 -20Q509 -20 351 106L222 -26L81 118L216 255Q116 411 116 608Q116 812 225 973L81 1120L222 1264L364 1119Q519 1234 712 1234Q906 1234 1061 1117L1205 1265L1347 1120L1199 969Q1306 810
-1306 608Q1306 415 1208 259L1347 118L1205 -27L1073 107ZM302 608Q302 490 356 389T505 229T712 170Q822 170 917 228T1067 388T1121 608Q1121 727 1067 827T918 986T712 1044Q600 1044 505 986T356 828T302 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1098" d="M550 892L774 1456H1087L765 742H983V567H695V452H983V278H695V0H395V278H89V452H395V567H89V742H333L10 1456H325L550 892Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="516" d="M128 -270V525H388V-270H128ZM388 698H128V1456H388V698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1287" d="M1180 481Q1180 299 1018 210Q1153 108 1153 -78Q1153 -253 1016 -352T636 -452Q379 -452 236 -345T92 -35L381 -34Q381 -123 445 -170T636 -218Q748 -218 806 -181T864 -80Q864 -15 800 26T553 117T278 223T140
-353T94 534Q94 714 256 807Q120 910 120 1095Q120 1266 260 1371T640 1476Q887 1476 1023 1363T1159 1049H870Q870 1136 809 1189T640 1243Q530 1243 470 1204T410 1097Q410 1024 465 987T706 901T988 797T1133 666T1180 481ZM458 704Q383 662 383 563Q383 494
-424 457T590 379L812 312Q894 359 894 452Q894 514 849 553T685 633L458 704Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="956" d="M371 1365Q371 1312 332 1276T232 1239Q170 1239 132 1276T94 1365T132 1454T232 1492T332 1455T371 1365ZM581 1365Q581 1419 621 1455T720 1492Q779 1492 818 1455T858 1365Q858 1313 820 1276T720 1238T620 1275T581
-1365Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1606" d="M1117 596Q1117 444 1030 363T782 282T528 388T433 675V788Q433 962 528 1068T782 1175Q945 1175 1031 1093T1118 861H962Q962 957 916 998T782 1040Q690 1040 640 973T588 792V669Q588 552 639 485T782 417Q871
-417 916 457T961 596H1117ZM1383 729Q1383 895 1308 1037T1096 1265T796 1351Q637 1351 501 1269T286 1043T208 729T285 415T499 188T796 104T1093 189T1307 418T1383 729ZM86 729Q86 931 179 1104T438 1376T796 1476T1153 1377T1412 1104T1506 729Q1506 525 1411
-352T1152 79T796 -20Q603 -20 439 80T180 353T86 729Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="909" d="M604 705Q594 732 587 773Q510 691 386 691Q268 691 203 752T137 919Q137 1029 221 1089T478 1150H580V1201Q580 1328 464 1328Q399 1328 363 1303T326 1229L153 1243Q153 1347 240 1411T464 1476Q599 1476 677 1404T755
-1199V883Q755 786 781 705H604ZM429 835Q469 835 511 853T580 897V1033H474Q398 1032 355 1002T312 923Q312 835 429 835Z" />
-<glyph unicode="&#xab;" horiz-adv-x="1023" d="M559 524L799 125H613L333 515V534L613 924H799L559 524ZM688 524L928 125H742L462 515V534L742 924H928L688 524Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1129" d="M961 374H761V634H126V805H961V374Z" />
-<glyph unicode="&#xad;" horiz-adv-x="794" d="M673 507H110V740H673V507Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1606" d="M86 729Q86 931 179 1104T438 1376T796 1476T1153 1377T1412 1104T1506 729Q1506 525 1411 352T1152 79T796 -20Q603 -20 439 80T180 353T86 729ZM1383 729Q1383 895 1308 1037T1096 1265T796 1351Q637 1351 501
-1269T286 1043T208 729T285 415T499 188T796 104T1093 189T1307 418T1383 729ZM652 653V316H501V1166H782Q933 1166 1020 1098T1107 903Q1107 791 994 729Q1055 698 1079 643T1104 505T1107 389T1121 332V316H966Q953 350 953 510Q953 586 920 619T810 653H652ZM652
-787H788Q862 787 909 819T957 903Q957 973 922 1002T793 1033H652V787Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="1026" d="M858 1287H168V1454H858V1287Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="795" d="M126 1200Q126 1314 207 1395T398 1476Q507 1476 586 1396T666 1200T587 1007T398 928Q290 928 208 1006T126 1200ZM398 1076Q451 1076 485 1111T520 1200Q520 1252 486 1290T398 1328T309 1290T273 1200T309 1112T398
-1076Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1100" d="M677 942H1005V701H677V337H424V701H89V942H424V1285H677V942ZM977 1H113V236H977V1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="763" d="M693 667H73V805L360 1062Q416 1111 440 1153T465 1218Q465 1302 370 1302Q320 1302 291 1271T261 1193H55Q55 1309 140 1388T361 1467Q509 1467 589 1403T670 1219Q670 1149 634 1091T490 946L342 831H693V667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="763" d="M273 1137H355Q474 1137 474 1225Q474 1260 446 1281T368 1302Q326 1302 297 1287T267 1242H62Q62 1344 146 1405T362 1467Q507 1467 592 1408T678 1241Q678 1122 543 1072Q693 1031 693 888Q693 783 602 720T362
-656Q220 656 134 722T48 903H254Q254 869 288 845T374 820Q434 820 460 846T487 908Q487 1000 365 1001H273V1137Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="679" d="M298 1536H613L336 1226H101L298 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1261" d="M428 1082V459Q428 333 468 274T608 214Q757 214 813 319V1082H1102V0H833L827 68Q738 -21 602 -21Q500 -21 428 24V-416H139V1082H428Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="1003" d="M650 0V520H570Q340 520 208 647T75 988Q75 1201 208 1328T571 1456H869V0H650Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="617" d="M140 697Q140 766 186 809T303 852T420 809T467 697T420 586T303 543Q231 543 186 586T140 697Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="548" d="M345 7L334 -51Q484 -78 484 -224Q484 -334 393 -398T135 -462L128 -295Q240 -295 240 -214Q240 -172 207 -157T98 -136L129 7H345Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="763" d="M528 667H324V1215L135 1174V1332L509 1453H528V667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="936" d="M118 1121Q118 1281 213 1378T464 1476T715 1379T811 1116V1044Q811 885 717 788T466 690Q308 690 213 788T118 1049V1121ZM293 1044Q293 946 339 891T466 836Q544 836 589 890T636 1041V1121Q636 1218 590 1273T464
-1328Q386 1328 340 1274T293 1117V1044Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="1023" d="M272 923L552 533V514L272 124H85L325 523L85 923H272ZM665 923L945 533V514L665 124H478L718 523L478 923H665Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1470" d="M494 664H290V1212L101 1171V1329L475 1450H494V664ZM458 117L317 193L1028 1331L1169 1255L458 117ZM1302 326H1390V159H1302V0H1097V159H751L739 294L1096 789H1302V326ZM935 326H1097V538L1083 516L935 326Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1559" d="M416 117L275 193L986 1331L1127 1255L416 117ZM477 670H273V1218L84 1177V1335L458 1456H477V670ZM1477 0H857V138L1144 395Q1200 444 1224 486T1249 551Q1249 635 1154 635Q1104 635 1075 604T1045 526H839Q839
-642 924 721T1145 800Q1293 800 1373 736T1454 552Q1454 482 1418 424T1274 279L1126 164H1477V0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1655" d="M619 117L478 193L1189 1331L1330 1255L619 117ZM1460 326H1548V159H1460V0H1255V159H909L897 294L1254 789H1460V326ZM1093 326H1255V538L1241 516L1093 326ZM319 1137H401Q520 1137 520 1225Q520 1260 492 1281T414
-1302Q372 1302 343 1287T313 1242H108Q108 1344 192 1405T408 1467Q553 1467 638 1408T724 1241Q724 1122 589 1072Q739 1031 739 888Q739 783 648 720T408 656Q266 656 180 722T94 903H300Q300 869 334 845T420 820Q480 820 506 846T533 908Q533 1000 411 1001H319V1137Z"
-/>
-<glyph unicode="&#xbf;" horiz-adv-x="1019" d="M666 643Q666 510 635 428T525 272T417 162T374 89T359 8Q359 -149 513 -149Q590 -149 635 -104T683 22H972Q970 -170 849 -277T518 -385Q305 -385 187 -284T69 6Q69 165 222 318L319 411Q369 456 388 505T410 643H666ZM702
-949Q702 882 656 839T540 796T424 839T378 949T422 1059T540 1102T657 1059T702 949Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543ZM836 1536H599L323 1846H638L836 1536Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543ZM750 1846H1065L788 1536H553L750 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543ZM1076 1566V1554H846L692 1699L538 1554H312V1570L608 1846H776L1076 1566Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543ZM1068 1832Q1068 1719 1002 1643T841 1566Q803 1566 774 1574T692 1611T617 1645T567 1652Q532 1652 508 1627T483 1556L315
-1566Q315 1677 380 1755T541 1833Q571 1833 597 1826T684 1789T767 1754T815 1748Q850 1748 875 1772T901 1843L1068 1832Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543ZM587 1675Q587 1622 548 1586T448 1549Q386 1549 348 1586T310 1675T348 1764T448 1802T548 1765T587 1675ZM797 1675Q797
-1729 837 1765T936 1802Q995 1802 1034 1765T1074 1675Q1074 1623 1036 1586T936 1548T836 1585T797 1675Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1378" d="M952 300H426L326 0H7L549 1456H827L1372 0H1053L952 300ZM507 543H871L688 1088L507 543ZM470 1730Q470 1816 535 1875T693 1935Q785 1935 850 1877T916 1730Q916 1645 852 1587T693 1529Q596 1529 533 1588T470
-1730ZM585 1730Q585 1686 614 1655T693 1623T772 1654T801 1730Q801 1776 772 1807T693 1839T615 1808T585 1730Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1925" d="M1865 0H968L954 333H508L341 0H2L788 1456H1804V1220H1206L1221 865H1723V629H1231L1247 235H1865V0ZM633 580H944L920 1150L633 580Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1340" d="M1273 485Q1256 250 1100 115T687 -20Q407 -20 247 168T86 686V775Q86 985 160 1145T371 1390T691 1476Q943 1476 1097 1341T1275 962H975Q964 1103 897 1166T691 1230Q541 1230 467 1123T390 789V679Q390 443 461
-334T687 225Q826 225 894 288T973 485H1273ZM797 6L786 -52Q936 -79 936 -225Q936 -335 845 -399T587 -463L580 -296Q692 -296 692 -215Q692 -173 659 -158T550 -137L581 6H797Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1152" d="M1006 631H430V241H1106V0H130V1456H1104V1213H430V866H1006V631ZM779 1539H542L266 1849H581L779 1539Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1152" d="M1006 631H430V241H1106V0H130V1456H1104V1213H430V866H1006V631ZM693 1849H1008L731 1539H496L693 1849Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1152" d="M1006 631H430V241H1106V0H130V1456H1104V1213H430V866H1006V631ZM1019 1569V1557H789L635 1702L481 1557H255V1573L551 1849H719L1019 1569Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1152" d="M1006 631H430V241H1106V0H130V1456H1104V1213H430V866H1006V631ZM530 1678Q530 1625 491 1589T391 1552Q329 1552 291 1589T253 1678T291 1767T391 1805T491 1768T530 1678ZM740 1678Q740 1732 780 1768T879 1805Q938
-1805 977 1768T1017 1678Q1017 1626 979 1589T879 1551T779 1588T740 1678Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="597" d="M449 0H149V1456H449V0ZM443 1539H206L-70 1849H245L443 1539Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="597" d="M449 0H149V1456H449V0ZM356 1849H671L394 1539H159L356 1849Z" />
-<glyph unicode="&#xce;" horiz-adv-x="597" d="M449 0H149V1456H449V0ZM683 1569V1557H453L299 1702L145 1557H-81V1573L215 1849H383L683 1569Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="597" d="M449 0H149V1456H449V0ZM194 1678Q194 1625 155 1589T55 1552Q-7 1552 -45 1589T-83 1678T-45 1767T55 1805T155 1768T194 1678ZM404 1678Q404 1732 444 1768T543 1805Q602 1805 641 1768T681 1678Q681 1626 643
-1589T543 1551T443 1588T404 1678Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1361" d="M160 0V642H-20V825H160V1456H608Q800 1456 951 1370T1188 1124T1273 761V694Q1273 491 1190 333T954 88T611 0H160ZM679 642H460V241H605Q783 241 876 358T969 694V762Q969 984 877 1098T608 1213H460V825H679V642Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1446" d="M1314 0H1014L430 958V0H130V1456H430L1015 496V1456H1314V0ZM1102 1832Q1102 1719 1036 1643T875 1566Q837 1566 808 1574T726 1611T651 1645T601 1652Q566 1652 542 1627T517 1556L349 1566Q349 1677 414 1755T575
-1833Q605 1833 631 1826T718 1789T801 1754T849 1748Q884 1748 909 1772T935 1843L1102 1832Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1414" d="M1326 695Q1326 480 1250 318T1033 68T708 -20Q527 -20 385 67T165 315T86 687V759Q86 974 163 1137T382 1388T706 1476T1029 1389T1248 1138T1326 760V695ZM1022 761Q1022 990 940 1109T706 1228Q555 1228 473
-1111T390 766V695Q390 472 472 349T708 226Q859 226 940 344T1022 690V761ZM850 1536H613L337 1846H652L850 1536Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1414" d="M1326 695Q1326 480 1250 318T1033 68T708 -20Q527 -20 385 67T165 315T86 687V759Q86 974 163 1137T382 1388T706 1476T1029 1389T1248 1138T1326 760V695ZM1022 761Q1022 990 940 1109T706 1228Q555 1228 473
-1111T390 766V695Q390 472 472 349T708 226Q859 226 940 344T1022 690V761ZM764 1846H1079L802 1536H567L764 1846Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1414" d="M1326 695Q1326 480 1250 318T1033 68T708 -20Q527 -20 385 67T165 315T86 687V759Q86 974 163 1137T382 1388T706 1476T1029 1389T1248 1138T1326 760V695ZM1022 761Q1022 990 940 1109T706 1228Q555 1228 473
-1111T390 766V695Q390 472 472 349T708 226Q859 226 940 344T1022 690V761ZM1090 1566V1554H860L706 1699L552 1554H326V1570L622 1846H790L1090 1566Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1414" d="M1326 695Q1326 480 1250 318T1033 68T708 -20Q527 -20 385 67T165 315T86 687V759Q86 974 163 1137T382 1388T706 1476T1029 1389T1248 1138T1326 760V695ZM1022 761Q1022 990 940 1109T706 1228Q555 1228 473
-1111T390 766V695Q390 472 472 349T708 226Q859 226 940 344T1022 690V761ZM1082 1832Q1082 1719 1016 1643T855 1566Q817 1566 788 1574T706 1611T631 1645T581 1652Q546 1652 522 1627T497 1556L329 1566Q329 1677 394 1755T555 1833Q585 1833 611 1826T698 1789T781
-1754T829 1748Q864 1748 889 1772T915 1843L1082 1832Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1414" d="M1326 695Q1326 480 1250 318T1033 68T708 -20Q527 -20 385 67T165 315T86 687V759Q86 974 163 1137T382 1388T706 1476T1029 1389T1248 1138T1326 760V695ZM1022 761Q1022 990 940 1109T706 1228Q555 1228 473
-1111T390 766V695Q390 472 472 349T708 226Q859 226 940 344T1022 690V761ZM601 1675Q601 1622 562 1586T462 1549Q400 1549 362 1586T324 1675T362 1764T462 1802T562 1765T601 1675ZM811 1675Q811 1729 851 1765T950 1802Q1009 1802 1048 1765T1088 1675Q1088
-1623 1050 1586T950 1548T850 1585T811 1675Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1088" d="M65 373L372 686L65 999L235 1167L539 856L844 1167L1014 999L707 686L1014 373L844 205L539 515L235 205L65 373Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1411" d="M1333 695Q1333 480 1257 318T1040 68T715 -20Q551 -20 420 50L335 -95H147L290 147Q93 342 93 702V759Q93 974 170 1137T389 1388T713 1476Q888 1476 1027 1394L1101 1518H1288L1154 1291Q1333 1093 1333 754V695ZM397
-695Q397 523 446 410L893 1167Q820 1228 713 1228Q562 1228 480 1111T397 766V695ZM1030 761Q1030 912 992 1017L552 273Q622 226 715 226Q866 226 947 344T1030 690V761Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1348" d="M1232 1456V497Q1232 258 1083 119T674 -20Q419 -20 269 115T116 486V1456H416V495Q416 352 484 287T674 221Q927 221 931 487V1456H1232ZM814 1536H577L301 1846H616L814 1536Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1348" d="M1232 1456V497Q1232 258 1083 119T674 -20Q419 -20 269 115T116 486V1456H416V495Q416 352 484 287T674 221Q927 221 931 487V1456H1232ZM728 1846H1043L766 1536H531L728 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1348" d="M1232 1456V497Q1232 258 1083 119T674 -20Q419 -20 269 115T116 486V1456H416V495Q416 352 484 287T674 221Q927 221 931 487V1456H1232ZM1054 1566V1554H824L670 1699L516 1554H290V1570L586 1846H754L1054 1566Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1348" d="M1232 1456V497Q1232 258 1083 119T674 -20Q419 -20 269 115T116 486V1456H416V495Q416 352 484 287T674 221Q927 221 931 487V1456H1232ZM565 1675Q565 1622 526 1586T426 1549Q364 1549 326 1586T288 1675T326
-1764T426 1802T526 1765T565 1675ZM775 1675Q775 1729 815 1765T914 1802Q973 1802 1012 1765T1052 1675Q1052 1623 1014 1586T914 1548T814 1585T775 1675Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1266" d="M632 800L935 1456H1263L785 528V0H480V528L2 1456H331L632 800ZM693 1846H1008L731 1536H496L693 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1246" d="M422 1456V1189H652Q814 1188 933 1133T1117 975T1181 738Q1181 536 1043 414T664 287H422V0H133V1456H422ZM422 956V520H645Q762 520 827 579T892 736T829 894T653 956H422Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1292" d="M424 0H135V1101Q135 1321 259 1440T609 1559Q800 1559 915 1460T1031 1189Q1031 1081 978 994T924 830Q924 793 954 754T1073 636Q1224 502 1224 354Q1224 177 1109 79T779 -20Q698 -20 619 -4T500 36L554 265Q652
-213 773 213Q852 213 894 249T936 349Q936 395 902 438T785 548Q635 668 635 818Q635 914 690 1004T745 1174Q745 1244 701 1285T588 1327Q429 1327 424 1114V0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987
-719V250Q988 96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201ZM695 1226H458L182 1536H497L695 1226Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987
-719V250Q988 96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201ZM609 1536H924L647 1226H412L609 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987
-719V250Q988 96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201ZM935 1256V1244H705L551 1389L397 1244H171V1260L467 1536H635L935 1256Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987
-719V250Q988 96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201ZM927 1779Q927 1666 861 1590T700 1513Q662 1513 633 1521T551 1558T476 1592T426 1599Q391 1599 367 1574T342 1503L174 1513Q174 1624
-239 1702T400 1780Q430 1780 456 1773T543 1736T626 1701T674 1695Q709 1695 734 1719T760 1790L927 1779Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987
-719V250Q988 96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201ZM446 1365Q446 1312 407 1276T307 1239Q245 1239 207 1276T169 1365T207 1454T307 1492T407 1455T446 1365ZM656 1365Q656 1419 696
-1455T795 1492Q854 1492 893 1455T933 1365Q933 1313 895 1276T795 1238T695 1275T656 1365Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1098" d="M738 0Q718 39 709 97Q604 -20 436 -20Q277 -20 173 72T68 304Q68 476 195 568T564 661H697V723Q697 798 659 843T537 888Q464 888 423 853T381 757H92Q92 851 150 931T314 1056T552 1102Q752 1102 869 1002T987
-719V250Q988 96 1030 17V0H738ZM499 201Q563 201 617 229T697 306V492H589Q372 492 358 342L357 325Q357 271 395 236T499 201ZM329 1420Q329 1506 394 1565T552 1625Q644 1625 709 1567T775 1420Q775 1335 711 1277T552 1219Q455 1219 392 1278T329 1420ZM444
-1420Q444 1376 473 1345T552 1313T631 1344T660 1420Q660 1466 631 1497T552 1529T474 1498T444 1420Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1729" d="M1246 -20Q999 -20 860 127Q796 58 694 19T466 -20Q280 -20 173 69T66 319Q66 476 190 562T557 649H725V706Q725 782 685 825T567 868Q485 868 438 833T390 745L101 764Q101 913 231 1007T570 1102Q781 1102 897
-992Q1023 1104 1223 1102Q1435 1102 1556 971T1677 607V450H1009Q1020 334 1089 273T1276 212Q1353 212 1418 228T1571 289L1648 100Q1575 44 1468 12T1246 -20ZM521 192Q570 192 628 214T725 272V461H561Q466 460 411 418T355 315Q355 259 395 226T521 192ZM1223
-868Q1133 868 1079 811T1011 644H1393V672Q1393 766 1350 817T1223 868Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1068" d="M561 213Q641 213 691 257T743 374H1014Q1013 264 954 173T793 31T566 -20Q334 -20 200 127T66 535V554Q66 804 199 953T564 1102Q767 1102 889 987T1014 679H743Q741 763 691 815T559 868Q458 868 407 795T355
-556V526Q355 359 406 286T561 213ZM666 6L655 -52Q805 -79 805 -225Q805 -335 714 -399T456 -463L449 -296Q561 -296 561 -215Q561 -173 528 -158T419 -137L450 6H666Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1107" d="M609 -20Q371 -20 222 126T72 515V543Q72 706 135 834T313 1032T577 1102Q799 1102 926 962T1054 565V447H365Q379 341 449 277T628 213Q795 213 889 334L1031 175Q966 83 855 32T609 -20ZM576 868Q490 868 437
-810T368 644H770V667Q768 763 718 815T576 868ZM688 1226H451L175 1536H490L688 1226Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1107" d="M609 -20Q371 -20 222 126T72 515V543Q72 706 135 834T313 1032T577 1102Q799 1102 926 962T1054 565V447H365Q379 341 449 277T628 213Q795 213 889 334L1031 175Q966 83 855 32T609 -20ZM576 868Q490 868 437
-810T368 644H770V667Q768 763 718 815T576 868ZM602 1536H917L640 1226H405L602 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1107" d="M609 -20Q371 -20 222 126T72 515V543Q72 706 135 834T313 1032T577 1102Q799 1102 926 962T1054 565V447H365Q379 341 449 277T628 213Q795 213 889 334L1031 175Q966 83 855 32T609 -20ZM576 868Q490 868 437
-810T368 644H770V667Q768 763 718 815T576 868ZM928 1256V1244H698L544 1389L390 1244H164V1260L460 1536H628L928 1256Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1107" d="M609 -20Q371 -20 222 126T72 515V543Q72 706 135 834T313 1032T577 1102Q799 1102 926 962T1054 565V447H365Q379 341 449 277T628 213Q795 213 889 334L1031 175Q966 83 855 32T609 -20ZM576 868Q490 868 437
-810T368 644H770V667Q768 763 718 815T576 868ZM439 1365Q439 1312 400 1276T300 1239Q238 1239 200 1276T162 1365T200 1454T300 1492T400 1455T439 1365ZM649 1365Q649 1419 689 1455T788 1492Q847 1492 886 1455T926 1365Q926 1313 888 1276T788 1238T688 1275T649
-1365Z" />
-<glyph unicode="&#xec;" horiz-adv-x="561" d="M423 0H134V1082H423V0ZM425 1211H188L-88 1521H227L425 1211Z" />
-<glyph unicode="&#xed;" horiz-adv-x="561" d="M423 0H134V1082H423V0ZM338 1777H653L376 1467H141L338 1777Z" />
-<glyph unicode="&#xee;" horiz-adv-x="561" d="M423 0H134V1082H423V0ZM665 1241V1229H435L281 1374L127 1229H-99V1245L197 1521H365L665 1241Z" />
-<glyph unicode="&#xef;" horiz-adv-x="561" d="M423 0H134V1082H423V0ZM176 1350Q176 1297 137 1261T37 1224Q-25 1224 -63 1261T-101 1350T-63 1439T37 1477T137 1440T176 1350ZM386 1350Q386 1404 426 1440T525 1477Q584 1477 623 1440T663 1350Q663 1298 625
-1261T525 1223T425 1260T386 1350Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1178" d="M849 1305Q1104 1043 1105 651V577Q1105 405 1039 268T853 56T587 -20Q443 -20 328 43T149 219T84 468Q84 699 207 832T536 966Q672 966 780 890Q731 1042 614 1155L423 1033L345 1147L497 1244Q381 1316 233 1355L324
-1579Q562 1531 740 1399L911 1508L988 1394L849 1305ZM816 663Q748 746 601 746Q488 746 431 672T373 468Q373 356 433 285T591 213Q694 213 755 303T816 552V663Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1147" d="M377 1082L386 957Q502 1102 697 1102Q869 1102 953 1001T1039 699V0H750V692Q750 784 710 825T577 867Q455 867 394 763V0H105V1082H377ZM951 1779Q951 1666 885 1590T724 1513Q686 1513 657 1521T575 1558T500
-1592T450 1599Q415 1599 391 1574T366 1503L198 1513Q198 1624 263 1702T424 1780Q454 1780 480 1773T567 1736T650 1701T698 1695Q733 1695 758 1719T784 1790L951 1779Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1158" d="M66 551Q66 712 128 838T306 1033T577 1102Q796 1102 934 968T1089 604L1091 530Q1091 281 952 131T579 -20T206 130T66 538V551ZM355 530Q355 376 413 295T579 213Q684 213 743 293T802 551Q802 702 743 785T577
-868Q471 868 413 786T355 530ZM720 1226H483L207 1536H522L720 1226Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1158" d="M66 551Q66 712 128 838T306 1033T577 1102Q796 1102 934 968T1089 604L1091 530Q1091 281 952 131T579 -20T206 130T66 538V551ZM355 530Q355 376 413 295T579 213Q684 213 743 293T802 551Q802 702 743 785T577
-868Q471 868 413 786T355 530ZM634 1536H949L672 1226H437L634 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1158" d="M66 551Q66 712 128 838T306 1033T577 1102Q796 1102 934 968T1089 604L1091 530Q1091 281 952 131T579 -20T206 130T66 538V551ZM355 530Q355 376 413 295T579 213Q684 213 743 293T802 551Q802 702 743 785T577
-868Q471 868 413 786T355 530ZM960 1256V1244H730L576 1389L422 1244H196V1260L492 1536H660L960 1256Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1158" d="M66 551Q66 712 128 838T306 1033T577 1102Q796 1102 934 968T1089 604L1091 530Q1091 281 952 131T579 -20T206 130T66 538V551ZM355 530Q355 376 413 295T579 213Q684 213 743 293T802 551Q802 702 743 785T577
-868Q471 868 413 786T355 530ZM952 1779Q952 1666 886 1590T725 1513Q687 1513 658 1521T576 1558T501 1592T451 1599Q416 1599 392 1574T367 1503L199 1513Q199 1624 264 1702T425 1780Q455 1780 481 1773T568 1736T651 1701T699 1695Q734 1695 759 1719T785 1790L952
-1779Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1158" d="M66 551Q66 712 128 838T306 1033T577 1102Q796 1102 934 968T1089 604L1091 530Q1091 281 952 131T579 -20T206 130T66 538V551ZM355 530Q355 376 413 295T579 213Q684 213 743 293T802 551Q802 702 743 785T577
-868Q471 868 413 786T355 530ZM471 1365Q471 1312 432 1276T332 1239Q270 1239 232 1276T194 1365T232 1454T332 1492T432 1455T471 1365ZM681 1365Q681 1419 721 1455T820 1492Q879 1492 918 1455T958 1365Q958 1313 920 1276T820 1238T720 1275T681 1365Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1168" d="M1091 571H63V801H1091V571ZM415 1089Q415 1157 460 1199T578 1241Q649 1241 695 1200T742 1089Q742 1022 697 981T578 939Q503 939 459 981T415 1089ZM415 277Q415 345 460 387T578 429Q649 429 695 388T742 277Q742
-210 697 169T578 127Q503 127 459 169T415 277Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1156" d="M66 551Q66 712 128 838T306 1033T577 1102Q678 1102 763 1073L833 1216H994L891 1005Q1091 856 1091 530Q1091 281 952 131T579 -20Q484 -20 403 6L331 -142H170L273 70Q66 216 66 551ZM355 530Q355 400 396 322L656
-854Q620 868 577 868Q471 868 413 786T355 530ZM802 551Q802 665 765 747L509 223Q539 213 579 213Q684 213 743 293T802 551Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1146" d="M759 110Q652 -20 463 -20Q289 -20 198 80T104 373V1082H393V383Q393 214 547 214Q694 214 749 316V1082H1039V0H767L759 110ZM716 1226H479L203 1536H518L716 1226Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1146" d="M759 110Q652 -20 463 -20Q289 -20 198 80T104 373V1082H393V383Q393 214 547 214Q694 214 749 316V1082H1039V0H767L759 110ZM630 1536H945L668 1226H433L630 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1146" d="M759 110Q652 -20 463 -20Q289 -20 198 80T104 373V1082H393V383Q393 214 547 214Q694 214 749 316V1082H1039V0H767L759 110ZM956 1256V1244H726L572 1389L418 1244H192V1260L488 1536H656L956 1256Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1146" d="M759 110Q652 -20 463 -20Q289 -20 198 80T104 373V1082H393V383Q393 214 547 214Q694 214 749 316V1082H1039V0H767L759 110ZM467 1365Q467 1312 428 1276T328 1239Q266 1239 228 1276T190 1365T228 1454T328 1492T428
-1455T467 1365ZM677 1365Q677 1419 717 1455T816 1492Q875 1492 914 1455T954 1365Q954 1313 916 1276T816 1238T716 1275T677 1365Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="1028" d="M515 409L715 1082H1025L590 -168L566 -225Q469 -437 246 -437Q183 -437 118 -418V-199L162 -200Q244 -200 284 -175T348 -92L382 -3L3 1082H314L515 409ZM578 1536H893L616 1226H381L578 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1162" d="M1087 531Q1087 281 974 131T667 -20Q503 -20 403 93V-416H113V1536H403V989Q503 1102 665 1102Q863 1102 975 955T1087 545V531ZM798 552Q798 703 745 785T589 867Q457 867 403 765V318Q457 213 591 213Q798 213 798 552Z" />
-<glyph unicode="&#xff;" horiz-adv-x="1028" d="M515 409L715 1082H1025L590 -168L566 -225Q469 -437 246 -437Q183 -437 118 -418V-199L162 -200Q244 -200 284 -175T348 -92L382 -3L3 1082H314L515 409ZM415 1365Q415 1312 376 1276T276 1239Q214 1239 176 1276T138
-1365T176 1454T276 1492T376 1455T415 1365ZM625 1365Q625 1419 665 1455T764 1492Q823 1492 862 1455T902 1365Q902 1313 864 1276T764 1238T664 1275T625 1365Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1294" d="M1444 596H408V832H1444V596Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1563" d="M1746 596H365V832H1746V596Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="479" d="M286 1570L422 1491Q336 1355 333 1215V1048H104V1198Q104 1292 156 1398T286 1570Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="470" d="M194 1009L58 1088Q144 1223 147 1367V1536H377V1381Q377 1291 327 1186T194 1009Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="508" d="M202 -305L66 -226Q144 -100 147 48V229H385L384 63Q383 -26 334 -129T202 -305Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="831" d="M294 1570L430 1491Q344 1355 341 1215V1048H112V1198Q112 1292 164 1398T294 1570ZM637 1570L773 1491Q687 1355 684 1215V1048H455V1198Q455 1292 507 1398T637 1570Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="837" d="M208 1009L72 1088Q158 1223 161 1367V1536H391V1381Q391 1291 341 1186T208 1009ZM555 1009L419 1088Q505 1223 508 1367V1536H738V1381Q738 1291 688 1186T555 1009Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="825" d="M209 -325L66 -246Q144 -112 147 47V263H385L384 64Q383 -33 336 -142T209 -325ZM545 -325L402 -246Q488 -98 491 48V263H729L728 60Q726 -36 676 -145T545 -325Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="736" d="M135 766Q135 870 201 933T371 996Q479 996 543 934T610 771V728Q610 625 545 563T373 500Q268 500 202 562T135 731V766Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="638" d="M334 524L574 125H388L108 515V534L388 924H574L334 524Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="618" d="M267 923L547 533V514L267 124H80L320 523L80 923H267Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-700.ttf b/static/fonts/roboto-v18-latin-700.ttf
deleted file mode 100644
index 031bf06cb27a5fb3fcdf02127adedb36f9d2851c..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 35236
zcmb?^cVHAn`~S@B?p=B=JtUA^5|U5?=?MwF1PHwZNPy652#`SNNRcWX0jbgvRKUxM
zqF4Y$L==sPVg&?6q==xe1(LnrXXb9NAim%CkKbKp_jY%7=9y=ndFE*|A(Rjjh=WYb
z9opr!SLQ1gLS|0K-4Pvnbnktt*7p~2{VgFr4?6Vj(<XbE=@mkjd`SpB+r4*k+LUMG
z-X^5%FXSIGeEiU|cS4^--bp<Ok-7|@T48QDM@IhX3-P?;sIt-H2j7o)k&r3d@cx^l
zhfXdd9wZ3mm*Tn4=+YUZObyN5@hpjuv9FC8F@AcTumBH2$_w%QuQ4Nsj;OwPejp*G
zKj1oR3~qQQ7+y#H7jRv7%=n7wA0Nt#BV>GS)c<Pf#Nk5+PHy#pka04~yfl93^fD<*
z3LvC}zi*x}bo|K3?Kv9&-$!^pr)=Wn3hQ_>0`PR<&&wu_ENd_|D}|70sGrs+3V$Zm
z1BN7GAfCjB_>&&QLh=eNEIG20g|{dY7X%l?r$vz}GZGM(qbjzO(RT6>CyUp&s*ml4
zuk8jiS^U0DNsWmKh>-#)4WLpC&7?6>y_#n1RF?LOc8vP`z$8thtfoe>JlLxkYo1`!
z9tN=KHG|lorECx(jLf$FN{<T&{YW!a_BR0li)^ycDjT2@V3Tw}y>Q_LKr3Z~#j9aq
z%$JeBqXktKlAMxC<D?iVEi@$95Eq+}kwrKB8cQ>_<QEm?cPuKR$EAA@%lo!%)3@)!
zeyFvT^bPB7;8f&E5>(mC+g_^&YL${z<|XkPEZJhLvPdS2M-|GK;sVkYexP3UcAuqr
ziMu~grfMTu{4##vZE1x9x1lYOB${kjqs=kAkZ7RE-WDH#@1wWHgbR~?A-V$%6WtMk
zClS0m>i95}FxyfmIlPh>oh_EDEOks4gE)FuS-g`gJzSo8^9n6E23A=-OqO7gEfh#H
zS;EDgDBhYlDK023Ge)FzDLn`&Bu*q8gW}lMlO2zCyhdr-4QkAPHUFLbqxs)FNV}qS
zJUZZH+B<ZMHi~XJNNXRaJGCJ^9oBw0sEuOnDM*=;f!6wRwqYY_L?)>X8z-X`w%!yS
zs5d$W?Tq2=WHDYGQ(h*EZ<QM0CD7(&stl&iCNooIgv(`&$x^pUt!H~L##GtR`3!B#
zXe?)DWMyZjhlGZP#AGDI#Tr6_qhyeVF(fWCAt5s+I5a&iO9~zE_4e|XU%tGv@{D$Q
zc<)~Q3-4|zX>#G%j&tABnDUasQFLyvp}l&JT{Z0aF9W~$s@8wroj$F&SC@f9`iy&O
zzzY|G-aj4s=ecQfiwQ>BVC!vVjq)DxB@v_^$skS05;Z#~m$xfh^cDI6KVqsZ$)JYJ
zWJ`9k=xjIojt55KIT?WFys9i-$&~@ji37=08Rl{sZ?Z&HS)!6H@utcom-|ts$~5O?
zN@`F>RyxLoZD3@E1&5|(WoFutLLYsUp2i;mT}mPi8+>@>>cfXuu6pT2URj$qx!LXL
zUzQcCUOKpX&EXRrvu3s{YgePKWbdz(H!a@3Z)L|Nd-ts{G|TVQqEoX@`K_xzU9xY_
z>W+)|J@=HH-EB#iX8HLo|I<aD)CIh#18`MOIYnxdc#=XYRR7d8jwgT7ARHUm$BQS>
z;i*$gC@w<(F+@zBp?FmdjPS&%vW}AsRI}|#J#n&lnkpMR9}1*ogAi=(4>lTuvNF?6
z#;}+~aF4q2Y1z~Wk_nZ9!?Lro1g<)iZ*1M^;;VZ;wUj+<`p1H=wbwfD`t(b!n%*2!
ztbHF+G%=vCYtu%Za$9t!OGh3Y+i!F47e0Sy?cqf|wQnm{Xg^qL`j%W%a%mU;E~ER6
zm!@={l%CLWM5i7YD=nq3XprDVVJcM&XormlDRv%YXFW8i&e03Xc&(Hr@)0&$%VGNs
zJxBmCsm8z{@s@A0MFuAf$_Nb14l}TT5K~~7F@dqf*)xAx-sI`MyVo~adTX}Kdi+SY
z)0Qo^m1@nj^U>O;T5j3q=HT7yzvU&@L&-z!C40D+OoJISCT0Z&Wtv!Gc4%N=7#sTJ
z@5`I4+AHmOy2;XeizJqFRU4$8XtsGAeVfK+(uVZRq|HsWv)YL7c-fJxnY0cZ(vO&J
z3_(V(%A$*_YJrW1TRd_0Ob$n*<FgehU5XD=f{c=sNc(7~o6_vyQ^7R3sdnQ0j#rQD
zklrbJ<q2A>ZJTwpNc*Fl*43_KVx}aAJS|7duM%%?Vid+_2=u?f+5Z-avp`H-`j@>*
z$7&n3JK8g}ga%2;+Cyy&-9#0-gqIhmt)uhEADAnmRZlTj5I#1Qe@;R{iP@a*7!8JF
z8|$`Zzf(FvTi3ny%o$hCOuUMcCeVj$7yAKYAdp~ssiaPrI6#>(Y*)=WmQEl3%<G+F
z{SSQ)^SC#OQzai?(Z_u97UKd#p;B@}kdm5hCuTnX%_(l*p?F}&4g*)^_3fM2u1_CA
zt-o0pu&ZLG4Fc|M+(#D!Qc}a>X!_ZUEd1gVhDLlY13#0qF-CpB&pN77WNp;W*^=pT
zV^c6OJ~n}7le0<4Um51SL<>zUE|y6Fra*IGP`nsd#sI;Kv*qju_kO9CYUsDs5}5JW
zQA4Gn<4OiG)?YiXouIiip8C*K+Dv<2`zGR*eb4UKwyTGpdl6XL4;d#$Q6b^v+Gt7v
zO({CtaLP7B;Z2Z}D<vmLDwFtKA;l<}@##{Gc3Ioc21LvK$KB#WBWaI0Js)_eMFyw=
z5s{8Q2tXwPk5*C{?pibnM{X7J8?QIORO#vR(1!%@hoRyjuRfDzW!brMOh%UA*qE+p
zjGSK`K`#z19yVZDxprypjdkDuUA9zvg-tq5|0vnsVd%sq6Bd2@#Fy`tUfH1S0lcly
zZ|Q)y9$Bjz>o;(~>koMSb$BCj5sCg%sXuR#g(e@FNas>kd}J<NO<DPo%k(a;R4b+B
zM{;OBeuFz#8eJOTWq;FDndoviB$4uFMMwJcVk1qJvCfC+eoVS<Z4^^7=ICG<T-QD;
zXJ*93(WkadC>cAjcbRs1)_043qK28nXU))l{P}C`7LA$JfAo}JH%o;R1{4k(kU!~_
zQQy5Y;y|M$%k+0{UVp3CnDPC;=JcD5ej5yG_X4l!WTOkW=|nIdfdWt2hJs4wgp~_d
z)MW9lQaub@HdK8@F5ZNYIL<T@X$<&>Q98D7pLV(CMPD|U)~$J#wh3Z&f7afkO<$Fc
zS646=gB}@+9%%zeqRDtQRLF!ja40%~>OJCz3qL-BsL72!jnt1rXH2fF?SxKMjAA(Y
znJPnF?goYOyJ~c8J|$ur2#N`bkw8g-nEE+WNJxwc<#Lbc0;6$Nfs|77R^8DRRkx>I
z+PLuQ0+~j6jxQWmGP7)StJ>@%_QO5x{cKIUvGVe)aqr9?FmmPm*$cBGfZGvhQFrAy
z2_<o4kQ!Duo`V?Xlyk+H`$x-&$(7xyMxwXOg+*A<q$p>TfbWnvgTd%*1PRE@2&|he
z#X^)5j0264Cf7c7H@u?q?JKjsUv*vk@nzcmyPNGNMNS%BJh?(S{)=?lGFAKa(yHt8
zXe;VH<_;bAKCMa2Z&tW=&$=nop5~*xIjE&I`p7`iAHzdLPw~!C+&hQZnFr;>kQpPl
zt~sZD!ZK=-WLfcha9=)s6RgR>Nkd62<l%X0u#kr>!6r*Y6+b4}IchLSAXvwm&f?XE
zp1~Zu4KYF+&TWVhdb#0UoLr@0Rf=fHJKnEh1kVZ{Y<8j$HB=@zFM(086*1(@b-9qN
z3qjN_CUXLj^xtV&a(GE`$!zT}Em!+v_SoXFe|>)8Z>?rR@xTeCLk5kD>fftp|NeW6
z<VGcXQ`29b@y_>GPtG`!mb$m(*mvJlzcF}H`H<pC6WF(XMvo}$S5m^qWnb%kISKqJ
z1lSm&hQ`(9AcvYT?>}ac1_C94e2|8E1|r{VODHrU*I^oHstj^AjyK&!1Vmdw_6)5A
z{e%XFg_ww9%*?JUrD2ZNn<yE}H=exl#FZ6muFR&|Gun|3t>}#1?MFtG4eD1mp0%Gy
zJ-=UlchMT{{^4=jdTodwy$4nIc*pc<>vr#$K5a9xTFDcbr%%ZPNdgJ95^BWJDy4&#
zEdG$j@H_|d!^?P{h$p{D>C`|>p@ct|@Ep{aMV^w@$=z`$)P?$jL2#@JQUcnc1VB6s
zphYaVdXH4hN<PqT(DAqFc<lzq=~9{_8>BBlYev)oW?_+_wkB5+7t|O{m9p~^MS@@h
zIMEuapOohC#BScM8Gf6OhUsLfbXo4^ghz-893G|0qHuWP184{hU~kpDA&suy%*KC6
zL$!6cw5Mqpho_PCcS%Jbhl@To+WOdNvedTsv0!#OrR!Q?Wu#M>vFY@xWMdKF32rlw
zpD<E{h=+hBqXoJcDxNXMF>M+RMk90^VGW2)paa^y(rjC&BBotpzn#Buv&-O~UA$%O
z+JIF9ik^mPV8wI0MmBkVK#${Jo_nLu#(`b)hc(yEwe8oBTMN*d&RSE$6=f;OB(2FD
zHMdP$PO-TrOPswm9w1T=&K-bs4^w51Qx#VY9yvTSv~d3_5Q8PhWPu_M4JWP2k_MLU
z%*yjLsIoLju8ecJi8;5W^Ac@kke?E`j*^g_6$q*h3zH0d#AXMQm{^&?ViSXlFtB@b
zT^1A=ST{XQ4y3j$K?y*T;dAew-tGH@dBm=#cLoP8I8(8DWXp7~>}CUJ8v?ZVv=2{e
z=MQ_EXfxWh_p5CZntw7DLx06lAD<uSQ-40BB}b|~yxVn2Ev(ZZvHs+_EZj=8&pPF;
z_~Yz8N|&{1So3!Gf{TY~F`afw+xWA#U3(%vdP}|3&*=_oror^pyBD=GZRNtJ`u3z>
z`JMu9jZmEjg6|qJPj|4<zEdO6%~Tw>T<kRf(FV>9JY{Ydff(#c;i{Lo%PAX%DDjn~
z*J|#M&`z=_8p>j{lQoxU=~0@bU4S*J2aCq+ERiR{`QHQtei(aE<QX+Q+RV!iH}SED
zV}QMv-DYctP#H$JykiMVK5{wiZWx!J!d8c|ay2@PPExI5ke>X*qH*KM#IU(|tggoW
zN`L1#R6YE|cmbFjUFBv70d9OOJs`&Hl$DG$0KJ@<kr<yY=JL2FsYX3%;Dlji^R?gq
z(*B^dWZEa%olDmy&pxkMK0GyUPeSb%W}W|%v6<Smkws^u3v%V~ete|&#Z3MXBek}U
zeQ)5{TOXPZu^z@G5U{tYGSCS+7w&7hU1EF#`vwwYw$0M%X(TKrfm5A*uFjVK4$$5Q
z&D_wAuctw;R@01d?Sl7`WzTG2tG6tF%8UMZOS?~J(EOtFwAG8+{ohy4y?AxP?XTx9
z0<G|#`UXAajk%+#jaDApDO`l|aRCgt^>tpRqym{36tIUd*(e3@!NVtmC+Ue3H2H=7
zTGjE5Yc0pvYn6)SkaqIJwjXMz4paH9>Wu4ObiMQ=aK_>2CEzHuK_Tc;$C*Q}^p?3Q
z598dCT<=can6X{Cv21di#tf!P4_6SmY8qls(l0e9*xu?C>0?+;Td`@{%zKLEH*KFC
zk}N>tNqYa6v7>r2A>n!^t2;bt@sU!`*`6T9eEfbCCKnZ%k0UPVaxgdu+6C!I&2#|J
zyXFwDe<|u81Un7`^_a<I)h8wv&9#ByX6Mw2NR9Rp290QpmFT<CfM9SmEmotWX}M~O
z_Tjklai7gWV6Ha5=to4ucmvlOSRxk))6KFQsbyzkYExKG?aL!?Y1g*0bu{D{m1x~a
z?c3m|rf=R!4<C5Gqjr}ye{JZveKhyN@ULmh=l{I@M8)-M#XsKc`0zU$c9l5M&s`tW
z&u*4XogWA`<)8phFQNH?O}U6HLe&(Q<=9o?v<o#ywF@+f<s+5VtWhjAD(l9_ChYw5
zB<hz)9b5gnvMy@TtF)CzPx3O58SmAz-j@ExPZLQ|L4uB6ag)k*Ug|zH(B(o^aOh&}
z98H>aW#vyW;y3O;wC^azQf*rPdBv@Z<3>##Z^uzQ>hd97RN~78`o|EWm>~7>;b!R;
z+=g>>B6zoI&{?=q7-q7;#%T=ew2e1zA)QRiYaX&-Z7b_|KpO%?mA*nR*UYGf!^bu%
z8v+uA)PD>JdabSmpOP9csGA;UPgM7#N%t_W>?IlI;HMucvX$h9IJZvFyIS;!Lk{3`
zl^6oNWt8y22W>~3yu>Lb)st}&2%>Q`2xsO+r_u_#O#3WKoA$9bJ&Mmz53k7P2R-O2
z_R_<5<z_X#v`K(Tv{Q-2FHc~c+HFz1LN}v_8^(1?5kNXdBU6MFWfUh)M3kc(2PGCH
z`I?<18%l3iLwBuiC7l2V#%!T9#&|bjrtGN7wwV&Xnqd1J={D{ixWTA)wd8~KMY{1i
z@L|U|HiI$S?Ls#7E?a55N&E5WE7}j+=vEp@OKId*t!nS4jeF_dEgN@JcJ!k5rsXhg
zd%ojE+To>_wAa6&KmKy-T8GPj+_}bOQO>Qu1HQaTFzK#(hj87PJ4bx&Fbjm}#3|+z
z-fKRRnAd&WBn&>|xo8{UkQ`-cLYaz*7gI7+Y<gI`z?$s+d$IP7R-^q*eWpDzXQFn8
z(Hg5_nf~3%FaG?kY|OZY46qew)e6^zf*~h&R6T5RG6cbBJ8W()A_sYyOs-}oE^<ac
zf=^?ZF&;9aoi{!Pr%4N^+&`|J&CK~Pc>PHGY{1*k|LysI;PzMG){lgd;i?i|i{n<|
zGVXsFf`SZvA!hh;M4N1)oXHK*s<#*>7LbaIeFOLwrWczeL_=b9b5b08_AYQ<hcX&I
ze*tZ(y{(b^<+G>ExW__jZYh@Q=Qq6HwC0eX<S}{V=&2Y(d60T`1Mi7slp0vCzJqJI
z@$@Kw7{x)9qPTZT_4kV6&4XX+5h2LMe4)mPycW1%;@$crBcX00_cm}v)ajB64U_G*
zFYb~80ZCJ)Yi9=hwdn7y+kRi7U6?az!pzmnDY>a#y?;Qvy_Pnj=5f>MoIV3arY^oV
z_4P63A1@d&vA9czAq~3z@WNXcXMM5qUO%+29%%k7`o&0+Z5`nzq3FEO0;$7ICUMxr
zp%tFh+GrQFj`D8#t%q&pw|+yZ6~I~*N;Q$@DwvrAYi{h(jq~U%;E_otAQ;LDNyOmc
z7M!2}xk~$7tFc1Dph-{7sFA^MTHn=fQoq~M+3J?77f>(h1JuuTg$&ehAWc+a^l;Sg
zCIq^%K?k!Vl#3o9Ae&ymw$V<so2I~)Y@}W3Sh>T49w-=fz!z`0jGsQRO(-t&nOhxh
zZG61I?53{RYF8BjgzBZk5(FJZ;;KqeP`do<DcVqbOFMt(4$R$e(T4B+s?oi&&x0P)
z$JJ?=4E~V4ID9Z0C<O3%>k^+EU~crQBVUX+BZ%3^iJ4F_4;gGHgarUEs;7a^1vd1E
zDVNW>%elQlE2J-Ldmyjh(DvY0AuW=Q(LZV$*ThmyW9$+;&!J+Vx4VGKgQVK%%?&D1
zx6Wa8sO*5)>I5aA!s#@bcGP0EPqbK?FPYhz>LE41GLy6uHRPj)?Wn;M_IPK5^g?xt
zb|q(3CPGPs-9vE>Mb%R=il*|ZAHfQlF(LE>yY%oyR#lTKx4U=GBK!V!khf{Nc8Jw8
zYzNiVC2$&W3#{8<akB&p)|AdgWma$1Dy;{#D98UkciDK4mqe@!q$Pk|LgWY!Dd4oB
zkC~KI%(*c%kqyzlR4jjg#`F7Xhv-|PX4rC&pC()2{dQ>tS8&`U^&nK7nH~@aHAm~Q
zdbMHuU;dX3>Ab8Y_LWqCx(y`JZOk}ly(*PL3j$+9H45hd5*$I0OHLfVP8*)54S$q(
zYuW5#O?{L`tx?h%M4CwO35jOt1Iz+{Si{0EBfl+5NmYPUX-##xwE8OdcxA|ESth)j
z61Q#9WYwS2Vy;><{A9G4V-9_vc}KfVo62Wt7N4`*fzudZe~N-EH^Wv_7zj9wTc9}h
zbRu%1l9M)*xhk!ChY6|MJ6T=rjjF;-Zu)khH_tTN5(rl#rWco)ldHFJ9u99iL?WA^
zg&RrJ?dC$=GZPRR781`D$GBLdF*uZ64fY&+V8^G{dyBgE&hM>VuDG!9%q`lW=1!~9
zh|;h8XqUv?DX*<K_!@1|xqtiSgLV%1;8m^RmhJ%`<fI&XCLpUl+B^|$ZUH>`!)G~4
z4XRy-_el_ULD*cFx=g9#z=?W1(WQA+@eu>sOPn5~Pr3M~fO+nXOEiLb0x&NH1_;5+
z7yzD}oh7%p^uA@RFZ|mvBlevBUb{SI^s<c1<tvgxSddn&eYa$?fz*68Mf*<sOWC`z
zT<bGwSsV0r8|WT?pyz6nu4-r<K4IFrPk5hn&~-`1bwH_-2X`5%LH?Yvb7zy=%+HY>
z;|FlLWr1K4wQGCO;zL<#j}eUe)2ZiX-_U-iUN=7c57X|k5xqu^9`$)){)D3=X(E+_
z9?%9qohTT)ZeP^?r-5%kDhB}Hey~ywSHo%v(>Z(?GVpD13C(yEXhCxh>0XgIxT=>p
z{TIPNIOSok;{qc$-?4Z;^<@XZIMU|Yd)r6TSnZ)-=?lkyqA?{S7iVWJ`jo}j(4?uX
z-UBju32pS}rrqWA#d5&i5pYKV!y(WLr>db*(Hvc{pYzBiJ~jk$b)a?8Uybk(gCZjN
zNOVMU1PoNGBcOW^j-ch0K2Dm)++JyNVU~eJsO69_-8w^wC5RH?=EuN*5aCkd7Dw)q
zi9v7;8~Tg(`JA8DU$WM8_gh)If6%Jdmk#tD=TDzzBZ6t&-)irnbUEe|>(r8YGj<Fd
zElsZ|4I46+bE`TS{Fe+NkcUUAMj@%Yv?;<q_yytX4HOcxexbLP%jwk9F_O82>|y`{
z_vDdLLEv>@nVA^cXb8e2;$lNWxO4CAUAsPgvspi>ZpNOA7o|}b2EO`1@D<O^{Vr5*
z;k+qN>nq0s|B<lvFHq|y*5mlEYqI#*@$Uwn7?(PD;b39mU{p>D@&ngW48lun^5G{}
z3Q|MG6WAc#xD?t}*V#onU1i%9_XI>`a1UQ5r?E`ML1c!!J0GaSeW+pn&1a`w&7D`e
zW%9fcd)~cAW2TN?n3Fqy%rqANH%*y2>fy~*=O+yAY?(2uJhz;tR(r17Kb*cl`~~#R
z7|g-`7%?W&NrglVaEZm_5=Nl6Q;1-CI~{^PVZ!~6nas--e43SR<|;6E#|WjLJ~jC;
z9inKLdlb*j(Jn(oI<-t2UDKHzDlQsUZAJZzj0dq)DnDUP@gpr&qb+6-{sm(110fIS
z;5euP@ru4x7T@GbgVWK#6<^H2dgKIr1v|A%7>wuob?#IM=YX6`!&?^=v~E*SK$vxx
z)|nney*`-BI;&C`?=ldZL;n?3>Gg_93O(%V_QwF@@p!?>mHw_UP*`2Si8Il4nE{g1
zZ?Ws`mpix1NL&!s@0orAn1{<>em~$x&*kzoCs^p2iRhXBz>E*cvke$gw?1IpID#%J
z2_kfwUp%<11a}2LVPbGKztF$N@NQ@VhtB|Q27O*TLe(+as|Heis3XnOn%6u92<D(i
zb^-!-Ta^xh-UW7S3lt->4RXUAjHWtdx+)7^W@~`kC=vpsj#f7u>kSaC3Bvda(&^3_
z;b0X0dqtcqkOo~C9O5C-*f2i+kwQasI)pr>(<7bZIr-G5-6nlzIjCLgIN-@Ns$K3>
zG%H)XEa%Qxxo_XOk88Rzbzq;_HMLmfpn_2~lAMcnft|_zXjcF!P<`w%RGd4zwacw3
zx`Zy8BBo0&(?IL7(U_}6+YWOmpG_Qa&hV^w_uv7>$IZ;<9J(jgp8cREj~yA<drXZ2
zpzL#ATR`QDXqG&CGz$V##GL1lt8_%`xUCFuj#n-+xv0CG`*4+(goOpe2pk~zjXlDn
z&Fr7Id_zM_OuMNiX+P7Liqf%Dr;aPBV2Qh`mubIW@AS9!8BL<hW6Pdhl^dVi2lysx
zL*(Xw&mZuWsX-#zhRZ;FPUi55X;+8OjjRQu#b6WJ1d=)S6b~-hs$Syse@a8aTpHpN
zG$#gEX-IB<?d0B(7z93EW1l~BNxM95)YA0KrJt~%2ij+oG^TuAGDkxwpkd?QF<Ra@
zfoZfP04?!DOUA2Vww6G;;L_Yb=)i535Y5tC;*>KCd?r@C#L0D*;B(z0JrW3V&W4jC
zfX@L=Im6KA+UdiigEZ~Zh}|cz)0pwY7iDKH95I0<T4}vS<qr~QO*u_^uyuC{Jw9r;
zZEUj71hsTfWj`*R*<crh@z`E)aDIr=E+%i))7utgMRg`Gh8+8(X`{XAKx=?Uzbz>Z
zq=p_7YnsWq^Edc%&d>ys<ayK{Pm0yZghWT}Zr$z}<t$RjVcs4hoCy=Yzsvj&#vf9p
zM%$htCMnMO3_~d+A(00{@bRyQ3WtV<+2hDzmkABUgvwqYTcORld-CHyF~Iud_ZaYH
zrysQsmVP#!2FfKxz5CFHna#s{{<-GlJ6l`yY?GeSv|(hyC+m+6eSTQiUM<lYFY9f#
zQfUXtra&bwl8xY5Ixh9Ol9N0|yf*%z{lRbVgxBKh<|)E>L_i)I5x^xEG24g0^(%3?
zCV+nM`s<Bbr^NT^uT>egZ&%uBe_W{fp;?CUn+TfDI$WT_qA&*Xq(9h$36SZtI;T)K
zq7;znV7g5qLIC4qjrj7pgKMg8^E<agqW2)4aB&xdi~Tw7t;0tdjoGp;8x!rX6P`SC
zlD$`x_xvcPJv_~O9^EfJ1VoRu^XNbbQqwOS1D=SOS>S`)R-jhOAJE3yI_);%FB;RK
z?5l^T1$Rb>x^fb~9&6>%3w0wjH=5V06C+vRNg%*mFdM~o@)9Q-BykdSYGLK6y^4lu
zx9^`jcMs}r*viwN(x+JE!_(~fntpO_O%En)P$8H*_$=aX<I%wqHXi-LO%c{-5S4h@
zY&^Epqc$F(#%6Z{e!O3$nc7FRwRZO83GD-%&(SRQCv98vOU;+GKs(6lu|V{Qq;-}l
zATp75D)b1)SQKU+9TqngPv^%f@#hMuJ5BK3F$#ev3~C*mJWM)6v$U?^Loc^%oz$ym
zSgf{)X4B1V*Tbls3qjw|wA>=OIpF97%J>LyxLbjA0Cc)^Q!D>xE6^J(pn49i(E_F6
zKmTlDJ8xpy4<#wuCibMEIdsHEYLL(o31%UTOVxk~PSCpnVZhGesRoJoZFGBG=&5m;
zX>cuza11!WjR?UH4P%|OP3mF!$dM*py0MpERyJyzM$*#vKl|kU3$Oo>zN_}~S?8|~
z7<lc%%?#9j2+nXG9U&}7|A^RyH9VaTgv;Z;0ZW=Fi3O|`fHe%T+HCOz-e<%nr~$(0
zVF^gC40M523FINDi2UUa@a%-lOs+h@uo0Rb0#%49v76+hN99dTUOqzQ!>Wh2^K{nj
z3s(yZfBN+2oLy<xUc31IC!c<$?H<nSE}_%p_oSxKN)bQjm&_HcK(|0!9@ys+#KWa#
zEO7ASoEg{>Yj!X>7(x;SC*~|SQ-1H*x=wSSYoFWk;w#T|o42QJ)6P<@V>fbkjOfOW
zU2V3t1dE;+nWwEr>{VCb$cLn<24S;>W!pl&br{?9!Rspca|TNh$rO|hVhlF$6+>yE
zFWig42xvNR#Xv~gY;LtliErDt?_xv&Q8L`>Er%-!B!+YF*f_@+5K((N35vl9W?(T^
zxl$ot*@EC8#QFt@BbMPHD$mUeCJY>ibmZ$(7}u_Ct5;l{+N>8hbC}r4t!Li2aQ>|`
zdtPVSuWUrmQKRT+m^s#dR_Er=QPg}j^lKVxzVdyYOMCi`-mo*~z*^ov=p^|m<z2*}
zR;Up!F{mQIPB)|K)3;hDQ0QuP+)bYD!H;MnYz|zZ!3rcFvBt=+N(~JZb}NMCxrBzG
zgTsQ2+~A6Ml|)QUwocZk+pw4rmSJeYRzCc0U`J*57UQ3vT)3}&->+wzex5XwwOT$a
z|K7d8UE6M7JA3o{6Mgy*8*&X%YK-)>{;0H-??Dr9NSdlFsSzKKnCs1uv0U|1^hc%H
z#mE8wSv}_^yuh3l851!AGO`o1g=mr;hS3@fHyRBV(?6GKIe8l7)E#F(+&+Khk`d$A
ztX#Df)BT!N>&FdSzN&gg>G6pZj+d6cJ+bWV(s6U=EL`){w)Z~TwQkMY$y3&^-MHiI
z$!#mwvRP9<oHFIZsnb5FsQ7^Q3#MSXB}RBCDOZWmCv7s8n*m*y#8u)gqN|NmELU@c
z`6<p2F|Ocvx?Doxg<g!<9eCwHdl+>=BCuJEI#51r*8IySW*#w-nGR;0aE0b*Z-1>_
zp=Rw0oIoGbH0|Tx;go19%|>u*)=QHQ!#NXrc=Ai^tZf9|rwav_GJ;R)D+|O70LtQS
zkA@g$sDjrrkIJwq%G!M?vie8q4EuwZFi>lTb#tc>9h*ZIt5La4c~3@}EIH^&w33S>
z!W+kn%P<NzT!xz~R%JmM{2jF3&#A4b-a$MfL2Vo*l&Hq0$_6eEYc+0QtH#w;r^Ytm
z!OWZ`aSD(TMwcl>Xifojd8{la6CPEkQ*Usn92y$W7Yl`j@l1*Gw%tp#JNGrK_C1Z6
zH@B=}zP9f50lSydT6h1XCIqyPn=pMMo%HUYn#P@b&%V@az*PGEt3{)Zz4ZPUAJU@1
zom;l<HFCl;B}a-!zy9L+s~_|m*R5TCr(qK|Pi`<guXDY&$;B<Y*8|Q5$zMqQl?#{)
zgJCD<(Vj-hY4Sq9+xj|)M{C-bM8axnlXE%0qm#QeZ_%a8?5^i~<~Hq)v(hIsztfn`
zoinoXJ7s2c?hKB~{ry+bFMLH?Hrb#?Hxc2CSkdTN#n&}vpnrJhBti2|(z!?mE;6`4
z#4?gNf?4trf5h4$-p4CRbdp!{5#nX?!VO<9Av0nsusIL-=nc~^)CdN7G{=$z`<Iuq
zW$5?>=cQ<z8FQDdVR2j?)}zfb<1<*@I7CI70%ddEz<7iSaaXuK+(0gVNjve@@$GvK
zZ5voPa3mcyu&6(M?iuZuJv+3!+qS~_)rtmfdT{p*+L_Lyo!@v{J9_-2cJxhFuxa<_
zN6HU>zHh^j-b>17O<B@&*rMlXofr3FupHE`?0<op_n)Qx-+y0w?(9d}zSC!De@^31
zv6m%Z;4%^#O_}N^G#Wnt)v@C+1ZWH41TH6p@Mg=&2#VpqDr-9z^TEd<Lj1kN6Rbh9
zgn;5*o(Fh|m*J!~yCKQp%1DR3(>c$E1O$iK{1^sMFdOJ)>^ghuf&+&}RkY4O^wQEL
z+ak1`^$H?Oy7XlyBkT8?HFm;`^ttINeq-jZS)`pB+VjcyT1#oO)I!8KcO_3qJEd)~
zif;X$z-zXZ4igrhIdrOYQi_M$5^J&GM-%fdw<EYHi0DOl_Te@<d8THO)E2=oGNdor
zL4SVmC!`_f?`a#k3He(mH=Q|hML5XWX70_2a9*lWLLLVjQO%Ozo@P*?*<=P4rbn4M
z!qby0>$tp-P$!+=1s7^mWof7rrNwNjZ0gJ<%&)Fg^$5uYpjkW!83Fg;4<T{j9SL!X
zT(|+Fi0k_(Z7Bhd(qB#dMp|p*;qvCGMz5{DZMtq>+G%iy;+5>HM=0#WM<{TB_L9`=
zsX1jWq9^Wc7iNmx*`@8`RvGP^Qp`CA6eBptVT|uuATd7Ei=}A9Nk-@o-W&aEx-l#@
z*$?WSBkg2cK)qhzHg+GcqZjNeke#pdu5ekmDy&3MuLT!UMB8Hx!J%_@PZ+;r$N18{
z)RdW*SJE+GwoKZ+>-w|LdUnXn=+b3OM?Pwb;5)ygDA0xc5q&Mz@`2wt6lG7yd5>A!
z$F*eFc|h^wN(gTiraD1skety%whs>H*J`v%+8xf8>YdUM>F_;mJuSUQ`#q?>1zcsb
zt?U)$4an33R1Xo~Vk1Gf)l|ZcXM&Uw>coM{Lb-mRO8!DkfIrK_<sq8G9|ntu0^4Hs
z7ay2$I*T?MW7sP->uGe8)WK;@KYnq^`duAM*VDml>oQ7H3&ILoBv)*oKdpU5zsX#Z
zNMUOPq;<(UH7Y(q^eX4g0$2KA5nfb4s?spNns7Em;Bd7H9@$rSQVTsnrSex>(H?XN
zeyD43`$!77Ae+STX>bAG(^o`C!I2WD4-7RhPRJ&aaUz}>Ue_q+3uqxM+k!Vc+Q+9?
z2wn-9>D+9A0g;FTdQHnoZP4`G^9$C#xa66m>sKB8xLroG%$Wn_^1`?V(RD`6nl^4)
zTK&~y=PsHQo0=In5YBZ<M#959QrMoK;)E>R$~NPP>QCV1lEiietzx{TNU5RJRO&1Z
zkj6=~q~+39=|$-c=|kxo>6Y|RG8O+1dCLEXJd=2j!mZr^p-8uG8HjckP%ei>up4yO
zK+;q74dQEhY?Sm*Be1Sa2-Avg3Dim6brFZ^ZREX(+H9sDE?;ryA~(0tgFT0DXhLJO
z-wZ`dM|I=|;hME`rj2C}AD(Vk)JW^7V3iytouN^WgzV-;8mi2j+Zb(73FC)OH3CFF
zqf^4IY_Q@7Ah?W+K?q%3*5kVNC-u5c8!!*;i_fhOdhl{ruxR?3Q~>FumTI&|DPp;+
z(bek#+p(P~tQfeecu@O}1K8_Wt-7p_h)f@*rO_WSkN6^rRk2$ixnC9x+yJ*eG&~{Z
z@|XkF$0)`c74Aw1^fuZ`<Rq7vO^dvrIr^NjtZnCLV{YWr6Xxyj*&te3&7oX^(QQ%=
z!P3+kQ4qXsw$=+p$gTB!%*f6Kq)yUyEFi@UX2b$gX8PzYIyDFd*R8*O1~}MMrb-RL
zIr%!;Ok457P=VrA&qyKvAVApUERmbgT$cF@?rC;izK_wOFJGE^oMxSP^V#ihzf|0#
z+W=bJy<4$7bmzP8JlAo@yQlUj!zPpt?J;!1_)(aj`;ggErL-0E^EQRg&)euKM5b8D
zNZ7(AC@&xu?m6ovwh8BFX*BVmM)Ev6j2YbIjuNq+sQ~Z12dY6{@*hO~@ORHK9xJm?
zGKo?LA&$xie3O@ULgaW}g1U|z2S{VK6?n<h=E9cK4H`oX>8pAOjhZil;cJAjQiijx
zXoy777!8%Ron!--jU_x8Y*qN)I9qiQ>Al5WH8`AeR}70_KPd!uM}!WD^^XwVv6?^I
zq3*LSEq3J8+0u0YtdZ>g`Oj}}9-5ZOXkEMhzhKec^&LAUJ=?$MiHje;xnpy2qhUof
z&2A7t3lQ~W%m)_yF{WqPu%s(J0(^bghzs3Pry}M6z;RoQivR?2c5jG?%i<e*JhG6%
zbyf?sM{UJmy$cT`3yI+iKB3gbNXGo?xqe!k{n{ZZQ2MLp1%LX77HncA4^wD%IPI#v
ztXOVq&)(Li@)c!#B(x^y5Vx@!^K28b`GBV_Rv$|SygY?jQ<nG!3y3)8rbVt>C{?Oa
z76LjZVQ(05f+%cuG>lRsrLAeYcJ2k5LQ`LWK_&eK#B^2BDKv-X9DtcI`v3y(-ai17
zAM{6w6kB&GnaVGiW6g;7>0`sBTj;9;c@ZXI*^Cn>OPt9PS!IDb@3L0L62W%{;qv7p
ziynE9aiTFUJ3%ZU6)qBEC_GkS+$mu&DjA8C&qLWtCXYAXyP(gTtKUPw@vAQ_@ASsv
zm#Yg?>GAw=h&pC7610x(i#P7EhaR_Id;eWJCWi+f_nLj}w05ZJ!E*MW=C`gX8^_j!
zCnE@%kwp+@p9Q7(!ajzOS2*r~Lla+NWNWOT6rJDb0xh_$5L6K}WwQN3kgUrRa_$*$
zAqPGSq(?F6tVT#U0k}xR#ubV5x$C>{&eLxFdY?OSFHd=LZkb}y{zE68TYUC+Mf)BX
zK3bQlr=~N`58(?qV+cbp^jE_hGz63`ga1)yt{`jO=c;-ud<zO!tB)ETB&<j<8@a3y
z7cO93#NkS_T@0|tEdXN3$Xq-|H~>AMUH<Fp@t?*uFWh+jV$bdMvWCs*UXa)8nF&Sh
zb|`Y!Z-06J#nQuF<GXiTyuR{1bNG)L`7ImwYcu_sA+L0A-}`e;TZr;8tdx78MH!?S
zxumk@EjaF>XF{sSv5CD0+``L*S4p3R-A1v)LdGJ+jN>Ctun4QGeQdF2CKq-T<Rb#o
zYT5GU*z)EeZw@4@=$zyn#NiCiK?qK?(;US^aN=CbNFXA>2S{|WU2s=sW0!Y8N|_je
zN^GK?&p9L3;<>RREGrC)z-^&A!W`|?`9i4(+sR0fFa5c^)ww5*eeu_C2YPnxH5lZg
zRDD)4=gfusH6y&2PwBd#U)TJL)vu>kB<>wNv8NQ&f4nc9(=T{kUN?2uvj=HTm%be`
zf;PN0p^RyN-*~oSrn%8uO<G-O6!#V_Xx^kP+dFxD?LnisOkV&h>uG2Rovt3}%(h1X
zw^GHUFJL<6oL_{>=me+xHFzY9i>s4clwHI3VEb{8xeg41O3Ot|P!#uxCI}-R2rVo-
zOyYyyw!$D&>S?8mep$EX`usmWURs(u<#@ME73&B5qQ2PmV7qnYlcx_GJyWTrJ<z6i
zI;j1!aqjm^f1=)9HkHquG_+&lm6V0!C)LFF-Y~yx^()&s#kC}J<+k!y_{AgnidCa6
zk`L{Jrh;RTo#KQL5QxdmHL4U8>8nfBPWgr#S%Vz6Yw5qZl$q&_T|q+w^nr!na@&X1
zvRpH8K*tWn{X2Co)X%Kxb!u)`&^xbf?}D08`wuZvCIRjf(C=y^;&qHF3mpQCl&@09
zG1d;Z;Klmj(046R!(?G;ixwwt8p1RU9_+e&3*K)txA?nn31JH$fWI2dIGEU3G_`YO
zohkEJf{}gN?;3qZyLoeP&yKrBe?nvGQ@L)#k_vh}-b$kCjh!mu3hJ!>Y=d?Tkp&U!
zFFZ|ipX|nh{q}8|)T`!quU(w>${~ffgs#9N3=n1M7GdCFqdm7E1Kp1$s8aX)A<9zB
ziC(rz@}H~L+@mZVaRrY?S;{RDS1^Ld8;#g~`U(##SeTWy*cMh$u1Ut7HQ$wMUu%CG
zH|`y!wH6U_i!oX6hZf-;XQOwA&Z`8IjiLKF%SUFkdx-V6u>ewN7$V%CQK@am2Iy}Q
z_Fff@)@LBM<=J|fZW!R*=*H=63$=ri-B$X5mAS+Xa;ty~VmJ?TnYTH}7^_&a62O=9
zrNJoxZH6bs7A9%n8^st4s+aAbaag;(S=vZLEVK4Y6*Yrd%bJsH&%=^IW6BDj*-Q5a
zucO}2)8>b0z%#*ECwWVoS;tqp?f3d2?L*6(z+7+43AZpO)WNKfid|9+X~NP2jUuj!
z>lKY2N9k_fU@=>8g~;F`IDBJqvNQ&3Z_HVH<K)K7J+Kn`uq(c5*<OedgT!Ta#1e2J
z?`J)RXJc#_9*MDuxAX4aGjDA9X~p7;U;I%s$+Tc}pT)hp=YKuz=M~Ge#(cw+^3sw?
z6(wUQNiTLCW}*{|F;X5b->{Ks+U@P-PsB8OBe(U24cMtk^4Pj(m%4fH-o2B?MGS@c
zj*?mOx6(9>7Y|tGxk=Jr#xw`dj}b;)W3&<0Gezdc^;%ee77p89EpAcZ?1ELPl6V3x
z6%q%*E0d;6)2?sXa+TIQAm8v=yVgX5Ib}|hM<7t~0VK~5(m<7LvJvD<zNQRYH^FU&
z{rFl+s1|Z292w$~Zc?(D5VFOVW_;VSX-^gpTrh9&&^eQHN8~mg)>LWKciNP~J{41Y
zC$(&u)VO6!-li$?6={@W#aL*=WnBxrSRTo*`g=rsBzs83yaHj-;$fryF0K@iZ?MZH
z7V(GauFJ-V9J0GEqZs6_Olj1@!3j;rG>(i*J+NSKROa-?wc^s1-^(`#H1SPq>@{(l
zf38nzV`yKSSb@A(YK2t|J8zIK=UQ=%Y&<Ja&fD%iNk)xo#bF*JhtuZ_vFL{w)x(pE
z-7b<NCQ4QD6l#UooFPoO5wQhg)Y87vk7Et7-IuP||IDDzQBJOOkIoSN>0XZD>bx9c
z+YN_rs2G$8Ju@9Beh0-|A0gfAzGThwTl<R@A8oWx=zQ`c;0bcT1LH2HIOm(#1ncb5
zZqhH54%a^EK4<+a&lP>l+gB!sOA6YOK-PJ1jc^?uEOf?>(mi$+uqBZ7e*FG=3YG^7
zX`{WtzJflA5N7PZ<t3u&xJOlihZl9i)d6pW*yT%y88s^cc>MTuwE$rdC9C@a7B*6Q
zqx<3=U%o%|oBZzUpT79v5Mc*dLVst&q#q!mhpAq6YXe9_SbA;C8f?4hh1rc(OBRkP
zozE7Oj9tXEF>_{*Y&iOf+2hc*Mb`f)Q)qp(ArQ-zu-^y0BDCH>385Xpe<^u_wSbiz
zJAe=j8I>7@j4bx}2#UiVAL+E)ug9>tNBA-3qm|ReL3A;HuLqgU;-I~Y_h18&gvA5Y
zi{XX9%(x(lded<2#v8x>Ds9zf25B>~kJB3dW)vAOO;Q?y?|Fh`u#^O^WMgx`7x~V8
z<Hd%2fIAZgixY|kSbiQT-^y32a5>DeW0EgOotIW*y(71SA2}9Q#@b@NqAjD?oKK%W
z9DCQqhH|CR5(_`F%gDhdEiOBeaN!2-<5<3X5I@2{8HCXo6djZtBo(VWg0M>6<nnf?
zo8z2^O4Z>yAl6KBd5C*!5sV&ZCfv`QiIjyMF?e*hS;A}*5+lvgDwTCx$M&f^d!hEX
zcFyDZ=bwKufHtRwu?y-B8le3c3H2EEU?#6yAAP?LjjY}@ds8(Hi~h~5UEVaC<6s>t
zknUrA{_7rY(*5dP(qL8~ywqTF@*u>thd|<3q<YvS4%j)u?6ZuRSaeZWNErHTE_N8x
zFN8#_U%1W5j(riqpdN{OcTo?aEppTb15383cOJJ1yg&}Ng}w7Q=vQ{_Vt;<W<Ya?k
zr7g~W{yAI1WfO$Jr+xHY)4O#7UQR*`JeMa#q`o`~tqLWBYy=<z3G`+NsYwS`rv^b#
z4qy=>@QD4x=nPHa3>Xu!AMa8pfFf9*gRNjkf_8m7ow|5Yy99`DT-Zo^YnK$W*ZzC}
z2zU$L{LuWsoAVB=C@|asoC%}>IjIIU6dp;?Og%gHh1X37``^35ZJB{^MeD7r4;xi|
z{lcwZV(}yvLV{>_A}$j7#XmdAb!h^;c`i{QywA*4e9O?fRnU&~p5sEkeZ4|V=0CcT
z8-elXvWkI@K&LK#x52RSyi>JH+BU`4-m&`H2G<UjMu|=qeJpU7h`nrsTvo~ck7&}Z
zccT4nm~mSO5eLk~{ok0uhzUXPKDQ5Yv;Zfu94D59e@6?*gs-o$lQ%Bha6)f=wubiC
zF7@p!=t$cJy3x_m^Ejs;CqeO*AMgc%pk9&8kM{*ZlXGjRyDx}{O-e&Th1W;&7e3lY
zTte8J8N8B<!M2?M|0iG2V?9Aj0H;X`#9WbO8=Jyvp#vx)OStSRE5eDx_d|3wJ_DaI
z?xt*E$i`UeVEqql*=Ed<;e1C(+lnbjOZtwGBKS$KM%R@vQM(zpLH{mZGK_EG1i~I3
zAnH&=f5Ge{)bebm?pn8DC)>OB>AfG7441RhMoKhm%l_xq9oqWB!Ofn}EP1b>^)mEI
z3ZUY>QkU%br{7D5#v!o(tKaJg_j+NUo;7qQHak3GhVAlkelKCU1O5He?<E{+YTro6
z|Cy0_k=QWt|FaK_e(|q9Fb2;8VJD;z_;K8KJJb>2u%J@sZig<tZV-ct?{?@d)(^Vw
zc8G{H>~@$=(=&~1Okv?U?KvMh@?&l7Za><7|Bf9?=v^)KLMVD74?R%{7$ULfv#+pv
z*vL<}bcpex`>|krbEP}g$ha$u>lJH^JE2!t!gVtTJkVl=RDiFD;(;qN$O*X`X?KB%
z%?|lKfx100Jydr&8vA9@KQ&88%e;llURXZ=2>VzbIi_jzv~*wk1l_cIN#w$rvo<dp
z*}gozd88NUygl0SE+Q6!Fnf$qgKaD95WDANpECq6(-Esj=ySUrb%Dzf9(rVrVW$D@
z33jySrC=yC(0*$<vtt~DK$mj?pAQI$j|HwyWU$<)=lkc4o4V-G(#;2@-*0T|UbmuA
z8!7%k-~O#v&!~8I&xYnzx3u=D3A0+Hig-*c{>4}g0S`btCYR*gc!1~;&U0Z_l$}th
zMB(Oj0K?bh!ac5PuY5_nXoYMp+l|eKCO!w5N9O{8!cMeCHQMY%uxx=p<LI_`g^nfN
zgr~+C#s2Pb$!c;OT(d3Xuuay)IP3sq#jhhiakb-sst_ltLXe3ev>mPopE$ubVdjf)
zg3PV|(auZGPaKYA5vrAC4wb-EY^FZjuk<vwbK?9xYuD^wP`;gd?KoC4IwvJLC#YYa
zetlT0Nllu~E1fZ;bbiy^vN6-AYVCUVtk<X!EzQsG3fgFE{hb{Kx8X5Y6>5lW2b7RU
zR$uC^cErXr6Zb9hNT?m`B}78K>ceWYBnD*@;JZXhaEr9F@yF44u7tWY7wv<Qgj>i#
z=t37kjB!?0B9Ai`22J{1+a9x4s0-HYqu>1;P%<d1pk>V1q^2}EW5I&y`}c2d`sG)9
zqFO(j&~-}tY_6|#U@H;g@fzg*{h*jly4>&BNPsUc;5u6-+XVgKkX=7;<a5^#kS`DA
zRf>Esi1JJ}>eIs+h4-*M^1Q3Og|ZOj<E&E*E3QIt8I{+WjyhFQ)<M^@bmy!n%L)G>
zk*AieK8N=RG-=ljc!_P<3U*ku7M@LK%|f8zHAmQMw(ru+;9%n#s1<^|%y(4s2S*s;
zGM;pWN0)A#E@E|}45HovYe^+_QC<*&2|nSve+WjPtHcM(3ExCbi0Cfclm#Kw8+?Gf
zMeu9qkt5E{%G!OiRz3Dw<@#^flSkP!=Z<CUNp0e-uiIVvQJamHLm5>D8najeqR;pa
zmF=)zI!o_uF*)$I_~73;a6CPldkQ^;+|VDny8SPCR*|<JQ=-3H?sP}}YshJuVJ|V%
zEsvKi4`3)EU(zfGG^-u&uBL<O2KduCG{N5rD-3e=)l&IRcF2_|H0~MnlocP_Zf(XK
z+^=tIIr)O-=q-2nYxPz=iJtD|l6wkW{+QhS-(GM$J(_zJS@@XTCb!(aHb_MKcF-Jv
zcnolz6m>STL1<m<EJd(t-ZzT9lno%r9WJ@2kX&bOA$9TG23v0HOUV7AOYT+H3}<df
z*&g=Xd<;Er<PZW94xzO>hmf~Zi8b=xOA`>TAvbKjryu~)4wu*)N>CWzc!E<{9Vb0F
z%**C~$vuUhcjk74EXDjw?p5SNXKqK?ac;Rev^GfAkPCp;Zqab$j&;k;sSdeCuUr>Y
zCw99L?a8sVhy3lV)4}%w?WH`LdkQ^_+%}6#(7)taMfN|YL>-^D5;<I`U%>T_fQx}b
z?+UoEXEE^1Dbz8Nbv|qHw$~|k(l8K|l4oxP`jW#HmTYP8FL|a=Xgc;hNsrBAAgfY{
zj!}o}w6SYmMYGpwAZv20_R=!la$K<GfQ(YonU5wLtVIr3SCjK(FdyfDHT_#l7Wg7^
zwb4@f4im`LLEvQuZ7s&R*cU;xG#@QBkan{~8{pK5ve)XKgJTYj;E*AYPM7X^&`vN7
zJLQO3f@}IZ<%qlrZv|@Pt!Rf<SP!7~=aqZ7yWECxYlZcmUWOQPybOIb!?=fafqHHO
znNrV@*I^6N$MUntyV;S~NLE>6A5*eEmbW7JM&&&l9AYdtx84K(#)5wQMep<ycv{m_
z^bU-jb?kWJJ7csJnCxw90YO<DPvEx^|B`14?cvB%`>}a|OQ6Y)ONSFt?;BC4fQr`%
zn&~B=LXGjRr3q{!2gmjZPBUZp>O}!-ksa2JcxtajNSz$p`Y3%g_Y}%wlI*z!*WtPK
z@#>x%@M8!)TCzS`MP30N;NZ{=;n0b7a{{_z0o@cDj;FvR_S(^F5qZR$$iv@ELRS3x
zg{&r_q#NR<`4!)%1mY)4Lk@o3)A3zFj$*goS6F9up52imq>hMe+#{XA{>=utjyy@;
z1<B<J<sCyq!+OIz#(d+;#&?aM8GrML^l0j_+p~w~T7=?{@_NDRu6MHccJE8x4}4O5
zrub~}`PnzocfRi@e#w5z{T})!_>c16<bT7IZW>{F*7T0)Yy97W#DLZT0|Gt|Y!bLK
z@aLd@LC*&#1dj{eAN*TLMo5p4H$#n~{X*XiiwY|aI~5)f-amYK_}8`KYK^Y7v)1KW
ze?(+Nlt=7~lp`lZR@F|c-MjXkI?;9Bi^_~@9W^-GE4ps<km#M!|1nQ8zZYYQX%<r)
zvpVKvtP&d#+c36SY}eSsalvuD;@+(rR(D=}r})<sLK2oH+(?uYm(?@Z>sfDEy{dX&
z*ZZNqNByMwo$B|kKdk=x`mfbLQ~!qsv_Wu#dJSG^aI#@i!+A+jNzWxcXq3>XywUHC
zvl?${T%BA$`9O*(rEW@-lujvwQp!@6q-@1^PpX_6nc66|U25OdVX0G6=cjH;eJS;H
z>iN{4(@0uaT3lLYT9>rpX*1K-rahZ>B<*zCcWFPTlk~v!y6L&;ozwfKk4>MFzBqkT
z`r-7~)2q_2r`Ke7W<+EpWwgjB$QYSXma!ybd&ZHB;~Af3;9sza9%gZYw;C@xHrT(}
ze@HF(N$@%KYd~Xu{+#yu;z3Hy=blSECL^yW2t$0N6_8HtAF81kB-RL?gSDiUd<tnJ
z8K~SKgOygK1MN&&vQO~rJgFz`B$4tUl0$zdaZ&`Cz<QH8tj78q@()JZkJKKCzn_gX
z7HI@hb0q$}FKYv@MlF&f2a+s#Jy|NplIhYz(#Tk!bXJBDqY_D;RGN{#N;-K`o`*CH
z*OSR0Wj}e6^&uPN>7<?#jQf4alSYPT&mk>F{`%rvz~7f|kv#b~<ZDMNl%~XJu#z|h
z_GkG%VTiWKXE~^I2-=%Ne5JW0NqU-4why~cbt3KL`DCJ;MB2ztBK0O6*(Fj(UW@W(
zk}(Ybm4O9YcggL^MEss(xP!d2(8k5c%imi>+OS(V*C9<9)~)b&WN+fDd{1hly&<wp
zB%C|3y@<dzkV81fDk-D{IGHDJA;aa9WVo`7^aLDUOeXUbBN-^YNd_6(lfKeQ?E8+D
z6Y^Npi))#Y15zZJBX=Q1>>*;$AEM0th;P0_mP@xtXEqjbwROob++QLcAXD*fALVT_
z5)oSkhG}FFaGqzxPRVjB(pp(SisegWk>W#^7*3)sTS$SthP0Fy;`cIA&Qi%@<8d;?
zm`!?1f09}31u{+gicC@b$R<N18BZ^hG4u<_mer(<)RL4*d8DJ116*7oOO#t=5t~Cw
zSqbSOttC-_Clho~Bu^siP-n3G6RBeyZ%ga}+VKF9why3dK0tdOK$m;~J@El)kCcwY
z@3%!69e6oNc}VS%(vkSRww#VRT`E1X9*NV_;}Ymg&=#jJdt!a8$2fiA{1Vb32VHU6
za!s73T#}$EPB)KBoQ^<4u8E~u4{&_q{4CN|2mNpwa!s6eToY&qUoqZ|rJ4_>hGh>@
zv`o(>7}f5dJD{@t>`lxDMA?FIL};|_EPYBw@!@Z00r)kK2o0#MUO<QL-8&F7A+d-T
z1tLcow=i7N9sIeR3$50SuN?~VtEZ=o!WjN7j$$-WNs<*NNx0BI62mXq!+?*XVAChX
zpoj~8!+>9kgthCk?FAeeQ<w*TSHf2@@*hmXTX>BbWTVXQ$qH&P$ao+t*tcKyz(a$0
ziFtaUG=mZF$S4&521=A{@bJJJ?jMwD|A^Y~P`}2R-?D#D6mNm!10?Xa^Hdv0YCn4c
z!()gn<bx)_j|`hPf#rJ+*+~wPL*zI)O+F#l$z5W_KPBqTPP4Dsx8`7TggMF_Yfdod
zn%kKx%m-ufpCIraf76UNcj3*$<OF%2RFR*^uXwYU{mmeAxVg4?GsopkYW>6d0|~Xh
zgZ(2;!bkoW(tV`<*4&yiHLuhhxiaU<tSd9GOuJHXW!ROXD-ACHc4^f=Xr}?{&p;Z)
z0r{_=*U2&R26>abMcyX!$!p{c`GA}yACiyAIp}~3$j4}N75Nl$`9j3Benu{k&&e0$
zBKeXmCQHawa*h0en1JhO+fworxj}v=H_0t>n=B)DAjji_h<@9L>*)H2<J{Mtct4nt
z<{*I(fiqir73W<@2a$#&K~oj!D9*6upg#!T1qrw%<UOR<kxtvwe4O7$`UHvRtFoup
zaQ+nO3#2nh7m>b1dJ^d?r0<YEM!JM_8EGNX6{H`LK0~^0Pm6K>3F$5pfA3d&T7vUE
zq(6|ZBK?Vk9t3U(`5UPQ=>`%8rAW(g=G4N|9pH*P+>wMH!DV$W_pZR;M7ww*t8hl}
z0#A??34`Ro6IlZk1|h-oOxEHYjue64>u|1(6ouc<;2dj9WHZhQwnVnzoP(5$Jdpa$
z?Q98g{={5iOJqCF=m(z24$fC>iR`qHq|O%49)<WfKdXvfqt->1c6BN}rNM(5S!j~k
zoHw?eg$`+CVM!L+Af}N;N;0>%Nb&7^6~+~rmzkI4k631IZyqyrghh@QXFM3WtSH%R
zA-xO7;#g1^V`)_s>G(Oas3^CQMdroe4dh-{gaS(J1>h`hCD$~vC`p~o7Ac`eVb4O#
zympb6R_%%+V`9vCmJ>Y+EhpMV#uODbvKSmN0@f$ShTEVuCRq#(8d*GSCG;+|w2HKl
zqGii?dA$qcVl4BPEsI=+7U<U}+^=7w<k1_gTyFpad9TrVJx~-*aWRqnMqEr>3?M9O
z*T~|T)VX(I9zcu%h+avS*t|v-?<7kcPCiM9tX^tf*1PcaRv0bAU-KYK3kqK+vC@sQ
zqDV^|fHg0D4I8`Y_joIPlPs;4zGf!<3oGMDyU5oe^4-9KAd62!3)a!A)SESgMv+=C
zI@FJNG(5`M<tCW}`7g<FPhLB1U~U}0r%WBvIjau;Wr&Xs5Af!{jBT<SM2R;%a+71j
z{rNr5tR(v{uK}HN8`R?WydR$1IVlgni0b2QMC~@Dt0{hTvT8Bm(8EM4)Oq|+W};Kn
zmch6;m>=fyLvk=4bmxbO{IHrIUg8HUKST%H-k8GQn8M$fqWXv9wTa>UlK;BP57FVs
zJeVI=^TQ|nVC9FFJYRAIe}f;A%{a8g0Yr~jf}hD=jM;8v2uA2ZaGVQdwy>E6YePsd
z;%5+TLcHZ%$U-ZL33F_)A)JKJ=SYCz1o1Omc1+hEWE7uuWKWbj2+8&v3z=|b`^^yd
zRAT?l_fVZ=|1G=xR!9Q4iY-6?A3}U>Coj{F6p&M-EjVKtnSnRQlF``3uL2x44gYsD
z6<;%~C=>A=jmV^txXLFJz+W5VS8LoU#krT`t;ynQB$<qylgLyYM<8b}ygdx50;vsB
zDek)7Gdu3~74J<(c@t3!hoLbbNQYm&skq`0WxKuG$nh?Rx&p1p#g5j=WSaOkCPQ&&
zDBvA~k{hGcNoYqhAQ+2#BT)y3bTaOALA%<*0@e+?Cg-7_c+DvS+c<#XmN@k$aYH}w
zosB(U|F^>O&wu;bA9TZSFIduB;BFpziUPYcaGZ}X#XPwH$Hn+k%z}J(yyavij=MlJ
z472JT{1$sAi#gGR-(c?e@)8KjO+mSGyY^iQNW}0NlS)a%=t(2Tk%-cv6%$B=m=(Eg
zLA*6?<fI9JkiX9pHoL(Yu*qX^wO-`SLj=#)($};e&6Tc5zu^BwRnt}wf;?mc^JC$x
zF>A$!u?pFTEoLj^_Ut+K7t`b}`1X>Lq!x0aG!SVL%2>h6!TVQSzQ0J-wlAy=`qxKp
zZ~vkU$G1=}1Wb8=$$(f-A6Qc2A*a@ZRlWgwC<Szo0WWqI)*t199-0FOEzxV8(0AQo
z>*$4^>q`nre=>j+lfjtF)?*Ia2yD8_EXT<Sa+175-gS{%&XcdnH`om3J2&~{w&;Z>
z)>D87qZBnJpw3W8Hr$gPWc2_<ChZpzh!k&aMH*XE09i16+?U`1y@g#^Z;^bY&PctH
z`XKeSUPpY~P14_b18bUYkd?T%0q<`@+Jf{t$~lJg2GW~IZy~*n^cl*$fb==i7f2V8
zzC`*8?|+T-4brzr-yvN?`T^-jr0YmOA>BZoKO@~lx`lKbb>BgvWB{Z_e*6eDQ3&dt
zuU&)&(ZqV0<U+1&3cpr!>v!Zll8n0_<L({YsluHqP?Zeq^tB$x`=65W)>8bZ?g?bR
zwJlj}JxHFi?!r61z({KnfLvEG4uixUzE0Z*cW&X1pQ!yu^mt?IFC+))W28@zs*pZK
z3dS?6ZbGt^6$tF!0CsNxyElN{8^G)hQT9rl*CF3}q-T&eB7KE>Un6~k^exhNNT7S`
zCX|T(G0gYMMLD-o&TW))8$EIx@7%^axAD$xymK4x+y>m807)VE!T_{}*I-1iUd69)
zVEigDeiazM3XER`#;*d0ChJ1{FSmtc1JWj>El9kTx6#VmXyt9R@-|v|8?C$z%ya-u
z9g*^pIwSSAmI0zoq@Oh$b$SD`O@M3@Aln4UHUY9tfNT?LFGKBRsJ#rem!bADj#IoL
zkvMpF3axk1KbLXk3+iia{hbWO9Y#6<w*x>6;7NGu2mRryz_6e76Z8-46?oRy`X%1K
zDX=@<dKmqC4!L)te@~)+Pms;l&jdD4h$H`hKkKb)aO{MVn9>7SBg#iczBdCTOqUPj
zLH@B`1C7}}0rvA_PoNa>vA$@<k}dwR-n9N~|FszK*+14>)++1o*8lKJ>&Mo+)}`Rv
ze9u$yu|lf0eueb1?b`haJGuR1<<dDm)&qLIw(I}vXtlWKz(~QzdI#9%=j%9ddHa9-
zIN{M>u$7}<J$kman%~vm1a=*5dNen3{r2cRt~a`VY&mRYJhmi%p4(dF`i||lvq%2<
z%z4Lp-TFP=|IyZyptOJeSO@Y)*5hc=mpFc9EwP@o-Ub~8V1%8vUPX^_?U10P0BbGW
z8-r)Wy5IT(QVQN!YApoy@|DUa>k;cIM-RVD{51_+{8wu|<QM&}KjY>7_YbHIeTw59
zUb~g+eE;=>_Cg0lenHK=?f>%evyOQD6YI6d-?!Zb7s2Ph;nDqVJAHC}kYMcF$D~Uh
zlX%iwzhkEd(2cbls7>^~<Jmc@C<kh4sd%fS{^Z}!PKwp@fTQ38It;>bk@bc(U9*pJ
zeqXzSyL*t*_!Z93;z0%ba9oO+$^NnKb^Q89|7APdFmC-GBl2@_JpR$8HCqO8w3eg1
zQ!Y1Leu7p%aJjVq#Ec?7)(ad%*7KmcS8x<u=rOtLBM-Mv{GT7qy|<Z|2@QD78(+$4
z8C*ONUkP$jeel{O$VZ-#L0aHm9;EhKkdE@fd%NIU2NF^NB9i*z8w(k!KUR4Sgj`w|
zmX~FaveuDJkhHeo+ZYnlcaXO*k71=Xmx2bMo=nVL1`;Of4ij}pin{q;Me%r^fNw37
zlZY`{4_^w1>SGpcjIS3;OU9ci_=ZA?OUKg;e1idN6O5f4e7zuJ<wACCif=g9;Wk4Z
z&GGd?Yg&NT^6)i~_V^mnvJQxq=WX*4ZIgxcCqw@04O|r9YZUDa67BRvI|l;RVthT(
z;z8(j-e#;S!R#G||Dm=4@rYbf3<C}};Wx)ZB(U%r;Cvl+E(V*>akT3Mq(%jD<2l^_
z7<M5q$b#nq;b*W38DQ7>3Q&Cw+<5?ZSJ5BWfI&%Mko#Y37z_{?3=kL$MwtP?2=BvS
zfk*rg4tyE3?1ngU+=U5z@wYQ^CmUZsfi*9IHBW&x{=W{JV$5)?`3tOh3#^$0);PZM
z0dZ%1slXK0x8W-bOiAct{O5Pl4__Zrgs&p7=HY@h4}mpbp|vpBmsS9hl|o-xOP&V&
z9FGA4kHG?u0RoS~0*}GuD88Wrj|PE9CNRhZ20aA^y#)r1z#spgdK`C>z?}@+*Db)q
zY0v|7&ovk?)DGPKi|*5aOB@(q@T-daoc@fh`{$WSr?$NcaBSbJwV5>Q+Pw>o-CFm>
zu~+x5I2QEkjHlvFUIN#X6qhT>?TX>bFk-^Q@g!l?q@lw}Qt8;yLrIo6HWSB=6Q+!x
zgcUiqlDN*!kWeB@=B=>RVQUfB$M`+UOGWRd0rO?R-JAAY9{+DZ83!N+_A<fpi-9J2
z0ngG}2;}=BsgXfavjnUrfMF3(O#o0F)FOk}0WysZnEF9t!ax?tUJjsYMqnCb1dcR7
z+yd$)G66^Q<^uUkfnx;_S3}%j1B`>^49kGxD}XzJRsmP&fkwMQY9MAY0dp}I!+M4)
eV86NqxDsw7!zPB!3|kns0!?HDrgK@KItBpba)3_&

diff --git a/static/fonts/roboto-v18-latin-700.woff b/static/fonts/roboto-v18-latin-700.woff
deleted file mode 100644
index a0d26516a8c8d9d85722e22fe8c7ff98c4561b95..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19888
zcmYg%b8sik_w^^Xv$1X4Ha50x+qP{d8{4+Mv9Yo3{PKL?f8MS-HFZy)+jZwwP1os}
z8aH_{F#r(YXUNt8kpH_z6#vBkWB!Z&{~<0SDh2=mCI4{ZKQIOh0IL)KEwA*$Z2|yb
zcK`tF+Ysj7inx-B5C8x%_roLnV1nHcu~}Y;o(TYe-2KV>{R4fM9O51$8v}a)0E*#9
zQw;!s$PA#BZW_5d6953v|LG+D1GO(`v#GtA4FCW`@uOq@L6_bgR;8JN(@!p}_Kybk
ze}Dv_m|1(6{)FZL0G9&*V9|z1O(1V>Y~v09i2c+D_?ZK|;G!cznwuCH|J;JePt5io
zK2{dA&40)r&ig0E{{aaM8F;(7jq^{gcs2k4{G$hHnW+{fwzf0+(MkPCfR=u+t?eZ6
zW@F&~Q;YQK4@vMJK=442Yz=Hoez=#Pc<x8%i=E4vVsGc<3;@WC{ctG%>Ar0M#`caT
zKe;mh)%W*DM@i+%#^AmV*Utz9^cw@b?|mEmw-8*G3Mj8NKmY<!h!Xe1tq>FVD6=M_
zJY6H)B*rDiCPp~MDW<a1{ms0`R}uRS14c2;4<QAH3E;jSlL}&QDvc*T+r1ML!<cHs
z7gw#%d9>bQ!$Zv-(rk0>o;w<eXJ~dQdtI)4hFv6|^L_cS(%Sj9f`k-5X^oaprLNK)
zJ5TR5tED%4qSpQRtJdh@T<`9QohcKP0F;QpbBlWWO{}3lED<s2h^&@u9}ijI<Y7u#
zr-CjMXIh#!<4l@K={qKM$RRt&cqHU@%-yt$#Mk2EiG=^l_~X@B<s;@L?^ZyOmR?3y
zo>q#jq~%mg=ipxR_+36%SnsTtNYXU(!*~g?Cc#vxAtF45#5hr$&qPKaIVod6*_1I0
zyDcHBErWB)h!193pYfNn;`F^c5WO)i_UaH?OG6I2Lu*-Q-23aV-Xr#p)SX+euRc20
z#<1>-146tbB)or&u?ph6a4ZWV%(P7lV%)qB$c*F{<PN=#ZrLZfgPf&ECWKjQs0a@V
z6(|G9rlD(71=%Tk4ys|c%jO}fr<yvo*h1J@!suE;5F3xGqgRigSX<@2t~om=c8_jv
zUY|jDZqq29it?uxyhY7DdS#F6`7!HNwCfc%>ovGnYvnrY)x1|*l}K8Hx&3bxj9C<i
z#2{tkH-F_B=$jb$AL<xb9A!|%5jfY+$B<$z*dk7?Av?XlDeNF?k3aWfyh&(|llHv4
z$-FayfhRPiA{sN@p-ec05{O@8ow*e`+PtVUj#fssd5gmy!||3J`Kig|Ayx|iI&-TR
z{n9KsUute&I^IHcirX%GwyHLA(X54A|Kqz8hIOZ17RIVspwgjhx1?FU=xH-2Ci|y2
zTUL8kRmvWsp=*iEi`e36t+0B%^fFV>;f15bvv&DJ?lHNBRSn_PfVWV*IeMue^nXjR
zb!9yAv4<vHWsFuoSvAX@Hw$7nuX+5x9w7AyMw*4-H&8xg-JtlYAg-%peN9N?M3lq&
z#JVBfBJtCbu(KEppoR{nH{`i_h?}h*E;@Jb;Jf$6alT7$U*lc7vFkyOGRk@_-<<Y)
zhBYSw??)de35*nJghaEJIBAsw7jQNK0HoRlAy);*ZiC|mx@splXFg2M3AyO8!M&lq
zK*7QV{N7w$Xk%&w-kMgAWoerS@~7MQVYxewJ63kV_&PT(^!lteeHR7UR<?Wc=rIp^
z4qrQT-iyxP&LOXU?dFHG=+hFluHz|@$#t*DR&F|rP#XhE%c^$BkY+UuPT1;h9)--y
z>o@Cl<PR@C>OvMA7@1x5zyLKWs3IJ%<~*bxOikw&J8v%QyH4~-N_c*l_eJ&(rATma
z3cMGiblBLy6f0}r*5-ibG+>@l*6dc?>>aq>HTo6k!O3=Gm}xcb-eXHn-MjZjpeos9
zM+0irfpwT3{Hne7Jv-E#)@7p_kiNcipn*)Q)o(lWm<zl&KAJ{fBIjUia4yN#0CGZa
zm0AdYdjYS3mHv0$WZeU+Q(fNERJlzo&%yB<P(X<G-vKRW{xoafT0ZB9`PhQvh<@wX
zSDk04^PM(h7^MdjZDDMV?-rwpan!M-aKi}76jYRSp#f)Gk}yshM{CkbOwo|&63vlY
z;AO^KxI3AavBuRA_}pnT6J$4~L1Whm8DCN2M)Sg)$A`H|RYO}MC9&P@Wkbv$FD-J3
zDG|(J5=w&x5t#&7Qz^PelDIXdY;2N!F-o&oR0cK24DzB3dSVTNVVY!bG)W|C(j=9{
zVM|Q05Mw1;sIO-;9cs#DNi^)@XxhX<HcFGu!#ZK;+o_pbei1SI+UWjo)XSAI44M8n
z>WCLsKLXRV<hm>$;~T^{PT%mNLr0lA&KXRm@)U!=^Ac>biE}dClrr(z&Vi)q`OWGR
zlnHyuQk*CxNs`FSvWBJ;khX|Bsp(q9@tld1+T;CyH(h#?4J^r;f8VK-3|FDv7Y2q?
zMKDk*R;7R@HT3Edu}Se|kp|Hw%5t&3a~J!^NlqP;9;rsOC3RxNaw-mVE5>rJvx~nU
znSYkRj^d0Prwyg&FM*Elr5_pu8Y@T>BgrNXTu7YcXTi$EUwngn+VF4#e)fFXXb?qz
z1H{lgy*1V`xCYL#7MqO`xB;*R8#r!R^zt0~nVGX+Si61T*XbT$CN3`zbhFWW%p8mS
zk+bU0o1jSP0DOE5|4>obmNnW}!Q{i`zvDE2#^H&oyBcInMO}lYGAA4}Tv$s6sLG(s
znX3Kr`oHBz2TJV>9kb&DGOlzBM?xVwB^8)urwb!qZ!s$bNCN_5Cj^p!Q$Q*nceE58
z2m{zkSNGvc2IRP;ZFFu&F_M4J5Oz%Q$L#P=M=U5i1k))cQ3<}Qtk;z?$hV`05-tjR
z0*nJA=$fg)$~Gxk|9CIh?`AX0weKcU*R=1YcKSi%<FuKDXdJokCXnZP?5SYD(SPir
z)Ryv5{q%!$xc-+Y0|3yMH1^#Mc4z^czettb!Vt#EB2^7UV?ZdMU?o>IYcE~Q3#V+u
z$+zt9Z&)-c!bm?!v&hO%f9{9SaOUqRlSUJTk0uL!?!F!}2{M*z0|?za5Ph+cdyZzI
zUb$O9Go_wxvGLk*gfsYQcT0?!U1wNVWo(Tz5z06{@void;`Omo%fbqRbG?t^S{@kM
zhJIHF?Pq~Rs<eun?OeVbKI|{p@36oE2@0f&FsuS6b@jt%5+Hu4yQ$VOL+nfYIXDC-
zlWO%){()Y?@6m?!6-6qKT<u4<hPCH$vcxpbIHxnxrJYOf){Cu$C?EQ#j@5g^)~FnM
zwodhD!weYtnYa{SK(e4H%UyMK!#b8#b>lXG`m$-#*6X5qRv_rYtxqrvhiw&69LHtK
zfjpb#FGHG+!xHPt7Q-ea`<CMdu3L=rY+QT?GzFADs&Aw*;vBlhq3DmJKr7@#6IIn`
zWXs28GsIRk@G=It?gH3$^^Hm4_c&blLFEhy<o0l$4tVJF8R+)0Vs|}_DQtHIFL<J1
z2Z?z`O}hG|VMnRE24%bAqD7F~#VfRpQOh+sn;A17p2pM{%7_mn@?xUNKN9ZA$q>J$
zU-6S5U!9;0sR|^F!3#u;$qF>(T&9TrhEEYX$4-&bL{AlsT_<!QXtLLI{g^5M72p(5
z4EO@b0rY_w0abwEAD`t7p#7Oa{n7`Z0%!gBH9`OkC>H<~GzNeORtG=@#{m2SDg_{c
z_W|I+cL2cuE#tnf6AL5`Du@wkwtn7GNhA=R-tI7*;Q#<d>lBA?d1BD}vw*9U&yNUG
z5B{0z7QnmfJM$UwcN4EN(Bs&L505@QqcE>M@?O5;^%)}Zz5<_jQ_G&%q(i0;pY{p%
zMM6VFOb!u_yj3pgVL@-UJ9{jxjFW4SY|voOf~McG74~|Ha)@O8I`CwouyM&5E2fOV
z-3C;a&HTfp-mVmRUi8QoCsKq!PJ)6|sfszwg$Ol4v~>&P&c~xg%S(R_SL4AobdwNG
z|M0WMB4og8kG0w7vvno=6XMp+-#mS}Yb;Z`AY~P}x(OPFvi>B?;%b3GAz`?npP-q8
zX^t>f)@5A!)TuR6BaC;2S9NAH60UF>8|s80&BSLyQ%umo5HYRU*sW%P28p_~NLJ_x
zLWw54`Nz)w^bQgL{QV6;a9^+ThHyt!S-IhKGj&~Tr0paOAjy&y1O}BLhUzAJ*cML0
zvLtvQTM*5BAnKNKU?!r7^e-fc6cecj4kQ4M)DOFu_PgGKTU)!i>-oO-mTzF@HaX69
zx;j1H1OfvGl2G|YE|Cx72O0SL1R!U=Jt&z-93|l%l)DdD1p;L~DW3q1E|pPnxPG|G
z$y?<F=}`*WBoEvo5AVmk)2Uu}?VP8>M2ewUV}!d@R8iw~<jVPyiZhst6DdTEm@MJI
zzfyjv!8BeVCeFAxlYXNk@d1LAq5p)FhlCW)&!q~(dMPpqLW$b)mx5(0hn)ksBK84j
z6J2Kfi}9XniN5vGBQb%SEsKO3q+O~E&~k{`2w8E}zR{w}u^qjhrlwEVP~;_^@qam6
ztru&xwr>Rp5T9x-=t2-MSCIU16v#JI?lsgWt{@RW#vtQ<9F~j7Go4Mt89@!PW5_>y
za$4nacn_Np;YuIs?PKrDgC?*uY!eY;u~scIy7(ZRkCwsH4#ap7G-<<F4G6$ZmKTpd
zCJ4k8xjFrVEV7DH%3Vnkh91y^W7NK?F}(XX!bZQInW24b_S}*HKi*DuSdKqvk;t}@
zi3l@$Z(l~aK0kHvLZUHBJ~DZL-vIvBK&vsxnkU7H<(SJbN9)flZ{oY{)%>O%{&KsN
zQ|uF;%CXL-K-g|5i25s{ZOP~BG2-Vf09Qy;-vkiMS28<>+0pzPWTae@H3<{#H(!8>
z#Ku}c&Vl3wP~af!%&y@QhQ1p<szx0Sr6EP+4ObI(w!^Tc$}P9+?__1)n7vd@B{^x?
zSqW*VM$N&Ca;R8!ope$u)2adlr(#l);x*dkWUkZ1=4bXS7%bn%_2t6Ghl$1<?#D9+
zJ7M3gsL__}Z=g%CSKiRwDmf4?7n~mF-JV(*Jzt&E*=I8OiSxgu^4~SYXpg@C3SXxn
zmV0OAGgBb)1$q}cCmjFzK!!s8fiC}zj`jyLLj$J=mQgL$@M~E2LdJA6KJ{WsqGoL8
z_JSZ+A^2WffU!t5At9NV7BkXXH|*A%EJtDdLR!J4_Ff^hkZULk=jiVPDjB+MzeJ-(
zmCM57!lsDeC8^vm-v}KA<oV_6xkQsNcv_9Ov+*ONESB*J^U!Y&J?*!%0Fz0CoGHn?
zb!%&8bRD4?nuL|<oklCknZTS*-M>qdHcR;`-Ky;|(tKKVR-+Bsubr;+iOlP?=1TPJ
zt$TSkhYmIZfvM4|Dk+P<G4~75P%8?W&+WNFpo3RiGR1X2FgZUa&5cYTmZ6CZZ(1Ew
zj3aN%It!`(S?7<m)hhquF6%A$LuMI~*pJa4(<@rbURG9u@xbOqR3xJ9odf%qIkjF2
zO-szPBVT1QusKFchpXX$`FK@)&2RcOv}fLP!%S};xr>)3?hA3*DY{;K;{vO?0jp^w
zBnScax~J!!TCb~ff37R`p>qKJG)_*f_2XO$tp&=4x#^w4Lg?Iq5{ffO(*+P5y0Bu7
z)-hIESZFlY;S#?;FNn7kbVMaiPgQgxkvK+b%{5Kp<&4`039e$t6r~47&i&6gHfucD
zU=hhEz2A6|95Io@=d3pByr;?Oy`lr=S|&|047&{zn{AaPak&V+@YIaO>f-G!J+!jt
zK)z-om#6REnEx_qUMQT8am!eaIerMXa@?30B=_6MVXK6@1ebnE$K5YigsFDE=fSx9
zk@yBTT6U0xhuhYNjaMAPXEqO4@=TICBNR3O;~90*n#hE4csL~;3&HKJvD?p)1Dl#p
zI6<-4J<D)eT9L@L1mD;w^j{NLQse13j8-hpHc|J+{Uc_&IJ+$OdeWDQzr(|k1fLXH
z7m4_!H~}J20B<yJ)@(0)w@5^#K<Di(K4;+IspcDuPSC4)YT_v|7wk$wAk51>jx#AA
zgkJ!^NafdnDj-d^q!5XT+|<6iXyr7vI>t)sO8`e!t;LSVWn!t(s0L`j+*_n20bdXp
zrLLS-C}z8%Y;Bxv#Un8=&iCkGhUODxXVeS>4_*Zt+VsG49E?3EapwFO6VLRhfrq(P
zbh3+&llGm)X1iMJ-c+X(IQ2`HD@+?Dbr}{`-HzS=bN#3<*(pupr3AAB3lMzH%o#Lp
zjwm7!OC_pmTIAGh{D&e7k8}jEZ_JjjYGlE{f+$Xt5Dl&rJ&r?vC}oG*!67{3?*6@k
zJRY)>A|Zo`fX^g=#X!_cPuP6|=84?MfEQH9wp?U((u!1j?dgHARfV_NjgR;QkZ=_R
z!!>RfRKj4965RnuH8@O)BB7@hB=J>sXOz<Pjx;V)JHcDv*1TffpHcIM*945UN5iM&
zw^~Mrd-FhuJ!uzR6Nv6@$A#M0_>&afq(+Al`PD`V>K~$4i`~HHg`S?`Ra?u;K2H_n
zT{_xIg6d+$v)4WM0egBZSEulQaJv%v<V3#%z9)7z9sAP3ijIBQ4=SI<b#-Lj07ArU
zc9gK&6?H;O{7RRMT?Md1b4>2UYl0-?(4mge+3DWyuror5ZtiGw!ix4U(A!4hmXwD5
zdooidI~lrk3tohXyRRh$6!YiS>O_uBg~Y<I!xF*@Ri<xBXXXy5WNQ-)DH+TER5dnt
z?RN{|itfXnPkB;xGoC)X@_w^Fu30FZ#N_oBxXtlZugpR9R;PJJUu_xbUvE0pBD{WW
z33^#6yUF=JKTRLxgvOjb!X59x0^0Epo&b;ms+y^^YCM6UUkzEHqQy9>wsi^IY882O
zzhAoc>0*V_gQ%lLnwUQe(qb>yMQhuhAd-ABjy*B6(j_-%AAF|xh;k?>NrvDd2iKxm
z4B|xwDVDH|{CJ4R2>O`pg;oV2(+F71UzFkqakzXO6-;UyBXz@#!VAXET$Zh?X~Ol^
zs03KEE)85G6xN3ROr;136>eG5W&wBmTA-Jwp1W_(4eWO&(beX7*~CUGd=+`ZPUUgA
zniowR8r>cEc#;JzXi3+|VBcOnYzL)H<?^xf0z<+YVl=DC`TxS1Q)?a`cG9>0=Uamq
z2Av*I0NKq5f?&E$6<CB?VvxZQCRau;4jgS!UfKp5K^e;s1%YYd{crJk048d?o$E5J
zg#9#TrS9{&RVz9Qhn>aFyTEZ@?G)r#<Za_$347k47zW1$I*tRlPDJ~oXVq%G<3Mp*
zTk;A-Ja!}Jf?%X-Sn@2YxZu1Tyn8Z4Va~a2d;K}jXL4~z#bg8W-A%wpzYXBDo~&7j
z=CA*;a@0*&4q6a%VY(d(k8)$30*$pqOr%=U2kpld30Z+;V`6%+u4Kok>-KgXl_<$=
z1cGGbO&b^EKlC+7Q7Ej))Cg@E?aVZkU_5pWjuDfc^Ww?9SC7}lQ+}4HFIFG-?Hj+I
zwikMrn3;2CPvh?%;zCcCv(?I#nOw)1kDO*D-K@JSgcUhiPVKU%nGd5KKdn2}UI(zx
z`;i#39T!}#KjP0H-gIeOQut#_n5+XBtZ$X7;y4g%miBM_<2C840TD|5XLiU5@vNNM
z#HD1y32W!^1-ha^)CU-eN2+CHTIoQjKAK|LLsPPvn30J+`j_Qe%r!l2A7{?RRwsL@
zG4>NrXhFmyPnUeIs1}UipML7DcH53`yK|5okxvNy@8&}&oRmqbwmVE73!W6TA(&Hg
zd8zLL!0A#zkJegLCI0Z)1yiK@E6k@--Z47z#%jJPioYSisc+7aJK-Tu>m)QOTg}X>
zbT`cmL<oj$A$~I&Vqv$Ck5jD?{!92kIHkpLK^LFb$}WXrR9cqQ3k3CK14p4e+Nm=`
z4?wqg2qjuuSz~Z4T}t7hpFYHQe6KlQ>(s^~8x%T?+?4B6x+1f8Pc{U{ex8oT2o-bO
zd`x9&GUmm6MAAH+;C>)&a&Wgy{vs^5jvXAvIUmMh24ts16=;*bhy{oy^jsxVwX2AP
z$Nhss(g<g8ND%jeTSaw}ANX3eK3n6DvKbPz27a=A^6Zwa_C)r~`0(A^zhwL5YJo~V
zecYDzdiIVe0oUE^wz1#x>E_OUIs4GkS$VR^;;!T4-D&c2%cTVXS6j4PRWu+j<TFkw
zH)gW@V=%$YhDTuYg$3eAYPvn?pit6-ub81v+L<!Enll`MosmHckAf_dt8au?I@ML^
z#7FSTUP_F@(IwBAw)yj%%OaGHCx1A>L%cOq*StoOW1lCZAD0r5>z{+WnqC?mL2Q~t
z8M~&A(qYHw6uaVs^s?x+WjX}A{<NSPWihihU=oB~3TpiKoLR@L_<Au;ZXPBK7)~9b
zksIG4@%Q)Qp3H+D4;JbJG2Poc(h)x0EsXVYscRh75^^3Ue^hW9@Mo9GJ^D9SE6i;O
znPiRIx?8(5<h}iZMaPp_N5)Ke-1hJ0C-gQjqq#uwE1g24)5P|u4ws?YAbAiVUjGGg
zhXx-&(_b;rU-v{@uK5S+eR^a<^A;T1aENA{X40;xeu)pE=lukpks?25u2aet6C4lJ
z%Ec%e?4<w^6mE$d9{-P)aEU5JFsr{eCm3HB_8>{TJ*;R})y>Q0O+e5aY2Gi9m$@<T
z@+~H8iuqz2_Su@2M%zk%Xfty-ct+TwbX3#o??nrA1>Qr}UqA%T*^A=vq#4(ZCVWVF
zu`V}nNJq*bwXWRpDBp@K9{TDVPw~I!dJ*r*eWd)_y?s6&U?T5}7KvR+lzmOsLuw&2
zq{!i}JXAX<(0Mm<q&?Y9v+yD$HibV0LN)ZkTKVFc88*-|nr3`RrwNnnY8?CVh^tr*
zc<a_sf|Kx%9PYkZ7nq~XZ0Aub=e&zSl?G3T`@ra{G-Ok4)VnAEcAEtV_RvR9UH&mo
zix7S^87`;mC!IS}nGhmVe_O3ffeB$7@|Y;IJq30B8P~zz5tE?6q&*Qe=rNUeMs_`T
zJdl(0)`X+vt915w#I`9Evms8)<1&3k<ne`G-6hYa={IzHfGBoPNOn(v{&{Qk*TN=y
zP|QMla!}W)5R5OH8?EI(vcZY^YW}ls3iIGwsI5sdHj|`1MM-6~5h0r|fBtoR?VJXY
z=nNjg@9Z0S@#jm#H7crO82=tV?ji4LR-JJLpSrL39%ujt)Kh`$B6A9Ga=|q=ss{<_
zqk$L3a1{}7YZ=d*`g34*vP_qVfln0SOCFbc=r#uz>@}ZKDk`cMU=@M5l@`>rqO)-F
zo#(4D=!zAGBT=Z+jIJ_hj%G1kM_owpb$Q|F?n$T`sxzW6&?fnuX)wQgt9CcP?!obl
z`|D@a7p{};a=T_%x7X8qJwwsu!FxS&nJvE4SzgI8#M8Po)5w-oZomr%@dDv5E{kN>
zcB$(DF)T>m5xWqjo^#kRtG?nme5xqPO_x=<c9a~xQprPVcI}IoyFdFoo5)YeQ|&Fy
zhgE<!rJevp@F2y?g%SnsGMSlvgBp$axc;rFQrfo=)#?dr&L(`HhLPs0@Mfk2Nti75
zZjK^1<`<}qGUO4s#$@<E@P#z$$!0k6UyxhXXA{b8y7A;7m*K7pmMG%3bg`qrE5wEc
z*pf54>v>3)hv)9YtR;uY?#6@>f`xs|@(CeCbN2DOwmc%H$<Cu^&l%btxy4zOG(z&U
zdn`%$8J02lzv+O9x<EDlDsFZH?86eif)C8ZATrl-L3c%HhR{!r6`U8yogGnIf5+8K
zFd}g8D&CzHJs*13$T?^4Km6uV9rMQiB}ylSU1v^NV;~p9f(!<#Z8(|%iAmsHG{ltZ
zJvf*sxxh^-yIRbiC<ndsS)-UV-U(DlAfB?7s(3^SUcG5$F<87_sKT7E?jD>x=>V%V
zbz8noCS2YgyUp>&_340OJ0yV<k$`P+JL6*Iwm$=B)k@6i8PRje6D&)As6CKc+atB}
zfo%8TdF(k!?f2=3%cFYWML3LRUJD+o5u#|C0&e3YiG5NohzuQ4{8&I5<7=4jl(>Y%
zwuVP9!vs@*i`Xr3cJ<-L_nF#p(u=`jF*3#YfF4+*IL!I_POA6y`MzpEe1uFe7m`ZB
zgVrEGQ&g5mJaa%Jh91-+QfxpU)XzOVq%&iV?|EkP=DxLPuIY0X3_*U<-ZWJ<_h|Iy
zaqaf>dH$_u{+<<&ip^6=wU@&20sZXookfj41s^E-wS75(*;J#QkBBlur3z=s^SFN-
z%rK>!D(4uVcFmZnCK$Nac&yLn6E+YOc#2ZGNp4WX9eIBgvSikv10hV(dm9uc2O4}d
zb-p%pk_#!Uth8j7tDO^R2%&%@LP_N>EoCl{Tt;W|7KbUfM0oX&G~L}sl!}m!u^%No
zHLbXcZ7u12pOkV$U?F(?!TQ?o=(E#d5g+DcIO9M}UZ(|PkFEPjpT4^j*h+sYe4L}v
z>bk%ASTFD8s4h_c2o@`8rPSox(#FsG-%E*w9$ouRjurs$ntfA|)SN2Kjl>nS{N?4i
zPejEdo;4T6BEC(B@Ap@k?~9uNm8s$vOsAq=iqB=F>b<#&e{BMzrg|N4gf+=btZ9+9
zOmBXT;*o*=qo|TL(;|D!_522gqZ*gmg8do}Y&;(*YQ0d!*!*7=!D}_bxKf26O%n);
z6mrWsIW_}oYw=&H(#u9#ICQPvtNqpQxPT7of!s&6lwHIf#wHHFVFO>8hr4-|;cgg;
zpkW#!)E34prNbRLBV=AV`j0ypX*c}Q;%C32HYIq^Rl&F7Vt8h7zi}WOK5Bnpp)8jg
z$n;b{))vWG_y=2cV*~RoZYXE(<JusmJDxA{D36|ir@oaFc+aTM%f6LW1^H8quYVP%
zk)l#i?J{)se<1z6;{^XfG_(Hph^Y>!z(HgrQ!BFW8&8ksWJ&dvGGbJVB%G9f>+~fC
zx1c6CY(Qdzsayf>!h1tKubB|ov<M>_KCkL6JRXEz%o}kcFmO-Q_HD{T?X;YnzS?n{
z=<mfx<V5t0S6;FK=N$qH%7i;Pr;+BXpbX(gDLz{$X#(L&LHW+@E$p4m11)hX{`sbX
zo_Imad=Vx#lMqqN|0(70_0HMLpN=<lV0b9vz)!{<0S-m}=6+^M*GMS_fx^6Qu*S4?
z<R?^nqWIESkyKkkCuE8|X(DFy7^(8tDfDoV;))GIMi3&G#~CGwPJaQ;gL|4FO?wsq
zoGK<c2_z5*d9&vRKdqLq!>ErcrflIM8PIfrRqI|daV(J;`#l0}4a<tkC|}&Xsut*x
z?Pz_q=v&~%sKpm{3INSylr1uPEu(M;FKrWVs86s)gF|^8*%xVXFokal;J#8!18XR-
z2AA!!fo_TrDU3+LGKu+jxK}+myCLsJuIZl0GF--F)U-aZ@3A{}e}YEcZhDK~<2Gql
z@_gKUnZ1#rOWDQoe1Tha^j0!I7M`FNrk^!b1!dRez6)nP*P#~m=F|H0bpt88KDYg1
zU|MZt6@5zU--i+E1cEC-A;MH?T%#RAY;Z&hsXIX9R!bwV!YUOncY@L4WyteOw*V{c
z&oNaV`D)C7<Q%rgOEMjMoA(GOPkL&;&s;2mZ@yY6oDU(Z&27}uV0cFA+%<aiO2GL!
z)PvVsT!WJh&?VPZ2$}y}@GzcVeMTj$jfzzYh0Wu5;iGZWKGkc8<Jfe8Z{e@L(K{!@
z4dHO^Zv<;-o_Spi=E7pvFhNjZhyB;n))RaT`|~1xsBU?17c3s<F?3!>aeUn92#PFx
z!{$6WSIizqwZFM({`L|kMeqcm0~yzbm8g5=24m6NT(!%vlS<uQqIW0{Xq{yo;Dr>k
z3oeDuLrDv_L{h9wIGNghe)qqlOX7sYdK~x3n~o83^Ah;3nUSvt&QK(m!WevkmS4QK
zo`5&?0HBT-n+nkb2EW0`DwhA4%YSXoa{uh|DKU`zgs4d4VMWA=#Oi^T8lVjT9$=Wr
zzz>#k<e=6%f%qE<A2Q*H5SAl#=v*iiQqo+9WOwjX)|Ggm-UWKouckA{@=Bkv#00N5
zIvZ~fyH=!v7i3K1{<a<JYXR-43(3==kK<D7Q)cB%ZH|RyKMnv>w7>RpNB|gkrRQF`
z*B<KL^b6WG8I_(j=jFWK0U?A{6Zv&C6SK~!vZ-byh2QFfHQB&`yTf&k%?6)Wr>+|%
zoy%y6^g?`;Ppr3j`&n<#`*0$hHalzC)}gxCw}ga0r=_-`id+Fl5c3}lszCC?h6{ph
z++ZsXieRUBIpqjA!96~lV$I=SW^Jm{jGOyZcPgRe_VN-_hz?$v6y6kZ88Ry$X$VVZ
zLBHAGpC*%POnBKH2VaiCFWs;C*2&>>vNBk`R!NY*>6bIP4(BgR(8ZpuF0+}c2`T|r
zX)m>#_cXa4Prn2(zzM?60I+jXa5pc0p~kX4`I}&syC)zDo3cToKv=lRxyXaU`URdM
zpdIEPgcr4Q)VO!1CJWT&X>z>+VI7)DK_0vismW(AIMKj;ME}U=nOA==g<<hLf>D6e
za$waE@SGR{ew{k=tzpcA|11AxU6Pi;kbAw|p@N`_6W_?t<&Z`fljVF0T<nZ(69ci@
zCa52>Tw#oIPn<H^Ye*53V90!-^W+BHo1yX+DdeIVmp-j#h-KHyB=yfF%I3OjxkJNp
zA4lt%bqkCk4z1U9#C_1Oo~Im#MgRkZ;CTTksIpyc_t#!^JB_@2?@Rk4y|27P?=Jt~
z3(MbOh6~xUT|Q5YC4+}>cq#ZJeJ9PG=5V(Pz^*Fp%V7mkZgwRy$#MXM<CYAWtcrdE
z6^u@40ueogB6AKJKIl+D25x!~l{3eQ=%+3ccbRUM8NxAqT+C#zzCRNmOWHm0%mcpP
zTchg%pBr9&nv*BL9>i&iDsP#|9JS+eGHIu4&iBw#>K~sDIX4v|QJ+p&2T4b?+E*tH
z19!}VC@f<ptJ{Ub{eyzEENLL#6R<c7rggmZYBu`ze#)<qYur`owoRGp*@CS4{mrnN
zqeJ_=nL%x6kO`yvOr}491;{MV&W#)~n@1k?G4wW3(VDGlR!hOcpln%S>I-@&*z#fG
zNvHgFFKC0X!P})vr?cktIGo=5LrAY7Bo12RFb{EA)n6rfMlK}2*sj*pnw?(g&jIFs
z?R-J>$^GoAtetzzFfUYG0)f@6k!(Zk7fK(SNa#DCZgyh>-GnnQZ1{E(HGZFeXZmFz
z1A#-YxxF%UF&T{wq}B)IBVGwVy>Un<*k73`t-$_PZ*fMm;S*9!GcYpA2w{*FDQEQs
zd!Yw>FG)c*2~oXZb`S(WZG6i6iitrBi=3OCWNLr!&i!UCNrSNAcR{%<%FRhj;B%WZ
zPgIXoIsU~XBcKMP>euGr#g~iGutl47=+sY3tHK%VWu{9?1lRV9#V^0KtKbd7^NnO8
zxeJl=&cZb&hcdcKtoI7rQY9(zW2EhDT%%D90)*hNN$w#Sn<vj<c>+{~re5DZ^*@pY
z`Ij%>1iUcPzdN07tC*@)V)s^s<l}p_veP6ZQ22e+^hV7dZzsqLo3zY_(|aM#N8L(!
zAJd>!R<>c=dd(ez{Ms+C#w_EnyxeZX#Z7N}xZk?IXIn9FTx^o%DLJTX{}xrmAuh02
zTa<(aASt?~Qz@qV1|ERiJ=lcIG`y`z%{*vaSNc4v$i4QEtIAPt4=V%C8Hk^?hm^zW
z7ixz-v50+Nj<Q&>S0b<1qtMRT>{K)7d+9oStI{gI*?^TKCZi~rpa;|CAWhEt0Xh>^
zo}#6w@fNb-tsrDF5)2-RK5@s&sO5OzStm^&UPHIS;!x}CRa1THZyP7av$;gqotf9z
zLMKHCA|EgWyorsu*~jyBnI%HG;<ppk`8i|whO!-r+a=WXWbg!f{BHv0#}j}F%BRZ+
z4LrS><+~512A+T`nm8|XM0NNG;Y6G(8u@=E=0$G!+5CQa+oBtZ2z-O0#V7L+#(9;U
z+5gT2MBu4l1&&ljvJUFqkKJkHXKz8<oOpobr*0YiMYbbsBzKWyitvq$Jg@#rz7cNZ
zjXK}4v$=epy+L=*ffQ3Q0tJd_O;WfQXH4WO2IyuY$`{3{K>jPT@(2vdNB?<XLtHRn
z;ZJEw7hCo~YFMnbyOqSXXmY|Z+j6bFP*XhSKWLZ7&nQ<Qf>i+vqp<KcXk&MNiC~^l
z7}BPNQJKYNeqU>nE!*3($AxG*;<+nJVfKFtGDV{yWhn2rQFRc@$c39EZl5jtm7Hy<
zM(a725=PGA%L{RXOtv4ZX16Vgt53Kd<Go+(x7aSntZFH(PCNQJ?xv3Oa@${y;wU$$
z=yP57G_Uzq=(pv-f`cA_o;(~!Ysmiv`>1Pv1zh36ThRnH$M;(XVdZM`F!Y#Ype#`&
z;#HY6j~#+l8Ztqv+jIeP6XH`xf*?{?>q>*`e}_}lpC1;9|8sHC<Bq-~T#B>(B>21<
zw&L~tcvzdw*f`VnJ6On&=YP+%^-GP*iAy?sF0qCTLe;<I<>_Oxz_MwU<uQT55o$9v
zO^4K>cD5^=8ybj--{Eg*SgP8hZE&RP?kU}J;?6W}O{K!^Olddy&Fy%h*&Xw01Ayca
zPusI-r<Fhiby3cVH%(o09dP6EC`Hn>8_lCuKZM($jK*wlobJ9-yV}SAHGcM}N4Rep
zuR;z&-f7ZmeXW9l+*?}^;MA4`aIfsv!?Q)It>lVvwDX)rb+^aYS|^Cq<|$YYzP3;_
z2n7ls>*fi$J74N{@2mVJ%W=;f6p*vwd0!re8J)dyPnz2q%a0Wf-Tj?<q<-s>vcWHI
zFvWV#j)Cp;7)F)m=8WCpS?O~Py*mdo7M1)=fCaq-S&OGUuU|Hv6XhaKhE%CCU&_-w
z9S19#>SQ0N9)L=+j1hubshTvVm7#7GzO2`L(*CF3H$}uW6PfjB*%X1eyaU{Lyy*J<
zkYa=V<ooMkALLE=Iaapg-3ZH~$zAj6^S#t2>q?j3?L90>#|!Sl?~^X?HMWF3x%AE_
zJeXumRq_!lSJZ-Wn1^nuA{e8V1fnue<?)_TA>wT)8k7ty0&{?Myzcb10x=7ZHW0mC
zp1Py#a9wN0r^(|f5iCfIR<FUCnE81!tp<zH{&pdel2|?()5q{|%xxsv$Lug%gZY?F
zuj%wNuC-db$M7Rqg?ibR)6H@*@t5)XP#l@ei}`*r0t^g4=oLC(3@#&Bt3Uuu%YE20
zh)o7YM4?d>Z!)>{mC{o-E3bEj5XSwn&`lhvYqWS~>P1%~=l39u+4Q%_eAstMeh!KD
zu*};G`vcX;T;&7NC+PW{{8#=cqgLijrq-e!u3z}J*m=QiZK9Jcl()ZANa}(x$BI&B
zA_~112_vVG@Qp&Qa7Jp~EC^-8VW@NJ$8g?U*m4qky{9(ZSn#W*vT93b=+P7nc&Ld7
zYb-yV3jKtAIo8kqf216jiEv9toY~Iy+e$2gprW+kPv*+76l<jl%~E;&(*73oW+8eB
z=Q0Vl9@^3nsXdwj{<ezR70raI70=Fwbs>PpZoS9<>&`!Q0e|jmv#LI%@pOXS%T6ym
z<?1sAe8RI_TplmzVEg>MVy)x;VKT>4eh5GI0mt!TiCND#nD@QecC~GBci!p_;TX=x
z={v*<-xYtpM#Hu;plBto_R0EwStX0?nAKeG7vw`qZ?Y#PdOto5B3L%uL!#;SmXnR#
z(;u~hU2ENl*xSo9cJoD3&kY#d#)gf??gdub)}^}TYNbUdt&)-!Te!qO&w5I7QNL_3
z>oj9(vQ9PTPxPi*%X7_3xw5j)Og1wo;1xsUb2YcR{ZH*FBFISO;r`H(Q4+i|fMNiz
zM(hIIZd<F|`$|?+UGv2d6{M?Y?(~5ErPoKuL(a7@k1}lh6Pw!8Ig*Q#Cv}Kb&%ltW
zT3JKArVQ~~hdb<2I~_kDXS?QTE0>Ss3v!Ui%k8#*#(F!CrG3~gjWHh*GuM5-+16Uc
z${Sp^>lTj7<q(bQk?pA3_!`~|6xO@Y-0Hm#475N&bH?GYV^>}4O@f*P@^qP{#%Mgo
zdE#;kz2bXj+<NTSxES{EM)Ht_Hf@Ryc1PO?4G$09=%vEL3T12vaR5(48Q45mR*rvd
zEu0vNn*BF1(21&sL7HO_eb8Nl4YG-@4$~GY5hsmFNwcG2Yc?2-mem<sV1y&{270m~
zm&ajt-A@=2<Al)DVc%a0+0ks7Huk}`HC8@m#wCl*=P5N&m8?lPXiA?aE{|~X;_Y1$
zqF(EYuzawIW-6goA{!6D_5;ifis3*S!lB3|%SqnmGfZJB+IF5Vev^4)>auaUEVIg6
zMxrQeBM|T(^&<X(bs@mkT|ljEnowXd12wPUMEVzInS3*vfu&$XQow73fj)v^h=E=z
z62X_6d{{`O%P;XKaerQjH8Mvsj+15Nck-pIMq_HFxBAT39P&9#wQ4E;01gxnd*aD5
zSwyUDPge<s&+F{3UNq`zUgh7tEqwY$_DL;S=q+a}Om<MO>tTa@cYA%?4=Ux0g&9WJ
zB5`YLQ>Nit>!qh3V&$|ANQh5Vo~4}d0iY=uQ4Z4dsf9qdr|@Z>?dwP?^VdMY%q7*v
zAXyQBIsuzYn&fJMWjbY6RqX((rg$RzxFwA$=GHj8W|PT33EcDX%UvG6ay1t?tv(ym
zX?jm~8L8`~({(s>th_)adZ=K)gs52eLg{S3pV)aEZ1R}Ztss&S<J4wkb9Pybphx2`
z25{a&qtFbzRIMr3s2<bcx5_H*4}C7a>JH%vjN@YtUH;M53EC~ucO|yumRQs=G0+d5
z(Uz+s&Z|+lpK18&qGNJ>6pCse+D9zu2{GW7$7QWv9=fbhMb~I`>g8O>Khdi<)0!Pp
zU5K;w_^WqDRZ9mQ4oo+aH&a~j>55PpxBIiet5zu7Lg6epYBEYpR{nui{AJT$2pc)R
zXUS-|olt!;ltl3h$08WFj{m)o&a4b!#ZX&f#KH5dtM3^>?0KEO?4Z7djWgH|`LwQG
zNk>#cr1LIHwv*l0Q$CcGcGyT4WetQ&cA`p$_Wh%WllrG1C+DRFkUSRY>NK|IIPJMX
z1=@~@c#9-4nTq?VhP}q4n5gQUqmv+<`~Io{9`(aqbU_V`wMKseR0jDJ$TCM_uY6QW
zQpq(%tMXPBp-eK`R5q#ilGft5V!IOV1>*7eXZ}s48~#n^*jWm$IxN#gZZ~IvS)c*K
zR3vM1vj8Zrihk3m^gMF%0M_Pe#JtVl2^W_;CqY{u2Xde8kx@hu5fEH_ogH-Rr`H|1
zFky!`!F5){Q<8(@MdJ7@=Ndsr6g&3o&EWCiQ7Vp-R8X)BrfXEroy0E@w-;ii=WW==
z?1|`Ho5eqG<7KPFK2Fl~lKC$B^4^IeMrKRsc4wWV`3UM{Mo(Nct9KQk>7O(*S6W5o
z?C!|4s^5gv<}>)>m;3Pr5&C~itMIIe=Y)3|Ij4^j^L!d@!z{pP2tzuGKiY0f9nz$w
z2k?Td;A~anZ#20y@loHE%+Fq)s?%y}jEt)H6>sF@fa0>K&QmWcI{=jncKRp3&=LGX
zlbJ<}M;;s<btuf><+#e2R`Tx?DU_1Tb!oC#=hI!{Z?MJ<3NY7o(Z8S1Wz1xK`!|_J
zmfQD`WY^pEnxl5l)pQ=?ak=qt9Hgb^`RXd0_Bv;~02YVWQ6LPcNF2`KshwITEwVT!
z9*~7<o5#MV2ypdf@MqHW07Eu#J2h#Dz0?~qzY*rWAPxic<&#FJ&;A7y@X&L(^V*ZY
zLFwg{cORXg8z;zJM;AaZ?jp@~RotwXw*>Lt?Eal(jq37OgC=beexM(IOPL=@f%|jQ
zDp+XCk}op`bNb+Eg6ldFj=Gqs8B4cRwfmo7whHZD0Ukb|2y|m{8?n{imvP<F2WH%$
zPeVa}>J%0B`V*NsIRc%xgWIP+R|Mz*&+T`%2e;b4riw4e+E{XWpNFT^M-Nu;ry;J~
zU;yG1#GAHQ$Zv*zmfGUe#jJrCuA4){CKy0dxWCz@zbj$Taz%!-Np&ak`$5Yz4WD`1
zLpy1ska-gCL%wn1mqRylq@O}mz#)G{2<F~uYELQ0^+MY9LWH*{W?JxweeR<TO_0DJ
zYF)lvd=igTSkRX!?^2rAdtC6b+{`k?s<VFp2NZcA1~$<tfhNK;By1yS-f!sTf%V$C
z`}8~L&t$X%(5a!R?g!ziRq5F|W-rDZO0jr?TIa09(hq31@Bp*?%9ckJ=`P412@9^F
znNtQ1;;0<(X-!NsP(NnKXL=MWHcav}TudlKi%5!ulj<r%6JaDKit>n)s~FjX&k^op
zXCJS%_bSGxvC1f|Zr1PSM7-u(kt@h$T<KDhxok8KD>rw|IISx88$9^QL%4>VQoV0~
zyeYol0$){r#~lr>ZPYv&tP{xT5Cpwb9HbZn{>@#QArUMX*+ZSS+Jx)kkj~F0<>0q5
z^CC*pVsPByL;|RLlR-Gz-}fQ3GM{@_SsT~9;@2Nf{^$<1GVZ?1>cf)XLyX7AdG9|z
zZ`1`5teftijt8F$tHN+pHr8vLl!U5DFPsV6Fs_sxRe)1<jh*H^Dilo%=}~!yw6*MB
zIRJ^wO+D%Qz`z=kmFE7MXiL+5JzkH<6Z?Bz|8!Imn^jqgkiF0&eJ^Jv_H5lEny}&f
ze4g=1jL;low`2QNQTS{$U{`#^R<+hWe#rW%XSY*$j}Abtbw5iT!^IFQ|BXObS?mjf
zlmuOyYjcj~)tqKgA=PsUvJQ(Gfr>^haiK1zu7ft@HQjW{d_*uGuR88ySNgs!<7!8C
zUscGQ#4H)GPLBc;S=da=0sjCkOrVLVkkq+bGL@MboyuID{``;R%$s|8Ux~A}Y-9D!
z!mTn^LOgBMTlLU}`@;0~ZYK&mC(q$x($9Biqu!>>H(Dooe-_3pxBI1!mBRiuxW%cX
zb-G*m&h&C%DCcv;IeDsE4D4X)Dm7(#qkKb`&p*SaqgjTvmXFVqrr>+qv)$fOCg#8e
zTc>J|BUa~Z#YW0C7GI_P8gW<WI(m}pEHR%+IYc+t4fTdb#hXzcH?4I-<VAI45N^F>
ze|-d_+itdbe5#Pi4N3m52#QEz93z(WwdB93oW<hU5{~PYlu5gpuk)l3Vk>!$d0U;m
zitXNt_YFMrmInQg!vNtjs+1F9uJ$FMxAS!kewq&`kc}$pbS_%~x&0+gC-E4kVK-e~
zuZxBicBfb?$VT;;Ppfzla=qM&TJ3)hZqPfK-CoKv>y{zr3LZF?XZU^~PmQAxDLgwo
z3Rs@qkAo+VI<{|rL{fEpJdc~E&X+1&;u?6zdm<R8JDhE|o1D<omhMF*COE*KCF|-u
zB7zJmXbd6CXjID^ZK_(t1v*>wn#YM2(P&*~%oFxgn<rbXd6*~3X<LLq0>m-3`ictY
zi&7?&nXXAOHk*fA3d~L~H$J(Jtg+uH*YgB9=_q><<%iOQl$Z8UMD+wyO!8_=N7c;)
zhbp4z4VLdO!%2--IvjGe{Xne`y43o*ZbG>balwVXxnMt7bW-InsUZ_LbyC0me875i
zQXPet)fmFr2VvL0`c<}78Q6J!dOEA~{iWWjYp!8V*dO#h*K>r;jphm2^K72RH28ej
zQpum!F7~K)wqECZA8LAF?uBf2{aL9-hQ0P%AulIzYc+h%&Is9JG-V+Sx2MNN(W-k5
z9|@yX!&K(i!JZR;6>aeF>wf>K>nptwWqhL}rN78<4BytFuO4PNZsJuesKmE8;SzP_
znYiY*wvJ=vc8D_}1-}}6gP3m{8CaIwE>Nljm39-}=8@oc?14jeHf7s`Z-i1wSNQ`+
zt*n!SDnC7@FxAT1lwDH|o~8ve1Ifi-uxAyS(@3Ut$=YsNo1vX#j!o@DBTV{?a3LeX
zvYbE*^c*fCnlqg)alB}Ray`G5Q?|W+vlw+x@AH~wm2EIHS98zZJo{<7FiYPfV0DLH
ziW)tIua?g5o!!)XDF6~XZj^XuetXs&ywI5iW4db9m9pgiXelE!Zg&uCbM}_Q?G}rT
z#Hdej+-h;>wm^dGk8cbtFBv+KK1$8+nfiB0{9H1(VvMI<HzH%ip1i@0op57vvsr=E
zL9}ZiNYVwXR3gdNcGVuP@+!p+tXkbb0Ooi~@{S;}ln1rav$8yK>1avm_`2Nw4;(35
zRWF5cxOB9HZUx<-;iGX18E@W-*^JXC_!LeaD+RTeev4w!Mllp`2b$c4cDKRc87ns1
zA%|>yt(0)GVx1t$)%hJ&s@`3~?_Tp>V}8mw1Og__!YGki1HC9yi=IVQ)s8AjyfWpY
za0W`@qbKPxJXPie1+VLDUj>UKD^<s03P02;_GP#lC1(Ap(z&Yqbykh+rda0$H>sF>
zFzaqGn;CXsS6kH6LT&pzFT7A#3z80&L;KC@D3g1Awa*WbrnMl*n#7L~H$vSReH4?S
zzs}K`tFj%8+UOg;dr@A?51+t@4aM&qq7duH?yRsC1lvvr9%(7=A-ST@bY4@_f(xHd
zFsauYtI}03=0g0#YxY6BqaQDvj*hQdbv*R_T&;CE57hgO4~tLCYTZ4Z$K*J@^^R@D
z4BE*0CHQfWYKHu~$4<rXhneuJuPTHeA5=K-SGpCgV=I5mj4%l`;TSS_uc4KDP>dQB
z!}#BigS=v@l6_vSGXMqj0}ZwpFqkqsmi&H`YG&ZxSsT7f(rJ8W^mha>Hwa9>-;e_P
zOTojfgY;wk9ktF)IkL!M^%&e%$JUJHzHU5%;j=h>>=))R7sVNHj#9qLW%|r8;K_Jz
zo_%&zkRCHh$Zs6P24EKi)<L-#09iCCCn=-!9?abFP*5%Jml)k4d!rJFw0*CphgA4n
zea`#wY>_(=>_#VoV^H6?p#_691_YstT6UjLSxpIYtc&Gsuxa;tV*L~r*@>XYFZX(p
z1x(2EEqT4|cFFF9_(9w;)+FS=$m8CC#>5!jyP`?c=TrHs%}(hZnN`JOLsBeF>UEJO
z^k&rdwpi;`{oqY#r0LFC=`9jiRRh!Fj5J=;?L?;|C5t%Mv#nF_{?eLGQ8T%Ju2)cI
zb5C~#4&d&Z(?y$1pTuJ9x*V}QNkVj<T*W4clqh9NMkS|Uhq=XM@uhu9&%R%7wA%F|
zofp}@WViKnpT<a7Pu};7=(bb63I2+v(O~z{fm$#0iz`rDmOW-sm+X*0C>HyE#kE}s
zO0-erUl3I;rv*6b>0ks4lBSovwe!OB*YJF4*>$=Prk8qbuFRw*eU0l}6K0wxBrV^y
zo%3#OJ$|)a=6J!@+HHt^eHrwZTY`wQaXb&B8v{Mds>68a#P!bhs13hpx-5gxn|W|O
z{v(8?rha&|Bnh8mW3g-(gsCbYfI)oFt%HCT#u+GU!s#2;rxxq{TcuUGm_|203A?X_
zzG7(RsSyFSnluS8zH#+<FG>#!00a+~zlZc^0G4)>E#)e%Zl5bW)wV!azu%ca6e8)k
z-9vGC?uR@gOd#q_AR;aZZhPrvAs3n0q0`oMr<k#B<uz;dYdK;*;y%5q4f_PG6_0z>
zY<4O5${(1vib3xq9yK?1dHWX-8OLAJT_fr=SiPzfKd+4!jIXJFi*+LYcx9aL946l`
zvwqB}`=Dr=Y_j@nvYFs-8MKfDAz^el*_)Z;$$Iqe&Fbb|;*Rks99(((FG@3to;wgi
z5dSW^VV-t0<2ylREg0ZRccTQ>zdFd!UP6)-keiay@89yYClM+6V1OZl3;~E!-BawO
zYh*W#{>W47qgF=5rgH0qF>qj7>2DIML4J&ZS8PIR(U&eHMHc=HZ{iTZ(W|9Y&~`HA
zxva#)-)j`i^;~p!M3;?;C9Uz9U-XwB9N!w8MKk(Pi|iL`-FLeq{}&1k_3~E^toL8D
z;QcO*U*L5w1{I%`IM`CL?q$+C>`$qC9p+UpQgC=VZso5*jKNw@tb5u1W8F(USnU?c
z{QtDb=8+`t|GEZ-U;f7$7=bjlIVpuzc-x`rDQ`O@PkP&7pw9Pghs>3<Ct?bwr0L19
z9zD*}-9b3`6S`u12)5X>Wy=D*M{8fSidFT0k|G8}B#cvoMb<-`>Cl#Li9u6F(GyNT
z9#<^aZ`CvEg+HdSq8C|xW3Zm>_>`Eveix|^E`QmfzC0#KOtF@cTi-n$|EA8chRx@`
z@XF%Zhsh`M;9=SI>!bwZ3|zN;LFC-2)7H-$+@c_*eq;a;Xu<G!Pl^XKRAG4#i+hEg
zg?lMpKDSBRp)Z16^n$CbJ(S_2+p1&uSRUi^ss;0S^jk^89AOMlFYviQNL&^KUy!Vq
zW`{N(F>&6(h3gMUf85&CKCZAv6DfXgw_c5xO(}eN$LjjUcW8^+3DX+X7X6qh08CcH
zeBNhh^6lVOm@DQ5G$@{FM~5hntMv7+unp}&W|8f#zGTd9kREFRlgJY-SM}~ZkzVL$
zz0bQVOuntj4!uES?vvGI2j-~_9XL)M<G=#7lzlrK<f!amqzWr1RT#U8ggHd6)e+`t
z@rodtX1-_*9m|DEv}&=^nZ%TeJJlz?F^ZC{V`lGIv3$>*g3TDP<yijE%v#Br=I&j)
zcO{L+)vfp3$SG4s&d$ynJ8beq+N@*8sx@lh$lTnvK%i;qALNh}BYLh1)iC!PP{Mpx
zUz&V-<B7rV|21+BKyn2^819*4&W>&46x+6K`+SAihuF4l8>QGO#ZEEYm)`EFcW*Xt
ztFnc|e)CWF;MMCvtCLXc<UT3;91V~KWCe-ACYm3rZT(rCKZnlm_eFO#|JXG%7Qr*d
zadD-c=ZtAVQ#^0fK5hQNX<1vu^LL>m`^I&yS9C;$TB35yv}wuPwymi3=<%jP4c3%u
zlh8EY8Lu>x3*<qs<H85F0m$VLt|!8v%LN=CEXVj@kBSeN)8hl?nxNhR;&u`jq8(@C
z-NUBHT=F`D%r2#+Z-PW9t!S+CAZhI;&SodlV*egu^1AFEMRIJQ6dTF;axc+)Rn7Wl
zcRt0bEX~pzLIFYJBY@`*+UY9@ga0eX@WFAOIH=coV(=m?!3!S21U-L<m;T1*i7z<n
zjmDa$EF6z|tE}z#+xo+YbCQ)cewuyo<naTGpUSDnWKvGXGC9>T?!%MDFJ3v)4TJOS
z`NYXmP!a(BZ!CgE9E7{1X$g3S{@c(A;xf{?INWx_WWX64#bAw&Ht8(5Dq@skl*afm
zgMW>LM<UMrf2LVBQ}h!{Ab`q7Jfl?@q`Eq)Iy2cJRhmkth|30kI9r=f4g7yu_8cCF
z8W67U*RoeObb^>?LkGE`Ghn(69iq{JOp|}>L=80YB$mBEDizs6V<xL;>88At$`Sy%
z&O#?ZO{TRoS>8+=`;gvcp)-sa8*N`j??HM8T8K1TXtZ-$$T_E|_o}Jhd&|A&g$EG1
zEa!%z@er*>SV0~S+VXM{H*|uy!?bo}si+$|18&)97uV=$lg@&BXss(<Or!mX=3aSC
zqmHuOP@Of{ANav_YR|neR?%qoXD`yc;u7wL$$)J(ijf-aM>N}Yk?f*eE2L7#9HFG5
z9UJ#&70#sL4M;apUQ7i*yYP*8e>r;w72{2&f-U0>8C3wnUA9guSy?ZK$!66slv=Dt
z++zZ~VPvbEI(nFPWWpWj2LV(v`q}<Cp63l6Rh=0okZPvpc>@DKoEL#CY(cd)P9q<1
zQ>PHusuAobI-!^%wha1Nmi*Lq0E$^z^a5G-qA{Q$+p*jZuW$I@d1^LKHoj>yF2XXK
zX9CCtChZLgWtcT1Ys*|-gX{`s)m$!SqwK5bRY))Mx<WM1<vPYU!{D3A)H@xycREn-
z;9_S%F3GoqsSP@@2Y_1YS)I=flOWogOaWU4+p+~fxXac`AuCH(F`L!VP--PL;vNyy
z+Jo`Ge0!1V=%H*~22_i7nvQ3wPP5gmnbz(&hTGC;f0KWeBdsi2hb&vyAOFku=18HB
zsxJ?>lHjL;$xz8YT(ScE1*0!l#sB~Sc-mdYiwQ$96vNQeww%2E7wrhW&@Vk8&|2#@
z-LETaNiyu->>%5GSU^q(w5FWC&EYsP1A~Ol^9>uYTtiW_1DjyGu^hU04yA{o>%{4n
zl*HSPfu7@ka$gu8{o+f59}n(=1xf$_0096100JWt>n?@5Uk^O>02v4X00000#PAU=
z00000)d5o0`Y`>~35N)C0096A00IC200000c-muNWME*=`NzY+z}fZ7;GZdHJ5U4_
zyafP#V+HL1c-n2!1FT$86a~;d=brm&+qP|eYrbt8wQbwB-3B$|q_!K>wx?%M_a!Uu
zTG?tUlHvGF-|VOfhSDr_=aXUqqV)sB>F#hhd7~ShmcDbSuU4WG$D)Jj4Qi>1$fY0*
zr>~aRGCodh5N@KoXeTm6vgqRI4<#oIqYCK2CDE4WVj|bXK=m0-@-=|BPDDOk38Qsq
zgz8op%_Bvk)cYV-Z@_2@!8{&_`nt5VhhTI*lD_p~yo_&P`v+U+^JBR3YZ>Q)zPc0g
z85Y#iWl)x1f%qysse|kp56HiW8iB@YHcYe*t=S7MJPLW-7*0G|1i^!Dp$gBE^#&uI
zsv(C;TUN0f@}xZ6cq(Iu$Q{SS$u@5soanLqtDrsYMM3KvE`%cbE-K4?%P>R9-;36w
zIT_d{|C+ivGRX-ec`=gs7?Sj41jsoG5@V#!hiG*Wv4$H$)ig{}7MM8$!>x5DY*dvn
zoP7{MpV3Y<rwvHqr<kH1!<#ZNm1-kV+9#-u=r40a^kJkJ<q&KPK&-sEYrb(H?v5UM
z3}W~e#_7VCU>uXXEJiTTL^mEQ<;mzpEigXc5ya<fhamMHLufMwsH^Cwi(;Ws2|1?Q
zNH<+VN7ENLscz`0T;ZWQz=`f)f_{u~G#uHK34b*URpmTwBnJ`P8*^mO(tICP^5xjk
zC$tk2gu7@i+6Y(SCR#b#on;Mo(MGrmH_^(`=4{QeHJ3WT^2C~_|B`%Jv-LX)vFx|z
zOa42=wx7BBn`G*DwoFNG{;RP)L%*XImW|f;l>aiZ<Y#{VCfWG|LqUB9hi}prc-mrM
zU<ic69za9z00c)6008W5+dO+w+qP}nwr$(CZH#K$wv9x!OPyc6LsL$3LGxN0(U#Ws
z(=OAV*51__ba7o*-4fk*{Q&(@18<maIBG0o+-5vxylDJrikkA7mYOS@r&wH;mX@`a
zw^rG@(0a%E!=~7J*yh@v+iCj{`&ozV80Yxuq?|3Cvz^ae$kp7nz;)Dh!>w}D?jr7b
z?#rIso(Z1k-df%@KFZh5x61d?kNuVX`vb;6t-$_ZBG@2!Jme154UG%k2xr5s!i&Rq
z!(Spe(j~GYs*84vo{Pa)wb<);GJYbFBT*#LC}~L&$;QdW$<L{-sS{~eI)A!BdQ$pG
zMxSwK_)Pvxh0MmRFIzQxj0h5g$+F}g%1@1^p3ypbER$lYFk_i>%njxdYhneqEL)Rp
z%1&o@v!~fdoSO4-47Zj$!VCOhAt9_3eu$LVMf@b?l;%pmWL93SxD-Okt&~+7DxH;4
z%Dn%V0Ud|}5fleCK~vBJ3<0yjCU6p50MDTc24NQFfaPH`*cVQL3*dHm65fW-kqUVb
zf%2kqs3vNIdZ3YLHrj~xpmXR6`i;#vf(2X<SH~@IXFLio#M|*9d>-HW2P7PejsO4v
z009610PX;f02TmF00jU60000001f~E0ssOs00sa7c-l>lfd;~06otR4QY1hC1_EkT
zhys-)5-I_rYOQ6q*{1XcJxx#1gLUwmInMRn!*MTA<3@=>xegq`aDfI#!$oR543}sT
z8!qR#LYt4_s`9VlCVPI&35j?U<Kc2A#bQ8@zGSf^lw5oqZ7TvUbVXBq$zq$e613rv
z$T3gND_tcaXE~K;vad9sSy_5OJ+(dU0s2AhK0`)KFdvEY-A>lkeJNs$ExnM`J`u?m
z?l{^)Vq9!|JY^06`c$@AvtrJI4Li*ax=im6pAI!tc-muNW&nf#Sqv!*SO5Sj9|6$-
zc-lS9fd;}r9LMpys;ZV+nOsqu5^1r5VK7o46ad8n2$ZS<sW+J3pf_j^_7v$+dVsM0
zKN5U=@9zJ1LEa3Q$s|`|CJXtXqgM(nV}`Mj(=*Db`2Q|(J1v|RDtTN^>^dsd)<sD{
zrH6L6QATAPt0{`8tlj%nZa#6kRh061-nU~aCi6;~emBPFl^Dr>f$wCX5;K+W<rQpH
zevqz4cOJL^OQVM=SOXtCKm>FR8^8k>P!zPb7C55bKo>OZ0Ux|T1YFEnHEaOOAY9@L
H;4)Fj+t)Y-

diff --git a/static/fonts/roboto-v18-latin-700.woff2 b/static/fonts/roboto-v18-latin-700.woff2
deleted file mode 100644
index e327dc95b6a3b75d2cfecfc611b84526dd360cb7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15436
zcmV-SJhQ`hPew8T0RR9106a_p5&!@I0E&D706Xab0RR9100000000000000000000
z0000QWE+`!9D_;*U;u_p2uKNoJP`~Efz=R!yk!f6UH}q-cmXy7Bm;*w1Rw>1eg_~7
zf+-s}dll^1OMvr$AjE5aor3A+BJOr5mHDw-jSSRMMV2J{|4RZLLoB!_sM~u&ON>J%
z6Zgr^*(XdP1PZxCT8_;dr{3TK9V<5aa`MI4y-T<IhhO8XAFVv{_AvO+U6odzrl_IJ
zx$49l9gbzjawt+x?5s31YddFP+sL2fq(3}Ax8DB?q6VX40}*4wV2l_b^fsc#aKNY<
zHKHVXWC~Ix0u!SNqYn$KkZ8re^AsK;JHB35RnP36pzQzbNQTOx7>uaQ%q~;7YUA6l
zO*#>sJxlECTtdV)B4(ldl#%%jdf@S=+M5r+0}%;;Bp8<5C3lxUBrO!u*WEdVI&~fu
z&4r?M(Mg@hl~i=+(w%dU=@qKZ*WdtbS*eh#O4c@SP81J$8otjlEJ+brc=oMqb*<Qa
z^N*Efp^pDgXZgQm8UD;zcETMXm8sHcMy6ev;CSy&wtpifEP0D2)TIS1DkRxnsBZW5
znOxgTvrw^0=7@N=36e-8j;Jk>qRZx(*l?J@0m+ZCbk}yZt?*|=UaJbB>OZcPHgEps
zfd3u4re(RpmC1?SEM~JQ@Z6PX3dFJ!P@b%;Jis~vMXIhEShB2elKiiwRrEipTWuBU
z%=K&mS-?~3@o*QQC9L{Onk-eS)H7A;aYkBi(JHf~4ON!LsMfkO9?!Bfo?Tq<L)5V&
z`~W#r;W$uWIE?U(00a?G;Q!WAJG%jLr{YTBDjcxUbrov%&t7(JW{-A{0<;$(+N5xI
zuePjO1t@_wB_vg$TjQgAt?Y}+s{$cyRa|}9FN+6hEFI~Eh&M!v&fdT4`@YWSI&>%9
zVLKC7D6SDAM;-J0zj2H$j9S&Z`nCW8={ri_?J(yiFZ?wZAca)?yvdFL0uy)s?mL4C
z({vETmLEvEbdWrGAO#9Qcz7VCN<qq1f^_QxJ7*IF0s}x402mMeAdqwr0E7`8ggoew
zxiu(W_<VB)#Y=DYPoa3#_T2>(Aprp1g$}s#;+qQy0^V#$Mg<eD2-^_0*0!nV%hywH
zdm1I*=T@N+|2K<(VL>Ds7Ki0SJ1in7l1dcjMMc@gK>Uio<*4>{PeL9nR<awFkT0{M
z@ykLZ-lK9W|1T|cr6|%)(^C+vm{NaQBs3ACurz7eW3PR55RvF3Ghl?mgqefP(b;q4
z!i_ryPb}Vi`0`h;L6c_ZoOi)Rms~b!%Cs3*Ty@(Wcir=kM_zj6wKwK{v|!PaWg9j@
zjK(!c6w*xWW=7T{vLIMnm>?p|wn({K)69Z)L`J09_7=5uGzB^wzyPy(&z5+##=8~1
zDyVE-qd|*lg*u;w3%H0&xQt2lxVPr;1W)k{&((|8y~HcL#v6RZ0v54^Wwp|pRjgrM
zZM0%@J;bM(@=@=Bv53nXhho$_lopt@!K^nP!5{_9n#}|cp6&yJkX_^16rUc7DOzT+
z^0LP3xYD{IiIHYWvSR(bKv+NmqFA@$k@sGNrrj1}k6GNu13c_s8XAU3f@f<f)K<^{
zIvl{%yrwb+^)MPVn$WCXwBjXR;k9_9E#FKnL{Qs61L$x76P0*@mw1KOc+)zPJ!vd@
zd`Pkf0vOGYzPyiY77P}#gyjKIFcp$QBU;d^1!4mm*oXiR@NhsZYAtA>!y#bA#WZ^#
zN}dl9m9u%F@e;4_8gJCcxE8R8B`jMgcuxe4#<BXe%J1FYVlA=kn@$qI?AwxpHITf*
zdU3+dtJ@&neT9v^9C-E|D{5u$G^R0`{Ufg~yk?X(?MRQ6w9_S(pyrp@69XT|K?28L
zILhSR7Jhp7u?1uMn%jD@Xrw1+Rco!LdCd_a+x4Jt{l|c_eX1mmI}20d@uITgll=SJ
z%lI?QP|SDdwk*Ei-z?KU&3{!(fFF~8ySDhJP~UeFE4%2n^M9@Rzw~ORY!-8$w)EnW
znO)q@QXj@Gwu(ic2MIRt^i&^v9{#=;ahhqPE|R3W(R`n&{OMJaDWts!`DxH#3%*CJ
zezqi5W1pfgVmj5e(fvawNo*?n-0YZl%UQujGfVEmCNT-KN;S)&W*vw2;qzRDkQe{R
zeM1`>W?R#|KK=B0Qm2)tEQS?&U-4+?zH{&Xr`MZ%J=*MMtrJgMkgmT&MXf~IDozim
zcRRhL>vA{hzqh2>v-RcbE3I}AUejhzdZ%*6=|=IpUt^mV-EN6j=4MWprysS@>2{It
z^xoc<f@eJSY^0xt2w>9CFpdEbVF-p{Qjdb5X)h!KeL{>JB*hk$0=i;lj^QfYcu?iZ
z>b%1>u=&}gEL=;y7JIa|uI-#Rbj(}E{06k%2aFt-<VcQ`pcK&z+sz8JSkfMb>}3>f
z7N)}@h%Af55Pg<r#A1wD7=;y?usl=7Fk?{%S%NL2*|7j>Mn+a4K_CNnNDMH7M@B$m
zAuNO<U@5*V#E-?5S%GhdzMMu_rEiJ8oEET>R#tK@9CF?y*wn2_nsyb+ZU2DGdPvwK
z6)x(r=g?k+%XsMxLG#-qeY6arUak;HlB6$95-dxKrD<9;eAs?4Oq=D97)EB8VMbiB
zLc%0OGK3`w5+RJ%DxiZnXbY)C2txV@OfcjSi}K2#6dRc!30kpVEIzD4GpurZNUb`u
z8j>VQlO##|($2!lg3uOLk6;oa5ePKA0qI7F2zsqphjN0ydZw<zeC|FkW5#PnVE;45
z3Ht+A)<W4KE5miBM=#FtF~b{t!s2|{Nh`C~o<wyn63QDC0r>jpi>|pm$L{}>XFm|G
zIzHTnfg{tMY1iDJ-@uh+0{{pxy$(R2cpiTM>_M8bUE=hxakaV>06}Xpw{YKw_d>Ae
zq#Mkse_&<mV^=-aH6Gi8bPmXt)vK`31_4Md3IkFb5C&`4&i%%c#Jyprgbf;yK77cq
zV@4b|YAl1|iyn7aq9lALOgQP3(_j#3DgZ##U|fO%P>**K0Bt>AiTFy`57Xprk6b`Y
zv9(909=kXR9H72l0Q?2Q=GFi>&@%u4$i>cIFb*PlW0hsa=R)|7q01nfBLIxxAjtzj
zOt!A{pYN0#?pyN74y4-{aU)*F>un+{Y_P>1`yAsPKaNuWJCJ}wcXMN=-Soh+&q})Y
zYFJ`z;KA<O_%Rm9jw^)646yUd<I9tINBMK>&*?w${vH_)OO+&umwlhVzO8acU5b5q
zKtB)o4LvyecW>i7=iK_u`}^}1n04O+4?R+-$YXP!c<Pzwc#3}u-*<^pD^{&px1r1?
zQ2+qw+xx&;p9B#j2JtumWSf3n56<XzTyUe#8Z#x%wCm1yL!O(vAF>B<&O=Y#^2~Gj
zUU*~HTkjNlZ_(qH@GSe}MV}Sh_QSlNekt*<KUVsyter5ML;DKKgHGT?LB;T=f~w)4
z1=Yj93Tncw&jy0paGT(6vst|@Y^BL|wsXWzcG7CWqBaLPNV}Wdq+>^?z5oq$zP4lx
zPoT>_tNQ%qETHK+?z%ad4gf%URRHN|gG)S-qL8jin9e6X$&+aVB&TWO(>pK#03YE<
z3Avu;Lr~S}=b)XUSH@I)h44SeiV(Kp`0<#afIUSCuaJG)S~0>l6GCVnva;27^!8=H
z4e@YxJlft9Qgbe42if<$bSPk)cHFl1IL+uMUe#5@Q0MwqxQjR>{t#<FPo5liBGFWT
z2l$+D<fXCQ$89ZdDR)dsKe2IDV>qtqtw+<`$~b3Lq$kCk_v2EcNO+2Uq)IY9k*Nh0
zf!Bj&UP0UF&s<t9TfK_e{BylO1f0xbQ6Plo!Hu4KTr17(ST(~AHy&4gTZ~yL!jY?6
z<710t<H|JQm7}deMp!S+5?;N8O13Hc9qZQuAO*iJ2ue=6T^y+A%5|%1Wo!vo^7j;|
zgTR84@XAlV+7fu5=4$|(%|)a^4`T9pS1kx0JKy)kEg$sj>*1!v?gOO%2LSOs0AB~_
zy#pw4_-@G|C<ss_JQrYw;Ky320h|bL03^V33kh(aG71V^CL*A}BsiQ_0<wSS9Jd4r
zQc3{<P=r8$40{#<`6e}#wMiZGtp@eS7)WWN<MTwr`4&&EbQX8Y@VfR^qs7vR@!H_N
zFGX)nR|-V2(a)`9Udo--Rv#=@W#M(@tZJQCSF#eNRa&C_@D3Lf?9S^>wp&x7DRqf+
z?QGEAxQq7u^Q!a)hYr<ozYRU&$!aq>ztx3zokF864(Hey?L_G|Dlj`J<>bwckvogl
zwo(R-gPpBZR?Cw45}XjYVu$@DUJb&TbA#KcMWbb_gR7h{!0w#K)8ee<PH|Qq(NfJ*
z3K5}%#hh#8h|Z&Dk1pXRp*ppRnn(lcK)a$z9J7pK{b_v^uwH|V86^ZF3g9aAfUrc>
z<|rcN9CMLU7y_qAWAY(x9b?f9IY6SaGlq5Z!Tku(KWGHJ`qmV004+^rgI6!b!@GuS
zw2Ywt7w00$zp5bC$G*;l1#d|0ZPbwoBXQuFt#0C*%J^$}sJZKR8lu+I?Yh^f8CI5j
zAsZ=LFM^;hUPkuH==uYb)aq(t!EcCLXVtLZ)cdmD9Z>fyf#>n7ved@&;`$1Xwp<#L
zc52A$yBs5J6Q7_}@q?1r`Q>BmbXfpd(k>fTbLBh~1XU>4Y6S_;BD68;M8=NxkiU<C
zGUD|e|7T;YPyJRx9)l>P2hSy!@p>MNuBh*U<@1E(EnT~7Odih2r||h(9cp;v)AsPS
z)2a<TiCYXhJ8LbGEv{fS=i7zn>;=s2QN8p}z=3hgy{DcH-`0=$MxBIlCMYnoFPZ*U
zm&5S&R;J+~$3K}o4!nb}T3G4d39Vj7&0~Fvoaf=ZTWfxIq^-&|$!a05s$CHy_79}t
zO)a&@*{CZHPZQ$oBUg%G7yfFwIcD)7ovWKZ4*?=^)t31hgtzCi<wAw45b^BK$y1h%
zl73`Z7Tte#z$npW>1<g~<y=Rph#Q_i9?HmOg`U;b&>yMG3)$O!mg0qgdUi0U<<5@5
za+#O3SwV3mhQj1O1gphEqghU}n~K$CcbdtJtlwTwd)@CTT1aj`%epF_fLuBe1a!`c
z*_hh&!KJ+uJ~@240$G$LiPv*J`pD#G3Mx<ZD7C^KtGQe%Zs6@H7A$zA#uGX0%h@!G
zW}%#PsG{e>b?AzXfN3E>M|@#NihL!+HJXVDEh<=L8Y=g*h=YKu#u9)kv(^yK=}wO#
zCE%8b!cs$?ZXpo3C9?)ByLh)P7f=~69RHJc!wC=yVr|3FQH!XetDY$xc7Zl45pqo_
z3(D(rXVn>5Cd5;?VWL1Nf+qyM@2H7E0OjfA_^KGDy76B)g2>$=+L`dy-LK@N!ynkX
zLdlXE(y@mIE8<Nrgg>~c*=YcVk6cH{XZI)4xtL~6hGbB3?)(hrWQi{#t(@>cZSB5V
zN1xTt{%w?aq;aG<!J3`6%d?SKNLw|~U;U9HdFP4kk#0_OVM+$7j-2o*Zf#`=pj<Q*
zX&iKiRn;LB_W9Pa#!<PbDRxv*?gf5?f^^z#(fFM}gw51O4L<P4v{U(X%AfT8>5LVe
zNvy)f6B}bkQ|vC9&V2qzU~Rx!4~T^hZ3Ayiv<luH1=a!*!$F(Hg9jaq@I)yUfmle^
zIVfLtA33ct<q~q<>x%$Js3YLkRGiw<5DKFPLn~lzL!R;BiE$uS!(d)o!_b!zJ1_)1
z<4fm2jRi<hkd;o43MGoEsuxtgARWd34gj)b^}?P3*$I{dVZg~g+NakVeh$K1;{(i6
zmL^iW8m8P8L%T&0R-6}mu{xpTaqxz`w*Nj};)xxXa>EY-fhmYSnkxe<f?fL!9z@Cr
zM18W$SPh0nGtJ6#78O*6@9+za=&eAXc%*8iYGR1X=#~)Vg?G+*5>mxjHzH}ah!&M$
z8At!6oiPWX*rT|`8M?b9EkJifY$oo}xeO7jzGu08;(tDq1%uah{(FN)v(zHc85yGY
zZX2taRJ3+}NREd+VPou9GIA!791Sxp(*t)sNLE+~`+qH5Bj2jzN<-F?%$3y@$hx~!
zyUo$iAB=Q=;0^nk09*$Vvp>TJBr2_W1ZTDipN-LYvLd#`ItkVzOY*?_!uJxRWJwp;
zDuDFA;5!b9`W)fD$wh)Pyw$ofv#KpjC7>YZ&$w4#HLp$?5zAx7hn1Tg>?CIJjkn{g
zV||Til^DB4z7DUyR9Qvl{>l+bo*RDHXKXYgILrAJofx$~MG*z9W|xCFn$49g|Eac`
zNa}{~CG!*)DmGv-z>L7+u`*;-X0~S_;}MPo3!3FeN8ialB?nk#tv26zo@lbB>u>!^
zXN?&+(b&|L(h*+&wUC!3Y95evY7a7IbsA1}+yV5d+3*c(mPyEPRzH({>Jf_VUs<|I
z8k7}CP^Flhnc}vA4SQy;T9gB~Y+rwUAyZjwHFCdYLFQSOR5wB(n%}RC3q;io6}~5*
z(_oInd?J5XWjq4vP3{RGAe3e#`T}ohHWf(kH;ZH$v8EuLn%uyU5bv!rS!FFrLS)=M
zw8u1)=!Og+f<hR3YB4u9?%RrV-}sG5ZL}%YX-}B)tw|FI05)W@2&b4V4#*NK9cg@|
z_kGX#Vqy<k;1sHF<gWhjhNlBtciuB;`=#O9F!>qQ*wz>7tERJ<)>b~5PCH#8%hMFo
zpQ6>;qj|@sbho9qx$MXc^~hPa`gk1DRazMnpmm;6=n6U;dNuanHuL@Qzon43?F^5o
zuXN}J=D2$Yyl`uG<whK=3>tp+Y(nyB*9*S<&2LxnX+bFrcQ3ZP;~}3d|05oe9K#Zy
zV~-!7m%7<`<DSg>AOGM}x!D|6C_4f5t%Wx_P+2|NS4k@#?X9dD>#LYTncC2}mh^-6
zrj~Syp*77?tw5)Eysx5atf!jB8|kaA8SO8fLKsq=3=S7Nnp)Gi)--eITZIE5DWSrl
z*seH~JJJ+k;Yn{{9D6!<ruV^2?bvu>oa=uYl*Ec3%K76j{-@b9yCNSxN6fDxBiP2O
z4$drx@I$fD5H{K2P`smFKY<!Tr&A8vyCg}HW0dR9YR$=IxGbi(Zyqc&Gi<Ak>b<J1
zrqg}BKF+YE*mO-lqaN`J6JRu-*ZtMJ%*3#zlGA$`#*_E=+^mgvzo99g$%Sq3Ym5xz
ziZP3F${-WVzJ?9fK1?}d&Uz@+!9A^UQlTRXw?9}X5*68kZQ-Ce#aN~D(M`@87FOv{
z+WT+dCWwvspw{&tX_X|ERcXs++ELj|TN@t_8r8=`<96mVJnz6WtaXC7_P^%aTfdFr
zU81`Go4o#Q1n<HroDS-X3=2344+KpF9FOAo_Cv>Lc)T}@v+n&&jY40#@$`E@B)gp&
z7#Qml#O1}R7iGU%&aD6N>)G|_xOc@3_Ur^7`Fd7sY-EfND<Y81i1Vi76Aqtx9a^-E
zdVM7%eK3e{cz@b>+7-ps)tAzXm+|h0!@a|kqP<^!K2mGav#Wo#-vn>M6g{o^b!yjc
zQiT<av#-3%_(<Hg)-Vb)NP4gityHGGeRH_E@B=4*29cpE=p7xx3W}`A%S<oehJQaF
zV@RIbQoagrU6&hAOg=IBPU3CV;l=kkRZEKIA`zPt9OoOa!Rm9nc-jc7Hohm^H=!;$
zHL=#uMn+tNEUv3zb7O7|NwO?Fz=`Z-6C?F9Cep76yuTszVJ1D}WP~o87}3kQ@bmSP
zxnD0aBwPQOcwcr5H^4V4KERI?qw<RB73S{d70f#171_s%%q1q+abufjmIXglXKuYK
ztf+ZcogoHBqoN}_9mMRw_UAdKd(tk1T9;ZM*X?&Gt|Kiqx+MUOW<?s`k|#fm+3+*U
z%UT4jWp8A+TWDR1wz(r~5FfLy-axFJtoLMvb^oa@lMtifqxLLs$VDBR{POJ4-0HoH
zOot{vA6G{QnsA`0vYxfKXO*{SK+`(<1qz69mlxjo5w3b>($#E&%e(73zhiGp_T__{
zrAgHxmTP*JLe2&ZQ+CEv)F_5cNg>Z1xH=jkydn{3l5fH|y~|Qn^T^FvVx(Z=+?fs$
zH4*H`(<NI!e@~vCtTxX}6fUqXanwD;RCe9_JbG_p_SI~YJc4-eeslaHUshd)Z;n@u
zK7*s?0~G(SkmQ|fQ87J%nsG|G!x@i6p8bS`(n}#uN{H93Sy<}v+j+!^-~`XiM@=rZ
zi<mVdF(7Y|M)!JDZ!UH0%>N`YxvvD_3SM?uQ^Ql}L+nP?i`MdzY@tHJk9>Ms`}pv|
zyViFHOms#kfl$)rd$s)Yi_jCNw`Uhlm>ir>wczz_KL9BH?AIP23)ZHPVZk79!Ktq$
zY2zDo#hr5v(BhoBtlZaX3_T8hS$9x+=mJ9HhvND!Y-UMf+L6vhFz>rKx;ivWrT&(D
zW0vSn1OzUfJH9c&neI$*n)!3LDugF|!sqhCbMF!>m!Y+1+EHGifu5nsF+@7GZLq8T
z3K|MdCA^JC^6=JsLmfvyXKfE(xTC$ee!g4?PR<5b22lJ1RVrih4Q8|Qg{CT_RYN*^
zx#Iv~SHa}u_*>gmKRvzQ(S82xvu10>@w2CuM%%2wL)x=eJH@f+H}3D?sSa4|-E3*@
zT?6yfcfH?Ro4Yr_JZ%&}V~1{x`hKMry{>$^>jwh;MKm=tE+Q(cAQr;9xL-MYuYi!`
zy?uFdi2RFYOw>3k{YmEeC#C|+Ek0_@y^&9$xQkoi5Q1OgGZI3>lakZ7gALuXnW^4}
zA>PEFMITcN&;1H-JNlK&`=@{qk`<c}o6dHmR{59h-Emy~c<i#u(=S8V!!=JT4{YP2
zQa!^Q`z}vjCR{%EwMWMZ#h?1LPX@6QRq*;9!c28Ze)=DT&~3A}2<bkmv)XCCv05YF
z$;buj6SWcDFHPoai$9)yJG7@u+%M`OEP)jM8?fi(1<ZG^!G{xXeC7V!sBgscX}lO(
z1vu?$n##v6j4q~qnsnW%&u_Px`~yg_`(JI2+o=~#RRJ`q>Kz{lZ1Z;k6klsM`oJD6
zc-nE|eOFzus@76Q_Ke<I+V}L)yUwDPF_^EWKSPQd9(OjeWE0tWgVKnkq0R?qD~|s?
z`xz7+ba3=y(A{m#@P3J%kG%_Tt=&5F1RUAxEGc!%BFd=qLi7u<MquDzn{GXiMZQtL
z$&cWPCLjSC;I)F2dT+c}7sMg^!kfa&NZb+q`0|SVrP7vR#5vdCLl8{@#3Y}&7m~Rm
zvKxv0PiXJT-ET|Klmx^Gj&KhRtLs-C46Svt-1TRE|MiZr<UQ&D4NzhUQM_YQO9b4H
zmdNf<o&k4+%q@Bt9Dv>0r}0&}Hw!G4HN5>R2c?`4i>%0r9`sGC?6B~86DC}c=E+GE
zkE)Y{{DUJ>Cd0bty4hzQ+`44yiG|-8>GvKv^la`~Sg6gee>Ze)PXwilgra4uav!e7
zw5NXXGq%qek4kGz%sCuS3Fh`*{Y?BHCs?065MF2$bkjH}FCt~QK)(K3Lg`olvgI^>
z)YpaOn`0CR;Q<=p?Yq<|>UwgPo(u>3LkvqR7Nd^EFjthOB%i!|<D`Q%X3<EipgdK!
zHPGbw)X3rIiSTgy!GHG|hE!=AAKsOr6i3@Gb$|xyDsl@H!L)>mYY(0J;`<)+NAAs@
zRG(l|J$&+YGr$u5gdd&Zm0=M22Tw_pYoG{bCe~a%K6o3tbrFAx?c(lx*fjh%p5kG-
zyF26eN@?pWX%UG<i2kn(VNP~Gj1y>0?1_#{?mE$&+#khB?6b9gg#B-xFw++j{}&HX
zFGYnSBeI5Xz0pGAP|cj)uoAuSi~5|B`&`T2JM&sM#=;7vxPJlarTU*>ZqLl(e%!xp
z(cQsC29Z<b(87?I?ij+?{euVk^kT2!DUt%Yo(-+UqttWz$PuQAa(S*lYqq9mW`E4I
z;SajFGU+asB%(Lv**?1B0^@$epEI{h9tETh1xX<sBi+0h9tVAu8*PNo&z)B`eQZgz
zd*z|vO+@KYJLWosJ$}S+@-B~^xd}~Q$6p+7tv3k$t4_gqAOdbZ*Or~5NXyPqw2drh
zN-Oztk~Wkt_lE8bZA;ov<SNFmk3S3${&CuhOp>(FGMHveF$^uV^dt=!aLdgu110_W
zw1CI&%q^r|@!ef@Bk?S`Q)Y%X7gi)!^ZEaGZmk86*wMqoL!xg!p141TxG{JB<j0eG
zhFuOyPG!*HNAnZj6Fwj3kgH9k13qHo06jU5#b0kGBi85U&m1~)X!#*xrP;`^YeM(r
zJUIIdabxWM#KRW?zWzZ692p81&M(*7XB+i**iop#&QGBWr#>_}=a}@gTASEMI+BL7
zw_)sO685yFwGXqxhsn#bK0P<EeSH|HX8KX9^4hJ{3o4J*=4D?##9vZ-f9pe!^0_xq
z4+dfehq;A?Hh@n2P*{xz$sARdVMeRm*4SoKCA*PrJsYj)`8z*W@6T<&pH^dfdbwG7
z1_lVulQ)vAF;N}ackZ@l<rY*_^Gbr-uHTF9s;-+YDr;I3X0Eg*RoAmceG{kS&P-ri
zSp_VN5;9Vv?o1}d#d;juq@+gOx||rt1;+4Zq8^<2j$~|k`{g(;5jTdDCCKWH=_Tro
zf3v!65}zZcgjBkP{DG9G&wM!3&Ekb#7?-;71yX%-7YDp@{BpR7_U4wkZqXs<V!RtU
zr@Gn2VdqEWAAb5N@!>Z9&|ywgY^swDJ(eCHcqPWS<za&T-e6mI`wXo&R&Lt92fdw>
zwRm!5CfSK*cF=(y;b5QXX#bF8;7X&IIMd1chyN<5+CK7V8SA#VG<Pa~Y;vxn_jq69
z(EuNJ7CVFoxEaZzJhqpYYfyjTK%=tcvEEKhZ=0G&s~Tp&LTb2K%?&en=Yp60ja>U1
z7rgG=yX;N7J~czTdC{xUXSy}Q(JeD2|8QjNVA^OHDJRL2rbj$37BQAvQruQuWE!a8
z>YulVv1_P=;{cc@x-71#WXdgM#)!2N^Et&0yJ7C~@ZZHtZ?|T5h33(cY%bSqmKfWI
zwr;|-&2%|hS~;~BmDu~4>)Y8;*r2kG+%GUOIH4f0z)$Gzj*aQ)TIx6&6Wx1MLXd1@
zN7lD-;7}bRXjI*Oj4|3aE&5Ni%eKp*KT_9`0qX&lr&^=SQ~{UBkn`}@8`YUjI@Vs?
z(3P8NM@@|KtWWUwk(7>iPi1M8>h2p;`6q1Xa6#>{l&DmmZsVTn$TQguRU?H7v+CAF
zeN!6^b~<3!OAP=MY4Uoh;x$TKwrfgoqhZ8vJVgv;&0>{=Q3>bp0QJ(XOwe^n@XymH
zLVuU`0Th3K`8iu3W)+)R=Idcc^Y&C=p@$n4>tfI344?<NZu_iM?UAZgM2XgWyDshN
zNKV6A3WNl9O<pmWni-&VUcA!YartWR7&3?*<Lc}k1p-_H*)cB8?C3Bu=16{#S#L+Z
z5mlK^Xm54$_JUmT(A4(RM^D!8T<UCT31BPl4un`5x=?&1o=G(zPt0+0z>%S=$^W(C
zDIWA=V?&~p;{<sb${A-^B<UHw>I@I+7!VDD{I@xgtV1?pxEEAM?aR0IsJT?NeeFtw
zaqV-pXU5Ci=ouG_<|nQ*D7hxbiQLI=G}EXuXmni~vRO0Y?6R%4Z*$KEm}e@6@<o=q
z!B%X}J>DJZub+@#)bIes$9+BZE;%pxT6St2<TZqMdi`^AeroB)NHk~ENz>H%kW*7p
z!->Uf&)nM8QppQ}q;wYs&0O2Y)6KFmwJ9Lxl#3n9-KG;c=k4@f`e#|4xy?PNtP4+0
zbhrN;`2vQF9bK7D?tXUqIH^YDr3a4_W3u9ILUY^bmG+~;iDl`@PWft{1jkD>!>8u@
z+&SGuLeS+tKM>0>Gjg@k)$8+)P7saGR`&A@eM^>6_=^I?_Qwk)H=F8f7PE8Tmn?r5
zo-K)TAT}p)C)1tcn*$Q5^}D^_ZR(sTI2P>~Kl0Mry*@snA&;9{6%?L+s>9nx&jh)I
z>{YYzX3(f?cUx;OcYB9JjI~3TZ-RU$p&rV%Ro!8aZZ_EcD??cGcU7R)cZWTmt;HGV
z?{Pw4&GvH=`zD(ccDd~cxhFEYE5iCq%4{3V{i6;9y3{p>hCMglX$s)b??zsQ<j^T{
z1n+*>AfAF(Nwxqf1K9L2Y+Z{mJY+W7gpqFKXAEGIzIOYVubcCF=>aN!;i4OHVyvd#
zbKp3cKX9?heRp^If6Ha9%jFG4O;4ex-=U3;DhY0WW;nA5=SFb8Kr?<}k-A#mP}=ZF
zdLIHO(8leF=EQeR97*iuM8@}0_<c@+@e-Uk#XxpotzpuN=+cpzBQ^6FE$oo7K=J|4
zycAz{eiDnBljt9qm7L&C=m_Z`XpaSr?K24d7GKcfzq>2k@U@Z#q&+AUm*3{E>YQr)
zN<jmsZ6&#+UhK>)hRX*RoBSf?@S+;qYfBznJ-pQB9sCe~n@Fd0%7W`pZ-IWm3i=28
zz^1B6FM>Os*S!G(d|&R+^jKy+T>I=P-huo>Ua0Z@L=<F2MCWEeA^XGgGdYok8Buah
zBA==*$Q5DbiY{O<C)<A0i`(i?)tF<^w^rV)5Y})W>4L1Qt8a_+P}SJZP%aeEQxy0;
z+%lXw+%kgsZ7Pe7%vaU;;;ZJPq=<8BamjS4H&^%Y-|&|@T_QdiJ?QR_*B^?fDSNj9
zm7_2R@0=t&nR^metWHrc(znGih3u~l(hEnX-t#+pKo^(q%r(2K0n~SOzZz2wA(qCw
zk{B%=-T#m<*9SnIqCPXElN*>^yYslli)u4~!ZC#$n8K)4={Ox@U6{BwRAz93+}brz
z-`Lp?)s43G4%gQ8jvTow*u)7&@UD9pSm=eqr8LYFL>|4=8E(rOWOe@2=`F$w*_w@=
z?U{RG@0m$%{@LRy&0DiAEG;;kG2Bv~cd`%)nMK%!M#Phjo9XSlouJXHIaHU+6!)^R
zh)OA}N>4g|wB*Q058Pn(;Op8-+j$q_?u?`ZmS(!a5huFsyPrG64h`gxI?WSe4RcL$
zqkGb7YX;Jy^YSTNV{Sxys&Gg0`HOCxaJM}bM4bw$DEc8L-RTgs=C!sJ$u*-qzaZ_z
zKtWC40BA9J{`&c<WG}~8g>1n%YL0SBjwDcQ4Wp8<SPT}UfbGgZb@o*1y8Q^&d9P|~
zC(f_Ev?-j{X()UZf)#q{qS&cRsANL*G$A2aLvdU8N<qMGQUkQv1UpHh6~$Il4Gl0G
z0qoZH7lc543*r?V?R>OVZLMWsyp0y!a(h!F*aX0Ei~&WS@3FoE|A`I)`V-Su*rwHR
zIs!Kvq8)AQbp6foGmDn%9zfV7Ls1Iqmn^Su{=9;QwJI7~WS-Qlv`Dr0LST9Ffym1M
z_=$)?JSvCfF*zcS%TaHvF3><SVyq_5W}7Af8F&*Xw`&tux!k+PjixWaxg5{iRdw@k
zjija0+qJPndpFy7+Ke%Aax1T_QkdYgoyZ=boIQA$I2om~YUsyNI9!}winQWL(nv*;
z=#eDRT}h%jNus5!F+-t$r7?|3V;XeE8C{ufCRD@OW}FX5+v$d0dcqm|<droGI|7t*
zjznDHT95b_qmm`)Vw!s=pz|d}ptZPaSIy)d<jS?>q_$BmrfIvZb?($#<FIC4);%rn
zc*l@JZIVH*A%=H&h~b?OVt5xhFDf-lFLDfdxr5g_+&j<t29SK#w{_+oc$Ofvh$I07
zZwF}Qy-m7b0f4OWy<ICd<5l(0$(VLZUis|GqnI-DM79Y9P}lThJOI=uozD+IuYtO#
zB|NGxEyRRJf0P!uC7&p?I$CbW`~*PJ_}-J-UgT(t>CQ)u%9!ZqkfVipl&v|TVHaHO
zmyskfkqQZ{qaw!i*Am-)M|Ug`08nSm1`|n=!e37{&sDm}-~F0=0C~b}JlR@o=K=tI
zphaUI{LIWT4m^+1`e$dc?2AEdH<NgdjjlZ#K$6OYLDI~6fa4=tQZRu02R4_0MgtV1
z{<=9d=f!H3F5*Wyqp3?!odBBbb7KgAp6%OsDi3}nf3)NH@mI7p|Cjh*dZK*%v#Py>
zi)sL!#lUmvaVlC;qEHq8Ke7^vA-Zl|^2^gi(}3x4d~*)S1A8DyrE1@UqiRBe<Ob;v
z*rQO{5)E=6R@Xp3ei1l_WWr!M3>vyQWAWF$y&ii$@GrYO3(~k^-Gkf?393PNn<SCN
z&P6NAm;IPnoTCn#V-co>J<wumF=j@ocxUYfuiB+vgAhUBid|5#6XsfzEL$>$nSKzp
zkT!M^UC%`bFvCeS3np$)D|1QGlYHQS!w7n)7oGHL%1os%dmnQoY(nbP@wJDbv&_|)
z@E|L<uUOUP#r^&z^Frt(=3jJpNy<rYX;F~$k8_-}Ht(RbbaF)*eVqmO`_cKF0vo0w
zkkq?yUREA!9;AP?9{Ik!i*F1ARa5Bvoh>c|we%uUk9B9gn^_>P?9Em4(^A1Fxdq|b
zag$ZPm%B^U9iu@K9=4Djk$_cvTkaF2Ua3fm+k$>iU{*?zh?!O@-D8CnaPK{rWKy2+
zCzu^fs(~F}VPaJ`*#P7b8`B^gr!c4x42=0hu<W)*PR<g%fCGC2_)iLxnX(0C5uAFG
zY8((5mA4wa<Y7nxgN-Ds5>@l+inLInYm>cCT+hSTJf>(8OA^2PH6+D%Bqzg+?rqgd
zTYM%zSJ(JKk;Ogv`APX;F-@#T1%i4h+RHp*nOd&UlsjrDOS!-Z?<G-AM4=pH5y6Ks
zvgpM>?!j{1*X_qZY6K3Bg;LoCL58$R%x^D9F7~0TQ@aaIH^}JjW!o+Kv#HzEqaeT!
z><F4j4V0dzxslmzKtM{w#UFsbm>Bn7p%^sgU3|e4BBC7tBW~5a=Wo7E@!f6C0?hb)
z`?Ke$r^yO7E<BFA?T7ySo?nW}1#5m|o&34#f)rp-qaM?#Y3xU5ne^**aI;U!vr~r|
z!Fw4=HHc%HMK3&El2|U@ZXiOU1?o`efyBXw2;NCxtIg+39;Kd8=W!S~Ur~kBPVR1@
zS-$$&1-)8bA=jm4aYK3Vn0p}#`Nb*i)jrE7-RC*-^!RI!legWtoo>RLjIuH$8$T8{
z;$|mi6qRCA;gXd40s*=$fgF}m8WNg!?^R`>X@rwK<X847KKDO+P-LgC?w?}m^OdnW
z@B5L>_4uyO**nb}>2~`mh4iZuL5wA`%MQkG@Yxvc1);<>O6NBFY;Gno-7J`$VwszQ
za&i>@B7RAO`TZuvEA!g`(=Q1v_oo7KMw79XwyFOG-YLTPT4mP3<hQevdcFuzVGrY3
zWgA$;sLI9S*DonPFF!{LdA&gDCCic<LFOlq4O0&*mhuadWori7uQhDz?6T70g?>sX
zyIf|;!UFmp0I;2V*`*=`lrBrfki{}gU@E2xDMd5Ao!-MBJRlF9oL=LI5871BRuaIz
zXsVivu`S)x$e2A70Kj4Ji<AqwcEc-y`Z9{BCw6n_v2`<He$uWmZ8t-(uw0FRfQ+$B
zz3O3-A>WYd%Lq*pi+i=9RkajCb;Q`3UuZ}^^btol12Uqllq;b{5C)KE-Q0bS`f6?+
zg1ItpviWhmKCVC(t1HQrwI3J#H*yXuEp|x}q5xOVUJQ<G_W%|lP|Ag@tuh=<yORLI
zSkaRJ18GU7MQ<(J1hs%WO;u;3HgvHLCWyYEQ^9`mC>a!=OBF&6qFHDPy0g`u34E^k
zLAf4L_~R&ED4h00PV{bKyuz_f*F6r29Z-roM-~;fa{_RbAwr2fI_5dhQa(QfgwMUS
z|16#;tF66>=*hn5-?NX}22?;&TwOAKN`~Ld8$+l*r2F;SaAim}%dIS&!IxG!7tw5o
z5;Y5f_L5O!)Z)>FB)4gFla<IkLrq(<8(u8=BGN1w>g7#2l8vwAm5x^o^-Vu;KDP!I
zkI`OoR*h~lVuUT~!8}rfLuzu~XbLe(c}io7#h>dh4K$wOb@$C?E9;zGu+0WEmP$%x
zM2w%D3Zq*x1aA<6`Cldqsg*Jn+3ty&$R*A$XHV%2pJ8*NjG|Ux$PYTKxXohyaKWxq
zx{D<m{EgUgXC&6>Su##b2#ta6j3Iz>4or{MR%e@z1i(!QP=Sc1%{})C7sXJ?`d(tI
z5s-)QBWG;`B!Z5C{Q;7FQDI`Vyk+XrXGPYe?p83?WCr~)%Ulo;ZtgXc_8uBEuA3Aa
zqL;#(5{VT;G&sxWuyx0j0DzqjCc?W@U_r3;6|1*phN{9>tIa9$k}Cvv257$_P;D||
zme#$#_qxnF<T3$5&WK?Bek$s3%zy^+IO(d^^zXTuCHe?-qq(GtY?(Ar@@4^a8D(x}
zi0NXcAdS+-mvpL?M(#*9ykf{a)@GK=G*wnDUJS8HdzLRkmhCbmd3n!ibRNm(%Qade
zyh%727qm8QdfB0bPz@+`gqXJ8YKpDnA@Qcz6b~b=m=)97G{wV+D|%Pmqt7DduI_Oy
zr{Dzm!t#|3!H!Z)X?o~UQa^3&$im90B7LYR(eTU`k9lRmV;@v6sh5>mQKi=R@VbqL
z->kE08Q7&Hb&Z0^xic?u({h-YaS(g}epWtOeFS@NLXut^#|gxI%rV#{kyD5NIbxWE
zXsQ_oC#{<wrB>9n8r*Q3XQQs#Bm23wc*#tkmCORe$5>0}S(oW*SQpnSjs87B@0J+W
zCHvd~vw7$Dn1#afm8?Z4=zIM`ceZJW5TrLDBp%O2LkUjGMyN}Mdx;n|hUAbg6q=dw
znkBrE9%FuWK;uTb&xwU5gc#DNf(g=7rFk6MY!+74T`)~ExAHXCgr^<#<})^@dA9f%
z$D64l$Fn*{utDj1(xiX!)nD!<D(~W_JqGUTcLSc9r)}`?>7w=XJHpdbF{1BW4fW;$
z(4k(I+6IA0u=NK0)&)kouwB<(W6>=C(uJNH*BLMX;+-pKlXm!D%JxOq1pt44+*|6o
z4csT_i_FnasttCRhLt`VTpN4cVPc)i<I?DCe&j4cZM`C|8B1f-V`hUK87KCvi2e3`
z3fQ-f7V=~sJ^K2S<lWVGUF<djO%L{O)9#!5;4eHQ069m3&uO4;b_Z1*cB4{t%{RLj
zB$a8#@h3Rlnr*pEkl2@LF9FseEV;{>%`QpiCH28EUAi~HUy5Fyd*6IMjj~pvM?Z%2
zP2`ct-$W*vZ{L%@=|6Ktd;1gOngfQ@yv@Bb9+K}2U&TMBphA_(;k&<<%(Pyc1Tn2W
zyjIQ6zB<W*SwB6P2vU#`mi+&uLnew)%Kd4Q4(XFonUUq$mLqvF@8+vq&)>;3gon$A
z`~2FMRb9%aGhMQ=txdn+tn9trn1^>8F}RPKeztu07zE^XSA_1Byu6?&F~@->yV23U
zP^PSX;aO>gTqa=k%M*%fmmAwQZB1=$m^YB?Q&|plaR2@F)M{hzJvdHCjM(-^bpcDX
zBv*Ay!yASK^Xr1Ek}bd98d@en;S93(R#h}tWh$N=!;pe&P{OW`ch!Zo4f-u*Lp5${
zH3nHH-4C?0$XD@<!0r{Cig}D%UeyT{W2j77=cJ$3lof25QyMdL=EXrm8M+<{s}$ge
zzE}`2e8cH-fCkmoqr|Od_bJ28LcwVookVhk;j=Vx%!Y`isp9g)bBQ_XUmYh8^6tG}
zX2}cFiKaN=NQbRdlC)EL&L-Yi{Ywp-jUBSNZRH;KbpKz7<$h(aG+y6B&5K5(uJQs#
zh$}a|M9iP?(N#Um@c>-Lq~{rnYVpK7(&N%0nAV<Um{mDvs`c%V0hp9)WR84|$UCpP
zbK4iI9vsnI@n*t=C7w?c(nwf%<l=CVQ@iYOC>I=>1<w*HW1_yK<oPUmB<f2wy-ZKf
zSL|WiY2_cr#7?9Ek<}5l*-mfnl*yH^6q^4}K3O*ei*?Ck;gub)LF$h;k~QxNA9!Dr
zO<h-5FS3v;bDF<Gr^K6+V+XEexoD3q`u^r>bI3RKa(I)`+B0}mE+~GhNa4k)#t6sS
z_$__nsaGUNkO+|{g`MP$v}3!TxC8rN&5xN<3f;GlcUn<itGq;}w_cvY`C8C)AXQs^
z$cwLhG~^TYK>HM_x_vZ_W4MyK>Pu&V6_lV*g}ogexhHkqK|19hj#AlEZ*Ju`-7c7r
z(_%iwB`N~A^C5|3LRJ}{bq44}CAqt{>!gk<bH|s+V^{an$7B#e9Ujyp$%e-O*Cij<
z-uh+)|71r6dDjp+JV>27QA0Zl@4e*UufD9dB+<_xOry$I(y_Z8*Z*@0$-0H3262)d
zdq=HJr<MDg{dHJCLn!vOs8AP2ruyw-?urr7_^t`@m<RI~u8Xh#IF5tk7?(GADc*b9
z>>@(@<dDk(bMCx0NoP-}hGE&x*^)oj8(hbcT&yQ53q2N$4s@h*Tx1ZLrn;rwgzi$?
zweXqU7FBB_PH%06uOoK@+(eX{Ph*?@$VBK9>KeL<T25xtsHXamZ4@s%aEo*AmEw{2
z<nho}?Wg|7_~QgIo=sN+Fe#O;7K_#)fxFV<O_~yaSeU~p^Y*Aw=>{Ee@(^#u`?DIH
zmt3qxRTiGD+FYK*APlcQkK`=4U9DjUHZD-1T4a1@ye-}*rQ&anzK?{tx3Qtwg$ERr
zi@te$?g4O5^aWlbL9I`OP<U&xR;*(DYqTcPn#qs5oh#p+Z~QRcDeO8pQK&Y7)Q+L;
z1iU?1yVR=Xkt%Y>EwtapnE2X(N^h-=-$g@hfWP*Res7d-E!~&f0+P#Dyl&DN{DXmB
zF#1e~2fTO4eVZ*3W`yjN#!MOAOliLDlx+I^VT?I2_@ClCgc|RV(4_z4O-2s{ig<YQ
zn!{)|U<D8C2R*C2{BXMF2i-D>A1W0mVeQ;!@9*N)0%(PTyJV<>;)bdmM^d}AF|OI~
z+oDgw;f8{Bf}<;Q`}O!UlA6<KT?(-=lP6Y5H%r{P*x%rEdhl#Ae)2)j{r7xLnm>%I
zdm9vcj$SB;zS<?OMZ#d0V}o&ttqX_`=F`=4TNU!uo<%HZZm71g`s^P}8i0S5a)F?R
zh>{9;7=U=-b_W*1YX<RJCW5GT-QE~R^(DAZ38C@O>YCYj5wyrxW>|XhIys@|+0glV
zDPDI>KH;s_sSeL#Px288z`AG3DjYL*fdG_L0;Wb=@c#+1w*UC_ryKtk)Bkl-%M1Yk
z0J!$Aq&5HmPn!Gp{}KN@5h`Ai2qFXq000mmaMdbN0E8Y~w)&SWR1AWLY-WWJLul0n
zs~LDtnNiE4uBq;uvHJ@DZh_hyn8$tjQ6AZoU6jg?ar;Ii6~zWacKjJ%YmL9gAnafP
zLqsA3X7GR7o?#^`6d0EjgKAJx>eBMJ1M^-EJ%~V8lHW~vc9Q(cRU+sXdLq9*C_k7Q
zE6tuRtpziGhRpyB&)B{5j0g3#taY~a)t+u6shbd(cEI*shHQNS*9-J8mX-kkyg)2-
z5V8&w{q)P8P34Iz0;|erRSdLvOQmYr)?pE$CMKjuciD*xHQCdqxXKV&JXRD@G&9z*
ztqP+!ML4|M5&>fU1Lcw;Q%Hb_;r7vo7-%s1a@0E!C#>XFtKgau+{?I?J>fut+%5pv
zd5Pa-$1^LH<_<WzB4zvC77T_`Np?B%ir)<V|C|_uLTgibu5*Y;6|qZD{8pSpQgR2J
z+$V)jay+I~e)*g2Tm&u)mc4*)y;amjLGd)hs#<we4f85wRb}Es7jK>tFdJgzPZ@Dc
zYQB)%#X-xYB&NL+(Vn8T|5>FuZrY-yF{^m5xUVaUY|+8tnzdBpH*z)ess#1*mUJys
znPVn(@gGAJg9;+Zu!Wr?wFTDk8x<hK7IuzQpUA8&43;#y+t{$ufDd3TVk^Y~v~eNB
zI%SNzMlIDZz)mIrz%m0nm0%we(nEI)CF7-xc2}Eq`UTj=1i*PAKmgcMO_np%D;kM6
zg2DSi`{xrB1_3G|0DvE`o&*u)Hwh+)GYLUf!pz7?D7%#)3|f+7k1Ec?HP+&ArArVg
zT!bVzdWdvi3Wq8#0*)3sAYH6r+Qu?L^mKQEP4rA?3_>MHVLya+;>QVUkpwGg8ZDSl
z-8gVhN@k)+@Ywi*b}fk^lVqX|X-NklcKsw=6gscC)YEAT#1$x5gizWzTY_*pqD2Z8
zDmKZhNu<LOoi$s|7;GJg8YV)xUEB^wh&$x3vHum=Z=#97`<-pNyEF?4Ah`Q$)Mjyj
znWdZ6r^DJ?XJS({rbDF!I2fo*ht^b+mlUZKurk=E8a$mKMMqs;B3H<O;HDGyaiHu|
zm`3FHKV1p7UBHB>h`@e6_%k)_CWzut;shVlAy-?{L@weMCQq14r_3K>4$`qDO}L10
zVzoFf?jSW1EGDC5fLB8Ph&N7t6m!@ohtzCI6aHegcwgLM<{>FMiYyMvIyjtW;h;o`
CPzPE7

diff --git a/static/fonts/roboto-v18-latin-700italic.eot b/static/fonts/roboto-v18-latin-700italic.eot
deleted file mode 100644
index 7dc0ff449f7838c94cd53c5691c0ea6e7350bc9a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 18764
zcmZ^pRZtvE(5{!o7hBv3?(Q0FaS0aO-Q6JscUjzFad+1M!QF#};1(dbhn(*}Rp;Wr
zI6c+%&ePq~H5YT!Rimr`0NBa{0Koqi0^oo2{}~)y@Bam5H3k46So;5k|I<P^0OkMS
z#jaV+|LFfVbbtoH1z`T4d;aGD00BViKXn9H{&z^>znIy7dpm%|e;Im!Hoywt4)FMo
zT>#Gi<+%au04@LzKmZ`}e~I%y68Nu@_J8%H{Qq_Y0HieK)c*H<004M^!#O}m6(Cd$
zV0gfpIgK5+*w8_><?0gX6imj+=O$puAi5pvsMsBJzJPPXsg)0QQeYu4NT51PoakJf
zz6&JPXBRf-b~1YxFfVyUM1S6bk3v>TM<o!VC&J=de!6XIA}*k!*;S#NFk0l}uinyF
zNx>lCsvpSXJW@<@MonjpGK?`kbUzPH#9Jr6mB}KKR?s#kjEv}RMrX?-{OuKz`_E~~
zxl3XJ@K#M~?KzeHB2^J~Up4W|6oq9g=z;}TsppIqfSEi*;rw~t5o!G~#e{NmT$CW>
zD`4EospNyfmx+Xep`QVwO|9Q*<8#72iRWALeFy4g9(2{r-G6T5|1iN{IDHZU#j)lt
zjvbM&)nx!l2S`@rEs?57P9P?K75wT}u&Qn_xz0-l58}%mv*885lmki*-k`Zy1+VK*
zG_Zdn%Yk$@T7TcbF{3PllksIGf#^`i;#c}fI%@6CMWp74^Kc3>Ot59q#)NMc+aXxk
zl;22Fp`UaWIEtaHCMOvaN5r`hm4YWnYw7U8<{-#ceLg%{FjO%cV(s+=Ke9i?%xZsA
zrn==97`(V>2KxxLBgONh-IKlm?w@x`cVNySZAiwuTOmH_jMi#>rzuTr@k~y8DfvNS
zJ1vPLGWW}^>Z%e&CB<<*SUDB}1zZljt2p4)GT4!(;ysxk$i{HMY$kR_ueRTHm%1e^
zT2rU-0C&j@LxpGHGe58kZD)|cP#1u{MLXp`b4YSrbbU>cb>$XPW$U}V_Y9^qq!Opp
zK<k|t5-70TDj|`fuMre@y-Zge#*`&Pd_w|5T*W*v+M_FBLRSt`lY#Fcaqwh#jl`zP
z#+(=ujkKmb5Vh3<I%TnRr=is%Fbf$=NsHZylJQXxK8ul9cCJ+)O={cEWaLk^Z2j%8
zR*v6Ule_PEE}{=%J`IU5PP59;YC^{Rft&CLluo2;UA;>8*F6ov*XaS2tHq8ICSaN<
zwR5;CJ2k27C$>&jKxxsnG?(;IG(v`%sk~MNR$!mC+@|Z-HtmBL1-64Thu8uwWU5HT
z=?tRrAtLk@9^J7VF~G-5*PXG5P33GYQ{KrI7Ia!7MJqe}VNz@;Bf{zT{Eu!Cl}%k=
z^vQH~@;$|W?$*Xi5y@jfb1Lbg<t2s~X!Wp#aoN(Yd-#9fDcTkeeT^pHV5Wy&Cdyg!
za>t&^gw`rTmbEignw5LZNl<q_N%3QMNZG<kf(Um5GgEmoO89oIB+)KX&2N$RwXfB`
zH3kNaj@U_#Hq+@;I6eHtwG`5(ky2Y#HM9tj^ERy&H<ug2(fxgk1Y~-jaCShD@(QIA
zSp9~k83}Itxn2e)q_W8q<$uo^-XLgX@ZgD4`O{lvuFR%g4JL1V!m!#{m;WjKISY$3
zro?|gF3!)Yikw@L1ndz{1?Jih|I1K!Kgx-7RvKnYno@*@VMfw?vbp`snkojlfy!$-
zpeF{YneNIucuhEg<WKozvf7eSAtYsjjtKRL8xvcr`z#^UDlbEdEmp&T8~BK2M>Suo
zGZ6m{=1Lw#NSw2#rqK=-4fRf3cJI;M<SuK*@I)T8vUOWyHrrz@K-4YKa>?`)g68U<
zZXFHC5oDnWUT{|Y(pM+nV`(~e_GrMl5-vtHQ@yZ4YSpxTsvL#*@D1H9sO@x#T>)av
z%_QT&SynuJ$%_Xf0Y7zh=bog86zvCPsu2k1{h)LnUj%!b12u?&(xOqtsYU1V$%usF
za8@S$9_r$)orL|xqWkuO^4hduy7TzyU`9*6A@q_`d@gEdq?>4jb92OC+3d3$0!Uzj
zEq)DOq$x2~WMn*zFS3kj%{_2VMUcvqEg(GfwZwTj)`lppme@eJ#~3BHKQu4TvjZWV
z*ar9V#$C6TyZ8auVucl7u42})*+aGl5WIqF6D<v4E4+T7GI35&@UXkHSEgKAUT$*Q
z+Qu*C*1X}ROUrZT)k73hQBv+3_Mh64;8k6<kfrHNoy2&xoR@<2ri5N2+4e%Unv1sg
zus`AI-3wyaEWc?_eZp0v58wmZM7anl@3rmS&5fwChzJ)D4yd<znN+uGbA))u-URii
z=qC+1k<z@-QhoSUMAQ#l(q4Q5;g;<Pcl&tzdnpjGS!YZwz~M{9Cp#A*l2l4B;+cN=
z?L6?cm;iP-oc1<2cavgXKsheyQhb1dNQ_HO!vo<QePX+(GgH7A3@se(Sd5u_@iXAL
zQrG2Hi3+6mg$<grVMz`+aRHg!QDAP5u7rQ{@brY+_VR*_hb1URwRV@jd~}TZd-JWW
zYu67;ro`mSOpjvi%&wXJhnrgBeeQNwt*SgtgqD12y~%myJyBditQH{}>w1JAo}y{-
zv)^m@#c6mB#6t9pLwUroME!Zx#Cx>e`Y!k#!)k9cHm+5P`Jz&PTh`8iCV?;70?JN4
z_AHmlSic}5fy(|-BZ!aEp|7QO6Lvf}^%1D9{^33QDaVQC!p03!7+m}w<O^E_dF<TP
zTT40onlZrSGjv+{)j;Rf$Or2|DD|!RC;YS`aA717oJW}h-Nc6?*{%;FWE$AG8@#0|
zMc-L5+n9I3sQf<m3gC#9*Xyb}lIM7loaLvhFVfQJbH=|(*Ea|XB>f)CBfOrXQF2T>
z%&HyZ8rVX!2jgF{7G=LisrqV3x!Mnk+yWkJq|kp=nRmHGc`#6n!Vi?fH`+5ePc0kj
zroCa~WYr9tKzU>->PWZWfO@j6x%l7vPy$%7{44nTis&mfDDjV1yx%#p?b;6QjI){b
z?UZrx%5f>LbzU@a#|qZX4@(tqpv<3996lI41>|y*fdE2D0wLf<y^lra%RY^?<?82S
zlZZf-`|uh(MSZbRw#)%hl93EjaB^zrGwh^MV?0p>oww|vH4Hl;n$k)+>q32zY!nWN
z@VkaNDZ-{xGn1K>^Ft{q_hOlCyr&E2Tc4+QWbLny4m`T!o1Aqq2fnipdGSQN^&?0`
z`qz^7%Gw2eL`z-2h4<st_a^V7x}A&kXOm~p4LYXqlnV+h6P)x8ZLf^lb6uKBNoxo7
zKYCinQp6`GOO7BN-sw*r1Z&9CF-upXmkJ_@;V7N^>z~7&<kbSTtqSyM4)o@&=zGCB
zx_pu?dlyM_VbYH(0E9vfk!}ZcWfC2EqIJQHMKb;b4yoCGn=cFu_SXnI@TP(u{2BGT
zBH15<R?hTEbfr8lgp1Y6D6d?_S4vkTYE*R0^Z;LLbgEIRiM2iJCtK5`_Y@`OJ`>eR
z+55$a=08`qNLi!NgUXHKRft&7m$`Lkc@W`Q4nPM~(J9onG9Atmt+5)|@rIQr2WZ0x
z;o9LY$tozd*t3vj>Ne^V>FGeF&YY5K{x3}))K5rSg26P?aKWa0(9KSE?7548&_E2?
z)K27Nmoo`dS1q&lflq==X3>;dm{^ULi<mpz-?6M;C7g-E;k_iT!!*(FB8&;ZHuB7z
zH6|}oR@mhq{?IgYUy51v%OU^8KJKv`S^5^ZHe>!J0fFu`B4~Y=E3LV<JGRBbrXDC}
z;fv3#bP{o1=VV_Yh%<Tv?w%uz{On)lnAy#>UE6nAahMys9EURe3;#4XG|-1QszE2t
z{_t2*?Gtx0Nl)?xR%4$$Cc2Ej)1A1-UBogwq8PIPqoN`Hhqs$>Nhhs60ejud*2+WA
zMLD8WlTCx@k0Ye}w2ZamTB7J`48Q$Kzi`mGo|GYnfYS3hd|+!dBVAuHSl)!4$bA-u
z2%w}T1_Qqw6B)>(<$`waBR<E@D{JuP8!6X8*)(D>eg(}SDw>qpt8@M3>r2lz1g<?^
zm>-6GdQeyxG4*eQ#tN{myNTB74xxEX0}zL`HR{SZB;eE~GK?+dMAMeHn#?{lKrwjR
zT33}V5{`1fMcD%qh$UL<)k7+b9qap?o0$E<`Q-Rklna0XO%(Rt(3sgchr{)xZ7vDD
zzYIGbD5~YbxB77L5Y)tOwR|`&pB+huew4mo`5nBvMfzn`*Wu7nlLN$t*Ds~cIla#f
ztigz4F;D}=iU7Eo=C!^vo6aJH3;2T!&f-u6uThj&vk4))UfEK>*$gxN0F(ebqz#(Z
z{ArC#9DdH2F-Thds&?CzzOa3vk%OwR_0^W`deFO-NYh;Pxm4t5ept-#j~LFh%PiLC
zmJww#@QH;oA%;%4c(4EIUm0xAc6IR{0R=uwQ4r{{o&QZ|RT+2Z1{=AwBSFE%6RP$O
z7;x^?4<c><Gi|dxNlA{0iUVR2yQD!-v^0=wg{#5bV8YnqrQ0UDxQYQS&$6LGa2<S$
zlPn6>(l|;x(3**1XEVubXyc`_g9_fI2f)FYAN}X_Wu_B^qCmzvkgj%#(tZc!2wPk@
z{evzc&JsVf1WSk@jo2K+i8_XBay=3<9Al032ZUmg*{?d33c&H!mQ1}4Y?RKBh>HhV
znS4h=PEB_o92FzmMAxSMDaLkef+v+ux9iF63PxXdV0I?wJCNg3FyT0!_TayPK&MwQ
zC)+h+NC27$m??h=!Aw_fmIyJJu!SaYHg+NJU?**aN{Ffxjt%L)F&+s~amvz{gS>o{
zP|!J^NL2N(y-m2im{E%!k-|^mge96qOKbhRbZG*$rOc$5Ft=eSBE_y--iO!{2|Y9d
zHJNylBCOuW8V{bH;Sn&J1n;|uU0y<-v<07-{rmW+HJUAtGVM{yL`@um*@Ik+Fm(rz
zNd84Aa&U<E+lui+R&BunmO^pT%%F>I92PPI)hWEUv>c68II4hjv>Z4Ge>up{S(2SY
z<oF=+kri7MrT>)PPiCssuvv@WB#r_T3TYaKHfTUKr1s$pOpHbHdp>hfB=w}tU*@pW
zaxS)MwmKBp35*PeluY*!iL1SYY@NDW2KMLjf5V(r$FxIF7=D5hrdsw9MfbWPsZ*Hc
zsv3y~77QsYGFhZhs`~|i&=bbdIfOx9{%#GYxqOUBPTx7~i(%NS93f`0bv%n*7^FLB
z4K3A=1t8rMEDDoi%a(q|xe8xa1<hUyYQ^sHbEyoPiIp-4FX9<(x4F|?q`;)8u$v`M
zP{bCgW#0=A@xPT>MdR6I*xSkBI||1wLnR>j_;E3|-Eyd^G0KkPUVU|(?bd%sUyklu
zy^umVqw0(273kAH?<iKlg%Mxw%y-gIpJG#8nEI3AC4FrpO6^W#4qZy)<B%dGPWxF{
zCXh8yTJ9Se30I4hOIO{WHyos4J3DF0hYar=7Dga}*Zp^SG|-LLXQyT^Xf(ocwK`g5
zfEP<0#}Y8BN@H8fVk!_*_-|_7RQ*n*hxb?DcJp+e!=V6A)_5u{2}0#Rv(#X}{vNCE
zHCAG(%*iS4i{{)(Aa2!vs$I+GHz?}Vf7<e8?(nv_(aNYc^4-S2h#Al;fja&;T-vD(
z`((X7D_@*08c_k~m0$;Ej9H;C1dh@;Pp@&8;~jgM9y^Bt&N`nh{=!+DX{fEr!Xc7k
zuPsu$eO^0ke#{z^y|(f)xO6N*B<z!RIDI#W=Our}Hp1etty$)qk<YDB>(CcYxAZkJ
zp+sMJBRjScgV2<Hv5()rD6*64rYP2eULcgM7_fn^qST+pZVYMQKWOaM1_}>P$xVw}
zt|U=QBS*kwA3uk4M(m_ohBHb1GkhMtOC+g}*v&w&#i#KO^LE{fercCVh2yDZ+Lzgn
zT?D0CQ30k?;2}vyC&=kVWC)au0AOV(_~qsmJ}Q-E_EVVs`e*GdG{mWuemoO$NGy$t
zk#yDv_T*V&M3VDFSMP+NGWig-D((+~-vvN&W=U2krm5jf0DT1N5{}GLQ1v<~D=Ngb
z{OBkaS$`xjP5+TidD7Ck+Q6LQDhsizuQ;LewZBoDrm~LqPd^wf14n`rv3$aasH|!s
zx4QqnDZ))S5mC<I+48+Gy_#QhGusQ^_a<3-!*L=y?$;f|lEO9mN$COZ20xM#WQQ5g
z@v4MbKDe}N^?*<V_;p1B(M%p4Nx7=oVK1@L89k6KlkC{2G#{%)AIY*H|NE!B^sc1j
z@&F&KT*yW@ZBFFhm+#_}iVncQEY8`m*>6uq>{+aFr*q_;%cLk!kKYJ)@T_C?mUK2e
zl6e>TtSXcV?Y*{D3K}c?$N^iO@<85>^3NtQo}7n9&dS>$pSA_9;Ws7LQAap;B1;RB
z&$Ul_kWj?aCNDE5&?E)lD;UF)L$*<DUYwr1+EsliD>6aTYDQ&YZH0=>k8BKc>FtAL
zXY{{%Q2VuYKgFr1Fo(As1*BlR$Z3D;tVXu^FM(qK=m&g*2unTTOS@%<kd;&pgrt)q
zZ^FgAC!T9+<Ls!xm!y4D3Y>#Xoy<uV-KuHMq^eB}PUc-9E-GQC#=%CijDOZMDfa)-
z<5#O8{zTyuAZk8sLjdn4KN+K)a>-+xIy*J)Dq4alS;Y|gTRR)TT$(>JNJk86V=>x%
z5UJtUE+U9*v}y?v(#sutaHIFb*^=5#`h<8YxIm+g2*M@dgtUv1(qZY(3xXQACyE_5
zunqCu<8k`#Lp%&u+nl@z7%28!N6H1|$D@XGK<a_YiP~!~cmgi6na#ee1B|~=Bq$oK
z<i@qkc-NC<uwAQcx%qWs)~S>IaPE1HPi4$MY2#+|TncGU?hWpJp}iP)QXTgD!F|c!
zK=K^nq37r(78)%*G}U%;)Hf}MfHaytx~J6p`iu}0N?e&wO;z%w!$l1nhdVvU&5gv_
zx8KqTtr)B3=SQK(D8ehuw8EEC4jsJEpfuGkx8JnW5b*OVh)14lApyFPaNMQS3@K;M
z2BRy_7M^DBHWq}-Qa(JkwM@fpy%YbF^T_XKwn&tBaKL{4(pk6S>#T(wh{PshZMj21
zU7Oy|F%?hx*12kbUxb-PZPrxBXKNoJ)v<#tGd;vw0+8u2lC3Iwrc*?>{wbejyVBdP
z72>7>UtKQw{FL)aavO&9%)q?dO#A1+KHRSi_u>Sv@|x;rAu=``Z=`*AF=^K*)_6`8
zK02ZX!*LDllE;C}Czf`M!E-?pzK;$t={atTLw9yLz7+@#muf<}=B-+ov}#ENaWmZ|
z!-|h5_~sR2rVBD&{ajLhvnt~>@SZdgq|Y8r_OV_pqX)ncZdo$rz1B#<T~(u>*y^-J
z^b=uv5`WRsCSFDt26)BT?vIZ(G*Q*5lF+1FmPfQ3ueyKBM^h4}rsCeT{F#}<ZuyLG
zuR@Y#dMmITr0~7kwtmFVu{yJiog7H#$lQwlvhS;IZPtsj>3f7>F%0(yw3SR0l=93_
z=|;gC_BodKWT~@?SJ(L#O<y}~q^gB&L!3?nxtbarN*I=T(2kO-beDXfuiixbnMuI&
zJCC9=IKup2bblfb*>fh_RT$bo(k6<S-ktTg@Ucv(XrJX!Z_D_9vW(UI*f`agBng~4
z7E0Q0heXFNSp`1<Zf^t@fg;J%%ME6g&$urdEFUMOUTxudfR^#Mp#aVkl9aOR=PrU2
z`B`OtF>(QA>X-sL2Nf%5SzwQC1P?nw4;}xpV^Oe^+ee0gWSea1f%v{qJ+$gUd_;PE
zmg<GRflgVl4k{$L;Hff6aOzc!mRSZbJayJt$rE`Wq;vUMT#r(+vg7xLJmr`kir)5p
z>>Pp^VYUDWt~(~|w^||OF`JN{PEW5fTJYiBK0V`sg623|SKm2MELFBN{Ch99D<hKj
zOa~dYGyc5owgGctq^We3zoSEh{)$`n-mKKBNMEdGjc~Q|OL-(8s5h&}Typ2zo7RJ_
z3fYJ;Ukln*(eHyOYQ_lU6VW@`FNtAHzimaJaKqaBq1>MxY#Y92CwG$up_t4&<4j*`
z8#*DMw-#<Fd&y)mI>vzUZHBxxi5J!5U2z`tby0BeL<~&X8r`{(@M%M`R2Mk+fFzXI
z&;Uyclhx@r!YF+0wwTLru^ynlk>6HcvAV#aMOwy)_*MDBoBNBJ0Z@phMDF*1ODXkV
zu^E>%g$Cr9QY)VV)0i5O7(5s%Wr@Z}dXPVl$V&RVj}LCm{@~%l{&Z+O>8U-G&eWxS
zQg$t`BrD+_F{fUcqloFiC0gjZ9($NSiRonV&7f-o^F9;QEt7$)y@b2&ft8x$5i1l_
zuT!D4q5HPhRbur9yle0W+v8M<$QOPOS(p95)WUTjl8Y*rN?RB~pV**dag7T^8>Q~s
z0Kmn+-QJeSqO~}=U%TGdpwnKuRE(Z%_n)>es&mrk?;xmku{T6#A)58DKYUtg`PRj8
zLG{$M8{y@~;t`#*PCHEE@Q1E!-Nn>GS-N`8Kw8t66#0gHHdez>+c5a+0X20dX$8#e
zc6VGt#%wE4YOeOoG7+2iZBwk^&xBLZF4iUvH{-6W*WdH7AXU<Z3n#naW&cZyvT1T#
zRcb<WRJC$mqVf}WRp}ksC27>&D55hiK3uu-r>o|?*e*O%KVSb;)Wm+R;(^91lN8;J
z7ha-PB+he6*l?EesrD7^ZjzMG&|wVS!u_rM4Lq#D$!z+EY-8=>G2!w;3_20DAaC<W
zAMfFpG}X$w)I--pg<oKnsJ{dV%!435ec$Bw6%Y|MicDORS6lS}jgnDq*4lD+$zEt9
zJ}d=60q2BE|EEsf*Ir0FoSUuZFj-&7OS@dwzMGjZ-X-%+ls5DwEaVT@&o$HGQq`Nf
zyih6q^9MDf;xOn;*c!h^qoLMLLKC{l%&`!6#X)+i<=f#lPRnXHi5_X7w_r@dpzgvv
zr6W!w*Cu$RG*P*-&X^GEBZ@~AVeZp|NrMFf7OUq3t>Zez(Mkk@3_ZAS6>!2#9L5$e
zqY!Ln(k9MC|C~MGBo`7Q*aT*w{G9FH#)yc?!!3hKssg`M_o_HVK^Xe%-TG6tH4rOI
zFcb-?5<@{oc>Gw)`u+>bARj}KYOx~$iy8}9UbzwXM5)7Ej-0TVlVEvNwZQwUW{(6C
zd0uEoH1Ky_R%IU_C$u{OcJbR)?M|KOd3}b`R-H7AY-xw>^OD3#fbT0!Rn`~5-+lGo
zMamvX426bi)Oi?aL9qg5aqILeExP6Ndeh&TGQ1SpwQEGQz9hE_5{79hF<tTRn~c*0
zKozchKl&4(hDrzsF=bChC?ABNCo_CF8ZqUJl>9eHwF~2&u%z!}!wWmw?>j-oq5GKa
zJVq~V!5a0dTP@~>%hF^zHk4$Fr35K#+Buymb;pzzL$i1gY9b!dk6KA}IRLM=$99hz
zou3zVxXtfD@KkGlsLx>ghVHxX&dc*9lJ$OL4~IjY%K+u+lBhyFT`kLQXzT(tO5)+r
zQwWILFArt_q++$f0tYu^w~&mo@`j%cn}_^%f5P}}_F8O*V%ES#>>v2=Y3B}?Z<Lph
zF3K4A-?_c0LL^<*x5=Z9?Wm0ef9R>=h&x?Z5W!mpF~`!>=EvA!pwV$m?GCgC=iV?v
zGz#X!%K(^)ImB6>BJ^ibn|bpto5CcqNBLk4&-PQ9JlyEdL+*RyVj0nX^06!=;Znn5
zl$pM765y`|M24--(8^~pk?yP3hkcwom5oXeQYnz2JN)u3nBzOiU#HkEhDJ2|kFVS8
z{L&JSCPhvj(6JTYpaTlU{Ja-p#X=*HDlKjZiA`E9V5(4Mul=plecW?@Wx%~KvHLA(
zyvQj%UrLTN{mS77_okB$JmRk)mfU8zVa@!~NpMT<dl9A@6}C7$@E#@`p&*cnEKv{M
zRdJ*A$vS|`4;~VX{{qn!Ffm4Ttp1Rb8#dg7lCK*zL6Kkth{jVRfYM@nb`F8qahQn@
zLV6XM?|}jk{v~#ygULwr3Pp-aBcwFC?$D_i>$p5Ar&aA|$8mP$rgKNl&ATr}^aog;
zYx}#aTN`YUB75t_ZcIw>BSBgS0-ARKY=l%II*jlqD)yu<`kj861pEh&VTilVX)O2I
z>5x1U0j2jihp%w&yL0GI_|sA1o>8<xA2Zkz))UKdP@}#veM^5RtI8pD%dX1Ms}tFf
z{#a2DE7zg9V8%geB?ym%>FHd2914l6&5f-vE59g1a&QtAYw!QaDmflZlz|g8kWnq!
z=kJb5@l~%VewJ2i%-1^E&CY^F$mn_cDf|3I{8r1eDh8!>fvxT<EFVkuuIik42AH~0
zTY5h%I9>g%nu4s%OczWi%jE6OP@g_M`e%G7(*~0q2F{+PA-t14z|GQ7cr%`|%|(g*
z^x~_|Zm$=C6Z%B`U0*?WAd()GN2!7OY_ea4{eX_-XeEup1Sx0suKT5kUWzQ1G70~e
ziF|#5Q-NKD+yIf|i1V2;&F-7AI=XX$Sp=pAwdWp#(_xn#yW}kX_F*L5WFEG_1F80V
zaI!<7BDAt=ycLLgOL<>W7znh0wV|`%#kw8~mEq5d1)TxF=P6fQf{hFgB-m=VI&?jy
zR)*-5-Cw$FJl&*$N80b-BG5dTc!O}+-mt%iC*(Q=kO!hs5x4giN|;I?SfMA){-nMI
zKZFVle7&o)zFDnZ^Q30DEDN6sm=E#x>Z=_*Xq~PHsnhj+0L%6<VJa5>aF#|p;XMDt
zZ-p^ny}Vo}dic+!9_@0hZIz2uhKT=bk%6rw<=n3{lo@ZaN!EYQMFyY3R!m4a^xmKu
zL*0P}1#4gec-Nd0xuBceKR28_b7uUmZ9N>S90qSuT%<)fi!?Um4ZMKzK^l;2gM@rY
zPFDl1-pNuE*jr}*WMBep8Cp|{SKajMKvvqfvg|W)?LgNzm!*@nE3*dGA>F9wjs{DW
z{!Q^YC$5pO`z`mzi@K*$76(I_qK|w559f0I8K?dbMTp8<3?SS~Jrtob&HY}q^cbs*
z>*!r0U6W_*TBF>_LWCw-KQJbLmPFUA4L)bJGev<kf*h5(`Bq8)tmp=rL@pOEQK?)5
zuG^mk%K~6ad43ivfq<2Y-5DDqjGWVVLMLbCYoP)U{E)=F!d=h+pDC*qXw7pzKe-1$
zl=MCu=lHlW(n%V*Fd{U%z^}Y%ZISa%B*k~f$bj3Xm=m|s><Y7|mNzjDRn$V{LvC2`
z>T;Hrr;n0Pg`vF6t|pM0(QQaOK=^4kKYc3|bLubosj%yv?t&I^HdbT(zWj;5whzAl
z8}B@=n|kZPs_{3E9~fjo7(mVd)Z^bqe?-RccK}le?5Vxr*!p?$%|@fd3Rljc4NBYH
zG%VJ`Wd~U!OzzWj{--402U4kx+Wq#LDq*=;s!zkE@!h*r1%s}|fI;F;83S$8N4G2S
zQVwztV(~_K5XtHQXZhy894D3~IhH~uD<FWF&@hG;QNJTkPmh7&yTb&GRWdv|RJ4)N
zXLyikA!UeClR|qyEF8PWruOG*6c(wn;M}eiJnO%2msT5)+9Q+K80!%lQ}6$#?g*>P
zVTSBA{cLjtg&K4%0tt1m4QX_FMG2A`M-?szeb$}i2Iru?Vdq8w49b?0l<fM9pT_D>
z1zS~rM-|0zAloGof3dJ0KeGE5S*?0fo-c|sD~K!T?rM?LpizHj$n=(tPpYY#U8GAR
zsiY0R;03JI<!YW(_^9_6qs=j3mS}=^KgO9P!9WIeX}U6jRJ`?#>A!~`E9p7zAN$kp
z_l#0wCg4t4eJ;+M?VGQh-~u|~kqnLmx)5&`hx|2>XW>{r!+i8YZB-}YsIf+Svnblb
z$snJwhV3q7K}!pq#?n)JeT`1T!?Pr9zgVwCV9Hy6pS3N)8IL*M$X?9g40QnSA`DFE
zjTxYq8Wa>M92js;Wuw%feiL!}t1DNt#FrK|`h_G`XxMJ?0U6pl-rTn&mQbDYx)6k5
zIUN;3FI{6nsIEp29j^&_jmZ9&=lV)G0#=b6;@uc-Ed`;OV=gNwt*;AI2XCCt`T6Bm
z{ykLadjrm!&L6<XfDacGd_fYTsxtlb=T&C5t^<pMg97LX!J0^EN{l7wSS7#u7P4v>
zfb--=CXrGo=dV8kJZAO}?RTON@PrQt5o(P&7ahzu62oqjISGBO=2F~?Xpu&Q^v#>n
z%0={3|LK%rl-iYs2BN6!{Of}7CuNpl--VG<;@iNM@7wTEjAtbzaC(x&r3B6oH7N47
z$j$!(c;Pr3@c40uHBrOkaSy-+SoVlga>^eOekAahX_;bNi*WpEUJ#UQZNu#CRImgT
ziB?|{dC_7h9ekfNx27Z>7sXQHfsbMWa#DL%PqX}xPM&FrR`9$<jv%{T!&xtmq>%cN
zFbpP3!ToT)>}iz*)ZaS&@P6VRvi31Cecud5EStW2tEbh$>=T+#^COq{%Z6V`l`_xT
z4WT&ZM!+W=%^U%47lK4z-YiFbCN^sCKNc+WH(v!q(GgEgO(BaKm^_@ow|9?rb<;u~
z1V-!iIOpZ=oPm)fEZHra{8CI~>K14|Uo|(!(2iknmlbR}-v2mt#L^d2M_2791;vjv
z@f_2Ycm(Ayl*Zmn+%U!Xn>5vs6k>RS7GqOZ1e+zX@++hw!=jdc07yg)mcvkrq%&>@
zBEq*#f~(BGbJ^T<h*i%`gS3YB%zuHSx!Y9F$4?VWPidFy`-oI4p<u=NxJ`6~&HGPq
z^s1X3levPG6VExBgv!Q|c&40&c5KAlxqY4}{07H&994xxKprK-ik}Gu3`-O2lK4t4
zqgd1MG>192RK%t|i^c7FV>Y@NLU80j^~m7cm55X~>yK>Ax&|HF;tk>WDZ6oM4<Y6(
z;wqKK9=NIgWm5b}Y1tJO8o%jVDH(z<-?jj3`>Ae=M#pWxn+_;0?tq)r_faF?J$Ama
zb41EE$jdQ)%A`60w#Ye7A<c%wzzxCNw0@rmGbiZysZMj+Pg)v_s%M{h#&E69D-AbN
zIj1aB;Z<K<V&me6fstdsArxb!#oy7x3uJhs!qG+%=csTZ{FS#%xxDfIfm2yo>{&mU
z^f565)%ew^YkiN(7kdC;5ca+F44vdAiC0dY2$a&rj5ao;(uJ1Qj3#D`(n78+hZB8A
z7%!*ifSt~e=miHvUK8|4-d~~~Xdh0uuR^H$ZC3ggTT)1ms;4*w&UGQN%Zr8vc99=^
zht5kj=h0@E3Y9u=kfv6$P2X1w?T`0WW|TaJ*%yYCdI0xAqNpv^He-fescDdVfYFI!
zM}%@R%mi9fv9MK?VpS(iHTI~cSS2pxq0JY)sLCn{!-9<;bI$hWstg8eM1wRAOa|M_
zPM>ll^1GA9ZjB><)po7q9v+(-HoHS>s8%E_7inp0vCS#C;Fx&R1x2$hP`WwBw51PZ
znGuW8!2HMilf%A{tnrAPQtWM%;MjJg`#mxVs(I?3E`44xN#GVQ+&b<;wPEr1(FXoz
zK5m4H`Z)*1hZe=V`EV{Q@p@C3ierm#@OzWj_g&N-aN0#EDj|krx!lkPA-2(o0iDh`
z92rdWErHIRpuR6!H8O=bL$Z34H+8mel6;OoXeQ)fzVIcc7$SeFmPSWV???z$&yE0t
zy1D@A&@6aIQD)Q%G5~*y?*u&JPQ<5<ZedsC?lK5$#}sEXEP+c=9Ew(0sI`WH7qXSv
zIhD;^*ModS>v=4J5v`w870Keao1W57pU#MQ%hQc@nU=rHI{eafel+x_77d<vM+F{P
zaCeW#PimL|=M*8y9{w&=r+>!$4vbTVN_S8#qoxoyIxzUbAr9Y=Gnrrr6!M5H>HEud
zXYKk<Dvb|~+TM#Wa5rV>g{uV}vMD2!q=1ms&v3M4;Vgw==f{@(^_K^k7q+q$lqJa{
zi(co2#@YbF6|Z_h^X0O!Q_j(YEL;M;fC+;QUKM~9e{7~=fOL1H!M4*rD}{nKT~M13
zc->rif^t6XkRgJsid}<u(c2CYuwAKqgE@XPO^;ximrs{lR@;nzpQ~O@lb@W`<sMQ>
zarw|ndd`fVeY0U`pr=_sB$#dyb3o;=L94TRnL*FVi0Ac-c#kZi<jC7kB>LGOiwHxl
zv=|-^CWw=dT=RwOUy>r5yiuUvAsV<zps*iFqH%ul6M*eSks3KhVGAwEruR$WQRd1t
z3eHvI=rSgoJoo^cME)uvQ2db(v4XN=0zfQkz{tl%9G%f96{ee^Q{A3XGQ*B=wT`y;
zXgMCQTW8V)L7-l4Fw|b?&wd2}M$`)7-jhYgW?Mi0UJ-aKs&>3SHQriBU)eBb1LMCS
zu{;;j+n6%e1QNw_-LyjRY~hg{rmWwU4r{KzQXj_1T?*j|E{Py)`MZAwBnu%D67Xl4
z)9pClpWrnbuNkeB(??d8pY!+7W44rlpD-g0kwX4tM~4$vq?CLVcBkpc<b1Xr7Usl~
zn6PkB+aGWAxG^w4nST6LC#-c&VyB;OGh6-dY)D+Tw^ZTGaXC!j5rtn$zM{^|Fs`lv
z_;p=wvi58A$7Qtu?6aAI&j|x?+pc;Trty?=ruZWZJKLk4a$(%FHAqoK^AXkj9DwuG
zUnNLh2g1&idzC$uy$ng5nFDUY>LRxY^?XA7mwT@D@hGfJGKx96uWMCSzvpUNb})`$
zk)|j=*cDC(KI)co1mF)AMF!yJAFGgs<9(1t{eiYbzt&}HtHVYMjpT@&<GT2P2)n>i
zZ9G@08u3&(7J38y-IJz<(XlfOTEa}}4SX)UHIGJTp;~wtwFj2D64d$%HQ$&Z=r6}C
z1naqp+NJHDo~3I37}S`V>y@B1Uj|#&ret+NiRAZeNk_3lEkW7{^ynhei=of1C<FF;
zp=(V3H|s}|2`hKG<Tz2lUnd$d=WZIzjqX=tbv*q+yOIMO!4KgQFnpFc-4g<zFL|xV
z5xtEdS|iN4o*>FeN<~mRc^Rpih)<KKAl*ixSjnLqJ%i56;jnC@50(SF<6;`KO<?yX
zA-d=^F5lwFXGM7n$;2P;)(REgH|Z=pW~fAjRl9u7->I|J&@*t3I{gEQ$h71KOM-`G
zbP$re`61dxqOtj?lK349`-u8Wd;Y~Vy`Dj=)AW(!Q>aR0EkWR@r8J$0P)ik%eU%J~
z_7fb4s5P=X6lH}h8m~(KS)#+Tszac(dg7@KERtQCFcy-NGGp+lKaBGSl_Yft^}7@b
zWZnK9fr}A8uZtyF7NcW%lZzH!*UDV>UrRO$u@UulzYZsDb`PX8%9Ey>hG_wuC=uSO
zXV^3f=ep^AU+yNY3WQe{RvV{I6t;2q6Z+<zZa<N0f#*FFo`kK8ETPS5I-f8;A&o39
zRH*`m|M2mPs>pH%E=EkHO7+7b5i>g)6}8#4qXEGwg{rzVaRLYF>vf86h?KWnZJ{`K
z-2Sc$ZJWY_^Xft4+RpvAFS}=F_9y_)w(Uu-S!`z-s5WzCavCq%Tst*i=6RdYaGo%o
zn(k^$biMBy=2x*%GsxDtb_CQ(DAWH)r{L6W#xF4;Rybilg$p-w$#S*omc4HmElo^t
z($~B$q>V8S#DPGa@RN#DO9JkLOW7fjZ&~8?T4NkJQU#xe^oW<PGIb+HfvTV+>p$!&
zU#{n|a~Zr7xf|*QIaPP$r9!$MSv8Y-71f9krmy*wlt<@YiYjgb$x8ab8{@-;+JLmU
zpfPvCVOuHRZ*8SMXF;+4NKrK6?|Prb3eMu={`ho*SJVH(X-V1=QOK;payyf&i~lsR
zoZ~!svJl>;?ASNq4kei88Xo360g^J}sr#i7<OdV*WM%-H)yfWN7|1O>A;UP*L`u55
z)--d2zJ24i8g(F6J#Sl_!4Al!BXZ$fs*U;(bz<H)Q(tGdPAb`$lHpgs)jbL9r(!Z5
zb9#<#UTd@Q5v}i5L?cYvb=feN*2hgIRV$1+yicWaYZW%r$D^^6E$r>saves(ld+Px
z8(E=bi{LbcxnEZKDLP8~^cVY&|1g8!dd^!rmEmxT%t}Mi#!uXI{-Wk|r8Z+`c)@z&
zi!^s8lb7`I6sD-~r>*7ruyX-t!Adye-MFGddeaqr`N|NfUrs#9@TAFV!($cdIXR_0
ze?1B3$wbi|Homj|^TUw(>q3qgbaflQ%1x`{12y3NEEAqV+4+N4v#~aYA>;m;_VvIB
zml`U4t9l;UQPaGxo8D`WW3}3BMvKlY6sRhVy52mh%jhTpm|)JtgwpA$VD`3#*@Y-q
z*vdJ<H?c^J-j$VeXhSJND9Pt1x>}=(a04dgF(KGv>+}%dLzro)82~dwia{LO`ZZHd
z9oed>u=3Vj+4zdC11TBX(?e2=&R12E*8(|#sWZ7`o6w&ZHtFA`oVUW0mW}m+ht}(N
zTI5e`54d5RIX;6#fj#SyJ>}=oe;j2e!Xb)y8Q62<knsUSnLw0+Y?o*>4zS<Zg=8s?
zDqyhjv?w$g__?0hghdABi^382ORg>-B7H9j8oLQY2&VL-1m}z>gg#!B#aJoAY71X|
z{qYR#1Wg%@g2PRVi~`CO9t%(THQlv39OD58yAht|T~sqxcJ_VUZ{Qre&ne<@gb_A?
z*8J^xK9b7Mfgaf0M^ImuXIlK-O`aF4)sqG(f8yCV1Ox&X?{h!0nG+>t&V&xW{<O@Z
z{b8(`Vmq3sJIlm^I%%jw*8Z;?1h;~eoN~L>+o)Vjsa&UW5Iq*tIv_$kqwY`u@$*eE
zgBXg^msZGd2s%l9tG3z>NQZnJ9V>UzV6mCp*|sx}a2=R25W}>Md{sBU>AcSO-Qa;>
zP9SH>W+OG+{Il316X`A^+-ES?slc8UpL6Um`{Lz=v<Yh;bl(5()3_mw>^L{aOMKTi
zpyXzQxj!T`pG+>MX=Ra<SmIfP@-tT+ie}@hM_>Pr7#HSYSqDxSqAu~+pBTE5FsUvS
zM7F_Xz!AF&W<u4tY2v7=zT{UM92nrV1Q{KloHOv_TdE`cC*<G$mjh_|(d`nFpL>uY
zQv*g$!_Y!&>%DbD5V4GWa22Ov^5=RwyJL<oCMb+@fF>js`Sc_*JOS!Su%K^nthDwX
z%k*bY+1e2<(fY!Xo`l6y@E_rS5%~9s0oZFl37ik1JHkkE7(bTC5LyQ4k~nY53Gv#@
zE#$q&r-M_IU2zDhod@dSz;3P>JI)f6uEMibx6=Ig9}_TTUH%m>G0;L(iWwG0h^<S{
zaosG`IH+rX)Q92wzxT;`Q#f*{Yu%DBY5$2nQZxg@RaY|Us3%fAg>%Udqz4d3uqOXw
z%7jGHCweF2=4bCRUyR?Tv&dXeTsTt)v3m|Zcjjr7Qe~rJPwaWpl4>J{^w@d%?1Z35
z4AYY+3}<m@^V0GgHgRh4!ygGTnpKJV_bP%^_MhqZT9VGRxj6;X@%J$YY|9WuHKmq<
zc~}_!G^NYM*KQky6hMefM!vqqG9O5Zfs<$5I69mc;ng#WgfNWx#6j6T(}LCX0t>8X
zX75W{?1Z1^Tqzl1BY7-sd=mBIO1bQ?#Qpk-hT!&oECk*~F{%wJ`=qVYG}?{w7$_nE
zr3)2M&m%~rvCzt`r_^Mc7s*UE)ItZ1(29dcZ|RY|voI<ND@^GQyfM$Ni~=4=VUDu@
z><ud^v3`!<4j*IttaN@`jO_qOd{ii!3l`*zvq6VL<&?E>z>*}SKxRf(Ss0y^?OGVf
zui1z6;IVUizLNpY(B7z!nZjzbSZ)q;NG?xQyX-v#iDZ|!8!ls|viYDTZ+b!xco<S-
zlthlhv~V=@uowC~v)a^TeTlbJNv=Z6gQSy33+E2%a^~71T@Li%bVs?hBQ!Dzf0Z&c
zLT_4~`$QT8C%K9jL5^p-pU17A5IA&JXX$;`of0<^jK(jiW<_dURm7uF86cLPh;?U2
z&`^!LL9It0p-Ef6MqW>;I)$B4E0xZp5{3J`WLR6n^KLyHKE01+$T>xZEI(C&gcIBw
z0?xOdvZ4%@&@JocD637_ZWgcAa3wP8`HE=E5#zGFE?quJ<drIH+!x^~Ewa!`x_66>
zH7Q*elM?8lAkNEgco=JLnZ{*G`<2%ofu*E*gvN`$5T^>0Zm9@t^#s#A@k32cGQJg^
zrWz_m<7z(7VlKfefRiN3tHtOWyo=Yg!c(=><6DtNKo*svfp?g+;kHEZsUccAi6ZJ&
z=Yp#W(}j=)@k&h86L7KSn)Uyplo8R6gvP~vW7{R4(p1MwPQU-FaU|9{UX>xOUbdZ{
zz&<6n@hSVE0xw}-Y$b$u!UO3!SPm7!OSO_kz#EqcI~u}fA+y#h{aN6|cA%NaL{#>a
zahJ)O>6wP0m_!#-S3!A$FJ`bLKkz4N`$W4DQDsnK@?VX_KL<3dofmZawh(kQm{W9K
zBpt2oy4;nCvN>OR9x$)ZjE`r!b(-P$JQhTSE*O2#*qQ&0Q*g?|tW|c}OM$J_R%2yp
z3^k+o+vQEp_?a+kdTsmt`Whr(N+?_}tSK~78MXFf5)t>j5#9)$CqAF1e$R>^-m~Uv
zR&kex`OWGb?Oo?$ca0yKYqG*h5F0g$Mb+PL#Ggq#E>of47riD!&p3-nozY3^@z?tP
zm|?YHok$ehZ4%R<cAH|%hqw{KQ$jmc3tmRtF(R~1FLOpjL}nl9Y;{V^r9CHGr-W5)
zSP*vneDf!kfFWYFm&X;@zwd-mj<e1A^DO;t-9LrZEAu&w%M2@k8swy%($41jWJf!d
zmu}`GnzlA>rguLhWj?gjaN-x6;%gE9fpjq0%$W?$A?ro};;h+6mA&@+w2C)V{t*H-
z<I7al%+p)&p0rQ}fQ;jMG=0<`RKF$`4^h3yYI7<db}r>O$j0Xc5X02het?Xcisgh+
ze5kS_hvl%1WD^4M!$pb`+~#1m>;raA2!m>blDqPsWYJfaaPTC5S5tFFMJ)J+HAiye
zCg7#b#2YGp2!hlIvBm^K%Jukn(px=YC&@ll`bltGyQ{Wm(O&0P@*^DP<Jhyscczuj
zUts^@B~?r--ZebT+di#6x=iI875)Am{NeKt3g(aLlg3nLzogb<BX&X`Y8t*(8S^j=
z?hQ1G`&<^`m4JhcyB_cUY>x}>+=_%K6wn8xWXrV}EWWNcJgoAVG|RV!M60IAzmGUX
zs-i?N5Ybl0ubHDW5?sY)z$#0fuH(Jd-9w76GJ1=4fEkSm>r=wUDNLj8LeS0dc&?pI
z!~-~R4H$uAZ(DRA_YHy$#xPCBe&SN#cT;!S9{dpyIa+3apAszFK5eTo%Jw6&{u>2V
z#zOMIg!_r^m##8``YDh+WOYWG`J)%Rag%?RcM%GJFg$x#UDWe%7{fd<2s_&)5LLHU
zp^28qY9Sx_+OH@2O;`Rzrqrg7Y4<beS%L3WV{1m{hor|1b3N0}6RYUNC7>W?-dR1`
zdI029xZBzh4m2loEi^iv^Q@<D#s1;b2)*0-v@@!Qo@)gVGK+V^J)WR3b{|GC?u@TY
zKjw<Jofge1>5Q8~59JZA3?^Z#f1_>}kB4(HZ6Miy8F5f2X_lJXl2IerHBxR>a5dV6
z_lNnn%!j(*`FeLVS-jfVS^u^vD^il@@T%A^XNqA)#s0b`tBfS=J+FQS@64qfH~(<=
zvv_!D1wl2kWhvj<T3BwR`ePUi4U;0NT+we^DsCi?SXX2vYU60o!Ur_=z1japewNfE
zmBhq3_>h5Jzd%ojBnQ%Wv*ra7X|3XC*I#6oM~8!e?_BG)rM)IX8m)rnq^4cuW&_qv
z;^OqU(zdrDdmaiGi#Wv{%fleVHX``)(PTUTp;7F^>@HG>ik*n-!DyCb6Eg`yd2&`j
zam%fDa`pm?qbUN(K&<(JuO@s85hkJrku<18RxP#)Kh;j$Sk7WBZaz%~Egem6M2!UH
z3xT@Lx^8f)?P@lg^Jn_Xd1h4|YC4Ih=bkpEIUeI_vV9~jtY}mt^8p1&2tEmQx>AAS
z{gHBNB;yIIqPL;pS&z34q0#D`JX1T_a|+H9b=JUw=cqIGw0^k1Bb!32#M1V)K0j5y
zBwQJ;sJstae4QdxWj~hEx>fr0;nB)PZh%T@x;b`dNkXn++6-0Qr#}=pfP9~zD@*2y
zDne;}i8^{l5Zz&70{shOaE`Es^iXCJ2i}5exZR9+;G*}t3sQ*%y*%An@7`&ign@s^
z-v%Y*u#t&ej_(`dfn@Ci$`_R~^51k(__dCJXEOIV@%z9kB<^K3cW=1|P=vg{v*1gJ
zkPiX|3ewORvCP3eh_k$KH*^IY&Ojz`4V6l7FV4d{MnmIuD@;Z<JHeSld7~_D2b1H)
z00Snpi!THYCH;E=KR#^?r{kIdhMZbBk@`ibLM%f1&WbMQgBe^)XhR6$sXFfrZY%J2
z^asj`?V5>9e?hdx3qajlYVJ9Mnr0k_97>mhhVlV6nRY-($o+1g8E#Q;`2utez6?P@
z5ywlP809&-!}-i)9Gb+Swll(rwOt0K{b75XA=Cue7=Lf~s$$0wT1|j%YoluW;8GsK
zD6JwyjAWEeS1?|Pm!DgaqLd@@Y8*z|$nZyFWoqO>D;7qUxCZZ40@lB892-h|H!`Q(
z%NHhJs$^~Po10>pX8dhY5*0}Od%Jv_2@~K)I_eKY{xZh^R27_=+`m{o&{+;=1{r3!
z)$ZCvVX74lr0M$c8KK^jLP5d52RcgeJ0u$OVC}q%G{O=zFMK&1az6{d`W3BiSJ+kl
zAQGlXMklu!8(nS^KFad>h--lyz}De{{c+EgiN(XYBw_0FFoh)>wD*zDCDCWVXTf(H
z<8*#C_m)Gt-LW4=#Kz?&^t<^n51f6ejd+Ynb`tbXMlvxOjKFq<h73RI(4Tyks5UJd
z;>tG#$Lf`yqaT0v<gF*nn0}z_gEwYJAQOh=_MnQBg#GZ%X%X(C;iKxj90zWgFVGmg
zvW^xS&~7OU#-M3$^^Y86#9WAr@Q&U*A0z!+ntNp42}eaxAM8CW)<m$jr4j-KG}XD-
z)Wx?KS3oxCDhPFy3WlD=R-g$L!Fy9WwY7a7vExlqa92vsn-R3L#IOU5ED3Ff=@0PK
z*dg<}bhw2Jm2%$0vX9(O^@dn%Ki_41&h@$d7aqu_F+K%v(cHlFx7a(v_h<+jjwq4Y
zq-2LtO+i1JF@Vxgwo(^stOOdQH6T|24la3_ey27{+)OomS>B*7HG-a^X-=fDd3qf7
z2TA1*Cev4de|T7T$ZO-4LKh_RYSlOsilhC)(wa@ZilM7;fWM&ws4#IBDW-nQfKStD
z^&;%~**PT<{@;reVl>#z{)PIGl07mk+Kahwc8U$G$pD_F@Q8GwJl@}a0~aDhVi_g#
z5JNtwCnNVu{+cUhh()a^-n*b{LHNU{Nkq4+o?{7${vH<Uc1%N*FZX9BW8t`z7>k!E
znTFP#w!d3p_E^030kW}A%`@M$j~aVJ)`x_McEil?)l3yN6{t@RtF^CMySe%Nf~$at
z4DGbgAW-@fWvz}Y5O5H-SZ(fotqsGG0j%QYDVXo|eG2(UGGKe1YqF{50JSAyI1T4Q
zm?J@Le&EEESvIyBa{m6$x6*Y)a|}Q2)PY{2MTv?K?x~BNbGs?ya}Nv~BBh=HbK4YM
zz73_u90(u55G9&asctL)HKjMHB@iH<4FK~%mb6jR?~(O^_N{8)j%2ID$B?Q~2^t83
zP#S{G>tZSII&b8FGNRU~lKaot8)jgRgX1J&-7Ud`Z~VMAl1!#%W|#ug*Jls(>^Qt(
z)K!?16#^FUq>ZzVastu(<P%dU`3Kqb@)i&r#6RKbUv{iBpw{7RSk(Bo|0m7}G56jF
zI7q~TpcNuUf>gjvYYG%4r4!w5;$|A{h*hKrDQ1b1pvH@x*PS3(t-e<yRc;NDCY8IR
zVhxx<%u&E*@n7E}BR>7qpac}|lATrhbdh#RRI4J3o`beC9BOF@HjpnSV?{lcGBL_7
zmTY5v;(F=h7X_Zhjl@2@p~4z+kbZthIUb%LZ=|ba&>xhsC6zyxeZvk6EOj{w4iYV-
zu!-`zH$<#0pQ);1;a7D0`uTv%;(oKbMM2LyZVh~?<sSMkN;81rp-!h(`=S9NS3^UE
z_84ZbMzbCVVAt1c<9zUr`amm}(e#%~)@l|xi`wG%)gsN+qw1nK+-_k3rdAj9lJWU-
z_7(MF0fU-CFkcDVkhg!&P%}j;U=|<>`D;;{B183MEgFiS1COSkc9&d>R72!NY>4Ic
z+tBl9G~v=u9$!qQhXPwY-PkN@npc_vJ7JfI7TWLLz%|IPL~Izwsr&*qmA|?TrM$*l
zpipK!6+wt(-AAgkCNeqeVg%v<*GNzlAn?&4tQnDbA(|e*kc@~>N}`Xj2RLUB0s7s!
z;baF8zKhpA5{y`^jLyVPNC5$CWFHd`nAF6;MP8I?)3tfpM3XTn9NjIU#55xLW^E)t
z`&<a4ZQ$v9D(XybM%UkiDa}bxi4tJoF-DddB0~-ZWPuehOC_ryMf9YanGwN+mVimB
zv4$(b@^LK77Qm+GVTTqGD}Glj3Rf{8Zaf>NdE@y8Q<gc+48NKSY6?62<IceNf2}(o
z_q^N+y~n_mfLC$Cs_Y2-t;Y1vaF1jc1&5oZcNeo!W`73Y`qJ`Q?O15XPPqAEqnPNB
z>3JA3rdL2KDzkcisGnIciaRHrb7RHdOvS(B%_*S6>(<V?VPt52AMmnfoHQFf;wVvf
zf|5ZhIXiN}(00^&lSby{hVejM@QW$&p#54{>;nj|^pnc)36a)__oIawWwF=>5!shW
zi6sz|{pu>}2J^cVD}n=|UDaTKFlH}m5=4;R?LwYKv8&Bn6lK@)AL`B?76WKP8#a&;
zM6P!aIG%(vS{`;Z#+!~FfrkAr8E-}W`p~Es{Iv{`kJ`>37Ivx(^>5refZDY8z^53+
z+xY1`4@(2rwe2pYTpe*d+~$<!sA|wLUyz*$SwuA<Rj`V1HDn7^1xk6sdWI-rKogLs
zVK5ab-!eG4MW}mcRl?b1JYKDUX#NiE6UD#eNOBxPKg1g)a7p*R;9$BFzu+r1ppqA$
z)ad4uT1R3~m8s4xumAzbjopV0X6Ez&=Vi7HyArd!tYmJybz2&l9N=|NP7UMI{3kGQ
zU>UF^vWSQKkOloLXeLm>aD)a4G(lK4{X#4kfi>$15^_9-zNCh1!=#p>z+TJF-}xN=
zq&M`hFi5NgY~^*Tq;>Cwer(RE(97UZBC<vU`Fmj%3bqRhSb;Lc5}I#z_v(U>hQ7%#
z<~}BUtVWrx2L=5Vjo_Gz9e6xhCe{GfEm8BX2xdNi2z<+>4<?u#!2d70XLU8BH(4PF
z*O(#?6i7!3j$l*UZ0s-wV5E;(P#lC_()}2a9p1_*r@|l0nFi4tP33&#ilG+Z26Dnc
zbb2~S3q(e-Wd@eZBAHCbG$AxfOdzca*NbzYv@%$fKkmr&*=BvpPs-W>|Kt5!h&O3h
zn6KbHTO&omyNDUpnyL<1j7TwdM95izI0y_sQaAF@csUK3bnX;L*H(uzXOPKN*Y$GD
zJz<n2@e+saUA$OzDrjnh!pPmZyuiY7#XKYkKOY7O%z9nvum!~Nk}yH&0!W8ZPZijb
z%-=0H3R`FiIQ+SzA;(j;_ScpAIBzbGgeNd{7U_Vf9D;mtCgSP6+L>@&2Wg)ntqc#J
z+bQt-ddg3yEaDCHGilY83^S?B9Ss0ZqR1N)+>@+8jIkWaSJ3=tL2Kb>{m0S@F8S)@
zswhffv+Kv%uV4flSS$}IM<YNiJ3g=k9be@J_?W(~kH{^veP<uu!swlB>>eg_6g2&S
zhG@cT(nP^BO`o&uK^U9=J%uDpuoZgpt8pHgrCIG6s7=jUBAHHGjtH>VesnQAf@Y77
zq97UdA}?^jR&$Fuh=}=cXzpTenHEfFzEgmBs}=pr-F;DIT6oJG8@1B{DeT~60Kfn?
zzeiFNS7{D@z;hgi$fcp?{hZOOghnZ+lYsHdoFI#`ctz$!X6KV4XKkV}iMVe40+m~a
z;=^dh60NvEBIjm|;I=c;Fp+h*WJp2I0wjbFV__s!5e2Zs51cX((@W)GMZxIX9GEoN
z?-oSXtOr;YAOsF$8R~2#q{L?##bg3pzyt@&0AOm_G|ZU(UMc08r^!Qnk_qke4_1K}
zEkvg@ccNrc!1}R*lFNgX0=N;Y%@ct_^$=l8sgK5espBHasu;?H#!ltcWMQ?w@SvS^
z_!mltgRm~;Kp}xP3K_cBK=Ohje=&ta%?pNC*Ja7Zex^cI2g(G3pQP0{z?2TDn)Ufc
zWWBJdp+x5t=3<H%l{90|jo-%<S*@cc!h*LaJeX9DaEe9OT{dq`A|`!NF32&+c!&fa
zVy+eH%CYJ(RTLpaf;g*>(+%we1WTB(O8R}+S803p$%p*(FI=aDSdpx=skFmBkL`}S
z0TrS|J<Nw7E}c}*57iI=5>4>`;Ci43(QvGRAYx=z%GPRm9821AfR;-aH09{Z16x+0
z99hjXPubC?TF~T8B=9<4-T>{vcjjlMA%7PJW5fO@2t~^#cC*O6s-VjXSOV>)1xlo$
z`V8(5E3HHl`uL>nXh*q*6O+&&YrBvWD7^$By^kXG^MgI<(u~G1!8NlX8ym#nvtnK`
zR!=S0hk(?a`%F5UFgkxmTbQ_!-pdmPSn9yT#Vaff6+D!|&P%Y-!-d1};`?ymnp+S?
zg&CLRL^A_4Wra;uq*RA1m3-s8J%OtmB)i8re{h0o9Hc7S>&HqQOnf+~=yJHlEPbA&
TD5GihU(zEu$Y1AflX?~a>=Z#<

diff --git a/static/fonts/roboto-v18-latin-700italic.svg b/static/fonts/roboto-v18-latin-700italic.svg
deleted file mode 100644
index 050bee0e4a..0000000000
--- a/static/fonts/roboto-v18-latin-700italic.svg
+++ /dev/null
@@ -1,325 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1167" ><font-face
-    font-family="Roboto"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="505" />
-<glyph unicode="!" horiz-adv-x="550" d="M369 447H134L276 1456H577L369 447ZM41 131Q39 197 83 242T195 290Q259 292 306 251T355 142Q357 76 313 30T200 -18Q130 -18 86 26T41 131Z" />
-<glyph unicode="&quot;" horiz-adv-x="647" d="M381 1382L282 987H121L208 1536H406L381 1382ZM697 1382L598 987H438L524 1536H721L697 1382Z" />
-<glyph unicode="#" horiz-adv-x="1193" d="M611 410H432L290 0H104L246 410H28L58 582H305L402 866H180L211 1040H462L606 1456H790L647 1040H827L970 1456H1156L1013 1040H1222L1192 866H953L855 582H1069L1039 410H796L655 0H469L611 410ZM490 582H669L767 866H587L490
-582Z" />
-<glyph unicode="$" horiz-adv-x="1150" d="M737 390Q747 460 714 511T579 608T409 699Q204 837 219 1062Q230 1234 348 1343T657 1473L698 1687H855L813 1467Q965 1435 1044 1315T1119 1004L836 1005Q848 1241 697 1244Q618 1246 564 1196T499 1063Q490 999 521
-950T642 858T793 778Q1032 634 1016 392Q1005 218 888 111T576 -16L537 -215H381L420 -15Q244 11 152 136T65 458L347 457Q342 336 386 275T520 212Q605 210 665 259T737 390Z" />
-<glyph unicode="%" horiz-adv-x="1477" d="M525 1478Q659 1474 736 1389T806 1176L800 1099Q786 962 692 879T465 800Q335 802 257 885T184 1099L189 1166Q200 1308 292 1394T525 1478ZM373 1095Q368 1039 391 1003T466 965T556 999T608 1099L618 1177Q625 1236
-601 1272T526 1311Q471 1313 432 1274T383 1176L373 1095ZM723 357Q735 493 829 576T1059 658Q1192 654 1270 570T1340 357L1335 290Q1324 145 1230 60T999 -21Q871 -19 791 64T718 279L723 357ZM904 277Q899 222 925 185T999 145Q1057 143 1094 179T1142 279L1152
-359Q1159 418 1134 453T1060 491Q1006 493 967 457T915 357L904 277ZM386 111L247 196L1125 1320L1262 1237L386 111Z" />
-<glyph unicode="&amp;" horiz-adv-x="1314" d="M41 385Q51 568 258 710L356 773L316 863Q264 989 271 1086Q279 1201 336 1291T488 1430T695 1476Q842 1472 936 1379T1024 1145Q1014 956 797 813L683 738L871 456Q955 576 972 714H1211Q1192 432 1018 249L1186
-0H884L829 84Q649 -23 458 -19Q268 -17 149 95T41 385ZM480 213Q567 210 689 272L475 602L451 586Q345 507 330 399Q319 316 362 266T480 213ZM518 1090Q514 1066 517 1043Q524 990 566 909L648 959Q772 1034 781 1128Q787 1178 759 1211T681 1244Q619 1246 573
-1201T518 1090Z" />
-<glyph unicode="&apos;" horiz-adv-x="331" d="M389 1373L301 985H120L207 1536H414L389 1373Z" />
-<glyph unicode="(" horiz-adv-x="707" d="M122 588Q170 945 335 1226T751 1619L799 1458Q457 1197 366 619Q335 423 333 267Q328 -144 521 -304L458 -455Q242 -335 156 -40Q99 158 105 384Q107 479 118 564L122 588Z" />
-<glyph unicode=")" horiz-adv-x="710" d="M-56 -458L-104 -300Q239 -35 329 548Q358 735 360 893Q365 1304 174 1465L237 1616Q355 1552 439 1430T564 1134T603 778Q597 500 507 238T272 -203T-56 -458Z" />
-<glyph unicode="*" horiz-adv-x="910" d="M392 966L100 1058L185 1228L472 1100L515 1456H707L627 1109L934 1227L960 1034L632 945L793 673L632 569L506 862L284 584L135 703L392 966Z" />
-<glyph unicode="+" horiz-adv-x="1094" d="M712 815H1062L1016 554H667L596 146H327L398 554H46L92 815H443L511 1206H780L712 815Z" />
-<glyph unicode="," horiz-adv-x="495" d="M31 -365L-118 -284L-45 -167Q19 -60 37 34L74 246H312L283 62Q242 -197 31 -365Z" />
-<glyph unicode="-" horiz-adv-x="780" d="M638 507H90L130 740H679L638 507Z" />
-<glyph unicode="." horiz-adv-x="587" d="M200 298Q267 300 314 257T362 147Q364 81 318 35T205 -12Q138 -14 92 28T44 137T87 250T200 298Z" />
-<glyph unicode="/" horiz-adv-x="752" d="M77 -125H-145L649 1456H872L77 -125Z" />
-<glyph unicode="0" horiz-adv-x="1150" d="M485 -20Q296 -16 193 108T87 454Q86 528 95 602L136 875Q185 1173 329 1327T698 1476Q887 1472 990 1349T1097 1004Q1098 929 1089 855L1047 584Q997 284 855 130T485 -20ZM824 1038Q824 1237 684 1244Q482 1253 427
-936L377 598Q361 492 361 422Q356 219 500 212Q703 199 758 529L811 885Q824 972 824 1038Z" />
-<glyph unicode="1" horiz-adv-x="1150" d="M674 0H392L584 1108L230 1001L274 1248L882 1458L919 1459L674 0Z" />
-<glyph unicode="2" horiz-adv-x="1150" d="M971 0H1L34 210L551 695Q710 844 762 937T801 1119Q780 1243 658 1246Q562 1248 498 1179T419 998L137 997Q145 1133 218 1244T412 1416T675 1477Q878 1473 991 1363T1091 1070Q1075 864 848 640L704 503L406 235L1008
-233L971 0Z" />
-<glyph unicode="3" horiz-adv-x="1150" d="M422 856L557 855Q660 855 729 912T810 1065Q820 1146 779 1194T656 1245T516 1201T444 1080L162 1078Q171 1254 313 1366T660 1477Q866 1473 986 1362T1095 1068Q1081 860 830 742Q928 695 973 609T1013 416Q1006 284
-932 184T734 31T466 -20Q271 -18 148 97T27 400H307Q305 319 352 268T485 214Q583 212 653 269T735 420Q748 520 700 573T552 629L386 630L422 856Z" />
-<glyph unicode="4" horiz-adv-x="1150" d="M918 548H1078L1037 315H877L822 0H540L595 315H17L37 512L780 1456H1075L918 548ZM330 550L636 548L735 1066L709 1030L330 550Z" />
-<glyph unicode="5" horiz-adv-x="1150" d="M154 720L350 1456H1146L1108 1215H549L453 900Q542 956 663 956Q850 956 952 824T1039 474Q1027 330 955 215T764 38T504 -21Q381 -20 281 35T124 188T67 406H344Q348 317 393 267T515 214Q615 211 679 287T757 491Q769
-605 723 671T581 739Q475 741 385 661L154 720Z" />
-<glyph unicode="6" horiz-adv-x="1150" d="M991 1472L969 1233L914 1232Q571 1214 419 854Q544 977 712 973Q830 971 911 907T1031 732T1058 487Q1046 344 973 226T780 42T523 -21Q380 -17 278 59T128 269T97 559L108 649Q155 1025 383 1248T953 1472H991ZM616
-743Q543 745 485 707T389 610L376 520Q371 475 372 422Q374 328 415 271T531 213Q605 210 666 261T756 398T775 573Q766 651 725 696T616 743Z" />
-<glyph unicode="7" horiz-adv-x="1150" d="M1164 1279L424 0H113L851 1222H155L192 1456H1191L1164 1279Z" />
-<glyph unicode="8" horiz-adv-x="1150" d="M1104 1077Q1090 864 854 744Q939 685 981 598T1016 408Q1005 212 857 94T491 -20Q292 -18 172 94T62 390Q76 632 347 756Q200 873 210 1061Q217 1185 283 1281T460 1428T704 1476Q893 1472 1004 1364T1104 1077ZM738
-428Q749 514 707 571T583 630Q492 632 427 571T348 411Q337 325 378 270T504 212Q596 210 660 270T738 428ZM819 1063Q828 1145 793 1193T689 1244Q610 1246 555 1192T489 1047Q480 966 513 915T618 861Q696 859 752 915T819 1063Z" />
-<glyph unicode="9" horiz-adv-x="1150" d="M763 583Q640 469 500 471Q380 472 296 535T172 710T143 954Q157 1115 245 1245T474 1437Q567 1478 678 1476Q858 1472 965 1350T1086 1023Q1090 952 1083 882L1072 796Q1023 415 801 200T230 -15H209L231 227H246Q443
-224 570 312T763 583ZM578 691Q698 687 790 814L807 935Q812 977 812 1030Q810 1126 772 1184T662 1244Q590 1245 533 1193T446 1049T424 868Q431 788 471 740T578 691Z" />
-<glyph unicode=":" horiz-adv-x="571" d="M455 298Q522 300 569 257T617 147Q619 81 573 35T460 -12Q393 -14 347 28T299 137T342 250T455 298ZM340 1117Q407 1119 454 1076T502 966Q504 900 458 854T345 807Q278 805 232 847T184 956T227 1069T340 1117Z" />
-<glyph unicode=";" horiz-adv-x="531" d="M323 1117Q390 1119 437 1076T485 966Q487 900 441 854T328 807Q261 805 215 847T167 956T210 1069T323 1117ZM52 -365L-97 -284L-24 -167Q40 -60 58 34L95 246H333L304 62Q263 -197 52 -365Z" />
-<glyph unicode="&lt;" horiz-adv-x="1021" d="M337 612L856 411L810 144L36 509L77 745L978 1110L926 817L337 612Z" />
-<glyph unicode="=" horiz-adv-x="1147" d="M1025 746H156L198 982H1067L1025 746ZM950 313H81L123 549H992L950 313Z" />
-<glyph unicode="&gt;" horiz-adv-x="1036" d="M685 627L155 830L202 1095L985 730L944 495L33 129L85 421L685 627Z" />
-<glyph unicode="?" horiz-adv-x="998" d="M321 446Q330 576 374 665T512 830T638 941Q724 1036 713 1143Q703 1240 600 1243Q529 1245 480 1198T415 1070L132 1068Q145 1258 278 1369T614 1477Q803 1473 909 1369T1002 1092Q990 922 808 769L680 663Q588 578 568
-447L321 446ZM228 134Q226 201 271 247T384 295Q448 297 495 255T544 145Q546 82 502 35T388 -14Q321 -14 276 27T228 134Z" />
-<glyph unicode="@" horiz-adv-x="1788" d="M1194 -21Q1022 -16 976 122Q850 -22 708 -19Q588 -17 526 78T471 330Q477 485 554 648T748 902T1008 991Q1081 989 1145 966T1301 883L1167 301L1160 248Q1149 143 1234 138Q1360 133 1438 286T1533 663L1536 714Q1541
-875 1491 998T1333 1185T1068 1253Q904 1256 757 1184T493 970T311 647T237 277Q228 66 311 -76Q428 -274 708 -277Q869 -279 1046 -209L1074 -367Q945 -453 709 -453Q508 -451 371 -377T154 -178T54 111Q24 336 90 582T305 1023T650 1318T1065 1416Q1358 1411
-1527 1238T1710 765Q1716 596 1670 429T1534 147Q1398 -26 1194 -21ZM690 320Q679 160 780 157Q834 154 889 206T969 326L1096 804Q1065 815 1027 817Q901 822 817 709T696 378L690 320Z" />
-<glyph unicode="A" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543Z" />
-<glyph unicode="B" horiz-adv-x="1278" d="M21 0L274 1456L728 1455Q981 1454 1108 1352T1223 1065Q1209 844 968 742Q1055 712 1103 630T1144 435Q1130 229 983 115T580 0H21ZM425 634L356 241L587 240Q695 240 768 293T855 438Q869 528 831 578T701 633L425
-634ZM461 846L660 844Q771 846 841 896T926 1035Q951 1211 741 1212L525 1213L461 846Z" />
-<glyph unicode="C" horiz-adv-x="1310" d="M1208 486Q1191 335 1105 219T881 40T583 -20Q439 -17 332 46T164 230T94 508Q87 631 119 814T235 1139T434 1364Q596 1480 804 1476Q1030 1472 1162 1337T1308 960L1016 961Q1016 1099 961 1163T790 1231Q640 1236 544
-1124T414 797Q382 588 386 484Q391 352 445 290T596 224Q730 219 810 287T917 484L1208 486Z" />
-<glyph unicode="D" horiz-adv-x="1301" d="M21 0L274 1456L692 1455Q839 1452 956 1389T1147 1206T1235 938Q1243 851 1233 760L1226 707Q1182 387 975 194T471 0H21ZM525 1213L356 241L478 240Q680 240 802 388T943 835L945 867Q948 1032 882 1120T685 1212L525 1213Z" />
-<glyph unicode="E" horiz-adv-x="1127" d="M982 631H424L356 241H1012L970 0H21L274 1456H1221L1178 1213H525L464 866H1024L982 631Z" />
-<glyph unicode="F" horiz-adv-x="1098" d="M976 595H418L314 0H21L274 1456H1196L1153 1213H525L459 837H1019L976 595Z" />
-<glyph unicode="G" horiz-adv-x="1363" d="M1188 184Q1110 85 960 32T620 -19Q471 -18 358 46T180 232T106 508Q96 652 136 846T275 1187T512 1406T818 1476Q1046 1472 1175 1348T1322 991L1040 992Q1029 1114 975 1172T814 1234Q629 1240 523 1072T401 583Q391
-412 453 318T644 222Q793 218 898 293L947 544H681L720 765H1276L1188 184Z" />
-<glyph unicode="H" horiz-adv-x="1414" d="M1173 0H880L988 624H423L314 0H21L274 1456H567L464 866H1030L1132 1456H1425L1173 0Z" />
-<glyph unicode="I" horiz-adv-x="589" d="M333 0H40L292 1456H585L333 0Z" />
-<glyph unicode="J" horiz-adv-x="1120" d="M846 1456H1139L968 448Q950 310 876 201T686 34T431 -21Q225 -17 113 101T7 431L302 430Q287 224 447 221Q534 218 595 279T674 448L846 1456Z" />
-<glyph unicode="K" horiz-adv-x="1271" d="M576 581L384 403L314 0H21L274 1456H567L455 814L604 982L1042 1456H1424L795 794L1170 0H836L576 581Z" />
-<glyph unicode="L" horiz-adv-x="1086" d="M356 241H974L932 0H21L274 1456H567L356 241Z" />
-<glyph unicode="M" horiz-adv-x="1750" d="M650 1456L829 403L1372 1456H1762L1509 0H1215L1287 415L1429 1063L871 0H670L475 1100L381 383L314 0H21L274 1456H650Z" />
-<glyph unicode="N" horiz-adv-x="1413" d="M1172 0H888L483 971L314 0H21L274 1456H557L963 483L1132 1456H1424L1172 0Z" />
-<glyph unicode="O" horiz-adv-x="1382" d="M606 -20Q461 -17 351 48T176 237T101 521Q90 685 136 871T284 1198T523 1409T821 1476Q968 1473 1078 1407T1251 1216T1323 933Q1333 757 1285 571T1136 249T900 45T606 -20ZM1021 768L1029 863Q1039 1041 982 1133T807
-1229Q624 1235 517 1067T395 597Q385 420 442 325T619 225Q776 218 879 347T1014 714L1021 768Z" />
-<glyph unicode="P" horiz-adv-x="1291" d="M404 513L314 0H21L274 1456L784 1455Q1020 1455 1155 1324T1273 982Q1257 768 1095 640T680 512L404 513ZM445 756L689 754Q807 754 885 815T978 980T945 1146T801 1212L525 1213L445 756Z" />
-<glyph unicode="Q" horiz-adv-x="1382" d="M958 95L1160 -103L960 -260L705 -12Q648 -21 599 -19Q381 -17 247 129T98 522Q89 645 116 796T206 1075T360 1293T569 1431T817 1476Q963 1473 1073 1407T1247 1217T1320 933Q1325 846 1315 759L1298 644Q1231 272 958
-95ZM1026 863Q1033 1048 976 1136T803 1229Q620 1235 513 1067T391 597Q381 420 438 325T615 225Q772 218 875 347T1010 714Q1023 810 1026 863Z" />
-<glyph unicode="R" horiz-adv-x="1278" d="M645 533H407L314 0H21L274 1456L756 1455Q998 1455 1128 1341T1244 1024Q1223 724 924 607L1129 16V0H817L645 533ZM449 776L667 774Q783 776 858 836T949 1001Q963 1098 918 1153T775 1212L525 1213L449 776Z" />
-<glyph unicode="S" horiz-adv-x="1231" d="M822 389Q843 508 705 571L512 648Q176 798 193 1061Q200 1183 273 1277T478 1424T763 1476Q974 1472 1104 1351T1232 1025H940Q945 1124 897 1179T746 1236Q646 1238 572 1191T484 1060Q465 951 630 887L762 837L838
-802Q1133 656 1114 392Q1105 263 1032 170T832 26T553 -21Q398 -18 277 44T93 219Q34 324 38 459L331 458Q317 221 564 217Q671 217 740 264T822 389Z" />
-<glyph unicode="T" horiz-adv-x="1239" d="M1296 1213H864L654 0H361L571 1213H144L187 1456H1339L1296 1213Z" />
-<glyph unicode="U" horiz-adv-x="1318" d="M1349 1456L1185 496Q1151 255 985 115T573 -21Q419 -18 306 46T138 228T101 495L264 1456H557L394 494Q387 438 393 389Q413 227 586 221Q710 217 789 289T891 495L1055 1456H1349Z" />
-<glyph unicode="V" horiz-adv-x="1309" d="M606 364L1096 1456H1432L713 0H407L145 1456H460L606 364Z" />
-<glyph unicode="W" horiz-adv-x="1747" d="M1195 423L1546 1456H1845L1304 0H1009L932 970L551 0H256L170 1456H456L485 428L877 1456H1126L1195 423Z" />
-<glyph unicode="X" horiz-adv-x="1272" d="M679 956L1022 1456H1374L839 720L1141 0H817L626 508L275 0H-81L466 748L173 1456H493L679 956Z" />
-<glyph unicode="Y" horiz-adv-x="1238" d="M640 802L1047 1456H1383L747 512L659 0H361L456 545L154 1455L463 1456L640 802Z" />
-<glyph unicode="Z" horiz-adv-x="1214" d="M378 243L1086 241L1044 0H-34L-1 191L870 1211L177 1213L220 1456H1281L1248 1269L378 243Z" />
-<glyph unicode="[" horiz-adv-x="562" d="M673 1471H535L287 -116H425L390 -339H-31L287 1694H708L673 1471Z" />
-<glyph unicode="\" horiz-adv-x="848" d="M154 1456H429L745 -125H469L154 1456Z" />
-<glyph unicode="]" horiz-adv-x="562" d="M183 1694H604L286 -339H-135L-100 -116H39L287 1471H148L183 1694Z" />
-<glyph unicode="^" horiz-adv-x="878" d="M543 1183L296 729H57L474 1456H679L843 729H632L543 1183Z" />
-<glyph unicode="_" horiz-adv-x="897" d="M743 -226H-143L-103 0H782L743 -226Z" />
-<glyph unicode="`" horiz-adv-x="667" d="M638 1226L427 1227L204 1534L495 1536L638 1226Z" />
-<glyph unicode="a" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199Z" />
-<glyph unicode="b" horiz-adv-x="1128" d="M1043 538Q1013 282 887 128T561 -21Q390 -17 301 117L260 0H3L269 1536H552L443 983Q557 1106 707 1102Q864 1100 953 990T1049 684Q1051 622 1043 538ZM763 559Q772 644 769 691Q758 865 625 868Q500 872 418 755L340
-325Q378 217 502 213Q710 207 757 515L763 559Z" />
-<glyph unicode="c" horiz-adv-x="1046" d="M477 212Q555 210 607 254T675 373L940 374Q933 260 869 169T697 27T470 -21Q273 -18 158 115T47 469L50 524L51 535Q78 799 229 953T602 1102Q785 1098 892 983T998 678H735Q735 765 697 815T583 869Q381 875 338 574Q323
-465 327 390Q337 215 477 212Z" />
-<glyph unicode="d" horiz-adv-x="1129" d="M540 1103Q691 1099 784 982L890 1536H1173L907 0H655L671 116Q550 -25 389 -21Q288 -20 212 32T95 181T49 399Q46 462 52 521L58 566Q82 732 150 858T318 1045T540 1103ZM335 521Q327 445 330 393Q340 217 472 214Q591
-209 679 326L756 756Q717 863 600 868Q497 871 429 789T335 521Z" />
-<glyph unicode="e" horiz-adv-x="1084" d="M517 -20Q375 -19 266 49T102 237T60 501L63 541Q78 699 155 831T353 1034T621 1102Q830 1098 937 949T1019 570L1003 447H340Q336 342 391 279T541 214Q695 210 811 333L940 173Q879 81 764 30T517 -20ZM607 869Q529
-871 469 820T360 643H748L754 669Q760 709 755 745Q745 803 706 835T607 869Z" />
-<glyph unicode="f" horiz-adv-x="722" d="M79 0L230 870H74L111 1082L267 1083L281 1191Q307 1364 422 1462T715 1559Q776 1557 868 1538L843 1313Q795 1325 760 1325Q685 1326 632 1287T565 1170L550 1082H759L722 870H514L363 0H79Z" />
-<glyph unicode="g" horiz-adv-x="1144" d="M57 542Q87 793 220 949T557 1103Q730 1099 815 978L852 1083L1111 1082L934 37Q905 -179 750 -305T366 -427Q254 -425 152 -379T-16 -251L124 -79Q218 -198 360 -202Q470 -206 548 -145T654 29L670 94Q552 -24 405 -20Q247
--18 154 97T52 398Q49 459 57 542ZM334 424Q334 330 373 274T488 214Q603 210 692 312L776 770Q733 864 617 868Q509 871 434 781T340 542Q333 469 334 424Z" />
-<glyph unicode="h" horiz-adv-x="1122" d="M433 962Q560 1104 726 1102Q887 1098 962 987T1019 682L905 0H623L738 685Q743 724 740 757Q730 865 614 868Q500 872 414 770L278 0H-4L262 1536H545L433 962Z" />
-<glyph unicode="i" horiz-adv-x="537" d="M301 0H17L205 1082H489L301 0ZM238 1357Q236 1424 282 1468T393 1512Q457 1514 504 1473T553 1367Q555 1305 512 1259T398 1211Q335 1209 288 1249T238 1357Z" />
-<glyph unicode="j" horiz-adv-x="526" d="M490 1082L296 -59Q273 -240 166 -341T-112 -440Q-180 -438 -262 -421L-239 -191Q-189 -202 -152 -204Q-19 -206 10 -60L206 1082H490ZM233 1357Q231 1423 275 1466T388 1512Q457 1512 501 1471T548 1367Q550 1300 506
-1257T393 1211Q330 1209 283 1249T233 1357Z" />
-<glyph unicode="k" horiz-adv-x="1071" d="M471 431L340 317L285 0H3L269 1536H552L406 702L461 761L782 1082H1144L671 617L972 0H663L471 431Z" />
-<glyph unicode="l" horiz-adv-x="537" d="M301 0H17L284 1536H567L301 0Z" />
-<glyph unicode="m" horiz-adv-x="1730" d="M453 1083L430 960Q561 1106 747 1102Q847 1100 913 1056T1002 937Q1145 1106 1338 1102Q1487 1099 1562 1000T1626 714L1624 689L1509 0H1226L1341 691Q1345 728 1344 760Q1337 865 1224 868Q1108 868 1025 744L1022
-721L896 0H614L729 689Q733 726 732 758Q725 864 613 867Q506 870 420 766L285 0H3L190 1082L453 1083Z" />
-<glyph unicode="n" horiz-adv-x="1123" d="M449 1083L425 955Q555 1106 740 1102Q893 1099 966 990T1019 688L905 0H623L739 691Q744 730 741 762Q728 864 613 867Q502 871 414 764L279 0H-3L185 1082L449 1083Z" />
-<glyph unicode="o" horiz-adv-x="1133" d="M622 1102Q765 1100 868 1029T1020 832T1055 553Q1032 295 876 136T489 -20Q348 -18 245 52T93 248T58 524Q84 792 240 950T622 1102ZM337 421Q339 325 382 270T503 212Q633 208 707 331T776 656Q772 752 730 809T608
-869Q482 873 407 751T337 421Z" />
-<glyph unicode="p" horiz-adv-x="1128" d="M1042 538Q1021 368 953 236T784 40T560 -21Q403 -17 312 96L213 -416H-69L190 1082L450 1083L431 974Q548 1106 707 1102T954 987T1048 684Q1050 622 1042 538ZM762 559L768 655Q770 752 733 809T623 868Q500 872 420
-764L339 318Q376 217 498 213Q600 210 668 292T762 559Z" />
-<glyph unicode="q" horiz-adv-x="1132" d="M540 1103Q708 1099 797 967L843 1083L1095 1082L835 -416H551L652 95Q539 -24 389 -20Q288 -19 212 33T95 183T49 400Q46 463 52 523L58 567Q82 735 150 861T318 1046T540 1103ZM331 394Q341 216 473 213Q592 209 677
-318L759 768Q720 865 602 869Q496 872 427 786T338 544Q328 441 331 394Z" />
-<glyph unicode="r" horiz-adv-x="735" d="M744 811Q686 821 649 821Q498 825 410 708L285 0H3L191 1082L456 1083L430 951Q532 1104 682 1104Q724 1104 780 1090L744 811Z" />
-<glyph unicode="s" horiz-adv-x="1031" d="M630 305Q646 385 519 421L428 444Q105 533 114 758Q119 911 249 1007T564 1102Q747 1100 860 1005T975 752L695 753Q697 892 557 894Q491 894 443 861T383 772Q368 692 504 659L544 650Q682 617 755 575T867 469T904
-318Q901 215 838 138T664 19T431 -20Q251 -18 131 83T9 346L275 344Q279 189 441 187Q519 187 569 219T630 305Z" />
-<glyph unicode="t" horiz-adv-x="681" d="M575 1348L528 1082H708L671 870H491L399 328Q393 277 407 250T475 221Q491 220 561 226L541 5Q466 -20 379 -18Q240 -16 172 69T116 299L209 870H56L93 1082H246L292 1348H575Z" />
-<glyph unicode="u" horiz-adv-x="1122" d="M673 112Q553 -23 375 -20Q219 -18 139 92T77 382L194 1082H476L357 379Q353 346 356 317Q366 217 467 214Q598 210 684 315L819 1082H1103L915 0H652L673 112Z" />
-<glyph unicode="v" horiz-adv-x="1014" d="M458 357L766 1082H1070L547 0H277L92 1082H378L458 357Z" />
-<glyph unicode="w" horiz-adv-x="1470" d="M980 394L1237 1082H1518L1063 0H827L747 677L431 0H195L115 1082H379L396 401L705 1082H909L980 394Z" />
-<glyph unicode="x" horiz-adv-x="1021" d="M524 761L751 1082H1068L676 538L895 0H609L476 338L237 0H-82L326 566L117 1082H403L524 761Z" />
-<glyph unicode="y" horiz-adv-x="1007" d="M462 412L771 1082H1085L452 -163Q384 -306 293 -373T81 -440Q34 -440 -55 -419L-34 -199L5 -201Q143 -205 207 -100L269 15L92 1082H384L462 412Z" />
-<glyph unicode="z" horiz-adv-x="1021" d="M371 235L881 233L840 0H-33L0 191L603 846L128 848L169 1082H1012L980 897L371 235Z" />
-<glyph unicode="{" horiz-adv-x="666" d="M438 -360Q280 -307 203 -187Q126 -66 144 106L172 311Q177 353 174 389Q164 502 39 513L58 720Q243 728 273 942L305 1172Q364 1497 709 1601L756 1435Q588 1370 555 1131L523 902Q489 709 300 613Q369 562 401 485T424
-309L393 73L389 16Q382 -146 499 -199L438 -360Z" />
-<glyph unicode="|" horiz-adv-x="512" d="M203 -270H31L301 1456H473L203 -270Z" />
-<glyph unicode="}" horiz-adv-x="666" d="M-94 -197Q74 -132 107 107L139 337Q173 530 365 624Q293 673 261 752T238 929L269 1165L273 1222Q280 1383 164 1437L228 1595Q389 1541 462 1421T518 1132L490 928Q485 885 488 850Q498 735 623 724L604 517Q418 507
-389 296L362 97Q311 -256 -47 -364L-94 -197Z" />
-<glyph unicode="~" horiz-adv-x="1298" d="M1203 795Q1197 677 1151 579T1027 426T848 374Q771 376 711 409T593 501T507 576T443 593Q384 593 344 546T289 413L80 415Q92 601 189 716T438 828Q515 826 576 793T710 685T841 610Q903 610 945 660T1001 794L1203 795Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="505" />
-<glyph unicode="&#xa1;" horiz-adv-x="571" d="M171 639H406L263 -369H-37L171 639ZM499 953Q501 884 455 839T344 794Q281 792 234 834T184 943Q182 1008 226 1054T339 1102Q403 1104 450 1063T499 953Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1153" d="M518 212Q596 210 649 254T717 373L983 375Q972 224 866 121T592 -11L543 -245H347L397 -9Q233 29 154 173T96 523Q121 769 246 915T572 1094L619 1318H815L768 1090Q901 1058 975 951T1048 678H784L783 712Q770
-863 636 869Q535 874 469 795T381 552Q369 442 372 391Q377 215 518 212Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1190" d="M544 576L527 429Q511 320 426 237L1066 241L1023 0H-6L37 240L112 238Q160 257 187 297T228 421L249 576H91L132 812H282L309 1033Q335 1241 471 1360T807 1475Q998 1471 1103 1359T1205 1057L925 1058Q930 1232
-789 1235Q719 1237 669 1184T603 1040L576 812H876L835 576H544Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1385" d="M972 105Q790 -24 603 -20Q403 -16 272 106L119 -26L-3 132L151 257Q94 442 114 602Q140 817 285 977L170 1134L318 1264L427 1121Q604 1237 781 1233Q966 1231 1102 1117L1272 1265L1395 1106L1226 967Q1288 781
-1268 615Q1244 412 1111 255L1222 104L1073 -27L972 105ZM295 599Q280 489 314 390T424 231T605 168Q719 164 824 224T999 390T1088 617Q1103 727 1069 826T959 983T779 1045Q664 1049 558 989T382 824T295 599Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1075" d="M578 894L892 1456H1212L773 744L981 741L948 567H670L650 452H930L899 278H620L571 0H278L327 278H29L60 452H356L377 567H80L110 742H354L165 1456H458L578 894Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="511" d="M-28 -270L111 525H365L227 -270H-28ZM394 698H140L272 1456H526L394 698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1258" d="M1126 489Q1119 387 1064 319T921 205Q1016 94 1005 -70Q997 -187 930 -273T738 -407T458 -452Q228 -450 100 -340T-24 -34H257Q253 -125 308 -171T468 -217Q577 -217 643 -179T723 -73Q743 25 587 82L490 113Q262
-183 168 280T83 526Q93 703 288 812Q192 925 202 1087Q214 1253 345 1356T686 1474L753 1476Q971 1472 1092 1360T1210 1048H930Q933 1139 884 1189T743 1242Q640 1245 571 1204T486 1090Q464 973 639 925T906 830T1050 725Q1135 629 1126 489ZM479 705Q389 650
-372 555Q348 434 516 379L595 354L725 311Q820 367 840 460Q861 570 700 630L479 705Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="937" d="M211 1362Q209 1414 247 1452T342 1493T440 1458T481 1368Q483 1315 445 1278T349 1238Q296 1236 255 1271T211 1362ZM684 1362Q682 1414 720 1452T815 1493Q871 1495 911 1459T954 1368Q954 1313 917 1276T823 1237Q768
-1235 726 1271T684 1362Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1568" d="M1089 597Q1079 447 988 363T744 282Q596 286 514 395T444 669L455 779Q474 963 577 1070T836 1176Q981 1172 1061 1089T1139 859L987 861Q1000 1038 841 1042Q748 1044 686 973T609 777T594 632T595 584Q598 511
-635 466T737 417Q906 410 937 596L1089 597ZM235 722Q213 563 264 420T429 191T692 104Q853 100 998 182T1245 413T1371 736Q1393 895 1342 1037T1178 1263T914 1351Q752 1355 603 1270T355 1036T235 722ZM114 722Q131 874 200 1014T380 1262T625 1424T902 1476Q1085
-1472 1227 1374T1441 1102T1493 735Q1472 546 1373 379T1118 107Q924 -24 705 -20Q520 -16 379 83T165 357T114 722Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="892" d="M619 702L616 774Q527 691 415 691Q310 691 249 751T187 911Q189 1026 281 1088T542 1151L648 1149L660 1204L664 1250Q661 1325 583 1328Q463 1332 436 1229L263 1242Q270 1352 357 1415T577 1477Q698 1475 770
-1400T832 1200L779 853L775 794Q774 750 783 702H619ZM448 833Q517 833 609 896L637 1033H557Q473 1030 422 999T362 915Q355 877 377 855T448 833Z" />
-<glyph unicode="&#xab;" horiz-adv-x="1002" d="M534 508L696 126L529 125L316 513L317 534L647 924H850L534 508ZM651 508L813 126L646 125L433 513L434 534L764 924H967L651 508Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1105" d="M894 374H698L744 634H127L157 805H969L894 374Z" />
-<glyph unicode="&#xad;" horiz-adv-x="780" d="M638 507H90L130 740H679L638 507Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1568" d="M114 722Q131 874 200 1014T380 1262T625 1424T902 1476Q1085 1472 1227 1374T1441 1102T1493 735Q1472 546 1373 379T1118 107Q924 -24 705 -20Q520 -16 379 83T165 357T114 722ZM235 722Q213 562 265 418T429
-191T692 104Q849 100 996 182T1245 412T1371 736Q1393 895 1342 1037T1178 1263T914 1351Q752 1355 603 1270T355 1036T235 722ZM653 653L600 316H452L585 1166L841 1165Q983 1160 1059 1092T1131 910Q1128 852 1095 807T994 723Q1062 674 1068 574Q1069 545 1063
-485T1058 396L1062 333L1061 314L913 315Q907 352 909 388Q910 431 921 516Q928 579 907 613T820 651L653 653ZM674 787L790 786Q872 789 924 821T987 909Q998 967 970 998T853 1032L712 1033L674 787Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="1005" d="M940 1287H269L296 1454H967L940 1287Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="781" d="M228 1191Q230 1308 314 1393T510 1477Q614 1475 683 1395T751 1209Q749 1093 667 1009T473 927Q368 929 297 1006T228 1191ZM371 1193Q365 1148 391 1112T465 1076Q516 1076 558 1113T609 1207Q615 1256 590 1292T518
-1329Q467 1329 424 1289T371 1193Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1077" d="M711 942H1030L992 701H674L617 337H369L426 701H101L139 942H464L518 1285H765L711 942ZM855 1H15L52 236H892L855 1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="750" d="M684 667H81L107 817L442 1087Q537 1166 549 1228Q557 1264 539 1285T485 1306Q388 1306 364 1194L160 1192Q168 1318 256 1394T473 1469Q604 1467 680 1403T755 1227Q750 1089 586 972L508 917L378 833L714 831L684 667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="750" d="M350 1137H431Q485 1139 521 1163T567 1232Q572 1266 549 1284T490 1303Q410 1303 382 1243L174 1242Q181 1348 263 1409T476 1468Q612 1465 690 1407T766 1249Q763 1131 608 1066Q666 1046 695 1001T723 895Q721
-784 626 719T386 656Q257 658 178 725T96 905L291 904Q298 822 393 822Q445 822 482 847T528 915Q544 995 434 1000H340L350 1137Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="669" d="M426 1536H753L435 1226H186L426 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1233" d="M500 1082L397 460L391 377Q384 217 516 214Q649 210 737 318L872 1082H1154L966 0H718L726 69Q620 -24 496 -22Q403 -22 327 26L240 -416H-42L218 1082H500Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="983" d="M535 0L625 520L573 521Q362 524 247 651T149 980Q168 1194 317 1325T689 1457L1002 1456L749 0H535Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="608" d="M154 692Q152 759 197 805T310 853Q375 855 422 812T472 702Q474 637 429 590T314 542Q250 540 203 581T154 692Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="542" d="M222 9L202 -55Q264 -68 295 -111T327 -217Q327 -332 231 -396T-45 -465L-37 -295Q74 -290 91 -207Q103 -146 5 -139L-30 -136L13 6L222 9Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="750" d="M524 667H324L419 1210L228 1170L258 1338L627 1453L652 1454L524 667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="918" d="M581 1477Q729 1473 810 1372T881 1121L875 1055Q859 884 755 785T501 689Q357 693 273 792T200 1044L205 1107Q218 1274 322 1377T581 1477ZM372 1041Q369 1005 372 969Q377 908 410 872T500 834Q576 831 631 887T701
-1044L712 1145L711 1194Q696 1326 583 1329Q506 1332 451 1277T381 1121L372 1041Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="1002" d="M311 923L524 536L523 514L193 124H-10L305 539L144 922L311 923ZM692 923L905 536L904 514L574 124H371L686 539L525 922L692 923Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1436" d="M490 664H290L385 1207L194 1167L224 1335L593 1450L618 1451L490 664ZM374 119L235 204L1113 1328L1250 1245L374 119ZM1208 324L1304 325L1273 159H1188L1159 0H959L987 159H652L666 309L1085 788L1288 790L1208
-324ZM866 328L1018 325L1062 541L1044 516L866 328Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1522" d="M333 119L194 204L1072 1328L1209 1245L333 119ZM474 670H274L369 1213L178 1173L208 1341L577 1456L602 1457L474 670ZM1329 0H726L752 150L1087 420Q1182 499 1194 561Q1202 597 1184 618T1130 639Q1033 639 1009
-527L805 525Q813 651 901 727T1118 802Q1249 800 1325 736T1400 560Q1395 422 1231 305L1153 250L1023 166L1359 164L1329 0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1615" d="M530 119L391 204L1269 1328L1406 1245L530 119ZM1362 324L1458 325L1427 159H1342L1313 0H1113L1141 159H806L820 309L1239 788L1442 790L1362 324ZM1020 328L1172 325L1216 541L1198 516L1020 328ZM395 1137H476Q530
-1139 566 1163T612 1232Q617 1266 594 1284T535 1303Q455 1303 427 1243L219 1242Q226 1348 308 1409T521 1468Q657 1465 735 1407T811 1249Q808 1131 653 1066Q711 1046 740 1001T768 895Q766 784 671 719T431 656Q302 658 223 725T141 905L336 904Q343 822 438
-822Q490 822 527 847T573 915Q589 995 479 1000H385L395 1137Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="998" d="M648 644Q640 522 598 433T470 271L402 214Q275 108 258 -2Q249 -66 275 -108T370 -152Q441 -154 490 -110T559 21L841 23Q828 -168 696 -278T360 -385Q174 -383 66 -281T-31 -2Q-20 159 148 309L293 430Q379 509
-402 643L648 644ZM747 954Q749 885 703 840T592 795Q528 793 481 834T432 944Q430 1013 476 1058T587 1103Q651 1105 698 1064T747 954Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543ZM966 1536L755 1537L532 1844L823 1846L966 1536Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543ZM930 1846H1257L939 1536H690L930 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543ZM1214 1570V1549L998 1554L875 1698L700 1555L471 1551V1574L792 1846L953 1847L1214 1570Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543ZM1236 1834Q1229 1716 1166 1640T1005 1563Q977 1563 952 1571T875 1608T799 1646T744 1654Q668 1651 643 1556L477 1566Q484
-1682 550 1760T713 1836Q739 1836 762 1829T841 1791T921 1753T974 1746Q1051 1749 1075 1844L1236 1834Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543ZM486 1672Q484 1724 522 1762T617 1803T715 1768T756 1678Q758 1625 720 1588T624 1548Q571 1546 530 1581T486 1672ZM959
-1672Q957 1724 995 1762T1090 1803Q1146 1805 1186 1769T1229 1678Q1229 1623 1192 1586T1098 1547Q1043 1545 1001 1581T959 1672Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1347" d="M877 300H369L219 0H-104L674 1456H945L1222 0H923L877 300ZM489 543H840L758 1085L489 543ZM651 1723Q651 1813 717 1874T874 1936Q961 1936 1022 1878T1084 1737Q1086 1651 1021 1590T861 1528Q775 1528 714 1584T651
-1723ZM764 1723Q757 1683 779 1653T844 1623Q891 1623 927 1655T972 1737Q978 1780 955 1809T892 1839Q845 1839 808 1805T764 1723Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1877" d="M1706 0H835L879 333H456L236 0H-111L904 1456H1900L1858 1220H1278L1231 865H1719L1677 629H1200L1147 235H1747L1706 0ZM615 582L913 580L986 1132L615 582Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1310" d="M1208 486Q1191 335 1105 219T881 40T583 -20Q439 -17 332 46T164 230T94 508Q87 631 119 814T235 1139T434 1364Q596 1480 804 1476Q1030 1472 1162 1337T1308 960L1016 961Q1016 1099 961 1163T790 1231Q640 1236
-544 1124T414 797Q382 588 386 484Q391 352 445 290T596 224Q730 219 810 287T917 484L1208 486ZM660 8L640 -56Q702 -69 733 -112T765 -218Q765 -333 669 -397T393 -466L401 -296Q512 -291 529 -208Q541 -147 443 -140L408 -137L451 5L660 8Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1127" d="M982 631H424L356 241H1012L970 0H21L274 1456H1221L1178 1213H525L464 866H1024L982 631ZM911 1539L700 1540L477 1847L768 1849L911 1539Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1127" d="M982 631H424L356 241H1012L970 0H21L274 1456H1221L1178 1213H525L464 866H1024L982 631ZM875 1849H1202L884 1539H635L875 1849Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1127" d="M982 631H424L356 241H1012L970 0H21L274 1456H1221L1178 1213H525L464 866H1024L982 631ZM1159 1573V1552L943 1557L820 1701L645 1558L416 1554V1577L737 1849L898 1850L1159 1573Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1127" d="M982 631H424L356 241H1012L970 0H21L274 1456H1221L1178 1213H525L464 866H1024L982 631ZM431 1675Q429 1727 467 1765T562 1806T660 1771T701 1681Q703 1628 665 1591T569 1551Q516 1549 475 1584T431 1675ZM904
-1675Q902 1727 940 1765T1035 1806Q1091 1808 1131 1772T1174 1681Q1174 1626 1137 1589T1043 1550Q988 1548 946 1584T904 1675Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="589" d="M333 0H40L292 1456H585L333 0ZM585 1539L374 1540L151 1847L442 1849L585 1539Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="589" d="M333 0H40L292 1456H585L333 0ZM548 1849H875L557 1539H308L548 1849Z" />
-<glyph unicode="&#xce;" horiz-adv-x="589" d="M333 0H40L292 1456H585L333 0ZM833 1573V1552L617 1557L494 1701L319 1558L90 1554V1577L411 1849L572 1850L833 1573Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="589" d="M333 0H40L292 1456H585L333 0ZM105 1675Q103 1727 141 1765T236 1806T334 1771T375 1681Q377 1628 339 1591T243 1551Q190 1549 149 1584T105 1675ZM578 1675Q576 1727 614 1765T709 1806Q765 1808 805 1772T848
-1681Q848 1626 811 1589T717 1550Q662 1548 620 1584T578 1675Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1331" d="M51 0L162 642H-13L20 825H194L304 1456L720 1455Q867 1453 985 1389T1177 1206T1265 938Q1273 851 1263 760L1256 707Q1212 387 1005 194T501 0H51ZM667 642H455L386 241L508 240Q710 240 832 388T973 835L975
-867Q978 1032 912 1120T715 1212L555 1213L487 825H700L667 642Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1413" d="M1172 0H888L483 971L314 0H21L274 1456H557L963 483L1132 1456H1424L1172 0ZM1269 1834Q1262 1716 1199 1640T1038 1563Q1010 1563 985 1571T908 1608T832 1646T777 1654Q701 1651 676 1556L510 1566Q517 1682
-583 1760T746 1836Q772 1836 795 1829T874 1791T954 1753T1007 1746Q1084 1749 1108 1844L1269 1834Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1382" d="M606 -20Q461 -17 351 48T176 237T101 521Q90 685 136 871T284 1198T523 1409T821 1476Q968 1473 1078 1407T1251 1216T1323 933Q1333 757 1285 571T1136 249T900 45T606 -20ZM1021 768L1029 863Q1039 1041 982
-1133T807 1229Q624 1235 517 1067T395 597Q385 420 442 325T619 225Q776 218 879 347T1014 714L1021 768ZM980 1536L769 1537L546 1844L837 1846L980 1536Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1382" d="M606 -20Q461 -17 351 48T176 237T101 521Q90 685 136 871T284 1198T523 1409T821 1476Q968 1473 1078 1407T1251 1216T1323 933Q1333 757 1285 571T1136 249T900 45T606 -20ZM1021 768L1029 863Q1039 1041 982
-1133T807 1229Q624 1235 517 1067T395 597Q385 420 442 325T619 225Q776 218 879 347T1014 714L1021 768ZM944 1846H1271L953 1536H704L944 1846Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1382" d="M606 -20Q461 -17 351 48T176 237T101 521Q90 685 136 871T284 1198T523 1409T821 1476Q968 1473 1078 1407T1251 1216T1323 933Q1333 757 1285 571T1136 249T900 45T606 -20ZM1021 768L1029 863Q1039 1041 982
-1133T807 1229Q624 1235 517 1067T395 597Q385 420 442 325T619 225Q776 218 879 347T1014 714L1021 768ZM1228 1570V1549L1012 1554L889 1698L714 1555L485 1551V1574L806 1846L967 1847L1228 1570Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1382" d="M606 -20Q461 -17 351 48T176 237T101 521Q90 685 136 871T284 1198T523 1409T821 1476Q968 1473 1078 1407T1251 1216T1323 933Q1333 757 1285 571T1136 249T900 45T606 -20ZM1021 768L1029 863Q1039 1041 982
-1133T807 1229Q624 1235 517 1067T395 597Q385 420 442 325T619 225Q776 218 879 347T1014 714L1021 768ZM1250 1834Q1243 1716 1180 1640T1019 1563Q991 1563 966 1571T889 1608T813 1646T758 1654Q682 1651 657 1556L491 1566Q498 1682 564 1760T727 1836Q753
-1836 776 1829T855 1791T935 1753T988 1746Q1065 1749 1089 1844L1250 1834Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1382" d="M606 -20Q461 -17 351 48T176 237T101 521Q90 685 136 871T284 1198T523 1409T821 1476Q968 1473 1078 1407T1251 1216T1323 933Q1333 757 1285 571T1136 249T900 45T606 -20ZM1021 768L1029 863Q1039 1041 982
-1133T807 1229Q624 1235 517 1067T395 597Q385 420 442 325T619 225Q776 218 879 347T1014 714L1021 768ZM500 1672Q498 1724 536 1762T631 1803T729 1768T770 1678Q772 1625 734 1588T638 1548Q585 1546 544 1581T500 1672ZM973 1672Q971 1724 1009 1762T1104
-1803Q1160 1805 1200 1769T1243 1678Q1243 1623 1206 1586T1112 1547Q1057 1545 1015 1581T973 1672Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1065" d="M25 386L378 699L134 1012L314 1167L556 857L904 1168L1052 986L699 672L943 360L764 204L521 514L173 205L25 386Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1379" d="M606 -21Q451 -19 327 51L215 -95L12 -94L206 150Q68 382 107 695L115 753Q145 967 244 1135T493 1391T824 1477Q993 1473 1118 1393L1217 1518L1419 1517L1236 1288Q1356 1056 1320 759L1315 719Q1273 386 1081
-181T606 -21ZM387 552Q382 480 390 408L965 1172Q914 1226 813 1231Q655 1236 551 1109T411 749Q392 621 387 552ZM1044 1020L479 268Q530 228 618 223Q765 218 867 331T1010 660T1044 1020Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1318" d="M1349 1456L1185 496Q1151 255 985 115T573 -21Q419 -18 306 46T138 228T101 495L264 1456H557L394 494Q387 438 393 389Q413 227 586 221Q710 217 789 289T891 495L1055 1456H1349ZM945 1536L734 1537L511 1844L802
-1846L945 1536Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1318" d="M1349 1456L1185 496Q1151 255 985 115T573 -21Q419 -18 306 46T138 228T101 495L264 1456H557L394 494Q387 438 393 389Q413 227 586 221Q710 217 789 289T891 495L1055 1456H1349ZM909 1846H1236L918 1536H669L909 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1318" d="M1349 1456L1185 496Q1151 255 985 115T573 -21Q419 -18 306 46T138 228T101 495L264 1456H557L394 494Q387 438 393 389Q413 227 586 221Q710 217 789 289T891 495L1055 1456H1349ZM1193 1570V1549L977 1554L854
-1698L679 1555L450 1551V1574L771 1846L932 1847L1193 1570Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1318" d="M1349 1456L1185 496Q1151 255 985 115T573 -21Q419 -18 306 46T138 228T101 495L264 1456H557L394 494Q387 438 393 389Q413 227 586 221Q710 217 789 289T891 495L1055 1456H1349ZM465 1672Q463 1724 501 1762T596
-1803T694 1768T735 1678Q737 1625 699 1588T603 1548Q550 1546 509 1581T465 1672ZM938 1672Q936 1724 974 1762T1069 1803Q1125 1805 1165 1769T1208 1678Q1208 1623 1171 1586T1077 1547Q1022 1545 980 1581T938 1672Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1238" d="M640 802L1047 1456H1383L747 512L659 0H361L456 545L154 1455L463 1456L640 802ZM875 1846H1202L884 1536H635L875 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1219" d="M559 1456L512 1189L689 1188Q923 1187 1054 1066T1170 746Q1159 605 1082 501T876 342T590 286L357 287L306 0H24L277 1456H559ZM473 956L397 520L595 519Q708 519 789 578T888 744Q902 839 852 895T705 955L473 956Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1263" d="M308 0H26L214 1101Q243 1319 382 1442T734 1559Q908 1555 1009 1455T1099 1197Q1096 1151 1080 1111T1019 995T961 889T941 821Q933 775 953 727T1034 604T1120 473T1145 363Q1136 184 1006 81T670 -21Q504 -19
-391 38L467 265Q556 210 672 212Q744 212 799 250T867 357Q875 405 854 453T766 576T674 712Q654 758 657 808Q660 853 676 892T734 1002T792 1109T812 1184Q820 1246 790 1287T696 1331Q614 1334 563 1275T495 1098L308 0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199ZM776 1226L565 1227L342 1534L633 1536L776 1226Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199ZM740 1536H1067L749 1226H500L740 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199ZM1024 1260V1239L808 1244L685 1388L510 1245L281 1241V1264L602 1536L763 1537L1024 1260Z"
-/>
-<glyph unicode="&#xe3;" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199ZM1046 1781Q1039 1663 976 1587T815 1510Q787 1510 762 1518T685 1555T609 1593T554 1601Q478
-1598 453 1503L287 1513Q294 1629 360 1707T523 1783Q549 1783 572 1776T651 1738T731 1700T784 1693Q861 1696 885 1791L1046 1781Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199ZM296 1362Q294 1414 332 1452T427 1493T525 1458T566 1368Q568 1315 530 1278T434 1238Q381
-1236 340 1271T296 1362ZM769 1362Q767 1414 805 1452T900 1493Q956 1495 996 1459T1039 1368Q1039 1313 1002 1276T908 1237Q853 1235 811 1271T769 1362Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1075" d="M629 0Q616 41 618 98Q496 -24 342 -20Q200 -18 107 72T19 296Q26 473 167 567T547 662L679 660L693 725Q699 758 696 788Q691 835 661 861T580 889Q514 891 468 857T409 757L126 756Q133 911 268 1007T603 1102Q787
-1098 891 993T978 721L895 203L890 139Q888 68 907 19L906 0H629ZM412 199Q534 195 625 305L660 492L562 493Q406 489 337 398Q312 365 306 317Q298 263 328 232T412 199ZM461 1413Q461 1503 527 1564T684 1626Q771 1626 832 1568T894 1427Q896 1341 831 1280T671
-1218Q585 1218 524 1274T461 1413ZM574 1413Q567 1373 589 1343T654 1313Q701 1313 737 1345T782 1427Q788 1470 765 1499T702 1529Q655 1529 618 1495T574 1413Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1687" d="M1123 -20Q880 -15 771 126Q601 -24 367 -20Q261 -19 178 22T52 137T15 311Q22 475 159 562T537 650L704 648L717 708Q722 741 719 770Q705 866 604 869Q534 871 481 839T415 745L134 763Q142 923 282 1015T620
-1103Q824 1098 922 993Q1073 1105 1253 1101Q1445 1097 1548 962T1628 612L1603 450H961Q951 342 1003 279T1159 214Q1240 212 1313 234T1458 290L1519 97Q1384 -20 1123 -20ZM426 191Q522 191 642 271L680 461L541 462Q442 459 376 417T299 307Q289 254 324 223T426
-191ZM1237 869Q1066 875 981 643H1350L1357 674Q1363 710 1361 745Q1354 863 1237 869Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1046" d="M477 212Q555 210 607 254T675 373L940 374Q933 260 869 169T697 27T470 -21Q273 -18 158 115T47 469L50 524L51 535Q78 799 229 953T602 1102Q785 1098 892 983T998 678H735Q735 765 697 815T583 869Q381 875 338
-574Q323 465 327 390Q337 215 477 212ZM544 8L524 -56Q586 -69 617 -112T649 -218Q649 -333 553 -397T277 -466L285 -296Q396 -291 413 -208Q425 -147 327 -140L292 -137L335 5L544 8Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1084" d="M517 -20Q375 -19 266 49T102 237T60 501L63 541Q78 699 155 831T353 1034T621 1102Q830 1098 937 949T1019 570L1003 447H340Q336 342 391 279T541 214Q695 210 811 333L940 173Q879 81 764 30T517 -20ZM607 869Q529
-871 469 820T360 643H748L754 669Q760 709 755 745Q745 803 706 835T607 869ZM757 1226L546 1227L323 1534L614 1536L757 1226Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1084" d="M517 -20Q375 -19 266 49T102 237T60 501L63 541Q78 699 155 831T353 1034T621 1102Q830 1098 937 949T1019 570L1003 447H340Q336 342 391 279T541 214Q695 210 811 333L940 173Q879 81 764 30T517 -20ZM607 869Q529
-871 469 820T360 643H748L754 669Q760 709 755 745Q745 803 706 835T607 869ZM721 1536H1048L730 1226H481L721 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1084" d="M517 -20Q375 -19 266 49T102 237T60 501L63 541Q78 699 155 831T353 1034T621 1102Q830 1098 937 949T1019 570L1003 447H340Q336 342 391 279T541 214Q695 210 811 333L940 173Q879 81 764 30T517 -20ZM607 869Q529
-871 469 820T360 643H748L754 669Q760 709 755 745Q745 803 706 835T607 869ZM1005 1260V1239L789 1244L666 1388L491 1245L262 1241V1264L583 1536L744 1537L1005 1260Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1084" d="M517 -20Q375 -19 266 49T102 237T60 501L63 541Q78 699 155 831T353 1034T621 1102Q830 1098 937 949T1019 570L1003 447H340Q336 342 391 279T541 214Q695 210 811 333L940 173Q879 81 764 30T517 -20ZM607 869Q529
-871 469 820T360 643H748L754 669Q760 709 755 745Q745 803 706 835T607 869ZM277 1362Q275 1414 313 1452T408 1493T506 1458T547 1368Q549 1315 511 1278T415 1238Q362 1236 321 1271T277 1362ZM750 1362Q748 1414 786 1452T881 1493Q937 1495 977 1459T1020
-1368Q1020 1313 983 1276T889 1237Q834 1235 792 1271T750 1362Z" />
-<glyph unicode="&#xec;" horiz-adv-x="554" d="M307 0H25L213 1082H495L307 0ZM767 1467L556 1468L333 1775L624 1777L767 1467Z" />
-<glyph unicode="&#xed;" horiz-adv-x="554" d="M307 0H25L213 1082H495L307 0ZM474 1777H801L483 1467H234L474 1777Z" />
-<glyph unicode="&#xee;" horiz-adv-x="554" d="M307 0H25L213 1082H495L307 0ZM759 1245V1224L543 1229L420 1373L245 1230L16 1226V1249L337 1521L498 1522L759 1245Z" />
-<glyph unicode="&#xef;" horiz-adv-x="554" d="M307 0H25L213 1082H495L307 0ZM31 1347Q29 1399 67 1437T162 1478T260 1443T301 1353Q303 1300 265 1263T169 1223Q116 1221 75 1256T31 1347ZM504 1347Q502 1399 540 1437T635 1478Q691 1480 731 1444T774 1353Q774
-1298 737 1261T643 1222Q588 1220 546 1256T504 1347Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1153" d="M948 1302Q1035 1147 1069 989T1082 653L1076 601Q1042 320 879 147T488 -21Q359 -18 258 44T104 218T64 460Q77 608 144 726T319 906T565 967Q694 963 802 889Q796 1029 710 1154L499 1031L437 1159L598 1248Q517
-1315 363 1357L471 1579Q694 1526 842 1399L1034 1511L1094 1382L948 1302ZM809 665Q782 706 732 727T621 748Q509 750 435 670T346 460Q334 351 377 283T506 211Q607 208 679 289T783 526L806 652L809 665Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1123" d="M449 1083L425 955Q555 1106 740 1102Q893 1099 966 990T1019 688L905 0H623L739 691Q744 730 741 762Q728 864 613 867Q502 871 414 764L279 0H-3L185 1082L449 1083ZM1069 1781Q1062 1663 999 1587T838 1510Q810
-1510 785 1518T708 1555T632 1593T577 1601Q501 1598 476 1503L310 1513Q317 1629 383 1707T546 1783Q572 1783 595 1776T674 1738T754 1700T807 1693Q884 1696 908 1791L1069 1781Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1133" d="M622 1102Q765 1100 868 1029T1020 832T1055 553Q1032 295 876 136T489 -20Q348 -18 245 52T93 248T58 524Q84 792 240 950T622 1102ZM337 421Q339 325 382 270T503 212Q633 208 707 331T776 656Q772 752 730 809T608
-869Q482 873 407 751T337 421ZM788 1226L577 1227L354 1534L645 1536L788 1226Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1133" d="M622 1102Q765 1100 868 1029T1020 832T1055 553Q1032 295 876 136T489 -20Q348 -18 245 52T93 248T58 524Q84 792 240 950T622 1102ZM337 421Q339 325 382 270T503 212Q633 208 707 331T776 656Q772 752 730 809T608
-869Q482 873 407 751T337 421ZM752 1536H1079L761 1226H512L752 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1133" d="M622 1102Q765 1100 868 1029T1020 832T1055 553Q1032 295 876 136T489 -20Q348 -18 245 52T93 248T58 524Q84 792 240 950T622 1102ZM337 421Q339 325 382 270T503 212Q633 208 707 331T776 656Q772 752 730 809T608
-869Q482 873 407 751T337 421ZM1036 1260V1239L820 1244L697 1388L522 1245L293 1241V1264L614 1536L775 1537L1036 1260Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1133" d="M622 1102Q765 1100 868 1029T1020 832T1055 553Q1032 295 876 136T489 -20Q348 -18 245 52T93 248T58 524Q84 792 240 950T622 1102ZM337 421Q339 325 382 270T503 212Q633 208 707 331T776 656Q772 752 730 809T608
-869Q482 873 407 751T337 421ZM1058 1781Q1051 1663 988 1587T827 1510Q799 1510 774 1518T697 1555T621 1593T566 1601Q490 1598 465 1503L299 1513Q306 1629 372 1707T535 1783Q561 1783 584 1776T663 1738T743 1700T796 1693Q873 1696 897 1791L1058 1781Z"
-/>
-<glyph unicode="&#xf6;" horiz-adv-x="1133" d="M622 1102Q765 1100 868 1029T1020 832T1055 553Q1032 295 876 136T489 -20Q348 -18 245 52T93 248T58 524Q84 792 240 950T622 1102ZM337 421Q339 325 382 270T503 212Q633 208 707 331T776 656Q772 752 730 809T608
-869Q482 873 407 751T337 421ZM308 1362Q306 1414 344 1452T439 1493T537 1458T578 1368Q580 1315 542 1278T446 1238Q393 1236 352 1271T308 1362ZM781 1362Q779 1414 817 1452T912 1493Q968 1495 1008 1459T1051 1368Q1051 1313 1014 1276T920 1237Q865 1235
-823 1271T781 1362Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1143" d="M1054 571H55L95 801H1095L1054 571ZM487 1084Q485 1150 530 1196T644 1242Q711 1244 757 1202T805 1094T762 983T649 938Q581 936 535 977T487 1084ZM346 272Q344 338 389 384T503 430Q570 432 616 390T664 282T621
-171T508 126Q440 124 394 165T346 272Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1131" d="M55 545Q75 707 153 837T353 1037T627 1104Q718 1103 807 1072L907 1216L1081 1215L931 1001Q1045 867 1054 673Q1056 615 1048 532Q1028 370 951 243T750 46T475 -22Q388 -21 304 7L201 -142L27 -141L177 74Q58
-205 50 402Q47 459 55 545ZM320 423Q316 371 326 320L682 860Q650 872 616 872Q489 874 412 761T320 423ZM782 651Q785 699 778 749L425 218Q455 210 484 209Q592 207 666 289T768 532Q779 608 782 651Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1122" d="M673 112Q553 -23 375 -20Q219 -18 139 92T77 382L194 1082H476L357 379Q353 346 356 317Q366 217 467 214Q598 210 684 315L819 1082H1103L915 0H652L673 112ZM796 1226L585 1227L362 1534L653 1536L796 1226Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1122" d="M673 112Q553 -23 375 -20Q219 -18 139 92T77 382L194 1082H476L357 379Q353 346 356 317Q366 217 467 214Q598 210 684 315L819 1082H1103L915 0H652L673 112ZM760 1536H1087L769 1226H520L760 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1122" d="M673 112Q553 -23 375 -20Q219 -18 139 92T77 382L194 1082H476L357 379Q353 346 356 317Q366 217 467 214Q598 210 684 315L819 1082H1103L915 0H652L673 112ZM1044 1260V1239L828 1244L705 1388L530 1245L301
-1241V1264L622 1536L783 1537L1044 1260Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1122" d="M673 112Q553 -23 375 -20Q219 -18 139 92T77 382L194 1082H476L357 379Q353 346 356 317Q366 217 467 214Q598 210 684 315L819 1082H1103L915 0H652L673 112ZM316 1362Q314 1414 352 1452T447 1493T545 1458T586
-1368Q588 1315 550 1278T454 1238Q401 1236 360 1271T316 1362ZM789 1362Q787 1414 825 1452T920 1493Q976 1495 1016 1459T1059 1368Q1059 1313 1022 1276T928 1237Q873 1235 831 1271T789 1362Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="1007" d="M462 412L771 1082H1085L452 -163Q384 -306 293 -373T81 -440Q34 -440 -55 -419L-34 -199L5 -201Q143 -205 207 -100L269 15L92 1082H384L462 412ZM710 1536H1037L719 1226H470L710 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1137" d="M1044 538Q1023 365 955 234T786 40T562 -21Q408 -17 314 95L216 -416H-67L271 1536H555L447 987Q560 1106 709 1102Q865 1100 954 990T1050 684Q1052 622 1044 538ZM764 559L770 655Q772 752 735 809T625 868Q505
-872 423 766L341 316Q378 215 500 213Q598 210 665 287T758 517L764 559Z" />
-<glyph unicode="&#xff;" horiz-adv-x="1007" d="M462 412L771 1082H1085L452 -163Q384 -306 293 -373T81 -440Q34 -440 -55 -419L-34 -199L5 -201Q143 -205 207 -100L269 15L92 1082H384L462 412ZM266 1362Q264 1414 302 1452T397 1493T495 1458T536 1368Q538
-1315 500 1278T404 1238Q351 1236 310 1271T266 1362ZM739 1362Q737 1414 775 1452T870 1493Q926 1495 966 1459T1009 1368Q1009 1313 972 1276T878 1237Q823 1235 781 1271T739 1362Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1265" d="M1409 596H402L451 832H1459L1409 596Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1526" d="M1702 596H360L425 832H1769L1702 596Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="475" d="M428 1570L562 1488Q516 1420 480 1351T428 1199L402 1048H178L198 1180Q234 1412 428 1570Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="466" d="M285 1007L142 1091Q245 1239 271 1351L304 1536H529L506 1388Q472 1167 285 1007Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="503" d="M57 -305L-77 -223Q19 -79 44 38L78 229H310L288 86Q252 -146 57 -305Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="816" d="M436 1570L570 1488Q524 1420 488 1351T436 1199L410 1048H186L206 1180Q242 1412 436 1570ZM768 1570L902 1488Q856 1420 820 1351T768 1199L742 1048H518L538 1180Q574 1412 768 1570Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="822" d="M299 1007L156 1091Q259 1239 285 1351L318 1536H543L520 1388Q486 1167 299 1007ZM635 1007L492 1091Q595 1239 621 1351L654 1536H879L856 1388Q822 1167 635 1007Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="810" d="M60 -325L-80 -244Q16 -96 44 38L84 263H316L285 72Q246 -166 60 -325ZM386 -325L245 -244Q350 -83 377 35L417 263H649L622 86Q584 -158 386 -325Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="724" d="M399 997Q498 995 557 933T617 769L616 729Q610 624 543 560T374 498Q275 500 216 563T156 720L157 754Q160 862 226 929T399 997Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="629" d="M308 508L470 126L303 125L90 513L91 534L421 924H624L308 508Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="609" d="M306 923L519 536L518 514L188 124H-15L300 539L139 922L306 923Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-700italic.ttf b/static/fonts/roboto-v18-latin-700italic.ttf
deleted file mode 100644
index c74a6781842903c5d28acadde2c57e3e7074c9d5..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 36096
zcmb4s2YeL8`}dUHyIkrem*mn&a;cC6l8|x)kluTT(0daIy>}21k)j~IDWa(0<>03v
zA{GP%OArMM3MwEfieQJ_-us=o+uWT${_p#L;WN9pyR);;JoC)cXF@0;Bnk(Gq_%C<
zx{bO-br7=P6Wkrywp-VpC*!}lNXWtlgoNI0+p~8I`*8Dr2zj)a5PGI-&;0r`cBDT`
z$n*@<A39><u*q-5?z=?DjQND{P9tVcPgTCns~}|FVLb0Jdh(cwBYsPKfsonn;{Dgg
z44XEY1Q83qhiei#X2P7&+ON5Jc!o0J+p!}j&bCH}0J!PP@%-<xqlS%iMSVP!kjZ9T
zmyX4au&D5-@f?>VW9-D~vtK=sn~3M_@cox3RE!vQxaFoV2$@uXHou-YZ1!ZH%>Kf)
zct3U0u!*Bm`2&C*;1arTa>cai?qOsk;CW6wpFDNc<g%-Ov>;?IzEA5BRXpRhfgw%|
z#6&_#1nEW`q;)?B%TKIi@lDF*1;GUgYf|o17>SH3bE=+`(Q^utCr9ulXQ<~!nCAvF
zJHjs&6xwW&HXcc7B;__*LT$XZt1&xSs{Nw9N<*(Qu4$CHT&m;lUe)MYz-HZxWV2m^
z+2ECIFd>X&yMJNLC4><q|30vV1GaF$R%tXif^+-XK1=+)+(D}xG{2ybrdw<@tJGc^
zYmGG+)3WH4pVrX2t{bdht7d~4>({zXIX%H|-#y=A0AoE{wiw9z;fr(lm+YKDP>_ja
zIhEiLblIVp9YIyZ!SkIgn2Q@M-(jqBaB&+S;^~$mRUGJo5qtWcqUj@c_jyMht<7MW
zTg5^2BneHPLQfJ&3fbvQNwtY)Qh+41D^MPao`mWsH{-&rU&z5gA7!-!JV_9PQ7e?8
zh53$J`EixR=<B>v<)~$L800ae$`O)Z8RYjgM10VJV^ozR$n1!g)ncn0#O#QZcalYa
z($SZ6dyy<fyvTxLOqT_Hw4}2Uht|Bh=8NRNhJBrKZ{3l#hu6Nk_FVF<;TMvBd+gPi
zL&Fc#t=ee1^+lR=knYxoigHl9`l2?PwV^-*C5_y5l#zx_B!>+0bl!wsne_hJaAA}5
zW-|#SnaqyRDjX}Ls9!hDmDV8NrOoU}u5#GSm9>3!(2>%ttn4g%X{p^_WQ>h9W|n4W
z8H|Ql5QNcSFdEbCSy^_~fXh<$O>m13T7D1_a`Qx;9XXqKsoJ&BO<gC1n3^7X;FdY$
zr?;}VXFHA>Xo6Z^-g`D((Ps3(x~sl<@yqB7mr{Q{L2q(4sz<ZoeKObGId~!Z^t%c7
zPSQDZ85@CF=5&9rwo>0EVI+anCZ(hynM54+d`DTnZ+hu{&qUud<ye~qff@5F&CJ(J
zf=>HgX39<{=Q}dZm3e;mlg*VyzDuA1T}OYj(OKYvqyIoiDKKL&($Z3^@2ORyLVu=a
zQ!5Kwu`S3D{@O!JcNo-=qoHd4=&qr`#=`pct|r<m^tF`_Z4XjIj;~z2C+JnRxS(N&
zkYHo|!qTpxu3L}tNsp+fl;;<Beq^7*_AP6<=0$B$gLX>$rd=AfXRJ%3>JL^v%arGq
zv|RtZ!k%5m>>U|v*Q{Hkwv4rJ`e$!tWKXaslI;FLIi{W_wMZ5z0>_d#3kI5kb(|&Q
zB2k|oR$N#G@k9nEf_R+qiNS(~63vy#KFV;~<Xva3tm6naR~Gsn78F{59*|8FCQt)1
z!F3TcT5Z_^g_*H-j+=&9i@_RewS&E6rDqxH1b;NVcCj&N>g$uAc+C*}`PA2XMc%R;
zd`|n=e)z=eztFe(&b<&fJ|d*g6ongeddxQ&$_kqdq)T2|)3pD>VblIIj4Q`hA79&1
zyFPoBcKwxqdOfJHZ&codb})CH&~p@jFwR=iy?)2R^;@w1Vg}9TpVOU^OIe*%HK2<g
z?xcFTlb0#chx+}e??>t&Z9dD!TO+hGo?_@pB8k~)h_ZO!0*^qSqln!~xWUM*#w?CG
zW1m|<JKinOo*$6H)Hj=c)~C$CLRcp{iWODt(eAlkKe=5SwR_WSntkfqA-w^Ud$U%`
z1{u0RikO`ybEIrN2sDn?c{TwOqq6O>u~A0GNP_~}w|_0Bo@hFAe|Kg$tbL`G?xZHx
z_SjCkZO^7=e`xz&(SCIOrfmn*BUu@L1DrFQq<ThQ!5AxY^sD00e4N9Cvnf9gozAqY
z;8vMd)nep4o37L@^`<GgZ*-$Y3EGi8dlr7Zk)Im){9-y%duHaF<=U@fX{Pq$EP>H_
z<Z&fSd6|TOL!&VVku1mHqYDQYtkK5t-y;9Bcj@4I+S6^d-`Z-s>(L>tXc*7e?rCG`
zW~$PMfss|(6SM*O6Iwx>XtPrF6H;hjV8)USRD(OQl#T71MP>d{tB&?W_Zbfk{^W?}
z0#yC!J@zcSig^%4Aap9J4;}%G-NqKWF4bn4^xhAso#VbkCqUZ>hP09M!~jegFdHg~
z@5_R|V`E|s>4vPV(sx@9VFO#X9H{iCIjnDs7K2!?6$1fzg?kwvE9I^QEqNG~t`rm$
zTGMG!=dXFf<pqYiLbmmBf3I{<-veExkVc*_2XJ&<gAhzS+Sda}oytVtWkI1T*)>QJ
z6Avt!Gh!*u&f?q<gSlq0l+tU*KjhR@r;w(8bNnOx%Bin?H+l6LdwsLI?yS8eEL!>d
z>kb{DY~;{lRr%|yjvchy+9%psCHu6|q`j>j9N*@wF^qPgBm0UmzYYeoNj(JZr=bUG
z75GwhzM@0zRER2gh>~B)eb71?7k7n*V^QsycJ`EZ{S9qr9vhme^m_2Gk15(0ifA|W
z6h^;|r~LrAuD4%l^=p-zt>Rl|b7hd<-B_#H`z<>-cD7{QY7Kv)DnDCYYGdlIv0*WD
zhb{@%t_MB-+hb?H4KshYPP@SRe@w4!e6@T&XR9XDm0!=J%B5F6yz+?lI|GFA;IBQv
zU$e<v4~${JL70w%cwEE_c1q&I1Y9Kl@MUs~ut82Yp;HboB5Mhoa=3yl61QF=bgCoF
zTxs+{E`~VUcj=7E7AmA8-dvgLy9-LT))$Nv0!b~+z~F<y;t<Y+$g+8a6694j-S_aA
zM?->p?41#&T{qEM?|=AfNcg?s0}RFuf3JJ{Pe$X|klw>rhlULsv5)toQ-^jRrVQ%9
z9N#eI>sP8~<{ucp{M`pRyZ&1DF^o+cG;%zrpx#J~QYmOX7#ya<eW+Km8-W9AQUvfc
zzmoZY7pfLDJ3^|QK?b2KI>Tfw^hxMUU=((0qk<hhxx3D8yLR2~dOezbPqSTCT7N_W
z%lJWihc<eLJE~_gW`OceNlW()WiH@JCZj#jPz(aqM?}|n@zF}f2ZqxaP6cq#7?S+%
zs>UP%lO^0J9)_DMWBnc`8^duI{J>%}+IVSE{V0L*dMw)}rk@y)>@4HflRPQQb#7?+
zoMRuDL)YJ2Gw;30l*TCiJC9rv7CLCi`2MVlUAe8j(?I*{^L5wfb6WBC?DA2JZ(clg
zIb+=ff9Q@L)m7ghv5?{2J$;hI|6hFqwfJ#3ry*QYiy_~CiilnW5|7cS@KS3s^AHTP
z+oK2+e+X`H4bc%ym@Ixd)~@Z}yx_T+Pj?Cled3o@Yd;ul4#}tQ(caoi?Wbpjsg(8T
z*kNwNU{g=^jaxKI+dNNUi@#p6_UC0>*+PSN^ry4w30F4j)Tn>mlEG6cAN^u^mjM{B
zDWIQcF<u7fCz9(1a1l9ppdN>64qzX|%RVT`1AJUr?Ml+#W8b>kW%BP8_dTkd`Vm~e
z2$&my*%?D@q%N82Y2N~Ru;{o8!bOmv&fFj&&>gv$p}Dtm*`UJ}xr=aex^wB2%6PwF
zXYskH=nTt^7xjb8l_|c54vV=m({~9fmNU_yh?!WL=~arLS9=s`AlKseTj>^lvv)6J
zi1yhRr*DUZ(}*X6jms}DKmN7$a7eEn1D1t_^z1co$zW5P)?Fusm|C{&GFd74batbI
zV@}>w*p(x9=FfO-{u`sY@_F?;eWo%tcSN5G#%8mxdJJQ1Vt+Adr+}K4xo;~iz*Xa+
zP51O*Bm_tZ(J>N(ix`2Cgcva)=Q|Q$BKgnQn1E>jYp60Uu*;YO_R=W3P>msmVCdRl
z4aJu7Sg6J&LPi+`WwCqnR?mK}duX`hu|XAwFN7<`kV37cwl^j=;vH?)?17Og>(s8@
zv_?V3?yT)pMi+jwY!6kM)M3i+AGB@LM_Z=#xWg-HnzCq4PRY>ejE;M`f48B;?Iv{~
z$NyG_V75eo%^D&5SMws!m(<kUZuc(e72o4|HlEDmMbtpdF+@BU8U-jagRJ8pD}8V$
z){i1%K!mIcS_DQ_<<w3&?aqw#s_)j}4;8bK?`eO~i8tv)?MpFZX_=DCFMtA#_zJiR
zv>%wimBfcAhcSQwp;3@A7o<$9x8?9rGvtx|c+)lFCSbCWCH!-xtq&%tP6(LPDu*gy
z%Ct};wXg%OU-EfGo$4vYY}#3B(w_K9dz@wfrseKC{4Z!3R+3ISdHNNBp^nhUUAG%6
z6Mf2#P~%9xlSfEK5)mj>V@L$(17B`};r0quUHm`-1^5n{o63)+_6Z3d({{L7yB0=6
z&K&<FEcE5Y1EaMUS$~g1p-syH^!25OHl+`Fa2RKUyR+9XD@xUY=eLaSy-YjZav)>9
zTQ(icdY~_HS|h_@^-<D*v;zN-TtgQ#9*~90L7MMQrg&Wtm5uxidD!o;;tQ)Bh53~U
ze)sWO?J7s@{K|B{o1pOKzDuEJNmB+iE=e5rj5Rh&n0+8^g)wod#@elh^sEfri6R+R
zg;-*7pW;cW-6Chd^8AbS7Ot7SAjq)wr#0=D3|L_d>Ai4!Bv(g%wqvjM`HhE+rk*os
z+@8v$B{$#Ge%=|A{1B}}ANhi2(w<?4f&Evy8i$N3ofN+)C2QexnKA0Bb)22pzKynd
znX!6}U9XmmQ&n33O3|J_mvFvbyRJQP?EIQjoVD56hi$mK_ZxbXu6U2D+B4dx`!(mZ
z1GN8c&d0W*UxzUD+b;-nZ}xgzjF9YY{cx<)OMqWR*OZ+mMfg>Ow(dvk&R}_0&^X*!
z@;~PjHRVa|I1i=~G)DVW>q3Y0pn2LS@MU#lDJ&Ut2a{4c56KXQd6-P*cwh*S=DH5(
zv=S-4t>E6)TUK!IMb@=es8$iy6mhDsF2YS`ij_{S4EN1JNPVd;LT*O*?h4hw&)O|0
zEV8J&PGwNiIrnH=+1b`o2>I;n7#BU|(n7;;_Z?~s*FJY|YyJI%$HT)r5BT+T#be>|
zAAhDgD1HCvSEG}knf&23HdmWP9~{tsl=3NKBjIhMnB9HdKd4FYair?{zf@CnOxKV$
zM0boIoQk=!mhTeSH9*in|Hz7x%$Ha*izTTEZYu~+ITHDzc60Z-3-f}E&7Yn2RMofC
z6sBF8H2ujpZK;YnVc3d23H17=9~N-F==P3zbP`SKIbBh-+qdbe#fp06;<>TQ7jX5F
z#h8I&Y`(<Ugko&GHp_iSMj$iH2c%GF{RTkdHW`irDJ3kxY?MXlO+e{WPyF<FL{P9X
zPaCFvR=R)gnLnZ!U%m{u<cogU*mppQ_J+1VIbK~%X>FRD`iw&X9tBkI0ICpOPm*-`
zZ#+6f6k+lU=bj&tf@K7VIYR)q^U$sl3Mq6w8^7TCxD{KMQ{B<U59PY1J-`asEN$*>
z)$yD5j2Dg<0f&k7{=du|r-@08*p%<wWuk))PcY3lfpi<1I^gtg(ELnk4=i3ts$3tB
z)xLD`t+}q%EdWMO*8u^=N<cBx{iB)#?I(o{@IVpZB;{cKT*&!k9xAYrobNOz%U_}9
zN{io+akIbv<A8fCfa)@9hz_QQV$Bp>kiko4g}4{uY;PCs{PB(7E;R*re}_gtca^dz
z?Rv<B2akRl5xijW#&Lz(pV=($$cP6yU2<pJI{FaJT+fw%ZqT{Y6@&JY_QngZF{R_Z
zuY_)o@m1H$@$KyCQNZ{HxV3cF5Fi|!reG<_z@Gdx8fk<|zl1P2l#SY#6I^E@$XzsZ
z3@aT?GudR<I@RHFvMzw3HdONVfPurOCL7lcdwHRM*3%~KtbJKcGf^9}9J=T<{E8rT
zJnseQ@Hzvn4E14Nj<d&#Q>EnKU1;VDQ5$YN`r#D=&5qdJcW#vGs5Y<qVmeoDenLOw
zeC`A<mH;p2W+x{J6Gn>XgFeR(9OhE-)n`TkFPGY&APge8w$q?9Z=*mD7X}%%v1V_y
zkr<l1k-kh9x*nyoG$(8A)FuK^3!kH3xW-ps_rStG1T3oF>i{71@A?yaL18B57-A12
z+4!95DHw#?m{;D>H++kq;iUXN7z`MO8kQ+y1G<hc2T0BV(K|}S<Z~K5r(k&k#w|id
zSu8X?gxM@?)ghKbSGcq<+O2VY{NCGxTcXdZ<KA~lt-IamF1GUC=SnA6ktX6~9_kc$
zHv#WdMm{`X1{gE}c-N^#LRK>&nJS3XX_O~HNK_!6f;2a1SG5QC3%n=NC->6~I4(*+
z0Y&@+VJG&76e+=c|KIqL{0v#all_cd=r<l2k^!608q1hMr77!~(@}Odc>PyPf<p$r
zPc6HjxU|p|JoJoqo6?}*X)|8A7#=)z_KpuzqxrJGcJHOrX~JsGANpsfLtCx=x{_Om
zIFDdXJG750Pbfype-==SIUNkF1w$Ke;X#<hgif2f1?UW+(mVSvt_|+w7udi60#|B%
zVl<HSYzS%ylT5myzd)IGlZHo{wPV#k{XTPh@~|P=O-5aA2o&w^`3r9HJDXcIUlAUS
za;;je3p~cc67b5l0C_CO6C@-|=>*?&6((wcWu0j?3Pq7XAj8?@6?0q|d^#>m`Rixi
zb(a->q5U3VDqZ->kINpvwAiEuN4EUHIBi-DI>UyX+VQuEF`Dt$Jese)JcRS*fA8+w
zcbc}Ebv;@cfYPB}oGL#7r$Te;bDznt&pSzX(qkoNM7T#Bg$MXaox#8w!~>+GAI$*I
z!aJkZSBy-x#Mr3Rh2Udi5B)MoAp6@pRE>aM_ks4Vw(g7Rn<B#d55LP|T!4yRJ*#~(
z!&PbKL5$5AJ8Tk=j@gq2{`fKM(rjIJ2lzm1L0Z)kK=NANs8*%f5A~n|f6b`Yzs+!{
zX&IJMVVx*Oo7dz{VG5Vr6~PMd*ZQTrG-lPCnj_NqI1Sozo+?bcqz)TBaznV~ndO~m
zw#D>>YxA}{O&cjRGyJaySJ8)NHSPQ)HO_tQL8kon{)kD84e2?tS^f0KwZE4f8_D_n
zDdQfdKP!mDQnC(I-UuUN)Z?%LlB;GspmYSNBwn96++a4<tabZX`|@M0cdoKnIexFD
za{M>ZaxcWkTBBu)-g1B#)EQxbf*WjhSY+VUK!mLhrVjBUO%t{C-Zbs-pIg715cxFC
zeA;M;J}`f$buV~Kv)kGYg)jMOBY(5HNrS?t49dC{{7rm+J$kko-#3s3PGStIkv0M9
zU;qoOVRS^!XwZ_!CSZf<kF=YsQ2S83OB>M%N~^ow&@jI7JRwFfI!LskPSsDM1$-lb
zvj(^{^bbmM*Cnmf^L3{xfdH8c?&5`oOCdmulo#j_n(O*b`@A#!4WIX+$+hUpf9SJ{
z>25cErW$U~d)0~p2;DCM3xfe+i0)Gf0PVg*BB3#Yu8o4O36<i=;5i|sK!^a7K}Z4*
zPyopzd7q_y=}^}Xw4V0b32l$IouzAE(q{ZM`nxODRY0pXh23N)fwirGX$)WrB846v
z5CD_>vd(06GVy}p`64Dbbf3j^69#2@KkdR0?PFTP)7YBoZW>`WzDCSj_t*Fe#aB$a
zmp-6jowEJO8W90$B*Fut`sT3HqzW%9#J_5U*EiE{Gt#;2WX`=aHa^DHF;~g7{l;#e
z;MMH6W8%BtXb0Fy!%obo41(Z-aNPz>odAC!IwT_SHYhH8R{gyyT^m4~&}Y;W|9o)S
zcw11|R`)XY1A4(Rk3@Qc&>M6G4K7~1xD~2FW9_Eu_~$&nJ_lbPD8CN>4(ii<2Mg$q
zFnj`ZcF~4N3V4M+qrIgKNPqP2M-4mwj<{?n65lUlpYx9RK4xUVEb@uMDkn8c0f<kj
za`qyOglvM8zi!bzAM8D^?9v*ti>^8XH&finJRDgo95Hj*72gaH;qcEAFO@^ggQ>9Z
zt5?<LGrs*+!0^6uhAl)?ltXHuL(T|F2RWq6%NfDwAmA{YXR?LoFVl4845dX3vNFtl
zgMX)VgXNlw#2fjoIFNLl@JtCD>V)M(s33Nx#0l~amM2GWz9Y_D8R<s~(ZS;Rd`C2*
zlMp;M-y;!i&h%w2Ks(B^L&n0pno)#sGJXlysy7TGJTpc_obA~LIHU}*Y(^NHyLHVm
zIHwYSSsrfS>I3y#3=Gq*8EM4nBUO<-Rc4`D)Z78-!?(ANHv~OUr);jm{_{}fan{_H
zoL@p&>*jRZn@l;s&vmz1+d|7}WzsRK46qfHHU%!Y`?`_{{FxCy?C6Pt0s~Uv)X||c
zpTI$Z!R0T#Ak6&K3ZR|Arq33{3qQRu<yGl!Gjja2D3;{vcV8&4qq%7?O`JIO$sLCb
zOuJ&@ArCF+(IsnsRX$5_6YYIfSuw*vTo>V%|LW}~O?&4b<jM@K#{|Vdi!t`O7{?n*
zFF@`eYtzBjHE91C=Hx*ls^*L~3!X1RZhnC{%wjkkGKF|$O__{H8g0TGAtVj`s>@h2
zH5r#&ob}Fig+rIE_w_3mnf6boPG@o>l;BTTc?UZ6<<Xqe;IHf<G>DcMl<$xC9SKF}
z{KSr6wT#q5%yc7gZGm;$P6Y3L1f~OBqoxTul*$B1uQJY$mZ10sn6fn1idmWtf)X0A
z9VrYR!RT?>v7}9d#?wUY&ua6WJ)<`FRJg$q_sHp<K|FZ*tbU!dXN-A7>8i|NId{qQ
z#}qpD?b%Hm)!kP;*Y!%LVh2}e(1Q=E{29Pr;QmpGQF>sOrIK-;IU~W-0oSbpX9AJB
zPD1|Sl!W{QHpRI%fevyGNkBv*%r^&w{_a0{ES|RzEDjhDX!Y<>3YTS+(I}&Wa8VjK
zW{XYE8>X)LazZGN*m~!Qa~BiLu5rqwAzP;}dEk0ZmpKJ=xxt_YcZsHt+*((ACk<K)
zx6r58=8ap(lzF=cj^Xpz=!FTjGa5D*e53<d$VfvxH2Yqj-bp5)_fFDMqL)4BT@|yO
zntZ7`2&?#ejo_AzlySmnFg`H7rmPhGuo^|~h|wq_g<Uso&)goKaNYU9!1#jnjt_=K
zoXf1*#7BQZCmeW(G0Qihv`d$MpHy#!XY*IByV4i<PlPQ$){j5x5XwoaU+5VzlD?!?
z5dj7k5h5Ii{%Cht10zA0#2G$P6IlZY%UkU#m%*THJLYbwU9zt1EHxTeUca!RESZL!
zJ<vOo^2%D;nQN2ZZ?Sstnn~M}%rl?Z`KpQ2T3tI%EAN#%eZrF#BTK$V%eXRU9KH9`
zXVnTD)cwU-iZX9<^O*|!{^$eggQsw1G(9s|;fFW2hg_(Je=HocCW<sBjwrvp1iiO1
zB7kWkd#mdvLb3(AC4hY77uYObJ_OE0D;MqCv&k}5yFN|j!PBSqS*cwY42i$BhAEfd
zboF5evTYLpO|^#a%cwESRYi<0g4Fknfm9WAKxzmBiI8Dcj<9_H6h)77g=du(l>%|#
z>{+y~cJ(!ybdL>eE|L@bwrM&<X-F+C`>`I)n;>!^;;7nPtqsdkZ$OKTBTYQt3}DWZ
zOfkBZCf~q0Ld^~&_{AcV%oi2`OUB#>PZpzSw^)!RSzia_$G5B(pKsN}T0irlS|<~c
zCfT}NBuff-?mhaSGmJ%E4`J+aWhS+>=*xOEZP`~sM}Y~V%m!{kNo&7ZqfZn$Yjou3
zN|lc$r3M)!v?`}To&X{S2ol5NuAvu~A$TqZ<Z(M~PRDE6z}Q*((p2qj1F3$!5pAyJ
zyEb9&BAU<afa1UOAbdf(B5VTHG=vI4hx&lpFdB0yjV$m$EeB2qRH_~NML-u)p(Ld0
zgeElx{X&n>J1I|<{fU!W4>-cVoRWd8+bC$#Dh@`SGSg~)Wr<t#9qY1JM=rOneRJcc
zP&Q4wHcg?%DbsuMg&<n|ocv&)hqdd+lt%L&S6IJ}`xSobSiGw%JCvC^j?cHc@>ykO
z>Uac6Tuf<*zPnu*u?X}%ig>+||8w7E=8E1!U7DhYLV`NLD*Tw87&+MuzxidMZ^kV>
zy5;d`%&+Mx51Ure51_uLG+Mk#;a|Mz>c$Rbry}zEpi2R0jO2-o0Z8*OM0p$BXI%7|
z9l*dKMgjx|MM?lth#@wj2nTLsG24Z9#U`!&Xjr&aJAM7J4~K^*&<2fIpDs%`s7mjy
z3pXiU*xGwrG);R`VUOM2L_=v~SNEY6O!@1*q0^Z12gu8POdF~s0B=H1^7_Z6fus|P
zbV%qI5>!k|N$WM*B+_L3H6}=pK#j@3#Pq}j$TXHJ09}<XEU7V-Dp4^j&&=B~U<4)v
zr;23;ZQ>9rlYw<?H?Ldw%(<givV`ZgzZY|5ibm8g=)~ngmrpclI&|1nrcBUUj8gbs
zp@E<mZP5#%fp~inF#Z8TPgg%=FQj53x&#sJ=Ti}KJRqM7>WJM+Z5BUu1YObP1WS6Z
zyk50dtz8{8<w>79(ih4|?;hDR$FGVGhB~r*I=!1k-Ls&Nyfd?D<GkmpXSo_UxiXQy
zHB8|LwvF-3VIB${K8&<=D&Zoi>meB_?euX7n7uWs6+)waj&!Ff#FNxTA(+LK1NMvR
zTiK0<nVb480KrmI!ssV+8t~j;WrnLUIP~%@FjFWoxqsjv0fG!N#PjKZuO)$3Bw_M6
zS&~pSouNS@D@UYWg!`!s5K_^;OJ{15v@w&Ao#4BRxg|V7Fct)}Kt6LCgom{z_a$46
zg&T;?G%p&U9XG+MJ@U%8OuNBWw-^=@v9k86$Gajj_SM|OzcL!EJk@0sE$o(IE&pcA
zn~c4_lRnB?H0WkC*?KSRH)d-u&d%;(+gLO7u7Ml&xY`Q(ke5$HqeIa;Vs-bMBibxd
z@1vp2`2cnxA04#rm&_)r#Z)<BM95#}l*>qq5#*j_ml@}*Y5w8N!vhUTrRFx#9s54I
zGIY?E%q{iQR@$GRxV|kaWz_IhJY&zVXN^9g!2<h@ki*s$d?QNN{pFm~;R_Hpk$^l>
z3<Y5_B`Q!eKu&`r0vcMT2O6(iN%)swcF%Th-yJoBCd^WJ@Tg^d9;QjJY5z=qn6pcV
z*=w%mwpt^(GLE_LodQGy!CC78qWk)kbigDL>KD3!>m)LV7swGlB`|<9w3rsS{?P6m
zrOC*?{q)``v`fh}crAXxulstG^hN`yFkm+5pOf=hH|m@uM2IS<>Ny3=lLwM?F8!sn
zh<`#Ujn~R<cGFJY>_&qkY03L^6?5D>#h!5uP#U`Wvi(A~90UgP0AHX#Ne3)|UDhx~
zVdv<a-ARHy{v^-o-~J>SPT)WfMke$-`hYh3OYPf-ZfS4Q&F8@P|DnxYS6tU=5A7f;
zWr(c0-_zPD4*;GB@_=WCN=;FRM>>}D3yBV)Bol++C6&QGZOVfTgCRXF+YU}<2LK;p
zSxZCL!>wMKonIc4y{cK0N}55pvz_<S*RF`U#FTN<lw5rOGE|b^@%=zAlm1DaMg#2A
z|FxHC8rAAlZ?drgT4o*IG4&_*!wI&Q{diQ&jcjc*``yqSk}3=R&UZxQJA-B33%nMU
zCf`JL#+XE=JUR#w2|G(DhtTh%GOY$A(jgr)f*Gvz<(-{7M<qc)USK(zoZ5(%=Rapl
zO*`JYnJGmv&d@fO%%1b&2RRv2LOu$*aGkauyRZ4JYi|xM+BW=V*;6HeCPlkLKZln{
zYG?nIS8Rbp=<JI${6+1K;dS8bDQyF*Ff@Xl1K1Pup+q}l5@jB0OnzmoAM9#ujD+0?
zh)c1k1LhS}Te0fF3L^_0VCrB2=o{@MpwpY}dBWR^S8F8}X<OfEe(U<1g9~>8%sr($
zOK(5-es21-kdK1TpVoFw5LoO+rz?keQ{)~Y$IqNE7S2TH`{!Q@_kq9G4TBGhR?KFH
zRd~AKMySUHug)$NiHb$Yc2y1;25ukKdCt^^>5aOFp9_6^Q|Ec>8a3%1#uI10Gl8)d
zGgIl1-t5)uoVDCIvKO?DFSWJw56Bo{ab(tb40K(?-@Ndo5W!?C0)5I%?`*ja>V==y
zYM-z;*ceTR2%R35#-eJon$x;J>(#P3tc;$buN~bXN`jgN+rE`&rbyjSr&N7@`ctZ4
zo58ZT7I6$zWuza)fHA;o8<|$;S&L%>fx-6005L<C@ev3&e)??T$@+VD#>C%!FaKoz
zLmQd)Hw{}c>Y<oWt_qI|+w@V=k2kYu>W6>Q%+xDaQ!hS~w#lIG+&igA_}JZd!Euht
zY=L1OxC8Peb%`G^XvQjMvMSRilk)@8ATf5yLKHZy$?`GMBK=Y*F`^)<O!ytFrJy(@
z2YLjucY%@7W@M?6=H6^^?!9}t9ScgsV|LbgGBJUg-#u|&(Qc@ZwHXzWNb~BjW=~A)
zsoegRS-SV!cJr&MUlira>+~RJ;|E;5i4k|Xuc_0N+o1nk(#Xm3>Vn8&%Q{l4BoPXB
zS;II|{ro8yg4(`Ik2uRVX4~Opw1aPzVp7<xMv-N0HBz}83f+*|U+|~A|MIbSmu;E5
zwJbVe{j?1eD=Uw#e16{kCed*ZRcx&OGosbzaZ^8jEDGnb(>`4_Zi%AIUA}X{(cKq!
z?^wEay27Sz*!AeE`_Aszw2V!ibb6+u%>HD~q*KVknNtPYs)aFn4f8*i%yNcUg^$!T
zQ~{2CDX6534iQOFP9v2Wa7aRgGJ!07)tAdAk`PUPm$0;@2uFCxVaczI^m~LP?HDl^
zAy%yzA(;jv!czE;X~J62hP0X1zRITk7)|3+v>yt!FAKE`DYSNsb}{+)<1~{mWc6JQ
z_`zuhwI6Bh!D%nCGZ>?*+8q`yIhs+d^6>IBDMApN5W$&Ttbf5wv|#OA(xcj{XSL;;
zc84ccU*qqxKV=JL%IoS$Qh-?PoEopI4T_3Qv=C#GO9hd%YWK+@Cy%iU)P$J?;}d$g
zUog>`=UF(H7qG6$nOK-7Udhap?b-glRt{6tlX9OSQtkzdf~G0_(t>O<>~^qIJ@6<D
zl1$9q6ecPuqm31PhlB(@{P*_jZlch5Wzx8b%fq9$54-xBDfsQ7!J*Xfamz1$1LgDK
z1IIiX5laUjE$Z!>+&?nzxvooxM91u*Ka5^kuVU|v7l%TdIyqoqr&hzuQrf(|p>pDs
zr}ljq!IW=K4?s$J&vrA04Qe>FlYPh>dwgz#L6aH_Ps};xJbzWai1@q6vO}^&CF4Fv
z9F{wJ7CJ^l;e?|@u6=>SCDXGqG#cH=I?p;y?ZG;imGq<+S*NlF-C4&5_Fig_;?7FP
z;u0)NYilp=j8$o+_6}I0CVUHn+&9!8!D|w*hOseO;UVGz3|WC5kSfDPnIK|bRv?Cm
z=O2#XDI7_B!3AaFMsWUN5^N5}jc~c9w9*{xgBlifobS?^z~w5oGI;2GcO3;-Tj9F|
zX&a>4YKM%$U}Zyuhl?d_&{HxEQ8;BFtB!%|D$EEsst6@V84bwl%+AVSO7q~Cw`_PO
zEX4BBw)MN&=CECZ7Sy7QcWAyp#nmEq%y%32(DXC$v16`meoFiF<l4wpmubk_S7_4u
zn3&Vs-um*Wc5NN&{p5Z{`Eu{1BNv&n?+I3^u(kixNo+rW8(&?xOZ(<|raVJyzqE_i
zdR9@M*FN35nZ{q3#FclnXWl%nImazil+$z|M)Vjv#5(}HiI8*iJh+t>hnNmLE82rj
zZ)z{);@WAFC$Vq~_D8sH^`p~l63?4ig3Sr$9CJf+2XlY(c=KHIDzj;ja9kw$>WXQU
z8i3GjD0*2XrKO0>*nv1HzJXd1mdUIS#*aCJpv;53eDb(??C5jjLlxd-cH#l!OUvi1
z3ocQRy<FLPU{beUqfN%T?Dcj%XOEn=fZ6MH<jR<^NsAbJa)I_tqr8G;O&{S+i?i}X
z?ssFdfS=~uq48`(Ov^~NQ7lyg=UhZ*^7nWq@{kf`v=EjS;%M+2_?fRD0jzmO7WTrE
z^<0~hc^;if6)aF!YUni*dDx90*H?P5Dutp>vAW-?GS-I!krI;ZyL6_9%cW51`OZvL
zW>sW@iZjibpyI~qnPOlX=U1lry^xpISlmrFJBq3tMRKWXOW$MRRsJ_6+W$qXVqvvR
zUj=`HuheQaLO%uH$;!^QO0kulJ@tOnxF&Y&l}$TnwvTA(>XHo)QL<)>%3HK*WuRfm
z4BB8|G{l(G;_>M{#)gD6D1VH7d|#?Ov0J;cPf_;LIzIaSL3@e!pz6x04f|&oj;u8&
zsVTzE8M(ciwo+D7-rU}>3Dy@;8m1cgY4squMm*w%0)KKTAMp_$#!Zaci>_gbY?o@p
z76goZ%XhHbm;)iuIla+uX|svZil~AbUup6+AP70ecPY?XDtLg0A$YlYR(hJ@D%)Q%
z_EE;3sTj9ry`i|EsF%r5KfkE2^6ZQk7~4I5`g4qJn^?D9hqA)<-2g=dqWT6^1r!ma
zd5vtUvG}nx`+n;rg~jieB<obeMKXZsC2~(Cg<=^wddyDKrdirsWq+4x$FgYa(!csw
zAIaqH_`%!S20Gz3?R&TSCqet&;fMG`JpumijmHFJGfAgaB)s0SJ`6ZntV}^e5Lu8P
z@|=SF9tO+1P7Cp@e**HUAgFZsTfKOTU@Cjj^-KcoIwUkGBV$<H`$3h9mu+F{-Y!dN
zH@59b8s4=@M$Tlma0_EgDpt*~_hJIlq3khE)z{$%y5DL#=_UrGP7>!`P3KI(nmK1a
zLGo-UOf)t~pw8$As)=}Nnk&<N)5aN<E_;_4mo9pT*mJV)6`;9D&I`Zp7<F36wt6Ld
zIvw1-w7p5Km(eY$%J|IEl{+}!*03REC)O?5#ojg!Deho0Pa3RDVTE~VnT_fAxs1;k
zF|&E}fW{TeI9oA=_NbrRO%;896;b!w(&PS!AZ!_G_cCXY&mbq3aRSO_wh*4kb9p1)
zkq_Vx@_GDGzKy@YkMXnoOa2qT$IXNO7j>rmFX~Jclt$C(^R%t@);|WKoq=_50p8A~
zu)m{7UuURA$OI1y3~+e{_>H95qdRT`{GU4g``Z%urVtD8Zi2)S7E2S(Tl)JLgK_yo
z{T`+Xul*e~e*U0Nec`i(i`(^h&)r;^z^d<^YCVV*Xl>LlfXQW0Eq+uhp~>VrS%^qw
z_P{9JI69k_01L%}65&ilOv578G=eQCn6-cL`R}7FH0LrcbFm=GwKEs6s^)Gtw7!`o
z(Jy#k%w@B*9;N;4$)pegpi;qI(+yc$v7Dtj%)<e~JUlE`t@LS$>z=^jc`cu|g$E-X
zx~f<cBn%K;Y6wl-Z>I@oSdf@pPAZd~3JUEY!5Ao8f^%nQ+rN%(()5kPK^2jq!_#w3
z&BFRNnYLJcUhVmSk*^UnbrmyyHF&0hG)LBmFDENNVCfUze}S%V9@H$*g-kSx1-hZ{
z4mpubr^KV_l-kctqk_vGX9xH^tSJhEWm4it5JJ;1CQIIdv>c1CRpH}K@LgimF}1vW
z)-E<z0Na&;QIC1cT5otN*kC@laouwvYS=kD=W5FaohC(u(1<CWCq=05C}%gec;Pe@
zpUq95{YYz<k?}x#%BPGRRk)n<iji3B^(UFnAK}}e4{XP5Gm`CeDG_?YTk!wIsV^Yg
za3A>NW}J7>I1)sSWIx*ijR9jUhDS$OK_T98;+?smFVw{%-XQsIbG8%jJj4F>y(4KI
z7?AHghIgFcXrleY@}2!yizZg3Jx6x4ZTfdoq3)*2cVN+6(B|>>N_W^p86qPV{t^L7
z8mgqhjZm573q*=tN8<9GidmR~|MH<YW8*xlo}t$Q#n7|_Vnw#Tv`RopHNFjmQQ69%
zUVU0EiZm6sZacz46T-B=&c6CtNXT>R`&enYH>@gytIOv)+n0@>)T|d=Abr`1uN3xv
z<(?<!bX`I1aD?=1B@UnsH}V3F6JXgzfM<BMP~EJP{n00)ywH7^&PbW@=7<bP(02r`
z#c+nm>^QN0!!Il?NXuVpMtO7Ru)tjSfu+GJ)^1=mvEljZEqPk`CG8ph7r&b0dM%&c
z$kEbESigH4Xij@%?H^JdH?<u%wV4!~+tkL4ibr--lClo7AMrG7WMc}IQAsS_2sTNl
zufj#H2J*h;k`8QbqgFYMinKc*=0jjQTPU|%sFh+dGmWRiem{JN4&0#a`u)&v+FrVp
zmeI0p+8JtpSv#e@yPcM5XN9E{>fWP1s{SH#MY2f`4^;-N<IwTwpKgGtwSP*tGc7|#
zOw!Db_$p^YQih<G1hc~isIZt#xHhotCJH8vRX8>{!hTq)COnxS8;USgY-to5ylwvE
zvu~}+4oW^vbN{n{!H6@j%+64Av_)Eo8pN6wjoNuG-NIJ8&KC81;{6^mtj*)}_ZzgV
z;RV{w!IW+b=(QW##oF2->|@icT|0*4Nmct{F<t92*H+bUX{F#NaZtARfM!JAa=Fti
zJsiRdXsQZiE|O+y{2Yu(2M1)Q+4IW`?apWHi}VG*Fq@DxA`KXerP3i}EMnD>P+ziH
zetzYT)DRJ}RnvC-P^4XVo$PdK%F~hIBZsLDtnQ?DPCr&vLA7si6{>Zjv&IjZEOI|d
z0^%q047IQaMptKEzA#t)n1>#~*O%1>(mvc0et}B|%!OPZ;4;m@v!XH_!V%$EF?qA?
zv3AdLe<<=zxPTnPM2it#t3_i!J$NRBr}j@U2GyBe!c5w|5B5#zR6f1kq_Cje<q6T8
zr}j=(gC1zwV|1j_`HMdd%6mKNb$_x+X1!q>r<5G}h_SNo?5tDkf}xul*Q;N*>tpS*
zoAls(=1f70!R{M|=}J$m<S2p_^rbVt@dJX8;?0h_RpMCc9VHpB(;c1x*?>B&2F`hw
zB-ODHPc~pkzH@B|5)To%^UG=y%QdCf_;6@+QZ($P1kX!$dBT1`hg0nNc99}wr-Lf}
zy?I~@eu+53<je7)Sgc;I=kxVBBF&Cs&!iAR*P5h4f#FOs64p{*`cx_Mr-T`s4gP9~
zrCFXlDrLlP6QBQa{Ik7Otj7KI*)Wxdk7_eMO#42F#+`b9_@={ed=wY&S{OWbZ1>08
zJ@9aKi=nf#9v!hfB)AQq^g?esMYt5A)yJMxXwN4`?tO_hw$*}Hr}+a>yN@X9xXEHU
z-i4<oEMzP%?adkIyS+|%uT~{Z**?RKl#KM5m_x<LLhNeDg+$H;Jw|xEo)KoOYxPj2
z+>=75O5GjpjEI-<JlI7xUtmBeC4Spa2x*PnF;7kaRy4#~J-h=H3BEzIWHy#Z%-H$i
zzO7;mY1+~6mYf|M8n)u|N0v-5^f}*TPxq}8E^m0FvG!f!$Ok5G3=i$wd(`?As~Wpa
zJLxRezSs7te8J_V8*VOON{7`8<}EI7ne%nYqRC5KMRju6o+T3>;r!`s3qg%`G9U5x
zOZXKI?%Yfog?_sq2uE+Ip6u$7j!dDfAuZPtRdd^_|3cSbP+`e3M4?pUJjq4!r;=P9
zUz^`>?PmR3W2=_|En5v->-)(XU8jlI{H)h<$URq#{!7f4ME6vsOnC#)*)SG;owYq<
zQQPb=S2=J@@s3D9rhpz{^+&uTv&xYK-)&%qS*<EZh7c=o0eBfV)=`R#OUclYRVG+C
z666r(mMk0+KYIHgn+BARJow~P6AOyo`uC>3y~Z4Ta#j$hkxDQfnVPm}EB16VYP*ta
zP1ulx6;Mx6brqv2>*$3QZ#C@s6xN&2q>V@>dZ#R-xQHc%vTu1oeb>)Hls&V%laTty
zVJ9TPnu&xjakNuONfjId(VQgoRcs3cMMe*~$O}n;x|L9)1sK8vH9AA&N!WCL{9B+Q
zFioN+*`p>uRx(9TwufDbj(Oz0d0Ph$*RIhXG-<+=joW30tVs8m-J?h5+~E($vxEcM
z-9=oPtWo1`*O#+AIkGb0W4zV`uG4Lsr4B&oE!aSTEB|yxr}H++wQUsg<29Oq+6)n)
zUyT1z-+@faAh7Xj)PCJ0k%COW2#74}Z3+wAZ-ufmN}Art;0wr!0;luG6Py};`8<Nt
z1+4P2*^I_4gp{yfkj-kXQID{49ShVEYm>UT;nnJwPxgK4_vtb9unz`R+gI_4xvuFC
zuzGb|=UXAwXKt4{$NCT2awe(3WC)raNtJChY7fn&(X<V-U@`1Z+T27Q%6|=KZ#%T}
zEt`&?BW6ZJNRsy<No=r$%E)dHP6DPuKtgQI;vb`_mY}D&Dra$=OpPsuuqcN0pHiG(
z%%)UE__1=B^?nP(oYC?HXJRd>pJ9PemY);=N!9hcgd_9cJDOpN3FZ$O?8}|aPRq)c
zV!~z=37n-OY$`-?7V3yxsm=+@_x$~!v*f8$%a8PkjCZXz4jJ^wbIn?PI)D73(tV#j
z_TFGKHpJ`EdBQpiQ;pA!S#9Mf7k5dbBf_}airK!~bVOlYT5ndA1z)dvdfY<A*z@(q
zO<3nPn-#YD?xs=0Co}%ymY9~egZS=kNCSPUd5es)W}wp_m5cnG0rsuXRTX#?6o^v;
zHu*9jot}6%{lc7Nf~7d*K6!^Dj44J)Rjzo}V9=QCY@@M++WEQ9=Dl={Hs7P%j8WIE
zRjkx3Ex+5!2)0+f2YuKo*1=+G%N;J9O*y^=g%>_H=)fXkWGO}tklZmV4XOGb|B3LW
z-CjPR?>x3_aG$vq#=PA8b|yo;+W8&Ttp4+6^yo8ha?je0n-}IbYK8t>Qm*jx;3+Yr
zrL??*5R=G%IU*<}C_jh`FSLlBVi5rX72!HVcQy^DQ^X^Seg|{N6TuSc2lb#!Nq2Pp
zWJq~CKW|(#EU9R8QLRq#`-~3_O~|h(OzIq`{yB3?WLXsDLxQJoXAzCf_ys%gan=jb
z>}JT8+5H3Q^g%OWPmX21)E_+eR*=!7n+d(psl>7RhBS<WcOMZsorUPdrbh;mz+;8#
zfWU4keQ`y-cIJdD(HVxc9<3hjv1$1YyuXIuVz7r`wR+!|GenARu`LJQ&n^|4pBZSa
zwPO-&-&oW5tzH`@AKf6<O1lqfAJI~B4R41^k9W<EX`Xk=Rt$|#yAhkAebi&!j1y~b
zpbxJqaeM{f%_2_(iLX9Edr4b)JHN#%07n+tfNU)z*+8+R4ZPl=9b=Eck~K;jPprW~
z+*b|`s0;(|h0f|dH(ot7srHSO?A4ErORRk(F-tqveZz`xPW-Z~`<|IsD}NUl+fILF
z<M=h`|7P$6tm)AQPpBTTF-C&{)2hT?T1wZBm_-c_kHV2J=hxW$(Y41dW^Cc$v<VNR
zCxz}is@OLcJHQwTZ0{)gF(AfHFnj~f*cXm0V3QFgz|JoOHolV?rC(m|?E>@6PK#*q
zQ_p@%X@|2|PqmcN<uP;xaC)1}XGVAv<a=Uc6r=QUa4{AZBYb9@*8h}hFQ282_V8`m
zf>>=X-9;A(-w&zaXVlu@eJ0s6@hLlYh#V~Td90ATH3II@aIV}@D}mGfWE#8!Sc@d2
zh3-*sgaNGr{x<HP6bIHyX6o`pDs{RDsWFT)L*yPsnOGU+7s-Vn@LQM!vstJk*bEbU
zqTpz&a@a7rY$>*U8z1D{WrI4M=Jz%t!#0@`jZMe`cFCYNkMjmvu~40ji0Y@?tzzki
z)tHr?!4dC=`Q1l*(-agsb6Bs5q01|_{X8M|rNq6ldlR>|r@j9kxvEj$KHAM;v~!~N
zS}X*J(xRkif67w-sHM==zinch=WnKP$C(*R{>{b|?IPVgAJ}+|_2L@l-v7AEAOEEK
zXdT{;^+Hwv{P09skJSmWh(2N`QGs8HJzb7VZ=tRq2gsyYcwl1TI+X9!<SavW{A=Zc
zpBF+fSm4zgJjcofJ=a0t1VUD>T@W6MwwrcjJ#NaR=1+U>>iWQ{86y^3OkZYwxQR^{
ziS3D4$WZ+LWyaEDZx^s3ed=K$15^w29cwL=uMKgqoGYA4d;+ASr%N(<L+^$3yXgIs
z9!LE`CX(r0s#)rQbPd0-nDoB*83mZ+f)1fu)^xzLBEw!}RgrVIzt01MW<`XZ!}<&D
zs#um0n(+I{$OF`_xwUI*T4<lHT>-vWnlZ@n0XHVz4aTUTAI3040&L5=<V|OEy?i0(
zk?NQWy-^I2#J%1hsUzuKkP5SYp*zXsJ9!wdJpD<)u-52RqUlUj^K2T6iyU0!2!ud;
z`q!}f<!C!%16B@+@l6-nxFZ{iJ#h11OH{DLCc|C?6~a60cF*Q^TnxQjx)Kui!(sby
zEM4g^F2YQ^7&2(^h2UPhyEk7mb>Q+C(-)Z^ZPKo7()Mpsu4~th(IkPs-p4;+GzKeM
zI&~PFasDc$nbu$OS-(N`sKl=%5lJD&?x6P^@{}_=SL85wFdBdmIrRUZ=nX)kzOk}I
zd=`+H_5Vg9wj2iHfHjym*mbGSzY!<MD-+VW)GFx8;!kfjeZkN7&PIcPwa(+hB52>>
zq)iK6-a<QKz1y`PdbJolJ3RDU<~c9o1jZgba7wNP>eiv0cKKvXZ>A>Q4OY`a`gZn^
zB$fw(S7SvhTgo%QA=-OTC8vzVJMr~y`^U?mN;&TzE7OByw)+Rk%Kpb7*?mJ~RP2_=
z;<*J9sMG_S^ib=t$vhw+-l?c^KP0i|rqA0BC}Es<-1&5i?#}l(^RZW``&YIB5puC+
zz`N^#G|u$4^?nPdK%`%zusZy9RTd6Kxlc0mW#QPj*s%qvQSLx$r@0TW4~aB8A6v05
zB*N?rVI9X<6O^vwtf9(*^?SED6s2<g*4>r#ufk!7rd7oc<Axn#JbrfHVQY9gtS9dd
ze$s-};nEqgFDm%5hy~^msD}R)4U|p}K>Xj)z<-4Sok{7*m@3d>{x{LUpZ+(&KziZ-
z5e#JR-!Qt1cq}4VfqQA{eXTK&{r1xI8w%fEnjv!ec+Fm#U^h@RL4tN_wPUl~p((v<
zy_=-LU;gx2t^ek{DB6nd+qLUSdYNhU`DgJ0>uzBE2_6GfPV`Wk%$3t2(PMbRx#~w^
zPGgv7X?OnNb;jMWC@K^D;;w3fH0vX4%=%~_@XjQo2-O1N*w_f`1`ts5sC$UH#zNy0
z0p=`Y-aLA<mUg^BaqEhuOgXxI-qY&aylzfu%OGQ3VS@&6qd)N!eKdiwr85@oVr<1|
zmXl0b^OAxF*hU_KRP<>cc2kZfsrpI-N!I_>E075FDLv?wH<qRM$}d~s@UEDbVmy&&
zzhoH5N26GrC~O~3KkUMr$Ppulnk3W1Sch<R%2P!hhK!lZl-CzOwk1fh(3l(NT9+9(
zH+HStB`BO{Kd<%})nfIug*zE@tS|cTme!^uD?X-u%lhR)`eUHj35-$T-kExD^yEed
z+{%g{rim(SU_c0k70c||ey!J4dPp0a%qFtOU6XL!2VF`5u2ymzbkG#Yjzu0Ckiu4P
zzs7l3+bFiHo{xR=;tsE?y}LFW^m0M%X0^N3=7SEC+UDA@%>7uz;a%33#BOY?wpc^y
z47JwANpO`~J{aMMtxWS>0#=b;XD~qhhd@9ng)qfdDnbR3Hl?Ms<|kXhmyb}`OOHIf
zh4Zbw8GCy9+zr2|^=jv|4Km``zFu(0%!WooR%%v5)~=#`lPQxIF+O|5g3gVGk6*}U
zXdN=LbMrEC^Jzt^I$5@?x<E44?A~FIfCmZ6dC-Fksb=fAkouP3ysAY8Bh>uEyVRFd
zU?LPdyXC21M$oGK=v@qoKNYQu*)6CD%6X!HzwL<Gp^Ku&m<J#p1rymG+mv~`zI^(M
zoYrk7EmA;1OCC2Wk#6!`LfD7J#SzTdrd~UvvCby7L+>KS9-Y4UdB$GYP<H+@f94*m
z(>1qkXM5dJVY{xtI2+aDusWWF)v;N(I^^&Qn<5foL)071Hp4nO=(SF2>IGUSs5h0Z
z;s*5q>OC*pgN-HhEImn8#zmL2RqPk_1nRut|4lg?#W#iLKzwsG+sy0BwqEpaD<CdA
z3vJy~kD{#uvQE4ot%|m+Rl={I=56t5)UH;Kq4q)lFV{HX620}jdxtZG5v8>Y-mLtC
z*pwNb%_+`Ek7pC@8oU~+4wCGvE-angv-ve5hP&VyaaM4w-DW<{B8&s@8vm7zpbI}g
zop52)0z}euu&CZmgow?OUb9(VHZLlwc*%Bf65aj8&%QnL_I=V?-!yM`t54a|SJ*7d
z7T0W@$ChdpHCyLVZ9e$D-0{(f97oudB0}AYwu1-3YlBMBBd{5YKTCp<k+pyDt38AM
zjoPqo;Rguwt8>a|uW4}&`T0IAM)=kK#8_NYdmWa_6nk5Y@vHLzgp7m{7X5ha%28Sa
z`?{KU*V3(Yqu28heF-EWsjjb9PwcaZTG`ScFo(X3cimzSD&-wx8SdBd_B@i7={>KB
zT6=r-U$tk@H}6wh{P`9^!Jf7o*0jBbynLV9=78E}Pi@gZa*39q6}ju2gb?gVjE(!O
zuNBGY#n`CcR#2Ni=vR9NnTy&O8|+kK@T=3@DB$w6xW+yCJ}n0M)$V2#aG|z<%l)K;
z3%yg<$uX-h;aW%2FlJtwsY$%iF(-E@lQiSWfoMhh_~@aAkJ!B5{CDjc%y6IDX#uqb
zt$EsBL+;(Dc1A#LL2I7c>#z-J4cs-5qzBX%REOG<>TH7QJbN$6{*-y?rpWhAX<JKP
z=50mp)Z|xt2K~-gyJodTY(Q<%A5YtB$Y;LVHEqWQ)D{q;wxk<PLI{IK9V5T_fP_%c
zYR#P1IkF?f+lt)H#X!(XYfpd3DzxSu&6-GVU0-b_*RS>r3YWxx)vo7Pn;59KZ39`8
z|KD{B{OZQ4?wY#mTDt$M-F&~g5$Z)xU1&n%dy84;=}G^Zo~$L8pz*;I8kg@Vx#Vcz
z;Rm@|J+bQvYPFSEn?qYjejs<~kUeV;JQzqT{EZ8LUz~6%=yWIQ#?{m{k{ML+mVejQ
zDaq5az=EgcHTa7@|E`<q?U}4AdxpBAXDvj}pz~3;dK)b~>Va*^ZM_A_2Lx<7A3$Ah
z^Q$|fpr&q(4@Kt(W~e!Tsdv2X8p#@W7W|!F*lJqV`GIKJAUP?Zko=&N`!;ar0w=92
zN3Ms2Ze4%3;5*o#rIxo>a&5ZAS5MRcCnHb#@FnG@=s}`iZR|$?s64f2&^Gs}o#a=$
zuB0(h8#LCa2D>#aC;Qixkb3H_>smu&HFX1EmLq|>VkCx%k&x?VC2Zy1p6v9&CbcKg
zlW6bv{#|<p?c%FlvzpQ?=e%tTIuUK7CoOAwQq!{4zhwy>>I&$_0Xol$O$pr~3Ed3w
z$D{P|lrvvI7v*WgQ(Lxy+M*3RPOvZt`2~B|iOgX*)Wt1Wrcj4jB<hIk?lu2cL9R8X
zhgc8x75kfK^PYSKckpwVUtvmyvKanqrY=*@8j1~18_pRA7~eNuGTsad3n~rj8+6=M
z0S9Ad@WSBtLc&72g&YmJ7itad6#97Rk+7h!c41G4-3;#>{%k~SM9YX}5&tn8%-zh(
z%qPs(&01tuWar4SkxQe3qDDu(Zb`DNwp@xXkKP&mSxk1!_?V@!B(`(x_E@)dr1hD&
z=(v$_2jaetuNOZv{^j^P31tc05;i7WObkgJlUS8hmh@E8+qFj2+L7ET`AqVK<Udjl
zrF@tgnc6FLzb)N1)Ap|Iue7+d&S^{1K2G~O?eFxc^t|-7>3?R_&)A=-WX{g&m~|rC
zoV_ah@7mF|chu=rXJMVgb*gg=Ip&;#oUS=zbEfAk&e@;yLC#k>|K!Hz*2#S!_hjyu
zc`fqx)$LjLX1#{>#?(8UUnjpJ|MP<81r-H<7LF{OUAVe%XQ8w3WZ{>ExA6b3`eW-a
zs=vPebM;@Xf2#iH^{>^h#-A6<DJm`MTr{L;X3^53Ek%x^(?wqw{ZUMd;}8^WQ{1C?
zT=C-KO~nU_-!A^J_?zONOL$2_NkK`YlI|sAN*0!^D%n=zEP1cwa>*a1q|{nkue4QZ
z*V56Y@HEL0X6aEc4EyHiArX!LAn}L`;or$$BkPItr?kfxcRRa2H9Z|PO-44DxC_qk
zr1;x-o`3WoG=l<4&SnpjIm&*Lq%0(j5D#~%X(X9;B(vGuWCT0q-i+kckxCm<kKS^x
z;-REJ>qv6gukH%e?}Kt3g`&ixM544r>5ei5r3hsiYeecWi+dM$kql)Xo`n({zfP7L
zs!5#M(!E*HNQ|0H`l>M`Mj3<B0oOgrP;~`~VVy~BWhmPJ3-_Cl7{diTdkAGT>92;!
zbGdk5`G}+`7s)!T@a(15BI^z3$@9wJ?w6DcWUKPJ`)gL;{SEI%w&Fa8Pa<V}iF*nn
zIqxe)Bup7gxDrcpm2sq=(wG#mk4Xn*w)<CQxVxIglSme>-Bt1l7rzZ}q3#H`OPNUW
zl(Ft($^=r6UB*2lF=2^#17$dA#Q!7%ky|>AyW9u)E%$pkUuIi@XF^igR`*kC6zRqq
zxxZAFkdDee_g!@y+AAWp;M}>Y{OG>Q_mgvmR5FOqC&&1Yq%m?%7s>0N@wb@5$hS%f
ziD17VKlT@7=I=m!@SOVszX&`JMK*M@`#kPn#aJKbKf3=^x0AQjJH%<|N*?3a-4~3#
z-RqS)BwigsLY22koN|jK;BVFi1D0ZC7O^W2l0;>S`#8%X@y0czqcNB?<lm7W*=};1
zzk`_XZSuJKCmBP(Bu+%{*3iG)hj;;bm6ww3Jjd-|pCF_6T~f$qfKG<FZ}Y_xp3$I#
zHcEf;7{1wDIZHYin|KQQ8DsM^nSx@$@1IeALviCe5+xo*K`B6=R-lYVnToO;Wi`qy
zl&1w93%XQ`+`kEWx^Dq}N!k+h<t>7?{7Vg83EJ{6f~Ne6q$xo+_bY;qKtujT;L=;n
z;#@;Nf`<GHXh+bGUIgv9-@|+bM>kH;LJ2YTzS~*rjd@MzA$=yx^Ut8bwd^%W1EOwK
zi||T{=giLmXQ<+30r<68L|zGj;PU)y+qG+3WPFe`Waeswj5cm%B$d!z;;GUQmUSxr
zV?QAQ1^LxvQqUN~pNUcp2FkgjGLH1`ntvQ?fm9{PfPbO}R}HGXkXJ!CGKDFM=LH-Y
zR-^=pmpT3`1_h6>xtnNQW$>veii*F2qlzzx2a1BwgA#;?*h>)qm?=o%xCeN|oA~2s
zo|c1x@J8T2wCepQzlMkUwE)!j4^1)OmDog7_FeQp3BLpm#93_6F&3*rkz9prj#R8g
zLyjzb^b5&u@*+7vPLNaNBm5<<Tf|KZX-{^FeZelJMyDpECa0#QW~DYvZIwDb^~JO(
z=quu17~0rP_TbHf<PCC~RFUt=uXwYE_f1P`Txybhv&`>J>i*MxmBhN=LJsJg$O%BU
zyZa7Ge|JOIyRQGZ4qsV#W!{y!S7u$Aer5QT@+&!)fBSlk?1TKM_mG2gF^b3@_`m-<
zN?s+$$ZO;{d7UgFN65S6J#vPeCGV3D$WpBH_z-=rBIn4*WI1_=oF|`<Pss&xk$i@=
zqz{vC$#>)`G9Rv^Zz~ZYzd?Q=Ka!uwO;|HO!v?@VdesYnpiupvz<HRrh;c|oS%@OW
zX1BMzjPo9p7g0u_9PpM`a6X7~0;K}w4U~6Kj-s6MmL)i!M)?Ru)T{EABRHQ!xq$L6
z%0-mVP?n;6j`9`ChbUj8Tt-=ras}lY%6XLQ-m(Jc?@?}{i1&W=mWOe^jq)eTw<v$1
zU<831Lcq}obavo~h)F4nu=xbFi1IUVRp=?w-Vj>7(1BNDa-v_NkTp1e;VJloW`tex
z6tU-Vss$w)b=Kn?hmwHbPv8t)G&LE&q5G$%c?#KrbC#!wy=zm;P=rOf4d+&#f|VB}
zb-JgJoj7A0L?OEbU-1;O+d=X=I!xXARZ_a9{0MbF<Y-l^(!_@huIr$Asj02UwQ|s*
zbsa3vL33<%9Xv0!je}>l>CrE}Jatv-s`evSrM5{OJ8Yyw$&_b27`3WAKh;5c_8W&|
zuYNX1v+~56pQFml8`gCwq8Yq_+N;XZz<6&1ILll4uDT92uVbo%XLak>y`N)ot3*e$
zR^^E{TWV{^8{PUj-e{F*D=)9>Fx0>ZSQm_o^FV9Na~N{!I)Xec^z7$omgpemt5%8j
zdiG1VITo*4mADE$(68SJygow7zi%}2zX1%iK0+6FLsK}V+Y-f%bSS=nu)I}WhbgaP
z&wi}|q75Jh=Q+|_*L8&CIWlkx%|o{8%G6ao`yFkD*)rlt5Lwx)-%*mzZ%i&vbfg2=
z)Rjlfz?=7;=w(=*quI(Msic3u$_&yf@hHjQH(KF-Xs!d<vQ8Sxa>*;Suy#spI0?#q
zg*9uCml`F0@tS+e`dI@Tri**(%%L4iYl&Zm%#^su5b?`c^F~m^{Is|TanDqm=lvBt
zpku?FcyTYJNl|u^Y&o<`v-%maxJR5}Ax6OALBG=xNvAoxMbhcc#o{nIlFo28jlsPk
z;;={@@?-Fzt2k7M!&-58NgUkbkP_p0V}^KRhInHJGOqDjMZCBazix>`N<1nL5r?(n
z@R2yU#i6OFm!Bx!5Qlsl4oz_Y<>!FA?Zv$9LWW|dz6h@K3I2rj5i#RPv^JDPL;Flc
z947<`BQeTj#0*Irjf{~Px({0B8zkIt*-vN(k<mi>C?>o;7{&9Of@==;{${WS$9sQs
z#AFwHe=B~!RgwjmJntH?H{coX?{L_WH=z+!kjdDqVJdb%9Ye-q-{4g20a<``x`p`F
z7Edd1e*zhWtM<sz8G)4*smR-zfd8pj1Eaq+O<s+{UQVOX)=V5nqGk`gJsf2^N(+<;
zxGUP3PKM$4IJD+pBlUl%(?_;B4fQJkfq<_bpesVwc_VoxptT3IRJW$3|I^sH#zs{{
zaeVgfcDsF0T3UHZVjv(OsSPioJfy*vQpzKx)It$cp`uVqEf_<>7a|f+NPK{-Bqkyv
z8cf6hQ4|Ft@e|JiLR*@^^02fQFcA|!kRE?$?rytO9?s;<-aC&oXZ~mI+%vQH&W*22
zTephV=CV8cv*s=9vyr40T14Bc;JX6pmyqg7S4Dl=qLsuHBli^6;%2h?k<ZGjN|9r=
zV&pCZ^wQ3G7O|a9zhV&L2|dv_kU36^Ce7qHnbrMC#O9+>A6i&VxE8PPPrgmK9`EC>
zxsmWavzc%Qx^(DKw>VaAx<{qHA?G9180BE#n*-m#3kAicrthNFb=9WtlDev8rf+rS
zsv4fP(z~dxn%Gjys_JTxP|GW^RTIC+#tg}4w%EM+z5)J5e<NS_$@O3M-wp)*_k5Ev
znnHn~lg2JQ+0JC=6=zi-)miUs3KTeBI{!HBfnt1#f4F~ApxnOzs)NTS<wN<)asIad
zp69UzV?H%d5cTlr@a2JWWXeaTAWyrdvVt-QyLJfw6bwT{IrNE9y!$u?>nxYPF%b-&
zM{7msZWe1JC1|e9l=H-41z+oanS0+B?s?llGv3BIY>t?typ#BAoSjo|8ch?cmd*Fs
zGp^ObSUH9~xh9Jm2UBNHETNuAnJFP8N^ieydO(9@GW#UwAX%2l=c$&d(q;;wY0z|N
z4m1}klN)B9wDSFs7TxK<Y$k3i<-^c+=pcN4gnoh!K|e#kKxg534muD04qbpQLJgE}
zgqomBP&0HDx&~c`Za{xPE!24vYK7V$m%493K2w2}so`<@L^-{8ZTkgg9Anu9EEhX;
zytrnfG@E)TK<r6kZxM5vnA7yC0O*v-ValH|%ca_^ks7mBrkM5ejoBzWDANr@^7vn`
zOd?!|nKnk>&`%|%jhHlB`*k#)Ew{}$=p=LsIt`tHvPk1?GsxrB19V$Jw*_=tK(_^C
zTP*L*{C-5fEzrl%HmHHPMyLt81T{nSd;U{PfsYFx7d|e0T==+X#HEZ&8J99HWn9X*
z$X$da<%|mzv_@-4M5_^wdV_cb#3LXc0r3ckN5C*$*6~%ub!ICRhPFf6N|#o;w9=)O
zF0FKFr3*4sk*N@x22F?NNG%eD`C?gb>P$hhFp`ClER1AfBnu;1nA&Tpy_VW*slArk
zYZX&U_{~7RmQXHt&=2bwtkmByd5mV2#PA#-*jCUN7?Vg%W4;lw2&c&@^wWd%R&;cc
z@~sx#<?NKVMoy6XGxU2D{T?x&@U*R>dBlbrZ1_H55uBWa*`Q_;jwhxuzrrGobJ&mS
z<SKp4a~aX!2ma7gtdl)*K6=zDH={@EkuU0`O-{>Q`CCurq}-7WjN9HAsxesM(g5w#
z^sbH-_^1=L=5g{>tX}W@aiQ$JKL=L|j%TWLmSDghD?yL`pX-z-mfzzOJL~%EwOV6i
zB|*2NO<i-7>#weHI?s%EUJj4P137iq+%hk|jCb6rk^iQ3#>fr1Liy{SCh2Jpb+SN{
z<S;F|NZ24t<*2yy!wjyl-z0*@bT(<=lp%eHdyO<ByX6{`Lx~MiuKPT4)uzjSIo6@!
zeWrVRJEQoYGKBnA@3A!H_h?6NL#Kqdw06-s;v*gHWzI-`+ncrR4{>R-_`xZ1^}+F8
zETahSQ8?aTI@&*(LsBZj72nmR+mt!6=xBeS-^fgQo7H|t+6l3InATR?QiZXUhyQl=
z*jOIM5gh$6lkgpBk&*4ut6byTFB7{H8lh+WGV7-o>>}L2ohj<%i;knF*pc_^Aud<A
zBF{78sf$@_UIrV=8}K_87ZG<zU)8m{E{;2jb#hJ-l6rdG0YW<pb;-)9425((<FT&&
zer-GUP8g(E3f`xEnNhq4-jAI$l(BX=_E8cx$Ry(OvF`g|9Zh5GEynl9LMr8Xnlk(V
zY^3>SAbY<qWG3-0{%P);VJxlf_-rhuX6!BQW9+u9R!{}?jON}I<P9XPyO*uIpRHSW
zzS8IY2IKp{htH<NX9)5Q#V5cm8+%nP@)Yc)9BikNcps9EqCI2r-S{7U9C>o_eX+8}
zbFY|yPsiGth@CJA-<|g4Q-1+Ik(N#6Sr2Vn$hIwDt-k>F-yE<g#V6W!X4-Zp(ar_P
z`Vu~g7B58W+GgIm;qKkbY{mDpmSQh32y?6`^aF(-kn<qxVh(FahiTUlti}ZF#uLP!
zWF09PTd*Dp&$5OTWF4phsT#p91a=YhaTNsp7Qv(r1T!px85Y4TcxHfz>M+aV7_<mF
z%*vmkgkq=rc#gECM-x7WPqU~cThx*)YEM|yGA(MlYwSeoP}I^bYKj+MB;Y$K(+Sm1
z_FJR^7AZeEo=g0T_*DJ@okt6`cZA|l3t7~<*;$LjdekN)*=*-4AD9o3UvbQ^IA&QK
zGc1l-7RM~}J-(;KF=%mgEP{?jFv%jAVi8OPzh)#+?EDtH0BdD!$fJEQM8DS=Oft2D
z?L+21!_?y7`Vu&3e(isWdGqt1GDTBLN(l=}@}4piX3Q!koS9cfSTbt{VQI;9Qf*1)
zp!1}JxHFzDi#u~T3ofo%vD^%PwXSlJ8D9PRl1ekih7)X9So7xcIx{=UN$2)_vqpKq
zSzF=N;k8KTV;ZN@2GQ;akgo;1L(yCzQYJ&pGHv=!I2EzK^$yNw#N~N1E|0DV6jA@@
z<k1~<)FSihP;NnbzsBja?OJb$+&=oCj}-||7M&$JtN?z>`7TylJ*hnzCZL1e?B%kH
veO12Zxx+oIgy<S~jK9NGoNT^jU#XSM$M>4=*v)01*>4WO(MLb;4^Q(i#!FNM

diff --git a/static/fonts/roboto-v18-latin-700italic.woff b/static/fonts/roboto-v18-latin-700italic.woff
deleted file mode 100644
index a3ca246269e4b3bea46e29077b640d1d51fdf4bf..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 21132
zcmYg$b8sf#^Ys(k*x0tMjcsS+C$^nzY}>ZIv29~xb7Sk5&-eZ3y;Y~C`t<2LGd)#P
zeeZ2I1#xiz2;h4tM*&d(yG8@P?f)_VS^xi#5ET>ub|!su65jwq_(Rl5C@QFYa~l8v
z#4P{-|2l}hyCR{YCJX>T&3^Mp-x%jKLT*-2VPpXSpm)CGl)qu%l1*A_Y-4B-0Kl+)
zYpMYNFxh_0k_}^5XCeRq_TXD1{U5;h=<H1G&1?VwIHqqM>o+=$?{F*444uAX;ep>8
z`2PVKfM#axVft-;^Md#Qfc4(zH7%Vv(8e7Akcs=&n0@2<2Ra;xxryO-oXqpL&G8>T
zQ0EQIzexZ<_WK?Hl5db9pduEU+c<y6%BlhYpx<+XwX|2$;#%7of9vE2zn|m#ok6ym
zL{isn4Bfx|ih190ME?Pd0QAY$(8lDO>;1MjzjY-<VEknEc23R!fKuK!hw%-fFGB#(
z-qGYcR_V{Tz3{DL;68W|c3(&6V+H|H#DeU7+k#XSM#xkH=eGt3K_LrM<G;HVV1piI
z)P$F(X@!|YyF}YWi$ps`S9Z9+ns@su<Gy0SDX01&CBv}*+}ER1!0b(B2qb2@wxgq&
zQ;Y>-s|~o1)>~}&XnBL1ZLZvNMj{A|%r51w%2m&B3l*}zF7H=bJ6=~%P~s-6G2^Q=
z)w*Kl7`<k6^k+^qx*jlUjqlI(Zyz~XGQf$zNr*f*X}4a*8|p(7kOPk>YAN;zPz_A(
zCslPT7&7ptWcbt1WLQ+bqEiMPva*50!8fDsrk!NI7VnQ_f}g<m7oggE^mFcwkTN}^
ztegV9G)HmEsgCaco%ZpYLXL?3Sr3VnX~sKn3ArZTRHY$2ESU_LAR%BPYk-=V-mhxP
zoQeA<KJ!mH_oT4^+>`+`hN|+^ojV94kREq+5VNHr`-ekoX-Dka3r5co=X=Wbjn`){
zgKJ}G*Tp_D!4V3<A#;q91U~}XyeKPu)4Vt@|2--*<prffkE2`GNzMRw35p4E<{CQE
zy;22QKdNcS+GKuK@~(q=sO_?Ou==UCZY{1bZl=f&9bu@y59%ZT9zJk3%X?h2w@>UI
z++Mvt0twuv&^(nDPA&Kgo4fT(AJ+4t*Q@B)D{R(l@c*rq>#kSx|J$rY(HY3;d!=H|
zq&gr4D;>LDRA6FkViLTsV`6iZMUz0{UOyj2iLu}aKedML@cyE*gRVXP*p2okqdQLA
z_420hP7eYd*OCrz%y5S>;S!D~eTi}ARp$ERMVo%KGV+VRDD)wWV98OCmO=q)rC`yS
zSF;d9yZC&mxozoq6Wu9xtMtjL+So<A7Gb^2cRLj4_E%{ryLP@>yPn;WcJ+d%&8)aw
zSy7hUuNie|d#HxaB?>Q6i^sKs>h+S#jGqqAT*aQX%O~;=Nj2;mNT-JU1rp6sOZg%H
zn}VY={Xu{;B>rFeNcE#tv;2AUPu%7;kN=kgl<uDqX2FCF)c2X!XufL5>zX*9<1%>R
z<?uc+ZYVb>g7jpZY=-^lAp>a*xo#d3W~&Da&RyGt?me;GZ!%j~1XpgH`p_fHa$d{V
zr+uEG%?Y4;QOAiw!-ZPGQS8M|I_04G+)V%g`LF!ofBDC517rDm8Yg&XJ}l1hIX_~8
zdO~_Yf<*EKy?Ht@M>UANwXGgXQ#bY%PPYg{bG99~t?Ysbb+26*4cKjZFY>djY<CrY
zMBnQ>d~P#%FF1cW2fz5WnIFvjn3Ak@9ZQZ#s(V4Ta?@Ra`P;9utZs)2ZC1nNgsbW1
zQNX&qe!X5tdH?LADQv-omC;!b3ecc|Da7+?&PD0Q)^={O^X9R>?f4NvjVK8Bw!rzW
z5&;QGMeuB#1|JiUY-R1++U(z)3d%Rap4Ez<wT-Z|#<&7IFwq8to6`8zb8N}2cl*`|
zQYDw<Xh^HxzYf<;Shd@>YloiQx@=qn*4ujy(w||q`epYc`hwt9fUeP(#5o8Tl1Hl5
zpOV;HtrqIHy^vS`O5YoQlHR`6sUH7niu?wS=fK!CI3W1fV!w{FV5+rmt$=g*TulCP
zc%OC5i|&)t`Su?moXWk)FA-d>uNLF+G4#>IFr#qlWOTGN;eKaZvQTb1M{Dv*Y_Z^|
zV(sA@&}HTvgj?B`(Z<zb#GENJ6I3^q0if%+tgjepqj^F0!~N`px{)o3iulgfvJrNm
zmky=mq$u_f8MR@9sBApEsWd|)S?n517B1PIIJH>}I+KQDI%Q!xBdHeA5M7ctrW6V-
zd7@gvkR`TwFi?da=JUx+mzH{23KO>|iaue0gW9CypiTt#W^(#QP*mK$HmdIn{c>d#
zOSbQoHvF00kH|DNsV>t8c#Ry(?Hg8j;3#{`J&ny$o@}@{C&?j~Fe}STEgP5R96+9y
z*Q_~C9lx6-&5cHuD22)@XJk4KZHv5}lBQD>$DJ_oYpic^!=*dP(2}BA@m7;;s0#hA
zARvq;oQYbwDj7Vnp+}E|Ls}q{Jdi#?j)(n?x9E4Q)Z{Vwk$U)_#15<&Zsq<i<rwaD
zPKmc8^N(Wq5xg;A>R?*l68P9|+JRvJP)UXqMJ}QLLh>Xp6J9p%;tTA<hL0EU{m+++
z0#p8Nh#Zouzs5d_(7-*~V)J(xp&z2b27y=ZM|n2m^z<19&Q34nRhkEciOcgn!%WmJ
zE7yWx#Ej<C1~^I@fRGUDcZe8#%NqU5&!mIp#WA|FF+`H;&IVaiG1tJ!jB&?w7xv<Q
zno<~ZmTJG;zAuH5{t`PQ$E-O2^nZE<!y!-|QcA3HQw8BKH`o<I<o^CK<3fp`$zT-^
z+d9e)#Qq#5t9uB={qj6AHo7+>SV@Z0#O;%U(c6Mk;q$5vK@2L1G(X?e*6T``6xz^3
zh!;dW0l<K8hGtrb(hX|%GVgi&oh(-Qww(mpnzr4P4nJ5zygz2aT1W0X@sv3pyJ}bn
zjPJW>wIu>H-}x{$Fg-O}ALt$L?d6GFO7r(uA`oWP2TB?n85jVJsLTxv6rq%-nYufA
zdUyj#zycGHaR&q;L)ad*WZ_}qqwan>(y3SBVxj+z!v-L<z%Krm<KPLf(Ht8<$nL(_
zvyJ>y6dUcz?L4L_?Np16*R~^q;djbgqRs3&LOUyCYMe>X#u!O4wx5dDM@uXVDu~YY
z--~Mb;OHCrT%mqF2_?{^R%CDG2xJT3e!_o+2INapp;Uz8<U46<9z2nO2*TV>wvHO%
zUfRzhAUT;-YlaB+_Yi-LG_0>E(|F|kdT?u4dm5uiNac=oIwN1&zVvRr*qo2_VSH>~
zy)$Z!%x2{1(0npVhf|o2O$G%d{S;%nt*&lZ$FZtz+yc;EHci-iT{O=K1zx!I{tU(A
zSVfk=bD4CY%wk()O4W5(Vqe*0+JNTVbo`6&7VSI}8`lm?1@jx-Hv)(}`$OwM?7OPK
zEa1izQ#WAd$iwF_!c{l)0s>rj03168Kyt)gF4sM9c_SkEUA)JAJ_Z9OhCQ5^9Zw*Y
z?at2&z9{$sQoa$B&R!Y#5!%iHxz5-qQPehxieEtVa&7Kr=8XHtQO)^M(tXL?=qSqf
z_&Z7p<j<)W!bIp7Cs-qzd`Tc=z9^6)Ut8W~l4LP#lGr(BlAJDTvT*b&z7t8Cv!?UA
zumaEkP60)LPk=nY0E8J(1sDP>0=xl#0P){G^iKl-I%wv1)kX|}1Lpx?fJXz6A?g6=
zkXQf=kP-k2WG?^_avK2p-$eg?d)*ii3Gkm-A!h66?Uf`#QEAL>L+K6xaLf(~#Fj@U
z{jzy{-8?~LxO&Ks6gPkV9pCAX@Wl;+$^egJ9{~c!wDf}9wun20ikBy-gu4nt{tX>_
zQj>PsUPAgu_-9EiQE_=>1j<(V#QS;unXatS)KYGq0g3^`T?@KC$5!~ON$Nqe^{arB
z@q)%BXPoF#B6k~bIS%u8lX|-n)H$&uTf7KSB6&$Fa+NC9P!|&Pc(K+^tXm(C79B5x
zS$wT~*N_cjOoM}u8jIk5uU+<LpO4m+tPiLgyWi$%%blYcGWp4?pw&&VaMblDnHK-%
znUvy(^8MxMW8fi)W8_@MWKNx0BeX*KSNPSZHzH2W@5DiQMoqMG8&Z@Mv#<tD=-09<
zA?Z+PIl?$#)(BO(!#cjp+VAW^13<sN07&lZRh>}YXd|dxe2pD$rF$egDTlT}^b-aF
zAc4WB{P$bD`A_mE<Vnb$(Wmr6o+L1OsGgEkFhyKlPeQ-1g^BR19$LK`>Zf;an!k{$
zI`~ijnVOZRLO_Io%vujYp{p{9fQyQlUH_ce5=h9rpbU?GJpn@o3$tFN?1dg2!~{>8
z{RxLJ``Tyr!h(#_j*Q(dWZhlHXtn6vX7q~<k{Plb?mREj6bd(v_2vDCFFL6&S&|c3
zU*29vm;PM9-ROXu(dguk5Q{xGHndQ$$}OBlg$Ncx+tY7)Y4`$gYhSqsEl1A|0lCkv
zSfohrG@U{U(^cKH<g2Mzx8X|dL%OW@I~;E!_uzZmIUo^nmrl!BVCl)!UqZHX3CY%@
zsn^6UAp^{hfX-4-Cja;<K%?d%Fm1|=29$6L0U2(|EcJXL!dq1jld%B%kx$Hbr!(Kn
zD|;X+-^(*cP5k<FuuIN&G`$E==VU}N7KhjYdYb&}miZJ^N-W<(EG%6#Np6Ayl7pEl
z*B*FEBn6*vU{oZId=u2xy|@7`XnvSzCf2Q*sjwtiEhb=9vyJ{(t=6sRJB;}v%b}n3
z+4xLCxatk_n#{(X3(uSiZ<q6#D)AslFY+0FzDI-YX+AZ_o?H6CesF%zd#<PD<$gKW
zd{w;ZezM=Rtxo8I=Xt_pyH9HW*D385^xtma;Wpg+$ni7uJS+qb@>!~?;lQGB87!D^
zB4?yl`oz&WDp;z#9YdpN!rD<J6>9FMCVXbe)D>GYk}j&_&FKuoS9F@BuX+mQL}u>Q
z!;!_!O$P6FVzH%VClR!q8aw?!X7Zt$D)S`ewpK>h=KH1j`Gbm@tNLbx&Tc9REN^sU
z1}>qc`+(`k3;PUW>{VEVlyt5Dzv*6sI_axm-CoCWci7wWgmh0%|9KMp)%rnx&Oet{
zy=Sg}@3>NK(>qmbLGTa|pyYzo^humVs0l>4xA_FJfLzWMjX0fYJrgIlNPiuDt4uN`
z`V~9U!$xrC)4F_}TxabXt{V-wjvUjw<9K_vu=2<k&p{vrLs^<%H`iFgpWb(GvzJzR
z|A^ZwbR-_BgN92A_Os`C3D=5<2g#rW-U5{%u}ZCpzhhCGq%n;8?E^)c3UvB^R-9GK
zbqn=$D#a?*SbJ1NuZN|1c9{?Hyi5&4M-W*Y?H%seXKo-|bQ(FLd6(@(Bu8F{>=^wL
z>Pj)$^}par6&NVCT!Wfy=i5F5gPJVf&5$^%Z~?(h36&RVjs(iYaJL4UVS03+aw#lX
z<dHuevHiG)da1)HhZE?Em5dt1<`o;Ja@FOrK~jC$;|jlq&FWvQLK35O^MvB$NJ*4P
zM@6IV!j7Ch$PzYg^eUuC8Y-vVOF8w4Xh~(NjXa+6FV-_G#>b>^V=Gf;O7N}-oCZGo
zRo;EBc2y|-`c^!rKDi8Ko0^Y-;>{Jh#~Dij8PTu%1*t1+|9JgI7r)^1FIFqitp46i
zuxeaSFn%rg(2;IaH=(pNyWp(YaN%d}R4o*%clbAF#CHRrSx?RW$fPPy186GJ#3XsB
zi|5N#sdneLzD^%%Sboot69{3A!<o0QBN+8!DjHuFyTM=+AK}62Q7WpD%F{=hhI>ra
z_+Q$t?9ANDP>!Dt=RVRYh9@_T?2_5->G@K+-%cV5cq{D6-e<k}Dk1^s*81<p0L`qT
zk)@e7%&!Y_0mDNJ<xt?L#{65)&zjN5WjbJ94|3$=<-@Ew|AZF@-f44s;HD1xj63Y#
zw)!djt^*nGtopW}5rweCVNWU}kP7mY%^%V=jZ12Ml?vRw17_%AjyAxVEm}2D=EpBp
zFK~(peogmW_@8pux(;`eeU5K+-SuqA&OG>;5+m+InP&YP@WT(b^}RF<pF6AbH>pqU
zg&iXzI0Dl>C^IApm7Y5(*vr-ZlGy6?UwT19y4@x?@T%C)!^DzudchZfZOsdag^jA(
z!L4U_hoO*+o4Kbol$PcrB-`TG)8&c3pR&mqZ1<C@?&ow(7jWGPt-U59x*y^_kh&#R
z41=hz@?{I-OkEK>g6f&1u<dlhK(0vH=y%XWpo>H8PoiNemVSV)@bBKozp)I-NKXC|
zzx!F_cX#xmrC%lO$!^8*+gX2EUr3-H$c$fnuFDI}HGom;{+ku-j>lUru{*s~03eiS
zHl|QjeM>PY#IwjL?HmX}%#0HX>5+mbKrHrSB>+9UJ*))$qM2VSsRFUj%GFCikLLza
z%qclT^Rxr)Dx$HX`57ruUH5vqf%=@m^IUYezNg3bFQ#!F&9eHczJ9aSgxxLDi`Wr&
zZTidkdoXh~gJt|GX6QqLl`r;hOqx)kU{B&Q43M&0yACMyP3X~w1tx6avQ8R$ypBB=
zuQ37N7q#w69PA6z&5_Rsfq-|Yszygd)I1EV`}W-zU$a$}@+s<Vlg1Z0Lyi6HmU%ai
z;K9eB!8_fTAlNR=tSgf7e@gK&Yk@z+ZYD|)daApheTptaUEYo7pL{x-Ud(gblB&{z
zCVFxLFD6pAUmlr1c|n3iiS;{RU(Wp3h_Of^G~-Q}C?b9q41$n}OaCEyy5_V88~rT=
zvvV*2XFwk}7E0L<>TxR8OWiG*sn5z#Piak3Pq4`)+w?+<O|_;a1FOtk`93*YH7J1|
zFFjUFOJ1JH=YBmGPg|W*^HwTxJ7Fs8bDphVt>i{<R%)5~srU4n3ywCLM}Slv5r)Td
zPjnfr0_ld`57|WCeFgpYdRTznHWRCLJFF?qKzPNH5LXTs5}gkXZUoTm&U1ki{i#Fx
zkP?X-4#vg`!*}#5wF)0x9z4GYo2FW6`*qfX>V*23fR3T(oR2OMdsW^rGQsE-NVz|%
za00_qzdTEp;E|j=^lDaK>kdh5SyD89M6R)F4WfV(1^qJ+6i{V;6OsC=g=N}ImDCFp
zNlboGQBW+IcA=E<&N6-!i}c1K7dcPd{8u+4^5}ReBAKdIp0DPaCCSX<@APa^)s9!-
z+a%9p3%$|D1H02!R?vxo4==n9IySSxY+83wn73DAZuP|1tM%q#8#-mTK;w+Pa4TI_
zLr~l_0K7d6n?J7;_9hNOx7XkS>lnPn9_EK)p|hou(}0%fbiX8D#;|!eYjhBFh<jK4
zj_^;JjEV`AF($41Om{{<&xy`bQ@*(^ocfzo46AJd^TwmS%+<i2Ra0&CqJSc+j+VxA
zt;x+K4Lbw6ZI;mZV0}iNx9y=M8?lM$ZZ0$h2>v3Uk8Y$zY%Yk?u;W+f3n=JBkkv$^
zF4a+1>G<2BL?;z%$QzL2J+L|QLoOW**<HJYtHA2bdrEajsI@jLAz}rCn%o_Es6RU(
zX{esvx_t9`kKTz`X=E-(X&0zk+yNp^wg+(_p_E5-qw!H0fr%gCy8*P!5~T}SqAy;F
zQ@I2ozdEL_IEXZkMU$oEC*4wU#IRV9U51-Nvm2+CR=k{7s@@l7X11He4e!MxTMjbG
zDZ7tiwL9D{Te;@ftG&L&z^1CTT{8^WIsNMP$<&Vv(;xJ)JdSusx4Rv!{@w38>Er)g
zGaEAVk|zc}&gP)Oq)T<5@dU-)_>eEiLxM)i*fy97S5OFZIKvqZ(!?3i4}^)p<DrsD
zAy)n)AwQ(R;#xK|0NX`)p~WqwbMMV0JfA`;CyxFt<1T#j!lsut?9y=HO>Pp;>!d#A
zT_GcyWcTnpJXA2oD5IIeZu*ILuW;rz)a)@<N%C#Ex^$V-LU%M!1$z3+_C^mFU4i`g
z_7|z;Z0yHfO=}q;Z6icu#WFTu^v+4@t1AIKIk}?P$xY81(P+Rbst|&aA;uIKhO<m{
zQ4z4Uj@B1-+iQ^1$(*3V!0Gq9p7!_h6z2Tot*Z17Dxr8hqCcTBItwC3gkI5Vu=!G?
zokqTlRidHYt)Tt83*Jmm99|>@U8pZSI@=8<v0BgrsjQe_(5~D9MBE%+enL{cyO$b|
zcl)PQjV=;m7a}x+rl_DXl5|@CyE{yxGTBaIOC~;hQ{r)8&%yi&%}}CMV)>7`NzTtn
zP6G;LO=ZW(Px2~wN}$l&ENj6KYXR+R^yfi@srqm6^8m8-GBtc;e4{?`LE2=?Kd&fX
z2=##_M*<@>4^7(Q0?%>L`Vpe%!Dxiy;+;)(et3Q{_XrT^+U!@Ml!V->Y0Tyq$kLFm
z#FRaTRVOcIEitF{X}NY=xp4$jxJYEW{z9O&wFK(w!n)=liG6vd!bESH<!=N;Rczq9
zwS-5bBWHTvQzZIRzx<R}T^w{=;~9BZa`UmNI?GM#8l5%7XaC6WsltwH{`{NJgiY*N
zHV9|OL`tjjD?C`163nafPfW!koGZTCMf!2Yj6SPVj@0JkT?R+wEB!(h|It-g{&<~&
z+rQ&nU9F1r4!Mz_uFoW~mF<JC%|l6@2(|0_nYrjqlBG|dR481{&|?M3UvW9?U(~H4
zTJ<prD!eVmm8sC>TSV?n)8=A*+S^B$A5JL6=PxGRH>*%q(@OJ}8VU`kkDpi9JPclm
zH1B|~6AOa0SH8zhk<&8F=jLRpZ9l{!pp3<!7#JKMR>*#Y14dvm9usQ;6h3?tLEVXl
z$fMxd7Zv`@+WtFuvjH2=vqUE;;#tJfb0|s5QhHG$Tiy=9fDjs*gqUF7AVnz?*G87|
z<m@kXQR`iZisTi<bhEsnwixfip<#iO{~s(#w>@;fq@U+9PD*D}Crs0#fvq})ra8LQ
zjpeE-KP^VrZ{4$A_D*iN0^Au!NegTrajL{_W~5tM-z_#m%E}NweE9_(TvYeoa%ltx
zTVuT0NiKVf+!*55-VO2o)?V2^q7V-ZP9P(DCjU}X7L6)IT?}<h)|(4RsQ7CLzgL7q
zUOQg&5sy&`r*GeGC8JEcu&?(hJ?ZrRn&Uz^!)zg!o7G->;>9L$%Sb8f_1;v8sxpkA
z)xrtG_(LyS;xr(W_jm_f_LL)<+4qj3MsqaDPSC?{F~LLC!<rb`$EF+E3Jv5&@k@Y~
zG#=Z6&AgCiha)=45~icqx=Ob|J<oZ2IG0m2lTMpmAjmJ{>;3}HZxFQ|Sl>&odp&Wa
z_i=Wu@xtd?@Q1^Q<4Bcf$M`posu_f;`U&b$-^T=MGt24i#0~-0tOc7a!aRd$M}|!6
z!>{}Ooj3Z?_KKm)fO|!GdrJ}JK)y+{ZB_4{8?a(~KFS>?k=QqT`CeJgFfGuIDXyJs
zuDf52M4O&REqjV6Y|SKe#c}8m+k`_s(DOFjeQHzSSepSeGE^yG{W}R((rShuMIt?3
z;8NvSiZEh0(Q%4Jhmh75uUbJ<c1Ug;HoK3pjMbn^ZC9w-aUYYXDavt*7PIbM%GsA!
zqk>%ZFK-f)DGX-J|H=vD2X7~q9gJhW(QVRO?e9)9-W8C_AIE3w(SK~NcO#}2c=4Nj
z{pwp=NE_Ebs1@+as&jSg4nWpRet3O#WvZ!Vt}-DK8W_){NA7ojRz8<6i%j{fpL&mU
z=!@KkP@dyYIEWSEOh^A!`Wyf<kAmC)B8j`%s?ep-BzP}-(c42M-ulcA3ajH>!4(-o
zBaXX;Wf@jhH%-haKgSMr8TQZ2m{V8lWxAEdv*77I1HbY)!iH8LSA6XO=>}igES7d?
zo+q30FBFk754EAFIg>Z7GO&%EDjuSJ5wXmqUuQvy4FCI#fTFf#o|(;pwL9o8koLxq
zfQTN<yHjZKz4ZESCv9(nSo4Gz6ceIiBNXl3Adf10#vTh>rP;l~eMqiPqqwrxw^pLz
z6^q$i6LKH`*ZSR&Ag)owz>|Q&xlXA3uf>YTL=3k2UPB^As3Z>q-0h4`Ell^<(K%RV
zBsXn0uVCHc-)sj?E#G6-Wr4JjAJpAUotY3@N;BSAcsQh62#ZEQ$%5aA>ArD6L8v!W
zl1^w}@v%PId;HjhemJaRI|VU$zxiG{0RG*=k&8;xUxE>&L%1f65yUa7!_&$vX#KO9
zeyOF#UBI2!T1>5~k8R<%oM`=NP8~@79ZnRvl=21rPqJ|qlcQ-jnxVNNzst4Q1ttrO
zVwtbC!~M$V+KF-}#T|?iM?$}CzX%J-FE}CRDy{qHpLA@2j<Txv05J6;6Xm~D*+v8Y
zsehC${Y!*HB&aMw+Hg4^lBxDrm}!QGV==zo-=gp>L?Ca@!2`)7kX|m41Q`6c$1V!m
z;QfUN^{V)YuCb8PF&-RVJX6m0i<lIXU~`)PmP?7CfU^W|Yg8PWb1~eVj=|X_p)bB?
zeG%A9=YHKb58-zIGFPW#p4wh6k?)F}9{qXj`e{P}&ia)R*!EuhGl}8FOQBXz<%MSc
zG;I6#d|xq_iD0U>Jpa{z+aU^V_)b|IPXx=L6c}a{4SU``g8TF=$`o6{Dn5hrQK&UZ
z!+k0U>e}|UFuC@si`^aPbNfswhPcFo&k2VEIE3o+zS!sPecraXT+k#AI}lU^5Hv0<
z(9QU+jO5$~by*VevjRM!B*nD(odXO5i>`1n!uAi-0?XygJg;F!<>H|{B^{YAzj8OM
zcK%BYMrj+P_}||p)r3T(?=mK%VTPFn7f>lp60w_|%zsSYs)rx2+Y3K&IzUqeHvSCk
zmrV%>q||M1;qds!{oEYpEKjcY|LQtfWs*LYC-|WHOhrg))Pc%dT&X_&Rd~cw6KctN
z_EEs1d*wpSvGwBfIrP>kfv7VozhN;g|4xy+p?ff*9YOh*cqML=8CE#Z->UxQ;&x0G
z;<OSjpJ6fbUj`NZlg3f#*T&<(pESzZkD!uaenGcXr=B=wIon&>D27)LR({=$GTSL1
z8lBdt9LS&tz&IwquL>t1Ly9hD4v#HNs4x$#=<p|=bG*Mh0xy)+t=qFrRqVcI<lk(O
zgfDDBbxh41BvjHU)jn@j0{gFUY<=^^CKEd(s{BB5Jj@DG{JYggE@-C!!Rr~GF!up7
zer9@%)UQAVmb=U8dtrxeMTnuOv5Tolz_`#R%c&{&r5|Is!0ez9+|L1L6I>oe#lya;
ze%(AW)!RhA@Gg7%YZ~?A5rvyBZ>X^yeFHR4JU=9L*yUcM=}{L)NaPj}DpCkpiZYAe
z)E85bY2$s+T}lPLa+pT>nn~ncFC&4^Z<?X%6jl+uPDBjtkcX2!kcx^cp4CJbeNS`O
zAdvF~aVW^&OAM{KdyNi^sY9{WmEv7%$C9&bI0hb;Rff<u-JbZ&Qgh~)%QWvRw|5Um
z@l6OEV8HL~(vOLZQj7z&9Ex!3tB4*A;I;26G!j+mr^g%aC57a#WI76s2^NmQG;K^`
zJ%@dcCSx#P-J6d)fA=@Ko5#=Bzx=OP%qtS`3pe?5rYpI`k)V3RVDIc(jK+uCv`e~v
z5`Kk8V^2TgX3TlBBl#d1Xf%SwKo-fu$2F+)8(`35Nl*PYd%NtezJ6aGJ&aQJ(V%iB
z%FLUi0~93#VDX5EU)f${%8yJw&rA0()|_9Twq>xkjDC!It8HN*?a}+24}y4(%4DJ9
z5$T=g+p>HG+A#&{3Qdv<5j7mZe)zkDNXLOK2wzDfUrF1m644cQ$ZG~nJH7t24`u8-
ziiIH!=8_2@@Qj*}i-S958D;4Ci*DO)<{{FTHpy2CFA_YG4+M%k!3ho)o^hM8@Fz@e
zwH&2Y7~V3<6sT6PRV`Kdk@XZA-oI!>7`0Om#_+ki_C$rcHp!~WAylGInjQ$sd{9cN
zXlUEwlhJ4HJuU?K*fY6zj0Lh^9<K!%kG{599&kc}HXX3YsDoI?fnEZK8#Z>FRgndT
z#lo2^87-M;!Pj9>cG;ym+0a$g?(H+hhsv|p79zIYTNE(#0x)F>1P^brLsk2G*j3Kw
zJ#=|Zr|8GYrO11?l~)^1X}|^32Szn&IW0FxpCHCd?rQeaBAP*nC93u@mhqM0+c-k!
z0yrF*+1Cz8hSy|^sX0sgo>9&Q>6d6NWbdPjjuPge%Pp=eV+yU!moa^Auh%A`j9Apa
zUJn(Zze;`H;JD`|Z;4MAFiShx0+gG)51R{M&dV-J(YivIll_>wvyq#@D<ZQ_O)+{A
zPiJww*`kc`F(#WFjfJO)`plnkz^HEI`--vk)ZEOwNVEx+qw?eMrKs_kAQNA5hg!6}
zLhVk6%PJ`NT)Q*FwNv;uIs(mJM@KX%IkHu|5Ej%~@g80$haU*JH2HX+9pBakDr84~
z4Aa~Lkjs=Dqq#LT!a}8)cqW$}RDp?Pvo_g98w00OZBjr-0~=ICXn1K<>~KkyRko-}
z<4_j3F|EFerx4+k`V5N302a}5<vx0bY`d_Aqeur7HqXD+(N{hRK)4uFG)SAwma^T$
z3VgGrUh;|xO`hRhW6ouhE8zw0;b)1|qo^E()hzxGiFt0|;Cs=<q^BGR@;d0Op(P1d
zo>$tXMP4y*U)9AS`skKAJxYlbB_(?9F33Un8YX`wZL}Y^l)_4aP0kdS7vrD(RhV=;
zp82X^y|{Qsef->2TO{mh7?Q)rof%BM-w%I$-p9{6cigxHeUBf@GCP9U4Th>|-fT?e
z1BxhUwrZl0$>A;Iy@p)tKJvyCl1vUI^)!&czDVH*VB82U4TiFdfAQcZIg1><q{#Wu
zvDcsYSCyAwnZzy27R#Ls7+z&-R*ru>mL+NH<(rEFn@%OsUK=&>O}v^yYgKdZ$Hxkh
z*x0j&ZK2qitmUWh;=VldOvXFFaq*pC|0sg34amA8tlwhgfcja0cYRxksIZ54UV#k>
zdnPj-@lae8WYRdXMc2y@ybT@m+<ry{wK9|Sq@0Nt6Y97VD=X-?Bj-9wkF9+i$~@{L
znxKYZGKsbl4T@z@QX<HHA`X3E{I$|Os+e&v1+5@sl7V95HOS|_gKV3~D`#?BkX|(o
zlF`HLRww7_dXv(ZB0=)@QMF`>BLoQ%2u`rrAbh)YRn0bDOALyqzkX*KnF@klNrk6y
z<w^5jv64b{Y@!uCC*NDy$eL;Gf5qiy31aEM2?0@WY4?9s?=uj>MhrSIYrUp<U0RIu
z%?@{ZJkHSQzo%4x3azk2StSg#4Lf|<M^mHMFeisv)zSS5%%yt_!2|~W$lSyFhl14+
z#wfpATdC;XAi#0h)+a3FquWUnwDxm24YQrBVlF~?E;vtJ0$Q&E{;roQAlh2Z0XBIs
zFTvfkZ3tP5I1^t;TPjxp6oFhj`sY|gfzE<jp?sQ2l9m=+sS<CF3xfcUb-2^z=~OTZ
zkfw(%IiJHro0BJ3KczHr_|ZE_UtsubX02E9%2k2Y^Pi?s9UAvR4O_;v3#3!{wyp(y
zabZBvQlh##@^7)owh`gbx0x>0Oq_kCSNLMcWT)`=r(aQZx$^D@qss^m0X-$uY>sDx
zTcC^kRiFLB;(~(s7qW;RG|_q1)^RYi(5i_TV8WRa!X%6Ay`~4&fq+0*Sg?gKac3xI
z%rZ7!>1tXQ!^;klf~@!V!=)=e^yDCy^TZr{!nLA0g6yLo4KcvW?CPw$g{Z1--7u6@
zqE(Y?(f&_Qr)$;zPXH15$g@GpVEdV?ax7Es5(+^a({CKzxs0fH4T?c?=5o;nN|$_{
z3A1@4ST$osZaB<yO<%+5X<rct5k=tR>FOw@97S@I6@RJIkEaWi38{J3_p9I}xuZPq
znElkWZtkVBn;l{mXxx!Z1T*KJCZRz(0-&x7Tu~^>2xPGtli)Z);)&PrZUSu@sUBtf
zh2fE8S`HDl!b7><WaLZi0HvUwZOlFDuw-ma4z{uSpjHrf0}y9xx<4T_nBUP=d>?Wt
zhsKvnlT&ET-P;DbaK?@hd(RN3k4J=z56eJ_r5soN`#5zgq9l1Kjuj@Yx>yZc3!7&R
z_TqTSF@g4BBe?4rCP2(-K5V3NxtJT1gMU>>@`PNc5P&>Mu5sD{8X$`W{^hF^fmL*3
zEAo8`6$Gs!T`n31%ZeRF6+=r1NmG0xU>Z>-&!iCr?&0#(OMRA3J8`kPx&9*-m9bw4
z7-I8N(6_%T?{<7*8_hSk%93Lcr;E>PC`3Mq;o0(WS06@uwL4~@-t<`3EcdD<hvMLX
z;g?j#(&Yt9hv(!KzoU+uG{Zmgzfx#IWjZA94#f~$;|HQyX^L6?>*Ngk)(!Up@>ou$
zBK)33#3<x`M^v}m_c&@6FDEHkC2vBWL);cwUaLNTdNLC1tT0w;R>luezB?sb)it!Q
z1qI=Kb5j)*KWO6P%$5^h2@A+o6@1kcrTN3y-LIciIhc)*3u$plvRw*Ih^%nD=lX@6
zLi4B*XvffYU1#7gR?&Fz6A4TgS-c%)B$yAmzRczele|6B@Q^rMiV+K~*{Iu`5RqTO
z>dvaRx{ReENu1wlONxR<9DccjSQ$s}5WX*?$PVlt6!IPqI-!(+QuTy2dWk2|%y;_Z
z{`;ZS5JDoIA2_6qC<VE+Uz{c(C^{&rXWzvt=+woUVN^G*^C#f>Ulu7;z=vj+0po4c
zB0VFZ&ax_pIfo2{HEiN-D3LDTJ>f9thKxU3s66T>E{w2_IQIqO%l8z)7pJu|)Z&29
z8t0wE9lPW9hopcZXbz``)v{tQ8Un(Ar3BtCvuEH79{o?nV!9h0cosP#5j9pCuTB<0
zDu6rGxk1-XA-!Hs`rnaVt+}FjLRJT;H5W?bOO}z;py-@&$HBKAki4GAr_5-!S3k0G
zHVlvCJ>egxBb#dG9nyk{m8GNFj+fAYfKWT)o=Q1lhz6ifT$*by=v;nT@HQTW9iFL7
z`AK4dHjS-TI^MZ!MTQ;^vYaYqcT=TE=qh@!_R(5wky=Hpk7KT*T7`Fk37QknLdhMy
zi|MrIzsrjB#OkXIf$k`J34CkM{rS^AkH3WNdUdskL`8Qx&ud>*v@MapXNQiN&bWPL
z_^It%V(m!KmR{rN3>Bs^5-4^gm(LaP+diL}R+HUB5j!X{e~7At+SdZB+w?$Al9u>H
zv8h0Onwt?%nkc+DQ>ORKEgcEAU0Y70CrY7~H^_T8GJ9yhj#TUpfwIlrRxdkz+x+rI
z^{n#7q2|W+!UWJdl7Ae8AwyCH$FBX?POin!!y^SsqnyVYq-ji=DfKaFj>2EzTqQ4i
zjNL=ERL)EmuTUTK2G4`>kE$xS%OuF;avWUoh^I_d`+xF}&P^n-ZSz&}#w9R5YrhA&
zEb}9_Mqy!DBlNh&?%nd833tu^EnH#Yf4kHEB$h%J5a0hfU-BboIKU`Vx!FX2zRP3b
zGsrp7$wtG-L`oV{H2`y1GGgu)v~acQq_KHI!Ee52kE(c+!&6JQ?8nF<HSHyl<p}ef
zdA;vFaEi70@yd~G%a`>@_TT(e&{uT)L<pmcsG^v-s^o45^-7JIVX@n%s9Uj}U)BAX
z|9EgkgVk3MUv3gtE66HJm$pGzz5IOM4MJoI2E;tNSDAb7&U-|&OkxGmj_g8DOC&02
zVQ{6TZJ!^D)d7YyZBd*IZWLRpIL*+iXIwD1+rNXR%6P)VRkg#L1G1(rhcmF@TB=GN
zgjo4uOEt;F=>3lR%pO#)RNKF`eroq{#@jiAKd7)5u13y<qyxxPlgckB$V3nqk>V_o
zk~o&tXc9!t(eaXHA+;wN2tyXrCGOl!bV4P1FOpo-DQE+-a4Pa~))XI7E9P7EcpiuM
zsvBD|2Fa^)+bue`{eUmuJFd3qsddhKM|*;WI@Z|yhaXGzdt8=h613usM%IrBx_2=b
zFTj~;iDh|X;CRU<Z7f0OpGJG;be7$B_+e9DF01}Fi>N6Y&>&TS>#u7+K0drU9<<MF
zC}y4@^~JkUbA)6L8RLM%SBxpeAag`qam--VKV+g_HG&iuv`MBClD@p`sqdww#Rr0Y
z6h+v}0~DQd@sawG13}Kd%@kh+6klBUjri}0P1_22nbVZb0WPO-D*8JsOrOE!j0tc;
z(!K|+l1U76Y?5&-Q*n5SW9fKvUnE>}46hE#>bDpQx8zyd1!F_0C%6X+A21LXMUIe`
zLOyBag*AsuQMWLNjWVh396g+TuBX=_5mWeI@)VF2!8pei*smF&W9*e<IvYy|cb}WI
zl$va+j=9t_|BA!LpH3Vsq&U*`sO2Y6W9Nw-&S4~9NI8TvSFPff?oYOP8BzfQq8x_z
z&*VxDydm%I8`d5^b>yH+Pnmw7nR(u?ieK@xh5HUW@tp*HQa;A0IcN8yd0ZoUojgV!
z58-d6f}EO~DrT<_cH4XT0r%>)cDJ#)omV@&b3s0C-P`uU9nCocK%uU_%dS9E4>YGU
z#I#w!?_RG9Fi+JNa5~TA>^hJ4pb)jlRCb<WDgU%&MlXF})&PFRzo^7x!njA3_5?%-
zm-b!CBA=g|3`M%Sc5cO1mxxummpqry9<w?fV8k}JT{bWl2ttNJV;F}SaqLox7&yHR
z$S5nwGU|m<VQ_<aLNia8i?col8v}D}*$E&ZGSLBXul(?snPR`f=DnmpI3kI8;uHno
z$&?~Hi-kl_`h8VJ?$tG;WHi_JDNW)fMhmD4LjMN8M`MJ_#@AAMhL@%gR+c6hvnNYV
z@Fv!kq@=dk@*rC@_jLGt5HyfGKK=G6mo)!dqEHHzITZVDc&9h{Ck{*S_AmY0vxM35
zaMd$pwUz#G(gWhi%Vn*PLy*3<geTu8o3Z{y?)5lj5dMbbdsNj&skCFJuPQH(ALrLU
z?0!Up$H)%m2dUwlUBb)lfN(;EybC%(`&V$JD80#5j|(L5n0S$<>RwxxKZf#YBgAX|
zrbEHATH5Q8sxe@uA4KUA&xA@vcrF}`?*-wTMlua*%}b5V%@57d^;0d?b?H!&Y^6zG
z>J3WdV8Z<UvlA7Gxr{8Vdj4GH-4pXH|Fng#D?OD>=`L9<?(rNC%9&B3T(i>OJ0JHF
zw9e^Vurk_uOumw)Hzm@Vp+?7+H%$>Ud1BowTMMm$2SE@)d;+nAW%|{_d&9AF!_AEq
zW9wItOtCqoyhLy<en@$Jt{254<(ND0uM{qUpkpjLSeA~<GM`aW!qoF8@2pFK!4^$8
z(?XAQfDV~j=AD4oS<n<*IIpO##T!f!DM@WCVpCCS)G6#XkXBUknT>#mO^(*QJxFX@
zkNlrCJ&vmgOEjFbc6Bee5#Ao2m6mt*=zqV&!na_XDrTb;Un(lX&->Swf_!k)duU=*
z{)t6f?Me9P{6XVC6pgGrv(}ENGp!WPY&Op~A~XCWMQ*-S!SR==`kbn=**16S;KNJ#
zu$=$>Z(!8r2+iTWS8|VJM?r(PbXRvy#(=U}F<VO^FKem9KBhJIe94w)G!>{(QNi5Z
zIGhkMvryV#?$$U|k<sP5Qy=jdu(g06Mrg;YJ#hn_))azrk*!3z*f$b$n3p*v78y+2
zMHm4lNZBGMSxM_7o{!&QQCb*L7O%^+OS?l{&#h6Lmb3PUm*Z<=&;>T@CADx%tY4nX
z-+&Ao9x#7%p%NNc%^@w7^2{iLo;BAQ0jb>^+=`@RD)s|y$>K_tGJXZ$gu7L)$R71;
zHxR*;VEVhSGoAN{%$5?yje|`44Y>=Kj%PEeH{DU!+fYZ?z5I^+3~IW00@72Cs7oon
z6I)~SBo2Y}{_ds|4KUX*8i<KV;&*dx>aBus;T$*u$$t4j64~^05!5Y~mmdsU(n%lq
zgniS%w|%UoawXFxDd4BNFs9ru=FPv^l9Et~OX$goaTXUPa7buyl3;O)>vBINp|Vg%
zA(Z%VL8yfwB^NCW^D>AVntFLjqbiM9?_tO&fnkA@{H54o)Qmm-&P^=Z*IY8}UXX|v
z3ERU}sxuc^%0>9@z!!Px)|JZ8gT;2Sj<NIgymgzY78tNKpmL+Oi5nOmYv$~!h#6b-
z`HI1wk#vgOa80u#53S?0#2SR7O6(s&NR#qM<y|~_3d}t4B5+qN3zn(;2MgZy*qCCc
z6Y2JB0h!pj$a}a~)-DknuusBw)7!7WZP|F42<&Hgfl>W82?$@1x&vdBOK;Iwlm}SR
z)nfT)eM1wGQQmgp_XVLZj92}#l8^u~77!gRNV}V-_=*;w#gzo}>GO68vlCR))es{o
zno<J7=A$A<4Ei?riX))BPlq}etltRWDR&bH;Rrg2Lu~lIO`Zw@u2R-HUz2GOSE{&o
zq4O4)YjmmkfJ+CBil*$lYrJ^vY9_QQtbFaX4p(Kc&?VvIK_1Kxgg>p><CvSCcSa`u
zDDraGbgjO(W*FWCM-<#?dnQUFhPC|Nn_Tav&=`Ehh7!gmCWSgQiX7_!0mBnif4DRy
zeYN5cjnm_~%EnBwmmh`alsKvvUBaN6qtwp6c!DFPA_yC!PYx`Bl>;kFk4i2RALisZ
zNr*sbZ<k*L2HFnd2Fe%j9*EwY++UQIkO2JA4m@}yJkUspG0w289Kp14l3Z2SqrI5O
zHtn2(=hY$XM!U%AIWHT_TAny+y~Zm<yN`=iE%aJHg3M{f75*_1YjaO9*xEi`c;p+k
zu=(EVZt<`-8sZiuh9cCq1<i*Kh}N#;GNlTLw~An1C>HV8ff0gOP<BG*kx|VAKp_hM
zXb{75GXhOh3@jZ}2h?GsP`nKj0rDo*-)~#(!DL^%<i;2lcK|OsTgFv7i&t6*dEiNj
zuXjl2PkeGFeX)=VeFP1<8!9=73s)c{?ly=v1MNbfK;g!Y8cUO##BmnocvQ@CNh(xj
z=3eW0j4EUim_f=_VYsq0Vk$L>D&ED&GAPe+BV3kf>6Fa&C+m8m;a?qxfg+b_=wn~)
z?)NH{59JU1*{hUE>Igmz>G<X<Os2w#|AOxSiOKs6jp}^&qRyN(!FQ1$&sPV(1DGQp
z0P9>@R}38&QS7l#)U&ZlE*0TpT?&liy|5-9xF}zZ&1A@xg5^~$`YYM5gfy-X>3h{n
z?zxOFAg@0@>MgI`8T87>S<m9O+&B!EI99)V4ZK%grq8`0A4$n@kx_T)Q~H<vG0x6(
z#L`I3EzU!R=w?8pG7drL>5}Hr*tJ2TweAVW^w@~W<2)}<L_5TpQ9|E+pD`b|2i?AW
zPdK{?3Hw0lR;L;Bp2&S;dg{UMUc>;fDCAzr$>WTk)nQQWIB#50KG*3XRn7UaZH^^5
z%;na1<d_f%$}EROV@FOfWl4(W0}R44>BasC6(~YW;ly?rN~rR5*nfQf6-CxoU#HDa
z8&CV?<Z#~iPq4BkS9pW8(ooEE**(`hv0MPvu8s7rqU~H<;?!}kpJ+7|uZ%A)NUQGn
zI-P_45~h%DP>Q6^mqpPPXx`6+f8jQn(0&(LP(*Qn-p7<>dbsTYE$L+er+B45So?V3
zz~3Tg@;WDzDOS)F2@%B;swp6qG!xgO%3lq>3<;U%Jt3A&F1W|MwMRD-eXN%=a=s)K
zmaE7^BVR(DF1{{vq6gdIO5k>}NU_*#;UGk0;qPO3>=+dyr9#acIN}zWzw)b>CEsHF
z)Z&g+Ph?=kh6~C{N>JoXJm>s1pfn*faOWDb%`GGEwP}X^?)xEVs~0(?Sk=<CLepNd
zTan~#x6QQAVd6`&$fX>T)X(Be(r~^v6G=i`p5GOcyV@E(Q%7*yDv{Rs+NSf}V5pz_
zWY$}&nE%xMe9%U6*4|uSD5EWAHI>wEO8TW#T5qceahoULjUs71%hZJHf8|f|lCBSa
z_`)OcXYS|^<4hv@CSGGh5V8i;vbMwT(GBc|h2?pw!QHSwNnE>(<iWPLXHdBsNs=B;
zT@9k+kznw1d`#$jlBu;7^<HhBtFgw`-Rs09aZ)P{1;Y3Pwr!}>b+_f-wJOQBRT6H-
z%(SW!Lm{6WpXpY{ITtnN=3ftElELB#cI*@hU%>t#Cp&&s_va-yG}OR5`a*G+wb}OF
z!l5b1nMrMK=kTTZ2zmDwDEX9_Us(;W4k4Qyh=0FGEOw;vWu+EE>b>*~$4{gh@UQlL
z_K(n%t8Y(F37rMPo4g`<qQ`zdNPC(N!xJg$s1my>I}u?xg7b@q7Uaw|)MAW36-m~l
zF+|8O-fthi>Y9qU&l>OGala_a{k{OYg#bfGDk&=(?=7p4O*`-HYcUa<Sp;tf3L*<h
zNK$<sR|_00XOM6%FB@z&I5YKZdi^8`mhI<{%EI*cLuwV=Xm0+#qzl=6q6wDGdTjGG
zoWAn)uh(R7ni=LEsrA$}8q60M=p|PGuL^Erm0kxQUxfPLoWwpqWE?Od!e@*2J{eeM
zag|I9UYZ(Mu}7l1c<ocNgMUdbs^!;USiDfn(8^DiXasmkZl_GWHTq8J-0SQ3N}uTu
zADDhfJ&_AvLExL1CFm!}l+=MfR{WlZ;O@7bMywWVnKGkI$UPMcx#cnrVaK}>aEoUY
z8?=qaFfAABo-9y=&QrDL6+s!DEdWwipdBWJmGOjd6kQKrJ{Q*M=NdBd2@J`~I{f`)
zxLEQzfQuEhF2EX~<Em0Vg!p@nzV!UBY0)85xoWT(DH#KNVP$t@La%bghEQLO$)u5r
zf=4G#i#N7NH15hGTD$KnBMxtMLC^97tzSV>3B>5&6Bi^!k9v`pq?fb3=ZXFbx-33}
z0p&jM{&X)IFU$MNC|1#@s(yW7Vh=C2i`(pPZ|F1mMFjOeh254zS=ENI=}OJNH6;EF
z$%LHa)*p%-;e{=f&qD+GI9gph#_)D*S+kcq&bWYU$V!d;yBUY8=^j3<e{n?``%Sbj
zVsEjI>Q|JWlPCV$r5b%ijD_&{<Nlhng%b7sEgU#PH^ZpZrAqU~ST2zzW0wLK^*fF{
zR~Zr!bWHJW9GjRLv6wy1B`e+ArQ8+AJ3!TS^tl`EJ_`h?2bw-4?J(usHGDJtb6$h<
z;3OQ=B{o*bHP@)kNN%jq>M&ilfzL@Z$_40GD|C;|5kd1U_er`j?1vx<4;gdRAB(?1
zSB-&S#y_j_UnE#d&j`Gf@>~P7a+Wa13tFx}7p#t#DH1>C3=8=BX0b5C7VMzON?9D@
z5QMeF6FiBm%|D-FOpBLHEXb-{msQ$S<^D8rNm;Vk(5N}2JV#e0pT#u+ueOcBTpqJ^
zZlzb!26t#|W`B?5SkCViwizQH623b>WP;hG6**rr*=A=`t*ek~aG$0J<Ez-4lc{MV
zuOJ22GR@Z?Vh$hqbnS)D-K8&I0t3a1L@Mc{s@iqA-t(n`1X`Eo-b=#&t;Ik%>o1t5
zLo{q1;JgKOmy)CvRga5e`NOzWV3NbW@#b4EFpedPMkLJ&c!U-<JIk4?jSH_iIJ@&@
zs6%z#cPSiqy2E7tGg-kOZ*QIq=h(dK7z;`G7{|xfPuwtI*xV(VO^a|#f51aUFp0Wo
z7DI^ZHdZ$gp}Rav@a;N^8v^s1&M8xy7_+fauQWSuQE7OcPTy)i&XU?}z-6mWSLuNu
z@*e9hCM*LWn%8)3m5}Vt_n_NIa~@`tMF~$_l#^>v&=ib=d*(Ty%ctnCUBSMUA@g~@
z{B$V@ZWwEx4~vVu2eavmOX@`ND8EEQvXp_MJe03WpC|tL;xxRR7NA)aNVnh`cLK@b
zK;hkvP{hkCnkhuP>V&c0vk5-ftW?zD$nI=|9fdUq4j}GDm85TGNh1=N^iHnOphvYL
z7IFwd?Ra_KXgI63k=h<MsYvc<(Ohe`AHxvR6tRoL!Vn5{Hx@J33c%riJu;&ysliV_
zc%9Zt-#Y2Gn2(oh&}ctE_WN<Si)xNcT)tzg+;N{1U=oN%s~<jdaOJAY`LVc8YlJAF
z1*%K2GZhd`@v<Dfihr=-I*aRE0K4~ELgnFuh6ql5?(>f20na|`OsLRJS|F*9_kRK5
z5gzXOvhp`MOOFj!4Nl3vlI~fxdUSI3mE<gbtjnfl-<|qpcbC00e)Rt?F}4GLC8Oyj
zh}8Y!+;X+82MQdaKtUZ5D8RKtA4c`j;o_4np_j<q5!s^`5;A{a<#CS+h-;SIQUI$7
zh+{R7`@G=$AR&*Xn?Sy&FU%v8=nhcjdz9P&(Uh`{|D=27#XPLN@5zr4+g`+C{s`g{
z2QCvhy$N%PMz@0+f-gWd(7nCTeVBn1Ykh?LrHfd9FWt`P#q-&?8yCpf4@{&Nlx(12
zmUrr}@_NuYQ10_MQSR0#F+GB8C$|*8j6%RvvK{OdIw2zkS|$9gN`7WO<s7)-u`r|V
zUyhO6nixtl7`8aI8sp8Nn<H*v7U`d^BA-hzmn+?s>!Je!yIsPZt{ir^U3{;XL?>3*
zB?Db*C|l;#WuoTI6PbNyEa-Lmo=oc2bH+XSX|pL}#*psgBbH3u{@-!&FDCDg-=Dm#
z4fgnZ*oykSdh+W-utPFG9*?aEYgVUQUnG_ONM*R{w?eXI?iNH1ZG@!#<|2%Lf?MVS
z!fMi;a@yp7@A5}KEIv|&wkF-L1A(RhY`vNY@sI=)!mxMG{se<giWh@;W6knCI~Sr1
znnmKZG<lw9FROLXaZ<UocR|_<4;Jps+F*90?W1nHJ2hM}edt2F`HQS~3duBC*q$sJ
z8EU`v4IvrvH*1hVJ*$gG23D`M*MfbmCO`sA46wu`vD{(B8_9--hVVR<p^z-HVylDw
z-#cNL4aFUj4ux%bcLJe~3~!!OK^J|xXTt#xM@P#33;v^Q%ZNz&{Y=dB=;bB+l2SRM
zXQxgAd@&=TDc+`9@@)$cIS(yTO@b=$0GtlQRnHYOk)@6~MNp3W<Zv6wU@(h;AxNeV
zs)<3h`?sAKH;om8s$x)84(NRwQsNEe=W=~Bq&4pI2*dtfEh;Wq1CUp~>|PyfE`90s
z))i~Q)x+M0MC(f1(a|>SsAi(&V@vlvU7D_$(tnA={JHzxLVl@`KV8T!^GnAtMWV0A
ziMI(lL}yF;wgWRi_z}_V{3Vz49#9>1{OTlvI%c~Fdanxm0&zLjj8XCA@TLEMj9w!W
z4I3-#gDf$~`oBkFnq&-#HMhi?uS!M4NkqB5()N;cWe=w}S6Rc)Pl5Ua1lBr?j*P}$
zmXyMIFKxwkCBQFT?cQwQ%&3U>-0zhlPGW5A^XK$lpw4akV8;(f_8>~iZHrRb+N(pS
zQk0c;w30_?Cd5OVFl*gzn6@!rCQPY&=gRIT$z1nNk`?^VB-uSvWcqG-B$3)dh5WD}
zlfB|z2~0s_NWT<H0Z1sEk6X*a`JrGw0ei`>WD|AkJp=W_YAlWO4rMB0{^zdBB6d<<
zLm~9F-CJ9DV)_oGUd(xPy*0)bSiNkWHQE-il6E7VNvzXoX9RnG{r>Gf#{BEI?eXJZ
zHHT2Ty(n=ARd>qu_;1NAvW8|rCQJ#-3fc{VI6N!(lFS8G1A32ap!Pqrffdq#fs~9i
zec|l?PqKkO|366v;>Y(-1_CMh4S+15@&DRO(|(`5G|9d8(zL3Ey)=cm5oV?!K`%PJ
z8c83V-Xrym6fQK?6Bl{kE!ASN1s>eJ`*Hk+@LKfKM2Ynhf%T2lAy7F!%-gkBtXd~F
zL)J)(B%!R&;dR;`;ZgXL!Z58Q>27_@UAI0i9N}8z-R(5pnm}tgmgBvlHOSJc&B5!b
z{6yW_Ehj!g*pVf3o={$=4^+)>ZqlmNtXmf!!HxTHWfCEeOkc2@kYyuC)ifkc>(r=A
z+&~~k%xMnwKpa$pL18v|#aT%bK`ne%V4PK0wZP%sju#!F%ySAc)Hq7XFMXf8`K`=6
zD#%DJB^%N<N}0SbukE0bvk5!7aP?Lbv!mn6do2r8O0`Z8bTma#&ofHb;muY}oxh6^
z-}=0FZtzxhvJxF_n%C+Bp@;-IMI9CP&a@k=qV=#c3&S)hrDTB_vH+Sq&Ab1Ihxn*8
zGM;P*P7t35fdUh_T25Vhe@j(Z0Oi`iUNLx>t;Oi=+S$1Yhu3BA$tD9{s*&9!yK^=j
za2T>}*}^k-h9k`RqTG#*WIOe44rg|0nRY4(55)Q_6XQmjrFaZg)a46hN_9U{(|t;N
z{@qiuj4m0<$cv9Xx|PyxJqUSX$?Q%4S0Cp9WJ?Z(;gj^Fdu-db?z3&%ukh@<wt3%O
z+qUh}+O`U78#kLi$!3!3-W^ZZ*MD>>)k*sN->}Z+)~U&!_&L2Zb!Ni|&uy%396_h;
zoIYmvt|O^)(8j}OkKC~32pUbysBda(uW#!jJ14a?)-<9=bGPV?lbt$@oUKNBjOq*d
zyyf==%fllG)^+z~>^3HPBAu19b|xmHJTu;LP|PTb7hLW~k$5;SGus^zJ6Nu$tDaGl
zyt+uFa4c0#KW^U%t&^whI5J5@(9vglNjV%oEzNkLzdwt5Q#z-4UdwrG#^OFoPu+La
zjg;PW_V8Cfbguc6w#;ptIy=%a2%N(SVw^qp2=U-L*h|lcJg|Kna{N^Xu1?OUKd@VI
zb%I=Qb%NX;dWz$+TLgC_a@qDvs(3DX96g18!yXgNO{SJU;3-gAr_uABUevl7xv+ED
z1BKR~>;b{tf=r1KtG-szOa8uotx~*7(0{Rq1bwSnvfhL%Q=IY+r!M3G$hkS`cP3^A
zsD#~j=HSkzuj{__f9BT?Fu6j!^D>95zH_G|a<{2%L<x3gBeVAD{4I<MwREt&^6Io%
zUX#<;xAV4|TX&Gl&-!}EGw<5hCjV=iclo5(=`r`w0|`A!Tj$YZ5<9hZ9!VU=xpaK=
z25BQS;0g64GK~yk|Cs(k>F;6xApN;PN6Bx3PQiVE49O_Ph-PB&b%<h?LBHnpYdTH{
z=~s#c2J^g^AsO&s3&|scx}><icR#t1oTGL=^4}97fRVB^(dqjv3aSb3KA7Cg#fS6_
z^oEP;Evn@?WH{v6r`D=fK{`sF2%$4AdW5E9aBm2mZPD3CWBcGeGMsbiI)`O;$Qtrz
zQN^}CW2l0(v(=!ZaEPE&Fr(KsnDO2S&BXYw5XEGJp66vFjrHQ^V!hDw49Bcjjae<}
zhdg76VfGw4lwr*DseWEU1_Sd*&418Q>W0v@79G)a4E_wE>n*xp({YkT`U7;GMQ0!_
zqprq}I_bTHH5{(m(}!i+rau_FA#{{{inN_=QE1T-O~>G^5ba`%&OlnmO#*9(9za;;
zXdSDlVx<kFDHU{caY4|NWqaTh0Hn>6+>RkSsm-9HWJCzvY0%&jMY|B|3bNe>TgbR(
z;}dy+?K0Rb_NHXPg)NJRTCzgdZ9lvRYat!P{kIRicl$6oAG9Speb*B~O;z*31e_1h
zp#xhs9m}6|AXu?cpyN)m#fp`^&;&smBS|Y0tsE;4vJEE7-b5B#Ho?D&59jQAarIPL
zx1+yD1<Ml}6_9mm3^v-0thLB@6`Kt}e`P-)E9Zko9#l>?lwI}|(sDkS#lPnqbK*O2
z<QB-0Tfrd(ckL_GotT@B{k2fV*tytW_UnXY1|2czD47yMms{EdY3$vRLAKIl8P{xl
zE)TF37W*c$I1=mqtC%;7bz81law*o$eit$yHG*`M%t6}DrYx{%f;6^dVo<rrWZ9d@
zV(m7It1@E~%Ui9=E64Kegw0&kP&8_+mKqWG2Yfl@OaK4?c-mdbg#p7b5ClQ_Nbmj|
zO$oU$j99zYI=U|BskH#mP7YEANxu=YH7Prx<H_qau^~vbt2<zfiyexZz%;~&w&blQ
zHa1AvTjMy}g>yt@1CYc`imn;{1M}o!<;`DEev_`_LIpGc0096100JWtt6|~oUk^O>
z02v4X00000#PAU=00000)d5o4`c3`S38M&e00RIC00IC200000c-muNWME*=`NzY+
zz#00>_g^UIVh#qz%?!xkEdYv<2Fw5ec-n2!1CSU&5QX8lGd;0=wtW}dwr$(CZQFKA
zv2EM7jZSZP+Ny8u`SnyZ#-GXh{G0NHpBjc9v;xl57rD%SY&4#5wMwD8+KWc&08iIr
z(U^)N)OyJybu!dcr4XoIaXUG`s(2tQ;UH3rLZX7`Afm(|l?wqXEzi^6;Z42dSTcC%
z2N;~-8#0+fJe__Zy>Ue~lOE}*nJ6jSl~CUdMS4{R{!||peU$xqkv_o%IW|NzMNN|w
z_Ogb3J)MLnUBr0fi^|3Y6B3-oO8Ug>=mKWa4!)rx`L-^PnX>Gm+aiY^z#Y^q9HS^C
zr{>U<0YTIPp_Cip>I_O!cYZ|;`I~Y;YL(*07Yc*6*Awi4rbhgo+8~&k^Hyq&P<2!G
zB}8Ji0@<k{a_JAKZFZoO{?2RlOFk^in`)-~XTVL(<b@^;%Bx&_l?I>`E#)t!h1@R+
zE*A4Wdcybg3Y<>hjyk$Gw(2LyO%>4Z*Y<NOxlWEdlm#i(3seyG)f{Z0(|kc+l>b~G
z)0HcqmHqc*thehY{K3q|9`gnp6O_Xk{eUkdtils001l=RlF?pdqL*+?Fbzp)05VfI
zWTRGaq7J-W1;QcWSd>bb1UdCxJW=!UTJOg-dX0(Z1DaV^vC%q%vDQc4q{FdAXT@wC
z$m`WP%r=J*p}I&X4fwV0Z@&+kN(V)$CdSZS6riIhnK18f>bZ=~b94}CW&OE$D_FKu
z3kN|WT<$ScG!-4iU@=;B6N~JQ?Ji9ezqNacm-J<~6`kEybpN`FO`3|%Zp!W^Ueb}>
zP;~ac{3DgU{MS!x(oS@CJAC*j!&U^nc-lR|0}vZQ006)^AKP|vA02Dkwrz7z+qP}n
zwr$(CN8J?&1eN|DF4!#0E8HNeEV?E7DvpV(hzE<;iqDCkN;HzNq_1SHR3sfBJs~5q
z1+sJUI`Wh9oAQ^OhGSd}ZkM8iVy!Zw?5#Ye(x@t`wyA!oZR)b>@#?J_PE%5|K=V>t
zPP;^B)fLeV&~4Jo^cD33^n3J=^}h{KLpeiBLw_S@Y;N3ba+^k)ZklVEXPd8DVwTpH
z{#JptoOP!4kFBX~k=<->YF}l)?MOSiJ2pGsJ99ZJIwv`=xKyqduCwl3?)mNmo+h4I
z-m>1~-pk%kz74+9euKZNe_0?D=pHy4_!6`S%LV%d&j)V@zlMyVWN1w2a~Oq}MI@1)
z(K69JF@0=!>}%W{pOq+^=$+V@_z7e{53-;FXbHN4zF-+R1#W?Fyp>Pz`S^qUjb!2E
z;#8H?%XIE^i}c1!BGVyrEn6ttA^RCNg+1X&I2*2q2jLC)=HD-<CF+C5p`~a$I*hKN
zN9ZRuVSpJfha2GTxIdnT*Wx4iHvU9}#7;7#IH^opk-lUKSw#+z)8rm`Ma9%fvosH_
zL|f3_bU2+s*VAM44*kRg%*N8JD67Dlvrc~jno*SG009610PX;g02TmL00jU600000
z01f~E0ssOL00sa7c-nQ21!@BT6hq(KhYx2yZ0>^0-79F_-3{$wdYYc4hiK|f$md%^
zfLXjuFg7^{SfSaEv8buhkF!Fs(W`DzZ1$5~{S-Ttn*B5zl$-rBMk+iIBTj)N0etvL
zv&J!p90_Z@5EFca@o0J@ii>@9cZ7vC{@bclee#eJlVnxh>}wOlDW=7HF|4h8G&|G>
zaP@qwjrcLwJyYsqMC<wXIpTy1ZrW)tdYty!PTfArDa5(vK*-gxuWMY?6_2JENqihM
z6&|9b@Q4R|^2P&Cd}C1EtEV`u0=POoNB{r;c-muNW?=aL1&Fg4QW&rR0AIfY!~g&Q
zc-lS7fd;}r9LMpys;aiiV%bzyRZ16Akqj*qhzfvW0R)PwK<W*qCut7$7(Gglu<l0&
zAK&}m|L@7nBaCn=M;P&Gzhe}0B*py5blj^JP|<J}d)>BH0~NpS7NZI((K0keLM6kC
zlx5bnJSsiv{VTIsSX~_@O@{4q0VOY|gJw|_;aMrkJW`$C_u7nm3O(_)LeKmOjtaeS
zTNN`0Jb<Z+j}<ro7ra3L3>6o^0S}PZ#o0l}6ZHj#E|wkOf)5CQjXkr33t-j+w%`XF
HVNe<X@PxgW

diff --git a/static/fonts/roboto-v18-latin-700italic.woff2 b/static/fonts/roboto-v18-latin-700italic.woff2
deleted file mode 100644
index d3239a3b13ce5412e32dfc58c68f12a122dcf08f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 16572
zcmV)FK)=6tPew8T0RR9106@F|5&!@I0FCqj06<m%0RR9100000000000000000000
z0000QWE+`!9D_;*U;u_p2ucZqJP`~Ef!kPt!X^uYUH}q-cmXy7Bm;*w1Rw>2CI=u4
zf-V~;ekE*NEeyH?2VB*<<}6^xj0WA|yHtdVjf!C7fUuF|v;Y5+zzq@6egW<FmP&_=
zO`?f*rp#bd;o60u#Qo5W++2+h=s4NNUeL;VL!}IrLjCmmZwoZBUZqYNpU?p3R_Z68
z%rji`gj@LGXr5u(8TX;vl?P>YGawh6awA_^EZt3UlRa@g1Ki0G2|I^qZg+pbC>T*2
zof0Alk~KDBMC1U893YW`(1L+z&niSkv{4beFt8GW$iIL3nx39>S4Jc<f)qM7Bf!yS
z{KV`3UHjgf<Yp3{;SBKG*?kN2i3_Bw%EHj`tjogmtdLz<S)nV;SF%*Z#x_866diLg
z<Y27){a-mPe66YmY2=VW!^BPTn$xfP1%=gWnt8~^S$>a(ze!g(Z$|m;oHm3cdsC>Y
zkIZD`jSUU}InhSTWTyb%(yNTr7;&#vhVJL<05`x{fkaY<Wq>CRhuiPqRmI)g+V7kD
zcXyKIz&x11+x#NkR+6nSiaj1*A#rq1EcN}iXI~1w91>te(LQS0VrI1Z{NGw?=aRyv
z#4@P@7P57+Le2i!TbSKTHoF(v3*1dEL>r=(H$_s_Ree=`Rk>3oU`OEUsub!zUn?10
zg_PwX|Hh93YJOG_c#5qpxP>JF{zYMi5w?T^Z2AAcmfC;++aH?HOW0)t<W{&c2~*={
zXF{`oC%_Xds3|eaDgxVVnQe`#>#1y2W!n%?5CH=H|5sJlcfn@Tg#psXY+f^L0O3NX
z^=YIYBz_p6=+dcFDy6lDPbK&t;yEPJnvN$OkDfC2GAx<a46BzRCd(lg0#%_7R44wO
zufC>vlt;3asVv=6cno2vDsf=9YoMQVk<FU0z4=V;fTe{>s!0ofESI&Xk5|oEOCSzD
z2HAQ5!iWLGo$m)jrNtiPDhgDr7*wqqBqRjYs|Ph|1T|{~t+Ns4koO=60{|TWOb`GN
zR15-u%9K5P=UshxfOXO!F9WbnyPcR0SZ8N~EWm;T0DKi{bk-?(S%3`4Ra`L!L(S9G
zZr<5)ZR-7QzuR=1O@G`!B(eXmIRqB-<P;0VGGQDJ5f_4_#|_bvZm}tT#{cw@p#!^N
zx6jZXk)b_L(iROpiF)kN>qGzBHHp0z$Xy{wK%vB_*Da2ShE9qW9lG@BGhxb{1xr?}
z*|25D-U^<)`0&ROh$~pAFySIa>(Z@9uR{(y;;3Ven{dLUlTJD9ybCV6<TCNS?yh_8
zd*G>Oo_pb?SKfIKvMvs1Lz*pZc4S>A3z7=O6muU)W?QEfiE%jAq`5Za9^fHp<jEUX
z(0y=A{I<ecixj0bV2#w51Bk<s9C6e!$4$g+LpRL1>6Y7ZC*ZDo?t9>w=U#Z}RlIKN
zjko6GU2E@mD7?t{HV+d@O!XLnbt5*-*#_A)a2<(z6ce$O2l|5yZ%S|>;Z<a2R+d$D
zRQ0`SEC|OS&5?xQreaBfI65$kO?+M;GHz!Xxnjmu*P7CZm}ryEQIdOW9^lDa(5RcO
zrgUNICOvxNPHT7FbKiq|s5?Iz_aG0!leZwP?zroo`yM>wyhsbRL^uicLc(o2Zt|YV
zd@jB4(yKNBGbc%F^cff%1VM0stFE=Bxaa4=lXu}}7bMRip@pMqo%0U4>z?}_#Ix+4
zd*P*5Y(PWys)$CPLffwr8?DahCC4r@%g1=N^F_8_kHQCY#ZY@{Zns!720LDUKe)C~
zV;Q@6W*^EbT#Ox1UqoYJ{nd=r;d}DJ_gB0yVCN4God5C^$&1EEakJ*e^{p+CdS7dd
z+1oaC?qCznQkA>(4Hb*+^Ja7(7ml|<XYarI4aX<<0R1%Oj)_O=D~}@gE$zoEwFG>X
z_IzC1_dR!)tEkr4eLd2i&ue==6>F8YuA*N9WLw1kZ<|YBHfe2f5RbJsODo9_HLKmd
zUngUcU;z>&OE&EwDf$}{VQfe5_d$=%8wYp!b>5_X04~h_iXYs8e~E7vwvaBcrRIM7
zYp(-=O<f2^3)|Z&R+%6$Y?E_&mLT5unf87`3%Bk~-5<_8B{|6JNC~{)oH0GSt4da(
ze$q11Vr{QmYuDVc2gTAoa<z`QH`KJp5Vy$@noG2s*nN(-Vn=u9gZ668UZ+V&jYcMK
zWk}31^tk2Iy=Atz>!j<p_|@k9r~7i1JJ?jHwsY9S4zz|f?7N^z3;>NGCSxSO2GODi
zXUGDDHG7g=xl`aNSdmYt5)K|^!K^MUR6~R)nwmm&bm^mOAhxkX9x(CLD?u}$x#2LD
z(~=y?5gTli7^BS!bXbBeLwZbL%v2^!W6HA38M0t$*37Vssce|VmgOyHCOf9HXK}7f
z<i;fKTBa=`1NQ^rxL|}AA+>0b0>uPNie!o?7Sp6jvqMkL8ff+`(Ua2$W*cC(L!r=N
z6EG*<PQs+q2+q3<y5btD>mrnH)@?+0LS@|b0NK-}anHPh%!{Xx1W9<(BoL9c&>*de
z<Y5emF~%&%oH3S+SsD>D%s?dy$&eI@6OEXbRlX<4n=~|u5aAvY1cpMGjvpZyHYzfa
zHDkfzVOoeWtxH3lR+F`mBuJVhNZONj5Ly;Q)R=jM5rt?Vbw2=YlPHX$*X9vi@}g(j
zT0D){m)&;WeMmbT>8i?Wr$AnpzH6Xk{_=f3?8E!MHJA_lu&;OU$Gi`05#^~kLN+)8
zc5ULx=VoUD?f;Z#Ens-|<>Xjk6=?bL9_JQh=79i}c>o}oJRd;NKCiw7CZVPHP-2#d
zkYm6x2FThWX{_|~8z5eMt%LC`52{ETIly`yFrDL-5&+aq>)BF>4gw^5lYrVBtirGf
z9<#GX_^z1csK#wFX0t7}+Ge{Q<=O$PZ`q|pJ^_*4_SkEm{V<R;B`bn?XB@K*;oe~m
zz?IWH^qHi%s*VL!fQ}SrU+uo1zdKL^)EA4uf0AYc0aU?<008jqhG@a6P|cNAY^y2>
z>U+b};cagKSW|_Q2LMBb(fYsd3Dai0^ik>}ye{L0>G&V}D#hH+<Gjv?^ON~)Re|dE
zm8z2eF9IT{>UE8;KIyEhURi(&EXwD4?gxGR;#S}5IoUdeS|@?UpL4GNZZWKE?sNb4
z|J(QY3Z+UE5s1U5|N5^F+rSa}js+049dWZ|@8#7FIk)8f_cesBm~quL*VU>s>xMZu
z-Ev#KRZHPdZqVqpH{P1}PLucO0040IKBx{L7+?U+R|P<Y>oJN^9KgC++X3*s(A{y1
zgV>1^$i^hj;INuTHO^uNC)8CO!ZqB)Io!f+)Zh*t;0hk%5o+-mFEFcKq8_jC5qH!A
zR^b!A<0*dNCmQez|L|J<N0V9<?~%bxf#$;lcM#AL_BPNK_C3%Z_9M`7)y202z+O79
zDnFX6Sr<jhdZ<&^Pn)&@%h(v?!o@HFfwi{V-W)pexh2rs3XIYRZ*276zG9l0ZFj~E
zWe({Cfb{<u(%2wXq-M0VF&VrSlOQ5Zls6f;i3D+y*z^bn03wFoB1*v5ZV20s_#s@p
zUgUCNw?fgsjYPz7XnrTvMFeB!Mbr>PfB5{C84kTGLRuGrp&ESErn%{ZPLryeYD#Q^
z2-ixyGelw&|JACuz&$)Qt<F1KP4ue4ezrfw=i3<F;(J8m_#~zT)wI1M(|8`>pOJ_g
z-fkJwehTG;imF`BiC(>f&sJOJcSMt0+~BmD+DCjNQB)sqQp;22D@8(&^jVW)`Blpf
z90dL?O_^Uq?e-^~!*1H~FGln4QvV^KAH~5hLR#m6S+)OGxvHgIz&#H1kJxo9E=D3{
zc*_lSby;xBN4eS%J6DN}>tM^QA&+3gDor2S!wx0fNiUJXO$X1L2O8-0`3<&c#|;&!
zHvGc`>(HRz8RAt^Qx$|AzFQNxEbm2{^3Ixk$19pgRL%G!K6v4epAnqcA{=WkhrZ;n
z^K(p0fB+S{9`k1Cnlq9sXxGOitpT*2>F7|4U2O<;ubzZ-VwtT~kw#tB)Nq$8MnLP|
zS9-2B5-}nyadRyfW~dioj*K}J1L><#h_Vy$GXgE=J)U~!J&wxpEQzf`gP9l2-ry7x
zQCZu@0#VfVv6aj#xj1e0Y%y_BtTS(9@Lug@A)HlOq7;aWN$pVBpsU{HXq|Pq%e_r)
zVf|L+!r4R**w<*6xlaP(wK29!vR+47(kispV%RV@HWof<Y{G2N!mG;@Ek}>Wv{Gjd
zgI{B%tgVz3*Mt`W4>4eKf~P@vyBQoxD++5$oBGs$8yDZEq>+1{ieDi;Z{q0+N{YyM
zFX-T56v>KIW_S9!P?=7k96Czd0R$9|vJ>kZqlw6jC?N!Bvxy#dLik_+?*RnHh?x&M
zFe%<vOvqnV>~Skx$Nl)OyS_G9J9I(TVbU89`g&IlX~&2Y5UtvT^#Bb<IR&ju>$T<q
zn~!+#fxd8NS0mp-f~bGq)7k$~AGJJ8HN<8_Mr;0^GR_Q!a0t_9j;M{9lQ!3@4QN_J
ziB(oP<r0@P4C=If)Ace|9EVcy!pF#3kj!*WcC&wHe6;Uir$@A5qP4!{b#RU=idON)
zn->>wo!LZ-I9A7AzjKZBn33ZnZQj6NL3^5D1#el#5Xw8GTp1}Tvh)>cx(H><a(vhg
zt3D<P_6P*;c)>~#VM^aeoc%jl%h+3BvfK(r(lAn?sEms=9DSil<lMGq!HN?3&h)JI
zWfdaNkj+I9UI~<en*nkASZt?wcgWr~J4CXyfQzjrZ2!6&K;gQ~{Av`&(U*_3PRK><
z8iVLd5Ko$Vt(w<ihV}3YyfB@@vQ`#Qdl6rXYR&#V*DpS31fP66*xdt0_w<{h2U1p1
zGEi5N6-gPY!574e#XDe(W`o%zZ#KXXje-w!dt;?(JmFQMr>mw@5vR=DIkHpPR$zg=
zAXnyumfDU5B+nVW=!(YF;#LPyVP#3B-O41bN}41F2cE*!M&=u<5B429c9S~;m4oAb
zWe}8AE-l2cwG&uU!-9B+<C+vut=e?@0wK#vnPHEtZ2Z7r#W2sc+oZw#_FeH`cZiSO
z?rX8K@^N2$kYDuWuU;ytAx40eLLqy}F`JYIit)jv_eHC`YChzSnN-1cg-cZUBOD-L
z&7EaC8nmv5Z<x>yKCNLulDf&A%c|K?{VPt?+b*lpVV+-uhmfx05|Ah)pkxeGpB+R=
zf~@GtOXAuBE|O{Hm92WTtZFVbZlB%y$GbvnTU#~%+SBcTXgqxN{LbIWPfavnVX|bq
zt9&tG!q}jL%L8NH@T}KQ0eVvv35sQzP?#o#z-069)vH_@Ew7b<&Jy4X6RQ!Mc?eK;
z_qw(B!{{M7w|#LhN)kwTW%PlD?+e#@K!PYz{<jVqvm$CtgI40-0Gg!iGlDb06Pw~w
z>Go(L03dpT&B!usVtyN`@HGq`yfGj-XMY@r<)C&$iYq?u>s(ebr-I=Gj-KA2v!2lr
z1f!Plc1ySgK2fJ0<x{nl8^r6(lb;SMTd*AXMVod+hOf~SH0qWPwQ-Cx?h0t=$K?2(
z>oG>L!4kD?BVY6SjZ)n!BMVz7Jmp(E-+Jd~5&TZmvZUQOv7|LQ1C7&Qp}M_jL%n`t
zWlfB5sVDm`S-X^PRc|GEuNCjb$lx0TB8ST}SipW87vZUBrf6v(|H4_WJupZf)Vyxw
zDZuE3BF5@$@H3lS2%5~&rmIBC$$xm$sL)KBtxt{_Q&}hqUi>y1y3=k%8!3;<eR3C1
zueylJHY|rec(?%%q5cUY3Y3jhT^S@mHn+fFMZ+EcX9CU?xDHG2&=b8EnUc#=FIm%|
z9+1lRSTI3_awV}O3lga$@1gQU$+2pZ3ZUcX`2D1$FMKh4G+a-9=%CY{tPx7P{vE%K
z`IP_edtv!An>ecSFyaVf`N^tK0I&PQzF<B>zEA2t;2Ev3L-12~uI;7!edEO_9%Gie
zUOjeW*eclC<U)IlD7+t6`)4Fv85h$Rr-q_gW(6%bxZ@${FZwgfr_EM%8~3X~N`3zy
zDp<w}i5FC+6Z5e<KZ=nji$w^_$w4toE@PLt?Vl$BRC7CIB=2$cN&DBN{yx-#mTE!%
zDjT6$M^LM{c#uu#C~K@r`YxPn|66878W}l(AgP0|IS8fCc$m)k&6}{Vmj%oppF_Fo
z`I8H~;hm(RKI|H^?*mocArens*dbD5yK#qPAuTv%YZhp>;mR;eUAKviuI@CT*|`=|
zMXt`X`L@12KRvqQb^jmkue*Nd&pPmoY%x&$KMZIP+o-K_G7DiEV&eTbw@C=0_8EZO
zI2_B{I?U_7Uf*Ws>VBkZq2jv<9MwSwqt^cH)MVO?QPVMzgJvd0R*jEz<f%~-DQTJ>
zH;!P;*4o!2(F%PjPDaYzjx0IM;T)|Kgpb=quii}o5C9Y$*jes9o!av4hu6OH=oCw$
zI;n(=^F>8=wH5%TT`p&8Ju!ekn=b-VG$RkzFNcsaa<DTL47@Aa!k55j;LLNF?eP?&
zZR3l3kxIq@9P1)&upEa{$P)`EzY5k4+rI`z3;rSg;SuhM9)B+!Jnkh;G>pk`GdJJZ
zx77s{Lg{>LamT9L)NMfXTvt-#bVqcXXh@S%ohV9Fv;#^MsOzP!L0d1`oMZrLD0yC4
z=kh3s2AuywEBHWG2_?{@3ZoyT&K46WlPgH7JV)7I#qKMiiX}x!N7u;6(W)Rsf*0CO
zM<r#oB%$Imo`SqecJ&RZ!aRO~(dG0(tRn~zsIZG2jZZk2KpXyu9H3R^=8xWd&o%7s
z2MBZmw@DdXZ!YcVBj>+xhHx5ke@*n-Sn2bz#K1aBrgjtoe}3|_Q@Z0R@=vAyih<D=
zo~S&k)d7Kc@L{Z)&uWuj$pYz2XR_(3u$!}Etn_hCcM1?hQz$V45J(a=u7w|IMbFkD
z7})?LQ9#bbJo(utBegms=ok{_3_nE%LZ@j@!(E_TXo!j2TvA-qx?s&|_5Qe~(ICw;
z+Hw7RTl<gHYrLzp?MDpzq4JJD?IVZUM)nDGr1UkV9Uo)aH{JS|mgCpAwCmnj_P(``
z>nN^{iI>8i3@<f`J*IA(zdIqNJ2$L%uUBR5M|^?>%zO{#2h$U%oOb)zJwa0++QmOn
zcf6fDDWyF<q<wam!lB=U(+U7rh8BlH9xRHBRGpiyLjzk#l>{F~!_l!?R1Js52sOA9
zwe`?8T9v!8dm{4ln4tKknR-aX`uR4=IGfW}9o@7F)}q02QWfq*?Krk&6{>`zn@BZ>
zp_{qar%q4zT@?Q`GdIY&_b(;$TNBUfc|t>AmTnd0z?IfmdmX-cIWdNmm%HzHOg6R}
z9X&#5rX0K7mg{v?fm_6E{3xlg<G}b&V=M07v<Y+^zJGiY55|h^<~%D?{lwC#fk6o*
zsr04V33>q>vr;c|B*)s(>{>WKK|UxlM7Td#dq%F<+a$qj$*(Mv(I7m`QTa3+#0Mrv
z?0aq%1!-HKAv}RmR33Bbd6VH_GT%+{2pq--CPwXh3RZ0X8o-AK2r_%=>hVl@;j~6L
zZ;NuJe*C0=*pdQ;N%zoE@zLaR%?C2wg{p=^lPDuR(yf=_)*EAlM?2Ru*vc8*0Um-C
zX%dl|vmX=>>SFTczcqDUYe}BfbAnO9PS7zt!r2Lib5R{XT+yfOq1h&*M^ewFj-ksx
zum`}C?5WE%)l)Hlj2}Z+zGL@+7ui!!%*;U1f`sdwZ6=;4TP-)^h^M;Y7utyz=vJN<
z@$_KZ^(;Ehi%m259(~Qh=Hdm_YxwiE-N}dPq0*(rSTw9^WMnG<v8waI=aLq10X?}#
zKOlbj>7(`rJsKanvEoDPL2^?rHJTE@iP?Yz5p+)lNZzIR_#(WFK0crxV9fk3h&2w|
zPDmvRyUzYdYsXH(Z!h3cc^D9t#DlT0Igb`WkB>=>!^S|#vN+9A-Pfa5HY_U}C#fmp
ze36cESCbixBXoK7&zydwsI_1cZ4<h*_~<3F_-$Hy$BX&WR;&b^%gR0lieykIKfwpa
zV^zKMN?LA&FbbwZzJHS4w@H}~F~JhO$z>(ur~t07^nO6CqqVJm_r9hPYeSd%A}QiS
zRK9W1xrv~F+a56AJB-fv!C@pP*9&-J#fi(dQ9{YSfngkvsYPR##ihoY(}y(QyfSyi
zEg3iFi+DEN9mFK+X`T5yXc{g&q8?;?5-VLTpd2NZ3Qs&t6k^BFgWGalw$vbQE(eCe
znqqn!H7GEP3&UYmQRICx$2G<U`oYW$DxVzSl;j3|VRla5Z?}@%W>^Hq%L5+MY8a!t
zP>WrJZWi2&=Dsj4AvdBcHORE=*p3JpnNQ+V*gsLBS`iAbV6ODEgwfvl?$90NrP%Bz
z@rnKc(Oe=iAf9;6h-w;}sXK4Y$u!rLb&!0Us5hS|82VRJXM3K+1!J=5r@aB*T7Swi
z*ElD~$<?8Ij`VyEilU}bVv;a77#k@bz=HJS)Q9KMF*G|v-%i`IzppYioF`SowT4do
zaOy(5FJk48NLT0_#_{nQmDz?HHI}!xVnwiQf;31N=y!d)zZH7GDx)ylI@bhh3J)*G
z2hEs|)bY{yZ?~$3unm}Y$18=}4B`>;^}tra898heid@;lRYC90LCLP+U(y?t9@oz6
z)-{~FgK6S{VRU`M=5Swr-m2}V`P7jFEHE=!-nrtzTTVGX{zUUmuGKZeziSMfO~*vy
z5<wz^-OAA%C3hL|Inf#L*ZliMJH)uZkQl5Ky^)yBxUBtrabV!m@DgNnrZK`8e4m6c
z^zp_t%z`cPj8OSq*T5}M>|Onm*|Y7nRM`mDj?Gn+ERcqXB@UUJ*m;5L@@LQ!L>8kj
zXn>zHEA!DBeDaa%O_i%C85gFP#b9;#XoEtf?a)`pI<OjhThaMmteX@}2}>|ov9?AR
zB^;-AT`C3_zUoNmt6&?2yK0cFU0ji|b6tnt!hZ2N(O&(}t;@qqId&M=I5|+uLIc;7
zz_G|Q$jjl7Z=7M;F{~RrsjB`&9-y=b)J|zib&O-r5d10eN&)EN^!zk*h;So7Yz1X&
z+0jbajZ(Z!e^a&Z8-}mZO3${;$cC$_mE>!c=&R-HyFh1-pOVE3krs9Df<$B2omcry
z*k$x+o-nHo{N)iW7%MK8NY`88a$>jZ>VDglUEMvt|4xNqja)v<&nJE%O>d!n6-rNc
zOhmI#Qv0e@zg(xb``Xr3>d$q~(=B`=FF94L>hil46}T6vT^GMzYix!1%hayRnm&<I
z9oYSvs_&E$>W1+Aiwcs>BiL%}UTyhL@-SsrbpCm9u~kedIZ_m5ciuq(IzYJT&oH8h
zawm$=5b-jm^3Jvk@WJ|p>mPW>ATY0s&$%rAef#ALEF3IWnu#fmLQ>#O+sD!8&zv3l
z|Dyrkfiw-V@8l9o<MMw8_P>d$!8);f!pa}y5j>a@%*=DjzvM?elqbp?rVc&YwpRK>
zg!HHD`3d;kJ`=kjZJ;l><j1s@L*zR!ANH&iOJ>CIGh@*&5NsY>CtcWRKk4JYhDjtA
zcOE6B^}*{1eTEk`@wk}GL>Lddq8Nda85>s!&AipMJ0(fvs?|sS#`j_a*r!ta9GetW
zuL<0{?<l=7lEcA|ix`^6wVJo}HvP|4CcGdK)p=5F!CUSd>c^f|rN3o%Q_W9mQO!>!
z2S}~kPAEmg?Xq=L=aVLp>B<{j0t~;2mM{}Vw$@&|$7Q}!4AkaCI{54bx!DUkghY`t
zyn)Nt;=f|_^N$68iIII|G~+VyC+bgv`n=|82d*ws?`aLtIV}oV)Q?h?eAZ?Gu8TjP
zhI$KDsuNcEfA>NC&swTS-1KEmG>O-nH>p1ylX~@OOp`Jul9HM>l9r+suD!!frTOTW
zOtX&K*OBjMK91hJyy51o&dVo-I!_8%I?pd$2M?F1L)n6J^2Npds1+XBN2n!=SjRpH
zA;TfS$Zv}22*X|I4lEE2h)qtzgJ|YDb1abH58YI;_tV8FEK~hREEq&CVO7xuR|Jkr
zSW1h3%+KOmQD~j605UfLc7|?l$r>~S_uMC(Qc|%e^NguGYOylJ5%})VN-sq-1Y>jW
z`?J0<IaJ(}45Hks{WlW}u_^2Y1>M)CvPec24+sa)&6n^PDa1S88=WWU8;WHhFUn3g
zwJHA|6d_2}V>35_zhnN&mQj=ddXocBp(5k32)VI_Khwp59wcuK$}S;Rh=&M#c4(&w
z@Fc8ZqX#b43hp+ff1tJNhz<9XKDDhzSJ6#<h3DcWy(lHKJPP)s{F17X<>4=qunncY
zaAl%Nc`ZN0x!>0z)t{1|G^9B@2pH)K+h0uWh9|=%<sbji@B(SRbYHQMYlU*Pc%$>I
zm6U!{tuJ8P5pSht3I>d{jN&cJKhIG%ycppa(7Y|OuoY#Z!4h`1xI;m~YBUTFza$?r
zR8)`h%kjeUP-r6eynbXpO2^jhmFy;Zq_Cw<RkV)5QPlHLax!-dD{s4-DkVK1%SAzn
zWFf|4ZUXG(MvAm48^zy}&?!8`@lzxRIw%E)yTT_?{!5fM+R!x%WcS@XzXdu&4pa68
z%dr+JcG6u6S(4B(B-jPIhH{jl(~&=2-u~v!np~^pBF{KQ!zs<dA?@~6!xT$bBSq!`
zz?M?v*~*sGbRI_WP#7ZX)wX#Obz?neXh-DpMC`mh7UIN|983^cs$G7SW%1!VJ2e|i
z!-A6Q|FLNMY|0g-ZRIMfdk&#Ktn-f4WbQ6j{vJ0IdSV`yg+kKm|FCFNHon@={o3G_
zwwT|HK3QmO{{pqZ%Pq0L7(EKKrM5OZVRTTIFRVsg-|=%OnwRGX%Tdo)Ye#jK^p;hm
z^OYso5DLqQTVydU?;?<82!wW|T@MKpN-Fk*Xc*&_>kdnhe|o@i&4gl<h^^WXq&DS0
zjzWb-`F{Y@^{!&V|D3`#Q8m&ODliTYmmAM33_eTQ9qt?AWpGYv#}uGctZ}>403|8N
zSZL6%)q_F=Wv5ktBauNPOzi8?FLy6675A^u2$OXRB|pad@X3Sl0DN*B4$A@3)C`?s
z9LL4{SE;USRPE&Xm17}TQbqrLZZWnOe!KujDG&{;gMJAsqBXv`7*qCX&h86W3f#|G
za3x6H_mU5WO>or~T1SLUzvgVe5yf{jyQqFQHV8-VN$eFIWfe}C8dBmDuo@JUQvW|V
z-o7Na^9klROjY;Uh|#)jl&$R?o4_swMS;yb|BbdA-w|*dGIO)V=1VcOpHCg^R;k=o
zP_E^C;H>Diyo!{$mj^9|ZFIUHIJX_BTWJz1EqyPx5v@qE%cDsfXxiny{Reelr>ahb
zwcUlfZ@g6wx$RFLw(u$PSt+rNeaTaUl2b;NymE-7G^g^y#w9e_cx>E3^@GZDwaH`A
zE=yJnkYknSt%>Ud7TOmW+nFyXwo64$y^CH9aU#;)bj5J;XujnXcGPn9g2XucqL(@)
z5ArHIOi{efnqCr<n6B+@&L$LuPYtFgKp(i$F}Gku)ixlC!Mh4+hflre!F*teQ+v0q
zJujZlHQ!n>PyVuCs8**BUBdZ}PolWc2|B<(K?0ThT+kxS`oh#uF;5Dl_T0F#iEa93
z%4~jv*0757W%+NvG|#CRKbkUrR;$u|6K*6!dQTl80k0jF-ayM#$9K7?tYEGd&)@}C
zBK-w|{zotP*)o6;C_S)NcfN;pUtvc4{aG}Du0KM@<pAzz!CYZNs#qB7nW64{?DEOf
z{Z&WMSyWTpCoCTBFS9-*HKK5{V<c~=t2(1ilrKVu;Hum$T_tNbH`yJQ8k4(FJCxPa
zU1PdFPb|}Uy0;(&<)UjvEwd6U^UsPiz4^%~58YVVIAg1+QL)U-;lSA$Om&B>RGz%@
z4mnd9EmIkN<sG`xd3s7azaBfURm5hH_p<+!H?XPs=l%=7{g-!(eM3ylS`};*l||h^
z64Y<|5j}{#fQvJpRzP8y;i;KIZ-%o}?4Wgw@-x??r^sCt(W#8+9LhS{7~%3YF(-Hj
zeSVCl<*~5Xgm9RIH3f>f%LpQ44n^qkqT9XsR?H~5mE%@^^40oLOQj;DGe>QU8J2-k
z-afgA<7FZ3<5le#=yubpzbdP913YAwdU@u?a^00(B!ehx_HXV(U1;N7`UYyI<iRU9
z2Ve&p8H1~PAzic<MZmH)#h+vr=HVIUfNdr!A3k0#vo=Zj>6UIdiqtor*OA|emzs)?
zHua))NPo*|{k9Fv-bVR{bJWZ>>;Pg<b%aSzN*|l{9Y{G@a~B;#tm*df`n2PiduU)z
zYDrN7%sW)JITaqT!@PX4BE(ACPA6vWtPsMLuzd}s%p%N&*6vs18g9>S2;gFg_QJ%A
zrAwa_P8p$8rLBhS+-qGu($)!?kz|!eV?AgHX>T~MtM9jB^J|NMZZbD;5wzlctMFVs
zN4~SRvne5-PG8Bk$GQMdib~~W={Y;1&Q<w<gC#p`+EN~hwSWejGo%sLrV#}(mvJcA
zyfq6Z!=@3K3iCIPXTcQMI?$03VeW2f&h=~vF!L}m5B4`R%-^{}Yr)<+{ik)htJZ?6
zW$+Ke81A9@*28hzK)AvhKSq?_@%&|)v2xiLA*o!{R|#uiUlq*48#f4it*W{HkSFsz
zm&5TeZFan&8E|w45K}i6SHo4<kN}Ir3I-gymW9z^)<jJ^Rt4AA!JJco$ceV_G;0#~
z&%~ojSet;mo#n4a6&IVNOhO=WM2OX*ko4?v!hVumQX@)Xq_;`%VHVT%ZipP8WO^NY
z`A_1!<eVPyku`|tL<aqPkr#7-Q9(YR5*Fp!UAfE$<Q4brgYENARPMz|Te5Iw;IUYu
zx_+xEZQxv#@`R4kcuroGqh`>VF0}3frJLX=zV+&KH)==Y)6`x+`lhQ_tPW~u_&9mw
zcw?D4V)4`jASTSgd=@C{d|5J?%vC~CF?V;6hqHA>Dl@a)oa+MJU|fh~umYq{kndkW
zhvBV@R1tM_d`-v7AV1l<P^-`c@>Z<#(_c-ev{8_3;4^;DCwxVL=(*m!i*ej*z4-?g
zjiGKQ!}XwtPN{r#jP)1my#t>t!>zjZ$1MA@bkE>t%Ww<pNa+Ds>YCko0i68O_)6Ql
zSZQwBUw_v=xEYoC$CaH22c8$b($IC+^Qr3px&n76x!eEIO2CKltN+wrOI9|wS$xz9
z!B^uKpKwHh>fc1hR1tUs2%p5JsV)68Fl+cVSfb1lpA((_;=T6_$X#E^Ol3sHXU8DE
z1&cQ2t9VD|+YQ1Fbp9N5$VerCzh*e0TsNku+agDrya&H>368-WYwxF_R{78))0^&6
zsUI!u8MIR~RPp1rD7m|pFXuevV2K6H0)IDC>CbpZ%a%27P%79I$X$)c6E{fiT-XFJ
zIv6sd6EIhp>TpS3f;1v`@C>?$$ENgT??orj6*0Lv`E@mv^yKnn7yvsB+|`y()(dPO
z&&Cw_YaMR_ahQ-xb?$bxw|cs1D}nbaH;XGtEVyUuDjPiDY%9H+t0wQpe~MRO7s`?!
z(yHlQb@R8&8ekPl_arn2m0d5fs~imtaO&4ffAG+vtKvkqZI$As&GCA6*|2+*QANuL
zZs1`FSjT$h0oihY$EUWhbY8rUW<f`OxGP`v5QJfTXJ;55*!K409ywU4O065jzc%*3
zFc7L7-@XH^naiyspHv_PI{Wqi`_Vj5FyOM2x-a_8!Wz<)E>pvNbv*lzdIju%GJ%=I
z#z@|pOov??*&|f%5JxAL^!5hAxr!33A4O)z{%6bRj4GyU<`j0L!7^TgO#>AnPAcbQ
zT^Nhi56Jf>nY-KX7nV}`DDXPX3<m4amw|i<=}{wneW@H*f(M+D%+&wfvOLUK_pOn0
zUAspN+ZS6&qwQVbGa_LB`BUs&CWd6EC{k+C%0?emg{Q)v(Stuw8r<z`;j*sx3=*P)
zWt<1hM)~yuVoFqb1Zp6T2d+5oY<t756sGO*v2-2ly@gufx#q}U;yo-pA&!&n1Jkkg
zZIXS`xD#<<oRow$kH`)zcU)G9`L1I-#M2!$Je*gI+DX5YxrLXs?`(UH<Q&9Dfwj1d
zc9^gvJfuVr2!m=$qJoRFvjUTk8ko2{RE6EuHSuy*va|e7EU4&<Ra8y1R-5$3<fFzY
z#QfU9Xvq4IWh*Z7!Q`TxS<~uu93yA<CUK5J&toZ}#w%Hg*^h19q%MVQ)k9BYyVUN>
zTAS8!qTA&KY7?(z+B9C#ZC#oJqPy62I*(r~PiVhyUfU9oGRi8@dG?wm()uDP|K&v-
zEG$hT5mM?a6X46<lt)1<U0BaF|Ff=q6SyJ7J?kzqr8EX_)DVWsHfu*Kn2}j*@byZO
zvW&x5kR1iIzyf{@;KB?Q+E<}s78(HWn$tha^z4MJ-i<P)8(F>mz=OyW{{iD+qms?%
zVAUWfg<^Dl0ISzUrqr#`&WY!)JMSUsPRUOi)|y={)VwJE@CFQoYt{W^mM=7#2w;3=
zlw?rrJ+0X*Wh#K38)IkLtWgi5*+muxiTTm}s8XyVrrHf!gu<>bmri36+lf{zrp$MC
zHrWbC<;fj;eQ7U@iIu)NYMvm)Tg+2D(vPcgo$_oBP`O}4GeFkieXDUUj1Y!MN3`An
znzJ+eD(qWV$ckRFY5QyxPtrG(#=Sh#ab3i*@=fuldy0hy1Bx$uwkN5Kw;%T5UTh}e
zJ6mjxI+yAcRTRwdp_%KvcEN?Pep!y2&9gsaJQ=dmr`4m5?bHtD2JwO2yIN2kY8O#E
z#QMcYc8jRrnXz725+*yKFr$EC{IC>)?2zr-xdiziOrElHG*BK3Qe1nEz1E+xX8pqp
zaO`p~W^ha1%b>bs^*hCNPGD)%G8dQytE-^^RUBF?ge7o&9iDg!>Rs;OI5`Ni51Qo)
zGBr2oFt!kK@O7Le37(G8$;Hhu50xJuu7oYHZx^X!iR5MJ53jEtcC8K4)g*fO8~Hlr
zGD4#_cW&!^z9*v>Dvf2D*STX^LXS8*lmoMORy4qRtgi@*!^--7cs4K=rmioqErwl!
z_xqi1>gv1cm&V`K)%P$q%Az=XYxN}t1gUBdRSJ9Z@j6dEp34$fm<cPIP(G?WzNHdY
z!OpG3E^Fo}{jVPW1l9r@Kl+cEwf9?Ya@*B-w+|#`)TK);p5#fB-~D=HSM9*puN97f
z)$QGt4B~ReHvG;%?rMy1zIN_{&0Fd8#hEwb0@lYF*9zJs3$z(YE!~`sM5SdK5pzlK
z_Z$2PV1q40_L)gTgNItp;yO0rL>~=2+~kql%$Dc}E)smSOP*t_^<|C4PowP%Zt3R0
zvo;%zL2gEW=JSz5PjhZ4C7tRpNmAE5-Cd10Wm5M--Q6uJOOTuebx5}Bg4EKxmD0D!
z4;zf5Pi;|K)i$+V?T|ZT1d#-Qtwrm6p-b~<R$<bD_H)uU?~6McY+DF$YFd-p9&B#|
zZ4K!Ji`#)(boJC(qAgQ;4JXM${Q(G&ndW}fNOEXh#H0mEvfC=hhEYB4k{U_fHJ?}q
zBWjLAgP7&E`D01q#O>Bd&0VIjt9h8TpgqfObK4Gv{|$DHS|HbjE}DRlThMGSnY3*@
zWOeMcD8M0Uhp>a~?u&Na4JIdeimCNNK=ygR4zM+)Z3Rn7?ig)mcU=AH#VFXM+SXR>
zE~=n?5DlzK9_ex$p&rF0w*XgeAK=RU0$h25%a_tx#V5Z2U+xs;^W_<CB!d*Ak)dg8
zWhyctP8^6|4gCL=9sP)Z0ebbh{mkeZnd^eDGTL(G{cInq?=I_&eb6a@u*}$I4?wtN
z?A8hpo*5HX2QT+_2PwfDZ@PmcDc|cSbwmAQ&z=A<tIq?#4J5^2d>*^iM?)u#*VpKK
zlb!OSsT0TJYNIJWj1yXXO??Sa<o_9mZNU5d9Y=+=KQSK9s}I26o>?XQTt&1r^UIk<
z??*ER{k{$%bFU&Oj&o!H{H@tCQa0&Kx{cT#u#kez%G_aQ<LrMVWPTapu9=0fdNV9%
zRtPMuMR^8Zy&A4tf?8@KH~<h%Tar<)`?CokB@HqGv1Q7R#a{984QG)s26M(JSewVR
z-loh1NXci(OfY<PNd*8F;S&<ks$!AZ*gwbTykHvd*1uKo4aXwbpkBk60G3vPU~MU6
z++tgA(tisSfF{b-`8kint_tC+u^&W5@YaebdP&!VZz30f1nAclQlu^0;=6z#IS+c5
zy$QIRqYS?<nTdjje`gB+zkmESe7pB+14Kcvv@FbrCN?spnutL(bFl;<6zoy>g1_9G
zZVb}|&w#K)D;!CZT&Q7dJ=&x-!yUTtCI2v>ix5;Gj0Z}ie`GcqP`;BGX}qG0WLmVL
zDh8zW-SJWNg{mtoSjNJeHKQhV$g2D>Gb^{Z><Tenj%lRDw`br@4}r&UN*^8@Hdceg
zCIKb{v=Nx$GTp=;8ZpfB>{&cY-`&0*&~=RtUGx<JVXQRw`rT`4?E@Wi9C2^QTWYO$
zntMqb*T&o<;xb!wbj>ZeE{u+?hheVISKLezusAMY1rO=6bgB!=kmC3Dt5cDM{n1gT
zk7vmPk6;n*%oHTnbVNxMtN`)cL}2T^4gjzUR0wAjbc28w@SJNJz8MHIL|xjr{}Pgp
z$t*+H5#vq)w@sMxy49TE>JAN>gMyCNe+l5P;UjGHKeWw%gm$2Q^bJ(r(%)xshGPoz
z@<(#q?7kgD<MGXUivfXSk)-ywAt2?<bjYftKd=pVQ0jwN3C}E?o+YZ`ieYhv<ohQh
z9^OQ``A~Hb{=C16NA>0b0G)xrPrPUdihO}ZPBXh51mvUO?C&5Tuji17#LGL4t-o*z
ze|`FK7R&z4Y2~cL=yaCNdPLV*Lp}Gnn`C|(A>|<(Ox>VFxvEy`coc0HwP|TRbxFpu
z!W}h8A!$D32-W<5s@)2JDbEr>Ncd3J7sx@bP;iK?F$I^hOZ*kF(M^^(GcG7iEJJd!
z{ZU|b=sojjdmwB-4g7@+U2nJs+h^Q|_VGTaoxr92hLF<qH4KpxwN%SwmIswn{Y0M)
zic!2^$Uh74*WqI)mi@=j9;onm9_-9%H&k|RndW)=tidBkxi99_Dj3}XZ}kbyv2Q6$
zUVE^UtIIMhj$GiiRGm#Do@tYe1td#WVb`zO1&sPO(pTw5+3_z`Sq;{^Ptr}Mcq0PT
zO;*4Xw)DoPp2j1|wc|$1%*7C+M%3zQ2JL0x1^_bb;;9^@3Mi0%8mMPLRU%DW+Fj@`
zbSOd=%gBatOa+c8+D+~XfwopLWrEaOvgVsy!g4)ga3FRS%@dWa`JkvuZwLU8;n)@G
z0xsIEZKlwn3hBY>3?wB%er1-#rpb~MyvF@4@!Gt0UV?L+=Sk!P<e0r+%4w=800w7p
z*;Nf&#GhCghtM$1mIrE#B@t(5u}*V=K*@4r&B*`%a3QpgsKD(!sa>#KcybeXf1!d$
z6j`wp8K#8w^x_U$&-QwAmM$O$LX4w9wDXvWK2iCAQ@!L;2~e%Y``Q%cIV~uc@;qN&
zs9c>M0YTM1wm4fCY2Lq$Nt9B7qB!{?;X9c`V||7MEAq<&9ud;|yy`LT@3;L&727ov
zmEJ_u?~3{zYe5^}fJfV>Sob^->5VlrMPQ}KUGpg_*x>x~gLHd~OPZ1#6}N0+BT{=#
zB^^p%D``YcARQTiX1uyj1y|z<U*Ow3TM?^-7Uko7L0?@C$Ye^*Ds$(yMx86P@aeMH
z6AJy&+N>{HSkT4u$r(MKn;?Rqjb?Jl)*6xtyGSBQPJp^J#U+-)YUFa5f}4e_(>PLG
zfR!+}1feJ=*5RNe1N2oTZ>Ed0Kfr3Udr+doo(89I5NPzUMcOuvvs4DAmJ^Aqhe)(@
z9H>)B0Z@(g_%1055r~*{O$V6kGiuat%7on8`K0-3F0mZ4{Avtq=~#JEu#e7<D?Zb1
zIJI(eLllGcLf18%>CRvsqmji$f^Y-?gntMJ7Oq`9mMvx%bkE1(QmwCkg}}j?6d5!#
zY%A8Nqfh&|+S;n`u<>o_x_lzqF4BtTE&otozNTTLFpIfF|4_jodjC<TNisAYa$prI
z=S$>5y_F-aq)jT}qI?z-#WC0jNN3q4r=RTTb~mJ2s-<%Y$ZkkAhh&M{A@b777-#Ht
z94dWUGt+Mi@E~|r3~3W5=UFO?am!RYiTrnW2e?~aSsSSIR~PcBosxrv)&_VC&Y~8T
zOvqAF3G)n2Ev0h;fG&AM_=K{jR9`g7?}W?inI-UqpB}(RRikUgsv<qHxirS{UMpN<
z87a`*C;DW*K5%5#S&$1fKgY?K+sETR$;@4)vrHAOvRq*g%pMUE?#n}7y*}#Hzjz|z
z{E{!_L|!dTU<od{^M7R*mU!{8RbZHTFW<v^#blGEEV!pIM|IW?FwZ3MvAP#?>hAVr
zSXTqsEJ4~Ziv4QDfx-fCwf$<v<Mc6&YQ0?gW(JR&&lpDf`Sv@~mqNa(b$w>cS?0TT
zoyTgMTJ?>OnUext;Yb@lleN=r_u7`kwiVLc`FnJ~U?E4-wx^Mj^yyzYYNe*0G?RAH
zO$tkCsU$UtBx}>|iD%O?cY733PZHveR%n&gsQD@r-uyURZ#PuLJMuQy_{|#}?xyjO
z_3ZZeyN%DlRr&n0TYGmi?rI%1S?1r;4$y2JwHw|Y5UuAe8OLFXBFbAx&|hUIQo5!G
z-%1|O<wNRa0Kj25Oh=yB;?`sy8-jdZezR2%pDH)Lm4LccA8N}lYck}lOGC!3>5YzY
zU4rgV#xafg-L$&dZ5yjwMt@Vi&q#eD7TMUsGnug%#YXx+I!ueNaW?M8+ZZ0xV`*&W
zJAUC${)+eFeEdVsKkshww7*McvM1}EsGO6~uxKo&)LNDhBWJT5*Jpwg%T|y}>B3NS
zwM3v=L840r*TswbMEVP%>q<i_+mLOkP*RFmJ#o!Q_;Oy^ch{14N(}hsx0oxl${tvo
ztF(L1E!pSP5ONnuHB{v*uppWu5=pnF9_eI)@trb8WcFJN_}vAWH?DcMRL4B>5uISw
z2%Fu#OR~7({S2-W?OuT!4tfR|0GQ_i3X{#P)_Ug~ureA|yN$h~Hd&zMv1Fc~k3i|7
zWhPgb8p9qoNS@{s02Uh+^-iNRELo6Qn@5?mZ7;dU!0Eke-t4y!M>yBJ4?R$W{v;ay
zMYoWA+uE#RxP>$R!`LAK0%a|mg!*c?=f1X()gIwJ+$?_Ri>D^p<R0ju1T6$&4G1kK
zZLs`>;y7j8oBlyu6j6-5s=!(+aCYOhijzXul1$NR)wHs?*c#eM&<oX5Ok9nu7I>Bi
zdtGRMIMKW1=@$?viHqp>Y1kCK4%k192gSh%J-j|di2nUhz^bc?`dX~$z66e9R&edI
zhRk+r6k7oRzU_*wn;HL6WZ(uYpc648tht88*Ar^1@ZX+D?@y~$_m-Nc7vF>axM#CZ
zym>7Yj4jEmW&RZvOCV`=SIm)H4yP=C{+m>X>pw#%Zr32vZc&7;T^5ItS<hwMY4QUe
zhtH}oVl8%BR!!Sedf5n51+9k+NE7>JsgNke@w0ldIu>(`Mh<HL*rDHky=SALZ2SB`
zzBPybc(p31aYW@2q$Nd%<`FMsqn?ig%6dcO$LDc~2491cT4T5pmf73>r=nVsy2~hc
z&5oGfR=VR2T@Wk=o~7Vrw58b{EjukJ#Wx54<8aKnS#0Kd;{Lo8v1~?Dd)0Zp)JxBA
z%I$~BQt@MY=CgyZWNGQ%&9&#vB(ku|pYWz<46MB{T98*~%|tR2*Ogm5TV%fFL#Jx`
z8`YI%tm?nQT3>NC#Tom{x7g|%PMnkVGhW!N7(<?-WEThz;;2sd+BYB1S*%wz32)^X
zq@if*Ee?0{Fc}w-b;H(+=vYKc>j`RfRrD^XQiCj106x!8bxSTJ+ir>TNk%8LYfgFV
zOZT}+5)wEC`lLiXKIzQZ|6LFo+;Lj<w+E`a>pfk~6iQc8610?_ILMfyn^Cg|hhg_m
z@p+c5sYm!FYc^7&(78J_0PN5a!9FB(h;~Vj`c3(x#Bsh}zv!T#4Da%2%yq#DDbkGc
zC*E^Z9i#oZ^FQ~W_moRl500h+rcicxkfuVxpwW5ZM_3ho(8&w8<|z_g15sMA8VlnX
z700-1m!Ilh0uI07KRoPY-CM<6#T@dP<zdN*@%}77lL_fmz4YCtnp;3XGO?9PiW=mE
z6zK>-VJ23K0iL9bK!da>qZHAEyAdml6FY9sM&B^Fk?wo4K*fZ(ujh1LKIl~h$LyY*
z%iaEUJsy^iM~j^km9(vYoOmDN8wsdG!K1oTLG(4GpxUYrxjF^Q`;ax{ps|B?G|DUq
zwxBwoQG+<7VkG$~IDZvFE<&!H%Z23`aDT@mH=6Q+sSvVjY@iNpa4@jUk9b2KV8E~)
z;6On~A$`c$7$6|pDAX?-3Q9&JfH=g-{v~Ju{-lxu0-&9_NEsv@FGt8$XE79IlImBa
zSGp^NAiWu}5HR`$%M_*D7MSmhf#m=txdiI4v8<F;>K$xgk38&Jv@HOl)FM@v+RX^9
z!DOtmZ>YRT4SyfMEgYA>26a19@#TLfE6f7`0AT7*62<@km}`OG|MtBDWy3uA5DE+c
z06>6r_M8HMa>#!^IDK#d@LAM(-+Lrj;lEEl#nz$|s}$!Jidn&SoUv!9Q*Pc?#%b{}
zU46YxLb@?-AFHX;g@rf$Sg7o)84NE$3M4q=$Yma|HeuM(3#l6E|E!Uv{=K79>o3(#
ze=Redt1tgsawrQKGGsCt$ZIPGSInp<6TWma2F!l~*+)$`l{yq82^+LT`O>47Gt~2z
zj-ib=lypwBw&u^;l{XFKL_Lfp^`r+Fz_}~#S(f$c%8fyn(i|gChjJ+fnaVhqGmY!K
za%C-KT>T9N5+OGCADKWeXJtAC<w^A~GZ|(|9nB2J@d(NpN<7Ru<Jk7^jvf>8`@h=R
zKh}AS_$UVG1OO`Msn!ok0byJBvYK~ps^25E{-rskwz&8_-`4ZK#kEOQWG{2HzqLF$
zD)YDV`^M-CdYYER;}1CTK}-xglGo~HzeN}^`a-#8<AdkD$MOEQzK<cN#%Iq={#yIX
zx;YD~&eWqY;?eUB^7#>K>P5|~S!9u=nU0;gbv*Pb%-VR*sBHQ(Z)4P_e#ZU$<eu@}
zY3-gp?Yg%1qxN=FN4k}vu3w_KVQ8FV76rm0wm$W$T6QEUE4XEt);!HIFY=n%-}a05
z_0T|5E=e`(J-*OllLQoiUuGH~)FTObs6`8kk_{eaPaYiR&)7@aTlN<FN)SUpc`6gv
z)5c>zv1hcz9%BCpVjGtL=1{>qnPA@tFkWm1&jA7OK?hkpge(>SVgLqP6mfhRSrP>1
zya0#-&PyP=s1l5<v=T&9)u4C@fwqk$MCvYltr(tnoMp>VEKjOrDFjq4Valuus&bcY
z`Zz;kMNe7c89R;^G8zH}IzMv~jh`q_q4p9OTVA%f6aqMPXGqZS1Y+mYQ^gneMRnA{
zdS1R%=&agcywKcIww3O_R3+YMv%#uyae*8*Oe!jJj1Mw%#D*p^mMu?m6}vl8Rx?gM
zp6A1pv)o+y;c{hE!5=aOh{dlgrb!ULQM7;ozyR!Nbj-jGHnXXz@?f6z|5Jx8!#R6u
zVC$8z^TL*mMkQYO$J<J&QlvFlr=~#xd;o+0uq#QM#kG!mmDL<o(&4u@`b{Nczk1YX
z6|CRU63uEI+p{2zWB~ZxOpERjNx*ysv>5_biJX}QS|MXcq9H4VNrpiFGF!IGU2;*V
z*lbZ?K~^@2E8J<yJ~PV7$VU<?83IMib~%GZ^BEL86E?YQQG$t@X?LlSd;kCdc4Zhr

diff --git a/static/fonts/roboto-v18-latin-900.eot b/static/fonts/roboto-v18-latin-900.eot
deleted file mode 100644
index f68f64b318060ede3caf09fe274741aca9e33f83..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17437
zcmaI7V~{0Gur0dVwszaLZQHhOb9UR)wrv~Jwr$(yOi$1I&W(4^&zlt)m21_CiuzTN
zRT)Vr0RV`K0|4Ov4M@QM%>UQG0AUdS6Dz1t0|21^B>!s#U;vW;0h9|X1piC^ZvX_S
z0h|G5|GCG1P67}EH~>rm<^cQu6v+RrSpuv9p8tn)`;ValX#K~y0o(z$|EZn+)3X7X
z0IUFZ05^dD{~(tC5chw||JS|%fS9_p%KskW{|_JlmI44aVgNfBfFd7#_A+L|d`lb7
zhP8{klP3v1j}4nX9r!%nQE@ovbPMK+UMmA~l%>bkk0-tQIoY{1^Ados$HZsG=4krO
zZC3IJ3h{FXA`(VE)fStV3W!3o^6}i(gqu%FzIK*;Qa=-~Sj`c^9Fb_#6z>IDBxF(f
zR+yzWK|&$_dX-^8SZtV7z@bw@snGneXJb`EGPF4e8r4DB_~XRyF@+c9N*3`WkL@%l
zvAp87YD!xNNc|YN^G=o1u_6P2_c{2%O?Tl1?(k=lDUopp5rVWIWSic;I9=B-G&XN;
zE1BQ8G`}XLD8Yw#p*z=WB8+#<Ktt>6)PPWPH*N8Pn>7?mk+aliM7dBGcLa=rUzM?d
zuF5`;Fz%IouY3NH_nYwfq-5|+q}=fng6Fmv7t-QuAqQ!0dvl-sJ!pD`gTh<m^TQSk
zniy<EN^PYLS_bR)ALuE{tNO29c0MsQ5@<BQ2;u>=&UX&h*DP`-QickfV}uvLHAEe4
zaY4*%R1ma@jwvN>VNY@q7I>k#;E=>4CI=c~;F|zDdOS_VI>;?@bjt06qqXT)6)(k;
z8YYt7P5dKL`G;@g(!5N#J-p<dJ>+L9-|CPU`%wV_C>ea7&-bxBUIT`l=W`vm;0z=&
zLPaSU9j|0&3<R3khDN}|_yMKs_^?H=-SzQ1XWsAW>`C>+p0NsZP)pp9+NIECUS>lw
zu(T)k(qSr|=VaHFAX?8Bcx>DnaZDIh#MX8iG3TwR7(=#ESCDT-?v2jmLc>ML+1!-F
z8i+n99~2Hz2gJw+J_r7c4~s{Nxb7aj&|l~bv;;fDIv^zCm@tc^w}ODdCPD+o0fSR8
zF?1f(Gf?t_g^Ib_xGg|r>{*r<bT{WXbq-}Ct1KISD&#ZW*g(gKDZvO`a?Ly2ZQPTE
zdxrwi9cXtPnvSr}m<MtjsY6lNAx`nsha#EdcgY3vVY$$_GgzZT9R1VTHqugyN6$7L
zcq|k<=qsWpk<ycI$S^sV52&ld@2!%*)ye1-7Qa%G8t{CXKVjJvEON)VREDe{3(f>o
zF2LR@AVTMuHUkDsLCdr=l`ImbRag|7s18yj!9t0=i_4{)$+OdoDo2Ijo-F^oO4w+k
zj>!|FkwmV!z@d`3NvI@Fl;m^4f07`|vw&2=#NW3fkXLuLk$Y(<@6!;Xi)ry$jdR-<
zo-X5Ts7(c6H)M8klb`@xMeT?+DI8p>9$Vr34AEoZXGo$qW+frLqxg*tTOF>o(VCYz
zfn_2q^qM;hDKE(rh=E2cU)qGhr$TshmJAGNb6#?#I%FgaXxdPAF}St0fVu^or3>=r
zGrSsKr;W=de*K?T?zR4VlW-pCo_w&bTPW65vvnSG9GrTaGphMEB_ozwlpduXPcXxQ
z@`uxhVQ1r~ea8;0phQgye$s8ss>VVzXQPkoH<S@u-^~KO+Wp4RKm@$F^}~Ts+pA8_
z6QzPS4M%UzdPR%mG!0ybDeDc*Ks1;vr4fB6^wprMKLQ@+Wv~lixM~Aq!obuV{t$_c
zHjGYcn!9ld+k_T6{qXwl&sa3DZY^VlMT$*_126r`I~Yi!yHdhCJLp0APEJKGzW2-%
zoFU1d5*ygiz2!nHCDhEU-+YU<^U!8R=YxBT=h~`b5HTOZlV(h6=83En<(t9T$yR)9
z!gl;<lDX6j=$R$#0@zxKp}m~*m`YHeB#yLhf&$s~1J+_?IW-a$AMAU~bM1uVs{`l)
zEgp6$su+JW?&&oo1aS38D3Y`4xM0p0$$UG!=MYl~PGVpufv5KN<ftM<@I>%^|J`pv
zg2k)acsh0)3|@o-on+zwHG=gT#>LTvNP?RVb4900DphBTYpj)xs>SaV%l1;0#H$pt
z>Lmc0FLZD&wRGcRAtnS1K%V+|u@Hy)ArnBVW3ynkm{L_Z9ci9d*uCNA(3=Q#695Lr
zR1{(rQm2<Y3su$uKrs}Eg67nlVUzIMP7+aR%(>ZQrbO)jWnd)Z9<7>?1Y7Y#;&(1!
z_$olbvLd_@OK=*DyRU1f{P5k?&8fZvtDDd{e*dN|&?#$2iyLA)=J#6*qh3n4nXt?h
zl9<rA9q)5ldR^H<8?}5n_T(;y?b_C(Jx9GkB{*NI2OA}<-mU}{yo_AzuY^nksWLxA
z)Ip_Q;HP?F)HfeuAojr)aAFP&_(lcQk>gx>3NM5ILFYc(=V98>FxOF_HBa)>dU+AJ
zQyw`G6@dg9or@Ixzy+b%588kD-VP|-+H%DYM1u>&TaHwM4A?+<Km6g?Fbw3xX%`aL
z|H?#0zz5xC+4C*q&9xTjt~Ekg=aJz~9xyyhx?AT4vuAZU8|J^mkj-Xoi?Vy_wg`wX
z+f&<*Sr-jVkJ-Wec$(uYblf6E5O^E#dA33!9qB<G&qKZv<d^Rcl>Bj~{o@Seya#6N
zCSHh*D0q#l`&tyO7~PoVl3RYJr1l_DcC#cJ)@7Zl$JR>2%<`08aW%ywYcw&Dq{o4?
zR-+N#_^%M_<;9zOK<M1Pb_gP6`DP59G_<Q031dILaPlKth*cPRPCsX@*O2pNSET5I
zSkhB8D-p6fPNcT<b731d+bLX=KiJf2Qv0#!TQN4dvUZwXN-03WLzqo}n8HWNy#)c7
z3E(5IPN8bKgtsG2(9|REtzU6vRhU^IC0(X#O<=8i#ryq8u>b7KB;UYVHhzzZ5>Hf3
z_0_}qK;G_sg1yMvEfPUU2C=5%KS(%U7|cl&F8K6i!1}H*w?<lP3|u{Ka~@nO8|9_d
zwCgYq#DC~;+SRPFdtWY5Dz>$jW~Ug9f`;KcQb^90Uo)u2WZL;b123^NFC2DbV5Fiq
zh~0Jf>B0<k@Zo39bytqbrXj!}GEVt=xy!1r7Y5Bv3OGe~Z)HDnJ4>pG<CN(s+}e|4
z1!Igr_lV8b?@jY&LMe;MP}*DJ%e+>!3Yes&{C43`EQewE7Q@ch$=|gaGhs?WYY87B
zyv5y{WYI*`on<ArT!CX>iXN_AyE6-o9Pr4hH4rB3lQ>5{dvhsi%=%RCE8PucYu9ch
z8wh(#wAEXXmpd(!krc3H0VqEIg{4m)BI6;arK5#4)yEkq)wrczQPmV=svtg#ML|@8
zzT@df1<EoVgGy6Uf@hFB9~kme#HRK>dwqYJ#}HPnMn*w2U%)%kpFe>`PbShl{w3-S
z!T*>k3_Ff~(Ar;tTw$P9R1cRWEvZ7N1h2$aBPz6+Cc}E9MD))LWh-SVUl`XJXGJ&R
z7!(*}neK{$U>4_9$Y8GwCW(#4Q9~)!Pm&^^z9-R<7zFczp(EzSsls%lQ{$cJmVkxy
zPV$JVhV4Z?jzoW>_$EMcbkKwoETV%Z0=z7U0t@BFZV@s$<ntHmOe<4g!->6L4v1>$
z7j_RwG;mRe7icj-nYcPBg|sBYF-jm@=*r*^P`9aLL^pUA0;+W(ZK5V>Jt#}UEEeO`
zOH=Hm>wT-`La)2Zr{~+xC(dLh31fMi-dGjO^2^_fY^l}IU48ebuhQf0`n&pmSGq4U
z_r^a<TDP{;#P(BTYS$43_w?)0tR0U6rSe1fApfNjR^4-B@XOTpz<X5vOdRk!x};6Y
zPe*t$2)CNtj|c{#dPci_>65<YMA?NadmO8>p*xCuIWqhG+3tZQ6Pwc(KOFtpdQ>&q
zP&3TRbIv7WGnskv4z(h(R$WgEXj{ZK1eFj#+x(T7ChZd4Jg{2J1Dss6X*|v)9gpkf
zDWw~1Zou?W{{5Y_kR$;+zL!>F5esXB2OTbdmefL{ZwlH{BI4C>XKANjY-nXdW394x
zCizxXZk3Ua^apnyl6uMDR+7R&4tK&MNug@w99Xb1+yY~%o~V|Ze8!svYY67b4w|X6
z&Pj5R(r7GIqtrE`hsMvJG`|;XOV{ACv47JX{UOOEk6vz=DJCX%<jJihl1=zCo13^Z
zT~G)Q$$iq?O(0grfgG{)#i2WHQ*Qg1sr3FqcQ@1^-Rp|3V=Ay@f+5bAZ6rW--$F9A
zsxJ3ian*V(=+QS`CJxenCOlq<;dndgw-yKsXWf1>kGl-rZp3w;&0I;nIJxuCV4wyN
zY^9FIU7~Qt{)-Z22Ji1POo~>1M`ed~14b#as#$T5*JM_(mjYG78hq-?S(t;Wg}ktt
zL<kKH^-MC;uEEJ(X3yf&uRv1c*khq#Av>3O_q2D(#QEg)BFAJA2zL3Mpc)5<Kl@?P
z62K8C8B;^(*<V5zZrlf5Dy#(0J2>|NH}mzir3V^H*~-Y#hvJk6w^$mg4p!j~wq31_
z7<Z2hC>^?9e6OA*tTa?W5DFPkKn%z27N*cEpJ-YT0MX5ubUPNA2P%<3Fa``fmbi<`
za8dom4X-J96M;pDEBbW;JPD~WSPNwho8uBus9SLB@dgZ#l#)43!0h0p&9JiOdScx8
znxav`DD+Fo)2)NY<w-ok)5lqmKk(WgdpRTL?KK>43MC9K!AROyI-N>NiXD}HBUL1+
z|HdCmvBePfnYFp60`(RleZFLp$pOUJh0$2%U6PU7-48{u*t85vu2IGbknce%1%e@b
zArYUzvDV^7aM-1H30LE@FcY!%pDL|`>(|7|A=2eVQf!&U<Z@^1aI!*3ZZo!zITZ41
zh>253xHDrFn&C7Tc)|Ll$`@m%>D-fB<nfPap%(9t&OFDX{xr4c_*`>A<bu;1YU2oT
zHXt3vO3`yMt%yR;+*kSmd2Mw3_qlY*N7+Tn1gGSlXjW)lA;fx?-}y{Cc9Nl@8!8W#
z-|GoKLBQ6Z?<m^3ssbnYHu*x7;3WUZ6O{^;FLA$bZX32=a?hu~a(GtAya@oTjXd8k
zIb{ZwWChPiP($mdkZ#%$*41<+TM34<x_=KJ!sXaJ0*7h!KffYSz&RXwKAzSobpBqN
zyB(2gVI?^bxOj&FVkkB&9~HM&McJd(Hb$TM?c3uFcHRVKg=N{Ka7H0wMWC`{_V(a5
z9JK;P4%E841grfk?GeT@4%d>#V5(^NBz_c7(6`t9*wm=ogwSrR<4RHCPsOB!b%Oqh
zxG3(6Gc%pdyg)^Mp~aHMr-57_j2E0nnG#Gih`55gI$|v5a1AB#Ria^73pRA7AWsZR
z$)-+Mf+!~~CwEjGV@(8)8zG~MbjG_IUms=DIapT9rwfaUBls9rK5>5#AH%05KsyWl
zrIU@yz>Qs+-v-s#fI>G83w~QIxze@#BZyvBEce#FQ8UZ>1Nn0$r+-Y%QszN<$<i@=
zA^fP)a4!fMeK1!8%K%#ai$Svoou+wGj*j0%nAH{c<myE@)CEP%fWuVR@lxbhsdxjV
zj|3uVVd`}kPEdV*M#VJ8^DjG~5^m|~a}4YIIDV;DwbQl<9ePm^zicvA-^gXpeK!s`
zPd?KT-5Eyn{p=zeK6n3f<VI-k+#n<U)6~s+ibyYBPB6)^5(KP`@81bieMt(7FOBZ%
z(<~OnBp#=0lDcH`rZL)<=+0nnbGcxpm48(EjQcxfUP5%9U;LfIJ<ug4L0cBkF9FE;
z;<GK`$OU!QO=D(xY9!qNUC{7AOBzWy6ipOVGaIHpUSp;iX+!2CHPJZUez}CAXwXn0
zfr*z!m%YnMY_%djpBMCJ6E3{{#UsL$=;VR?K;UX|<L$u=?M4k-Gn9h(6|^0OtxXkW
z`WiV`l>37FMMaWyY|~B{OH{kBOW$(LYR()*F>El8F}{oaV76=sO-GwGpV5dGFo3_U
z5-NBmxt?u!NM$4RfaazHXtO|kq?6!Pd3fqn%Zowv5%g;8dZ^Z&vpurnXmt&}F}-VY
zbuwwvh@Y?ouZWIshn_0GDZ=%)pnmk;XP6f_Sj5;cZ=-rlI68!gdp{ml##DkLyPZVP
zUcdWdyAa@uenyp>l43tWsVhBfHqz><FLyP_dJxIkL%Oo4F0w40+)V__m4YFP38t27
z=I0e^7lXCH^Dr|>f4MdmOmg|#$Aw1*Q6#q^7!7`*Af2xQqkS-hdK{_P6&@v&wXukM
z5BmTKHjZ%cFq5>IJaz=T9_*y3;yD)LjKL}gd<NVGd|+o>&V~doZw7ppbeFr+j(V{H
z%qI91$X*V4!L(clULe69H8FyKer^kL(!jIZIl@P3!&-|8)AZ*q?ZEom<>t;BemM<*
zhDorq)30Ty`lS8p;9IK{U{*BoiiA<OW^0!EYm&iP(yz!RR8S1oR}><%Rd>`vJs<mK
zkX0*uAXTe^hnGg#uv#^_b^i0g@_?}YVfC%VYVgxWeP~4Nf{t{Q73p+J)KHVuevREW
zl(h97^|DX2Ww_?p-%nHAUGBeU&S@&qerg<5OZ_At4J@okvCp5h6e)hu8W#^Tx9W=5
zYa8r@M3QT4G*cLM?dKJcXNw&xK6AQU{Zz8#$XpT1pR0dP@kh1t=U7<tJjhMIeQ~@q
zbx{9d;*w@hwVNoKg(af{B2opBRl~8V66N%qy}2_W?2BJz{8q_D$qH}bjEJ~@15g15
zF49;ok*<K?{u8&I_Wu$XH#b`FL@1gx87=BR^are0B_(80wUczwc(8-WZkvT5r|c6B
zj&aJYfk&z_qr1cXTKFWm;fajJ3~q2!tZ#3oG$<M=cf6cE&Ep3atwbl`E8sucP^!H=
zFSphi?DRw>-3Y*inbR=<0m|b7kD^tKufD1)+}p>(kWi!>N!6OERiCrWby)UdPyjG2
z=V-hgJERh~#l?=(lHif4qtLm)s+i>jE-{4Bs1X(rVFkB|_qj+DCPj!rA0_29!+2}U
zZpi{oS27GpMhtDVmF#q_oQHt!DYfo`k=Z}K`nPCx$ey+M{Hwc!9EQJ^ZrL|eURp&D
z9811%_bpVsvL-pp2B?^Txq=br0~xo1QkD{QJ^;Ts7y-XHK`qg*auZM+crLqIq523V
zg0m7)ejxUZ_9wrl$}L&Eks2(tl>MIMdjo6GMJa=ANf#Na#8W+Yvsx^5SWTx(u*8%+
zZmV7!>nYepN6bN$yhueX6|K-^UCLx-_Zm51>?XoLQCcVqJ1(8dqm)OccY!BVbC04b
zdDl^zMPbP3dT^`xcXaVenhw<a7KtHKr!K;0fdf`Q36%;HaT|J_Z%oUt{>$6)em5f8
zgM1ryDPxn2!nFa^^3v<ljuwY;Pha92%h^zj`mKxEFoo@|O9uuBZQ|_K%m!6<0^L=K
zg13dR-(eDZ7Y^<isOI{FfG)+Ze(__w5^+;wCI_jlE%aW=-DN!f7|VaZ?uuWlQCZpN
zOy>(4W1%S3;<E3>T;n~)PBzb^xzN7HZgko{wTft)WKkx+hD^PV`pcjgADwq$9<dok
zi4^H91yn*k6gvFiOl8EM)o36?X&x6eFJ(FzejAwytMGn}K}f@LzE3DF50!}-=SQ65
za-N#}IoQBP!i?(&LZ@6|O1w-1^=ruDJx`sv2qJo+RN5so+Hjv9&G7*qsn8-BuINv0
zDUX++pCR{2!31~KK0lk~$kvAtf48>UN=qD)cAftDmu_tK8sw6A?s_sy8qEkos11oQ
zI>!i39&JsPkT2>aoZ{K!+Z_c_FJ2TW`kLZEBBq3B5}m&J(CKfJJ4HF76W__!>zpBt
zh!=F|`dM}>DuYy&Y<t#mrxs!s^-CIxa2iXexdHc$uNIjhc?Tksu89xJb%lmkp-oH|
zX1Qm6bCp}hxrG&0ECeCewr2Mmy*q-QDqPYShx(;zL<82<qFpT2Z+u8FKNSd-Zs6xD
z%-VdpYzGO!?7(35>eN)IEyO!j|I)=aqYA+pEN#FI3}!|I=ohL)3~h2U!h?gLe<NfD
zu)b9ZNf(Eq6%(qER)1V>9!2KkZP&0V*`?qruw8;m1t_U53)DJNIxv)jGr96T_F1wS
zfXJcrfSd78i=0r$p@UcJ7{`#7M#K@;n$}t>1wA)G23qAHdYTlTEABD0#PrIRFZNz^
z2#I>GkG;!d>khNb?D@1=m^>-iN?vx$li^>g>wM=9$--$@XaPrcyIi=DyrB0fGhJU`
z7_cw$q%9Qd4I6#r`opH8(&B<Z3J&{v(?9=)d=g{+N2=~q$2gU1fuyC@Zo|IxZ#aL^
zs*W+}o{2_4+u>`5q<c+9K>5N`yMHdPp~TF}EMHnC0g<x?ATqD&Bi2j~MJe5!m@vqd
z_wzOV!Tg8HKTKP*`h{`7;h8|?z~|nYVHYP84qyS^?&x~{c58T|rojs_mw=vbjh)GG
zss(v!Ye#%@h&NjEG)hv9X&`^^=ulw~P&?STwb`1{tLu(@P!rb*ujIM@wCh#8EdtDO
zt*VtxWC%sTpbl#!?olrh>4Tmubb8~ck<AZK`{cRes{GbAQu9|ymTo3^#IpDW{YLJD
zT`KoET0C9B!<zxLo)T&?(D>baey8Um;OrEh$VE-HF_*0Z51qKPUy8SI-lsSxV0BHi
z_%5|%R!TsL^^bD~cM)peD8`K}at1XZw+(a`ZQ($`vM6Q~<~<kKuRaIy6TgoT*)}$S
z*s1H>{EK+9jJc{m-;e2Vly+%gFi3bx8JunAG-@3^2o9VmZb1J0Yz%A1^Ptx;p$=@n
zb<yD5&e@M@$1~ZfM-UsE^Sb>&UYZcYm;@J0x#jgJPd!Prb!ft<4#-^~V91*i<E|!&
z9{t`+gS>t?5gaKkAOrpH5nteK!xOclFt><fAkolkj${~9{o$Ro$8T!5?~i>L8W_xp
z9^*l`&F*5fiws*IS+vEsBM#r((@N_}S%#zsP(-|^-uq+d0IVQt7KA8){7C#+Jc%RL
z*A}D4wToLk1#2YbX;4+h&_+}tA0_Bq_Wbkbt%RFp2)K1R!jvZ{j>MDKjJYV(hk<3=
zh=CF|^7jR{5wUZo%fv>o>Nv?}o&a5f$iQETSesuO<!Mv93VkBlM;5{^nJtrg|Look
zWMws&E{g<SCO8kkgiGQr_iKY?apClN7!Q(-8@B=AEpTA_ppDZ$Bo1<Qi<!vAh_9cu
zk%|0tYS@#&oKQqst14@H3b(vawR^swcK)|V9kJ4ODl&<lg;%Mf%&HQR0a&P=UVa~v
zH)!6pt8Axc<5yk|1H^$RH|`SkEG!dY&5>{&`Lz86Xi-Y)JFR!%?Rz$>^AAI_TCu?2
z5woZ+H0C8k^U&<`8e6FDW>ra7-Qpj|dLW4#^r;hM#h3$ef2gVT@T2ml0S&As6htcg
zVtcQfl^+D=8qYKus&Yh)4*_F{y{}+=X-)Tg!q8bR^Euj{@QJ4WH1%khG4|ZI=67QH
z{K;TGSxgT;&kK~qk*jtSag(Stzwzo|*S-@2$lxV|w2Ex|P`NOV@dY?4oZHT@$>y~i
zawYd*AuP6b4Inx+U_+;DHK=f?XcwbTi4rR3{>Tz5KL3FSeV#N$bmcW@MNI`al_Xbn
zQfUuImc{sE?!j|B4D2|u`J^4ZJtd{Hs~qBw1}y&zHjVM2uSUZQ8U6^^4pNgqL_}CP
z(JnbI9WhW3sNq&cd;zS^#Mfv>K&(Tw3vBH?aHVEoxx2;po@!zAvV49?4w+CL%;-6d
zrBvKE25h&PB0?EZEb<tr4;2kGJoFuLq`VHt2opHZ+=YiwQ#a<8@i++Cu}uJw;SE6p
zU_U7(2Y+)MSd=;_aZzQg1bwT3N_5~f#;bLTrs^Xmuw$?<KWh)|5LYsRBb;Qc+XS<@
zWSUs36ebn-QUGH-e+r%_JcrSGg~czO1E;DW4+IpF<BfmW@On@Z-)kWqg^a%-yYf-Z
zd``Z4uNiZ1cnB3CFvb1^@;SM+<V_Wvh#!^aCVv>h{}SPgtg0%#?Cj=%*WuxC*>7Dx
z5Yga_{bcBW)_n~V!M54aH9h{43vv_p07*YI?0~^<og>k(RFuMla1*=}*5X8y1^$J|
zEK$CqTlKYS1t+c8>_8}!4FI~O5A~;GSdlZ*(IF!5!Ubq0=(5#G$Xd=~9X{`k$YJ?H
zXJmy4zjl4<T9q>=f@z9+E%>+>Yki#}Xs;ymf07d8RJ!pM8!OQiP=>3PdkDDS+$Q+a
zd38{5<Mz=J@OW<AOpN^;shqN-B`{=OI5<Vy7Hs6$rGyO=X?tg36)+S~4g6bGVw8{W
zF`&AOr*d>b?m+3`yGw$*1%+fywx2CMq*3%!oKf!wJ8L!vK+Ay_9A;Y7hcHVa+4(-i
zW6!(BW1c%ShBfUACjQT;`~0R@s)HR}E_)0Q_!16r?V0#Er7an+&FG$h8JN{PZMmL|
z*lb9*2EqXnyf$9*Suc?UPwW?6zouC<3D6odkcDM_AgGaG{GRlHP%s_u@3|z0Xqw+C
z!ZaXPyYc`V1q2I)5f9Cq8o)cH=OY2n0esEqU`1r>ZV-`N#S-CfeKbkHcYT!R1{+Em
z_HW6e7#Y9Kg%xt1_9pM1)kb#wy3ovsI!K0a<oa4#dL4+BDNei|4(2;O0>uV&CZBQE
zuA8plvy-kvQTE8XjKXvcWFj4c{tb&Iq+h~?Ke9^&u6{ZQhnZF<l~x3(zR71F;Pap=
zY*u@J=_RD~a3knieg!Rn8TU_9YKe?Ai5cYAH;IX{RfX`b(9pjq)})|#1Iq@K`=OsZ
zH#j_<@ri!+Dh*`BSJza6pZM|3K^FG=r{Gykw72|*tH)Yl>(nwqJb%u%ktZ)sEUfzL
zyO9>VA<kH`CdtS=P~!T+R-d>}tiG1OsZ(<RhUpk<XiDEAsz33^GeA*cvc3s@#DAEb
z^&jf027!YtVN;MU{P+hD57L6Nz36VTrRao9mF`8IC=X_2v*%%7Cz0Gt?UAifmkTP+
zDFX}pU#8b5>B<%#hr|jrm<k!`%UMp+QG^H!dIG>w#K!qDiA(&|R`l*!;VqF3rNb$v
z_D0MB6&7I9ge%o{rjb&Jg%0yy;`j#B{`ap2&2!LPMuk4bnxfR$tWm_P$?wy=N3A>-
zX5?_=0@=$e6J~H(F=`Z48uvm*66qY@ODc1ulvPB>3On}}k(od?^LDoxKg@UqB}iiI
zexqm4;u%t<e{!&{T^HGJ??(V?WIVK7Db`QYIMKcCaBoZ(OKqi!#2$iXYV6v3I%@}r
z^TDW8DG|tgVQP)EL){v2-rWY}6$U{zIzyVoQfJ}aT#E@Fg&*nUw<dprT+zbOB!Uy;
zjUFv!7goz5***QMSX&@OrdMoW)3xn>3%_{3bdWk+(_CUmz+!C?eN2~B!d!{DcY~KN
z?#zp!4xULtZy0o!b`Z!x>v%%S6|a6wbukwT;J@ITsvACuXlg(UxNb+>hV~gQm<0Vf
z#ge%O`1VrR9}i~t1ENe#eVK-89&lMs%$Z=4|Bfxch!B9081oX<m8I+}oJL==ilAXq
z2mD5T3_nQds$*CNigDdqwoc~f+Y9b>e~Gv(LJU*WE0eoW`@x|&XUo}0k7d@W;hq`<
zolLFFIHZG-811-y6n=!uS3ZTSnC71s8(q|2yDqeGEcSTn=y;jQ4sWB9CXVb}^dKF~
zzUBF;QzsM8-+M;xr&}nUE8W`H?hnab^C=~g(jg!=t3y+kHTq)YJ}-}i9|xZnFYSm9
zN9eNQx0vUv^fX)u(0NDqo||-u7)Y&Y<iLeUSW~=jNKEQ!&De7uVDM@wpx~N|sij2H
zH!|wd>{~QtCZe`d;0OI;Fj1xNe_+rnCR(-7Ri1zdm!>6#e5xj-#(z{$Q)kv6N)<CQ
zK+n?5MbEM_pxB_aL5GgGw@)V3`p}w6I`bSHm?b|6hOu8lL{FMjv3@SBB_<mtdPF&9
zhmbA0?}l9p$*pRa?c6Q3c8GJRpEDfIIW&aPc+2#=JxO1AqmxoL_hg~vZjs32e=3fC
zk4Kak+gG*DfBh$e769Hay+Z7V(q+#Xub&S&F%7K>q;hadO+A?`vZiV?ROxTp+YIm_
zH=Fe3zyyj8ut!VUQ+<-RMk7_~Ll9m{7X!(%5^O>b1jFR&Tuk6h0oaJwP)E-_NTepe
zO<YO(RA^30HH-*Hicw-6+?ZsHmuro3b2xHH=vGY;O-g_&${3RX%XYYTtSRag)ufw@
zG)ExcteXnK)5!`4)mIU|jqARx?*bCLG4U)6HLggl5@+8-m(-$mkvj6w!-sUie%D6E
zWQLrT_m8p;5}+3mrTj{Tbj);_*+JFjlS&unB;BebbDh2-N_t2H{nmvAbfl$*VILW;
z_#j5QQgrG??b%5uI(pqWt1SG@BMHVR+Ea))1t*a)uu=J8Jexyzw1wRE#MFhINvn-s
z-ppY0EKC-YH|!cOjovoiD*Pi(u0oJ+62||yZ#V&_J{4OiFiL7}nyupSv(j3EGkm|p
zG|X??i0J-r4?8W)M1PN&;Do7xp-Dz}DpT?~3atysY*aYaV1Y#(ax}u#<Q;O9Cq(HH
zeh<5Bdq$H=v~Ph_&v`%lP)9Mx!r8%{`g0~C<{>R{_xz4nafx?k$?CPS*QXjcy_iK*
zgP(A!B^P)WjO-mC)o_v3$i=&#d4fM#2cG{#TA4T`^F$w6K4k^#v+5MOd5@3iR&j_#
zhm5ELZwBe=A=_Z+(!QvKr>~L5jj&aSRweGkL;e&D`Q(e1MdpsT?op)$l@I~$iHPgM
zSYdX5E7B3-l(jJ1>YP&U{`%_({Trp1PJ@EB)B(1L_Sa0S2sd~0+m@?|vQ;apjBz~_
zD}M}TpLvunCg}@&?%7E`^sXUtx+JmK=qh7Qg<t`{fw{9jSAMft^^{zwy1F}NnYs*W
zuTk+d36JAts!>L1+^T{FT<HXA`9vLAF5^BYOU@0c8!1?w7J?%f0y}<p3s};~rI}bu
zwn;OIh_`%lnPI$NRx)%i1+O2hMHw+>R+Jf)X0*^aWqVtBfIKziadSoUbp6gvlo6G5
zL=9^QC9ywB)_~~mjllw<Sn2`|x!kr1&Swq}NWTFM!SV){7*v6QSztjdGSTi*BJ}oc
zgWI{a<uF9<8;Vga#O9GYJm|bhtrcs<Mw}Df1aWHxjqYZ8L_c~<`vX7mHYAHh0f-Gi
ztM4gi1D6c;!%)Q37D9V|;E9`e$o|<ZeP(-)Vq;<myoS(jZpj_iE?4-TjGtz$@61XK
zE4ThAi_bn68uPg#9@gg)TaAIAri+pgqug-Nj2b?qdkbXZjHbU5vbI5%C<h2rU8Ppo
zBk~*kf@_-~w=~i9!M_qsE`unwlflgUaoA`lRIS!t9$yF6xzTAH2IfqcZqXz0SzwcG
zaYTUEt4)-u`-{$V+!|&^(UD(4QT%~e_;mdHQI;!qk4^q05tRpVnsMjs@WEUImId<9
zXPZ*fv7-*FECyL)z>xWx3^)>ggC#Vcp#xc#82E(nu!hIb1S3)^^xATLQ6+=<b(^gP
zrWCsD0fLU|xK~lF<)27QEfJ~A>9BKHb(?6p5|L84bOWZzqNqbAZ}li2PAPQN(onP_
zg|YJoS>C?yML)81dJ%pWYLqqBkC2h?nXs0|!?=%n`7n9aKmRT=WcD7xoTiWTlB~&(
zo+iwS>hg7j1itpUy`r{>g3@UU^}ulVzwlyFFlBd$`5n2w+dHMbG^7XOSYw85b1IL+
zwFlTr<hG;AI$K^)M{=lVui(+lAnhv0O1n1TP#;k~VV8II=(1hULR@R|gmjRhnqb_p
z&m-BO2$lKl8dFFi7%AuD9;`Ws40<t_t3Zj>@b(N~*f!$nx{2l;7>gKril3`i@oeNI
zstCRl?;oUMi&IzN8zv?ns=7{T=7`o4@>CuSaZ&2)Gn+K+rqDN^aI4^krwAIWLI}-Y
z4E=*vt0J7av)&={uWHG+-YjR7-32Ai+t-FPuq^I(jn4&0OJYm)fG{x_O%mc9wv+g3
zBzYL2TzKHl;X~mH8-Aezw@PaICK)}zHLL}$H$%q!d=$7iLp6-I%2}OC5M~uF^N=k<
z$T4cYXdIbKg%@@=PyqejuR9RzJSv^fvln^*L~Zmsp|Re$Yw@)BO5SF4T7)$6P9M~y
zipBWnDuolA8=4cWY_25E6&{x1$X_z0!Q(|J2Jw8Vn>VCksQ?90sCW;#JkWhOCmP6w
zwBvn7L)^&$BK!q}Tq%oSRhqzAJ<-8}&4Zt4kwx?JX9?j2gX$ClBt6ziDN6}S-sG^*
z{+@^%+&Y3FeQHzsf{`)TK!yZkUma^=f_89(EaeH{O%7ISp7e?RD_R?DJO-gWoIv7V
zt)@G`EDgmTqhaZ!>=Ug1t!5_xqlg~^KT5lbTw)U_w@ecR<gjOk_l|cHqNFH(Xh2w%
zt>!wxj~Z*NKdf=Rb8zr$;#SA8OB0rg7O^l|%hDHkr?>jSb{SiKjn~G~`ypsiJYkBP
zziKK2_A4|*CJt=DBP=N!iCiSwsMD+|*8tb29Z<((5%NQIs{2tU9kc_VW1y$S83$Ll
zUZP)U<0At^;DRIR<IgGlJ)QpO%Ip~jdXZ}+tkm)8Hed?s^bXApuHckztLAB+M*?`X
zgcg^iqZ<VkXX5Xb{`M{I%KXyu1msS4iOd|^M#G?$c!fH>Qv+ULVZ_1E`WpZKva0)u
z&OVTaJ{j4t1*sdgiQ4WOEUUVvL59u3-gu`F4~7<uqjUb6{piv+&AiUUD_lVLl6=<W
zrPA9DR`9u7osPD7qB7}g6}r%bA?Uc2Smll*iy<gqY+ZRMEw1~Bkt9?^ViyP|b=?Gy
zzT5fF;kdo(9hfyb(<%7^KSykwK`4W|fX{<1)8&*frZ|RBLXox>H^GhBH$=Ihiek<y
z5xKCWkgr_z^z?9B?gMYPMTVC@dBYR6IcqJl^O}`3Bu0j-?^&a+X%k;gImVnL7L{16
zOFr3b<C@#yUBuX(`gyg%0Ui47dwh!iu8?|srZXE9Kr)B|&*IyZ$r|NW$MlrPkj%~y
zj=RX$;8qo{8NHf54kUs>jerU*-|n_LZmR_zenGsV!D|W_L=J?Nb$xrU<HfGBHZ5U6
zz8;sa<+UO`5fLt-H3Q4DZxw?Q&jfBI$xQ3F3lm);^z+5|y&YzpAzd#@OP0i6+ResB
zFkxtsd9!gLnkLeTdDN(npu9UpO-k&+2FZi0?~n$0q`N&P@j_Qas**7%Qt@sJXTA)V
zjLkXH4PFq=u_Zs50X7`1(qde}6CH>b)}H?~KtVEcN%T8j4W@;Lq698Jj%)VDV;-nf
z`b<^fPm_IfdBxT9={cB{gecMJn5zZ?%So-2!(I7AjRF>8T@6c^dZy#Cj=%SRwV;{J
z#UdIk_?RD>0UR3j==jQKi8I>>6&m2~Fa*sxO7U9(zv5HVBXXdvj?7ohIFM9&@X#%c
zBWi88(LjWd14#p&Phwxf?CHOrMHH|%Xicj&j$R6iUj1-U3e&X0A>hTJvtQx(gxPDM
ze2Qpf^8q3G>`zIGu~Z-eQ!{WHSy%q4Cp>;FPuE{jgR?{RfTKA1K7X1z1y=fj4K8>`
zJjqeT532w{?lL^VN``|(@xK8t=##DK9{paqh!Ffv65&%a_(dk8AHck_#y~Bg`62;i
z$!s%$+8||9`~irVMneOxF4YD48?1wvT8vK&dNbc_Vz7SVWhu(Yi1&!^v*^botM`SD
z8S&xF#Csit{O<w~3Erg<TovSfVQG->Ang38K(MyDQL+Ui`D)gfGcQGLG9y_TbcphZ
zhYkKWT@hr6?g64&#aE#WakpRR0VS=vlIlx5W#L~KiXC(DO19ZkRtl&szm0F5KKDIo
zP?7nQ>uKHDy9(<nIXq>dta7}8VrC*wO0gnE*klN$%N`I;dOzWTL#qE9oCoHNSXVW&
zfA#b18rg_nP?Z;*Ck7j!%G`l4+F5Fqb(HQGnb*1q&KCmmS3+nfsR_0n*+Wgae)Opb
z8hT?x`}kP|{4)Nko#{+<%OU=wOu2%n<X9e{>w*uq1<B@OSCkQXA<%kUm+8b-f?CZ>
z4j~5(ZnE|W@rCT4UFnOyt|79J=2bF)HIUh102^+p8uzC)6QEF&)>JqH1vmgRhIJu{
z*9F0Yg&cUiMNB#a&H*A|)Q;|h`}YyBn|8w==QqMskDu?;`uY5n-0M3UfSLH{%d<eH
zNj&gNXSQ9*YrgJKnFev2@q>-t(`{GK-M@@1yo+J`js~D26Lw<#<8`><u0!cEEyTv2
zT_<b@w9&Xp&tyl<*@QyTZX?sgP1B&XdTa@j!x`EIP3O!qr|u7ZKTM=wzz#iuxrC+B
z@ZV#A4Qew_-i>iSM65$z6QPYtidmiE{M$2UUEp++yN}!bqmSjrEge$msyO3blh1pN
z_*Ocp2u#&NQ?+?VL|`E^`BWU{R_SU*K>>N&Wy?vzdE~V5l<@5F<a`y8FR;nz_Ep$3
z_mSn1WF8+ik6CE~m!la(4WAc;iK?Wiu15R0|N5BZZ37u2p3y(HC%3v`yki6fKCk<G
zWYi$|2t(M#{rQM62-x8FF{4-K=NCz{9-Bq)bD^xqq!#$6`?F&<Nc%+NmUosJ2A4&u
z6V_T1%tNj>lP{&UFh_cVvDiIgoj=ZigKFc(MlIUz$i7J*I9C203D)E4(w&A|o4*Z@
z5<r#mZR!CI<#6k`?YqghskuX;d=d9T-{#w`N2!!2Jtf4JbZJT=fzD-ybbr&GTi*O9
z@Mqd_nrt^m3@B#8tlX8*b>(<LijaR4eq)>EgbvpPQp>LOgr%p`QsS5z@v8E~)D$fP
zjpHmyNK^mz>*qXC%u%fvMh{PpVSdB0xJv)2#4&t2a^6-kSDZRd8%<AC@P#U~?C>KZ
zPg%$_spUW=k{Nljr8#8pi)vZ`A1?&12?jjR#uj!ZxF*!KQ=E#^!vi=hnh^n+6gDy&
zwI9uI^~vV%x}o||pTs{j4#XYsGBR9R-E#}{=&8b{%~&?dDl;kB0k0N{gMEn&h`n1W
zgPg@n9aqi^=98<H#|2`=gCyvk*Vzi3xai<OKf6W>T0GV3)!TPNs%N=KLKnBVFB*S!
zNpL;Ya$&3S2}?0}lf@w*v&<+ghteckjp`v`PxA0hry-YgSz>iK1;j``aFY!_3()F^
zSU8~5KgksUz;Kbdxcje3Bn){HGFj#(Q;akTEm<uzYUGlZmZGRRom|F-k1!HrNlK7~
zl9-;n4m%#k+{|_Ptn|oD9X=u!i@|b{0v~!eb#^4Ix;#CH(Y7#t+LexF)fUT`Kt!@>
z#K})j+fKpd@DJ@FgAIPL;4)u@BQPevO!cf!^{7?JQ$T7hG+&DWEF26xeb8TX##b)_
zTw%F3Zlpx#mA!~2Ej#s*_JZM%rBR1rRP)V=(~|Y1gy+A;1r&~pv^(MFEQ_$D1dKIQ
zB!953Io|(@R>goq0<`bQK)%XPvEWY<Dt(rHdQ*hh0RS)&{%!6MI#|(`-{lxXfn*~M
z30!5vis+*DYsZ0|kJ2#?5UPWwV2}WB;$<~BP!%4=Qq5rrTb-th;5$euSzrN&mlJj3
z^N<JklfFL+W;_uOHV_;0sR`^^O<!jvAC68zn^JWpplj<CTW^Kace)6vDP$Hyi@qiv
zgl^P%Y&N}0N+xRSuf&!Q#m`K%ID8wlN(Rqarc}?w*s6|uF32m{$}5;HNY!N9vF1@u
zFJ)i_HU>EQBb(751U+OGXlYccxPWC7Ph{PcPyCLc=A(c#L043{NgdjshX))k%cCh>
zijwpHDS~f3Wnzj+R}p1{^wtM40gGcpYfccm-zi2HAl}*b2Dh2r=c1p--L6anW5r$`
z4D7(euKH#x9*NGG4t_MEl_4)qH<3USWtI~ZB^L6M28+*BG7Z7c<9Mnt<=(6t3~4Z<
zgzzW$)mU+VqE1YaK%kQhYeJ&*OS6K=l)Fh)Z1Jxm7QPswsRf=&Z40e<bF)|(#FCvr
z`v<w(qX<P%R{=6b+Jjcui;PhW#AXpKzk64?!VxMDNLn2}54|jd%ZtJYFKI+Amd<~U
zaH-IGl!|6#d2t-(#d^6CRAtGHCYZ?E65u0u4u&bg5pslHMqjlunl6ZLdF$=7k~0V|
z-RO_LYCAuRS2SR70GgxaQ|>ef;I^so@Gn{PKYZrtM%Y!uqmrC1N-)PG6WI<?L{_PN
z!<<S=sY6N?-)1l@ziqILmV+{hR+UV4c5}B<n8ML#jht51?xy2pd$0_MQv~jc)k_-r
z{(5Cb{l#>|d)Q<<o?;#K;D5}aA1&D>{-?N^zu3rXVkqCMP{m_t?(ob{3+mw2U2nJV
z0$NibQDYGgn_k^yrb7(@{9#FFJty$!FI0yXB;x@ucW_XR|I}VVol5Kvpx;h4ov#xb
zg~!mLlep)=>p?h6Rme&326M1A8a<<^1Wdke;9dVAR;W+zmW|UV)r#QgqRoO6q3XQh
zzE~HAQ~~>l_5ym7A}YO?!^`mOaIX-;Ky-pP#Q}IOuhM9YfKQQ-A{?M{T}QCGG~R{+
z)wnNw^*%TObV>-lfNBg8kg;P$IY>Zeg$xbC)-)nsSU7mhNanF@S_TvS4!S1+1)_G(
z?mz@AR{m4^RE;7CM!goXFZzuj8g2{0qLU7&bMKlxS2ro|QYi_p>B)4_tFh<)k>Q5I
zjJpEKZYrurb3q20`-rS2Bbo-6u2Eue-836BNny?^frUIB!!A04v>vT0<KeLJ7Dk}#
z{5#~(oMm-<{27xWfFV9jWZFM5S`$gth4+v46f(R@c?R_XzpLA+91)Bk;K(H3oBn|Q
zLK@9d;$}hYPeB>kDE}budI4S_HG_?i^s#;*op`IuTC_WY>M}T8WbW-Gd)7QY9Gz5t
zrnfWMKZL4!Y+uC;y@q)gWfZq8&!XoxR)q_ye2L$F#PSJqzN;v#7^m5AGqK}%BNWio
zjQ2et<Vj*U(d#^v2dRLYkoQ)Kuddo>X}*KZsg;W*$PL&Gng!U7@({&QMR=f!m%{z_
zVn2Zf{C-GV677E?;gUTF)1tNcB>B2EaMDTUW6s`Y#84L^MDV9HB;0%Ee+z;r(;O*T
z5Ad=OhmZ7DN}CDD3kGD$N^5pctQ&ksinG;3czz(jBww&8_8$;hr>U724~TEcsmA}1
zNk|6HtzgNhk>N`aQ9Y3y6HTI?>eL6KX|y{?0xWAF@i|bnrgeSm`Iy+lV4JFC%<Qc+
zpwGRJ(JA4yZ6(M^#YBI`ikeDjt~<>%Nm6Ag#G+tW_Ri8Wqo15)(ge3yOtx5KxWpCy
z3`)^jpi7PRNNn?l2V@bg^MP{?uv+;aiQ?!Rk@~0w`tig)UNl3##l<V&BMw<YnyqYA
zZpP1Yi1Mz{7(FDl;NY{8$!^kI;KOqDPwJR$lJcRv9N$($aYx5a`N6_>5kE`Eu*3q2
zsvbq1-&u4eG{uSn?FM%M7h7cJCwnYVnMG^ob%spQqE8RywtH;tJ|yu%-N9u58g^|4
zRB0A18VSFxM*_`~tBrc=mLHIbggAF<J%a=8iqv@#FOnBX%^-)s3s}=L-Ym558&Zof
z*Hm6oyX8rAWSX?h#R1q&ysvIG*Ft9xtOYi`MF_~%9(%=7r2EW1#V0L!1)v;}cqzxk
zr%tcYCY{-u548hFp`~19d5kSXygx7#y^3finy%D>DL1_YZ(CaSrq5GBWfB-#Hc*$j
zO8}x9`pNC6REi)GR;^Ad)Dcn471APwWhz-pYW5602wS;?`^Mc0>S?(nXF-Z$osxwX
zNn3t+I)EB!N)5|S2QhwRaE<V8^=~)MRV*Y*Uqu!Y4W!V`2k211sSTIA524d3Bm`h^
zhfw6gx+U6j>>_~PUOaIjw@x-Xy}w$wq@&1_;UDqfCnLg`BNU<dO3X|?ga4@<$v91$
zW&+60O#DTmL<c?)b&uNdRL#o4(#;)S+E>UqrXwHAT=GbNMYwG+ao}fn4pxCZN?-=Z
zL_X(H;OfGKmVZVv5n#OCcEAQ+3>Rq`GQ@ZJLeXh2F^7mq&5LPMnW`Ki=?q1O1By__
zsVg6$QrZ?y&cR?A!9}{LNNm?Bk09fof7>8~CP&##GMi}tRjtTG8qMr#tD!UgHIw5~
zd=mq%(6xrQx*;wjsuJVNiA}gnzif+dnOVXl1i(=e((n7&Nx6x)USz_FNb12K2z($V
ziyLi8KZZo{QTm<03L<(qz^s-i$h}s;VU>-3{aPL%V>e$}g!L<$i$kcKxZv8r1r=|I
z@PE5<{l@Bq`Gaz)yfNbr#|M9OIbg;q=zu2zf9MTp!zI6GCvGsaf}up89eVtbA(+~Q
zxbLG-JCBRn2?&px(2XB=8`={#LFTYYohL^XYQ`#GCnW$lfcbSMCN#TDo4%yUX6C_8
zDD_SB#GqSruIQ3t9A`*zVt5BCG(WE;VurJ`u3==NEBt~h4Qz&=B~98g<R9rBgs6nO
z@?MwV0g3snwUh$|TLg4pVzH6Y$uSRL?eU`W;Yvue7LH(vrBDNW-k!)1;rdD82mB8b
zkQFPkD*xb%JX_XTl#I$r8IT%@Ae!%w+QD?iX-m(YB-zNvQP17?Wz|*nqe)o@m6-}d
zOkWMjjA%&eR2(Fdl8)>z@@*<t3bFPiMnIS|-I&=wV9{=j{5v-IEiWc7<deyuW_d;L
zHWZcR(4>M2k1-Xhcw9>Hp7?;}Xs)vXaMQ&laBY5aJJwzRK*jgbd$+chO_`hh_c@%B
zl!ii92x-2gtr}534TRs|s2MOe_n4QkTG6$!lle$I&PkT+|KNk@Os0()2Ge!s5ZUEn
z$VY#Y<(Ooa2HxPJSjw4dZ&Y#csXvHOE})C2%D|$c&0P)34@gBLm}yB*i|l^*ct_W6
z;uc3tyN)6L6n&l?s#FeuePJzU)g`Dx^YoYe8+{8)5DhuH(-+2Th(QCXQ)Cdx_9vaW
z6jp*anSB$+cQ(x+<*It-+!5FkJ{bzTf!$kGflt#Z$>9tk9TMw<jTG;N6g3L<99<pl
z7*Y;>FxfhZvM*&NW^!zXps-^=7~i<=|6@D0D{(vyu`4lbR9u365at7$8{sqo%ZuJF
zon@E}l_Ui~lh2sU;j0Rbc$MW;%n)`s5(fEwEPQlnvBb8ao>1a2mQ0|U%#t8Mjb(XP
z?lkzb+(Co&pF105HTHp|_WhKdfkvl<o~9!OLNh3PQ}Ygty<fBp(MPWFk*f>vvidxv
zFgS<Aqk_1JFWLropC?CZ|HACcm_!iXfy(Jk7I#X<;)qIM>-D&bWc9^3Kr$nNsUB)!
z+vx+Mu;ZU6o|r#D0&<X;Pw|9mor~r(M{ynF6D}48a=|^DmrI@5S7(o%aSox^+I$W=
zkV^6{zF?%UCmkIwq}ypiaa>Hex7y(KO0{!D73`_1Pe6y+$afeED<F1^;Nbu;lwkuT
zCY>yWXC#p0Y|e{6l)K+K>|^%9svZqc(`Pae;~qFWH|{;xug;9gwkCOEm!sHf(vQJa
zwP7)qR9FUe)wycI$aFb5Y|C-;Kbj?nydr>C8F9n9tNUdmR`ckhVaNKpYH0022hlUp
zGzxUtG7r+!W+hqy2v(UMgN-ADBq+PAzs=c=??gxmdT@XksF=u6<I(WqmzVuC*A$ac
zGR1u{W?s}Jkm4(;Ahs~qpO2%EDY*m=xB{&kqH`chnQy7kO@GB-u1tYvw$Jt02?}EW
z)tx*}qzWgGqqRs(KT1-E{w!95Wxg%Y2Z{Frqxtb!4m9?!vs&bEE4oBJ|Gxm617!RO
z3~GwuAvRc#nWFb7jfY5w;wiYDu=r{X-;Vr#n1Nh(63nAY5ZHe5G*qLA0Ou{jD7Z>c
zjuZgh>8`w2d=~Q*1-zoBdt*RFZ2*-HG79p8odN^Sv_XHHKk_{z6`Y7w`XuLsnnS;S
z5fo4zAXHCLDTNC((b1Cw9gU)vfC&KLsQ@;_lC&fO5s;ZO(C1T;_qJwb(-T8fggjWA
z05CJdkTqhF@RmmTL^ooD%r?5!+n_nGFB=k#KUPDt0~yHPD85)+9IP>Wxl;-_kU1`Y
zQUSelHn28lX=|qOQUC;}V4@@i8AbNR!WeiXe+t@@-0}SIPgx*1Lh5w^x))Lwb`qno
z1Tkb-O4(FQXn(cVSRbm|&qmj)A|Xc>3@Ej)3DC6|GnD9p5e;cYjMen90go)HU{Z~{
zT))O;+b)(zhFwdbW0Q2ts9Ei}w33o03mJ2N6Evv|swBQiAj6bt<-$h6AQq@ZN(&TA
zaLgAHE_^dd<5n$Nfzyiz5jC3>QsE0uKupZ<@Ee#Av<-xR>lGj+?nZ@=0tmtg6@-o>
zLyCuLD8NS6FawpWNNDISDz*b_IbbQ-X-ib++LK(15~~uOw*mXMG$BwSvH=Wk$C;|Y
za#@eSY+`eI$zotwbG5XxP;-$S9B4Fb@jeo0F%UTC=Q~OlnP+-Y8Xhz02H`izqyTH`
zc;W^cv<oq1ccB(yz+j`Wm@!YwH3>npBw_LBGAEKy+<9d1C5Hr?sa#25&<Bm)hm#LX
zW;!Ww&m!$zoR(8z7ks0=ouLgnLuQB!V>4yQguPIac22EAXGG}UB-S2iJop?$I)}5@
z3yZ3BxE4cqb&+Z1f!R_VBRnQEM+UvH^nwuMFf0)pRK&R2b)occ3`j|hRhIW=ZF?8L
zY=HKtD|ilc*0EjN{9iJfC?Rgvuyu1V7<OMI?V}xOOo+syj|vWHDIC>x5)NP{RGzt`
zGDiwnr6)`z7z~FqFGY<<$Hs+Vkol%=5DFvu&+v7Q4J%&|Ea}Q%l0|jIWO^UScb>xk
zOgCAVWJ3AYCDQYDGv(0o6cP>i!3LfsXl<<3;LK~~`Gc#6>Tp4z{>H`mHtv@ba61R_
z2TZPuPK}>eH4!ho;<#xT-I7n^m?gYj;akNoyNJ%U7&ktDhB?<qd2+VQSrFl1p<4hi
pxZJ=)vat_JjP|pVcDYGBH6P!`p{AUD__wG@0dGsjKdj^4K>+?FG|B(~

diff --git a/static/fonts/roboto-v18-latin-900.svg b/static/fonts/roboto-v18-latin-900.svg
deleted file mode 100644
index 9efdf4e953..0000000000
--- a/static/fonts/roboto-v18-latin-900.svg
+++ /dev/null
@@ -1,302 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1206" ><font-face
-    font-family="Roboto Black"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="510" />
-<glyph unicode="!" horiz-adv-x="565" d="M429 461H156L113 1456H472L429 461ZM103 151Q103 225 156 272T290 320T423 273T477 151T424 30T290 -18T157 29T103 151Z" />
-<glyph unicode="&quot;" horiz-adv-x="649" d="M255 1398L212 969H25V1537H255V1398ZM606 1398L563 969H378V1537H606V1398Z" />
-<glyph unicode="#" horiz-adv-x="1190" d="M612 410H451L384 0H185L252 410H30V593H282L326 857H105V1040H356L425 1456H623L555 1040H716L785 1456H984L915 1040H1146V857H885L841 593H1070V410H811L744 0H545L612 410ZM481 593H642L686 857H525L481 593Z" />
-<glyph unicode="$" horiz-adv-x="1186" d="M760 386Q760 465 721 510T584 595T403 676T260 771T168 896T136 1068Q136 1237 250 1346T554 1474V1685H713V1470Q896 1443 1000 1320T1105 1006H767Q767 1110 727 1166T613 1222Q547 1222 511 1181T474 1066Q474 992
-516 949T651 866T826 784T969 687T1063 561T1097 388Q1097 217 989 109T693 -17V-218H534V-16Q316 7 200 133T83 467H420Q420 353 470 294T614 234Q682 234 721 274T760 386Z" />
-<glyph unicode="%" horiz-adv-x="1520" d="M90 1176Q90 1311 178 1394T414 1477Q564 1477 651 1395T738 1171V1099Q738 964 651 882T416 800Q269 800 180 881T90 1105V1176ZM307 1099Q307 1047 336 1015T416 982Q521 982 521 1116V1176Q521 1228 493 1261T414
-1295Q365 1295 336 1263T307 1174V1099ZM782 357Q782 493 870 575T1106 657Q1255 657 1343 576T1431 350V280Q1431 144 1344 62T1108 -20Q961 -20 872 61T782 285V357ZM998 280Q998 233 1030 198T1108 162Q1205 162 1213 254L1214 357Q1214 410 1185 442T1106 475Q1058
-475 1029 445T998 362V280ZM480 109L323 188L1034 1326L1191 1247L480 109Z" />
-<glyph unicode="&amp;" horiz-adv-x="1380" d="M311 767Q252 851 219 927T185 1084Q185 1260 299 1368T597 1477Q762 1477 870 1377T978 1127Q978 941 773 797L697 744L921 487Q976 597 976 728H1259Q1259 433 1123 255L1345 0H969L901 77Q817 27 730 3T532 -21Q316
--21 186 92T56 391Q56 492 107 574T308 765L311 767ZM554 239Q642 239 722 280L460 578L451 572Q394 502 394 414Q394 341 440 290T554 239ZM476 1088Q476 1018 552 918L619 960Q665 990 686 1022T707 1103Q707 1149 675 1183T596 1217Q540 1217 508 1182T476 1088Z"
-/>
-<glyph unicode="&apos;" horiz-adv-x="316" d="M283 1374L250 961H43V1536H283V1374Z" />
-<glyph unicode="(" horiz-adv-x="723" d="M120 592Q120 836 185 1046T364 1402T619 1606L683 1440Q543 1337 467 1119T389 606V562Q389 261 465 40T683 -284L619 -450Q481 -394 365 -246T185 109T120 547V592Z" />
-<glyph unicode=")" horiz-adv-x="721" d="M626 564Q626 329 557 118T367 -244T104 -450L40 -284Q179 -180 255 36T334 533V594Q334 895 258 1116T40 1440L104 1606Q244 1551 364 1403T554 1046T626 608V564Z" />
-<glyph unicode="*" horiz-adv-x="952" d="M352 956L26 1046L91 1235L410 1104L385 1456H599L573 1097L883 1225L948 1034L618 944L837 679L664 561L481 855L297 571L124 684L352 956Z" />
-<glyph unicode="+" horiz-adv-x="1094" d="M702 826H1043V537H702V146H387V537H45V826H387V1206H702V826Z" />
-<glyph unicode="," horiz-adv-x="552" d="M213 -392L43 -312L77 -244Q147 -114 150 4V254H420L419 37Q418 -78 360 -197T213 -392Z" />
-<glyph unicode="-" horiz-adv-x="921" d="M753 497H152V758H753V497Z" />
-<glyph unicode="." horiz-adv-x="619" d="M303 327Q383 327 436 280T489 158T436 37T303 -11Q222 -11 170 37T117 158T169 279T303 327Z" />
-<glyph unicode="/" horiz-adv-x="719" d="M210 -125H-29L468 1456H708L210 -125Z" />
-<glyph unicode="0" horiz-adv-x="1186" d="M1100 595Q1100 300 968 140T594 -20Q351 -20 218 141T85 595V861Q85 1156 217 1316T592 1476T967 1315T1100 860V595ZM763 904Q763 1061 722 1138T592 1216Q505 1216 466 1144T423 926V554Q423 391 464 316T594 240Q680
-240 721 313T763 544V904Z" />
-<glyph unicode="1" horiz-adv-x="1186" d="M836 0H498V1076L166 979V1235L805 1456H836V0Z" />
-<glyph unicode="2" horiz-adv-x="1186" d="M1105 0H89V220L557 712Q730 909 730 1025Q730 1119 689 1168T570 1217Q493 1217 445 1152T397 988H59Q59 1122 126 1235T312 1413T578 1477Q814 1477 941 1368T1069 1055Q1069 969 1037 888T938 717T720 477L532 260H1105V0Z" />
-<glyph unicode="3" horiz-adv-x="1186" d="M397 869H556Q745 869 745 1054Q745 1126 700 1171T573 1217Q506 1217 457 1178T407 1081H70Q70 1196 134 1286T311 1426T561 1477Q804 1477 943 1366T1082 1061Q1082 967 1025 884T857 748Q973 706 1039 621T1105 409Q1105
-214 955 97T561 -20Q418 -20 296 34T110 185T47 405H386Q386 338 440 289T573 240Q662 240 715 289T768 416Q768 526 713 572T561 618H397V869Z" />
-<glyph unicode="4" horiz-adv-x="1186" d="M979 569H1127V309H979V0H642V309H79L59 515L642 1453V1456H979V569ZM380 569H642V1017L621 983L380 569Z" />
-<glyph unicode="5" horiz-adv-x="1186" d="M109 712L198 1456H1049V1194H472L439 905Q475 926 533 942T648 958Q865 958 981 830T1098 469Q1098 329 1036 216T860 41T593 -20Q456 -20 336 36T148 191T81 414H419Q424 334 470 287T591 240Q761 240 761 492Q761
-725 553 725Q435 725 377 649L109 712Z" />
-<glyph unicode="6" horiz-adv-x="1186" d="M903 1477V1212H888Q699 1212 578 1122T428 870Q542 982 716 982Q905 982 1017 844T1129 482Q1129 343 1064 227T881 46T620 -20Q465 -20 343 50T153 252T83 554V689Q83 914 179 1093T455 1375T852 1477H903ZM599 724Q532
-724 487 693T420 617V516Q420 240 611 240Q688 240 739 309T791 482Q791 589 739 656T599 724Z" />
-<glyph unicode="7" horiz-adv-x="1186" d="M1101 1276L557 0H201L746 1196H52V1456H1101V1276Z" />
-<glyph unicode="8" horiz-adv-x="1186" d="M1071 1067Q1071 961 1019 880T874 750Q978 699 1039 611T1100 401Q1100 206 966 93T595 -20Q358 -20 221 93T84 401Q84 518 144 608T314 750Q221 799 168 880T115 1067Q115 1257 244 1367T592 1477Q813 1477 942 1367T1071
-1067ZM762 428Q762 518 716 566T593 615T470 567T423 428Q423 341 470 291T595 240Q670 240 716 290T762 428ZM592 1217Q524 1217 489 1173T453 1049Q453 971 489 923T595 875Q664 875 698 923T733 1049T698 1172T592 1217Z" />
-<glyph unicode="9" horiz-adv-x="1186" d="M753 563Q644 465 509 465Q311 465 195 599T79 957Q79 1097 144 1217T326 1407T586 1477Q730 1477 846 1405T1028 1200T1095 894V765Q1095 524 1001 347T731 75T323 -20H302V250L366 251Q714 268 753 563ZM600 708Q710
-708 758 803V943Q758 1083 711 1150T584 1217Q513 1217 465 1141T417 957Q417 843 466 776T600 708Z" />
-<glyph unicode=":" horiz-adv-x="615" d="M304 327Q384 327 437 280T490 158T437 37T304 -11Q223 -11 171 37T118 158T170 279T304 327ZM304 1125Q384 1125 437 1078T490 956T437 835T304 787Q223 787 171 835T118 956T170 1077T304 1125Z" />
-<glyph unicode=";" horiz-adv-x="590" d="M294 1125Q374 1125 427 1078T480 956T427 835T294 787Q213 787 161 835T108 956T160 1077T294 1125ZM238 -392L68 -312L102 -244Q172 -114 175 4V254H445L444 37Q443 -78 385 -197T238 -392Z" />
-<glyph unicode="&lt;" horiz-adv-x="1044" d="M383 609L930 425V118L46 478V744L930 1104V798L383 609Z" />
-<glyph unicode="=" horiz-adv-x="1199" d="M1054 722H128V982H1054V722ZM1054 283H128V543H1054V283Z" />
-<glyph unicode="&gt;" horiz-adv-x="1050" d="M655 612L111 797V1103L990 743V477L111 117V423L655 612Z" />
-<glyph unicode="?" horiz-adv-x="1043" d="M344 461Q344 607 377 691T484 838T596 951T635 1065Q635 1216 505 1216Q445 1216 408 1172T369 1053H31Q33 1253 157 1364T505 1476Q728 1476 850 1373T973 1080Q973 997 940 929T834 790L719 683Q670 636 651 587T630
-461H344ZM303 157Q303 231 356 278T490 326T623 279T677 157T624 36T490 -12T357 35T303 157Z" />
-<glyph unicode="@" horiz-adv-x="1834" d="M1756 550Q1746 289 1626 134T1306 -21Q1224 -21 1161 14T1063 115Q965 -17 800 -17Q704 -17 632 39T527 200T506 436Q536 686 667 838T988 990Q1135 990 1241 922L1304 880L1253 293Q1236 154 1349 154Q1434 154 1491
-262T1555 540Q1572 874 1417 1056T961 1238Q770 1238 622 1141T387 865T289 458Q273 108 429 -77T897 -263Q981 -263 1075 -244T1228 -198L1265 -364Q1204 -404 1101 -428T893 -453Q620 -453 432 -349T151 -39T69 458Q81 734 196 952T512 1290T965 1410T1400 1306T1675
-1005T1756 550ZM756 436Q745 306 776 240T878 173Q925 173 964 215T1030 335L1070 791Q1040 799 1008 799Q896 799 836 712T756 436Z" />
-<glyph unicode="A" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543Z" />
-<glyph unicode="B" horiz-adv-x="1321" d="M110 0V1456H633Q914 1456 1060 1353T1207 1054Q1207 941 1155 861T1002 743Q1116 713 1177 631T1238 431Q1238 217 1103 110T701 0H110ZM461 619V270H691Q786 270 837 313T888 436Q888 618 707 619H461ZM461 849H644Q759
-850 808 891T857 1012Q857 1104 804 1144T633 1185H461V849Z" />
-<glyph unicode="C" horiz-adv-x="1344" d="M1288 493Q1281 341 1206 225T996 44T686 -20Q399 -20 234 167T69 695V767Q69 981 143 1141T358 1389T682 1477Q947 1477 1108 1338T1291 953H941Q937 1086 874 1144T682 1202Q551 1202 490 1104T426 791V688Q426 455
-484 355T686 255Q807 255 871 312T939 493H1288Z" />
-<glyph unicode="D" horiz-adv-x="1324" d="M110 0V1456H579Q772 1456 926 1369T1166 1122T1254 764V697Q1254 497 1170 339T932 91T589 0H110ZM461 1185V270H583Q734 270 815 377T896 697V760Q896 971 815 1078T579 1185H461Z" />
-<glyph unicode="E" horiz-adv-x="1146" d="M1013 617H461V270H1113V0H110V1456H1115V1185H461V878H1013V617Z" />
-<glyph unicode="F" horiz-adv-x="1120" d="M1027 580H461V0H110V1456H1084V1185H461V850H1027V580Z" />
-<glyph unicode="G" horiz-adv-x="1396" d="M1302 180Q1221 90 1065 35T723 -20Q437 -20 266 155T83 642L82 768Q82 983 158 1143T375 1390T703 1477Q975 1477 1125 1353T1301 981H963Q945 1103 885 1155T715 1207Q583 1207 511 1095T438 775V687Q438 469 512 360T747
-250Q884 250 951 311V537H707V778H1302V180Z" />
-<glyph unicode="H" horiz-adv-x="1439" d="M1327 0H978V608H461V0H110V1456H461V878H978V1456H1327V0Z" />
-<glyph unicode="I" horiz-adv-x="618" d="M484 0H134V1456H484V0Z" />
-<glyph unicode="J" horiz-adv-x="1151" d="M690 1456H1040V457Q1040 318 976 209T796 40T538 -20Q300 -20 168 100T36 440H388Q388 340 422 295T538 250Q611 250 650 304T690 457V1456Z" />
-<glyph unicode="K" horiz-adv-x="1310" d="M605 542L461 384V0H110V1456H461V814L583 999L897 1456H1331L839 812L1331 0H915L605 542Z" />
-<glyph unicode="L" horiz-adv-x="1110" d="M461 270H1072V0H110V1456H461V270Z" />
-<glyph unicode="M" horiz-adv-x="1795" d="M571 1456L896 443L1220 1456H1682V0H1330V340L1364 1036L1012 0H780L427 1037L461 340V0H110V1456H571Z" />
-<glyph unicode="N" horiz-adv-x="1438" d="M1326 0H977L461 906V0H110V1456H461L976 550V1456H1326V0Z" />
-<glyph unicode="O" horiz-adv-x="1414" d="M1343 698Q1343 485 1264 321T1040 69T708 -20T378 65T154 310T69 675V757Q69 971 147 1134T372 1387T706 1476Q891 1476 1036 1388T1261 1138T1343 765V698ZM986 759Q986 976 914 1088T706 1201Q442 1201 427 805L426
-698Q426 484 497 369T708 254Q841 254 913 367T986 692V759Z" />
-<glyph unicode="P" horiz-adv-x="1333" d="M461 494V0H110V1456H691Q858 1456 986 1395T1185 1220T1256 962Q1256 749 1104 622T685 494H461ZM461 765H691Q793 765 846 816T900 960Q900 1062 845 1123T695 1185H461V765Z" />
-<glyph unicode="Q" horiz-adv-x="1414" d="M1345 698Q1345 496 1278 346T1093 104L1328 -82L1111 -266L798 -14Q754 -20 710 -20Q524 -20 380 66T156 312T72 680V757Q72 972 150 1135T374 1387T708 1476Q893 1476 1038 1388T1263 1138T1345 765V698ZM988 759Q988
-976 916 1088T708 1201Q569 1201 499 1090T428 765V698Q428 483 499 369T710 254Q844 254 915 367T988 692V759Z" />
-<glyph unicode="R" horiz-adv-x="1336" d="M651 514H461V0H110V1456H683Q942 1456 1088 1341T1234 1016Q1234 864 1173 764T980 602L1284 15V0H908L651 514ZM461 785H683Q783 785 833 837T884 984T833 1131T683 1185H461V785Z" />
-<glyph unicode="S" horiz-adv-x="1282" d="M861 387Q861 464 807 507T615 596T391 685Q108 824 108 1067Q108 1188 178 1280T378 1424T668 1476Q825 1476 949 1420T1143 1261T1212 1024H862Q862 1113 808 1162T660 1211Q566 1211 512 1170T457 1064Q457 1008 517
-963T728 869T976 764Q1212 628 1212 389Q1212 198 1068 89T673 -20Q496 -20 353 43T137 217T64 472H416Q416 355 476 300T673 244Q760 244 810 281T861 387Z" />
-<glyph unicode="T" horiz-adv-x="1291" d="M1253 1185H816V0H465V1185H36V1456H1253V1185Z" />
-<glyph unicode="U" horiz-adv-x="1361" d="M1252 1456V503Q1252 341 1183 223T985 42T680 -20Q414 -20 261 118T105 496V1456H458V489Q464 250 680 250Q789 250 845 310T901 505V1456H1252Z" />
-<glyph unicode="V" horiz-adv-x="1353" d="M675 396L965 1456H1357L867 0H483L-3 1456H386L675 396Z" />
-<glyph unicode="W" horiz-adv-x="1780" d="M1238 543L1405 1456H1753L1444 0H1080L885 830L694 0H331L21 1456H370L537 543L737 1456H1035L1238 543Z" />
-<glyph unicode="X" horiz-adv-x="1307" d="M653 972L891 1456H1292L885 734L1303 0H898L653 493L408 0H4L421 734L15 1456H415L653 972Z" />
-<glyph unicode="Y" horiz-adv-x="1286" d="M643 824L911 1456H1290L821 523V0H465V523L-3 1456H374L643 824Z" />
-<glyph unicode="Z" horiz-adv-x="1249" d="M504 270H1200V0H66V185L760 1185H62V1456H1193V1276L504 270Z" />
-<glyph unicode="[" horiz-adv-x="577" d="M564 1460H446V-104H564V-349H108V1706H564V1460Z" />
-<glyph unicode="\" horiz-adv-x="873" d="M-20 1456H331L939 -125H586L-20 1456Z" />
-<glyph unicode="]" horiz-adv-x="577" d="M14 1706H470V-349H14V-104H133V1460H14V1706Z" />
-<glyph unicode="^" horiz-adv-x="916" d="M460 1182L289 729H36L335 1456H584L884 729H630L460 1182Z" />
-<glyph unicode="_" horiz-adv-x="904" d="M903 -251H0V0H903V-251Z" />
-<glyph unicode="`" horiz-adv-x="695" d="M610 1222H336L54 1536H410L610 1222Z" />
-<glyph unicode="a" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493 220Q556
-220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220Z" />
-<glyph unicode="b" horiz-adv-x="1153" d="M1099 532Q1099 266 989 123T679 -20Q514 -20 413 111L399 0H97V1536H434V995Q528 1102 677 1102Q879 1102 989 957T1099 549V532ZM761 553Q761 709 720 775T592 842Q478 842 434 755V325Q477 239 594 239Q713 239 745
-355Q761 412 761 553Z" />
-<glyph unicode="c" horiz-adv-x="1064" d="M552 240Q623 240 662 278T700 386H1016Q1016 208 889 94T560 -20Q324 -20 188 128T52 538V552Q52 716 112 841T287 1034T557 1102Q768 1102 892 985T1016 668H700Q700 752 659 797T549 842Q418 842 396 675Q389 622
-389 529Q389 366 428 303T552 240Z" />
-<glyph unicode="d" horiz-adv-x="1152" d="M52 549Q52 806 163 954T473 1102Q618 1102 717 988V1536H1055V0H752L735 116Q631 -20 471 -20Q278 -20 165 128T52 549ZM389 528Q389 240 557 240Q669 240 717 334V746Q671 842 559 842Q403 842 390 590L389 528Z" />
-<glyph unicode="e" horiz-adv-x="1115" d="M618 -20Q369 -20 215 128T61 515V543Q61 709 122 836T302 1032T582 1102Q810 1102 942 961T1074 566V435H404Q422 344 483 292T641 240Q801 240 891 352L1045 170Q982 83 867 32T618 -20ZM580 842Q432 842 404 646H744V672Q746
-753 703 797T580 842Z" />
-<glyph unicode="f" horiz-adv-x="742" d="M169 0V848H12V1082H169V1168Q169 1353 278 1455T584 1557Q656 1557 742 1536L743 1288Q712 1297 660 1297Q507 1297 507 1165V1082H718V848H507V0H169Z" />
-<glyph unicode="g" horiz-adv-x="1178" d="M55 549Q55 713 109 839T264 1033T499 1102Q668 1102 763 988L775 1082H1081V41Q1081 -102 1015 -207T822 -369T530 -426Q411 -426 300 -381T129 -264L270 -66Q364 -177 518 -177Q742 -177 742 53V87Q645 -20 497 -20Q299
--20 177 131T55 537V549ZM393 528Q393 395 443 318T583 240Q692 240 742 313V768Q693 842 585 842Q495 842 444 762T393 528Z" />
-<glyph unicode="h" horiz-adv-x="1156" d="M424 966Q532 1102 700 1102Q879 1102 970 996T1063 683V0H725V675Q725 761 690 801T571 842Q467 842 424 776V0H87V1536H424V966Z" />
-<glyph unicode="i" horiz-adv-x="563" d="M450 0H112V1082H450V0ZM92 1361Q92 1433 144 1479T279 1525T414 1479T466 1361T414 1243T279 1197T144 1243T92 1361Z" />
-<glyph unicode="j" horiz-adv-x="553" d="M457 1082V-37Q456 -229 347 -333T43 -437Q-41 -437 -116 -420V-165Q-58 -174 -21 -174Q119 -174 119 -35V1082H457ZM94 1361Q94 1433 146 1479T281 1525T416 1479T468 1361T416 1243T281 1197T146 1243T94 1361Z" />
-<glyph unicode="k" horiz-adv-x="1120" d="M529 403L434 308V0H97V1537H434V721L468 766L722 1082H1126L747 637L1151 0H765L529 403Z" />
-<glyph unicode="l" horiz-adv-x="563" d="M450 0H112V1536H450V0Z" />
-<glyph unicode="m" horiz-adv-x="1764" d="M413 1082L424 955Q539 1102 733 1102Q938 1102 1010 939Q1120 1102 1328 1102Q1657 1102 1666 704V0H1328V683Q1328 766 1300 804T1198 842Q1098 842 1049 753L1050 739V0H712V681Q712 766 685 804T582 842Q485 842
-434 753V0H97V1082H413Z" />
-<glyph unicode="n" horiz-adv-x="1155" d="M404 1082L415 955Q527 1102 724 1102Q893 1102 976 1001T1063 697V0H725V683Q725 765 692 803T572 842Q473 842 425 764V0H88V1082H404Z" />
-<glyph unicode="o" horiz-adv-x="1150" d="M52 551Q52 713 115 839T296 1034T573 1102Q816 1102 956 952T1096 542V530Q1096 277 956 129T575 -20Q344 -20 204 118T53 494L52 551ZM389 530Q389 380 436 310T575 240Q755 240 759 517V551Q759 842 573 842Q404 842
-390 591L389 530Z" />
-<glyph unicode="p" horiz-adv-x="1153" d="M1099 533Q1099 281 986 131T679 -20Q530 -20 434 89V-416H97V1082H412L422 982Q519 1102 677 1102Q877 1102 988 955T1099 549V533ZM762 554Q762 842 594 842Q474 842 434 756V330Q478 240 596 240Q757 240 762 518V554Z" />
-<glyph unicode="q" horiz-adv-x="1151" d="M52 552Q52 810 164 956T473 1102Q639 1102 739 966L763 1082H1055V-416H717V90Q620 -20 471 -20Q279 -20 166 128T52 552ZM389 531Q389 240 557 240Q673 240 717 328V756Q675 842 559 842Q402 842 390 591L389 531Z" />
-<glyph unicode="r" horiz-adv-x="776" d="M749 777L638 785Q479 785 434 685V0H97V1082H413L424 943Q509 1102 661 1102Q715 1102 755 1090L749 777Z" />
-<glyph unicode="s" horiz-adv-x="1049" d="M661 304Q661 347 616 373T445 427T237 500T112 611T69 760Q69 909 192 1005T514 1102Q728 1102 858 1005T988 750H650Q650 880 513 880Q460 880 424 851T388 777Q388 732 432 704T572 658T742 615Q986 531 986 314Q986
-166 855 73T514 -20Q375 -20 266 30T96 166T35 347H350Q352 272 400 238T523 203Q592 203 626 231T661 304Z" />
-<glyph unicode="t" horiz-adv-x="703" d="M487 1351V1082H665V848H487V353Q487 292 509 268T596 244Q646 244 680 250V9Q589 -20 490 -20Q316 -20 233 62T150 311V848H12V1082H150V1351H487Z" />
-<glyph unicode="u" horiz-adv-x="1155" d="M739 117Q632 -20 450 -20Q272 -20 181 83T89 381V1082H426V379Q426 240 561 240Q677 240 726 323V1082H1065V0H749L739 117Z" />
-<glyph unicode="v" horiz-adv-x="1058" d="M526 401L697 1082H1052L699 0H355L2 1082H358L526 401Z" />
-<glyph unicode="w" horiz-adv-x="1487" d="M1029 444L1138 1082H1461L1206 0H921L742 642L562 0H277L22 1082H345L452 429L624 1082H859L1029 444Z" />
-<glyph unicode="x" horiz-adv-x="1054" d="M533 784L690 1082H1040L755 555L1054 0H702L532 320L365 0H11L311 555L27 1082H381L533 784Z" />
-<glyph unicode="y" horiz-adv-x="1061" d="M527 472L707 1082H1068L627 -181L608 -227Q514 -437 276 -437Q210 -437 137 -417V-176H181Q252 -176 289 -156T345 -82L372 -10L-4 1082H356L527 472Z" />
-<glyph unicode="z" horiz-adv-x="1054" d="M492 260H985V0H66V188L546 822H87V1082H974V900L492 260Z" />
-<glyph unicode="{" horiz-adv-x="665" d="M562 -360Q202 -259 202 105V303Q202 505 40 505V732Q202 732 202 935V1145Q205 1325 295 1436T562 1597L625 1421Q499 1373 494 1152V935Q494 711 309 619Q494 527 494 302V86Q499 -135 625 -183L562 -360Z" />
-<glyph unicode="|" horiz-adv-x="523" d="M356 -270H172V1456H356V-270Z" />
-<glyph unicode="}" horiz-adv-x="665" d="M41 -183Q167 -135 172 86V303Q172 528 358 619Q172 710 172 935V1152Q167 1373 41 1421L104 1597Q283 1547 373 1434T464 1136V935Q464 732 626 732V505Q464 505 464 304V91Q457 -261 104 -360L41 -183Z" />
-<glyph unicode="~" horiz-adv-x="1295" d="M1197 799Q1197 603 1106 485T863 367Q788 367 728 396T591 500T449 576Q399 576 366 527T332 405L94 409Q94 605 183 720T426 836Q502 836 565 807T702 703T840 628Q891 628 923 677T956 800L1197 799Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="510" />
-<glyph unicode="&#xa1;" horiz-adv-x="615" d="M171 623H444L487 -372H128L171 623ZM497 933Q497 859 444 812T310 764T177 811T123 933T176 1054T310 1102T443 1055T497 933Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1209" d="M598 240Q669 240 708 278T746 386H1062Q1062 230 965 124T710 -11V-245H510V-13Q317 15 208 158T98 534V552Q98 776 207 921T510 1095V1318H710V1093Q875 1064 968 952T1062 668H746Q746 752 705 797T595 842Q464
-842 442 675Q435 622 435 529Q435 366 474 303T598 240Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1229" d="M621 561L626 449Q626 335 567 270H1175V0H106V270H209Q266 285 269 373L270 426L265 561H103V822H257L251 1039Q251 1244 373 1359T705 1475Q929 1475 1054 1360T1180 1048H850Q850 1205 714 1205Q663 1205 632
-1165T601 1039L610 822H917V561H621Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1397" d="M1061 107Q902 -20 700 -20Q497 -20 339 106L210 -26L69 118L204 255Q104 411 104 608Q104 812 213 973L69 1120L210 1264L352 1119Q507 1234 700 1234Q894 1234 1049 1117L1193 1265L1335 1120L1187 969Q1294 810
-1294 608Q1294 415 1196 259L1335 118L1193 -27L1061 107ZM290 608Q290 490 344 390T493 231T700 173Q811 173 906 231T1055 389T1109 608Q1109 727 1055 827T906 985T700 1042Q588 1042 494 985T345 828T290 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1108" d="M554 937L741 1456H1098L792 742H997V552H725V452H997V263H725V0H375V263H72V452H375V552H72V742H316L9 1456H367L554 937Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="524" d="M119 -270V525H411V-270H119ZM411 698H119V1456H411V698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1301" d="M1196 500Q1196 323 1041 232Q1179 129 1179 -61Q1179 -238 1038 -337T648 -437Q380 -437 237 -330T94 -25H432Q432 -100 482 -138T648 -176Q841 -176 841 -62Q841 -4 784 32T547 118T277 222T140 351T94 528Q94
-704 251 798Q110 904 110 1090Q110 1264 255 1370T644 1476Q894 1476 1035 1364T1176 1051H839Q839 1126 788 1171T644 1216Q549 1216 499 1183T449 1092Q449 1026 505 992T707 921T939 846T1081 760T1167 648T1196 500ZM597 652Q535 668 480 688Q431 648 431 568Q431
-500 475 465T690 376L808 342Q864 386 864 462Q864 524 809 563T597 652Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="1013" d="M95 1365Q95 1420 138 1459T246 1498T353 1459T397 1365T354 1271T246 1232T139 1271T95 1365ZM614 1365Q614 1420 657 1459T765 1498T872 1459T916 1365T873 1271T765 1232T658 1271T614 1365Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1608" d="M1116 596Q1116 444 1029 363T781 282T527 388T432 675V788Q432 962 527 1068T781 1175Q944 1175 1030 1093T1117 861H961Q961 957 915 998T781 1040Q689 1040 639 973T587 792V669Q587 552 638 485T781 417Q870
-417 915 457T960 596H1116ZM207 729Q207 564 281 421T493 192T795 105Q959 105 1095 191T1307 420T1382 729T1307 1037T1095 1265T795 1351Q636 1351 500 1269T285 1043T207 729ZM85 729Q85 931 178 1104T437 1376T795 1476T1152 1377T1411 1104T1505 729Q1505
-525 1410 352T1151 79T795 -20Q602 -20 438 80T179 353T85 729Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="904" d="M600 705Q590 732 583 773Q506 691 382 691Q264 691 199 752T133 919Q133 1029 217 1089T474 1150H576V1201Q576 1328 460 1328Q395 1328 359 1303T322 1229L149 1243Q149 1347 236 1411T460 1476Q595 1476 673 1404T751
-1199V883Q751 786 777 705H600ZM425 835Q465 835 507 853T576 897V1033H470Q394 1032 351 1002T308 923Q308 835 425 835Z" />
-<glyph unicode="&#xab;" horiz-adv-x="1054" d="M567 515L799 116H593L321 506V525L593 915H799L567 515ZM724 515L956 116H750L478 506V525L750 915H956L724 515Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1124" d="M960 374H760V634H125V805H960V374Z" />
-<glyph unicode="&#xad;" horiz-adv-x="921" d="M753 497H152V758H753V497Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1608" d="M85 729Q85 931 178 1104T437 1376T795 1476T1152 1377T1411 1104T1505 729Q1505 525 1410 352T1151 79T795 -20Q602 -20 438 80T179 353T85 729ZM207 729Q207 564 281 421T493 192T795 105Q959 105 1095 191T1307
-420T1382 729T1307 1037T1095 1265T795 1351Q636 1351 500 1269T285 1043T207 729ZM651 653V316H500V1166H781Q935 1166 1020 1096T1106 902Q1106 792 999 732Q1057 700 1080 644T1103 506T1106 389T1120 332V316H965Q952 350 952 510Q952 586 919 619T809 653H651ZM651
-787H779Q855 787 905 818T956 903Q956 973 921 1002T792 1033H651V787Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="1065" d="M875 1285H181V1458H875V1285Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="813" d="M125 1195Q125 1312 208 1394T406 1476Q518 1476 599 1394T681 1195Q681 1079 601 999T406 918Q290 918 208 998T125 1195ZM406 1071Q459 1071 493 1107T527 1195T493 1285T406 1323T317 1286T280 1195T317 1107T406 1071Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1102" d="M688 974H1000V703H688V355H394V703H84V974H394V1293H688V974ZM979 1H101V265H979V1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="768" d="M697 667H69V814L355 1067Q405 1111 429 1153T454 1216Q454 1292 369 1292Q326 1292 301 1262T276 1189H51Q51 1307 136 1387T358 1468Q512 1468 595 1403T678 1216Q678 1141 636 1079T448 910L367 842H697V667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="768" d="M277 1141H365Q466 1141 466 1223Q466 1255 441 1273T370 1292Q335 1292 308 1279T281 1241H57Q57 1343 142 1405T363 1468Q517 1468 603 1407T690 1241Q690 1121 552 1072Q706 1031 706 889Q706 785 612 721T363
-656Q218 656 130 725T41 908H268Q268 879 297 856T379 832Q435 832 457 857T480 913Q480 998 371 999H277V1141Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="691" d="M287 1536H643L365 1222H90L287 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1313" d="M470 1082V450Q471 343 506 293T633 243Q761 243 814 334V1082H1151V0H834L829 53Q740 -21 619 -21Q534 -21 470 13V-416H132V1082H470Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="1001" d="M657 0V520H577Q347 520 215 647T82 988Q82 1201 215 1328T578 1456H886V0H657Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="657" d="M324 854Q405 854 457 806T510 685T458 564T324 516Q244 516 191 563T138 685T191 806T324 854Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="569" d="M373 10L363 -51Q513 -79 513 -224Q513 -340 414 -406T139 -472L132 -286Q220 -286 220 -209Q220 -171 189 -156T86 -136L117 10H373Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="768" d="M542 667H319V1200L143 1164V1331L523 1453H542V667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="938" d="M117 1121Q117 1281 212 1378T463 1476T714 1379T810 1116V1044Q810 885 716 788T465 690Q307 690 212 788T117 1049V1121ZM292 1044Q292 946 338 891T465 836Q543 836 588 890T635 1041V1121Q635 1218 589 1273T463
-1328Q385 1328 339 1274T292 1117V1044Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="1054" d="M284 914L556 524V505L284 115H77L309 514L77 914H284ZM697 914L969 524V505L697 115H490L722 514L490 914H697Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1452" d="M512 664H289V1197L113 1161V1328L493 1450H512V664ZM462 117L305 196L1016 1334L1173 1255L462 117ZM1288 335H1367V157H1288V0H1063V157H730L715 302L1063 789H1288V335ZM925 335H1063V526L1047 503L925 335Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1537" d="M422 117L265 196L976 1334L1133 1255L422 117ZM488 672H265V1205L89 1169V1336L469 1458H488V672ZM1470 0H842V147L1128 400Q1178 444 1202 486T1227 549Q1227 625 1142 625Q1099 625 1074 595T1049 522H824Q824
-640 909 720T1131 801Q1285 801 1368 736T1451 549Q1451 474 1409 412T1221 243L1140 175H1470V0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1689" d="M644 117L487 196L1198 1334L1355 1255L644 117ZM1486 335H1565V157H1486V0H1261V157H928L913 302L1261 789H1486V335ZM1123 335H1261V526L1245 503L1123 335ZM321 1141H409Q510 1141 510 1223Q510 1255 485 1273T414
-1292Q379 1292 352 1279T325 1241H101Q101 1343 186 1405T407 1468Q561 1468 647 1407T734 1241Q734 1121 596 1072Q750 1031 750 889Q750 785 656 721T407 656Q262 656 174 725T85 908H312Q312 879 341 856T423 832Q479 832 501 857T524 913Q524 998 415 999H321V1141Z"
-/>
-<glyph unicode="&#xbf;" horiz-adv-x="1043" d="M703 630Q703 480 673 400T570 258L504 197Q411 107 411 11Q411 -60 444 -92T531 -125Q598 -125 635 -83T675 38H1014Q1010 -163 887 -274T539 -385Q316 -385 195 -282T73 11Q73 94 111 167T241 327L326 405Q403
-471 412 558L417 630H703ZM569 765Q489 765 436 812T382 934T435 1055T569 1103Q651 1103 703 1055T756 934T704 814T569 765Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543ZM860 1532H586L304 1846H660L860 1532Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543ZM742 1846H1098L820 1532H545L742 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543ZM1124 1565V1552H858L699 1688L540 1552H280V1569L603 1846H796L1124 1565Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543ZM1085 1837Q1085 1723 1019 1644T854 1564Q788 1564 707 1606T576 1648Q544 1648 522 1626T499 1558L312 1568Q312 1679
-378 1760T542 1841Q592 1841 673 1805T775 1763T821 1758Q853 1758 876 1780T899 1848L1085 1837Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543ZM287 1675Q287 1730 330 1769T438 1808T545 1769T589 1675T546 1581T438 1542T331 1581T287 1675ZM806 1675Q806 1730
-849 1769T957 1808T1064 1769T1108 1675T1065 1581T957 1542T850 1581T806 1675Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1395" d="M937 272H456L372 0H-3L531 1456H861L1399 0H1022L937 272ZM540 543H853L696 1048L540 543ZM477 1729Q477 1815 542 1873T702 1932Q795 1932 860 1874T926 1729Q926 1644 862 1587T702 1530Q606 1530 542 1587T477
-1729ZM702 1625Q750 1625 777 1655T805 1729T778 1804T702 1835Q653 1835 626 1804T598 1729T625 1655T702 1625Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1926" d="M1851 0H954L940 329H558L406 0H16L751 1456H1790V1192H1241L1254 876H1709V612H1265L1280 264H1851V0ZM683 599H929L908 1085L683 599Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1344" d="M1288 493Q1281 341 1206 225T996 44T686 -20Q399 -20 234 167T69 695V767Q69 981 143 1141T358 1389T682 1477Q947 1477 1108 1338T1291 953H941Q937 1086 874 1144T682 1202Q551 1202 490 1104T426 791V688Q426
-455 484 355T686 255Q807 255 871 312T939 493H1288ZM818 10L808 -51Q958 -79 958 -224Q958 -340 859 -406T584 -472L577 -286Q665 -286 665 -209Q665 -171 634 -156T531 -136L562 10H818Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1146" d="M1013 617H461V270H1113V0H110V1456H1115V1185H461V878H1013V617ZM804 1532H530L248 1846H604L804 1532Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1146" d="M1013 617H461V270H1113V0H110V1456H1115V1185H461V878H1013V617ZM686 1846H1042L764 1532H489L686 1846Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1146" d="M1013 617H461V270H1113V0H110V1456H1115V1185H461V878H1013V617ZM1068 1565V1552H802L643 1688L484 1552H224V1569L547 1846H740L1068 1565Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1146" d="M1013 617H461V270H1113V0H110V1456H1115V1185H461V878H1013V617ZM231 1675Q231 1730 274 1769T382 1808T489 1769T533 1675T490 1581T382 1542T275 1581T231 1675ZM750 1675Q750 1730 793 1769T901 1808T1008 1769T1052
-1675T1009 1581T901 1542T794 1581T750 1675Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="618" d="M484 0H134V1456H484V0ZM470 1532H196L-86 1846H270L470 1532Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="618" d="M484 0H134V1456H484V0ZM351 1846H707L429 1532H154L351 1846Z" />
-<glyph unicode="&#xce;" horiz-adv-x="618" d="M484 0H134V1456H484V0ZM734 1565V1552H468L309 1688L150 1552H-110V1569L213 1846H406L734 1565Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="618" d="M484 0H134V1456H484V0ZM-103 1675Q-103 1730 -60 1769T48 1808T155 1769T199 1675T156 1581T48 1542T-59 1581T-103 1675ZM416 1675Q416 1730 459 1769T567 1808T674 1769T718 1675T675 1581T567 1542T460 1581T416 1675Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1354" d="M140 0V635H-30V826H140V1456H609Q802 1456 956 1369T1196 1122T1284 764V697Q1284 497 1200 339T962 91T619 0H140ZM700 635H491V270H613Q764 270 845 377T926 697V760Q926 971 845 1078T609 1185H491V826H700V635Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1438" d="M1326 0H977L461 906V0H110V1456H461L976 550V1456H1326V0ZM1112 1837Q1112 1723 1046 1644T881 1564Q815 1564 734 1606T603 1648Q571 1648 549 1626T526 1558L339 1568Q339 1679 405 1760T569 1841Q619 1841 700
-1805T802 1763T848 1758Q880 1758 903 1780T926 1848L1112 1837Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1414" d="M1343 698Q1343 485 1264 321T1040 69T708 -20T378 65T154 310T69 675V757Q69 971 147 1134T372 1387T706 1476Q891 1476 1036 1388T1261 1138T1343 765V698ZM986 759Q986 976 914 1088T706 1201Q442 1201 427 805L426
-698Q426 484 497 369T708 254Q841 254 913 367T986 692V759ZM865 1532H591L309 1846H665L865 1532Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1414" d="M1343 698Q1343 485 1264 321T1040 69T708 -20T378 65T154 310T69 675V757Q69 971 147 1134T372 1387T706 1476Q891 1476 1036 1388T1261 1138T1343 765V698ZM986 759Q986 976 914 1088T706 1201Q442 1201 427 805L426
-698Q426 484 497 369T708 254Q841 254 913 367T986 692V759ZM747 1846H1103L825 1532H550L747 1846Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1414" d="M1343 698Q1343 485 1264 321T1040 69T708 -20T378 65T154 310T69 675V757Q69 971 147 1134T372 1387T706 1476Q891 1476 1036 1388T1261 1138T1343 765V698ZM986 759Q986 976 914 1088T706 1201Q442 1201 427 805L426
-698Q426 484 497 369T708 254Q841 254 913 367T986 692V759ZM1129 1565V1552H863L704 1688L545 1552H285V1569L608 1846H801L1129 1565Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1414" d="M1343 698Q1343 485 1264 321T1040 69T708 -20T378 65T154 310T69 675V757Q69 971 147 1134T372 1387T706 1476Q891 1476 1036 1388T1261 1138T1343 765V698ZM986 759Q986 976 914 1088T706 1201Q442 1201 427 805L426
-698Q426 484 497 369T708 254Q841 254 913 367T986 692V759ZM1090 1837Q1090 1723 1024 1644T859 1564Q793 1564 712 1606T581 1648Q549 1648 527 1626T504 1558L317 1568Q317 1679 383 1760T547 1841Q597 1841 678 1805T780 1763T826 1758Q858 1758 881 1780T904
-1848L1090 1837Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1414" d="M1343 698Q1343 485 1264 321T1040 69T708 -20T378 65T154 310T69 675V757Q69 971 147 1134T372 1387T706 1476Q891 1476 1036 1388T1261 1138T1343 765V698ZM986 759Q986 976 914 1088T706 1201Q442 1201 427 805L426
-698Q426 484 497 369T708 254Q841 254 913 367T986 692V759ZM292 1675Q292 1730 335 1769T443 1808T550 1769T594 1675T551 1581T443 1542T336 1581T292 1675ZM811 1675Q811 1730 854 1769T962 1808T1069 1769T1113 1675T1070 1581T962 1542T855 1581T811 1675Z"
-/>
-<glyph unicode="&#xd7;" horiz-adv-x="1083" d="M53 381L352 686L53 992L246 1175L539 876L832 1175L1025 992L725 686L1025 381L832 198L539 496L246 198L53 381Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1409" d="M1354 698Q1354 485 1275 321T1051 69T719 -20Q557 -20 427 45L346 -95H139L280 150Q81 349 81 706V757Q81 972 159 1135T383 1387T717 1476Q874 1476 1004 1412L1065 1518H1273L1152 1307Q1354 1107 1354 749V698ZM997
-759Q997 892 968 988L572 299Q632 254 719 254Q853 254 924 367T997 692V759ZM437 698Q437 565 464 471L858 1158Q798 1201 717 1201Q578 1201 508 1090T437 765V698Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1361" d="M1252 1456V503Q1252 341 1183 223T985 42T680 -20Q414 -20 261 118T105 496V1456H458V489Q464 250 680 250Q789 250 845 310T901 505V1456H1252ZM835 1532H561L279 1846H635L835 1532Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1361" d="M1252 1456V503Q1252 341 1183 223T985 42T680 -20Q414 -20 261 118T105 496V1456H458V489Q464 250 680 250Q789 250 845 310T901 505V1456H1252ZM717 1846H1073L795 1532H520L717 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1361" d="M1252 1456V503Q1252 341 1183 223T985 42T680 -20Q414 -20 261 118T105 496V1456H458V489Q464 250 680 250Q789 250 845 310T901 505V1456H1252ZM1099 1565V1552H833L674 1688L515 1552H255V1569L578 1846H771L1099 1565Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1361" d="M1252 1456V503Q1252 341 1183 223T985 42T680 -20Q414 -20 261 118T105 496V1456H458V489Q464 250 680 250Q789 250 845 310T901 505V1456H1252ZM262 1675Q262 1730 305 1769T413 1808T520 1769T564 1675T521 1581T413
-1542T306 1581T262 1675ZM781 1675Q781 1730 824 1769T932 1808T1039 1769T1083 1675T1040 1581T932 1542T825 1581T781 1675Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1286" d="M643 824L911 1456H1290L821 523V0H465V523L-3 1456H374L643 824ZM686 1846H1042L764 1532H489L686 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1266" d="M455 1456V1198H660Q831 1197 956 1140T1148 979T1214 738Q1214 529 1066 405T660 278H455V0H116V1456H455ZM455 938V538H653Q756 538 815 590T875 736Q875 831 816 884T655 938H455Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1330" d="M472 0H134V1099Q134 1320 267 1440T648 1561Q844 1561 967 1457T1090 1181Q1090 1074 1043 998T995 835Q995 804 1019 771T1128 656Q1271 517 1271 368Q1271 181 1147 81T794 -20Q719 -20 644 -7T526 31L585 284Q670
-240 796 240Q856 240 895 272T935 365Q935 406 910 442T805 547T692 679T658 817Q658 920 705 1004T752 1167Q752 1226 712 1264T611 1302Q537 1302 505 1250T472 1094V0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493
-220Q556 220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220ZM695 1222H421L139 1536H495L695 1222Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493
-220Q556 220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220ZM577 1536H933L655 1222H380L577 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493
-220Q556 220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220ZM959 1255V1242H693L534 1378L375 1242H115V1259L438 1536H631L959 1255Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493
-220Q556 220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220ZM920 1784Q920 1670 854 1591T689 1511Q623 1511 542 1553T411 1595Q379 1595 357 1573T334 1505L147 1515Q147 1626 213 1707T377 1788Q427 1788 508 1752T610 1710T656 1705Q688
-1705 711 1727T734 1795L920 1784Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493
-220Q556 220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220ZM122 1365Q122 1420 165 1459T273 1498T380 1459T424 1365T381 1271T273 1232T166 1271T122 1365ZM641 1365Q641 1420 684 1459T792 1498T899 1459T943 1365T900 1271T792 1232T685
-1271T641 1365Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1087" d="M704 0Q686 33 672 97Q579 -20 412 -20Q259 -20 152 72T45 305Q45 481 175 571T553 661H657V718Q657 867 528 867Q408 867 408 749H71Q71 906 204 1004T545 1102T872 1001T995 724V245Q997 96 1041 17V0H704ZM493
-220Q556 220 597 247T657 308V481H559Q383 481 383 323Q383 277 414 249T493 220ZM312 1419Q312 1505 377 1563T537 1622Q630 1622 695 1564T761 1419Q761 1334 697 1277T537 1220Q441 1220 377 1277T312 1419ZM537 1315Q585 1315 612 1345T640 1419T613 1494T537
-1525Q488 1525 461 1494T433 1419T460 1345T537 1315Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1730" d="M1238 -20Q998 -20 858 114Q792 48 694 14T484 -20Q285 -20 173 71T61 324Q61 482 190 568T575 655H717V701Q717 767 683 804T584 842Q512 842 474 813T436 740L99 759Q99 910 233 1006T588 1102Q790 1102 907 1011Q1033
-1104 1227 1102Q1439 1102 1562 969T1685 609V435H1046Q1060 337 1121 289T1284 240Q1410 240 1507 280L1569 307L1650 101Q1583 49 1469 15T1238 -20ZM548 212Q637 212 717 275V451H578Q500 450 449 414T398 320Q398 212 548 212ZM1227 842Q1145 842 1102 794T1047
-646H1356V672Q1356 753 1323 797T1227 842Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1064" d="M552 240Q623 240 662 278T700 386H1016Q1016 208 889 94T560 -20Q324 -20 188 128T52 538V552Q52 716 112 841T287 1034T557 1102Q768 1102 892 985T1016 668H700Q700 752 659 797T549 842Q418 842 396 675Q389
-622 389 529Q389 366 428 303T552 240ZM698 10L688 -51Q838 -79 838 -224Q838 -340 739 -406T464 -472L457 -286Q545 -286 545 -209Q545 -171 514 -156T411 -136L442 10H698Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1115" d="M618 -20Q369 -20 215 128T61 515V543Q61 709 122 836T302 1032T582 1102Q810 1102 942 961T1074 566V435H404Q422 344 483 292T641 240Q801 240 891 352L1045 170Q982 83 867 32T618 -20ZM580 842Q432 842 404
-646H744V672Q746 753 703 797T580 842ZM694 1223H420L138 1537H494L694 1223Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1115" d="M618 -20Q369 -20 215 128T61 515V543Q61 709 122 836T302 1032T582 1102Q810 1102 942 961T1074 566V435H404Q422 344 483 292T641 240Q801 240 891 352L1045 170Q982 83 867 32T618 -20ZM580 842Q432 842 404
-646H744V672Q746 753 703 797T580 842ZM576 1537H932L654 1223H379L576 1537Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1115" d="M618 -20Q369 -20 215 128T61 515V543Q61 709 122 836T302 1032T582 1102Q810 1102 942 961T1074 566V435H404Q422 344 483 292T641 240Q801 240 891 352L1045 170Q982 83 867 32T618 -20ZM580 842Q432 842 404
-646H744V672Q746 753 703 797T580 842ZM958 1256V1243H692L533 1379L374 1243H114V1260L437 1537H630L958 1256Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1115" d="M618 -20Q369 -20 215 128T61 515V543Q61 709 122 836T302 1032T582 1102Q810 1102 942 961T1074 566V435H404Q422 344 483 292T641 240Q801 240 891 352L1045 170Q982 83 867 32T618 -20ZM580 842Q432 842 404
-646H744V672Q746 753 703 797T580 842ZM121 1366Q121 1421 164 1460T272 1499T379 1460T423 1366T380 1272T272 1233T165 1272T121 1366ZM640 1366Q640 1421 683 1460T791 1499T898 1460T942 1366T899 1272T791 1233T684 1272T640 1366Z" />
-<glyph unicode="&#xec;" horiz-adv-x="584" d="M462 0H123V1082H462V0ZM455 1202H181L-101 1516H255L455 1202Z" />
-<glyph unicode="&#xed;" horiz-adv-x="584" d="M462 0H123V1082H462V0ZM336 1772H692L414 1458H139L336 1772Z" />
-<glyph unicode="&#xee;" horiz-adv-x="584" d="M462 0H123V1082H462V0ZM719 1235V1222H453L294 1358L135 1222H-125V1239L198 1516H391L719 1235Z" />
-<glyph unicode="&#xef;" horiz-adv-x="584" d="M462 0H123V1082H462V0ZM-118 1345Q-118 1400 -75 1439T33 1478T140 1439T184 1345T141 1251T33 1212T-74 1251T-118 1345ZM401 1345Q401 1400 444 1439T552 1478T659 1439T703 1345T660 1251T552 1212T445 1251T401 1345Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1165" d="M862 1308Q1123 1049 1123 650V593Q1123 416 1053 275T858 57T581 -20Q433 -20 314 43T130 219T64 468Q64 701 184 831T518 961Q645 961 746 899Q697 1038 590 1140L412 1030L334 1148L470 1232Q362 1298 226 1335L334
-1579Q570 1531 749 1403L912 1504L989 1386L862 1308ZM585 240Q679 240 732 322T785 557V654Q719 720 591 720Q493 720 448 653T402 468Q402 366 452 303T585 240Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1155" d="M404 1082L415 955Q527 1102 724 1102Q893 1102 976 1001T1063 697V0H725V683Q725 765 692 803T572 842Q473 842 425 764V0H88V1082H404ZM963 1784Q963 1670 897 1591T732 1511Q666 1511 585 1553T454 1595Q422
-1595 400 1573T377 1505L190 1515Q190 1626 256 1707T420 1788Q470 1788 551 1752T653 1710T699 1705Q731 1705 754 1727T777 1795L963 1784Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1150" d="M52 551Q52 713 115 839T296 1034T573 1102Q816 1102 956 952T1096 542V530Q1096 277 956 129T575 -20Q344 -20 204 118T53 494L52 551ZM389 530Q389 380 436 310T575 240Q755 240 759 517V551Q759 842 573 842Q404
-842 390 591L389 530ZM737 1222H463L181 1536H537L737 1222Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1150" d="M52 551Q52 713 115 839T296 1034T573 1102Q816 1102 956 952T1096 542V530Q1096 277 956 129T575 -20Q344 -20 204 118T53 494L52 551ZM389 530Q389 380 436 310T575 240Q755 240 759 517V551Q759 842 573 842Q404
-842 390 591L389 530ZM619 1536H975L697 1222H422L619 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1150" d="M52 551Q52 713 115 839T296 1034T573 1102Q816 1102 956 952T1096 542V530Q1096 277 956 129T575 -20Q344 -20 204 118T53 494L52 551ZM389 530Q389 380 436 310T575 240Q755 240 759 517V551Q759 842 573 842Q404
-842 390 591L389 530ZM1001 1255V1242H735L576 1378L417 1242H157V1259L480 1536H673L1001 1255Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1150" d="M52 551Q52 713 115 839T296 1034T573 1102Q816 1102 956 952T1096 542V530Q1096 277 956 129T575 -20Q344 -20 204 118T53 494L52 551ZM389 530Q389 380 436 310T575 240Q755 240 759 517V551Q759 842 573 842Q404
-842 390 591L389 530ZM962 1784Q962 1670 896 1591T731 1511Q665 1511 584 1553T453 1595Q421 1595 399 1573T376 1505L189 1515Q189 1626 255 1707T419 1788Q469 1788 550 1752T652 1710T698 1705Q730 1705 753 1727T776 1795L962 1784Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1150" d="M52 551Q52 713 115 839T296 1034T573 1102Q816 1102 956 952T1096 542V530Q1096 277 956 129T575 -20Q344 -20 204 118T53 494L52 551ZM389 530Q389 380 436 310T575 240Q755 240 759 517V551Q759 842 573 842Q404
-842 390 591L389 530ZM164 1365Q164 1420 207 1459T315 1498T422 1459T466 1365T423 1271T315 1232T208 1271T164 1365ZM683 1365Q683 1420 726 1459T834 1498T941 1459T985 1365T942 1271T834 1232T727 1271T683 1365Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1166" d="M1103 563H59V807H1103V563ZM394 1086Q394 1157 445 1203T580 1250T715 1204T766 1086T715 969T580 922T445 968T394 1086ZM394 277Q394 348 445 394T580 441T715 395T766 277T715 160T580 113T445 159T394 277Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1151" d="M52 551Q52 713 115 839T296 1034T573 1102Q667 1102 750 1077L819 1219H996L893 1007Q1096 859 1096 530Q1096 277 956 129T575 -20Q482 -20 404 2L333 -145H156L260 70Q52 217 52 551ZM389 530Q389 434 407 373L631
-833Q605 842 573 842Q404 842 390 591L389 530ZM759 551Q759 636 742 698L523 246Q545 240 575 240Q755 240 759 517V551Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1155" d="M739 117Q632 -20 450 -20Q272 -20 181 83T89 381V1082H426V379Q426 240 561 240Q677 240 726 323V1082H1065V0H749L739 117ZM737 1222H463L181 1536H537L737 1222Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1155" d="M739 117Q632 -20 450 -20Q272 -20 181 83T89 381V1082H426V379Q426 240 561 240Q677 240 726 323V1082H1065V0H749L739 117ZM619 1536H975L697 1222H422L619 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1155" d="M739 117Q632 -20 450 -20Q272 -20 181 83T89 381V1082H426V379Q426 240 561 240Q677 240 726 323V1082H1065V0H749L739 117ZM1001 1255V1242H735L576 1378L417 1242H157V1259L480 1536H673L1001 1255Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1155" d="M739 117Q632 -20 450 -20Q272 -20 181 83T89 381V1082H426V379Q426 240 561 240Q677 240 726 323V1082H1065V0H749L739 117ZM164 1365Q164 1420 207 1459T315 1498T422 1459T466 1365T423 1271T315 1232T208 1271T164
-1365ZM683 1365Q683 1420 726 1459T834 1498T941 1459T985 1365T942 1271T834 1232T727 1271T683 1365Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="1061" d="M527 472L707 1082H1068L627 -181L608 -227Q514 -437 276 -437Q210 -437 137 -417V-176H181Q252 -176 289 -156T345 -82L372 -10L-4 1082H356L527 472ZM571 1536H927L649 1222H374L571 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1148" d="M1096 533Q1096 282 984 131T677 -20Q527 -20 433 87V-416H95V1536H433V997Q527 1102 675 1102Q872 1102 984 957T1096 550V533ZM759 554Q759 842 591 842Q475 842 433 758V327Q476 240 593 240Q754 240 759 516V554Z" />
-<glyph unicode="&#xff;" horiz-adv-x="1061" d="M527 472L707 1082H1068L627 -181L608 -227Q514 -437 276 -437Q210 -437 137 -417V-176H181Q252 -176 289 -156T345 -82L372 -10L-4 1082H356L527 472ZM116 1365Q116 1420 159 1459T267 1498T374 1459T418 1365T375
-1271T267 1232T160 1271T116 1365ZM635 1365Q635 1420 678 1459T786 1498T893 1459T937 1365T894 1271T786 1232T679 1271T635 1365Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1266" d="M1458 578H403V842H1458V578Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1541" d="M1493 578H87V842H1493V578Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="511" d="M291 1576L439 1496Q357 1348 354 1219V1042H108V1207Q109 1298 162 1402T291 1576Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="497" d="M214 1000L66 1080Q149 1224 151 1362V1536H397V1373Q397 1280 344 1175T214 1000Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="556" d="M231 -310L83 -230Q155 -105 157 50V249H415L414 59Q413 -32 360 -136T231 -310Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="875" d="M298 1576L446 1496Q364 1348 361 1219V1042H115V1207Q116 1298 169 1402T298 1576ZM649 1576L797 1496Q715 1348 712 1219V1042H466V1207Q467 1298 520 1402T649 1576Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="881" d="M228 1000L80 1080Q163 1224 165 1362V1536H411V1373Q411 1280 358 1175T228 1000ZM590 1000L442 1080Q525 1224 527 1362V1536H773V1373Q773 1280 720 1175T590 1000Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="876" d="M242 -330L83 -250Q155 -116 157 49V269H415L414 62Q414 -35 366 -145T242 -330ZM593 -330L433 -250Q515 -97 518 47V269H777L776 56Q774 -40 722 -148T593 -330Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="757" d="M134 763Q134 870 204 937T386 1004Q501 1004 570 939T641 768V726Q641 619 572 554T388 488Q275 488 206 552T134 721V763Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="650" d="M354 515L586 116H380L108 506V525L380 915H586L354 515Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="620" d="M283 914L555 524V505L283 115H76L308 514L76 914H283Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-900.ttf b/static/fonts/roboto-v18-latin-900.ttf
deleted file mode 100644
index 168ba8a4ccc32c936225d36348f5d5c22d2e1f5b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 35208
zcmbrn2YeL8`#(N2yL*?OOD6=9OHW8hFAzF}-U6YQ(0i`}Dn+U^K|n#IN>Q4Z6=@<(
zMC2n73n++)6h*~?1r?IL|9fU{uOOe#_xF1J?=ri$yR$RTJoC&mPn!v$gpgnyWMXYu
z+`NS{N3jtyqYv&5ZduZ?^mODmpX2%jA$|{AmUeAgIMDJoAq$TZLeF(9&CHoPB>pEt
z#^X8ZKWNN=@u$LfTq9&+HA19zgQiZln*1{w5HhU?p7$C$e%P3~kK%U|GG#E{KRRr{
zr18XygrNKqJog(mdiv0SKj;cPODAN+%;AH_OpB=*=10f`E1v&7e8_;oRsNrJCS>#;
zTo(+-4d1?|3#k89Tqg`4GkMzQx9hLP^V_KZ!02&<2DFXLtRQ6MM=109m;uwqOVJF^
zM)LQqV+V{G5+&C~d#3Hj^Jm77n>5)zh5)u1S^W9<i9^P(J004Lkf*G8UWX|BnUn$y
zNyJ3Fi603hCB#OW_pq_dsB#w5u&1~nxFCTId#W-cLBVxZML(JKlb1Nze6Fc}`VD{m
z2D8`#u4QG%#s<YoL6injDVFBbSSh8dK095Y{j43Kez%#VX_Qq}DYl2(6m!+H?5RgV
zY+6+rD_g|M2w`NH{b%}>fY6WBS55u_0KjIl*l5KQ0QCi+z5uk`WU~3B^@#l<>W`kt
zX``80*{C^|<`v|GhnnJ&=w9uYG&)RsVbtbP_@n2gTMxf$)34v^e*I8qr1T*xGf~ix
zH%U@uA75UlY_WNvPAOAmJ`%sdGHvDxo5XKtWrs-dLAeS)*wfzmmi9|Kd|R2Sm9jcZ
z_yJ``gCu959Z@8PysE}nV|fuVK#`*zegNIiK)3}L7UM#61sWx~qB@>b=Uq|LkMR;}
zW|kAPtF3Z{t)|6h5=Y+(n{Q^hm)lccUY!lc;0l|U#TF{Eg;&^!#a2z+iAGCkyc8c2
zpPwsIu9O>s6c#H|Jg(x|;4RHQXm-6a{i{dK&lGQI{z3Eav`6W8w5nzwG~SZFg}$N<
zrLP>MUI*!Btv^o(wZ9K)Ls=*41)?LR_9VHJX$`4OCaP%}nP`LFk3MLakJ02<T*UHL
zvREJ9N*{~Ozd{Z25lHi~l!sDRlbNNwy4z)}#g<T^rs(g*TFTR0&(OBK3^_lqpfEo-
zEId3cHZLhY&J-3JEr*4g%wh5QNlE#!q2akX1?=w*r*}+ieEZm@gCA@AO4>AS-Q~#k
zX~kFG*>v@L+G$AN;tuq=j=f4ck6u3HjW2^g{XFWgW5dUnwr<nCW7p9uhV1?#_``D%
zRTn2d)rnw?^|IenURK^G{-iodA^D^(8B1&hnYKEaqDLjPRWcf$h>Jwt*B~pO3Y$-6
zd5~NGNtW^mx64F}ExN)MooP$7l&8DhkG7QOxGq7Pc?G#S;bCZGd|Xm~1aDz}zTS2W
zh{qol7K%q^C7DL_vaNn;-@etW-nvqhJEBf*b`kxueAOD;zBQ}f`l4~h054jUlU2m3
z9&TVCY>?M3+_8OGtA*QMTW-p0vY>umvnF*aFD}})b!Cf1xTj>c>@zICNrSwqj`GBg
zU^}Fa{YRw<@DfduNiH~%z=jD3Fd5jWhKp(j<%i-Tl+#3@sTycP4XbA2q*2XM9^>j_
zHBQ`BYl%GI6Xn^ihv<Lwu-@WOvpJ+7Kh|Q7h)p&DFA1D1LUIbJ83Yk7g+>$>6zDjj
zh4q@<KD7Od^X+aF(x^q(wME5U-W>adRyl0VgB~T?L+`qMeA+e3sMR>LPGe^8vbK}$
z%7<%?tjO2wW9MpDRD1iJtXqeNY#UScTPm$(YSE+hP^nXk!L_0rXJ-_*<Rc<YI!U8U
ze8vh<slpq@xr~iffWrV}&QoYq?8RS|GHnoR#NU{vHDtR@El3ctsOI1h@rHk<O-A;R
zyx`!%2osaSEWr`xB*v1bJ$Gkm<E889x@C<Qe?OD4l0WD+nozW3nATRiny!7SwHUUe
z4o#)6-bKkND0!lzWG~N>X((gn<bvRkd<#o13=a;DU=tVrzO3<*wGxV6dVdLHc|U5s
zw2upR45v04*?`ujM~3Yv)IQhx-QiGIXW7zzaKHd!)%#jTkIJI2D<W+qvzpBtXYb5v
zXmnzsBIQbn5lV<zl9FkE?MM^aDDrZ3TF^v0@a5ivhxSTGd%Zgs57x~--b?#yDoxUE
zPvEuGCNIh%@&V!tPK&~9q{8NHDL1*Oz$S4fhe^r!vSYNXwp)8&+eN$4dQy@0wKknD
zq_OlF(L35Sx{YX<31U=lF%u9zEETs222~J_`s6}zmRPgNbZJ*y3yB6$I$4`mQvBT1
zhgT;3%*$F!@3Z^t0cby%pmWQq3o0EXcE4&T>q+lZ1-Yl#|D@m3mZ-UgjxPoHQZNF_
ziK}wF$7eJQ?7RY+Su%2DNv9DbXiH3F{a@^lI_<aYbJ=Mze}<qGo#hyldscQtJk9;&
z7kdBKXHB*FY}?g-Pj082h9pp(v{I$08hnU>7g-#$ls7=|HioC*Tzq%}!4_9jkiR^_
zbqNS9BtDJ=1zFJXL5Vtd2@-s^P;RIFb^mwm0rjT0sgL$%=bqg=N}YRl>r7dxc11fu
zo6<z;Lz8J^?HH(a!}=93YD-^xdDRBsX9t)_F<NFKMQ->pfOE+#MB$B)Gs`6xP%4x7
zT_K$)L5aCiv9?d!&t}EQc>^f<3Z>V>fb0bB6iIrkmg-SrjB&xpV`?@kDX->UG!gts
zvT#|+X0eoexjpnH7Ti_C#6w<vK6UUJOh*NR8HbuoW^=6EsnUynwzqSK_WiYe3w~a8
z&)#_9OGjCQYxLgxlgkFq9k}4u?5iJjd+n{4t^nFh^c#mZ6|<_TR+<yq0Q6UYffA?e
zKm)2H$1@O%s@VcO28ZfR1y`k(@)S3yLsKYkOLa?moZH=)lsMc)|6)GTrxU#iVmihA
z8Y+V<jVYDqh^Naoz1ypEvq9RMvu`c>orX^uJ9(b=*&i?bIg^%-?$~qW*a6$5A%|P_
z?oc#o|B&ma%68_}+CB5VAI6+~y4k=%?Z@^3h4OwGhF<rDtlC`-v;=X$0xdShL7^UU
zgy1lI&Y(Ur&qp)MnX3U@PNEi@Uxn%=gef&Z<l+qqis#%RndZlWQ<$YsSFhIItU4dc
zTGCEcZ%|VhtE*LN|DpL8q+L?w^Yla<`k(}T&<2pzBxBUT=or+elO;tTP@@k5aS_PJ
z3^43Yk6tv81L&1m9_8(nZB)gJ6CRr9KA_al2!2<s85MyO_)Z9yusQ7nV~XdjAgM4m
zJe+q*e4KeqPpP!(cx=LyI#<4b_U0?k|GJ3M&Pt!QyDFv@v9s*1_E7se%&OV%F1<Bl
z!u!vZlvRG;j&p)iv}Ob-DuTq5A!@aRL=H$bm%J)S-)NN}Gu|p<ac63(nFw*+oT(~i
z{>y!waLS8zbq25=1Zm9d)(n=MpBJ2vE8%XK1yUJENLm>9?(a1w?tAyf+#g?9|HmSB
zk`BFE)vQ<e@%F<2t@hX3TgGemZY;SwcNsP9Uib|i_EA+}!`ef%dy9vUTF7~D9_XjN
z;2OD4;2NT@ctaG=?ja6#K`|`=+j9G=8``TZwyKRBDOWy{<vmmeSMMUYC&yVF=Ap@I
zn2>L6VHTUUf*<1@G#UmX2s3aeSSqK{)G%+L=owpTX0`Gt7h+T?Rdjb?R4VTR@LH?u
zAxbTecU=OBkYpW0Plz;J;7Q2Mk!fBM7j;1u1;D5NBQHtL9MNa^4DI)OKWRTt8{2mz
zWnX?pnf9N)Ys>nzZ`)^Aam!XMnm2DLr;Xg2om)Qry_>gAP1&E9y>;ZVYu75@>os6N
zukJ$zOJjO=?9jjetGz%q9f5(Cpqg-Cptp`+k0~PrEf3+1Wg)z=m;_bA#IKNlN%d}X
z2yb;wk7k0*8ALWvOL%ZZSSXX@<AVwlq?|$rCkhQ`_s1+ebN9I)m#_H#Irgr$_4}~K
zw9mw`S!E?H`wwKf1F7GQrN1s+sr|Kg&V6m;F-+G%^iaR0OBbviJ#iti+sRbSzdy)B
zND{XvP&4LiDn(;9=Cf!Z6kDFB7}CKF<VhyM_P_AdL@be<$}-4QX{%g<>u@(JivnR8
zVx1C%`hw^z7GJqkn#=|q($3T2nCgaW7l6mvG)j(^E`z4bDBEVvv`J7kq3gMjU^83F
zW!ELT-XYP*(Uk+GjXbeWs9e<?qzQ<|ktx!3xuXjrAp~%UlnR@|1<gbO5qqKPhBU5n
zB^!L0=4flR2ijVi1Bhbme@N#c8B`;&q`zv8i|5^Ew%BSoXxd|@v7(!;=;rb$m!!fa
zF_NiDI!nOdH@kpWeFB7GAxu03EO`ylyPO@w8grr<a+TSozxQamy8UzY+c0e(`}@Y%
ze>QDBDLaX2hYfZ9#W$WA*6`&XZO?vv;aKUSmZLHUwbLq``h7jEp6NT~IcOb?$OvM~
z%EXux+J_h5_Ts}|s!#*HvUn2%GgXt9&YLaeg?>)nYzwQfWm(Fj-0q}edUU%4*KXjt
zM57o3Z%)=3bOFiDiHML)7>|X)BsNZFu%^V~A_5%Tn!rMWgA=TBFg5WJTNsiAT$rx;
z{Cc+Y%=m%Z`>$x`A5BfiR*h_w8#JNoBvX*~q4wEv?eo397Fvha>2kDQVuOprwO_P_
zhkX3Lqbup(bnKx@f8RzeGCNjJiMEcP&XTl8+PRiZ=1r)W_mE~4*Q$DZ$(1)~2Riya
zZT)R+tF|n;`i_+BkLfEkfriqzfB9IOrY(7HewPmPtk;`_*{h)1J_SB%CO)K{PU9|l
z-Y_6>RC1w7Xmxzpd&|OV;hm{=^rn5?$yxOgk2o2_P9wgO^oADGMSGrw(>AQSwor?v
zbvICp_A87<B`k*i!?nn<;OCbCM*v1z3|XmG(=98QsW8%T406z?$1H5fZE6G&f=xu`
z{&5krB3R%39V7ZhunGHTMZCaIUq}3co9YV@bfS7R0ssfPP0n6{eE#KAp2gQi7MRzg
zU6)zexk0g3mq4UQL1H3HPR`Z!%lNU(mqyaW;X@|Q(C%vwe*L!J(6=8PoHTIc)IEyr
z!s!W{lcKjxz5F?2qqNt$cRWD9rJYOqz^*_^bJ!Jp!E0-h64lR5-te#_IVB*ApOAq3
zEaf3C@N6=SC$3AirtF6%p$|+ZIUd5gn18J#A~uN=pjn?b3KcK&OWOT?+Be#PHMH6x
z$nH(UwXO2ZIdf-7Q(l-pTc$s){eCu`O1rkYOq;x^egEhD$)`Ub_Wjw3(5RT`v2W31
zz9bCNoS=^<b`BSj{9HVOBii3}DKMKO>&)M*qm}divGmeOnzxs}p`Cws_KcUeZe6d~
z-qcQ>X?9k7?=32CsT}k9XN^9+4E%A*=`G-J%v2t>2PfiuWg!v!f@FO`2FHCp>6W9=
zL#FhQ_c=KmdM1RlKdZiAODn^qpQ<LZ6gEQJuKlLi(Cz1We{y*010HYE^nZ*e)tiZq
z^!A(#0EL^5>t3xaRh`qeNEfPBvI16IbyQS{kw-d%e!@XNF=VjnD@Ki8tuUe*(utwt
zse!)2=;>=I4|Wj@SM?%Ymuj@0DLPX<9t||rbd8p*>_kCQQZg6mtg;7573Rn1$135S
zw6jOFo7yfvx|T*Ap%z*@Qrj0iZS1@ibj{}HoBhE`_xBo0%V?dMpVKCL|M_di@Ea99
zu726z=6xM|N~Y+|&U!OEdecKIFh;*1J!e0A`v`pvtm!ysO>TXv+pvvpR5G>Ksvc=u
zXg{XVzN~-MX2n)@j5P%e3($?X0fU4wDGE0fZE;~#s~1PXWN8^P<Gln(O&0vLkSrC%
zh9RiGF5WPD!r-Bvg8<|uWc~z)<uaeCv~13I%YWAXrv00DYTZ$>RYoqkI_=kMgL{n`
z=)hAh>hdG)R3fbDdR-pOTg-z-#UA!&!@{l-!LC)4!L`i-KZW4jG?w*U!SOSL7Ex6T
zrT4V{EPA6h8+e*|n0{FGOyy?=y=MUu1zM}CD;}>El<H)z23gbdY*1xG+K&eC@#84V
z^df!+ke*LKokuqq9WJVLPWXJ55{#42Qn37^51_q>laDxMWqUI|ltXAd4Z)e!qs?hC
zy`XK5(>CALHpOXMfNEdq&xa+n3p@1a581z}r3N1Ez<CCKc?0LvVMF2-3WJW(U=N%d
zv?73XjzOjfDakBOoQx<(Iu1$(XtGk!q(sZ4#g$V5%T#GGxGkS08bNNefF@fx<_Vi0
zH~#C0dg5$>4CSG&asAjdfo_1n4IxF>&o~oSz<I5bSvTq^jW%juX-l;mTjUKi@twmo
zZVT1cuUx489Y~iioxg&zBbT&8<-2La3!N|1ma0vA=M&SFZ?wsyE`NLTGsg^Z7x?le
zp`@eg8y3#zS-36y9WZ;C%ng-I^^?S0?&rxE!J$GtD2SshN9NWEI5mV)nH*2gYg<_J
zos=%qE@}^Md^>d1*nU6IpS57c_Vle4m+UlfXy2hT;8kR#mG%Hu>(iLK;(^Z~T`vx@
z*diUU1wn)i^5|181O<8UNjP81tuFKme3~Q7i4YARN2=Sb+hoDiAFpU1q^BPNW~B`@
z{-_hPOO^t$3tj+X&uO3bK60qiw1+mXX#Y8FVIcSV<z}DX0djThDl)LkC8j~D62Yxi
zHpOM*^WX#?gWn%*^XCJ^qKk1BpxV_8)mID@PAp-ryJ(!SrRYKs4U2`fsDRso*pg#F
zdIKuags11yENzk2<oe(tLkC@FtV&aC-+r?8Y{ROz1Eru5M@L}{H3pA73cRO~QEG5%
zEhmrk;Ox-=Fq#9%qPgElt;=X%8yrM#<~jJ1%7a}5p$1mt{MH7aNs`;$c$S2_fITlM
zA(<=E(4pNtM&WXVZr(~T%v)05G1|}FwL8lw+p^)G#oE>}eaps7qZtG4X*V8~Yu~J-
z{iiSLK7`I~->pyDlHaEv9yb2s{GJ0#8`tSQpw6OSj$fVi)ru+O+KSl#a=;z*kC|lZ
zL)2p?b9M-P8*Z%8Cc9a+<vXzLZ_!HSlk%2F{p2k)ke53G805245NV()4%<HGLLRe>
zhqmrCIQx6_CuSTj9VTNWaqT2ONWQ&T(`--`FGzHN>5DPr!F^h8{plGR`m1!JvhFX_
z7D@*JfzTOr+e;mln7y2R=pp`jFhwWpgYK<&h^`v2*JvDFq=jp<wd!;}T`DI$EJ4%I
z$}mDqSMbvhTB_nUzj@T*!E2u=?+C_gOu4FFyQ&BvR38JD5U42<*H&PHlP~Y2eYF2*
ztKU1Wt<lcWzB|v-S}aCd`LIN4Sa}K<87Hj-d{D-f2*Bq{O7-6L0L+7$J!UF1NZZUw
zn@}+;ne-DJ_rQzlZQ?Tn=oKL8Fku#6_A_0nji6h#QGfoajiy_)k#vRh5xrfNQ58pj
z(n8pE_KBlcd;pOb$$kPvqF#fa84x*uKz-;AkO3;2Oa186TAKE%mQJTjb=b7Z-c^4x
zUuiqq+z=FPLk-@fg<gY4p$0{}ld~!lp(w(}p|}l8Z^f)P6FeND1VOQ3^l!|yFR}ww
zE#y&L95^i9rGfiV=V<LUmS@_9QItSn{D%p}y?oB3+{~|nNx{n<6wC6aPSxtrv&#N|
zZvW|J=2UynK3Cce=p{sUaHqffn90iK-5&~Bu)nrRvHkNYY7Wp|qnAa^u-qU&g)h&e
z8C<dP5Z1W?Hy<|V0D4xd^VCzOU4Q-ar>O>~<^*;{nvA+lB-vxcxMsi#l|uUg2SYUq
z=K&I2I*?I5+FeD{{-Nobyiu#iKCeneX~eEbFoL2b4y%+gymZ@4R<;tGA1f`aoGvYV
z^a%M2<TGp_Jd+Y^J}6%eq+qAS;jDw@T-dVIKrmU<3p}uai0b&34wlc*B0kg92FD4K
zJHVHeK$h!0FARX(>cp{Vkdq6ge6B>-xZA*)EX<!iGWT=B^=5;mFu<i)sFncE>h~YD
zd}M*DUS^?v8+-d%YFN@O^(}JW{i7|<;6CU2F<x$hWUOw8;l|NiZfSz|CBYgV5fmN~
zmI#AOKJLJTcp^BU@6L6Xsr>iwIn%T^sW095tHjc)t~DwR9%ySA+jz?1rMCTb*G%1T
z`kYORUDGk>T0z|2jTv=$>j$9qZGpW&cp`_YAvJ1p_(Lo<Uq}kvF=<Gg1~y!sfhSJZ
zqxgvd?jufIE_0J+xccQbwV@L%Ffk>YK~6!ij0Wq@HZ$kag#~ikYiG9)3D7>Foyyjn
zyQb|c?KUwzZOT(t3kwD7zBzZCiB#PhrCrzlkzbwPUF+O!a$V3sp8cNmH~O#!X|IOY
zj7A&ujuegz19XEqxeqZ_GIO(;8WPCIEcaoAyGAn9!JLBRSnjywRtDY3C*m=L|DC0@
z>_BOK`-k_mU#H)G_0zw#)18~o4L5iAwS9B-Hcg?XfNhT!{&2QSubugQUz^FX4LIc(
zU^@U7%0X&)B=>OH!Y!B=36LqUEf8#g{A9^rk@&2n`iN6`kPBdrY7h8BEWxngabc2M
z^jIPs6oo;sl9=<Zf3R{8?W}zqG<@^Po3zvG<Fhixzv|BtDWxeBS;9jyc@a&i)NYi~
zSNm52@&<rB2N(_mju9Ec=|TW!Kx*g$Y9!&n*&;Ld$3$jEvI*+(NIF4%A(FyE6-g(S
z`?(0*#;sB==+$5gH|%h^)1whe96=-q$36)Q6Fwtuf0W|PvH1l_Y~(-MM^E3|dYgJx
z4Gf+!U~{im8hy8Wbq%OD-9l;V&oy>vOSC&xb9)aTf1vv?sqA$1PCYr#@<VrgX9|Pt
zK14MO+1;&Cv5ukd(HFv}`gn6W#;I$ZbJ*R?Kj5J}iYWvf4~#P(V;GHyh(HH~h2@6D
z2feXj!`1g&b)zwP>puNdD*2(?;g7=p_MTVzLnWjHMhdlVa$Vp&3fBEuYC>`f$4-L9
z7U7WM1!poK64Y&62pKrY(F$jPioeIWRD(i<3pm^?WNXh570%xhTwNo=b2#jU4oyA@
z!4*6}hf`I)!Zj*ESEj<z=N7!t&yVKJuiWv}*Y%c_y>er~>N9`P&QR=gvPbtC$`ZF#
zK0mSS(JwE2I-ysqGvmIE8$~lU@A>On(+}Eg;XTtG^Kdf8NDyhG`Z^>)i#|5QBy6<N
zU_OEt4c{IdHJlUixy;ucd<x*fIAen#)W-=c0DXP*>u()^X}(35;c4KSouo61KD$`e
zmA%%jQ`5@70RVcS4*>c^`4e-CA8DkT^|(Ix6NsY+JODC=04fLj<Y8@Y0e%j9iZitD
zl(rAU@0H;@hT~5zq7kk7^jXmdzGM4Rtu6fwb^2kfwN)iRjrJhAA<$8$sK!8oAOUoA
zxwose7*;%LE;O?|(B;?w+YRDw*W`TOZ$Xk1kPqqA_qwz#N?aOg!18FziHab*_Y%3U
z6DmpupjT!g+R%?%Lm{dBivbt{l6c}Wz<6;93C;<A0t^lVj1T}>P(P0MIE}8><|ECd
ztNLjlnP_E2ZCYPzRyCJX!+0D{p)>v^*I*KM;8dWJ_m_au^c+S^O)^cD-K@<X1KDGw
zcwkcqwtRNytuwrU;vx!yZ4?)5safc3ia2raR-hZ=t8vjL0;Gmy<@OgrZSG`8H~3CE
zb-vZu3fkIR+gGQ};B2bxD`+<$S9?<~nzib+*R+XMjoI$fc0B{CYO*)Fw(D6HC>Nn+
zh~<@&(Xt@YMfG#ji#%H9(HLX86Yv`zeOQgeL<hFzX0>)e?J+>;YTxnizp+!&_BHK3
zC`$+L+<&TCvfZ8Acc_v9lw&??1*ifLfl^0jpdL)gpaXYhma`T&uc^UWNKjZPkHASz
z<lF@DTYQ$9d2iG2w3_zauit5ReQ8NqpZ)TYHv(Al)~ZE_39Is}(mtnQKP9}hl!nF8
z_(y<ffYx7b3y1;%(Rejj#KhQw^%?eG!i>-(jiDs?iNP}kT6upfeq3(FTq~v~NH%V2
zIcNSJErG=eBaBbCoCqM<@J4XKCPZ#~>*SjLAoqGc12&$$uD$vCw3PIzTND;nseL*|
zGb>jIPeUk?rci4)ty?b|F0hNX#0czGL$roVTHvx7Z;MCY3-FD$h^g6Vi_>DLn0O;p
zA8{)GzvTun``94P;oanh8}IKJT#Y7Z`v$BzaSL+8<n&sTH~6s>%4ou($q$q0!?83~
z)4u9K_jKdZIrs+q9c}O<ogDmAhg}Rc16&W-o$@x~X~o$3BI;Vt#@;bBlQyCqsoYof
zGI8Y+M4PO$axvoAPvbV#27>GRc3oSLB6)iat}2y_mTbaAPf0xF!)t&dk=WGuq-4CU
zL*YRH&N0rSxU*k<9xB8B!|X!_$sDeIH?JCOeEa?UYxuLi2m1Jr_J77->bt+5e_MYz
z<7)XA;kFv?E%brs!=Z~rA^O2hM6g!uFSQP`B2%7~PS}6RdI!JvCtCCQNwS9UC(ZCg
zooE#*OJ0T~<OUhiKm1#e_`@A`9Uit64(cjkYkE~~>-OLS=m6Tj=kr_jINACS?VpdA
zT%AGdvHoqFH>X)?d3Aa}*JaJgQyZVFmtMP0LS&aKtB(xc)30swI>3*g{T_Q=X^9zU
zfEplX934MG?KgVKLn|_@Y+S?<K69=wN^Z@Bu;CU`#wW0#3J62!wID9~2$3NS#FdoK
zC8HqvovNlc$%*SdXy1;-i<Oqz?>}fk4YEx4Yi`@gB7dO%fU+lK&{QxU3wR*7u(KCE
z$VUKXfb20T2?36eY2wdkBQ7KOxR^Kh{Rn6v;c#gNw9jshI-nk;ofb~crls2HDbHU#
z#on!IvZR##_2>-XVc^L%0FQ}0!BS*^AS^}3g_Eri_*e~72-isicGE%HChc`?6CF%f
zvNs-`5nLZ^KzSR#o@ggB3iXh~1;;g>7}W`GA+RKxFZ^GsqMv-k3EdI`mp1G~66{2|
zvNDD?vun5B+OOTR(`KXg{78?onUBt}=c;DPMOBm7GCrz&(f(*a=V>J}D)$)S&Oy!j
zmN7G_M1-=bCjIoktVCfOXqk44rfHjZ?bJ5HU~roblq|GX)%~hV2)jJN(pVs@AeCBM
zIUNvLNU;iAlaoR`=-5Lk6j%YLR7oHg96c$58>-AgXu=>XgxiP(?x!QPmLX+7H*KBX
zvTbmbwg~YsU$B9Xf-*h{y`P%jN-pM@X$pbm3gGaxB^j78sM13b{eQM4-J?HMj-WTR
zeCa6+_sXMe21O(>kBVN)CYTx^uB%WDt`;fU?xzcCLN16vBTat7eP}{xu)ovJpazS0
zZje9%wA}c7i1h_L!~>pmGXnC%BN#$#wr-W)wl$im96qef)YcB6qtBeX^`B4nU(c~+
zeRbtVpFZDw@l_UY`5x^zI@qv7{VS3eR`y&v_|PHkH`6hmI~6cbbik}QVD{Bvj)24!
z!C?;a6%uezW_hq1%t|nisYGlr%piG%N%{F)BY|BcG&c;&6;o1YDo2heGaJ3NpKjf1
z);1jknBVm7{mqrHvTQlG4t@BaTOVH1HV*;}WptdpS1JbYYob~lye|MDK;a@P5Haqa
zQ9zuNVbKGoes@VAz=BX4U{C}(Cvi5NEJFA>cg~mh9(=j&^mR>gn*IFNx^^?yG|Fuv
z#hkuZ^zy*g^6BsDtr^ss&-PDiOX+>gQM#_-T0=yx>AcuuWD61kcHnSw*D{P{L?N-D
zT)u>ei}|~0P@1-mPSC@S*tp7?N~9yoh?0SJUpYxhg6#}LK*USwwTXoc2EiHw)`MW-
zNJ9_s=qjKil(ToWTBr~%Ltz{9V63_oMJ!%nQ00T&m$vAply1V5a%$t*lV4svb$0tZ
zZl;u1FV*<rZVei9H~0pPukrOaHNV;Iw5U)r3_R#n<vqj)4A21=vy@>9cKQZnmv6x4
zRiQ>J!cG^R>AoxjF}CoqK+odFJNJNrh-f~V(7O?#!fKTZUXTn**1Om-El0rHI!3{C
z`{>hQbtS57eZ}<W$2T5n2NvZv^rpEid;G*E7#jhBJ@OY)<;wZ*zI}f~r><ADN4)Qw
z+wUla@_lIfX`n)uUYlbUYNXX&&jjyAh&y7t`OIZ?1#R)@?G)FgK9MDxlQAmt3X=<k
zbW|9Dp&SbL9fkM+n&e@soJ>t};-+)|**Is}!og!!EL*<*<f-*5maiT)aLMw@>7$R0
zA9rl@n0LpGe|OBNSu^LYc>dM*KiaZt#mY%jR<C?{)47wcE?dc-p8DbB$sbOA>cfc>
zKjb6Y8~wrKi^ItTl?bn$n<Qa$i=h^%#Fu+RRWlWf*PH=_imNqT#qxH$^snF)hdzQY
z5CR1TV~B{47NZYD5BoU(^65LDe{;dKYrR8<Xcx|Fzw)pwM2&q6i^Io%Ae3>a^ae9m
z6&xG<uJ#W#zdQICJI8zDDfANpaxfCju+tgq5yVV^7H|hk8nhNv!E1R6!tgbu-=wI@
zJJMM!oInX>n1}Yj4_F&f|0`5;z50%klJDrxnqY1<4Qz<f#iyWxnqv4AfVH^DRb{~i
z97n!p;Q|CY0$gKD&C*{%j9;qTE7h`i6s{Uulb^8G&eN1bIa^2AyVVhn0a8fd5xAUQ
zcoZ%OT5zz?a5<VK!UPSGGa`ahjJ#+4V(re~+8^3Y+Ih&NlasVp4)ocujK=-(kXF~;
z9M-4b;PEtJ&xE3?HyRdZ_uMtL&RF_KdGBGz%0IY#rfs{4MXd&pSu@mDHuA{6&u)C!
zwpY`lrp0aB44hSL2~8;}ZkZpK-mW25T`|&6u8>wMSK;jm!pbY|7GaWezT(Ce(0~{U
zLVMI#OC}m7jegx{cgG(y>u05FVTTT5J9H@2Pv}*wA5p$R?^H)jM;)?Gjj3D2@q~4b
z-WB|4^il?TDZ}Wcd|c#n@rmVU@Z2nOe;|v2ZlHQ+<ntTenfr;i#Tz&Ly}5i@Zt-z}
zj1e2*x>T#{;l%l{_q*=eGT`2IU5eSnikVGc3l=Xr#Sz_>pBNe}=jJ2?TUbIo56eWn
z5&|(rh%vnLa-TP~6Yn11_}boA`}F8DgbwY~vsYE%8XCNP8x4BtCGF?eHfg`SI^!MM
zmd>Va-#MloJbqF;c$9TnyY<rk3HvT>U(>&I;e@BBEbKIJ{&wx=-aRy$wxcz7Z_{q<
zI!Akb@PW4D+(+8>GiPZp-dpq8Taq{M83p}ntQsKnE6kd<nht6=BFR-bDU4%E&O{ug
z_ytD^V#5OhoQT5mN&es&TM$-#$QD~v1veMeaAkmx#AfB$xmE}i86J`X-9uu`yJ110
z5xR@S1oCA)e9Y~inL79Ny+bEAX}$N&MGIf8u5C`~5;d}2H+C{Awe!;>#!k<jm75hX
ze9nsb+UWtEo=c2eMC)hwK=gDIGFdt*t%419{Urj9u%1p7wx(z4ROy72h{&KMm74g-
z<%Thp2<4PB4FJxVvt@u4AqMbVoj6-HUuuTHLwPs+tOhLxz-E<8>XVIXZi9v#Nx8y^
zh$HwLj`bY46oRxtlLj9x4{?zVueQ4DQjPKD%CapcQ;n4cmyHFT###{mq~^uM@<(}@
z<<V|0BuD3o7c91n3R|qDyuRxhA8j6lR_IBF3SW_eMVw$T;ouoz@!%*)@yT2U%1cU)
z@A^2w&3K$7>Cu;I<SV;J6=j%x*84YYzj1cEAuanZV^<!dy8k>zl@GKxrOr#A8C%~v
zetU6*C2n)OW(ykSx2Q)kBfYIC(kMm6xQ|CX7++AO&qzXq0w&9eM<?+v8dcSX9Z;0L
zpzUX+m)IMiZ64+0@H`8xigy9z1;p`qyAda(!XVeBU`~AHs*nm59#Il!3JrgD=fv@^
zZJ9WEJB`dQE*{yst-O26wrx`;Z`tD2YIwW0BU|z@)dk-CyNW;R4dni4hbzvhb$bh~
z8&(OE3wRr%@1b?OPY+6f@XPrk1`zZoW<@?{Ash>d*=QZ@tacS~00lIO##g>5jg>AS
z&~qE@Lj!4}hksx(G$pxgJv*!%g<jEH^>WDQT#FNGltGC?!w3N~!(H&GEL=o_Nr6J?
zfN#yq?I9Y5u24h8Lk?ViB9}_I=p3(eJS-A1$Fjp!OKEgYcGt9=Z+0(wWk=VQoe*ce
zepOX^*U)zL)242DZbsW@M-~IlRJMYh0-OnCiW;4m<m_jGGXqYcRRB(vM))I#SY4*B
z;2vXO&JCBUx4($ff^{R_;5KS-ypUF+;)OyIff#C6d(Z;DmPt&U2K;=QHF29lt_V5H
z&qEAXSdSsOwc`tJ>{|57-o>vRUB9yYR=vDBwa1jnQ#xA{t49uf_UYl%vQw82pR;&k
z&CHybu5gG`(hENBxxxw#A2*hxaBsGa@+|{&cQ-^u2_A1rEK5b_(il2e`$7B3M6@&f
z{duq?&VoJ~4Ev6M2$$RSG4OALu_5vcV~JrwbdnwKcVRQ*vM4a-wzLBR3dbn$5X2=+
zVL;(dM{W+K2%zgdJD+ya-cx!`@7h?~2P49wQG<K4dymfKw~5nAG1nv37g{r70uig9
zrZQh{tJI+s1`eYK1;~6Jrozz(9{^TlA^0gF7XtXol5e%YsL!`Fk9ldAFWDcK@YXM8
zGS#GRkWI0om3S<R1-P!2sl`~8+6k*urEXZ3ip8n?-ELY6qkzbtWUER5Ct2aC4akHI
z(1zvACW}q1V&~J5>gUg=0hRjcm`KzKAeqxeav`1K^U@icxksaxF+L4yteiaWNc*H{
z<wex-0!COgxQz+2KXr>Z@(40AMi_!loJ&Pr<mX%}ib=+tpP0*{zqZk5LQrs6!p<4s
zCsUXz)dC;mYi9F38KCMNCG24c*0#8q7gsVOT$h5ESv}Y1bJbfA{FLLg;Kb1l8;`x&
zx1>XF+P7nezVd+0@15GwYSVkCUsDE-9X+6Az}PWEF`Kq0lcW!&7crZ@3d%O)xDgQ_
zc7kQmN_S-!))DQn-(+iX-azAs7d4YN*c!~Y79C~-C0W^c2aa6j7&trfl82BL`Mc-X
zX1udqQe5vC(PHAAu86#<2`<6Q|3bX;hSVD!Z6>dibhh58#|mlB3X;PDDn?psv!n-D
zmBb@Ny6JF;=N@B)E8|uuzAl%WZWqN`BEFcGD`{>%I@M3CtyLo&OKkayIH3u1LsP6+
z9|^gyu&|&J<4Qaxkx&ym-k?>}zRmKRwPmza{_DoqzqjktwY|5pwq(?(lFlPWu&FO?
zY0#io|CUX<cKGo6#dk|rb?eZyd#i<@<N+%NpdA(<yq;pij1o*{>+LX<8et(chL*T6
zEOu&;h}wcc<{oVhx_3A4BC1ljU9tW^EIn}ZEpaEm`;-*y2m*`c=0-6O@xUUkxk=`F
zm9ql0=hkX7*w=Dk)tCPC1Fbla)q6DlK^SeV9mJvl#8@D0gCF2qK05Qs8JWs2W0r*X
z37ejH3vUfrl<MOx{5G;AO!<zLwa^xo3e_xg7amOdP$WRslonDNL8+Ny<CioI3o{aF
z;z{i@ntoFIQu~rVOTi-!YL{r*LG6Ne@gS|GUFQDCPWCNI8|7!ri&p3nEp>c)EW9>Q
z$ooFYrJiBy4_kF1*Vc5q2}w6zSdg$v5YaL5g-QCt7WmwA&EW`=Nv2$JFH8)LpnTAo
zl{N@qKC<<>P8XMbz~gK;JlCLN`Z;ZVO>J`h?g+E3s)(YC>vuxbtscqTWa*zD&>^`z
z+_v$^PtR(v_{{HL)v@-?&rI{n*qdqBFM~oRLwi343h{^jjsRLc>ej+zsPyIu3Nbjb
zA$@`q3&9eTkwyQ7kXtue=biyK3g9zDZZv}is_>XwTnO<no_=tC_oI2(h{1kd+e=H&
z40~$oQ1rM)CssWF@jp!a0g?F+weiEt`teBH1@Hy@Wr`%VNH4WoTDsuNe0CBH!ieAS
zAZWv%s|E<;PkE%98XXfNcq-P@CcEwm_cGUr`83XTV8?VWLLVTiWbn0}4h~4afIr{&
zuhS3uWp{bupWAI;u2rw=%=#U3Ha9CPY0##L-1e*c6?;al?H<##^O801d>B=&D!obl
z)K-gUwHfw$$9nCC59btx7#q_XtjA0xIj|et&`~ZV7K76W7nN~g7`GgJhACVuQGFvs
zQ(#4ffMRhuWYiE}&W8|o7E&W5J*0jJ!p@F_oC|>-5Gh_!3kdgFVbd4&cmWUDDWDVg
z#}s51AchCO`?`mw@j>mjqE}6d=PSu=z+Wv_jodbw;TG)!KUl6ic9l4>sR_3_6e2W6
z%p{2%-w_27SS9WV_2IETiC8fk&lNe!7h58$eEHX<O;3;i;0BfK%Zr<|Y6r)k-&g0R
z%slnkgQ__JGltF_(6CdpJC#>^mMrNoRBF(<yD!ae8oHoq@xd({_t1={ZR@3lynLc}
zU#2~{wQt~nl&A}N&F?m{(N;yH+0+4pc#sei(cFVfX^41AA)QsTi09^(2ScwFfi(uL
z88%WipqjAaKth16#%(<?w<Ejx0Wl1?%bP(&;>H&qr<Ej(b|9~a!U&2%kuOk!jb6&A
zvh445tAC#R>*ZNPvPY>M7L8ss`rccwwbw?Mjchu5VDG_74XsL>P`6yWvu@Tmi@v9F
z!zDw<PVLe(@sF(8L#94juzl@-rVFPGoe3(dM<&P}<(v4$BTS0*JwDue4YH(QOI)Jy
zv@OH#X2`<jp{{ujErHVHT=g1c*kR<3kM7B#RrQ9xKGgZga{r(aE&KLe-nVa6w0`E4
zpJyK@x02t3j#UG5EMVe8S+Gxo*o^=m_q`qXg7pZ&NZt2V!X{BMoUe<BF`aqxzyiTi
zX=nsrrD|64k|l7{5FTJqR@%IL*nbdX(6>X&^5GS<Q}B)I);9v^grG0OqxZ`q*dTKG
zXREb?h&Bjc_4z7Vw|@irk@usNt_`*NCK?7x=?D3`736asbujd?r~@zEpCP>PMr#bO
zlW3>mrE|s_=#$w0bF6_QiqaKp(CV90FO~85qO#TR-$1Cr<XUM{c&Nc6?UPZOw|R5b
zoe^02@<^uEE?TGVG?dSzPvdX_8iMDlFautLkvbx7E^r2o%xHNZ`#tk)$d!BthV?4d
zSDHX;s_vLEJXY>_EWb9&^uPfhBo-HwP($>E*dgFaAz(r7TWWy?xrGUGhm2d4DUU&Q
z8+#mX473E6AH-Mo<-l0)_$rRTH5iP-%`+<}@0@;6yRm5_wH|nSr?i}}faI$oA9Weh
zXK3Gr>o<hHM1%Iw?7cL2O(<UyiS^0bqy40V{ySdRF1-Far{%Wb;<v%Yqro*Y$et(A
zvNO=YB%+34v9Wn!XR}O13UGRk$W+rKL=a^<f+*87(>Vi9NBrdRbk3I39}A-7Y~CGX
zB8XCrj1p!a@Z4C}L)7HHfP_aYrn;Uw$IRpG7lQ}LLu3xZNA<v*L>_#Z*LK#uO;?x9
ztGM>CYI*Qey=L`mSJLv%Ghe*0`0MYq?+~u@&VJ>cT>;XB1rb<eki6~DqGx6@?Vr1Q
z`VLKqxsYExdo~UIIYGNlLlO|X^XPQ-U7*7O@>OXsMv|8vXQl?q&~z2(wh9b_6lcC2
z3=qaDc+@(6m|+ZtDb^fg#!M#3ocDqug~cMkI3F_QUhToAO<E;wc2fS%f6<~K3|CO?
zRJkQ9RIWg73?sGNV(j>OGniV$HU?@V2~|T%gqcS~F9`fN%{dWbfe^RnOr2ZSckY~i
z{pWm>RalsnU0A3Dbel4zTi1ybL+bZv*sw=^KEB4wccdvMGdLX9&BCdOU0qC>2Leqo
zrc9I6msbGWGpdGM?eFI9;07hPOMf2Ohvo^h!ed@WY0CV8O}FM)YrivpK+e{*YSs*;
za^j{g=@~xbwzl?3&){0tD%Mn1r8clAZN5+1oo~$Vb!SbLOSspPY_`uLWa!Yw9Ny7b
z)_>5Hf_{iqy}Y@=>?Q$X&Qld{Vbu|vGH_pUJe<ZfesyQ*0Uc>dDOo+Ie0%SYc}Y#N
z*kPIIQO}YDd*>w)Z$Ya1?o`kzb0KbBUR}x_jFRq_tXRD7wZ5P7a!O&R+C=^VL?KRy
zcpzd0RC;txGT!9dT79>=6{C#Ok=nVEXV-sltoO%g<0Ls)s)^PlkyU1{b*`dAh1OXj
z-IWx;mPA$u@cXOjH0X`kS4KM^c_Ze8`yXOd9}#cIEzb&kv8WTOzusGfPc(YXp(e!u
z;kQi!g#I*Sb7zT4lnvJolq}eO?c#v1+LWwYas5*NFVLO^^e&qt-Gi(hft@9E%K`{P
zSX*`Dw!S4EeA*a&Ny!VAj-RxcEuJ(1dzd{MwcxptwMNaIGo1I}Z2O<e``CjEdw?J$
z1G{|CKhO&71tML;8GT76vo^3`W8V*gailV{5D~@3Z6Wc{dUEN&yBD~7>;iVWoIn?Z
z&;|Uxc4QJugRU;#<GW&*MVCu_9}XHu<3l7G#a(I_@7|SO)MkWeGw2I+1%ES;jFBcO
z8Q_NcP9(glLTuHyhws5RM(nKzxC>yOz?viI-fsZu>-owRr-6wp8UDa7FRiQnC%FfF
zyzykIV}{W)hC@jYH?$GMETzVWbCu5)kEJv&^99Cnxw{V-A+i|O@nWk<9ARS*0TT&{
zfjI181PO;m@1~?-VFWfaghFKHqfn1U55ZO#B$-EdBNbqKj0g!L2IN%khXh{ED)ZM3
zYM(a$Iqf&?xYzdW+g}gC4i>>9XQp-Nx%fqYny;P3b{LiOW=3njN7HJ5ZJx2|ZyFw>
z{TB1=+)Xoh`xmmN(gTdp|GFca^q_L3G>$cey;f-X@=ipyhr?bmAGRH_I~v$nHOGuB
z5M@ZMLiR9b`C#BP*tm$qMWk`zF;@$Xgc|_CoZMsId5oNEHi6d1qma2@R*!uzD1;d!
zLP`d5^yv3kOu>6MY><}B`)SR8GU|+(e)6-=*y~)hKq!2|7n4R8X%7Nx+CmTw&t(k}
zvoF6UT2`hLfB@KNijb)cfDLL81SRN%104LXT@cJ}f-l^Pu;vBuo^`<}!uI*v0|h%H
zlys|i`qNLfeH%8=f9`IlleE2xk9l1~00@X%occ8Eq2L|}IW)HcoXPO!A5lYfZ$2U<
zQXM@Y;4#4V=mC#41~KS?7^6Y8a8b*+@aT?sJc;M6<6|cU7b#EZ8>}%AB8JE61Q2%(
z&kl>Nu*Fr_5-V&;&TiwzC&!Wnthe}AA96Vge{L%oXjk5&tIucF88hu9u(em)t#stl
zsM`Vu&)$_v+<I7GE`{t<L*3TTdSFbLga2>zS%C`c6EP-8+rU@?vL!qLV~?%m0IuBR
zNlx5AR6IwNE&0i~%Hy~K)$sK;4uZ#p2clkl_OorEqJ1E%Pd?#@azjzmOCx)Mo<Lx0
z8wmpAYeL|S0jE4H#Xi{^6X~D=gFZaHF@&#BSHr@E-$e=(4%o+>GT2*L$WPeu@BiH!
z^8{ba3xG0O3dYP)ppR5xt1!S5(Re_)Dl5Xt!goD%nX)0;L0tDVV+$iTcw003pX?pU
ziaE0y-}zBrKLy#z*!fY!92(UadKD(_a*JE}U|VipDnpvWHUa3baKvpvKZLahE)4e0
z_LtV|V7peX+I6FEH>p;3cbR6tv}5b41M9c%e8s$Y=9yNFrlC(#0o5t=Ndj5;Z_kqf
zjlne?o+rq$2fn7iP&-BJ@Ns&PvIz(LXbqZ<>wo#8jO`Bp<%{Ar9yceH8WqpizM)C~
z|9nyO>VNe`G4v=wYs26Z2_S9UW^ALOhSgK0x?IP%Gjzi~1YZmuUu<XSD}0mwA{Pfa
zEFMB6wlmD7x%p-`sbj})w6_9jpKr7^i!HRHx?#gg`khvE9J?WrdcgSGfC1XJ4uNpy
z8W1?$Rd8Xr5f<Xlg`We_ByNrkZ2BkMdGKb1xWL5XC}B;DjNpM{5b{DWne%P`oGv|V
zip9N^=5}=$)7}d0khfsbo)_l5bBmSr9@Q#=K10{-dbav=Gp27`G^D|>5eYyVX#}V*
zNGXtWqDe0uZZT2~xQ#%4Ze62pusEYO4@f3R8_*ZZLtT%#s$1Q42~38W#SVprxsnsM
z<e+KTD_PSnyJ|KcHhJOO&u_Fz_U|_r$7k0`t1G3vB?Z1vfBB558(w?4LB&0-D5X~2
z+(s!_j)k2&0scYY+XVh2<{6LiERfGxDC~c-3lfzmjyQd+^o50p9n{|ai8janz>C=W
zsv&F$kFe55bS!XE6VW5%^wP!l6b4qDhP4E<*hVuUbAM(+qXahbfL}t5g!BYp!)-Xj
z>72mXoL_?2j{_#SC>KP0hYPFgk`H~Sk5+^~@eY>It77~Y=)ZDv*sgK2x4*RdjXC2s
zKfh$l#lAgrQ)*?0v}x6*6>Bu9p#H4UGiHpQQ&co=_>5^<>sGB2Qd8-`CQVwP$D7!H
z6Wlr!@rff<FRO^Rz^3L=4oN^vWky4tYjjwk(EeHG0Y6rQr895@@aZ5I;M_MC<|f=?
zu5xQ7nq}f%XTi^e_JEk)f`Vk%wuAJuM(t)VIy7(9PIl+J;E|=dO>=A3&a9P9Yh^8*
zHSLX^Ynop9Vqawa9W^`G&1jxAfa@5|*fRExatN~ePSC<yLsl0Imy6&QFm0Z%fUSj0
zzt<ttJM$SnI9;YkzIrI{ZIN%6D9@tzys^)K@YOX!o(swel!gCZ;HuLZ;mK8DUS}ri
zJSfWA<6f4aQNSk3(&0ahvi6ERk#3a6;Sa9>aR{-Vm)L|YM$7}xz0bX7rz1MbQL|&O
zWCouWm;CHE;gRIKmIQ*DXSj_NLrF0vW|tFpe;}6lz`!$3hHVGNj)`g`{%aG=9_lPy
zmQy$N9|4bG4eoKr7;$c)w%i_41E2|kn{OcF*mx`i!K&Pz3>!OsE#0-tZTqoKAB+9R
zrhd$xKF+4PHX&nAYpcX2WZF7lMBhozT)>hrO1ZbRm^`Ef1{DaF&)evy?>PCd+*9ZW
z$PHbPE6@KW&vJ6`2_-uAuymAI$65aha+YR0N(}WV(W2*p{yUPKpao9Ympb2lfexc@
z!TQai3B3lBo1l>9S_<E(4!M$r_B@@wD{KT}2R702R7cBCx!`pAPaUn&_iJ;@Jq0SU
z6Hm_E{9jIRI(xkA<z&_qa$7ud^Y#G}(Y{5ZeHcOXwx|=^WAnbTPj;1JggL=>q1Or3
zp1tRmdkSgn$}MCj-jgN=PG3as>u$N1+p}G{on?DDa<4<~3uX=>AmI?&i#UY5ol1t8
z_g;>Ga0R)g_nv~C5*%=eJ)lHQkZ}ct*<Cd`&B!tTCHEBi(Gzl8|4Z)W<mmsIn?tKZ
zvVxq~p~Z5FWRDVgOOZ$P#rvYAV*eV^3T&?+TJepmCMUNv+WdI#DRiGJw{w#w2Yu^%
z<G7W*oNRREc9tFPfKV@+LkLI&ggc$1!AF#W{}BTSJt)-Rzcyb-DPngF6G17>k=sOy
z5kTRv(>T|IB|R}OFF6i1J90Z06c`wMyyWG<&b-c&Q$0$SoKUQYul!fJDeifdt9o8Y
zEF+`%NYiWU<|x5TULdE)v&6B(h_k+oYqo5i8{}yzd`Ai7Zz-@houd6HN9==OqPX8$
z$43`xKq6)bu5d;>Ao0x0@evDI%7G7OZiAvdbDPNWpnvC$buU@@Qip=Ku{s5xTMvjX
zDEDx8iRjs4`w;s*qdqZKIdldefX9dJcjh*cDcR1vPMd_m1+WyGU3BI(ljZifCzNb(
zfyKyuTsfn|A-F&q_NTGyYnV;E7ZK?NT3XSel5=nvJ)<1$;`?L3kA@tjI(A`@cHm3Q
zF&zFU=jGUK=b|=e?i&B4<mIr+KVGtDUJj=Y#ftU<PRthZ?xhJDLk^Dr=A1Uf`a}Ue
zB9r)7aX~MHSPp%#qXf^qk3laK7@phU6P~$28!qUbC5O3}EMNl^25kDuI00K<K^s$O
z4Lk+*u_KS87Cn!66M6WX@RcAl($5$#;iMyCo%t2tzXZZ9laYsCcXEE0khf`Fs<MXc
z6#G*0k_w~|(n{%|bV0f=d&y<;GVJZuQ`uqiH%&L~G^d!Cn>U;Hm_IWA=@sVnw0BMK
z0p8brihO4Jobl0ohxqRFeb4tFzlMH;{oeAskL9)N{2vB%4LBF@Ah0lSMBrfyv*cRF
zSYEX3vQ$|93JMI$4BCe^5<`Mdh13dpCgiWs2BA-do(k2%!or>lJ0Bh%{!IAwh}eko
zYI3!9)t;^PQDj(T&&XAgmm`0wo>_fT^?gwRQ4^vr*QisYXN`Yqrqry6ZWP@%dTdNg
zOv9KNF~_YT);ZQK)<0scu?=I#$8L@NHukqTzqq8h#&O%?{o~ulzn$QdFgdY);?BhT
zNu83^qzlR2lOLp{rVLEkp7LhOk(94frPSEe+NpI@N2RVv-JE(f^-Ai!TBO$OS}&)`
zX+6^ZOka?GrM6PLr1l3H-Wh{4PG<a^**Ei4=H<*EGApwzS#eo)v)bd^HS1K?m8>7L
zS$1f)H9I%EQFgcNG1>F7S7h(ZK9+qc`<v|Fb9{1QbL!-@$?29eCTCvG`kb9P$8tW)
z`4O6RL~dMeQErReKDm=}pU+*LyF2$}?iabYbN|fq&5O&clh-=0OWw%5Ie9PVZOz-C
zcO1RTdzi%s*Z8a=v0q^QKS?D1LlQoxe+|mu=S#HnM-S^)UGi4FCgIW>gdslCQZiWo
zg(5UPv3xR&Jx?O#9VA-bN=lVqNiStEsYC0NH1;W(#y%z~(jih^Zb53Z6#UPbb!06Y
zh1kW5_FKr`6=?@jJ)}&>xdi7@q&%c9NFCWQGL>~8#d0Xgkl!S;<?3Xd971BuwMac>
zlD$evC1aJwq`8t##>z90`r~>s>8xxbW7$ZuK%PYslxW=VM#h@4bF;D$X#w)*i*qZb
z4$g=TQGAiF6B(hjwpW?{AYn=rg3C?zD)}4IkToHrCCtA#2S}?)g0u)IJcymD8j;%a
z9QZg>0Pk$1-lPHhmiWo9kV1JLJaM_C4@<Q#1xy3*d%Wp3^3Eka<eA9J-<w79BrlvJ
zNjy7__vVtGavWjGMS`_D#8*zVSK{21ts^PSm+ZkgRS6_zz{%6{VKPuYPlhQ|NOQRh
z@n(MHDJ6`QNq>@lrdFgYV4RP4o5+L7v;104C2vc$$+K9I*hL~F7b%s!h5m{q^Q7-d
zXSNb?wRK51+<!sZMW*20_R1bI0egh>G_Aw?A*8i=0kO#SNWL<MbdrA~la(B@z;uc<
zke89h@^bVe+9N+h`mt8zY4bVK$DB{v%HC-ER_sjwC48p8kyR#zbfb1Mn%+md(n+Z_
z3K66eNQpF>l(IijUM`u<7L(CzG-)R-Ac26V0Cdn5I9#ZN6N?f|{LDx6#O#P>w<F$`
z>$7&WhwH0c7qyc{NSR3deiM|@jF*E{52+DSCKA8bgwryoOQntdrl2QIQ;#Rmm!K_9
zUyj5^+IMmK!uds{bxykCwB?>SO}QsdQ=D#|lsFxMhTIctWna(niSt~f#ZLO+G~}K*
z?YJk<j=d5i7USJKT7wV6d-ucoTB<j;(KE)e<NOnm<O9+?%mzexMaji0G5T5hm<;8^
z-@yX#Yc?UtI5k5OpOzgvwj_-Si9;AD5INNR3L{oRH}QvZ5j1BjzCg36^H*<g8HF+Y
z8yv-KqLL&lOqOtAeDvR5CVUhHTS6%&MO^S3Cj3$)S(0V_1soYum=}Ln!dEf#A56kq
zc#WB4v&`?wiX=%U)Pl+olB;;3T$BEiw-?GYnE{WCLh&!3c*!P{w>L6-ewZvEz(Lf8
zhsL$z7Qc-Te@p+RAJJ~!cAjeB$nnn4K0wECA`AJZ4)7zx`b}U1pGh_&zGN>sPR@{v
z<XiF!u_IQsl$~K$*)?mZwYoLh8fQ(i7Fmm}ldXH=f+3^uk3Y)TOt#?7edGlB0Gk<o
zM}EbdogHt6SgToUh&SuHy-Dp4?6*m{{S@)BpM)&@H_~rNz3fF*XRF?>+J9r_ji+zS
zxbf7D$u|bx=y{{o*S}w1{x908h5GZ5$~YkZ^K+OSA@7i*<Xv)%%pr%!S@Iz{NB%=T
zBIn6-WG=aYHdm03$tPqUnNL0?pOH)CGWnc*fgP?FlAGifxlQf>E8met<au(Jd{2HL
zKazW7G5HC)KR)!fqkc}I#)sqF-;sDfSdnHTfe?W+JsrS#3lgkNWDpW8N+MzVP;M_m
ze-KzQ32;lu`$&h8&N$K>oIgOih{W?%IMN}U5iWri5VVw_9Rw{QXel9AkiJ5?fOH+{
zYovKdH<0cieTww0BQ3!BJEUKb_<O%P(n6f?BRxR6iS!o|dJwoFh^Zi?3h6Eq2Bk=l
z;R&Y}o_+$ZxFa4(Xck<0=W_2-3{JF*C+wU^*i}72RwV42o(RGLtRYAUG9xQ-u7*?{
zzgOW53Dg>m-!I`Drzf%w=OjImS8%S2RD?XxZLGz5LbN}zPSz9Ih%@?uC$fq26+My7
zHj>`f=3UYQ|LSLX&qLHc-&S0++*|5bR@+9?t=8rvify!iZ5vCs(OR*!ZBn|mg-uFq
z(YZ%_PwQgq;?{!~TU%I%4;XBd6U7-1hAi%xX|<8k9wTt<(j(T^xM!5}=a8N~i)!0s
zUJTwq?!`S(z(_{{IE!1ERkdwOdRwbaN-F8msfTTLag?obanGpOSZj0JiIN_+6U9-n
zJ$u%+nVc{J)@Mgl)1ft|+f21;+r0D=N_*HEN7+cv#fy1)r9I+fZL=3Ij#`Ws7}qB}
zuMc4{j7Nq;w6XgQV4(RSI=ci#;S?Vm#c#yN#>WD}p2f9o-sx>ido%}#u>jF0-Imt8
zw#_%)mX4EOI%206Sr?b~INTVcWzZonvZzas!w}-`j_(;|iwCgQMTf9;i*b*)(m&nS
zc+nv%>D8k=ofJnMCh5}MV%+yjv%z<+(g2nQt6+L!jnDw%m3ELd&94PY!Y|2rPhR;{
zpQ3nvPnp`kZ9z@`%M@QDG8EA}X$Q>>vr?*u@Lyipsd3c;`7iJ6R7ZI}z1tLJi8p+m
z<@wdiN{I~O`TTPeV<JVp0WFJai+YI~7+?l$dY7oS5IRXM389nK+59j*gicW#Md4mQ
zewf7%nNfJqksrqK!wdZICO_EuAtp+HV+wy`3V&mY8W@Au#>MbU{_7Whh>1bwe*EwP
zKV0MoJ3lny`7&eq8#s_!RE9?9LpqTDv<*23&hP_ymIjcM;1!!OLPE9vBovW07JFUd
zuf2>2p;$<bMI=;S21&_ALQU037~MgFOecti^(Mh)tTw`X`p1h5<+BnbG@XCzzbR&;
zGRJ)e&2XyYx8!!8&satttd|A%(%&`V{w~Mw0IYdD1xaBX_I#U8CgOkI3?sv_BEbrq
zVHVb2X5&{&JROJoqsb6lwT4}B5MnH?1oAe%R@fDcw<d|JA!HJAP6SLtpp9hU`8YBV
zX)=-(k$9uAYs4Tj3ipSg)G6Y6BG&lucP62%aj1dUpMlzQNg-kq4QL8I%Bt;F7KeE<
z+E4_qStfZ(d^1qbcv07Il%0WcC!)Sg)Hee44?!&)&Plk_4y|eiTU!U%9-707%InSo
zhQ!A{(xp@BcN|B)7ZGBAFu!9L9Q+P&-0y(jKCsv~#NFoT0Se4c$8iq66m#fY92ekA
zF+)C&;}WtA$1P+V-a7=oPw{0a%MZzd-(dXs@)8Kj%|f|yaf^0cNcBO}Cypl7hfN$Z
zic}vxVDebR9`PBITSdfMqlQcz3kdo9JYlmNoB^9W99OGF-sUt;x+-18zNtmh4e4ju
zBvsPJ5VpKz6ANI~SO#m%2C~VrA6vkd$}QLq_BYeycKCLd(xrxS52+8*M3k|VmxK3j
zxP5<?D)p~ya(?~f7LG5<aDIEpJpfa4z+^&vs2{9EiI8DaU~{j9{>cIz<YC=W0ahFp
zfgTzF2aV8YZP0TaVF&4qe(MHHS1<f$vA(1q=DF3F-(Chb-Q}6%<OIg#De|71O!Eo3
zO1{KqFJF1cF84$))UlriJQ$~_F$r~sL+S|!lp%I6KxEN=Cc#LF_QoW`o(0H4v7^X!
z($fATX@%4psV!0|QdgvI_HSXU`T_s*_b%y+v<&yw;Qh5ouOJ;pIY*G*K{|@`F48fi
zPf_M)NSBZ<BYlqa1=1C~e--IVq-#iDA>Bf{jdTa;Tcq!h?xN1`k$yn>5$PW4{t1ba
z-jFEy@gvYg4^ZzM?Q`&*I`*$g5oFGKur)TYe?>k)l5zI}?*4>36}VFYs*-`7ZuaAN
z|6?-7KAJpZA4}%gn_-R69`d|>3*PYuMw*Zy<hqGb7$WWj;*KBg{D?aNqV_xJ@eKRV
zq%P70q>D%uNFO7G;u%&qA?alW1G{&D-Mhf<U10YvFnd>&y$t77$hR8lC8U>;uHfEP
zq%V=KA$^4ey0@=Ii7nB(R!FUp5IfFy1VE46!#nrz&ON+y5AWQ=JNE#08$i+nT%k8w
z!)q|3S8w81HDLTEFn$vlzX^=r1jcUyhZg%h{MWa6WDU|<q*su5EAOF|_t46FXyrY$
z@*Y~r?Y}JnQ!Av_NNtfy?c)K_TGHKK4R!hgvbBJ0Eg)M9$kqa~wSa6bY9Ei<$D{V~
zsC_(YAJ1`$H?Z#B{wC>R{{{W?HLm<YeNF6tVCU&y(A#Z*+uooB@FYA9fNpV9U^u{j
z5&aX4=Rcs2zQFrG2<(or??eBdNAAt&-;?Oy6J(v8?`XanzxZ*HIIh644N78439v?#
zkIVtkr67H}eIP6H5B~e?ZT%N;`aeFP6!Ed|wqJ7m`oaFa<JSVf=lIxvv{%^wu>Z*~
z?HBC7*cX9s>pYa-fy8aUg7g-D{`kj!-?(Gvk~=>3*NuAh>;LO$w|VBkNWsVc6R^$C
z-{Qb!@&Ct<3m)SIy&U7}@w47)e%E*t*mbt)@!ZJu`{VbxPU-&9bLeF}v7|tr+uqat
z9sRefNB;fHb;tg#{TsZ0NAF2c+JF7n`|wBh<7m+rI9{=jw4a1uV>75G*nY--6FtT?
zM}m@q?2))P9M6b-r~Nik7T#E7?*Z!NGpWVC-+tQJ!*7v5O#>JI)t-X<qTh{YyuAPY
z0kxq|ar}wbZs+>o|NNl6&<~McP&04)fB6L12S53V{nnH3>vzFL@cCbO^nBYvpU@Za
z)=iA~$3GVFq|~_Wpa;;6y#uIC^uF`idAleFD(q<SRx9Jle?Pk@*2n`sf)D601jqUI
zyY^hoG0ORU?FR0?hLppvaDE@@o_#xxi!d`eKK5<SUtb!(^s|m}`!^Vom%#D($B@?a
z4B}{?fbvee-EjK}TK&-N((w~Biul++;~27k0;+o(N5O@jkUJH5xb5Qq{AixN&BRP-
z!fU?xQcla@;=%YzkdsouYttbgc|!(ih<nW;u}4BWY7O4o4&R!Pkh&oHtsA~^kdb;J
zroRv5(gav#7DLKfMb<*ndIjGMNK9Wr-oiXay25Jn6Xp^Ixyyuags3}0)Ey=2<~t81
z;&~Fjktin_V=@I_#Af2FptKCgt6U!Ug}jsn*(n!a{(pA!(4IQ@`ol|J7kP^Ctqv)x
z9_EVr_*x)sHGrJZ5Z^$wr#b3xfv*`Y<NKxZwt0!R$wK;*A^(*E7hUi*i*|;Hc6y_o
zeE@4;e7(`)GW0rcGuEPD_KqNH@Qo6ZVgzuo7QZ<bqJV`%fb%eHU<~%6<7n3jNR0~Q
z#`Cy;0X8Ea$bz2$!cSo@GQs9^1yEfD?!17zo9K^Qz@Q{B$bB<927?3!g9HXcQDzV@
z!uv2(;1U1F178LWJPk*Vy9j|V{&qg@6yh5ou;wGM<}I+s|4(8)j2Vu#K!G)1fi;W3
z8pl^_K-?BzDljDpOvwUM*pmxizV~}~w4^7#iolwe8`iu8*8GLm!eDz^3P_d-ePtzi
z5%6<71_?Zd3Ooi0JcbH9hC&xUh&&vRCV@vLFvtW3y#)q+1qRK)AOFwl9CwnyoeaC!
zkAR2Mpcm+#YcM{j9k~53x=$@GabSGeQ3B7;>CfDxS92?A)2wqB99wj5VkPz4cWj4a
zhbG-{?A)<Ej$Jyp#Z&PnFM;bx(7sWQekFNaF<hAjj~zFLBn_Q7U=aELnmBtD1Y#fx
zPqtVVTU)(>m4($7mLdqbf|Up=qIet&|Ha1t&cpe=%obZDY$lJFNiqvNk7PTu>11rZ
zRF|n9EH?9%#fnL~az=p>X3fG`eMZX1WRtf!yW3^um#p2dLKXD%DY{{z{sT-y{^qfx
zJ*r_^HOw(#qV2&%?D`_}F~pV={jxQA(zpfaKnw;{2KPl-VusqcrF}wKb+6rrl0CTC
q8T*ynLpM$cN(mRnxia43hTS=Zw<a5Z*wbG2wvT;b48(aGoc#eFxnWHJ

diff --git a/static/fonts/roboto-v18-latin-900.woff b/static/fonts/roboto-v18-latin-900.woff
deleted file mode 100644
index 9109f3506a827fcfb8a3bf7e816cddd3f96b8d2d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19936
zcmYg$b8sik_w^^XZQHhOZEV~2#<uNbV{L42Y}>Z|%kzEzdAsV=)H!qR)a_eSJ-2$=
zT|rzN00j6MaytOz|E>|?Km32nf9(Gs5~5<_002<(k0$X06R-fVItfJul^<;b006rK
z0ASw+v38dwR8)ll0En3%9pMLK97c#u3MvfD00899Pn_}(4BSjfE{$ys9RL6*)*nwb
z001J}k6yZA?B+rU06-u7c(nclI2=8nnS;44001NS<74?jXV5!IrMaQ=Pb{p<j|cXD
zfCQkJ+jyG&(BA+6w<`c(=?DJ+6mMZ->j40Wzx;SCe(*wohX!k5YH0E^1%n^X{vST!
z=9Ddd#2+pFhZFpO6h;?(%EH#=Csv{r001`s$*+0&fH&R7-uTBSP56_?+7Gs5uoz}+
z4LyExk@@(E`_Tb}Ao#!sc80d50Dvs+51;?>`QU(ZH96Qj|Kuxs^P{2s=liw=m^e6@
z{=~|G{_yo5A7{oOs))xLTptq<kRm2{@B0?GqA*;RDkz@~Ko9~^m<sR1y$}odD6=M_
zJY6%~G{!Z?Hbx}IIi|A1<ISSmPZ{S86Gl1BA0Y*X8Q`%NlM3QsCW9|A-L)MP!<1^w
zA6IR_b+p!O%S*!((qwz>kvkHJZ)AQccU}JL45vsT=lk+uxuxT683`$V+y*_NN<+0P
zc9y|=T3dhmM7`?~t=9PAT>tKggE<qF5R{nEYm;W{O}wE#ED<s2h`g434<FgU^kL$c
zZUucN?xYM~#+eMW%6ClapksE9$#BT+KM%7`Qa{U&CsKhglaE&u)sL8$yjwwKItE!e
z1v+W=lIBxw-Tiy5<9CHz5&g3sVkxuC50gd2nglbIhKTSKQj<gpep6Wk<fM%LUuH~M
zIIRg;tr=Vs#{4jo225zblqc^!fEY~Za8?G<n;UX499zmd;@)4;dX6|gQnzotzk2E2
z8pFCS_KEP1knj(gVwEKL;8^EGS?K=GiSzJ1ATv>1P&oEDxo4l`4sewsnG$8Kq9Qyf
zRiN}En}x1U6lACDI;w@)Em?%9ooeaU;t1npiC}08L##ilja)r`VsDoBxaDl0*gv|z
zd4C4syHBEcDJz^>@)b38>z6&Q<;Sd5(XCb3uGQdOt(NPqRr6hKRw8K+<o3N$GG$R7
zkbsnp-Yh6EGW=x}c&KA!b&^GqK;T+C|A!Q7$sTcP1KHv8O=%BVd;GZ@<3mb&oV4rh
zL++Ci3_PYO9nqNS0cFZ5oIvs#>%ybV+3HP`akM<5!&e;k7>>W_BtS#10I^)S;KHL(
zgr-$;zSz{Zc)W?~9Jf{WY+Y^as#OcO_Q!8K4Es)}ER0R7K($@Zeo?D>-ph7IT<%YC
zww%tinzRE%L+2v7H;LubYGL(S>1C#n;|phrSMAb?{9|$rn>xa&Azz_HQ}kj%=>HzU
z-kI^p&k>q%l`&HNWZfix-Xw(6wCef)YJk)&6loqp&_MN&b%WxkinykM{WT_o8&MAH
z8|#jAizGlt%E4;bj~Y6V-jL_+DPg{HFz?c}P2kZJ$Mr6=b&Y@R&Y=%E!X)RtbaUG0
z71oppycd0(Bsg5884}G_;;dZ`T)_1g03g#T2)Qaab{`lm&{IFbJ@aLDNyx>B4ekl;
z0SXo=5b)vdME|Ew=%Z!*SeCZ2uW-6W5SF{`v~6u4OrU$?%3#1|+j~)vZEd%!fD!Yc
z@A$P%?=$c6?Gp0p-)3<zjWH=%>o%GanOygZZ0)W)54GN}vZQ8@3~64&=!~P`?pesP
zw05&rNAd9Dt08R3iJ9414-8PJhAP7KZpuUI#?o?Ww)f$-x$D4)q=FZKd7tO_P>BQw
zr^J6TPKS*ROtH4{YiSB-N(1H{Vasm8%if0DS!Gy;9vE*kftgg-={dII(z|<a1gert
zb~2<<>tBQECaBtN+qFl{X<0I^0qN~M2kOtXUir4ih`GRj<EL%(BX$YK0q2%#37{bI
zQLTme?I7sgzufoEm#nvMeX7TInkv76?KLoZ0}2SyS?Jex5lFM~tL1lzn2jwsj_9+A
zebs$-KHqLNfl+xd)e*tr{BAZL8%6z>6mAqjm4b?rF5K^8M;gXO>tsV#i6s^iU7|I7
z3%taX3wI~m{I79k7(RE>+!WbeWx&L3Ox90~q|u@<=kZ}?T+PUiSVeqiYsm;J$XlC2
zazYeqh?L5(K~y#Y)=Zkdku+|VIU9#`Pn^m;7L`%mDTAUYgMmboaELb92VDw@hAc@n
zamWfwJj6tW4(jXKT$hGwNeUgOIGQeTfSt;;<DgCi`gUUKRzOtTp*Fhj8})MeAEs>I
z8%@Lun?IphT5?^MugMK!9G72s(Seif9oG~Vb9sv4!mK2_T;hx@50z|uwo4#cdVZ6}
z7*)b<vNRV8X_6E&i=2_!7^EHIc51qIaXeSzxXx(b!iH;ivY{1ulj5BQ=};BwePLiY
zbp#`oa#adwQbUg(F}pN>7FiHoq8vBdJ5TZNIH`$avLm&K)}#*1ST5!MF6CIRH4cgQ
zBa6=x*b&@OleEF~{6)~w-Sh*)Kocby5+u3A{tL;I{47}6_=|6lPg`Cdz|Wd57Y(BP
z+Ym7{Pk)u|A6x_1zh>L@VYq&<23t5DIgIighN-DDH0+&T@auF>FjLo;2m0ygT^7!H
zfyil%=M7M#bN~SX=I>B3*ydHbSE1yCrG-)2Kcn!()twEpW@2tZ6PaU98Ln(4{nTYp
z7R=TDd41msBmJfJMo!uB0U1|%g~Oo`9a2gxa+8G-ueVqgf@A>!v15Wsz$qXVkK5YH
zjzj_Mr7L@ICH?Z;GPb(6BbdpGQ$+0(0x{bHlM!>j9E0gqlBk8=RoCiD85P=4Ly6`^
zyZ|PF5%f(oU}YOrY=3;_9Cor<<lA-<X=>VbQ#<^j32<A@Lo|;(b`mIZJ$F?x;TS%4
zQEE&1sekHWY+$xJywTq~*4xV+wU{0dpoA~XqHiK;Y-C^nFru_DFi?b0o?`6o=;`4J
z0s#q1M8p{o01st-(v*dThK;@#a-vnM!ofuS9ghWo{RO@MUyVb?LH_010z!B9#a?XX
zpQBl6mha}!&1fc@ZN0ah;0%9C-W+3Y-x1bX8C&B*j55kVg0}r!y!Nlus<49aT>qoE
zmKTPuq0bFM=UFh3I;|pSE0;fqALk49J1nq3k`k#R47<QtL*w9?6i5K-ZldL%5zeK<
z3><>9X|+bEKz|R>_ejIqvNE-2uFj)-!|L-Wd14w@obwsk;`XIa%f;qglrO_m`^vph
zOH>X6dxyreQ3i~{R9p%$AX!L^^{%?QVGY~5x^W9YbNP4N&ikTiS}^Fsy;mp<mwg3M
z0@roIks_OQfiX?jagl9#lW_x*W7BCJ&ppOvIxfB)niA?as$ZlD;tYo7f!I%1fnLak
zE~aL{#Ga4GZiJ&|=xqXU+X1le7?_a3?{d2Bfyx^Z%J1Sn?eo$bFw*Z~$L@HUP}=PX
zUGPT34v_GUn0EHcz>d&#4#;)JMT;W0NmS^Vpq6WKH8EvAJpI#{D<j#L%!`Sp_(-^?
zAV>U~d?iSNe07F4qArj$0WT0WAurI9cby<!2%jKwiJc&$jh-m_cb(9Qpv6(s`O{bd
zsDVHMbwJPnd4K_sG@#|DBRd250>K0N06T#EpZlm^1^`sxECAv+7Xa=n4S)<n1b_kM
z2B3n*01(0I0I1-Y05qUd01|jF01;RlfD8c&0Q-si86Io8u|N`_LYSfEYv=8i#DdZ3
z^);<ojsQ^fMhW=lCr150b9lP>0*Em6;Ge1P0em}tQ=btF8~Bxhp2xoY_zdZ}g?Vj}
z_X-uS&kz@$i*fi@aILA#x>`39L40uhzrYhxQAC4AtD~g6PHT_#<PXN@adU){cI$3f
zQw`d*L*0*1k&!Rmg<MQ$R;{>WhE)(d*#pUOSihK8mQ^B7h@Cm$L(n8?p-N05U61OT
zg^{pa)?<ja)66@XAh0(JgzU}#;UNQwZ(VCuDS9yY$lB_EU$U8h3*F%mVi&V9G#n`p
zO4|rk8KI#kvYnh;Ud=HoCG-^xQ?hZ+%@D=9x{k`6I=4t`gz+u&sZDJ}#uQHCKn)7f
zkG~~1MF;MQl2BQXUg?x%pwW~T#gN^D=oEyX|FpRPU;rcl`1>1x;IUTa1L1?Jy8O)L
zZss=MNR}lBNi|+71RU@SlFvmLs*C(#O9V*~NQh7w6cn}O89oc?R1DD)dN?!?4h+;6
zQ7j?#V$%J36K)lXw^RR}tfP^ogT?uZ>p1tV2Lu`xG=2{aLNXu3{w7H99}ooV`4yp*
zVF+o15JEkO4FoXGgQ6+0xC)-CqwPaYOxg;kPq+G~4#bBpM0g+4jqjuud)6#D7E%o5
zDkGe&a%UqxSC0Jk+`x%@kYqBkBRASel3e80E463&iX=JDy`&z{C<q~A@dN!AA>~7m
zSH+aTZ+$Iu2ZLE>$VXG2?&uleoT=TUnawBLl~4SOG<ewxO&HsYukzE;KB0E%`qr$k
zjNc+Bg-GY(b^e`{y8cd;u6g|9Zx2Ag1#_N>Wg_ud3P!4{BWc?z?3|q|d?lnQFOo(+
zQt-YBB70%hOUyEE#*zKo(kQVXk-o_An~LPK^2JX+U*Mp`fP-=yTth^t%7uTFI6b1I
z#tGiIe$g&H4UU*Au>qIKaf~xvDiN2z_6i}NNj{)=r9$!<2r6|BAUQZ)_BLC>Z;NKe
z_qFx?c)skYojkB`h4#$*#NZh@g$ENL*^&RsxHa<8iFGQI-ZrcZj?>o{ne4ogn`eD!
zB)*6^HnPYqbMUNRpwr2BO6AB+v1{eE;%^rP-FAVTxB`}EyFXli^K%PAB*CA6{hldj
zRlCa9hF>Jom-~}2IJ|@1gMgE+uo`b`Gcqh8Wy3Gr0t^35ym(^le2EHf_?jPHP?tDT
zGr1E^ue?9xX;a2n@WI30ynyYbW#uKV6-maqVk8sOq&}+|NNge#FK=I8HZ)wi8W^aO
zI6qqCR@NeG=d%B@29h_=$5q{^<;vgb=`>Fxv84A2#{)ZNy9RIGe4R1xc#sv;>~H>d
zmsJ-w5*B;8P~qD0q$^I3|My;d{uM^;*!-2j6`+`Jeu{U9cW8VQCXI+-sR$t+M8Y?!
z#3L20YGj-;297`AX0+1VruB--REmntcR+y!U5($tq+<{pPWn{9IJ@r=T)^1olXhxm
z<t6P@7Xmk@N5(!mCXt?cgw4bMt|}h-B3(OJ&{Sr;y6*i%tNr$sGLdZ9q+(^d=N=-H
z#`8q0|Mt}qWA$*~KXH(mG5Bi2#?_&v$K*bK6he1wxAsy>-*lVpRW66UO#fPCFds@b
z3A4gPRxWl;WEpc_#=SoNdI?1ONB51OglS&}bWjKy)}=fkmPt^3I0ms9MY;4<$c7^P
zTr{6PSQ|?wJT{7RP!Us;-l!>(vqEjZXV<N;E>-+Xw!a1m;`H(8fi+9WzG>)mWv8f3
zD?N!taT=9a1G>SixU9n?7|S(lgR}K@J<7Jm)Ig&z?r*;3aaU1K37JT$z)7x1p2za(
z<$S4Bj8#mc6$f!ij=GD34p+~|%^s^3w-<U>VQRBnjpye~zFbkZzxt3>`_ZO0Tq-v!
zfd*ZnQZ=@m_6=47Va^~U-fvhlG&Fhs7G`+m1Hug($E-lZ=IJlxyA!}%d>&H<J0Xwj
zWFI8Bsy%ZQ%SRHf6LMP9XtLoV(x?%m=3{;Epj@t}vrrM(^<D=I&g8o-HWAmeBZ|1W
z9hPw8>7wWxnJvGGjBQn9r5%VcZ--O&`<UJujWHt8TdPYF*QDScbD$hK&1l~9bieq$
zy5z+i%+(|X>7&43icenOaYYvc3*V~PurQm^{OuWj4z9%%Njgh{#@|4Qhlx!Sq|`8)
z7$M9AD0??%+SkR1Znf#KV$umlRgszuQjRNW_;%57A`I&N55q3s?i~oY8+3S=o;K+3
zdz)AkUUOkdjHz3gBiG7!TZxl*em5bE1{lW6ZXP($t|v@UtqF}-d0z?pD<N0K1oL<+
zXy?)y4;0*B$AxhENOJ{Ajwp&Zp^}T*9>6>E%C`=T7wEm31ZjP=QF68OzFkGq&QKtT
z6f>h-a^~`0PNpBae${9maT_EEg1{(@yXb}D99&e-+1gSFong>~vb3KV{sZV2Qz^P1
z%9uT<SDS*zo_bDo>0RZg>B%fU9`a#^19f1|CcfKeFuzNdWy}-i`~5Qm5>8K9R!7x%
zN_}oAw%*TGbzQG)JCe5&)+x*S;#MnCD^S%kV$#-$gVtp{8(F$mGY(UuW(Tlr1gkUV
zq9*`P)CR2B={qq@^yfyXZtNm<A_QCSVf=#jodNtV_9OV4YchD=E|=lOC|$w=gS62?
z1knTH51jK$i!>NLVi-0)=BHMIE5L+orX=%1r4atPF`9x%S3Kp4cXcSDdlF(Ug_y?5
z#icF?n-ZlGW96TSet_V1fD?pSj&MPm)gRR1!y3oQ%q-MU4?XN)-$YnqXl6|4F5d13
zupmY~aEEPvxJ|dvwj!4_%em7BudI!NL71Mk&3fJSZkOro4w>s@_RRMuCFO7L&imWo
z&acL|={ElTvoc+d?(ZiwK}jR0{RK5sJymtOU8*La=-%J|BI`lGe;M_73<cOsfmx7;
zoyGK56c#XU?OQ1F-W8?5hN$w!iVv$J1@$JIOd<yJz?p$0WN5YPR$vz6Vbt&~H5w-Y
zxm-t|gMAy^yv(BLmFaKlKU}k3ur~O{?H0Y;CW7NxtybzDz4!+C@usw}HLXoq5`6NX
z9gNGpAz1LVb089>5y_r)BSLO22nHpfpj$Xlimh=LZuEyEz5g@PkP0dG0r1KT2MyFp
zJ|g!eWABi3K$!e>9!CtbWM`*)oJ$)|o$Z>65-J9BbFh=h30Wv0dq9!xAia#2-s(lD
z1PH??30aG4az-nIkPzpM0kDuX#FYrwp$?qE;jn!l`UU0l)s+p?-Cvc4Xk=j(SPB*h
zX#^@l!!*H~%vj>;xc23A+&QONZ2J0iD4(d`l=zC}r%;+tBARMHp3WGqyKdEij3i3j
zpJEH8G7fOt<nm_nXqEmxJO!SsjQD;?%j=EW+qROO42rWvTPCAjFiOHj#3D^K^Xj2h
zOpB}5nDr~+@Wy0TKp@qeC;bwe7Vw-xsqsX@W-&Yn?K8$CrKej&%^|KYLJyJ&DQ*iG
z`6|!uIbLbf{MP(?=Lf_U5md{a^#IF1>jqhr%Ku^Tso{0J_OafGUTAl`k>~iYY^oQ0
z5n`6-J~TFc+}45m_lBBA3~KcvWf~emcp(}>>m(SlI%L+yl4nc}F}t}n*Drdi)I(j$
zAkdt)M^xU*{*M{ZMdCf}u%VrB>b+|>j%(TrdUUsOr=&60zZFB;6Jr%pL?MRw&#4vA
zju4@$rZ{%iMZD=2OsH#Yvb1?##KpTn3anX)>Dc2(W$6*ht6>WoT$UQw1uCZk?qB)t
z6me5{u?HOl@iPie>IaXOS)1Mx^XPP09M((1@|fKPYSO#Oaei%nR(stGS~#Hu-(T;E
zab8d7%Z=;#0ds%wFV`P0J1Qs;Ev7kV0v!p{9rKr+bwV>P)5Q$zpWF@=sS$5Sb%-jK
z|L_vHwwk5O3P@&-8)R0c5)!Xp4o6#1aRseoF$p@^FKn>1n13Bl4)siuj+}&U)5g@f
zf1PA{a?!m#QBZx(UatlApwkv0xc9il)o{fESqujGqSK}~8kv0QP|}4+O?-dRBLr$N
z66NE|{#FL{fMLM?hphdTRqDd5XWSD3qH-$oR1FVXpfhgOOKKUEJ@6F7_m?)>v4FNp
zCHmiYDT?<fuqE)Rd%WIY!AX$FDH$On$iM;QDYIn0`LY>GxES5UHhLh0!b7NVn-QSz
z`yf2=YYzL1SU>;5CX~6%0#-KJFL~WLk{8)rK0$f#&puOHemJd@Uea(fEfENUA+xR!
z!3<hDEGV(ewG4))2_i82N#$AP%FrM?Cp8A&$h>HM4&@cb0ClKT1*t4>-iH?g-ZK<n
z7kwy=SHZfscziOTdV=EYae^-O_<FN3wJArlmaV}1Uy-%IXV#*XPql_HLQ2WKy{*5g
zWRQEidEWc!+^swqoj56+g-BHH(X*?i?k1fnd9k1fCU|V7l+6@Wdl%-W9`Pr&GDw#d
z^m<nDS*K3(s$%-?G1Gk{E*sp>OC?dk{CrYBUghR1pzw;=AFY)=E?6ca-LOb~>Vaqi
ztc{j&0=2Rdo08G}$HIs`qp-*X<xDi)<cPcaee1Z^8Lw>h-TtbhHNqeCES3Rpi*bmv
zX51quA-7CFCx83miOs;aYV*}%GyN?OuEc+?4Z`=sZWq}nxCkNj<(=IoccEL^M|5F@
ziZm5{9)=FPhrj0JkwT-<lI<AczSd^Mjq{GA{SJIn5Mx+%4O#!(*$1JB2~yzY-kCdN
zDvztfnTPkd2}80RMbI;1Rf+FK5XY9cwp=UO+|_5zdt4N=p0ufp;|M*l3_84a!xj6M
zLTcU8#QY5$YIvy_IY)-1Zpw;vrbnZmGE8*OI9DtdJf0z{iWrmFFajId)Y+R_d2l;M
zOpBok4!)WY7{_|9n`!A(EwQ7vt0^uedYxmlJ>1@};cFDWBC0CA7Qcx(5TuJw$Bpp0
zXX6mdhp$3zqVm;Cl5fZ&iW(stb(9iUQ%6U-orV-!&W8!rI23*?Px^Wm!vAy4{00I6
zKKfd~XO4cz@${k9wH_&pT=y$99?8YH<>~!a{UUw710-*DQbV^dZFSAzpVFsjXF)Zo
zB?)0rUij}1*bp-WD^oRIs%_N)Q-L&C7w*-mK-XRWqF$>gG@*`hTN6sXx0cf`z6bMm
zf38qmQTqw#Qk(<J+R036IUQEh&}jdv7h7=oetJ3v<NdCO7JqXE&d<sC?Ww~aV8P%)
zKQyFlu(NJK&g>MwL+F02%Q&qm@^Sk8TKD=C78h1OUt|^ceK)V$mFV(oo0U3c$BPn*
zX;v-?0WX5XN3x>s*NWY=G$1g%E>OI#zfBNy`#z>fNbk%kkET`*{pyu1(IIQ;$|%>?
zEOMv%$1Ns85n^ux847!&jO`g;)tu=o41rm>UeWmW|GfHql)EA>GKJB~XZXIG8xA@J
zmu1qjWhA*R&v>cr{!N9%%K8Upe2Ml8E~-ypQ!*5)P24UB>Pyx2DO%hu7JC)ozoG2D
zDTyX}5eL>&ZL9|sViqVXXDd=^7Aa#{KCxyYZv^D>$od!Xd^muG;)#Q(A(VK_CQ0;k
zW2V)57mfPPS?W*EriV3^`3A+f3;1!mo-`F+srOWVkMm(XCzBFQ#%ftwH3G*3S{__n
zg4oTw1ZI)%jml+(A*PVF&uYpp8xs^7(4U^`lyPQ{NTCx>0QKS!FT?u_p>4WynTVs`
zufzcnWs1pxKg|NzR7-85VQr(U>kHPTdJkv=4^J9cqyD5nuT^tg&q=JbXojg>qDe@d
zd{icVzxf$VD}8SINE<%i1+i0yTeYjLj(r-4P0s&XQAIq`T1?Tj?b?wCUqiGdb!R%B
z{xu<*0=|p4mL^(Nz=D}qir0TXr7qn~J^!2;jSN=NEw~M{tJyRhWg;jAauEdN^VM2g
z;w|G5fUmV=Ihc>sI=q{PBhSwcs`<d7gG1n88nP9<y%Fuk+DKO(HCaccS9o4A<Jxk%
zM(x69+*JE;orHTK3y;2?_L)OR*|=+$yS&4ab&D$oCza)8;aQ`kG>J<J4cVUDum=Qf
z$Cy*q=h7g0QXK3#*O@34ohmiQOV}^NYT}p`aB3pclIQSpyY~&#3FeL>^t~t-u9c6A
zb~!cOilml)7?b#5_dVkP_ZdK+zq~YF$#nFOsHy?~bd1dTv`Em$x$j~~65d}90sU$a
zJdIm#7`-A0|5e!i(45<F@KE3Xb?lPJE~*U|^iow{rml{+69RAuTb|xf?uQ&%ZwXg4
zh?~nk{@1amFQ;D4i7ds@ty6M2$xIswV{ZB+$hrp}pQ(NN+9NF!b!2=Q!(TTtAjla)
zLF}qaYYsx%cvt~u1xp~NrgO!@A-LU=h1n@O0c~;oPkj<^a&$$nLYFGRz)^i_Id<*3
z$5ipRPJuZJ3IfZNbmgqy1C{wPgF$poV>r_j@MpvFZV*|!?#iD(mmDjd(QN{Hc6XC<
z!#Wu5XsdWkaEfS^f0Aixu(zWIIQ^UV83LiyG0hFCp6b53jS3x1>n*@Xtf{UDA?esn
zf_4KCGW@fdy7;9rKksO(q+l%e2_WFHd3Pj)vwt~$ybVP<!(|hIN)H=KNC1RM%t+#x
zyGI5f7k@Ra-M@<?*-!{iBtsJLtDGTDn3flpUhE9;rc10~VfJ6rU1tn>;Wi~{xDzAe
z;EkYIk|V{%D%IJz9<P`l(owmicCE*3>4ckno{ij}getXp7Lgmr__?1n?Fql#BVX{8
z<gXKEFE(3W2fu#Ha<Q6Rm^XSqTrd1_tMzMw`QmkSeM5+%h#f`W0tj|f5ucM*Q_Mq)
zn$Lg(@KtSJ$tO$CEh%1$JG)!sI`KhXUBj5*ovuxS-ztol1@=u@SKFI+E@~6Xm?T^8
zINfM=oucnzJd?RKDm<k6{o3s%VoaCHhC&7O`to~<5oFFjxIAlqei4gJ?NoFvs0m${
zRL5J|y~(}+QKn!R%!soaq0#2|xqw#(H#!F3ev*zHLeT=+Y5IE}RnfkGA8(0RTj$|i
zC$n^aTvhC?y(G^Xp-Vw~8<TOq-l<*42^5U;a|@--!=!gS;;NA(%q3EADF-F0M3Wd7
zll>+Hp;R+m=eC4;zh0E7FEZ!x!k}w#=&XqW<?g;+>QhP7VP(Rn>x_~)VcZau_;_c)
zi#R`Z(4qB><j7{rR=q*6A{R(x*igPTMD-M+gA>DlUR3-gA1s3_3%4?9RzT1#i*iDp
z8Lm>iX5u8paNIMfz6J{k2QUe{@t^G5FJ!oRsDK?*HK6>(TR9(@i|0z^h3((CLvm!j
zP5hoSd5FY|%SpO9-0S<BG0~2+yd5t;%)-E>QClrKjcftC92Mrew^%+?)Ow%GbbBA?
z+v~J#X^Sd{?2`68Kb~}&Ye4>B55dT<g+aHH6W<>S63B%_58XW$rAK0Ed>(cn04>m!
zg#f;i3u1>$>%An+g$JMiOI=-a1=vX}lh907=QVoPqn8-%Q3vnUHko*qVG#B2ei=_r
z`VA&Zd1vSn**0e-FmN*UoX(D>GowY*=4QXLjU~IK-6*Q1og))r@wmC9Ki+p2+{)vk
z;NV8tBsVG+yP-rzg6Z>NV}n4KjQ>!;9oED_ZYg&or+6FQFC%6Tlrfm!hS;tZn0Noc
z<>0da85+%vZWz@=_0xm^;cw#rx0Y|aFWi&|l$?2jPuLz@n*XtpWL;qS*Y+-st!FsW
zwix$t7kwf|B#tVf;!zTj@pSUXppt3DD#CDzJqFK^Y!E>Xs7-sjEBdaepjNKbdlqB)
zgDgSx_!*8T<BbP<1zV2yZ*P6=)SXnNg1&>|`rXs;^?c=po=Oosfv*7jo6T^SAY@Qq
zMVnJArL&U`xV>yDguWpID_>-uJgmNr=vxh(o$%irb~U5Od1s2=^OG90tX%EWXcw;c
zcjqh!uo;Frk*zzJ?RmbO_9F^%Ss$t~!NBy>FViJVJkHv<e1W-<yNcCKi;)_Xvl}nZ
zQ@m58Btuh+O7JiV2RK@LlVHo3BsXZ8H$nL}F2(CBLs0L;u~uC3{TLa>_On*IYwEXa
z(rz)HL9deI>zSU?4UNY`60dgSM$NuAH~%Kv(yd;P1uz@x-1qmkDZZA{L%VEnLCzc}
z(tS5TaNQqr&cDb#mURKIVg?hm<_;?`B>rM|$Q$Tc!bPErT5pr!D3v>o_Ty*~gP53c
zG1*@W1k?0bzwu6whYQZ-zXI`^W2!ZcFR1;IgTilLN#CGkDSKa#z333sAL)RAAF&Qc
zqX*E3_h%L5bu@;IR4E-Qa0{f~iA9oxM>!uwDPvVILX7DB#~B{(=TK!}@f#SiK6J=r
zFA0;W<B#_EHE0XX2hZb_(Yom9_)=m0Wd(d+r$TW~4lnF8*X(ttpRu>r+Nzk{$aRD2
z&Nj!iPkg-Qxhj`u>fbxy67J;H&t`(wX$1gIGUfq<OB{1iE1SlO><Xp`_rW}>xb(-I
zUe-ot{xNWel;qAxwIEEz$T(mOf0%(ZXsOUU9N*6t)dlQU(MVLbKksCyj-PA7_?vj|
z{JQ3^$>3|~u>Mx+gx&JO8X2}@<6%s<q1ZZT@EIG#xP^HR_YOw_(EKMmf5n*10>dwb
zSrAd1)=*$K-Qdc5hw>!F#f&2Y@Md=v0|Pg`O2#og4X2*?{nB|mOvYsd7Io8~x0?LM
zr#41nY3mhg*cy%vkQ>VnVm><e1TcKLYRt!3jQy&afs_6`U!+vu*qlG=FmD15IPrcX
zX;pS#LC(Y%pMqON$Cb8}0q>HBzccH{Ozt|TDS$G0iwU>e9yC8cqqLWK9v47OSh>Yd
zq53>#G{UT|G>NE<lHfT&J%INzB>RKa)D~1cBRD*x^r9?3N6W`EYh=ln(M@{@zRS<@
z*}QdexQr`4F_;%NnO<*2c|U_IxBoWVSHH;hGYGIzHTu;t0~e6XCl}*v6iENDv_QyZ
zMNe7Is8|*e-nO$h*SZlsry@MHzZl1DZaz#4Nmo?j@fjvItbG0Ibfr>(_y+WE-qmMo
z;V>a`7|{6#uzyJ1>tPAQNDLqy=Fh%XrKB%vT(!ogzZ4NzG?Y?ut&+&%G<USc9N&^Z
z6~tM#u>KX8qN5imy(!CX+;7-GEg@<}l5jkQ3dbR4fb-`PxZSOPMIMs?@l0&0G#oDO
z1DFq!pkD-sMuqJuk~z&Xt88u8YWuc~z8P0HxVrN+cdZ&?Nw}S&ORfjCU41IM+ht!o
z^V&w#&CP0_q!&xR+1+w}0E^NbSlFGPX60Y>jOHUtMia?Ay!iRmUp!wlA%+Jjl_oc(
z>Kww>3HOVU^%iLt1+^9+Hr)f=m%-J*i;I=!92GOswogqNaaBODux+){oUpE(*1VDL
z(%;{+$b(3nj!YYwj34OF%JWxMpAaG^)jf8z>)q)|%ieiD9^Qb6^&Q%LedV&eB)_0k
zfx>OQ->K9V3`e)Hmo(-qk-%7D#;QrZgPgMc16F|<cf88R3ejjP+(QaZuUZ1`CdOV!
zp_Jhg>^ei$HUEZp;B6+Ho*t9N-<e%&&*$wY+Xzm#Y?Jm;D5}-NOM?BlBF|DPK`7>F
zlBqElQ`{~i`T{#_XcGcEh#1F6v~C`&7%l%T55f(b?}6v!VZy9`*bl*B`P8U|<J9<e
zni@cg&+~nz`g`OI!J!~m%4u9m>?Ihu^aWGYznHM9l{|!9wN_f!TZ<?9uV8-UgS6zW
zMTVz7Mc%Rx%tL2(!@YM)kX%d3_J^+EAL=a198aC^>6GeBaNdoiH!WfXoxi$iCg3x8
zdc(Q6C9)jXKJL5qP3;X_W1%taC|=e(W<ys4TO4sh-5>dQ1sPm*iyZJ8CbYHmHC7H=
z`MiI8(7Y#Ye0F_Gy!Grc99~tP=Uq-`Ixc>&tQxYd@W|>Arymj<!hY^J+WngCmRABP
zT!~XIa@gpuEwXEvem5$ddl8RhzPHb;vtRh2oItZMkQ#(zhT+q7%`vd%vZ2x-3`l#X
zU0rzW(@X`K;j=Gpy6|gQ^nH7|e^oCt(w*bz&}6B~h}Y^^o|qa}$kk$Lv@?2Kn=Qzx
zrRCvuP|v$CYw~3M<rQY5qV*f>tsJON&6baNVxG{77*_pzJS7dPDxM;Wm5w}YFe{rD
zbI&h4jGx$~F8m@?LR`GFq#`0Fsqz84&V0PnQyS)N`g%d5r}RqirL>y#!TkXu7=L2z
zmucuouT6fO1cdOPxKPGwl{?s-V3j+HE6hF#l#7l(hDh)vat8FZaVxd>z3|Qy3;psB
z4}%>1JYun2IMdgn_~>~+pumLcsVr<M#Bj^3>Cm<%lDB`R@?$_R27z4YHpQ3s1a*X)
zG4hbq1TY0(fBSmb<w&xuvY|f@jbgvFpNZDQ#9gaMlj<cUXyj0esfimVDSLf>`aXD3
zv18Sr3wR{U((sFzahHu|Ox>Cg<*9Z9oIs1@waMl<=j$-kBYbpJiSxeerA;(rJRi8p
zXIy!j=h)IE?G5}#e=lY~XX_i2yb(ze2K+7|W7U>N#h&|Rs_q%8pINME{HO|f;J$1H
zN+HA$NUpa&W#9sOHDLHRgzMT)t#S~3wUklox5%ybT+fQeepJ4<>b%yN9G7_mpqM5a
z-j<H);#-F96#h$z8Mbzo^^`2xa#V>K?eG&Att&8kei4Gk<WFh5B9ogy-0#sb@bdfp
zPSYUzUmtvT^kT>DQmo@nmzK0u3de{DYV*r13%+$JjNy}^aB~o`q4UWiVab**Lxi}V
zNBxfq-7C+=4Mj%?>NSs7pZ6^S3kM|IV&B67(-L>>FdCdUJ3?<QSDfFjs^ZSwS!P3W
zjkV{bG(4kYmh5klkSpoGEbj6(nXten)zrYHCd1`q_OYNUqd-eEG@QheE9R32!cr{Z
zwztD@*iTN^K%yt|ydU3Q#}L@?MwbzCzYpGCYfsyOe#eIyA8abC)Cn3d?lk)XNzvY*
z_jM;1ivgw3dBy)t5d7U|xZ5oEJ6r6PPhRjv>{N5hcPHn9>Y82N&guEneO*?2i?O60
z)$>jMi04y#w9I}{mp>ov`H5j3%tOKMc#MsA39;`PAJ0ApT5~nFcGq(}e1g5SjkojI
z@JpVRe8$}|8^%p^I60W6z%Cg{_*+?@ODzHnr;dv7Mp>~te%Jp`HYijG+6Cm^kuDt6
z-rATO^gynP7*dovq|Bk5k!4hA@|<e2vV1j{`&~z6*_18+o|3fYqwC?ez54LK^-^n#
z+K>6^U4d&KEhQmLV8U8u{y@o-W2Fx7QVv4zr>4jS$f1isfQ6HuK(l<vu_k;YI-@}h
zr0XPtb^IT#5=L#r5!O{QqZaMv2D@|0khb+bhOmVM#nqeKtL^DpwE0gkD!5LjkOl0l
z?exi*-@R9s&Pr`gw@bAIwO2ET&~)Il-<{<q|DFk9k<-x=2hZrg2aUjH-k3xZ1_-H}
zl<+a>K?Z(~4mp@OzO_bcu(RwjR}tH{oV_|BSK<c+%iqNo{<a=vvS#pUIBE)UhKSYb
zyqQd)P^i}VIBG!pJnqqCHa)nlH;#?Nb+wsTF)k99&3k&=<52VcIDIRLN{h~GwHf8H
zX2{lQa)9#moO^{rnNsjN_3``iq(`s^1TesdI#O$h<X+lX%!}xwb{RdGW;p>0_R4?|
zz1}^=^)4XO68hO<6~tLoJfAO&rKivKKc@d(l6}hv;gq|9Ld?owoa*DIigC<LGe!9M
z<>?Lf&AAo2ml6<oMDvS()(4D?g3-sMrDv-_<CKOW+6}S7(Qg?@8K^{W25ujcMVD?j
zE^jMqjLMzjdiK`Fk9^F~AF}=mlhvp?J7031PG)W49awGZXPbn%3Y;4ldXQSqSN~-s
zeaw5en6>dm)N72qgj(hht*;uVB5b90ShmvtI*g=OkQ^lBg(M)}wu>o?R%qN-)2h^p
z4>t&jjDj;FpjoYBe4tBnJew7F;`;{UhRgbO;PJNgwN;5>l=7}nhrG#C?4B23%;dG)
zDtr6{j@9IKk^ak@b&KJG?Z9Jqb=<sR{lL5#m(%LiKw|4=z`MKMjlaWO%}j0nV(GJt
zgAH`(nAJ8xjjUcS=qcOZ_kh?k!wIdk7ZRy=omlivgNV{aP!^0ltU+2_b~TKD)6B*A
zTl9L3T9<jP31_oLH`E#gSzn;=W1?6EszTV-Lp`P{=~VCdM0ap|y!clTRH=AI^4yAi
z=0Es3t5(6jcVH<}!@hR+7*-5&a{>>X&Q&0P`+gCqpg43Yo$g9Cr@n}JjmgP<2{sMy
zWeJ$1SfkuYQ`3uF->1Lngh|<nxVFsk7Cd35rO<@r5*fEwog3Z^pEoNJY&h<<XPaHm
zgt!|W5(?%!POP?D!NV=vrS2RxCH^&;UZ9PR;AR9|@(9_SQV6(YIqEhqUfZpF`u2KT
zE%O_W3<}xn1>YBw4{4hnjKJ##FH>?4Yq2mZ_ZOP&hy7(P_ZiMBNix>#p89uYAFx4~
znAPCnACcaJH_(z!s<BP2YHfAm5ks4l^^76#H<Z$EHw=1)SNy>YW^gonhk;{2xjBv!
z$viX%wAAPE#rN=1ZQD(lK~**A5wYbAr&mSx?_<T9>uw0SGp&nPU0}}Ys)gr!JYjJ5
z^C{V|m20<$hDBw?vI^x`j1Nsiji;x6cxJ=F=muR{n^<1$OtSH@(lSKoYJPC}VJYbh
zR&up_q^BZO;HcrMN+V@NHwgif@)@%`!6=27Tenk-VaM5xCFGn?hdG1-i$eg&Fw{Q~
z)(gpRa4%rW9=X%olY3ouVjDrFokmZy{RX_h=;qYX$8vr)77R^oWfg3}ai#@GY(E68
zlnsMNpd69PuT~X{!fWNKkINIystZjm78Q4Cln2{~b_~o|XrDCT-J)qg>RihIIH=H6
zkmCD7h-|NO5jTcznV0yht+TPL!CEDB#OsvjyXO6x8G~@CU2yE9DLNO6+1yyL`qNM&
zm&64(pSdh1_#&uOj1&otyrLS9Mo%I4OA8X4$Pp>Vp_%+0&6EStL)9zGMqM5zS)m%*
zR<4IQcK;TBW<e<$Xqw&%O{t(CiA>c+sIS&;lAy!U_bYf3Gjr+h>5baz-Bd&tyIgji
zUzhrLfo(%r%Z_seOTLTtEe1_^=Dk`r`}q@lay1q$MJ|tmf3>$FuuH!?WqKu;=iT&R
zK+`FgSBhS*OSG8xsP>%2DRP$thoL>}V5q`X5e8v#e9A$*6Kd6r%p)|^;?okVA|s2j
z8RPAZP9Nc2yP(7KQYUY>3CO-acmxC3w(;D&uFA^Q5w^aeI6N1Ifv8h8J=CbcHLZue
zOd1(p9h+v`LdFW&AGxkzsdIDrNk3N)m0X$lp##(+7HskgB&Pc8DW_Z}?(s%w@v=y@
z?}kOwGovl0r{x>v$0vzpWR|e5iM2oEJWh!N7sN#M%&<-3&cPIq#roH&K3b99j+)tc
zbej+*zgo)l*OhLzt~{^tblZw=yfzos79|cxQFz3MenI1XoQ;c6ELXf8%`6`shEb47
zxCz-=do|!c|7_2;bY#&P`MP&xVW!`RWSE7vdTn4vfSg`GAmGige0(fxk~wmZOUPAq
z@7u#8cY6BuY0O_TTSf7$l?Y}VGkZb)y1q^<R{DFgAt#{(F9x1}&PD>qGZUALuhPz1
z=&gZNU@+LLcOZY8@pnnpg5u~Li5plF76p<&KL2M8vQ@ak`o$ZV24i4hk{T{SPYcjb
zyr=OE=kGD1zAa4aq4!N3kPwLbCs|UnGpYVJ&`h(+%+yMynYsx?JBQlUbX-}}Z*clj
zdLN28@}mGfOHRjBtc;y7LaZ>Ffmdi=KowEIpHCg}!P${`xCG#+!?4HfP&mDAj{9~6
zr!D%nP}^zJe;&3zEKX?;)KAPlK%Cw*Tfai^sHb&M;udO|7MU0+BNmc0TQ*c2AD)N%
z5}Bd9g52dwjhHU^t31<t(k62WP_bn=2)D!zY9W#e-ApUp0V&XBgEv2jlK!<jyJ#JI
zJvnK)4CB1sGM@5Y{eH5Lnrbb;-KBIY;APU2?N=lLXSVg1E;?;W#$JfFN*KWBtq;;0
z8waA;PQ^nA-<<p<tX6kvRRyf~C+yOM3xLT=Yj{xS>{aI+OGEul#|y;Zcm>uFo71SN
zJjitjt?ed{0nlxA`la)&?KtIDjsf5?$01EjxyZh2657KhoQafA!~b^)CR|)O@|@Y$
zpL9z(;Jl2CwIO5E#b*|kC$u77*=PGTxJJYgK3D2I!it4;3J0Y=iCR;9Ao`iA*(Nua
zX@YV=D$w~fFJSBCZh2l^^$&}QxNN`9&}44?{CxR(wMA^7{&MR3Wwl;jrlWcMY{`j!
z{=hHl9mvoa#8;QS2e=QEh4oJthR{?Dx5J{oUR~gCP3Pw~kopI~4r1Z+MA>#`ow~uV
zRs!ZIj8e(BcCvYplL<5z>Q^av7r)~;bIW-_<ra?%5SZpd2vi7DOqi#&;LBTeexCWA
z=;%A19hjye5rxiAQV!m&kt}~@(+G$)QyOcsZeaDrasE9C-d-cCnDhV(u?3P+Lts-F
z79++Z(obj<g}Lh!_ZMnr9LL{&F;EaEWN)iLRpJcJG8+XhU2|G(Flym}6*Iz(H(KMu
z^zRyRz@jb*MTz0o1AOoelFNDrz;yQ)o4H6d=*>49d}0I>g3OMT$t2|eB5Ne{|C#}g
z25`*WUTk(XV;gn(8vSOIVO&f(a};ZFf>ybs`W^JT;O{Y76DDFXKD^N(N*r2ki+1&M
zi>_ZMuFh@rKhtVm8t?yY1rsoU1V91q97~D55Mg2e9tdw@bB0Ps^)Hy+LUz;Jq*)>6
zVPdd;S}a)nJ^_d#c29*H+s&TnxyP6@T+#aF_=(6c%x$imPQ<5?!<iwMrRzToAICv`
z<`CWI&D4wBzd00N;x55>{DBFvno)t1l3ZAm)fNj`syc&39LnogoEF<N8wz2dkFKmM
zBxciUbxHuauf}=nm8$7mc5A02^pknczaE%Jcw0E@Jh_dzaIaXrWUkhGKX8@1b2@9W
zqc#6_sI^!QN82QB<et*^JMhs6XQ_AWs-QcTv*$C>es8x8g$Il092RfUnKE2UhRtw*
z8zVuNi=vj*-k@$|5v`BZn679wBSuh!#YbdqWM~nAbu+86k!M|IVOd!<ya!_$2N52k
zvf>VoxC6-=IK^#9ihX@2o==*Kc*)krEEl_4;d{Zbj&r%M)q2JAv~36-;i^JNEgX6r
zY=hHv5s%D@W6IuMa<OhGhdmpp=Vuzd5`}*?lF<uq{a6mHnm3--6Dfa~ERE4_F7Tec
z4ue4{%XvEsxNrJh9#r;dJyS3`nOMo^bku@FyLi1ai80?0cx1xHSLZiLUzL!e%hC5S
z71reh<?G<9@a=bNn5LYyX?N0_nn5yJ><7Xr84k(%4A2Gs73y*F=L{@&y#T}0maA@9
zt-c%yu|EiaPjs>hyG&2k;_WRDvUNwE4H6C3xs5#@<)+i6(FXr2&E$?HJ|<$iTjZX$
zne(`Ocp79CqqvS1O^fMy{260=`mb|WljZFh`_HdZdF~o{qORAghddZRk+!~%z9I_O
zsmL~c=iz**A!qj5lQcH>y&X$JAze(0mNb7LDMH!II}c?L!@ZM~hH!ChZ8O)OZw~0`
zUnv!?ze5^NLU#H-67Wt-c%8O4^ZtoW1l4p-&f61{uHvoDI`=9vBaFCx5{QEycyMxT
zlE8GmBloNDK7H+~m~+zDh@m76e{kytW6Tj-<*30mCp(X-iif2->863eJ##YA;9r9c
zVV%~SC~>ud@nn~&#cUCJ9fz+2NuEZ5Z4lp%)W=VNLfIkp-X@i+=3Dsv&UA6NOMt4&
zL||&w>tEVS;6cv}9KaR=mYo%o8HTazCcmMUdNq)&XYP(w?2jE4Ww#pQYMK7@1zSO(
za4qDg`!NN2oiB6Q!xst67-1E0&%<vrLIQS8pWLLTs_Lj|FJ3GA=^a5Xg?~TLcNOIo
zWTPt>Xp|edMDtiz6l=EaQw?I&;5&g@5Cxbm3)`?XN|~7j2L5#vyYUyxaJmYymTS{!
zNi=hLUAPNzvfII?!2~-mOOajSJ_K|%yTOTH`g>MBkn01Ds*9kz<1ctSTy3OO25pJ&
z(^oa&$c+cRBuZ+@a!9;LL435>6s0xW?zd-8R=vQP4UwcT{sHRv+g=5ReR5D&hG4tz
zg*;sEJF!<8p$1eaYeG0SSS)Jy8-+=oFCly{30>5(x|a#4@R!JdN%JoIa%srcU?F(5
zMiVjeG1pPrX@)$ZGpuQEb~^P2thqu@<I~y4a#Xkfp3nS)^7N_i+QHw}*RhtUqfeKp
zEhC2<lJ{g19^hg}=PHeuL0f8i4^!-dIQ#1{JX}0as_N5dEKC=U%&+hxi_lFfeqBq5
zk*I&_C7av;28=0LxMWSQ%DN4;T?@NrvF4P`KXzY2(~*5usFiUGEDGeKS8nA)=p&Sa
zsFobQb#8QYedH8}+FxK`;(r~gb4XhVvBuEq+gmarhUvqLayNA$n+k$)U;4&*fxGhQ
zjx~mWiS(v3SZNsCm#lr?x}TgUqoXsMn3<D**Pu|iT_)z)*DQAl1zkOY#>#b5$t|1`
zK{ov6KywwFfV@Ch5IakBQKs(+a7XH4i>mzm{0l}leFZ@=yJ=RnVwy}ob(Pmd#8vT@
zu=<(EK^iQ&s3?86>?U8e%VH)%lQ)RXJFX?&V4`XTH)*)ZXW?9rB(M}?LZ#nmOlP2b
z>hilU2*=S&VvL+OKg!&xu3T@6e=RZ~28YHTkzOF;c}Ucrfe-I;oLd^fp_QKBeAPN6
z%iEXUYj@68=MTtb%2+9A53+}|s;fYbH189=q`Rjk#hpR03y=A2Cm)V;59;(m5rzXD
zuh}w_Kv!(`uP+^%XX9!+I%}zTLijQaCp}%yCy(0cRm_oba;oeYa`e<Q&!sk0h^Q(S
ziFP_FZiA6Du$%pH2WG&}VcVbiy+wVA6rYjYxOLuD`7m6a>K~+{qw;k*$IDZZ>|Qqo
z26tQNEh`B_jViVam`@#D3!FcToM*dZe80GE+k1jWwTxQN;oU$~o{><)2s8PN>DXkn
zYi=qXXM-7!Oq1LX$7Lx<-iC9rgsI~&oi`Qupt4ARtMU({+n|!`?<l<XzV}KPCw4;+
z$)pQvH9|MT!}fxfB6sbb8Qi31;H|RueYG&$KCO@u&pL9BL_5ED+8Xdm#cv@WN64xn
z80FsF&jh+P1{-#kJgr`?&uP0<WXKPRwWjA`K^7I?O2fr(C=l<qjD?Gw(|^HsD}Ahb
zWnZ~8B&uHE@{T|d()3kLE@NeBzQO&oI`IFusTsEn53_+k{5W9nG_Yfyt7wdX-i79^
zOay9?JGr+C0?t%@xu=xmrew^)LShtavRhXQi9EsV6*oVzXBY~;m2S%GpeflH%fPaK
zV)rBsq1~X0{F-qh!rYy$V%EcxZ`*&7@nG-OZ+(9>xjwN1FE>y|_V=9Wn$BOg=(vtO
zwUeJN@Czk?2w_=H_Z>2b<a9fsc1nvUCC;CIG!b92`uiPawHSg-rkIHorb|b&yHnLX
zz~B#Pqo!?H1J5cP)t$k$Gtw1#voZBLlqpYv*7vohh%fxprZ!BdSb%Ud?@)J{xx+T`
z5T97jy`s_c+2Y*C^0&s9RLojYY4*n%O+!o=IxIB7=jBU6#)FVS>%hd!jZ-O3BZECE
z$#{@cpsf~Sff~-(WAJr)t|xThmiD~bf@6pQFJ0NJ7<ZA5q0Q8(*7HM}{v2PW`u_fU
zmLu<G^~=e&Z7-w=Du=*h$stq=ezv@?wYWJhX|Exhq{}^*aG_N~*w)vyH7xO}yveFO
zTeHe#+g@EGp7*Le?|OuPtWDr1k$8cCRdPpznn5$ML<+HlYy!!XrwqEybOO=0@i#sV
zRvk>*Nkf!WlY|`qXlql})vvXCiv{C=AhmYo*sx%*<2}PTY|=YAx{<HvGz$wE7p+*R
zMf&v!GoIP+d+AsMTlz5YDM}vmWRk1bPU%Sp%NV5rTDYPuug6L`*{CPRrnfzqDM|!%
zQ(wMLig}7s0~+jh&q1zaU_p4P=3{qbVYZ^`m6!m7+lRs(L3NekyX?|v0?_tI=WmM5
z^y3F3bf9?1QBZElXUg$lH62(6nim_YtPr<ofGw6bYJGrU(%k<AKMlb0f5{Ok3j862
zKlw4VlJ?1uF3e$Q#hk*2MaV=8cGfg*T>jPFXOClpc0cfg9NGN#@-1Y?lBGMY<#v^-
z)#@f=t+%&qSh|1Z=B@AP=S@4)vf*Ujd16$ZVls(_xzBc<LbX=2tn<W}u>U9g6HAd{
zhfm;VNXG5=!^)V5(zCrN)IGl!Rj~=hT2m41=>Kys3a|dxUKC*x1vXj>_&@-(_HZeo
z6${7c{q%8$q~hZYeT!5tUp^`ZmXO^fTkI@|w8dcxrlje~`1b98rtb%0@1N=Nc?N8+
zu3o(aZ_&&XRzRrBIR1fT;n}uFwi;ToT}2F<9*N$cxL`(}jSW@Ni|C&(jv}6mqxex)
z8Z(zYzR+UR3s$<>sB=HMuuW}3==(wKQs)%xTJ-vn>m;w&h?dd#3ckDJ)k-s`PFYhh
zsQ!>)(VTM)8P%7hcrZf*^z;a)L$yGCk=kN8E#;`q{gRGF8#;+4!bFqmR?_IRMX&Q9
zRVcP3bXo|WWOd#V-fYN(xgWf-#vzsdwyvqYR_%m3QvCZ;;G%kOPMx%R<2&_>?$FHm
zYIRZ?#&_dZCkcQYVEooTk1(_%%35JTmIvLSxJ8S0ULhg}=&?Vr867|h$V%rRGROgv
zdq&$BPr@Mv#&|rQBD7**En06B3*eIWB}F%kCi(mQqAN!yMl)_`o6gZ(aDLIjZn#vK
z2dj(>IHzG%`MePDC(bpAN!7(G*Qb<ZvSZAQ&2KN;{@R#zZ_Ho+S#FP%_-eJxty{Kk
zNg9q%uQz?<)Ttw1%gh`zbn0Z<s%6XQs#URn<HpT_K;zQCg|!ZXNEohqxt{vv#bGTT
zoz2jSYjjAUmn%Ns??)<=L?Y#KJ8dMI-kc>s<Ez3n!xAGZ&mQb)4DlCN{@6kMs$rWM
z1qWYWx|Q6#Wg6ZoB`YPodQ!DoSgq#V>65o_U7mI2+dZN6wuE=AQ=?hUemquhLKc!E
z%EABD$T<MX5kz75_1w*#v5alowrv$-+cxJmc2bOO+fF%V`N|9@Z{O?c8*N=mhyD6*
zyxF(Cjb9|eK>%$B1Rcf}*_gC>PQOFDqaUX^J#p?iJ#kG??>uowh|9Jg6QsSm7RbEN
zZy|Hks-;eNhNM;vtn(si9V5=QSE$;58JXk66ml4$puxPKruC%QN?WU4Ci;Z6X0;Jr
zL~_zAS@VG(5H!C^*ODwK26O+*@Aq65Uh%;No=J&f3NCh_cUOzpZ~GH*y=M{rd0M1f
z9^Y4|z`iP|+m71C)<cTQ*@)G6ELcW4kKu3Yj~ubskM(*@{$n#=Yx8buGxJQyw0VCw
zlL^`1o!C=$(o3qZm4|Y)TiO<Wiuw?A97;+j$4NImLp($}g}*$<VGOwFp_pZ(8!9>q
zk3=o07_u?h%s>*1g<GP&`u}=WHb;ySXCYmd#U(d-LfZYU7;~yassfdsBd!CgvI85n
zvy$xj9o0^?e@eabqGyO44>~grZNMTAI@?BPGfn+lP5nCpAik4IHEy9fomA|$Qo2-G
z383Az&@-SV(e|@VKBmo0NPo1@hFQx)J6X~@k$yofti~-g8^>D6-cl63+A@0IIC?rd
zC2(2xfTEh}$Z<BQCi^mSi8%BO@yvrR8HYCDTE28cMMvQ|wHC=!6>Lm4F&vBg)Kl`W
zp_&@WUVIVtUD=ZR?51ak6GYo{Qz#B?z&;P{h>gx>np${Jy&F<VrJ4H)RmZf`ScTm&
ze1LR2q<zq~9}sK34_4lbCFRnfXmz2WLL6ly;8w0=V-pk`E%V!@ThYquZ<z%jj4hI<
z&|kGJ2kyWEh&bx2{{B=g&IWb=R*X4HAm2e|gLae+$OpkE@c*57Jo*X<I{XldV@q5t
zjYlbP(<R(AkB8sQma?+?J7TGig#|`-H-LDd=i-0Y$viN^%!Q!SNmpvj1JKSX+6Oag
z5o`TYt+K!}WM5j84YRacS!IE>NZ-^SFilyY3i{KSe21B$*qfu+{Wql0qGu5<$@hur
zndrl#y9glY*g^4RX>_}Sn=Tqh*=U*{o1oZex8L%Uri_))-x5LN-wyxF_Y<j(LC)5z
zvvmPhu(Iyft2>NAFPd8KRt{TP{VlPoZG1D16o$$AiUP!XB~%7xhDr|Ol41A<93U^Z
z0001Z+Fi>53Iah81HpBY&g}mGqdvibQ%@`iG(gr`kJ<AauT@oo&O<U~iLa}71|%Zv
zd`uzB77RfZwXYU5pi%^(;x;r!QY^`&n@y7IbT)Fjs%)zz3zBp6ubelAMsD0R`0)bt
zTm@PH0RR910wWR})X*hg4?Oh%83+IX0002Q@DVNm0002h0aDERJpI)PvIuhk000R9
z0ssI20001Z+GAj3U|`Sr$HTzDx%!vQKTXa}KoL~%7660g1~~wD+HBGT&>b-phT-=n
zCtKULZQHhO+qP}nw%uW^aR;@HQL#N2^}jRE#M#~Cv$N?;<OzHaGeziTW{^U*l2$g-
z$i1Vb>rC-LX>yr63^%vPZjX~vs*=ZKCzoBpa?^_;=7#@J=QmMXRVkG(Qr1_ERAJRv
z)id1~YU)y15|dZ<F<w&APZE(XT24y2LH;+FgTAgjRa|cR%1G5-+k<K7*3sAWWU7oK
zvrDV}P3arW>eyN}Rp%E8mDOEwEe+*eES=YY9<GM}&HF?WmkM#7|4r^w)>NRk?cu-D
zGOk@rW;-3sF^Wn#^2h`_NOt|+@v0SN%oAeEN{Y#3nwdhhHaYy+`b{0Q-rswqb0^VU
z#!@)6ZXAVebS+bm$(+-5lV~9sG42LQB`vWei~m*2ie?4bO)Pe6nZw1St?9-nIYCFc
zMmINvD$<x3CN{%d6586&wDYRdM89#0uB{-Q853+v4vyG7jFGxDwopjrFo*QMGBDXb
zr=eNEOjClU7UtQV4AHf9+-?SV0a|z~bbTUfM4L){DMb-Cfd=w{!LA@vy^EBQIh2>V
zlnVZjjHaEb&ZuaYX&tQywIqiA`$mS^yY$yJi#$iufKTthd;PE6G_t)IWCu{+_NI~f
ztos#WyqQUF)0^6MD)B574P~W0(_B*GyM)A!b~4QP6jJk4C6z-JRi#upl`qm?!9pcf
zRFzWYRK7@G1<f(RT)LY6gJ7Pbr1=VF>kpbOe`hdXS}s&8e&y<4nyJ48Go`tSQuc6$
z{$#5AtAgjL<s>!pSAPDb+4+lR=g0p40RSvs)WHCF+C9MoaOF?{0KjkCHsa)==HP7G
zwr$(CZQHhO+xB(TU6Dvsq3|ft7IB7nqa;^yP;yJElBP;qNGC|QNzY0@$W*ervN5v9
z@*47`3caF-VwsXqj#bWAu2!B_eo@&~z0`hn1NB`^rlzmvsOGP>iFTRxkoJczSJzm#
zN%uitN<TyY(@@25((u)oW^7^HVUn1Tsf}r(X{G7B>6_VT=FMv@W=j*xK`UkLZT)7;
zv30W@wEeZ)?E~#+91cfs$6aUGxxpoKm3H-Uop#&ZHQbZjSKV(syr+|At=Hh~;JxZg
z_to(I@Du*?fxJMeK-*w2m>cXF+!wNj280%bK8Hi$+;IEw!tm4Z$A~VHh~!5WNA=NC
z(Je7etaCg&zAXMBQ6aH0aW+{k`IR7vhQtzL9kG+RM@q>s$&wjlD{?$JpWIE}AYW4=
zsy{W2meJMeFU(Np1}kUFv&T3!*O)uNz2)oh2l=b~Oa8ZD5+Xu|P^MrN;h=Cscm*WD
z20{RVJWv(10fWJKung=4SHJ`C32I;%ro)o3Dr^G>!&z_{+zT(mS4fPUD1tIkQB)gs
zLL<;*v<e+S*U@A21#58xr{fa1GH!_n;Awav-i-JC2WWhd;s5{u0RR91?f{Pf764BG
z1pom6000004gdfG00IO61^@wg+EvaqLIVL11<;2(HRV=RxJ!e(TZa?FHpJ6&8jium
zka)&@KDtG<X=(4l4VAdXkef=}YEZ5cw>8w;8{!VbJ}YsjAzzhv(1ma7LP<p_2{CaQ
zfhiLvO$uxag<@Vs1a`f9G$yd>)vLf+Z7W^MBGMvKaw49LITLyi$_NG4yt?=3#hHkh
zY$;E<5|NUY5PC2DA2Vs%yyY62`KDW=^;@Oy8A(gVjmwvK%)Ml(9~UtuloB)URl=i)
zcWDu6;|}avx9P~aO{1mX6Tc6XG}-`o+GAj50E7Qo3@Hp)001f<0nq?>+C9xf+5%7%
z2H<<MZT+@w8)2NMO)@5F1z{r@%V;U>Abe@^KF6mf+N+U0(x4K?9_iBk4U<Yjcza#O
z>&5P}3K4TrW0h0x+ciY&r2p^IjEJ*l(yPRXxR1x%1|=fi$<C@yiim%*Gusuoes7N_
z8^Xms(cSU3UXDn7wy~t2)FfZG2a~^~A(e3VYGnB%6VSakYDyYwIFvNr$b+zwCK^x1
zam@#E;K(>`*g*&sK@|+ak`Wug2Xa8VG+qlWAw|>&OH1QnA1Hzz7=kCv9j#zv%m~!a
GP<Q~i*k>L9

diff --git a/static/fonts/roboto-v18-latin-900.woff2 b/static/fonts/roboto-v18-latin-900.woff2
deleted file mode 100644
index 442456790e7312660fe645f38d2db22a2be2d7be..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15340
zcmV<II}^lrPew8T0RR9106Xje5&!@I0E%P)06T^N0RR9100000000000000000000
z0000QWE+`!9D_;*U;u_p2wDk)JP`~Efz(`qyI>20UH}q-cmXy7Bm;*w1Rw>1d<P&5
zf;bz|dL``GivrFA2vMwi=fQCuoCiim#Jy`|AlNtnDEk{^|NkkuAw#eo&{>B{L4^$&
za)cm>1V>0XMu!5;_1@ubSB>t_A`~(v#S4`ZGCZ+_D?|0$*l>r;<6@xtQ$rN!{Qm5m
zAC^iTn#a<q=-hhnErs1t{<tGHCNX+dWfqq&T;B2wY#aHLoV+~z=il@0IdkUT4@G{l
zT|zB@3PJ~WS*g;JZ-)4}{k;`YgN-Udsz#2gF>1kp0fP+~(Ji51P$eMZ#2_rdE<iD;
zFutIEi~pVWpI28`>Xu~7bv$Ex#`9j^QVJ`Tu6F_H5AP<Zq6Dx2niJL^LBSuv@Xx=u
zD?=FR0`w@LPNe<Uu(Am-{eH~~Fat`dJJL>djPp0e%i*xO-d(GfZQrFx9H^SD*IQ`N
zvqwxb#H0`g89yoA_v(-iW9~?&wX-tByEB%3dF-eJ?6?E!77V#lSV?@qhG|w#CnZJm
zMCDia)z=7el)F4&f%hM-Y0|on@a;A`MI;oeyUPGo<s@ngKnaiX2w%1Q&F%jg@{&?A
z5|qb^?pIR>{r791c6#qp!Y5%lAztzUD!)$5|NQ2LXaWvj0Km8i8Djw@fg+IWQxP(e
zF*ZWD`2TONGJUsjZB<);e5g!G_zTw1GXCV7gw+q|PghY)Pcbdi^yut@jC1dQIHxF(
z0oEepd^RqXk2X@2`XJH&O)cq+w0cjneRnCf0(QFqZCH3%0Q&l4t;RDdBbO`kcJGzi
z?bJqK>smXldQleL3+fG)igGNl6@r3UZvfJunE2Oc(rCGtqK+$%=<oWvPt7w~<ErSg
zDOr>_2qEj_tnu4rY*_k;wi&b=tzY&tzkO?dbq{+WLy#3n0(z<fMo|0b-wzD0gRDRt
z1%hPC1SwPqQmh!HOc_X}N|0)YK)UpT8MgxhfdS?K7JvW+BohRfMUNH4F1xvT0jZNS
zlVX6>=}GKpAaxEaB@ReI09=JGIs4S4IKT~98zC6ez?)}yqu>5r%Yi!Iz4M}0@byFe
zl&Jb&u?bkr$RXy%lA#ke5gaMWAJ<1sIz@l{jDP8toKLA*)hc~!fIE;>=W7kex<uJ)
z&6rR1&xk}d=b(ymzk$TJBGmsD0fi4gjDu9EQKvzd9vnkPjG4kSXUU2+7esD6kx@{2
z^W{hG{V@bNqR~;ujGHj&lFP2R>Y6FjW?XmIJ@-BE&@=Picx%C;CCgT<TC;5j#Izd_
z@UYCOuq5UgF%V4L^q}XH6R98XU^aBpV+zZ$cbwZoNN~XwDzsaBw~F2-zt%C5c&IH+
zhU1|b=|narxx{6za5a72J1=<2D_%33&b4KpH@szmC6-xXm9=!eO&e^om2S6g=ODzt
z>DKE$0OLzg;ZzREwD<5WGjE$^3!Wh$1RjN*3s2td6WkEp;N3O;Jr!GwoZ=K_udHE}
zbwLn-WlLCba1jdz2*J;m3r0SF1&U6en0X%Ym?u1)5eo&4uf}t{2<O%jfD5kB%DmxF
zh)19`5=S|f&b4lyH@r<2%9_7L$MJD)8v(fB3XMa|G0z*`vT$bvA}n79{0Xy1F4Pv6
zLc)>_%Z3$JS(_ONT?rAII8JjpL$=vwI|EO6Ix~iI#}RPBHBw7JGw1sx!5^PPTbLu}
zdBa;4(xnnCv%)HC4tYO5oKk1__L+b0!3ng=wq0wN2t(|X6gNQ%9}WuQZBg7Ef;|>E
z5asCIEZ<NT_W0OF<n&N^=T2o!t8B`No(t(yrBzV>M~DQ#)*b|ad{l5UBosqLOx|B=
zS$~1B&HGz}U8j248oSv>v&>!Nb5c**Z4Wa)>T?xEt>zzu3eOy4{yF~ZU+3u;^ao;2
zUu**V9J{wu4*J~sX{`bP%T)Z;S^TqaZZF6PyXaRc{^k__x6?4WSrVaUnBJ+F>9hOb
z)jk6IE0y>}_h-F=0N`!cT55Lu`{s&jy6rj%6X{lqeL?-VZ4gfKdK@9Y4eXz6*&pkv
z|6E1BjQ{`*-T7`*?)}aYn$ejrsa5$=IW1Ue$ts=g5XfQLT$455WD5`O<Ch~?Xz=1o
z+@I67gl=snZ=0JJi8MX*ihZgUxcr6t9_@+g;=|tV{EPAT3Dc_8IO&uIY5Di;m$n{m
zx<NPoeE{|B?HgqKH}l=D?{Y<tp10rIy#J;nHkTjNPA_{evZJ}ZpV;^Y>vZ1T4e9zc
zc_GW&p0(VCYLUJ0->5pUAEGGuSJ7GF;2L+q%mE@F2)YxD$m_rzqz*xgAs(izh;Zag
zl1m~PZe3-Od6DC-1N^!w2@ptGRaaF<9H*xF&N{{|(6wj{?Fs0hKNzF9CT`*;jdVtW
zQIRB72~!h9T}V3Or7J#q5`z=OP*|oCU?yI8NimlM3!zzxpOu6-3dKoWoO98<hTsMf
zDG;a-oLA13;}95lGDrkNJOU-C%DJ8n3vo?w>8Hd(+;K=+v!so8g-o~#=Gx;4n{pk}
zT@OJXd5YJwq$|JYW}(b=6*X@Gx5bkYmaKt`*TG}LCR|_%BNvl!2&|*1fYBtu=tvw+
zFh+tg$pr-)g4cLV)G#Jwe1<Md6<t7F$sv&pZioVo20?tpkDen1TN$@;yTBVu0aHVQ
zIdn3l!C_(&ny_I_*sulG7+eg7a+r7qGaloEYsUgeHiKuFylx9}HTPRj|7t9DXtcm9
z%DV;Ejz>8v0OHORuW{sV6x)dw`+B-*KU;4d<mo>05Q?i4gA8#a0@7L(4(w@Ar<@lb
z3sg=^Vub*$b0Wi8z?jV9bi#S5u}Of$atNqk;io7dpkEskEv3wOPl5~tNYL!E2i$Hm
zb=a<7?*T{Tt_zI&?uBKnS0vp|iWi8L0U)n($6}xY9Ej`+15%qA2BuA$9y3x8{QWQ%
zc%9U*&wxQgP8oLE2qE>c&&ZN21;<&V&N=S_7zmaupyo@p1QKX>Hylt_nC`Bh3wtrG
z7k#e;RtN0twRhj&(;3(RD=jR+Kj5^nIe-G_0f5}9aduJwuaA7$ysFcL_o>Sn5M>|0
z78D>z0Orcmnf{Nu=9b4+eYOwJ6>8jy`FK02m)$Zgr{!{aefdx!MPc|P^8bARb1CR#
zP*>*XPr2=hHD99ID3deK^1{N)kA}XtOspBaO#}NsJ^#I(U-<v;<QLwMCtH?uDT2{y
zJo)x+Y_97j8tZ`}5xCUg`uE<O3yr(;&inU^6no^cC!TtyM5*Uqc<GhbW|b*_7k=Ri
zmDX+8v}IeB9sB?Q(9`?Esz3-J0Q|550P<A7x^v7$x)>&;?KESIaE*ATxXDD@Eeg5K
zW3IJ5VVtMD;tsEwrHDBec*Hy2Q^E&Uc;2>38EbrIuI&rueC0cf{NN`Q{Lf$3+x}72
zwtt=MWT0(=Y708#GC@rScAKC!1A9$Smw|mIsJHN(EJ7AF-DFLcBukrau_nus<xRI|
zCM%il%1l->-EB>_BwLy8$xL>^GrKss1g85llP63MWL8@E+tPzH3IeC_^1v)aW1icT
zTLew}pcAm@lnEOx(A|u{^bR6b5npZvn}?tq2X>GkTKWkOQ_$g0WJEv$v;?O03V2AG
zLeSVUX#bNerabWLs{lxgIlc-YW&lhJkcJO{YjFbj!Q?=D#(jmp%R^rw;g{P7AP!FL
z+d&@t^d$zM>T9*AmwMP3E#`hSTM0lMLPw}R9VLGIv;JoDLGl2pwV4c8+0%VRfe>uO
zBzeyfQ+tXj*`NguQR&&C^W$|kQNpEA8ticg^FzyRcmUA*RaS4$qrgt0zLE{vn7Y6W
z0*zKSy?`H#u28VIkrxbt4AkJ1QJ)|IJX)KF8f9mCo6M^P&1eW8)w+B9TB&N`hx=6h
zvvKJ@;|4!a+%?dQ{@;zDbf{4H8E-llGwc=6f=#(NyE9F-oRCPgxL9@voKZvt)_Vic
zekhi2&Jc6%g?G8=n*iz;KwJQ9bR{4m<LCH8kl>(d*p$KqoF8b=IE)l-IZ%N;SO_pv
znz;y_IIIXtB7vn<LD+rMUbH}vDNFDilnHyZ(eceewh+TCg*dWswh@pM*p~uU@?Q?Q
zTqDGuo(@GQXf|F{RrHoD6+!K8Jx#q=y>p#cL~1ZEdd;IYlegY3p2|W-TNd85A?h1l
zslpqpNh_k!CVz;wRn6X2WC~NzR7IC;w8dpxs=}AHr@kd~TK1_Udb%)XjB#&ejIAMW
zJoOipoeio8qfOlR#sqVBYxKdBF^$&AQtxLgjkk@dJ@`Q>I#Wm8HQn?oxC=+S+Ns*=
z#-&gO=bz&V@9Zs&R^mMvwNsqYB(sGMDmUCyb-mV8S5#UVD$pjaduf4@IwQnaGBZqq
z%zDsbp#`4iQn?aAV@?s25el9-QLip6zkxB*;!deN(`=E$-X}6$pOSvw_j}Gdwj+Mr
zId}lmuQ<)YqAOpDJT5<t{Pt}T=bHuepIz~>4DPQaiznWet|#W+nxk;bje|Qju8Kq0
z56&<AP0Q<kZJ>J_cC~K?J;x-mBN3rn>N{UaAXBO<?I=zS^xvRrL&~gGta)ClypE#%
z=CG3M{0c^zc*DMnt<~s)UhY6zX-5!S8=%<A#Jpw~O~P1<|6koJ9K6ShwNw(Lwqu|P
zMGq!PSGIef6~e>d*sVP+fTw0TuvB369(Bt}z42eYVmlucbGXal335AHW?{^I=v-2$
zG<n3;L+-)s4bEy@zM%otzq6ZG1oxLx(F^~s781}NbaYP6B9`2Vx;4MV_<S^#lPJ~4
z6=X66Xgo0g&WD?xHtyJ|+H-oSs^NZoZKZTz!by$!|FJo)Xs2GW?;ERw{MPU!{(G2i
zPD&T&haY472C#=rQ{1D0=J?Q#<<&FN*a_rxb*)O(ln?629n%ggi${pHi0PWCNSeiF
z)|iJEOLAMrvcp{&U@O(|gfU4ET<f%y1O+i;ecBvUi|a%IOra5|+JS34HnMMSpVH10
zQ}CF0s>2*nGEuYBKl&MG4Xt?dc1Cc29pvkX^3A`R8FjF1WX`3!I4;t05eMrVIraX+
z7;DyVWciXcOr1DZHMCaWuE1H%ECfUTA4dmUzeY5d{<fat-Za1^Y+<y_jo^riYf{53
z)x2V-O>jp1g6B3R@sM_QanQrjUd>0hb!u3jQ5wrr;E78LR#PpINym`nV4G3gQzN~r
zrXA=qZd3fp06~zVLVJ^9xHNsJtz4iuU)V=L<t%*g+^L+5TQLN(K?#hQs1J7Ayrbwv
z^s_{i*q3{k>LvS87g(n$IzNv#=4ui3@N-QIOs#}yFF<a|mTHy*L1lDPfzIu3%6?4q
zGNFZPBohbF(^3EyoX>JBeB>HEWR#pxc*WMReu_BHB5cuiOo*kK;|V_JF|9#|yy7$S
zHl7>O<}P}buwo`w;&25dxcv=Swg!-c`^!u8h@}XrEAKW`iPvC1afo0yDqF0--*{_o
zp}vi%zz&X$mScqg8_Z?UI8Bw!XxgG7OD&WPC%Tvrhx64H=;*@7^-?W}Le^;suO#%L
ziFIb>7^f4BL-Ik_OxA^c!lUVwWCunVb;YHB+K^>XaHy=eRBr|rOe}Cqv9^_jOdfGq
z5jZyxL5Q4*<84mr%*&-KGK|C`AtE{)9nU<+sb(rb8^m(wUf=H628iXUNPj8scPi2#
zjve|fNmg~7aULp@Bf|_JOg#e>W`Q3@E-KKd<b-y#KtZAq4Fw1g^d9w_)M#RzIDkw2
zgJfcV$^UZ%>16QLLl$Vt;`|qL->tE=Kj!`p8ig0U42G@)1I4vQ<%h{|KKQ@GT*b+L
z_(vsTnWbJ#kC;_D$FFyyQMaz;whSQyt{3(JP^A*#NJVYvCi70fGo7|3Rg+5lQeW$!
z?-uIqyc@by*42i1=fE1iCSi#JUZYTpX~n6uVdKYIv*)`|nWSP%Uc>tiAK2VF=<uS8
zE67MOZ6en&VD!UGBbE}Yte3}Gg{CQ2|H8&SOSb@5@a)m~v8o%`(45)B4NPEbqZrHJ
zl+vv|mDEJu_rgO74H|Q2P{^8ImhC=C?8h@b7^d5PE47<jW_z;+p!X2P$`@V{Jy&Zz
zqn+<Brk)Qt`T@BCmU>bD=2H@RSGsUMMcB%UGo*rJeCbKQ(_n$yu^H>ism!$0v)^KU
z=1i=x@JUd-(!%6m+@C8$<cj`pRis2HOd9ft@Q~#enV6JRhn6$>6f9pRU{HI*<kVpl
z-ZE3;UKlF$mj`RvaPK2gtmUb;YM4J`?v(yjgvdgyTH|A7Qpl!QE>nlc8io*$(J9NE
z7|t7!8+1iS0-ZrfH3cDVnXl|q<?rDmci3zklTRyWz&2A<D$8zf49}&$+e$ibfMD&H
zOqO_-=~OrBt8GpVx5TCz4!mQ_s9wHbR#_}KwjWnD)XHA03d$3>@5)xAd?nlN-t$MT
zh;8D2^KgXC7rZmY`c+MH-O(2b8;mWQMl)nl%a<o54ni-E67PzRPQJ;xH+DrX&bCa0
zw5cmvD4_sdsy8*<H5|qQcf9T-@7=xdj9C_@{L>Z1d)1wa@S%$@$o6*B2q7NBJINDA
zi{9n}xfR|9@4$uLcfBq`jT992S62)|c1mR-ida>B``Dc*+1ktI^shqg20(Idz}W!+
z$t7ImnD&`3eW?o$F)APioHYDE7<O(cTwGL=7!}yr%f|C03!%L<jp0kCtASN%!i4Fv
zO2~;WyA!wRX5Nkc(d1ef`|Z$i%f6$F_-!n)Hip#XS{Z{s-4E8JE={hk)*pqQ?)2-P
zedP3L>qG3prTHtu&pTdUlzQ_0DkZ`*o@hs)xDct{6CS-@?(t+_$38XtdQ$jq$GthR
z^*@ivNug;B2X|5uviErTnZCxOr+W_(%1`$+9vSVfokbd&+2A6}EDTNTaQbF8rn2Ys
zD>ywzn$C1JI923YQ{rocuC<d6i_0H`8QCNQy;cnJPpgMkO49HZ5oi1lPqjNn<}A&Q
z_r1Q;H2I*;)$lzqK36QQT7GunUxvLKRewY`ZWg{c!4B(bjM)?L^;AQumzp~Iy7;p}
z5825z#7=#oLtn?*Uf0yxDOC7EphD|o>o1se&)veFWu<B}>%Qu+<LAM_2epq+)P!00
zRhq1;<+ea;=tSIBW#4}~HAd#}RpH0Zz$7dmr`5(^)T%n6WwaRlvLoH*vQ?2p&@0I>
zqkNmIF7$cs;na%<$E1f76f~FcG(}pudAYZucaFLAi}FEFMSI6WSn4l9Fbk5BcjUi(
zp(E)cI!>g>z{YAX5;-F1@I8}xn)6v+O#2JQVTP*8ZT<BdkL^L;nJ@F-P%0$NHgYrF
z$D<C`kkUgwO7|uo2CW1KilHkL<h_;0lYhQ_zBPO!C6LVWa1Sa9rj(T~?&KfY{x|o)
z+q%1Kw5jRRtfjxib9Tp-2?E`ZVjt{|Cnx8hTMVuECb}>anA9JOOI9x)%Db+)v0Jwr
zlRK47wU1_b(j$Z2<6`|;y-Ah^W{rqOBeD?=^H4c?2u?njoQ|5Z^@+LdyGBLXDkvDH
z$eYfsgY}x6#gCcIm7f#JZ-8tH!qcDOI`n7bNt&5!tZC{^9-%A$otN%Rj32r39`m8P
zXl=8ouH{=zIT9Kw|2P%KzCZuxi#^>kfQ`N89#$C<9Z|-1c=6`|;!o%S?C?c|B+hPE
zGb*CXUoYGslaqO!|Ks+K@ZwBr`ngzKfL>%*)K%!sn+50%hHB{-z&y@i`uPNgy1V*^
z@b<(yIQe>dI0rd7Is~;k(Nn${#IVY5t?_-RDg3-yU0c6iU&sv&7k<6WVqDn}75w6l
zP8^HV4XmkQl#-l-j>ROg%KUlqm<PsiCbkj0{^$l`wu{f&5$%^2Q>_h=A2%@mdJC}e
z-tl>G*mmGZwp*Chu_6l>ABaeSZvS}q;r;Hzt5n-^f>TnI;K5+X)k!yye+e;TXH<9)
zpN;NNa-9y?u!{SbbqRKl`HN-$N9tZZ5^29-Ktxw1(voJ8188^SXsv5%GsB_0OF|5j
zBvY?TDuc>>w;$<62xmMQJHeyGhgm&e|LJG!ld*DZ{Z!sUs}d(&52~cQ>h0GG2^k}i
z_y+Vxs!+Njn?qFW<79r6Gi&|n76*_VK1t<=Hxk1;LJua&X7;4L5`4u2eU4(R2C=<8
zFP;Z`D`QE3MJ5GAlG277NQFD7V@>OV`6Kc!sWif?MjP>waUNSS(cM6JNp5msaprZ{
ztMHAK+jW`wiSTR^^KZ+S)3}jgD{#~P&VYr%=w-l-=sJ>htn1Ya>*rlBTg<H~k!t=m
zf?EK|*%7M6srlO&I2bzw0VL;<P`szH9hrHaL^p|@l%p~DOhE4IV>VL5lW47<65lDp
znd#wiC3Ww?W8eA4`OZo^i^biq)KJP7z+fVoK>*1KvP0T2D9eEW$qAIzJje-Lt1g&Z
zO|SjL_4zF`)PYWR@rVi53y`gAD;V2EQRcYWozbmgx$9b;ZVv=P1ZO&irLJ^=gQf0a
z?e`u5B!}sxI3|YRUl+p)D2{v0S(Z-u02m7PRaMKC0&ae=0^O+pO}=b%KEO$lAL_J(
zKcu{Bby7ZiX+rT#rvrEzikz$eP|ht_4WeEhTB#|m`v{&B9_)Nt`dM{639@Py>tE{q
z<9#o<8WzQ7gvDkCf=y2^k;!|dTB&}U6SHHczb|M_%Ae}AhCOzF-RgMY>}Alp)zu5&
zrTyze%Qa=SZGRPX71n+|TEdl9o*mD+U1X_C6v~kPCj2fmG~zNlD&$>=(bHo07@DxZ
zw}w>Jx6GPxD6FgPXME+O(m;9)ixC(@u`x~e(`GVFw#q+Wlb`#2RxYppZ9OwJBd)?H
zlo;*d)pemOsOz-Qw62FEXQI1u8_MSJ>SJJ^r&za<pJrp@)62&!yQ@W%l`G`>I0bTS
zPN}JTusm;aLjZ=xiQ&gt@qM$3#;`ez^HY<*xIu%d_WZ%lQp3@wT?<XS+q>J1oeND*
z>#1ruQ@-?US!y3&D4(o-U#9*KfpNjO3C)o8NulWTPD+mF(*Q~)ZSM}?=DMQ{IdXzj
zP}(dESRHDjz4V8FVbWD)ZnO{G_^a{if6Z6_R813pm;WvoQ&GMpB54+?IE8*6kaF_G
z%kdfx{M^q7v!=p~G;$m7_4dzqVQ1b$jhY_9N^h(wM#86qIqf>LwGN|L-Z!#$`a+8Y
z;&cECkYyQBP50g?a*^S!loIbGP45v6T57s{^3O2U&(7{{z`<hl-_qS}Ayt%MZ^o~s
zvexH6Httw>k?D@bqWz(a9`{^#oHDeadb=SwQJDfzK(~_|UfwzVQI+&tVIV=5(W)Jk
z(8~WiBogyKPVJLSf7aivs_tbjslUbT!hV_ItWJ9Ti3?WVt6{w70vn~Tdr3hgns3}7
zsco~(dt&bXO#%%IeykgwD4{;zd`@B;EB8kKzFSc?7?{Y%Fc7XQdG<S@Km8pY?_6_}
z5!d`-^#C)f@zyt;e`M~`kY>MFeZp-$ml!{GXTDVNt?2TBa~GaNk4{l~yd6ni5gNAK
zWPk!>;tT~(VT%#M{rkiH>!06IYneuT5V$t?__`Mny?^|orkWvf`|qhM`fy;NAsL_`
zvYyOe^Tw>pM{<hHXD9##C>Y5Xc;39E!!r+^yJNebxNskuqMV|dxDrG4d<B*$gES*o
zH<p3#S28|B(gDw#7k~KXVE<j%y$Q-GimjVZh_3q|GTsZP(w+NftGwfzxE7rMuY}r{
zHE}HOwx`ljMs>h>IQD?j<e<PWQ-@K}KZ{z^O+hjLlL2zxoF{~t-hO961x7+B3}mR%
zhBWDET?o+xoGR?S(#`&ma`9wkfSjlNV#YR2Evk|JDh;G)`V6bnQrh@_#p*ogiR0?f
z3OP;2TkuwSwI4UmCO7J8(s92{di-dGUQK&bw_m}h+bKnrM$ULGZ6A{<C4$5^>Rcmg
z;%W6<Nam>^bBGw^;OgjL!jVgL78u<e{cL&7)<E>DpG?R|U(ZR&s?90^)?!Lj#l_K!
zk7llruT__)=uv)9@fKbJ^+N+8VpzPd7#1IDYD2yplWQ-ui<ccOJXa_yw2QZosyS7&
z#Z;uCTh#+)1T{36gVz1l!I~P<g27b5*XLM~(v6?B8Bagi5ino1oQY~!DQEE#hX{u)
z_zvRO<@cHQ5$PA5^uxnLV{YB+Uh2O840i7P!Wn(5Gr78mw{suH{m1=3&LZCC>Y9WI
zj04owag5r<zYqCw!f(Rw;~c#Ff*jR9w+P1W-tS)OzWWjt#0)keK9|37aqF0ChS~9>
zwgz@AmmT<x(bW@fx%kFLYn)B6i|tU{_PAtC3$S;yb^1k{^yZ!QDd~B+b&(Hq2d1Up
z-}%@pGx_0EpgkVwF?xvjB)kn%P+Ks(7UqLMlyxJUk+TnXSD$|PwQ`f#R)Mo5(YR-E
zNR}Nbx;^jS{kGhK;+nd$ijbC@4`Mp&4rkvI4%Ig&P0uu^)E%)2M~+6d-<xK&RMjBC
zG$}hR`p%W)gm@2Ov9$D<JC_sV69D*%uszT-IEiBG-+g!$9g4n!<_hG}y`mecdv({~
zZdhWPfV8so9p&%J62$4<v(0{$VOP&e-TKKd`|=jWHPkhEIticT%nrE_<KGy@X=T(z
zPL3!(-~A=|{w~=yj2;jaVvDznw^t&ba!FvB<$2q`58)y?_&N<5rYdH;S;czPBll<~
z-tGm3jO&~ZWo-RdLC$f;>-b2Q&E*&86GyJTXzv;BZE9uuQ+xwL%RoYQD!VLzPA3I_
zDd}sJ6&~*EMW1Stb!(Cl9_r~p_q51o4&Ixj6K@p|Z%xwgJ-FgWxOr`waQhPdgwIrS
zgc~_0ttcxp?qtU4FkF6$Ex|x<SRi7gprX8`uGE4hNeU`dqbd(nM7aW*xxR0l1(bFN
zk$uWu#cP)FEM(qG;5XK#J@PS%Wb;sUPF$3Ehjx4)%Kj+2WxCVN*3P}Hw7@OY%E-wH
z9{>)u8(%<PJbh7#>&2<m{+^_S?w-_?&d#Ki-cAWFBYWovd)FueF^cG<uL*x-Dr6d<
z5@0N3Y^@?<#2?2U=QQ4&azyrzw4N8%jixEB`7v#%v!c1LFw4~|r#_NoPxKe|O7&$^
z6qL1<=#n4826HN!hqEFwD)mmN)ka(@XldY7CN0U17@AJY(_%nis_=IZDr$yNlnupa
zfGDRB{{ln5Z8F}{!Pg~|_VqLcAm>>P+@w|Rzpq~M{982yNRB4f-urdJBfng{ltof_
zTAQRBQf?M=P!qoHDmzXHxdwgN=J%p!lul-6Vr;p*Se;jAjIT}i6FM%<w6$Nk-ZO#-
z4u~ar_(cOIi4_p*=@AeUW`stgucjWg=ybNQwFsayo$YLl?1^5GI~9KC`@)C!|2?`w
zbv^7)^Ky5y<@QE6A1foBf|E&<2xfi18NHJ^piqF2cZ^V`y~h#aKFDu=oBOh$zqt$K
z`5n7bV3?z!r=dS}QCWkb-APklQ%@<Yqtn!@`@!k@C%X%6NY#&Pc5mHc<DPMb)K+M1
z5&0zJ+1=Y=p**EBLDihgKJ8_7k)=|M%8^O(gU?S*XPHzE?BNjjm00|^@~PTS06i3=
z0wjlmtiKhW79JRs8Wl#LrMNEee)(}@@9}VS;4vS0JzFZdwyNpU&pXSmN2QM8|9ENU
zS$No3sOvj-RNCbc!x<+%%{^T$i8kR8e(p@{m+Dem+w1lTx8GmvYKNWr2WoZf?1{Dn
zSG*=k<QU(zg?lM}xdGGAi#?vDk$eGGCNnILsX9-3Xop*NFkr6JJ*_y^?ttx#kHI}l
zqj)oUgN>xfw!R;XR%8&cI<vDiQa_HLXxzyw`cSd)8U89i)Kaf1ihVZLJ++(~ZCkD!
z{cTHkG`~C4EmhJXD=@P6ILp?yAlR=gH7q2T;_x31yNkUc=FAQl=w)rEW^pBOxD(b3
zq)0d%Ive)<-VvAk;XPoui#i=X8~*C?VUj6R=KcNS3hCo3L6s&jf1M_G9*%WzC=&hs
zL3`#XBkBhQaCK6o84-;)-ycAd;0gmN>eMqD-l<&(OxPnTo+_LE0o3$kGRNeb+R?-M
zr`v?(8!u*`MD1ffN4n=@4RK12?aw#H=4X^Q_YD{fw4Q7ss`Tdl+A8muugWgYeGI+*
zAGJQ5Bpi^&_R9}ca+ULZ=w!HTpEFyVUzz`YO#;Ka<EeDu(s_i4veKm?fnO%*-(_Og
zHKc}y@h{c{c-za{%MrqM*lBYvwxD-WN+81@#G6)-7{t7PKZxi>`^M_&$NENVn9%+t
zm9z)jbx{oz?(0nQ#Fuoj47vz|5(;m0>_m*!j(C!fzzWWO?*o33PZR}0)=e^{4yqja
z-ouD`rnqWkmvYX5ns39vm94#)uP*KMke5QeZ(-mOE9k9=ONS@<IIQj+9K3*n!e7gm
z{)(<HO-QaRgd#PfD~pm7s|uiSaTaW?_K{F2MyT`=TKL@IIe%QwSgS*yiup?NVDn(i
z6#tkaic4}&gt*CS@R!II3EGHreedh+%j)YG5c%OQDiW0|ry<}jN3Uwg;V&}kFwHWp
zu@1J2=Z+US{rq<yDZ^e@B^5{SG~F}P=E;kZ$(-h3UTnS~4N&paQX?cU4P}1ggw<oA
zpzQlLI)Uk*&(`~rumA<9flrVDjcu342WC1n14CbKDv3t&`T{6;%4Engb}t(ubLcO6
zd5aWq+-b+HpKU(-+u0eJxU2?p7qgG4j3@Pu_VyiZ>g$3IUu+rdZ8$R6-~1j`#qfsZ
z-XgT?`@qu)*ttva{}s!VJUmA|+dj6r3)cIuevG<Vb?rORHQVGkY{(sx<1T4fR$iEu
zd8)0hWU`#SBopW#9vMx*g()kkouk4A1!Za-%)?X44rQgCZ>?-U(+xXn`Q+c$M#oJD
zRSh$ksb;O3kKe^+yXGB-&^As5ZqO<@&M4nJKc+YHXyZU;OksgpoLPKCM`mSpXZoXy
z1O}a;tfr>HEyA)T5^SA_g!t#`pWO<|%kneE21<_f_d|_#bIY&SL`I@05}LMsxCa!o
zhq@Yi4tlI83<ixsOJZuWhpr8!y@wx*l=U=rwzTl4Ss0#f8-5JN4^O7Wa00D+&kRr@
zQUEj(0oCQH66rs}gNK4%3czYwz6M4uB?+*a)&jt&wX_3P*WVZ8I8|-s0PZpxj3&S~
z{bIYu--}LZyS|D{m)X4st3NP|0b0?*N$1bpKDGgN*V*%d(@wLAlR7e%kCd>esm6Kb
z#*$&hBC|n~QP~9<3-vA6R)c^Y=t+8~F=z}Kr;K6av^KJHpa_>&bC742gI~qiv`;O!
z+t(V~uil-aPn<W()aJeGN_aV^tL~jyt^mF|yFO#6>ve{DkPpVESLoX3b?7Np`&2gD
z)pq@CNV?;FgB0~89~W8QH*nPt%#O7#qcI+4)6j3Wn4Q)~YM)w0wyV|dkbbh(GE?d}
zec*5?SmMS#%K_jtwF_gr`j!6>+e9q`vhwa^M(zmCx+8TVL+KC**zZvUZ5&a%5Hg9S
zjbANn7rX5N9}sM4upb=Q$RIT>kCK+QpGS>nT>%Vg$qga=ZTjeK>`SDgcCDrdwx*9x
zucpIic<3@7V`H=!_#0W(O+vuQD*@>LD|+pP`XAu3zE?Jr&0(5RJ|vs1lzO=y;V!w}
zt%oH7?eI2)4z#!0C>k&<*DgB}b~##!e8R51tVGEvQe_7<q`F>_18`;EYd4EC<7kPQ
z#$g|a;!+!D9LJAapJtxB5UBN(M{SC(M8~o|b55|0s+geO<K=5~SI_sJ1MTwB7>22V
zPO9NJRcn0hLvhB;qt^$ZB|}m9?nug1yiZm?oR<XO;>6h}Bbsj0)*DSZ_U&dZO+ppZ
z2hbwp<Z`2v+VQL-w7(qT0Z<u!+U9X5Z-!H~`ZGOPCSQiZ0O7XnO>Y6pCv97HvK23E
z_hNjCsyn~kZt(?j^#RUM`{fV@fHM4An@4{&)CUkfy+Hpn-At`E4$Zwe9FO=p4zX@r
zef_Nfwjg{mWT32G5tFhi>37Ob_+RDXZb%B#jXtstO_J-F92gGnj+Xh~)a`e7mUd0`
zdNIT)vW^J)12{m-dEXCGBEIfWq2~22&1qnVuX?07t(dr#fE{)t4jzNQ?*K!Q0MYnB
zk|nvWd(d_4j>SY3>7?F=+AbjJop?$sxO=&7Cj?uyIL61g3OD0VwxmKR?Q!K9uJv)c
zSnInFK9bHdxen<bW$o@0uOE0BdKLWOeJ-CHE^xs%JF!wc6D|$u^17)j;tScMyo))K
z^!x6#r{{$rW((PuBG996eL;<SM9h1?P|d9WmYzII9Q{zISzq1eJxM%g;Ll*$HDmvF
zp$JJaR9*c^MNDU5-H{1YqK^?t4xpC_WOyhl4uz=rda~3OV6>F6j;-U1oF^s#+C^zK
z)A~cig2DjNJp;P4Apz$NMj%a|3ga1r7X?-eNvzH!JRLE*t;F|>VD8`m6A?u{PI_La
zIT08Dz>@npi9$_r3QD?GPNnmPg6$P~Jx4&Wgjv9v-7o$Z!-|6KhZ#)_V)}Kr-f;)*
z^iwdO_YNtDG}qPir6eT8KpqX5CB`oYBL_CI_w$1GsKv!#=}KH~gH;(KBFm_ArFDFi
zhR13s%26@7a--_F&gtTTm(TnCVMLhZ1@ORF(F-#~yJ1RY)we4kig&SQ>{d(@`wAG?
z3JE>>K$5fO<@%VKY?0@5RSZqFfq@xw^E5)0Zob&#*??aR4I-a1rS*lH(CUf?<TxKH
z>__iF0Oq|or%0`1Avjn9aXC(Q0C)1qKOImI7jYN>NYx<|%RG|=#2B^R$KhL%_CkFu
zSXO#WCxgFp1Q{z$jk65|)vl_4VBlHk1`TwgllVJ?SU&4pZv?XRy{{v`;@MNvefFY{
z-J485QPkd&S<_uEAw9Wk(m!OtXBFEFYM-X))BEe)4CQ%UDZykimg-dD_8s!an7<6$
z^0OE;o&20zTzB}ullb{$1CQwk{#`wDbBr;iLr35z$KmNu?y$`Jh=worDPlMIu8-34
z3EFGBafj4vH>n{kHt#7!fMVjJX~Zj+%6mBQnPU$;I@d}?Wd7oGJoWl9Vta<H%rtq}
zmRv42XR<Oe6BQkQlp|M;cz$qEZyNDGFoDNOZ$4Do%cKneSnQ&V1v2rY$1Q?UX=T7w
z$#3TY0O`#ZYzDxV)#XO$`8qD(JXeAN@@4YXSYuEgFbkus-eE}rhRDoUF-1M~QnI{#
z+O^IkJ+~nMfMuPBm;t-iiwU4ie!n|u7;*eGtPR1krzHq-C=5SqWr~{JgjxKRcsTdU
z0!n3NK#9^~tJ%^&Ia$swGAR*PNFYs-2~l`OIsHI_!R?GdY;?H!GOEkjKLSjp$y>gi
z*9_ZAn%<M8%D}5Qo2My%*%7Sf(j8$&`W2EAKrEWC?rMZMsxd?&!X@ndLW9k+srK}-
z1DZLmt-}&YOm_~F(QCjW+kSy{XK45Ku=53~r(itl$rr_y{IX0A?4ZKR0GQEY*ctx3
zYX|a%BQFkbnM?uPAh0!WhdBQ`k!#oanK6(^7sMc4*vT*)$tWwV$cr-}K++?$Z!pnE
zG7vS}8m)vC{9_cz9K8m4ZDy?l06ZH}Jr6Lg9F<LTW&!x};i(`s_BrLh)1M}6;~Rpu
zpZT;gdolYl+uiaz%8_`*EX}2wL7s1B%Ba4D1WgKCoZU+aFB5y(f(Vv$6z+p|v6YLa
zp@>~fT0Y=Kd=oh+yim}-)AqRb`_+<2f^6>>=X{_<q7!?%!lkUCHW!~l%oFSk>a7}(
zvw!c^@-vTvPU+9y_KgqrCD75*xQZrWsdYAqivFMdf!Nq*gjASBVX=Ky@w8gOen(ZD
zlUZ;+o&12#q%M|AE6nh5Vas966c&!^-Lk*Z7QGC_(D@V>O_viegLEj_;0*!eR)hu4
zP;Cy4R0!-w=_66)%bY2P{b9Kh0kaT>)PAwezXT|)Z&JgN&;S`HnW73Rm(_A50+i*c
z9+y^!3ac58-Iah`%^1B=vBD<elvAk|Grd!M8NREB1Qfz5mAHQhQ|ps>$h&;YP@4sn
zhlIPJdR`x>TGx&^1arV}K^vhsC6)Mo;_Fn4ba4dE{E+W2BTD^tH}@}5?psbPD;@Vo
zm`pIVq)!q5@waBPxp}5}r}?a*4V?p7wH}WhdNB*HkVkj>6Y4Ghfj>)ZOn@J&=cthM
z^?nMs_Urn)sb8k}mT%M_P2taZTfcrcrme=;pR_uTMt!B_>R0QKoyT}_-MoJN|JEzp
zC@<EJr)PX!AH)Y|Jgke}Hz5qmwGG%_2vK;&O-32D#V!ePCC1|*9+iU1jjz~t-e}ZJ
z=MGM!QbOH|HL#Ncxe(Xq2bG05#1DbXuI%c&5I+Pi+lKa-$tAAI*Fq??0R$;@C2PA!
zf?0|S)oeBI6C}kE(!*=EB(z#pnRGMEshFhf(0QFIT}P!}T@c;eDalRW5da@b%_<IB
zsxvw$;PK@L1F4Zg&mK(D&cJPq>mB_MV7umGY%mR2LOqZYCayzaIO$&{WvUyD$i=yV
z(ddI|VahULA+!34mka0370UF+dAD3OT7dUUF1#~KZbld<L8`o)7EkHmwO<!|1SB)*
zj$?t+?z5Q6gTgNvpWs+C6g|O<M!CoAWIP5Ek}*?!m#R;{eHb)-NeLWg4^0k-z~JSD
zp6TU$rHuf)r#In>%E|T6d-nPCtbU{V*Qe^ZI4wHBr#R3~6DEn9QA?xT`P={UcEiYM
z<i*p~r}5JEOF`j>tGgpInz`VHd3n4=<{DIK6ciP1aI&0o&E9NBJkv`}v!$o~OUntr
zRiJoP%pNFn9?k3>7vF?Uo0bNR)(lJA5b0EM?=u?(F!=k1b7Xa4a%U%3Je`7^2#A)@
z$fI8P@kK9WPEJaB?i(D30WAl!&F_q$W=HRs!7=s6_dg<GlXi<@vZ8&z{zZ6t_JynE
zLuBabA3T!ZwBGNh0tj3(2yersnHNUrplO=R#<X>&u)?&vej&rh!b^vukuIEM#XHrB
z)MNz7mQnvqx5oW<hEO~J#U^b6r{XQ@ka;dlha)2(RwiDfe*=qC!?L&Y7p6Bco1_U$
z&3H}sS7#WGR=YT%#@+Ha>By4~J1se<+#}5XIFfiyJo<S?(I?eKq865I8Cqdn*%4wn
zn@FF#qL}j)bl$~3^6_hwE^KlL%fEJ;NHPnEa9M$3b6w3{`C6Saf1oR@&=6r!(DzFl
z7~zl1K<{zc;MBy3g_>cTwXbDvVyU}G?INyUXlUdmO1jzgw7H{T|0bu^cgwt}?2cMT
zy`8>9dmy3v0$4rQE1K*>I53`5_5)i%xquRL)RB#O=XQ)r?K3zs9m$M@B*kQ9{Y&=_
zXTdHt`Ul6!GG4)mN^ynKTpX*K%o;G|I1p|nRpD_93{w^k8~WRYKZQ1hp>r98EH8N&
zUvKw49=y(6O`40fFPoYo1}z;A2r%p3h>N{N;XuzPaxBO${e3?ppEv47{ixk7|CxVv
zU>n2p$Gohlgpa`E%XH3LU)B#f9|lk5Te^{E#=`n~>vFd(eg3vdA?H6`GIA<-p&2~A
zoPmqV0sVn~gRm23yuN2uA2+&4EOxXZ!+dJ<A4ieEQe#H9wTOCR+>YP{{WM+#ouf7F
zH1(Km7=B6P=hVpkCG~t#;)mm0y9Yw7a5tDS>P$ZBS)st(sjTY1ID^Nmw{APZVlDN_
zbHHI@<C<o@E6-+=7n>{_$-wXEz<s0~aUc2k!X4>;%;UYjuzar5QD%**fx9&7N22`Y
zb<((z{MOxwDcdAul_RL^!vK~NrOm%d-BlrDF%NKqr=BWVHq@zs=p)`q7z4q8rPa2#
z<09`qxtl~A^SS>_pKtfyF!F(;?ux>L8UgD0of(w)l?7z5@uWco0a=7cK^`fnC<M&s
z_2hP7yUNw&Kuq^i!2<D<{G(HNiRWzf`AGo*un^FiZxSe8K!vyNl{t{x6XUS$2hkR{
z8%uW9;rq41kZ;Kd<d%S8X-&cj<v*N}vEQy`E7H{F$JbD%iPG9dHh0~`?A9U^>fKB=
zs%nLyU<gkE>|7i+nL3ebG`W~~-iA6eTKX*gArx1;1eR6RM3Ibx_IovQr5ZQp?NgHR
znEUfJ+|IvM6>EPz#`V1GnWt^wGmS5nsbFsmI(AR__(E_gbt{uN<ehq$U}`P*Ck)jA
z=SJt1nj{S$_y^VqxN<ZRp|Nh*QSEs%%wUN|P07njvv3@qZ&79kwiy&=6Cc-hBEr5<
zJHm#H5YpMggvMGp<iE0gqJL~U)GZ&`|0aHJz1}zXM|)HAqO~+=#=IyPcUv;86px$#
zYE@kWx8vkaQOOKjI5sx}Bomq~czZQ6^fwPEQFPon3K?(tnM14x08|0q^8`8zqz5h&
z&*ypWug`XEGOfQeZdU*T8LH)J(j~~|ixQ;;hN*K={vVx@&+NYs%0uh-8wVE$ovrEh
z4wT<7k;;$KQ5jlpqIZUoPDi(chPHHC6b5}aMC;AI+!wz2zgDs}@=a`qc9_A8``0JQ
zK$3NH(1lN^7Bq(vC2#!hml;H2+NWZay}Gx{n9g1NnIBU&P&|9!oeTQw>o<P8f2Nt&
z<^};&i6pd<tCQ7x*?M&9r~cjQVtTk5bM^T~bb=r|uambMgjxc62w@{|=ExV6^jJXo
zTmslR^X&(<MEi}pnwGxvj&jlF)Gw&DU>++u*|kY7k0nz*=jyn@O@r%i^7Mq~{06*w
znr=6kYeyi^s^<n=W8xSs)w%Oi!+pn1R<F|tB&j~hA=I4wf>M(*TmOSj0r1mC0D;Jb
zP?B*@0*P}msc0{uNJ}Uoa>8-NA-my1ZF15C;nNWX>H)IhFhU+-r&CdqB9{>106dbC
z>X_H!FpO^9Xu(M;L?j}vIA;Z1pfSAI9!WNbfG;E$67YpZCF6gDSm&9#2P^g8eH$%)
z=a!rS06zGsT@L_X7s^M!zW@Jnqcf5LGr<59U_58a55UaF|Ji1$K64ZVbA4ZHgxXZ5
zoo^bO3Xe*X*-tLJQQH@OEtF}opc&6)#8YZ@oK!l|4mFzfgyRt{H6HgRZJ>dE%vbA9
zAwk6uuXpVk;nKo`Lt^RV83idNJ~8A+4dyMm|845xnhnRMB`&j&Fdw6(ptKHg5v45i
zDK|MO@m@E=F{rhNGOZg;MQElG#-{OUUY9Jgx%9uoF3~0p(T4u#M^<4grbhN{3>?9F
zE9F`N#LJA+nsydqr5eL5V3__aV-<hi%_K|s1WrJx_nKs41x~`SjFrWFGml|NlE1!k
zBT7<=Yj~V%(DMLT`;=J9;mcL~A9S^g6V!sw@VixSLINXPc1{S+hr(Mb$MnJzbEG#>
zfpt&NKtQV%O5+aLW~f~Iou|4BRa<U)@Tvf8Tme`!&hcxCO6mqmG^h$Q-W7lw>X1~t
zfA=;lae&Z=6KILyGL}K7IipsHoc~E_2FivRmU)Ox)-um!KxU4hAjlr?2^fvICJ$D0
zORH}r<bRF~NZw^%O!>+#v`}lb<eG?7V^CvH*??0JRbnEBTP-70fz5Pscc$_t2HiyP
zkFSj<Mu(#gd(<(;9P8D(o1$$6U}vxyTeJP@_1%0&4MVKSQ6u(6Ejh=mt(L9~F|s~n
zBHHeU`zJJI1?x$G!J2VXPfb4pSA)=7wq$Sj;(nEOtYF;;FxcSk00j6!9WkDeXEd2N
zPk<$qeMd8dfrD};;5cBpKSV;{{xE{ls^Oce5!fF|MM(|?W9Z%r@-o9-yabt&L<$!n
zg#rV5^t-(kIEx2t9fN&v7jZ)9<ZLfACZq(&WGlxGQ`nNE*(F2ipokZ2X-Xpnc4DxE
zi1sRnOSM5sz4uO%EK<hBraH55OqeH9Yr-?SHbw?BB>|ppr>9TT!IH2G?9thD#7hzm
zhDMgz;!+$+GF@(5*mLB8%8_>5iXOP)xcZ(@!+d6r<};vav<Sx9#){Ue`#J#bwO>ZN
zO*NK!9&+~()NuLNc%?&#v=dy7We*{hmL2Ni5Xx$U>s>yC)?f3~M{eMRO|$-c;q|;j
z$ECbEQbRedz^ytDZY4Nxr5$rQqw@vFwV#3ikC}axlcD72NW(TM&lQk_zSQTerHu%J
zmQQrINqNpwi`VM3Gul3pXWm*WNkv3L@?WC(dC~I4XCm_3q&yd-)oG9EKEzS^@w$pk
K9Uq}&0001Zbkm3c

diff --git a/static/fonts/roboto-v18-latin-900italic.eot b/static/fonts/roboto-v18-latin-900italic.eot
deleted file mode 100644
index 5b5e780848f9fc713426151a137e4692ce115673..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19390
zcmZ^KRZtvU(B<F^&fxAY!9CdEI=H*LdvJGm3GQwgG`PFFLm)uVAOVv7{;k@F-Ky<d
zU474~uC9K$54WXX5dc_I003bBJMe)2vHwS4U?SlD=dJ`{002V3|A+q1euV*0{tq<k
z6U6u*`+o}|Kpo%$F#k_I|5HkUB)}112Cx7){O5)SkpGW0`;W2vj{yMa0onj7fIGnB
zKkNc<{?D5Wzz*O9a0B=O!v7m_{D=7ex99&aD&_wZ69ACZkcIr;IROB00Ec#fAR$0V
z62Pzpn!Sjdu-MW8+H!XBLj_Vng<SY7S%eSc->MD=ov&fsK=pDVPVy}H28mQZlO~}{
zGml?L^x1{Xxtz@Y@|%~vA)vkPz(pe|X4v5i(i37*uDm>Sv=9|h(X5@NoixrQD%bKv
z=@U~fS`c3WlMcBwzpyCOSz@`<C}u0RlH68KH0iUdg?O;`vX9%ZS`r!vV0N;=acOTy
z?YhU5Vs+t)`L+JiWkM;eTk~Nf3o)&aP5iv2EOx_~0uTy;v+MG(yqQ!DLF|G3b?~oT
zoa|8+u01C3+K2v0m_&)?i9TMKnadix*#z9LRRP1h=3@qEpL7Z_&~b)@FW(mHv!_{K
z0z|h<^sg|+Ikaq+Mlrx_Iko+-sdprQ_cn)XWsfgL_;Ur8IM3V;e{F29iVUO?tLSZ7
zGyDx&AF#gesSf<$2?Kr>pP~WktAXig$@{4qV<xqxbJv`0lYlT?fD=S_qJlsN+yG@2
zLUaO%x|8-jpe0-bnS(`YG!CjOVT-2CL8GX9BhGRm8AeGPn*!1VW)QsqF+aDG^HGIQ
zU+E!b<Dj#J@gU6u=~KyNc^zF|dYy`Ug>=tG@b`QtY79#v5qV7uiJDY`9G7j9dHjw!
zNverunO>c_1tdcvM(AlL!r|s!1JWNU%5P*);!_jEt*zPx=+X^dnDU&(>FrCLrNLCx
zlsLnVm@{15atJmOQ^%_l`7VG3z*Ve<*+FH}j4+xoi%|W(uIyqml{S(A{3_N@Io)6{
zz;S*GDvT!luKeU4&U^4d$)IdFSPd~5`5SV7Ol9a7Y{YNT16`p$uuq6+Xaa=A%^?#<
zHfG_Aqi*zv*%pXD=xebzY6|dOkVEZY3^C@+I`tptCxQB}Kjl`**7NquuX12Tn$PaH
z2QyaD+GJ5sbhgP(DVuaDXiZBS@r%3QT~JAxA-My$*wIG}jIB$l6YLJRGI81ane?v+
z{mS#{aMe-us_oGTDY)*!<yy2plW6JMFF06C!_@>0z&D4~r&<NM%yeVbN@(n<&LPL7
zUfM7b0T??E(KhD-T#RK}n1-fX*jW>@3^S&Y3lUEUhh>(lr5s6?kPM`3Gky~9sO0*T
zD&y>zCY|_alpk9POhhrF#thV}!s3Wsgp*_#G0WN>&gKL}=tsaIBjNP8`s9O$nm_}R
zM*&;(%(_$tR%mBwF}W5)B!F|c<_!3zmfTy_54h`p8YOwuP*Z_JjBqX64HX}^X#s(A
zN3lex1ncwpKBV$-mVLX}uBxZoR{nK5Ue3j~`4<AS6!I^1MJg}x18F{INDuWm?`TzU
z{g+)CLP?#zUl9X_qeX7c41t$8VIEL2$vM`V1V8nW9O8m@Dhss+Uom@^zXVm+X0BtA
z#fB}RwtRoqai*jn-Dor=vYUp3hNtn{x|C()V9XI=6ml5Q;;a$5P#Y;Smma>qNh?Gu
z;mi{lPp{^|*(nJ+j1_T`m-6*=+syjW{)zc~%t16<eOu}$CEO4tA0S6tjQ)he&rzT~
zknqoA3kxdgQY1d2uqcQiH102WSYP}%vlZ?7N2iso>$n!j9hUNvqfj16eCN)DD(mB|
zhv{*=DX_phPj+P4jhveK%1%OXJ=Z7A9Me>714g?8&i19cQ_8Djigyt*@cMZGAc<}2
z7Xp!VPtStCu*SN+xpTCJ!MX<Ns;dP}p<IYWVRzLQ80P}K5yiL4s1AzH15i*0O^~Qr
zYyQCeEO~Aj7=5`#4v}+A^koD=lu25MLOHf4IFkl4PGh_37)g}JuyP`7izqlPW#raE
z|Fr3zA(Rp#Cma%wi|8}2n>%qXhww`-w9`^8qlXWIelOM-aJD}^bz`gsA_$QD`UOO0
zoZmD$!)?)fl)hq6t2Ia?{|bX^HO8h56Z$i4{V*BQ3H2bRg8XHZcjNtOuS9CIveFE<
zvxibnWAnsApHTnAqeIr~qzL&u;t%UgNp$GI8Hv3$MF)2|vcD?mM|*m(GwH|fs1ThW
zBi)N&vv%P1RVTV3tG~Qi^O+ez<zvsiW&nNk;`>yAws(aHcc_m2&w00)dYh*`mYG-9
z4to>yUdQZX&4^@ZhQ;k-RzuYTEraS<@8hqX$4d=T{Ykd3rEqE}oV=|O<c=kn)oSsN
zpL$ULOz3AvVQbtW$^4XOP6;nTc#aP-kn)s|NJhts*mv)L3<T0@62Rsn1nz>adrlDP
zm&>te^5=Gxc`Xu)rSwt5c!rQGCaA-%jY5pzI2c=9ojL^i0<is`I4d#p?RrdM`iBM_
z+`<US9c22S^R27oXx+er%#%et%r*dfqLCK^!4<lK2KYG=Q5*P98+ykb)4ccSwA9><
zC+n#~YrkkH3tPgNP059li~`b&eVo7&&m@)?zJ~@r(=fxp{g<iVxfMV;K!t<n?7DYB
z{{<G}ADFiz8(UFiwr)fGK8j@J*rZI4bH&hhx_yysZa0{v-$K~-H7x}}Q70Ytb<7pB
zzELpDDJ)d!Qn3VyiAMvs4Q6$NMa@hoY@X7<(=S;3(Q~7oQc{d-G}C4%lAH;jnQ)NZ
zD$D8>_?lrgoOb+mLb$Uy{LSN6PS7kmMZdL%*bejFbPqmBz|l!ji0rO3f5(Oygwk%A
z=TW~+YgW3lh%VozWFOA$VMB6q>Rr%$KmSyhNchc)#Ln@<_~;(!wE*;tK{L~54T!@}
z_BWSCdBA!^TZpcc=K##<HQ-mcsVaz~jPKQZRoKRt(&oYW{$6Z<eP-}pVDeMX)w5SK
zpJ65$_luYQq&GWva$Aw1u#iIUp*~+J%<;@P_y_-vA?Q9Ks&ldqGq|k7G}9`TUc!kU
z<U&Sg3f2YwQgaJN8Wf2j+p06WMnnkXA0-VGWFUT$h-H{zB~r?{Ry!cGhJhKmspH_7
z)__rAWo%wBPH~!^%)IAZRO(m%x41>9;Wt@7T_sbd%qPmZEWYK#p}vetK*(WG5vpO{
z{`-84tio(l(>x4L)|>jGJ7h{omxt4S5T66(GdV@xQQeotgV{Pf2Mf7ugVORZa^o9(
zx72O0b->VNRPr^T9Bsx0Rk3;+Rw9cA_U^VLGE%92Gp8OPz>$L54<`NZqnh=hCgPxQ
zYY91Gv~wPeEjsP4=L(P9l0*#ruF%&sASdl7*iZdGylCZp?<~(@iv`>}+whC;W{L7R
zhqNo7kl#PNEM;+RMF_K=Y);kV$}^X=<tTrS+K0wPX%*Izs!RKQF_0xZ=a{KQqp9Wm
zzMeD4L1|iRT4^;BvWa&=G$NVWE1oB98}|xaqLXV&Ra{PCp)QC*fy*Q#4YieCi7QWB
zVq=15ERfW9V;*D|=N%vT4pS)x7r%|r$>6GQ7Cj&(Kqw2!oqY>~qJ#FK?Be#|zCrts
z4>@2G%KIl@v}c4F%6Am20X2Bj!e6Kvls|2n5eJd6;1%FdK*cuIVpKFi7btO9U!TR5
z!Z?Ql54^o3J8$(`4gU$6$O!rS?s!(4{le&kdy6+sBaM7Nwvl?v`JU=(h#{B)rf(Uy
zT59EsC3G_O&p7SX#Fy#h)-Ock1gaQ)%PPHCNf1Pd*KogrCrxzen?4qkMS8N5i4C`7
zQDtI$`~r&pE+cYj_&GUMmD&Caam#Oq^6gBys4l<~s)5E+pZd%nU(fxP^k-_nFB4gj
z&Ik~wytvkBW0#d~G&sB$HPXKwS@Z3Y(*PE|kPap4%jHu5=OT}1lE#{CcEN_}ih0TV
z7c0b;&%LMYwT`OlM4Tth3su!sxakGuMYk7cq7>~~FAf?C#(c80Kg+pm?tfHW{mIh)
zCCLotJ+rEzW_K=<6kmVPTUaYqSA?(OXWR4*h((gPvtfDxm4on{*tfpAQ(t~klv)mn
zk2|dc1t=)7SvziU*|0f7$D~P*%vxC3Np&dmtW28Id%ppCxeA#-hL{RpruB(%=+p(<
z9j#@~;NA!|VfN{je1~u@s>R8(4~~`)<=P;!ZZ6*k*&ji_du0D8q9Nrf!EX2%qmGAU
z&TpW}*kA7J{`thQu*iq>GwUy38;pK(nLK_kv1dWp*kbAyqw17>b#rk*QjX^zPu3}S
zkpU4TB=Ipq>8Kp`(k422s}OFHFMB{%7EpUeoAn%0U2u}FO2!zyGyA>gD{0t;Q{AIu
z79TqugCViH&TXGfHcV>&Kwk<S-6nkZYd5A=N5+?}J2}K;;~AZ?yA}jLUQV(b3am>E
zoNT<AFqvw{?$kJzZQ{arN#6r5Rdoq6`YbmX0Vyd(^mT(REwRSZR9`%El(5TyR7z5u
zRrcoPLem+ISX=GZ6?Jou64(AR=(h!|qx6$HMFcI8FBFmm98QTu@m^q)y$77@7^@p<
z0xYD^jx(NbW3amtV+4P%IO5jz99R{TmPau09fqD8T6V8cC)ry03S2KwpPDP9ekZgZ
zSc<QICyVeR3XKeO{n&{m4KrESMI<hg__`+4@^?mTel$?F0EML*+F9CKB2AuXE#6h+
z?2!(CWpr>uhbaXq;&9O@uy@eUDGvVSFP60@;^!9LG;GC07CjK1=nzGaW?y|k1B+Sf
z^p#AMdh**~9kZ*LW2|h`0xOpqFkQCMS7jt5a8gJYZ=2fJmUSeG`nV>;cjSy=NnnIQ
zxn_IH=<85o*C$<0LyYF0gKXRddhIKHP9VP{Tud5)B_{Hze{`6UgM}pbIAX9wGST-6
zRi_2F2*kEIdThJd`1qFT-Ikw*+|m2CYl_%`yLsb+0imp%6DX>DaFow#M3x}8MBESw
zNyf9w=L8gWQyN(sQS8`er1R&T^S>&XYHhR$rDlFhrm72<l<s)$T}mp0%6n;*vaNF)
z+Ef<A%FH|t=|VgzRPgA)l54!Hhln?3ihC;%(moAV)wrsAG<?KZz^%qP`k;P7K_iwZ
zE(Z<OL9^mQE!><)uijx~JUn*$E{nP3QO>hi=rP)zk1{_sFi@00R2*Q^X^oq6h7CI$
z6<x6@H59whivbI9<B1(JJ;#C|=UVvoNtI{wTl$cp@azBd57#eNe?!ic9uyg|450f~
zEgsq~*N(qmcV<lDQ?(rdm&$*o`Y*$IXa+!WjHYS~V!-){bZ*#b10iV#I>YF{C-YP?
z_8Vapv}IJ6NRy1ND;~u+U&(n9dTlWKxCb0q$ioI#k`<<GOKuu3q7;Xas2kM$T4MJS
zb@}(i_y=7rq+I^9#CO#8Fqg2}<>L`a^$*{`EhQh?l)Mt9IaTJK1zY3S({WKMa?fm(
zc!lOk4k!(-U}@YQ`Q%R%V|?s;{T%7bY20a<oi0!ex+EaVW($Hbj8wm{Z`=mHS+z*a
z+52VO0h^+>PMAWc<nQyn?EPJv;-_4>qa6GvMHpwgS_|k%)|DtzzGAvydCq5eBTl_I
zvzjM7HXNCuf2Hn`5~k{y5xjh?mikJ(y_RAFDQ}FyAc`bNOSZ%1Ux7?d#xyj5%K)sb
zR@9VQ$s`sBz_9ny=OyCfM{s<&&K&CzS(B{@39On#j4+G~8@fgxMHK3WCC_JIw%~L-
z?&@6*G=yu~hCBpM9xHxSA_-k1j>q@~=gBf~M1IY{Qi|`jq+xjix*IG(J0l4lcOWIZ
z4eA=gmb5zn>O!8Ds-IlRPdpKw3FHwK!HWY^!Bx5}(Je|{y}l>Q^$pF5aHt0i5+b{l
z0DY2aW9Zhbt!$sw(gVsM@uZ*lujkM_d|ixihMczD0!}avmc)v5=0SmgV)FuzYv$n=
zITn~UG!5d4on*?9!ZM63IUd4VQBMA`#vyi;6wYhnJMsyOeNIqF>*{T{B__lqvRFGU
zR}e^t?wzSM0&uNHr(^Hb|Ch|UM8RPBZNnmf*)t4H{ijtKlD1{LJ*{)pS)VeG%mY?5
zV$4GO%h9K}-YB?n2K3OH!QrV>B^#^TQsqIz75d?ku;o4M-rtjifUq(BSN}SaRvHS*
z?~I)WUSPO81_Atn9!?L2{FB>JJ5wbY9GSr7sKHz(gl6bccbqks72Q&z6>mw{Ny5M(
z72VuO%Bl>}IBZxN?u4x~c8I;xd4v=4RrwkA%)C+o?c$7?f}RvC0g#M@mNJjAb~>7h
zayH!XIr>MOhvYF+oi3%NgX*o5Y4MR1QCP8f8mtF%XgQ@Vng&XeIb*4%NDPYWJVR{X
zkpP+D=bd8mUh#^XoNzjiv)VmRDlxhKr$pfi@VuQ|_XQyG#?!k%r8@=-{2|iR{lv5r
zY{DiWw@4X0^Nuo?PTF$TiyPF*IXz@q`*EZGc3hZoB!jc>z?*ivpv1g-H2$x<>fz$8
zZ)g&T;nBs8d^pYG&DkzpEyjGKLiw{eMo`EvC#rm+yp)wGcYX}rE+*lXdh|z|rntYa
zX~vavEhl+YJr}cr-Vri$0w@NaOk(9u!sR=G*^Ix|*96ickCuN->$8?j3DIzgrmVe0
z86F|wPC{5dNK8M!(Oz*{B~5uh=6;N1F+N2)u2X+X%Fhk^jiL0Hx3Z!%8siYRJ^-^^
z!6`h0R>LF{DJFhK!dyCR8CRfZDNUgVFH9Mg{N-<;DLLiv>$gIAz<9El5Z@cjUvJk&
zzdt`&#{Leg{MPjg%_ibV!R{9e?OAlx;uTxcy(To7a5AExtt)adlj|)czT(s_!9sBo
z87m=2Hia~vhVESDIV@oiGX4Bfa2y+}*oT0E$M~HjNY6z7H?Ls7`E>d~8$B`N0<y)0
z#tQYEA!1JtiDh#^j0QcOWT!e2V%c!gf=;YzI;0M!B#*v;Ly6Juo4SmlBwMWa!gwC-
z)$#khp9)oF7n*|EGKpz#24t*m2~T9@=lZ(o>o-Xai5jGqtx++ePg9>d`qhv3I+&Cu
z-<0iKZ*e2d8j#mOX^vbKD(J9zME5~~GaXEDeJR*3TCD;cYdiYVs(a|x($#KYxg)n`
zg;Vlfuch8GIy-``)ds=*n-BV3GnHVx@Z+3-FndzT?6n<cz`$A!W3^(RM%p}MB<gIH
z)s$%n=L%rY9;aBbsmD4oRInMn!f}o+I{dv_ksCIxme08etc_PVjPl0<HfO7bc$g3=
zsXMufaiJqSj8l_f2yEo|#3@KIAyMkgt}U@5k&*m+W}#C+Ia$GC=1An~+}vf<!!3go
zE=xW2_(_E{0X*s@ws>{SGIAV^{ryHHeycHeW0U!P#oq}*|Ld|H9vU_HE0K7FO@2Zz
zZ8;&Y*DO+;ayDIX57~m+L8ARklu!J%5{xr1$A6`h&zcconTvQGq4hJ2C29~k+jeJt
zg_>mcm^vCyA9<3PgYFkAYFC$9>3>Z|Dr*i-sA;#f{agshnlvHjHUWs1dM1vk=n(<K
zV4cjFutV-$`N56lLi}4D<|BBdT-cO4DskWfexj%Z5m;t=#!f2&Vd^JxA*fO?BV+<u
zsRDg_H$|LOiO>V}O@JDYnRP6g#{7#P-}9X!VMO;vwC65|Qc{J!(AO*2zKoG1{a}A?
z-wf}fFCsw}VZA1sXKXHss_+gG2eHuyVQCUJ9t#avkK@$K63wc~T8H^ncm(G{9^9p5
z7a>!oir-jN3AtsVJ;eN90g}u<)@szuh5}2JGKv{a1C00Bp-t}c_g2n?i-cujDoEPG
zGbD;#;XCKdNorOsdHlI3^L@=15hhS}o;)zQX~vyAZ#LK4j!CSH?rXd^OQCy+{Xh7*
zGy4p+M|fd`rfe2kRKchex1!JUBKfmJQqmF*<y&x|tUGEN>RaoJgCEKk+%U8bTnjvW
z=tawsiI~S`(QD*;*-cgNSs4hhO*w79<~UV*5IIsuf`EVM@kTO(76e!OUCVCIg_04-
znyve~6+<yKMer3>w_}k)@<gAJx$rkMJDJjQR9MJS9wM^b4VD*&?(8U*b9w=;m%*^G
zMf$(P_COi<-`yS<5dh8Z$T_}|*$tg<n0~j20>+_gosdhuRuz>s1DGZR8Es8t@m*#v
zE8&`JQY+$sNTgc%PWnZg$A%j@vFd>?J!bKMkSWzWJM{KX>C@VJ(w)_h6TuG}yWT=$
z&XJ$~EE$}#z*xAv55zHs#a3~|{jftKPa+9Ak1eruv~2hzE`9NtvyA;Hv6}5gk^?Qk
zayR|(Ea%%JpBW~%`1sTBEc?R?IR9%L4~tV;Qv|B3M`CHhqUt}OhJ##V7xC)fT#rvb
z1txEt@=9m5`F{E5cL*m6lZx8nKB5=cO+)R(ho>4hd*}JCE@&)j)TBd0=Y(495;giH
zT9=X?;oIFpsFqsMxw$1-1j{ioysL(Na?o<fNj%gUxg|arbjEB)&eutaMSqB}$+UvR
zkNJ)W`Rv7F<E2VDhq35dFt&I!{eG;99Dpl@Y-MOiWoyZ>?j(fH+8%1jL41O5*ad-D
z@X1~=!bF}PBZ>~c_E#E~M-tN_zW=@LB8rth9rIEAELDV?g=J9+RLKfLP%F2*E?uzl
zj&cz%wv(}D{wXuwttA#}AknG3D2MK;C8)X!ykYeslPJA(jrtKkOQ6R14yWdOWu6iz
z&N}y3NDFA!G3JGVeKOMNOB86nRR)m=4TovL?H{U_5+cVXmmjg&cs8l;B%AyUes8hk
zVhw5jr@P=O8pve4`v|yMwtpvKCJ|DV(LyB`q^gv4^Ks-8y=xRJldEU|_*Q(zy=Ltq
z)}b5Rhzuh<Lh0^79f}N5(yXl}%SKTV53I8K=_6PN-#;<zx$K9oo*n(U*9y5hXItR)
z8+xswJ3!hoo!iL+=jc6Jjchvp(n=kg;%bXq{09{{GLX;RV%9f2Zl~l%X|x(B$_TD?
z4O_GLmlJi1T8V5g$9+(~UFS!=)99BblR|td(U7~+1jO~Nd`+etf|qnPLlI?rf&FMN
z?N8(gkL}$k(W9Gx#$mzWB#q+ehPNmMIiXApNeKO+kATN!#N)Va6y}E1z#_QDqexq^
zeBZ#Q)WZg^mzI_!E5hj0t|DWoHD^+2sA0{(Ch9Rx)Lb3ZO-)yir&e3XsQuXGM!fWx
zl9|~6hzlU^RToi4xTZg%^5BII@@DXoh~sE}!frxj(+Gzl^wWel&RqsA;2~^~F-u!P
zHcu__m;37UZ19C!BkLr};d(_(B>;RKpWx!8A+&t>Sy1vgyW(GEI$1x8bxM))_gq~j
z#Jdgad=f(v^o{(6QiERh*;x2uFw4ga&94WoAypHYG;ZkR*u}SkbCySE01^)v6oXy`
z^-9ANU#c~XB|Ta(+WEOCX~`yLWfcNgMFUF3qRe^nq?5?u*xb<2u;Ia(G<xYF3Rtia
z3x;JGHfu3`J6UH_98N?Y+tjBpkL&5P)>DOVubGW{q5#$(o|91>aZEJqB}S2Hp1aBR
zaM&Zi9tdllp|FZJIJh<NPF2onrix@`sI^LC;!vG)n`KH!^kz3+MJx7n>L+5AKoac;
zFS0%-ZR`6UC1XAQc$j~;HaxDbuI>|(B0SMeETwR+o=gxFu@*YX;@+By?9cOXtToXT
zwz01z%d%anz720;0_a2F9>J%}6oj}ZKJrcRgB{fby0m*D!LT>;XjVH>IN;!z3Yq&Z
zZt@Kue@1-ek))zeZ51I&=7Rl6OzU?nji~8h7%pj0U$w9O8{SXZy<#tTlYK+0pHE&a
zt_+L-$2Bs2o|bbG46g$hwzq+p8x&i;F2w<jF6-43+In%v-B&RL?+5C!g=-jJKlD-I
zVDmRDcHc0ZDXx25oDn|wO~;Pw9gZ%7%&}PW)YW3K(X%QnQhSsS{_(#;_5ysn<Wl~o
zr4QYeUAJBI)CpfA3@xb<$;qoG7Pax%_;FbcizCH#3a!c%HwJmij_?sHm=QEjdRxNh
zxZrp1vh8cxNH~vuxCe&|&I;ix6z^uHRf>>XjW*eR--faIzA&Uh`rV!@K{(lF*%op`
z*&_DR=qnV!Vd!t~akT}ZMK|e)5@ZzWfq08h_01R8(r<P6!^0F_`8Tk|UZcT!@lMJM
z`G2)dnMYaepzQuXEO#2@qAgpSAxI+{b#XWPuxCF<@N|ux8LEqe@>qxGHS$4KLq7Aa
zcNhm&y|S+ca-V_yxKb#b$<yxiu<+D6;mBmHtoYlJ#04A!n-}ekBOWFEIx!$tAGjP6
z-0id!2RqoOT9>9Df|(jBxPx5f&Iw84Om(%1W6_6r8mKCxJZQoRMS|rS?IHlW1~+o>
zj3t4__hT?4d*L^}dc4t-5Uen#JQ%k1hsatvfwDwwGEz+^AYO%~Ka+aPkpUDPs7#K0
zp-$Cwvr3_hXD~xnK2Rf7A~jw95=+hFE(x$kOfiN7Dz`6?j;g1?TbsrhV)vxSz;Kx}
z)4x<{5W0(Ta7U*{KL}A!YIXZb=Hh#nd?gO|P*VKs>Lc{EB^NG>dBYN!D}~o)p1b|-
z&_YCV55t^?gI1<`fh3|}LSx3JLh+Gi+e5RMRz5p^Xm-;e3%P4yMHOX$&8wi*rQ(pJ
zy_g;wHCvHnl~fZri3PvRdRNSziKPLxJHpu?;kk7~s+*`N+MT|c1knv0=sk@+`AX-u
z!HEQIZTxm9`As?~vH>r37{S1qb|+mTo~c}=Myf>PfFkqD_cUYHcC)AtW%?WcK(PQU
z^~NMVuL!BN#=Mx|Y*kHIP~ZN!RGA(+6ji_5E#&XgCz{AZGJa%r(ogrvIAInqU4{!E
zM{{>xe8AsHZ<>$;4sD#qH0sO&iKNn6bLy8Zr0Kz!#lS3B*T=6q<-TbFrq#9;89X~O
z4XbmZq3);_D3I4m_f#vJ(EX=y%Th^!WPkZGdPNb+^rbZ9{_0EmZleg@CmOCn8*j~e
z+-7V~`k2&{1%F(gXqrDIFo-A@dF6%!BvJPkactMnS6Q`QSr2edMRd%?WD&PChyi}X
zQTxD;Na`$ShDP#x`{o1@`5Gk1De(MV#SO2?0SY9<?K4eHi=oWOYN!5+wCo$z=7|vb
zLxjlD3EVioSI*9K<JlVSV9j{9KDW0aF;J#CcF>MH{GJ?|F2XlOP)5*5QprRloiaGq
z$U|o$zyASMC(o&p2^bl4+d5AUFXU;^OmlzhXU9wBlFO%&i?}K|9jGCHsQoe!M=k$y
z3YODd)%TbwQE>9bSk@X7ATq0W#r;duz~Z=TMkpLJKf+#~LI*VhwLXv}Ww{V5E4<cD
zQ>fWa5ugPD$1z<OE#>&4<@G7ZF<SthCzEhk-XhRDU60K2{^{+dr#kO&$NC~);xuTV
zbm;d8V#dSUnm7hV$N_^&5rgY^gJ86z8VIrgAWR~3uQVz+B$xp#DGfRQ`<~)_Koc${
zCGDTkDEF|WTkDCOQJ;P!Nniy3v5}AM!Yo)gEfiLyF=OitE$B#b#tCXA9*7`dEo<LB
zg~6aYCzZ(Giu_LXxI`?{o|u1u+bs7sA`vRVhm!bjFDS^(PS&QHu~r=DpMD+QG`8Ye
zeN@D+)qVf*!iS>GrlfD%421izD8Y|sB%LqQ(dpj7BAbVuF?>ezGKZSOve*U?%-e6o
z%iGy1fi+&kN-vtoAn=3Qr)4AOCdzLA2J?Cc%{Av(qi}FK8qOWnyLS!{2ji1?6+b=Y
zl!ueY$CyxD>w~2AehUq5F>lKTR$TdzJx}Ox#S+Lc4mD{H?nJSJ_rJ1*Do*LEs3TVN
zSfCSrW9mYxNh#P^Gp4Wl2w{14uvhLifx(XXjq<i`uNqr+MtL$`LK$2f^5Q&}S|qd5
zzUR0wk<h0|vs38?2B*ofA%)#6D#CZ!z^{rI_L`Lh>spp+qZdfEhuCm{`E7`tEB`cF
zBqEj&QL|+Ea^#WroE}b^WVgSDY?=kb5yBM@DLtNFB^_<p28m*BGgQVg7n8xzHiSN5
zBvE%Q!hY5G`$ic6?(~npgc>u4oMlgM<jkjgQgUMzB1ufjotR4=P{cZs*hwCMu5Zv-
z)VB>+$HW*Fsfu0J(o9+P`N&&Lbqk=Q+2Nn(Sk<q-CBaOhx*pq>(mOHqW)cKL5Cz&E
zJ5XKM@jns2<|_sAw}{S(b0}GH(w0edb5m}IKk5~nq?LzdunIc*JLJ)kewq&$y&p8I
zgmaqimawIiT~5k@3P)9hIm@4^!)L)ibPr&7%8|in&W;HvK<r$5<$s@Rp4Z@ZYLqIM
zCJgh$BEfR+`BjkZL`Lb93{Zw(h^NUCl0aq9r%h+2snMurOrlJp>#<&+6L<3uIw)V*
zO6^&&b!Y$^$2d?8s<+2N_00O_C<Pw32EP#cNvj7Tpsl>JX%mUgkR^O1Y5aI6k6+|d
zmNFKqnl9;mSS5FaVXto=E#-dDU;kFBVCY<Vi?0{BBwSRa?syX%ye<1ihWQfvxGO)8
ztTq!>S@w@h^8wjbXYPY>ggR$d6#Rr;m4kW!F|~rBKM6hN&e-TS*HDC$wqb3MnVAbz
z7gusrEq_JRY_Q)VakzpU5*xa(nx5bwPbmn7;kMxbOEgG6@DezXrzKxzdnpx?H}Za+
zee*sHQNk}?#i^t<J8&xV=;XC}u5Tq2c{(lgyiB9JNMo$~y`b$K@7=Vx+6fx@N{yz=
zB3p*wF8ad=<sbxYfOXWLzpsm&D)?)HEzFY6pD{;hhm*^I<kVbpf&Ds~4>A_4hQ+kl
z!>42^zY6D?xTKH?zIhkbjnC=(_EFV`DRi{}(+DxN<Z1$X#60R!T7sr;&-#g2ZK4Iz
zvyL|>IO|{~{OPZ?-!<XEHrw77#EC{106;HQmeKMcJKxJq^(-D%c_?tp9yltAX56RP
z@x2;}XwK9C|H&+$Po;Ljx-OvfWdG-_5z}_sd1D3->qbu!LJRtFsuT{T-Ai(lcM=Lb
zLtO0lJ@zGpZ(OBOmJUc3|HPtUQMX*+)2i>zruYnlEfO*W^`S|Od1P7FpeMgMO~zl_
zjKI;-rp2sp3mo>e>X?~j0v$m3f77Vp%L~Sb)W%V*cAI}5jzTei?JG0ABNv<!lKGYb
z4jE)INB~9*rv0&Dv-syqn%OxkVCQN<JeE()jdHr^m=Y7n4cPLUyT-|D89{ty1A(V2
zlM9XtRX%#h4ON$jnYB@Wi~LrdC(&O<Qa3LC4DTi!ax9_5ZHuEZ5cksiqbvCD10iz!
z=j;j<gb8vB+5*h{>`fbDc}=cuzTMhs`}hd2tl>7{<7|$2g)(0arv7jsqms`|RHkT_
z&4$rcfB{7;8nsjcHn^Ek49s?Tf(e9H@wW?>7n3;4gcRK~Gj<uQlOOXyY+rL!H_LXV
zmXCCqegeYgg4jQ3s$fkGDCXMHxEqJiYT6`y`qI953d}wJTqsRNv_LemKS8gF*x~^0
z8jRe{CQ~^9ETt?h2OU+_H<pW1PjRkl{ouocg2a?m648y>cMLBbn;HSy1HhktI<*wp
zM#K(Rj+vl~@fM8tx#le&vdl1%6i^U4nKlYAn_UT_#NAY`Z<;q4$~iccK9I1eNc`B2
zvQ5N~K}&W>iKRzwD2rXZ5iZJ11~*6W>7nAV)Rbq5U96t;CHBn+0jq|_gS<{l3L1kP
zTZ}4uU(x~b#j<x2N(IY%WrX&1?D(*(5g#z%q?S>g#pHl8rt_-Z-4*xH$4FvB1?)t9
zJd99CZ{asMgewv2-b6`47@6XnasKf$RQ!YKo?ZbQV&zwLWv;=}CE3I|y3d6dpoptp
z3JFt_MvNX{g8Te!q5WC7mc_a+`~)<zFEz*T!}27|m<*G;H;o8AqOW2)D&5$~A(32`
zFIz8ByQUVVHS^(d(qvykx?_Y>lWanpG3W81IzC;*lh6a4Cck>b>8E0%F{Tk6#X}MA
zbj9Hg_g&w1jDm?Bhs#nn;;uAH9UzS@*`ZX)if>7~R@}PsAriA4)Jy?xM4e*Ei);jf
z!z->_wWd51ahpPk3p$6AeNvb&msB5`C5Lp6q2ye$kZ{(8hI~>a=ZS|oYJNC<veUw_
zqo&FTSR{wOVUMnSm6Kkoz-?sw7PX<|L$$dEpA0e%g5^?^bFo-&1(X*<J-tmebv`*v
z3&v`7E?QUB8?@^`p)LK^P0$m0Ps%$D(D^!@`#m7moax;Gp{i$(205rO$C&4qIAtPu
zsZ;h;%(_H%`&>S+&}2t>_u>=n%SgP$kf$I<hW`_Y8XKaeqYx(olVG~9p#Yj=FS3G#
zPR5>;kus*NqdyL{u)v#MPKPgFZf|;gVn-NdwV)H7RVvuz6oo7htQ8-<cQ)5knwZmt
z6$*r<i0*%L0^brTJ}KlI>C{acX=C7G%|9G1y6*$iUC0bl*<&mqU-0Rx*@7Oh&RwPP
z&2fb7I36dHGem}nHqnZN)b)auRTDF|P^u5u1Z=fPCFt6#!SvWGbc%!R8!8j5usq=&
zbnTm$+d->xYX>P-wPV3TGL%SY^5&`gnw)Zxw+QB&lv!361q$=$kVxK5E=YsMd>V=x
zgT{>Gv1Mskrl=t_ta?CU+IJWNOLPw_xV0oOC0l+kr!8+UiC~)3t>pWO?;nj!ufz@p
zsf(Pi^)T2(X3{6L7XU2mX@rE9i@)fWV1;fL(=tRgmq=rO`NCt-f_a9BNZJ9Z#XT?;
z&)K#$N<;p|B#R|O{JZbR8|K&sTqt=T7G-P%;;JzPJ<9E!1#{)5L|q8+VaGTGf1Qef
z=q~5C*g%0d3pcCPcMiNon5CLsI=r;kHfrP@89Rs623cxl*{!7=wI3J#Q|?0#UIwfQ
zc77K23ygnfjXoX^Mw$cHMo9G?_}Z^m19D8k4Ou4{t0auG<=ap_Q1#PcNazD^-E$Vn
z;+`)+ou4-8+fl-rMtBbh-`?+`B89NWuOYi>6`l3me9z8s^lSj{L83?0<b<3xl0xCu
zMk7Z}WGzwbbYIB*R|*6&fjpBjIeu=F!mT`UFcMVMoYz*?`^7uh)7X6L+n167>MU*3
z(XUZ$BZQ62uPK}$E)x)qBlIQA^|XT@J4%JW-<j3G{AVQMfzsF!kY2P{9%F2wGTyRY
zI+BwgUe@Ky1kAeiizmeY26=!~&rYpdsYzy$@}GQV;}6uFcr#@qk<W^Zmvrb!g3)#>
zq}q<iN7W+0TG{o#|2@K%4zmCeG*f$`vV$m2V<QLbioay}1Q?&m?H*=GG*a|cT(98k
zcuWF^oq||Km>TGm?u}UaPAMcMeaToYk0UNIHyg%>5BRkCMkI2hOUrlP&?q#lvkEQu
zQIgcz?TAIJGuyY;jlN;aE)@9*-@M>x-e+Vn^aaJRPD&U~@m#IJkS8!&ga#)2wq5Ir
z(KoMnhf2+!Z4CuRz^azo%0LmYeNaVI5D(D*7Dp0e-H=e;D<Obs<$|6)EkGL6q==@>
z)J`tOgK1#z#g;LYmJNlGEOxI$_J$)1JiL@xfwBE$TfVyq*PonhBXn)=lWm&#(Z?$q
zi<s8BLq|hp7~*_|V)a8f9cgS8sh>%BX#+b*sz+UB)E(tqW*mrU_d_EX+tB!Yo!+ib
ziI0+s<#>Z?-`<cXb#{7Ngh(kO#Wu=SA67hbF-;TX^UN}wK?nS#nVB$I`;>g_2uESM
zXdIX<Gm{@^SYB03TKBinYrWdX{a-f!o?0bG&sp1jk5$8JgjD0x5v$R#sZcH&49V4p
z<1W;@+2Adqb1&D>8%`X4PT(eUfD_|lcJq#yGe-y6Sf5@u0`<{t4MdM$tvP)4N@|<G
z^=qEug?BOkh2oc$d|2bQylCf<Du;c3IiG_vSlycC(Azw2>`h|55A<T%HkrRRDZC%h
zE{g~xl5@kkR`r_)Q#j;;hC&nI^o^0^8`W}DhML|3-c*jJ%P3=MM2ZgHy%3TI#}nbC
zxKjTvr)Fi8lA*<cQq_VhJnjfNaa^%8gwyzC{_6tc+du0qZQp(e-xg67VEpi|+!(`I
z(a)3t3&ki_rU)#LTh<;KS9(-<0(nw%`-8h!+NAF7ak#7tow!&(9Fsm*B_V-K|8-zP
zdG{&1O4<;n@JSpt0CePr*zqU^%suCR^~@6ZH(=Q(zJ`r0J!$UX_6-_ob+WRi??aKc
zSjFZXog^ma>?s9ELFzy;eEb2O0Y=L!p>o8sYZF748v4C?Z)cr3<2#oG#;lMuER66H
z-BUx&feEHq?_r-H?g~KlC7Wv46^zp3JyuacR1)I1&`!RpSe)-QF<2&(-&1LgQvIa=
z8)cRT6rf#`X*A7^+Bis!#1h8p7MWUluXWD2>RAVsT71G-Eho}{^IG+!%70#P;w?_;
z^CcTW0f{g(A+_A|EA)>)-LZOkcnLw|FjBkoOClA(L!)6J@f^RGgMT`LDTGOf8(h{#
z5rm3yI1Xx9*vs7<)#b>X0n4Zqiq#8^Jxq={z%VWNlfA0cP!JqTVqkY8)O#TM1{FLY
zB`F#<ao$v&CROFqQ(c3o%VVx4oyEMl^sy=L%PrmYoPo_*%^8oJho4ROTkq*o@ebxy
zFc5VxqpJAajn9p&x_c%%_d6af$y^HLpL~*}r_itHuZmuNrFkYHnqRXK3ruj<hPX^8
zua_ZT%Otf!gIGtJ-4f)&BE95Tc8JPic;O6|s})Q)CuHs22Z*y>OAuJn6ZKMG=yMsY
zo$DtU(sO-YrjJ1=3&d2c<hRW01x1U5^fombCzL<ShB$#FPoBI3;9o{@w17E%G#D3U
zFOf*n{ayqSvU=sLxQd-3c1zKj#mo_#ppPtDq9SU2K-}!dg1i;KIWl*-EAifraDbmX
z%=WYM(+_Mq1WJYZh2JAMe<w*nwCyCLw#!?gZpbmAJVCXkra^QYJ^?J!-2fh(B&cZG
zeI(rPN9A}PeQkTsA@4z0T3+xMO=*(1%wM{z#uh-$pX#JnwN@Vo*Bpkl-SB}S3O8#m
zfvMR+)RXKAX4HEtvn8k}k>q5%k?9cqnk8m!V$KINrf&E>CB*F6LsJ-Zeb{1C+6rZI
zMafdRF>{=GT_Q*l>og)Zj4YkFD%LT~ahXAV5t=%SA~cdB3H}!|CzqsBpwCabke>o%
zG0}Msu)YLlW2K({_ctq=JB^&bu~4d4@_+523{fHQ7pMMdF2Z>UU`W-|r6a<>K$~LD
z<1A6@up(k(6?`g-Z%DVf=ReE+gN2hCql`56Cz;Vl3#30qL#t(h$!4Fh`977y;>SaL
zo+rF=sGH7%%ou~w9>qw4C%BQhm|!dPL9;$HMvc%G)$FP%GlgL85NyzF9!Jhe#g3%e
zDlh@Z7;?bwj*e(~!ueZT8SfXGMG(B!0Hbn0DO`~?4{RE@XAHMmUZXRsvZ2b%O7Y*;
z$BQ!N#}P8+m<0$1YT@(qz|*otzuTVxBjXe^b~bS~4(AQE)X2nW_dR-0)f^c|Fb1uU
zG}Ln>qDF+&!!YKV>XsONX+*0q9|mne{RoRd^{cojv98@Lw^F7eDIAyX9;@iJ@$V^W
z&~LpvImIKWeXudZk5Nz}-DNO&wmdIwNirc%vs5kNf}0-APVP#$+JdcIh<-ES4vC?U
z+x{2LFA|ouWM`dSX`to>U!gyc#IO2p+zdEYZFEb#T}u?dolOsztlWE6XAF#Cbe!x_
zednpIx7_BCTg-y=V1He2%yn5}4}uCD6f*r!pYOVI_ZGw@e&e`+rr_zpl(3V@&LgS8
zehje*k-D&3iU6579J1Nkv(pp%mgO<iYCTG$kDP^Tr>WnxPGp{)(j5tKeo(+P$)Y&<
zu2~4J5&P#|3uOkXBBAOW1_&3LfM=<OqFsVR(~7_z{BXWf3#r5+%8M>+8&WYK2LjvW
z+>zr?WQBlGJ~61RCm_B2%tY`nEO~J$GR$)<^Z@GMLRu|1MQvZoz4ETF_9cw>9KiWH
zgM`3nB-)$**4U{#nbX9RE4l~ZNTj=#`9(+;+Rq?sSxEsaG`Y`S{ML&n793qPkDz|d
zqWs-856-=B!0n_I?=>`9CHwY5bIvV;gg3*vAZIMi4(S0bsoVXkG^L%o`n!xNHA^7>
z*ZJfSmH%f}>U@>R-E|z=Ha`?bHBvg!u`>-u|FzB0GQOKPxfUNI>$`BDL^mEpQ3qIP
z15z75dtrNpT}QcOMncxQy*2%G^1CBb9SG-Q4bh?Z1q^iJD8Na8t9$GLZ0l#KFD|*k
zORK|bFKLHjNT9AnC4h;$c$MS&u4SYq##kSel`04soavZE=3XDSvcejbYv#tvQ!dnL
z0wjcagg@6AQcH;sLs#@e34gFf)Q@bc4ZFziDyr{{`$9@2DE<h?`2Ez=C;jn}Tv>~6
z$1W4TZtTx<eD+mdVKmNHGLo-Y@92m)F6{Fd2hxS!Uk`x}ie><&Lh1K$K~m|0ib$e4
z8??f--lom*^ge4QRF9Z$cMd*xvfg`sc1Eh&zuuo&Wb{964r5Bxs9le;1-Wsi*6u_t
z7REVw=xKgc_|8H8ZpB1c!}yy#gLg%miFsbalVmC)n@<DxppzNcos-w$Zfuz;rM}iu
zmZb%Y7Qg1r%>Omk3a7US+5l8cnUS1n5ibCinfcbIrA;QWVS+i~%H=8OMGGb9TOdNh
z%s+B4Af)>9;8;V-IJygg?olH)W%tyAW3SHN32f*Q4L3i02h`5&7u9nTL_7pS<(;HR
zE{Uv5w&Dv)q>$MSLS)Ma8w2xhU-1yzIa1Y;50U<66!#DxSfC-0(y2$x*iK;up@!f-
zMoG;sgyUHba(*J&R3ll^sWto2iz1`Kp#sAqZW|MZ0PS^LaM-1U%|YM+=)%b%i7p+f
z>q?~GDAO6if4f!d`V<qPIoJ`SiEK|r()b(^CEzvTB_KpZ)<}dlsCdu{%aXpOt6q6?
z8?BL!yB-(V1dUOcHMt`Aqva(Qm;5EXQn>qrlDcboget&QN6@qPzq*bW!q3Yw8Evj}
zzPIRKmkZyX<FkM5&wtB$p9xF-5bgyDDGPc`Qrj4=<A7QM1JUGBvf3k3%i=h+&nI)S
zXqfyJCMFE`82(#xfOBI>RuCS<)nUuvFmyw*`26p`Qh7hLn(7c^!XLc&?<OpuY&vlM
zFJ}xz>(Rcvo1l-)q1e;O*Z#;;4V5XjKWkmb+P)v{({(SrV}5KjArksTQ8RWU9wYMP
z=*{Xqd}CT~te*p{>C_IEWVEJxv7@|4e`vdRB9Sv;$ck?AT7{HXR#3A1LuQ55qT{J5
z`Bw>e`^73?8x`iG1r}uVM=vAKM5`812JVWZm<<67L#5TMB7z1j%R-z1a~}3OdaSVY
z7a&Y#TS;X^e9ze^@D+}mqN}IfKF+pFi#Be}kpjG>P4Yf3@`7hFHh)gg>&7Swqj<Yj
zqZw%dTbZIr9eC9%Av$opHb$xe;+G;T2MW0fLAT{Jxp30xTtNKr^CtCmnxu3u1Mb4m
zR+;8st-r@M+ROH=3g|V0t>U91`J`Dmj9nL#r5LpDzi?tl%O5jGG^(s1oQRBqvwbIJ
zbGkw0=Y>a}^6m2Yl64cB$`=pc+zMgTw&N&wB$v?$ONJm5=zOs9X`X=H94R%>e`}J}
zIPw-lwpTflRH@i$>M5C-OUvoQ5p?Dy#8#GEoC4QeVa+dJjCI5eC~%Zee^{AEWSB43
z<Z7{Q<fOBp>n3*Ed04oQNSYay{fN!mk{{?=Vmgud24}-a5KSGnGCjO<l8>)Oj6L$@
zXoI)<q8mp`p0P~c<s6A_-S7_ykDpLZfEyjUibt;8-13@o#>QY=EyfO8DaWgml7e<e
z0l@<NQAi`o#}%n~>R%)qWj+7WIYpRD-%TBOe^x#f9^O=zU2<c9LXEv%Ky?k!Okk<Z
zdznUDUL*Ev(EX=d;Cljf_K4<0525Jv0xw<j1QxvTi~Zc!4h#^zB~R*CsPpeg!s4j@
zZ1;OJ04&Da07fOVyRAt6&U{SV^rw<K_(SnwZ4Ii6f204ct`c6xJ<S~=hAP_$yB^~x
zQEp_S!$LN!$<OQGcO1Ee=$sM&;kwvLhRG<V-qwQyHIWe<wLDhHwV8UT{%H!|-YDf(
z^kr$0BF+^UWxrBkrkV0!y-ANIRG7m@m3M7sybr3|cQR*yPv_PpvV{<<1iVYyI`vBJ
zN3B4Om`y^0s;v*wa$)*NG@0X}Dq|X@><`8B&eyW#xXxu4_fy;IIhGlJxRXxYgWLTB
zx$L@q7!YjN69xnUq}fzTx5T#zpOep<(ga(nn?QTjx|_L0*2!&3m^=RsW^JDgSBipg
zj}M%RvzD-gR1?JYe<*CsRzP3AK5ylplN9sD%Mdi-bRdyiYhX4I#@osAO`-Yi!aDwI
z2|Ui;x-M}kim5oktvB03lEhaF0ilLvs?8fq^8fcA5|sO}W=aqeQ${wA+Q&uaVO^e5
zA^VH=RiOpGImAxYG}$o7?N4%pC!juAilm7=&3uZGlG0lbS|E)*7aXdHPqT9&)78yr
z&mSw_ij4*awJ=GSC+LWj1Km)hMY=@5C>D@IQ%fq_63t?AvdzIr_50E?O2mQ)RGlRL
z&`2rjHYYD+Ps*YeT3JyEkZIapO`$AquWlU1J+86LYSD2>A~gc<AQ|2hu418G)R^dh
zojnkbC<|Mtvdlp7(0&Dhe#|pZ^hO>|ItsN7H9pe2&~`RuPH|1$PjeF5&h0td%NY^6
zM0xAS6ir+%22(o;3n_7ZG#U?_h**0Re7s~2R|WS<^c+0C#E}*9Ug%Fsde59hCPoVO
z`EritCS|vI9&2Y|mu7)(lbWuKTU3gyY<GEPHkSd*N4Hp_Zk71SpIEw>+AF&fZvGAA
zVtx_h2KCy%t`hZ+ir6ludX%eD#a()Pes}$*qjdTE3!{!o+Hrl%hYlZmz}nU{VtJmp
zbi=waypm(|8}{?-ZhE@-T9IaFr{JEum0Emw7QNZ}Mm`+IhG|qy%|9wtJNzL32ouJk
zc)cu4LWdtVh@ZP=fum!Bf*+##td-aitY`SHa^xNT+glmvllk2mQUShJ2q?Y=1;a3z
z*CZ+XQgL$SnjFtYn|&H?Mb=6QJk=eP2$vi3Vxxi?z`J|#ibvj+p`#*`+OPB)tb~;<
zk#q2VGJ`}9g99mj1BiU2h7yZ|JwF8*4>SA%N4epv^sTX%wlf2rtHpV{NZ295%pwl2
z=1UPVw8RkZm(`+D{P=Bg85Uu>!s0sExn{&B<CREY+gZ(xR549OccO<HAXBlA;uiF=
z6Eglz&cM^}#zn<Zg{&g(eR!2DwPGw+@Q!72!iZS+m?bCX4{pLihRS!W12{C^E8wdQ
zL_|_qr+y(}aoTHmi4~S~oN{$nT_FDH1Q?4CG`X9XuS7iMVva+!FNWAWgBc|{%qB<C
z?=8VEoUnQ+s+PE()z~hZoB?tub)G~_pFfL_3x+)+9xX$M_BM4`IT6Kuf!&f!u)<p+
zf~a2I7X3?1i&7m@ol*UIcM+G(@F#dCsIzxP!&Z_F0+4XpFHBTe*Hs$`#K`(Wd}JuG
z=}~~2c*fYE4=<kNME(Ww4QX1{F~9jY;nqDskht+<PClfC>-Z&Ag14r~t%f(UI)qm3
zCWKcYP0lV*$>c1bu_%XvUmymzk*_O^FROfp9iK}UVzd7-!7l=#bEm3edRND%va<x@
zOWrkS5@n=>4$54|V#dL7un&3&)EZ0(r)WpFnLi*34g0nsJLBedzHg=DkE9An#({_@
z+Ty%(o$jg7ious-<Wq(A!YQ|-4!Rn)E$twwPabD4WoctartR_C#hAjZ<#|VD)obnT
zArgs_>~|zxgf)2oD=-Vs^m`%<xicBmshJX&kHX5r>*{nBquy481t@lvoS?+hVDUhR
zCAP@D#WF(o<?Cz@<knY@XX>fjLlG)8Scr4dxrh=jD%iMZOJ5=cke+}Xj4dVgjZ#<t
z4`r9P>25bB$t<a^385KN2|9$jzF7t;C|uP!;zoY>Tr+3R232ZPWcFft3=#g``=U-0
z$y3k@EZg=L;nLn9iU%Lny_;z-mN%}(JfpZ+rqYLCq8=H<#TM1a-e5M@SC5m3PQYOg
z(~{Kk;m%jA*n~?532d{n!s@iQjR-(a{FD;6Mv5Vo!%RcW?S;y<^zc6LgCw_D(n?}V
z2%@hedRih<WG|;FqSKnK*<iS=8^vENGOT7KnxqXCcX36d*}H6|t~3l8U}1`7r$^|S
z6am1DqfWgrtzrNhSTzYES+xK`$?6~gUG7f)SA~WKLLPruQ5-%bl%;<MKRKf=q$J(C
z<GB&YOSSN{npy<g5O`FC)kd!UOe?^N862;au|{>4121~!ZA2%r?UH)5ckUuL+S_5S
z{RxBudwORlDM07b9Z7BRBnWcrWE{c<zXq8mWF?n@N@kRiyF<ZHg;a5q%n+kUoALsm
zBA!3FTY2AR2+l>waH1gYg_}eT3{eqb!f4TQOaqLOBnI|yv3%?#z-hcK|2RyV(7x4n
zM<7B7y9dBXD5`f4ipwBG=)(9kTwp5wDw7>yHbt!~tIzQz0}hlXNDCo>Or{eP{6FE4
zrzNFF7fY4ypGNwGPao3hX9Q#4`4#c{wZB~SVk1Sajrwjb2(BHi<FO){o3fwgD`x?i
zSR^(eh{>iJR{N6!m<9h9`J*g`-e=7@6s{H}G|>4U@PsD7RpJvmy8$8w3Wdl>G~R#p
zR~BR{AZjhxZZ2j(5p1nd8I6&^CUGyQfB{eEo^VWMlY@v0d>UpU;0)T%pMT_LB3Uz0
zvIxc$;fiBpco;3{7#||qOY#nJs&0?mA!U*F%4+pdF4fjA321+eJ<Zvyf6Fa)n9L2>
zVuEWk90bT|ISB}d*)ih=J|WGiw(z_FpHLQPTL_l3tXGMc0I86`zvbx>lHUTud2G&H
z$u@!l^#Z&SehB3k`DgsOlLdbOB6@5f9h&w2y1+x?h{W6JwhKf=)oZ9%#<P>~HYx!;
z^{Y#tOUd|m*p$Lz$|O8?Q>g&$%SJ({<0QD<f_N~06gIYJck3|Y$iyIkel(vkC_BL}
z<KzV1grg&5uQHV{h4;ZD*jeeuf?9Syc0_>8qmls`ptuz<TTZNSfPf{89Y(y8m<d`=
z(hP3kC?GEBXwz}PyWLaMo(B|vCk5Nzum5qiw>18&T}yUuvkdD8p_&JY(teQIU?>3K
zv@DiQhB!)JOw1)<%2r$&7MD2)`X3^Ld36<q;E~x*Kr<NpL=Q-hD>8urRE7&Uf=<E!
zrCX#wlUZdQBt8nlG#e!Jwb2G;n8c>}w8WX(&<2=}A9gfqCoaVVvah}igo9o^udiWz
zl*P|F(-%mzlSh=-tlSeX6;+|gh%bX{p#d#NPz3LMQ7Rq&0g*H>5L^Iv&><8XlV_v2
z4MD168wQG7SD-YJ9NRGgP)9N%MI8ea8jWen>xm561cg-woPtH4k)jhe$eR85<#8i(
z_F>M1pcF93vcZ)~0!Rq;Qp!l7{671lTHw=NO!|FX2ysT9;2=<l@E;U?j#azFG#vK5
z)hvSb7lTqggn~fgN^q!MfX&4dz~L9Xuch-eRgTP?UIZl4fzELb%#=rnRy;A}Pf<JB
zfK6>1Z=S&wvpYea*wSiO_DOJ)1L48W=0*MwpwJ;k&GYj-;tLvPY&O*qTwwM~iS*#x
zP}_|fOKSuLI6G}|YEE$qj>VjG&@l2$P~S0(UyHYrUfcPw>3R`j5>sn{ax7P1_5ah2
zAiyO-CPrmPBwO@!6*ydgL$EYA$<Ei4w`^7#i8h15OSMAyyAJVU!fhfmu=WrTr!vX&
z;C80|_hW()j0OwYp&2{;%&BC#n(&PPD4be}R@ImU7Z7@PA`(i-!P1m!8qlaw$IeZG
zi+6(QeS+$C9){*Cpv$2lA}yo@5jebC2$I!&P($Z|T>%U1$HMi9w*#3ncbFLs7c5}=
z>a@E-_0?w=Yob1Hg)}uY=jv*l6(;uW*^CYL_xhY3P2KN~J--fImq(I|U980K=fQ8m
zp;s8Di4#}RQ7q$%cn-d60l0<|0G_zu$k=UcR#7^M9IkC%EcOw$#Yro384nqR73q>+
ztJDeyAy5Mlc}%Dn79)|#+LC%Ygi}f~P5>4;Y8cp1ilCx__=b3gCBMtr-gKMOa)jqv
zXdZ`?Q^8f2H;jk0e;9lX2``r91Szq_bkJ1wX_i$`o+pW^t7<a`F{N>o#Ir69Ljz>7
zW30|#OhN{dCo%_s7;<Q`UtP26Cuht>3&1>Ph)%*^DjznI7?Uo)fSjA&smV+=!TWwM
zVPu9_0f%+%TZz{@<nXt2*8$pO^y7=}gpe1{9gCdQ>g@#DH4>jBhgemKpYV_|DA$FJ
zB{F_Q1^gQ1R^wphO_@wyxaV@_ovXx0zP!w3MUC(a(Q2Vy=%u0CHeh&b_((?lrlATA
z5+%aKh#SLXj9I}v0<$eT7Pbs4iA}MGIiF484p;}LeF_Jo7CJ1|p&?(~C^LUVc5n-_
z`cp<Et+0MQD<~J9KOw@KtZb3U(9slPC=Vqju>n`MN{=}eBH?nfa!cPT<=jYCYujp!
z2=*+<3ILFSCqzSbugP0lSg=_di>DLxvKIY>(Ul15gM-Kqgt7^x{k$ax^J^K9wLg0j
zU_{wwlDMXAScodnYMMRV&WfgfZy8B)^0?^q21Ab<S0pjD#*Hj>veh!)vY-%eC8P}P
zkaAeQUd}gH*ThP(%_s>1VR@cJyK##4674(8h1;gMtG&7b)vUh0)1LYi!fGa5L=p=3
z1+8?Agw&)&V{}(8#l-asHmp(I+nsI`=eIgSe(=EkiMi>9;eFQEos$g83_a+Ok&?7G
zjx-4GF+6{7F);EBk))!y!Z89<g6mUmf_~!mH4`E$6gTco`&RmtH)pf8(moMshuwn`
z$mvNlMa7$e?V?Um{K+Wyfo03_bH8WoEpI+Gj=XMs?_xAe=53XfiGj!HA&%n`z;(Wo
zT;Z;ng(P4t)c{`G0C9$A*&e7p9-R<+zeoMB8U&nCdUOt2OpOVq)b>UsF4<)ZF<C-w
z?j2~~m*;Qh@02+ku@y}`VNA8eYHby*h?Huu!7~tzy7x*7)kxJ({6mGEU;hacL^G^R
zXv}A6P_UH^KjbS8Ni8$baZcXTYCX^PM>Fm4Ng0lrIp)aJfL23+>urV$qG8*N9!H;a
z$$hP7n*)*vt6lM#AiE~)KAqi2HrzTf99~A+YhJ()a#dFtTIP2jbUQng++jfn9NFO~
z0S#W#)77C$=@Uk8HmfX0siiIjUOfcYS^KF+ijYVVTHIlkek$J#h_6mn1a6W!Pb}e3
z6S(tC0M*7^@azAe?Xo?t0=aNO@ZJR_9R6~dYIZQK(R68c(I3(@2x#yUuAx`H*>s81
zX@N!h{1;A<MqDM6LdMoe@cDVP0PhdFi~ndOB=vuUiR#zvQkKV=QoRabkneV7t-FjL
zc$`1Jsc%_f$N;hkKOLx>S$i_f&>;Om_(O(~zh}6<;jCjve(*@T-o;fs%31g}zX(L!
zbb_CJ^^EvXy}&XMK}X113N}K|$$<&H+a{_J7OUj^PCyBT8*-D*`2eSZLc;8!P-L<Z
Yun`G{7qH|g!3Bv}E%u5|^8)Nc{(O=^>Hq)$

diff --git a/static/fonts/roboto-v18-latin-900italic.svg b/static/fonts/roboto-v18-latin-900italic.svg
deleted file mode 100644
index f8f5ab39e3..0000000000
--- a/static/fonts/roboto-v18-latin-900italic.svg
+++ /dev/null
@@ -1,324 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1181" ><font-face
-    font-family="Roboto Black"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="505" />
-<glyph unicode="!" horiz-adv-x="558" d="M395 461H128L259 1456H609L395 461ZM23 145Q21 218 74 269T205 321Q282 321 333 274T386 157Q388 82 335 32T204 -19Q129 -19 77 27T23 145Z" />
-<glyph unicode="&quot;" horiz-adv-x="640" d="M371 1382L266 969H81L170 1537H395L371 1382ZM711 1382L606 969H423L512 1537H736L711 1382Z" />
-<glyph unicode="#" horiz-adv-x="1164" d="M557 410H409L272 0H71L208 410H-5L27 593H268L357 857H145L178 1040H418L557 1456H757L618 1040H767L906 1456H1107L968 1040H1189L1157 857H908L819 593H1038L1006 410H758L622 0H421L557 410ZM469 593H617L707 857H558L469
-593Z" />
-<glyph unicode="$" horiz-adv-x="1160" d="M710 394Q719 463 691 509T585 594T437 674T314 768T232 892T208 1061Q219 1236 344 1345T669 1473L709 1685H866L824 1467Q978 1437 1063 1315T1144 1005L814 1006Q818 1122 788 1171T696 1222Q629 1222 585 1175T533
-1059Q525 996 554 951T660 866T806 785T928 688T1010 563T1034 395Q1023 221 905 113T587 -16L548 -218H392L432 -14Q251 10 152 137T58 468L386 467Q381 354 420 295T540 235Q606 235 652 277T710 394Z" />
-<glyph unicode="%" horiz-adv-x="1484" d="M529 1477Q664 1475 744 1393T816 1176L811 1109Q800 967 706 883T468 800Q335 802 254 884T179 1099L185 1174Q197 1311 292 1395T529 1477ZM391 1097Q386 1044 407 1013T471 981Q516 979 550 1011T595 1099L606 1177Q616
-1292 527 1296Q482 1298 446 1264T401 1176L391 1097ZM1058 658Q1193 656 1274 574T1347 357L1341 280Q1327 139 1232 57T998 -21Q867 -19 785 62T709 280L715 358Q723 448 769 517T890 623T1058 658ZM920 276Q918 228 939 196T1001 161Q1109 157 1128 293L1137
-359Q1142 410 1122 442T1057 476Q1010 478 974 443T930 357L920 276ZM396 111L242 198L1120 1323L1273 1237L396 111Z" />
-<glyph unicode="&amp;" horiz-adv-x="1349" d="M329 770L302 834Q246 970 254 1077Q262 1192 321 1285T480 1429T695 1477Q793 1474 872 1429T994 1306T1032 1135Q1021 940 791 793L697 733L865 486Q944 604 960 729H1234Q1215 441 1035 251L1206 0H858L808 75Q627
--24 439 -20Q314 -17 215 35T65 177T22 384Q36 612 329 770ZM474 240Q540 237 651 282L457 578L444 571Q370 485 360 405Q351 335 383 289T474 240ZM531 1082Q522 1016 573 919L642 959Q747 1024 757 1111Q762 1153 741 1185T674 1218Q623 1220 582 1181T531 1082Z"
-/>
-<glyph unicode="&apos;" horiz-adv-x="317" d="M394 1358L301 961H97L187 1536H422L394 1358Z" />
-<glyph unicode="(" horiz-adv-x="711" d="M749 1608L800 1438Q607 1294 498 1039T356 371L351 273Q336 -136 527 -284L455 -450Q334 -389 251 -270T131 22T100 380Q109 657 192 917T417 1356T749 1608Z" />
-<glyph unicode=")" horiz-adv-x="709" d="M603 569Q571 329 478 114T249 -246T-51 -452L-102 -282Q91 -134 200 121T342 786L348 884Q358 1295 171 1440L244 1606Q418 1521 514 1323T618 841L619 778Q617 682 606 597L603 569Z" />
-<glyph unicode="*" horiz-adv-x="933" d="M398 963L99 1052L190 1231L485 1097L523 1456H732L646 1106L960 1229L991 1028L653 938L823 667L648 558L521 853L295 573L134 696L398 963Z" />
-<glyph unicode="+" horiz-adv-x="1071" d="M721 826H1052L1002 537H672L603 146H296L364 537H32L82 826H414L480 1206H787L721 826Z" />
-<glyph unicode="," horiz-adv-x="545" d="M52 -391L-113 -312L-21 -149Q31 -54 44 21L85 254H349L314 46Q269 -221 52 -391Z" />
-<glyph unicode="-" horiz-adv-x="903" d="M714 497H129L174 758H759L714 497Z" />
-<glyph unicode="." horiz-adv-x="610" d="M38 152Q36 228 90 278T219 328Q293 328 345 283T399 164Q401 89 348 39T218 -12Q142 -12 91 34T38 152Z" />
-<glyph unicode="/" horiz-adv-x="707" d="M85 -125H-160L596 1456H842L85 -125Z" />
-<glyph unicode="0" horiz-adv-x="1160" d="M491 -20Q367 -17 275 38T132 201T78 446Q75 520 84 595L122 849Q168 1156 319 1318T704 1476Q894 1472 1001 1348T1117 1010Q1119 936 1110 861L1070 602Q1022 291 872 133T491 -20ZM788 906Q797 976 798 1029Q798 1212
-682 1218Q504 1227 461 913L408 553Q398 470 398 430Q393 245 513 238Q694 229 736 551L788 906Z" />
-<glyph unicode="1" horiz-adv-x="1160" d="M708 0H378L564 1070L225 974L271 1241L915 1456L952 1457L708 0Z" />
-<glyph unicode="2" horiz-adv-x="1160" d="M979 0H-8L28 232L546 713L617 784Q784 952 770 1101Q759 1217 650 1220Q573 1222 520 1158T453 989L126 987Q134 1124 209 1237T409 1415T677 1478Q890 1474 1007 1363T1109 1061Q1100 949 1036 843T848 620L696 480L470
-262L1020 260L979 0Z" />
-<glyph unicode="3" horiz-adv-x="1160" d="M426 869L573 868Q663 870 721 920T790 1062Q798 1130 763 1174T658 1219Q593 1221 543 1183T479 1082L149 1080Q155 1198 225 1289T411 1429T662 1478Q882 1473 1008 1363T1123 1068Q1110 862 854 742Q951 694 999 609T1042
-417Q1035 283 957 184T748 31T467 -20Q336 -19 230 35T66 186T10 406H338Q339 335 380 289T495 241Q578 239 642 290T718 424Q730 513 692 563T563 617L387 618L426 869Z" />
-<glyph unicode="4" horiz-adv-x="1160" d="M946 569H1089L1044 309H901L847 0H518L572 309H27L45 531L760 1453V1460L1100 1455L946 569ZM369 571L617 569L705 1021L369 571Z" />
-<glyph unicode="5" horiz-adv-x="1160" d="M121 716L323 1456H1153L1111 1194H554L465 903Q546 955 666 957Q858 957 961 824T1047 476Q1029 254 874 115T499 -21Q370 -18 265 39T101 194T44 415H372Q374 337 411 290T515 241Q597 238 651 302T720 499Q730 610
-690 667T565 725Q456 725 388 651L121 716Z" />
-<glyph unicode="6" horiz-adv-x="1160" d="M1011 1478L985 1212H955Q785 1210 657 1122T452 868Q575 985 739 981Q856 979 937 915T1056 737T1084 489Q1073 354 1002 239T815 55Q682 -24 530 -21Q381 -19 273 59T115 271T82 566L97 689Q126 910 244 1091T548 1374T950
-1478H1011ZM612 725Q500 729 419 618Q400 478 400 426Q400 338 436 290T540 240Q640 238 702 340T753 569Q746 639 709 681T612 725Z" />
-<glyph unicode="7" horiz-adv-x="1160" d="M1172 1261L454 0H94L809 1196H142L184 1456H1203L1172 1261Z" />
-<glyph unicode="8" horiz-adv-x="1160" d="M1126 1075Q1112 863 879 744Q963 684 1004 598T1038 409Q1025 208 874 92T498 -20Q400 -19 313 10T164 97Q40 211 53 393Q67 630 338 756Q190 871 200 1058Q207 1185 275 1281T457 1428T710 1477Q910 1473 1024 1362T1126
-1075ZM714 436Q723 514 690 564T588 616Q511 618 455 563T388 420Q379 338 414 290T518 239Q592 237 647 291T714 436ZM794 1057Q802 1131 773 1174T688 1218Q623 1220 579 1171T524 1041Q516 967 545 921T631 874Q694 872 739 922T794 1057Z" />
-<glyph unicode="9" horiz-adv-x="1160" d="M739 564Q625 465 496 465Q376 466 291 529T164 705T135 950Q147 1093 226 1217T427 1411T689 1477Q873 1472 984 1348T1111 1024Q1116 952 1109 881L1095 773Q1048 408 813 194T228 -21H207L234 250H280Q614 257 739
-564ZM598 707Q694 705 768 802L788 944L793 1027Q793 1117 761 1167T666 1218Q576 1220 516 1114T465 870Q469 796 503 752T598 707Z" />
-<glyph unicode=":" horiz-adv-x="607" d="M39 152Q37 228 91 278T220 328Q294 328 346 283T400 164Q402 89 349 39T219 -12Q143 -12 92 34T39 152ZM177 950Q175 1026 229 1076T358 1126Q432 1126 484 1081T538 962Q540 887 487 837T357 786Q281 786 230 832T177 950Z" />
-<glyph unicode=";" horiz-adv-x="582" d="M166 950Q164 1026 218 1076T347 1126Q421 1126 473 1081T527 962Q529 887 476 837T346 786Q270 786 219 832T166 950ZM76 -391L-89 -312L3 -149Q55 -54 68 21L109 254H373L338 46Q293 -221 76 -391Z" />
-<glyph unicode="&lt;" horiz-adv-x="1023" d="M373 603L872 419L821 124L24 485L70 751L993 1111L937 792L373 603Z" />
-<glyph unicode="=" horiz-adv-x="1173" d="M1045 722H144L190 982H1090L1045 722ZM969 283H68L114 543H1014L969 283Z" />
-<glyph unicode="&gt;" horiz-adv-x="1029" d="M638 618L142 803L193 1096L985 736L939 470L21 110L77 429L638 618Z" />
-<glyph unicode="?" horiz-adv-x="1022" d="M321 459Q333 697 474 821L557 887Q625 942 659 998T691 1129Q688 1217 598 1220Q540 1222 501 1178T445 1054L116 1052Q131 1252 269 1366T620 1477Q749 1474 845 1426T989 1291T1028 1088Q1016 919 838 774L721 681Q618
-594 596 461L321 459ZM217 150Q215 227 269 277T399 327Q476 327 527 280T580 163Q582 86 529 37T398 -13Q324 -13 272 31T217 150Z" />
-<glyph unicode="@" horiz-adv-x="1789" d="M1184 -21Q1105 -19 1047 17T965 115Q845 -21 696 -17Q585 -14 521 68T453 284Q446 454 524 627T728 897T1005 991Q1083 989 1152 964T1307 882L1168 282L1164 244Q1157 155 1234 152Q1390 145 1471 421Q1514 569 1518
-720Q1524 963 1407 1098T1059 1238Q900 1241 755 1171T495 961T311 640T237 273Q231 110 283 -12T443 -197T705 -262Q861 -264 1041 -197L1070 -367Q941 -453 704 -453Q498 -451 346 -372T111 -140T23 213Q17 440 95 664T321 1061T660 1323T1058 1410Q1319 1407
-1489 1268T1702 883Q1737 673 1677 448T1488 99T1184 -21ZM713 428Q695 346 699 274Q701 228 722 199T781 169Q830 166 880 214T956 334L1076 795Q1043 802 1023 802Q909 806 830 714T713 428Z" />
-<glyph unicode="A" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543Z" />
-<glyph unicode="B" horiz-adv-x="1291" d="M2 0L254 1456L717 1455Q991 1454 1126 1351T1249 1062Q1234 832 997 736Q1082 706 1129 628T1170 439Q1156 228 1004 114T586 0H2ZM452 619L391 270L596 269Q692 269 756 316T832 443Q860 610 704 618L452 619ZM491
-849L652 848Q875 853 902 1019Q926 1183 732 1184L550 1185L491 849Z" />
-<glyph unicode="C" horiz-adv-x="1314" d="M1222 496Q1209 343 1122 224T892 41T583 -20Q355 -15 224 127T81 512Q72 674 116 865T261 1197T498 1409T797 1477Q1035 1473 1173 1334T1324 951L983 952Q985 1085 935 1142T777 1203Q507 1212 448 783Q421 589 421
-506Q416 260 603 253Q724 249 796 312T888 492L1222 496Z" />
-<glyph unicode="D" horiz-adv-x="1294" d="M2 0L254 1456L682 1455Q871 1455 1012 1356T1212 1084Q1263 933 1243 758L1236 697Q1209 501 1106 342T841 93T491 0H2ZM550 1185L391 270L491 269Q667 269 773 405T900 821L902 854Q909 1014 852 1097T681 1184L550 1185Z" />
-<glyph unicode="E" horiz-adv-x="1122" d="M987 617H452L391 270H1024L977 0H2L254 1456H1231L1184 1185H550L496 878H1032L987 617Z" />
-<glyph unicode="F" horiz-adv-x="1096" d="M994 580H445L344 0H2L254 1456H1201L1154 1185H550L492 850H1041L994 580Z" />
-<glyph unicode="G" horiz-adv-x="1364" d="M1209 179Q1127 83 970 31T622 -19Q439 -17 313 73T133 324T104 687L112 747Q158 1086 350 1284T822 1477Q1066 1473 1197 1346T1343 979L1015 980Q1008 1097 958 1151T814 1208Q676 1213 586 1100T463 775Q435 595 443
-495Q458 254 660 251Q782 249 874 310L919 537H682L724 778H1303L1209 179Z" />
-<glyph unicode="H" horiz-adv-x="1406" d="M1184 0H844L949 608H450L344 0H2L254 1456H597L496 878H996L1096 1456H1437L1184 0Z" />
-<glyph unicode="I" horiz-adv-x="609" d="M367 0H25L278 1456H619L367 0Z" />
-<glyph unicode="J" horiz-adv-x="1126" d="M820 1456H1162L992 457Q961 238 806 107T440 -21Q229 -17 114 103T4 441L349 440V371Q353 252 464 249Q614 246 652 468L820 1456Z" />
-<glyph unicode="K" horiz-adv-x="1281" d="M587 538L409 371L344 0H2L254 1456H597L488 833L630 1006L1008 1456H1452L848 797L1183 0H792L587 538Z" />
-<glyph unicode="L" horiz-adv-x="1087" d="M391 270H984L937 0H2L254 1456H597L391 270Z" />
-<glyph unicode="M" horiz-adv-x="1751" d="M698 1456L837 446L1325 1456H1781L1529 0H1185L1247 357L1395 1015L885 0H658L493 1053L401 323L344 0H2L254 1456H698Z" />
-<glyph unicode="N" horiz-adv-x="1405" d="M1183 0H852L504 919L344 0H2L254 1456H588L935 537L1094 1456H1436L1183 0Z" />
-<glyph unicode="O" horiz-adv-x="1382" d="M603 -20Q376 -15 239 130T84 518Q74 638 103 800T206 1100T391 1328Q577 1481 819 1476Q968 1473 1079 1408T1258 1219T1336 939Q1344 828 1323 687T1244 417T1095 190T881 35T603 -20ZM993 942Q983 1192 799 1202Q657
-1209 564 1090T441 737Q422 593 427 514Q437 260 623 253Q745 247 833 340T960 612T993 942Z" />
-<glyph unicode="P" horiz-adv-x="1303" d="M430 494L344 0H2L254 1456L777 1455Q1020 1455 1159 1320T1282 970Q1270 823 1188 715T972 550T670 493L430 494ZM477 765L683 763Q813 766 882 847T937 1048Q929 1109 891 1144T789 1184L550 1185L477 765Z" />
-<glyph unicode="Q" horiz-adv-x="1382" d="M1326 699Q1297 491 1207 341T976 99L1171 -94L944 -266L686 -15Q630 -20 602 -19Q455 -18 342 48T162 238T85 522Q77 639 102 788T191 1068Q287 1263 451 1371T820 1476Q968 1473 1080 1408T1259 1217T1338 934Q1344
-847 1333 757L1326 699ZM995 942Q987 1073 939 1135T800 1202Q655 1207 564 1088T442 735Q423 595 428 513Q438 260 624 253Q759 246 850 358T976 692Q999 847 995 942Z" />
-<glyph unicode="R" horiz-adv-x="1306" d="M624 514H434L344 0H2L254 1456L768 1455Q1015 1455 1148 1340T1268 1024Q1257 866 1177 763T953 599L1149 17V0H784L624 514ZM480 785L680 783Q762 783 822 823T909 932T924 1067Q904 1178 782 1184L550 1185L480 785Z" />
-<glyph unicode="S" horiz-adv-x="1254" d="M802 394Q824 507 680 569L516 637Q171 792 188 1059Q195 1181 272 1276T485 1425T782 1476Q998 1472 1129 1350T1259 1023H919Q922 1107 884 1157T757 1210Q671 1212 605 1170T527 1057Q508 957 675 893T919 783Q1158
-640 1143 397Q1135 271 1062 176T860 29T569 -21Q451 -19 350 16T177 118Q31 253 37 473L380 472Q374 360 423 303T588 245Q674 245 731 284T802 394Z" />
-<glyph unicode="T" horiz-adv-x="1262" d="M1318 1185H894L689 0H346L552 1185H135L183 1456H1365L1318 1185Z" />
-<glyph unicode="U" horiz-adv-x="1330" d="M1368 1456L1206 506Q1171 259 1003 117T578 -21Q419 -18 302 47T130 232T92 505L254 1456H598L437 504Q431 454 435 409Q440 335 481 294T599 250Q819 243 864 505L1026 1456H1368Z" />
-<glyph unicode="V" horiz-adv-x="1322" d="M619 400L1065 1456H1457L753 0H379L135 1456H505L619 400Z" />
-<glyph unicode="W" horiz-adv-x="1737" d="M1189 547L1493 1456H1839L1311 0H957L898 825L584 0H230L157 1456H490L510 551L844 1456H1135L1189 547Z" />
-<glyph unicode="X" horiz-adv-x="1278" d="M684 974L990 1456H1396L878 720L1163 0H784L624 491L310 0H-99L431 748L155 1456H530L684 974Z" />
-<glyph unicode="Y" horiz-adv-x="1257" d="M656 826L1024 1456H1409L781 507L694 0H346L440 540L149 1455L505 1456L656 826Z" />
-<glyph unicode="Z" horiz-adv-x="1222" d="M437 272L1108 270L1061 0H-41L-6 200L833 1183L160 1185L208 1456H1307L1273 1261L437 272Z" />
-<glyph unicode="[" horiz-adv-x="570" d="M682 1460H568L324 -104H439L400 -349H-44L277 1706H721L682 1460Z" />
-<glyph unicode="\" horiz-adv-x="857" d="M135 1456H464L780 -125H449L135 1456Z" />
-<glyph unicode="]" horiz-adv-x="570" d="M186 1706H630L309 -349H-136L-97 -104H18L262 1460H147L186 1706Z" />
-<glyph unicode="^" horiz-adv-x="899" d="M554 1179L310 729H49L466 1456H709L874 729H639L554 1179Z" />
-<glyph unicode="_" horiz-adv-x="887" d="M730 -251H-148L-104 0H774L730 -251Z" />
-<glyph unicode="`" horiz-adv-x="684" d="M681 1222H434L205 1534L536 1536L681 1222Z" />
-<glyph unicode="a" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218Z" />
-<glyph unicode="b" horiz-adv-x="1128" d="M1055 539Q1024 276 900 125T574 -21Q414 -17 328 113L287 0H-11L256 1536H585L478 993Q587 1104 721 1102Q880 1100 969 989T1063 685Q1064 621 1058 560L1055 539ZM728 559Q736 620 737 675Q737 836 622 843Q520 847
-451 756L373 324Q404 241 509 239Q670 234 712 449L726 538L728 559Z" />
-<glyph unicode="c" horiz-adv-x="1042" d="M488 239Q559 237 599 278T650 386L958 387Q952 268 888 174T714 29T479 -20Q263 -16 146 135T51 527L54 551Q72 715 146 841T340 1037T610 1102Q799 1098 908 982T1014 667L706 668Q711 840 583 843Q409 849 383 550L374
-448L373 410Q373 242 488 239Z" />
-<glyph unicode="d" horiz-adv-x="1127" d="M41 543Q72 799 197 953T523 1102Q661 1098 752 986L857 1536H1187L921 0H628L642 117Q521 -25 373 -21Q217 -19 129 94T34 399Q32 462 38 522L41 543ZM369 521Q361 457 362 409Q362 243 474 240Q571 237 647 333L721
-748Q688 840 589 843Q497 845 441 764T369 521Z" />
-<glyph unicode="e" horiz-adv-x="1092" d="M525 -20Q380 -19 267 48T95 236T49 502L52 530Q79 797 237 952T626 1102Q765 1100 864 1032T1009 843T1039 572L1020 435H376Q378 350 424 297T558 241Q701 237 815 351L953 168Q892 81 783 32T543 -20H525ZM605 843Q535
-845 484 799T394 645H723L729 674Q735 709 731 740Q714 840 605 843Z" />
-<glyph unicode="f" horiz-adv-x="730" d="M59 0L206 848H54L94 1082L246 1083L259 1178Q284 1351 397 1453Q518 1561 712 1559Q762 1559 875 1537L850 1288Q804 1300 772 1300Q699 1300 652 1267T591 1170L576 1082H781L741 848H536L389 0H59Z" />
-<glyph unicode="g" horiz-adv-x="1153" d="M43 543Q62 706 132 838T309 1037T549 1103Q712 1099 795 986L830 1083L1134 1082L957 42Q927 -178 764 -305T358 -426Q250 -424 149 -383T-24 -259L132 -65Q219 -175 358 -178Q577 -182 636 55L644 88Q532 -22 397 -20Q293
--19 214 32T90 181T39 397Q35 457 43 543ZM368 436Q368 344 401 293T497 240Q590 236 666 312L751 771Q711 841 617 843Q521 845 456 762T374 542Q368 479 368 436Z" />
-<glyph unicode="h" horiz-adv-x="1131" d="M463 964Q584 1105 742 1103Q905 1099 983 984T1040 672L928 0H599L712 676Q716 710 714 740Q707 839 604 842Q515 844 446 777L308 0H-21L246 1536H575L463 964Z" />
-<glyph unicode="i" horiz-adv-x="556" d="M334 0H4L192 1082H522L334 0ZM221 1355Q219 1428 272 1477T402 1526Q479 1526 530 1482T584 1367Q586 1293 533 1245T403 1196Q328 1196 276 1239T221 1355Z" />
-<glyph unicode="j" horiz-adv-x="546" d="M528 1082L339 -34Q315 -227 193 -334T-117 -440Q-192 -438 -282 -421L-255 -165Q-200 -177 -164 -177Q-19 -179 8 -23L198 1082H528ZM223 1355Q221 1429 275 1477T404 1525Q480 1527 532 1483T586 1367T537 1247T405
-1196Q329 1196 277 1240T223 1355Z" />
-<glyph unicode="k" horiz-adv-x="1096" d="M489 399L369 295L318 0H-11L256 1537H585L433 717L473 765L772 1082H1189L729 622L1008 0H647L489 399Z" />
-<glyph unicode="l" horiz-adv-x="556" d="M334 0H4L270 1536H600L334 0Z" />
-<glyph unicode="m" horiz-adv-x="1721" d="M483 1083L461 953Q591 1106 777 1102Q875 1100 938 1056T1022 939Q1165 1106 1351 1102Q1501 1099 1573 990T1626 681L1513 0H1183L1298 682L1302 741Q1302 840 1209 843Q1122 843 1047 754L916 0H586L700 680L704 740Q704
-843 611 843Q526 843 451 754L318 0H-11L177 1082L483 1083Z" />
-<glyph unicode="n" horiz-adv-x="1130" d="M475 1083L452 953Q582 1107 765 1103Q915 1100 988 992T1042 681L928 0H598L713 683Q717 718 715 747Q708 842 603 842Q516 844 444 765L309 0H-20L168 1082L475 1083Z" />
-<glyph unicode="o" horiz-adv-x="1126" d="M618 1102Q763 1100 869 1030T1024 833T1060 553L1058 531Q1030 282 873 129T485 -20Q341 -18 236 51T81 246T44 524Q69 790 226 948T618 1102ZM373 524L370 465Q356 242 506 238Q700 232 731 553L735 644Q737 734 702
-787T597 843Q506 846 448 769T373 524Z" />
-<glyph unicode="p" horiz-adv-x="1128" d="M1056 540Q1035 370 967 238T799 41T574 -21Q432 -17 344 91L246 -416H-83L177 1082L481 1083L464 980Q573 1106 721 1102Q879 1100 967 989T1062 686Q1064 624 1056 540ZM736 674Q731 839 624 842Q520 848 451 757L374
-328Q405 241 512 239Q687 236 727 540Q736 636 736 674Z" />
-<glyph unicode="q" horiz-adv-x="1126" d="M41 546Q61 712 127 844T293 1041T522 1102Q684 1098 768 964L819 1083L1108 1082L848 -416H518L619 92Q510 -24 372 -20Q219 -18 130 95T35 402Q33 460 41 546ZM363 442Q356 353 384 298T474 240Q575 236 646 327L723
-758Q693 840 590 844Q409 847 371 546L363 442Z" />
-<glyph unicode="r" horiz-adv-x="763" d="M768 777Q715 785 666 787Q518 791 440 685L318 0H-11L177 1082L484 1083L459 941Q565 1105 709 1105Q750 1105 811 1091L768 777Z" />
-<glyph unicode="s" horiz-adv-x="1028" d="M597 310Q610 376 495 409L424 427Q250 473 169 556T93 753Q98 909 231 1006T557 1102Q748 1100 866 1005T987 749L659 750Q663 878 546 878Q496 878 453 849T402 770Q385 689 545 659Q684 626 760 583T876 475T913 321Q910
-223 849 146T673 23T422 -20Q305 -19 205 29T48 159T-11 349L295 347Q297 203 439 205Q500 205 543 232T597 310Z" />
-<glyph unicode="t" horiz-adv-x="692" d="M604 1351L557 1082H730L689 848H516L432 351Q425 300 438 274T506 246Q527 245 592 251L568 7Q485 -20 391 -18Q238 -16 162 72T100 311L188 848H54L94 1082H228L275 1351H604Z" />
-<glyph unicode="u" horiz-adv-x="1130" d="M656 118Q535 -25 364 -21Q205 -19 125 90T62 382L179 1082H508L389 378Q386 349 389 325Q396 243 486 240Q590 236 663 322L797 1082H1128L940 0H634L656 118Z" />
-<glyph unicode="v" horiz-adv-x="1036" d="M476 405L747 1082H1102L590 0H255L82 1082H420L476 405Z" />
-<glyph unicode="w" horiz-adv-x="1452" d="M967 445L1184 1082H1506L1071 0H794L732 638L447 0H168L108 1082H417L407 438L684 1082H913L967 445Z" />
-<glyph unicode="x" horiz-adv-x="1032" d="M538 786L737 1082H1093L724 540L922 0H594L480 318L269 0H-91L297 570L108 1082H439L538 786Z" />
-<glyph unicode="y" horiz-adv-x="1039" d="M484 476L764 1082H1127L493 -162Q422 -309 330 -374T109 -440Q52 -440 -36 -418L-11 -177H27Q88 -177 134 -158T211 -82L258 8L85 1082H425L484 476Z" />
-<glyph unicode="z" horiz-adv-x="1032" d="M424 262L898 260L853 0H-41L-6 202L563 820L122 822L167 1082H1030L996 885L424 262Z" />
-<glyph unicode="{" horiz-adv-x="655" d="M418 -360Q257 -306 180 -185T120 106L150 327L151 383Q144 492 29 503L52 731Q216 738 248 929L276 1132Q301 1319 405 1433T689 1600L737 1420Q669 1391 626 1324T562 1132L531 901Q497 710 302 613Q378 559 408 480T431
-309L397 24Q383 -130 485 -184L418 -360Z" />
-<glyph unicode="|" horiz-adv-x="517" d="M210 -270H30L300 1456H480L210 -270Z" />
-<glyph unicode="}" horiz-adv-x="655" d="M-85 -182Q-17 -153 26 -86T90 106L121 337Q155 527 351 625Q274 678 244 758T221 929Q253 1169 257 1214Q268 1369 168 1422L241 1596Q401 1542 475 1420T532 1132L502 911L501 855Q507 745 623 734L600 506Q436 499
-404 309L371 71Q313 -262 -37 -363L-85 -182Z" />
-<glyph unicode="~" horiz-adv-x="1266" d="M1184 800Q1176 676 1129 574T1005 418T822 366Q747 368 689 400T566 501T455 576L439 577Q383 577 347 529T299 405L69 408Q81 604 178 722T429 837Q561 834 670 721L711 678Q762 627 812 627Q921 627 952 800H1184Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="505" />
-<glyph unicode="&#xa1;" horiz-adv-x="607" d="M168 623H435L305 -372H-46L168 623ZM540 939Q542 864 489 814T358 763Q281 763 230 810T177 927Q175 1002 228 1052T359 1103Q436 1103 487 1056T540 939Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1183" d="M527 239Q598 237 638 278T690 386L998 387Q989 228 884 123T604 -11L555 -245H359L408 -10Q239 25 157 169T95 526L98 549Q127 781 254 923T584 1094L631 1318H827L779 1090Q919 1055 992 945T1060 667L752 668Q757
-837 632 844Q459 850 426 550L415 411Q410 242 527 239Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1202" d="M597 561L585 450Q570 344 488 266L1084 270L1037 0H-2L46 269L132 267Q205 294 226 392L251 561H92L138 822H288L315 1038Q340 1243 475 1361T813 1475Q1011 1471 1122 1358T1229 1047L906 1048Q909 1134 882 1170T799
-1206Q743 1208 705 1162T656 1039L631 822H930L884 561H597Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1365" d="M961 105Q777 -24 592 -20Q392 -16 261 106L108 -26L-15 132L139 257Q82 442 102 602Q128 817 274 977L158 1134L307 1264L415 1121Q592 1237 769 1233Q956 1231 1090 1117L1261 1265L1384 1106L1215 967Q1276 776
-1257 615Q1232 412 1099 255L1211 104L1061 -27L961 105ZM284 599Q268 488 302 389T413 233T594 171Q709 167 813 226T989 391T1076 617Q1091 727 1058 824T948 980T767 1043Q652 1047 547 988T371 823T284 599Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1085" d="M590 940L860 1456H1222L797 744L995 742L959 552H696L679 452H943L910 263H646L600 0H259L305 263H10L44 452H337L355 552H60L94 742H338L163 1456H499L590 940Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="518" d="M-36 -270L102 525H387L249 -270H-36ZM417 698H131L263 1456H549L417 698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1272" d="M1144 508Q1137 408 1084 342T946 227Q1044 114 1033 -53Q1018 -263 822 -364Q673 -440 471 -437Q234 -435 105 -327T-21 -24L306 -25Q304 -99 347 -137T487 -175Q677 -175 703 -55Q724 39 556 90T309 180T180 265Q71
-365 81 520Q88 620 142 688T280 803Q181 916 191 1082Q199 1203 272 1292T475 1430T756 1476Q904 1473 1010 1423T1172 1278T1226 1050H900Q902 1128 861 1170T740 1214Q667 1216 611 1191Q536 1157 521 1085Q500 985 661 938T895 859Q1159 745 1144 508ZM606 652L496
-689Q433 638 418 560Q396 450 547 399L726 341Q797 399 811 470Q833 574 669 630L606 652Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="993" d="M212 1361Q210 1416 252 1456T356 1499Q417 1499 460 1461T506 1369Q508 1312 466 1273T363 1231Q301 1231 258 1269T212 1361ZM716 1361Q714 1418 756 1457T859 1499Q920 1499 964 1461T1010 1369Q1012 1314 970
-1274T866 1231Q805 1231 762 1269T716 1361Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1570" d="M1088 597Q1078 447 987 363T743 282Q595 286 513 395T443 669L454 779Q473 963 576 1070T835 1176Q980 1172 1060 1089T1138 859L986 861Q999 1038 840 1042Q747 1044 685 973T608 777T593 632T594 584Q597 511
-634 466T736 417Q905 410 936 596L1088 597ZM230 572Q249 365 377 236T692 105Q851 101 996 182T1243 411T1370 736Q1392 895 1341 1037T1177 1263T913 1351Q730 1355 565 1248T306 951T230 572ZM113 722Q133 919 245 1097T532 1378T901 1476Q1084 1472 1226 1374T1440
-1102T1492 735Q1471 546 1372 379T1117 107Q923 -24 704 -20Q519 -16 378 83T164 357T113 722Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="887" d="M616 702L613 774Q524 691 412 691Q308 691 246 751T185 911Q185 1026 277 1088T539 1151L645 1149L658 1204Q662 1228 661 1250Q658 1325 580 1328Q460 1332 433 1229L260 1242Q267 1352 354 1415T574 1477Q695
-1475 767 1400T829 1200L776 853L772 794Q771 750 780 702H616ZM445 833Q514 833 606 896L634 1033H554Q470 1030 419 999T359 915Q352 877 374 855T445 833Z" />
-<glyph unicode="&#xab;" horiz-adv-x="1032" d="M540 499L695 117L508 116L303 505L304 525L626 915H847L540 499ZM685 499L840 117L653 116L448 505L449 525L771 915H992L685 499Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1100" d="M893 374H697L743 634H126L156 805H968L893 374Z" />
-<glyph unicode="&#xad;" horiz-adv-x="903" d="M714 497H129L174 758H759L714 497Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1570" d="M113 722Q133 919 245 1097T532 1378T901 1476Q1084 1472 1226 1374T1440 1102T1492 735Q1471 546 1372 379T1117 107Q923 -24 704 -20Q519 -16 378 83T164 357T113 722ZM234 722Q212 564 263 421T427 194T692 105Q851
-101 1000 185T1247 419T1370 736Q1392 894 1341 1037T1177 1264T913 1351Q751 1355 602 1270T354 1036T234 722ZM652 653L599 316H451L584 1166L840 1165Q979 1160 1057 1092T1130 909Q1127 855 1098 812T999 727Q1064 673 1067 574Q1068 545 1062 485T1057 396L1061
-333L1060 314L912 315Q906 352 908 388Q909 431 920 516Q927 579 906 613T819 651L652 653ZM673 787L781 786Q869 789 922 821T986 909Q997 970 969 999T852 1032L711 1033L673 787Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="1043" d="M957 1285H281L309 1458H984L957 1285Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="799" d="M226 1186Q228 1305 314 1392T518 1477Q623 1475 695 1395T765 1204Q763 1088 679 1002T479 917Q370 919 297 998T226 1186ZM377 1188Q371 1138 398 1105T472 1071Q523 1071 565 1109T615 1202Q622 1254 596 1289T525
-1324Q473 1324 430 1284T377 1188Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1079" d="M727 974H1030L987 703H685L630 355H343L398 703H96L139 974H440L490 1293H777L727 974ZM857 1H3L45 265H899L857 1Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="755" d="M688 667H77L105 826L405 1065Q525 1160 539 1226Q546 1258 531 1277T482 1296Q443 1296 416 1267T378 1190L156 1188Q162 1312 251 1392T471 1470Q610 1468 687 1402T762 1224Q758 1094 611 985L404 844L720 842L688 667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="755" d="M354 1141H436Q487 1143 519 1167T559 1230Q564 1259 544 1275T489 1292Q422 1296 396 1242L169 1241Q176 1348 260 1409T477 1469Q618 1466 699 1407T778 1249Q775 1132 617 1066Q736 1025 736 896Q734 784 635
-719T386 656Q257 658 175 726T90 910L305 909Q312 835 400 833Q446 833 481 857T523 920Q536 993 439 998H343L354 1141Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="680" d="M415 1536H782L463 1222H175L415 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1284" d="M540 1082L436 446L432 373Q432 246 546 243Q661 239 740 333L873 1082H1201L1014 0H718L724 54Q623 -22 512 -22Q436 -22 365 15L281 -416H-49L211 1082H540Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="981" d="M541 0L632 520L580 521Q369 524 254 651T156 980Q175 1194 324 1325T696 1457L1018 1456L766 0H541Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="647" d="M150 679Q148 755 202 805T331 855Q405 855 457 810T511 691Q513 616 460 566T330 515Q254 515 203 561T150 679Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="562" d="M249 12L230 -55Q292 -69 323 -112T355 -217Q355 -338 253 -403T-43 -474L-31 -286Q58 -274 72 -202Q81 -148 1 -140L-41 -136L2 9L249 12Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="755" d="M538 667H320L411 1196L234 1160L265 1337L641 1453L666 1454L538 667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="920" d="M205 1120Q222 1281 325 1381T580 1477Q728 1473 809 1372T880 1121L874 1055Q858 884 754 785T500 689Q356 693 272 792T199 1044L205 1120ZM371 1041Q368 1005 371 969Q376 908 409 872T499 834Q575 831 630 887T700
-1044L711 1145L710 1194Q695 1326 582 1329Q505 1332 450 1277T380 1121L371 1041Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="1032" d="M322 914L526 527L525 505L203 115H-19L288 530L134 913L322 914ZM723 914L927 527L926 505L604 115H382L689 530L535 913L723 914Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1418" d="M508 664H290L381 1193L204 1157L235 1334L611 1450L636 1451L508 664ZM377 119L224 206L1101 1332L1255 1245L377 119ZM1197 333L1284 334L1250 157H1174L1146 0H926L954 157H632L644 317L1053 788L1275 790L1197
-333ZM859 337L987 334L1027 529L1006 503L859 337Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1501" d="M338 119L185 206L1062 1332L1216 1245L338 119ZM486 672H268L359 1201L182 1165L213 1342L589 1458L614 1459L486 672ZM1323 0H712L740 159L1040 398Q1160 493 1174 559Q1181 591 1166 610T1117 629Q1078 629 1051
-600T1013 523L791 521Q797 645 886 725T1106 803Q1245 801 1322 735T1397 557Q1393 427 1246 318L1039 177L1355 175L1323 0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1648" d="M553 119L400 206L1277 1332L1431 1245L553 119ZM1389 333L1476 334L1442 157H1366L1338 0H1118L1146 157H824L836 317L1245 788L1467 790L1389 333ZM1051 337L1179 334L1219 529L1198 503L1051 337ZM397 1141H479Q530
-1143 562 1167T602 1230Q607 1259 587 1275T532 1292Q465 1296 439 1242L212 1241Q219 1348 303 1409T520 1469Q661 1466 742 1407T821 1249Q818 1132 660 1066Q779 1025 779 896Q777 784 678 719T429 656Q300 658 218 726T133 910L348 909Q355 835 443 833Q489
-833 524 857T566 920Q579 993 482 998H386L397 1141Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="1022" d="M679 632Q672 499 636 415T525 267L437 195Q299 76 310 -47Q317 -126 393 -129Q523 -132 555 37L885 39Q870 -160 734 -274T381 -385Q187 -383 75 -280T-25 2Q-16 168 169 319L297 421Q386 498 407 630L679 632ZM798
-940Q800 867 747 816T615 764Q540 764 488 810T434 928Q432 1003 486 1053T617 1104Q692 1104 744 1058T798 940Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543ZM989 1532H742L513 1844L844 1846L989 1532Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543ZM922 1846H1289L970 1532H682L922 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543ZM1260 1569V1547L1010 1552L880 1687L702 1553L440 1549L439 1573L787 1846H972L1260 1569Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543ZM1257 1838Q1250 1717 1184 1639T1018 1561Q982 1561 950 1575T884 1607T819 1638T754 1649Q687 1646 663 1558L475 1568Q482
-1685 549 1765T716 1844Q761 1843 836 1805T934 1762T982 1757Q1047 1760 1076 1848L1257 1838Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543ZM464 1671Q462 1726 504 1766T608 1809Q669 1809 712 1771T758 1679Q760 1622 718 1583T615 1541Q553 1541 510 1579T464
-1671ZM968 1671Q966 1728 1008 1767T1111 1809Q1172 1809 1216 1771T1262 1679Q1264 1624 1222 1584T1118 1541Q1057 1541 1014 1579T968 1671Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1363" d="M857 272H392L263 0H-114L657 1456H979L1248 0H892L857 272ZM520 543H822L758 1045L520 543ZM660 1722Q658 1810 725 1871T885 1933Q971 1933 1033 1876T1096 1736Q1096 1647 1031 1588T873 1529Q786 1529 724 1584T660
-1722ZM778 1723Q772 1683 792 1654T855 1625Q899 1625 935 1657T978 1735Q984 1774 964 1804T901 1835Q855 1835 820 1802T778 1723Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1878" d="M1693 0H821L865 329H503L298 0H-97L868 1456H1886L1840 1192H1307L1265 876H1707L1661 612H1230L1184 264H1739L1693 0ZM668 601L902 599L963 1067L668 601Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1314" d="M1222 496Q1209 343 1122 224T892 41T583 -20Q355 -15 224 127T81 512Q72 674 116 865T261 1197T498 1409T797 1477Q1035 1473 1173 1334T1324 951L983 952Q985 1085 935 1142T777 1203Q507 1212 448 783Q421 589
-421 506Q416 260 603 253Q724 249 796 312T888 492L1222 496ZM681 12L662 -55Q724 -69 755 -112T787 -217Q787 -338 685 -403T389 -474L401 -286Q490 -274 504 -202Q513 -148 433 -140L391 -136L434 9L681 12Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1122" d="M987 617H452L391 270H1024L977 0H2L254 1456H1231L1184 1185H550L496 878H1032L987 617ZM934 1532H687L458 1844L789 1846L934 1532Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1122" d="M987 617H452L391 270H1024L977 0H2L254 1456H1231L1184 1185H550L496 878H1032L987 617ZM867 1846H1234L915 1532H627L867 1846Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1122" d="M987 617H452L391 270H1024L977 0H2L254 1456H1231L1184 1185H550L496 878H1032L987 617ZM1205 1569V1547L955 1552L825 1687L647 1553L385 1549L384 1573L732 1846H917L1205 1569Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1122" d="M987 617H452L391 270H1024L977 0H2L254 1456H1231L1184 1185H550L496 878H1032L987 617ZM409 1671Q407 1726 449 1766T553 1809Q614 1809 657 1771T703 1679Q705 1622 663 1583T560 1541Q498 1541 455 1579T409
-1671ZM913 1671Q911 1728 953 1767T1056 1809Q1117 1809 1161 1771T1207 1679Q1209 1624 1167 1584T1063 1541Q1002 1541 959 1579T913 1671Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="609" d="M367 0H25L278 1456H619L367 0ZM611 1532H364L135 1844L466 1846L611 1532Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="609" d="M367 0H25L278 1456H619L367 0ZM543 1846H910L591 1532H303L543 1846Z" />
-<glyph unicode="&#xce;" horiz-adv-x="609" d="M367 0H25L278 1456H619L367 0ZM882 1569V1547L632 1552L502 1687L324 1553L62 1549L61 1573L409 1846H594L882 1569Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="609" d="M367 0H25L278 1456H619L367 0ZM86 1671Q84 1726 126 1766T230 1809Q291 1809 334 1771T380 1679Q382 1622 340 1583T237 1541Q175 1541 132 1579T86 1671ZM590 1671Q588 1728 630 1767T733 1809Q794 1809 838 1771T884
-1679Q886 1624 844 1584T740 1541Q679 1541 636 1579T590 1671Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1324" d="M32 0L142 635H-24L9 826H175L284 1456L712 1455Q901 1455 1042 1356T1242 1084Q1293 933 1273 758L1266 697Q1239 501 1136 342T871 93T521 0H32ZM686 635H484L421 270L521 269Q701 269 808 411T932 854Q939 1014
-882 1097T711 1184L580 1185L517 826H720L686 635Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1405" d="M1183 0H852L504 919L344 0H2L254 1456H588L935 537L1094 1456H1436L1183 0ZM1283 1838Q1276 1717 1210 1639T1044 1561Q1008 1561 976 1575T910 1607T845 1638T780 1649Q713 1646 689 1558L501 1568Q508 1685 575
-1765T742 1844Q787 1843 862 1805T960 1762T1008 1757Q1073 1760 1102 1848L1283 1838Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1382" d="M603 -20Q376 -15 239 130T84 518Q74 638 103 800T206 1100T391 1328Q577 1481 819 1476Q968 1473 1079 1408T1258 1219T1336 939Q1344 828 1323 687T1244 417T1095 190T881 35T603 -20ZM993 942Q983 1192 799 1202Q657
-1209 564 1090T441 737Q422 593 427 514Q437 260 623 253Q745 247 833 340T960 612T993 942ZM994 1532H747L518 1844L849 1846L994 1532Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1382" d="M603 -20Q376 -15 239 130T84 518Q74 638 103 800T206 1100T391 1328Q577 1481 819 1476Q968 1473 1079 1408T1258 1219T1336 939Q1344 828 1323 687T1244 417T1095 190T881 35T603 -20ZM993 942Q983 1192 799 1202Q657
-1209 564 1090T441 737Q422 593 427 514Q437 260 623 253Q745 247 833 340T960 612T993 942ZM927 1846H1294L975 1532H687L927 1846Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1382" d="M603 -20Q376 -15 239 130T84 518Q74 638 103 800T206 1100T391 1328Q577 1481 819 1476Q968 1473 1079 1408T1258 1219T1336 939Q1344 828 1323 687T1244 417T1095 190T881 35T603 -20ZM993 942Q983 1192 799 1202Q657
-1209 564 1090T441 737Q422 593 427 514Q437 260 623 253Q745 247 833 340T960 612T993 942ZM1265 1569V1547L1015 1552L885 1687L707 1553L445 1549L444 1573L792 1846H977L1265 1569Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1382" d="M603 -20Q376 -15 239 130T84 518Q74 638 103 800T206 1100T391 1328Q577 1481 819 1476Q968 1473 1079 1408T1258 1219T1336 939Q1344 828 1323 687T1244 417T1095 190T881 35T603 -20ZM993 942Q983 1192 799 1202Q657
-1209 564 1090T441 737Q422 593 427 514Q437 260 623 253Q745 247 833 340T960 612T993 942ZM1262 1838Q1255 1717 1189 1639T1023 1561Q987 1561 955 1575T889 1607T824 1638T759 1649Q692 1646 668 1558L480 1568Q487 1685 554 1765T721 1844Q766 1843 841 1805T939
-1762T987 1757Q1052 1760 1081 1848L1262 1838Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1382" d="M603 -20Q376 -15 239 130T84 518Q74 638 103 800T206 1100T391 1328Q577 1481 819 1476Q968 1473 1079 1408T1258 1219T1336 939Q1344 828 1323 687T1244 417T1095 190T881 35T603 -20ZM993 942Q983 1192 799 1202Q657
-1209 564 1090T441 737Q422 593 427 514Q437 260 623 253Q745 247 833 340T960 612T993 942ZM469 1671Q467 1726 509 1766T613 1809Q674 1809 717 1771T763 1679Q765 1622 723 1583T620 1541Q558 1541 515 1579T469 1671ZM973 1671Q971 1728 1013 1767T1116 1809Q1177
-1809 1221 1771T1267 1679Q1269 1624 1227 1584T1123 1541Q1062 1541 1019 1579T973 1671Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1061" d="M15 394L358 700L121 1005L326 1176L558 877L894 1175L1062 979L716 673L955 368L750 197L518 495L182 198L15 394Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1377" d="M610 -21Q458 -19 334 46L225 -95L4 -94L197 153Q57 387 96 698L101 736Q147 1073 345 1277T828 1477Q977 1475 1099 1411L1183 1518L1405 1517L1237 1304Q1376 1070 1338 762L1330 696Q1299 482 1196 315T942 62T610
--21ZM1015 991L503 293Q548 253 628 251Q767 249 856 359T980 678T1015 991ZM441 698Q422 565 419 468L929 1164Q883 1199 810 1204Q666 1209 574 1092T451 759L441 698Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1330" d="M1368 1456L1206 506Q1171 259 1003 117T578 -21Q419 -18 302 47T130 232T92 505L254 1456H598L437 504Q431 454 435 409Q440 335 481 294T599 250Q819 243 864 505L1026 1456H1368ZM965 1532H718L489 1844L820
-1846L965 1532Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1330" d="M1368 1456L1206 506Q1171 259 1003 117T578 -21Q419 -18 302 47T130 232T92 505L254 1456H598L437 504Q431 454 435 409Q440 335 481 294T599 250Q819 243 864 505L1026 1456H1368ZM898 1846H1265L946 1532H658L898 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1330" d="M1368 1456L1206 506Q1171 259 1003 117T578 -21Q419 -18 302 47T130 232T92 505L254 1456H598L437 504Q431 454 435 409Q440 335 481 294T599 250Q819 243 864 505L1026 1456H1368ZM1236 1569V1547L986 1552L856
-1687L678 1553L416 1549L415 1573L763 1846H948L1236 1569Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1330" d="M1368 1456L1206 506Q1171 259 1003 117T578 -21Q419 -18 302 47T130 232T92 505L254 1456H598L437 504Q431 454 435 409Q440 335 481 294T599 250Q819 243 864 505L1026 1456H1368ZM440 1671Q438 1726 480 1766T584
-1809Q645 1809 688 1771T734 1679Q736 1622 694 1583T591 1541Q529 1541 486 1579T440 1671ZM944 1671Q942 1728 984 1767T1087 1809Q1148 1809 1192 1771T1238 1679Q1240 1624 1198 1584T1094 1541Q1033 1541 990 1579T944 1671Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1257" d="M656 826L1024 1456H1409L781 507L694 0H346L440 540L149 1455L505 1456L656 826ZM867 1846H1234L915 1532H627L867 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1238" d="M591 1456L546 1198L697 1197Q945 1196 1081 1073T1202 746Q1191 602 1112 497T897 334T596 277L387 278L338 0H8L260 1456H591ZM501 938L432 538L606 537Q714 539 785 594T871 744Q885 832 842 882T710 937L501 938Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1300" d="M355 0H25L212 1099Q241 1320 391 1443T772 1561Q951 1557 1059 1453T1156 1188Q1153 1144 1138 1105T1079 987T1025 882T1010 827Q1002 784 1021 736T1095 612T1173 482T1194 378Q1185 192 1046 84T686 -22Q528
--20 422 28L500 284Q589 235 700 239Q767 241 812 278T869 373Q877 418 858 465T780 583T699 705T679 808Q684 879 739 983T804 1117T817 1177Q824 1231 797 1267T713 1306Q570 1312 540 1094L355 0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218ZM775 1222H528L299 1534L630 1536L775 1222Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218ZM708 1536H1075L756 1222H468L708 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218ZM1046 1259V1237L796 1242L666 1377L488 1243L226 1239L225 1263L573 1536H758L1046 1259Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218ZM1043 1785Q1036 1664 970 1586T804 1508Q768 1508 736 1522T670 1554T605 1585T540 1596Q473 1593 449 1505L261
-1515Q268 1632 335 1712T502 1791Q547 1790 622 1752T720 1709T768 1704Q833 1707 862 1795L1043 1785Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218ZM250 1361Q248 1416 290 1456T394 1499Q455 1499 498 1461T544 1369Q546 1312 504 1273T401 1231Q339 1231
-296 1269T250 1361ZM754 1361Q752 1418 794 1457T897 1499Q958 1499 1002 1461T1048 1369Q1050 1314 1008 1274T904 1231Q843 1231 800 1269T754 1361Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1064" d="M597 0Q583 39 583 98Q472 -24 318 -20Q177 -18 84 74T-3 297Q2 473 144 567T532 662L642 660L654 721L658 774Q654 865 567 868Q459 870 434 749L104 748Q109 857 175 937T354 1061T596 1102Q719 1099 811 1051T950
-916T985 716L904 207L899 145Q895 71 918 19L917 0H597ZM409 218Q510 214 586 307L619 481L534 482Q455 480 398 436T331 314Q326 273 346 247T409 218ZM446 1412Q444 1500 511 1561T671 1623Q757 1623 819 1566T882 1426Q882 1337 817 1278T659 1219Q572 1219
-510 1274T446 1412ZM564 1413Q558 1373 578 1344T641 1315Q685 1315 721 1347T764 1425Q770 1464 750 1494T687 1525Q641 1525 606 1492T564 1413Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1688" d="M1117 -20Q880 -15 769 113Q604 -24 386 -20Q214 -18 110 72T13 317Q20 482 163 569T558 656L699 655L709 704Q713 731 711 756Q704 839 618 842Q557 844 515 817T461 740L133 758Q138 862 200 939T382 1061T640
-1103Q729 1103 807 1080T936 1012Q1085 1105 1259 1101Q1389 1097 1480 1033T1612 859T1637 612L1610 435H997Q989 344 1035 295T1173 242Q1251 240 1321 259T1461 308L1524 99Q1455 42 1349 11T1117 -20ZM457 211Q533 209 636 274L672 451L560 452Q473 449 414
-412T343 312Q335 264 366 238T457 211ZM1235 844Q1086 850 1018 645H1316Q1327 700 1327 731Q1327 781 1304 811T1235 844Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1042" d="M488 239Q559 237 599 278T650 386L958 387Q952 268 888 174T714 29T479 -20Q263 -16 146 135T51 527L54 551Q72 715 146 841T340 1037T610 1102Q799 1098 908 982T1014 667L706 668Q711 840 583 843Q409 849 383
-550L374 448L373 410Q373 242 488 239ZM575 12L556 -55Q618 -69 649 -112T681 -217Q681 -338 579 -403T283 -474L295 -286Q384 -274 398 -202Q407 -148 327 -140L285 -136L328 9L575 12Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1092" d="M525 -20Q380 -19 267 48T95 236T49 502L52 530Q79 797 237 952T626 1102Q765 1100 864 1032T1009 843T1039 572L1020 435H376Q378 350 424 297T558 241Q701 237 815 351L953 168Q892 81 783 32T543 -20H525ZM605
-843Q535 845 484 799T394 645H723L729 674Q735 709 731 740Q714 840 605 843ZM763 1223H516L287 1535L618 1537L763 1223Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1092" d="M525 -20Q380 -19 267 48T95 236T49 502L52 530Q79 797 237 952T626 1102Q765 1100 864 1032T1009 843T1039 572L1020 435H376Q378 350 424 297T558 241Q701 237 815 351L953 168Q892 81 783 32T543 -20H525ZM605
-843Q535 845 484 799T394 645H723L729 674Q735 709 731 740Q714 840 605 843ZM696 1537H1063L744 1223H456L696 1537Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1092" d="M525 -20Q380 -19 267 48T95 236T49 502L52 530Q79 797 237 952T626 1102Q765 1100 864 1032T1009 843T1039 572L1020 435H376Q378 350 424 297T558 241Q701 237 815 351L953 168Q892 81 783 32T543 -20H525ZM605
-843Q535 845 484 799T394 645H723L729 674Q735 709 731 740Q714 840 605 843ZM1034 1260V1238L784 1243L654 1378L476 1244L214 1240L213 1264L561 1537H746L1034 1260Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1092" d="M525 -20Q380 -19 267 48T95 236T49 502L52 530Q79 797 237 952T626 1102Q765 1100 864 1032T1009 843T1039 572L1020 435H376Q378 350 424 297T558 241Q701 237 815 351L953 168Q892 81 783 32T543 -20H525ZM605
-843Q535 845 484 799T394 645H723L729 674Q735 709 731 740Q714 840 605 843ZM238 1362Q236 1417 278 1457T382 1500Q443 1500 486 1462T532 1370Q534 1313 492 1274T389 1232Q327 1232 284 1270T238 1362ZM742 1362Q740 1419 782 1458T885 1500Q946 1500 990 1462T1036
-1370Q1038 1315 996 1275T892 1232Q831 1232 788 1270T742 1362Z" />
-<glyph unicode="&#xec;" horiz-adv-x="576" d="M345 0H14L202 1082H533L345 0ZM539 1202H292L63 1514L394 1516L539 1202Z" />
-<glyph unicode="&#xed;" horiz-adv-x="576" d="M345 0H14L202 1082H533L345 0ZM471 1772H838L519 1458H231L471 1772Z" />
-<glyph unicode="&#xee;" horiz-adv-x="576" d="M345 0H14L202 1082H533L345 0ZM810 1239V1217L560 1222L430 1357L252 1223L-10 1219L-11 1243L337 1516H522L810 1239Z" />
-<glyph unicode="&#xef;" horiz-adv-x="576" d="M345 0H14L202 1082H533L345 0ZM14 1341Q12 1396 54 1436T158 1479Q219 1479 262 1441T308 1349Q310 1292 268 1253T165 1211Q103 1211 60 1249T14 1341ZM518 1341Q516 1398 558 1437T661 1479Q722 1479 766 1441T812
-1349Q814 1294 772 1254T668 1211Q607 1211 564 1249T518 1341Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1140" d="M961 1305Q1051 1152 1088 993T1103 656L1094 593Q1068 411 978 266T759 48T482 -21Q348 -18 243 45T85 218T44 460Q63 688 199 827T547 962Q663 960 771 898Q764 1022 684 1139L487 1027L427 1160L569 1237Q498
-1295 354 1335L481 1579Q700 1527 852 1403L1035 1507L1093 1374L961 1305ZM508 238Q604 235 669 317T759 553L778 656Q724 722 606 722Q530 723 475 678T393 546T374 384Q381 317 416 278T508 238Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1130" d="M475 1083L452 953Q582 1107 765 1103Q915 1100 988 992T1042 681L928 0H598L713 683Q717 718 715 747Q708 842 603 842Q516 844 444 765L309 0H-20L168 1082L475 1083ZM1085 1785Q1078 1664 1012 1586T846 1508Q810
-1508 778 1522T712 1554T647 1585T582 1596Q515 1593 491 1505L303 1515Q310 1632 377 1712T544 1791Q589 1790 664 1752T762 1709T810 1704Q875 1707 904 1795L1085 1785Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1126" d="M618 1102Q763 1100 869 1030T1024 833T1060 553L1058 531Q1030 282 873 129T485 -20Q341 -18 236 51T81 246T44 524Q69 790 226 948T618 1102ZM373 524L370 465Q356 242 506 238Q700 232 731 553L735 644Q737 734
-702 787T597 843Q506 846 448 769T373 524ZM804 1222H557L328 1534L659 1536L804 1222Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1126" d="M618 1102Q763 1100 869 1030T1024 833T1060 553L1058 531Q1030 282 873 129T485 -20Q341 -18 236 51T81 246T44 524Q69 790 226 948T618 1102ZM373 524L370 465Q356 242 506 238Q700 232 731 553L735 644Q737 734
-702 787T597 843Q506 846 448 769T373 524ZM737 1536H1104L785 1222H497L737 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1126" d="M618 1102Q763 1100 869 1030T1024 833T1060 553L1058 531Q1030 282 873 129T485 -20Q341 -18 236 51T81 246T44 524Q69 790 226 948T618 1102ZM373 524L370 465Q356 242 506 238Q700 232 731 553L735 644Q737 734
-702 787T597 843Q506 846 448 769T373 524ZM1075 1259V1237L825 1242L695 1377L517 1243L255 1239L254 1263L602 1536H787L1075 1259Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1126" d="M618 1102Q763 1100 869 1030T1024 833T1060 553L1058 531Q1030 282 873 129T485 -20Q341 -18 236 51T81 246T44 524Q69 790 226 948T618 1102ZM373 524L370 465Q356 242 506 238Q700 232 731 553L735 644Q737 734
-702 787T597 843Q506 846 448 769T373 524ZM1072 1785Q1065 1664 999 1586T833 1508Q797 1508 765 1522T699 1554T634 1585T569 1596Q502 1593 478 1505L290 1515Q297 1632 364 1712T531 1791Q576 1790 651 1752T749 1709T797 1704Q862 1707 891 1795L1072 1785Z"
-/>
-<glyph unicode="&#xf6;" horiz-adv-x="1126" d="M618 1102Q763 1100 869 1030T1024 833T1060 553L1058 531Q1030 282 873 129T485 -20Q341 -18 236 51T81 246T44 524Q69 790 226 948T618 1102ZM373 524L370 465Q356 242 506 238Q700 232 731 553L735 644Q737 734
-702 787T597 843Q506 846 448 769T373 524ZM279 1361Q277 1416 319 1456T423 1499Q484 1499 527 1461T573 1369Q575 1312 533 1273T430 1231Q368 1231 325 1269T279 1361ZM783 1361Q781 1418 823 1457T926 1499Q987 1499 1031 1461T1077 1369Q1079 1314 1037 1274T933
-1231Q872 1231 829 1269T783 1361Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1141" d="M1065 563H50L93 807H1107L1065 563ZM466 1080Q464 1152 516 1201T646 1251T774 1207T828 1092Q830 1020 778 971T647 921Q568 921 518 967T466 1080ZM326 271Q324 343 376 392T506 442Q586 442 636 397T688 283Q690
-211 638 162T507 112Q428 112 378 158T326 271Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1126" d="M41 544Q61 708 139 838T343 1037T623 1104Q711 1102 795 1076L894 1219L1083 1218L933 1003Q1050 872 1059 675Q1061 618 1053 532Q1023 283 864 129T471 -21Q393 -21 304 3L203 -145L13 -144L164 74Q44 203 36
-402Q33 461 41 544ZM363 527Q347 436 347 370L656 838Q639 844 608 846Q420 849 366 547L363 527ZM746 701L443 241L485 236Q578 234 639 304T728 532Q744 642 746 701Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1130" d="M656 118Q535 -25 364 -21Q205 -19 125 90T62 382L179 1082H508L389 378Q386 349 389 325Q396 243 486 240Q590 236 663 322L797 1082H1128L940 0H634L656 118ZM816 1222H569L340 1534L671 1536L816 1222Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1130" d="M656 118Q535 -25 364 -21Q205 -19 125 90T62 382L179 1082H508L389 378Q386 349 389 325Q396 243 486 240Q590 236 663 322L797 1082H1128L940 0H634L656 118ZM749 1536H1116L797 1222H509L749 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1130" d="M656 118Q535 -25 364 -21Q205 -19 125 90T62 382L179 1082H508L389 378Q386 349 389 325Q396 243 486 240Q590 236 663 322L797 1082H1128L940 0H634L656 118ZM1087 1259V1237L837 1242L707 1377L529 1243L267
-1239L266 1263L614 1536H799L1087 1259Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1130" d="M656 118Q535 -25 364 -21Q205 -19 125 90T62 382L179 1082H508L389 378Q386 349 389 325Q396 243 486 240Q590 236 663 322L797 1082H1128L940 0H634L656 118ZM291 1361Q289 1416 331 1456T435 1499Q496 1499 539
-1461T585 1369Q587 1312 545 1273T442 1231Q380 1231 337 1269T291 1361ZM795 1361Q793 1418 835 1457T938 1499Q999 1499 1043 1461T1089 1369Q1091 1314 1049 1274T945 1231Q884 1231 841 1269T795 1361Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="1039" d="M484 476L764 1082H1127L493 -162Q422 -309 330 -374T109 -440Q52 -440 -36 -418L-11 -177H27Q88 -177 134 -158T211 -82L258 8L85 1082H425L484 476ZM702 1536H1069L750 1222H462L702 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1124" d="M1053 540Q1022 285 896 130T572 -21Q429 -17 343 89L245 -416H-85L254 1536H584L478 995Q583 1104 719 1102Q876 1100 964 991T1059 685Q1061 623 1053 540ZM733 674Q733 839 621 842Q519 848 451 759L373 325Q404
-242 508 240Q685 235 724 540Q733 634 733 674Z" />
-<glyph unicode="&#xff;" horiz-adv-x="1039" d="M484 476L764 1082H1127L493 -162Q422 -309 330 -374T109 -440Q52 -440 -36 -418L-11 -177H27Q88 -177 134 -158T211 -82L258 8L85 1082H425L484 476ZM244 1361Q242 1416 284 1456T388 1499Q449 1499 492 1461T538
-1369Q540 1312 498 1273T395 1231Q333 1231 290 1269T244 1361ZM748 1361Q746 1418 788 1457T891 1499Q952 1499 996 1461T1042 1369Q1044 1314 1002 1274T898 1231Q837 1231 794 1269T748 1361Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1238" d="M1418 578H392L447 842H1473L1418 578Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1505" d="M1701 578H333L406 842H1774L1701 578Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="506" d="M431 1577L580 1494Q536 1424 501 1356T450 1209L421 1042H181L206 1203Q223 1314 285 1409T431 1577Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="492" d="M298 999L149 1082Q210 1179 238 1242T280 1373L308 1536H548L524 1379Q491 1165 298 999Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="549" d="M88 -311L-61 -228Q36 -70 59 63L91 249H343L314 69Q280 -143 88 -311Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="859" d="M438 1577L587 1494Q543 1424 508 1356T457 1209L428 1042H188L213 1203Q230 1314 292 1409T438 1577ZM778 1577L927 1494Q883 1424 848 1356T797 1209L768 1042H528L553 1203Q570 1314 632 1409T778 1577Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="865" d="M312 999L163 1082Q224 1179 252 1242T294 1373L322 1536H562L538 1379Q505 1165 312 999ZM663 999L514 1082Q575 1179 603 1242T645 1373L673 1536H913L889 1379Q856 1165 663 999Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="860" d="M91 -330L-64 -248Q30 -89 56 46L94 269H346L313 69Q274 -166 91 -330ZM432 -330L275 -248Q378 -77 403 33L445 269H698L664 68Q625 -159 432 -330Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="744" d="M156 756Q162 869 233 937T415 1005Q520 1003 583 939T647 766L646 727Q640 618 569 551T387 486Q284 488 220 552T155 718L156 756Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="641" d="M326 499L481 117L294 116L89 505L90 525L412 915H633L326 499Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="611" d="M321 914L525 527L524 505L202 115H-20L287 530L133 913L321 914Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-900italic.ttf b/static/fonts/roboto-v18-latin-900italic.ttf
deleted file mode 100644
index d1f9d3213a16d3e24765c0230689580e4c8cbdfb..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 37224
zcma&P2YeL8`#(Nq%cYk~CA||;NgxNI_Yis~^xk`sA}AdM1r$&OX$q(acv%q?5gP&)
z6j8*26)TDrMIqVyzh~|?cjt%i>-R_J_I7V}_j#Uq=IJvbln@e$4~3+5YTu!wx>R)%
zvaC6-j_K61N1s#iUtPlaZbE`@cIwlwtz%U9vxIDTgb?~>k3K~ucZ|*0Ldg6X=s#lg
z)R8k@joE*hkOgN6;ax}HF(*|EEo?!^5*vOWG;YTDsmpI=JVnUjDBOQy{K(leh>h6s
z{9^nbJbuc8aS#92H6OpB%`BcUX6pQ;dXa&6{(1cV&xElf$JBPZFo2LbLvUU;0T)6l
zLXYD2t~k$}Fm=xS*Pcp0jo&xp{YR%vA3d`FYfXy?nY9Sd{Cw)j`7?MjyNYvhf9kZ6
zQ^%&9Yl*%~#^CpZGp5g;;~GiueOb8pea5V@Gafz_)sB$6@P68asNy$X9~9z5BLO6s
zgpr=aNjeO4vZ91)meR6Ho)Danu$EPZ!bn79Q$uwhboap~56-~LMzH%ri2DKycZOar
zZkU!9k;Wq^ji5Y@Hl}I3er<Dhs?7YwJWhkZVcaw+tF2X?H}|S~?P50XRs@@0JB$rm
z!-f&UNVMx38z~_SBh3w4cmx1&+QOae{A~aY0iYoOv|87kfq4VdK1#S=<)r7Gw5Yft
zO|z%b?6T65nAjLCBR!k0Gyhsnht(csle%{s$MD%@0zJpC-2AHZ_+cHpj2$Z8-iyD%
zzSJnVDS%`fN??$9yAtlS;qAQ0V1Zm*U`0;-ypxN|cn{C8m#X4}&Yt*u)mOCn#A8)o
zs^iSjtjTuqf#<qzfkF2Hs|1olb{Z+EY2q;{AeaZMU?37~kv|+K;ns;97@#NzrXGH&
zCk7@dnBfVFoJmD-)kOE=uAFx!g*!F*8FbzmR8(#A`87zq(238;^Ma&NvRlk~Ckc1P
z$t%eMpA6uV;V6}@l$YAk^bFa6qdkKaY`*7>doHH_UiCrRZ|lyk+p_MBb)TjFTlHz`
zKWpA7-aKdv-DZxX+m2D&F}m9vA=)wXpJV1Y){9~qQPRkjtt`^EkODHx$SW)Y9`2D1
z1ag5E+G#jR6PU8JKtZd(aA(MQBO*`|E-<`0ih7Y|;nnqgPSe7jndgoA?)%chtMk0S
z0lTt7#Zgw~aFpsXF?v>6c22scYsrePX}X@_$j)}CT1;t489N=&<dOR(Hq(M`ovFX0
z!L|d6c~oi9qTN87t=ZOl#r11vavrJw>=}(#s6BeN9ZJ`B7}~A(<oiZF{b}R}pCteF
z0-ZCO4(rfraQA*w){i{=anze{$C+=_ne+M)%)>*j@6|5q84^P3kz7(n%E^63PP66$
z)0}XpdR}~DVDOnIKONu`N0GB>k#~Mtlu8Gs(j|k03$E0Qsv~@coP<}$`kbbRI}^@3
z6N;Sa;nf8`*Av34OTDKc6Nm$n<bWQamK`LC0nN&CvNhfJr<ROsm|plLTl}Qv&{!6+
zdbdptI<ax(qnZ|cQc?376m$p-3al!q2w?ZGe$=LgzO;7vUQM$N-BQ3B<W8{%sPzkq
zDr~h^xAAEYtFN=YtJ|%AlCga&y4>@GxvX(3*1Ade*$Qi4R(q4}Th;Bpy$XA5P4_|T
zD$J$DZJ4sAZE0)9I+grAKpEQ~;*Es4eo!u`XGt>2Athw0QC!+c(6v~S2cK!4Ij4hg
zx<$okoJ3pGEFLHEg89PqXxv(z;^iPCU0yO8$b(Z4uP*lf2)gBDJ6f{XWTu0iV#^$9
zOpi^=(Q*ozqm0HlI4)~3b}iOX<|Y~KoY2H(n|FH7s9pWkpznq~(IcEj+K)VC?k#!t
z#Nsn!^iX=V?eteeDgy)B%nm5+FfmZgD=6*5S?e{EXCEKO`Jf#`Ufb0C#vO~zFHhd;
zGFssio}KfJc`q-Z_4WQeI}YU)ZAaE`GoV3h%6ee#jpVP;{hH90c7v)KkP~tZ!WA+N
z&`T+{cIexKep0)evso+LG0beqQ?&|cif}`b(wI1HU_;S8R%2Xev3hnkb3{fGcCGZ4
zPtw$|mns(Quhate(?qS}z($jqqeq$JH}7xpD;;>8Ml%~7N2qI?*_=(*I+92{H_#p>
zAyJB)!Q#0ZBYI9*q}>sj<A{m0$7(tooce<K``*%5K26mEU+8@JWgBHdtm$uNFY}8Q
z2R2iaZW~3n-@m_~IotfU)d<WnN=CCn{sm-iC`ok-7zM+s$N@he4+P?z0XPN}#o>)v
z4i$1PD^|7ZoafN>=EcDn%J=%y@)Yy%fv4~OdJliC>X}t^y!q&zZwxYjpGtGgAMO-y
zNhJ>`iONwD1lf*<ImvlvKzOz0WeO)3LN$%!KfC;oy+^y0m`6L9=h~Y`N@&-%w3L^d
zUziK%YMMqDfi@fPeJC+uTcjAa03rXxqpQ^*ugt@1#1PnXz)6lYoi*Awq)|vNwPh5T
z3wk^@yvvX0&A$NMQu;f)!T!dqh$I-|YU+hc0A){OZ`K|wV4dmjR2A4{x~|jvX$7#!
zFl@mg^3B3L2mt8<Fe9qDSJ4(Xboi*(Y&NA!<pikJZe7Q1?K);~=PqMmq)^ug*K%Gd
z^|>9R;Fe#Ou~FPGHiMS-`-@%wd$Cp^^lul}_sVef4M3YpDvac`bU@%t4hL0lqa!Rc
z1<Ij1){7X_S#`4aw78*K$S^G(kt8+-!b<0i*vlM^a<VzsqP5r<JN;?V^J5eqkX=X%
zub#YQV*&Mx&G*{{&^bn4<3M%(vkjv7^h@_tb}?xw?Vu|Ee2A~L<{RcI{#eJx$Fu<R
zw7IoU{pa-n+7>kY3PR{PwHg*yxf^H|#8WLnV*za_L>0&>Mb+F3tiiarDy%5GYR_`8
zQ|8g*=AlBiB1<V8L4z()LDPRQfyY35#FN2BK)r;zQSvh!tQS?s`#wHi8gx8d9Gv0d
z)i$3WgXL8tS{?)l4k|>xl<W{{PzjnA##H`(O;#q;Iz1j5G_~905c7H4gSXaSyc!m;
z^v<ncv+N(}SDl{NGKaIJ6WBdhmQdx3lQTY;d+#Sq@K=EAM`aoyZ$K6pnR)qjkcWXp
zVHSxJaFQUzFAWp8ErK~0cchfIqim=%EWBFx0XdNB0udTso$GToDwm3@P-+=IS5tE{
za20GH3;pj=SRS-giJKzCbeiB1`FjpMuxZeoAX~?dZN`L}N40x@Ty?o7D8xlZj!^YS
z%$pA`zc`E13fjA}&ywKaZiAeBEM;Q{w;xDZ*H-L~qob+%*>msAFFr7N)tSkhPJMY%
zry-1u>r*wBV-y+W1yQ=HM=;kyNgqQC3l}hJ!p^x3uS?k_X%eVNjEkz77dK(?QE?|M
zQX^FM0G_2hL&zKlZLHE*J2y5IY$!92mDPR`$=;%UYqS0t$eNlp=3BJ!=X{&4*4)eJ
zDU4Ab=AiJRlAt>il2h<DH#`)>Lai~fEN?-2U;fpp5E{Y?NeHNuR)(4&hbbhyI@$}g
z5g9Fp*GNhbN*1!rE`(&6qa;$-h~H3Tr0Wab<SiT2zF*aA{>$%1Mw)M4Ui$tV5T8}H
z>pdkbuxG!i?b+Mx8}p|5StDlted%-aM}^ONePQ=uj4xd=eRd`2-3E3+C-pRDO*R>8
zXgT!-prCg>5547tvG9{q3G^1i#7AfvI+4Sq7a6K9zWG_6m``b5{4fGMLsRrJX%0Z~
z!<u3+l_E18G+WoAqXeVj8vnCi@&VJ;_0GL>AMF+tw0_RYty?}C6A_kljn4kaJUpY9
zy`ue?#ld=|dfNP(Irq<1*wQPjR)5!_2WOAakllBFMkl|;YQvQ2_cj_hlCpDmb(H!K
z?v(Nj#!(}sw~<3~GzEgH{{Rw?0HV-EU>;?2ZHc*+y;VE50l%eOyJc4nQbkx<^+C<q
zu(D!F1}P$ojQrw;f}Z)(t-xo3hpN)BvZ!hU3)uu07ew1c?}8%Zr2;zCsKiHgf|qm#
zE0C-amQWzN+5G70j1I5P@%9CoHDSwZ3TO#AUzR0Ju$UO?p5wwmEwh(pXTU&}cC0ck
z^vAxv^$_#DFGn42xhN!*hHVbi*L=J7?6>BCfOhS>%?JwU)V^}s5L<bZHdTSP@}{i@
zDWxCGYkqM28$T$tynNQtYj@3l;qI5mbLI1z_qvZ^Z2ExSBN>~*&Q=a!qk2^iWn;i^
zce;L3hDZu!k_kp+R<=MTGTfPZyZLPgW$c17%r5;MR%8$+zu7Tqd=x*NojC8z5~|O~
zIu*3YfDn^n4XO?vdm5a!OdivUH4=gxLY!ThwRHYdy@P{y{<ZG8&%;$cw8+dgAB#>X
zq}{_uR7R<-TMe2Ypmbo3M$@~#Ua{fdwOsw@Y(=Lj<|eZb4b$nXY~=brgT_#H@t(?o
zE*HsiU1y2PILs;$htZ+C*YRYR%k{XqfJNYX4z4WW$>78AIH3dL$RhrgG63f>K75$~
zR<z7el~X(AbT0j~wB|}7-`<1`e$M=uPNac!g87P&o$YCY(w2V+KGgAih#Mz|Lta!(
zynG>SbH#fK(tw?XJXE4<?kwah7RXO_fhx5fz|xdNlWF{8rNRrBG*bjz@W)hPmu3m5
z?CdTxyp+ck)=X-`COuEH%&q3%=2qHDz%|G9rxFbNC5~j0;YNUa%mc!mNuDwH({q;R
zR-NcIs)YSWiVPkm6*RP+kAjBsa|WF^Vn`S`3E&8i%+k+gnI5MD4w{cuM%x76*Qb34
z_zC4b!p&o0H0t8gSBBYwjk)7v%$00PR}l%B+^upVee0J+Z5=bZ4CHKJPj>cOg^xHq
z=gIqr4p?cv(QVAIj@?FA3H&0=X4)I-O5z|LpurP5b`m_D5bkUb{2CTH>$~kcY4Awl
zDUk_QrDzBST57Pk0V1bGaGiE=+Rr;1!iD#_QXiVz=QKFHx}EnF1|254kfu4=k!9fM
zSh!U%<Dj%*=P3-nm(bykSS=$v6IUWhW~>6+k115}ztHY>Aq|w>J?6&F-!grPqVKr5
zwfnk$>lD4)Bfatz?WgZ{nV)~ZM$;yKxc!kMNlUN2W1ioyYCC8Sz3W}7(!O~a3rtt-
z!bpWR$Zj~M-u$$vSv#XyMawk`-@EDn9sDw5B~5Fe$gbi#joSRspEOM2_nBACP0u}c
z{cg(I9q7+?(vq`R=qt498P3fg|GHqdxItg<T~Sz0`G^X7PFJ1-y<O`e!@q<K*GVAh
zYbZgIe27N{dicrf(pWJ(Np_rQ5Ga}uC^kieir}+V6R#LC0_9aPDG;TT|8ZVr7A-Yb
zb57gR5c3i9URv0ihMT`3RM(TG(7%P$hY_b-13V#^Es5lQBQ_~nJUmv~9{7y#z~yHv
zSe7U_SK4JUMMtK`+#SP)9{D2XS8?bOGdzaPG+v6KLyz1Yvq5~X#P{k@ub?yZ&=~P1
zsN--i8p8TW^qv+sEVZi&VmWSokj8mz3AiFB2c9@SSq*)cM$*vWuxtH>>!Iem=8aV?
z&W%_SocPGaJzpfmy?Ru2Qu@yE??xo=nD+iRY_j<n9p2+{+xJx6zn4O`QBvXhQO$=;
zPb58!Ac?zMg!#qq>TER<ENnF+Op(I|F1CANMO3jm-g}CX(1Zpf;Md5^*ccKkVpExJ
z52ehZoDO-~ys{q#PH;fg8#Ln4Uubl&`4k&7#r&gLg8IUOjZyTshkseZRhszcqx3GC
za35F9tJmquSxSJ}=hZ%c>&o48#0(ZA_$x**7}B@G2#<{uR1Ft`<u+EHHFAQ^Azom`
zD1>=WCD}_9p>H&%=yp&YzB|AN!4JMj>oqHl(i7e>Pn>ABYmD<^6w_zT0-?_weCX*G
zr_5KMWy+qKsg#D(xU}8-VOvlM<GX+{hzxcEC7IbWBI?K+q=*0pf}BQ=AUex<DF`g%
zs{lY@KO5Okn7UbC=mX)I^G|DkY{3>3)ikW(?-kXqDr0eMqPfrfLv@<Jo98?*RRg8~
z($)>rZKs|Qz@&K&Z~Z@z_(TNUulBt7>)KDpng?q5Gexy~%UKp{UwcBn6ZexIuB&P*
z^-aW#hZ{*UX6$}-5axD}MGlS=E+%>ym(l8=@ajnK*dR*n%VtJ$kc?m_7gZ;DCs%R9
zENMN#I*lZ1j1rqAWGl?2SRqFp8ICmN`QGN~myXp;iMJKfr8M?B)xyl@^sz(N9!X2I
zg}u3ONWrxRtlcvsCUSO!wtcfX?L+TX74tVbcM4apynkfO@0_)`^1Ekr)g5wld*5bs
z{i48i{3l`%b>kioD3xOXjK=^Bxz89&zga4Ispxl`2Pc{#lR#cNU@W~phW2A4YIm#7
z+LNrUfFvFhVlp7%@OA$0EQtG|bh>$<mi9w$>N4RWt;M%c;xIy_-{!vE&x5d(pkb4a
zes!>SP$UDu#}U!yXhCA$i1t5_V!m<V{qHqerA&V?TXojNe`@}#D8GF|JIv$!bBl5Z
z@!nw4)gU3EV1D;|{a8`j*cNk06UI^rl5GU15Gni(&C&t7oCXf)0h-3T7;PlMrmm+8
z>51CCv<K|CdXJm;fo}I7qOaCYt-0c!5Bwv*q9T4RY3B!o^<LjuV6i=2&3YBpRAEeL
zsF+|L%(TBGMXPQ@O8GPkC5sK@OD%^&o=71q@I(Ga$X(ri2$ToB-7b`!-A*%tSel(3
zUq^qSXKTzST5dMkm3>2+0&7q`l>c$FCmqWks0mP#YO~E30hN?U>Ld6T0LoLD6>@{=
z7uxZoydUe<%~7Vx_=_$Ng0ZL|J%v%a%Y4?{yIWAcI~}}>_U8}POawR+`9nf#S3>W!
zmT|EZNbMMR{wPKya@=sp_?$(dx>q9*>FYW`YWpcm)vawD!a;?3#5B$Bo%UssZ15HH
zm&m~K&C`$nvE_?ZLAJcvM{oQb_}u#A$#ymH_(Es*D3zxFIiGf*k%J#r`SQPaOgFzZ
zU8iRA*KY>uzy7$fhpB5X(6N9YT1T~menBLP^e}>=r7lMz%8GSJ0$K1|uBj1BrLYS2
zGhKv4i}IUGAfZ}9bm-3v9xE*3?3^5WxIbvgg8rnj5y5-SKOcYPon>o7ZQWY^N`EmU
zp?=IiE^Yc~77b_ov3V^zDbVhWbTj`3mCwR@&jFRS`nf{AAVOeS?~xF-krtG7tQYA=
zR^hB>_<^S(2cTz(8~}8?LmKK(mA)bt)`?n}^z6N_T`|ojiJPvh2(p#59ziS4ZT@m~
zkQQVfwv8Ng|Irjd_0`AHW7!Mm&G!eta`2W)>56}L&!u_GUi(<#%Wv%%FzET^i&XWO
ztM~S<)%CAF+wRf$DwA_7mW(#S<KhKY(D+tN^|ljNPN-1e8!A<cTdRd3fb2!h2%=Kg
zLCwZ`uVS8wsFPX(GfdO%(P<PmnDA0^*o>2d#F(%fG$=G^_r_CjD9@kmy`WK0)WRPa
zt2Hqy-=E$2Zu8pX5j=wRT-RngGO?7TAZB<Cahn`6&alZbxed=J0@OqSDoYFy_<{Aq
zz0RLAF}ym<duoJ)XNgYmrG4X3=~*J80|a0zX4=azQZb62=7}N*^F~@|m?EAWAy1Fl
zxYv9<Lf=Ni_k2WkW*+3-2KHYOY^OcC{u*X`z^vVK$D0)oXmo%!YEJ*zbnVQR?YGmQ
zg)dEF%Jp-7$1>Kp)0icN8~(iOBqHY>+pWG#XUy&)<l$<}7olr(#8%``_*p=fbOmqv
z3RtJ&$ux*OgPLs)JZC=njyb$o*{STgHC)+4!|>!vWF80N$#&Ah2#*qxH}?ztbeEqv
zu>`KK;SC~jjbtIz05itzRoU(8z(+I8r(I;%)#;Is(t&$4MeWn|a>1hzW0g0|Z@{6y
zKFp8RRFo7{_J(7m@narLg<YkQCI-<(RLBjFp9kS5X6uA0k>UZM2nU9zvB~r#T~piI
zTzj3)q8pXen?3PdN_HS9QG{>7WQ3vmXidL2_{r|u+E?CTkSbKZ+fdzyKtD*NnxSdR
zK3Yr%)&6GgY=#8E&d#)36l8k_%i#Cj?8%$foB>_t@q1uT077*RAPgdXZiBp^MPv<z
zghpmC-Oxydr^yLvptu8MGy*iCYuw}kNN(+Zke1K~Yj4sdbLDP8HJ(M9Kht^q9r|@`
zYHcz7$&6+{GZ6(wRgA2qv5|(ifys|t7EA__?{~iuGJs~WjdTWGT6^yRbMG+oGdhNs
zvpZ_Km?}%;n}k2*LT!$k0L%kONB3L&lCl<``!YH5CeoipbVv1>(E+N6FyqxKN5DJF
zo~F}h*{-5nMh5Rxiz(109ira+<1D|#XxM9b^9SZ*>^<!OW>_YHX(=Ms|FPJ8!rFMQ
zsDJ>Qu>-TN&(1O1(>C;kdgR}4{<7(Ez9P#N3_LjIl_(Dp_Nq0b5ZT6!t7&K2+<aDb
z{`)@OJ|AztL%to+EA*$x!TKR2JT5<%K|DhgWgMp`%$Lk|IkT_N)(+hG_b)9`yuTs)
zm`}p{VO09fBClROZ%|!oQ@lzQasqz8sOD&J-MmHj{JHNZWxLsuU8>CmbW>a^X1DP7
zJrO!<%DJOc2*9Kvv;9fU1NnT~EtIxUa!xtTp2RJjq!A!vgi$&ao!x0xWF}-}&j@35
zs3c_;d-BG&w2N|@Hi2#6y5ahPf1~t*pOZ`07=aD)FqER=BhzEu#6Y;mh(MgL8z4_o
z@Josm`-(6r5Y~{EMPQLL1}>`C!!aTQ#Sg6mf+G_n^CO!_Dno?>p6cx(BB`0Sx}X$n
zv+Ty2u+YmgOJf}lNPS&JSQVLl5pB}5;1}gU!D%t9U+DC0_Z`>ZdH+2vSWyN{i8qg`
zE3PcL^Z6k`y;LQZn#$O&Y5jW43RH7*nk`h=bIYACvKEa8bGCp^-7|pmk%wlQyk%u0
z`zOlK!<1EZ%WVv*{N?&isSlb)pps#n!BbKNRZw&k3#y1jGgwSoycS`sh>!fm8Zko+
zmck%V9-N3l#CT_oFr|E=?id;d8zo2ZIWLo;GF_FKQk_djP)SMo=gr;ybIlKF5bZp9
z>Z)B3fSP&KMrV)f&^=}1o(7>T!Ti^}peoB|YNYn7>5P5xa_bhfg=3Gd3^sfAVd^Es
z5h+P>{m5@By^#a!W{|`rVCJ6wGVNj^WLa3g6Vu=*3By1~h06p2GA=&&z>h_6FDn#C
zz?GFjaFqBU(W~oG^oLG8gJ>gd>8Fc7x*EeHH~+rn#ZMLUZFR}vdI9uT)~79<cLEW8
zTJ&4o-rBW_^5bcGkZb0}aoJA@D=HN}-(zw#l3+!}%Dk9}dvT10<{k}6^Zx?x9Vfx2
zDi@(3BQRJ@MPJbWXDIBEk?_9dtQTx3jgHtT_=?g-&rP}c#@fLXX(d9>pN1~j{7ALN
zG}^^RXN>GxnKpXJOa$x*ZKNtQSoTdacfG={yws{WZC$*d^AU8{5Y8S0PFb#>l@z5f
zayY5vP9xTxZ3j;Ao_Qw+z(UCKDvU&%biWgej-(_OC5pIRBAsb$NJJh7AG4}Myt7CI
ziXy!HX4oTSb`U0VocF3s(985ZCYLVruZZ2kcFflFG?9R2A@^UI6U-B6i|^K*9ujV^
zUBreA+%Rixi%*xe>^MG~c7|OR5k*)3et#nP(xI_?et+<uev`N|>)3$Nj1Ol+rX*#g
zj1hcS1`#z`i-%krYsARdmz(dT!IS2ZFn;4GZT|n#K#UgkksYu$L%j$=c8l7&Xh>N|
z*j5bYeQZgro}GbGGhNiuHQThc{??HAnG0SmnHgW0+Ie_L*tz=WHu0WU>F`72rm&cQ
zgWI(lc(uj}De!~YQ<(<Ym<ZXp%CNg-qupD@<TplA6I;Ma;Sk}$DHeh<R&byeD~)yt
zf=DmKMtEeb;LB*6IDoCIQ@uY5LFr>WL!Fh0uzRcnN<!w`98x&A9UN6;HQhX_YkBtj
zK3MfwpA1@DoopWebIO|)j|^D%X*1i5)f09O(iGaQZL6VO`_&&dVp)X7QXZqW)l8W=
zlHU65vZ=A&eO{f$m1}9!7#;uWyynqE#xbQUeXAp5kFP<lg}Q!1Br_W`GLlppk)8^o
zNcT*XhJ!^1Ke;FqFw$gVGI$8B8|+0D5)hc7L?q1)zJth@!SQz&?0jrT%nb9`Ooi#=
zt2(STj|ut5Pu<6q?_RGR!S<#nkLIjh%?&`qP+LV<r7CJ}!bmGab62p!i?sYLKj5rc
z1@$k|_aQ~TrL3OFlW#t!yLt2kX8rqYa@TI-MYT<riAp(*=sap*r^=B72s6JkJF>3o
z4OqLeq>I7a-X0z<w8sCa49PEGk?H_14WJ{yy3XjL>Tqvb3WVVr<WP<sm4FVr9Uzs(
z#AteYHVc0-?)r%?gAyE>_a~f;M-@=l3Cj4M_$a@%_mxYGMNksV9#MMHh{_SHYW*ly
zg|Yh!W4909T`*}TtuFzYA17O;pM=>PxUvb`&(P!nFv;=Z?!XoOaek?LV7At$d32B2
zh{l=^(G3&Kk2PBJb}?;XHmZF9GC+*aK#bJ?*lJ)48Inn(pfYlemFVP#RhtG~l}zRv
ziqyhxO8SWjKj7t{TI^><r6eX%n1)e!k36aKS*cBG1x+4A0KrFQLKq7~1zW~iyouta
zbit#JMyQMshW3@1WyeR|6}{p3gZD?xG>^_!h7Rbm+&nr<8QQPQO7qwWrP;EF6*jQ*
z;|l-uOzi-6pxJ0%RU68lXg(eXr5srPEM}9^2eYX!a?tL2JTWSMSo$Gmc^?uNt6svO
zT$Xx3K!$jE%ECYZi;0yXCYGIk8oTV+gPWpe34obCaX`gtH>leb{_&fD@~MoZ;jBk3
z2Yieqqu!tdqY#RU*$zfrLZT2<ao$<w2bvrWkl9zp30>r;b*NA`Fqq-QMiO@l(OnkA
zCf)zR=unnup8kI0g|VUWv{?`jeel&3g>~vMc&^f&-B+_M=3nz2g{`~!F!%%ki)LRa
z8f`Op&}7C%%*A!c9HG<)v=NZoGmKz&mP}48AAMtSh^(ctP9#+=sa@w;X^K#sMo@?p
z-l(JTt$&7m_Nnm#tzipbszP>Ux%nn0OUg1xW_y{E8olO?Me7HS!dy{kam3WkJ7GJR
z&#99qbm*2c`RV!rEb)MOV<}grn5y~-9e<a?K7YAo$v&<PHv0@<oEDD|QZ5Y`_Jv*&
z7)~`}+!!Jvsoc(X@Y73D*IF1_bwrrcZVctYH!LI6k575GkNQDEA9w;alx%yH4$qBR
z@y3!z`<Bu)R5l$QJ9X{DhQ?^6-lXN&PTi8nKby_c_tStSTv;`b-pr;oa}@UVtL2eZ
z)0r}uKHXd4=KG#G&+~v?2pMQ7p(5Yz9yck8{D#UpvBLdML^YXkBR)#FTxD#4$7A%s
z$I(QV&zdtn)Cf>Tng*jJ$0W^;F)A&I<)m@L&D|Gb0?^X<NgH!p@BkZACe`+VbYH(W
zRKf(C`BSAQ$pS}ZX6MwwB<X2^Q72P8aWF{!sPjhOD7a%VQhYt4;3$FCk>KFOVARzi
zK$hV(XpB^rA%5hk_EaWZHblgvD<q^)R+%tlG~o)t(neHMjd7r0zF)}fPKO^=RT}j2
zOV_|q%G{Fvwus&9w)W(F;rFZOzA=;061KiYe_GZyEwXU`tVdpB?BpK0q*=pW$!P<Y
z3>vj<2&W_VO=cUJ1Nf3M*U#(|wG%SUBaP4)VVJnbK*nt>d}ZB?bz(7-Fu-ITh47-e
z7cD0yj&D5$oT-TOh@k^PxxPWNkuG@3Ay+@JAw`FB5B1d(%A(uE^%?f?*3f~g>aQwN
zJDGo8HN#39F{)ipV9fati@!=k1kCyH5}^4YMSB?`K2lWLAQqU?2C+^epb;W0jbLd#
z10^27*WWZj2w4Co<86Z7MaXO8f~R)viJVJ2BSoYSn$UR_?Q+6==Z*~u`{WoqQQJBx
zt~Xcuvwv=#7SQ#EjPDNUZX0W}0FsPsok-~q=nSF?j|GHs$J*#+8b(K(#H>C<d($m!
z->uU^i;yXZ=X{NCw~e(~5B1ZPelyB?om457-DVJ(vouuqAy6IwiSUgO)k5+Xm5ygV
zrftn`=1(onE9Q^QY2!c|{VjcwExvV{-Br6xDTmLn0$Oe#D9{1$`A6C;z+|M&I<aK0
zgvHWz29d>;hUPx}H_`@>Ff0(f7@B%#=ooXuY4f>R@1r_s#f!8HkEHc$zpnj;wlrU5
z<w%K8*JZOp84q~ENqYkXzCDlo@r$Giq$gNJ7_ilWep(izqhYaAjsr_r91Z~T4UMCd
zYgcu8eo51T@!2hgq!b;Zed%R3>{jNc<uSkKG#R9n01m|A6b*3r$KfneSZwL%i2whN
z!#zPiDX3YNfm+i}1$=lqw3Au$CY!{l@;W#s3Dt#PX{`|na2U~^NI<Ah04)}%+Crtr
zi4qn)q%J~ZM9XL~7$G~m70Z@|@MUGvb95JgATCWG-LpM1nd-A+_ogPspFdLEen3=8
z`fFWV*wRDCnOn>LIPh7MsX^c9FTM4`H;s=Zty=v3OC!s64K}ZAgQG}EviS!U)i=^o
z{GZx&dj>7NaD;{)G5^p`f`(6-TiA51xx}QNKPIxGSzr>KAhNc?xQ_9`M2m4(!0Lb>
z_54E8!tZs&#DuY!SRkV_wV#CiRJRtkR3&Ik=iOU?mNo}yrInkH9u<(E9MyRD;NJ?i
zH$Gf;eg9`orU9*!znIUA1s)yf6lFKBfJe~A(4<E|oZ&@=5+`d}5&T3L#n%Hsfl=^z
zp?7_<BO+rID<q{`=8I)hIb|?NV`H&g%AxGG4ck7k%iJYJ;Y~UReHZ-N!z-rdmX=IS
z;i-$>p2Aq0do((tD?jx!=QHz455YpZVBX7;l^z~1iMhQbXe+VOPS~A(Mv-Jd&`${P
z+bs1HqL9i(emT-tdV&TmGxxB{x|M#Ya+_Y0q^5KkD^~iUFjnM2f|OijK$8jb#XeTO
zl*bn1Thrc`@tqM;r7F6xkx^ubS}Y?jN*cXU|FKkLGzyUnv9L^5{?;u!6EP``g>~wM
zkW|3?hZ~-1_~gE5o@BmNbgKB?2ULWm79UCrQe{|b*ZYZAf6Aa~AH@DZlM=uDCgbuG
z^hsSaKUnu9xX#4PeGe7&DX_wbPmPFQuF^72jHF1p=pe~I*o}HT#hbyy5WrSOL6BHV
z2%i)stMCVr<@7IC0$*mqibrXc10|*+uL;K)MN6X2R!`%sUvOA&*0<=^@5TK)N5}6f
zd@v!NhP`?EbH#j-I~+~A2F267Le_Blr0xo)SqMuQ^(0k4I`^}pe0`esuV6#EeQYAO
z%v`^_zEvkEzhhqIfqz-PEC~juq<T2Tl1|R>^WbU`M^E(@3kue*?>!ZjE-;Pt9EX@=
zIS%1c#X4ej<o1xHrLu4kldw!!m72z1dG7hM%OAdTThpj|56syzrMmisRZrddWD9%z
z${7#V+z9Wmb>i&z)`y3+-8NzNh4mAcD$2qYI~PB{`_k?m%QnEWoV9t^x|jC6wd0}X
zY}WMCvlV6D`}3#0Hdj&Z_y8P;b-~JMNS7Eg(=Qg~mzVOozCogP&d{kW@<G9?f*Fc6
zL0;TM!E1oeDTWT*8HU<bY35*3qtFtTk%&tPH6E*{iT^N$i00$JQYfwNG?Y#<2b|6{
z|BaxwH1nTA^Ql7f<8+!8iO=g#)1LewQ)-*AlVe^q|E2niV@|R+F-DioKUkKOlsdBK
z);b@ltB@}jX|lZHh8*)$q$V@h(xkOdm|w4;5U@O<=39OiOO)`GAD|82My9tRX^x8W
zycR9R49g35mUu=w4YpF6m4CO~2%|}w%=k8u(~>ul(-I}OkYN5vV58LCu{7LSblylP
z6)R7jY2nVS^Z4{#KLYY#(h8OUuVlKDz2I-Kgaf=GK4h`2%nXZ8O01&h;24X!P?n?2
z*C+KG6%=-A%bV9slhaPD|HzZ|qD|+{lBt3El)j?_Z4Xf8q0JYkGxIp>-LrF(E@9EM
zZD(q$y)>;=Sj<DubPA2xOKZlgES~xJg|S^Z`}kE_*>(P~@!bl?Y#+0xXy*O}&x~Mv
z%*mDA`!W`vUNL4^>a3wzrQN5MmX~*$Al4g`3(C9vy80>X98sT-bb%2jN~JijQ=ft{
zKqVRJflrl<br&&MD2<3tme2POSicr61~AsIdCLLxZyZ_-#0f5`y&Sz**RrNP+#lT<
zi&GI(8RGgu{Sh@3VqI%FdDw_>uWE(R%sDSaXMtxd3o(|3)>t}l;t*ygcNB_I;YCNn
zcnW7jjle>OxDZ%$gan2M;sW8KD&7c@E3vD?1HA|#<Phg`>cA>6pVPwd>TK_+9AaTk
zV=!YOw{j4b2o+15Vq+XCiZ5d_QK<o=0_DUy7Hpsp0E<#kSPXt(O6$O*4{zQV5@dgO
z`~ADw){tF87bj81E89GoQrpr_$qTz^`rGj_<G<W`4AHvLQD4y^uN|X__eV#c+5YOM
z&zs+FWc?m|Qc*tLJMFnkOxeGQRV!@6zqtvW2Xp;++`Fd9lt*c<a~Dl|Tv0BWtLnc_
z$G)v7ubcZ`dC@c`E?1N@bO=WI7<-0yg6vO3?fo<(%Dti`%3H5ut-UaKjxaF9N>6ur
zc>tH^$Rc4aMObJZ4ULEZ@xvl#1Xf3ao=M)H1hb@xj>4}6`Ep=pW;+^{Avxv_l}c*>
zp;OF*tP<!1Od%x4Ch)2m6Be`QpPUq;P~Lrh!Xf?X6$>^7HdbhWS>0hsV$Z(g0`vlQ
zvZBv|(X$sbM_f!7u8a?vb~j@WE;jcy%P(Hu>K@*zQFcDTT7x1ohkwa80pIN(inRvY
z>39*NBX`j|_*tHXYP4(v%RzvH2rC){i2>jZ(+$Q995ri?0KlIiq#j><s<8H<WS&p&
zpvqH-3|ib9j*Lh-X-9S#&D(bnk7zD3J>oN2ewKT<SUL$77hCRUb+nh!#EX->r$)Lv
zf|FikWXh0^GZUPh8J-EwPD{@eZ%Px3vz?{qoux%WE;aMs?94<Ry!TW_Li}0Np+$m&
zy}T>7C2+58({UXFN*6LrM7eTerJBphnRy%bTpu&;>#e(JgV*B(6F+KRJVozqym=)h
z>mE^gvkq-I)U`r4Bd`*rH)#97l!23if|?Gzk6pMOpT4xy{2I*uByI4-PMWe`Q4W|F
ze>9)wy{WopcG-a3ve8Kk5?i5IATzIDtM<wo%G)?vG{X`(O5;@(HHMh-SdGdQVY#?%
zL#gpW^=jfbq+&o{tR0fb9#hprLJERYm<#hmNWqr3iG@pdQ;Z&DA!?ffe7GIVAMHIA
zq%IS3LW2azcE}w9Kt;qszGjE!PTa`Y6LY3M@UZ46EbVL48|OC~pgcP7Fk^eB%{j!_
z&gmuXx|KER*i*p7Q6!<MA%H1N)I4|+xfbh)S%xVJ#ie;s6PyRb*C)edsG%~e8>GsF
zI&`?u;?{rc5-rLzFF4Gv9Oi{QT2Mk$de$6h!29!eP|UoS4uS99>gIL#ZVcVnc2=vt
z3@fC+5#*B*^INGRgR6ESpS|l+eBg7hOR>9uLzp$j`x|Cjnj=fFoG!9o9xCd(%AB=3
z5^4VYP(39r#}W9sW-MQ~ohzH(rOny)UB3=*o0>zL6|qIT8Cx-9+0^?OX89m?9}iJq
zf<~Kc#Ab>TE+1dPnuRjcC1547BBHnmvp-Jy4PKy(KqBpRfSTcRH8MlGnaF-6d9MP2
zQaM!+w5|g`CR#E=4va^+z#xN;>RsAKSL<iAt9M0za>ad*alUgNJF{i!K6XhTSlCey
z8973k%ZhW7(v&hf`A){?jhfpwcj=7foZT~<R^pe=DlmLnIn6_5ZUS`_SOX?1CY%&z
zo2R4#W-muo1(%D~5&xjOP?!9Q`K3lo5#e#Yi>Pch{P;*Rz)*eSPkzyH>D5>+jttye
z(O79yS-~iaC;zjGit9294UTh&NCP}CmN-F~HM_@3TJeJUkv4XE*G_$rKT!~LS<(4!
zt_)+>Zk;acnq~G<KM}HeEzE?QSRWlo@(d<dw75r6hJ~zAlmH8hfD)1DM_$G*W?mV=
zRx2!NaHIFXkF?VUU(mKS*iV3)Z+=L1db1~<zL{}G`2ftXcq72Gf*lLP0(^5>B7G&T
z9jLGeeb%kB$E}6y)OFF!rlS$Z3KdX#YP?}}BQyb{T4uOqfHx#mfM-xySB4ewdQ41o
zl%@+Io0H@C*WR+#xmSX#LIZj>$O~>4+P~$3<?4yxiZYvWKVZFzxwlO{jCfodROfhW
z-~7tm>gJx$f^jc<)-4!^Lem{sFkbJI!B`PEKOT>c$gG|t>sn8+Lwq5sheJ^3-qwh8
z*Dk=Vv-Z@n<e(9lETVj{wyN!3;U^4%dfwAIS?Cdlu^I%USXAZ6$%fOUpNn|+q0Ns5
zYT@r~+4w}zLC)27O}b7C3!-5&yG;vIM(jDOC~s|P`_vg&F<W_NW{b|0&m1$h;R?>D
zkAaSNT_dykF8%;?{3C!~$L9k?=>E46TU6AiPzSo7^kZ9b+(8qFjq2n{wiH%CxSNeE
z;uSZ<Jx6iReDxX8mt4nw3gX^YY&Y)N$A0nNBl#YzC+}H_drm>hi08j0?|G890psfA
z39^%Ix89Qqn>AJ51JC6X^G-e&vH2L1PDU948B&u&mRqY}WoK*3$+B7z%}51dy?p7h
z%@lXAE7U(!9V+7tQAC7~Ad+BQ!OjBN9qyGI;5Yp58v|jF>zykHt_{+=E=#4AVdk$N
zz4}#1!1GJ0qEUZ8sYe$SoKEeE&-p8#Y*jJu&K{gU$<BPMuy>994~^@#f|hk2KeUs3
zS0vXi48t&ZcVUn#OWahpTss-7u_miLvErsigseY=De1dH!-<krpAfteBx@DL8XmcP
z$0rvr@^!u{FVa)am<Bxup(Ayk(0f?guI;GVnr}XM&Ya6%=Qj&$e`-LF7n;2aS>CPp
zuC}0^&0|<n^N)E7Z7=P`sPMkS$m_^=ZiSp^BDZ!5kR>_7Qwj_alfb}+5OQX_*V`ji
zpq@8$MJ~z3zy`sI#%fT9oyJn^83K(u;M%z#XwN6i{lA|3!F1BKD70+&lzEXhIAy+L
zzWWqyU?RxMiQ?L$E>?d5rzC;H2N{`et36ZdeSFsQSeDZ9|F1Mea>=*299!8SCMO70
z&nJ9?t(;N;otm8^!W`H{1xtEjMT|p)oD@41lQmKm>qNzLWuvw(n)=x*_vWaD^j?~@
zWntgXpIDb|OL@n<@TEx#dag4%*1l@z)GX}0@wt>}*5*EX<0^Gz(_VC|!dg$J7q6Oc
zxBbwpev03y?O30&&*+{PSB_-QWvJ@akA%g8O`nuk!95|sxyon7S%3#q$vqaPb@2`w
zB$Y7~UpSE=k8lWaZ>(Enc6_)4Q-X_XZBznfKqc9+2F-2XvK|Ew{X-+dgLav}?|ZMI
zd9>#D4u_|#4+|ZDB4}(yMsK{e@%>rUyo%K=H_aK8O&>OJtXK^kk9_k%Ed?>BK}MR4
zIr)eet5V31@vSX{j4)L=QNBq_BQ;va-4JN=*{4F5cevwbp%@$F(?mTDN-P`#cDamO
znCjU&GA&16NTT`QKl4!#Pp-17w(MzzEWo__+0IGbtERUb9AwLxQ^?ink&5nUvLRXN
z^4SedIlm{r`>vAYyb)WclpOzvv0{{oDy*`+VEBFG8g+WFJf*CHYtYC@Vz_?L<{(?0
zkNT*V<Y$AnY7GQLtf*K<jGB5zDh?tq&XQtDI7zZjtV!=D4q&s3)rBa^l#2{elo^Mr
zd~Z6=um_4CP?Tv;wCCHK+m)e4LY(l}jB+As0-fbW#)fiHS5}VoeZQ8|nMYE}i^|!|
z>U94avuq#6fWuYbeTOLPZ0OTDDZJX@?JQ@BCJhTw<tZImgf&q)2=hSh+n}e3q+ppy
zD|kyjv3)~YS>s08%Ft`m_kD8kysp#an)|S%R`1`UUl4NXi+@>H^+@TK!^@8K3`?lp
zZW}VB`@J1ob@-s>m#*V8XAHO_*w%`7*wUUh2r7zFm)xVUBir{KrVSI~v9pt-VdR8u
zgLqN?P(@jC`JU>*C@soKdar5A?^&B_%Dc2IZp;>F=Nu^|&Bg3W1)q-9@*qtbklsd&
z+*1X`ug(<Dn904YEPl1>B8;$jSw0z7B&tn(Hp>zFt7LkqhiMfPDOYuhDv2`0MPl7j
zCC4E|3I$;tBH$}b0RGCL%9wz9&zi2yt1e8!8i<JZ=S<OizTSL&r;T@iy7gFj?XeNd
z;_YR3be-PVrgv21A2we#S{*e%+sOG{pDq7}#we`iqPa6xb}O%cz0slxD{pP&d$)~m
zO9vh9(ylwWw1mu1`Y2cMP1Jx4Ff?}!2r8@Cd8idgLiZL&UhqXxl?;dqQ>|L_QMF+0
zNGq689q0W42*ZoS3VO>t<UXdNl3Npy$N#Rqn@!v{p0SDDdyHAnCU)zI4IspKR(hRA
zRE!?jsbchy+IkhE2e-!;KpWzkt~66#LtHc!HpKuV)4i?;vK}E^d?tHFO3oo`LRs}R
zzB|}B)3J4%%**(WSR%rgLK%6A@*wBMN)?imF2#RNc9s?`Bt6fff{)8`qjucdHn8vL
z7ayD(z--CpD?fIx8hi4g`8G}~!)fD)loMrik@;SOp$ikkS?XS@tYxg;26}1v>rMOr
zYrd_-ZKj_rJ=3i1;I{MwZ2x6m*k(3T*?l{v!3uf`-bWU^mvF@DQL!v@V6Yxhfl%k@
z{%^&y<$GAUU;i3eQL$|IPFP`!`WNwNqGDOv17%>s*qAJA>?F&TQR<SEQv3Rb{-fZG
z^r4lLCa&2bD_v%cYu`O(LUj%bU0miHsxryc_1(2srZV>Fsg|XvbEz`BqfnVPlzAeQ
zUa)9*RQ_v3tzohhfTvQg%6#?&%GyP}QYY6h`d8}fh&*JG?M8yE*AP1;SS#NA{A)=S
zO9fibl(N*KikO(;UOE_dxe0{R4!g;Yz^-pO5X=GJ-LM43e5?b|Gs$}@;MR2nH67p|
zh``u7vkFBWa+d^MF7MH<)a*VrV4sUDiY~7AGR-qOzspy-*GU)FUd77kTVwl7Ge-2e
z=f!#rZK`c*1m)Xk#9rz+NW(TUyI4bQ-ZJ+k@*w^~7<2A4&$KKbIYa2466l`yP<NIL
z?bC>yG2$AR3CWMjF2sxRS?rk|k`NZz{XAG}Q%p%Oxl};-jViAv6iKlz7X%bTkrZQh
zft2E+Vo|YNEGm|ZQLG%~qZ`DM0Ur`ah6%gFh^r@kqI%)g>E0g&ANpu=k$Nfc{wijp
zkd@#_NYAV~4U&<a17(9upe$H|>~ya!gF1me$;qxrrmcVYV9w5yXD`Jk)IQF7_wRLo
zWvdP!-t+$4{cnGC%}!~1*1rAVd3N1>;A>~JjG?K)RAFhgw6UVjyIWDrUp}a&eI_X!
zI-^M|bs>VqH0S$}L4(IJe*f0#Lnku6^+B4??{C^XWg_gH^U6g<#hkUdD>1QI0U{0>
zVhkF>Ce{iLMao#LQ^6M<X(fc`^%Na3ORk7O3Z!OqPLA0Au~boSE;G!Vln!}b`6)(S
zy-JCr5kgO0RXVcW2mpv!99CN+?j?6@F<Nn1nj}JSkQ5>}<@V0uMT-ElPpIu@wrXhq
z#mk2bSTsk=ZIF+u@7xB3om73`owIva-7&3i{qi;iIW5`&r;n6x`FEO*wWbwvdqX5N
zZAC}JY$>)P8y_m(6L=m@E{u3M9zp|#`lQV;vXMTgaJ-@blq{<#6x%xHlnKKC-WLB(
zUoj@Lb%z$|?cz@8t49|+R1n`LNv&P*NMcqT<pTrf?qRfR5WWfTbq#B)yuvFH^V|J9
z>3XiUxYmueRey0`TTaG}Yb~N9&nl6uy_Sngj3mS6v(i{f1);}PB=p>yFKQyOTvkS(
z-jd%bEa|uSh(%g%pN{u*e|*pMm++)5{Ck!uM>fgeo?Qe*W?eeS(jtKCAf5z_L}FT_
z4Ysss8j|>1TpItr&&a#mJ+=cecItY~e1i@k|H2cGH*}kDisTNEP+q7Ukog3RS&sV=
z1GkKfO|3~vH{a;9bLH_P9|$Z@D3N>@Fv=#IuvSVZo9JNa&p*b$=l27?Y_b_bRwtY3
zRCwgf^|E=C9Y;Bp4j(PgX9r*vk^uQ#_j{4u3&zlif&DKGu^w0kZy#1KyCyAX=Z^95
z4QkVK%%i<`t^VTdPkVbmHSOm&u7E<@={IaOzXs1F)(G@e`5{LlL+tJ}2g1Iki0J4V
z=52Q4N3`|RC*Do*Iesa-K64FQIwfc7D#n(K6L=Q6uB$z01@MUsBGB}a^jqMA{gC)c
z94V<HbJzmpF0c<0!5|n+mp*~qcoQz91DgwW-2TEjO51)$|1_6Tx-yEc0{wp`vsnn@
zA@V-4H;^tpBQA!{uG0+4X`8pHdGd2wx{W_zE{-u5A}n|}?tGn0=Wna|kg@@AUXU8c
zEe`C_I_zOSb=&j-%D4dn?nww0{jF9bzVRg9v|X%V6KrC|M4+*X8w&W_V7168WM|W{
z4#6GaaCej<*HT_}7G|hT3SPv^($7~DZ}><|H||wHqS63~YRobuR+1rCl2ek|(CQSQ
z8&IN$9U!q~G30ZCH-QQ4(_nWxPy-6vRCknOpNd%N>vFMiN|wxRPcSd0-0C$lY~|eD
zH)cgYm9#5nPtrq`bPUx-ukO^fr+I5AElV^n#LyyIQ=_mH^VdYiSO5AD+r4lX#lHx~
zkfTmkH1lt|YoVaRU6{ulbN2t-QIlV+d9siXU~NTwogs@vl#jGHR58Yrl}4D{tr5yx
zTC0N0l3<p7?x*DZR-X8|UVavWrSXJH@?DbxI{Q>$3ug}Le<8}SCdC0?2brT-?vBbk
zuqH)>Ra$M@n!DbXM^nDL`{Rz==k~uVM*q0MxlL>n+)tFRVR=gK2VXPV#Jt{+_358X
zu|fs5j$BovCTOvc?9)+HB-WR^IYSm_TDZxGk)^=>O4?-EofUPiLkIhw`Rwcg1Hanl
zW7%W=3%;Zx2czo}0S{WGu_}T?)dLHL&Wi~9u)*5^9%yX{&Y+Q>JPl9U#3IaKTlbEg
z1o#4{PG{fc_J3U%t1?X2@mNq<AGXK~MpS{!MI)cuz+;2>jg<t{Le9^2_bVYv6=6aP
z?L3_1Stku}(!fGH6DOJ0NqwBu7bg+e>COjfBm(|3s+baqUb{o=7oFiAVXQiW^%1MP
z>7%;Kb1>dM<btV(F_&wRpgoSZ85Lic(q(vX7;P<CV9-+ox@^5e@W4lch|g{^k8Q%D
za<TkGP;HX&y27IW4er={pqnc)W6c|dz1>{FdwMxTKZNyGxn!RaE!Qsj2p5ZZGGk+%
zqyzVKi$s3ay?!*#MYmjwUfDRwwoa_wL&X-?J|)e<oCN)lS@Q`SiIq-1zSQm3Ye~`x
zmVz~$ZgE<gX9-ur-SeJpG|i%0+pu(Mzw{to2p&87-N3?AnV}yxc*{dNL9<~mjvXcz
zcL|yeeBm4uY^R3UcD8i0BG!9R7XmVDEi&0Lh&$Q-n~#eJPY9u52>{<ro55m)UO<XY
z3SO~woHtD%Bo4NYi;8h?9fz%5Z<~{A@qgyz{*R2@JV2Yn?a)nS?tzuYg$1UpWWu-@
ziYhn$5_{eHz{J3+*q%_NE$HJ`+QOZ*U?kM_8`}vwh#k@^j0m@{kNOeaGZ&=`V7<tq
zhp@vVeBJ<8D9(E-qCIsLA5iIBYyup{WYss#TeBt59`Wq@dmaqNf%3LP?6I7uW(<lA
zR-U;3@YchM;=J$h)&umP{2`1#bR<8gl=6Fpee}KS54MeGA}hJt(Epp2v>>coe@8>)
z5<6OS^b7hcbx}U_$V=FkjLke6Opy=8xl<H5dZ9Mz_PBMXTOkW0GF=kXKUHbeOBYcy
zSY!V`GM2yozY~`9lmA!364u%caKLgNgKS<Xsq~rL7UFW&3Lc;VvKE6P9pFU{o`%p&
zU`<<)%xH(mUJ&dM>9B6a7Q{5xp|kt}>0J{qCz>aN>BFC!BbL;Urrl`ujvc${C1y6`
zuhkPH@fSv73y%iJOg41MF>Zily?_OfmDWUX$d?-por!d@*h(_4j?AhqBbOMEC@;*|
zHbY!B>cxptGf*3w4PX(6qs&ttfUIx~+ygjtdfH-oBiVepal`i0mow#sH46`_A0b{b
zCM;}Fc`^3U+I)a6jc4rcJC^K0ntL+Oif78i;f!Sp%OMEZtl|ye#iWv9Mv{AVE=n@3
z86cVdf3O0}Qy*A$;=!sq+Iv-SSfck7)Ye7SrbvpqEnRq~nWY@!P8eA54$4^XFm3W9
zjVp$XU&xeKR;}M{<93?#^M}pKY@F#81?{yE-r!la^Y9k;&R+B=V}~9pdFMB?JTEWS
z-j=hrxgs+g38YS8bo}?DwGgPQ;uOWGUf8hkK(Gx!grS>-T?Y=D!~UTM%-JdI4z{j#
zE*s56eKrBD9>5$Fw8|sPj7WEtC~}<0kKohN;L@hDURh_W=0?hBXl~JwqTE)wY}V1>
z+{E1cTt3uSdKfHM4tq#kuHX|W;$$zFc!zH(0l*angea93Icr%mh=?+k6(gvMLUF#`
zy@*D9WgGa4k&O0vVDLRVIN#a_)LU}rcGJ}IQ!`uXT5f7~>pZ<hYC~iQlF~|9rx~4E
z%<MY3DdY3UEbiK3_|&`E9cI^zl=|7}Sp{@-^X$~5%m#vg3L!xsk~B#nV~hk@8!RGF
z)=qyi)nd`Y+JDx!qy`lPGV`Jq9Sv3!vF{-W;!_mkL^3MDO9HqSF=Y--*MKoh53w1b
zl9AzXl%O~tT%~Jkr!UHF({>tS6t68`wIzUunK%Cq3A>P&7tWMc1<m!4U23}?1z1!!
z=WZ0uJad2kr5~L)ll$hh=B#tWLBdm6%GU4*^+k9pkHb^hYI!PB6$l3;0t&_L(QJiB
zbJ*k2)b;cCXz;uV(6l!75c(aE&x2nkw5wHsE3?6Ov9;`9^;PtF%J-de@`-nfh=q9P
zO170d<g*U?KFco~Jsa;+)f0HuA=xM1{l2<VZDj7itHOd4Puv4+17+{SzHhEe3?_K`
zdG`2c$d5|@`3K~$Ly&I^N1SE75#i4ELvx0CG^YiUpCthmExk$wE*SO%K#Z)FLT4V`
zr97>?q+r$BbevUFZ(PLC-2Jij0pvGaG{_yFUAct0?wgZD+$a&?3fBW$bo%TSi5<JJ
zS)?dP<E5$7_NVQi>c3^=zBgNqIdUmnpEYZFtGC#lFR?p(HjZR>nwuy^Vr=(*g_;ke
zc3?fctuJ*{ZX)U`GWP9hBU)zhiBv^m%!2V}ia=q}TMh8(J(u1>Z}`dxY=n6GC_nr3
zSx>&d%@f0XdjF_5seAuMIOh#LPmK2I^P3(~*Jl!`!4re!Tca*RU<tnSU~*qwuMPAG
z`pkcOkqR?g>_>`TIWpF;fMPp6@Q&E!^IZvbuA2^|)(drA?%so=?0vzf_gs4FHoe6k
zce>rP*JH<*IvUqKJKV3gz}5}PB=Wi&TX0VFW&GVCIm_fuj1mI;83-|MuH)WkTIGID
z)$>gB=IecW&m~K|y`>K=Mp^UeJ<F%}de>BM@49E(e0tv@N5>7xB-b)Gyoi2=T*ev$
z39s1C?h!f8B@*6^;6gdhYLPR_^CY=vpL}nrhZmcA-&-e((*BR$b5Zanc@dG)^#7yJ
zdh+vao|x&^TkxX${Tr#x4I`e|z^{)O9e1Beh<Qj}M4#Nt&U`nva?db{NmCCdiQf0t
zZBOOlZ}$#kKE3DCE4S$#QwIU|BlGFKp1gaT-f@1t1-x!ZCXsL4@FKdEbXnFtfcxd%
zRq~nm+il<`KYq5PyEDlBO!w|X8o@I=ptnZaBk$vhfk_`<IHP&qzDj9bU-4wf88N?O
zik$gAePZhRXk<Oa@_(P_+t;q~x_56ZsPR0lk<ZiWsh`&Mn3RpbG$-Fzdf8d#mKAdU
zByE7Fk4`p_3uN(sdts$rw%BtAy*hbhMMo(s<SsB8#r4i^{CiUiUTGl-{4EX?eRJyi
z3jE_?*#UoqVKdwiyLXkT>jV7N|9xJTZ(sFt-Mc5%6MI64r!}~Yr2=xUi40tV`ZM~h
zb90|-7Gk0vipu#bAhcuydh?ETy)`noNnPK%=$c0|h+QangSx&tS?>aV|MO%^G6bV{
zp?ancj!CX^^aixPk^xtU(n5|XR@;J`HV%*@im-B$2WPpHf#i=qZhGHY#~;$F5ZEO8
z^zB*KSJ1nyo8KhAyXCQXo|`A#&s$&kzt2nYd0vTx&fRxorGySovqnTb%^~^C-D6Ta
z$#3Y9c^NSjIU;hEvxKV3JtAViLW^#7xj9P?{<rsB+TD$V)BtWA{QH1s5H|IUaNYA_
zJvhj|5<>BIjZDIhi5LYuE%7qS9t4E$b+r;g{8>LK0aD!W#O`Ny_jBBR<a0zHJSSB?
z2R-Ut#+IJ|jN+bO$VL)F`eJ2)I3w_Kp)Q#MFGigAs{3yvIYHafQ*0I|Jf3&pckn0q
z`}`jzTxqKGR1D<`b{0LYMQV3xf5TfmYHMICv$eI2v8}f`15yJ%3QP^$9Yllr1nmgA
z6x=p=b?{@sUxZ|ZbPahV<Z@{9&<&wC!v=+Y5KhB8hc66&D<V3gB4TC4!H824KS$cJ
zp;?#65AE&kJEHWcB~c$okBc^<e~)P&vn*y?Y)I_T*duXSahu~lkMAGvjCa*5uD7J#
z*@WPP&Iu1C98S2E*dcLc;*Uv#l1?Y*C-+Fcp3*So`_vJsQ&Kmk4M>}p_DXs{`tbDg
z>Az*P&6t_7CF4xSt<2t;!!qY*K9G4ZD<NxT)+^cN*;{gga(=8otp4%bqTGjbpKZ`N
zFCec)-t4>=^UmbGm-lymz5Me0j`_XwSLYwjKbikY{*8jbg5-id1<x1e6>cbMQuJPN
z{o;Pb2O8!!oZj%ml9nY?O8zb#UOKyUb?L*Uhe}^6{jl^Z{`;fRj7F;)J>1CI=+#CS
z8~xDedgGwR>5ZE<?%H^C<AsgyZ@jnh(Z=T*f6@5wGFw?fSxH&vvJqvo%hs0dE;Gu`
zmVI3IQ<>=qbfh{;92Jg1j+u_tj-8Hb$E%Ky99Nr=CJ{|Cnv^%`+GJFdIZakI*^1E>
zBg`@)Lz})ha(GztzeqeH`uKP1w+KuzLN3zY@7=7by%=!LHXBS4AnYjdk3T5>&Zhex
z{TGixV}&G|Eg`*>dtJAbHKdXHHaVnrAYrrx8OhF&VeEC+HolLHR*Fa}OLJ}DtKsd8
zBAM(p*9i3Qg7%fN#`O=50cZ(md1!6WhN0C*yORwkS*)Y$aqc2<$`;ZdCVezF$sDbg
zM5ujS>(wB_)O1pzhJt}dp;h3#FX^G)MHm}N;+1hO6S5lK7-8Ba{I(cv9H~@e<*}Pu
z55Ij!Qj}lFYHYY$sWu?1wKvEP#dPgZek5Cz)2>Ub-1PykBCBzn&zF;ie4c9xJBa-O
z>$`3!6I_2Okt9hOPg0fkfb|nnrYwcLne6(B<zrLobn`o<!u6N<u04;wlb~(Jk!0L=
z2*)&b3)d9<egyYTBKb-%>8&0lQxuzPpAzP}jN>J?fg~}NB(n{!r<6ZP2R7VwLD@wr
z6$7~SbN#NgAc0In-+!>@;8)~=mQIH7dE}U4BSlJAa+f$qjbuDeAzvyE!r7n5(*B8+
z2TzcvRmJr#zev`y)u=Krab3jqt9&c+n>N=qbuD>Y{fr#dW{{QKbbX@tckNQLNSHd3
zD9VS#rbdx?Z7b1~Ilz4`DFHqq${5#EtThSMw~|h}jg;`~<UG9EtNaWy*dLNL>Q|&I
zy-A*>Ka(vi%k>%`Oiu8T<S{<P^)mZ`Y}Z0a5h|an*l5?!e6H(tz%xnmL<PA^`InR{
ze~~i%9(QAZxISTjka=jK`2IcG4Ya>-9)uQ&M$iiJjHTi^XcN%xLR*P88*Pu^W5Jhd
zKGygNe!5))e@WgF{N-taw|rY2UkTpwZGxwKn&c_LH@9nokHAB|P0-TafLCk$@db;2
z1P}Q(!8^VUyyLn|<b2nsn9%b9b8l9e6`0oqK9}#mYlJI1_zGwPqHa@5aZ8H($loL5
z#Ps)w0DN0Qq)!I*>HgQLM~_ZIqNJmc8H={Z>Dy4eM<{BmVKJ1$Ur)t<h-68r^IJfG
zf`>8uIXD%GdCnD;A?>Kv{gdAnn}&a?icq$ysq#cz(C|&=3Re{O4fteCWj1j$$A9RH
zFO1_Zd}a6(RSMpM+Io(^h^OEO6olxyV#AM`E^i93;c2Q4coaMoe<D#l8Sk;-4*!2l
zkr3cR-iRNqbI&Dl8UMsx?r-i-;4N?$EfJrflRRRLG@U>c+7;(bKpzEFbObqpyU1>G
z5K)wu$Z7H}`HuWbT(lwW!%nkL*yYry)OxAOsp+ZNspYBdQ|F`}Opk<DApV8m8N10I
z+<BP1OwN$=<a_cP?(FTk)1DfankesV>T@S`{q6dO#JFB1fv#6zGyfyvjc9{h<+W#P
zpRGOe<y~Li`Q^ed=Y2Wn%TZreec9lPKR;hDagZ<dd>|-?3MWF~Ui?4)Jx`947sv_n
zA~{KxlIO@-@&<X6yoD7I=g2a$oV){^&y)9H<*y(s$@}C3a*=#UE|HJODp+D)lPlyK
z@-3+HJy}EUAwQ5G$yM?b`57y3uEA2mKl+Ua0ueQ^{t23gc$yf8RJ6O$z=)ukyJ0;A
zs7FA1LPnz<^0Z?(9!7f!Z93Y^Xs@F^k9OMAmg0B@?Oim{@4TlyhvR!_C^iA61b7f&
zf<I!7_A%OLXz!qXj`juG3bZfLzD0W<?K@9fh2!^VzoLoze)F`|IR1|IH`>=|$XF1J
zAZSBS)j~)u8e(Q*Qp$$)NknjqXxBiihVCZ44`I{8E++S4asn^W$a)+_)(#Dx7h#Yj
zqQPz?sdls|e7_&ZI5eaw$R->U(US4~K^)WFjXaEFw!4vSI5tHqM;~k`mfGIk#9r2^
z_%kk|k)1eV97H3#gj{hqvfD}WyEp@S4y>khebsZ+wbI!>sXBlUA6DR``KhTLCboCd
z5d}_`@1zaV3Y<JYwWE_~b?iMbqbhZ6>e|j@)~0q$oiK8YQ^}G?{4jQHRZ*&w^cgr2
zpM3|WIa^mH)O{UWRaIW#RK#O&2YRoq!UHCG9)P2~R8(8wRP(!}I(c@_fxZ5}#?Cdi
zisOpo=RUZ;e%ts`9v6g-3kCeZKptQov5O7Z<|P}PYu<zqAQ;;<CJ|Mmg4!b20;Or7
zxJZ?fhLWhQ%8f~cY13j_TB%ZE2nj71Xc7~s0|xrYhkl4W{hir+?Q068J36zoXJ*cv
z`Ooa`nc1D)P<VGqFkDnp6U@rWEDd)o3xzvMf>|{+d12<gBRaBwVe1G-+qm4YZ*pGP
z??|W$g^Pk=scC6Zc~zn8tnluZmS77th#q$gK5l2>*`NgNuA*252$Z(Fb}vH|yX>r>
zGP1L>v(T`nBrhDFTTvA%Ma3*sOvnxAl;(vKbHlmpl5+VUU2|qjRp?|9XUoQRzceoo
zos=9;PeV;GoQ<-X&FyL67U5|vlXJsG&Fz`8GW2Gylmt&ouBWF2eo{`DCm3yfW+g{X
zxN^sj4y1@b=Y;#~k4~m15%To&ye~b!x-eULL!Mh-@z@v*`Laik3?yqPZf?QEQ5hQY
zPn|SwM5>13r%sB<OITH2SYUG`_RC9}RWNa6x~5B>K7Q;-TW-pN!aQ59w56uRp_|hr
zZQ%^pj<#hPuBNu#>NRAzcD6kcgttz;Z>u*YNW@b0>eYKuy<_Sb^~MIB96L3~PR+5i
zEp;r}>c{G#hVH62b}Wh4srRCKXVo+6J)!BQWN8jOne6g151AlKWWB3gPH<(oDKEHE
z<TTfcS2#lged{HltGCQdN$xwuTUl9>$lEK!y!$1MyKlh9J36kTlJ4t}H1{eQ8pnD&
z@;RGdp3%FKH=e__kQ3H_*{zL)-CS9pi-bKgfvcC3#v2o6bvkRv9KMh5j(0}FDU2`w
z#cK0<X^>sgC|hN-Y!NI)-gz(JYZy}rEg-fYeywccs7&g({^k=ZhEvPFvOm`jd$dV*
zkg^e-HZdB>C%#^uf|{UA{$W%r8<4OKNlk=m$-VJ`X|%k7RMl4Q4sz6^h3c4(hST{c
z+$?*f8b3ZrR^9{3(>gX$=R(%?Pm$-X%SW3AtJ@aJ$)}7)YCR>Q;U-GddhLL-2(9KZ
zXSal}=9fyI)uRAJ#e5DuJ1_=|w4t-pf4TU1Zf$tGP{S#a*d>G$cxo^gZYizmq9u0W
z@4>ma=Y9u&FV4jsm2dWQH`tH=svIF-JNF6Js}s^01bzSAg|8fyAjmC1uD4|VqUADb
z<F3Y98MV1_(>57ZyP>I$r`39g)tPmhYul#AIyBV$N_=LEJ-T_faCE??Ep?6aba}d5
z6J3RT4dIU0=lQ}_gmLEg`rIk}xhmgX<bKNC<V|w#b?@W7+oSIPxcj_|aFw21&s=ZF
zvl?nd#y*up{*Pna9nTkz<BMQXm*kxvameU*A#VtsO3}&3d%a1_*o?>Koybi8WZI{I
zKJkb=%9|lGXyI8h2MnH|&B|%HrOcaD(r(ofl9l}BYmKbqzIcH9;UUnBwSP`Y2j}qb
z<qt77(0S>S%W?(FAlBCDwXHD2oI#&Lo&?Y0Y@5T}&3T9!NaIJNw7xqs6dG@ecs^Qy
zW&tTRf8%ZaTm0MYmXtviP!+TSsx~*I#@v*ZrbpI5`{5lVe=BqtI*FWLL%)IEfqo19
z4*CF@A3_(Pzd(P5E<%^c-vwQUu0U6zYtX0Ab?654cc_OlKZ9;Ux1e6iz74r#6&9%a
z@6sni^xi!zD;y#-%tum)jXI0@$2sPzoQJ${JK^4ja}LfqdX*P+s?90#zc1TOt$fSW
z$sRLL_L^VH_sy&1Nd}Q(Nheh|XJLlrq{2ypa|=$2E&Vzzo^S5ROsEq&3!Q`BhXTa0
zW)E^?4F%mE(Cq=;9?<Op*&Zu<Kl_(ScL4ekbO^cxuM4^iU4gDb^n0T#H5X93g-{t(
z0j+@cLzkc~=rVK#x(a#eX8{nJM(;|uCB)IH-GoMfcsGc5gLpTHcY}C07^a!;%24Pa
z)CwJjw3fZpvX@%+Qp;Xy*-I^TmUsa=EriOT3aH97pi!$lX+}_HBAT_LSu2{gqFF1N
zwW3)or8iJ|1En`mdIP05D5m7#I~V4dgv?#q=Od1i>3zjq%{IW%e?Z-Vf0ML(h)rQE
z(rpn=F=uHXzJg6$wYf<Cn-<;e=2x`ud!&Aa_B~DecF2znf1d!&4(m5t{|ETxNOBKZ
z25K_o-MAFSURbL!8@8ox<{Ev>+0rBX`|ju|b~C>)7b2mX=Cep>FZx9`bIY7FpX)q4
zvOCRP)68|-xrQnS3*B6Tj%)nAoB3yyW7N`TGjBx8b&kKxH{ro4I8)fnZP3>J4Lr5o
z|IckepJ)b0PW0&By;E!DMstF0f1U14O{#z2%hNGv?B=9!WZYL$s-`wIv3Z>EK#Tlu
z+yKYiFrSeBy3>;Mv<GfxwMLm!)aWAqCG)H~ZF=d4>6~GIGTpS8jx+^H>1HInEyRg=
z-FylakfYgz=)HO;O*3zqGyN@mTvGe`xQhS7OeDQ+_h_8Td-z6gqfPPkjeqL#@YJNZ
zVHi)6-u7m#`vbNV^Yr~=%(eUT9WGZ9wuj+3ICrFf>ex~^_ao<IOqw(sQx)Yz`UCyO
zETOmA*6)vd&(3&p*jH<FEsVxIct6l%qiMK~u+a}Q@V{qz%=Es<S+4xPkKw)sP17Ux
ze}sDV8?3Z%r^6$Bq(5{y8gljy;^q_1$O~NYbc<SRP6F$jZy@7L3?n8;U;T5;VI;^M
z#ct+9MaZ0|*S(EzuR`}pJ&80r*YTxW-{97E+dH9;Y>7CR_GPZ(LvbGLq)A+Bb;Vme
zHppCfrC9hQv5v~P_AbJW!9rTjs<>+0IBcYqykEK+yY#Ef;<R98y)3O*T8DA@SWH*3
zx44hV3TAn3b1!jYclmI`ZP~+Z*+E-&kg~@UKLIxqIbY+PoQQLw(IoDI`M3n6O(ACi
z?kiYv(}{fq7eLn;oI5jd3D{VL*sim1Bluq5Y|5B}OQJS&>1(ApAFG|_vjS!TZkVl`
z-`34*tv@gJUlmv^$Hm!tX4rbhQ_t1tx&{|djn~rZT4z=carYk1)BS_2FI7u%I2g1N
zRuqDu(2kxbnKN@UzjTUvbzn6P!EV(5w{|kelz=UG9t}TWe#yri(IvF%0y{t0b<-Z#
zK+t0m)Mq&kg6S5)bc<jBndu;+Z5XgPvd$LgX2hO@uh<Q@cxi6_;lnuSakN*|5-e)*
z7PVm(wG4||szoi)qLyY+Q@qO1xB}<0NO>$$UW=56HeLb$Nn8?ZifX8#_6~mxYJQ7a
zvK_U!nXB4|Cj0Gp<t6zc`YVp<7RP|aG2P-Aus8-7JD(tp;^?zDx-Eiki(tG(Fwr6y
z2Yy%4M6vT&?7YmQ-9jJjgMRwGj$jff9c&*k_L-~}2j`bTf~MF07gxNpG*imwRW8S$
zUs;?fvllO2gukS?8ozSsV*KTm6~x+{DnZ9djMkCk9C-#ExjFJZU01(dCOp%)VWZ^M
zZr!{=9<%;z>o2U^xxG=AMI`C?Ucc0ZL?ml19H~x?bUda!)z(MrP6PP{uzM$x%1=xY
z#3<9ozlNl8S<G0GKTO7?86A`6h)uIheo7jBS5_@Drwo<mqxUOM-?P_p{iN3SX<f`p
zIJ)R4(ar4OPdNS=GqH}=jt;YFgV*IK{5M$P^>f~1)R}Wl<H&Mz7AMFt`6i?4CJD=%
T(k92{EqNP>F8cWx(#d}TB^8fq

diff --git a/static/fonts/roboto-v18-latin-900italic.woff b/static/fonts/roboto-v18-latin-900italic.woff
deleted file mode 100644
index c690e47a7ae7668691b3920afe931a70232743c6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 21856
zcmYg%V~{1!)Ab$O+_7!Xj%UZV?b)$y+qP}nwr$(m(KEmQ`{k{O6F2hI$&QTd=(^Qe
z*)FmoA^;%3&rsF_ApiFpXZB<NkNMB~|A(lMum}JEl=#Dm{=f*#53E*HPFC@U+XMi>
z?g0SUe}ljFRzww*1pxqv*&iO^2jlDph)uGJ^h^K%<nE83!VmPEjfs;Ct@LdH04SCp
zO%(tDBGr#xylLp{NB{spAO2`G{sTBX9gm5vsTBYK!~dgW{y}HJJ8^}nzQd0%tmBUc
z_J4o`pqN^^nf#c(0D!<60AR<Eb}L0=W@P0G0LW<lXny7Zueeyq&}PQ^MnBx(kInWU
zK1JtM&3?!q?&HTM`T+@?7<{vtmE(`EECB!jZ21#k^FRgBu%(URk4`@FCywp^pfbQo
zZ>8`06N}=H2JoW=5P;wTpIhr&8UJuUI>6SCt`dKWH__I{;U`|D|8!{o>Av*=Mz;3G
zKfX$VKla9tjw5Xl^^fa1TpuG4kQ^p>@B22moFH6=GANHFfFA-;kP`R9CI1)jae8%F
zS*m)dag<Y(Rn(s-hp37U*MDZ+-U`_NFkuu@d=Qdgm;kQpQOO{-CX#rfGhI7TQH;rk
zyfIaJoX6|UR@~HFK}}XSuGu5ucm}3d(l=#F=hy|ZS>IQWD=i)WR*;ZlCoIw9D%F&`
zqUY#6W;AtYPF1^}&}s}HFLdvp*_qNo2|$Sm+_$K=|B2Msg~THU9Fx_M?c*Wq89z=c
zX_wQb<4j5Nq@7DLDSk&K587pB84U;Bjk=n2l6aecJd^N!8GXDNDSt%0=G^fs(9%mu
z%hF1)6*Zq}Y9BmkoV?3s|It0~Ard!9|1erYtd28LtPcxKA~A{=<u#VlLrzHRS2AJD
zz;2DpXiejsG~|Vu(qlwZQkZ&h1)?{i#a<mmZ?4b6uxlylh<SfQ>p5osNZz^g`0Ax|
zZV2hRJRrn7M#4K{jFuPWfn%8$Vy11J7vbW0L}nzvB)99acgZ}>9^foSGA7JeLq&L$
zFGuM|HVIyv%*#yLvr`GNUN#F-In&Ut!4|~M_=BM-2(j^`GIIU&iM3VM<D9i~YV+js
z&*L)y&t(e5T|xHDoTs3vTeswCJvVB-l6Jk^YP}lwdaX=*y^800s{%=LAiM7$1!D%q
zAu&kF*zKY$1AQX{-(xKUi@g+zC<5pD#VAs=Ia}D7C1i)^H-!yk&B^CplqU(zNy46o
zCz)qjAn>@lL|8+*E0i&ZU>xyVv?G@SN2>>Q+VRSW7EfWwQz+h&Js&lhEW}Fwq9d1D
z0h&h9#Zpt-(#aO8L(F!`i$#^8lSU2Pda3tL2-dw;NeHV(o^rd6&5}mdg1gnMh;(UT
zrnJ_Kii9mhediLH2eJ9{T7K1f@m0Ej-780td(HBx%u`}Dt17~oK2N@AQ{+-!@c%Bs
z)|vLi%N`teoi<YSY|$ih(IkM~wC48za)8t=5N;ZTUr+g%af{-ujJU3b^))Vu6IKT6
z743p_hr~xq!p@@Kj~YCXTA$<MCThBRxZv2egYViC!}%_`eS>%7!mbNB!YJ*re0$dC
z9?}#KydQazz&~7|9u&!1<e*swoX6P+0FY|s1zqQzxD1Tt>8PIKoO>}j#${tf2lfQ_
z00sWZ<MaI8i9V`I;HhEpRFblJAbYlrACkRezhhw&h_8L?M6btc)q9zjX<@x5ixKsx
zYxlK7=egkc?HKgt(`I%!gE1vm<2;rWo>=>aY~iB40JYJtxU6D>3~5@;;DD{>;+D_6
zynef0OaA!kr6y?3ftlV}2Mkc9f-1oAXv#tA{-xpAY~%Uc^1cHjoD!Z7=6!+vLopm2
zoC5FFFcmi1Kgq(<yQRsmDFv8&gf+7TH**JWca44pdSIf>2xdxEtLNk|r_TL*15l-O
zqP;$~O8+`cH-6<_+nx<-R?D(sHArvo1yFyw#p<^WM${$VKVF&!Zz9J)Z1CUWEq>&L
zp2{^4zP9`x{VRR%Jc&977H2v<XUQ^~SndO3x1fL^t;K##N4^wG?;2jmu({~GldwL^
z=r`>bhl`z7BN)X;W34~f9N*1`<723!384mIlu4*4se=8E)+8aEH1?LH6~BaoB8xPJ
z?|_#Xv*GTgnnxQ}hvBoQOpTFU6bFo)$ECc5i5txFvz{JjCsYiqi4;Y4x0elm1$bzZ
zi%kms8X}?8uNRVvgEf($YaoePW6H!P*%zTSjYefqwNE22NTVlKCm5nh^h6g&q9#pH
zjvxB_OC-ohkrwLf#Z;S`a#<W5yD*YAet?bAxZ|+)5A@yS^c|m&h;2<|-#6;j$|$B(
z-#_ZGS5_Yala$2T3@@Ww#28NR(1JsIse8`pUrc35`ipa7Y|`<wQe2c$v6+tkq^Y@0
zYU7k~dx;X9C?pBu$js6PCgYISh&#!tnuW2P@e^8OeT$n;-HG~t$(rQu)kuaaQ6KXC
zL#e_TC>1J`KojbFbcom_cr!=?Xyc`Sv%Yf``o@S)o{%1^gtaDgU`BH)^mi#lbFQ<C
zz8{-?7Qv3-j2Wd2rsghzj_su$>iZkXOA;eV$M;`~o#tl1O2uA&gM3<Xa{+$VeCbFK
z1z&x{;2hmG)={{6&e3M8jbXTcuzD*vE@_OiEc)r`b2O~oUhtb#H!x$T*GIaU$USC`
z1-|eZwU<p$q*MStKBjN5Fl_T0?VCX2;qu}bP3agsQB`NXl!>r&z-0QkeVP+%Q9o4)
zlo?Z%Pfp*r>_~sHje&h;tY6x-PX2H(M2EOMv-DJc*xTK&a(+@jzvyxP1mGl)@~0h5
z1v^4Nw&K-&xT1cU-;!3^cO#gIa?^zElYCJ-d{bfbN_K&CiV0K#@5<}7#SF4-sKJB_
zf7}5^{$X@Y)L<o>l&qzm^R~O0%rb4e@zm9Ad&wO>(D*p5ra|h*uDfyM*=~Evm~iwT
zdnh%<yi`B=U=3jf8ju4B?VNN0j}zo-j_hM%)X9g3)ds1B<uc&lOO#Oc`i4#Z8vJXi
zyf4YmbO1uW%l4ge(uG*7t@ig;n?#-19^l0Yb`f0;_KpM{@n4RECO}5BtpLG$2g0vb
zGB1%V)GPP%=qA)t%~l>e_Hg<?DQ}K4wdn}ytcb35BtjXZCq~<ODO?{d{+nM;aH0EA
zSi=oNTi@plq4mNaPnA-hwVlnI#f$v~`yJw+Cq{u(9)gwUpr&^CLIT7GbwAlMYJh!Z
zI}3;4U|gjZ%-7#T_&rj;zM??omaX;VQor^xMi!sK8RKwHy0mlU*>brxAK^v++`jr?
z&=QeF&(@*#Vvq(SI~|h*3`i6ZX1TAbs$a*lsA|{-P+v7pSbJPH&F}|Yy7UT!;IOSC
zisCp;+L33nEHb2M+byxKY%y#?vTxaM;JQRP&cwvFLsLNcqI!oLA<kl`9}55MD$w&e
z(S=p?7};`h*$l8%^gWCK&bt7%T|FaG_&pBieNY(#0+~IW=L2p!JqEgctms{LBMR$X
zflKa4*a2eh5#!EYN!StU&H?Gpm`EYyHqmk|Bh)et&L+n6$LCSC`4Zv-v7D$#@{hO&
zax%oPsW<!t$TtUQ1FAeRBk(*SBeFaV8K+62#n4GY$LL8?n#jq5(VMtV1P%7;&Yz7H
zfC>l{PzwYNkOAlcNdQ^^3xIQg7Z5z453mc!{h3Go(gUCZX8;htIRS8ADF9>;LI4ct
zZvYx-6aW#d7Jv$l2|xoX1|Wg=0uX^U0mu-b0I(mwpW(W$9StN3Du5Ymx_;4KLBt=K
zT36kgVFv(3ZxDrVerC`uoyXPA<wJz21OH5R@#ER`p8gD5+{CN!cRTUo#iLKn&d+HJ
ze~>MIdx5xgTZ+NEhHFh`($=^Y4d8*}RRWJoMiB}atBMeJKdU*>kvW`Lz{wIw*sHx|
zN!DxA40bt2MMl1I5pXn~UHkhxYFH7mlg*zDo8^mXbwx4kl*oY{J_t>W2CB#?-08Ts
zSrF-$<3<$WPKs$q69m>)o`8+%C@wOP$o7p!rJO6hr<9fM_Z6$@x4=C%0ahU^ef_b*
zpoFDBr2!gxJnQL&`Sm=5d|Y4NFa;~e{48O#lhc^wnL~?&S_sbykIM9BcvSurHq@X1
z-Ne7drbz#NA!164v1_fOG&Jhsf+*4l5Usq>i=S;S02lxX0RH|4Ah@nqdO~=j3P0X<
zrmbyB(v4|f$9Duub|?vo0fX9Ox+CPRknqQDdq4=BbwN}3vw)$(Y*#_5SSq1Kp<Q<A
ztD*)O-A_&89kL~VuXw*1znI)OzjU$N==cPnvOp6m=-v_gE1?Dx#lk&_crTVs#ys!<
zWp1`>!6V`mXkOT78K7RZimOH@m}Ju2A0mA7$1u<dVPVv6;Xer!4C~l5rU-!uf!ql)
z-^Tx2qP-gvd?xllChG1DWb9p93jaO_60Xn*Jkg05ekc#w&#SnT3uFkddILg8L0p%U
z+%kwkk7-{0Y`w<^L>&f*!JF|be(rG^Z%1TL9C?>M{_!pt-gR;(Y^co*o48U~P+-=_
zefRnWTg4kp{&>j<{$SW*XPfQm{j^YR7~*`*)-KrDg}@oYCl4eqlO>fEtU0t%wq>(t
zL;m&~o*a3>vq$BOe4oh&LEHhIVjsXf!YBVl*@)xQ`GH~#iyfA6gA5U9JH;A!DiECn
zL0Z7$ZXd47O_qj26RHd<O0xf3#hJJEL4dZqc{djie-Q;G0n_gd1^pk&!vU~Z#ZZ>Y
zKa?wPWxT2+Zwv2U<ohb+PB|RhB>zIjd(&zOzWVor!z2<vS*#J#DOG}Rn9z@v`PZJ-
z>6-mbD~stWH?E_U`<70=8m<oO_jZR1Ua7Z=kIzIt)f|gPt6AsOvEkn713gao_f>{F
zpUh9U%&0!EUVp^gV%9Xryms89{9o=eI=mwTxdI%bbRWOhb$D-~rRvzV>@&9T)yqUf
zJfZ{$!2izmKl69R=B-@I)+}C3yuT8}D!${6R5Qf<gNE_y2A(>aXM$#KP*9eZ&QCA@
ztC3F6yiihF?N1i;>Ztb6!5(Ror%{tt*3;294MD*rqS<sVXHwU=TBoD+y(hK2^@Pt=
zAXqnF;qnfxwo#TZx)X*i!hPR;Q1ue;?E`HR6_}T`4tve1H$S{5x*g?qmc;Q4EtSIs
zAOz#ldT5%L<_sW`=Shr$mPcC8HElAZB$%#$Pm-{695amO{>PE?djH9Ov{F5DktlH#
zpfpC{+?S-`P4L@jJdS4<{#Wt(XSPHSd5#a{VX)TADhQYcMH+`4hj={)4@XmGCP}s6
z7bUggl3>r@sIc)AjBheU&mto~Y|)x^Q~63+8y&lta*@nj37LRRnZ4!P`^|lZPU9sW
zbk_5=rV04c@*)EdI_p@Tv0ufDGgI`<O1kUf#hXQ${SYcntFD*_0TUfnZ8@}7%it|m
z+YV$yxG)tp`vKG*mK^+dT@@bi8mg1YEPq4J&Y!`o7_a9KV-$Y76Cm3c9Ap0rwnrz;
zqge!%UdBdaL36Ys86}S1-c4WN*lWB{iaZKfy_lfMM%V{?SZh@CwjgLr4tP{@6SpCd
z^`62rGcu^Dl#)SpL0;zIYJ>68sch>~|Eq%cjOITf`f9v%q_ov77+^HJw6JNA=Hb2^
z+697oq59|M#uy^x;WXfqKVc+W$I&Da9c*M>){C&7gu8NUvesYbU?3@T)88AkMVrU&
zIKdF|SEI*hgr=rWT0^Lp{k}#^Tw<h$<uZmP&sfmE_1^6)YB9U_y{C;NHZz!33}BW_
zZiEn}KnnZw+*13iI8QpQwoIsSCN<5w@!XrlY)dlh005kEm3X*Dq~&O}B4t$EPXC(R
z$7Yp5zJ5z`T9_9+L_Z%Y_jk5x9gimWw_F&OGbHljJ_H-{q)4=$VGHixCzM1UsJc~P
zL&U{PBicKmCT9EFlVC2xLkIJ2K0$8PA+ZT6M-H!Onw*I}#|kXG%zM=LBmTaJo08H!
zStp+ROt4zCok!-20bc8;UN*g22hhuPdow`BShpo}WDO%fu^rx9>cl2RqJb30(SpQL
zpz5##=>CWP2Tn5n$WH2>Vr%AvEwxNkEY0fZHr`~({ga<u;$$@U?Wk4G6*+w}Upw+}
zy@xd?d*~<AuliN?me7{M+zoSJp5V&SfY*W7hEM%xUo4`SP{eYb{_o6tgdX^<^jgEL
z)wk$NGnCV9JZLeb_tdEn<=vp5Oty^I6X?NMFw%=;2EviS0+4W4BW=}jN?Q{<nR_?Z
z&Bxu?;<z<E@d@Jxk1Y>}78~ld8^~GYS1{c^AA<g~$r26#nF(5Nr;-;phD(qxKhkR9
zidHbK++>~j0xeP;yO9GXxpt~tqY#{%FTGHg$-elO#IRk{dck`t?v^Or^}5v~;-K9x
zm4?VfF|TVOoI^R>>6~4e0DqvKg9#rR1&5%oE0qV<E_KcjoXqMW_jq<?ntBp0(UnSK
zDU<M72y2G1&O$lvB<{(Sq8YzUI`~Qv27B~>=_ba=`NQSbDJb2VuY(j4{Y(!8H}hdI
z=r}4pNFEJ;Fem37(u1fU@GKDj6zixd&PNFVIVzmy+}y@2UE*+wUteurwqgy-G~j-o
z^W_Bzcz~WN296#`0Ln^70UCR@R6Z?Lu|!c39{?yM`qa>h{&0J$X;^&Tv1pz#yy<}n
zX0vUES{;DE0v}R-LF;p<XuwmgJ07DX*+Ac8KELPb!9mfG$mP62!v;ulEIsj|GLK3&
zC?qc;k*>t^aw<wpgcr8TXom8yGqo#w-9#t*n6S7@s0rK^wr;O6^yb54+?>5ho81Mv
z7n>a6+ju+IsgnplZ%>1D&4!hp5HO#hB~Qr`+fnS?H+OfL0qocfj@ssnSdZ6UVlhy*
zm_~a7zH2ieM}XE|%NmFV<mg^5lu$3;D0~}M0^CQr++TA-RmJ)R5}jST!}*oKWFor)
zK`9Tgn9-YtUB9XT6Ls1wt`=;xq3E)U9_=@QB-VOxIQ(KWmxc-#8V?U}e#S@Ivlb4b
z{1F1aUvRFEyV1tJ9W8wh(NUmB10%XwE2n;8)H6~f3~y~g+QE9<#ky~1!2T;dkaO4L
z@<zh)r8(8>m%t{<tDGh}HA&j>WP3^mnfSd;txypNgISwIO9lO9ex^X;C`=;|Q>eCF
zVcnE2iiBJ`YM*r=J+Pk@%wIGE>~&PnOf2uAmy3zzPna@9{G6U}bbHinaThYO3inZ*
z!0^C}O`UHR(jOImh*<s5cY#Yf%G~zpL|1;Ru{*yFh91wuvelq!7AOOa@@m5VD8`vn
z%_}s$(Z?;rmG98pFyFMT;J`o6Lr89C4u!=?{(j6dg1O<*vlsn<{_@v0#%CM4jDf+g
zv!P70`ztV$mrA3~>tq7eUy9oT(@s$$&pj?w;KW+t9lQNR6*pF1t}PL)jOHu%5xdnZ
ztIBdWX5@DNbjS*&7GJDTC6^9TP9{Y*DNQQcj=;pq$|j;WQWLjxPRi5!w|&Q6@0o|E
zayhC&<#N^APN|Xh4kFbp4mWLiM19k4F(0x@h;!<z_v=psrOy4^xU#O(x$x~4V%tqJ
zg8u$Q>$*ruwT%WF&h48fm*giqD&aqh98om1)FZhoOK4EE2hjXn0PrpJCx44FyFS<L
z#8Lrvti@x9h0H%hIep`$lf}%jDjIf)KW}Dv+qLqB0;$3MRfwXpq~)xY)jf;-5a@kF
zZFT5(7n`1+Yg(nVlCOljP)Uky@vN5FT4!Hrr{^(E5cN_<Dy((hlqIAo4?(}uc-t!b
z)DFrC8WNb}UTH4Xev_SVe0epAJ^v#oj&9V!`~}u*wYPpwzmokKpA_tLx@wrtS}8da
zPx*&NcxodlL^Is_FLNk*Cu_^mAHx~1KY68Q!*%%9S#OJ0Gf||E1?4Lq(fzJ}&3E=N
zW&2GfCGJ9bNzq(U`%jb8Z%z@#^Bh@ZT#SsMm2jMW#`&sj$niOfdJbUOwWM(M-^Ru;
zqLvOX2bZd8^8Uq7HHu9PAp7K<vqW}o7D|#=v$dAxg7-x7<<uE%2Y3+^J%4mx-^E;p
zqbJSOuXWXBbDx^ys~{INS}~jHU|t1gL<ef}X?CC0Gzq;uSlXqCTT)*@u)*o{4zNFC
zvq0Z&SV)Zj{VOLjWt_=Bk}Gux2xK|rzYtT9mY(vm<c&UFX?RT<B7rI!#Up=Zf~O_P
znOER-4!SK0LD_HrRgP#2?6-ESDX?_nW~A!C{c8727a3xUIg*W0-$3kY=5Y^CBz7=!
zG7+b#z8MRbtDyn8k-5z35~_E$TCRCNdjEDGx&zSIf}#LMjVO+FF}I`DnwLVdrA)#R
z(I<s2&3sicp(n6&Q$|TYfRg10-{||&<I0WlwNRO|Ve#LfxAUB~SssYwL}++Np`LP|
zK5PR+Ui=-LC1a@|uptGVj?ku9(-AwRme)_*QJn*`5Fis$p5~8tMa1@au^RRcCERs+
z*$QW{t#kh&CmG1=Q5jLyo6sI1Hadt$da!qdkJ0=heW4;^t8U}@EGZF;o95&yDSQU)
zTs=~nm*o*jgYhcdfPT(t40fL<qZQ!s+lBG5vWIx2#;&`^+xsfee$anZh(duy$hI*N
z@-8eQQw6EXjFb8^stpF;zKC~alW+jiBlnL`slW(EJC$ljfgHo{xxil|tY9q<6vsx0
zlQ#|(=4ofC-{3_Zlr5hOU`tk|s3o!Bj=D8#*KQjnbj9n}6<qGs*tOArd9JS${w&>e
zuTSv)b8jk-_Ay=A5=BY*xTUJ#E-dXJgt7L5Lp{w&V9QxjqPLaXBxtxRb${q&WPTpp
z-(Rkv<gC31!u-G)mbNbM=4;3_Lu|O3-su$?19uLy^7`1GXaTyu?d9);NYDJl$qu;}
zh0@>o`U1Cb0+V^7ou&q6s>GbOc(g-eUk^q644klq3o7{f-6R5fAitMnl5%{LN0fx1
zL?}mtD*0<1BZPI(HeMBO1oRM}@QB6-N>doJF+|LnT@%60s&Cr+IIn%1<JT9W0zR>j
z&+e^IzFMMh^Xc^<$(?OWEzclh`@AJ}s<aM9ymK1$_o>o~6`hvdqv49|{^EpF1B~oS
zj+4O9+=f=h;0f{<CnB1GpqV_K9lh$vvj$7xQ=A^$UL<gdU>W)%1P-YS$~2m~y0zP&
z@+}qz0agF=fNw?<#WPk%ef`p#egrY{wYSIjNOmhmG^Mw%YR<=BwfSpG8*e}IdXK$h
zofq|P@S|BE0AWYCMYl4ReOk7!`-Mta2dB4b^O78Bl15~>If~XLEKt@u$el{UAvzYU
zowrkAhxRC~f#O+kh{9<>2{FEY4*ov4jF8$JXK43{XlRrk!oGaMY7H&-xZ(r*Nbiix
zXKN}&?Cl1REww8f;y9glFdDNN=EaL(4<C#B22EgXW?#-LtOx<dOYP+~#{kl;=C{Q$
zXclo58N!50$fb1YEIU<kdV=EC-l0hb!RwzH{w{Pd#`F{A=f?%w=ji($+<>NE%p7?$
z+>R&2RWkJ$cms|;OGW^$LAMv&d`Q2*J68AtG&qr_$q)8>jWR0Vmg9@AN`^l^%j4?c
zeqsG&*lQ$G7GCytBsZ!)8_+W|HGj2)b!KXG)I$$$U7ce;%U{>%FFg^90U?yIP2Vv^
zB_aA$!rtE6VoD1Y7P=qmPwxe5Aj*exALk&#93U>0-WuHrJ2CD{S_<nF^m#_rlE{jk
z?5$JdJ0@LUfBPYXz$-$P;|K6;1EtUy>(a7~Nau^D5lDiA0EvWE<TRN^L&96X(t^(p
zll!_@a#DEbQnI|CU6%@7CGlv0UX10eF72!wht><WK_jk;!2a0#nE7&X|F-1r6V3aS
zq|L*xRHb<TWg<&7eqw`%`vlWh#rsXl(J^k#+2J+S@Q#nyZN5FwA17e=xyHbI#F1F9
zBd&Uob8UzaWg3UV;r6q%YvF-`+}56Zh4=gewWcQs6NQvbtP30b9`(mW2r9eu`-|D@
z1IHTaA!cE0G*%)i(KB@^keZll9T)9Q(Ery2fEI>Wj!Z2kmEPYA5x>^PzWt#QWdHjq
zT53oa?VI;KVm@alK*j;;?ezB%Uc5z1M>J8vpoayeVSU}jy)o^ESQ|-DPqoepP<ml1
zLMK3HQ`&|cip`Cf#<!#bfuG)bWT_*@YS(e&o}p8Yr|sMU1l>MvAV2r=TMYr|(WN;=
zxmDI%nbQYMC=3jJQ0h}#p>b16Vxcj0wf9hN5nA65pMcVZ^#C>6|EpH9dk4x~<<e=N
ze5H@wwmE!j#~phh2Oq~CWh7mZC;Y>`i9K?-MKx${@LcLSavwqA%ew7f#|1%yph?QO
zkQ>TN>I#KQY@k#do&k_J(sYH#n&D+HufSV2gDX8OiHl0q$!;XM3v`)w|C5a7FAT|J
zg$?7w7%ieW6y%)ujf#QEYLM~*8nizfuYm#MQ^b|!)9c2%r@aAurhLEqBbueX?pLnx
zYZ^7|P4GJIy<QKnbENF4_GIa9Un1oRo?6^yp>P6j6h`a$oMnx5>(djM$I2@9)@66B
zuZLKkC^4<faEB;YJYmm^G!3;C6vos<Y5mUIi`_vH2W(*p8iXRCg#X0KnfnU?$fH_=
zglP=eMZxVg3@&VTqoX-`y*qB+R8y*>>L1M>P(DU+!tqyYFq(BTft;nTvo^|Ml91By
zE)iso8Ytk6?WiiA8jJ&Tm)%`#dvV5`)MxaGDr{92Cf#u@tZDyDA<K)&Tsn$d(JBqv
zUkHs!dRl%)<S;LD>tCEqR3(#Hg$UfeS>;sLm#a7rGI`D>8;<#(S45Yz-zg?tPW8?3
zIZ6YmeVuf##Wp++xlpP*Te+O&k|)zDCF0Xp-Dp;s=XkfmfSJb}t=kvGwe!&Nmfp>M
zoBa{F6G&8|4OVG5f*=q|Q4`QY8=tZg<dBvLl`7*j?Ao;^>Pn>Hz8WN8B!7igE2w;D
z%Q=KMK3eO3$j~rE_YAOOJ!rUpTH~o{s`O?`7dqI!SeI4?0+Kjp9Kd(oB!h{XqqUd$
z@;gC!B@n2t4P+QNfnNQCYU|GvE6=q^eD!O7jBTVqf%#Hkgo>JaOMTRIT$t5{A)H_m
zn-$X#@)%OQ+~NVqS+}tn<?@~0KX~m=q3Bxg5t7X5(kFSwk+Vvd&$Q%FONCr{bSkSY
zS!LFC`vF}oovSl&amvgKew5ueT><)u)xWD{lmmwAP5mVZ1}hVKLIhR9LfBYmpKf*0
zbaL^gjH$@++{hyz2{LM~8Tg)YYipsG+0Pa0;`hE_K+^4`;V++hl&1MB#yXz`ZL;}v
zQ0rc69Ve>s-8}GW4%nLUGo|rsal@F!+^&@3-`9TipH#~KoW2QO@aTpms%z;vLcSa^
zICYdaNm>f&=lDrS0#d<^63g47StfS!qsSO7(2F6(tV+XO?}RvjDk?VWn^N?_EsH5t
zJtWt<unB2(|4!+*BmXk?{-eG2dGnmKR>8DgMLkTp2^y9Od^;a73kk0LJ^9?Y3+2zF
zohJ(W7|4<-!lrfg^FRN4;EXAyQb2BiP{~C6Y;^{9y=TPFf;knOMTyGsKq!_<MxUx3
zDA88}=kCue=yho~beQE3FZ`0)rQXhf);*P{N|wSFWVd16s|QVf?*@{B5bCNw);C7m
z<QM!bwhb!DXm5r-7EPIs?l?TGF@8UVLg0y#lOePWfu=Fp0kB}W==sw0ap7f;2GVa~
zj#M{g!Rlbj^t-=7u3oWwkAH75w=;aCWr?-R-;hs}p`9nac_iudYP&{vKF~Wbda8MS
zSrX|`V%B$PoPka9RC4deh7cxOxtSxJ0-bLg?H_CCy<5!eyY6XJ2cKv#*i6sdj52mw
zq1y!|pHuh0FQmVo-9D}y4mTPOZwPl{q#@t>E}2G6L-Qla_spMZE@D|9?xmjmsC_=G
z$wFV)hi~Gc?9q(VROG94sul%^MUH((8VZ*|zc@B`nL5DVeYjq6w}vzhV3yW!+QnI+
z<>PK&v`0I^{mn&(E*|z@%B^k0inTh(wtcd*heMR@LNM;wPuYCKvCUO#Cr0sl!t(^<
znLzNn?@1jCO7b{GT8|~B*biaWf6BO)jT#6xu_%?VVhDdJFnqcu9%QKr(h%Z{R!ivG
z5Rby>e_7*zSrYDnh_=4wTd4&S_sz}D%?nTuqL!o*mz^cc$r3fB(b!W+(c8XzYMonz
z$E{(^k<kXc3#*rhQXBxuE4o;_Dku}|#ZV$8Cd-7IjwBxC(03n&5iavWJAo7wba+5K
zrXy7wnKr5M-yKYR%<QU6funHalikph8odrI{4&>`Uwp%>;s9>#6m@2nN!qdK&VN!4
z%$G-A@g(6C))Tq(b}1SKU(x8qORy}bCP{)+Mi$95g6#(*Qye$kw~uTqM)#C~j)JTw
zVlKjpizbkk`Fbew0%=&|(hI6aA+Oo2pw6u~L{H@`R-8G!d&d^iM|h9u%9|}(P*(ap
zQ;OvCuC}5!JKCt3>#KC(tJI>v_=s0~ply?QCqg*SD+m;F0ADa{uAQ97QM&}r!R#PS
z?Q;wwitV#1i=@aT)lw&JN$Imf$Tw%al}_1KF)OEY^O+lxq}yM8o_IFhF1bWAzKe6$
zzeTxT!8_)iBK{Zq?Xc;0-jwL=frUpz<>4W9{MjEavB$g9WzUA(hIS+)0YBU&M!KI^
zQ`C0C$Ac0igxMhQdd64Me`agDAXn}F)IPTtz1Kis^>}$$ak31Lhd|2x_~E_yVdVm$
zR4K>~BZa-)HOOT@>X-=&nNH=1HQgC*VpI6~V7k#5*c=6q#02{cPxz`6=yv$!kuLR4
z%q}6&a%ye!7qR43LMbAk#2S^pk7(;A@S|W1>J5s>It8%sBn>4;2+s^0hn_Hjgv;bM
zeLAYgOFo^Mn-T|6*UD0Z)PdGa%-+#S1QbQw;>k<x@0z=$dLe^Q$5nx`PiUNBQfc+{
zHNTuSVj`%jTr|g6d!9lIr3aQ1zVcx|k`9CdnPu1MNJ7SbK$w8M5HAYVO)V5ErF0M%
zVG7W`=4hZjV`X5SDQJAVnCG8F4;+QJwh~D*Y7z4vvZtINwZxvB@^C?E8D2;&FAn?N
zj;`slxP$bI&+7|Dx_IQI$gzua-nskht*Y>awDoO|F`@RNCKTRkoKE=-sroJWsaUbq
zQi^}gtmvA>s31X=F=#qYoXuS@jqW#x?Sr4@WcGQnfWR(f8fM1;t>QO&OCPWwY6IOQ
zL!C(;WJiY=G~=ay4k~<bK*3<Bz--K<owcjQQP<~ut~@~)&)Y^}O85<(_KP>nM5FS-
zGpqvTquEYz{=4tLKOwYHDt7l>dg?)Ek9)RPCkUzG@6R6k(0P2WC3=|e{hP^ke}?te
zadoaE@4PBDAUF270?mrUV?mNmqxHbzhzolQtF<bnd&M-tDg-bH`bmI-Hc{>n)70jS
zY(JXbJg&E{(ubpEOVqG6x6Ns}=nnBY+kh5oWRwvGAQTcrkT>(r!>LHXjzW-+5Y+qD
zMO34pRh0i}n(Rv91Q|o}F!AM<9or_ig*K6MJ+tUO+3bgHc|@Wuv26`65QSd<&aadl
zyHyBWQ>|pauGSJj8jWf{TfKd*UBqhA(%;9JCh}u|oNBgRK62ae)n?szry>tqQ0^^R
z855v#Y*V6TMcK#+>-cbN5x~>^hdvYLsspy@g@e11fgfIt>-q&eJm*VvyVZywlma_&
zge|&j&+F0?;jWhC6QBWkF)=vyjn-O^=|?STwF_MhQN6q21~xo+S&G0}o5Kpm-hsjv
zWq4CA_as4VHk7Wi6U{#@n-)IVtRYs3(CI&p2v15S2wr)PT3r!8%bg`b8~G)?nL)PH
z2wP)_JOIJi+|Em_Mg-ePROrYuCPfzsmal-Tdm>#OuNdW!&OLBaT_hXb%Idt3;9?n;
zHXS`xh*q?fTxZB^Hsotfy?R$-9#P~XueJQdE3wU|s2z@P#u%TdD!TWs8GS^qF<AGZ
zQ%Sat!0DO|#br3DmX5^ifq(1{g&S(JO6e!I&^|ASuA)&K_|NNQ{=mgDDvb~@y#6}B
zuMA$wMd|iJ3V#$}9>#v4vlKWGB9C0dZq{!~2)*<t>ybm&-&HbGOPOqTGC5#C3*BV?
zH^E|*y!k%A2=p8UOg~C<Co2;)dF_I(jklqr5_e;5d?}ZXSaGXlNneAxY-irzk_-B0
zs-cVOZLqyw5OiAJVyZ@LZZje>qGN>z25gZF2eSfs;PhfqOm(KVTEWLC^2X$0p{3LI
z>?Dbx{l%&{7Bx{6kYg$2RAL!}GGuxqOwWVyQP_3cX~A^lj(?l|QO3lt8hNu6?)S|+
zKxhpkNnr=SpTx3X#XcD_Zvh?kfwSUL^4kG*EeaoV4pkXAB<Fg|HK-_NEK*{e^dq%=
zSHz5&l^vkLOhn?}lJraac(~ymgR=&D6taG5%<fNL@}Isd=BXm#?%HRum#If5=sOEN
zfX>QrTx=e<EA961JRys1cgGYwaYOux!LkqnOU69vll~>C(sbcFQ+ia+@e+gIn0RNB
zP#(;!$KvoKbjV3(EaN8AovFp+hVU;FL>@G`U8irkT04Pl%8L>B(WJY<t)ygVn~F_X
z{S&kF)38wyF6;tRST+}JzVrZ!(41P%4m79+z2AB5_$k-e2twkity3SoS5ZtHqD7`A
zX;v6BJ%fF<48o6JjGMSH%pO8WjKEa|NJvmft%9JV^Mc({edha;@%vJJXiP*Vt%Cj;
zOwd7u1<)3>&@e?ct)88F-u#D?bfVYtsI|N=mk618r<Y_Pv~%yvSEtgW{xzyoyzIDt
zP&(_D_$e%JoDOl*?Oq}<b5;=|G+C|_4r#Ty%?76lL4$EKL)i^;8khcdkK9md%h6y}
zi?(eZxBlE=>*0r&e3k*lq$P7gXN|(PZ2!=}rX9jAef<=1w)w&p@(%pl*pH9~{OcMw
zXv2-6Cv5kX=+gS6C)HzW?NytU)T&%c@TYnR!|yDPFJvL;RBU^CKMUSNey_(-L`o_v
zMA=d}doRQ(h`Hu=b0H%Xm4G#tu~^?R*9;>Ur2BR5@4l{g+=jdhEx|^CgZAn`YuN_X
z6U+S9u7lUJ^X4!+ub&6!yVF^Ne+7eZJpujGp>k?)G`nYL9aXUsju(I(X%q^E7u;Qo
zi~l1sLt=p<JYxPj!#A{Yaw;+x{#31;`a8HDso2U28TQ~_8O0C8`9Rlb%CqWHwRUp3
zkvvO-W6%?5dYf-ia#yt^X^!;rE19^IGZgV^aF1DZojWg%ZN^7*y+2A!^Oa9z-H0j#
z5$Uu4X}Xu9`HaQGb2!5ig2o5D9SLHw=Bx4_jM<b<udrI>8G;%k?!;bQLG*9Y2`PH!
zo<Idsjrve3HIhw|w>}uE7L*20ZtklGJN|B8j#Ra-`U#W>8>)yIOI8xjZ~apQ{N22j
z`4&2d&-f)zL@R^Az0&bLhLJt)Z{2;{mjRD9WyytG=}JkuHcm99$)9636oy$vBII7@
zUD>7P(Ev|(O9teh>Q-W#FgPnTn50_c=(_6A-{f3^Da(L145Ep=!V@!8-&-f(m&=_a
zF<`6WcYX;$&!agJTuH-tMcvEo@pvrO;46xcCqIM?*=FxNp7(o2T^6qNR{Ob?8F>0l
zu2iq?2D!=<l4okq`<kYUX%-6C0}3Hr<DPPI4mf<HjXR~LqQS!KUnuHxGz?)+p{#_F
z7OIeB<rAg8OVD8O`B37E6|Y)!*v@Uj@)#=MVxzLpX2#-q%ktVURwrg<4ICQVM9wpe
zKyP74Q_pZ;oGz*j#6c+tUaOwaq8EcPmveKFa^$H(FL4HkB3F*e?x3OAmcOGKu+dJ5
zB9TqzTfagjyjjZhJ8lU%n&8st*Nf|+gYcXmltN>!8(_CsyEiU}-ky)Ot8|4sU03eM
z*1)96$P*HSYNYyGx3JKHoyf_1$c@}(`UW6ZI{TInNY<%ON%aRL`|B5`jZl}6vle1t
zZhd}^YV#2beG*B%ir)L$6R$={MM`q)GBuJ)NnEgLe}4uOr9srqTau!X5?VI|t34^;
zt+3ij=k1x5DU_iTujwutoY^s^V-BX$q7h>mvn2mY>gj7{CMGK~&`jawCP8~XjvFS&
z#^=S9L|&VCBgd}l(caT96Grf;3Wt@v@?zebcQN1fn)rkxA@jT!UWa%Y(3dv0sp6vf
zi-ee8Lv1R@)Y2b236tTFbgU656hZ`$W`XEH^Y9HeVQ4!~yb1`LCwCI_nU!zR3VSdH
zXV=}#G<FLs)5kXZC6ZNjOzO%XSVe!G<8zfF0@5)&d^6QCfP&DRBI6^p#yogpvAu<b
z!0Fa{w+O{UscRCq%Dm4&fidGFduCdqug8ctf1vFwy*l5s=vfw7&_jSQzV{J<Jsz(|
zb73}Bo!>QYlVbOn2&pLT{2BUNgGF-UK8!W_$U#zazN(Fb%^J>VFZU82(c4!d+vg*!
zVdA>o_(YoV$vUUWOM&2aaU8;ib94MxkHI>wvg&1)b7aojKaq~A&uKg6omCERs3Mr;
z8}-M*ZkTsx`mI6QiC-Jf)gI2@6CF2N!KP9?JPGq{Hq#mR`<4<Xok4&gVj)?Fvwgt@
z3q$#0p@^}kCjUwtK!v=|G@R8OSH4gxw9bHFa9ol<msO{;aysWC9W<?gRB;}~X1eOf
z7&_3MDt~7yxlkXdiu>=ZPc%4m`gi6Sp45?T=^$7LJ{@mR_k<9JD(h(3NcZ4Ruyy7F
zncWn`WA{tdOhVG4;Qhc#7E)T_bea-*!~T^rG3nx(puwh>hM8m#jM_oPCsNLcZ+@m_
zWhvdgwC&+iQjOA+#=o?3Q+4kdO8M)>vxmQ}1GhJ+X}6B;)#HB<EDmKN1AGBCi~w`_
z^&zpP7;Ezw@{gJ7jWO2hIag^6Ia75$%835NMqNvX0#o$(Hfpk#OmX060=<rgx$vP8
z3PeQBioB)g5yTL*eb;Y5b}_>Ei$|I)#3JEe3~b9L{NuEhjqK2+_-2dC%JG(E-E23t
zS~<OxxuL_>n^_9Q3Q#FlQ~uoJ`!?oQ)~<`LZ~XN`aP(Ci``?w)rMCryDIZ5nvI3dP
z(>45q*TsGLKZ+(wMyQXO3UW$|#+j$=A~v%tqsB*GMoCX^`AXwt5=D?ulw|0SadCKr
z0?aU8M8hORzkd<t?DT_ZG*Jz?@=q)m-9qp+Q4QS3&yTD?xX^c&rP!U$Nx>o!nTbuY
zkGG7gudQeVUe6a8t5zVUt0(QJVrNcp^Ln|hoXn3v@b(=IrjQpvyop+or0qiUaL<^M
zI7a8&dT{jkinU&HBBUTWdbCpd<6$s8-qF>@>Sy!B{<6;A*K?_e)l}Ca68$Coz&jMQ
zS?#D(=J)oYP>B}qE_FVuMDqr;(7ZQtz3$8~f9`3ulI-Owdbk}f9Of%7-Z3z?RF&nM
zy$(}WGuScgU4Ot4vm6!qh8o=Iii6xdIGnxq)c-D9OV54)<bqTD_z9wj*W-JZSM}3#
zQ`}R}qYZ&_HP*U<Iq--#`g{{K_)gK)tFp`oR-l{rh|2Z)!7PQ}6FJY!0IKhZ!za;h
zyO!h2G>6JFd}<bk^h9;M4U=Uwgk=P$VibbJ2|t0+h1y)YPKu06)~z<$q?eg%YH+3M
zuih!pqr%n>?Q~(GF`8f~Qpz%sTL@Wb#IpChPb@l$_-J96wqF(}8&TZvG4sSt&BN&J
zV`^`TBCw9Xgb=FhJqBvQ{w{3a`$2SCE6~fX+Bz^gD$^c&*oDRbLX*X^v2qG)zS!L4
zkCI}*{T$6b)Y|yn))TxS);gGB-0X2nKaPE}5doO-dG6mnYX#ggCLRBu8a4&nkwefT
zafHmV@=lr%RzFTI0+D-w#}!48gAGKZrp;Pif~$~Z+!@jci5pG1BA4NI6am{NYL{3g
z?s=IAC^@UHYzY%a{4^)mR`xXKMn*avX}sC=GltSXnEN2Dzex9$jye$d;{(&}m1l~$
z)pFZt8_1YlR#-jLV2NZ#sg~9b7+5D~-@Vz`+J?Lvbr@Kg;V4p`2p;bwl{U>*V7X2%
z)P=$&&Y(n$K~_}Y70bDwR|(@}YE|q>R=qYKC^@_xAzs62pA0OmJ_scE`Hw))&n=fo
z^B9Rs%rKG-FrsABvStT?k&l@`R=?+$_}AYwnh1OW`)EO0N{&Ku>Ct7iT9d}<Kt|~b
zjCnIk2;#jjRO17J(DpKYtmD5Z!89`r_l_@Hs}vU5f`roo#Vr%V7UMhM@(5A==TeHj
zgYmO@yqSkzX3{<1wae*ia(jd=mTS!^yG*Z<B41?Fo*0HbirLO)3u?_zwt>m~eaj_C
zLdJrB!;D!P;MR@%;|_9wVrFA97^gatN+iuOfl*CP4ecZ7`hMU%2gi7w8`>Q5Tce0w
zYd`UWFvWI`d+S5!L9XUbElmtt!}8qHX;pEDXqn|&JB_4qF-fBZO)nqic~Q1n>xM79
z!rvuYW|@y64$ccbQ;P{pE7tb7yZrQ9VHA;iG<fdem;I}E>VVw(ht)XP@%-iJ@SaFx
z78iqYJ>dG*Sd_r72Wp16%}<nMDvy<3+Ofb4TG_NH2|wisr54AfFwT^SPyPvxGymz^
zNKpFIUxI5+k@_jYLMSIkLC)2H?x|X76iCxDVa6a9faC?UZZ7fJ2>-;p0#CnVOHb%=
zywALmf-{KGSl>CVad@lm$Y!0GbXpX|aEC5+9G$ww>oL}73|f;0Mf#CZ4GsJV$s?U#
zy&?}vO$JLpLQ&Q$2s`939EB2i<l~`F<&o``|MSYl&02F;YRNyGBjH3!^7Z)A+eOY|
zi;w$PaqT>u*#QG>&cJ_;JSUU|k$yMO&T)8BhdTF_(pestr^zGb>k?BA&ryB*iA^wM
zAHO<_?()A+h;E>wH6sw)%0cBg#^>rT%>=%6cq>4dIz4L?MF`~m1a0?si*3BGYy|^i
z^1RTR0s8b^AXr*gQ2?s}P!LLC71Wv#Fs@Z7-HpGe2JmC0TS)UQ(Kj92t?;Zi4N{n4
zL~@C~Olk*JM=&8e2QueT02`x3fNaPp1yoT?hf5t}IT`LN&5rK$veh&nzC0e<a)*G7
zP)Mm?)d{^~b~FWD<18)YENS<%GnHuU_$SsZ&2hQG!#Xp2<Uu>!fkK{nH!Obj%l0lm
z(`3X+OtcKbWV}<A>_NyF@DWb9P*`c#wU`9FGtvHUdpQJIqTnVp+jL|7E}z&S0sYhN
zZKWe-jk#&j9_N#0kACI%iw*W28?R8rqCXGUik2$1(l?AlA|Y3Nl4lbe8+@+879qGK
zJYCAF1Ph{3)}5KLWd(>g*dIVsBpzc|6ewG8kmet*T*&R;Xo0BZ+@bZege-uY-IJ|d
z0rc5f{Z3FqBX*>ifw3FT;hVG)ZYu8xI^u}V7P#$^8_rN4)R$CA@gpAUS03^t)1wF7
z<QE*WE5!Ym&6ww1?Uftxy_dpK55#J>m@Pq*h3(NGg*iwb8d{#yKv$|i-j`6c6;2NV
z(Bzjp8sDWzm*Gqy<poBWgy7<A318y1Tmz?@w`0BXX0V_;B~G-Inifm#^wNIF*zafi
zFgYT@Jaw(y=qh_qUF~+sIh$GdCsiDq#je-1U67oSGoIpi7XR|NMjqARgS1Cf92uR3
z%hw`e*_7^xGfod-q0GKrGDI4wkiw?FW9V?U!u@%;Mc!osDRoU1+~D6@FL3dCzoYnU
zxt6w+xv=WFrW@7{QQOj0Kea(znPQ&C1~^xAdKRJE>kq<nKF4J4zd>dp0&cslPEn@{
zxnj{+F@XIipph-9pb!%5OeFdTDOYV|2dlZ;MFs*;EUFGK0HHHb*0z5^E#>|VyxHWw
zd|uAVp7iK@tHDU;-UVD*nc2p7jq7+IV%5S3RxhM~juRb;9twtK4nUlp1utdOJ$7>}
zSFpUirb1b=qNO|#AzDvB3NFF4jkefJ?9Eb&qz+JOx*J9Q3Ct`-F|zB)|4WcUjaO&5
zcZiUqn^Sby=PtI{o%=2NQZvy=(lfsO8ko1aeepQGM9%?L+gY7~FB?5{#nzi7xjPZa
zTN|+7jIwtnd71QlQ`;MGDB*PS57P(oJx84phcCOBB83k6%upb-o4^BHyOg`|fTq%V
zr;BnMNX1Br`rO$l$;Fn?x;iG3>4MZ6Y68!fX6{hH|C#nW$>Ssk(W>RzxCh6xi;+v^
zNwS1Efo(lsVuC}K!Izre#@hkBR`TcYm?{I@^?bH|PU#W+&hz2VU#9UrheNAWi{vSt
zhtAX%#Ca<T%d9M*$3!*K)z@_G63wyD4B@*rq|XkeWVKh&%laryvO-qOpLW3{NVp#F
z$NVIcBrY_`<3w(pVLGo?Q^A@0GF)&?TJ?teP^KjTR^10_@y3l1RV9tK9{rgv>3I9#
ztJKBAu?S3d;KkJa`25Wb_DJ*fqo@4CeuMmOa#w|_H<2vi_x#{e#3qrQi`n9;!mh2I
zQUx3v=xHUK5r*q_RLR4D!S*rahU;OLX^Qbk7<A*|J6|cW<hfsXrl`ihQ8MAOXtNpx
zUk1kpC6FXgTTqWKGQx8OaZFD6(E1(=#)RL5UEK+mv<#EYWiU?CCw^mxd~nR+-TIY5
zkX1B~Gp|Zz&0%%4xyhL=7K9b%N>MK+dkT^ve6d)hi&J~2y5Dw%P_e?rm$L=_6cQ|1
zd&eElBD}R!y<PgAi6vuRn%&A>)PrHq+PWPwWNef_SG_F%HO_M)C9@SSJV(#=rsEgT
z==`~x(}sxQH<b0{^Y@CvJ#dC6dV`~;(EjL4@7;|9H6`u#R=lXO>j1=BS7EabJS;tQ
zACl2VwGY~ynz2HV=7X2kT#uV$P7aW(=C5~Eb~?T2)(&Y#2E+FZHL6F~UM>tsVf%3!
zsg`W^LEA+ciY3wHAW{-Ec0;~Gqxf?3l@6k*+%T#%SRG-b5M?5M9#@KM+$hqrJFj_e
zymLikDC6Tdvuvw#l)NvRpjR~@`(Sto*f>ObwWh^t@@YMTwNhAj**-U-@r0l2TDRM7
zhFfHe`DGby4CE4T{eBbzWffR3<NL=+R1aRLq#A{VsH}of5v&^WAnoLq8Uj?4@fS#$
zRr!?D+7qcHeG5(A&S{IAgs_-ssv3HN&_`(}c;p5r;_fxOOT=pMz~d3m*mD>xg|OY#
zNIhjg?oaszS`5x+oDV;!@Um19?P&xBd{Hh9yo>wiW$s{!!ajM>FfzB(xw)WA?OlmV
z_|`_L+b}X!8&+vmxGjvVZemj*7D`fD-Y_s<9Bgcq$Qolu%@xfB-+daFNr=8Avd7m(
z_ECZCCg+S`?jZbBenJjiV9@0gI2sJ{CC3q9wh41(0~8}UtKEE8_Yw{3XZ6;!FBX39
zyV|2gLwO#SSyt-9c9s=LHSG<agH={j#*?qhjKy5cWc*gH!?BwFOt&zKsy1hUcspNg
z4^>E64?l`5ZYrV+8(S)2gTv{I7T}{uWAJ{mRzG91k{Zb#I{;SK=g14rQalAMHh(YY
z%Za>uC)dQlA^FRBv4%iBt9BfgkJw+=SSk}!dXnQIG_htV`-fe<X0hm4^h)sv)xH3>
zQS!ye1k6Puw6Xz3h*tTl!C}^hd89sTlnh3oZR_yRSut|W+I}T3b*V8$Fn_7gpG8_I
zT8O5s_o`c8g_6!N1ys8Er8GzNic8(S7MwQHO6i7kbgrXYL<P%h-fbzx_2jW>?z8xG
z;9r$nv5sMcK^hL65xEdPVCRqCMtD|!NV>Km1WITUxADLi&!yBw{@y~Y+LG2wr_6gE
zNwrscKC`=4L%*J}s!9<D8}yU>B%WoKG^2$k7%W{md24AL88$GMo$x#)RWup<xD5$a
zGIpP%oxVsfRz9}S1b=Ctc|$n);8KF8+6<l;t0L=0=ZaW$n+Q}}5IE92^Fc7Uc)~dN
zyJxr^Wh)Gtk^TP#q!e50HN$mJaT2us=B-(KPMp0E@2S2I_Z`@0OG%qf@2q)q_MulU
z{@?`Yh&y&1JlCliC$e^0YZs(M0L9*FXhxN}w^7P|d@BI`CQ!n4M)Nkx0v?2etgj;n
z4IYEZmK{?o#$&SM4roZW+|)98JOWfn-=>O+kj1FP)NPc98B`u)Q1jz%ba2pM2Z#6|
z_n16t(~>n@p%WTR_s3>siR~W?sB(3w&aMIsd4hiDQdX^`aS$!^)Fs*(?^E6ru{g1k
z!h$=t=xvBBO%fqEV&tX_?>sh!i(FHv?R&hkV&I}>LrNFUQnMR0?5gr(UKd3xyJcqI
z@;Oub*Dq?9o7JiV0(6mnNxo7w6oZO|Z7&j<mi%KjOR^>3LMp_2!YhS2B6mm?8Zaut
zG_#Hflj9Y`fs$nvc~~>D-bt8yTjVQk`Ka`^om!=Kh<jRFH8S_k-1v5hO7;A^6Efm}
zl!edUkD<Gje-hs7YTTYaPfAc{wC@+x{d`+-tp{$e{AgTThQ^F(E9A{%)PXyy*(eMp
z>XvY;IfCO2*^I_*B$f*c;gRhPyVw$cj*nibX7}s7rssY8r#>q>xX9NyUCwNxPQt?L
zSg^ItJdkDVhpIw@?X7N#O!zs@OTO+m{I(AF?tVwalwM@#pcMUuG!(CEmN5AoOECXf
zyAPr9h_da&-6>Uxsq9?8Ju99(`j)`*Y3d+*IYyait0w&UtuPpg>-Unc$rcsy>)WEl
z^=&X232*Z`b__oWk^G7c<%H}2tZ+$S558Aq_acH5TNeg*@H}|e(0Z9w-mE>l$Hq6P
zPR(M+`tDuz@!9VV^nGy3_vb_p`!4tbuOdI7NaWVTWtE>~m++uvV1zmfctpntbu_zM
z-8gmpZNQIXm*C6OSK}p<vL>&@c<~sSo2a?0^nzlJkHd<@u1D}C5_mbt37MlPN3-yJ
zvK6T!f}rH<Sd%^h=Aa7~(gy|5dDm0t0os2Ezp<qND`H@!tjwK>BgyUZKDjrLhNNCK
z?t?TS(C!srCq9CLo#b}5$i)`GUbv0lc?wM>uP6->L1E%f`6^!)xQE_FChweDO2?E6
zxF_IU_zxu@;wb!0yO6U^du=3Ve*u3x-Ys&HXJ=E<%3y>eq&w?xJA6f1q~MLp=T=Jq
zMVb1eiK!`FB&wriVkL>om89e(ToFhPxgnZ=Av)cKeD)BNsiulZq}*Lq^A-5gd~WIM
z60vbghRkh`V{a#4>oeT8V)ni(Gh!c1-0Rw(cxMTW0(Io7F5P>xYZXwKz}|2{K2%jv
zoXmboz+}}=cjA2u_5uJzW6X2ZNmONjz}^Ki)5O;?AtnF5qb7N~>Tn(@#qC9W9it+I
z=tVUS#iDq$LbuiPNV{8FtF;9C&(0H*>t(VKOd79lPm0A<f$ayG{*N(wQhaV%ui+*}
zRNkkh5n;cy*}5Zpqa_EDzq;++&bww0yw#<>+u;0Gyp_A3&`q?bWWV(phUV;YW880G
z67UWcT4Z$9C?3^~+-Ry!jryY6;!J_tf0sbYvb(>b<NW*XEg{%NR7$>t%(NQ_1koyR
zE8r!8vfPTf(YALQyuyL!Xl;r}1IK%hz(~f}V@iajXXh>ge1TJ!v#$~7Uo{8|JhZWD
z0;-Q1qNntj+`M2uwSjrALI9Nmv+Zs!Au>n)a`+(U`k(<HG`Nm-Iv=E8AJpfA`eG1m
z=Vq#@+{rwvVo4-~472S1v>RPV!X3~I`Y6HDT@p$zubgw)i^R3Zv34Wk^OC#W9ASgD
zk_84mSlVsJ9Kiz@1rZ<H%8qYUGG+UTpxOle6veTBMRaaiW^hHin_bE4Yj6eWUCSBT
z!)iRrMhErS203;6twJ(3-q20a{;9gxOyg`m$i7amOg_l8)!9ANpK2;;7Um>W*6q}C
zn|vvAzg7t81WP&jxR!KA3zz4%xsNrSa-DANZK>eAa0e`4j2-)`EbnA`)H@Ac4w6pL
zZ0IwihhmpOv$ChoW5ISxq-9U*>oh}9^BzKYEy+MG9(S_T&Bw*p5dfi?HXXZ+y<Kgt
ze@)TFxNJrY^<Q#wt^PG9_b(Z_xd`Db;zTMc3^6X^>u%&h75IDVf}4~a5+iK^_XX1y
z!K4L7Q8ho~JtRZ!kY21udlG_GBwFb1-F4|9?C@x8Zu!9GjpKa28`%pYT3c;cR((Ux
z>h0mq=*Kp$xg&y~fV3atbQ6-2Hpm@8@85D{#}P{X8;<OF0RC(^1d}_DHq0sjvR>Fn
zU)TJKcan6JhF0lX-K=DM-Tpg>bQ^KaV;{p$Py?jm=(F$|;OWOAfYY9j&B@A;J#PJ}
zH_}dyRQP+UQm>bqD5ux?zmc*0>3>dG!h8Qy!cz2Z^TRUYLg6S1m4qzr_`2x;2)nUy
zEjDjlD_PTGRb^dISa1sgzR<XJE4Cm8w@<?jOH;cie2~CSM8I7iv0;nr$3hPX?B2Z(
zE@0MzyjaiZkoXmEC$XGkChD3e!CWs8U$;pB+f9iy4Mzqm>*8*ZS<&LI_uGX0(jFtj
zn)TvhuJ2o`WoVqJF6}yvT{8d2qlAm#N)mgnS>ujVmtp$U>IDxe7kRv5l+8A%s1YoI
zZ4bbbc#LnGvv@yWR1--?Jf`Ds#yDMA4pxrMO40zupcFJzPc*u76Khw1Wcs>T36_UY
ztWXfEKrA-(K_p;PF{kkKh1(TO>IpqcQe}=w2BUFbn>z9CX2nCsF2MBpl^ge2h!YaO
zf2T#Eg<!2Xx1$<K8a$?Sy}8x;nG5g1_~AR7y!taM%E@s%+Y{VATV!S(2;q|?w$6UE
z@#Y$HqZl;=0i*;O0@5JE=fw}Pp?|^yY-Tc^gV$Bh#v`$)Iz*gSx07^9s~ogccNkTo
z4q<1BV}sBgeB$fcs@V=14b9F!nxEY!8_zfvk)4p;Fq>3_N)H`p%W02{%MNzwC52Gb
zAxjC&d(vuASkTfa8RQXVkZ!CdU0P@1jgNQ}Sw0*?zuO0|*-glfew=!XZ`s9|+At-(
zjizR&WVX%GTBS7R8G=M_0q!!bORMSKC*Fj~yitp~x4L=qZFmmro|arcGc_X@Mz+jM
zNlb4b_$QA`&^skflF=yLlj03Vpsb-8rg-!Iv!;?7U2)3Hi;{mVLP<~>Dx@N`C`Kfs
zJfS%Icu0felzBtK(zG<6uL&>Cm)jq&ow_i)UHd6KM)BgZmD|IJja~gC()LD9jvdoB
zxh=KGy-J5(xfHLPb=$)jKf0yig>U^=llo`1CAe$jLBdm6f>)Dh<r&b>eP|}$ft+>r
z42k9n#qel$aF6Cl(4*P$&mIl`-8imk|5qR904zxogyF27?p{5uZQHhOGjyS~&bE8s
z`7Ura>+HL=ZFFeu-SB!gC$l2AYNp=?AHMiAvnr!iRe$N=JLJA5uE^bhORK?;c`tca
zgVo4<BU<*NRb`{~toLrJD`|a8T+(XvGK?1l{~+@nG1arSYFDFPZD<rf!fMMB{k=rC
z7Y1t@&UpNLA(RK&MGFw*2O2Y|4be~Kd9}ZM<_pVR?dSvGTl6o5eqA5Gk@fY}lHWe?
zfAIhJ@zmNP{Ow1TXPsGKK5VNMZ7&ALl}m^2nxtQ(YnfLM*DJCinMGzcqNO_4TljhX
z&lk9sk)Lhud(STiiqJCh>AqXMhyVBPvy3CXhi|>1RBhD?eIwPa_tI(hOD%=F-=HzA
z*bh>jR2Qh2wOKDO#*t$>C}Yw0s_RIX0VH+4FyNoJm<UcKC>C1unNr<^E><bk-Y8bK
zn9HTg3o{pPpkf{|m0~(%A(gx;)C%>b`Z=3|VYixO{78{%O5YkDR2nb_J7`kY&3PQ)
zrerN^_gtf)cU$zmYHb2tAhfF;fli={9J;*Fb737<8)imCSED-EiIFs0bH3@nNYl0d
z3rLgbRAkZj!V^ThoBBeFUTV=%dO?DAX^Xy(@@0B%`YF!W%k+dUqI}s8kmk9AndjO(
z&jHSkQ6kSiirdljVt0z`UW@9NK;P>D^&*nGK?zI*=MxkgIdnIni&bgP5fxiFOnG7E
zD#g_z(>&I#s9N?6qqyBoCAB23*i&(TC(!q*V+nMX66gqaB+%6yy1dYH;W+0DZFTKf
z*Q0#dyNWb>=k~K4uPDcw>^>9%(u0u>VbB~P);1n$d585oGHa9@13(!-Qn#|0DwbYU
zK3C6XD~2gyi(B6?YMm^iMsP%kxlI7_i0ByWE>y3nV5(%b0(Qfr*%Z{i)g<G&gVa!S
ztr$Yr3UYx775;rV*FQl)MfVW5=|E<iGHdFu4hl0yQa2RF)r*2$y~Z{h#KO+4p&*ac
zTEx0F<xMMaHG}iWylk!wOVj5`(eY>}MWRzfgbv}}Zo<mfwUAjl<=w(kj?#^DmF3Ei
zhjg1@gV1x+J&?}2GLVl#Z<^5wJfl--MpM|IMu(gXs6Qt1ct0%tA=@--S?oAw&3F&s
zegjvpqoo(M$<?dt#7+rYJmQ8?Yito+gCj!B9SD#|M59<Yr5gE^Gew-vGXl?p#FVu;
zx(+7L_o^{e1Kj}<7^<O1u3lA}r3{&!I~L6Sq*ko!Qigo4mh@(um~}a(YO5=fj$ue=
zHtW<Q9VBYRx;E<E26;jakN^Mxc-mdZhXKPd3<E)#z=QJsi)Mr{y_^c4YprA6<vhJs
zRS7zWWXck6_x8?!M1)zMrjTU|hM<btj~0Z9QtnxC8yX`iR>`E>o6KbB+?MI8vaOaZ
zNcPsha-J9(`QSr?53cX`1yBG00096100JWt4mrJHUk^O>02v4X00000#PAU=00000
z)d5n``dR(e3C##|00ICB00IC200000c-muNWME*=`NzY+z*+h$@}CFiSq=uq%?!xk
zEdY?x2NeJSc-n2!1GF4L5Czb;)zz~b+qP}nwr$(CZQHhO+qP|1YU1SoIp>br-Or3g
zZT!4EAAX>u2t(abf(Oed?vK>=FqYUn2<FLx8nh2pX^%`ab5M(uAv(p7VWuB?P))?9
zT~b}^7g9I4zr5FH02N6kQaMyr6<>9tYKTL5Wu6g)=P}657Gca+w06EAge@gQZ6J`1
ziTpMwh-<3+`du2uY*!G~Km@KUU#&;~X9GFsK(>pji-I;B+-DIR5yW>9jh~{QO{xDA
zqMvgBQ~0Y);RhJQd*vKul+&gH`suU1>4g-goiwJ!IKuJe9oLsP91>Bu9-?z@#G#8w
z%RS^iH<Cw`7)&w0-sSxA#(j4-Xx)bLnCl{{wp*gl81za1v6ipab`6o31EZu}jK=Jf
zIUGzb>+>89Llm-zO2cFkzeFCYCMS6s3i3)_TN!!5SrCvMt@~c?n;SUk#6)G&4(r&5
zWLy|s-ER)%iD07PI;Vr7S16(?(tIqlEXT|l45WS-O)2G!{(or3W3!I?#16z^dj)Hq
z=ICR-%0+KknZ|Jt%+>(&S@>*dL~zE#;nuqLHb}{J5rk{YBFc`S-toxi^&zEsjpH<4
z``m}~+NQs~fx@1TSmSw&F%(C3nM&AfYG9VBEZgZmCOJWnjC!B~)sn}ijqK6+G-Nju
z`O%d>AS1s)TJL}#=%rkwmuRPg>ia$QPQB6ZKq{nyN~(SIPz_am)m8OTt<(%R$8Iid
zV!7|;$zPf;H(P&mv-P*%x%ywqf4P}*bK@^JN1CC(xqJD8ywPXi-}(8UX6GN89l87s
z02UQi0000{08s!@08s!@0FVH@0YU-90&)WY0~rHF19k(c1JeWe1P}x{1W*LB1mguj
z1;z#v27U(i2PFr#2r39R2to*C2#yG_2_OmB3Lpxg3jqsL3!Mws3_=Wt45JL+4J8ds
z4V(?!4m=Kz4*CyT57ZC=5J?bv5X%u25l9h*5v&o!5$qBZ5-bu+64nz$6P*+X6o3@j
z6=oH(74a5C7J?R<7Y!F(7ql297?c>^8CDsv8UGqE8h{$e8w?vs8<!id8~YqZ9EBX|
z9a<g69xNVD9`qkEALk%oAZ#FzAy*-HA;BUEB3~lVBJd+ZBXJ{@BgZ5ABvK?^BzPo}
zB&;PHC50uyCORgSCkrR(C|)SKDK9CRDYYs|D+wz-D|0KoE5|F*EA}iJEIKSkEK)3o
zEUqlREZQvhEeb6jEuk&BE-NmNFE}sJFeorpFsd;rF>f)}GCneFGWIiHGjlVCGnq53
zGru#|GwL(yGx9WWG>0^qG_W+nG}ScdH1stKH6k@RHB2>QHF`CXHKaARHO)2OHTE_L
zHXAlFHc2*MHgh(LHlQ}LHpn*FHtRP2Hwrf(H!?R!H(EDwH-|T#H?cRuH`q7oH~=^i
zI3qYZI7~QVICMCMIG6wc009610PX;g02TmL00jU60000001f~E0ssO800sa7c-nQ3
zGnxZX6h_b3Q%^ar#zr${tS+{#Hmk{MvY4zOe-Y!mIuBRCDiIc#TU-M?(B(OH@N{{e
zO)6bp;Fw027l(LB-0bo)hqSu9je|DtWXVydK%6KsO6+pQ1(%XtzR60WqzJRiFByWI
ziC#%bcCq!dis(d`qO3qgKExR|vIJx$*)DIS@Dn7dN+nTB*}<8Ac1M1>P+f}REEzPT
zs$X)=J<t7#??-B#&giFUB{`lrmsF8(rq`TIuY`5VQXtBCHzQ02?Ik<Mpjz*IV!|$e
ziss;=18A~7f&c&jc-muNW?=aL1&Fg4QW&rR0AIfY!~g&Qc-lS9L)rpR6b9gXvu*vh
zZ5v^nr%f^@X$4^;8OvxX?I3(<@;=9>Cfci!J<^~O#vbX?{SA{!LU?;!#_PrIvI-G%
zQDc=;?%Op)?4<wi(u|0+X40#~h`5i(+Xf{f-pS6YPKt<svNPKixPEVsCmX`WJ<;9q
zwqA}%e73QqpVTB@w+EBIq#>1X_iAMMBNNcQH)={6YdDlN-pGTnk|r8Y#&OLDa^T1~
zZrDKx6hRdX!IBXhzz1?bx-?!3Eg?nJ2TM!iVIL@h9vFfr%pI*@W6TKD&ro;(?6<?g

diff --git a/static/fonts/roboto-v18-latin-900italic.woff2 b/static/fonts/roboto-v18-latin-900italic.woff2
deleted file mode 100644
index b7006fb0fe618a661d738b24299448f13b155c58..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17156
zcmV)0K+eB+Pew8T0RR9107C=-5&!@I0Fp2O079Vv0RR9100000000000000000000
z0000QWE+`!9D_;*U;u_p2wDk)JP`~Ef#Z0A$}<atUH}q-cmXy7Bm;*w1Rw>2EC(PA
zf;bygf)(u8i@?SKz&O7F3%D_I!^S~i^LXQtfnehRpti4^{r~BJ8$<LBGwV5l#8y$;
zjVjo&bW{~~LgBeqk+PjUIr+uPKS4vwvYbu$)x=HM37;E_wSS*8w%%6l0*5JwA(+sb
z%we41m)$QcdZa`qIGQE*9l|XygS5$u453n^Gr*l3(TH=1pWENPdy8ajR16UiTB;;!
z8#yvYmLP&u34&yZ6{r{uikOY!|AdW+6+BdH5B8>~XEy}s7(vDYmIoC@G8M<9nD2i3
z;`Gy&o-8?$lRxL(bxkx`2^InQw3O7ZU%GT1nd$E*9Z0c6?>}nWr8b2y$eO0~J9m)|
zV;Bynm7|el6-$<DUvDel3;L8w_yHIcd;kW)L+}AhlHdUSRK&)%&=>&691J-a^WWjz
zzkN1&!hAvv1C&Sy1L6-+c6x5CfF<xHmo|g8kNofFdT+9C1H8%ZenJwqK=Okvknoi?
z_S`dXQllzdg)je~PAl7vW(*4$UMzvC1Fo+7qd)d2QDpm04zcXt*sWAF3kkm~x`pbl
zLK+BEyJw}%(g+qLc{K(c)7l5z&m3gw2jK_dPvy%4{aUO0!bb4vC+SMN8bv=|8LFtZ
zK&dxW^DG)VL#Ys2<NubXbY|yPcPClz-PoPgD!^o?!U{-e0Gj=~vUX>7qrH`jR&vob
z7rE->*5s;`Qjt+`X)125vm82_7ZlV83ZbE}bd-01(!9WQtXd8Z47EHG@c&aazkL@J
zuwF_y^o(=SxhV&d1LfS6+y__#10*E_)F$paap@F(%7by>4A<u@!5_5zF;yXzDRf(Q
zD%!7Os0KX!U#WBT)7Qzfvsg1MXEYdd1lPJo*Ri60_ZXY4{HRhln9#=sxL;(;UQ9XN
z28U>&q0vGY0|>*EeSc3FDmAtsXAz(R1)wrzpb8bBYSo}Rb)fYcLBlq~9Q76iVE~{5
zfCT~of(k$YP#Lg=?{|Q^ACNn@AUhSvU6>u00^}}>&P@k$Z~%Z0p)Hr5pPdfKfO{uS
zn8Z-?qRuwEk8*Cy`gEUeE1G5hzrRaj|6j8UESAVAmWwq)FYF>Fa+4kpL_@m7*7zQO
z)4i`R>^j{xgL+s7^=$5Fpy*4Y-L2c-_1{fNtSy5Q3X>|LpdwTMEsltWjzf)x6*Otl
zXTXRt6Q;~rvSP#5Dm;Ady!a6E6(C56P~jrAYSW?9QO6v2!bzu`cE-2~XPtA&WmlNu
ztFF0i+G9`5m@{v|Gta%S=q<>+NjOUqtf;dg<u)l0Co%)9y~D0Ar<NVP449MP+*7W-
z;im8i`0}qG&~w4P7Sc=MYOJw0+F4iVLGoC3jyvI`Q%)!E^weGV-1or4<fGo0_Sh3M
z<}G;UxfjWoz4pp$Z<33>^mYOYZ6bZ_RhS@5Wm5#^{l~HeRxPq=#%%;#a6P>B-29rG
z$nYiwbVg{mq?M|ubY(fJZnwII;TR;?6Bp2&Xq*8tbZ<JDEw6osNUwJ+*mXDDbSqN=
z5euzEGndV^m)w9yz`sBn8rQK_EN!GiXYx@mO?&J~G*gg#ox0Gtw#W^51pGC6WZGj-
z%p8y7lMuvEC~@*J65r<bei`#NEU;&udyz@NsuEkfE<J?+En2jggPU$;a=6yT4Ub^V
zw@m)LHZU2XXd2J(h)jFziJ9blnHD_r+>1_VeR)K+eS&%~wErNCp0n?>#2dr#dna|g
z{y54<CYY$ru{*%*2E&0bj|KEl&{|-2Zd!X4buH0OrH52Ep{{Y=-C<IUZ%Hj~{zmv1
zu;T{@j=y#k$XNJ3x;5W|hw3$=H`6h@x|g<l-7CG?EoGC@%|7=ZeO~W<wIy5U)TkZt
zqbEK{ANhE&K0s`5bJZ-KuTj%{yN&if{h*!$zC@4zvGnBM+dlS-lg8|m{iq&)sr2}t
z8pA}(ClPltWN@fsRzA3@=gki9Stq{O9$L{bVA7f9dpPgeqmr9wu_5BvO*PjCVlwF!
z@nn4?QJw_a*1~8QB=4xUp!NbDtj3z`+;tr!wyEqxvt1tAt}H-k;<<{y#Ry?#LlrM<
z#T(qY**9|)>-^;Bsh`p!hs&3yc#^#S9Cji-&zG+hj3qqWvoFeRul2;cEB@S8UaWqs
zaS5VxA5v8>GukUuuLK%tm7&x5a4Xx=y0+`ss5Vc6ABWjy^Gv<%UjMPYoTRd>JDvoY
zKGCHb>t!zP@-pdm3mvMS%ole<vqGYkOde+)EoeRLOOO!-fJPw}#jp<rQKJc`!x)7*
zTWro;$>J%hz&%ir4?ju*=rSRJs=`EAu0Bvht1c__l-6_941IH6@c#icITXgET_R1S
zi9D8PL^0}AmIf8Kf<l^<K#x-CQyK#*#fU=2RDwBWu%J|yRE`yuVNF?VD4i`8<4lQM
zD2XeV49ka%@kv5BUr@x4lS1_2U<w0e3#Swjl&M~jejK{e+9BkBB)ZbNK;`vNc}D}G
zV@|`I*)?(F&LOzu8tA%PsBWu3x;q{sdK4&W+6=O}Ox(N|5PRhmB2L6z3F6>V9QsHI
zqH;0XL@|0)ni0jAP>dO8GUh`i6e3ADM2ye~3%HuZ0|`h#mIxxai}-^=fs`(o6BxTU
zG9e2_kHy6_5XCfRLL0S^;*f|F2_jA;TnR@Yq(F!QV~=2jLTH$jm;resh@sm{ZxAeU
zujipPm@C(kx+=T^q`gmZ=Hl-w^qZ>=5ZZULKHSTl9$_CqkMZ)TI!-7Md?%8x#u1Dm
z5ytj}c-|EmX+Zsg>}V0txhyFm8kj0#J*(RltJAW9H^~$L5X`+3fS@+f))<o@5UvxG
zp)i?xoV37XVV4W6sre%iJ`ck%9?iiDWHa@)NqDzM`5;U%6!qnH97F>Fv&X~(zV(U0
z^y{Zv>_uB~T#K<rwar%P=iBYD(=NO1u~(CO?tRwEk!#d`2OKo!5DX+i5dbKk=#>Zn
z;n86P!1eP%^rrY<rj<pa6wuJ%=+Ul6dbt7!EL$l9{sQrHPXI3X6aWCe%NV`1aG}b)
zQz5KU9#O9iFM_wj0AP*_Cj$V6VnhBv?HN;Uc<#M_@LThZshEx@8>Gmij4GNKLb%s)
zpPAYJ|8T<X91eW#xC?H2;R9k}IzbM_?B$bNeXRvjbr!WIfPdeAa{ak~A!Yf+KZmx8
z6<RA_t{B0zzAru90H(BpF+?1GvA5rQw9HW#`@FwjuEKRU+;q!rm8#rv*FE<=@KCjy
zzVMxE)p_Za*WOrE?=3n20Q~WutpQ?SKvP@*6pOxlXzj3JyNTjGj@avr4CBr_7EdX2
z!3}5Pn~u8WzKb4ssN5qnu6yb~mHzk4o%p$GFTD3C{-DN3U(NaEyIMc|@iP9ae&qh~
zHn^i;{opYiD`*INMX(|4BSBNxCxYg2S7sH##&Os9wN6p%I_q_8v{CnFoAvCxOYeUB
z^<Q`0KqF#40|yMgwKV)%f+1QBH`=H?MK!)7?s#ooW18^4Apl4$qDVw9R$0VYJQTaD
zpye(kvk_~Il9*&jwyngcajXc%o^b>KfKm0ZBp}6GLkMRU!G9l=Qb<8pmt8^~z`qD#
zRF{|zp_c0s=^!9d3-+~U7;#6u`w=(5^UXbRwOk1nco+ruL2#fi)trawXlI3E;|H^0
zm-sCRZjXX70<Tw-S4H>s*Cjz`BR^8#)jegY6lf=$-#K`W?<&Wo;BuxBG31}Jj(&g1
zd5TCjQA?X-XZ^tHcDf$esNP7{982wl!bsJoLm7YF2!ePByCjjCchS<_TD^4Q1<h*a
zY%2_Tq)Up<#({ddR5+VR)uFa$M8i5eN7o58;@=qg>f9~{cM%zUL$PD9h<@L!K-B{!
z_xorzR)zqR3?149=0@yPL!FouM6{%fRlfkIieRX!2O#}BoP6>IIUxHd^=m=j62Ys)
zldljUaQVnH!E!F;m^jlj3YP#T8_R=CcQ#`RZ^MTy*A;eqyzGS_zho@i)~baHl*3!X
zIXMup&=9iC$z~QC;Zqhn*$W5PpGKiF`#(>($jN-p+SqUndzn?aS2&iL9u^Y5^ryN@
ze3vSq`{YMvJeZ!-&bwQJv6Zn~re62?Sl<RKzj^Hprob&)q^C03h1;QYX}t9f*DCi#
zyoiU_-O6u1k51;)Yy3JoSo9ctkKK>?d?+gOqCbSYV>@Y<v5z{;dXibgw|*V!$EC<F
zDSF=rI*+l-u9;Q$byUr4P{p&^nBAOt-{TMMCC0In=sM}w@jRVp|MK^rZtsJKXZgMJ
zkhzXhP9k$^3ooshJdk2>kZkN#X6iJ<An^st3k(`knyvaUOR`sPi-Yyh@L^Lfu;(!&
z7y)3208Wgzg_7bMWVTGP{)z|pJ_N7yI(m97qw7Bx(gR!mk!3vm_&9Dn7m}p=?n<CW
zrstQQ#Suszjz(ePS<ChFT-tbN5IygHeEg$$@S{r7!~<}I;6lNt|9kT$wjuQCFrE_H
z{NR`YYG9%R)s#~;sH>2K;)-jog%-6CJ)?l5+a+Db=uDK1f~2etG_+59zA`*yP)BX&
zC;H?LD3ckqhs&I%^x~6h1y|9NT|!{Wek~|5n5R}(5jN$c0(wO05*Iqv-XBItfntj5
z64IF@lRA#8s-!#@IhgjijwT0kO$k)mBoLp$3r3$>+;&dZ8>N&Nav7(RuF`a{(f47b
zKOJPTV3h-Aq<;J)W+wZC&Kr|%Q+-CTsV39G|A#Ci_QU5+>Iz;?R9BOtimpcMc{dxn
zqcWZPj)gEtKU%F!D#P4XT>I*{FlR_4?M^fpNZtR1ic}dRm<iKZ8sqBHxl6qkzU`om
z<t>BTA0GXntX~@^jw?>0!)HW2pyX`@9?sC5RI*T$pin*v3UqH>aw)ak4mM)*UGl1x
zo$?lyv@mL736yC!>5-<!R8nPCq44YFb40|CK*`{t;OnQoleRKl=r~$B4>ByD<1x2O
z6Oo98$e9ya-r}4L{2ku}^+#h&#af4_x?Mq?=5(&(jCCVbbB=ejky2sK8!I@yY+NHo
z5jT;m>AYopzUY8xPfT5UrGxN!NG5`W#`n`Dt6XWex?HdliYGqLq7|+(VPb%HWsxpc
zv$-~Wci3;kWQzj>RUxQGh~P1v@v%XlqYRcQ64~C+B=N(v>P(_5=m}0y=ZsJ))~0#A
z#W!aJ&5BI%xZ6zU)mfwkeGZ6a0ffrw@NM=G17f83Y%sy*D_A8~Z<co&qA{ayS$X}s
zJBCq=ncY*PX7+N!GKNNA>jND{a->Q`WmUUBI(3NGD5wm@npQ_{IEWT}O`w<+CwBk_
zd&hl3i}B=YVWu5SBzr?W2d<;QuR6)E@c^)xRf1<sfWn6h;@WP%v&0b5v&RDAwaH}^
z0$^F}0bY-oWC7&3l`(R2=o(J;{AWiA*mIVoA|CJddj~}T1@xG&C7Wkv&qMfwwM@Fw
z_Ff|pDXc284-&0u4m$y!57SnEy-)eGWH|j5o(38C3O-qvlUaM(J2FZ~O}66B#0jS;
zPE82th*R$5S%<xE4%Z$jk;l{?pdU9WhFxZ|#l}@n354C9h7XTr_)CjLMq;^8syrEc
zPe1#HA>ll(OXlKRt%#oX1rIVbJe`FZjw>hIgGI9eY0;iYDLz{leff--oG>W#0jgqY
zqAIxA&{g=V0o7f1gj}WOP~(pImBAXL0Q`^8(o%lJ6CSyv7N2f_qZ4FlY~{uL?u6d)
zy7&IEg*k#UB*JWoMVM)=5iWVEp5e>Qnt3p=sLpEX8JP|uqBYhE^J6UtMd7v~tTNbh
zh%&y81R-T}v}@V`bdVcn7MvAr2^<7ewcSC19D_-rNMyugK}NQMNSZZ%871nltD?h$
z$`Kmc#g;Dl_DcA7E>Jp~PY3!%;m7vn(>yfaBh<#hW+(JEMDMRLQEblUXj_SW5!gHq
zK8Z<P4kqqDUd)FPs=$6iUVl;M5JHv4$*rMAp%G*I$9zLfm#`Y|_#QU7S6zEjF*@7)
zo`A(?a%JptxHGcLhk^ZTbmH(=T3^C4sn;y#dmP5X?+GlI0|DNtV(Tnn)ANf*5Az>`
zFg^y5&=NoC$cwkk&HNCxnIfHT4i*qul#yt0ilA4T#&y{NV&diaa}cfBvq=`ycpnjd
z@L5j)Js;9z++;Ce^R|hhE=_I??fcJk6vyR3Y=Ts+HloQTf=e_vh1?XXXs)Uic(wI%
zS8AQsv6jkK4eG6VKskp;+LwBzA26v{y7sp<C3VHX?00){NXb7m7O;NAggS&t2u_8P
z4qIZLthTf<`Ut>itZ;Q=chtNIug~Q$eD0v*NUkBpwLi*e<FcXfUwQ$>hHGaovG*26
zw|<fXaoFg8B%3#6ZSGg!LyK0k9Ikj44>(u>_L$vOu)5+jsJT&qRbkS6ba4M5%FGoM
zJveQ$^ue?{&}==bhohZ|;^r4od0&;%Xa#1MncAn8m2xfs_jQ?Nnl)vpy)o;L+o;U+
z+(s7s5+(@s1z$?Os*DO%BMEoKp)TPDLV~HQX+So62YNBw`f%3j$nMAD1O}`B<UTFu
znuT8ZSJ$3N@(N?aRlw?X%)#(k#^iCY7SU`FPMd9{HK<=p1FBtav9yi{-3A{G=h`eg
z6EHxAvM{)sCGn=DzyTh#Hb;)6K8eafLE$p;a$u^RIhTO*0cyJS<P0@K2!7~HB)dZA
zF$^)D(UdD{XLuw=Py)(F!szNrl*wrd^zej{!U%E>jpXn%g~6?-k1T8Y?(!-E1BM(^
zY)QPMwSWfv#{NQWP<;Ev6HcuCaXmrKAzdM)?(ucsvMS#(__WXR8y)fUZ8qD$@+R|Y
ze}mMj#lMNx?n{<`8Qgjk6yNpXkzRiK&_)|=Fkpi5yD?}=!w`#gIC8MzrHmTe26N;2
zYCLADQ*hISD)2YAViFKWCsAA&Adtk%o%7z)^5=&U46lXZ$h-b3jcha@v3!d%bW4i&
z^oR?G&XAuJ>nTVGvz9iAPwYDuWHxKnv!Ww&{jaXm-B#OuX~=(1`S8ae(p~Q15A}l=
z6>3M9^qBzqp+BDO?=|tC9ewY%U{d?Q`8u+bSy-=ogHK|zWdk9ay7%Ywl(@#7e$7YS
ziaS1|<2-<JtYgL<1H(y9#g-wR9_#%QQ!E<^QPe$)52rZlm-;lWj7d-ZAzX0<c&2Bb
zw?mj;wu<EWYB)GTs>U6tjVHD@!Ady1nNUIC(`rv`L+hOOYE3w;>ZE#5vV+ist7BC&
zp*s6pL8>CSGa62h)S+@XvWZYb@E`?;)wj9o6f0}mm8Bqd4cXqIWMbCUB}?*4cYx_a
zT$g{NL@Tz>tcH|K%Fa7>J}w7~#s-4@`tVTd*=H@`R@=UMt`;j|vy~5?+W9kVC4VgD
z1S-O&5=3Lf9LD^i9D6KXXF_9&=TGq>JKKekjNHifhEYx$iFT9#-o9}ap=X-R7SFJT
ztHHK!IC}Tp40nt-J^I7#!=ss9r(0dOtg+tmju%KcMwZw@l8<ABm@B_OzL&`zvA(G3
zwNC$0?j}T2dX6`{ZQ0{@rhz2KgppJ~mdyM)t)P$t>Q!p-xBSB`)+$}}3Esinn_8?s
zD?PN9tIM$ztmN{Ys*N10-B)tm?F)_MjjA_$hHf&7pz~L}Brm(6Lsh=?fv1D>*lL|n
zkRlTB6GEU{Nt{9t_qb41zoIYtF1lYiuQ`R-(R9&$REzP*e6>HihPqC#@KfmiH_|;=
zY8ltS^i6fFaHA2jGkzq8u%E1DVVpn_uE3Ax6UWG!_HL7W+Gagrq%O7MzMbWr$Eq&~
z|GT(s-NtC6=A>foFu9bT-~vgt?Q=g%8o^!k>M8RSIivK>+T70dvyaqZsN6_g3kZfe
zvD6TfqjR7$u!ADOQywI&UVrFiOci*H|9V0_LcjKJ{#rkB2cAr<>YXAaw`1ktZfe#U
zQ0N9+d_s9p2utE<LRye}Y%sPD6j&{@XwpGVCdNDyV-@ikor66jUtITK?l%~C&Uej~
zOY^px1l^!z-bVRw{5nPazW9uZ)MHeN-OkFH1O;x;gBR`qeXx{LW(6hPE89QKk(aj0
zWJ;Ezv;%^Df-P%vM^G*tE_I)yR#B@PpXE4JdUj%M@IkML&KhK{Rd}+PoPGHL^!bp1
zywln1je}gH9DxWHU8SufI`jPEcusG17TzZ6jP35#M8Aw&VvQJgUgr5)`RpRb(=Y11
z_zy*cJr<7&v*?Eyi_CSc*_7kN;+iuH@pae*v@j#rs!#TC5II73n2}BmAp5vPIYJ&x
zO9{O|;#mZk+rgk{iZ_X85oR$PEGn8a%8Dt=2RqmK%+e}o8~VS0uB*q6;4|OEF5s?2
z7e<O+>iyl}l5$Kv52DyaB;-YL8gXIBD$)PJF#j&O7V(?{6LUj89Whj2c`HemVzEEb
z%vQ=?c)Lm$RjxVySU_W4()*)^%U6~qJ|#t8HM`5Sw+)3tdq-2J42+Kj24fpN1I4`D
zAoBue;Vvr0#v{Y`kaB3-_c!N;#Ro`Mt~G`3DI$0F`iJVC9OJ=H42t9fNl%#TnwDSF
zhSIT;5mZIo(HHXLOege!^(+0%>jO=QLGD;D(VL^yiaH3NUNfJe0ZgUgxnxZ$;Rs<<
z;?lk19?%O9Iw<TY^?!Q}>i2J1iC-Yh^^L0stvhfX!!chet<TGDtvL(6{yiz~gIpE6
zy)jXwtZV*NqC^(zKT=?_k#(z7tiZrz)PZ$xG&V;`Z`Bt+OziyVbs!GXYqVp`XN!@3
ziV=OpG{$X%c}i8Xb=Xx9RT4q-l;7G*y8C<xJjLa<NRLc_LtvwO^apy^-nR-RTd;YY
zAW!>59u8V}QI6FxjJ-t?lC&j104qgVDTqO~+$}fZi+?#zT!Wg5IXT|bU5Z`cl<bt{
zF2fGa-c-4B*K8cePCzs^Oj&9bfzi8S9BCGDFl$Q|a<e&*ByAm1pvSo3u&G;m%(W(l
zGNHE1oYZ0+14`)N?G$F=spcSPKIju^k$4(A41XO=v6s12s4Fa8FNH55!XM^)S3t~-
zO$o#5@Pl*Q+wuoVBIbunSOE;R)|q>&`N1)A$S*N+DJfFh6$y;B|17fi7iI*A-5d2+
zG;$sdppLvynl>fgLbuWL_k>45z!~MGW9^vQj2T~c|5m%~U3M!qy>WNJ#L3VWi6zAv
z_iBcZ9%I`@Ax-TqqvV61lqx=5Jl|}PO>FB%<@s;(R6oVgN9GRO%^y4{kUZB(MV%M7
zo2TT#PRdeefO`mM4i{Gu|3t~RaB3A#4>{KL5pTnumREhD_L0)H<g&q`b6>NW=gw1p
z9HBH4kG)fT$!@|uDSwU;3kds;d&Ii!dF%gHU6Z7OrJTXKPiq-@K+oDXE_Mx;VRf4r
zc}4Cn^Y4I{aPEY{jWM0|A!o<ucEO*yqb*>rqT(BMkd(VpYgJj~S=WbGQ7iUedG$|f
zA0dDm>~oY<9#t5OH{*xiD!pQ_$9*Wjj}fbhhyPc3BGu!T0Z#|RDSt*G_@<vTE>Qai
zuQyqpa~4nIAn^-OxW>z<o@&QQFCe@CB14sW$;>935yzk&7L{1geOfGO2tGi>C3w{j
z^L396g#NI?m*&D2d6o!t-)&%iBCXqa3QHJ*tKlVQSBH(&gvSAZkP)4o8<6c8FN_`D
zPQN=GNM9Hp)@Kgr`&W%pRSz%w>Mj2d4PdXz)8C1AQB{uwQ8`C_tZ|;uM}R#h>JW;*
z7&ggG@(bKr9l~gynDc11IbW#CL5(3QgwYsu(1J5!5remndO*iIiTOI!D6MnXSI%}2
z{!_S7IQZJ)b+`B%&bfSFO=Ov|x=h3IP{7ZyaCx>-s|c(d6B~ef49{g3jB_3gL4Bq`
z<*bX=ma%Lx7lj=4&nG2hNGF$*SC8^IQ@R2UZR^gBek#aw`u=6nShl%$X@W3xe`)jm
zHyV$ArfdI9m(psR`nF)khbsQ}t<np+Q3E`7giwy}lRx=24W2YcApuwllv%?AcxuJa
zTtEr77CRahx|^Em{o4caMA)xKu}Bcc-Qx#5VO9{u-L10L{*$~C@tf`?d=UAUt;p13
z9R|E)rPTB)H~{xQ#m|U^@jwxAIGY%UoI*VIDG3wd5UzQj5fuO8oeT65QtgdEGq3c-
zbbJx^0KL+ae6Jxs()#;DT^l-yreC7-M!@VU!S)bjwa9UV?H((Xl>YsAauKgXAsLBk
zeAZT=#>idM*ou1L=p5m+QYaskh;7ZlqA)=uZ-5&bgN4G(O(Hs{8O&AZe4sUJ%TcXO
zpAqWe`P$GAV(skOO6V7w6o_p=Sy^?5tplcG${?DLbcXSvYAL)hp)E^PXhkvd?$UVG
z3Fr|ryEEg~q)b4=Oi7vVkGZ@EhwIG1Ypro@-UQ>cl-QdZNO!8M;3g!@To$DdVhNVw
zW9L7g2r2NAkE^hEA|S0En?{z4nHg!-Fah+(2Tu_4tlTBS?Biy`kU-#fS;ILTM#8eK
zteS{wg{8?g4gGKv>U$<RnK8)A99gMIjETpBppyf6gu;t-)8KpZX_J<G9Ts#;j&}Em
z4}>m|mlWk8NDNq|f?Lw=hDnbv-9G{OFqkFxFQwiL<$7rgJ~AxGONkT+U_uaTjF0w$
z?g>GHmmBgE4Apt8!;nX*FfP%u9=>u#DlN&%Gsu^o&rveAk}NChI)<X*x<CoH4O@?)
zcC2}tGnKiWpS{CU6ov)zgUUbhv$k0!g!}V@DnIgQla^}~$E>8v%DN9<*rnwm=TcVD
zorVg;h@=4M>RJ7}{}<X%eY0mXywec#i_tA9|J`EcbJPTH)yMu|bjeUGt*FjgjHm5r
zf}muFLSV2<vJ(u!a(kQ|Fa?PnHROw>g;*mBOo{%<V>wUjgCah4T`TH`qcemvimog1
z&B<5-!70Rjw^Bed+>2@GlOr=%sBpGakS~^$V8h6_$}o=$3g>Bl?61_EI@AUC&k`nN
zdE&$%v-DfB$R)&mucA*p8pG6d(hLyA6}BReq=Ma6|56!(-o~VnX3c9sekOGLY_5y=
z9^K(BcoyDEJ$nY8hKr}*kSjnXs}21vGg;n)iuK&i0Iw1(7>h3GejZwl<${ZmnVVtq
zN(h@8p^d+3rrLQ|J^G#%ulD$Uh#B#*vm;0^3FX3J7wp`}=m?al)_7H|M~`k=y=KEs
zGysPli672A!OJ_Nqe1iu#uAX5f7LgERe!!dkK34=MO@s{i+a~mXl|W#>S2+Cys@RE
z%{qm3(rD7sgi;|<@hnPZggvDZo2htS-Yv`KwoPJ%#mRpg2lJ1m!&5XiKXGX}T3%`q
zC@J$n-6mB1g<dfAuA!gPHo_yQgNm13GEX`Rbx@?rq|0!^kV(%+@g0g!NW|1^s?_`l
zQTep|WtrnQ<_{X{A9Pd*sNxhUJy$t>HcDV(JwOUkQDAh(nV8*TjIo}d9^?2O`n&g2
z=c3(>tq1o``Mou@M`Y}_XV9c=Nqmdq6A~dUN9|=i#eHkx9v*APM_f{2_?4cNM97D^
zb|tmXKA5{jQU%X2+PSlDy08i?HM4%1VVcrz`)%novg&-~|3vtA7+%6_#wzAJ7w9cT
zEl0t??c00g4PH$eyxzWSGgsn{y26V;3YX>e{+raFU%zbQV|<$tFx!iWy9r!vYCXO^
z*w28L&P?+0@I`tIF@3r}bd!^amf1e2i+9L9kh#iya|xYCGqdQt1Hk-EUCputp;UL7
zhuXS$nl&rwNa;~@0hJeYRjlprE;2vL8I--haWJQ^tt@53XwE1)4y&?uwyqu6UT=Mx
zJtT9vvM-~fz1*NBTP)q_d}nqd%0@Ty8gGl`Gt=zPcIPIbY;<dN;~o3u^Sc=+dHaR)
zQ1ujvB_eZAl68sxx<n0?lWO834V6=$_g?bOQe}`w<Q2&y^3;lpN)=y}WL(RB6Gcgt
ze)`dw)UC{0=VIFgm#{?$A7T?O0P_3=(WhneCBnVp``r~&MU)<*D5b_%FD8?+g|uel
z0TkH*Td}*M^i#0X1$y}SdO<h1hOfeOl@Qs7yD5{hR)nQ3pJRGRrgaz|uyC<pxJV|9
zm=!UceWd)nCu{-)k}`gt`)vaRUrf##Yy#aSe*9k`RVU1!(tc=r7ivYDr|BcqH1?6}
z_j_P78r%X~Iw5^@0ENM#4GQ1Ma+n)0#17j|R5~^x&A$GxaU2dHmEkKZWcEo8#4G%_
zwG$miy!$5#Vl+6D|Hp=2Ig1V>`N`%GiE)XOQyx8u6XnzBD3Y6M3hhofg}DX^GZTx}
zz?ht)MLUw<lo<izdtmuUE`B$in6|gL0<M8g?UW+p5KCH<XSs8zt$eMwFBWH85qBls
z>{i~SE=p3|siU5GYoeWKJT2KDr#QR46Ad8E?US0)+Y;Y9#w-1|<v%;aNNdMAt@SUB
zz1zsX!hf+5-dlrbt62s(t*|q}V(9cW^0rtj@Z(Uae(9Qy_Gn{G3JAoK?6&T%55yWk
zztug$X8GMCs?6n^VBYRMxiAqn4Z$>+vu$?{Oobc!yV8A39rTQR-B*i@opp=@yli!I
zuIp<t^-M#RO+)pxn7S)%l?eoTfF>!xWnYg-en9(Oegwll<2les9+-iI!u^BgupahQ
zU>T^aCG~oP6%3GCzFMearyuX0sp^2*=KwKz``QZFfNjddqOsh5`@9upFk`B`4J(D4
zYhm_%K;#8NJ!k!Rx?2<;l_L8U+}T=iRa7P|6AF=ANfwrkJi{v&-DqQ$EBs>x8SXC2
zefRQN&eMU4AtZy_*z-T)m)Q3-iT~LHvGb$a?OS{PH?!<_8rxyU*59_^YWX-$I}t=<
zxK??QTD6+BWqYPWSfi>+qxm_d_Vl|^tfA`{I#4SbzD#K&*o*DFIn{=m(6%XR=PpcD
z)!o4@Q-GyqGDXx_z^ur`+#8g>^A0Q)YimBS(rr7>Hqf;$kGhuVDZt7wW!innoMJ6J
zKoju)>-7EPEk`>_;)2{IDymKXw(8AGkPrr4XlktcWr<0;2@<v4lCQe0xAq_XsY{a7
zv^uU!+NT?;?eNj(6|}xn%B%}mxoB{8=L;<_&28s`SH3&7fN6TIFprk#goSpg4Nt)M
z*Y&T|O`UbU*LNzQHdwIAH+cqZyIcQC&4^^Lbnlv{?oKB9_HX`^7p#Z-pEwWMoMcyG
zQGbrycEg+SBd?Smge?CusslT~HweFqU8Xh-+-7ENxd{v;`C{isKM<Un_J9=Fn9dAm
z1O~(gqF@o9HYQMbqW$$b;Q)GYgF2+G=n*ua;;~jOGObfLMVx$0^1&0>50msg{^=kc
zIlvI!jw1DloCe)ERoo^0rmSt8scZHIg5skP=bI9XczVg^+DB*?ym64&L)@&m=XV2W
zwv-_X{jmu@(;-)JJfW!jZE!sn+^eVE7PbeKp~EF!kD0Y{qj98=(3nun1FlzhR<OP4
zWPZnHCHI8@#@nfmW`F=}HUCt}g0Zlmjo^4yYpb&1n?-9$+2AgojpY6fvWLc&fiJCC
z6?SV~(i2)ad!8kE8|A<h8)BhX?qr5lWuv=`MUzJH(zH=$;o$^}%H?gDkyzP?OgB5;
z#6C{|(u0lnkoZIgXAhx6i_tf&rLUzd=$aVQ^Zg8FjXb?Xp^eYt**v^OA<(h>OAxq1
znKROde%5uvK<FzQv*9FYzn@!9o|GZ^D}J{%dWk%Pq+?r8fsRM{rKBk>p1oLzgYg~0
z><P?7x3F99N?RB#Xprv{OAEBWt)TSxx9KFl0r@9If9Fe@4e^r{5>snn9~_+~oKti)
z+>(LC5gda&_A3b!;3%$cKn{-&{^@Yk0>yL#@ah~Z0BpwobrVZsMBh|)*BPc(%K<ld
zon76VzFl;2DeI5|-l&2QOQX_MPed|(YvIX#vi%0;>v*K7)QnzNuHx@i#xKwvJSVTe
z_!PQ;?u*OZksA#HQ0SB7kG!#Fb>2&Jrp)fy*4@T)3$~PBK@ZTPI{P`@F&Kt8#yP?e
zEU%f}Nlb@fj)_J~LMOZ3d{`#~vuO_Eo?xQH3wC~Qq<-LK)%&Xmh!n~?X2m>Df`L_Q
z!vl)4g~8>k!vYJ_a(n~pv~=9;!U7t!^jsViZR7qB*HrYzF8}4U`~u4XlMXyVA?8*O
z#lZ0n!R1mrOd-%s?yF{-P}|w1mg%9e^@Ge1E4}cvB75XTo6tJSyqNAFzv+W?ANQVO
zplO>hs$Z&7`PgrTgDQ7qLwG$t;RCYOYEOT2FQ~unAL;Xn-zk%(`R0$xMfExD-X%h2
zV@*aPEG|tY5>gwh(qTL-Es2+Q{?xPXIJjDg?5k#25}cMR<plexr-lRF#jNo3t^m`!
z@!bIwj%nF%ZKYp7kvEJ|VzMgbbKxNNwL0saM8{63FgPe#Fsv}p0eC>fBET3}t?0rK
zD0(5B5JoWp0|R=J1^U%CLWe+IQXqTPFPkG=@v0H5(Ym8F`wSL?hi1;S9)nyMuudrH
zpY{-F#=F+ar;S+(s;ngGfh67VJP(#L)8(FwubO=K1K0p)F3T>6U!UHK#jsiGP>|7U
zD#%Py*#Ca=5VC{O61uapAj0{?qpR+iFBt4p4UpoKJ9YC6_Q4PERYNdhUP2fJe&a+=
zkTs7UE_bpxHZOb(8mCFdwmsnaRgSZ--iPg2!2=ZIGvgS6B)v)1{+UP3y>i2szQyM2
z>scY&J`wiRREt)F+O|=e*?U->V|yA=Eo$FKYcRfb?Ev47VfHW-V|Pd$)K>q*4aTI_
zyS;n#)%Rc48g2Igpfc(%-}gkm&w)1Bb$<p9PL^OAXL)>XX;JGp#T~1_W+~Ybro-}L
zxEhrlAF6=`a90JM`~Z_k^bsLuA~PZwZd^)HQ`KUQ5tH#=H{%Fb>#&4^^)MS1jt^JC
zMmV^e)S<$@rtp68-g&E#wd!o5y(>21XdguPir7^@T>pJXOaoNfmuIxW1<R;#iL!>7
zKp;%sXdVJ<vA%pvgcWrPgw`+urtU5-frUM*;X&bP?(!FLK9yYc-&!##He5nR*d0X`
z&GNc|biB}Eg{Pg4JxYVc^(Y4wpWR&!t6<v!a<ew`KH=q826Nx7AKH7we5F>+O<1`_
z(Su_-92SQq%i*T2-O4?^HFfo0fNR~n_OflN2#noV5YtZbmjm1QD;qcz4uwwVbm~x0
z&b3IZ45p}H^I*vrb?gQJDb4z>M8o0INkptQVzRgQz1rTEKzsWd?Q1RR8n*I}E-K#N
z<dNHKN0b563ZK;`cU25YZMVcbU%S#}N4Ezyx7|SWaxwIaxW8)GA$70#3+!6)w$6#x
z7TTt_ZMmwpmIl6}rIALWJ>zq<pC+o>AxBy9Hryrekax<v<lXWfX>W-j5(lu&s7<Cj
zHREP#+;?^Rb>9tM^lEOX?fB|szw5g+we9U7(m<d~K^p~3O>&<<vL>07HFHPNCfRwS
z`)a2;uJ5~A>3ug;TASo5w+wwGik4Am#G=f|7eF>5i?R_Rml^pQv@8g66?BKyZ61(&
z18tHmJk};q>^ybibOx9}Z3i{rSsPYFhvsd6w@%)S#&1Wrt@CpwE|`a==rIu5Br0pF
zk>(8TO<v1d&+M4&TGaXkb0@7$EVWt<!qPB>en}@1U$4`xmT!CG9DrK?hV8&Q=n!x6
zz9hJflNu}7m3Wo~=j?LwCLd{qTM%Uu?j~=b^CQIpP7Dxj1pfcd8hly*2LQGD910m<
z+ZG=}Jmcxh?f>`IdMl?7_7+zGLXM{$1_(EegQ@_+%j1mNaL9?y=MfI$UFSQQ>^?YY
z8tE_k#t8uZ`aHavo8;(?uVcTmsO{q8l;r5T@9JKOQQyhqS;bKwKgL;A(bdfq%1P^l
z@si<GgSt*EYaioVJzs4A@GoXlv?46&$G>m$&1^pA=ULpQP$Rd+^w1d>VG6yjLVm0K
z^(t|)Hg@S9;71S2*BCd%5LSTj_-u|}uZEpkKElA_^u-8TJ`{9r2MBl1SKsPoUzh;=
zX(UUv;Y?_Z+<0uW<v@xH_5L%3)M_!6CkR=?qg-S>!340i$Ks#@9Z*?c&{mb`vF*l%
zY6}3q`-CXf%QTz-WN&Pw)e#hEHXhTd7n!(xuvl;PWZ{+x8kE%1+x<wt6^H@F!|~%Y
z3>8ooCbMZ??vd}x1d&sq2bw~eoe>$qu(}rWa_iS*K;I6iH-?411r^o*?*7r(!-0Q~
zK@<evB#S*U$WLMrBac1-5DHp#E<p~*F&ahzIZR{_7U7w0H!P@&`dNuC)1Uc_4!sJs
z55)40N^eX45BgBqQ22LaMKQ@Ty@c`{P?n{l_e>n0Rx+QUBaNw;TE2{Z<U8q4vC1gk
z&rWDc_sOwV>wIdiEy|rsKFP}Q6INGp`|+^u^(}+zwv%^`7hkB@9{^sVQxAN>jG28W
z@q+>yJ<}fq*5W*$8)}XkYy(L>=M4u>v~WY@?d2xjNYHIGr3WGs$l|P^Dyo<WSFbPV
z;Mm~VnQI=Nei?%G=CvT9aFHAV%M#&JbL%Tv0Vj9pX`293${MW84$o@eC6{`ka#Gwk
zSkBc9=98>m@C%w%A={37pI4q%JhB9>IY}-t?Rl9S44?{C@(N8&aX=5=LG=Cj?}VNK
z3LyZ1;i47<N`K%b_!5rlvqpXq3`zqn(8=J_jA}Drb2E_ufEBH_Dc2mZP5B2yR{6)a
zVPvV=dzSk}xX7VFGb1TSS`s<6eL{a7H{e)>zRQ|)5+dqeq_+-(adGv_mGO3Bufi*{
z3LfHY5d{OAkwhqd3KW?Sh>-mhsSG02J>Tp{`~dM1d1LcbDg-qq*$qv*thu;CR?S2_
zADFX~j_vXFY*+&#K!}hb;E?_8nAv6W`qkhR&eO-4-~s~D0`A5b%0!%=t<^Y5A)Q8z
zWyqoo67nUU=fTL&KZ6fv3Vz$HXj4Yr#{ubNiR9vBDrN4LS|Yxj{<Vl1V?L1tiNtC2
z27+K;e>q{zlF;_bmQjVl8WPCUB6Dhi0#revU?7PlY)fE(#K9+2W|KmviO?v^o3yQ1
z<|WdSc5)rXD!6JjXKr#>PX62=;S~6)@D13(0hCOSG~rurc0q%4hI{YwMI`!d;Hh=K
z%hVMa<qLD~aq{L3tx09C#qa{JEB&DUK`11QPdqsyi`{ThppPHdMM^g<Yce;^-_Bw0
z7A0LQ?DzcV)9t@3B43^OkkcvuS~TI?jT+!kif%)&7(#={N}C)kePe9%4lN+JLFN+f
zdMDGDBw}u*>vFj4T~c`6zFTaBV%bE;=~$46HX9>+U;YAo@R#H~_%OKvSz@Nt>B7=#
z?P=ttR2HoY%3Ker&v(bMfWeP^(11>z>+L(q8hc1osb=gGH^!eB+O>Y$8)jofq>72u
z>_Jg@Z$)jB0`}w{TV{X=zymI%kySNW7BE`Q7D>qEk|6K{zXLVBr}v+ZH407uTo}|?
z9;QftO<D7PB{3L^r;g^i*LLi+&vs7$fQCd*F(h@9kn{}m89n7;4CPk}Jc_sdK+AHD
z-vz(LgGLl2Akq+%@c_`2lxuE$GZ%J<5jTX&jcwqj<yql7UiE!EkVFJQAe{v{l?b1}
z=-OALQkrRt8``2>N!*5{`a+_%Z%xwjln3V`V!kZw6w`LMcuf96eO^E7P()j2!mmX`
zqO{jb%&sgz({Q>1)XQj*6AWZ8VrL+;Drs#4n>~%RZktlO7tzSCkvv&3K@PnilA7`z
zsVe0MnUuPK^lF{+`(F5SGDD(C;d82>1>}HVc<lteSwPJ3Ae)oi#R6MF{JkDKa{<1j
zBy}h9gDb8DnVqk>)MsbVQ4V=l6UJTV1hOpZj_(#Y^k|t+$k*mF0vLipqTiJI$3<wQ
zpJa8xzZ=KDc^W2*!E&)YEKPKVXC#IzOVdI@52I{M)P-_K?KfR<rN*f`<+)UYf28!F
zFDIh=8rlHcAvqQbWFS?Lw3*$Na-if)rsDm`n^Xm*x}YJoh5&xN;~Z>xW#%9E<EV6g
zp#TC9ZIfO_3p<R(AUZp0X`=fee)yrb@$|ij=1j(^Ku}6vM_QJ>UJ!kA>kxb6s&E??
z$v~5G1LtOeQ)FIkm^dCK-l=W+u_Jvq8vlc$C|Z5hTbe;v;u*t94_lrz+pcTTaaktT
z$Bc~)TIl(2cR0Afb;0ty?HIkv#oPik=L86#L;^msu<rDIhZx!jQRoJnT|wiUR1tHy
zh)jnK&`=KnbYFe|JhatBO)CMV-N_E4cIP&mW)4+YkRojeqE|@cHyye2DN%*WHA);6
zTbTfW85m6YJ|%Hx08!VDk1S<SDFJ=}0VQq)ER51Hm#pKzc6o#X>)NV$$KgkKzRl^6
zU|D$5>6xsCd0CWSKbs}G7Kw5Cc-TBmf3#@!Az5!=-N-P^R``UTGeIoyz61UFKOXZQ
zDfr9u&+FEHbpN;<RH4_bdRH^LtE{xDKydhN_~#4;R8SFSmcPrId`jqrT6HBy`}{gR
zR-<lM+Yl^z$crO(#uBlZvNbbRo6fX6E~+f3Y_1Sb&CqHuk&uJOh@uD>pn$TX0UcJF
zmXO`$0fmGl<Uz<*+Df~pgggk@ihIT*(#2L?-ET&v%5hf(lcG)R_AtpYGeodB_&i$9
zDZ8Ym^ofzoYO^cOp1Ke;K_fHCC{y$E-olVfeg2mSW*}P?b~0lP!^aaN<1#71ET}Ae
zWVYrILN<FJ;8|R*w;U}R5n$I7wb84ZxVDUD<`q`2`tu0-BFmZYO}&VK<CsnCX=&f>
zCN1cQGjWGWz;t7X{IXj!%Q)D1W9vua!xAAz^TRAugebdj%oMKQWwN6gM01errX~dS
zY+4c{wx8#o%3M_v<O&WLJc5)Ir1F{bm@JU_QSl-2b@ub|TR1Wvw*ph!bb$6LU-m%R
zd0EqUgF&jzC^Mb#$yM}(uCjT#LKCfNa`*FzHJrfpsN=d16~^GHGK@CKD55PzqjLpu
zi7t3?_C=BO?egEIu+Ci@6x2^U8PfMbTp<$RmYUK=D!f08i{(3dq4snMHhS=esj*L~
z+gayagPrTn({`;?Ze1x@;XT*Q7`5xD2}OMCUe|H+$5V*o1+!i08vvnN!E1o|=h*tl
zx4*9FZAJBar(gP7yU-EcUKTmGUKb~vu|htRTzvcc3oKj|lWuT2O^#`S7$ZHQCp7iF
ziL~td5(Rp3#fN=|3Kox=^0RWPsI01PtlF~9ks87)RJJ9Uu>4pFX5?K#DrJzTr9Ufe
z>OSB$m>OFCu6CH5CUEmsiQ-~vLF(olWCf;ESf*|OAlnmmPHi;D#nlNJpM?siyUkdn
zb_%u`8|U79hPFgGbZZo0#kC1>#sJ_g)5c}cdk-eJ8;NrgV;hy-+&Bv3QF0`+XBp_K
z0G{kn(!9!c_necA1{3p9Ytv(7#!L6I!&ppH?8Aw6je6ezj22BMTcS40)&E1O3S(!S
zQ=KOP^TtNcIHDkO(4^5{N07Ezw@W|)>CLIhbiVg*pl?Uj*Bc>zaFxD^K4jYts`0?$
zIgIVFPh(JJHs@>IqB_A`J&4g3G~HoN;k$0Ad`0S+C#9tV{l2c&4F>>#V-4!+^+{1^
zbr$O*RIZL1r3n?l4}n&Ylz6t(q51eDLZ~vylEH@QVafHD_PvcP$Z8joB-C1r^CnXd
zcVDO=Ur%|}E^ll1=vAdr#-*TJ-r-@u5LC0RUAUuC4ew0i?*7ZcYOy-3rfgQ&S-dtw
zUx3%({cDPEw?Fvb#mNrOU$O5_I-5J5jkNQeb+^SwS5oJB!87Cg#c)8?TJ;;y+iqPs
zh<2rC0A5{MLnM~L3ibP?LZvqJAqK*+fs~uotCXU{_^48{bH+Dw9TxUrE`v)3MXYoR
zPM{uE<-GNZX=+Nk9U^+&sR_CJc*l9jyCjM7{VGEob&juQV9hm8SLFRig<9aypG-{t
zn-lOMq0ku!d_^VQ6qjD@l5rBh-mbR#-MM*bYrxW}Vqc>yXFU}h<gMO(?hU-ZQP^QC
zR*g%#apvSheJ5pwS*5D<50>Sok=HMtxe0xHBGG@Ql(79<=X1c*K6vQ0#zV%x(p0X0
zVO@RoDM-E1KdQ+JQ+{yj1f!ra#q-4fLn<U{*Ia`y0mt!5>oVswxOArU1)1n-oL7!A
zO_2K9h#=rb==VH)JKA;-H+Tu)4$;(+36t!oxt|bxJUd5bWa_K06S^DIhAe2Z`^f?U
zu?EL1ZG(4Fbm|fPKRs#&T$Vq2m0get(45dBf@Z@A<CkYu=wg5htpN;>0_soO!@B**
zup2sD{Y(_(%};igUgPYEWx{O+CUAhHEAs)BZqx4rTySrj22OGpOG%K982i_@6#5UK
zC_(#mX-ksb2WMIy=E|x>iXWG~hxY1%mi4BhRt7963CHpA9~|OC!4fUl1-l=NShuwz
zqI*Wqbfx7Tn8m8vo3guw4G9CWJN>R7yV7Si1^akkuxZ<r6uMQ+<|4ygE77eCw+JD;
z$Qq@Jcb)XtpWCg)*H<?DMWl<|#J27_4$ru{FJ%3=LS^f*3_2o(w6R7EkS&o_yc5<d
z#8P6N;<cU8_7>~!<R_<E5Bos=J2BOUPR_@BGmGlboG@mPIal?a9DOHIpN33e@vl=3
z&$PQ)?n5C{scG-Pjp@lC5ZEA9SCK`^RbiXyb6D0?@_I*BO+`5Cy~cXgzRj@P#G@`0
z06*M}AVETNvu4(e?zPtL5<p;Tqn)vHLP(hvKP(l+TkQuBx5jJFEccV(|FVa@-k!|4
zkJ{W0&MnS0Ld$8~z3r8DHAhnI-B>0w!HJJ!jxQ^m^^)b8qJrSl_|)L2O*l0_HaX0O
zl!Npd+Z^3rAL+_u>V1|ppS78?O4H6P%kE=vYGO!bv-INq2;BSKO}rD*ty<@=h9-XS
zd8+?mfAJ44cy~LgB&)~ST`Lb$yNslkntD9$l{2)rn(TCJhDc$%9ZpAXoc*fPL2Wia
zn(UVIXw2>rbi$$(x*4VJ5j*5}1`Q~@raN?GLDjAi=1@qDnuqsz8VK8x`E<0555Hd7
z4>;8Z8k$?*nB61aDhEWJf1Fe`{Bve{MS08)u4`~Q9i7HcfBniQ1D@+^GseTsOKD&G
zYB(LO^8<O#9lnR`A$tokx+djn*k<k1>Z4(6eGyo=vo(7T3#mYwbySd}xBro$E(1vg
z%BYsQ6BHm4{I6Q1gh4E#B{M?^%(75VF08;7$q@@VQ-MsE<O+r)h^G(<*~#DvW(new
zPNV__Vk+<v4+bWN6m?C?s$St%L%>$*5K^qnxbA(68KWJcV8I+zf&_E0r~zMk+_?Py
z@ce(AAN~*40mT9U0ATWG@$F&&fO}2&=Fi~&d&;#Xa$qPh00001(q)S#0F>+hJ-FBs
zc@KckQ3Jf~9byfK{|qlFwjIeR<&zEdD{C2#tM&|MVr_TPaY00!ub#ezDD`nerJ8z;
zvWT%f&Q(;ZApn}KsPC01SRQL*dmMpRoa(}eq!uo<t^WgSWILxMknDfuPJf6G-`X%}
zu(1)h!Gz^G3LUfy<2YWU7#3%f&G`B|poI3cr}t4gZl8Ps{*cbAJce9>{E~9MQ!@-n
z*TRg`CH?ugcvG*m=Ttoi%evcx)!_22=@nM?{7Q}8uH}mQmWlNx*%UJYH=U@(G}A1r
zmzh#;LI)lj0n-93{Vks3ZuR9<Jw2b6o?MF=Pw9)Xhh3HU<r{d+7~@?@rjvBSv0G}A
zYfFmN6CV6QG*Ju!r9-M+`H6Ex*6kd`&ja;$_}9m@L5(SGcfZ%mKI`_hOjyr%B+2yC
zU9tJAo}4DzmHnS)Q2fRtmW0H1`vzV&`aShgqb&^UUMzXtyPQmNy&d(gjv0riOjZ4F
zP0s-}m}<nv+3<W1d8|Tq>O#!xaC0@ojK|3HYFF4{&JS~)$qf5vH>1nze!;`MuXfCG
zZ$BMsi`ql2&h=0yd$f@rR^#zf@5G=VWr9Ogi+y#Sk0r@+Si76z{J}E6FrDkx9ph6?
zSIS4s%6fsnp)Zwan2kXfy;xF)lW`(0##K0n4@(#%SvPd*rIePZL0TZIECt9ySW?Tx
zPz*s%AerSVkPyfxO977>6dq@XE}dm5kWCf<%xwV#z&p*P_#qgj0AK<bED_Ufk;Ow`
zE(w4LVA2DU5zzxfm)8SPS00RGg1o&4(Q?-hmC4U1jxuB_kS$4qM7g*O8CcnO;c}J1
zB$_I&Po8uldWOA+QzJqLkz=@Vaz-~>o^xaAd2WUn!nuXH9HfdSl7a^#`i7HMsQIzn
zR0L4EIg%jK{lj|GjhM0W_OWI(LAu!qc$%IolO_G0<QsaCHkqOW<LJqdEkUzR#7Pgy
z$ibG}@i=nk$(J)-AHF672>ACI_?Il!;xI2wy7nm0282vZ8+?O0Y6=oeK-NBjIhbg1
zB@Pi(?hD_TA7-iA7a=c7V5-;`QB^@!g3%Yr)?kGkr!VqK&1EuTIt3xOzNn#mO9RCS
zjmoB5C3|JX`(hZWDa$hJn68$(Z7u{T#w2Nvf`4$E@xUkt<{a>zTIU`pMVU3L53G{+
zc_gF~q~ALCfR~gZHA(xVe@I!iMyml*Nwt{rKh+t^yHvv8E2P{y_dul7B;COO*f*@~
L>Z`!yxC+bxd0t2x

diff --git a/static/fonts/roboto-v18-latin-italic.eot b/static/fonts/roboto-v18-latin-italic.eot
deleted file mode 100644
index 0280829fa202fd717d97f593a3d00135e078846c..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19158
zcmZ5{bxa&i)a@=T%i=8VEDMXfySo*4cXuyP+}(=1OL0mm#oZlBp?LA)El_CR?|aGn
z<9l~<a_*T-&ipgUWG45nDFXoD|A6%000I7o|6c%sX~6%<RW%p@fH0Z=H~k-%00FT7
zk)Jdq)c%M6cVGgv0PX;*|KRf<002yY(tnvHzy;t4u>Mce1M~p4055>|f7%`3_Ma6u
zfE~aE-~k8#ME<Yh{7(t|x039CIl=xv9{@mFTS4Q0?+pMT16*_fLKXmFRsbV2-t1|@
zg!QIAngiD-fo{QcydrKQmK>71@sBlogKn2V&vS!xz-ERXt2~*^DrJFZRo%%yeF77o
z5u457`=6uI&##zITgYX->xfe#CVB`sg<7ZQu8%XXn91~YrfSMGk8Fz<HU2Y4>7rx)
z#W3=kW!H03f!0zA0+;aYqa*D|d2{HzMN)gV&0c_lK?7{)t8`eq0YU6%SDuF{?l_rj
z8H4#k_d!LSvc66sn+s%A!sgFDnQGt8=s@UCfK~zK6PpN^Ka=cfY=@XAoDyM<V_l2=
zO?@3>^IEQQC74?hYjVZqlwcp$V>3?VJl`Awg5HnO$;WiU-Jw$*<<s;Jt*B$41>5E2
zAAv?qn6O%p)s6a+=Zrh!TK3^nofB)b3&?>guSsB`-nL69e`>I4RP);+ovGAnv&cyn
zVa5~SNjAw80e)LHf`c2TaP>_-_b*;7pGye0Fzl>yTG0#}-lSD|XiM|RdsA1gzK{&q
zo5$4F9EnGotEwl=i;Ed#)Qq!I%nv(K2D+RFqbA;9)U$^l8NDvtHnc1)K}#7Vd5bG~
zGZDbAxqAFlvI#Ubi^gt<MY(A!wxmugTf7UEPhvU<nvR&es3M(A`!8aT|0L~R{Wk?2
z@3Bd`c}q9_GP}a|QOc{s#-YgQg6urTkI?-7r&^~yM;o7D?u}^j(hyDaHE%oe86e?s
z5~3sx-3V-%6EW6*fzl|93x**I3uQ;*`YRRS^io^c*!Y%`{6BV&QBjdsCdapM?h6*m
z$`mB`xPWtEU;tLcLyR9zikorECmWRLZy47kFwQ|GU<#<*8Wn`OPdE$%LqD*2{YzI>
zRX`SuH)E5FL+X{EcWbW`5a@L!<ICewy<xB#ozUahGUkPsO0zD4G|+y@<Vj*3tenuG
zVIe{+!!4h>lEq`f$ygd`!-dEgbUz?_aiFJZBni&$#E0+OJ{IRya{Uv%Z}f`C$i$O9
z!-ileVqJy#W)y}F2DblmDS539!?l7ANON`3_^mz`({#yrM2jsRD&(O@aiqC?mpdPq
z<CopTuY7}x1`k#RqKz=(h9wd`Jt_bpi*-+iV)`r273pNPf5A!nSq4U0DFiy6mZRh8
z3MDKQEkBUoV~+63`XDd)g`GwA@s$h9peM|grFKHU$(z~#C{epU)=b=I^Xl2I7rrU&
zYUwbO{nR_{oqbs*b~swY<!}Ph;Y$oLu*@#dqKto4yq^5J!GLGjQrv>oh_vKUyk$%x
zX<*IDmV|^ZjXbPE-^#4X4U}rgwZQsY<O2<w3^Q`ZZATq6uF%!7XfCcm@PXf#e|t@m
zDEP9YXNY5vh^0avrkHk$wRGk&;J#qDE#Y3Ebs4QEAiz`14SjSn&EJrde=YY*KX_lp
zxI5)WA1f5z<g7$r_!$nKo=8_HuQjMrbP448$e#(7gGGpaB6{9vXnLN}by4JEND-}j
z?BaEXqJ5&<P4f+!8kI(=edU%1!i9OJi!uz}4Y|CgUk373LGb50=mtO^5I-#ghFBJr
zWgAB{J+0;9!Ta7{Np(bhyh(8E_1oG}dvY)*raao;)!^pvl*+?5`_QxgJDlYF$}W6=
z%b4opDNCbrrzVhTjKn9n;c4vU+PK*1ohN3}gMSp|hK{nd;vT2GN%^&^$8oG++xR}>
z0O-uXVllW?KgPQji+Ur+Aj;-Nh~k47Hg=Es7Tr5TxdX|F=Gm-5Ah<QR<GI}?j_NxD
zx_&0*3VEaK5clv<<ZMzFmIWg*NTRtbE-!6HtUE{%lzW)y$vV3gW=P8Ua2m4!h>}1z
z*pgk@`(l7rK7(xmdzf>S-df;CQguwlIu}U*(4fX}@{gZ!Vn*06rVNbWeGf|~AGwlL
z6l)dKz=MkQDgq|rsk>Z|YT8}Cd5#ZNg$byk*G<cCNmsDqI{4*d`m9F&%nl43mD|gc
z3LMBri8Rm&w4U&xR@j3*i|0cPcWWVif{b#18ut_bb{P(u8EWf1cr`MF8))t@oE~Mb
z-0)B2DqwOR?F;%W5(wbu;C>fv`LWsa!E`nPKCToINOD<0=ieu6n!)s!8AJjVUD%|>
zkK(oCB=fNRk}-wVjr{vI@5iSTLuL<7+P}ych}W_>(9D`}KJD23chgK~jvpIY<b~%x
zDl)ow>j0NCedtN0_0q7}?#F`)PGFCM;iOWZGV<GZqsAv5lRDSO%F1A4=t~z{4Vdrs
ziGuRC_hZh-7*SFx1h)+SgAW*qc)%rlEs>tTJgf*(xz@(C3?$ICOHgi<1M0%_8PtP|
zuR|5e;kgjmU12zjBz`9a%CWD64u{CcYnXy&9E#5+s@J?!TVimF>9%>UoE+2)E2PR-
z+!|6;+EdcO$IZ*f%|i2;CqIwtV~L+O-l|)b(Qf?P_jQ3|OBdv@om%2!<AWd{8qQ0n
z+A*YQx-xu>v39L4#>U#|f8EpQD0MnP#HD8*Yj6b=AB&ad-J@t`yzBy*G39N*pDGgn
zii8<K^Sq#c8@u6^)IzE`Sjt@k)+3+GS1mYm$!#xiqa%jA)!y%wIb#wPKO;VhHeRc%
zGSZ4GfJB4Um5St}rb%2*QX2SmS9kTys3?70A|Lhh>H)XN5r-fx;};q}4Q~q@gP<gz
zH=8+Bv=L?FT+=e2qe+baC_+g3lM`p0MlAOi2H+_mLHNAnF3-A!ce-)}=)s~L#_G(q
zWtBCew`swkz#uB;Te^AMLiFld;55qYbG4LJg64?c%|fzG;upHo)Zm`o;jXxS%NZd$
zQ8KXl1%Gr=9kMI`80ZU=bZp3?@qz|lSzrH^88ni#5qhCLaM{P%JfdyK>+X;&>+y8~
zRsJB0p!nFmGEPSBee_qxszAx8(*X;inO#Nb`cGBSUXLj)w*9N9v+dG-nwHeW^B^;X
z%M`%dwG;uCCUrc`Y2x?o9xfa)f=a4RTgla*kwlENOuufc*ZX2P=J!`qJGp*q3+Kd+
z_!~tN(ctUrh%C1Ef^cvw{t+?F-nK7}c5pMiNb-)!In9oRRsKQ@&)8d)Y?>L=k%9#1
zY4wpRQ=x2<{2YzRTcyF|V@alvpmnM&sI{oY=;btqv_{iH!&rM3Z^BCBM#Sw}t({iO
zC5RqP@MY&CmrfmeZZVqW2XwK;_`QgBd?Hbjgr4*;-7u7}{1_kdh2l%cScIQqv=rb5
zS;$_<JRQIdu0)Y#W<;+hCe<Y&=20EbgwnrB!k;Och=p^?k!9ef!zbc3hcc~4;0<tL
z*?nn`_+8nPL?|>Vej_=8Z!9e;4=<z)*Yrj;xO^yuq6QCWk-+IcM+%J#-zL_y6agP6
zBmzN$BMazC=yaUdD9@75Btf870C$XbpDYR$nZ;G9kc`^EuB3A5uw4iM26j|iAW-Cf
zVvv*^7FI2OWEP@)L$8On67Nu#N-Z<z?bL@i5BsN|O!HR2x;l<Jsy_US&7ikGwRuw3
ze=>$ZI+SLSx3%1-b;^eMoI!Slit9DSq#)Xnvb?&!cSDBjZP#C382uT82;ch*5<{g`
zDFt=okT27S^<OV6IMMsNjn45H#>#2kL`lwN4rUq|p4fBGIg5=2p_qmY$iLEuwg6Sj
z0<^`w%LLDOvDR;8OfM|)gxOHv6dCa@IdU3>bFQbbQc4J`?^^^E<=0<5Oruf|F?C@p
zq0N5&%96?PgEg@`NKI%5v#Orj(NWVpNyvExO^m4HWjdVnWmbM%?B~@tVK<6~PaHSg
zfB58{MEomFa#(%8@laCRgxqz&{eW!Nlw#}ZVCrmf1duZ9vdt0gO*&H^!iM&KbaXc*
zz7O$tZBma#ff-U{sERGsj&0iUwla{6uEWr4MpukwGS|t4m2nv4s^hkcj!rk|9=p_`
zr&6+utxl{a!mBS+SBZ_XU<4K#N8|Q%0U+hS3+p$*xD=Lib@es4w61m$G;NU}`x5Vm
zLo#;uf`zmEGrC<EV{ai)SVe{B1sHyngh+RI9qN@MU?Hy30gz(x$PhXLs<so<mJ;h3
z*lyzji3IlD@^Qx3^CB$2UBBHR?46RBil)BVIj#E0rcZKY*?aVhaRg;rt~@G^F7)mU
zcWBbpd_kihE5uYq{bb)LX9r{4xl}qX|Nixg9!bDHLig3;fSkE@V{N5j(l)khYDM(A
zrYM(*1*=R<j#F2+N&5H?dg7i|L7=w(I4U_hv^Sbr`~!&;4S3L~>}Bd5b*xsO3By;e
z8kgV1Q-lEHqaki;o7Hnq@=SSGOn2!C6!ghPlA4y)-?m0OGxKj*UAhElv$qW+iL2Z>
zsX(Pf0`K!BnRtwaW_kG_yO5^5Y);+)BjS-_)WgD`X)gFapbZvIsTVxUUpbAydEv0i
zHQx7TyI9L+(z`-&a1N)qQO26U;oqebihnCvXc{+Wa-q0LTN^Z*Ws`IZ@Kr3@Rn>M-
zkTjj%NL9(Y)DY!@yR|=cu7%6b4fS8m6gX1@UE%UP`Qa4fg3gl4FAA8$EsX!Z1aFpK
z^j0~K-x+|1#p!Y4ceQ16uX(x?v~(tgP$g&Nm5FeO&J;artwSYcxSUlw1IncZ$?2?V
zGm#GHNp{sV|5?ODH7LIoh{elS=`$--EE*}qU!ibSfsp+j-DGlQct)t?M!h%wM)NlV
z*O25ak)BVDzb)e~HHi&ytGCxKQbvWV3m=@MQykZ-j(>Rilo!t!PSfE5i%1!g=SAg)
zrL<;?f(Y_r!f7ZT6>~^;nT7;2fTW5L&=mAqnV&g5iZN-sR%)&f9+{mwQ6H^<>dEwC
z+M`M#JZ*7EIj)dZpdTTZnhK|53jq6w@7Jmwp1!aNi#8%Jyw=!;mwWE8riGDLPHuW-
z+AO;DnOf`YW?+;NWOO>-Sb7<Sx)Z=`<4acLWE%px782QLKZT%!3vIqL<_o(S=@P-)
z-$@ln^$$``R_ggBUK{MOT?2?wd}OfqY?9DqfegPR`eG_CW^E%%hp20#Fdg;U_@1a>
z-%m_j+K>nWvLz$m>)6m?JHc9%e**qoo2c%FXmc#ty=6}Z+j7f)UC>sEUffdoQ>;Wh
zaYafC$jGGmOQ!0B-1fNC@8dlO-(uI1uhLq9pS1;OTd4@j`3?qLMDI;z8ugVm9?N_4
z*`}{HKO&kC1Fk23-Td(W^a-H_@kVP?5{KiH88DY(-U<fK4LPNbJ`V83@(vXf;>|t*
zl7<5oijFFY$}XTcf)R|`)6fW2uyDQnFXG8=RG=bFKae!Mn+*!|qWMelQH_50tw(rd
z^H)iB%REJTTvZXV<rSm>J+|$-j~pW<7ViRN6IdBeKElDMVK>)lHqWNNx&SqKqy-Lw
zekc|nMT<;j=GXpdeiNAuvZYdtWM_%-gsgV@%nIavacHCp2tx-sL0q7N){O+5vJ3p(
zaz@azJ$yR%{CM3`Rf>+n3l+J5uw)J2Qw!yRL0Joyql3~j(Y6AUyq4Pf0RK;q?xGVd
zg6ocy_^~oQ0SmHtIg*y8RSlI<v&9-M(QCOY9`1Xlq_^i*Dql~U(ipHHv8Ezko-LCt
zyO_=Rw}=gsq0x*b9bOCVPVG)$${kq~6*FaAcy4fF`TIR-@MG#CW5n|({=l2p*~8#w
zK1<Nh1lwO(xvxFbU4c()l$4Tw(8b$$=~c=Jbr9y_!-IDkH%gEMl42Yd3AMj<E29dT
zsv&kx3$8M$YCwR#3{^_dF4bEXWnpuO4>6Wq&f*>3U4JrCBl_r<zor)~{P};<nLOeX
zJpvX^Fhp>9#))!rxK4*`zM34r`AW9*ZAjV}64w)zsi&Gm#Ggef%}7{lImAc*gxReg
zwpi{$*Sc*#oi8aIkbcsd0!hun=XD#W;bsi|l%BDY)oLz<rgRW}<6H5bcfLxr44_I|
zBekEk=76|`sBI>YsC!1gAsxv5-~v6McWStU97-v#Ki3V`2D;i54*WXiZT9{e6RmbI
zvN#Wq&9B4<YElZ$24gc`*67e^fV4j-#dl+yNgI3N$74f3k{E4dX%bf?_xUV<wTD{*
z+-2r;9b%;43!Iq<Ee<Ve8?<+%OBn?PQKg;ob^Rd-W+oAw*H8Pzik1Xe#m@3s(QO}i
zL_(tyNkvt;r{Mk#MZN&@3puW3;|)1tcj{(_NC;15T2&c*g5a)Ml;fA`i|PqrAyaN3
z@F7*QRRJq(N`Aac(tsY=41&W42jAVEsG0M0g1DB33WHY^G@xx>-^O>MV$fJP0E?4P
zx+jyDH%iWkvAhIw7Lvpcps7<de52&B(LL;juPQ+fS7`WGgS$;%T;|WHeB|z3vgCuB
z{7<;*HGu&}KvMa$h(jkjS=aN4zSjEct<bvCRV}Ki^nU;iglfv$z{jz7!7;#tj=j(c
z4C}fPt-l7=h8?!DSrDpNXbv4`RF8#f^P;SVs^eHAgT5oJ8UMYy4xZ(0Ph^!b*ysxp
z)o`qC&R=D!8@h1m>l^V`bOp2;6Dd>$874^m)%*!<Y>R~Zf@+zOjl}GI1PQbD?4GEV
zN%)PW1So)gf-0u&)B%xC2XDm|K*MxGqGC_@v5WpLG%5lNr^XznCQt`UbtJQ&>Dm^s
zeTxdWtX{`rt4IzSt-g-ar~Urp0>b7!_4}*7dR7<iozmU0xKx476BLc#hQYg<TYLAZ
zY!cLQy{$q;-eD!X6&?hdp70z_rFml15U`#iX7w6D?vWlEP+6M)&O#qGjp|2-s@+a!
zFDCw~t!I!9JMn&jOZD%5XP?X>RDJT2SVD6Um!SyAQH(N|*INR0!woG^-z5p7Dd(&R
zSQo)C8x|r<1Hwz!69OCx={sAij~v~6j*`lQV>ylg(n(+_VMt)DCn&0hXZk`enIx4b
zY4OJ23z^atkw#d3)7T)2-h;DjdYMyLGBTqpB3UW<_+!)3$(JsMglQBUsHBp?7N1z=
z1kcF^q;u?C7zr`T&e7=|K`@$BW9m>%3Z%p$XRr(+Q-kZRph&h(zTGp^9*THtv{Y?O
zXOH7FSM@44lBk<ENtxG=(J6&;8dSyR%6!!}2b8RJv^`)SwG<YTd>rBAVpW#roN{KW
zUR6;v6F0Jm+|U~-dtNa?9i7;JEa;=G0uKa9+6g1!($PYHk~DC1mY|btu%Zg)j$^g(
zww=+Rn$xxgWK?gH^r`1QyNgpjc_wL#1j3r4QW!fOUp~*x{Lbq|?A|JgCe3T}k{T|n
zHcP?(R8^Jv1pPn~>ggQ3-QHdlqAgSUF6z0o%f?rpoH(R<a1u{NQO$Pun1^K=>52IH
zrM~#!cSjm@@jOTH9jeRQmy4&s-lHN*Ud5dRagdJ=G6xx`-eae}Bw*=T=gZwb#*3kC
zO-{>~!e}?=zHa!uIxNtF(%W@8lT4f+SuEl)-tptmosc58kJw!2JPcsVRKH+Qp+IWs
zTik}WHZ&fDp)TQT-)s`cFnOSqY$(ApW40+Q6W2^Z?$|6$+GcTvw~lVa$YbqylufGW
z_sM-oG$KRJLGwJLJzc>f%np`ai^Q-3mnGX<B&$~?@y8wy3kno%q^hYsi=0zUgZ)s+
z()Lq)XMO<#=rVlfJNfHKv?TLFIceB;eKgC+(926?J7HE|UZGZwp4smoizg44e;86n
zu6N8G_UnIh(J@s%vncI7bEy!R-ZA{MBkw$&Y#zS*QHV;eK5fk!hv2%VLju!JiU?L0
z_Dz_BHHnDT_HuD_VW|1y2YAgFydjQn41kN&wL;1#MMGk|(ge9QlDF04L+Cv$iqlxL
zWXK}oZ<e;&Re7EO9MGHGVUc$<`21|9RPz#J9-fc6W9sob!upJZ2Jxw?l68yS29J}O
zi-)ovx~fF9SAYtFQKKC7jMBSXI!r2CJ>c^L)+2r)A?WViBPr%bMw)x#+)|X!Iu7Tv
zRO+a@AO-o~U(WmpfHej_KSi%5slUjV&!8}t7G1PNIN5@VN`5rP_ZD7tyl{NulR~{?
zh>QT?lbVZ5GF(=ox>90Z{<tWp@Nvc+No`71fay*V1sMFr={m!XHdDj?u9xsdN13Qe
zGP@7`yG-<}2GT}!8h6rfhD%5OL3Z#%E&-`{4Vz%DOJ^?CPw37rYlCh@LKW8GvC?O{
zTR>7sB#PeROK|CF5G>cN@GUnQ$x>RHWgPI&RSxHwAC*ER&*7`G>WRC%xz1NNuI#n;
z#^u!{H|V7<>ogsQwC*48O2j+LjTaVMs`ly}BVhy@$tr-X?OOt5TwlHF)D9-sjP;dS
zR@xSWF~F$7(3?){giubDT<UZC1iq4&m@#v1L_6j#15J6%fIWf>T1ThxmComCy-60I
zgne;i)s{%iuwoZ?8&L1b*I3srSmM-2LQ!n=TerI9GcCQ>`#wBTsSnt*Io~15phyz8
z*&J653(c-P|9o8ddFfHr6n-KBwNT+>cB?Zhkm}QN7t27a`WLES%Og(V<iYCE+>sL5
zRfB(p)u&8T_d$AE34^3!Q+|FwfLwa7><3W)sb9VCvs*VmIHS!`uaQchiMJzi&zJII
zYEy;p<;|D10?G2ZlH7Q)J+VTr$G{ae7l(Mqahd&8#^M}fkjW*nmIM1g4O&>{a(b;d
z0Rv@6wWFk|3|u-%OIgkxKK^le^b-o4fk|QECLfjC(2c0@PM#R>|B$DK>MA$*cOtQz
z_{x6gM<<+HT2{)~jgJn46Kvfl_;Xuz6I83`Ut@a2$xaOPTw%UML+briWlaRiU&LW=
z!b<A&PRQR@`=n#b4OrK{wzaSZxeq<6RMUgra4i*SZ6g#zBvtlj#6c~h?@M0X{8g`5
zZSb%{9N&#1vD^3j{AcpV#KGrXo~}ejGY6N~PVb-_M<^!)i|?Z)m5aJDFpL*nw^Bj@
zHva8T=uBS!&tjd?H(|J|5K%feTiC?MZ6*PkM6&7=XJ1oIR?_5;*ld0a%kel;AAVO1
z_;AHJAk|usrAO`jm8UJzK=|;Om}P?*Kj?%FZ(yfg&0(Q54F2@E);|jneke^N6G0<N
zDoVHu7$yi++jHl+f`j2GHnP){WV2=!9X{qUIOp|_Ybhm-?QQ~T%y!VZv^P0vMK#Kp
zDPQvE!kJIqQF|C+ELft3U7J>>QBvYnQ=ILBm3o_ejI7~PCxkR@x-@pmT%Y6E<6#z@
zUa6zehFY9Lj>AJB(+I9w1B5jnt}N4w`-ai9^}>zBuDiGeHkWzbTP|Z(HZuSECib~7
zn)P<7DSbZoC$_#g1~q=H1ze9`65siS{=ku<P7q3VTinTBIz-h&OYcL;YPy(z;)+~f
zYb5TkzQtJr1yVwXawafx)U%dXJo@Lku5z(5_Tbsjr03T-%(rphL;kkfF9lH(ze7t<
zvT7$?pQ72nfgP`hukZJlJ7VPvt}h@|rvzpNZ7y9X%=d`CoAG@kSq}C3{3`3|mgw=`
zGTUdTd_wX@#X5p;V|=nfMzEcj@4~L4w}_C%up#^?fTAZz$U6kf_qrU6ar-U&)Aw*&
zW7MZzV&_S()tT2ym+AGhms>EXd=0pXAZjqZ@9rp2*&Oy|6LYrJ3+ogg#zt{sC1Uf4
zM$0x))jcVKyb&F^Ll^sJaSP-uvexK%E|!Y?8m8INWdTg;zyK6cY=r@1hny1xE6_Le
z`(5Kyk-?WMOr7ZNyO@M^M8T$KM9{3TjvoF5DbWbKb%kN=U3}QF6QNh&1kgnAC6L3~
z>Jn=k3<zoHXh8|Se?O!f7E!u}mvdp+!O)gv&s$JUAwa4a^JZ+3qw#v%CO#7Q=7ef3
z%AhrGEyC31A87wrW)+Y1ut>Pr&N55%YDgiwn(AC#7Iy;8UYB1&jMnv{Z5%j8w31wg
z)IDVkz4)qhSje`y0acX!76aPN9vo=OiYvLryjGu8(+Si|n6drQKZcWK;vrl6@wy~}
z7Q@v&F2_igBo>v0x4$a<SM2v~MvsYw{zwRMLs=&~SPp^4+dQ4}=}n&05sBQ01)@r$
zKH~k>P`zqUDcd8<MEZ2`U)our09RU=X)4ySbJ}d!2m1JysjFqREt(CLc|j`&w%V73
z<A;+X%xa#9^4}G-YqJ!e^jnUc<{soN^&PeotU@njJc0vrx^MXX$|h3O-H<v`1L#SA
z5?`V@gx%OR%c$fFGBHh8p&E5yjY+r#+<y$gD{-GB4DBsSVfLOgttVKC<s#6AT}yhE
z&53RQ9m{^CwH=J7iKa&&m4VoKs!Z@W;0}{K*620w1tYF@EgTcMV^(Z%1#O{PZh$B;
z`UcG#PGMf~MT|znXc%rH{%?{>f(hF^G^~1uU&wgfb~E6ScVE3m<`f%UaVC<Ate!}0
zkfhNpj>6MYtBCMIQwl|$nxRr!lV>C|3QgZZ&=PUh%GWnlK{t`A7%Id!U&VpWE)=v|
za8U*RtK&kp*iy2UaT5!bSRXP-R60^YXJUeFOzT$c(K;-VAAKNYb$dqoPn2}z;jf&#
zZerHA=fu+k>^XExsVQ2<K;_i~#W(vPNKrX60A+Q`QUqrJ?X70bD=UH9EMKma=JK--
z=}29j_|d$g2PtdgX-3B<J;_4W?^02U9wtj377+I7uFv-jAKeznMWk+dOjB~&NWiYP
z5!-IAk-IVH38<fi&Gosy5@3r31=LN8;_?`R<Eo=Pb=i-RVS8^i?ib0pYCgE?Hgn-W
z^I^R~sE6zjEz5Mkv@P>Nzkkw~dy<u>An)6?4@#>I>7s<cbLOs|%PvR!nZQ2RAuIDe
zv8<NFcUpVQut4H{p~S#_gCwl^+d6IEMWDx}=Fy2*G2S<dK7JX?6~hdnhc@iSF^43(
zScmY55(*)u&pULjH$Wqjr*r4Q>h%c3k?#FYVS9~Bw)ITv=LjZ-J2?R2-6cXQ%IUJj
zO8kC+P3=@o@|FJy*yYw|bUr`gzfY)Pj!WwG)LLjMQZ5mjHXhV8Bk}X%Pg;TIgvT%v
zS_5)g-4dkYJDw##1syu<yr^QN)cCQ|>QAwGCP+r^#9mUV0mc0<V(`yvk)-$=Vs0d2
zU(ReGrPWQ8!uMLx_-o6oKneAcVYya2DoresI~>s}<6T)KQY21Gr<;0hWJ7z&2cNWG
z2P%b>^_-eBz+Hp4SwF)|R7Tpv^OIyERDCH+KT9wZ=vKVzi&V0=A`th?6#f-eq^8H$
zto3OQ33J?*3}uh@)CgC`_=_!sq2OH{ES`}lV(_p1p0wnfO!=FqMk^Qxb82@VRsO~J
zn_`a9E~^h5uJ}?O<bn--H8$QW9pO(qzb23*Ah@Kn4%%(I+Xf<a)|{&2CZ(ADnH-3*
z6WJwg&>9t_?D}#>iL+{m;bS}+foLbusVD81Lz!~W6wB-+5j%1bJ4xrR+h_}&ig+vW
z4Cc`Ui~J+a38WhkM$<+kno_zq`4nXTCR+PN`0E|xN**NMSn+B6KzGF%gXcO0Pdu1Q
z;PMAqg7x&GOjBt?FP(D8B@$QZv;mi`Mrm9r^)mY3D@G4E=YuMeW;H($T(Iqbdp-b+
zyX$#@mSDMo7O+uV(@FQ-{fKH7^yV|8BDYAVGB7Jl)}&6;kPtQczNha_icC2;t8wB`
zqi9o@ElXToP>9ni-w#xR@>eHm<KJP;97kKlvd2kNoxqcShcBoFB9606e~c?|(Jvd9
z3i8s8kx-z*pCVF>EIsumo;$<U;X5z+G6nVRpoGnJ_yz^J96`fIE1T|Y+AnR@!~_dm
z-!~SYz&$}h8fwX3eLL3enijpkJ5<c?{|lRchj<y}^{f4ssr49`r3O`fLYl5R)n}`*
z3;2vkOBa$87$e{Y!qR8UZ(Sl^`~TTi<JMy(HnT~lr=h~~o6w!igvij{)ckF-GVbtB
zzn^1bzzP|DDT>Acf9x<jo5+NT5va9goPe7fw=+knR0<zox6%O7C{~}ta{ZWq8Ijoo
zv-Ib=y|W<*y9AjO*rmVh$Txa3V%zK4C+CgQv0vLM*6nc&A<58)yrv2T9^pr;i5AiH
zw~OAwi2t6o95IXWE+Vl)N-HPbKMrlJUl6kX*~?Z6>|E@TeBuJ+>WYek-oc{-PutZy
zp&&Ybgp4hTM9M^+8~WNtjQ*2ShCwG~HqBug17b+1UVV^RqyN^oy6%PD2@!L@5d0On
zw;@}!-@F68oW^(ou|C$_P;A7EhwMo>GWP&CKnh>d4($$9e5N9QoTX^J`#SJI^8kcE
zL|>UX$`;#C>pxlz95kUlvB!;Di#BUUx-T(RB-Q!<<Q_@MVK;K#xQ6ew0;g{M<qZGy
z3??Wemt`$fLN0jq)`11v3)MP<LEPrhkVG!|tG7?85hWueMIm>uSO?@;t~Z($J0#)f
z1h#^>77>K$v|q6CezSDsDGdn_ToZjLa~f`9x~JD_lG-N?vm!A=#q(0nuxa&tyE6B7
zn{EO_v2ih`brs;p$qZ?mY4Zw7udzc=?q2>oC_a$(bHH}YrWGac7c_qXc1Si3GDuk8
zI$FD_U(08zBOnG#3eGUiEIBF5{u*Xo%<6SK%3Y$5Y*KXuqX|1Z+_+U%xbp8kIqt}t
z{A6>GBrCU1r}=O2<n#ODrs%j~FYDt6I`0K85@>Dgf6uygM9&&)u#y%JG)NJCkRJ_*
zRQH^Fd_LGP8h*u~GA^(zO)s>^B{L%^We>akp-Px#U*0|<r=64D9`RL6!F6trU}K+W
z&qsa7XM~8jIFQlg7(`1Jdkg>mRf2b)r4#0kn~=s1rp_`sTOmFq%H!#jik4*C?e*0B
z#Fb5?GM5vK8hb{Q2WMi#{?+fFHn{aM@GYJWpjbN6mKM#jq2H*{Nsy}6VnQpYaby-u
zK_-%&XiHXen<EQnj%v$_GiET7aIL^80AL*JBScw=$x*!G>C1LsG%9Ahdjzx))5Ccd
z9{zI?FpMq`Pelefa5dso8MHRzK`_$!jju&Go+ARL^>k2px3);9r4@(&R1dIm9k}&4
zApCX`zL3_qjfR7CsKuGc*8eB&KFaXtGPJvT+`!TtvN8y0+-K99x1r+DT&$vh4dR0~
zfHV%4a8dFTYwqXt$H1wP&FClz2^G;5Nog9W@H|ta(hth$+>(Kx?vH}0CEq7kM^H@~
zaW(PuaCuDXAvm@rW<Kkr&0-Lfu*xdOYUW~g;v|VLsbl)Jg)4Nn3uH~~Go&*tIJ`_E
zrKxb}{|r@)9&`*04{kx12f8H3S2Dyrp1$RIb;PBcvL@2__iKVtrKm9^R2|x2W*!9j
zr(ogX%LFXHf5{s<P1#Q`S^}HB<qbApT<DCA(@~|dz2JODgiAJ$Qma039;h*6-~5Y!
zXiB;wG>E;O`dzblP{Ix@@O^@TV5u%Veln)#8LfGksUcvAVhMOa&NosoPmw>XMIrae
z->vfP<p+DVCGj`7#+6-VEJ2w`O}`7hkD77nl0_O&HizZ#nD}an@fMu+{{(0+AjB@Z
zveY-)@03f_3J)Ya%+PV@&EKpYq-*=J9w4F~2WRXrzl<-0!6g8xgjOgy^yX9$8P_6b
z1}{#XV^?Kfd<(IBzo{P)7N4PZx-RJG7wK~C0t61xL@pJUNTA*3d4Je*uLFCCb*29G
z&+?9pwg?PioE?V{(nso%7wi3v1#5BBPgt#t8=1;qW7$<{4YO!kcAU2t*UM=Cr7Pu_
zu(#obH8)Rjp`m}p0NiryPH1rNbHp+gJNx?@%Ga}hkznLCrnU&%7W}UoEr^4co6b!a
zQqFdv?tUW~@W<y2bh?n--={dz64ywEiRYYg{XxD(I9L^V;7rRv4A*>NOmxOmKaTK4
zJfrVs(lR^LdpC_9&$>xR!ffxXuNa}%_K3JPVLECcX!oB0G7LF3Emw+}M8tR4oE1-`
zzoyLHn1qo2LnYSC9sivb`Tg=A5YnGzpR2k2#cZ=$jXD)mI)gA7-e5vIG$x94Z%rzX
z{dK~0^VRDBM<FOB(esEP!C%qSKTAg5F-;|R^7Ho!<R*mpGtmlV0m_@Vc~`t39Z^%o
z2x)PAjD&8ca<jjtP$eU0#?xW>_-gP@W$PNxO~HhGQc!EDmsh>aRJ3c@V!qC|e#vn;
zEzUfeRLnbquryzR?y1!Aism#%#ik6c*)Ux8zCzq-hR^-4;`P9lt3N_$!@QPro&B}H
z6m{HOcB$8a!G@rRfCb>9KUwS#6I!xwhM@1#7Jm~Ut)-#FX<1?H1^eK1Cf#?}hBDF6
zg_*dYSyDTCQ$}`Z#ow*<Rx4vXWchZeRrlvxnJFiO7%Jz$cLJN?Olksoe!utfjRe?1
zE2?M{soU8j#z$qjQO5?_vW_t*(v|AhMq_DLnx%e~!j&jEF$=s@sK)t7OztCPt<2cd
zKNlF5M6Tx_1HvjTK0WSdhJ=5PDwXQ5{~$|Tw_1mZY^Jmwp!HkZn@yZpFx~krqqqnq
z9RJd(lL%J<ioiN0=uurDB}sD1g42|H0%Z5Ye|5fCVufYy;^=0;*xo4dERgV<|MGcb
zD&zbiWI(P4wX-7mX(Iu*`GG4V1-%T=nkyP}LB$sCRW(0p^6`=e#!Vj%X`0~4ns@n>
z11OF-UFTOx4H(URe|vpMhMdMsg>tGvX~!d7cK(@FjUi`*Cel-oTEfQ54OV2K?*F8N
zE=aayX=Yv=V{lx<y;8uI5{CB1p9X3dFY2W6U!4W>SN6T?sb5|zBc4^XZXNv1c+(wF
zH|8(zp|U86bwr%!WG{<-(S6#HNF(da(!I%lHb`hBsd%+mH*8KmQ<e(Ir(v;su|Zhb
z6d4?Z%q2TGKgTtwc0LPyX&DGiUG72Ntvla?ykVAl8VQzbi@nRYD>lZPh_U~fcknY@
zq#>$)HwMe7O{evlM(#Q5;XR$AM}lB3AG5ukF^!{R`r}{$#t0;t^;<&C(6}r{s;tR(
zT;`Ig0ut5e?P~LD=o^8Av6_gd8M21!)2&qa^N)7$w<0GUF`0#Mo6>@7)dcpu!D);2
z^-tmHQ`7;90wOB$t-aQ&qIw+?hBonE9uKZ8@u;_4M>zwwqAlsIRexjd809eLI;(}!
zQMgG?J1K@2-iAO9D5y|07fz2I_jbObgrAuRa{3Ns;+!xx{pEJvcOU)Stsj<y*iu_G
zSRKB>ebZ;g`~6xM>l^(k&dm&f2y;bswrq<n3O@Y9x?`19VTJb&1<2=<YGOleR=q`J
z&+t&mFaH34(EWXkj;;<_Tjij<JC$WGavmVTdh$bMAx;~(nYcrUl9NpMwyy5qh!mkP
z$<Bl*QC;TO&<zt63tciD_SD5a7*xq&n}HK1OhI`9M3@O$!|IDzI%K;yA6+pmT=eWF
zeN(q8Yt-awojLr~FquM!O95LHyIE_IQ!zHC*_LcN{`>+Zq6<6-lMvx6`^aJTZwmgi
z)75JJ?<b&iRx*Z^bM0Q&tivn!C})X8BuRf+e6_S5mld!MY&r1vCm%ebYlzdf0Uk`;
zb`C~nf2J&l)U#14!N|CYJuT>M4#==M8&u0JVZOl2>)&73W#$7c#_diP0$uZ>n95}E
z3rrbAO+SH-k)wU|c}`3B-pkxt#e-r>T&OCt2_(H7OCPS!dn012U*!=e0(2O#7B{oO
zpHgoJ_*y5vN#k%Wmt}oQ$NgsJ-`&B!o*;AebCsj|ZED>Y5z$7wZ5CH_&GxC}u0x$~
z&zK^%9VmZ3;ge6I4$Xf^QJmIG+;|W^DHJ`4kha^@?iH>kbobznH$}4XJ&YOrVF-!e
zp8i7DD2ERVhYLGyXkIk$itmY2vG4VQ2V3wYo9WJ%G^x||2KIiKJ${SG%FW$J&yDUV
zXw>H+jC$DSR%-<FDA6mxiX^d0qX6p!r_ZdiC{rSc<Q>|ccIiH^9ium764nF&ZTc*e
zcVwaA%~;t=f-r$G8c&^pWUs{K;qz$Ibk2Dz0HktcwB9;Zn~bu#01MqTmoX;O)ISG`
z*G^t~q>af%G^5Z@^u7GZ<|2dmgC^0~iLh9>2<n#3{lsUHDXFriT7t3}@l4G@wc<Bb
zmU4W&0}~)ues4s+p#{m+;qtWJ#WoF-Uv!dXNHx7w{Y7iBhbPh)EHY|hsv#JwkT8=f
zdwJ9WgR3m&*KsC^9sPDR+B(gJ_UButz^_(37Pm@6b#M99A-q|YKD*LAk<R`C=_hqG
z;LW&|Vgt6XqO=r^xvNj)r$|vCM@n<j&Fz0ABPP-d3K8{u^d9%|Co9EMQs5t-6kf^H
zNGwa(KrTRrnMdTgiVs57=C)MO;+@N1q&&t@gR767yJD6U4B75?hofVjO&ZyV*3kDj
z42k;G1zaC6x3G2|S0YX0jm#9eNuu{O!cEXq$|c1Dw<GOs-U4jKAj|(<<J)@$aDItw
zC)=+}1M1`#B)NrHB8+lIjY<}w`7%7e7eb*SfnWM|1T_AJHKpRh%s!x;@WCL#kvf6|
z1p!tL=rr~QXuYD1$LmPJs-5)dp7QaW*##QY@-*)(Wx;a`N}nPIx2qb{a%Ycor|Saf
zj&L9hT15Rw;&$Ty99_$Q;}&RULT(~x+@DC3TG)%+_CzJ+OFZzHiy5C^B-0hz+q_v7
z7{;k~Ih4}su_0<Ud2vrSpvu9q*pGtY=&BjYyprvoxh%MU?he_RZ`OHgrp1kzl%VvA
zc2otR*;nn)#qDjsT6C(qo1ZdK&*YpcwH(qP=8P!Lm`fCS4^Sc@yFx9*w{bR~`^*xj
zXmFlJ87*9?Mi~P~dCzLJE|5$Ys6yTVT0si0wX}<HqNT5T9Fq?X(nN+mPGl#akZ@7^
z7~XZ^CAIxCYX`<9@na2mLc*{iTV(G*fP|Fkd1G0FKr)HK-MRo#ln)R-tAg!GCX>|>
zYUXXS^PT7(G2EMhu`Zd-Y;(EueTh6DKT$=Q>e`2FlqZ<RJ&*c@M%2EW6p>wIE2!DV
z(BhIuj;z9=Pv4^um~=zRIpl{~wb=2V76g!<!EzBWe0Iu5N{eywyI=lGR0|;I_!786
zi=#LLHVHsVl)+IBZePOf9bkPLtfB_($Ogw%6qF)*kx{x`zz+)zIE4q&j9Uv$yy{vH
zGJD+Xqv0Pps2v~E%ld-|=9L$TY~B1Y<IXSzf9Td#!igz|Ls+Z?$R_@t4F2)Fc4Qq!
zMft&R3KM9_%JcdC0paVfe>ZJ=z3Aav%bsi32;yy0DVAGe4S6Q@A^NpS5*y+_UF&WA
z23TIVF-0a|b>)!DNPavgb%pHgc4sDImK}*sk5x<V`QfX)rtbLoCyds69sDCa!yhB2
z<6oLc{%XMCbSOd0qW}F&lbjGo9kudX;KTl8jtm?97&(s-ZbTno#ZDB9b?Fe`<&0?U
ztoiUQyy7W`=qJWO<b8lYqc0xYOGtYlCLBFy<>E>-OP?##1?&0Im|O)lru8TIMhbmw
zHG>a`Op8xFI*b%4ufq8NUa$}U%M1;BZh8NK#@N@s#aNEVIeC*6e;lHCgL&Uf*p<&^
z<F&lXwe)%poua5Uh5Rz2IT5GH!q;(@%dy}$aGKbD$o;@iTeY4{e~!>nu`JhSU_Im_
z{1`?Fkf9yWA#db2{)77$ZAeC+TQXXs2x6l8^ltf&uVIBuULRWZ7-oZE)6&#f-@Lt2
zS)#XZR#wmkKTyshq>LeEcc+QrXt6qS9u@7%D*J?^|Mt(2F5eWbRN0H14+gm|7C4rx
zvS12TRkr<Qmv9u#Zz3}L6w~vau;2#SZ(&&vA*;}7kv-N6kR#~dSV1Oke|#tN!cpq-
zxXBjlU_;|i{E*Ga?#*fip-XA5T=r^^sB3=an1}EN!FPi%UdR8A7wjgPv&OkrB#s#Q
zf=SurB7d@FqzN9M=ww*Q3gMv@e^V%Z2RC#mLA+(8>JRWjhsf$;nkUf6@T~-M$7y`#
z_g1h}GmTKAT;MCK>}gx9#a*Ou3s_<%ri%Eo<L(UP=-dO(mP(?~Z@0uw#85<(`Nr^^
z5kE~UQw-w!Qm5Xr#OZXrvt|_IY}~WCqLe;|e%SI57ybtpLp$?vY0H3AN~p(gkW}vs
z>k7WVah~rrw)il6rqHP<cCVr+O7dZ3*)L9`Xx#{~QG`=HXaE6(#JLQ8Qp~_6&9UK7
z$VOXU7^2K^78FmHc}G0d`BJkK8ft;^C)V!y_ojH+a`*kjn&*!IERWLym-1qgYSro<
zm6III?3Jt_WlS38a(dBBU*i=5AR=!&Q|`<6H1PuK%%9(D0$=0ce^Yb5b7OS~)P*&B
z(-g3LBLD348CZM&fr;0#BB^zJH#ET}*%GsYUBwZ**I0DjF-C?!kK%$a0OP~$2U64N
zn{)GW3iUjve_<ny_hXO%Zd+j8A!~95P^D^V-ru}X$cxE<L2s%lzvh8~0KY~)Q;C**
zdwh~#R@c!u8lD)GZObfY+f63G8ZX;d3MDEuA;ySPrx9ul7QF25oFXO@b!@4;L8^v6
zS@5KM+-?;10fr!}ZdntIIJt-g&}rq>1<Ww|BOPL+aRH^hlpb}auP7e(Y%V!<%4Geu
z(Y~V8&hwxL{m#Kb?)c*9q_v|qfwL~9+7X6ygz=h-Vx+A*HF>JU%o#J%5K*VuEJXkB
zefConL80u7Bk3@q^#zgvC=U%G-eba@df^J!w$F~tYE|fwEIMQq*&2(S@V7V%A2lA8
zDJ$8aqVpMih%q3I<2=eLPyHNjs1mk3_MJrkL7Gdb1g!9qg1;GS&FC8ytqzAM2WQ_i
zhR1Q_9wZJrl*h>Rbr}<4eDtdiXfQFrd_at!BNP{_7Gqg;%MBr0{48Ofzz*joyo~T@
zrS2GqAtD<Vvb2UhQ#jNSGb`E?%^`LshShgYxSEm!`yRV5Y6JJMD9sj2ue>(~rz~R0
zYlf~mZE%Tq4KPFIAutL<fFbouURiW#21v}CiZ~$Pu8K)%*^EZ8WF`{5Od%vq01w$;
z(t+KC3;h@n2&!bXA@M{d<hd>;7_bfR^pf%P>Sf^i;bb||QS}6O(IO;DiL%5UO2&y$
z%VLo@aef(zf2HTYPky-4UhHt0|FtYR=v78j82JO!+NI$L88^zbqJk)(C2!gu^?YB9
zL;^8zP8DDzK1ZTY!UhevhySq<XY~B#Z)*&F7=8KC^}z6jQOrWpHrL+AA^&=SYl05+
z3;J`Hh=sCP*Sd&~07ZeYL2`%+aQI2nj0=f)j7)cpZ@9c+$-1eOo5)MvGaF3yo}|&4
z<!y%h#|pk@DSXRpj-RHqZ{@C?iQ!-8EU^LyNxXJ8ljgVWy>4T5eq}WNMzX^iQMw&K
z46J~YM1u2!Lvrm=0dvMMg<=r@he9d2%skTO-?kngjiv&u$OwjrB*jaMrrli@JVnV{
zr<<ukoK!77pK^^f-}IHMLVR|+=~dRO(!>QK{LwVs`1rPlav3C6{dDcTw?7@n4coXm
z#us;d2vyB#TVe#}vj(&(N;AGk{FOzGuFtrQRQx^W7_Mfm6G;a1d63%ZF<YzOB%W=d
zVeLYwxuP(0@F6q_mA_FHtyr0b)~e&_7IbR13EqXL5!M#K)X)<&q(t7(>r5<+GQDnk
z30)^i0s!tflh%WajO~>^Q7FC<=uRFpxiQM*w9=LLH)kFzE_|9)I4b;{oSA5~GCr^w
zdAvKW0wzF2nj#&JAt-F&wLXew_z2ktT2ayISrC(j4YF5(8cWF7$5j*xTG>o}(rq;a
zc8Z>MeCM@T455_%BFEy+>K%X=$p1CHX}m(W{*+0BXRfp7cdL`<*(eI#OMJ7X(|opT
z1FE(0*nv^z*m7MksB=^-J+n$d(Wx_nT{!(uhim`O5>}OW;quhI*(nr4FQa@|cwPKq
z0223dc$;g1n!R*?tCI~eem#>7b8-252(Pjo?b-o`8fT<ME-y;Vf$-04t#3?wy0Vza
zT_aFucp-}jPEY7(UYV#bilV{nI)v)=WS<~G`I6~AB+Oygt@)eNh+8C$0dW38g+ZH%
z-Yn%Z;{FdpX;rMiMqJJ6ICecJ^5J5Ov1*wzWO52`?~qBuAIxPZUGFHzI4T`FTO)G0
z46$GOoL73pLhL@9Z1PWT&0pL-&a30}fsIe_7{%4Do$0{9g$4=I$euDg&s-)azi=!Y
z!zfQOqFg=LzVKheE%>8NRe}x>Poe+UUeBA`$dxQy!P(Vh{#^xQGCj<a*K;!fr5IP>
zIvAuP@QTs=m2)mbzHj^~%7k`tQCb67dhbD>^Jm!iE-al=T?L?ki?WBI!%;GAR&V;G
zYuAX0gRkm%Abl1?n{3-q2%d6XT_BtSXlLHNdLOh3)_CEiUx<o6gbJqvcomC%dJC4F
z;?c?ABL#&pF7fMbE6;ZlD#R;SVEP=4S}AHsb(^ZgOOjoe<HX0UU}-I}FbXksxAT0b
zi^s@7pD~FJ_L@Lh{X3^(m|)QmezrDLeEb^F`UKb3ItZJ9;>I7NMNoCgzsZ)BzcFBr
zy8b2^88KTmj6*d5lh-U`8bvnyla{Qw^u_{7Jv7@1zCc20sI2FUYZY(6-O@|KxMkB;
zzEplYH5538a{tD%;I`_5n2IvqAcwTS8m^b;dvSWR@3>sw5_{o!fo)@mG2_(>I!*4j
zs-4>AA)$jO3(nG1`(e48$|WlpN*_uG^Cu6xn1OVx-0CeRK3*w512L+6wH~_ayx{Tb
zXX{Ui9p_6i878Rr_J=&y%qJ#=EH16+Djf-~nuALhIVAFnA2!Ku6?F(dM(LGuGL+C4
zG2hBAm{{u(eO{lvruqJ}=pS?+Y9})K=DBQUd2Xlg<J@MPVVElxhZ;!ls8%o7LpID(
zjjr{U7;C9__R-%rbNxxGE2$H=3<q5E%5pu=Ex;-Wg%MaiN~GmwXjY2S;Z(d??i#KM
zpJC{p((U|<oQ)gMnnz?u0I9`gGE)pB2$qi(WTX(Xw(;3rKwb-@yNkEM8i_b5g#0EV
z{Ii_<dp>gX{G-kL3iU|?ODBUI$QJb3Bdn`7HOLPX$GsUWk;b0MJtY|=vu(%{D(^D@
zm+?8p5N%CO1BG0Nl_d+Cm5QeuU9hl_yT^_hoAP=L6q)FmKX3+3Yp_PWjHq5^<+Y{|
z9W9AG=`Bi?+A|iacd+P-GPNGwc>H#?uhF09f%GOH?MOx(A5;!#YUGKmB+Wj(6qHE!
zeP@!Vm)uQ?NvMbe;CK8K#WkEM=5Tn4^{q6xESG}rO~6!cC@2cOLk{k&FbBNLQY+?z
z7mR=nx%_O?in#y=%a;jB*(&|X9t74_Ni7mMk}yCMw(oR{If;xUtHClNx+^I>LG|Q#
z8a9sq=SN#mc+ziX_L!=%L!u_%4?eD$j$Q{D*O!^pCIDFqu9aqlym!)XJ9(lbd>$ML
zY!M{OzcRP1SnjgCO`G$rtl%uUckW*t;`A0MEUfktyd*9Tp`nao;2J)d!Cb?(96OQ_
zQfJ{wOa*;qCl9=ZII#%es^cjSFw@e6_@z=IQVP>Z=*P8k!+i2=S1yjUfYQRiNYngo
zKlU$3rCIxw3l6dFmSD?r+7>SJO%fd3FeW-1xt&SY*6FIcA%5f4>NL%b!`|W9fqc^3
zH1-PJZgepTYY~}SreK}U@?HEMqruLKh!t@xx-6L<gLx=H`nVLMO<KDw+W5VwRy=`X
z)zi159QhAR<uwa#C9rvFiqVgiK^)=ondJilVJYDPnCxnbhNm$wGU7qE&F`a4|0iDx
zp!KWmB2-X1E1VX{zNbae=WP!7p1!C8xl1CORJZYXai(E|;$^llcv9faBydkPh?uKT
zu_VsprPYZ%i(Q%0gV7lU%w(O3=8SM5)BLKjkX%T#h6E-$K?q*A8*;6$9?+c(k|VMr
zt=lywu;xL0(~aI)C-PJ1NG4$T*$4{Wsf2RJc*4@_k=pYzSO^4xAETKu5^W_t36#~Q
zjd?sDSb2w#0|AT3FfjuQL=(`o5lQF*!A}>ryh|KMA>x<l#XrHy#JlUadZ{S}eu*wt
z!kBEYgh49V6l_8!@cjXgR}`5v#`bsNLLqaP)cni**jfb6{zpgw%99lSu{#P16;4uw
z45>ot5OG&OqM1+N8znO0&@g6odJt38CnmLKAQwPqkdlNDQ%P6k(MdSgIJ0JlaZ<*v
zj2B?fas#HG!lRqh>0+c`UQqkceLw<N1WR@U`j0YrRVHm#1i`7OBQ-NOc_-3!oW3KX
zxUGe;+1BaBI27acK5CIRLZ37>{dBO-oi~iUJIM|4<Uql{FCpDPTz~?i^)q{z5Mx&W
z8R;1;v)vuk<XT3uq=ppK`SR7l!66@libyFwT<bp3jZf3yC>r8qe)jY%oRV>0%m8@J
zQ!+740fg(lUyNgWc?d9G#_NWA7y-66Y+eWpnG5nT1batGkjF;VI>E63V=Yc)U`4m}
zZ=3>bS*8!A4BS4>j{blK6iI)J{K!4c_6Pfx#27G!HLE}|J<m4xNE_-fH|%4GB1T+d
z3uY>W5lpV;VuFm<^i;|y)y;~Y!5bwq9&aP_TG1XvNfrA0wEDqV#E0xLyP=1O2FQkM
z1IJvn8z!3QP1Ouh8!NDjaxV=?820_4;Q9h({&a^lOXmOuhzMy!szDZ$W8qD?5-mGe
zqD`YLLvF!Lj{p~5hon}6MA#0-#L8|s1xPMJW7`(8oP*%tLQ_^lW~w(27;wWhYkp`)
z8`Rj<5*NxNi(7(7MHT#wDGDagk%13jB*a0?$I%Ozu$AGUx9an_+2CdB6)6)TA)<p{
z=!sMY^OGnGf%50sX(1vIDHSg-z{N2EZ~{ztKLxcbj6~}#$pm#vKpH9&iDAFc+$<@*
zWW&?&5(Oe6^F<Hsy#hY}l_?|zmAGjNFoWlip_*!!0jP*`K%@2?zV}ru$ZC2P*EM_X
zq#oRtzR6N8YZq;28ngJw`CVbx*1%t#OfZ7>b&kV?Z-Oo(h7x9YQe0;lhx`GYQzXlA
zr2I8NP{96N?V-h2dZoGJ%y2BWbjd8(SY-Z%X;3aemQEgz5~`tAm&OB^Vx5P;QKiB|
zB8M{+!3r=}futUZi$}RXqk+oG_5|Z8fFso&Qa2<d+Z1K*_RemHfP*Hi7L&LH2C@W1
zsTqcJlUy#8k66+7F|CrbOZyhZQ(_cYByXApNg(1ISw>+PSplWR4~ryg|5ZmxJ&FfR
zQ%*Q4hVO{8fO8?dGaC!p*Ydgq*&sC$4A706H<pA{Z8TZTV1!vvqdc&N_o=Iy5f4o3
z^d?+V!GiIlI;^<^md<RzSu3;6FJu9SmRd#{FHpe_GfP*_%POE`)t4SR%4#LUY0p(`
zh9q+k{bcQlvl`WBhEVgt^1%)~PEjM`6cn(~z$YxkG82p7;h2t|8C?J%u*AtFoVL^)
zXAr+Wd}NzOMN@znlNd2zP@36d$6&X3!X0JF8X{Vd-RT5v)7wNkW?Fm@F#)ez7Nq*+
zrPly?eMCBtF8L6;K^?q^Sw`)Z!6*sF*t{>6kcx1_Gj}+xr8v<P=i_1=PfaQXwne)`
zDLBoJ`b__A={yczy|FID7abiv8-h}LY)gaUr=~n2pj^#7tc*oah`<EEH>kZfyujJ#
z8V!USGf(I&Hc;=Cb{G@(PIfREv&d8TP>Pu9BAd)3LV#JmMJiiq5qjXnR~Qh1*z46=
zP|b??)vAf!$kY*HPhq!squay4*uhXu9&u_aAoHaJyu`SH3X>pJwlW~F4$QdJp@JQI
z4clQ*^m4@-l`#EnVxT_>E#-k5AW@mlw`=y;7SFphexPY@ezlB@jAbQIuhx38fV~>4
zA3<xznq63+p4J*k!~zW{+(8jgq-8SZRy4Ng+2Um@KmQIo(ZM;_k3y1WGDHexWkP^N
zENz)~J?#+&%*5q8b8<jwcX3E2W}Mt+HQG<2LG;~;8dV(`yfQMW#Ir-5`an!)mVjg@
zP`0%S7_oB&(mrN@yusRHLJvoV${vJfhc&z)4rItNVb+|QLLjeVW#lCyEj4&T141+w
zAZAb~GQ|K&LA?7f$B8c)5bzUZvH9X^bmh}a4yS62{`giohCl?Hyq{y~4ix#as77p)
zR*0%ptg*s%)YQ-`F&Z3!+yuDWPMI`MXqsyAdoEy6k&NO#!a0T#2HIvYUOkkXUq<Cj
zg5$we5drDkp&V#K*n)&$31tTQkNhg$?OOTdA>oe^g!XG>lG(2bSZUrr`5D2iosd?f
z6?$HD;00LlPU}38pvTRQB$JI0V(3_qGK0MBnKzOO>W)h=W6>g2f@Dg*XTV_k(m}dg
zII7U+N4{93g}IUMZA=aAq9%Q(2uYEawUvFLmpEYXj;3iSHx>e}b%oGm`))iihXenR
zDg<w9CdO^WPFXqTC0ZP3A_b9nmN9@97$xw8pm4Eb6P{#g#014T!cUx4$?zpXHzx-S
zn0t%RNkQ%?)Ycp5q9P_WwN-39vbwM)g#&P!9|0#4S+JSy5q#{QpNa9rGZr>X`iOu9
zNg%H?p*^squ!b08fV!%n031T$V(lQmqT(EyaDhZUTS(F#XM)fHT#?0OV?$97=<h|S
z7?p_J(#7S3l%@wU05cu?b_8O;%s!fu46qd_=~Cp40)E;-03pEPQE7E`%PF-u7D6+y
z2dI@$HA8$}M<Za_Uu3hIc2w>ZkxCQw7unErOcb(O;ZHZw)6p9L6!&<W;2=`Qk}|>d
zjbP)NW76i#&WlzzQ%A_THaYgLRZKl`Y=Y1}!E-$|c@lyu8sBKkm{ex*xEXaJGI@^o
zSO%4z42#=VnMe|kkx3yGfC{=nSmP#)%e8D1Xm_ji5G`La-LqpO9cS#isWyemLINQG
z3?7ycs?4cV0|zIq*x>87Oi2_nMrVGF&q7&QDG<Si)fy^H1c7T7AW|q;kGbnvh`_O1
zHfND!{9P|`khq-;Nba*O4PIgC)_&JBCY*0NB8hNl@bxyhaEGF4sy)s(rC-F*>>8=J
z7Rud=(Pv`xSj1r7`FP31R0Ik@9`@8SWl($VxNI86$Hm?wgJ_yNtUhv4hlseR)$y$g
zQB3}%mZ3P}y2rHLO9(s-M7uS)E>gz`aboiT=f27ohc-dlAC^+L14RzGajTD-Ru@qS
zS;Qom75v9j67BR@G*Fp~&dW3rk7ke&gt>_7wJA`Yr$^=U<uX(AOf;WhfiZ$44>BLd
z=vF-f$l~xs&JbQgGMo}Dw+2^Yl{W!T?N|_$k@={|nvX&GIm1ReuCRb<Is~t60PL<S
IUom;{LMqkD>i_@%

diff --git a/static/fonts/roboto-v18-latin-italic.svg b/static/fonts/roboto-v18-latin-italic.svg
deleted file mode 100644
index 4d59797103..0000000000
--- a/static/fonts/roboto-v18-latin-italic.svg
+++ /dev/null
@@ -1,323 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1135" ><font-face
-    font-family="Roboto"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="502" />
-<glyph unicode="!" horiz-adv-x="521" d="M305 411H141L310 1456H500L305 411ZM67 90Q68 137 97 167T174 200Q220 202 250 172T280 96Q280 49 250 20T173 -12T97 15T67 90Z" />
-<glyph unicode="&quot;" horiz-adv-x="645" d="M393 1390L310 1042L200 1041L280 1544L416 1535L393 1390ZM655 1390L572 1042H462L542 1544L678 1535L655 1390Z" />
-<glyph unicode="#" horiz-adv-x="1233" d="M707 410H457L307 0H163L312 410H82L106 547H361L489 901H241L265 1040H539L691 1456H836L683 1040H934L1086 1456H1232L1079 1040H1275L1251 901H1029L901 547H1117L1093 410H852L703 0H557L707 410ZM505 547H755L884
-901H634L505 547Z" />
-<glyph unicode="$" horiz-adv-x="1126" d="M801 382Q811 468 758 532T579 644T377 754Q229 875 243 1071Q254 1235 361 1342T646 1473L685 1692H831L791 1470Q939 1441 1011 1321T1069 1008H890Q898 1155 847 1233T695 1315Q582 1317 509 1252T423 1075Q414 989
-460 927T644 811T852 697T955 560T981 384Q968 213 854 108T550 -17L516 -208H371L406 -15Q242 9 158 126T85 429H266Q255 298 313 220T490 140Q617 138 702 204T801 382Z" />
-<glyph unicode="%" horiz-adv-x="1465" d="M525 1478Q646 1474 717 1390T781 1176L775 1099Q760 965 670 880T454 799Q333 801 260 887T195 1099L201 1163Q214 1307 305 1393T525 1478ZM330 1097Q325 1016 359 969T458 919Q526 917 576 967T638 1099L647 1177Q654
-1253 621 1304T521 1357Q452 1359 401 1308T339 1176L330 1097ZM1070 658Q1194 654 1265 569T1328 357L1322 290Q1309 149 1219 62T1000 -22Q880 -20 807 65T741 279L747 347Q760 486 849 573T1070 658ZM876 277Q871 197 904 149T1004 98Q1074 96 1123 147T1184
-279L1193 358Q1200 433 1167 484T1067 537Q996 539 946 488T885 357L876 277ZM360 112L261 184L1142 1312L1241 1241L360 112Z" />
-<glyph unicode="&amp;" horiz-adv-x="1245" d="M71 384Q86 570 293 716L407 792L364 869Q292 1001 300 1114Q312 1279 420 1379T692 1476Q827 1474 915 1389T995 1176Q986 1004 782 861L635 763L884 382Q975 517 998 672H1159Q1132 417 978 245L1135 0H933L860
-113Q686 -23 477 -19Q288 -17 173 95T71 384ZM483 131Q617 128 767 244L496 668L453 638Q274 514 255 383Q240 275 303 204T483 131ZM478 1121Q470 1037 527 936L554 889L707 992Q814 1072 825 1177Q831 1241 790 1283T681 1325Q598 1325 542 1265T478 1121Z" />
-<glyph unicode="&apos;" horiz-adv-x="356" d="M374 1418L298 1057H170L247 1536H393L374 1418Z" />
-<glyph unicode="(" horiz-adv-x="689" d="M133 587Q166 818 255 1037T475 1410T765 1644L792 1520Q635 1403 523 1215T349 767T290 255Q290 48 343 -109T498 -358L453 -470Q286 -354 198 -127T117 393Q119 489 131 576L133 587Z" />
-<glyph unicode=")" horiz-adv-x="701" d="M547 585Q512 341 420 124T200 -243T-85 -471L-113 -356Q230 -98 345 473Q391 703 389 916Q384 1345 181 1531L228 1643Q340 1565 417 1436T531 1135T564 779Q561 682 549 596L547 585Z" />
-<glyph unicode="*" horiz-adv-x="866" d="M384 987L107 1077L175 1221L453 1108L504 1456H654L584 1112L887 1220L906 1061L591 970L738 695L610 607L479 897L257 617L143 715L384 987Z" />
-<glyph unicode="+" horiz-adv-x="1136" d="M682 781H1076L1045 606H652L572 146H390L470 606H76L107 781H500L574 1206H756L682 781Z" />
-<glyph unicode="," horiz-adv-x="400" d="M-9 -291L-113 -216Q3 -73 31 68L57 219H234L213 84Q177 -144 -9 -291Z" />
-<glyph unicode="-" horiz-adv-x="558" d="M500 543H25L52 694H527L500 543Z" />
-<glyph unicode="." horiz-adv-x="533" d="M164 210Q213 211 245 180T276 100T243 21T163 -12T84 15T53 94T84 175T164 210Z" />
-<glyph unicode="/" horiz-adv-x="829" d="M51 -125H-113L751 1456H914L51 -125Z" />
-<glyph unicode="0" horiz-adv-x="1126" d="M472 -20Q288 -16 196 110T112 475Q114 549 123 621L159 864Q207 1175 342 1328T698 1476Q884 1472 975 1349T1060 990Q1057 915 1048 843L1013 608Q960 279 826 127T472 -20ZM873 876Q887 997 886 1064Q881 1318 689
-1325Q549 1330 463 1222T342 881L299 591Q285 475 286 402Q291 137 482 130Q615 124 701 228T825 558L873 876Z" />
-<glyph unicode="1" horiz-adv-x="1126" d="M604 0H422L636 1228L249 1092L280 1268L820 1463H852L604 0Z" />
-<glyph unicode="2" horiz-adv-x="1126" d="M950 0H23L45 141L582 663L680 760Q849 929 867 1072Q880 1182 824 1251T666 1325Q535 1329 447 1249T340 1028L161 1027Q174 1161 243 1264T426 1423T673 1476Q854 1472 960 1367T1052 1093Q1035 901 831 689L739 596L271
-151H974L950 0Z" />
-<glyph unicode="3" horiz-adv-x="1126" d="M416 818L536 817Q668 817 758 886T862 1075Q875 1191 819 1257T656 1326Q542 1328 463 1260T365 1075L186 1074Q203 1254 339 1366T665 1477Q848 1473 952 1363T1043 1071Q1034 968 964 883T770 742Q869 702 918 616T959
-413Q943 216 803 96T461 -20Q274 -16 163 96T60 385L241 384Q235 272 295 204T469 131Q597 127 682 204T779 410Q790 529 725 595T531 666L392 667L416 818Z" />
-<glyph unicode="4" horiz-adv-x="1126" d="M857 489H1053L1026 338H831L772 0H590L649 338H5L26 457L826 1456H1024L857 489ZM243 489H675L805 1205L776 1163L243 489Z" />
-<glyph unicode="5" horiz-adv-x="1126" d="M219 733L404 1456H1130L1103 1285H533L421 887Q531 952 659 950Q840 948 937 814T1016 471Q997 247 857 111T508 -21Q334 -19 227 91T114 384H283Q290 264 351 198T516 130Q644 126 731 221T835 470Q849 605 788 692T609
-784Q536 786 480 762T367 693L219 733Z" />
-<glyph unicode="6" horiz-adv-x="1126" d="M955 1458L939 1301H904Q704 1297 562 1177T342 823Q478 959 660 955Q775 953 857 892T977 722T1004 482Q984 261 846 118T505 -20Q343 -16 239 99T120 407Q112 512 145 691Q214 1064 417 1261T935 1458H955ZM621 802Q524
-804 439 746T308 598L301 531L299 450Q299 368 324 291T398 174T513 133Q634 128 720 223T824 473Q834 563 813 638T744 756T621 802Z" />
-<glyph unicode="7" horiz-adv-x="1126" d="M1146 1342L355 0H157L944 1304H184L208 1456H1164L1146 1342Z" />
-<glyph unicode="8" horiz-adv-x="1126" d="M1064 1085Q1055 976 987 889T800 744Q894 690 939 600T977 402Q962 209 819 93T474 -20Q285 -16 175 97T80 385Q91 510 168 603T378 755Q300 809 263 891T233 1067Q247 1252 378 1366T700 1476Q874 1472 976 1363T1064
-1085ZM798 406Q810 519 750 594T576 674Q452 676 364 596T262 388Q250 272 310 202T482 130Q608 126 696 203T798 406ZM882 1082Q893 1183 841 1252T691 1325Q579 1327 502 1254T412 1064Q401 960 454 893T605 824Q714 822 791 894T882 1082Z" />
-<glyph unicode="9" horiz-adv-x="1126" d="M823 640Q749 562 666 524T501 487Q386 489 305 552T186 725T160 965Q173 1109 241 1229T418 1414T660 1476Q834 1472 933 1350T1040 1023Q1043 916 1015 757Q949 383 755 194T255 -2H210L226 154H263Q478 158 615 274T823
-640ZM539 640Q630 636 714 691T852 841L860 914L863 995Q859 1150 806 1234T652 1322Q528 1327 441 1227T339 975Q332 914 341 851T377 740Q431 643 539 640Z" />
-<glyph unicode=":" horiz-adv-x="491" d="M410 210Q459 211 491 180T522 100T489 21T409 -12T330 15T299 94T330 175T410 210ZM307 1093Q356 1094 388 1063T419 983T386 904T306 871T227 898T196 977T227 1058T307 1093Z" />
-<glyph unicode=";" horiz-adv-x="430" d="M284 1093Q333 1094 365 1063T396 983T363 904T283 871T204 898T173 977T204 1058T284 1093ZM3 -291L-101 -216Q15 -73 43 68L69 219H246L225 84Q189 -144 3 -291Z" />
-<glyph unicode="&lt;" horiz-adv-x="1020" d="M263 640L828 387L795 200L65 579L91 725L952 1103L916 898L263 640Z" />
-<glyph unicode="=" horiz-adv-x="1100" d="M994 814H184L212 975H1023L994 814ZM922 399H112L140 559H951L922 399Z" />
-<glyph unicode="&gt;" horiz-adv-x="1048" d="M781 654L183 913L216 1095L980 716L954 571L58 191L94 392L781 654Z" />
-<glyph unicode="?" horiz-adv-x="948" d="M321 409Q334 524 382 612T538 796L619 867Q744 978 760 1100Q772 1194 729 1253T595 1316Q493 1318 428 1262T345 1116L165 1115Q184 1280 306 1379T606 1477Q774 1473 866 1371T945 1104Q928 922 741 754L619 650Q521
-561 498 410L321 409ZM250 90Q251 137 280 167T357 200Q403 201 433 172T463 95Q463 49 433 19T356 -12Q309 -14 280 15T250 90Z" />
-<glyph unicode="@" horiz-adv-x="1794" d="M1199 -20Q1110 -18 1056 26T988 148Q852 -24 709 -21Q593 -19 537 72T493 319Q503 480 579 647T765 903T1005 990Q1144 987 1277 885L1144 327Q1134 261 1134 234Q1129 99 1226 96Q1373 90 1464 261T1566 702Q1573 882
-1520 1019T1352 1226T1067 1299Q846 1303 657 1176T346 806T211 284Q203 103 258 -39T425 -253T699 -327Q868 -331 1038 -249L1065 -366Q926 -453 697 -453Q506 -452 365 -369T147 -125T70 246Q68 463 147 688T368 1085T690 1345T1071 1431Q1265 1428 1404 1344T1617
-1099T1691 734Q1691 509 1626 333T1450 67T1199 -20ZM649 294Q644 123 761 120Q868 115 961 264L993 317L994 328L1127 834Q1075 862 1020 863Q881 868 785 728T654 351L649 294Z" />
-<glyph unicode="A" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538Z" />
-<glyph unicode="B" horiz-adv-x="1247" d="M59 0L312 1456L739 1455Q962 1455 1073 1355T1170 1076Q1152 867 907 761Q1005 723 1053 631T1093 428Q1078 231 935 116T565 0H59ZM365 681L274 157L571 156Q707 156 799 229T906 426Q920 544 865 610T692 680L365
-681ZM392 835L663 834Q790 834 877 899T980 1078Q993 1184 939 1238T758 1297L472 1298L392 835Z" />
-<glyph unicode="C" horiz-adv-x="1303" d="M1169 464Q1127 238 965 106T575 -20Q440 -17 339 46T182 229T120 494Q116 576 127 654L144 774Q191 1102 374 1291T821 1476Q1026 1472 1146 1344T1273 987H1086Q1073 1293 846 1317L813 1319Q624 1324 498 1179T334
-781L312 630L306 542Q300 358 371 250T584 137Q736 132 835 210T987 461L1169 464Z" />
-<glyph unicode="D" horiz-adv-x="1313" d="M59 0L312 1456L690 1455Q868 1455 996 1366T1181 1121T1214 770L1204 697Q1160 379 957 190T447 0H59ZM472 1298L274 157L459 156Q671 156 818 288T1010 650Q1045 834 1034 963Q1019 1118 931 1205T695 1297L472 1298Z" />
-<glyph unicode="E" horiz-adv-x="1139" d="M976 673H364L274 157H986L958 0H59L312 1456H1201L1173 1298H472L391 830H1003L976 673Z" />
-<glyph unicode="F" horiz-adv-x="1108" d="M951 643H359L247 0H59L312 1456H1188L1160 1298H472L386 800H979L951 643Z" />
-<glyph unicode="G" horiz-adv-x="1363" d="M1147 192Q1074 89 935 34T616 -20Q473 -17 366 47T198 230T128 502Q121 621 157 824T285 1175T512 1401T825 1476Q1028 1472 1148 1356T1286 1028H1100Q1089 1166 1017 1240T818 1318Q630 1325 504 1183T337 768L318
-628L315 552Q315 355 396 248T623 138Q834 133 958 242L1018 569H690L718 725H1230L1147 192Z" />
-<glyph unicode="H" horiz-adv-x="1426" d="M1146 0H958L1075 673H364L247 0H59L312 1456H500L391 830H1101L1210 1456H1399L1146 0Z" />
-<glyph unicode="I" horiz-adv-x="550" d="M260 0H73L326 1456H513L260 0Z" />
-<glyph unicode="J" horiz-adv-x="1106" d="M910 1456H1098L923 425Q894 219 756 97T412 -22Q220 -18 115 94T22 402H209Q198 282 254 211T422 137Q545 133 630 214T734 424L910 1456Z" />
-<glyph unicode="K" horiz-adv-x="1255" d="M544 675L331 484L247 0H59L312 1456H500L376 747L1118 1456H1360L683 804L1136 0H927L544 675Z" />
-<glyph unicode="L" horiz-adv-x="1079" d="M275 157H945L917 0H59L312 1456H501L275 157Z" />
-<glyph unicode="M" horiz-adv-x="1744" d="M549 1456L804 270L1472 1456H1719L1466 0H1279L1379 576L1498 1162L838 0H694L434 1185L344 557L247 0H59L312 1456H549Z" />
-<glyph unicode="N" horiz-adv-x="1426" d="M1146 0H964L444 1130L248 0H59L312 1456H494L1015 321L1212 1456H1399L1146 0Z" />
-<glyph unicode="O" horiz-adv-x="1376" d="M593 -20Q454 -17 352 47T190 235T125 515Q119 636 152 814T266 1135T463 1364Q620 1480 821 1476Q1034 1472 1157 1329T1289 940Q1293 835 1268 673T1177 372T1010 139Q834 -25 593 -20ZM1104 894Q1110 1091 1035 1199T812
-1312Q678 1316 573 1240T400 1013T314 629L311 564Q305 368 381 257T602 142Q791 137 915 278T1081 676Q1101 802 1104 894Z" />
-<glyph unicode="P" horiz-adv-x="1263" d="M346 570L247 0H59L312 1456L798 1455Q1023 1455 1145 1336T1250 1018Q1232 809 1084 689T692 569L346 570ZM373 727L697 726Q850 726 948 803T1063 1017Q1079 1140 1012 1216T817 1297L472 1298L373 727Z" />
-<glyph unicode="Q" horiz-adv-x="1376" d="M907 76L1124 -133L985 -246L731 -3Q657 -19 583 -19Q446 -18 342 47T181 236T117 516Q111 642 143 816T255 1131T446 1358Q606 1480 812 1476Q953 1473 1057 1408T1218 1220T1281 940Q1284 856 1274 773L1262 688Q1200
-257 907 76ZM1095 894Q1102 1094 1026 1201T804 1312Q670 1316 565 1240T392 1013T306 629L303 564Q299 449 330 349T428 197T594 142Q778 135 903 275T1071 670Q1092 797 1095 894Z" />
-<glyph unicode="R" horiz-adv-x="1233" d="M685 589H349L247 0H58L311 1456L749 1455Q978 1454 1098 1339T1199 1026Q1188 889 1100 785T864 628L1090 13L1089 0H889L685 589ZM376 746L652 745Q796 745 895 821T1011 1026Q1026 1151 961 1222T763 1297L472 1298L376 746Z" />
-<glyph unicode="S" horiz-adv-x="1189" d="M877 375Q899 535 711 609L538 672L480 697Q188 830 207 1071Q217 1192 290 1285T483 1428T740 1476Q872 1473 975 1417T1133 1261T1181 1034L992 1035Q1002 1169 932 1242T732 1318Q595 1320 503 1254T397 1074Q377
-925 580 848L729 795L804 763Q1086 633 1065 377Q1054 254 982 165T787 26T521 -20Q384 -19 271 38T98 196T46 423L234 422Q225 292 304 216T529 137T768 200T877 375Z" />
-<glyph unicode="T" horiz-adv-x="1195" d="M1261 1298H808L583 0H396L621 1298H168L196 1456H1289L1261 1298Z" />
-<glyph unicode="U" horiz-adv-x="1298" d="M1312 1456L1144 471Q1110 244 948 110T557 -21Q414 -18 309 43T153 216T120 470L288 1456H473L306 469Q289 316 358 229T567 137Q719 131 823 219T955 468L1123 1456H1312Z" />
-<glyph unicode="V" horiz-adv-x="1274" d="M574 257L1165 1456H1377L625 0H459L164 1456H361L574 257Z" />
-<glyph unicode="W" horiz-adv-x="1772" d="M446 449L442 273L510 445L945 1456H1104L1219 432L1229 266L1292 467L1664 1456H1857L1287 0H1116L990 1069L986 1169L944 1053L480 0H309L195 1456H378L446 449Z" />
-<glyph unicode="X" horiz-adv-x="1255" d="M666 899L1091 1456H1323L756 725L1095 0H884L626 567L188 0H-44L535 743L205 1456H413L666 899Z" />
-<glyph unicode="Y" horiz-adv-x="1203" d="M611 726L1106 1456H1330L677 533L584 0H397L493 554L168 1456H372L611 726Z" />
-<glyph unicode="Z" horiz-adv-x="1199" d="M234 157H1036L1008 0H-21L6 154L972 1298H216L244 1456H1230L1204 1305L234 157Z" />
-<glyph unicode="[" horiz-adv-x="537" d="M650 1512H465L204 -160H390L366 -312H-1L307 1664H675L650 1512Z" />
-<glyph unicode="\" horiz-adv-x="825" d="M191 1456H355L670 -125H507L191 1456Z" />
-<glyph unicode="]" horiz-adv-x="537" d="M175 1664H543L234 -312H-134L-110 -160H77L338 1512H150L175 1664Z" />
-<glyph unicode="^" horiz-adv-x="840" d="M524 1209L256 729H79L496 1456H620L783 729H625L524 1209Z" />
-<glyph unicode="_" horiz-adv-x="906" d="M763 -151H-127L-100 0H790L763 -151Z" />
-<glyph unicode="`" horiz-adv-x="624" d="M555 1242H413L208 1536H413L555 1242Z" />
-<glyph unicode="a" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140Z" />
-<glyph unicode="b" horiz-adv-x="1125" d="M1013 536Q993 370 922 237T750 40T526 -21Q330 -17 235 126L198 0H31L298 1536H479L370 962Q500 1106 686 1102Q842 1098 929 987T1021 681Q1022 617 1015 557L1013 536ZM841 641Q844 787 792 864T633 946Q464 950 347
-776L266 305Q326 140 491 136Q597 132 676 199T797 386T841 641Z" />
-<glyph unicode="c" horiz-adv-x="1050" d="M488 130Q585 128 663 186T765 340L936 341Q921 239 855 155T687 24T480 -20Q345 -18 252 50T114 241T84 517L89 567Q108 723 180 846T368 1037T624 1102Q794 1098 896 988T998 709L829 710Q827 816 770 881T616 951Q475
-954 382 846T265 544L262 518Q256 454 260 386Q267 269 326 201T488 130Z" />
-<glyph unicode="d" horiz-adv-x="1130" d="M83 543Q103 708 174 841T349 1040T578 1103Q759 1099 856 971L960 1536H1141L875 0H710L729 116Q601 -24 413 -20Q263 -16 174 97T78 402Q75 461 83 543ZM257 439Q254 296 308 217T466 136Q623 129 745 294L831 794Q771
-942 613 946Q506 949 425 882T301 693T257 439Z" />
-<glyph unicode="e" horiz-adv-x="1062" d="M499 -20Q297 -16 183 129T87 500L92 543Q109 704 187 837T379 1037T623 1102Q790 1098 885 991T989 701Q992 636 985 571L974 488H267Q249 341 315 238T514 131Q674 127 810 275L914 187Q846 89 739 34T499 -20ZM614
-951Q502 954 419 875T286 640L812 639L816 655Q832 781 776 864T614 951Z" />
-<glyph unicode="f" horiz-adv-x="700" d="M119 0L283 939H116L141 1082H307L325 1210Q351 1373 451 1465Q556 1561 719 1559Q770 1559 848 1542L826 1391Q778 1401 729 1403Q635 1403 577 1345T504 1189L488 1082H712L687 939H463L300 0H119Z" />
-<glyph unicode="g" horiz-adv-x="1125" d="M84 543Q108 720 179 850T353 1043T578 1103Q766 1099 862 961L898 1082H1064L884 23Q855 -184 716 -308T373 -427Q263 -425 163 -375T4 -238L107 -127Q205 -272 366 -276Q495 -280 584 -204T703 12L723 108Q591 -24
-414 -20Q313 -17 239 34T123 183T78 401Q76 460 84 543ZM259 440Q256 297 308 219T467 136Q629 132 746 295L831 792Q771 940 614 946Q467 950 373 826T261 491L259 440Z" />
-<glyph unicode="h" horiz-adv-x="1104" d="M369 950Q511 1105 696 1101Q848 1099 921 997T976 709L858 0H677L796 712Q802 761 797 803Q780 943 632 946Q466 950 346 772L212 0H31L298 1536H479L369 950Z" />
-<glyph unicode="i" horiz-adv-x="492" d="M227 0H47L235 1082H415L227 0ZM376 1477Q422 1479 452 1450T483 1372Q482 1325 453 1295T376 1263T299 1290T270 1366T300 1444T376 1477Z" />
-<glyph unicode="j" horiz-adv-x="484" d="M406 1082L201 -129Q181 -282 99 -362T-117 -440Q-170 -438 -236 -420L-220 -272Q-183 -281 -137 -283Q-8 -283 18 -129L225 1082H406ZM256 1366Q257 1413 285 1444T362 1477Q408 1479 438 1449T469 1372Q468 1325 438
-1295T361 1263Q316 1261 286 1291T256 1366Z" />
-<glyph unicode="k" horiz-adv-x="1017" d="M419 499L277 372L213 0H32L299 1536H480L320 618L431 730L815 1082H1050L553 621L895 0H697L419 499Z" />
-<glyph unicode="l" horiz-adv-x="492" d="M227 0H47L313 1536H494L227 0Z" />
-<glyph unicode="m" horiz-adv-x="1751" d="M388 1083L365 962Q501 1106 694 1102Q797 1100 868 1055T967 928Q1119 1106 1326 1102Q1488 1098 1565 993T1622 711L1503 0H1323L1441 713Q1447 765 1441 808Q1422 944 1263 947Q1164 949 1084 886T980 719L857 0H675L795
-712Q808 823 762 883T617 945Q448 949 348 791L211 0H30L218 1082L388 1083Z" />
-<glyph unicode="n" horiz-adv-x="1106" d="M390 1083L364 946Q510 1106 696 1102Q849 1098 922 996T976 709L858 0H677L796 712Q802 761 797 803Q780 943 632 946Q469 949 346 772L212 0H31L219 1082L390 1083Z" />
-<glyph unicode="o" horiz-adv-x="1143" d="M632 1102Q768 1100 865 1028T1008 830T1040 553L1038 531Q1019 373 944 246T750 47T489 -20Q354 -18 257 54T114 250T82 523Q97 691 173 825T368 1032T632 1102ZM264 522Q257 459 264 391Q274 273 334 203T496 130Q586
-127 662 174T790 318T857 531Q865 623 860 686Q848 807 787 877T625 951Q485 954 387 841T266 545L264 522Z" />
-<glyph unicode="p" horiz-adv-x="1125" d="M1011 536Q991 371 922 239T751 42T525 -21Q337 -17 237 106L140 -416H-41L219 1082L383 1083L363 962Q497 1106 684 1102Q840 1098 927 987T1019 681Q1020 617 1014 557L1011 536ZM833 557L838 641Q838 787 783 864T622
-946Q465 950 351 797L260 278Q321 134 479 130Q614 127 708 235T833 557Z" />
-<glyph unicode="q" horiz-adv-x="1139" d="M585 1103Q768 1099 864 972L897 1082H1064L804 -416H624L722 100Q592 -24 420 -20Q268 -18 177 95T79 400Q73 524 108 661T212 901T377 1055T585 1103ZM265 522L260 438Q257 293 312 213T472 130Q625 126 743 276L837
-808Q771 947 621 951Q484 954 390 846T265 522Z" />
-<glyph unicode="r" horiz-adv-x="682" d="M704 917L619 926Q445 926 345 769L212 0H31L219 1082L394 1083L367 957Q482 1108 638 1104Q671 1104 724 1089L704 917Z" />
-<glyph unicode="s" horiz-adv-x="1034" d="M701 293Q716 405 578 451L390 506Q152 588 160 778Q167 921 290 1012T581 1102Q745 1100 847 1007T946 763L766 764Q768 845 715 896T574 949Q480 951 412 903Q349 858 339 785Q326 691 454 648L545 623Q731 575 809
-498T881 307Q875 206 815 131T655 17T442 -20Q270 -18 158 80T50 334L231 333Q231 242 289 187T448 132Q547 130 619 173T701 293Z" />
-<glyph unicode="t" horiz-adv-x="659" d="M509 1344L463 1082H660L635 939H439L326 266Q323 240 325 218Q332 140 410 140Q443 140 498 150L484 -1Q419 -19 352 -19Q244 -17 190 60T148 269L258 939H67L92 1082H283L329 1344H509Z" />
-<glyph unicode="u" horiz-adv-x="1105" d="M718 107Q591 -24 395 -20Q240 -16 166 91T110 383L226 1082H407L290 380Q285 336 288 294Q293 222 331 181T437 137Q631 131 737 294L873 1082H1054L866 0H695L718 107Z" />
-<glyph unicode="v" horiz-adv-x="972" d="M424 253L814 1082H1005L460 0H322L110 1082H288L424 253Z" />
-<glyph unicode="w" horiz-adv-x="1503" d="M1002 256L1347 1082H1534L1041 0H894L782 818L392 0H245L128 1082H301L367 276L751 1082H897L1002 256Z" />
-<glyph unicode="x" horiz-adv-x="995" d="M496 688L790 1082H1012L578 538L842 0H645L466 404L161 0H-60L387 556L131 1082H329L496 688Z" />
-<glyph unicode="y" horiz-adv-x="950" d="M419 273L804 1082H1004L362 -180Q228 -443 18 -440Q-19 -439 -91 -422L-75 -272L-28 -277Q58 -281 120 -239T231 -101L296 23L109 1082H298L419 273Z" />
-<glyph unicode="z" horiz-adv-x="995" d="M234 151H842L815 0H-19L6 145L715 929H150L178 1082H974L950 942L234 151Z" />
-<glyph unicode="{" horiz-adv-x="682" d="M478 -365Q320 -312 246 -193T191 99L219 306Q225 355 220 397Q203 533 56 541L72 686Q289 696 321 931L352 1159Q411 1498 762 1599L789 1482Q577 1412 532 1145L498 905Q465 705 287 611Q390 534 400 392Q403 348 399
-305L368 62L366 -9L368 -40Q385 -199 519 -252L478 -365Z" />
-<glyph unicode="|" horiz-adv-x="494" d="M179 -270H33L303 1456H449L179 -270Z" />
-<glyph unicode="}" horiz-adv-x="682" d="M-116 -251Q101 -180 144 93L175 319Q206 527 401 620Q288 689 275 836Q271 878 276 923L307 1169L309 1240Q306 1424 157 1482L202 1595Q358 1542 430 1423T483 1132L456 924Q450 874 455 833Q471 698 618 690L603 545Q385
-535 353 297L325 90Q274 -264 -88 -368L-116 -251Z" />
-<glyph unicode="~" horiz-adv-x="1361" d="M1245 778Q1231 615 1134 507T896 400Q770 403 647 515L587 573Q515 640 449 640Q313 643 269 476L261 439L105 436Q121 598 218 702T457 803Q576 800 684 707L773 624Q841 563 904 563Q979 563 1031 618T1102 775L1245 778Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="502" />
-<glyph unicode="&#xa1;" horiz-adv-x="494" d="M179 684H344L175 -360H-15L179 684ZM416 999Q416 952 387 921T310 888T233 917T203 993Q204 1041 233 1070T310 1102Q356 1103 386 1074T416 999Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1096" d="M489 130Q586 128 664 185T770 340L942 341Q921 207 817 113T552 -12L506 -245H325L372 -9Q253 21 181 115T94 350Q82 461 104 594T186 833T340 1004T552 1092L597 1318H778L733 1093Q864 1061 937 960T1011 709H841Q841
-815 785 881T632 951Q480 957 381 829T268 473L267 431Q264 289 322 211T489 130Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1164" d="M440 622L412 410Q392 257 304 154L1019 157L990 0H-13L16 156L83 154Q196 195 225 416L252 622H92L119 779H275L306 1032Q331 1236 470 1359T801 1476Q969 1472 1065 1368T1153 1086L966 1087Q973 1193 924 1254T774
-1319Q664 1323 587 1241T494 1030L462 779H772L745 622H440Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1426" d="M996 110Q809 -24 619 -20Q420 -16 284 110L127 -26L18 118L177 252Q147 337 137 424Q118 574 162 718T311 980L194 1137L335 1264L449 1116Q628 1238 810 1234Q998 1232 1135 1113L1310 1265L1421 1119L1248 972Q1280
-885 1292 796Q1310 652 1270 511T1130 250L1245 100L1102 -27L996 110ZM304 599Q289 485 326 381T442 216T630 150Q747 146 854 209T1034 383T1123 617Q1137 732 1101 835T985 998T798 1063Q680 1067 572 1004T392 831T304 599Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1053" d="M552 794L965 1456H1183L702 736H950L928 611H614L585 446H900L878 322H564L508 0H319L376 322H67L89 446H397L426 611H117L139 736H399L168 1456H368L552 794Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="486" d="M-9 -270L129 521H311L173 -270H-9ZM341 698H159L291 1456H473L341 698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1228" d="M1087 439Q1069 248 858 152Q961 49 948 -120Q934 -294 790 -396T424 -496Q207 -492 86 -377T-24 -63L157 -62Q151 -147 182 -210T279 -307T432 -343Q515 -345 589 -318T709 -242T764 -123Q776 -46 723 9T531 109T312
-192Q70 307 90 543Q104 727 314 830Q215 936 228 1102Q236 1210 303 1296T489 1430Q612 1478 753 1476Q960 1472 1072 1358T1173 1045H993Q1001 1171 935 1246T745 1325Q610 1327 519 1269T412 1105Q401 1024 449 970T632 873T839 800Q1108 684 1087 439ZM616 691L462
-743Q295 696 273 545Q259 445 334 384Q384 343 513 303T707 237Q881 289 903 436Q914 509 867 565T700 663L616 691Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="840" d="M218 1369Q219 1415 248 1445T325 1478Q371 1479 401 1450T431 1373Q431 1327 401 1297T324 1265Q277 1264 248 1293T218 1369ZM635 1367Q636 1413 665 1444T741 1477Q789 1478 819 1449T848 1371Q848 1324 818 1295T741
-1263Q695 1262 665 1291T635 1367Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1571" d="M1093 597Q1079 446 986 363T744 283Q599 287 519 395T453 670L463 768Q483 957 586 1066T847 1174Q989 1170 1066 1089T1138 859L995 860Q1001 945 967 994T842 1045Q747 1047 684 975T606 775T592 617L594 582Q601
-505 640 460T748 412Q918 405 953 596L1093 597ZM230 570Q252 363 382 232T702 98Q889 94 1055 205T1313 507T1385 888Q1363 1093 1235 1222T914 1356Q725 1360 559 1248T301 948T230 570ZM119 722Q141 921 255 1099T544 1378T913 1476Q1091 1474 1233 1376T1446
-1105T1496 735Q1473 532 1359 355T1073 78T713 -21H703Q520 -17 380 81T169 352T119 722Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="898" d="M630 703L626 777Q534 691 420 691Q315 691 255 752T199 911Q204 1026 297 1088T557 1150L668 1149L677 1203Q680 1230 678 1254Q671 1333 586 1336Q530 1337 487 1313T428 1232L272 1243Q283 1352 371 1415T590
-1477Q713 1473 779 1399T836 1200L782 853L778 795Q777 750 785 704L630 703ZM460 826Q535 826 626 894L654 1037H561Q473 1034 421 1002T361 915Q356 872 383 849T460 826Z" />
-<glyph unicode="&#xab;" horiz-adv-x="942" d="M517 794L695 407H570L345 794L347 814L694 1203H846L517 794ZM581 538L759 151H634L409 538L411 558L758 947H910L581 538Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1110" d="M891 375H709L756 639H129L158 800H965L891 375Z" />
-<glyph unicode="&#xad;" horiz-adv-x="558" d="M500 543H25L52 694H527L500 543Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1572" d="M118 722Q140 921 254 1099T543 1378T912 1476Q1087 1474 1228 1379T1443 1110T1495 735Q1472 531 1357 354T1069 75T703 -22Q524 -18 384 77T171 348T118 722ZM229 569Q241 438 305 328T472 159T701 97Q888 93
-1053 203T1311 503T1385 888Q1371 1021 1307 1129T1141 1295T913 1356Q728 1360 563 1253T304 956T229 569ZM654 654L601 316H463L596 1165L853 1164Q992 1159 1066 1095T1134 916Q1131 858 1097 810T982 716Q1059 672 1068 575L1067 514Q1056 427 1058 396L1061
-332L1059 315H921Q915 352 917 388L924 460L930 514Q937 580 913 614T821 653L654 654ZM673 782L816 781Q888 783 938 817T998 910Q1008 973 976 1004T854 1038H714L673 782Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="920" d="M900 1302H247L270 1445H923L900 1302Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="752" d="M236 1207Q240 1318 320 1398T504 1477Q601 1475 664 1401T726 1225Q722 1113 643 1035T461 959Q363 961 298 1033T236 1207ZM357 1209Q351 1160 381 1124T461 1087Q515 1087 557 1127T606 1223Q612 1271 584 1310T504
-1350Q450 1350 407 1308T357 1209Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1071" d="M670 854H1023L999 703H647L582 289H418L483 703H109L134 854H507L572 1267H735L670 854ZM848 0H37L61 152H872L848 0Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="738" d="M674 667H92L112 783L467 1081Q566 1165 578 1239Q585 1287 559 1314T484 1342Q418 1343 378 1306T324 1206L170 1205Q181 1322 268 1396T483 1469Q603 1467 672 1404T737 1239Q729 1116 578 991L514 940L318 795H697L674
-667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="738" d="M343 1126L421 1125Q487 1127 533 1157T587 1242Q593 1291 562 1315T481 1340Q369 1340 340 1247H184Q195 1348 274 1408T479 1469Q605 1466 676 1407T742 1251Q735 1132 583 1066Q701 1023 697 894Q692 783 602
-719T378 656Q259 658 185 720T110 890H261Q261 840 294 813T385 785Q449 785 494 817T547 902Q560 1004 419 1009L332 1010L343 1126Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="633" d="M447 1536H678L372 1242H213L447 1536Z" />
-<glyph unicode="&#xb5;" d="M414 1082L311 458Q301 374 304 316Q314 133 460 130Q643 124 740 281L879 1082H1061L873 0H711L730 115Q619 -23 457 -21Q322 -21 242 54L153 -416H-27L233 1082H414Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="981" d="M532 0L623 520L559 521Q348 524 236 651T143 980Q157 1122 231 1231T425 1398T689 1457L966 1456L714 0H532Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="528" d="M165 726Q166 775 196 807T277 842Q325 844 357 813T389 732Q388 683 356 652T275 618Q230 616 198 645T165 726Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="502" d="M167 0L146 -55Q275 -84 271 -218Q268 -320 181 -377T-56 -437L-52 -329Q114 -323 130 -222Q142 -151 38 -139L-8 -133L38 0H167Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="738" d="M492 667H338L442 1264L222 1208L246 1343L602 1456H623L492 667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="913" d="M589 1477Q730 1473 810 1375T878 1123L871 1052Q854 886 750 786T495 689Q353 693 273 793T205 1043L212 1113Q229 1281 334 1381T589 1477ZM365 1041Q355 945 391 888T504 828Q583 825 639 882T710 1043L719 1124Q727
-1226 690 1280T581 1337Q499 1339 443 1281T373 1123L365 1041Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="941" d="M291 949L516 562L514 541L167 152H15L343 560L166 949H291ZM629 949L854 562L852 541L505 152H353L681 560L504 949H629Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1465" d="M455 664H301L405 1261L185 1205L209 1340L565 1453H586L455 664ZM354 120L256 192L1137 1320L1235 1248L354 120ZM1227 299H1331L1308 169H1205L1175 0H1021L1051 169H688L701 281L1148 789H1312L1227 299ZM865
-299H1073L1131 590L1109 560L865 299Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1551" d="M311 120L213 192L1094 1320L1192 1248L311 120ZM450 664H296L400 1261L180 1205L204 1340L560 1453H581L450 664ZM1333 0H751L771 116L1126 414Q1225 498 1237 572Q1244 620 1218 647T1143 675Q1077 676 1037 639T983
-539L829 538Q840 655 927 729T1142 802Q1262 800 1331 737T1396 572Q1388 449 1237 324L1173 273L977 128H1356L1333 0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1555" d="M477 120L379 192L1260 1320L1358 1248L477 120ZM1316 299H1420L1397 169H1294L1264 0H1110L1140 169H777L790 281L1237 789H1401L1316 299ZM954 299H1162L1220 590L1198 560L954 299ZM391 1126L469 1125Q535 1127
-581 1157T635 1242Q641 1291 610 1315T529 1340Q417 1340 388 1247H232Q243 1348 322 1408T527 1469Q653 1466 724 1407T790 1251Q783 1132 631 1066Q749 1023 745 894Q740 783 650 719T426 656Q307 658 233 720T158 890H309Q309 840 342 813T433 785Q497 785 542
-817T595 902Q608 1004 467 1009L380 1010L391 1126Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="950" d="M584 681Q572 572 531 492T384 311L287 220Q168 105 155 -10Q142 -108 189 -166T329 -226Q427 -228 493 -172T578 -21L758 -20Q739 -187 617 -288T318 -386Q145 -382 50 -281T-30 -14Q-15 169 176 344L292 446Q383
-531 408 680L584 681ZM654 1000Q654 953 625 922T548 889Q500 887 471 918T441 994Q442 1041 472 1070T548 1102Q594 1103 624 1075T654 1000Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538ZM916 1552H774L569 1846H774L916 1552Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538ZM946 1846H1177L871 1552H712L946 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538ZM1117 1574V1560L970 1562L857 1731L681 1563L528 1560V1576L806 1846H912L1117 1574Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538ZM1199 1815Q1187 1704 1126 1637T972 1570Q935 1570 905 1585T844 1620T783 1654T716 1668Q631 1665 600 1556L478 1563Q490
-1673 552 1743T708 1811Q735 1811 758 1803T835 1762T912 1720T964 1712Q1050 1712 1082 1825L1199 1815Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538ZM525 1679Q526 1725 555 1755T632 1788Q678 1789 708 1760T738 1683Q738 1637 708 1607T631 1575Q584 1574 555 1603T525
-1679ZM942 1677Q943 1723 972 1754T1048 1787Q1096 1788 1126 1759T1155 1681Q1155 1634 1125 1605T1048 1573Q1002 1572 972 1601T942 1677Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1306" d="M909 380H319L120 0H-81L710 1456H875L1163 0H978L909 380ZM402 538H881L760 1217L402 538ZM641 1721Q643 1812 707 1875T861 1938Q943 1938 1000 1880T1058 1737Q1056 1648 992 1586T838 1524Q754 1524 697 1581T641
-1721ZM737 1723Q733 1677 760 1646T830 1614Q876 1614 915 1649T961 1735Q967 1781 939 1814T869 1847Q823 1847 783 1811T737 1723Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1867" d="M1719 0H862L909 353H369L108 0H-124L982 1456H1912L1885 1304H1215L1152 833H1726L1699 682H1132L1061 151H1746L1719 0ZM496 527H932L1028 1249L496 527Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1303" d="M1169 464Q1127 238 965 106T575 -20Q440 -17 339 46T182 229T120 494Q116 576 127 654L144 774Q191 1102 374 1291T821 1476Q1026 1472 1146 1344T1273 987H1086Q1073 1293 846 1317L813 1319Q624 1324 498 1179T334
-781L312 630L306 542Q300 358 371 250T584 137Q736 132 835 210T987 461L1169 464ZM617 -9L596 -64Q725 -93 721 -227Q718 -329 631 -386T394 -446L398 -338Q564 -332 580 -231Q592 -160 488 -148L442 -142L488 -9H617Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1139" d="M976 673H364L274 157H986L958 0H59L312 1456H1201L1173 1298H472L391 830H1003L976 673ZM866 1564H724L519 1858H724L866 1564Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1139" d="M976 673H364L274 157H986L958 0H59L312 1456H1201L1173 1298H472L391 830H1003L976 673ZM896 1858H1127L821 1564H662L896 1858Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1139" d="M976 673H364L274 157H986L958 0H59L312 1456H1201L1173 1298H472L391 830H1003L976 673ZM1067 1586V1572L920 1574L807 1743L631 1575L478 1572V1588L756 1858H862L1067 1586Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1139" d="M976 673H364L274 157H986L958 0H59L312 1456H1201L1173 1298H472L391 830H1003L976 673ZM475 1691Q476 1737 505 1767T582 1800Q628 1801 658 1772T688 1695Q688 1649 658 1619T581 1587Q534 1586 505 1615T475
-1691ZM892 1689Q893 1735 922 1766T998 1799Q1046 1800 1076 1771T1105 1693Q1105 1646 1075 1617T998 1585Q952 1584 922 1613T892 1689Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="550" d="M260 0H73L326 1456H513L260 0ZM537 1564H395L190 1858H395L537 1564Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="550" d="M260 0H73L326 1456H513L260 0ZM566 1858H797L491 1564H332L566 1858Z" />
-<glyph unicode="&#xce;" horiz-adv-x="550" d="M260 0H73L326 1456H513L260 0ZM738 1586V1572L591 1574L478 1743L302 1575L149 1572V1588L427 1858H533L738 1586Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="550" d="M260 0H73L326 1456H513L260 0ZM146 1691Q147 1737 176 1767T253 1800Q299 1801 329 1772T359 1695Q359 1649 329 1619T252 1587Q205 1586 176 1615T146 1691ZM563 1689Q564 1735 593 1766T669 1799Q717 1800 747
-1771T776 1693Q776 1646 746 1617T669 1585Q623 1584 593 1613T563 1689Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1343" d="M89 0L204 666H17L44 817H231L342 1456L720 1455Q898 1455 1026 1366T1211 1121T1244 770L1234 697Q1190 379 987 190T477 0H89ZM635 666H392L304 157L489 156Q701 156 848 288T1040 650Q1075 834 1064 963Q1049
-1118 961 1205T725 1297L502 1298L418 817H662L635 666Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1426" d="M1146 0H964L444 1130L248 0H59L312 1456H494L1015 321L1212 1456H1399L1146 0ZM1251 1815Q1239 1704 1178 1637T1024 1570Q987 1570 957 1585T896 1620T835 1654T768 1668Q683 1665 652 1556L530 1563Q542 1673
-604 1743T760 1811Q787 1811 810 1803T887 1762T964 1720T1016 1712Q1102 1712 1134 1825L1251 1815Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1376" d="M593 -20Q454 -17 352 47T190 235T125 515Q119 636 152 814T266 1135T463 1364Q620 1480 821 1476Q1034 1472 1157 1329T1289 940Q1293 835 1268 673T1177 372T1010 139Q834 -25 593 -20ZM1104 894Q1110 1091 1035
-1199T812 1312Q678 1316 573 1240T400 1013T314 629L311 564Q305 368 381 257T602 142Q791 137 915 278T1081 676Q1101 802 1104 894ZM949 1554H807L602 1848H807L949 1554Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1376" d="M593 -20Q454 -17 352 47T190 235T125 515Q119 636 152 814T266 1135T463 1364Q620 1480 821 1476Q1034 1472 1157 1329T1289 940Q1293 835 1268 673T1177 372T1010 139Q834 -25 593 -20ZM1104 894Q1110 1091 1035
-1199T812 1312Q678 1316 573 1240T400 1013T314 629L311 564Q305 368 381 257T602 142Q791 137 915 278T1081 676Q1101 802 1104 894ZM979 1848H1210L904 1554H745L979 1848Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1376" d="M593 -20Q454 -17 352 47T190 235T125 515Q119 636 152 814T266 1135T463 1364Q620 1480 821 1476Q1034 1472 1157 1329T1289 940Q1293 835 1268 673T1177 372T1010 139Q834 -25 593 -20ZM1104 894Q1110 1091 1035
-1199T812 1312Q678 1316 573 1240T400 1013T314 629L311 564Q305 368 381 257T602 142Q791 137 915 278T1081 676Q1101 802 1104 894ZM1150 1576V1562L1003 1564L890 1733L714 1565L561 1562V1578L839 1848H945L1150 1576Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1376" d="M593 -20Q454 -17 352 47T190 235T125 515Q119 636 152 814T266 1135T463 1364Q620 1480 821 1476Q1034 1472 1157 1329T1289 940Q1293 835 1268 673T1177 372T1010 139Q834 -25 593 -20ZM1104 894Q1110 1091 1035
-1199T812 1312Q678 1316 573 1240T400 1013T314 629L311 564Q305 368 381 257T602 142Q791 137 915 278T1081 676Q1101 802 1104 894ZM1232 1817Q1220 1706 1159 1639T1005 1572Q968 1572 938 1587T877 1622T816 1656T749 1670Q664 1667 633 1558L511 1565Q523
-1675 585 1745T741 1813Q768 1813 791 1805T868 1764T945 1722T997 1714Q1083 1714 1115 1827L1232 1817Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1376" d="M593 -20Q454 -17 352 47T190 235T125 515Q119 636 152 814T266 1135T463 1364Q620 1480 821 1476Q1034 1472 1157 1329T1289 940Q1293 835 1268 673T1177 372T1010 139Q834 -25 593 -20ZM1104 894Q1110 1091 1035
-1199T812 1312Q678 1316 573 1240T400 1013T314 629L311 564Q305 368 381 257T602 142Q791 137 915 278T1081 676Q1101 802 1104 894ZM558 1681Q559 1727 588 1757T665 1790Q711 1791 741 1762T771 1685Q771 1639 741 1609T664 1577Q617 1576 588 1605T558 1681ZM975
-1679Q976 1725 1005 1756T1081 1789Q1129 1790 1159 1761T1188 1683Q1188 1636 1158 1607T1081 1575Q1035 1574 1005 1603T975 1679Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1069" d="M40 338L419 673L158 1009L286 1123L548 789L925 1123L1026 992L650 656L912 320L784 206L521 542L142 206L40 338Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1376" d="M590 -21Q424 -17 307 63L183 -92H32L221 140Q115 311 120 541Q121 638 145 788T229 1067T378 1289T580 1430T820 1476Q1026 1472 1155 1350L1286 1515H1436L1228 1259Q1277 1143 1287 1021Q1301 852 1258 630T1102
-249T830 23Q718 -24 590 -21ZM302 487Q304 379 335 296L1045 1204Q968 1308 812 1313Q630 1318 504 1180T334 798Q300 606 302 487ZM1109 933Q1113 1011 1102 1089L411 203Q485 145 599 141Q790 136 916 283T1083 700Q1105 847 1109 933Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1298" d="M1312 1456L1144 471Q1110 244 948 110T557 -21Q414 -18 309 43T153 216T120 470L288 1456H473L306 469Q289 316 358 229T567 137Q719 131 823 219T955 468L1123 1456H1312ZM911 1552H769L564 1846H769L911 1552Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1298" d="M1312 1456L1144 471Q1110 244 948 110T557 -21Q414 -18 309 43T153 216T120 470L288 1456H473L306 469Q289 316 358 229T567 137Q719 131 823 219T955 468L1123 1456H1312ZM941 1846H1172L866 1552H707L941 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1298" d="M1312 1456L1144 471Q1110 244 948 110T557 -21Q414 -18 309 43T153 216T120 470L288 1456H473L306 469Q289 316 358 229T567 137Q719 131 823 219T955 468L1123 1456H1312ZM1112 1574V1560L965 1562L852 1731L676
-1563L523 1560V1576L801 1846H907L1112 1574Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1298" d="M1312 1456L1144 471Q1110 244 948 110T557 -21Q414 -18 309 43T153 216T120 470L288 1456H473L306 469Q289 316 358 229T567 137Q719 131 823 219T955 468L1123 1456H1312ZM520 1679Q521 1725 550 1755T627 1788Q673
-1789 703 1760T733 1683Q733 1637 703 1607T626 1575Q579 1574 550 1603T520 1679ZM937 1677Q938 1723 967 1754T1043 1787Q1091 1788 1121 1759T1150 1681Q1150 1634 1120 1605T1043 1573Q997 1572 967 1601T937 1677Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1203" d="M611 726L1106 1456H1330L677 533L584 0H397L493 554L168 1456H372L611 726ZM892 1846H1123L817 1552H658L892 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1184" d="M491 1456L440 1163L678 1162Q886 1161 1004 1048T1107 746Q1096 616 1026 518T836 366T572 312L293 313L238 0H56L309 1456H491ZM414 1011L319 465L576 464Q715 464 812 540T926 744Q940 864 876 935T693 1010L414 1011Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1191" d="M211 0H30L220 1111Q238 1245 297 1348T449 1504T663 1555Q822 1551 909 1462T983 1225Q974 1130 893 1008T800 810Q791 755 818 701T918 573T1020 443T1046 326Q1036 162 920 69T631 -21Q453 -19 339 54L398 207Q504
-132 617 130Q718 130 787 179T868 315Q875 372 848 425T747 554T643 688T618 811Q623 870 651 918T711 1012T772 1105T809 1211Q819 1293 781 1347T662 1405Q557 1408 489 1333T400 1112L211 0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140ZM774 1242H632L427 1536H632L774 1242Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140ZM804 1536H1035L729 1242H570L804 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140ZM975 1264V1250L828 1252L715 1421L539 1253L386 1250V1266L664 1536H770L975 1264Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140ZM1057 1505Q1045 1394 984 1327T830 1260Q793 1260 763 1275T702 1310T641 1344T574 1358Q489
-1355 458 1246L336 1253Q348 1363 410 1433T566 1501Q593 1501 616 1493T693 1452T770 1410T822 1402Q908 1402 940 1515L1057 1505Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140ZM383 1369Q384 1415 413 1445T490 1478Q536 1479 566 1450T596 1373Q596 1327 566 1297T489
-1265Q442 1264 413 1293T383 1369ZM800 1367Q801 1413 830 1444T906 1477Q954 1478 984 1449T1013 1371Q1013 1324 983 1295T906 1263Q860 1262 830 1291T800 1367Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1091" d="M693 0Q686 29 686 57L689 114Q540 -24 373 -20Q230 -18 141 70T59 292Q69 464 209 560T579 657L768 656L780 742Q790 839 743 895T600 954Q507 956 436 909T348 783L166 782Q175 877 240 950T407 1064T618 1103Q787
-1099 881 1001T960 739L872 203L867 126Q865 71 879 17L877 0H693ZM409 140Q496 138 573 181T707 302L746 525L609 526Q438 526 347 472T244 319Q235 243 279 193T409 140ZM499 1411Q501 1502 565 1565T719 1628Q801 1628 858 1570T916 1427Q914 1338 850 1276T696
-1214Q612 1214 555 1271T499 1411ZM595 1413Q591 1367 618 1336T688 1304Q734 1304 773 1339T819 1425Q825 1471 797 1504T727 1537Q681 1537 641 1501T595 1413Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1687" d="M1136 -20Q1015 -18 923 28T779 160Q610 -24 334 -20Q188 -18 104 68T29 296Q39 456 166 546T510 636L736 635L748 721Q760 825 717 885T584 950Q480 952 408 899T321 759L142 778Q158 929 284 1017T596 1103Q705
-1101 786 1058T902 937Q1064 1106 1258 1102Q1385 1100 1472 1037T1596 864T1616 615L1598 497H896Q887 429 896 365Q909 258 973 196T1142 132Q1232 130 1310 160T1463 237L1516 100Q1378 -20 1136 -20ZM375 129Q445 127 524 163T670 257L713 495L510 496Q390
-496 307 440T212 292Q203 218 248 175T375 129ZM1248 952Q1138 955 1053 877T915 640H1437L1443 672Q1452 727 1445 777Q1434 857 1383 903T1248 952Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1050" d="M488 130Q585 128 663 186T765 340L936 341Q921 239 855 155T687 24T480 -20Q345 -18 252 50T114 241T84 517L89 567Q108 723 180 846T368 1037T624 1102Q794 1098 896 988T998 709L829 710Q827 816 770 881T616
-951Q475 954 382 846T265 544L262 518Q256 454 260 386Q267 269 326 201T488 130ZM485 -9L464 -64Q593 -93 589 -227Q586 -329 499 -386T262 -446L266 -338Q432 -332 448 -231Q460 -160 356 -148L310 -142L356 -9H485Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1062" d="M499 -20Q297 -16 183 129T87 500L92 543Q109 704 187 837T379 1037T623 1102Q790 1098 885 991T989 701Q992 636 985 571L974 488H267Q249 341 315 238T514 131Q674 127 810 275L914 187Q846 89 739 34T499 -20ZM614
-951Q502 954 419 875T286 640L812 639L816 655Q832 781 776 864T614 951ZM747 1242H605L400 1536H605L747 1242Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1062" d="M499 -20Q297 -16 183 129T87 500L92 543Q109 704 187 837T379 1037T623 1102Q790 1098 885 991T989 701Q992 636 985 571L974 488H267Q249 341 315 238T514 131Q674 127 810 275L914 187Q846 89 739 34T499 -20ZM614
-951Q502 954 419 875T286 640L812 639L816 655Q832 781 776 864T614 951ZM777 1536H1008L702 1242H543L777 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1062" d="M499 -20Q297 -16 183 129T87 500L92 543Q109 704 187 837T379 1037T623 1102Q790 1098 885 991T989 701Q992 636 985 571L974 488H267Q249 341 315 238T514 131Q674 127 810 275L914 187Q846 89 739 34T499 -20ZM614
-951Q502 954 419 875T286 640L812 639L816 655Q832 781 776 864T614 951ZM948 1264V1250L801 1252L688 1421L512 1253L359 1250V1266L637 1536H743L948 1264Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1062" d="M499 -20Q297 -16 183 129T87 500L92 543Q109 704 187 837T379 1037T623 1102Q790 1098 885 991T989 701Q992 636 985 571L974 488H267Q249 341 315 238T514 131Q674 127 810 275L914 187Q846 89 739 34T499 -20ZM614
-951Q502 954 419 875T286 640L812 639L816 655Q832 781 776 864T614 951ZM356 1369Q357 1415 386 1445T463 1478Q509 1479 539 1450T569 1373Q569 1327 539 1297T462 1265Q415 1264 386 1293T356 1369ZM773 1367Q774 1413 803 1444T879 1477Q927 1478 957 1449T986
-1371Q986 1324 956 1295T879 1263Q833 1262 803 1291T773 1367Z" />
-<glyph unicode="&#xec;" horiz-adv-x="501" d="M227 0H46L234 1082H415L227 0ZM711 1497H569L364 1791H569L711 1497Z" />
-<glyph unicode="&#xed;" horiz-adv-x="501" d="M227 0H46L234 1082H415L227 0ZM484 1791H715L409 1497H250L484 1791Z" />
-<glyph unicode="&#xee;" horiz-adv-x="501" d="M227 0H46L234 1082H415L227 0ZM656 1263V1249L509 1251L396 1420L220 1252L67 1249V1265L345 1535H451L656 1263Z" />
-<glyph unicode="&#xef;" horiz-adv-x="501" d="M227 0H46L234 1082H415L227 0ZM64 1368Q65 1414 94 1444T171 1477Q217 1478 247 1449T277 1372Q277 1326 247 1296T170 1264Q123 1263 94 1292T64 1368ZM481 1366Q482 1412 511 1443T587 1476Q635 1477 665 1448T694
-1370Q694 1323 664 1294T587 1262Q541 1261 511 1290T481 1366Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1174" d="M926 1299Q1103 1004 1053 633L1040 542Q1016 375 938 242T747 43T504 -21Q316 -17 204 120T111 459Q125 603 194 724T374 914T617 978Q771 974 882 863Q878 1045 772 1198L533 1050L474 1158L681 1284Q579 1370
-401 1422L471 1579Q691 1523 841 1387L1050 1517L1108 1408L926 1299ZM877 695Q821 821 651 826Q507 830 409 729T292 458Q277 319 341 226T517 129Q644 124 735 233T857 535L877 695Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1106" d="M390 1083L364 946Q510 1106 696 1102Q849 1098 922 996T976 709L858 0H677L796 712Q802 761 797 803Q780 943 632 946Q469 949 346 772L212 0H31L219 1082L390 1083ZM1048 1505Q1036 1394 975 1327T821 1260Q784
-1260 754 1275T693 1310T632 1344T565 1358Q480 1355 449 1246L327 1253Q339 1363 401 1433T557 1501Q584 1501 607 1493T684 1452T761 1410T813 1402Q899 1402 931 1515L1048 1505Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1143" d="M632 1102Q768 1100 865 1028T1008 830T1040 553L1038 531Q1019 373 944 246T750 47T489 -20Q354 -18 257 54T114 250T82 523Q97 691 173 825T368 1032T632 1102ZM264 522Q257 459 264 391Q274 273 334 203T496
-130Q586 127 662 174T790 318T857 531Q865 623 860 686Q848 807 787 877T625 951Q485 954 387 841T266 545L264 522ZM756 1242H614L409 1536H614L756 1242Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1143" d="M632 1102Q768 1100 865 1028T1008 830T1040 553L1038 531Q1019 373 944 246T750 47T489 -20Q354 -18 257 54T114 250T82 523Q97 691 173 825T368 1032T632 1102ZM264 522Q257 459 264 391Q274 273 334 203T496
-130Q586 127 662 174T790 318T857 531Q865 623 860 686Q848 807 787 877T625 951Q485 954 387 841T266 545L264 522ZM786 1536H1017L711 1242H552L786 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1143" d="M632 1102Q768 1100 865 1028T1008 830T1040 553L1038 531Q1019 373 944 246T750 47T489 -20Q354 -18 257 54T114 250T82 523Q97 691 173 825T368 1032T632 1102ZM264 522Q257 459 264 391Q274 273 334 203T496
-130Q586 127 662 174T790 318T857 531Q865 623 860 686Q848 807 787 877T625 951Q485 954 387 841T266 545L264 522ZM957 1264V1250L810 1252L697 1421L521 1253L368 1250V1266L646 1536H752L957 1264Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1143" d="M632 1102Q768 1100 865 1028T1008 830T1040 553L1038 531Q1019 373 944 246T750 47T489 -20Q354 -18 257 54T114 250T82 523Q97 691 173 825T368 1032T632 1102ZM264 522Q257 459 264 391Q274 273 334 203T496
-130Q586 127 662 174T790 318T857 531Q865 623 860 686Q848 807 787 877T625 951Q485 954 387 841T266 545L264 522ZM1039 1505Q1027 1394 966 1327T812 1260Q775 1260 745 1275T684 1310T623 1344T556 1358Q471 1355 440 1246L318 1253Q330 1363 392 1433T548
-1501Q575 1501 598 1493T675 1452T752 1410T804 1402Q890 1402 922 1515L1039 1505Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1143" d="M632 1102Q768 1100 865 1028T1008 830T1040 553L1038 531Q1019 373 944 246T750 47T489 -20Q354 -18 257 54T114 250T82 523Q97 691 173 825T368 1032T632 1102ZM264 522Q257 459 264 391Q274 273 334 203T496
-130Q586 127 662 174T790 318T857 531Q865 623 860 686Q848 807 787 877T625 951Q485 954 387 841T266 545L264 522ZM365 1369Q366 1415 395 1445T472 1478Q518 1479 548 1450T578 1373Q578 1327 548 1297T471 1265Q424 1264 395 1293T365 1369ZM782 1367Q783 1413
-812 1444T888 1477Q936 1478 966 1449T995 1371Q995 1324 965 1295T888 1263Q842 1262 812 1291T782 1367Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1144" d="M1038 600H68L101 784H1070L1038 600ZM534 1095Q534 1144 564 1176T645 1211Q693 1213 725 1182T757 1101Q756 1052 725 1021T644 988T564 1016T534 1095ZM392 278Q393 327 423 359T504 394Q552 396 584 365T616
-284Q615 235 583 204T502 171T423 199T392 278Z" />
-<glyph unicode="&#xf8;" d="M638 1104Q741 1102 832 1059L934 1208L1066 1207L922 1000Q1032 870 1039 672Q1041 617 1033 531Q1014 375 935 244T735 44T473 -22Q384 -20 291 15L189 -134L57 -133L198 72Q80 196 73 401Q71 462 77 522L79 538Q115 801 270 954T638
-1104ZM249 447Q239 315 290 224L749 922Q694 951 630 953Q473 957 369 820T249 447ZM863 701Q860 775 829 844L373 152Q423 129 480 127Q620 124 720 234T852 531Q865 626 863 701Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1105" d="M718 107Q591 -24 395 -20Q240 -16 166 91T110 383L226 1082H407L290 380Q285 336 288 294Q293 222 331 181T437 137Q631 131 737 294L873 1082H1054L866 0H695L718 107ZM760 1242H618L413 1536H618L760 1242Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1105" d="M718 107Q591 -24 395 -20Q240 -16 166 91T110 383L226 1082H407L290 380Q285 336 288 294Q293 222 331 181T437 137Q631 131 737 294L873 1082H1054L866 0H695L718 107ZM790 1536H1021L715 1242H556L790 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1105" d="M718 107Q591 -24 395 -20Q240 -16 166 91T110 383L226 1082H407L290 380Q285 336 288 294Q293 222 331 181T437 137Q631 131 737 294L873 1082H1054L866 0H695L718 107ZM961 1264V1250L814 1252L701 1421L525 1253L372
-1250V1266L650 1536H756L961 1264Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1105" d="M718 107Q591 -24 395 -20Q240 -16 166 91T110 383L226 1082H407L290 380Q285 336 288 294Q293 222 331 181T437 137Q631 131 737 294L873 1082H1054L866 0H695L718 107ZM369 1369Q370 1415 399 1445T476 1478Q522
-1479 552 1450T582 1373Q582 1327 552 1297T475 1265Q428 1264 399 1293T369 1369ZM786 1367Q787 1413 816 1444T892 1477Q940 1478 970 1449T999 1371Q999 1324 969 1295T892 1263Q846 1262 816 1291T786 1367Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="950" d="M419 273L804 1082H1004L362 -180Q228 -443 18 -440Q-19 -439 -91 -422L-75 -272L-28 -277Q58 -281 120 -239T231 -101L296 23L109 1082H298L419 273ZM733 1536H964L658 1242H499L733 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1155" d="M1020 536Q1000 370 930 237T759 40T533 -22Q347 -18 246 106L149 -416H-32L307 1536H487L381 969Q512 1106 693 1102Q851 1098 937 984T1027 681Q1028 620 1020 536ZM842 558L847 642Q847 787 791 865T631 945Q471
-949 359 797L269 278Q330 135 487 130Q624 127 718 236T842 558Z" />
-<glyph unicode="&#xff;" horiz-adv-x="950" d="M419 273L804 1082H1004L362 -180Q228 -443 18 -440Q-19 -439 -91 -422L-75 -272L-28 -277Q58 -281 120 -239T231 -101L296 23L109 1082H298L419 273ZM312 1369Q313 1415 342 1445T419 1478Q465 1479 495 1450T525
-1373Q525 1327 495 1297T418 1265Q371 1264 342 1293T312 1369ZM729 1367Q730 1413 759 1444T835 1477Q883 1478 913 1449T942 1371Q942 1324 912 1295T835 1263Q789 1262 759 1291T729 1367Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1314" d="M1396 651H423L456 802H1429L1396 651Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1561" d="M1707 651H410L453 802H1750L1707 651Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="407" d="M417 1555L517 1481Q405 1341 378 1207L354 1073H174L192 1185Q228 1407 417 1555Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="407" d="M237 1046L137 1120Q255 1267 279 1405L302 1536H480L461 1415Q425 1190 237 1046Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="405" d="M-5 -283L-104 -208Q11 -64 35 75L53 181H234L219 85Q184 -135 -5 -283Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="712" d="M425 1555L525 1481Q413 1341 386 1207L362 1073H182L200 1185Q236 1407 425 1555ZM730 1555L830 1481Q718 1341 691 1207L667 1073H487L505 1185Q541 1407 730 1555Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="719" d="M249 1046L149 1120Q267 1267 291 1405L314 1536H492L473 1415Q437 1190 249 1046ZM546 1046L446 1120Q564 1267 588 1405L611 1536H789L770 1415Q734 1190 546 1046Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="694" d="M-4 -302L-108 -227Q8 -76 35 75L65 246H245L220 90Q181 -151 -4 -302ZM283 -302L180 -227Q296 -73 322 75L352 246H533L508 90Q469 -150 283 -302Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="679" d="M161 765Q167 859 225 915T370 972Q451 972 503 918T556 775L554 733Q548 643 492 588T345 533Q263 533 212 586T160 724L161 765Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="606" d="M267 540L445 153H320L95 540L97 560L444 949H596L267 540Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="606" d="M278 949L503 562L501 541L154 152H2L330 560L153 949H278Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-italic.ttf b/static/fonts/roboto-v18-latin-italic.ttf
deleted file mode 100644
index 91cd95e2866c8f81d97a88e161f77bce3d55a25a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 36752
zcma%k2S8KT_y4{3jj#y`Bp@J5KtVx8h~lVP_uiw{fm>Xtxc97k@4aW$5CwO&t+m=E
z-Ah|*m)*8@OJ4q;dy_|!e*69Y{^-riOYVE`+;h)8``i#p2r=PBCW)<Ev}~o!SL}q$
z+lx<!w(ioo`_(`1jU;5gOi0MJ*4=wHw+%Ly60+(#A@r5b-LvZ!Pe>U-$drfZKWNC<
zf}$5Jhwl(Ftqmbkhappn6Xi>_J|bk!Mtt9Gc+rTllm19JLC8#;)5{|YCKZtYV#f3M
z_aP(3Odo!wQ^6X1SCf$O_K`!!P79AvD+rm|1>gTUa#+F8ibHP=BV;0;LGni8gOI~v
zGx7Y_a9(ZX*y3r2>oht~$fQU-ziiC-Aq9EPm~Dg<;U4spu?5qLq^c6bIln$}T*263
z@rL|Q0pA0Bzr1Mtq+(YA847rc`S(Q=hZSAf-yipzjpx%AMB(2_)qx?2s3eetkZ>}=
z5n_ypFg37;811B-zpCOjP`rkg6FX_y$Ih~2OIUo9zT$-7ghVvy>yR12l@7&yFt`r^
z;!qM4@~b1n{Yj`e*qN~;EacbPb&`@IlB5VqBdC-_b7_)P-Pwp;&(nU?F4B-Mn51cx
zIh~6A?}LiLIh##=9KohJ2e1K4*#N@GldfOruVMsYq^Tn?+{j@M<got>q@jQ`6p)q}
z6nju+pQI0Bf9>m_2F9<U*|qD?6mt&E%d_QKq9Ro_jn+AM>^ZG7&99x+sL_CibcY=E
z_wnq;j5W&2ZYbyD={MyFc32GnwFQzGVwbWVEJ)&aW7&2?xm_~a1Ilq*$zZlxr4+N3
zF6%z7%hI3ti!x3-Na-Je>u~rz5clc^qJ4~!#F7NE&JBDB;0@8yY{ZFCKM@mvk%$SX
zf^Vwu35XBjLz!id&yFr3Qsofsa=ATTOe9`|%k9D0B>_I)1{>{R_|RxKmD>Z1_DIp$
zQf?<kd$jnZDj!1%;7_sTpe31eq#WK1DWc)koWfrGd-K{&Uq!p-{TWS7Ti0!SymkGy
z>(QUg`yl$~P3!CZJ^ydIT^mlfFQbE3(7oCq-d1S4mubUU3LOk`B<)<a<wojGl1Yjj
z2{mhBAZ{cCVswG}xRY^`%!kU7138{C(;?;j)yQ8<%+xz*&{vGlX|mCtP;SR-8h<UR
z;r$AO%S%g3PqSg>Z8-*u#gLMRQ`MkaWSpp~!H{B0OS9#u7ON#sN(w4;w%-^Q{C-LL
z`sy3kg`Wu+F?7O)kih=bw7Qug^vf&B>rxIL4K59yJZ0_)I;YpXg2vOYAAH~X@h9;=
zU)!)tVhhLjnl*On_8}+UioE)K^tTrm?qqB+!D_tZ`bw#<+$5o(ff~d{8j@9x)JBc@
zI8%*wrJTQFUhtYJUh9L#>u1~Zv%Sku$5RUMlp^TE$O+MqT@oRCQA3O+(LSdsMtfYj
zJucgxVl1iU^Ld=Hq@MQ_XaY8Xj&$GxxRL}q@J`_Be|@K<Q!5Ldz9v8oFP%MoeSjKz
z?n$L((-y;m0}aieY&krbeLQP5J}sR$Z37ODCd!k|TMZFkwjLVnd^ALwFhsc_ADiEC
z$#I!IJE!T|liK{Q0~s6EwNr=Tj1BMV{98UT=gC#4Wp;diixsD|`CSV5$DP~rZ@c`~
zMjqK3JTBk$jr<Jo8%I(}9kSg~wQdf_ZB?T^yqv$*_V5fpiqjXDz_Ar*wQ}-Htis99
zQ6sPlKS+r+_#wPTB0m`2-<jNpX!jw?7>)1jRg5L^UdnSM#C!NvNw)XX+I7qzL_v>M
zPJadi&T~|QH6@+nUa{CHK2$Ac)oQhYS*4{UtF6OtPt0r+5c0vnXY2uiuWk6NpLJjC
z_Fb>EJ@w|5ujsKQo3)=a&zQsK6a_Sh-8MQ{?bf1u5uJB&eTR;VCLFpYvlDZlT{Bo)
z_{<L1v%gJPDznczO2zbO)maP2td{Qd7?wSv%c!P3rel>Jmy_r+mCIM7o8KuOe#hAy
zXP;9#%<H&bS*~rN5JZ%W)iR`Lbqp~Pql1|vfdgWfv+beaw&pw&u~}8dtdS<GA&p^_
zi<8b!d2j5l&t|aE!)hHV31A_t{nxaN=60SnS$oF$SH*4ZrG7=l^af2G)EoDAt<h?*
z`s!$Le}nh_A)K45j2P01IWL{1+bkv%kj7F{&TFonakTfOET+7gU9_XEEQPSPziJ(|
zcRNj@j5Yk~U3&6jQ76r*9Xnsp3nLiK21?7pm%~V+n<2>{0$D7y@)$eGj<yHl7?>T6
zC#KpIFve7?Vm3%pI-RF|*MeGdHn*bLX6>a7^A>(GQTq6)wG-&m+R-t4`e{G(p~>0<
z!Tmar^>RJAj09ut<7Qm;f}g2gs<2C(3nv+pfaN64gV}MqJVBe<rL2oKC4nw$S0;s?
z*6PvMPSaxoFL%ke<YQtW(Zn8*T_SrW9=|sMex!84@6^DN#c@?iqN-_k+pk%*<(V%q
z<`|a1!dV&CjEO*&l~6An90*$y{Z&hir603|E$E#K85~94hVGN%kOG6m9CIx}0iqPF
zmJ;H9c<nlnu3;>#Uf#hvO<B`HO`5z#n+$F&HyqrIL+x59trybV3|zbUnyzcqu47H1
zIXMTVK?i25wFo5UNY~eLrgDo!kR;N^VNFiqE6mDe?!QP5T}$C;wRndEDOXa}ds@4W
z0`3O9n22ZXF-|~&#Yw8w1OZ^9ADllQzyhn)reSw4o-;^+DY@FOrD0ULw(?|hCXQDZ
zpG=LEoj<l~^N8ALT}A%myY_9q)6Qw-(&Fh)Y6j)Q2ihmaZM8oPYWaQO?=NU!J(P3M
z!SdaJ3&iQHTnF4C6NL{@&MuL>06Un(KZP2VVpeRaIqd1O_q5pwEG|)gZK?f5+}(=B
znyI`D{iK&esuEi{I}w<jh<`rBPh_%khZGURpBZ5+3G_Y_r;xf1YYbNuxdLaSf)8<-
zX=uVch=V3qR#9MKF@ukpLW_nkw42X_uK0X$>AT?(uRX2RWLH<Qpn_v-#;uU$eJkmb
z+v6qq?W5P;>90M>`9?k0133v$S0@V`0W~rzp$-GoVLH@0Z+4I>VH`}7?YK>7f5#p|
zCpfbCyMcsGw1*i>3_j3@8SOz_yD6#e{m>Cvo$IdP&-VCo&ZU#Q-+|(-bvd6E<IAfi
z#;0;UL6x~Iw7LZ$zE7unr!6WC4J{fyagXUt1dX_I?#-~km9vHn4lrt8-@5ckK&d)y
z;=JP_!3*ZEkm}MEQ;Qcfwyc<*{fx<XOGg~9U;Sk9OAlrFUI{H)Cd=FBPhBiiP`ZLS
zjK{hN0vBrcFT^ca5|>LfQ0Bv+*(J<70ItGQuK76v)L?w=2o=3BF0R6Hc0zM#5?EH>
z>#;93ENkeT6(uF!sCY!}3*zZFTeMTO+f?c6iU#bp49v_#thz$L5>G}uVyh<Ler|v$
zW`^oBqifoDt{=4;Xefsd`bZTod=ACH#i%{hXpbnzYe}T{JNJx0SeQBM%d=X*#tE>V
zo@3$Km}gc#zQEp#b>1i%H?Q;slUaN4=BfA8V}=<c=bbi&&6v`5LVb3Zy?sKP*o-ml
zQTaXXq0H`_o3@C_&uxDON<-~hz;Ti5E9p<gK`bPV40A-MSLYx_bKTfIKCuq<@d+|?
z>sP+a(P1Eh5DnQF6Mt7?^%)B2FwuJo^czxC*^p<g$~<FA1KUZWX=*r&)JK;lT{5QJ
z)V}Dnv~1GBjv<lScdzU(4-ZIcNw?5^?MA`zECZ`MxcT&x5kVORies1j@LP!QnIA5^
zt9_=*Up+tS44q7uJBwKHQ%`p7w!I5gp4;)%=H8gcU7)Fzm`9c5{0r9+v&jdj_)j45
zup3HKxEzpYRD5$oGCKpJrOQf_zh6+Iw}P3GW>~#>(6p>1g=CY7j@a6DI5uO2b%EFF
z9-KyjW}<YQ3bl(9ajht!+t<o2iS?q(A=To%%Ml*SO#{xweU_*_%2<-_?F-aGYp-0O
z(Cax<=L;8_zFV^g?U;Su%hdyyO&QQHAY8lu%9T6e!P^&iY9A0r)vKpo(;kFOn>foJ
z7BYSO9Q)wlQ3XZYLxV>bjNKtO9(%e$Ug_xPzmetpr)OWv&pSBa!WXjqQH6cN7Mbmv
zTfCCVJEWvx%VoBqc;phs)^Vw|(WS{|;3gWpZKT5_c$?j1w8waG5)7OK>o_sv#LRIb
znfc1)7ABFzJF~GQ$~$71ntrT1*bhAdAL&`lCYZC;0@GZ9Etgj<-IDhN<F*giC#@FA
z*6wh(Ne9}8gf9Jf(Wx5&Qe1OwrgpoQG4*|Fey`uryZ}iaJ#^OTFoP*JkIn1Uk+C^<
z7OZ`^P?mpvee@n}xwcr{DSz{qJbpmit~-v(%B?Mp=hQABE*Hs!j&M+Jg|%h+olpbx
ziZ#+CV)Wr<F-`i`uH$mKc4&9$D)dZ8pJ~!0suE)e(R+$TD0+f|n~|H+dATzv*y2OM
z_}0$Kp|xPtiU9)H01H1i$(dF~>R*k`b6%n|*V7rV^A%6mNG|C%=+%IyfhpM~*zDOQ
z#0ReiV~OlN#VtYf5^wh_-iwnmhly7yYoGJlUO<#ju1fF7t-TNl<%L58>rLSh33zN$
zsPlLdtEf^juNqrTr7~^tI&IM{P929_zerah_o7KPGSE>qHI2_YY?B}lb@+J!bZfXI
z&Z}U#wL6Dw6!OgIFSw0Da7PhtbpRM{@ainokO$@}tPRy5;fp+rAre%PMw^8W8q;;Q
zF{D?&;R_?qntv-fdLb<0(u~2@Ke=P1F>REc-H>jZWFORe{EPupWHzBMJ@hh@UprKG
zbY$Nx+BG;#Xv6HRMwD@nNeiu^x<lCx>$U}1>1f`v6(3)7E}V!xJ=<Q}t@G)cqt~z%
zYoNC9FNKJMJp^50@iVVkTiaMt#pg8LSd#2>3PzUia~fhSY34l@dY>?_Y<VUi!YZjz
zDuj(Wk70GlOj1o)9}x8^Y1LS6nu&m!$fl@Brc!i!f|=2a8RXM_$A&IlQ(P1hwDrz{
z6^j=KDFqwKf(?aVAG@n9`7I=1+`awBj>oR}@~ZaLcD9Gc(or{Gpw<lw?>ajvlSlVY
zq>Jm>Ry>~^$@+GDR$^s4_tDNJOd9Tdt9k4*l1h8gu(Q;(Qj#^TiuO&Z_Qg6XcbnXs
z9-+<N`jEazdzVPkQSG_cKGXJ=(k3S)Wm9f2{X32-+JhembDajqUjdG9fF9A>y<)t!
zjPBLrJfAD?DmahIu^uQ3|5%{kx^M)EPx*R~pp|oBAW5s7j+bvq)<ZP$g7X^vbUK}-
zErQ>!3#-D8aH-G`&)<vZhhn`ZKzoQzOyaW-85>&8UyU9b*EN3s*^hR+4WqMt)pv)%
zBJ65Vg3-H7xo^==sn0PhbvbPdk&q%uid&yc)sGFG^u(v1gqeODTo4Em@cGStw8ql&
z;bG&ZXz$SQxu?TJ$Ij92D|UMG%$tR2=f}VFH9O|~m9C#PWs$stE|^$2MuE?nl493a
z@?Wq>5=a+Elo*{G%|ad0dAbD5N*uE!l-te@qa<{qf9O46=yBc=0nt!<vKYJq&=C}i
z$(q8_L2}{Dt$fPsGPFydKl4hFDhEeo)A7{s`a{E|(9e^uI8!aEx@OhZm+R5;``VwX
zH20@<-8xO9ZRkuz)?8oEy3tJ0?pAE+bN)kF*?AIcl+V+<n5Q5TMOr$-ELJ{C(3;u*
znxB$TFSH#0KEkPX9gct5WPsdBGE3IF#0HZpEge{&;h?n08dOs&)LxIdap4`BUNa>)
z+`bX0c4#lZ&{lgvTdbHKub?#GtMl`BoR&G3IeaC6FPL<7qgT+Xj^0XLI9OIW;P7_(
zGIZJKuNoUm0=$3=dWNDYl+7fm+`029b~CPGwo{rO=X|m&8_M=MD|RXN-C9i#90vhM
zAZh+TR+A%;37y=30oehEk9F@}NS?=@bJ~k8JEbvk&Mv)JSGLeOn?ErOPn_=hR#71x
zl1Q;5LD;+Q2m3jSE9uJ^B78I8biRI35SFi6mE`V}lzsMU((NSH|7>_t0zW*F)ENi=
zWt0kohtr_R#C0ia3fCN%WH3Z>-pIWY^31l{H)qzoHzUx{wv0yDU;R1aV({9zmz~wk
z(*E^t&uXNdk7MN8i1AFC_tVy?bTh5KQ<A@Vd-+D$pnakJw6eoX?=xjAZN1Yo&&pIW
z&%OR-o`bNAg7it(jby<xbP9lcfNuug6vv)GI?<6GNc;QFy|9_NJ0(YgJ4K#xd9t&?
z<jc;>W7&<dS1{276}xjao5&$)3(-sgi3F=hJmOzjl(=CIl`lCjp)Vyt;0EpRE*v_r
zmzU`vSIRhm2-y_kM};|(+qQK3oNdzT%ctYD@87ugR>-B`qN16{&5Hf;UvK;dOY!=&
zHB8<=U&mJ$fv;ls^Zfh>2H?w}KU~1CvwER%3WmhEFQI8fJMt7MBs0izvYi|!7fC>W
zM+0t6s|ptdP0e{~E47z8T%DpWQ8%lH)iO1(KPcEBa0zKZQ&{4=J%Gwt?5kg#{pd??
zvIAE&C@Ic{>?LP$1;SNg6-#^-EAVxDr|q8r`mWvDbyE4-%%NtsJFeoe^U5wPMfaW5
zb9fg<`u+=^{ie!G8W3>-z(|0O1hIrT5-8!z6_%Vh1c?I%XQnwAo*9x(!jYxA*v>zk
zmxfMtj#;Z!JXLVni5VFn?}xN&%Gy1iBJXpqbiNIs-0%rH4kR5MG>B{O|1v!S7=849
z<XpL)nIiNbgE(+vb9-Dl?Up(Jyne-5#sXiuBo{v33|Q95<GDUL)%CR!3TwkelDUs8
zr5c{jePn?iUjFZ^DCqz2k-3?G4T=&xVhrZ1+pb~=4}cYLt*PsZ*Qcmz^ZmuUZoT_^
zpq#UCn4N~Hn>Q|b`x%p@Ze4ffuNsk&(!9TROs7L>)n3K2tbO*|DDATL?SO;QmX|)1
z<*nMA51L*7L{^|CkvV)UobNvZN`nw%?d%AOjN)Sn;wr5hp8`=j3Uve45iC*O?;m0S
zT+rmV;xMT~N03u0wF3IokjqZ`)n~s(n6&pFY0uLZ+pb3#m(0_SuzcqYh^U`#y!mi9
zVp=n|2`|lfSCAqLtG7CE9p|>};*1Etx#0^3y@l)WRWAQ<KYq+vK{a2%Qmuw`HKh{a
zRpDNP9F>IaD)7w_Zp)Kae7Hhu*KS$)Bvoy;yJ+tltI8*;Qcy^fQHHJS1=8gv&kR2Q
zI3udVn-d-x>B2vD&Y}HjOs^TTwBV1OJ-YYQy0Y0f-}B&o(#?^QfkwOLa=hmQ?=Oh;
zWhFx#O0;kZDm)hD9@l?YB6T;A!{}BbjefG&5iAxL7ll3^S&t}GxUQxe%!U-IYiaDH
zW*>gVNz1-`XbvvfaG&0Ex@hFu8xi3P7HfA|N9P&L3H|EEvhrN#wovvh-8OIbYRn8J
z>4^Ls5Z=V04zrjSH{^cQpMdE};2eM@a340OEX0Md6nqGUYc|o|>9Hpm?bXWhT9W4d
z5Ch1|X4SZ{4bM)x$IFnwWGResBOLxhIZqmExqLETyJHSo|MSvCx5ubgf>thAc0Mff
z)lKbbm8jsgf2>~i`4q$Dz&$kiGM&1&-4ij3f1ZAEm?Rb5nnRatU~JLEO&xO+7r4mG
zGlL~M>E>LzV4J*v^P8gxCI(`@47%L$(~l}yziRYluAov6=D8gIL2LNgrO&j6adJz=
z^!Ja7X*cdW0=y&<_cf8mj&M(`g_{a~STq5PCY{K2c3TqWhaO4jvNi}_xAtmQ5|1Wp
zm%m)|_Rxr<7mh?MU%B<o*rSTQBK>piku1&pbhY$RMe4TGvRblNx&ufKVuS^NL?!hd
z#1Mela?huq57JNiRWeaRxl)9o3acfDHDR6KaT*V6AHGDXeEM%LKPh>U5JNLDQjbLO
zV=aEH+Ru$HFriBnvD}43kvKg$upIdzR2%?+0d7~bmHS>(q;vyba_Dn%3wmbHq@X8g
z@$=3bC+5f*TI~}P&(Y`Y&q|Lf$l+Vk-M_oYwT2cy{+z?<dIxyO#JgZJ`d<*>H!u2B
z2vI9^0S+3WT*@^KTtYUJ!=#MJ5b~anmZ{s+W9kJJA0a)2LmsGd`Qt_%<RJf_!?x37
z51hAX_qR1oYxjUXsg;#W3t25^sxy<>oVVE541NtaP1XgZ0f@W`5d5afPdCva^#JF7
z9@sM;HiZ6k&pE08r9s-I*VudPql#h9?^uSk1W#~%2QKvno)Ab{xu4*7Q=RI4Ngfdu
zVcNpSqj>4l5vUl%Fl|saY~0^t_*P1ed;B<7y5S6olRm1lYu9#p+HOR?TrTY<JD|?P
zN~<Qqn(%A?!`AQ#)nFhnl?_QWi7mgNJ-!&Nt)um5k@DcLX<H5FfupOgg={xQAVI$I
z3=+P!bgwf!;GmPM2Wi6tiv6#*@$4CRc7k{|d{^jAvpI9}83^~i`<WPKJlcl4oTf$E
ztJ>P=OH{e6&ik{?R&^<!-kE(Uh2!a1n|^D`OZw%=l@S&N9;I+@!N-Htj}YzG61s2J
zf!*>2Es?$NtO4leyGBVCWF1L}wu^!23(yxq@VWrK>~Y1CSZT(VEu2ou<&Rh<;>!{|
z#~6|$oYMYqX}JTf2x17&-q~=(CmB~cv1nN4>epYFKcZ=nR5`8((rvjbBDI-hmO~a<
zBoHt5WRIkZ26Kw$?l_LxN(o$vXTBn&Xs!c0g2e$^0~`~+t_6oVSU4OYrhWa-@VEL&
zfTXlsn+h8jUgsPH>0u{ThQ=g=YBi)<;Cf3>hJ($*N)6JcBWunC1kso;uY?2*9N2%2
zu`F=GYh#aH4)3F|Fs9Y)y`z5mvJ+(?fqmoS8o-@gviRBOX|I9_j1BBW2X5%f<d+UO
zA9S?kMXY4KJAO*X4Cye8OYQ{VLjyKVq$(Nih)YPs(Ci+Kga?^{1tFq!l;}%Od{fCJ
z)KH-c2a5xb&-h4dF1&rrNlb~#Fz|GU?HnGifp+2+fd&b0ku~yL<my*uULTlxga((6
zU2t*dDTNwNNh3!eo7}b0p~5}gSoC4-_j!`MW{ygnFRYd2PhM==sK@#pvV2ObaY&Yz
z{0u5-<@!eYO74bv?&u&%$rzQJ$OJRi2cxU^z7*$>Be=A1M2Z8CYx+oY*cW_S+)~=@
zE05xS3O;x6@>%GEf}PPP!WX|%_{^m~VTyU}gO$f$JH{p!thxk$p=_A4fK47qhaVjv
zv1Pw)tGn}egz)YhqlF7)>4O)lG;J|?DW8+}h>c9foJ7Eu9PW@s1dY>Z70@VL(0oqB
zH0Z<7btv(TE?^w0%$-J#U~%Ac;^S}ObK(<T6PXs63M=Ozf-2L~M9k90y_TxlJ#uyV
z?9zgfrP}X@%=0d9b{M2GY0Su7GkP`JJ^DaTmT-s$Et2GUEcb6xyi%4wzuM5UW;Zh&
zqQ7pGrDq;tOf6mCO82nttnhq|ahTkGJ)f9{m<oMBx^d%(3*hnuiAQIz#@&vCv%yD8
z;J#fSy~`2l?i=ur2~*M-T-e-W%L&bp#Pta%SgM3MQ?TynqgTE#DG|HwFFf*GpkxSk
zHa0C@w0G&q7Vk$C9jU{@WaETLnI_-Q+((0+k>vNzHEY&=!yB@^vCrV~((BUhozyr7
zzDs!az>>PCG4NatbEsC%0^AfQf>sG0jv{!RK1`tq=_mS_d7Q>4nSzJ0d<P8%hxEHB
z@K&B^m&2X&*1E`z;he(2gSAr+9*H?@sxoxcft*g3+I0p@4l~}1xpzQ1v1Z<Zrw6f!
zEkSH@!RR#=JvpVxT4%XBR!KZ8>?Mxij7*Mg<oTuf>g_s&Vzuih!WcGtMkSagXN{`N
z$L%mihwvN0t>imF7V#zLmcD!ul<3D7k@LeT(dO}Qq}woGSaPaxEBO$mp-1$Z*JoTF
zRPFHDc<tNQ#@)&vF?iqnGx3p&N``IfCbM(WsKWh|dp6p&;YtKcD51)1NnSqv@!i{h
zscdNP@#|p5tQ@pRmPWidtzqPvU9x<D{=89@|9qRzWdi2%bHNqcIjBdEHMv)wP!n`4
z=n9-aHzX{a4<EAD-(`bwS-1y8WQ*Vp^tuVFFKpdlo>DqhRU$SXp0=bEJWndyA+y&n
zz!P$_P6k~0j*1F^g4xOjXrIGIk>DS%>n1KgXmo=XPv-dxL4G+sAQ<k)LgFfNYx43w
zKYRIXI$|>o2Q*^&az0(b8rIHkB<Bxkf+x8mwN~_9JShZGrY7zui3!)oE!Yoc-!JC_
znZVX^yEVJS=#4dj+e<3v_L#=HHnTYo^lFJxA=T38=GP++EzWIjOwF2K<#qyX;0_hl
z0uYZ|ZrjV4X=5PUE?=T?*-aR0oR!@OX|<S}L}+nUfRGR}*$tThMqglld_-62#PoQ5
zSOLOE6_t-f34brvD<lZot>^3ibYb04gFH?wNG`6GL%TV!x+$Ntz2oV;@3e5*>jr%^
zS6iu)iozl~NXv0<0K|OWegwq-p|xSj@M)nrpP!{crRYH+g^5}y<kmEY#Yb-WF%G{$
z3dW&NjGlfdM(igSszR};%GW5Z$~83D8p3Js@9RZ^FJ{cZ3DxRHt%&%6ZXpc#kuI_>
zeSXB6*sZtsZ;zaM7G50lo+10JGs~uh_8)v~=(5twa>MCsW%g7zhb+HU;%vZf)yrHe
zvAH9hb=b}E)0n)w;u~Z~d)667Ya%@=bN{$_^Bb+-07Y~Y!w>`1<+p=MB1;m3@rg0$
zBk^5wX1b)x`itAv>r3vy%q1M!WqW1$waOJIl~hy!JR!9n$O(YY2;W#sAK#dsKjsIT
zo}J*Q{6I)0cr6Ej1cTq;)*ry=kT3>JL+NpcJ0OzSw52cf4`=4hKdye}#iv5UxBhg`
zU<jH%?5V9I!vmC%8N*gyx5}N^TIXiVZr5s=t^IS;Q5v$rdH#tOQ&vjSz-yDAeq#Dc
zS-O9YujBW%K~jalZ&fnNA-lCZXcF-r{_dyR3C%$#B*E-;{;n&1j^I#k_;6*yH){nf
z{2zfRq2PhR+1#Xrd}&)fK|Fl0(xb@bug$tVw4jvA2P2nU;tHNxs*E4CYhu5~yPvtj
zq7P|*E|lb%&fk@fC<w``;B9mMwN{os#LTqS1_{Y!g!NG9An{c>TwFn_RMqv7_|cNk
z==EXg6Xsw<<mwv4!B0=Z^!e#YluITQ0f41pJSJ$X!k_8ZlUUnxgOZMD6=w%8cy?=<
zL2b3-x!Z~~e&n_(1DbDMc3JK$&mH%78k1+q?EbY`)cpEz=lLG%_Az-gi(CN>&?9-+
zJ8}<jx7H3RlqU$ehxDJ5qmNIY9PWprVU@9N2do8L4T?)o<|}|tMO`bq*7MZR#if@|
z$4=Urlq+ot+*RQM_n)&x4(CtLg4SFncR>!uaEC?YH@Tng$8h4oN#Z#tk>Z7>92^kO
zkq^Zy+)L?Pjqy=99f|Hv@&E8$(!BJ_G-lxk<9W+gEDF9xc;;NBCC8G-u7oeY{9}OO
zk0S?Pm(Q}oJ_A}j5fnPF-^HD(I_>6!XYa|S#lwcIrKv?(wr<a@Img(g&9o~ryKC2K
zJ0LTr_V$UxHg}fTOFL-4ag1j+J?Z*^ZB&{<S1WK>d~`J-L3PANVw{osNo6`06flt;
z`;WXeo<iuG0Exm56ib*nI~64mSm-%*Z3biqq}fE31a)S;6mxxo#0;I1Y+=ow95W_l
z+|`(?SxQsw?={YWRV<x?wwTxs*!yb`*agh}U=>saTQb9<p~AE6o*Uu1)4>$%Q9tn$
ze|nw}S4;euWGbg+;b{}Rh`&o=Z_K^EW0SeKbh08T9a_9lxU}^0iP1>ndG7+d<ZNCu
zqfIwSJs?FszQG|I2hsKeAp2Ken+}XvdHRW1lbnQzNDhZtC45{t^eA0&)%of2cN|Ws
z@#7mpM$Cf;OT)VmGRUF$tO&ok@*_|o>HqmC!5Au27D%uVf{ObPBo3G=0R?v%@L0~b
zwC^R&yrD>&v0?Jb=5*eAN~HY9H>A21Z^-!-A4zE#yX!i}{wtshCf(iB;RlxAs;yk8
zoJCcd&Ll{f&Z_(HuYNR1_|fP?n)Zp-i3YrMM!S8NUUiWh%#Ospd(N-uMr{nM$q@f_
z9nxA#-vgd-)H)%Fr;>jNO;yK<&IN&fp{a%&?No#qeJI$C4J^WR8+f+O2H)cWI{&6~
z&XTuM+ZeNZ&92?-(iIvZ)p%^u{z3p{vm*B#I7?0e3_k!TK+!+^Z2H4>s`NLy|9|~#
zY*1{)b1{e!z8WXRMQ_=%PBLy=2^y@gZIGhWCt%5BJ3{oF(`<WKwj)p^T+ZV8_r66<
zuopSg$1p+tT>Pesr0!I!3YKnwoC-%A#Y#Wfz0n*8<$Qzj!^DJ!bYSc|wUUz@BZ4Fu
z{-uZ|+J@Ypp1oZsV`;#;pzpq*-G@zXrTzBs=75f?Yi2%bov<gDua6|{7y7*Jwfm2p
zbu;w8GwW&CdhHkWIbd(4ww4vD4I$UE9Wg?#5ex%1u)`9^<-shw1tYO~%d;Gc)gne>
z$TMRMkW0wegTl>AaWDjo#=w-~4>J=IUYrmrD+x^6RBPv2bF8WuH-vwb7?-1Me%zWy
z+%NCnazjR~-&>#0pOE|0iSoKNp247gyshmXi7||#tL3{=I_&p+M}&y)5PLW*qH;Tk
z2Nr3hU(Pu`^i7(8FhB?ns8+#i!0=Pj!dV{lOECHz<k`q~!(LoDXJ(@|&6m~;*lB!m
z)zmS4TRhQzlt~IY@FA0m@}HEBq)PkWl%@XN8;=_fz2;|aE8T~@J_!-sR9<BwR<~}V
z_!jSR!sdm0oU2h@vX?7NkTZvlJx5RH4{FF0&l<C5AAhfO&Tb+%sa3lnqg*rX<_eY`
zDQVFAdN>RsChA_^em1+li2X|G3`RSW1n~+J3=WQ{a^!9D?9({!jCtHhFoQ(hm{26#
zg=JAGTu*|Es9NYZ1-oLOje2u$R%!Osbzvbjr(c{}tF+d_4abWLw%!P%Qt<*dsemrI
zQuUkft6p9;o(8|QIO_gqiLY)dTqLV5@<qmKB=Az#BiKvJlviNWj&nr#WE}a0VRTQY
zBObmG2=jP<H#K~jK5lB1Pr&(tggjm|7+UU#a$jTeOEAT3gYr`0Ah+h(Y{FF`^5Q+w
zE<=)mo{x*{!(NTAh>Cx5LVWDr*qsS6)N<|UwSY^8!NbOFHzv}&ST^pRZ6l;zJ6Vmp
zZ|riu_PZ*-SwahE$nwGYk9R>2G`YT1R>?nO-Pa<`9GO|!9Qw?EWQuWn0eRyQ!vCG@
zqolyQm*G9dv~c<~r1LdovVrk&8nszDH(&;<fvUQ)E?j=9^u?v;US7Iu?4GJY=Ds5*
zubOzK?DDeH<4-1rn7R&`w5H;Ic)LAgCcnSV7}j?8m?<Bu9k)c5=PX^jq-XEVG->j#
zxf^H5Z0gqa8+!L$t9><X^ISG@V);yT`DEs#H>Tsr<5(zlkoSOhSWtHx{7+3q52ATZ
z+hDHqISf=J09U4~D&90k5N1iB&nfciK&pshB3cU+VWFC_U^v;j1puNE{2vrZ_~H3K
zxYMiCT_0%)e_FH~@w6dc>tAW0y=tNL;`yum^-ZY?+w818`_L@yIof>Iq1ng^!<zjA
zT<}A|1x3Y?hY#w3M~6bCOjI0UotojN2wYya{Ak&tGVK@1TJeo^ll_i6+||P5eaa2Q
zhn^r)D_x<<P}7ou2}hKHyLtIi%lFQygGJ@@PccZ)D+ceQqdKyZg*lUDEXnb?A~q+B
zU-4fGK_MGFRUI}jIaK3HtPL&C29ohD54Fmv>0G6?$XEt2pyek_Z;uEK)9!up;V;3Z
z>Jtn4bl>=NV903gyDq;(hP^c;G+@cpnX7Jp7IHRV(X40Ag$EC!;jL+?7P<Y1C9Hj2
z%9@?B1P`1_&s`lf;@GLznEchtwC9|bl;sU+*>QZ|v`OEeA5nOC%*pK9O#br5oXs+u
zJgV#19tp*Udf8isHm=b%rrw6OMHyH*AIU#TUE$*i22ZcbE6PeFuiu7KM4(_^QJi@S
zp6Sl^P4#*Ikxzc_KAN9hyAg7Ivl=UX!BRy=FL-IKtR{G0J6rHoi3~=5+7HNp;PtEd
zWQm)pW?>4mbYiyQ#3sxOo0tbF`)s(BAhG_Ape!4on4s*lB*++q55hz#bxDK|J;UsX
z@t!(jMJUy7gB9+rQ?+Bl)4Zo1xx}>qF?ntdC9Dvu#im$L=T*&=o`#wdnHlnUVjB__
zRVJtNOkcTW*u_oj_J##T-rlu(hq^{>`P9I<@st@lw>X~StcCUP+$GxaT%^TCp1-1<
zDeGtXf)04WLE~0OS-;SZUJg2^Jy^|pZaE^$9~>Ec<zprv*hqU0MkRo&YD&kaB*WDz
zx3#~R{3)IN-0PGn@;z;7+RJq4t1`Q;9lHLiw)-ZPuhV|qTk#@0BXz=z#v@mKh#RvO
zAk)GZhg6;G2trbVc|$9b#5qDd7OV-cXmXeW`4_Y7CX_7#nN_`CaaVMbAKH+1lFW&o
z2e806;l4<BqmW0iQtN{4L&PC|HAQ}U;;3n|a`DLcKo~qd>-P@d8EjuTb8%3fOart_
z?fb>`?=vz$$zxaB^_p2QX%-lNbZ3dysUJLcE|WLS(hh-+X0%u%HMM1Cp;n+T*&?l$
z&cIIH@wbN9>JFOk(!ed})2Y%+QX(?OP$P*VQp$xt4|e#}I$^p6Gm~bPWjj~JqX=^<
z4cG@ZOA1h3&1o|nva$g(HkZ0_DD-xnI`t&5l1MKm_ygj+r;el$uF~6+vK=Y1aD=CT
zVpEJMpxFGR6#i9yc1fZSm1ZOg9+hOY*Dbf#6;;;Fy<dyyjF;*_bT*#j1Dec&dM+~s
z%-NF*!?iuD)sO-W5WFVc%GYXIddd_*bf;<T28;D8?a;L|+Jg;?Lgv3d=Mrsq(Hu7a
z)j1cmvMcmT?()TyuGnOdT6FCgNQ0Tgma9nJGSqIdaZQ_HfkDmsu4HeyiSMd*=+<l6
zu2*FFDjkru@Xi!TzC&ldxcGx&#7MM-<F!*#SE|gPm_I11W<lfL2~8tXtF_5%-cp`V
zS<Cz<nn;+fKNO3!LpcO3F2=!Ru6Kx1QW9S2#K2r}k+aA-$;wtKmNlHpA4pf&2OhrV
z$rKRgB%dL0t?+C=`NrK4{-_jdT!o-d0|V#krzns9UfwsN0JOGe_~3=J)y8%5da7#u
zdU?I&bL00hwrN-qO7Pc>sMEGf{o0*-0*X}FI4=1SxMw(N<F3cmL#15X0Pp;_`dscg
z^NHp-lrWw)aW+_qRYb75Qqr1pxV&Y%X+gBMx7opF+VU7Wx!HjU74Jq%nNqJU+F-hS
z3*GfNbSv=qG~2<xQm%rJcX3m!UmBV4QAWX6Z}sBA&I>oK9@`H!)RhQ#1c!?Z!btI@
zKtB~UgtcvOuWi(xC9(a^i;;B5kPt&|?dDy=wg;b@H*JLyu%+pBI+N`vrWrlj)y|`|
zeG@u)6Doj)&zzlu$|iUU*lPBjas{~%p8QkcfYjHPa9#sa2eI<d<t*^2=(2Khk31w&
ze~vnX51@fW<ix{4m*TVZOeq5VSaAbnF_u*IUV_oM7eq=j_HW2Tc_2uer;vdZa&zEl
z;<SJY&EB1w_cy3b>K4WC4Bj()&T7T5b&9N%E}pt+OY{7u{S2Y2ddtHpYn)f7PXA%k
zr6~ndn`h1+KcBH#W9r(P<_<@qKPB%XOW`p5HX=)bAxnXYECmedEN3sQKM&GK<uTyM
zyeu3(MSAsX?TtMu(Xf3Cb$to{W-4rGGkMAp>f`P4^Emr?Jw#+%cWqX>tGKU0R}Z<5
z$|w5+kLCVn$T)5s+0^vpbl6CAH;mh$_2&v!lwIC$9>4#YE`85ZS<ZK^?U8>@Qg=y7
zk8ey`&f04k%10RIObqdcQi63*%|Sx=l(<Pycs}%r6+mNIAS2bx*Ig5qqev{WU(>fg
ziwxWNa4n6hU;$Ke-CF(8WcoMXdWIZgBk5wP1MX`S_FW(+(GOzp;2yp~q(iiE-P%oQ
z(>k@9vG?krc(X~}I!~ZR9~iu;wWru=2eC3w&9qQ8bp+|L5eE$wH2_F;GpOEW5Td%B
zr`YTR1Y&@42g<M=iJC7<r#8!njUgkmvTX57hEJ5nsKZ)^sEawwpI{x1hlZ=d5}`gh
zXTrGh!v!aDpJHt<jaC+GLq-`;tWCe)KJrd99U6sO_pJZS1aO{f?4&dk6(oEQkX$#i
z1%B}WhapbH%lT#=K5`ptB-(q5X&0^mPWD{o@!zF`bzHR%PX0GHujYrh+XuDj*tsY?
zFrZzVZbf0rOY%$GS|7e8%QrW-I(k!UGiVZ%CXVbnd@N(dLm`*L$yTYCR0_GgGZYDO
zWG5X+cx~SW`0#R+lh8{JlTK_aj=N|C37`gYj9tSVVU9VW>WJc1e&j5!nJ%u`MZQ8-
z7{9hH+lp%rAv>`08sWsp*u^!wam`Bb7k>Yh;+kVp45r3_jK>3PhyI*IXhn(Q8dw!?
zYctsI@FnniI&gBM+m|4$3b?HPrEpIAABA%ky>Jdh1Mb3;4f1R@x3s~VJeygR%(<Nq
ztW8MwQ3X>&LkIL9yx4Ts{A<a{=fcCU7Wa$!y<v9khO|)@^yp(__YLhgY0}_g#wHA)
zM_!fXR}P;$J-p{8+LXsdo7Cc(bpwoJ5fDBN)EACu+Dtb-b>qq#6ydUoV_Nq`IwC~I
z9!z6j70Hg(;8XL0EL^=##wVc7^Dlg5naPv;mxS6Fa5FB-L_^)UdamL~w(|?^@dLS=
zv_IB4_zBh|)_JQnJNdXOJv)dNXfScNYBjbvf1uOYTYN25CvV719)k5>U+f|h=q^G*
zrAAPoaNWw1h}lr#H|2J#QtmLwA}trfHyGxtnU_*hD@A!HtxjiZkLOX9P9LT%rRqHG
zFKsdHMmy6k6Ez3zv{18a_KCEMhHQL^B)SeNJC*OSA3_Se3L_mMZm$C3+ll2!YOvQR
zcca%&c<DUO5f>^%P?|W{)5LZGkX=4eKs)lQ(zy%8e~%#rt_N%*gk%-OmB5#g0s-<7
zx$|&Drg66rvgp$hf)e@joeoc)wdG2oLhDR*+@Jf#{Dqs#>jZ`My1%DL8-(Py8y$C+
zRn$zDYRJLPj_oF1byl}T$z66lIPp~htx2T|1(H1Dkc$-0IHtAGo^PH_U1PdSD@Q7d
z_WiHdXzNa$DwgLXvp$W6ZQxp0eJIF-L0!Bu?`elocp~gZZ<T<~f&_Kx0tb~6!V!Ti
zy`W&hnS!8``;iTgTKSmdTqaq;p2Ap4D%4uDUWZ4&%lWbV`|#jZKd#fhv6VST4TPfl
zLPXg7DT-bDn9|QLFL-G*)n3Nglg>}*wz<<*%b=pF*oh!UjUqKke@9|1Zch3v3_WE)
z#Ci0EQ8|slD&LC69_i=QawJ6R(!y_hD5O@1!f7rmR9>tP=9+Fp$^+yEFRGTf8V(ie
z?b7E=Q!Y;5b1F1&e@I~7`g|$q!AZx&hJ_P`tq3;QHZ)e1`pp^y1a;^-YH5_*d&wJx
zOm=J>_-hB-n2i$}9lRv7w%gjXA-x)m-aPe*h6Viw=64$-OIx5@A-BNwKrKM5w<aoQ
zn~~QXtof6C08lgPpw`)FZ|I@gI559B-5IYB*UNr^2!|xZh$Gl7O@fhq6?{7wDhsxI
zs_%7_pc)goj&b}UAZTm3ql){oM()cR;j%`z8zE`SH{AzB?^A~F$Z+?Cf3cR&jgc!^
z*L&)zyiJ9;a+{h0m2OMZD)vS|Ru_ndvs$a_lQ)Td65xJ>Wtt`zO}~(HO#6QQv7jLB
z!}}p2y`CDmHvEjS;^No?$@^cJd#YW8$=N(GFm(RNr*^f=U0xB@YESdbSEn5g34BVr
zH12pV3sM6O!NVh2|DNY%c5>C;v$WU9=`tJL%e=+TkWqO|W^?W?pVFe~=-HGt%3d~Y
z6KmVxM>?TjyWUc+v}<>wt!|g6v5uZb6t9Px3GaS&(#>IUSAbaD8CUS~bKWensdVDh
zUCa(+nDA9Wh4bYkaA>9aVv3qzdh_VJyOQ7P@n(V)ZB|L(%`K9o-6eHHqj!C_;PO3l
z*z!*nZ67Ze{?zdHa7U{<o8Qd;y8iLC*UjPcisqIjC}!<LZB@S`+V6`cnVN5{eY8}T
z$Cqu}IA%_-db{c`T`<;Zo1@6D9$RrqQa*+-mr%ETOwN+8;9VGaXjAw8K;FnSC&o}+
zowFM%-@)r>syvC--+?2*5~B66l0@o~l&8Ow!z%KUq+8AhLIr$caFbOYWpHp~*5^F6
zdDOusaw8|HeBT&QHE_+4GvxDtEeTn`;P37%U~qQq|Atq6?+LLu^p#SnFvbbP!%@v`
ze^e9v9aQZ*D_9Px<=kNLA$6{HVG_76**!z)Za*`x)`c1__<L%a;O-b8n=_){@I`CK
z8CZaM&%@Py`ww5VYKnoWtQyU;2j$RLZB2K*$$Co(TK&2WR^CbomAkOaP4xDH8@66M
zwZE1!ma>VyKI`?yjf@a~InL3G`mu}gOxAudw`=L_U}e&sOHj?2>mKY38R`_zH67@a
zYZ?b`@o)LR|5skf|3~64Pkhr8e|^(JDk4|DI_u&vq=j@pTez@v_eqIfREkFKEqbc)
zu4TvyLDuhlNuK5W-LThr3yHH|Txr~-$GV+N-s=2ojUs&vexC)^VGpb(|0+y<3ibRr
zcPiZHrI$<56>GAG>j%RycoZzq05?0L+&d~nx$|u+?I&G-|5u?e)~z1Y<`eHD(i|qY
zCSc0;E3yU2_~b`$SDSB24LG1*N=;Id!H|YUZ8nhvR;gNHqc<~xX-LlE{7;=&@y>@W
zw|-m@m7PiZK5F;2)WBVm9OvAHBIU<>J1l>5%)ry%CuIj2f>xWTyqlW#&`fHg?HDto
zV0o9bB3cTS*G8~M?`ZFI>a-B~_7Z9B`bxbocSj^FhcqUK95GFv;4DAJXs?CPmeFqW
z$Q7Zy>!|iyI<b&AvATd29!Vi&6z*tr)E5WrQdkn?Wn|nbY4n~tOzyrh?!K{p8#CD<
zJZgLU+UxPi1*CzWWZ)UUkOS#FjnuQ^(1q`9!sBhKfr|=c1EUL@GyS<t$A`1+?IO(1
z4gqS=<U!A_ZQSDKq*+&Lp7?d~<(@{Y!CJcvvNCDd(if{RWzyJ{&s*hg!w%V~rUV#5
zM<6|`c*tD|8=owl(YWcD`I0(*ZnNf4-v@rEvekcWGE#-sbDnF`V)7bExpT?Vd(A;v
z`MQ*Dk+yH4ak+Im_ajhS<@?f5tjhqN>8a?ROrmo|4BBo$JOkbYLxKUK86ii6<gksC
z%J&e7N>4W!a<R;YZkS--MlFT%!!UO2sAQyJC{w2L8Fo<Z3f<ZYONlRY1SzB7{}14|
z7ki#^UvIeg6t{%vt;;hvxyRSXZ$>3Hzi+omc<C`|u$-5f)fs-XjI1uow0?7nd-k0*
zv1is3t?OnrZ;RD=SN=#krF@M&10WL+vqcy&00Rg}2;c+o<gD^MqA;(u$`^*&=M<X^
zh|m-VB#ZkdxgJorDznwKNvA?)^iOTvs7bY+2{S@w_m9mktP|TSQMo&QNkUpxDvdRa
zTgf7tndk&qmq*wNd6SfkN}#<Tkq)mn<yPu;wnBN&{n=77e0WoChn$k@Fhw=Pmi6o)
zBPg3oX9Y1cj%%yRqquo=-_WAi=(DD3s=3|DB}<Av;a4w{E%Y8{vGQtRcL~|fz3{M6
z((`!WSN&n=lxVBNTurvL+pv7$^v~eG*s6Vr{rO69?f<zypE6`pw5c>aMf<Y-+7*R^
z?qDosaviA&;7%hO0{HVcz((X_+$39&CqeM}M(mkmAR8%C6d(sSYHzV9@;g2W=aot*
z!}Q$`5Id-1GZisk?(8S;-hfum2;`B)u~pB;qz@laT%~GhOuF_~`z>2e?EHC4`|TS~
z?0m?vv6n@$n$l~qA*_y|Fz$U6WDukiwQ%ilDl-T&%iX6=?$vb^QztytZ3J@;m@u|a
z##7@8dtwv~T)%)Ly^T?rWC9vC(PuFV>=`5>eHl+0NVc&a@Izo{AijDW%pjuLV#gnI
zipbp!cFg{a(SBQ5oHm;-jHJSY!^l?phkhNRB$7c`EfSw+GYasiL@l2&?a)@*rbH^$
zW=Cl==~i4yT|bc`=>;Vb{4x+G1_I5v#D-l>yAGBn3@*a<qHQ?#hX_xt9k)G3Ccz)U
z_b`OUr~5DvOs`#s!{62Qy}T3>DV3~tB&4MaOjW9ex+JQ!vQndkm6eK^z1Ne3G=AUO
zF3ug`9Zwbe;Nn%R__FY*gsAK&seg&d=Rzdt`|Lo9cq%u0k;#zE8LLOr20!IGrU4ZQ
z2<@AQy9NPF6tW41f0nj7&=9g@;=ozT#HsgxOgw9OHs++|P!rnlLEnwZg+uneokeF@
zw3X3xGK+85dfF06O5O+cgy#KDXDypeLuo9ldaxQ}ue>mO8Srs}t&o1k%B-vv6G=o?
zxMzGyB{*~l7Q9#SZmg8aR&0S}?*pq<5j7cA^!i7EYhAk*NpZT&ih-Dl(NA<S<<-c!
z0K=AAzB|t$ykzFZ+k#tqMUbe?Km^8?2dQi|K)|?5Gm;S4?swpD%;B)uX_HR3UfinY
zgz;Y{hrS>4-T_v>>~a}uH0aQCL$PgbO7!j=CV$ZzWg1XXL~V&YSgit1Fu+YQ0&sm4
zLMPJ!7min5*y@ED9B`iy7>|Sd_;-+-!{g)Oe17>>v2JL^X3jQnR}0^nTG}(e;gD(J
zrq57IQtB=-`QY%_^MkZfWte6BKx8}g1o(50Tx2XG^6%=vJ?df9-fApXXC^j@5O@^+
zY8`5UVf`eLd*t*XWZ)!2KS{?)x;~z2IH{(e)WAs%ev*i|q!;^K^~S^`!kQ@Oa|3ze
zlkdni3qQ@uQ%1vwiJ9VqhslUD--$!KP~wv(YHK2_@9fQMkJ6gHlOxP@VOW)~OWQ1K
zkv(br7s;U?#Jqo?^nf<|fIJ@BB@i<G=rzWSTZ35Pfa$|ZZZVb?y(5RQ`+R1l6W-ZH
zC2cIpAgg@%fsPsx712*pFy<5;H3CmMHvI4;Y<&JrieJ7hEE|rR6p`fNCR-m59uJrJ
zSTTZ%vAzWv12=*&+_({2l|%8=2_;FI%E{UkKV$gn-1e6I>is4gBj}>=nD>tNns8Ms
zeKfz(>&aoCRr%D798M@@13GcUgp3<8X7t(T8M9RXySg&e!ag79!3=onHxNvdq-xMo
z+Pd)~;#yesf|zt|zQp3gyLenHTtv2c2AcN^N0f!j8w4Owu!|81rOzPd*&qU1+5bJD
z^<TnS*!LH#x<ZPAl=0mk@t^QHWGaLY-<8!15Fqh*_^0b0evf}Y-t~~pmr@}mW3Wer
zQS8UcJ#B_^Hxk5Z*B>IZ5kApa(MIpxxo^=2E$%&Q-DC~7w92dc!kNWtvDs+ig83n#
z=9A0j&kqSRpQtAfSsWip<zb8B%^~vHZ8J`tm*vuJ^N*ipb!JJ@^)t4)l6tEQ19v@k
zJz~?qldF;OZoq_PqywfGqWHz~=8?5zFJgIRdvV1zB2D;5P>+LM%{vN*shSYK{|w`q
zt=tCyg8W}$yf6OmC?0+Fe@F3{3u+4}FiPyI>ZutQ@<Sh`uz7%fM~EUeq~tr!mHSRJ
z*T~^f2q?#ns+<bIVNs+9eGz1sgVJaN3m$15QFVJ&ZBr<{dQfXto^PR<3yvKtq7|Bj
zrl1^%5(_ZB22jN6SsjA(br^KV1b3{;KFBkK@(>m;7=@-<xpAuRZg`*>pIjM`kUbV6
zK<uMx;MzVYh1*OZ6A>jx9YL!p^zCTP-mq!&vGZm1)WXT@l#PMooAnA%n>Bj!3A%)?
zS#%<9@uXQh7@IeQ4rAR~G-^dNxQ$)a^$Qz`%nTF!41L`6B4}41g`QWzNr3u{LJbil
zpk_N{mFH6UZRdvq!)R|`;1-z=yv%_^E`nRtawIS*)gs_$jY5O9UfqTlqF~8hu|8O_
z(7<<I?%!B8<j?7?8X8Fn3#HFGu?=Hp?2(^cS^u>kwQ;O#a_d388#ic&SwIyR@@xLv
zYS*)xVVL>N0`w2}wDXV%BKrHZh9~JuS|=-eij_D!vkeQljUDXz6>BMlM54N_CYkTX
zk4Vte@gqbhr?iX!6K*)mo{=4WwoAsK3^t)`Z-zbNT81>CY+lCNjJ+9B|Fel1wKLd6
zU*tGghA7Ppjn3dy0ioy<8HaY~yY7HUcVHaogwIvvwLu_aM;R^ygz<-3u*&yrl3^*l
z&<AE4=d4u>JNu!Oa$51S>q_&yCOr)*UVCLLdA0M}!Z6IL+ljTG(6-@}QS&5e>fi-!
zZKFodW^Ag~ypFADy}Gt$ba_T@qwLJw#++vITz{~s;4o(R>3X<vBG91YM6bSduy9_8
z!nZg8*Z0i^L#;!kmq7Ta<GiPQnC|=~3=UKxr=)|>)4>$EAHY34`a;L2M$b^y(+lP<
z4wfyN>z&BZXLj`I+Bg7P1lnpf#sC}ArcGB*n0b`3lC?Q+eMaXF*e|zl5+9#k|LNw9
zI&iIjEnCWdRjxqmKLV|PtFHA6M$VOaBiH(cb+8qA949^2L1jOG>j3?hK^tbG-*It2
z*f`uc5L`h-HPL4sTh2aK&f{Jue4kmF^vf$#_%rvjtx}q}*R#I&@{7dIVJnffaS8W2
zDf-0t&?kpKT9^mbJa;_C*067ti|BpI_sL@Bc<(q*KhF;G3}HiVf$~?ecT*TRM3E!h
zUG<LSa@8aE{ymrpzXx`_&6cqD*loP{X}S2t4{#Ho5@a6N^eN}!J_r1)MLYl!TA<Gs
zgel%V2-BsUzLPG+UK;PW72)njeY|@Se%j+#wtWkm>)nx%ZP%pA9SNzHfL&`(V|*(N
zc`S|R4k04lf{vnjIxSS@n1$RC^CEh0^XWaAKJxa~XU87u)7$sntI1#9-j(+@`t&|+
zNUDTnEv3kL_t>J9_YU*vy+U<X_AZ3r$|D|cNaejF@4!kFyYsroxxTXh8ajtIL-h{N
z$3rix=tYXP=6oMa^hy_&`*iw(>krVQ*tyZr9G}<lV97?C>#$XlfM?wQ(R(s|9=&0K
zt0?_&!~Y+BR+E?i<&F`4y#p(sUkKbZ=g{MhNq0mQ1EA!){ly3<@iPN_E?qx*?<qt9
zr*y@0PxO}JeR@wOQ{7O4VX59e?7mN*)vh`Ja>qb#Zz<5gp>#jL&~@GoCGHq=2Ud^B
zh5#;=sbZe%3Mkj&$CE1OxpF<~xD@-q8S3MnIUdX}r}cHrSEln+^FZ*=-ji7*dIR%_
z@TUHkKC5Y!f4O6Izuqa8&tFTEX`}ymewuG@)m7QMkoLg6F;94Y{X6y)HwMIhRALpu
z`z6-gQ17~^98;v{p8xDUnf{30ZhubHf9bQD{Q56<jP~s<){gu6g)|Gj0VO;{)$iCj
z69zT$-MH!sC?WO$<z#xr{aoa(27B%#_N`F~#@o_867n(Djc3gYGoM?9wY<IMV4vQT
z=`i%hNTRdtS>8U<?aDqXSq*dMpZBZd?Tg=9_|Efmm8_k_f6t2FEzjFS`dxXs623xm
z2v5XF(WluRdrkL9-J^KAvez1<_62)-<=(N^clT<gHRpS`pjT@TZ)hTTgV;kvK#Uc|
zXA?F=CCq}JIS!IM5b@p*eR@x(?a&)g2V~omefq#Zizo3r0td)F^WdQJemXUar;8D~
zpI(T~FU1IPKfvzhej)<(vcl<dg}7sjoi6>3f-i6gb-sXT6?@gE@8nb$htG#A@E&U`
zdl<-SS54512g1tx>0E*LKBwI9JljADUBl7a!>KEKhu%R!lAt^6av?{HS;a4lVf1SY
z#jL_JA76<d)V~Y-boXHVmKWnff9K=Tc|uFXwtag~rnria2-NPyqHiByyl*AOEAOXs
z1aUtBAAdUFD-iJEZaSU2dvL0A!&gW)xaS0Yyj(z3&WcgsVS;X6_l`nnVSE(&3jb&C
z$+Wk76p#QG4_^HHU=;l;M<HYszh8`RUqLtSrxy~0)i}-Lel_l(c1}o5QMV~z#H|Dm
zfa%9^2OeN@-^pFuDelDksHAX!xDR@y-f=6D6xaL+BillHAqSqH5yar3T(K(fQt<PF
z%71&w4cdyn3=KO*sv{Lh>ybJCgB&8K$Zh0-@{95>N=M}#wF)+H)eJQa7Xxww+64>@
zm>Y03;8tLRz(0a)K}UmwgZl;V3H~6YbI8V!(;;7nHVGXPdM5Peu-;)u!p-5u;oljp
z#;1)djrSsQBZf!pjd(fY6O(GHWom00X?kdW+I%sxTI8n4pQ2_)-H3W@X=~YUId9Fj
z&b59T-68sX^dB*!V_vFas?w~=+A1H!R*CHqyFd0qoE+CaZdTl9@m=DtRZXqhs_G93
z)f3)JY@gUWaY|BFQro1JNpB^mC+|$YjEwt6Dg9G6r`)P$t(H=)akbvnCRBSjwNdJf
zG&yZx+PmpTt5>OBSp8v*-Zds>(2UC&-)5#|j>(*oIWKch=9SDlnGZ65t(jJ{ea(I~
zr`Ft9^GMB0wVtdsu-1!N@mY@SCfTdAFVqgLJ-7A?b*j}_T<1*PCUy7MEvx%V-8*$3
z=CGWYoLcyon{z1Va?aa1-`1n`V(QhbSHE88dIj~S)mu?-f4#HyUaj{@z29;}a;xU%
z=61*(m^&qRY3`m}NAC69k8^*>lky_-()053TIKc68=tp0Z)@JEysLTd<^7oFvRQ1^
zZB1;QZG&yoZ7Xd1Y-epZY}h_P%rHwab$p`Bg@NIXej_o6{owEV!wB#OLf)m_KK;AC
z^WDG>0h2%!{5J)~pR}3(&ZGN}{*K$Au|V=9esu1p{3hup4=3%E3*?e~m*mr-<TxuK
zW7!qg8fh>YEf<jvbggR*%ffF$MUh;ov1<+bk3{<m&5BkJO+lN8R)n?-tr^-z`W?xn
zr(8Rv3Y>SqchMwYI!g{=7w{HJ71wF`Q_@hel42!^G?XWy^}u;|GF@3u8gibEY^Nak
zYkZDh!h@O6kbkZWB2(p`#Bn@e&zBF8bom51s+h<K`EPPi{hquif9-llK0}Vmr(NH%
z7?(?GK(69ALux}hOUqsJSrK-bdy?eH!$^W$g|w0jNqZTRmt7{s_)NwQ2?_Ljl1;yG
zMM{5>ME+iVpHu}r3G!6ZQXb}dAMmzi$8jD+ve*XlB=)}QhuGIR<x?_G`rLJ0Dsvse
z@dxy&Pk$sy?6_;C(iL^KKe~RF+W_Y)U5_vxlN?W;q+hxIkY97%1$-Z=DP*v;fV?Q3
zB7NmvWWHLB6i8diAM7D{AZL?Qb|3Ws_mOEo9XaUZU0+J?l9|j%4$<FTH}Ux=(mHZY
zI!VGYpBL0{auzYd-GJq7LwnaExfZDo{3XhJNqzYUsj6-vW_dGtTAoH)V6)%`@<P`=
z`WwkI6p<bV3u!Ht;Ai{xQ!1Syca>yv1d*0)bPG9!wv29aZDlt}8M{q3u`<_2Z1BHV
zX-FEd0c0Q=lh(O@0z5-N2VLdq<OIgjN1jNE)#L8Q?z_Ih_oLC`@%}N|L%g@3RYl82
z3r5RBTZ=XXZ5i4+wEbvv(2fZ@23;yokO)ps|Jp!bg0?t)c^aoJ-=@<Qr!Bt*n&Nb&
zH$hXJZvL%tIsy&(HjYc*R!KjchI|`nhtrSVIPJK&eg%$h7^5MO8)*5vzBUHyn$R=)
zN*2c-h$N4vYatDYvR%o+B?<1M^d=e3m%oPv;N3hzxGjc?Q}<u%&YfHHCnO`YS0iM&
zVLKy<$gknw%K69zO~gM5C+I^S1_mG!%NTxa4ExVBNs<+u$V%m(IFSQXMOD#5MNnM{
zQ1OQjs)~;lhJ0TcSK|+_=*|M%?<GYx$oPs$xQgFgoGS)&mf(ev@l2#J84Pj&zElkS
zA{G!JOZbe#gFhAEh&u<sZS#*m#yAxGPh5yA+-LeH{8RpiFYt8zPsU)y*!lS5@Q&kv
zAA^97kwm5)a9$tykx4Y(g<^Z^z2sT=Pp*<1<Tm+={6t)|4(-lvu#ecC#K^=diB%Jm
z6Vnp&6I&z}CqA2Og678mLUE71WFM|PMXr&T@uRh0lZUvno99Y%Vsv7hxUzxImDKgS
z>kIgeU%(FY&m->tC)zJ)Pr34)H=U)<v-jrQn|W`>y{Y$#?+w1!_g==Qk3Lx~#vmT*
zd4c1W)I)=s@qheXAQ#Cca+zEq&%t|np4=q2$SdSk@)~)aEFcTX8yIsrd6T?F7Lmn>
z+rLBJCGU~<$p@$aeTLj8pOY`hm%z%`sJUB49*}R4`S2b29vb!!(3J2;zwki7DOCUC
zI7gX*XnY<L(dMA>x!LP!2vq=k1h^;go)h5F-Ok~73hgS|c(iM1FQHvPyWwf`aeNu=
zHX83&?rG<7d=u?Gw3}$}qjBjAS1$Pw?Jn9IXrG{cina*t9@>{^Z=-$XX-jbY8to@E
zejTC>qCJD-&uEaszzrdPpkW4q8^V7HkT}sEpkYyp#_bSJExi2zT-9+mVS#YXzB@i&
ziN%R=@kUnTh$182$Qm56**<U38%d%WEfVk7;TVlp1@AZD7>8CB?>FO^>~3Tmj%n_O
z2ro%&fR>LwJ8*2_Zu~dI5)ldJjqJt|^S~R~!}*H4k-c_Ov%NjAOCLn@SNA<nU5o84
z;!6UhfdgvUY0bpMmZMtO>7ZJ6R?|*1l4{wdnu)FKQfjMieNy@+E>B$EcIfiNR*54E
zhT7#+al{wHmiNt0w3F_AM&Y$bpCo(JzOj{WhxP57U&}7@+u#cHUfvfsDD>O_NAXd%
zvzA?{**?)OrFH4kwU2#Xi&%Tp7JXxrk`i0muXX8Tzt$o)sc+v}cC`{lz&d+Wv>RGO
zO}m;=%O2pqL-#)Rrm=R?clmODzwUiflI-)AFOOZ05$NaF{Ljx*^3M;N`hEZmv^-De
zb-}H0NJ)z2AEYFuBmu&{Eo#{VYqsy+rzJp40*FC1?ddIR*@J7^tK$$-6Pc+?6PI`I
zbD=3#%aHQ{WND8+7f8DFpr~)GJq5rfE<JAq-aMc2QHIvEH(h!@kv!F>q&jI4dx2D!
z9<;#cA(?hW_#HHyWm1Qc;`N*{zjkV@kpyItbF@vvtfWZ1J;(aAsb5{Zle#@wFV(_7
zlLvHclo`X{DS0*jUt?z<Tvc%e@bm6_dHI6m1s>$fz$>jmswNZ=F@%qd4N3?hjUgfd
zB!-xxfnXA-PCJ^8Q`$15)*?1##%ZA)rtLU>#9_dSB~+)Kb~Ml^Z32W2pAF<jr!#iO
zzu5lH-uK803EJH`=k7gw_T1gGd-tB*dw1`Q>~swUpIX0cPOgR$U;NIxqOWQw>Dk80
z`*JjtTwOXp-%3f@v2n%xJf)>Rzp29Go6z62tG-xi6T_hi>_$x}t$5DN+gNOL=i&6q
z5-%^(m64iAw!PZws+{6$>spfSYwdbe(Q}Flv!Sh0)U4<QMXxI|il(y~Q&Vi$6x%h$
z_OA3ik~Qb)sfIpPG(8XIM-{!G=!7DpXo>O_PS+G5-u%BJ?eum}(=%?83brNup=@Lf
zH;)|;k8;1h&m9xKzEQ$_GZgWEMN;`HWJ;hzLOg}T!7Q2LJ17~!Zb=LFGtP^-Bzat)
zOo3zw8vrltqetBk4LgLNh=%==BRituKwLOM^6448v_a_l&sUY1#ygplSPRXvO`ee!
z*({CnZNB=5$Q+r?9u40h^Z>EV(3_-zv*qj*RnH7bg!Ktc_y~VAkELq0XARN{XAAjg
zKo14PH_Kx{8?YQ)N2<-ph^MREk(e5rz7?)!uBLe@ASZL}zp`UFyLVLjyGNzh60}jG
zBHs5Evde_}0<OCasHc1loHdifMq<6ZG;kfwbt{x|WZlmUT?O+IrOeIh)n{AHi}{QW
z`iYToR;-fjQUBnX#8-H_f=<I}(bx*YDZDRO47HS6<NrQ**16+-JXfCw@5J+^A>K!i
z-vQpw?)MH);bFomO=k&oy_^rM6qO*zosHbUH<y)HOHTbWElrZs*wXN%<TTZ_ZKa+A
z@aP*No9fAimaXJa(<`toI!E#rDB$cR%UkN3;eXZtDod@3{9XQTf1kg{w-lo($=}Bg
z)mct~v($OaY4e|Rb~?KQS<XS=^FWq*f4+ZSV4A-I*o2H{RSxO9;(WKiC+ho%@%%Y2
z^-XwMU>bQUB~L*+w>TO7&1AL3Ebg*G$~+gF<{p`kbymc?fko(G3AI*6-L2wpQB~9&
zBN6VvT3OF`gnKC6%gopu!7>=JagIs19G5@w7l08vr&mrhCwrEsf4n{8+FDp(`p8ca
z?{^pS27D3oGrfS1H9HY<6f#rU$7ZVBZfd09`sd^<%znw|`0{#49t4&HD}aZ9)j*B8
zB9EABvepdBdY}W^Ueb30`+&ER^9SG^;3)7e@JHYyWPS{s0{#K~6X*l_Nq-tR1Dpj0
zfQ!H-;4*Lp_%|@fHLn8KfFZ!;+QWeEO?TX4ZFg&Ez27&#WW=$+oZ^q_mt>)FWsw<>
zULXMV4XDFVPC_|Js|ui<8gmFKf8lT7N923v4kWCUo#rR<W3!($6VXTsZwPD51@6Pi
zmXZ!-0+b;r`sb@!bD0`1FrV;s=qJ(xoB&P&e+R<Eg=i0<sH{n7cM$CkqTNB=aU0DJ
zTG<^O_rUiO@G|gopdZ?4;0$mU7ywd{;3C0Af{O$f2`+Wv!tKKC!tKKC!tK&$mT_;d
zp+~5t96{>RMaM2WcG0nmj$L%@qO}k!IVS;oflgo_pyhHYmrJ=^%H>inmvXt}qFf@h
z+z4y`BS>wRhs{s9Mk><Vk=~B<cBHo>y<N3L3~SQOd$NXaR%^|_IGad&DxrU>gW^aT
z+Nz~?>1BvbV+3)*>MYHiK;x5$zlPTPNPo@hYm0e}8v79LUr}Snsj+VPh2j4L{Kr)P
zlu<@%C!vx$lY|cv(-<XTSH?N4Ky~IKEyZ&g(c`!W>f1VVnbzfnuIZOz>dZd!6m{mm
zoPVa6V~_dNJZBCN)SeJ$u%*pA!0){C(b)VacCKFlsWVT<uIrtD88)4xIdo4vqzt2B
zJzfE+mHmIZk^ICGn0I5L@s3`pH71r4?cONU*c7@)*l4Gt#dzm&crwP7l&;)nZ+sdr
zJW?ZL<3=dviaBqtQm3{iX<fH;v@V=EMv3~s{pNr<Y+Tx226xS$4YNeFH|4l08Rl+i
z9}p+z6?4h#0q-|&@(=kVFod|%cANKa)bLx9Zt|gJnGpQ8-eYkp?~9!o(mDkX>(%Lr
zzQj>pMt<<y)@;t-l0D7zjvr?(j!*Zf^b9x;e-U3SF4{i5RDIm#H#>BKydT8K(e^;Q
zF*|5&w)Sttowx0q)9Xi-W){R^ZhahSu`wQVOhf#?h7qaxuKC;bVH4Lc=t6Dt6!0yN
z-!OKk6}$)jk<qcYb@V^6&`mAV(>QHz*qox5Qx~(jqAB#C<<%WN$8)sRzmBEzT(Hi3
ztQs=Cw7NrJ+Y61uJsqAiW9eflJiX(cW1nYg>8Ij-+Lr0LC*l2AJG1C(@50JS#*$bJ
ztrR;v8yjaieQ!BF4?CxtJ-=%3Gq7~lvd(=S*5%h2f$YLo+9RFVOZ)Hz*gXSSO&6G_
zSj~LQFwYMM>nVuOwAaqG*Uq)q&gI&-6Q7UIM$Sy`$vf~qax{x4TLC@=X@#Vmjh~7w
zHka6W_%L~0z`b)HJ_Spu2n%!}K1+)6A#A2a^xcc`>6E9G>o3D6QnCkFPo!l_vSkZc
z8!mtq_Yk_M#wXfxvX2TrnR2cpuj}#2lz0QRu4QI@4A1*a*^AG$_Fg7B=p?LK$VChK
z_no(y-Ex=-I!3v=vHcRT{yv1>!)#Cr7F{nn{D_&LAhS9B<mxoKOG0-SsE><i&~G)U
zZ(TeMW>^hoSPh1enSn;M4#QTDL90QBvGtv#P~Bx(eQD}@pxld3vsz2BT1&QCn_{&#
z*=jA_YAw}jEo8N(`qGtHEAXr`!P@m(O$Dr`{M7Mk=nvy3u*cRTlu)&n6sNT$tF?)C
z?BOu0w40oC*ipxe@-y<Udd#qT3|l>BSUrZV9>a1Nk9~?BgI14@)u3ZFm~1teYBiXM
z{szd2>dtR<7huL~i2P_9WRjbfpTf1#>@CJGUsrpByUUPXM=aX<5=+*WMx^Zis%r4E
zs*;EluUu6Qt|+MiSFKtJuC7`^tWBvBbgYvQcjg~;#$VDUxM^$i7Ri6SrLJD?YTDdb
zC-W^Xw)nxV+qbk}n|YFS4DJ9(M6#B`yM~_Wc*;9!ZiCeA9Q3{o%^i($X}OmIj1+DB
zuaQ(HD;e)OU{8|r+!n|48_QEE2jHoMuJ)K-OQrabvJ1>OgpfyLY)=dHF>~PMMMruL
zvlGnY@kPgLmfPcWXk#gS(RdL0Z&}aud%iT(8E)l?apb`9I==~RWla5syeVDs7W=v!
MLZXjWo(G@&4-QUSZvX%Q

diff --git a/static/fonts/roboto-v18-latin-italic.woff b/static/fonts/roboto-v18-latin-italic.woff
deleted file mode 100644
index 27c34da2a63a4441ced0eda52bd232f7e315ad04..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 21528
zcmYg%18^o?wC$IPZQBz&nb>wRv2EMQ#I`lDZQFM8#kMB)%YW<Ls(Y$eb?sGao!Z^i
zefF-d({A!&VgL}p_xOzkK>6<+8}}Xm5A$F2e}}k;s2BhMlJw1qf5R9&0K8UQL0<Wr
z+W-K-`v3sA-k#?jb8%%AApijK?>CS5jd2b`q$YV~24(;Ns`lHb^bLJy2U0U58v}a)
z02=IDQw0Ek%JgFtZy32c69E7)jsIV#1lB<ZG_^Og0RUj3zICkM=yZA_tS~ch`u4){
zeCy!;2T%Z1Giwji?@$5&5a<B_>}tE@3}VfVZQKC>*>5kv>>JOB$Pn-5CI-ge+_xXV
z{vY0p=1t7M$#1UoJ0|%C8C)@fm${Aef8I#|;D^<Be$B;9JgwGtM&CMxU*CCrUo*%S
z`v-Qqje-03TuNx)KBE5sN&x!9*1*Q(oBPfeu=1^oz=!18wzqR~1^|@*%NPAW-IoEt
z*xu3P+pA3W9p8TIM7r{ITHS&0eM}%A3Rn=mZ(9%wLhzX?V7%4<0Z1evD*Si1eC!`b
z8P(xsX&PZB(Js+8(ZbPA(G?x;ujbvpO1Q6Buu7?Zh{>?b0C!;2JZK!A7S_<MAE{i*
zOta1U{~o3`V1W-;$_l_cITzX1Qcj(ob>3~2hf89>a6N(+@^$S30c7p!ZEB7iL}a%2
zR(MInD)xx3Jw_z*zQow-&OPc3cjVkN6*B6d=;)PyHINB)+z=C@b|Q9Q6=0d7*P`1Z
z4|9Y1nT&Aa;tvLbtrD%Ot+MXg?t+UrTWDLz3@F{kEc>E{dUH~95VuNmx~_j#TF19;
z-k*-Nb?pqV%5#01Jg<7K%G{}bxRRNY?PJMP(bO|n)KXW}HE(<Pu<Hx68=|rsIW^y7
zTTfMA3=>>Tbzh8p;tdkx4e#QO&27wp@(d1m_m_ANAA9$udJnC5543oXJiU+Gy-yRq
zOOi*k&dI<kOU6?Or?9u566>Qbp?dXzcN&F1X@^O{{#;_N6pqKpA5>iwtX$$xl;yD%
zZ>n!-UmbF7+O+ZGo<&ef5ndWIusoLNSZIRe{X+Jd<a^-CT|0gZ_OZ~@NM5OI#;IuH
zs%U|jv1_ETYQ~V(05YdEv0FXm;4fR~EMInc(eBv$WHvG&y<Whys>-wU+vyCLN;R~#
zuPM>}*1S05u6}G)k}Ha)Q0>}26`uJ@XL;k_g{j&@e>|Yr9IEnMcA|I|X)anVD0ZYR
zk}R4{zO8m{Q;NIDF(9)lOO>_BPu6HtS^aTEW0*y5rMS0XV}`lD<k|u{W#v?I{p7U)
z`WVM+4PVWsnaHLU8GQ${d12TAymI}!X#u}%F1u_^hf#+c%$ND_E6Y%<zQ>A6T5Gs|
z*_8C>Jbcn>;A0rCsV~EmjU{T;<aky8a2@1CZOf(6+c^%xGB4hh=lG1pg!(d&R>G4c
zW#tJkpD%Zf>?`9h?fMyij0?Fj$3y$pY28YDi+^24MwUjvc!JaVln-Rt)*W}^9hb7*
zOXSDt+{|;N&pE>*d~Esn9pNmut=rv&{UF~U<6f*HIBg%vWHyRZk`k91m1$ZjjoVBq
z#nWP0%*KMz85yQ*!`B8^Mk$|8)v^EW(Fw-ehOSB6$@QAN-{DoN`}TVvLHe~DqU1TM
zYZ7>_`PSSvD778}w=eLWCHdb%+*}VR^%oo#lNVbHsIvKqAcRQv0kR33DE@dUsQAM`
z)H{Vm&m-<qhs~_htNNyAh@sSdV)1LFZ11hqkmf=Y|3+xeZ_TF;AJywKTc00jiiO<w
z0~ZYMe8HMyO`^ZSs<~|MqS}*Wfdtnv%pRR~TFl+B;>uXm;N`}%KZh6<-KwWp&eE+^
zdC4bpNrXA3pZx4AB3Yw_jv{)DQ^-E_cFYrb9&_3M{&SgERX%%k{8-*DFf=Xs!k=wx
zW{|uua5?vCX)z~h8!gb^;b(E%vt25{k?qg(2bqh01Pv6!{@{{m;&rQ$n=V$e@HuhC
z2^5poLiG^&Qqw^E<p!>R7Q8alptIh*UfR4VSFC7*Q0N*6Y~~EVx_DIU-sw7T$ZzPL
z*pB0p49EgYA}^#y4#bw5{7DgSfa6rk91HGj7JqM8c5jMqbvodQ-D`?Hs@lvFro)^x
zkfo1RVhm^IF`~|Q7wEEO(u~BMUf4J)8Cic{NX?5)ODtT-EnL*k2#rM#JuHz@mtd5|
zn*I|cv2dD|iczP2GLB#}$#yb<xq*BJkBUh?VKNmBws3cCK8NlR0kc7jWLYZWLFq0F
zyICsPCc&Tsjn`@1OE<D$e&J0w5_Nt7-P2L^$FxIw9F5X0HHU<Kq!-x6F|r1MbPi=F
z*%*z*jppUNcS;%qHCCH`ahLuOI1Rme35l#*Wrxu`xUiVii7VaH{3Z&sN<?*vOH)(@
zn|9TaCAr!}o95cmqIA)Z6p0<Bc<CW}^g6j8>=HS$3HD9SC6*RyG_}G)j}oK0(7#5B
zGp^JfM%uYmH|nlpT&5)!@Ds1F+VxNVU}H|U=}UcVA-C!rxH9p-2={|8_<_9i;(iyg
z?=@UD3RKD804XF_Z;fpfzMgaRdkr6k?+359f#;UREX!t?o<2jz+3AJ2PV)daae2O{
zpNZOK`L)0wF{A#p0fw9gASA@{4-tiHUZZ;vOgdOz9HT8ALm;W@td}trbq$=%7<Wu}
zVJqsVE`c^@uJX(6`;s5&FSavu%!&(0ztYVg4uR~DRAiBz$`60J#V!{h4+w}E7fAe(
z3|juMt)=8Z9Kc?@x(8p>FUKWqqjNigm839D+&;-4z0E%rKL6Vxh+a97TJTK;SX;~}
z--Z@KyddleF#Z!x-$VmmvO&dG>OF72lf@#}wv#|p-L{+3;Ri#A*J>85apb-ePnqMf
ztAYj3@V<*$Q_M&GeLvWS@{j`=0f1h4A<b>@i~&XfLZm=FcnUfeNVEaCssS-V-|bP6
zB|?SFmZS7Df5`$Gau){9Jwb>A9@yFT$k6>}KFNiG%ZmcqDa7S5%y(Dd4h)_E9nG-;
zgzWB%KHJDWMX}PX{F}!xrI~8B@!EETH~6n?Mw{7ngmzZMR6CQPjxms;Z$A|RM~f}<
z%ZbkQ-V1AZVCm}nTp_ie1QMuI%d@v~__FzMKjFSY|Kv&hL@p1-$#YUyKX@Vo;fMY=
z*)nQ~ducxlkLYAlr5?iH-$VR0QV(2FqV~wqesHT_dm5uiNac)mIwN1&zVvRn*qo2_
zVR&p`y)$fy%w}NkP=7K^hn1g>P5uE$5)@_qS5;LH#IdSs*aFa8Hcr@jT{O)I1YWrH
z3WnmbuOf-#xlB4xX0a|Zrs_B>v8`+}Za{HtI<DipMLW;L#<j!zg!V`CjW9-<#nd<u
zO)=ub$mhfmRn=!=|BKIVh^uPgWejlL0kH4r8<QjK{&L*|lQSfe+r@j_=b_hUq~F7d
z+3_^~X}cqM!4m~HK*}>>(%CBwH$u}nAln%mC4$l>UaoD7R;J0>#FTOWII2EhLb@-J
z8y!XY9)Cwkf%G}`LYN5k;sj$zohM-oktbqIk*6u=GD)%+Hc9LpGf7SxHCZrv9p8zl
z$x+?;{Z0U=0oee5Km@=Yum~^)$N@9~p#Xh=DuDF|51<ne0~q|)pnd8C(0*iocVol=
zSTHUCI#@IS3A`4727v`Y2Pp<1L-Ya=Al3j7|4sPcGoTX#A`T{q6=DXgxGIN2A~mf%
zpH6oGfMGO<BQ!rU>Xpvp>-^<Mf~|x2NO23`-SM6N2w&VFsQBY??88UEkd~95+7@vq
zU;gq0c_F$KNpJ<<n!>E3c_SXk3(uzn5ubu8@-bEwDd~AybF3?OFtLD_?VGq;d&8Qd
z-=-Dfc7%q4a_J`MY%;rM$rU}UjMT~ghXR-NlX-PTIsAm#i31@RU4j<6$T-5~sJ2-M
z85^$=SGb#D#?1<m4M7ZIGn?2=0u0Ne$Er?fx9f(f$>*bGCF=un%+9|wce!&kLmHW;
z4!kZxMO|X~Z%Ij;^ni#cgg8#%;*Poz)}DwOsIF9Qhe|)!McY-q<B_U0lFgO`5rU(}
zvRS1G8d?dCq=vNXaXE2=;ZVrjaKa0Sx=q*u00i&@00sE*^#wq52Ud1LYAdf`{_?$Y
zzXlhAfF>g%BK;8|^*iZj>v{7uS2@O0&d!$CH5~$;%QX^sRRM5W^D^PeLd(YLk^o5M
z@v`lON{0CHs@Eew;ng;Vdz|C-*!l-75JW;{3?9rFDu9tuFo$vykHFSq2Z5y{FNn~@
z0S;MQ7`ip@u)+2sifYgy+AAES79@z{>M##$HJf0}PwAa9`xkmh$mUbfOAk|6B5o#Z
zw84|rlAH{jJlQT(Flj>AS)Pc}(mImf*l$0@nY>y%Mn#pNF5R(@Z9d7{>3(H`p#8F~
z?$&Fi4NOL!!#B`POcq8VW%;nNNkaU7eLuWH2zEwB30U+oe9e!w!C0fKr+-A?cV2M~
zsx}9;rhg}8)Qahtg;JCiE`37veskwlYM#R5K2C|PTO9a_XGJsGrd>@IYxwWtz>h#0
z<12)8ncJh5K!&0)ah7ONIiNOZsr3^`qg8Cm;i+<KK2EMqOZy!{T2!_p=Jg0K*DdG~
z`{&UBe0oh$KyPcO5xubjIV$1YS#Z<V{(5Wf1_+X~mkweQ(MQRf6mw5wt3Vy>qHQ(~
z;*Ve`;XRPsb~Pwq-dAj0u&3M<6b)9fbdV03G^22&Z7S|%j(Z~@K=ceG_kE&NVUq=Z
zQ6b!p#Hd309`;OGacqYFoBE)H(fGGw;}h58d!Ag%aO8{k@K*fb@|F2S2rNbrT~Emi
zpqaI8;{VdhyV5R37(!r00tj;J(E$~<K$eJCQ1uEZGQ$X=iLG6UP446j1IhSQvd~b}
zPis+pS?`SU(39mO=hU2M8OJVS7<Na{d}%9HKT$KaO{JtPBO<FhX@u+6(8MWl$0Mu@
ztcfNf_UwxaTbYeBH&Y~0gvCAA?O4zFsbzHZT=uyZs5Wc+JaGGk9OFz}ScYychYDR{
zd_wO<UnLWd@kATECh=#@fyq9EYy58{S5FhTFi^UT)gzNk%FXaxueO6lsrkOYTJ#}@
zBLQT;t~*GVQmX?%4FBS^65*<PB;c~|-N~?b6ruPwh8wv!RL+=pb}wWf(wYr0^Kh>A
z5}yoALMu98ge*8}`?oPto1ZXt7)fu`$vx)Pn$AAe9rd@fV#&hc!r_;}VZy12{0;O$
zY4x19Q=+an8fawWTKmmv1@z3e{&knMSZ@(Y{EAfcqD&Whc5B9>)?gQTB)8csmoq%C
zJf#JX!rx3#`Lu;A@()5%?R3`zAA>OOdG(^$Dz@UT{eHk*A~i-Hamd{q^V;wJ<f241
zyYP9m6N5&s^o|R0N6*c2#_#go4412u4QceBk9;cQ`>+u6Vu(%7xC`?yTbj(xViey>
zmHeV#@J`_Y+3*)x?<mv`|L%UnmJQ02<>BzBmy_Qlu6<<=`9=K8C7Duu*GZlXb|}?;
z92@~ZP|0ISBdCIN`9pA-^@$c7&0;)sC2{ziY)xNizt=eK+Ch`JyBbf{!oG>6*A-2F
zvF{_j(H_Ua@xDINO=+stcWxu!>2!<0)#={w>h++kx^SVb6PQ+2aPPQ+F>{dLcD&5L
zX<)GRd5%Vy?PNVA;L?|H*=^)^L|62z3dxL&U(Vyycd~SFXDggFz!hr_w80_zC4@T1
zjP3ttjp4e`zjNO(CURy>e&(`PSF_qyP|vZNprAPZrw6Ng??vA-RNvC#7#UM;5xBN1
zwvkuRP<5d``-EtC3DPFMvb_}-0bAiwpAbI6z-5o{P^oT7dg3DamY=j;Y0cwUc35@(
z!6z?BoL#gg{7R~L_%Y4l4C4OHC|1(%TGQga->FlE1`-1ZBN|IBq!<rbaWO?4S#9g<
zN+==gTWZ{;gw9$1jMLqBAY8umEd^&Ph`IQ)ph!{uAES<A@M01-iI65D0^lA=A}rOB
zj-j<qVJs0{Ol#y!eQDOIl`zC*=GCu8u*MUs8!((zXBD_d^v{MoFO^R~p8G6M^ZRPP
zvzeKEvWMz8U-<z~%~Xs)0z-e^NqC{0F~J{E_EcG=WX!abj@VJLe-CfZlBS2Um&R_*
zH98Cpf0ZqZ+U1CZg6rD$Bi>;DL;|<XZiq{<;`y}Je<m&y+8QGspd41Ej;hSxvhFcm
zN+I6{{4vLim2Jg>QunX2A)c3ze)M$KlZ_F~-F>F>|4XpY7k@)=(z{DcoQFu>GKfU(
z-~y{Odnwa_;~=#;>C=?CSNws?;fu*euo`BHXg!?wNJn%Y%--@NkV!qTf%_66DZVcD
zew$mm8rt8W^_p8#ryXH84$6k-kqoj#gnOY)lW$p*3a^U2Fg`dr(2SA^dicgL0B~&}
zCm<Asyk@(r1n=YhScwq&yDT`0V<uZsBCH_Cvu8A{aDpb5QpN08Ix>b*T;ZDG61X8u
z|64rY?`yStD)tP!DTp@XF{xZ4cSEHoZB_L{D_+_b^p78i1ji}dXdHS_tN0X6+%s5N
zLmXH*lFW0<WR#;ixtb${Z}qdViz-iy>|Z;2m!2O`7XUcv8bQ|kn>Z;ZL^aARUXIQ^
zX;x~~RCft?RzI`WHb%0OQ2S~Z-p3RBuS`^(unFP-vLYq~A_Ve;y?GFJJl>nyp*U{m
zfOXID+P!m8QNpzTZEv}%0EVjmJWzxh?2bS4yfkxrxcg8(*RzLDPKzbK_!l2Gi^Ac~
z${Du{DpDSiEJ;BZ)fL&j{wBl+Ld(s-3vlM>`2XXP`z#~;duv<Jra%>%1HYL^?!8$7
zk;jxz{e0NKT^%HSDgr;We$JDnXNumj{c}fr{2@D=hWplw8p!Kn5Z@QaZTU_=QD%?k
zdppTJ9GA=j3BQ=WbX}eMC8S0skI(-kk>>l^iC&1H$z-xe5|t_|QetP|*<ijJ|Edxz
z@BP3b)k7`PHt}<l-EN#D0uTr$u#cq|^amMe5#FIq<{<JH>5Rh^)?qd({V=rk@OW;_
z(;y(SVzo2qWq1&JTp(P=_@N!;PRiAx+0B$pvQ^U)vF&&y@4BUwQelPapkp55d5Tql
zF~?z30zw)u>fhk+7{6BLus(lkP2fcrj-^Umz-I4dyp-U!loa`ARo?{ygTY9D7}4rb
z1fz+;VSX%?2*q%K0WaGCMeUVd@{DdT;jnwnQB1bhef?1Rme28E=syFK*PAxVso~Sa
z^`oT`j$1GBrQ0b+)$3&MqEE5gW3yuV!TTW_>9je83JU$vhfU%y34&Td7`R)JBGp48
zQHOOb)<+di?AOZ*Av7L-#@FMKqd|UjAX|`H+FxRtA!23n1zl{&qon>pITERO*<bnA
zu2ct|YYws>#ryMn&~IEpqNV)ZpWfk;sjDb9f*NN_Ama1r+GhH979#_~3lI`HKVH`n
zWqf9yjr(LDQe>_>S@+N~f>OMkZU?vIT~6DpSQ2zMw!EC=1rz`RYV|Hj#KJT#<7$cW
z3iI?tV1w{N2-T1$_w&~^C>3g$qVy8cUtSs!<B&wNQ4V$#4UHE&0LrMR!Nu~aITX@P
zSl3FNUJEiWX)-SpPEjY4YHTX&w~Xojw7(pQ8BG175oJ^|6!4Mlq*K9VIExT0KO4^1
z6dCFNEky39Tg{qjvKg-(bo)3{JUpIb@^hTF(4DR7nu+`?LbWS*8z_#+J!KD(#pPJ%
zRp2)ixMC0VUG!&Kw<utu#5Kl<_B{2HvdhhK;iGZV+s5q9yI)Xp+ro%=noMs+S-2!~
z7<G)`kiqN5+IIn9vA_PdG-(YtthZ?$Au-NeH*^(;w9hv)pH1Bz9EVViK{Y(gnxLa6
z+Dly0#=^G7H}Ast5rrO>xpTfi>0h%|W|Wvrov2K(oUs0*OpqVY3dBF*GO&AN9GIWM
z$Z0Jnt(#iHK8wycI*5&X7~l(Kb_t5X;kheRtQ$1mYs2T(=Xtw(vGUUrIQ?i5yHrZ8
zh&;f*fAc$S?Y8N#<`*eC*TR{qW&?Qhl}=j+`81*z`X4d~z^LoPrvr|NG%%)AI%kg8
ztG7fdR+GyvGRlm9B=q4y=pz^kIgk^XL#&Ky0HKX*!4(<bk}c?aM5(DpgV73iJj1t=
zq{vEOa?W{UO)JG0w)gO2myrnDK)}!**@qh^hYhjlgNQ_^kAyVmo{8VDT~9;n3SW^N
z$WFaFQ{6!S(6)+fl~jR?91g>VhI!bbgi7@8lR#X@i)d?>IoqOl;=~)e%yGHwy2#<b
z`S`_2%Up{JqMsa>Wo4n<C<sXlpn}i34+PhtS8*e<!TOjkQ`<HuY{ct7-Z2_QISzfy
zuE(L17!pZ=6-1ydPR{x{r)nJ468MDBL-E^uG~CR>4&U4@KmxyZ1LDO>^A^&ho8|1E
z?09WGx5v<qAB5iY2JWXmhC)N0fcd(nAgD=~GIn8%v1yG84TqQW?Dm4N>ZcZ4_2{AX
zoN97AaxU#woNOrt%K(xlk@uf6S!v-j!8PcqGu0_=wMw&$OWJ8@tj2$6Y0R-q>8(SW
zT=mLn3xk7+`{fQK(y4H*C`?!L(nc|c31ybJmCAQKsW9~WgEUD<Yok_8WNVXkg3&$e
zSFi@=*-)JZgzorrdkp9D6)bu~47-^BbqsJU4f%zf4*Nd5?~*dnbaxeQt%bPdVX^K3
zCq}ys`eg0IE#^zJz#2=dt%jr}kz3V5jleLkR|C1w4Vf3;Z12*@MZ|dHZdvOq$$qQQ
zlx<^{ZC466o)_kv5LrH6QJ$bLHpImVpGDejDY;?h4U302mgNw9U`CQXT+R6VP=cJm
zjKRYM30YM!+?gv#nu4Yq@dg<Z+p~G^LZfdx`Vvi2ACLRTsp!sFt%UpVOS$)XVf%2x
zPyNQMZ`Co=h9(3fih~z$Yk0!#g}9yc43m<8J5d*g=FiB*(uwLPs&<9Qye1f;c()XT
zHkG{)w^}q)FXCb+|BHebB;o5t-*%C8DJtIc-f#ZmwBwId{G+>j8B#^dbJ-Y=Tf>Ji
z{V0nSdw5dSPTJP_a*>-<c{;}Hf!ll4i?Aw}(}Q?3<|vksQ&R{4Me%wy>sNGc?V8OS
zZ|JIEi;z4ORttixS`iTD4uZ@cKYWG!gIATNFF^8U5$!5Nf<1CGKpA^1y>|P#@O*yp
zPLIKZSFQNfo)RZCsl``$8n;`n^F+3J>|ch;OU;rfdCQWYG4t_?iw?J(sLd=~czL&-
zLiSJEG7jk$9<N7K>dRjU>Xi$S{lKW86oP`O={_S>7T@_-G@Qog*vc?J%iZbU`N^y2
z{xpf1+;Ha$yikWgVXIQorI!4f?i)U-s@>Vl4P5MU-ZLwP78N~JOvw~T8l?G6PHww5
zNf>`H?_fASUgrQuO`k!GW#x3x>J=Dg%jJyWBcW{7Zd6lq7$cVWBzL#_;T1z^Gmo)G
z^=oCF8~x4^Elr{}w{o^0_7_I>K>~M__KB2W%5<Q~eZ*?+b)+{y7G1Y1a0YDr^UDoT
zw?5d;hG*PpfBlSWNJ&#5F*1ecUT{wZJet+%1fE#X-^F3ka1A3>@>d2a=bY{&cT(iz
zEOzqYJLSYdxr;)R0^@WToJRFlIukeh2@q7#@SXa2aq^R>=Ch}gW$$0SA{JUv{hN00
z1io@TuG8RlDl{IxA6_iD<z_}q+63$fiETYc@`9O)OZY*)Ut9m8e=GJV`suvfR}dOl
zz*%;Y)=tl()lKsfG)(7NBb65k(Sg?njA{k_;_VQcb&q8MI|Qrgx=H6;W`Tk&nLWj%
z@W7R6-|1q6(8G6%r*q~XyVQvuagqT3&?nnNagf&sx$T7$nem!wutE-EwwR6aVGd9}
z7czIj1C2i|W`t)lMhZC#WirFm@YyxadR<sg-G=9`nVHIV7^H3^e1Ch)omB2*c7ZRR
znV}g_GYhB*kF7gFXICJgISU@50z)|(_F1@boy8UFcUDJO-+{^k)rlzqc`7!6zT2)!
zccf_x<@udM%aFn`0eN7^Nfz3{@+0*pC^4km^Iu%yLmBU5L_5O!Gj8{5a<-IR7Tlh*
zZ1q<UfM$Q2`X5XAogATAB%<RfIO8F1BWXl;1`I~kdwxkiQWEE`M)zg<<P_Fbfe{EU
z_Mc|NyF#Gor!-$wXg{j!(M@VkHR3^$U5Cf`I`{3aU;30g3s%aDzCY{S)T5tD=b8bl
zscfJ0nK$=!PJQGZAr~B=crFF=JZ-#b>9Nux(25StXaoFZvVPUQkXC28Ms|H^x1G=p
z6W8RFkP=#()>anm0~lp)eJHWhS_}fn2uPiNLl2G$N$o&uqrLi}lHS3BV7iT5vPYq>
zU8@<0wjys>p4IPFjn!|wzl4LY@ITW8nbKnIiHUjK4G&$@)gf{EZ4UWWh>FCuec9%Q
zKopGgQYe*gy*dSX3V!5W^VJ_N$^V>E+iqLG7{~lA!~|t3EWogd>Ny6J&69^5?@gb#
zQ5ftfqT;O2>-lGV(O(rtlNC=K&lfj<i$D{+^yx3GuJiHohkfMh9Pb19qTzY6{oP*M
znPApo7j@fQjoS8$4dsNz)GBp8>%Mm$3c9YHO31l-j~S+w>jJ==0wUoQ`H{oofC&>^
zg_X=sP03_LI7n@H(npz*YJ@}h*IPj4vvDx6db2(Ox_-mj?CPpTEjcPx(p-HXS?bd>
zz!~U1*4uzMPm=3Pd7Xnz_v|%dofMewB~xPjxy{|qyP$LV$4uvq(f<j0B?J{*^ySFD
z(+p%b72I#lAWl32g;+5BI6tSiHG?s3<bs1_N|RKHAuX~(Xq~iN;h*?gWdvw)6(nDE
zd#LVx{+^v*!x=2chS*9cA6ng`Wvj&}$pgjJ4)4%1*k)UMWnqq61<03w^K^Do28lr2
zI5WSOD62#52=($I(<0#v#O<G%Jz>x!6YAYc{W(o`MZp30h7KucZj55{yKp(}VD9zg
zx&)js=0PK=sI)S90*1nL<EYF2TiORFtCQF5RQgUP&2FrA$ItqP;V=&NCh=sF2dgjL
zu8Z@r@!&X}pQk@E>N|82Pegm<xjBO3HqIO7_TaG?@OsLGyMkW$(i|*_1W~J}1n*kr
zUjR@DAQHs=({7dz#jXLy4a-DSw??`rx4BCfTE})}Yjur9#xK{HWA&&=a7OiH0lX_e
zqIoE+2KVdC4M3$u9kk3B|7Fyg=qyJG<jhi&<4Gwocy}Ci_3ei0{=(|^Hu>ac3MF&1
zI9oa6l`{2i%kb9B=zJhchILDv0qNrdSonwOEIs+>FANj0;XRhlMThDAg{>h6<rvQ1
zddfg7&Fzdp;(gIG%Tv?^QOF2Sf1HoNs486!nVVqj+ftgo5-LEFlP6g7V-7=AOQpTA
zZ0h)hN2X#B3U^Op6Cih)fdmAT^&azjII+$sUgqNZg!3HpiQ1qE23;AO`r=y12&CkD
z&KNlLA`~d6XZ<WC0yF<RM=x4Sw=)89h{J2lWE}#k0GCAd(yKOcQ1#E?1w7qHRNyEs
zbo2(vWt8}HrgwdIw`1%4B>m~Pij5m4e-TD%9C&Ln$C?&?N9W3|+p{OO?6N`J+23Y}
zc_Me#xD-&zt&t%XuQj6kbG0pK&f~X=<LyDhJ$dO+cfUakV<txJcPN2v49#Zrce_Aw
zQoo;2WrK!1O0zA*2_(AbhQlGS<n;@PWK@rRfmn`9xERuWRlgN#qvbZ+g1Z(<bO*c+
z+x`lm$GiR}sJjghxxwzE3jc}B;3w!~PcNktdX}$!dex(Rm)zjLlVAt3rIGT{53J;i
z^k?B}YeY1;PTu(H9@*l}?&8+%<W|v+&a$mc55rZlXR5qdqJK<E{Hf+6tb^-9Ac=X<
z_SHC+n)>69+%u{n3QuzRZkgje!!1$p^8zew&S5Ob-Fz(LgD)|V#pzn^^-qRB|36iu
z*{Qo|B6a`~67GGPI2>1a9wz@!9X#P;yS4t)!XV#>iivkV$l51&8K^@ZnMRTZ{(3iH
z&_2@<1*H*=w$Fo>-JHB4jQ;4&COL;WriA|)<ASg#I<ywJo05RCC=*e>`mZZV!Q!9c
z3+=jDX-hjX^FbIqs$EdOB!JHi-G3k?WXg{Ji6@pDuQru2<&V0OuMI1|OY&SqM55K7
z?qn#pE1-Q`4%N>3emE|tMG7DFa30-&FEpUA8#al}Ts|nL;?p6(o}y!}>vIkTN5*so
zdBTkjwCag3+6iOI=xv^Nt@kBkccVOA+>qn&o}3Z`u=cR|eq;CkNH!>?WalFuC4qKG
zsW>^Ign?cY0GApJAEC0=#EG37ree%=FYlKKG=43Z5(1|VihPy%XEu1YVy1nX>Wy?7
zIXubVvL6(bglha;I*{1Ty20<LriSMt@L@%tXJtCE<KsbBq}Ms$XwdSoPQ{z2x-NgZ
zw+$jlv;A~{a5=u*76^%w*vL6`0&~=raya1PO^^Ie_Af)RuQ$@<*2==Kk|&`mPn|m*
zes&XtJ3l4^ql?dR?8PiP!R2x@S$vBpY6MZ;WlPSuTqY-$@<CV_@qyfZEm!OO;@Jwj
zD3?%-6jR~f?L=}$b6R6kjigr!ZaNugkT9MWswO9&KtZyUJ5;+jc779kl4_s3u_cm~
z(1f9QJdmxd(7@YICQ%wGmDbcaHF#qBn1Ua*uH9I5&VN_*Oz*AAiNX5uXJJ|tfi7d0
z_&|2SqwC1+o8pO((D9z<SKnZAlCKZddb25|>SMthE|rEOB4gwIhd{TXw^^t=)@2<T
znWYoXXHi)7sAU}&(*39qVjYK}Mr~i|11D|Yi^f+|I}9vEk$!5}DvXdaiiuy6Dn;i-
z*e!nh(<=uCRp-v*pFoBXB++XdV~s}pr}<qvKA0I^bzIysPKH1Eh3iXCe`m>qeBFyR
z8qC-`Wlx9AAY(}F;<LHqJRSv+*FcG~56x@)kYcT4=T%FFAaSwh`a%?jI6J~A^hW2^
zGbBmli6V{blQDrNH#?nO2o=%02|~MLK&m$cF~Zv4I6Q`SV&Ym=!0!fNN>9|UDHTtL
z#qHYZ!{Iqafybh^l&xr!vq-TCwQ9VT457TwFqW^XJ<h!I2Lh|H>h$GY-*l}C+z+7z
zc_&2@U2JrUekmY$eK=uTqs*d`;kePyIrK2Q!uEF;Lmti|VyPmn#f+9>y%W8|-qT+X
zp&TQ+GdS$_Go8u~$gr@X)@M?;*vy6pcZuyBw5#?^cq5o378rRGCA_U3`+C@jSDd!^
zMK3gO428z4G|CO6%V-Mim>=DW#b2ExE6fD`-gJeA+=wu%br>ZSdId~7)M+xSXg~Gf
z7l7|Vt=#WRBoSc|$5p<>et|BIb7&ec+wS^jdn6Qh61T1q+nxcULe)!hT9TzDjlUtf
zHRS;JY<G%KSbq_|mugevx>7x;rNw*3Kf869s;!oTRO#t@x!v|$$%m%(Z|s8_tguzR
zYfV}37OLCBfK|-AW+B2_j$lDFRs<L#%SM2fkL+2P$`?>t9Yi}%V?N`bW4Zb;7k$N&
z9v4ky<J?gT$s<Gg%0^ZeU(I~9`(ke{b@`aT`>f-+Z4@1@@C~~s!4Ma&(Z<isHKhFz
ze<Bcn)r5dPcB(Lm{XkLA`$QvkF64rU$v+W_l`F(a8Z802gzyGB$-<z5v`K>6zNl{3
zXT{!AuCc;Se!pc)M^v2cV%n8L=HuH+dop%60TPw#49w=0&HuvmA-sSqC5q<plT<a#
z{ya)2Rb>R3dUh7zBm2Q7jm_^jOrCknxW6&F#Z2~|*hFS?%#C1EQ1}FiY1tO3BjqnZ
z`3r&{ix}XwP!s+3Uu=+-<r;p*xUBr;eZ(G8hUWxDMATJv4ltG1l6JVRCXm{uyJzoR
zIak$_y2&!w0zLy<%hIlBKXOcyZ?QA0z}v%t{8QFVsBqN|)mS-qM1}}5!++^=OGh15
z8(ZgJowQa`>o&HqBRLx<T$Nvsgkwm9i;CcQ@|v#Z-63+Z6aJbgSj(vWz?o%Tf<^~5
zy2Xi08>oSL3!ot<fo&RWBheSzDU;TlW->TG(o<#dC~E0T`Z`yOK;g2HxPITI$VOxL
z86Br_1tQlx*fw9@R~5To@@FFC)xvKz$ZE=%#yxfLoVHOcs46+W!5#0%E`ApN-f3Zu
zx>4wH5%=hVGneUboDd|vsEQ?%fs^V@tF;n!zc7O18K$5o|LcZd-Hu4d<H%t6lF7mV
zN1zaN(j7K*+!jEIDY-9(7InQ~ew+~b%d+Qn=7*4(`&R;==)xcP&Z;fH6{UaB`sNjn
zm>Cmrb&T_%4#}c6DW)2%)Euk%EvmGXeMHpu=nnI%k_vrtLfS0Ep-Xn88fi`CNfl%p
zk1}6_ftIJI0e7*7m^6+R=nPwNqpiDIlutI@9&6yh@M-KfJ(yw^s%{?-iu!K0MX%=d
zcHT7GVPu*#aI9ILXCEMZ|KFxitSBH<ges~Prg)HXe4X|tvt8dcZV81$zZ=ztLT_qE
zE>>shN&i?HG&jn5yeu(z5g)~enOz>m=cBVJ8|K1vT>ph!W~rTLlncfPghM}a!~!&|
zGA1Ttr%c9;1tSSB^k?KA^&q{Xsig+CQ!jK}I`Nda7%lZNi8Xe!jQ3pQdp`r$;dS8K
zR({FtsM%YyIf`Z4`tb&WMvf=l^{QH<`Cgo$m7=3<d&POA)wI61FUuJ-T0?zRvrmQi
z3Xt7*^hge@ryc(RJJQ2sLAg8kR;-L_Ro{QaG<IGrbo>ar4+41(eWERHO^;tO&vwdY
zaaj>*j@ICC?{}jBqu5O8zLGIyX3|N5z}CH5LCpbjrL&APb|x>Ir}OHn^jzwEQSq6d
zRp$rw8dr#I-OlCYwq9V6>B)exq6tMx<z#^%Nj*MV`$Cv_)oX<U<-ss|ka7KuP!%?a
z#vniE&AL;y^|o=gI;$kf`~saWL0jWV|C}Q1&yO2$@2&MtG0n_sku7Nw0`0@NXmBF_
zh02i;AZr%pheW09zY$=9VhEHSzEC8CN00Vr_lPtOZ!5L)pf*6#B)9)>k2o_{ll+S1
zpuTL4kIGO2_$(~>&lmZ;*S}$eyZ$%Y(}<-j9!u@SYT4Ze^S4LlSDs*G=Y1+lCHFQN
zDz8+MyG%tifCIijIm8+BzIpr0#67FL-=#(lp5A!Tf`k0;Axhl}+$5V7C5yNmbL52D
zL$-|@Z^=&xz|xpuw%Yi<20a@|U&EWUzh#gjxvC1Lf;8aZufau@%pJ(mOqM@azZ@rJ
zISl+8hSnmFbnd2g-)$Xn8yZF`HK(TaM0N{-ppmZ(g1edIz^-kXGkwN)I038(>cO@A
zuh_vg`>(Wl%mR&=n`m_u+$NI=F2k*M6r@EpjyQ=n=)r&mR8>`{Gh^#>Xk_qI7LN~~
zycn>zNMc{S$PhGkdBw$S>s07O!6;;zv^L_C$ZXuIx=E!~{ZBGtKHP^$j~-K{d^7c*
zdAC@h45}Q9Zx5@{KnrP?b0NQX2woOrC7Oqs?dpfi+IF!Aud02wrTzE#($4_h*Ic%9
zRnxC*&Df~(CH@0U>_^pdt6K?9T*Eb){9s*BcK9PuFYCI`^wm|F3qh9n3w9<{@`drE
z-XL?-NmEjw%_^EmcsuKD;@RzO%>i~PTI^VH2KTb2k?~k(-@S#9bx8Y*pcR^L2U*Es
zNMnXy6JKVs+Vx5Sxl1{nLE`ISNW0T7BCG(_g-kN^i?~B*%olup)*;b6N%unJj0~ro
z`gw~Y11!woesl?0hr%?*)E8HJG!~uv;@jlp1~XRc1#b)ZO@up|isGoNrF_XZWDJz{
zCsY~7h8z;e#Id_;g@ikqf;wT4H(#~8IRc>M{XIG8{w)!v=z8Y}losoiLs^LXgf8#y
zpDdu?v#2w3g&#Wuk5y1C@3Z9Dfwc_oN@a31aw?aOkEf%&Q~;T2I(7dQX!K0AfuSr-
zw&9WJp9uRtTGONQ1}w-LzG!mv0f~TaCIbmDoCy;A4LKAI?)wk_KWRqs*B5dOj&d4i
za1~6K8%Y_WY?#)+61a)J%8}#4?{0%Y%x{Orx4(YB^p`tGd|l;_uD76Ut+F~2C;QyU
z0?&TX=Usu!n#`XgAsX@SLWcv>e^0V`?$IX9E&v&u3YT2C=3YxMZTulr=}vk^`e9_6
zmRl;xScaP#+QJn?lS4IgWO)<?&5THMhU^BD#fEv4F)<ssO~t)g>vi~?HQaQue;Hq}
zJN+1s>NDEj=88hQ=v}hy*4gp7V@U5-4il3rao+BP1o!XTdsEdE^$Yz~3O&WMw2+OL
zaE4Ajv^wa%>E0UVM`-~>gIS<H>;Fx@G?Y3x1eO~nvf9Sl8=)iUm|jP3?UL^8^f|PW
zf)TZ*!np{vdM;Gimq*uAcXiyj4Pul|6+~T5+G1~7XY-sFKc5_K<`$R#biZ63N}ASf
zcXfEm$yD4c{KJV`qRd0?_YsoQwOsC2Y?~7}63dX@NB?3t9Mn=$cXzy@1oF3ojANB(
zrl7{WY>;;kcoxrS9G{atKA}QhNu>r4je`SLmeG1|_H!@F(gbc`Y`F%&yegF3gcklK
z0Z|<R!>6+URad6AufWc|+_Ng+GZ1n%d`tRqg;N&9;bk=i<X84VX3K5!!=T^o9^ICK
z@g*tzd-Cf?3B~P6JW|;-R}5CJrbZTtvB&K{;UU<_CH}CkdoM@$ub~`!Wwv?Vd6iOl
zS$&w=)8y3Ff0QEB8#+goDd-y?DCy+(#3w3qtED;jWV_RanXoK>x}(P=%(g#k#1u5B
zXmH$;6NS-j2isQ(aaY+c^IS8s#$`1hB@0U}P$#?w;KUv(82Da<^~gBVzb;sCb77%z
zi#}IhVxjgs0^!<+luaw!9cV5ZZFeWh&17CbM;CFh7sG5IZH6CRkZfK1i?2Drv)dN^
zR(DbD3_Xw87JXc$gIFM&E*PuT#)ERF5pX^9?;XtOWO}-|yjX@3#hkGh=zQ~)R@zML
z3oLc=&uz^!Ga<0}ihAPcX@?6Sxqn0GdW-!Tq$mhOBJLz<yMZfzltp-bw@~o8CP+H0
zT#ECNvm<+uLi~Min54qe#Uw`COm;vW5Kzf?X?B`%qBr$t$k$NLOgc?hY?7Yc9{Q=D
zd^w=j7$KbU*9dCH6^e%2u>}-cXgxzzesVh_o>j$$!>lGse5o4~Lsp93AO=scB}P*v
zU6Z!Zm}?Iw?OLyGg`uP@i0)y9v8ISl4T(|4IE{~m^nRP{xht+PsV!RN7JW^;*5efi
zC4xbbawI8&oh)uXLykE9w8*OW&AjNtZwJD4j?(K10<;dU`Oj$26QL9Ahbzksp9w)J
ze!gEfduC}@n_=yUgYMZi^##Iq`P${q!XKCm40Dy3+d}I3dS%key263mf1e}Tzs7OT
zrmezs1$_XFoqy!xW2{B@iO?Zln5>LO8y${_RBU{WA<BD%!>}6AVxw<G;+PDe>!3*o
z_M-MiD`i;oPDJ2=>T8lHl%6TQFe2ef;4q>PG;Ii|Z}p>kvc)segiOg&#|Sa7#OkNI
zJtY>QTV49Y`Li++&Sx)=K88*?_|=Kbw?(eJrf_MDiO`>=a$rl<HH0jX3$iRrA5k&I
zE$YG<?d2tJ-m|dHaZ3kig}skozZLYk$N!c2>l0)M>5@Ye2}X@J!yML7ouJvn8i<*q
zad%bhNl<6}arOfIguB^9ZnXI0ZVs3-C@Xds)dEw+5^MrN!qH}w`~XiRfJ6_lhb&MJ
zUF-YFPNUdJWXcJP`lpnYj#zp_-*tt`VFg)dd8&?rf<VM2>O?!4sYDVPr9_>&CU|!_
zXS4cO8u)1D)P>NmA}$KpeC}{V_SFlw#gA0^GB*xdxXh>Ji@VZI&I*Su+y*^`NQV5#
zhZF`O^C61h#*=wsuv4bK36sf2_bLqBl}2n76kz3w)O&UAGkw`xO-~s{r`##|B8N}k
zaU%2w-juh=+z2Z4hk_2H9Is$Ik;T??<>x6I1nU|0HY-n?ROaLn-6>CymMNQs44`j2
zA=*0i5j4OYv3Mf{sj5)Fd{wq?mb))TO|qFSYy3JP@_FBXqr6H|0JhA;k@=$-Uf5ib
z3TkoYrk;^s)azc}d8QU5YS|SYzg0hFqtw;ZO`}?mqk)o_#TIcmGvwe(pO&-Ib$$B5
z%H<3JD*+@dcFRa1?Qb-@%9$OpkF{U*`rol5cQR79C%N+?Ea+qNOt%;0YZ1`=#m%Wl
zHsw_D0?Dbzqhwzs(egwBt;GQIV~pQ7y>W<8IRopr_@^kVc}{T+B~)vX#%NX}z+qXh
z-Y1$x@c8^KFp@VaU$hf(^f!K)U&#E|yqEzH@G#0}OO{(}t+IZGSBvNgw$ckU<`7$a
z$VDzzYBZ>MkI{35vRE?&Tt=$HT*y?t6}PeTqNP7j*-Wkl`>Y_!ATJ<@1ADPmw14RJ
z*$FuQI!huF5bj0#dG0n#bb5%iGqO4q>q^m6TP)48(6bQ{2u(LPfkG7QiH+>5DIqJ$
z%gsKccrfhZxbJ%6HkHw(sq~Lhxy*bnNmeVvjP0@jOZA~p7}+*Sqr-JN&cgVgKh;#l
z3@!)aetN-qYsNAzHL<`A$OjtX&kCj9N-2;6yq*)@sUg^D2cs)Wkq&4(Sj=Rx)NbYN
zE%Lxusup06$?cRe^5y9z6PT#iprvI2L7$13s%)#26+r}6^6$LKaRR89n?^en#I^kF
z$u@W$KhxfbJ=hto5#F9cr<#SZdD?5Bt%g~cwg3vDc6KdZi`qh=JV+lLz)^)7jQ97g
zK$;+KjknB8L-L)DQ5G>W-dxG4R|`oLuAf#UiF6$T^7g}0uAI=9%TZE2A)<KX=)zyf
zhMQ}lU#o;8-qShASt7t#oTaiQG`1?82JFvTSC%N;m9kB+ed~}uD@!k9Z~&+=IQV!a
z`Z+?p;5}e8s{O!`3nuZSZvjq_C_-8x<Xr!NM@r7R7;@5JU|~VWAu=?Evfz-oYT!T=
z?}!15Fb4I3X^KZ;&Z5G->7vwTc^EyjDL6(+y@CDJV*O^OV0K61@#N|u^#CMf;`vuP
zu@0t}|Kfrwi&v656zfa~>ZK{c!PhQ5e(OLvFYV~p^wHA$z3$sAJ3iN8hLH0m(0PhY
zs%BoTrJ2t@d)_Kj3%|X%`IH|d@phmC4nOdAuup~|lPLF|NHp#THyi-wLf`|i`osW`
zz@B%I2nL-+K5lRVfq}$V+F|U51DL|+i=+}}LBth@d%^4=oD6o^IPi6t@yCO(W(Sx&
zU4X@@N?{J&sYQ4pB$@+UXNXrLTT(X@d#@yso&b+sC2}Kvb8`8)F_Ml>acamPtHYfC
zf`&P@H1@M-fd@ZIANDmH=QV<NFA#-x*bQc)uo#E*Pcm8T;}07je0Og#Ws9Xz-$cHW
zFTWc|oMIO4*PArnz&DvRMthQB51+X{j-Ngsz3GX<9d<&p9=eSVvbGu=`giJ3e`V0S
zz%bH~MQ-J-{cnOM44HSQDepVo?-iCQQH#f-&7IRlLj)Rn*pNAcs8RiX&Qa%5@t)lK
z7Vx!7cO)Deb%JK@3^Q$=SKZ!1CeNLIn){DyZ+JHWF|KFKseM!LlvLa^4Y{E174$Ah
zP*B9)AIm9OMFy>@pm!<B_KG*`lBIZH;L$N1^kT=LgS4U6kd=_iBTP#Xk4Uh;iy^(}
zKkWxS7v!@DuDt1e6~wbv0hfxa+tP-!BNXnw7I`4?2h`k-e+J_QDn&jFPfxZ&f9#SJ
z>v)CXRD@vZUo;2DlCaAka2d2jH8oNug}?inlH6s{+(_tBCIz5_=oGl^8c2t;^CS4s
z!OxDl3DQ`dCWhis%6W&Jyr$RhFs$jz@GUPKyws|Jgd_VE_^xQF%Mv6@rCaNHo6pi)
z<;@a6kGIVNH;BJDVV#Wrv!`!9j1I2`O~J29PL%(meM2ho=q1nOpBM_3@wrpzXYx^`
z1c%`PX;nXF0|KTyk9kay!*^H-mFk{!P-6v%ejtZcWe~h~XX09nhL}~!Xl5VGeEv%C
zU=h_IBzR@oPff^`c~$ADRPJ#@_Y%JsHXoYU9rj2hZ+XQQ($h=(I{R7JJuD{g(IcRB
zETbdq!M^!~ADu#)2XWwzVp(kEL~+~akt1IIe(wkd`Ms}n@!z0$l0~GYgqG$m!{)wJ
z8MErR6v3~X&aw=!!gDWC22G0G%;xhT;)9pkxXA|%vimECndggm4`J04^py~?`rkbo
zpgJcDI%2fZg}j(OyeP^u!@f_suF+d*EB4zS5$m=#v5*hujFxvv6l<Wb_Y-Ga83}af
zA~pfn)ja;LCQdGbEba?|nf!+}LJlkRyCWC9QbYCF!>W~B^AI563Zw*Gzv`BFd?fvZ
zW1XH|<sSk?b)hR<qTtcsfYLn4?=5Wi+skpA%Qs@eSp`&2AhNjKlyn$BniANWni5<T
zhNjmKl9<(4Mi&|*yO5Ix1qe1xQUlK@kUMA<jh8L18Zns>D)_7T@o>t09l2>M#jkg*
zWJ@NCj)yN~JwFdQDS^RSom0X>aCae3^yX@I9u~$GI#U%rOb-I;5_XQh7xA9Iej_N}
z3zOQ*JvE>a>NUNwo-ujj3>A2)x3n@<l=8^jUSv*CwwQBSV)VmjPZZns+u*+c`S;p*
zE_oLJCmXt&D?1kyZl;b_m!pkqkQsVq$>`3_fAt+*P0Y-LO~reNCw}dxp^8`)nE^<Z
zG5nKy7)ky0r<|`BQO4<>fs9gjdO+j_ZKY8dbt~Ifznbd)KL!k2TygQw3?HM?lBMI!
z?XlPD&-f;_%Hp;*r-*&>ir4V=@)^O08qpw<^M|IV6eX@|_w(Vo2CqfB(jMnetQxCk
zk?middpz-c9g|db;CRKS_xWMd;=;<dUl3-+oJ=_5lbkL8Zcq)W7D59{drSOb!_G|G
z-;1Ql8ZJ=TQcNil&bK=H!K|5UZ_E9ee$^uTKGHgZPxcKr=3x@}+Jb@MJQpvpdZzTH
zKrOX-*C?_OZSMzr*OXI{mYOpT|0%7gB$2zK7U~`#{l}{T<#QQ>YEoxhClrv3yxA`D
zIPr9VM!dNOc6(v)y^~6tTeXktyn0*pX&k%Ve#sboq7`P`In?wohqf&2Rv)iqr)G~_
zVDid7d?QPBH}qzj-_nv%=<Bso6n^Hc7R$Ef;%pRJ(k^~eEg~OgXxVE+laBQDf~yQ4
z|8}gnNspl~1pH#gBWyWav`^#b)0hkK*9@$mq{6P9y@rIv;5dhA4sQRrP!1=rqu|{1
zK3I05W9aqt<z}h=nyBIfckFEXR!`FA*7?NGk0Zl^;mzgCUe@imYn*WJ;d4yDEdBU?
zl!JU}>|JWVkB)QRsNUhi)Kdd<kSLn90yw)D$p<&JNQ9@>lrQd=)~OZC6ogIE+FlD7
zt(<Hk9Zx-Xs17Me6FFOWctk>f8qhMp{e8AE!F@M8kf~{Ob7Eh5`>W98(+rd(dr7gz
z>vD?}{+({DZtKT#;k*9R!o)WA=JkPm__PAKa})Sn_Gmq<ia5q1f)S0CI{i(G7&531
zZp?L8P4{-){vW!mOs%)8(Uwz|I56y4s7J4ST#ns^aP|(X?>{msL^_&=3o20uAei8o
z4v{7EjLC413tsmIU8!i{;4^w;wUq2`^>8nH*u@%{P}K;U{)D)A9OdVm>PHABUEDCw
z14f{O=fGCbm5}TBB}-v=ynvBQyt$K(EwC+~xyxgDiLZoO>!m|Y&@2qgzdZfsg0D=6
z1KD8FsAaM0?~|p}GZ;+|rCot8qrR9*<k^N;V%&S-fwm~$I}(c)aM|#AV@LOoSgm3l
zbbI8DJ72eDP08}ww^*XJWHf~fXJ*zttJlPft|MkK>TO^ns?<7^2?a*w>=OH!{bSTT
zrA*>w+<y`l^;Soh$VzqoadNkY9)!rLPn6|nW>Zl-V`9hcB%bL)UlW_(j(Yxo0do_K
z?C>FCMn=F0(NlPz+(kstQU#lfIDaA0X=1%5ou*JHGouc7x*bWHxEUgNUazhb*rD5m
zfi$yvdM6e)OH1!8P3<##V)tG%$9GR}(z;H1^R|HCCjFG0kiLURt`mrprxA5*0=jq|
zpFp5ymDdp&iH0$(K|^C8HN^o*$BN$$s8boc>bS^>u<1F;jT$zt(mj59*sPow=g8VI
zJrbmw;}*xKR7PZsGIk{nZ)QPxJ|7&!E9fSY1g&8Ar||S!O@V#44X=<s^nbS$h7N5C
zfZznJjV0L%3fO{_LVVDEEq0N`%|v?!=f*^xwp5X=?N%;cocjg8dl|K%uVfH+Yim^l
zJM38lJM8^Dcyg58W357M?KUi5Fzpr~U%vV+`~XG&Pxj}N22F^v6qy|Ax9!)i7}@`G
zHkV>rn>1!{r@#gsfBy#5KzQPtsEtI*z`oxY#=qZ)>H*gS8`XDlB>cs`G4W0%v-W*q
zOfLr3tKz%ufioRGF{bkA=+vRZCRVCk6rHNR+kVTIqdR`z(tg{<qdR`%*w~FDaSie&
z7{KlcHSz$XAcIg%XopjoBFL=X9(huaE+ep<*SqU5?CqO3=GnB~V@GypvuNP^gGr?K
z*eom*_&z}B81UIxNMqn{>IYkKH&O&Lm^t@&up&L&gVO2{wYz%HtXmlM$;YwkEVLj3
zi3kpceDrtVKH=&sLUa>xpTax4k?j^%_vfQFg``NG6{*fZ`RrEY`xSD@%TfXm2;p~%
zSGiJ=y~{w7H!zoNFWQD<e~^gOx`_gZVFKO`)(Shd85n7EIJ)?LqDz@ZN`}>*_>@$R
zsdCfs5ict_N_bhx&O*Q%6(Vc&joT#lgf)w!;P_%wWPGGElH?Rxf^Lk`>_EyDVS=b+
zNaB1~E>F3QskkzDYTp9>9)uJ*kS$JESBEHJi^unyDUF|U`<H~%wqw!9ZTlOe?7O`-
zCXF1l=e=|^-KMULLX&V@yVg?|6Oyzi4pWr*7n-?j7BZk1TzOv=j9-6w)-phF6t5t^
zGtMLs8>H9mje9-1?<D!K^n(~u9k18|7@h^7lIY2(1fw+V7(qpGWojy#4Wgs9YD(MR
z;I?XaU|~Yp%3Gy`wAAiq;%I{XxnO}8e`^Nc`=QU?1JMVJF;gd;Y`v&ejl6N+CK*18
z{%|j@UwomM^=P2MX9oAf*b%ie1JiGMvNjD-12>U--*P30g1%4=xW-4&l$<>daIAG3
zbV$SAq6mOtkjr#Gv<`oNi73+{4zg=r_MoXI%PrPRQsi$j`S`$?v;EZ~X^3rHzX=Rd
z2L7Cb=P*u-_^&Ep4zt`-j)7FD4%>ptNaKSs%m(EVxw0vwu|ZndAe9YL%jQ#s4XTt4
zs<A;eK1k4Zlq8q%g-H+vn6!lJ6NA>Wh}A4r`7{GvG|XkxE*wwEh{Y4VHR1O6cW1U|
ztu?(Sg<H`AW2Ntk+AM3~oG|X2B*VwiAMGvLtIpa>$1&@YA!OR2%NU#UL-EMI(}omY
z$2cWwdj`h0dkTD&udck6VJZz)X=pSkD-s{PYqJJV;g7?U@bUS;p{ciZR~4vnh$0VK
zQn9zluJK}mI*bHv9Oby-1i=i?AnZ)xWNnF?K6G`x_O`65eI}X1(Lz)7hevwkT~dqg
z&1?8plJQohFa5~jgi_qMBS%cw*kPkboqh>pTh;%nN`r0q>wW>u0P=kgfG3bDV28Fr
zc`bVdYrfD{A+Ke!JtnUeX)^_)laEhmIsbP;>wl!P5R)i?N=ame{Shm|=b`8^fqn)_
zAi_T_5aBP2@5lLm!}CZo7$6$jc+8bz0+BYQB&e9uu5~~JN1L(6yRZenOe!yLV9J$O
ztD7(v<1Umie_oiudVJZud0|HD(YkcdqPPe|hb)Y<hSAeor=K`WY0=hsM^59~GYPqJ
z$~A|`*Nb_E>VfYbp2}o$6&M#34z+6=QM9?dxv&;?1Ia1g&F;7iBu|^v6JS@tL1upy
zcw8FK`u`-2_s#!(77xAg<SZWc{U#_dQtYbQDu_4j6(eS0Qb^g3b0xvc9Qd~pbR`}`
zi1ctrRc0@W9aS@|3f2#|539VbvbxEDF6~pBm1Nma_4$Vn=b}>8h8&dv5ZD-|*Dxqz
zU{Fx;m;EstsnQ_iDFzfM0+UM0H%_%`OTnTwLw8KsKB@|{!vZ)>Wn|(H!X_!LCZqSF
zRCjjM=40kj`NV=r>!gh#<C^u*$;}!*)dVd@YZe}jT{L0lc8uo^LPK!Z77bgWGyu#Z
zv47y<BmpcC2hRps(spfKg&+YGGz&RQkbvy;P?^_KXeJQG5?ffiU22MwX%~<Sg0GT6
zQg|(;fFCzB=+z!whmM>q%kI+kddY@D-hVBp5mmBg_mq`}Bz^(8)e&zPJ$)BFwzB@4
zzo=tzm!#JHdp2s&&fmp_Pd$#?wRMJ)b`^kXc0<K`)a>KvRkfoX_r`_ZPI$w700Mg7
zea1@;h=2sB0rP?iH0>2zozip`!B1(<sMDR(`lsQ%;@xTPw99EEuXt|S+O*wiB<FNO
zTCFrZJ{UP3oF-Z`4N)TEsMD~N+Y;bAZIzqM&?)NL{E~wRhffjCpEc++o}erpP08L_
z=Gki{Wk(-M_fDO-?26PpvvGGtX2%{*DYI5)Tjm(1*XfAc=e5nAJYp^(QwGj&>l!g?
z7RFQ5=Cxf->(+5KL(9|ZHFQ?5*ND?hrtfb&g-IAIBto|!3&LJ;`wVQ-`OSMK^)=OC
znAvMVLpJMJ%`}BKTP7B%Bb5<)s!ddb2d0N!?$CSGbXh(*f6gL3wW+@MBMeKnKij2|
zju6RJvk{wMHfq{*b>56a7#FV1c=r~X)AxDWzHwZfv;K3<8$Qjg{<U~1zAs%Q3LJz9
zI3KJPcAqdauJd~b`OG^w9`FwGAMYKo>y|NV7>nzUi0jPSl2DNeU5A(B&!n^Lnxlbd
zX^VcXfoDCB^GS+$*0G>xX*032@k&;;ah_dsTwD`f;aO3_J*X0R;$gf7{~(=XSDy&H
zS-T}lY~Z@U4)R!rZ~(ykDE4kLLLB6JO#VouiN`dal*|+bt{x{rIi4Hrps{kzA~0*w
z<~1v6%hF?65p$rKI(Q30NBJIvsU)M<g!3`y$7!}A+<EWW^1TSZ>~<e-+k)qm??{NZ
zspR2~gh-9|`TTopDw#M1l0`=P|ElAxp{0s}06JOU^WELu-QA_Z-5nk!u08HfOHC@=
zUHgJpQR40pvXh*UCA-c4EBD-)O!oPEGe}mEW~`2Wk6EOR)j|4%Mz13u6|H86Mj>sw
z_rmuO?pTdJ>&;X2enLpQ;f~hbp5KbLNCS5#|L0D$X)dp$%H^Qq_mS<S4<doH0V)M4
zSo^0x&<B%KC3xh%iQHme855lwz5V?2GFhb-(vP{RpMV;-Nv|U}Iqe5d%KS}cFWe7d
zj0>Xuina*hbR-({Y#NE#W4FIFbXJKh*&FH9+sV1niL^6Iqu0R(%#xGTgN!gf*O<L*
zdkCXnGx{-0L0jyC$dVh=Z0ZtOVplnw=XyEMO=_Oi@~CQwec-&UoNkbn-$`1L)^F!2
z3`4JTBy!phoTNozn7t%Dgt0V;E>QG-l21Afx>%<@OwksZ%H5F|ztyG%SOL+G3YUvE
zIi{tg*>EPJ)1=ptH=GvdbCSX^d*M?EW2#Pjek<A{)trt*W2ucRVNPM^BXoAjxK~A7
zQbQx83H#P~fHOm4B=8IX<LXUos{YZg2#sDxmH}`hCuwy^qX+h`Hhp!PFVFo_vHRD!
zq^()AeR1Dc5iK|a0FlV_*|ZWzDr3%7)IN9z5t3@MX{(@y|MUlXw{U7it{b{>-GDtr
zFyk><gB!92`n_;@n3160Y4kcWjy2#U&6kXB#2QRAeMLI!zOQ^1>=YyPVeVq>hgYEP
zyBVi;p>gmulSZx6HyV+3Jl5ECMND5SNMgSv#9E<}nLfWppLgF=w8fS)X7m}4vT2&g
zH3z_zinBUd%&LX6>a3wz(umK$V|}K`ia(SU*RSyuhN0IH{$DOXMJ6LEKFjo#>MZ6b
z*!_!K(pD8j+*c7TI3(r-^tAv!Ig2r8$x%F2qfjT$<PvVu>&OfMxlKtn88M1^%BLR3
zP19M-QTQx4CUWGyGMgr1j^epZG|rPzvjOBfARbMULDM{pYRyLv2~-z%BL4y#HV|3>
zc-mdbhXKMc5CcG?=4by!83EBr&Q-6q)}`lm9jyg`b_`N(kiVWm6DRJ0<4M^~(+7e?
zyV%q?E_P|F6&Tntp4nTi*b<<Wy)`YpU6>I&L%Rwox@LF=<jsZ3m;a#rCEWqp)CC{_
z0096100JWtO+Qe%Uk^O>02v4X00000#PAU=00000)d5o9`Z)d72}}rc00ICB00IC2
z00000c-muNWME*=`NzY+z$y02;$IG@4+jI|W(H*N765(q1~>o!c-n2!1CSsw6a>&t
z@@MvJ+qP}nwr$(CZQHhO+qRwSWv!;_jpC%uG&F(FrM`L7AyHTl#R<8HO41CaoSoP$
zcacjq!79BGZS`I|-ZVmM>3}k7f*r5ZA*POstR}A=&-yLsCq<_$<WMK-Ky#@eO;N9r
zTCKCQ%^!Z3VOb31GF!0JL!*cj%dVIE$n8W&7bhWdOJ}OW@5<=uOhRs*3?-!!LdkRf
z&yL*g1(r>s2IwyDy`Jqk_gu0R$z?TGIFZm?eqo9G28ZRjy&{{jLe|^YI;OQIC-(E%
z%alNQGs+Is9dJPkBeOI`e2Il((h8*|8H(yX=)!*@6%b#&L3;JXMlnB;!1LX`j(D6;
zeCdv&($rq(d`s$8{0@b5dNK-2MbtKD(9XG!0p_tiVz$|(e7<F!9O@ks>Q#1(QxPrI
zJNr>eaL>os&s<L=iHpMOnf)$j>|M_9mYW!j%pe>#>rhjwVW67?4b2RE*B|gg(j%#U
zggVqt_rz6cZ=ag0=&d7QsrqJ5@c%tC5eLj#gy(tgbi-qd8yWLBm&+cd?GQ<e6x_E2
zvH&?`IpVp~5m~08j`TngX^)&T*gjBSk<Oz7s(3_0akEiH*Nc=gn{n4kgyn8b%v95{
zjz+4fc7{HIZTdW>>TPz4UXBG$ZsgSUP@lA!Xy0=_jhTar(i5w>mKxFtUEEdP^dtL{
z<*g|$-+$8wzDJ{Yl%7IUHk#ns4~?XWw21oAO0OI<mri~}^vqMRm@m(4`RAD}|9o>5
z1T*EISEiVoV0q?<8S>9_Fa7h&PhiZBf1cT~OaBAPOaa~ic-lR|1B@L(007W$+qQSs
zgW9%j+qP}n3ToSqYAdL1ouYeBB9U|~zCm(HT1|RcHeBwN^YV`JMe>XC4+?`KuBf4C
zuQ;#xs;sNLt@5d+sq)o8eN2NiwKVND<25@pSG6UzzjQ>mL$BAj*00y!H`F&QG3++H
zGL|!THtsimF*P@BH`~oa%<n92OB>4^%X2HTcC&7<Uba59scf{ZrmctVv%QV|m?Pm>
z>iFaw?Y!jt=c?)2<T~PJ-Q(TQJas%rJiolXy%&8pUq#;n-+jN&-^9Pke>9*7)DDaZ
zya+Z3o(UyG)j}V_neg36?MU;;uqYF)8J!co8B533#7@L5@iOtY@n!L=33no%D4S@W
z7?`+|ER!6SQl#3a?xc5Qe3@RE&)MeLK{;veMD8t>qWVz7s0q}1>Lm4;dQE)?DNq}<
z2E)M;upJzyE7R@i^GuN0$ChK~u}3*0H=aAkC-|xSexaPONjM~26CMknMVaUo>7q#7
zDxMH;iEp74dLe)%V13vTj)1e_CU^i|hfm=TWI!Q=P#x4B4MQ`~dbAH+K#$M|EXNL<
z#-(sI+!pu8Q}GJC3!lb!@kd-hTqHxvk@}<)8A)c7jpP8iMD7;?Gyalf009610PX;g
z02TmN00jU60000001f~E0ssOU00sa7c-mrMVBla#V_;@rWZ?v|<A4~#W@O+2@*r#`
zAUg}f29i<?Wl%N?5}TDljbQ?m%?1?T24(XBsvL_e1)?a3-cWu3Gq|(C-EED#J6RGE
zh0~{=Yti6JoE2*>Y?&}(%pQXa2Ts9|W+jZ6Gf<XgNe>%_D09J3`)ut{#(<r4%TczE
zO_dd0>0X+Z?J(Cy&r&y*P7Cd`Q@mn{xM0JH8$aO>Grwj3-?A?*!kQ3v;e>#V4r{5p
z43w?dGQ$4a7_daFrFIHriIb#6UG^V+$8iI)A~**Cc-muNW?=aL1&Fg4QW&rR0AIfY
z!~g&Qc-ke-L%ITB7>40&9^1BU+qN+|h?CqX*G4jy(YRH#g!<l^+}HE_4@-K(j9x~R
zDQEREqY5UOQp^ms*D4r-UPg+!H9OE;Mwwz=ZB2C*ihZ&=)?R_)JnYZ)R-?EReJ#~;
z6z~6jW26?v59se^T2TVi=h1WxN_e(D(NTsH>7I5c>QQ3*+d*-kBolSM&Y`4b3W<=1
zlFf~D)+tf)qvgV1=(kESpT6C+Zv3uViyoCTHPOXtraJlv%wVvZ<_^Ix@PQD>fyQd4
rmQE0lzzpQ|bnLetLsS+t*3;%k-~(xp1B=)<*oYHE9$N=hIRF3v_`_vA

diff --git a/static/fonts/roboto-v18-latin-italic.woff2 b/static/fonts/roboto-v18-latin-italic.woff2
deleted file mode 100644
index 3791c883e8d0e8d3d5331b60584cf3869276cd43..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 16944
zcmV(}K+wN;Pew8T0RR91075VT5&!@I0FZP5071(D0RR9100000000000000000000
z0000QWE+`49D_;*U;u_p2vP}yJP`~Ef#DQ^$rcNPUH}q-cmXy7Bm;*w1Rw>23I`wz
zf<zl%fhFwNivrFANbpfP=486Lcy1@Rd=EAkMX+%Ipy&t6{{LfgGDIPD5Tdm|R0%2t
zvrVElcRLU}7&LmMq^%+<<-um32xlWm=tYxB5ypit{0a?KuM^ziG`Ua_s2(*$4Xxk5
zoFbyul26Osg`j2D^P>lYZ&PS{x{y8iqeK_~!5(~YPIdR)FCX{QBQ*9&E)UWgpD&rr
zZh=WLkh)4hTUOP_tuTP#Ndf&CqO~=%bHOFY9Z?cugCHp_2rbdlB}Y|DwI>ontEi}`
zprR<EBIX<YQ5>%Q+k`eWflZd^0sdb`p-#9{w#xOCtB^hZ`S*5Z2%mHTdK6G6()Rpp
z-&`CLNivYk<~x#06Xfpayk?-+t*S41PLnGAzWYek8dH-tYciQ+7q~C28-K>d2+#^G
zzujk3U+(^!5jlj0&-8kv*`2lT;xo(f1z2ZK<Fr!IBy1?!;OhyM1wnwt6LsSscpsXk
zX?6|{y!a4P41oUzc*DxV@b;h9(xC<Zb2K|ga~GnQq{vRynW&PgLKRg~Q3d?6u=@V6
zy_;*W<FTMn1}6}*ZGKKW+5kWS>;Ks_+nF5`t##M|t8>xWsZuJ?6+0k%cK)tlSMu{7
zirza(hguzj9Hf@GO(!d8UjU%HDnL{<si;d)rY#970s?3)wLfBmEdPQa+zT7$k_~P^
zB@&CQUXoFDbv5>7!2ys_HMSK}*Z+TY{o9@`0sp}p7XRueyR$pDF1jn`{oFa1u3c1c
z#BlYvz?&s84#Us$975*k!m@P1L2|~<RSKP5#VV$*b5pnxfFJ@2SS*(}i$$Es2^1Dc
zQh9c<sa1BySd{v}F~U)71=LN~J=gwz`hVKD#$UZ_b)cd$0we(xw0Cs@L)Uxdp9({^
zpEk&VJ19W{C_@G)OBN_sE~r2Os7MK@T^GznpFj`>SOc&Q2nbLD2w2TA+Hgl7Yi0+8
zuS$pv1;W=w`h@`Do4umLfG`}ui;(Z8Ya+t{*PbiDAx=%?l7(u!hyR$^+lJau918U|
z+7{bJyAwKzVO(e<>6l>3rcQcibbFS$SzLnIL+DS|*`OV0N+s4TFvYhGwN#4GjW#-d
zvE6ChIIL$Sh{QNkKNWBYD5zNWJLr(Zj*xSVA|=XHs8Xjvi?$O?m@;F@nhl%AmIFu5
zT)6R2rCO~z7fqQqW7eE`3l?2+*%de3bjym{?s;O<Q(Ioz@ycs&y!Fv1kZL#JsN<!9
zNejPw_(7~nIEGPv%<|h`2eSV^sp4hOGe&)2Oj(#X#g=_-hu(1NH_pA|_E=cb2Q~4l
z*O*P^VA_mXbLO-AJ@df2haTC;9{0f$o1WUT<CWLmc$>ZJH}C!CL-w(EK5fEouS?@7
zxmR&Sm(f{xs$HkvS2X&OR=3;}3CG~1Pl44>yNV004GxWS>AEu~2gx0hk-6MT71R!g
zhL<j$6IWjH!UEi=K5WxH7r#az+t1XjJMLPwHjx(r17#KGRwkp~F$NQ-*hkz{a$Ksy
zP)%ypWsiI3iA_&!O{6gDBV#5`u~*`;CpJB`^<cylH%AIw@F1`a(+<4y+8b{t;xU?y
zsYboVrL$zIx#O-?YqwIEkzff{wQWmxx^gZkc0TD9y!OW1ZD_=;k4W_j$G&*YJ>QVl
z8@m1E6%;V0edY?kfif~n>Bzn0Yd*cZoSCM4-k}YS2j}Wzai$T;-Ih_C+%73-QA77Z
z)p0<kXs|Vd1MrV5I#GgVtxVH*cY5XU0v^fT4{G7-*1O|>>%D9=?Lht)u={gcO9JnC
zr!S?|@gkU{ZsuFe?C-~4epCJ3ugiF!yX#|Mw>~-lG|v0d{ZYLE056jNTk7yRTi-7y
zX7<o;%Kszf|DI`(+$fg26RVk4%<jRx<D0g7-)ozwLpQAKqJHB-J8f+L?c+L{>|<?s
zFng_+eMJKR*nN+uN5h*d{5yl)mR?mwf4;r*m30vS42%}HRJm`wfV%_YO@c9i?o{ti
zJ^f%3b@>TRmb->(-`d&_aAVtw-aV)D;XBx+kL%s3mp?hY;0?@xQQysxLZaVqH@086
zAqnK9H@*Kq*j3$CtbG9Nf>sZ(eo|65&!=4;xc0wmyAdb5*4ge=;@z&?o8O)OE=P*e
zu+1dj@~QQnv+U5_-5l@I$h`FIyJ0ZMem8;#ycF*Bs`2fp{Bpne;=t}^)eLtS0rpmA
z7z}<1Qa}t07$zoUzr%23C?Qd$jmdx!Atp?SGGk^BYj(sqaIlv%XHs0b+ow>WgR0a!
zq){VT7j2RA(p&aE`oslE!zd#l5I{j8fPp~-6O)Mj_QM=-fRKX@;&I3!&|!z+$&y7T
zM-Ig?$M9362vVYimnu~>YSfUaQzuM=20@xMF=)|3rA-?*0|p2T86q-bgfA?@g>eNN
zIJUEn*ePO&tyq|3KxcB(N!)e1LLfHrJOMQTk*1y}pdPx2MqR|kp3szen1!3iW6>3O
zH{1r@v4-s4qbJpU8weiv<nzQ9E-%Y*cD#kyYa|gK!sGGcfzFSq^V$yt@G#QQF|xV<
zMIEE8V~#62W39-9MED4ca1#n)Fs=$Fpi=~pC4vafL+qhLr*$ePg=g&GxCj@}K6iMS
zV$v}s<xqu6{2US<!b^Avug7Z=zz>7~7<&XGBtpT&`CA}w8lsr~&Ifp#>$A(@EB3PS
zh}O99Mj#$>p@9UL9%W;<bscM?J6ZD-OEdjcT?hS4OY^R?ZBBuy6RFeU;1hij#x9$1
z^{wnP;K2X8vk8#7IVivjs3@Yjrtz&YXCi?W$}*tA+$RfAjKmTriR;57pi|%~T%%bF
z%mq4Iz_OsTL3!Ec+F{JIdyA4T-AV^o`7=#B0`h>{h3Q@vLPEei^arR-#9&&qbiQO{
z-LV*>iL6%-_vd~34Hz_J*oY?lwa-ZuB^t+hqb?XT4g>Mp18BvLa(JLW(-nc(dV98g
z#Q)>v`Yit-u(Q^qe1hXnvorz_*lxW7{103^Hztq(Uj(QFJBNfiMnHFai?CL=Ir0<7
z^>ASZ*q;O(LBN_MPt`{M%PzR)t~b8eg%iuXO560&#+xHoMrNL@y!l4zE>0x2+XF9N
zbls}Az9KA!SlM$H-j9!d?-l-DM(z@@`)8BupWAg#{a^lX{J*gmsY!`((cVr+p8t4O
z3U(byO5k4otn}0C{TVJ={^a`iGiABsu2pO9$(G~32i86G$c9{bpJ<;uUx9bt`^^U*
z75an<000~Bg$F@2H0YWH08&N2+qN{J-4LHJY|@AYY>Td%3fE+~?yiNf>Y_CdEqi1`
zrpLD2@yv7CUU=<(cq7+aUpx+9<@x4!Fa6<9`Tp{scj149VfSM`4M$KE++2d<v0G3&
z_6o|zK0$dB8$Urs5<4y(A5~75TEoy_ni}06O_rs_>(zR)^??J<KD7jV(}6Y|j%bmt
zP`n3xS#XxelLMvHG^^ASV1oruyxByeNurcGzAC}!9K4etzUaX-Euv445dcaeCvyrU
zE6E`I(H!o+3Dt~*PEYE9GR*Nl0D9Je$p9Ylbs!l|f%c~hNt8{(Os-5K<-7AM;P!86
z^iExyQ<DK~<(>iT#6w4E>c3WP*MTd7;EY0plKgNsd7yHR|2n+P@TQ>yGnot013@P!
zdCw7xUt?I*>v+{V2=wT&;Pt*t6cJ;DBhun>mP;*lWDYo4VIq}yr0XSQQaV0}#WTzy
zX!p@c0qu{*O`jQM`l?79y<uWXOO;RuNoKf|7@Q`rd9n-+Mu8~!(0Wvv>|o)OE%zV~
zI!-QgF7Qcm00+_EqY|W+0*TLyC6{Iarf4$IY1e1BlkAWS#7?3^Y0$|V-&>35V55eA
z@arnRePaAuYaIq`z8-+~J&?Bpd(Hq4Hs`N6gonT~wgomr_#-kYhB->OppD%q1ZLJ|
zFI=~F^Fb08qt(V0+b+f|0fJ^7q7n=wu}I*|wgi)c4RaLi$XSM~!}@XzXfD(Px1&~w
zi9h<Uc|L0tIR{i+^AzQ9vwUfz>=64XIhQ@YcZzwfH*3-Ckw+|o$<gYr4Em<B%&3jx
zN^-ul8FvXg)h?L1ap?Fimnmb3?$TD$VKfV$J8lo#5?jt+dc?_>iz#9pG)F|<op^=l
zrT0BXhJ!I)KY3!!jNIBmnS{Lchtg=oM%_Jryp;URTi##!Lnl3+ET6KKHDcvMD80i#
zN}0^ezLmzM*`Bmm0m1C-!|yIW$StsKh@nU+1Ccrin+J?~S|LJ%tpsrxVX8^+UV9FK
zSr?om2yVfWb<g#XwbbX?dq$a7E=Wz4sYPlq1OxPAf;o4^VKd=gs<2CoiahQ^DNIAg
zhl0+K0-e7&=6L%15}#yZ)h8Ty#Y4@Cfe4e(>9VrTM{1#^$hV`wRoi?;x|;;u*6dm>
zvLxd?7NMC?qeC=ov=k_BAj$^|I;gl!y;1nu1AE^#js^vSV*`yRJKc*}+I%HJUuwo!
z)gpe?C6H0xi@jy8a<~pjV}JWRlO<7g6TEC0U~Ba(2B3PZ<!Xub&5VjHm=%(blcYpN
z6O?O_eO0Dwbm3zBe+YqnMjmYUE1&01w=e^Pv|x34UNVp(_eyzA2sesfhLuqgRkp*C
zR}c0KT`IL<^VKLYhL`%kG8FNnF1k-#x|<HLkd(PMwj0O+-cK1<#14@VEn0)Ad1y=i
z>vN4cp8`w8?DTmR+nnvwohY<b;aStzmZ{3hf`8HO@ty8VQ~JD>TlixSl-v*gYJGI`
zC*LF~8W5a=BZU!^vAUxWb1)K*#XK^;1&I-BQ&nxuwG_1Vx4ub}h(B|6p0{rADtXCN
zy*n^QN0ee*qO$Z-(Ud+mbQp^a$LVw?M$_fJMg}iz#8IA0t0A$Jc+*R;aCm~*`GH4B
zhO1;Ud{sO&2NUQX%3Qt_k|cxq_?BF~n^{LA_HHkVWnk2?W>bl3vYMAoqh1=r$gg_4
zP|vGKTX5qy(NGm5O0=D7zAYrVWXBpfGF=|D{_REe8`9R&n4*+=POQ!A?kdlN<TJ22
zUM*RCS?v`8I&v_a^gLE5oIj^H;b<CEmlO}}gxMLW&SJGoWicduk$Y(sPY3J9B#<HH
zrC``GrI6(r1!NLZ+yT2mwmJ-B=|oQgo-=xhD(HMME%t912Wmps@WO1CIhyp%;p{H;
zO~oNIL?=v~)IS|-@bW}XLp;7=(XkSM`V!25?W^;bl{GVazs!#LHgEsR)eFVfrK-&N
zs~hiLA3O>$dc*aox}pm|)hrPbWCCr5g{%21YkOzk5+ozaK(ew;Vg?EmZS~=c4|1p2
zHo`;6?3GQgYCiu>oh1semfR_*xR^iV3Qq2X(_JAMcNC`VogG>|VWEzc*d8|MMue)0
z^}&>8IM#rM!pcQ)JJUSiqu;a`WQ-0ZyDsfJZcJm-5>IsP5BOOt>pvb0n*4=%)NOZb
zb&h>aEjV;w%(PK_Y@@^a&jfLYlh_4&-!CQ@pV}%N2U}o5kT>iXnj1N-;LJ`Ko`iG+
zD^XulU(o!G=8aU2OH>A+nu<|O1DyURPbh0fb?WpMqK!@sfgpv5H<C?fw$l>EZP~@G
zPVoec5@@;p&x5Be1SnOV!Fpf^Qo_E_V<Zkd!Ju3*{Sh{hgABPv$yArnUMjPSa~MTm
zs)n}n3najHG@mPZ2L-7iMGj3(8l1O=;$OG5lHv?fp4iW1d-Wq|1T%pI#S%|c@I~ka
zo224L!xjH$)bnvo3G&X1qei75eC5PLR9JsI$rE;?jfQr)*IV&rNBcJN&!^DA`Xbrp
zGmZYms<u$;H;-!Y<fbZj)%Ix-)lA>1t>blOu=eHL5$-%*Z*ne`z_`a+1|L@vV}|O`
zVoj&|?8g2LaArFX#$Tzr*x<^+7&B3l*2RF;qSc(iv+2eTNyClKmASWC<VxVPjc>i}
zW4i1=R1iV=2Gj^D4Q=`}zXun-slfPUlOVC}2dW^J&1%|!l#-uf@BVQtOIE_q7a!yn
z`G<2JKc{GhByUyyEvJwWPoSh!Zq-KJ@Jn$7kIWDmM8I#kl%wKgT)Rb7j7#%{B&tmF
zR7Fir(e&hQ(o`JuhT^co$XQ5Ecc%25kLK&lv3F8Tpsoeu24skZC4Tx-B9=E8lj@U%
zAs(umD>^>7lCuT}%o77`JQ`>n>3-7U2n+pgNyo~0il=8%rOhh?x3bbQL`POTdfCc5
z6bD5`oaQLbTapKkYIlik#4Go<cn~ZJ317PL^5FVTH?}IxJ>*{BnYoeMMg#Q?uuCQV
z=BPVVChE3nbJXc7rPN%OITjDeB)w88qa%w{a>Nw0%lZxPa=e+3ex;)|Hr@4eS`+nD
zP~=jqyPOS}<D7Z`TlOM%^X|>BHMwd1vb*tKokbx}GDrq|MCPVmSxJkq<=buTNrzx~
za|LB+!z5IOS&NdqRq}F`&m%^pays3J$N#GW;xJt^HYDsi_qN!nl8V?6#bW@@6sT!9
z5&Rap5<gX8x8vDGkbJh983))FU2(6%kpn`Qs<%7#sFVWND)?1ojI4NYLDGxr+n;QX
zd^>dz31)}$vA2lP`%yH0c`Fe<DXW!Z$9I0JW%H(&{B@pzWL~22$gk>nl&{V}npak}
z16md)V)h-(A_)5MNsrDpV2iz>VtOI@Dt-1Dyvw0qJ03i_>C6!(6*I<+COPlo1kAVR
zf;Q*_;h`mf=PV&VSAZw-WE#YNp~UU9Bj}b7-B84_#x8O--@FK)1HJj%+KjB+v>WQz
z5v&QbaXAAlf6wFkTyEnMX89|ROXzaL-!%>8)eUb1@^=@F{V7n$tUFs#fA*gZRmvq-
zK8whWxcrv<YOhq>`**t6-xUfxsU-WLw0}KKHLK!jSIC_YA9DB)JgGdmRV7;fmA-I+
zSn1#FgN4J&OiCD+y=xLrXi2P21Hqd*@M>+AB{^TQcd=8T_dR)PoSYfm6a!P?Kz6vq
z`n7me+DA;so6&Q|`jb&StQaJwcu>nGhEAs9tn}T#=|Nv#vK5y(;gqi5NvIF~{K!^M
z@JXm-fS7_mNi7~5Nkeh4vY(ia*P|AmAJ$66S)TONg$B^u?@qS`!L-W|`uvEpr2h0a
zI?fyDZCGNMMxVM<5pn8>nNb!ooYM7ZxfA8Wa|6UwuEATSm0o`)JLmE@whRB?FxdR_
zrg8Xi-YS}fuV3_;<zO{Y^xomoBxWW(B&CFio)T?UeMjp3gDuH{9@e({w(R&u0l&gi
zf$3(?DjC_P5^qMwk<wWU;iTs17x4)M_|M&7bzf&0c25-NDsdn5pg1u08t?rvISP(6
znTtd^z)1C@ui*pS(9J1XHru=rGj>3em?y=aA&544o%G81!WCR<4Nl93Fk97~E17Ah
zGbOhKBD^GybkYjNMhYx%O)Tv8zt|>y6CzxD15BezMT&)L&-3O=?Fjx5+Z3+dWOlBB
z|IF)O5A?)aOGio}xl4s`w3GFSHHjwwC4Pb?Tt-sg<y2_$PjORd;&;Mtm?@Xh-rtmr
zDRLCs99ld$iTiJXP=p)WkbHYYk`@Jwaa{9+Z2ZvOecQ&a6ExqI%sjDkB9|r9C(iN}
z3zED%`}%lFsb|=Qekc>2YhxCT0%}g-otI(R*cf_nkKW5zxOLyf_5SRFgD_Hv1KDGR
z)L3d1J3AOgz}9@8s8PVUz<4nWC(!Cs+8CFAQGe2L?}J`L#3=41!7s~b8f`r%a>f9j
z9hV=0(olZ`C7m3bk)4hTL8fxW`z7JpE9%x0>eku3u?pzzwPW|Mb24t-Fn#j$;=PB$
z1M2LOGdgK-3|^x0++{u&;9f<;aD5X$(NBm=$O?dIXk?DNftH&v5`&CkxLk6G#`q|A
zv($AY^2PjpUfwv0gq?|I8<b4eQ(mzf_;z&nHGPp7C^4!ZU0a~8R^|!&qmDWePC_di
z`35gbT@a5OnqxGQoDSD`I`|oNYs<%IUz1lB{8ONAR`F!E7FTHgNQ|nRvhx@*n7+8@
z-3>I0Hn-^`<m86wY&COb(@vrr?IM0>9u1>gk9o4JDB*Fn5hw|sYon!7qT-9fU<x|d
zNRW~w`vw+xA~tNOq(+egf^$4!C~Pc`RE$hFG4D3BhLNx%#dMRBK`qPs@+3104Wp|+
zh$~pINULs4cH%MoQSPSw4-xa-`k&6IH%!@$XpC8*#^7Ebl!O~urqzb>q?}Xs3}i3}
zX-fY}Og~N(s!(1_lv?4}mXbXp(kAVD;)uvu>4V4amD*zx<NqWIm8-&JsbzkhdTOM{
zxeyO4!{jjT1d5w|j5G3snc)n_3xL`6^BM>CqKmg^U5xSR-h==zNB-JBPSBgbt=^=|
z&b-*}_b~m+>j*;~sb+bDrC1bXk5igRZFLr#oD5iqW&33xCFzRbay_w1{J1@tMz|2f
z^QNc|dx{eN`}vx}PaHcV^1Qqq^r3!h;pjq#*YiNAr$Of)+-SWl>=4Mgj$Oj|dn<KU
zwlh7Rj-A)S4MbzXIM?c*<m|sRJPUD)0+Jt#Ro9X&t|i@&kKuGP@tmm>LeJxSj5N5{
zIRoJN)^*w_&+5-0ul=5rTw(O3J#Tid_c>Dzf&9q|dJ-+>OjZn%Zlr^>kqmkSH7GPB
z1-A!;nDDF~-qt6+#OGo+QrVyJ<;a?B&WMvW3QHv5R?rtf*qNcqzZ8J8xPSNV`-iU<
ze;Pkox>1bkaMzj?hpak20103eoM)@@Um_VxYt<ww!Wt&kH|8REaDXWNdhaATo!)qE
zqzV~mVeP(7Xj!B=>x@xETIQ_o`&w&6W?8W_X9E=anBv%fvp#9WSv2<N4;zK0*m_#R
zXRbOztZ~iwK}OR#>?Zp9j&X0ATu@e(ie?D^iX3Dxi?CBy+aFfId$^=f4MSs*CJ>!C
z8{Kw&VFFXLp%K@Ro^!y>IFH`U9@W>JS@KV!=xx@|+h_r;J*QlmA;+;x*)S3Hw=>h_
z#5*3$+wNR+Gm@5GFMaPS61Cm87R_vK6=`;6YR(<rYtP~S*>QNO<B!(H@;MP}a#+8x
zoT1<D6y+&%)(B3C6B60MRQ=#N$Iws2YBtr5J!59YD#TXOV*bQ8;^TFF+V@1+H%Bd_
z2k4g=*H09vpqI(#>vpb_u~Ua%s@bSQIp|(pt}M@6Ob36ZZmS&4;{Fsqw3}0moz%S5
zdU!m%2HQVAGp_Qi9{Tb_yG0K)TxnqBb0_B1ry)mRsmd|iSS<|y@4E@NX+F4{8TmWD
z37?|l+9JrdKbvqH6=QcZBEt8I*^+E1c3LBW$%N~5>lIzzLKLZWJvYD$n<V@#aQJ`T
zRO2BtD?hXG{Qq<uyaHcdGp~~KId?0Sw*9Hg;5`eJU#(}P(UUVuve91Pqp}vqcXq~P
zNV{GtoB5R#UorL7HxJ9g?yy6a@hP)_lv7lh0rTNx7A=BRebcO3$y8h@gLl^?mW}@I
zRf6S%myt2o38^!HE2Fhu63t}zTC6j#()pM(bUx-)kro3v8$5@c^;q(y9`zL}#qK5g
zJY$rQvz|<mqc$1!1tUeM4!_C~K1<Ges-*??{XF+T4$tXf#&E8x&Ml&IdV?a0Kh6@B
z0I6GhSwL^=l2kWmkof8-@;Mx}2e)UCxSuoWbhtCCPv)J<6PpM3p~|?*yOVEBmRCc(
z*FQggap-=NEANcQVP4zZ75VqgdqtY@!VQ|f@jpdco(R<%9_oHK#c;@<7N}#hj4p=n
zqx|A@u_lgovdF)uhqF#!3>T=IVL0T^9+X&`qC7v}_At5QVe7%aYZHZQ6GiuqJt<w;
ze_LuiRP<1FK@Td0qa0#3X;5(S^(>&+lRVwS-JvTib>}u82VCwMmA9-yVIP`VqIaAY
zz?t!{Gwv5Tz($ATW(S_-gTe6-iZ|CON8jWVHiE3~64H&dMC=N3FWr~Y%a{P;p;{Sb
zQ>Y0IZ{aR;hYZ_d6#<RGs1HRCTRqh1>Ow)NHOKm^|Jw{t*c2_`J^<)`*}XU1g0NgT
zoqzf#tzMVeRQBs_ei7<Nw>JCx01S%A^hCwj^dtUDhdq!UAvz|{+(wMmRYJO(m5hxc
z&$IxgaYhg5W=5qI&7c}|{v~1l$T%NX8qyK~n+XYB_CGYLT2L_7k!$ze|2yjj+L7eh
zHf6LmleTj+u^u$H&NYGQ5Ol~kS9mJ3Z)c&iD6cBuw4T?)Fvz;i#(G+gHPOHc?v(JJ
z&^WT*V6R|l4^Ns<hmT93M+a0iXYkej1>K{gX`bA{F9b_pkQE30Y{djPrMQ*k1Z)O*
z6iCJQQ1qol@9_P33x5VK`=~kihk2E^p>#A_CtAev$jag%U#!~S`Z9_Wo?v06fz3gv
z9YuH8ebuOH##f@*KN$CN1y~a$jTccJtXyGUj9D6wy>4Z~D5}D`QQUbhAKW-&0*ssP
zj8T@<#|{*(-8@DgbVF0ntwlk|SDpG`hE?BnHXG{d@^DufuVn}|P=C&diO@^Ft*yw?
zXSOfRXm@-sNj(uI;){@sYQxxR9v{B0*oR(=*%@Q>fN_?fz6O7MUfCk@how%!)^+Fa
zpmx--#^S_Y8;e=Cb!O(ZV&1SVmES+{&P3dGYM5)B7wkhmEnHOs<CG=!ctKwcq5O)o
zQ>Y$Q+>(EC2bRcTC%gje4rW{A!AoVX|I%ytm@PH`e<~?Kx$ttC(;w7odT$-&bLDfR
zFoGT_CcelQbHeJ}0~YAfL>CK6d_s{gD#EU8^G_I@P!MEw6%cP_CSfzkC()BM&M<h=
z30UztWz*1n7+l72wv}Oxfv6cp)H@S2%UVz_HoFnDuiA0~d8A65={<ko#=KBQ(jcmX
z<J*J<e3AjPaAnT#juFllD-UZ6fb}S*#*L+0ScCGhnMc7gsK$<K#HX3d7Ea^qZ3GCX
zMAkMTNeiRdeROug(HWIb*2FnN>F*OguoJFKqnZl<S_S!?hHg+#?jy;V>XvrIS#V0O
zsR18>_l>K$ZV`?R!skn<aSXUbo$>RAWe)!0>pDmAR|QL#!rKn>5zH+lgJ`unJbEE8
zq>++&re#5}bm1u8>vnKz<`vY4s@Itpqo&8B=T05Q8J)7$!!F^2I=HfUrTf)>(7g9w
zK_9J!y}as$G=23^Rqb}bSEW89_CURgh!g~U6sm}J>ccpx1A^#4rRSG(`wO0(7bgl`
z9j!W6wKXrj>#o^$Fa%kLmk;gxoI_Z{bc`6>HLvVZvYni}P7-BIYEI{Ut*3D9Nx^a%
zTZXboy{JHu;Z|siQq^bXpvWC76GmPok-L0@B>tP&j=GJzuW<Bz0~xa97m4fV-Tci+
zCDQ6*-=U!xqculKZj@HZcr#zgiu!xQ@CZX}TkP&-*KmDmrJ9-8FKCEOR;$T`Hz}2U
zW)2A7wKnF?tt8URACtsCiQG}}3JQ=jzfY!hT;3>xDOe(V%IM_DJWRSLx(VZMzr0$E
zVzCfcM;krO6Q=^t@c5~Z4tA5PdFO?HS<1C|py8w31KX=N_P@*Ugw2t{o`ZllXLa`M
zo}=%^Wk1C3DW9PgQ^KUl@oQ7rvAi<d<1#NY#Vc>t3<R^YJW(C~>Tb0|!b+l=?IzEN
z+-KFF_P>dVHh&OpItjxMi9Qv+-6q`JEcUP9Exun1_+GTIO5{ufLXcO2FFJ!7I=R!u
z|5g!h4%5~No6ea-*HB(cb6#j!Yt9}!k^{5GQ6eBZy16(tqG~i@9L>P|*pa%hilItz
z2Z|$4nU#=tTx3mYs{G4HdW6Z{*2EALjUJ|yZ*eEmB8_ji#D}05^eCllQ+IEcaC6O*
z7kB^UOI8={(%?%{Kdw8cs;kVGq$Jv<%$JONb9Xs{i^kO{Fk!z_$XUx1S-&O(^}bE=
z%-{3y_ow#JhQ)7f!4357HTl{Yz}so3Ways;Hn2+B#hXi?Vip|6>u9<ETO{iPZF0@u
zJBZp%49OXal}(f@hIi15SCp$`#FVU>B$Nv$qUnKTE00jRt)Un->I0!cu}7A#mgZxs
zDG04}1cw#*D#^y~?AXI`v~DL_PW=_I{i453hSswEb(&jldVBSTn7)lYt#+!X8kM87
zk7zw4FV^gxC(W<~HFn^uN&((Z-^&TQ!_;!o|7lEunT3-c)=$_we@}?-4kFCKX=L_n
zBAGSEx3Vi2akI$m`FNc3e!govK5jQJq4QAWN{KV?75<w$UZ=0m0P+M9`0`B4jhRO#
zF7}Z@af!$i7de&G8wPTY2oNmnuyBWCZ=1;E&~vGoFcD=}laiF3)u<`@38$R(L`vOG
zV*w{(P2GHspO2f6B}R$19TbUK>*=P9K;ijHXTD|rTd%#HZ!DluB+y)&Th>uZX8Ptz
zObRxQOg6jqn3rkU>5pzk0bTqRe0?@~HcZL7kjvH@0K-+M6Cw`lc~~7aljicIk{!h4
z7=?B$f{{HzS599KRi&2#Bj~GN(5j>5h!y9n8t|9!mzD_8mnKnITbn=hgsIig7qMHL
z{Gb=iEKl~g(lnM=v9mnwaoj>l#lcSg@Q#C*K&_`vOP5YdtYB@7PID)b_lLAVowRX#
zqaiEG`>?ky#e{9}RTo&AZZ!aM^l)_=jDv+KI6q=yZSwak<w;h2(f;N@7rJWtS*<FB
zi@G+GeOu#GQm~R3oF^f+PB-QVO2>tbrDwxfSe+DFr=Y8%uH$^dm+DuHa{$pIzk^@-
z{b!|wUa9-DNw$Yc6BXD5-m{tOg5(5cNxg#^8CK8^^DIpr*T)zJPn>z3iC^zwFaBpO
z(@Lrye~B*V1>9FT`?}VFrVh`y{}jOgc1cH_(QBA4igGZ&;fNXxg>>V&eJO?kl=Y+8
z>K_^#1MD`B3*`EQ^XcwezgmpimZ<dvLq_-Nat$g$ZP%$a1OrCzz3ZlvBoCuVGiZUa
zBj^EKRzyFOP$Os!*-<nfWd?&`)JF-mX$$o6bdHUrMpC`pqFkXD%ns*qy8xIyKW=i+
z5SqI|@1{@8k3{)7+X+_xIw3c_{cZRteR^$m**GK|ILUg7;ym9O?B{d{*R^Ut)E2Hi
zZpa+Akc=PmSW7x+ooIoxOpCyq$D8|R##!P&e*zLL6D?KEdAm`xWm03^?AxFL+-u-@
zOga`je{tJ06}yen6EeGM@9rK(krHTq_A}est-5U4v;V^oF&i15VzYoI+&JzZmh=zF
z1%(PDWKK4hR*W@Ki$L?ZfA=4x@l^(jjdK+CeFAsEhnMsjaz^per{D^HprSg#z0L`o
zb(aL-`%*n4l@^y?5`$dtk5gWq=E;e<JrxuWThZ`&Y897z`wz;gT;-68Dz$KFQs>+0
zA#@%_7^~L@nTA8ZLT|Etph|FMjb^O7>2XgTXI1wElJ%(&D-?+3)$*3R83EpSc+pkC
zu5XfsDq!CbshD*3zYCAI0mYsYU?1;<0$^D%-F}qGUHi|uDHsYn93;)!`!1nWIGkeg
zlu^JFGtZ@0Mh#9+4ggNDS;ItDDZe02n^R)|Ta9&9k9@ib;=98s&Rix=4jLDf&tUz{
zN-boMTraYvpUaBcYZm8#d?eLbpr@JiB0B?{LC=}YWm;Lm_pQ7v)PTam(0EY&=PLD(
zJ1Ktl=M@c_H;>okt!Ai&zF9t=(vK@cS8g)<=!I$1Y%CQw{zPoSM(3sDO^L}H0xI$@
zy5=V@v{}6CANubRSkXE7%E}))AMvZs0%dp3WDu_M6YZHzt%NUmCD0MN?tS$IRJ;<C
zL|74Z5tkw;E1at)Whpq{oC^Kcj8>TrOw2?~|M~^~j3R7#Q*4^*9(dxiAgjBGbTd5(
zn?k-xo}_WU<85O>Dw+9Xs09t}V6)UIEu3uyyD0#kMeI5!f@WzmE+3nH;<1x!+}H6v
z0TMuFgGV3Kp(ib#JiM*4M~?6~ntX>Q@E%ib0skXiq}j&_EgJ&CQ&<6&##<i3@ECy~
zzDwMfl_r@J%t@IgwY3LdS;WJ+s3YFzpKf5u@LY<?CL@oTFqZ5=3W-klzy|SUVVbFW
zI@fh0VG^7Tmv$f6_<_%cGbMI^a#xE>;bat>jn5!GTy$iqFP4Y9yeTxzhjS>4><mRk
zxWza8V+N9SzF1d-O6`AO80|^5@OSQ3(f>-XgyDVXdh0O;A1zpcp&SpL(^H&mBBSh~
zV|tR4U1WrpotC?_tc9Vq+i~3^vX;gN)n9K>!V+@a_TL%bI%bE7g(eUvXOfFtp~#CM
z9oXg|9<C$I&+;*07YXMG<c#sKrMCF#5BPmdVk!j+_%lbD@lr4Nal+oFk!1pfJVE1h
zkG-3M=xBgxRIPCBo`EsJrUPI7YW>}=2B9iE{!o3{*Y+>oEjrx6Ixy5x2=5er#@WU{
z$X<Xfay~QVMJCHRyPm=0GycN78yVGcvKdxvud=eSK7UCpg_nCGxl9O#l(?Ln2+SQz
zlEk$|h{nQg^hsI#*9E|rG$fcm%$MA)MO7Dm3!SR=NOlHEdBZk%@5a$fiG0b?0{Jne
zTHZy{!nM+(E@Z{Q9>LOXK=Tovi1UebAAyE2d#{0jbW6BG7<`2!cc>1J1WO;DQL5;C
zof9Eyzx>kqG<@R1=<Ym`+e@j)_?+twqzd&sn(Bt3aPqJRi~IG)xcg%4z%b(Zd+#rt
zh1RCre06_8r|2Mt8#6wO<}1W`vpfckVE%qR0ole#g)q1SCAX;#8-k^e#8Qj1fbE)Y
zW1O_CmyJco6WsjFOQ5c>TikTWCHf4vKO-cY9xQlaeX$?f!*IU&gWV5tEBlJqs<{Fs
zU((#Sg-V|bJS9rxIPW+n2@&LzDn)Th21>s`si!6|hleKfQ94Q=qtw&Vnf(J76px`K
zZ!8-Vy}}wLpj2Nh3op9N95>#%88NG{$wvbDGXnPXH7;MnAyoGKKV9?hSJn2q85-oo
zl-?J}vQi)T=j566Y!r!48g9&l(Xc!X=UoN3e8Zrwy){wKMaO`n_ufb9ia0fs@*igZ
z!rI&q2FFz5L+}abTK_>6gXAJ3zFS<M9$c$%g_>6K1Vc5CR0jvwKn)YeHqH`fc&T!f
zKf_ru(v%RMXB?uAVz9uDv}BBtf|bSMya*Xh#?C4z5CwN6$H6F=AA4m^M^{Bf+wO#q
zHQV;{tG$kFfr;HQ6=Mx|=V)04bIpuPC(KSbha{BX!|{nDy%{hSW^>483Vdte#e-wi
z)VxNw)9qGB(=<g!#v<UTmYoYh*G2u59gD?aF@#u7kqtA#wKHL<UqxPUOT&-T|F%k>
z0oxZp!&%cZekzN^>Qg25m^4VDJ_w20MyCQsr-B2Re*icGrm`00;DO>xf&dt6fN@gO
zKmRK<h5Gp4)0@`>BR7W!U}rrnvYu+U1P`ttg8p0t#!cSvEM!8taovs38pTuln-DNo
zpU!MzsO@WJ@9EeVAL4(lj!(U66)?3b)PR=iHRe}`a-t`*0N5EbhR~dE+CV$PS-+@k
z(yKo7hk-B{hQhFY+Q_O&06ahv>?gHSKY~I<hsMN@&{BWRE)NLRPa7PH=BZ_o8oKBp
zGBqJCk3a0g==$+ES%0|lk_s(#JrEp_91YbUpF?BBg_e%gK=8O|D^MiLwxZ|7g`uiK
zW0H4bX$UiyiF-pc5FB>48p2}VP*I^V@j0~A&p>d<+FDj*&N5Irn}FgF^#eJf;-*n|
z`CT}HbzI%{Q_Flsv5hz;+I1$bMP-{n#5BQ>Bd3oT8Y#p@D<`1;+%B}o?8w<o$c(W7
z@CVC=ns%dY>yg~3w<Wf9ws65w*!Q|35Uk2}awfOyoyh4rr^qFWIgmQr&4!2(H!t{7
zFts<e6>i|F?EwD2Xxu&g{{h&2e7CML98C*bR#JwX)V0!f0k`_*(8f&xeXl-j4CoIW
zxV8FYeNJx{RZZKg@zLBLK3o$e-?S%|n&NMK695N{@3M8DPd4S7&QYHE`LoaYxW05)
zK^8R(>sMr9ZuW~hxaM}?-lk@8e&{p$vn+q>(}Yqyxv`0H4yZ?G6~IsLpvNtqC6m*C
z>Z4OBdf{jN)o;)MYUzAZtx5tWKyC^KZEef8{5jrM%^{7qOuuiI6gS=mji?HBQj-b0
zt~(qOv&sh3fBJyFC;W=zo!^}RG>fuBG9cMMEd0G+H|^h*;lj`Mrfe9D-~7b{RQ=b6
z7xb)O7Kk_cF0|)6^-oQCrC%eSu1)#}T!eQLp8&M?5Bha3heK=vMsAMLy<pHj3NS?N
zuU{c$GT94|06ZcE(ff6596b0+Q6rr_f1hAz0-F|BxRsFD)JdXNqbdKx6mfY_qOW}$
z>1KbVbZNUP8awR9q>R?>eswnJr$!Rm*CbePY;}m{uBT8y^8Sfu2#O!%bAe05L0rZY
z&_1;oFkEUbQ9te%Gs*<*?HuoDw#Az4H(O9;q_!eYmQt$7R(YsN0k%v1wuM{rTK5*2
z?1d6^M`J(Rdw!g*M0m)M*Fk)eS$g4^mHX2-?FlPuoJVo(_AZmx>G~5Aok)x+Y{G|E
zzh|ev3HXTWn-akR2PRJPJ0w^dZ{G~W?le8*X?kh`4xIiZod~ZtE+krxceGHTrTIBW
z!Q6t$3EEl9NN*cIqg!^liP&Nih3)n{n&$~xovNw)6EF~GS!2{XOLH`}XVco#jz<3I
z)9vTq#a00hGzpwsGI+>8h&SZ`%FqXC&Km7G;HK$?W%co!I>;r=c`Ou{lB<$xdy-|N
zOdw{W{%ep>sNk`}4ys-0WoX6kiY)-Zw5So)=~?1o%5*%zyCS|59AvyIs)H#H#x<1Q
z@@!dm--WW6tze~Pr|GeK4&>8TP7v=?+f#V>f~Ty4aq@Qopub@0H^^Df_Vn*hT;Pck
znS5qAVC{NUwPiJC#M4YeWygjqlHfBA5y?bEqx`El5s)jXc*49@rfJ+a&RZZ}LUQ9f
zQm;zN9S*_r@J1w(%QrYe$=m3(Rwct{v{BvWI73HFd(6w>TfRop*@@V_lt}LCZ1wi}
zaB~w7kOqiRECC>DJly0MNs`9JbzrDbZz!5|8$B6D=!rI7#rA6$a4}hUba^Ks)v-&i
z1fI7d5&C{$I~F;}iuGem1`+7#TQac@-~#MD&_aa#^eF%!6$PJDCY%4+)&?*J13@s!
zQ#dFn(|IO<s{Qq0Y9KjI#+61+l(QBmXZJ+E3*+6j*jGOvY%~0H<DYDtH{dxCsgM{H
zJG5NbTmk{BL00FUyZS&EeNRIFNT~ggr0ZsI6hYC`rUtFc5fd8riT<LKIX)a7QyO%9
z;+KI<cyvc)9-AjdW{IM?>TXIF+EdYB0b4`mF|4b1CSEL|R-M{XepF)gI+#k_KqpbG
zE}5c=X)LlP$?DL+3D-t0)Q&b`GYpiZuxc?SyRw!mT{AlB#gg5jnw29FVZJ-!*YDu|
z?0$Q!Tv)am^=<hn?BZ4djMwN<Dklfz!M{{PzqMTSEVI&%7TpGsSU@xBLu0|v|6~wX
zA@|F_uz^*e;%|J-nA)y~o-#bc8+=4s`oM;lMZ}N(zvonf+n__xKNuU#^~eivWo1WU
zJ@+)sgw6SF3k9`d+k`a(v65_H65muLpTx*T3vSaG2U*hy;*y4wq5f(gdQ1C$5@z>|
z%%IQ)8KCJ-M!O_*9!(puY7#Y{xQM1UNAL$g*Z^%ojn!itk!UL<(CqLRE^w_lBq}S!
zK^bpsmeZv-th03=(GZ=Pte%yqC!$(+Zq3t?)<e%hC<on85NdErqe4ILk_X9~z*ncA
z%6*V@kSbBQ1DgZM!!xhBp(yiQ7?=&KCQ$F`ab7fVyc2^E=ek1(axP_p{>W=2w?}w^
zw=kvR`STTc>a`CpnaFNlBpm}XE=|kkXgA$Rw~4qQNljd(qt-&QX!1++kFg`RauIs=
zJR^XQE-c{<r!l2%p5bLAu^L}o7i>Ehj=jG@L0Zk^R)q4hcXUDBd0FY(;(H6<xWGQh
z&~-b%Z6?%f1Ceb5WT`7h?WkOwH$Wt=WIbo1cxY&U#sFVF+ykUnRJm-!X@%YpkB>)S
z*<G|%yo(o`yKBR_s-}+8$5~bVc?-k5$qU}$a2*E|n(Jn#Z+3>%o*|=u=%QnW>Gd{P
zPbrl5A#i`D-xaLzK+t?8%>l#It0togSKj>74q!Fr$)~Vyrhbj^OhxyW%z<V#sVTcN
z%V29c9;Yv3)r#j(>TdvXqP*Zdif!D3(~25%?&(}@C|?k2Z8*eY!w{JRi!Rh&J?~Il
ztjJ~IjQ$-#)<R^#PP#Sq<qU-|ZEsRLB$}fs2rz7)EcH?zEvVa%*L*{+&fatE&OZfF
zh+BbOsR<*8YdBo9>MLDN&%hEa5t;j<LZ1=S$BV>eD|erO4j}qsTE^V8*cYienLa@Y
zL2`~>m^*n^D(Htc=3?rCd6@D3{-WffYIrcDjZYEGntKO1r8XcMMZeC_qav4VB=QUe
z#j4#yZ0K=6$u0+^zMaY~JGD)H#zkD1?Hoa_&%zh!4Jvs;TB+5mwj;cAl2~qt3#3mx
zDpUo<pcSF=Kv5a0fiDwSR_vZ-r@M~~3Mi@t(A?gKjLewvNx1wh=7;-M^z9|8-Af!w
zg{@iv#l-^!g|8$Un4;WCf_8@pd>!(6@kOR%Jk9}S5aPl1CzjCaRUnZ0VO$Gm`^02t
zuN2lJp8`B$x!B$QfQH)OMGRY1ooyd-H|^><ruw9rqS4#Oge!J-SJ_r*F9V(yRrLyP
zMq!9rAy?`}e2`m0tQ||r^$A`1jgO5*<hD*KD`F(cq-mo%>$!aRut^^&7oGMB7iw3U
zdjZcYNOR*Nr#6Jh(tO*o>eCmgrf7On4+pCzJXEI0a;?{vDY3q%GJf~kVE4~rUS1f@
zb>*~Cetfu4W&PMX4N)Lr%T+d;E8Mm=3PCL4-XtOY>#bJ9KG<h<!i=ok%E!%v?(oWO
zleH4z%-hk^l~DSW(O;?Y+;W?hubGvb1}x$MlcxGsy?ukHc$z%IJNpi6?In@Fp1}ou
z=VQqnoSu<+Hst$J<#Rv6Qq_dZO0J$B(|62ZH9Yj@v+-OsSu^YOWUF{qnpIk#a;~2?
zV>txSwUlvSQQ}Sqi%x3b1>#piKok}5+*KZ6fDM)5*NQ2xwY1j3<d?tx00*n-p11UI
z*?acQAHhuz(S31!!;bKhmt>W&_ER~jq9&5<uK_fL^KCX>9sorV_k7CUGIip=&P_PZ
zAm9xqb?bbSv(Z&xrst~00ItFC2wSyr)pIEdWi{U1HWjG5DwlGVe$n>YVeS%kB>2$B
z|6ceCFWDX<Rj$QCh~P61#sTbV2l?pUp|)vJv+1>hTF#E;^SU7JjKw(j#tMg_Ol23Z
z0sDa~Q8tzR>_CzTrvx6s-h*<-U2Ho;@tOWNlAfmpAaB1~6_F}mt{}?zag424_^3%Y
z7LzNMrzly*9L1EJTC(LmL?5OLvvS=>n_*jQPs{rhxZkhF+$akhsiW<y)N7Topym>F
zds*?D*7|kyfN!W2<7|_>r%SGW=O)XHa<0>5MRIXGcsIe4W;}wCoKuSllM!Yc9~y7$
z4|1U%RJqPgj`LP5Ic?=KNP3BQ;cAB{x^gL2dI5fjdWwjND?Yg?I<O|o)jgSNX!ppr
zzf5i`A$u+^`zRY9*HOjv$65y<E|fZ=cRz?`FZi(dBs(VmR7#KuhhkH^Eju+MzN`CV
zf5%u?UsT=$XjG|OT(jQN)|n6Iv_9kWou7YqWKn<s7lYy#Q>#=Bc@lp)Z|d6A;5^^m
zp=<0yTAar^rjz%qTb?*c923hXR?fnq#`vVUOG)gG)ae*{{k=uFwy%IH)S{AIPwYfT
zu@fGL1D(hnaw&NErW)Pu^ICUtZude8uQE<HfT`XytZuu5tZ??@arsu1D%2CU+WfE<
z9%~C1;!%I|<xM@|2_G8X@#eR~1Q;=Hq(y-ZqFnEr@5Fo1^hix5N<BHP)xYdWypqtK
z=UykR%SexI0dyAPx~C6!A-M~&z%q6!Rt0j5Nf!C#WNF^@@Q{*|x~XuP-i2E@t9S7X
z{^4Gi^W&w@rj2HnVXNO!-(uF-`cp-o{kI4gIH1YLyt37;_YzqvhK=7RAezKyqO3)y
zFj=st(^tjkVywH)ZLl#y=kMtE`l<cy69~$Aw1V|*!?kKQ9+Lf2k1%ZEI}5&II*U4e
zrkXZN^*sj-xq_>#T*X}EPDYPjx}q$%){(dC8Ah{QrB7TTE=|jl1Z5q;x!0*jE{GSn
z7@O{)pf+ShFj>g78{GSMj|(ozBOE(N+=82Ds}^S`o*-?M#x*IA3&lex^_tYT5<Y7v
z2X(5&6in4aVJml)gbraYDy&yq(w2FB)e-0z!<t8HPE|ch$=t6%2&bBwl(|WNT!S>m
zZ#w{h4g8R(YCv+yr9{jPv(NnnCwTsgJ^q7JoI&%fg8x1AsIX?{5l-8AUFM-M8W>M%
zz#~1oX831RESE*$Y@fT@?V((qRK|2?u5R<>nuON#PtS;!Q}Mt633L(_C7voE{vJ!&
zGNIPF&1?!W9wB!P%tVop3X1IOdwOUdy1%3QXUB7j&H6d_)B9QN4Ub><le_ctbh&M3
zJ@qa_SVwo(bt2bJtI9%k$&3;UylxfxG1_!QXSWs=45C`a;<c%GE%>uXru~9)lT-s{
z^~}n2zHd9y4v%t`-A)_-lMIUjiY;eCNhRx@^-Npo?<xt@#&k|k)uObYW7jk{&s-vD
z#7_3(a2=4vDe)A4Rdv|VGvSC<T#YF<PdFBtJ7u~X?m*ChhJuKq2s%3L;o~uuR|5mn
z!;u>;drsy(*Za$J-tYas!-4y)>MH>Cd0|JOYnZPLumkxUcl$)8=lm&8J1>@RcW?dC
zdE`F53E#`FIqWVU_2zwNZlCx(&lcw!^=&Wjb8KIU{#)!@vjz;n0}gZN+Ik|QE8a^i
zYgu?2$-sAdx-Ba$Ns_V>#Z&s`0|wxGPy$GLL<Zdz4pRS&LtZ^2d#Vs+5Kh*nvGSlO
zxgB`lWj|8msVSbNCky6DFPg}7vnuIQHZnWhXeFh4mxqiBo$?%{JL+9~cjzTkV0{(_
z*2kU{@UQ1nHuq;A{_JV~7yB?R2moIFy_5yOXJPZh-|zohAIw&Xf+4{G1Tf#cfB>wz
z(LbvHhi2{pa5**OmsZQye*Dq@rMW85%N)zK#-{w4_9-*9MLm2C<auXuZj?1|Ar;On
z%12qs5=uVGO>2~$O@Z(i0ZQ;9g=?W(t2#cAj*-#S{`Hd?|7wEN+nDYd1NvQfoU7+F
zx`5~|Nu#1D*-_qBLa(fm2bh!%a=oS8@rG$Nn(pYH;_A!x)3R%gdUZQkgZesCK>e+2
z`shl%9S?LtU!5BtC^UAPnuW*jOKiq0Tj9vaaI2+9vHXaaFvALVstz#7S<&SOS60O1
zBe{4rc-vnjj<-yYh?ULRPZ`Ic{Kg|iG06eqMFz52MX#*6v=w3fx%9R(mV9D#Q~H#@
zs2ZP1;=geecWXiMd3=*Gn<^eZq7t+A(2F<Y53P(XH}+(b;@vV`X(OD<LB_O?SF86&
ze)X>8?9Z26^QEv%uwLx(+Ser|LwEc>mif}NR$;LX<L*<YCT=h`v9z{{alf4!*>%*R
z?n$EBs8%nrsSc}ZxmG;=VpFTE@xp$Qox|D9{EXW95Xg>z=z^`jSMMaGA?l1oor0(t
z^|@>!@2UX-0{;EUiBX-s+PVg{bmx)ouvRg?@Fkz}XI%*f%YkD>ik=3R1Nm~iZxoW-
z(>VUgeQm@~j2sFT<$M&V&>?lJU&2w6r~3&!QmUw<w4$s^RD=>(msELJ#1s(a6eUwp
zMF~aul&HvK32aEG97NfaK!hdp2oUhAa{L_N6Yt7eK*Bad00FD;hrl8M;8LJ70#Uic
zLhuM8EVd9gf_Ff9B5+~iRq5=k(!&-mL8Kr70!5Rc;28NiFTn_V8J(g0CYlK2LpJFK
zLX|~r93U#;`H8Y#q*&wmk_|jIZ^F^037K9uP9Ma_G+d$!4z6C5AV3%mEW1+CaT=tC
zAJ=`4GF2KaoI1Ig#F?_0KsYbYk1WlM6hLmipD@COD00kjMS2Wauw~$==h9;kFn-!I
z3+Agg>XJ32mw>d<;Krn5bRE*)jLCIAK0l2SxOO)g#s@v!RqwJ_sN?af*H#d-IZEl&
z1abFMG#~mPp|Z!m4?#u5C58%PkgT}RRs9g8Qm?a88-ldmF)HUO$i!ZLN@dR3tg9_-
zg7EP&yGk?2@veg;LXg+o^D>nSg4Gc;HZ!`eB}y-WKaN&&)QXQpFFVnbsAV22Ee*+a
zM=!I~*jkx(PTNJ|-7(8fXdYTxoO{oeID5}aOH*GI67P;)=Ao5oceP!0!p4(Z$?19G
HBnkikn^Nxw

diff --git a/static/fonts/roboto-v18-latin-regular.eot b/static/fonts/roboto-v18-latin-regular.eot
deleted file mode 100644
index a0780d6e3ffaa2fa65fb6aa672f334da5a91b3a6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17405
zcmZ6uRZtvUv@AThySux)!@%I~E`z&Ea0YjRL$Kf$+&#FvLvV-S79c?GcmDeCdAMs;
z*Y57>T6?|hhy4Kp0EGSn^nVQt_@DFt78D>E>VLShIs*Uz`7iRn^&JX8`9A{sizWO2
zn*U2s0h$0;fW?3C`VRmA`hVIQU<>dDI04K79{)M?0Nwu_4}d4Y{=bCFf5W%|>;NtR
z4?qAQ^8YE$|CGRg$^Um203f9$r~bcJ{r?08VBHVk)&lU50%-TJXU^lsEjRU$?6^7w
zIs{X&^SSX^G6^5X+AH=4T&|$pf9t0JHdA$3Wr;y6WV!BTRcHV7aE-l&tu}`quScZb
zK2Tq`V2XOy=wtDj=n>(Q2#`(uei16q;nw{-(LAa<C*I;kiItv~EMDT<h(r(_aDI~H
zE-PD07ul-bE=3qFF8OKO3@x&%lNNcL?@|+vVv7uY1(s0#6;ofQ?j?DxgZ}>7u6T}Q
z+`L-B_yGYoC4Y=~*#GsDh5&%?q~*sZ$QUHz&q_xm{s^Ci{r{TR(ON(c_GBa*muQ)d
zyZl+l$v?BBp%PJu*3u1k%*-R;dFZb0OngFBze*7~opmT|u>;<&N3N{9b^!W6lw7ML
zTYV_eETK&Uy?KUx&;8KtIU$*_(clT93AR018cewF%_=9oHDt=m?wT@_q75O-z%oJ?
zcx`JAl2NNYv6aUe$v14h$ys7vY5}-TYv$%3zD<Pl5n@u9*rasAGzrhB$ixVoiE_A%
z$bG)0zINoK-Y6Xpb6yI1MV7*IPzQgdE?|@W)DeuyO_@d8C~t9d$klep<xzQUT(@|*
z8)<~i^;KFFI5x!%7aXmdF;!JDUo1P+$pU`t(zLuWjCyFLCD9_+8--}SZ7Bzdgil0-
z-(#HT0M*zE*>TgY<)EARej-+`yl~sC3>J^ty;<Z^6Jzo>w4sQ3V$#23gRp4_S^!_2
zt?a?_e`JYR5z1kZU@93@*{x6}mJ0a!ys0Qj_!DzO{v^ZXVQn$cx+&~Ggy}}~LPf&@
zctN}%Hxf?H0cf>@+DJ#_XM9#R16L>)WO<YZS{=f7;4FC_2eaG7ku2IPjx_YiY-KHX
za{30gq4cqLzGU}ImE9QY1~FYCo81T8qXMrHv~)K*HwdF&fLh#s9`T8(S;bB^>nB@i
z!{|2D4@-OW+-X|LPJ9iMYN!X+B#2vLWt>^8{eg{dzV$s3ML~cB-RS1TIh8jIKMXM%
z3V5ba>nkh=Z|L(R%#~gl)HNE9P_8e9gIUB9aXDXt#&))q1y&r02nnyBu%33S3J^vY
zlSN5v2tA(^V+}+7IZV+nxc8F7AI*YV{X3!1)l!QP*5TW9u{UbET`?#&iB&XC^cC|6
zfreu5WGMHnTuk3SEC!Ra#)E0obDqZ!`Hl?kfLS)!{)vLvfKXN*@9aUic#gnlfFQnA
zPQV>}-_=8GZ0~f!y9S6W=kofEK4Y_;G=e)HTD7so5Mof6FNiiiK?fzh)57_qWlYl$
z6IMF{xjZvbPPDirEIf;Hp43^jh4v{?cUWt~2A!rzwz^_K3nWqEWLg#+nJAt3^kpnl
z))mXVO3gmjN*v^ssD_EoUAWzNP2wW7aBWjw&RrrUjQ&y178T>T`E@>HPYg{C-cy5H
zY$>q@*`Bv{gHntgH%|0tZ7i<rSadX1OLFXoD)%Vf*W$P;H6M!~QbZ`Me%or_V@mWt
z^Pp7`5%lsZwJG%%S}DQsG)AHZzm5}jaDX;)C#8GRl(GxhgQqXGk=Lfai!9)A(qd_s
zQ_Wm_rP9j>?mWh!^9FLxdK|->z;zz#s{z@*9!@sAgK5dvKz-c=y#N$JE+?+f{;KLw
zRG>B{_hcQoA@LiL3>8?8mV!-ot;&C6?P{-`V%ANHCotR!2X$s5eHIASMgL;OCr1OV
z{DK@LoQPb=8;ng5n&N5e<?&-tQ0&}wPvd@ss1q7lf*jWkmUswysd^@rvfDR;nN9hN
zx_l!J{1lQRd>dGu6H=)LbsQ6&iyGz8+s{skZW~7FW+W;EXyVpCTf!=ZLi9ljLj7?q
z<)RgE)~vUVC^AN@%Xdbynr0t2^4q{4Ky|zTcE&LFC4!wx5(<qqL4me%#)*WYe3#w_
z%6A{YCgUYHl7sjFo{J#99;{m?FdSKtov57+p0;&E4moZbxm`=3&~k2`l<PCDfFK)f
zgK2y`tM69Y+27&satk09k$fnE`$?=2gzVxElyNt+V*L!$+h*i{lN~?Oj(y@TeC<n>
zNv5lh_q#Gva0Os9F}DjFM)#`jb`$?bdZdMSsv5<%Gp7rirBr<~L&czpt~i&VezSu}
zW$!E|cx9@a*Y6fi77?Eol~#Q~Zb{Y+IIdAclxKml#i9i&YX)p}rp{@SowK!8Eqohn
zZmY9DHG<>BH&}TtK&D+hh$N-{r0ID_g<QRT%>O_KMrmj!tm$`7dIuZqJ%q>gM{c&;
za|edkSYRvP^a)h8m3cx$*U%=tn0jPGmZkt1uTX#1-@-EZ;Tj5HY4u-<OvPU3RcGz@
zVpzB~o7Aup_bq}BC!GfQYD%~^K5tM3$3y^K<@qnHC#sq+19YGDcHrX3U8HHvL9Zx1
ztrJ_VlL!Xc2x@POpEO)#qE2$Eld`QwhP8gPy#swcr^K&}l&h7L-`U{$`2(dzh^r-+
zo5mQ~y0vPSe^0<=kc9Yv=L^N-Mf1Wis=r!_oPWz^GFrdTWiEU6bejklz?(nROCo_G
zi9mTxGJAVLZGkx^6{Zmp)b&)rI+IugN&!iaffHH?F^YVp6Xq?>eDnIjt4$5Q`T8=V
zucR?W_dS(-xWugB+%UnKA~`)JB442Uf+Z%DxKHWtVIG2H^cB|wOFP_SQB$s}C#$f3
zFiB|8Nn{Al$QMbBZB?9@R6)7u*&BhNxlo9V8=|^F;Ez6rdi9fMJOrZ2P+P^VHA}OW
z+Q7g1RAgj%;~6Vo9qym9^6lckIPbLPWMnwR%j)mzymkz2J*l!85!Mbd+o!}#Mlv~X
zyMN6Ap^Rs9o0Dp~KrUgRfDjzQ-zc$n7eiMVP!E7=p4+IL6GTOqbhHE|I=fI2--0aw
zvLGMMtZQgv5+DD4sc2Mhd-^nv9ZJ<%g{hA7t@a3muCNj^-;FH1cUSNlGUV-i0lEFj
zo}**tIs!R@dufP`9Lu{wnTbOMOJ;n^W)%6EWIx72@3R*})k5;L70h?)6to!tC4eOt
zs}K%L!&*L19|{3mm-~bmYPNVx{6H$17znklciV7kv4P2?7$x1XFJD4P%#aXBg33Ny
z?-DjH^C>T~IEY&GN+#<8t0_2$p51S0W~Lgs!C5{DQZ)?FRvE^cvWlzW^8}R(uorTH
zkRsWg9G7d5HPX1`FjDFeL^WcsAn~wm!s`WoDXLxHb)c$sF&(9dy^D(khNPM7U}H!X
z#Z8M50}1sxWx2D#N#+Xa8wF7=go_raaSDXcjKfA)CR85-h}c+BGVA-m3^7FP2pPnp
zaj6sy#Nw0)>P{?qtWgH6CZtI0{Zzzy3Cz<;R%Who4YE~2E%f{SeZl~=-Ea7WK=WWL
zeasWIOTZU>&4C_>d?5i;6j&FN!fnD35i$s)`<)u5lrIK79nJ#H$SVdT+ooLJZO}Xx
z33DF@wc9iWg~O-v_zLvzrz|kOPh@9e#Q8GbSKwueXagmWvjg-IqEDk_O_R42mZ0CQ
zm3_e6%^&kveyA5Qpj5M>c~Xx*>cl%CaZG4+jlG}dzl(}1kS8BSebrFIrk-t8&o1h{
zsS8^;xa|3>kB{tk4wE`PGydC*{+Y=TXZ(l!$Y;6t6&;P>Wn7gC{7iRPO><$og>00^
zTed`bh+k+qQ>+Q<j$elGw}3PGpFe}Pm?GkZ2bYoH#ajxK{bp%YCThc4jz@myprNyZ
zvJ($kvneLmY-H;=cfHXq2o6Z%RWws>W@Z~sfa};HJlp44e{4mLNk~>dL~bG~QG9zj
zIWwF?yJkd!F`gdjBKno3sLs_-bMNVB=%@CHNS4n`G}R8INY}`h6Tt;Q?DQC2DJWz^
zlavF_dqFhVndhZW(tJcAVfm`is#?n)nnKE+${+ENqAA%bBW*e*AE1oxH*d4*CMGBo
zuzz#FB^;**xXUoYbddCBz&#(XoF*GBTSP}QYH2Do{v)yn6PqQ#cX+FN{|PM+=`oq(
z-l!Q$qf+D_TFK7(`mL{8IPPU+&Z<-3*bD>;cSeJytyXktP!Tk@XAbFXkLQhcEoA};
z)GoV^9R*R!gkoYA=|oTbB}@Y0tP3036(MWM#6j(VP?n3IMk+5x0*O4OZ7j<PaeH(`
zdaMaa3s5zedtp&@Q*YO3Guup1t*9FnY(R>+Bf2CMW16F*)JEl+u@>lN#W)BFKlkt%
zaB-O)8OheTd!qZ*(1QiQh<!2w810uwVQEZZxNdXuwi=?u$5iyor!ow~8WjhKvvD5d
zi=G6I#^#AZ*!yy%J`J$8sB8QKL2dXx;X`*X_7+fb(+DVJQ3e>6wK#+f!8&6@8-w?+
zTBOHckVrLnBrmy{4bE%URl@Bm<0*$Da7{$23mLm+NaKsnVg%zgj}>cBD-9!U8r>f`
zu}G5j2J4b6=%Q#MLa1^86ONtHI@s+A9bMymx)Ibs_h^nokp8`T4}3*M;iB!h61-%R
zT=;KxQDYxCS|onnA7^@5X9dA|EPKC3BmPATsv={2Vk_}a%`Yp@nwHAN%^^_A42bU2
z2XA%JqEM8zg?lza3)k#OtlsaR^POi+NZl(>2oJ9K-!ShA6aBLL!TX)Gv-Qr@wV`m3
zv(qIEg2?f0Kqf7o9;u7|i8DN2W}Vk_uRIjSp9+1Qp#{@%%Iw+%>x$ecJl*UUL^W1>
zqsNXQ&YPqtsr>+&I0X<lGX9C1slXlfPbX$OT~OX4cv?uYzr_yl>)G(V8sQs0wLfLU
zKVgeqIK>Ew;Lr!uu4SqM&J{cfI?P<)sktvlMXJIC&pENA=I!lVqVh|Wl{q1XJVbXm
z#`We;LEfRXtFmCs*Nfn?mAZIlC1EBqgs9|Oj}mZbS5&Qd7`5Zw#eTZMwIUAE;JNHi
z%WUp{<gvrtD)Jur$TH<1=5T6y%*ek7u<9)lEiUJiepJFhYW8GB$v!x2<8528+3;T#
z&8Kv#X_Bw04h56;5082%!Tv@&vMM*$E7JX$9k5{9$iJxtX~edpAqgwJK&{*F@-Y-J
zF>@nfYc*dk7ff!gpR<R*Q#Xj_(OH-3(hR|lJ=;I!N`2ORUWZF)S3d_z1Ck-V(KdII
zxyMv^=obh`noIFs|MvG!7my2UuMnoFowB{QRo|sJMx>+?R}spTf&PnC-KbsQvKavG
zMNXt5M~TJoYlIsXr9M+7h@E!|4wD<*74p{8g!R{8?xVsY27}QBE6v<Hrl7MIlu#mE
zPzV#_D)OqtD;65KAYsV=cPuZnkXGU!Jr=RDpM8PzAPtLrRBzi<GeZPMRclzpr!xQV
z1uYU+&2w5#>Jv1wW?JLmiG7-gmU~zliy>~pHQW($v`6?AXE`_zm;i-DI5p=E@v8a4
zH%tw8mEsqz`fp3qS!l>pXE^FHZsHWoSGz!DcJ%aF!E^>sHfwJO4mq3F+OZdp#SW-e
z>k!La&Z;7NvO?M4=&*Ab$)eZ}tQf15FKR$6w^mOjf`-CN;;Uz8yBXHe2psQ&2C*cg
zp}=vAn3=wf7Wf>t0T5C5n2?9Lu|=o&IN9s^0iDf_OnPw;3RxWjU2#HnT5L>~1&kym
z(PGcX15346M<WOJl@w#aZ+Q@^HkV7I<Jks-oWO51zZ-;Tc72pW2``0Qek!)6)*a7)
z&~G>j127Aamb8JmM_mb2uJT_~#B!lC%gGKPJ}=30x(F{!1Y9U?0tai1R{Yxd5&U^N
zctlGK4PvMDCP%Hn>8D0A6s=l=axW%1d*|!p@n89RRNu<Twe`W;*VwdsZ3H`t^Vg3*
zL+do+MMgw2e$4;K?$?Pxv8&-5On9T95MReZJ9CST>g+hYWHCxyqJnknWq^FPl>)0U
z(rr>_F;q<`E5(hH@QGmCU6#(V1`sq`XvV8d`~;n+HRreJjS-aD7tj-Fp=$l9kSsa4
z=$Z75ar_?7z=79-87;g@ti88JseObi6fFBA2jAn>R*FcI2gqeTs3NEZoYlrJIHfop
zHQxq!1=r}BcoErNq*<pFh{hkE;+1W{TOj6L_y*E{^<-k#U_jx&Zxp&Nid)o!TA1D#
zh3<899f%+28!tQ*X~0s-+l0N}o@?LaNQ9;+;tz6-2)oFIwC?&)q2rwOnsgSJ=p^uY
ztPZ=~gb8tV`GM}lrClDpO66usEGkx2?F@+xdD(G^kN*B)+=S<RZ_i(5(Jmo^E4=rr
zBHdt;L|e)#s_M&<BTN>!j7MLyX<Bh$j=UMZ@mwa|5)BkK=t9rx589;*SoUGo{+9YV
zEuf0UikqR;6CcEM6R~-!qj#p}-wN{IBW-Qj<>Mct@aY0Wi+iUyd;#QVjnNhEeLUV3
zIiM;MgiGDu7vDMM)J~ka3!LdaRQRT6aY(agj?em_;fFTApRy1~G6}_TyH&-RtxnCv
z0aVyaC7kFW6aV6Yc#cS=e?iObUrVshfOmHR!lCF=7Gxy!2C|ah>~O;@VmwIUNJcAa
zB1?QJZLO*7z7`cKo`!>RXh>V4xH7Ots@Dg1gEVW3iDc5~@4fH_sJ#y7770H13ozh6
zsXwS-aw>SCp<gEn7ZsvvlwxN;Z(ht5zUi@1o~}ZLM=xBnmb&-U;6^#&xEgG9s>WHv
z*WhcmK%XxDit{)q266h^Ota=Gpo1d_zZ(Ejsn2@(C1@g`vIT5dd!iW1a@s>#nngJG
zrXw1hOc+A($zIm2&^)4k0YkaJ7r7j+>243CZ$QHsMJ6C+TFV0d$gO&QZsTCsmdPPT
z;BHp2+N}p7P6~$TWTZS_FYLJ4o9<=63HMhe_V;qnzzpntA9tnYvKpqxvWIzTf}5W@
z;kBJydpQ#;zO%67t!W;g3PYSmM=O<S2{zZuFYjvbE%ur}2;#!GjDZ>rFSQh6Wc6@c
zR;>mFT2YlpAOQ#qwZR+N38a)K40Do|p^fpAeMdW~!yAdlEPA>#Nbd^X7Utg-cq#ZS
zHOb;=)w7zpG*qzm`(yIIW&_lpHU(J`ssGHqRyak-Tb0|G0PeFzV0cv9#&N}Xr84Qc
zei7oG5oSu|86s-bn8+6{3)I}M(Yw|O7w1lUD4!=enCm)`{Y)w6WMESj517$4gO+4$
z*a#Q<a2WKq)*MMa)G}j{yl2s=q9zXulJhq7p~EHLz#OCg<wcjZ4<!>C`DDyUor=@F
z8iPC<2QuxK6ge+>9Z5QRUPRPxRIKWI$umi^30qC4LWIufYj8d09`A76g&Su{dN9E+
zi9YH{SOA?Dp*c6S$jjS5(e@sD>Q3#gtCxz3Nec{MZF_OB5Ek%E&5(*a1h7qC4<T3n
z^?Q034;>r6dU%-g78os5#jvCnoBP-56Z-lEUVJPCEXCjFjooP<2x)W2J$ysD9^!p5
z;`v$2S*<@3<oTKei3_ejjym4uNlN)?wW=V;oJzOiGQ=pLRLH+dka<I^J;G>(_fB%Z
z34!QWVpexYtr(wDi;O|8zrF`tq22rqWewCI@e?4$omiqg?^q82ZaSbOXi-i%G4ny%
zKJ<kjMoWjEIRZ*~lXB}<1_-_T5{QsA@6mpiM2mW;sOLC2B$b(`^XirDsIFth7{d7R
zK6AwoeJUxJHi9kZWPapSV?mDa>m8T|LfZvgZ5Oh-_?lFtXf=n!D05g(d9Tj?SanNY
z_jMZjJ?o9<OQyW+qplW_{OUz!DreCsWCXv`Z<+?aey=mf`vvhsHXAW}QovtTQa(ms
z85QLnquP^G4D5!+YnOf}A%~AY?av3t6+Y^?urK3$Be92k!;akePF{SoGB^c8$t)c?
zJ-J?UVJ9h#0%ou>x{X&{Jc*Sugn5icTBPFu$z?@z)XX^wOb+4Vl2Lsjn{I4FujHmS
zyV3i+^6tvL*{<cUD4p>=j`eB@9ouJ$FEfaz)i4WtK`dI5He^*_2Wlwp6UPU=#nOcP
z>*_S&;@%3VoBGGhz?+V@Rg5^AttvrG;%8|FcW3v!FMymK)KOZrGZsyJ*<mLFVaxiF
zU-I%S2H42t(*SK&a&A%ze_S}wGg^r=9;9h<Sc@n*7(V6yWw^~?QSMU3)lUB;As*C=
zENd)tb%6avzXzNTG7U;J9fLPO6P5`A2X!;sQ`vI)2IWjK6h=E24`w{&smfFeYmLj0
zP_ampy_pip7(@m!r6dx@69S#MF|pg09VYP^{yC6LvYhS%NaV7RL;hAAWSZfO;4k>3
zcyaxeR&)HBqtgDnNAV=<@uiQ^iDVHDhx$X#?n#%uX!f=!aHvz5$GFzSoSADoS!}rb
z+m0Q|0hFuAVxY0#J6+xzcOn`jMllm=<hdR;(9KreW``?nHzzFSbp%>Nt`@X772XU=
zD@e$6hw|w9k;xiZ0rVU9fiNS}nBp;*_C2OZYyQigenS?{i?URoCK4lmu2WhQ_%!R8
zu2_IMDt$<)46D*NbrV9@;l1bMx+X&~JXy(#e{>_$vy*@`ma0_8y+Ekq?uT^qpLF}l
zgAK4VT0LyC-Hm=I`&C)LRw>7%Csuu+Drdnz3txIAhTnPB_4Y<7RcU|&*WDVN@_FHt
zw?C-~bl;nlA0`5fcTYF?rTeuNA4B^rp_d(B0cLk5fdtvlX7wwJD4-4bo*1NWT4w(B
zRkI*JawXG+62ejw8cKa=z+XLv%@$6<s4r7Nm|V)etfAwW3Wnj?j51@70HzU1*IV})
z&Ne2*N@!hmle(}<XMs5*(O$N5{ti}hhR&-s0kb&tB#~dv&9>9IbVJe|ujum81De?v
ztPvQ0tFb&e2{H_EXrGIect(t=1dFc^l9eH>^w&MW{*ZhbM$3S>D#`cR(STD8(eK~5
zdasyC4rmpqwSQAJ8uaiInvISw3=`!TTKwhiGk%&K7%)!|s<b1gaZxb~5Gz9cKFX}N
zMHHnt5K~^Xn1QKiq9q>%B9J;#&1y}292BPo3K^W2y-Y<&ksD>mrOY?XoAQp7t@zw_
z*pP1+hk0(&k12@!2GXCbNJIDY;WnHol02(FV3wE_&Fvv&EqXRMfOYBCz9+p0@nij)
z%aK5eK}LZeYZ_IT_Jr4K<b69~Vuqz9DQCPJ#<LmZ;@dzjHi0gEg=Jq$`Vjr|6ysWa
z(WGNe#!#%ZzG534t6w&;mFzM9D}6lxF%xN65MuTXJIo$<;^i;x%|IaOG5XntjJ&Rg
z{!58;p<+E6>6H`OJJd0-r0>8$fE^*jJB&VRJ-nEwAoXT=%c`TU;}Ul9IiILq0fMuv
zQxv=UjZHYJ-WIp1DfD+v%K<lT;%Rz;D06IV9@+AQ;pUVcIPrk9-%$iA*mGT%PCqQF
za4NPacLBg82@CBvl0n69D8-F1Rvk7PO;uSDa=4%1ZGQ`?swEn<IDbi_Ge+%7@$#eG
z9;QI^8+5jkSx7lYEaA+0EuVA6D@1s6bN*wzmz=4g5QEUxzABdT4`W9kN|CVV^QM$=
zwewab=Q>rZQcIjqi3;VJ=r^0U^!e@D{xj?uLcTc*r&0;O2TNSlUBkGB@_K~ISR;)!
zJR&|J%7HTItm*}E41K}|(U^T9;rk<2brd!<son@Sa!_zs*aHUH0+0d~^MS1Z{ux&i
zn~s9a8bcd)2^{@kQ|mg8*lg3of{N%ygno*iow2pQm<dKhb<I5Q9N99T?^D#k?n8gv
zaA6OImbdQeS7zR4*no;YIetdJ9|}MG?}<(un$h2*j2dTCwCG%S!MiD|poh-keJT98
zGt=g<TliB3#zV+)_8)HtD}8rFAnywtBX{5Bh`#1Nd4OY({;OG3KO$+37Bpw&i97)s
z^$X^1HE2B+;cV-UA_kNUhmJy$s>2cC5KCC30c#%i69^>^w`ma<+9-QZW)+oflYn%D
zm;5qSV}vmE=>kqxX(vJ?f1i&6G9ghr*5{C1xH0RCovQ!gR)jdYb`;B53cz0=9CsT5
z(7L`iJ1qF-%6PJLC=pbo>5Ygmny%#hD%|W}MJI06Y}3h!QLAZvitX}uzw;vVMrxhw
z*&Jv{P+=_$DV3Ap5$l<9lPun=3m%EeM^kss5Sh@t^-@W_)nlStw4&($!CI<ZbV53}
zF5n+>V3?z3tDKvWf((cBI`2l>Aawc1yz27|jyd~|OI%V#p7Q%4l9N=91P`U1i{Hvs
zrOA8|8H$HFYqAeDZVB$1=NabS8*<WLpp@ZP#r9CKA8|4~co_1L4qh7F89ta5sRXs?
zqLy`r!Kv_YTM76=79zPn&>*k-ET}vR2Q$}dsXN*%`jUCve>mRDbKdfVIL(F%=gQAE
zKNeeM?{@!u@Nmju8b{^ZD3(tnZ;}mDc_LXwpnUgIlZt-`jX@+gEc+n*!kb9cGk!7f
zAl(_{-Ver9=hyZ$hVK7K#Xrd67e*yFRoW05_l%2w#Fg-qKu`CxQ5uV_K6m)$!B#x2
z?B%pS4cOGr3TLunEV70;(%FDU(r4E9-B!U5?8z^CB_c3;u0h20q$K;x7QYnF-fgp1
zMnYqotw`qP2*z~SxjyIgGXjIoe#h86B#$Og5*c`Okepd0tS}nGv|SBhPUkmlRZMc)
zM9gjU>`4B><v9mu!hl5>O3BC^6K!Xiy+y&vu?YLY2W>1Akc=vl-^qhGn&jy@hj)lg
z`(fA~XOf|g*7f^BFZ!5re}|X4w@ddj?L@S2a)b{K=mU|90aa5A3c%k_?Rn5f0coM6
z5W-no+4&HYRu0{3d?SXsX=7FvfhGa;d383{M!(yJ@7qWf4=x?r@{`f~0iI-|vCUZY
zF2m~p^k7!_n}X5r?f1FcavCZbw2Mq4pIk>4R_LdTj=uyZTH=|IQ0Fju8I@?GEmADi
zbltg!g{ja{6FXyTflfW;c=K)(qlD-*{rLe5K<O?ihm#<6BhHxNqd&U=*L6C-M|P<R
z<~nQCiFFbz;M{mlv7L&bXjp}{YcNG6{_czteooVDyYDdi@Dv$it2eain`KH6Nl+g4
z^xve@7Z^b^k|3HiSM1%vnMRl9-pnTQxzd}nN;Sn9%qk}Rn;IHTCzYG2Ft7H(XAoA$
z?rlGJB`Kh*qXjoeiwh+v3KI@VQ3(u_lK!e&aPW$!%C~d~Arpy6bl^f&wjk;*m=dP;
z8IdnsU3tT!Ls*`79Arso;Ve2%$IUg4GnX_rgklK$xU6fr0ieT6%Je%cI-r=!eDV~O
z@%Yz7^SV9Xd^9`#L`Q<&4LmtAExx2I@^5h4YfmeHS@KRQIKy-I;4=r^z+5~4s$AaJ
zjZbne5ALC_1|4Vc_HI*|Gp32)7D+&a>CYE8h<b2goxOX%C;jz2tjQpKO4yEgts2bm
zDqf<IAK%_u^3l%22*#o1e)1M~NnE7LA%!E^c=xgD6xW1zr2r8X)+r8BIhi#8?}J%U
zhH&XbstSf&MM4?nm*^NC^d9JfBsYH$RLlnz?JdKXy!&xTzb-X1vNjx@^Tm1ZHsCfN
zivE?Qw22dp7<7VNAa0zi&iPG{ez>2Erwsk$AE(ntzUX580OX0*_xLoKmB^035htBW
zc$fqDa8LCsH1}D_k#q8jkhVVok1o~B40b!!(#2;~=|b#|qquxR8selT-Y78~B!_qf
zYid8fLP^O@`29vortvuG50GmqOtHU-Y0unz^LlzZHJdF}O#4@9k-|^kqNO7`*(hQQ
zk*6XO4ZOE_{N>Q=u9A?BxMMV@^@@L$>rOd?ie;n4$xdr2s9<XREKbVe2Wddf7N#l%
z@iVSbd109&*0xMFd`8F8VMKB^!s8G4pA$L5RVP@pZK<=fGsBmnis64R3Pn;EJfJcr
zTa0b)OC>rz)DMj~=M>lv?GD8TK>H_7yH4yb3k>5fuRK#Na#9Xsdw!Y$1t#=J9--rS
zhDl+o>elwlFygJq!14QktX!s+=;rZQN6fX{WZ2xC*e8*R5SFLoqjzzP?eh9G@Flh-
zE1Bs=1qiOHW#TM#Yt9HpL!>my;MJ7X?NhJgZ{qzSOkNDfhrY-PZjyP5Yd9;@jC#R}
zRFSHS0-UqVgqaB!;-y!Eg4>(K*_wXkU&M5nw&xas5Y|wMsX1H|Is-4o`nx*!1??>#
zcI;4TWUX`gWPdEDUyhp0BvPIsmtoK*Sn@2N2eo+KaFUm7yrp#|rmwGfM%9&ZN<87H
zM!F1f6dcjNs!X(LSKE)^z2!G`e$el5K+Qa4qv0P=Kc7?VI?(4Kw&BUrI5`bzmXTFt
ztgOwzn*JdN!Pue9IU&n4zpI<30*I-#LL5KOLWGPMf}%U6lX)~r8}fQMb<e4ZLWhP9
zke9MsWPcc~f9fX!g!X0kyL|lrbr5l#sqM=H6F)TnQNvY~IOFQR^H6+zwx@E3WvoF#
z<ja^InD7<P%!PF=G#Rc}ir%Ln;ncQc1t7~;6Xv*Vs`Qj=rum?&2W>T`v8`(Op98-f
z4XP9m4UI^L4>Sa`e&}4P=)R(Et{6J3>mPpNyN19GB=oR^<SAkOi10vYgy99nSHH76
zz0B62os{1VHP~F6-on7aF}9+xqF+-~K`Lum{Q9|L-YzsnA_RPs;RoGQXHTlO9MfYw
zcJ3s|8FDl*ujD#l@mIMGA2m3jxS!zRyis*@K6t5c)H9GDXoRLAxo-z#1kx7mhd2#U
zn+(4uN^)krQ)Ju@Gfv~AO!LxC5uM?CMFG~o`Cr_aP<I?M|HvyBD<2h_n}4??+wdap
z-@q%k<K;uqlprOKrvznJVp17k<A3a*{$X8SsiPjE#ad0V%*MpECa2iRlG<xnkdn*u
zV)ocXQ5g??61$eCuQz2U>p=8_jSBU(Nvf--NJ8tqK0kH~(xI{2_OROUBP4)+0jlY{
z^qcz;SGI}EF1j#gd5;vrJK0v|;>ZM(n0Wbr8;FvOcRs=T6Unuk!N}Z4bg%NE9p6>$
zsl}*6hzRM>QH)aI|A&e6E#<8`*I266tRAa<)~r^idqzf=%j_R{qM@7O)wd)3(m^y9
zgO@PaDCNBq$x)=AC3PC2XLU_PNwY+mdq}hEChyg9c`l$$O=+B)9fouv8Yz~MSjzT@
z9H`~V(}Bo3d1vF4Kk&X7MYI}wGzG+Y<{X}J><9;Xkh2=Z*)XJUrY${i7d0|eCF_i#
zV<vXM2H$|YYp;P^1|j%2n6<k$YC=aXHn-e9$$X^L*1oNuG#2#uNkwOT$hRo`-RYb$
z^2Y>z6WPJVbwrjG54%ATDh5aKox%j<5mR6qi+cER{=_UZcj||sG+$7@A;$(SZIqwg
z=1=YndW(+?sT9;iEhsHI>o{|9|AVwhW(Q^q(s4V?Xtb1+?g(|sa%qge!!Mi;i|SIn
za}EkF3lL;8BoaU+5TcrbE2#aEsu&9Gu>VM%Fd&4%6paU~5u(sEt1898Px&EWUVVq6
zBJFpNTgsan;|m>H$&81{n_7`jgsEay-hwyP<%VUB#$o0_r5tp*O;suiG5{PfGP)po
zEuf{Cl;lx)oZzv<e~b#PM{{Cke}i+3KTwconN9<ZNkcFi%_X0eqR0OYi_3Ppqfpq!
zSV@@;Y$&@@Ku?AgV;(sL6_xQO_;6RA)9ctfAV}z(+wqCvx$8J#Pz(G>>te3+MkU6U
z7&>o6Ea6)j@Sl@Pf@dPCh^}A|pwlLr5U#NVGTs$w!X?hcq&W`)k7;spEsszLN)JVH
zUwsW*7$p(p0z93sd<Nl$Sd`V)**cA^@VN>({j<DI@ntO}-!|s==C}Mj4A{x%mY}iZ
zSfGg^bJm7t#o;ez=bg|@9&+YZOk#vp(n@j7x>@X#0dw9BZ3qZ3k-^E!L<6^D96Uv*
z37oJ|PmLl&7iu`eY4`I1pexjgFNfxcW2T;!%<`_tQDQ@sG9M~1QWqxeB%pWA#)HwC
zMmWU9>O%>K>lQ>$)GI^0uj9g7Ka6gReoWu{2{o~W-TeWWV6MLDH%fmsK5yE*C)uhX
z<m3UoyA*nGlc;}fwg-^OD{q$iK|8{GqoBu^BtwDVWSHaJ)pU^sqFki69rktW1cqcD
zk%F(Iiwzd80C*lVrerq)r4>%~7+hlr&5;0SZ!Orkod}vG{?5eVa;Q)YY1pHCpQ#^t
z4p)`&#G#)0dTdf__DJd2GE1SC$<E<f>Y)%pqO3yS)x{!uPFcLgS5Ix$7t8TBSftPx
z^%a{E#jivCPR*#-j+#WVC%4w!V??m7dR6%&#{ySf!Tx7ovV!y}tTn$dPX>o|rBJZ+
z|6vu%aW76J6Inmzt@$y1b6GyjM5)T~T!jCHWvqcjT{UsU^eG!gokl<o&8Cr#`5uq9
zYoZ={C6Vp1f$8nlJe5vaZv_K|>dpdWG<;WXu9o57EuM70ZW18NN%(RpioS5kesdAi
zZw@59JijmDa3}pNJot7nBtS;yFgIDhTx`CeU+edN$dzcK`m;=OO1fI438ev#-e-7O
zZi_L<Buv^xllnZBkyZF7N;wVo&Pr|xEv;;ZFIvh7>@&u=ewXr4I$$0ukBX&n@U9M*
z1G{1VABu%d>Z5N9%d#nY=6>C9$dNU%6=p$cO`so@aj(KOBJM%N8h$a@?q^CU``4yU
zns=zWZ(p)e8DDJqk!1<{Wiw&+0$1XHByUHhl$lB!Y0}&sm&o@P|B>z<Mvue<x|^53
zs@yS~deHeYZq+21gYKmU-8iV{Tlcx6^cXC(ltP@R>`sj-{O%K|-%q0#l+l<9Z*U(V
zs1?wO=mwP+WEX<ATlyw=8Mo+PDjOvI`d7S_Zwh@;@^aNeU^k{`Zg@`Fau#aI4Ze>9
zATWr|M~X8{I%tnxI`UEsHdYZI3LZ#gzoA^Th8s{4&qZ%8?adU9rC<Dq1!LkzB@A}!
zCBDyScP~9fSRuF#G;F*hUC_xxTk9DW0Yr9+oN{Y#6Gtl`g~sNk`43(-xzhPfITbL0
z&}!AjIDb$}?MWWP`PbIDS2E7-k0Pg{id(MwTP3F+3uwazPD0dbQ~1L{9e~_ww)4b~
z%+ZLrfKj2bWRSz9Xsu|fd$5wCO;{9ZNhh9-pn!qx^fH`Cd|C5s$4@ASZ2xD%TcJie
z=kcfagxKss@Ku7s@6fmhQcJ;qU`~6lXZjcV3$%WUa0yniA;OqHXmi+5s#t6(d94(H
zgW(!E?~B6Qs#@BS%nI9<sQUB;+VF87i?W<MEynaGX<#m=50d142K+8<)R-jLVT<Wd
zo9dQsIQ3HaqH>Q{rivURb)CsM3pAq5xOIz5-8at`LW@A7lUA9uhb*vLFVC__X(Ri4
zwKZP_;OcpL&Hnrll;{&-*F9MbZ)tT)mCnG!(o<d8p<p3MK2kg7*gt`^4yCDzA6(8#
z=z{lwz50S?Br5fLXVF(gu*#pPrEQ($>>K${O5vW^RD%93muE~;!8B)UHV?iQ07oug
z{}MLg*`UX|7@h3UHXlQUHM$rc)N-)V+TEYWu0oM0H1=jG`zK1*UgAW(VjK)bi+P8M
z(p0qUO8S@!dC@3>f@u0UIke&F586l)e8L0xeU0Zulx?W5=Jz=+LeVYyU97Bdv6Yt}
zz}PdFY&)v9ole(!sN;qn9pu$f2ifNz)rd=xlG)QsENQEL_SXX*jNxzCT#<uFo6N~T
z-@9Ua#tS`%edY1gBkGQ~>_@Ffnwa;%8;U^TouN|YcCKIeGtPO9V80yP*f@Ax#iQ8n
zVMhg^MB)T+WEGM0?-Utg4hi(qDN%znFe<!iwkL;yHg87wYiGn+ZP|XS(fAf@N4U(1
zTD;s*wn+tet6BUn9TRqS2ubV+h6m4QbcCHLprl{DkftAxARmKvmtmLF)Vv)tu8k>5
zk41osM$=>hHkB#`MDNZLVY|Vz%}~@>JU)JqL`LX#*FTeSQhTzQ^eM{LFK<hh5yt6R
zkBTAPv|*096aO&&GOY0xbpn7jDXOJk?k*dK!m9y0h#g30kDH8@dB&s;<uUIERK!ij
z;J`Xlm|eVuau!sC)X`S>n2hmJ!?>VoV{(f2M}&eQp7K4g^hXl|?_<B8g??%sx19SN
zGT8H0e09I$v@W$H%JJ32mIjtaK5sp5zw`}D<TP&I%Y=|4w#NnTxUUSKI_Kt>FRN@&
zv^t6)1Sc}l#TQ=58o@*pue0%&)$;^D83Zh#PRak!myY}lD2VRjTPaypQTAA<%r~LP
zI)Bsr$9KB*&D7h}`jGvY+t%U<-8g!Bf)4{fv9f2^^0$Q?=7T3a0VjA+i(mk+T+}Z^
zsH7JPG3|z25BeSGCY8-OAcft#rboVOOb1+3GL`eNInvTVD`Dl&*+L2hEY()s;%)3y
zDS<R3@M*3^T2J*1(yM6aa+3DJBLzB`yiHxX7mJns`$=9O=Fl{HxACS>tRWSJhyhGo
zE|!*6l6;5wq2&W?`HJf$MD=E>VjWR0nJ=3XH0R=|;Qmw>OV$}Cmbd7xq*G`E5bl-x
zEKcOh_9-HqsrDLPD0AH$$=&Ebyfu)A_{wq$hBEJ=<b;DL9=^5(;k76zCakvgm|U<7
zHo|Q<ey@EP*Atda*}5ch06V6Y4w^Gbt?L9MPxlXw3*rOdtn53pzJmM^Vs9C>yHOa}
zGUf?fzS*TCT0d7}Zg7~4=8=%2_4VT`G?T%g)Ho6B?;!oS#TC_tr==RX{;9-I`J#br
z+uoX<#H6qNqU9#(&FQ(J$$>J|awbdLG(%T|42Ep0lM&;;zQ(^xn5hM|{MAiyNR`t4
zX5XFW=U>+jE{6^)3;%lm)oQrb89k0^Hk$1#t}rih)Ie7Hq)(Pb^7<9jve0kGuvFQ~
zDc+AERYf;5eN8VL5RH`qjxSeY$g_vsp_1tLl!b=qGy$o<xMVq50FP>lh)HYf*R+Rq
z=VR00hsrSzVl&uyQgZ-Y&ghX>&kM$IM2Zf{5W!@+b<nV3uV84}btphT%&C)%42EVv
zT!9d81F+&|sINbXO6el3iVoRfp}KMmR00C=`uhRAlX`mwtf7H@2Hfe;r<N1QBolic
z?EYN?im=%98~gU(Ubt$VXwV3TU+|9;y1k1ior(qD7Ud(pv>Wro?&;i?Hom)Dvk?G!
zvRoVnh|^=!gu<0|2U5#CbdKCnHzV-a7XWA-?sQHwgWs@?24dis@oe?A;9fC;>&Xgm
z)OAv~vsw>=N6#X)0RUHw3Cn>E&OAZ>gkX7Etdud!#yzJ95OHd}29ot*jE5*m)aZUw
zWa>f=cw4Gch?Fb|W#qo(Fr{J7X+MpsG6B17W{WCn&8Z{h*y<5-@Dro3@V3m7O;!~H
zPMWSf`VK42TPGT;S|frP(S`(DuJv9HCe5<rJjWUqDX`K&Y>=siCgpr(>`Otv-RkSi
zY}IO3f{BPYSCs$lhFXb!Lle@E8>&g6l@}bXM|553mc@5^>Z3fah*5`7YuD(srRTcq
zm5(=HN&pd%n!3q3SH)K9XQP7^0ZuiO6>~vx79y{r4bAEyiZf?8IGYzP8b<g!L-QBY
zzK%31OxrM)BXu5&2u4?MH!monS6(!bT^moenpEM>FJDnVt{mtoy1N7Qe)ydE67?o+
zpOZuz#n|-jZ`!3Qj+t|1df6WV)UZjGQIpoi0|VT3;J}4iG@pp7bo)Zv>?gdRR)>e|
zaeEdC7n$r9s8>uc&JCZPi)Y6^_1pFp?XlA=rq-eYi8Y*1c^^$n=gQg)h#r`fdU2q2
z8mze=ZSMn)$*q^@^(sAqlL>$KvL}p^GgBcjL>=`FhJtI9WS2#r5wyiAl6^un1vdo%
z-gm(xWka4(pd_UNe8^Tng2sXQ>)5-e{?tUlp@ve9>^4zHlJ6cK52V{XEF~^07n%lI
zJ}T{N2=t3&K1-ONh#vFPe@n(F(@L+Q>9Y%+95ac%%)fGPKN}%MMw$^uXr9-Jqm_&;
zw54imj}Xu0Q*{1P8UaRr#v(P<U_yEmIKNKv?3&k*g#ta_Z{ZMYp*ki)PB$xy^`*J?
zQJ0776VNS=!9_f=!7g`lrvv`*Bv`swMX#)}@@R5Osj2=_50LqjQ(V{#TLJMh-^o_E
z|Grp%-_4(o3_;Scj>s_BY;(LRT$;WG@|cmap)Bebd$($QJu%BAQahtzT%sK@h$zeo
z>gGTZBBUPH!FniXn#hVs;8y~{a_=yAED+}WVkezjaY*HiT0N}H^!)+5*+^NXWWYRX
zi)|{=5(x`$l?3jE)_zVN`?0F_L1Ko8Q>GsO^$h(17hc7WOXCzsPmCvWJA3oXTzYB?
zW;blbdQt0I5KKx<+e~pH_a*shP`^&g&S22M<d!=^I!?VkCJ7xi%<yl(F;XO1Dy+Bp
zfL9jrASzMb0gsc$7<!ajqiDr%D}=+;hJiRwx=$%R19j3p#J<o#I9_>lhzZoFN`%@*
z=2|tlEH!O|s>hA;5mTEqYI}Y0fm4&LS@Qxj52DJfvNK!_DW)z+nRK);>l`Wp+0@Q8
zel=b7l24YvCP5ugpPwJd{o?y4>=l7#JH(SSxINDW67L)etz9UA3Jp?W*6s)!R*oy3
z3XI0m^h`p{wCzBM028mEo69(EL64USbQ#Bnpdc-r9ipf${&uA?nn?;3h#GE&zQcJ8
zgvKC5vdzJ^OSySXlb(=QMg0@Cg6tq;QF(8_zfk)f?c4lBi6|`sp+8bBi}Yp}=N$o8
z`p6*WU%;ky2*Ov**Z%8|Z>)^I{XL&{&#eMxQLx|UX@}0+`+JX=3=;O6M-nym6rVG8
zi40ST+7o%y5n=k_N3U<95L0B$7$vRBWiREy{6j_Kj0Sa-y<Xx!iS#oIBb`X2wAh&m
z%zHYz!dBX0s5xl0BVv%^8+;Ow;Nd<0Asea*5PQ|EE)v8oPPS~OU0|L!*{2JEryrZ_
zFY5HT;bW}7q^_qjX2p1otABSj-3ZL~TPT2wQN8J+vZ7IDl=mZ)@rmMbHKp#}=BKi8
zgUU7!-6Lj`!dS3e*OBF7Xf!KGXi`}d9_;JDl&gSA_QF$ZgdJG{DbVh;CTw$Gf&@na
zGI`#EysCG0#5NMFldN8NElg4nK+?@-OvCR`^6%(JIb)^B*Xz*vrO5d3BQiv!aQVo=
zVX`#zD>SO{&VqwHBRn1)ca<|1;+078%Wn29Jf2Pf5qVKGD$xxUD_N~r8+o+^27FLE
z=D3CakkZ;jiGHIIUMVC-0PM4j9e|>FbQpB+Syq6im?SU6Pci^KF$Bged}QM0^8Tr`
z@0u8{7)_PhFK%L9C)IZ>Za>Daj0vA#p1sg^cha`_YkeOYi_nzN2Dd3r=%t=CEx#n6
z$Jr_+=8r9&nf16e#TS8%)6|%4Z+cQ|eI&HXP9lriW=?5>izE*yLW~c)fgwgLB6@4g
zQZ%eMBTgb^@5^xR0{!yy*uxXtOv--6w{%IDeF-*RmzHs5U0j<uRns3Zx1kAYjRu}R
zF#$AI#TaupmF=x51Kwa^|J_9DTb(}tSmGO;ol;#`)(x|@P)FKc3{DlKE9h*c6hZBw
za`jEB+}zm3XGc1>mC}b#$eiVPfKSd$Ux~SM6|7c=!2b0wRw;1xA2SL1l_E@?`<Tn5
z?cSR37Q)&TnOHg-xOZrI!AWdHt;)D1+K5bp=4G#x$X-o;jzNqxC|1YFT0l)9ElM|^
z5OEM1CvqQvM+&mA-zn2?^pElgDZEvbx~bk}G|_g@%QIuVqA-!?K!|)YpPD!U9w~Pa
z?z+nxQKQZ_!eSdL%|=ZX8e2)KYY8gCvVXJL-rQ^5%Ue_f?lsh^AAy{DDq9GLvkPq5
zj$z%1SEaU0xpqf~iXak0;W3i*nQwGfn33D(;(iH5S%A&s_<I7Vor|yH`8}(khgAMI
zS;=(D#ZhUz`8ArOlx!0|V2yQTSzqk2c*mG5N%-&CB<OKi@6bS#3b~Is&I1|)k9P(R
zItkOTOu<6Lkk*o2DvA!*(o9A*k5_<5uF+<)j+$0CLHNhFb^5SNE>#s#rxxAc6V9nm
zna$BBwSTBMAFZ4M)iY4FI9b&#><eM{{w5^AXlPx+mCGM!?gNolp&Wnrq)nsQx!_>!
z#TF9qK+sU?9=XxW#b`H+p<Y#HsAlO8u~VmdfHJT|Uc7LPd%*}OnZU)RT~GA#B?*+@
z9bVl2CdF_G{T5KlR{CKg6y2BnQXRdp_#YYCyhtf+C2!ogvK@_UO+ZB_(Oi~K49H0n
zh&4HMKEe!&iGiQMjS$WbjOJN_$w(SWdk>xRIc)1-<Ln~Fof(kIvv%QeXcv|oPk!tk
zhC*L-G!vO9n*D(qARhKb$-6r?%W02+I1|{WQDN#aEjCurM5Z%VCQPlaT9o)^u_2Wv
z6++Ivri4|LA-%4jpA9b_4h!Z)1BY0j{Xl2tv9Jj<G34sGmM-h&VXUuc-G)<HP!=HE
zbJ+{?Tb{mxOO#6NfVExu0oGQ(*WM2Ac;W09LOQ-A{_IW@J??3O@wpTmB52Xy`evP=
zyw>w~z}|_kATrp|?S4`yt5LH+8U~Ui3Svoz$8sxJBxYc4jrYTj***eKEN8B7Kui00
zT<&m-^Xb)SQ|E&)Im@)a`>yxW;$bz<lSUDan?>1%GF)Co+7zY{V&}|K#n$%tG!tqM
zV8n7L(Gl}hOh$_BYaJ5mQ}1;Ms%Uj((@1I5WMlPn>G>P7TKf&s5ZXctq*d1Ks9SIy
zcfuN=E2R`f&@+fd5J<|O$YG#u!HYxVng+^ZHiKvDi|JSkR$@H&jJ^t8apkaP)tT}%
zB?ZAedV<5@o-pRgVIr&=U+rVq*K&N0)mRiepXDi_D3>i`Jldpt>+tAUA)$q=D_BK{
zoV=8+LvRABh~Y!w0&c&qXno0dS%=U-&hbjYc1gufKl603VSaY@?SN4#wb)btim+Px
zg*9qxh+(D=PlqX$zmnX}{cetAeLp9TJB5$FrH6#wHq#1*CGD<Z^28qvv-ychIv`B)
zres7#O)gvZ!D`Z#HT;cMrm`StYZR*L4nhjsK7{%*#aCNNuiJ5^Ej|QmJ4pez;VZ~X
zy`3u7$4WvJJmZQk<3GXpN<XF^W?O(B^DkHNT+6ad?J`P*ri)<NJ3DNFEi7Uj(fOUx
zvL=jDZ<C1susm*l2Cuw|8>*ziISvhT*!pT*9U5^IER9z_udRVC(J7BCHVu@q@shSe
ziz33wk;1vPS)M2A6<mnKiMbfzp?5iYOixVV22gWjqsXsX6<*0dB0+^3`mje9Eij%>
z#sSa}#*NUUxi?})W%no}yY}<KYS&GNZQg=&)kiQ<0I~{vqK&MiGl87r!~W6sbqbw`
zDiNZ36;g;%BhYODirH<?>Uw_LTGFCgo+*Cia{YJ@_7od)t8gyp#H&z<n}DzRcL>RH
zixKH1R!-GOrEo~=SynpydjirV9m<M@eRpPF_c~$s-b<twydXe;vZb=+#A&2<@<Z%6
zf!21}TuUvA>~Mq_N*ZiPss%w<BzkNr(vLAOWNGgHm0#YfrRPPS>sO!qs$!2vUX?R-
zDM*n0Q$fP<l}H21F`ymE?m)RE^<03=hn~2RLI!P%#neG%Y4gBBw!F5NETFEl_R&Ek
zWv*(anO<<X@&1UhJrq~D<KgZxR{+DBi_soHqjS|mR95g{hm}~G>_HOQG`yT)(+;}D
zf<SIP@EG_t!D047_q!)ZWj%gp>389BL$=|!#p{}DaOVwJ|0kCNX#9(-%h0;T!B{mG
z(n@FIzNWzx_Jp*l8UXUf&-b7ur6<*=KzAN?chxzOE~5Wl+D=GyI^zAW$<D2Si_ll_
zki)PXW$`E!hyZwLfhZjJa$X^KOVS*lRYV}`nyy-n$TfDqVj(TU`lL;&o;m?4r5oZz
zPi<N8F&t0X@~)=3GBM`~;f!Y<hb)m36Klt#&j36EEO@v;8^`K6iaaL~m)SZF9J$bc
za70g8kK^SN4d8Nxl$O6SH(dJHV^v_QkRZ{Pvfi-(%7V%Azdu_)yi3LZacN+qCfmFR
z=nl`HhUC^}-Kb{#2^g40vlD5b?-v^e>R9nAap%bp?L{4?E=E}*LQb|;pTh-kwT9KV
zPYA+$CIlI$WS+L==+KQPcH+V=L@z`86js1+fc0Og7G=L7aoK>`^#<U5VDx000ghlC
zAa!E07HY67g|05eyGxK>sR>^nAc@yY@y_r7ILYqWXG`z65_q=g!)WE&M>J1jz>YIz
z6ZA$)nQ61v;Nk3b*};|&vKX=Y>>>RfxD3|gcqMumDUY%cK-ey;uP&GI2m(TZMDKy5
zN;jQynSN?((1CRg+xpqDg=d!2NI+wrp`G|+&{uK5VJxoP8yn!o1qKl?>JiLAMG6?-
zsfINf1w;g$ZI!b!zUkE)S8wOSlJ}y#T9D)cyGbWe$ZBtg8KddPg|t{cr>szPvZQcZ
z50r!VpagyoA8|;rn6;P0Tkt(9?DjyAoD12$YSQ9|ZPF63EO<SO<_{BGv3V7><fPFk
zMv1jxtDrW!=69M<yE63C*T<tXY&)|QGWx~LkXQ`qh(;7C;rA=?iU_!71^mW4DKKsS
z86a^hV;-QBjcH(08sS)=Br)_LF4~wH`RGU^+kASA4yqwC8-hiY=v!>%4=QbSsn8=H
z|0d9m2zUwb)iZ0!#`S9+<oPv*T-PesimY`~Bc?fMpcJ(fIuuFPkl@riL@@l)0WWYo
zkSGOkmv$G&pa4eX1w$fC%Hkj(7)7+ZQcMdyMYE3Pqf(kqmBI3cR~jC$fHUb!)T}j=
z@90tf`9~vCKnV$nJP{EBEOaRVhz2y_fC8>WLqc-n$XD)e{pF;nCt#2vzv5)++(?hW
zP+ZkHuVhVyUg&{V6o5HZk|E#vk6RL4e<f&v5E>uJJ_^<Ein(m1F@u@xG4jTzD=v8b
cuPt;|KrJ~<*-Mz19B!j#jCm(OXJhX!K#Be9djJ3c

diff --git a/static/fonts/roboto-v18-latin-regular.svg b/static/fonts/roboto-v18-latin-regular.svg
deleted file mode 100644
index 627f5a368c..0000000000
--- a/static/fonts/roboto-v18-latin-regular.svg
+++ /dev/null
@@ -1,308 +0,0 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg">
-<defs >
-<font id="Roboto" horiz-adv-x="1158" ><font-face
-    font-family="Roboto"
-    units-per-em="2048"
-    panose-1="2 0 0 0 0 0 0 0 0 0"
-    ascent="1900"
-    descent="-500"
-    alphabetic="0" />
-<glyph unicode=" " horiz-adv-x="507" />
-<glyph unicode="!" horiz-adv-x="527" d="M347 411H180L167 1456H361L347 411ZM160 93Q160 138 187 168T269 199T351 169T379 93T351 19T269 -11T188 18T160 93Z" />
-<glyph unicode="&quot;" horiz-adv-x="655" d="M277 1400L247 1042H136L137 1536H277V1400ZM547 1400L517 1042H406L407 1536H547V1400Z" />
-<glyph unicode="#" horiz-adv-x="1261" d="M765 410H501L421 0H278L358 410H119V547H384L453 901H195V1040H480L562 1456H705L623 1040H887L969 1456H1113L1031 1040H1235V901H1004L935 547H1160V410H909L829 0H685L765 410ZM527 547H791L860 901H596L527 547Z" />
-<glyph unicode="$" horiz-adv-x="1150" d="M856 375Q856 467 792 530T574 644Q361 709 264 813T166 1079Q166 1243 261 1348T524 1473V1692H673V1472Q841 1449 934 1331T1028 1008H844Q844 1149 777 1232T596 1315Q477 1315 414 1254T351 1082Q351 980 417 920T636
-810T874 701T1000 562T1041 377Q1041 208 940 105T655 -17V-208H507V-17Q321 0 216 115T110 429H295Q295 290 368 215T575 140Q706 140 781 203T856 375Z" />
-<glyph unicode="%" horiz-adv-x="1500" d="M105 1176Q105 1307 188 1392T403 1477Q536 1477 618 1392T701 1170V1099Q701 967 618 884T405 800Q275 800 190 883T105 1106V1176ZM243 1099Q243 1021 287 971T405 920Q476 920 519 969T563 1103V1176Q563 1254 520
-1305T403 1356T286 1305T243 1172V1099ZM814 357Q814 488 897 572T1112 657T1327 573T1411 350V279Q1411 148 1328 64T1114 -21T899 62T814 285V357ZM952 279Q952 200 996 150T1114 99Q1186 99 1229 148T1272 283V357Q1272 436 1229 486T1112 536Q1041 536 997
-487T952 353V279ZM447 110L342 176L1053 1314L1158 1248L447 110Z" />
-<glyph unicode="&amp;" horiz-adv-x="1273" d="M101 391Q101 496 159 584T383 789Q286 907 253 979T220 1122Q220 1288 318 1382T584 1476Q734 1476 832 1389T930 1168Q930 1080 886 1006T730 849L623 770L947 383Q1015 513 1015 672H1182Q1182 417 1059 249L1267
-0H1045L948 115Q874 49 775 15T572 -20Q359 -20 230 93T101 391ZM572 131Q719 131 841 243L486 668L453 644Q286 521 286 391Q286 273 362 202T572 131ZM405 1128Q405 1032 523 888L641 971Q709 1019 734 1062T759 1168Q759 1235 709 1279T583 1324Q501 1324 453
-1269T405 1128Z" />
-<glyph unicode="&apos;" horiz-adv-x="357" d="M253 1425L232 1057H103L104 1536H253V1425Z" />
-<glyph unicode="(" horiz-adv-x="700" d="M133 591Q133 817 193 1025T374 1403T623 1643L661 1521Q515 1409 422 1179T319 664L318 579Q318 193 459 -91Q544 -261 661 -357L623 -470Q490 -396 369 -222Q133 118 133 591Z" />
-<glyph unicode=")" horiz-adv-x="712" d="M567 581Q567 358 509 154T330 -224T77 -470L38 -357Q192 -239 285 9T381 561V593Q381 803 337 983T215 1307T38 1530L77 1643Q209 1570 328 1399T507 1022T567 581Z" />
-<glyph unicode="*" horiz-adv-x="882" d="M330 983L28 1073L74 1224L376 1112L367 1456H520L510 1107L807 1217L853 1065L546 974L744 703L620 609L434 897L254 616L129 707L330 983Z" />
-<glyph unicode="+" horiz-adv-x="1161" d="M670 781H1076V606H670V146H484V606H78V781H484V1206H670V781Z" />
-<glyph unicode="," horiz-adv-x="402" d="M134 -290L29 -218Q123 -87 127 52V219H308V74Q308 -27 259 -128T134 -290Z" />
-<glyph unicode="-" horiz-adv-x="565" d="M525 543H37V694H525V543Z" />
-<glyph unicode="." horiz-adv-x="539" d="M144 97Q144 145 172 177T258 209T344 177T374 97Q374 51 345 20T258 -11T173 20T144 97Z" />
-<glyph unicode="/" horiz-adv-x="844" d="M177 -125H18L626 1456H784L177 -125Z" />
-<glyph unicode="0" horiz-adv-x="1150" d="M1034 621Q1034 296 923 138T576 -20Q343 -20 231 134T115 596V843Q115 1164 226 1320T574 1476Q809 1476 920 1326T1034 861V621ZM849 874Q849 1109 783 1216T574 1324Q432 1324 367 1217T300 888V592Q300 356 368 244T576
-131Q713 131 779 237T849 571V874Z" />
-<glyph unicode="1" horiz-adv-x="1150" d="M729 0H543V1233L170 1096V1264L700 1463H729V0Z" />
-<glyph unicode="2" horiz-adv-x="1150" d="M1075 0H121V133L625 693Q737 820 779 899T822 1064Q822 1178 753 1251T569 1324Q431 1324 355 1246T278 1027H93Q93 1228 222 1352T569 1476Q772 1476 890 1370T1008 1086Q1008 871 734 574L344 151H1075V0Z" />
-<glyph unicode="3" horiz-adv-x="1150" d="M390 818H529Q660 820 735 887T810 1068Q810 1324 555 1324Q435 1324 364 1256T292 1074H107Q107 1247 233 1361T555 1476Q761 1476 878 1367T995 1064Q995 969 934 880T766 747Q886 709 951 621T1017 406Q1017 210 889
-95T556 -20T223 91T94 384H280Q280 269 355 200T556 131Q690 131 761 201T832 402Q832 529 754 597T529 667H390V818Z" />
-<glyph unicode="4" horiz-adv-x="1150" d="M902 489H1104V338H902V0H716V338H53V447L705 1456H902V489ZM263 489H716V1203L694 1163L263 489Z" />
-<glyph unicode="5" horiz-adv-x="1150" d="M206 730L280 1456H1026V1285H437L393 888Q500 951 636 951Q835 951 952 820T1069 464Q1069 239 948 110T608 -20Q415 -20 293 87T154 383H329Q346 258 418 195T608 131Q737 131 810 219T884 462Q884 608 805 696T593
-785Q472 785 403 732L354 692L206 730Z" />
-<glyph unicode="6" horiz-adv-x="1150" d="M847 1457V1300H813Q597 1296 469 1172T321 823Q436 955 635 955Q825 955 938 821T1052 475Q1052 250 930 115T601 -20Q392 -20 262 140T132 554V625Q132 1027 303 1239T814 1457H847ZM604 801Q509 801 429 744T318 601V533Q318
-353 399 243T601 133Q726 133 797 225T869 466Q869 616 797 708T604 801Z" />
-<glyph unicode="7" horiz-adv-x="1150" d="M1061 1352L458 0H264L865 1304H77V1456H1061V1352Z" />
-<glyph unicode="8" horiz-adv-x="1150" d="M1004 1076Q1004 967 947 882T791 749Q905 700 971 606T1038 393Q1038 204 911 92T575 -20Q365 -20 239 92T112 393Q112 511 176 606T355 750Q258 798 202 883T146 1076Q146 1260 264 1368T575 1476Q767 1476 885 1368T1004
-1076ZM853 397Q853 519 776 596T573 673T373 597T297 397T370 202T575 131Q705 131 779 202T853 397ZM575 1324Q466 1324 399 1257T331 1073Q331 962 397 894T575 825T752 893T819 1073T750 1254T575 1324Z" />
-<glyph unicode="9" horiz-adv-x="1150" d="M830 640Q772 571 692 529T515 487Q389 487 296 549T151 723T100 972Q100 1118 155 1235T313 1414T551 1476Q767 1476 891 1315T1016 874V820Q1016 395 848 200T341 -1H305V155H344Q573 159 696 274T830 640ZM545 640Q638
-640 716 697T831 838V912Q831 1094 752 1208T552 1322Q430 1322 356 1229T282 982Q282 833 353 737T545 640Z" />
-<glyph unicode=":" horiz-adv-x="496" d="M390 97Q390 145 418 177T504 209T590 177T620 97Q620 51 591 20T504 -11T419 20T390 97ZM135 980Q135 1028 163 1060T249 1092T335 1060T365 980Q365 934 336 903T249 872T164 903T135 980Z" />
-<glyph unicode=";" horiz-adv-x="433" d="M111 980Q111 1028 139 1060T225 1092T311 1060T341 980Q341 934 312 903T225 872T140 903T111 980ZM146 -290L41 -218Q135 -87 139 52V219H320V74Q320 -27 271 -128T146 -290Z" />
-<glyph unicode="&lt;" horiz-adv-x="1041" d="M264 644L890 391V195L72 574V720L890 1098V902L264 644Z" />
-<glyph unicode="=" horiz-adv-x="1124" d="M986 814H152V975H986V814ZM986 399H152V559H986V399Z" />
-<glyph unicode="&gt;" horiz-adv-x="1070" d="M795 650L134 909V1099L988 721V575L134 196V388L795 650Z" />
-<glyph unicode="?" horiz-adv-x="967" d="M357 410Q359 529 384 598T486 751L617 886Q701 981 701 1090Q701 1195 646 1254T486 1314Q384 1314 322 1260T260 1115H75Q77 1277 190 1376T486 1476Q675 1476 780 1375T886 1096Q886 921 724 751L615 643Q542 562 542
-410H357ZM349 93Q349 138 376 168T458 199T540 169T568 93T540 19T458 -11T377 18T349 93Z" />
-<glyph unicode="@" horiz-adv-x="1839" d="M1738 502Q1726 260 1618 120T1329 -20Q1142 -20 1089 148Q1035 63 966 22T822 -20Q680 -20 607 96T553 417Q568 582 628 711T784 915T985 989Q1066 989 1130 968T1274 883L1222 329Q1203 98 1350 98Q1463 98 1533 210T1609
-502Q1628 891 1465 1095T967 1299Q766 1299 610 1200T364 912T263 478Q251 230 323 48T542 -231T899 -328Q989 -328 1079 -306T1230 -249L1267 -364Q1205 -403 1103 -428T895 -453Q645 -453 465 -341T196 -17T118 478Q130 753 241 972T542 1311T971 1431Q1220 1431
-1398 1319T1663 996T1738 502ZM712 417Q698 275 738 199T867 123Q927 123 982 174T1074 320L1075 329L1121 832Q1065 861 1001 861Q884 861 808 742T712 417Z" />
-<glyph unicode="A" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538Z" />
-<glyph unicode="B" horiz-adv-x="1275" d="M169 0V1456H645Q882 1456 1001 1358T1121 1068Q1121 966 1063 888T905 766Q1023 733 1091 641T1160 420Q1160 224 1033 112T674 0H169ZM361 681V157H678Q812 157 889 226T967 418Q967 681 681 681H361ZM361 835H651Q777
-835 852 898T928 1069Q928 1189 858 1243T645 1298H361V835Z" />
-<glyph unicode="C" horiz-adv-x="1333" d="M1240 462Q1213 231 1070 106T688 -20Q430 -20 275 165T119 660V800Q119 1003 191 1157T397 1393T705 1476Q937 1476 1077 1347T1240 988H1047Q1022 1162 939 1240T705 1318Q521 1318 417 1182T312 795V654Q312 417 411
-277T688 137Q848 137 933 209T1047 462H1240Z" />
-<glyph unicode="D" horiz-adv-x="1343" d="M169 0V1456H580Q770 1456 916 1372T1141 1133T1222 777V684Q1222 478 1143 323T916 85T572 0H169ZM361 1298V157H563Q785 157 908 295T1032 688V773Q1032 1021 916 1158T585 1298H361Z" />
-<glyph unicode="E" horiz-adv-x="1164" d="M992 673H361V157H1094V0H169V1456H1084V1298H361V830H992V673Z" />
-<glyph unicode="F" horiz-adv-x="1132" d="M972 643H361V0H169V1456H1071V1298H361V800H972V643Z" />
-<glyph unicode="G" horiz-adv-x="1395" d="M1244 191Q1170 85 1038 33T729 -20Q551 -20 413 63T200 301T122 658V785Q122 1114 275 1295T707 1476Q935 1476 1074 1360T1244 1029H1052Q998 1318 708 1318Q515 1318 416 1183T315 790V671Q315 426 427 282T730 137Q838
-137 919 161T1053 242V569H716V725H1244V191Z" />
-<glyph unicode="H" horiz-adv-x="1460" d="M1288 0H1095V673H361V0H169V1456H361V830H1095V1456H1288V0Z" />
-<glyph unicode="I" horiz-adv-x="557" d="M375 0H183V1456H375V0Z" />
-<glyph unicode="J" horiz-adv-x="1130" d="M779 1456H972V425Q972 216 847 98T512 -20Q295 -20 174 91T53 402H245Q245 277 313 207T512 137Q631 137 704 212T779 422V1456Z" />
-<glyph unicode="K" horiz-adv-x="1284" d="M539 677L361 492V0H169V1456H361V736L1008 1456H1240L667 813L1285 0H1055L539 677Z" />
-<glyph unicode="L" horiz-adv-x="1102" d="M362 157H1052V0H169V1456H362V157Z" />
-<glyph unicode="M" horiz-adv-x="1788" d="M417 1456L893 268L1369 1456H1618V0H1426V567L1444 1179L966 0H819L342 1176L361 567V0H169V1456H417Z" />
-<glyph unicode="N" horiz-adv-x="1460" d="M1288 0H1095L362 1122V0H169V1456H362L1097 329V1456H1288V0Z" />
-<glyph unicode="O" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q533 -20 400 64T194 305T118 668V773Q118 983 191 1144T397 1390T703 1476Q878 1476 1011 1392T1217 1147T1289 773V681ZM1098 775Q1098 1034 994 1172T703 1311Q521 1311
-417 1173T309 788V681Q309 430 414 287T705 143Q891 143 993 278T1098 667V775Z" />
-<glyph unicode="P" horiz-adv-x="1292" d="M361 570V0H169V1456H706Q945 1456 1080 1334T1216 1011Q1216 799 1084 685T704 570H361ZM361 727H706Q860 727 942 799T1024 1009Q1024 1139 942 1217T717 1298H361V727Z" />
-<glyph unicode="Q" horiz-adv-x="1408" d="M1281 681Q1281 470 1214 318T1026 79L1286 -125L1155 -246L848 -2Q776 -20 696 -20Q524 -20 391 64T185 305T109 668V773Q109 983 182 1144T388 1390T694 1476Q870 1476 1003 1391T1209 1147T1281 774V681ZM1089 775Q1089
-1032 987 1171T694 1311Q513 1311 409 1173T301 788V681Q301 431 405 287T696 143T984 278T1089 667V775Z" />
-<glyph unicode="R" horiz-adv-x="1261" d="M703 589H361V0H168V1456H650Q896 1456 1028 1344T1161 1018Q1161 882 1088 781T883 630L1225 12V0H1019L703 589ZM361 746H656Q799 746 883 820T968 1018Q968 1153 888 1225T655 1298H361V746Z" />
-<glyph unicode="S" horiz-adv-x="1215" d="M598 649Q351 720 239 823T126 1079Q126 1251 263 1363T621 1476Q771 1476 888 1418T1070 1258T1135 1035H942Q942 1167 858 1242T621 1318Q479 1318 400 1256T320 1082Q320 993 395 932T652 819T936 707T1088 563T1138
-370Q1138 193 1000 87T631 -20Q481 -20 351 37T151 195T80 422H273Q273 290 370 214T631 137Q783 137 864 199T945 368T870 533T598 649Z" />
-<glyph unicode="T" horiz-adv-x="1222" d="M1175 1298H707V0H516V1298H49V1456H1175V1298Z" />
-<glyph unicode="U" horiz-adv-x="1328" d="M1194 1456V466Q1193 260 1065 129T716 -18L665 -20Q426 -20 284 109T140 464V1456H330V470Q330 312 417 225T665 137Q828 137 914 224T1001 469V1456H1194Z" />
-<glyph unicode="V" horiz-adv-x="1303" d="M651 255L1067 1456H1277L737 0H567L28 1456H237L651 255Z" />
-<glyph unicode="W" horiz-adv-x="1817" d="M483 459L511 267L552 440L840 1456H1002L1283 440L1323 264L1354 460L1580 1456H1773L1420 0H1245L945 1061L922 1172L899 1061L588 0H413L61 1456H253L483 459Z" />
-<glyph unicode="X" horiz-adv-x="1284" d="M644 898L993 1456H1219L759 734L1230 0H1002L644 568L284 0H57L529 734L68 1456H293L644 898Z" />
-<glyph unicode="Y" horiz-adv-x="1230" d="M613 725L993 1456H1211L709 543V0H517V543L15 1456H235L613 725Z" />
-<glyph unicode="Z" horiz-adv-x="1226" d="M313 157H1146V0H86V144L884 1298H99V1456H1114V1315L313 157Z" />
-<glyph unicode="[" horiz-adv-x="543" d="M523 1512H332V-160H523V-312H146V1664H523V1512Z" />
-<glyph unicode="\" horiz-adv-x="840" d="M40 1456H216L824 -125H648L40 1456Z" />
-<glyph unicode="]" horiz-adv-x="543" d="M9 1664H387V-312H9V-160H202V1512H9V1664Z" />
-<glyph unicode="^" horiz-adv-x="856" d="M426 1211L236 729H64L363 1456H490L788 729H617L426 1211Z" />
-<glyph unicode="_" horiz-adv-x="924" d="M920 -151H4V0H920V-151Z" />
-<glyph unicode="`" horiz-adv-x="633" d="M474 1242H315L57 1536H280L474 1242Z" />
-<glyph unicode="a" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141Z" />
-<glyph unicode="b" horiz-adv-x="1149" d="M1056 529Q1056 281 942 131T636 -20Q431 -20 319 125L310 0H140V1536H325V963Q437 1102 634 1102T943 953T1056 545V529ZM871 550Q871 739 798 842T588 945Q405 945 325 775V307Q410 137 590 137Q723 137 797 240T871 550Z" />
-<glyph unicode="c" horiz-adv-x="1072" d="M574 131Q673 131 747 191T829 341H1004Q999 248 940 164T783 30T574 -20Q353 -20 223 127T92 531V562Q92 720 150 843T316 1034T573 1102Q755 1102 875 993T1004 710H829Q821 815 750 882T573 950Q432 950 355 849T277
-555V520Q277 333 354 232T574 131Z" />
-<glyph unicode="d" horiz-adv-x="1155" d="M95 550Q95 799 213 950T522 1102Q712 1102 823 972V1536H1008V0H838L829 116Q718 -20 520 -20Q332 -20 214 134T95 536V550ZM280 529Q280 345 356 241T566 137Q742 137 823 295V792Q740 945 568 945Q432 945 356 840T280 529Z" />
-<glyph unicode="e" horiz-adv-x="1085" d="M589 -20Q369 -20 231 124T93 511V545Q93 706 154 832T326 1030T566 1102Q777 1102 894 963T1011 565V488H278Q282 328 371 230T599 131Q697 131 765 171T884 277L997 189Q861 -20 589 -20ZM566 950Q454 950 378 869T284
-640H826V654Q818 795 750 872T566 950Z" />
-<glyph unicode="f" horiz-adv-x="711" d="M231 0V939H60V1082H231V1193Q231 1367 324 1462T587 1557Q651 1557 714 1540L704 1390Q657 1399 604 1399Q514 1399 465 1347T416 1196V1082H647V939H416V0H231Z" />
-<glyph unicode="g" horiz-adv-x="1149" d="M96 550Q96 803 213 952T523 1102Q721 1102 832 962L841 1082H1010V26Q1010 -184 886 -305T551 -426Q434 -426 322 -376T151 -239L247 -128Q366 -275 538 -275Q673 -275 748 -199T824 15V108Q713 -20 521 -20Q331 -20
-214 133T96 550ZM282 529Q282 346 357 242T567 137Q742 137 824 296V790Q739 945 569 945Q434 945 358 840T282 529Z" />
-<glyph unicode="h" horiz-adv-x="1128" d="M325 951Q448 1102 645 1102Q988 1102 991 715V0H806V716Q805 833 753 889T589 945Q499 945 431 897T325 771V0H140V1536H325V951Z" />
-<glyph unicode="i" horiz-adv-x="497" d="M341 0H156V1082H341V0ZM141 1369Q141 1414 168 1445T250 1476T332 1445T360 1369T332 1294T250 1264T169 1294T141 1369Z" />
-<glyph unicode="j" horiz-adv-x="489" d="M331 1082V-125Q331 -437 48 -437Q-13 -437 -65 -419V-271Q-33 -279 19 -279Q81 -279 113 -246T146 -129V1082H331ZM127 1369Q127 1413 154 1444T235 1476Q289 1476 317 1445T345 1369T317 1294T235 1264T154 1294T127 1369Z" />
-<glyph unicode="k" horiz-adv-x="1038" d="M442 501L326 380V0H141V1536H326V607L425 726L762 1082H987L566 630L1036 0H819L442 501Z" />
-<glyph unicode="l" horiz-adv-x="497" d="M341 0H156V1536H341V0Z" />
-<glyph unicode="m" horiz-adv-x="1795" d="M314 1082L319 962Q438 1102 640 1102Q867 1102 949 928Q1003 1006 1089 1054T1294 1102Q1650 1102 1656 725V0H1471V714Q1471 830 1418 887T1240 945Q1137 945 1069 884T990 718V0H804V709Q804 945 573 945Q391 945
-324 790V0H139V1082H314Z" />
-<glyph unicode="n" horiz-adv-x="1130" d="M315 1082L321 946Q445 1102 645 1102Q988 1102 991 715V0H806V716Q805 833 753 889T589 945Q499 945 431 897T325 771V0H140V1082H315Z" />
-<glyph unicode="o" horiz-adv-x="1168" d="M91 551Q91 710 153 837T327 1033T582 1102Q803 1102 939 949T1076 542V529Q1076 371 1016 246T843 50T584 -20Q364 -20 228 133T91 538V551ZM277 529Q277 349 360 240T584 131Q725 131 808 241T891 551Q891 729 807
-839T582 950Q445 950 361 841T277 529Z" />
-<glyph unicode="p" horiz-adv-x="1149" d="M1054 529Q1054 282 941 131T635 -20Q438 -20 325 105V-416H140V1082H309L318 962Q431 1102 632 1102Q827 1102 940 955T1054 546V529ZM869 550Q869 733 791 839T577 945Q409 945 325 796V279Q408 131 579 131Q712 131
-790 236T869 550Z" />
-<glyph unicode="q" horiz-adv-x="1164" d="M95 550Q95 805 212 953T526 1102Q718 1102 829 973L837 1082H1007V-416H822V100Q710 -20 524 -20Q328 -20 212 132T95 537V550ZM280 529Q280 343 358 237T570 131Q735 131 822 277V807Q734 950 572 950Q438 950 359
-844T280 529Z" />
-<glyph unicode="r" horiz-adv-x="693" d="M663 916Q621 923 572 923Q390 923 325 768V0H140V1082H320L323 957Q414 1102 581 1102Q635 1102 663 1088V916Z" />
-<glyph unicode="s" horiz-adv-x="1056" d="M770 287Q770 362 714 403T517 475T294 547T172 647T132 785Q132 918 244 1010T532 1102Q716 1102 830 1007T945 764H759Q759 840 695 895T532 950Q431 950 374 906T317 791Q317 724 370 690T561 625T786 551T913 448T955
-300Q955 155 839 68T538 -20Q408 -20 308 26T152 154T95 333H280Q285 240 354 186T538 131Q643 131 706 173T770 287Z" />
-<glyph unicode="t" horiz-adv-x="669" d="M391 1344V1082H593V939H391V268Q391 203 418 171T510 138Q542 138 598 150V0Q525 -20 456 -20Q332 -20 269 55T206 268V939H9V1082H206V1344H391Z" />
-<glyph unicode="u" horiz-adv-x="1129" d="M808 107Q700 -20 491 -20Q318 -20 228 80T136 378V1082H321V383Q321 137 521 137Q733 137 803 295V1082H988V0H812L808 107Z" />
-<glyph unicode="v" horiz-adv-x="992" d="M497 251L765 1082H954L566 0H425L33 1082H222L497 251Z" />
-<glyph unicode="w" horiz-adv-x="1539" d="M1098 255L1306 1082H1491L1176 0H1026L763 820L507 0H357L43 1082H227L440 272L692 1082H841L1098 255Z" />
-<glyph unicode="x" horiz-adv-x="1015" d="M503 687L743 1082H959L605 547L970 0H756L506 405L256 0H41L406 547L52 1082H266L503 687Z" />
-<glyph unicode="y" horiz-adv-x="969" d="M494 271L746 1082H944L509 -167Q408 -437 188 -437L153 -434L84 -421V-271L134 -275Q228 -275 280 -237T367 -98L408 12L22 1082H224L494 271Z" />
-<glyph unicode="z" horiz-adv-x="1015" d="M314 151H947V0H88V136L685 929H97V1082H917V951L314 151Z" />
-<glyph unicode="{" horiz-adv-x="693" d="M632 -366Q455 -316 366 -202T276 101V300Q276 543 64 543V688Q276 688 276 930V1138Q278 1321 365 1433T632 1597L670 1482Q461 1415 461 1133V931Q461 704 294 615Q461 525 461 296V90Q464 -185 670 -251L632 -366Z" />
-<glyph unicode="|" horiz-adv-x="499" d="M324 -270H175V1456H324V-270Z" />
-<glyph unicode="}" horiz-adv-x="693" d="M19 -251Q222 -186 229 80V300Q229 531 410 615Q229 697 229 930V1133Q229 1415 20 1482L58 1597Q235 1547 324 1435T414 1137V927Q414 688 626 688V543Q414 543 414 300V98Q414 -90 324 -203T58 -366L19 -251Z" />
-<glyph unicode="~" horiz-adv-x="1393" d="M1263 777Q1263 619 1170 511T939 402Q867 402 803 428T655 529T533 621T454 639Q376 639 334 586T292 438L131 436Q131 596 223 699T454 802Q530 802 600 770T758 658T910 567L939 565Q1015 565 1062 623T1110 776L1263 777Z" />
-<glyph unicode="&#xa0;" horiz-adv-x="507" />
-<glyph unicode="&#xa1;" horiz-adv-x="499" d="M170 684H338L351 -360H157L170 684ZM358 996Q358 951 331 920T249 889T167 920T139 996T167 1071T249 1101T330 1071T358 996Z" />
-<glyph unicode="&#xa2;" horiz-adv-x="1120" d="M586 131Q686 131 760 191T842 341H1017Q1011 215 912 115T669 -12V-245H484V-11Q305 23 205 165T105 527V562Q105 774 206 916T484 1092V1318H669V1095Q819 1072 915 966T1017 710H842Q834 815 763 882T586 950Q445
-950 368 849T290 555V520Q290 333 367 232T586 131Z" />
-<glyph unicode="&#xa3;" horiz-adv-x="1190" d="M449 622L457 402Q457 248 395 157H1128L1127 0H95V157H172Q212 166 237 231T264 393V401L256 622H91V779H251L242 1039Q242 1238 364 1357T687 1476Q877 1476 988 1370T1099 1087H908Q908 1194 845 1256T670 1318Q565
-1318 500 1241T435 1039L444 779H763V622H449Z" />
-<glyph unicode="&#xa4;" horiz-adv-x="1460" d="M1103 112Q944 -20 735 -20Q528 -20 369 110L235 -26L105 109L244 250Q140 406 140 608Q140 814 252 977L105 1128L235 1264L382 1114Q540 1234 735 1234Q931 1234 1090 1113L1239 1265L1371 1128L1220 974Q1330
-811 1330 608Q1330 412 1228 253L1371 109L1239 -27L1103 112ZM311 608Q311 485 368 379T524 212T735 151T946 212T1100 379T1157 608Q1157 730 1101 835T946 1001T735 1062Q622 1062 524 1002T369 836T311 608Z" />
-<glyph unicode="&#xa5;" horiz-adv-x="1075" d="M539 793L847 1456H1060L693 736H954V611H630V446H954V322H630V0H437V322H119V446H437V611H119V736H382L15 1456H231L539 793Z" />
-<glyph unicode="&#xa6;" horiz-adv-x="491" d="M147 -270V521H333V-270H147ZM333 698H147V1456H333V698Z" />
-<glyph unicode="&#xa7;" horiz-adv-x="1256" d="M1145 431Q1145 242 959 157Q1028 108 1064 40T1100 -128Q1100 -296 970 -395T612 -495Q500 -495 400 -467T229 -382Q90 -269 90 -64L276 -62Q276 -192 366 -267T612 -343Q748 -343 831 -285T914 -130Q914 -41 843
-11T563 126Q381 174 285 229T143 362T96 551Q96 737 278 825Q212 874 177 942T141 1110Q141 1276 274 1376T630 1476Q862 1476 992 1363T1122 1045H937Q937 1170 853 1247T630 1325Q488 1325 408 1268T327 1112Q327 1043 355 1003T450 931T661 858T889 782T1030
-698T1116 585T1145 431ZM602 691Q512 715 437 742Q357 723 320 673T282 553Q282 483 309 443T402 370T611 296T797 238Q875 258 917 308T959 428Q959 516 890 570T602 691Z" />
-<glyph unicode="&#xa8;" horiz-adv-x="856" d="M101 1371Q101 1416 128 1446T210 1477T292 1447T320 1371T292 1296T210 1266T129 1296T101 1371ZM531 1369Q531 1414 558 1445T640 1476T722 1445T750 1369T722 1294T640 1264T559 1294T531 1369Z" />
-<glyph unicode="&#xa9;" horiz-adv-x="1609" d="M1119 597Q1119 444 1033 364T788 283Q631 283 537 388T442 676V786Q442 962 537 1067T788 1173Q948 1173 1034 1091T1120 860H974Q974 959 927 1001T788 1044Q694 1044 640 975T586 783V670Q586 550 640 481T788
-412Q880 412 926 454T973 597H1119ZM206 729Q206 557 286 411T503 181T801 98T1098 181T1315 410T1395 729Q1395 899 1316 1044T1100 1272T801 1356Q641 1356 503 1274T286 1045T206 729ZM91 729Q91 931 184 1104T443 1376T801 1476T1158 1377T1416 1104T1510 729Q1510
-532 1420 360T1165 84T801 -21Q604 -21 439 82T182 358T91 729Z" />
-<glyph unicode="&#xaa;" horiz-adv-x="915" d="M618 705Q606 739 600 777Q524 691 396 691Q277 691 212 753T147 918Q147 1029 230 1089T486 1149H594V1201Q594 1336 470 1336Q401 1336 362 1309T322 1231L161 1243Q161 1346 247 1411T470 1476Q603 1476 680 1405T757
-1199V883Q757 786 783 705H618ZM435 828Q478 828 522 848T594 895V1037H482Q399 1036 355 1005T310 922Q310 828 435 828Z" />
-<glyph unicode="&#xab;" horiz-adv-x="961" d="M536 804L794 407H653L358 795V814L653 1203H794L536 804ZM610 548L868 151H727L432 539V558L727 947H868L610 548Z" />
-<glyph unicode="&#xac;" horiz-adv-x="1134" d="M958 375H772V639H127V800H958V375Z" />
-<glyph unicode="&#xad;" horiz-adv-x="565" d="M525 543H37V694H525V543Z" />
-<glyph unicode="&#xae;" horiz-adv-x="1610" d="M90 729Q90 931 183 1104T442 1376T800 1476T1157 1377T1415 1104T1509 729Q1509 532 1419 360T1164 84T800 -21Q603 -21 438 82T181 358T90 729ZM205 729Q205 557 285 411T502 181T800 98Q961 98 1099 182T1315
-412T1394 729Q1394 900 1316 1044T1099 1272T800 1356Q640 1356 502 1274T285 1045T205 729ZM653 654V316H512V1165H788Q941 1165 1025 1100T1110 909Q1110 786 982 721Q1104 671 1105 517V456Q1105 370 1122 332V316H977Q963 352 963 444T960 554Q944 650 829
-654H653ZM653 782H809Q881 784 925 817T969 904Q969 977 930 1007T791 1038H653V782Z" />
-<glyph unicode="&#xaf;" horiz-adv-x="938" d="M814 1302H142V1445H814V1302Z" />
-<glyph unicode="&#xb0;" horiz-adv-x="765" d="M130 1216Q130 1320 204 1398T385 1476Q489 1476 562 1399T636 1216Q636 1110 563 1035T385 960Q280 960 205 1035T130 1216ZM385 1088Q439 1088 476 1123T513 1216Q513 1274 476 1311T385 1349Q330 1349 293 1310T255
-1216T292 1125T385 1088Z" />
-<glyph unicode="&#xb1;" horiz-adv-x="1094" d="M649 854H1013V703H649V289H482V703H97V854H482V1267H649V854ZM970 0H135V152H970V0Z" />
-<glyph unicode="&#xb2;" horiz-adv-x="751" d="M683 667H84V775L384 1057Q493 1159 493 1228Q493 1277 461 1307T369 1338Q294 1338 259 1300T223 1205H66Q66 1319 149 1393T365 1467T574 1404T651 1230Q651 1126 544 1019L460 940L284 795H683V667Z" />
-<glyph unicode="&#xb3;" horiz-adv-x="751" d="M265 1126H349Q423 1126 459 1156T495 1235Q495 1280 464 1309T362 1338Q305 1338 268 1313T230 1246H73Q73 1344 154 1405T360 1467Q497 1467 575 1407T653 1242Q653 1187 618 1142T517 1071Q666 1030 666 887Q666
-781 581 719T360 656Q228 656 145 719T62 889H220Q220 844 259 814T366 784Q436 784 472 814T509 895Q509 1008 353 1010H265V1126Z" />
-<glyph unicode="&#xb4;" horiz-adv-x="642" d="M316 1536H540L272 1242H123L316 1536Z" />
-<glyph unicode="&#xb5;" horiz-adv-x="1160" d="M339 1082V449Q340 286 391 208T559 130Q758 130 820 282V1082H1006V0H839L830 115Q737 -20 567 -20Q420 -20 339 53V-416H154V1082H339Z" />
-<glyph unicode="&#xb6;" horiz-adv-x="1001" d="M646 0V520H562Q332 520 200 647T67 988Q67 1201 200 1328T563 1456H832V0H646Z" />
-<glyph unicode="&#xb7;" horiz-adv-x="534" d="M147 729Q147 777 175 809T261 841T347 809T377 729Q377 682 348 651T261 619T176 650T147 729Z" />
-<glyph unicode="&#xb8;" horiz-adv-x="507" d="M285 0L273 -52Q426 -79 426 -225Q426 -322 346 -378T123 -435L116 -328Q195 -328 238 -302T282 -229Q282 -185 250 -164T120 -134L152 0H285Z" />
-<glyph unicode="&#xb9;" horiz-adv-x="751" d="M495 667H338V1268L122 1211V1339L477 1456H495V667Z" />
-<glyph unicode="&#xba;" horiz-adv-x="931" d="M122 1123Q122 1281 216 1378T464 1476Q619 1476 713 1380T807 1117V1043Q807 884 714 787T466 690T217 787T122 1049V1123ZM285 1043Q285 943 333 886T466 829Q549 829 596 886T644 1045V1123Q644 1222 596 1279T464
-1336Q383 1336 335 1281T285 1129V1043Z" />
-<glyph unicode="&#xbb;" horiz-adv-x="960" d="M244 949L539 560V541L244 152H102L360 550L102 949H244ZM593 949L888 560V541L593 152H451L709 550L451 949H593Z" />
-<glyph unicode="&#xbc;" horiz-adv-x="1500" d="M458 664H301V1265L85 1208V1336L440 1453H458V664ZM443 118L339 184L1050 1322L1154 1256L443 118ZM1318 299H1425V169H1318V0H1161V169H786L780 271L1157 789H1318V299ZM938 299H1161V588L1144 560L938 299Z" />
-<glyph unicode="&#xbd;" horiz-adv-x="1589" d="M399 118L295 184L1006 1322L1110 1256L399 118ZM453 664H296V1265L80 1208V1336L435 1453H453V664ZM1481 0H882V108L1182 390Q1291 492 1291 561Q1291 610 1259 640T1167 671Q1092 671 1057 633T1021 538H864Q864
-652 947 726T1163 800T1372 737T1449 563Q1449 459 1342 352L1258 273L1082 128H1481V0Z" />
-<glyph unicode="&#xbe;" horiz-adv-x="1593" d="M570 118L466 184L1177 1322L1281 1256L570 118ZM1410 299H1517V169H1410V0H1253V169H878L872 271L1249 789H1410V299ZM1030 299H1253V588L1236 560L1030 299ZM314 1126H398Q472 1126 508 1156T544 1235Q544 1280
-513 1309T411 1338Q354 1338 317 1313T279 1246H122Q122 1344 203 1405T409 1467Q546 1467 624 1407T702 1242Q702 1187 667 1142T566 1071Q715 1030 715 887Q715 781 630 719T409 656Q277 656 194 719T111 889H269Q269 844 308 814T415 784Q485 784 521 814T558
-895Q558 1008 402 1010H314V1126Z" />
-<glyph unicode="&#xbf;" horiz-adv-x="969" d="M588 680Q587 574 567 511T498 388T358 233T255 37L253 0Q253 -109 311 -166T478 -224Q578 -224 640 -168T703 -20H888Q886 -181 774 -283T478 -385Q282 -385 175 -285T68 -5Q68 168 228 343L337 456Q403 534 403
-680H588ZM596 997Q596 952 569 921T487 890T405 921T377 997Q377 1041 405 1071T487 1101T568 1071T596 997Z" />
-<glyph unicode="&#xc0;" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538ZM778 1552H619L361 1846H584L778 1552Z" />
-<glyph unicode="&#xc1;" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538ZM763 1846H987L719 1552H570L763 1846Z" />
-<glyph unicode="&#xc2;" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538ZM975 1572V1562H822L672 1732L523 1562H370V1574L616 1846H728L975 1572Z" />
-<glyph unicode="&#xc3;" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538ZM1027 1814Q1027 1706 966 1639T812 1572Q771 1572 741 1582T663 1623T593 1660T543 1667Q502 1667 473 1636T444 1555L320
-1562Q320 1669 380 1739T534 1809Q569 1809 597 1799T673 1760T746 1722T803 1713Q846 1713 874 1747T903 1826L1027 1814Z" />
-<glyph unicode="&#xc4;" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538ZM350 1681Q350 1726 377 1756T459 1787T541 1757T569 1681T541 1606T459 1576T378 1606T350 1681ZM780 1679Q780 1724
-807 1755T889 1786T971 1755T999 1679T971 1604T889 1574T808 1604T780 1679Z" />
-<glyph unicode="&#xc5;" horiz-adv-x="1336" d="M973 380H363L226 0H28L584 1456H752L1309 0H1112L973 380ZM421 538H916L668 1219L421 538ZM887 1729Q887 1642 825 1584T672 1525Q580 1525 519 1584T457 1729T518 1876T672 1937T825 1876T887 1729ZM556 1729Q556
-1682 589 1648T672 1614Q720 1614 754 1647T788 1729T755 1812T672 1847Q622 1847 589 1812T556 1729Z" />
-<glyph unicode="&#xc6;" horiz-adv-x="1914" d="M1879 0H996L981 353H417L212 0H-14L866 1456H1817V1304H1126L1146 833H1736V682H1152L1174 151H1879V0ZM518 527H974L943 1260L518 527Z" />
-<glyph unicode="&#xc7;" horiz-adv-x="1333" d="M1240 462Q1213 231 1070 106T688 -20Q430 -20 275 165T119 660V800Q119 1003 191 1157T397 1393T705 1476Q937 1476 1077 1347T1240 988H1047Q1022 1162 939 1240T705 1318Q521 1318 417 1182T312 795V654Q312
-417 411 277T688 137Q848 137 933 209T1047 462H1240ZM751 -9L739 -61Q892 -88 892 -234Q892 -331 812 -387T589 -444L582 -337Q661 -337 704 -311T748 -238Q748 -194 716 -173T586 -143L618 -9H751Z" />
-<glyph unicode="&#xc8;" horiz-adv-x="1164" d="M992 673H361V157H1094V0H169V1456H1084V1298H361V830H992V673ZM725 1564H566L308 1858H531L725 1564Z" />
-<glyph unicode="&#xc9;" horiz-adv-x="1164" d="M992 673H361V157H1094V0H169V1456H1084V1298H361V830H992V673ZM710 1858H934L666 1564H517L710 1858Z" />
-<glyph unicode="&#xca;" horiz-adv-x="1164" d="M992 673H361V157H1094V0H169V1456H1084V1298H361V830H992V673ZM922 1584V1574H769L619 1744L470 1574H317V1586L563 1858H675L922 1584Z" />
-<glyph unicode="&#xcb;" horiz-adv-x="1164" d="M992 673H361V157H1094V0H169V1456H1084V1298H361V830H992V673ZM297 1693Q297 1738 324 1768T406 1799T488 1769T516 1693T488 1618T406 1588T325 1618T297 1693ZM727 1691Q727 1736 754 1767T836 1798T918 1767T946
-1691T918 1616T836 1586T755 1616T727 1691Z" />
-<glyph unicode="&#xcc;" horiz-adv-x="557" d="M375 0H183V1456H375V0ZM385 1564H226L-32 1858H191L385 1564Z" />
-<glyph unicode="&#xcd;" horiz-adv-x="557" d="M375 0H183V1456H375V0ZM369 1858H593L325 1564H176L369 1858Z" />
-<glyph unicode="&#xce;" horiz-adv-x="557" d="M375 0H183V1456H375V0ZM582 1584V1574H429L279 1744L130 1574H-23V1586L223 1858H335L582 1584Z" />
-<glyph unicode="&#xcf;" horiz-adv-x="557" d="M375 0H183V1456H375V0ZM-43 1693Q-43 1738 -16 1768T66 1799T148 1769T176 1693T148 1618T66 1588T-15 1618T-43 1693ZM387 1691Q387 1736 414 1767T496 1798T578 1767T606 1691T578 1616T496 1586T415 1616T387 1691Z" />
-<glyph unicode="&#xd0;" horiz-adv-x="1373" d="M199 0V666H7V817H199V1456H610Q800 1456 946 1372T1171 1133T1252 777V684Q1252 478 1173 323T946 85T602 0H199ZM643 666H391V157H592Q814 157 937 294T1062 680V773Q1062 1021 946 1158T615 1298H391V817H643V666Z" />
-<glyph unicode="&#xd1;" horiz-adv-x="1460" d="M1288 0H1095L362 1122V0H169V1456H362L1097 329V1456H1288V0ZM1081 1814Q1081 1706 1020 1639T866 1572Q825 1572 795 1582T717 1623T647 1660T597 1667Q556 1667 527 1636T498 1555L374 1562Q374 1669 434 1739T588
-1809Q623 1809 651 1799T727 1760T800 1722T857 1713Q900 1713 928 1747T957 1826L1081 1814Z" />
-<glyph unicode="&#xd2;" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q533 -20 400 64T194 305T118 668V773Q118 983 191 1144T397 1390T703 1476Q878 1476 1011 1392T1217 1147T1289 773V681ZM1098 775Q1098 1034 994 1172T703 1311Q521
-1311 417 1173T309 788V681Q309 430 414 287T705 143Q891 143 993 278T1098 667V775ZM812 1554H653L395 1848H618L812 1554Z" />
-<glyph unicode="&#xd3;" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q533 -20 400 64T194 305T118 668V773Q118 983 191 1144T397 1390T703 1476Q878 1476 1011 1392T1217 1147T1289 773V681ZM1098 775Q1098 1034 994 1172T703 1311Q521
-1311 417 1173T309 788V681Q309 430 414 287T705 143Q891 143 993 278T1098 667V775ZM797 1848H1021L753 1554H604L797 1848Z" />
-<glyph unicode="&#xd4;" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q533 -20 400 64T194 305T118 668V773Q118 983 191 1144T397 1390T703 1476Q878 1476 1011 1392T1217 1147T1289 773V681ZM1098 775Q1098 1034 994 1172T703 1311Q521
-1311 417 1173T309 788V681Q309 430 414 287T705 143Q891 143 993 278T1098 667V775ZM1009 1574V1564H856L706 1734L557 1564H404V1576L650 1848H762L1009 1574Z" />
-<glyph unicode="&#xd5;" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q533 -20 400 64T194 305T118 668V773Q118 983 191 1144T397 1390T703 1476Q878 1476 1011 1392T1217 1147T1289 773V681ZM1098 775Q1098 1034 994 1172T703 1311Q521
-1311 417 1173T309 788V681Q309 430 414 287T705 143Q891 143 993 278T1098 667V775ZM1061 1816Q1061 1708 1000 1641T846 1574Q805 1574 775 1584T697 1625T627 1662T577 1669Q536 1669 507 1638T478 1557L354 1564Q354 1671 414 1741T568 1811Q603 1811 631 1801T707
-1762T780 1724T837 1715Q880 1715 908 1749T937 1828L1061 1816Z" />
-<glyph unicode="&#xd6;" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q533 -20 400 64T194 305T118 668V773Q118 983 191 1144T397 1390T703 1476Q878 1476 1011 1392T1217 1147T1289 773V681ZM1098 775Q1098 1034 994 1172T703 1311Q521
-1311 417 1173T309 788V681Q309 430 414 287T705 143Q891 143 993 278T1098 667V775ZM384 1683Q384 1728 411 1758T493 1789T575 1759T603 1683T575 1608T493 1578T412 1608T384 1683ZM814 1681Q814 1726 841 1757T923 1788T1005 1757T1033 1681T1005 1606T923
-1576T842 1606T814 1681Z" />
-<glyph unicode="&#xd7;" horiz-adv-x="1092" d="M89 329L419 665L91 1000L210 1123L539 788L868 1123L987 1000L659 665L989 329L870 206L539 543L208 206L89 329Z" />
-<glyph unicode="&#xd8;" horiz-adv-x="1408" d="M1289 681Q1289 467 1217 308T1013 64T705 -20Q534 -20 403 62L306 -93H164L308 138Q118 330 118 690V773Q118 983 191 1144T397 1390T703 1476Q917 1476 1065 1351L1168 1516H1309L1150 1261Q1287 1074 1289 780V681ZM309
-681Q309 437 407 296L971 1200Q869 1311 703 1311Q521 1311 417 1173T309 788V681ZM1098 775Q1098 957 1042 1088L493 207Q584 143 705 143Q891 143 993 278T1098 667V775Z" />
-<glyph unicode="&#xd9;" horiz-adv-x="1328" d="M1194 1456V466Q1193 260 1065 129T716 -18L665 -20Q426 -20 284 109T140 464V1456H330V470Q330 312 417 225T665 137Q828 137 914 224T1001 469V1456H1194ZM773 1552H614L356 1846H579L773 1552Z" />
-<glyph unicode="&#xda;" horiz-adv-x="1328" d="M1194 1456V466Q1193 260 1065 129T716 -18L665 -20Q426 -20 284 109T140 464V1456H330V470Q330 312 417 225T665 137Q828 137 914 224T1001 469V1456H1194ZM758 1846H982L714 1552H565L758 1846Z" />
-<glyph unicode="&#xdb;" horiz-adv-x="1328" d="M1194 1456V466Q1193 260 1065 129T716 -18L665 -20Q426 -20 284 109T140 464V1456H330V470Q330 312 417 225T665 137Q828 137 914 224T1001 469V1456H1194ZM970 1572V1562H817L667 1732L518 1562H365V1574L611
-1846H723L970 1572Z" />
-<glyph unicode="&#xdc;" horiz-adv-x="1328" d="M1194 1456V466Q1193 260 1065 129T716 -18L665 -20Q426 -20 284 109T140 464V1456H330V470Q330 312 417 225T665 137Q828 137 914 224T1001 469V1456H1194ZM345 1681Q345 1726 372 1756T454 1787T536 1757T564
-1681T536 1606T454 1576T373 1606T345 1681ZM775 1679Q775 1724 802 1755T884 1786T966 1755T994 1679T966 1604T884 1574T803 1604T775 1679Z" />
-<glyph unicode="&#xdd;" horiz-adv-x="1230" d="M613 725L993 1456H1211L709 543V0H517V543L15 1456H235L613 725ZM708 1846H932L664 1552H515L708 1846Z" />
-<glyph unicode="&#xde;" horiz-adv-x="1210" d="M352 1456V1163H631Q778 1163 888 1111T1057 961T1117 738Q1117 544 985 429T626 313H352V0H166V1456H352ZM352 1011V465H629Q771 465 851 540T931 736Q931 859 851 934T635 1011H352Z" />
-<glyph unicode="&#xdf;" horiz-adv-x="1218" d="M324 0H139V1111Q139 1319 242 1436T532 1554Q712 1554 810 1465T909 1216Q909 1091 845 990T781 819Q781 768 818 721T950 601T1087 461T1130 317Q1130 158 1029 69T745 -20Q664 -20 574 2T445 52L488 207Q537
-175 604 153T725 131Q832 131 888 178T945 307Q945 359 908 407T777 528T639 671T595 821Q595 910 664 1013T734 1201Q734 1295 682 1348T542 1402Q324 1402 324 1109V0Z" />
-<glyph unicode="&#xe0;" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141ZM687 1242H528L270 1536H493L687 1242Z" />
-<glyph unicode="&#xe1;" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141ZM672 1536H896L628 1242H479L672 1536Z" />
-<glyph unicode="&#xe2;" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141ZM884 1262V1252H731L581 1422L432 1252H279V1264L525 1536H637L884 1262Z" />
-<glyph unicode="&#xe3;" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141ZM936 1504Q936 1396 875 1329T721 1262Q680 1262 650 1272T572 1313T502 1350T452 1357Q411 1357 382 1326T353 1245L229 1252Q229 1359 289
-1429T443 1499Q478 1499 506 1489T582 1450T655 1412T712 1403Q755 1403 783 1437T812 1516L936 1504Z" />
-<glyph unicode="&#xe4;" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141ZM259 1371Q259 1416 286 1446T368 1477T450 1447T478 1371T450 1296T368 1266T287 1296T259 1371ZM689 1369Q689 1414 716 1445T798 1476T880
-1445T908 1369T880 1294T798 1264T717 1294T689 1369Z" />
-<glyph unicode="&#xe5;" horiz-adv-x="1114" d="M808 0Q792 32 782 114Q653 -20 474 -20Q314 -20 212 70T109 300Q109 469 237 562T599 656H779V741Q779 838 721 895T550 953Q451 953 384 903T317 782H131Q131 863 188 938T344 1058T561 1102Q748 1102 854 1009T964
-751V253Q964 104 1002 16V0H808ZM501 141Q588 141 666 186T779 303V525H634Q294 525 294 326Q294 239 352 190T501 141ZM796 1419Q796 1332 734 1274T581 1215Q489 1215 428 1274T366 1419T427 1566T581 1627T734 1566T796 1419ZM465 1419Q465 1372 498 1338T581
-1304Q629 1304 663 1337T697 1419T664 1502T581 1537Q531 1537 498 1502T465 1419Z" />
-<glyph unicode="&#xe6;" horiz-adv-x="1729" d="M1262 -20Q1001 -20 865 160Q800 74 687 27T433 -20Q266 -20 172 66T78 304Q78 461 191 548T526 635H749V720Q749 827 694 888T535 950Q430 950 360 895T290 759L106 778Q106 921 227 1011T535 1102Q650 1102 738
-1061T876 936Q939 1015 1026 1058T1218 1102Q1428 1102 1544 974T1660 612V497H932Q939 321 1026 226T1262 130Q1410 130 1531 206L1578 237L1642 101Q1484 -20 1262 -20ZM469 130Q541 130 620 167T749 258V495H521Q404 493 334 438T264 300Q264 223 317 177T469
-130ZM1218 950Q1103 950 1029 865T937 640H1475V671Q1475 803 1408 876T1218 950Z" />
-<glyph unicode="&#xe7;" horiz-adv-x="1072" d="M574 131Q673 131 747 191T829 341H1004Q999 248 940 164T783 30T574 -20Q353 -20 223 127T92 531V562Q92 720 150 843T316 1034T573 1102Q755 1102 875 993T1004 710H829Q821 815 750 882T573 950Q432 950 355
-849T277 555V520Q277 333 354 232T574 131ZM604 -9L592 -61Q745 -88 745 -234Q745 -331 665 -387T442 -444L435 -337Q514 -337 557 -311T601 -238Q601 -194 569 -173T439 -143L471 -9H604Z" />
-<glyph unicode="&#xe8;" horiz-adv-x="1085" d="M589 -20Q369 -20 231 124T93 511V545Q93 706 154 832T326 1030T566 1102Q777 1102 894 963T1011 565V488H278Q282 328 371 230T599 131Q697 131 765 171T884 277L997 189Q861 -20 589 -20ZM566 950Q454 950 378
-869T284 640H826V654Q818 795 750 872T566 950ZM671 1242H512L254 1536H477L671 1242Z" />
-<glyph unicode="&#xe9;" horiz-adv-x="1085" d="M589 -20Q369 -20 231 124T93 511V545Q93 706 154 832T326 1030T566 1102Q777 1102 894 963T1011 565V488H278Q282 328 371 230T599 131Q697 131 765 171T884 277L997 189Q861 -20 589 -20ZM566 950Q454 950 378
-869T284 640H826V654Q818 795 750 872T566 950ZM656 1536H880L612 1242H463L656 1536Z" />
-<glyph unicode="&#xea;" horiz-adv-x="1085" d="M589 -20Q369 -20 231 124T93 511V545Q93 706 154 832T326 1030T566 1102Q777 1102 894 963T1011 565V488H278Q282 328 371 230T599 131Q697 131 765 171T884 277L997 189Q861 -20 589 -20ZM566 950Q454 950 378
-869T284 640H826V654Q818 795 750 872T566 950ZM868 1262V1252H715L565 1422L416 1252H263V1264L509 1536H621L868 1262Z" />
-<glyph unicode="&#xeb;" horiz-adv-x="1085" d="M589 -20Q369 -20 231 124T93 511V545Q93 706 154 832T326 1030T566 1102Q777 1102 894 963T1011 565V488H278Q282 328 371 230T599 131Q697 131 765 171T884 277L997 189Q861 -20 589 -20ZM566 950Q454 950 378
-869T284 640H826V654Q818 795 750 872T566 950ZM243 1371Q243 1416 270 1446T352 1477T434 1447T462 1371T434 1296T352 1266T271 1296T243 1371ZM673 1369Q673 1414 700 1445T782 1476T864 1445T892 1369T864 1294T782 1264T701 1294T673 1369Z" />
-<glyph unicode="&#xec;" horiz-adv-x="506" d="M341 0H155V1082H341V0ZM615 1497H456L198 1791H421L615 1497Z" />
-<glyph unicode="&#xed;" horiz-adv-x="506" d="M341 0H155V1082H341V0ZM343 1791H567L299 1497H150L343 1791Z" />
-<glyph unicode="&#xee;" horiz-adv-x="506" d="M341 0H155V1082H341V0ZM556 1261V1251H403L253 1421L104 1251H-49V1263L197 1535H309L556 1261Z" />
-<glyph unicode="&#xef;" horiz-adv-x="506" d="M341 0H155V1082H341V0ZM-69 1370Q-69 1415 -42 1445T40 1476T122 1446T150 1370T122 1295T40 1265T-41 1295T-69 1370ZM361 1368Q361 1413 388 1444T470 1475T552 1444T580 1368T552 1293T470 1263T389 1293T361 1368Z" />
-<glyph unicode="&#xf0;" horiz-adv-x="1200" d="M820 1301Q1069 1037 1069 628V535Q1069 377 1011 251T844 52T602 -20Q467 -20 357 44T187 221T126 467Q126 614 182 730T341 912T574 977Q737 977 858 863Q810 1058 669 1199L451 1051L378 1150L570 1281Q438 1372
-255 1421L312 1580Q551 1526 726 1387L915 1516L988 1416L820 1301ZM884 635L882 691Q849 752 780 788T618 825Q473 825 392 730T311 467Q311 327 394 229T606 131Q731 131 807 244T884 541V635Z" />
-<glyph unicode="&#xf1;" horiz-adv-x="1130" d="M315 1082L321 946Q445 1102 645 1102Q988 1102 991 715V0H806V716Q805 833 753 889T589 945Q499 945 431 897T325 771V0H140V1082H315ZM927 1504Q927 1396 866 1329T712 1262Q671 1262 641 1272T563 1313T493 1350T443
-1357Q402 1357 373 1326T344 1245L220 1252Q220 1359 280 1429T434 1499Q469 1499 497 1489T573 1450T646 1412T703 1403Q746 1403 774 1437T803 1516L927 1504Z" />
-<glyph unicode="&#xf2;" horiz-adv-x="1168" d="M91 551Q91 710 153 837T327 1033T582 1102Q803 1102 939 949T1076 542V529Q1076 371 1016 246T843 50T584 -20Q364 -20 228 133T91 538V551ZM277 529Q277 349 360 240T584 131Q725 131 808 241T891 551Q891 729
-807 839T582 950Q445 950 361 841T277 529ZM681 1242H522L264 1536H487L681 1242Z" />
-<glyph unicode="&#xf3;" horiz-adv-x="1168" d="M91 551Q91 710 153 837T327 1033T582 1102Q803 1102 939 949T1076 542V529Q1076 371 1016 246T843 50T584 -20Q364 -20 228 133T91 538V551ZM277 529Q277 349 360 240T584 131Q725 131 808 241T891 551Q891 729
-807 839T582 950Q445 950 361 841T277 529ZM666 1536H890L622 1242H473L666 1536Z" />
-<glyph unicode="&#xf4;" horiz-adv-x="1168" d="M91 551Q91 710 153 837T327 1033T582 1102Q803 1102 939 949T1076 542V529Q1076 371 1016 246T843 50T584 -20Q364 -20 228 133T91 538V551ZM277 529Q277 349 360 240T584 131Q725 131 808 241T891 551Q891 729
-807 839T582 950Q445 950 361 841T277 529ZM878 1262V1252H725L575 1422L426 1252H273V1264L519 1536H631L878 1262Z" />
-<glyph unicode="&#xf5;" horiz-adv-x="1168" d="M91 551Q91 710 153 837T327 1033T582 1102Q803 1102 939 949T1076 542V529Q1076 371 1016 246T843 50T584 -20Q364 -20 228 133T91 538V551ZM277 529Q277 349 360 240T584 131Q725 131 808 241T891 551Q891 729
-807 839T582 950Q445 950 361 841T277 529ZM930 1504Q930 1396 869 1329T715 1262Q674 1262 644 1272T566 1313T496 1350T446 1357Q405 1357 376 1326T347 1245L223 1252Q223 1359 283 1429T437 1499Q472 1499 500 1489T576 1450T649 1412T706 1403Q749 1403 777
-1437T806 1516L930 1504Z" />
-<glyph unicode="&#xf6;" horiz-adv-x="1168" d="M91 551Q91 710 153 837T327 1033T582 1102Q803 1102 939 949T1076 542V529Q1076 371 1016 246T843 50T584 -20Q364 -20 228 133T91 538V551ZM277 529Q277 349 360 240T584 131Q725 131 808 241T891 551Q891 729
-807 839T582 950Q445 950 361 841T277 529ZM253 1371Q253 1416 280 1446T362 1477T444 1447T472 1371T444 1296T362 1266T281 1296T253 1371ZM683 1369Q683 1414 710 1445T792 1476T874 1445T902 1369T874 1294T792 1264T711 1294T683 1369Z" />
-<glyph unicode="&#xf7;" horiz-adv-x="1169" d="M1069 600H71V784H1069V600ZM461 1098Q461 1146 489 1178T575 1210T661 1178T691 1098Q691 1051 662 1020T575 989T490 1020T461 1098ZM461 281Q461 329 489 361T575 393T661 361T691 281Q691 235 662 204T575 172T490
-203T461 281Z" />
-<glyph unicode="&#xf8;" horiz-adv-x="1160" d="M91 551Q91 710 152 836T326 1032T582 1102Q692 1102 786 1060L859 1208H983L881 1003Q1076 849 1076 529Q1076 371 1014 244T840 49T584 -20Q480 -20 394 15L320 -134H196L296 69Q91 218 91 551ZM276 529Q276 335
-373 224L716 918Q654 950 582 950Q444 950 360 841T276 529ZM890 551Q890 733 803 844L463 156Q518 131 584 131Q723 131 806 240T890 535V551Z" />
-<glyph unicode="&#xf9;" horiz-adv-x="1129" d="M808 107Q700 -20 491 -20Q318 -20 228 80T136 378V1082H321V383Q321 137 521 137Q733 137 803 295V1082H988V0H812L808 107ZM673 1242H514L256 1536H479L673 1242Z" />
-<glyph unicode="&#xfa;" horiz-adv-x="1129" d="M808 107Q700 -20 491 -20Q318 -20 228 80T136 378V1082H321V383Q321 137 521 137Q733 137 803 295V1082H988V0H812L808 107ZM658 1536H882L614 1242H465L658 1536Z" />
-<glyph unicode="&#xfb;" horiz-adv-x="1129" d="M808 107Q700 -20 491 -20Q318 -20 228 80T136 378V1082H321V383Q321 137 521 137Q733 137 803 295V1082H988V0H812L808 107ZM870 1262V1252H717L567 1422L418 1252H265V1264L511 1536H623L870 1262Z" />
-<glyph unicode="&#xfc;" horiz-adv-x="1129" d="M808 107Q700 -20 491 -20Q318 -20 228 80T136 378V1082H321V383Q321 137 521 137Q733 137 803 295V1082H988V0H812L808 107ZM245 1371Q245 1416 272 1446T354 1477T436 1447T464 1371T436 1296T354 1266T273 1296T245
-1371ZM675 1369Q675 1414 702 1445T784 1476T866 1445T894 1369T866 1294T784 1264T703 1294T675 1369Z" />
-<glyph unicode="&#xfd;" horiz-adv-x="969" d="M494 271L746 1082H944L509 -167Q408 -437 188 -437L153 -434L84 -421V-271L134 -275Q228 -275 280 -237T367 -98L408 12L22 1082H224L494 271ZM599 1536H823L555 1242H406L599 1536Z" />
-<glyph unicode="&#xfe;" horiz-adv-x="1180" d="M1063 529Q1063 282 950 131T644 -20Q447 -20 334 105V-416H149V1536H334V970Q447 1102 641 1102Q836 1102 949 955T1063 546V529ZM878 550Q878 733 800 839T586 945Q418 945 334 796V279Q417 131 588 131Q721 131
-799 236T878 550Z" />
-<glyph unicode="&#xff;" horiz-adv-x="969" d="M494 271L746 1082H944L509 -167Q408 -437 188 -437L153 -434L84 -421V-271L134 -275Q228 -275 280 -237T367 -98L408 12L22 1082H224L494 271ZM186 1371Q186 1416 213 1446T295 1477T377 1447T405 1371T377 1296T295
-1266T214 1296T186 1371ZM616 1369Q616 1414 643 1445T725 1476T807 1445T835 1369T807 1294T725 1264T644 1294T616 1369Z" />
-<glyph unicode="&#x2013;" horiz-adv-x="1344" d="M1421 651H419V802H1421V651Z" />
-<glyph unicode="&#x2014;" horiz-adv-x="1599" d="M1737 651H401V802H1737V651Z" />
-<glyph unicode="&#x2018;" horiz-adv-x="409" d="M270 1555L376 1483Q283 1356 280 1209V1073H96V1189Q96 1291 144 1391T270 1555Z" />
-<glyph unicode="&#x2019;" horiz-adv-x="409" d="M153 1046L48 1118Q141 1248 144 1392V1536H327V1406Q326 1306 278 1207T153 1046Z" />
-<glyph unicode="&#x201a;" horiz-adv-x="407" d="M141 -283L36 -210Q127 -83 130 63V181H315V81Q315 -20 266 -121T141 -283Z" />
-<glyph unicode="&#x201c;" horiz-adv-x="724" d="M278 1555L384 1483Q291 1356 288 1209V1073H104V1189Q104 1291 152 1391T278 1555ZM593 1555L699 1483Q606 1356 603 1209V1073H419V1189Q419 1291 467 1391T593 1555Z" />
-<glyph unicode="&#x201d;" horiz-adv-x="731" d="M165 1046L60 1118Q153 1248 156 1392V1536H339V1406Q338 1306 290 1207T165 1046ZM472 1046L367 1118Q460 1248 463 1392V1536H646V1406Q645 1306 597 1207T472 1046Z" />
-<glyph unicode="&#x201e;" horiz-adv-x="705" d="M141 -301L36 -229Q127 -92 130 61V246H315V82Q315 -26 266 -131T141 -301ZM437 -301L332 -229Q423 -92 426 61V246H612V82Q612 -25 564 -129T437 -301Z" />
-<glyph unicode="&#x2022;" horiz-adv-x="690" d="M138 772Q138 859 193 915T341 971Q432 971 489 917T546 769V732Q546 645 491 590T342 535Q249 535 194 590T138 734V772Z" />
-<glyph unicode="&#x2039;" horiz-adv-x="614" d="M286 550L544 153H403L108 541V560L403 949H544L286 550Z" />
-<glyph unicode="&#x203a;" horiz-adv-x="614" d="M231 949L526 560V541L231 152H89L347 550L89 949H231Z" />
-</font>
-</defs>
-</svg>
diff --git a/static/fonts/roboto-v18-latin-regular.ttf b/static/fonts/roboto-v18-latin-regular.ttf
deleted file mode 100644
index b91bf3f7e31942ea4c6b0f0fb68bf1bab8d76d6f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 35408
zcmbq+2Y3@lxAx5LN^-a43K+0#flYU}!8AkYy<;HsZi?w(ddFaT?<EPHfV=^MO#&vN
zCx9s-KnMW>fdnU{hk&*E-<j1~67YTZKL1@kvvqd%%$YN%&6yFQgpdI2Bw}vbsBshB
zES;5*DSdEvK+|?@JDz-Te+aHm6XH|Qv}5OnDgBH`2+5vH2))?0V@&+G(UwmM8C`(<
zefp2+JL<ELU3Uo?TZ#~|RsRX&%vJXowh)pv9M3xq8Z~&t#20<`6Ea}{-v4B9-?5{J
z2MI*^o$%ae@bIibI~MHq#<OaKWXv2gV8o=rAP+ksW6XH|V#vV01Bx@QO(tZ-0bC~!
z!40o`{SthCGp;KP88L2B-kmP^)`&;={?Xx?{rlG6Zdp#qurE>Oy%BvUjS|a?p15Z3
zn@9E?F|bVMT1LQEfal{zWsV(ZA3*@yltlJ?)R=*z-W&At0wI&kc;1}o*fX&bFeDN^
z@gzRPpNy7$j3!e+Evt{wN($Lt&-b2u?^{T$q;a}chzZLT%Gc}0F9<G3K)r6VBoMqQ
z>(qlmJ$Ud#u9wfBvX6SlmmjQxG1t%M&)B$#2vdY;qSQpi2%1DA#7ee0!s%q?7bTzi
zJQ74jp@Pk(v%dU5XRu8ZCcZKWlWe_&UfDt~B9QI&zvvWR10NFm7T~-AoHu~W)$6QY
zRnsGGh5gx0rg{N@#>P>Lm>?!5$A<*zBco`K-M*h)NEu$U=I|7{NeX`XVfDIoyVtHw
z@Re*SK(Oc;Re6%q#45(ff|tm!B*a(^g;vpM^(aJfq9rgv$96Qhd?sB?{n%bNN!dt$
z$!0s0G!cbd2fSe<oUBmc^#O=J8ZwQzFlrYZ%>bUGxeT6^VQ4Pr!=RsPEf-TNmxv{`
zvPy;4a=f{)_b#-0$K-mrJoPqO{czK04JfpF7_C7(b4a0;7_FuFo${;(5rE#36cHGK
zlpwN{5DX+CS#T90*pwITmbH6MJsYE0%5_-QfqHaU-r>t9jUT*fw|p!0Xso=T8<jzH
z<3idmhi+H;u#}^0U8oEaEVLiUj*PU&N+$hgQk4u<>+gw*d1_UT#6={lr4Z@K5bSBR
z`V_Lgk?nH>sk6Qypwcdvkw$BHp%wcmw$H8Xe1v)>Mny+OB_$@OBqaoggalg>qb!m7
z;Ghr*7eRVMuq6qP6M{k#;*-VnSsT9k{N(O6dyXHQKW5_ec{FZ+`!7CToqs)V<@`Bo
z>BM)ZCp5Ua<AZBK-`ou?y0m21l#zq7`cK@NvG;P|$&;ohXLHt0C+J&4?ay>`bZ3Y!
zDMO-2BB@EHs`V97MNzA-1s4|9#GoOsLaSFyu1RuMQ8eb3a=Ek^t>w^eF;<H)w~EXC
za>m>^=cSxv;k20)Bd3TKhQySZ*to#N<b?Q;VAR$U8I=^utD2OQ7zH%Y#AGvnVs?GN
z5TuKyp+k4inYVNItl9e(rMGC>wae-*LhapDzh}2n%<eSn(zSWhZi->3aBirye$KxA
z*-hu}-koD;Gq7Lh=4}QI>QH=j&fYyaP3P?0ouh9%uz%+kZ3p!4^hZN!Oha&;f%YQl
z58Y`}o<x%bvfwTBP!{+pt95}=xG2SlBeE<b4!MeFS#}U3tFVKyN+dg&)SH27meT4W
z#8ev3tYwY4;ZC}cBf>eW16{>A?{ZY7aB5))19cc^GHAmPYKhhZc@=c=Db&D-M+^#0
zNlpe1fvSPyclK>~de7R^-7<&KMvZn)DZJOW#ks*>p__cYYO=B=V)ur~2@@K{4`|h)
z4_z?SI)1|Prn^2lG%tNkhqlVJ+1u=U{vF$}@xzv*=-yIOW=~iuKJK%;V{F%Y?{v#V
zpBXGg5F6(|MwR>M9NY)MGJazVo<-N_Rw&EqcgQ_YsUob=4<jaUE303ORpQMb5Rek8
z7es?GFeKCv6)num`gK;+%Hy7NN$2rV^RkMBwh!rc+NsIpQA(oneP?C5@@QY5(Jc;A
z2s28eP-e<&Wzrx)FhnN@1STa4LUc+<K!A`k{<pc&8;=X=Tlz)MeLhiW{GBpb+0}gX
z1o|6|F<+xYY58`en=AX20VuPq&{ymXUg$^6YRgM#Uy1jO!qQd}Q_AXzqi0Mhbl{39
zI`Ha>p}IhWC`Qv3%C#D_hUW$^TDgXD>Fm_}!_&mCyRREX)0Ou}uJ57z){B~zCp{SC
zZOBR~Q94Sz!E;d<lWJ&iy|clsBIkU;5hjZXe9x31Y^7_JjC>`7uFV&H4=IWC%R_W8
zE32Gxk0z3DAmvN3vT`M-P+{c~hUjR{WP<ebhxU?=^jGdRo0GG9#lVYryP^;-_zFis
z_W=ZwBbPd1V5~POLhw~e(WgTAI`*yQkZcpkRkUGQ6*~rC#{lZj6`Ws<jZ0zj3sf2z
zwY=7t+O@~j>KmJu7F(lUJyu45eU514(lHQapzbcRJ2o!VLKAYg34OLs(^qFwZY+AE
z7kZ;FFjZUqrWd~HrSU4xxL9BGGUl3`u!D8wmU3RADn`K)DTqnNfQ0yfz-Zn-3?|NT
zQY5c?ML*t`?*07io|rdx+0xm<!kmTkL}7$-TsaN#pYRWDKx-=3m9xIjzP@=+xmEPw
z#v{~Z9{{|q`xtskstTD7km)qYoGJ*>v3@Sa<cdy+WI<$ip=wx6x}=H;!tHz|M+hh<
zU0t~69LnwqnVf)nhmy8x*=|BuD?2yTS)x@altp7G`;^g`>*?~q$mEqA9BNcQ7?DIZ
z4gsN4fio0JBcz1lCiKOq&Wpw_+K@-Z+g}tx-I*+WGf#+}v90r%m0K2Hc=1*4*UHyQ
zH^A4+UL^ht_@c-Z6+U0o-B+u7X<U?MOp*9<9!Fy2D}?rxw-Gv8j$voL2_0kgb*Fh>
zBRUs^e{Pf$csVeNDR9=(Mr+wZ>|J>!S~USRF*2!OQAG(jBa@zzxq?G-f)hqt==_{H
zYweSk<=H;J{L_?-NptK(8Kl_r*G`|mbn~hlF<zKIhLVM&KYV=Wv)*#GDC>;VKioSy
zcG2QFGqMFng-K|QcA!}=@P!s?ecdz!&LmiUsi(xCr7^jJvkq3MtCZ<KvWMOqk7Zw;
zi-8|(;T@bN&<K-3oPY6RzHO+m_>659JrhEIT&EnQ9Y%=171t6jR$_f;BYH!1z)_A2
zP@$keG}W-qn}GENYRr|KpO+23lmTUk$t~k@S7#{0?gHtiLe>&N&SzEw6YAg_ff2zG
zB4l(xa1gprRCGcJ(?+;-F&Hkl5Pq_KRBc%Hxu5>HbLvmiA=B~+vsP`Jo7Ff@xFg)$
zuZ*p){Cod_V!Qe2v>Db-D|3@j2Z78*9m?u*Nf3!3?bTXva(<&0AOsg~gj#SyKrMn@
zAO+xMotHpquthH!N<bz_Nk&ppjD$L+Y8Q!7V%x}Db`mu9+==i1x_nhBrd?^rYrVIJ
zzn3*_*$Q3m7U{)<xyqk69w@)l2DYYjCEcsDjT+OX(c!zt)~wBAt<W0OP!X-5hkn4>
zms`K*O~P71XLRfE#L?j?wJ^RaRkZE=Oz2izB;L|BdwEP(YCU-HDB#AA_xcFvqK-BW
zMjHof*x_WyC@tDEm^EKCdR8>;>DIDhnP@zc{iAsUL$J8$7uH~7ZloK+99@R1U{FRi
zB|~It7{?jqT4{VTP**gz-<Wy!!fUo!WBQINI#uxVx=k<Ft(r4?wer)51@rFBTO=ip
z*cTi3$;40ZKlo(AiMZH(!;js%RlH;J#`Q0jE|bbE7?-(l;l0J6f&q5B_=4B80_mY*
zk()(YJp)ncKvqvNkaZbm-Vl+W1-g@}JEMm&;aXeJ15=N9ofu7+f{jFHNdniX7!Q%C
zY20GH)E#}MA0L$YW%jLq6|3@Lh3LnBE5G#IQekV><kicBnT<P5eUQEKr>V-P%8$uP
zS0zigS$gtvOs5t{A06MY=9Jw|=0h@$kQ#v>2K-H^0aETCaV&vm#Kar#m}Tm9i;Y9h
z%8=Kckuw^3z7xk%Ju&(aEhiUeJSXU^8TnkCEVTfgg}Bfeo`TgwR-<ydV2Gz+>LH9N
zz6>rl*LIptSxG0KX8mkET_)ZUuYjry_!fFUbPAv`mpEG={oIvNpg^W;Ac=R1Plyd!
z5^L<R6>MizKcAcy?@BG5&~QtTL8B|Q>KHT}mLxIEHcaeNyiZs}#S_Z>mCC#VK-1Fx
zmpB3KT?)Ovqgop`iDpK7o6+96VNOLtCSgou$&!)x{I^RrqDnQ0w3HNw-WzO5Mq@(^
z7@!h6ZRvqReCs)#Mh+b`HBb2d=%?4;8`1of!?fNwaZ#rQy+;h4IK0Pu=f222v~PI(
z^~&c?TRTIkt-q;T2RYD?3@6rjRcrA8%pR<#i-od(yayvw{}@^4;m^)IjJdT0r_~f(
zXpJ}KhPm8<!CR%!S|uje;&Rj9n49LjWaJCJ%T@fSl;i+bt58u77Mv15A|fThpbwDP
zRVX(Cgus9Rh;u1`>O<Jwlt5+$=r8)*I&wTIIj6<am4W_QCx^D5*)B0~)#%0gKqXI+
zFDT~^d;2V>(O0`4sZ+7urJ*mC^&k28+@n*U|4RoPeD%9u`}8`Q6=;o`Y2!E0zkgSr
z?&;j|>7|`iTwS%k?dFsFhv_`J{+yEi_X}m!scM$7(eV%HZW=}d>BrCSE8UglOV<zT
z?MeSB_Y0%SvM@u-fp;1pOFPM4-aZUhUPd?yRHAUI+nQR)5X?G}9@y41j^H6NUxU@d
zjg)0CewUH32o;j?SW&!W+q&?qP;HM;{fw<Oeg1+@Rp!EJ(@rQO>_xwT`YdGw7C-c_
zaFVV9;3iQuJxdNHT!e<k<oY|ikL=;k)h!4rqw_A4zAg+mHZH*wq1tTRuD4KJLTQPp
z$PVB@5qs&~pP!E#FkzwcR5?fM&flawR0?S1^mU7uDUWp4(*=XJRE@}+dHTMv*Y;=5
zWNO$refXpi=#dj4EpDMtl_gD8*xfj2iDnG{ia+zR<Oa9^3AX9#sDPzkmRTHn$zmp^
zq(nwXB-9cG0uo@KLupP<k#2=44}MV;<-!W;b?7NA6?&@l?zP9Ro|U)nFH0{!c}2(2
z<i%gm#GQ)m@xjf?udkN;tUO(D7_H7QeHNJZCc&B(|5iLR-1)db3C#LBFI7}Z0in=F
zB!g%ILx;COh~7&#ouC!A(QV4@)7LNF`{&1-I_n<g;)R}<m5aLsUBIgx8f5SMf(AmD
zqa2nd92ST6!3j%~J0+T&x1?uO29K31!<3Bfik&gn!xcVganP95B;L0z6uvF)FRrpx
z7bXfjY{gr2)~!l44Tc!N;0b=hiTkZ&FMA4Hn}kvK8VoL$BBOYwL$c3`U)r`5i1Tf!
zLVsb7Z5sQWA8I@qbaEGT63%!R>q`Fvo&0AzN-nR;;PNqtPnN$@Ug&w)zkE15)Gyx_
zhum_m$fyWnimV_+Lj#M5mqIN<1Pm|-EioY@-EE=#W0jSnbpkqU$RipOUXZNZJ9UoU
zKRNupB;}A`Jee_cH%<Iv25n9=e!NK|l;0Hl#J`m9Vr$W+o7J||dGNLztk%q}E!_-7
ztt&gx%^3?fIXq+J=bp6Z;VYisc?zTDWuDAR!3}wvCmrM3;M`ne=tiG5CFnd(*&+)H
zgnOsZy1jK)+frc+Yu%5rn+T{x=;{1(Z*@)cvJ&XTf&yg4TS>5}zQn0NiBaEj(~7x@
z$smS>1jW*&lYjscOsWS>brz<G-ltw&z5RQ^!r2p7QJwYGzgLUyou9UN?E(kJbR1*j
z)UUYduH2m0x`LahSMyoRL|}GnnyCfpPBO@3vWRSiA)HS<ddjt!VW-zI?wl5wtZ$<4
zq93H6pr5Z_tKX$Rs`u;(Pz@Y;Xm4r}!ek(C!BgAkLdFlm&O9XuD2x>fZPSXctB}G@
zu)=FuS%vhieZ;kA#Ku)*-5`Nx2y*d~Q(MsA)N=G4aOOw4y#=psO`~;w-e@J#o%I;*
z4`;%M64oVUgL?4dhuAnzAp!LYgwzSdk?x>(>D_+|0+h&AiX{;3`|4fk1BjgzVZf__
z(t6uA+XVpRXbncco}`sby_kCYmPX-#XpQ1V#u|&41sxydFz^E-EXvSKRT8zFIwgE}
zQtJ0=D*)Lb4F*4+U@y{nf+Lu~6C7R@H~YN=5iqY@tu3%WcWVobSncCnVn_kO(cI4h
zYm50=Qgoinl^50n%HOMmmDKydA?m&SWa06nSH<gj`Cp2{-kZv)J$q@b%R{fxhWqy_
zC%+P?NQ0GUe-C@5JfQwIrZF(t!McbSMzPw;UP0XKfyUtD&=@!pH1uf3m+UQaf&Ci$
zhSYNrf*?nr3A_mo1B*i(M@P`11w!fP)L;4MA7wA?w()}xmMNQsR2$^ipBHXC-m+rh
z?9C$J8e#X+>4C#w5(&6GEEUjtY!suk11=Nv6_W;+MohBk!QHzickv5l(d^1P;l(uQ
z3>9IzF#h=_Zp}a~ou5UeIm)GG?Mm=#1%3-Ioj7t;yh_J0{9aeCbonyt&wvsf?^8~F
zMX`l49KTfVJ8--QIA$d22Y*w4SyzfXZFEL!$p5I7X+8(psA^?KH(4cn^A2JK-GsQ+
zkBcmZc)bA@J5^Po=m_DYvhNgq_&4=jHHUV&Y#T|Vm+jrLUb!Q*wtb|t-oKfBG2XV;
zNBC*=)CJ2iqDo0S$hI+Pg(xyWCef8jdXSqS(1xk3dgg_}KG)9)jT}{mOZq5xyRr-)
zx+(LzwaiRO<}!PIyoPlHZL}saO6c;>0~&aD?Xy{@_H0<XZ5<tUslQV6WUT_W^!fYi
z-&-pzY<gw=fd}Kh%$mDyT4uK?gQk3tnfuk)^E2jdn0j+O>J^6;S%(%eXwtx~LM5yj
zRdG`dxYw8wHN@*WrP@iQx->`^@bVX3z*dH>#lY4+lo~+l%DTXy5^TAN8aL0DCU;yh
z#`=w(7z~jl8iG*utC*yHRI%Spc&<DWP8{6v{)akiapYy?rBR^5L-Brb)Yd}>w~F5Y
z23P=+4KV0QO_>;&)ui$~H-*qmDwVJ~LfH@l*gRM869kOrU9&yfXM23rF6F*t4my-y
zmk|BWyp9fj@5Uh9n5kPA<=O(*3Bd3D(RuwjzZbpmNm;KReE9+O4^06Gp(z+uwa{n-
zb_w+RvX!a%JzBa__`_4mwnNH|&`{;VA!U03{i5JQ@kOzR^|bitWjm>2X6CDJ03Ri_
zfQidE^CrXIf&w?~rGz0fVWc_TWkQ)SO7omg){<T1D3Kt39k&+hH|Y23^Ypldfpk^{
zPd$?nfSn6p=7pjO!d%+(A;uEEexz(v)_+fLDG3k6*+LCl4O^s8({^6CCtPDV^#`QK
z0jUS*k_$(-#&XjdG)Nu5so!HlF+mter`}P#3KXxq!dJpK#hJDTLb$ksmEQ&BPe%Ek
zq={O-Tag;IyOO#r5pD&-gQ0Wj%bq#|uOw3hFm9g|5lm}|4PM<9%NIWv|Jkx-xiot#
zf*B}Tshk(Q^)u1GDiFBlnRC>wBf0tRPzi`rreO=-Cr>I1XqN8jzmwJ*j<J#|VLYQI
zU>6~u*w{O3A+0~bg$fF(WEJ{Yb=H5GR^zFhr*rss;gdmb8pDDPT&loKAUE|s5T8wg
zdf`bYEAvmC($9R+Y`s34eK}3IEkb8PPl|TyNlt<<lqu{a$R&J6$9RLoHr{vQ0IfQM
zR@pBdSIP@t+bW|p$v#wEkC+Tm8{5&kohxEu<8;hDw7z(_xO&|>yj4rOL+@Y|P$U+D
zugLzC_QbH0I#dRyH}_N>_Qxobz|=q1QSNM0l<)9b6qD{Fp!NPFwZUj>B{EeGt;|ME
zt)WJ%*&%sC(Gf$LlZl~Kqb(<nSr-*Txk~2E53p_Ux|@|A;LWXc$RHQ9oY}(`C*eS6
zii(D~<=j2N;TXi20{6I>f<lA2ztCc4BdnE-Ub8;heu>f_504w&e}4YhGZT*AkfIdt
zuA40@lmp|;9p)d&*?YWm-?0OlwqKWi`~$^rO}cSO_h$Fbb?wLM%($=_IP*i?#vnPM
zOc<+kfYB<V&K@cOaeY&(w$>25+FTB>YU?~$%gSCpyn%h(G#fVj<uWt`#54bWw1F8e
z$>snPAOA9#n3qU0KPtF1%5z`dD7xrD-pYj^x9fa(-fF@0Lb<+Tnx5D`&rxnFHr=O}
z_bJu(T}F$)ixw+Fi<KiSWn=kpz@T<n?#|Od*7O}$+F{BOT#y)zLZAnnd2RqQ{3iGT
zNalS|(ayaOdUzi~gnIo~dmPeDI5YBF<<+>`tB?NXamZuY&?TET&Y9G`=biyHnv(FX
ze`nu0ICQ}m1(xF%8J2qk&R>CLf5bWrl1qiLVR>sQ70Y@R%N(&9$eN1Jv8=%_>qO?E
zlD+r=p+|1f9`3$pboNAOy`jJ{M&;o+Q6m~sOi}Q{^)5PjA~SEFXXe>Ye$HDz-`c+8
zf$a4{)W0-lwvhOejLW8pFAT>Dx6<D>fa40JC!qfWSPllBhsz!u&kTW@M#cfuK-Y`{
zxr_(*l$L>cUgk;}800Q?qSf6^B?qc`p?bQhX1Yj>neY~Xw>*N6_rSe~F#tmZ;!%Xw
zca@?k-_E-Jlg%Q1w5VTp!su+}_Nes%LV1tuAR6&|<PO_1<tN3~di$An4b!iR7vEpy
zw`3FJR&`LVi~3;HXrSyL!n&kNH@qfhM-O*v5iXuzuOlOEmti61XLWHAfqPm53qfGa
zR|H2tYJwIquoegoW}|IS_V3T%msZ~^CaHVBCr`xv%Q6q1Fs=0*+HcIV;?BT(AEk@<
zJMdl_a$&w4Suu)H4FY()9sI}*K;9QM0J()6<fsQ{TfCQwtfsPmC?C53({XXG$ie&}
z<5w<@6IMaD5gL`MQXED;Vj9qElad&Lr7+z~rLR6eojRN8x%b~|<L}q*Gx5NJb(sYx
zp5?DyaHvD)eG5QnHd=M@q*wQ^{XU>;=Bo9Jdd{Tre|&s(8~tU|HMGrQF!1ltS4^aZ
z>=h8m+s3H&5iWeSI%?V=?<0O-&3>$os!M>$F)vq+N|O`J%p7J;L_N3rY2ztpXjd_h
z4$bVI9hH|Se!NbZW=j&j96zd0n_?DBf)-%nc?dLm5wU;uWxcN-YXK<k)X@TN0BMwu
zk2^w@^v>}E)x+W(0O*{TcV2b)OQ|%xdcAtx>oB6UpHy1XZup`P{J`L8p{3Xt!KR4g
zi*GVxG_$MYkA)<{!5<uxYjpiOH5nr!qmy`hnE(dN1|HPcQh8iA(VSSXL10Q!GD7>3
zrPNo=mGc3sJ>Kak9jD>d>Z_1Zh6~9DXz?NA)y~2tpw?O3cz~uP@uqQlYdp9&CO8$t
z*6#kAi^L1sqT}(K&YH7&FQ>bPDZ3Ee`Q!5P`qTCglpgfvZTeT1GFMNEdrzbTlsdLW
zprXxaxz2#r-S4GAt2LF{Din>u+MALb=<AcXJeed*F7m{!r@2*?m!y%TR#jf_AdqAb
zNRnTK;UbLDC-q>R4+4|-K`;zgZ+$7I7KNg1LLqfHy*gq;ET%+DBqLjzs+)N6`wqz;
zPM`zyc^T6NXM5*AIr>hXlsakg!8U!A1-7cf#c^Y&46(%vXNooz|0JcddhtGmdYMQk
z+1t^lm=fbwFSn{_qMbwUVu5h;6kNgEt#<)t_wGe&>!+S~>0VN5_GZ`a1+WCt1G+~d
zpz=pNO=H=oY&k~jAm2a-t#bm?aI1+#H=zeT%4Ot$2|XsR35((bPa;|vAID;kY2PjT
zmYT92th}o{&)>ax$*#SN7w!?Fw<(L1%Zl&TSBq(UvFG7C-=34dy#weLD}AK$9J(@O
zlpLta>_Dfl$E_!FJ5>Xf<4)tg9L1dba^=WHM{<qTd|i60IuaT@fsuo|l2rcTsWYSV
z_Ii%K@cH+7o3r<H>bQU27Qyt7a&4OJAKjfvi<LXdOX=eqYizGpUuRsbx6(&^?x@L#
z*R+o}sK8B*a8lQ5qP2j#9^%#>uUDf)Tv$v@Mz|><Kb<Ma^nj|DfBMI~E%SDEO@D9x
zRw2qxE6*D7GD?sp(YRud{2MEUfMs8)6fCSm9ehbsS@L6}nkp0GT~0&1ThA<!4-j-N
z0Wh+sw;Jq3Aqu!8;2lm_S0(OfgS^9HkKM^-#npyQHX@}?Tj9rg57XX`<J-)y<LTnp
zacguf5K|U;L?sK!_2rRtt{oisadlyqHCiJIS<qz#x89T(RY8k<cs&xA#}BBHFQPD7
zd9t(ZgG0w2=g;ala7+dbKG5-L-t6<E^K?05hR&ejEj!lfG_KveV<%R(8kyeooksP#
zWOZF}=-r)tdXDJK>g8!K61wQppau1n{amylZcuAD<-rfyh2~*nstu3lV-})IBpHj{
zaT$by`oIEu0vKC^&1&KPnUr9VLR1pdh)i_B#f!-e%r%=go;v-^8C{z4a+$4fg9bip
zgVrt*wk<<E0wvkN{$213BX}45A0;jCMyOg;17}xm;)k08Tr=?HM*8cT0ds6dao-VB
zU!bUom4;va@CeO2f1^pBb=ZsxXM_S<<G;6xfv?U2nh1!Ld_eP7kCBEZPI}r!2?HQJ
zD7D06gosa{PnD@llu4hy66?P@t8(h97?Zw^Qy<bt)^UA9rE|A7aiep$9-w`U<3Z!$
zGV$i-nNB@;@dM!C9wTN32L>icEei9LGi#N9?PRTT_Sjd&YwTj}S7*h<;xDDt;+tX>
z)V(t5ei5*FYf%$!Kye?DR%tiu*y$tk;?}WVJ-qG<0yvm(0IvWf{6D|mQnu0&H($Q|
znvPJm-V_ee9NUk!Z|NFkm|zhw1WrPfmZBBV_(M-b;6({txB<oWLJcV1EZ}A`@nbB&
zEiMsZ{=SS%0fb<Qj!p_?F$)0Xm*TTZ>w$MIjpKU_jjXIpzexSXs;|P8-$mcGQmcU@
zr5da!r2{h`0Ty?kk@j7U9$gL4|Gm#BRmdvdDRj0S78BR4%N9#-n8Uu9rmPgU>gytg
zC0-6J&4Q~4LVMusamJ>};RXa_>78>N<Upvt-0cSTl9Xskicd;Hs7k2bgzyvuxCev^
zlX5@0aYH!tQPkDlyT!}O%J|2hocm+N?}Z;fNErK$^25dNyLEqjS^2pkAUK4ev__h*
z>5bS~=A@#H)~r!}*PmeU1_ItO4tRAAc;Ox?6(gIxxsGd!k;6@ZH^2p6T>xuV1mY$m
zggON<8)0#TV8}foIFiYDL*N&NBS)@A<;wKNjU$I%HK1O1pLFW*;}^8dJ7eP?<XwBd
z;*X1;JdDTp=g^hXb1@QQ3XNnFA5&2K6<2LaF)gjo>d(CaL2j|JxcNFq^Ja9y203fM
zMW7EhaAi6q6cm#rJwLv%+04Bys<i2}<5*6s#n!ZPt$K@|TW=?=t}v{Zu>Eq{4liL`
zZ^+~vWj!4vwdR&Zf{SIr^n8coPV3n2Q*#8SfiYiRpe2xL@GQJ}-=310Il_TgMY>j+
zJwY+c!W*%%QQ%vhWD;rNbi!ml*G@G8Epay+3SDWG#lpZz62zG}_Lv6~gt#GBS;bu?
zdUb+`0GbL=Cy=Po8mhmf#Q^wA^k<jneRTd}Zr<7gz3ML6G$*Uu^b2Kv{3()_y=%Ea
z%SAl=F7(D)&1pgriAN-6dqt2La@p4**T%9mAuopqu`X>5kCA(a(=qb0a15KD3<o{A
zdQ#n^Agu<>>nVgQf(hzy9+>j>O486ELj+t72-QnTiiX@$?I%q(BQTYo@~9_#OJBWc
zT`6Ah*ty;Fuk$DFot%+5bhan0FO0mqvB#Dzo^$$me7l88=YF}7J8bI4X-e@H(7{mq
zV_gsFH)z0BNCR1@T8-5L24u8D2iAB8o8JQ~7}CqtaR|><v|Dq4Dx(e2=qiaR(J5T9
zNeM;Q#^ekG4GIZ~=fT!dAX~lEcH7k}+vd;C88T|s>{VMoKfP_u+;t-dEt^~1XYA>R
zr$>)IGivndv7_eB&R(!&^To^WughLLDQo@0jqiVPdfW1BVak*nlc!vtGWmMeq#LY%
zGp~FFaDx!ckR#k`b&*?IYiafo1QHt&l?{|zK_%gUI%l{U3kURcxkM8o5E!vT7zu<*
z0mTBY6=)&BtTTd7!^h5k(3s&9W<U7&!)W4H$_lDeKB0}2PfjVH(RxS*WyLMAw6M+=
zJ8kDw<pgawb>}ppkm<>*z|mTBj%Hx<7aTl|OHtH7)={x4Iv#WcrkAhE&(DVx2rd3m
zJTLr>x4SDQDGT(PNE(s3vZZko){+*ZH3=>0@T6K`1zK29As(zJT0@Mv^_|Tp3nBH{
zU3k{~*o?DWSNBY;g~#;88go-z-YAz6>-b7^A)oZ*e8zZ`8h_68o2Vr2pJ72>(KQ6d
zOx3YNNh4wqhg4pu2*)#<xf3G60!3aaE5C6wrTEdP3r%wJ4{y%iwe;%If}TekHl^P8
zo>D1qPtMXEH5btEy`xiY54yK(*D`q?EnBTkryP3d)6Q|(1NNM&S!?tqVfMQ5eYy>;
z7n`{$Gd~@-cb$KDY1*c-{TjDx(5_kES^G<c1rBW7q+P=frl5h1(?_tj7%2TJ{DRqG
za16p9&xS-?W_7TEQ&0o%65Qxhof#Fisfq&~p_B*Jqpk;wo~%=+s)H?xusomXen4BX
zURR53kfT#;GdxCfeusUsqxaQ7gVoTeHyIbnOp_FoYp~p6%wc~qToiiBUNw^04X>EP
z#LMV~8-9HDW3I`CfSGCJyp+TE=$$p$m}_><OtaQNe|BCv#0-<w%wMB5l_Pq*Vo(64
z76c&Ztb&DwUt(n5jGzZc6ol0K!>wCBJ-KQ7ft9^`^cp_A*SkG!n7$N9(`dl<t;)|k
zwkt*3#vZ3F=}g+<_+jP9*)z(KqeABmJFXucX}$izn*N;^O&L9DQKx}(4=CU4+C?iK
z*heFG?^N#YyGXmAJE!crct+WC^$LaRgPtRNB>HoFRwS9SAM|OU!;b~-t6V?}8<(Xh
z9x{PJE>b8961$MS`GF0VARgS$Mf{t*)yxR=aNcEuB`zofj<ms&<OH}_nM96O(S@NB
zb)<xmw2<MWZ#8q`?A-^3Pi@?G$AN|OHkMI7sG44ORL5?@smQ1<QwL{GN?eef;4^sk
zviZvCzU`+}3R_C+C-fqSlO9CYi37xsU;%D=sbHLL6K!Ny!1ZR(iQ);-jJTjMK5|FF
zlQ5sm&EN!toGFPX@@-SZ`g9`o*a2oqx`PHE1807q??j9ge<&x{<NZIG2L@md4u`$P
zfkUp^YqY3w(%e8NxiDvKnDbILb3NZ`j*%nPNV!PRXQVL_^qFLiWG#dlkSCK6Yetfc
zNpR4IyU=H)@FbSQY_!G{T4Q3^jM2Kz$E?%2ky{FgF(KYbjXK7NdDt^k*Fu9WQHjw}
z(a~&*44g5R?ynQxSdixS9W-dm7Nv-jCM{S(gEs7)IhmSP_=(1`*3He*+YDGF+<uMv
z&N1rTOCt~LrxA=g|56T$?dMFJ(jb0g-7Zna3VEhJ(oCUYa&rvDQ?gVSBG%CDgw|DB
zrV`T__(U_P0NUJVv=$pwtYPaTY}bV>18vV13xug?CvV6$$B1)DQ()??PmG(KLK_6Q
z<B4}&9uvnjMDB_T3YonoW5}viLx!%kC%0&koYJzTR4`=orlA>Y*M>B$mD;lH@D})T
zUsx4?Nq^wW{)oTlbMv6NmDu3$FhFU2W3C>v!Cga2bbd@@JnXFt)A3=?5-AA<9aR+;
z(&5VL-O3C)Yd39B{Hgek*kzs4k8WK@x4iPjAS@*fg-ybK-Eq{vi|pYd+qrS2Q6%>s
zhQJpc;;cSKTxHQOgb|V-)M%Fn;0>696coZ7>Kx^mLdsDCCdVe*2KfsS!hYLcT5UvH
zot90v?4}+Yhjp^jWx}T6w9KH!adlhO8nb%F$RWept^kDfgyq6UKo~_9%Vrl3jT?k~
zA{Zc)NonrKCoxAe$qcfLh&|={m<)E*9}#FV?21na1H=X=#Il#4I(rN=!d&`T5T6ky
zms3l`lrXdN71WE3j+9i3v2ZrQ1v};dQ3E8C5-}yrvr~&^^_$dcx#j(-3pY1uxMpAW
z++ADSzSE@n=5%RL-Pr1>36=Xz$r_T<qjcqE8Plc@t6ry0!e{~Yo+8~5%5pC^M!W@#
zcnf^Q8>-7;RvDouQzb==fQx*RD2ouOb6@#$jh-lXSj%pNXYd!;tpTLH?E88Qj%FQj
z^If~(?i9@<sF9-U#0}Zo;Hx&ODI~<<Qeh*I(clQQBON^MT)q6=o;~-iY7eKiZNdAS
z*Nf&?XU8sRu2j`=nBD=^r$GzzB2{I9$K<OrggZUlsEzy63Db+<$2TG9iG@Q&n1uPA
zeo+3QUO!M@!9%(EmHlNqR@YU+Fq$Pchm9U8i;nn4SXv&e>)#5y+s&a!pmidnR;g1(
zh1+bdXiWY3?EP^{Yl>Nx;MWahoj;rDp~9t&B{*F!K+oYoy+sd33lA1DS`FGqn99oh
z3=t|BM05IxPNC&|Hf&#JXxlZdpE)sXW#7@m5@V`WK`afvJ6YI7p93Fy*ay@lMv0p~
zZunrdEjcH6Iw`Saf+r-A0TVpw^DVb%{{VFBZnb8P2d9}V$YL~joDasQ8_J^U>xPbP
zd`<SqUSWKMAJg!SE+QFBFVuO-5y^-hsC<3KykYVu8#jG&T>0|E`+Ylg?A^Cx`#yry
zf9vO`cD2~{*=IZT1ICOU*rxxOk$qLEyI!0m9zn0(>`NeZH`5Hl?!$ShTcP_9Gl_QD
zzY*5sxP_J?9@Ieg3OCV0Mzvuy1o4?pAOYP4{>~Os1g(<2dsA4CcXo>9o$qMzX8fH@
zyz?`-3M+pde`l{4k0vpYJtR)pq<tp>dSL__A~p_~Y^2N(C&8{Sg-Fb9vZoq}2~J%W
zm~@O{^8Dye@LENHI51I`)5w3BQe=&QWOp0Q^AimQHP|hIPbz~(j~PeYApm7DK166m
zEB86(EsPs6U|OE=;N#Obw~uJ(m|-OB$(S+WRR4-2#*Xf><I4*leRybeo0YUKl;i5v
zFbFBwe+RO=g5vza7aTKcH6w@<xf{i6o<132c#PCduT3{~bDtmvlMf&v6!x`f09T0>
z;D`>3h!EKX8VD>l_cJg8(`XD`i<kJ@zP$8M93_5iYaJxCu^kH$PQ5%t&xg~#$~K*K
zy;6Cd?Poek_!fPq8@VigEA@v2t;yE~@Kgg-5M%G<$z7t7$QMeW+#|`XN?oCBkXV=<
zbKo;iPavf!h*71~KxsG3t3Ngo69Ae|RF2UW6O|*%5nQ#SZKo)?e5Y8a(Duq9urS0m
zzmM5PMesP8;W-^5OI50}VkM>(vwf7KZ@Eo9E5T+NBX^Zr_<@;`VLVR7b!;9{p%qw3
zu2YmDbGQM3@S2n;$K09FlmtUape`tsjd&oIH!+%mF>3+Q`{(psy8Hx-h`zac@RDr{
zh2m=cgv3F+5Ev~6*R*}pBda7jy2GX?1$0P979Txrr~SBcr~jWz#OzFj@A@8{Q@kvV
z1@H<8{zL2^sK*!j0(yWtf(>M9yo6Ja#<w&*7P0Ky6@aKMqk4wmUDtWz7-w)H5mb|@
zmk_0rh1vXpxMGqvn)acgtL{!zUVN|olAlk5mu}yVSyjq6LqD7T*%Rd)PT#TJTQ_OS
zItuE@!T4i_J^(i0Fgb#IUR)T5HdL%l{&b^!*(;DKkFuYR#V1%X4b*iuvsry;Q6IwT
zRLRvWkHBEALnjOlDle$o0P|~dWq}#zs?K1djq<MKA3ig)<tJUfINJV5RMofzNyA3B
z__S-zkn}rJ*TQEXZJYK*<AmPJvs-PGtCihkuGXtVVxLuu+IPFssn;;&8_-}Idy#%B
zMy{%0wqRXyQ5IAS14=;+%-S?sYdL7pEwZf~_*pqk-n;en5^tMOj`elfN5`Ytd=TQ}
zbHxYR2BJrd&brEhK0M&0jG8-@AFQd!oq8n|_C|y=D+>s!=)9CGsd=kHzc%K^I3KW3
zh-CCiomriT$Sh+mL{2sP*w8uVh^yg3DR6E(ZNLyUatLmXUzAtb4IVDp{mJ*=em8Q+
z(8b4oKR(tPU;p6HYfo*J3<uY&&WcIfTI|_uYy6|}i!;P_W7n93GV_BDcj@)vx-ADg
z51TTwec-Yq9Xqz|s@Q)VYdzU2JUeS`i{zh$ksVw26chL7gwI{Y?BeO5u<H71h?}Yk
z-PusBI-?eNE-E?j&Q(&4(n^L&{7W-8J)6I2;%BZQILt5RMotu=QGB$U4;iBFp;6oe
z2#N|#2^F!d4>O5XSs^C=JO0-E1$VPXU77WMR_u~H%?sv!T<iIvPn!=BB68kc@!sy4
z(>CaWl^4q3o?C6pXWgH_>c`n*K3}rB|C}Ci+mdr;4JiJjX5Ho|cP~Eu@EGH9P00bN
zx|EMIU+}q(vO$g3M-5?_U~fV_1-FGf7}fcdXhZsvGw4O!2xFR<HAK73O@j!mzr$7M
z$SCw2$C*^UxQzINZM&+dIn=fEV>Fd(Z1w6DD}0#`sBX;LGZ}FP$9Vi&6e7MPZXqxp
z45o^`#nBpW@djGVgKK1_9ARNx8RD4v!ohi6eBpBGFh187i$j>1*x-=}ob_Tt6w`kh
zM-Eh(u-?IglaqQ(d9Z9`ujW$+eLnU6@*!PXOdW73uP^Odui2tK!l16ofs}?hyAh&b
z%c-*Z(nh6VtFq9t=8H8n<+DuTsQJ#3qnWmLrN7AorL94<LNqLa*CPylP`9_madLsK
z>G9gAp{)D=i%~GKF6S1=8O>u9@<xC5mJkKQcH70d?lB6Ku&}(&utePBbzbK}P@LJg
zQs;a&1dCb^u|G4gxkI6d_+2a03Kd!FfRxHOT9k(@XtKu57<A)nTK$=o>c+naHxvV7
z+!mw&t8$4_WL_7S)m<3BauL!1I0B6yB}AJN*_7!}W_|O7Rg!oxCR_N$;8|>y$GoR3
zra8)cQ}>BY*ep#pWAoMG(St?||L`;6^We4Ae?Lt+Kuzm{FmZE>tvJk2TI&D!igNDy
zGhnT+y$JKb+CbN+25-^^S)asRl6t0RSh0_N8;!dS*=k{eT+neD!0ao77iZyd{9uiX
zah1Z1-MdU-l7rN|Wz@W?Zc@dCcULdz7a^QW!$ROeonX?;NBw5VPDLK+nHbeK>zkzu
zFVt;tdeoJlZ1IK<=6^D&#lpW9T&iF1-2A)Bi@fbQ3%BoBwBS9ddjGW{g5N?Rdb_f4
z{D47Ym1pDjof$rT?x+F%N7Gov^W$4zUp{*K=FRsPm6^5{8o*xZk*G(n@c_<v<UP0+
zOlL#50k)e?Vr;lH))OdYrLdtXj^Gx|r@^0qIR#tLt&^|{oPNXFH5>jOCH>;HZ=Vk}
zGTO|N4hzxxcCa^tNEKNO=57#Zm~4$ekuQs9h>`1Kh?c3H>hJ~+l;GY0#^-dLX><31
z5IwcWyHlndo1z?fCoZ<pJ8|(1bu+t;pKxIE<SsFd8un}4gjtGHq}yUW-Ba|2H2w(;
zZh4?K9^oDk&G-ns=5VrNV8P#MtTFNpa=FA9XegS=Wqgy1)$#(<PQ-ds-mP4xZ`HDu
zQ>SM2wAAdA5MH&G?(XpULG^s=#~Fq#4oVGZR2>%D`$CSi1f#7@$oAW$)ul9MwXG0x
zbQjcnbIG7VX$;~%QXHM64+Q=rWDifKcDvZrkc+a;lN%L$NrzBA%$S%={W5xr$NK66
zo6T62J#Nr>loKn3(5Ac{-OJ$|os~n>wQyV(pwjC%4DBg?O#4b9&1NrOK6?OL>8OJ8
znARpo08e-cJpaQoR!fHV5cB#gkDJd}Ibi^nu|iFUNO8h()GCUs@?duBDhi(l?$?n*
zg!zCnimb*e8wRqP!m$8Ksi0gJ29Uq;RTGJG#JsYxR~;xN;4O=2v3a*xs0*~nTnQx$
zYK3YmYpEc83&8UGD%YDW+>rOd@at*(IP5BFxkv~VBE>J5%!XS_jimxbdO4-8`(k*D
zGT-enW@N9PnWEHn)QFxHyN=9EXZ2Za|4X`z6}Yg@h(ur|2T&|YgL(ys7!<&FhLa6~
z8TPxLS;{)B32ESCw0yM?c%rbF6)jJNCCY6Yy+nvo#?rZgbROR8M%D{{+Ixs-5DlCN
zM7DYuRv1Bm$P*f^++IorMG=oEQv#JKbSYhiH*1rTVg{ndMf5s0e#btQf;IZyA0nI^
zGLkQ<2e^~r_`nPz6pQ(su;ba<UvR8ywm-)zgCB8UnDu)avL#0j=CVc27y<=3M3XA~
zEygJ=p1g-!FnP!6d13BZm*tPxU^9HiFz5XF9t$#t#~k$!4-bzC7kj!o582=r#-uR>
zfI&hRHG^qH+^@!XCJ|X!IZ^=8BFhaBF2NCEdu66{c;~o5L6auEP`=m8*t}@DKQa~s
zjTrd>=Jd=^X408LxzDdfZZA(OQlF^{r%^o(4}Z_{#V6AiqV9Wy9Pt@?Ysm~8J`jyS
z3D<ykRXr1*F|V<ZgH_oCI30<2iAUC#Ci7$ubv_A3G(#QohkNlfjhD+^O~$)L*z=VP
zwI^<}nj;_hW{m6q5PQ$`h>QF8U-@*@{_ts|Cl3AgTcLS=K4S3SJ#w+`=J;X5dLafM
zN(P@RApVFNg^*rq^9P{$1GFk|JxT*qqXkY*C4dIF4F^FO=NepuBA)|_0bk%U%7UmC
zbr~+!uFR0ZIEolMwbl72PxAKfrv<qKY1KSk|DbEb03Cpx@Zqt#FZoJV2p-qR1IlPv
z8rxjRRD;tE?`G7%tO3odqg}YEz*Uf~iuR;3E-Ev;v#w&n1z(kuT}0y|nmsWa-AuZQ
z7!2d%*sgOT!cfsSXG28r5l+{+5g0x)u{Ls@BSDv|%{6A?(0ljtlu^=3gzdY`noyfA
zV>oL%aX)W9wf#6|DrqZDxS>LG#_?)ZLQN{Mn!w-YGVOt>P^byC{s3tGZ&V4?9a3nm
zWVE8fWeTmn>Uw2wtE8hvnck;0bcEY15W3va#%hx*qg<<}Hny|%F-HVrGw5{tF#`G4
zu^ArMgci~|P;RgbXM!FR6wLHn4AHRJw{IPyVfrhU=yMKY{I{{0w~fq91|xkg215oU
zt5nH-2pV8KRu2f5B^{q4&(<Y$1CcBIt}bitum+!LXa7ssf_gK%vzaWab|-Wk&CA49
zTkSI?`aKqAG`f@z7UF^tht?B?N$%)*A)(PM<{q(T@hQTV^-FR#(@i-`)(cw}&69HG
zO0@BN2M=st`u@QKTMPw<Kl<zl+M*s{+6b7Uh+{nqZgFTpIM*TMgGE!(Dy5FjB+JQm
z3^_66yNxyx?gD_R5#@weR!5uI%7ZS$Omev>Gnx<3|KCTO=okNav`Ih<65%-7^7WMm
zwHlT<FI`q1bV6^{qZjdEKM!x_1a@0_5DN@PL_;4)Fd2k)!-j297V2r%4rT6lCR%m&
z-o1kay%Itr$}*|k16bY-D8h*Ax`P@F+K?1Jl`DBNjYeJ4+PUsvX(vds&cFxt&}9)*
zgmKeA=QAtZ7mQi)bqCoZevWZFtUIXT*)S@e-c#NWY0zTkvhDM;cI!8J&1%rBO^fEW
zDZ&ls?kl%2YwC*W1N*mZRIhba&}<h#z8|9vfsm5z)!x8+rUttfV9%Uk)Cq~K_u=}F
z9%iWXE;BS;mheLJ2V3}JgWC8as5nK00j2tWuns^alk#V1voRAEY@3_2``)GL39U^X
z>(_15R4hM7_@?!WiQ_izT9;7xNT-afW{&LCx$V?ez&10pck=%0y1t+WaY=L<oSc#q
zHks&{p9C;LSz}|&JC*l$(Vj|eVVH2-)>v3I8+t`sU}GD4OCX<bJ59w0R|2%sxol<J
zp@N<-R8b-3=yw&KSFl$Qdmi<#5MCh$C$hZ)9etQx31f0YT|f{jaKqInv;yO85W3}@
z53N}8!X?;&b$mV^htVpw>Y&>HvFM=cIm43I+=Iqe9TajV=4@Af-QFT?;<{<m*DY*Q
zuYSu`(_1Z0sb7Co{WRg72`RPbWMpM!H0&FeGGXw92}){WYHDIqYAXFTDYiz<n(wB7
z4w~El71p5U0jPOTwccDNY4z4zPqN_8gT4f)h?uk-BY;mJ9MzSBAs*0`W?|d8kT>cD
zCDBox&|ss^kQARB9q(LgkpA6x;Djab&sw-yRK}*Pojavhm9}+iw`xJt8Z4TgwSDL6
zy2^kcI-}p#rgb{D>-0{8HcabpCoB=R=#D{q-VNGVuW8Sm;WDMzh)%=uB@64JWq;_<
zvP<&0YuU)x1Lf`J`Pdq^>zS><v<fa7P#zzN>w-M{bw^Pa{!PI7P2PLhH`yFZ_RUm$
zb0;tBfNNQ9BY|yE);13RhdfVd7s_L0g%*N5uvEHQVsl}Iu!iS8==x>eUMzQMM?S~e
z#R7(|xJ_rkC<qozgFmjEwvM|71+ShalAQy#@)Ze77R9jLHi?dQQ*ObXz!O}2Emm|m
z7ps8Tf^5w+u5@55L|d0E5E>Lldf38bI6GHR;IcYd<>CwX{-HnKyk9JATqn$ME>b3J
zR74u^Z%?*JnGz1Hg6-<c8Ipx4QV|T;KpN3lnhdW7uLx)Qz(lT(2mY+!ExE_jlg`{4
z4sw0}L++*If-`qX+5URhvLj0%Sx(N-R1K1nvi&5N-1=7~xiiSWC_D5uxJ}ZZoY6D-
zQER%Q<c(z*+iUQ~8-Dsf;r~_XW1`ZCt$T+zqPgvxMX%ZaK}l?-peBZfxQ|&A3}@sO
zZKy%2ji#1h;q~0(>7uvf_H*Fu_1sJ0NqDntqXTDZZbJzq8RRr_JFrj!Nq`dz_WOW%
z7KgpM3cG!`vwY6-S$pdo&{)wg+PmZ)Pm-Lux#q=k>($)$ACX(di(2+ldzv$MN!cDM
z?DnsayO)8%uIA3Lk8;9ZlG_WgYa9Tz)p-~gg{UL-%YpY23Mr|ruY*GP+Ea#_$erMz
z><+Z1)=FHJV6aCxYWjNa@$|u4a!3A$+)K%`x8-)Ul3I3!5=fSlC$!ERkXT&d*4s*Q
zXJC!Xnp&Hdz#R>|#5(AdueQVcFjjiueYmQ#pJ}{1H^>3|>$%6%d}nTMFfzOZ|A*X5
zL188Qp``3kM@@OzyjQA_WRO3dy|N^CX~1rAz|LaJk8{{r5TAjJr`gW(H93*%?SO`_
z;-M$NO=GpD1XQG9QXA;Zt>UTjh}UzEr})p8H*!~fYi>PRI`S=fsY}VaA_p9LvOGh2
zqugq4dC!!<oI$WelGdIjFvrqAF=DIo9Tn~#C2uSve<8}j(W^_|s0J)1JKlI#X~fpb
zz#C0bwt-~P`kYho)g3s#nmh1y#)$zg=ima!4R>JR_1xpx-ydl8D#>krYi{7H*IV*B
zaKKB}F&wCHWRRs!9F&w?5jd!!*2sPq@DA45@doB?Q$1<41Z!!l+@13V2Di=u$y#ud
z6qmf?!%FgMUZ`BXn%8~>d8?J=HISwDC~)-GOZHIVwjW3CMqC0gC=4XS-UYcGEl~o8
zH{jNI6rYXFDWe02dwJgy$|!*)*nt&3N1C@zM_zg(0_ZeYG;d9AIY%vD&pn<3;cw(F
z|JK}Sogr_@>k0>lnZW^S9#8^v2^8UOd09)UFlP{ik!lzz$!!5fsyS$r&++87?B=ND
zIVap&{9$f@1Mb&zkEd9(NvkF2eyrsK-<lh>>{F7rq+|`-ykt&;DjXRw&r2XL$z2MN
zM>rtovk*DtJvrp#X_ylh&YKu48st1TFQ4VslMIBiIVgoI{VZ=NN;k98VSN$u3*u8l
zNGC*?vnv*T2m?Z>0DlU*?pyL(P4Z|eJt(9JH-u+muvlLlBd!-e7B7pxN(QO3Gzb5x
z)IzsZ_p83We!Bh-Ll46!!#u+WhA$1zJX&}>_e}C!<N1?Utk)Q?z1|_-eZ8l8AM%lW
zD)~(Ck$pXUJNf4Oh5F6$JLvbTzuAAh|3&|o#sp)!G1Iul_=)jr<3Fa+row;<0doS1
z0_z9n2a%v!LGy#Y4SEqgAox(Q64F29OsE)|8Twf%&r-EYEhu%lbWrKmrI(i8S^9CA
z>Sg+tIT02YwkGVKvLR(ZEn8G>b$O}0v3!m4Ps4@q`r&iJZ<yPeN15}@KSbyw8b*wZ
zI2rLp#N!BiWa-E$k@qd-EgLP*EA**ouDHD7_fegrjzkqkcaHwGQu#_<D{Zc{tCF?S
zjY=;nhgFWQoKSgK<z<z(RX$$%R^?}v?Nz2#*-%xe+PUh(YVE7-sCKD(X!QlvFV={z
zF{{SGn5r?0Vz$P}F{fj0#rzaYV}tQ47dt0*V{C5h`PlDbU&NW>%EcwdwT$Z*HzjUm
z+}^l?xZ82R#v9_x$0x<NiXRw1HGWn6zWC4M@5KL>;E_;1Au*wK!k~mP2@4apCmc<<
zlJGd;RboJ5)x-vg>4}+%^Aa~D9!~rs@nPbNBvVqQq%^cHYhl3>P^14up|^jXzes6}
zCSg1MtEmP%enmU{`7+G*m1nHSSX_F7F!&}ehG)dF(N`!2N$@Azg=P4kuAj+7X*wCH
zyGw>j|B``pAQ>!tLgoqQNt8H-l$92eHgqK^CnVwDSi;D1u@%O4rjxNq`;dAf^+HNQ
z+K4n4sWs9lqyh9-GN0y>%94pRlLnCWm>N4@JV#m@Vn~LrCdz(A_Ue+zL|uK1yDml=
zj_a{xvhFbAHmj45r3{j!lW@Nc*{d(cGu+qBBolN#{5S%z?~zWDcG6iAr;8<vb)lrJ
zp){$BcWPlA%3r!jx(MN9rPz#A!qF3>P-)_3A_-Y|-kpq)rjf-`EO}R&LwZYfNl)P%
zM&zbp3~~rrOn)Ow=#Tc3k{^!0k<A8?<N%(<(sI&+zqgq57LMTBjN=xJCJrUp;(ZdK
z7fDs|A5vMoKtga#N1inL2RVdepl&o~o&JGx`T*CvNDtI!sFXnb=`*rQdP=$jzJdDY
zq=&eQtP)R=LDEPvLyx6V#C>F`U?a1oCZw<M9MSjB5#K%=qr2H;qxd6vM+m`);wv%^
z_a}?*BNdQAXwT02B+^b_i(~?pMuy4u-?6TLH-<mN=j@U`BRTq0q>W@H)1?)pDaz_0
zZ6<5zOR~wZgA6e=B7McvXon9;mUxy-(WR01^!3Sdx`FgTibecu1>pu6B78&Y2&Zr^
zlSR7jWVJAe3`gn)IBEl)WY9rxX(ifeBng*tNFDtRH96`r8OL@=^;lk{9!On~Qjyvs
zHAiC4-};QxG3Zj)lNcC1y)}WpIBhZdawMU;{XXc+isO$+UzN}mqb=9OXv!sVnqqYG
zw#4WNG~}A-OZ!>ib1jZnkdBwo52GR11lnQrqa{W=`0@U37_MMw*t7Y|Fr|fOtb^xk
zotcoIi73sd%OMSjZlf*%uY{{d@hTa_y1#=3;A|!#(Kuk_S>2kpZQGQj5fX{$T7{57
zhK&L-6S|E(l~UoUFyklUf+GFu=_#QwK@jyi1O60Clyta|bS0Z0;8gO^W7FyMdI77?
z@(X_DfxRFJk|gr{*dx2(!7fDnAdm0}MWYO?(2T!GktCe~nMDx~@l8oG7z~mJ9%4al
zY=WnUBuaV%g9n=);P8??JlLh%CI}29w(%G7hI*ylVRzYv2doB;O+saP-C6z1;*8;d
z9ld~#Aw;6Ba9tDlkw__=`I6~mJ2^l;BqzyP=wm;S=fqCqXh-2J{%q#1ImlebT;3dM
zjxwj38=1$M4@3q)BV?N|%GgeJ;LU@ifSki*?<eF}yxGC=W}vy0xh#LPmdl&e{<r-R
z39)}hyzHkCN$>&*G1~U-_Eg(>+Y#I0`_u1Fxj*^-#QWp!_q*TiewFY3xVQ8T+Npx?
zCn7P8@V{?)B%d57pO8<<2{MZuBj?Ela*=#Nz9g5(Y%+&jMx6^W?thKUCG*I2asw9D
zP4YFlh5zMPKpv9s$s_U@Sb0LS$wKm!{78Nx&k%LL2=oi;22LM20ALiVZ4BqWj>Ou*
zj5HmIwas=%I*Q{CqytF(kv?=Jta1*F60`>)nMeglXOQxcU?uQ03&(RvOn+wi3LWVf
zj#rUxBArM28tE3&Y^2*r-y&T`x`*@~(p;qbNRN@OBmLk=^KpEF^c;!3_p2i<!0|Vv
zzmXmy{ey%S1a1iV7s-b76bYS@r$sn2YGLVT;EE}NNZiI@_5yTjww{xKda=Z;Bmom=
zSc0xdgu7~DnyWbwDG2vh;8+T&49-{K2tSv(JkHnR7^x<*0mmpcVHtH|u7#9}JezQA
zq$aWj$8l<67OENTz!FBB!B^Bowp&THmR8Sp>F{7K?RJdX=UL~L%k>m{_o{BC)y(F`
zLmOFXpXyejnw3_GsBRUjnVVR}icLDCTe_JSnHM!5u*lrRJf!act5lI6@nGPhZZT#n
z>6ktg`%dW**0gS6C8q<sbxW;ol~^%&1GyJ<Ljf6%0&wKFVr<o|x@s-WRxzqwdi!+i
z%tm3>v_{>+A|lL<tp)AUtp$z3BD!^}Zq=8-2w0~LEu}(hsAknysc!X9OX!$xO$)P<
zZi^PN@;atlBCInPEeczN8fe!A?$^f<cH@@e7)^7%0Sq)gMrXD|Q8-v4!q^Q<ge3wH
zc577K>RGL2$MnVkF#;fZRkK!VT;1wj%~}};pK4eHAltmCV|rd1dQ1Of9wfU{dLF4H
zJ{{F9%xVF!=ImowK1aL9YUx|enwEXcOuDD%Rwj+Y@}R;zZG`(iRjr61kntCFRjF*E
z*nezFjjb4FBpy}C$Fy1P8WBM_{a8qER<ja66Fa<<STTg%lX|tTQ?)cZ(<N7nEbY(E
z^rL$=i4S9Eh7}XvO|`HykLiQk)hffzJUcZ`j^d?wP3Y4yxg5LaJ!e20HJ{IIc~Sp5
z?4ECs(Fbb=<IJy4d~{h8JM&LVtXz)2Yi!p*g^I`l-Ud`aZ8y1o89G+(&2}@`E~X3}
zC%0w0OtxFbc8A!`&UWEt=y>+Vc=pD4_QrVGzdU=F?Vht;czNXO&34P!?h4!4*{*(h
zWX@!}7&G!^VuwzFsQWEsCb-@taL57ppT+Lrj(xDcaH3EL+*L-;J&jyJN*@v=Y$9ec
zf_Nk1BuH99jF87c`cfpA?jk0A0rAt{hQ+6D9%K-cP?9Gudm*Xk6r8n}<6MB1nBh2Q
zD;H|_C6{v@i2_{eyL!mFt&Vd)*qZs!8ZyZ!l10W~>|!t(g7IuK{Hd{+{~Cw0rg)l(
z`@_jVTs0>n!Ha9)tO4!}$FW1nTVwgvKr$9N$B+rw4?xZic)K6cIHV4^H<*madwr3k
z3(q$e?`NV^_RSjjVggA)WS0g(irf3uUn_yZIu5X>VkTz{{!N(uYM|^<Nc~Zhfw;=V
zmj>hMaD1mf?u_K{jm4c-sLea@8@7SxqA`5V?EA664BzY-PP<CI<JeQET^^V>Wyfd_
zJNI+kZ-a9$jG5HK-NtAI3XEo9KMOysNP{2yC#(6`FT{_nKDY$?9pnSNcMQCr%~26h
zmJgB<=V1Q$u@VT%jYYXqqb997kuv?W#tbKA29FsyjFcJPcic$K;**evjcD+<h7BAu
z5)iWYS;BJFI080UXq2qxc^lJ6@ql=MR-&n*EEb5j#LF}dN|J|oOYjp)2{nW?p`S2L
zyeG^T7E7gsT}UsaQtT&2iHTBqu?^Aylrf!^gZE{ZUjh6O>hBhwsK0ya+pq0m`U9rM
zfJqO3rVmCJD?*R0gi(|#XrEZnLL%m}BtsiZ1x?fi4(g-LTA=0HVobdQ+N}##W9p98
zV|tR_kaepe<JJM2t~$+0Qb10T&&cO4dd)R*hkQfsLfX6PFGai+YT9oB9yW?l8)LS0
zp{rj*!kR{QGaxeBL-6luA*7<c3#p;J0AxX=vHc!tYJWzWAvH&8iPRCPGg24(52Ty@
zC(QqUij{Srk|nse2Jf#&+K7~ga`KUmBYlGODbfj~>nQUE(pN|~k-kQ{g>)P5-$D8Y
z=`PZ@NZ%tpLVAq!1JV<ur}*ZNNIxMxLn^|ze@0>v6{q-~(Oo*Icb0t{ER32MeMyDh
zS=(Mj>e|00*N`OKwc_s2xKoHbg`g@4*y&<Ff>O?r5y~+#)m{lDw8p>CEhP)>JMfM#
zFwy|yqFw9{(F+6l9e>>M!JTKg<Hx`L7%g7I{tKyvbQ$RiQX$e+q#!)Qyf7rStN>v5
zDX{w#*nJA@J_Tl<^0JrUxC;4JBdtYRhjbhF?jU`GbQkGcByW^Zgc6ESLJ>+RLJ37^
ziz4JMLhd5uE<)}i<SqgSXo0?+4t~%B_0Xd&i-6-I;J64lE&`5=fa4-y&1jzsYM6@_
zor@Noix!>B>s5q$6`@{5s8<o{RfKvK0g6_{49Yc=c1RuVGf7uFEJfV^9_Npc9wYsL
z^aP2miR2AfEcVYyx*gWD{X1Owf}R@K|HKS{=V-qcz*Y~mF1QSy`oUs&$Z_TeuXY1a
zZwox@f)-21k+sDL`$4qWCFI_Y7CVI&D<B)}Y<2k6XlaUi`(jDmc4#xA`_kYCNdZ05
zWrNnoHv9LW6m>H>j&D7nz4>N;%*OWEX8(ze3G%azfXT7h|H6|$*&fHs_UHB)_V;kg
zI3YGWbZ6#wx9?T2-S_t2v}-%l!LivVY2Q_^|EIluy?YMOJ2v~zz%V=hfF0AS|CgH+
z9_<DDr`p-uj%uyh6YWi4x1>&QzG464^?S@Zblub(Y8h`W$)Dx6uW@}xJ$JUqo6nqg
z>_6Ba*ndQu@|Fa3{l^W|h0T5vHM)iUZToxnkL^XEJrjD(S^Gn@7_$KhN;282<KCBe
zM(kVckL;_k-(k<SFS8#*1|xdfV*BZm7XFC%+oN!=l--E@yxp~Dti1oe*`KjC#r|jZ
zbvv`{{_BSN!qP*2PR;fQ|1q<l{o31~*}s4Lef2Il12%R4-|}hC9Q3Kabql@x^$j>d
zdGoZ}4tfCH*e8J6c<Yxud%)=%m&zyXp1r2_<Ub#s6szU2pJZqD8{ja+KE-}f`PuHm
z7ZfY*jz(&)=C{LE2NisdeYTz1+I$25(av6@Ocmpxxu5M{fy=Q?)43dPumh{FooU!_
z*+8oo-n<RDz&HC1h9UbkP~8#iITw0M?r`M!=FR(W-huRX-2^Vrm_F}~A7!)*&K-cC
z2yLe_crBa5<q1uq9_}@UzFitRPIK_yR``{Jp3@1DV_oozgr?IS^Ap~Mc3A<I#v<rS
zt1#MD2^RcD=&r}0&%{8Zd4e?)m@d-;-${Zz(qq(#eLIwYJB)uj4BxJZ=TZ2TMmf>w
zla=se>wZ>-WUGOn7fOr4d$IV1Ko?8E(?tA&0BcS3om%*LK~qYF23i}xQdnuf4!%(r
zKOfYl9%!vGetOIdYJxH7ruYT(x_R)rNnD4Mpv83rE;`|7;PnjT_4GtN-vz8a@$*ED
zd!f}?oiW1(@;;QT!7q&Kd!fL=dYm&XgaHf30B0V&SpqyiCsD5g=zcnAf0uBd&0z6@
zMt2PmUWeyL5AV%wKy?SW^8oH1qCLI`21SlRHp-%6(8Mul;us7<nI>R_wP6s)BmM^k
zKLNHhi~MA`3+4D?ZzthS3VwbZYhD~{o*ZlJA1Q02&oHd{bF6uDtQk4h7`~bV;+FVP
zjwz92O5&Ij(Z(zyyeob_m_ySIHDuJ`;es^}jx}FydtilY{MZ`z%<5P{Rsw#8M-#_m
z5XYm5<1vWiF$n)9_%ZS@JnA_f1&%?1W6+ah(3@k>0Q|Al7Z~nDjynk+u4jOU(Vz#O
zF#BaO!|Z>sU#c*D1HH?R_nF1QsL#-#dt)<c@lJ<M*f;6Wz)b42Zrcj`HVwL9-=S@5
z>^pU6iKqNcRsyqibS_t-+m(PT{eY2~BS_SsF@5`!YQu*P?n{#Sz7F3v8##W&80cnd
zNzB$3kWeB@X0=ei!LFD+r5+iydbDjk@IDHd`^1rp)jJIdmLh-tK1ynV|L@*`>((xL
z%DUwFfahsP-b0>txX<)4_AOQlMJa5hd)Og3Q}4l^2L)1i2vk^@r6<4(0lyvD2@k0X
zwF*NWw83ty*02++ne4^iChq4RZI(wZOF$p?BL8pef!8V)1AEjP7&Zb&EH*Q20q%|i
MojfE0EQf#q0LFnShX4Qo

diff --git a/static/fonts/roboto-v18-latin-regular.woff b/static/fonts/roboto-v18-latin-regular.woff
deleted file mode 100644
index 92dfacc618f920a9dbf9cbbb844fb0d77072e37c..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 19824
zcmYgW1B`AxwEf1OJGObpwr$(i9p15R+qP}nwrzXv_|5;4m%Qezp6r#i+ufa<w&|&h
zoTw-O2=G&6>;Opry~E{y?Ehu{v;Kb(6BZE#0DuyIII$lXgZY8gipk3<{cxKA09YRY
z0NdO1Z`WK*NktF<fXMyffBj&b%@CnUPKk~Y0D!Fh@l*VPzT;owE+cCLI{*L*^hZ+#
z0DwsMqZMx&IXe;n0MLy;8s+~$RSJ=1YG-B*0Kh>0=vaQx>GDs%!py+o#}}6WM+5u6
zfCM0$S-F}1n9=|MClvtj$2Tve4948p+7$p0{Q<!22mg>!AivE`42*xc-5;CvKYaX|
zcQ^kbe};weW8?pT1iBqO%G}!V$4`tM007qciLbeBUDe9U*62qkk@^$I&zOO>`ErS4
ztqoj%Vv%zE@gw*TAb229HU`!vKiq%0n)=Z>VySQ-*x5S#XrzDo1|a{Z`?dxc+u57^
z_)7ou19<t-N#vWpjk&JF^)Ube$zy=`zHfue3&Lfnfbv)Y_#qGkDR4hr@-cyr)2qYE
zQZ+(NqMV|vqlBUyqAEIE-^{zc6|vtiU=&k)ekH*$0$kT4=Rsm|v@nM5e28U}XPT`y
z{_ioh1`T++R+3+Tkad!2E#=VZ+2GkxdAcG54A;YJA>Pz3;6c=`-lb%_fJbC`ZikgL
ztYVJn+Mz`t9*B>v?mi;Va7E1hqd-LVkBVBkuYriK;{u-$u@$xjtpLpsxe?hBewrK9
z&!C4D6MHfcXccc&ZIyA=b`@B}+D6$%q(ka9W;zft)SHu>1HV(8({=V=X&v9b{dhUn
z*0nXfF3<65a=-4iEOVs*b|x_;Ilz#kpsHuAsHLo^Yu<75V$~O7HAH4La%g_Uw3@2E
z9LBqx>b@NL!WksQ8Q#Mgo7<cL;T|0D>@V>gKJn~J@f=$59BA<zdHEQ({g}r8kRXj>
zo|A@Al87S{N@i_8Bh*J;LiXqZ>of{`(GHb_`MtzgDHMm6Kd8DWP`SjHAj54V)>Pln
zzB=UGv}NtXH4CqpEVMLc@aIIlW1$Ix=Nr*ulJ|)-XYJ%U$jd@cBWb0w8LOg+v!Vrj
z#<r2nvKdWEW1TU%iPiEY8+X}4XZfnjgL>D_E2EJP;q4N-RaK6u-&SY9RI;J1eNB-@
zS@ZIotNOWBQMM?GOtow0Olamijp?0l54vg}_4$x&YpBY7*@5hzaC6aWL9sn`kwnpK
z(p|M<n_}!`wgHJ{S&EExev(F;$|~?Rm0>2SrNaJ#wHf-xl5-2ll%+$-&5Oq-$a5@@
z6<jroW&(>=MAQTH)}>*``n7ZJmId6hxy-T^4O$&`5O2m4d#0gieUBxDl-6+lvMKTJ
zdAP*Yfag#iQ*XK#>p#d<ljBwW!*vi7wJldh?-y9`%RD&O?&C8S6Y9(B)Z*?$$ty27
z`Mf!6B;V<|)Enn~(N3hsY)|dmXLT#>ExvW>>6sdS<M9p~Q(h2d+Yej`51dN2uMwYT
zb2I-Uye{aT;bO|iAMj_nY+N2L?FM-V>Gxw4z^MC(CbN(n5*0bsC`?mJsa$4C$zB%A
zqBj?e&PmW^8ooC<(@S}Es!n|Gj!)6vH+4;7PjA-be2%VDTz5VK@X~Hveo0&)J12tW
zm~YSRfKckeb9t|SFeTkD#Lo4AP=3Q=FnF-EfGC-t3V;h|9U_{rh~SQwf`~m0M1GK2
z^gLrPby&|jys2-w2OCO0CKSI#$n@Sx4rwkl@ok1=D{H=Vc&Xl;+js$^C=_x%4qVcG
z@CIp)HHj#LR&&}sM7Af&tmEB8GrD!!YB6@hh$&%Ef|VQ3{vM)NaH*bRI#07y<sqHS
zArfMne(|xZh+vKqJPz+MPA2)(+ci(%e$HXdy?2^dRXTsR|6JZFFf=Xs#+_|zrjvLq
zaJuklX)z~i8!gb^<zsT$w^=H{lIhR$1)7U`1_=<w{NxmG;&G{woi0|i@H%zI3J{gj
zLUt4WR@3;!?gA!{60|bZptI4uQQEvETdZIWU+5gL-pmnpefg}`z1wxskl)Zfu@lQF
z;g<=TNLomV7=S4|`I{`x0L!72F$T=hEbh^;?9mj}@@&8zv)2@JRJEBYREIHfAX6Ws
z#2D7hZA6{-A;4+dq#1!Rt*~)aBBK7Wkdg<Jnoy{aOQ@)y9twjNYFIqEF5W1UIqf%4
zLg6$s1-(xFWGvofqRnJHV*}|74h4f;{A3CWOyS<zd^XK9JbHsD(XwRtlj1`rX0v3H
zb-Y0b3Xj9Mhi*i{{KC6#1oHd>s=K`^@burbSSrOmN;Yx32oKQB6GRO>sciC2k})ca
zTg|I^&*W4(N{lxB;x7FmFe+O05+WIw$_}G>Fd<RNQ)il&`7I<ymGJ6hr>4jX7VWCz
zKcs3CZJKLKi&90v$>O_;aZ*FHsCBZytm4@+@pes)C4Vf`sA`1-pT$RYq1Z<W)34S4
zj<j>BZq{8#J57r(;3iySwCkVxW1>&C=}UfYBev=sIy3OS3iX36_yE23V)y(k3a;xi
zksyk`1_;49dTT7BaP=IcKXdpnTt8U7H5``=dRZ3T^z=C@)^0EOO{yE1iPOJF+L_2b
zCiVrs@EP@&O;E&C06sp3Z?Fh#^BT>oK;q%@;uv-57(7u`XT7wkh;zVX`nY|X6H8G)
zWeJoyW0g-%-?!XIf3dBheP*m*+O=-}a4<xNgaVVyRDRg&9cDQ{sh?l;IDZ0g5=i;e
zj+WwILO<5x)qS|4epyZ_Yn{6hj70fq!uCnNs2#qkuzBUbfwW2qlmhQ6>$S!7a&0KV
zgbPCM0Av3!+9oQnl1&PhQqOt2-ApFgw%vHD>bAY)4j*WIoK~|Sjbqo{IPz?_JrxW%
zx{p2NnqpqcpL`hUn_3uU_V$kV_HsrnrTY0P;0ZG68H*bk>gxjxf1B&;%R?wm(|33D
z^l$}$fCR)NU=Q$t2QxowNW((IMm`AGQ>#{DW1#rPVgkMlpu7IdanJ<FXtp&Vc<(^u
zpSA2uBs0~@{XCi})l{>!$BsRm!GFtUl$mWuNM}WKwIdPo7#%U{&P(C?Xz`!?a)JxJ
zkHQ*m7@GP%X9(>V{&>oi@~rJ_-Yj11FWB!8|2*;Eh~*(zc@FC8hc6^Rd{Fn3Eu)6m
zS9Y^-zZ^`e)Pwo@dkDWr>ep8kDc!QQpIqwKUdG7cQ#fKA&PkVct~^^Vx8@_f=$_kG
z9}HU}vglYl)L#tKVC1G_l7In;0wT=!RaN!tSe8`{+W@Mo#t9pb%cdFrfJ>KNfe;+l
zRRl2{r^&zMnaqpyDLQ|bSXQ>^HzC=!>^E>-q8w*pV%wpAL;0e3hZ`fzqH7$ABpdOf
z<#V8ksOmGY=Hjv%VyhZ>7z3Pl0j#_F#-#9j?9Th3vW5h*dpOSr+_d`iwEI}myY9xn
zZFU7Nxg%i*h`C2hI(wyHN2odnWIAIag^}9C%C(JA$}~Be7}6h~N7d&`h!4bbq9VyZ
z;vUG!5Wc2f@e?3l9iR;<^Tdt8^MsAb@-$_gCW#h9CkY*+CrPOzCksYz;yQn6vQ>Bf
zd=mglKo-Ck5Dst!ECP%HvH(p$2tXg83Sb8226O`I0nvcL9~H`%J^%$c<7Yoc2!H|Q
z1fYOM0T94y0Vv=Y092r203vuV03Lh|0RCT-uIoC{Kw_W*7{O-iRoCT^2*jq96&*|m
z07z=*7#yoBgKqgEu6BMO0<<BlN3CtJXWw^@7ji`hk4os{te02UPJMTO8&j%jzOv&T
zd{@4T_P)<7pcTd92+)r{eX)RFNdmb?7y`DQM#S;5?G<SWMz0_2LaUbZ_{Y(rNYpJb
z-?CML()pj$VYG1lQDj!k(Ve?Rh|Fubb18k*+2WulX<f~~k^I;R^Ae@&#;H}q<b}aK
zu0(TeBNndKy`sAE1k5Z)X$*lxr>(UL<=M%#g{}2IuUO2!1wOC|PK#LR>W>wLC9U`i
ziH^_}4QH1UHjBOUi2^{Py#LshGTi<xtboy#OxZA*6ns{8QRirqTK=_MLxSMeMty<2
z%y=Je6xCWu+R?P+OKLa<-p5J!05b3vhWTIOfB?V%NC5EnH{h4+dZi|WI*Qr~?}_Z1
z&N*7L2z8<gE3Sz~ElKlWYO1O2t8^p{A1g{!S3zigouXB0v_6va3N#tC-X)E?Q6xkB
zy@ud^${)Y3kC$ox4v;V(FTB(a7iZ^Vo|EkRY$kLP3?Kq-0uBKHrXvDq9{n6{Asa^I
zRi=PDx$<p6C63cLLo0CRtaWa}Ae&Ph8ZHC{vOY4sGtMCzRIOe+=}qn(yrzjA80hCU
z{Czf*DmeLEhoHZ=?G_o?Faj|K0^IMxTo9u`2=17KPl-n}&2WJoWIsg`yqLqz_w2&E
zNiwAhIOFsa)O$%XH!#Rfm3N3~WfDmLWgj5gSQ%hU_7rLk5Ij5#hrF|!fX&~?!MRS@
zjnK}73>1Xi($P@^DKP%uZX|A28_h-ue*?_B-{%VCxEWf7AOOH=`ElwdfH;dXDE1&%
zHYfxX!u_mt=#pHQKUAw%pcP}ZcOdCnh5L-Kdtw$?Ix&1^_aF$V&;;2At{H+TmG}E_
zh6n-Ycjs%uGi1CHkxmKXtYL?LZ14u>X6#vGV(k3v<S0wj_pGK<BJe?|QV(gXc3S-0
z&BVd@u&6RMyO^Zgs5|?i+|2^*i@{O|g7aE94W$__cW7^YI@ZcRwAQGDT~DvFsob}P
zb=V~9+-^|26gE6eZVuEsR8(KI(_+?b9$BkP3hX|SaFT;;=kh-IB97_u3PMpsfCwUM
ztZA?gqi*R7U5{26`W&B#M(QP~Q{o5DTm7Bf&E&!O&R^$D1apKZebfKR7(GpwLVHIZ
zh^+*4*Q9EP{cUb#7c*3>AFzS{#ioUPP+3>cL9K0^K(Arc%(=SqTx;hc7*B8a)$WjU
zMK!uzZ{{MpzQ_?#JGHDk;#@_;qg2mH%mY#KWfa{tQP#4<h5NijDzy}Lgg=SH_vh`l
z?6m+!F8%q6Nt-7%i3x(=KXDzu$ngvSDnv3UK-3tdq3Z@lmM>3NlO$6qt!pC$ggWi(
znj-KxMsliy=&e+-z1Hbp#r3}HK6>Nn&{Yv-d+w}`y5Tt3kpM>Zorts39!0@0mW^Oz
zI<IMTfP*HY974<xT?T}lke_6m|Jkz(9dBhWK_Ra9=-u}LCL#s#e9D{qz5Z1w1T?M%
zZ4SrxApH$A<BTuNLUAY`o|>ZD$kOoM@9$4N6+s;G<ncVDP~g6jDM_~(zr@p3OCaTK
zad_*^ql?ARd1I?H)L2c>JGxGJ$7aFT2*6%7xYJt|Vq&#Wy#YqFLh6emZpLJTe-Uao
z^+Yhl-w*i8Q|HC#B$wHiN_P#h6GE;IHFZ}*c|$=(Hj%fAESqsrRZwAUL93>>!Nrm`
zY|g7ww`Nq*m7*ZTWZ85Lq?fW+j8{`3-f{hIs(x=dyu?rB1kZ6V*EbzHT5-p5|HLW!
zH<XU)s3hIjzDl8#Es1gGd6U=5KJ+@An6$<Buh4a__i~$VZViTY#ios^%(BHcC&M=g
zkqKSeP3fP(={Ro{grlduJS9OV?Xa&{7@xcCW88WEFOZ3Ys1a`bh9VV5Qg0B*h*KdF
zEj$qLSwAL{Z3@Z>TV^sXV<Pj%V!H^kX;Czp@0X9(B@f5e&K>N(5yfh8DcwUYwKoe)
zWV6C=I((cV-g?ZAhA}a9bT8}d&NGMLFN5@g%*`YPV{zi4G#s1eBxAN8^|Q_1zc5=Z
zQmyx<$_h8w9-ZF$8jwqN=`irUu#{>=X2NFXi8z4~(&JVFz2lJu3D!IAiL~?-G+x8W
zsH=q8ovapz#A?NwB$L%EZA{{%u>@)je!0IfcuKd>0`NT}v)S1z9N(?>BKq2p?FhVF
zJhvwvQ`G3wb-mJveGpY6!uDk$1B-iYjzLLdM^8^oBoCQJFe<^(USOT$V>lcgDR84W
ziUjQ#WCjn0)JJcYGIfWA|3Nn*^xYgGc}WEAptt5*OU6PaFe&OHy1<sC<Veg=s<Yhx
zCTJv5AW6Lh1&Zulo(?KU7{ZhBw*b{8R%rXspwckS04_=G&TwlgFj$|vRTd@b*&%)S
zFgb>@GU;f9$DLpAT5fkZS&nhK9KA89ltF)#bY=z;I?2IXlcP~>>|jmEdu=!pb4$(`
z>}2qDGooKmhPYt@SsenpG}PPO@5ab=!IZ}>QqDgOV@ZaD@0!cjXI?}3p2bM)ji(0J
zu5R}h>HJuTNePM%qT1HxPd28}Ac_6!_-iW$zHz6Yb~QOW4<f+lWB<d%J+J)!^2Jvk
zl)pRC*$?)rYm@|B^pCUv|9&*#a0e(KAGv?w;X6i!fPG_q0-clv8Uri39L<_NBtkGC
z)S0XWOcz)MNp)+(<Zgxs)keT}FJ}HihqH(7kz22A3a#tKj{&|i27&slQ5hK8Fw(rn
z4a-*Uw8e3L-ih?Lr(0$CTo&eGg-GGk=G5oBs;#E;;WNhy`XdY{B!X^P71A}m=U@7T
z2)a}O=<1P`K$&#AHA3~UzX&&9ICh~POuND^+~1Fs`sqyS)(?HqMIc>N({ggf>_KTP
zb6goJwFOj?P36vHVcS&VUdD%ON|82aQ<>Vb8K_M4^A3MXs(#;jI^PdZ&MnMa`bFnA
z6>&H)Zf~}dNr@9+T0lyXc|Q&e`E;LqlT35CeD~1aWHvf#ylqPNSIq(uJR7rO0|;k@
zvJgE5{3jwf;|hjc(eL&SKOi{1|5_gL2U%09{rzWJvA=6Rf)OA(%I@B{m>`&pdpkJ-
zvggW^;vLyF0@btFNGyiG+ue}uHc$X7=76y$;&<6MD*rFp_Z|3LCqD<8rEgTgVqYiD
z+l*9(gli(nrgWDI@fbpVAb~Rin+(klv{=1>BeE97x*^0Ni?X?3F7r~r#<iJ;k?dhM
zYKJ!Y+vYcGWhSG~)N#;4M-w6X*lU%eBDwpCB<WM;x8t++N$?UaM1o(hAej);7?=S9
zNLR1fG+fbcurDP=t}JxJxT*G(GMYj2c>Xb-u^s#4tfYRoO*I?DUePK{69Vhm?DowU
zyIc73F5uGPZK)-HJB`<4h;pn+qEn|W_RG6D{wrLEd+RR?nq)SV#b?gCw}p$dER<dl
zI$%)M3e~u_;&Z!&1gED^je~oUgF8QIM5Qk2<kKf!fJLPr>@2OLqbQUcK_7TQCUpOa
z;nwaGD`O3A>hhYm;UL*`A+3$mYO=wKUAU=UurNwXqf|yiKWp49)3l39wTQlE!j&Qw
ze++>gPRTJCno368u)HFjnc7;xddOntqj7~yIVt5cv18BXI{gvM@+|6a1iFrHqp~!P
z+G6_@xe{NO;_Fyqm$fE()Rxzt;M4}w^2wIBLl8!rtNnRAX-W!^A7WEezqQDG@-5@P
z@qBj<87sqmduXz2#!P+RTu;U_85P{qEI&A6&=Rq5=}j_NQyy_uhzP7I^-Y&WCYwB?
z_m+_9H73d@*W)0rMG3w?7Vmp<Zx69DG!G>+>K*=*7t1cHCdcR44W}iK?nt=&B~sW!
z6)p>J&#SMW*-mRmO--?Vj0fy@6rmsoIlfrQM>bFi{5R;>#BT0JYP_TOPJGTqQ92J%
z^iU?V5J0D&uC4Z@1l%AwP)vh(1VXJjS#`D=rE0EdlBSNim`x;A$0QMkFg)*nkN;%W
z<-BX)RU^<s=L7(-o~e)7B9&_2JNS=IXzL96PdtTM)f?1K$G?L{wx1KbhN^f$o?%i3
zPdv>N3#aD9QDwsl6l&Q6i?bO7ztf58QG&XdjaYP)!9lYtK7~^Im$`rqb7%C78_ik6
zjxnps4o?_mo;G7ecs{&TL2OlxC}=odbycPA$w1%=2D>%gNhDkeyKep^Dl|xrx^VIF
zJWRKmO<YJ`JSn9->wKKICYBlLd7sQOsQsN=)pdJh(yQW0caEKrYTNa#rbo+!(p}Cs
zNo|tMQr?4?nYEA1yR(tN9_O=os&*cnxuVR3a#vH@!PMR6Ro?Uby>0Tug<0<6L`L~w
zA~0FJYG)rGCuM?YJgpIlfJ}uHWrgxOnU4ZAXv|#iNQ<SQ>MBzoW+}vr<!CU1C#I+x
z!={!YSaKtE#!_RJZ!tA!QXiHq|AOf5>Y+a?*_egZd2pwSD_6K#<hJ4OPkT_A;bJ#9
zveXm&i1p9)kCbPn^$FYZUQW-vrPkY1oAbUG$};cfn8Vk3(p4+u1N_`1pX~z6QH(nI
z8WLq4AR`~jWvf#VVj;=)ILcimq$T}(l4T8+{|_yP00_|R3N8Z1pc87YSrjnKmd&PR
z?3(Z~q5u_=NFSw=GsJJRt}Ecif~2T^D7mlrfWtVN!#R*_^xI?WOcC_@Vi`Fk31|Ud
zK>&l&-rF7m7|0T)%G4fpZlSzXC)MIj+Pb`Ki);S;J0=+`q=2(fWK7zqs<D!&rlIDL
zE0cvZq3+w+@gbs8@~q_}0&iTMpSRQmy|e6fJ?f*!SX+<PVsVI(<ndLHAT&>p*%bfO
z8;4Oz6i8qhwU)L%?-Fc#1yN}_=EIkyIoPjAQKwa_{B%b5p(&Y0(SW|V(JM&mWp-2k
zK$ShwATm93Nh+V>L_CckprIA|e#PxV0<)L0fa{iK)`0}I3I@1@WZZ$lm$H+P7`AyI
zHM;LGU9BeE(EPIi=><RiVEC6grWKvoUuY{<c0wxQqA*fd`J(i-zSHTzgQ}s}&xR9I
zt!dtE-;;9_E!8<GnOdiF#6q(31^5VK>RCYsO`kReVSrr!BMUGox?4<DVlwpK<DS+a
zOF&AC6=7N1MJgk5LXmCPdae5!g5A}aw3T<<lEv{YJS-U`X1rd7ctYF*xdGKL3?41f
zp_1UXfdV$S@|Ih~F&?Z*P?*`z#_SR=lgBYIK!KQ(va}3bVg7aBa9nMAxJNd7Q++i1
zEjN~TZZM3-9_A6hc^&`UAz^Dzeg18V7r{%kiu9{fX;7Dtrbaxs3M0q7Q~c#VaaOF-
z26~0@#S<)+L^?Nd6mmP>U3bH7&M<d_ou%j-Hgde*!2b5;7Ma&GyI$rqYpdBZaE;yN
zp4d39*<GzGrIJ_5$go7o<(GmZ-FKbAiBtdSu*Js7IM*dOQh|b7qvn`;+_Nj$HoRnQ
zCe~3%^D>y66gP2X<)oLCnaw7FrMIPXNv~37m$6gAQnfh|tu!&dTI9Q{kGk~tnE_>g
zsd6>tjl&RJO_2kNju=+=&GcotK~UfAsf^BtMyp=`94j$%$wgL0hnL$!V|t%6N+Nui
ztfH-=CQ~iLARxO58?vM>3yw#hJ~9}y7G+roG11>Sv;&v!(m3q)Mn>X(!QRI$ky~Us
z*5UBiVOG5jWI(w>Vu-UamBqQ~xR&SC119Dt-Mu#yoDrp!3?+Ai<@DmKI8(5)Kg7)e
zF|B+WjtdA^G}(3f(NRWfkJ}CLi)#J{L6feEQ~@K5iu23UK-)ja{ClE4E>Pc=*abwc
zgo!{^<~qckVJX)$*|fOf>O56st(|k9(3`r(1Zh#_7?cO@3?4BI0>1a9z6TrF-RdG;
z6nuoHCuTbxwm5!)BG}E^*b2-pvOhF*<U5zhAu1<K1Q&xVe!Yq7loBIE{y_P;0qx#u
zR7C1E<;{b^OR5-U4|l?J5A+*}yb+>*9gOM=wIpo0_zHch2`d<G2Ml4g+iDDFrj`2B
z;^z;5DY)e(T2Kr-5-3XQE|vw`Z*T;FrXEN5MwAyMVW0SQu74~2u|@7Ygok8WVF=EJ
zcDm41@oWPDv%=|iV`eJ9#jfNos15dOqQ%`Xq%VqOZVStMT&B?s4Os4Z*@kY9YkaBw
zczTa(;Iq<fGVT)vf{d(yi#0A5Vj5)B*0hwOyKrDF8!*wAhb?D0Yz3{F-)1SDrz4M;
zgL^EGW3D>vS+HhSqA`^gW5~*OEk5D-<V^FPkiFdcE6E;|(B?feJM)g8^VM;e9UWo*
z${{QavvQ~7UL-rB1sEg_k5Sie)e4tSXGQWscfem!Qn|3{N=Z6fs-%|xi(tdH7o~)z
z)>$dgfO_F1_dJ(x|M4uhSS2y?Mb2|D*PMTQ#qA!~xw}TjQIk2toxVE;MZ~r|t=Wmx
z2JvLvMk8}36lE811@ug>LL}c)Y(L%!Gtl51ia*>cPP#Bsb}=q~v?OCZ@Fy)L-iigQ
zt7gwe9^V)FK>S-P$-F)B;o#$*=3;v@Gr~v~wnRnE;Wvy_PFKc@EWF12=R@Z&Dsuds
zZh9Bz^W3xo)9#dWPPVh#&7cd@EFTbrbwFqvv|O|rOrb8YMolp|s_qu$8A}RpeGD&U
zbbO?XPjcj|w$?;ybNH%G)NP;^V-Q2#5~0G<n&J_zTIjm1@vOOF->_j@ON}8yMC`I|
z{Z8RdLKl9|=e1aT1KBf4R|UCvH){3b;1Rk{CY>kPC>3C?z)^0!U0|SsjD=7cf?p*S
z1SRp`vLxX@=l<>EtY=TX!`D6Ks?+w31#G1pK&+3VF-{>oLb-mqy#l^gDcglSE0oH9
z7eX&_#U-wPlHZuEgeVtRDm#2ea6sQpI#1}_jeY_|em6}?M#Py$L=YZDv2D^`U42a8
z28-s2_uhL4&yZ?a*^(YbS{bgdtK!&@(IVyTo&tpNH}%z0$f!dVEr|Ut$SM?(RF6|h
z^615(V4JXM31}>ba~7=brR2TJ*QGHb{A)7VKKjnW6Y~vMC;wGaKk$9(34<K9#RZ2n
zZNh?fNgnJOUa&HZ^`f|!tFpM)Zs*K_#GI_?eq{u6ZX~!i(aES9OIfxg5^3fB%grx>
zY5Duzh1(ZlVN?y_-Me5HdXk<7PKkkO_b}f87pBQo*;7R?33CMprPd~k1<AhxU-n;v
zOONzWi6?&Gn!p2>i_H70{^PqEoJX)3pw}B>=m(Bx>sc0V>02MNziMAFtuJ=WVqJZF
z4EYYx?tK$rog}BZGM7$I4W!kwEtRT=UC9-~b_c;9w+FcxBXv*hz^8uGrTlDA$>gRF
z<*uc>QTkEj>R-7fOm0za7VT2@V&Yt_N-Lrwp1nhV%?yP!hkKaA+y|Wq@FQ3%1#$xr
za?^IKu@tDoT0-vs3`1KwIJCh<px@<B`j~({qqzLukM*b-m%q7Ew*Ez`5NP){g75Q}
zsc5G*XUH#Jq#_V|KVlXb&sW1{BH$N=N%J<QPKp~fY#^zki58rtgP}sJIsv}xuo<74
z%Gof#ln#8jA{%rSr6IoA0ZzJ@%X?P}u_XSOA!I{pl6M|UIvWiBEX3r_^D@-n#Rj<?
zPPPK)S#Khb*$_JxyMBQa>ZhH(<4q*4Mv%u_7psNvi*6gpOQ)DnJ;Zs+FYn{~JfHzU
zC{j>?i7$dVaKYyAXz@=AGwb5L`w20&qO74l=d7WHs3_1_h17QP1^3(eWGJ06g?pP^
z6zk@-6u6!sF`I^uFDB$<r{R)hyYu7mOH$5Hmn~j%nue`1GnMHy0VfUA?%D2za&l;M
zV&SsD{d}w8Ds`xq@H1^sH2JMduj_7caQ~vm%Nn(Xw_9Ki#8~*N^*kU!#yWoKHfbFs
zs_0Xa<A&5Mp-CyhM}DWP%6-{iP3tudt)o&*uvN<Cu)2;WBbp0^j(;;f?2k}H#3X6F
z;2ddsC+&T-z#>4$NlzfkWc+0jac!a=sc5gF46ix1j7KOm*T8H|mU(d-GnX{3T<LeT
zI%*c~#72*Y(~eZDc)pUMp_nhi`#3C#?}Rn0;l(#Sj%($@=<y}l4jM~Kb=7L<Aj0?2
za7iz~@1Ol1ZnQFW$Gcdjba(!PDtZipu{MiJ)YMxOVSMCvcoJtUK42QY{XLZaqG=8C
zhiu6IK(~dPjC*rKcTimedEmJq7M*skJWX$g&tbp_wS@*Z*&-)Zq9-%fjD)5!%>d)U
z@^T{^^%4B3^LE)UTL&T=DZ0CZ%=i@?5I6!fs<1Xmf^`NDcS3tcF45RiCiYfx63l2{
zRFKXIQITJ=pxg%=`4X;Ppy!riFy{&v)??k#?qq49a3TwI7u`2dt&7@RE&l0RLnxNQ
zNNp`5!$&}$_>Ast;%?i2FBr_#tb((mKwT1*3w-)8B>oM}5h-^*ki6pET6irVG0&#J
zrnYH%B!yR#UQtEaT&F_1g8JHQd}E4Xqd&&`j^$qPp<iBoJAKAh?TEqoG%(awX5!&P
zJ*A<&*`YUQXljn<>AKc<PF3QA%Rt~HvprAvK)=_bQ^I;MgDvZz3rXNf41$px!qsc8
zxGaiabADg3n#%}fkbs~k<$F>GP??md7kjW*|7%oqJz~T3YZs6Qs-y^EHk_0Q*<pWX
z6%&BtW7I#3ZpqDPH*s?I%2)U~e%&T(!@(Z7m4WP12|y)iQi*-5lB_ShUjAoYe4(aj
zzq)aYzG1XjfXfB%or!I7#ruW>Zzu=rZ-=))jkw(cM;+C-18USf`4z>7hVB}$gL5-4
zMVVX~6V}Ah`Juj>d^&W8^SKu`csdxZBRv*P0!}VrrT0nAW2If;RUgv|QGj=LC=#rV
zZWs#-yN2x@gyDjw0^2IrB3j{SG<lV0&~yA7l)hR0#p%FwN`RwxrCQ=yad>`=lysm@
zjnoTs#wW~2x&+3g)Xj-9Iyc568Mt2*a7iu{(5?2U_uTc*@b*b`6gako;?+1^>+uM=
zse}dIg|ek0g)35~|D0TAt+1?ruW4M%MFKNZ)2W5me}M=l21&x{IbGehCTv-qSKq_p
zeD21b+>04ZY?QRXtS1{&-QDRVfz<HbVuIKE?{A$;w^W=gZi{0dSENzDayS;Y!Dsm!
zC23laM<)m@nLlld`K5{;2hf2FE_kTGD%&O&r@E^G*-on`y0Ci3qCPK%wUC{Ytztw%
zsL(Qb8C<0r5A9w}WZ#lK29l0xi;JycoZNTDK-6*%Df03?T5@yy6Ae8YcPv=NYSrDs
zw#jJJT3-Tt^`u&%)=WB*a`U?%=O(H01smRX7ed!HboQpgA>lMAj&byT*7wI&$Tv@=
zJacL#<&Nmfwfc$v$~b3VYa0`Bt$hv-@(G1#JIVN|>WZZqu7?dblB}jSXB%c0`7(oc
z5!u;SZKOJx&5^o=E<-wI4LnPhGrunb;8AUsB^YI=c&~HBI*aj^^}!ao54{cl%?B;b
zh6Zl3%O{tcDAzcCKgG*LY~$14W<`1;sYU#n#&=<h4qd2~iE4hl{9~y7ciOU#BxMW%
zc5BN}{CA6f&P3TR>*O!)ImGXJ>ROu{kQMW;U>cH_JXWrbL@RV%TJb+*l}lE)zN_BP
z<p==f)eXF7tL>FJw|CBR5jE>UN0_N|wqtO$+Jf;uFejLXv~5hKzUb;?IM##a&Xz94
zt+l&r{M&0!#8F}Qr_U712$yepPM_7$#yRt^+L@+!un_WOaSaO!2Zr-D-k6uHO^3Pb
zF3TKzzS{Q$Ij2iLuio-~pH4o<(N=G5S{-ZDGdd@5rp{w{sFu<W{J5_Sd?M_d^SkSl
z1JwN7ZQufxu?e<E3^#QqyWs-r9*r_<c4Efe{Q|LscHtJU=8Z}Y2zc?Vvn|x@m3Bv{
zai|FmN!A*E%%4je&vbRJc_%mKaH39XGGLVkZ+A(++gEyrHK_tr(V}O#4Ca}%Fux*s
zp61}GIXs`wkWNzD#NcBY<y!b2z?7Z@_(OpZBr(%_E-}ia>FO0m#1)+)Z_#1j5~np~
zOT08`9Lsr6qZWUGh?}jB5MZ1q`wK0;sI9e8o^AGU2k;9>aBdS4)WV0%GwjPtlXa{X
z<Okx7=DGYK48hy<swV4DJ(c&87q8@?ZLZ;<;|7KN1q>;M+01`h0Dg3VD6-unhLWp1
zQqRbI4wmL>hz`09)35d2&HwOs^R>gJr}r=OH#fyF^^DWZN~+8V0#zMAkljnxj*&Sp
zlH7lLR$Pf!w^TEkKAJc%1h51Tzk7WSCQ!+mG0^`)O;5nLf>THr*=c;0d@Ct=8Q?gr
z0E>!O9i86;-N&*2Ks*u=bEkq0NnmB9zQ|KB`kj)k;KA5+>@`2rpd&sxHHDI1DW&#C
z<H$0WlH&_0ZkLfRY=4%9Ods=jCF3AwVHYZe_AySq=Har<;Y^~53k5HRR8tCjOb@rQ
zYttBOQEhED6Tff$w*(qGFu~EO|5pyqoApu+Y6s<2LU!Rd=i63pA75r6pA%T1;Tsk2
zQ;UaL+(UUueZyJJy>9f%;BE2JUQ(y4n+FNewl$<Od$r#l3w@_3UuXPW?rsxF9nInx
zY(usR&faBG#}>|nL+7xgbc4}I8G8!$O!k(7_7)fjt<KfP`x`@~r@f+}$=KO<;Sm=g
zUA+5yXVM0VKM+(<5K$<hwA4|aS|9zgi+~a>+El;_QoW8~xgi2F+f1aZl{{15R&Qe^
z;iBthn~VB8ZH*w!_gk;!(lmiaX}jC)=)sNe^54-{Q4BGlPxG<yUjPC?6ocSQT^1-^
z23rm-r@pn`+?O|T!MvJ=SreO*Tp876K$*p|G@q=B2nm_y%dXCKv^+r~ODvMhGtYR{
zRLcLR_RRkvuO;6F%tU4Ym5vO@xj&*9BpAsJUlKWlX@+QixFOe>7yd}sDmy*kOiIYe
z?b`2p(Z2+5s0=wKjpN@V-%fcj%PTS@Bi06_PnmyTj=3BpWZ|bxvuxMZz*IUXt@!?+
zKZ$$!;MsD5&CF{fWKt=rKO`CB(J&;5b|;AiYgkI@cT?B#YsbsX(q&t*YCma_<pWtw
z>&fTR3Q*}*hhGhm-ggWieRq2ag}FZgCVydf3SVX7`dZ5-FDXIV<KzufkmQ1ld0yjG
zpnYKlSz`ZFh?qe9Hj-xi{jrubtlg|Td7MJc-O4|uQeCUYv`Q`D7FJ|^%J%D7h@OzI
zR|nS-$V<D%{=1eAwe6mEd+%W^F_f5-E)RmX%E`Z1upuwwv92fYYBMINIKLAwCIAVq
zuhL1>U!c6Rm~WEog%S0l8k0`FH74tv=U_&>cH%^8rtd?Ol?)@`2`fW56R;WT1;P0<
zkyt-J>xnQ{(+TSa<BsTfDD`@ZNxb@|S-5^}b*glCnBR0ZT8lg}+1q+~QjwoL`)6vk
z!GtecZPp&`exk=*Znc_eY<KU2h~aHg?sOxbob<GFe<yt$)g01zG*M9E7uNd%*^|(_
zH%}JcR_kLA+7E`h3ryMZqaN@2Mze+(hcjD+D@$X6p=k;%E~(_dec@fwNwL-S{6>1u
zEnPXp6(`jb1UZyiIl?ae^;#3>(n;aE*9B(~BnERxRjSuFC#VhKYd}6{K9DB5;7h(_
zp<OSfNJtpi={hKyt9mfKzOGphjd9U~biKa=G=QQ(evIfA<qsrJ0tSyG+%AeKF*g;b
zENYtH!pKg)9Vg&HyNwoX8)_y?Xq3-!yO&nWAAAP0kR8$Vy3EEJ$rCgVL(Fr>8|cqh
z@+@QLcxeRb&L*8y7SDx}0Vf@>iswS$XLi&OClQ{i#$^|({e9-|5g_?z27lAl>OyL1
zMX~%HPSkq)8!3#1T(TMOx*I4>_IQxRliB37G>_pzzJr!{I4SppHs;q3`}<(lHIF^s
zK8pwXOlsyFxs~_X$GXJfg^>%Nx4L>dm&0ypcR_Grb@k)p-y9~p*-~#K$2SfT@~I*R
z2C)xBAGuWn_}qYJekCGx6J&a``CeV9<420VNO&3iWA(g5v!pJ{w0v@pC+NCz5ukXe
zmrI8wn&;&w-_LlCYH|>ICNHsOhUJzT?6g`NnR#p>c*E2n`~?|5pd1%eX<*s7%=RIA
z0{&AsyLrwyI&F;iyG;0pYK4cq!-0C2WQ=&L7Q%8T;+uw18N!AnH@)6)yqjDX;zeLK
zU``n5!dt2Mv=`zqH!5hsOz&g)wWEq6)RLU+Y;GDZkM+ewaAm(u1z`IMb`l?#R>7}k
z?iV7gaMirRh?ApopRMGI^1FYZA$n!mW^PAoTMfgu<1-q~7Mq#*3-??j(RuJCa(TW7
zVn;4=TVhJrn{hE)Jv2G4XNc*8+c+PcyW_(RAd@ND{!@*%v?#4J1H+^Yt3rD@vz`cO
zJnHp<SE2T~u6F1dM|vy4pZtD!z$w&s2g9Wl8c0G3q>jFm<92b%Veu4sL{UsxO9QGj
zIu0L>&V9XcA#&(7T)Q-U*o<Xc{&fj=PrkcQU~*G>XibD<^RHzr8_N?diee`&k89!k
z#3ev|5+!}Q2F<tJph9OmjOMv0aOR0XeUgpJtwjI)pgq-(;SsY?#z7uZX$I{k)&5}L
z2e~$)aNvL=7(mDM&5WkDA-qQWZ`+B6pCQ+bg2vglJDF|p!)qDJZ8)8*#qv&t#N#(S
zK&5Ly%g5RS3G;$9{!|5@z?HD06?34L;B)KdNV#llqh?}C%pK~MP*n|q!HUD?wv%qp
znXN<T6#rT@uvC;0nO2!tRwD8I`V@}!8#ojR-$7;T&^xt>(osX=x+|r>lEcW_o59Xr
za<rRp&YW8z*R?152oppnw*z<T6S}#SIpy+w7m`MEBu{MbH4Glt`#-u7A>8F4m%*1#
zO+zc}dQu0s0g%n*u!3w$3JASYf<#Ri7;~_V&aDo4S_81!d5l&du$F<At-g~=*!2AD
ze5i@;7dVp36nIMmF~|ub&v@7wf(q^f>04=MTrS0Cmllx{lHp;voXVZa-nGoc4l{TI
zyLf+v#7xP7f|UV#Y<KAQ#%dV-t!|mWu1l?xD$Fb<gd~+|7Y(_0M2`ykDY)Ze{+@>`
zG<ROKb|O{rM!zlVp}oN%KaVrb<#m-_<}|;bmOc#>wJJIx!qN-a*J^B}ISl#r!3q<>
zrIz@$VW61UP4^u`po<F3W0$T?1mo}wPcYS2ZKJ*)j0Y!_PHYD13PGgciorwF4{OY_
zYNtnaE`SHW;4K^NRVO{nH;7&XK)r6AJ$)PLF<7O%kE1<dIEYgHH1Tz5p%E+Hc`F00
z2@1vUeC^A1`atsteh1R88^SgBId-^e+%5I7-lS$T^pog0i%CK~93VW5hfg^4SN7kg
zBAdbsM<2uo5B@r5XuK2`xa$-6bk12<cf6b({R%+(C5yD+9^w=gammcYN5{juR<Y1L
z*^jEB<M9+e+2>23=ZW27Iqqr{e>ePF1Zpy~B&&~NF%d-^Tw9++;r!<1P5#TN1?#W{
zGejzz(35W14?8k>eci||)kXhiqTViin-*t~p>y4Qoid@Esa8KH-p{yCni-9!=~Omn
z{UDm6#5tNwU@sU>4E`GV<Lg!JI#`%PcxZhQpI=-bqXPkoNt%}%)BQK0oxFZ9XMS+0
z#6iu##fTT}w_hf&m~~yi$D3u8PfY&HR#=04b}VGHej;eFt#NiTi1lj*?@hf+Qy68t
zQeOCe%WpMiX5MVw9&x;AS)i%JmjvZ%P4CLhOTnI#ttG!d`Q~w&e}^;h3<V@J`}7b&
z8Vuuxi1bcAQ8$>0$;l=kBktWeS;(m<8>P(ri}FG(w8OpiN5i|33=vDn5xL>G`;a$~
zxz{8M2|?u^h1N36ld)-s5<Dt3VN<z<kS3`w4rScQe<K?DX{vYjCuDkp4$X6vp#FpH
z(XV;bG?}za*5j0SKg<8Pp%POZiOS06bbf@Tp5}CXc&jVC$7YKzH=~=(VlrIrcPkq&
z?~qd`Qx>4dv4Y9<3;2zE`f>oI%%yDB3p;|f)Av5w4eRC)GT$rl!3i*b1u~Q_Q8-NZ
zxJ+mKhlaD-RCC~Um|h_0;S3kTX0$R%zT#QZK6>4gqT`?#3Lsd?^tIDocZ}j|8_v-I
z!2lnn3Njh2c?kp%?BRfgorz<@F-NR<cC#%BY5Jf+y#JyQLG!7vcUa>_7bs8|W>KtC
z=S%!M2n;-@9DYZ?XfYhb>N>Z%7R2(e0Ntibm!Tym$skb9xLVuZOEsjejbkk2+w10)
zY33->73+y?`0onsAm?xtABZ^_<6{f<;X`N-`M?Tk7FHtrG_nR1Y=DIc<E=Tsd&piX
zAPJWm0T@oFc5}_=kj|WJ+4isXzn6iSAh3QIxPd2E;Q=s^?ynbz(`u-q@gvF!-nND9
z;G0>-4?KcYSUTvNu!dYXM>8iN9F6-R!^<ojFwqkvoHKZiFx4=%B?+v#u&hF1_f5ob
zk<rjt@Vv3#65X{Zr1^tI_h5;Q%GL1|qjSHR8TEKaSnEmgqmpw#5Fo2xAq~*IU_@^N
zWMgT=vV>MMB&rPC;i?bH%s$NBEj1#UW3N*KP6q5KySXWuL$}YgYk6SP`z#FuFkOO=
z^q9e2lD5T}@YD;!8Ht6M2-@wf&zG;%ejC0#>Bw1A&<#K7nC_Q08i8WaxH{Upl5^ZJ
zaJoyMp|8llsfTaTaId>6czZ0@Xaz<+KzX)UKdrx6L!tCW>|yw(3Ko{oV4Pz2UV;_z
zL&e-25(7i7|6Zk+nBY~ottO5UK2XS6>@?n{X)@h(QeC7?_lxA((V_f)4g2u2rnz6$
zR1i>Cx#z-UQ{DV0*e%5SZ0qWCQ~%KwYU&~J#h`Qro<%5i|Ld&ZQk9SEp1kLhy{+Q(
zv9)wFsghvC?McZS)|hWTS4oU(Su}xWH_tYPCp{J=oP|HjVaRkg4~Qk^&&-Z4%j0|?
z#8N?pzfeD$u-OrbPPTeH@0s;q!!5R%6m(t;3=XgNVS^*Z6z3vuo#Lpl^g4%y)3KOg
znThxvARtj@?+RK3u~<A&A=_3ugJT2vf?O@!t!Hz%wPPuG&np2q&qla+#)c6M6XP~%
z;Jd%xhtidB1-O+XX+W}_Neu_9(@0{|(H<ybA8<apV2-tI^#%4e;<z%2!S{a{f;*Ea
z`5M-TFJNq(-y>mZ5A%A13?=M3)*zVa4-w!jJ?Xw1>TX7~qV?VmyM7%PnOSw;J`8C~
z34g3bru0~ymU47>sOg&b=eds%h7j@UbaE(RBz0(obgf*>$fY`)+ODnLX}ms&cGy;6
zaXB9fx7}4}Pb?V}N4a^#8+H#o48zMI=2J>Zi*NzaSLWilIicSMAsBL5wmYf_ekDgc
z&0593t(8b<cQLDe6-Rs32kpjIxcwCb#VTqcMZ*rz0F4z#3HyXHB}J&HL={}ri`dcb
z+1u&_i&4cNgW0%u-fzlBcmKHEJQ{So)MIoSVH#0Gy;gG@^%<8d!uhk>{WkE#)uY*P
zdz`G(uuK+`GLl%Ct@ADQvK^)tW83|72UdOnK44K-p)SSS1V$X0#0;&eH^7Yy7qz&C
zexIv&^0A7gxUnv>J^~S3EEmoejJILZK9Vz7{j}YG0*4x&S8R1x2=hBy!^-PzaiVfk
z%#%CfnVOtE00y=P4c38VZgZ|Y%qx`){_qZ*`?wD+jp7v|+=|20z%UL5SxT3;dJ-bn
zb&iY#SgDJXl}DPmgGy3;%8@=R?(id~c`74WJ=VElci`#_IUd@SuTnw;`5ku65x7Jq
zQEud!ibIwF8jdu}g@>C!kBbBy;@Z0wduTf~=I6>#b$Rv<{rE)|R&Q-aF6v|z0c_Tl
zUFJ7A2AB>^q<@+L${%~1Mqq_mW#&z~eFkVqNeW%D$cBLnS3aN`B`Kv^U&5|C>?mTR
zYlwb4C@?2|%h2V0osksygUmj1hZJgB=QkMbRQF#zB_}FLdt-$@W;SufqOe|UbsFeL
zqG0<Bq)J0}2$Fl~QAS-Nn*Sm@F_T7TP%@Fg6_UwJtiBpJ$gORj)3E;)kKi3@hULo<
zZ|U+7+9b0qzPE;I>F{}w?6@6aBM>y*X~7}L+(76MKtD^JpJG^wQnW_f47g&RC^q9r
z&zi#JBIW%xq~y-LqTb7EuBaUv1@a>8vae>_VAu$Z5Z7ww^`?UrZML4D7i|V@4!m@%
zJ-=A&bZJK0x!8JH_7~G*6E@G*@v+cQytBo|8-8hP_|kcuNe_?T4<E>2<tBE{Y8vs?
z39oAtq}Ao-qEY)Yoh#c|qY6ix%uWjEHy%OX_B<FmZ_)Mn93{Ky=Sh4Z^QJ6a0>C2_
z5!{3=6IC}17xq!aOBRl=OyuXE{@oWMu19a8F7ER-0OK9C#J$3!D1EtE>-v5H+kcTQ
zk>wz!Nt)um<7TZ8^CLdZYans0r4P+rghZ)~iQi}W9pp8(Sfr(78fWsPY(=ulukRpm
zzxeS1^J=g1eOn9kIY9hYrYfV|dH8sLge(a0n89I(P;1_+C5XS2q8|wQ3>m*^Ptf(3
zo<si`LG>}33{Bf@N5<Ac+&)*7w`VMQ={dCu-|N1_`8)}0zFJ9JKvz=#1v9QV7O&i;
zVddhzG3wWfvGwvu8{DZRcL{N;@Fo#xFF~m*OfZi$;C>5UJHNfeQw`L@0;+L{Y0$1w
z`s(L2i;jbx^NzO(Uqw865?-GaH<Ee^12sUKQ7I6n?9U4!m5YsbqBA-|U>G>FI$ZP1
z9zi%#EhSqsSn1;VCniNd%x@KDSd9j+_w=>Kd4<>y%yTG}Lte5Aude|{RV~K&pmdFU
zvoNY0T}F>-uk{5-1{^(-F6iJa_(j{Tus5cjrWEtuizWW<og?X<ouGZpab|IEu$kZ;
zjcQ`;zD`Efym0YwEh;%R^M16r@F*FnNY8|A;*E9X*CfKBcgyT4Z&JUj23=s#j9Nqp
z$X}=FG#m`nsL1Fg$0{jw!7UbFi-$oE#YL0ogJCeo#g3`$wqGRcIXY22VRZdcjnko!
zjlq!RK<jjD21r6mrUTxW<jQ_njr_&({a7kWDy-04c}c<R#GNAEFljBj`W)z}Z3Rw~
zmKz~D>D2-960^SXwt3sB5N$|aev|iFT8POed6LsEDGzh1jc^E$fo_7ulmJk>LbZCa
zq4c;ran9}p-Wb#+;;ZPsqEz}&P`D$9eMP$yFCW%&*q5PlkS%}y-*Mcl>-m}H1mswn
zD1A_l%=BtefeF^YS<%`m$S}3`QGV13n4{`m#j}6Z62?&eASqh;hfwcW8d3lPyja^c
z%>4Ncjt+aUnF%LYsNpChlhwjbVrV57=(L_oKEgDKd@^Hi=+dws9Zq<pfQPA$RLoJI
zyI$@2MLZUPIM7khiC7rZvY|Zf%4#tXGJ8q;*?@7!oLMgzfFv6$$H_c}3Wi&a>5@#4
zeQ#q4FS_)z4s&lMa7q<l=?E`1NC#BC5Lo|xJ6!TK5nrpR^0s&8&MT)jFduZi*cn>W
z^zF)3weP&^3#%?O`}d(Apj7+bqMpS86;tTg5!2W`9PGt+Qs2TkSt^tW1hgs_r;~Z2
z^5@UD@-G{=3&(SZBdF3}UZd+RDy!yOo*d`KVl7dBPG}T571l{jYoC6yRTztCmPHd(
zF$+N^ZiG^V%se;H*bQK9E#f-s+u}KrL1bmXbH)Y8+IXtS9`#DYPd@g_O|&`Uo{!dB
z@X_&BO^5Qi7*`1oACD#z`!!Q7G}&1Uzu&Bk!VH#J{;|?P9$z#ul`{$$DE>8j5O)T-
z)(L6f$L>5EhvQhtbGKs8t44nj##aGH)qIL%)UVF@$0DT5;%#Vu!<{_CG;!T)s_W3h
zJj=*r{0OXhONnfQ^Sv^FnGM933an?@fhqf$^o{%9X5{uj5Ey~ZqnzX%!uu0nPKE^y
zQv(j*lfcy%%h1Z7D*GA5O(94#xQZr~H|Li|gD;DIf72IS3Y7Qc4Gs}hwyx)(CWAGP
z7R6-g5H}8bi+D>$l4Hl5G{XxX3R?KYvo!@rsH9Z$<$y`Xau}%y5!S!SwFOkIm`om>
z;x^~6S8Nq#7?E{H-$n`yw7Z1f6+-2CIk3be^)BdUAuvb^ntGXBi*Z&1+KolVDUw(4
z_c+^cwR)M;zJvxD3`4-JNMC`-k-*Hi+>yYh=20K(pZD>A!P*D50&$eGg<S;=4HNr1
ztRvjy2;SMeSQc`*VuL0t{;w<F{r=J4_~cc$d*|@(&8q(s&<rp0chIr5x`STWw(g)8
zS9j2z10XSF#p(`fnv=NZ$mX(x3nI|_@)1Mdq*dE0*5@5pmpZNPJ7h#sVoyZihDE1*
zi}MP0te7)v=zu=MLjc1B((+27J-CC3t2XG_g7rt1Hk($eoq_ps#0|xqqv?bBYJ*~P
zI~iyswz=3~R50$SlYcc1S-50Fc~Qyn_aCl^9IhK1-+RPhq5WF?&hQ;e7acgZH?r<i
zl{~MDU%<HWBMXKB0_tWTW$$k!|NipmG!+?bn-+sgw5>0QkIF}mp%l3%&cYWP2I8G-
zK!A~CG|B}(aA$nmLYqPrp7!|VAhnKpl%drh1pN@y7$l@ry9SwpLdgfIF$m?Hr$>0<
zIiqdLE6B(~l*S-7cEl^U89N<;(P2BN6w6l8L2E8L7-+3FD6l;n#FC{Y74nZ2NeN5$
z7OvP^Jfcth&|xcvZH|qPUl5;w`!9*@xi&K|FSB2&PwbMXmMoFuqT=GBqT}MwkI`Y>
zx_6%%3m6g`|H8XT&)rDRQ*72GPkXuzc6Cq;=4wh>4#h-Ixbhkd^D;|TCNHjEOcE4z
z=Al(-q9bC=5zVy*(eDH2EZK5ob@4$#&W+tuls~QW$X-2%C831An^xpi9NpDho~=hK
zXC4~dYwW0T{rippnn}Z3aGC0Ypn>B6cptdiRl?O$>zP^E`-qi&#%g8nYt71L=OvT-
z9cSmAV&`dj;2_JyO(5q~s;bF3mDYRlsRX_CUUB4^N7=njv-4WZ1db&4DrfCK!_M)t
zE0JQXBjRB(S?`#Lci`RZ?6cM<^T}v0<-Dfa#aInG=F@2a#7|ic%@;EMQx$ooM<Pm*
zLg}VlL^+&sOSBX4q-quC6;NNWoz>{DtxM(}sH2%4T9}M{x^wNCO?9$P_4nTY1AX=S
zhxPctUc9ooNEtpL3&`!S6k4QAHj%!uI(eEH91I;;_HzIVLouNLe|6k7lp8S+24Lwu
zug+m+W@culD$LBxIVw|y4dE(nT5lP~qb8g_X~Jcgl-b$Itac^0_dd=0cPx*Or1*6#
ze#7)<=&!9y<sH`C1HVxboe_18+D(+HyR*)TDmmV&-8f}v^^5f`@dIkNNz`tZ`iz5K
zaQ!^5$jSwBnzf>_`dnyBE6V@Q4DP*y6@Bn$-%9yRf73d=*{x(ce7#@TGx1AKhosS9
z<1RRKsXXb>jf?1vIPcI+m8nZu?-CC|w@K*cQ5W<pa7VHJpfJ0>%JunQ{C$to6kxkA
zG<2yL#hU+dz*nKx??KNtbVg5g)K05VzXZJwvxj<@J`iPRT|f1iCjj1Jg*#+8?T}w`
zyxn)&A$a#x$ym@MXlE~yV@dNZRDQR#TbIh$4&A+o&WMjLtxVmMbxypM6D{4t%&q>g
z-X%Lg?KTPB2l_IU`hvIZ;QMSGJ?Q{`pYiPWTVi%wm&)s`!ygy}-KvPrh=-2aZIq$a
zFV?%nXV7gDx*cTiLD})f7py;t(j4dd{5jz_pfq@khZ3M?(K`=z5o!KIr{BMxTbIf$
z4n4rBmB{RKSZP@A6WiRblw}9TY!#>2C9Xh<HVHjcelCm)dcsLo^NOtaA{tmL20|A{
z(~32JX9jm=z=}CEsixqh!rLA2ndVWys<;Du(#-FI9k6w&T;kAO9UA+!&S9lty(+G}
zOJukQk?sXO7)*1j8r*hI!-`W_edZY*n<RnvD9J^bBx4L)+Cj%=RA5zT^<%ID*#<MJ
zx3(*%WvFj}p6NYgy-P0x-6o+MNS;yQX>8mXi^83;F=b_GMP0!&(%8Yp^y)ym*ym%Q
zJJoaRQn}8dJ3F-!nH>&m=D^IM&233pwoA-baf)5yGQX0M?g1ScNFBj5o|t4MJ!K8&
z=KnwRn`3TUm&#?V`6Q^{!lCggH&~Ui+iWp8SWKSd<dJR*$-7Z<JcWqW*HV@aLd0eh
zC;zX#D$+{qT8h>AoBqJIf$Cj@>i+-}#rh}!c-mdb0Sd!V3<A(URg>QTqC3I_N*R42
zf_TpP^uO1oa{w@&fRtP02hh-_>;#Tm?zT+`676aN#=6+ks1q32G14xNI<X@_X=bz?
zy)IlUDuZqnQgrR|4am)f%ENz9en>y!AO$P{0096100JWtE@O8BUk^O>02v4X00000
z#PAU=00000)d5oU`WyY#2`~tA0000900IC200000c-muNWME*=`NzY+!0Gu*`kxo4
z0Z;@LyafPoYXwyRc-n1}1F#)I6hwPx?(U0i+qP}n*0*gtwr$(CokCoUZKprtY}KjW
zv5p>#QAqoYPpPP^Sg0l-UY@{DLg8xOgoAv*Xk#?&)Lz7>lPIG-QAiTd#h8r3sy0fi
zf|#f~AqV?=k=0}{8A584*(92DChlaE@f@+nCX|=#XeXmEQ>q|VpFl@jRXCdUIQJ*4
zGHb)nY>HJfmN>KQg+OyFR;kL^A&#hR3hTRImGzlztT)5qYi3GG7kPq}asb`rII5e~
zFxJeALbm*9%rW)lJhIAZ^if4IS+_$uW_sNZ&GcM|3Sj#Hjt{|DsfIxkg`v_IgVhN%
zV%;#Y$5`V9#u*R39gr-{7np0)ND@c(pNN4e<HlmB+Qux#oQL${fOvfu#Vw7B`W?#a
zQ^>>Y$3D%BSJ=SJX?h@v|4A~8cfA|~&8^Iu$Z9;o6uFN9+}~)cJqGG2n4%A1jJP7q
z>cINd7_Yt{Qrcj+dWIIHiHby!#ACL8fR-u`rWl{#&H6ySgdD^ezGrW%Ho95$;l{nR
zvITy7DXq{y`Tk@#mdjxzS%=U?HX>9ep)KbcD04B*_=q{SMX<NE!f<_*@30O5`Z$8j
zW>{=B#YAHkhLLK<43tt=VXtnWkvhcx%}6u{V5%AeXVRbhXvqE4p$9`{GFFN!ib@h1
zSyxj@J4YbtmU15UB?Czx(tva&?bF)-+m_-ny)*~Imh97ip<l^v{RZ9oc9(u_WIiC*
zetPvcbn16foT4}Xg&rk4^gG7KZ^wC`)0r2@o}d2w4c+;jWOtC~I|Os;Z~y=Rc-lO{
z1CSg+006+VZCmS6>=a|$wr$(CZQHhO+kC6^-6D~wRpGg!L*kO+?UM46yOJ+byR@9N
zw{)TOfb_cbr%WlUCmSQXBd;u<F8`^hr5LXGqimw=sT`+VtGufGqN=R=p)R7Hr~a$~
zn%<gCT8FlkcBpoTPNqxg`s;S<Rr<R6!v?2ejA6Usr!i#gXS{68G+|RiQxDTT(^1m{
zQ<}M#`KBdi8DsfsEoVJ!6WL1G#@n9R((P^SJM6iRHjZ;nsk4Xkv`g(O;hNyO?zXwB
zxu?6=x!-v>Pb<%HFZ9myruiJcW4^EcxdB<g6yO6NgOXsm;F#duP|Z-!(BaVgup(SB
z+&6q8d?oxYoELFNhD2UQ1JT9NAF-D4P<&?mO`=|6U*cx6Uh-!ukZO=xnp&UQnYx=w
zr@T~>!c-S(2DO4ZLOrCuP<iw)dJ!XG>M^g`TI?$J8t3FDaF_WcKZ@TjFv4VExv*O}
zD?AiF12M1{^n)>AG1vtzf)^kinxP*OSOvC*L*Q(<37&+H;7_DP0aOH4MeWc~GzV=)
zXV7Ex3#)Jd6I>0q$G!0+yb|xnH}E^0MJ$9N6-YzUgN!3f$X;@Vye8@SGZi$|Fm(U`
zjOCUL009610PX;f02TmL00jU60000001f~E0ssOe00sa7c-mc#19AfZ6hvR`UZ5Ox
zR2zdjHiofnT_y*~>9R5Ao4dd^N!D0d-vNR!&R5tcIL=o&Bs<R6=KAY%`34uX$N475
zbjSH2UV8jcqD+S>8B(OFbIv`t+)2(cP?Ds`lTc-%NQ`S`U*sj{xTjaOVU?gJtJ0K@
zbFEH^sH`s2loSo}M5y8)?$yXpqBz97=8gwm_?R+yS-8Ji`XE$EnRjj^t)X0NQkKOu
zO{gkSC8cSejCu)*)JVu~uwvqeKkRtquZH-yeJ*@6h5!Hnc-muNW&nf#Sqv!*SO5Sj
z9|6$-c-q>)qrHJan_&~90FyT3CP79Zxn0o8Kvi0RfkT^NJEMoSo}vhlxt%G(!$Jeh
zVh(aPQ56HRSmJzbv?W0-Rx=$XNq!KEtuWTjNE*aqpI9Dar3_+m)TIYlN`Y9MA+Ba>
zU{kot61>f1K`id(6hDYMo|~Jxl5IdNUJ(HvPBsvW&&EhyMi9i}cQDbE1?v?EaD=#u
zVUrLyJJ16PuC<vGE`W;Vm<m7`27u_R0`?9m4k{rMkPrzOfVmPXh4*3vDM%=}<xh8^
vwVYuvpx1K60S*%$SkP*@L&0FcCcN-Llk5y8ys$teV~4(H=gALK995D4Q^xzs

diff --git a/static/fonts/roboto-v18-latin-regular.woff2 b/static/fonts/roboto-v18-latin-regular.woff2
deleted file mode 100644
index 7e854e669b7517d21df4c0b3c51047be86555015..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15344
zcmV<MI}gNnPew8T0RR9106Xvi5&!@I0E<Wf06UEU0RR9100000000000000000000
z0000QWE+`49D_;*U;u_p2viA!JP`~Ef!26|zb*@dUH}q-cmXy7Bm;*w1Rw>1bO#^|
zf=L@_d=+e)hO^s20I9$1Vm6|JjRO)4`_iH)+oY$-{{NOhWyrc+(+=P&Itq;~moSmb
za;PcG#b{HklW6bNgyv3$DXT=*jnciMxUi7driA)p(OvuU@bLMU?p_zpvvfc4ZF}nQ
z5FR2pG=>k&Im?~B3$Nk{W8DbtKiv#+GjE^n2#tM`%fnM$kAE(zdSXuiuHr9x1<-rr
z^$^YNeq&?w*pSG9f=Q%+&?BWswnUDuu>m70Wzw5Ll%isRqR?VsVKq?XH1(wv*`Lx2
z3JpyVe+uq)G`7-aNh4VFdMuMH6CL+GVRm``5k?<j23$GtP<($|`3R8~a;#B6O%O@%
z?q8QVv*?|XR)zpk#qC`cps)WI>{}pvb$}5}K(d39T?VjApX$;Rl-gZG!mrQa(rhG+
zTG?9cz4Q87bG|gh0^kGsfCa!HcmM{#0QmmD_xeVXKf5<hv5H-Re5Q9|T=329)LMHn
zOe2lRbkXz{&oHZGO{NKtBuZAfyA^x40B=~?0hnn3pz!xL({|r}>Cp5K4BaVw>Qr<=
zP$nterAtxmzFm2>{|o36@15buuqTti1UeaHg@7v*gk*=#7a~LDq-cn`aOpA#O`Eo5
zEXpcXP=(__fpG+fHv|+!fI$Dt)GYn4u>hCgLfmfoAaW+i8W<U}sL)0s@By%g(_Dvv
zq&rf^yFV?1X{;OIEH}X!V`A^(i!VtP#1}<pwwSRYSj8zd3PEZ&|GVE$YX{M6H_4W2
znn6H9U?QV^y?4KD8O~CFInxPLp;&@gyJP`|)AdvT`e0Z|(gHEy4w4`NBtr&BmMoB5
zxgh!SK`07ATC{_i@E!yL1MCji8w3cD1Q1|Xa<njAd9|4>5WGtQF$4(SgXk9w1n=t=
z9R>t30dzuh-REw^Fn|K&Ig>_PV(l|{x!B6TDkQ4E`r}ln*HBH>S}li8!g5nTNzObt
zWl|@-GrG1iHw&6SJCDLoOlB&nQfkq%K!b1fSE>x>wHm6Qs^#*v-P&q?K~zENtAYs<
z8+KTdPCDhZGh|Hxaug|1rb3mv3p8obX2O&iOV(@<*mLB}g&PlL%2lc|fsWy-Yp%Ot
z(v(L}o_+fA?Z+<@CxnD0B&DQfWR)tQC#tP+P{-o}3{AWqY7>GD2NNAH40<M+J(>CG
zaXbv#;_WS;0zU*n0wurNOOw4Z)oZiL@w~UL;#Cc`HhT6La22k>b+}=B)D{Q`Fc6?N
z)>|9|gdhw_NI@DhkhSG{BM${A+Dg4vj#{}iy+F#{9Y>rpYJ#BJs)6<m_ResdOwt_!
z(De5O++Vr(c`&s`ZInxkR%b$Tr(|R<w<7tqV8VfiF7Aowo<&#yE?|eZoYU~kFSy9`
zLH`l{;2(4_8h1iMV^j6SVi@(B58#I&D5zI2Oy&i&a)L^zvOVoJ4gx|DZrs4AcYNT7
zASiGS3^)h~LAbP?DK3r_xZs9FDD@;D1!>4Ywy_hsY#6A3YN$n*;2pe!cM?Dcqj3W>
zIF?|QpHMo7in(C({I2f<UcgIu#i6}3!X0ncM2A^r+cR_Y(s*C>3e(2450d$YRYoV;
zjI}+yS~$ChnQkhZYHKDEVig<OWy#&0d;>MhZQ5~D?s~+kJQ|284zP7YOaS7RfiQl{
zYK#qzp0{tua%(zz8;yL?>Z1Nl2ku(em&N=Bj=n~O#>*X+R;!mi2T1396*%hA@Bj4S
z{RlkX<l<Q#+);Jb^Zq5=;o|&y$pUyZW&gCb@2`ty`zD3R?%Pi+`<JckpK~=$>9ugK
zWOFO9Viw)G<d^Ms(2Ghuv`1?~e2STqJ#Q`c?rE)!_pWB#FfFv#M|Q4xpe^ZAzaz(j
zqlWe?)3@Bxm8eYs01aJ1bCqij<4Q_L`9lK>SG4H1yWcv6HNV$H%SCmSzY^tdVax3v
z8_pg|@B8PvGv2){Vxm#g`wscdZx_)AJ<6ei@^T?Zv3=tJI?|_?RsXN`JyKnCvi1dl
zPeyb_$Au-eH1ChNq2fQS;wZA|$U0&3mRB}gLuy$8k*1L{)jpS%(f6&k&9;EE@+c?k
z+=JHj?9;71-q&w@1sC&S`;EqZ^G*IT6$6geEq8Uqq#DbiOm+ZFHW2il!eC0nNji<m
zIZ9Zl(kf#O7!hCsD$LALgf&~D?5PB2$KzbNJAv$YQkiO})E1X9VUw&quh>mvqAp;R
z%@RJsM}$B~A_^l#1)QYZPEp8diXcN-$x=3Ql$RofC{Z4&l!F>&rA`H1p!_r_nkHqZ
zMY$MIBty!~h#hmQ8VZ<98%zkGaJG!u#cEh!kw7urC<}MWiOiX&cm|&eaG|N5!KWHj
zNG%mI;RvC-0cNsi+@{PzxaBU$vIkf_RF3Q(S%dV{@t9{eq3k6xdF~ZBdgUyHn{XRE
zxWRZatj5EU%z!yd6h?;fQKT@+6y`kRM64PsVIju|mT(a^f<~-N6OfC<A(RN5Fd1-m
zpb!Vj&WRxq+cp$IagKS10aHK}rZ5pwq7*NNgq!dXZo*^m7zgJCg5)st2#l~0Hehbq
z1mPyaWvu_&TL>>|?y~y|?3JGpOCeq!=F4tvfCE9M`Zl(4fT4}<5DjxnGisr0Pi-vC
z4O<(WUhF7Rq>s!5k=ZO9U>A<O>;1z+fz<!IGaEQ}-@r>=KqVp?QybquCX@)Qv`hdB
zOnxc>0`Ao(NHI|3wc@0}RfJmC1OUZ#-Z(6ew@oN7+*}J7^ZZQ<lXhyQm0OvsH3b2x
z1&O>}kA<|sK`<lz0ozO%n1=mC;EgU@tm<Ad4XnC!>d>u6uRi?-^0fp6*Yu!7QKHdY
zF=W_?Q7{l5B7o{AMKJ_0UN#hgIO?slzRUmT<*;SLV}KL&y~0Yk#tkfufDUlXzDV#N
zxcgF@00(+CKwmOwaAq_dSn$K$Qr`sDUdKH##dQG}!C}G=*h8vj`&aLz1^2vk=m>9u
zkPG=NH?}>TAWjq~fs?|i<M6m>T)(2naCC$e;CPGUGf#P^%c{X@vwnf&#|dv*t#tIg
zl<sEKH_dYN^9Y~Uy>sgS&3~i+Prpf($iLWc-uLs%RuKqD^fLe@a9?;xoxPqp!-ShN
z*LA-m%d&qugK1BWM<4_vr~`R3+B<wC-)ngVMI|TRYXks*Chwa*sS3h@1N?CSNF}{y
z&BnA`KLC8NfhXfGn-p%!JbDW<EV^g1`zAc_*iBEY$@J8wWm~po+wsDqUdr{#p{IS6
z=acXD{O}XWFaNymKXON+y${*|%AtJ+P!Q|_ih?}=HP{QVz~_9s-}dLZ-yXa}dH%PD
z??_(M_84B;_5@z`?Zvx<m$$u=SGIj9uWI`aUfnVKwhCW;UgL}g>B!=(@MXbS9#8g^
zQo}Vvip&A_-|@tgb#Nt)tuMjTh0ueBXYxB1ow(-|&iPYFfcH3e9ojBdx4aV2vu-sJ
zN2jtyuIvK8!|kPMac+w<2*lIE^K@FCdrzD>TAEhpwuZElyxPX`xD$@NC11;zyfwrH
zc=^&=@=dPZDL?Y9WN|cvTL$82Y;P$}yVOZ2jrVhMQkSN+3eo}ct<Z!EDolc8-o!s?
z+BkQe+$D8GM{7sgWAH+>OYu6FxH!&$_L&<tXrH<AE^Q_DPy6IFA|;UDQeg?qGwj(&
zyKiFMmvSekr#&sxdR(0L7&}gge5}*M=6vR8Cj!Kq(P^cX<W(-5e#5=)^b-?`q_gA#
zPC|zqcxl=$=dMF=G{8Sph&zqn_1t?-GSI?qaPkbhpL_3#5NS*9JxKbcfQipXHh^?f
zN4it>`hiU$+OY&j+LrVYG}uN5TlYBko=cZA;(+rlubd3<hl#>z_mx%|`X-{l)~5dA
zA0qLKrg5kCcpY%S2>{fufP5fu?pq*$=W5SG5a6Ip*c-qYT)#xx7J>(!Ne5QgmW2SO
zy=WgPvI{Mj4YGp5)_^JPeG_b5x^n#R7Xr_K96<pUT%s9JHU$msD+Qg@WeC|X#tM}u
z-TU!?n)4CwgLeTJ?RcI?r_o>tvfVAtm6xqCt(S<h(-*H;RC;p8nbl!(BAPr{UHhna
zRmj3=qfkl2#Y8(NTdTUaIcje_&UtdlCL8uTlinrMVb`KQ9>>@qek85O7)K*wsx><6
zu-UP&CQ2VVlbCC@4*KrSsyU!BwbIFA>kdw7V_SW-_Jfpog*7&3ylG@GyT!3|vb3gf
zDP+OcAWk5g(<N`+nW9&pP{ct3G9%VgQySFf-gEGRWlTc5ZP_Yr)G|<zP6&5H60GMK
z6Jn5IhJX@GDTEmP^AHn51%xd(Z}V_QBq5w3s6{Eo=w1g9hh=t$b-u@!+U2Nad{>Lx
z?r>8=m@|cj8ZGQHWS4XfDNXb;ZTz^oq$pO*f)r9t|KaZ>;>fr;ZK&<ZnWE<E;aW`h
zm0pN8Cj3yF89R`^>9x2qaJx;_YG|>+Dp1ivyU0y_PDTv<M`k?3AnuJz!m>>%<t^M1
zoUx`ZFRThyU#D@X*2Octwruq*=>STSskt(Agay9CHD?r0MRpTjLh+tz5(X+zv5vxl
zU4Ed`aiHFq71-32QmlD)-1Sf@KO;anR5>$b5O=bJ_4L^X$^sIY&ShMYl2rdM=u;M4
z0!55RmrhFZI3lYYM5Q-ZfbCS5kQbz%5rb76@124O1yWYhJ;QknA;8IE;WutqFUVwB
z<(5WxMRQ82s$Cjl;$XA8o+Fp%C}X9ueU-C+vgYUA-zvA*Vf#q@$65R!$kA=Sy8X+Y
zyKbJLa7eG%Cs=GRw$Zd?`_7%lzKu=+OY#`)W{Q}oD42F>jwz)8G1G(v?`HhKg_!=W
zq9x7*V#2l5OAai{3e*eE-9w4|5wxX2<4)F=5IAgPOQZGWqJ_N>mBr$?<doT_NQ9Sg
zRx5Rg@l_$d<nzUl2D+PBLi=ONoq(c^x7>1OOAbw}vBcDjCpq)+pm#WJi86%oCf!bL
z48$>VQP9%-xl%pV&t+_T!uXbGPXpB!&?`60uVi_)`x=ZV;JU|v=#3SUShyyYJf)7M
z8C~Vd?owDiBOFk~6W0ibC(MMj+RQB;Z*I|ale{VWt3pAE$`KD%U==AdD+q-Qme^j{
zq}ZW_Eb$HUc#A?hCDE8yKGESiD#@JkB#yd;Sb=a1(yk9l%$V|U$Ksq78l}X@*_q4C
za<X9%C~_(QY(<?!gf6AbA(i6c9Z*OsCi<!Wl2!wFz0NJyxcO!Zm4kE4RYI;oEq--b
zQ6~dc7G6{F5pCKt)S6-VY_e$Bn=DcJ1g=L_NZ6(tx9Ugy(spASz%PsGHNnF%pM+0h
z#Y}j(Mf7TQ7Y*6brHCZ>E^)hDp;}I=fpD$kMn@VT_JpgoRk`XrD51h(cVfwPJ{YJA
zq9c|ga@mYhAkZu9`?pK!jz$6mEY9Mjz(6GhVJ}o`LYa_@f>mpoOEHqPDlgH1P+VT|
zMhHV*n@Ux!M#V%5?$<x6@pwjziMT<n07@NK;M^P|CiR$EaZy=CY!J&c3mhn;b8DN%
zL~9n@QOyjw5H~<-X%1W>l@eUpA3r;OXSTpjU?TQ-X;d1ieOr_xCZg|4q0;N<xv}i1
zRphUUK~2alESj4(IN7QyZ4gMbs8pW>rn*Q8(I`f<tmnX(<xOXt4HgVbIv%fm%FQZQ
zs#Io)<ysoR+7QFBS4O?ACY=%I2!Yw@o+tmtpD4vAA?F*st0-i_i|7H(1y9H9pS|P}
zCj4J&tEW!He|zx*Xs<^2U-UFoks$YI1@b~>;eITaZ4GP(v(hORGI6WFfYy#)fvVlQ
z#DY?+59o{SG}oFJ$pn%*I#UXj``jQtNQ?$?Y(v`oI!+p1v)kZ%gVAJV3uk+@q1dHK
z1LRW;NlG(BNTx5`ECmv$Olbn!(RSDw9fa*$WSN#K@~4eQWrYJi#q=W_L;3kGqHfrZ
zaE=@Ho~*5kq0*=<x9W`^XvLZi)Hj^SKGB|x&1m8dM`}FmDKL}-V)hj81@4**Vnv3z
zI29&pFzYh{Qdp}*Nwx|k&61srvZ>}c281iEd(!-@gpumkGuy&lHNUhOIOc8(X@N@Z
zDd|1W%NII?q^m@Vo#em<@uVWG%o~8@^_g!8Zu>@;>IWPc{O5h@uY6$V<#LYOQsu0>
zrenqXrK|2p)XkrZYAxC3mavr#$+87qhq{=ESQ*;qfqKaaGOae1lmA3Jt1`sh?kP>n
zsh!^(Kw1&Dx$#I=V%|MQ<+vm1Yks*t)qNKEoLS1<u0$$4GUnVnhf`1Oz0B=q8hxj{
z5sh)eGJ+vZ#zu=PmX)DQt9O!*fuk&i73GxDk|46$z=eA?U=A|!qslqu!{QhgL+b0Y
z+eI%YRjtYz)mY4>B1QADuqsZy^w_n=b7A=OV0bY-q%jy6_J>KMy?qxL2na3h@sNx6
zwA(gV>R4qIt#Ra;fA3~EIiA=^;XP1sv-_LmS?Kt28EiLry-)XYz6LLxkyffhY-AuY
zCmLKfkB9ArW4Jhw&Zf<b2fK{&$kXUh!H7n_K9cu*2j#C`ilcQXS68-=zw&>B|KGhG
zH{P{w6wkFjc~G$H8|!`P!ILLnZAB-ikE|%cjiWRDYJm3z9C^u<0)J~zmNnEvuETs5
zycdijV%<bl0!k<zeuwhv`O&|d|HrbXxIqGi_d=B@XT-Utr&KGf=*--2X}|HH6T4oq
z(Z$Pndv~HRr-K-mk{ITn9WUqI8*9}N)U$MV3^Q3iNk>0?xj?6sRODt=qy!?%tFt<L
zvU1vcNk-Y7of(-uos@i}g@doDk-e9liG`hCxt*WQ@nPAl&TeE^7sZGeQ+_4F@&}Ny
zowuE-rM-`dk)yZm&(8t6=c0)Ly2-w|fzgBQ(Vj87RHM$>tKF5emvbB)%fqaLEc7$=
zGn%@NqON;Cw>*g^x(oPAtI+Oa)3Stc?{4PK#LU?0LfG*ao-x!I8+}=Mdo6t*M>89b
zusp8S5}xo3uvLN1w%ChrIwYhUNG6noGj5}Vfo*1ikZn)2hh#*yN&LWD0*eZMJG%O#
zQ<kw*L`@9iBP4@+=nzmZ;$<lnk!AeBF1C(^r|pTflXRtYILe`h#r0IEbd`ehJZF*{
zU2K>?*%^2GIY;GS<sHVI_y<rALnuc)z{o8VPVO2l@$<gL&o279>NSSyDMuv^%E=56
z3x#RPO;SkdMyyV2sKMricL&=_aD^Ybo9ExZ-8=_Vn_z#N^_W_eu?lUTdPmx!<YzyE
zJ-_gj@gSPi&AlL^uE@ywAse1*+h|A3FNq>o*B8)l!G1iw{dVQb6Yf(vo$HqTJ_?jf
zs3M05j)EdmBz@rT{_OI>(;1J%D}iU@Br^xo=8n>}U~`NSRgs^XTS&=DtII2eC`qbb
z2TN5;HVm7p&{MOY=1+cEoL_P<z5CQ;^-Z7o*@7S~(&7PfXZJJg+4PrH^tC~BGBq_e
zqja#Yw2_vbfLCJnRr+?NLE;Jg=tr?b%v!v$$F{Qjm1Fq<T<4!rseQK%(*vqUQ>3UJ
zexzkRA*E=%qOy3xTF=f{a@2T6vVxzddQDMlPAQbw<0Ts@mwh$v`v2|w5C865i%q{C
zDd#C0-V-wM_Q~|ryC*DB9*MOzzbmVLmKJ7ZmKAaP3Wnz9Mu%sUw*0qEKE+pYFI^4a
zOz=!)B>C--O2ZCrCy~~E>hY=cSmxR=ov1&#5C8U(`<GjN<Z*)OSi|###4<)rMbVTC
z8qJ&)`FBoHJgHPsJaLX!vrR^?MNdbsS?{F$5V;(7L)j~_RM{(Oir2RWij~hdBV^_h
z+(QFHV*~w@f?eoP%ihA+^@mGW23vYUf{m@Jr!*Sxk03%w%XhX<PxwZ!Ds?H_l5I?j
zN?u{^aJI+8Zj=RDr=79XQap`$Sr$pzMhs)J4XZ3}onIJ^WBtbVgBl_=^}u=L?9d6~
z<2&+!zc1|!b+QSvVK&E-J{<n?*&gW7*^S^Rw5oE{2=hDcj*|YKtP@lHK1Aa|vNtJd
zL1LcPEwM_Q9}+nH(QVrU5VVc=A7-cgqw0Om#NbF1>2v?KU#oVrYv$IH6PZP|Ya~)D
zQ$pe?Ayi>U^NeM|m!iKvz*Hht3T_uGva}Dr=7aI>PxB9S)>Tg2=lWClex7frxwlwo
z*hp=Tx*Ny48kNCKw`Kh}mFk#<IFvClOIzQuM|MA7V^*OHTCkQlrp<;1fS{E%K3a*h
z)|koi$(jNPT5jXQXCFQDsY#PSQ~+%V+gYgyEv1<#1oG}5do8*;rHqr9Uf={O?%OtQ
zGNeV;*vPsb9b%OZrdzgJrT~IAMcg7zUyA#@mm+ebv}xuCzu!K1`f2m#R0@fb8CO~X
za%BbEuS~o<T=IVIz1JF<Qf<;NqXX-Q8luXXrcVnVqlwJ5AJ{Ke_&m3d$bMa!$VxTF
z^Lzp3R92VtinsT);98abdg;=nnN?}eW2zQ&7p<SAyHpjr8~Ct9m$kQlkhPntvw8!9
z-{ZMDcAp3KE%?tvQ99!`C+zQq05x?@ZyExJoL_FOp!R>**E`j=73XKR)fK^fEv+y;
zk8<SV?cldF;}yObaa$=JPGjxSv#m}7=nn6VQE2~tUo4t;S>7<SH@E7C%-(m@_G41%
ztxS2lK=$R5gOk+mvgEvGY88<3u_Jvq+*z*f$LwrWzKKe|oiLr<RasNim>lj@nHc1E
zC(*kt{0esERVAEQu$VTTJyYFQ-IDaUBHGs^2D1VXm`Q-ZJZkipHSM5nfx7^)&Lw^*
z1VOtyH=Z>PTyAOWA81_HB>xv=y7Ewbp4KZqN_(KXw<I)qsviUY*~(q^^W>oDEa&n4
zY2IVBLCl;aZy0YFHd=C!7eSkHI;EfKD!q66!Q;(+zw?*QKYy}$=fQ5U?@H3MXJS4j
zVpC%A&&CaT)q35A6UFlTncR&(3Jr0iuO|VLG+CVhm?siWz;b9bDWo(F3o6qS0rNy+
z^)x_|rcVmCU%kHDf97%8>BoI1)zYiVtICB%+MhK+lH12m9kJXfJ!iQ2&IqLkFb+oS
zyrPJaJ~=){3~OTLoI~u@M+|t|=L$&&^w$E1IwuLEtrFWshbXUPJs9`T=jW#Gh8Lrf
zdjS%B(F`Y(cTU46n68)H%^$byS+VUI$tk<*ubJsn7RT%~$mAN+HRlty$s`5D8l%3g
z<&}?pe9Am9$Q)3V8(3JoG<E!H&8>^>lE2={Ox_5~P@)4Qc#Vn*%UihiPVwgia-!;9
zF3qaplTCF$sp^5h8FmAU`z+Ct_;;fy<I%w}xcMf$X=sk@ooA__8{v?59}~3{QPs*_
zD$2=RkXIY>s;`gQ7k-(3y;o<4rQ)@+vsZvO@fGz|pPz^1zk@T=3t<#gTo3Ny&rc6y
zwtdv?J;Gv3`|~QR$Zlb2Q#ano(?5?_+|L`dZv0?d+nZPQAeV<Qo>)2W0L#2hzXPHJ
z!o!{OJS5HGbbth3Ozr6E^hHtW(2x}8q>x~3o)PtNRUu9J@*hfCI(mew7}0ZK$}0O4
zT`tnUM#U#f6mRj4wes0*pIwc48e_NhksyL?S7(Zgr7S(S9#A&#_lWgH#IMqqq63L3
zm+}%>FD*0X-@O{stL3Gu$74s-5qU{<H?8>>R^8TFsww&3Rz7tTE&rdRG5+@srE~)=
z|Cf#$>3mvH*s-xV)V)!V-}Tf$caQtWuJrVLL^2B<AfEN0;vy)wX7?nK6Y%l6N2G2-
zIl`u_FQ@)tguCR?!KwMFuyp2-UVwN;X9|yF%)OTTJHgDTf0WZ<UxINcYRzp}2|XQE
zUMWAOQw!+oBd}!W;x3izMsng}7b9%=FSHXZqO5Xu#s??%ua`5-(nG!dA{~tM1NC_{
z`|NDu9ZFtZre`j?M6`R-nOw;s#K2TrU;Y>!<PvqMNmp4%7nf9Nj5SD3sUSDaQ|FOh
z3hBYYsSgH5Zi2Zf`ql3@R}31kbak5T$KU8#?d$w_^+Nt^_3Ntm<|Df<(6J-xmFOrX
zG+e0?+pa#rK{&%Td#1wk`{hIOnip?~#N%J(zsjG4NO<u+CcNk5nmxN9q_peHu_1wH
zuf)0sTom^`70Q1?X312oGNH<aBuNl3t5M1_j0>g75A9!D{IXKA^7%eAc6nz=L6Uf1
zPjKmZr(>tni)9$*uC9VUM+HFMsK8==FX<pzHeQVoMywBR3*Oh0B+}%s?0|`fhbtv3
zUzV<o>|T~vu=v8#$XLraPE+bGGdX_7f)M213^kA6rI=B)2b+IQo4H4M;CuSI!3xg|
zdxcrhy+IUBGJVV9nH>iaDf2g}0tfUrL*k1<8^>2}3Da<U^z91X$w!Ea`u8ZTy=6NU
z%Di5y>AVT*Q4Qwt@|lnaig}}>p&12V{QCapjm<|_CWBLx!UHpEQc!U1hBW-gh{mi3
z_Zl;D@-lMC1()iUmcv_1D>L#+D;nZv=NjY7tFlOyHKDDy=lmLrs9AaHu%sm7quGSL
z*~Ey4Nyjh2x%i04**M}OUGZT7#md#Ndx#W#2R<3EH?60Ytkt2F!W?#QEwYq@kHL47
z@twhMR5Ey-Zi|;Q%Jc1pFYHI$Ja3>%j<`#QGKVYcNgdIiPK5#YHAiJ9!(3~_8KVxm
za)x=nove#nui?9Q=_y^cl%i&$x50VKTpdx%ZlefKwRF*5Cq7d_ON^<nfuXWxwyuyh
z%^XYcHE<+{WFzfd#xdy4y#~(s^}h<D2A}O}`kNaYu00$JquqE|*WA}uQR?Gv>*5}q
zpA;D%obT@HO7Q!i)!%di)1kxN(R8A}w?Q1!+0u+{Z#+)ySz<VuE~J|*Fr1d=haF7s
zFU*@Rk2=%@PF=CPXqO(Bk#s4%Gp;{GDKFW;LRqny?NVPxeojqMu7;O@l}qAThm(w=
z2piz2rRW}hVK<I}%4yLSa$3_ECN5ZTZOtv%?t1b5zIq%s{t-0!)uzyzr=~kIB`HlO
zK_1j-+9S{<kLWlq4<dXpt=<T7&{Z)p*YG6|D7@fprZx+pPD}-q*98TX)&>TZRs;lA
zRQx}tVq&PKZepr(-qa$*)I|PNnSDrANMl!HMpZ^b7Z1-D{c3&V-dcx{vjQQ02J(M3
zE*f4`Yan)(p=wgY0)m1F7K6o9dvv+Kt*McQob-XAnyJF+2JhCy<ovq$fb#~<y8Pv*
zs6jo+r0kBA;6`bS3;Kq}7ZfAwAjbmi0@z`btT=v5Nj(9y`qxD-YF6PG>Rl+JYi@6u
zmGNpD)*I_wl<iB@zsIXA|6g(dM>|`(HY0fq%U&iH@revq3zm8{MNpAJmiCIW=YDyi
z#B%gL)HXOhQBC)b#^^G)`!rsisja&@)oI$qm{z(z-O-Bh^^CM7xD)*>d^{rw)*hjd
zryd%OzSso<Po;Xqj8Cz8^MpnbLw%DYT<B2q&h7EJ)tkcuO_xI=bj?erGzb)wK4(^@
zQ%nSi;`CIy<GFVpK^w0g#y+;FGCqcxw&RY!DY}v5Xl!C>WD%QaY+)RwtCUF;FtytI
zRYzXe*q3STSzAPXd3`c~Fh%P1<FaJ`_QJ;hBnBj@spIq2tKhgk$uF#PBvw@3iev12
zrUW6<Svz4m_Omm97eSNcD_akUolc!$e)$}u#sCN!{hGwFqNd9Dq^8O|;Do0;++Tjf
z7?~StN=aKXP&9SFO0~-~Yg)Q8W<7G&<xDMC?pfvF2saxg6OU`9_W9OM<Yim;OF@p$
zB!ew>co2ERI(EBmg<V(ss~YwOHn;79LlXl6DWTTm80x2yt5JhC@-|u)1NMOrUx9<D
zHRRyHjf(R4iyyS}8sfDhDvcXVj=kTHhA5!~^FUW+xKdPkFPbbUmYq|&q-b#LCv%Nk
zWAxuA)ZD!F^!V-Evhdf-85wQyk+L%d1y9S2y(crXoX6x;8$T#tCSOZ8_CaQG@UfGP
zT}xVSbQN^Yrl(ZzPT1=`bbLAS(nF0Dodd)|*sS&Q@G`N8;4IaY_;-g)4RbqfT$b#2
zXQoD{G3nnnsW`w+!lXReXX#G)gvyL(nEmLsF}drh-^iGK7-29#kJ9;!?x#l_PA@5Q
zGhHPjYlh!be>;XcLnNXYSY6>Ew*IT2aDvy${bcmN%GTr_tl@m&ms~>})25M*P^2G6
zQ3z+q!1O+}toCT;O{J$)bNs(&q@w(r(HcHFezU}gdk6pCMlU0K+U9bv#RZ$Bkg~qz
z-3iz7(ez%3$lYL;{Xc;kZ+b$>Z+g5u*1Sf}YgyI1|JbLZ^;kZqU<#?CM$Y#GYfVK@
zc~1@dH?9aJiI{YUq-Yn{#F+lXgo(riQ#)BbeR(;3U2i?Syn?R58O0YHA&EJzr-wZ?
z`-M+8$|oU%<0)>(qde5a#m=hgOY5LtVgrp_Q(>i~iD-Y%MRAsL-T))l3>dX|JQMhM
zE{GQh1{gc1!b)Q4zJA`f#0t&@7&((*)pUA$i1)({?aV{SXb<+hFOO<tatI4|b%_jd
zlXM6Tb$1I3bL10|gbE6!vanLwg=o&G(X$+8ErJT6B6Mr$rC+#6r?t(3RmO;<!)Jyc
zbVU1!W1Hec;(rRCK(GxZ59JS~46z`DMZW~)ieg(rB*NNhONgs!De3v?6s;kOewDuP
z()e+exQ;I0x*pN1AzGI#9~l=A6zsl9-Rv`As55dD5k5&+vzrft$CQkI<ck~&`X|S)
z_?^)Jh&8(V_;aaZWdboKFvNX}y7lU%QQTKbSEn}>NL9KNFo}f@OGsZg>pN`O-X&J4
z$G27u6jJK?KvPj$?Es~)st>BKM^2G*;KRc+lx+BjF>0wx{y$~3<(c5j;GTw_ID}t3
zq9y5ITb#`_JX5}8E8Fc@kB+cudJ!ohxv4lep)&>HTgT#^p=)G{*D^OVHR<)0$P&%s
zW`lU28JQ7dbBp7m8*8#DogGz*_cx#4VM-}cG&{>BVQXWnt!ZwNY<SVSo#D#pbS<6F
z3|1uT#m1_T)w6<{;?Yg<L3$>hzhhNmFIC2*q*lg|=9SFVw6smtl$0;3rCwB{9G>5o
zlX(^K%JqB7H*LI*Uu;2sYC>yMMt)s8tW2}M0PC4nndOz(;C|XrgJ5B)ap59CU)RLk
z4U0u%(E`}T+Nr9kv^jsnshYq4Zgp^jpNP$!-M@i6yAU7Wv&vIH((f$Iw|fFoF#iD1
z0<-?8C?}J!9TQ0C-NANn-G6?}y1=jhGg`j~FzX`-m@+%p^{m!~8-gDy7CreG$X0l#
z<Oz>usjj0$tE0-+QwqScy2)o9L(M;B_Dvo5=z0S1zq^h}TDAeUvd{;r%6D%m5ABR2
zrU5t+Cg{SFw;X|5^Z@zt1YPhFYmc?p+Gp*z4v3eBBoenoT+*t^_>c>g$T=n^or~Ps
zxY&HCA34ac{WfY?g|2W?U`vRH>ko2zGTxui1Lv3^I~OUh4Khcho$+gza|~tYqE)9h
zXpQhH*hv0(6<wn?p=wpk++~A`yhWg|Lc^jM4x#;CH4UTBhDzid6Ab4fbG1RfdNqXz
zi5N`ATLoZHO!%H?D!PACQ+#hGm#)l4aU0b)Y+fUbiMG{*&I48xpKS&;`)+@a+DH*l
zCQtZhuFyB;Fa_NMN%c@0wAy=YY!mO~B^V_4tOVk2A@F;Csp6ZuYi*Efuah)cv^o)c
zi<9q;3?)dh*G+^75jP{~W?<K^6l`3;U5)|J{~x_xmHr>#N$a-=ZM@SvTf{Ck_E%ND
zHC(E?;%k&0FrGUGSSk1_gy;VKxT-BFU04!IROPs}vI1H@uTCtD=FQv*zzf!Iz3c&%
ztjnu|#wrW5VNB#uO$WH>T>yKtZ;VlwpaU%RrWw;DOR|DqDv~Ld9Qh%_z&K)2xw1$!
z%|GzcDG|4W@3k?f2k5I8J&0vqKOi2P3$#Gq2$kyrTn($?+b<o+3ubJVW5llS2Fr30
zSdJS!|F2*ux_42TY5u_l^vAUjdMfJ81kiW9v&`q6E?jr;^{y?r;aGf`0HoO*>jDt>
z7)M@&ioCG0Z^LQu@!VIAIR!xddc5O;Q_)HjK;Q9hz&z4W)W!sI&&IoR@vHD?3P`$e
zay%N1U*uRIFGLW%TrXsBaZ41r>Fo3W8$bnwHjwD82>jI|iAu7mzqu{q$BVK<IHccb
z`+mT}{$2}bAOG#F<=@GO7t5kAVt|$^{~I7F##l;}z%?9FmcBXl^?)Az4pXi2U29EP
z8cbP7;gTjVUdS$5SmmVFQy@!us>qkeP@MvNyLDtf8R&+_F*}y2>8kYtX_k{nrF&gy
z^^DDA_x*_@Ymo@2Zr!@sECsB=uwi4*q-Ode1825ZIo<8|bnDY}bi$=8*|+JWt(V<C
z)*gSs2l!$RAM?N93^8Ktr)aa*+2(Qb0Jp{R)v(p6Nk_Ze*^cev@OH;^-HG2vBYV*&
zpbzsAd&+v*Bt+eD_R#?0yE{o>4PPhG08u)T=DhB3&$(a<Y%yl?^=U>m<W)S7OQ|%4
z2mvyastYQ<FG0=SsxXHQ<G>XACWf8q=?b(0K80)Hvf^Jagc;W~HGXp|q>icLM*5zR
z#CSnuF|qZRS(4brR1Jru;2Rztx?P|(eSZM(_6IQd4m$GmOkekC<hkrU!Yl&6IdxbU
zyKq#UOe1yH5>`84hRqsMxCH{!)!CF4c`zwo;SjIk1_06^@bJCi(~Z3`vc-!M?!VDI
zn{)puBX5->Qnxng13CjiJE@aZG077drym65^Tk>0?SM*Ej&;l}vlpWuyn`P*V`Q48
zqlbz6%<Qb?Td3H_F2Ob|imae-Shqtg2lITmU{g@Rt86P$%_vFGd+&R2;;g(w93Xj&
z$;{~n!Xy(A6!b?H7vnG#tZJPcY?FpDf0-Z$V`-@T75h+L0d%*a<K^ZH6#>sX&tI?D
zzY>Q(A$kp~1F?fiZ!5RGg|{^J@sAtO1DL9&^!0{?0)JtP2%$t%*@_gix&ll{QzYz|
zMlm&Z%vBph2<%iQf(=Uz7#Q1GieJRCb49Vci~+>^?;1B}Iqu99-#SEGfQhj-khNh3
zGPdl+R>Z>G=6$2db=D_SFywt(iE*=u{o)zvbN;_6NO89Hp#Przemb6pF5MCUAeoX2
zF#8W{@V^eEANtotM!sp7N3s9Ao@06u4j;n^2@cLpl=<X^@egvkRBc#gHIV-YzelFQ
zS&&3zcnYuKE9Br;+q5H`{Pw?nqEf%r?d$&a*m|yqp8Kf4go<elkHd{vvQGkm3t;;;
zOsO&Q0fvpQTU#zGF>pa4C@QBg4?-Q0o9oDR%RW^-TOWlISX#XqoNGZkqQ2Q|WSCev
zCuP)npH#g=*2tigGA!?vGu>yfEUyQK$4LCdYS@EUeqZX4v{lH1Z?84%4+19RQj3v<
zufdow8AzE^sz*+i&-ecQ^xl?A!l3(T0d8b6;^po%BzMqJZBE=JF_zUV2LTC4n3E$7
zTBQpPOQD-W2PgG_=%bW3O}Q-|;6rxCZ5lQn$ZgprxIgpV%IzUMhmT-^_;`(cPrUNQ
z4pX9;o1{HKwo6CZtsF)gsWt``C28@8(=MZM6v4&#-+@&rL^=GJlHe&tVNa)t$t)Dj
z0|Lo}##>jph%NwNy@6+mnh`IJ2?tfrO_4TbLHj|P!&8TUH)}OAG;^CIAb^4<9geUM
zj0?S2rN^+6SA_OLwr%T<G*kZbauyRZ1?(&(SuGB4c6hE$8&hlC1r_C{1)XMF@AU-B
z36LDaoL@%Fr>sCUk<smVHCEeM2p7Ie<d?+xaK+RuQ+FuZ+nO3n0iPohO#;w;P9LLs
zq|g3;CJ2p6DH5yYQH6kK$HBt2fJO0$kVUh$xziB>;Ff1OqarIYO&_<1BOS4H3Q>k=
z2-s!Yb8<Lfo|@=5>=gM-dDRcBevyf#?MH3GWHDGmq9E|G9uOu%n88|FHdM4|wb?bC
zfe76K6db16n~HFonlxNeQV>>m>Iq+ThvOLH+o<5=!c#1SoV;)UshP{3Gxc!#$zP%L
z!=D2CN52Kg@UQbC2PHQk;E?*t>8=Nqhs!q@{9s?2dFA;7E18|LR=vCxY^Y5@8RRTv
zy%1Pg+O2kz4d#2P2tW$WTpBWAd$(QS1r<}BprOmUYtf#auJRh{!pITErw^uSP*7qh
zMM(7l&NMcii7<tdYN27V)|RLhU8(#S9fnC}$Wr7zut~-hzCiR5=I5qkpAIyZuev!I
zP!8lU*++q*FmE)-6S7M#vm%Z(Nn(^`x$>pP7I>4AURWQIY6-0X$^<;Rw$wT8b6*C$
z)!s&m1oi~1on3)yn?Jx5d0V9v)?J6B$}!?VhHpH~4Y=c=SdKaC9V|Cq=4mpJ4C&cj
z|7p;dvx`yobshrb^nMOY#;`DJHwz!m5Z?|bK$cpQRa0c>*tzCm)T6Vr7#%oKWF_=5
z7^#-H?HsFCToa%|G0{b{GGhu&o(-$DgI_69gsPMfsb;A3*?-kmJxFeJq*s`{?6UN%
z>uVSAbpthgI~|OCmeGnVg>oNqQ!_Q>X*s^ww5G@BY=KL=gGLx72>>G0H>K3Rp8<w3
znR09#7=~gkb@iS+<$6x5nz+L?Nt`mzJfw_R_V-E;1jH|bYdv1yuwDGnUf5V4Au_gX
zTOqIW*__3i{kIBhI{3<^X1XHETQbk<COunU9&WmE-9o-gElDsU3sKG*>bxC9pNZYh
z1MIiowxgX`FCMyZ8;^${S%!<c+{Lb6=8=C<ie^(0V9p*tkhu`bZd->^_i#pTXM%ca
z22+0Bg}vGp=&`z6#9!VWjTB1wqIk}AmIJ#PM^wAij*^*{9Z|I=m~*pgw01PI<zX`T
zED<9pEV^Ep%l$99jI8{x6{XER7gtatMb*z5c3Z3KhgNXR5z_GjSn=+|d@Ob=efNES
zXb1<d@x$p}7-!D&hc~ROC(#pTB+Gy1oi(w(Um;r$EIaz76LU~)krlG3Uzd|s6*^R>
z<9$(LY4YaDWZj~cqE0GJL}&!Sei-cGnyO#TW=vs?A_`>BE(iTD!n!}EDCfY`;J~Q)
zH$VPMX{cbp--=@q)uOIS=fWsVO5PgN%=pr>wK8X-#+U0?dXj=jk$R7__r#A1!20y~
z%ovu-sLu`|6+1elS*hpE$SPQB&0y^3)2a@a9v^}zwc6dRtmI)Nb<|~lcW%vgS8gD~
z*k6$ff2a!}-g$0r$A|~tt-A0gSP|_oNT4w+*d^AM*u1qFS2+HfkxYKTHnQEq%A|Xb
zL+vm|7dlB}JT2ijN)H0O^lm=DToQjzhfia0*}`zv{vk3?K}4{A;RJkG)jVt$0TcV2
z+|zCuO<i*}AUB1#r_mG-LrTZp7ja3_mMaWB4TDE#8KNuypLdcuH`i(1b2VpsU^hbp
zrN~r9r7J?~#Qbgzmq?B+#qL-WWx43Jn^eVoK$h6rLv{!egzA+Sb<aX=(572^nBWE#
zP^%xe{;+Q&9y$9Xt@~f2NBKYX*L)kM^;0SgnQ}Ts5#!wC<8nx!?th(7lkr)uCu90G
z&2Q6y-wyuv|8<5B3SnPwpRY!D5^F}DWH-AA+{lv)lAm*yfR@okxPNyXHReTq_AJUV
zRgyPMu@$2S-(qGayJ#@SjyU)z2_QL=-W;yaST<Yx<JvHFOX3k#ENx3wn(L}R1eP^)
z-<xhcpsu<~x;@QhF+cjGUY1-Ek|vu2=E1yPmQqQ}7OpJKQjnZnwWWIxxKxqjtNX{j
zk4#0f*0smcN&ZiL=Ddp=ogTCW-Z!$G_?L&z(+l*M72eJdlx6>52qV_*Jsu=)za`-p
zq?m0Q0=SjUohV))PbGom$X*10+jlXo{v1AI8*?;>zXxBiy!xCnF;Y+m^G$P*l(A1q
zDiWQLRdR$kYQ)o7ElR)$7Lt+|1Sm252vlgGa5jW@d~#*bE*Q+a14;RyD$ECc3vEo(
z;XzFp!}>YFIG~wdwv|F|SVna=_)<F40XbhO>)>0|@p?&%*^2SP27}9IztKhyyWr90
z<9}K%wxEdft<T%4z`x3+XpstEYjW7AC<>@yE)FUbq|kg=C33X!7Q@|0KeXbx4~NL-
z=8F;@bX-%8=ZhOA<-WJtcqHtjMjaR)*2an)c|eD8+qlI|;|AN|?G1LdS66mE-}G8U
zWcb<8wLouhXdG}}K8Nao9ZPm1#?Xztn5tI`KIu%?X&=aA3d9&~5urn+%YOgMf;GcL
zLxz^oIJdrnj<C##GS;+WL~<xOEiN@&pJ;7Gp@E=7H%x4{*5>)K_zxbyGgBPNoTX$3
zatVz4Mo+tKY3j!tm-Z#njj2LnOf1%Q)IM8ZP=}!&;Tq1O6;YE|QxdrwF;G2%*6CWL
zmU9j~qA>%zd*yp}?DwMhdG*-;?<<P9+1kIlq-2I;S}ZqiXy$a|0JR(Lv)QkisFHCm
zK<ZaCRz?hM=Q|X|eDM!)Eh`kIEkYSuQOx_|on+@Hu>~T>7FtL&x0D!7E>3u$5oOpf
zhl1H>qLbZiU&s#(@br(qmm)5+<V2v#OxzkOaQPY#_=R@)mrycq!xxHd5d8+hrWuCe
zD%1VJFSQUcVZ=pAVT0t$Ie;oU!Ha?^HX)c3nWH>>D`US(3zsas@;DSi;xWN*uvyyg
z^jt2CGOJ~dT;-?=Mdmb~ee=$KZKTa@i^`vLXYg$iCEg|Iq<eZkgJ0#i)NYq9P)bcK
zMqHG*CTO~z;gJ9;btqKoP^dIT1KA<SqN|k#Dx5PFEOAcINegYW-T!`Q59dX&Fhfx&
zGN;l&?F<J36sbd0ajO|q>wid;0Ri~aE-VdXX3eq8tm=`OJ(k@E8lUXVL>JvHr616b
zw>I%b+1XuUzHY|3`FgxYFI_*D^+wN(a%Mj{meyP4o|{?S%R*Zl_)*{uxyz=j=VD85
zch{`ay60w7aBk+rKrT&tAeTno?ePBzdF;OJH=M<HxHSHb64(HMFZ?N!0e~Nd&EI|>
z_HR|oZK43XfB^_#x$h1;0J~i4KSKXacaZ~uEBw9+_!`H5Z~m*fm*%7*^?PxhDr{^B
z>|gxC&!xO3CvTD}BH_+w5v4>@nPdtnE;E=}lJqD*FSvm_C_^n|gE>U3Y~T1OH?BC{
z+>F~-b<4=DMHd%YK|_^r|Iss)#SLveU7&=J9*ii7V?<9%8}A^>gGmxB0`o5r5=Oe%
z!T$F64ej^3dy-WzkRNgi1|Q)?faYML*2}p1YwS}@X&F0}Vp!^ybgCXxK8jj93+)sI
zEyuO9c(f+BT%^${JUc)^d{P((>tvNvVSG}*z)?C#K^Jq8F$;L)C;->f1}uFqq}m}q
z;m+0%r|TA8<>;8BbmEIa6FVYh-Sbh}Q($*;86)`lrHCtjtE^vhE=PXTgiDnvt7-ln
zCT*H>u3km?Pi7nP%0qg2NGmfXHA!t9&`(}v@kewXN~|`CHN}5yu$#)Prke1&1-~S&
zpBv9<q>F8a&YnS;(=3`MwM!T^iA&e3h~Mg#76A*MSIz0k0SUDrY3OL3+KQuwXVj33
zDkpM9K(5osX(w_Bc{nRie<A75soGq~Ln@uhqf2#n7_p|%m@7{%7xYAc6=;D9xPU#V
zgC&@NRr>u%VWedHaKlWcv`<Jag;p9v2&_A(K&xC2e5;h|7LZOUfPj=q%aB4ypA<GY
zey<A^Dl6A}zN^&f7LYb6fN+y|L4ZG?;$;ibpoKjX66`q0>`iU>gM)e(!0myr4I%8@
zH-zC7lnLLL$pjlBNQvJNNm%3E<z$ONU$_Vfhyq;_AR3MWIr94k93$Z}(GY%(O@#3w
zqw5wB;<u6DQ5oGYnSO|3t>H_iFv5ASAR2RGFNqPts|)rvq9}np%pAx}R&?G4<4d2H
z%_hA-gR#*fsFU53I8%m~2p8)kfFBvsi56syKt2}2(7yb#%$U$;zycw1Y118Y;Ff!|
zPWdVsHI4l&4V(o-5E^zC8sdhi2jkr8a*{%5fI17tA>#`&;yky6ahRjA>M3pqx6xOU
z<h5gRH`h2TV24mSCn3OPhm3SHR1mUbE{SthKW>Lgy=0{(Xvbn}pd!U%#~SN-QAMPa
zEz8$J#E$*x5ZOn=j)Moy&Vsb#)KEAn%x%Y|qjXw?X9U_x*P=PV5QdHUEDijjp!gwe
zK`3g-<5^4-WNV^_EX8n<Dh`TAf>=$=khbU{rWstK(0d5tp&(WhJ>(%$#e3qBpj{I)
O6y7R}gQBj@I4BA`2c0zl


From 33ff66c7e0fb390e9c9a1519b686f273a1a548d9 Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Wed, 2 Sep 2020 17:13:54 -0700
Subject: [PATCH 201/496] Remove in remaining languages

Signed-off-by: Celeste Horgan <celeste@cncf.io>
---
 content/fr/includes/partner-style.css | 1 -
 content/ja/includes/partner-style.css | 1 -
 content/zh/includes/partner-style.css | 1 -
 3 files changed, 3 deletions(-)

diff --git a/content/fr/includes/partner-style.css b/content/fr/includes/partner-style.css
index 7aeb255dd5..dc120872e0 100644
--- a/content/fr/includes/partner-style.css
+++ b/content/fr/includes/partner-style.css
@@ -82,7 +82,6 @@
 .button{
   max-width: 100%;
 	box-sizing: border-box;
-	font-family: "Roboto", sans-serif;
 	margin: 0;
 	display: inline-block;
 	border-radius: 6px;
diff --git a/content/ja/includes/partner-style.css b/content/ja/includes/partner-style.css
index 7aeb255dd5..dc120872e0 100644
--- a/content/ja/includes/partner-style.css
+++ b/content/ja/includes/partner-style.css
@@ -82,7 +82,6 @@
 .button{
   max-width: 100%;
 	box-sizing: border-box;
-	font-family: "Roboto", sans-serif;
 	margin: 0;
 	display: inline-block;
 	border-radius: 6px;
diff --git a/content/zh/includes/partner-style.css b/content/zh/includes/partner-style.css
index 7aeb255dd5..dc120872e0 100644
--- a/content/zh/includes/partner-style.css
+++ b/content/zh/includes/partner-style.css
@@ -82,7 +82,6 @@
 .button{
   max-width: 100%;
 	box-sizing: border-box;
-	font-family: "Roboto", sans-serif;
 	margin: 0;
 	display: inline-block;
 	border-radius: 6px;

From 722c14f38176fa22f62af5a936fd2a3020c05b73 Mon Sep 17 00:00:00 2001
From: Shaw Ho <xxhe@alauda.io>
Date: Thu, 3 Sep 2020 10:05:12 +0800
Subject: [PATCH 202/496] Fix link anchor error

Fix anchor error
---
 .../zh/docs/tasks/administer-cluster/access-cluster-services.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/access-cluster-services.md b/content/zh/docs/tasks/administer-cluster/access-cluster-services.md
index 99730f4621..32912771ab 100644
--- a/content/zh/docs/tasks/administer-cluster/access-cluster-services.md
+++ b/content/zh/docs/tasks/administer-cluster/access-cluster-services.md
@@ -151,7 +151,7 @@ As mentioned above, you use the `kubectl cluster-info` command to retrieve the s
 
 If you haven't specified a name for your port, you don't have to specify *port_name* in the URL.
 -->
-#### 手动构建 API 服务器代理 URLs
+#### 手动构建 API 服务器代理 URLs   {#manually-constructing-apiserver-proxy-urls}
 
 如前所述，你可以使用 `kubectl cluster-info` 命令取得服务的代理 URL。
 为了创建包含服务末端、后缀和参数的代理 URLs，你可以简单地在服务的代理 URL 中添加：

From 42fe98690d021e80c3ec06671a829ca866f13a03 Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Tue, 1 Sep 2020 00:22:13 +0800
Subject: [PATCH 203/496] translate system metrics into Chinese

---
 .../cluster-administration/system-metrics.md  | 236 ++++++++++++++++++
 1 file changed, 236 insertions(+)
 create mode 100644 content/zh/docs/concepts/cluster-administration/system-metrics.md

diff --git a/content/zh/docs/concepts/cluster-administration/system-metrics.md b/content/zh/docs/concepts/cluster-administration/system-metrics.md
new file mode 100644
index 0000000000..1fc6853a44
--- /dev/null
+++ b/content/zh/docs/concepts/cluster-administration/system-metrics.md
@@ -0,0 +1,236 @@
+---
+title: Kubernetes 系统组件指标
+content_type: concept
+weight: 60
+---
+
+<!-- overview -->
+
+<!--
+System component metrics can give a better look into what is happening inside them. Metrics are particularly useful for building dashboards and alerts.
+
+Kubernetes components emit metrics in [Prometheus format](https://prometheus.io/docs/instrumenting/exposition_formats/).
+This format is structured plain text, designed so that people and machines can both read it.
+-->
+系统组件指标可以更好地了解系统内部发生的情况。指标对于构建仪表板和告警特别有用。
+
+Kubernetes 组件以 [Prometheus 格式](https://prometheus.io/docs/instrumenting/exposition_formats/)生成度量值。
+这种格式是结构化的纯文本，旨在使人和机器都可以阅读。
+
+<!-- body -->
+
+<!--
+## Metrics in Kubernetes
+
+In most cases metrics are available on `/metrics` endpoint of the HTTP server. For components that doesn't expose endpoint by default it can be enabled using `--bind-address` flag.
+
+Examples of those components:
+
+* {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}
+* {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
+* {{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}}
+* {{< glossary_tooltip term_id="kube-scheduler" text="kube-scheduler" >}}
+* {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}
+
+In a production environment you may want to configure [Prometheus Server](https://prometheus.io/) or some other metrics scraper
+to periodically gather these metrics and make them available in some kind of time series database.
+
+Note that {{< glossary_tooltip term_id="kubelet" text="kubelet" >}} also exposes metrics in `/metrics/cadvisor`, `/metrics/resource` and `/metrics/probes` endpoints. Those metrics do not have same lifecycle.
+
+If your cluster uses {{< glossary_tooltip term_id="rbac" text="RBAC" >}}, reading metrics requires authorization via a user, group or ServiceAccount with a ClusterRole that allows accessing `/metrics`.
+For example:
+-->
+## Kubernetes 中的指标
+
+在大多数情况下，可以在 HTTP 服务器的 `/metrics` 端点上访问度量值。
+对于默认情况下不公开端点的组件，可以使用 `--bind-address` 标志启用。
+
+这些组件的示例：
+
+* {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}
+* {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}
+* {{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}}
+* {{< glossary_tooltip term_id="kube-scheduler" text="kube-scheduler" >}}
+* {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}
+
+在生产环境中，你可能需要配置 [Prometheus 服务](https://prometheus.io/) 或
+某些其他指标搜集器以定期收集这些指标，并使它们在某种时间序列数据库中可用。
+
+请注意，{{< glossary_tooltip term_id="kubelet" text="kubelet" >}} 还会在 `/metrics/cadvisor`，
+`/metrics/resource` 和 `/metrics/probes` 端点中公开度量值。这些度量值的生命周期各不相同。
+
+如果你的集群使用了 {{< glossary_tooltip term_id="rbac" text="RBAC" >}}，
+则读取指标需要通过基于用户、组或 ServiceAccount 的鉴权，要求具有允许访问 `/metrics` 的 ClusterRole。
+例如：
+
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: prometheus
+rules:
+  - nonResourceURLs:
+      - "/metrics"
+    verbs:
+      - get
+```
+
+<!--
+## Metric lifecycle
+
+Alpha metric →  Stable metric →  Deprecated metric →  Hidden metric → Deletion
+
+Alpha metrics have no stability guarantees; as such they can be modified or deleted at any time.
+
+Stable metrics can be guaranteed to not change; Specifically, stability means:
+
+* the metric itself will not be deleted (or renamed)
+* the type of metric will not be modified
+
+Deprecated metric signal that the metric will eventually be deleted; to find which version, you need to check annotation, which includes from which kubernetes version that metric will be considered deprecated.
+-->
+## 指标生命周期
+
+Alpha 指标 →  稳定指标 →  弃用指标 →  隐藏指标 → 删除
+
+Alpha 指标没有稳定性保证，因此可以随时对其进行修改或者删除。
+
+稳定指标可以保证不会改变；具体而言，稳定意味着：
+
+* 指标本身不会被删除（或重命名）
+* 指标的类型不会被更改
+
+已弃用的指标表明该指标最终将被删除；要搞清楚对应版本，你需要检查其注解，
+其中包括从哪个 kubernetes 版本开始，将不再考虑该指标。
+
+过期前：
+
+```
+# HELP some_counter this counts things
+# TYPE some_counter counter
+some_counter 0
+```
+
+过期后:
+
+```
+# HELP some_counter (Deprecated since 1.15.0) this counts things
+# TYPE some_counter counter
+some_counter 0
+```
+
+<!--
+Once a metric is hidden then by default the metrics is not published for scraping. To use a hidden metric, you need to override the configuration for the relevant cluster component.
+
+Once a metric is deleted, the metric is not published. You cannot change this using an override.
+-->
+隐藏指标后，默认情况下，该指标不会发布以供抓取。要使用隐藏指标，你需要覆盖相关集群组件的配置。
+
+指标一旦删除，就不会发布。你无法通过重载配置来改变这一点。
+
+<!--
+## Show Hidden Metrics
+
+As described above, admins can enable hidden metrics through a command-line flag on a specific binary. This intends to be used as an escape hatch for admins if they missed the migration of the metrics deprecated in the last release.
+
+The flag `show-hidden-metrics-for-version` takes a version for which you want to show metrics deprecated in that release. The version is expressed as x.y, where x is the major version, y is the minor version. The patch version is not needed even though a metrics can be deprecated in a patch release, the reason for that is the metrics deprecation policy runs against the minor release.
+
+The flag can only take the previous minor version as it's value. All metrics hidden in previous will be emitted if admins set the previous version to `show-hidden-metrics-for-version`. The too old version is not allowed because this violates the metrics deprecated policy.
+
+Take metric `A` as an example, here assumed that `A` is deprecated in 1.n. According to metrics deprecated policy, we can reach the following conclusion:
+-->
+## 显示隐藏指标
+
+综上所述，管理员可以通过设置可执行文件的命令行参数来启用隐藏指标，
+如果管理员错过了上一版本中已经弃用的指标的迁移，则可以把这个用作管理员的逃生门。
+
+`show-hidden-metrics-for-version` 标志接受版本号作为取值，版本号给出你希望显示该发行版本中已弃用的指标。
+版本表示为 x.y，其中 x 是主要版本，y 是次要版本。补丁程序版本不是必须的，
+即使指标可能会在补丁程序发行版中弃用，原因是指标弃用策略规定仅针对次要版本。
+
+该参数只能使用前一个次要版本。如果管理员将先前版本设置为 `show-hidden-metrics-for-version`，
+则先前版本中隐藏的度量值会再度生成。不允许使用过旧的版本，因为那样会违反指标弃用策略。
+
+以指标 `A` 为例，此处假设 `A` 在 1.n 中已弃用。根据指标弃用策略，我们可以得出以下结论：
+
+<!--
+* In release `1.n`, the metric is deprecated, and it can be emitted by default.
+* In release `1.n+1`, the metric is hidden by default and it can be emitted by command line `show-hidden-metrics-for-version=1.n`.
+* In release `1.n+2`, the metric should be removed from the codebase. No escape hatch anymore.
+
+If you're upgrading from release `1.12` to `1.13`, but still depend on a metric `A` deprecated in `1.12`, you should set hidden metrics via command line: `--show-hidden-metrics=1.12` and remember to remove this metric dependency before upgrading to `1.14`
+-->
+* 在版本 `1.n` 中，这个指标已经弃用，且默认情况下可以生成。
+* 在版本 `1.n+1` 中，这个指标默认隐藏，可以通过命令行参数 `show-hidden-metrics-for-version=1.n` 来再度生成。
+* 在版本 `1.n+2` 中，这个指标就将被从代码中移除，不会再有任何逃生窗口。
+
+如果你要从版本 `1.12` 升级到 `1.13`，但仍依赖于 `1.12` 中弃用的指标 `A`，则应通过命令行设置隐藏指标：
+`--show-hidden-metrics=1.12`，并记住在升级到 `1.14` 版本之前删除此指标依赖项。
+
+<!--
+## Disable accelerator metrics
+
+The kubelet collects accelerator metrics through cAdvisor. To collect these metrics, for accelerators like NVIDIA GPUs, kubelet held an open handle on the driver. This meant that in order to perform infrastructure changes (for example, updating the driver), a cluster administrator needed to stop the kubelet agent.
+
+The responsibility for collecting accelerator metrics now belongs to the vendor rather than the kubelet. Vendors must provide a container that collects metrics and exposes them to the metrics service (for example, Prometheus).
+
+The [`DisableAcceleratorUsageMetrics` feature gate](/docs/references/command-line-tools-reference/feature-gate.md#feature-gates-for-alpha-or-beta-features:~:text= DisableAcceleratorUsageMetrics,-false) disables metrics collected by the kubelet, with a [timeline for enabling this feature by default](https://github.com/kubernetes/enhancements/tree/411e51027db842355bd489691af897afc1a41a5e/keps/sig-node/1867-disable-accelerator-usage-metrics#graduation-criteria).
+-->
+## 禁用加速器指标
+
+kubelet 通过 cAdvisor 收集加速器指标。为了收集这些指标，对于 NVIDIA GPU 之类的加速器，
+kubelet 在驱动程序上保持打开状态。这意味着为了执行基础结构更改（例如更新驱动程序），
+集群管理员需要停止 kubelet 代理。
+
+现在，收集加速器指标的责任属于供应商，而不是 kubelet。供应商必须提供一个收集指标的容器，
+并将其公开给指标服务（例如 Prometheus）。
+
+[`DisableAcceleratorUsageMetrics` 特性门控](/zh/docs/references/command-line-tools-reference/feature-gate.md#feature-gates-for-alpha-or-beta-features:~:text= DisableAcceleratorUsageMetrics,-false)禁止由 kubelet 收集的指标，并[带有一条时间线，默认情况下会启用此功能](https://github.com/kubernetes/enhancements/tree/411e51027db842355bd489691af897afc1a41a5e/keps/sig-node/1867-disable-accelerator-usage-metrics#graduation-criteria)。
+
+<!--
+## Component metrics
+
+### kube-controller-manager metrics
+
+Controller manager metrics provide important insight into the performance and health of the controller manager.
+These metrics include common Go language runtime metrics such as go_routine count and controller specific metrics such as
+etcd request latencies or Cloudprovider (AWS, GCE, OpenStack) API latencies that can be used
+to gauge the health of a cluster.
+
+Starting from Kubernetes 1.7, detailed Cloudprovider metrics are available for storage operations for GCE, AWS, Vsphere and OpenStack.
+These metrics can be used to monitor health of persistent volume operations.
+
+For example, for GCE these metrics are called:
+-->
+## 组件指标
+
+### kube-controller-manager 指标
+
+控制器管理器指标可提供有关控制器管理器性能和运行状况的重要洞察。
+这些指标包括通用的 Go 语言运行时指标（例如 go_routine 数量）和控制器特定的度量指标，
+例如可用于评估集群运行状况的 etcd 请求延迟或云提供商（AWS、GCE、OpenStack）的 API 延迟等。
+
+从 Kubernetes 1.7 版本开始，详细的云提供商指标可用于 GCE、AWS、Vsphere 和 OpenStack 的存储操作。
+这些指标可用于监控持久卷操作的运行状况。
+
+比如，对于 GCE，这些指标称为：
+
+```
+cloudprovider_gce_api_request_duration_seconds { request = "instance_list"}
+cloudprovider_gce_api_request_duration_seconds { request = "disk_insert"}
+cloudprovider_gce_api_request_duration_seconds { request = "disk_delete"}
+cloudprovider_gce_api_request_duration_seconds { request = "attach_disk"}
+cloudprovider_gce_api_request_duration_seconds { request = "detach_disk"}
+cloudprovider_gce_api_request_duration_seconds { request = "list_disk"}
+```
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Read about the [Prometheus text format](https://github.com/prometheus/docs/blob/master/content/docs/instrumenting/exposition_formats.md#text-based-format) for metrics
+* See the list of [stable Kubernetes metrics](https://github.com/kubernetes/kubernetes/blob/master/test/instrumentation/testdata/stable-metrics-list.yaml)
+* Read about the [Kubernetes deprecation policy](/docs/reference/using-api/deprecation-policy/#deprecating-a-feature-or-behavior)
+-->
+* 阅读有关指标的 [Prometheus 文本格式](https://github.com/prometheus/docs/blob/master/content/docs/instrumenting/exposition_formats.md#text-based-format)
+* 查看 [Kubernetes 稳定指标](https://github.com/kubernetes/kubernetes/blob/master/test/instrumentation/testdata/stable-metrics-list.yaml)的列表
+* 阅读有关 [Kubernetes 弃用策略](/docs/reference/using-api/deprecation-policy/#deprecating-a-feature-or-behavior)
\ No newline at end of file

From 6b27a86b41f43f24c6ca757f4e5392c715fe2782 Mon Sep 17 00:00:00 2001
From: Jordan Liggitt <liggitt@google.com>
Date: Thu, 3 Sep 2020 07:57:41 -0400
Subject: [PATCH 204/496] Add warnings blog post (#23592)

---
 .../blog/_posts/2020-09-03-warnings/index.md  | 278 ++++++++++++++++++
 .../kubectl-warnings-as-errors.png            | Bin 0 -> 226605 bytes
 .../2020-09-03-warnings/kubectl-warnings.png  | Bin 0 -> 303626 bytes
 3 files changed, 278 insertions(+)
 create mode 100644 content/en/blog/_posts/2020-09-03-warnings/index.md
 create mode 100644 content/en/blog/_posts/2020-09-03-warnings/kubectl-warnings-as-errors.png
 create mode 100644 content/en/blog/_posts/2020-09-03-warnings/kubectl-warnings.png

diff --git a/content/en/blog/_posts/2020-09-03-warnings/index.md b/content/en/blog/_posts/2020-09-03-warnings/index.md
new file mode 100644
index 0000000000..2e93d5a573
--- /dev/null
+++ b/content/en/blog/_posts/2020-09-03-warnings/index.md
@@ -0,0 +1,278 @@
+---
+layout: blog
+title: "Warning: Helpful Warnings Ahead"
+date: 2020-09-03
+slug: warnings
+---
+
+**Author**: Jordan Liggitt (Google)
+
+As Kubernetes maintainers, we're always looking for ways to improve usability while preserving compatibility.
+As we develop features, triage bugs, and answer support questions, we accumulate information that would be helpful for Kubernetes users to know.
+In the past, sharing that information was limited to out-of-band methods like release notes, announcement emails, documentation, and blog posts.
+Unless someone knew to seek out that information and managed to find it, they would not benefit from it.
+
+In Kubernetes v1.19, we added a feature that allows the Kubernetes API server to
+[send warnings to API clients](https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/1693-warnings).
+The warning is sent using a [standard `Warning` response header](https://tools.ietf.org/html/rfc7234#section-5.5),
+so it does not change the status code or response body in any way.
+This allows the server to send warnings easily readable by any API client, while remaining compatible with previous client versions.
+
+Warnings are surfaced by `kubectl` v1.19+ in `stderr` output, and by the `k8s.io/client-go` client library v0.19.0+ in log output.
+The `k8s.io/client-go` behavior can be overridden [per-process](https://godoc.org/k8s.io/client-go/rest#SetDefaultWarningHandler)
+or [per-client](https://godoc.org/k8s.io/client-go/rest#Config).
+
+## Deprecation Warnings
+
+The first way we are using this new capability is to send warnings for use of deprecated APIs.
+
+Kubernetes is a [big, fast-moving project](https://www.cncf.io/cncf-kubernetes-project-journey/#development-velocity).
+Keeping up with the [changes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.19.md#changelog-since-v1180)
+in each release can be daunting, even for people who work on the project full-time. One important type of change is API deprecations.
+As APIs in Kubernetes graduate to GA versions, pre-release API versions are deprecated and eventually removed.
+
+Even though there is an [extended deprecation period](/docs/reference/using-api/deprecation-policy/),
+and deprecations are [included in release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.19.md#deprecation),
+they can still be hard to track. During the deprecation period, the pre-release API remains functional,
+allowing several releases to transition to the stable API version. However, we have found that users often don't even realize
+they are depending on a deprecated API version until they upgrade to the release that stops serving it.
+
+Starting in v1.19, whenever a request is made to a deprecated REST API, a warning is returned along with the API response.
+This warning includes details about the release in which the API will no longer be available, and the replacement API version.
+
+Because the warning originates at the server, and is intercepted at the client level, it works for all kubectl commands,
+including high-level commands like `kubectl apply`, and low-level commands like `kubectl get --raw`:
+
+<img alt="kubectl applying a manifest file, then displaying a warning message 'networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress'."
+     src="kubectl-warnings.png"
+     style="width:637px;max-width:100%;">
+
+This helps people affected by the deprecation to know the request they are making is deprecated,
+how long they have to address the issue, and what API they should use instead.
+This is especially helpful when the user is applying a manifest they didn't create,
+so they have time to reach out to the authors to ask for an updated version.
+
+We also realized that the person *using* a deprecated API is often not the same person responsible for upgrading the cluster,
+so we added two administrator-facing tools to help track use of deprecated APIs and determine when upgrades are safe.
+
+### Metrics 
+
+Starting in Kubernetes v1.19, when a request is made to a deprecated REST API endpoint,
+an `apiserver_requested_deprecated_apis` gauge metric is set to `1` in the kube-apiserver process.
+This metric has labels for the API `group`, `version`, `resource`, and `subresource`,
+and a `removed_version` label that indicates the Kubernetes release in which the API will no longer be served.
+
+This is an example query using `kubectl`, [prom2json](https://github.com/prometheus/prom2json),
+and [jq](https://stedolan.github.io/jq/) to determine which deprecated APIs have been requested
+from the current instance of the API server:
+
+```sh
+kubectl get --raw /metrics | prom2json | jq '
+  .[] | select(.name=="apiserver_requested_deprecated_apis").metrics[].labels
+'
+```
+
+Output:
+
+```json
+{
+  "group": "extensions",
+  "removed_release": "1.22",
+  "resource": "ingresses",
+  "subresource": "",
+  "version": "v1beta1"
+}
+{
+  "group": "rbac.authorization.k8s.io",
+  "removed_release": "1.22",
+  "resource": "clusterroles",
+  "subresource": "",
+  "version": "v1beta1"
+}
+```
+
+This shows the deprecated `extensions/v1beta1` Ingress and `rbac.authorization.k8s.io/v1beta1` ClusterRole APIs
+have been requested on this server, and will be removed in v1.22.
+
+We can join that information with the `apiserver_request_total` metrics to get more details about the requests being made to these APIs:
+
+```sh
+kubectl get --raw /metrics | prom2json | jq '
+  # set $deprecated to a list of deprecated APIs
+  [
+    .[] | 
+    select(.name=="apiserver_requested_deprecated_apis").metrics[].labels |
+    {group,version,resource}
+  ] as $deprecated 
+  
+  |
+  
+  # select apiserver_request_total metrics which are deprecated
+  .[] | select(.name=="apiserver_request_total").metrics[] |
+  select(.labels | {group,version,resource} as $key | $deprecated | index($key))
+'
+```
+
+Output:
+
+```json
+{
+  "labels": {
+    "code": "0",
+    "component": "apiserver",
+    "contentType": "application/vnd.kubernetes.protobuf;stream=watch",
+    "dry_run": "",
+    "group": "extensions",
+    "resource": "ingresses",
+    "scope": "cluster",
+    "subresource": "",
+    "verb": "WATCH",
+    "version": "v1beta1"
+  },
+  "value": "21"
+}
+{
+  "labels": {
+    "code": "200",
+    "component": "apiserver",
+    "contentType": "application/vnd.kubernetes.protobuf",
+    "dry_run": "",
+    "group": "extensions",
+    "resource": "ingresses",
+    "scope": "cluster",
+    "subresource": "",
+    "verb": "LIST",
+    "version": "v1beta1"
+  },
+  "value": "1"
+}
+{
+  "labels": {
+    "code": "200",
+    "component": "apiserver",
+    "contentType": "application/json",
+    "dry_run": "",
+    "group": "rbac.authorization.k8s.io",
+    "resource": "clusterroles",
+    "scope": "cluster",
+    "subresource": "",
+    "verb": "LIST",
+    "version": "v1beta1"
+  },
+  "value": "1"
+}
+```
+
+The output shows that only read requests are being made to these APIs, and the most requests have been made to watch the deprecated Ingress API.
+
+You can also find that information through the following Prometheus query,
+which returns information about requests made to deprecated APIs which will be removed in v1.22:
+
+```promql
+apiserver_requested_deprecated_apis{removed_version="1.22"} * on(group,version,resource,subresource)
+group_right() apiserver_request_total
+```
+
+### Audit annotations
+
+Metrics are a fast way to check whether deprecated APIs are being used, and at what rate,
+but they don't include enough information to identify particular clients or API objects.
+Starting in Kubernetes v1.19, [audit events](/docs/tasks/debug-application-cluster/audit/)
+for requests to deprecated APIs include an audit annotation of `"k8s.io/deprecated":"true"`.
+Administrators can use those audit events to identify specific clients or objects that need to be updated.
+
+## Custom Resource Definitions
+
+Along with the API server ability to warn about deprecated API use, starting in v1.19, a CustomResourceDefinition can indicate a 
+[particular version of the resource it defines is deprecated](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/#version-deprecation).
+When API requests to a deprecated version of a custom resource are made, a warning message is returned, matching the behavior of built-in APIs.
+
+The author of the CustomResourceDefinition can also customize the warning for each version if they want to.
+This allows them to give a pointer to a migration guide or other information if needed.
+
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+  name: crontabs.example.com
+spec:
+  versions:
+  - name: v1alpha1
+    # This indicates the v1alpha1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    deprecated: true
+    # This overrides the default warning returned to clients making v1alpha1 API requests.
+    deprecationWarning: "example.com/v1alpha1 CronTab is deprecated; use example.com/v1 CronTab (see http://example.com/v1alpha1-v1)"
+    ...
+
+  - name: v1beta1
+    # This indicates the v1beta1 version of the custom resource is deprecated.
+    # API requests to this version receive a warning in the server response.
+    # A default warning message is returned for this version.
+    deprecated: true
+    ...
+
+  - name: v1
+    ...
+```
+
+## Admission Webhooks
+
+[Admission webhooks](/docs/reference/access-authn-authz/extensible-admission-controllers)
+are the primary way to integrate custom policies or validation with Kubernetes.
+Starting in v1.19, admission webhooks can [return warning messages](/docs/reference/access-authn-authz/extensible-admission-controllers/#response)
+that are passed along to the requesting API client. Warnings can be returned with allowed or rejected admission responses.
+
+As an example, to allow a request but warn about a configuration known not to work well, an admission webhook could send this response:
+
+```json
+{
+  "apiVersion": "admission.k8s.io/v1",
+  "kind": "AdmissionReview",
+  "response": {
+    "uid": "<value from request.uid>",
+    "allowed": true,
+    "warnings": [
+      ".spec.memory: requests >1GB do not work on Fridays"
+    ]
+  }
+}
+```
+
+If you are implementing a webhook that returns a warning message, here are some tips:
+
+* Don't include a "Warning:" prefix in the message (that is added by clients on output)
+* Use warning messages to describe problems the client making the API request should correct or be aware of
+* Be brief; limit warnings to 120 characters if possible
+
+There are many ways admission webhooks could use this new feature, and I'm looking forward to seeing what people come up with.
+Here are a couple ideas to get you started:
+
+* webhook implementations adding a "complain" mode, where they return warnings instead of rejections,
+  to allow trying out a policy to verify it is working as expected before starting to enforce it
+* "lint" or "vet"-style webhooks, inspecting objects and surfacing warnings when best practices are not followed
+
+## Kubectl strict mode
+
+If you want to be sure you notice deprecations as soon as possible and get a jump start on addressing them,
+`kubectl` added a `--warnings-as-errors` option in v1.19. When invoked with this option,
+`kubectl` treats any warnings it receives from the server as errors and exits with a non-zero exit code:
+
+<img alt="kubectl applying a manifest file with a --warnings-as-errors flag, displaying a warning message and exiting with a non-zero exit code."
+     src="kubectl-warnings-as-errors.png"
+     style="width:637px;max-width:100%;">
+
+This could be used in a CI job to apply manifests to a current server,
+and required to pass with a zero exit code in order for the CI job to succeed.
+
+## Future Possibilities
+
+Now that we have a way to communicate helpful information to users in context,
+we're already considering other ways we can use this to improve people's experience with Kubernetes.
+A couple areas we're looking at next are warning about [known problematic values](http://issue.k8s.io/64841#issuecomment-395141013)
+we cannot reject outright for compatibility reasons, and warning about use of deprecated fields or field values
+(like selectors using beta os/arch node labels, [deprecated in v1.14](/docs/reference/kubernetes-api/labels-annotations-taints/#beta-kubernetes-io-arch-deprecated)).
+I'm excited to see progress in this area, continuing to make it easier to use Kubernetes.
+
+---
+
+_[Jordan Liggitt](https://twitter.com/liggitt) is a software engineer at Google, and helps lead Kubernetes authentication, authorization, and API efforts._
\ No newline at end of file
diff --git a/content/en/blog/_posts/2020-09-03-warnings/kubectl-warnings-as-errors.png b/content/en/blog/_posts/2020-09-03-warnings/kubectl-warnings-as-errors.png
new file mode 100644
index 0000000000000000000000000000000000000000..5171eca6bcacf132cf96a420e5cc77255ab92369
GIT binary patch
literal 226605
zcmZ^~1z40{(=fi2NO!2f(jkosNG;MKARy8#9n#&qfRxnIs7MGX7OgZaok}Ru-QBSZ
zyL*55d!FZg-~ao4|2@}z-6v+wnRCvZx#!HxzI>vqPC<H`6a)fMXlke!fIx(oAP`=_
z%^TM>7h>lhK_GHl7iHxqn##)TPkcNbUECZ%AdQz<#>6Iu{fznM2Aa;1PfDWaRnl%N
zYTXo$ig^0ysS>RQzc?=;gY4Zei_@y~g9+sc^_$zIeP+~EP5kGrCQtOoyQ3(wq&V;_
z!`DJLuGWVN?m6KMC43LaK{9(`uZ5`o5V1qe*b#`EHpx0Vc4=(*w1prEF=Df@NTr^a
ziHSF!+_;1f<bDC^pXFE>Su7v`<58vrdVEl-U;Moo(nktiI-tdF{MXGOkS+h%%wvJn
zPnFEJ1P{rnmv7yDTh=r9RN64P?tF&3$Ctwc6!CcFWNixMT&F1i<w+_<@Hep1E-!;t
z322j9k%gc7B!-$#N$x%bo=!R(IY~1;$UcuJE_)(4v<p9UqC7r9PrWe7Ge)K=^N^ad
z!KVS!H-IoYcmNN4UOC!z+!thotBjrS<x~A6MzJj7;`sRM=W%Le#?3$e#Gv;HS!tTj
zL&qK$E_Phv@pgGA!JO&49I4~9Pi%`GT>cQ!l%}$+Hyinsj&D`uxUZDPDfFnb!Ae0u
zApqpm-@x*7)~vO8p<<v_^>uF7=pmFTF^B+Dk=XT8fZ7nR?PE;(Ds%jI4#_90yegmE
z#dbKwr5xMT%9D({J;}t)xsz||pV)1g9v=oJw+KPSQ$?R~W*^$#uP;)3%lxUFs@AaW
z0I|TlER&X*alehrASs!xPnDmP!f+$ydqRoko3N^;>ZsJ9pR*pOR&RUQ_!5sfpN6=`
z>oCNSylFu7;nz$5!32H#$}XbM%9o$k31%owAr>VZjUZFPBjdLjB+O8xO#K${C$Js5
zo#xd>?2}5N(q>eA>s8t>2xrVN;S)k!lm;RFixZ_wb=5-ZZ3xBlKYGTge;{U)5H2RU
zC~2@tq#Vk83ZgBuDSS&V`gVWdJdxPA+~iZcg&pZ9bY-Lb#6hMq1le6;w*2Dh%({LZ
zI!B7LU_|V&_2jI#<i0HR9#d!sm(rajg(cE=d0uu!B_=o>q2foft5g&AZ_)le_42Ey
z9m<EGKFZhLydI<$-g=vHFNhxvTRj>4(^WQ*cjkG_@?-JK8`oWa5Bf}76_O9qFj>PH
z(;3%PRin|0o#K=SzLlS6+tWO;zR1rt)aUvOX0~Ki;gg!X`~kOR<Npva1`xWo4cWv!
z4f3Lp--Rj@%r9T9^vB4hA7G9iC>Uiut^ZT+-xxlY6p24NhX3crif+12hIVx~kq{+@
zG~Pt+llA12?55nNJD|^=36~Gf5~hGM#aB+Pn+Z??YWCfo9a)qr6UD`;C)uJT{8V+r
zi@B9D2_$XA`(%LZkBr3`ds|&3<*Yt$8~!9n{Z*Rm;SC%+b9AIWJ0o}0Q!%`8Q}T%#
zmdAMa+AN;n541^C-u_CE+s0T)fWbeH3h|<5A>wN@^}@5jt6RL>0u3ul1rdbM5OQ$%
zMMu73&yHtZj;iN!<EAE2E=mjHX6RR}rV%Joab!P9m9QtOrkqN8%7x@4PA%?pDWPbH
zoK==d%jqMgS9bY`_dI2~xKm$p;8F32il5w@WL>qy5%ebQH~ccCz<2(e`lmu6MDFSZ
z@8p@=zKQWV#x&TvB_(#-x|lHX_Bz_UH+lFh=8tXiVL@y3cRS0;(6{mTycqXMC%m}x
zqsb2YQ9@zjt&|Iq6HCG<9t_)jGMsmW#F3CG3LL4<tlh`^m?M*VfMn+86-n=s$2NO2
z2kpzpMFgY7`#n!>DZOR9#k~o<rK(;|s)Z@;a-?bSax)o#1hTvM7*e$~Ts50C)HRqi
zSxW-#g{yg{@>q0rxwQMcSAC9kk8O@skL`R!Rda0BkBYktqBC7G-)EL(stp8d5x>v*
ztnOcU;|blThhq(6q|b%Vq|YSJva++Yzh_sBGYh{QXDK5slQ%2<w(rtXy7l|5i-nnt
zj;6WNjIL|ZTwzPm@2&Gw>yX<m5v|cyIuJFaHoWxb2-}CBzZstokC%^?|8D(=wTLUS
zEA1S8U1(ThSYD&I(X5*zqB>!f^JQ=%@4fk_P{oTk9tbvN&uFW!R;}~4EqNiOXZf2M
zr+a6er!ki&XLXz4-|)6JW=V1p<+fM7lLOL2n_}#@rI`=OeaHvMVdBmYHYLZTPVYaK
zeEZzQC8)15@1^+OYdJ?YUjbjyle;G`(i&)bHSE9jeH`B`8Z}?x=xOiaTrpUg>oHD(
zysCWM@z_TvJ9jL1R=is$Pp9{luK1jD$m}=Q_;zZ5BZ}j_@;POLOYED6x!t)sQZu#z
zLtlGmJLEbn99zdRuYz-kesfN8_S$B3+a&60$2t_g@AAo7qZup}Qf7?H>iul}y|S_F
z$5+m>%xAe}W@RB|tY0&}CYA-7FI2sou5_<<dp31{#&5=KI;A$x#@sIScZzLqE!|96
zm8{Ff_<XxUH;(u!<cg27hf*$%GwycWOp0GGdvAY=QA$o;yslfRMJa_Y(_4KfQKu^3
z_b0(jW8E{V%hm1g-T7@k9z59^`TTCe!lj&LLTTdmL}=%$&Z0O5sxRR4u=>5jZ%c!5
z1uVF!pM%1~?q6ogXfC<blKI(2rI+6~)ikxW{K8ff&vDJ#)vCYfCDUWlOWRNz-mxOD
z7`1`~JqQgyK0nG1od^lMoV>J0eZ6Stk+kluVye+Y(}pRBIbE@xh97L~886mN9C*Tw
z0Sh1xr>7>9M4vn>bNnd69|W=XRSabp6yrK9Z98ZG!VY_4G=jCxwYE8|UF>Dy)1`D`
z+6ay}kC(HD_nDW219|HN=*g0A3RAdK{HD?-HD?Ntnw620ZRTy3?GUsLQ8DD^khtp;
zy!s&jp<dgUb$`V1tp~nOwdsZLay+*j!#Zy`2m7r!`<;Fq6;xkHsY*=i8S9NQvDzJ&
zl=Y_c&RBtgm09SdKKT47M$sJITh`+hqvhq@eH@g*oL+zb=vlg5y2Pi4rhE_O8)VS#
zTFwIrndeoVy+bUal7H?SrBA1-X=&@uWRKqyahu)tX5F&d;@L9pl}##;!JQKRCJCma
z)ERr-S5PndA~h|&>fQ<$Bpcd&(7)<XKD^85MdV629Npew)S;^%;T*H+{Y-H@;Va)1
z-jraCZ1<yOAMc!KK~uiqG`iO{0vqlgZu{r6t<9OubLdq}5{AGa+@<`RLwa|~r;KTP
zk!o7gD|=-B7rwy3;?)`Yc-!WpcWofH`C$RpEV9fCQUWqTvIQN@{A$n7^G~<Ne1E?!
z6@GJG&)>Ycv4!$$KV84|?B4oNy;R0M-xDGGXX{_rrzC4OhWB65i97XLY|qX%!0DS9
zD)?dYq7GIoVJB$cb%+UdRpAGfCKW56Jz@YXDcr@R#aJtHZ1OE&bi=@A>$OB(^>H;K
zktlH(BfZ?40KUq$7k07SZt+`@SeDqT{xbL?`@rN~U6FJ5i>zYf@iN=8yOw7mXI+0v
z2jvH)%HEahm%CKNmphxdHU&&gBX+uW%AdwQ-M8|rg^ga;-HE;<;z2%d($pVjIQ4-F
zq6uqkeQ4`znH6q?W?ath5JuGUddj2kU2SZ;f0!Al4WAa7n{VZUscV1N^FPzA$<uZn
zx$U5{QGRO41S7$|e>eU;;KXBnzgpfJ;WPXjdJoppDD~X)MB%)3dSMr4jx4A`exv-9
z`)tBewA|BE!`)d{Y+KQ{7`}pAh{LvG3;(naD96TSvwdL8hu0ryjHc!Dni@`w?iN$M
z;gejDkvyMV%N7?d>n%<xkfDJsPihYJbCu%jvdZlRUbfvje|=dq@3b=%oHql+O@Ob=
zTg-QcuHJgqFNVIWa<`vZN_@nGup({oTb4LDo)Q!{o-XILY=H@5&93~H&iJH`J(}xH
zgK93u-_AtOybts{$Xs~PWPVoqyP#>NWrk{wtR-+C)`2yrBBaWfe=3KW6bERq`e?hs
z-amS?1uVPd2hE3mv%gcEs-0RadEi^v@3@AQlLZ_l?#kj~azBOXm?>P82`Lf$9s7M_
zXFb0@zsd7>;j~pa-09e(H}w1}18krmx1V>Mc3QQZ@w>EVSiivYV(sFrALRoB^g%Bu
zeh%O-t_6TLKY_$V+D<y9&+;mu)MxVF!I41ppNkII(TzgJfX^#3btDn;l~co!v+bad
zDcdjGL1%}|ZnyRAgX_OEI3M;X2Te>|46uL<xIhJ~;o&WJE-w|@W$y+MM11JqZu+1V
zf9P>&SV?Lr&Nzg(5P!*bX_T^XuE-F{hpGjbKL3fY5)a<hzP@y1JD6xX>ga&(UgvLu
zi127Z1lKvd>jc8P4I=s{4+3f7-TAM)0UrOqVemnqI2RD%zhTU--+zCp*UvTfzuyGu
zu^{5>67BU9U5Ni5Xu``vg8$_40<POYj|`PHHLu@>c0LXc9=^_=erfilT-OyOUK*yp
zAP^(Z-v>|Afcp>x!uNA|YT{?2^H|2t(_O^I-qY4WB*@+CZ$BWpAerl|yMvz%dyu=E
zhp$YKJm)_UGS~UP)uNp2|A6?p%5$3NJYiS%^l@N+AaY+sj8lP>ot<6I$KFxKKt=7}
z=+`BAPG>(qFBwtMz`#I}z<VN|K2D<I4<9}h6_XH^kPyCx5cUoB@UsaL_VDHUS114J
zN5#R{&d0^e&&AV&{cpcEwx0fe@|>K12l}tyzvy%ba{2F(JbeE>t?LPj{%sKz7ZDTv
zf1&xgIR5{j{cZUd+CTI9*Kl%wJCiZ;b?{O4ba!{~@KgBj6_@*Gr2kLjf7AId#3wF6
z4sIqYF4vg8*K<-3myo*uZ?ym2^#4RP{clvsdlLT>^MADb56r)FkkRvTxhB-+?;<LQ
z%ZdJ9b^jaQz`@tk&HpdBk%x<)!u2r!p!~1ue`Cps{@s`Vu}}YEf`4kSxj=zbPV~Px
zN`dqZF9HVwDS|Xr9z6}h+YKj<uyn`*E(T5&GE%L0Ntk8c@#E2`nBDA75ai^Ka>et%
zIJnIDV50cuOGMG&-7g)D<$yn)v9T)6qtEHlv@#_ZGW|d7CDvLl0PGOD^=iL4STxz*
zU_GqAIrP9-_i89`s9~cvTF}5J*T-(=YFbbIH_1yC+uOAnv_pT^X;J<U(FboAE>@;8
zl?|WXc&Z{Sai6A*z9Y?p#QG({$z%W*?0qX_SUe@**h4_>{dS<lWz<6szxL)kYo4g8
z*2lP!E^Fz_iWt0gM@3b)Wb4g&NBCnv2XMz;JrI2tSq86)ng2>57D#aS2Tqk%?8*}-
z8cjn~B~nIOJSV@0QU1z0@vR#&zZ-1Y7iQDrRWDiqpT^k1{&sM{dsXWA0r~UjgHxcV
zjAC1}3a1obt`7FSNFFM@s4+y7L%&4sZi9u$XzM2|ZH_<qr(<=mLyc+9PX|kp8ORnR
zMI~!Sgk~GJHLV!QE5gV4ym<e2(K<&PB(>6DFL4XUM%)3O`11!#eWt%GqIJ3^x%y^?
zE)S5(*uvU+dRD9ySo~2kZg~^2^zf(i_Cebh{&xx%+=Ebumu6ZLdHg;M!clbZ=95v{
z2CZawnkQ>TS}awRS&+M~s)c+IWCCPN{UnyOWq|Q}Cbu7=0B-XLeRGx>uz|Vb1R@KW
zZ1^g``iWa`5|YVFa1fJbiF)emMynb~stWaBM3Z!p(R!d8mgtH_^F!Bm@ty=$usKnX
z|BZ$yK=)Y(V9!8VK26I;vzo&nDWuuEVY5;rroc5wM|g2_QhB<yy0`rilskHE1+G0=
zCjaRT39`Cc0<HbtK#F53kZXH9P3<%7TYr(Ncj28B;qu|o-R*59hsaUQBE1`UlAt4S
zN)W+XM2F-&USCHmy2Fhl#aHuuq>9aP%(y+BG3PP&mEGhV>Jj&r0j@uMs{<zFjq5aF
z2!#1<wOZGMv?G?fxup}ZnX&z8SoNHJ^9Xq0;KCu*-kH;h=LsYei`YW`O$g-u*nV|=
zG{18}GQ=G_b6I!hxdZ>056{KkyQ-7j11lx9|3r%QY(epHxbFlACFJMNcXLGa7RH`T
z9P+FdaqI0)Pfv^N?QJ#GxSlxbJPDTjF{L>`)k|KaWE+p>e5fXIw|VDoK4Ibl$!6-e
zj1mS~Yw{sl&7>~MiouPDh~BXKulV2Rkvw8M4ASeSn(p)Drh-3yW128djO#BDwJ}II
zSFcOQ*kL@nMGXmY4-+MFw5T4gu<W0lcw(++<9R(BDw0>%#CqcN!f~kyzz<w5R_eM$
z^_TC@A*;f>n85hA0F@dpCYT=nn>iqHJ(P523c)jG{Onod@$rD(eaUga)pl=scGALQ
z5ALx&?Z>jqD5GhtgX$O4WuthbB8AW0&&|ZbTE>!3siu?=xYe%+q3oBt9~X^Ca)M_n
z5?<V5S<d-B>WJt%AYw~*)slMngbgLq`9#Tlb1>wXWt;dIthQat4>a9@tUGB8Bai-W
z!Ct|?wxEmubU|4JS9QJc3**Q#c>eF#*VBQF4FNv^3U@&2BRVIDO?Wl>*#F3a*8H{c
zv;po@W8>wKiuM_C+NSx{(a_Kkm^SmnY-OnzLn1LF&qt6nUeAhU0#B8+bp9gOq1V|9
z_vQ?$Vf6YEbvZbr!d}n85z$`3eRd_>4_T$3zNFw^)w~_<GbU)%46#wc^xnb1+Vm&m
zdf%0KO)9>ciHCo@CK>W=0{Ij96L@kC{{Z|=Sfw#)JBoPZh<34=3iL_~<N7c9&4DU9
zts3|b3ujt6UdGM%DIk0Z=;oU|$Qc9n29Wft4Yoly)}PxZPtMW8U?s(^AJ)^m2C@X<
z&A}(@iPBGLm1iUG<@80bCtb0>f*-#s8$MLk<d(cr_w;`o$0bJiF;2Y=?=GD&!NOV{
z-wL052oDq;kLu;PFkQwMtrg9~=q)inWBNjN>@>6A1sU5|K!K-s7S<Qm;rv&S-|)Yw
zr|fo{I9mp@XM7j37WZ$qKOf$O_ZgA%0Ch9RqMtpykP7qsK0hS0Z6EU0E`^6fG%W+B
z9H2y*H2Uh?n||!aqlAl*mGZlH6?q9FS%4BSq>v^(Fzg`z;H&xGAbDW30(Gob)J3Er
za})70)7=w%iu)OS$FxC-2XQjzYcT0`$wTmVkev0`oaCepDlKNFbAqqZZ!5vIyMtJ-
zAMO!!+qDS`#0@eYH;0f%dJm36>`ox7yZ`V^8N3GWLo>09oB}u)fn4Ao;Dj5-6rdsH
z_!tWDE75V$x4<@@F9$~s?Qn54w$j0KKhDmhjt8K<3>~W`SqZ8XMqOQAroSX2WBf*7
zQbxYW8iuMcd_^oAp;=OKcbx4ef-XBg9iC441CbL`lyt%6C)!?+leB-fg6BiZGZwc}
z$q>BEE>dF<{!s0*cNM%C?aq9sHs)+e+Kq^fGJqa<QUG6p{!n>RTGSJpe6@X9hps~p
zo1>S9#!s(#d<yAx6u9u8qY93JGXe|`r=$Q++yVw@-2zUs^)8g=dEAskm%N+vuVymf
zFE{?+zpbPQ>ZsKSSHHd0G%Za%b#cozEQ`tRzFmKa!oin@`sQ3NuU2xgl<3aa2ixY&
zZ4S_&p0ifmo56Cct=SK{V@{UUALe<^?<^UVWmrxv{kE_jt5?hwqq2^=__>@@afwfB
znA!1CPfkmOlD~S7%)$eEPoxRQkh5d8W)avl7`0&^+@k#~#qVVg)-q&LU&L5mchdlO
zLZU}&nFJrN=~^3DVK06Ht*5Y?MEF1(T_QuP_HJEV#^%gzmos=6eqdFkyT0`7#2O|0
zWo%P=#nrOxsTrjtThpoW<H4lotuReyIHiJ3EvtfW9$xDUhsyiB0BmRM6d_}?gCOhN
zEeO&v1zRx9>;QG^@SnIh*ayIGi0*yB4%dsR=ms;wO)w5e8~My|%4azB8p)%#6f2%D
zsg#t6&1;#~7nFQA6W!fyaTub>%Zi>~tp>HNhk0H>ST<X6|5lbh<V}vt6W6biXYn5y
zv@I_VU~3@-d243RpIaC?WcfO*4ZXjwzgZpLhwo@%Y+PzS(=e6AD)}?30G6$t@~Fd;
zZ;?qxj=dEkHljWKzRb63Q0OviusnGBfmDg5jz7_+c7y%xs1kk@!_s`x%-Hv-GSdR@
zPd4gJr(J=v#_}H^z@sOyJ18piXT56-hjBK$OqbCz9y#u2ySVyO*afDs)bjHu+F=vp
z#;3v4JO%>a)-5D6{9n&oO;B8hOawG_DlP~V5Bu9a?;&fIN`#D57oUit>evAg6z#+r
zys=%dG+fbdd+B*>O!5lnqUgReyo>l6pSKG9T}BG=cj$u1qf#{V1eqD}cOm<xzUKi!
zFCu=jzXb#(%;Apk`4TKi!fGAuMJx+lt&nUwaI|>ecx{Pr(mUuKbTU@KX7F+ZBJMda
z7cl^FWmQ16Q3|ni(Lx-7k`KTWgu;&najy7Z7hRp@S2$op?Ws|dUpVXZtC&n)^vj+B
zX%-s`=#^TX&u>R#*wB?__Yq&e8DeFn4dqR!ynVHTxOdALffz0en{-&mmfji7^kty<
zLuslgDVSVB5_lTyvKSHeaH6KFv&<ydYfE#ZVfAB1Og1Rjk6}6K_uV$4R#Fay6n7i9
zNrmt0!~4c$@cndQ4MoY1m}qJ4r>0TO!7A~Y&<(ZOm-Qcd^B&+1X1%#G70xN@>!BKk
z80jHpW;#z%7Qk^;5B2oZ*9oR2Sq+vSEv8tyAgd*O(U{XaungoDbe>I>ad^C73e2p2
zBuFHAf1m0HE+++k&H$WXPKKM**@C;0Z{6$3^B*@A;bFQJ-i%KnzyR!#;)1&`;lKsl
zk~hQq>Hvw9JuD<3W`NsZtS=$;C!WU#U}P@tHICu~_WPOB&hRpF5>0Enl4>5mp<Az8
z%Y(aBnJ?E2`cm0)SYHX{7(!Wi3u&7X>!*Fkzo=eP%+O*tr&WoGm@+(wj2Prdd-#g=
zE&C}3H&MR*ZlPgGM@Pii^rfyFF}?lZ&GbN^>L!PeQhQ(>w}q+Qi#soHd%y|Q!`G=v
zQ1;AitF8qVL;Opb1w|t_$@CS~FNDeZVtyfL3~B7)xhvQvaG6e{P{iWQ<(L+el-|ye
z?C)XWP%%@#%r-Ildp~_;_@y=R6rm0ATYR;f%T}#jGp2V^8n7$XS94%V-1MI$7cYiF
z#C=WttW^Pht-H>QB9Eky(MH6Vje;SwSXcPE%)L8v0>wiN(RcxDp={8PWZ^}^M?t2$
zZfG*+D5eI*R@87f?|jt9`6L_(c}KB@yxVcVUD;E)*aA|@PeHd{V{`yF?5M^_#b510
zl#O6IHFfn@Uf{d{LOni81+rUwgpm97gX?3;2hA$Py4^y+SJ~q}E*Hn{@qJ;OXl{Q4
z6tm3a@%w{F99g?ZM>NTPJXZ=k(|jNk0tm<g_PT$QQOTdCF7_tApNk}BGr5nOH9|d5
z)6W~3wDCeqVUlQca80h**VlVFb$Rc~?wk({L`$<z_T;4jF9(gISTWSFHX6?bD~t=P
z5b}0cjCIyaY3|Lwh|kigS|tOm@#gvhXZ3laiLh`zOt%qk>!Lg$C~=VYw@Cj9Pk{Yt
zj7njwngJKVE$WSG1)-ktEaUpdY{s0R!wU~z_ZDqEcyGXxvAtI2%~*~)6<7&FAcF`{
z^934;{IWoGK>Rq;edMhjr_Lr<-kZiud+vj6J6ejp=Zlq4{q@`Du3j&VE}D`Z&O{z;
zbCYwrg{zrSVyYII&;m%(7e&lLEYtZGXHFM!wa}*6rJo{}*|CpDb6y&BoFcn8s8IwV
z5AUUqL<J3gxqG<jop{yx2Jn8+A0idrC7Za+l@xJrq+ceRovfYj)bk4Cse=RQ5^jFb
z&5#Z<W^mE3Dpb7;f>A(LZH`M}@p<oH%V40U&}^p#J9_zR2b%fgRL}mS#P!iQ@7+BZ
z$54g;+No&ay-|w9>NgRR*y{9WNty9fX}4GCKF{M;NIvSFw}&&EXXfNI4GrlY4KqwS
zZ4CqaRmjY;fxwGJV+hx_H7-ue24_43e<~`3TP#XF(`@Ps%D-EkGX*j8yX}*R+{1JZ
zL3S}@ygFKyPI84-(ZU7NH&s{qsf~%RO2a!*V$XI<;yRDs<z0D8%Q*_TIk8^3li|jk
zAXiha4;8iW48%tshrFEYj24`06+L-kmbM~`h8+{k_D{qI&T%ZMNK3?9azwKWun3UH
z_THwCQ?p@1#AR~y|B)m<_#lfC%lYV<if7&_N{B~1dQ&xDWPYzFVfO=%$jR}=>|xp;
zjo2(ScYbO2aN0-TF37u}B8L}XUfg2k-CqI|wVStcoL{f|p!n6QXnDCGJKGeDux%Ur
z3Hw9Bu}$TU_5|r+YwWjBXGlLArF4e$X!`jshF}Lf^#KWv1J1{fV7^SlK5_STeEru_
zp=k#3knLsDb@3~=9n4@*Li~zf<+ETk8N{F%f(IXid{aG^!tla>L(JhCsctU-eY<O>
zuP!CR4ewS2y<c=FiV#RQb{1HM^EbtiF*U5O^G^I4ODe<t85^&!rEr(1zHz{jFXkQP
z`pBGa=17I$N=M%7^PPu2-0Zv3xVd*g5>F2Tj0oafOHo+o50qAT)zieN-3@OF!JeHt
z%oX5H3m3ss9&cwyd#$;;3Yu<1a_AhYn^6Cu$q^n^+%vw5L_@$E`ys%vufAF$R=dyc
zwBpY!(N03LP538oH!{^>fWavY^3B(rRQDrdB}YB5)4Jh6L_{w3BhK>qQr<ItsMt_B
zxos#Il{|w0&n~VsekBvDT(fIQ-{rC?$;IzX*(DRZ(H<SsI!lm*J%k~@2a(q=7Z=R(
zV&pi6jtFiODtZY;<fumU)$SHu&GmgK(SEi#aDOJ4@12PbOCK}K3RG#oknZl2VM%GG
z@poE{8Cjowq>375%B(PgIntohG><e@#mB2E!?KR22^!KVWD4mtw}A*M&l0l%3soXE
zz8lQE@pQBL%TL3kd08WMdBq<-pfC07#1nm+wbIEt*D2XV3_9t|P!Ra$P63%QMa{>-
z+V54-kPKw6!(ES=K0kuEJac+~%-Bb2<+b|}cMB)HgX{-~xLsa<j&>1K&?BjtefVP4
z?E4%mPMiR)22ZoK0*<}2jJTGEVi&C!EmA%c@4)VqxZ>UL^Ekwg?pta7UEYWB&<E>P
z&Du=Ok@vcoo2CJ0A=T!)hRwy=w&m>|o=1poc$K36$l1c_@O46*L+EROc$*tPfj3xz
zB)F1@`j8+G;}%lE6j_EYDE$5YSi=oogL-YA2Fi+dcqLSPF7__k9c8E5oZs-CycKhI
zZ!o)FVK&k@<zlx#&xyITfp1hPI<nb8H_Jf6@G%Pw@l{MNHWj<X3{4I^|I?%pRwY&A
zC%!!rNQN4XS12R`Rw0)=%t;-D^*V_bl+X!b&#$8)k#VhEKh<MN@*&dM>cPRx*8Tas
zr6qT^Uw{1U_SOIOAGm+Rkm|H-tf4)pv>a?p|I#UV!uDeK64_{W_``-{R4pvZ5LRE|
z%l@+ZBRH6dZ9(0~XYoa4KEV%$+?-4`ixH*9KzkgCW8yK>fV_mBQ>tfSZiXjH2loL!
z;|X`izQ&4QH4y>GI28ECbL|`<f8UKE|6%!yujbKBgf-!}{F78M3zug*bB+ExEDM^%
zR0pX1Myd6dCC8s{*2c?C>AIor?(Um)<7W;dRJbhcLeL7uV$e{TRf}2Jy*AfJvf$ou
z?AgR@&9L0g_*YxmyNQbj+uO95JCbhHm?PMo2;ZN#7wM;&qaA0f*9K?r`R03{Yz+4{
zVI@fvC}JPfW+c1<h9fQ*2D6)(tb*F*FPeW%$06Lij=Z2L;k$I3+z<{Nx5aNj9tx0c
z6f{0RD$sbpc}dpjd8t>de~HPU{dR2>K(3+zwq?NKeJ`e93fVG(ODr4Jw3jQbeSOZ?
zC4jw9mUyxb6NE(TlRL5yKZ;(l4Ob4`r0cB+JY9Mw{!C(>fZs6}Q{`bg*wNIqsw<&6
z@(zM?SReBK>90|QJ}7iCiHp!t6GQY_$teZ(M9>03Sr*S<$1BsZw$9u1Qm4$(mcK6_
zcMpT52;Px@wv93*M=GwCdARY3C9Sb7+=-7fO<T=PR`)p6RR}&MlrNcIae`8|2eBrO
z<_A{tzto`3A<Ap+6v=r6kKmlO(OL7@n|>%_Do-i@oe=LNo{om;zIyk}RNS8L#LobR
z<Uf;oF0zMD*h;Lt4Dh5O=`RV%ZL-`!ZLQQ*eJs7JQ5S1R;<?A`cclWcZc^0}eHGF;
z#f%|HZ?Ri1hOSA$OemCj7K(e9?e|HUci|(?-FcD-G`pefXE;7IW_e@e(2(~LpsMiJ
z@LFXpu%NEG{%#UKYu`P{J%`vn>jrG7j>nj73xU@ULTj(~JmCl96;MItDBPb3sruh~
zke@9S;Jx@Oq><pW#$1oqTfUjTVBBF`+N;pcpZW6I>ETJpp*O*`vRhqra|1?#b3dgP
zqG2SbvJ1kd)m`#OT^Z%2rRL5yZzY0{xi8*Ph4=j#8;guxs8<JvKiy;BT+0hG3c_FP
z1h=;7<XtlUA(6lbfE_3>EstK!P@1^zjnnTQ&aB1pd(%;DZr5M|)mztz^7e^fu&Pgm
zVRvLUw{zG=|AAj=zRw%&6(hc<-|K<k(^2H2{%o8@XlUFBzE%XW9@nD$&)=nBGMppl
zeQURfzF3M@l_RiAFC?q(@7?E9N~Re+=8|c=pu2z(K7)?SgHNGL^WeQJ73pXyFe3Ub
zNoTsj)yx}!WQ744@|pS~+MOO~Cc)rFEjj!6qE>IVX2j!j;Juzl$FeDa2Agqrqq?70
z?-Gc19JSx_oazLq)BD*DiZUEKMv!mi<^{Lza-V=mB5jR~vdn>=FCsC~rpS(f5r)GZ
z;W=qFk`CHmCPb(Pii-L-W?}7&k3KI_eCwyiE$R_|Y}zeZG)2hJ{}Qd#lv<=#@%N80
zpTNEO#o01K6`!b+A{ojYrA^4*-xi!F+LT}>cP!+W`mkHCT|cFSXrFm+a>8a-HJMNM
zF3C*BARa$MP-X~h<BRxZ!b;8%j_=2JYc9DqQh$BqUKRx1ZCw)mAZSAl^~Q}d@czvP
zGbXQFu<i8zYw0`=tt4@THxvHAeb%GpqY@Rssl3(r0VH%r()>BA5ya>nBD+MHDmOPc
zfr8#)Srl%?38Fk15x`qvi}UR4kwiDT^H>@CpqAp)TeHL0z_m#9PtR0#3-Bjo4-`j9
zId%gF4qm0H3lcAgc(T9&W56JBmpl8V5cJDt*+bLWHNJj{G*;0Y4y%;Nrv1ybtJ6}5
z@WC1vr&b12LKJq5HFQ;HS`O*=1OdU-hh-VxKBPnO>A*3aVAg}_-2M{Q=_mk>sp_2z
zzrboeSBaJI$7t67%xzlTX>86o>PQsXje|_${SxKd$j@(sfK*WOp&zZGiIC-E#7;ps
zlo38)Yi!5i8ndJEj4PA(D|}qF8-p0=-$i_ko`RM$dfTqUD|x#XK6g$@VMU#C#bcnr
zEEUhSW|n-0J`W1hz!ML6A)cHS1}$6lwqZ3lVe;ylsf&iNmM8TPQ=2d%){hfJ(W4PR
zhVvIvHPD+k*zR~|X_Rn0QMQO_y$)1bWNK0wdcz%Gtgj(~vfWglq^G4b+SLxW5rjua
zARMLJ7?;JBYAhzJsU-1`61_*w#3?hNzJtID?}iT&-GZG{Lz2I85ANKg-d3!sO%)?-
zw!fiz$wl%~Yj!G5@Q>veOq1;~9c>QR1)7Oh(VDt;agD}gwz=p1n|9YiRsEN{{L)1q
zF!lvO@AGEZJ=;pj4c}_gi!S&D-$qP)oxTf8;T-mULpUcn1dOkWdi4`JEcwUs(d5%u
z|3?k`R*$YO!}ab`VM%_vdIL`9#^Gz_hmdGZY_VwZ+lJB|6S*q$Z_a5=8~LH!{k<kz
zV}^SE#9+Tv7Ub!#!Tm^Lm?$Z5j~oBaojb)UcLZPHPDW?#?{1~!!kTmMe_~(~cAY)6
z>3pDZih2l;F^Tw5oSk{}ymo4&;Zm#5fx=8_z4!L^JUBM3LwQ8<^L@{!Jbp}8d9+8x
z)Y~19)Y+m*g9&pGgeL?n@2DZ@<K2FRdNL35!{GucstSj4Kc~0io!@J9{RFrr3fe3q
z5c22Dm$I{47xAH2GYk8-Zy)N5Q8&148C-n1I_MO!RS(--*{yMG6v!y;v+J#BK2Df*
z?^91K2tPNiV?msyusnR8h!QX~2WoMj0LN=nKGQUG+V%wAGz7f9Hh10Q#)z^esRhzb
z9P-Upm0~uAp$~AsJ=$^63SW~C2F2}qZP84tT9b8^NTqog#wECm3KYY1!-t=C)|(jb
zmXEK22IU<IR2vbP!a?b!asEBlJKmu)uw5ZB>1@Q2RtMrWq$@FOHu}fri{{J0A$&7C
z+kju<9Q7*fuLyQi&xB$My!go(^`3Vnj$M3fB5X|=6tiH7JP<gvr`}Rbq-NXUX*=Yq
ze3;FEa)?S@`Bhj~C;!IlSqv?&>`3>en9V!kvF{fierNrRihMwG$H%7zekvt*ei1(^
z(n$%={nbN&Tgv&??<J@3BI8AJ_@$9zZB|D?0X(L?RevfLz3>@BBJ_jmj0kS#H-C&W
z{o>v#OIcSAkA<$i%3(WGL~vs7p$*wn6SoS=AT^L`W@}d$@DJQ`MFuxshZ=Vr@jD9Q
ze#JkZG-~XL1HWUB5J5?`>ier#Bj}ALt`un{Rm6h0T~GbxrA$My=tNG2x(8a-RG5tx
z1I70qQ5U`ZD7)E45F^%LG9XJpV?qPJDLptiILDJ?wXK$Xn~0i3-6ZVp^0g;4k+~7I
zoM`Fl`lXOrKIB`jm`(H5c^y(Xq|%w@;KtMD7|f1k1o`TH99LKmyjl6E7>xaxE8&ok
z^j@LmYVII_l{IhwwbS~dd`M8>LbXFVp5|jl-Xk+Uoph|r?+*=jDGzyXOL@!&O##>g
zxajdl=nZvFn|_qxzS0XJ(j#ItF=XTY4QZ9Mi$wg?2hL(wOqwLN*S?i=PxZZme89VE
z>T*SsNjQbE268vKkjW9=0(%8aU13E<B98xX7cITg>!DA}-#N~a+3(qD7;fe0A>9iG
z=)T4gN9k1I!laH;7M;d*qEv6BXerPTcE0bbqUs+hOy7GfqgfwkO%>iAEymM1N%v#$
z#tKixM#fXOQtQLsD4W*86gxR0j@Q|C$HNzE@wTXk(H*vpy3<6QHZJgf5eeA@yK2?O
zdN9Mon<&kPfB=sbxl&E#i$}lm6mQ05@poy<G$iL-y9G84C)w=TF`@WbA&-`t1UXxK
zQ?Zyqf*27Fjfm8TIQ6DJ^3eRZ!b^Nnk>5yiIOC**;T`I2qS6|75|l1ZIs*ngiO&#i
zwbDTJUp2bO?gP9Q_XGC|yLNZ-3>O!8T9u?~pvU%8_z?cs@5n>y63L^@qz)5jgMY8B
zZ6rurEnc&QG+qW_7%&SZ{TW`wvl>*&T=858IRlY_U%>Zo-|AnM(c$q_0FTcfJa|Ad
z`+aAez8lE{Kxm-rd2$ZNAVAiAng&1dwA`{u@)%iiWWdb@i9{A76wD6O^A~{y(%{Ne
zAWP6V%Bf4tQ}UWgP5`T(b>Jh^5#W!p^aSe5i4bMiSLzX>eAAlAOFD7#L-->R?`z+I
zp1-5(kzPNBN~Prli~Lnmv$>MP`U9Yj?Sd!_k%)Cl{(x_m9xa@&<mhR$e^XLOLQE=I
z90v*G3ysRenmxiskT%IJXFV;lr4-dS>eVY;8r6?bN~5MD5vaYl#Z9fqYUBGgb(7BU
z7g;=Qx^yQ^M(k#riZ$f{LUU})np_<nWy#ikq)pLVNp=(zDFBP;oC`xG+-Spxc%@Z<
z3~8PERMKUZv(){>t!UE-`&wDrWH2k`^!OX^*Gbz_vQob%8)+8au0ZIqT)6&5O^dAN
zw6R8og>$6!*$q`!1idWa&+-|#k?ghsCg%B`Wrtp(wr~y%m%n9fY*lB3NiXE#PvVlt
ztO!rx>(eHxERzKgy)TVB5q+>J)RNG@(E0nz0ljZN(|)8`+oU)49wxQ<T6xjSwxzjp
z+R@v6eQmcTL3^Gv*($z6%y<J_;y1^it-|f4kT^-V*-gpi#P44n3(;M4dekmosUdpN
z-M%ugh~m-;CIs?>nBGze{|4`O-2ucS<8#K@NiCsAgs9vI+2zen)#2|0Mk^_;eliqZ
zrkeQG;NbPtHV7E8CVO<F3;qkiq>-fnQAy#}RqQsA!xw4;JqZcMgpt4Yt1NG7YTCTq
z*`D5I6g6Fy^bcq#FV`s#J#n0vpW=8Vx<b_wROf(UgnK<>U&BY&Wcxlw#|7!0;%CL2
zcpl|+7mOv~?LZm7L4ZP~s=|~%?YPOy6Q!y%z7YLW%*^s|5e^}^^|K57?VuKSBN&Tk
zIg9g#tm;M6b_vsF9JMjA#m$m_S>C(WQr_t`r<`?@UJ(MVWvH|~<tHyA$v@RQELA9!
zzZ>93=xUIKyl7HPI(793pcKs-$}$2)oilkC>MP0X(YF#M%F$OUGDk($A3`Fzv%-v?
zamRx@Hej9w+V_vro?*y_sft5DFv6<nev#$s7~&`R%wM%LsRA4F-;2B!*>H}ex>2bL
zc0+Y`-MVs(LJ(G_SXS`}f9+5sok8(SZ2GR*af?x8be*$z2IWzX)jk;(2Hpt9HDrZ<
zv1r6U&H#b28srJ{=uMZy`&#LG&+1F{)5Ex_54rURGU7@GPfr_`7_L-LsjcpNE^;h7
zSr$H=j%|f0EF@tfjdYz<-Ykj^LtOhda>tNmKafjOXkXP=xOT_C23&%LB3Rq?#pxJQ
z$)7~>O2tkf36i}W?svO()vIpapl&q>u&l&2BT9E-srI|$1fP{z@F3>zTAYnKtT~Kk
z!P{4^62UxH2Y^9XsrZf0R8DU1?jM<?d*HU>({VX=S=Pf$f++BcJms3<3Q@<WvM-6#
z%a~G(Ds-F((~di~j08>~0M`LIx7<5AR<we1gCUJS^M`L;hw6dE=pdd$J+v<*1$uwx
zM9<j~Q2oWZkbW|3LRIZRa%_Cdu2sMSS}TQ<MCV=`qgR%zP=m{QvcTL9mg<=VmK$wN
zQl-Bt+d@SVro{))^~79DUFqyOW$=F7WZacdj60sL^NOTZuU(jb&K=70b!LY4GGbnC
zaHrNWF9D_>|E@vCMPP0|s^&|Nb`e2)x*tA$WbyHn<<unG<s`h?2<7wy=q$r)8j*k!
zS(xO~UC-siVg_D8?L~F%XybCT>Zm*-mcua}ysyDQFa3G)gD4_KRH>^3y(CN-qi*TN
z@sa*)Rvsdj#fdxA`UeCMoa3o5E+J4C{`3J=njIjUIIOwr{4%4b+2-fxpHmA6gu_TA
zonPD~A(0Urpz;<V){;Az&1jXg@1O-bPG;mSEj<kO%sHo}vsImwmU1qHV?*}Xzj+6m
zuS4S^6wXU`OZZy`Am=g8?t;ni-c!V8)GP(^uk3h6NO5zQc<)*o*FbE!9b8^vyF>W5
zf!YOtQ2i55o$h%%ZZmOUOWC))@x%1@`*qHA@GZV7$%iR8DU@idlU{+NqAV%4;@hX+
z2(&({EH(0&JrVlE8S;`mER65a7L!4rUDgBNrAHsxqR6nw8=YOfaK%N`e2eTsGu=UO
zkE+2i+}*uw1-!s#5}BA+vCPGpUxGVQr@<(gC9OK)AQ~yhAL4)Fa)DybKKu>RU*BoX
z0W=DJwRf!`k&X}2o7X@b;VK+m3$L+r8yG#evba~tC#>h4l4Ak@2d~{;_HG4Kc3!f^
zGZVfPDT=2)SuL|0=l(HqMNj=D|D@1uk5(os<u$PEz~Z9d&B$<W=Pt$xEjnWG{<!?%
z9pm5Rv8$hjLP1f}ipXM6+l$&XKHdo*0i{j|8-eJTcrc>z>(-{%THNCq85r*Z^<y%P
z<qe3aQ0jrj3600k6J)@5;g9MuBfL{;n(sB?5R=1u*P)zlH)*iJ@q`@x%VJA-2>c4m
zg%uw=Dy}sxu28ZLOx69%bB*jOm|KBa=&Mlct?+V~Nk-DJ_~C}pb6tWXIu8Gs`l=-`
zoG5?cxHeRvO>}Q6X{Nb+kX8E3>(d80ttHX7aKABeJmRAjh$};2`(JMaOC0)E1Q>)i
z@#DbljYB$-4p^ywj?KL*<po9a6eaV=FFeizd$EXmhj|Wd;03{e<gG-A+Dc1UlBx-%
z!lv~_I~B|;0<$%t41P_8X)_#P9w#mkz|nn=!Q~+8v;un|ZNr<fEA_*z^I3^lt`UQi
z3M@m2IPe8$epF)|4_q#(hrfmApY|MO<Pft3DYhOCV(sQbl5)K-$&KTv(lzjAa%H3%
zD#F&xSV)<$C}M*pffVSn-U+Y{)X@Wmxjz6^*O#t8cOiLT+&>15B@6R}kA#@gw?P*d
z5I;F*Mxe805%>Y1P);8w7Ye!JRh3A@ZzH<PZSO399f|AhzO0fTfLlZNBp&G4boFZR
zz({wNdnM)(6xaqHm<}JuVbQ3aDx)UnqjDOCZNGSnvbNS(^P>G<sdvPuc~Vn%=KC&2
zgJPqf@kj%S?T@o<GO43w(Wn$TY#ZVBD^<gtoe(@hqE{YWAInza(wC5#<jy&GAXTf)
zMc=HO^|=V2+!-0_OgeB-cY)WUKB*a&CZv9_qtdiCleYH=d@kj==~uqSpY!GRm!RfU
zeyL>#8cfN%#aHgTOuRwd)-3a3Njq+?PIQNK42K}{qd|oirtK-vMLzUpscaYjvNC*r
zbRzPCfb~~U$sK*X`MRhAX@7;x^>|4<t;?wwRonrq$Y+F8PkPML;UM<o!{b$>aiM*S
z)!7<;r0hp{?80ir^VNj1Yexq|N*QEQ;#wMb{={9o6bvmb_ik_B*?c;89of^hK;@4$
zuXld838g*Ykh}U?V`=$<7kzDe*!w=gUb>eA`FS15A_a)<3@jH!Zd`|im|}XnZH_9s
zk+M8EQWBb~daH`Cxs+A-O|@fDEA?VbA|z$Qb5e@Mw?OqY<j&#BsAZ*|d0R<h;476M
zAuV?k!`EMz+=3|J4Lvqgd?V){YaZTPH)|pXOB3wnsz&wVX&4Gv;0+6bZ8+MwdI|gN
z6dI#o0*@ku%<9ZzdUZ1n-bB&`+9$nq5=7ypP!qXoXjH|9^`pe^&3$ItX!QOQbO0r?
z(oMF1wfbr`K_;@eqF0aqaZ#F@KKcH=h8{bd-&s9_>!{D6DGl&3Su2%9upVsR?`~tc
z8M=IUZ%*4&ZX@KgWYckimep;hDZyvmf?gm+x}w=5_-up%?awf4DJ!2m)43Jh{G!uq
z_n9Jbp$3Uvtv?R?@z-%2%PIl*ttW=g)T=Q(HudDx@pSmm5Z`<Rer?tS?|u9$ksaZI
z2|yZ3k%h@!6yY3s!qgQc7qBZmF+RTjtioy!cOixJb{dM-OX)8-SiQPFqKh&zGM37A
zE!QLoJ`_s0#htx$6P)YqW`kk4n2SOEsqmT8=H`u5VL@8lRL$jv;YqiV;vitSO>-Tq
z4fzViIhEZqt`rHKfSm#l{(ScczmU;fci-Oi%gT!Pf1=^E@qzMU@ded@w>ah(qFV6>
zyR<y)R$=jtz5*`-p+v}a*dFkLa<QO$p)#|Q0=q{qIQE7x*JcCqS<q)*aJgMC?F26R
zpaw~;GKwK!NkbQew*g{>hdh(<UM#ifpm^_OC<HdBaMU;=<wlSMlHJ~+Fl>fy()C2U
zH|yQczbs|7XAq?MX#FhhksTp<Vs7sbzkcg|wa3K{D2<#~XsbH!@H+|@(_ifSL8qM>
zG*l^Plp^knT%XAq*W#PL@dgEI6XV+ju7_IS2cEd!gN-PK#PbztZ~ne?>(<D*b%9rB
z6E558^`*I=3HJJs3oi<6PS5uF-YQ;7w3-{9TqKjDXIoyR$LtlWO)O`9iyS@<CHXB*
zW<bhH?P*HDJ@vc|nel4~k1%-h?Hde~{e}-mO>UOGebE2ZpmBg;YrhyX{=MOzdO;kO
zcM>hV_w4&aVzWtI>B!bR9(c!lyfO29hE{1r#H)@qfEo772Ib!}+F-!OGf~i2`wf@-
zkMIAlv*Zgb2j?z^8BV(8q#==bexXMtzY06Afd~4o|M33nJfTuJ<<mTNZ_5e3cZlu<
z2VxWs07_|V_z~(>^P9DOII{PzF?v7C*vcD@9^~4uHTU$@&K7#POmzY<0wx%zBd~jE
zH<A&UK_l{jy`d8*iG?(gf;vY)zp)R5g=r@Ce1!2>5YKUvu~r>N#VeLM!sli>jP<f`
z8@x6==tV3>XbLM#4+M63CyqYm@_u25<L}wj61@)CT$&pFJ*Ot;v%?nJ_ve9RBMXvq
zu<6YDedix*qEDKF9J(H=hOf$<YFyQeDzU7kH-$dUv0?IS+obD4IA(v#?Ml~`Gii1i
zA^j<Yzt`7PybUR4%shh7A^5)<hEzGo?({)D>t-s;JIlUw=fw*5zC(~2qf4FTz`F+*
zozJY@-lgoROR{ZDUrE+ODuO}BUjo;R7(`+M323DjVwCl1UZir%HowrDsaioDC8wO-
znbUmWRA2lig|9C@1qBm-qtwLDXd^NDC4(qzMjB8>AqJs`QK*}cp!oAF5DkiQr(mg+
z{ykyC8%%?vpXD3eBg$Ibv1ISAo)zP_+usVlVdrt4bpY7*Jm)+bFBkRrDDAn^)67QX
z!Xb86mC3RMT&U>dI=*Y_G5*!mw%Flq&Qzv=;jH)XQtg&L@EJbdj4&FiX>u$d&IYf%
zviZW1`^#VeS7n83Bh$VQ_@wq07+L?~>w<e@iXgu}!}3hXj=-{5lZ)M&;YN|JyNOJ~
z0f~$v$6S?otaiQ0zJtbJy&A0GRnk33IpQe0?1%zC?YBj-I@2hwW?NSrRkawv7s4T9
zgA+Bo^E9ziw>jeP0Uw-!%K~%--*^C5oYO}Xlv$hC>OO{_7JgdyzP&tFc+Yi`Y9`2X
za>7LIs%NDW#eAN;Jj9Rd@1&|+Hs2rAu@z_YQa4qL;={M|>Lvtd`1eUhnh^Cp`bHqc
z9ks<fl^+&6<2C)zW9#y)TyK7g*aXunyWu7HW>&E;QiA!l;C_*0P1R3ftEQpv1+el#
zj!|{qKtkj%E_)LB5MmBz`b%o|l($Rc4+=IIMfL;cc8>DpH4B$u4@daIHL3VAAgfgH
z)fOk^rX<q|zx=_ZHyoz|jB5o~HWH+D*B8Yj2t~S)Z+yZUw_Jy8&3Q}t^}k%_=hPcY
zt3_THH48l2>%TZW(mN@+HSv<rWn!69ss=}}&)VsD^Q$5;)pAfLOdPX&<+u*@KAKpe
zx3OIqgvbRb-^PdO6QAekUw>wiE9dHGx(u49v!{B|*D-;$Op-m2^M4{ga?c=Jep(ZZ
z^n!WIJL+RE(8-q;lLh@5d`$>TjCgR8R5^TiVRm+R{@NeisE5NYG(D9OK6C~QKRu-f
zxPOOKeKWx@v`!8(-v!Qo;LZ`1^*FRuvox*^g0_B|rUJ=cgx^FQLGi29<!~9&gu1yf
zbL$sW=kX`tP20y=H=ymfq+9YmmN4|%-_Ri1VXve%yz)BM(63FWzqBpiTd+HZ6{8-A
z*sb0aq88uL?k*@P2=^oV>IfJyN?b?DC2T>?5SIskcz?mm5qt80ehXci`VMsaF|Jxf
z2lt%M<su6E09$kIt#i_=Lz>i8`4aaizFS?%rv}az60p4?PDm8g1i;gstX5b>E?2JD
z1roxS8#eNZ$y@F|_SRn4Q?83Jr|y(kvh;7>p-8$ZO5TjggZ|3MvH}Ta%Uo<g>St%2
zEVOmLfB9POO>(1J;gz4MT>f-!d)AzehkGw?ST-fJLVoN1hFZ$}L)0}daH)hVL2-Ol
z!Jo7%P%XYYj!oG;62^uvny6wFc)7)eUTALZ`Q}RcH$89<N4@I3pEGrEKj#Zu@AysX
z7;rS(0z$^kCT>MKR<$n5bg^u<`3E-m3}|GM`r+-MlT}{yVIV6~;T;XiSNhiGUVnYQ
zj%9gi*&ypv2n9*&y;=USNjvkw?86JG7J44%nS3-Kjd?00=0}_5yi>%U?gXUM^H>Ti
z=yDzK^;hWsAGY2*8m>2N{}m*9CkQcmjTWLaYV;B%h#nCsMDJzPXwkc1f*=T@6Jm5x
zqDC)+(V~t%n3;X%`@X-kerug|*8InsS<l-0-p{`GeO;ex<20voy5mwr$xi|9xsOj;
zP@Ah0=Mc+|drp5AoBUm5_g}oov$3?4?YK0E|36)r8y41g4eba2x1~#<PN-JuGkzh_
zP(#@p`6_(Iw3Y>iYbbFzJk>gJ%{htRZbP;l722s8DjKdSAn8gp$V6)>88zxG{%^4A
z1$vw|P3_Jbak~dMUs}9I80D`{t+Oq};B8G+HZ^p1Sx)soNaJ8x>tp&ZK5Z2-GScr{
z2(4(={hZgRqSAfud;+chiaB_sTTgZz^)_g%RBlyy!{Z4SiB-(7wygGY`cfMTnKOro
zb=Hg!!j-Y5^=o|N5S2*qqnXv()e(r<mGRZf+lCJgJNqAOuHLl>Omldd7SwnNGxV<X
z<p~^xE%q*d8xD@B1?6*cXS_Q$hc#?Ngie#wol$<>Hxk#Hg3nzrnu+t`7zxbMKP*n|
zYwUBu1U&28NY;{h4H?BA#iN!E3>*9Y8=}(SK!n6GNJ)SA!vu&hwh1N8{qqNVGY3F#
z2X=tL<w!H@Tq`bLUPSw>%WT45+Lx?M@Kqw^pA{RvjQGvsN#vJwGD*b!I2Va%-}gs=
z(t{Q&Z_zJV!gbdfGAxLW-nFliFcFiJG9)7Ghvy?nm@fIz+~U4OAnn(2bNyFMP5wdR
z*xO_?k}CuZZ!T*sM(P8?y%$TlPNc0Ch)sli28vvO|1cqa0I{BUK$VLc{Es*IPi=7^
zLfRS5{cyZ=!=Vy+IDP_$C*a1a(QOP_DJBBT*#oqPOZkwZ%*>1j!XF^k#?Oox%S(SK
zo{Z+pwh<oHtGzG`tM@WiD()U-IrCLkjZD&fgbJniMI<+Sg6&XiLSWYJDbcvW)v(@{
zQI96~NALvAoL3IXgH#W$4;oMH^8LJ1>r1u2>TMjJDo8yg0kBeD1&{PU(b}gVKJ@?p
zdia4N7GUvzXchP@V5A60-%2+gf=<OEKSRQMu8ng5lIxNQ+g6H02i7H?^7GM#@im6G
zt%BX8Xl<h87+LuM2Faw{GBV|P%Ovp#X-u@ooqIxCN1`v|LM+XxIlIdpgWX&%<<PbU
zsR|Lxzia7{hDBe<sb%QO@0Rkjrs|Sh2eoPpk{sB40yR?nyOzefVma=Vp<}+{>O>m%
z!C^Ewo&YfV1pEPV|Bpc*j=Sn2Qz3VfdeCFDNjw)OoIrYx#16C1jJxfGm9`PXcCo)|
zf?L5*4=?MXj@uw1$KG|(J@g1)Q_4M6iG38DYHi|9pJrmvV=QO#0jUIvV|?_oe)D<`
zgX+^FLig=&V9pL%S(3a*#QSgReT<Nfv@z#s7C;J6Tfo^aKjS`*3}QLq<NY8mC<h%d
z|9=i2YysSWdsZF=sG3mDMrWb~UW)QuxTPruH7DB!B;O~nfacSsmx1+oHAn;x__|st
zhg-Zv_ey3sI4=vhMUn<iCT$dUSRP8WH<_<db@VrLkVuCC7SNuR(8rlip{&s^WFuXj
zm>_aNY>^T$08H58mh|7Efd5_84&r&#OCE$M#hWJ<y`inQpBaK&|1V7PZf0}t07QYI
z9)ghj+=@!90Oen?SI4u*v5ur?8vT1R-%LaBT7^+(aY~;!Up}*>zJvVEabF4*xWIs#
z%64_ROvdWK@rYcbl&R4vn*7T=IPUS0S-2M4!4OItIyI(fSoK@`%97Eaq&^ipy3~(y
z2H(GQAaQK9`!4d^?xvo~&j>&1$GB@4!=f*5sKXs_;ekTvEJZl(oLAUO;W(H^N%339
zefR-%0pfE~=O5N-5j>zo3*-QilQ=Nr1WMJV_DNXI0ap&7NX`ZzL)H7k8*Fk<7lbA%
z_UY`<Y7W4(hlMt1GLr{lHD+FSxotwUOjJY!8cBX}Gs#yN25->K-8&YJ<75(g7~6h`
z$1XOAUFSBZ(^>3se||H#+CNy8`5lq-o&413$7DIq_v^+)u%^fiwus}kymqE=Z9jeS
z-N0!89!&C>eqn%>Ac*>D*dU@6y_Eyz?{{aYTFON+JZA+a@*oJvn_9?c+&*F7J~Nw#
zDbZvV#QqPGWQFVPw-9a(I8FAyat1xPPA*~tCXP(*J?i%q?%y+g?U0c~A>P-#4e>Sw
z;4fR_XZladNg^1$txo%`S-+8)e9ZYq$3CwE=55|A2xc8xGh7OYVY@w%$#yVI8iy!8
zPY<Bk4DDH5LdN)=rVc6qDwKJBrr4p{tO-#qc_r~8LspUf`SKhz0)xMd%DQ#vI9TIr
zJSIo0h2S<ejHi^3(C&=Ui~p&scMkt?j6^W7_Xel|@}G+Q_LVE{=tB#y@-QI59bBn@
zYzA0H(YmX!O)ok52=GdCk-irgX_a<xX8tcAV@+4%2hZc}q_p5#w&uK36HUG$er{|l
zMRdE;96b-k!ayHXsXl@7px1+~tPv3-*jGguB!ZQ>+SCRQ(Ck1v=!Fi{EI-oninFHg
zSD(S!PpB?%#e#TXp$A<3FR=z~SuX<!FwknqJaH}O`9Bq_%S6;5u7Y4+Ci@X~|Lw?s
zu>ULz79eMk?iYDL3wpeH2hxE-%5p85Y{NGY3nlZ{F-Zr&XWJ&vCc{n-dThk=m(nEM
z{usi_YdYFc6#n}(I$jEYabYXmv-hhZDZI3z>pGmB^J<~&cz<ahN%R!m3<A2Rahf!h
z7LEg@H?YNPH^cpAI~lml^Z$dW0TYQ3m;cKK;<R{)Tjxu+-9?y9K7=HItC-|=ltJUV
z<**CNB=K4gKINoqe!UR!@ANs#4@K5L8yDc$@x$deTG5{<F^Jt>i`i)3M-(cw4@-Dn
zk%gp({cag?2vu+>nnV)i=Am=nQ{EIW7Q@OQ0dEPf=WinQ{4w1LPu)0Xs~EnM$)&r^
zC7n3_H{bXJL_K+hV_%Z5;cK7{t5kg?j{@=GHiU!x3>Fa5Rak)QT{NszSZG|Hz7jPW
zqy;ylrZ)@|z`c3%2^-@<$G`mO8P6s)L4W>yVOY+~&c6TS#y!zjo!mf7>BNzih$rFZ
zjp6kc#^y9Nm-^C!RlZUPp>^_B@`b-hPPH)|=0RwxHn&wenBghFPlm0_!6^wPw%?T0
zVXq<V^mW~<&BKe`ICtnh0^?UPoZ^7mq4H!RIuBqF&jF%exc@>X)2`de4AflPJ<4FG
z%lw4<SGdtAV8r<CVd$a#9J=-z=dnSjg|WAC_dJLb&iwI#bLky+aEUs03|%`M_M(vy
z3XE_npW|hV#X_`e9&1tPs4MoQs*Bav4!$vh@>DNhKxFMi$)qZ;7PVw(sKYY2qPcpJ
zk+0#sNX;HG+z8j<T2nVhcVHGIOheY|)Bv`<_Zl(-%>m+S$#C}eT%ZZX<;i&;Vu`MJ
z8gB4+!;JwyE5?q)7ptNjD|Ya|9&j$Edx~>E&P0Dw+?NLyNp_&N8Id`gj;b`!{{GrQ
z;c}uMsMWm^TZ3ZGra5;3Uw*n;S^1<y9)A43HJ!ULF(Yzew0-q%C=L7!-YtjIxo^EV
zI~Ax$1Qby@nQ}pMaF?9Y%4a4A*TS;2m3`qT!Y@_{KPAM7<B+H9aH<OxZ#CS8;}nAO
z!EeJ&9<Z8>B!}hwKq_G5VS!emdv}r@NRt4272y6BRh$=2kO1SSIX2g@LOPzr{LCu4
z54r9aZ~fdj{37-AAci!DPergt{IgnW=Ex^gQ~!k=#U>GS@qikSb>XKHjT*6%7VoJ-
z{DCWS6n#$qp5~wW-g_zxEJDgSEyT`;6P<@U{gEQEa{n#%Jy!EMfkO3vCy+_MqCBH@
zcteyXrXN~NVJrIxOL_C<Qq{?E2b2<70BDd!f9xHD9HQk>CKr`2<$swsp>d8ojW{=c
zHE)Q`=*NQ|o8?KqqCy#oH|26oOe*p6sGq?WySGm%9vg$Q9c;d7wgi8jaFe_lP$)nD
z&r>uhJq>;o?N2gN0Vj>Gm9X(>#`3qcTL0IcCgwkb&HP7;xvdVrK;P*l@%UCE4t$;?
z_vjV8&yZ?LXsJQLDT{-kSe$4#BODWeNU>31cacWd5j*$acZO-Zi$oaCzyU+Q(*)kB
zSTH~NU3d)|78YS-J&wZ?sdG+B=RjIZk|W~k$ByEKYS&WH&b=4#j!xx&eKx6j2Vb~+
zQO)0asT3cDAUTM#ahA#QtF3IiJq-ytqir<1Si;&G6%8%%9;UFlE}g!=*59bk41FBD
z(=PZliM9J{Y0%9-%U`vfH^W~xvRj-2q^zv?O3Mr(R<f}MkE}X5&yZ?VuFvoJJ_J0_
zwm<0)zYIZwPH@(u1v5H61HHQiMmEKd+xpT<69zdw_y6B4fZL<ntzQ|;{rBmkOjzRo
z?&ox1HQtq}UB1EkHDlds(N`L1t}B+*eBaH+$KUi`&QvnwS~fUeQD$MpuhmK-a$7El
z<augblbc|-8#kcg8)>iYh0N+|y6JjSp5W1~dXenD&z7FJ3E9}1uG{B`+C<rzg8Pue
z>dV^i9h~9;r(e(e;;JhK%AWq#9mzARs;5GqB!BkU%#L@P_@l%CX;gJ9GX&Rsszc-a
z#SNd#Tcok8Ry$CYVk!yo^8Dw*kwf4yE92?1hXRJrt6wz9$-keSR*Z~;_?@|-`tuK@
zFiUiskV{Kva|0JweFxd8=xZ0e@oW#JRu>QWFIY#d(06^8($z8GX2<TMC%S>}8Y)!N
zN~`lJo#WX=)GhC+v*|oF&YqH-A|v!%q!abB;<dbCg(`Sx9pC7is8kj^<h-Ok{z;qU
zw6}$P>L8+qdccQw<|j%lZ>9)DnGrhGQ%0ubsd6~l@cMbkewLeChB_24RjDV9IuCE+
zN7CJV&fOR|*RbQF99A^+1iCkv3?j0nJvxG}PLr&EphoH-L<Vb%pT&>oi<j(4WQUX`
zp>~9G;0aw7R?#2hZTcXr5Xq59ejI%SnbZJPEA4(E7}0o1Pe0T3em3Ho%zplOg*C}+
zCnHz*pIwLks~<#XhDm0x<u!p8bL=fA_Nwz((Jb30G(gek?VZ_`T<5~Jd!9x2$@gv;
zR}fU<{{yz+v_f$r3)1%AfSvbbbQ2LM*eKUR&O@M!M`*n5n(Y4hir?`soA$@p(}A%d
z_eDke4S3`s{B3!`i|bOM&c9vix(e7e>?y;D1eHRpIuzNZrJj37jV3wz#H}MS|CkaR
zLjlV2pBpMSEuE^!AK7-F^wx&s{4`S~>X9*=H`0hv=FIGn?Rq&+spAXj8>U*)7Mk)P
zDnMngT^B1K0sJ}+G2C*>=J*iau`~V|j;p`X8D5Ci)cN>QN(cmFqXk5Nj_P|o1rfgr
z11pi~13WvCf{9u}m+H6eT>Ew|nKJC_h3Ja?Seccp9S|$ghbt27TUf}Ao^Ph?p5*(c
zC_-Bqk+yz;?|9)4c5Q)^NeqK=;z6<c5<yWZoopM8NaOAvelENN`}vC~=cn6UwU<7T
zcA&0X9o9O51u9lSBQc$9(bN20E@!yh^0A;Pe8w?_usAm1f@z!PmSP`WbGmmzCY2PM
zX_E+_<~=7&<>4n9U$x&z7E+_`uIYjx^rfX{OlP!KZ<gR#gIgB2j>5@nyyghwSi2o!
zH4P>0J)+9`90%e=<#`ABZLkQ?y#bPZdgF|8+Ww``tOP7ZuK11Jl%wwm^guIp6^b=a
zO};_e@xlIa$Q|+h!gYAlC43fsWQT*=+XFDYH?jA>N&9>Pzp-f=n+0u#xvL?@)hHFe
z9zbE3!|jY#c8J5$ASk#{B(-ncmLBqnSwh6;AD>7?&{f;c^UUmQui<{?PGnDlqSkr!
zN*bWen^wuQX?NN0d?=2Fdrwm&n$0}PNsYR_^uxAc5(C`U3_^+~Z>`wkvW`o!*^LOp
zO;CZ`q4+701HBY6J+mgu>~-ERYwRn-97NWrpjFW1%@y}?>5XAsiCEa+HB@PQRAB8@
zS9!o0Ygzv|<!60B{b^7;24On<-LrkJ7QFoGsnRlTST7*=Cq#^43+6v+EXcvQck!W<
zn^4VMxz0$dp6wN`7eAPb2WL_aK4!m6zenv>D~qqItDQEfOshck?(Rd##K0S3*E?Wy
z0l=AnfK=#X%-4G9brKiWy*G-lo7S!zo5{e1ZAKe}@n2$lX;a>CcG^UMk(|WHR&vX<
zgOZ&LLh}2e8Z(Aj>agjPvlA;pw(Gu!1fO$uxq$e0BPbZs&~9GLW#0Xdn_BXi{IQyu
z#JF5T9u@0#z0DaY8)#lLXO%Yu$YH~tRy&aFA-e-Ab32#yfat}!SvcNpRlMPc?!Bxz
zXnfzf-4^?>F~39un40ptJcegv76X>oHlK!d+d}Nn<)Yu;Gb`yG=^=)}#~oC&qxk`^
zGxan>jayqr5FoQi#U(6q?3i0C!)VrNrI!jQ-7m%6oNxvt!f3<R%&O-)?DggQK!(6=
zx#+L+sYPbz{Aam3h#}WeF$%`(G*mi6r+w`%nrqwGId0Tl>Od$*@g)Z8GrKUu%@-c<
z^Eh-M*X=y+0b?PA7~b=!6tD2KqoJ7|cw?M;0pfbh{ONj7;c)Ww%2@K2ih}l`pbxf6
zZrjZDcoMc!4fFwqz<K{gD@$&6nY%%bI|$u=RynTV#XBbYtYjb8HJ!U1TS49}yrs+V
zy?El8|HxM}zi~I2_n>dPOX6)$a__&nQvLgy9ilHBe093F<Zs@Li0kReb)nSWQom6Z
zdFNF1#Um=oO>w(=OJcmx@`=yh-_r`W+;~mrg4@4*K<5!o1*mw@8Em<Iy|Z(vbTL={
z(^(PY?Z%rvS;Qn@bise{vI>Qmc@V4Z*IZvK8V@4Mdp}j(sNG25;ol{WayS?p6!oU=
zpw?4T*y_;MXHJ;xe1Aefv*Rv?V$|y(85e)|+@QbLl>+FwCJQ`?6}h+ftt3hAL3WXV
zbXe*+Xk7DK9KPwR7}5pLl-P_va>qYs_FQ{vzj}soP6&4skA7Q39xI+g*83R)0W=aS
zJx$-K<fe2i;>0VY_oSsLs;L`c(f$X#$)QU8QXIp0LA`SFbJK@d^EKp~&;|q}SFAUR
zjbCA=2Uvz6*q*zVSdR-;OD|23K4h=*E5WhB^xZ=rKWH476U&8deg>4Wx#J;hGxBe*
z$AN~k_jb37PZi4uEnf|p6x6{kP!dXEr|=hOE~B`oG}qTOf5p*ONsy#`-&YGO;9o%&
zoTZI|GFU<4?mCK-@&T)1fgTyk0jP1SGqP48^}Z-8j|Zp@CW^b)jzfV@SDdPwXWM^{
zSI#zJ&U@gDa2%e=moM}0@q!RW)V3*o9lF<vTd0>F^P^`BPpAem2KbqHj*9K~T(SDV
z)!M~z?>(Qddq!qHEvG`-3g>N`X}VvXGv=3iWJIF>Lsu+>0;nwKAKpp+&V_yF9Zw3W
zV#~^TJ@2D`=fRnn%(u!)9a~5*MPfNZk<XKcI&-zB^>nzhZ&M(B80FWqlw6DcTdrj3
z*L@dco0#mqrjt+qlnzDpslL2E7D>k6Z9xm8d_Fw%nV8^9-M+gO^PS<&E^hEa@ybHu
z^a&k5=_KMOSLs(G&+>J4#8vQc22p2k)_KtZD^|cvb>pr>F5wnL6G;$3{E2GzRlQ}r
z{@X`I5Vjb-MzP@&Tim@5suoQ~TTgJqH%|dp7gePeI8}Znr*#AT?oD>th8COIu<D_Q
zZ;lXf<Z&w|RU;V$z4MV_Q3)VeXgGL|`L9{7jcSC^IzLWAyeE%%_)2kj>;xc;g8ljf
zl%2fU|FM31qGrz-#|QPVw~DIIt_FsOht+AdJE<Yg4VM3D*}lIH=UdGF&dr_G(RM!7
zTt?1rL(hH}77L^dvpE69{HnwW4~NK)d~S%eudE<cV6@g%FBN$7ihp|?CdQmkdER%O
z1*MRkJrivl$~bX$vx4Bv(Ij>K@JTezr^56kq{M>qDkWARa?xEe2ixoKKD2aG&QWBn
z%+&e2Fgww7Bu};F#|7qQ0dDge5=I}dmq&U+#$0;TLDu#?1&NS4i1})#P&6pTwogZT
ze%*2Q&R%<8L!pL~{sA+OE^(i@vKE<>V1d8)MRsik_|TO5`fGNhZdZ5F!QbiW{o!f<
zma@)o25S*^-sk1U8Q~H4o<1LeVEu_BOckuf(R~q|yLF}foM_fQIakKlIEnlZ)5D%+
zgDyjB)qBl(+;?vtMIOZB2-H#3=A@fqeKC$9SGpQ)2*FVZd%fQdH(;f0JOM}*qVmB{
z57P%2r*3R><XimyJP7t;|7ho{i!?lKtkpF&H*Y7Pl=<QUVED=(x1J`{o?ZM2a<s((
zd^7A;>a%uOPN!nklPNRp$h&P#84uY<k?3Y3Rii0UUcYGeDMoC-x~2Nv(T+-Mdhp3p
zv49jP#C6?TQ&Axrvjh4=13V6v-vX)dT^4+@Ys^u_i?(Q`w}f1iJ#F-;(vWkQtF=su
zJ~%(w2}R>Fs(5e@9OX}w7DZ>K9zSaPu(G&3A_`k<f3x1BCl&tJJEclb)msJ+My<I_
zs@MZr3nwbG;%hGZocEbd$h_uv=jG!2iR0)HJk1XZf0W)uvwb1XcB%X>Xvpf(m%5dX
zoT-i`yZ?H-Q?kXc_l6?a`yC!O)?f;+%l5u1MSqvvHHiOFSF#j5hBb_MJDo<;=oLO0
zA%bvN|Fcwe@J3(U+f(Eendo^9{D%tl(+SKoade4hqTa)Rzt3=f%dI%safN9K2vz~m
zYG=v|Mctud%G?ZtezBZhUe3=Kb5IRjp0BHTF$({AvET6idF@!|$s)@aXT^5dTWm`d
z2+4IlH#f(_*KDAZ%qsi%$@ey%I$zA<vXCf@^QOd0JFP_@yCx*=u@UvS)4Z~?Mx?IO
z)y8+Laz=K(aP?w;E<l{xmJN1*&?M}w&MFvyNF3~O5P{OzBmyN5_UcCy{99)Bo>awA
z$wYCFS!tv9BvjnGZ$1aEg*#POTQKVD$7KpVcd`w_WPX|tIW7Bg`v+`JY(+>n7dx1I
zVJ4O8{(vRD>Uqs@$IVSuNWvO8>T$RR=j{l%K&Kr;H4oN*IPBEWR;rurWE*n0)mg~K
z{G1;Ah1eI5>&*)<RU(cai#{+)$Lm)_?ItdU$gB3(&5Pq6jRZ79041$V%EPzDBvR5%
z+`M|MP&WBcm-?DAsix2ntJhCDAIrL7Swi+_tLNGtb&VG-aYEJzrm*M+ktERJZpl9M
zW_eLg;K@tE^8kNc&%->QHgnr(rC#hSkBX#+(J{s-pS(AN6Z!!K#J7IulbV@6u8W)7
z3b!uD^`*K*^RO_xLHZVOb;^FKCY$AKQ$Rz|>#_Vor;)5@H7Y_;Vw@V!4%om_2V7s%
zJ#0N*p|^x4Gj^avkMnyjE@OJ@gl=}26V459iFW6Um3IivUQQrT3!h+Vr*poNgGe&5
zjUDCdWQ_5tGheu<)%eRo$luG}+K$wAm*Se{r&(2B!ahkg_s;z`B44D$wh+OP+gr7s
zjybKa=yW<u$Sbpt?nM2fL!ElH|6!8t|Lj8Dop(B}&jOFzZp(X<`W_ZMfCxHzpqYl$
zl>Z={(LDGgdyX9$z<ix!(YR)|(+T%j!?@xcnOzPEo!U7+9=pcJH1^pcNH`T}b}CJ7
z_e<pPKq5=Fb+dQCb~GdO*y>kc;@pk`_6_|eh?l5K4Cuq->AG{3q4SpGS45#^Wi8I#
z$l8AR9TmfLx8lbyA1p!W!`_SHOHGToA#j8)M(yN{&OUga)6tY8I$EZ(_;Fk-!DVRh
zLa|1|&GyE!eecIae4W4mj0sYXH8$*7T_UTZTy(qoh>##n%V=R_>s>z!*PR=>mCF-w
z92weB(fys}e%}zP-Y10A?*38GVUzg`)c}$#@h-YW@(CZM(k68uspHhSooMIzOVO9?
zdsGRY$37G+!v?u0K7BYLJ|kboLG|78{K-(>&vzH{Rpwi(DgKU%rgky(y`UW!&56Z+
zR9r=!<DizpY;$PH>n9s^b9NBL>Dk$PdGQE7ZTujiQ}~0>2*xd=*_L70`2ZeGyw<xf
zI8b$#?**TsUh=$~Y2dtApU?ZbZQGCwvziN~KJwBFs`;6uXB%yOu{2z1)5!(4lPfC)
zAqRDuK~l{vWFayjt%uSWnXmZ9NT>13M{71ak2MJ{M908kK}AJbru;0|3q0O0XRD!C
zHjg0P-};1J;B;n2ef}CqDuzsst{Pmc)GxgXXe26>@lfy_!~`nBok5oAMN46>c{_Cc
zQC|sfN#Q0BoazK>`u?_b@L-O-;E`9aCj|MH=?s-7LvH=t++b@FWR*CotmG!kZKeKX
z5V%ZF!oeZ+=tx}8yO(YtS3#;G^mMQwKc;3RC*=&)TRba5fD}rdg42<+38)qRa70j~
zX!6q1e!fZukW?4h!RV<Mi&j1U8$;zkab1<;KAtubSRn#ic+Je1&+Q<a>gQ}B)jJ`_
zLGTyeEMdUNoV5vnJsaya=g+_GC4kJMlYt%3oKQu8b(B^^udLijpP#Aq?M$uIr+Lxf
z75x*$ChzTqTd-^Iap+Z0s9e4z^{aV7tz@7F7X)!}l5A%z9SmC+c*Y3N{3LAC+(_l!
zqIj{HuE=(85a)I?eu*IuW<Y_Ifa@D^E%w;A8P0Cu_cu#4kKzW|j<5f%`1v8<yWUxq
z-O0BJ=%tXBqH*O2jX#!eSy|Luqq)E%G&&NRvu(#R!cfsbL=E52S>F-=LDsb2qaLCZ
zb{%#*!ta-9IvlxwPh%4uKtbQ9u`(0QsQiq9T6_Ff;(L{tPNN~UBC(#f1|%qOx9A^$
zz8;UElXK|AMA1E;_(uy$-7s%zB*qR`>RkP`1LPhb!Y94{m1cj(Rn1^~RaF%&W9Vkj
z9^L9mQYEgn=^)PyRlXxr3lOfZ{F1#opKfTc?bsWps4}mPmv!i_%(*Z}j^{mjZ_04Q
z{RJ1(ztUu5W78(od0zUFfciH{QTWTXfW09;DF7}SQsFvNX;zHffdWN&Rka;u;iz2V
zzV_(ZRnL(>`Y|A->hIq_9W(aW=K}e+Eg+y3ljRmtr52IM6ngOV3`pFsd7tBP!#u;S
zH~$ix43sk3?seyd<LQnA*E^8b?Y*j6m#}p_#o9~Tz#*Rfu!a+4FJ%?KkSL$v9j)FQ
z1T?JhGi+w;iurA|{i&iiQ0*pPMh+5t_uxrjMyF7M_Z|E+^97a<9dCQv4V2nWqY#GQ
zzE=Na+25bFa&wZTe=U_}EkyeXH@J~#D*u!7tbo+qS;3fd)X7t}(0|2ushXv2TRg?_
znL;g=-6&bjOb~|MvbaV1;bA9i&1?!<kr8C?;2s-s3^AZPm~NK6IM60Rk*cPBcJF)U
zpS7)f!&1DiJr*vQmm?#fZr_{Jacjy>gIa@IEBy>_+wdL@ntUTAu-}I(*Ot{q9Csd=
ztxqUwL~<T)8IW{L@HB<vBSl~GYq(9UGstf}n(=Qi8Ug+GP~=#;*Ik*aAnTD$UU;=z
zP@1og5DHp&an8TIHD+5cBIUZ6-%e|H9z625!YLxwG+iMDiAqoQv-9a^a1}DIo}#lg
zqbmx*dC<6gLS(Oo3`5=>zUEHs^zLW4P<Te0bcgphp#8m82=|A39fqS&6hA;gaS^xQ
z=@CMJPU>t)AoNG)cIq8@p!S7oTVE0!jNqYn1-yy>pm03?rPivfdQtG{vC8;sn`5`!
zKz3B|{craC3w$6*@hvGb`a;B)&}=t#L_c4q?%;Gpv{v@;e7e$vL`j*tF~&md_;;1!
z)pEnHoU2PdXkfgbxyKv+pD>2&_dCMl;LW^_-JS${D#LFI2S0j;agK+-JO`CnkI<h%
zfu4rIp_`()jnB-DS=AOIn*izM8hRs<J>zwN%X|3OwhuqrYrV;<V!2$R@{7CsPldh8
zymr*u>reJlUvj+I%|5&wjLH2uB692f@Nhie`SlfgDH->b?U6ajgP8U|#83NEyuNUq
zZHd}Ve{9dxkiyp?VN@xq^<}(kvLJphO@K;Y14%~8+0EU3|4Cusuz=ZLI&OZ6@<QK5
z9gq=j4`F}+LxwZKmkrr-Uf71VPm#%%bsr9Y3fDkVcC^hOAW(H6ZOYqt6M6c6kpCqf
z5z^3qF>9m%g1vrXZbtw^%-Ml4ks_-;bICCzfz6SSq~2^cjQNtHu)GTJ8?XWYth%26
zH~5@-5RSd{mhO~d?uULmJ-~%hU?2KPLj9+-GrtEo9FZx4P+df`HwJCE6i26{pZhgQ
z04f>SwT_qV^}p|=Y{?-n$ii%Djm^LR?;f^7ny<5Wuu3aJvoiW*f3{{k7{g)*M|B;C
z#)!%YEh{G!m*Hhzl8LnbxS@lh{DoJ0M>TjoDNgO`U9`7_epIav5Dg7mbX>Kama(|G
z#M3<FC|+sL^x$poj^N*tz1pe`Zaaiw;Sg6+RNbG$c+{YmYF<>IF`5q69FY4v{CNn5
z1^!0i?32W1UEoYVeb$3?LD`rq^~>N*u8FwdbuAsUUxb$;DCFH4b6X!XE^TGjnFN`4
zD}P#+m;L)_G&8bGX+DyOpxM`XJ^l)}c>i9b-9N4#?5IBYENu;!j6XZPfR3K@Y$QrA
z|2VNJ&o@3vqFc39F$lexhWbt!WN$$3qwPyk-BGua8@>AeJ6qYE-Wpt@<k8nu`^P7I
zyP`}WosA^^XwMHcez=R14mr|`Tz!`Ht-sAlH|xSd(Jc(vzno!BNSgz*H8vaQ^$yGy
zdJHhn_(MviyhuBMf4w{fJ5WgTPV>?SIKNUS=zdRnT8>QJ6QAoXXpJJ~T%yXINZ7<E
zrQ>DU4+%@|9w?+{=hDjU{gu1Sk4<z*Vx$_0#8NUa5nFv8z1ph;CA~dZJ}n)&S@qeg
zs2Zv<F8cY6{2gG}qXeP6%vBC3KaS%oWE$i1jNM-&0vm_)kQ|4B6zD@!I7oAG2s7{}
zcE7OjNrK1lJru~6DE2&A#_bp8a=>KuLL@-*_CU6wJz2&xZ(cHD=+(`#nYm3v=;m*X
zF%&@Wtiy@vOYndi(CSR+2pB$fhq{RHH}_0KiGu&^x*hxQgl?EX6QNN&MDoz|ngxqJ
zGjtWdcGCdVw|?o<YFr3vcNb;+JWH}^vz=#43*@==w7JF~;l}7*l-_;icFgWiXu_Mo
z*7UQZZIqBZh%Io}fp*jDcUjHY@(yrvwlCG}>dhFu8%)I=es-p}fs6IAI<^BYTbf^S
zHr*NI=6kgLLlhIPTCr7InY@?Ewx7ckN>lLL;yKJhKB}n^&aYZ|pdK^dwl^%qq7>Y%
z`R+F(vt^^Z$8n~)&E&Rl>{@Lv32g)rr8ZVn(=1|53JQajl}Y8k2Cr3CS5bK46wFAh
zwoysMXUPEL1;0)&D-(^owz(y=8599;T;A%1?pp!Nk`CzV3P{`8m_Zmz7eu1wO~~12
zxQoL2A)l$IOx!vYORGDZ$R;6&DS=?tf5>-22A>jsbl)>R-I!2`8z|%TJ2bCxmBXBy
zRK-F`h(bLq1^Sr^2TS%^TVTKN&Am*L(OWb!bSg3J`IQP61Sjbno~&;o90n>9D8E<M
zOx<cZWzlD)@!d|M)r#))N$}@P=&Gaz=9<dBVsxSo;@rY(`yyLLSqQ``^C*Am+kqpv
z<Qmsu%IA^<x_2T9;vxO<3=3W0@d@h2Ohr^VQBYWc_lHzKjZ(Jp`=e+)L&9|T5%b@1
zke7eIO;(JDV!dR#pM4~|NItW(e3mJLMIi)%+icjQK_cT>aP;O?7E05Y#(bPabjKic
zXUJ?PKghsL!|AS}P-)WFkJpf;y20m3EMSpDI!Gvw=ra==t}g<=*HP3XFzl|~XR4fF
zWlL)y>N!(ua>#+Bk5)5JE$m2cRmVI7DEl~IYW5_Z`tK4`DBjx-Z?}i)p|%{t@H;Wz
zD{35;zvjsWqmX}Ls~06%7(T=9pr@0Wdhrj4{jcg0l%B`PpQp{)Kvo7`-dr7dt=eFk
zYD1ce$o)?4Vm0*ea2YW9=z%%dD)*2YIWKD9<I^cR;*1bh8EbN_)sS&m%bK8M#0O&m
z@Qo7Q0WI&TYbybc!7*9&(aAJat>ZYq-24@Q0VPIl?I;0M#DBvwH`rydhF7#nzK1d$
zh3l(!tL<>cP9$Vj@#3$Eo<hA*AS?IuNCNBCvKJNV6!cS_>q3;d0W4NYN%D`Bu<n;9
z?KfhQvR!o0TH)Ct0^~bm1L?i^!&m73(y0jh_9OR>{}xsgeDmzg4|cnfbPNG*AKt|u
zC=%mCRS8vjeEC`!eA+HJuDG+j=UI3CrEtat(T7+=A<B9?lXM?X?l5Ff5bordlA#Qh
zt_#eL1FnJuQ|}I1o%*zfrH#q@9n?(=4JNTn*U^&jgfXneJPfqBk#7ktfBW}$D(ZJu
z&nJXosR>DbquHw8amZWLVe^9F_|aW}CiGub{PDl_+aGsGP&D)Ag&{`^GYngw{*e@*
zg&Z1zL4ByLc<8eKa$OOL-X)W`r~1^mJX#<o+-ODp4BBU3__cHYuZiH3Nj@?|B!P<Z
z*Qqnd%!Us1B$;rJmNo{Y80dZ40KIhy;lQHM=BB3HN#OOUcsuMVEC#ZkVAs_z0rfYn
zzpG-#u)Ub>)7RKL;wHP9RTlsFci%X~0_aWs(M}MT=N61$VS!-Jpb{iS9riJ|9=8&Q
zv2VACaMI}O-}hw{(pRwuL`&ztmSA(9xY#LI-2D@M%{$I6m$?m%BjBW~AePEBggua@
zW{O+DiO_|C4-B})-$(|7x9ib$d~D?_B7#7}xRS0?O4qerqrZn}TJRkk?Q4R99!|xd
zRK@hLzrV>n-FC(x`V=)oX@WCf?%Xg!A;wzQF`K>uSZ!{=@%x+to0}ytKX&!o0DNSj
zoyY1k`fRK5YP}akdgqq{;B(;<he!f<Mm({8?VoKWdK-0ZR~M{tnPv51fgcgYmJH5L
z28XcR)0oiaOMr^v|7}Mx;o`g{D-LFtKD<v8y$Zyn*L1=0q36|ZD^uP}D3T%hV>ILL
znKIU4jc$&^R`G<;dV=$QDrw!;7MRlaA_g2~^9#{_2yR6X6{HkRMZxzTMD5<a0U>pL
z*sXu_g*JhkW@3983K)}@cuuGUC{9HOAf0V6AYla7Rv|u=@J1ZqYczQtyom2!5v}4&
z&&6zZr~zvG(&uYRrN;S5>D}<Az@)6@4{!!zP~_=ygv=hUbwSAU`%wF$JA<y;;U*U|
z?_pE?btDza$?T9-62BFnIq9$K5*CK|5Aq)LcxA{ukO9n)k#_)j4~MgSukmQu+J1{7
z9$s2N-+G+|5n@n(?O|w+I=ym~ox$)m<$26t<%8Yt(~roJ!8<YFj)tuu_-*Lz6%3-;
zewh$Ba=u2{@OQ-z9vMTG$GmoDOc|}6zoXxq&aG#`k(AcN6XJL}c%!%MHNMiTl|7+v
zgqpTHP5z;n>8;78RL#n$Bj~=~WVNI_4kN#^Z=S*a$$e73BguV397JCzC-dQ^ZYvo)
zme66ZxA_+r`tMvs;M&nX4VUby?Av`-VhqI`?Cd$-lyhI7iH^ZgD*24)Q`oVvn)Td3
ztB4+v#!$j*IlxjnQCrEf2cPX!tDVISRmQuY*{p?SwDa^>iKN2R1yPEm(7b(%T_E-k
z)1{`C>=)f*ryDIo*~LS^i++<Qr$UGynz8()Cnc6|&CAGPLr@)pg8A1NvOF~nvMR}1
z$ai5|^{Fw;NC6PhVDb^W9(o&mm4f%m)9^gwK7ISkucs?Fha8i9I>|nw%t~y6g2&;C
ziJOMcXIpW})+EZ5H-WdFhb)^?Hrf4CgVZ&Ku+Xmw)+bI7dYh&L?pHK)U8k`O;%MV%
z_~3RONbK@7H+zP8>2op1?0dU7E$0Qn(OA`Ga>ma&JLp`{$)Hj*W%BF(T2pFRF+-ZW
z5h=`<j=p~XndgrQwVHVxi)tR1PGo#Dr7L>AF}u}CLifUiNMA8lbYx&u=1O+i=4#$C
z*)<gRjCB$VB{wFQY2DiX{5h#0)SBl`U1>X+`HR=!mEQD<x{|@K$Tu2y-5Rwwj-tk`
zeJvFUd?BafcQ!c$aRFfFpWS_G(#E$)!@vC7nzQ{^0Cuw#<?Ha-_*ySuQudWjpySu)
zIB8{e4#LQ#>06WtO<Q5KPQ;A80o7`bbgkRa6pufBuIixCbHtdI(kdfOSAa<v>)5Y1
zSn+$#yb)<{7XDI!1M%x;wLkk3`y7aB+_)R6oJia1Y-Dq|sRH<E5Brlf@gD0kiXI}k
z7B(~dGS@@ovGJwE!bqJYbzggfJyec>(DmHM_QCC6Cr>}3$%Ic!6d6VG;Y8(7%g$gY
zyC<u4L+vjH3|U3}iW(amxsOpt5C8BLcux&qQriAt2%AI?Zr09EB0A2LzH}2_GA|3;
z)jgW-tSd-He|?Aa&!GOALdY5zhpvDmChGftDiQCukCdzT{+G5&g5b+CEPQN<;)^^U
z%=?A7T=Jj@zjRtdgTYsAg#%9s3pop;-WPmLmU^s~{G=%7cHKGhG}`Wsz#jrRV#UOv
zvH{*zx&zzLt*y?|gzR%%n310ThXQNfS!&Gc?dsKR@YUtglC;a;t7f9>vsV;;2U2Cj
z{?iQU%Oui}$%xKu+u#bnP2~DeZ<0(gzWHLfW{FvVh;3~R9n9R1noxbtHptbHE<O0s
zm-iRL3?a!1Hx`D@nwt0Rcy!l2hR**+x=S-$8{an@d#wC1_Cpw9&*9tv4QkNfah@9K
z$@_FI(;JciNy@G#5NyO~8jo(E?0BZx%n%nPm^}Ga;$UVV;qC<VIP^G3_%Aex()vAr
zS27tn1xJ83)_h%jRugoq>!<1Ld_V5fSLBlm<y~>?zqoQ`BhM}AT`zTcxhT1M&bx^R
zqjnJ+ZXN1qc<|XD;ptR&vNQPfbV10CTSK7v`cdmMi%7Sv!SEFK*S>qFBVa3O=dt_`
zvdl(zNRnhii=Xv)9(7RVo71hO#cz#dIWH|OH7Ka8M{}G~;gdLap&O#D>uB8FrL<ZV
zhS$dqopO^dlMZs~N~T-q)rArQ8{ZN|=>0BW=F%)Bz&88rONjnLKZY6qyM#k@^5oRf
zGDUiDZ-l;n`M6Ao8B}Rl=%)OD0gB6uUc>zU8<c@puR1ILkD2Q{<$>%8?_*KOXpo|v
zG>1fVShOEV>1G%4S$;|0vv@q6uN)bL=LY2o{b2MG6`;;`=5?6Mn|4?LA-~IiYG{pO
zH+?OBFh;6S`Df08)pvKDp+ijNn{e+7WBBdSRUSNGN?T}AUhZ~1=2Mi>crk+OhI{XB
zhbgpHH781Q8Sc4e^(t{=@7)G&tn|U3)lXjJMU*BengQ%#|7eu%WBc%_j^rjQsEsRs
zD4kbD%A_C5u9DEsO+TjEqq0B?EWHGX2~bYM$FQr_F^IA;bm;9Vz&8JLkPQ<2D@_RY
zjYlUNq4Dwgd{Gzh3kVT~YNZs@4t#j?)&7*{1>_qo^F8zdzJqcS>kqFT02f2LcRRub
z={C8mV<VeZ?-o?GYNmNT4cM<ZCbFmCXSa4s)_D)n2DsEQ0pY&B_hZG`7$VQvg)&q-
zxI-_hZreq$sKNIY5N~DY!Y2)<@S~pzq*7skgaNpOcDy58)hHZ}3+jeQY>n4U!3aZ7
z-s!Y*Yt7GPZ=7Crrb*H$q$%M;vF~Y)Tv(+YUM{F0Wz|2m|6JJt*1af_6|rx|6TIxY
zG$ODHtNzpa`Z&Zi_?0<x?S?=Yo9$nmd)Rv~$1$mfnu_G^FLeFL{*Hn~`HnXCBQ4Ml
z&}44+XD!5s_NpsCJm2~#$}c}w$a5GK9Q++$Ny|2xLp|_q2YOiO6zf)`8Ro&8DfReI
z?xOZd@*sZ~7pwXZ?O<}`owMWzxW;$<N>WOa<5V;Jz>3d6OM<N!O=4elQ`^Abb-hQ3
z^_Ul`?U-u!KiSX|n&n0ChezKlyj>2x^;?qu(D%fI^v^zZx`Q2Nv5A8A^Ormn<0FfS
ztBn!Si=-|M(&c_T+m9>{BCsTH6^4xY`|P41iICPB_p1sNSz1D^Z2Q)^UBO|Sc*!7-
z$7J?f9`&f<A9(#}xaXO0qT6RIE{Tc~uOi;%a49{vFGW0!kiNT5FlYLw;C5K*lP^&r
zLY%KXX7tOR?BBvG_iz5%nA58h(r~fc_l139*D^}Ye{Ju%2i$g=__PO=1u>}y#O3{C
z5zIF&@2PgL1b6zaQJdPBS%Pm7hW3STTn`Q84>JPTshE4ZUc7h_=)M&zG$8_cQGNW7
z$A~t9A`~FHly*r;Mv14^V4pJIu;hek?@zVq@|q8&8_=uMh7S&0jDsdXC6-j8jWapw
z(2Jw*g3Z18VgGutOr!6Z@SIwZCNe19Jir$Fl}<}o8ktWHb28`l$IXxbb964yrthU;
zai+V>Tct&MV?)`1K|c{%dpip(GDpk-pD%a!t1J@Vz=ZP@czDVhXwpDSM<o2?OUYGd
zNWJ{=sy6(ttGM_rfSd9(D&4#ZW^@_w3x6iWrkKztvA^P1)vDM6SHaXT0GZb7R3=PM
zpb%`pAqih$EQzip^S5)O!Upk)^5Y&;v|2+SV?WnN6^TOf(zC9FD>|<ZeoD}zGJE8V
z?4V=`$31I7biAklO_^smf^_<*3#NuO;42lG;wv|w0#EmdkyDjH#)uBBf-O+rIiGfs
z@4$qr&;yrm(Kd0ai5b`!57n@vaDos*BLA>H^$t1CK4L}fbTq;IgZgUKZ;X-nOc+Ic
zUCgA6d2!6Eq3<cO$e%Qo;r5)fk9|3wD)n-t4jSr>@$??6S|U{k1@ppK7b3b0h6?;v
zEWP&x$~S4b?n)h3T|db&n>RAH?lF;NS!-FLx~G{5Lo9zoqJ#E+lgdXY5vS6XQKV1s
zJy1YSM1C&xM|*_c>E(Jr&MYT+wO3U$^-hSF_3<l<_219TJz0nfY6k7^Y5<W`v+N*#
ziq1mVmj_ifI`$*+1rPdVnX34Y+5zly4PmRw^}ei<ta51R&0;HE(%oc<UW+?~pX2{F
zy)o*jXg%_quaWiHlVrvPBnnW>10(2Z5MYs!4ITGZ=M1b<Xb+Uh+CU@@F-W>$(FJCh
zjl*st(EK@WfWF>mV!Zc~-xZ~&99yUWOj31)C6>NYc<RHr-qMFm=yiL=|AEO)CPzx#
z$W4EpuVSefQn>2c4G1*5os{H?T`u_9W$D(3o43bTaiblVM3pl10a(|4d>*y5%J}#|
za-A8&=<p9N48nHEi@DvL&scHFP8BY5YjI8p3b}sQ6mdU5n3F)<fACPbPd}Rw7NU?M
z7#@Gmt>gOjT{(3gmbw{&)h}YSikQY}E8HRciq|YR|Adg~o;&Lw@vx4X>WXf5G&Fwj
zmkcE+Ugth$<@m$f0POY7d#hln=h6jY_R2NSdyV*Ou;Oo2aJnx@sNWEzO^#`S+_s=;
zxN7)K&$vGI3GN`dj3clP`5+EbLYpTSPbR_G^<*Bzz*{nEt$6hh-I{W{Lr&_WUy1k%
zCBO9N?6~+OX?iSdW$!pUy**N!dMNMfvf$dX^1OJAw2MlaZ>I*fydo%}NWe3S+KFkk
zsCOYqErYN&mVzM?&cCc=gHb<Ty8N<#H2szv-Y{6m%xDwrv6}sZi|^=w7LocWVB^6@
z9^^Q!sA=qs1t26SSi+(kUt&^jP>mXF0QjxMK#`Xsw<&nru&D?dbL(g9m^-TES?Xho
zSNY2@N3xe{=-VqEI~)`YFL+Y&4&{b*4QZ@N+Q41#2W{r#<StLfKVOxijHyMaqisC6
znlcD&R59azfjVWu%`)f33DMzzW3nP|Ol0t<k(Ao)@!B@*;(kJQaC?qW&L*YoX3BRQ
z&r$n?D2@5wHoVAI@$lSdzAPOdMluyo7`6udkzW0VQapdlbq`LG(coHMVQp>uqry8q
zYf>@|ypbw`%^;?7>o^JQ2VwoKh6X4ac?PEL%9KM3C0ynw(E6X>Mrw-$o@(=L*=r=-
ztL$UE_vs@gOXn&=^!Io&dJuwc@`2l(|0z@QdJS32CGdi>oaI-K6-hBkQl<AZP}U0a
z`*SGP!k(SPfYB;j55xI+Xugxn3OnykI9z`g4=X36?7`lG!bIshl;e-bf~js4g1K7c
z#3_r!7Yl<_p`sB=<F`}$4Z5y57zX=h0YFH6H_S5fre!s>;S>r4H`8AfH56!jvRh2V
zb`#CSy!u@A;a-nA(ViM?QHc%Ar2HtJ92Ruc*1lO$UMS+Fpi#>zUc4p^yVk!$=YEUX
zQWF_zKg_av#>Y?7{a(1LPv<=4o@?pqS#}WKj(}bHU32@>q>BeU{h3_5?VE7leOK!(
z^6w-DwfLXJ;+G36#AqApAG5*UJZaK^*n1%_8(V}N0;6?hB5`L-iX|jWQcn!em{<=D
z^%%$%j?Ml4gAx}q;O`dLw=RkH_}l*`0Rd(MS76!};g$`r%}#eVX#`v>sk`s6KD;)V
zJ!(B0({BLhB_3WEVPn3s?8KoZC`=ZGl`69X-eF<auRRV`$$y_8ESQvuv_{hrglLa|
zl#+b*xZ|ulJp+V!J*wEt=r59=X%uF_lU_N+wt6@6q=K1>kVPq4n^TIYwMd?1uk1J;
zvXA5}Y0~dDzo~Ys^-FsH{((;As`ci5&mGC{bFZD?$BW4|_b<qw`?c`aS3@r;dQzqI
zUX;KBMQ^G!X6=4?cu&4{&ab=wx+)V`tGkizogDwvM*RHoJKP&RR)IBw&+yPQ;Y-VK
zb%TXn_%-K2D_Rc&6&{8oq))vWs*5R3Avig87>OYDV9@(Zcg<DPS|4^g2zBf>=HggA
z99Hf)Dd`RSc~gGR326vX1(Ra#_q-zO9*QQLNPda`y)!=F`!p<H90;VW3U|C1$1xRI
z&IChvM2(JvC2-Gu*ZDg8N_|Z4?8<YCXCE?jG|8n+Vk?lD>YNWMe6HO-sYgh|1541&
zOQA3lsl)ly)WE`znR~q-$p!c`DO9NA0LRb(J*noV_bJJ5XGHA$Y{Z+t&2d`zynr+=
zUBQDudNcRegE(lrHpx5vzJZ@-vW&40Gfc68dFh25-q{n}u+X!2XuR_l&6#Q4El!w7
zz9GFCdd(2UV#4wM_Nc`Ug}D&n{q~Up)SUX0bO)jS9rKev`Ep7TE0!T{V;$W;1UlBg
zgjuUjTH(tVPnQ`Af!F)!Jad6T`zG$a9b#UyXm&Ot-mguMKcn7pWS=1HHkF|Q_mREm
zr+EH8Zm^5jGhpDvg_*Be0AdGBs*~MJ2B^hQnFs9LM|q7soZmP${Pr*dD?yi-`9|z2
zLA3I%2ytk)P_5oO_+2`iO{nJs?@5jQx8{L|KYi|IQ?OZwsat5YiSk`)8R}r~f>O1z
z`UczQAlaHq1WW`5wfFVK|IF3Y{QwC-ChG`bGhq2m(U7GytTv<NO5c9j`FKX!7Ei7t
zLoz25`9nEV9|6S4PUV)Ewi@pJY7S^I<7EOC>j~E9p6bc?-vYxYt(#w@s-1lDBnwY<
zQ)yZCe7{b@$C`ZE*L-o^m_*@6pvN(j$rxITJPM6NG1u&BBd6g+8#MnOzUf>`#Md6w
zyda=jwj=xudf}rEnQyB6xto?S=arJo{s5tA2)*+&?RzUxrOZRrPP#1~eb0UD1erL}
z;mDSR>w(^9ticw1;_c(upHEM0l@KeIlGgkdgKT~-Qq5K#Jjt8mw-<9ZMDohpQXlwh
zKyt5kKk_7GzvER$(VQzCSTFkw+VJoWv+vGUTMgje2lGaV`%y(P{(YC!)CcJBBaTQ>
zxR}qPWTDYJ^`B^fG;y^neCIohoOkSTUqC$t&vnc+S+ow3N+23pR30H5t~fpZa=%jM
z<aAIoEAoIgM!K8p?*J;!3YC+2pRz0BPgr$#@+<npG+7Ig>&sp+QDjBohtV(2DlJ-(
z-+C(R&O3=%Q+&FxArfK@6$bU+H2jZ$-M;a;3-_ph;t=c0<WUQ5g#a^5XyNMzRe_%r
zZ35QsC+z;0Y8szpN-?;WqaubsPDwjWcJD|j_m{l({$0+<kS|kJPi>oM3S_95j7n0o
zc{@x!ro!&LmsO);@*akWz6#XKL3uLYyZ%d3gsw2Sf<u7q`l-iG_jI{FiCGo7e88rY
zqO~F&yUr%HfIW{q#u6cX6ogp<y8Fm{t-!X@QpHePU^g|1>r_PkSTIn*sD@DPcC_J-
z3=6HW#g8A`{}~OO7s$j;_c8=B$CLjbn$G$ys_yH<ba!`mrwloCHxdfch$xaG&5#n3
z(nzOBhcpb`jrfq#4bm{cFz21`5AQYqz&Y1Bv(MgZt^5A?=LdyL*h@Ta-xet3svWq*
zMo#%HR2Wn#zp-BrASNn{WNiAbvGGz4wW%xa=g-O66dzcuoJI-vFH(T;Qg*)o(RnCt
z&xhvXb!^fXGJ>lkhp9~CIh^@I@OS^1FTwye!)zvdJ}%6qv%0X*(2L#1g4QZ5(ZA&J
z{^Y^tzj!A34#)n;O!(Ls%HEH-or3&)Ui^)YE2P`Ytj;*yCHft#-tNScC6alU960a3
zw<c^UXd|~UtowYH;XfOO?KE_4AhXHhK7(h?6AVY()*X!77GMqaw@CDxTjm%F@nI8y
zTnH!B@E*QOjmM%5uvk@Yy7I6(_P*W7>UcE9bgd~43XZtzg+V`EYz8GkvG~tKMbYo<
zVNwpWZ<pM^xC;o^)eBQzBne(w`JgVL=@8f<t~o!kWZ>PbL5E|QLYmt}eg;rjhVg3=
z6Z#L>EH4xVcS<k?DD`XocjH@b{-~rdd<idcQ|>V-;5ICv-*)yge)o!L1Hlv8EF}!s
zO|%d(f2$JBHYCVR*iE85G-FmS=!O#?28JeVj_hD_vZ?nIg|}`5bi$92efz!dNX#YL
zNC;V<U?<QdF(%0knjiBA8DftOCT{<Bm}z7h#V);};?flvb!I*x!fZ)!Cu87-WZ{hV
z^`WJu_@bo5Lxx#CZMOETQB43#2R8NTPMT4I4=xpb);Z|PBFeFg9&<ZMVC#sm$=})H
z&Sup%t=6gKF*@<AI*IBA$5fa6oLNd}<(Ee|!h;1J@OA+gqL5Kz7EkZNZ>|$R&O({7
zoegLDv`ID#!vvUK&XIu4)0jSOhP8a8_N>s&@0Ur5<scSjcnoz6|3*z4dk*R7avo2+
z8o|Keqj#)l!S0h?s4(9yQF?T}h}d*bdaiN(Gx^HG=v`Kb|EZ|p=l&v-OPEnzOPVq|
z(aECSz?{vS@O8|648-&OMpe(rbmz-DvX@e)EJqu4%;QTLyY9EdAj)+6Kbza~DG)z?
znDa3pK@TmNOFbT}+U-hy_jk@n$uJk566z8p!>Onn$PLU=b!#puiCpf*ItdqVgiBz=
z2qdX5CGiP1DFvV%j+*|BXGv?e$@>0zf7$s1KaZVY?=(};h^N=L`Xfqz!T_1iYZmlc
zXbp}i<u5SQVYvDzJG(QpBI*=pn@vtjTygvTj4hFh`x1{r=~)tQnn+$?393m1tpED&
zI54_i%GQhEOzZ|b*hFRoYz8q~_o0UR9#Rw5J4u%SVb9X<+^jF0ASLy)T!&d6GCk1W
z8@6=pi4^Ml!my70^0|`br108QJ~f<^0;14`Mkk%VvcCoeFBm;Yl42=MsTtn47Gjkb
zX}28{g@rRxk7(#+12Geh2^X>y{n0cj)cG3B-=eSphOVJjL2fG&rc`jNEpTiO4F}Ju
zqi5OteBJ6Mzj{mp;4Q%heEaB@qy^M%#L~d5yi8_q<lv(NPHRV;%vMB8N#vhBF85|s
zNrUdjDy+gLL?ckD?%%oL2$5YR3nEvCvju7I-w=*eL42ncuHO*lAqYC622j!Tx_l%i
z_BvpgABJ(W!1$MjE{#+Wq_v<P_;R2MoE2}_2`_?t28xFB0Xqao<0?#q!!m9d_wTy>
zBezS=EX{w<i2JbuF_geDSZg7LIhXCL;_JIRcqbulmaD0GNy}A;?sh?XTOTH2Xz0)D
z817)Ul9w@xR<Ic>6xGr}@)ps>$t>w6JZ!9YrWpDk#@m1}Y)jGjxuj6AzUI$hB=KF<
zFt|KVXN;{PY}ePq!pg>Z7weX1!s;GVa7k)#^XfI*U0n)_xFPAMWXm}kX;QK|*H0ay
z-YpGi!-I@H>M&LiYEgTz;%{*wxD?Z&%FCNg_5zBeLJCc0flm!GQ6X@8@ZTB|wrY{r
zB*8~RmwRH<NxXD!q$hLT8eAC$=3X(y^6@n1NJ;wZ^&v+KLBkHW0U5wkZ7q^R%5#2#
zvZR*Dbg2kEK5U@Vpx`g9#k7zmsj8-|zg%$2jTgmMg4D)O7~X2kn=6t;cET3KNyC&9
zHxC&uKz}6+kF1br8#JA`VspjMgdb^S_Cncca6Vr9%(nfG*V;=?2DC1pK)sO{Bp+e3
z4DdA3Rs|9&yjT)c3d*qT(f4^5@zjz1NorqtNNI5QXTC?92vnW;t_I(KT9Hr^aS*4g
zWYfIolLpydG`%bRPKw6BWb{9Dp5NdH<e{E)nR0a{V^dXFHPPDlnJ@|+D+~3&#oeH0
zP@9-=aN8rJ`HoT6wkp3UD$JeeCdH>D`%?_#<EGl>jllB(W);eZ`gMWS(&nfH8bd;N
ze*Bnei01@1Ze%zrj%#Opqe^e<{ur~$he+0=-umkWgJ^!N_%@c!KXFkY9A}8DFDDU!
zhgUZw#wK>_Tv3G9DhTn_YM*m1#?BDipdAAdOz=@^a0!k~Zy89U-_NPlHL^CNvNbG!
z3n2(?Oj_-UpryWt$?g<}ol;4=J$Xpbe8B39eJ#eOynW#M6h&?Q<C%|bQX@I&feb^=
zDK+uIU{Cg6n~f9rz77&rzJF~H{DsLFCr!KQHp!2cHWjqED9Lc3nGakz|29OV!L248
zeb-CqTlnlJ*!5pEZ_)tip!z7<-n2=`%Ao(<vh$ovlm-JJq#q6+!hvmITJqWPMB5jA
zLWwu_S$4@sQ40-MW>$^8Oj;a~<f%xx;}Hg>8{YE0>O;{xLS`DJ)w3cpx%I1QqR?~w
z#Q527{#KZC5$E?ijDica;`KAR6*mRzcxn#JcmqFlz<E)XdP%`~Gr;`S)guIQXjct?
zXN~YZo6pt}zDOG5)ZMNg*}_RP>_TK_W~yDHn*0BG<-GsRieWTON%pI$shqoNkYpM-
z2p8RnJV+jXPJA>#e4cMrj>eO@0;gs4QZy-VrV2O}PB{kxT9kWZv>WU_j5niwuVK`;
zo-o`VRzOtDWD}d;X7cH0PK!@=&&QJ%5yNx}=qUG;!(~cdJdnwy`vZhynLWzGr6l@e
zPSAUr!S$6`k5M{ZR1bny>Yp0n+Q@%kN5meka3(&{aY6j)qy$moriArINJO~f6}Oq!
zd1;)5$7Nl@F0rhx<OT#<{aGr5IQdJunV?7tdX7C@oLHJxY5XD3Q_kgu6*v|?MlgQ+
zuk);&d`$_PmPE+xsCT*g3he$jsAa;Q<~J@@FAeaGfRwcH7*`&oCHWiTHv;pG)l7<x
zZ64b_f5!#Kf{BU@eDsqUjkMKQcqm<iB5sYEP_=D0J$hr&UtiSIsF3xwtj8jKw#DBE
zlQ2uS1u_64f)r^kt>&SA3=HmaNebJro%)3DXhjjkK$s*QE!ZyTp-6*aIJIqQjPR}=
z!Dp;q@^Q7*y!*Jg>7zz>M~~67$~*Fb0LtivJ_qDpD!jYlzJJk>@U}oTm9+(Goq@y<
zMp|J9Wt9j6?ptC@osCv?V3fL<t$(cQ=le6&7oIsW4+8KumA1<(4Mp;2VHBs=4ZYmq
zfq2h9zT6T&8X4)!+{qW#P1@O#qCU0RA$*VKIT?r37j2xL#obOV^h8kJh9i;!?OcbV
z4s5avtkS?On`E4qC)3Vcv0Kqnlo&+p2}Vm)ztBf^$p@1DONL<ese94swjNrhoiUqh
zl)U*&juX2_{Adz8R`*D>8LN7_SYb{@)TSKF(`D6Aj$H@TLi;)-cbR8!VV6Q*l0|l*
zU5)cuYB;EfE6^_+I+T$>JcK+=$?&IErDyizmiUc1j<E2hQEcX5i|6OY^Y?bx<{MrX
ziv=HUy>$`LNEfa@GrBs6ktBM90QnlrA+WCI%YmTCM~WI3*>8?D+_wMk0x--)*y-!G
z>k7M0{Fgy)Z`DfFNzL$rsd4*ZBQyd!`a)blN;vaIk{7~9u|u9ldS-3^cwXNNRs!O+
zANaI(9;vegm;SLbDD?7ALe#^VfiTlIv|r}GU-o~xi9Z5};9N{&IQ=lN5QP8H+FaSR
zoM_AYYwIx4N8~EH!%`qor6gB=jX>yw)vwPJ!mvOAXcLtbBhf#Tv(@SI%GYMyRM|b}
zc+9L_gLYG*E$w2PTlVW;1~`F#*Z`*?&yP;tcL>4B&l{d2jNkuM4`~It_G!gRqkSt8
z)=4B*WMH+k<%4U-f91E^UZ11N^<`>BRKCL#ImP)yJa9?^ev9*sx=kInz7!hw>z#6G
z`GrY6QLfQ;6uQ#j&d4`+w{{k#wqaQGI+LYzue=J*aEqSl>@M^}s}S7wGwdY7$lS&>
z#zg5OSTJ%*1;Z*rdz6MIe3^RUd!a^>e0#A$o@9ughiqmV-XzKMpjK-296K6_{g0<|
z(%W&Hn(ETAudrg(3*|AIg2x=YdS$YQ=sJdAQBd5la<?ACYU$k~i#Vgw3ZXli<8ru$
zZBev*yW$#Lb~l<vZ*#;YqNe>OKh&O-FuRwu13fg)bX+-2nMD-^fmB80BxDuU1?_G{
zf9<$0tl?D|))i$N*wsC?R#v9`ZuwZ-{&-Ai^<ZjcWflDqcl3!TqwPHNm)|Aw3tqDI
z9MKqCP<<<VSXh12{7FEuazK~9l}8ar(el+R%3n2|v2bci3Uwj)ZQb?b&0p>+bgZ8%
z4tqS#7_qrgV#HPR@xUX>iyRmO*?YNUZcyReTKW!TrMZ&Qg7HL5@8N8obDNuKobN~U
zGBGxuC0_Ut^7P!o+`t(?O|f)TlflDIzme;hsP8XGp-#nwn#2^)50f~*8;5!5?Sli-
zR3`-yAOW6^rH`WTM}d`F5M^Q+e(w08LLV7OsPl67JsDOr$6f@n|7%wV1hs&bp-D%3
zwE~o7W*oHe{Uwbh+#Pu-iFxb<>b$_ytt`*Mo)-D4UiQ`dhtnj5T7>=dTF%ecAsd!h
zwEuN=aIY23)CBa`W-7*Ms{3ZyFaK1%*-v`ZP`WzL`B1x#5=_*pE{bdJv{ed~W4KAy
z>Qu-z+|*VdbUymF6~O;Cg#|wvS7MiWwY8*KX>0)30@zH>IMpKO{#5`!-i=#khFCpw
zwtP1?HziMN=Xksy9U%U-(iCXWlu2Wb7)4n~F*U&q{4fegf_NOqtLjXB&hS>%Jl%GG
zRN)CT2S_9TKE(X*9EmTy8^0vme)v`(<rjw`-+7JkhCD;{gZ)lP4p9<t)>>hjp7w5t
z-Y3)E2Scnv<pm}hs~tj|F3&CztA6fPyC=EX)k9Xmw$2XReYM4hgC6_D&m{=Py23E5
z8(vWH&#N$LD>4BY$YS^3LJiERI1Bls2i&2OzZxA&TJXM0HPHIp?Y2>9;1uZ<EPnX!
z_gn_)<;}UT#~nZNMuYbj&G|hVKTcU4di#9*^;)eUsko9fggcuHM$JihL2f37XkT%d
zEyOosz8mYeV?AQ@J<iJbzM#z9aEPyF7n7?U`a4Tv@=JmQm0Jf*h!d`47{1#^pf8mS
z)wnrKr059eqXutH7~bc9ZQhT$KWJGs<Z>;B-wzx!ua%tl+}B<aBoPsXZXG=n|J`XZ
zUIb%wi<=n-BVHAzEWf<sMj_LJ?c&b(tu-Q$WIIf3CER{op*zso_vnu#dx+^&w#eTZ
zkrqg^vvhEdE`%g?hb$}+@-0~xaT84*8$j|g@|XcO61%M?zm(6H5vKnKA(j$#H9dOw
zc}mi}ib*H2;K5;fx8#o%!Dwq3TxC2`5tLH~M5Yq}KNqWx-?b9mrAy*?_lJ^uGd-V_
zOp6GStFd$ENhtEai#hzTq-)vbNP5bg+9$Z9;q|up6ZRr4=C*389B`?mG^NPFe{epP
zTc$pI_+NVF=CkicRiZoKyD??f%FZ*-c*nu`F^EvT@86A6<{L9ba!Qo1c%~fLZ&~D+
znV-}xC@k*-J-0c_;3a=9QxN<WB$>vAJjO>*Y>fwZ9pFGI_iDAtnYfv@m*7&<&~gr8
z<xRNCSUt?qS2=EjJaBrCf*Ld~LF%_L)XJ<Z^g4F=i%338=hyp2&j-ua5XNdpc0q(s
z8{R_4o%4ThKKqp0RU;k_2Z-A{M@fdZfPk&=l_?SNu*K2CB6L{-qDV*FT%1Pk2~rI4
zOxH%29j?|ZdQs!6q|tTJ%Cp-fy+1#U%qguD9C6IP%PwLVW`}GsUV8Q>();x*+9WZx
zu)Tyu9G2^q$y|0Zn(a0OH9;@O`RkhV<Q^8|mYcvo^TmDL2;ZWPM(0Y1J2F`(LTDrj
zW<wUey^;%`25PyV1ncy(t)_8(h)6o!$3X~QmHqfi@5Zb1xei%}R9(dPuc=Vp4tynq
z0S&kaKA!S<<)H^8O1<&<=tsd^QVV?K#oL;F_R+-;W{U=SwQnr-#ReTep&CV=ZAL{1
zO|Db7WXOI#Ovdte+HEQ14IE{-ReymMP6&qL|1QI@86V{_M@0@5@a0yYUYeVl8tJ3~
z$UMMJ3>eA#h`KNNT&yu0p5N0TV;H0{HUX^7x+U1`U+v7AmQ(Qur=aZJTdj_<aH*(*
zAGCiB5waKO$>3j!#)bNll@NmephKpnRQ!-xV<py7RqVn?F7KYPZGUhHJ61G8L4cG8
z>k%arBdXzc(Y~%0&zMZi`Ap8*GtS@{lbYZ)WW}XoKR;ynNc!ntCo@&cY;qH&SHJGS
zk*tM!Zs1Z;bW2;%;p}ZzRASYeS6F&@@%Yr+BTeksy)X56<WQmWv(ZMLN)UQ@kp^k>
zM&^Bde0+1$3{%$AX%j%;%oiqz8zO11T~4eppGE=h-V$NjYs{_tCVaTP-bhYtLHaVu
zG%}vhp0VPNYQ3wnw6>*%D<_-Po6N!*Do$@By7-G<AK1lbVPCzZAjHGFs?ktC9ps4>
zp{i0gJcZ2+xD<N`v4<Dp6Abg!l415C!O+NA4!C$WL*Z8fF>T#X3A=S;^6E{Rtbm_$
z4hb|LlQRW?!AA&4vm_LvI%r`#eq;(6^y82Z7ZHbT#m+EXY?Y*KK5GP<7F;ZX6#GHA
zob-E*CEv4(?jVVw{0cu#dO?Mm1-thgt~4?@T!bxy>Y|>Y7USfX@40UNW7!}|Dz-cb
z<;Bd~8ANHvjKWh<s>2&--G1<^h{OU7jt7TMUxm9z>fQbM(>yUH+aDH#1_c(irG2ml
z#@ci~Ao#Dy6fsC{Fcfz(<9g%sPu?*ZqWmI_KI-U#PZJFhy;mBG{G-2AY)BPd{8L`h
zjm;>sSZy?6u#~Ae4>28<aIe|tj$`w12!vXo%d#ah_>0CGhU2W<i4lp?kEy7WaA<0F
zlM@ZHqS+w+RKK2@K_y$n0Ui@h9MFRw?>^fOhLd0!z|Y*vqyRSwS6@0n4%07*U)^5k
z>#_tqV5|TA(&T{Irsy8M6csu396qyTOg0N*Y9ytfCQ)$si^JA^f4o-INu1u3Jb>)0
zOwh}?T7=+Nzm|vvfg%mEf-nPSz!_7QZ<Z2BzF?<}Fk{=)SCmLub@-g;h+b(garS$E
z{P-pf>$(B2#(pyEfDg2Ec8M-gVzEz_c`-C@qXHj0hLm$-%nv1sZfrly%nab3a4CP`
z;bK!%P9qJjwk{-89zb##l&O`&S;(Mkc(juMb;8v~nR2qS$scG2x=WvzFH0z=hzmZa
z9NqSYQ|7wZ&Pjpfhx$j$xWeB-SCt~kJy@$|4iC@?q0VyQeN+X}=p~BgNRq20bnjCU
zTw>lth##jQAYv321f_ix@KgHFZC%U`N>mkHqV$IFiqSH<yhpxfeoyx1mCzvZZZSho
z<fds0DS%@Tw^2s)P$5K2FC)QR;WMFKjw-dHoPYa%&j35!qLc*8Pv>8R5dJa+m06k9
z4Tr3MA+%sH2u4#Z9kvrNi%wND98@AHQht9J^m{qPYw)m~0l95wo-kHFqS!nwRw5HN
zQT!0e%z=u6P^vT|2qWkwkz%}LrzEEnCm;^L6i%!|K2!)l`m?I^MRl0qKg7g39n2+~
zT;Yik?R(#5v<sJBj+I-r)UYr?alT<}f>iX_1ING&3uw^HC)E(4TJ%E#?g~jbws_u|
z0OQ#lUttekJ{tVI5FY*V7pnY)B3v5xC9OKzQ57}j^}N8dxS`U;_^$c5e?7`Z=g#hf
z+j^(7(BnS+uL?QF9P9y+c(H)nMP94tHCOoYJdK)b7RGR!rXa*KEP&{Fk>{~WQ_T~_
zi2=xp!F#`C6J->vtPC;r;bs5#w@gR*dB9`o{H?llJ6?Xw7N<2r8iax}XEIUnMnx=?
zCVW`d`YeigTc{G=`U^nk49BpCC5#K66d)6%m~M;`IZVtI=Av~2j|EYD636iCzELl{
zO7=WChFUyFn5Ozj^eM+EQ}Z9B{M07sX!{MCTGG)w^!@AO%x~-GaBNy-j{gNs&5Qte
zyrn;BABf~o%idx7CZ>XumH|6bl?V#4NJJEc??ol=!WUY}Z$|C`Ol+}ey;o8h9MdsW
zaB^H#jka2N>*zwRDH?!`DaCj+a`lZz(Y<i$|CjqXe#pK6*CPBp{4yRnMS<tWPqo|z
ziuN729^5f-WtzJC8sA$*Pt;5|_dKrLGyEuM!k-_Ah`Q1nqR%3a;Vi8@VP=b+fM~Fh
z22gKfGs#UDt)zHbC_S%|LIpJq2H;|_1K%?ngqM^-^w;JO|GhY~T>{-)72J$hIl)EV
zW+{1QZHj(cn(f-EulydN@<1biSX+<Hievr*-AtcvVT<lGyODk{FN6{aj}_bjatLkR
zzcR-~U;RD{ziND-SpXd2o#*abBUg6)q=2#Xyi&Z@4KaenqzL>K?z<Vi#{0;4wb6*E
zJS!}G$<g&2)}uD^G6^})M3WRXLHu$szh-UtZ+2YB7$a6%*W+s~)lXDZLsUHcVnVZ&
zY*FeZAhl|Sim-I=VVt|1*Nlk{bJ=8ftjGAXp!&$hl=kz#fpPC9bGgOPzVo3BkQ8r4
z+#5fQw+e10T@okPDp8TVG;yVj!ZEDv{Fl>jppgG2A+_>-cdG_g*Eb?oKQ@oj2Kcuf
zDSyxMIrmhSGtHXA$UZr)ki1Wv#8p3FG)c_d)~pGfu8Z1tESf5%Z=POEQY$o0(Dhz~
zB+%w!rqd0EaxXdjnZ=c6507!L9*Bv#!g<%!zr!->LsPn!H=8HUB3k!$%m$7hWn?#x
z-}eQ^NQ9^7xBXx+IHNw6VxL_hC3<uu`O!C}P+RobAPwyAiTua|$bCZ9(0k2$QzcO}
zwm{oYZFaw?m+VLSuW+)%%)7px^I&!TcZ8lDQBj{am`_LO!j?F{imqf#d3%WoS$W%E
z@j{7&daorUuf<6NJY<WcMZENZzukc*(&5M$Oe?IoOPrkemH{F#TXa+0)9C~#en{~4
zwV*xersud;MRVIR9}(FrP@TkDJn`&`4-L+b8cA<D8u;j-olvg@bMxpub{Q%GBK;fA
zspO!6aR|(g*7ub~qR5~s#kK(#ghdHTi*56AQAQs}>z&`d3-2XOttvcTrE!yPAL`E^
z-m}2F1xgmm`wxtA;eqCM&8BF*8A_T2bH=c|5P)<|Y*c)uqNGH_waHF$slJyZ@Z;E?
z8RFBPfso`Mv9u9clRO_l^95%H`<U2kyNX4)>4RT<3+IngD_QEk|10|ydOa;Kg*=G;
z2f1C$l+;iD2G%#N737H&6fq8iC$oK1ev~MJu%URuwnEdknLiJCm4bColY3zb<_C*S
zM3t45`;$Va|DC0v<{BP1qlovj3SYt(%!t7x8rvAFt~9<a`W>-+?CkQ5$oh45@Z)Ko
z|3CkO{UVhf)K&GH6h&JB02I~S!y-(KuII>Wh6uIZ6{9OmnJwK*+M_UH7l}<~4f~l&
zN4P)rgcq@6n|(CDFbk113bRr7H6{K<dV5@~w)9y`V%($Xrnty2_^HViQ=hrwhJF`}
z+Ft-CVF0>Q!4Zc=$foEgEi4e5m8}>2<BDzIE2}4S<8Y--3Yfp5f#D3I+bFc=?-sV~
z<p3`rAC@NCusuK+aXog)PN<?<%aTmEsnL_UkT#r7^ZT|c<`)IZ)l9F<_20nzFADe5
zGUvHr59U_V_RpE1F>xk{_k%%Hfumo5zVyQ`RY@(wt9P(i%!mWnVTnQ$qNb+G6mdPM
z{Sktu;{V$jff~;erbC!Z%DMtvT^ZAB_kB=7e5mrwlBZ1`Xu13I@xq6ztP!4>C@MmC
zsHzf;##98)?rPEZNmWAo_D8K|Ez)-2QJ4!-J8FA}m(q2q-!}Ls5>fM}wZ&~8sR`5=
zSdtZgE=|>c?>W<b@47!ew9t?)6|t&~Lk&F`NvynhG^i(hz-HS_{mrl<xZ|wahSTz6
zanC{WEMvtcwXOkEcXM(aY$mQ`p1PAsvwg#C8i#^X$NfSHF~tkf?UaN&_;~J3Nv$)e
zy%DC(Lz4zyY(~gTKc|`KyV-f;kIL_Emuiu>&o5~6H^iV?(P}3q9IL`(KEB~O84(jB
z$u6YZgJNLrpERr+M?078g2|))=u|q9o{q`D8D*Q1orL{h`MM6GTfSDzCK8c+iln9i
ziK+fcvG=n!gl90WbnuQeQy+P;h5Uj95OZsC0||mo<5R0zmV=7pu^l1>Qf6TY<`u>n
z6YU4|mR>`|bXgj7uVs(-gjtBf!$mH3tJ6u!26Z};Y9C_P^YOg7d9E;x`=@c^KG}u$
zx0#0lb!HmZ*9a^O``0}L<SObIsTI2gp3TRW@YH#hEGg#HKUp|p<2BDtZxqSsLjZwC
ztg1JpigVYA%&zDNljj8fItHWOFvkG;Ym4RZyC1%F3a^4^{}n=0fYlA_2GW+X0n=(t
zrmL9{9jr$|_SujIfQpZet<1Sp?QXfkcV8j+(J?<z=t<DLc;gClYc|Y~H@16=5te|_
z$fF;W{J@{!9|g<q#SPO!Tk5L%F8Z9u_h)7jNHt)Z-L|eOD6yIvIYY#2U^q0K(Ixe}
z*q%OcELnFSj~gAf#Sskc7is?x|ImI*HNm(Qt)zE~@gdd}vWr&E?btJTGjknwZiCT*
zdu50iN9k`-(TR6HRcORU`D||_XBRj3uFgtMhtZj!y!f!C5s``$67Vo`O-xaFvcU)|
zLIGO$lGs9l*{HpZr$Ha0?#%VFtA8nbUrlSP)_x~%FEfy|wMFiAoAmABO6&3}V<?|T
zvKW}@n63TjGSjBiBRwVSi}p(6MiE==zF)Vw>R+Pf`v<!|6Lk466yvmcL5Nm^$%i7-
zaG<b`j25j=g4xfnk47y9D|D)V<{idfoq@uw<54T9ZQB5XFyY^x86S^byYEF;b1v}N
z56I_=9o4!pafNB1O|CR8s%d?}wx_p}S9^Eyo9y~0H?@GmEOlSiL}7;DSCZ&N+ce5>
zZepvSmkqg5l)<`<cEO+~iZ`8a<>`c<XdJkoe)4O$6^eSI5;aK#UBd{CcyLaXHdVeH
z&Bo{0HxFTByK-3wiPS!ij+u>ZI12T|WKK^kIz?_(fMUV4fDqwNjJVJeaiaKzP{%85
zI)hI89b{ekJzRuBz|t2ZtrtSjcs0R_5_GId0N%)=U~XheRP({La_ur|W?PMld0U=d
z5y~<@(%evyl~NdZ|BqJAKZBcJoYX9Du`fBK+2mkdoM`CChqzpx=4PcTvjq@=JLFnK
zf8Q)=qP^Iav_YK(0V>4cW|vd^8S_oY$u`nOmVl=-Uy3}>;UieF9)9U<>6p=?A!1Vd
zGs&nPrv5GGx<@{Dd86|i^6P?bh2!?iiVD~#-NT!t9OW}Fg-|-K4=fPHk|x_DlD;Pa
zoxuWKKviVR@^v&g1@g%;-qm(%+-}oBOqz(y&|;sL-p8d`(19ryCR)6U!dfXThoy6Y
zqJlmSJQM)0?$BKK8G?TsNk=n=SiESZ`8@Q~icAS54NRa`fu!x$)hvv<r}OIdXp9c+
zM9=fbYZk#HG!}6ft!rL7I{kLf5oIHD(M<k+3)c?TKX`s6DP0=CkeDT7&9vOkCz?C;
z_kb1(gye&s{3523f&A^uqc%^6i6oih!_xsGSpjT*GjUm;e*%HFy9tjYD$cgm-G|7K
z^$6RC8Y1`7p<}RFBFvWoHxS0<`uA&A>UEM>vm0S38<yj!CJ#Vw+no1vjH3Zwft@#S
zP9o9oo}x;zNxKp!)-0?|g4BqR2u=EljAmrHU$KTfv(up#=FO)OskBBycCg%1yxx&^
zl2p|1$frT%5X$<RAVe&#OYmI$rMm>4=yd_(<5is3re+$nVRMYV?BDX`jK^*u?deRq
zU76SP*6ab&Z7fwKewFt-&ZIP4I;^?#UsvZMQa#&3#RWbTJh+DFz}dx2B>K;PI2GZ#
zeNix(p{eR<;q!wPX}l;ZFy2@2(rSZ2pYK*Jku{ENx-D;qihQL~RlP7`{czSQ&(&nQ
ztr^XML??ZUhFLZ@Q7jwUu}dzJAZ}w_vM3m(3MnaNn!_y?6ARhzBMj3<|J19mg}Lkk
z<s_i>zB<P$SqDi200-p-_C%u0qeal7didwF)pBP4-IV3E;=tp|isE>aw7JdH<)*3-
z7$W-hxOp%AR<yg-!v-B(*Pl}%2RG|*G~FTD!0)AWqivvfpAe=?5pnL<gjO10+|jBF
zp)~4fnLUWDKwiPr61rjUf0Z`=Zcftw!J&HUkbfq?*KE;9gIVyq?^@5-R5!^LFZgBs
z&_w*m#;JkAPwVdYzX)NeLNh5Uxdf1IEYUvU!NHI1RNTYRohdCG_n1D-YKXLS(nuQI
zyUPAE(IZr|7kyg}@#};1mW%yC`ZFuda~-lIHW03uG)+eSivcZ-)K9DT{Dk>!^2Cye
zo&aySy+`}&JMJSOo+kE=BAIb6h>emJK?CVG@Dli`)9Z1qBM8}TLNP{6b6#xFK+j%F
zzSQ2TkNpCICsX0DcpQ_v7i0eS>twQ)j@0Pz<4Q|{ZKDb)2{$U3E1EZel4OID?9USC
zAT!$t`YL{rd3o7>0djGQso|*wh{KTszVDyoD8couoc)YwhQ}QLJUXSY7HA=D*I~~I
z)HV#}p9fPk_8B~3DX+SpdMQv>7{78(8$o?Ep-=yy&8pxy?)w+>;OUHp=YBixJ&nz$
z+xh{bnZLxAZ)AOsBNxL|`Fqe@gY}@-wX(16L?>R~jOgmM79sG(*>C}ez6H_T7*w|$
z73u95c5e?4%b~F!1$z1^n>z+?%{@s~bQQQDT^eqEzNq4Ps$Pv$`_?a#7-cigY-2L|
zBgX`Tsei!RW#%U~K=*JR5?!<g6H_?2=O~mayU*SJUx4wySN{epM4NSof+7Y89fAdj
zOH-@1r&1AqFYow@JKJpg8l2yl{0G$>q4}iB+k6qTl}U{DZ4`oyV7$uQ9~3J0F4wqo
zT^aHu9PS?)FOVN0;|dJ;XEVcj{r4?+vg-T1<;Q<IKO;Wi&3q1b-5l5Wd@IoOCZp3r
zKty2qmUKxf=C8*NA*VQzKR5j<)@2^a9<D=nU6)w)ixG=LfrLmFD<<q`HL@x;>WS#G
zLHApdE!A*d6E5?$r_4YXj2EDrdKLa9Pd0>*h#8{O(oGPyemEx~@f!zBxHSL0`fZu>
zGMmrW^iZfnVBQP$i=Oez`s6>bObXPm*mk{tP|XNTUw=sK7`#q0MJLU*$F}a{twlyF
z-!Q^(^yQ34w0?1vANZ~Z|M!XDrs(Q}GNMoe7Q1E?36B+e(?LPmb01oSL}PSpU<vvf
z9Qclz)7PUhQ<-4!8#xTFLFV?@5rfU%jTp$|z^nJF7q3&Ow75eI36|7bDhNGW^C7Iu
zWC-R7Xo*2?Og8fvbO7x8??7_Ni*@HL<>qEo37avidn4p&;KeJFF4+%el(GhSvV`O3
zi&f@WuD5ocX*Gr0sC)&s$+Htsasv7f>FMmJ$aCk?&6>Bvr+Rcn&NS%y=ZJ2q1!aL7
zqYZf{M5^q24*`eB-qLzZL=F813Ndy@610+Qe*#Dl(*ioA$Kl9OjFzd4zMs|x$ciIp
z_=>9({*srJm1_~)PbLwZEM7Teuv^e*MDvmRLiEdqyUmMFVW%E;g$Dd@wL(XdqC{Li
z8)Ay0;o`R#X^npJgkz^%%{PXovgObySs?Yfau=sf*Z(v9u2D&^xseifd_D^|^?2&-
zg-mjUN9a=!{g5x)Eb#oceLmkVu0OuVC%-G@wKLs$&ZmSvNV|=J7{ffJc&yX<{*il<
z0;Z!gal%b+)94&ZUMfCK3#uO)0zFG|W4FvDCt?-e54GIR>~Hp>M(jADzcx95in1S-
z4?-Qsd}UZI=CKz$`|2ePoH=YVM*6d|fQI@s7-Oe?Zm8oFPADDrR0dS%T{hZ}sa?qO
zm6NM11LCppjb-h&el75NORsIS!091+4^|kiGYp-9m`fpdwMR$BM>emP_ie9s$I_cq
zF}76SX+9&#br;V|HEQbJmfk<|nq4PMZ^R!@SGm2XoxPJa#z)>>yDypSAaB-$>!Y4_
zAnWhW^NvoMFO%IxUU9OMklgSb(ke)Ez;HAz!11TOKRkm*rzpW7RwN8~v7{Y!YHsz1
zhTqIfF`G=vrI<X%8O~bmWMuT3&dlMEoit_p!5v@aw%YH9E=G%2`y+0#V!&w`26LwV
z9Y7PdoJ;hWQv+e~8@{1M_7`e?mOLx(14wXe8IAw>edksvnKH+saAIbP@3-B#!@eEg
zfX>@T_dU)q2#S6hl;dp{gdilei4?N}u#eH?Svw2eH~>n`xzd?~Z$w}3PX)YluO{Nt
zcy9YIzZvs=X(7Tq@8n%7S=MmrKJyu~5e)`+A=h;QAvcHqA3Gj!_@b=KVFU{&{0)N4
z$}U7nhUlN?cDRDW_VNU{<+i}@WR9!Q`b|$bzawUm7Tl34OK!|he-zRJHnaZ$#1E4>
zWXXpp*(wh!o)%OA4vucL&{X=$H8!C1zX_Y=*-!wq41?dF7I!a}>=`ovgWCRIP+L@R
z70i%gWAv6q<+z_=9vir;Lmw%tzeQdhMDraptFxcvUbq+|CQ(lym8}Pla7P{&013e<
z)zfV7)Fz~0pMu}o7tZ8u{?z3bk6G=4-^V)`%gQ{YkEPcYpB2@9T5~yQ_QuZ73%nf4
z+}#6R6Rs~M^_Q|g8m*}*rbNMIL32|}m3<-jA@87Uq$@s*AP-xi72&L~*+1SlmK{#B
ziJn%_G9!e8q0rahfK5ey<&VQ1a!XYqH<u$)JB0#QSro{;a9F|Rbo{aD&jL?PnjWaF
zyA*c0$9ubjSwe+B3m6e**OI@X`gxtDp2bOxwoj0QJl~Ju%LFYEX|<+kiNG5>h>R;x
zGfc2I(}M5PzZevhL0)92{j$L-om&n^@zXSA|3(;#g7;0CjsVb@iDrkQD5D$7O3O*U
z?Ht3|*xa$bJpqkQw1{ivd{&uPg<Dgoml3aq+1T6fBYQ<Y)1{lg1dV{)W661Nd5Ocr
zMt<VL0>?1r8!E1SE{kM{W;~qMfS_JAo4x&Cc6#Sq09W|6wKdZapJZA9O8+lTbF#uw
znV^_r$G8dVDw*B(MOXrg^+`jXSH#D>{#B%d%`80C^}`|y+5#<-De|2k<DNihsle-n
zqiD=Znq4-upYf@&ljDUZDbzm?;U-tt?M8JzU*{3g|8TU*bY&$VC6>RLbv57W6(0th
zzu#IvRtVy$F4W_Sb{0+KqE?@LFTzg*3XRUUP$<g)i)!D-SYaf$aO%v)G^(%^yz@AA
zsc5e$wC^8TfB(Q<^wU8*K01sfPz;`?EQUxhHKJU9X{<aH?l4lE;Dg`t8VHdKVf#z<
z%>LFpVQ+&0kzxjGNEgTgL#)$f<dYBgGKr^V21A+cX0k+^yjElvrY`V)qg7}ge3-{)
zv+8>1nNZU#1`j-2G+Dj;0ZHRMg&#(sJ|Ju5vxgc;1MUm~ZF?mAQcdfnUOG5UWZ_jm
zr-#*TZzk8Z4f8<8A3kYLonnX~_1iCDQuTMkZ8%0*BeVm;%-=EYDEhtvl{dt8>IQG#
z2ufKkkZPj=)69SAxNY%<?YlzJ1&mF4dQV{FiPw8CXJZ(ExdCEXHga{u<r)Km{F40Y
zrzwAlNJ9P5Pa|_rgYsj7@PBJ%O)cnRiR~X3z`ZC5O3eq>@}e-E7&D;j@wf^Rnuzf*
zKxBd>ur5jHWN?N$l6U39fR}raz47#4#PaZq{VMfDffv%2&#RR>+)SG+O8CtsUp2S)
zW_*)*wFRvg;K%}S%u`rejPhw<F9QC9s|Kv}z)k!5YS|UR_zwgh2L2oaGSxpSjh~zz
zAs2nmY1~}jRiDAI<cKC7iK`^7c9fR;CF}CdjVtD@cs7|<HH4~mGu*H*uEUr~c@Tba
zYjB`n&;8YW@R9VHcs@%G@Kj7VbMbOIK!Vakr2kQbUn!(Pl$7jpj#V1@wkj1I<+S2`
zT{Q_NnDsary>M1N&+TDPJBng9K;!cp1iJYyJwUap_zmI}qzND<#qX(hpny_Froh)v
zG+BFbcEcq)KY=ol!a7Bi|Fn+BC9YOTAZ$RShC>-SSI<i~n)z^cVzAi3Hyxp{hL;0L
zlu@^J-L>d}#@iYwPTC}J15-c@Z|5>o8Ib#4tbW;I3b47jSh=Vgfqt)2gJ-p0)a$)6
z#e4OQ;25YB`Q<szTk+0G!b_`D-unAh2jh^CG+mzMHn<0fr3n4o41bvWH^Dr|5HQM`
zWf6bG9H|<ehZ+42Wxf^6Z}zVD)nlvU7};;uw2DP=@Do#En`$EPaU3%LRwyBw{U{Vu
zkyEUr^bruhgS1pW7tKGwrTqKY^$|a?M$J=inKMgud|1(HK`&@^sI<rNAsD+S%rQD4
zOweTrC7+tyzf9<)DFHj*U{Z+AXZ^PsRT!dv10>-FypRc?tzY-5B@6fpeHa$3aM<d-
zpBA1Ks>)4PmuAoC%^75_f@H^y?p)TrZZBq%C4XTPJhe!#r_7~OJB$1}f8*|hdM%DW
zM$fs^VuETx_?FIhmbvikYE}ffKB#ACa{}wY=7pa}Us)!R5RIIl2VzepdUxlg<C$wc
zhu#60JDsc7F{6;(*><I3h?CkTJc5q5IKXv4s0Jyh{ZArgg#^f#4}5DR8uT0;@psKv
z$^QAfO&0TV6*V`5)f4lcm>u5VU3Wni6fHoPp0pgnY+7Q6;5W(6VF@y@yumBq9G-xX
zuL?J!V|-j~W_9a{g2jdxd1y_5;ZcMsFsRxyIYXI<+}JS~+xz<sv7;m(z~m+e$X-af
zLAr8V%HZz44^;{Vzrh!mHruBslw=-5>11!$_l|{4b8E+c9oqrV_cL-puD9i8q#Bjf
zu!eD@+Hu3*KXm9B!gQ4X>P@hlB%^6vmO*S^kAvzJAMli&UJTYXu406QUzAPlP?MtQ
z!U_I>NnH8X8M-fr>Fb?`eW}7XGc4Ud{+g(j^Wh@}-siGuY=Z*QnZ{yn)(eKekv}kd
zY=^p<$<-R7QSQhh)TlmCPCF*c!`ZiAId5~6S`4W|#2BO*M@lB>J=^6y!fF~-erh^S
z9ZTM3wQC%V(XmY`?zO&O9yf1EfMvo{NJ?<S6Ewz^9MkMx@W~lb<c~0TyZ*}$JX8Bi
z!K)y&FgvQ**#hD<qO@TH@J6DpY+B#eL~8r{ob@k<1kk(3itL?u&|(cIj3gzoe4j&~
zr)qz2=?=V|ULgw!i}?@i2e*Kij%!7*{5Xe?SvJ$*?<)1|0tfxTWrf9<>R5Q84ZOIH
z?(NE-?~)(PZcp#Q)x~|TVn~fP_7QsO)d3&Pyo)MkN)8=L?^m|%B2)e&qT*iZXNN-)
zn(~<eI}8Rt2dfj4iv0q#S>pP=7Ij4PxoUK?1s-yE{O0xw8@%SMe<cwS&%GD5;AyAN
z1^KM}3PFoX9@8bA<)>?msApa5io#}p>8Sf#a&rTo;Qj`;;2m3E>qdxWtJfl(t1N5m
z+-BN>{z#aI+$-}~W%z-OUr#(U635oX+S}g26AFuUZVcsN1+Jkv6${2$bD!$x27aJm
z<fvtkAWOgH^<yfr+gCQ{xSoVyBJE^2FOl)9myxl=1FVzzfSt&3Zh`w}yfJXk>sV}X
z5&pwSm7MWbfs}hso}qTos7h{HZSK2K@I3b>_Dj>}sXfS4j^yn`L)qjYHK9mo%EtU+
z74J3kWPOd!FoYq*=--Wd)dRQ9mkrqcBUBRZP1*JzP||Qqh7B_m)pgWI$QferuX)P@
zYb{p1D$7jZJ$y5VN9ww=$QHdTZpm;#%vklF$M;NTMuv@wxMkrACA-|4+&zXsdJYo>
zx#`dBhx3+Jc1{Lks-Fs<r1e1*5^lc_teB>^kC~0;QNRvQS0j-kG1DJw|62NTDLoO%
zYIA_;e*a#)O7kT8@dfViL57UAV+TN{niiY-Ur`DJhe-bP?Vo+pQNbH4`CpufOhHRl
z`pm&3)7LKD4aylm_Hv96Hhv*in5U!R8Sj!)(n)DWY(rb3QreNJuf-jWIS+$C4IgA`
zh`4#&d$R)N_SA9mz6L2HVL9>wDXJ!*`-{6{wqN~cfzZ53-KKusJ7}~6dKJj0yPVvl
z>9KY>vX|?(jk46HevNuGog-RBW*Jl&YZ>*w^*W#D+Ya>zbc7hfO+Ik$a~t0@J#NCF
zCBp@XPlHrev9oyM&SIN=^~PD$vT|NoLW72g?Vbk^?~UwI29oKZdLfd6kQ#|pl5pFk
z+VwSza?!oZRCIMxt~E$4A_><dh9G?h${K=~>#5gY`QXeke0y7<9TIU>hl8bD>@2Lk
z{1av0?dpy>C5#!DbRcGkosmr7`Cn&8x`iFVq+gOP>LBgmXZ}Fi^hd6|&du;^Z->|Y
zqI3iCRbj5ZP<O~6Xj>u^l0z-Fpo)=8WhHUA9i9<&+BAGKGnPe=0@<3G9^<N1OwB?D
z!$|8z0TXq$=vlmsfShapWp*!+aj`Hge8kD{?WIZ}RQWGQ$YAN$EsX#T{s{XkgD8jq
z5wNMP*fBYIx><_K?GlcJek*&^m+TEF5@7$uc}Dud@7|CYRBbWGVPg5Wzs@QVb4}A8
z)*jyivmS7MOXM8nf-o!>p|Bzk7+Z#9K_^$3U~W%^FU@ozSy9RBRK`E=@L%LI5^dc+
z7&HJ`@C~w%!gNHcz|fEnHo^jNo(#Q7({8|gE_uwl+T4QvE?Q8rR}=#tNd8DqtMoW(
zUWPj)$_gDI)ouI%*Hcn51nmq>q_RGd-Heze*iN2pH3Wfx<w9r|gF1-<{7}XHA}!@*
z8bOIL>~0^AI@O<8AsSYrZ$~pv8fQv_rVOX)xewv1ZgQTf_1|_kaD7`6-9NsN%SOBg
zu`vqxVwvT9#BMR|_Df<49i@NNh#mi|B=0cdU0rvelQmMhR(~C#DBVkLrcAXn+(qnt
znTW*as3L@EC#Pk|<L>(+gr~~RaC)wgAz9XSRy$bJo7^Bs`+@LE$RtP*ACKKY?&1DL
zpqFKIpCpqKTEcQczzVOl!*INdy!T@~k@C5pvT?^~_x+m5_Cs{k$>taoJoh+SlGwZx
z5^R<HA2K}P#u<3f{f?AfbO<i+{(3_<1{oSp&s`e=>mSHE+y498eZT*n;DCe1{1qAz
z`_N^Q^V=_MTcT_clm8MbH2&T_t-k&|_=lA^;gS%eD5g3YQm#R>Mc=C3>;uD<9IhSP
zfMdjGo_ztD44los@5;*>5$&2@7Dm6XhCSijrNr|^o-n^iRd`;iYcrnhkFs&-{4DU~
z*0uGe|5H$X3Nb(*wCvQLY3=2ipUMBR)K(yogf?0TtM{^Qkkx85t9?oL!GRadMz6Vr
z9EBKgvZL7}fB9{^5_HhQgIvagpCeeg(b$7ObzR4X*oWQEwl$$u3V&f%Vye7WjEyE%
z;^EK-{EYWa48T$HzzfvnTA%OD&iVcwdeKBJKHt9Nx-$iPPq2IX#R)@t^}@++3apph
z(iA=(|Gtyj2r{v2bz8T{kW<n{>r`>+yOml?HUxrhF%vX_n@6ZEtHL%1UlEa8$JUqd
z8v=6%Mj+EVKntM;?ZM$bxSD~DTzPPJT0ERI2Uf&ax_7UKNa(L)+BDF*X95;sWbKz<
zPCUs-!FIh8<AAwbd<iNr$VSZ#@l#T_908Ee^TR}R%D2_jf}7j-JZ=+^+&@fVXZch!
z^7nNw#5epaf)`-&fVGc3{424}B-|0>NgAOA-3GyTH<<R4Sfoi7C4d>Z>&drufE;WW
z>3{w3fss$?oo4(3?gC;5c-G*LKP{m_qpC+-GXp#yW0=p0QrK}~yAfZ%y&Z=l^%%77
z(C5#A$B<T`@p}wJgQ;X(P$q&z=$iRKKiDl4>JMknFc{HDt$a|Wnmk~&dPx<4-IpL`
zZ4-kkaR1g5+eQX-zWr5rIw=+0oU<d~RRnKv+z7<oK@Rz625uGN`~41%fh^VAVLm_I
z5)&Kci1~Z@YsI==h$V(t`44Fn)Jceny_;pZA-9JUGb_k#m|?x1H0Ls?owef|m!Hj3
z26l)*BsEaz-XCQ*WWJP-K@ntdMk)0EFJz{=kz9+R%wfc3RR|-S4%)AK9%J)ZA-jA5
z<+>0j&2`F<kG|UYb5{@<_<T^3`l3s|BMVOWs}@Wfq9{%q3TUNT*IqnqGz{n;iBuIY
ze9*#cxqDm;;$YzoIrPRz6*;PTO|6E+5gE5O6?BJazVcLvTq^?2$Sya#TFuva+7Udk
zlWi0RdV&4ge^3qP;Fr^7nO6O=yu!)0BD(4fi7I`nAeJt~BmH6BcH{%-*`fRRq#!&T
z-pmbLkF{86RpHvkE%$vbwk9;J+n1BtZ+{{F*B|@YlpiAcDfY?+cLC2Dm}UZr5OalE
zt!5!ly|oBpaeK>KVv>G%MQ8&Ks}f@T{dO#F<cu9+)$64{Eyw7Li|Ce2#TU>dIP)Ng
z+KuV-eiEE-w_XQ*@o}{je0>9+b3ZEVlWYlgtxE!-VGpo=$%OXQ<op1F5&Q}2!fN_W
z<H$GiZ^ghn3xKLcAYSfammK!@=tzOZ0bVhnF7uglZ@V!5^SQ3nbL;`~<yl{t`}fJV
zbAfWzMM()QWJRv~XqeuSV(}VS%(N+lZVfp-wgy(LFNdH`zq=c8<>X!VgqN(6wQoJr
z<Lib0K|pRXSA}IN7BbjbLpBf`zrmAam>k>KB<HN5gY4MwC0ru_fqia1$B*2;5C^td
zoMkdVu?}z}Y4Hx>LYw#O!E#7zd8fqvwvNy+o>DZiZ!h6(5?qIvp#A2*31}=lGvk}y
z4@}hPTLaAxqizz9Q^oGKvn#FLbDQ_Ah@SfHPpN6z0&S&20IRM8YZ~-|ObT*A$st??
zg5y*)*#_!wZuEcN%%n(f;uE*FW69rr90|R+hgu<if4b2A&k&d-@2h5O{m;M#=sg|(
z$t&f>p5Y>pHLj5^`g?$GBaC(Svx|8Wohj(}*eJ?Eh#`vAMxCIx``=3chuWSm_yZW2
z)ffiAHFMc@J>5`SxzxaKnz;!NS|Z`xG}x<yHpSsz8gisbGS_A)ksh=+7f^5)tz|~z
z)6G#tsxVrvb-TfzA62z{UH8_@SLE@WOCcAO`p+lpf#<pbH)l^@tIfIe-rqk^+r0Ev
zn+SQj>%-vqyo1uoN@#Rp+8&1;kN1O3g`r23B|*%^UoPY0g0=O5exCTd<lHa;B3KgQ
ze?x~(XIh|0JnCSi>6KprzB#ZKf_*<z&f8^ep)LRU6#q=2K)m&_^Bg+h^1WUyT)ieR
zi77j3$x9W%&u@ogZGjm*6BN@W?x4OXYf@p}3u_|KrugMLmDKYB85maes?pI?Qbfb!
z@xA&Cle|Z$m)V7&{`n`5WEoK)%sg^BN3!YL7nj&V&Uh&F0*-%XR%`JJKaliLqi{<F
z>75I76_@cwyc01X266w_0JrI}R}*}YNBWjs>Uo!tsvYqP{qKKKtFRi{ewZC`=>@f;
zMT~%2mM`c(q}5yTK!C)~5ocPmK=()+m%;SiVRK?BP9SEW>*_K@49*OJS56m4!&#J$
zHD8N3?CbhGz7kf<PnY`<ruq%V8kChl|3D!>(PLw#;n3B2)+0Oa%duH_Rh7!s8j%Op
z&fj0bzY`0*IdrQS2N5~`A5CY$71h_bVQCPMl9CuYr4f)C0VyeIknWa{Mi@G!Q>775
zX{14h?i7)hZjgqVVP?)V|97qT1HfYT?9Do7|L*&`UK3O?F`7)%7IW=@g$IrySMdE7
z>k5wa^sfjlBDi8(teH855D&L85zG`_ilH!vVrdWm{x%RFZa-VBddJ-8FtRWu+<}B`
zr?%=n(Cte#3-@}VE~2w2juL~++DWNBh?pI`D2f#%kdGoypEc38C?>}&*wt>Xg+yC%
zs9C;j{Q1w|o3VTek2eI>%vEml-{bwIo_$ngQ$$A%A@}?K5WD9(kaT#x9>SwF&ucyZ
z?CILA92%i*VUe`Dx}oMi8?Gg@q{WK%gx<IKAGW^DPW!@HDz{de{9z-)VD8Wnt8FM7
zOiUUTg%SVEhoxF^FY=e6nZkB-1uR4TeD)?jidDf_M=vovV4cyTMhE4JE=rb75%Iw3
z>G3$N&jr7FjsLP-He1_}8a@79Z4OroO`-{M$@e-~EV0ACNloa!zm++^sW}$zXIDqd
zgefv6#t<Vd(q06`Qo<nHHw%1V<VM$680t~qh8wwc71z;xgU9~FM}5*&KWkclO_^_&
z<?Te;CkBQ#!(FWD=x0No$SM^(iO(8|>+wU++L7g1IWy^NnrLqAe3R$z7webTWCAjJ
zFXZp9M?c9PX1B;DceZp3N?8M_AI?RouY(lNJ~dYz6*7nod9IaInz+B{JOZ_V$#EdO
zFk`Psq|1~|Wy;8%Le!-o#*xt#LrnX}8qZz8W1@Lvyg#R`|IJC$mG;}+K=OKzm)-hP
zTx_Z%I_Vgjh?UWOf53RPJg$%`bC~ax{qHz2r^)I_tw!rJ%Mhm<FT_*08YRz_e?3-W
zjXgU$6j0R-R2Y{DzMfQ;Dwn=9I}r3Bz2vZ&&rnm5d6oJjbhu1MNo#)$|H!J#Cj|q)
zAmm=#3%g_5u&#%aX)jiwb<rj&)Up@RH&h=!;XW4$QH0NhEi-s_>t0k@p&s&IuwilW
z{;1F@_!B{Zcd_HXwa+paMJE6F*Ss)b6IXX4{E0~+f+g$^WI~DI11I;li{ZFu*0Y?E
zo<1mU2HzBA*=PE|Hr$Di42SH3O~NzasP;&Z_$CPXV_UM%3lBJhoZH+;FM<aiCDx<M
z^xOpnYKkO0I!Ldd^#VlP`DyRgQFqOyO?lJ5o+}kQEt7@>{OM%cC7U`_*?LflVF3~I
z6V(7QC)w4ZsPP+hXDebIsfz)|8)I+s$L_t3aF3_%swLBJDVKj?yYD0~Sk?8}hwUn$
z?l%YaSQe>nj@laRR^H3+Uw!hNwHj<AbT9pvGi#Un?<1bnWM+G0aCTb^v;=dl++lk5
z(|Fct9VMCo{Yr?M5V2dXF>n4(<Imo}^GAY0{`SDGTx@n2kEItue-ECl1zvPGEBHqv
z0_1i&R9ofhg|X-PL_gs*I88HuQYb^V$6)3SAh*fOQFjj9Fpo71%=DzSo-fUh1k17Q
zc{f)Uq?@0R^%rs7wqW>q5lE~8+1Q&)-Q=-iBt|<SbZsWxxUTrQ1o?+G;$qk89V00M
z+_!x}#SiH@erV9oH-*Qp7j-#(TCrdF?yV(&M!gOwwNL@Oo-BG}&coo{qh(U(fS0E}
zcmL{JT`Td84F|geWZ&ffVd~w=ye1~F$dh!QiD@UMd0K4|8TO0sx~#1f6^|LIN7TqS
z$?OOacB@+9o<72mA_!x(*MG=huuYqFkb;2TVypeIsL`u(jT+R}(J)4_BOA9Ft?;7y
z$M(J5H75&h99&1JyB@>v%J<?C93s0At1(Z!1Tc?`IX}WAB1Ci9vACSw`ZA9*H=Lj;
z-0Ej73<$y=$bc?PFz?cJg<j0jVB6QWDe7lq!_Qm<(W?iu`_Rv;qC$ZgTq+ID!H+kO
zIJT)vMudh$Xei{mfvPOh%k@%XjuS}j*HFwGA%BYMy)tTr`1I=fP+!Jt*U8V1beN_z
zlS^Ci{-(GtF5?hdIUAom8r2>ySp|G}V;Slz+u0WUiWL%_?!dYABZO!@l<vP6wD8u>
z1>_~V!kYAI{bd8H?g^pSz-x8gwbu?xoGoL2dBw+3cVBt<`1p^^c6N^XbKc}zrA<rs
z>Rk+}V|UH{C6+Jc`v)JFGh(Uv_ku(vXHH2rY+r{BS2tUWF^o2aK_tn<DBURUrF2x9
zQTbA$P)iB!g84hY3s|nDYi^P83qI_LH+#_3nzXZSnIB`@!%uhiFomDGW|7D_0U3Wy
zaJQXmek8uZS1;jW(`hp6_l&m1DO#zjYS_ulC8XcTBFDauvB>aqAIwz-(15%9mJ5DI
z)!u{JAXkxf&|6Z{pbDz!W6!p3y2=MM-};jyD4%f26`x_5B6%Oaeqz*P`>K29*+vmF
z-3||Y?i7;382VV-T~C_fb-yZ+<K*HL3)3=aO^#YE?-g1HjT+U<&sfABf;Ee0i1o>w
zb-cq5W5Z&JnktYn?v9F(-{O9>s;L8G9MW^%=?*zt`4F+F=?))ynm_2dQd?8;nFlBc
z_{)jYD$KgIv2<BfY@4yc9yUg3H{9>`5FA1DVU~K&nhy;TM1Gd^Oc8w3)z%_|->61@
zp;IJnSOpsaOWPTmT*PzRlfJBfBEe%5M_Hw7cWF&~i9weniMXxc<4n%z`8NhkN}WYs
zU2Wfx4MEGStXUWe`2R(`#yPT2ON3;m)DG;6zDlr#WsZSBgdZl|704_KG&sdrUb&yW
z7rz!iAU1kWCzdG{h1u@nm1eEXboMFJeqU@frL;xQ?Tt67#QUnqtXaTJpw9D#z^x@V
z5$pnDFWd)@FXlSrTAkZEW^JW|-g%)glL%AbzzXEnyz)<+=mCMV^!0-P{|$)At&)dw
zkZBWv<5#Wc9yB147_wOsaBcjfFD_W}4@5=I-$uDya)hy`#x=HO@_y7VyvTUa<nar#
zk??^zRA0pS_VW5QWivlXH3lh)Hv|g8&ColKHa+<sg|M3;F|fXB+Gigii+XfkCV2^h
z|H7%t2sw%Q7;J~fnu6E$!=iobVL{uWto{NxocF_nr)p;Xz>TE2vCn-Gn(_I`dA|dM
z4aZ;jo_R*H^GpaK?aV>{^noY_YWG&1Y&|9k(}|}TYqM2W0PCTdQ*wz|9zyp;sKYh}
z#_|ueBvS>$Fqge%&7PhWv|rDLneQ}6Z`IJzWQz<*l7BGz=>rU-_-*gwB}y)4Impg}
z$yWA<vhTae7nA>8vBly%CS?f>-FrxCwB)^*2Z#%K@5WQey3F^}hIL7P2Dq+3uRTlU
zfo*zm9(T(?^6|Iyv@eQ&qSLjG)>qrD4DOEOdLO1Ku6Y;$J;N7dMx|JerKN`-57R?$
z*M!`PP*M^5jJ6Fxe>Pmhn%lVhg^Dce=fGQ7yG212$sGoGUmc2-BrYmQ<#jB=#VILZ
zscGi?H$CO|DTrI7VT}3oP%vdUcoFK6L}s1|Ov#+~H9mEveE0I4-Sa10WgbDwaI|8r
zoagZV&H3dxl}p=Nd&LD#<K=6@6Ws}}^L5-X7Mov1T)_4P4hQKhvGiNy1Fa!oI@St%
z7SA?W#R_tIGiIw(;PwA304uU5(f;&w7Qpc&hPpEF#}Xkv3g&hQ6;!Luk}BZv49Ert
z)uWPeO_x?jSby4Rde_-Mf*2ZVJ@#ThsdBZ=PdC3;y|*Tl^#UsD=B=nHQxle$e*TL+
z)_4m=J!<+H=UPuz)x&;Y1zo1y?K=-aU0rfhJYbWEPdxKte!Fv~BdZ&R5uxq>OT^Kj
zo5(&rVOOlnP9&1Cv-QMxr%PhWNK(8KyMf4ta!^cXlp#M=Ll|Y^O4on=G$SKz4Ac&V
zFLWXV;>!Lds7FUSFH~qr<0I<Fh_oom*@x5e+@gzKkSoK_elW;)BMrA^B;6Y<?-t8a
zTmD42?_eV;!;;GGFz+38Rf<3bCTU8C><x#W()g)mo}Z~VcGhwU%Wv^Mg5s1~M?YM|
z+_phCZ^7%jU%DB#D$6X;gXnvwyERWRiF3oa^UPBLndh<bXN8crR(?Ag?VV+yLG^rl
z#4!3So?oSB%2E$SB|${;WWJ05At2XB9os{QEdCUo+s7=oQI8T;(Z7b~ks=%)x3WDU
z8i*3yi>iu?lDWW%p=(u*A@D3oIluX_!8SCW*X8}~qgoSB2|ICN`e&7O^Gk96f-m}o
zgsUEyCYz8f5UF{H_jAM8$cPzrIo|F}aR1JM_@&bu+Enn46(tLguIu}aMCQ!Ggd)G{
zv=X$9K)6%P$4c2P4qL_znfLlan!cwk<AM@AN$)*0GWDiP9&P-<afdOP`xItDU`b4~
zwq9z?5#oJhp6P|J(1N3nklJ}hl;$d!XhG-rFH+t-Ilb8f?zjX}pv~f+l#@Pn0xJ${
zbvNTP@96Ks!rD6+$_x+qI!$Te!+)+kskKUErVh9!R;ztExCMLTdt<36f>U~2C?%xf
zWcA0i#a-MwP=Y)3?;BPQDmDT6nPdy3Np4A}ej(OwJ(!_7Lr3rP;;AZU3=2VjRN@%j
zEmP~dt|l8U4pS_D*gXT?#}o?D-DX}x$u(d72FFB$D^ofr@*F`^^N_)Keu=P)LG#)|
z>@4S=)BxG#DnrZJM!lMN)o3;0v+<z$1<QAn_)=AO<SW}kg1oiE8{4r^0CiTblFmYr
z!!6xM|Di-F?ro3JVX~Wp5_t*XEzDGAcGLMfxVr6I+eIvc<W@EhBMBMb6Zh3N5yT4Q
z{uKYI*?L>>4d1=>i{Np{fSt_4xOtoTyUjA}RK;zVB!c*TLixnf%EI6yX}a>Y>%rA_
z!*Ek$tE6@a*NhN0+@LKifzVYHu(9u=@lXC^L+k_Z!y|V6J~<WrLYJSP4_CvU9LmZ%
zs8Wghwon~z{3-8y2p?Y06`@-6G>GX;n^;jNW-}6KGYIz1X6(-xv2yv801-6W44hci
z>!z#HilM82zTL5Lj7P_YPnjmXe>IH>C+Q@>z^LoFC+_rCQ2PrurW3Y5<Vgcq{=OK`
z!ZW2fQj1i92YEDjzB>?8&7#c9R9SM|Ut3$T7f-gF!Uw*Di1X~b>c>GF8zU`Lx;_$v
zUT|oGejo@kD$y|EX|R4)wjoQyg%Dw4H1XLcSq}^4w`Y`M>{YKNdF3t3bpp%Kxk*CN
z9HYRc=m8T?>FOB2m*}TbU2A3oa?=ibm&u_0g3h<dwhIT1bCIcR{D~9?6J_zu@{8Si
zR5MluHb=1Kt5=B(7tr9FBWcaVEW23xmUkPNu~TZ1-$@p4U3QVodHzij4Xf3ph;+RA
z1Ykm5l-2+8G+}QIJj}cW1Fkc5+ypy)&pSM6F05I$*ZZRpJ$s9#%bQB&;D5fd<3a<h
z%nd!m^HoL*$syk6OQIzHl<Cpd;V-dvt>RL4vKA_{`f+=Ld&=Dp26DMYah<UOZ&+!_
z&Jyc3q>#7+ZG<H7IIV9TCH=8A(A|L6$90yS_!_YkM@L}n&D2Y$pVIUMOT`%M$Af~m
zZ5!ZNkO#AvIp82AvNRJjdyy7z#hf@P)j*IV#I}*zB1ON`Fhiy-X?}jDw4=I{J}r-`
zMofrJnMht0e9T@oVy*)w6cC};vjm1th2Dryck9D{K>J%P6y09umb$ucVd=mw-G?ii
zZ|Cf*Tj6W-<Hie6soTLuP>zjX8|6mi3=COWz*^121KwY~`s3|`6EQG}*;N?C%r<|)
zKyoFyfq1yPt6-=7xisSlrI|qD;%{&mi4fdheKM^?Numq*+v&QV&@O6<@$cmmDs|ND
zPuFceU^8C?$nnC>x*FQTcH+|+3WE^zb>x^gChgh<NAs;B;AY`jnP;~P&W7_#Q*5t%
z&j<NcwNKj7A1jL-cgtAJ&vlG;58`rPq5!P8kOJ>zdbb9j$`AZ<uCB#<@w>az3R=1H
z%#=141R)82y<K(P84cVy!15<ol54FQKCzcQkU1D>%Zts1AOzW0%?+vxbmlHNTpfLL
zkfcbbB3qj$PUP)QhUB6p(h=`MUXCBsM|QL!_OsQg;Jw|-=%9^)jl;zMwr*eaE7+}0
zsdApiwq1#U01glfXt)<ZpAg7<tkyHTj`HBAz*8lv(4XAu{*Iu(+w;CmWRs>4D-HG=
zNlUIazR-GLmXUlRMrDEl6Nr{G-u_s!N{)MJf}AB1JbvjuZ+?&Agm@s3SI?ihbDMe&
zv;u#M)P4g+Wx%#Gn+;479w<EuE<9AHfmf?`enuOY3T=)TAt^rZu477cuWh*@CaJ{V
zg%6IgjJEEF$V<SsaL+o@b7OK^TTx)Vcsrg0B^mtE$rl4ZYTnNe__yqB!qjrzS^kW1
zgj2W{5lpo1Z^GIw-<KedX)@)y^XV3_nqad!vxYTCWjzRUCh&G3FStl$P&zcPUL-C$
z|4GFp?K?7L<{5!5UVj1R^n$^)^Ja<;?BAblm{piCCpy}iCVSLu50yeMP>pY<!K3F0
zAy#Xn4~T%N=lj(T;4vzPbUKF0&;4PiZQk2s-8hWXU=$NaL*MOVf@~X3wha?#OmTdl
zNZ|+=szpyHE$butweL<t`HN0fh>7GN&cM4bG&gkq_8)`rdLlws4hD!m#j7V2y@VhR
zx#x39yD@M>+b4nAGvGadvZ;UKj_fbcLqi*GqU|`mUB@HD%@YcFK`{D=MVTG(x1Vag
z7}EBJ@2P*UId54HDDyW>l;>VwoD{kNQO}IZYF_kvJ(RuE<l;KT*6{a{9AjA5T%9`F
z;>pm}p&gkw43EJ3{g*&AFVMC_q9{HGF4ss0;&*#5{uSAg$(-xwAZOKUE!C#<|L@>F
z{R@$V|M<5#ZC-|$hI>NI>=!Hoz71OUJt@xGnepcI3(WbW{I6~Mk&rHYPO_rTaztSV
z1DxgA`lI1qw~EoCoyd)dsM@AJk&4Sj@elM6wUnO=M-XKwZaHoSxX{yv9^ig4O9r*T
zy^dZBxjUQ|nwp#I-Sx(SjNTo}T8rIhTtYdK^;c=|BpkAdueIM3Cq7;UJ<ACyYsF48
z>xJl6l@?=ETpz<Zag@e$h3fW4v!&c|P{vDno)SP)R4=vCTIX4M$}1^sljfvuQ-g7;
z@{!6*0IG)JQ~<u0aatKXt?gU6v)vYPBc;mgzrAHhjqN;Y&>l%>b^&6!>%`_F6yP~H
zeabG?!`kxz{Lv6~wHXKU-}zSf^i4fTANgyXO8CvkE~H(R+naqsi#Zv8=iJ#whjjeI
z-0l7XGbM>Fjw_RFH3dCm-{Hx^)@HPrlo4R-XXBeHcN>mA!9uw(m^M1QtU0}tuZoyd
z`$J_G1A4D49q=!IsUbA(I;ZB1^0_koE~e<E0j)8EhK2S$04aFZA)pR6<GvWV`o59m
z`#@zcKKIjyjLW_H!6F+9@LvfFATz)WaaswOE<Jxk-QhGXC$`A)OMZHRn8v`^$RM2T
zUZ)&VY?uhwABEzy==mM4a+WE@rML(*plSpAhYra2bJ*8&|J1C9zi&<Pj?9PDA}c-0
z<!%oO6++(<tQctI3f96;#D2#u3XW>VzLPF6$56v=5q%o?E4*=6`_om=kE?(D5!Fg%
zmJ<zpP2a+fPnY&}NJ8jPES&QcV*c**KbCX%V+pLX-mai4x%^@o1fxkqk*TRJbwQGP
ze);0Br{5VZRx|*gcUNp;j$L!<D{JvUP3wB?&iC=t7+`-4Vjsr~^)YpwIx_IQ@IgaU
zigveYL+>4J<~<)fl75Z*y<c+#^nKBYzR@whmV5n>ZPlj}JJhIFbI`dU`$NqE@Kzvf
zZ$AaCbBP!hm)8Yc9NF1rh;Od&?NjC<p!erCA&ZUkulN>ES74VKBAprJbwZL|a}AHy
z_s)c(sCrp_VqDfb?<QUVQD!T%f^}aG2@a;&#K&E8KM$;9#Nkb~i@|?umF}C^+*Jj6
z{~ENqFWuc7dAhG!M=edxfIl%SK=DqELzX)=xBE!1&5lgC&L?~>ew?ox+>ayR1pyTS
zJFR@@+tx*`{HlxJVUD9<0XcyUiAy<a*HVklTNiPQ!34$YV?yo3*~eijk#2fuLB(IU
z(|TM-MJ%zxnXOQn<sy(I+B&Eig(&j=$b1Kbg1{4X#hQzi&u-wgGH03_pxe{{M=a$~
zdumQG{4=xTCl#ApN%oIqaCeg*ia$!=SAMXS+t$btNfP?zA!VU$41*3GvEsjU5$ZQ@
zS#8I+hMS0nhgETlXaW@M6hS1xw&iq%AEq>}&WFX?YhWVd^zTVJor<je7)EG;aG}I)
zLat_3z^o67@wz-gF1m0tifYjkJn}T#09E1oekF1*@!}fZ<|glZXz>oVZlFgwc=Yo-
z2ArcJol6vXaELPju)(8>fnP{qJsQMxMCddC6YGAD-tyqTsZ+qNgYW^7dxDd*;L1j`
zasbdj&&|oPab+a-VqyIQS$vpxNB}oEhg#h-8MQvE)+T?EpvYFwtv?OgioHpFRW_Q-
zk{8%HQp9xPNh4V8hfsPLCLVVFcw_jRX<so82;1o_1p?c)U=-^zJxwicAOCY?rLL|n
zhi`lAYn^3SQ92wCgI}2WC%UaCtvI3^_~i0r0^UxpPVaY6Ln$A@ORZbo?mHh=;K8Wk
zhN^emnxrz+{`!wVu60U@y%$L!-mv6CM~scMf`gF!i))FHx)Cbwa&tUhWQU~@$-vAV
zzzy-RjikM|LT2{&OA<rB_3A{0oUaKYJWbguFysl>+%8#?%k=kplITI&_EK`(7$ylk
zOdGeqYi0Q|mjsG5paGn6z`5lB`#p4Icw|dC=_u#vn}PXQa0ie?ZGC|<{2nJnti8EC
zuU=AuMj61NWdPOK>QN|_`!58vi7`snA)>0XOaU78+f(G~`3T>#{A%GYG|)~Rr3#v?
z{fL@XHIKyXeZdN)K-ceR)8=49Ij&P!&2Ooi7nl}W+pC!yvnSgDH_(W8FHAi@#scoU
zK-bmO=wyGiD2$s*D%#H6*{J0CjgawRDXH%|UafZP_rgZ(n+z#InIkJ>UiG+^N;JP+
zzzE=U2E@(d+!V#QFkFKiQb%>sC?ylCUZvd+6fK=s_oE+-(|j=L^$bG2(eH`ivbDks
zSDR`g@?vel!7_cHwC|RuxS@3O7B@U5!FtQ&@+EC~IkDc+AlkSg?l}t^(hGLHl5^Eo
z9O&q;T1zf}$&!C*(79YDM5UgRR)Pz0k%?iuE!QCC>E1?=<tYH<j)O=JoLVE83W%sI
zYgg@8%=!?O)Q`Tm?|pJ3w#cTbUT^Dui$>O=ZWR)|<B$daPG`W>;@rthyJt{L$m$_k
zMbqp2r9+!<MgpS@q3|-|ap+HJ@Liwcw7qZQfj&xd7K26rz#$7*EXwK4A&wH0doS^A
zMs0Bog!dohDFbu*29L=nF0?aD2L^(I_Xq>`!r_rb)Ku1NPFNI+BYSHf3*gYRpWh3Y
zdMLGN`X9UN1jOVX8~XXh$ZZXMXdjWIfOAiD=ff{FQEkqQ^g;3e01tkE?OB;s`ja3a
z``nW!VIEutD$8-^9~?K<1fYKRAW{2zFgN!?5+~g7vqW}>e8O$&QeJmeZ3kaec1Fl7
zHEm8bjiAYfwn6+MWPb_#=z}JmT(IU76z4G)S>1+>cw4idZ_+8*m`L4Mkv)jZ#U2@W
zPjC;gL$9|zZy+*jb>{u-0dQ$`6nreZdbRmg>VCBp>Z1tyCR*mPrwSL&5?2;qksA0>
zMO-o9cD|DMkBF5>TAI%xNCd>}HGaal^iuBEG{w-gTJ7nO(9;JQ$D6h=-iHqjclmAi
zJv7lG_et|mt6u<#^gk&eU6uI|iV2&~fd@y27VSh$O!OWf&D2JbMTLh6QtVvIhW!ma
z=#8rn5CeA)A+06=jjFF`)4GORoer$G>wOYdNC&I_SQQi*hqKUteUyEG=6#$i|4-)G
zTvk=y6$zw|B5U66UuDG~!rgP%V7joQG^I!CC%kbFZgOxs7L8dvFbS2a9ZS7fGxUip
zoS#AjNs3tiO?0DN=Co*YD>P$=P*qmmCD++VM7DAP3Q_p?sZz*zjuYxa^k`+#yqD(*
z+hMEkH7UL9V$n)s9H^(zT9Zs3`I`4uv}J{1;K+*j7=(UKfqwo?vc>FIzw*InL#DY3
zErH>eHzuf5I5ZCc=361l;VsvOx4}_K#gg1_U77;Zx##AhG&T?XePv<^st>p3yXw1<
zM^%RJ8Wtu`o?Ch2I1xvhij#fDZ(p#@=w*R(o|{EtWxTe78ODgfhfjozfP*ssVqjB)
zx<LEAdF1|iKiM6~AGX;@)N&KJB^3eEc<ovQ`S(2KvLrq&+Dul>g4$`sc_D~Z-JDC%
z>>9dtL&(1e@QmaEsc=X$&NnKkH7b{nsQ9bPueML<>6SlWMhAZCq8G0LJZ3?e8Z;<y
zBO-x2-wS);=%IkCeB+(|?vJ_3@kWc++}9!m-)Q!m3XmFj)aHHQ7=>b)WPlExhXgQ*
zjfZhh_6LT!15>1s=NxEtRHaS^;wyC)DrX;^5T;R$J`)E5FmQa%&GUZyIg=OO?hx52
z2>L#3zUgr8bW`s4lWeYkhRyuXOSD%Ql7B+<0~>BtHL**>g}*coBf&2l`tLz(=LKH9
zd*?_|&fX61TbX%NHEwNCUeuZcGG2LvUBkJ++i?<6y|;9z&rhqIQ%>K|@I{K2rfGMn
zaD-c=&*o7yKm<1Ac%x?$?8lDT#%Xy-yW2{~p6`rRkY7b8Jmhr7payoilzLjHpUC+a
z8KTRHxnTbOOm3aOzW?C+v>VZ;j)|jSM+j!e-s3=PZr3OB(+X1!eCAFUhtLGtbK*=w
zt(lGb_uyaIILi4!nglUQBZ_rhm#%}<QZd<;wqiXlBI*T<pfUuc0c~6j9KLBZAtoJK
zepL-<r5A54BCe{Of#*?mO--7q%jHT*-+`3jBr3hC{>-y{^T;p_8^XBCfg@-Y`1=oK
z6zF#^_3xqk;QXzOt(oz<F7u#yL*uOT>-9V!86z=R`z1}k8lMN0ONC+bvtOD5&wUSO
zN*;07))F`dU4#p}4}Tt*X?_V7OHp_lm!PZA5z0fsH2DW-nv#>rG&IAx&*3d9c{6ns
zbo)S~L~ij#e?pl5cFpV};b>*LtveSpMplM7`b=k#jaAv7!FL~4%HPpiz12=xIJ*m}
z4|wIg)aVeA&2O~v+Wq;6wzS*U<)YSy|Bgs%GvrS;z_koL$#?f8%U>q8?PrkKi8HD-
zXC-iQce~Hb%sf3#p*mXvMyIETiKh9FSmF!*pf{smS>;X@gt|kBA3of**SOGWxXry?
z5*|Q6)6{%biBlWUP>)&mKaqJ>0YE11?a2~<tw!$DFHd#N%Mb`gSJmO5k&AC!ZBGBS
zs?5ywvF$BcdeawF>tMo7!BxjVL%%_ul}Rf$H(4tO8lQ%I4nlkk<^qB#VUx@2)5l?d
zdH-W(3dKisC*KT=q;GtsB|kk*FxyoAEQWFrxseq8z<t+Z<AqA&WdXMc6RQkfiBQ_Y
z>@HK6ifZ^^&8=@yjW=n2Tt)y-Odg<Hw=^S^<UF7@5O1#W9i&5~qBsEzAw4I6<?oSJ
zAq-bgFG?diq(gi&I7_h_mCy`!e`b5?849(=#qNz?ub)z?`miFjX~!{u05zahs{xy;
zhhe8R$5v17KbqWMeRhVNQ#e$TTzhBJlP1J&qc=z2<e-{ee1~l9oA~kHFF6MB+YbqU
zA{V!0rsI?f+{_J;q|(>?G}vn@q)98gw@@MSV_^6^iO}w{)xV<PX<nS$o3@f~-+Jj7
zl9q}d4pLL@+S%J3n^dC*kz}Xrdk|fb4~*_>)()6IbW3R<W?;F<<Q_*U{s!2fKA<K4
zVu|^VS}b3%@#UESMMGGo1Aif<d_-;^5|t;SD=3d4Lx`f5bqC0x;DCWGN@xsQ{^jyV
z6JWeW44Qtsu;`Tp1kPUfc-eDtq|XI^QI_zx-#RK6OF=#P_TFc{!dyT{j}u2|h=+(&
z*q(|%g@`Ya@Ne+B9gMd>Ufj_CLsDY$e<!w{U`ga5_{Keo><M)hBrW>TWEiP40gQzh
z{kOi*Enzzp*~(cXv;hrTNy4vjsRj%IRQOL~*o+B~WJ}IFfUpuz7-1kT`a(H~D9R$n
zEtBWCMH5%W{{)7I!03@}uy2Y0sH?EP(@(bH^CRIEZ)tAb_yn=ARU}ItN_23HKS+Eu
zGF~`}?o@rNSi<0){HHA+DvO@K!{@_0pdT18Ss7SZo^=m0P&S0D^DwbJB@3C<1KXYo
zB`a3No+_G%QD6-sK#wtBHuZliw(doKP2nzYdj?X$hoxH=IGv#QZ_zObiV#4xM%Yg=
zgtj8HcMP+*uDQgQ2{+(DmcWKRw!7en@Kv;vfp5}Z6{aDD&gL*nmwEx#!swa!L8XRO
zP5F$10No`E6Vk1+@9MZ8dG~X?@yPMcC6fV9ef*t&zj&Wd^}>x9k4SKj`kct_?L&pX
za(n4@A4#%dmy?GHA^9OY2dUoxI-s_)SbfDh85Lj!^m>WciJ%R!XGMEaXA8jaHRuOK
z|IiLS9SlXtix^=ZRLK1LC5T)(D(rgV)_sAZYkt)RbX__Qq||}33TQxps(`oIGjAxb
zAhnsWH5lY%c3~>YxL{&J^LL<Yo~Jyb>dktGTfeBIYfxFAgM$MlZ5%&SZH@g9{CmQv
zDya;esb?Dg5^OTgTY9xJtMmaD>nNWJ);#}8{VW=_t@G+Uxc%+Yg#vlnlR`Op%`XGq
zp}Ln8v*Uv*!#hG-n=vYE(5~FdJk+dFnEuUKJbS8|`$|VmE<as&p&WNTrk7P{^6mXd
zs%6VCI*8A7y*rdj$}SK!gq)FlxA*(WXOVLkNy=)^t^Tt{OwMV5BH?to<sw$mW;)+<
z@Ap&FE?iY~$7aAZaN7j-V66)ay&sx0k?0G<B%w&}6W}0&>C;Q7#Z|`;DV;FOY}7Lx
zsT2PHf*}iZ#2=PGxC$~#FbhP{={JZ9+sy!F6$BazM9t;Ph2H-w*paeyvO~vqJpZx(
z`%M`jw*>S=;80z5><pHafeOX$R(iISiE)G-$N3;0@o=zOsiiXQb9K$12PUZXTLh%1
z2kWAs(?4lj`e*w)DAChsrmdF2lT_5yPsD8!H=2||qEv9grgPmE7QrKdCTD;&$Q$v^
z)J>pYXpa++T)Qx3JuJ2DjnDc}+B0p7rhl1}e{z%Wg%spvwO7F#+OS!?8d`DV`_6w{
zN<djtNyGDAP4ilcyI_%%G!!Mw^<y+`1B(7x>oZsJq$`k(LG|Z{SD*Up?4(&<1;DqL
zt+vvLL7HhYnOw8jR7)pyqueItz8ahR2RL5JTnc)RixbU}6foNTDruZy0U>}ctaa){
z6K)l7>UUV+fA~RLZSkW7YUy%?d(G%pV+p{B<c^>_85+M1agA!s=`rre5f!tuQ=tsH
zu)Ev;4C!AmMe%oxtyZCq%h!n*>8*!on0F^^_<>2^#x?=B-@zhp_q$4MO9aq-{Aa$#
z;)gWs41%gWN)m!vJ6$duLt0DGMgB*;=p><^PYc#wE>Bx8k}<U)-20cc-68&%PHmgg
zBRTO=f<!)k{sQiz;O~l`$XJtI*Ss&MCnqnM{dUsTQ>OP>(IDfxN1>Oa+|MRALE`pa
zzc}qw%H)Idv-yp2OYsq5cQ>gW#c!(D8=wZ1eU9*Hm-(@f9ST+0b{C8-UVHB7S(Q@J
z6tby;69Mk@J=%~%4`iaMS2)senpjuusGQPB{AZH3#BM+jV|F@sJI}iHn|*fq!m4eA
zvj=Dv{m~xAUu}RNoG@A@qN-(GJh5Lk_szc{>1W#4;FTm`M_*h0C$dpv?)=|I^&8ex
zpYD+yN496Zgas<M3^_nvl1k;jA7|YO)wq}u=KDd+Ai9g_WQObnc}J#1pk}vN4ZsD)
zLGN|1yW*)YHdA?kbc{v(taZJcC~GijTF%&ed$Kj_&2!;LHgQM57kzE5ZjzgV_%QQ!
zQDNuvw8)$R!0iv@t>ALNb=lU|d&Rw@XW&@*k8qb~HAeQ)#GYo~QR5!jQRt!Bgo8ic
zktTtY%SA_yVMr1Af!`ot$^2f%{(R$0HwrNvaQcaM{hOVtm4c1U8rjtz-ahJF=@e6y
zc%yG_Fu<840ua<Z>9lWN<Ym<k_Ip99_~GZM97uWHz^C=!VS-bBdakyN{ZPH+$@^!W
z4+^?`{4amYDi>vpnN#L|JiIG_LxR3u>k&4vI-TlJN0|PQC|x5sLprT$zk`v=;wc?G
z;gOA<+{%?^SL0wv5Dqe}aJUFjq+`PaM0fRgxSvB9(Y;9RY>37-^xb6v{V4A!vVK<+
zGg9z{Us8YNmzhSt`2?va<);Oau{+HqYD3Db2*OP77lep(=Rf0$4}r2v9F8I5V<7im
z{mTp2@yON$;AG<Iw3g(0e#BHlk+i*yE?0Gjh9$E+B~u=(5?t`{a;dV&Fck#0nTt(k
zILA_L5(o@4yR4jeA;Y_%GV1|6J+{|sD`WI>`xj$OW4oHN1uP%ejxTyzVJu4}^=-o9
ze#=dX*1~F({&eU^rz;_<$z41*1DV=tDLQJ8@e?pIa5xspwILOJ@7ykn@L9pX)EkS&
zO~mm9B;fD!=j=;GC*Cu;?RS5n*>xt}vJdolH5%0t%`}12m4NHyC(lH82dK0)wKWI6
z*i+F=6j|MmPUxJo75kcE+N(mY5Y!z*p4Vtz(i|yQ5_an2DC+oj-Dc@QOlyelVB6is
zeyQPB2$z0vM9wQiFq+8`*mx*~n{>nxYgJz2v(5)k@?nvDl=q#Qh)_1(S$EsuE8A{?
z0iZSuBo=LNSM%d%s2#M<qlpgfdlJhAkwwb!>sA8j(af_6O?8D3tT?Z;^@^;LpJ_w1
zTcWQ3KNy&TMP1Q~Yk<@KyH18WzhskWf66z=@*6tjS1N(z_21yls|7t^IpAP};h9g?
zbs449y}E4Wu&FRaLEv6jzyrVxUg8;^`xuNRa2Mv~XJu_D7;Ak9M0W*YmXMk*plu1U
zUg3fH=heEF(*U6F?J8P`!e<-oD%*bEF7s1ZL}V2~-WW?BmFg;w=Lm@1d~rBATlflb
zF=M-#epRgu*}fKgqBSY~6yE$&O?h&<?oVAy;IAh;-i<$~LaT&loIYT~lW$zrFL>w=
zy+=|Qzn=NZxStR|{0{e?#uwp|6;A@GX+f$I{(hNt*N2rCsbmPuQpgG<TE&h(A0a?z
z>r!&``rLNzL7c`RP8;CO=<UpJ2C)lHU6$?d;XYT29KW5hJ@f_cQ%fMhcwXPB^<JJQ
zU8IT#9Jasi`0BX@2@|-n5`VkTpN3L{4Z>1yA=d*Zwx*Ts7BH-hsm_06(i`D8GhR4_
z4X-IZO-q;)w!@>yG!ZMI`dtwD`{|exX~!nHS94r1X<f0<tpwl--UQQ(-(QPUjWqa-
zKGh5Jx_=CLg}3W|Vf7n*yBt!78M)&4vcdL$OlQAK^HkkDn=K1jCG^!ymAPHqX_FE=
zT=(K8`BWD*xq0WaT$`A1Lt$X%V?nPwVbo~kf1B$<5;-*)v+tZgd$+;|U>s)hriWM3
zn1)4JqR`u(1zXrC;|?R(cHnE4LR8At{lq`!SZ*7pf%91-F&g+Fj9VDj7+uJ7UrGMB
z`C+tydo7y1%yB*9_DruG2QEp{`W210e+ESbG;@_5{i*Lko+Uywi)alShaTEh(?JVv
zr#ah8!m{X_^^7y$>?hYDlzv05_fdbyO2I;>gLRn@yV&a`^Is*1D3KQHd*W*Mujj4r
z&ZErcC#Py4YazZ@$#f#39y1#X>hg7DzaAK}s5AH?2(F(SDt7UWBKTd!yg$H|kE~Mv
z$-QS+N!C<?P6?r;Bk{BpaS!{Rh9xZ`Gb(~%nUtBb7&^B5+k5}ho-|68mPJnSUtD(D
z_qV6-F?T29%yPlL7p?1|W-Fz)cl@(Zeu~*@5q0*(9JGRvC1LT@ONH0;zoP+!=3t1#
z+kp*6Cz%-|`Up3FM?J=WZkqC=$w>#FO!I`~qBL%v8OhwQ0$;}-1+plU#5iz%e&C4>
z-fE6wPzaad9e<<bv-?Ed2>FRK<8A%Mu=OvJr=3a{5ZQO3n0vRdx(VsaXxZjwZJzKb
zsUC3E@S|bRUAs1pRs*s&z-|P>eOZ@5<B~LCxBz(#*C(kS@ujT4$83_l=^_veR+d_2
zQe;$Z(o04@)HS%w8=#PCh5vVj1loz<Zhk|*lfC*@45%!U{|)KEBH&8=dhSwD+Q^2S
z=_kt$Lv9W~W0h)*z`4`uy8fl{OZ126Ps_IYpLfgrHn5=nOb}%2;-U3pfUMf!%70Vx
zan;ldsBn0ai?!F?I0AqZ)8fh_U}bzgH`V6dY%{-Lr1I?2^)*kZ(5mLbY+9g_xWus;
zOq`Wpojcm?8UJY8Z#RhH%M~sl40S(@NkKj%&`@Qyj-p272J;sODiHV)!`dh2E;%&h
zT=2%I!*-ZQOO@DWAMZJr+*<81#6ExWO--OiAO>m$gk8*4XuCPwE7L$VBa3NDEW+xG
zU%uFS)C%A&jvv;v{*APt0DZwmfkLiD5{QV1ET<kl!pGSR0B-8|O4Pc`0`r5eAoVvd
zN$_%kCG?wDX#00g%j+OK@XBtgJhJ}NKkTT(lY6nY>_<5*`bXddSj>&k`NkdLCz2=U
zmn=6p0b|E!nGn9qI}5<Du1)kL@0QlfM%q>mSt8PqzKRck9Q+YKKYP8IK<^2enA~5e
zg2vo|>?$K4ja-^Rod{Ove%>`=*=81i2C^Q8+G;pr%U$Ck`mUhM!Jpv1%gN9DL8tx+
zqUfe>F*=0@JzJOb88PwO$fSZlyGa3vGmGIVFzbPA#?V%HrRhwH?mW)T`mNRO^oss2
za$<7yrtoGTT*>HjuAn|pl>Tw^v#^cg5Qb%E6t1db$`LEe`g+@67=Vf*St=cH@DVSu
zW;&$=<-c!e5l=|##nr$P6WtV_KUZID#FJLcIbk%lRn%(7YBh54)h)a>@TH{3wO{Pr
z$kErMw6+t1hZ|VXvw!L(dr-~r$G!aN<op0dRCFw?%tZ-5_(gceBF!K$y>FC79C33I
zRS3oh`tG%}0PS9#FSco~rNb!vKcR?jt+2v^=}eh;EfkI5R#WJ90y?y7@)zEV;O@gz
z4#;+I%^LlU=Vz2R{>QIzOpgyvJC1Al;h3vP5ppietoud7r>2ck7zOHYbN(ar{k6`(
z3#)RqLejWpl>erx>6~l)TvNB@4c|*-BO1s|1%LYpznB;iRaetl^Bdn-H^0w~OKwi>
zVU=KeWo{X~TRzs<=<`h>u$tR0sG^C!v*1!^=NDy)JO$ks%Q%HKjC>U8iUIv;jE#)E
z2I1q5So_)D@GI{qXs9BK_F#r^@Cd_0{7hIXd4^LEd9zqp+!4rX=qD`l?S)K<boNy@
z4(3NS<MNY{-!$zT8@ZZ4EH)xrb%7*W!AFfLW-u6OKxl);)Z5Op2>PEkPVhu(KS;tW
z?p+QMK4{tpC)P(~eNnQ<yT;{^jBAY+F!uC;id5=_5TfY$J4aGr0C&L0h09hF$`8-v
zm9|)#(_0UwqhPYV)j{d2LA6j-^7FB#gEcz-ek4QU**Vb6Bk0NZVxJ*xUH6UE8MfPD
zxxbE61HEQD(87W9Y7wX*s>&!irS%Ii@P$MC%--}}tfIm`icJ11bNzaF^mP*ny;0`b
zhanC3TEJ<**<&($E$3Xa3Hs$_K4GGQ{5_gl1+u*kLU%sA=BTKwv=annvHxj=qjmCy
zrk;Dkf*Jv~n26M=&5}w|fgbfn^K#y%Nu<5wDbpg&ZZxZjNJO4|=WW6nrje7+*aai_
z1rDr?FO6D;_-YdWeOFAjHOwElQ@+AUCiy+oocN(z<Wjr&%;ZT*X0`+VMV1L~l=Edp
zE#uuG{U-wa<QgwoZExM4wYk*S)<2(a*?-{<UTM;}c5vVd6!X>*W+48q$RJ@5C;VBM
zZpTO1ufQl!9C={vkCVpJ3(97WjR^5SO=n(cfA{9SOORIJsg7X;$T-^$rgxFada3j2
zaVj!RK3W(Se|5XYFPZLTRP&U$+R}oe+AcW(H>e)j`Oi@G0`G(HD?VPA2ZMvV>sthT
zv4qwlq@gc^`Y6zIb5yb+X9Wdx`&WU+wW8NARA?ZNacP<7GBUQheuk8D`!93OcRKo+
zt|5ayySj<MTrb#lq9N8)@AncxY~;u<B8nWk!c@fL$&Yt_5T%RHW=K({KMSuX#O~31
z^6)oaGQ*c+YH;%T$`ZM=PdQ0MZ?Cje=(7gQ=-+!$T)vI`{?TL4<(E}>vj!tM7yCOq
zf%hjZW{RpO4)u@X9$D*rUyej#SO4TH`O+!^<j_=zL~V!}hY3W?ad(FI{K<W5D1{kk
zCEIiGeH?p)m2OE~O#!^28CA@Vq%`G8mM|@(tjDc0yJN<@)BC3M8}Fa%xGhBI2wKv7
zCG~N4ciZ*c%VX)JXx~`$Tlni86l4)9CA!+`y*<=Xu91U}F&f!L)!mJ}dSn_&xlspq
ziC<3<Q!^Un%ALIQ{6Wr@*X$q7P1Fbd@@xitKoQCF)(sMf6(F@zA$ICC|DD{C<M&&>
zK~oy7#UkZ!D_T{V6SqHgo?!RE^o@`Alda8C@h@8BoF9To6>Z#Wkl%QA)gk5&&5><b
z{CrLnbgIVm!{d%H+C0)Dt2<`7?Q(L;g<3O)ECu;U!vWipcY6~=PtDtSW-wBkZ6Xk9
zu<UG}Y+E*Y2`TKy53%={k9*^<xb{j*>xw4#aonXOO>|D3ISr2>AI+PxhuBX`qXSpP
zdpxf;B_r*KVd+n2ywV?j6GjKX-|@c0q%CHKd~Y$dE&}e!KLVy5;wENEKOU3gy5PV)
zlhHz5=aG-M1@k{GKiU7rUAXl@JstW>(D(%xJ{OC+@L1W)i(iD$k;Vp;7zn_Ib=>`v
zIWqubTp|wq*8S7k5Q$1pXm>*XnzGPqkg^>-X`a`}loC6ycw+l-u|bJZq9&CLFKQ}a
zJ(M;)HMVF`0^Sb}@m~pTg*`fz8DIby!y&a)%n_Bm=%vG0tO&PbNH0eo3n+evKoi55
zQQV^FH$b|$v)^lI=v<xq+7vG4N7XGUE5~dOCefC8Haw}}TQMZUEoCXa)@jSqec%&#
zS8(^8Iq1aZ<R16APKZRM70{jVR7+Pf&Z_vBGcpQqXH+Zsi}EJHhQKn!BA$V`tc~vn
z1t5q&Y9BZtr=`JT%uj&~>w=w-LKpE)r;nbwVP8RDCAGMxjeU!a=#^HtvltX7#}IdL
zH(X-Nn3R-)`SYe#g@6f4X^kcIlb`?TPd9VRRzdHN^rn_B&>TV1|5}VEeiHnUL+<NC
zs&yiQ#|cbRMWBi4>ADpfxRaAph)lr0t>eXSQ9{XR@_S}%6=&X@3{SoaumRusTs4v?
zuJLrHq>N1HZDDC?sj$mt#&zk|md6o5_wmVuSzM6=k0vW!?pGF_jF#kE)rqAgQ_E}9
z_e{OUu5UiIejz+nRtQ_Wq#j?gG!ds@oIHTq+&kUqjCtIXg$v#ctiMKkn6;KO4OLcD
zU_Q~_XO_ESTl!1YGgkTj8ib-{bPGPx$!QmcIQhffZ5OBA?RN}$I8`JGHhKNp`d;gE
zHuNxt;v)+S8iTTgA@0s{O)M;^(6^XACFD)(lwN}=G6zyqcLcnE5;xt|c5?0P?!rZX
zh{-W5c#<^8nI#7+ynoA8&Ju~^@_gy}-?e}!$PhlNn)XV#3S;p7DR-%(eH#*ddqlrZ
z3hMfr{H$sL*SOlm)c65I{X{17Uwwi$Z<N&&eBqABuoK=rw;1_Q8yj8c*$m}gjJ}M?
zx85*fw}_MBa9#W>b|x)8`WLVMEbPbZ3!<jLJ{|EeUUm)_-EoM-a^2efwYs&1#hut+
zp*<nO$B#S0lmcx`aehA@V%K$b&Ab0{A;-<hIe2y2y8c_xtVLEWn8TEK%ko}2n$v~!
zq|OxG8g4bpVo!AGeBOEKnbks%{DXe#`E)o!lo5OQP73sw(?k;cAdUh5b1N8UxOkzm
zW_SIMfDsP0-OIe$%T{F7NAW-43*DpM4r|zHz~67dC+VtVx&3b&p0HP1LD3x)o&_DG
zdv5j+o}bTPc**In-dzqGD~rTQcVU$2f1!NLp|H(Y@4JY#Kg-KiLe|klvH=RBCPb1E
zAOhqdH@8jEtBPK<RoHHJ;#UQEJG;$uxqvkb{}bI|m;+ex1yeBM5Ut+2X5@Nml^Asx
zdz%}lKR&xYQK6aJSC`V;XvL35xsZiaCyxAD_8iUWA$Ge!d6~Ll9BGDdm6+A9!uN?^
zoEMK7220cGD1>QQ)D>QGJe-_R+t4oBG-?l9hc$FM9V;5VeDFK;PUvaxi#NgoTH0{O
zFV4Ks*SGsrc^{V&3R$D1E3VISGZ)+6@sU{hI{1Eb#sX=m2wx(L{HTSx+P+seJ$)d_
zzbx7g-}a`YVmxd57T1!Hnp?INoz(0$hO_O7Y&lQV2$(!slVP7NidN#uejn-gr@D%8
z)pxs9IYwC)OX_6R|J{1Ne5a$2G)|##CRW2jYEdR+cEs{ykcHj_8}aCCDZ=AFhWOlC
z=x*mzoowfwa$K7z4etD`og3{C{3h7W0Vyw~M;R`~0|uu8nX7&48YTgIb*$4d;MNS`
zaP}~mgC=3|p6@*h){a;9R4$eVap?y(4lfKUu4D^l$!7V;f0A?+Sl8j+dX0r+#(6*S
z*rJ1O3z)t?=Hv4YzMRny5MjR=1J>>Yc@XY@@C!Ek_*5QlCZDs5JK7J~SrafcQKk78
z7X144!a_IweHS&E<3(BZV{y$4efmRDSz_mRXP0&9l>E2c)4H%}>Er4w@9klyG+=j}
zhCq-`r19Wi=h@VNV=>Xi1yMMaqRnHx7Ve_=rTGN5)*!)f-8>$Z=DctQBp74D(pO2L
z`<OTve|{Q8&t|ixa~!$Nt@#wbm1K%V9s7kfY54g?G%H$$YyG2xT@#H9I7t}uySv>}
zEX86SI5+lU6C|_#dkxGEIcX0;CQU<U5`#X5&GZs@yr_IBZ9q96jU@H3fn=;-%^O=a
z-3@ww81xoy?(q6kZ5qtR)l+WgKjP84_9+M>^WqE^5oJt<K4L$>6uW{Zt?HoNU%uAA
zo)KH?lW46)LO<SXF_2g%;8}<xO8dsXe?M<K9xlH-nrBx~Z{n1lqAh~px7lgHwxUgH
zK!QFSGbk3euh&!WZVZjfExb1Iz8Rsd-d{LOo^S5c67BGy)`M4S=!cmkM|4m!+DseU
z3*=Di&A#P#)6XjjS+q3m?q!bif1tK&L7zuSk}hl|T?gVzJFUUykxyt-#S&j<am*IU
z-Tc<yz5Dyllb%40Vy;J}8GY8d9u89vSS_5dC9P=IaA^j2wZ(9)d8;1IsxoC`f(is<
zd(DfTrO0mRdK^_;#0%`+F)f@$%HuK6SIMLzBK$-Hb>bNoX9J+NWAErUajaFbh9YaU
z5ENFrhrEiTHI29!T+P~jiucnK8{(qQi*M3*kp*^)YKRXP_L@lDK8$>HmnTA7Ns5WL
zKo{bc$qTUVSfy6apg_qj8VdY8xf1H$I1uCPgL>>0?UwdZ#g4^pJl+#%UC#+y6&c=?
z4H`*4Y1p3r05c1B=-SU0d)l~K{1K6xUby)ab!+zHk^IigOOo4kqX#8g(fP~POuKJT
z3sAHlm1S3XK?CgbCHRdVk$ty>$8w-oaMPkxLdab~0KdeZ=kHv9duwJr<nPSXeUctM
zSC#h|?!vSE!VrwR0ttp~L@oUXpQqHg>LKtQco_Zm!FEEwPLEah`RWz5o3IH{8m_W`
zIB6?OGzAx7n6SX*AP!nXRP@5g!kw@nN{LM7srMGCq<xFWoJs(pB(9J3_MX|>rR%!8
zznLvVFR8k)S!CG(8z-_WE8(rara$fNvMt&;&X?zDb$(z1?hha`pql#ygVg0aBoQ~q
z`m-R6=@3YkNW;*$g@|_?mE*Y;Q{VL`OVU7LTS===&3YrWpx{wrcm?D8^Immlx0&sY
zbiX$XF)R<h4Q>3(uY=Yy$-FgBAVJ3e9!Y&I;A~X=2JbnT=sDPFcVg>>hUw7+%Yz*3
zSr}GXL@G;p@-Ao+yvcV-h^}b>|JI+2Pk;JCSA25Isq;frkTB=}XgceMCL6bl)7{;p
zL%K^C-Ab1rAuS>$9itmYH<Aj{DIz?KZY4xo8bO*-0~YVTKfHg#z1{b9o$H*>5yydi
z7ZS^kqzywS`Fg$k4B^jKH8AE4m9Lyf(L58Iluv)Oq>kNlJt!?0B+<2=FN$+l`@Iy)
z4@&!JY3bw7zd1oaSA!LpA_G7ybo;&|Et^3AOGAx@g6%jIdI9Y2iae_luO@B~tRHe3
z&v<dM+RNuEDoCg`|MRdMWbBWAPW07?Dg|2v^-ZgzTdl3nVA7&R)2oLhfmbNc<>sam
zIo~&g#}UFROwv;Mpu;|qe*H09&L>&lV{LVKo#an)AlxXnUtRv)D}*C8boM0suosp+
z|8Ja4apj`gp7y;5_1m1>v!E@IA>`HDlZ1)bu9OfShQF#UJPh*&wC>-Q_8^fTAMb*u
zg}a@}n50&`uTrZpF}7-kujyvU$rKM+9)Anpp`a^vwi0+xab#-czeTuBX8M*Y{~I6#
zOWz~TknN(7Qd)NW1ma0&cPU`{0Yv%^@B<ZvxJxaU`j;{D^=u7Vri&8`FtFqQ();vL
zaXQ!#t8k$F?`221{2T65zHZvbq6u*7Z<GRT<BIxdyx&>-m8#|>XlB%DLF7N!t`u+h
z(^<DP`iYo5j3n<#_}g@4l=fi=|2_1sD~UqZ7rpQp=*S&P`wP0;kUwh`1YXMp_lPvs
z)qfa62D}Sx+5E55G&vX(<6AjMxxrQFF_pQ~K9Q3WfeKk!om_Fnx~-CirNA_X5FvlQ
zvp=4ctjtpQ*t9|hWAS)i`yS+ZJeR}h8Xh%-u9B)lx<Zc^ztBp$L2vGpP}fh0O~>J%
zFO+XGV{-zx{Ac6j0QLM7TK5pow{M3!4riKGw*siwOuY(<2xp7{<K;f#RAj$$?o{3s
zMSU>FeviyR_PJ`SnIRxMc>iYoe`A~L_5IaOEswa9pXAcAC3x7c0yE@c-a{iRp_N+>
z+vF&IfghwYzE#bz;lTFrY<YI(PN3!}4@V#BT{czr>({b=V*C%q{9@I&qV6<bE?c^@
zdnhA0I}I@3!@k;hs{`Q-r`j1-ve7b>et$)6%~BujR#+kz<M-S4=E(6s^XL~;{Kt?S
z3448%c%K(3mt25R2E4ub<#NB_Zz#XD$0?<CO75#CnykU`+$!a33X1PzFy~<u;(q)%
zxm7akuC&;3IDzmi*i4QTF8XL3+@i2y_%J&>$W+?_aPfg+1D}j%f%j^o==fiyM4Sw{
z_99Fr37!+Ip?iut2azsn!Tq)R7p_^39+Gn`aJcv?E>$Fmk}$bfZN@HVyC8icArg+(
zahMU|=w|u4>D?*K{t2OnhoASu<XgCp7agLT#H@!&XgA#6WroRc&A!JJQp|WH^;cLM
z56hTh)#mRjetr(Asya6ix9E4IAn|%FDBoP;o9UbQC3^-4hWEcz0$Ls6Sl2o8)3}8L
zP@UB2q-f*N`IZ#Hu~ORYvc%lsza=H%Ncx%FUluP%J8jAvVde}+`i6UH%5Qb|#0f^|
z@e_Pn*gTSJ%N7`8^`r1eY{y~%?+pdy3X?zWid)DLV8<k~t&M?J^Xw1kY2T#szj#B3
zlM8*!Bo`8kj;ApBwfi6S_<7zhbnPUQ;Ao4%+k}^AIeVt2yZ<p9QG*K$CscL6@p0#9
zcas0KZ{Flml$D+5V;typXZ1K+f7*NB+hu=VH(&1E*!*`xIi9@pqg>QZFwtvDPh11K
z<wuw}yTBpGB!8umrvQ#5H`Q`*T5T&0Hb?N4(n+yr;OzUn9Goc~;tC1Dh4mmEOr?m|
zp;lV%njiO_TY@%L{%a39E6Z}2aA<eW!>*16pJeLwbcm<tgVd_F@$r5`@_Edn&w8LK
ze<bcVxD<`2B_vLTY|UON2Eths6zPHdUGJ>K-P>c@J@V1GL03-bj~&CI0wK&ePcj8M
z!{=94f!*&*jh#KX6$H-FFF@Qc$-2oO*S#VCExyPYDlaNJ`)@B}9bIm}pQ*tGQiqrf
zHl8Vd1&5tpY5M`-<FPJif^??HsH+5np`OJnk{%|(l`p8I0G~L6eV$J&M_T<E!Aqz<
zHeRhj2jRJ4yRfse%RzjAS=Qr^D^VSvRj>O$S6F!!QCShgcpt;{bTT>)&%?$Hd%X4X
z&uEhVV^<a1Sx%(fjwMqN`-g@Pdqv#-wxpl^sMI^Q25^)bDbI|1O!JG2KzB~?lm!nF
z3J?}z@-gu`>4~H&VBZ7TeG6Xp`XrQ_0eI1;BvKSNWMfwsJ@+VzAZ8Cs%hWh1*WQMQ
zu*wDs736r}2@gvdYPsfv%M@(LHCnMmPWN|DnoPK$d<qGncjFnt)mA_o$L;O5alq_9
zbgi4MIwDML)eUw@Y?6~rRc7Pu;=}{DDGVnn{{Wptmc0Ki5Q{zYjMeTpvc0{%ulrA^
zr)zk4-;yOo0#7EVc4aaKB>{!5jTg#9M`Ty2tCN^F1}OCOMOUi;b+tEMyA%KXH*}U!
z2mRd|K3pI`N_#HhC|<OumX2h`wFE26Nt2OKQ;7@#Becd}&xxsP<pQVX?%uIwVVnT*
z8vB9?6JNFeXI6Rntj7%b;k&ZjH}vOJac80${89=#VrCrGiKpI6<9C%q$C<GxhAZ6m
ztu-^(B~F>?xYUOZ@2C@rDL<GRAR$X$Jhc-R&F)QxI<E`6|8sxe7`PH#2=^q^uO3%5
z{4IY}5u0rnhPZ__w0v)OzAKeq$t}#(&4;J3gz!mlNDj;j?ujrcKbOXo8Ep*MsklDc
z1N+JVQokP*hHS#)F<FnU<<K|`L$#A7FQW^YsJ1b9?WdX$@$J$&SkLTQ_<6N@V;WJ5
z4W$1ZJ(};N3MOxZ@_=LEoe1r)nj1zY87>fq$))0--hk8+Xt%(st`(huIH3p}Dk3QO
zD`@slklXOm6dO8*+3t=MMy8z#ZSCuJyRm$j;DE|ZRl%v{`Ua3bYCaq2bKu9+pFsl1
zDe2b_i641D>L`7JM%3C7vD6i0p$uom8Ad;0^iZ%bwuZdxN2AMx{)~ddM*vNr_f`?x
zs`xzpcgLPh&HaCmcSRv^liC-8MEL|Q_V<$e;oT$@6fwGLUOa&dqqezP5%7yruA~2F
z0Z{!QdB2hd&)UpI(uy_5uw#wyg7bljY(&^KI_Yz2YTK@td(L{gj%DxC10Sx&*{1(x
z6g8)D=NLcU&$YZESMew)83Lg_D12MtzkV?KUR@n!XF03j`k7=E<(>U^yJXX`J9qcx
za*pql{cq>VUzsRp;LJD$XmLlIyUb@-SMGpe%V$+hfWi_bXH0QsS^Ev1{t$d+fl{}R
z#K&WmpU`JwsQIk*55natK1k-z1{=qA0YASXI5j$vXwPP;%s~1)cA`a()!-faC#QPe
zb_5^zc?m9{j0&s(t*aop(QSVtEhHDUSE5iBNsCNLqr@cUTDcofRc-ITX^@jgq>73Y
zywABUFyi44?2@x%)OE*kf3Rd3imCCOe7s9!3}(A+(8COHjp38!({Ci0m061)X5Obs
z_5SrefMtzXiheZ{yo4*cH}V^T&-&rxW$@y>HeNpr>JJkebQ(A^RY&A7tH11kF+)L9
zUut=`f`5@RDqnLX7Q(cBiY{NETb=}E>UlhqqT#~D2{3^Y-R`Zd00O+qxL5n{jzDY4
zi04`Az`MCv@}aHe0$_Nyd*Q*n9q(qu>>onH=U;lGk@71E{cnFZb^rPP@8PigaI>Tt
zvD43nii8PPvd$+0LYz4t1HQoBwUrq};Z@qBphkLDV^Q?!{xM+3ht4(UWei9ewyl1}
zVJhEoH!cx}4Pm?=*#k$nB#r<}-leFu>P-4*S>zvnW_~}T@K{*=qhRb2Hu-%07(p(_
zP8b_?#W1l!k@am4lkMW5!2aV)cP(U0xtTR;Ht=Wwo6H~--3?FOERHOSV+XI;w*yCS
z0F<jypj|#8q%NbK0m2Qm$X)bdfo-gD@!iE)=4_=qq!C3KK={rJB&Miz-ZsuQ8$$8K
z4!i+_bQH<w;1^2})0av-4`a!)I`-`xk&nD2?QUOKvz7ZKr!GHd61HCo;#}uDPl`Hi
zFl!K^NYBcjyITv#HQ0z?$4Vk;!V9|Z_@Zcy-v^Q%x0H12!XtqemyD?OXWd;F^L*tK
z=kr}9Bw~V8zk$~1YsiDg)rzDAemcpH3QH4c1l>x=fUtR0GU8n+_A3UL7z^7M#uBgr
zDvzMrPMiZzY1g8)_`=tx^4l2U4sTSC01f>$fOx(^l;q~Wb4}nBQE^Wrx0S{%n3)TZ
zyiWGeF|l+xTNHG^5sOUV(Wx7uVPzXS_zH>|Lyo(`LE|r3Ke4(QBfVAz?k%vS76nD8
zP>-aA80>c!6ZqoOklik`)(V_3r*)u)Nhh2f$uzx1<Mg#@7r@wE2g>~V;|}rz#ue9n
z#F{YfoGJ4rsNUH)k)f@QCei&}-C!<$eeB!O=}hbI>s|hOi|hc8dxbx}wT}CPUv?cz
zj#EaTzjRb3bt@G&itgkW@yJys`_1#+XeL|tO5c@_M}9MG2^F9pwmpc;QxijxmVlWQ
z&qGIe)5ReoeCOiAb9~6cOUd9TK=)h{m`J!t=OGePlxOSjiy?q1iNBcE)Fhq`cdHo>
z11o)2ho;F|3=1&teyRwLIMAiQGNgt@YdHx=R=L#ifjG1zs35HST#-%S1W)I^if2bx
zv%yZJOaTYDWqX$%wSl^$GXpq|EDr=(Ng;m}9t24z-Z4^k=|J$@aq^v2hdGDoGu>$-
z={dI8)6!m31^*I4)%Z)oNTm&C)tqvQCSN+QSoa0%`kbx(jz%l5BSFIh>7&4##a}rn
zUlg`WiJm?erx>huBP?hvDjNHP0#)#kUoS=f(c=4oX$b}Deso6}-+ZDhE1A|MM$AS3
z!{@)(qF1AKtM@|VX|0B?ktV`1sw|{X2bp6uqaXggBk+fzD$z9OI8=GIYBV)=AA+I(
zZmID#>;BdL2hXs*+!rJ_$&+shDPwo!cH@%)zt+X6DlAf5G6SXyS~8=R0~5}_on(+O
z?yKu!?VU=@1QNIY3>cT#EZtz~GYq~`Tbfd2l(frGx?3TY`(f%=t-%F<g$meyO#7Ai
zMkQl0n!q;l)xCdRUtbzDMSqlC$YroVGKP|i5^-&eP5ya@^`Ta2>%;YnmCigdYrHVE
z9hJCi@f^eacClC$$_0&?>quC?jK2Np+|SUVGR4DDr#TfwdKG)5u__J(gT6Do+KKaF
zR*O$}dbeS>N;A64a~Y@CfhnZ>{M1KB@TfF&%0u8Dg^2bO0;o(UsUTIT?Z3VsV+YvD
zF>(<Ck>4aHc$%6n)s}+{XT)9%Omo*|6ap~`%-6k8bdVv+ehs-?{&=2$G)%Rpl2}l;
zgc9!_d8Z?f+D~=4!#}5J1+mflw6ew0evYvOkB>6!a<~{<oWKCtaTO!ux~Tc(9<`@R
z;-h_fvEiTi$tR?@3wWB9WNocc?e`T5x%$j3DHrVeaOiM@R`On%TG-LOU;o;~Cn_r1
zY}xYBT~dX=HlcxCKq73K;kj<M)?PkT8}C2KWLVqmk7HEt1&E+3=T&NkxCUjQ!mz#b
zU}7dcE&CfnRu3wsoqM@P$+NYtTWh2>icZ*;rUnpqp*!*82Q7F)6c+TdU+}un3A~#0
zsOf`c{a!;>gl>Z$<ze+XaLS|hbKKQr(kdEKSbc0RXfdf$Ph%kxauTwazAX44u3j0e
zG!6jD{hQ<~ukVD?zZ*lbrBd68A6UQTJwu`Wl>7L&<_v@qumcMU0TfGg`z-)D9O^&l
zopQ}qWRCRXp`+8*dxM2<Jya;%Bi72)u^PDg$$z8S>g(9!VJuPew_T`II7joCNeGcn
z=BtOTSW!4W$v{D1GJ(9bbk|Og|KZ|0s}^L)7UC}c41)>>G|5x&dA3ZkJHMkq2!(c&
zkuCsp$ka2cW2IlAcFM6EmYWAV9Vm(WNO|^r>4dF?0I~wa$wsO~wEN(JNZT%nZ+OTz
zf4<)aL<&i+d(J9Ri@PVUx@F{)m7I+dhb=iKvVP5adZzYuh+eO~6Q@mj<U8RTRCtVI
zrX2?%IQ^8|m`d9Ut3b@y=)iD0AH-8q_%#g>Lc+2X9{8|`%q5BcL4qgfeMO&M-bDO|
z6n{@*PQ>Yw^gfkd*cb8k{{8C%%?y*VO5h~RBENuuF(m{1rs0yg$oIQX+%y-9P%Wv5
zZ72KOXLFkiyNG)OBgF&?qwK1Rc$sm?v{KTTki}K>F0Eq`u<1#_%+7*smpDl88E_yO
zo~~PgL9r2W_{aJQAcoPPOrswV5KxG~5#l2G>bcDE-u~P(Wq{G0f#l_|N368{%+R~%
zbgj~O-Lil9kw%aCogk7a{GM*(kPuB)yOiDU0cXc2zk7pX++)}@rmmmKQvI+Q&>eRu
zgbBHFvcP_?rKGeQiMTQco~`{@?zI$s7?|dz$ut`yBFH5GP<c{U-L@ndq!<|kfcujK
zSgyRfBaNr*c&wMwA4xN0OP3k-t2!iI{#MuLTk*7PCbeZsQD>r|yxuy)+ewQYuXYkh
znNO5U9z0%zXlmA(pRfpxpRz57SzeB+K{*6t?Bz^Ck#0|XsQ+2o|M={U%mm*ca*>%G
zZyu%w7F_hPSo+qS?v+{}%r$hiNQMlCAA^=(w*p9Vtt}er8(4%on*Ne7-28F?KKYK2
zy}2F$zs^>^FX_RAiCc4G+o`4}Sv5B%?*sBMEC7Lj9X+_<6p#OfT=l-;W%IayvoIKU
zMZM7T7JJ&ft;Tj=<3>n0I?w!V*T2J3<qvfp+WZf#9g&FHLG&8rlNfkrEcy*yqV#^L
zm~h-5P3LkUVF`|6+`k?GS~`wxl&-<yG3?3%t*FwGdxLjWyx|d&LGK3;h07|a?u`%r
zOIg~i9D;xeY-KYA{dtI88%=Fh>|9^->)p_sqvYh!OGzQYzQtuol(RM5=D)WA4!6a>
z1Au$OM2PE;N8o_XPdOx3&U?dL;f8lR=pS`I&GQtM3g@G*fq(hjMSWW2p8w>)XD#J!
zriG)MR8rdWBV}sviJ}13ZRCu~M@dq+`M-f~b!Wg!j86NMs$xkZG;;pa=7VEYWNbN1
zo{PRi`WK`~lKE`8pbJM>Z!Awx^L=SB7v94M3HCOhRaiEUKK2UPaQD-BSPH8NiwFv8
zO{>Pv(jXo~Q&d!f2bI-&f8@sY$-0t&ork#FVLUc6m|aovS1O?uXG33K^O3fTPpt?;
z1<iXpApWGrn@mCSz&(KPu98UWU2Rvu>(&q5Hr?;9)<{B1D{IT1UHE=-DcOD#C;3Su
z1gj0L4R*n23$GH^!EZbz+$S7RztCb(jslKl97=VZ^~BI%``&~b<AhmqGq<SJW~im?
zU7ivT@mr8Fs+R|zV$IFjeTsVZpdMYJDaEG;{t9fjHf_pD^KcZ}+k3~)PNSb`zb^qb
z)EV%MmYE^j1c}*Y@9gxNs>4ZP1<%wG)y);p{fPzOgVbEPDzSN#u$&a0WI9N0Zs-^J
zz+8kkUu5=j6-NeVRbW+Xv38QRfsx4&v#dh|pI<VwYGv97mYL{Q{Q|QYq7inmCl^Pp
z4IAF0k%E%>GL@0EMy9<{(@#o|q<KdCfiV{%{rvo;W_x>DA^yhZX&wEWyW_G9(RzV%
z0*Qz*$HXq($h(JwPot&r+HZ8^MJ~m|@5Oj4SWS5gozoK!78esrYc!gtoDa<MM>XO=
z#Ue3LJSX2qHQi3*%bZy<g{yx!lf(}(z*d9GH@Hb|<|*eUIeuO_sH>g|TA3y?hGc`c
zCB(Pu259@X-BOb&250#Q2cGq4>ZNfA@0Y_o>*c-WPjwB{utf#XoP2ah#7}%~JX%|W
zJ*$t+|3fd$u6q)swL+$_`1sn9w^}#lvGN^(lpZRnjgz`~n4|gQn<9cpsJ9#yT<49E
zgm5iyLc0s}?*l$1T2mLcfS-mg;(C^rc=vbhqZfkwmVytj_Qum^<*pkg#e?^Kv*F1f
z2h|g}mC&l9pH<W-XoOOmhm1jvf|WSFi$WAlF%EkzeixNh@HRWO<vF3L*a?n3vkN<+
ze!IlW=l}NMK2|gG&)v>9wl%A@X_@UN^6^DG&xHK%Uq0CUdqN>Z3qE^bJWJggLu<xC
z?ycf;iJj<iC<prhZB02VpN^b_&<pR}uUt<}fhMlT`Os(%O}o0nAS67bi%UCWBv5H|
z=DcQCkj0hP_5K0^{_uRg%kyG*@tS5L(LO7>zYWgAM8A_W{2GQTM<ILt&}Wgn{CpZ+
zV1ic2f^IE0m_?ei>x1bR3#~Tn@9&3rockPpId13YEB(vREkdVgIX}m!R8O=!3|0+X
z?hF&l_Jqk1cHf>}prI$iAlQz!`w8cTxRZ$9fBV_fbJX$kmoD<0N}J*(wjq2Tbw)K~
zV|YGVbHd#l?@qOkZVU>=lo2zMvw9pvLaR9mDD?W*kSXzMt;c61UZBvJ&_Czxzdk5b
zpO%_$)99Hnoful*p8$qH%ZhvpDfzyIWVOj^dR=NS!~rUWhA?+2Ou-;^rAk6nF0;d=
zd5Kzjrt^sDrY%+wR=&6i5=YAhpbS@=u)Z5p$0Uq8^tB5{#!vkc%c(Rh|Kp(U=th!H
zeD((d8ltz7h;=dj7;(=^0XnKogcWJUKKlNKZvQe=VtqKGtlaz+bP?I=MvHd9M!brc
z*QBR)l5`LZ<-EN)|D$-m;duC2Xdtq11PrGnfVSSkso9X$7lVpJrdYwLh2v}yIFb`=
zzHVmeY)T5Z3;LojsHx4>(^cHDP*>_1hEv1HcREx^`Wck6nBTr;ya^;KI!w;-PHjn9
zt|G3{VY1*NP4ed@>be}&c!;*#fP`4bg0b;tzJzQC!{^7RG==i1sb|O0g&4nut=q*`
zI^4Xi6~j;4#(97bG<Q(bjFT&1@MQ&e1L(AzW<)tvVVxw(K;_FAl#et80Ekk}{Y31N
zH0p)A<ezPo69j1pkb|DqxAeq44Pg#v0C7L(V_Hkw<W+hSJA9-7X@_{L0Wbz2nMHLk
zJDtt=pU=+jnrBPTXXnwBJO&E00qiU2^MlPWvGej|%l+2a)h|VS<$iw31+iSge}5J+
zGf2D96reoWOCN~WuA>(>6<zdJL8vGDh)S*8RQvN!1eCgnh9Neq8+}v+YPkNN93q%f
znS?#@z~1$ZW2^XW)qM3Yg3^xXFM)_O=l1}P%wWu{eE_P-Jll~}gS$ydP|{DFy4@NM
zWyiJFpbBY&QF<JJHH2*pQ9@fnk(kd~AKsENoc<MH&&^?HNPGF>4NYVQAN!JAjS71d
zn7BK)uj;IwLLqYKTUrNF1CoNdtpPdwwwIwV(~-dtzrZ##1QC;_?6_?#`|k#-pGWQ8
zN7#`uZ>^EBm%&^r6#`{ly}I%>L9HO$;#ZlFO$h2$2=eyg8Htc@h4G`4Gma!-j!2)6
z#;euO61`h?usSZV!5T`1Yym^*Qq&ehvG1<<g<z{C%K!li8~?oANAygLRkR^0_ER(?
zU-<_U%sT~co7|MR|DMi%w5U;uiCLz5iKV1BNxXy|wohJflOH0Yia1r!6C50P|J)h#
zacfq&%v$oXN?bEwWe?Z58FfM`H=Iyb5aZI(c*s=T0gMFzJDK(Ub6`9TcD4wALqm8E
zOdH(Ke}?{*7UU_?Db=m_A+YTr{g*`qja=p73aL;5qUs;U-6Zmy{gy4tzUXu9%le(^
zQSk09jE~`flM^Mp<3>3^iFTIxIO~O%239jDd9B?*b-N9RW+H$1k1^Kry(sii&o{VJ
zr&Q%#@cYDPtj!jp5rbZsuT!_jn<;_3VK6ENx9MbrPm7L(eB>$YhT2d;0Ekn@8G8i4
zcAY{)B(k;?&-*$)97`HnGLa3x8`lCeav>AFwd(W*sQF%Qr$vxf@UNljvb#QdJ{<<2
zp8&}6&xc>>E4)+)O`Kiezg$yzHQMekFgosMBf3*gjpvX#dk3Nueq|K)<M(oYqZMvH
zO)EZ<G5ilYDMiA_$e<W$`#5<7^nd88w1$lf_2SIT<??XugG{eJQ#`JX0wQ6U-BrG~
z5XDDs*)2a$twj<AOVn@kJdSfjGWmfy+GXBgi^eFF*>WycaK(Xd>1)&3a8YU7_k3Y;
zN2vWA!*<chD6q~Jo(Pk43bV>H{BPFZFwWwQ{)wNBJ{`@P3TKb+j#n$Ea#Tp|=ZvT-
z6TjW5(!6B0EI>QvCETNbiJbQw+Ra!FaF9k#G?Bl2epQ2YT!uk8w9+7(hs_(OUi2cu
zHB{b$V{#@;BlIQEsScGuDC_FiYUE6$;@FE{sv@4v+llvBz%b^i^4>8u@MKrpfD5Jm
zifwGuAJ)MBXGF|(rZ87uq@VjW9AcHBgOyn_=Dni&ea)WruCw>wXB(OS;81-9AG`r-
zJ_8-#wIN84$6B{=ULknGp>Nzbzg{9?$O4%_w4Y`)+xufz)~u2R|7AfHpi6G9!Oi=f
zCUsx}2~&2QvM@SFh!h7*lc*Jc=+5%~U%svX!8N03o{vHny!D!KFi7S@b)1afU%Zh^
zO8#y&<V+Ie>~HytoNV?z+L&N}n7D&T?3tP*ocz9UKQ7_(WzcCSaiWk^RGvkXO~{{U
zWgogTkk#fsjdJH~bRFF`sCHsYY&{!T_j<Q6Dd#O^b({IC8pE7;PMQ5>9Qn>SeMzx{
z?}Q?tAqqje$bh*d+}MpXMc7`p@1?pPkutF28wN&Z4E!0RGkbnJbj`=uIN(o13(89Q
zad%eM4*34%AlmfAA97bNI0Xp*;P~&rGO`HrIPQmFdKTv!Qn2^o-9>FTwvL&kY5bKF
z6Wa?)nF&Iu&}$1i23g0KgVt`KzMV!Os4o&WF}nnTP93)&7k?MKn=*|o%4-pYrV=+%
zxQJIU^ug;}h!RLqAND*YmvXhQXV1;wXRxpgnS32eXlPL1F?MqGVu;*vV-{t&S{>Vg
zt$%CN`>adYLxaccu@epCWJ5kPQD!b+DocHdd$agDa<l;VkPP)<_(ako?^lmrAk8Ou
zM+eu9O4G+-a?g^|?5ePO@rEP90>~ER8*Iq9+^f%Lv5^$mETXOHlD-S1jsuy~esMI`
z<tjM-Lt#^!XClGAc5JW8u2x4)L^*1v#V>{7?<@W@fBq-|F8LoNvUQtJ98Mo-SAOLh
z&$!PeWpdmTG^ON1OG_J*uHqx~?cI_7J{?MW*)AOs$M9`d)0cp?sOmt_CDV`)8z$=d
zgJ=U?zO#Z-BMuy;|BS#pO(i9IE!K?0r5Rw3IWT5e!9uM7b?l^cEzAD|=8^Ty;lfM*
z%#n|GIo;WX_kQ(~hoy6i5x{#dzT!i$Vx`bYs7fz4<#1%kVUN8l_TZWrzNOx`9@%It
z-H?!;5p%OC!jDNL@@S$En|*(jah}JO<jZ{**tjGEi9EW*=-nu~h{CR&@QFt}c^>}1
zDv@XS<V@LM(KdzF+0(dbkKInJ)2pASwqyz}Q~z08J&RFQKBILQ=(yXs{&~P&&J*Ko
z1*d$Hgi{M(T@rO+(R<g~bOLkdvEpJA(K=bjofC{)(X<t0rWxOe#Z4wc&h1=@&(A7k
zdR-bg^~I{Y2|7;yXCN+_I>awA6@`X4H$`53qJLIHQN)Yd`2CW7Dqfc)Et}=X1i*(2
zChHBF;3kNp66xg;wdP|ZmuG$eJ+bbGpNlC@EE50~ihhP1ezdvVy63`Pd?IHl3_i%S
zblt|~L1e0v4{dUDkL`s&PR<-l&OWcL`2KmV{Q$c4J;2jDG?dBm2f+(~;}YN{gY;ju
z&LQwHX3ojDojnviD>(kmGykt<t*YvvX%Eoz^*4$kFNw-5SdW3xY~f@Fcmekp=dXj~
zV>jA6eV`~~;ox&UL|2+#qVcR$?B*VaWX$=zbKF{zyK6cqT`Nuy9neUO@{4`Mt@&Bd
zb^kaq@J#O?Wg(>`5#;)37<?ewIg)>cmATJ<H2_Cuz~P^5hPVA`$k^lfB^lXz($Cm1
zI@vpKB4%Vf#oKgw?x;+DxK^c1UIKn@);JjWSoheb4QQfBAz>hUM2D6QRt<A+Q3QQ7
z|48<ekdB^3bWXm;j;wbJLUz#zSAzB3@oj(7yV-1d>o=#H|9P?)b`LiR+CXQ4sar!*
zQWAhvC>pw0r1IcI-b7(%E1L!Y2L9R|U6_<c?{~6zg?EU1)PL_DOx`buekw&Go~poR
z0LW(@#$8tj8l?O8P_zRFnGIn?$mRoA|2#)wfvu{c+aKpeP}%NZ_J%EX4lPL@X0hB0
z+|2wk$sIJ1Qrlq{A59X{qkr%06?H^%cMO)7?%sb)aCxgSsdm|*dU}y`XNmU^hxSB;
z)jslEHPBG}c;Qv-Lcy;wSqol6CRs6hodROdX$y5z#FZKMsVj3vm+e4Jp%a;d?vQ*R
zy8eNlziXbqqBZ#URq463Ut9H|QvpyyWnSOExhs`B5N21Ab6J(sOgv$D_n6SdjoHsv
z^Oy75fTcoJ<w3Aj77C3WYb_hP<!PCX0&1{OS08NE2Q-Uv#YUPxppik~wqyfmhXE+W
zef~|fBz9z;6oKp%9*0CGFd-Di$U*q3iZap_UtNuE`u!%705^mX+;clG?EdDG%XnwW
z>($f3K!LKtPi;VIIMa@OU$CmrhTOzq*RqR>!!?X>?WlaEI|>kzrHwEo`f4G6u$VJS
zPEBwxIm!;ex5UtV0HMpb>s@DpSpg`sPn;Ac>jTJ3UrzN0ZD4;Z_XxQ8(upOGQ<J3K
zUgGXrb3D;#i0sU5Kn3QxPx&pg{ZC3PLi8&T^)L&nFAsV2K)@!{2+*M)(CV^%WIVFw
zxdPgV5-#DEgl(Jy7sPzUYQ1ZHb5dh>r0vK{j9j)4Yx0}(jU@`^$9FVEE!%}Pu~5E5
z%JcJwJL2j~p>Ae#_+C7tW#?ZMZV7vSzscQ1Ac9&(9w@9*MZ<qpv~GPEOaw%*1FD2j
z8mVWzG3sc=;<74r11vl9GpeZP<XFt-Yvjhat55T>;rnHvQjTC$1bMFiXi_f5021Lm
zP)Y$iJhmq=O%_Pks0zMpgbSwqSO>1PkW8kgJ=f9Nr<R`34!>mX%Hi7*v00=Dw|pd>
zG3kc2(QHm1><w_j#7|f+xVj6pmLUap;XQB1m?dHD>LTWjV;PitkASSNF^(_s4qmW(
ze*{JA3t)HVdnABj%S}yjhUqRndC{mCf0GBOpu~h50dd$jQGo090)L#|&&Y!pQYZtp
zIYAKfB5<1m;hl^M+6?KQT7vuu8jns}DaP{|{h&FmlA6bazHyv^2fc`fW5JpiJ+Y^1
zn*K2P3Xe5_db1#xIw<F^`vugS4A}OCA>Qm#rH5Sw>6~=eT7;A(<LivQr|_Q0LR5cx
z7x6TnFXI~#dhZK7r{;M2xQL1TJuC_%A>qxz5Cm1~>o4X&@>j(l=~qg2wvJJtA@GnQ
z*My)rMJm@oOMUcjM&BfwNl8DaNZO3pfifL?>7~kul$L-KZZn);yZRpI-h9(Rd%nja
zdT-IkvVnm#Wi_qnkZXM``n1w6$F-Y-PkH8pM$3Jju!zS)Zq^91Fx2**!XrNU@e$fc
zO@wiCRzryU&Z1$%A}fM|rrpc|*YnadE%rr{e*L&%sZFboqlZ@j=^?4#^+xgB4M;>3
z__Sdt(`aKknqc9Tx_5%3W6zrwRw}z`ZJMn5{ksCotE(Y>!D+ddls`cAY%-jqBrN~Q
zMsa2&O>djm#gMuRy6T0CL`KhK8*t-3*3*olO1zs!T~B|@O^VZmUVSo`V^NvftAYlR
z1I1y!6UpJKP9mwOX;Ekc5bj>~fo*y^w(<#GLKX+zePl8<c({ih{{yf`z0h#p=jkD2
zQoU-xIH07bk#%)k_)RbPL+BkQLojqkZpR*z-yx@sE%Fa2hQOUR;~K3UT&9+~=6TAc
z6`WESsya)RWXV`1sEQaUljlzcD+V2>F@BlZ3HYpxFbGjq<?u3dPx*>s^zJk6V$;`2
zir#K>9uEJTr#)mQ)~AkFDac9TQH9fGTa#wwG385`Ij772<qPA-^FO`*|59`=MVDU}
zD4(tV>-qH=SdvOc0?{C%IUiR0NJAl;S=NLdk+kiR>B_zIa5M~VAR;Ed6=o*_;;E{m
zA}_XBk})`2h8g4K-l->#|K632i^1Rc2dZsve|9r~jS?%f!!RnAYOrNK0oWIqx5IV@
zamhDODu2bb0kP?ev?xpai1b+51bRP0+8yZ;ux;GT=@jmJ3X+%W4U}0N&Ek;)H9UE0
z`D2pRpLb7MqBWTqX+>HZ2dH93Lt#XE4i}O#kJ$<KwfY6m0T8ign2zJD?iNSQh-zwH
z@2+iaeNXdWZ}8aIV2$!5NUz;3HD1SxB=$PcIVo%aftq-J%rIeHsc0X8a5=l&p{J?5
z=l0_@f3b5Yr9wic@14$Ab?a@-&eqSrr{Om^lloTUz&`%KD~&>9!tW+a+mWtfTF^iB
zdC3q20VlSyL~7u3|9Aux$eUCnzPp~0PwyJ^(rY0eTZ?Z~ajjpq9D_C^E|mI`o}pIO
zClU|XW}Hxky_9IJ1qsq^H)QwoHQnVa4;~8dp*PKe3%SQ^*MJtfS)X&RC$AXU&ZtNT
zpi1XYhj%EQ!QV9)*TT8rNm<|AABOWc9!0;<_3kVUP`;XA&9Xub*B01En8VWqro*%8
zv3sF@=(fe-g=TaGw@)wbAh>0q|8*-#KBEW75UA8urE)Oyff?r~^ERmZ)G$R`?58z=
z^r1lQ6%`dl5&u1fq&_A)D(Us5Hu`#s^KL)ho|$2MK*DdfB&1N)>tS}%D}KJ^?-@C+
zb-r2xQ^<5vs!wbTmf5y9Yoz+9%qnD*d_)A*NxcTRBG$DT26m)w|3>)?hx<|d0BO2t
z7GfLaQd0-VI7=Z#%C7q&&%@9?_MnGP1*>08snk+76?eULg}8XEBYm@yc;OIX(tg<P
z1SX|v=Bc>3ztkMC`|HZ5Yms)pc=^xDl3k6N2pm$OVU@tvG-UcSHZ%4Q(HqJu<2epl
z{K(qxDd#F*T%)Tq6pE*5N=CgY7Wc|)8=l!7pz5k|GtmDtYB+Y5(PYe{o6}cDAaSw7
zgej7znGn8&@+JhC^Za4JtXKvEPL16S<Lk#Eni*S7==b1{M-T=F3({DA;ykX`L7(u^
zGkN4dTC$Em#7BIv`mDc8-8pym73D*9`QNieMub89`E$gKDeX#joE!rVeRkn-h!fta
z+ptz&0Y54t@N5{2Lo$I6j$w?*p3h7j-jJJ{RFNyDU0xP<c!My+`ubu3s{QX!Pb5}f
zud<YG-zI<ji%K~L0{2|gKw9bqw1SEQ$>_%noyK;c-nkNJ!1!$c0ljToE<mlIb8pWp
zYD+!8ly3a5IUErh@GVroy)<Yid=l-zzJ`JU#Fl$f78@n|k8om|N;dgiQcIMXD4E|5
zrU(}4^u`ybp`G#ulsi)3!@QWkj=;l#rjyjmivuRIJ+9hX|HGdWtMPZJo5k8`Vq&7;
zX_oneA*)Agt|w1s<o${hxd?=g464vkK6&P0jDvFPQ&v|##>9&y*7k}Hu}W)jopID7
z8avp^^_|`+I=w0ay?}~dp^d7$3{^XIBU~`ekr~c+;@x9bw&CJ={9jQsvUwN2H5l{x
zC_UI)5)r2sGn!%4SFbgR4$|8zNsBkf>szi@f}sT{+08=Z_%;XU<;NiS_MUHRCeFwg
zK?aFnACpqUF;v_lx`t|E951y;9<KK71eIr$>wk4^ht#~<qJZoVj^gAP6w~_q!*~k*
z=J*|b(mV$8Y?2@YRz7+l5^h}=vd85gkE-Dtv1@Z2upY~O^fDr$6MGBP82?YUC>r*3
ze^H*~Rh*qj#(E4q>-+_Wy<kdlV;dO$ke!tpoAQ!1^cD0=ZRzp2g*x(A!Y+A8As~_A
zObj7A4wN?`OQV?tPh~@ffZoM<5NG!X;sT<Sq1Uv;vd8=+idB&$A|ZPEo+rU;&HN<E
zVHfcN&Yx4YgrVSoxR#CoLS42ALOYUd%+i!J<OGd62$PTuD~gUj<GKIc{hV*P7~5Zj
zh!dk!Qj;v}(J%bGE!IAhS=?TV;*&kM$$uzY3%u`N*t%RR4aQQ32P;T&2ro3a<w%st
zLfgLnD6yQ0rq&&%vNLpXsSpvC-aG&bsBWodYR6RC^f7U%FicXAEgtC-1ok_YHrdZO
zTzN)TQ_<jJ<afYl%kAS<$yox)o&Gw!{?^zjllw74dPu9zDq)&vdv|tHw?a0XD(x=-
z@1fB&yC$z;Dn`&UZ~1S4?tud1Bo~J6cO&#D4aB^(xbpv8BNR)=ulDS2fq&0Zf*vvr
zx#cy6x{2ecxwgv1VQ`JRUZs9Aj*p7^B)&sCZ8`8Y?rSKlXPnuI(Z>hJdM8Jt;(B;5
zgu|Y0P}$hhE-QoDUOZDvCl_zayeAP;!ZBACclyeGU1$^CZD@TbLXMN+aFnsV>~8WY
z6g|QT(UQG+Ys;^nUp}cdO}G+Uof3b~oMesJi95h7=b*xApLBKmu|!<oEqSJO4|wqu
z!im}_wG|}?7&puR+LrvSPYrX6Kw3AQ;^KWI0Q_p(vv^}&T3ChE`khk18VMXQ5bbRo
zZe1+|VPf@IA@uoZv!b4AB~je^^_tKqTT`2pG$!dPf+ufEGOuvrNA31XFf7m7&moj7
z?QIf78P(}BNK=D2S`JXdk$y|gjadtDDi_h-2dA$Kd&Lwz$x?M^?`+pN%Cm}Bfnq_E
z*_r{g2M3jlW|8K6D7BvLHz7EJPRXfg_z>P-&Rav`tK%v@uQ;;)Q5~KgL(ros(GN>^
zjSm%H6ZE->Jv|S6WQo!$DI;HYfv{>b15U=U^^BOf3kve$BZt0ZH<F);5%VbtzqZ9K
zz`h@qXeSmA{uU~HkJYZi3aeWXdx<f!sn>L6Jjr#J8nNTI6>?uz-vW75xJ2A<;j5(n
zDY~HF0Wtvve9v0?kvzHrnuJ+#$f(!K)=IBdjZ(G;_6Gmnv&mZx!OE@eBSkuVo8Z+~
zAmx*5rgOpSV6nmsB~o83rV}o8u7~RPVF_iiMIa0{$wB3hU6MdV+~sSyfurMp&%Tn%
zX*m5n?df_tO<g7QksWs+FTw}xeoUc6;*+z*6u1ii=lri~?O-~8bx?PD&-DQO<?WmT
zjymB{`%@?k7o0@Gh=EJJ-l_Ktsm0eR4#aYmoFQr*i+<Lg_F}#5uzGI?li=lYGu%qG
z!|~Nh4;3<GKZ){7c0tiRBR%Fq?=Iy!rGrZP?bgXQ_wQh?^3S)1JgG8-_?iSdn6bqK
zN@>y_xBKNEKb|Y$*YfYi3snZ#g!_2>St=>rzh83vE;8+8U1X%QLU>hZBKXLqb&zmH
zpr#xtOjfD0YW%T!;dsYw#~pFKIwuU3{Wr9+v;s1Pclc-^Yx0~^yy?EZ*df3Avw$(Y
z@Z77Q2?eePX=>uWYnewT%!^DP2j)^|h4?_()})_fU|u-^Z6&Wel_N>$@L<OL(!zP1
zvC<QU{_t4Bp#T<<v%N;&_9UPsGF--wn~-FuS?T+vqvDJX=>nN3OSF=Byy3`v1DEK+
z;0p%8@wb8^iC?{LhVQHX-T`;W+X^<v6n@%rH6q$%(KV(2<vrc4d;gvpOJ3dB6ER}O
zki(FIrOOdgcRvFS5c*zxUt%C}ler__4Bz`<;SIUApjBpC8fqD8N&&kOq7ChNYZ_w|
z6IALQaM^f!Vh`({-8cId_Q+gfaf#RXUy4V;i0x7=mYadQM6^VCG$PAi-o4p~XD<y5
zN2yof)xM%;bNLDA*<Ij{9P>syCVVGMMv%il3+y9z?jXs(cE|s9N7vWa8?^%&@d%!l
zD@D3d(TrmYvo-%2$ywU@ny)2Ma<zRT;~{3g-|Yh$BvV6D+Bfc^ANf%Kh28I9Z~)9v
zr;Wu%mh^tEKZ<$0$g8U!%5O&x>%+&eneM1>e7iJq9`SWNz3b?uOZ1%m7`Yf5z4#-e
zKbKxRwL53NBZGaHh=Ab^JHjW3YQm-WgRmO&X`wx@(;Toi(5~}io#cGdpnt`D>r0vP
z$p0SxGMn2Bc^`PsE$;!4tNuUb-S{q||2tXh^kQAci&eM!Osv*=!QadvmxCm5iN$8K
zqSfV=e{Y78enC^=m7t2wptw3djoR-zeA`WFSZGUorMx(;7~lHrv9?`FU<D0X2j3Gj
z-e|P>^k&%VQVoLD12hgvuRw`spl4T<Jl16RxnL<AZMd)ns;8yl7S*{WyjwdhbC+23
z!(G$@N`bGF_9}b#4G7(%UHVmBlSjqgz+(c`i75FH-6{-k8SjVqAI=OWw;`x?P`(V|
zp|GsPkR)86Y?{+QiD$uRo(`x`nrYiEIee1|F2Pk`_OBM$@ZM&;u$}QKb-T8WVoP)o
z==wK{rxhRX;TK8d99uuCA5ySmG%d7y9~%C1m|Uq8v9#`OevDJp>W1bgMZU+@JRr=%
zqIlX|)}hZ=xUmht8Wq649}l$7<-NufzrKdh>PX!E>O1&b(pHR($0=>0L(S;K9J5<s
z7s+TJrxTy5wLtJ=jQzFWyHq5mcjA;i|0W^5m&OE(MhuG6_a9Lv!+g|KiXk)FJ?r|f
z^2*7zl<a$u%x6B8;$WfS)7BKIN}bobvk;g>vG=UFD5>K|k!d|X9-0o3S4VC#;QJE}
zY4&g{%`gp$Hg-Kr&igXN1zT0ah*42hg{RP^MPPIm5=8RoC>*^(G8w4Y_BW;x7~AXO
zV*4?`lMXvxVCeTXfg#`IqAYA;xXpIvwrN;)Js%RwsDWQ3eQbk;oEMU|2$F%$Q9Zh~
zHb0{}HN<1Nmk%Lz45A|%F0d9=(A-pcmaoE%v%Bx}CjSpci=mWNHoae``kaaMv+oZB
zXe*n`=DpMZ+F$CkEqHjV6z!HPcrijAli`$HJ~agXo=Lm**_7+0aNMNrN;V#;R^Uhv
zY}7P`oIvrpPLwIsc!l$g@1T8bx_1^g3oIvFPXDEq0}j)h)ytysE`Mdd2Sfc~LX#m{
zwoJygUycg%^!8k%c&v@dyiM8EI>LkVFynl&EPnf>;PvOIEzo_$8HZd}dfI8%z1<bs
zd9O$7_SwhjZ5RFNLvHr&**e5~_q4@r`84_0O)l%{V7HH|aKRB4tLxu?7`db6<@N*g
zkGxmcpSX%axwp+$J!;z+wX^~ud2-XJwXTzW&wAZCc-EtagcZYM$|8`A&M3`fY$69Z
zQl3=grk?mQ3x3-1OYo~6s(v&HPG}aof`>`y9tDYpCtHuC6sfdQemRa)OQ&Y&2y@0u
zcpj{IxP-Ls#FjDn3g!Ds%DimK``IS~nMy>A_DMt&Q1O@vKEwRMpF4!of|1H4Yi}kY
zWcTeczM!(^H74Jk&8pxf1kbEI#|}$)0lKrE$@WE<bHOcNN0>9=KOE8PO7_cHZuqS?
zxiGZS$nF^G1tOu#kQx+#%*7E$CNHBma>IT>3*28Awl4PVaoof26FOL;S>4p?L*xnn
zRA9?1daZgo+3qtqw4DeDH$n`hikj2-GY03vyAwg0fI&zA(q0EIz7_j@EO!bIan;XI
z=*8R@Y=z6DZ1WVyzQQTXPz;{~fq~57obuVncx^R|MzS)6Q1Ll8&JB1oJaL;novh4R
zfU7;MtoCE(f3e3q_(IZ(dEx>zoLiBHKc*t?&%g-ZD~>8{aPZGetMBg^UlH~lb$K4H
zJAwcB)_==}-mPEwU205a6$-Bc`oHPhErEV>>PZif`_O%4Z$l<ZCK`haKO1N3TMb19
zeG0goe`$g>#y3c3_#zI;qits=yNs+EPGp(<BA{?<$Dm5+>>{svv;^88ZdYu7CU4u0
zv8tDGK+0Dr&8uFZQm^4Ph}6npDpGj6ulWVJ&z+mPy&O_9QlH%l$A25!i4g@J@;2i5
zIEW6TsBt2-@te6>>8EgV3G?!auefn$3}E6A=-hKu$)KnT2`UQjd*fFgzf@RH3!sRD
z2loNjy`b77<<j1KGy^i^+G}tG6NQcw-v71XiZlw}OSs)n1*Koo(+;;xsQ@%~cP4uC
zG;?n4!x^(0NBi||p;g>S;z*-p?$2)#v%{)NOUQRm1;tZfmfJJYD$qgs<G8-8%MMlz
zLJ7IDcd&6-z~GVa`Wi|l0=bcRH*uj$Ttzy*9f^T0@*AB9d}FSwo2AG=o^pJJTG<2V
zfdOF=cvIrK`HfD3r2kBpm+(q?QVSOQ4Iz(1*Ljb|BAlRUbVk?bjQpPR$#Vm_JS=)(
zrGni1O!zd+4_-$Ny{JJl8h6mBDZ#<YNcUB_DSRaO@sMf>9h!+b(`332-=CHy<Eszd
z89fwiW68#IJ@AYqH5i~J6;F)w+Ji(qW!%Ea$=#^UWp+SUs$#htlt>krNoWP_VEOVV
zLA<v*QO6}~yV^hwX7XUv&ODXQr~d|rjP$TzhPwH*20}wRhGjL^lY8%;2@j_5eWzo#
z)$+aMSmX8x!k{<n_Ds#$AuMvo>5DR}uX==_Bfh`Y(+K>CA7@XNy6jMioo+RsQVCQD
z3ppf)2J?=Rm>_+(PoGdilfgG1rl--tDe|f;)jRB*((HK6;12V<#Iqn1@yy}`>zHS{
z^gs>*io(2@eZv<40ZLD)6ZR*N{Fv`?3I~|vBr_^QBml|>Nzz*;nFc7mMW(Ru>mc}?
zLh2g~41_~kL7z6vF#p#yZD``%+3^EljU$UoY6wirp!!aL3(#W}R>(7jE87H$t~MYT
z`usr8*3Az}v*<<IGpun&uJpD+;Bd8Yzr?m|q6Ge@VO5GDNkj|4M$tWC3|<n9G?J+Z
zT7LjtpUDb7bpYZYmx&|l*#7j6I{}=Fgy!=Rb^m=!RH&%dzd7&qUT5r5v9?FO*eL+B
z>Qo?h0A~px8%K~0A84T6u>n@QYW)x!YNWNGLv=x*cFw~l{&CrLrf$rjcMXZS(`837
zkPIzhY}l8<lZFSqR(5urJYd^ABx;{l$eGRxJwXHY><@dp_&7EwTF4`4@>v8&1nP5Q
z?uV&#XC}@oCxQaA&zPvMClGn$Xh^*iSF_ic_tE<+fKU!)(U(60^kzzgmGC&m&1hNj
zmp__L=F_W8C(oDo)L#y9Z51-ot#k@7yj}lEUTEjmqSQh4a26*_oLx4=Y0zX^_pv{s
zgF5kJf~qnvdzppE(5Mpqu^#Bf<bu#hMtfXd+}GUIQC`hNgV-R-6{1ww^mH2`fH(`+
zm2wj%RI#rm%A2$8<c9;|cek4-LA@&?oIqP0^VMVMnJ{v5IY%dGx}k4(IWxm2gp=Y`
zWkquw6l>(46>&>S9;wEt&?EB%KDVV{R)woOS&Wt!&b%hI#sFcFrx({_iesg~N}cNs
zQYfl+?CDR%skwZ`-;4{l6Gc{t8&GkeRx4o9CLvk&Iem-|o_2#ZE^#V5=;#d0N2A$j
zAk|t=B2c%6S7XPG1SpJ^%Ys1}4=_D(!AQ@XKn*>h_qSNo>}C*#h4~-UmTWu0s^jG5
zH(cYQs+A>7qW3IKF}<{2tlx}42urU9Ih!uBf!(UNU0pG+G;upqh-h6VNKDxYxj8r#
zL(tH=C#A#wr|bd@BD0&1`+vgD<+rY1ABK%7-KQ}<Px)=)?pUmr@*9&DP7-J#GOo<C
zZ^i)T0v0CEJ)6w+%HJN9%t_T24L6e_rh|9CJ!%`y_CT$Kfmv-zHx<ofKf6-xC6Fq~
zTwTxpwcHtHEg9p4Q2fl9QPJ~pb35@U&sTO8S;<i4dgS5xG{=oYnJ53!B2c72me{n0
zd=Y&im&c}fB(={i&e^I@;5R_(XY6F@<WX{}NKxb{--YQukxYXNPVlDUxa;)oXEL^Z
zPr;H&Vzz<<3`H*A-5*k&K(}P8mX85)D%vTDg<^Sw`_9yCTvFa~wH-G-_ocsq)Ak;W
zmW7l_OcI|tuoN&wu3TyyXc^RveO_6O$y69xCA?}Qq|lCRClm9fDJ7RdH6c7}_H2WO
zZyC$cLO|E+CAI@|eq6uy_E_6?6>g0#=gEa)8}Hr#MLZ21wIe6I*w`1R`k}W+jOXj!
z-c$#`z?I9~pRW}PnqSAh2vdRrQSfV8D>aq@-kpDwleRHx+P`=AH2689tc?l(5A#3_
zzdTe12cM)|^{ZbMFIg-zQz?Pa6Rxb-yC6S6BrSN?yp%h!7_!DAPXG~KC7L?KJDFHE
zf#TE8&Cb!h6a+yBht3F}N`UF2^rh^X`iC)DSs1hj0Og0n#n3lAjva?D{?cCxI2+cl
zuf@zqoc>2BlkM;}mH#u}e5>-7TW^gdCh+@P#2I<o$m9nfcn~w@oWRJ_PQw~=C5t^c
zu$1bb9O#3KrBC!KHmOGCNBLxGacl=AT{HDRDcL%Orz@MJOli<akl;z;AfKoVr^jdT
zgid9uO`Fy-FwV40gaeMM`J%4~z$Vi0#exHM%sHJg1RpXU`-AGKg%qKQ{Fh)v14q;4
zpQ#mvsD0$fktx5q_Se`;id?9@)Pkpi!h$+1E3U7t#d|V(z<9|Er)Q>976+$2Mq7Y5
z@>5l6tMblg`pe95rjDi0=ce+X!0JSq2B$JFtTJ*Z^od@x9n}XYfiH39Cj2x{AH6;%
zg5Im33lfZ{e{|VFNJ%jdg$~sT`so}*vjISbdKFLc?Vq!Bh==u$c|}BuX5}Xl4D^{(
zGm+M-f3N%^1Oi%PwkDyh`+5mJs^Rda=Il?k7zwQ8er6)5kfk~T&%N+`Irpc%_S$RH
zl9Nrb6qdPfZDQb%gAPgL-n(PY9g~XFSGO%%w8*YjAnR`aKmWq>J8<%_bItf`(i3F{
zzqWtW9S@K=_|StB55_)IW5%2dJmZ1qEAFvmL?J5jv~&3tD!%^J$f$71Jfk9y{+ZZQ
z|KV|`^j~=Hh4RF3qBH&)Z7+z_>L2Zha~QTw!Az}$bI&_Bb^Nc!Z(9ugG)cdi^1n0r
zv$8TxM^NdPZZFlE8N@^kPyM&ObUR)aI)G2ei}w%WrqL3Tvo{$a4$+I2EU96gfu)sr
zg5#AML;_q{F5qLBgFVJq@Gus5RsRe(rs81#V46H(8|fdXyR#`H7oz{1R_GJb#nHdF
z|F;2qkQx{yWMUP`(&w|VieSp+?f)!BKcOBU?nH2r9I^-o(F(<pnclc@OB4=Z!!a}x
zY1OtB2O{yO?;l$+=(98WklIw7QTaz=%Zh8S#Q{%X-L@$;b+!EHP`7n!VIA8KI(+0$
z$jm_gg1?q6%;a2>hj=PB{a*PcnOsEK<U0<1g`(7y39A^0#@PQ7<a<pmzXihqb#wW@
za=GmBio{MJGb<ZRMO~TLVSM^H@W44B(n0XoX*ZZE7Q+$@aq^$QYOBr3zw70n$S9v0
zF+^yVK4;5-J*cb(dmRHfuKq>cMg_1CLAo>jt4uqiPtC^4|K`lMDshlf1c#qU;TkdW
z)Rc!Ge28^S<W$&~sbytbiPvABf&FJiH&mW+n*Z_WM^`$~*r=h#^r<^IT)g(T>-q;y
zNgIzou#%vn7aCFhBOj11zW&|vkIWr=(Zz+={`xm*+^0H()5wXCm4?;@5jmCo>8GA7
zz2^_V&!!Z#|8F*J(((@apMLgfbsaj{)T0dDh^^EITIIG4_UPFICoC%)SnW|6E#TyU
z{i8@APxjYjTEvQw6qtY3?T-B9J~sdNs{SpD`}mH18$><S8U+@iap8jvfS0020{Qt^
zFA8l_jpCqWO^?i7T~@uVu&RFO;8ya2$Xsz9;CY%Zo+ahb!EKVcrxR;gX*mTj=&WB~
zR{hDR`Beo4RrO^%YU>6KXq7T#aO)JMXYgs43lBgg*vNrYE#{fXfR_`zBwp_HdF7EO
zF$Yr}X*8}FF0i074Oy{@{J5atN99+(Y;!`oLIXDzVBX|v4y2OACIAuOP8l+=E_<MY
zSgThiu=1lY(b|o;0K=n&Lj<0cprv12TwO0qods0sXJsY^w=ypPPP|CZ8=j<B5S8Eb
zHH2ZoZ1`lpin=8+qJ;xIh(jcufz?pUB;zccP_*<VNdx&2=7ksi3!J6TMoj*3k>*-(
z$D=RN9CTKch6g|va<&Z~nTUHtTyxF%B5vku0dcp9qIcAWB*y?aB#ke>G+q{pCZ)tp
zGJR?&|K}KdvG&)!dsnP9P6`YfG*CuHxbF`JS0bIdbPf+3G$=Xv;6r5xW5ZMBB;qVs
zu)tlyu?@4Ly!11$%&aN;+@x8V<40%gw^kIh_mJgR^v?&i|A@1rf)m1;mY+C{_@4YX
z*<<oz>g1=(R$`g(U3cA;N&P1#CIlaRa8lM;XPjMFQ7IqFV(1G_oBu>Ev8sQ*lyV{#
zEsrmefF)fz4}BAYK)zfOk|3IjN#uzaO)ml3StTUUBZdT&N<ltmk{S#we;5D?7H;M2
zuEzF{o;@Ix6<nz~Q*jtr1jMJ0U{bU=J@kb%`O<`hBNDlK^MA_Ilgn1&6uf(WcXuYC
zaoB_N;6o2);vf;|*^Kvi==bQ+JsiXw1HlFO*Z%(M4h*K~V*~mxPJgldh`xtoWC?%Z
zvNx8ruU)g&HtNC+o8zfdr<QXMnd62Xmo#MP;H1N`?7T~-&KRh+$`0~muJFBo{C(!A
z(?%6wIlfg0aqOP_R#!w$^qNUte5xZ+oY6m)2nsOke^-lCt+*Ka+>BpTuIc%eo<M}P
zI@3EsxWrT1IoNy<FM#;suI(To8kYa#k3TM{ckdqDqfXFqFDIk-82Z-!ES#``6kHbg
z(T5*a9e=fK6;S{HKmbWZK~(&3?9Uf)PCW6%78vL&16<@pEakQKH~;g`s`B%<a2pLq
z8J_h?RIPH@0AU6U2sxI2_z{P6hEGc$fCiVu8NcJCrAi&+#V3$felF`sO6K+~IB8L5
zFp(zu8=ScSVuCJ$(-OxQp~J|LBqdEKb;1d}E=?ODVG7=ezE~9jsTfI0G?Y{xyzrz5
zl?DP6@3;dqvFPw(Qe7K)_~D02Uw-+e9sGigK$reKci)pS`i#+fpoElkmw=?^la=2M
zpsbWkum~?2B}|!oYEb^j2OtSdXXqPP4c#^Sm!v|I7vh1M<=NFg33%&2rP`3b?MDEG
zcFW?@hbn<wGlnz0l%&$fpsD1$&;v|vc6I=RsElkxAInpLh@CywKbit~RSzbGAp^}B
zRse|h#Z)i`Rzz0%q+))8p)kKd`U%8N`yW64nqt#WU=W?9taLTZdu2T16b^d*>$Ja?
zz54f8%8wm(eA3XNLy`_V{P4ss*vHMb{{-cSNSu_Og_C>pO??<EKeVLv>PzLrjyo=C
z=-{Erhher!mo8m^$EqEBAOg=lf4C>>bUo=*c>p&i2Mo`ay{7G71Oi^oSD+D04fCH+
zQT_83%B}w-&y5b6p%1iysn4Ljc;zK&FNPj_Y~mq@9GcX%YZt6QVm^~_1l#yfKlfyf
zf_^v=2+qh7r7vM>W>!GL3FOY?M?D`?|D<873i)Uer~jLtmd4>~m0aE-z>BbiS>3cB
z5M%vMR(^f$HQQ)EO5gCTdes!J9D+gkHkdJnsO=Qx=T-&OH4-&Q7YT3=F_vE~7pPZD
z+yiIg%Fq56d8@#wwF)47S-e&<a0Yg4|7S~nO#kQC*IWy^Fi_ao5l>_NBhboKkgxqt
zYya6f*`cl5IM^pHE`61nT&oYV1}5G%QC1Gn{;|Z{dF0_ow!i$+%jM={la<H0=l8$Q
zIDOP8tVTd$dDpS*ft2!U1IPgB^A1=BQx@2m1V!m<IHT46^0%-a129ta{R6XYsUPhd
z0mCljKa=ASk8LsaPa66ZJoz{teLGW>@|(#Jwjv<oDg=?b^i5fDv!_Y<nI7qIi(~&1
zC!!J`>`wJ0De!1@+K9e>J0?3A_R%)M!jhham!^mh)IaMK`ZTs_{hQRgEq`h0cAWM-
zw`%zC;n;sJ;+%5QNy!gA_#pRl<x*Z*w#)GO*h*kabhbI8$upeMsd67fpUV{_<0-L7
zU|{!<{&z-S<8cM2v_JGOg=gyDq$Sr3<4+~P9a<JR=0CRNzyT?f$}m&B;?P46OW-nm
zE{$J?eRt=~om0JP)vDU_#++xitHHKXJIZAXAB*oVf5B2{U~6dq{f;;y{M-xAwIXTm
zzj?_emu&O!q5Qx|wEhQ>aJT34-_UGQ{^sl-Y2ljAe~sVwSF@2SR3_zHGFLctSz+PR
zIHwRxcTMIXT5UiIG~&5Tb_-6I6%58a2up3Twkz6JEuS*@+_`faTOp{!=n{JQ?-zwt
zcir`+J-$;g^z5FFb+TxH082Kc(E>6=GTxgJ@>VKMo<%8DgJ_&=(8*1saYbd}4F|YB
znm`&fm!Sw@6Ge8JC>Bt8v1FB0ls8F2-fcNSV(FGD9+QmR306MSkuGjb4STlo3$$gF
zkp$xnccxO)CnA9?%&)5H)6+?y{w@6@F`IJbD(t0a<WIu)3GS!J^%c~w5l&LzLi%q0
zgA~e`m%a-v+^R^L3Rf#ojGl!tp%bhBM)C`qX6cKNib}K<%^D*=Q7FBr{9gJiae5=4
z>F}k%!Djhkbik-C;awuWrTkEuV4+UE#okNb5YZdxV_%)R>Z<BUA~t{yCnRFuodJo5
zAJG^27r<UDA6D%^g?Rxs1wZhhgThB2b95q4eI;%-mh(UVoS!NM*T(hhwPS!M(#K}Q
z`t}8YhV)yv(Tz<hKjW~ZsX6&UK_nB^Sb9XOcwN1jN1+#+|KN!yw7vP(%!+#_-7lM=
z4;eZ%34;<c<*i$nZsCb{+@5yZt+&c4n!9R$V$Y<?pE}V69%JbvP9(*Jx??1p4x}f%
zO)Y5!4QC7?m}~n8MmQ50*tl_HtqM*pbKkml9O$zH#R5hW_;ia?r*cu5kSGK2AzZyA
zq39H=&_5P0Hpl2`jbu((!<X{F6Hh#WJ><*vl}33rtPn~NDNS4@mvDdU%{MD1-9L%T
z?44tW3{5)eXD6mm|6MwFNtk&1?HO1iB^&a92tkBC$^m;_;1yU<|89~)4uq9P<$p8w
zhGR1Ru|(T_3xUfbq{wtQiMA|)y{IbQn8D=^kpNFvJ^SpllP|jHqBMJ`Np~D_ap>WP
zCwyT~kd9OS@Zy)Gr}h!Eu<T%SZijoR=qa}n*oZ!vP(9(=p#CR+5)Y#gdoa&<fD%*!
zRY@eWe&YtWEh9o4>ce)FpQ9Dfk^w@#WHXS)#yr`$euL<%5q;3OWZWfK>p(c!8?x^2
ze}A<+9(_YZMIqBbZyqAp@2i{xeWcZ?W2ewz*z~*%hY}swyAK9c)#$Knx7>J{R?&I#
z-wk7|k)Jmu0&qU4vv-%i3CH9*>J6ay!!o1*W^!U5Q5>iY0ARvJ>wgZCa*sA!|6qxS
zTmP(CorlqJ97+K^MAxZP$1vh`gD#@Byptn+aQU%u2)E2ioWkLXCtLmjOMV#7XgZ6B
zm?4KgcInbNl+NY%3gi6o55F&Y;l&r_5FbOwMg=-_>>#uGD8D&mPvWBVn{EG$M8q1U
z4<Q?sKf}tmkiS{_hF8*8{gc3M(1!vsuz{J9Dz9+aQ2wa?#a5#FXT55O0Ve3QJ)nIE
z1AVM(W8~-l&^Q4RZ5y?WKebEJamkWxA<P^GPkdngXS^<)$zwj#nI!N5=Su9KD+-nv
z=_druK%a$^Xrd+voQu~>KN^8h*gt0~vOeUGaadj%KIfdXQ!cvr;#Aa!&<d8V_UK{j
z!$$HWiO|ELN`aYg%&402#tivtLp)~#&&9x#f_)<?cMsI7haGm9)T`d|XK^$qzlqzO
z{P)T)Oxk))BUFB)EWK$NV>F$WEAqz7nWnvP*j@zDUbLWGs86KN-yI*NIJmj+zh9W?
zqmtfB-_3u<><)dLu#FGm(fX$i`broCz|5Xl8bq6uog>@82my^3FwhHd|7BbMlbH@3
zI)yfF{KmH9iY|`)N(Cu2PV^tZ2RB3C;RoDM2>UhT#oGvMqXM~@!DmVZ;IVXWqkO<_
zQhr<if|{$lc=Xx*F+>8Zv9GZbR!Xe%%s`flgYp}AxoHHh4ccGgB0Xy-op6W+W@V%P
zkCop`AK<RM#Ebeln4W>9!w99!fBeHAi>JT%BKM52aIXB=E0>2|XnmkG2tzb<F1)2L
za!L#_yYUvTk^YGz4}0-aGfY9bsGn~z(6_tgZ$0wPOP_}bVxW)x%trKca&u(FhBWc<
zySe%|CSUec`8Rd2$}Cd5ObV}5uvdN=9Y+}L4}CcDt|0J;Gx^V(Dj8_(OjsASiSj%n
zt)&+uXG8iHuA%(sqn4k5fj+iB?K^ft-FavjTaZNh^zJPmr^%bCw@D{%{u2iDV(2qW
zIs^zs1rU{W7s~&zVaFyNb=1)~9Y~r%q$Q3>1pDOes3@0%e??{`yNmMk>jYWCjZ4VA
zX&G+qU%ilpP9mHDmigE6_vV{38_Ca^kK};%zoig|SVr>$!DKyd{{wBF_J38Q&C|Cy
z1xg=wUw*?^!~6$2b;kbq03l=KN03X;WTg9S;}G6B|A}lLJJT45!I3l><&S*R(WI>3
z*}MfC-$|$eVfMny0lQ@@wpXvtE5(VhFa(=|#tZ;H78X?6@hu!r%|jwIEi;z!^XG4^
zq|w4_kmF?2Lo+d(iRp!i<OL(uiT*4lNhF8}ZBP?V;SCrwN(tL^5{(Cama8!|q~(l0
zul(dr6Yv^^Q#u}gG)k}uyr4%x0tk7NQlT^zou#kn1vydhFIIk`L2_{LlLDaSD+j!I
zLlT;XwLt#X3cUU*7y(KDCqHeU+A<Bj19g#6r*=+FO$ke<NmE<7l(h!(OCXcpJmIj+
zm;ZKLyI1ggY5H;PUjEzhZ71G#SdO5LD?eg(rhkw8f(I#@qEBR^OT!U0B@~#@Ltkb=
zieRi1WnLe2#FP%E7|Q`363f&$4G7C+sZj|cNOSbPaMW`28T3I*uu%V)(PHz3KrVel
zivbdk<rejev3yt`BhI)>E=fxWaZAj4XZGy5RUdrtfpp{vf7MmLY-#0RxpGx4W|Z&+
zS@0BKu&J^Npm-wvf!NTR!r-|P{Xqi<V>T9|l=}z<`q<$TJiIs1KZ30D$cvzc@*_xa
z5UoWg`ls>Z)dPp5xG(f~-f_qFO`J)ID8ipU`t;P1BS-MdSws4Yjwmh1;^!lf8m?uK
z!4UP*M|`aOh(r*GsyzS;!TB?ols@%OkSG`+fNDJkRIL`6=w~?DmN7`};-Kf)p~oiS
zG-D+N`C*9`Kch*^`y4sxq?1#|jvJdccI?=+aTi}Kze_K@yk)z#*t^Pgma+!K=$|jn
zbikS~vttzf?RVZ$vXN8h%}~YZr=Q+p<On%cEQUS?%aEA04^W`e%f;7qqJvlQ^1<j|
zUbK<g3WAqT=7S_9lqN9f8|Z)2rcJevJn~4{b=O^2WThc|7tBauTDZ9Rj}3p5acXc&
zl#iB|j2nmhxR#gVkOpj?uIYA>KJZ(%L5I{dz}tc~uz!K)-eVk)x8?7cfdi9b^zWg6
z^nd{<dz7Eb!yc(J;~~c07>n&J`X=`4-w!i%=>pCRSeD1V>*CQD5Tk$f6T3?A-mLek
zO3TXFu@bVUoH{b))KgD0v+VJ86^GtnIk27m>&kEN@R>i8VNv}{rYds=)M`v0Eq!@{
z{4DFl!up5k1`QgNgc}nfG%Ej~0fW5tkAoLrxBih2F>L=$`RmtL>gQdeFGO)smW?<b
z`rH?Wkz|s4XBwmg=dY3cjPKpMkF`qynei5uRU7A(A2TkT-hKLDuSAvKo_$DSLee8Y
zlLO4sgXytw@)6bo3)|iN7j``MM`2v_yFeenuKcF|<LW<N`4{w($YT#i8uH&XeW?hk
z5>j;KCo0yfB0nBj|D1@^{Ya-F{h`>xf`{TL3Q3`OnwB4$2Z*Wvh>~~_5<_2u7^C)|
zw|W&;y922T!+rwyXma&LKyUs7n;WM|4Emkuf79kowGTh?Na?SC^Ba78(aM(cbEcor
z&>(u@nx?;Li`J{ZLA`3rAMs&Z1)jVLW}@X!FiDsoCA%)~B=TMD&r2VEGX1UTqrIp@
zdr^Abb-%$ruuw8E5n-1uU3nsMl<#k;e<Qn#2g_K|z7sPz2eD(09>7Bbjf>L5Y|Mld
z><LQA#A*90PeitQb)ML>N*-|f_3NwsG1WDLZAyZ>^x<!;e{HE4<pi)Z&!B;W*k?te
zC_jjb;6ownTetq*xDg+inzlbTHHbG)pTxukA~Mitpn2=pub=H_x;W@@#cP^Am*ctp
zKf>eG_}%LNQU2ZsqR#b@n~C~49{sfRmcc&w@I^_PX&xIVIDa-jT>aym2)F#V#6GbA
z@xnFIKXE`m^8TghB2M2U`=Ose+`Cu)zS*!Iug1t!QiL18!};RSKOD1yxi_ulzWMrB
zPzgpbWaZ^EfA-mxpU|LhIN(#W@)JOuCNSvY<UfK~BMY{G+0vhnn%ZmsQTYvvUOwaM
zpE!0#pD-Y1=@DG;zBg-DRY_?nDl9GkBSwrwU-?w+-vfvTCUL72rl)II{tzTM8`0;0
zhiQLQ9r5W4Qbc)d6Du@MN*Ra#uDlnR{_kZt+=U0@?J|8K7qvegU`0lmo94Yq<c~*x
zSM$GTuU?@eu$>PPv;O~R?nkPpIQdUH08?FIVA|?StMFL)cZEJCLuAjMGpE%Dvp;By
zUz_*wLqEaROClz6OXz{LkhAp7^LLgX(zrORJd_jRmaaVR%M1FTp3<v~SY~*KZq@N2
zzo0^9KoQK73QLBn>k0}gcxX;!O<rk@Q~^u|eF`#M3b4PQO@t+-^7Y2n98~)u2WQHW
zmPjQ@1|E}}+@pJ%89lcef;lSyZk96%!UO*`SaZ|lDfvJgV!TW<v5P=FL@Z8eSjjDr
zL<<tlFUoI{@CGn39)gpOCrYtW0+w-gNUg>okCp~O5FkLPq{X9guKW^*3;x|yz)L^A
z;Ao&r|FciGRz?#j{oI_S&|Sann{~>`9a1hC+cSO4xn0tPEdeAuR(|~$WT}{F7hQ|g
zU@(mF!4Q`CC15@ah7JR1snX|g=^IfjPKH}_$}q{n*+57|{FW2mW9-kyAp(md&@V6v
z^(#_*{R376B5G;?IOv2v52C=Ad3>P-6qNUii++)onUP@!L7SwHmkXn6!6k4&Y3@J<
zgxF&QokY~>0O{5Pr$<t*U66mlg8BFgNDd>;QT_YNi$6~<{0LLY=gpf}%~^en?|)Q(
z_gLM93%|gNdo2C6d23M)mHzQ33{TF<&epXV#BJn9ryzI|mh@TqIh(JF1BB{C9;-0n
zNy0UgqM}fF)MqUHC<^*C3#fl8fll*Gyx6$4wEmV`ZZ6^}azw`8op;=sfrCM0HWZ-@
zeYxR+f6JLfp}4?a8AMKWcg|=k1WKAH(+Y{J)_;PQSm`kja%V9_Vn)!T19XB5Pixn%
zsoS&(Guns^m(im~<E#{P0)-sI6xDe+VOUTDj(C7h=@SG_lG9`8ODbde5@+a(`UH%K
zJ*niuqkm4v$D`!Gycnqb+}nkE#vq3##`TUn@66z#A|!9=f4%f;&iIueUU90f*<g@#
zMJkv6h!G=NC@X-(Kla}7>;om>NTKv`Q>4ng^<xjfCD^ctm<6{}S0j@qnAmWk;U=1?
z(NzLYi$U(V=(vKYn7G_jgylmM^d-4rl{b$!E`8!!orjMEhW-i1AD@(+oka;4;?n14
z;HR8?Qi>7}IGeuNREt?{gt0$(^#KPwq|#5?Jn-bXXP=ePRzt$elcEz8Od(MK)BML$
zM(4eE->tIwf8x(hOg<SrSo{0vqYo>2dNR^k)KQPIKf!A7S|FnnCC9f8Zz_54*dNqQ
z+q3l#IXv^sGifIl9q-~Fb^2(x{=r_EI6%Pe-NdE4`E?sO6UEp+>*tJ&EPj+~mVOfV
zC=_RIASG!$^f5zB$}P)(S93ZdfSAB0;yot+>oBX9(Gr1lJR#k{LzbxgmtT5W8b9v1
z@&if|dgv23e&SpYP-FfdesG`+PYiv8N|fM=CTCa-eLM+VRFuZ@YZ_d=o(A&cQRy4~
z19a!~t!0_~7Xr#q<MIctsejiQ`ds=iAAS(Q*wLq-p3>4BennU-|9R(~CuK%aPz8)d
zbkp)nq(E6{Jh&V*ke^YE%g547&cxAl0q3G$&<<rg3<fo+|0K-J*EGAQ|D}sjADWye
zeb}84F|_E%zlUpih}xf(f61c7HBzlgf`C)2^(t9nVi$qyX+nM`FoMWU&_$Co3@94Y
zXR2rd_+3KZjsD`rOSoT_ix2x^a@5}N0g_GUzvX~;>yLUG$iH^&+S(oEm=I>{|Flu3
z**Y4u+~k3C&OTc|q*$yC`XAVW0QQ3qY=|dw*xM>KBP&BxL)}I(iMnifK=v*r0GtU#
zav7>d8kPTyGtVGTKoKkd=uxAw<&pOPc;Hpusx@qvEh*luA0A*ALlHVIeZp8Em%j3X
zM;wxa(~)Ins{lbR%(Tp4|9L0+$4Acw^wH*(@2Fpi(@RN*zY|XQNy>qJ`fy-cTqF7r
z4ku2>)W3B#x{yUAgX~%9Stgk<MAZwrD=xnrlO1sA9-iXWKOT~<{M_Hqa?-6^ckZ8U
zz=T~q#Oj}stT#5X-T)UgE$nTUnw25>&crSP*JJDtUxk^RybFCEOj3c<bQ#FtQKLp9
z&poN+Ard(IEZ8A~<ws=pi$<*c7J}I5JeWw+=qyT~FeXrLxZvND%Frh&IMFNBLHkqJ
zG<{%!jDSN<N?MmxT>8q1B#2L603@E2cTS&B9!yLiiKHJjYnGfK#`1sS&wiGC;>jnP
zLnj<(&WCfV(2rtL!cz=$$8)pvU1~06H^k&WBIpF4jT5HKMG1k3i3CCTc9p*1W=ct|
z-#dYk`d1u6B`$rV8vx+n5N{wq-+%6yczdSJf2>4uraUushoot;{t=$Y5;PqnxLf`h
zZlXvW|MBT#MNzm_Zf>}BZku46R&7Gq-XX}oxun?{{hjGwS!<TQ@YrnriyZs>!qpE^
z7o!LiQx#k^$_r-n>ApS^0`oHOi>p@ibX#>RR$^JGu|T3D3cf9KkkIIfC%;PPT^dlr
z;{T}rxhYp)d0_gGA#IW`yr6r_>#sjFi(~!7L2}Z66kZu7L6#(=B_C}7>1!%69LAdj
zR#-}AY{~?QsM1{!{D3Ejw0@rSrZh<i<r0d#3YPW<v<OdqdPwVMCJ$~sb@GtbQ=S^s
z_8Ht;w@$KqAu1nu4}bFU!EL5IJs9!0KQ*`w;M*L1WGnl{5aeag0+E9RC_mRPi9W43
zO5c!=sz4+|=+du?YnLu9!LhSeADXap$F#)DF72H;azsa-cdr6d1h4!7tV9r{D9eVF
zhdz>-{8#Y}8ggTF3TpI9QcZ6oh*_YN0@8@nOrsazjqQ)&hF!#SNw*?54TPZJC6+$(
z$sm?N4+CN7PnvWumNhDO*aSQ<dFqtxKImXHq#p{0ol&DlB~5>EdhQ3aXSa5VX<{pw
z1e5-zEt^fR!*R|&>#Wp+4nCMTO|qut|9rvcSOQ3XWc8%LFTgTJtl5lkgXPaY{Zy8&
zi5`sn*egPJ7>;6ho|*Pn^bAz4a5x-z^s&dX(=)LZp142&rv?WfLzsS@RJiA+JuCZA
z00aSX^pA2y1cdfvoIVO(y~OHYnGhhJz()`nFB4W=G@pI;dG%zR&dPZ5jh<NWfd?MU
z#L^T=A{RtO^IvHRcvP{%A1C*zYuf%WqzF{#3JDt)yYi|yjr?YI93fyb;9Trn5^!J=
zdo791h$bf|Cp2x^w4AoG3A2M!utR}~6DOu&sVSCH(rFoq;E+!ulK`PFkt#U6I$jmc
zf5tLBelheJ4#y}j7JV{xAo;aGjQH%c&uX4}^64_l&L2i3f|Djq%A$<`ldze$b`4)}
z%!q@`bWOtSkTh%{AJsq7;>%*{aM{O1Nn)ex$nxdOd76!JkpO0+gl5f})dq(|q~jD{
zGl&idBR@YBOqehsT@tYVf#<8mU%{T^*dL-r9x3oF*9y<HLekLn(npZUBo|jrQTlEW
zkr?{m4d6}FC)vMFn^tD&^PrK(AAdYMJv~Dj4ASS9^*=xQ=WOhwgwYaJ?6hgmmXQo_
zyYiDhPR9*n)@O>P|H`Yc?7*@<>YoyM_}{tx6Z`9Lyj}tJkuc)4ZPO;yu~R4W!W3}+
z^{;<nnP4n^rV(fIpYmtpz>%Ds>|j=Qwu4i@gIHb*ZnXUKKoy2%XX1zb(|9VlW~ZW|
z{KzPw&k)Lg+;PVxj~zEo2WAX?*iXyjhCyx>(Rt_J@04>dQYNwbpET({S;9{xq-UfB
zrcRxl6Faj`5(g4lKaU!f^5Tmx=FFKpyAA0Ajj$p<d8Rt)0)b6ja*kM*f4r!-I0Q?a
zU4}jM0qp7@r=eC80|S^fH%+)X9py$J5k`kE?x`1z{Y6Wwe}?h+OF<&p$q>~)bQZ|Y
z$)XPRmzf<%l*4KW9mHOm$*%r01SSg~-K9cObVOy@QNLU%w7RC{2MdH!3xfw6!v|XD
zwhCaM%piV&R;^m2jlk>><FJRKgtx}NXk0qh3QN+FhOsg7^M%0_AAE|FDnxiyhAlcm
zz;E<V`w(aBudco>GHu#(WmXQ>tIwcb#o;Un!be5q^=%U;rlZW5dX<8}8T2+CSfe+F
zzC5t~X&}FsKKuZSE&uo3ci(nv|Cq5Em@;*04rT>$rX5il%8sLUcv>>;aQ2+pZ5q<&
zlEhiF-fP2Cce~^C@n}lH6v5u8&V*YgVAIcN{r}Zhi?}S6&aHoeCp_!jS*>roZ6Z!b
z=fFeMQE05`bSB(1LH3ih_0OWki?LdOj%pMwx%n@_w*1GDzaf2r*Gr823=+%|$3x7}
z=9~Ht{b_@yY5Jm{_aGPAP3{#7G?K>BM}Hu26WR+hPP1V+4l6N(FhVqjenb7c5W66M
zCH4t^^|imt30tJY1EX%Z{stVxqdXDU>8GEWJZki4IYO4tVhHZ%$*BE_{g7wCq@`vA
zr%Z<Z^ueq$Nx+nF&_C)E=d@9ylBZAqTQ>H)Vm-zrmLL|L^E)ExsQlRSB>DUcE->{f
zAsy$ctFBBvX23C+Jtj$=H{N)oqNt<@50+R%{VSYpe}ICpWS$8m(m=TOM>=$nOX_C=
za=&Nn8JXSZz~0O^xTyRrv!h3!uH|C(+_v%TZ_>S!N=S!%2ZJF8ees-QhYd3`77aqM
z)CDK>KKI=7InO-vSFRvp5)o|K@@4Xo+}1xg-F#C9%OjoguYHzZ{QP2^OpPS?N&n9X
zCxiu>;IZ;!pcY+5ZU5L_9L)B@g>@AxAw+GW0+a5$zr@-<_jr7I$`sTa2O{4EN;M4N
zaAG(x>eNxm*a|}G4KMw23^u>=D!1`a`fRIixZwub7#K-K{xi-vBjxlnPL~SX$}cmr
zjp$Z><qNbM(3fy)Fp?%#exssB`EThfUW;AS*KGZ7>FerZ!<}|~i9`^POZ7|F3{NV*
zc$AcZZCd|8Ajk~`lWN!Gf8!1ImDIIHKZ;v-SccwsV+KFO(h;?r;|!3T6;A|9`m+P*
zL$Mu48=n)v#_Rl+CqOueDcG?6H;Eg`FGP^BmOfQu>pu@gQjOC0ls`=$WM3|jotYB?
zFZgALQd(f8k*dgPk(A<OYF`9>I_>`f8Iu|aZGZ4ilYZ4Nf7z1#KNBVL_w3m-{QPsz
z<@7(QA67Ham?F-5v)-@Z76^jGRa1QZGYR3u3<X3IG@_3HMMuWeFZB69kF|fnV*oUP
z1&dE#2@?zPe;4}~97ID?5Yn;qZT!Bwhjm%DAt=@(j46Lc<7}S5Xrv0OZ%az6BWY;~
z6ac*m7P)}4I<L%hATXn2`S$8lPU(<J0Kzcmc*g-7XpGfPKl*q}#h`(DXa_$4FrF(E
zPxwi@)Duo<7j3j8+ff-4kKp3zYAhw<B%x%7MjL{p2@pcz2Nd*4a@>p`cZM+B1hF!f
zPO64Wq`aZQY^?l1h?!&xKtuvBW~E^*)53ww%tUGCRY3^1Bn=yeY3#3&0I{f7m7o6f
zj0C<26B$b}f8w?BQ*@VM!hi{0_#$DkAOVx9)QEom#nom1cgNvq?^s6}YAm}%O>7_|
zvWWcfOE?k=eL{KVmlOmibDZic`ETi~%!u^RhhN}@n5zs)ZWyr9cqA)KOCN9Ik53;v
zr<nXgB2yU=Azci83Lq${ZrKBZh&2eFx8C}9<+<m~t76B9`FS83;g?=|snx=TUskVM
zw+0>TK%fiuXz1CiX9yj98K|hLmZOWwE#;RgO)2Y@^ylJ>5B7CPq#F74pEx-yU~Azv
zj1TGRv?rf@vUK+BIh>8B34w9JXA8LaolKkHfb-#;54qG%fbjBAHSGA~*jl*d52qN}
zrFepe^#Aqx>lIgCc}2_4ov<-CU=KU&@WdIfzuxA*|NU<jUZkA9efuSHvu~DvlG?I)
zOWpLBrn6xq9RyKLym<64YLh?(Yes%SO7(d1KT=<({VJ9s*?^rCTtS^b{rOKj1`ZsU
zd?@rr;)fn`NaC-5bA9>)lkVlGGx8+~Zk#ZoWzQabxgnd#O5p3&vzK(5sqZdbx`&|K
zEa6mDi81MjGjZZ=C546D^qD(v5FM9ulfH3Og^EYS{6|*sC~G&Ed2JaM#r<viOBLfT
z8JE^77pKM{=D-6FN|^QD>^24Xil3305ll)%Rxz(kEyl!7fGoJ;AVB;SM+gaw(kC#{
zk`?+J(T`_;pru+z3R&}kI~)ZPRDb&OBV_{z4NSsmw~3S=wvq7bYk!?K>48b5LI_HH
z@csu%Z@+yaUKEx7rI%jX5(hdYfA!^8HP{$Fa_~V1CU)!IJ<R%_ypg*{AANK?_hA!S
zDufIuw`<onbm4_RPrVQ?Bpe9LTa#DInUF17BnOT?_V}c>ZQIJ8tyB?aqSmg-Tf-MO
zqjZn`31SeG@*cH+OP_@4X#b)#;PBd?m4Cv7>(hJm=!G``07~aF5`_JPC5wO-9lC@k
zu>=6Ap+BVt$a=hdmTWC7q^Kxg|E#>~$}4JFzDSO`oH65Htrjf!q8b|<NBZ_XB1ujq
zB)iCee%+rw{Y5HA^MP1|fq--AWtZZE3lxU`>Z+Q^)G1SV(oNIy3l2atNu2uU<B#Xz
zK&yf}4A_KN9;B{-aHXXsk@w$!A3TtSD1G}N7$MBbC!LgX|NZyNbO<VvSxFi7KjL&n
zzJK_kysVMF#Nh<dZSTDEj%Gf9c{mOey7W=vZoJ`!jFYguo%!Dd%k8jd7^Zd@{P?u|
z<Wo=brJ9^ECI2IDzy0s3d7sRyM*YmAc^$qSzx2w>xnC~)qGk<d+~5cvr(@?1A(nsa
z&xB%)P1vid*dPj?c=->+fw^-~KO6hcz|6eq)2FxM(!i~#AL>y*GVxQWpFfyA2ZMVm
z{d(-LxCXO$IT%5m4m*BW^2`}CTl4FFGCJ@$1wGueXK!784e{wHzgfCVfmD^e;|Uvk
zCr!Hlfouj+SV}Ebg?Z+Fl^=chQ9Dhf_^!G3nxc2#d6)Hclli|h`xibG9RySCr<`(1
z^1b)nn<ey>Az{bnPiM$H`-9nS$r_VVfZOl5qxjWVUd5~jMaDR~dgO^@Kky(%35Yi;
zzh;ltziI(UNRJ{5{B8R5ic7|gZJCRKMIt!pzylNBfB%EFoAWo<XJ=(QIBgb0kVI5z
z5=p%PLVRQ*Myrnu;%6SvUJyvaEK7Xy&^O>@A0;#5y#4mu6`y?aX^R0^63LVY_UR2f
ze5uu!Uwl=aw{~?c2VgpN?iA_?JLG2hWTmPS-&l!NkO}=jT8oz0YpzX*bs>H&mMvdV
zvnFqK9rh)x!xHkq(4j+<xp%3d@6g8Au95mMhT*i9EduS@w<DgG=U;GM%jL_K*I))(
z&4vx%)MM{noPa(wg?McFTf250>eW0pM8G3TgBSi?l%I(jBxq!R_+W!U#~vI2;TsM#
z5aCA*yh$=?5KE9dp<aD5i!oL$btr1L-+tS6Y~{h3PpY4`?Lrrve}2mg&p$u)>t)Mp
z^RNVR^Onsu$ykAK?2sWTSgMAWLhJvvd6WyY)jY15{5N^A>+(;TGPQinIb&Le6WCk?
zu${`dmV*WlN?g8tS#3w`>3qcDeG}Oa7Ucjt^^Mw(h9*K<`=kBLoA+@l_g!Xx1+&!>
zaEMRt7qFkTYq_+SdzW`c{n0bb1DyDb)fK=I+x~IzT(zh2v;LomLE}?#8u+?(>uON1
zCLV%Q>{Z9m5*jd^fXNR`NM<v;q5Q(Qc2NY5HcN0`V(EJfM)LpPsGmQX_emAxlBIfm
z`mq1}O72%*ep#KDmxsOO0@y3IW2k4Z-U;dHY1040wlY9NDM$gNNCpn|Xf?`s<?-m>
zGK@2(AAjue+@(tv*Q{E-S~i91+O;b-|L+q{z%nApi-{*JX_}r({@1QsU&{|$3>|jd
zu;kZg%xH}Rswyx`E_len2PgLK-CHMJD1Gh!kp((Rq{te{|DXSSRB`y>hsi#-n9dt~
z>2K3p@g&i01=}!R66OaMv_C%^eBw!Q2Htx6t*SBe&aFK9m;oXa>#>(!p5E%qFPZOa
z@Ie#xMyHMmlJ9K4kgYgG1lS~xa9905Gj(d&d1J=3!1q|m|8dybg$MPmShljJeW&(O
zJ7hBa2*r6SL;%Tf<IgHva8u$K{Wm8+6E{e}5434Ly7$BZIqv&s1ahEHsr7$X9G>%+
zC!WX=WwI9K)=B94PrP0F;Zhex>iN1%2;9W#g^na4cUFGxH)vI&StQ)T%%k~F{^-2=
zhyPp4|MAD4ROJ^G;6TgPD9~U<)E2=h@MZPyzlT*5z}y`DlW}mz{gWQZ(ng)aS!N(Q
zaCPh6Ej)Mbf7+5k#u4AO<I#_L_Z@vF^vF-@l!Za?1Jo`53}KM#nv$QZw;n*h&SGE!
z<%k~i>w0uc_|M!A+la;xM83vfdu`Dy^y^3;kE9hCJakAR%5(xgD5P)xW^*k*BGh;8
z)H!VXU!4ELT;ZPF*f(1~lt@wvEqLPFACn0cK*=N`VYK=Br=k8SkF`JH7o-#^F*i>i
zfCQzS<beNVN!ovT66P%qfo?YciHCV6$rK^|{}U(EIJ~SFE<{*L3I41V36on3t83EJ
z6BAk6@a36q<;qe!&=>f6S&@A87Ig_?LIffOILL!Ox{v>pU-|K%f{K9ya&<|VM-`$E
z!;mlmczqXRF0d{jWoTa+6T_D$=8DNwLc#!uN*P1~rqP=bN}mOd8zayzRVHV=owvrC
zikKy(m0xW^C?QjYErk(WmSpr!cvM<MB~D^^;j;;&&j!hz#6&h3<YWbD<yXS`g#2(N
zF}CeQ7B4BTy7T`n+<McEhh(RxB}#?mrC(N7U7xqQtmd%8vXYcOnP74m(ggX~{5M>J
zqJF8xvlImigm*QqsucmFq7pI8I6<n<>SYWeqtL<xE)s8o2}LJyumn-P#MziA4Of1J
zR|58nvLN-)pK$Yp;=Av<J7dU@Avmovf|*ze*oUWI;*m%8<z5*02NlsjiA!p$f5ae;
z)KvE*L>HLy)RY~gPaB<#sl+lM#RTo!cMKiSzJr`+%KXQGLU{J<h%^{P!yirutH<6{
zH9hf_UT`D$y$@#b1zK>kBXsATcVPZMhytFS4LuM+;$8YYt@GAfZY_G~p@*_D14CXM
za&lV*Px$FivCB6|k)9yMNxQ|x^|#)7OELBx(?H=wq!vgEO5_xib4r8|BASw4<WW2p
zCu&R{Y=NAEGFU?4RZbK!H<fm7yz#oCzrXg+R;lRJ6Zg2W7pHzY@1v@@b3d}oMTVlY
z-xHgZD_=+~`6J8#rF1$1Lx&8N0|_i~-g9$Xm2#kuMA=T#G3#`a3?39AgM~L-gfn(z
zq(nwff_3x1vZ{hhRtm8pZVo&Cq|Z0dHm%#B2SYRwoF=}p7N^-odZDw+QYCMwq|!is
z0Y{+GF7C>Zr~WgVa?5{w`$LC{^&iti>54>U5u(`iICA}U*B8I`k5^lzV#XPzym;)z
zEkFKbUe!k*&6Ppr7hZg!oP#Srg}qq%ojP<3ckG~@XtG8d668q#;hecuPd@dO{mMz=
zbf^(Y->{9IXHRTq+#4^+*8T)a@{dba%Om5jxtb?!F||n;ul`|0tM+f{lNm#ZC|&w|
zFpf-!J9g->Bn(p8FY+#Xf&f&RLqmoRk&d}U3V#6yO9IL;(8t-c=&(j2x7>1T@k0+j
zl+~&Y$`|P8<m85a`qLA1nXK?f?jlZ6QAyn`x1fAs16wixMkqe{!ApPJ;7MHGONYRj
zGv6rZpdjNECZ7B|%l}A#FP0ZxcwtMUN<og9L>1)0<_2j9D<**S=@JulVtE|<1BjM?
zmIn$UNst}`FT}zh9oj-MKzIoeaH?x?$WTIJ;1CS%ar1nprDH}>!UrCBVEfl!e{Emb
zB@r&b7m1*LF1p9m&!nG#k5)(aJ2J5!egY!-18Bj?vMRL6i-ZUv0aPE6PM$ou?6lKP
zZP5`2mXHc(r=hM6b!gB1ZnRU*J<S}{&jyJIj2To#)2973m++K<2RNO7{`opkO++aF
z71&+@v#>Zgi8WZPYNT0Yq&U(?(g05x7ei$Xi7?REA0OiBAIp-7!>xY=MwBSTEe%0y
zuo9lm#?d46H4I(^a8~NB(D&v)@>6;A(C0@#`G|rn;9(q~LCNT1=-W^xjaUD2k69c_
zu@xuuWq0h<0s56{%4yrW9hwiI#Q!?H)K_4(ORqlo$OAE8M?2|%@byUhU&@kE1vw*^
zmQ(dLDt|XmKtBPeDdW^|Y&0Hlc(Q3f^b`8^M?ZlY6%nZ+_=R7haIuQ~s7qNVDmW7K
z?$r~64?SI|s48)?J(la?q-k@+x2r!xDBAxazTUliC14N(bsFiD6lo~=^76`ho>+}Q
zafoG%0?|vKms5ReB)>^6^aTe}dhKtpw9EMTW9hr1GbJeo9lRvUDH_6>L5O``%VeOB
zm}SzxG6dWKk*iNn<Zpmq%v3sZ2K{nB*zx19E~2Osp)wIGL+JD>USUdn!uu}DzZv_;
z{`PnOSA6Fk|Cf<~Q5GueK<ovFfjS+~Cn+=r+8~j`rt6;x6K*cL`|i6kaLRHr<qw6z
z0rWAGj_lvp<uodaWnFU-h>2VjE~90TpExj!p0mLm3_>Mxk2cj1A`s6HPWMf^Z~N-i
zdHQ9U2;dsaPk2P&XB5Y$UC#fTZn~-H?%&;&#Y5F7KlhdH*SB91_MIg;kJIv}_94N_
z3MDi2G3Z<TySwhrJRUQ^B~zi;gAO?;0V`spff4JL{6`X`@!B6W6}a`*n~SIY_1Rp`
zXk{D+89SYK9@;@VrC(W5S-)`M!kPitKbP{leI)Xru95stKlRj(kt0W@vc1qn9%wIc
zNKpF&u<eQPgFP@icV?f0{ZykyAcwng!cE2Z+;ey4;K4(ZS^uD}<$i`}zcBNO&Lh9p
z{}Rf?q8}o`N2vP$_uJo=+;J!DFah5_kiQ&M?bGKV9n^&~xWa@l7t+5(Jo<o4Dm)k}
zf>@O<RMqRDF94cmr};m4=-{ND-T8qXB$ydS5D^~q>G0t~8Z3E0Jo5w}#n}&M+d$Qm
zQKe`(jYD6H7$XEPtO6AA;LU&HQ#wM3-YCXs9D&F!Vbx0?A*0arNgw9lZ@*oB;m<E<
zNqs9=z?t>#JC!xny1h(u^wCxWkDxNhqwSBVi$oajp`Vx}-BP7*_~QdX!4Plq{zZQH
zs3Alk&UyqbLQGPPW513{_rCu(q_6g;{U6GPG*L2w27xRx;DhZS`#&8zbpR#93@Fh4
z_)+v%zx>tK6)RWRKAq)_;u4zA>ZK0>U*JHcF=NgtU^`J<yv@MG)_)2~`oPg3|54@x
znDvi2@#KY);f^2LKYB<-oDywJU%(Ya;BhfzY%;k^Ts-=SwKU@DUs3;WuA&p=POhGE
zWVEErGm-*E3JWV_1W2SM&xl#EyqGUP)JvogGxti0t7TsTRWyzVFRqHz;^mUyOhCZ<
zA6i`e!r#_l21u=BiDaEdJGGeTIrqc-^7|iL!k0c^j_R$lQf7fNk1bCQKB+`%YuJGT
zVhQF~5qF;_30AU7fb{WiWR(X8leCmS#L$Cn(IVK=gkI9&FH%`W+U`HTxCsqSfNOQN
znV||`rm*sh$+0p+82OWR@q$&*BA9UjNANQU4^`EuwS_DmAwP6t`5}PFUqyZd1=7P)
zT_y9A01bqKN3MaTONwi*pYVCXl&LF9{_{~mIR<8H{xh$jV(PS2+i$vgeqniKEk;K)
z0aFlLad8b_HWjflLO*|W5u{NPOlH(njk#h>E+`nT>2^u~MpnbOFk|Tv6My!Zcq2Q^
zfdLH0i9@Wv5U<0#UiuXk6=FSPs$BNDP;C=d1>iw31@)I-e#N%iZ@;~GGiJh&fI9Qu
zz{CLFjzPFLXU?c##|DWlPs&*X`W00b5p)a+v3d0NFBdMX-i#Suy4McqYZC{4%oY$r
zjOZW(Za6{C3~B|jIsL}ERotjpsYJNn%hz8o<4i*d!v1{N&xc7H%a7T6wK#C0;KR9d
zDmjZ!(MRcXp#IZ&^Qz7`V{`$(UKs$~T-k`3goIeR)g?m9cF35HOIgy!(Z4~)b|J#S
zF7ZHq924d0pU9Pj6Ir)mW8GbM-7TlYqDdkrIC$h&T-r%mLa)4nC(o+<62#KLKLQKu
z2$e2?vd0|9;Q;mvxhSf<3iTLa0iye#2p5JYK_c`jA+uOC@RwI2jXEiRmY+OqwvDf?
zg*+t{U$JZX6`l0?#rd_@UMs)i^2@ei*{gt)&!XZI;ECFwSAIl0<rpYXGEw_O0Q481
zzG_9pqNM_^5|trqA2xEbrz6Q4oZ<;!qw!k2w3bLJT)0%`>Z^Z=B`u_^@?(}((e>9~
zU$ky5H^)~5yt24k{eQFRo4T7(9xlJ)imi+yef|`W6W}bVS6+U(ocqjZFfbVVxB8D@
zfOjTN2R`@Qa|%|jS_QbM{>hB_k$;ha`&3%`5+n=-BGs75)sVgsCPscNi&YXP|E*+z
z1@k0lU9A3PCW1yu{-b<VW4TP>+}U#~Ad|end+m>d?ennI{>(E*7k>Q7$7a^8Py-Ro
z|8ZEpn#kEA5EBEinAP@_VNPVFyp7~Xn9%1PKhHH<|NZmzf4VcRB+r25b<FZ5IwW%G
zGdT&EtEg4>rIN6y{3e~G7IjN1lE)7LsLRBrflKnAgA}wsy2XpWs^JFu+qP{*{(!zG
z|4Z<Z;ri>Z+ctUf6rFV<%*5t@L4HB~WtU&RZ6fODd~S(Ak`3q+FTNnxzxCEz<u~7a
zGhhDccqOu!{73RYC1zV;ucLg{&tIW_-m)bhGx<;>dh*}Y&w>MZC`<%<s8)|1H@0wv
z*r@~|l-xir+)@5(uDIgLtsi5Si<Q5k9HNQZfk8cFDIz)}GlH6AfXYLk^`8mEO`*zn
zlnGH#WCHp<*J%C&oQ~JH@*`MPXn;_+Ggo#>pIlh|?@(T1=vQi|8hGT3K2gS{zoQc7
z$rwmr+hvkhzEw8XrDIsHzQTHS4R+w-M;z{rx~}%`s8_MC<+dPKDj5Bjlx&xeID$2f
z{NDCQ<W(4ts$%I2KSqc2V|GW~WvI(1PQ1N%3v5yahX97YZGSl9W5$~^DzJ2x%Nk?k
z$49yPmtJChxL!^cru>?-$_(?LZS|XPzFB_GIb#Y|tz5~5n~}_G{^%l@5gmEul~;DG
zUAGo<;;1(KA+5Lm;fJ%CIJNfNbI#hja@9)q(cy#|@Wtl8l4xFjBzEa*=9y;=ji9Z>
z7bYtQtzRQZk(C0IOF8kBe;$fsX08bUmeki%F1DTV?4P(O*NmCAy;#Y;=M*_)0-2ch
z2N5y)|2Fc&{wglN^2)7S3i4rJQTwMnCEJT5cTAjEJZJXY3afu<r&SHSy7UVQ@}-|S
z@iy8IwkTi>c$XZ(RfIqo?T7h)(@nQ<a8_{OPAQ?lDE*~Nm)6{J+pWbVMaAGNHvhL3
z7uAoyW_-~z&pcBO1fq80H`Ex!%n(<}zL<H~!TydgX6R`IA(g%+p~cxShxIetf6nkV
zAE~7LH_ZPs^q*NjPq^u395xfBuWZOQvaP779s>kLti!i#DbPUzL|s)_lwGt&Q949K
zK!l+i0ZFN$OHx3(r9nVCM?$*0JETEUYUu6`>24T$hM76@pXWKxx#NP1{eAnJz1Moz
z8{AYC49Q3h``bVcxrSW%3C+ZK<c9~x+ZN{?HDFDW-+OWzFN~Xb`RuvLR73aWCe^8n
zMyO*sLOrV>P5kBELO)gXBglJq>&)P+p8V`3>{@am3Aisjd}%eOkpKMG%SWOG3LP4C
zgP*?lC{=xVa@5(PQj@VjKKylGflGJyfi?nh4`Hirv8TAN)_TtPSseTZ#<`=`w*A*-
z|G3ioH|ay1QjtABQsJjT7kTGeJHxZo&OTxsr!kQKHzNM%rv=2zpYE)u6}}0-d@<PF
z!qxJ%VmQJppH3@SDWZ?+JJc+TR7VlON3*zt)`L+baM{Y%1XKe?aL#)2se<i84~-#<
zBb?-0C{}Fuh^qR?$fsu$$;vW}SVg<SiAx_PwbY?Tz3$Ohb1Z0krQS(w@z}b4q-Y_Q
zhXSXdL!YJ@?RROO5QI;1@sI$G!k?TcP8OCj5Nd?VHbLp~{Taq%(b=Dycq)}5i@0IC
zkflrc-BFoHTdvhc_qA615+?;-iKwXON)h}@=1!vTOGnJvSS74BKo5u~gipO-ddLxq
zXB#Wun;4mC6E->XQE(3Nl8Q8l+<E*YHxJ21+NFJ}$7~*HDxUPM=#S)#Qyg2t3vI)n
zRxP$6kZ>IOKIKqrj7!Ue$k1nuRmAcN*jp`+b55amWm|7Kdh+?~6z#rNuS|IGlTNM|
zsTvK%Irr4a=WlJVZ5%N%{rdK5dPqXu5PoeCK8O&hb#wn(!2a0+Z~SSb0=WLitKJoX
zZO7vjdjRy}Zau&+x}n7|Z--_0zvWjP_!7jGqGB5DP5sAaX8;<V$-h|LbL8XJxN?t{
zDI40e*4zZz&L0~%<9qZHq5(hLpU<+5&90=F*E$`|Shy{PhRk=m`9zEL^FGS!Rl}zp
z!*>utd9k`bB<uyx>{kbd$y@`5+P!icln1H!@mkKBRwEEsD|R!513ULd{=W1C4GxQ9
zOC+DU1?}P~h1e6zbR&yDQPd5$*q2g&;esiFl=c#yik^J!Lm65PTivl6ZD#q?($k5U
zSy>1Ct0-)*UK@`}P}8qFUIRW0P);m;d)yYYHBh|2{ZnH%^;oJy3k)s{RXGJxQly%*
zIIx}f4~U~Q0K=&~tP-z(i}|bFI(nS8&0h>5u-zKx$#`MUy>hKEsDB3-j)J~_+i0`8
zsGT^*7o-qy_`T8K%p(?7SuXQZnS_FbRZI((Qw8EG<a`drUh}!Z+iMuXt})8izU~j?
zv~@p?3sSig@*8R~ZUi<QhTO$Q{qZ(ipS@bfXnnMvk?|DzXvL7`t+k8%wqEL>zx_t}
zZKb}WOb0Y}(N(wp4NZTu00dw!TU+N}%XD|tYpRc3gvwUUJmGg(*J-n5fMP#<vEQ?a
z@Lz2@>oII|!*A+=e7pG+D6<;jd<+lKV?U}$>@|yGt$d1O{En<}Xyf0iHf#;iYyM6=
z_C`d8=;p|7(Pa2yp{i1QXAx-P)O@q?#xHM!4W8>R3v|$H#<BWlncu-&9_oJ_W$=Ek
z@oS^@p}xk=F&O>px0|y?0h%fcy-hIg+q@X#nAmEv4b$%xLJpm)!o6FL_Q*<P-G+6T
z8?A*YFp-USYO>FLtQy`ohg_oL!bjKrD0OCsca!bBubcLa7~5pnGp#g1`)jh?TmQOR
z3?VbQWNWX;&wzk($(OIied1p*uCswhSg<oHL7vodx$7M?q+bm;XNN6svc0SaQSr1V
z>JsRURc-DnKpxTAqxm*DvwNzJ7D?J#qCNAyk>n+)xkmjX04IcY&F4=3Fd!XP<)V-I
zwc1GQ`lXn!`K3kkA%#)Z^PLp%S|g~**zeN6TT1l7zdJ~;wn|lWg|kdRsU%MIYG4)!
zHSO+{dmq2_kwcUVfcdcXiY+^3MhQ8(X}X`@zWNt&AMzvyhZ`f8J}05ug*&WLz8aet
zCvfalEc=C;M4;x3z^N8@8Q5N-CX>%9qPi85TBbwPC#tze%wlKoeeveFqQ>;5!5NM#
z2$6F-2{tAka=O|!d-*W22e|bS?gUy`TAF3a4E^;O?W_LhpocpeJ9hP+pf$+^@5ZeQ
zK~2HGqtHgA?wLFpL00uXZOREN_g5$mTKSZ$glsep#V^-cy1-NJ935XMFI|P|bYzA4
zbi7v5;fU>Yk3c@kVERiB>WCIU>5q(L+weZfgvc0wulm3-n;!OQS)qHB^Ca2%X1c2O
zjSQ-xXnC`B>SE<MF!(jIa3e#EJ5Eb*lm-4eBr+G-36FFLS3Z3SLy9eJa1Xvu3{x(5
z(LocO@#yCCH)=8I%&I<JMaC{6YC85aQnU@cNG#R=%mg-GVg8>N0KTC4gmClb=r7}y
z0M4Yy3nL^5aGFaZmSv2rpz^$31#0zplp`@r>;hOcN`6TBPakrAc=FmhxIQ?U`LvSR
z#9m-0{&2?>kr3$!vi-O*jEM3p`<i(Ox;TQShH^zwdW1KSf1L6dNdLts2fycpHJQQQ
z_&+u`QY-h>ARCGx$BUryU^t5IBU|avn&LRFH3!zn$;sj|*%bGg>!^2!uVf^u3KdV`
z1^RKG0szbe55{;m!y&unEIL5V0FYL}3&o#)mJM!DnJ(fkjB$TPw73Cz?NJj3BL}>f
zNmI{vySHXHuAzjXK}*fu&IH1|Y~--ZVKJt?J-1uFMmIr*NS_z!{{jckpIz>y_AjZe
ze~WTY#ojvrHs(z<gAN0#f=~SW_K-<LbO|o?DEIrPMIh^6->7n;4sj-Oa@_!mYOs-t
z{0`>(56Zf&-&j-_1;nW+p|=}3sHa<b%>cSs$$gV$+v<5mOTN_0{wt%#HBPns8;ADh
zY7MAL?CEZ>%6>cwO?8bXo7Gma_mqUD<ZFNx=mZqq^^E54U)}sg#Fcmd-PvliwO;)X
zjDK#6N5hHiwEg<c^PIY^eJagJi6PGPqf`+1$?k6|G<KH9q44MMk0@t{H4qYFEyY)F
zya@7t47GvX<{BgG*zM$G{c3So`(cQ1_;Yl*8&S!-_BotsXT(#fTp?`GR}~8U`qR(v
zU|)PL(t&&Kx2t6|9~Uvlu^nE;5lPU5T>TMNWNwP40N-=v+EPQv5k=K01KfpJE#=Md
zOU%*YpkWnxOVVK{wldn7Is<O5y&ATb=BPnzv|Majk)FbK+q7I{IjuHOR@?LL3^?Fz
zEyGJ!-OHueqijFiSO%{|e0o`GhYvLM9B~scNJW*W0Ie<Q&Uf~V`Ww}Tp;KWRDk@tu
z?Ah-roT+?Hr@z#fhF~cNEpP03FkGI1EK8R@p5N>&x;`RzE|9g9Xm4|DHIe?7$Z!A1
zuD=hfnx><v?7F*cjZP-)*5PVvRQnqm>XNXAQ4nU&#2U}u9hkv$j*&$gD&L)ZF1Lmk
z4MFD6e}uqq9eRchZWM&d*jXamNpF7)y`kTgosAVm=#-rkA00b@Q*&QRWoK$6g%ghH
z{H<6FhThgx018P(F2Hw$<WZ6PKtITCa*`U(HhwV@lL;I@*Nob&+3h3igHBX##3+ye
zp`fI)zg%4&M#A=WZY+%(onjaSI04ly`FT$pb`=`?{Sp+TT%PPIZ`4UC;;uWf=l=Y1
zM-I(}6#MgQThcYR+suR^S-DO{@**<5k7B7=uOUZmICVIX{jTrF#*Njp9A{-f@xcI5
zT{?o-W8}Ls%F2GbkECB6jKSYSvy&Sz5A}OrB|@$N<pPSgXB)OXeE0DBr_U(`c&5nT
zT~6(3Ib2T<->RUzrEbc~U5_{Qsuf0AVut*KmhsmoK>ZH+wY+py3rX%T41Z<%qYE(A
z|H;lpVLYD2ZXlp=!UaZlQucQb3iE$9?!nC1kv?Rle1xbN_}wj(LZEWH?xtesv<Ed5
z)t!&z?6g*SLTn8Y63LL+cJDkvFXRl6=F6!p|7x+IPj{1!$frA13iL91IMkR8qk$4w
za7B8`|F)Z|+U*}8Q!eT0aT=JcAj2|}XFA08lCw#@ahg9yd>f6v%X4YxtcIp;($O^R
z#qvCDlnI1!kBF#85inCo7s8coJv}hU+CQLJ$bNY<oN6n51fF4do0;N~E0%1+M=PdP
zBH*fhi*o3pO#kGv6JyjdL)_}Vr)Ovx=$zM0x7_SdQLX={s0Am;*W%?bt@pdD<~QLA
zGS9StNI#edo4Q_pl8=v7m%lC|l|%pQEEpLdzGR@U>K;mMiNoQi!k|Lz^RR^ybKafu
zsxX8`HBmmA4sHA%D4F^)EKjkO3Q`X>Mn2wxH;@t?CamD>MWo172?&V@CqFt`@(o6Z
zeea<4&sx_(4)qeIs$}xx4?2Bjr<r5ns_}=TGt};ErGnw$r!BvQ{gU0%j1ICk_xgD#
z{7zeQ`yTiNovcBE@GdrTCz0)zmz&*!nknNQDL!S)V8=6XRqp+j=ueFzTLJrjagIrn
zkf!dgwa&O!&eC&f971ZJS4!XcP8B%e+|iofg6Eo8GH9qYZ=g5%==>UL^Evb2Aj-#&
zJg=W0kzIUNB*1J=)m+>o)m$(Iie*}LBK%<WO|^q(lVrDqf1U~<xF~#_4P_y5;N<@O
zd!CHqk5{E-SHUf<^Il$!w}MrVq3mE|B<u{pikIS`3O7|YlD%0@dptwEmE|gE?goa>
zcEiJm?AG8PKmJISm2qT6Q-I5i>wd_bWuRm;SxKdy5yOvgRqzvh^CUMbD@&X(>ux;8
z+f?G2%AsMjAB!LC9tQA7_FjM<;GC=EQ`P(THOTN@L4<bcdDCE78-??6^-bcEf6K((
z6453lwj`Igu>tN#PMgqdXfw@+YK*NJTCdqD$DtM*`}XL~devM-webh&{n;cZ$RED5
z2=<2+as=|@=j^XIe1_jGo*9Rg|E4>synTQZ)&UkREB&7kq`an4eHS2Ex2=0198tP~
zyn*HVBWLfZpAgzX{w1ra*00WEkxw-kP?1pQu=#hh^PQZwF8mkmwY_v6&^?8P=hRA(
zZ38sVL>|gZ4kXff`;HV=ou*WvUz99gUCTP@?hUmS-J)6zEQbfEb{phO^|s4wClv@r
z1du%3)@&fGac$py0mGBUUR21pU<C2cT#1WRsCS^2*hmFNGI_sR4R9OEmZi1az6Yb0
z>(Fxng2Gkx1s>pzU}W?__XP+BcRZ8mKLgp3ngNV0E{JDdn6K0XkvgQh+g{EGa-=)I
z=5*4lt5dUEOw;Oc_dT8SI^x#XaS^b7_!LEuA1MAo%+DBA)T9?|{<o}Y)|na*{7#PT
z<x<cFLXza6nKQ*78I&A+*WpPD_+Z8*tMG$ID3SFgDHzF+p=SQ^7y`>J@z3`|tr(2V
zmqEQu)L%9#)&%}YsZ6}thLIvhFua)mhDqC?&*T9u_TN}Gzx2KN1?czNyDJha9xhH^
zxd!G)<Lhv#*{8*^L`Q9$DuvBv=a%{n4zDr!t2|3C59~h*%J2RyeY!oW_~?~fjtYR+
z!EhLA27;d+Z)3|ii$(I}TVhD+qkGr>Tl=6RNcrdz23X0ygc%oL>is&hZgne}%R%ky
z1!z{V!SEKg(bPHR|7!zz2ix#RuHMzbuLx~E7Pls`&Wik*__+u|F7@9NY6rk(i02ei
z)=3A*AY;<PqS+WVbe<)KNng7koXtBksZUJPl<A#)o4DQ;zT!8?B`cgLy*Sxu2HKc4
za2|8G7=euuPtd{tT~b4)ERjEq4H_3Qa{&@3ZOXM6lLk_G_P`OT^HJ;n|K%m#7R*Jj
zi#0D^+=JnW=Koz`32e#$DclrV7n@TnmwQ>nlhnxCOM<NI7u<;v^F2zCGbpGbz#B;H
z;S1x>RedRa$(&?XY^|uEMv<+9rEom!sE9<hJNS2~o+i9}Y;wau043D3-6wR5h#bz*
zfych*{#b0+{GDc4&bPaN^TU@*;H#xtQ$JKhXvbI6!)N%wt8-Df$H@X8?`B#+_&3w*
zl5rHP0_jhJzr8wzN?w-!p}m<%vTyd~+0f)3MohhbZ%8Yugwp%_LZ59d_N>NmwW*s9
zdaE2P694q{1bw_FoqO1utN|(gwP||lwWME9`k2BGMvz#@qsy%MRzL?)Ki@~#hrNs7
zEhhTL@3TVE*O_1w|62%(By^_<Tg5ng3B|@{hpiZmSqWD(A?VnUy|I9te{Z2-c{}xJ
z-bRexB_E$4lZe-6lS|y9Gf2Btf;*QNr<l(k^&uyD&F@q(iEW+`|DA2OU={&(shn+^
zUqf$*23m?w<aCix2<(xw_$PzpS}Yvi``dJ5?bP%=na38b(eVcFQwgTYG4tHv5dF)z
zv7R7&m%k)rVl4DEMpl@_<g9|?n%p0|O2MC@z@0IkFEyReV^>zE+v9dUJa-Zu27zK^
zq`$NJXb|Bi=78SD1e-Cly8|cvHcMrE4Cu&xGD20%OBzz+|5)KVW1QXGih=Hzyo+3&
z(*8>zYc==oz27CehtYb*$|7~@JifwaZ1lOm4X98R*wO!RwKK~sMFsIgWm7yR1SJg!
zj;o94xOr~Vy8=@-h7`k@U&^?i<o^5jwVT*qNQC9kgz5RxLr64*?ZH@1?=z>GRXbDz
z`70Zh51k@n()F__hEgbG#od}zQAHkSJGgk|_GDp^!=R=1UC;!{Z9LTSjFSupBZSh!
zV1|0rW+PwfH~bmqi^K$tz|79alJ94&jc)&0ifxxw#Kv#nun2AU#<C;*9<|W@5q4{}
z;3XtJ@pq+*e`UlllZop|QDgUeQ4jMx$H^P;l955sU10M1@q9&N?j?E^(&H<_vE5nH
z`(T2y_Y^4tJ9V)DgAa1_N*<fwlm2ihL)MRxVU}zmcY?-?DKRBV$A1lV?rSS<ZWo=`
zDtm+1Vr7!6y?RS0cX}}M@Y7)kXyC}IC<-}0fAnPEYN>2A&QhB71<Q+Bz3|S%af*q9
zPy6pm(|R%JvK#YPEQPzl>uy$7RyvJR6_(XRh=3fhS?l{{Dew~w%VsdW>SE1?nt;c7
z)`*`3SgMp@OG7Rvh1Tao0QDZ}-V5i7np6Z~tHh<;bBUXBa-hrpSOlNl!koecP1pWb
zb0cWKxfyv29s=e1Hy}?=jQMIgM{?6T4SeB|ow}K12Pej>vR`8!A~z8F7H2!c!s*ru
z+(S$bfodN0Dm)Y4a{qi!w_4qHgZ##?$07%+FzVaDlncar=$*t*W)~UL9GacWy*l2_
z)<Hu%e@oz&**subM-Ivs^vm6S8T2mR=VJ-zZ{xfMQ&o~d52Jo65bf&kfl>38Ld7B|
zA1e<|S7JF1ggCIwbGhb}P*jlQwYiKdZIbtz98r{dT|5x$QHGV<j7aY|7u6|+{x>_B
zQ!mY4q2=ZdH}`F@vKmfcm?t}2wVkWi-UFNV1UJmeWiQaOu~GOr7OS?7MXF>Ancp3A
zPv{<G&2OV}ycOVZR0H8RVSp$89Pf(z&I2BN5^&(UIgIm>qdwiEH70u{G*)ci`ry=M
z;yd^E(-xFN-VWgNrCC0YDG5F6PAoH0%k?i5B8A^T%DnBPi@0dJUmr_)TPFBavF>%*
z9okf5)L4E#xQ?iQu6B})vMp!8Rj&QUV!~^#i@E|fN}?2Y#z9rWywa;6{%DvZjI;*P
z+_SUp`xyGp9yu7EhkWLVaaIkt*#8#l?{VNbtNJjE&GKiUKN0so$c~U)Wa$%%CHn;k
zy(}CFZ&qbr{$ugk5YG`7k0?_+Vo`5A^bUL9W(ra=G2nH)%X<=7bJfs8BH)P%<|hkP
zZj)ldRh89EDgVwJp|L@&smAVJ$2O(Ww(&_(&SHtkQ%9#fRXjV+nNlKv+pc=}PEF@K
zfUm^3IcP3OK;CN_kB#+1c`qg$0&sXN{eF49hm2o9`XgX>$PN~y$u4N~lJCok?5f}&
zMiVqj$EP}%vTm|y2{m*w8zuU{_~)wB%J$O=?XqlmXza?rz9~9Xybwpn7t8Ie05L1y
zP8zXdf~IhTSTpC5_yYgbX3DkLdgNtuP;n$>Y1nC!XRHL&t8!36L5cjLZ21V85vb~2
zWw&*U(|i$p&2uMOriv>wvNtJh=glXNu}>VbS-b@=>$r%n$VFgaxcYlm{DiOt=4|Hk
zL2ZQh-6?tJ>7P-(9AC&VOTGyiqXFk%4!DuIBIC}zHzM|(m#rc{#sR(0ZlD1X+X9g;
z#X4#_5eyWC9%MP255Aqq<s8kkPfxUe?{;j%;vN@E^zg3cE&Jank+*-J6Qq=fqS%$w
zr;#5zJ=rczrY;9lk^CB<$~!P{1o&fj=&k!D6o7oNdMux>*saRihdZ2rlv@C+;3Px&
z$(10IUuB=>Dzx79ZqBlAR3S*~tVuLt1q}LGw2g{pO{{UUt}ed9DzL#w=z$W`CF=^-
zi=y&%heuuX4bVkVQ~)|A{b$Q1iMI{ID+uaL&Ao|D8mR<;|6%v$BdJkKV`sI|Eyt&J
z<e~8!+2U?f+E%gi6nJ=70c+k;A-sl;04UN;0I5^G>A9XvUNnn~txR}(5pqeDzftcK
zi^5Tiry=xr0$e9Xai}329#!IlQ9fZME9NcXG5(Q212_a8>+P#XI!b((B*)BLg3MRX
z_+rW+y>~SeYFqV1YhwcmQO*2G4RwSJrEW}u%&%<+Y;W-G^{G28U~D0lkr9rlOBto~
zK6Th=t1UaL3doG5no;>9u?5WF6^R_SwdqP$9dIT{mWC|fzWS1Z=HS9N5$(oCP8u5y
zIpSf;ds(RT&-@nbd9|H!4}8c=Q2uBsljqU<o_EDg5}DRy9GM#({eB({y!ZZWinjm2
zb0szk;;9lB>bF(yX-_t3hUAVCF=ze(gx>%mL-YsVYzeMq`{auS=vq;78`JP66h3iZ
zb%@I-|Az<8_Rpgb?0K}EL1<~7&a<o6Vaw;!7;^6?WlU1^iLsnda$4v9*HemEs<Lt>
zKZn4pUA43Zs;L)@I03lo*svZ(U*kDo(TL2)A~3<IE6Sa_e&j!pz$`_=Z*jt~_djm5
zt*m89yCEZEa5jpa!)Z77Tm5BmadC(#^(!WssqSqGtKOAcx7=rwirw{9of-!pws1K`
zIQb|&m&~z3Bm;Z`tQxih%Jjnvsbmnnb)e*^FA6yntEr`awjeRMV<~9=eQCKOH=knP
z__&;TcbgWH7@zyR=1w(RUaF5#XY~oCk}qKRTww*`q8P=llfg(i51jK~L-?ga0C;9T
zV$9+tiaP|&t7k}EtK4O?uDoZ%_Mq?z`@xtYlxyi%As_w}`{%H(XXvkMI=w~85Ak?0
zVqBKC<mh8MtnH6?SrR=i$-jeVfUxxX<;fSTY|E2L&lQJd{G0#HINiHFw%yE(&J1Cv
zFR6DHBK{s2haKzG%R#JF8<21)W%{M|jX<DIG26^ePh0V1ju3E^oJp_1c<0_1*5*2#
zkO6|97?Y5Fr?c_;^sqeXpOKIhOdc{N@8ICJTh+W#9cK{lui*F7rfbIE0yLM8HMa>5
z-J0UKwg1=I49xAU0onQ04)_@%AMct0tHyIqcV&dLrn|p%g(M}HT?LO8w;1_#eYtL{
zkK!T2IxWx!NHPA3RS~K-sn^>NrB1<i!y_70>si7IGNST>YQ|4TO(U~Dxv(B=-y7b<
z+P{KpT%{3MsM+|Ry1_@;rKLU}?)(Xb7+W#f-pBla$DI;#I(Rzo{81ej3B$}yV!wsU
zj~IUxYM{Y`*klJjTWi&`TJX8hdha*(v*_lg!TQDL39;XxV{ufT^5=?Ne_KdQx?_iK
zcZV~*)ew!+<?=x;htJVos-Bzm2KU%8VP;P#2I0G`8&ssx(Rxw|qN1uQ+!vM2KA)JI
z)4nq<U}c8V#zt5#id^=%%(_3F?P>oIb`=!A3l_?wyuy2)(;Ogotd(NJ_~+(6{3*}o
z=<&u6F5m!S$1^KwIxk%dYdo)m0uD1ukfNucOF9Y^wT|DbRC~qpYW1sLZy6_x**iSW
zxnZ>1bops!v;DCgLs6><`*V^~?n=@E@-EkHGDR|mm^@MG+@X6JIPOR1z1aLo%%AGM
zbO+x@K{x7hOv5M>xtw~vPE@>7gyp#R<oDcH!}=Yq-%)pA<7|m&=4cJ~SP??*UbRa+
zcYo%73L(v=yo)?tuCK71Oy^it`VIMQRX*-YwdF8@2=j5=1vP&+l<W;992BFZ-xLIa
z_V#}G^42H*BKl*s3NG61L&JQmwH8;a2VbrGTxh@N**q+|X>fgGbeG>>i6`fi(uu_~
zq6sgIRSU8hmGS)u^=Ng6>p#Rv5qzdUEuZ&tBW6@$W^8`Y2x77V?n5{~^%?{Y%!SKV
zeogb??@4PG@lS=Ow%munc^3JEj|xf1P;!R;rMA0++56jz)m;7KPKQVH+gephBQbT?
z#)R77ak^vTW@CEz+p_~S#q!T(-_cly)!W3sRe93$uME9v4jk4BqYmcL;3XllUh8k!
z-ThYTxZ$sm-R4SAW87BlKE2Jr$G{--wBMltwc(fzGMpx|o-HvHY}Qgi$;K9-dxySN
zy3GWzXTz^?XjEh5bJ?+)d&1K=bI2u;6T5?GWmq&U+as#}t)>?#{AVjKU0i+yX6^M(
zPzx*!Ch^cX9I=`ISd)SF&=IRewcKc3INtznm<>A9!n-65uJ|}XdZP^{snu&z4y#Sr
z2m6wf`pq&aoJdp{ZibuA?}E=-!K|MOKkj{Ju=rm1E71F|M;!jy&tA-!W00nqp`XLI
ztsYLhh3a21?z0GX?(U=V(r13?b6iMrdjon*FE><0%@kMqA4sI%?x{Y$&?BkQOOd&Z
zey7@~^T^?hah3u9`~0;s@grw{T(6-tn|4x-_=dk6z5B@wM^dx9^4hk{XWdTv7&WI$
zfm~#ujliCjK%~8`jg0{!sUcPDXEOO86<a;T_-WKi26QOXapJe{b~uwFw|VjT--Dd-
z?!|lQg!p3FZ6cJ__8@gIZz{5l4rx=UGRnDT#5yL)nPSn5VEgdF{k-G8^DI{6$*IXH
zXjCHf{TqMSS+izz`D52_^+Mbx$BhZ5LQtK4w2Y3kLU@p_?<&A+H{V_%?A=vY5P{0(
zqL1R70eqFj3*JWz8fKgtNoKRFf$nLo-X%SaI9}hd5b?xoJNu|1yX4x(M>gL3omVZ9
z^Dycz%+BaxL`Fs&U*qDOpaj;s`Y*sA*>Cq$R&!5JvtAuXJHgObLIoVwHQTJG3o<0<
zD8{D+^zzqqFunSs3f|(88^SP?-o@}W{(jO#Hz&GS0bmZq9xig$=`U92^ZnK!4Ju7I
zW4LWgMEU-H3XmcYV!rwrLn)OBek^$_Xp4)}Y=-0>*QuS8M`BR}c+KK|c#)8QYU=ka
znME_r%DPtn!abq<3+ut7928HXL)|{)IHewo+9c?ZCN06#5h`o*IYdk|wm6%@NfCy6
zX4~?L3Vgr3Wd#@=9?s$$Ko_kw{ST8|bmEpiF&-XVruFaD#+_yi1hzV(x^Bm4N=Kq+
zxe9h93<+{aQrZd9eF^Ue7|JQB9g09Bzkfs$QrAHSM?n(XlI2ed3f7!4r>Rp_8VA9A
zCyVnR22S%{r$ibSfyCR~w>ssh($R!n-?HndC8nkhE}QyPA{g3)6ODO{YUcDbZmOPw
zUpbHm^|=&jPZ|l1NfA3P)z-N$uz!*svkau)OTimW;ix*Fg>^}1P|pmNHD(ZA-GZ4;
z0CphSt>z(+BBtEvE=Pm}m3zk%jWcyt+TqRNf@nT2^y>8Z`@fdD@BNUy#xI?nQV3)B
zN0KrV&aPj~TJu^HNo5+N^05}vY{2JA=i%>@<nYltJs&TIeb8<82EX|hRd&y8raOYQ
z5WB=6mYs+Qt6V>^gCRN?!!yn{Nc3SM#w-ipdPb=#){eVAQg0_;KF}hLLF?)?s?#?5
zHFdu8#vVKp3fx4?TKIQABz<oBu<;VNTz!2xHgwhPF<*%VWcDi~3J=2@u*5Xxj#qCf
zrQh^sp<1V|{rj3wnRezpaAj|k#yWL*02CB7{+7c?6O|n!vi#BDFN7!TxR)a%$a837
zjKFQ6%_200GRUTkLvpn#d5+}mz8vaP)e7=|9x3d6)JP7uvMK}ze4H-x3pKIT)BFAV
zcT061HL%B@92#-z*jG&0*Y*$bZ1BS#@_gt5b&5LLVYBc+#Bmd5*6bfw*C2qJCwSgz
ztlsJ%L8$Z6>Fg<*AAjNcaR^Dyc*Rf}xA_;xj@t!1aZ@KNuQOe%oPG`C<=?cN2Jhon
z9os~AP_3aNL#xMzU-J|6q?#??z6mOV48;B7*ml;07gC4rw7i!}vMz9hsHBS#6yc_!
zkyv4?s(Nn)Nn)`e6uT5>xzo$Hh$ncjug#Q@FhhHJor@H?T`~`40JtyZhv%z>IivMh
zr!3EOmY1_a9<6e<f{dK~O#^sE%nAYrv6a$AKKXQYJ+p2=pE$?`8Qr3+v+AM~!o)+c
z0~V{LHm3)vMh93j75-K2AnWf*F7-(CVK7lYg3?Gep^ji$R+@aWB(sxwyH~W{HQ7bZ
zBs(~1WIqdZOg@uo_e-*Op}oK@q9DkcxJQcEjh}je-3XXL;Ej7&n#(#RkKIE3LdFs*
z@3vB>vtS$b9wa#95|~QqVIMjVx4r$SRR?1zFU4pwj}@rBpxmIM_ie!(x_?@HZ_>DZ
zP$$}Xr&75f_3aXJ0^7sl?qU(Bo0KwuyE3#N-f6p6j&nGnjM;NaC`A`h!9c9569%^v
zj1bSh{Fpkxh6T7uKnxF0ooq*Hc;BAm3wtPb5#;~ddGiX7k>G}v^O`fn$Xqs-WvSB-
z^Qq@b25*~!5_WTx=(_6AY*8>9mjhA#<bL)~%Vja!gQOj{;bEZ}==AZ<N>IxZ`nkB5
zq7h7s<EXApK;M*A)l&WKL%|OCvM2HcMf|#)``6yC;}pyrRZMOFI|cyszeka3hizVc
zBgfwOW3h@Ie|FZn#b(?C%@#)bSq<c&j2XKm^ePL&6p+bm+FxncJfx>Ko<ot&&qhf{
zSe8s#ZT2kaWKT0Zk$sga*|A}<vC&o<ibaK6mLj5s)-&jdcNv|RVMm-%Cr#kUi+Lo<
zykX>gy~>9c#h-0$c}j@<ux^8$U;kS+NDmJ1@l{-K9wKc(epI3nO5KYL=rXQ{HfNNo
z1KJ;EBK!YEFBAcvC*vPY#b1`5soD%p?}H*Qo~PefF#)oNL6QUdHHZzrwg$-}Ddtho
z?7(>Kx4;v6tZd&VsxVvRMQ4A8FC(pXvHf~G3!AV|CX!>7`f02(Ds3Q?>fK<=Jm1gm
z<=3>;?>=mjgiNZ-eMW(D5??-ARy%h9zO`p$*ji0>J<~^lSIoE*izUE4^stOBO;T8p
zs%hPjALNj`kSFi=1?m$nL&0tJ&2l5i9Y@OCn5QqX#n-54U$%~|5Q<N&G<aa$`h90)
zJ0#Zz9qN)TH_T;=V;+56Zaa52ItuW8*ec)zKLmCFH);QltGyUO{vtI>`>|}1TD-r%
zpK*gFg3=fNydBUkS^r&ypm|}C24B002#gg(;1;!?T;CiR`&YmJWVTxkV?r=RYG7T7
z^9^9qh*gV3s~08$u>5jbb$j{;UD)?#h*C?WIMZ(r6?m+6N}{!zV*ucTNY2{c-+CeL
zL<t(IqI^fddpOgm7-;LF--F6~lgL%b4sPD->2c!FOxg||VJoH-YK#SWEu0!)1%`=L
zdo{U{iY3U@1DzcZQdGBo*SCxK+iHVEpuVtCcYnm=!QQTPWkVF+#+rxn(CKWc2W`&y
z_8|II#br8<P4ofex2Ukk>Goj1-Y8J0`W-z3V<e-tfph=FOu}pAVV(KRYLiV6Awj?$
zrt`0h!|9j$&5kasfae4TbT1qRbL~J-V^A;t5vuA{CDC<?_0<$}U8*(IT+T#Zv=g5N
zBdnP&cgRPW9jwk`4`llLNezPq3u4LE6H}feV{wu3BJN{LN;pBJhvh`6F-xCpwu{D8
zLIF8pcWFb+&wHkLrv84kffPxiS;rJ{m4{fITzI=K_O)H4$1T^I(y<Uf51h*Oao67P
zxcBo>6}bv7GWVfk%VZHj@t$P}MQ`H17STW#wUCP8Q9m!LKsMNsjwE$~J@l_#d+`@b
z2>||Or?#rXe&N2NzDu>)Z-GRQIC>w$;B;Z=IXCK@+Q`5_QG*X;NHHdE?r#1DCoAbZ
zt}qws6F}JRcI3}DF}gp+k9#iHUePTY5}zx|2@{`Ctdgb0Mcm>^9GD+`fJ~|sR^?+&
zfT)YWKv6nT%bs9tazF1|g_uaI8MaTcTFF`y1vQ=Q6g;-B-4lk)lgD^K?WMdY$1_#0
zlY@gnyweT9#T&Gq>x;AIgH-#~Cglem-w@GXcfPUbqP296_$$|+S*O0QJ$u#t3|#w!
zd@zr-xcyX32%%lM23G$TJjim%tB}>Hw{*kb09t}?z6_%v^s@vO=5=|?A|5uZ53e1r
zpIvR;ts-8_6-Z)jRXiBM3s(V7{+4`0y<0`FpP;;TaOJujV3v=lO}DUJK)Qg3#~L0Q
zQ<>p&(cv)}&Xg55M{K7p^q?kuoo*Eg@Ltkb*K!<DKG6T;%6&Xf|IH+q2NE&rk(`nO
zjkiL5NOprUF3w8Qogj9-VCcKs@?p%B&?RIKE;8V*T_n|QK}>QPv2C}-c$y%Js!l|$
zCtc=Pv!f}#AuY!<2a%}zE$KF|?#0h9ICb0F+KYmy+J{XJuJyv`9BX3=ve>R$-|}C-
zZUdh#NfltC*Fbx9_EB>MX!5hSmk?<1u%{h|9WYi4OF@7-pX6qd)M5z%k0C5I#RkVj
z>(sEnd+YkhFpm3rgs3%0)p_XxdI3^JSn)%1o$l~4_jHd*%JfZs?Az^r8{g%(3hGNu
zN!gE-JJ2$)&*G#L&6Z%)**@fpDJv@z<A1dyo*6-8!p^3rBdu(#s2Cv<PsYXx+z{}C
zYWyXeP9_6{Vh9y)wUP?f(Hjcc>#z!u&W5S}9aAOS>VEBU#<y7HaqcTEndJ%z2xfQ%
znxR4`0W01gF7sS9E*ejscq<9uIeWM<5F%r(v97zN9V?%uq~&TGJJBBHW~3aSEbr*>
z?kWVvgzd4Nrh1R;+0EstpYkmlCHlYE>&`GZzBG%%RmatQTAANj%29}8LU~72CxuFk
z#6i7IbJOF=H3*v&t5df>E2@Mmbbo3z5-l}S6g4Jr50Ek#C?xj%`x;Ocwo65i<$4y2
z@yedl{~hk2^+S}rJ3a+p#NXo#yIEntvhJz<EvYbW*v8gjyt&Vfk~chh@w(Mb6r)3d
zmRJ(~fi^>A*H`8GEyp&%`!b(h$*ONh`>ZAq`riLnCa;$nzsILUL0TJ6D6UJloYJu1
zoODrQgig@&2U*%by!Ka(AB0y!<4u>%r{d!>Gf7XzL1bq%!As5@?kf#Pe?1TD^A+^<
z4<G@dMx)%VaQtimqck`Ru~4+R;B!u1xXY#1RA5^gYhq+>LQ>#qP4i((RJxFZo_lIx
zY|lsMLur9KRH%ka2)^9oyM7gkcpx)UU4xFf#&g*EN!Kc{U$thBYzjFD(AHXd0?ox6
zzP`S`9{;}4Bl$psW1jD?U_m9BJ_SMUM3Af~Fs6xZ?2qf0Gpb~@cn}MzMWICu3~fuO
zwBu~@yrBM$5GYctZVg^GCbyQB!g>o*0!4AfG(t7vqB8|9-N9Ga*Azp)U(0?Y*l4if
zaoF4|T>No!7~A=Yvom}rTDt;KcX;@@2NTa`r636S)>0e=n<{kzJs+h9Lc>4{h}$n3
z=4Mk~#GzIZUgzTY&Jqu0EM?rMUEz_DZZoqyN;+Jqk<{%@jt}DRKNR50uw$|C?cXMp
z=`EDfzi%s?>E?_r@&cWO9scNs2p`NHB9A0AKHYUm4)rTC>Pr`vQUx8CWsRyk{tVdX
zSLUht*SNCrDr772juD=C8CCnhY+N^6syrzMJuECvjHS=Hxvy*A*<)VoE7g&BAhX!b
z6C0BZ)n=3vNaV!cHKejycbVI6IGS~t>i%``M-XBfm&iVO*L5xM0?-VdtG$~F<Mu2m
z=IR8U>^pdt*gjgpeRhfDE?*LUE1(@_V4ZLc46m;}TIw_xncY|cp$-Q%!&$IjD8ZFu
zJ3`iIgBZ%#|0lb9Nl;#Tvrf4;by~m(#D*COAC$5Rw?-3x8<iXURFfg7V%$Dd5HoJG
zT9O^L|K}l?+JEtUjhOr03qV{HrpVrFOc%zeLqbCD$H7ghajpixKH|{Ew5^{p(nl?C
zKX{weCWhk&?0$+ba(LnIRH<E)(@_88$B*6><1pGQr?-`F8aVoJJ^p@r>@3ak7J~gQ
zj8*&w8{g)EPsbnTq2ry^)$y-&`0hec22rXxAqUEZvMa-Ko%~4WZ)2!CW=!a4H}NW(
zzaP`U*wT^_f3)RE-6y{611u;-h0EFUeMd@RDWVs{<gM}V=Q>drgSeoT;$FF0KNf?9
zDnsMp*dC*&TZ#qk<)_>zS2?(e^BMUWes0ZGezYkU2l7GCS`5b)QHb(+Rl6lz?*995
z-uU2oOE@6ly6%anjH+CE)4-BWH9R~fQ1%^0r@cxMCnAU>em}7{TP776jCz|q7s13T
z;!J>XlOSHW`PO2ERZY?2hOa1K4;Qe|Kh0igBtK?6cLNZz_w0C(e#7}X0Eg21V+LWf
z>uxW#6+_AlHSsoJd2c8fHFsCP23nTparm>pZJCAU+7U;*2o`tWX!mlt-3=$kZA_f3
z0MFQcWw1pvE?xq{q?|@RlzUwbYbCu#82NVZKFfKh93xc!e!X!A@cW)~JJ(-m6gFoc
zwcZcID*7qCfcR%(-xJ)%qsqHSX~D#ZP6r_)1h&@Rs4DHch*uO6Lv!K;&xUQ5$;L??
zM*(!@6Jn*p$MXY~+M;)p6T>lHkZ`6ym-+f)U*d&+KNapf1Rs#*j4mVFC0DPL^p+B0
z8OwoS3Aj!rX12=+bp!F#d3f;T1kj!!F)X{~aXL_BjN1eWy`|_I^F=&n1?=|X%!%;*
z7HmBDv_N_yyd5@y&6MLw3k-`?Mj4}jkyQcx2{6wJd$?i5!wyzFO8V+|SN25nZYRwC
zn?+XYq=fG~naWr4$e=r58uA~+>hrj<@4!1hMtxf%OPaTwWp+iDahOz*0?ct<$p(E%
z3yE)i|5}l4+mt7)XvvDj^bRUXOjB?5*O*xs4Om)QBy{waHD$e<uGFnxddrbnSdT@*
zZapD#9p(M7qTWZu+x2R}n^!<Kkk9U`w)s0165$tLz9jf&3sL4wHP{dzIhzOFbD#Py
zAGGW=y&)k9ua3Ig*LO_b-eZb>?&69m`=xly(^9rh{imXa*))h+_UGmq_Umq3bi9L!
zYz;{&*8*^Pm~d4U2<hiA552XkXtrP0`xPU!u|+9N&u<eLFKF$(yT3ai#&4nMp1Ttp
zD)Nw5r5<<+Mp?Q+Do@$l%RURw#O9w|S(DW#ce6zNNT4Gyf_?r8kqZ3rhT2b4a7uy#
z!J}|UXjERf)OVRL@|xZ>&!k83eb!&>0o0b1H|5dvrQ*au>{g0cP7QW;za0#S30Wvk
zTnz%68*6K^h|nMYpi@0cf*?KGj#<7Fu@AQG?q?UtwaUIeN(x1X_P-5%&fJc2IrTI{
zrunj1L&(NZ;3DUjkpRUm=7-kdzcP%V;3GoM`7vt{vM)USpK`4Iu!QW-4~P;o3R&a#
zGgulCv7g>aLZ@3|ovV8SS2s)*duV;Jd7n6H{F*?_V$=>)besxE3*eJldVG9<7zuaM
z?EAJRGgh+B#hK>`@F)@k!@$c=)-yOM*~#RYzW~IK2f1Ihs`bI0<u6N88m*^s_HY+o
zZ0qXSKgG)dSo(%Ojt+jT{nO3cxVo`R!GfF$f`ntCkPF%6+AS&d&Z#VnREZ!A1~W}8
z(y5ZaN9-YB5b_xdS-^|p^bvoniLAd2VFRlxS9`1PmTC4ZvPHge23?GUOk{R+XM?wb
z0+x&mSd){h+<j&H0NcNgKy&JbV;Pc)b*{r-$X_z3JN>LDla7i2jd9BrZs!lNF1?QW
z>f}hqjU#rG+THvHe*l}y<c*u#COY8&eI04848F=QQytf*JZR`Y`hBsT#0*ESIEkCZ
zrB~q-kT1TkTli=4rf$F}2cp@BkK#i6$g0&QEx)GA`iO#_f(+lNeTVgS83W-?9W|>M
z+xTxUeH0i6)OL~oJV0OXsn$^RAVXbp*%(gKjym*P*+QKnQlUye9gUfTw&QZPS+F70
zuwUEwL-~u2=s&S{q#V7MK{u%l)NSvWc<9(d0AW~x#k8yfW_q?7N?x|%Wv&G{&$(zn
zKE}&YajZnzwC{db8er~JxK~XgI+q2NRu;5l&~3AM*l!s1lhV6W&n%IpZyLDGYuRl0
z!yI19@hqVn)KZNrfbi4$kNpKo{>F|`dBi?axAS%jnh<h)gx=>zvosdJq~wRLD@XCc
zk^E39T01Ncq3z2DLb0b;79nOBr+^|L-F9qtJwKeg7)PTPRFUxf7nf50<mO7sYr=))
zplQbUl+n?CPgQ!2ikpykN&K7w0_UBu^U-5e$IXAbZ{rY@_sUm=E01$K%jItQfm$Y7
z7x|Dio++TUlWrvCbG7qQev|&b^_FlquJhFbco&`N&MNa@1KCLjudJWwlVfl|K7|~C
zdqePhl`gwXtZNXSMw;IgGH`K2HA2-7J_|qd3jBxNQ+c{w0Wf{3twP`TVH?tJ0!2bb
zYe-H6Dl5K+9Q+vlS~V4<hy!+cyJ8-jC%R7_j)#_;Xbj{$zgs;YGLs`@$cMr2=jSWF
z!ZqVVN!RIw+;#^IB4}siZ371~k#jL&Rd@xf8^O3(1dLR~67Ty`*}&ix4J0}JOfMW3
zBm8kf=pgHjK8nG1;@EIqeJ1>zhl6aV@Fng@U6bwW+sTQEh`&#e_%e+Wr7dRZpnbut
zVP~ubwZ;*XSzhujbjl!<5JwB?Ih%_kHw%0Nc&?wGp5}@Gq;OV<Q@n2~Y!Vv={?iHe
znvQxM1d>N+e+WsP{EL##n@DT>*;u^_+#>`$mQNMkHQKH*rkoivsu-yljlu7cOglx1
z(2LD|qCSDLo|CXi@XcJqQvIY5aUnYMAHdO-DS66iEns<zbP8D|u)#{f@0w=6)J^y)
z2m@a}oqLD8L4ZtH5P1)n;$#tfHZGj;0_n1m5#&9(tEfmE$DsrA{b>RNl>AuBtpgcC
zrJ789iInn8g-JAj<wvk4k0aG*0Kw%)xn4-gQnxWm)Q)P1QRCW2U&AsQ=h^Dkor0iV
z+?2vp0Yu$(tohWCBbHC8lKLkvi-Bw$C78n#pAHO^<}p~RZGMhZ2rRxSFxtc9#dD8)
zx!;e|6IBlLyGLS9TDYR=RV1Y*3q_`WU>RgDESGx69|b(NZYX?}NO$sJU<8GGkQn>d
z4Y^;oK3?3dexHnsrN;mXuVCW>^>w<vDT6f3GV+!EmrO&q41Yy%IkJcazp^?5p@txq
z!+Cg8bzY+>$1<L!%aI<-&_^%sas8$!hsA0R0r{fsK1|y0NwJN}b2r+&@z2!JUIzjg
z;N%<y@MtQ`E5emruU!*_IZIhFqB#DrAQ|NNs4)UYkXe<#Twt#RNHg4b({QK_pOv%r
zSZwkBmGTRGN1n>a`YRR3pn*DE<g3@)*MBgr%5W6|p?F3ugXr}GWdrZXke$~Pf!fA?
zjnZj7pnpsHJRiC=O=sv$gJ-%>h@aJXM!(Z&zjlbC??sL%pFte*?}6ppLJ1oH;)S>a
z)ecG~%QpJ~{Pe@OuK#O28PWay^~C3N#N4dsWkvha+8^kF7Er6nX0%3@Z{nu}dV-}$
zWFyM{dxMbDFDW$8aj7By-HBRSP1D@)MGZ4&#d=$F-hL3F7`xBb<3Xf$Ag6P5kRUgr
zf_idj^wVp}y{*qZJckcq-$0dBT2H%kOp4a5mzReA{Ul|mCrEb9n6m`UNGcWKucUqd
z^BdmJRsLc~x=CmjT-nebVkaDK#3^DNWz!4!!dQYv%)D>lw+H^h34V%jEr3LB{XNJ^
z?Xe*=@+}E1YVSTkp*#w|RF!i-h}OKpnr+djX*+Lqwd87w<7~5+hVp3}_m;_RvVZ+C
zyRl6d6)RWEqjxP9fsnOOdw@T^UaYdy=H0Zx26SQ|b)0vU1xV!SX5=GOy84C_sk+)+
zFk~$sv(?Q9zvcKt$yZUcp82FG)(Jk|i-MJn$eJtWRxTnp9YjtV^xHJCs>-|wPBFsk
z5qM%4E{lD2MMr6<>5JkZJemhJl(&u`FF;72$%>kM-|1lM{U{0n{+%b>iJC!3YLt4-
z`z>C(h0pzs$;g#cRi6k=Z>QVAQL{Z&W=zzKa*vtZYV+r_;gw7GBSSbQ!TUJtD}nDz
z1|6<P35xWQOEQ|Tx11eEg0Q<xcx)?k>#q=uKdA9Yw;prZUj-Wrc6!>nzR>uE#!Yut
zgTU6wJTAcHR8;5pSINHRH0&X0h4-o|$-91d7<^f#1X9!rvI#-`r1q`l6xk%bZvuWx
zTHeUDsC6mTeQb&AemILotUNV6j0Gx<`t=HI(_j>qvBSbIQvKQX;d<9Vqtn{nXVh2<
z&*+Mf@!7&{*%G)wV;%k<yL)ZA7?nh2n!-xNtq%pCzgz`K9Dn*jY$-wm%$d6H3qBuo
zAAAni480vFkH~av&qs^QZ=1}eT5Drc%HsXR#)B^G9C$z$6(_tC#nYsvy&8}PGe?^E
z{tFi|lNky*jrHNlLWgQ=Y6^L5c|lQD*IQC=82YYVpFCME+6S2L(@=#7V`ngn&D`iW
z+6`=`8|AL^0-+U*TTT!A_M^9Rq2Q_}cc<3-!xS!?8FbwlA~X`U*doG#cZmpF-8(G1
zIt~`F@2)&~_$Wlq*LTRKk0)`r8<UFJ7ceQePGNPzy<YJ8UU<U~>Cm4~Mkxbx?~|v2
z?u5R|(g6e?PKKdM;H}U?msbJQuq~KHobD*HtQ1diz}xf-QVqE`3aadKu}IYoolXrQ
z$3n?}Jl#p7&<g6_@!OI`rj8}0)=Hxdku$u{Jp-VXxhZ_18%_G>4m<PlxLD!%8=E2u
zZ<tM#i)!J;&n}-cX2AR`ohr+FO;z<Gbg*y|G%4y~l_TWIb&SW1g8)`P)%{qiB@$k1
z)TBF%B}$XgxYFQ{>5Wg(Hg;=tb^l4&aaB?L#3B+lb%Cq3)ctrNeEtuH(lfr<q0)PJ
z+8Kx)eSke4ESj6uiSi#NNhs7C`IaR`F$m3dYaS)_^?B9-abavVoqE2gjL7pkMM7~n
zBG>0)G~zaYGQDK8u0)pceIWL^HSy^A<RW+s)KH)(|H5J-UNFrz&H30SNW&U*_rlB)
z^Hjv1Y4sDU0vhP9GBt8i@Omr>yhTUvhrF#}n~gc0Vb~hw6yvmN0`8}ozeYvDG0Xz7
zo8R4b@szj>uOb4t5a{a2Dc4#OnXO-ZX`epZa^WRdBS>@gW<bZp)>hk0r>}^3NWauP
zEovPlfYAY=b8$qF4HQE*A*z`EGGAN$DxmeXTi1l)p;D=5+OOBwf}^CCBx;t`g?{IM
zt(ZC<wj(8O39smik^Q8`fzR?-(ztM=yU^;{Tph%S1a&|kw0dGO&Wc1Y1ko|@lq7x7
zZ?+ymXe+d+Qp&c*d-#iQaN$qaMp5MQdhMREVx9Cu@10e3A26QoSQYd{yOQh7SH5fh
z=p;qRC8aiZBUh`BKwQEWi&F_yZ`~mscPn->C_^=Unro5dBcO@Nwjav9^H+TL2dWh-
zS)+xS?IO*PlbSQo0?`HXK4=Ez;Ym3fWF~6!uU;uPBtDo<y=MEQVQc5!Ji^J0(BGGi
zM|$^gf}+lM@R;v>V#ogj9gi1em)%!>a1<+NwD8hE41RN#Cic180A?PXEw-@*d+d?1
zpsOMKOL6ugF!IRhhH|0W;XTB%WA8n7#P5P=D%3xYdufK<+z8_Wk?p6D_|%I82F<y|
zXPdJh&S@`ouXZ3fyI=M+^bx{cd&tRMAeP-tOeM$~UOH!M%SuSf0Jo7et$K@@{hKl$
zq0WzaHBa!v^?E}BmU&8^j}W+njzV&o{17vr$>-6eVZQ@q;($8I5e`M0LwqACZ}>%4
zbyoUpjuJ!Oa2|13<v5wLDrxZY;fz*I<=IXC4*(oN<GxUlvk#-{-Yk($K7-HEYLh2V
z+FMw{{x4;G=ply?-YxB5fJJ^cS9R~+V=Jaw>_sP^d4nQ^>cpu(k38~7(Qm8eMTPhd
z7ANN-x<aI!9sk?d>5_qX6?QuOtwRE)U|=|Su>P2y<vZq>qfq&iz2jg({Sv4HMq(S$
zf5V1N{%+lRY{7Jpf|Wn5!b_i6#bDu801JOV1bMLVca>Vn=N#2VrU{WHiEFjL7|-DI
zIusvX@D@0eros4(z{P_lrqGE=>r8(vVq1d;<d*SR*WxGX<P#VeNcBf!33@$R{Oju9
zDh+$5bC=F|K?}wwwu+CK`1|;yPs*lGpI&HEgT%gRQ>PU#{B)tb2-3fA-xHE_?GG{o
zh0Rj1l*Okv+S|gL_*77N2IEtIwULJ2bmL9w%zu<>_pV*lSnPQ>UTVDy2>Y-ORRz`=
z*=r&?ty{K=>xwl=z$pk{ki__;+&6q7cWK2~5z}7`qk<!cQcYmghL74^Ee%qPQ^BZJ
zmakH)KNfQGaox+3;u3ECDEc3ANFz2~BjTGp4rZW;Vt*A%1q;>xop;{hrV)}IFoiAw
zQ=w&)t>|I&$JbL|m!pnJ;=3k`=ezH|BQF7B6)j`Y@u3fzxg?diJnl>Sd+{0PK<j_g
zO*f@Aa&>i_m$3#JdKZAB((Nlg_@p;J<WQL&%G7`L<yTACN#V`^6dpQA#t7D5@*}*k
z7EHA)&<T(Iz(+j8SkC~mZr|`FnnnpJfBULGI3Qyxb#3{d`C1ZQEKEVgDy{+Y^YUZU
z(#>v(VEXaLpO&FcHhCqG{``=Esr<X&c=L@i!-70SbLRh>ZoE;}m*w-K057xXG}_G_
z4^>2g^Dp}H3)CC;>|yz%!>F-1bO^8$4IcYpe^ns}Us!m`KVLs={--h+)l&4zYbftV
zcnXe}o5G@^VtJ_1zfnVsKGLLd^}pf9n=)<r+r4{N&B)6~?&9L}-tzzDqA$zuz2{zC
za~Jxz#K>UiCF_Z*ZmPd(7;Jxv10&U`|B}Vup)(wY1|>F~NkARt>fa#0zVAqEyn|_Z
z@eLX_M1W=uB4IO>1e^X#zGH{F;tv@*G!?SRZFxn7Gjil*C_db5MP)54F7o4J;LhR_
z^jn$wXXub2T&98bAr1k2xBe4$?87CA-+AH1S;bdhea)WTyL3@?%Fagi8yL}yX<OUS
z0Z|1q0y0Ed%1Ps6ePRFP2Oi8m^%U*oqp;uo@O{N4mkimtcTWMNfCnS*L;VZpFoQ<H
zS(IelAbjzVAV?`nBN&eWT)z1RpBL!lGy3z4=f&P)%!ClO@Zi*3Z~0Hg2pe={bA3#a
zbk#4bDsR1Y{2nj<J8!>JK5O=D)A_7sVCTG%kd~$~#O7c^1>`!S{So5DXJnz5lehjC
z9T7y19GM^MLs`fkJoq&2Oa<h3KYRx}U$SG*9&{Q+z-PN{=p{pTeE7i!WmbQF0KD$H
z8`If_;M&Eu{C$eH%RkQl$M&*vZmcd+xdI%h`bSjVXZ_V6Y5;2^n<qpxNiriW?X7bi
zaiLVq;Sut`2Y<-WA@~TT&)<rQD*qKIOS=l>IY&`_Ma9K6_(;90xTr)Dm3A3&$q<yu
zDELfylm1+K2OlJ5SS+c(`ReQPAAUe5z6T%POcn;?=fnDaZ(}9^nfRR!9XlpqBL;16
zP&c9R`?%b~F<8pSwtwDz_g&=6eanC7aTLe$LhF#H7a#Y=rs69ECW4DE_Zm0c{uJHl
z4;6^Pc;X8n@qwr0e>uR5_D4r3=mf4-`~&g+g=K`Cv(7pP>vu5A_?=Z)J9qr}ThYl!
z`BeXR-g&!h_RBA`9j6W<Dnv9`SpWb)07*naRD3P@&(y!9Bo#V?i?6-*TI`dhn`2Rb
zW}-LWe4}*0z*A7K{>qPQV*eX%x)JO6A`-%P7VNCS(m%UaV??oqhd<i$UsT+E&pl|*
zlg_8l<*vt=k4c*TSiUJHBLn^1VoHqY{rIDDeq1FVul-l9`Wfwnv3uTp<Bc-ai%cbw
zh>@S47n{xxea0>L=%e!Lnra0WKc(fnBH9}TZ@lpq+Z!|}9JSQz+S1>IiT*<G!52e_
zqT~nX$^YsRkX1tWG5?E>wUj^dQrn4D1Vr!-;?oxR*_?II{(-#0T)%Ji@BiBTCxzgz
zKgbk0&3LvfO65XHtOu`6-HkS&Ja5E{l?H>P-sJ`F)X5{(jgNYUVZ7&AerVj`%qIeG
z9cSju=h>))3*Z+Q7yB`lx010*mtP;#0u&#-P*9}Oh>Q<Lrm_S$+_L3ARNDG3m(#Wo
zsshT%H)rlVc7os=3Z60uIQ7(1l0_Uni2fW=7{h5N;{1G>;)_&7{Xyd5i|}6kArBY*
zRjvF^PHv8_ZJ~VCAWE-LAhdRpk30q+eBt&VAA`BHx}{)hZfLC55GX~p9s*+VYqdXk
zEytH!>cz$rccDaN+JTaipN!GdN3yVWUVEJ*P8eq4R3NPLryWCx8i%i^ty{HL!`G7j
z+5w<^0T|u>BB0~vG`+@6bXqsZS3EoO*&^(&Ya0btAYu5{oVUuhY~5OI?cbq8dw!(@
z&HmdT3>h;h|Ap$WHX*b)CX^VF_((IstrcHij3qKZ5I+0tGqf|)L4RO_@>OF;z*2v%
zm55-5(*^0jPwB7maMUs-NSY3Q*ss*&HTd|Q(@q;~);=?|fWru*B>C_w$S7ZLy=n4*
z)t*vGV7UIMPh{zEqT8uzstNM}uNYBv=XpQv|3~!4Xn~{)F1R3-_Gd1^dOuYUPJUpo
z$gv;z;FE~ae6q$H(|;p2A;D$}7;#LU0{O4YkzL}?I_s=tO!-SW`>eB4a4kP9H;_as
z)_-|<xiM#*eP;66=bW8HnlnL5I&7+xoR^yyG5!5$;9|OW^>&nv9oQ5B^9O6TZP{AG
zmwqok^fE3y{Sok|?2qp?ns{~Qe}$2kH*IPLrGFVVLh{x>Tu(}6V?4UL^M4-djV4?U
zg4*Nn8I1nM4)3<!AP+JlE~cK(Dcibv3+fHEe+R4+M*@Z_Vj%y+pFzx{bXFi<GY9bu
zU-8BP@yNxbKNHU8e_T2<pPR|&nZ&@ES3Z{aUw;0j!s_3kK|Z6AA%2*4iM2eNHEV)r
zETc)CQN*<7O(^~x)Q4NQpgt7lH5_%vy52a$(}QpICjlNmb?U!(@mF|0()pbXtP9+t
zMN55AhyFL;d~*hN+0K3bx#x4Sc5fzRAQI~H{20_>{6HtqpT*xS)=`Kc;8a%o{Qu;W
zkI~t_i*H+u=IYP(#(VGLgM`taA0xQ51c^fRmv}(6`j?ax*GzfjQL~{$xc=ZFe8@|F
zk}EYf?w$C=B<ImbAI&=X<P(!D{?}iBU5*iEyRgg%-Z0ge(bC`WB`Y|o6GRK%u}Q-d
zeu~X=X#VqQ^4a#!%$c0(=sM9Koi+ZSF<MG}{g`%!_L#|k@bfpv4#wQHOV}fwUVVif
z%|sGh7ys4QUXfWFq%(gAV=$ehB`>Up@!UWCCB8->zDUXRkH;FHk4||c>*RhXWAvS(
z)6T<(T}nHX(g20ybGT)JyJ-?hEe9O{Xv<##I=EukXi-i<`X7k;M{R>V<|+U1vvTv2
zwiCV0nPK$fS$_ys0~=abU86thD|G~sCz#$wsef8w`k~byog!sBckR+tS2+Zq_0NCb
zdk<-kTYz(FegdY=f-!z74aBp+*26jPoO6=6)*A!({L{7hYS(}6+`0UKBQjI^Q?xxV
zEXW3Mer|S#CDR0l?Vq=>gij=V(pzP0`NO@~SNsV;o~|=CRUgvvia3@oy!_RoKjVes
z!;5^u6K7nJx!7MY>&8D2?_bTEG>^l2<470H|F6A**&^bC@n3u873p-f^)JM&U4Kat
zH6Gg-QyzY#ur~b>CU#~0ugeF4J(BgA8P68)*eSc-Gd#%tTykma*3I(#qR1UOb}}z^
z!pkWwvwf4`h1e&acoNs(0~Zkv2k2<*Z}BBu4gvjH-fjDj`k$<PYS&*G36SAgYx>uQ
zkNA``On;kaL=Ulzg;V_{o&m?{AikK8R@uMw7dsxb|H1qxWz1%xK*9Q}uI!4!rmm36
zkl0KZbsW@a%0BWqS1j@b3W+2lvp+6uJgqfwr%xgAmV?sa$odl}R-znH@!N0uRmPwS
zEwAxniNVr%41-V_1?Vj>fyzoF_%ICHci}%SOzDW7cexlj8~kW=0*Cu^VS#XLYCy?}
zmyjTBJYLetiEGVa$KA@KF|~jm{jk&RV~;&vgo5qrk7<QieOvWkwQ5x*w?r2XruZYC
zVd<zm*p0Chz9wQl2a$&xD+nm8n3$9x!^U|Zk2U`wC*x8lI?IQgU3{@WHBuUTlz7G%
zHpsONE(Fr@6ace;o7i8QqZUJgEv*2A;Bzw;?D(3}5qe=4wAlKvv*@M7{>0=&;Yceb
zCt((5fSHvI36A$ms)fMMKVPWpm8n)P{vzytC~?s%$?s@b`-Xb}!2FTZUn24#kwh3C
zY!;Ji9yAz7<ck)qTH5>%3_sQbyf)*~OR@8wane_&6+7r_eB5A$=v1Uln>PBwuCzi0
zf2*S_1unwuuk8cAjEU1zi2fRcqqRS%6$Ip(i%8<)89?`5;*%7ARW;TAHLKUi3!2j5
z2>nUCbJq^$;RNcB-FW%7XIKe`06qiius`^D@#PxK1c#jhOO`AtKf23Nm{t+v^uyxJ
zk4<?@rwS1Y_}KNY9xDY#T!jw)U$I`2D6O`s9iRG8@__U~_(Z_Z1cS)vZ~cjHf_au3
zUWl#t1z#iCco=bXWc)pM--F#Cw4GI1Ug^iCLAwhJxx4PZ<70YQJib25YV{PS0_(sb
zpYGZ#d|WvtYg~z`^Ic`FNm8n__@rdct%r3&@4RCIcGrYQz*fQtyQmgm>J4ActsbI3
z^G3gZCvPJNE^U}6wxkjR!ool#>2G;zBw-ZfUzh!3WS2v70Yt6&Uqzspc!$%uIBE(B
zp#8UR+gXJUPcB>GbnDhNaqhgix%210UAp+|Zz`89`=J6OzN{XK6_Wlf@KQ^b)P)DG
zBZ^&0Q-zFL;cb+=pNhTk@T!-J<=g0uzjm$L=qS1apa0zaUtL*^se>|ADXjk6u^qcq
zn))|B0d=)aGYF5)G%lD*QK`3c9rU_%#AVQnH5Th1_6s5mBNRD;o6}vT%;C_s4b~WP
z9NRfW(<mEo;)U`B58iMZwz;%)q3Qn{MiK784yGAcXO8uM=gx=6uU@Us+hcSCE3tpK
zZr!*8ybqnxpuwgc1{tHN{L6k=CcEusW7lBr;%Gq^E&7T(xr->F_}oSK%rnoz?xTG5
z=X0lV%<A8MlO6+j1wDUk`tvFC(T5AlcJI*<Cx{lNzs1o29FhLS5FQ9T@7!}`(<ur?
z6IEjB?8uQLcX{(-D8A*1GlC=@qtYP*in`#Bw33OjZhBC4!8gQmVi}i+5R1zTtk%(~
z<OH*sFfhaViFi3yhqY7<tl}Tq_z>+R1_5pT)t6tDS^~t7XuSVv)i0Grg@rY#X=y4M
z+391Q!E_cP3?F1h8Zn)v3)A2707GOwCN^`h-#Pz0ECr+bOXHxbvQq6_UQS+7@$1*m
zk3k1h4m+GJD0Ntm^)J~@z~(d<DV)X+$oNQnYBKA8?3TQ9{knBJ49MtoAnG53Pg$)f
zwd)T;ORJG^th4^nyoohgydXjO-}21GhiWV>A%&Xyf3av0JLyF>+%ikk$q8$dRh)4K
z)}Ev<>JfDI#p*ICmOMbqD=anPzvz-nQbj@BuUzqCCD#9Bn^9FE5w6XRfpUD<ga^y&
zd|QUuG8k#>cd)y95;jgMR5~1?e}7Ed<vktO>O^~<A8QON@h0b>{BQFgc}iSiCHU0H
z#Yb$bP>}x0Tp|Ven=&RWZCsHc3O>S=l@Rd;`I{UqhdS}4NJujL(f2QwcQriGeU906
zmU_Fg;ljtZTybG>4cgCA-hB=R0<%b}?0V8t9grT3k=dLDAAelB8%r~hr+P&%|1Da!
z2&#XszwWxUkt0UblgNgFq>2b#gXb~^i5el=v~JB0NfzIawc!2Rw{5S^tDhgs0^GfO
z*Ti}A=H<<wKfm;wZ@#Jc0c&Vi1lkE|h6w48^6qe_b&lkv(pV-aaqe95nOBDQP4M{+
zRXitti6Ab%nnr|<nE#BdM*8slk8sN{$j$^X^<R+xL40d27$}gA%ykFtZ=Seyl|NX}
z&5zcG$ZtXU?EiZHlic+`aFDOuCNY>up$Ua-&gx11c_}Sk5tK<5a9VGpHAPyjK3Vrm
z2a3K8AVlkKA(5D1Orjmzw%O;WcnhUs`YOuGkW;uaM-0||vm3CIjQL0LMqmqdtb2fW
zSnOPG9W?<y^QZ{I`6$S#6t1FD)<`BLsYoWw=D$6^1Ut>)g~jKzZqquxRqIyqTm+jy
z4I4I!?bxvsUuML;^Uk~awc7CT>VMhDktvsr7?I8$azpV&WNmdyOv+Y?^^}Ygd2p?E
z#5vUdmOx2tG_nfV1F@NC!b9l|J7a${;z=b3oz)-QEc=M~BSwtGcJ(9Dxc;8t12TXr
zTo})lo>Qd4@M!>ko5g<#rg6v@FT_xv06y1UWc<Vgm>foI*zgc8qOR-|gi)-V2oOsJ
z@P)=IWXO#E*0)9T7MKcY!pIr9hm8@d8_^_G5)lnvo{i(K$G9|+$uVFF_||HFi;wui
z5KO}KH({Ri2h#vNp>Y?izk5%7Ixyx7+>Y%#(3WHV7b79SWkman67;H<#+hmoX!Y{o
zBcKlZ2jRmY<mCziw)4=qISM;#Q}ouY+r(p(X6!FAh28OC3SP_+M;;NU5q!=&Z*wYr
zc>bq=>O%CFw>cA}Yd?qKN7A1$K)4U~-*^36wQe0d<*_N*35f~lq<{r*xaF2xb}w78
zT&9?SlMz%eqT#dt!6=~|tY(eOjoDOK+wGQ7x9nan>&A(Cav-y?{7(pk5?}Lpp#Jk}
z>&^e{oDx<NQ)D}!>Hp{K&+<o2tqVziRf?u`r3bkv<a(I=KXuxZ#bd{e&7g+VzZEvA
zxcbVg;#vNyDy#e$<y!gCM<15G^wO--Jp~19=L<6M<=mo03+b%W4g>@OvL1Gpw`d}v
zF}unP0`vSy!dg`t!%*Qwi4BJESFioGzlnv@j@>(}q`c!=84@2?P`0cb&puQCq7H+9
z0G}^PUV2`qL0+l%*vV(OF%DyS^~VBQ>Pe!g^&bO7TM9%caMASt_WSQDkMGk5>nZx3
zPMwZOcopjnwr~Hpc<gqJj#kCz+FzW;i_v@KhaX{{&tSNG#d7qO>329zc~|`vf5#4V
zcB%`*-@0`hUiK-TCibC?8pWZbPZ-(s*Qin?-CVbR!^S`-K~()gE{Jkakqnktf;q!T
z6dxbw!>HSo7oUFt%Y&$$Lh<3Pf{L`B@&J4|DcXVZ4<eKQ4Lhn~(C`7576CWnZ`;0|
z&kKfym4D<Pi9_NPz9<`qboDnpgj2!cj8t2;Zc%lthX)@cVEw77X$TQ9Eg!?%MhM3@
za0CHubp4^3NFhpCGSmLks9=G>gt!DB*GPW;g%`NyTU7k(uDd?X9aRcK%;qSWaQB40
z9BoNql9N-MTW+~2<6Nx&Ok`{p5I1V{s0{4tx!W~}(f`lZKfoj8KI<QfA5b%p{$vKG
zUj5}pGAugvi5M;ap)*|T4U>u(MP;6ICOg~Yg#Osz3^PmvXjq3ccFpS5>^u&|=e_S#
z>{N;k6woe^<aC~%@ifzkL5!lFxMTiv?@jr`2b?l|D8tMFwCC|G<?|F91wl40ThK6;
z8}&)<!~Hw+WoZ#&(pkP?`Co(CR7AB1Dx%Uw!l$<e8+IoBNo|~57&g4N0d?Yg^+zNX
zgR$uLv;O&`?_Uj($F0?==+<rA;XE?_PRs;IO-n_}Q#j2}pcH+>^;h*7xN-dkccgr@
z{6|RIzd1H4<aHqR9M)0jP9{Hy#y1_CXk?C`O@FTcs6IFv4pXO3EgC271U?I5@FA>4
zJT{*ajH;??|Eix>R^kIs=}WU_l@%21ft)5khS>k9X-^e$2YcdE|CX&<#9w{&)xxJ5
zd{(afu?kaqOJ~14y98^ynwpr>9hmyhs3Xd1h9qloauII-fCX9pK_ql_**}{82k|vO
zGqWAEKl9!H-TbG;?yo<_u?x*LJ8M1nMhiP`nM?HsC)S4aka+s^HM!V*=qeAeWq+33
zfP(*~qA>Idj1`rfa=cs-14QBY6b}_71MCArc$sJDsi&NpeBHIz>L@HDdu3&%!>Lqw
zxKvkGqO%F{@iG_3FRtWM54*$y&DGRiV4c3Q(W6Fjp>lBdJA+R-HEHq#4@kpe@ZeK1
z9FNh!0UeK=ib#>+3@_E6ixOkx4qhT5GZ+)E5*s1x*tWd}4WMd#K}IXVhuw2q#HXjF
zW94|=xWaHExpl%<SOh?f1Zsan7=$mRE)Np~rnqwLZ(iut0@9RmIYq_CROX~>ue~On
z8j*<U596W}X(y)h?Z73LOaZUv&6_81bS3q#mt;F;z4)$hP9eUC6WR3%Nq>ys)G%m`
z742=-qoH9ntujSlVZl_Ux6wt;k@dHboVrUr2+PLjkN8^5^x=jfmc4|M4I^PxAA2bg
z===HCpKb4~0nzjana75;;|o*rwHG1!GYDaVZbX0=uB6;~VhM{7e70-gMPZOOYBRNt
z6-rSh{ow_bYoMP3NRZHZ@y)gJvIbK55EOzRV1X-5|99Vhr*!O?G3ngpj=`KBkMf0S
z8IHs9g_GoOc2dldX*9w5*NzX_$%qaUCG|p7z@<0;i9Ic)khwQ?*uQps)gS9t#Z8|&
zEhi%_(|o=5J9pi4_a01H(vhpKy;MRTBjI!XEAYw21~8%vmAm_%347jq?>+1a7&-rc
zgU$|lKQ|0HJqN?LeB2oiQ>(CxEW!QGqAwO<9T;43Wh_bw^T6;JRsEaote{w8JfpKU
zn)pS-H>wcAI3X8ri4!URnMe|$4*M%paH=i;GpUIW)!YwERFF0^_%FWjLUBTT0(Q{8
zGCdJf4GGKqPZy85<J|nALx;a5oOkYd_5O9`Rl8TLSZ+3!P&1(3z^EQH{f(a3u%e=}
z5`#|(Yiz0Jg9ps(ULz1|v$EbWF>&R+sY8E65(v>Hr2Kg+(#kS3>s84GLE@<X9&Ej|
z9vlfz06ISZq&~#7Z7G!E7pVWhS~9#5$@%5ipZRi6R#DO)-Uu~`Lplo^xCqhz`)|K3
zKaL%J5TGNMN<j49z566mM%LTb{=IwkLPy^>6&>1R`jz4O9d<ajvSnk$k+3%Sd-fDC
zpGU+m+>0gU7)W6uEta3)a|c%vK~6Zx^GA}Ffgs(mVZG%UMgKtl(-<1j`~0B~0qBT-
z(+xMKqXV;o8w*6jS4u0IiVZ(wVhX7S1urI{oBzq)#FdlWn1Nfw!NXjYrx->gi_bHE
zl$)d6%`I<y8EJg(!-o#o9L0kx&;*x1hDygUXxaX;Q9v1puP|Zw%31A?YdXpx_<Hv8
zFhMwZ)8EB2_&3~mWBNCX7nl9?GuC)^1C=jseL2{T`IJF}q$iu4@M2y$X55%Pvg@kB
zFD)(c-G2KW1+7}Oj>Bj^G+cbn@qLa@!Uiz0zyH1#Yg`8G|7YtT;U!5!^;J$WxYz;r
zt`0_jczE%Rog^|39`Zn3$^V8SH&9bLISDTheol5ayuigU+Or#buZT0TJox;8t6|D8
z3p*G`#5Z~k9X1T3|1@K)UAL|pYdl7M{wc?R{_np1ZW-DeevDj3E63;HT_NcKZO{8p
zWqTeGG#~q&IrHY&P5!KSB0OZ{Sq|o!w!lzv)P+_{xw0k-;JdLr`UhB97}snh57^&C
zj)sp?W6<^4?b@HdlHBAkDp-%u@-GGN&%A$Sq^FB*G~NA9kuC35G7r8?=@(`AfRq?6
zm3v|I7pX-(pTiNe9!(?&2dRJQ4<~+5+J~hC0>e*{9DFWURr7I65;#+v@I8ffqDZ0F
zG4fmvu|Geu#Kp$@@ZOV}l*kdQbV?K(7whZTzC!|k=l%V>)GM#NYL|Y11%XE)CdTtG
zJYR}k$g#ukRp~mjOc*i9i2)x@8}87lWBhs8c=D=${cE>w?4f#rM1(g=$_a;v`hzQx
z!|>@XakQ#6tc(mMlH7&p&!B_&2kp<iVKR-JBrkdDALbMM+kAB}|FIN`vnB~De>U(h
zJ;$NvE8v1E0+f0@9Z}LnY$H2T)6|bR<B#6_dAYD6$C@*`Wxc3snFyJXV>&IL-uj-Y
zEQFKgg)@Tzr=v_1M5ba9pY@MA>;#9-Clvs1TmFY1dZ_T_S6(hDEYuC?fG@-oCQQJN
zhi9gUIx=;Mj~jt88afV!Yu7AX^m$p|<NKo1AqG1}^_Pwa^6%HLUozFDNPMB*hV|ME
ztd$w^`W#Gu%YfV>FXegU;fMFmdU<wfk;p@Pu|W77d=1Vx<McC9L_MpGMiY}+{jKQ?
zNs#>oB#QmjLejvOOO3Cr{jv`Vuj$;cYve?-aD3=BcI-Hr?nnLEarDr`kL;a2dseCa
zqAjez;qJTdhMiA?o!N+z6&-`{CCd{MuTOTWi_s$tpEy`kM+C+8ZEPSK{Z%`QiL+Hk
zFKA}*iL5^YnR#X80`os#s_3q{`s!U+|4eYmz?=UKhQ$|p>u1i^kK9cTtsOr!|3$Sw
zI7{o;<i8;8X*G}j6oUA)FO!p(JgbI!XZ06+d0Ep?ex+u7IGls^Hvv|EOJ`^WMk4YM
zP5-@xMKzy&_IbIKFUWUtzy2wcAAF#YX#M*SNTHGda279FT)q|4CYValRj}&9XW0{M
z;s?}lMbY>X^q1;HqN<^&_#f0Ci+jh+m@y-}euF%WK2^c7lVRZtFTCJchmw*|Gos)+
z0)7rQ{ds!EjGX!n>T?vUxW~cg#TQ>HW<+o{z7ix1d4*jK`B9?SRT?*d@gLE-a{^?@
z<=xtKYpaG28?l=K9(<!S{3Oc%pY(TG*P%ZpBdxdmX=`8WUxY=}pTc7lCF4n^VaGM~
zC$UCQHQDbm<C$klUctsF#~s%vv1iX-iJdxiN@&)!nM~(Z>KKRi$Buy+gHId0Lw4Ik
z0PVkxc@t-;H^B0$tFJEDv~iQ$(c^*w*W&9X<z^1AJ^fYOVEv84QOlq7Mkz?G`Cs^$
z`WM$!!y3ooR3*jXF~+&(+G}=gRK0Mol%lt>ru8#t(ufP_A71}S%3v-jOh5yYt0op>
z>Xnhm$9ll_SUN3QwZbxXiT<A4Q4yruF@?0Wq{QE}Y16nKJ$fWP_~3&@e`}8&QOO5p
zUi|G+#8v!V7)_#jDOh@XCfEAK#u(xFso1DR#lQef@WF-xI+~AsCGmuZu#=1>fR0mE
z%FSoh)uz81ThpKD-sjJZr)CuXw&u6$yY9RzllF(cK70tt#2T7Az@N;croVxf6Y=>m
zk9w#vt%>yxp(fpf^p_17m^)PwJn8W-ObDz11|J-laO%k;8Dp819lGwJDSz2H*|D&_
z<SD}wR6_2ntU_^t7@p=GgDfwcnMI=E8)SkShI*+->aP?g|5+s{Gya~Q{&dmm-`7;p
z&csi|&gk5n1M8G-FD+9$d+}T1BMGLE!b|I)*D$gaoqQfyRez$tJbQL=7i>btK>jeL
zJ&qlHye3ak5@P+C`Ug5FJK^ctOz(&is=uHzSn-8IF2P1k!axxXM-9OzeanZPA_g#G
z{=<5g0nT8Mk;%=D=#2e&CHFoD<qP=?5Qd_lV3#y)Bse7fk3asnB(p?{#K*d$+|4ye
zdBd7AyUxmu<t_XR7k*xL-0{cDdfVK6S3CNAzJC1&pgpho?`w3XZ{51p$|3sG47KJz
zG%{=sz(qv-NcyWK04ylc?O!Lpt1U7EA85Fzjd`~E*M@%}-oLhO+h*!j#l>3VF<8?z
zkm#QD=Rg2bF^T=yWE(<i1rj0uX*SUM7ai!5F16)9qqehs2cOHlQw~>MeO1BcO`A;F
zqiL9pnO6EQ#YpiP%|M6=aV_LNtZiNN+H0?t^yzb4V(;EP6FPM~Jh5rBrZN*wG62Z(
zu~sQI>&qH^+G*Q3>mtnl$S7zRqP;;ry_0(N?48*0@J<QMn>EAxH)J(Ax<01&-gDo*
znWtd~dv5$uYyP92>L@qmcU>4hLR2}cCMe`m)Kp_Jwq6;cI`Y4ZCae$Q2ka4^{$g4Z
z9JIgY#Q)3r&y!L9!pk_j-I-vr_`8K2m4IAJjm*+4bp>~);{{uV2}#(n3fVePQ>f%1
z@MBFASucUlKvN5lg~{o5<qwV`^3)L#@KFi!sbIw-mRnkyH*Xe;QE{^N0cE=PzI*q)
z^x{iwsc8!rVnP<7Z`@dR(N$SEPem(N4?DyH(7d_xO0=WT?_lTMxDFjUC6r?4-*)ZV
z$!G!UI{%&d`r;1G(i~RPIQ)8>%29d{hE}=f-h1}WdTADEDIQNocE7K&>;h)=r!SpH
zQHeq@a5CBp4{ia^3u%?3v4kiQ?T-NAX!XYpqA5PxC`NxLHYQ&9Dm7vWCS#MF2cHj%
zY{#Xufo8n!xfgbR33dimDE=YPtA<-{P)g-ONpK^vIU*D(Li=Ot52gSoCM5aFWp_GI
zc=YF5fLsHJ$wvlQ(B8aoSsQAA*Zw3VJ@XvaZBl%b{ubXoLn5pVQ_1{C{<KHqCXM6J
z(P!3wG0KM6A11N-NW>s~@`0mum1!XV(Hs9JF3z+F{j3-7Jo+m+sWknu-k8vmwRt<L
z8=v+7e*+d7Upn`MQ0yf#spUjEi_gdu(Iar(_=p^u|K`t|Thh1haTqe|bDA`19E<W5
zUs7D;v~Al~*VjVU;5sNkqS(L;&i~QyfumAOG`y>;(qZ_bg7U_ts?)1i&qVB^j2<El
z<+&OSwy94(S%_UYgUVkt{Is-mAJ%ZnZrr#D@;{}<E}R%S_Rzx*o2f?B1;P<C1Yf);
z4J?|T3O>`P=QL^DST=j0Cr5xh{P4rF(0??1Mz=0<{!?fkRRnWkMdGby6>CY7i6$l?
z=ua=BgHQ+6e+;LKjBoT-aFZpy>=3aQ{IU`>_$6(zmZWZw5HbI;(Op~pL-Fu0`20vQ
zZ{FLb^XAQ$?J>Et_c`aBlY-qhQ|$-@OxKG)yyM~V-+uS4bUIQ0-_~#kcVtvPnZSxW
zw407Ts{j8*e+n(UYqLL6hUHzJsZsJjt7TjNYR0z7={W3U5){cK^8Aa%uJ(8>myA$1
zJ_Uq}oc@X<tfl@BWrv6%>A&pzAFw24xs!|$_84i2^^LkEcIebeI{Fr2ZC7rd!Oq!s
zhqdFbzX>Vzl4U*}SNd3r^^d@hviLS`*nnq80Ka}7M(H7dq6W;V_;}eeT@VPz|Aq}4
zVNoQr+yzCzLxurr9UCr8X)aL|!Fq*Yaw98q#vS%{zyMsIjH2XH1@}+7pBwD>d!gf5
zJ}iQ!d9&v6<HwH67&~rkf$(;Dh_#5%2Lpp#=h`1=@+{Q65QdKk0sWDkrSpYnaYnI_
z`j;Q?h{pB@<Ofjze*;F}NX2V>8y?aymQ(gX&L}QEwyE&RhG_7rtNjNgA4Y5@cJ0<x
z8Y<Er#0OtL>gUIwe4@CtSoTm8iS5DFpUDG(Oj3vl-2Hvxq={0O_U_d);iQxMa~%?=
zdGqFR_-LFlcC6T$mJ{m`pY1^5ZA`Lt+g7$km|Mf_ziIOpq^W8DfT$rxcuQQ5{<xGB
z`J?p@_-PUt{9e6#B_RJ}*c#N82R;_Nsi}6Jc;boTl499ZAjtj}U-&>2Wrvfu{BgQ2
zV~Hne^e&KL0{SD}wKD}|gwM^z$SRE;mjBtAVe20<UB6B~knl1XA8?mmiqU)uBb~^Y
zx{uy;SKx^DCmV12V?DGobQq$eFNW&@#$(OwxFWp6v}1b%7|eh3=Sh1$3?IR;K;-rZ
zEbJ-&L=8AEKJy<!_TT=DQVTwKy827H6Q1_RVPEid=v&?8ueSHEO`A7yH+B(|3N~!i
zFcuwsRiXH7yYeHbN=G@-$qynpPjb@VFk=XU_zzE(-^lf^1O)0I%t$~!r2b%p7--MO
zZo<Z8%1juVv;cwd#?j4AgmUr4k_;t2Hw3|&dZql4ip$KLi)9rq88Rd_B?-$jfsD&}
z9F9?W-+udDnEn>OsHo7#wk>{aZ(up11~F%!b6)b0OD;~6_697}vUyAJ=>$ICR$6?u
zFl7lc7^MxXe}sktQBwy01^G|RByf5NO@H`OcKocd_s{+Z^%n~tOn=ElHV;W@{ok1X
zwUGS9N4%;a|7fM4#Zd(?nTjE(>NSK^zRL0n_PmLev$D8W4t=E{>lKceGUjXAxT$$j
zb!#1qB24+7q!CaPna{c|7bA(04E44l*0n+?8!LZ*+qUg=VPxU#cix`=wq1OW5}EqJ
z@#7^t1|4;>_8vLO6I#$!6duKa^G6FlC@a);SHJ?(cL$%6bjqoNWXC0vRa8{^F@1oG
ze4ElIQc@;#RuF@m+yfl>@!fac^>p&NC=NT#Kr3rBh@gBb(dp5>63!v^M+?fezb1@O
z*_c+7ApM0m)i$oENT$@tT~2nEE?~<$%f(z-{I-X+k#trDSU>HZw<GGGmYyDaSi5#{
zR)35TvyFUmm*|9$M>l=ojy<*qre^827r#gMZg`<1HI7LCjhkc$KPi=k1egQ0h1<J_
z?RT|*P8N3jwG0^O(H~5N9vyx70*Fgv{?12W%8fb+X9!4x@;`zZCi#z70%7p!uhDV#
z<UiLha3TDaUQr~-`WpE(MDaPzQknCpA5H7P4{%YjtZbr`M-(&|6qt${Cs$s4_%ptM
z^Nb5oeSh_Tf5C#XVo&}XjOn|aMkBZY#8iu#x8He38bbSnFG(O$Bg?U+w;%Q&FmOQ9
zu;If}vBPER@Zm#o9-ca4#E4WhT=9}tclsx%Bs<fmP0eoIy0u&W=e#wiWWrq&_CPO@
z%GgfS6x+#_NeWsOE*Xu+=}%3|YSV@<A!=akZd!8JguBRxRQ!?Oe%jxS#+ZCkdSt>S
zgXyfVxzZ5T|H&tw%*Jk|^*{Oell)IU`J}<8pMIK$4hf805h@$ga@sHZ?+bo;S-Bze
zIhZPjMZl$f4fFs$cg1Yd<j`8{AF3Hmf9#4}!w%K!Z@6KXnuBWjoo3COvi_rP{P}-h
z!+JxxkfO^`T_n9sI8F%MkNhWG8OvHRg8hZ3!RNK0gFc`?^F5hhtOiff@KHJ2`WGpy
zN=O8J_`n7j`Y2M5&PR4m1fv5||8cnsiqB(OYMMc$s1VxTh3H>VRpndx<H~aT{Kw`7
zY4MnH&GyHqpL|yK@yDNF3uShg#W+`7ae1oM|JPrBslu`lG!29O*e$xIqJnG7DSp@P
zc;=`J!|&0fo3s-cOwBiLluiutp_Kf|wM4`fZ;bplTz#V1U&$pJ?JxBfvND$$QD%-a
z{?=RfU?d7U%}C~V&N%Dz6igj8yF-g-g!Ct@kpyR%maiz*oAQYh*}azxVfQBJZBvB7
zyu~pn{ZV^FZGWs^zaGgOX#ey-xj*eJQsC_3_wLm@0i)>TUi2q6ouxEa7Qg?%{z*fJ
z4ow@*->~8Jh7TK>#!a)ZZnBQP6ehyKVg!{xCWW%ZdeA!RP>{xtAHR3=CakS!o_}YY
zaYo81r$}2*!YzJDskWDtIXkj)xQUk}j~qPsdFVv8?H}sHon}QckNy%@J@rx<b656#
zs(%nQDE;O6HEd`qZ8QvL+G)h_5owJYG$Lowg>e*8E<Ap!rG!~u#*ylk9?($R-;8hh
z1>vJ}r@De`H%j~(r+c?!u&yR()yHxb{BAwEV|0KK1vzUI+jZtv<Etc{J9m!n-1$h>
zKZ5__i!T-fgMs81gfB=E&E@2#|AGY{mKDmBQi<jaLVIKIse@&NAEQ*FUU=tSZEtw-
z8HN~;EI9wGH}LVboCM^`4sX)KSxsDg_=ScEQ=wM=fmoK(#KCQJeA0k`2M8lqyl44?
zs~g|sN+GoJOMFIGPPnB$QQyDTuUoGpz(s4nbMi?iTe}9~_v+mn#hv9{>tFT)8;1*n
zLJt>T!$rYp_9r#y<v=tzwC98BpDvx{xoo+HfHDRJL9h+6ltvN_2~U4)+*tDnb^^Zs
z`Wvvdv~ppTruZnsTeu+o)yqXOpbpCW7Vvqf==$rg$2y*H1VmCcZPrZQx1!;La-Z|R
zawYR{eDzZlp%7&PR|oMWse+z=unw(s(EhXoEa5GGw2R~(o}<+N4A(*@lz*uFk%dJ3
zUy3i9|HTKkNlfZU8Zmi{9T_4&`tT?B+qP}3)|~IdSN2%G<d}ujgp<5Eu;G!Nn{B4R
zFebi!naY@~2+7&ACb>*dWPJ5CBG?BKIP&pUUCj@x;Kn=rWo2ba1^~6u1D-$`dD*3@
z_0qU-w9;`@G`ua15aAxAjvwm<Iv;-Up>#B`^?TAuCnfjqhiQcfrvVmz_GvlSmP2Gl
zpqG2ZD4@Vg6xd^}I(b1Pn28QzpTiv*F>Muo2%$0L;jH+$Aq|h@%^$A=_uy;o@0!$=
zLSN!RY;}{kI0WIZUAs<3?h^(ZoW$@er$X3x!T8lxNI$SpVW3xLCXGklE;6q#8*y2^
zG%UD_Yc$UIwUF_I(8XsXPv7~-(&wCY=9%(EJrw`+GtQ8&u;c}N?7}K*;wc{3N5aQT
zS*2}6Vq*zkd#tq;if{BFxStC{Z`!y~JNuyDkfB5BWn^(JKvy?aS%u@Z;G@w(Lxt&2
zp77MSXNGD#61w{H5=`i2(}*{Qlx*diM~la6^iA{QoQaK#eZiMXnCv2yKNnwwQO+cd
ziXV`NR1xh@o)ETH{j0F?%=;gFfE_?UiQh>lo|HVGe}AMk)x--tcGS~p?jicufe!;o
z*<<?4=tpJ8<Nnwm!fQkkhH0dN(UaHw(Yg9_C-5g8dpwI%KZ(uX2OoS;I(p0)w{s4W
z>rDRytRwW;V^gv^bnIw5A;4#Wmrq1|mBt>U*&n4*)DrQj6h+#v{C6luMCV~NMt*)C
z&UrDpxp{HfSYOE^(<bBz#<iwDq5lZ})@|G5rGl~JFuJP?c5hb9z;WP!0ZBS?fI=|$
zi`M&-{$i6A%U8(gVeS3E%U~s!*rM3-bGTu{1{o=!UYA^aacUOVC9Ok$)*F9Re=k0-
z!^%H)vbFh-!kXg5%V7NxF;M^F5$z$xR4k(xeH~}WkYV-k43j4{Ze9I(?ZwB2Nya|W
z)1T9-$bto-nJk*VZ~1TO(j^$#AZj>A9d#6dxaMe;|FeY)E57>bs|pNRk_X~3N6UyN
zDSzL8|GkXngPgAZtJiQBV#Po1xZ{$uvU4bkI6cV-bEhA6;#6P9*|d3cRXH{TgCj`<
z{f!r`A>q;W2Z7j{tZ)HxGuT3I7$i~%Bi4VTMvvajk%<JS{<q$Kd&Z%Ma#Im;LH4&)
z<ViV17CC72TI+wX6J&GL`cHfq*$PGvb1&w`4ZJj>hTyn%?b<5tc1j6Z{xIde9-RFy
zY=rSS=l%VBS$9oxCVZt4s?3Bf7<=##V8B!u559<GBoiru^+yQ#fSIWYgi*l$_@L{@
zn#{X7I?yU}>utAZ9(rgKj>0qgI=+=FSAjs{$?+7d^#+lwj7n+n2Msz!K3bXj$HDrF
zvOb@QE;wL}xY6@}UG)!T^WuXO7~&5i@keLyrR)+6f7Ayqpg%5+kNV^2+Fv@dr1zJ;
zLTK$l;vjr-{{8pgrR_!hzI{(f!nAE$Z%`t^=jL>%qmym@gV__+Wo2c`U4?P+FT)0V
zw*D<HEb%}0{PWz=+vpIEuVLZokDXDS1s{H3K-d}8FWFApWfCs@Y+*S@T7j?8QBGn+
zt1o@{v-h|}iLxI_=nZRVcsM@%UHwT!R-gvI=;^OfT)c?*wWU8I7(0sG5%CYi`xnx@
zdh?de_&`B8pMy3#_P(e`ydeAw&c{yI)Iz-Rwj<`MO@GqTN%Nvk{l!vXjwLm!Hf@4D
zaLoS~54kv%&o3~jHUB4JxerMaSMIvgpY~s|oSUm@`V*iUJEc>1{%}jjV?_JI+tN5c
z{<s1&1T+HcUu+1*xU>>~!ozcq%YD!Pj1LC2>aWOhG&1d*{zfL1QjY&K`CqJb5FdHv
zp#71H_q+W4wfUdL_pf*IaRv1>Yb&DjDTGok*LtspQ^`<WtlwyNL1LZYbFRDQy3~|Z
z?j(pC{MvWy5P!oBH)Nn1gNIbqU}!(Ql8sdPehjzL78_#e^o_{)XgEj&##9K!0U!U*
zKXCzYNNXg%<>pc8u?eyf6jcz0_{v%Dl1qlwQ+db(i+H2cM07N2hU!0W?i@}X6k04~
zAImAZj7iJPlWB#NL7w#VR72om<;tHqY+JkSa2_>kbUI#2Ng&eDKtqQPNo9wUblZ>^
zp4IZyB_5Tj-TsI|HgM2`cJ<)HlWJ0OSAV4p;3L%c>u<kS0^ha&_*-wwXn^&o7(WvJ
z&sYqce5_=nZW#r=VokbGJ;yh6=&;m_FTNzzt3O9t(0TR8$PQ*32ns3jJHBt<#34h5
zq9c`(EB>%yLsNS9?u`bs_&M+Y_rIm+VCGO2>TZ7F_W$|kU#hrt4nJ1X5Vzk(y&7O@
zcd-5lcGLg<iIesyC%=Q~!Z9<ZKb><}yS8?^4Y5SeIPA`M+G(dHW6E;wC!c;&AKpRw
zTe&DPezn@)i;ruX0Z|xJ;zcZf6vWz}m-~PZW~Tf(GP_+2hj>OO1BpAUzoZR}Md6Ke
z^_TlP><=26y-xk-&YfFo)1T|0HEDv;zXo&OoVi$RyLNok2|jc(`7p9828-qUGBLsn
z%Ls7i3EC1<I}>BFv$8=WznHA79H~XbhN1dXUV&3g4qi}v+%sq6sPU+s-18Pct|<`X
zd*FcwGmh$d3|{=;gSbDgTv>7VJ@*vm<>dJC^7CWRDaH;mUtVs03^sAVeQqpXe$~bb
ziI_3|2OgN5)wOHaM2o+2)yj%{@434$7ko4xcww`IJa)86XIrk1JC2IUJ#vX0s)Ea%
zG)x###waT~8j5|%e-IK3JSii_5mV4g#wPog{@?_g0(?L4IW5qOf6X;l<DDX)e|s#7
zedCQcrBgjy{*g^YY;XB*+O%=phYLQ;A2)7HdP{83L;|n=v6x9YYShhG_m#q_fN0R0
z`Y)j8#QX2xW7X!mZqu=*B1dVPSX56Uv;H4E`1B+!;gIvm#~(KUPf3RT)n62`fRdCU
z^$)^q{+AC~24D1JvOpSZ4PLPP$*8Xo{U_Z&aj&K_>%-KTXJ$N;%~9H+_^kg=M}0VJ
z*6i$$F~Sq!WFNKsZ`-m>dP`|j?o5i!PRxjZ_=t33E<$^AnQ!URr5ru3&V*oEQ$=xc
zQ4L?LzW(ZKyu=%cP5J+3$zn6@Nux3SXFfBt$m-8co}PT-v8?no>BJQLl$7L{DO0B8
zq$aatN>lOKXP=c3`2qYu`crC~90tEu{XO<4o#cP9KkjV(3x8MtZ?L(@)M-=Mxgnsb
z^-^OdO`e>|{G?tX=^tW$W`}*M|G~^-f0<RO`V(28CBvFKuq8Ylttz76Lg?_}wZ?h&
z*_pZxElil3lNa;s%$Yg)`3<BmF9EWT9XmRM>r~nLpE0ZDdtl`BClE*^FeqohOSgzX
zma_=~c{SzW<H`S2g8`IQo^iqx9{9&592HZiKZU6PjET{v`0zP-^2E&8Sea2RQP!>f
zy-G&rnS9ozOP9nOZn!=*PG}UL&m@cpuh+M4-(*|=aA(e+eny*+=m!5l)j!mP!ck?e
zX+Y_1`M3BGNtE*9gGzLgG**?p>F?%0wTBWY4xz+^yu~koPyc67RxExjHXe9<%H#O<
zp&LmNKP5TE_t>LTvSoKu#Af=>oH<kSw<rGze(Tn);(GV#Eu;B><-GdpD<wr7p<4^S
z%0xqp<U#2_ch3A022gM=Db%!S6Ew=<f#2MD^GZVT#WtXYV-y*|inavW8riYt9Fvrk
z<cgD+lq6x8;S`gJk6#&?7;&zm2$Mf%e~BviJeWHST8}}yf^CXiwhN?fk&u)qyB^d2
zN!VN}7ykLVd2ah7CMLZ7cOc%sFhATs6Xo63znDeC@}8ZC<uh3R&}MeVj2)ZayZ3P@
z?`lkwI<Ot>uWCiMKLdrp<a6BaL;Bx8@qXFug?OyrpMLu3+_r81MtLML!BcFSfI%v!
z4d(M}R?f#Cf6Deeg^~QnLlfkY1s{G`f84lnY1qgt?D@xc$kDglf=wVnZR&+(%a+S7
zMgnE(pT<~2cEN&=^2UuBXWARV<u5iS*17p+@)3Nge^;znrtJ+CdB5~07cV}QI*|EK
zY$S38mw)Sj5dWb459U9qM_3fZ1(!eT``4aPfw?U=R-;lq83|D#qPoOCpNVw5T(f#j
z)ru7>D%<NWcuwaoofGkLp0{k-vWiT6J?V7B5qRg;T{Y!d$6DMxsldi6PsRd_Gyar)
zBz(pu4PW1ILB}IKeCyV)uU@}?Z57wWqR(;1^-h{UcYYqf(j_G)Ih3)DOs7)>Hh|bQ
z#*t<?5ud6tP<a~tzxeWt^6lGq)Zhi3Gi6Parbc#^TJXUFGujU!5))B1wtwTswbkp^
zud8ZGdEoj`p84~0KZ88Ukms=We@i&5b=!EhYc&ebxUu~)A@;xV=9|;nv}(yUzi2E7
z?en1#gyG?c1G%s$Z2Z)zPh^XMjV$Qs^5fyOm(wXg2H{B@B&mZ@Y&G1ylj{I6xIN^;
z!>B$-T~uPk6|nqs=FBO3=%I)A5@#*#ykT8slS7-x&Yf78HfjFb^Ya&C^c8j}_O-_%
z=xy7z<$`*mm#PB;NNb9g@ZjT;y3>isK)dPYn=<-iRM#3TklnONv$(^tP_3p8iTwU2
zr%jV}&Lk-$rbG?1Kc?Z-y#M|OCH+o1Np{F%`eW)w{&wuZTvf$qu+N$M)|}D@A9_%B
zYN27?d+*)yFTXmkoa;Z4Yum#Pi^pazx!-^PL*?&l*H-d#;GvD1ARo1g&A=k=>>n+c
zX<(2{6fjCdEr?1J1Y8vRgFxtrFG8u=-12wR%{QjEY}p!X))9guBOOfjZWAl^MTBO}
zn#Vmk^+}{VC<KFJLTj9HW5({;!6{(YnFv-YBPl}z_!L<506cdaR+)rG$UsRU#lv%n
z`#-Ed%2x$P4{?`I$(|yo&nYS{toh)hk2oFANQHn1_}I83dD7&GS=Rh290g)_cbwK}
zn0>x*VFNdPpx`yvT(j%__umhcT`FMhPe#1MKL^q1E#6IOTiis`KQk*mM%Mqa(t`Z3
zc84XPftXK@UVOR7ffin|>c>hf{Jz7m_GMyc-Q&3dkO%*;!~T}=!G{a-C8dNB`?(>L
z<QNdbE|}I>$%XnwX~-Ha|M5kT_^khgR$_~~!p-=)`H$+rDTr%-t$)Q9$aIn}%7Rwn
zRaAVBB@AoPiU9kJzXl_+R<2l4LA$VSz)14MIdkXa<GE9wk&zj51fDw_Sw;Z2{xQmW
z@l#XMd<_~jjJ@E3f23Y;{spN&{rpQM>m5wTspg0iER>yuwR5;xgV<`_y5AB0yL@7I
zO#y9Df1=*_vZ8C(ZUTB3)`@%Nm05Y;FI!%|cFme<ypZ`Dqf@ap$}yH|5RtIn9K{oB
z$zebAM?5h(<MEO|H-8yse6Qyv>nw3h8O_1;p{;SR$;EKKtl%VJaz@a*@4Z)g-dA6y
zbnVui!<JDWwoRDz^2>QYEc?EE-S6w9v#xQICh@J?w2s5Bi(Kv1DW_g_r2nT2KP|^c
zK-s#G_Lx0uc0NXbRc*s_77MP4GEYu>vJg|l#Yifb&%YQQG3dC2tboAUXT<yT(}l8*
zD)s;Dvrj6d4B}eV#b!R}Btv}bfe^nBd8KsZ6_=+q;~JXq>CmBL;{18@a+jjhuo~-`
z9f=KV^6^oRABqsn4OePr&wja>H^ij#ray0mkn{|v{$g%Y8mAtD4<E8IoHUBsAHl)^
z6o!F?d*sna_x8Y4$BrEjmn8u@b?BII-L==I-am07pNDSx-+aT(X|39{LdPkSR|NK9
z69cq~h=`X~X(u$DWmr^Q+lB?Cq+383knWO>5s)rvkQlmCNr?gJP(mc6q`SMjyGx|I
z8-|H@p6@umfAec*&)#d@d);wer|JYV=&O6CWOTHb49Y6@rQm0J?h_z9L8q7~_*+cG
zOKb}4-k(aI+B|HCI@>AkEz%Q-%8{^Uux!iY;STzp;f5vidsQv}Z|W~~U(l6M?g@PW
zQ)K79=TC=g39+So5TvAX&szYGvv|y+Fbh_v1{;_BzCb#hu^rEJ_*p2#juygccu6)}
zPbyW?McfnX!6K+f!I&%;G(a!^!evx1s=%Ym`kxw7Z0O?7dTxW#&p*y~KA9cUs+pf;
zvuV?=#}MT>&<tDyiXoW1E)bQ^(v+4`6rgeW0eiL(o+b-}*)sU*<Oew4hjN8a4Gv}6
z%kJOVqMTf<P~tTSiSkk$95SwU2G6A7IU{fCDO7j>qWlfmVnW5>B6S*){mJz7hqKuN
ztw6)h$DCKEj7x4dgu>h?CBw|NdEH27j-eFZGuNte&Ih36PFjEiLQVxC2jVL2KmG3T
zLowwZNVHXb|7k)2z=g&6K*EH`{0lal-Bo(X>mY(c$(V-;p=R}$H(_@r)Nr|+vXy_2
zFV65v)E%0DxpwuekN>WP-KM*D5zqrT=e`-=8_U_P@R{^KfzP)jfsq*6vb=%N3iPUu
za6Btgg<_)gD7Nh@T#BowDXl`qtqagD(C=P_sgLiMlrT_(IQA@CLkf<J=bN_H){yEn
zTGdLK)d!vu`JjkHEqD-3Wmn}s*Vh*Ix4A8a!#Pi&QH0+`r~dt&FDOTHgY3+=ehA-@
z;^CU3?z(H}#*r%<^f7#DPY5Y1y1{X<{C>&nA824dU9EYFj%cR4^RFifeA+9D7A)iY
zMsz}4xQWKFIH2kfDj2Xri>48gm$n4&WS+j)i^**-a?`F7*+MhzDu<MOzWY=!Ts=Y-
z4upKYlkv+VTBUx+3}0C^sFPo%z9rnRoPGY&)j+nzB&)c+l3_+H^BTw4<5}fW+Ml^c
z`dP*06+ikH{g0J0dn6Tbxhosr0!rt5s|0f|MAvV`{2%ZZ5rMa(Utz{yKFwGX0zaOp
zz8C&XY#9>1T0&WOT1HDlG1?&zyu<<*`J}hyDzz@_5O$qfJ5IOhKW4)rANbs?*nie>
z$u-BuPBk;86wz5Ka(+MdmXD*==Dle-_$=Zc#r4LimB<^8exQ<vUN2*+rL_yX@2efH
zT(5!SkMK??T~c!9UcC*{NVx1~ZMn?F(N6FU3w=yY)YsE2aIB4p<bJD_&6kAKg&R{&
zU`U;Yws(*ADQ;?iGS&*AC>nKHpKf^xuT9Lv%+~P;_;L1YxzrQq9c>go)-d-h9sY$V
zF|oM(XDV!`2!`7sY{%hUawUcAc*-(jgI9UcVpqXRVSi^kG-Wx-xr8popISs$uTXns
zsRZ8&)9;&)7ti=zHgGRRsBuRQOrXNy4>;Sq_IO|K<;|^~5Cmh%`oprx*SZ37GMCox
zm=3qp49eTK4{njMM%+T74By};=68vd*%6o!#}-lVKnAKG8E%~}&r=Sk(r@{HF93RW
z`BhRR3Q8)6h@vMMix1yaY&=qR$lgPd!8nAhlnr}uD>>bjyW6FQQZnu=STj_LMM&u1
z(%vuw$&Y>wE|)Wc*U=FoB1+jYWLSZP+av&UH6WRhOUUWPK$8S3p&`J}DZ5{&!e~@Q
z7O7}8558tJf@Af)>q+@5GdEMzM}<zV^uCgG1v#t$l7gu4l9`?7j4y8KdBpoQq+rN3
zbjh>~4MX~FFFFt#v&e}s!V?E<jAlqC!3N?_{VQ$f%~;%oD-z=IPMShE5$s9GMrYuc
zSj$I^T|T`J)0#TDwWS31s=2e_uPW|IzkRx`s%+$Z55kl}w=mqI=fe*nbK}|`3C<y9
zdks3@Eb3I1Ap7NEHNdk^tQn_yv+=O3xc&Fb)Os+U0~EatryKvX-<_?$h(q7|jvY-2
zk?8J{Y!JvRzW|rKD?dNU*_&{LkG+#VDixvXWKM(!LPZgW9TmmY#7l`S>ilOEJNRc#
zT}p4dicq_Hv0~%nov_EE0RCu%;>kb?)yP){uIXUfDZr7l;SSl8IYaVq<jAGg(p1hW
zqZW%O258%RL(*JEo?yO572G~AVj||P-aj?FrTWD|)%0i`zOuoK(-#qmGNg}-!xTpK
zV8Lvu8?Gfiefe$GZt_(%Z&GKvE3Gb43em>@<7`D+-qf8THc!l3>GboiW~~eRQECdZ
zNJd>-DhR9TQ61Ur3DIt@LD{jSU@h9B|Gr&q7|ikhrcliinB!9^`<tBH;;eh4RAh8$
z9}x#M4btrTgxE&Yr7Scm9P1;L3lJ!DF|QCfO1(P<h1>-U#ZsDFBAq{NuEMe*2fKUy
zSst@d=Q<_=MJp>EZGUWTi)Y$AO@R8eL~D`EN3M4idAW>{MTJq4GOF@F*RY<l;X=y=
z9(M=$KT>HlFCizc`vvC8Z=OK>9*V2EJe|b`w@5mI5X|rX=+|_q+}O)!=tC+&O7T6N
zj7EL|qc}b>L14>klUT2BtFMyu5bud2o%CpDKpr}MiA|a>QkY?)WF+Y;r`_^|%c+s+
z26nKqI57vM>^c<ZzS&yhuG3<NUxfZO;R7UvujFtdmcWrz;XG1<n^Y+_43zb#w(w#$
zxEuhZXEJd0X+rql@Scjq9UwaFzUy(j?0O1_P^DEw&X8NMiQWBFmpJ;sMq(Ah)>&h>
z(Q+4eh#B}{$E8X;J0qMZCp0In)D1}`a1?ubKlIx`&AA@kArzuffW4S~HlA$fI<20V
z^1b*|F}--~Vw-K1)f$|UV3m)BrRn2pT2S(}pqFZoRT9sScX_=nqAjc-*vHNf;7{-0
zp06~tVW=39Ch6<(zSj!9-HrK<Z}I#9h@`=P=UyXfdgR4fWARN%zDRDOS{G2rDmzZ2
zk&D~>jY2$#yY=yH8o&CRZ!iiP_l#9X8rapvD1-NALMkDFXWvbB6Es2!QIpI%fo&Sj
z@st>5ws|-L_S{N$llR=FkI@{j0ArIx^SHl8Nker8n1*hK#4M{szII{4o5|k#7L?Z?
zZy@AAxi|>}pPFC>k;*Ner)5s0WxPzL!$|rQncA0$f=hRp_KR^p1EntYOFLrxt32*O
zCIV)wr^8G5p|*Or*~#i={2aRRV5&Pce$IJBNYrZP*IH)Up;Kk5tFJF|0o_8Ml6qGC
z@}`nGz-2!kqMlFJhWZo0?(Xn-F8O$c;$$XCkz3;UWlQZ{K(F1?&C<(+jlaTHCI<C;
zU>M#K#YVtVXof7l=xdlS5Tf+R%X+pHxXelz_CBe*@YV#%cOAk_Y@qsxG9@A@ZvQ~*
z_Yo6S;kjv#VC9&n?Y8!<3SgOx?fstQ^s68V$;&NEZ`xD40{Z;-5qlk%*JC_8@NOL*
zRN~^VctR13y!^RTQZMp8ysB2&SYUT|L3<`S{j)#waC@<mU4jQ)8HZ5(vTXbJyE0ge
z#0S%p-6_}Nn>>T^w)<zpJ3Qfk1{PwyZUvDT%%uJz00H>p=i4zJfr(Bub4;Gl=&6C|
zl;UgUwjrU}ry8Yr;oP|P%Q~y!108++7LaOuaJBKOw)i%5D=g-kVzkzf<J)H6n0_EU
zcQX}-n=?aV&(GgPmK&=3=O=b(VUfb{;I$<Ql>Mu~Y{M-Ox)fnN%Fr|0H1!Qdq({T8
zKXNN9zswFDO|ZW}YfBD?BAmO~%wvYs<Lz0|S+v8cK)=UW`wZ|Ywon7htAb5L&U`3~
zUKwHM&%2}A^^p(zW4{?{*1OP|6;mRr&$FATswP#bU1n1EjFnOEbCpU;`K_5L{U>#P
zIR?P1Vm$gvSs_kW*AzV8j4c;6(j*1~={-wlUI^ubqJ9!nD!>n*{B7haX3;UxG0O=t
zIUp@9EwJD${2q$)cucK<8s$Nv!=|390>vPpZ8zQR?F=Nu9k3&Pm8+|}-)E!qL_tbA
zzjGP3?f!T@!js?>T2dOm2kOizha;pQ8>Q4ORdM_aky5pMlY=qk_tNoi6B4(<KkxOq
z_Wq?x2?*-K->mehBzr_Eb(LZiB~caV43vPA19izdZKyCf*g24??A?aqdjtJ<ve6DP
zKU}roVE;?=Uk%`xJwU3Q@?Rh3tm4hY1fLAX;V5DEGvIHgjwOh`>7=$1m-62aM}YJS
zmFP08B%rBr#^@&_Op7BDoROsk^vsW}{l3Udlzt#g@Ie`bz4>a88j@|s8yPUvygI$>
z+zY2l2J8MR_kSy{r;|ueJoXZM6g)10J=xE>us4>xHDJ2^yB@g9Oe^eWiNqSN@64}m
ze4ekHVyL4RQr_Sv>1nmTtq_q&BL%!sc5rmC9L+`}eNwrWO)>HE-73!pyKns6?4x=D
z;G!<5Wr);RtjzA^gx}lV#q9-b#l1h7pHnyKa-&zz^<1E22-biOqEnEriv=2EKRoBF
z$@l#BYxLZ^L*V!e|8)zYeD_!EDR`QT;_ru)I&GzF^TV}!ovjKTNPZyAAi=T&O|jg!
zS9We<=tv&h_s-34+wM)V5kSu3rZd3E+O=)qxpP?O`@Qc=8z0}ko_ChNL1!({0DjrV
zW+9h=FI!pzr=Trf6I7>nG2h7*|CTnPvK0Te{l3J4dC6}b->g?*VA!OnuCMbXs_g{-
z+d@BwaN{LO-*Z))EYQ$F4ysfQ1mmECG$5_N>#C`efwuU8h&}?rB3zo<A9X+Qo>)C<
zAPV3Qk5;fD1@79RgXU`-Zhdxh4r6UL_@~ci_N)RN8=7|nMes$nR5$Mu2fkCrKQmoO
z3Nb%!dG}7=7Wor^|5F?dk7Frrz;s2wX~d!yd%^cuMb{M>)z{8Zyd&3f!3-?&@PX8s
zuaKjnD)2?e13NE?uwviK<~paN+G!-*#V8846ip2EIY`mla938bZZI)^8bNnn9Cba5
z6BsRZjO`#~jqdcd;2h4Ks48b}YnBsL0%_-3LIKZs-s_&;ls(Jv9lZ6H-PxF$eD$}x
zUkCP5C`|nB1P3^hc~UxU+Tj!rSeA&O010|5$fx4>D79;|h!=T(DmjNjh0nlitdXPe
z_i79XmT$$MjGq`_8huAL^}zWq!<9d*37%BPOKdCzhCut-e1|NEBhJ7*lF<$e98LO7
zUxdq+3SHl&im#Ez+L;l4gK5FUd?fs7)&~hyq|4Y+c~@+R<%nhXGFwOs0T2H5X8X3E
z_yyKW0Bk3_5qL36VWoK&H+5NbiL2bb3b+~K0FQC3+I$lJV=)H06rKidBUkb^qtv{o
zcf7Ub?XMr#v2fx?Gnems6OCUHZ{_E&TDvl?QhKA1saDSeaFrH~#n1n;$B&F6mQp)(
zua8c}Gc<Fy)*?;hO%*ha;O-L@#;Z@<Me;FUQ%RYm=k`F=m2~5fp|n_Jy*MGHjxjGs
z<6V0NtH9ay_f>8NW$YZNewB$45IHi&QJw8;qJ0L~vwD6=(Vo#51`YQmDTa%1_L(m}
zc(bt6a&#5A!T`^|PuDWOuG)v;P@rm{J;(f6lX%KI`k8Fa%q;BVtc;+AMHc=UWA&8Z
z{$9~sO2#zA2G&4i!CK^HE-uB<LC^PRCwi5}4dEE}Xs`1K%wGETS3T9dh&0=oC{Xu1
zYtXmwRt>SSJ$t@jSt<ujg+y-37kH-l_lM9uv>P~)^K5g97Am)Xk5_fUS0g7plL*44
zYc_h3+#|By=BaYHiiDAANEtQTX|7KR*eq^a_j|CQlks$62P7CiYX2Z6hDvdE;Uc{<
zn7TV!$>F~Nkf(#Ap3hD%oI_U&uZ8mwMn@aj@tYnet6VkI$)uLqgg}gUvU5dKp~jV2
z1s@ud0`)nYc6+#cJ~}@h*b97nilG?elq#M-R;qX8wgBIjHA0&Tpv%UC8#F9p-e;>}
z*`NE$^eRe>!sebXzeU~X-KqwK-#2j`$p#xaA!q}<)?d%RZJdYqkCURnLW;n;k<Fzl
z+%4~R5>>c+J3Z%dlU@>pTN^Q5bUwH&xN0JV3J@NgWh;(Vl4$GI-+RJqYawjfomCA2
zDvkM2Q9s72F9$DdI4nQ~Z@@}Q?vkL#mRqj?P0d|3-7uj=dLUtX$CUv>wkx;_9%a(z
zxs|2Vsav)*UomJ7gdURgb|<pp>ucs5F0sxD3NzKPJw?5x4fsjD(&YS{o|$=aQG>Z!
z%Wd!v^R!IAvJ%wrRhQ=eE8bO@srSi~<wDnPlGXVBUx6S)YbBIZb3t!-`)2#ojm)FS
z!2L=Y!XkT7Cx=L=FQHoQJ|&pRLBa`%M*J90NS)l#G?^qx+&8(LK7<^|>UlmdUjI=E
zo|gpZVLXbPr?Efy?Xa%ZTC2#4WYC3D7CbJp@5s0j<_fQIOFKkWE91F3BJu|EXemDk
zDQ)=VvU*bEu64t;wGxkT&{Da+pGm;*@2l`9vw>AVLK<_)_*h%M9N8Z1Lx70exkdYB
z+aJnE#M@LUU-5So?VqwMJDxG88g+)BxP{`Y-5Xom;)Qw%?+;y-U{k}2U);(YyNU_X
zzB<Jab|T;rLSH`uj-Qv^nJ&5zQnqbxnO4`~LXZO#Kgm`F$c@CA7t`vVT+DTd$TX4a
z^7apn?7MmuQ<l?+WoCL73Rq~ah0|O;e`s8c=YX8t>rQe}C&?jM=zWUOH?y{a7kXVx
zZf(ii+gi86$xA$j?TiKnI(GlG<v5b*rJZi`$0^C1Y@aV?ga-)OP^J*ozV_1yPqjMi
z=cU&3PjlQyV7|+ZWB@)A6f+$;Q~8JBrVO&y?${@>&jHRGHzw-ablk`>vD=H*J#o`e
zC`e+G8%t<nUcNm9G0R<J;eY0u%)CN%bfrsJ4j&XKG5=R=YpL*(pZ<4c46%KC6ACYF
zz<--MM`l^<t;+|;bbZ9KkhJi}2#0<#{O>W>Oj(GUPAcltuD{TrKv;FTDH_O5L&SVq
zY?4;~5?VEb6ZnU)3U;-MbmZd;493sZd=9CQBnJ6hg^?eN_D+i0W*dok9_y@l&r~R9
zAv|GKGf{`c4>Mh=tM<?fB<VfNcPll9-}*1Q$*(!Y=RruCKnuU3O#R<R*S^q9dH8EX
zueZ;@Y6OZBPy40T7Z=*Gk-&p2zez}mHaI%Vcj9yX-k4wVF}E$^Z3EWD$i=TNTg3Ex
zv<>d5MUBgp9F*}N>j={h2i>*}%RdC-g=u%$rSHllcC4PvrQf)H$R=vg%JWB!?WX*0
zL>e8h-+x%7>JJG*>@!%b!$BSxeit(o3=g+e`?4JT;Rh>#Up<=(K*3j!xKoHo=}1EZ
z3U&e^n=+W|=g*0Cu2rVzQaSHhi?Y8upkX{oJl~v7IU+jX8VrarG_*<ai@)#uu<%|O
zBYvi*pBaBSTi_Q@HEnAy&i@hdiqh3OGi3>}hW-pbvOnrv`C@~9FrKFUjFP-MnZdTk
z`#Sv+0@hOS>V{u*2Zv}iBk0u)_ffAEhtRx5MOaTt9jnIXn<P2cxY)|m#l3}^1o@p6
zR58+#d$r9B7SZCfSJg07hsd0VTW0Kd`D1nGI@!{6HD(<ZzrxtN#rq`YP%jB>Lhqii
zBFlK%o!lKH$ZYoI@7;_d>R0%R#oQz%ASM>q?Q<&$o3pdygal930juCM;O_4}aND*=
zkjq$nthKj9+)tJHeI5fs2-dSsE@>l9Ko#5%K6Qftm*2Z?UWI7Ii5(9ol~s0%ovbNs
zERG{QrMXg?w}Ps=uR<^ij<*a}fB7R19HTW$fQ*<WM9i_kMIvm&@4O@8B-W#X$fZ8#
z0lM+y9DzX#HXhYf0AzkWTUfI8znRFVx+jW`#_3xo9|dA{zF@gNKB_0&9VyCYJLo(~
zilTVA+WG)Lcmgg53u4z`8@E4zst_Df7Dc`Y3j4qa9F3v^t`%jQQ{{lF*rS@blK0nR
zej{&p0*8l)UVARaCjX;K{5vCy&KxMb{7#;gK2GYEuJqxS$0pZiYbE<InBr3eH2Uk~
z?gDU;YzhG#gnQqgu6Pz@dN~9y)BP30|I^L<D+}g(7blNgI(F~x=*ap{5PuSSz4%rU
zD!n6l3KrcL!+AgA=Xmx6cp`4|uOBl2;K$D72%9LHD5|?$HJXmtCAf5^=`#VEG}8?P
zc*{rZRehi0IP+0V<ih}xm!goLJLxzf_;>WHi9aJ0K6K&u@9WOQtCEG^Hm+AH!p92;
zy9OV)#&`(De-A|C^!>>Y{yxHK#p&N;N_2H*RjNY;q)!+2>g_ZV=4_m`cdS2)t}fvI
zQNu(apdMes?ROTnv-w07*~B>Uhw}HMVNJ9Fd9VHp8A{eY<$_gk`vO9O5Th%SEJTi0
zV+^7IbP&}6O_#LwstzjB@`G%+Kpu{Px?DXc;P+&YQ~wt6oxwPPnE>_y>^m_GWrYFS
z?;ev^Cw=xE3tP|UZC$tRTYWfpP8<v=<PGmtqWsPP9y!XvQWDP*?3dt(Ch%&dxmF<V
zl*MfGsmBHI=3t88`XlG7$hz@{_}z$YadkB{HCV^Px{(+Zx+Uj%=P8~E)mr}d%!9M$
zhoCswXgEejh<g78RCW}J4f(O`ku}LjF%LVyry2|EzCMxsU{vAb61<!6HXr+>IMnSW
z+}UBtotNlyX-;Oh(wFwC9uj$JBZF6I4?_Ja41s9Ks2$BOmeX3Sp&7SO0&DoxI0dyf
zW2PRmrJj2BvF~@?l!R$3Vac=Tq!fWI)fWp-s~Y&9$3fvfLWOKsbI2%hoLxgdg-DIw
zegc#r@1ZW3eSu+hD%wJo13;s3WB&X5j=+U;WJ-AR@_ja%PTRvF(P8XQ`}8Kea}^b(
zn+oHO+`z3~xt@WTn-dv&(T;ywHT9gCKJOYMrGoG@KI}Dg$<NGuB_Dw5?Ohy!mui9Y
z-k>;INn*EGo)&fc6EGz5trH21ndgGuEfF4zmx^ngU;jhYn|^rGt4Nr+n|&-}O|7`>
zGKH-*9E1AqmpBkKbx?4Zw)dJhR)ukk1s5*E>Pj_9w=Ev@ontF{q*HTCR@ipc#Licb
zs5$7&BetVGt4&;BePFpuF^j|CT$e4_0^1aJ1J#g?V3U&JLH=V&pEH76v(r#ZZYN;w
z8im71BOl&G34O*A+~=%n2{HZYEvS-O@3p7s=R0T>d*4mhV9)l@O_%BOPD7U|BG0^Q
z^aLz7=)dgn;biDI{7PIGL4p?0HC57fc%j|n6ssCJUM?ScZ~sv#fs?oJXP*N4y#MEc
zun{fA<_~UzRlDRtz6{lx0&9|xEVwyZJ?j*_9dhsl*fG;&a65Pc*~ct@jg;EmZUCA-
zpWFdIlC{J2b+Ttqz_TjK9fYnW4|>w7H;|3hA0Nr)f4*aGKJHjT+(I@Ae-ummz<7%L
z{19=E*jKd8(-Myd4PAwuALXX8?iju%*mg91$Di|RxF0Gue}<XGA!kpVA}or32Lt^>
zreC)lb4tM~Ifxz=^U#aJSbd3l-jP$ysk)ES@HFx|2d{k*c#7pRPNH%}U(CBW%GP6G
zwzhHiy|+EVFH8OBcQ+-5FGe$k@PRKmg4^#?I%iJ6#pEBznvqxJ%vQf1Dm8ty+X3~3
zX{^P5g}Ih+{CkdgfYWDbABR1_RZM&?K#gaY|GL^AG#bLVzzFiH+76yKhaoI|hwWZp
z6*s&B$72L&oiRte$WUbe6w}2Omi;-WOJseFw@Fw3X3vnT+*_xxG1uj&Wx?|f@HcYB
z=bq(PR703&M2~K=lyYW6lqrnF)#@FC4I_N;26*f#i8%T1_Hvl&7#A)fE+HUO#L@|3
z%`{{QF)#IV332}q*#5wyjq^CU*8yJ9SG|DE36UFJ!OuEVU8bnJ7Oi5bSr5eI*6`0L
zBY2qAD|x8~0G({VgKVG3*)@I4TK`hN#&Ov1Q}GJ!Nyh+BWGjH)p{z@r&!;V<v*OxA
zPLDvh=D+gpcUAzm^z6Z(ivcadV*Efa$>?GYvv!DW00CGM!LS;1hU60oEV}fY#TQOx
zA&3GD_I%(GdOJ^`<&e~uG*K1egYxAiJ}>~Q{6e1C^(tTn?JUe@=dP;+d!9i%#i?V)
zpbDlLfLzqeA%gf7;-*O5WvmGCB7KQsd#WFNH9FMqpO!sT5RCk8wf8*oDU1E(tG6p<
z;9P>THw}O)IAwYcwk9x_HjkmK^bmp>e+ED;jF3j7knd~9>BFPj>_yz7iltzA<2Ea|
zO1wxtb4wShK!OvF())KkPZk$6GQ|XkRTK45@bG=z#D#w6W0e$F6z~|g*ximG7tux?
zuwty(*2o0$L*lqNNyypg*$`F)ztwi@`G!t!<Z5W$0O0Nn4wQEBS;>Gb6{<Ocv;QIO
zJH7lJmnv}7GKDI<9HCQ_9}zhRyU0;#NG9Yf0BSo?g+o3s9W#AV2)mf113KBnz`%~n
z8X$Y`UMKI~d1~h`U(VvHaR=R+Ql$*xuBV`q3z1vzlfP_Rn<$tCkGvy+>#GfS{}}-^
z*n&-AbFbc3O1dCi{UF)>`HbL{N)wW6F>n0c-Tm61XkR>g(b3Vj{!`;bdpc;}b*Y^!
zBK788ixphO=|av9ZvS1M9s+y<e+Y&VsGiRjsGzFYL2fB~TD}}8gL-eeEb7|)pKpxT
zvPCdTKbfRG)1Itk+ajOG#x-2H+@|Ol0pEuYc|A7WxON}h)DcAV@}sEXo$qQ!V5vs8
zPbenJJ2J};ugCWk<(qgtS*Q6M*IK!|ZFUEr@V%(S*R8GL*iST%eL0x83RVFOhrS97
z1-yMY^n+0JU7yDNGA}#X@LU3=FZed8qvZM^6X?;4G&hYjcdGgF3fJ5{t_m=+4D|c!
z3R8;B3^u1>tqv5Uta1_5a^3rSlY-bCMnKmX4gax=bkBo_kN=?YR>`kM+HgNyV?U@a
zo9Wc(UO%i<X_#$Zp=pbIoxZl)=tT4H*eN$|VXyaJnQe^&KIMNMO=4>hPlSG&G+Kmb
z@cSsP?%8?U(XO83ej>1@e13w#HvajY(}-*jGideRnS<2SJYhFH?H|pZbo<w5Zo#KB
zL;0qj6Tb}0)yMQXtDbLfrb-)(4Z6I}Ax(n!Mb>Qh_Yn_3@XMz-$^EGj;dKvfa*Rhb
zCnkd#-76_1-e@5Q`S3{ZTaO@9@Z*9@>Oh@trWgv$IDkm?W*i;RI<K9SO6ywhqMXX>
z5`GazVUje{1?sX&UZZyHH1tJc*OQh%=NrgN>~t~7<f5R7vYi8r0?FiGCalp+AdqK~
zS~%vbD*|1F#Pghk?d^Nlqwl~}FCCBCUpv5Ij!8;jqm<7Mk6Ikq@Mg`W3&ktyGCRyF
z#5c5W&RlG8?s?>mn(vFye%>N0g(JuwZDc$)kKorns}_b-)YR9L)>ffWu#2NI-=kme
z82;XH%Z%jlFl`?JJ7Mc!1Z>6L{wTGB+>18gHlbE7hWsk#rtl2R(g-a1Tb^@mTSfw?
zx8NIS_Fm{Ep9kg=a{d5x2085KK|eTLR_20-H6+E%k7eHFl&;7;rSH8{X@*s<)%}n<
zKGZRj=5-h_u^s>Bj!(In;XX)t^s^II_!ZiGRp7|?MWy@pI${>ssU3DgpS_{)daCfQ
zsqYbi)SPj*fx6%$?@oGqds|aLz6Ja`6p3<lTK%7TIq9eaK`_fDQ#+Es*Ar9~q1R0+
z&p^^x7T~x{yTC8{@Dm8Blyd`u!ua@)kUes8U{2ujGB3{J6~L$D;Fn>qdOlph=H|F-
zqiUP5)pU)fhZzf<FTY{&;uk`w4$Pi58Mm6!tA()etU^CN0@d%XWZMU{Lz*Uz0UWPO
zmwv1v-W!%#K0vGV5#F;9o?mXyrl`lVVZ}l%<<>T&iqzJv=p_Nosp?7J6sCyyFAiS~
zrSLQpH}2?Bx$F2>FD$9?tqU?!ZdT-1b)bdxAp;w@>=cO})lej%{#F8hj3Zzt-{UD=
zlX%|nJ>%hY)h*8{)-%wH7C&y3hHZ#F9f?H7S2;4D*4|~SYh}>Ec+NlY_yc<L`d#M{
zRBm=R!4c<EQg+=vY^B-@+*RKq+G<BtJ}-;zZpvyQpRFch#TIFouMgs3d~p{s+f|Lz
z)BF0(_gCVfh>L~`sVEqPhAzZ^9&u6yGr@TJd#w{*VCUABcev4xUJRR|G7c2(gR4@W
z5<=pNlh*M|kX9Wb1@^F!ANF81NHzyA+ElV-hxUR0&0YR+%a?t0jxzR{NTef7b+;ZS
zabq{!sbS6h81(bnwH?8A?;N&*`qW_h-cjhnRT)&gaN~$Nf<1!V2(ZFyzY8F%2Wgw2
z(Cc7*_;#)FFQ5A+-5mljF5+MTVbTV7)ZIXG=)m#hDKxA*{(>0o-K+&aH8jdQ4KXfq
z{p)!-N9qp7OJGQ7P^l<sYFB98pIbcIsSj%W<1CN6`nBxN|KLrx!7^7j`Xbkd>9g0j
zT}=0w9Jwe_N3OxJi~0MZMQpuLD(j;2+R7EW20Q{IUBv!)mi99eC84*4(?t+c%I~Me
zOSHvZ2!1|ixQ`fZ6TBv%7UT5nmc}e_Qw`_oq8=UVo07U&s^#f|)MA9xPX?i&C33gi
zCZ7Jyu%V;y`g*p;aRlA!n=|!+KPhV$8|@*Q8lh@Zt)~?ZVC0}58RU43r_4V4DdyU`
zi{<T(%GJdgLO!mAjwXZdG2=S=8nR>xuIODB61Dm>DtBhY0lbc>$B6qk=IOY1Fs`U4
zQE{_7Nw`VlQb2<#Dx7MSAbYXb+Hf1J@D5eE%>dS9;dfo;EXav)S@+V&=bP1Rhb^v=
zA=wEECHFiPgZ(<+dtCm)4~09S*DB`+2S%|4Z5UkGe)qO`S52kh+3SxxwYZAKzL1U9
z`?z}!A(gg<2jV*SXG~7C8y`pn@qgt74fbybh>rUys$SO__{<3$KloXw#xS13cWxko
zmCczf6&Cm#SlK?ny<S-7+6qOzyVD0Ps6viUJ}oJ4iYIW}5BK=JRA2VC#Z!67gO!Yt
z(-<w4VAm4=GCOiUPealNIYjoHS5nr}7ddZN;p{RGmzx^K{<(H^N^tU)K3U{NiDl9+
z=><#2wZ(<5s!n(*Iasjq8ug6Z2ysMN0W0}-_bTRFZQ6W2f{76Z>OzAsDTv=tyEfN6
z#vsK{Gqu-YH2~dp<Sd+Q6%4kpA0&$<{`_!~atp<o(x3H-8hq58wOY<OLv9u1uo8gM
zdW{h%9)vguzfqv^wTiw(r_u0#SRcisW*;|J&NHkn?>Y9tobCePcpKh67S(xkxu#o#
zha2Xey0}WfS<o)ECl)3QD3V`LkK>X#qRmX5y}!tG1x_ym?+EX1((-vP9l>g#*_V}4
zRx!KYb%)<8cGh|jL26oCud~(r3JL!Hxb1i#aDYE>{8t2rOa7O+*_mOUBH)c@U2G3$
z@DRNFg4wHpIN`z>!Ly*rC^~K8DUe70W54msL}8A<%eea~hKzWZuXh9(P+$B^kP0Jb
z+`l8Mj_yxMOgz0knqy%j;89jd;jGBM87p7i#w+L_>r$I_U8>APB7CGql$1s~Dd%jF
zB^J{+4$)E{KLwgVWFm}X`VaLjFj;4<p|pPI38^VdOi1MU*@2QXP9RLM-v4M;%sSJI
zTS|&BY<PpSDGhv)<;T*9{J!e1cgNGGhIJvxE*Dx24nP+4TSi)ev^TfPu+FAaJyV>?
z%Wi|7UVx(yWUQmrRQcym;8ic^BwAT{B9V*&gbTBK`Vw69rAR&MO#C!C{#V)-2RmCO
zsL9L3hwnZY`8lWh(1Wr8D!(_CSfrd|q>o@5VUuEeXrIJZ`7?*CaAB&%jFmgcA;#<Z
zo*fq@mX^L;WCh>Th`mI%6b$25EatzM)I%*UO0~#-Q6+B=;=LAlObAy1p}y))Mp2cX
z6~rEp;mmk905B!2vxh0n6=9_69+u^QAk9PMhrR?Yt+%0zd5)?S6D)~x=$Ds2lUbV@
zX^+(sU+XD-i^{Mw`@IYh{pC;z<v563`4UGP+|KPAe0ur@0YPmzK&k<bF)aGcM}fwm
z2ybuztZIkf6kc~tq6*)U*X_^9CH$3t1OW_OFrR@&?4E|7q<OVo>ce-FNH+ol{8+rs
z|1wo0seP@;I~g&mtYU7KuFz$Y-iRFlIZshU2slIP>1=#M%c1hLktMh3N!d)4*p+Yw
z8=?~g)o7I^qn3euhy{MXoom08$rBL|y18=F<Ja3ml)M7A?al9d9LG`!D2}A6^rIF;
zyGX49sTDSLi<7)p{3a>(U*|-IT#)4L7MiRMY(o#uvI<vH#+Lq}Hq9dZm}fOF@BbXL
z$*?*x3#Mb+JXtI-(lR}m#P(b+cU&kX+g@^Xe42=64IOw5bH#^g=E+;T9lYPKEGfb6
zVvTTfYKO}46NUn0{bmGe0^0C{kv!Efo2fK1c2)xoK-a)^QDK3&q}N4Oq_%R6TEtGd
zL5)OGmz{g@(S1aNvK7X=llGSYXx$w3nS<@=RkPEIR=xR`kb;7NcL0ZBE4Q(qX%@Et
zte5`lZQd%UFC`;pERfBm+8;&UF<IDUiZ3%&01$<jaFvn>qpkdT6ij@@%909vB+AoU
zka~19RBG+rxP_WJE~AKm4b-^JYJ_-(>}IeGVMu8hc+c~x$>rBH(kd5tua3);3IsNL
ztninc9sF?C%Xr+oSnOg&%(Z+mHABGsSoCxk!fnS>Y5Q}8Z9aM<3l-Ye)C<w3#d8x4
zi2C|>;J9_a)XxOs$W|o**XUH05eQ41`08Z=QGE>@EsC|OvJJTamS;e54RGYbdo}Uw
zDUF3bNW5YPlPw_<H7H`%g(vM=fwDUTe$M=3<TPoocOhT3S&s9lWYw2=G6YA4h$(6u
zJn>4M_eTMS*f`dMDxMT0-(rat7ur8Fh<B6BAs9ob0NL=tW2EcEsqMX*vXb((TDnw+
z-f9e%R4!9`B~;mVZ6;#*ZL?zK@u0wN4RP>2^3<NT%*Mk*FU+#k<#qNO0-6DtwE9!7
z3Yrt7JYKuvAm$3y(nC8Bhl&bp{{W;qytZ<~jQ1GQOA<}A%XdS;?qgs}hywRS5!Q!X
zR$sz4*e$^}ZGeM>g@*sK%l-dlk5n19;7VW-e>((|W*Lr2hWfm0bB0)K1da~fcUc@&
zdL>?3in&%3G*Cb^gv@4BWcZT`r`lUiDzR6FXu+yfpIqbxULi;wCQqLlkTrh2ob8vd
zD1<$~vxEvvNig71_t^gIMrM;Q72+sOZjp0e`=`jF`|j?CHxfz$OzQFeTLTnh0N=+g
zywgyIS>A6R0ZS}0$TKc1@jT7VRUN7PCcZ2#-;pe6E^a>m_k7MF4mr%z#ut4wOEV9~
zo8idvfx2hdVWalqgIwHXiGl);HMH0A^9zZizRbu`km>2^iVAP|XfM+G-71n|Fy>8r
z7pi7y1<ZXH{#9wxv`Eu{iXRl#XPfEg1vyN}6Zq8V@as>htUQTcxq+tl30G5+YSy)6
zC;QN>aP_x50n_s8dG4FXogW%%mtSsV`)U;N!mmvEZw}IW6aZkSz6TLG?HLZ39nAYY
zBgJiGfWns6yM3EJBYIr?bYB;A0KFb7|E&P<Yll9w{ftsL#Cd&QZ^f|3Gw`|qT>7Kk
z-cEIcIoo&N@Mvf7#{}~mv8<k%Jf8P0!1%c~jjH_jbVQWWQC1&Ec{(3uo@5Cmb$)!_
zV1<2|loGd`N6+K`RBtyRjAr&D3BjJhFXjSm)=K&r*dctcaHTGGl~1}XUm3~HDIk1U
z$7l{lh91^gQX0vZTaievwhLF_$yt={^XZzv<zl*PlhrHGdwj{;=?0{gzK^f{r$G7_
zKDew;fk;%QP`u&g4_e96c%CYm*VneT*3aizZr=Ci5j4rYDV27RyXA32+eP90Uy=L5
z#N0c%{jgelm`0{l1sA54^l-~%FHTHpX<47}x{u{zmftDc{TnWX_cT)4@z0>P(u~G5
zxuLzKU!I=<2&ShYcB9aR|7TmaKdhO@*PH`Ez@OO``V??^$VnaSRNc<oZz?l(;>6YQ
zqo(aR+?R#D@BglTnUri|U4@4+#`Nht3rvX#1VESFFR7($dveixaO6!tK2C=a2yNJI
z1SAswOe8A14Q7Bs$ENfpkUr$rwJWW<8ahvC-j6|O5SDeniw;re)kb0v>mI>TbWF?%
z(s=P-ZQh|Uz9eH91iZJPFC=llY)N*t%kq^dUdBcKDP~gl%1RbWU}_{yS@dTPzDu@z
z2vmlbRdtFvzQag}g=Yc^p&upvA1^IbfNY}Jm?M9jQhz;PC6uwkb`lcQHQkB+{NZB!
zLa6Y{;6vmcVr>-Bd~E**%x}A=pK1V6OnTd}2VOGq-rr>0A}z+!Z2z#Djg)s_Oi3PO
z^iIrx_4EqCy`k8}pa>RBRP1jt%5;ORX45@U{R_hD{@U0W!R4<SmV^DZ_cmH}sS(&A
z>Wb!NSfP^&fB+q&Yx>F0;kS^Kmm!ouE%-r3fckOqOkUk5Ay*UzUh4?eVJ0+a(+>a$
zx}L<=qc&3nEw&udH~pfk7vXh=CRI<ZHQgT;1ld%DpSS&9G7V^emQ}F~)C2F{QQcq%
zGtInmUP2>~N?oH?Y5$o>%!a>$f<J^rg;0zlofo$FCE}Ts7y@UT_^qv@v%YK&{W%Cq
zFv*e0A-si3u1-;_yo$lWi&lIBUiI&Y+BIn_xvkFIH$0o04a^dR9cR|;xN^J9wSGrL
zb5suN1w_e-BZn<}!y{<Fx`jAyMk4zQ$Yt@6aodM4$!VP(@SygJk?}=EDtRi3UbV3i
zO*sNS1PIv~{Aa8cL;#St=ezgjTb&-`?$A;9&62YGbQZ(YUT+S4bZ<eD4nh;T<g>Lu
zR&&3DCtnqSz;~XvPS%P1Vt*KAQh|Ih0&TrqS;oQXgPXxo#N$q!M$7SNnSi*5UG{tZ
zw_!3yGHEw?d)^yrmA>e(Y^9$D=iiTPt!-IUn{m!2w+c;PM826rToI;SFoX5K+^CgP
zxQS}QH<A&CwwY-{UZ;;vvqtee@Rq}#2-@+p2G@)J5A~KGhF(NvQp{BOA@}E)hnudC
zwRF%y^_P1?+oFFG_xo>9gl@x3K1{d9H--IGq<4HC>uDsx!0SC~A$n%uHoIT<JTO@q
zO7l{1BaVyr$Y@#i+RwO|lx|~y5JD7xlp)aYMd+S7{VtGhJcZ75zXQ$PHDLh{|Mb7!
zX8(`@-h32l+)4rYwQOH0%uMOXbRUQmA@*)>(_K0#VcEQpjxLM{JaICp5I5p#$8|*F
ztX_LA?HbwX(?JdoH862X*REGXi!?G9g|K1R${ts86y$n(dSROKhLZQE2_M+<T@>|(
zo?Nc2*np1=i=Xpr6_enNmq5&0U=Zx`w9$F><#>~H4)VOKgV+oqNXqGAKk+n~)x7P&
zds-=m?~L&5=cFZ!Pd6h+h&GzxzQ}&4-~GV?@I>4BdFKfL@d`CrM?@1hBADo$IV65U
zQ);ItUm7IP2AN|g9BT5}70sk%{>+R|{yj)Fk(`FzxUuujH7le?=!4zNwLVI|CkyeA
z($wa?-0$gH-LcSvY`+}CrAm`(Oq};j*(126dGfKtii5Zv*d*uN4Y%mS-I)@PyGd)V
zT?{Nr7}1e5i;Tu$nScKpdl+AgUa>HnHOpv_j8BXtSEeNLe{R_h?_(>O)nIsgFw79A
zO2hBtrfflM`X`Fg$C@r$bsLO8BTzl6HhTVydwUe~#_YG?m|8RPC0t7&dHS(kT9#<q
zR5H>Kl2p^@LPMP8ckVio?Q?vDhfKg#MHiT`)NJtyq{c-qyY5%ZxPA*eR@U!K7yaq@
zdXav607S5f@=x1Zz3uCtt8G9m=!5KMat(1h$$rwyhZyIZ5fh`TSDAJsBA`WiGB$sv
z_&>b)J__<7gMO1`!`4EvH6@F1C*t3_eHV*I4XOClsQ9?Hk>$9EWPW^L<N3HH>?cQZ
zZ~lTofQ@ek{1A$rI!oyY{_rC$u{sLdCn_{cI{d3%vEq|uxb0>O!ngA2rv?yP5;)dl
zg15;_wx_x{%!z>;I>8FTAUt|s`ZkDt6u|S{|I2-a;Y5!~wE7#VBG;;aQQ3iTN>E06
z(gvL;FK^gGRuC>BvCqV(BOem|X4|POrPm)vkqB?DW1^#*Qg-Hmq+f9%8i4laz%gXM
zyVd7-K70H{Riw-tzFTd+VcW9{4Fv?-Q~pm4Rh3@cn8WL)Yk<c`#O}J-IeGW{Y+s^y
zU&%qOpjDniENCyOy{K>;b-M3jnys|~jAtM=8_73mnXh*GrI6J-@%eLr{n48b`U1QK
z-?tw`Cyd@TF%XB6`9S%bnbM;vQJF{W7uuOl55S+y3JGmE1lhqG!&?jjTBvMqc)8@V
z?EJ6a?e6~6b`9C+re<{%Tn?-J4%^Gc-|&1`7k%?`_TA9PpbGDcVLYDeYzjYHyLgj5
z%@|Jkz&#UswH9{HC)@f4a0vr<{V@1u!m@5k?BLYHA;cqv%aFYFs*u`HIElEH2h`bK
zsXe6rnvz`n&is8JMd?odP9&5xN4rSf!bsJi(?Zmrq6Ehjr)>fnS31n}LJW&;=_5S+
z7DdkV_228Mp3}qmc^y6(r59A}saWX@-`!sn@d|k}z$}BLu4;y|hMm`1J%jFt%+9hQ
zL*1=?kUOMKw4r_fcbQ5c#NGkVqg+Hd4;m3C0z?yH>TK++{O5~=)NO90Cj;u3U=L=O
zo71xRN_@&F%^a<dfN>0s#}nl0x|$czaD6<P(?A2vqBAbSYroV5G;Me(OxA#<m>2Nh
z2|0m9&b=?`k;1jb9NAud5cqpA1_l=xh%Xv%M5jP~W=p-$VdQ;Fl9b_$C=Mq&h#OXX
z#W;gm7syxqBewGE`JBMjmBM`745B$u$7$_g8W9|q^soW0T0o-bjBe-RfW2{1TqFb-
z2e+2gH}3aImoIvgSm-ys&pQtO84ub&?JOCLAhAdMK&0gG_fe{$ZDQZ!i&USzJ$;)f
zBy{m@yZP_EDd}tE$&NK`FYv5ki5!fO1okTNrq0+{eSm5pJ2#2<fo>NzuV0Y0a0NJ&
z>W=9Jvt;|1K83bja0lE>2y@_4Ce8)DF|tIcJpmq>5j0I339ti8_?tT-xsjH=3q}!4
zK<sCQ4Kx6BQ82%YVDw~Wh}L<Lye^$9J!v4>2-Sat{xxd=qT|8HBw#{t00`^%Vp)W{
zSx7SG0q#V((wmfh;I31`C*k)U=1&3vj1W&_-{3$KN|l7COBT7r-^orVwJO;XhR-Ah
z?;Wte(ZUOu=1fVI!Mp5tKo;SlZ2W(3_cX+3FW4r23x~AV+$PM)W6A8^;L%Em+%<}y
z5BEeiY)9p8a0)MhA2Pl7F?e53zBuhX<!l0Q^3#iDq@^9HsOEnScuXCtlZyqpkCZ?u
zDeVJ~(}``Yt=J`{$65D@wm%#(7BOy7zD~G1%!^YN-Rl22JF`!{ZrARNAfV!XKbj4=
zW(Dr8>cMRf*<|NjTJFdji;{rhf$DW{fWYggBY(x$N01e<PADp!j8<(V!gUmm9<9jq
zI)kxKM3A`9K6daGby9ZR?_VROh+-_}x3k?dSAx^P&xY;D+-mGtxncXiw%n(0`iQrI
zGWF)LDjiCF$t(n4Be64&cs61|X2V7QIf|@OvAx#5_-{B4#)wq-)$%DdUr+}qFwHOq
zML_jVn!MjkBlo?!I(`@Zni-LD-4Dg*Sn7QgZYXcUQ*9cBc~3if&mM<f==JqAs!5xN
z60T(?t}OvBwU_d$wuWR)PCY4!M-nPqn31LElylR1R?Lya`zX?W3wuR7B&DopvBC&)
z#Uv^kEPx%~?=jo=F{*=!S&o7O81%v5puP*r^j)bmyt?k|UTG`x7rx@tS=Y{KaJ%v4
zVpU?EgXwI$rO~SOlM8hgbRvq>GC%cI6`!p&sw^Xd&=Mp6MHr%|fV>QuQ-sVgutDrE
z)Ax>$ImVPr_zDeaYD~9J>EC>%jrsV%v1Bfi*7pj2rwuHHhIG^{9fpRaahEckE^V+z
zCmK$jC*+$H@cVXRso`%iAS9}DGE<!8Jb1+<*@u*N7sGtvyJl2!*Oso`<v&92Y%cs+
z;e=6wjq-^S$Cbl3ww8w278xx!`{>BH`^B{A{Zi%YW<Chu>oF2jA_4O-G*nVzfDlNy
zfw@zh3?=ntr?iV?ryLg-Zw6jJ|H{EUeRv{)PT%ZJ-^5bkhnK>_0=g_jNAi_G`ZcVf
zqT{NfNMqT=Uz*u<jL5o#|DG~8EG&GFOg7e<HrY49c6_zisO7U9)>w(TnUw9uzYdY<
zp@Kwtn$IL0Kw_mX4P+MKlo&N&z~5oFCF9Gshck^7lV`6tnzX$PaKE*@*L7cSZ}}o4
zH6Mm_Kt!+pt7_W+$>Pr~9P@lk@;=paX~EnJ_apYn)!|x7gLVX-itzOq-Og`8M;Yo-
zq0o}5+gp!1%*0Ji<B#7JU1DW@w8X3yT6QMI>!y2#)@TGty{>O4&?B;e?U5>lJ(y%f
z3_z$nFXkRM%M+?JZL))<Jy9}K-}oPd-M=(YH1jAteuj*nLMnvEE!Kb+5QsK5cirlN
z?{PFsCP1c3-4~9h=C?h<QaxIwI_RMoblo(lT43bbC7Hs*gqz>xah2HWdvmaW3~;L(
zMfyBWIAIiGmv$$B4b6`fxWc3p)?uZ*r0xtBj#S&0yU6|n3v-qyu7J@8g#6XF;otiv
z-v1H=Jq|xkUJ~}>P;ldJ$+b)$t`x+Du$8*~=5|U&+iHQwaJP%>U_YwSk<{md&s+ND
zRxJxt?z)y4YJPvF>{QY>Yx;%I^nH8l42$_u1jRcN$TfdL@c%qh$6upQpj6>4SkHky
zc@%IGrESNjzm_C9@ARV`whxh(;sBm(7>{FE?JNX5xI|4%#J1{P);#p20KSa7JD$ii
zn4w#b(8bExVWl+FNsXs{>kG$MtGj<dj!5bpe4%W{z8XcKjN3^O@@&2|m#i4n+9;VT
zi~=}Dq#44hBi`<>JfXh++xn(%#D)&<3>_9`9#+l<YdddNvFR~{gmx#6ZCX6?=U#kc
zDl}=kaAB_JOX=A<2L0uuLju|MU@fmD3Sfv<Gh{J!S~gQWC(!eZ{a1KP1Rizr{q9c<
zmredpqZ*-Dmw26*u!r8boDK$_q_Wp*AI7uAtCE?PDvXx$$+?Uaquhnw*evYRdY{&y
zr|v1d`KHh;a0W!_Le>SS0^^T2y1I^)S#vr-weLa=&l)l+vWBIFccpLx-=GCFbkpzg
z$g%jp5S4o5GHDd4cUrk_U2xRHeA+6cuzB)4T}~jQ1+b?-XCq|^HVU-v{h#U+Br-#j
z@}U8#CY2gK@^3IO!~SKg)P;;8D|23xvPP?x1Xn<vYmsrOea=$rWnyW!&FhV2u=c&T
zu$0Z``<e#j$$!sxOJNOm`p1v%%mmK<59jMwE8ph)t#QQ)O+QNDXMDy%)9svMGjFq8
zZ9QLaWmaxOGpTMzrtY1{Vu7TWNkwvsBRDA`*jgQ-O1&-l>{*{Ju?&C-sD$0QE|<t^
zXNQ8>WxMcKinYQo-*j6pnhX9?Pt)eb;@HE7?7B)leqsUW3*uCr3iI>8AB!zEvxMtx
z;96sGs?Bn!Ynkd%P7$e!ModJEZ2Uh{suit%hXfWPeu%paMF8-x?Yqf|=v{)RUja(}
z9*)2Bx$5A^rWr%77P_tbuSpgVJ<g1V!wPc|1K)6;yN-{BUs;)dyiRBj+66YU_Nhyf
z0lq25dQSG}y(~K!8x@}a@-cg?CCpd7^rw|H=|6HfCV&an^v}yt2$*O9d5R%NpW%);
z?7Kf|(ICcrQUo>b_kH&=#Qr|57#QVwH&s-)XPZc0wqm@#DgR;7N@5tV(tQ=g$d}er
z{Mx$^N_jMceDz7d%1m0kENKV+NIYBa@p&qfg_P+dEKYlGz}uhgX>r9X5V}{52we=;
zKPFT(zZ}WR?=*jl-ebR`b*@qKhC`MRY={#OVw7hg_Qu5jis>lD)C*fkt0%;Z<z<8o
z?_qwP3|0sR@bu4R8VywZqP=c66S?DmPA@-E3A-5Ir`cxE3m9l=&HAHZ;w$?i-JIB?
zP(%~NPpKu5zF%T%pEQCTw)?#~Tw3<X$C)jJXR+&Uz=(i{ypTbCru&g678uW4BKa4~
z?*sRuqTVdiT_gOV_6uiC8+y@90jH%XzotZeFE{J?@^}<^)~ZnmN2g}MVq(7CJz~QO
zGtEnX@0Qj-#-hZ>W8rv6JQ0uK&0LIIZ}d>c6qF+mUY}7?stJX^@lKa{|Bt7$@M`jn
z+c@3bATYYSOGbB#q|&9Jq)2Xb$mo_BsdTEK($bwuNp~oWkd3ju`@QG9?|<-|``qV#
zzHwcj>#v(3`V=FPbz=6X&Rb?-!oJ+D=GtDrnwct=4VUwLBe+YK8AEbNajSAx#8VNo
z`fD=+SA~(m{{!(tD0W%1Zu(=KLvkSS)z1b+YLz7ZNG#&w4JpFd@svl#DWKPCjsjGW
z{h5Dy*V4R<pc9QZ&Ov1p8-)s)UoZi(Ep$Tn5b2q|C^`=_r-PNU-E?CN^{S(;;uw%x
z_=0t>{n=!RbjR)LX|w3iSdn_}`lb1djoc!H9}>WmV;GGwyjf5+WlIX!QUq@oke*L)
zj45JJGA}&gk$0K8<3J22<K>UWlRPz=y}5r^*HCXICsVbH11AE~Ye<VEJl<d#1D1+(
zw<VtdA3&I;{E~{d)oozEz6P>yFnwy9Lha{o;k)WEGBBR1<{mRMqdcLZN^g4~5WMZK
zGmPy|B$*JykBVh0<N#1rN8wQ>L*=swBs9I=xA!5qYl41a-cjmt$mkZGNcFV9k3Q&V
zKdYsZ+`jyh{=3u{Osa4A*27J2F<jpQow^+GpLNB4>Pj7kyu6(GPA&C!das#x!x>a#
z!31C?!)>V+I<b_bR$i`txTloN7htR17?~}W10z|yZ|`oJ)X(s7)81&_KwBHGTy+us
z<?rcAm}C4UtPhRI8m!5zl)CeeLL6RcEpIk<Y`lBIir<&W>o>*};g!H#t><C86&w3L
z)r>F&O9sI}W<FD7jv`2=ksg)cFeY^J$S1;kRy*^R(9p<K<=8F4kIK(;qwDKu?!<H<
zp<(tH1eAAA5WZb-t0k(*hGp-W$AZOy+q{hKx4)ZxF;;KTlZmOXi1STx_yspbe!stp
z((;VR-F%8TGjyD(I>kH09uDYGsJ!+)B6{2+IGOz+`Im-zgeE#xF7Z6A1pEB^T}8@*
zcsFuhq>i9^FoI_UhnDr-Y#DCkvc^jcIVp%-h{p4WZyNLCZ4b7b|6>8L*q7$%9eX$p
zA1%zNF8H7y{$*pMgO|Ne#6MCPhd-psyCBn@S77=9dwp-GzaCasyF0BH#bqMSHc=j-
z`|aM~0e-2z^lHDnR65a!-D1V7m(Ab*tY#r26xErk|0)o&hd9k^QUYWAvwfK3A7Kdc
zw_Di+&CT`ADdk|QRZIY!RAtJwp@HGa+?Sk)OL+d>T@(?EGU#?Sym?UhZ>MyTbnz&m
zSQBb!kr`L*9aSB<(!~s~f>GSL)Zn#Z2SoQl=>bCav)6L5IXaf$Ll1n|UJ~UwOB`#V
z>^hr*d&Hw0ek=Z2A-=P-O7AxMjnqZvS>Z?M*ng@Y%+LpP_G!VyF!bTg;uB~6;OY#R
z=fgd7_)Qv%?6-_-AmUfA-NF7PH%G{zC(}`v-{V_}z0%Lzx~Vx~oAqzSFNboXkLv2`
z24;2du4Yu5!!Vtk5GK6MlQ3RD)aF_-|2fE3X%+W1!C_T(HR8znYX_Gf5z8F80!>a7
zXJnh-Oys{;|22gQ6BcxYD$I<}L(KCyhIRSw-e23dK=Li4aQn+7<g3z|bXM{DV-Iz1
zXVzJGQu^59Y{PW>)9^@XFsF7poYwvIn)EkxK|4Lb^xIY1_qGK$ozG6xVR%e3US<Xk
zzf@j~2%s^$<d?dY4mmDV#a-oHNRj3TGx36K+)gA>BC6mnz#AR2w9kJ3#KjaSQY2ca
zaLIPr`w9R0v~4;A#J2X&5?!`S_@Sq~o&7nycWB-P+4|~(g+x^8IaJC$;8B121g4S_
zeApfVoM8&E%q_QG^9S9cC#W-Y*>6d@+5GWNGJx$E<(c6Xv0$wF-{%kMgTch>c3Kwx
zp^WEK7%-!trh|)CxTFLev-o+z2S_8*{_s2BmbM?3euBQpyvtx|M#evtWRhjE!u`>`
z$AzyAsSoH6!BYVvFGrr<nf*WsZ7D>s-Il1h`JLeVY)+ixt-m@1o5?SH9ZITBN0>$5
zE=*Sai#Hu2?67~`E6d+MGWO5yIfrOxYHO<yBgZ2Iy5^ad%XXBB*->CIj4{Tt)2ziU
zhtv&r<eh9YWYZmn_+{|XYQgd$);#RLnc^=%DC(p6{VCkBlj_(<%dX`-G%+==vMXOo
zgMWr&T6OiRNa47^>pK<xh%tf~0u1UQr$`}ropHxiMMq;@{WnncZiF!RuTjLvbV8O1
z&8_cBOF8R<PtZUivm?2?rhk9@;q|r5rr<}iOz{Gq$>!k@V&}t&YBU&)dV90>x9d4)
zMKt>*R>?f$tt*eSD$f&&7_ZeL-)>vbQm(b1nHHBm^x-?@2Dta+E_$T-kUcia?aRgI
zU(bYN86rf)M4G<)O%`xbz$7Va3{Yct1L@t{26tL;#aMFjz;7GTendzE$iBjL>A>7C
z$4J|$$m>0GC!V2xvZ`-IzTdvy#Zqp3{KF*3MZ)n~GH?u<TQX#BqK_GUy(EKCn@|@#
z+9KWvT1a&#plnZ3VbCj>SKt$n(qL97qYVko+xeo8d}WD(&{1rlw;o8yV8?2)QpdX>
z2>qk+cp35KoKkNaraeN&&CkD{XIGDJt3tHjEbq435WtCCk4%R_f&Vs1A4}t+-o%#P
zyUOuiP&Lwv2H<kgP;ptHg1v?Y3jyk$0mdatOFpmJg2VnS(fZ=JJdcS9f8*>}t3~#S
zXH05c;C>Uc?s0F4-k+K3QnxB#RYj^a9b&(A=4T>H!1$QBjE;mqb1(FeOiJ_{y7_Bs
zD{e~j7K2f68^T`d2hty%Sf%6r6SnYNYX{;kC9lSDqC|6sCEOP?%Ry{Om{^PG*wx9A
zKE3IeA$OUHfeNGinR*!WBlG9Ol5iBlf<o{0H)Jl4)G2w(4t|ojP6FQCx9fA<-MdmA
zVxE{ujKNKvp71!semi=%oDd+?9JRT1O1{1JdE`vbLmFXfXd0M6@#ww5&LTR3m835n
zSC5YZrHDrT>-F9M-M{MD;~pLr7sQED*3Yzjc2RasocfW7hf`*tTAbRPNaRD<ota0@
z<g7~GYeh;RQg1q$za;MF56R8d3{Z3C&_81)EtF=x+A&@I?5bsE`y({M&VBzcaI23_
z<nu&@uM$qUFSf&ge1T-(L7`_;^KfY@jk+W`{M9}<CriLB8y5S`aPtBaeZX2ldlegw
zw9c!Z+{=@x(($oG|43|a@**k+rS_NR9#C<)-1PeuW0ox~1-F_44$}Zo&+}$MAFTyl
zsa-6FJY3=FL97C|7)9jWL%M9c$F$p;T3IK|)y(uZyt3Q{xPp*m>`ULC#Y@S*=6C(_
z53{6j-I(4Uk>Gw8KF^ihUk(28M!w(+Ve6<u*x-={*{z>&G!sIhs)penOb=lWRHvrS
zz#Kfd;7JcvZR=m~g*vY(S)M{B=a~v5@`<p}#8(zG9FN4dTNYI<lg*2(1Xsb{pS@0c
zNG3w~nOSH-`+TdTm%p|<J`1-Se!|r>P#l+tTyRk-bjl4fQ>gmtJtzvtu?AP&U#hHE
z0Bp`iNy8QSlbo91a;1=!?sJU<EqJL85lg`Oi6z#knrW{cS8D(`6!n)FczH)lUw}RG
z#cuE8UpX#2BLU44NB3jQGsnNw+=XmY9!)G(-GOf>0=yfL{3SsyEO|aB8&rejX9qKp
z8AXjP;JvHgeh+U7V`yw7g<1Ah>+~iba{>QE*!}tOv(hvsm7jaa#6t(dBz6;{Xd{jl
zo7}{ETVH{x&?C0B1)AR(JehSKS>*NLbbqL}ra88G6gdq9B6aaGEd}7xvi<6Un=<!l
z#X9kbq5UMEu9yZDA({yfU@n>Dx~Od2GVHna3=zQ)oAoR!mdq9*7xTsaST}m4dgfdw
zp(Nnlmp6TJsM51uual$;_+K#EcWSU>Q;^@}p;7`_F*cjjlPXt>NFt*~V3<DGA-Q-P
zG&GFJj`#iD>pKIE$ZpiXU&2jYI|kR*Z_IuVfG$vkxtK;lWNRae<XB;C0PXalOxkVK
z={zwOb>`?nh?(T)xn{e<Gpug52>}%V6F%dlEOVENeQR6tIO=tzOqL^_%&l%g4bD@8
z)N5ZE_b22)_Q+L6G}GPbv7_a-kakckDe8N$NZ3F-{N`+?9{h!3j)zGFjcYtBzGl!~
zfA1)pavpNy-MnE25hMy)__UopAjym8%V+#qRKjDg`?J^Aevc3a&U;T-nIr>5nUh+X
z(MpH}gbk6!b7U&%mmpwsql$yCeR{<$vh6U7X`uzxDW}W`_<BZcA9r@RZAIt<#LqB}
z4Db&dPX2Cwk3i=_r%+zHJZ6qmajx|3D3U2t-;Ga58<W$K<S#0U*abhP4aIvc%{zO{
z9A3-x@*Z48-pzomn)~&=tUzSQg3luy<R*1>-q($e>}-cez=uM@WS^WK?9@ysp?FK+
zt7G)B=^f0J=$5@G0~#cNRetTjl>|yT#*NPSa_t_Zagf1@kLM7&@2*^wl!0UAU~b;)
zv^`+AO{LYEW06nGj93i(m{#I`i!I%CJwK5<+s<~El!>7u02>BimRAEifwu!M@*ZVF
z?{diVfJ5mAy{$+f>bml5S8Eh9Ne2G)`nfr3@<8F&rr&cpkMvI=H%r#`PI8=bTR-FS
zMD2M$ZKJ}m+~BUw+`mal;;z00$=-V)O2j1v>}}{?0S%xC_{<2vx{Xl>)Vk@)p}4}<
zo16(aavcY2YHQzJj+BbX4-9<<m*K7I!Jh!CG>Z;OpP8y$YW<NMVJ&)j?CPO?j+xk}
zNa$5K>43`0g?LQFUb}04Y6aE`lW4pn`5C3EUxeok?u!dc8nt%VH)3IwRA)n^!buM%
zoUovZUi8MmW>*I+kfxBrO}g#ij=UOA0_ywU_t;)rPB@)ku0>hr3~79Q%4S*QM8PtL
zpe`mF=9R5}F4M<1Jl753uO(3<P*4rKqKjL(2)_&+URN|S=%m`cpje;*8ye2vL+bm>
ziOOilSoQ3XAx>_YY_zQrNtuz-w6{Y-`hIN`jg?xKM#NdcoXm0xHH>UTI!3_Vjm^ym
zeUo-F7k-M@7v9>uhmJlL<xE*F$sD8UZ_WS&pR~xF&Aihua3TiJJVrl*5AThrz9z<G
z9_FlkAH0DXiu>A#C&JA<GZ7=7z!7)OvUx(|9CY{_-w#zs`J>ZSr>9SUb{82baz(!0
z0*3$b8IXQ1ZjKn~U<a5MzNw^3`e8F{_vs;ge<|PH@rk<2-bc`Zt3G>b?xoF70l-#L
zOmx`k{O6S4=wI-itC@QL8e(L7jXtNDpO^g)G<*i_{GrU{?=q+ZZ$;UXt46D4El$?^
z*Eki;O)oqD&oxB4ru3OEG2ypt!L%IU<0rT8xP@b$3EBi*o~Nf}N$-AUxhpwXX2IU8
zgeezfR4b?0B4{^r3y&CD{R}Ja{E}4@Erw7%Jxu{8t@tUXfUWoaqoy?p*YQo;$%6``
z^Nrze-_|jElvz&|$`>iAd-<T>6pZx-9R~#WCfN&aB}nr~p74=Hpm@hg6ANUk9HRr!
zcR+Mz51sT5F6$Z_%m+Uk+uj>Zr;B*AhX-b8sOTaA2wX}M;~jxpAr6EHIlf-AIqG7s
zX9REJRBJm;Q}_89<D$+r;`Go@DvHWBsqL%ufV9Edi?72u3$<j*?{1Z)%Jk1T`m1Z_
z<7tCMXXf=KQH*=f9^|V`ryE(_46o#m!Rt6`%<*4`Qk_!;T#mfEIR3p7MlTRg3@Ene
zcZR|-bEyK==MAV@fb;MuB{oLdNFq~fj+7VdowZuA`F1Oo*Ap-zlM9t^+F?4cD^$Ar
z&--$Eab{XaAe>~4K9X>va-prD?tc52Vpj$2DuWvs?NV`){&b<~54aKZWz$!!V@L{b
z>7A{Fo$CBWt8Ct*Cr<NlD<-v8MK__cD#k&5MU`NUQ{1f2zFHy3m9Dm{B&|$U6Y4h%
zqIQG%6q-UBy=8qtCz+2WGYMU6SkszaM}A8@(QVJ@%NYx>6CuRP5nB228|UnBfEn)@
zi0i|_E*{naR&ff2DFcSk@q7f1!3%hg8@ySm8ve#ibUr>K6MUfU7iGq#kSyc9SYuvT
zp@x&P{X~9n`v+t&h_yw~tN1qtuNFq=3b<7X2(fUT$ZK?$TZ<;VHAV5~i8!xV+@v!x
zA>0ojPOqpU-7CTK9h`QcGh+q^Q<cW$LJDPE3Ka>sBO1{%)Qh??zcFR1dM_Dh^{U2d
zq_AR-5G*3*AlHl(eTC9l_=sYz1`E8s4GP`D+B=Zi(@t?i3k{g@zJ@b42xDX(5F-j6
z=ir1b4nxd7_Bki1Uztqpczx41A=(Lun+{IiJLj*JD@qpE#*bY!a-3b8f4}W08qIL&
zf?1not&zbcQ(Dpt_X679fX6qw!}(p%pEy1poTf`v-l+`3`cQ;?&c3gJ)7mwE*E-}q
zuFQGUo;-hUk0!;0IhBTUR67L*Y-Hcj6+?(Uc7FDbZARKptTeb7L>;h)dwg}|et1#~
zBS_d3ZwYFYY1@-7MdA@qQp5XuV0h1=!H5@aRjVgJ%SR-Re*Falt1PaXd&OZ3tj0gV
z&dFu#&E}(-^i)&>t=FmMNdsl7iy{X#Z~gx6iQD;j5_4MN9yf~*vPb9O2xQZ`w+E2$
z+$jeQlF?Lxe*%5J{hhACb9~2+F%eHu2H1jv`S{a!096CB1KfY)o}vo~pHY7_bi8vS
z+kF;v&~JvGa5Txbb$ba+oBYH2ILydDr*z0)rfRe9sW%!!5S(o=v=&1Xm~4q}n%VWb
z42>&6)Zi^0H9*??(ab-|n6c98#~Dy^rB14V-4~z2-*##W%b2~P;a=j0b%g0FGv!&o
zXZML-T)m%-rC#BB4Sxm}>*Vw`V%?FLz<cliD4!X7r4W9tJTgVyeqSxul(1*be5U%l
zJTe@3!gyf#mD%O`?>~NpLst(`;wOj8Pox!&i}aO9jpL}J$t1C&oXHZLeKGUa;Wrqi
znMZp!7RmJFz($3t$?SlLRiBeG*`HSJIf2vCRfo=7jE3CwizD|d)Wek{x`9Tej@Y9g
zKyxPU8sb}drzLegL(?L{J}m?Uw|3=8OIN;1(3q~kOl9^)dP3e0Ju8y+-Zsp8qK2Iw
zH0_k%ASS8Bg4hHpfAtv6C~tdAs52L#z`G3XRd5`QW<%D2Ue>>ilb&y`-G7Ywfws2x
z=lY)TQe@^c!qXmLiaKi$*<3j+E*Wm5?flDfVu(ZGK0l{Cnw?dJ%aB6{!cB5LZ>ETq
zcPl|9@?QS#*i8N_Co)QTPB~!|y4o~qYP0w~j#=8n#{wObbL3z7ul2eS6_2m>W+;*K
zWs-^{qbkP<O`wGaL_jNpSYw!`wI00jrH@mOspW~bW}^axbe~ruDzzGYzUS*r2$jMk
z7h=J`HtGb5dOjtQ4eal)8^ymTUUD9;o-}cPH!s`k!N5o96WkdegGV1%5oH>4RdIcJ
zsiEbWgCjwVmY+kvumJVrm|`Jbd&PisM+GEwc(ZRZ80M^HBF`Q%32BFCCf{m&`_aO`
zKTj2FQh5)=;kg#1)}V`&lu9N5ucF4Y1=MFrK8?;aFkH9K0GoG6uuce^EBAXFk){|F
z&sM%3d4yW&Shjyss+|ql1JrYp=;>3dgeR>cr3d(M^W@Q*y|hfnovND8NNi5E%RTE9
z4qO%+w45$TO}G5VlN{7zM1}t|m4}6#$M=;aE<#4!=#e0TW|X>h(KfhNXa;>AfO0$;
zz3nNhH*$PEYVb5K{7G%$0Gz{OjM&`}zgbnrA`qLVtCdvfIBH^zzzJUiMk9D-kkK{&
z%F~U>ap%`WG@)44{BC7Bp-7yfL|n$StwI9hj@PfI?iGdiwa&%QzFFN3<IWAwiVF$h
z&;*+*?om&?yY~t#B5Lam7$TV@;}WJBg9M06>EVb~#bxA=<e!GY4`vuShG99MArK>=
zql%PNTf}m2@;_C~=po%ryO~1VpMcbresj|e%#Xmy?R`YS{}l-nmU8?-{Ot+&{m+B*
zj*Zu#{sKv61x`z;Z7zj<c>`4M<9{kW7g^f50Nkv;z|aE>FLTvp)fD(;X#U{9MkhB~
zliCNANytdjYP;{t)B+bIMJMU{5&Nq;&C`6RAS+0X_E!{S2o2`MwtDhp-@|k!=c)AM
zV6R`kSm-k@;R1Zc*V2~FsD?>0N4~!c<-TVf)nR!)S&#9<eimz3_!ds8MOP;_QZK4-
z$qS+<3#H*MJm~P7)qLOXp6-9E%27|EKi5+_gwASj_S}y>l9c-sya_p+g!3}hE%@_w
z$vA`Pc`Xp95`oo%h|{0j+V=V+3QB7c%&l26v%pIFzX7c57%60bS%+MHs_b!yo6?2}
zokM>RL);RWLvk+BJ?fjdP4=~@C|p)c)?|;q@Nyk5QcF61Pccr|n^eCS>poy9@iL9M
zR?&*a(O8z!fR}tx^l|O456)(vVy8K%tHMUfId|tq0t|e#%5F@Z$i&t7?)GUCRV{W`
zf&O|9+8;U+q*?5O;PqIYF{=N7O5}t9j-sOqL4>tqq`QapPs&{|Dq55}O%-A4?VmA%
z;QUx@;WwD6+f;Iw_M4KnU0wMT>DHdZiv8zuBu3I&Q$uGTOCtI&%=<}I7tcmcam~x@
z8&gS5Q=hjY$qI<Sv(6oOc~v*SVrIURPhTsJnuU{!Ym6UU0Vb<toVzFJI9h@auqeJ$
zv?HcL72D-*7<yToWR|2GKF16q8#BL!7LMI=X2-T(KL@ej;h_(AIiOs#i2S@XNj*1u
z8nvuMTU`VFHR!&fe-@1IC>FnrCo&*b&BWcJRwoHO+|#O|Q(mAZK=x&6JdsItc4jA0
z9n^Z+%leWtqf>2$m8eZ3p=MxLjhoDXiWCPFyp}o<CCd+7y~sl}*BvlK$8bYbv0wA(
zQ;799a@5q;s#lGt7mj2t?YL}6x(-)?Z-*Eg#fD1D64`=n3@})StboA479oxyey~D`
z$~V*!!EwIp1JLHp1Lf_&4>6|82UBxw#G?vu+rjP^ZgW*#IHn1<n@XZfl7)F2h(u-|
z-1aK9uk!-SF2O5p)pe%|x8eo<=2K(Y>nv+|$Q<x*rILM?bWs0l3>Ep@N$>Of+bT-4
zp+sAs*J#3a1x@l>w&3J<;9=VKogmN5z9AZ2&>z}*wP1$QmNb!pYD32rs!v)|cL^`_
zWCRmbxp{0x39i@Pdg&I)V5ALf9{F~x<i~-JsO9pnd+)rpfZx#EksfV~={;^g&ptfx
z(xI7-^Loph=k#p9;<N`5cQEfmJ5rI92+`FUPEP@J%$tJ9HN1zL+4P&<N4bE4sI-@9
zr{Ds$s00K*AyE-;Zy&Qzmf>Cc`u{68{iSzOYyd|REO5tD#e(TAIFt|BE2JC5^!2k{
zyPYN5qnWO&6#)L`hPngAV%YxpPW1a~fb-HuC)3fx;?JR@&sqv82I}tTSzFXT1iWQ<
z->-Wklrjm`3fibhTs}iIWGlp(_8-XKhK&-w;kgbSC||~dUZmgWV;kIg01b}?JxZL*
z{5X=MOqjx5^8#cd`3x_V3y8V@CWPcX<15cZ8Xb~h&tY?{j1*x=^cif=gDu9s2c=;r
z39yz4m8i9pk@+zc%$D`(pur;!!o<s1Ec{m<+iq$SYAAnghT(r_U*B5Hls?X$R@uF_
z?CPRJ<AiZ#lqHQ~QiXc$==F@SN+;Se>`M3dM4p-wcr-XYkx8C^BeP6^4?(Oo0Wann
z96PTQEqMeuxF)5+JL9ItBbCiug7;Bakxp2V5I<rQeO(jn2>=VtP37N+C~GPn$xp)#
zyf0%)3=+OB2MWcl;L;2c?a^gZi}jo5phE2gv*^LaFzY2+Vogi5L(5B%CP|nnRH^ay
zLX*<aJ=ZA|EA%eo2ZjC|%%bE%c7IlrQXhp0rF?n2`rWh562S3Z?hU~>WYmA${mLU)
zsDespD23;B!6e7Gd3%1y!bibs)tI7#0&UHbp<lpsC^jJKhr?6LZ+&)thJZWE#$gnh
zXddIXx~L0yJnsapboOw&KneUAplB6==<{h8E+x25whe0ZdNkW1H6i|%p1w75*q6g<
ziNnPfvA28zASjFHn1>e|kyY6|ETAndFD|I(G`QiCYlH%Y!$5g6^D4FRJU6mPH|H+5
z9rs;Ww)N2FGAiolZ0~{65&R>x%u~$pwGs4V{7wroGyO+&f9W%I)?qV}duy@G+PXTW
zh>6CIyf;I{#gT|>{SQct#397s<8%ow#uB*QpgR9UmURPDFJA4Z`+{{&7eA9@CdC0S
zDdj);*U@m6qKYa(`mHV4eI>PyLTwJ8nK&?IA?rH?fNSE_uzL8=)Mf$#AQ|EI?G-vt
z+@2b7w240bBfpk|F+_G`at2W}&7uyswmz7#t!GP^3Tjb&$(#pesC09cb~f`k9tqYj
zL)UKg_!0p#&o<}i9`0_S?#-M`bZ8%_b~9gcxA@Tyt!-><M%l1c&hvCNh@h~j|M|>1
z7C+WjlNkY(?mqv!b&n}Yjt{qqIu^uOIQP~t2jXZ^mk(&&E_d9$NnIYbW2O|WG56VI
z{;FsGL-YZ&31u$#v}8)fwh8-dZ;IJwEcSnr+P3uq@`uK;EE|wqj6+K(g1<S!4o^Wk
zOFx%rEJU(kvLg+O!?X#Pcl2;sM)M4a02xrIH%dB|AoKSIF8k%SL<jGzkJfP@38`ep
z0G_)x4Caz!RHk!nE1m-hn8Y^nko<&~7%8@!hm|#O6jp2o=^{z4r{pKDEm#B+I3&kF
z<SI<b_1@Vx;J7c&+JNff+~UI5i6r;UX^nF3TLj_$G_BRXlDOK>5KJK-jbr$-e^6K@
zQc;nm@IA|l(>EUSk<Da$C3epyR4oi#4!8#vv>9e*q)bl8zEh?1LYn?SQTDqYOFx3e
zRzIz`8cXb&5=3JL-vMpyLzuy7-#R8<d)c+jK_KT@!$WKOw2<(F>0ZDBy^sNDuF?3Q
z`RJWI5&7OP1&aXEN@7IZO5P17QY7m?x?7WE$gS>EnL6};+?|=Gb8vOz>K{fp3&e^x
zwdOc*OV`NU)>+#f3h7Qe3Wm(hTWdZ)06)9%bP(-CQ`$cnQ`Z}4d65@B#n=7h%YM@0
zK5asb)(ejVU5TIzy30p{bYdb~D0hzPBus$q`+L%_Zl+wW$G;Lq=&J?ENc3H}8dN0S
zGwlNet)4zL@SUnMP}(gt9IHc4b_Aa*y+z<Unul!lkLR)q;E`cr%{&_Ov5^C^Bzx0E
zS`ghkfR3wS|NLx*oD%_=5l7C6JbzPobxSTSn(m0ws^uH)@%h#ReVa<xy&a}4;|EPm
zekj<syX>sd)~EF)7bUWWc?JA+=%!H)9yrd9YRUTaa!F`=gZSUxj?6ZW$eN4QHYMY}
z@_d@Gl|vyNvttE|Kt-L|l`upQ+`~#GOjzQEWg@ZSlQrYU$5JVJ?|tN|FP&i)kc(~;
z78AGq9FV(=vy<Dik87i6yuF`5EucIre>C<k=Eufh0&~BX=#KFidUp}35F$|V=KQB<
zROAOFA*BKnE(nDA*ELvLTP?jkTa@&hjf%|%+yGD3z8`KBTvpIwe0Wx_$F4tXP1te2
zBNN>{BD}e1Q?F+VE37~`bo7jw`1EwWI#^W_PR~fS?xG$?FwIpV>DD|5Slc;ts(#Q~
zL=hTlPB3C@!d<7+%7MwU8O3|xqwT~ZayF%gvTv(C+f_Tnkt{^HjiU`Fyaoa`_uQ@=
z+CpO5!yJxUperuHs2FPf%X7-w3RMoRS9D(sgwJ-#Trd=x(WzJ4v72QXJfe)klKJ97
zn|e!cZB)5znu@BL?})xi!trTqEdWeuscpSBkCjcNJXqCdzG5VO!drqB<JNJilsDVh
z>{{yRD~v+>>5e<CY1E4{bces42cY=G7%r%v{`-4inW;yz-Gi?*nl`a#R>FY5n+wRi
zUs5eT<3uT<ffbq+v?26MPi^I-lgNdmPW^?so~`WzBYj&M5jF=|;Fr&nZSQm)^W-1-
zXvLJApHI}AbzCRkV|EILE8Qc1lD|BJUsf{;Z>^0QkVUG_qV6;ahSImk>}Wh}8F#gR
zvsZgx*~8ThZd{qoBJ5Cu?#I%uR~}PN3o3!pGLQ0m1(KqS(tq}TsoA5wT)mDq;ePlb
z*T>lEm)AL}6?}0P*V<g8SfhFBXl0egBhZVJLVBre!jLy_2QP%W^Sl_WzE<zY6Yeb^
z)XfOK(TIQ%`nfNATqlmCKZ3qGQdTGXpn7@X>h9b95G+f;TUFjp$G0B&_BMl4b6yLy
z;I7t_gcOr+fd+xRcp{x`%`)(_D4hi5L1cElPwXr_#$_>=WAF&@wGl~xEv<D#`yFqI
z#Z%V)-gD@1ge&KJ3#Ej!)06%5e)W!nS@fRU6EWgRfF>s5t6IM<nDx%7<5{Mc$gALo
zbhf)RT|hl(2`ehq{liPzx!v(*J8eFE55A{vv<UuSj#m~S<`N#Uc}8DBql|i;YyYbD
z)ub0_g^VfNIxVp_?OY(?Nx4QplPPNI9POmo<wsyiH1LR-7G+c{3=V=@Tl(#P5!T3t
z(awE=0po|X$2su{hsan}xML$>Zb5iWqhua}uD&ij8HNv0_l_%I%?DiJT<yziM#{@G
zQ!JwXpy*t}x#lSdPaCT%IwrR;!;q$99;Je?dw80?SoaZpG|&z#h_*&Ah9*D8;0Zs%
zdavL1>h?uZhl#U%dgT1PNhV-E*<Dir+w_kp*K)UWIKS$9>BS%q93@3+$R`^WZB0AN
zRdSa$>~uo_(I}o&xpi5@#W>MsTkf*udpskf``}mSYEUZdoLNF&)u1T%6$ZyB=41eg
z$)99HNhZo4gnuAzF8jI_8OHN6rVwP+XE*;IpO{zSV+uT+>V$}$F>$^3AH>J#9-lc~
zJzVGl9_mlPm%4~&1VJY+K7J?xZ-g=zm+Qj62cOa${Ra$L@SL1|Q#K%B!?-UP$(m<|
zZcbON8-V)w;HjW6>TFCp*VXh?A4FY{=nTxboFDRGrjJas`Y*|=J>Xf(kL-K4*_qdT
zx&~%O3dl3*nJqKb-@dk7si;gLC4!>6$yfYXvnHdV5f8D<d)r`c9BlFjWW?F2E`-eK
zwY<n!w)o0XICc4>ow;9HhMk!x_)Fm$TNGDsM#i%|Ra%}*Yo`ME)udgVpOoD5L$Wc{
z!#)4apWnjCE4>c~MK4eG&P+V<Z!sdIL0rU*>3}u(J?EPQTn12ExC-2=;TbdJ!)ArM
zx2?MgA9KZV$IIUaN|RNl&Q?u!g6+pUW2WR%dcbFZf_M$8&w8BcbGPD`Slm^U4bBf&
zyE3cjdJH<5(7pX{ETw8EqH{ORkdx?^h!g^lmkU4Z^e^af9q>4Uw%h08BK`8TbH1tD
z9O+Jo8@LkiYy-48=mSy)d~HyAY96hsTzP1ljV}>}$|OHd=9-?b;V~b1a{%GnMyvy7
z;T~wIY8?u#KmuVHdm8pNuGy`CwSqkC&#3BCOay?4QCXHuVScobYXAhLKa+><MgIjp
zrBuB$W9Fn(-OI??O?yo6#Q(v>;jpW(vvs%3b8^vJ4ctLtqm$_LFk{EM(dU_woZuGc
zyYzmEMPE!!Gf!GR!;vQAOCxfI6XSzj?A^p3JDF3|pJE)QliPGeAFhz+(l7UR6C>vK
zed+W<wa`)uFLRg+FN~?F=>Seo7x#tDb+LqhSnIuBsLS2zZ*)njNVokVm6G^vTlhDO
zenL_~WWTzAJaTv|XMxO|d-g(&h^%E?X(8cSJuZj`=$p59xG+MK-O_14k_JLZ;#LvQ
zX%&^3Hl*Z>P|WQW<nM2`x{mb4#P`Cq{H#G1oc?$gIe175LIe?9als*K3+)zF{FPTj
z>T5@qVL(jOLGUSHRYh7N25+w~QGm@%wx;s<%86?qYxDw)k7Np@=F@;SMq9qFp4s7f
zg{|?z4l(}K8y!`y5m5qD!k4HKUdm_pz_?H`?;@PfG-j#zmhs~J?b?)4yN0rMEEiR|
z9_g|SWmCxL_!!J}^C_SQKLcP58u-!|Z9d<w;o*Tn8}IX-_HJ8m>6;{Fc+o|MPXtM2
zr$1a`Rm_gA_;;icD?D8~0#IW#cEVOoSSn+46XjiYpK^xNd9=JR3Eg(;V)09(^un`*
zPY_%{N;(%0g6}V}S@1lle>e?@b@z#6YUID|oP*H>!B~x<yYNxbZxYXOowO-*NP-}!
z<k>A;Sje?|2$^l6$g%OfW5R=REi=L~%X{q$8zEv+!Y@vhexV|i6pdMosq=hMD4~0-
zX1Fw~2AcematDCv`BxaJv-5tWqYg~z#PJfZGp&-zg9@!#Vbr;{)j*GTl!=a?4J6tT
zEGv$r5fJ`Y1V_moT=B@)4M^hIIHdg(RD#6BK&9_Q{{ry*>7@R7TPwQqw-?K#xyXoH
z)E}0Az-R+DBbll_es-<@l^xBX&%#iNs!rbt7JdpD2Uk&fg&;Ml_&xrtOn-ZE?H}Ya
zSq?t%E_K^|L>Q}}`1Md)*@8fFCrM30SfJlnY}nvkS>9{v{%ZQR7aCB*sshuDXcY8P
zYSJ@~36aQ#LCM<ko{n-cGRJ+UtiG1TZKg)VagsRYIYv7NkVWzcQ(<Gj_a#91xNWLN
z`qR}pxm(i0NMGki^$D`Aa}^OC@{v9))m#61e7U^)sOj6ud#(>QaOFe)4^X^$X=39A
z$8L`|zjxDtR-h@_K~38mTJMi0%l}3=l629S_raJ=Hb86mVw+n^2h#U9DU+F77c%LS
zf=xS>_>648MkMm~PXpKcpS=uUU|N<j(@Q{y*PSZ(hOT;p{)j(`-G4__xn*Va9o3^q
z<jpU#3>BYhdVKZt187GFWfzu!Cr?(v0(2xZ?`4Gr1oZ|J5XZ#WXPFdYe36f9!{&cE
zj`s<fYIfi4q_mXN2kfE;knsvU2@^W9PO<k0C(+wHO|E0gK4*60IpAFxw!Rgp2fz7Q
zkHyDQ!MX&PVMCYgm;h2|&l)bkjWb*GVKkGd`*kF?e+sf=J-~bH{Zjp<3x!|Jc~1Gq
zDsrW5yr2CE*KnVqgT{LB)fawSFEGwW6}@MgaLGgR!B1w_OQv4>4=F-3dQ)-z`s!M9
zj$bt#jp$U*SOXylazSvlC=8Gg{e5px>oU`geO<B?EV(ZZiK*UA1B$)5yVx$Y;J;AD
zz*P$|tBmPEH7-96Kmf^(0G#?S0gcqL38%+N5=->IpO+muO%9*!#`AsWG+UTa#Qeo-
zYZ+}=IGMc`o=?7IP8G=>CbE*!YC>_Ttw0`I0iP0J_J{;^zU;@FKM~N~a%g7dk+6<C
zBnqtn9`s|akQS<ZUKG3|FPE>nkI$V`$X!<>7^1Pww4eEWd{UT(3)Va`S<K=?>rC(8
z7lq5M`xIB@y(*<B4PIYbzm_Mx!)+sS(C7Hy`2v6I4CtOeQ?<4mg*c_RX%k3T&*<^P
zl_<wsj!y|S!)_tzaP~y^MDAS^4rwXq<5uBWqm5dwLuY!C@qO+b%>FnOcIqT9To}eY
zpjv#-Opiqfe=fNB1tKo+Asu>poH;Z*vH^OtBztgSx7dsQKv`DWxEd;4Obx=Ch$176
z@e5f(x4&h>vZA-X@9F54&*L&yBC1*LYjVQ1Y~g$FBC<?lFH+88+<<M=KD4Yx8-8|f
zDq@rQvQkeMVG+#uCI27lud?Ss&;1uOI(2`7+q^>Qk5h%xfrrL(>Kcw&On~`XCzZ!h
z8C;Q0H1NU_n50*n3I`wE`ATKtC(obg?n^{bm|1dkzEP)}r$>C)%~`UP8Qk5?Oo5(g
z4yaGkOhbQ5@yJhL0`lw*cGZpMe8`TcmJ1=O@5Cqin%Pl+guN8wiBhA&=Z+z`HfGu9
zpAzt}x<}=IHBr2={GR@COxPy*tNsHw`$WF{;;*vbt>@?{?8NtBa|M_n3ku`UM*j0c
zw-O$J$$ZC@IO>-4Fp5XMDXR3kVq{h08+xEg8M=oP0j^vZnX;+~#5?`bM{*s;n|rMh
z8NsZP<9cBgL3%+u$@~|C40AxIvF_PJgXBFob|z1*P$7L>xHm3}9{}V^HpVIKKf=Cc
zqj=-9$u4L3+r}r$C-iCpuo8jx{OZAaDH*Pb5MmP8cJ_n=kZQJ`4}dWWCJD8F9Iw^D
zzy_{<_9d!9pMKR(FC|j&gn<q@#_u>4kZ!|Q;wGRT+O$kQpL`^C$k@SAJ&WHP1mjbM
z`@ox-pYaC|;zmPoz#+J!{(-uq?U9(z%N2olt|PHZAy@9KyCc5ppRt#WAY?q4X!-*+
zkB9gi@ucL>iyFzTAzL$RZAPih1f-RB26O?x7=t31qW`FKl(wvggq^Q`ej}wzmPH1T
zQ%QYPKuVyE)l&2JkK*Bpez{u)m<Lk#f+bjk<oO3ZIi9VRYrbXr1uq@_Z>kdWrdzam
ze||P+@m7)C)H{|yGqbbLP5mGfY-Qs78$*6H^`^R#a5rR#N?gmw>_YV<dA;ZM_JsX$
z{6*Nr#;1U}9;D+mTuRP~1kVPfp%U#hC+Jw5%>A<J19bz+_SdC>Q&G7s;tNv&Kz$3l
z0sg785!Kx?ea*#sIq_of=-JPSD&;O{dSU9<uZnK2_19C!_3!vNfLsxXQ+X%FPC@ka
zax?J@xk5^fO%;iBSW4mwbh@eB2%>aU7Q3fOd{3Yg3OnEjm^SxY>Y72q2mui-WE@nt
z?Y5{hLntb%dY#`GU(sW>wHDqcUtp>u;I^ffNo%4a`FnguJ*kcb!Ye1-D=9!j&lj4W
z+nbBqYETpXu!0yd%A*|!$bcnmrivs76w3QV*Z8u&brq9)D<4+b;}UxJLA_!K6}3jV
zB|@q1tG3w|F9V<E&Pd{9s9@stGz0bXWMG+n%0o$snD6%$-T;4?K1ypR_ls)9m$?Rq
zO)CbxtIGwv?R8+XiCxZ0DmQC-|G~6mtJe|j^9PXxzs`iEM<)2`{KjBN3@Q|=-#caw
zD*YMu55<0LxYzadN}@=9cwUenx&zK31&-Epo{%%E$V}xE*oL@NsT<R&Rt?-MJcJDV
zsX<2*CN64~cW^|`bDETQlw4yAze>9S#yI-hBt*}%<kHxDi)(MnMU}Y{w1KFtwnQJU
zAwiVVPZzGeEpEF9`f|_Ybq;u$mS>Yv#C2k0<(I*>w%U7_BkUuKTD?>mRHmCV<P1M6
zyKTBz+T+POdhhl_Z52apoWGI7pZH02R5#zX@btE+eDlgI<V+gH{B^||t(zT`Y@DJq
z^l?{6LPbg44j3vU;6r^wsL`+F3H@q0kTYg9r5|k4(qsFH*NW7MEjJ;%vVd$pXi`@X
z;UL2;`*^V55nGe*Pon)(e4xi3A-VReRdBfz(JbT$jU*wqP`WUE52DgoPteelrbYSK
ztMk6+DAa*;GI>HT-ZIhi$Wd+Y<`|608=|kJr_{A*n6trmFMddDeaKXZWcWBCesE?$
zJF2^jNVnnrlnUdg!F@DfMV48e!uZP$9lp*X_%?hwo64f<ee#d0`1ti-;-#vm@t+r?
zW2+nr=6Pj@`objl2K(EH+4c{m0vAbDn5nj8+Dl~(hCM{BFmMT#3wbtsbR)M`Ks!vB
z;klb3M_YQ)z^-~J)r(Rem5rhg>15xG6Q)wa1F!SN9UXeZrtFw=KBC!FeVD%ZLQXwN
zF!-Ivzj72a4ZO6#zrVeSNkkY9whm$34O9~bcb~5l$(W0?#P6R8{Ug5z4*EFpLT`YB
z#Fmh?FUZ-YX&6wr4EnB)<d`<=y2bh9P8A37mcR#e`}Bab#Q;wdH?I%FojoYkNQ*Oz
ziB+z!8Ppa1IiPM(8IuP3$_C9A=_+r6?kTAyM|d2JDBsiCU($2?HlgNJYiR2kyGD?X
z#s30Ohq`CrrTVjRVdX#xgBLKbDp;aCOP#D8a6^Lca<yI8By{VeU&D&bL%<GwtS5nH
ztQtfMQ1UxOpMV!&<TbP~5<#Ml6{0;T9FU+Ayv1)?YAJTc#Ss3H$Eft$M!nujR56u5
zr=Wn9<*`T5bfzvK-qA@vR<z)Z%Ov5#?MOb)aej(Q^mqk0<#BYS&9wcrq&U$%wFqBW
z?3q|x<QI~#>$7A^vAJ|{FqcO}$-8Kbl_#XaX*}nj9lqD-FY?<N(%ze&YmF^h;`M>~
zV#Svl>`Wn){^CuT;CId<p--?GcouH3Mu~X{QM{6iZ)e9w=y%>cOOMM>&)qy200NNi
zIGx`TLWUC3_|DUej(%IFM+M4I_(&fG8wa*`hAm<hcwxS)PW@6R7pi<GfO{QeK<UTO
zyMFnh&xJAS30|0Ngz;XR&LEYxhgI-hc_RDt-`X$+_C{pgq4Nt2_SO=GApm&0x7``N
z)569qa3{=@xVIamrziJ7VL2;E>f#xW`mR$=fw(6b?mSUgSuqo5EA5hf*6g*l^~okh
za#Iog?_gN8Hy&G5lmmqOP?Z-Jh1KcV+?xM>gB`{Gwc=16@8GQjVE}-CrbbX^6|cvE
z@Ya#>Orhfhr4&3tBW)d_oaQ^)16(zu5#h=QAhvwKOO=I7_XOdWO4|`|&*@@^`z=j{
zrNUOCb>)kuWZFPl8rm&;vPk{8h!`AV2$waiGU_LI5N|oP^6wSjiY1F)+}Su0RD_V>
zbGoGfcE^P=f=QxsvyV<LdS9K-xmc}a2A7<u7_$G%br>?Ggs7=>FPr=a3@$R=^0Gly
zH7`TxZsS=Eljd}@sw~pfSWM)9J~fW}6sDsDPcwn4b|avaDnzBs)B|UgXR}&Iijvgd
zpC|Km2>|t4SH8lcmvJSxkZYSLxkv8UbP1|VhmarYOj=)Hzm^uYdl4_A*$MEjqsY!h
z(3)_8C{yTqw(GiRBrZn)P4RW8CtqO4i;$(e0u*^CjifCWH<n%B`zjdlT|mb*ZR;ZY
zn_3S3HJ?p_b%ozQzyJFa4wIJHszd?bA#N1%>+DIo4B>BwK*hRjZ`|Iuq%0qnMt+Ei
zZNpi^G&w?{xH2G>2d1GxNLz97><`Mv&t~g&O+iRfw!rj(^w1wB@qqA?G348iMlaa1
zp-MOgHG#-G;440MmsruzntXf=Unz)$np5W@Q`J;-1lt%tn;qPsmL-#Vtd!Bje8C6N
zS6QI5g3}<9$|XMJ7=0V1DUo@R<wG#8l025o>2sQqA8UMX%%G@!_Xoq_nb}J2)<KP+
zZbF#*9$+1aj+^vOs$~GxLpE)s8GK0=epcg<fgQW7aG}RsUBo1N@^;0Cad9$9iVhR>
zO}YSngKBn*(vab8P2KnGw%o;0o&681v;e+shq`aA<fGdR#ix$Mr8Sb*t{g(oa}6G^
zYttF$W-_~FJSvUjx|)DGLuT+Ub}uJ6F8g8Vg}cjn1}W-TjSURAq5w>XP#JxFB*9C!
ze@l{HKDm8gwH|v7D3SR(85KS@JJtQqAan(kxR?@dBi?owOH`ZKHNqYac|$B?iLM%m
zw2$*T<08xMktjDx4sXBdbq3b!W9nga^sia|o=(`IvP+101_4Z(x=;(Pj*d0POPWA?
z>-Dl1nV6O$1x)7{5O91^8a~rfkq4vk8PGw&oR4@-;E(8*a@T6DhN^BVlkSn)_BeC&
z+oh-0o`!4^*Z0@w*&#pP{Mz@T;KDBEnynwm6j9d#3F;OJwT`+?;Qv)egjm670I=W$
zbZt!otQ7nww6_P-lE@#go;L0G%Mb7zLxWeDYkwp{69ChFc4{E^{2?x%@$PaI?h8DA
zqhchCr3Q@CUIL@#gefC1FE+WtJ?$aa4O#AwUn!RK)@Utpb@VBca=rDc_Y*1J!k+8`
zN?@|7cSnLEm>WsaxG8b}^tl2f^I%`U3mvYJ?Q_XBVq-aJgHj9|V7#9qh&0?4Q2QU1
zAze_R1c#J*R&iwDW9#m4p3icNInlW3<%h_9RYRSiucWf7g@h#}9Qq7t!MwFheYGk8
zKvTS^ol`S3;}_|DS@+fS_r`Y;_FVkp@{^GZ0u^ec+|Ob@vPp2u6WhLwaU8Qy+9vV$
zKc?|M#uZ;67Esv0B)QbpE~wU?fc?;xTzw7isys_Ub^9Nok>*!7zZ`!BI90kPQV{?C
z_SSHG*avvfSeFFg=K9hwd41vV%8nm-whnbiofQX4Gm6-leRn&aM=W_;|8oD}nUJQ0
z!P#3i+Vijaw(d{lFNyBg7Jdk<7SXOeW-i>8YqaB~8JU@WEFXwM;(wlKg)Xp6^7LPi
zTwp?G3g;6H5997@IwDpAcIIsPB;kU9O*#V}IoUPq)KGq&*gg8jO3S-<M4)8n_i?aE
z1^Yj$G%*HNVH7v)JRaLQs?HlByQ$+)<Td|`2TEp+Sjq0N8>28pAtq%WeSNj+?kL`j
z&r4<%q}MkR67V|h^_@d%<h1~f7{YNPmo8VEr{~{B;!>pl7V!jyG*H772oKsmk*z;%
z?N=PmEoT_*d;ANtOnGdZ<~;$$b@)WQ=)0%Y*SUQEmlQIJ-UxqEm(CXAV`oG+QzRGp
zeg!J7gRW+Dtoyc?Wq7Le=Xa@N1-sIeU~>;Fz>ti^>ete*L<HNcc=COsIkZYs84Mfa
zKNI2NG=^o>SOGlIRJnE7tm^Si-O>ZUz(xy}1;s1%idchcw)+%rVD!D?1jXY|V1v!b
za{0mA<28Bs`}(G_VhMj7LUtr9adUJqntI)x6}viJh8>5qi=%B}gN+t&H-Zb#B4hZP
zRU9<DvuE=sG9knS2fJ!KZH`PjMa_oOE;IuvW#88|K1G*GjjH8`)^%<TkhYVM+9!n{
ze>R=jdy63|Kj?@dbzWwjkncsHUG3j;(q(UE$ZpmjkVD?Rk7t&mGIcE9xoOTz7EVb7
zvuHVR-QE8Ni$C&P#!}2ktX;fXvUbdNzcq?0O3^_h^MStX%E3NqH_bLWrO6Ku7C<y|
z!mjuy)%jBW+kkwrlGN#V@xTAU`z)S6A7VT)%js-KQu@E_uTe379<D2;qm#_|4dVO>
zP-#oWPdSHy7ps2s?r17bjeDtwOQ!w(?P)@Fwo!Umxa(;QcpVH@B_XS(B-$Gk(Wea8
z&8zsmElxI<?-23zq|H#Qes^18@e*|Z&p52`=5%3YiF)xb=pK;KaPL@G-XLt}h+fP#
z)q5_F6qM#jUx_#_&q#~+OP@|;4=uob%0l<<R{^pi3?qA(DVN`jsC;>{*j`UKN@Mkj
z@$s!b243=!wD%6yeuAOhy8b|C=sIwEa#3hxB#;`$a)!I!$C}oGFx;HFG{xHj%RDgq
z*&XJli54Vc=m=i`tGy;{%Dny7e0+So33;N4(0q<yfi5X%%SPOTIRjE($`|HjtROaZ
zRdzUTDE?igQuF>+-v|8PQ}>^%O|V!tFxVIm_xu5I4qb1P{ilw{fD{+9vqtaHn)>-_
zR+AZ60Q}q^q@T`wG(D;ET>}E4&Q$xRgLuS^eWk?(59v~W3-r+8i{>L$J&2R~_<~o@
zQzPd!y2JnJ|Cytm2*-CWLtQ@K%OdQrHc$A%lkm9Mrz8+Irn!(OivHFV_;Ff467xZA
zH|dGnDtCRjEu;c<$uLHelSF*rW_*IU;2SYXx!+xb<A7I&<Pp~NtNE5O2L}hd>u+Zw
z;a3MU_1l71i>@E1pVM4w+E{34Sa{(FQI{FME6;ZXwZhsa#Kul$L4URCUT;1iczR({
z<KDLoFGa-{Nzb}HZ2M8r8#D+u7U1U$zfxo%I7ZWTzPM+65wd-f)_MDTuWf}M+!eSK
z5$E+zb%*?gC>m3rQUC*jO?kK>oRz=7wfEMAT)2A8<5D8I0i#$Iz%N=|VZLWa{$6iG
z!rm-umNaxyoyY%ita<p>F*ozf(b5u{5|%glLmEPml)EoZPUJg4L7Z5Dk(Ja#r9B;{
zRPV2|REMJpZwx{3{d}{{-kRyDY5jGKX+AsaiC-FH2rVhY<?c22k#ls|zZ>y8ecM>$
zS89L?0lT??ppS59A|SK|$$yCC;ikUTo@XotJ0D=|W0_r8(nD*m324y$UnqoJbmhZ6
z=g+^CcYrFAQ=R;fp=^@MncM1eq}4saL-2U>Y?|t|TB`Y}3EDEI9q3Bbgs~j%BAfkF
zdaS+HQ3NUk54wTplncR{eNHiK*EA<TSK9eW%Z;FF>!q309o*?EDwu2h8rClcV={}+
zD4;S)GF~#tEgt9B^u}j`taUo$5@^j*4j4%tQ|rAG56!+_nR3>p{2!XmIw-35ZQ~-X
z2-4jRN=hlPbPFQg-3=nm(p^eRmmuAO0!uf7bVv%)-OKKt_k8D_-#^UGzzolxJ<p!!
zzVGY0J|dec=@qmbFRo(|2OXCpmjAS*hw%R>8HqX0{jdoug9Q$Z{x}%*{BYvWa!^Wn
zBkcTL!#>p;OV-RxS<POB=x>U%t1myTC}jF{3N*z%D_cBU>9fETNaf4T+NS-mfi{A@
zHF<R%8W$w?xo^8~k>?^x5-vN<$Q+cE7};@>we!0~k-$r(md{#0c8g^$ZjV&Y*r2+a
zQ2qrUzFC{6)DtZ*q&s7_NzdoVp}dVVWm}4%y0MYVa{#p9uET0FVEa}oBj38D<x$+&
z{0DFh#F4TG15;W^10|<#5ign4#rUv!LD?SYt!DU!^}QX;ZhW(MKW|iIN24o+r<@h*
z{^-Lv#OO!b=dtlZ8D<jLGl~}xUBjdd1QLkJMvFdm<vwXHn&Ck_+{u+Ha4trt%kbrK
zzIxtkoz0ThwTSP|oR=9dOy3U~q=wPnpPkz*JjkD;nSwzFB2Of@Oq%>%ByPV8e&8fU
zr|8`z_+J*ls6?+p#Q+p_X@dFEg96*(pB3Lh+g}d~^f_5E?MHRZZ7c#{*7epGs&DVR
zkero^bG*<>$?<!Bxv6G^TDO_;y%x~=A|j^vW@p#-YQZ$XWaK~X{bRx6{-RuH&wVz%
z2C@wfTEe#XD$@Y)KFnV346qyLV(lHgiSCT;U`~=V5HK-L?j<21b6u+UNae|6;$|~f
z^x4rdNXjhW#0f*=e9S@bSt)tM7{$5{TXqMKz_8m8GDWl!Cq6@(E^@Glmiw@>l8edY
zr;mm({g>V!o86h~6$u0A0;6=9q;Z7ID&9jr!Ai?pPsO<&Z|ZI<(214Gr59Q<B%x1G
z9C4v0n<iVf69l>7VVAtacXxj^3U_avIGAr@sx~b6*mK<jzm%=F21WPZ+|9hV`|TJz
z1q7aLD(Zkg3qA@*g*=*2zl2zuev_t{5?pC#B(jmg+Ls@0!z$?Fs0l?V(t5~w>LH|<
zmL5$yk27faZUW57uis}(7#%lmKQ$zAU5W{nJfIgVE*VPTYCoKWjyMglCKOI4--6+{
z_}B5WDjAsh)+X;E{#Qz~yvR_g3d-V|m1cDs&uL}-%JMS`(aJyXnoX(5EI8fKFmU4m
zVl0*k&pkip1_W~6$ZbSyD~6eWOyGc(jnxl{FUnVD1`F@*M9~x<)AN1mnsWYu>`8Vg
zgLdpBuXS7TTM=(q=quNOS#*3^151B~tt*8^WybnAV%c;t1XoRB9?ci*%iXXpt;NLN
zu+Pik;XEngJ+oS?_{6LVTx7zwy&y_(vtMnH&3<WHEbD4SylNbCN&PEY|5msbn{<Kb
z63S^nP%grzfky6~iZ@v|M@mdY!CxJ8hGMYd<O#a^t&ABP``URJ9zqWjoiT05zBvVz
z^;NV}X15jSZ=du*Hdxsu$-}Z(d`BH0+dlGQu!17)TVv%;LimGw?<V3sd`SqMf1->G
z+n#cMif;~tM?H(xO3Gs2PNWv8y~>z+xyC<ao<h!;Fz*NwjFeA0HBPM^famOC!y2sc
z(jUyPf~BOJ`21(Hwtk{6b`crk447!hmNVQT`U0{;C@yCm1^c^XFen0p`hk*cTVaR!
zxyW;@>tv<Ufsy0_sLs!3nba9;-P~u}<Vlzfp3fu%Gc{AJ314U%_ql_4E9D;+=J1BC
zwVx)1p>}bu7`F}}8-^sUe-c6^8BKI_XpyAL@lf%zWbrG^(!}x@fjiCt;%nVneN8=0
z&3*6FBx!k;N*G~c|41@r<_<CYTBLAfMW5;6ybBSSrXD#nH4C_tc6&OjHfhwY?OBDJ
z#o0YIZDA(-N2qjG3J|XA2lw~?*2Ae(t?{<ID-d#;S3tR6PL%zv_f{lAknaqwWsPLz
z9j(yc2;4X$1!Xkx8)Y>qjxO<6Ao47qzm7tUE|_ylG>+dO-#pCx*f=l?zZt5O7ssr@
zAUtr}YuX;Ur}to}r1_oF&R|=0OyEt4E=08^drdz(RvW0GVfuscl`hu`m+{G-^`fY_
z5?UO31;@}4fwHFietrF`-)}|uzdl7vm}XAx$*_N`LmEK#xv9|@ipM7NAt_61EAcEW
z>WZ72`|P-HvIS?;5+CPzFQEX>03*dN;;Q_xAm9eFquQ{5*R>ZRslHI%hZ{qhY3zAE
z=*|>eLH4oNR9P9fU1%wizHw(}Xh>pTDNIaWSUtEj27whi8S9r^YX)N!u<Vbq#5*GK
z(jdzYwoKy|G{ktP-jvV*U#?1rJ**CIF$9Ix8a1_^EZOCM(??w|h;qK)VOJDrl~z70
zXwoqS0n4KWxj`QZq3z$Vp7Chz7;gB180%4(X~W~OOb(%dLbdlg7jXvIzd?>k2~j|W
z^CP-!G5MH(qp&CFVZ}6>lpBRAzl<xa?{Pk+O0lppNLOSOF+1<;={EksB%Zc}+tDOd
zrWZ71$D*f5KQPPx<LcccW#);>A4(*a5V3>m|Dy0azFy!~K%V#vu#~>a;eihS%L9*<
zhrrDO%mszGoOGP8H8M(;$VgE(C_^!p5A#08l??ilC~+H;tI4fbTb&t{y-oWdvXu!%
z{79tCs{}wv#dv<wi-9olDBc(Mc|uhuSDWReK_Qf(*ICHvHbmzhJ6ItO7U5A#!uOcR
zpJ>CQ=>Ke8Pxhf@DLl5Z@nqnj%gI=;SAEw#GbKLT!zEsUu(6>bc60{PZj+%MW!eHv
z>@KJ{?%-5qalAtM8X1$;3&E&J4${O&cLE`#=eT~jiEr}7%)2SoS`nJ`pQ1<*ymi}h
z3X+<y1JZMg;+_b8#N_wbdKpQ|5T4;ztXlsGxdaglU_QjYRVb~c1e4xPZwq!eM0mP<
zi8F@7X=|WmWn~CkwsSU+Q0P~-2r|2tZ8|q3b>IFbx9o-O7-&>~Md;M?S3$e)FY506
z<uSrnShr>3D637*bH?N+nHbC)XsWlr!#Z0j*as}l`0C>t&8eF7kzQ`1M-Sg)gP%mo
zwBRU&@EyGZO7^740d52QX9x`z!({kGANSV&Q{q9?*^3LSSPCqL9yTDt$n?y<c|{wf
zx_M*eR!EUZIL#j|&uF}HK?a<{%na!Ht&Y(i;={@{z6QS!ikhwa)>yi<O#eJZG}GVK
zTuPl{<HI%h<SuBm&Fr8uh!6=VLIm0}x!y6)5Xs0N#vdpe2P&U0dRVE%&68Qct7V8&
zq~=j)Rx;aQg;hs$|5I}ytY=%K0`nut8n}jaAw&l3wN$2VUKycg$~CI!AQm#5zqu*r
zAnK4o@}}v!+1D)l&vtmrPcvTRNBh4dUBHRRVRJtWo9R#PG}B4`OfJ`Rp|}HBFV9lF
z*f&b<afHi;@eSu))gaOr!=ImTz2X|PIwn|t9&5|iO8mmjc4$)|;i7LmyQ$K{d^RdF
zzTT&hkLnWA48<QT;&Fy!g#YUTbGe^0st4D;tG^L(Lm`$wF)L=IWsr=qg-AchipkY=
zz(*5P$BArHUTI^}yAO`ize;I!c_44IMG)-C^S}@nZ#T+)kC(mQi5Mt$%hsbba)e9#
z5x&2gZy4nyr-zO@U(d!r%Z;V`B&<Pkc}yTytOd!A5|Ajtfo!>7<%Bj4qt{)vBrtuv
zGk+^3PPa`-KK)du{v`tq%B2QS)VEEZUGOBZgrW3wbyRY`?yD%&m0IBu$Kq}IxRc9C
zKL}o7a=Zf!P@+oxRke*SWpMgda=X0inYTcXfDT>9U@%+XD5=>(V}Y1uKPxpc@m)aN
zsF|T*@iQv(=bYVYfynEHDuqNUg9K8n6zO8Zc!y!WLe@Q4@#+iIMbqRlhhr0xKBp<p
zn~=8|vPZw*dq2XQI$?5^te3jF;(*!(v%9L=uBKH*ip}PSQ7R&CwE&pyl%bY=5uCnb
z?SzC}RFb}pPs|7_OeZ57(Ps_;tk*nNK-p;Bzam$P?UTLuv9COPR~6*tfGr66jMn2C
zT`I6=au0o<fTp}^nV0Sp5)(w3r`##%q2zvJcm4OEfWLs=7x`2>)&x%B2m&5fD|M>k
z@N~59)mCR-Qv^1Q4{&`mEYyA1za{NhKQe1=N{wrM^T{VFPX;0(D46>t_sB)gZe;`S
zZ5~|t@QCKfDav&!tDz*m0E)uA+3F&Ovp7B<OAH{s?oa6Wr7sYDda?JVrHbi44E*kX
zgLr*U$lv*91b9Be^)j#;)2$({r{UH%?%)hd96QW>X`%~j(9e7&(DaJm=r`p2!^t9N
zk<DQ*#*0&2bPW>U1B^+w7cNdwU9sP7tU1oH_+g4W$(^l*yL7mD4L)R1Gaczw^KylU
zKL+B-tOU{w%CIP1ik<>oP3bP>iv=&={dvh5U+{W`5&rEP=jKVuH^t-=<*Yp7Eus^!
zM4i*MoHD)x==PyTH;S8tAC*v#d~@+h=YF+7T>F!?h&$ir#A%XicWRXf{~0{`w3kRH
zfz?D-kev7;aPkONgz7P^c)QZs8(=kJ8I4bCv%fq_%I%c7*}S0RG@m6+$XvmdCc}&|
zAxyPwfKv2;!ba(@#}0qfHkAc@9CD4eaHGTeyKB`>DVgtb{ftXiZg^ti26a3Crbh7n
zjI|8H$gNYydw^7rL}V5wZ%*Razut-v^Yh!x*RNbDa}sf$c#d1s6RIVeDBMerpFl6T
z)9msv`D^0Z-~8e6*48b*`fjaBv#*7O?ZzVghnTVXm*FBDjb<h<@pcwn;aI|HUp`Z9
zUFbK5<7Tar7bopPg<whHUO&Smvu%}d*yS3ImEMy#6N;uWC8SOsO6DLb)gdAQ+)uPG
zFU)*ay+w5%0`aP&LE!zrh5X=u`-h)cXFH8<`-8!pxdm-Kd0VRo9M@ztR!l-%TjRh;
z0s8d`T9K*+^JaoyO4P02pf_SaybtpuUh330G7=faYAun!G%$`g*w)8iV`1D9_LVi|
z%1Hh=l>c2Kz+70+RyVli(T)(owT#Bi8e5QT-{-i$s|sQHLCyP;$SlLIYy_5vEP|;d
z5z%@j*zi)tlWXPazTK0t8OiMBxB#rwK@Jz*qgJZYiH)cI;eYERL>i11PLy-Lrzw05
z7H^?4(k_(L$KRm~)Wi!GLpyt85BNj@J)e;n<DPGO@;le6vjv@ChV_N`fA>8u{+1Ov
zLn<!FQ80AmP}P74`N1fb9-vLU9*cZ~#I7m>m9<odATVqGA#mt;GT#`OuQr&8f^=B^
zBnZs=ro0rO*0~bwm^IW~lPKW2)O$Qor1?U&TWWojDdiOeEH()1os;smhTgVX+g_Qh
z?Z}I6%Wqh+GK&f=Czp!KG5Fzx6xM|qe<k2ZU?Ms9VMC&U;0%eYVdj?+M2mMjyun>)
zu(O3>jkzD0lRhd?pRv=uQ_}}8IAC!A142-o$&v{B&>hq+3^6chAZUA$rR>ku9#e2Z
zPw7;Gj9xtfa*<0!X&0M2MlBFMV?UeuvP=`U@=f=EhJt*rd90(*Mf0dyZm2F1m%m0M
zjJo!xBysddYY(h>grAp_1_X&mxu>P+U|5SXGC7LfNtP^K&lI}o>2Dctx9ROWvJ*ht
z%!B~<STt<|=_J8)Z|^^%6!S9O>?MQ3SL%1lPc^UIoZvne@mR+9s!e~7)+xfOfM39m
z8^zU72d0l^4?llm!TH9*kr;m|Z467ropz;P3w>5E*km7W(xsEcLg13__4T#&5830D
z6ZZ#?%h9o17Rcooucx4<7-hBmJpZZIb?ArMv`cD~7Nn+9|G4?SU>n_5f&Va*Mnb+Y
znIl4e*b*_9Cqs`Bs`kStZ1y1HDmy|+fq!Bz?)8e_1$ukQ>6M$aYW3UvJfuq}>KU#0
zs}^|+>Am}1vuZG5Fm3F#LPYl~hh2ZS+r}%$S+joE-Y#vg-SJd#w}y8QruOWu&O!IW
zDlfeo%a`fZyYMIS1QoGv$aswP>%s$T5m3Ax-T=EeqfoPV*c%5hZMeibs;nSe?|Ja%
z4mp=drYrsnTHAn6IU!5=OVc5R${cHLoC0<yflK7wS-3$Z4WtV|IL{)#0<m<<Fw|5o
z=-=EpUw2Mx1Hb6t#@qMC4~K|k{lWZGD8hg1XnhX43j|l7%$!bny1r-`?aLftR|&U9
z5v;gbq>fK5=ESAieBLwJJTI<Ej!n%pXOBK3D&-%V`Cbg2PDy=_{fsK@<3x+zZs67L
zXdSblmikr<RZTERhnh~nT1mlTEMxHz9!ouBOyYLUh%EqlEC-Ksyd62+(?VAV-u1eE
zgF>_)sKvKSn?uo)RR@AU{{Am2jcP1@Lqu5q#&Jd1;%utOL43sM4_&kWdgrZ622#es
z;h?U%kL0->6p|1389Mekd*xt+azy<C>gkToQP|~ig}f}ZR3D<`jP-yrtfTvD=-Eb(
zLpT<`8WKE*+d{#-BAurVG%Z<3HJbUzV7BF_G$$orH&=atPG{Z^20!|Pe2`||QUP74
zeX|7rvR{}5CJ%?Bz|a&5!$tD$=xBWj)&$VY0a`hSCV>Oryr$7MO|gAhyf2A!x}0`R
z%58B<wb}Qla_Ik%sMoe-Sxd`s&@#-L9gt)`v8QrGGdJzId%JIiS+AznFDV5UzW8di
zF%VfP8z#LyCN+>m3<taS8~L1X(k1JUb?<3|%Aw0wCzbzQsTr>~C3Nbzc(iZq%?}#x
zVp275&&d@^p1XozmN^Z{b2-+UqlZ24^Mo%v`&f#+*F~+5oFdk1uc1ehg{NB&xaELJ
z74#rL<Ql?gFR&aRijKXdSZq~lHbQIPtUA&+UA%@zlXiUybqYXR?=PizWXg&~z6*R*
z2i6Zn=EYB!PYD#wj#u{AKN932vk8t&E|8}O1yxXIEvOVKIw-`1%GWmZgM4$7%<{C8
z!_;GH?5}efd1U$-ffq#TYpm=gF2I1?nQa(88<#|A-;M9`GbYW;&fB+pUTo_7WISat
z{uZ9LVvj!(?Ksr?ta$|N-;?Kl|JG%yYkZ^)*Og-YPQC4Or32nNKg&_bcgLqyn3qn%
zZfoNP<a^oQX3j)}BKdW!6bAErP`JT=5s98mr?;~J^4&G82?0wr6WTzm`<wzy`E=D2
zNy#_45no9{W&oc$D2E}<^~oNTCkxOyw!IQGSbUGN9>_vt=5`mjx_fi_LW1BpG8dK5
zEOqw_4$FvYf=R5P%$=GmR&9Z#t{GSpL=RY8J4(9o`7cI!orgf&`+M+Q<=o*}S=EG+
z_*3}xm}#Og|1#`14-cczYRBIJHEa?VwacHc;l0_nL<5tKy<ZsI*5f2Ie_!pbNqqae
z7QjwILJ~3aUaPNap}NMX*<O0}bD8QPv*;?B)#r7}peL5rjh36<3*bijuj*g%0Ayjm
zJB^b2lk#4(G;`P!s;jC#tugKV5xiL}?+rGvV>i;YP-*9#x6oSDPx$EpkhB1ur?wJX
znFBbw>0C^HdZ)5}IgF1hR?T>^Dd{}@?+p@q3m1{7G^dZpY#Y0pq>uP<yO$pmY}>{F
zfqXi~6kb$-5FcZz3)aa(Qt=quPz8s8p%LHUMi(SO`RM8tqP6*P<+i-!6mC|FT)$ia
z+*SbnCfn;1G4JmtE3Mw#dNqcMijmzJ!^4(t(+d305;ICwoOZsO$MpHQGh;g?tZmOE
z_%`gZrfP(~qoN7g>)D&H%zAC*4%Y)I57<WagFRe32L+dqdTb}6gHj6$wy^J6>pG&l
z(BqAoHeFzAncl^|BBf9w+ehf7aUM{lz#<A9F4Hfdx(zUp^6m^nEs$CyX!l+@ZS+|H
z>@T8)oH*<a!%-10U#^(|=#F6D_+6L~{&GLTH=yCC`s%ZsWre?=3^4>RyoW_AG}p5o
z5AwfxB=pepD>0$nF`RYO<EZ7X1@Vno&rlrhQLl=DpNrLixzvFB_2hp_$G0}_$H`wF
z*G}73#=9Ta9YXJDxg}#hoo&I*ipi^JO7LG3F96!yvG;@=%FaXA5EDSl5r?N4_ZGR^
z1s$O4kN<(f_TGe>HGGuKdC!kusj&RKgt<eh<L!szx;YHe=6G34j((Hl$IPXgC<?pR
z@x58PuKgQtKVx)TTVkNBLv)DBT=@2^3D}N39%Hyf!O$`oh%_lx9iyITQi_kuJXbU$
z*|{QcdOqWRqZl5-_3p6Zd62+p&qSA3eofL};?X(CE;JWtnZR?3z*s=F-7H)~5T<0*
zqz*6j#f$;fW`^L$!jC&+9F2i+s!%RtKo(C%2wd)a@Ru{!umQnt`L<JnTO@0r$QI?|
zOqAp+K84=oX24}&-R4%Vk`4$O2ygV0hblzl4&%KM`3UnDKBHnT;~;nSwxJ4E-r1{}
zm|(X};V#G;Tvx_O9DEHgrf8R9){dTmxk(q}*+Jov7LK1gly)`;{(q(E$sP-+DSB|B
zZW7>Xa&X&K2>PyJ#sKlWR5)L!=K_!s$4Fi=a1ARPbAfGagD*?~BktHcyj!I7sdD7m
zRu}Bg?ZOQd`rGlNNB6g%^Fa<j3E+21Q=$$?@7}UsX8&TGoyiDy@ng%FlWD82*F!Uw
zFfnJ&yKx4vIG$2OFy?l=fftK-ZBFddt32oSx?#WRuG~5(I9136G@~6?xe(2lu<48`
zx5CE4>9(7p7FaFNGmmcC`}#=-e^jU@!V3vm07!E9$k)I{tGFXIZjsmooY$eX)8Lvr
z>xE=bIvCne<%iH5|Kghv@&zF2x<!uj=f&q?u93KrFupuU;%_C&QL9+SXMln3Kap;V
zOg4kFy(Z%ZEV&{NR;m%ZXe`_whUR-I2E~Feg_YaCWIW*IbFuF$NbR8Ot*92)xz|Nz
zu;7u|gCE7-*I@Kxbx}(@d>4`I{l@4L0{Wq!&_8-WbN+yY7Y`>;3Ocp;tMJrRdLk_z
z05o*0(hmoJIQgk!{R@KN1`}YBz)*e(S)T_eR*EC}rndW!asdyNT>v7v34EJmlY~F*
zL1(sH!4AC770Qu+2m<ZsTayO6?;{lT04p7{`~?3}`l3ls@9XtMn37AVP+;<40Tsn*
zt^WXB(3YZgDS=L8(977*ipPFMgABUCBQXj;Kkk3=-BM=%Dj*}sAI*_QjyHdviBCKE
z^e<T~pU{@XYX?t18+jWHO`0jK@y}XvEw3nGI&kyMS1d3OKQeM0<xnn<#_9_`Y#(lB
z$C#}>SyElQ7Y0#or9fC18E!b%GZkgEeqVmRTH^+$i?xSS9it<4pfdI}6`2>j?642J
zpCC1$`**=((%9^}H&t{9bGUcPYb=`>JvyK_{zZ2T{UwS_XkJJBTUh$QU<qL-cv*~Y
zv6wmvfOF9?@w<)i_u|@V<@v#lNB?qMYqdb_3;6X_x$A|}sO&seJ<_~3`;o+zeN3&)
z3vR|dzza2b5Am1W1@eG$$`~^DrBpbq7Ae~hjC~AiNjC}7cvVp5+{sCf9c<mEPVrmJ
zFEGt_jo{7JS(@2jSq-fF6y@6oJAn!D;=*axX^P*Z;#(_johH|FVVFm+VxLi_RjPD2
z^9GGLJCejw4&u@M_5Wl(ohA#R3J**|eV>P}d~_iOA&H+8K(n2YgpgS5>#sjL{k&k+
zJyK@r_GV*)`vpSV0oG7~gO}H-Hf*8ZLvs*&G+-caSOZP_EivkJ=mdIDLTIw6pcvO<
z$uZvMs+o1(7f7~_=&J$VOSr!yJ#d}vJJqtJOVg?DZ)K`QY7S(1-qNlTz!03FRX}|J
zr=cBCi<)_!3tozX#4ab`ihHyLaAteU9GbI_U4M=Uy#+WzodA;uSn31hRn;nCuYmaw
z)o5+5w*DPY(jTSt^f>Oxv*YQdzmaAih2{AF_P~)i`PnSPXNC0Rz8kZWQp)uuGEsa+
z&vGJt&Iyc)G|X347&0GW9`;f%5#4Ngs8loZkl-bJTKrwE^1TZ2)B7;vtQ>;myq#Du
z;}t&~ZxVR_{&Uf#{{6y(4fPAHa%k4#?I4P8&%UybOgGTP<C*~e&JMH5rlp(p7r=ir
zbOi19i*udzywL~7)~nyqmZo=$7C2bRUC?{o1B=J&pl$jFT8l8be*^F$<vu?8bDQ~q
z`mnz4is%U@8#aOA9c4ZKF}_}MYUaz+_t%vQu)wwyiI78Dg!O6#2M=W>ujpee$&_*_
zV6{`q>LY-&5`wCD5f>1EXFJqJ?Tza!$8w2a)`$K4xJuQHgJw(S{)maG!kuaHb<j60
zloAtREXMe-6ytL|^~9a%*9Fxfk9$NEp%2&Vry;>3sqBz>rnKibz0Fva+9<6S!>!qJ
zta9k@@PoerHc+qKUp3hRJF8syQ!k7<aJ;AIAT0)mbh$vNWCdQ;^U7$U{L{5uze~rp
zpv;@Ue*c|IJaxTG)Mmxoj?u2yeQYZ@?FX81iz42IJ3%Wj?kD4emP<xqln*{Tr~g$o
za37;X6Xf?V?kEj7UVy^GDFSjJ%H56u19q1o3#j%RH}+=eSIgr{BPJ)o$A(VdX8z69
zZ6N9!9IF5JXwaP>d|wYX+W$PDdXT7BpVZS4_Z=@7=S!U;%Y$G%Ud?goq<2bGj0QSl
zEKRasMA6KKr4Z+E@3aD?rKKf<i;KY3c>U2dsB|r0x8^%H0p%2g^$j<*m#_oPh4;9?
z*%%hVO{&2txFr;RJRF^Na%xqUtMy36edHUQrv&5unC<iN=93xN)&S%pax&nw%V+|!
zr&QHg;iPc|%l$TPSll$r$+iNc54eAGzw}sTvG3R{@&ma4p_eWjh=NO?7HNgPhkyue
zEW;Lk!l<Dk(uJmrr)=xOXB%C>oSFXW-U?5bWnnT<$~PQiGf0+3yO`>mbguts-b*l3
zc7`PK-;9{rMfDk0-mA2<sUao;i#!2FjzsEoJc)p7m6PdjS~BYD>TUK&I6U$x+5Ahu
zU(EIs-&C;mznF~;Jl5bC#!&IkS`SCp2TO0hX_e#0irxEdULVFWJtgC*M*81-LZcWT
zVNzZa3CeKri~T-aE;D*xo<vK0!2D@%G`)%`p6o?+&9_up72N5VuF2%|b$i}^)(OpO
zOu>uWgE_$lkck%S*Y3xd8%Sl)=5B$!*cm(CPnV%5znE46)Mo2xuR>)piFEF+tSl=#
z-i{DZJ=^n2nY=tWI4r4y-8k+*Q0J44tg2)Sz+nS)=k`s7S)Ar;+)wz5=#hKBN_czS
z{SynZ35DAg_ynk@6uqu2?9;fqv+ARLMso8&zkH`pc|S;VVsEzBe7@G^VfCR$@2O+v
zOEX=KpWDz+8j<~8URUk8#vYXt+&K~fw<-sJ8ni53U0vHMDmWeo)RsvY=@;rCDhOhT
z@5hac?HwH*E7n2$?#;;`P7BP7@q0^G6AuS|u}|VFtWd%0I>Mk5rVX+OX2OF!yb(d3
zjiJ8%PR_h{5b!_JWnb?6`SN~D!wXI@wO$31i9vECA15m->#Km9>Sb2d%oE{<bpzDU
zvTU%lbj7XYLuoSzHSh488y)Td`2h27`jb|%`nfn=R67<<@JS_A0`J4Mmkm$xr7gQi
zxpik>8vH1A?Sm(}b4)DJKSIB*V}QxG`4pHc2ede4w%N`dz(Ex1tgAjOG+yhw^7?Xt
zd*|v6eWAuC)g7#6jF*yX395B<`SgMqesz*J)#|cR3Jy4DgT!`K_iSW4MPot`+fw$z
zMbLTge5Ty|d_wqDlZMlODU>&ul-l~7^)W}kzoTD67$B7EPl8gpP}r06e0Y89>;S>P
zF6DbIDRvl{3-OIz^WRZ3m-Qvcv)($sS`_r~hP^^v5BS&yY+msu=HIa{pze{xKREWR
zAK(RDZ$J~$9Hd5hE8XLh$jzOD+D+b|O+HNVFTJ@t`xTUN!4)@_a8IxK?L|dQ1G$dy
zbj63Do<v@RRaZTmrRv8?9yFH9NBBmj7jrhtc=1nC*whO6OWqp#f9WvsA1TYJ<f>v~
zRz&iY+fAA(lMPzJK_Y3DVltIZV{JtYx;GvhC)F1*E8WA{X6>$ku<}YS0mrN1T)J*z
zMVjYYkbFZS&+Xy&cx~oRV#EwkeB1I>{}mT8P$JEup8A%^SZznv#UyW=TF76U6DySJ
zH?~qPqRH-;Yu=YHH2-k6cQQ?XG!z#z#dU0y+kKXLY^V?s5_B+|T&0lo7(x-lB7yOF
zyG@FN20uXXtA<-%f`Rwz2#iQ8h1Hav@OZvQ4p=XO%76C32}akA?|DsrG^0Ri2v@*X
zZ26d8ogpFP;WlA-XB6F7)-~z(M>3cz{`c73=zdlg=;a+(Co}B#`{e}=(hOYt70k)T
z(Vl$hWJZ~gmoHz6yDT^B#%5(G4HJ@^G@paAlS+laJ#rYr<{udPoA>9t#yUwUHDQcy
zJnYAh*H4fO33P&AttGH>37<+Eydo;iZD!G7Z?YYiYcC(MUuDfSZTuGZQS|f9nk?Sv
zE(wJs%G!~1T9}-)rV71%>OYBU&{39$SXv5tC^I->oQc3C_Pky3Sx+n7w%%0U#=cji
z^D8~71=$#3W#`@7R?qhMwpTsJ=sne`#97`-d`k*8pH%yH1@`Q|MIKStFqG1Bzaf<L
z|J4o|qj>XC4L{Pj-d%b%hA`7PSJWbKt?S`9GcC9DI{aP?>u!%Z*)?0#!_puke3>Z0
zF+}?VRweR*{&V01t<QF=>l~G$5cdL$k#Wa2RMMN%#lSz^(hiC=9@bBGphuv~0EG9z
z(h1XhSVVeSNRdO<eC>~~tSTa;+mBuVpb8uiNA?mjH$Hj#)aF#nBcpHv4s+ZYg?s!R
zOjpZ$oem?p<6=igsY(Ii*acu`PH4fp#bqU*y~OAqEs-fK7=qX<IT&Ks;DMeZZ^eH8
zvVRXc8t=x;5CX_zLUP*{4rknwOeQ_??(hC{2R|CD1~b%=){fp<SCP-pQ0K|txA7?j
zL`iqJ({rviBg75=AixJS^gQ0o**OWtOaS=|F_!|gM<HJDE63$81MxrUUw{MCpCZ6w
zNper@3FGOQnAvQu_xuud%AkyP*Tl0|g1l57nhIlNk=51w$W1>|#AX|HO@0n9AZs7}
zeJx|bzpj%{Bm0RikFd)hk~~oh%UB`a!CthLQC1w%ANO#2s|r8(_6iml6LdC)@9?>u
z^PU!2^I%pEbu##cntjv1Om9?I9p&qDJ!#+fUm1=Z-B_mofwh2&qpjf2l8ilswxO`Q
z*s9C<^6*yVqrNSYI0?l(&%q50%OX>BMLUx+o#?=xhZXMqJQ5>x;;~|^W!Mh?6->X}
zDC^*8Fl+*$vtnk#B8I5V;oZfSCmUw546@6Om5^AGgunbkoP~u?mG#<r@vJ$`8qd)~
zTt<*9sDu9Fo&_gpRn)-2yTX-W+F+pn-AIN18r7Djr6I;DK`I!<L>7C7@2)mQ;l5Y&
zEz3j8w3!Y)DoSB}Er=Mn_zv6t?y!nQpTY#CLH3tooc@QY4MIUC*-gBT-Qw+jWm(uU
z;u?Imt(Pe`Pf0$d!4Uh%uuUZ?{w$o?Labl&y{|g1O+r`!+Bc9MxNeCB@BTDJj`RxC
z<H9QC(8EzQY0M%b{@js9LOFZ2!~POWl|BurNZR0lG`h#+$5mw<*du1Q9iP?6;`0!+
z400dzD%Cha?ffj#V9G)cFS*GS1RlZGQOaOE3z^2f%X>ijKH&Bwk-tOE(P$KUY)JX;
z+3{TK+uk`nlXO-Jb7&>IX~PGN(ZTS1EtzO~54lljKD2h=dSUHdZx11eklGN1JM43E
zh!kzpitK@xNL_+8PZY;?AH6f8Pygh2CEcPhxxeIFmO-glpQ%Mv1}=f*mAUBxkBL}s
z^wA5b7EoV$_Md(%;+gOFHUBX(Wf5}NlqSm0@17CgmMgp?%;XE^p4C5tF!x%Sr$O&E
z8D0XQ|F1_Sg)B0%D4O1%4+dJGC_=F5tM%e2KGIzLf^8tGx6`)IK)~aVY-JUts^@0W
z1dx}<|8m?$->RtDo-5bi6l4};x*yWJO}tfW{D~XU(a~Y-sLapVb`FU%DPdVPpUEmj
zC_Oiqwv=BPL9s(1kj<MFx5*;6=L%}LpV`*Gv5&u&HIPh$-mdy&u0q$5Hf++f6+}c+
z@&C5}vHSrI088vNP^Kr(2uIt(vM$&k6lsFxR31Ja6Rq``!x+PJq7Y#nQ{VzW#fQ3Y
zmU9B%^;TMA>ubWmy=VvaTmR_sh|Qfv*a%?3i~b;t;dCv!MRlm?{d>Rr)<8LD)%645
z>3DsgRKYNKkVk(Hrtn5)S06GEGHCO6Aq)%*Hv2YLbpBL`*qwA3%18&tZm~ijydS_$
z{6AWcZ9)MGie^Y(^Fl4{6=DPO^rZ8)YvOh-z)ft6IvoI?51&vEIl%;P)QS^&3(k_@
z$&Gl(%?!vt)(B0Z1e7$k22mIB!_y2%1%;+Ic=LSvw<jynU|3{h`GJkML;s=V#}_W(
z>yd_lhy|byG{CWG#U8wFb`J{Hxv1-kB#lgc&-0QlAzfU}$mW_?#XE!zUsau7Df2C$
zdM4jLJA$@@ofb$nwIS5_L3QZ7?*xb~U)jlY$1o9rP~67*$T3O3?h@c15j9KrB**-(
z1lvshZk*d$GfRK5k#F4K#mk*Ffj`CaV=4Wco$_NDxcmG2Y_R9y6Bn>79uB_PZFlsp
zrb+QP60DTyXpjHOgHF$I)}K!g_^9zyanf1aW7)NRC^qQZWj6Sa^1SD>DLFyJgb$NZ
zVrV7i(|-#(X_;2Iw2B|Xu1F_op+A`G-g1NataAKg6>X@J<Z@lB8?%=24Z*9YPmEX+
zV3)tdc}~mT=-w^r<O&*)a?ZZuf5RFc9*B`-`FQ(4r)pTk#ej1Ay%eR<XX`|qz4es(
zi>I71JsIXXSFy&A(`&bTq-F0hWwZz6EI6dh-21uJv=t0UU@Tm;#b1vUg5N3<Np;a8
zujLP!&Fb!!$Ga1JA8uC&v_@OYpk>f*G;H&FHT??}6%lzd-V9d%ESiCaCl!&8H$3he
zcf9EX&!p!BH6SLai!olk7iK6S+p}*^8ZZPlPr)$@gCKW2A<-&H&~kw_+HAJn{(ip-
zdi1n;>}FWxrPJ8hXa&Jy<rbD?4@H!aeT=`KSi8jw`b^CR%%^0th*PMW9*=QHy}EbJ
z_38M`<nZvX5qt);`4AN30de_5!)~%RUnt<?#F2rZlS-Uw;6pjm{u9M#E{@;m^c1pO
zrfPNLm-Vyaq2PtOJE*#EaqGO)-Pw|lx8dwOi!ip!^-%EF)#c&uPltl?g<g^Ms|WFH
zO#6d%u!OG)LSBn-+fL-_Xz3Z97D@7F;`*kXr~3lL=4}Q@>>X^fDr#w*?T)_?)Exu7
zyv_F^3bm{8cWBo$MWZ=NRY%8VyCfM>>5q!s<(AAA?o?0+BAjIH)id#sp9j7FEJHKw
z+&C$F8IV6=(p|)7V~PoH;V_Xk-;&2aDszE3#A{d9Zn3#$#MdJ?#9eHA)~BOOEiE0=
zoufH&(>slwD~B1r@MPk8er9UHNGS4<y9pbQ!W`>!sJf7Jq|!YUwM6dSWH(WJe>I~~
zWjBec_P07$n4{U9jms7>15Ew*2UMug2qXF3g+J_>Cs7Sy{B3Fgh&9AHg>cJ#1=BY{
zOH8#j7mGGO+MD3seq;O#Fu<d#wk9bUqg{J)#@e=I>M6TFtbI#l>F%5*8;6A1Ltgfd
zkUenbt;jzXR!i1b#rlAKA6S6-?~t1XYxec@VeCaZAb6>CX)gW=9<jgTg>W)!(FD<Z
z<RU-ehv_%Jy9PC!X2D^i@Imuj)PUiaN`UXBZn!AG{k0_h?X#67v+#omJ+NS|+S|<q
z_>T)N!H$=-P5pIm3#_%zwxi4mY78VlbKq-34e36ZN$VUp+94ZTUDYIQB3fVFwAJ@4
z@D#m%a}!zo+AuPo<q@6V)$hl@UQH9|$(JHoZ(hX?UV{3$lFE3VA4<X`e}6LQ1j0G)
zKS_nr1ay;cLxIzY${g3Oc8qWrfh*}~fxx@^W<qA3UoTb~mju|Rd>c%R7-AVjemjDH
z`T$KAS^c2JdB!0aBl%1)UcvYklhfG032S3f%GV$49odg2zqa?TfxZaMfDzVA=jJOx
zL4m&i9I2>KY`U~@10|RGp+y6`{Jfif7+|tLqnE8M_ntVeqr%h|OjAOcVcH70tTij&
zOAAubN(TDEV+ffAz*+Gp8aDP8CU}o8HX+3e8a}DGVMU_HWf$BrVO(sT0&E#ym99<B
zsQaVLLT$Pzf?|m{B$dAiuvL%{C!h&NM`--hS(*@%gjqi(>OJ8@PD&!Hf5=AP?5Dwe
zP9^VB$kkTTU~cPO6yx0td>fzv$O~FBP+1vgzyI&^Fi1kuorBRqI|5ON``oe-hDP_L
zHBvpq>%(bPp48u+U=Z~wyIn#0IT&i1DQ&%1!5{R?ukpricEGc)<Nj-oMRd-GKHlX^
z2ggaH)+u~K-<?l`GGDSvOifHot_YxQ?N|Tls910g*W0Lv{^efIcnRQShZ$5iud<_%
z7&FxSKqwSp^%V7ryB4Is`3<I1U|5(Yc)kZRa;Mo#C6(`0(MGy+=MR>D_;2pE+ZEK9
zs}CkUAls@7P}}U;Y1z@Oc(k7H;lvt}1{P;HGPA&V={Cu4h#eqtIo`Ab10`Fz_v}`J
z;TlxA{zJ4r<_sy^{@#U=5Uv!}DU15X^Yj{S;xDtXZb!D%^d&GYj6r>CMo~pYN#V)h
z@ht=$`<aT^QN64d2J?17Jo41FZ8K_%RW&1v^*Y~Y(IT2vBTJMYLXQ5u83yJ^*%W|!
zQR@2b<te>o@KEA=;W6|~EtU5}cY0ceoI*045#rYyH?QaM2m!f(+coz43?tWxLCM%f
z327G1myd0y3PU-gpHZYZ9)nsvKcNK^ACuTk#S8ExTEw}*o*W?GSe!&D$Y!@#Z*l1N
z`Umc8R2qOz&>eg><nz@ecxi`H&-gyaxrYFRa^QwDTtk2N%D2!wKlxpPZ5yJ{FxNdb
z3l>z(YLR4tU5N1L+%&f0kb}`VrvotNa=@Qs-x^$i^tZJ5A4Ncp$Z1uU@j<g}R#~3s
zLVs-gbF~chWLgQ~fW<S5!^1<HOw3I{=EeQn-p^i6+Q|^%_M@9OuIt5NzC}%wlHA^Z
z5@ACLl5e~;tx1C3@nQH0C&aeIG#lE>p!2O~1725oC<n7&sE=O(k(M|iqwrY|<Ag7)
z)AKHRKpwIk9{tgM_Zs#NreAeeE`2}&k_=<N$aDSzFr51+q7I=A(^)9qSu2<RYsg&Y
zp3d>$fkIx~fy%g2v%)aNs{(VQCyvD~!OE!#>t_#IOG_<!l&SA<w<`;{r<1Qtc!}>6
z(OC27m7i2-B8GRcA<&0U>rfmHos@mLjO<ZiCHP}e@kjKJB3R6_N_mZ)FG23oPef%^
z-I_JlQkInS?_D$BBFo_^M){}pK9mB2rXF9MWZ_}El~pQyhDwHHqXDS<-Kr=&TEk}Z
z-!j>Wa&o%`&|o&#jW^qK^YaS4KaT|746|R2jgB#8f?wrd<2(~i9}yFxK)()4@_?E!
z+6yR&qGVWTYANM?KQX`sJE*Ku{g9%u!`?`4>f7ZBQU~Ng)^ml8<n~57;v#wJ+_gpS
zEniO<1xILNIj<inWqfoS%M*hBat;=SzaBy!&-R{nY>SAN_D7<P?qouyw&pU|3)vd;
z6bhQAs}W!}uR2kHR&8;OVGBOJ?*^JO_Et*tyvwqCbIc!HWYD9kEelwEb`$?p`9&Q#
zsis4xKO9V?)nf_|94DNDl7#a^ft6JoFikCVg3w~NPe2Zj5B{3T5X)ExxR8k#!ll6D
zfq{-T^IthQB_Scv5+#443;#Go%VgQ_Nb^~CAA)L}idW%*rH_A?to6tGxGcRlP4bDo
zxalqQN|AiN*vMKd3X17lr&9GRhu_`ot0shO#@gUUVJ5x{AZ(h=PnVWVH@nN`vrv`y
zv*`!JEL~RiKb6J3PWzNkCwZJO!=DrH90^Xf$Y)o5|DLLjNT4^sP;lz>N%2dy>=&)6
z`u)*uPb*j+5LqmH()(jSnR>5tmSL>2p+4h)almSe*gR^#Zi87EoDM}iycCGpl0@y5
z7~-*|8{WV1ImrE>1RXEdqM*NuT3=0Z*(o<`+Y2M4<{uuC-WR>!9nUuM8qBtH-9{zL
zurdJG3+pKpqVV;%Il}ThU3XiSXC>I$IPSv_dw-LiPTKzddaucN@$q<BtO0VbiRE$W
z?L<mkqVZFqI-`_`tj}DV7!Cy$t=tahuZq@!{Mo;|tuuy(M6_Id=itDh_jCtH8Wr#P
ze<qEc$L2yyX@8u+51XzdJxLYoeOR%z2B1$#%-c^7K!Pxu1hK~K;cS`KG-EVPvD3dE
zjEtgab;$7*o)h5p?^n&hXD4UHZiWSrZYr*I-}{u;Glfd}5PLey{@$Wjy%kcd4fl^P
z8NyIp-(O!USboGEUj^kaux@$$aQF3?UgrQoa6Ec%)(~kP@b|w_7}jwp))u1f5;o6f
z{Lq)5ZEq2<Y!<q@L!O5itn)@1Zi!HK38Z<sGe?fZV^9t?@WQ_-J`c|2$A%Q%5f1w?
z-u;q^3+B+-a)0)igN{<D8<X&E^0}z^9QXQry3XBv*pkH1m*PoL#L~XiMGuFEG@MkQ
z=;1ctgiw4#n}y~1#rb?l7y0p@cH#xkk;*ln^`P=mnhSID>@B|?(w*NTYk^v}x@eKn
z5{*Rdid1cc@JB_9T$O<<%LD`Uddk758y}h%Q?G(X<kjBp(Z?m$8n!gLqT}axn<1kT
zshJMvYpUu(Y9p)#uSNv>ZiZn(@JbPeCsSx0IAJaa=jNm9B%IlgH7jL$f0aU92Jr-`
zc@J!CY$JbuI2jH4CkKd_r~GXgqI2WFKOZtopp{U-5+9bbuo!!nqg%tjJpTOJc05;;
z*bTa^v*@A#Xr7Moc6BpUk1iD#Vm@hYK%%v$L8nk-d<;If>lV?)Bt;s+R7(XK^r^{d
zPwr#4q~b=5s19H>q7Avk0x^rGprqIS=S6WlMkEdk3Hl9h)7>LZtuOipgzkOe;v$^T
zgy3PYGtH2KsmXso#?94nZx*CucSxUc>}8m*0X<F1BbxRTjeUQaA9P}HlxM3vxMx*Z
z7nh1%gP=IF#3Xu?TCKZ*b@eH<VkcSdT#-Z)>9RuK#C4Z+SCA1Ii5uYa=S|NtP?D_9
zwNh_^zAz_T3|z$X>X6kKs1k7Io~+o>izP&OY6AQF4x6<mKiLfK!DM$p_gA(^G`hjt
zQTm?!1?~*!1e#?`d85@sL<BzV>x~fB*lRG;!1>PM2rwONG<?B41UH)|@S}NUCtPn=
zP2<+<ARct4V#8>@R)*I<xX1kd2*LrV@^)%tB4~V46W9yH<uXoHD4CPcAfBacEERR7
z2>lButYsEe5`TQ3qbb4%79}3H=~87IY7ys+B2k?4E3=6Fg=!PMx~tx->y@1F3(IE#
z=-76-MBK*!CSEbItn336bh$_sjB|!7m_O-Oyd-Y|%sWQrDiE<M=Sm)1VL0;ZF<mOk
zzgSdLcQk5A%{mZCT@`ct&}c+~Tf*#$?jfuRst3$r{Wp8p`@(U9qn5MShGdU$ftoz9
zFBei7Kb(q)9gW=a)*?NQPwCcxLW0F>G<1xqDy$!e`su03c)@ZEqk$>IyPrE4o|;mq
z4~~l(kVSPonNZ<QDtH#+>(|TA&|^ORM~O|?h3#%B3;?UEk2W42-vX<ie8ReV_SiCG
zQ>&+2X__3%n+}V>f#c;T8yJhM@3g?u-+l6CdqNfEO$&0G(ge?M4F+80M3_56N4Z?C
z|J3nvduCgYO>z0}cLK;t)gIw}`^<6A$@wx}$lBND$;davs9qDiZfL6Ke2CtRMTWys
z^2y_NE`jH6O7x{=B&|FUcaErI4(Ma1lrGAyK{*~~wJfv!p29nhul4wRsX;^A1Yo@E
z)_^xFYuTqi9W<1b-I75g@npQ!at3nPc%u5YnEXZmX=f?KW9AnWWgh6KG;SD}eS~!8
ze)CEKxlNb$cU>qiPtRTmFfcjuaJ8TF=gEUgtLy4(M$B+6<DTf3zhxXew;F7fRJQ0o
zbHUtnEP+ZWZR2yC)4cENl`nX}S;7i4<U1Y->t_A47h(z1t;5{)nhsrD;E0Ad{8d7a
zM@PhB?Zwc>&w<cTDkD!LZs>*V1z}wm&(_OO)JR-?A9uqhFqlZ;%NQQh+r!+(ly%{@
zQj~WTpp5iNqEpYR?RlvVM4%jd^n`Nwy@a_1i6K(%jr@hueF8LT1!o?*EqNEr^x>qr
z6|e?if4b!<f?dCKYUA?zf^nXNWxsqjMPY<km_$aIuRxb4AFr(Ls#lNe?TLiFoWT3!
zKfihMezHt0`nqFnb%I3<X47(r7{`Y~ggn+`DkQU3vs31;3#-T$SXIxYJh@4haso!#
z;0QOKyo#itU@At0TJnj$Y1Iy^jndv%a4TuE1uAzca8@ARF0U`QI31Q-nIkvC@l}er
z)L(nJ9|Vae^jD}|L4425kCc@>^F;_$cgbIVMhXVO^L~DaH0JZ6lZ!|IIVo>%BK4mn
zk$3Y^qcocWhu%M^jWgJY`}H?kWDsr^gCnfn!-A25jeaK?{<kLz!AFYvTABu=Z#DYX
z8oSZDvU!-s!v8J#-7JIzCt$_1zuOB{v``eqekB-kySfR4-|X&{;Mj8rS4b44&7#zl
z`E@q3LfRB=?A#gF(m{==R2hMI+_TsniYm|R^?TUr6ySqe2a&}<p~y!h?*g!Lf}(#2
z`T1%%y0UC|jUCnWU>+v7=(C^edGn;mH_>H30w?&hJ<%moi7}y7JyD%D*2v4L$Nlks
zAw|AbdbQi;6#R?~(#q%ZdzWZEr(%cPRv566EkEv9#S7P*;D^>@If7D+X=-8TZ4pix
zD-d!+e*Y;AMyuY{Z>~n`AjAl9Kg$t3sL^kb!Lm)GHb#5v$YK$`IXnDIzktMyBws`6
zxeoS)uq^c9s!lZW(Yur9L424sMfUs@-&%_h*@r$dz$It`6$2~e_ul~I%?fX<s&c?-
zlLnFcr*zF1m8{In%zx_ELpcR)$1B#LkdsO5p6-c1pho<lev-z3?0VC4WFXTzsm)qW
z7fZd|=CMxUx_zLf*tto%`oO~c{Mq1Kdcz|IBUJD!I^A01w*j_k46K@AM1~vN#r6~y
z3LGgk*TU7itqwF~p9|06G&>=zJLPKo+4|CSg#^zB;zXr33{2A{t<;*&s_p_GhcsW2
zBrXjl`^~4)(;91PrpIm9^mfN=%NhGCL~Ze1tyu8oN^QM%=QNB@twm#8LKhu&IRBbR
zu{YKmf@hboS**_*@Ti$EsMi3At}p!zDSH1&=AF#b=e++yw?Fm+N1Z-)pW?0UffwR<
z`3{6||5C1qkcw6O)-nr9hY&Nj(_aC9mF$1e_C|M*nt8R-UBu$W$dsCY8v1$&tl8=|
z5=2Ljk2{}PS%!R3lTzzpYY6NCn(@T8Gn1{mF_fE5WeV8rvIS7|QaHt$?T0zB%tZ^P
zL1mxOgI)k95<l3zkC$Jfg<pDB;A@DkgJ%&<NGwAf>z_Kzn=jh%yw}nq+c|0Hifu>L
z<Ml1j-;ksCSh}%M&6H;;pYkp8JKnv?4a6&X|43?+#Et6@!FUW%xZ#&0>|CwkRuCn?
z_z{=CV>IeOb0&*lKYujLT1Y=uFE2KP$S{Otn%#V#+pyz)8{Jb3Zs`5^hZo!jj2<p`
zqy&qr@1?}j?x>-AGlvh0+W&Q4VOyk+T`Km!Wu4%gU=f)BeFw4+PTKK@&~_AgBEvhM
z*6#r4d=oVf#l~mT5DLLN-4caxii(X#7R^cn7PR-K<td2zi}0}LN*?xD9aZIg?a$ie
zhTt|>5{!BquMGcuDR(<VmrY6P__js5bTG$lv$S$EHR<+=_p^S%U>{{*`*sf>j<u1B
z$k=dvI)qo_@`=dy>m=TZA-Z|c5G6(dmXY_=qgT&%$ZH0Evkx3k0pANX<ULN(Uo_6T
z{Wfn8WWVxwVt=ivNSm(ma5z&=kV)gOxRLhT{9X{BZ$!{mtqweEn2B*_&>uJ1qykwe
z4auGD*{a(1C(%#eX;B><IF*QR`uqh=eJw&l6gjwld2f7_$A69V1~TH&mD)`0WADs<
zzq`P0e2$gWUU<;^zbpXV*@5bz=kF}}9|-o$@CX(;RiE9&&C+;KMDW<<t00+~Usz%?
zc9j18WrrBZgfLUG-%vMsj)cFOptgf%8Drn$nhkLVvE9|HM2meh#VAbakw%ll!?tPk
zZj!(}t6ygonkz-*$}5NBP`&vR>5S`Xy5*PndpEVf_5W!4>Zqvt?`sta328|g5RjHG
ziBUSGOOc_G1_1#DhVE`e9J)m5P=TRKq>)s*yJ47_`@1~f_g%9V{4=ob{ltmA&)G+4
zQN}D_Dcbxw3S46EE&!Yhp^JyAzzk<ek(S_FeUN>LkHem7$9N~iBu~E}v7@sCH^w2$
znpvKY=#}NcQ*zB?x2)DjOOpbni+4i(@TPOyUV)PxwORd)8Ht4&8(Kd{h=>;tn+6B|
zz{CB#>sXN3rV;~<mt_sR6NE!X&sFNgJGz_@;_a#*$0$iJEK^kezU0$ewOIt<m%*zF
zJ)6+ePDsK{{PZ2Ytj>>1Dt?D>cqQt01C_msN8ZNl`%jY=kL=Nz-VqGCNlX(!hawRg
z)ob$8(%72V%_h51yLZ*d$JS8#gnsR|WN{VQlDOwB`&&GpvW*RjmPdTrUJc#uoTp&>
zp?aOM`gIesb=3T_BG&5^b4>0W>GBCXDH5yXChXvTPNS#lm-F_l(gYw)>)si-f}CyN
zw5!}ybYeuYqau7`qaJ&e_G}Y+U=6QG)fXImlzBvu)(fRvSKbHZN;@>9St}G=?{d0*
zuGkXLp=%{6&lWA8)$!O<+-2wgICU%P-t-fW5q(2_g$5-=Uz8klKeg2_>FSgk?i;2-
zd^=k#&llCraApm=dW+jANt;>aIrvbV#AIg1dN>1FsBqu-&C7t42;@TpL&E`Oo0Q}0
z?LWi|F9P`JEZjew0nS@`47#hUU`ajHzbE!37kp%Qwq9N61%%|NOIH^Ls-nP5Ovv}D
zynDOkNu@+Y(HYt^vMm>?V-zRNTeVG41Uapti0$CCsnn`|45iCWPqRzFdRYnBsFF7G
z{1%l--_O1CS03S{44<E;<;yHYW9a6{M9rOTZPpt0pt*4R&&J$gg7PGO#CI34CX{Ui
zGnB<tN@f!Z*}U*FVO_JQ*2AW<iqFYi;X1oysubGzTs!smt~9xC<pxQhc5I-c$3;#L
z%-7k^Yf|jf@E!{A924Lb^NN3D4L2eaQC}!ENh4Q=2@)Ba#r~-1POjrl9GE8uI_WGX
zkVnve21cej%?_gHEqW7&_kxZ3c?`(=wdI?AgIfh&Q9#`mbIu63uC8!db}1ch$8Nr5
zZGC(SiL=Bjbs}NTa{GQf@I~yaSsdgA+q5yFyeQ%B7k8X8UV?{Rhx_=khRO0vpH!{c
z{sDv!aRrZE|20b<gS8Zf_ZfY7Ur@!r2WN)MJq6X^L6KhL2FFvV$9l!~qg@$#bCpEu
zuM4;6N(~LRKm{O^4tdX2M=G-7kF>I1DT1WU03D|Ed|$SdjC-*7lqr^1R##gaUeQdO
zcPIlZn0#DyfpRtr$rk~?IYoTP|1LdwuU{9pB`kwip84Bg+2oEA)_EI27aJQdD;fmd
z&InsQ<zH9udPYNU&i04-Yp@f=L2~;H*wHZr<mNjmUzdogm#3Z}-I#}fXiBfWg!;S4
z@1wTh$jw$c(`$y^%u-);?lpwF;~UcQ$9;5M0D00=5_Ni3U)=yQ4w%NrCtn|A`(Wjx
zeeGm%#f{=N(qLxM^2IN!LJHX|eQx*62M-SRMp}$FNB>E{^;#Ay@R5u4*SdH7xED?v
zI+u&ITq875<K$#<h>;tNJ>sJKM}p}{=M#KDnF3!^3s7M|5mK7VEyqP4%{Qad=?`8_
zA@jfqFL7HbL3^Wscrkyufx0%IF_XgS-Z=EMQU0{rv$5d^-UoDup`2WDZ;I%}9OM@e
zh>Jrwc>uqBPTh-p4kF53^7pq8pFXGC+8ry{y+DLvmh`(H3erZJyzlF-IclDB{poxH
zitgzLJ(mqMeqM*3>pynsic<1*?7(U~Ab)sD?Sp?dd_-(pZvf6b8z<Exe-qM#QoS87
zYNG2N#RIRnKN)m8@E0#<hl>GVO0Md4OZHhs5_)xNlbDywqr6~*`wxFP(WgVdI5FpQ
zA-zK0llP=n<8A2XJD&##ja!b(Zo@U$Z{O*ff~yMB^gj`BKc>v#18B`|rFi4)>ly0*
z9)s0b+kd6AwzRE$9dRzysa3N_iy0ZSQ5RgH$x`tBJe60l??_<!dyGTJg0Ajf<D0Tw
zM5$|4!TDYoVlN3XCVa>=-mK6)PNSB~j2lbm`5Z;)@{ME_zP6SjsHgP{>3<!657dOx
z+>X_A|8Tzjq{Jd+;7jG5;(I9d2mBq22n%wbvJF>V>=y|M&TDj3Ce!_^Mbg&<f9_iy
z)0n4=^C{|6Wal|#n%l>$&ha5frg1R9c{(x$BDOvNp)OYi9Cy<6HQXPHDe>g`*LoWP
zpMbn9knl+>dLEbbSo4X-blD!XTBzxKxE>I}nZi0cw@tcc)3Ux+J{$dpoe`TqgLmn~
z`0p+gt#4$xy0AOZEqOB%8?|0(e5$s>pvd1`*Sjpn7QLbpR3$5b>0WZLmwf(nXBMfC
z-@HOTiW20wYE)WyBt{)65xh{GjQB-Q(kW;C<<wXA@r5)c>Y3MO9!BqD3Q*N~UzCF+
z(Sb_+t<hG0#-iFiZhwSo*IN%+0rk=Bqy@Pc*-HuzsQ4B_XsyL?yx2b&Y5&z104u>>
z9ZVLJ;6M17y3kvC>s1=`mSa{zLFJZGPOD)(PCK3KBS|*B4^^C&#^kknTT_#hzOVqv
zl0RcVH#^AbqEuDu@LdN$xw?g%V;9kk`ehl<8Ji3nI?RWg!b%?gmA5j-w1j8dqm&=q
z$cdPB(p_6!wDjYrpmrCh+cQM9cd}yObr$|z4~I2pA<2mymJ8%pikx|O@6;@()!o%Q
zR5~^cSn7!oSiDn_!R*iI;?VP*v$halczWa6m6Z}Aa4ejK!(^Pfyp8oZk|YvKGDb^v
zE4|V<D&#3al>bEs`9UaU{KgUyMZuN3qQr4uL9(6?cR3l0%&k{X_?Bqb@lHiENT1N2
z-N9?LfIlPrXKeTw{w$!N=<z0h=W{MXt#tW+LHLZEAAaMi{90+)`tY_dYJ^6Q(8718
zY})jNnMM|E`)`s+hJK_|^%{PZKs*kq^fTM<E~NgQwRyN%MTHFG8M?x4(-|Y28jG>v
zyo5NR3|k;gJ}3IB!6~W=&Gly_MN1XBX3aY%dPd56p~HKWrsu}49*A8oQm?8oR*yI(
z-Q<Ya5lMy_jEndeyDu23Lo|GF@Q4>*E}P@|_Ov3R?CrN|Os5G51iD>ZW1q#U{%b%d
zUo)WKBagl}F|acFm%yiQJN=n~@I?GcH21QtKtYUv(n!}o02TXFfU*RySpxWCFmzLj
z)V=i-P^Vd%g?Ob_^N7^M9q>c`a97S8kj@da^pcJNsO0@+d>4l<)ID51*H-$XA<M{)
zo~7plfgFjJrME_tE!$$<vvq5lmKB~CJ`#{Ta%dyb^vfE!3jg?v*+m2LjO~e0$gKlZ
zSIaIt>o?hVow&?*321@^5^TpVHj{0B9SZil;|@!mPg{*0pB(2V`k>~gF<q2eYK_Mp
z;VK5yq%QjUcr2=%3<^EB?^@2{`KR=*r~E8}^gM(8>Ie?yb*exFg%An}*K|sLm$YDf
zZ?0UX((l&(DzLRs<zrQ^g2EEN8TRWaheJ}}8~ROXumy7t)wb0<`>7rLX?FHTlqWvK
zlNsN(W%lEbO;E918`IxA?l|zvH@9r#;oFh+ekI`FhJ>atC;Z`y`l4qP=J1*CHP+dc
z?kFTU970$~*f*I2&)J?rnm&VGL~<|1mxiMC-EW*n>?RbVjm-=%V;^gpu<%%wXiR1)
z#JZ{hBD`#ZDfvPKd{0zsX%y6i{yae`mW9-%hT4a>+LCoSz%M0kc?p|psuYSE0Ea7P
zxmc4Q&HS*|W|!Zy^*@a0=X(#AIxT)kjOvGI0VNw~{TDB)j#u0Wi&cLNd)A)D1qzxF
zzi%<Q;woJ}RgXM~{Ob<Xek<jyAyl{eia}ibIuSa4dmK1S70dibJu%>|8X+-fd_Y}u
z^VqAVH!K&_iu<MB^SLX!AI`S>gGwK-ZM437`ZIH@ExyX-wGL+6KpKrZD>vc0k&}^?
zk;8h7yTvm^i&?eCz8f{Y>K)%O3;6?7bJLn0=bBzNu(_Y>zSg7ky@mswBBs&%z8s(3
z{I(O@<#li5OF~G$2$H>N$E~F}mfPW)a$p)OJUcMjxY4}NC@5gahZM~x2B<}Uig)&n
z`DWbO+}g|-(L-Q90m2AAPbpN11O=~#!Bz(1sL{Lqz{5Ehqkku*dQ$T}czi2Y-9a%H
zY=8$lWDygRH>TSiJ9X1%rwH_&K}`W1Ot8`dFl$8i_f6x|KN(88ytg_ywPy_{%BC;y
za}z-&r<EKpmjov`*VI12<#zI&++|e+4fpH)O+EEO)!gGF|EMOi*3GP7osb7%d~#uY
zM3gTrRUIu@_QS%OBdWjqm69<Gu2@lBbcA+=DvVh!PQ`SqfAX<C$btK<eK<M2XI{g3
zKU=3s*giPM=WbpL(OcV|kadzmt<NH5^CK6@$-2$g2S_MCk1{klN|aAV#_vMLdjpIE
zbXb9v1R2A1;cwHwX=DSQii%tY-exe>&=o%AlgMM}PY|S<Of=*3f7U}aCE}m=VtJjk
zv3PBP+u!!l{aE6)jg5$t6OT@b(7V5QPvq_Gr!8aHi3l^}sGsx=6K$+*gb^Mmea=RZ
z(Q4@4N0Rub$v0(z^}(Wh37&lZ#Mnv0)C}eAZHIhN3}%C%g23_g;CH5IZI6QL75r>c
znwUwTlwLWGF)JrCleXjrk%5NbJa$KIRIo|Ok=H@p3gjqW;tU|_F6kqaCGH3e6%wgu
z9^;WlYUtv4DnXVAsM>BX-)%e=)~tSo`h&f5NgbS-#=b};?EDO-N-pIb&)k+5{`kvM
zKXI){Dq=GXUv-7mUEnc&StY3qi2P7nM;pJQT8#ij%1s01A6P4KdonQz+v=YSDnHC2
zBnT`;kACd~LFtk6vxN$@f~yZJ*Af9Z$PmGNdtvSX{#YYZ+hLENM~Y`@NttQjV6+zh
zMO0kB*3+n{{w0gf@FJP3u9T|-t*o)+E^=c3e+B;(7A@J<wA$KMLP%v&6L4&-@dUGk
z4$VqlJfviT@4~K9m~!+3jcq=a1%l+Aw41=dNli^n2dU<J5u{xL)4R4rfk#kJCVH{m
ziPQfld+z;8m~{NK()TJX_6Y7!aCDkRBFMYE{G}zrZ29>0O26^>o>UzN?9TBvk3^^y
z&uMQ0qRQl}07$pkg+c-jlY&2ICe3MMSGz(-$~s?Y`cu4Zx!$Mhqb`62VT2ICFnn=C
z(U5U<T<Yq_&bQ8_$yL4O{F0n^FTpuxIqfTrBvcfm>q}`hr9K+=Z-9?AzfsBoyn-PK
zq0UqYRkeLi#eeJq6r^h1quwC0QsPw*1dJ1o)dAH8{f1(Ch{#^0qbvi>{Tm%fD<`Gc
zj_H_>kze2ytQC^(7*f#pP;J0t<%=XoUicV|xBXO=PwmR`6yz{F+(7f6EzTljYA|_!
z4~_$6qU*5L$JKaa&g0$%4WmPcQC9y}{|2bw#3MvFBa|VZCxX4{?k8$|R8YP24W&~3
ziHVmI_Yly`kBad$iEq=Yk<*5zsK9g+|7FT*JJ_}}^AE-czHyoPcFIYFC8}r<e)!xS
ze^Yn|BuI?i`-?Jc-|ddvhHU9n4!8R2nfb1zr6ZO@r&J1Mf54FeTzp6F<wCw@<hCc$
zSF0)1Y6gdd{+$e4!NF+@Ds1MO<1|d}&mRnE)wN>j_*7M@PYnP$xoQft8lKXzg#a*u
zgEig8wufk`{dDZ;lJ@O=7JA6F^RyoQ({n31GE4GnJ#E=$sdu-55e@Qe0Wb`PM7NC;
zVjCl51>7=C20YgX>FVDeR}6mBLmjjLtwoeM$Jp!1UM3F_F~IKekaEoX@e<9AX9z7|
zhx!W^(IS4kskVG5Y*=#PljO6^j!d#(6~$b|7Bak~QIi80&!RSd+rK$8Ix32w7axsn
zsu~>5{yaT1RJ2#*N#l0NlOs?m7YZvIpz4zj&}%)A0#2kI4=$QHV2?vTg&yv%HXnSR
z`nU6X$HejA;9)ofj*cS1-$lakzk7G6a(JzLJUFWb(8E|4C-Y@irksd}(Lc*QMcV@h
z;e>RkB^GKH!(}K(C!tQ?dwO9W7OGR$VzcSIQ&QN+$)D{_z9PZ=QI@BhF)d5lAEDd5
zwPTCW#vq2YX#?V&PDraYx^7GO>2zLCNWQ%7VB0$37kwW5hkn}EG_pWgznXc~>au{?
z+P7wOw85|R6&!*QB)!<2gt;g={sfJbcKTD>M`0sKT0!n=;}c-rYhl-a;rgHWy9=4(
zy6Pi!v$sCIS^=n(mUP)#PXd^{^U7bN>XJVDe3=c{Uo=`Z9+SH1k-Dm%^tu>vY+^$N
z%mk7s!dCviLx11G7e5;YFjqL0?<aYFN(6$yM8(P6!Vi}O0JT<$2kHE9(Kn8B^y0fb
zsI(jcxmw!A!*?^HizrKa)1>j-)|Kv-77FG+*8letu-cz8i{1BtH_rKA{FS;qWc2}<
zxHX|ZFR#JD1G6)ulLo%T-fC~>xj4^5vR&wX<{qBln;i`pz0<)~^-o>xxxyV2!jPBU
z;R|T`Gk4KIcV}T+#@Y5t6|1qdAZ$R#8YddL+6npSw#gzqTdx!U4o!HhZaWlvLH5Xh
zq%LF@3V6e&;|2@jk6td`Ul^dyfLou{*!;TEiCac_bewDqLriO&w))I2<+XjW=#D+D
z06$@51H<b)=!9|!2^zUooQ+yvaPQ4DYFVaUK2g69SM6<V_4=C%pt>vZ0x;Ri5pxdC
zXCOL{#EfJKKYgqbDdmAL$bTA{)Gg6h!XK~&c@Hd-{u68XnzOJ`X7umm^F=%WseEs6
z0d{GKNO%D_vkB72Hm|9)h1f`LPfnBchO`QZ42982E0F6k*4$SVd!%_{C)vSyWyLdT
zpdRmiiXI(0{SE(xI2*pSLKhWPVe)iRC)vfF;FOfBiiv#3Ty6t)>8#U0Vnra&a_F=T
z5L2FNYyo)uL@nfn@yRxfdswS{p)zym!QoidFH^YU*1nhgY?^bF-0}JQrSBXHZjIy(
z_a+$Ho4&~J)av4TwRM|14ONGFbFwV<MXvJcanW#oBj;2qFC8wjjXti({ub&kI8<X;
zdypBpS$l^`^~+$E%!kPm*|W0#W}GD7=9A3{Jy^)^eA>j1%++tt%9A8PET(Pc4KMem
zvZ$>hlk2dh`Vi#91MbMD1zTUVcVtE_Ycio!i5Da0c%w$RQsUeCQqr&Tk$Wc#6#j9z
z5kvQ#da5k*E5%F##5^!RpGq}G0dsPQhh<FRZ5RGBsKZW%V#gK2t6X3lf%d$mNIZ!^
zZ?4~VGNv|k=^q~^<}(}Q&o7TzMh$0q%#`!PufFKb&Q`&1(@EUQX2$>I-@wEYSMKE}
z>Ftlnm~Lv9YWX1ncj|DXwZyeoL?mNH<gBTWAuWg7Ea}@WSky_p$-5VXe&1wYyEo{4
z9!PygN4c4v?H*a!Y9N2KVw*E9YK1y&a*QtIQY?KyGE?_5%d6u^#*bd_?ljAzCiTYf
zINANUXxZ#?BSz1m)0M&E(*DnSb%|E-QHs<~k4fU2cU~WuV!aUn+U5G75$1RIcIS*o
zCD-12dMYo_Ay>2b<@|_`<8^K}JbOKvS)}3|g?+qU$-<8M#MeWCGr=n<ik5E><4|2}
z>_ULf!E>@#7FDfUYx}$7ulE_Dcv8IYmCoy4Mz6Xt!FS1c?4PxjkqQXa^+oNL<zpU0
zBjC8;Eaeb&%O<ydiQnITL;aBFBcb7lafPY||8Jl(!>s2>LmGRz;vT`aTJW{y{h$tV
z&UbLs#}4u2URj=aG>!s3&BsCV?-KSBlavWk-(na#dDZ#olRQmqe?KBIY@1Zh_%z1!
zLBr%%Tx;A_!jU0>Db9XBEOWv5Ptj-u7)@~5XP}KONzWpA`8-}vU*Ds`6t$#o^cyp+
z%)zAmk<;GMwf6%-`-WA#Lq5dAO5L6Jy~-4@)g2Ro-5mz}&Jfrw#EY)i>+ea{HJqM8
z!XejGuOvo9vPGEQDM-KY7c{E(wWVVy76!G-8HQmYu}`#(^yJev^}mh<vMQf`Tz5sa
zOAFBk8O5}tX<qTd6T=Fh{(&BMT&D0Pn+Mk<RRtegpu-xbvC~*F?Qtyr5eq|-B_@t{
zZR5_L=T!i?pGu|!5F(TZygCO$9QkCIYokmWYCGpe?mT#ld4c$dRCDG3=l{T2zfGF`
zI}fP2@ry|_(dcW%&g+tLiAZKjg6;3fN*c}Y+X}$eUk9CvADX9nR&hm)y`0-E(}_An
zspr+h6*1+;V#j3{3J|Vyqt{JtOUz7vU%uP<+IUWyU@k2v9T)T3%_5G}g1C9@x2p-*
z?AAyE=C7i<h6<?b>*;&5Mm#%>0`PagUv9<fk!MC2rA_XH;Dr20;GMYVgwtE)+wl&4
z6zU<2>61@Vsz1A`r99Us%tuUXAMEX|@fqUMnbG2%HD~Q0zg-6Jd6a0qd@k5?1w&r4
zAB<39N*+K3PYGIw`bFgYx5n5z!5OJ4YpXy9jCa1x53Ng6VOWMmZ+N@<9DG=)-6d~@
zkg&(e9nvyDn^VBTx?x!O&m@#VJfVNf4?WJQhuuKyzgABVTCsav!`q&7>kEm118xGn
zL+l$Z`uvn0BUl1S^&s3uAwLr-?Wc%`dQWr}LxQ_YmS^bFEA4DAAiM=J>nM|IR-w)N
z(b{OFVbMDs+WD^h4n0+~ZgVAErco?yW-fcjUE{lD3u*zt?Bqdx<{-R3u_*Yy|EW%Z
z`R!L4v|E&5+2kod;OBqfyMbtICPDl&V2FKt_E9u1G&>VM`qj2;ViW9ui=HSj?l>yM
z&fvMPN*kd~et2#P^afl}XH>qdS*7!{pnZt1Nv?CJ*{ty$rY~**S$zQN61<|ueGWO2
z{)URC=260K!ZD)*zn)~b9D{uw?Y4AxP`cjI!og+pV4{j+1oJxkIFZhwKgq}gO3={B
z0?ikdO~(T~BfaC*KRF{Bu27Y)8;b*0;-H(|5DCM()NweY1kLB!1;g|v@d~0_P}szD
zB`HI-(#e@!56J??1?G~m2JXYS)z6P~uhQ<E80U26zDQW~&*J&kgdQ;Pfm$B1{}b{T
za`^kPo)vo8jyyAaH&etjN%P^}zbeEwI2>ca8!V!%H2&dq&s8^eKLuTB0&3)d$Yv!f
z;gw5!0r0$u-%Yw!F6SuMWmIrQVu=xL_h>+A7-CaKH^+8o6#qmI#vSwa&&<#<V)J9`
zmFpFcz83j*DCp_rTM}K^4w<Nx1&?C^RevX-i(n33{alSTDfb^6wHo^v+tz~<)}nlU
z7j!*lrhZpT{>LlYFQ7)a7cDH_UuiqTXnUfOtWr*}C@e3UODn3m+K~GRRjPlLa=IXu
zf02Z$+n48I<@J=K2isfU9=_WgY>+<+;F-5E@O2vvk-y;o0hfovr0+lQ!DS}>y!-ZK
zqkD8RCaOoo>f6uNv&topx(E$u;a;M=t*6F}Rl;m1fH@rDe}J_lV@OLL9>e{|zJXY!
z^@xdy9e;<!t{hop#Sg`Ei#G~kqz(<Xj#hfMvS%P!CrN3*F+Y&+&DWZE3B8x_2uFOD
zG|OFuK`iDAsQWf?n4%>E>d<v2EP`E{-ye_6JwRs*xXbO0&<W4kF$PNsAH|*aLOy(A
zm}QNjv64@UiD@!rKc`xLxya8H_wBdzZdJq9c=6W$PzeoG=5%$LBLdQG^!^HWC%^ke
zD01!*oRTBH($Z`X48MCh8o!)%Yw_VBBrBD}kMeRXv4ZWIbBMBQO=l@W*wI7r08=j(
zv+=4oqxmd<xn}NMEu`-xRG-ZD*u*<JqsgVZVx5x#zSls`BryHpYQYe5f$k0}6j%Jj
z`_CSu1%taWr;cCZCsEJR0pFwRFtwPF$0~GA01l;RZ0RmTfi-zO`!atOh9>rXMi*S#
zpotVA1I`bkXio6V8Z()4Vj%tQ{Oy~l`is<|E1Zb=O@?J9*xUCXKjo1z#>>I8BCX%h
z7DZ$Y{>mF|U@?!A{u9ka?|Y?NuJXdDfEc6fH7*YD!NbmXJ5b)cJn?&%5uk5NAm%=h
zzL+oa{@X$(rPGS#58olJ?7Cd2Dr<m~y}v9A43T?6c%_m>$E_{Qf2)XVrk!uQHW)*C
zm}|@#14+`Iz-Ankj0mfQVqAk`j(RVNxcc6)AwU7U;%O`e7b{iG?WHOpsnMJPTY=$!
zL*$|~&BEaCH%Hmm*{@!SC;#!zF9<1TOhNLzO&s&8y8CB+DD{IOD{ebF8ooXw5~fEF
zIs)sqvVkxaRWnX07GHP$v11P0NBn(-y4ph2`*o;`Sz*{5X2`qMWA`prG$e$73kdC}
zET@6_9o=0&X|!A$NcwQFVU*;Lq1;Y>wMBsxs6-yYG7|9TpaOXnKm#1Nkn&g9Mvz|*
zbOn;8IBSWf;c)`)lC{Sqk}#&Y?bcxtd&oUFh2AwZubzqk-3%N(ItF~!UNIepnLJH%
z6Y6|>I4sUpPU-O-`f#R+p7U?%eItZUo7|*b(I$s?NqCvv<nu5MVF#fM3J6zE79}RD
z^-9a63jG{n)`arzF|j-Ubi8fk4f9+IqXbUQ=TJ<3=A$F!X<x!GvVOQ;JL-fdNNmP5
z-whx3Kd*JXdhyIW5L{+Ev@n(qa0bjq&iUtO4(<1VF+@T3aNDo)NDQ#3WEtIL3G`wU
zFpz8LIs6?7pd9{fGUD9Yxi+Z#XMYfvpS<Lq`{?1<ZA}?$m{B@0lQltO*@uILyk6uM
zYOeyTH+sv<NR@OX>E0E&sgP(cpc~P9`6%Utw7f50z8r6-yx8|WQ>|1Y{NNi((<k#h
z2=?LoPP`O85*z1Qf&cgr2|l6YH7gDsDuh*!YZ^NXB)VxcMH8@hV>6u8{!m{d!aVyX
zY<-s`iQ+M?*9+%JZyi92M{?rt&VgG|jdNdxAoz9-{Mi2425jJg#wOTa*g-T(nyB|_
z&VN>c1pl_OTF|@wCJ61>8tWT;0SCp0zwbJmL<C3-aSk0)1mNz}HuUAno!X(I60%0y
zpSq8tX<Ru~(~*Vz{LGkFb(`%Zj)#i+K_P*+N1maVaJ$1{a5&J%vF`78_7gaK{Y&Xk
z5O;+X_b&?3ETD3aojodSPiy)YO(IslU)}1D!5VcvCPE`bu$|!=I_5r0umbhHRZS32
z3&es4itd3Epx!XC<C+;`ExyV+=0_&g&w2n=F=}JFhOy_&<Y7xzYt!)kVy&Qlu`5yR
z?D;dbD$$heDvL4!18U3pKHmxw0#&|pzR-V4XjGNvMJtq2l)Po~kMkb;Z})N1!2z(;
zCs6>r$@&E}by#xF`#F*YE4etNE;q@hql}DIxt7e?Y9E+rNuO>OBrIE%b^d|xK-cCk
zjcT%b;B(MxSa2v!9mY|@gMF<5_(hZ*0-kWFb^AF&qfgD^+7<i&9gV={_I|4=&Ov15
z{{53LKiRdpnA~r@y1H2FS$J{Br$#4zzUa5ia?&?ByvJ-a(i~B<4iPH<ZVlQDC_ge1
z^MA`W|L|nt*bein&m7IdLD)>yA?A~!T@Ywc7$dh*xtFlob3TPt#(5A*jr*BxwF*c}
zOua?uUyb1#jAScGq?v;dsx&m30fCexE<PCL%f1c^;1@Q-Z5&IJny*b%rfi{=T(did
z?bVC%o-pzb*`tf>^ISjFrF!w=2Ss0jeL{_=jt@7iG;$|$JuIeBWxA`WuR_Pg4%JS2
z+y$Oy6Cf7avryOfBD~|g_gs9}>XP|XhISx8q06fdumIFs%N6b}S^z1tmO!>Cvs|is
z=S~8iRx|bx)d|{1Xft-2X@~SB;vv~#e5-&@ohO05n{5~iaY-PJ>6PkvZO|b6cl1jq
z+Sk<$vm3~FM=PV;>wg<9w5K1R*`pQ}=Sy9%>W_Khf1pc>%r{mu+bPVCbPhsK9BK`d
zS5Iufq`jF2ssMKQIJU(6&c9}iYkR>I#0>6>QFSUDPW0ohL`Egc^>tBJLR+w*DqZD7
zLbqpp{{4ZZ);}b7@TKsxV+wxujK6wfbyb4qigyYkH5MIgKf%eJ#L@Q)`rr@>CCWS=
z@vw!7{PJ3gNsJY0H?9-#cPljKV_i+W(h@Vq)|eXuYHF5fLG0sCsiJvDEY`DNxF2r%
z-($Vb<q3oRA=(cUEYr9~oFiMnbx|iG$&>5AT@IN--aIE=PYQ}m_T3o80WcEN2NklP
zK(Tt1Pj0-N9a#Uyj#HmWhG<x+bJIv1b}Uz=dei%|G`g6(pt9@fr%$M8*|aajw&kt{
zDpc9qA7zcLu&=Nc@X%iZj6H}zZOhW8<QC0mB}Y@>&P`$QtJ|?g5}y~t=6|n_&jNR)
zy2xJYUoR}<UM`(Qtmdg2HDixazjm}N3a20<4_1SxU`ui%;cDEU$5A}b8rOQyn`YwQ
zKu$7+H-v0$N~&dD|4H8`G?J!M+TZFA>-Z$<e5MUO?qij@5AR>fAp#ti7D0kgpfIb{
zG`PdKoii;d{|6_7siAtuq$&K%>7-qq1*9;o#}3u>VjW&9&1G{{5N!;Ar(Bv2-bT7?
zM^_n#G|>{X0_4KGgcY3OU8FA`4kYa*?70em=CrwXymkaSu^AN#OD@wu@^7ae^=sHn
zNezHo@O&^(odr-EGVpoHB1{IkMs%bus;Og!B|U6Uj<wa?skhU7JvN*_w&G3ykdMQW
z3#=2lW%#I&=0mOsbRtlVRtE2Dv`LlEdL=5}V?l5~nx`_;XWqTni{*E2%>?{KNgCN(
z_3WtfSNVv!n$d=_4VCO!&{L7pRiRa5d~&6Yfxf$M+b=u4-r)$xAty+W3)(582xq7)
z)Xz!dKF-Zx6J2{2c%^$_TjXg9<(6nsY`Wk$xIrANc{A}YE2#0Cts;)`yPrjS4Le7^
z3k2>JcWzMcd><Ac05of6j`gH2_6d?1nW@=j4zzQ`y`PL%3)9(f>gR~4i1z2k-YHBf
zpL7Uy{G(4Nbq}pXTv(Sgy{Xh~gZl3ADI|c*pylfrX=`!~7%HSgw`-}?Dypz_@K~gU
zYI4>+dF$)(Dxd*r)3%DBTRWWwZoS%ti!vI~>h*=9FGD$t>M&Y2PG}E42b`k{c3=2l
zs()2N-S83T2;1S$EvjgBtk*BCdh)#}_8(*lmz=Zn@-OUjlT>_p+u&E?PNnbD1_=H#
zu<3U->vz>wm^DE)lveUX9_9CJCwNV`KH>3>l)!EzmqyfWe|b$iGlBb4$p1*g@xihD
zAP=pv!XSKr3{IR}GMJrOMtT1dq0S3mq|UU!5XnAciiO&Ek-sVw?m-aKOK<qFTB3{Q
z*=FvU{?_0oO0_N<6kQ>mwgwkljmrt{1pnn`e@#@M_#2G4esc{={)?Ojz(nD1HSnCS
zUrrZ~YD?F|VHX~x`5T+jYMRIE<}QL2s4dEqf&Szvza<w-GL<w%Lmn#zP>a8Iqpqa~
zYe)|;W*a+Z7pQNYW<s?)Rap`B!Uw^mrUF<JS3m#Z6fHic)(s=%Y}H~sE{-<_{f(rv
zvy-!^sj7@Ac))t#@JmN&ofoRKH*rpZP<da!hoIiRtQ5})mG%1e)~d$Ix#M~fVZ%EN
zWv2(j3Dms}^cTWdZMs<G3>7(>GvEZI{ItC0(Mim<0QlR2@{|0z1beVk=~Iy4i9&6z
zZz&jl0Y#ykOT&;)MrH;6=ApC#tUg>rgx2D|mWE@~_zZTI_gK5Xu|^&rch0nZxf_*$
zPQamzepA7_zqM87=l8E!6%@mJN$UN?U_h|Iz}s8vY|%c#QzKip#p+MR%1`KF5R@K1
zBx%QggE8QFW+p1dO$Yzo>QX4Kq*eX0GJ2{rRIOtC95Sr&=1pJpE!GU6xHoP<Bk<wJ
zRv$YoM^ZJ~CM|cH4Pz8bT!Rg|*Mo>Vf*e0@6UBCXyunXq0cJ*#U=05vtBhtx$jvdd
z;NQ~r#ju$9U|2|_oBJNI)ZKCj6%6{MZR%46*aLdO%&e~{Xs;JWl5_q6J!E;a&F}Qz
z^mwbZk@$BdD`e|*Nj_Rvi29fOOT_WW2uT6?E3sEM{ysX|0r4tMKU|!6S<8J?$Fqp=
zX|9Zv4xlKKu{y6G&-SImNZ0?*azedjCbu@<y5Q<(iLb;T88XVoOF!p-H~40cTE2UK
zG4_g7HW89afu-WGq9uA&AstQii|)patt6ycrMhUVmdX>8|9+X`p(mNlD~`p7_OWC8
z*yo_fw?7GB)zmpDiA_>&&gso3l8C`dUg!rMe<(zaN>neKvl@d7>64#>T|>^1$xi~w
z&yjbD<y4n(<d@*?I6@NoxeiZaKJv-_k%*-YiZ|6iq7Z85gvZisb=nT?`m8W4h&(p>
z?vLHW0q4CAjX}_Jr0=g9BOJedx4kK?#hgklV7{$^ZSPhPxfUccL#A|x>N))A=>F-~
zp>e?<lTU5OPfZ{}aL(UW(K_3-b1|GMn67En!PDOW*~5GJYs07v!H!GTZst$6^So7F
zRM?37bZ}>o4yneF4C5(ZLrz;Rd4jlc!3Y-vy9WA)C^#djRh8Aslh2CV43CMu&a9-5
zM$V_s8xxawsi}A@Dv!i>bT;GnNH5K=Q>to3ci;hU#jU(+(SkqE@^Z=pUkk@_;}suu
zGfUE^4!Hm7{Kj-7g&ZgEtS~}dqjqQl4m;8u|9ty~#O!*MpCxVD_*gf+-3Z3Txg_~B
zJ6q1$$;#RPN3D^6`Br|^nGK3Dd?2`w6D6qepywj!_9Yq?>Hbk=KX`BSu2++2Y138;
z$vP5zM`cguWHN)hN*zhWOq@bk0v>|g<?zc+&hHO=96*Sn8uL3K3PbAtNWK)q|ETEZ
zxSGLzFzmdCs1&EfphP`Ytz<D)-%JUcm7w?M$ZnqN1=Xi!0z0Jp5=&-vI#^Qc_YtA=
zo~j|Yz4lOJT=%*QlHJKO^b@HCE^$aDs^Sc;;BKAfHhZ(8y5lcNema+up+2q${}K|C
z9@LmHB(J1_SEzPG*AlZFJPq+1f@ng{ro)5gKI}evA{)=nr6T(F^*Dz-1+3eHaS)Ij
zVtbN~)Mnm+vC#BDSe$ap4x#33r`=#;0$K`y)z|SHS@SdNkYY2@&)^zi9fi^A55c&8
z`+F1QeL1Y{L}>VIohi4|R6@=Ac1WFKod>XX2f0OdPNzlHffXZ0*>8PMNNr}fi4@r+
zpe?KRe;a#qejcrG7-~r`g}zYO0UH&n_tITY%_-|`Dj(&)-MdWEbsDWUB-f`DNhF_~
zc49@9#eSv~r}bEf-D+K%pgRHctcXl-_VT?6uD9~h7GMds<rRCl^|wQf2e{b;{5^=S
z7;C0r@gCS5<bT&B5+?}v99mmM@cA&3@fwy)I;;5>=ibp>@@t5tlKUY_t0FftG;<oz
zpr!D;J!1QB8ep^Ag@ZXQK7Iq&HHYfI+xSkW<eGPkOI7?Ln04vxtfcRGYhPeL9L%**
zU2uPS<9|hM^g?>&bo?jzWmxsRflJ`09<}eIUuwp!2J`b#yFx`1Da&z|J<(`=@$sm1
zmdn9kSEaV7EIQ43oXTVic9;SCQEFN6Ft1ZpZIUZC#tzpptp=^*(w8zwQ}`7Qes9(a
zH2EUhhL4g3Cc&*4PbB`haOXufSz&CgPWO3)AI}M{J@~p1E}fI@_M7VyRMUXeCa+@6
z?Kp2_p$m@Je8ednbEn%0-rpz$OAK(IU1&0hm*UO-hzu<+!go1c>Y##qt+binI&CcW
z8}%7N4*Vsex&QC|4*Y)C-iNe-iL&cDn8#kpJE^r)y&satl(xUOJ9=PKq4!p<A}gta
z;wVWdqQ5GviWqAbSCVixSk?MH+1&6OwF|qHqRZpzD~<ZG-mC!?ByJ{yx(fj9I8};r
z9UjY?>4Hz6nd~1+W>nW)zPX|#`U>xX5ZqzzzEn4TmS{%yJea>P>dp#(7LM68HZ?Sq
zg3>7|Q(OPWGTwWX8s?X7%KSUm?;6r!at)aon#St#ld;h>AWfdMC7H)!ND1+MEP#SS
zwuwyh7!0XEaQSibB`j4~=mGLE#_GLtD7^y2ireK;Z*ZLJZ0Dtj0?EB<UCA2T;jEVJ
z{V;FRNS^M`<{Ep`M$P#<9~~?I?lmC(woaAEdhK<|T+G+<y_Z*P=}K^v3%dV)0JH8P
z5P@-tl8v#L3U20hop{7u^?)eZGQ0JP|I<w-b(gjW5&QGX30>4O-S;uJ25w>I1h+Qt
zu85O(Kn%)CHz1E~ci}gQ!*hcw;NXl@GZa&~>%CTs;U@^g@R#>IIENYUViI!ZfON9)
zi6u3$1NhN)z3d_-eREkQfklX9+w|Vbv$bxT<Om(GddhG0lgE&W;6}|156!&0GMKqD
zJ8U2YmChQ@U#``SzhLkHham3zuIeazskpe8F#k}({j-FoR>e3HOSUSa%1s0k{Zp%1
zyptSolb-4R2a0KvZAYH*=ROBVHYT-qUe@BGwFdKVu@j49lR0YKHJ7PA<#&_~g5m7{
zJ{fPaoRlfeXR)>^7S}{qiLfN=M-`5~IHA;SPg3WA-08a!HH2ZzN8qJ|ScYCent`!=
z497?DJw>q{m^{xbhA$S1+3m@8^B%n<Kik4Q4JDU#sXry+RW18;db@7IFCeWS)_4+R
z-W`2yoF9Yr+C4S){fjzdwU1A$2J?Fm1fMJf=R(`tD%gy1HIdodmiQT1F{X*!?;)qt
zgh`HO&=+~`tNUIBYEajb`ChJ(bLY%Ox}<_T=6a?6!yNPLP^SZWJNhWXm^)Jw-Dh0h
z?DwoV+Jsif2Cdo50u>r|f(LUghk#j$mU$QkdX4P&o5tQ@u)?s%gTXU2m@*0?Vb7N}
z==dqI%<=(V@id@9{0RIrTDy@M@Q#Z22T#H2WE*C%Y=ucrRog?MTwr{^WyMI3KT;VF
zL$kBzh?a`%-o2}G^qB@Pw|()@9PBjmvTO$@Rn?<XjSw}fz2Xb=y_V$zve&zR1CCWW
zE(GG*D&8;zcK8fgG9vAiAzx4SLhmh|CAUvhzHy&N3uc0-+KhRw2AibL1JX+qY+r=)
zBzy;P#F6*qh$dQoQWfuOD1VeZr-n_1F}FB2(fvpmn@rjR>%VQx(w_V6FyfXV*A=3#
z9-#Rohz<9%j^$f&On<n-pZUlN$1v^E>YB1m?%y;vk){FK01Y13Cbq<d6Eq+}&1!QS
zAJW(NU|?Jv@>SNdfdAXW_}S9VTW&^>JvJ*wdxa$3@7sz6ZrpDm1aVv0Kby;3LI1`I
zY26(&XldC=vNoxIdr2PAC>)<yhc8pMvkAi#zd@<radZ*Jbom78oeo%(X?+?q=>ok&
ziId7xHdocnfn$D{cCzKwoD!xHOOCt6NCz){{hwP{(8jrjEaO-NwPRsbEGC545DLO;
zSln3#X1I{b3~=5-F%UQc<Jd+J68ME8B1k{)68i^FK65?G3vZ7sju#M}PnD1KqHmK2
zLVVx9XLeAg>?&XyVr6xTYS77>{n^^s>UX8)e5!+bteHu*__|KVQ9Bmz>0`YTiZQ<j
zr~Q9ui+j=^k7g1N1Sf8#kh<r+0bMbfEfXJH)wQr23>1gOR*?T??nZ~I>XrcOpnU@e
z=zICq!og?)(Scvpe)DW*aO&L6Goy2cW^Ax_bJY~$rKIy)K=t_Fwmje8=8RZ=O|A1@
z5vr#S^GK^=!uXyD(SPR+jTfHp-u3Y62H?t!x`dS)ZtGqAZ6rz9ZBXQ&9Ka!!75IeW
zY_>RixawmaP)Md~L4}zxJ{xcsQ8fEOSshu}Uz$H4l%oVZ7u-<h&gjYfxDG2ei3jft
zEb=vZHCi>T0&X616rs_^-)@^syuweHbY*$XTFrSsm3nR=88A4P9B_{$v+l)eC4T~W
z8rYG1u;n$5ne``4%R5f@x_)0J4HTUNaY*n0AsdigiWXKg8=Sp+aHmyx*l&^#6z)vo
z4g4hPwK-Nko<{d?rJ39oSC8<f+M=b!?gtlce|kIM_yaiAs?0nsfMDNLUNm2{tenqy
zLtNGk98qNW3<f)3E#J=N1PnNH*?YLRjoWx_5D+jmd~L!BR?KjgDJiOAf4NRDDni`}
zi?+<VN=sPp^R6erIk?tC8Pj<dPP=a(KN5~?wm%#I(NZ=+)fZe)^JE{YFy4AJI}4#s
zGMQ>`rZa|TC-r~mt|_xIGuvjaF@ZgZVh~o#H&<g=_~l+W!S~=JOZhKC-wN0QJVB+;
zSRZC~BQTY0{HsJq^2+OqDiwOk_;ZLsx=MhJK~?wB{uyEld5=|&ne*YRYG~J|3cZ3O
zj&|*x7k;ixz41o)Zx_iYFB2Cf<C3!B^HV*NSmUQQ15EWX{H;EB;ApbmrlXY!tUL`&
z=x8~HUyi*moZf&3c0D`w=dZ`GOy@@*vU?QsdTgqpLjE>vatz~k29v$oW10Fn_(ggw
z6jzmA-=%3?QL9Z?TE5l)!GayiE3Tc`D3%6jb{#PDuB~Yn8?MFXzSNFYzN9{G-i6Nq
z8V#ack(dKx?HLd+=-lC-Rj))gV`mMfU<_B`WEVX>Frmn=(nnu@-g?OUb}Y{C&~PdL
zh*WOIT~WWP@N4b1Rf3G{#N1p2M*wTeS&vmp0vFQ+qhN7_JI8|80&4w-mg!kky-t_u
z*@K^9)iDu+6#hwy;snpXXUU$BH}!Givrm2?wpbAwQ&$%s$M+b7t3|FQaQ_!b9U@+m
zLsu$2JI_m;fP2}Xg=&xRs{?Mo0MR4~s+dML#tyw3#4cq@Q?we;T&n^!P1=Tc7Ayf4
zKdqVZ!{+78!Z5Vu4T;~Ue8eNzd#*g+R}pna>@z-wfxM2HW?gwRaIMwd_L6R?ww{*Y
z^l@fE-j?gxfYB2`sNX$B=WOTOwe7-1>j(LT3QAkA98fF&HU2|4?du85x&4CGfSGgs
z%lfgYDI@shlCl`@`$cSCCF~;Z>|)^qfLAx!T<~j?Qg~Qovi@z9Pf~}DB%=YPzqPA=
z1Va%mE#ak}zhU(Kx8B?d%cWMRMV#+Ni4t~LSGHHGpVf}FMhE0@{{*?GLqW42L6EGi
zux)|XT+B`R9MR7lBkXD}j-ADZo~1=<b34JsYrZxhQ}4O4EQ$;cDoNLXm~ST*Kh9C8
z>KxiebPcO1k0Loo%89R9ADROmQr8Qf>+}xOY;c{4WvdUfd;LQp`xBktjJ?ixXXZOf
zhqA>Jeg>XCzN6;8y>n2BzD5FWfzb6aXv_KR7ml0&RF(|vvSVW^0DA&6j_^C}S8^Yb
z{PJ*4Wj(rP^D~u1GAM=GbqS~Pr?BoNZ{q7Oe9HSsqaT-W&}vcyUkNn)8H`kKQ}6cv
zhmX+0!-ymfk$b~R=L_dX_alf2+B>kyHJ`^a4taOsVVztHl5E{rJC?`)1GMn)OUVgU
zMgIp~C(s<CtcG@Hj`6>@cmLH7tyr;_;yrDd>^*m=?@2Ou<8t%k>PJ#;xhnD|i}Ofu
zha;p-MJrdV7%M_cyiU5N(@!+_AtDlgxijBR2mTByAJ0Vqv_bzS^tfjTF%ulz__|fD
z{{>Vg!WHly#GQ4bSTS(b$ylA?TY}7?DO~TS0W$fn2Vkp1NY&_J$1f~|Q2z~x>~q*C
zBwGOsI}o+t#CB}SjW6g@yz3Aej5&Bc2=u(#IaZ>{)q3Yfd6~fv|24FyFN5a43%0*~
z=bD*z>wJ@`!jRe@D;_OLw`=H7LOQyX8c$Rzw9d9NOzYqXB+jUw5upa7mja(<sy0k>
zV^+=bAZLAl$LBu^zRP2^Dt5(|*nO|n2U9QFr^di7vfxj#%sr45{)%u7CiakYg(v}D
zm93(>zD6(uF4De<WYfMzV1@%#ALcQfBU#AL!Qq)Kg!Truz^mvyoM}ry@4lhZ$YH}S
zoSm;4P+d%n*R~*Fm5Kvoyq{bQH!K706MXkCX_d`d@9qc7ewye@F&(v0WKt&8FW%<T
z#5#z7yi$pcEfp&-<=%GR(eyHizbl+C?pcgA)-4b5u^g){K@cnL|G6oMgQ+%xD-F4!
zRCsIlDlw$r&7O|D5E}8W0oWmvSPopd;OaOm665-|B9QuqxX49OO-DygAv^wzBsXjG
zpKxvsyVe8d=-U^uP?L&xX6Q*92TY!G$K^dEP}St!!ytmyt6zhJ^$O8hNtM5U=9`x3
zH@kom?I79IXo1~3!3PDyi|4NC*UBRDzXThe#<Dt8QNR@em95IWGEwC*{ePRtdCl#x
zk~fi7+j-;`N=f~H$|z1W5X2TYB-X@_L_F}mmfV9dT+-ip)MYMmPoqHEhKjvh$GZ5j
z#)%!8U7j`;*#lc~4W|SXLB!+hkt+V%8FGVdnl>T>M0zQ#ATBx)CvxHh?;>~ayL3eV
zj=q7P#g?paV8Z5XI;wrMocy_B%05HxqDqf8_Qo!6wD4j#_9FiN{hL^9{#=&EbUwVV
zp@EK(kr=x#?zMdg%ClXGOlxR!q&$~ZHsIJ_Qddr0N^hxyw~hwtnn;SHI{or-U8#BZ
zU)r@~a>Y4@l!CakDiyn0I@BTRObdiZX+dnr32s9t_7ptuVyWLPff$eg2l0}ZvhOiV
zXBkrnZCraC;;^X&3%(X$5tGrpRsZ?|@qj<T0rr$F<+0{_GjS9>0?GLko<``htfv$w
z<*I+_BW4smT;j@g**7dfc2!Z*@{CaNE=pT6o{{g_G$N2~V8q0U`4OoMzKp(3t?ATh
zclBZ|81jd(J$pnrX&Fjki6LsR?xBUN$ytJEj;aKU;~n-T_zjkjijTf=Y^jjvMt7jy
zYev%mhg26;CA=AXf|}YPU9>c_z59d=Ok`NVf8c{Lph$K$f%gyW2FjDPLi&rf%Iv8%
zskP?ZUrMm2ZHSU^u&7Hp=5fE*rt`=B(_T4mmttNOq0d1eJ|*gZ*!ds-c8lSjL>%;X
zUYDkO_a%?i^Kpy+a2b&N@Kb9qWK_FG2z_qHd#fOL!{(TQja|&7W^h%A9B9c%LYYI~
zW46vpz_`%fIRaC8D<>T?x03KzLCWE&UB=_7zQx?cEMlCC)4MUH41<fRf)hkdeO{~?
za-GJH+pww2L*}EdI!>teoM4vK^ecqTz_GG@F2y#KR5E=ve3|0C%GZKo6QJ+jidJ$a
z8#VfbO_9~Q$UNalykE`4EEZ|<A{MDlzfzg2aNd2cEWoWz9r?)in&+L0>`j`RAM;Xz
zHVn*(ssI}>()PYh5FAC*k79lNx5kR^>v67Y0qv(jktK;cetu5$rItf0S<oMVuf>FZ
zI?4`zAVDO)nYwDe=d@e-Sm=oRG85up8wBoQEtb4gPJEfSC1^}!N0Zyime7IHo-qz2
zF>3~=u__6<Jip&tU#C>x(5ev_QV>Li?!s-d+iG_o$J*BZtpm9JC30~^+9majVjD3B
zHABrh|E#+HzZQTB`k;dNtE^Q)0&rKi@bxVtdV+a$^Gd87=17cGhaoVGDdJyofDft8
zw%%;cPkgSzvbFCy(V9@<KD3rl=33_s(OY8<l7-=tN%v|n{bK36RTw@HPb1xqaucR{
z{2as!Z^Di|Vl()NEwc{>_wh4kif8XJY1WTUzyPWeS;OmtIg_qH68w;QG@%se+`X;(
zApm#t=+2H9^gi!v=Nz{-K$nNzS~^Qr{HJNoUxART@8mZWN2csmx=%^%6=}FYDy~|M
zemeaxh-W_vUy!Ak79@adni7o(gq`3uzt<#t8OY~g1DeSX!JjG*l56BtGX`{7O=>Wz
zPi?@%r)NkL73SG<&e0il!^fqE)v)K?uqT*$%wHP}sp;&W@N@L;x4sUt-=BrEqw&~N
zr(mGg!Z#`*d-i6@y(wxndM}<y)&%LAl_IdR=K8PqLW{*{K7M$Id_^yVzi!cph1jHg
z>5`I|D^OOIn{eQl3mH|rE3OW4j@BmYUdMl2kf(4hQopAHwBe9CN$ococ^PomqlAa0
zg^yRVUH3Wm3`aRAqg5Ntu}%AX5s(0%jgBxPd{784h~#TA!Z<q)r@zq?Tg*Qy2C)0O
zzbV3+V8QCm+dGJ}%EiDV4oQE$LvTqzTUxoNb-R@c&v=Dq2bJM>i1x?8DvqIcLyT{3
ziG3XlAMV}wJ@*EPq8~$z$mT=49(UN&R7NL0p$d<=i$65V%G{%fyHZUV*&>qu`NRHq
zE7<jqsdH2R$w|k$B}(;#OYIL6b~I&tL)%~HUvKLazL7A_iEu7R_@mf1eX>CH>IDFz
zG&|VEFd9u}BPKZdXeryZ)%O<8ij!pCYZvT+#Kpsvq4#?xGDfhRZ&DmT;=nO0r5TNg
zw*&Tn@foXNy#d#IQ(`XYrtM`88dB)_rB$bR0MOHVb>fPDU}ijpkZbySlA&RpWZqc_
zk5)DHIYc+&!uwho2jP9cW2oR<IIY-LY&ty8;ui)2Iv=oD1#}qn@b>>B>aC-q>fdm0
z1r?AI5NSqQK&2$4Mo9q?q!FY;x;sX?yITY$rMrgi5F`cZ?iym4nSD0T@0|Btti@jg
zY-YZ3$8~+~yYo56-EMOT=wZ(UCMI8uPH*@srcq%Z5idLl)kN6itrql%bJmE~SoQsS
z_4uII*x+n)#I#KQ)kUb&*Y~|Y#R7#cRud^$_%+@(e@RULDVjA&avg`1t&xJNlSCDg
z*;%ONd@SUBW%xG0_q;Qk(v=b&H~0=@7OkaE7rXNcH;@{ylDsuuGTnrb6>sd7QQ4*e
zY+3F`TOfCk8`GZxnJe18Mlw|blSKz`xBbeb`ZmNbW7}3lG6tWk<%_AEU3r;@b1T*L
zyj&TKdW|Rn`iBB%7-sn%+lz8+wjpALn02tk2EBzCnVCJcyDk{Tp`f(t4@N+|Ni0Lz
znv(&llux1kh2=0K+z(VVFMwp&9&8)ix$}z6<f)3l@A%3ZxwFo{uy^+609TpmT6i5U
zP-)kzpq$0$MbsU}ts2;gdHnhXC`{#$`DPsX{D~qhGwk^?R{;sR@VaP{K@N^r^OU?!
ztzxj+3l$x;NUx+>(vQyFrQg11_V@8@I6x}D^|`+u8I&r>q~Ley#_*1!ill3ddy>cP
zx&(3_gziK|M%qWd__1_)?G#)^Zqrga-wn96-uzpO7Tw**s{A}0k<b%K5kn`F%D>lr
z2)#Lj<^(1dE)Rzjh#Vm7UIRT*%L8?%FwJS`8LV$L=h_aV`oJ|2U5mQiC%0WJZ;8Ur
zmu;8|AVX7nz6DbSC^^saUqbeQeOe5$p0KRR-+LI|+y0DXM;V?BIrg6`qgYx(oWYR{
z(ft<H;eBK!+|7E+O8>Gc`?g`~v^m`Mcdr3<fWjYz08KNkw!?oSa_Es$t(Vpf#u!vb
zGtBpL`S-E1^Up)~FZ*uEJ5H1wOo(5<XO{CTc0UkKNI6oJ`oHAywvpi(-LZxuyBhLh
z>QAPGVrnd=<dMHp0g%QwfAV*xt#0c$r6u3EH<wSO;k8=_&dbzeq+pBTuxdmOEoP(q
zaL#^)&W!*?dt^mRO-(%lo7@unM`>l+k%j+Yb1VmH51=pY?!YbWe1>$q^v=>%oAPQ@
zJm|K)uOS#iw9n-d6u09`JUr_JS?>=R&`5X_$yfED)p-*dk@|(oLmNxyE-bE;m{edB
zYS4a4@u2&PE#tQ^&<A=oc)(aF_x@L`<BltA8A_N=Ev62PqUWggiTTCt?j#{{+#8rA
zMC$WM4Q=ualouooo-k6{8YC94e^DAs{o4{VmgS7JC_qR}={D=_>>L)23a!VwVxpld
zSBJ#9_P!gLPD_>6;G9)rRu;9Tfrk~ZcVu~AD5buceU5(C)jvsEo5v4d@MB1pI1l-x
z$glktq4gEH8{~1tc9w{IBVN2ACz~hwxo(abO<i}jnk}wYxUo_bjk(AKQV)5O8qYRA
z2!s7ouWoAYw*+^`53>(<8U7Twyze^-Tr+pk6hHPmG0*WDod|N{qWzl+&^*B5T$pWs
zc!X#^sGEN<M|drV0nQ7c2hFSDoUASA{pvnx+g8W!qn6SD8lMe?%GVgXvFi+9i3fTm
zBmMAe;?eaA?BhPv*l^z*Dy6xS2NTbCw_yy9t_GLrLn1Ap6ju2yHipo;|JVQ(=fR7S
zc*;y;B)csAgmhi<{on_|8g{%`v=VPYsrvH2(F)AS!<RG$C_xN7^aR>LUQ;8diho&{
zL}Go;ua+>a>CUjf!5y26|AS#bh|jf$JVj}lbqUw@^O^udiJGi(iioZdA(2g?TaBCY
z2#MtzX6c%^t`C8WU)eWy+dchV1Q@)3JW5ji{w>D2qfu8i>){ng((RoW&UMG_L(k3P
zleN)KuOsx-?};BnG860B<mgH<G5&?xY2W_yor4yq0|)PCtK+itbf4O+=j`i*sj=Da
zBTeM8C;E?Zg-H1h4-d=eTqZx#{UH)>IDo^@87p2#aPuw@LXUS(Iy5~a8)ok1<${c)
zqQjweHqh~L&&N!vDiK1D+XEU5qi+gu!+dwk`-jdyuDw13PC>nk^X^Uo;`c)Q6pcR6
zk=r3JD{F2n?;<ait{#TTL7n83Qc}{s5p$?$SoFXwA*bt+qrNxueGa6FSpnSU(hlzo
zBW55jbwj8;)u{IKfpt>J_LFt@d$0+T8P{`!x%#xmnF{0@Sz>d@Diu{!2npJRUKwCQ
zz)5Ui^fn%UFMB-?ylU{ZV}(S`0k%Mn-!k7d1}o5c()FNJC7yp%u1)83R~`dZ<o_YP
zt2&XZmY|Y|^>8XA{v%X=AMhi-0OC`RnZqVttFVvl#pJ6`!;}94fi`(4rSOet+}Z5}
z3(^K7`>#v1FYJVPxPpCWhtufneE($hJ~Anu?M;K-(4k>Bf;oC2&Go(6E}P)>x>C}t
ze?6Eo4RIRgp|kUvpYO|bo(L23L8C2cKij9jGfFAgPLiN(6lUrntO%`sGyW}ybe|zb
zcIn*;euWsQn!o8&N~^*V3|3Kh4J2%0%cg8Q9URhJ<N=5l-qyJw&9fcM#&Eb=>`}h6
z&r4Sn$gtG6BPSo^-OSlQX;8bG@FvW(j@<!QT=Cu+&0zbTleg(&mzfi;2z5<GWL8RR
zX-Rdpr18qv>+rF1@0}s5@}|vV7p9#*eLb1-XE{QK5(makTOTs{_W}>2KZsh;Rc{b*
zct5|mnBTe_OXKsJIwc<h0a_{7{?6PgBhJgqiRjWRkcl&VA=tVTC6<P<sb3O5u7};E
z)ox`wjiy$QiaHIml{Z?Bq`=QNT>5Cwnm>c@%2CW~&@bA2b8}O9^g7)ac+-!KlOCMU
z!&G*Lxj7nR%SrfZ?}P|5jHdRRQ*=?)Tet1IE{OY2$&deo3{nci>+C07Q}T<Edl^d~
z1$3$$b7%#p(-_MSV2adY$I7CBJa=-@N^~{mBPsY|1yYUMz;$FgKqJu72#iZJ-e9p^
zSH(Wea$t^^$z1*ZEH}xY>{|L?|B!n4sTzgF4b(85OxB)s$khSeB|u&0UZXSlTr3^7
zN4&7z<q~@Lz6Y+Eq(FpKVn{GyiR+W<ulka$$DKg6C1SVMMbuJ`L6fqV&K&=+#i`5x
zzT2;|T6N8}(Ykz!6V1#?_PQp=OH(AZ;%Gm)<BX_6T8)?ji-gJP`oEI1&C#q^d-p_n
zi!1pRNQw@@*>*NC;8K5KjV}j1oDRR)-<np%7L<mqc8Ar%+i{+L=%I@+B3x=L7<U?b
zs2RhAHMJHa(iY*94bH5<_SE@=5mI{L-sNfB7ggeO5&^i??}Q9*_YYAsytDqPv53yT
zjI=x2FC76xZkP8FK7yNIzR$IX0#8?di}KdXj+wYx^W-Kx>Vt!WB(h`ob0}~If8TiZ
zJwjs<an@WB#-7~6^6=RV{SQxRD<0xk0)haq4-reT1_%61gsX?P+h1Pa4u)p*CUisW
zP9dB|eMOM#?w}>kJKu3D%Z+F;?DDX-cB;6mD?i!%r$UoD5<KE{4kn0wLLtj<VwlUt
zal&oCi|Dx$u$95c0OS6#8`SIU$K4YD)x)NtSaByfLRkknClqE9WzvpMc#Z2uFyp<y
zzfDZ?4vwa3KCFW-M;w&@zb`O_(+6d80sz?uY9GPipXii+OEiy|Ce6I&Q>Cp$Uo+#>
zaQ;DJq2)VbhYC#1psPI&oPlQa;Z%CZi{HO$*Twqu$Kr3CW>&oG%F^_k5pzVle8!J4
z#s|O6`8~#SQ0r{0W1Yd8KbN3FLZ{U_FoEMNnzm}+4*&ZB?vqLUoV9gzgWv!F81D*s
zISN9zYeIGoMW#Ta6vZ9xG9LrEI245F<t5+Wmv+E~9Xf(utHzKL@+2<dV+jjan@6|2
z-}<^-g5{rrvF+uxf(UwdgRT)M#$gFmB?~hfkZSHG0oTwaUbD`?lO3Y&UX)=w2MnQk
z#(L0txp;tj#hcb_IaN%u*dYi56+H?mFQx>jZ&v9dVTiC8CEGqanDp<b-At}Qz*rQ3
zLvL^39PNuENT4xYsvSiY543EzP$N6--_mEaa`YNz?8H#<{k)hP^LDNGsq`zJB0{zz
zrh$F103C8l=fnI{xee3w&NR$0YRd!jR(+=Lyk{{OlLnC1NeCo-ja7I)Yj$n^86&Vu
z=%IKO%5mE%5D3N3-QR>WGl5S;N=#b{>rC1*0}|B8h0VZtN4^8g{26_a^*fD7s1fls
zR_`(#L7e$jO%&LJdP=VI5ldH~{Kzk$9rtbvUmI5?(zLm@i70a1sfl-9wO7u8+m6K1
zu6Vw*ehFP8PvvQUX(m7SV6|&fJJzz84`a)oz5bJf>AN!(#;@YjbLy8>$hZG+h1QC1
zM?YNtk$OhA|8KMH0u>E2{UpsCNBON1Jp{B#NbToQGtfo|LH-WWxE()1TY&W1DAAkp
zIN;Y*$`*1U&F=iA`4aAZ(Jk0=qBtaT`ocU6<IqPp<MFWVDm|pyacXyE2+C_d6$3jZ
zTV$vB)7}G4c};OeUF)NI^1-2A-CD-V)JoY<h}GtPumFKN2E_#!O@YArc^_H=+p7}T
zIv4@9p@~Q7hX~uV4|%4lM?GyW1=~&#2#*%gHLG4@B5`->!}Su)h9K7^u}i{ix5XRH
zQr%j|d)iarC^B{E<=mK}_@-OT&Z_(6oZC`eJ$h^jat452N96A|_U?8bzpZwlAV-^b
zc)+o^;c$xVgHYv7GSKca^E@uC40_*ut>VRbb8}O%K5CW1&1)`>Ywt0MGe{t?ZP>3G
z(vXJbM`usq;hkjo6bvWIIOeqr)2=wB!QRfE_c(xB_7t@aq-H0u^aLO^A!+gd1t!R$
zHoefw;Va^mO4P@obZnP<q((OYEecMcZ~=d+!(em)4Il^GeL&*9dHtP$1LE1=kM$BS
zQvSx))eoN88NJ6Ro4xo>oZo{rc9nrIxSyCZ#<3Mlw)fBJ$fs*XpvZND33P5xP!;4%
zk3^*l+pZS(=-bTxWVf#xZh!0iNR?W9Hz!{;b81pNN^&DjT=<Q!D`K{TB}JDvj>c@?
z{rWViYb(bMb1Dl#9~tq*XN~mTtczn#;Gcd(S5&^X`FkF%N$d4oAn|dcA`*f;4q@dE
zQ7v5a_;=ZQ)XE8VrTC`pcVsm?0tkVnBLGu%#?@eOzoei@I%?81`yb)b^(b-=jy_nV
zWT2OlzOgE6Gdn;c_Nb&YJnusYS7bSbh%l7Ju&Xk+7)9(gGefjL{-{o+qp9_2ZbO?b
zx(Rt7(qO=X>^N%}ziD1Xgcy%M!9)CrK4ti0&Ts>(LxJ;0yaX%K^w@B1b)!cH|BMM?
zFH!Dv)(7Re(Neu*9Ak21RPA{#<@gxQ3G9!t(ibU;*Oh_gg#DA;%eF0Io{c2ynQqu*
z?Bl|&Z3SnQbmnY+^dxKj9}k^%u92Q|kGSrjr9)%}FoIOl_=GVDDU6r~e!rZ9ybC@d
zRxw0TEI$E7i{X$u-~zS|m!qDzE5U&HX8$xoIM2BoKZm9M&wo;fAskIhu*-HTx(~yB
z`;5eoC7k&UL$?X-M{(l*_gE&VyCQn`t`vBly@WZSX<q+|G7ONzde@u4TMEeu_GjcQ
z<2%zHG}NS6^toIf^9?3eu6R&aTp>5*I#N*fPtmP2w--cDFZm#M3fvUiKkJu56!TuJ
z64cN$2D=yOYKtz{dm#7UsB`}oD|lZ-=l<L8poyJC%m-1TuMPKp-BuRynweS}5L~eD
zYX8$h6IYEL#uP2&A9M6%!?^E4jd-K^d{*QWaJ88M4)HqjT^OM73y_F}-divYX}$|P
z%UB{P;X90y!F!cS6!=@2AC9UmKmE|EGB4jsk>MTjM2x%JlK`y$6wrsrBvLV}=ZO1w
z>LhA#K+ywAH_2T39VTxfwYv-J%{w8$V#XHK1@0r#)GYkb{2WDN0~5h4fpjmz`UTIu
zuLOE7`Ml(AkMz6{{0T}PBUVjvKp@$N?M|1YG;ZIPL(}!Aq$A!Rj3J7^h@J0QsvvwP
zszHpmSQOK(DtYAHCzAZa7fE&e3`^M1a2K0BUH1V|VHhy%joGq8Zo>1UR;9<m3<`Mm
z@V`!plE6QUAmbZ+*`TX;FqWKzBi_G2n5Vxg{qej2K;Z%wRly3`$;=haw&e{|p21CX
z-T_yss75GhU(^A-Ou2-(CE@+6p48Ik@nj}@G%ayqiLT{Z#4)O6ZC)##9S`gAu65Zz
zlOa@!P>Y;;<1PmUWpjl3rvLW-T9u~-Dwft2#&J|=O2?JRjH|e)JgyVz=`RZXF83DV
zV5U(?HLdp(=pgpB?>ul@s2l?WvVAdFhkxtI$I#Y8tqOyj=EEkZ^80QtXT8eBE-mpF
zH914*Jt@Tvhy0{~KSbHn8XYq(Oa*$4D_%<nOA9E~ygTF{Sbc?!wv;3{31nn~_q+os
z$5X33W3IV$>M}C|cOT}gnW~)`_tG~XEl!7tY-lB9jR13F4J$&H7;E2o*rGuDB2}NJ
zFXzqse@aIaOm7hb`-;Cc*=dSQi%VYZ*`)*3CoW6Crz?FFx6JvcCQP||Pvz$sJ+FiH
zoPWMIiw%bf1^eo{m%k=pLm5lF!A{Gy9h;^bFkl=<L%iAqPw%i{W3PP0@%zaik`P83
zl1-bWwx3;1I%&`$r<|gt_ZjAYa43dhLlA^qc*+Mk^VE^!mKFG<`lk@RTTR_s3@9go
zf9=^Xp@f-6n|R+U=q#SyC!2Uo*IBMKKJp8;4|t&yDiY&6T}<5@Rs#M4Rlw9S{3)$F
zZyays2?qPe&kcs`n)}**kUHT8?ZkML4wVdbfHeJ|;(G6%@HnTj*XAG(Z$!_d&wm~V
z=fUxcw)IsHRG{35xZ;x-`kc?J4M5XedS4Iek6xCANsYTXKM0S@+NpM7tky=B1}H<_
zsRgziZ=@h@iRyh(Im$FpS6!R^*^}B6_mqFBJjPaQy^($0LT}4(_mX&wJttwdu-`Qn
zv#+cpH!7DzgPQ>XG2kgzZ^d1zU_Pook29vnp{q5{JEtVx;mJW@$!k}m7#kbi@FMot
zakjX3phS>Gi3J>exppb2tQs;%`tL{Rhd4Dc1jTvE%g^6ShXJ&G2uoPyLvtE)`iz|t
zHeN<kS+>Tk{>W7zd}By<RD5fHBV{DJIv#Rw=LqtpMhRutWwx_pzT5=tU0#ZwZpiMO
zY*U_X?kIr+Y9&>1fO2p~i3>O(@ew`Qv^O}HA(IfRv8(L0Y-RxP{LSpkGd6P4_Z|N~
zyyI3ze4nWQ;G35Lfc@UR4eW~PUqBCF1yeXucUx{X?x5-E+<;97u-Y<8xZw)Is^^`^
zwq3NkBh!|_B}0;}U>(LI%cOKi_4<%d@O&k1w(Vkcbk`iSX~#O2&aa@~_8IQ_uOFPC
ze2sw*&Q^kYxz9d`d@!tu8k#QGNpbB6XWz`GIagRD-6=9Ft0nPSe9`Z?2<s)R_Bw2J
z!-f=XJWlQXX-cOL>%kE^cF}F3>z`@0oF(_#&JDTJ`f}LVwngt{@P`}Mk$b43=!YY1
z_$TH7lWf@Q=mpUbiG2ZUN)x@^SI-I(ckL5?MQ`a@xet9V>p44YKG0aO81SFk!LNVL
z`NzZ?Ofx)f=(mPQ_S;0}e_Cwv6phQAf5gj8g|AwuafD&(2w1WpTMkh!F0SfOv|vuQ
zHwv%1Ne%|G;}9paUswXb(Kb4*$X%rmo=oDNotJn<&n&jr9Z8DU`l8F<r-$~nT>Hxo
zA9hGbg!j2fr>UPkBlB@qsw>Q+m3?yNxD=)}NVcK)M^?!?Wqy;d**p~U9@=1niJ5@n
z5|}>dIK^Sr0+{jVDPYyZc+<D#(Sb~`d|`|tyyC|M+f)FY?;r8)0|68@NprG!#p_9m
zqhsdDJW~I3@pocNjy;APZa|q+P|F)i2?4$CE9?gbOdRKO!_SUo!>4w!mk9d|kIh7-
z(&R;C;-dY2LPsip2EV)$dy#ifKbelUv{a{B=F-{cw75hAcGF~s@UcGZW8G=>**47a
zxv+qO`M3yx@LG!K6PIQWHNx>roHX_)j%F;Ve+L_gXYoYUCc9sCK(Cj>*>XJNA*=m9
zjsc9TZ>wo#{a8y{ehj7TVAFfnP$aAeQym&awAJwfQj+^rE3J|J%k2t@a!i|@-rd)@
zf=7Vy2#M{~2K6jj$4`XSrQmb=%)N!&P@_ZD=vC-aQ0kVF|JC#I-puX3H~u(^=dW=|
zrSGdmSIRKao<MuaYy|iKzYafSx{H;}J7Bk@{F4t|*^TU$uk~tCLFPnP@D-{3jT~Fn
z0-_v1w)!&XaZQ9bY#S%=Z94@Qj?X~b38!to$5d{mS=8+NNzH!R@@8=SwVkw4bk#Vr
z1R4|a*^;5#iT@+wcvOPh>c`{uv8PP?uzvAyCZVUZ02Wzx31|`q_Y+zvH|*AFD>8!&
zcoKb)V_1XMbmb&&x`~h+e;NPGs>CXfF1F??UVV^!&+GM~XJY=@TEl2gTa2#f&W{q$
znO`%Tkb;|uF5;Pp?RN?z<I>(QHFj8$<31iZmVeH#F(P$lAq#Y!Oy%Ct&$CKWYVA&e
zv+w5#(E8BRz1eLA9ci3>*qx;pq2G+xZ4EJ{VGe2$^E;^|IvSBYuf}El&ou8|G{_91
zV5?zlQtV=@pXaOw^{&VD1iq|7k1U7J%=6fC+!@6mb!O*zjVm{&Dj$M1J$;|uc$^}B
ztC>l2eb2dF7oS!hC*=v37?M{bIW`{X6Kg&;HC-Tgg(3P>dk7-;Rkz0G8D+K8EVIw!
zc*uPpnK%I-Trw(>=l^OjEaKAq%-|i9W73I~eUE4IQ3_{G>FIqBrbreH+e<1K+233D
zqdfFh+{Rq}HZt+;c=4NAIUIibS5M-K!w6P5@STE39V)=jAeT9C;f=<BFZ8GYri1~`
z-wi#ohYEKwH9Lt>*zaZc-vq6M=G|k=2)A~p4p2PGP_^TgZEbBuY;bBAb>SSmHJ#{|
z<AzFn0?qF-#c95G;(Dw2k>Hyc;~^s}3-Niigh#PiAzJq><#U1J1Z;gKrjYB&=_PUo
z?&tP{fm#;P{NuX7Rfs>md&Dvme`{VUXP{=RPZN9fXG6tCX|wZORjyx0$N3|dR>%F4
z=mVAVjBmi8W*ey~4=g*!o7C-9yb+Uiy!cjXIs<r_4@W_m=7oT#{o*s1Wf1K~>(>JA
zRK-bh32eN)mKct{ikY&{n&5ua<Pt*<tEOZ+^inC<Vpd{K|G~!m+j>j)WIn|)Y6m?T
zUOFGxY1jl^CR~rX=zhU;+TqF>TjB6t$YA=3EVcO!#bIcwUjTT*RBHo#23=P=dNAg!
z+|@fOYlSU}rO?>1r%`+uR=rS~aPvhi%rmBSiPW9Yo+|RRY3QE5F@Vj>NceC)EbmnB
z%@tXE8Pk@^G>lmXGJ&07P^E<*6)?TS;>MHQ|KcL97?Bq(T)YNCw&qhmw4@NLyORrr
zrIM&L9!&aN+RU5hw7S$&ajk$Pz|g2yE`8WECz-w@=i1Sb0P1B*i!a!GP7IKLpHY)W
z3s_I47SV@pF<C+mjDlQFS-SiOMMZk8B_$C`8N6}62&CtN&((1k@t!L$?;41M`r`za
z9QNqGzKi}&ETdlVKFuFBff`@J6>lS%bh@M^<k-n)BL4DN#B0A{(Cu9M{z;BD-1i(F
z;Wm}!cv{lzmJ#W8Wb+E(G453x6+SCH6a@;}BQU;)3AxyGXBMjGXA2&S!a$7pZsBM>
zfSLEQ{}=J$?RUK{`1>5XgNVJhOYs|jyG-TQ)8&AZm))t^(V~xM;H|$}eb+y7*+Ex-
zaP0}LhB67ef^m7xbt&GuS>9E-3W>!g^u}!NObj+Y9}4t$UA>32JZbJA_^k7vznjd6
zSwPecY@a@|$vA*IMZ$0O(V)B)bVPwU@Pn$x3uqyU2bBpBfS;h19T;uhg3)|=m1HeP
znv>WZhJZI!gVH-IzC9q8_?>p(DMo3~@<0wUd}rYKazjL9v~gsNM2!1(Xw`0#>W9}q
zZo)Y+&J)D2^E|O7a1>-r*Ue=`n&vPLVKKr21o70u&_x4u2XsZ>^csyj=xD+%)naAJ
zOaDkgtMA;;+pdnB=n+8qtS02>s?K0nCk?u{3>^;XV<v1v=v*n=RtF!Jl7?JdT<p>;
zT?HSOgTqd}7959Q`;F{K%@wpi6D^+3D(VurJh~Lx=}tJ`nB8W1;Pbl!$Ibfy0xTVZ
zrF6}o-D*;@H4`EHzr~6Kw`B`Tzkg*>h>VSFKU^-n2BBN}+909S;%K|n_wY!(c|I^~
ztu}1n+Bl*7B5lmq>@vIZYFjQH(1atW5Zj*vA{PafV5(>4I(h)*cS_A;0G#H%(}Wr;
zTXtF6^Ev8q>ASg9E+4cRc@LRsT?4B^=O(A0c>S^ubt??G5h=5|Y7XcE#hht}gQ=PQ
z+p4<K1Ar~ZVLGkF>*L)#uI-fT7~24T;cCv21RKinE00-HAm;!T5ZGj<`iINi;6K~-
zJ;=TPLTsFHga3Jx_l*RiGtOZNBa|Beo3Rn#mWN=wHUj4NVoC)QAKWZa8STR!i0(6E
zWcSZDB2;@}omvW#UgQ~4lwoyQQdFO?r|`_xCDjr$CBvz5HM~B|<sE#-=gPEa@ZFm!
zr=b!_&QL}S_WXZ(-b2dV7Z?B>e!JFmbJz+Cpzb@L<jbotY5bJfja{PiUB7}juXNG*
z5AlO13nz6L;}{=P!LX6c>-bSSpS>nA-`hd*S0i@x^KT9hVeOcMTaq4+p@elJApt=J
zEGqXs0M50fy4s0>O~6hE*uHa#x;D+{|1}rCO#25W#chN!qUX2*93@E>e~4_M)|-ZO
zbXf;eOQ=o3mOUbL{%4VqWc`%(#8etDvkvYyBzIe9rw1cFs>lzx;^59+WGQ$wfr8)s
zqd|^AftHm3BH>4Fed?TCBCDoZOTgmgWsBF!7!H`0CFMo?dTi-=9R?|CIL9Q9iB_9j
zf$LC)Yj^V`w#|KrBwmlqheY+jW)((fhgo}aoG9j6{@M8?i0oz4dMBRMNzy;CO2z~&
zy8%Zb5pXOpMqR@WAn>|qeF+d>q{|Sk#q~-`!P?WYhE`8^+W@~nPW);84w5P0mo|It
zy!e@*&wu-w4{X;K-5=QH4$lEaFrc2W{|<`#MjwwjTN9Z7pD^<_SZ{lSQt}K!=7=%b
zM)WI5$?Qpr$o&yEpZHrFmVaTTA}*+T9@%dk1Lf(yJVKmDDvBf`1}Uvi)gA08xcsOc
zRPjI}iR|tS>_(?G=c+`h?8jF#>eB8JcC-8ifAMP4Z#MDbH_9|NmxV*f5OL?7-58&J
zu97|ov?L<xujRp1Ud;8s(YzRO*2CUE-fAf$ugNy01miychOdSXY5ITy`7GxNkYm{=
z{+SSx=x)(Ra^>)en*Q%(B_v5ITFl-pf^Icbb6xrah7u>F+f|tN=k-i+WnR!ioTpD-
zpZfSc9azd(qxS~?jGl<cm{>tg<<`G~{f{CD&`Im>P^80r{NrETYe=K@)YCTK$fvvc
zxv7Qh&1vE)!|(D|yB*&MBpBEq-VN)6z^n`F%j?C>-YYFchK|S32;L=clnyz<*;{Oz
zU8kX@FVY3ZX3BwXeIKlu&rF7}jJ%wO{a7uf%9qchf5y-bKscn8et;W`6qx!<DmA^x
zfiBD|7PfZ8fRa^(^{1d|ZV2-FZO}>wQkK~|m3&R9%ad6$$sn6FAam=_f7_Q37`o7>
zHbW0BmYlE+*F*>2ihn?LlTg_J=ZZfc&Ng1c$ew;V(1P*O*n`^g2H8i|LA577x%aN6
zcwF@qM=3lZWC&}1kZvuFZnE>OK57<R_zm3))XoAyw?>y8ICKlamsPcAd*#k`NSp^U
z^xnrExzfbXsgb>cZHrz@Xa_b3c~F)a!a^&n-#jj~N>3tJaa@)T5wP1MW~q?!l1luj
z<xH~$@yqVu`gWI}EKshMDQkHmzROt6l>S=soF7BlB0Ch(X<B)3aC}2g_#gyb4*hf;
zJOgjL0Z$HU_{^f06`z_h=P&gq3od=_P~QV9Z?$AUuUf{*nVA?LF6KAzdM=8H0ctn;
zCjtt2Ed3Y8Yl%MjkwzGNibb)j<oY&`xrN3vR(jZi!@q_zF7>yjwxxdC;P6TQb}m}z
z*)X4Hc-^*IbA02__<2OUe@@<xl|-e<FYmLaJ*4f`A)yajroF@^9$V(D%W?-!-2qtX
zx?opbZMsAdPC`7la|t8pb!%4kfOEv+%@OP=JRwf9vu3Sn<JuevX6`K!F-PoDwU(y;
zJdYV)>T$ms*F?{fP(WUL^y@4#ab3Y%K_FjCxXPU~eF-zLl?*nE<z8V}K}-wTGHwL1
zNZc>f<^j}_%}Yh?B?|JSUH{7|lm-#?pU&$<@c4oEBi(1x%eOiV`~=XEV))HBmgMgf
z_UF|H<yR8Z%=_+oC}NwtKZpXrVGV!!Z466=U6zU@mBbP2e2?#qI)f5-p`L~7QdWU9
zUVmQ5{ehZqw(^yZS#H@`9>^WB8L-Jd<Glj-`qIr!KT{HM8|N9g=l8%VjRCoj562xC
zAiKL^m+d=_g<$=VttDdJYj_YcoVqB^t5W{b7rB#LaLoS~9Q12KxuQLu!|f~KvYE>_
zPyG5k_Coj~j~;efnJWwNbpCSkCnALAjI)<kQW4uW5qf#;=HjMFB<5_^H{3<kLvw7I
zbVFgt=Q55>gG3^Q5X036GLU=6uvb8N({B1dFkFf}v;wGS&}TU@Zue|MuI-{RG7s7|
z&IHi}#1n7May*T$x$^EeoGhG-A>kHaJY!<Rhxv;ApH>b$2M_FwYmGpQfM!F?oOo{<
z5%wt)GlSvx{s8_dNE&J8D`t-Rw|=0;QJ*EPXf#_4=OP7Q|Cltm(C9?PzHSH30K7Rq
zDUeHGH59xrjeA|%EkG||n{ed*x8b#3`OoJqc}f)WI*X4^UWv+!V1oMBlnM$tFa17R
z13%(*N3*XA+06xbdEamRCQvS;Z!n~EaVgQ@vEnx{-c|Um%$BPkTI}*Mm^!0i?1M`4
z?ru`a9_k9m*E?BV)Z(|D{b$8ld;Ig6Qf)rRt+6B8ma{SuM0Cf<NKTds(qdtK;!FVM
ztyqr);~=ABO*m>Jco;VEJOm8F_~w{_q_DTg$Rk`NbC!nz66q8bN#=3tJ-D=42LDf!
zdLIYG=s;%8*6gbK>!5}-pAG=C2op>OQ1d<+K3xX=1zRBoF&t1X0aQmZ4JfiO_~0{%
zQTigY7jrQ1V&jlbRy|9^PVeu}HSRyjOqUf#zZcdyU29?s9$JV0dzEQFM58~QviqHc
zx3Ui>D&|i63-@m?o!-99u|Z%#1imczwyGnGfCWebZN`qBIcAH3<g}`Xt1R%pX9NE(
zPzS36=0FL)F+faI)7^ow8_=%-l#ZzO$gf890DJa<WdvkB_wJKrTp=d*fs$<_^b21L
z!Y4e_wP4yjk8!g?A9<W@n%+;ud^8=x*uAtyG(O;F8EMG-Q0RZ+P@;78oldyNq2538
z5hn<KdGU~R$enHJ-H%`q<W*FdV-8;GY^<M8iNqt@GS0_0zqYHDKB|QLRQgb$pb#C(
z&_7RvDnCJL20Q#40iMr;Z`gqTGV!)HCeSDG?NH7}x%!nITA?it%!wqI`9T}S8-hsq
zFKyT@H{y$3Cup>E+p34x5QsdjiOK=_3Zi}UG&k-&xTIZ)W|{N8qHBe0hE5*hGc%VL
z(F>O)UI?(wWvW1f$ou@^jP~w}JjpCljg8Jk&B+B}v`l&Uh67JW!;aw9(+6>!V>rOf
zFC88DR<@VGf80fdl-(xt?1IDp5WK{^u@2iFQ}8I{i#^@fwkSSO$G?ID5@PPYlf=T!
z-iKNIqWn&>Ft9)VdW}t})&iWH{r<UnhNEcx)@v+z)%)4QursK_gE0oOxGwi(2nh9!
zNsr%P%Hb>H9*I435*<=1E1)iNoUFx!IqX!t#%P1Gr!hI;W#fAM$@$Z!lac!#q-xV<
z|2T(M%+}`rn%T$Nm19R0sh;pev*mcRB2u08gITJCLfy|be3;TZ{9Pj4<sa|p274dY
zfF%^=g~^noZL7pw!e+x~y8-y%RjLZIm~tO#3l?%pi?W0}zm#l4ly|VL#oUve=){&x
zrs|d5x`jPh!}4k5$gA4kg=u|lXXKbD<XxwM(RhO$-w(_$M7d4U485JRPbg?fBldx}
z!Yvq%b7^_0A8)xa{&;oJJX355qZ^$np4?Z$r|kweWZugTuavUQZz5tG_7x<jcViqT
zj|-$m%S7MmU1jz*^Mw;OR>c`6If}hgV5cL-6vxDVpQL-o5G6HU5FQuD@osw%4Qfns
zOuJ5JW=-lbNhc2$ZhZ&%&89c1v&vMn)_OKzwPF^mc3S`<H;H<%!13p2c@=cePm$$X
zCATgF*#=c*f<hT>kZbkqtPA7DK*PX|r&l}0x?*viD}Y7vB46-9{M($ZD;??{;ozSj
zn?~RAN8lYER?7N){!bqXXMes8M}!lFhwdc6Q9Q@im<aOws@*iS$8cu;WGHtRQr0JK
zkrI~A7Bv0!#RS!w-2=jGrxp^hMglTy!0(YJ4D6hV&PC7p<5|}1CfJc4rmpNdqI?(=
z2VU?$seYaq7wDPbd@IkbMGwfU2t2D|G5rNrk2CgREniW@1huuf!8%Cl+yRm<g%8Fn
zOrI4V;#f?$+Dt?1Oj{Nd7G!_v(c~zGKWL=(+7yfXl2Wa;bk3*mAONn{38DchQi45*
z7M32f>%D$l*~d`<u`J<~FHX1u2w4<rBcW+5>nSIKL*%2q`j%n&jF6`c!&pwdITDuE
zz|bcXpkO%|4Xu!9B7K-ZW&EFY0lOExAA$ob^5@D{t--qjG$!nOvi8hMqm($jtR!vj
zm2ygSRTjV`VzR$VMs&-s@>e-xPxUesMA)9w<JHOFiM+cXTKr<{Dh9$N?e;EB+(WuI
z)(Nbb5LX$X19(kZpJ4}|$VT#Du(&e(4~QqbZ;?u^q3s`balT)Gq?h)GP1>eT{)y-@
zYjgJ3w^90EpawWVz-J(HFB1uW&gd^cOntNXD(F`!G<~;@!;c1;{<%X+$m6Z9!ORXR
z&j{X0fe=2(btx1TFnulgoKH=tI5KG#M^ehEBr{_$&IClH|BvV*pK?w70dz~TB;q|7
z#0fxf)d}~fM0qeNlcaQWop8lBnpu*u^g@pPGI=ofh`aH@kdwH!^8)96EEzj)EgDb3
z2xRprP<{Kg9K)~|jE-T=#)bMzrl}T*%7b_!;`PYen>6w602ZSjpul7A?spBj>-tM<
z`k8>CpYx=CM_j^vd5NSq!44S8iffI@fyVtX81HoXBs-_$rC_akpmx|3d@AQxK9#x4
zFFbl_F_cQ8ufWedDAJ_ptF;#J?O88GKG2@I0{i2w626MA4t`JG$aEskIldFL>(D%$
zmq;@tf<>}X-TDIaZh<XooHxMogG3hN2xlCedHwmNz%1~G9vTIe%JaS)<T(G?{^az%
zunD*hnys!NsXauv{Kav$`~;BbXZKzxq&}9H=_2>rELLtoz1Cv4jvGr>S--MM{+l~=
z9%9EjMMqSa)Sv3xLGV9hUOR})E2D;)O50bU+4rA!GY$kD*lE86>$<<bL*iOEe;&Z%
zXw<Ur6<k0EVwo8(;P_^<Kpl8viC}{SlbfXhgF)xNfG<7D&Y@}}#C6;83R)Q{Umx&u
zsQ9y+2}{V=L!;>L!5HtpO!nrZk6t511+KYlEy|@DFjQrqjBO)g+SgrUpBQbW*jZQf
zTI5MMx6)v~iKCJ#%eoVZD&wc{<ed`DnvH^GzPpLl=KojUWJplK&=qhZd;CmP5ah)D
zj>>KA2M@ek)(W^Sx^`-TMma$Ls|8pnAij0WPIijWwO}qV0hbVgT0nU^KDoPcJY}Zs
zuZD3rKKyab?!XRjsKu5oI03yb3%2O7ws`zg5aC?sHd)Mn9?W_PDowu$Af4mp2!Ofr
z%)38hLu@2Ab|0;)jJzjKvrPZ<5nB92BqUC4s^+9Hb9?H%qq$rCe-*23O4wJt-lYn*
zI%p7{Vlv~r4wX9fo*KgyIo`a!V*#^>qh){5zDKOmt%YV5@RxbVe(Q|_4Rv7G1GMzq
zK&l=J|JLSk<*0&(Why@*mvIOeIMf}WI<M_ySO0L{M26Jwao3^kkjW{nNX0+Amk^P4
zB}#1;;U=nPPRpBzMsLAkC{Wcg{%3KqOvc1fsO?K;4hP5QqVKg$QV+fUNtcJcbgT~(
zZ+^DRG5C=^!Q^{PKSi!Tkpg+54M-0(3Ud#3KepwZ$$9>Kck`wH!2U}lH!y&YGWszr
zW#&3qhvL^Vy2jVj0t(rBbIwx?cmo*P$>Xr}N!Zt{%Ty8zn%>dC(i>!5<D)LXigtYb
zGV^B+=RvTwgEz~p_4F0PyXw+=tXmwtOZf^0)E*4qY*y*#EKn@?k#GjQ$Dw9fyr5UY
z%>wnKzg}ROUX&vZqm}cO>dvGVjY;IFX;NOy>!vjkP#uz84m;R0P9Wx2%i>r0tw3~j
z*?g{L|2XUcvA0GlT1KRH&J}6-Q+)Ei2)?jd)OLg{5&LP9LGlh8YbpqF+sm<M;AS?&
zK9Phzy^l{hwxt_f+E39^A<;{<M(iOK4GN$~92v}FS?Zu+;PuMFl54^|*H2k34d5pQ
zDfH&F+pgK2I^AB{SPJenpoi!Fn~BNbjtX!`<9~m{3N}ZGCAd06-ZhPr0ujz`Qtf?0
z?vQLu!y9B~<10q3Tn2{nkBd`NQ8ULq$s(`$L`7AuSBQaDyOH!MrYHgH&bp>PF1#nm
zLiy1zL27@u>&KzgHgV!!reF2D#Lo|0em*)?Hx@Nb6BjbXC<y%LE+AI#xTT`fXwSOL
zFD-|7<K93_WV$jePXW@L+XZ%eR)@^!fAaK1&zbOiVfN<|y>+>nUp-m`;xv@SKG9iD
z3ES;*O3>p1;-L{tIf5HOTbh4*iq(RHgE;`?zavE33Zb3WDGW1)qbZI$W|I6Epy(tx
z&ZSZr-_F#kWyTwZwF_t57<}EPjWoqc#EujnZ1Xr|{Bjmb`-g(*w*PSposN8k3AXsc
zt1;(3i?Qy-%wr~EIr8rlZ1iDpUdN;121;wUj@<&2E)0AIst1q|g(X`YSOR&5><{&B
z!;SlB%2wc9;u5M*wK(xb<Q2zVBEOJ3`R$^|uUffPXiO(t<<W7n5W4FLsJF!d)MqUR
zneDwguu?dhd?gsaqVP01!g+K%xEd)F@qS->9EWN$<j%3_={WWTi2_~xy|ef5?z{E@
z1i72BOSqe`<F}}%I)l7S^fvOC7hspN=r&$fkRs3ii-{%aAj(d!NR%EnsRW6m(zJ5>
zRcO4EFY#3K`W!>7D7!Bt?#95(|Nf2f=tso+uvn6TZ>y6g3R))MsWtOq1tw4F)}DLL
zLsTR;L5|d3X!?_e!x28J#HA;S8YmHO6o^W)lX!%^mV_&<ct}s`GkMo>N}zT?B;tMY
zp!BDZ%vN^fI8L#}63GFX&qm(c-%;g$slI9Oj@Ps!FkXgP!)tsEWt;vu);h4)N-rAA
zBg|KpcoI@|YtO`cjayrRzAto#x+;qN>pP|X9NfmpB9+E(njx7sC~~jBW`oGlu%N)@
zSdl&bW538s!0JD<g$=AK>c!kl1+COTW|({Q>hnJ(lB0EKaxeF%Zq8=9?DI<%&0~uI
z?vuK!&@I<B<O-!@6hWkz>FLL@Rb;U);yX!{<u=Zbr(zRB6bOgIjv%2Q0v?vA5^*fY
zDL<k}aW-U_$)fHn^m4_^0C&#pJp&954Y<DHzvG3dVWf`%fh#*y(m*9zuF&#^OJ)}1
zPj~?hBs>-VV!02*lgENcl8z9ezd!}R&{F{*_Ca?I7^eiDwmd@F?Ya+1`fljCGY(9)
zli)$KVCheeOyV116bPeK6U#}a09hl|Sgk0mw*nt_h93;T+5Z;u7gt2|OW8I0p5Hv*
z&V$vcJGrJHdC>m#Y2%x)c(CtxK7uqyF-YO|N5SW8L+OxSQ+0o#{|}&b@8@lpH1yLG
z{qgFF9;{np=GKd70%^enrl5^<VXPFnwFRF<P2!&jShQ+VV-dRgiYmNG(rp}fIPc!;
z{Xu$k7~#2quSP8N*lqadOBK1v<+$rOm5&@tGRQCCbz#;d;G;xr!jid$Kt)z5Y&{rU
zoEay%xpW-~HdV0OPD#-GN2z_-yEGGr10ZSteJ>^Yq$SY~5OiW4O{873dlzQH^twE6
z6?`c)XpWr`gwK%7Ln=BhQr^dk#VK!BFzwp~c;eqOL$KZ$r%S92V3`E2`T1x*F8N?m
z;p(X&_*b11^#})pXItqN>KP@z_Mw$GVM?*Mou1m|OyBqW($o4E=Tl+5oWeq{kgt3k
zRlPgX-g@%`EGEhDsxmDgpXN=BgwnScI(^Vd8M3;h>=gqP9(_DhWEhtT2i98J+virt
zgQskZp~hiK>yT7tdT9m)!78}X_bU$ZwcpD{|K;LxT%jVkDtY-&dvka}bvp}9?^1B~
z|M-U$fb@F;dy`>|xg#TP;yDAaS88i5noGmZqFqM+Ink+@`#Z<q3p;AeBMg{V-*hfc
z^AmeK)7Rhq>Sax$j-UE;?a^Q)?y<rk6DxzXef%f1m_}Or!g?o<F#XH({4Q~0v+!*L
zWQWlibRcX)N!S{sjoo^)<A0zI_MtTMAb{~J<^Ro*?lLN|yMt*Fj&#TEDk#KT1Pa@p
z&EyQw)?9Q)iR04c)JC<6=GPu?ad$ez<i*da<%TB7=axnPPPo9zz)xG<Ww4`D={MFU
z&j=jD_lXXoW9oJ_>1MJ4C1@a9kD~C_3<V-6O!HsPV#J9t#B&xvfNlkFpC~Z^WCkw%
zkJnHKC^j!6`Xap0A1??$Jt=>?yBun;^fEKSU8?X{Th+G7D(3Q^shlE{)Thf;b=l)>
z+r=EyAM58o6KqYT%F;_Hg~yzbVs1!UVqw*#$PDqu*f|4?D))2Ps=sqLGNn?s;w1Bg
zOD^Sv%`o~z^Q-X<o51Y{!5sKrJRK|y6Epi;`sJWu4p?<$4*~?3=A#H`;ubrRoE8*&
zCAPayFI9cJ<y}f)+86(G%z>nhzoaPgTn&h&MNkGI!D3m8HJ16Wu!5TRGIb(BJQ6Rx
z+KYm-#A|<lbWE_lqozQ<sr71AH!TlBBnn)d&*=oz>_kwR6kSo9vrtV*M~I%~=z1KU
zD%pO*<ae1!xo0NBnaND#)_lM0=~q^!Um2qnW>0kH_2pB+okaHA3YEkQKKy%J>qjD#
zwE)|FycTB7TM3wnh&2p0gn%2cOdsFne*A2WtCB@4VJ<fjy)-LNdJ!)h%8fCa1LPRT
zn^e7O2kUoxM%)?kH4;`LIg_6=eu%Q_=={>%L_)Jt8@}OVIZAU!@|!k3?n4d-kG1br
z6nchJ1NU1dOGm2ArJ+bEktn8GL3A$*513?3LsuVS@yK+5;S`I^pn)>u?bCp&0YL5{
zLuR1=o0rVgE6EHGtvVw^e@J9H{>9|n@**dhEyHdvQx9~;zvs8u3owl5k^n>^ZebU?
z$Te85`?t*a<E_&+zLCeffgvIHrquCdv>=P09o8V!QQzP)R=rw^vb|cpyTk7q$FO}6
zLB5lDAeBJd6MQ82gNa*9$?b7-8`JWa`lFTp_Tc^|s9Kvt0vGVg(_5}Jm*>15>_1=q
zbk@Q_uHgxWxUnJ+t1UOK{;2b)>&+dNIJTpZ*q|2YU(Z_P^FA*`Q839?T9%M4Fo$}g
zhHM837>7d_m37e4^Is^nhcUml*?0#3{pW+J#*oiS?5`+=nt)p%_+X_nmZaMTmd`Y{
z2!<E(-}Yglgcra*@E72ke{$P6zP%DIkW4N6`_Gbic;%llHCF&(a)+V6Kco-@4$PtK
zeb=Rax*9i<O0b{`PByC*r*_x>vCc4(f1jU20QGMCZyoifYMXzI6OTXRbq(JRF);8`
zxl5*cpT<a%g)-y2O6>i7tPd=?oyp3T#r;^_qsn(f81>RV$4l!LeXk05=z3AdP_f)6
zZ6Iy&s*0QS3v<+Si=R%TjhAglh<8<H*4uHVXZc5Hz}pA8=yc?Tb{VtPcFo2<oNIPN
z{hha6tM~VaE-BK#+Tfbzk<31{B+xIPHZ$YgtA<gWUcAy=Ctnkf+eChu)ac$LbLjXr
zc@;wN2~+nCh|grG!Vrp@VHlol>QmGI@0wZxZj%o=eURFPw)2cWe?-{=;1aX|#~9;3
zTU@!qFQUa{`#-Le&jT$CW3a#T0!zbJ{VQEoY{|(V{4Bl%nns3{+Oi7TGMdw!`hfK6
zeatCSOpAagu^{c*mF#Q#&c5DLW*WykcbKc?q~5AMev5@EQbPa3R}wv0zyDli>F>sy
z3xj3q3_U3EfsqM?@xx)d<X0tY2!kZ|)vvNWdXR6A-}OT8_1w~F0PA>Q1a7D({3oyU
zzy4v2<BNRK3;6QdW-#{G+1nTw9dZd-g#9>LN1NYSL2tdN0(AAnJwk~({IGF4dA@1B
z!7+?5TuWWqf||2^($@ai6Ue6DPYA8-<Kw}ER_x9ba_9Lvn^3rNEi)6Vhii|tzdTv<
zw&8t0>WMO2`ZCjr^)U7I^bjW9X=u+_{=@K_P>z`I0tT5%g5);tJS#qVqkA+!Y}Dh7
z_$1aU((ily@Qw1FOvD(<7<1o3sseqNsHcb-4}7a@fjHj(p!4YR3Uc0zo}>$CnADZZ
z%s+5#)&X?F>uA`OR#@;DG+e2NRq#8YeKgskib~g`%zXDHu+nYJxJ^`OhzUw3^00l%
zX=`Rzra<VRq-)k?J?Isi<O5r}rj_(aS#wQIZG$-cs(>d%wp%Mkb+$%mcWYv7d-GHx
zNf$fasOmyL&YsNTsJX_#8KuZbXivu}+f)VSzGUq4vLV<eBwqLqA8@Npx(%pUat6T;
z?UDU6ubjaf;&;;Sn$GpD0I8-su!m-w>bM!p=BzDucR7NuD&}~JiaTE&ZzL!v6l|0b
zjsfI6UGic1A&<uhPW{+4oO8qZ%dAvfDfM4$4<x)s#qfxhoFQo(_8pi$a3}QMg8ezA
z<%Elj?ByJWV=p`(*KS*2cmN4*3A6tlch>9U*@FMC`Z#|BJ%Y6Ykc%h7HZ>X5zsBh=
zsz0>=4J?=XLqkLJXH)-XH{K|B4VYHm;|;8*=P(bT|EJnVYW=gNK{1_<0^wpE^D>uU
zKflbLirb!Y4H0Dgm8n#VwJMGSzvU|#M{zVe*V@t$>7BQa1Q_goJ@-@91QVI^6sofr
z_j~EQ_PkTQC`sMN*1-QB?dzj(veeTmpmy9Agko9G0tEAEo<@L<{Tq(kJ(aih{s?L!
zYoU<9srAz|N^LG<37E9{8;q-8JmoZH8e@_fYO#oKKtH-`2JQb%ql}KPccg{14ZlA9
z7rs;Rc#!hXrWzlIC4I7o`W(2@;_vTQGSe_9kp5t0ONP@E@9D2SB6%MccHM`vy1^E&
zMJqBfdfs_zYOH0u@D|#QQA!}c<*^uk_#t`$3=sQceaxIUnZszV{eF}hH~_+h!OEC&
zu$k%)`od@QhK)N!*F6|n&=b1?OKeSb6V?vVy-%fD%52Z#{QmkpRYHT~Z6Gl9o#)v$
zp&`qN?h>7Pv4Ibv(Wh&MHAI+>5k<q3cVgfA*I>0$&^3?^nN@{JgLyV_1OA*nX?0N3
zSE(Al{UChQPQ|UW?8&=U3Atp?$-p1r&W;JZZ9vo);Lqz91_}MSs2>gk)dDf`L5m4b
z?U>zWfu|1Oug(ou@SL<22k^OU+6?_=k-^-O-B(N$D_8h?_h=WNqf_si5}2t%Bii~N
zB{+s})2x-yn46LHs*~fmqXW}Yslbf1Mv^zq-w=(>+|Ic2Xo!2MI`q0A*AR36aeUIF
zRIFZ*$O!^Z+^g06)hvOM{f8>Iwz+*+7&!-)q&r{^kgaQpQfYw2Z9C~!;L8_x;O?`0
z&RlLn%H0v&E|bp?sjYN}{a&wCbliCCOc?DEw_O9FvYnLXLTj7Rz<8$V)4L}8$?TXl
zqo0Ze>Q;2o=g3}&gwb^XZ=&A$Lt``<_a=nY0x}F&zJ(L%dx9vaFCvuN&Ohi3pHS@W
z!$?AKFJP+T`+$PxJ}g0e#~?}fJkStOZJ!06BTFYSY?Ix$qKac|yjKYS51Jba>YK@{
zer<C)RJO&oRp={TyLgHR+s;a6+}63fLN$8tLK~^ezZkQPc08J+R<E6-ciTkxVaGAZ
zw<J>7TfWH`BzZATZ=p<hb87S~F>Pn}mAI#xO`UAS2@a7|@YRWm9%b>}xDz&3g6@zG
zq#ZhsK>4M>;Dez263M#!pO)2PpN66Be*KSF^ak-I`JeIvkH~`Kna^Ut)oP4k;j&(T
z5HF<}VqGaSW#&~gi@AftD4FQa&P6cwwf`a{l{=An4m^r(zhWr_90Nj)7RLkYN%r$o
zcf-CZvG1~Kca_{CgKnk^^d6e8#{DR>ow$-Jq{24+O$b*Q)Fxs4xR1Cm*_E7H9h?Hj
zsFIe~R=g^OTEH-LQ~wKgf0cDa0~tw<_){1o_!piX!?}&#Hax9DlT$|Nu=AC!^mq@(
z-f9~X;^H3`CtXu~d7~Y!lP?lF3`RZ!S#@ychmK&qmYPDHztv(vVmM#&e*uvmA%<eH
z#|D>dB9y+CkYJ$GAZ>m9DHZi0?#Wazb2iecg0Ym5>GA)m>AK^o{{L?w+cmRutujN1
zD6YNB4kde(ktAi`tn9r>*NkL~RCKMBt?X3xCa&vV?!E4P|K9i0@9RGJi+{Y|&*$s;
zJm<X5`F1=1>aBpQ5X%}4^nF#G&77eiBJ~Rt*#S3^dl*(>g7&k88fmvEyu0IU>H`n4
zCy#yP)q;+_@Xu9DH%a;X0V(>$B%$HVS&9taWujOH3-=#*2(U%;WbO5H1MG?laIe`r
zavR}IDP?WZ$45ry4L7Yq=ayui==ydn52x1WK=$zjzw=FEL%|=YU;pSC+(^eyj)7e!
zn_&prX&Ke+L}cfn<X?vx={MHmX0TOPbPr-vuV=RsFER>39@EH@XRFN<BTjKXS}d$L
za~62`*cp@ud(uYJy7bzxI$Q7kheKVsJxO~1iw?)e8tWzqTY*2ju%7ot6S`1IdlbQ{
z;qWoNghK3BtxkHtFbCKE%XeQ{{ZX#H+dP5E=H+&C`tP{!{df)`et)UvO7cPBBb}q;
z+7IMO*)m{PmTiBL=|ti=$$soiY9)fAW|9&6edUA~9H9GN<mPFsR;+{&NK(|ST3;=L
zRC=`lnr>tawuC=MdKM6WO>4qk-jCHk)ch;TD{MIrrEn%><z8ifFzDo}?c)R2c8@a1
z-w2$*Lvgpq)Vehhj5%E<`l)6=f&xn$1-4uKylGG7?X5x4Tg7Pdi>&OZk-!dh4LOn!
zO)gT?Qj5;G_(jML!maXbxrI-Mtqo=!8gCMLMMP~KblkqLPn{6IXIhg;L}<#33fj1{
z+-{>@8%FlkeLd%n_G8byWF7V8bpC)=P3uaDJiz!ZA0ATZ+g?$tI3*8IT$+at#_gG+
zs#C2V>JX$XioE-x)oJwzld(}+lqSv+rRMi?GjuxDUum3OfG?h)<`=NoVklwut3$xi
z=Kj7FqPF4e2WqZmn@iW=8x);~7|Vex-bHtg*DxzgppoqrGIDo1ks*q^@}U%UBRfX)
z<3*A(KricJsF6^zmuAwr$9!HQa2QLYVRj|{+hWv^QW0Fs+94P4C0zw9s#K?%LFuyL
zs~r1p2yHjgUbc=T+WQ(H2Nc3BbMx&dKv5|=4fXZfQ5L^2mGqdEgH5~3N1@5qIG?xB
zwL7T=F4+R7Lo~<X*Z_pu!QW@V_lGGi-baQm-Tbb&4?3E4y&Vc@WG$x2_LFjh>1IOI
zAJAEMt`V%9VVKo9G$=^&ackLWLq>ibI)=;rA?Zg|_mOCvKxm-zxyvGweCCmxIvFAj
z2R-FGvlNl1Za3Dn!!NI%<;O<d$l|~C@w*Ul*2K0OVsM4pkKahz#N)O0ISSRjTNH3{
zR<BWEFBN+pPD!hXogG)|TilkC6T&jpN)3LeV2l#Y<_nDMK-smpF!Nya*liqwO_z!<
zM$#$;XEQ!anj_5vWNm#b2pmfl#~yxg69P>$1b5+G#Xlkqmf8PUtJ=jRQ1ltS``T@I
zw7JBnXzmImnFRshdZ4rqXp3w>O}nafIZdLa<YO%z0>8y;P*dm`TNte_B5%!HF~b^v
zAATz|*GOSL`o{FS-52?{Ew8Nop?B}VE-lR#CgC{E5&#Fp;u&iDepqbpq4FkUlarYj
zah?J=tH?V1yz+VNH?TKXO6P;9h9EV0!TVuv05xEE_W^8phU9`5rNSaDxayIB-dEA=
zWwuGivpHTKB3}N%K;9-xT8~Kx*9nX0kfVz;P73peS+H7DNaJ$eT4v?_5$>G18<uMC
zdrl6Pdh_zYb%Oc0*M2afBE0mWi88VN*=O$=8sI28G)+M5<Id*Y)W7z&w%o`d=fDt`
z2e`w-!-3X)I6#y4Dq?+$3)r~6@Znus+jReQ3?HXUXq35HHa1pC-{XW^=xd{CwbXKr
zM#xl?b-_wa=xA3(i1;3ZkJ}<QHTaBZaCDI^r-oOIE?g&O556<y)Pif}Rl732vFRKf
zn1yhU9kr0oMxNyxf)>o<X)YKtZJ(D=q&cx#8^8H`?je!gC^r4a=aT8OVv8Q&h7$A9
zFjP=_9V%`hIbt1HB^mc{9U;nzZg?(EXa19m?RB#yx!gg|>+&|3ayQ8{I2b1geR2KK
zqJ}yL&E4R&0RJxmGbYNZ1%o^7&4j_hL`nbgXH+!dVz;7iqMW3*k1pB|FpkNf-i92x
z1#sr*PjrSJ-x44#b20w{NCd3O%oXv^AKp3~;;%7Nz)5LYH%=D6!b!jPBlaIpN~XTo
z$wD`|MpQmP?|fZcH@R;(JeV!y@FhLrL%G8RmM<I*P`~>B&K&SeTo@rEnRB!9@7j>X
zV^`WQ)cqjQgkL8(Zk-=G*9sV78_6mb0`sHDe<5pr=YY^p5d0-Pf!qJ^%ZjXuh?{^)
zt?JT*5OfDKca={)^fZ950Ea?wlS!=9i(Rs$6g@6k2i}x}tADn{;f<!~{(ag;DVgo7
zK>5Y5-kBqHWA(K5>KiUb@H_9vl-%WlU)LnY{^U-<;`<RjLYifY9_p*xyoU{EK|05A
zg$<k|{$)1l|I{Nm9)hgeYglX_3BIj&lKX@QOx7a}5oF(-%jqG=?!&Yh4N|+7r#=Ad
z#xFzj`&`55e0=N)MJ2uc=<5`+_io^G-|wCtfPuGHcl%ycy$ad>k_J0LZ6I-u3)f6P
zVb=6Nhpk_DhFn>71V$Xy$k#?!PPezWpI~~<C6A!*K=`zV`2$)UyctKfueU@%ZX?yx
zN?WPpyql`E4KH-6`%5UM%X0(i?L8NbB5y9TyNrgkV&rEww5Kh0&El0V#F8VaIG|-_
zkM-tU8cDJJ=Vi?4eJG$ih&{&*_|ePxjS(akUO49qat-Eh_GFzJi5F?xGnFjmec*ID
zOD=%6%Xi_yM9}5|I?1r5w;zBBRxJNbSeSg7_Y+WFEA*sJ`?d9|dYI=><b^m5>Pxx*
zHoEQo?^c$5T+ovU%&(&fIIzX_`S|z#J>I&yB-Sp52@Iwcr7#vo_@Vt(0FQk38GWzn
zRXElz!Z$BqN>V~mQvT-=-e3Er7(zFh$6Hv*`+`pIOH@Vf_V>}Qu)qU66Md<$PrRJg
z>ZfCvWHK4C%o7!^9Ei8>FeqC`EV2mqfEw*vw8LB)>kHJeW~@qD(*D8`XABQHQhZuT
zl`OI1hOb0zYTHN{d3UhP^5I_?L>Xc#Ac?X0PaCH&tEGiy2=MvGQRig}cV~d6g|FFi
zAm?xVP|%6K1;$6+jA7{3GT79SPo}ONhV{JYvAWhtkF$||_=**I*VqYVOcyELB93Of
z?rjByrj-4~_yws!@MXPg#(7mz$V4dN?nZ{t0;^=;@k@FLakjWL<^z?0vDeSbbq&EB
z52S5s`1Eh%3NRlYQ8z#hcz|qn@W^ET<wTmJ04QafXycWG`oN7Wi+Y;8Pn?vZ0SiSi
zIinfSRUuzV%qm<YB94)Voda}5YVeX@i&}2rEfv}u@t}3Nvwt}PIH)TOUDSkf&>(J6
zZ5>b>;Vd3mgxNCFBCcaz-uiojE=?jFoBjpeEq?PxFRV_;W{wZ6Flvv7*;b@N-c<X?
za~Jhpu0u>14aHq_(Y=+th)IDPX!YeH$CY;+8&m(=7TI$%KZ2K$&jDggNyId&vI8eC
zz!=Pldj}MFWgI#IN!V%fE+I)Z5(B2QETNePDe6ZMFjl3QqB$VZMs6cWnBvky=a(x|
zS|grAKSR7It0H0e?`blq-xAen@V_S{8i98B{wuZ6Csy$=^ji<z-W#}Zr^`L@G$$tL
zpQm_x)eR5M6^xz6FN@&~3{5h<<cjG7I{&u+&T(?nByX;nX9<o=yqhgvc#}0{bM<($
z>?NStHpL6{!HsiFKf}LV9_Erwry=|Zi=?Llk0)3)TW|p=>mNo6nmqPEd3^WC_Jzmj
zN3!DsCW?V^>S48A+h53_Fn9O08(kt1j~-CD>WUBO&CJN?RoyDSgWReA^pyCA?@wb^
zG4}Fb#EpY4%Fu<Qe&uDU&Xw<@7q08Q<#Kqb{tW*CV|=>vDSEt3#kL^Qa#O4C=;MwJ
zAmg6v%Hxtcyb+~+cde`w-_i!T)=3Kd19xd%GCE1;hP$w@N*82yNw6v9h*+@NmNT$g
zg3`RSOieo{Dn$>R^8Bm=SIagcFc)@4Q+gO+OVU)5<T{}hS>~{nxC$15k<2ixTWEFS
z&$FD**?(B11BV#dK<fu*()lIM9jrVD?Zx9VjcI2Xx&fEhY#yZz1+j`7MoAQWx!W#n
zcM1yOXDKM$_1_rvy)_%8$G&0USs#HRok=R#@un|Vrn{p3gQAz2-aHAqTaTFE%}?Tz
z^=d|Ci0I467GFczKcMkiVe$-!*JDXht$q+f*n4j(5PpR4`$S;g|8pTFlZ7#!4OVN{
z>xWjut-=vxN0hObB-~cujoPH{lT~4@4lSAP(ds(t+e?YdSEpwd^Xt}~0sfikrOhA<
z^UHMt_onjR%qWw{Y&}ljhdVod_S9J12ma&rU?x4w&qqA>bQ;$OUw61IczFI3qj|l0
zFp=cM*-u+do~L?A`qj}^6dA-c4PoD!JwJn(MKHSTjtj7}j)vvs<uRku|8_-EBB!I(
z!?JQM{B^su!)oT6+S`GXf*gen^D@qymeGD;o^`wDEA>I|LLvh3;8n_v?F4qQ=>wg`
zP3-ju&#yfc$a62Ri`1(0XN7~_0YzNu_>8pEX@v#S=oibX+<C{f_yI*<UHi8(sUB+O
zPmjglVdmOPO)or}&UemYz3}!kle;dLZSBwwA3U)?dAP(0XG~=76uQAAvV&OUKG2X+
z`k>Ik_N~e0$=Km|+|)WkL#&B5nW|u|ft}yb%-M~|&d<h=XKVx3p=iILvB~7+gj5re
zB7e+4go(%3l714HvSAP#<DsYL1E<oT-~r2s{6RFAyU~>T@6IZzeSZcHV6Byvl^ff7
z>6sN?p9a$Q-!z}kXE4%c{;4J)`uAt6_bC|l`R6GZA;0VVwZ(I+UiR<ZmnQlr3>P*(
zcZ3}t#=(x3Hq6IxMrUVpN=LYKv){Kz@Z~w_**(j<iAR~%t$_VTY%H63$nn16gAd>?
z(Q*;YF}OL|Twxk(R56S^qkn@easy3L`Ae-rBJDH4Kva2&%$vA{1dminpFIE~>`tIu
zDhXqu-A5)q(6WwUC`}N4WOP%@g($)sYvMF{P(y_G`gXBcuOlFk>S9dV<Hv8&V*_hz
z(Wh2!e@u^VW@3$5qL+I(6f=!SUVO9+uEa)fm$NNUzFK~xF?uCrH3N>HLUinhS0Ta<
z2d41(8;jk&*B8)#j<>x(8}jZJPV|R~TV1f(I4yF3hVxvzv~HEWlv0+R5XZMN>Rrcs
zoag`(1I5fBc&UH0k(2=;4^WLtX0&cT@NZ0QNFC7MA4d;*c_XO{8Ub$rA-zR36#z%}
zn?wE>q8Q!z$ox6r5(s5WK*&U0-1}e=+`{A-2pgDrj%%4!d}Fhg&dDEN6ipb!>X<(H
z)^Ls{Uw(A++C6B)OBDs;Ff44{W@EH?MI=1mR}~-q{&NnzwwzxzbwCAvb0?rUKk?aH
z!Wdx%j|%DdjH=3y*|j54Fl@CbiUuCKZz2D~r(-$KP?4MLw@4y$4drvP7|HVU3nHAB
z!o8aS-3LHg;9iOPX2$#^gMcBGBb$(-vtOodXCIDIH3X0q--G|@BE1(4;VUzg$RM?u
z@(P`v_tZMKmbrM)mY>nQ7VL1<Ohf^unTKJ$1)1{;A)Vs37{Ew-2wskLdBMS6hh~`H
zsK^pRy`R&NCb6<<zSF{S{DLbB!4eV<f`?h7u}?LGsuiVef#+I}csdgDdg1)_b>Yrl
zBszK}5TvfS^$!~ww}^QIia1%wRMZ?$!8r@8+JS`EKFpyX$3C^uzW_(cycbz~`$@HG
z#axAQliKqcT>wR%euSz!0`y7w%>YMzhb?^ao_Q!x5}==4dY`W$&3{<=&Wy>*_fqY+
zOAXggJ{A|U!K+rpV8pFT`$(y!!Se-cT1EDVVt?^&!Ybe#ZtX39l`){kdw8@v%$Ii;
zLl;*fM*>gV^qp;_Xg}T)1hfC4>f*o{i3=uWykOC<7*0<>Xk6@IP-Vs<E%iEpl50W0
z_kdVz>n}gF)_8a9;ZIk~(D;1fe#ss3!S+xIh^FsgIt!N*X&0g6dN25RsgAMVE@xXA
zze4ysA8?9Bzz+J@7eaoE0oW`8MBwyyaenlKiI~dKO}~(p9`Y@~85!xt`Hze{JLOe~
z;6j@4m!dM_52Q<|=I;EhoJp$+nd4bmRa}&aY~N_ttmm>!5;S)jRFYZ5Fi?U|Bw9=H
zUK5FqY0><KMT}^AlveuG#)Wn00Jzvb{f5<7wG2^sWHd?U4oXC40m+4=H{?zGNZPBx
z1sp8Sq&16xvQk$11mYM617RVX9#`BfyvR&IDCYnw_c8nduBTJKhj2E}ET6v%$?)~@
zi4MiQzbX*2IlC;Tj!FohDwxLa4$euC1|JeioIg^-s7+D22-Kz{Y0q&i0>$8XZK6MB
z%tlAO_WY>eC#FEF-G{_TlndKay>z^*S<1?<L6K;J7e>WkB$?Zb5p6Ra94^RVc8Mc4
zPeb%RZ9i1-$>Zrp&HlrgE!#8Y`K;Ol?BMT^wc_j0trs|(8nZA~D=o0Pec(b=ZOD;a
zrQaI;B>fFnD!D|SD;x+pxO*{?IYXwYiO9-vQC7$(o0r^pX(RVcSAM+a17YtcN*>_y
zH{NzSbx+-TOj-NMd1W2pxAGC!g<wJDf-9RRo-o4P+7!cE)O;vT=I`BKUzJ-@c=zL%
zb|x@eD*);QCrez(yFEKxInJEoJIZ@|r)l`@piS-A1L6Av+i{xr3dUGg`R|mxMw7b|
znLXq1OB68Q97?%9P|Amc4dmSnhoSw_K;S5giOx15?|<fSdwza?1F7L3{Hw?}^azf7
zwI!jo84lG%(<lv5?l98#fnKIv_}5QYfuJy2)1zYhJE|9&DZ1&#I{sE9Lt1YdG%tWt
z-lgMTp=0&OzX-3?p8W~l7!}b^HTm1Vl3JWK;PzyxCw9veewbwpBcT9?kkbVy4CwWQ
z2Nk$J4l8Ql{FY5I)S%$wMPv%_PmFLF&53+3U3P#+kucZJ8<?b!w+C_!WeUZOpUC?{
z?kfFcn-Zdjq+|!u{sUc0X!!y?ZVwqf8%C}#*bT@5uOH5m7zty2Wp2?g+75G?A>_2T
z87vog?X<{E!$MG?9nTUNZ~$xDN%&lhW10{8u7JE4ZIgm*F?Y<l=_V-WDzIJ$L)D4N
zEQYXB>eiEQ<3fJH0b(dL6m&{%2;XZ8K>13Q*7zjLCZj4EnyV|lv$8y8uHOqKp56-S
zG{1wSH$k%otiHaygNbFlLKl+^D>=hS-dxiut+fYPja*0{IDsPg(8mnRqT%YUYMu-8
z2x{Hxd@wz`L3|qI@yRe1C?^U9mdG6E()9&4LPOild~c8Dddhu!h2OH-i!VwvyLPI0
z2DLrUqZzkH_T(5Q<nEk&;@j-@=O3|C<O-F0+hl@*aw+(#W;=A_U)Dy=(A59;a)?ZD
zIA%P__e=!Z^RECLzJ(y(V*zvf@ZJre5z6!;1MffoeLyDgJm~UXMQ*7s=s>A`WQa}h
z!{8g^G^DNSYc`|z8u=q0CfIp2a7+f>k8Hg$p?!H2chD04tv+q~nr{0CFSk0ax*o%i
zswrs#)<t{Y%S3eAI#%&lBJpxN7}vMDzv!)3V6=vDbj`6QQ+G%)I)bi5N=RStDLXeU
z!*ijhvLvXLu?l&hmDjLa`eG(MWCC&qt^e^5IGSrLJY{{x!OqpxIy$OaLJvUOOEL_&
z8k_P<gKcX&{ql76PoFeSwCp26d7Xs3!yYpx5Ww$?DHR>~FMVx;7b|Av{uveX?)=X;
z`OAjk?j~z%U&0*qGRAt}sc*-|2_2}-q3*L42fX4=>JGatJfOjI+Zq~}cyT;ViYdS^
zB>WHiM&F}*zbiV-|KWd^t0~UMe#}(OOyC&9i*fV5FMx|mv9Y>js6M#}=ojI*mR$+j
zDj5P2ZNy5*9O=?CkocgzAGg;qt0_QNCO!-PzcuXy>DT<^7V^x&tQ}nm6AFnhSmc>R
zqU<0=rN~h~iOav;`Bb)3HX!Zk?gA2=UKOM~1KbnixGSVA{f&GkN7dVHp>|#EkFmdw
zXcmB_N-&gmdl@|jTgXx*d>haPcoD7v4kP6TdsqCV{Jg?tqJXQ}5;MciGh&5Q;#WYG
zeZ_!2NAs^3@u6H~Pr{SnSVqH|=Fgg6n=uWK6o3Li+usO2jO-E-Ofc#1i8HrR0yxw1
z;l}X%*ASukM@^v2lp1GskpRY0WwPbx!?n#U)WJwyrlM-;BDirH@0dZuFpQ0ljMN@Q
zMwx~6OcIdGDG!0;@g~=#FhK}>ob&!U`y8WUB_7|W!(WoPw2hge>dkHMo-A`1RWt?7
z%5kpn#br5nIQpwgyG*3kIcRhi@1`}?J$ttyPIoqR)y$(D(u-?dEc^nF*+UB@7eR~e
z|Di>3paW<2Al&PfWsnsXnRt1qim{7ZfiZWAR3)eB27GdheM82#D2+ALex~N)mx=ot
zWy{R-h_ft@^|Nx9ISf<GwDjkpQR$k8(VMv~uz8HlGt|xb)H&fHWlg`BpFIQXgx<?G
ztr<u6Ij#xIsM@JW?#xE<LM)--0&MrH*{b>R<;Gb4>3C-cq?tS^+Q*huZ8?ox<`i}&
zNxY{0?4Hbv_Ty%A(p0>EKb}s$4MtI}o0%QyYR-&lCNgEv>AJki+he}i3%<VkqC$pX
zFv9=y7|M)vje@-5wCvy^bxtn{{BcfKw2z9OLzM#~4pyFQMia4fYuC>btKxZ*6+&g4
zn3LGYw(~JPge%+{5q>w?gSK1B-3|7H?<sw6ZOuAe(76Vv)45mu@N`B)1NN5NX(qCs
z=FO+92m!9_I=D@az_&zP)uxTSb_k?;7&cihV{aW5qNV__FoD$y(nTBR$Q%3vt1oE}
zEJZo7Fls3&%A_)jKJ6ryq-`czY={TJSkVVAq1<U-vP&GZZv9F?_^vu;{IoAWo#)xJ
z6qBSsOZ!tCU(we0r6@~&YlVm7;HvA9F287R;ie@<<qU>5E`Gt}VezcWycZK#eG<^j
zJQHIjap{`(r-re$@GlDM(Cu?t<+t6I^##kiPmLcv2Nw-7QMQ7mH|&Xt|IR-m^JC3{
z$RMHi9<Z*O00~$x*z3j)6!zd*B8E)Ko0?QIl8u9;XHk!g!Ko!?kCy!#l<J+D&P|CN
zofjS3xn{}}^+ubm$w-$u(nG3HgWah@Kk0RDZ-nk;gUae)sVRO3#7Tl|zVkzBs5LKW
zJVxd0MJ!j1zeSz$z<M33;Y_*=0lBNP0|k|NM~glu8_(UhL}o38#y8}%_##tIl=dz>
zLj(K<^O#2DJfizZV*Y0z#4t611N%<yG0YHxX3j!oGh<o>`}Gnw(37UQEi%4gm#Q1G
z?C2ZtI+joUEWM%*Dyl4#g>X&GaZ(e^)g9oPoer*N+q9T-GwE{r&(pO$YvGiNx<a)H
z&w0_zrE>obteKD!Ml9?bZLpBJQ$hDXxd0Y+J)#ki@G#*{fB&ES#_>?70}xfFx|+>!
zvCS-|unpk%+9)dODwlG0=RGczfUMO(csieVpVcw`T#-8@&!+NSp@9k{4P0y45wUB9
zS6}!t8g+g~nc6j;=HMr(D;``3)UC0`+kO<)t)b1??(6TG#OKX|+(L3NbtSm=nhr*R
z?_KXH<-_N$NwzVP_3`$(Nya*&=SwX{d>9MlflEq#<#MjCG~eK6PK%nINSE=T1c8st
z+qNMei|@jpGgBn=m50%(u>Jd!qGmOc&F`^}34kVQXX*SjTFUzj_+_YjOQ&ATDeC_K
Da|R<!

literal 0
HcmV?d00001

diff --git a/content/en/blog/_posts/2020-09-03-warnings/kubectl-warnings.png b/content/en/blog/_posts/2020-09-03-warnings/kubectl-warnings.png
new file mode 100644
index 0000000000000000000000000000000000000000..967bc591bfd61206a61359041537540c2408e118
GIT binary patch
literal 303626
zcmZ^}1y~%<(l5NYh2WAPi%W1wfMAOT_as1Yhd=Hb76}1Df@^?mfFMb5_r=|VySpy7
zz{(}(ocF%(cklhCpLwRHyQ+IyYO3qk6{Dl2OicKc5C8xWtEwpK0RY%{002e+KJG&f
zuASn00N|08qk@8ts)7QOj;EWQqq8jlpc0d6fM=*bK>f{FPt_qz=f{T?#l)wwYWRHN
zp|9m$%af~c32|UkNk03%wxC2g^r`Gq!`=a5|2xvkX0GctLml0jo^aw+F=h<Y_uE0c
z_dBBy5qp%ru-EA$fW&cdCNIe}4wLyirucY#%P*Rm)`^Um<lh0pf_U$O!{mEoVq<Z2
zaPPo_S-%0gSLr5iOjhI31`{-&C@}#E-q9kFgmN<7nt-()%*+-5z=~^XQG+|-X9cYl
z*2_nv8&95Pm-Y_57T5n$f4#`o>&5H}2-VoU*q#SC)XPf$)=3}^r~%3!aZsuK0PNAq
z(sPksM3QpKOFajHlL*Jc=ExR?m{u@^BrkYIkHBa4k6{<L^AUzQ2G9frc0waY@B-TC
zE1K^%U=Ra%T`|!O>-T?ys`xnT#i{gDka&aN(N3e}*9<8%8GqUb4^Z$aHBt4Spec>-
zYn^u(9Nn(+Ar6$?cBE127gl*M?uL0)#YwCh-i`lE!ZgdXJCRRh;g#!ZG?U?$@delq
zG}4bOy=!Y(Egx)C%FODXI5Ve-^~XY#$9BhXlj>u%7e^*-(MH!Yi|TA~DE@R2JY*3P
zvul4<_SvAvjY!Ct?F+u{h4sD>?9Bg5E3dgwg1}prv@@&c4SBNJv_H#8>h#-B<5y`n
zBob4SpSQE>eg4AOuf#=2tiKyq`{{@3*Wk+Ls_+E=ktJ6nv+Q0*&R7`B>p-VyO{z$O
zuZ{42%m(pkgnvy56TdD4=eNWzAXQNuo&felD3Lq{5tro<cCzf_gc{#zzYg<*ME7<)
z&jez{_BZ)YG7=|2ERkc_I@qXi6>Q3g3;8=`rSGH%AmV?fwG9%cLGR{3tTa;L;y}eP
zDY)@GNL^x&?}^lhrvrW~ID#`$bFZye55;vTN+-DR{EZ~A(z*q$xP+2uwY)nu&t;c@
z@gK)5=9WA}Pb5i?X@WXg<>}UC)(LZS+^zF|7@{<J^W`MBNM>!aZ+&_jq_-|R70v+t
zk25_uTnSA)wD+PS@Z`qKbcUw8O9ykV++g&>Yrnrb9dWr*rdTNw6pDvP>Mt5CIwdH*
znJ7QZk9*-&@oT9g(GBSZ{Z&nRt-Jcpim3Aaoazym?^DU>X)J1AY^U~7%c$4>?!?kZ
z<_cIV8~2+7ky1&gi1QaRZ&F`3OgH#6y`TCVhB+~XIgPuim86-hUe$xc`xrqOZ7B8A
zVooQmIjflt@XPJf-HWSF^XO994EwgdPv%&pOh<=@l5iy&;+so1qBT+QrP8iDZQJ9|
z0P!~*I)g;h5++wn?e$@gmvlMWG3Nlv8Hti-xF{yt4`I4Y)NJ9e1u<rf9?e$MYhZ}9
zo9JK;whLE0Ey2oar>?+4U|xp@x|7o5aJCz{W0+vnuifnf#$?6(u>#4knVG#mgk><L
zMKf%KH?TUhkrF86CHk{b4aioJapx)8F<m4G+u&3^p8x!s70QB_kl*k4gSatlNkJkp
zy&sQK!Lb<QpSXqmE?v<<x%_cOZ>g_ev|h!I-|msuV3x}J<@)UDUh)RwxF|z%rD@x1
z1Uc*?8?Br_$M#q`8d7ug*;y7CzI+=wZT000()OX&+H@``J6gn@`h;-So$cEPqO$=w
zZ?I6?<JGX)bv`&df^p>wm}8v44x1(%7^Y0C-p`@IoI*NCu!w(8(6{b-z|_J_9;1<m
zHGy~1``YTUhlGca2bPCeWz5{GVA&()L=_G;8a)7aS~n+Ef|`nxYO{*63XLkm4?i2e
zD)#vtdMzzh^?{x(PnZ_W5~c*R_7qS`w^BaO@7DW};+Rs9QkwE=FhC8jApMuJ&v#rM
zik~m18m9>V;ky#Q61_@IOG~RwE1#j|i<zM>B`lSGS5$N2*jlvzC)?5ForI>UvHYTz
zQ{M9T*1SLa*OwN7Pg_IVKA35OUP0BtMI+;kg(H8c{~4Ppn=1R$R*W=>%Cj!&n#laF
z|3km5T6?!eE1h3y)-3(^&}>eD@y{UHo3F0%j0$ca%u3AKR;*fc0*kJ`?Im9xUv*tZ
z-d$YP?*adS+uLbHAMq=+XY|btijVFIGCdWiJ$vN&Xz)>pki&~T(J8UZ=Nh8f{}?*@
z_gCb^2pwli*)e)?dkI`TyNF0^B<oYLsp&7C*~^<S-em6W=w;c|+g$E7_zcRZ(CF0g
z)J)5o%32cY(ah28%g_>9b_iUmaf<FBMKgyp7bsjmZgl+k^<`F1mZsREmG5Xt-%_Vk
zr-@zL3?d^S9p?|r97~^7YL8{CmikBA?*-kSsoP{jMZ5~sQK@~uENUy7N{35WN>kou
zmA)$tEM+K3E{QGmGhVICU8r!Wa(+Aie9?RH-9lVlj-|16(4RP~zB-D<(n?9ko0*jk
znI070ec(Ok<KD+oQ7lnUqZZ@5`<VI$;@-ri=R|8c7nu|hYtdxu+6&lMdKFv*&`k9#
zDs5DC6u59%7N6?ukN?V@HE}GXpOv3|IvdoL(UliPMe-YX9o%qyR<k}71))dHj|}mR
zx%^%%CA(vN^@WRZLVTm3xw^T%brM;Hx6Ha^U8fw;N2E=oow)mI?9l8{`GgtB|3%Py
z*!6i@&}^XJ-Q1lGyyT{_SJa}flBQbwmONM?*#4gJ^8M-VvB6sX?5P{r0BwTKL218|
z_)Pg_NdhJp>H`2-c*zDa@d&b>6}4Y8{bmZ$c{7f*$g;3Jt6S@%=hS*^PqP~kZ5%CS
z1MW921Nw2)b5jz1!RI4(A^t<6PH0TyE4CydCE3E!BH77f6{x7s#w`5IGhpk*x0l-O
zzju7%VNYIoy;i5>d&c~a=@imo*CD`r)4}_)c!EcHHLfx?v3II3+|cZ3a8A<Wu}AV|
z2vC8ZLafkpI3G@SF0!G`AxO@_airm&Oq<m3{QPZ_b&~MUmqwf~r5hz~UDO-~Kc!q(
zcJ+<Y2Z>HUf0MM3@JdZxYcXv`gx`7Tz=L7mY@dDKpilBML;`h*{f8ic;<4sbW<R7s
zAR-|#sZwN<6_jS)b2_kPTQ+t??T+JwJ@%oa^G&CgZm2`#p2u6+nNKC0^BD6y)sj7O
z8=fBNA9##70}?4RtGRbwT%Av@m)crVT9$9O5T6lPdhZ>}YHX8we*8>cu;H&FH@dfh
z4*cfy8_M5Wq>Q#|$;)jAFs_VoGo%uw+z?_B@er+Qs(!0-`?d0Vf6D7mb`js#>jtit
zz1@AdcgN+<leZ!}qYYxoB3>7~Hg9)IcIHK^cgIdLD1_|$Ob(Wo8o`v!ROMVD(gL<-
zo52^iUOON|(#r3Jip`2<p2v7-peSEAjT&_wKg_VkcVbu1az9hJz6w?qABz(^h7jNA
z`vkmCv*B|zJ!tjb6y6ZtulhX{k#=gBTc7996Oo#4FjHz(`pony@Tz;dXh?cUtTeYw
zx6H9Ty3E1Qso8gaA^x!Yu<Z56*C%Ffbs-aX^>iQT_+1~Z7&Z?C>(3XGfK)@8+Fn|D
znWnyfb4$IE*2x!N$KfV@D{{Yk;8M6aSoeN`e|e>iHAGpxR@>)Ft2#&BY5b|J=5E=g
zDNP6gvLJV+*7w47=cG#7BHnZCkGV)lYm?YNZWl7wZ40YMA;wThCA8-8&#bqzrUGSd
zZYnMgl7a`aUisin)M^y64f%b#V^HB^R2pL;<2P`_smes+Hx48H*@>fklCPYis}iEu
zbK7Y`e5HN)aS#czkc~Oj(E-*XOf3efW52uhC)b&G)hqUgqX9XK=%`uXy>YAY;ply~
zTf<sVZl#OO;(DwcO}rUltM`WRDQuoc$Y7z2!?ZPo5BcuiXZ?y(4CdO>VB}wYGn2je
zVX?r^`!r?sMYHi$(H}_jV(TKwGEuAFNk}Ksm;{^ToAhfb#GDYC45@o-J=8a?y#%2@
zdUV=y=DqYM&c4dN)s!8)kE}&CZeFaS9;5C}ZstznXkaw&1!$nc0kz25-NT)44d0sG
zV5^sHeDCdHu6;q*_sKv#8L5*TSmI^nM)IGc-Z5Q>+s*dP)d1Wx1g#5*ARZaST-){q
z?EM4?^0!}fiC^WEo0DEi*8;=PAEs|QL(Xx(Q~Unfl&B{Nm9Cf{3tQ>{6vrLJbO5f-
zXq}(x+5|NGZge>7Rq&sky&0qj=&=GITkqeu(%s$3bVxq)#R@GPIA|_Zi#~Hb)2|>j
z6`~%+SdG48yn7S3dM!&8#tE-O)BKu_t`rJ5Qh#td(rgV??KCw3&mL%e01gH@0PBIm
zct`+@rvRLP(ExxN2HpRr^)R^p!-EL`L^%Sm|HJd{;raJUc(@;=|MSF3`Ut>#cq4zf
zKYYjhFK+C+?^ypuV+1^u0p#=*R8=3I`qrMdwys_dZr-~#!M`6e2;5bSyZ``d_P;lV
zsvg@J0D$T3_}b9hP*X#~+RcUE(#FlomfzpS{ck-0DSwFv(#6)>lF8r2+0{$JUz+7#
z91;)o-)sRErhl<`J4v$`YU(g4xOv(#z2JY&FUTT8$i&1X<!NIlp{MxjKjIH>(ku?%
z-tH0t0)Bpe{C*<*Zl3l6LN8yw6c7{^5EkZp;NbHLaP_wI=X3R9{dXn*Rga>rm$j#(
zySJm8E7RY4Ev?*qyro%K{x<Z#uYZ51t-s@cx8&;epKd*LP~dNgfDpf+!2e6k+tKd-
zN9=FOzs3I5uYWfu^|vyKH(s`$3T`egwyxeX|2^VT|7z*~Q~2NC`ENlTM}J#qLq*32
zNw0@K$p{IHJ^zo`|5^0^6gB#9QBe`$|0(%DO8$rB-#$oadpbURsO8^5lo65=_`mZ0
zPkudHFE?kOzwB>Z9ld29n)#Q=|B?M4DJg-!^YTCD>EDasU%3yfK!#9C;D4_u8N#m|
z@hAX57NDvq_u3!hs1+~N^i8c;+v$>IE1O8NnF>|`SAvd$?hkxs%2ZA%oUka;#OvVG
zpQ~7yEN~iZN~LY?PsHEG#<aO*=osXcRk$$ZiS~ckbBHAW^gBV{7(1PMjV(2b`6Ov%
z)F!{QhnT)ybSiHhZMx4+b`Q|AQ?S#}H~4d2EFqkzqR|^*)!Fz<15-IY5j}d_ays_w
z(XYIz-%P&}%VGc=G;z<>0qXP_4?C)Jo-65qIFG5md3k@r)El9@Y$0avjuwh-H@FZ~
z12x`lAs#pyX|_{nAm<$S{jkgqtbx`<yP)o03Y3M7fGZ<cO0I<cS_y|yO5}p~ZinXX
zte(N9@2CQsk;f>75{BKHThPi;fKk7{Ww-mSTpPOPybt~rwTM_%z1AMl(9YV_92=E+
z5fOSDqiCn)=Ld^9c)fvARO(4G$x{hP5zf@eb5!_qTeg_9m~$di(%ii0W8Y+2*la(}
zcVO`(IaIZs&4OHzAOl+ilLO=bezj;;2V|X_=<4digP!7p-<X;ry;79Jnz_c)9fzl0
zu)jlTODx}BjgD&dfo|UrX<p4@dyhFN>c_W&l?b-im8*`*d381A3Mm3Ylw#Kui~U$o
z;VEu?gaUP%>TZ$~q<sPbeE63(eFo=IFoz|b@6alx7dQmRH=6>yT);58P0;7^FCcc(
zOBS1|JF@8v6iq_t2zsSig+)4i*n9uQJ(enV<>f*T*@!Tt@|Nbvi!BqgI=*h`QoxVK
zK<9a)*){1WO*B(7od1`~P;l>#d4e|ElPoX}o5gkCQThBT7k_>=+nlaRCYpx8a<>GE
zbMzMc%&xt>p}`Q9G_dsr|N1?it&=M28-iFLj)}P`e+2{O*;!*_W8DmE?@!|##CUX}
za1w(h*?FGII7vX}oM;v;U$;+TG+#}5)RWpb6+e2Y*gpkY&CSE**!J~M1Mk<neKkB#
z3g%RPb$;u07UFp7q3b<t;xGonE}OA$twi-B9nk8B#e;W^s6MYh2lgMv??eBl8|YNj
zK%lOXz#i5icmYv=>vplagO+VYi{9H`yV);*8fYa&QS!hddqQ|n+I1V@@!-&q=`S{)
z&F=?t=orJ4?if=Ag)W>N28R0jx?0E3!A;9yE%}g!LJBHOh0intFT!=#O%2YO41+np
zD~xM}zr_!oc&SdA%PEX7mBGSp*~#xv<i2`@4-20~Qh^*;p@~w67mjv=#*A=IuuP=f
zz#`)aAuJvxNd<jG2H)ixG<+t#_1PL81_W<{Eylof4@sr{2r>^gMthF{bx;pfHQEmC
zf{ef(Mr9#MJcydn3`{p@NfuP6_@~w9ADvhHwOyqbg(6{9Rl){(dZN~6YhNMkGbIC`
z2W(~#tHh;rk0X}lSsj02fcASk^5rN_UxiW%^+!g=y?v~W$I8@W8aO#|qaa8!&Ai5n
zoM+@F?U2e*pf`G&bH^Sca7JpP-!u>gYxjHdk@7&^I4yZsXC(_gu0IxVyE+dSlEDf@
zd;!y;!<^B7bygGIqr846y@mj0p+z4wcoDHHoih)rMq?eLR%f7Lt*GO1xVlsvwUzvQ
zl|OGx?PnerUes${-E;4}wv9*FcQe721qIu?*aggDTa;y1=k0j_DgbA@e~W4x6SZU?
zRxmbW2-1SV54Qetm6yKr>U~wD^UvW+I)s{DytN#PxkzU=Ux8m+Z$Bd6?B~WY0qX|H
zZ2ba5*_F;Ls%go!)zXy%6()n~MYn%Li=sqPSOG{8q}W3`UC+Y>{!T|nzCD=kyubSn
zhyMHf>u-V0xzF$W`Xg~WtgXW0GLY!@Qt&y(^=<eaROviDTioE0_Nk#}3Hkh&^<8C&
zf1dG-X_pvQZWy?@xa?N^#{QVmVa5NAVC2aKQwA88Q5t`yB**slUfHb{62&TrT^yy{
zj`0l3pmlY77IK~}iexvxjfVHJUubxQ?GCB4g8PrVHiB*CP$i3*aJ)M>9U3bLwFqB?
zlWbj$U9LVPNXTyq_shQSJ~}2;`3U&m1D}Nyxd&QNVL2if9nWdri19*KR{On1BnpFt
zIA_-1zlUm>c@D6zVyCR@Dq!!`ux?CXuZ2~}*ibP=gvrK%C*y$Q_#KjMeq&-Y)pfQX
zB+VG{6_`7M`nWHTqu`N)C9+r}TQM!zD;u{uy>-J;PT#Q5xu0iS?*ivlz>Ep<&;*i-
z4R?8&?D@1?_Ytp9ib2tsRmsK$H$WWpT>Awq(0UWJb_DsWvm@YYFpRbA?>fgCM%Q1B
z&47&2&dBPk_-X(cYZw)KMRWrV>@ZY`F6iFmVg`;nj|4aD1bA%-<hCmF6^+N!WJN%K
z|NhNYY0(kR0r;Ktc&Q@_E%Cu<95X}lE-&~h>`dG;h6~QQ-tG*}<QnuRk@q7*7!5d-
z;gKZhtK>?VL{;}w(0F80{WBypDZ_yVaAqs4x{vaa%&zmExmVWyd(^Es!X>s}h?XF}
zkN(wCbV=$MbndT>5xb`eK_D$|!FK482Mvv10$reCOGk@$ZimoPG;sI|<aGO-W`lp7
z{=lnzb9>lL6~WGEK;+)}a*beDYI}tH!|AULS+-Nw8Td1SJBRM1?cfyyYma%`xb|D&
zc5!lF`<CBM=a{p|1@*FvoO;unUsR(m4srqYJikgjVl2B%Jv-S9T2^h+X<v$ta|~l;
ztS!Gqz}}e4T1D%LpNA>O^k69Y{lQE(x=A`TyD1#1DfcdG9q@_R%}aV}@LIH!9rtuy
zPvNn9=BG;ebQpx#KWQ%*QJu}rZ(xS^Boemdwb$jFaz9B-v~)-;(CGJcxA9Hs(DFxb
zick&{+h2pk+`x5?x8VNwH7HrJDrXJsEJ1m~v#zVOjnx$x&7Gn_)!h$UNjn5FXv-CL
zDx|H6E~XGgiwg~-27Ym0L|j;@&!RO;p?2UA)WY4LKiV}{eKSB~@CaHE-Gvai0Nv-K
z8}m0nPitfPocF-7U{Xv8@oE_{6!k9!<Luw$r>*q>d-Sy7g2CVnXB)-i^3@1|!dL-G
zn1ForHR7q0g*3}Qw|cXv8&KnDy1DmNYHC?a$x`D6`EJrvF7IX2Xv{)WC#P8BKa)G3
zZgP&);y?pbUtYDBlbjJTFp{nUY4_NV^=7N)3TTi6KII`D)5L0xgP-)q)4i3r@ssk_
z3_eKyaaC~2GH&HRPEvU6{qr2+S!U&}jf(h=czFgK<&7KSStD7V<F6sGl@eI2n3Jx#
zl({)rpfRbcdo*U4-e{vb$eyG+WoP2ov{)c1X)3vQX!7Ue8s~jqoW%5(vL($k7ao-C
z&`cb3Z8aK!6}$}z+iIHzbwP5HZ!cH3%E<+h`cVrzka=Jx*~1)UAz$3n1<M<Q1MeYq
z4<o8hkb$;DMJ<^wBICvI#g9Yp!Af=)V@G463y|+BDBcjaXrcAtniuCl5-saDj9Q@#
zQ8WvYUJewayd=jI7rSG4#YfdM>k%Z*?cG`$=T3D3lV`xeiI3-!udoxFz6C7RuHK-R
z&R~S;zka@A$WPE?k18&|?4r8!c~R=eBU;m#q>ma%WeiCfz7m)5{cNr*_@jjrC7v91
z?T;S*)MpxqLi=<%iIjQkL@H1wOslavcE-sF5St_j>`KgtHE%nS^S?OvHh2zm$YpQm
zFl`jytRZv{E0>SHu{PbK8yzbR8Adv;pPJ}OV<tqr4w0wF{G}nc(!!!RSZ*ur%TjjY
z&Ut)2c2cpf23*878Qz_wgvMQv-gO^(-Mhsi2q4d<kFS*AkIC`87Jq>;$9PQE*waJ0
z++bqJp@sbZjd_H~J=P}Ip;{dAmvTHiG|@c>m~yo{ZD8(GZ8zeXuN?2ond6<LJ{bRb
z#XRgIB@A7Mheq_=m4lJL)r<bP#!Fwj2OYQ0KJI}Wf-+F2bLV2WH<zoL5605>2eS6o
z{$dOPokNlbZ;~2E_i2f1i}s=SUqGZ<06g_FHxl)x{G)KgN&$T}N!`R+K+wE<t{i&;
zA4Z-@yYtT=ri!hE{zt=)T}dTQ(A7NP%Treem(rn>)LgPd44et!@U0UN2eYCp7yKmc
z0}rEA|Cd+yg=l1ilar%oPhSr2aUCV}Og1nY3$G)h#iEC~^-Q}g@EBq;QmmHF#e-Ai
zp#BOT?fLynh7$Fpx<vZpGGFT<iRHU(zs8+74uhISZn7h$ET*GS{dRo0VO#x{Zw2dL
zccaplcNtC4_69El6L@gm|4_v&X48(*)03-qCuq85FZpMD)@)(@#Q4H^Hp%QXjv?R|
z)1!*&xoWt)kpo3eOy5vm`L@7!0<$g5+YQjgqZS-pmsk|Rqt1L2X=m7g6W?p8j}XGg
zKmDI%A~ey?s0kH!Q;~<wo%!2G4hr(&>h-H3%~Fiagyal!uaLliADIR^48+MS@dpYd
zFQ+s!g(L0WIv<x+p?r!&PHv#+*2Rk4>GdcJG1n#WdNk@jnF#8;dxNf<y<3baqG5c0
zsoN1xqu$(ly}(nBZfrgK9iJzW+twAgy?XXX`T6Z>$*uj}LwZoC_<2YPngS7OL3huB
zqDU_nmlP)rX(uaR)kAO}^D6sngjWyB(qnqt$iAUh>Cv|}hL>`scslPMzG^PB|K@HR
zzjXTR<4p5OUJB0!lALbxUY<$El$AR%?%{}Yd4;ccJ~gH3;4U!TA09IM_RXfAKB!I!
zPL)Z{9-ceI_YLUSQ`UI{^m^fR;`O5IETo-n4tL}U?&JrV$)CCE1g|^|fDsPG23S$S
zj+J!JofFhcTE<ER$~*=Vm2)X94@D+D*UNFB{o1#0XepIW4|Q&i2K$yGh{3)QA7>h0
zdk_jM8RM!E`~k)&Fr5JcUka0thx@A!s-N$9v<A6fp_>Nto{IUvIbj>DpF>5)2ZRfm
zh&nhg-B55hH55P#+o3R)!^7Qx%2BuS`>O^2kOyO62`dVT&dCkg0HQ^54ToBh6R^$;
z^OWIBZJT1@2gP{sJx&W}fMu$uEyz0B>~Gh~$K-6$FWI3j6VGBy2@emt2`Fqe^U;+&
z^T0c5c6Ro%f&!(PUA?W$Kp52PNWk_tZ22YJCx^_Z;wnnb^00gfU2K+t?oegENcK%c
zNxiY5sRq~VJ>S{^FCwFs!E;C&jjul}#{A`4@$F?iNR#f8JIWtlYcGC8<(AK>l0+dD
zq%S<gTkHl)?Vl{VJVtHVrknZ_OR5aYJ;VJfCr}wg>t3)}Z%eO6Bpl4SS`H4+363}~
zlf=%(SC**c{y@qW$rCAeW0<p{!#%uto?wOD_;hD&+57(JkbFAgM_1t)kzBjnbNR%g
z*yd%!@m9+i^|AX(I*B~YjtVPa_eBj{h}<U*&Pl0VlkIM?Mnd$~@!9@U>eemtt7KDL
zU{8N~XXpov5f_RBg<IH6!HL)@qW?`C?FS}v0u|g4q<|)Ef=w7UbEKHjr<STpX4}jJ
zKQazxXk)CoH}Gf9(Jyr-s1!F1c&fX4*r{%Q={y}pNp|mO&j*9ig#1t>!2nOmOew*{
z5FFq?pe!(cf^+X(esAxQwvD#e45%7f^(^uYhi3*$K;&1cLlWD1_jMKn1B1f@r$hG{
z=-@B4+3`6hX`XY&4Uf&f#=xoRDn{++70cg(j`v@Erp3TFjtATCf!@a~`z{ir6ek({
z$1z+%!Gd3!sfljEi$N$KAD?Dr#sI^!cm~P0zLyj8_^93M-m!hf%p+bDF?3+{a_qqb
zLMn7Nov&ACK&QK|=qt!g-X(QVA!*;9(XUFPwC%$#m^{*uCTRuDGwLrhbzy?9#TCDq
zuI#5^Kkr9F!)W>%&0l+_^}Cpl)?QztGKU1wL%fM625;aW!hDo{YgmqbuR^<D*q)Hs
z0?4P(FmxEAw|LZbkDOT(TATC|SmH&rFpr*LJ;j!F*9e^@#!K{Bjy>^W{U_E$mpdfW
zPTG(B({y*_WycE?yA58BPMGJ6rHAE{Pd{E7aSM2K9WE^Y>H&Mkkc7!h@>StS$7Js{
zTE7C55zKmYC=1JPN5IcsRkh8frfqmwg<6J+cYG!<+UR<*kMAuUJ&>C#Uhsq;-ep7}
zvos;|V?-K|VXxJq<FH5>G9z-{N+O+YZ^cUf<I5Lx;g-Pbh>*#W*wjH|CLaHe%Gx`7
zxL6sQ1H4zc4;cYfgY3Yzt@DU0Jf5`XweSnu_n&}I$+ntLn%o8g5fkwzhgy=yA`_kr
z3llqQpvf|OFudUee!kh`niK&q?`=u*+Yc9W#|2skm4gn{$;t;QPxr_nPRi?I=spBA
zBfqKZ>S3-PQv5ZDtr~r1={tAlbj>-7Ca9!uET=U8v5T;|-RT8~YtejStqd_f7pY@;
z{ER?d#PHRzr7XejSzoySOKWw<;M+F`>3klhb72PIH%9}bBA0*Wk{y_rWL-1$3sU+i
zv6Q<zd@ZYid7z`s*z?i0r?Zg)*M;f)ubwQpVuPMd;MS}`5XwQv5oWZ2ddtM2wZkU%
z2%cJ#wOl@ri$u%tU5r^6mw*5k?|`Gb+SlCduwPXjZ}?je0@59gew12^D{+K(ZKhL4
zlAPA_`wEl?t-J}d_azDw-Jr<!v@q+F#kAFxgb_-$ed*q6$Fpq3%otisqkNUEuh3L)
zhaj-ahtUj53v1gaxP8xxaD!{23c<#%U>8&-Qs}-p@d^ql0eMfQ@f#iNjOHAg1#H{a
z<2PeBH%~SR?iitGN{x4C%1jU8S`sB^ai>3n{7}s&Jv8RtPH)TO5ak~~;?@{%HcdK2
zU8NqczP~YD^Y1BrSF1K-7drbPP$uqvRMM?E-8^u<)NCM-a;IZ;Vc{8^j*boo++xb=
zUS>v|El-y-USoWX626(tPG1T-ZH@A~cOeZvc=X$i6Q}YDM7)wN5VZPW6rD~|4N_<L
zgPmF9q5>MP+qAzYBe2oQ?waU(C~7wj<TH%`C9195(s)0(sju?Skeuue4~Pu7;~pJS
zg&NX`FMaTueC6&1>R#a`qOuq479eXym%~vO-#;Tc9)CzAv7^V6`*0ZSqVV2<qOV-?
zuHwz-$je*6rwI;lsePKThhO>;TQY!QVbeVDgx<j53)5Hh<F8FV?sGrzHlv+;cpB`z
zxz6LEN$T8K9>p8s<&sBxos~wN(*_2OSLLG~J^8&VPe^Xhh!kCYtfj+p1-ydYm>BJp
z65K=?8#^R#w<aiR5<KG}F7r6ZT7kfzm5w}Y7F83my{*U18c&ZgKDkFtr8T^8+G)u9
zRO#@O8$ZK<KDy!iJdfF!XbGg*w~mLwBrI6(Ff0njbQPXV*nXa<!e)X0y95hR7a6Uz
z)4)Nql-}3ptadQCyyR2899_i(MZmE%B~VB4H8`8vM|TdDTjPyI2nFu_Nu12!{FLGb
z3c#jZVclCab{k<&eC~RYMmQ=qSiJD>fB9Cf`>!Klh*J$+Y(YgErCyP|?AL!Ey>d7f
zTW#MAMIMLLyDmT7C%-H&v`dgg!L^$d&L-mEclDmPgnpZvVwRtUPliRt6fI6n#e%M5
z$&d2UK9iTp%ep{xgK?#2Wb=L@-2{J_FT_thjn`vL>Z0Uu&w=LMUXjMv=M(QwydYkw
zsng%r1x^MyA+IIz0~;yI>9qmb0Xs&nW741!3AtAlDD>?Z*mq3kzGU3zkER&W@+I_b
zso8d$SJ#)SK`^8EY>CmA@(Y=mHM7`HSTB^mpHnD<I~n|rI86!5C31iD%tAOJ!I<$I
zG6!G3evPEo!IbiUigD`rP2x)DOpKun<2{zYXvrBj46P!G`q}c=ja2vfF^(9Th6<vG
z(a+I~C!izL&<W@mC3ym-`V965vvq6irBM#Lxgt0(4G>LwI8e@PR<u3c*}bw~3=<uG
z5>H8vA|*aSzxOWPJAXW0<fySbHBWz)UkiSpr2SG=6uN^wnci<g^@Zi0`76fLRClWI
zfKY7Z%9fU;(x4l@bj9`(Wh?1DLb#8*SXp9t#fRtA7$Jq{ng&LZ0&|_JR4rkm`<+-Q
z#n7*|tT<zyDa?r>VVX@CQB2RCsVy%Q)~8ZCM*7NTySdjabdj2{00?kL-7<I8exLPM
zkIU^)f^d{yCQ<YD6)T%H3&oOaXH$~bai%jQsGW0N1@XD{><z`6KfPC=b?SKKA4)Zt
z=WF~742vDbC-{9a>T$-t{N%`i)U%d%O&Br7o(z330#FNzVU#~X26Fm^Ds@0fQq{M9
z7II^-ZATc{^li2D45R`@4n>6a`0&3&SHl}4PQfAf#tp>9_Gi!PP%p~d63Q3T)_vIT
zkL%5AW~xdNUAF?@TO!O4hb&hH=%Ld!S;sZ-Oo@@}xs?n?u2WRW?=^Ie---wH_Nsh)
zIZVJh9fCci=!+2I;*&&#oX1KoDbbj+oo=(Ts3n6aaqfp0g0?gdq@X6>zlGd6-aadT
zy+#V>)FhFHCv29r?mt?{<u5^NgRW|tZ&pC6G5tCp<Dxz|IXR`4A9`|b&hKU~V}UEM
zewe$CN=t`<0nukc*E;QWJK*kZ;4J6@I*d*kDC?EqA>2(Ie#NDkf#!`(Dg`~`tOn(g
z+ksyi+mKaX;d#l=7@NAwWE=`8XURlD(8E!b2#8J}%=!Hi=tt;Yb4Nz6UR^0QOrrkt
z3tl4ejVrn?2qE-yuOz9V7~{ycK--owgD@x%rO2|KPv`I4oywemt4th1wUFdb9?n{&
zIGV&ls+_N*xEosrwA5F5^tzI7JF*%<hAH!P9bg=-O!CEZeOOc+2Qf&0??pmChLJE<
zU+$Z^VAaF3Y&0e@ndL%<PkJC*J(D0P-eQBRy1<GbBY$+%B`{segKV~{!Xi&+y+9CQ
zF$v-uKREBab)~)o5@$~xbYHVb62=vCg9a$dr!MHXh~X)gNvttj+gZ<4*U!JEW_6F5
zZN1b={=PVTzM6u-;m`ce+cJ8_(J6v?^l^2|?ZFj_rxwc+^?R^mT~{A=UZC&nuMK7g
zk1J8699Qv9Pqv4%N3D%wmh+TimrVVZ+2v&J)cP3wvKQ@7Tet7Ni0w4uF*cY}qU!On
zA2Ujc6V_A;?ty?Kd}`E<U4@J%99r3-Kt7)3ab|^S)l2wG6cG)-cf>#cEY(nGdv`^V
z_+9LbB+HuU>n9uIOBkAe1Zr!)ytNSv9Hy<e=#W2}3+m+qgBzv7hm^x_G2#-UA;AIH
zY$PY0RebQ(ED*5VmfwprTW~}(LvV$itUnmH82|}9;I8qT+ZP*R@aQIU9cK!re5A;4
z+%$#UZwpF{JdGxKpB+5uU4Q>$dAo8`Y&BTlmku_uk!~I`-x}W+sQj6>Q5TW&^Dizt
z^?-ERp}md;Tq;Y!i*64Ht<&LHs3Ewqz1WX4gqXy#?;8x#3Vwsu&ceB;Sg3gZE#2uZ
z?sh{UI<>;ZH7K%W8?FzF1_B5Lytfj%8?A94Ke6&kQhCfX32(;%65GngK&6VZX03x3
z1x2Z8kB0jE+1L8|fe0lTS9!ZjIWy_1%Fwrvj4w6X?)>Zcb^u95X`*#bdcuf-<frE>
z+YFlgVda~X#Oaak^_2dTG2Y)_;m6mKTZrR3U)y5DJtD0#C%p6(Rl*w0OX#$~YcgcS
z<(-PGDjdBkD=cOl9{_<ZUq9oPV40-Yk6_Z}oNd!`+{8h<v$;$%#E-4*SiDaUp-S+H
zJhSgJx2$kU5w%8$af305HWl7?KsXrcc|+3v$#IJt(maH$8@#kDP?jG5t%BA-QQ~h|
z{oBLVz@2-yfL9GY(80-4op)Zj!<zk=^CSP@^$(+@j<UKa#!l-RhN|RKF9^D25sXH@
zxfG9MlwO#gdOZ}^reW}kv2mNm_C<h-A)5RwVpMw9r2fV%h`<tN&FzQVS;>N0b5Bc2
zX}Az*X#Yb0lAMV=t^)qLyY*&;PRM&DV7HNgf&>4PZvLxAk4;~%`X$fUy^cJkCE{X#
zuiIJEQ17iNG;8o3cq!Naq;a=t*>BbKP7fk;^;5fXXNUS`Qr+u}QM#qsZC+RmUrvJq
z_nbo`o9lKUnX@_Ku>{wFnD3Em67&IqP(lTdt>I(y?t=&UpZBxSfD^!myDd|ID6Xo*
zJb(?svxh@ay>LV42c&QD-F?vwINMni?f*w9Hh<tKUX67xa^AcgScf{gI}`{3Z2wkO
z>=OER$;~1?yDwln+&h$Mzqn={d3SV2Q4)n0uHSYYEOtJ#W<RBwtt1hrCPRkZRnT2Y
zJfKsQboEFgrWwzk#HHhdAp7zh`S1_{lD%v<;&n-p#aZ76SDD<;@1<~<Gtw;2#_Db3
zgW>a$omLH62RJO2jzKZ}!V;gHs+5{C;*(6U5kIogDdYmUxkhtxoQ_&dAG+k(HrR8d
z`t%!iUe*khk_eNcq{Gx&zn_gzk*!+y`=YkP<kLynWc%sS`DQjBvpMap;W6LETsjN-
zEwi?@;qGu8JVyn+y^vr-?OT@u6xrOXKFHaFA8779{4Y-sSPjj_Sp*~3<75hj@DB#^
z8($s*u}qhad#~IECVM8DXm6k#8X0TX@(J;2vBwQleaP|(lxFsGGRd`9{<H^j8kxdM
zAt~E;2Il6cz1p-STt-Oyit@U;w`*la%@P8rFQw?sbK4cwX6=Jol-9QvXgf=*(@aUs
zjQONLMtGvgncrF%9--MJ#SA)vnS=udwdx@}djzyIMuIx)uU3cVW<Uq&^B^_L`$f>G
zQ-}4%*bdM;%x^|R6s`EEbq30m4u3d6fE)}LA|T=C!04vaS#W`>^2EJ>@e?%jqjPWz
zgu>#Z7cF{R3kl`x6M&?JIz{@^0xKgMw$9&)8|L|V*M{F=P*t^T2>ev+p*72E`3jNk
z%FhQxvhj0Z>Xq1!t1^X3blRCSPv8~)pdw{wbN|SLOFR)8*8XS(m|R?<2)u?77@75)
zs}tN;5S;smafgI<xyl49VOfL$8~P1Gxx+*hSyUO$2U(l;1j1A>ZH#>_o}h$yV%l%@
zy|^v<^r9DfKXvPVN$<mpyZuGkR!4NpUZIdsF2F_}Fl+?-ln#&4<1TX683;sG>L<=r
z34rLsfeWSv$_sDOU%Qb*u^k8qkt!tU26kg6HH$=*VEMN?fq~*Ez3|@2XAp$66!I#^
zY82K<UySp)bQaV_GLZEE3EDi{sRWCnyT4^3!x9tFc3@^)wlWW6C@PvHypgIDlr%C5
z?Y%l&4h*hL>+yaL3D|kU@`Zh4_e(`db{ueRZ||Ucvt0GFegpSlLktCn-TilNV<Ok=
zo^&Qm#Fwr(@v`;2-FI8hD)I$V)i6xzu`%Z3q^i}|An|>$9RF4X$gvNok}9*RRMxF6
z+d(UZ$=eRlc^7~Pew685QPSEfeTr~$aq)^x=k=s}_s-Pm5O;QEX6Ng>uRZ$(=v>f>
z3qAA}NKd8mQW?d&O{<UUfKar`TAskO(6%Vf+PqmrI>GTNs8~mX%i5y?B#Lg)aYn_M
zZ9SZDqeV{d`Z8<yP<Y49BTxn@bSS?oI)mh#A{RR(7H-pW7BkCS*O}-4zSugzfkMDK
zpsicf^8Km_B6_srr=oJxYblZQ;&`WG;lX?gy@;7Lep1%sgM;iY^#YNeg3#~BO7z8)
z24fVFZXGO-ad=5TS}^e=w3$@c%~PoeHe}($e!h*0d=EGz^b8^RDQG>4LOsKoMZN9}
zpazJrjY-Po|5G_dRiHL!ycU6xJ%P)~NGom~M0}PANUP)?{Sm1ou4=^qRKk5<W>X_x
zXqjLLw4oLF6Zej0Fkr{rbe^<6&#6E?RX${6EuSGqZZaqS8?JUf_N~pwpr`Ep%9t41
zm<25XT%P-J{9-lUhKeNXN}IThm?3F6U-P{j4*R@}w@6AnC0Qr2!A2+}d6{}$w5Sm3
zVaqc1#PSX=%k}}mC7Gc%#T!Ps{<*`7m4}4NJufstTXU}{7rCnAHeaPRv4dMA?NPTc
zzNw4NtZ4-|SZ#kwh3%DgPQPes_#u9`ZGHy7u8JcsH%BK07YRumJk?s2cigDOUPk;O
z!<jX|eiJTj&btP_yb({)zM{b|`qd=yEA|3%3A(G|T_d?pKP5!0qLJnS_Dt&pIS&0d
zazk25DY;pb<Xyny$1s%I8U$u96KDQ>@j~0d4y`oFvKqdrZB9~UO9(S~V%@@R0;!uq
zi{56T<`J7)Lg*ocb~Ac;dloosQ<l6H!3}>kv9Lco-d^+^7Bw!At&p|U=FGSt2n+`9
zWO^QAX6y8MwS1n1AMk4*9gPSPc2+TFB=|of8p!fK6C>hM(OT$o@!t_L2uoMQ3uoWM
z=E79o&h2KV?P-6);QZjLP(d4bgjr2&e!P54cgEvp1;wJ`AR<~**8E@)Qfq@jM<l-X
zbA_Q|XOn%#)_>y#K%PRbyRd!0!pPlDis2jAYp<wmKVO9PV2P8XBi<1Snb8N(#%j9m
z+$}Bv!v}^sh|aBLy?>XyftgVpoZewwy+V%ewW`Xvu5L)Q`b(XSMlbCJSQ3Uhf@sXm
zucodk<_$2;!P=Z7SLmbpN<HmhZP<A4(avY6FUEUk?Rizbz*O*7q(dpsXYk=={9gFd
zzc55?J8WY7BfR7Izc`o`o9#at$e!T-W|YhA9R;<TDfsz!>ZAC!;%p~}-Z!t`HrzD@
zmTn{-vh8r(dmxDqX;!O?v_-x%#vGPU?dJiFm22JH5Q7mKA#%CL-6ChGoc7prZM_W9
zeRQR6P26r5q#5;FL?al1haGpi+>E?lJpX2oP&v3Q|Mklgv3ZZJer~;M43CcH{8@xf
z#Dm^Yv)<0%0ojxT^t=BCgyggIWA8qiY$VS@8==8N#}D8g;mi=F{a*x6k=dqI<o-U)
z7;NPw4R@wLO(5CTDMa8wJ{QncLqksd7l-R~5s@@9IP~ko8-EL_`yih%bt{aXF9i!Q
zHVuMAQ${UInXv1~ipcB{Z@<pjgX*utpbdi(f^5*iDjcR_;>#yE0LGd)DWQfmRr05(
z^QZnsiU|KHTOY4#p4<K{%}x6=;?bH=wh+`sC+6+w^zrFi=$*a6n|M!3d>3+;6rHa%
zH#s;U1|2|q4C%zTbbQhzUSA5vGp@6*J`DUKcIJ9z&#P*ghRxIq%HwUGIQ890|GxGi
z;ccCre)KaH^+W=NNd4L+i%?WCWp>Sm_vN==*t<5TV<Yrdb9`N#jF-)VPB?o~l$jBY
zoADnPIM<j$5cWSeMxUTH2Ovm6nbtEbCSdGn547jM5YWHCwjH=ZbUcl9g8I+*EadXt
zm2#TxNy7GB1kqp}*ADn|XVC3ltl)9=jm*hsk<mSNaM@w*m(O^Q4Y><QhPu9TA9AXB
z&6>-sJR8|Z13;~G*Vf-$kb3;r@v=l;pmhd&w=?FZP%4ly4!RsKB&F|mSJRCi6cF&R
zSJ)zg4g<Z<<Xjid|CqdxQDGr)c5|3tYdinq<j!q!xdv2;ED{en2e}~YufWzQQ0>4B
z)PdilEEBoA5ry_eTi%#A%%-tD3%k;HZ3!v^nfUAQ9g=uiJ_J(q-Gi`tP`C_X0_1vU
z6aIX@RJ&{Tk)kc5vvF6t2&{nGp{eJQWT&i=;#+Aw<pt1Fx`hi3#8a*CO{M(4a98XY
z?8d;?Tz~jsPB^dw*O(@CB|A7*x~y#3d+Al>%_rpVQrC{ia-Q%i2r%PI-ooRgknPxm
zv`YGihY}b(1R1XIe$CCOq;=?z=ML$Q0ZL{K?e>Ff?z0SQ3s1kUr%(X>dm!#>x`gkf
z@ui1_CtT7*3c5oOQNhO6v0hhr4H~z!J)4n=jbsAJYn;R{XG^S`1>0Ex*3hO16LkfO
z-=UD=P&|uhbC|asj$~ZBHtb4Uq?>C)A?Re!srNoiM%e!oof+YZSQtdyM=E6}S`<U=
zZa%z?O&DfQ6z<Hm`DFkEAPw*jfEmoV9+_;-iEu-We}W$@L-{{ju#pE;jVf*gG$;J<
zLvR~GJsc|(<>hq}|9aA`G(7?Vna|vZm4S(9_$ZM)ok958GW#|L(kc<bmPqge{J~tr
zcloagTb%)C8tkAi+t4EDF$75K@x?=c!!ZS#2V1dwBd`@_YfOP=rj3F6Gkn<)KuIt{
zEf?KKq>}fp?AH47n=K%9p>i}(3v!{MD+8mgC-zDI&<6vu6AMFY_8J^rr(ITktk2*|
zh1l`^8$d}WjRJQZsr=v%k$`v;3a0YgJ;DWc9E?1NV^?-YNj?d?r>;w6LLA>T*YL#U
zDNC4{ddOkyNM&t59&^ZH@7uLjaDo5J7vYxV)=B151oSS_A@Y`_U!H%m5*%B5S{~qV
z>^?O6-42q>g3^6jz(heU2(%gSay4?eKhNcC5?guS<C9X~m^3Mjdd^>EQ1Z!O4G@Z}
zn0XGC3X>rp@wbpP^UN`uUXNQb-Cv|fggur`q`Y%Jf!~`&Za;vPcrxNEaL%eV_j`Qi
zK1buru`_*4x(V<DECoC+{`cv`y$zBKElbV6U}iRfX%8mdyvh)=eu&zOFs}V4_5RQt
zwV{<A_u?f7xGnjV6LcHn<m&1Xfjis4!w(H#W`W2BKe;|@dvd>XXMSEQNdqnWoqe+r
z6T?c@Cjk18r-cax&|5@afeyjB(0Ybk5+rdQ$@`5%?J*zIMGs_oNwMeQ!mOI0n}T{Q
z4^KpSgrbD8==0_%V2EMa#d^AL3QjO?$NsrG-tn|L>I0ocCff4vdDI>Nm5C-+Cs-W+
zqg5$es#@{H7oFe4a?{GfNDo^=2mQ=MMl!*Affc0lcNZ9j;5{8UrL$tg<J}UFBD8l5
z2)4`eH*%mG#dsCUP<!=}d*vaV<bCJM6^;XK<R4t&*i?K<!CxvxLYN;1Mx0(X{Sc`p
z`&0ZxqLaN4+*@is8#>nN`^;z(<9J-ZJHlzXqkt+{F?BT0L`dB!+^_z5myj=K$O3ys
zmRt3C1ofnX6q%_!B+V~9&V9cU;`8P3>sh4nwr1PeP$-aq6d}%fu1BL_wx;IL{iL13
z-_n=W7q_Vry@fBr)^WT|cGfqRE0dzzcK*D@IVDR5<~`d|MkcuoM?HP<=ox)dk!M~d
z>ARQzkpKMQor*WPtaMxI;?5Z-!2sN#<>uOGAX+D>srcrO`TjjSxU&Fbif@e2oH{-<
zqjMWg8!~AL_i6L+D3Br?1tq#zBE|l-*%7(7et?)v%iJWbkeQ;#*aUVHC>hvZ{z*L)
z=_Y1BN-ySjVsdkqAFq;7PG-KNX*~i$RCIyP4p*aOYNATujxAreN6~FV()UNzCnI93
z-r7<^L(6v&#>+|U>MZE48Sn*o_(5^w>;53jFVM%Rz7w?X4zgUFpB@vKPujdilu0ss
zJDMvq6$w`heKOj3HF1YWL96#ShQ?mTWLL6U!}pSa)I_kjN7?u`PW;<MmL=Oa_mK#z
z&msG^(u)()lJ38Z<CR^P_2ZikIwDLznkR0%N*nH<IaP#DeNQFjG@hU=Jaq8V#HSQ}
ze`FZOUSJ%)`iGi!*9eS%^PJ@6aOtrksmJ!}()YV(M@KxlE5$ek=&^QI@}U&7Y@;z@
z*zEkt(^=8x+Bb8KhG5!-V)s<=r{0T>YZ>4urZuZ=2}Bq!I6F1H$7qZMY#D5-4XT@x
zpW?E)wh=|;vEVYR3NLjOUG<BH1m_1V2l~C<CO8RQ=pqo#WBoR!tY1vi!=iy3=u;8u
zCejBYL3`X1nUMn5@kn&d2uQ=+YEe%@)O7U{eh)yrUhNj_1Gg+L1f0BvQ8u=6zvb>#
z7f+AT)a4JMf2hfC<Ce)U^k-CRMV_gRkkCmC=Xj02yu%>Gt~bj@<^`Si(Db}g2MJU^
zU@OZEqCUS;ViCIhr0y$ocRU#CZAD|7B)*{RX<Pkwg!7=ZA)vqIr(SdZDtI$hMhyYV
zoF2LtKXuTgRniD2$q6hDy4_AU<q1yhiKT8<BBHrv6c39NvhHiTNf+?T)IwW(d<F+R
z#-7!9h?=DaDG_H)oinv;I3EISEDs@jk$WFX!4pg0-+c(!z_EGIaA*m#{vKqMEc!R*
zN<?SIoK_vzYzo=G3BIf;=qURra_rO}<<-KwHJv_D=YbYniE?3uion2CXILfh%z$||
z>P-yE!O0CNGTIy-TsUosLJdLpGg;p}1`8IlM`8oFdlV*{oZ24hv!!09uu+-z4bVw;
z*W2gwvi)(BPZD|TbibOdu2Gj89e#}iP1}<0u_hZwnD3KSePCRc!+#nnBOc9K*jVdR
z)EpVRXnHTvVy}(qFeiX__k(YL-2x_yI#XVee46!RY+>P#Y2eoLT<uD(2T;4CUph)6
ztq(n=`gVl*Sz-Pe{^{kfv4$CT&8FsfPi^1kJhp93f`8Q8qT<0%IW?Q9u~m#|#F`%>
zn0$bA!kQL168>a;bg<jA>f^f4(2b3WO-f6a(`_JQGcz#;v>0nqUEm?sYBlgaKd|T%
zTcGP5XJ^H&@*)x4Ch-2RTKgH#LS8@n=|%J@RSkB<+7y19T-I0tO6Jh?M0>74`>k6%
zkk<E2O%i?!jt~!;kbQOjOf>?j1+<OulUtAyH?s0M1Wna8rw)8}e>ME=I=(_2eQVYt
zj%o+pemBtl;HzPYWR|)E6Tlfg(Ao%6-UX9-98tJMtT;N1|L!&S8P(C)o^JkfLAu#N
z?-x2w)T4WR`ZbBIafM|Z8k4obEj+6`u}|hm;lQ|dOtR{h1hnei{Hw9{f3D4KnK!Mk
z1t2JWbTQh@g$22bn47!@PD_#nJVzG{ZwXvXZk78c`3lUL|9jhc*Np6G`LZlIjz`FS
zc!P~D-!(b{?MN>6pgR#H?wy(2%qXfThSTO3aEkI4*fWd0@=nTnMbwlJQ3H+;FU886
zK2tXfMgQE*ZNCszb?QJ2Uh{(`Ym%nnrF4_`wvjx)i@gaXs#Y?+m;I$`MZTE(iZ#3#
zp*u5@2yVSD)|L>ndcC^FDNX-*?TX<2yh5JKPjx=%YGZA+DRRxq-~q6Yk_TcX?WOg8
z_x5chrdwD(_{bkTY+a>Ja{puK^=Dfb?C4Gs`S{&@T)Ke@;Jx6!kswhEmCMkQ^>5UH
znOpYeC#NA3N83go-1qXVXZG$Q<MWBW40P{Il@)$3Hrokf26Hwf!YlfA3cswMItFs9
zjn}bnYO{#4fC)3>np^%CS8oB-))%#V<5Jw6V8y*?kszfwl;TB;Qz))QQe0Y`;t(hl
zDDK6Bdx27%Qi{6-4G{VAfA4!|?tGJ(%p{X!PWCx#?Y-A}e$Sb~*jGfCc>dGn3AmtT
zU;oo5-(CXKc4sH29C1@vGQBoEj|#!|MI4W~y)vmcj~dPDvI+|;6c85fuUc0}R@9=}
zkpF3NK@pF@|MIyQ${D>bw#<5Z8hM8bo%nTL^Tbl)k5kAHhyzEFvyriXhTcGG*j^7B
z+NLIz-B(J@*fuyokEJgW{n=UUVAQ4+2Ij+w!<r3sb9ISYobG`vcLe)d+4YA^*P8E&
z3&ENMqhfXm;0t8_9&nuOl`GEaBxb69lNU0#xJV@#SGqnKuRGSS%{pqeK|DHx0>UeB
zVXTzui@3XUcE`l(0`xdZhP2n^g<bet;lVy!iNwgp38G|akWH_`QhY>EUrx2xk99@5
zVua4yTTiS1#QHUVHc+ctUC1W&-xdfA1XQgqB?(TVzuGshs#5a6x*H~m%ufXs$PYqT
z_Q2!7*Nvf9z^WG`Xembh%o2L%^NYIqeqW8^3dpgU^PdVq0q)rh{6+m=7^<UD5a~`-
z5;wm19x4yzhV&%xd#mF963(XxQt2I)e-hK^Tk;UP+u^wRd}zbYw$$B)iUy`beLw|f
zdqa}jKP{&C@KK2yJ3KUyMH(sAUeTJjPq#*3NeNO;khC>9_UEx>6Xi9UPbuWHC*!s~
zFokK_x#I&gof5N$uioTC6agrO$ExU%3viU1{e>#ajCVUb#2BVL_mLH}y)gn}TLb<E
zp&zLB5YBtdZPfDrk{`em4CL`Cqqq|aZwyiYKML~|<o?iWdW*MD#J>FLHlnTEIDrw>
z)<n;{c!zAIM;0{62zA^fWbaLlb2UtozE!}S7*V^VAbI(h{s%TCqo2H8|6OSV1KFF&
zP$_7?X}C<}cXjfVTFf}l+->)_HobHyqT?!%Q8LE+la@;`I8Y+3rBS&|XY1xtUg`rO
zDm=e~Gz;$~q3D=*#TMXT+Y?T9a__nAxeZKR`rm&Lag6$ZxfSV0>4sClmZ+Q*5-aA4
zPZ~+JrCy?V$9$v;T-4S%{FZGqATW1PjYD+7Ln6;Qa<XGQ+wPPjjPcgK<0YBL0}%p?
zn0De!#4aJs+?1T7uOcketsp=aZmpLlANgmjp6f!tgzbh>2D?I*PlP#58}mM-J@}FE
z<n%M3h2#J#jeHMh$Bc#Jm;Em!fd*=BXHHN`*Xa5~^Z!-qGvyp_B*#NA)ICC-4VNe%
z_{dS3Q@K~^!V6~I#Xl&ECz8~lv9ue{GZJ)VRx_(vu%mhR;}|bQnC4aJ2^IvmK^qZP
zArt`PTW5GM>k5sN7u(F|TXDzxrO;5@GE7ovQ_!Qk!egv}LbHBvTg^H<Of3HY51oh+
z9ZcE&90n+W|DUrD`HwqkL#{jkXW?KLM$jS4@!=<!zTNG~%HNP(R-xw&iZVRhx@5%M
zYMA^xRJN9Kj>oy5R$aU=;=?$hpGw0+{pe=yUoL(2IHiPPdp7zK4BTu17rCX^RLlS4
zOH$u^9IdxGe_}}l6{kR;z=nND5+n(wWc|M+Omnz^Wn&~V`+3Vz4LcwJ)NGr5gO>QL
z{m;c|Q=7;96ZvbFEEP7Y^aCY6r$B~#195I<H9g5-5}7a^(TkbD?)%vfCb=%5qxdut
zN$}B`u(4qvTifKHw#8!OD)2$zJvQ?^1(x!KDl5B~wo8z;St3?i_rVNI6FfIvP+`1N
z7Mz7^9qC@CupJ<VTuDxNpQ8fUyZVBAuWixx7LV^AL2wav&8wwsSPU++{E9hTkO>2Q
zNgDRMqs!>7u6DPhd;c?pokOE=%(~$wr%)w0zyf7^?T$e2V&(qzkJ1*3qNTSfdTA>l
zE%r|7mYbA;J`hE8{L8)ZI(iiS!7)%hMSOV^&7b63kGde(b!8jNUh!O~+d8B_bDC=B
zuK7#J8`(IQy!;*?BSN-~OuB>d)f{7I^PJ+Xup;u!xcKd1mLBU9y@$-|xKk2)j6Yy#
z)EAf3FQBa1Hi7#42_q+YC&Sc|F{w7u2HdweLEXudHg&;D6LA7I<~CcVX5MgYH+T{%
zLIL$2{vIB6YGUDbn<B8KWd1*768d6B+AN~cFwg(CXcj2^mvH;yM_|iiCZ=JpnRc)E
z7xRN}VNqm_9Z<mO!c`8LX>XGZl3Kap<78H-7#&?_G@mN*JRy0(Hx_J*OFhNgva5=l
zKP969-P2_&>4;{Vlm%OBoQ}AL07>{}Vd#$7Bq%isPwWfmvYM}jXfByd$Av0xQoL=P
z2Nl$XAsz0dc%4m5TGA_WL3WJ}y_?CE`PyPrY}fyxeX3(55oi=?5fQPC%0YLIop1FO
z-2Q7PU-vGd1F{1R&Uo6^gXF}K=~gyPVuiK+;CC+Wv&&?QLWH;XHiyAq{%Nauaf^>6
zC&H{13M6+bhzfB^$zj{FTuxy%d`}pgk|Tg&4s;~Tu?Tsc@1qg?LpFpDB1oCL9Zlc}
z#Xh)uN84T1JeC?y%rfIx_X^Ss{hy=UX3Wt?0hg~fMm9!(ZiBk0kb005>Mdt?qL(h&
z>Sg~0XbL@96EPNUpj!W<@lL>h7jn@hED<wp3zQJD`5p@J1cpw<-)2I81cBPd0#PLj
zA*_Z1rZt!S(zgRPvsw<HKH}7amBh%{|HX+k(0cckVTqJG)&@L@5R}DNnv-11_Gfo3
z@_*><wIT)C4uL~104C4pV=k>D6huD#=_j(4=0nYTId6`>BK<!Z4ZrDsvl*Zrneu;m
zDYE%T;D5t8g(R_j{86|q!tU`xf_=u!fEu)h1yA@@svan0)#mpNAe1BQ*^0R~_>0$i
z#x1rov@*p=<9t>zS@GJ@ymEA&oa>k5JC&AMQ^I)n9!sZ3Dq4OLQ0n(_aN}OFNR`kB
z3B;rp=h)~Tz+qqm(Cy+!)QEi3-&Fi;<->b=h!lFRU0MW-#<?RJ(HP7|gCfjPP4BJH
zrds8X8@hpp8|iAYu@ywhy-f>E3q`-vi(4#5G?Q@!{D~GeJ)26f8bfvO7lpj^5eEeQ
zi;zEUh^`Gbcg3s@Tyjw#`iHYk1>yF7)l`|(mdSY+IIiv#xi%W^Ua8FxGLiSPG-f~2
zT;S=iUl*TrI9BrD-$ftP%`Z~M(d|^gjmi!C^E^bvt0BCQHGW@wbPwJSk4rO_qwywg
zHKL41cJ)EPuHlC6UH|<6P%9d=$!Kl?5;KU@F%tJ_xxrUKf2>pK^uiY({q}o=Bx+Ef
zkRZ~KV=8Ugi13QLskRLn#Dw*0<)K=<nD%tw4kb?bPr+7mIRd0s;F!vo8UG<#0BXxs
zzf?IZsr@eZ2E<?^OeMvCx2hpSLH;pQAck|@OR3fKEsXPR4mx#-B1*px^4VXdWW^_(
zHLU<du$v*BMavIVV7eA&So6&iJjI3LfBGYmPb^>jM47PLet<F9-2pPA2?qaDhoPS$
z-_C}RbfM5@E)I7#VP2?1wGQm4P-5P#=60D6e|$nPKAqPpPV92?zYg)ww#yd3U~IPE
zF#E`%M6CV&--VYs-m6Hn%UByOCD+%i+@PE1I_NcP|LLW0B_l~Lpx?UhUxSHr(h9mu
z{cDa|f{R*7LgQ6YF|ZA}{GdG=_rTW4?u^!3g~NieI&x6X$0>T0tNK@{(i_#`w@7^5
z%6ps6#2nPq-%*BxJPX8@IViORn7?rgF8&qJ&y~RinGI%^yUl!UF7Wy<;uU5ymxgk?
zlfQ<zFGE@)B}mFiTZl+KGpI6pGT(cCOk~PMD5>S!N2n0CA};rj2ZL4zGxkcmFx<*b
z>HBKE=+ggG!3U9*QU4un8*<FOPs{DN{vL2$?)QxvG65H%h`R@WC9#&BLXkcc->Nv;
z-vLsi)=_FyF|mVZAhgV`rlPYd@$|a7Y8XAX0#8C!8NMR?#h98{nwNj^)D;Oj&FWdr
z+u`t?H7q)=t87SBr4~K36Hlth<~b_Fu=f0tYV*+wK`;I3!k!@pjp8dr3qMR1!{mQ6
zptVLmpC*UV=*5PM*pXPse^Ddt=J*r!aWh)RuLS*~nxTof+RW(1YjOt~<M<tS#J4}Z
z8EkZx`6xj2+vAjJmPU#HHthMWP2y@^-wlTs!8HyJ6FaSJf}i=hoR7(NX|svy9=9K`
zIVcX+(m>0<)cao;I0xR-WM63^o43}MKyvDb4jml1W5w*^p%(MufOYBC8TDJfB83pW
z{qA5-zpsoWyuRV&IhtM<O3^rxKH%TarP9k_G-OYt5>QlNnR36O_)X$BopjbgjaRil
z{{AU}?Y=iJ`iT~sa98Lll;OPK$?Ac~BVeT|ZG6~kDJYq65v#<2xN(p+6#UZ%w)lU&
z075Uvceh7V^zjN`S$!4n7)t;4sp|}}t&qtuOiLZD%9Nhz2ChM>y(_nRkVJ*mqGEPH
zXl3Ulw+=mcfH@`rs~Wk-OZleLPjd-?3i7O`Yo_~=7^J;#!w#2whrE+S&TXX+MXv|y
z>(NWswYLR`4)vSn26Pz<m<9r2vr+F;UyD56DgTB*8|>p)KWOmzJFhhD9*(kxw5;nZ
z<%8sG;c-dy1`>{!JCwp10>y#NHlZbhJ0fU$Z4L8bpDwzv6FCCMA(oG0aiYH^IM%{C
zHhnnjI`{a-e&+TFoLvHL13TGQzCVaOoY8<M&NEgZn0DwgN;#+;)pQXvp3?ji6)ukw
zfxw@1^7?6dX|*3y0Dof+RaHq3iD$+HT%!es!3GMdS|x=;UYHR}iu2Tlgg?Jdtb31&
zeE8DLrY1d3rSu_M#>ww{X<<oY8f9&YaAx@2z}MzpFO!AqjPh*I-JZpwcCmh!20(>E
zh02!p)Swc@IU>nX*)ETD+F}laAaCjyPTJPYF4DaMk$ZKt1V7T~F<j&Rr5J{8wYcum
z+4y)%LT79)ta-4)PS^6$XVOQ=l?Mu#_0&P`7x;P%{|z}eR{2S>`jp_?3huekK_`BM
z;&&=mDSgzeT(ubM$uvFaYt}s34hStUGCJ$I`};I!K8KK8pTcLIoVtmKc1pdN%*Vto
z>Lh5fgy?C$Eb5og8YfoM_CCNsdsXWmbeS=ljo1ev!Fd#%aXbukPw6S1OlxNg*%y1t
zZW?~|xxFR351&M#wRMTfihDV8MpeuHfq~oH!LDdgZVIOtPeAq`oYfd(ajCF}mZnc4
zo$ayr_vgK9F-jW~GAUh@s0n776}@BqdIoIeL$1{i2;gapK3ZrF{l<a1`x{d4_Hcd3
zjap`YhFJ4InOU5MG|wn@y#t5c^3j%3ms9W4&JDy6Jx50x24C?ToyM=fj@}o6#N1f_
zQE5gGUY|$RgQ`r@!dGDV=ruH1mOtGk$bU9K2qn@rmxD+!@}O%3Hof{s?g0on0N?4W
zV2HE};Leyi`ERCm!79xUHl7{C9dLM_U6mPea58PG&<uLH<c?XQPLFp_1aj1~GSu{C
zo@iWh#<bfR8<2VND%mk%*%nYa-;kGe&F~v-%-fUWPmkizM5s(e*%SxCBa>3?Ttl`^
zFJq*A_;RQ+qntg}w@h2(#q`B5AoaVbLMDizg}F7K_pyb?efaOL^WKcb5(DHm_0HCk
zn2KqdKE<J`fixbg3MaYLawIfm5~L0#V+=V0zUc0NS4Z0!vU{=M{EmbBek5PB|4eoi
z-{Y#r|K{v9mF!hJ3zRD840f)8{DFf~2VVY~zw@~FcyEA}uiNuvt~)?AK;n}cG4&xE
zl{*B0La$wToTqXO!X~~~WMzNJjCbT9s_(gdIa*`h+@LzeR4Ko`L1Lln<QU9869Ek$
zK(#G{kyRjaaZM`1z`#4t`wYGMC&lJIh&g1$wABcb_j~x)l?QxqYkau218CQoj(Yap
zX3E3Me5e1^pN69+DfHwzaRo!N9KMcn>!4gj#TRh|6<<8jZ$r%gkUbLW$0%K=uW(aK
zZ(N<o)vb19T&@8x8(Qd5Pm019kUL+ZAw3^)NVESwf0fsqTp7v)V!4R+eWK(S{)7Ny
z>8bJu?1Decl*t^_1>#Qb^tMFm?X&ADCtB`_GHe{pHGRsq+JM>}$xqv1Wk2_}_Fq0#
zVN<Y`r^~W^dviMg2%^9tO``^qM;KBzlwJr_u{Lo%D2~pIzT+asDA@>^QDCA!;6x?9
z+lE0NTI;1q8N`iVCVudHI0OrT!{-uc82D4mg&0xoaA|zV*NfHahcU6WcZlP982f%~
z$&IS35Lco1!{HYmJ>d6()jqy$DmP#%93L+jFUldP^mad8TjV?6S8p`|oHu`{nw?sE
zkR!*1weR2Cp-cpAa`C9gh)8@+!CM!V9}XxdrHCNuygwa>q?V8+VB&ISuf|8#kg{Hh
z?Z_i4J(&_g<Dm^73_@LpV(1`gR8R?7gQm9#0$<byGx#FbLf0L%39>jz(O90WVMD!c
z#61SA;@|I&y`C*eUSL{)5MZq;6Uk~kF&y~{8i$}8UN&RksJ7OtnTxw5#N(<dWL4C`
zMS+<gD)9#hMs_4pm4nUtHD7EGWz1+U+HB8D!`{OKix9sfB;m>xk85a(2e^-<d%`p_
z@!y23!Q?WQTFhjW^79t8Jh}+B`h)x(amV)=)Gj>ngHzaOs|HgZdLN8Zv$FmEchviX
znlye%Z4pubuG|B4WI+(x+vJ-{F<}SqmuHFJ@P3Np1N^+kuQMvL&pY;uo`!@6>B~Pq
z{*x^Ne|>{S4PGOWkCSutz0ZGKb?k%PK+qVv=f4kI0&o>0s!Z8GJ%b*xdu@8^uEf&#
zI9b<WmFyJy_nP2x1U8kBVU9lBDj*4Z$#wjSd^}zo76s6Uvu)AiF?j03BQ>RB-&SYr
z8wtY8FGNB;m3dfy#kjOAVd69MresfuzAL6x*})*X=a6HtzfIk#_W#4@<vK_@cEXFK
z@yv-Rs|Ihzef}Lv{d{cyBR1K=S3ijXtw==Wc<#wZY)y_kOdb>&=wPrVPCO(W1p+O>
zf4bFMqzKTwoE1wW8=`IoqE(>}fqj|d!w}?8E7kPN<2b-8!eaY<!F6IB(Tu9*9j+0J
z8R-6*T0Jo}0gY<#2@p<XWnmA(`pvX$gKzfc$%b4WYRNjJ_UhLt!0o4BAYIQ7TjkN@
z5lHjBG`tO|eBSlf;=($oju1w8=xUe1mTz0|0DU;#7v!U1;wYy|WT8KrL019L3&1Og
zWBJ6N)*ES$K{gU^LIbB;X}68X6$E%`MKG)rW90!`_7$(jTfPx<tq;_mpAf%|6-jL<
zJdWrC4hliY`#Fh|KWk<{y<sp4zJHM*e;>@aJz{b~pTfwZ5&;>;1}`TQx6aBYQI$)c
z(LCGT-BsJ@-Hh!Y1zol`eO6qe<q)hZtC1ITy-OH|%U#9~PWHlgiK=IwA5R&>H1M%W
zb-LGwK(?98&`%nweoy)t`_0H90ki~L7iwL`7=&vR(d<ov@|)Dtymm*v@F!XFn~HfZ
z3FN_``W{ti$jVqMe(&JQ?-glyhJeZzjLM>nivuMzKt{kJ>JhHLJwm%(FF`vCoUx}(
z6OXmSRQ0lm2KPi09cqTHh$9TI#dqYdE#R+oro;^NQ;Ef6Ue8E4?ll99kO-OG1=L)+
zk<-D&+e`Up_n^HM=jUv7-M96?W5B6rTFTC^<Usa@y8}+LAFO_3?BAlQ+!`cP{&*Kd
zdD3}Bk#jF}8YEQl1E?N1L}2&;6*B-jG0UI;V99C(l*h>*c4O*p0ZE6vOJ#ghXr@xS
zMA8i52TVld@jKIGOn2%|0}UpuW{~b1(52Q-iQIdH&IS@Rf}b959;zKyVfMvFy6ARQ
z4svoU{~W0uQ{mfpy)nc8>wB@;JKD%~66bsnM?^QWek}ea%^PWQ1ZW%JJ2C<}zXmi7
z$$!;PKSqsn3AS7b4>hUurR=AYDMNykQvAF3tOYm(aOiAy9Q+-g{?a$HCU~L$G4(^$
zM~SV4sp|Tw`yFqBOHG0AqxM}~8chCvew~!vFoh_gxL&H2mxH`Hf*J(Cb_J}MAL%7=
zV|>8yHf73d8Em1PYuFd7h^P;5U&>-|bhxGbVxJ0b{via@{FKbYX%vkk<rRf4^Z=v-
zu07Q7S>?aARLiX+CbUHYg)G|%x~khgqaHdRzJ}fY<&pd_buiy_w{iaA{n?-Cg=$l5
z8(N4%48}wS52}(=LB&>0E#`4HPSL1)lr<yW^+evX$-#RG9=Km&T5pZp)Jl@f!SPn3
zOvgwA>!}M~qn8^WlTyy+{d=<L;&}2xGs;c%BANqY*^(dePjV1?9070N(gKxVhz9pR
z*JR}mPI?pcgy;$|3iz;Kv_P$!Bf~Cf2aEsO`Ovwu+UoY(v*+Gqe?W~0N`f8jB^?3q
z#itHzHjf6$_X>yhVHzf`y;*zaYn`{=;l3j7@m?(~3q?>z5Yg&)&c?uP!l5r?Sgyn8
z>WN*Dz3(Sz(J3g;FVwzFc#0L1zCYHW!Bz?PkH?^qtWkQ|rNNZ4f&Gj2V==b&0VeIG
z&r|0VQ)n~Q$4O1wCzNdh^2ig8_gDY!=o3^K`E+_N?^$6ATzpi*(vg7Iu>+XcWmX0W
z6#)qV1;QVV-aRk!y_4RM3PL^6R@nU_WeH{&OdOoyb{N86sqRBQ_rU0^GF~32O0r{I
z6W#KxuY9>b-uTb#1B`45M#Ar{P+|L?$2@=r0OTu?6xZ{Yf{|iuJ2bXqPv_}jF>XVb
zj(;a|k{J}Fg8TaMGt0Z?a!swn8GP+2Ze#~U%;%Dc`zV+M(xMIc>PP>qI)hWnMn1D<
zShj__emJYH59~jKjef<&>bl+mUsA}t=A6Y9j%oXHi+`mc_I3_7fAN;nP&Ia*2hAg8
z1Ro1c-Ng`fHDuKBgm2-g?5Yt!=M1c);9;MVF6)_#A7Ac>ynl86t)j*g3#9mHXkwC=
z^SS;`j~*!2;q@!zu%jNbxYAyiHswx>OygANu3#4JC@U+I5Oba`APuK~(N2evPGv1U
z0y&bxf09>5T%yn2ycBn*rHmX`j(V3-ZBnNNL7=&!hSnB0YG391rG+KBFb8nhYx|MU
znp=b7>*!V6^CjipJ9Z71jLZ7!YTeIF(!#B49`=d+{M8vG$Bc96-#7_J<Dgc@i?y6J
zk?7%@0a;mDQF^7Le?xa+e!jicZOOr;_RRv~Z0$Ut&dr_t!x(X&*tw%x;fnmd=R3IA
zUbN;kF6J{0+<Vim5<dc5sP)JG>4k+HIw~G&GJs;Y3xVQJGoE~p?D@}WwVdPiCb^v2
zv5#E+xS2lXv#B)s67I10o%!!^S#7PY{y@b1@6+S_24zOX(GgxLJU)HPXrd>&)xAG5
z=2|uyUxAP+c!$ijfj#^QHT8r$8T^e=4yd2w@{s8syJ(ZH<QSF@SIbc2X%{zOece>J
z_aB}HY;~1F8Iek%B6UR{o2gFg|74CAOtqruiw5}GeM@lbcW<ZZqC<I?mI@n_+O0|~
z>V35a+y6GE8*3Ky&88C3TIIU5u3ilS^umtj^-UZ2JbN0hz9Hg(4{v{)I~N*@okqLT
zNTc_AH;{+j`g}5ZFRgI~XSnaMfjW!vbf9HPPhk9zsPm?P!}K)#Miv%Udg6{}+rgR5
z6!137pEb8V#wQMTj=J@f+y_A;`Rjf}L#LW&TET&TAvHGzj>!AZ&-m*LWShC8vWp>z
z={1&$!hlsqeM2&2eeY3K9%!Iznqa#hpVj^G4h6gOALDTJHppYPOa3(qL^jU3_1^zf
z9*iT=e`3svT5Ub<tbbf=O#-1F5w$0ufirKCLtlB{uGsLRw&-T+S)aS}_To&8tY&^j
zS1((L{G{dYPMU){!sma`p@|Hr&Y)=o>QunyJ3~@Fm+>I^=V7Iff1QgybZ$!r{#~gN
zIW`TdDDd%FA(0NP$TIDK$%bw~Zt(qaigqJ29sfwzbvUh`gHRzTTr2(8SubzNf2J3v
zFtQoZ*ZktLZT&(`FwTKx`9#%#OaydlnhM&`wZME4Y#t-GU(hU&BEJ>igt*;+$e0fW
zk!8dsTdF&&-vNtI>Z3HK)+_BFb|<_z8Q*AJX$yB$UUGzf%Zw5E8Qg)$hP0RN^5YCa
zg;nkuTPpD@-*kL%d^pN|#^kI3#eoC~z_)eiBQLf-30L*P(zUCC@8=3uSOVdf**{Hf
zBz<RRO9s>3DRv+}3lrDUb)B7?-uEB)Kj0(mY3a1WEO`uuUfZVsG6*|}0fem>&yj^+
zM0IYH&pMAceLD|i3H;Mo9goKr?L1r(yal-!AgUIAT$+4G9TK=V#tCeT?5B!2xFP$<
z2}?hZy04%2Sb>3%SI#EW1;N8?e<Z)k$x`<7e&@a46#*HauNWm7B#n-B>OJ><&}!qJ
zwnT<eR9{ZoJl<@f=pZn)^^#?8^(g27(E32;v7q_s2S7hjDNg1Ie0vR9eOp<oXg%Ux
z@VNRXc_#d}*`*$yF@l!9(dj}SPd%jttvijPCJyEc`+oTB3~F;JaIh<p#%!MCH{{(d
z5H2^CYSrEEN#mt_WcjoPZarQMunAdjCAmW(!WW!d)F&oUE6#;h&|!vsQxYa|9MLic
zQhwAo?X0r;&W9s^G`s6wVRWcWaH{=iXl-ENH@#w0`OzcmwCh}5JAK^F7E4kbnOW)k
z{`54L&N{RaF)=CPX_-(=^2AuX2fmWG)A)W&;G;%E@cq)B0Tb@#4a#E4N;+sYfhQ}1
zv}Th~P}QBs<qwl*?=NV~GYH$U0kg9_XfGFB-F`Wd8?}6VD!p-5AhsPTDZL)*d)oVW
zX7T3ro2s1%eq_z1_HyQV_+5zZ78i962p{01F;239y!}T(a7{SOh1<ZiSf_0R8Vp<n
z_)dvAw&b25^W{LlLyyTk-p|oGRPVzeGLOS)j^AFH{zJ`WLt5H;Y9+70s9?39MIqq?
z11U2=7?nQocR0ELSZ~ph{#!@%ir1*f|90ievtHP66?;nz@0>B7aq)3jsOE>gscOa&
zpd~)h1PC5Y_+4ALxAFnDUGasd@k){oByBBrdGx2_v?1&#t4TEYx&ePQ6b?gwOr*E$
z2<AF!%9Rc;(H7uRm31a30PQZ2MqK@AK4o4qBWiQHETAa6y>?y{BV4XDCI$+yU#;4w
z$hG~s0>{=`^O+Q5plr};y)W6;0j?ww9CrJPNGRu9@RC+>FP6S*=q5V)6sLn5H^PV2
z{?H0K1oJDsmD|I$9*l%`G<nl30%piv)h8UnVS^UO$+EX*2VMg|bFWk$cgFFRps8%F
zb#;2uSBbgDu_?@H@F$A|c>6Tr6s&Uh=2v&UcM3=Psn{W6H~)YU-*T~)3<frnMpW{v
z5Whn=p((cS2H&THgi&J4;SCD9bF*}~Ma00TwwEHdAY+9ON5Ea0rH-JYW|f`qENDYY
z{CE>byDR-9ZZ*5xxK;9WbO9PzK=sx-+Sde_L-eNU=`GzGJb>EfO$!jKYj#@BK+i0A
z(Je5j68G<Z++(y74=o-!p<m4E)-Nk_s%uhw2k*7~Wp(yxA`Hb=%dHEvmj%(j<>AKc
zYWn>I1mt-75PNf0GZV&oX)Exj%&&rK28c?T-bX=G@Iw2WD3-W*g<tG_Q%G&35^0Gc
zbA-8_QVoiH%~<3J>tNZ6rAnG^(CKp&!Q7k>sH6AWGq<VavT<<uH85OgY8f1ieMkbU
z#$Vt{zlIwUnpzpx7Io=ip}WqTuguMjGt=dwqpPdxp7;<g^wIXT|3!0Xjj+cJNNZaQ
zb$ziR;Y5NwaUH-iI=^<+y9>c~|9j2Tb9@wJ_1<dh;kX_Ux<jF!)hHL!4`I{#+mghn
z!0$gg6Rx<^hU$Ee0IdgDG%t=0l@wB<ji1&fH`>c@VcRJJJmGli_rs2k6m0hbvWcW}
zTk)^YGIMT*1abUvtiBSbU_Xgs^<@S!aEz7^i#&|h<_8GY^HxaDRJmjGk+<_2-K#3!
zYZ{V8>ZY~ee?Mmj&DFKeNh@V7Mi(#i+^Yj(o~}2;)RP!<J5R)MDyRWBHYKm3<ZYgQ
zPyfnE3hX{P>q41bE}&pXtLTOmX@7hXjGa>}74Y0E<8Gtg?>ygggqt39r2KmKsSI=f
z>Kb`v$Jqm_9(o5sSP5{cO-0z82v)y-5&=Su8*24FriHzWfMmntHl64&Zy%05+j}?B
zOgfNK@Glq2g?yRwUK!~PcTpaRVLkchnxO=^{qZ@rfVA*=>rQS3*u(T)$Yn~?)c1-4
z{?1`2$g_VyA|NulP;7@nNo_*LaTh!ZVg|l(1$=J87!%jfGwWH{wlOd#B~Uh0PFsS6
zZl}0%<79sMVj!cl_Sq(afQ+y=<@D7_DEp6~6ua?;w}Xk~V^8mTVD(isddvaKC5{uI
zA0ddFC6$lh#LQq6V)roLqw~A$D?W0zr=bow>NI6jXmt(r&V^|NXcE6}I}C*N-yK)Z
zJnzRcU$1McYdZ*$2GyS}u7@`uZ`V9$+(5RY=?(UhXn&kCddh)f1YhC`_?P`C*LnMP
z@&f<`Yb#&#c=T>|N!*8soX+s#)CqT;*tq#XM@JzoEfU_a&A2ZJ=vhc2<Y58j(ieLE
z(cQ6}9~CBtq`t8oORFEcpvp8fq_D#{##<0O;&|jI+N`gv9AY+jeCBsByEAhRGe?xI
z-}SY980hb}AoqX*&%3Xxv?jIIe?V?dx#M$kUX*?lnhkwo<J!Bo>h?}Mk)cA_rXGb8
z<Ii<p>uF_bVQCpDP)jfG(y$ziak-N~`91M#2F|@a(mqADlNd;y^-ar=VC}jHWJm_A
z@e>RfRYu80<ndDZM;#}6v~NE2tB0Ow;H16!IxNE<UI#2yPtse5UdbJW`>mzqH;}ez
zJTvfg6`mU+ZQZd7{40yobuk<ByF?nvaU#Cv2|;M3$lm4%<2=kS9=0Tm*!=tBPxtSm
zr<T<V-m*jlkI{5HqJfmzcd9X(vtRvE<tR-)m?;;e;yqNUB_d$ELrID`pKK2dcJJ5+
z1~0#jqXXW|8`_awLP2xmJjUeY_^!XUVhY`sV1=L9Ty_o&#zDi~7Z3OsF4VBgZL&g5
zX4=L6`tbMbzQnftg+4XBbadJ^RXF!8dgSF7(W4|A9VJr#(DP1rO8HTmI>0r=by~aF
zioCka=fsAqT|<yJVN+eI9$6Ax9PM1Lm<AjpO2zF(ckVvfeWx^(HjawQs%*<c6JgID
zqs)~+xKuCRH<`WCOB%QZ3-v^(>pjHgKJ95<z#5Xq9Ggvinx})zY#9eV9s(pk^H0oM
zpvq*<mE{%o!#_OgZ>nz&Ccs9$6D!CuGL-<;|G<reVUH>aB48e|i!QDK9&^_-=i-XA
zD{ZI6WpDcqTovKYiy$*YPEb6qaQlPh!U51tTXq2Yg$<C;+tYc?mw3TOCSVU+$?03>
zr2{6GiNq61l<595w!nw`^`W;qtIErTrkemh|MTu=kgIOceRga0MSPWK+}}u>>1h5+
zqD{IJu7T}Ko&Z{g1m2rST*r1-t|{riLAAd91GrY(Bf1)AJ^O#-G1!%zP>JjQUejwA
zFp7Z0G%8P+m-m&f^aAVi8__@WZn|=;sL;2!L@djvsjSc5`Cay5lL-zZq6M_LSpp&!
zriv803_bWA%A#M`rTMM5Zq)47pN77C>7k?ayZgt+NvJ0hu6Km*xfh5w+o2BNNwtnp
zVjTY~ci#Q`2DaV2T4FXJ^c@aMQ@4}GfAeq4N}jRZ;gAwlg74=j7Vz@Y8!#+98o5o@
ze(A^7VWbxmKoOlN&FJ=(+uWTz38FL_QKP9yhMJ3MO;lP{KKvB};-@kZ>Lco-6S2&+
z?%hJv`QXUht%FeM>m$j-OWzB(OMe4<Pe*UmS#A<&gmiT|v^X5M5)cgRd%DC${+u+)
z$^~jcI{7I$=N(H$!zV-Ql%`hUyS67q?lvu6B|53as2~ZgU?sWqxcv8)&JDiDt<%Gw
z=mL|$qP_HhUOw&%Y7edY?yZS_eT93!(XVPjf4r#RQN3uxj_-I%ANA0JX)j!OZpe9W
z*NuS9{RG?PfD_7Z)peKP8v3#+8{Wv&<nRaPU95c%c`OQfgYDj?&W~n#J4mi<inkm1
zkjfFHlrFh<58V=fBNn-%qUYw)o4!Vo$+l;{8Frdq{~}=G2aUCQt_*Gr$$AjHR0i@V
zpC`XAL)RTnd*CR)jWDKZ)YiSRIDO9N-}>^6TiK8Y<K}dM(T@VY11(hi<jS-|W!Jrr
z$RV_Cqg1R7s~RqEGLV;NHYpj{ZgNxX9e;Sm1bZUJ+8V{el)V~q-t#myvrj}XyFXb0
zx|6|D4?%u#e!=V|w(hsB8&$y?t5iO^5ivSr69kP(Hm)`eWWUII4l9llHUCI~67Jox
zTW+LdVD4XjRUYOB8dEg3w2i8dDLBtDB}fhM?FBhNQnHda-ZKZ-$i->sQAUh*>W6Ms
z(&*}bPG~gh+?oyC)@S$`=IEh*`fnA76&@!!#l@|cmsz8RL1Jp8oD6xD%&B=E19npw
zFGVnX#+d*22B&0}u%4A1iH6p}c`c7zjX?UKyIg%x`B5AYZgBN5@-iT457n?a_<94r
zCrLR*b%TS9`9$m2gIqnf;*2FLRS*;s7Um9zWAmxdvul{ReBxIvERcM2tq)dUvC(w|
zUgJmJW%qzRJUotAC4Kz79gUxA&E^aazKh893evK@D2d}}*OlRQk3vp`D=+mM*f)@}
zdZpGxr5bKEX$#l(3s62U3S*R0#SW*8D_RP@%2RG7xQu~<K)aXMzx5SY7XQruNn-i^
zoiO!R+}$dX)MxGHSA^s$Y7!`%X~`wxDs@|vzU_w4;l%3<eF{CpSYV${js!a)la&hm
z<TS&yvk&(L8`k0*+bAi@uMN6yU&0N|u(X&6G>!nh0UHmVL9ZiHjGOl>fQUma7-i2M
zK<os93V&)D6^VfCpM_lTd6QzfDLX5D;^0UPZX~#}ligF3UF=Uev*=uFUv~&}R$whe
zhZhiihm7U<&%v8iOLYxM3Sriz_u5Yl)$jqKqF)D|BZnXax7)j>)@KC)TP;mnnel5Z
zH|SlL<SZS*_$1^BwP+=q2C@uC!<+Xh)7*>WvRdMAnTf={unoI==W$VZ=ErfH^5l2l
z{*NQuJNldD{bTUTMv+^=%0{>Y$TyTq2Xg@g<mA$z1G6ZKkTT%EKI`&|m3!eF!xXOq
z_R11&5!?DX_Q2E%{r8m$JIn=-=b22{&<ie&DjDmrvOiDJ&8CvItJ(6-^6~?Fz@ypW
zb_($C9zsUtQ-M0>S6B>f*s2P`l;cM6X<iBXzHn=F1NvW6XC?DP;e4q=<PA~7Z-4y$
zXQ-#x5lPS2uw)Zbdewb3W3je8J2tB4bK$0xUZ9$aWi7i@>ZO(&GSrQ^t(#k+qE*^!
zK$qq4M+gW*K7c1Z=$=Sz3+ITHZf#H~u?q%t|BDn^fFDDwMn>avcY-8XlLpYvZ<i6T
zrO%V3<$C|?#%(El2vtvS$$jqs?l2H?*R$G>7Su6r)^%S_D1#s7D@=xay#y~V1VRrR
zN0~nb^7CVp95c;5tMC2_O;cyxO~&QAj+MATLbi_UdIG#0znt-7Q<eluv7)U{C+X_?
zjsF3!9+*5oKS4W{oo_TDOX66!l4NmtTKHyp^_5(N;o2sva}0LD($cu^^!YACvBFP@
z&BWlCgpZu#-!PndogLeR$&ia}0lg`;kDKbO?|P1>yQHS_rR&wb(v?4Ji}bV~4Tyww
z<oOw88gos{AU<Epoxy@XeKmoHb{n*pI#F^?OaJvV+^!G55pY#s74EridN)Slb+KzG
zf98+Lsyeux802kWf?7!ieYn#VT|XPi_jHHfh=6`tfjK~Z-ybg3it%OIjql)B5VPQ$
z1ykuJuq|D(cZp^lweVdy8z!Ux!IunZH8_t&TObUQ0slyy4pB{fKT>BwBwSWaRNed(
z`q^#ssbb1m@yZoqA+QZYwxLtGbCf6fricVG=Ax8yY@Smu>^V|j;l@GEW116D&tOy-
zberp}URhA^czd%XjoiN9H>TtD_ffugJ9-OxmARW1+;J(i?H_!dQu{Z2fBm}q$DaRI
zHN<BrWb69Sk@%W#{{wYpU&<0^W;2;G)Y}yAE_hs=GEOHPt`_<uf}b2)eJ+4=I|Xy`
zWi+qvvrUhC<lPeLb61K&FT*n@BX)AjLG6LAivbbiw?8Z!?0LP<mhF@IazDU~5?;(A
zrv}MbZ5~&bmbUO?HR8%yKbVaNdUh}bxHl{}=00;a0sBmRKkcNF-+q`wwzRf(j+BpF
z50WV?hc6YP*2T|%1~*g`|E&j_NmFK9f6(0hOeB(N)k{OOoA7%E=6=rtM4>ZNp9we_
z2u1DOf+bKp6~JGGIZ7A1=n7OPHSlkIB_D{!#{u*$`deOuw5}0WbOK&`-Lzidss9pM
z7)l084IZ<3tSbm!D4q#B0}IF&1sVO;9d%<y?gv6t!xoWKGAJyZbZw5uD|7~jWL4L9
zbQ(OV1dZwoJWeM`lj_mfABQAUKRE)#mx{;S#K8ce7ZHnYb@xu3f8*3~OYzfXZ|3#C
zs8&=_7#RbwX-1iS{SHeE$r2(%J#9%)t4okJ55;gxtm7Al4WwDNEHB)BU!}umx<mJh
z4fPfL{hvQ_MMxBMqo@%PBrtI3WkP`bL?<l(^jb6=e)q?BX3KX*;m4LSyn!P+0a;4u
z{6!BS%^+9X(-=tL@x$hNmuRURDp=!^Mx5gt?RzV`Z`6DHV7c;>r-@G#H9oQk1123W
zIS(n?GZUh6N>hZZtE#jlq~nrWd9SZS_kLF-kl=I6x2=6a_kFvh3DoDfHl<qLA9%c&
zy+cQ|YtPlRoJ9la%gd+11$5b#A2b(Yp0$U|qFn-VVJC;++CDdYju5tEz{g8eb&xxQ
z+|A+~AL7aeDet!hBOGQ%=>%pEat>54)x7!AAHq-#2}06UyJX+4gKRt~992AZJ1*(4
z_u@W1p<3M(3{Dffg60KT0VX#t)G0;pRjJEC;w%5LC<(;a;^u3%w{+Z*9+Auk-l8cj
z{>PBpFZL!QnLiF~bR^`|QGTh8LCyA@5A|g?1dGF!-#!tVPWF@0+7z9_c*4WFt@Id*
z$`e;d^VH1$nnjRT7VzVDUS+9grX{sV@N#t<oGrh)Y&|-vuB(&XjNYEyZIp^A3;UK-
z7Z$zUBYrp-1w*j*UMFrlD<E^qu#-Os{VI0<w&={F_&4ws+qeV2_oUDUQ>b`UsC)F_
zWPSHs_-)62&D&Hmwcv|wk7ybnqn5FE+{plvGLnyW7_UU`2H!;A!d#*}`|Ds^yY?wR
zpnEbHcI<W1Qv;-Ezm9FOQ5M7JK0^fEfdp)=ywIEaFcRtDyv5r02SwifpIfgs!t}Ao
zB8iRB4uLw4Bpbb$n5;31u5)Gc%F8T+*1bsu7)0kBoRTp7P7#@Ncx#IM18*P}Us^c4
z@v-K(8LSW{`S*NhL+$``^q#DN&xo5iurGy@_Q|wNc$TZ1tQM2swmFhK<A!rB!^39A
z<Vjs0tn~E}rjBhX_?%oX1}ZYxRd_LQvHPsPU}Y?yiA)=c$%;3RxL5>8a`q*%aJ-Ro
zoY+~`O-Kgre~yo)#yE{4Q(R7Dvmpo|MEyWsEbi@tLDrGlIR2O86-Gv;+y0@}$P*2r
z9hvXw87TE*6dQN|3P&Bp{g6^X{qbci!(!_mtod5inJ1?sH37=mQR<hIZo2^$7s&pb
z*#(@N4Uw>q(BJHS+a;7oK9&A5_vV48fl2s_3^HSM(!MMDncE`OsoUb%Bs7Xy`Z*HA
zkR0-FC3%|+RxIOop&^<8jjlEt*bSJ4d_;MI5KI6FZ8sWK4IKBdABkRH<kA>pcn#$8
zp6y@m8Hy!e*+3x!@m#x2nix=S7WxpNt2ueo!8>;(q3EszBWgCSQU;j<yrn-`p5Y>=
zIf7N5W$4Q@1gLeErYM%XN3V*h5xhZSx2f;p_FaU9+vIs~GUB+>)3Cq157}F(ScCW?
zNZ=~b*ZJ{en9M!|ftZ>KDT(63D2&Wb2FZ-iEjJQ)uQ?He>h7KBOnWeqYihOdkqu0i
z?sSt9;Xn187KcM}jEJNB1gN$lNjs`<7t{MQ1CnT(EZ>lEQ7762Qx<jIlX*eNb+|hM
zy=wrXWn<@fIQK6q2vQ&f=)&&C`**G@Y!G$~2$SqP>Lupc5*Re1{3{CFbB<9{HTD2G
z@41fV;<_fCQ>L&Swl*~|7-~DK>f+~L4pEy&nBayWkdL))bXHd6UAEbF{gK5IhZ-V>
z>^D8#=;HTuZpZo4vIwr?znXu0d@Bm1oTsM><#4fYzt2;xf*mKbjJL2=DDdtr;lKZa
zO%#JK%P5^F@Rh{<XE6qJ=icGnbZN#oj-u@?k%p1EC-mDH-%2CFu1dbLPR$;}5xfrz
zB+=_$*sID}Vp~^@z<)W~BVMUFQLp?6Zq%GWH^#d?RNT~rtkJeoT-WNW%Br#3+deSb
z!{zkB_QPk+S?Fl}UJ4&fF+Tvtcy#P$aZG3Zmg(q(Q|aMt(w95wfem7>T2nPJH@RI2
zods`$LbsEo2}c)zx{F@-oGdJd+Y7@p>XX#=+`4&|b~iu@3!>tgsFWxVMoq@-)PDde
z;@g#v`7u<5zCONu_SqoTvuMoUKes))Y6(t@1waEF;n!{)`tryZ&_rW1Ot!Za&IF{n
z9Bx5UToJk@%W?hpvYpZNJ_9-md?GLF-ZVbXiBeW{NVGKp3nq*@E8+tL2nSn%FECA$
zKrVS2k%R{NyR@GG3AxrTX`i%Be~)hr0)#;N$RcF$%}g_J7W0R4F`#aI6*z<Za7*{T
zN8&Ez^<(L~nYy%gGlaBq>qbt5y@X!?MB&jLAOAh09Kl%2l->5d<!|pi{6TkoA{J5p
z<heM30g@z2>VED?-zXW4ViisAf&iB1LkjS*QlUm!X{S6`!62EOp!agac82IhUpLko
zTdVE8%VU8K8`?gD4z8m#+K>lh&?}P23w%AG{u~_TsMd=@Y@pr;pLmbHRZ<xgdseX(
zNhCZb!siX~^Na(FK%&X<UJ~fS+vj6#a5&)F&m&*UbM+PN_K6~Uke$<&<Xe9n^mdZ?
zU|*Ai_C|c@Y|gF!<XGO1UIIYb!d9Y=k$j=kS2K_XA)XX$9{w9M<VN^@ZIf=kx7{}x
z!0jvMF-$DY@$S&z<AttlL51B)VW+=egobJuv9$~cz#5<3jm>;NQAOagV!hi2n<u?y
z!=_Y=`$qjzFdRmhoxEdas*AMTbIVYZxf+wf<H%6dw!WbRrsvrB-*Z}0LhZ=4rVltn
zbxMmZWiDoIs*#Off7-|ZUH&!~)?^9&)G^y@gwd2LVHPi;RR*;rD2pIW9*(V1?t4Yz
z=_WKHzC}iadN>;KtN&CaiW?s5;&9V*zi4qusXzYIw)C+`;jT%7&{-?VA)SbQ%#ROS
zOC1-7f7=RPg9@UJBiN9(0U0(r{aj7eV@Q<Y)K{Pp`TQ%i>@Ww&njKBW1Eu`Qocs*8
zdnwk&hwp$T9rCo?FnikjajTE|q~uHAw}A^DdXRi}Ig}w#bC6^=H^8Rsi+ubjt8bze
zQBwG()j4&<A_z|a@v{PiF8Kw>j<UFb;!$N3oL(Q4{o$izKni?<v8vZ4=V%S~fNjqL
z@U;kB<9;C%lrwo0t%{|_pk2j_8j67%AhH8KMiAf18p>dgIjESB46$gpXy5qxo2Q>$
z_rKNUivH(1+Q}$4vQK9d6mF4Bih;f?;GQFt8k4Ax5!kLMwxrc#NIIFk#<lh-nMQRv
z%3Xp^(2OmLd<Q7dMPte}z_&PE*g16i8L2E?lJaObz<m8mxx<I6{>7_OBztP7i=8gF
zgZ~vpY8%k0ipu_<br4id5RrvXwFT4C*5=R_jWR&r<gnt?<mgi_I%G%f3p=eRUyV^b
z`gxWn`EW5<N{`xt0rG8}?GQ!F3#c7*P3g$SRZ|m&LO^&DNd!Kp1BAOxw;?3Aj3=>A
zw^Yb#Ca*-~Z3ce(W3K&lzK=s@8i2U)K0dq+=p0T_pE483cu#-mytgenxE_Q{i~j21
zOhX?0%2w=>TW2fzRMeI%*SMgsSR@OSq{1Q1@RbHbbtjJKoMekf5dAOSg1aZcOLl9-
z-ippUV}@R@-k{F~0-BP*ywh?6nm9I;$xoS%`ArXZ$ETZ8mvi}NFF=%;v;d?e3yLQA
z5&VqoI2FIhNr-2N3bj|8|Gjbmq^Bo5K{-nvsle?x+YyU2&4AG4ZJ91N!Z5QV1{g$W
zf!%(>?=LJ~>4*R=xje&QBrY6YSHUnotwhy=u~bEUWZi)IX3&H4)6E5R?uq}BylPMx
zyG%NRGy$O^f5mHQ)l@B;OiaM#AG=1|fG5muvWHfzhiYsgQmt^&P9A7Ls)$t5PoDPz
zmm{PYTLwk;zegXogC26rC@$KS-o0Wm5dLO(qhsOwnla%si<}gIr>2#;``ngwpQoyF
zAXx^VSV7dAS1)y^DK`a(Ec1iIplZuz7HzCPe4oT;idyIuqGJBx5{`c-0#ea`J$wor
zt6M?B_aXmYSbiMh#Iy(WU*w3%9M-F}(Kfr_M1K^6L9GS6yZO2wpoR@Y80tFLqR~yJ
zS@em(6YvO0wI+F8Vw5WcektIW15JFl=jDGgZ=g*Nzw2WKYS_cb<d&=hbsvV88}i;#
zOYOhPdC(st%|14}zdK9niC|XG`ebLzKUb<wmMNBCaP0}XN}duWH^bp+Ni*4I<O2n}
zrs{ORxTlMMAkHLkZqX=zj-q8zh2jmclj_EshG98`+E1dgw|JzON47@Cv%aH?ZGkFl
z0ccilwJm8-(6}y0wPr?BuTPm+<<)ZkCPtftra;W(rKH0ZYjWuQF5Q<_DC(QXRI-GF
z_`skM7H}%xl#lq?E7*R<On-6p)qOVDv<e<X!yHN2Y{n0J!R!9ydCM_*&i<Iw9)XEM
zb%KrRQ>tuj?c0$|6uR4N{o&`APJ>6q5Hg+RYW0-931b1(kLvWjhWadgQSdVK^k2Jq
z_#60z%FJyG-#knAX<=@l5~`?=FC*;XdX6qg1w-Ns^*J|2Af~HWJ7MVbjSPFpszk1=
zv%UR=z<VQeT=zsHQ4R7-0#ak`AR*M&v$O#NmdpASly1IMOoOx)?%g^Ua$6J|AOED7
zHG_2+2!~OzJNq2@irP}`{LPIw&|>VHnUOYm;KdUkupvf;Mn1a%JTu=lEa{HnJfv%G
zpJMptNJ(GQTVK5Y<|iTP!)H~Be`zb_3LkD}DcBM&WtS{{-#^6AZSMGPu~~@PyUdEl
z3U;0iHhHN!3?2UN3haLJd;;>;AQJQ)p{YM}0rowU<%_~QrP`=_Zvi@%dcXBLz2l2O
zmDHZwQ*Q2D|FgHmWvaU``lHhboZzh|gH-m)jNc8XZzg!SO;**oxFeDR3z+I4ilCzw
z*QOtKgAXZ*6Hi#9z^U;qc}VXJOI2NZ?PsR7Z_JG?5QF~`3u|}(DG|SyBLNi31rB{b
z+tKLAOH$_QV{3Z{%N91L6y)P0{h_f-EK6RVOB_|jnXX1NxC>rDZR-PtW@bc;a5Rk2
zl=uY{t1D5QraV)2x^>CYc~!Z%NgR_4)Hjo`)GKiU<#AP}x>HTsg|xfmH{(X>^E&_1
zEZ{GQ?(bhLpqV6#0K#QNjLZ{`9IkB+vjs$iQNwC#Zv|y*-~DcD{oIa*>Sl+~MgFdZ
zkaJyuM|AIv-+NB@pHb?;%O4=>A89^Ou=kP6mmsRB3sb9a+6U;x>np6a(5XECNkGV5
zLRdLm+8(qqqnJPaFn+nJhddOTB}Lv8P&0RC^&uF|rPCYK!4flL>6tb7s*RacvbI8A
zFI@kG)89adv8zpxU%q@v#jg&CeiV2Y!NEDF;mCRSCV-$u9a&?pGueeGX8dHsF;3xz
z2dFv*Q}z)Ib_JC+QC4~1{9AI*`&foSMA!s7z^5mJXv7X&?92!k88E$hzMxGNneXzc
z40^3Uq`V+@6aO$M%9$Ix3gmRGM+V=<X>sLkuK;F{C&G`D))A7{cE74tK-ZK*?F^-K
zzEMX$v;Cc`b1R~n#+<cD&G)AY$;MbHVTaQe0fHB=bo^R6_J(J?FJh!ZZ&&vBihL&G
zGt(-Pbr>aFHimY%ipE^5eNra@@xIA&XYJGlCV8R14t{l9?M;74lZuGt)_*+2sG+xn
z5B+~Mon=&8ZIp#^cc;Z2N^xtU1b26LDK4cr1b26e1T9wFDG=O?J1tJ};vSO8H*4m1
zvQ}=cyzf0{@BJKG=eFZ8#U#f^=HwQnG{cWitNkYH7~?}0SO}ON7NIaWiA}{1j&rfO
ztZ{_|YR)_JrN}Wj9)SAYDU$h2#fQHivDv#!@9dnRdi!E7ALxJ>hGipli#2$Nl8JRG
z7wb&Xd+8RE`#TG7^L!|SLY?LqRE6xwuLw#NBC14W(Bg1mRU)b+(<BjlUKg96)QnY%
z*A0K#;o?y|9$aT<@=JAMDBfc4wgq;<`=*jEN=8-ii)EmP#*(Qn#bZ@el=*qEmgIw#
zQx<?fXLpkwQaYNTI5>Yq_B%P=osGMMte%4iX$Qx}H<jPEK0#4MLeX|wtb1&tso^t0
z8XK%LCv_m*%eMrNTB!JtL@tyQ@lq2O1I7qIw=&F;uylt*AwH~{#ZeOWUtg?_Pfrty
z-A#Z7gt?X4PAP}+r821)Q3wPNTG`>K0DnJ!lQ0!=uW6CJgp8MeK!gBnxqQ7^<EJRR
zPZ$+aPOkwE1?|c_{IzBfx^|-{WZ9laLiOdU{ecGe&-!EGQ3kKsX{AF6QhgPjscP8S
z9<AHL154NTYY6)M#~_9;`45{x^?|Tg-r4Ar*`NCLk7faPSe(Ya3E_T(G)9dxbZ6GG
zO?_Jd7anVMA_sbds+?M}bWDZfYKJx-aYOvqBC0bZPCkAgL6+!4SM}f_<}@)&@?a-S
z+9k(`85XzP!J?YT$m!!{C=6aVi$wqNsq3CV)NX-DI=)39;k1}DMGrGAj3{u(?jV^`
z+z2xVld!1r8x%(L!vCM)S6MDuaS#FRGjn~J%tahX+Nms+H<*=#&zv?V0`I{90)MIa
zl~7|vI=8|MT&9l)G1D(nLcVEAVQ9tTkF63Z#ETfW_l-2zy+u4V<<-@(ko%SjK+{Xq
zCHi}?Z}bjmmqqD`Wi9%2ctEC8UhYZ8eL_p8#4csytLLu}6Telid!NaaI+3SXJJ7x>
z$)$L4I!BE>?ED5JM)J`k9x3!432%G`$ztApwBlugs5*U?*P9`)R3O|vDMV$KVfl2p
zqpiPvi8p|OCOr*b@9@+>P{TE#d4W!x?Ozleh282a*rGOUQ^@<Q1E&~MvFqW861b$B
z4adK{YXCUJysSit=ZRCho4wEcgn=42VO}Jd2J5=SW?I4si|@W)KedJ9$_@SLilWOJ
zz+Yg<52UHj%e6+RQP*_DgA+e5y0zohdR$$lNy|?YC_k}$z0HX?-o7;<NhYzotKo>w
z;yH7ZE&t)l>hm2^j6NorLrOJE+)Hh4Nckf19MYB^QVuz8*Xpn8{vMH=VwPec4JA^+
zQJ}xWugW0+qur{fu_NBTf#Ad(fHd7P>ZrjOiI_~KWxU6qAa^T3!gN+(T<G)ySZ)pW
z?QW|ESS?=o8cOw>Y^oX7!dCd2=}no~w3u|h2~_FOEBf024h)!`Mr|Oh6=y@dGtY&X
z!=AJAVj`VHl{CTkfRdT1;f8f;v!NeP0{aS%F6pQlaZ~eeklz#e!Fhd3je$QhDm=xn
zhKS$er>7fGN9WzOE9@0ouHL@Q69U|BBj+-zQ|1n;mcZvTxW!4vG%c>ty+k?uG-hCf
z2hddgdrb|X?Ak%}DPDhN<p>Zb5{1n`;)g%o-eq$d5>;aZ=u_U9@enYII3AiG4CkWd
z*s}ZO;C3>9uxv<pa@5md+EC+-$VIW^4F2Sy#^2`59<WGISpW5{DbXP3k3MWNF081U
zj%QSz3A#85WH!XAF;&&kUL`&rgoKy`kyULBehL!ws^LwsdBpYzVp`0IX34}f@Fh1}
z23F|^85)KzJRIo_hg|nx1RtTxGBDGt<e=yvn%F<BqyW-|iC~JX1sQ?oOZpXz;VFYo
zJUYkw&cCWACV$mnMKw%NPTdVbqs0QFV$&L_jBHL$X!&X;Fi57otFVEUSR53RsS@%>
zP0hw9KPoCAsiYo#hD|PSM+qF4U>cP~{Pc(jNLI@~ek>ayVq_q;Ub%fmZ@E4&Nf$DK
z8gP;4-aY-eE=~HVbPxP^RhF*x4|s{l1&+`Ecnvo!i*zS9kMXFw&+m^@g;Y}m7{_qe
z_{Th&y;h4p-npI60HWu$wZHb|k*ax4M4reac}c{lY?I0;L;#cI9!17DRtelvWv_@M
zFteNHJ|g?)8ZQWkLS?T+Q>!l2-~GI6GxmsMQFl(Vz#mOdrwzW{aghmb;yNIe((s<%
zxac-i>&<ZN)F#NPJ>O4`_~;(duSFH%+LBDQLJvfa<NF)i%t6%|+ZP)5hUJmiohQ6n
zduV)Y$f3Rrxv|!`eLhrNjE`8&6?Y(I&1%jj0m&f$UbU^PQsK18R@s)jp=%%9d~Yvu
z&-3$dwbQ~^HhiWKAsUlV=3#oA!f3;XV;(0#F63tD7{KoSgr`?&quuV;H;$<iA=*tD
zDw2fjened?>}~_ONOo%DemW2!t(jRpiw~<rZVYr?sSXWOT?dqqzA#^}u=XSII(}H#
zbHAsh!#d!7T;QK4#joG46n{z2$$+y7lSpOKh*MM89~|#Tx24XyaNoLr3=p87f5Z2?
z+x68gzI-bK5UJemJ2x<4!Mqq2n$l)vCq_ETB+z~^ndL!(rM?>h(>HsDn+pTO2Gjl0
z(>wVJ)g0oJ@hvvud-fhS?Jpjip^%CeID?VHXD1AGwJtOVr{_Dw96AG3dYapV_qCPO
z2YSmBT3?eTO!DzJ?1%O;)*k^NKfCn<ebY>I5fe17M+Ei7fd&~Q9O@y4=>rg9>&}YJ
z+;et%bF1UushMGM;xTv5D<Hu=C9;3hk`z_e3pVGN!?jbxOcpIF)8iZ-i&+q^y$iN*
zN0HgK26KJ_^=8*sryS%Q0?)F5hkuxqtLn*j_|2CjNZQJT?pUZ)w@9xfSGgz|07UDo
zE(Uu}@GM`72b*|Mk(f;Vk)-q2Cu|%PMt$9u<aqhrYzsNQu5VDngrSAz$piI3nqYNk
ziO-_AI;{KoaE&&{!~wZX-1mOP37EhD;aWHMvRsXCoIVGxA{^JRN3RB`aF2MqJ0FG>
zFg-6d4x-Z12o^*wqmnoGlnG(cBS{rvBJ!xPPWBO}V6^6t@LgIs$dy%g#PH;!)B1P7
zpA1FYy^CJfz2s3E#<#caZd<(nVi=Q$h_ZbqRsZOtIAWsEApNk&D536C=fj*Z0|i0X
zTxvYrhfRI9meLkkEY=RBlf}~fMvf~EvNAjEEmDGag&x_3AkCwHZ<H&Vg`j(lCXv2O
zwa+BA19RkN+H{nZxoK$*{Ulej(yVls%S4KO3F25>+}RcQN+N2dlfxDTy$P1Y&WCUE
zZ90Po{W&`s5;dRlSmU<_1jACu5z!00{z`Kjk(TP}dDC$V>sM)f8^)&-Wdde)9t#pT
z@0kCSO5Lpxi3JNmRcQobNkXXwQ9sBbJEj9UVKP|uPd*0~^of1=-R*l!O23YLIKunK
z;QF=R?G{Xp<4;>{PKL4{VgH}K(LI?xZS6--Y)4tUus_?$vRut-8ftUbvDdVh)*3RK
z4qgLVl9H)MZz7p^Qb<0a3aSCfiYd?tso%rr5S4zTL-NML!p4wKpZFR8S>&GsJMJrE
z@UPDroze>3bAPz5Eam-zA3j=Z^aS^^SE6vv)ruUKrFT|kldR=m^bQ6GuWo4~wT*J$
zR_*76C8-mIh4^1FYND`qk!^n`Na5u$kL;%ltyszN4Qu<HBDHWeEkWEbcsqu1sdb64
zx&N$>3*H-S>chZq7dbhywgJxVsZ(S@E*bHy>jg(Cy&+dk<P-<6*Y+)4cS?q*XrtrS
z*Z*e$@c+i5J;`>$eUh#zIRKlABUP~gxvFgG&hY{3bm;peOMuWKa&v-vT5rv<@yS6%
zY&4)N%{fKEI_O<}F9#4A-9N)lF6QjGDhh<?#e0X3S+lc6`GSlT)SkSj!ufuW?(D)k
z`IDZQ-}Qc)%dq!`NI9mlnvIpBKi1Re7~iqi75uNgrN@`43HtIxFr5iZxftOGNUl<J
zI<0?}DY&+m5+MhRcj<>}*Ip|tF0uh@g>`5(iXqstypN4cOMxg_FX@>D)Z2x=QL~PZ
zeiNK)9*L0yb7h{jNn33ITV}f#HD(YK2IZJmB2dn4dM&Jx4nE~X!w1gAI|;*myZp95
z3N1oV3tE;gxbXn_GLzXY<mdSWmkV><$BLs_@CJyMT>t#E1Sl*(>2yz*&tKt%n)zS$
ziu`<JahKvw2=V;Q%qMd`)aU}L;Kx+OXln1z1Dh{r>9eKA!e^1nY6|*84ja7%w9yd=
z(_`;*zNw0{^L#8L7-hw@<Vs|yVrimzT_N#g{xQasUl%AKK12Yoo@<fiX*_HO>|16S
z<;I#!Ct&bAc&$O{%Z1+H%ryOae^!)xZvTWoufsfWQe=!9BSH;yQF!HJpC9F|G0#Cl
ztlE{U0~<$)$F)j9m{b2=CQpPZv7<{kM#G|_$qJhlsk$f0@I@inVN8ZDa<7~`%kQRq
zAK$;&ful+G)j!?d;%i-=n70I#tX-WY+XH*<<&7{Gpm{>t{-Qj&;7VBYXe+oO#BMh6
zhwLc;qjsj}8l-;`zj-X;JkR(m&8ti?QNy-hk+4rnad6n{_S#f3A*=ISiF6T9gdl04
zWzSPq9=1J=7;->B#Y8sHxsC<~XE#`WaVw~|(IDU}7^W}aO=H@A6ASqGZ}-c0)qwi5
z{uf$KmRV`MPh~jh;TE6lhK@ITj3FHx7oT}u&sG^ibjNtH^tA@UJz5jhFqqu4NMnnd
zTQFhg>tjTU#Kpp$y9{1mRAUJZJe8Vg13rDo%slv4;W`Px<Gy4bVr}A1*cZ1S{GRw*
zG?pSrM3*2~iSo7xwo#>Afq?crD_bWIB?F|s{g*-=AXtlayg^<3lFw!O5k1SQ4X5xZ
zI2Uqfs!k8r%UH<3bUR}?vqOkIMiaCs>l$EgiOjMjO%$)CeYagEIZGpFIjG=cJwC9#
z?$7Q*qv8kn(*Lk2T6~$QZ?=PWoA#azc&J8w#TRpJvF5po%tZ#c4q^F=E&3aVt)|9d
z^U;0pdd5%<iFO>*sWhX81otVEVMQ}DCY(|Tfw*rULlYe#ISY8Yy!LE2p|QPP6&ry~
z&>ds_v|xQDoz0ZyWlcu2r@&K?*%(17g0(vID~GqobMmh$z4P{rVc)bvMWV`Dm#uP#
zetn_mEOw|$E(5FXaxCpp3@D6&rb}*5KFJZn|K$gS)Zi5&9Alo!rdg&@)zakP4`Hi+
zxa8fZz`1Qa`na=idX`D5uhsSbcRN1*sb)bj^&d^>+)+sId&5D>&KhIr_WC*~qlLs=
zOREI*;)IBF`duMv#fz$INK$-W+MOaMm6uxly?L(`nr%*a-Ir`GXyRL;v##qc$(Myz
zV;{iL9rhi?Xg<%*W{JLekgR=Cml8f&Ke`QV1H`&1KUKE{nhG+l0~(p5f(PXNzCfh2
zO;_rHd?5o?A&+10>0FX9HkW}X0HV*Y`+)&f+9k*(d#A!b(!)PuL>l^q@u598tmL6|
zJa*!UiPkXVYU_lfxEI{vH@YJXJ*$Jn<iBiuWVu}{G3c~HUFX6u7hu`-`uBVMC|N1k
z{vbIMRrm48fQ6PuQsL+Qc@Xe<A-C!f<YVUOsnz5R8%qcA`jRITTQ{l~Yn)wkr%7vg
zT(w=o`<TWPv`-FObwR%=?F$P%p--h+AFNZRwj0VjB*X93^07rS08jG1f>3<GZp<U{
z{T3~)rUsK1OE6ADG=o8}rj}7$X4}{8<OA9YSeDy*ODERL<b>y8s>mllWxO+fynv>=
zi@TKry2|rQpY!EkTMVVBjq!Xc6oB4G(pqwx$*jc7t#WO0QRF}ULQ_QC`kg5n-r6mp
z0=K*>FWnX>($I;-@7eASKv^RO@;RWUX=YkHC_R;3G7cXX?qq6iLUCp)3eF`Mis#mY
zp~?v0ht3&NshG0{tI9cW*x`dG)app`S%Lreax(+1w!B>jZMnQS#RZE(|FjYHB>eSy
z{yQ_BsHb);dqt|g?rf5f?*6zoK1XKCs8FXkG+huF#9D^&v665~OS&H48-E4oUv25D
zz;M|b)B7DL5kv{0-tvq#XEa;6-{X+lhs^bN2fGXe=fl_ivBe#Ok}y`0@q^vNA0)-3
zn9Un484uX$BP=63Y2vi%(2QP|o1ZWw0&>pneie#rN+z-W6lo&WXyVIqkW&7%Bsw)y
z-alfp>;`9p_M|^{M5Km|SlnZ`mNK!jyfzs4p9l+2QUMFfD+||5`?V&W69*tVxqQz!
zPOw1tS_{`WQW@cax}C`OuwG(xC_#YBV`>;TH=23|%m5-A8L7hwm+1m0<;-b5lywSN
z2=Z#5!N(42kwbffUQm8OVu2@%51o?YA77WQzPJ~eZ$X=IQcEes`ZE>>I-l$BvYG*b
zY6xyjZ01S9m*6+SR6610-1{WVaTe@(QyLxz$s)Vi`4qQacpr`|vU>Kn|15)xrSVl7
zuH`$LX^?|($7z+v4<e%;n|Ydv*VwdE-)RnD7Jh^9=jR3YT>Z_n-3OI@VVQg?ojyFq
zOiShNxd8GkxsEV}DvZD!A&m8Q1UkEi&65Dg#yIE-=kU)pK7iWLGT(!(olQL~-|&P3
zmebOwUZ+6ygiJvggZ-_LWrUmaQT*w4uW8pM=YYNPb$Z;uDENAu)e<eSS4`i+yvE@|
zJu{ptrF0GwPZA+)$KWn$anM=-Nk#E+1S+icqtkM{6<E%INun<#%@LYWAg{cABn)+@
zezic97=hwZiivpWX95V$8eWe#D%8U=_!J}U*9G*=Ypy_9g?~?1z}%055cv{T)5U$-
zBAJwZa*0~8NMNGV4=5%=@zf#!g)NvfHrpL#u?p6e7_m<Klh)ehQS;uvf%nlqT%`mv
z`=r<V+}}{&<s4r;Ew@d|H^XZmHam!?s<fY`YYj`?>iGC5e4wr)ss(+gUxz2@kJh$D
zDQ2T!r9B2*7)d0gx@|sRcdCC!7dQ!ga9!QfGY!AChwHUMQH8#{z<Bqg<mtz<CP}Y9
zUEcNwsEi>d@vox6s|}0T@`+0D@w(W?32(kiu2*8usQ*0LjW^o1cq>}DOc(5$clp=Y
zEu-Pp(vl|0MTbk|0*Pw7{H~tjrKcALZHZgI+}nQ3`Hl{qiECG-oSOV&tX}^1;doDv
zDz%l-d!WAx18+$jh(2Z;K)1(wIrrnVsB@^vnVn(H#&8!^uize3Bj@~*o@jW0QX&$Q
zScmtjeb%S(6O!6!^eSI%cMMFixVgC$E`b=TX=Uhmel>fNW|1T7@OxIL&jC@;R^$9i
zi1NFG<LdC&eD6n_0UF`Y8|EVc_vCT&tM}37JWi{$Sbjbt!Cb6ne!ntBU(~+mS--(s
zIAEMpv$@>vzXCoj7>;9N#@b|mVvvxa+N9-~vcHF3@7xaKLEFwZCeCPGOTf-go&~aU
zt0fw72HkKO%Y-|4|7+{7U2+Bqfvb1U2UQsGRAJ}AU!;G!)_=}@e$O>A+D#yoGc`R5
zyRC69e1E*BxEy}Ee+xmUVrRvzn1sc$=I5+(h>F@72UPd$n2%Xi?Y1a|MTr*~dZ+<#
zSvO@#!*>Q?W2uad`>DqWG~sN@URl(wW6`#LJBg>lR((X5sr%hG)9OySbMxJt&NJXK
z+WxCpHsaq0w7I$MWj4k(!%78)(v(y|x4i5@FL#V?D%h;T?U2rK!&5!~5;{o*q$L-Y
z{pK-1^kg?v--X437e7W(w{CP*Zmyom`vY+BAAeVq=p&4Ku<{N58GuKUcPY`_edq*~
z(rW!!Q*E%HL4$w@v}1Wt{A~u~qWSd3I(Ic4o8+1`Pko*|oK}|YncD<`1@A}ST=#y*
zN0`A#=70cB{Q!-^yR7=OPzUWd8mL97<kog0Q=R;3gPKJ$s9h)&5Dn}zzu10SwCx52
zXD0ZRGS50(>o*YJh3jn2lFzHO@!{hNG7$Dvdw1G1Mcq%e7D)OCeKLX*u-5T(rACy*
z$AZU4->q2I!kAopiUfFfS9|N7Fst!OEQkQLjZTnCzqB<NlJ=JTnw!pQzrG*Ix#E(M
z)q;qp+E53Y5jM1#0jnEvn*=vCO*~wUf-K^Zvn+=`+;>=~CyzS(4BWlAnX%V(9xOUZ
z+7<rdh%vu<6t!Rf=u*9)4oH0KsY$c65AfV~SUpQ%7zjl(`1`n!#$2g0bt)sY*YXty
z61h)6ijoiKk5sKbsM#y8*aC|VV{?vw<eb#OM6H1uTe4pwFzG(8r3vXev|f)kyWPr`
zE@)}r${0p9e-zMvA_mh5EbAUSQUFN9&Ow*ox9Ag8<uRJyqKl&5$d0<h19av+{$D>2
z%C&^c!Q_*~m_LvPSSe|#avIJ&O`7iyu|_i7nImAbAW}rK`wn^X37WjW2NgG7XA2;-
zp}Jf@CqhDsb&^V;HWph$XeU61wv(6vlIjS$fhv61KxF)7E4LBMQh)pcZv}>mO=e}S
zUsO^Y!D_%vY#iI82YIZHF%0-7L<S(bAb={So4>0M3;NDO+(5pAIjAo20TE>%055GO
zIXK)2<lbM8hN>@J+J7%KBlv;~5&MB09k!M&HS}fm{W?tYT#GA&wzv+8nDGu6xKKt5
zU}+NmP0E;F4P6NXy`qdKbm;sb=?{)G;c!8~bd41{GJ*7sxPNWEOpY<St7n0!$kX8-
zgQCrc&d1G%CB9zXCX+@_*8mq$Ar@^z<G-2#9Etwt;LrGxD-tgkYg+~dB?_NjO24WK
z#0>P;e>kE2i7mK)K{Ve@L)}a;()zuaTwfI_it1KGQ2;G2>66fLlIX=0<fs&X!z^%a
z*x`JmUD{r`<O;3Wq2mlSpxefhN20mZ=iyG+d?S};;#1d`I8E2f6JnH7i4w$!o!ylO
zTy2f{&kDhv1OV|Zgp^QBg{|Nhm&@ad!Vx)sm9xF7<X(B2U^e1BJ7tDE?>`^^g`$`F
znljwh)c3r3f$lNOo0h>spjYr@5u@7Km*WgBmK$u?Wll>6Vzy#5GESO&0U$1%Z;GvZ
zuO<j9>vT-fH{%qYHdv!~7$=`TwyzTw`eOUU+icUK@bKyNjDIcY#VRXyK$j*IO_?W%
zQSHNr<0XCbU*80S?2OClCjeLCkA29IS->A`Ukii&9{*rW5*zr@&hH>;_VDiyGB^0v
z>K>cBdv;>BW;=pyu&^I&xhHpjeMRdr4Oz%#M@GYIXr@i6_!z86G6*0>D0l~S?oMte
z&U|+OJlwjN`n*zCTkuQb&B=S1(Z0IHb(q~hrp-*i4zKrd+OTiBcCW}M)bIfj!(}+4
z%GA9d)nNW>FvkLKITwEkfdo(Swi?6)<a!6%j;0poJUDBfne$xv(W}heDR9?^9L=(>
zPsI7e@s6`4fFJ84g4d{G$giF8rSZeUFG-vS83;wa`)SJaQAA0pF!)08{yirr$!n$n
z$JF_wd9SmdMhiAc`ZYW^#aQZMoXTHF0{E;SDuaxnwGXx&9I39i1Daa8r>H`1xD#xD
z*2}85)*%CSIsh6K6bH*}kg)bBD6);qU2;+T-qx_{$CEy{Q!rVs#eTWsZ9Nxs%kPkS
zDq+#;^G2I$k#ROxOC!;B64!?8^2xKkFL4+>gSnob9$m9-7Of9Z&n}CbH#OjhePl7i
zhV`B3Wb{EcH0zPKmXk2^w-NMSf`O1!p}){h@dtL}eKda*9st5~^u4zSc-tRsYuu1;
z{24yl0l^zbH7-NTKi&)WWkx(ZGPlJ;@L(o1R$J`@^HZk2`E;SUwZCXe$q<(6#w5`G
z3?JWG3o(>l0(@Y%=(DOmTz<sWeHoT<GY!D!FV=x}mzoJXJ^d7ji>~G%%BV1S3Kt-7
zIl~uQh8Brsu-b;+g@{KfS~&q*s^w2<(XUw50)z9)WU`#k<{ozAxormJ8j`M10=8B+
zT$KUvE|M1lrUoTmU_||Dgc7p0^lCZ5kQ_|Fh58QPf|H6p1)avXDCTdRLC3>!^Nc1?
zWTUAI8s0X>&Zwq1u#7zmn$ZE`1l#?aZ&m(X0Sa8V`|Yx4bk<6)c2gS)*v1!W-wY(i
zbC|maQ5<sTxV3k<PlA<K>O$4UpUTc%tViw6maMs-EHEx7h<))<Ak*-nEBTfiz&Pt2
z2x<i5^{D9r+z>J<nM*S+!}}=6j<iD$+dXLnQs~q_pVX{1%xK`KRv4z_y|54`y~Ou}
z;b}VOmm*W@UGUT2JU)ZvG(+yx8*UN6og47QIDQqHY|h%%b-$88_YNxw%sy@sm}HiF
z#JkHxN-N{cWsU}Js1~W&vF|EZ&W;j6tL57L?eRjL+mei=;MeRib-K&S;#U_AOl&?X
z<HQ_Ao84l2;xFzxdA`_r*vIcF5??Zc2~1b#RRE2myPxg%`||98WhW9ucP&6oKfn9z
zG(Lv(EWN@{FAL81<UyuRvrZG{iy5!Ye<5p|`N!|7JR$|y2);ssoz`iJal^e6od0yS
z!n&O5Rl)aNP7Az)OkubixwD-+BX8&H!T<c#aERH?euFRPhg?KFG?Vxjmy<lso?{pC
zb{ht&hyh!jDrI2|7>_aXAJfb93w~4HJ;KDzrkL$Sbk(yeai|*92jISlbm(??Q#Po~
zxYN`2Gkxz6K9vYvA>zyVLv)1CmS4pk{>`Djon71Qd3=!f_T_X*&j<yH3RgK6{&Rnv
zxfXp0_iT#dNW)$<^B1t#88&(QjCi<6X;M80)2Hi2ZS@@+RZHyTT?Tj#L2_-S8LUR>
zKN}hwn0S(0Zj;Wc?)W;`P5TaLcEgY6%+OnB`V+<f?jQ9G`R8kMGcNQ*j87p0qB}2k
zQ~8Fxdke?5@>a8{i?(()Pp~H#G`HvTT*>xC<~xqiwH4$F6;Dk3{AT}OZ*px}GT?p0
zZBi-T=E^{LW5HsZaI%Sa(rO;a+Pc|cY0bt;&U)*C{AE7?UYx|+Pv;PlNR`}%@OV<c
zhu!7eNe4&czD0WuoDM-m-UYlm`x{TKR}DC0j6<h4+%hdMDMp3f1>36nm4U*frNZMd
z7V(pHF=7`mOhSRUS=Df%M`*QE`_OmF%Ogo-H)g-;qL&<ijn1%Lrn(gZMJDopI44$*
zGHoqs_#MqA&W5HaFBMMt;L-jkix)|mTYsm;pm6tt`?ka!pl~+kDR3GL3XTi6R%%wr
z?8HP!%1pF0NcTB)+2e}_35cPhn?`i`=!>MGkSpy~!MCuq_dD8_vQ-2jEIb3qrsB_+
zgH3x$Z=(#q6IN`6AY#JtnhqPaBCUiKhFE`nHiO!4=j3Sx!>6RsNp$H`%2qtsMvKuW
zJ*~<~V&FC#GLseyOC9@@zKi*(eBOf@_wYfUi-}Cn$|#_I7C1A$Bzr#Gpe3k`kZeWe
z(fSGWDZm>Qf6if{OE4?zOP0VQf>qz9)y|CgYer^%S-Qj^QmZV@{*y1&Z@5x`Z}}yN
zrRf}JulT3JT+fEtmB?+WDQ84YUGK+>y<~B|@D2)rv{$Os(cRIFXI0@pIUZv7Vy3PB
zx|L4tbsjGRNwJGDq<~f46I_tVx<>sZ_}SlkI8+)x!#4YsM}gmAK0^-x6%p?6znh`w
z;y<77R5qD0>)GXZuNLIDa;ywhP-xADO|OFB1f;0t61=bfev=|68f^OR6Dn#~sJaM#
z`8zdHR%T-_0fWXGY}N#*eS2nwl;X`h%+@snY>2o#2UUg3t+@qh5}1wUX2tLSEs2^%
zU_AK@6V1c%JBnWnkUZ(aqIDA9`WRcnZHVZPhEUBH=}IF!l?jIAAUV5B>Be2h1;f{u
zi<)#L`NS?Z-1C5t`wDYl<M4T#>zYoa_v{RDF|OFSGrXVRobmWRxK_U!7}l102SZ-1
zS=$Os58R$bwxMi1n%N(({rfAA9P(t(c^(<qWkE-EJy3O&6Nwo?YODF$__zjeSm`z0
z&TpPk6Mf15qLt10#9qcvAsithdZxko^?bJXldoR?D^A`o-&E&>SEtl8G?8=U!~6iX
zlMjda1rxcCHTt!9F26e(IhfgpeO6PWnJw$Z@x(EUK*f7MxQ$Tswu?BT;6{lyK!+lI
z_4Ym{A}1RrJ^L9jhgGqTP^BD|GWYs9gJ_LwXxsi3=5U;55%kKvjD4;Ap(&rI67;ya
zSXB#_5Y36{L3@!#f4)DC6vrMXn?8!vOtTc8r+XY$FqC2n_4Z&2UDd_=#*a@F3ba&M
zz%)rrL73DRgbKU<CV*1V5+}X&&YxnVjtL&HUjR5wYKKZ^8jv7pKirGDWq*1;vfe<D
zwLnN;(tk<77<NlJQY}|HIaVPF6lDXBzsK=^WXJx`aX!4vugCMhZl`;I9`~j56slX{
zD=GWsZYw}^5ytDO%`bhm1JIlKHUq5;TN!dYa=Oo>!m)@c7Mo2jWn-hQa@OGAu(d5C
z-m#E2^fMIsz>b<X=P>#Sck)A7p^~1>UnWe6!L&6DH380mZ790ew#3J36gL?+F@;|P
z1dxQt8e*`VGLc=XS6^-9IBP5tr-SNZpiIMel$XCG-O!P@wF_E}#{ydB?$9R(^Ps!0
z!{p{u)eVoJpnq#t-E{Vbw=Rv8PYvGZ?w&jvJCR|^f0v82f7hFvd-;E8_)M7QYl%oM
zg-p1Q_HZ5NiLM-*-}68dlm2u+lBP3~?ga_w%C9!;-md_i#Up%~!;Hvt?XB7_4EQ%L
zmhl4Fi5FHg`Wkg6%oGYxlyZ&;U*rI$n{J(>MnyedYKhcc)&=~#r~bM>r#Ll)_X&Lw
z4Ub}Mjqsbfcn|W=awG-EEU-rOWb=&J&qRLrkJgke4Jgkay-o<CK`e*~u7A2RXZj>S
zmeImX>1;^-GO=Q}+tR}nF^QvTZc}Ll^Nr@_?{ZzGpRB<pBEL&AI`f?jbclTGB7v6G
zXu*An2|c#XJJ{U4vslP)eLXxHFoB01V93Fl04lyxNCtZA6bM|TWw(dvbKQhwG}hU#
z9zMnT@posw5SRG$TEJ{kL=f6}{IwKK1V3T6zGar}+yv=6+YyYga*9-9o?~V@+cpjg
znNIY4$#67Q93l}JiNh~aAvd$g_+;)W>mjoVcbBkjX?(H=S`oTpZTT}8Q%<0WEIG2$
zWjgHsTr{UVGvQA!1TbKsVP<AV`T*z7!)n{NxHc%Cki|VxHYlK!Rwx?S!LdtBV{aLO
zsB?6%fr=7l5^`{uOb9No=GS8|z2Oxmouy^PRXU|I{^I;-=mk7!r;qzC#_APzIhZ`@
zH_$ozX3`B8f*H$0?o}j*PM|<`mmG%(OlZ+$CLr(E0#NH)35lR#NorY!g1Z@xEcA+`
z-?Dh)C^|ps(?jRvY2HH|#??R8v_wJw1TMUPf~Wa>SRT9?p&h<px3QF0qQ~Y(*?)Z#
zKP@$mDwUz|ikVJ!tJd1hI%o#3p%+>6FsWb<Ug)mz<*2{1LW%Nmep>V=XRe~Bn|srJ
zT=t2LXU2t^mI9+`{Xc8X^!Seug8AxgWftY2z0&xfOzc9i={@^{zt<X(=Y@(3zb%Cz
zQii66>4ptYYL%~z?!Ql~OIE30MUg?Fji;Kjm=3xghfS8eZ#meK!z<SM?6gvgo0*v<
z@BeU2s;<ir6Lkun15iqmck+VvlZIy`M5G(mL3ys-jhApK>T1W!cnzQEes&b!<K-3c
z85zR}3k~bb>EAa<gDI@Yr4f#|TPqdnAYZ8C0w4<pS8v9H?%SMTI>a$3eHvy#0q>~j
z2Qb1L_kXnf5C|OB)!+YlrU8{o(JHSZz%F5`nFHj}RK=JZkfbDjhKWBP?Zy3ubXT8c
z8RoaL-N6dlw^9eCE=}GAv-P;0tu~?(v#L#@$?acXZKrntU<WfzPh1=3_t>4dV}XH>
zVwZi$ns~o0!?0?S4rZR2)p_*~G7tw6KV%J-Srb6ZbOegcC^;$HvSHHr038AM3&bPV
zhOJ_w(d218=y_+oCGN{!SWP&Pu9?r30DQ?xK5lhfW=3D{SQ1UU8zNy4#i7B-q7H3c
z2K?8*m*2B=rm2l@eYepHNYEj-b|ctc15x<--fuO7e|Ek~suwNa&n#~~Yyr3Y^A3`P
zkxn8!=#uK)$_TikG=eNv%M{a<@IO4Jyw^AXqPuyjZN^=2^ZFo?_(eHpG8m(>`-fQ5
z_UKclwppH*=Q5@J0c2(iR?&df+=QS~0}3I_;4)e%9pF838g;{v{`R>p?%Go}sYuIf
zp3v69K!Xtd<)=;}*gg<3mVhFs+++A4yRB$T>RZ&WYPX)d<*+y`m2bSJBqJWn;~ZyS
ze1<di_h&#b>lBUHvL6|&cN_&6soQBTk2zBsVq8WImDf?H^`jjMG|O7_Z+6Ill9rM=
zdES7VDgKQd6BAtMhZ_6aqd7kVjsmdmJ%J5}DwE2$gpIiPLG6lOeecO%?c3#28WbbH
zaAR(6ZWy!8z5O<8+kfYSDJv?l#P?UO<v%Xik7^xGMAHN|C~SvVDI0T2JO)vmB_>et
zG8|rw(sF-;?In|j7?R>y{v+fcn?ZltK0^zS@gs2UU(;bBdl{`YCm-mI{9q7f(&aUt
zW?>tN_gMk$vyEYH9}yo)7B-eUYUu=R@NTNtZFPEx(bddTu-ZYTW~rxsoslK_9|3Z6
z<I6B`;PAvOv-QY+aH63iRy?<uHz|CsMKDg~=ee+L5ZQaYq@J(N!Ir_6nK7j7&QIhd
z`_c8i&($WJ$$x(!d+4#Tq%H%t&AWX)F3ASiIR@rA@{}e4U^?!=UrYK2pI`$wQ8^=5
zGeOU4qF?vP#yV}r)l<GS5JjRPsXj?pyf+-sC#gYs>6lrAqug!B`SX_P&=|IYPgT1W
zgz&(KY7Jywi`vq#+z}QAUU$zyRG5(5z~$xSWjZ%b2__H2j-^zG;M-t6^nICMpqpi5
zw?>mp<<BUSFzP8iOA4ZGuq#x#y%>icFX?1)5nM^b?rsd5<Y7as<O=>2Y0}7PA|vWu
zu*$1k)(SvHjodk{|H*Z6TmhP2aLO%`d)<iZd4{t=3xF>j8`vEeZ~O?*$vA_Fj7)T>
za)rJ+uGKClA@&?-MKA<T+E$#;JXBtgCw0-G^XJ;qwi-b4nMc#j47cnji4+b%{N+x&
zD-=6nnsi?d@6^41EdtsRa1IB+@Tm7UG9vZeEN>-SB6dsTp`pi2l8ukfmCHz$oiYj3
zq#EVx!HPm~Z5iyiG*R6={j80bwU=GjXQ@WzYH2scRPVocC#=+{Z)`@FgdWKzyDEfm
zuJ{Ln%*r5%JwMpnpvsfs7>pd1-*Ltm6`YE+(XTv`F#Yq@`(%b}RSGF2Z7sobG-0L0
zWvA*w_5II-?|E1xeA@G}`S0_D^?QV#TGLvcfNiu(5pk>6hbmqtTcDZeh2?|EY;E=S
z1@NytVLdo^$En<D*+R$>7n1d^C0u0H!D!9UzA&>{O0BT&=PUhJX6FsZ48Z*_Y4hrY
zbiZLrwf!h;s7t~G=1fAoPNdZIE^2(y1_7KPqHznqg1bz9W!kv(Vs_q$vp1ifJq!x-
z+O3{E*U)D?xnecostPB5qNQj|?OPPWrtFm?m_mRXozuol2H*B^77$gOh*3c+vlPGo
z9Fd(mSZpMbQb1efi8u=L*7DwRsftnkSASI>^BL<{Z-W#Q*CRLguyDnj`)I;3b8gsB
zC<*TFij4}Z!Y@WRjTvcp&@DdxI`n4$;uxe4)4=^PxBch2lx7AB_hq@9l)YcCgGoAZ
zv@z*9$z*rmk1n#e-Tdr%P31n(V&ZH(Uk9KG)!ckNS>%m)J#Is&p(r#S-BhCQ=hhn)
z4u<$Tr7-0eYX&eQ*>+#RohIY^^U9p{oCAENL^Z`@Bzv|iIloWALu?|UE+WFg7GW(Z
zotlrTX2p?=%)AQL-HC(AJx}f@RzObMbJAq;wdyr<plNPiy7VetuQ&AV02og39)?-M
zUiUcOaRlD{ebtCP5c@5dSJFVe;20POak>Pp@hu!L)ToPDcqG5eZ|M?GV3ww*Y9svH
zk5`5dDB!m&(j}M8fZZl|(Po{DJe(}?_tkbFzKi(uTk5T_<;ADa=9hi2=;fDXlbN1-
ztlOhCei~(#*GXRGf1`e1!o^g{Zf9f7mUW@Rzul45RH&Hw>BwL$BEIVm6^A^;SsAEk
z_>}p5xqJW%39q|q-4JvQB-}`yQb;{`C+Zd(F`5v7nZM9Rq{hwZGK7=W5!d7yJ-Mvs
zVVE0g^-pE_=(-*oNMd(>Fk|b=Z>Qpxmo|ay!#K?f3f78R<NiC`b$kW4W%J>$>_cFi
zR}Uv^{7L**99LI%oB0>T(M_DG>nba3Pxdw~w|B=IqJ@)dyp3E<9)G@HKC8a1*4yp-
zu8~PO8X6{4{yO?Yc=4go<5R$WjMJa4L{PKUVKAWG(>OK(tUT<j1Q9icc}GL9=t@L5
z*WUN3n8m|R>%p$k2MtX+WH0xm-A^NL?@#4R*Fok3Ks&iEu>MxBN5BpNTX2MN@~f5b
z&f?X<yDW5Gi!Hif&e}Vl)6GvwFF&skzC$2k7~&xj9Vo)W+}R(0S6;hCQ^HoS8D_t$
z=5<U>sq~HG-$+k5ww!l%`pvr*S)IAVN*f<j)r<(gjQ)x(+f6B_<hO58RaDIU_;kz)
z$}sgf$b3fBh>|<K02Z4)`rn^Xu3~>Jb;(-}J($!-ncIwLa0wY3&H|+NyF`O5!7VUU
z3b+?IdMh1#5;umpInoL!X)Eb0u}l01B<`(%i9SG)*Cco69`Kh;)S)Ti6~K=?gZGis
zE$o#Jf}23X!zDl|4+Fct9s@s`W|Y|rHg4Rp*RXHiCe*?frSa$EMFCIon_y?ad?;!J
zw1h0<Jx|sqo(TJX&aKH;&AfM9%fl@m6nn8Fd3rb!XCz;YtWso+nUrKeRWTY|j~e9k
zpZG?~Ob%oKNF<y)tG6hYkd8e}Ja!j>!jf7xBvi&wAuO;2f3|rXZL?wig?r2>)s!pp
zQ<(YZ%y?yY!T%l*tKm4hV5)rjLz{1|(U06?+$qwk?hTj^qAib@G9hcq){opAoCy~9
zX2b1U!SZ}91SlotZV%(;zKoOu1~(Z1doN3Hc{TIurSX+AeP|5aDOpRZY2}jd*x|-*
zv0I^B(eiuTpx{|uyG)HEDIU1iWGe~9aZ$0IG(Q22GqsOofHiZe=K)BE{qIELi1T+p
zk%?CKh(CSJwOuxOw8q$c|KFXvcYDhLshr^eF5*{x=f#>$f$ku@IeZ%^){oz8Gkh!X
z^R-{DWc4>tk>D+)RL$>RJuaEKI#N-21lS13DNkasjm)Oonk|;z^LVbtxh{V7>A0{|
zxf1q!0ht?6MEyen_amAQflHr9lMNpmahZYL=NV9!b$I&EZ^7=~*G8ygKs&?})g434
z5}OOou6l9Hfg1w{=|Af}{q#+lxCc|n`}_q>EA@}xu_-G4Qwcs7bOI61@&r#Y4bkg<
zZoXtB{8<e{o_`Yw%f42p6tDrx;BnB96uhUg`5_JSk%9i_dM$(&lQkQiqrJdy8F*2B
zH&X-rISG|`7&^;^k_T9}g<HM=RA$fc0&aC#Z3iMSnZowdB<R!dM`nHw(T7<FJg1@4
z5xO=d<nXBD+KT_OY2s6`FvLHw+$P2f%jNs_O`MU*=SN!A5mOyYaKszmw2{I3rUa$M
zbnp@_$3)!<pt@Wk?+)QzYpKzDtXSpJ%P&#sEC;9WwxsT<UJw5s8bAwJSXn|^S`F|3
z*2@W4?s8V+po6&@pwZ23^&1OYY5H^j*Z;PNEv{-HD;{m(B8TY43^OP)Qr7#a@`&5s
z+G;Wuhmttd`-^d$Y<#0mOIK3B9Z+}?hKP*DV&c74P7#XgxoST>4-$0J^Gj^{f4`ke
zxzKQn^N)HXdqdNsn@xa>T!0!Z9Tl0?mJu~t9AC7M=d&4X;S|<Lb|Zgy2UyHHUYd}(
zFnhs&%b+*7Dm?c_iG$<)v-bp4J%^`ItIeMxk^<K{uvxV5*8Y*nW!u~}XNaYVz~7Pa
z8>Y*fDji6~RHyoHM>&Su)5`q=)K@j@gyC?yF-^ee1rbC>a>^C=;ZmEV5TZ+)X9DXO
z{B&ndy<{xl8GVrKZxxDw;PcA|WSuzTeW%_)e_Xc=?7n5Cg@Ym$d*C^?(}mG|6poC?
z{A`bJLU_Ls9X-rmosgcSoAhYCm7fA0fxv6PP6Tm!@`vZjveUYs;;%Q{;`Q5>nmMxi
zOO4VmeeOf8yAHDqSq(QcuorvYdu#r#&eQYc3gF%8*5%Hiwgu?GB6Tz9d3%<X1Qj;d
z<L|K>&%ElRWyD+$L#>LL_kUH#Kyry&f!%KchB#tEH3NEYE`SXS4Ic|%x0YVr>R)TX
zuf$KEF9sLjx1c1F9OWX(`Q=Od=R7KHMB_?Vaxjpx@>gJb&t@M{4pFa++B|6-pMyUt
zM$Ed0*b#%Q00HEo2aXZ7-I{r&fBcj0<{KA=N-vcr(1x3;7Deg9Tk@OqQT544P7I>;
zy`(J#b7CwVyu8CQ5AZIuox*<OR!!U*FnUKzY^Cd$TELI&F^r1JHcMe^a`$XMn5(Sy
zujCqVHY-gmmmlcK=cUlmxa9+YK9)9Rv-CzV=g*O&5w+D^5%2%o-x|Cahdsb4GmJQb
zAL!{feQq`7nW?`lYWmJU)4oE<J$hgNZp7)E`L&{G)|p<P!0KATxN9JIbqx>v$E0ho
zNyu!_jy~O%CQq6LKiRJF4LHGipvfyRV(h4i@qZ}XmyH!e=nIzN`e!*qia3ddE6~@?
zbwEAj?m+S+yaKlQGU^%#gVe5>yXbv`#bNsLE~J#@rr#&47Onf3s0OeN%93=`r{7#r
zyzA_RT*t@3GiHsq6~llvTe0tJHjc}r<73@OZ^;?R0DIeKr$`&-#M6=}K`AJXK#GcF
zUikio$(#CZVE$yMLM*{VwyneW+UIWS^Cb5ya1PMxGW;<zI%VXPHq)TU9hbWuu)%l>
zS|X2T2x|y~1m=JIP=339TKB#(O;}m`94@_}5SAi{YC?6$VsbeUiZ9p?>cv9e%n#F=
z3jQZLZ>hc95UcUOAHp1~4&%K1{Az!kotY^Q=g{^J+;Df$aZ`=xxh`VVLodERCsPJ+
z00oW+D~gJWPQK=21)jGy%vgRX!j43q_g(6Oi#Av5z|80|IROK~wPtXgN%wv9_hizj
zX(yNriKd6|h4~_0{cAeeFqYJ5oF0YoSNP}GAvtX9sbpMcFHSb}T>~`x7p1R)XF?ah
zRvN8GInEB6Fh9#)Rfg~~#b}L)8P_kG$c>2bzG&>NTJ%{7>x7lj-6@8}Mpxba`%iWX
z3i+-<`=fMsNc`uHo`Z8p*@A?o5OGq<-#PHvk28t-%};w{eap4RHNJ5bvn}C|%}ve7
z@OPfH9{zSVs<m6bD0Tn5S}42`E;QTfBs{w(@}aYH2VMnChVlh`gGd(I1HDV30oO2>
zW7>Dx7w~Q#+`p7qs;Z=@cJH#<QsubTR9*}p{TAt-gQ;rz<K|?`wGw!~J|OOMN@J0p
zl9z}4(#`N(th+w_*8$#RfNfO6zFWZ@pUvTTk7snuqqpUnW^=LBXF%y4%;Asfu$sxi
z%=ox<@rgf9uurcyC+5g|=5K|af4{Hz=UK!Z5!(A+u-ds5QKa^CzP3GTW;0inp)6OE
zrM7s{ory<I(shLU$ZFtVt;gL)*bZSfvZ#X-WAj)Hl7aN=2P^FSPD_SSiNW7GQ(pFO
z)D7>682lGN_CROd{y+Z1%j@Xyuf8a=|8F>>`@e+7l7ZZLNe)^&Nb?-IfVXTpi7)wM
zJ#6O=&<&MW0Sx;0K+$m`NTXWcn!)1r7EXbFul44VFsHqdKm4=y)6?7f=Da1IquM`s
zV-u}2clqr=RRx;(bsRQw4sR6u6dnKN73~j3hPpD0?D3MJKcw1qmkIm4of#tfw?j_&
zE$s5Y@?;TP2fy91e{Tuk#FLO%Tzqw=o{**?E+@1+;{V?v!jJP5r~tqo>2Jlh;^>BE
zj}4y!;me}Khx34>2k4+bB76&>N4cl#hPFRIEjhv$u^oinuQmZz2`J1r0sb(J;5^vL
zD8*YZ^_5xeUA+^>`bfG6-S}*Y7AGB(W??`N?}tYw$+QtRA&W6rJ}Tmj&`&IBaRfa9
zkL;sw=5O~eP84-U|2vVixG@TniHVKynRPd3_>mIu^QgbhQvZ6jZccgl@Jwq4Q#OkJ
z3|_dG?t!vyVAsPG*|#gEPk{liZZ){~NkT)Xz*2wTSGS;<qH_1I(o<1UHz#*sSs^o+
z@yk{T^{?Qo7l!=B!;hNkVplIDB>L-t#CEqL)zjWKZ>}1Hkg*3MF*UxI_emC0{M}<@
z$Tbyfr2O&Uvbpu&(mzK-k+;1@+gJ(j=kspE`}rxM%lP%L<yxPY8cZ>wDy3tR_I+RR
z>tP3X07GgG-fpOHgoNa!eZgJ81?}bw`ZwZ>S8~$9Ma+dO0pW;%SMGC9332#UM_W7v
zYGSov7MoK`{f1WHI{gcnvZVUaz7%WIpG!c$_(+H|{5Lm#ZvS?e$;WaDL%6HRWc@b_
zC~q`V5~t5x5Gqegxn8Y&m?83^gTxsvTsQR#Ovp)_jU*{`#w{CG`Q}x8a%*p^mE_0#
z@~i6!fFkJtj+|yDct`yB>4jXEm~_^y{PpH`s|Gf5<afV?Q6g7xc?PnFX$m{1S1RqU
z0reTcClBB^U;h{(7_WZMfv@?->vB?s(4RzCw*aHqA~Nvi73<mD%4T$RVQy|LS@N4{
zVcMQaX-00ro1CiFjRP(&uB-+T69@MY#j_+{aT#ZE$F+V1MMggX>{80_gF#B{Q7{Y)
zO+8*xjn;0ghBqZ!B5<4~7<8INou4?`2o!rk%29~jQ?}k`B&uQ|d#e09ZtjI0mip6?
zu2Af?v<^~zvNbnKRj^v8DhklQ1it*q-<~g5K0q<w*&|;EdAn>pq2tr!_fZb!wK?O?
z6!2HfA0<pEl1A%0<sHFPm%*h;;vXA>ezrl~MRxP}ebk2MnU$^8U7^2j!2IX<YT5Vr
zaPMg0L=);Wzx}k&EUhN~476eXtmyT8u1Eei{2iJ&$bdg&uy+7Hh`Q1uGW_N?S&Bdt
zB6L18y$E1Tb+o!V*{a`ywm7X!3;SO7Dkkmuv^oDV5j_0)A+v2xmbAg_cli;p^#HgX
ziq7J7vHS^-`gJV-;t(|((jtOkXZ5&%HB;?|3{-|-`)s~!xdLII9{Y-~OasnHN5A@S
z0Rh4t6#k!YRpKzRS(X6zqUg9ZMCy<{VK+(BoI!68hns2oZUz0-I;|UIc-6qk@qr0G
zaJ|Uzg5pS<a@(;Lc|=K0)1s|$k!*>NdH6!~sf?@2l1UDAWZQD+;Xc4gc|y6y3Z2MB
z`Tf9wv{lK>2V0qTvZGV^0jeXZZFE{!w)gNrX*_G1$Ks^U%kw3+ph7Gs73220`ECj}
zZ2~bUHr*mL*5=-I9#e1pkICbQX9SZu#S{|MN(OQ;I<$&^;(dJ4)4|2g7UMo}AyK&8
z=ifYOK}rn&Re5%MBFJ6+s%{>(peFkMDehgJLIt5gkE8DA$IBgK=bm;S4%**tW-!;T
z<EUFM)1M<AFH7Vsy*i#-5txzSGN>g2=gv^Nn###))tA7P>4Mi5*r||nrBS=L>d_#+
zI7i;=owGL!yT92`^;Q4GpG`{qcKHd|?Sh(WFJz)--l3`zz$yj&+^}T#cG=tdh2Nqt
zq+>8ygn=C)4$j9Zum=Uy4Ux7?w2tp@RqM9Fl1Hi1_fe3<cVT|NzFop6B66Gz0tYUM
z)9X6Uv=-$-&G0sz#gxPrjUlw8bRflBhfc+zA+H(IY}|fN`{j0S+#@)UP^QA+*Sg@&
zjD4`#9Mvm`t3dQw{S7Z)?$<ojA;fha$m$T~dZbdQ841V`y5nxpYpj+h)atxcy#z6k
zUa@&zp@Ljs9=QDs6NEGW?V$37{*LQQ`lf407kJYrne$w3nO(9yM9LN%)R|Mhz(k0-
z_jtJja1{uX(F=q1K0A&BpjXLKbMWDF7eAQX3tx$i5vw3k6SN0i@~hyvY_qK3KExMR
zjX9Q{Yo+lmn1{aRmy<2_ioz^U(i71uShu6@Wdw2bp#W<z3DW=2bXH+ey?qx}x{(%%
zQ97lO9+2)5>2B!`fg%3V9ny|~lyoRajdV$OclXdR%zXPj_>SguuDzdYKfhS(UgLw0
zERyh5>$4xYu1zzrk5%IxMIZ_)su%ool~1A)PP=<MALt6S+1xsiiWRd9`);(k(XMo?
z(eks^#z4GEA3;!b3T0_0a_pQ;Q|*<64eX9yvZdeebecUmE!S8G(iuJ;et*dcMj<X^
z5p5E04X=)&6S8`+6|aOeGdgz~PI<i|Xp+t<7rZ^NgcW(9xiYn)1nIfoZKd^w|E^0b
zJ!Ic;Z1`kgXXm-jWACF_%qmAf^3XNfa?RYy16vOF1^FaHN)~6L*4DLn{dp5JvZ^%@
zlj0Oisqu1IjsK?F?t(3M%u7u0c9`~VyTP%JO+&Ch7r=JoiJHBf9Z|a@0UuzL=lobH
zXSxvlFt?0|aB=uE@6RTh|IvGq=1Hv9>DnB|)bqiOv=%@uVvHE0a`llGX_T`aC5k&R
zSp<N9y?Po0BU8dgmHCI0vx|8PW>#AK`V|XhNrCJ;*pHBld#W9vRxoQ07`6-gn=(l$
z0egF|Yxg}r-Kl8*H{`2NJ<GB-(fKRb`H&ic69>|*?Vuzc{YDX+{-x)oS2vGFo&hP|
z7p3=U8)x$c5s-iTs*`{}!BZvZeIc(B0-uVT!0LNV-oQ~;k~YJ%cMf>gPdW1Fn>Feb
zhU$n<-zJAfbO1<HaEr@MEQL(6ieaj}&a(5)T7hioUx3A{tC%Ojz|2RImYQJP=x(`F
zncZ;C@ZH<6OYQ3I4D5+Wgm)u$_^sx<EG|3=9fFUq`-*xGxA*q+Ex#u<d`bD?cx{fu
zkI5La&SdJYUV>W36Tyi48WUw+T;S=Jjwp72{f;QBf)W=;BHBTF>q8mC&dLXr(gaWM
z*oDU|1-dfR)zK%^f8P8Sy%WwiV+=jPNxcvNs%~FWQrI3U<9|1y7&~F6w1w}H{eDg0
z7>bk3RKP>FOUlo!nX1hFu9076Y8vdqO%O62v)ku(2tEH(It?SD6UPFk{)|s$7^5Mi
z!v|iJ+$J9eLq2#NLHZNvwiJ@+)5NTLqSJr;zyP&;D(u0h;=-}|&eNaOEp`N1@;yOp
zo&90m`W`{lrRK8rtVp+X)FT3mP(@Dvwa?ZAp`P_y>a?bydrw`>97WVk4?OcXvk|JY
zC+C{J6gpA%Y1U$Jh4c-D&(W;s)2BGrDj6wOPENksSLneC?8&PRHM`_-sVVeP+e%>%
z8V%ijQmmzUpxa6^+b-GmyRhl2rcVdzIjL2Iu&XJhdS<cMQp1a3cTp@+AKy@BC8gTD
zr;_`%75Ez6-T$O@<dhsMxo+)-EmpmFm+zUT9WeA{gdT6Tk&SrkA2@$RTV!4&@o^vg
z(P}Akvx3~DKkzWS?r|nRl`YvK`WL}QR=#zW6U*#~XYMF;;zo(P^@s^~^luYdq;7_m
zqNM$uQFN(S`_@T!W1_ct%kC6pi}b~gWL5$~=qT|B&{Vn{xALd>DMe!yj*mZUdD)$*
z!NuW0!jHhQk$EJFO_Pz5W(`NRA%=vB;6fBgGhiWX8lQM@(H&Xb)0?e~iWIjT52C9i
zhC!!%_0%epzAvU84Mki1PW@Hi;MX^SEB21!o3%&ZgWm@vYreNm?Bt%`YS2~{e@F9k
z^M(ypuVgPoFIAGVB!EXvL$~uI?oO*EvbuAqpl&$kN8%EUX25t9Q0y4;RcOHLn1L`&
zZ>yJ~-e#x|z$}{$hXHlP%@U+(+UCOw2W1vY{UYh$QYXE#uInXdUrp(gmvXhC)KL7V
za^qB^y@aX<(`m@nURo8M9K>ufPBINr6xq07GFh;LZR^~3LuIg_wbAtXJi?eecf}YL
zc(cgqe$iWGoaerYtNa}DZ1S1jYh@bmMeHk4z4vV#gMpb=0+s{|%-1#gV`gD-{qe40
zA*S_LM>v#%xFkRD8}7KRyjay|&RLmR?twmj=Of)>6Sl0%%LS{<ai!dNQ97|kVzoRG
zzN1N1o)PG6ciWKN3{3I|!Zb!{@KuIjxXUR`;KloA!)kaq@{v|uFsX+1VB_Bw?uiX_
zWfcT}g*XM+iI8|{8ai7Hwj)exncq5#A71^;4?cx_u)~&k!5G`smZ}yy7Y^E3>`Y(?
z)r8m2CY$_GD58L|#Prc{HB+nQga+i2qvEr3hZcXU-wanWn$PPS9{d*}5{-^%2ow|z
z;RJOv|FOLYeO!w|_%Wh598-P|m<&JoaR6)&ifje6K$z;a+eX)yPU<Q9^g1cPca;iy
z9UmC?TlX}a-cRhoC49}~Db1*g0IuTdmxU4-lVH4Gk04ei*WQ>?Q+8C|Mj@{u@&Z!1
z+9Z*0#LxdmkOF4lSjuc}fv1qH+F)!#m6txqvh-4D0N{D(MWS=Y1(crC#Qypx4dV@s
zbF^4r`gH@@*p%-)5GcufUhOs$o6!k;Le8lt!d$rdHc*@RJgx;vY*DF`=K#gqKt=40
ziE%w?g6gjuefdUfIH-Ot<btRD&Pw=e;`_f?oI~b^RiT@hbkkVpUfHEP%3lL@@Y6Y$
zdy*X3Wf>-3mN=B$nD5e9WrT5*C0muFQQYazX6&+z!`?g+#z5~jduD%|+nmd6OaIf6
zJAg-EGNXCsn4qXEc}fBL6jh*nP%_>SWWKJSnT3hzPE=fk98aMn_*^Dii)l?eXf*uG
zrHdqqBlQrj3~uHov&1kU1LX-i8HKZw&?8G~AkLYkkQ+nM5lpP9h1=3c?ys<Yvg2>I
z<7Jud6|-_xLv9(6-;}WCC+(@{)IWRJ)Hoc|mcS87`=Jd)2%U5;sg@E)$Wbqdf;ULV
zugaFf(a}48@!;0Ap7DaoNXf11p~-z>bBKBhoVI|h_*k>~_3cP36c4>=X$jgX8`)z$
zBhTqul+M77w$wKK(X4*6Gd+g8;NgncQ4KSqrW&sA%z&*NZl4Z*@bTd3IJa`*nxc3q
z^Z;JwkUMaGhLWc;O&^kx>IM12@$r7r2kfU<onkI<v}T}=y+)NK5w)^u(O^aaMt1<`
zVxJfCa3K0#USNOin+{TF$2<bUc(mIJTvZ<lpHvre<lDpPgC%Dqp}JqH?%;6Fu7w5V
z`Fc#p7ik&Xs%m8_)e-u?<SG7Tev8y#$PfFkle_f$>w!MA$>-$<_Ke@@5znNbet+T&
zD6eKw)56Jlb!Y8JmN)c*-Sr~^6=1s~{H9(k#9(_38`ULlYnBh;SaEAY3^uZ{WtH?j
zt=`%1y}zg29R#;3)Qjn~{8tHYtw#L8ei@PxuEysUg}N<-Sh=!Czk;ukAVnk8VxuI<
z(w6{H<cISGd#L4WweRkr)>J^TjA5R4XT^y{G7|!s=OIB4E`}SZ-V3Z){P=$sz!^@+
zGr_9JmxNA7F_F*ZEW7X6h*C)Vl@KRd_hUJH6;`|P*%P*@$=@s}liyaeberox&e730
zff8h$qqE+Bld$!4^tcc%m+7jJLwF*&k#cXjH}=WGWV`fUPCsp@X$}#ItcU)Hk0<!G
zk*pj6FJ1mmnwwOsS#be!K77+Zn^G&0X2I<n`OfivYq%L?KF%G&YEtaE3fX_IoPCho
zkOKSZJ$1B}+N=7$a!W@;AwN*<@T;W7`fAn$jmO7I6GI;_H3|02&0ju=sSP1Iu!!ri
zL(uoKF2Op);AXWm1mjyj?5nBT{TL9a7!DqaVtJmJp%w&VzE5N4Xg_u=cat1q7ya0z
zxByPQG6rBc)<Rqgs1H}3PsQ-02@?iSm-;v>&00u(1)398j7-HYsbZ>7o~8OnRCE8*
zzibizxEokbPYyQhd`WPpMl0d?6$h&42b16#`JWPkDB1t5D2=49LJM#YxcO}i)H?)z
z#^3S(*JU*!sQ#Fl9!)00H(<X8W7u~Kx?6~{{m#lKDM{ybuVqrm?X#7H-y^!0BxZhN
z{)6{?Le#VGz<zt3$*_8oygf(M$!@28o^oe<!+<X=8Ts_k4|qSsHHgfdv7VN6hd^z*
za&;O<=FUn252EAP7qWweJS%Sl&K(Z6a?*@RhCcOTuBe@ga2w~yNHBkdzs_na@92Vl
z0}L~gAp79$J<Ju!Cmc*kc{>mONwO!GB~~mWJC-|v4c07fQQM7?+~Mvl^_O@aqAv?n
zsw{~PY-0OOwq={IIZ0f-G4M{0<~Sv*o#rSn<d--Yj%G74A!hA_-I=jaf)vQ)5C3h2
zhjoT^#!;}pR)t)bVf#;!W;=D|vREOO!)*XkmZRUn<P`BeT8WuCLE6Lw$sIB|Lg2Y0
z|3Mb?Tv>e9Urkf<{G`?Gqm{|uJ@a3S<LK0e2)-9M^3QnRva^q_HE9M~?Y(sbhL^Dw
zlyBK8D|^-}dXogTkzs_?F(0d&XE-4YpK!oTYW}GNnOOI3IIw)eFqXL;60F(IgNm4y
z7N5B8l8b`gdB4}N+GHdA=fXq~U*F#_6rh#Pug&blq7@63Ea&k0y=!p-xc@3S-akw~
z=jV&|a`aHeu%lA|1tcpOndj)0d$6Rbpr@#mgsr|nQNHnX)WL}6`VWm}SfpS1FKJtQ
z;7#n=VwDqZhnV7QjWLbcZ<~Nx{+>EM*@Rs$uWt0ft5}*rdncyBgaO>egSi?vliO2C
zG!cG@THE2TKW$Yrzl4}wdL`7{D&bUrvE%>?<QS_X(u+Ge4x)7~wzTPgXM)qB&jp!5
zRcW-O`b7wtq!)4?s*dZ4RPIp?E-gBck2OTr3h!+#Nk;1(ejuCrJM3h!h&w;h;&z<v
zjaKx?VAP+;xZIV$P_ePz0fsl_rX2X6($lj(wus$PW$Q>LI4kP{>gg?JGPF4t1FBRR
zsc<1j|6Bok4fl&pX!z6PbsVdd;QmFkp~!h`8tqq9Wo5kdoU0@vU%P2?(&+9IAKq=;
zwEdrcr4jwVv0;0o-tY7_-9`Mej(XiS>rU$q&%lM4uinDukv*GxI?+HiSdeh=>Mzop
zNF%4psKwc^te(`K{V(q1E4Z85y}9?qmvUzTC0}{lFPF;#V;+4>dcw27YvJwUR-`c(
z4@ud%dC+7-U|#sREl!v30M)R~h06Z<Fi(4)r2oLW+~{ec#!Qc<O;=G0%po6lBlSg3
z7(cW|w=~gXzEMhw7Ecr~#mK%8e&uV`e+9Z(cxSO5dY4Ei)<^S5`(JQ%Y_DcuJekhI
zK_pt3Q^ymI<c|;OgkgwK+*k6^sq|F;jjKYJe^0?E54eLQOtV;p?YEqK&CFbF22+{$
zjVom;hI|1CF4+sd9nI!+?H8U|!q-prtk4Ilo8a&~){Z<$8(3$|KXvW7sI|X)+_4cM
z0iM=H9(;Gtn`NGA@Vu-oZRWa`6CqTxgoqE^1t!1b&RMs5?ak+VT^%5^m8LW%B9IWh
z=Zm&qCfx7+9M(FCpH!9NHLphUseV;NMzSScpYu#nI^P#H%h1R59?UhFo7}dy^xE1r
zUa3C*ayC2%aQAjK4QBVM-~tHhZdByE(v|y0*ZBVy2)=SiLqkI(VAH@9^ErL#AoDpo
znD{wk8-eN|{-q;v2Hx@^U>?)@O(*V)x86IFnVCuThTA0dTP74H`vhXtjriknmmSqb
z9_|t20cY|MFN5^tWz0+_NvVD(yHjzR=rT`^x?!+)0tzn9c{2k+ZQAQ}i1j0cPr8W{
z<?FJjO}sTVIT_@&H%jP1%<-c%nC$3{aCg-M8oP=yA+o{94*P+4AGB6(z4td#{YVyQ
z-UxQKx93B2^WpDY#A@*z7-GDSX1QzELS#vYhdCJlx@46J%rc_5Py_K1^{eCO6Z+HJ
z@s6hl=KrxBle04pmg*f<vrZOXP2+ERk>SQM2^k?53>T1L=oZjA8Sqgr+P}kpUo_6*
z5xP35!R?P%iEH?vwlWK+xk^HyZ2ifBE%v=^$A}Q7vn9gK8#;l0Wvy8!?R0hE<#pKw
z=6+(ox*T(QPxPCk7Ln$;ghCgz9T6-mY-$_7&?x$67p@+I0e|nYj{DC4RU^#M0fu#R
z2L0R8V#&D51K{6ww_AK=FUWqPWmHHrt0W}2Lj^nbew36v0B!)|KSB4gFAh>1Mh3WC
zll?#Ko3|t0g_;jaGx)$Al7$Aq^~t>Y$d4#4H;lnBep<Bt+vaDh%m(km_oHaAj^@DV
zitGZSuZCe&#+6tcePz6Fg7uMKA$n;i!_Yee_ky2V+wJAL!`}kogD#xkn+y_CBy9#l
zT1eb7atKS7G*HQ{e0P}YTuE2Pn}Ryu&h@mX3-Hc9PpzW9Z?B;q^x36Wzp!*%>D+`w
z+^R<NiYb_9{bC8BJ*R@E{uj(ajr|018A?yhl96%`b8n8K_pkMz2PLU~eZqOZ6E85P
z_RW1vQl4-Ibt>|U_GyG`$ea53(AMC_sr<EvbZtID89(ow?e3uF3#6DZlrZVM8JMZT
zlQ#9kb00qmPv}-*d8%{`#cXaSbzSc`SCt)38GrjBEg(SJJZ1mGr(*kWa~*nv_Ztqh
zXNPsHlvEb4xu*-i<iSUz!`*-H4k3fk1OzxI-XZ?eD1Rgz)Hq%gB8;smF0w6mcn(rk
z;DsY5B2!TsMy7y{@V{&dCtID%T`y8HT2v2Jk^>EhN3j=|>S)##Kk@OgZP}^%ICG)N
zO~J~Ol&IhX9Cy~RwSegk41s25=Ju0?GLA~3UgoX9%vnkW)^P=>Uj!aCiyHG#udp_J
zZW3%8&=F#)Xt0!Zbm$5O?^YR`$10e4z7Tf$%)~x;2E9Xbz&+n58Du^uuMWovPiPp+
z{loXcQ4v2|*P<05%+DoPhJ07#vtl8SWOk#w4IX`|npE&5u+`EUci-??po$f?4z5nD
zz>B?0bHAC;s{-ub8n{{PErNVKs0mgY6%~&_ICZHHALI29DuS42=y7v+M6CPE7ezeF
z1b4Dm0{mNiwGo7iy*9(cX}TZCD~E>DlA5eKxk9!x;v<zkIclmS?Vp>bK?u{eCcpuS
zosgRa`_ffmR}-vz^SU7A^R76>JxO5bkUdWz_(n?VxnN`pwPDx^Q134Eq4U)eQ~hOA
zvx(!wu^ILlmAqY^o}fz7=ysI5yXnNxZnAue90%w@Y*~_z!{6~_H<Nqz;za`d;qA98
zYm<=<+>;@cmJ&Df)`qn0b~u-@5qqQJr(9VQ0iFk|j|B11t3!yf0QVNL<nj2(e!5bW
zO8BP~SOIrxUi$IlZtemdng^}52d!Gw=o5UH=UPrJRJH#&`Sa-?@yh|mM71kx8xcwf
zg~B)t@F&I^ySD%OAJuGJV6{uwOdsh5gDz2`8x+d?FQ3NM(a>=Fx3Qb**;J{1c&dZf
zUEYFu@bhMC{JYKnw5mXFJ=e#dUKf^4@3kUZj*LwFC%!m-L^jw%O!+=dV+Np!mLSeL
z_D<sg-r1Y%oih==(4^KkArqUu8GBFHH382Y-~XP2HJ}1r;Vw;yBR1j8{&h577rg<*
z(vW5hp||w*<Zn2Y3nhWSzV}-aG2Y!v`&vGFKx@#JRQX^D6<TmXc1pKaA8f4Vl)3y9
z;_rd4*?hZNXpOq-?~x@El@qS%U8Pu}|BT?v6CuFZ#Q7*8WT9Hd3Hff<^~#YP%t(;F
z&lVY$xa50%)<RRQ+3G(1rG<(7{r?1NvG{LaX4qr)QF-Ok6}>*J!GvhbkYE`wT%?2T
zBKYD$dENhwT=>XFJ=PDub@S-D=x2RIFC(nOT_^5dN8W8AhFIw#ZFdz54WbWfG3QO)
z2my00|1PbC7kOQ6P6)|^evqHUXj;_r0KGU;EqaZCYwPLA97SpBs-^iftTc9>1cLYt
zcN2jbNFsuNP)HlFSeEjCkpJ^_&2yOhi~q$}-@eV75u}3#bMnFBZ<nL)gNec|CfCJj
zM`q*St`nKQOct+n5X%jk_Qbt9pRj^}{*q!Z-_Oi77=Z#JqW_7(%NWzLa<QepGk#_C
zMt`YE8-jHMht;$h)l)`fJX6-P!Jc2od_%yiaUS8A!b5+~God6`lQYjNhOI~&V6#c*
zx0=0B?P9$0X8FZHSOR3(M}GtR494S<fXm{KDebR-goxj|4FZAM+Ht~FMi=v9KHmrX
zWjlnO309<BX^$JeJ#$$fIQfyLsS&W=@yKs|;#L_hanobXE#o@Ob|JU#b&7agyJS_*
z=^3e~pq*FK(16Q!lml=x1JcD;S0es4`LjN6aHNO$n#K2)+&KGJeT~Bi5Yf{ENm|?v
zAFIs>MZx%@Fsq$^$I_~XhyPwb`$_;%^@}<mh(+p-aivVI%wrrrJjMlndc~K@tc6=-
zhH%dG;3Y0$inP?v#8#ZDwyGKHd?ZRFjy7e^b!VHghX(xK-iQLd?V5Bg#w!pS1_>yW
zv8rVyFBF(QhW7pw47d;208mOb=ks8C{MNu1MEGz~D}B)C_zKofJCM=5Gl0VEJ7}A^
z`!zFNzAuq3ceT~c?Vp)&xTPH;_<H6z*4V9G2y{XPT7k3f!=6r-rvcl%NEI-OeQp)Y
zjRJo4Ry_LYFw1T;o;fb?t+UI0jo3O`Y&Twy9j;D($`!dTVhNe1wnrlFDfY#kBQz=`
zD|?Z?z^>07$p0=Ort!7%4E5FfuKQV!m3;{mf=KcGH84xKiM?PXs!Sq)>$o%wbtC}-
zPlnU&n5rF~V1O2iUsGhG$0p9aL9zBI30!Y6(KWt?e9&K<!2(!spFMhQ=UJ~Xt_)A!
zGxYv*qF4m3HG_-!B29A0({-kdr$uwJT%>{*+4V2A)G4eBPB#XM4WN<6?$OM0ce4Wk
zRd=H{Jv$cg_nj!#Q}JijY}LPSSDS8CC=T!_wR*zmTgfry;!C0nt>W6Z@kd^%hLfsJ
z8<2dadW6m!7oyc^%f+gk?VMaA$1d}-+iyDvmEiY;ZJ+(@M@7d(?d|OC?MnsK+E0>f
zqf^n;UW88gPyRsIi(lqluz`zD#z!$EiKI~ag`@d`+1K;-&Pusu7$|f14a@*4Q-4c(
zGC&|SoCA1)egqAr$9yS1S?u>S`)k_hx{?z)=up!#k*<7ap<WM}&0EN?<p4XPwVAk;
zmHi}OL5%%}kP3b@DAFOA76^aboXWv<;Hj?jr8C&PM^#Kg@)K-X+|3)KOfSSzJoT$g
z43lmiD1Qs&Y!0iD%4GS?kH3-S=V?E#mvE&GZS6*E=`0Y)w*Ct2i>Ialg$%5$ZSC-I
za&iVf99TCHi(e)GlYG3@)Ku@}#_NnZIm^k(nXg=E_%!aj624b1nMrmY1?80>%RM*<
zcwJTYax#NZ<PX_N0Hfmjt|!Qd(5Er4S@eeV=2hA{)WaNXP--u)VFRkuNJ56=UVV#y
zNqj_zg*@juKz1j#{3I54d|+Z<r;&gNyDlzA-$J=Jlie#?WI8PljSFqUPhg%X)J7lp
zJ6#CZEMpYOs!<*<YH!qBEABB^*7&ZOs-9I%PMp?=8xiv68`ahX5ef(?L!Tzfypec4
z2FjLdKmNVs%DMNMHo<~RhU^mLG1*nVDYW?Z5fr#zklKk&AH6_UXE9s3AXEwsY4Pqa
z9(2?}71DjV{mEFrk8-Q4>wEdTh*k=G-avPKr91Ya(x5Ir`wdKSzNimhWgEIlQatZ}
z-{imLNVw+kdn_bz;9c;ya4F7tp*M0w(i@RB-Y?KUz)Ryd%ngu%-e(2Rhdr_2TWOk7
zo$ZxB<&c<l`}d=_Bk#;-2$%i9ZB$sDDT=fyUq-}#i!sVi>D+fqr?B~+^`^S-pDFq4
z_ZPq35Pbii&wmF^!8d6h#&?Y~q3(7)lh?3#o(=G=j0R@eyK$eEpD#J4vQylHY*r#U
zDv={-mO^qe1!4~j?SXs6KD|n!pNFz@Z|2+CPO!bNcJ@5vKwg8J6SzH8*pUWMQ#iju
z(qZH%vl2F1Y2A9%ur6MN+_s9W`Nj)x9C}}asLD8=$DoxyLIZ}ORHg7|)ed<37HDJx
z|0U;UQs(np)})%XdtTJ?2MJ8#_@3tFf6Yy!lvjj)>WL@tRVfU7&+pQ635W?Po?=y1
z1$5+|EoB@j9W9G;UK77N)eStoM;REKj?@LSfNE1dL|a1eDi~HN*y=@Cwu)qR9^aH_
zYAps5S`uXR@DV<-Z(Du;kFCSrG+^gj?}-Y30ku!qhg634OAXO+d+9RbfFGO=^$kT6
zF=RI!t5t3?ExHkdLwdgPM3Nz;CJ*_<Q*x+MdmIqXS5%*Bc`DtX<4H-p$6L-(UNeQh
z@O%8<vl>}~xf!O>WA)um7-v}Das{aO&@^95HbN&b`XNe@1SCBd0vF72g6U@Ak-dQ0
zP;0q@N|8L^ReiLi$Wdj3rvSeI!@Cvlsaf8I0j8qbT9LqE?spVG9#{eOD2hRs!6v!U
zD|57*SmJJO@-xy?bD{lq)k(Lm{Mm=mf5N7DEtH(z@IF=S&jZ^$9+(3(!E`Z|X1`v^
z$2+ib4@3b574fGPzqP9O1gItln6&%6^_b)ZT83-5OottzpH%UW*ZVMgRHLJx8Yesf
zErW^)2N%Y^|6B?vE&0s@FM4nEO+0!_3>)lb?%;~l>K9W29>93JK1t$m{~wvA$QxEV
z#`W}W!GF`tPQ3enJE=|mPKQWBT7t72z6k~y^@`BH^oKv<l3hZsbIte0mDQeb&COUf
zvi=^}C|F3S#gUU!7T0R;ouP|<)UlFb?^w+dhQs=mI3UjRI&5cSzWXBn>z&xDfw!mm
zi-IV|m&XFG%Z7ilv#C21-oY)IAKTT;dKKbnvwc>4<|t|-7TUUtGGK*;h5I1D%*e~l
zJ#wng7RjCrFKUQo$lrZom(6sq<4$w0iSWn0wAut9C8fKs*(mPPSk#BQ@dK)xpp3~Z
zYFW`^#U2P?v^3*)w5TV}XS2y^hQ}e~OQ1_iR08ro0dUZEcQ|>^{S9s;5+we9rlR|(
z-S!`&act4Q_vLRmF2S5D<R9Gs7tr#c4Jaly#2%FTQ5KFNC|zRwss+v6*-ID>owqOQ
zdETa;SWHhsiOQW>tvW)|;|#cB^X2nv&v{S$4pq2!agBa<0@Sy>`^jORQd5t6+g$sR
zZwc}-ru9!lN%1L~q=>QRhQ5Shb;WE3N7+iLW>hD(NDj{xcx(`UvV89|J3)mD1aGWe
z0Uq1+4rBE0oF!;x8kKyMSL8vb&+M)z9o<(kg<hauS>g3LbP4j<aT!7FLay%TFF|9B
z={oRr;sOekY*sgM;O$|C*vZ&btN<T(vm=s<f}&&@aDnj+87(~Bu9?s3-1D%#Rrzzh
zn~O&zb*0swFbP5wp_M2L{w3-xCziUiV1Kn{e4+1pU<Za9Ua23MtE@k{5eF;lK2_{8
z+1M9_gb^z5)BuAEb}I8AkC13$F(Mqbe~`BZ!Q-9S_H9?2swdUW@K|*K(2z}-D~#jW
z^RdPR6RfF+{hYa(X}L<S)a*y$yVMH`^>E(CO~{X?bQH@=#pgXc{s=i#!-ggQ_t;Y$
z>(ub7b!&T-;#x#gzt=tRRcAX$NU4thk%D^<vTTnPdUkE%iVN8uNLiRO_Y0Q!Wb`V>
z<^#3Pa}931xY!~9X=JU<0Z@k8vSup2a^;lV*xMJ}iR>gvZ4Ue+)1VDAO}rq?)MO(g
z-39xS_gp&dP5U^_ZS>|+VA$7@%e%>xGKvS3qet*Sq)@FE<YYsZgDa3ft;aRDNQxaT
za;6Ldj=qQUi+*}e_P2fbupyA{2zn55O5t=QJV}FE5#;0DF7}Y_TqXio({=15Mgu9X
zDG03vvq|<L$hg8Z=VwQH$9c%Hv2onfv=e<#C7ufl)qfC`B5606<v`~fkYRMO!3%2)
zvz|k}snCGk_dgncC>1O9xU2(HFe!>Le2KTQ8=zLI<>)kC6r;m;uc-c_B+;LzQ0No7
zPZmaG?0M`>(>BUwV+wzo8XK9EAa?NM*r}$q<aKZGK!I~wl4mraQlfF~dH+jLeOsdC
z$|mSxcQ@CSU5q?mYmzcu{RpbT0Vd9<rEk6c_E~F<^%3Ng>Y0V`H?vb~cli`3=6C3t
ziaK_dHU72T2VQR80lbL2i@DxWUSuobUhK3OhGjL!f|Rr#)7sPyb35=Nx<P79oioTP
zm8rY=_oA_1M^<$V@ht7s*OzaiXd{WUS>`jrXxc=FBh!G%^qKEU#e*oxnpO`rCmTns
ziQmXC`F`5Z@sE>P@tRxrl~V5K>uTO;B?XLL>Q?vY8ds^RZwE^SGXbOd#}4G4*Z%iT
zY}=0W&A0>omWPEu3OitN&i-E@^#-}em>MUhm?&(0RD)zJC(F_LFi3G}6$3>ZxkuHY
z98?&)2UaL8l>*kR%(oVF+n-TzD#<;We$>X(yTc#a3v(KO6kL?+Rf&lI+OPblal^nF
zWf%NmC6}Q{rD_+(tg=Vffx;gbP0NTlgLfcAhuNzdn=x+PmhKD<vpV+<*L;glbWb67
z1)HXUH#*n?>Wr->m}B4gPXDzDR#H3VE2#9m`Gd5?(ESJAb}>V77=9>l70Z6-X14O$
zS*l-xzWJ=<pe$-U(I`rR$7W!m?>}pdqBzC~>@D=POR!yVIo-~M{zm?(Z(|W6A<{ps
zfb3HO89u-6CiTdkblO8HbI_RDW)D2cUwOAP6Flj;z2eeT(7r*zA9URL1rYWj&;^!2
zRqK8Wf8xGv+3c+42nD$nOP5N%p+o+hapHX@jU>L3`M2cOY=%F{c}Ipq$TFD@qb%>E
z%nExa($bt;kFg7eWm&uAzIghFm!X7EQFq~}d*Xe1UDhhEH&uEQ88qG{T)ix>oIdex
zcP`5$QM8t~O1ADWdBZ0{9mZSz=mY7)IedQ`nrXW-&DVBBGLF7{t;DS26k@yp?1O3Q
zqY2D=WHfw@t}<c!8Gg5tm%^NW?(U)lG9S$A)~!vK2FiQc<>jewM5C0+u{dN4{7o8i
z{|+(4#U+zns4f;;Z--J?!)efJ7_(gSC?!wl^Xu(9;A9-O7kHSS1)<xUO44$im{Ax(
zc}A7}r78r<$V?T6AGB+Oib1U)b)21gU5W>rksw=Y`a?VXSN(MptUhDC1Ao0InKskX
z9_qwvTu`}0udgG=83bP!S4<J^iOAAMtG}|29(zerhvg;Z%f}S+Xs$29v@kaC@jPEx
zji;--q&7KWz~Fqv5C15W2UT7T@cJFw$33<#G^HHXZp=?xTAhbytIQbR=u|j1X>yBL
zj6WBq#pSSWF=g!7pRVp4=6^-T{&?EzrhvEVJx|?9h|>X-=bw-l)E)E26VY6K(X~lZ
zh%%!@%h~Qz**h&(5#;63DBPCw@Bo`Q@gO(_b1hh36LFno)!=-udA<BC@9h#zt8-zI
zrhLE1b|e!@m9mz%jZX5pT-Ws7NbW029<#zkDd9-h`zdbB!)@zG8PUYI-40D+y8&)$
zTiop2osV+lJT@nVO;$a_Ko8o4)fy0+GnyhfIe&hFY)U-R?aPZN68(g2LksLcXAI2D
z6d=XBg=Ambf<y&0aIM4e(chJ9V4m0qbeujM)jDw6rs6ogx0L-)fG<^3*HB3sz1IqJ
zd&#Y%n%gRh+SbC`qRCZqa@;Z0DaKatA_KEefeF{1^z&6Y5LZj?W2imtf1&5m8Qua|
z0A~F9dEsX53+v;$ydsX%`+2RWZLPFZ*ylFs7(a(JD$|c92BWAn<aBS9&bN|Ok3@@q
z(V6XIUG?KkdAF%`4T(r#W))7yIu|(oZa}2v-mxh9UeH=)T_QFxaYSs)U&a%MAGtMm
ztZz>gc}4eM6{~)o%@5ek&N6IBjMORHZhKt)EQDP^mUTn5g?SS0H8$LS#B=*SVhM*0
zay&ofCDOi<39d|u);9c)5BwQr{(0pW=CQ=(O@qJ#5MW!)&dC$!b3D%ngwiEVO9lJ(
z3ZTb&I*90Ph1vTKflSy33q2Ndo>WM{Y;4NT-f;)LSv4KV68eN`Bf)qX68x5e4z~An
z?~VV3MKhaM+@*xxs+DTc>9#$!p(y{EYmEiI@X-u(bS(cQ7t)E^s)BGx0I15jO=O{#
z@@x#8MXobu0UG7_sYn5uPS(xJm<qc+eVhSv-OJFGTlIA=p@ukl^x@W#$}tL&#Gsse
zfa38X5XHI(q4o9eO}1aj_8zUM=@=r$E3lT3@=<MsN@^jIiccF(UOzV%0*K6wkVi`7
zd#HGC-})Y2BhQc(&6gvyznq$;S9o0#Zq4!P*8v64U^ms~C$)^yhyjYtwMZUB1o7WY
zU-s#j)6>&^yZ^FH8|;3~j6I&fKtn`Kofp7dME)KiAC>RyGrOS*<=5sKLcW$HtIAh3
z^qoSc$9%xt=8=}2K!yU%ifCu}m$ic}7N0N$i?o=@@Eh%65X8U;MsVFblu<!b&pYB=
zgM1PgcZ`{^m(emYqV2{1JONC2I=&upbT!rE=WTz~GL&`B`VJrCBqz|yR%vz)*Tj`V
z`Rt~5Clx36;+3ernf!eL^r}-y8>E~Nc>I|0r&SIq=v!WjgD>)!{%?yC`|kblDI>2x
zota5qGbr*{PeGl1KRK_qEtsqifsgd2X}**Td;B-Ws8xeB07E+4T8K`>6mDOQgI9+5
zXc<v;blnZJC&X1z4=;OvifR2~Kr~wI#P-4K;R+q@d)sjIJj7WnMn1J%3DV=!L>Tbw
zDv4#wtE&_1@<Sc}yUrIoNpAto3CXYH2zq1fSvGa%Ktf_C{B6$t2sCP1KVBCse&s^#
zr`PN)D(vh~5c;#LoXj-Xt3W$~r}V}RBBG&+`D{6*$!STWyfcPOg|yQZzbGhd6N+ED
z%s1HAq;~{A?4$F53jR_470^l!x1~%oaYycDJpV)Pm=eDRbj4-If!<>4P7(xt4W)|j
z)MDPgogPpm<IWSlsA<2+k?>C3r{BD^AIbSe2o1XPP!Euow{E>*&PrSm|8?eC8~5`-
z_N(W|A;VDv4OHn4^v3US{>@H~Qz>~#!HNCDJ1kX7o~p-?i7qi;v+Jb>5G5?uK6RLp
zdVw6J33-1nqnJ(VQTDSMk9XvE4x`1mhV1<URMOYo7~^{0?Q##{q(OJcr=Aj4HQuMT
zol=~4v&AA^o`kt(^@;KDP2=a!KTaZ3{HG;jWw6s&)kpU#3Dxv_(>*Wo7cNTwBIf9}
z7DcT!q!uI<_wNmA1FwHR)YsR~YvhY<b*y7N6Iu>(EXf;~E{AZu6m+OP+U_PL6ViLh
z_pa4<rRDni?pgPZ7t5MJol@5E!(5)I&qlw59_0nxuiIyiiq7XMCFfq6=DdLaj{f9`
zdCgkin{Bbk{&w2bcYy-^T5Bv>|2NYfOfHoQ74ooA+5-LhG+m1a`e*>YRs39OJeNOX
zsU1(8RQ5SGNd$2|V{BPO8?L6XIva9F@{Nk4yC)h0D94maMB7P@$WYSe75P=Ua@WpG
z;XVWBGK#C|Tu>Bkf$#eFPX7>UIUz;z(Hy<upuMQ)vowgFF_J$otFlow3k~Ophf3iK
z<d#~BQ>jUuh7=8f61fJAdGq<B7*|wE{oc1HJ)&|a2bfgFd&q9;7$0@{%lyG8tzkjN
ze64&WlLz|+-2M~0TR6_*hEH$r7j1&SIw1hhgzTgYt$O+k8r!b$#eEA`Qh|ww^*ba9
z*_nsWus)aDeqwoRd*HQ7L%$Z2NWhhHVA7J&Z%n=TV_x+SMA58{8W62>XYmuL=w(JN
zU2o}NvZZW8i6+!FLM&$<ynVM-&p&zJPLBK6-*&g+)!-lQASautn%xD|H0s4AXkqN8
z<`&HVVz==dN@zxSAd5L(f}NId1}`K~%nbjylXm?H`-vHoq(eOAd6;P7cu&X*{}sV0
z#d(^X;ULI_uZw*903wbm)}pyVQC(nOd(rC{-mb$;4ntR%mz|q%i>#gIEP$Ctf&(wb
zwzW0Uf7L5qd>k+GB`m2O2?DRB6+r`VFPFE^gB3%4jw-4=<z87i_dFjLQMcT<HFnak
zss3pWD`+Wr&BM4@>L%4uw)>ytK&1c?xJ~wkOp|A|C8p@Sj6kUWxevjbqzOrFBs-Z&
zeXs06&Z0tPXRl#)o9KwmVv_VQ*Ly2RF)R04lFxOoX=rRJnzAFq*dr66PdD5na*7~M
zw2z+A_zVVGFOKkL1uf*h?Xy+Cpi5*iktU6IqIeLI!r^|VHw`B(D#Jek5c@*?-2DvH
z+5Ueyzhv7W0cE<5_f_2%35n8=s($(@_NbTY7w;--s>Vjtl{=LbGSkmx*R&koBN_Wz
z<9)jh@+9TIiAbIF3(ZhSrM^^CkJHDn-Zy56Tf{KTDP;DexeID}C6!B0crDa<J-60;
zf4>Kvn^XO0l*XdLA###gT5!omYGY?B7fD3(^&WsZIyO8@f^4TK+SBqnym&>);v{7z
zSJQELsBVC+z%%m!&pcqV)N&fPL-;2nu5LY^1}&ebDObrRZLXxf##6u^v~_TS;ql`A
z(jblBV<Xrtc<-c1RA>b4yF^FQJ$$(4{I7x{X!7CuXe<#fd~&-3oeFV;kZX3;)a_>6
zqG~s~1zP=%s;M|8NAn+DPVO#%AfhprRO~-@cu^@az3AAd6_NI(8u_}sR}$FB4Sk!x
z5#`EA&R5tAgQss1sK+HpMV{w~k8zXh>cCRCpSE*PwD!W*m?W#;(bp<pfl0>oNizA=
zi|`RV*#J61*N&atE;0=f5?Pt#qGVCG)$kUNtv;7|(&`N+r?eqJh`wSTvK9=nHOz$Z
zG_SWUuOV-&8s!QE&A)CfUdG#q!POj_3v7zxs=DcA08mCdCs+-a0YF|3flnIEcVD3C
z-dwFi9u7)5m<F388pcG$u^BnEm%WX#cqC9Jz3J?8&NF2A^-%=WsXj+l5H7XeXc0U;
zt+ibC?Z(*BL3&5Zre_|}%JplGnjVd>D<SU6iUP5vUkREf*YeQ(&`S8=yG6WTuRXR#
zBcZ>9>9b${CCB|1@Q^(;@p7>C@$~a|g5Gd^UQ>s&F!U)@47)&<FvWr!41JPF{CJ$J
zq)z(ju6y(0AW1C=auw|aqOQG_VjG)g#*sp9ZyjEaio20fqH7E!zn%mFrl#vklSZ<m
zu6c{a37vJ2Hk1_Uh9C6#1C;8ab9Z}x0u+qs0{R-UPf?r-$xlMG+CIqpy*)GU3Hbmn
zNa!x#+c3UnjUJGcvp>tLU;a|rPnWwPrT|7IfW{jV_SH$m^6LFW$NcyImb2g)o<r=V
zHj?+-Y0B40Q?dS1(ql@Y<=y*k(ouh;tve%b!CHw9UrKHusHeinFZg?NXDv?VBXm-y
z&07ti5DcgL>|W&?VmdLVsXg$l=FfhyIN`;AMN_YzKcD}s<?;5FV^GX(U|0eh_Z{fV
z^0|ymuXQIBFlto2{KYEne+v}|2|6v#G>e>|BA9q~txK<9ZIRQl|0O9!i5k1baWMWH
z7}dI1QQhWwnaZp>@x~z>dt)bH@uaC>4fdjDpbqd0;43D+`ja@-Ny6Y|H&!n0ck?F?
z=@#a>J9_jF{{epEI5o5i(5OEbloZmN?^(S`hQsijEb7bxAM<a2()XYC<DXkTBVP@f
zbvkzbCwYdrykyHOlIV*UWzHQ|R3atTnw&$8z@gHCi<bvj9G8~Snl~l)nlW5;(M^o<
zJzh!n-{M$Zwpizr^u5*_vh7v0#AKK5jy0d9=$2Ji6M?8)=MmwOnZ^4*2FdV40yvKJ
zDtpsYC`5scYr{$zqe7T?xHh0wwX<ma#$!Jwi89$qcdF?wvlgV3@jzV23IH6gubYjH
zA7;QoNW)(HeV2u^VQ?pM4fSYDA@+5CqU`1+T};Y<+4j(24YP%>{IFHC<Ncz<A&K+X
zzLU@B?=JTWXw7_fzA_td5?O7dWFm;vVEH?|AfAfki1IK@M#Xr8q+djil<kGUar}H)
zk&Gs``?HRqk466@HS43O3!Gp&YAqxpg&`CpSm&wxWp#iO)+`Jfgs>dB-!rYPd+yZs
zn&Tg;BiZW#kXKqPa-DhMyJUc)lA!*$lk#3cDT{BoASP2}kT<{yg=YFq$Y(n2CPvw>
zHX0${xIv$n36LmVPV_@3!8F$Xy9U1qzziLl&=uYO#3%LY2F@Pr&#6!3vVl}%WW9}F
zG||R~kqu+?(6q0gM%Wa<H}hLN@7BBp6mDon*h}LF^Ca$b7zl6B<NlskkZl-EYb(-a
zpNii*Ake0*^?%Y&z3L#Rd~LcD<s?5jpiIWH0~N9AX;Ii_XFd!a)s68v;aLQdgi*~t
zeMM88rnqqzqP|E>sxst8F3D+e9=k4!S5L<m7UVmj6RACy;m=6a(}|njoT(r8*BH6a
zBw=@q3JF7Ex62oz#us(VYnf%xDPn0>s2hsQfVbvmh_iaJZ5w-j=UDNHpw(3o3JD9u
zVo}S<0+XKDYruTPhC|}(Rr_(&)kzATjD=ks<%~a10R!RTVuvoo8ktKf(ACwww!|>a
zLe1!9B$zysfrcvRb1w{b!p|u0I+-W22;T%%!g$XRUfN(r8(Uk&`2zrBNZi0Z7@DMH
zKAZ1%`p4wiB-h_TM1a4U(s1-=v$lvE2`@Q8dQhhC$t4ImXu}Gn0vu#$(=__dW-b1X
z?Np<l9!oAw)@^9Qj-hgIgWWe{7-t36*k8Pf{1xc6VEJD3Y9U?`#M95kl+dPVWAl%l
z)!tO#e(}98<xuGh@=K?`%CVP%#X^ISUfxx-GF!?x&*-EqyK7>fKg3RB8#Up9WE<i5
zZwKyAzQ9KGpK4MWHKjd=??!2V7~ebn&G7}EZTD9|JU1#f`r3bJd+@$AKk(DrnW3KO
z*@EuKP07Tf4<o$1pHbr6($sU`?5j4#tN!*UPMu98K2%qaRR`CRt8={+wlQE?Yz%UZ
zx&<8!2w*q{E{D4=z$plU1)}r2LQPWReqwut^L)Y)wgZLXuF#ieXrAH-&G(3>rJKtM
z8;&yA`@dBiMcpR(CzI6I#B*8Op^;zDTaTABOerZXRDh*$p`{{-%c&TdK{vY_$^nje
zLa`$KT<=98?tbO<3@i=uU;5T2IfA+B2kwQAJ{>On+WeIAEPo*j;I|(97MQD%P4wsc
ze%hw{@sqG{$iQId9(Jwjv;Qj1^@}yI3ez*@`h;C8UHvb1K*M9ObC44R>~ZrTewx#C
zAH$lNzUBq+BQi~H7FwVoTun6vI`LDj;onvFxMqD{#4P<=>ALeErdLg&Zp08=<Kd{t
z6$!X`Fh@Q_2*D6D*cJT=D4T119>j-_rc*DvjRNd=l<yx3&1ntrI^&3XA5`C>f}Rex
zq|6>C|Jm-u+%yE}85JhT4(zzi8~FHGA1~uenF^d9YtDZ28D(|q-*7uw<RDB-ZSlqe
zP1c8jJ&6G=(p<HQ`VXsOwBT27|6Da(TlWXI?e1iQ(;GY~L=6s5o14v21G57pQGWkM
z2kV4plzs+vZH%^dEP3DjfmTXBE^E#q?sP?6Kdfpa_QH>wDhq{e^j=jpE)v!e`s&6$
zn~*}OV=(;47nCE{rM8@W&DCR-w^z4cawE`A9in#kArfWPIV@ma<(?muuAt7?q}f_k
zSy=eqfjr!$^VfHtPDx~jzG>L?e=nOydrK4qZG_*N{nU`sCD=sWAC&quEqmh6!g%|>
z-E}pho<CZKb!n+(p-3?=G%QVrLS5#Qt|P7rmD_#StltT(7gL>!wpfCk=MpDAJLZe|
z+U&hcwRnAgyIcf<p~?Po2<<HhwwChUrMCai-0tYm$@<u2;a_h%JNfIKot@Z<vT34k
z(ar=wcr-yr(DMoYsVxBwr031nD=c9wP04GyUS=xu`T+b{RV&h>`$s?~rAI`^?@ZUx
zW7ID-$e!8VV~AJVCq5`j=e^jt6vwNFksmb6AsuCZGB40qpEkxRBP0>hh7f(kjeTa~
z$oc0^sd)sBO>h03*5qH_eJT%l6luUqc%-QJ!GZEMpNM2~YBBL^bT!?$czPewU6)+c
zg?y7MJe_^{4`UDHa^zhFz{kzT<C}0;9Md~t(#B@t<5eMdxdVA_-Bo3RU*JmTxG!?M
zu#0(!AdV5J9sTpm`Ke%5bAcd1{s@7-L{rp__yy4+IyT`@^Ktz!-g$T`WZx3o+J%&Z
z3|9)d-+efx@i_8unDfc)qXXpe=A`KUJ|ItsF@Lqc41COc7>jRdtNE8GZB6s;X*bg>
z5SOtgXqI!Pfg`hNEJW+X;c2U0F56;Mpx5Dh`M3Wdec9F%><%|`a~H^#zhV=PBy4<Q
ztiDoWC_tL<W|H6K_@H!8ImasgMZeuWG=?1x+s4LYVYt2=1J^tqF4bIgjd|KWDA~2W
z>|OQW;tpAt<_D7>$6&6Co`}7rvEucqX0ioW2J}59Z4f&DPEm^Rs&9p#W#vEV{P#xz
z50fo5^o)PHw0`|Lf5?63<C#9#9rZ*pIS^x6x~2#UF1wZsK!IX18EC?2#~|sy-X}FX
zZbf2M7XNX?oy{$9PD&cxdsPW7rZQx>Ib9LRXkFS6yy8CDgZAI@=O_MP<U|=YLUFIa
zv*Vw7;*N5Z(^#DEPsN2iP4OV-3D4ypt6NXGj1iJl2UPmJ?(5GQQ&KOu<t2LTEXa`t
z-X|Y$M^S}tjHuj4=<aV<*fxn!7}j1q(TRTHTq4!dm$90c51LpKnf4#+(}=CMA(ZP&
zr5c>wU4K7rY~>V%$Q_?Ic-0pc@u?>y+q`c#O1h@IK<KeTj{}dY-u;B?wyR**H5+EL
z5ToU@iM2NFB`ps*=p!c%%)(NB>~HC^Li04p%meR>4=sTY`u(ruqI2fGp^EAu>}bJl
z1uCGG_&haPe7H?UpC;m|vNOK0hR;ZK3zptV#x%NV>SsGcm?Rq2og*L5W|}pmHW)u5
zQLde6T&3raBRper!O<ctEDtc#$I0|?wAl(f)Z-Z>R36ZRp|2t_@jKG;vdi?#BP#g>
z*iyo7_?R{X-sAR75J0zil|H33UBeaGzZXmBEZGk1Tb&n`89Wl5=)x^BO|gJ%#R2fh
zIqcEZ?5QW_d`y+6LiW2)P^|C0=9SBO1f}3d)V76VhBj-$2T8RzCS&CJLB}Rx<P9i5
zYFUvZdTASkXyD3_EpthOM<tPA+JP4@XoTOvi#QMYeBWy`VpV0vUk6Q`7o;2fg?s&d
zJw5k5#l(Msr?>Nl3JL~L=xY_Ae5n;FsZ`tz;MH<GZUQMG-==MW+qt_z^gXRK_o5r#
z{E1Q`>v;84uqEhAHWvZ_2bFscT*%IP=@JduA<cbe^cETNZW?s8d@Zq53!f^XZteHG
zRitPoW|D!W9w+LDu`d=OGiTMasW^>LOuQrY8pzp`-}RfJB~1gaciIp*;2#<l=Rx?(
zdSb=@GhGNxY?uMCyNfyVgNjS{{UqUjD;|EL_VLl^XxOJkL|!WE=2<A6e-d_Lq&@EL
zE;qUHv%}zT=9q<;Z{DS*KuE>zqoV?gZUCU=B&iVjTG}<1Liy()wJ%AY4<cIsC261e
zgZ?-=Z9d&DH;m~6+Yc6VUx#AbEYALD+#^uHQcrSfr*qo&><OR&r7lb;C48iliYmde
zq`6bD*&!az`yho17rW21s>7Mv>2@%q#B&^+sF6@^gev3sZo8#D62BZmxh$aiXxu*D
zKe~-c*1ci;S`ubLVY<U_!Kce;yY_@t=#@Jfy>2~WY{}Z%=ztHU%Q?N@nkEe1zH+NW
zoFt=`x>$4mX#ecOdcb^+ES2FRu4;tUi58r-MSZ40uL5zeZo`w9U3C1;T0h@;Ktr8B
z^An%*;F|kuV5OCZ-omc<6PZvnV<-)zsxRlwBLbCl-id&aT&WOP=waOba$Y})7m*vf
zj5lem##@qES6gkOT`Kp|P<gz`ZYEhKGha4Y)0py`sy%uu!oB{P)5by$#2m4)^e6Xd
z^cCtLr=Q-u?N|NJjyn6Kw#H!WuQv2v-g}h={eFY5#D1vGMvi1X5B;4_UywYq^s~`4
zhz=vIl4ia~EGQ1Q7UyF3P+51k5;%KKE<S|)gq|16Ieq<5z*}@w2dXmsQy)ug#A$qN
zUMf9n%P&FN2Jfp^@tzbCw3v#u|7L8|7ZNM?=;hKtQYR|vdy3J^$)FMOt`v{3_hWCm
z|C<h`w6vJ%zh)Vv$B^q^I|lLXuf#=#g{2;siRWph5h7Wr?h#E|DPhqGDnXq9#2E5V
z^+Wru{?7|wX|v|vpMUvo$~@0}YyKZnNks=Ki!r{<u*ajVD;U0!i|!MHK5ts*e(;eh
zchu$vEl<K!K;tI&8QC#T+PTXUE?Vsej80&yF~swK04hP%zH&yYV=RW3>_+Z_$Y?%B
zI$#<Gt#EV^Op}Rr+qoM?q>>^U%$WXY`TF%6SVpB&V)>u>$}3f?F@=N(6ptwz?lZ40
zDbvL83<T0E?hrkq1g(R3q^0BI6d>tIDY>}?k>0&~bLxsb_`9pG&VTHQ$4ei3{E1RD
zVE83cQn(HaZ8AYzKz5dO^dW+~LAsvU;QjYLsM@e$gS`bL;G+|?@o#VajXe<niUu4}
zh|M-kc^o~yQxrDf%>D<Jl~s**-~AWY=!F2&$w+l<p8xo|Y@WprH!isQuDc75J?2;}
zq;B}1fBpqF-Wa!mQ>ZAfDL$wundD{#P7oZXZ`H_Uh-;27CgU^>$&G79&A``RCyP2V
zDpp=ufhh#v+2$+Yz}jbg=qnAsLHF)GQuu|@6o>_3N3%%}%Rd@ndaH#!#%;Hnu{n9T
z;I&aW{2j92OQvGbh$5K(TpRH2yZ%ym^s(@>Ne@2%;<MUu<IdWM)|329ty;q8FhFz;
ztF=ag#QgUr5Qi_y*pXbwJXnsH|En;)jS&I@$uUPAjZuK1t)!MeTf+bM?U&fl|AYfb
zoApm<9JR4_U7O_()8gE7FNXW;y=vZHWF)s8t^RrQt+((ZYW8DoqZCZ{AdUYcbu;_N
zjQK^T)(Hd^7bSl9p@-a;dlfa&lhFlXvVO9+9bAI!L@X$-Vjv>3pCg)6uz3W{V_t%X
zWxg3cVicF?f0U*0{#U9;ch)*N(uLL$#MeK(dj7>1RnItH(uo!wyLvfc{gZ;JUAyjz
z_1qjjz5=Io#WYwFviwb-KBHp2`I-9pAUUtV{<T`46qhiZqduD2FDB!J2jmm89&RQV
z1oDsQ&Foh^1v`J?*9XQikVoe{`4%Inz5OMn?a=$xcKHJ%dFf<iBTu<>5l+A;p_0FS
z_)d!*D*qlIz@hytCoF%&mrC1XKgs2ItADs)J}pSJzoN1t#tta@i3!|6G7-Ofw;s_f
zu6v6};y?e~^L)0`6H>*_1J$=wmXS)<FAj=mq5k*Wu!}E_>=1E`G>@r9(Io%5v_;o$
zT{Uxs6f+*3QMQ5Y1PkP0pg9qiLvB<cy`b*ySjUrMk*NBox{B3-X-$Tsk3NRe6x+mi
z07>?9cU6;X_8)zW<QS=rE!YnrX-P)=^D#S&PevD<dS<`kTEO@9|F-a}Dp`$D09yU{
z!5W2rSEwZWJve^13m?pF*8dPfIs9YhfINtG$C47PuN8^IORiH<G&r~rvFE-ohal8v
zt+@ZuPK)l`4ed;m9!!7qkqRtHLJS6BA&IGxS7xI8tXYfq60?8z-FD|k0tV2bM!|?a
z5ju6TnHxJg87Rj{aeNsaCcgej$Fd2S{-}1Ys2rBKz-Nqn%ZdaQXcM5lz_o~(4Q<vx
zY=5GDc2k04Y=g7?>_!O0?WbI|pVzLo_dk?>u5at{iItO`6Ws;N$xuH6zy0<*RdeUh
z6@8-pq~#w!7XF0YSaI%>lkJxjX%7lBBg}thFE(=F1}>6@Y3|Hp%Hdy_|B3d~>B?bJ
zh)cgbSd7KlxsI_IK5|C7b?c_VE-e4kXG|~Ouzo#HNs-7G!_?0jt*`Cu@7J#%r(es0
z9^Kf^<npv&!T*^r&(udf$Y2QNSXm$q**I&)ZKh;mLi-(0$cJm1$7}wzXusl{)W3*h
zNR(q9kK@b5B#~L9wiu7a7gI&?`A@nTe2=3Bi1zkZqOL~gGS*538~%6f(2>MGB;zwy
zG0EkxReXaF?SJK!nN{cu2D#mT!-o#X#zG2+v#Ma&(4m>BDeC`|sxxQK)W-&o+!nqR
z59@zZ6nr5*&-E|C{-*e%!NCQWOq~t6EqqZKo%qm7i{JnBcpLaDu{_i2HLKmArATnh
zF-K={4Qi){@VQpx<SCO2sDrP62*<TINkII80|#bcnWpTMPd+(o^ytx9_{}^S*W7@I
z=~SZ>8x@^&^62c7MxB&}rG~ObpNv1ykRF>D{jcSJTlUi;v%q<g_LwjEEBkrUrvF9o
z^B*`>P#GR(v8=I*!kMG&N9R&x>(<%^?zXE8L*m|hVF;OPqA?fw$9sgY+<p2KU<-OT
ziCbBWHAFZn(8wfWAUgI=7}_Oguf0p`>$@v*R=<&if6ztl)omVhXqOdsURlkBav`0Q
z@yYr4lZ(orH?zk|vouqGajd>x-DI+zK*Df%?DXQ@_U*Tu*m0sXOyP}GR@OD-<)(%9
zXQtab2xt_X-m29Y0mZ0>EU-dPMX>S><NW<a0*`O>E=#})0p#=c&z-vwqaWDq9>d7N
zhFICw+Q$5R%n^1@#WY;r03m)!NjhsIaWI;H=;ZU2l9HDGP*%V6hw|DU-E%olMl=#g
z)ulaR<$ns`so`^^q^3bjid4l~8fE-S7UGBY``RSI|71g;WCo8R1)Lw-#8*jU7D581
z#>AE^UV^eE-IDOR#v5Z9uyF)U;gurL_~G`v@Gn`gPSj<W=3~cKbfi%dy}@@?u3-Qo
z^z!ClIv&e5*>~M_S514@1%)Fxz2o>6O|2|n+OQu}h3hdiuCYkd&$Q5TI@aK*BJ=)(
zFe-p$0rCbNa6krMi1GEFi!rOQL}S?S|Mu%|<^R%>(kM3{F{?S!;1kQ27Vtm)$0xN~
z3k)_<K89nbF2%Gs6-5)^^G06s_P>jfUVd7KGqbt<5(2;Y{8u9tk&t`pX{TyRwLA~W
zHMO<Dx#ym<5$kVJ4$Js9@*l}gKjNFQw7|6-7}XR%*?yK~A=R_|*w=MRgf><lr~-CB
z#yVYr{Evm(y>3G0rxpKZ002M$Nkl<Z`i;akH3IB3tlbgg`S0)-E?m%1QC{Ado6E22
zv|pMFi~I=Q$BIkDPe_At@%zu1cnsmG8>Pc;6;dUfdg`e;EWXka(RH;ooFciQwpN?F
z(P0eD@Hy1}A?!lds~0yY0XI}GFDq+Yfn6neKXk$<ocz3eRTZ2LJOI<k&PM0qPs_O$
zkQW-Dj@lZ-4uDu&sXaa_MO1#VE?nswZ@y9W#phqtef{;<b<oAH%=cfhKM|jrgyk<e
z|CMB#f<vCLADGK4pO4-*^dc;XM6mdML>o)E`sdTn{-M#h-v5dC|M>JDHC$K5aL}2K
zH4U)?8t+GjX8y;$9Xb6s82JYwEGAgTv-ZP}Kcf5)pDARvqoJ+ACK|J6&8gjYKa5U5
zb#pA%kh$kxuBjNef9TL*cxg87h2JlzUA$<K@0|2Dw(5TjRYR`BG4y~<yHCOwj$8%;
zNWs81yCn_3*$!=_N5E)?PwRNcK`WY!Mcc9FV-Vp62tm)D{8+(a!?aj%8S3Zp=bV!(
zS`wo%E(fx9#U+*_K!+Od|7d`nRMVV)TF!rFvT~Dhz(PSL7}~`3VXR9_@_&AQe)Kok
zMG-G#>Fqn>gG>94(d^8uXak1pk{{E`q#<Rer(sB~@{fpS4dW4{K7KuhG%|C{=7h8)
zd@?8IKd+tM^1n-$aobb=Te6?basN|Ss;RnJa$CZ0<h!L4hN*e>T=w;U!u_{#<9a@?
z@%)Y9xvbgk;FHTD*m)1nHCzCI_*f6ujXX`pM`vLjKMLjM<<ey+4f<)zei%WyLBOef
z95qf8@fZ4^*Upbrfg#p&mtNXzhlI>Qmcz5p!J3$|6LGB7L5p-)6T^o(u4QJ%^xbt=
zE}|B;KT#iIExol39JxkW2V!mDS6_Rr^!3+YtC@uzv$@7yU2Pr2L7>BT?xakdn*SlE
zk!#nrM`t+6*e-bWl~>!n{>E!n_-I&*dKJ~G>UeU5_|Q~$6AeS4Nepe;-x9tt8Ly5w
zIKL(PpMD`C)2)-LO?<2e7p%ud4}AVG|1ljp;}!bnwO6ZQSIswHe^Xb3U9BmPKIe~)
zIJAh*_<z&>&e&urUjAdjXP^BuY=0Be<74;Rx~i(G#_X(Y6hM@J>*@;I9~fb*b|%XU
zopafxm*<^x&Uh@TL(ig&N3q`@hQz5}1uvI<VE)tozI}IR2O%#l|Jhh|p`oEM`1I3H
z_3U9(qWz!#^B<P^jE6L=Cz!(75-sLGMEdfE`=VycW(_W5B!e#-hA(MmIX@<gKx6^z
zx-5U(S>sUnK?+d58uB{<X3I)_E*B#t$nD#ASL-P;-dOjZJ+y2MjpN^|uf9^XEqw2P
z2cKj=>gULBe)H?>eptJ%L&x^19nd+1X}VAZ>yF}xjx)7K=o@VCz*~_@(&A?KzojVy
z?3v*J+rlRapI`hX2E(P7UY?I>)cR1bcM6%R{AXrIa<I0ww;%5p>huI#tWy`xB#Gl=
zQyt}bQ~a;6{7)r5qGW4xKz*d4IO6|o_dnNl_4Pl??>6ySWxMi+k<EBsEafH+@ECJR
z>?(iju=_d74l^np`Nfo`_9vEqmo5oAV*hHa`#Wd$Z0s02FrE4zkItw2{(2ubu>dAj
z!P<RTjz{v*{==xzI<A$->+QkUh+JxApZ<Jy`+JNjt(3nwJ_`%+{u}mVWFAd|c`%Sa
zZQw)q*j;zrS%yt5i-;eMqy+cfdtdQuufJAl17u>6Aw!2`aTzFPo|Ke8tb1RhCM@$X
za^Zy+<_tOz%Vp7<qysSN`QJMv8|!J_aQ*d|&4B`<J65X6$5@77({s;1k1s;hB7{*I
zrTG}7i(*IeAM*ZJ{V$FG4-WPap>c2t{>$TP3Q!s4fcc77Yq7>2M(N?<M`G*_x_2>#
zC%~JyEW_xqit@U~jvccxJu(*Tv0GsV_BJP_ZVz;lHC9&Qeh@<toc4>Jd8drQuDd|g
zs6CZ3%kVfppAe8BDPY8}a>11kh*lB7uY%H{7wKy-0CDl6G6Ld$r4|gJaQKMlwNHRa
zJWa;mw5bkHZ3QJ%VbkCoY~t(fM>!`xwR3Vpd1P{F#CJ~O4-FtS^$hu(NUszLl$>n;
z#!Yx3CX}<k2JJ!be@3QS*OSvFh_o-UPElWr5N`SMD)*8plSI2}WkqApZfLhA+An<3
zP)~mX%?y9WV~hCJPyR=Y<cNjT782}NGGg2Ezk~>f`KZvO{2?yHS52upAQo^V0S?Ir
zvj-x(@N2N}Es|tGR%Rwg$;kvp;6bbfpSfK-$8*yDygck6C97}&V&tB6(<#6B8mTfE
zU`{l36(vBu!io6crA#F13lUG-w*Tv|zOFqKJF?M`z4qQK?fK_lsN%>JE=+CZ1#3R#
z<U|Jy9FQ^Vi&-`Ov74TmgEjc(&#UDWUBF>vo^?QZ{B`Tr^M$@ee7<xf+7I67lBG)|
z2bkWav{iB5{^iS8>T9Y?F#7oYL^a5a{EFXy>@1)g#pC?RAL3_V<k`t5pOXE=6OUJH
zSN>Zr#{EyBYGFG7D$oSKiT{Z#w_+p^%7|`tN@0#u7|A0VfuW12^4ynyvhIY1l)e9n
zwr1^W`ou9O+rM$c26XhHBZ5jvYlD(#Mu7|eo8dcgiU)1H{5Q2<f~@{gZ=#5O`E!zi
zkcJVPr(n&n$Deotqh!MRsu}*}S6rUQPCnL))EQr#D{lD1jb-StR5g*6nH~J@e}0$$
z3v9~52rMd{`umB$%RB%43%RxpLzw^AO>XOi2@~+pHd)w(HSMC`UaXh-daTJZf8PB1
z_uhTC`k7~+tJuV8;0gZ!ckDO#IR5t4|56zmq8xA;BxNj3P<AHyf2W;yLIWOAnxz=S
zi>bcSLqO<H2?IrB-8$Z1xTFNg+G*!5QFQdVh>$+?|1fN%vD40)$_Vmk@W?}2J17Ys
zvaHydkEx-QeEp4AEBD)PAlAplhlpKvN#h8K?-wn?Qvxq~ojRrT>$fL%6*pC0fBj8%
zo`{diY^(g?i@Ruf|64ACs|h~Dd3gfy^$$l5<33`VMTtr#VZFPp4XC4o%yjfm!YuBZ
zi2N5tj~>0k@}~wLD6(^NZ0NlV0S8FQC&2Lj2OXx}(Ns}{YC*F19QmCk7&WG@OMseE
z+bDnI&mEt8?)dX^v$8Y67st18n?yBFc>C*W>sbOIJ^|lBA)X=hKl(!A^^bL2DIEv;
z1e!@pZ-r_S3MLVL+^;U$w!am8332vA8uaqHt;lWSb6r0gLrvDNTaV{*qE2!9tE$-W
zH`#nHQ#$_3|JdQ)eQU%I*w?OEO}qHl41eP$)T`>~gG(apdH23(@%~p`Mv&!LS1E}W
zocJ$%Xo)1I+Wp@H8}<0|=bwMMx%|kHT>j$uZ}v0)@zPCSgaTRq9(>@za<21BL>9xI
zJ$j^Ha?!<DkUx@Fk7qbK_v_H%QvLK(&sJ^TyfN&Ihek>EKk(oK<&!4-z5sko(v)>9
zrJ*);ZEan!@VkYz@33Bd=IKiNC>Qs?H<e~0gyj$C@$%RF`JaR@J~HS(PFg5`=;aC9
zUpR^1f6mq9LP)~D|H1pqCelBs|Cs-r!g}$=m-2a$$2A}Ma*fT2s-AiF=}Jt8WC8R3
zb-zv~<SK_qp|E52ckbLJss7>SY|6?O>R)^iY|QS0`apJ>KFAf}_vqde9W_+I@|(HE
zkA6}c7kK~S))Gi%c|!>Umjdk1$<_=evM@5zpmbhEf-PG&W5yG!79T=GvGF0ENqX);
zF0}5{5j(?EGGQcMB2BA=_V4oL%WV@Qirhy2_vqC#sr^IU3-a>i0%!tb2u3+L5{}UL
z<!M%y+RsYHWu#Y+9?*~UP#OeU4@{IIAq!8otNda4om_OJ=3$hec{0SO1PMX0GLihL
zsjf~ce{uiY{cl{zE@@{r;DUh!RLt2C_dnBcU!%;L|78lu^73uP54&f<1_8()^zqX6
zxc%AMz1*bl)VWhq{ljudaD-;~n1NA`C1v!H3wIAm5~|>q^Ivkz2m!Wiziiy5|Iu3=
z*8ehSoA@a2uKcZAw*jBrQCO)3Lqhq(Mi8=@^=}rIb})kG_Pcog&^OR`$L)Xh^;atg
zvK@u{uMgT#yY%jzhINoNSfV4_QG0O>bx22(=*>4@_akZnnVkPE;p<}u5?KE5kL8Ac
z+fn|u&;O9+!*<!vV(0x2?V%Y}qe?uZ2%Re)F_D*M&aB2ryV`;K?3+&e(HVrL0l2<8
z?NNn;(^$aG$MW#OO9moKu^u#@V`2FNs)^)Jhz|+={x^K9|3#{{kiCDihEzKJMm3$1
z_;HFWm1)4=@%(SgepQ}Uu@P&B@txj3`wync$Y)mW%nD{b6`}uR49{R&1iR)o?9z*_
zGtcg^dx3Vsqum%8R<~tKePhQ?S&$hG_Ud1h!EYygvLHFwun|M+OloAnfZ~jkN28OE
z2}oxtmveE>iMnd9nOa6dbnsGECZ44vSD92EG7YthWScDFmzQG^J~Gh+lE^k*OO#IR
z;E06B<T!p~y?aG-_VdY1LEe5!@)lCObbwH5iWKKloa)si1P~pl1uO$YS|*|FQ0IhX
zs!U?&g9J&J{bm%?c#A=zzM+xS@H4Wxsv#NhCwX|NSvDX>qKFq{Gt0z6iOznTuty?B
z;^5qlQ;-TDFwRH<@}Cce4@k2`zb?5I{~N84j7JK}-WKuk;fPj&A&OB->boSU3kmp)
z;ipB2;)VoZ5Fa@)v|b%(ltlaI&z)aeTVIDum0B82g}|x@vBcwC0v0XAIwjOpinm}t
zsADXZ<noUt>XLx3D@ijkbLRZ3=8!`V%Vhb-+Iwu+V)x!dY+-8hx^UPbho;Z^Vs;H)
z+_7jZ@(c0Y$qZ1kt+?2B`}Fu2x!@ZH&G5HuDT60rh+Gx~Ma89@-b^`Ep4x~0mvBZP
zb|qhw+Oprfh9X@4E5|4mGE5N)Kr#dqAM3s3eSzu63vB^qQj#>pSFt0xPQa8<{y2gN
z-L)b{&n)@k_g@R;uQ8zdhTnh<baZ>D2-6v4clJA@`9pdJkI%K|y#IOsm6dab8Hwm2
zS2UdcoZ`zwNfnJlluS>{)F$|(Wvn-w1TEN4)ulBdD4H6C<&W1c6+f3>c}2k&v%aYH
z)7qJ+V(jcMDJqU~$^wN@)Vz7~>n2Q`uoWF56e4_#U<j~?{gz#O?~*!Tz<><ef9PRH
zW_9b{t?b7iuxM{6GZsAY#1mDRLL9*&;rW@FoPxr@LWYkMDQOXmib~_AGT8Ve>--BZ
z+&pitMy7&n`}051eyAv3vk9llXnMrKx)WU?QMxLbQt(cul1-wP@k@(K$fQ7eY&t{P
z&MrpB@pbRH`iCh+Md-ArMy8IG6TZ{&%yIbQul7<TSiWpoJw`ra_dl5cp{9?WKtw|M
zr{-_G`BwGsCrpT?r}6t+EEs;`@XTqqPs510ATs>K6EVl!V6g@Vrc%vhN1v$z;>7$n
z7^24Q$Nfoe1wIF5LKA#Mx}f?KGAV)|0o{&<Ol_h5%U~y;qs=ei4xN@M9XhmE$2i%D
zjSY@!`J!)nz(nxy#eyAmwBJSy(Mu8T)M&dF(u7v>U(ra0jMndea+?UbefaR<S(jaM
zDb|vr7DSB(_0VbE`gIMMR@_)$kN0G>fbo)-nqQbtTLSF%7=Hq^U_a!9{)Zy2y$tPy
zoQzLbND<<<;s3bI*6o)8W=Dum@jn0A(t<Gx?gzrQg^yMrnc(*t_<}wH1T7&iFC_|1
zb^sX^^H4aViA3_*iRL3fjd~SV&g>@m9Hm1!tbg1qA~;l-oK4N}rO0x>Yo^qR`=8>y
z{W1a(?J-(YO3Q#CSTGMC)v$R}TjkHB#3GBho>>$7AAj<RO0G|P$t9QMWoEkDQYv%Z
z+VsetyYHFKwRcbb#i=>ieRbov-+t?7E6|5w{y*{L6BXEbIJo$ti}TYpg5REh^c^>l
z*rVSb>3d+EsZ&q=1>{@=Ip1)NC1;AVL(ZX{bTHC*-OPT)de{W~?J9p{PN@HIxlQ~h
zAAhnkJvBYJ=wf?b(Cyy;c#Z`9v1|%PYNh?+v|r?0bm2uC=fXc!T^1>i+RXoL;`{tB
zDk^jhLBlWGT4psfpkzkE{kOGjD_$15$ccRaKnTkpM{i0k#bR3jym@u3GcdK%ROV4P
zwX%Tsg-Sn-{(jN-+>8aMmhDvD6_o(%2eZhNmfT79V|RB}O;&{A|B`lS6Ed{m|HSs+
za;!n>Xn-28|2;k=gyoNR5rjICX)f9cjredU!&Qn<naMWVMH@iJL<F=w*ny3}%UG;k
z$9C+9#6QS`RU6Rhvn_mB?Fw$({^3}%;*v|S!4p*X&y>1`dVX|h*sx)J1D_uZ_{g7D
zSb+S6V!7FFaIRd~TKN~74stg2ZUNt@ltZuyvlwW(EC2J5?{)S37K{Mkw(@_`Lap&C
zw-pu@L#cQuS2=7M9~&M7onu`jzd^+dBEox{xN^8o>|p-?Z{GjPV)>ssZwsHJWl%og
zvO27F3}sbvjFGtmeeLKKX9<zeZTa795-DX+%68fR<{NKSV<V*)Hb2qLHEj3^S$9nP
zGwYbx2`FE#mesNnue|a))}Pfa;Q$C?`QH*g%fDBIC6wkdv;Ld@Zwntv5|Ehg5cfaw
zfzE2t|Ka@)P0t*A#`;Sxy)2LGRHtA!ath@AZ*@UTyOKZn!2M-6-EwoWU{L;7u3BaH
zJMcgM;`7=DG_qB5u<J%;r7_a3v}3gQF1@kCvZ;aD9@X(1oEorCJQi81^)>0b=J!91
z+A;foX8)UlKl>5uHYmgCHGuQn-CXeqDy6JgyB70B;cZt^5$o?CWbTsk+KuaL8V@<B
zon8=`D`9|G?xssQj639@4w+ojiM6broFa?{%a)bb{`2#-HS5;ZG?rJ?Hw+%sF6-cf
z+GiP_lgCO^x<Qnr(E{El2)ectd?cW93|>i+gcLNFa=|NBGZ#m67uY#<v)(T9kq!sk
z_;LG9FaJ0Jl^5b=I(&$Pf?_rzGD0g;C=s6wKtU?4^6DCn8nZ0z&RnE})zcxtu@b^$
zZr)tmsHx5(HT<H&^ymiWMS}fE#+6zHar<3cgVGRWzs{JiayNx4i9b5S6%rL^zZUD2
zWSplHCGDbLjmIaO{fP4s5*X5Xd_KgCAC%&uY$wafWDFyb%uZ*QY_XtR&(SszLME;e
zaq-0$ZQ^3So)EvDDgKMvkn&6jS#|C%<M?`bc`6nu1NU^gYHI&1biVlV*Q-|#%rwr3
z3?6)-dPcbJ4?0(3UAuQnJ#g^g%;>Z~m+yfEPfe3pFlWx3a0<spjEYLcFTgaj*6_JV
zvnj`q&RB14Q_|W)USC=)4_f(;1r=2s5Z1c=l<CY*$bXkTE-xN==)v+um?nJVjW-t3
z|LN&z(P`7B7M*<3nDtfF`cRgHFPT37DO{=Mf4-D*AQp3;xeZ$4G9=);7)0{rl9VJd
zF0$x~2jf?SHC9Op@kk+np{!erk)%!n?>}?^Mb~fO=&q#lCw#Q*L1C)kNYA;7!_gw5
zWqd>v(aTK07c})UM$%D;j*0pI@PiMPFUBr-H{I}uLQ-S1hhW;Drxju&5%}5l_axx=
z?%gXjiZKR~1^Sm>c(DSVDR$We|EZ^+s@!|PUg%lEKWNzpQ`&$0;Ya^amo|JHKk~>U
zm0UyS@WT$zIQWo*GWNo>^X^@{p`+S6JIbB8QvZ1C&4nXQ9I+15@x4PRW5?|GzM^o7
zw@gZuXFihSoc}RJP{geNLod>`3Q71}j9)G{etxAV5ox{8>=!Yd;_2(3C|&^Z#oeBR
zplEvkA92Lt8GZWn<{EVp$F-cC-;?lt`SWyA100+d_{ql~*Bo)gkyxKE5*&BjaoOnT
zD+gWdI85dB<!|<^FKX7VUBhKGnB;V}E4kY2@DWl53J8w(KhBW`KBuS02ceUtG<O~Z
zc{!?M66J}~+s|no8JS$31v@R;2qt1ipd;@k_{p*m9mSi_U}R5{L6gdYG{I?z=@S%Z
z<jwF^sz^x3h?Qb!sV)-fi3pcQB9o>}!AL9yyqMJ1$L_e}&t=a&_iP2fU?Vcbzv&M*
z6^uM-q-`i+RcE3+QF{9&&f&|ck|JF!NlLkVYI6Tk4^Wbr!Qnevi#6w2nx|_OUr<I1
zH<LW>e?tI7o6mpWj_`EQsRjSTl@M+T9O)HTFBU_msq$TTpeZdbj-V6OS>xr3J;3x-
z2x4Q8^^b8tE{G5uhsXEjpM-e6xC+M6%5`LDp8xCDu2VZfBH{mwF1mQLYbP*@!6O^4
z#U&n@&NQO~#G^AFEr0Qa=PM6A?1+p*4mmiZ|6Y5gcgH$z{`pT*eu%_Q=|$MNcde@r
zAtk|nc**M3XDbgo{P2uJ4mu>WKSrB$@7^79yxXw`BIMk3%S}b2Y^PJx0b*PZIGw$E
z&F!b&EdMen5nqzpE`KOPYA><<rBC$U2W{X(Y~+#YcwRjJtezK#9C~Q_o_qGo=+UD)
zW*{-22^_;RKJ?E`MI+!J4g^AQwzQo8Vj>ko8~BzQL{QHs)jxSyszM(vS}6bdd3o%v
zHZSQN0tiwGqq<psXg}(Idh60lF5bxUWBzwKn_rD1v_leTlb4J>M0-xrelAsjUnhn}
z#qH-BV!VItzCgXYCERdEgrqb^^A+1))U67;)*69id3{3s#PYXp&Dx~)&!rb%0=v*r
z*gQ~<><E*Hj|=CqVBK14clz>QTvD8}VIw>H6k5awGXk}?GuRrLG;xw<4zT=Vig$45
z9d~Yh?%C%m-Nz<xPjJ)CHy4Z=F#@v@<iSuITrrBOnR+-uAikY2pOgl_DJqU{@k}<K
zu3f`=48-7O`NwEm`p4QvL<B$nOQ7?sf%rHwBW&KdF{%E^Lz{v-AGd_>M~c#ZfKs-v
z2zc)03n4N84U);N+MlQ=&Os|_$@cSpXM*q{4WUhZ`*utsbo<ydfl`UZKOyj!TJgf#
zAHvwC{~dRm_|Tp>2p%pLD=XWI-M&AnIr7LOvHn~v7<&BinSY)(jqAB`DzB#PGJZCe
z5?B)-ZSIBO*U2>PlkhoRK^aerWkGX%2xxA<m&q(`q5dH_g0rP{d?PbT=0Dn(;-UX7
zY&-w4BnLJ~nOcsK;#K|n^-tq8d`^x34(slI_|b>8ix)4hKkd}h+;TNoR;r>>OZY&(
zJaXTCm<kQlrsaR1z4uOi{K?1L(G0G?dDdBHZ8S~AM?F=rto{d)q$QU>XM_2n1^-*R
zN&Vj_|J#ipD)RH3xP?^VGUcx?DCR<`z?;v~g7uiX>oNyP&Wl#?0#1`%gWY8%!IG4b
z^f+s~O&e?VDTCMDy5;dHq?=Z9P%i)V<@%Z%Z~WSC-zf>Z^vcIPSv-J1OEvV+f-od9
z-7+302zo2kBhSTxhcqnlRGC3PmW(5Amc)2R@2EfxyEqL+z|MY}+SGn0mq}hPoW*q$
z3w3w*9{JTQ#V`IlHZn^aUNaCEKjcPv_V$a~46{U%A(H9jvZ7BxqFleWrmpWUK^pz<
z@dsiw<)Xz{OV8P#f$tMsPm%L0=wI`agh`<$_OtQtykQumL}=T7qX`X^woUxs%zopc
z<gok!BoSW<NM-X@JZqf&QVa(<#QR^@@>ygNc5js55Qi@X0T#<oMFWiPGTU*|2EKeu
z5`<><LupB&PaX6&?Z>)04Yf73v2-i|otl=8b$14(@3r>;<X;49v3y)pfeQ0iSQLD>
z-FHvj|A76|x$7%s^I<uA)+~Oi6vm2W%dBC5E8=6ZVSD?cq9Vf4`M-S!TiBHLGYwOk
z+OnT~3C;;mo7wMmflTHLgV~QGcW8U_tv9OvIQ2FyhJNrNhh(5rLPOqqcJG-wY0Bih
zi4!Jh7tQVUzwDs_{Ig(qP4SUt<<D*jDyIg96>HBeUWq~To&M)wP}dF#%m0cME9%W~
zdYS9ibz(=K?<fxO@#z-3PL=Z0m7Ia?iu@@d49lbn|4_Wx9ALXOQaPB0hGIi~<gb7I
zE7p*&v{xFl)a#k#f4dQog#T~7`DWGB+op1weQ@Z(hh!Xo>~UH2fA?<P(<V)xT!1N3
zT9AkNiXeR42W)lmW<%MH2CKBmfmBJn|418KjkV#(#(%6){knxra{{Rj19qY<k6|sU
zs@GoUbca}kJFJcwGbVHF*s*zjQ<GlU<f7kRd!>EpcaU!3{>O`7hV9x%$(ChUoIBuJ
zDz?k5BAek;2`SBE)B4BjiyO)soGxElz+bjvdH5`&C~WG(=O{l%J5%HMe94xUkjqS8
zv23~g)eIlLK5N`rnCn0~tqs}m!V51}s?b^9xGZVA{>6G<mF(yvR@a@oru4_6=jGUx
zXtzFn(Wz?X57Txl-6>sSIw$0R7{^p+KYy%{ft(i>{BKhE6PJyih9fXy9Q71Na$+4(
zY^aPxNW#IMzw9LC8g0J*!4!|M{`q0aQuK~vQwpF^T-UBUry|`J=<-=<dNjiq3>CqD
zr=))3_)sAs5&AHl$qbGKX9@Y=y?eKmd``a?Nf6w6%gtM!eCjD};^Rd5q)3;YyJ$2Y
z?RT5(DJ_nl-2MPQrFwkg+GPShqMF@*PL+Sd{x<QQGPKJ4Pk<f3hXdKM6HV-`4-Itr
zANRk?O5FdfR~;B=qCv;bJEfqbk9BR5{aha!J0RlOMla)^l}qB#c^)s!e_#Gt{~?v}
zAzc&yi&wsd%tcr~R}N+b)MWkWI{G}Fl5r7Uw}el21H=*KpCc7nAM%fBm|mHB$|+;A
z#-4FT4(daA1=Ci0_xAN+GyB0JJZ!2IdE>R$YhHitb$zv=oH3Ad2IOR6-ALNq8}(}c
z{{2<2Cf<KuMqBo~v>nO+(69c)*K3LPJ7?KXa{2dm#a?^k4fnhV_`HbXd67-KP@kyH
z-wPk5*tz-DzrJ+CN9oCUz5*}I|9Apoo7Vp=;A4kvd=QV<KON9kLMH%5_9%GMB(|iu
zM9aVk+0sQue6GK2_FJLr(xq$4iWMvUbG%ji4F&3(Zt{NwAKV;%zz?`7DOj%=FWycW
zpA;#@2tIdLfF4ulR_FtEQu%Yl`tkKI&=T!}_R09DCY?4xWC_+aHef?yo##5TLK(C_
z5yuj6Y~p{)k|W*ouPZjOz^H80|E=SLKD3u|Q9noX3ovyUv9$TtTW;O_^ixl9%?M8y
z+K;tzx!Hx3V^=ivAq~Yag!CR?b}EIE!*oyA%>R_J6l?L)Gvr|Y(?2WG(YK@b-!kM~
zB0e_}L`NUnna%J^N=wvZLriq6w^jcp<%=t0t=do1p+i#r+Y-L3gUx1H9V#hZ36N;N
zddCsR@`pAYbvF{6D7gIRk2x7){7BePv`b332Cv6Uva>0^r)z3I+NhOBp`(w_pPhE@
zin_C3DwZIL_3hI~AE&9CtG9{MV*Zl`cuDw-Q-c7pr~u-&+FiwK2I;P|gz|sbVTWey
zx8MHQ9Z1;#TFQvUuufh@Ri!rm^?adRoFw5}0$JVjpI;{s=zmTj$ElGBoL68s5*nG5
z|Cr`q&%Za{e50BD9QjBqSpL_n$0nBX{6KU9zPHsd@XWLJuX(g>d@oZ}cCq93C*#w0
z1}~>g`xEGz+3(XJFv<TE{(lkN!$6r!d>Y6<Z!n9LKMz)~!NPZ>lIk=8e~4f&`*+`O
ztzELT3_HT2<arLz@v+3q_3NsA{}#5V<|Yxw%Zz3E?AaTtS!i(@;`i%Uh|x^s7l_Im
z6D@cp>`L*%1+^2+6r)!HA<4v47h%b`uxlM%K?5&G^d;I)?F@&<IGy1n=wnHeCVGj-
z{Q?pqt5g`KiSzg-UcxDY|B~$&2H_BJP6SZvD+f;Th9pd<T4e2pD!l$083~Dh^f5c-
z<mRDuU?Dc*gl;)GS*dC?8Mn8~RBK|tBFXwcSNAV`?wP|oJ&(U<pFX_PbI%;nani*8
zB@)}B{YcrC{}b$&9B{OTPhs+<(}<oD0vQwVVLv^NNLGp(*M|$sf46~$Qpt_ofG}N_
z9#s^6+Qd(!qnG2?zz3G3(Ek|G;`4<>A-=<6gwiqHqH!*!58Gud7<blLd1)zJ60<S*
z;De89-hcmnHRMTu{`nW=dixhGT3nA2C451aoOS4Is;&Vku84mi7PO`@xNe3&_`riO
z8VgCLeGDCaY;Z{qf1CIpQ9dNti>RjdBT6zT){B$>S@`klflX4v7y4_aOxe1MBPo$Y
z`cWfC<qRJ_j9<>0;+r^%^cw4&mk{c-cAEt>!$*3u{g8$zfLeKg6w2qHlVtexKS|<b
zpn#}l=uq`uAk(qf*_J8b4rTD<&_fQ*z;4C{1^ZDFy?iDUEb%&a{P9Dw&K!4U-kE2f
znK$l?GxT@%+2eCNb;R0LVerTnk>r2AI5R-%T8)k|@sqEavSkH_(7UdRQKLp>4<Dvo
z#gg#RSq5g-J`jOQuM}U`DGsM5mlw|edeH{AHv})8%m=ZO${3vZCjMWwYE}K6civfk
z`Q?{y^45^PJ4U3C7oo-c$AZ6^*fls8_ebto<Hq54T<+P}qydYk8{c-~L%vrVI7G9E
z#3xvj@-KR>J;n}sfBzkD;DH%Q{!hT)f6yS@d$ga<!y2g?@sL#Bn2O~r2Bhz^?>-oz
z%Mb~k#I!uFUDp!6NSy!eoYKvLci(xprmVc24J*M8Jz;p(2`8NBM%m-*DmJ~rbYMUF
zH?-f$;WhtUhQ<A_Of}^ksrQ&&dVF2Me%|Yp!up5e1`i&bfgds<Hg5mmL4y<Pp8zkw
zVf~{IF?{~J`){8Cs-L$DU!XXc%Fdhwe69<_L@LR(Go4V9^RJoxOz+dDuP>J(dHpR+
zt9BvLevG&X`t<FKwGz#KzxN@*1estz*+J&<Q1p0n@)D&5C2U9YU+N^3KN=H?-wu2b
zhxWVnPw4-a?th6FQ$l%g)=>Y}@l_GhB}5GErzqB|vL6?$e~!cMe#B{te+ZVa;HEex
zLL4Tib^GCYkhuDfA}JR!N%$7U6f6Hrmn_C?cL+6O*iPUYO`)Gin3(^N7N!}C6Tc1r
zuUfsT{*F8EEW7lw%kc5VDqGsmk$%FkD4rs;j=yS+)vK4GUiJ4M<zZO`?z{?R;`g5<
zDNaJEZm2s!{?qc8h>vqB{cq#rdC`F9McL(-UxsyH;bcgn!0z39a7X00-v6fmo$a9<
zOk>6KosywBzz*1d5H}5UA&!U9m}yy96O@)I*z;Fc6t-l^Qk7@3JQD1)&j4$WnXeh`
zIY}Pk<Gi{5?McO?AcB>71|K+>ZB{VF^+8e$9|~FDhV}1?75Ko^die{v0p2z~!4x7f
zb@VxE{_L~QKE9n9%HT<8UhDXrju*E7NRM6Pcc}eG`}^#MIyV9C4b;yq;pgS&M*HH!
z7cFI`C6sZJ^Uvo;=zr`J5#Il~SSJ=FiFD2UPZ{u!-oH#-EEq6wAG8xFd&lm-mCKjm
z)fkydM1(=yoUaA^y)Y`6Ytwq|+pd2lN)n-vx0l!a^VgyMqz1mzfLCqWPXYyFaN=6X
ze?+lHmb8dl(w~>coml?k_B$05^=#4ql(8**(g4ikkz8`$ednE;EoEh>u<ZUHHf%WB
z$|qR+9z@(QiA$xBpP}jfhbYNxhR+TU_xv$;w2UvINJ=Q1n4xie);P3x^<LoGzvp0c
z7jBHV-S~owmp^V`MMasL?!8I&w}ijF`M=AqyQb`o<$NfZ_5UXyePVuUA^(X3GV>KW
zroF$c3Qx9wd+;$BqWFUkKWz8@2k&>pUx)YbhjxOmmt-b#OL%}5oX2<9|FQkBCY0gr
zp`D2LxVro~4`_oX+`XoVSBAgvtp#4JU00<MP$Wy>!jz%fhIQ+zxM@!8hoxn8sshLc
ze@Yk*>#)9`XTp?HeZBED2i?Bs9);S{5?o?A@PN|H-o5f%@45F7in9^m$7`l2T=2g|
zTW-2Mr5;E_N}|$a4h86hf)xzITkeUJEFqR(wBNDt2V^QdBqvTnl1ZfnyvHqo+X{m&
zJqAe-AtF@LI<d6Sex>1n{~;IT@*H1qEHcFZ;`0sFaR$RLEy+l^@wx#;Lx*(9I_u0`
z@=yIm_dKa3LaO8Kw~s*{#U+R0vU8%*RP+y~V2WQF#<QU7Fp`&}Hb;o>Oz|=q@5PzI
zghTL=u!{1%Cj3n*e?AQfm>hw2fn&6<NG<yxv@(dI=>f=K5I#4ez?XS^p#>G3cly}V
z^9l<Jd?#qD_;|T+u9hs(L8SYIFbKpNBWNU|P6tWP-q<~oc5R3KbLPy(S3qhQ3-;T0
zU%mKq_rgywl>D>LKC9)ZKBn)x-@f6tx?g?uC0^W<@qb+UBkn`PKjNq(GfRq#ZEgl-
zJNwZnh#rqAecpbK=Br@`p#|CF9VVR=Z<!P~h0dctlkwvscxG8Z|I-N!mS;M}!mVYE
zzyJOJY~n6*6vn@6rd(5ijX^XTic}6?KRDpO*Gx&cT~J;bMNMpV&Nvq$#S>TBC~>s<
zPhu&RC+<SOybZz31fEz2on+za#~*)aShWfx+9(Z&kt0W9uM{)_1;;oObsBaUmT1sX
z4#XKgNf5-&6NfJ@SMrtS@Z~;{QE&p6E)x9D;rO^z{_DlS?C07p^fNj+j2Xu%*IZM;
zO+^Ur@fXZrz!ATS;t{**x&;P_E2~2MVZ(-Hn<}8hf2_Teunv^S!D0CLF`=fsKgSw?
z^RQqMB};bDP^Uo?WOiCuyh|oGno5xACFmCi>sOGADJ$e6EiYQZ7rRrHKMAKT;#1a=
zr5MfN@Q*s;h>YUmB3i(h5TA>I4;^xRmVrltRV!E3V^kYy{2xy30vkN!@SND(@Z|Bw
z9#e0tgGkiL#7P7>lms%%e@tZz-hKP+8lV5i9eZ5n5a{5`-zT4ZT+Q8+!RJNCPh9zv
zR43OHIiDCD-#QYxbdga0;BJ;ZU;j|U(W6JRoOp5k)%l1~Bg6U!Yh_{s0l#(=r|zz8
zSk93suKcrpE+{DCN2xaPGq^^fg8KoKcoOh2LQMB9@BbcdcSI18!87qUDgPTVs+P%0
z03UZqcl59&ZvXhR&&lJ*ozQ+zi7^46vhk-7o<KCl|KSe-$T&&DN34=0E6&ciBz#<n
zE^bP5`;7<3#FHlW<I?b*|3SKKd|$F${tLhqYJUGgYx+M74xdy1_2CBzOdUCDR93Fr
z{ED>R{?kr7P4|q6pbMCa<ksz1qNqGIE<z2O*v}-Ut;N(!j>Iv(NHF$vmP0Lv!KhaK
zpMjD2#<OGopFbD%q04#VqudF^VeuUQ6SUSvy!?6l=Y2c3PSvUyB3Mh(4@MJnC?Gs(
z#eUl04AGCoZ3jNN;tV(sf&Mf6xpU{i5ct%|!@8L4wI>u~+RA^g0e}5@{G^HfKmPb*
zeMKb(gt_v6;)oM{9Sy9IJ#xyJG4>(FOKsBrz!C%~Kls3gbSj6nt#S&A3gjB-kswL#
z^6?R^T}lE37YTNCRfEUuKWX$y)CrQ4?H@T}B$hm~_8&LATDtfLK9{}HUQ@|d=~O`x
zPKZyro*~3HU2us_a<DtHMz)Fwc44Gt0o%_KNYP%DB51lO@zJvhKAw4%6^)Cqdnq~i
zchpfwXYJOvFFU3coFx6=z`}&JGc_B9aUhFD8tQB!i%?*DQGStQOU6HU{CEs@z@~fP
zYN`H7fDG;D`hH%Mo;`bU{cJ}jb%k$w;M&>GdSeyq4O2M4+GaUL1<H3ahXTSASN`x-
zn6hOT)3`B76?W5QB%?=+7>PVj;L=4bGUjBILq_Y5!u%JFWcxh@r7<K(BBt|M9G^5U
zQa?E0e*%}orziyZmBo?e&qC|?kOCir4&_h0AykX_rimC@#utIoiM(xmQYA<tgP7Eg
zdgmSOAjbRuxMPpaJZ{KwZqtb%`0(QoYtW7&E9q&5`^9ye_#s+|9LBi(M*@T7`7|lz
z4h94emk2<dZ7;rLlT+OGy%Q4Yf0H4U7V({LK!E=ayovpM|Cusra-q+E%tQ(vp8iOM
zcv`K0q!U$wr;`j1??1-7B!c6A%lMd4l-jPeG_`$chiHd(9a6BoLzHcE@oWo!TmCoI
z+QgTRZRWr1_}LGf{SXgHj=*hdhRdToU__s->!TPHFZaH<cnNp6webBSObc}-km4wU
zZ_Df?bbjK_uWG#O0ZLl@-*4a2tlyruTmHcZcgXzpuX^QPaYer(_VrT+;naSVu8dQZ
zhh(zy(MJ&9xKwbM?ijqWw9J($7bR2GT#$UwlSEIy1b%lnDTa0lkw;0{sdIMfBM%<j
ze)>ZPwSVNHgWEs+z~GM4@!P(AhF=TO^uT-g{r4W!;o%1lLOOmQIH&{YJM2HOo&RD8
zc&%9=I|xAgIe$t1^yV18gO9sFmLYcjg3a~w=WoHbv)&)Z*lp*$^mEScQ#gFs&fM?b
z45kT*_D3)iK~6E19aI87*j)ab`A!VAaXtkaPsM8dK7o=&WeDI=uuS7A$eWix#yfS9
z&MDm{+&v&9f`?>$=93ewP7g=n@TX4wBc?T)c31>F^3Wp>7xzU2qbYt$YHBcI<cN%?
zpL)9V{SQ89AA%XPH%!sQU$thnYjp&{n3GS=*?o^aDATdEZvU(~voHma`e^o~=;vS>
zBj#+zxWMukpMS2YYx0A$A8SR}3d3>f!SorAqGe!qrKYAv{&LSf#rcI;3Qr*t!LGs4
zdk|+|Cynm$8INfl3XmY81^?r|q5x7SWSm_}t{sy7Z%T-WJMfW2{bf=m6!XOwvuYp0
z?yO9w-e`$MZ@+z7A*QB?MF%9s^WU&U9(Szt<KR9Et(QM^DMA#QLQ=y^H(gDpv)_%5
zBL#{KG*>wn13M<M){=ZiF(oA>DKlowDCww0m;>yBof4TeX;L1hnqn#?gWV%BZ1PEA
ziV(gM&2XGre^osHnM!{ACE+t3fk}x{?8?=F)YlU+;fpW6sC(f42g_+Y|Ii~5ojP@D
z5z7c9NzJ7{{=gR;*W;j(t{E5|l7|K4<NgOPzAWY(sdY>Y5({0&7A{=K-E3TlMKBsA
z<(+rl>3~fl^0AAr>qG~Iv!5RduD<%}d@->8!O1sszd?C!q5L6P_UMM^eQosQ6{N#W
z#7C5D(jjzH96yYr5Qh)lK;Ak&VIQ3_quk?jqmg^>y|*|&zd#QR;`7V;-G8~e80#pZ
zx5OMfW5#3Ugn{hPe&S<y+*FME%<}lpzxaFwruEVPv?xLUZI^#af917Ts-Qj?V?oCb
z9a47g+SR=<MS@pfeHGILlkv%;;PRjL7h}Vbl9J+RQE_pAUB9E4UJGsP{^y1&j4Lk0
zAJ$LfuHcrPCWiJSqlC{G+JE@rhi9HSZk%<@IDC|!+`|up-DYC&_rLwUl53HY#ruEi
z)IVtoKb??YkQaI6k%vl>N7jislFs^h#E7h?o_ea}!;e1bKwOBCDmv3O-N_J%tm2e&
zr1Jj9i+c8+nBp8NoPZDF(Er#CwU!bX!L0e+)&G-^`^GL2$AB;HIb+W}J=go6aoqk=
zLX@41G5^D7k>Zjf`q2IgizDgUtcKK4tfiS5`oBOlMfm8h3dzJ#lvl^jb)?Z2TDKo6
zkjhFJPOvb1q<v|-2-eAr;xE#!U3)wuFgnBqtf8p*_E;B<Q^(q2N;-I$nq)s;7~JiH
zPjRY3q^l|H#gPK%&i^bQ3a<P$G&aO$%y_)q+rfHuI_gzy&Vnd>R774+oHQvP_l&Do
zX$XQ7@A;q_Pm}O<!RJpC`xEhT4zlF?|4)DV(^g;pF=8|F@FS0uU{nxC+EJuK4gxEO
zCuXu7e(>Q39h%~EO5!{3yxW1h?)Jj&<8e+&ieYWk;OgIBjYU7>_5U~De9LL63}O8X
zIjQfw{Z9Ld6DMJJbap(%1C7R<&fx0bU9I&bef{(8+_{)7z(6<3OJV*i+TZ^z*xwXi
z^ma(HpHY&mG;U&sXTGcdxLJ;|w2m+TybHVV+~iuZpcjwFM|&XhJ3KF_IExMAu~~`h
zgbAhFNelTOQf!C))mSI^#g|^t4qL?GhEZ2uaV0k5F`X!D)Tq&!BSwzY7P7onK?pxj
z#>=0|4|N7jUQR*u;fGLu`eIaBSaOg6|D!$$P8=~J^XaFbDaLwNtjEaW0Ws;E-w}yp
z_G8JD%wPWMSFT<qWe}Wy{&_hE3_1X#$HW@E_S$Pzo3?Dig$HZuf1~ryABZ3=l_!G|
z9Yt9Fh{FK8R6moD>pf%5$l|`c^<lpKfA+ot(5fo?`^M`|x}{W9N(2jqnQsK_?m!6x
zoe@Drv2{iTtWn1R9V}E7V?_O%gbJgeBHbzR9xvead-vY&_gic4bMH$)fe}3i-nr-O
zSiRTYXD6;O|17hopMHjxiy5<;)MbC;9vW9jJfz#_^Lx-1&pf_wUo&IT00c>Ga6<3P
zFTaxc;*0<03L<6^#+EH#CWGYG|J;1b&8aMpyp(=zvs`+~<v5udS@0+AKf|0LmefpM
zoqu%HqRFWBAM1-lSzkD59l=TnL7OP=xQE9VTKnf7kIzq<1ix`G^e(AX!blty6XiYa
zl+)s{6@>VWNc<(}Y@YfyxA9Q?tgCLi=_c727+Hn?GtWFT{){uv5QlB~ml@fHb<4lf
z1>808OSm-{$y1$wBcfXRxA+yVg)ZW2(EnTfy1Lj<rwv~M5dfr8pQUMrH|1X*6qQL^
zzx)9}fEx@Z*Y5HEpZ~C}q*o)fqqud4CFno@`G5nlya?LSI0Hnp@(}W3f`u1tDAwbs
z<1@Y3c%5T;k_ZPe`D)hxCUY(R1ql>u@l!O`|3zRV)-e8v@~8QIY|D8w(lY&^1%Da-
z_ynvpQW1F)V&gq&+7>~ZPTPL~#;hiV)<5{BNxAx(Ym(UhGf~2ShYlU0UU~WD%$`Sf
z$7%)|Q^@oAXJ3?Z3j_h;h^cP*GYiv+8A=k#Pzyf-6dVcDXTi@GK3Mw~I3|H+u*vGi
zuZRhS@PCc{3k-sxDG2K7_-*|D`;F3N*#@Clj}WHx8Huxc0->RDtiCPWSrJN3jwS<W
zO|Zy$J*(FgnFa)AbS&RdF>qjuL?&PwYL34+U;~x0+UZx{Y%M*yj~?2=0RYBxg<}6d
zHBIc_ziGJA61Bq_6OO>*ffOtya!E!}hejKO#EB$Kg+GAclVrz_dB!h87;b{-jHQvP
z;SwodXfPYgKLGMv4UOZSjao4)4NFRn@}{N5NHwnlLbyd~$S_1>e~oD5rd*YOKBuHc
z^Fx@xSc>^4kCuP3?hq`f^~Mhg3k4aNO}R!iopn@Hf3(Gs?(UQZ>25~4LAqN~x)h0_
zyE{b$K}tFWhHfMU1f;v00Vdx3-dpb<*09#BnLGEM8|QoW-k&?J`a0gO(-h`+n{z5u
zZrs06wVdB7lw$JEv0JC<UI`hpz%vxytE$f?kU-5L6U|{hR|u&z8Rrw5b_R>^QX+#?
zC1prB`fd^`x<@($2kDiX_ar?bs-|?eJVVGG(BZIHs=Wx0`Q+BdV8FBcTKORr!281l
z6v{)rV&zG5HaA;pj{%?t&+F=1F{)4`ZaD+hoBH&>V&+8?F`S(eDhT-8mGDb&*#vpe
zKgas{uOb@kU%n$r`9;Z<`LDcT?YEs^IukXz$eu5Mg`9k=io3UWOS>=Q*&EutCK$8@
znl!HS<iJ39&!c)Q0YlDW7n$gR^6DS~faxF-!BBx9$Q8M}3KI);=8u#f57Rd~2IlQ<
zc$$Is*j%DJRpu}z(Mg^RM#B&Y&O7BARzfzme`q!WpKLfY@K(Zc_{qMH-VOmuI4%|{
zb=GauXa@05=UETxfi(Gow(APClFYc{{H}LL<@o1M-U@=H>V2mxrDeheoR^~R_%{k|
z$MRJP#3A#HGw1D_MhH`>R!Qe=Oj^|b`j97Yg8W}*8##2#*$H=ke|IeM{vO%=<oSMM
zeC^-A2dcc|B*0q=-vBSc%Dc2lJCzmRpY80wzB!rrB;fe)NiAX!A9*kT43kN%44j{5
zb2@CD3klcwo)X-2fCB0mOAGtFQ<6$?FVUsLt^F&R5#Eq|1lqV--t#6IIVV*l++p5j
zKckg;2ngnQ1FQMj^#%(=atPY8RjKZV%OH7|7HPjq=l72E>I3=fPdDT2AH5hv`@d_d
z#`-K&Xh9J04z-<O@M~L@t%BAM)#4<AjEuj7AlK|8qAv4_4{qP%_(@t_&kI^1UPAKq
zgK*VAf;E7lBa7;~9h^zHFRleJ2|t=+)?aPEjN?Pv%N%hS!+41&CVRzA?Kd}LhlS*$
z5XzB|MO%a+D~r>9ctC7;6jEdsbbn=Q$Zb8OZ5n#j|MK_t5dJP4FGT@CFHX+Z$6{p2
z0i;~$<lj(7mwkR0k^bkj({;>{(ks003iPd8@NS@7P5QVZ6o!VbC!|3KJ1q1(*m+x1
zge2((;U?JO>RbO^99_!S3q}^kRA8!Zkl4*ulbZ|6)J|Xkgm!Djer43n-qVH0O1qan
z{%zj3PX@E%v&S8TAofjlFiTGIWBOcwDzVr}MWLR~z)ipj2rp;Nc7|W`oc~Io1#;#)
zb5mB3VXF-z2!UL~vuBEh+L2-TDz~4(-jI<+v1W1zSYh96s-vGs`b$ooIoK4|2p~xi
z5w+#xbBgBhI++I`1vyPe0Yx8567mD}D>TOs=KIdC2;{&jj-mLlr%5WIxz5UU&puef
z2Z6-gVxlaUO_G-pEx65R=9G)k(pRbavt^QgN9B|CF2WsSAk!|57=tXxFpcO#3Y}P}
zJUYsFEoQ+_dET>`n2<lc1yDo%>GG?epzUXf4&W&()C|=)7uMg5AjGYLW=pry^hyb6
z#rZEvV;R&bjK8B|Nf-g@`fro?oP-%&rqt0#HoR5(*Yr0>YBA78#I59xqM~Eik|~v5
zr`o~{Ww@>156U?!o?rLMI;bCKN7k!O$d5AF6CmpS2yq0O#&g`wBdCt4=!-;gSde(X
z8DP6feSHPXrd*`(BkrJuJuyX5zEl61Mj$HxB^3bc@cUf^XS*B8P(6_D@MT}wrumB#
z3a+x7?)qbR7UuG&D;tDzmR7i*3BM6cYFyd^NHAgrO^ZA%Q0(y8B2opj5tv$h8|wk2
zoV1`+sf!Nr3rp9lAm`oFr365&vX_ruM7zsvMN}q2K}^BIW8KzGEHwK@%mX43*AwK8
z{Oo-lWk0!z$bHy0UY_kjQi)Pd`B(^atWGb@f!g+=7pI*6eKo*GtNMCK4mVg$u!cY*
z&Ah)}w(vJ4R}NCb>Pln#d7lw|(bFE;ld#JP=x6{ZlehP3VCef~j&WT-@feSJyTOPp
z8Up@EPm}uH^#^Akw(EiahcODr8YK(7qs^6_i(7!pJPzw&Nl>Vsfp85DUz<Kvk>8zw
z$|$#WZ*4W}gWttx#dgZJNG0(w?Z8RzN9w&S!0OC;=O&BKrbC-Czc~+eEciVX>BY1?
zMI)&5W8epHD!#6CU;L$s<*SB2r+|PjHFsIS9QfLtOE9)JiZv)SgcahdNl|21FBp^c
zE_@qR6Q7@vCSC|6&;Ny06?2&_VW>HeU&8axwF+g@5gfi%ayV72kKg;g%Ifg98$f6J
z*`+@sLFB`dji&_PLxTJ9<!qzApSrprOY}MOm@(ZxL1+uIL-(0ti)Vb1P(?}T$#E@f
zB8A~kvmP_iXxFti9#QxuEm^XI;uZyoj>&u$74MUEd#C~#MjPeoV^pvAWyqBrGwnOW
z1XG`0-dK9-g(`jaV!u-GFg#8l$r3LcUJrs*-^DTGzm6Nk`~NI}+z=0e;^oJYQ~jpE
z3}-8C`U8yt$lHjvL#Ht9?sVO^kfYtyiJ6ihE7SV2&p0}F_MY7mtU>+ACm}rO!rNkI
ztx4oP&9DeF?>Nk89UPxM_zn&qsiha}35zn73`#Jv#4G*7bGRuxd)i!tV2!bPJGDw&
zCmQK3MkttlV#zv&e+vCNncC3yA_r!=vBt3Y3S&=vvxM;~T=e@hyiHvC(0WEXle6zg
zsnegh0M?$G9e@zdze_8b)C^~6{9M{f9(p0>tn`fqyY&v90vkuJSAE*0YCx^H;h7=L
zU~`Xyd-mq*_wuk~V3>)@N18R?Qka*ag21#jY)GAq5EL)3QLs13{ID^WZw_SxKJhBu
zBCqRGZGB<dTSgoLv81<BCkr}vh40d0CK&>43Dt5%>C`i;;8`@`D5{#@-qOJpP%U~y
zUY$$ggpa$+JG!p*THY-;JBo=0?mG?PiR}Sn0_ZxI?-(xyM(JoG1?iGsMQ8B<JgWv?
z%QyJfEa|pEho1n8*pGW7y?+JYG5w&mUFHEg3QZleFfj^GfrjfF(%SH!G7)i_8T3Dr
zn#Pg8e*<+)HskHA(XRq6!D!AhH)7!Y_aJM*<Ve)Su<StMe)b;;0`q7i{1rEDGj%^S
z)#BrASpZ)G5m4%dfV;q4-pO2D&+xCNX#<Iwi+hWfYVhghwTWH{$;uX;OKwYIBRtSo
z<*o*allHtLvf=1FTNQOmtE&mI3NdvDb#f#Wc`reoAr#I-DH4e`?RQh<x>4M3&$>lE
zzmd;zo&@bsXmS|H=Ts1xkUM~LkGESe)p_H$lP}qlbVOA{<265JYHLfXPJ)=0#Ev3|
z#vR<&NX%L~zCwNng|3I*{@|tJ92eMWV7jItGeljk<*k;6T-})r>oDb6b_u_#?}8C=
zVqHB&V6x^ZrQ>d!Ygx7;zh*25(_s=h43|)=aoi)(kI}!4x6tUua(rV&9BU@0$mcDp
zY%7>N2&ynf4Nx=<b2SU34VgTOc)9!qxL>hP9d^lPoEl0Pk(K^u|M~7{q=)~C!9)?J
z$ZJ{)A&L~Y)Bnq?$9q|R$VT?x8R?y;&P}H`HQODi0c<|t*^}1CMxw*k6>^L!A9zg(
z+xBaC{ZLVT7N(2HlHQsDL6R6|kqhxk5&bR7Ej*m``0vUr3K7dj|IC8q=(;2ud`^X7
zx(^rk$!lzC;^7`akZqh4dq-4)G_3Xu4Xt0m-h-#F*PfaqYcU59o~iYllSna4mjOPI
zI?%{(%O<^oToB1`B7glOi^Im_%{i6G$q1yqqNlJpPFcp5pm*nH2>u&d9gL`FZtv3F
z*_F#Mt%+>3_vBDa0VK|3{7dgqdUk}9Zx1p(F|je8BFp3unLuG!nfd<e8xj?F%QjmU
zB4CbHFqpWu4Bm93$7?!19Mh5S1|~r)(a?ywCXwUzM|l;1E8Y}2Qk=w%@M>fSmlA8>
z!B{1bll`u1P?f*{X3k2;vOCcET|PPzaY7LuFDz`}Ex+*1NIKfWMxc}wk<jn4{r{ZG
zchg0k`_>^M8j{)8A?JUH1AaoN9_+5$UFQU=9dO(gGlf^v-o-(hoqoRoJ|G%Yj!JzP
zDTtAVX9j;|s)Ix}qYjEC_YJ^n%7c~M0h9dFqSSz^q<re2NTI1+YbTcuR!gdIA}(h|
zjb<k3NXP6<0sQpjmgGE->mK2kc@?J^^2I(?%82@anDZ`B#)SA?REq5HFG`Ujq+Rz*
z0%)nSH_o2}?6df`W~QcY;7>D9|9oyWLN<jj5XeAZUHi9STNHER*P7!5VtJlBQt^{P
zfs6sqckrwR{j_mad}K82&3se}Tk!{{jst>S5xh4{p(a+r*TZUTo$m)Vzv<2QDPo&%
zYw*hNGyKe>EH<%<g<??`>np=F$&nOCH7Ef`NPm<uP*3g+40h5=k0?DU{4Tt2A^iG%
z5xH0-Y-c82epOJLT+NPGjvT1)B6!&K%zGi~NF$l9$GGDZfEv?t<4{8_wg&>CG(@wx
z&oqlzL?JK!e8P#v<86awFD`}GySn*J;_;WQNJUUV;8uwmF0U=6(2pB-9oR?mg-i_E
zDMEil41%jl>sQRr>Ww|fj<$`y#2*@tT+7XBV@kTOv%HCj?c<`tM_^#RTu39gsWT%%
zA77Ok6^tlh*!F$u?3KfAUR-(MUDVFCm(d&jOKbp%IaHw}f>I7Y6#serHMT+Dpm^BE
z{5w1lp2JcXgzqtLxRi9wTi#lE(un7^wYUBkw&a3u&q%5e>(ta|y{UlX6{<*S8x-Wf
zN-vQmDyuL-J6+v0K|L4FKkRntpGeMn9E4Y~#I>j@W9-Yk>topq15~6+gLDuRbzL?L
zLZb3n4MKbaWhNT)c-7LkJ%}jWw}%QC?1m;;;(zHU@4e<*BzDZha4^@AxYl8e-3SDU
zav2GVY%(}LL7X&1P0cio-AG7?Z%9y?<T_m^J?q4r2gceQPeM7yDe4+0t9;^s3!|JR
zb`n$*1p|XwCOD~Mfbqk!^-A+|D%9`iLBvrItL++JjHBgABBA}1EV<rwf`Fm8)0^;=
zAC%JoE8Okx9|Qe%zzu5<&wkmakDEcp{ly>Gv#FD<$iGQY2KASgX-nP3V`qmOsVZ87
z;8ZftIgl3wE1Im5do&#h1eiz^b#zPp@{d-1u-0VWFcFEnTX$>T936&*(tIRAGZm@*
zgYsfd`R#!8j>Oj8RY&Z{TB{yql^jESRD(z$5|boE%_^iUi<Ps?3o8_I(`p9wMI`DT
zZUQeuj-?HfA->kf7yr6O?KVvh5<6NTRUxVk8S-OM2>`!m^7Wuis0+ItdItwt9{#b9
zs<6?JDw@KD+Y>v9CbJ?la>h*xm9Iws9uSl@OjVa;&u(9X!~0fdOyfE?I|mI2xgMR^
zSOMfhB;8r&zfzP`U&A53Gh`*fH{<cOd_(a5Ns&=Tx#>dNHIfQcfukP|g%Rfl%*w=v
z*GbeNzWpc!>m>nG0;3~y@V;dqfWo46-qR3Q1n?e2JTb+@fZYGu;0j^U<L%znUa=J(
zk^O2NP#tg)92anc3^2~S+Ld3;jZ>jXGmS=%R6?qmMXQlj-pWNSsHBDyJz?qG0jIo2
zhXTaoP|h&F3F0yjNMGF!^hFz(+(djjL5<vTi*5G!dZhNljs>#^mC{3=!MY_*AiuB9
z5s1#sOv(u)%h@2SNVaFv`!K(ot`nh1QXtk?34a0aW+d`;a>U;(y|<ciDhbsyGA&)3
zR9t1a5y0Z>Pwk?9hqc0lxeQ?9Eu2+mcG0XA)?g*^h{MVS60%6RK_`vz8l7u)RqT}4
zaL$t{KeIo<stG`=C2hblnwzLO4i<C;m>EJwvGC0hC&Q)T_>llZslMl6^_<J-XM=l}
zDpP*J<v@uv;}!<(4?jc-{y{@**VorG<yg0#l#Dw5Ckzf7iKg&85*@R}B~{WBz&L^q
zSKfLpRM^QP;~`&y)pn;*6d$&){w5vkW>pw(wM3~2090aAFJ5P!NN?cLq(TSNPE7M;
z)4!&XTQcJ2+ZrX1z~8q!u(FklKGS$D|5i~>F7O97L++;`R>7+jpr3AkO?~|^ZrU5&
z_#fJ3GKP6a5+5GgGOkm(4^&EY3#7O9Wb@ImnZN!t6rt3^GBj*@g?2<drAy>g!j5Is
z5>*OT<8oOh{B($|z%Zc7(WZoBt3fhZvGs<F-2(wGT%Y>Ft{EMdfGwnu?TM_yJhXQ-
zMX3Dz-cp(oyN)H&+bYSA5ioeIXZ5PSjxQ_;YB+GmAAV)+u|OlpHQ^9StcUWoFa6iY
z@tuf?^fJ(7{@p;rKs{)JQ*P94f7#bp-8!$^b#%IYYLbVuM*cF+(FR}7^4+`fR4rM-
z2w?C5Lp|Y*>emtHChRFP`+!&dv}}Cz#}t|yUHkQF>B=`${T#9}SM}5|J6{{5Nbem&
zD8)`|5Jfy4OhZFsxL4I6{>)dG2FR=I9)nMpBNlMB62X&)g<^6bxQRD~OC0c(<YMrc
zA*;z21vQ85do4O_{$`$#8ohHx`txW61F&`_g379E8UN}78OG-+a>9t@tt^kC*G`hH
z!7D|f`Zi=@Z;ZGZFCLrxjs<@UXT3g~iG>E|wTi;?dW@q{D101e3QR{#gRy0kO6cz4
zh_x`tl#tHM_EEN47(=X>ywO2==g<UksnYO#<*rRmxBu8C5(%`qS%bb0kP_b{NsO8>
zLShE;)<+QPFLL$mbXn7hX{CL5as!BSx41a>$D55Hn078(05<Y@A{Jhg@v;$b@i00@
z3b||qB20iM;|Rtc6)W~c^m>Z+4a$t&TpS0d0)0<8MD6qXl1;OFQrp2zmO+x8u{UWk
zSYk)oeYGXSRv~uJ_HPXfd+`%mbeR4>xCtyCgi42&z~%<T#O%*G9nzsk?MMf@xKI@_
z_V95@{9Q<QMl6|K*_B<t32q@5%wn`aczgYqZPak&IN^EUvjIMPh(YXWheR*(R`JEi
z1pIIsfZ-t*NGa*I5}?fZ3&Kg8n%i7n(fj0x^_V|r5r!~I4U7Sz@HdXd>A>B$zo$(*
zUCHL7_h+&WQtxmG)+^_Ca$hr!(Ny<o{wx6VuqpJ04K%H|f_a?cP_Gr8>Q8QR^D(Je
zpH-f!`+V}(O@$nDBG{k8Qd<B4Z8O7qFU`NDWgZJ9HuFr|Ba)|Za3ULnMPizj-oBQ!
z5vVzrP$;@m5B+eR%HKa@4N+PjgkAo7-0*iai~o(ZFEe$+D*oQ*N=S+*@7FBLi=LWE
z9xzkKC$WQ-Vs4k<)s=(YLKy3_6Fb^@>hiZ}fT0fxw7dI!mf%X|2t*i(%dE1IC+5Aw
zQtZz(WUvhU-Bz@fR;qC85ewWH;US7^LJu7n#`L*DL~p+7+|MxwU(Y0dM6PjwJLI`X
z_oTGV0pO_cZvRu!sl7;*q*>7Q3^IyWl<8TinfLG(mydB=v3lASALd)i3E+N%?O;1F
z(v&v`K2O}hW@ns{mdFyV=y)S9uBfnmT;JUXA6JT}Mq(XSiXepurOgmMHo)-2$Kw!p
z=lIR?bOvz1HP5dBzBbg_DT~?`gF)+xWY;T3=I8RC+D{a@{nAt@CT&*a+NzD)$-Q^M
z&wr}!YCbfgP+)j>h@CuFw{ICY);oMj<sy6iQP9MsLjm0zwYpEv1{F5;tOEWcoPjwW
zw=y=A&a=<OPZ|4{E}ZddzkO4-&4$ZOkE)WN6jTQk-`z!M-8hElO?f}mjsVd2BRsq1
zfE{w$<ZN(PYIWTGnXYHVQZBc|<NB?yQJuwjLScG&G_YGfkBF`SF{-`px<BP-|0x-&
zhV<mS<tC|JCv&;p++J_dn&Iwe5rKDAeQK>MJOvPx0*BAdzgI9dwu>6Skvm=98{%L~
zvKAPMyO~k&o|+ONrWnY0e*I+kZ~WQ%C*}(~_sxC3pSgAI-iB|t7kvL=lMvnjnlBxU
z_1r9I#(O}s3X3ngvg#;%?KgVfPBB#^P_uYqed0ofa+w12^=VU+x_wx42CRGw6DThb
z3y(F9LL?f%3q5<Yi<^-Z(y&(fVXPWC1{<H(@*)Nx$g|PFu@Czt#%T<+-cUpgk9BY(
zDw5(^Shz-mfU4<RRjM_+h?sN1HZ`?8LI<qGV0J>YBD~vKKr`$R*IG!Gbstm#OPmd@
z0Mdut@`$^!C6$EX!robhh7!`DKHY7bw;wpO%i%%wVenxiz7-$EwfJ(qqx+cN5_rh)
zR)6GniSdMNN)lo5D>V*MLb&w%v9xXp=SOUuG4m3*ZXOe*C+EY`Fn#jcmrsyJI*apW
zw0pF*+lZwsz)7()*l9>@sk>8RP5zF?gi$vQrAK86nEvbp6)C=7p8f$sZLp_|A}M%Y
zGG`r(!5iP*XkCJ_P+eUP!6wBQf7&cfnM&5s@1RM)C*h@81caMEas5m2K)k{*<ql;+
ztQD`p492!^bS6u=!*xtJ`g0VQV1JG32mq%ztjen`Ztz6SC_iOP#vl*`G%2c&_kx(4
zKWgo>J`+v(Z}Yt&e~SFh5C0a238$z63hEjRV0qztPBgt?AM#`ikA7DJ3|(%ps=)!g
zqOyrF0-+%x+)W~<K<ICBadZr}FTvM=f3=Uas16CLbfFaF<mdqC-NO9sZvY=gaj@RU
zaLj%JGu4zP3zerzC-Vj`TUN(kMs?PpIa1#D{E*#T;VY&Qvu6Nu<%B)gn;0or?B<Mh
zFpP?QA+P&>*GaUWJZ4(@S2Baz_cP|m@Up;b`hGyw8a$VxY{igp#3<4%YKZ1fEJGkm
z>5Wyfg#d6n4kFOX_VFek36^(u(-*~7KT5-J`Pkx|PWk6spq+udd=~J0wK$v0_<T#O
z5XH%Qhn<II%wo^Db43S&@=tb@f#Nh*Taj6%>1eFvP+j_dMmAY+-u}Jm8+((e80*LB
zB_8wg>zNj#aBXj_!L$|YS~#>Hm<L&XFs6X{xn(7NN7prxj21cBm_5)cj3^ZKtTKyU
zctkc_eGs1oA09{1UL$gO>`8S#n5X<6K-4!{0|DN@-kz^hn<dc8Di|lKw}~=okSjco
z^>8p|;Y+u)_Q=*g-gL24r5g4_gKeLC`@bCc?-rN&ZzHF&d~i?>5SKWpP}u$AL*jSJ
zqSi5Vx}0%?pM&#7S}X4@+Vlx|6@7vQnX;^VnYi~{5?H(3SKF?|Jl2PDb8=3mXZZR;
z>u74Oh^&XTUuVuZ25g;GK~4ufw_Z!0!NF5VzUdd%Q4AVlGDVH!H^U)|9a$d7P2aPf
zAtc|ftVw{_qP(Met8N#=%H1ozHAxIkEb@YsdYZCEtr*>K8O#?C|I0Zc$#;fC1A<OR
zp~=T#Ur`nBeq{l~nl2Yh^|OAT+<z8z-=JLYcELecG&1a$lM1lk{=*Jr5&lNL{wuiz
zOQ4Jo6*7m>dWmSGe<uyp=1(vjz~7l#aAOpkbU=m;+hIVwP$Uum4wKQ#YM97??;Qti
zg!Pw{DO0SGdThAw0jyn(SbMHKYBVX_I>f1f_rsD;kIsH-@_h(hgAN1!S^^ua1h_%G
z((R!Cr#jo2-KIP*q4ME$0hr0ARkqsp;dFB3=6#Dq@KYd~_<g87S<W5WUIV3lNe=LB
zO*2HyWmUY|y|4|YoJ{>PkE$Jt>Hb{ZYI5@{L<)Km?gG?G4yG2HNKx0)PzgzAhzdrI
z;R`q!&`I!nD1^56B_w(L`=!Lr&Kd+N0WiphN}yZLffU>myR?8q9xDt`zyr<w0(%BU
zn^31b%DJZ7=-G-+>x0+>rY552ntErRkkTtOBS|A<BX7k`mAX^4=djOO$^Zm65)0ZX
zWZOKUoFtVC_kr<QO(OSrj{`GtV;H;5k^EN~u2pVkP$UqPan#<16J!N;^VxudQo0)B
zI@|#{eZ61F03O!qg+~3CyvWs$d)Qc)Y+0#@^TqBobsFzv^YS(p|72FSOUCg+Y{GTV
zvh%ayJ^>|I`EZhcTdd`R2tH=7XwnWb1^SOXq7mG0A^y1bx5>&aTJMMjsKA_KpSt|d
zsWY>Rc8X(BAYO6V+8VYDW4u?F@sLL}I4|s9JAAVm(wOUvN%uiOt3dSD;k|?6zU}wL
zQ~<=F)0+gtnYs-g@*Q3iYn>TKCbzC&7!!AN-C?<~=BcA_c?`P+;$0KKH?lT$TwGj^
zoNU!%8>Z^J&kpJw>76$0lOf_qdh)Y#%g8U0ZtD?Z?#l1fKUV?Ud3n!@s6KEEWoi)^
zr<ND2zA=-@slcoByJ3#7Qq%7QKgL4}g;P?W4|jWLc+3pmJ<PEKa=9%UdhDFie=AN+
z#ogo4%?q>|*Sm2m>DK8nS|oV=4isv$Y53!6;P;+v|75cjNN!iTchYPQb9ZUXm_y!`
zIr&j$*P!OlmPi@&%-eOBvHo<s=jX5tH#LR6g2M5ZtxJU6z<=_T)GAN!i-7%s5;&n2
zHd4JdGTO-}&(`UL9(N+HLbj80gv;>7U7(^}%F$l(gW_Yz+n17!6*HUpa*7T{5Wny7
zaPD5HnCBPXVrGz@tEMGXYHza+So(37@O2_U@#&Be*BG}~?*#YwNb0uM!X6I9gjvEp
zTc#QAJ&CVW8iB^}pRnZp<tDh=jLy{AzsgjZlZ|GN!LEr{?08cm#WrmfUy<NW=M1>-
zgkP-v?#5&G>?HT-zx4r$B4X6SLY!K9{1n-k!lvIyX+|niGi&jnWP7y==9Fvl#537+
zfFFAyW#58V+WU7UAPsloXM^l7MOj&>5!r^XiZX^}B9hv!Y#xzJ8onaYOwbHF`{q|!
zK=rXdcRmnETyf2H!us}sTVLh8O^@?oA2)%ONt2@-)af|yGYSeWdR+EYB^Z-Y#4HM$
z-d__JX?hSVjm_QzgErw+Ys8H3gOid^MXp`WbMnV4gWS;*B`ujc7EL)^v**v&Tm<bf
z@1nYVBEoH{a$O}gm%JY4p-*Jew9e=Ca^kO9xVZiS&Wj(_Kc21Fn&{6=P<e@M{9xB<
ziX(NK!Qr(+5NO-smREceev=?`SnGNseD_Y%oYSU>)}Ge<BM8J)UYa5C6<T5rvt9iO
z_k}V{Hi^E!!!nX9RSX5%fh;@`3H1&$8vb$gGk}s$g5AI=&vK|e)ygJloi@&=Q6z?%
zjNL94Coi7-`j2+a6B)8El?giU23cAr4N*q)ZG#pQqyub7{-O$7M<taPWks3%9^y?8
zn&Qp4Fw%{Blgfq81`R@c%!%)y)slD~j+{R^vDP#%-(CgTGw{>P?p{7x!!UOI>O!F}
z!<(NLk~y25fQBg~Pj4FY-5OjL$YF9Q7(>1;Ioc_BfnPqKj2AoV;Moi6O_g)YnV3~r
zz$Y`_Lvc`tR0=ZJt0yNE^H?<B-(FJz5zLyPt4sLGD`cLYJ)IIuD4g+5$6-O$JAQ-C
z-0Pn28Q`)N76pSo5C0SQF_@_R+k9-yb<=)$Jxh8SCWk_@m&S>iOrr(3ztflUFHx<O
z)@=d5oag*kqfo@BoCiEP$v4tCW?4+7Xdn+4ue@7^{kyq*1}wvAmXR22i;_9XK{YT6
zS_laV#b~qTAEKWojo)q}31s_}Z$QJ(*3u85J;%IT+q%|rDW%L(xV3sU+8G7{0mYn-
zRbSzl<3&mX8PN#-pJB<LUexj=b*isN0fIXCl1h6!A5rblNUOqSvH%9m$gCVeCj|72
zA^$#+Y=@~@8W^D~)OUBej>g;%2N=y;^?BkA{sFlTbTPU1B^bZoJz8mn_qf1cHels8
zrMR|m4o^UE-oxcbyP_`HKlMC7IP?LuU$2$VRA}Ek*7^ML+`6dV{^A6A{pJ#3$%xyf
zxo(KP-|Xdsd%R${HrXvnCjUG)ZioK}u9m{C6nT`oj_L?y|3X>0g=L}ZlXHidYUY3t
zg0X`k&*Z-};Bfh{^n|#{R=}9j;-nEXy~Rsx{u#<k?DU@|0QXBq019(C+V;d|E8y`Z
z2$T)Tk<8IphUd?XZN|a-J?t6JwyC#Zh;@SN5*=CH_ke~U{6BC3T?vcghBWTGEZJ(D
z@l@e}>5CzlBs8}FY_pQXXn{1$R`rx%-bP_h?bH4=mXcUH`owazw50dc&z*E(x5RBS
zm%B4ZX2k=d?uXo0n$@O*vsWxv?%jdj*NL?OjPQtvgxR~}!UU-R&3KQsoDcq0sJ?Pd
z(it**^-K+)yyYY$pAvk0CjX98l)9V@Wdm4tR;{B9JN5x*z#JZPqrc5gsg!O%>)3xa
zLykzzWCJI>3J{YWnMV5?jZBGb+Wqk*=AUqqSDp6+ZUfhRC+_ZXSrW@|<*`vrW($}m
zlr)DjSzSMVW(iZe>zqJz5FbIECuliFe5|IcI<_doc5HN+ap1^ta{nkpklW$jc&0aQ
z`;cI?RYBgzb|@BO$GK<Tz~xuSZqSmeK3KpiO%ze0yZ4;9yWEH)`d_tbc!NX0fXesF
zN5E%~jgQ%*w7$6b+26Z{xy*pzwRu3u0(|RchqS6Xxlq&t#Y0lbDkbbHjvq@oPg;uZ
zFA<iD+^6g(+bl1|(DB-I?67n*v1l^lR|%=<PnM7%eHi`OSZ)sWxt1Kz+RY-%Q^i)v
z#$4MJ>E+tAxbx=Y`OGSE=)arxU;6~D@$Cp?r7j{8GG$_H;)ZQ#^vSD$S|<*t)~dPU
zP257kv6?0P@EKU8`|p|0f^<N3xehqc<OStBVR)GK>vOqwH*39ia&!cfkdR0hib82E
z8hw=htp54nCC;gH9ra`Vp%OYkWb15bUqef!X6taV1i%14syI4Uw99C}RFq9kkN0Es
z)HL#a{{Z)RLR>d>vDaa-uICub@U_o`ZP$f}WHZW9_{rkG19AV4B-;P71CUP%4x4z;
zQ57FhtEP&W|FCwtD8$(^_JtcVTez~|lz4aJQnRPV#4v*|b}9)uu+k~qma;)qI~4hg
z4ML+iu2H`p*yra9&0z-kKjB2nJ6TktiWcxouths8+_2+5l@zZXIw;z_2J>2DXhSRg
z$@s0y>x8%+x*xo0vbk+gZ}i#YWzZeiM_wejOR1_D?z6^_mcYsH0X<y;VYt2Q0{_fW
zcvHrbmU)@VH%17Xc7L*G%(RxBEUZO)n<x5F7@z7Y%*tPeU}BGPDy~~Z>bx8xSoms+
zf$ih<uNw*}!Zq)6z9w8bYL6#<(9SbMcI0QBWq8+psyQ4{i!Zi6@HpF{tnQdysuo6~
z!6|73|9*(dyEm-Ch_B<$UKe9h?Mx%4YdxoJ00Vrp&+8Ad|NBD_o4nLWbk9W>Wg(iv
zM|ADS42*lu4Ze8Pc#vf@QngqU`K0*od$y#pcGT&|_*}p0*OLB*c>d*Npkhfb>SmW|
zKK<Ja&Mahkq_OGY%m1zw`lRbOhtCYVoR;v@C4e1vN9R2sgc-I*pwSMMo1AT<0PbUn
zRVgK<?TwC2t)?TkPwj^Qm3Qa4&aU-q>MX8ym?4Qb2)KR;@U9fbK>U~MQca$}xVr?%
zih+&Oi3w2lZpnpC@wvz4n!~Fplgbq>faTA|9h;kCMbmH14H6BE*=AfTouwy$hVe<3
zF0RuNPFn0Bw~saRgj@tyNe8*dcuef6d&<Po93Q>E^M<D5IvoAC;pB2WItXbbTI2>Q
z1)9A>r1diVM}C}}1zZEg`;?&_MkZyGk2v&M$h^Bk!$Do=eC^O<N;J9(0m4=y#LG6o
zzlX}}+#4CT-}=}|YcRjHO>Il{W-kz6{gR+c_L!df876pP4~K#M((BwIO3wm}QK)PC
zoqnGt!l^&CI_*AkS30V`ljP)HOKR56{Q61l5G~ZbV=IlarxR@X^y{JW`w$Oshkr<5
zF(djESpIMS*}6__{aGb3eyP%qjET6{oW>R#vA?iPJC6#-v_1Z}8avJj5W5}py0>3^
z#%$*Q3KZS#-$@&w{Mio#FE&#AG>Z9wImu_udUa=~*k?{mU70Tix^ZGXxfTi?rVrW4
z<j`bx#P{9-_0}LyEn-&SQdq8XYzP;x56(G)Eiy1Iw7$O^|H@$?;vD=<i_z2)az768
zE@SIOv^c|hS!-?XSW|@n5c0g+I~Y5Gq(ra#uYk~sU0iLyi=B9Q&qgwh80y9s(YnR0
zNY{rt*jnp{)5{Qp63UDQhufSj#9EK8b|jb;j8QDj@snq39NSlblMh!<yX3}gr9*)K
zyx4`6*lo|gfpG1W6Hu#A_}c$`g9kk;w#|KwyhzM5^t(CC0&YK{6}itKYTv^J45agV
zu#S}L{_nhj5uDv@f~?^y%E>fOrmqjDON<+X|K3dW7{W!BL&5{(g(rKLC~i$=V2qPM
z5XsB1NVv4TGk7YtC^x={6Ze|&4T(4Z;!v+UoDk*bW;fh@p7ddX>;Wa*ZLNz3snf9Q
z9LS+9JnFNz1n_|R+AIV9d)@;~G?>F1l{Y~50D+6;N&1oSP>N$@WS_E6_OA|T((eni
zuvrKP`x5bdF>{227qYrltlEUqOOa7j!<8~Sz#nyBPG9^Tcl?(vbLC(CwCbtAF1C~~
z8oM8dH)-%`NVZHe&J|g5tCuDG{W3h$)%pPuN@3gt+5_11eeL*A-zgdmHm*0dj8Ewm
zoQG>%aaqTH6L7^#(fNdah7cSXX`xsfi7JKz-Rv0B9zH%(Ik6;B3NYnM*M@KC&<i^k
zI;XAYX^13HaHYhFW66X)iFIc%`^b^g!85b7&rjipp^dTx0Zd`Zp6e}*t_Ml^XGp2t
z5BV@CjAI6i{Vw_R->;8uljJ;5Ei>W!QKivmuK~S3G50jc|C!*>B#Sj7OKl<_4sTz&
zLv+L$ADsJKHoirJ0-GIsS2{jz9+Uv_Yt2Et4L1GA(Il8gyPJZXf;*E8ns8qDn^(s0
z6B>Nd7m&-{kF2FSvqrpwK!jW%;R3i7>UVcu{6KM<c&ckXdt7JLW449`(uad;ZUC-}
zM~F9@D>p)K=Qa2!pwMuP>b%3;Ho&ism-I4TTVY@$9`l#Nc4vAeD$mvKDpzRNeK<n&
zSAJI5={uqOIE$lV^->FKRDE!K0^BAE?W$M=Sz^a(E&sICm+;!^v$#@7as2~&K?ZnN
zbx!<Sy2pnp5Xi8cMD?-{37WdNm>xw_u#uf>!Dt3bvWxd$ZcCm=Kg)#99mn9&pfo#9
zbFVRg&0AcF{3pgMM<%~$yj6uMiOWJzBj;gqLYOm*^#paUBRVCrJ$~n_t*_>2k!$gR
zRZ#uS^z(XnG|UpR{ZP*Z%<hA60PUWAeE0coD#QeGxqx*v$F$e=7tfp69{}*C^!NhO
zVog1E%m5YtYVk5z)_=q^U92}5#&vno<6XP&o3fWS6|rAWMc~+2Ld?*bFGO?Itu9CW
zY9Wk#>a!J#(!oluIHStnMq)p6+V|++6lBNmdjn4Zn0mOO!pd*U`EL^MF0bmZIEcML
z%I}qtKI!X*11oHJH}E-LGOO~+X+xB{qc}tStfB>!4O1bA=E)+S2xnmjSRm$k!64~o
zvg1<uC4-QJWKvdkwb|)<XPE5hXw74&S?39Hw2$_Lw53ECWn@s?J%@F=7nN#^>I8!B
zIcEMIeku0)V`$6<gCZIa0bg>-*Xg*|f6hGjj?%+?(YMN9@^W1d`08`&3RLbTt8)*F
zd}q`sgNL`ufzn_bMp<q@wpuo<TQJ5vsEPMuE-)_q0a*^hHVGdjkjWx1NsAi<MSM}A
z5A+*7F|0ub-aVJ#zpXP~1w3=V5$^w{SFStUl+k<-nl|OpDTn>}=p45Mucanff3D|+
zd*+XN4(>D9HJmf(V4f3{JI#JswKj8%fp17%Y9GTZVb^EESra3Ka~1A|KkQQ_Mtu9x
zC|E*8UTT`wMmMZF5XgbIBCGhXpY*@Z>wR;cvm%jw=!50;TiE_PQ-XQ+J{{~KY?mWM
zqYvk6D11G_ogD8Bm0Tb5;r5jmvy2KP2>fnK)Qb4sZNA>v1G?1nP{RXbDD`!^OiB`!
z_dkEit2z&0mcskA`ES^hd}9PQZ$Wzm<}gkgNGAj?2L;stmtjDmeTFCq0dJDB`afqb
zmCwlNS33mom5xQ5yOGyFl&PyUSt8OizQhYRqp@F8*SVzi?JQ<ZRrzPL%)UjL8NM82
zkk@}|&Yn;UbB>nF!kd6s6neaw`u*FHT6YhDFDi`754+C#Ie^pvWdYWYvgfrBskOzK
z!ZW2m@Kf^|{P_SZL%_*rM%;J<^zBmgkGgMXv?%@NzoN?9vJD7%;RnAkOOaBG6IG>4
z5v?=SL;R0s8C}QH7}ZeFapN9ezS#`O&9$}sO6H^*zVwBb1l(|5QymqN+>haz5pgZi
zo6>AlXcZo@e}On1Y;pY@D;Cqqk^3vi?katrrN8UW&cMu1T~E$!7LyXqSC66br|e7U
z$#~KvFDO`Q>+8Z*Y9+8{5l{_fh=cqmM8ImheMUIocuZSAX9s65bOWp4%SjjwP>sK6
zk9YKbq$9pZWnIEC+iHfrD(8Iix)dZs6h8;Dq&(-H`Ndg_12@W^jfG$j`!o64Uk%H*
z?-Ob^>|w{@qX1#vR-KX!?{ByZ<Aai>rwl*TlrAI=R_u4_gYJknqbaPrWhgPLyOjnp
zQXon;q}05cip$F~O#oXHMKr>oR_LGmIOcDNU$YNC;o{3RD9ubQC#C@6?es)|2IbDn
z{+k&45wFqY`SZPHzVnn!jSnu_!Z6s6yuo-V0DoAuo_<gvL^-hwl>ai1`O5GE&^ha1
zv4!{>L~$q9x$d3e1_*kiQ;5X;ym>UXzxfB$7${;d@=V>v!x?G|<%)4kO!xrwcxr}W
zJhZ{<Id;$M!VBdHs@P3SuK?A;-HGF_E`7xaB|7b!_`P4ZeOY>F&c!v}+O@myX~o$l
zhIO>wVk_r?>v-WxiR6Z%*Za8+wHX3j$aOTXv#Ry<Pxh;!WH2|kqp>eCoy+FZDEy-(
z`HzLL=@w)c(i#!0>zqiLc|b06niwm9^yF`uO05$TYiuC1UHN<gktx&IN`vB>a!T@x
z5*UqG{BJfy<X`<D$a(zR1fP>lz7W`~$5q6<HRb^tX^mD+O)^Ja;avL?2}~@RtYFjm
zQnY{H$ffB@po&Zq{Wdx-%H5Wv7XTq>^g&#K>PH3tUG~1TxeX_f8Rj_<BAyo97o#aG
z)A9;(*sOB}=5)WrGK7jlTNbn@|91LTGEyS#WiTD}@6gPQ_|qV7BL7wo&!lks)1|dI
zOktgthb-<U0EUEKDunrV4TM*jrwkHcLmutn6I7kV#WZWV?NC=BFU*<^=$fK$_&txB
zac6X{tZ_@`29Bx_hfxjHXVW8U#9opF)?b6Xt}_y-tbh0U$h)P7fB*H?|LrmmQ~`Mj
zUim_RoK`gt9&R1IhyOh+%AS2W+VHLgV%7ZU5Whp9iO!1zP&7ne_2^t~2rOHQA@fR-
zWrvUYf{85ce|DTD48>=%k>AoSzhVWp2{|<sV>KB!6?39x72&|OJHKyVT;6>AW2lg!
zh854j%Zc9$nW(X)s`;#_5>y7e+~`rc1I=w**=GOrN~Hnvgtje8a69p)6PJjDUM_<)
z$oYN-!=aBFbN`eVZ@jPIu+5TPdwYRFLgK3GYRr(k>(TGu$Xs$!d!|q_5VxE%+~`v3
zO#p7J8>f@+Iq=07(O$JLVSHG>gw3>qP*z|AG0oN`{B+8)dEXgX^0Xo|XIB3Wy-DO7
zxhx>(+)Ro-&6KoW{TiYYT5c22<$#acsChI@*hx7dEIJUDYfJ%9de36N2SDUwG?{{5
zL~dfK6=9^(6$(`Es#8OFf%(zS2$9tKLk7%0;G5{>*z)B#>}oCs!8d&|*bkSHRvVwM
z1gJhGDnu@&YRlep9?jwz1j@cZZs)C3?o+hX)bLdr_RcWiBuFp^ja&n1`1;V!F++&S
zM31+kP&pwRc%F-otmpcG<}Xh{d(yX;!HO%GeTppGLs=?dzK1gzUQ=C-%VXKqVz+Zk
zk_do!Nj}^n{7z!iJ@viPo#1=1O2<~`In9SC*QG446!fChS1OP<lfpu#ke6uSRtwky
z@)L5}4j@Mt&_8`~5woicnueoTK*7Msa{~M(M0V=?%m7*Sf7~-|IZIv>8VPymyF@$h
z!({VS(>d%Mf9L5UC;_+^WR(JUIJRi~B^J02)JiE|d!kDE9%JEX1(HwoF(rJe$`5!Y
zK~unb=AdEqW$c_U3p|^M#J#7IkcZBHvWzW`_a}W#4wKbvI-#72Wda6zGgdNXb90qu
z&j>k@>UVnROrAhl@W>QZ({vPes!zp=<}Ohx-d_gWOB`tXhvkvYdTYShf*dOSjJf_M
zcmLP?V(z509&`Bc$ndAX<FQI8$OY%gGXVIvyB`}pcKR9m?>_yFA#WBWJ-37mlw<1e
zr;5t6=I|WePLFLaw4I;oT6WRW54O}8)ng^m%XEb;?vzkVbG|U=0_SjBQR9zUi5vAw
zAKan@JOiO3u-t~nXsG^awYKaWb`t9t-`|z?hr^wZ`<JUF`X`|-Ph~+X^%SzQx_*Du
zOok4~U_&kxYQL1$Bve^1^w#k*)B`?IG}NZ3*bQdm+I|r1#37FIa!fd2Lb|t1N=!_=
z^*ddXY4a~!(xq9dt2gU#_I9wfl^yN=7!Q!(99|~J3m-`?RCaK1`rLl#LBOlB`{Dfg
zeuY3a=N;x}Jw*tM+z&GKq2TM^gtC_jK)*C>l8iEKn3|5%*}wS?7kz6Z$BNYE;1$Zf
zk>@-gwjVs9teO|U;;o(Eqc`cYhh_)S-8?E`S}0FN*~<OAqCP-;=ilXub2%8B7PX3l
zgWT`6TlvXczB-Hc02%V?BR#Ty^$8Bmr`969wI8LgtuE-^E0}Lxg);}yQz0JlqeCIy
za{FEWX>;@lnHU>C-SuLhC-I*}K;$&pMAT1wnY&r%`4*RjnQ+8Cz{q1}T7-UMWy-1n
zm@s_fnJ(n~cs663W^*zJB2@_ZNL0J7+uQxG>tnLZaz!z4x~nx@2`9H9SdCVHd%$<_
znL;&a3{YswqOYNGepC5_`I@<rSYbY1YZ8=StZPVx8v@?OaF~(4ozk8%!Rm(GXyj9d
zq%u;Qy0Q=;*LOh$Fd6ZVfjVHoeT#nk`Ff*%T(kxEcnX}0gX2p2Zgx<L9(dM>TZ-PU
z&_zppe?7`jMQM1mfk-5gaT-mb3l_Se`1Qvmij0)}Gk>Dz=x!>YfRSpOh(LC4);VP(
zvn&SUX?}zND#5b*6}gOm)^<G?)Z9Lh!__?p!Q({PW4|ndbYWpC9e6jJgrOI8E7U@4
zrc0TbnZamJPyOx^o#BQxMn?O)rdZ^_&dFzXX66L~5YeA*)7u}@=Ay<t799<O6rp8|
z5al;5G(q7E0%Z+okt(CGbalMZ0<%0|LU?1`$Fo$rT|_Q<s>^a)9grvZglX2Gql~|U
z{ds0=>MlTHFD=iJ$Nae+0`VoYG1%Yp7=_tao1__Nz%XCa3EO@3aVDex+dlm1U;&A-
zDC^eHN8tB(G^X^W9&AADYgpj+W>^_5meEBpldgdH+rzI26KiP@kWfQPY$xjhF^4oT
zGBBWoAT=jGt6-8=kINF{l$Fl*7Zao$5Wlpv_!WKn#o7@(tWLYwkkWi|CvWG&pbO9M
zHhMP@NC|k)Y8u5e$M0c#jO5Jol&P|B{w1wk67GL&9VX714PP-?q>$-SY5(v?^7DDj
zy<sB1)Q_}%JF#oA539n}=Be~^4GJ@mr(3S&TGPS5wunn!#=7NoeZsQTcO!<-Nq~M_
zOOo7<%wnU03hhB@K4Q#naR1lICoa!0;{ARO?qm*6)zSL#7G=Tfo3X0a>e#M*kQg+z
z6|j9paa6Lt{mtQq9aqjO00d!d7JI`sve5faZq9u+#Yz7o!crJcHkoUz_Vi5l%pmAz
z!Zdd4!>Asp)af*jFwhV&Oxm%)G5J?XWXDpek-nVF1EVgq)F%OKyUb3kIp{iYa9M^^
z$&)dWu|fCUJXgNVXTMZ53(@@#+wAxU`fd;xN`QXeht&OgdIBY478IVwiNT*&HH%}f
z1Pe}=gMqrR>4NQ+0}mOyj@a$T+e728-OY5VA0D4#`M*Qr$y`N=kIwzP4mp<W^F&TJ
zyF}VuhZFY0?@x#8MLB?rlfAq@a!p6!Ns-g!yk;h?bpF!gf(8;0p}3tv9h1mU<EoQa
z?IZ0Di8(wW<MCLq?(TuN9v5x1)rK{1=Cp0R*|~efUc-}cTg2Y6nTdFAYiMde93E1j
z`uMa(ukb3Er=KTFUZY%jECa(D&7U_(5FIZ9W0adF$jsOBn)4rC4oC*!%F70AW<zyd
zU!DeRX^ldv@wc2rsE<94u4;eEBcNBIJ9z^3dg<83Qj;~mWls?{@d<UZE-#y?kquGN
zdqhvD&C;O*fVRBfLnP;Ch#{mG-ACVs);xakWZSwS;ZjMmJZ^jMF8m6RVPcb%G&|wC
zH=>^zQp-%B&*!&ge=sX`AR^#h`uXKuaB#$9h6b;iGz{G9jd;Q{N!q-0q9raBn{;!r
zwz8sszF70*3ahs<_ee32w)=)Wx?3#lZKr%G+oS6eB(oXvX!-O#*RnuGJBm>us(iU3
z@^QTK%S0b%VdHw8{oH^OnNx``{^xMvz+n0AM?|)`))~%ce5qQTUiQ6rGVv@^giEPe
zyIBo^x4m2-|Eauzq9WQud%bbFdCaHHAb5xiJ9NMNldTywpEGkIb;xnXce1VGSp3Bd
z0BSNfey%}N7~vC!MB-b%a0hy=cOno~zUS0b4C`F00<ZP!QH9^Jqgzq$zIbDkCb7|9
z8CsD);|C{q`fJK*Yx54c?otTGZC<Ukdv10h94<n5#WA>9@N#C)Agin1pi3_B5nMLI
z6bpHLtmOKA{xe18AVoIFj&x<<=X&0XeA}L6mIS3tDI$zS*!yUfE3>Jo85)M^nx~Q8
zP%4Q~v_d3&54@;Q<(8s1BOKPS^3P8%wv9U!X>QhoW_qe3(eaZ|P+c0anU&!hIowrI
z8@{Jon@qTtevFe86P$gvoG$x_rub$=Mw%CT<zZP?2Ay+L$MPp#$H}zfpoWiu=_>fT
zwV^m$mXn+P4CC-}H4>rcy9*MHD0ng4^2s6BqU#?U>dXK&n(Gtr<d}UyC(QC43}A~j
z*U4?2gbEX>F-BwWXXt)jtr?b1UOHk($BsFkO~0zy*Kx(1TLleYz7|9XCK>qbff-5l
z=@9r86oOrf-^dNGGjHq9!TQard$iXa`qc^nPmp=o6Qb(ma#(AtJ3jkl`qFMwv#q0{
zbKmMV$CMC=BKNhwUMsHqO^4Sz9!QbD@a39k;n1-CKK0{E_%>SPtC_FiC~Y1q4QirA
zo^il=43;;@ySxvmfcRmy$Lsc#P7$)C&$)cox`7XWoemcr;P#i4g~&l_?~fsSnW-8o
zDc$kSG_Kp83l;8*BFmPU(pxMSw;bqY-}vV-4bZmMC~^SL;9Vu(-lv!zKp4}Kqh8b`
z9MPl{@%tUkme<yDm!*0^2g8w{lRHN|h4+AQ$i_TRQqR>GfSV}Ztec<r$2Vk?T(Njm
zIgbdF!F*>FAz3w%EU}%J1F>VW_NQ{kkdwTqNQQfp0R&Z7{grjoiGaM*7cGEib(j6w
z%7ABYKUUcrstKixBA*FPZvq+cyRJGQ5q<pT?FzHb*9B8(YVz(H-Ny|>{`+Y$jbF5(
z&UZBWRx`+qV@La6oXl_eRgFp@@yn|WZi_GHK=>L9wrmPG7MH3Eia?{jVQ1M<*Vek1
z^+FgHLSE<@61z+XJ~6}I;OfgQ|H$>^T>nxy+CPjw36T6*Ff=@Z!;T1)xqq0?$e68b
zPgXl#Y-C2K9XKc0A?s-0Fl!KTDqMgO?)80$`+5dG94pxtOQFs8+0Qm+!{YfAOP6ge
z@X3qbG^GU|bg3k@&C)_5{wYRK{jcd$S?`aIy9|vq6);i1%8}lzwcoYUb$fCrPx8<f
zN*BV{t<aXrASQc$#henS6r|})ip+RKG21B^Ish(y`;}bHE(;Gw)Ne6eWmxv=@nxYv
z)Sb;iKJ9ftkZtHzKL-8!btT|FRSL0+u*V;rYxTM6s1cDLr(za~D0OSjbpNf?J5W~C
zuqRbxlspTuh|gZKnz2=2c9E-&#B{i&wZx~ZfJ6X!02(jVFpOyLm1c}{+8|I)j<FqQ
z1X#~5Dmo(Ca^<M{T43ydXgbTVCg1=4(;?j;-6<`M9NmqS(%m7TAjs(M2I)qTmihpr
zTN)*lZb8NfHyGP*-~Vy^AMeSI-MjDmy5868e4QQAPh?teAw*GJ={!nmAJ#^$#_0S0
z{)ZZ*?v!W)w|$SoZCqa<KkL8v75C&V{i~RI?UIa;fkj7K|N1xjV7&2T#vevj8vQk|
zx7%L?zR24xl$uH%=f5H9I;oWZ<FYF=X5Il31TAm%7<29n<rs`e<C0e*KPf)NWczG&
z5i+He2T(1Q0s9t~09n$B_lW*yoo@o8)F2qPFCIY;jrGfqWs7uO=nwYQY0#rV(vUS`
zuOCgM(8q(jpSFS<Jsvr~#c{_OJ>$#H*m|@(zhUoBew&0A$Y;~25m=A2PJ^DH_<iL1
zB)9&uXTG~TZ+7hRuQ<b)X;N02jJH3joJr!{fljBMArDwld<at%GGNm2N{0;3lNSuT
z+Mi^};JccUK07`tl}5?I)&TUaKP4{C_d;uHYuVTJbn53zHv)v|@}{mbTEOw(c)OSH
z>>Uyj=zus!=Si*Y53|Qam&cUyIN(9<#g-p<fc!Fa{`C>swx0v~)a6s%(tG@TgY5Ym
z40j#vCKz^9#R*#7B9MR*z!Gwc_xle0*`@!f!K-CJ3eMGeb~H=q`HWNTKVpM0OdbIG
z?R6k`GKZ_5STp>$3<>%OZ^;1B0aum&t33Xeo5H$BG`GP2FAJ&Z+?#;>nFmq}Sa(9b
z-(3fOKLrJBh%n{4T?_8NVSBszQphUp*K4Wl5cC>#VCl3!8LAm-YHC97QpKI2cz|xz
zJ#@hqd*+cNik<4BPL$Gmrmv-y`8=t&o$)195rr5NnmbKSOIN`zUG?7~LbP((ybSTD
zl%>l_Di10GV#X$OpSMW=%3S{X=4T<_*`X?Bz7itmp57$j)x)V%M%u?em)#v1=WC3n
zznE<aIXme|9L)8ICs^#;(%Kn`%KBi2ItEbm6iv*1N`g?9gI2hm^R8xgt4Uh|MFJXN
zuN6ESF0=lyH%d=7LTeJx`RCLrJq=sIN|QO5`ph90iwi^nHPqF=;Z`xfP9ogyf#KL;
zMdVOYDI^glZR?d_CG^it>Oy97VjDQK-*YL~aDpTw*}@1{tb2YYlrs=Ed!UazD5McD
zYv26y<#3w?Pg!Ng%9kj-om-lm7*M#pyx7*fQ}N4Qj9nLvVAmIrX{kpat1V?HJXp%+
zOH@6W!38UA(GIi;L;8YY(|N88qt|axSk@5EdU{eBit{lFuUGWo%0xC2%hVq(&LLtF
zLQcf8l<n>9Pg(Z~8!Xx6yv=ZQYbjjl)q}UY$&dTDyKGA3N48*ue&1C1w?o6?MURUE
z;{M`?g|UVT^}oBXikT3E0feHUkLr`PSLng}>}i0rp*K~60s1`oC4Gw<B#+OoyVca_
zw8a&4xJo|5t0>Nhx<FrQz49ZLW6<?}EzJ*P*t;u=tp;Pxz|HPR@{p+!Ylw(;Cwng8
z3sef-i)91x;j=s6?fzQNUp)bG5gPc(>`HB79XRBa<s&c#Y_9aDPc_BXp^e-i+zJML
zl}MNi!YRIO2WqH-CQYY)DopG&7*iFQjih!$(BP*YgWAZFTdyW0W3X2X!DHw=hzI{y
zT`fY2O~2f!jt^#aj6@}{=3FOe0fG<klfdT4ByDX)R$0F)qx!-R_})`yBp?%&><ngr
zv2lc<j?U+#FX`Zbg9&4i0ffnqp{SVsYcVh4?mpCY44AWzg<=bA2iyo}E%ZDquf9Qj
zc(5z#cGyiR4JW<H%z&vQpw6c!yasbjq+m=8PoK{nT78VUU~Nkxu)p6eYl7^^z9t+B
zME$y9K%Y0%1VP2LW03<wS1^E%7+l-@C8E&fFbb%rnPBnUO`1xWYN}g40zPk*vY>zp
z=aKC(5}8#8q(aAZf3q}$ymlwQ{CIB8QoNKP`yvXi`bOGMwe<5*IkG$KXES0*Roo$K
znp-d;l+Xb2tZ<Z6L8$nl8@ki(LZk?y9{T?-085J}*3DYo+s^KKmw$hDMCKRX;RPP>
zFhpheJda2<2z&gk=Y7vgQpR1a9O=AvJvofbqspjfRdn8Sl8_6&5bEd^il|~kRzKV(
zjeC<5vlU_B%y9Z17r4iQa76he@vvXUEZt`*{rce$hb>E4d+@sAG;OI&l8J!pPOYSi
z0<c?HSjczTG&k4u`clL>D;!2+P3Znci+sCXoH3Nwpd@$cW~!{s8*GJG1<Fz?oMNbk
zT}XZTrv-q9KQPo!0uvtUtRyZEIjy}wB@BT(PygyraMTkpb%`e=>gT8Ye2rmo5!BSc
zVy7US^M%N8lHKwD{wpvb6Nc-x?q^ZqW3s&%ApEmnLhDC<qaQ6>M$^iBS_nod-v+dH
zlWbrVXxV>HcS+Lnznu+vAsW;sEml_k2Bg$Ngw3MJnS}AdH$v=L2#ZO-W%XmC+WNXj
zs>Qk*#r*>hX>Ef?PTeiWivGSQDj8w?`8}JyF}<+I(hKC%Bf53evDNr92sn~1ci+>~
zy%YK$#S9(ZkE1HfQ`^Eq(A_yIdDwzSW3nnljKZW+)zI~3FOP0dbfyF6jR!fw_4}(O
zg*xNviMvgpd40u;2x6%oQ`Eu$VH{RfWUt?Lzl^BEub$G)X}W222HuqWhiF8t<H8}?
zi1vT2v`OVgar{xNNp}9wc%|<=?`^EocjK?GzFvv!1D}HO|G7zshSBYCR$x(E!EYkl
z9<M-bmxguy)fX@mG0qG)Wb#Ws(#gq+tU>O4rv-#|zQ`9uZG<m%A;hYo7k9T&c0StR
z=j^D|IpQ4&)PsdAUY|>5a^sggP{_7x1K3E!%{uT~*NOJGNNy%G&j#b1iHHmQ(oiT{
zC)MKLMk1gb${(O7WUzl+f$LBhW{E^&1=sp$zx!NNtSY{zCyBVhU-+MY4+A#;y-R_w
zlq1J51G2PhP)oVNf6DFs#SBYf40@7!Y>kqob!(Zw1wd01@+yqVMS_&+Ddj2@{IPfc
zk8P<(Y?ySEgW5F9#dKec2#ry44Qj~8yb2N8*1|kM*A>@wmUZsV${l1Hew$e(l@JG{
zlXu{#SL4uXjxTE6)z{Wj^e5>0^h#Fgf09DJ!~dr4M!_VsToQWBkVJpUw@>_hmwfSq
zv`BpPOD}W$R^s|(W-LO&fNgZfhodg|kNNV!1m2Y?0N#E@$m`87AV6tbbXod-=f(J>
zp*Z331?gOkPRQOkT`~!_b1^j$3R?^t$Ih^VK)KK!hJ3urBgYfjv$Goe^x@Apub*Z<
z>#f4AF0(%bf>uK_08P5yU(5@WV(K)_UGq_myybJJVf#rH_}H7pwZ#a~gNH-t2MyW5
z)mmnTk<~kQ$<&RRT}pL$mYi=Ew16NEKkh9pn`$ng23s0om?z5AnyZ<W6s7usOJ_eb
zIyp}scEnE4DCOO>868g!6adV&pp_Pxfr~jsSx2ao97ET#kbS~8@Ba#^Oo&FvU}pFa
z105Vz8G*J7j;YUE-gI|SwkIi4>r!gVGJ1lZ{_L0xK0N#ppKIPT5j(6HfAte=#4jz5
zS!o}X<CT*7adn^dG*4pmY4l*C_F7UQnj5DG^Wk?l&6en6Rj7mz|KDJ)MB>VTtDDrJ
z_${El_Q+3qLP^Mrrr-G>eT0&SPim_g3i!g(sHnI&S&@b!xBi8J&$x+b>Q56a#|VvQ
zq#|pOz~vflAx?$w<>^3yP&hgm@kiRb!4s_!M<2s$!lNalu7$j%kZ3j5dQy=KZ91;K
zM~wUPd~h2hKWaDTmXPpjQ0}WYB+sHEyi$gQF9we!dAy0-w?aSQrX8TdTPn$hDUmrO
z`HczM|8M(|durlm{Ppbm^I_$ic0-oA*<EyyFR}{K<nFnLkC6p-UVD|_6@M+kiDb8X
zfegF9aJZ*lroK7(USMUEjVo<Ui!b&g1#Hp6xfi0<PANs!K~qBK+Jp~;6-;+?k&F;x
z+tUubi(-Yb>G7nGEmXzpCOM$z`Cs6yDmf+SEJh<77yEfE=sQVvh?QkBy7!F1<CXr?
z4w^ujM$p^KZlZqpY<+h9US?+8*}=C?&=HDee(2VUSZNQ7I$o=N#SrmyBppXA#*o$j
zlj$RKO+Pg=k1sm7IhB69CtVD$6bZ5nYpbvMDd#vA%)hgMs&xEY(ju6(?Yf~4Co1>`
zu{f{`QubFieC^qnfvu(%{gp#N+QG`xODI&9K=&+`M$KNs89`-;=y1o+zozV?VCV>$
z1j-w@_Anw9TxgDz=Mr1cFk$09KBXKvzxSLT<bOm99G!k|+4aWzg31##$8()8HmmE=
zGMx&OcU?^CAAUH0=_O#Li9Ps%za>NCjQi^tnS5p1sintKRqq9Rc*sxAD&W(FL@q-%
zLq6ywvWNn;F5`8V!EI(4J@8rQ8TEc^tYTi+8y!Whdh!l^fZTKZ$JotoKi1L9ms&pW
z%*|KP+;JhY0E}>9G`Q((SAIo;u(lsEI+QuN=n!L5Pd@|omwo>PBCRkWGqGjrS3>LO
z2hvfP%*%8tC|y908q)jbSKz{Lez($K9=yEHr;cZ{Abc{G)V$rj>BTGrdV{D%S4u=c
zRzNy>qAQ0frF^QUV)_o^MZfgS7Ve-@!XbQzdk1zLpGhWR{E5F=VXN5iG3>TNTzx8#
zcGJnQLV;F{ih-cNOe3wM`fuOO-=KH5nUuC(KbuK~Z2Fow7+L#m$bhLay<F-I6h0jK
zHBXI9S#K~`ML<*{TK*F72Ap1WHCmiX6amUjR7{~c?C+r5T~pw^b}KSsZN@A&(AK~=
zq!u?Y{2Gofbb9kL9pUC&^B9lT)7>7Tlccm&!^hYD+?s(Gm7Ybzl^)`w`10mAAoQD4
z?Yx}$=Op?jWm{j?bAdj4VF@$E-Q3M&?!8NXg4k1RRuyr_L!RHa7!eD#oUoE9#xmHX
z)s`w#3xVhlzo_JFZVjqx0=NEqW$@0m>uL|}=X$y+H=H@zqZsq+966Ew1J12+Ms2v2
zCT(DH$>4kpH;;cIcflq%GJ*g<&j05U(?TzV|IVMyZLtEAP^2HivB@}R^BZaS98%D8
zN-ufEM~MKTe*fF;PBqIe7WG+!Ph#L~p~&+BpPs|fXDN&3%wTe!26j2_S4r$CI(gqv
zA8s>ZXU<ySNR|3;SAWC)8suO)D>L3U*>niE;yjW_dz4(tU9>hAQe0R(!{zicY_q2H
zskP8Y1-)Ly&nXR@@3s7#RufW(A?3Hp^otNYgDI)^E|cU~{TWtjQ$jx(F!lojbELVz
zkxOma)$xMhq(Jp&bT&=npFHIy-{Ik$?2p+S5Tep?UfOPp)OHeyzShmJ7`Vh>fr|!(
z3SRGUpJaLJVVf2DXr~<h!JD|$#V%@KV&?1&s`<aaS_Rq+JmbeN-eB1sd~(GfbYYa9
zx&Nkc$_6@_FAY)RVBn3gA4?f&Yj3nbC8M2+v}}!0V3sF|H>FVN@E$bLxT0bG=)~_a
zgfh|UKNm!09T}SbMTO-C5Zwyhl8t1W251qzYO=9X@Aod@@q_R}ra~mGwEF@6d(ql8
zua8=|*h7?P?WVXOZUiH80&^9-kqV-Jd;e`mH=5Sx6BxzrL~JoP(m6JYu8cXvFAqgw
zAJpp=jf4=5zro`jtZo&ZB7xg|@OUfsJhuzVixm=RciQ)-S(imI9H8MHuqxy_Rtnk<
zC0sBpiA}aU8$ZjBI?^pLdv`HrTwUQdRDl^Ff?x~-tq!B?7MC<XXu&4RrSV$H;uyYh
z8&(>rhg#WBrbq9hch%<iGqWOeBAC|uFX^VP<1`}697biRRL=G^M^a8<4Z6tnH(y{y
zZYVPqW6b#Xur&)_8_*NMnWTpnQjbWylCe{a`C9`*U33N~o6zUKRgjfOXl9rkp<PSA
zb*jrK)R?CVgIx5u7un~P6Hf+~jkA<-4EZZ_!tKAI$`x_0D(MHgaT|eM%ke6r`fvNQ
z*@O-Z9=3Ln`6}2>M4@OXhF{tmgk8Xb*{(Ic1Rl=-m}g+1%`;&N2*&&@4(fd^>#J(?
zCc7*f;wTvsFs@&%L8HaFY?N#;v`%=yI@}#7;OZJD-~CI9=kj)CVV#y3=T+{UKmn)w
z;F=&x3sIa=LqzV7aCBw2plEvA;#OwHh-><j7|e4mE2)#n3eubWVvFz=+JH{td6-oQ
z1flCmsSQ379i?!nNu1no`RNYqju25=A@{}p<Vlp&>4kpnsf6xiBKQp}b^J(CFv}+E
z__vE_ec62WH8GPYn=RwE!G{D?6gs2w8i6L{N$1LeEtH-Vy#%@{^4t2Mq7;SR8tK6R
z#vMNu{C$Yg7LpLl81^O24(p{{)wBvgOyZIsCAR+Q94*+;HWFnQE+zS1K1tfAFv`kE
z^`{q7MU>M3GNBn0AH6yTO>U&um?x(0;@9YiqpK~ramNk|rsGm4cFG_v-~Cd`d9-Z)
zvP7t|ycPYl+@1haUG`Jo@>@h+J0wt%Mn>~#+cQ60ZGZi=!XWwhWy1v>|6OonXjS1d
zEky$b==r_w2u2J{Muo~A5v6c{^{>8Aaq@N;@5wnK!pUR&^pggyy+lww678@oFAO-~
zt*Niw=Q0>#ieY%`RuVALr8HzP_KON`F_|G<saZp?X^#w%UXd9BsjJtXD6ZD~p?_s;
z;~Mh2v-LKUZFs8H-$CUVyotehZjZxR`mAmcDnblk^U7^&2n8LRFqR%=ZGP=@w0jm9
zbX9nLz^Yx4j?sz%%zi6yUr3DWyv2DjF4YnaYjqH(Dmco3iDj;&f?rKnXUMnTP_1T!
zOBdWZg~w5mg+{=xACqYdnbqMe@kJ`cldO&qRgh5($kq7=XF33@G$v849T$kiLEACQ
z-$E-wF6elW2?!DEo*t|_owALDrBA6e1cnMvK^kOp7*(ysQeNkinyw>W>l_%<MYU29
zU7$#<+F35;jk?46|Nd@fl^2No(3~!d*gU&djknHAH86v=<YIHR>v9%%Y4Y!>+?|p<
zJzbI2l)gQ0gfQ4sL+C`TtkEOP%*%P(&%uxkhC=m)eZ%1p`4W%Nr^G+C9oYW#sbIXB
z@+wV^+s9~{cmCUf{|4mh3_f<yU+s=C_I<p#Y&@~^SLVnYzhAG&!5`NTz58Z@m49K6
zuUkvy=v1wa6uR&;D19A{E?uR5U57se2Hs}iuRPh_%9v93<Hxk`k}E+piY)!X+o)wE
zpL%U3JvG2>-@eh|oWH)bSP9<2OD-tKb~3!RF>kCh0<$ZJYFsm*E3^Cw@YoqXTz>n>
zjo#*Qx}u-yc`FxTcjq)K|6m8saNeb_@vI?BLBi@?ASFF_KNxE=X*&mhcq^6!xQb*V
zit-zX&_fBefF!!qLl6R-$7bSc{xmaZaojVrFqtU-Z~&qELEg%DWe+K}IF4fkbB7Pz
z%Lmov$Tz86D}0B>nc>zHJ-VZZMjHVwgAblBQL2dGGZY%C9mQG15h}#h#E4v@>60!e
zw=M<wnvE#O%rBSy3&A6%r%$-YTmIRF!gNoud~*6>Yrh>%Jd&kkOR|RY_FIRF)LM!o
z9N{Yh*X4zO4$JpoUrdp6U#!N{U3TL!G2$CO+-11eBcArJTF|0aasKw4tFPVL0(}SR
za_^Uqr{~bT--IG;7q~1Yu|Aw|UsPFO`&yVk?;HH*J@DfgFY2Gina%s1xJ%`>a>;G0
zI>S-D5eLW@`cf%>6?P$tbcNy=Kb-i~lHZ|JU00R^6EdOlV?NG2dWD(kQ9<FU6}E%8
zchIx?6MMK2Vc=l~!@JjD&f6~=b_FE=eXvyAv{4hT8bw!4ofsImejke~Axv%>N!w<E
zJ1v9))bQfvJHQX0y<x3;q3v<Wc;Z<8vYIwnfD~GhrpP>jlK2Zhkph&R6Nv2x#6}wR
z@~OPe+&CxH`tG!xgL+XQpoXgJ4+QvZV!Y*T=6_D0W<*-(k3CdcKRRNpe(DBRoN2<d
z?=+*~!g{O_q}k9K&T`9r!SCI$Wx08{yv$3&uPAOA0gu5y5Y=B=6%y*s#<L0Ip<xdb
z`|`Jx^6XFoCiBK;B=%bFU4AP{7qi=ayX3TVnG|FF@I5*Nr>N;SZj!=`W^e6`)GFlz
z&K9T)(UCmQZ{ZE(VEj)xfmAlyHJJ*PXMnTpEEx5DkW7s(alXC1Y)CM&O@4Oki-jQo
z6#XxxwK9Tm9g{694T2t?EmUp~WNb$tvEl0GzZlmn*Baj)smG8)MiAfHA6yCKW&d31
zND!jp(BknmLUPE*lrOxz<|G)7o<HrBjd0yP9?mvhPSSech^E&W)o^=Vgzmpt@|1>0
z<6)T~mn^aDP(rro%yKQ})!C0~M#aU?2fV)AtTNYV9l2|+0t#^>mnK!X{`jk7fo7ph
z=8Yl_!*+`u3h?_eW+-!{n3~JwT7v%4CrTgTY~)}*X^1q_crJHdXUyLTG|4M3pc`^s
zfWsQnekrY|d~6VCU6>-xSz6hvxHr~xFr-xa9B(I@1Sxv^52E{)_bb5{gQpbxTz^Zx
z4V?6N$moAxYO<(rUWt0;9er7aW~7z$|N7Tn(-W%+e1`h|N!n@Un*m~C0+X2kJPS-&
z8@qOhW{`o0l@yMomMU~HwTt4j<}gu&)9vb3wOb1y!mB+b;&v$kO2KBbByJ9jfW){8
z=jhmOzt==%q1PIIH)!s?;n0<|g=K+pJ%)IIXsCMiQaEBr+he0YPKd1bzJ5^bTWl$H
z*1h5Wa16ahFmjxQB6h$Yt6iBF>mCCLWf*!OQoG+&KxFH8tnz{Wn+38BiM|Y0y*K=i
zc046kyFqK5LaF*f19?at_?jc~e{&ddn6s0h!&4v|wl4gpen8^uTqGOuUdcTWZ3T7)
zS^c2Hg%zsT8!H;hzoNvoIsGHEGvtRD$UMrRb4^pPRE;ckCs@aZ3lgnCh!W9Sk_9p^
zlrvt(>*VclqNCsBh9lPj9UTn~mI5#1rM;3jG(SI2KxIj%>2w^40D&R^^i3x3tH^4F
zJPB8*N3eoW34eQukYpos_7LvJBmut}@LNk8Bp1HQCO7J4@Da0gk6hAZf3b)j#+QKN
zNqZjl-@z`k&}@qDawk8>s$?QzLgkp{)52pE^La7~D%h-r<pX_fYrMxG<;|B&M)t<|
z^?O>nI8pkZfgYSE^9hu70Q~4zT@;eMTQp)4MF_ax6W5-)nfYRxj8?72k09iKzbftQ
z$WkDYC~ouiVw7e3oS90%P|bFvdE*4yTa49Y`3^X8Mo%o;fI_gg{q|Ym9rPL&;}u(E
z(fd&p7GSKx3L>Z{?)MTw$!1((Qm7&M8AE<hBJB=W7EX*psDEs$rWa(#5yI+`lx{~%
zI>nR7w)X<-jQWDcmuKYu(!ZfkLZLNK`G%oS!7K14NBfih%FOIKQMF?X6}-b<12`uS
zB~U{513c*#HNsg%kR@^RWSbk8YHFyUFJ~GBO~3^z%@-We(pIfhkRrUhZ2~rqddojP
zcoZF#V@HA>xAghFRsF9V-ymJ9F5fQU(jDdI-Pi|L&am72!C4)GyWtj54H!+SP5J~L
zRpP2bM_;{|uPYke_k!0!ILO(S9;O(h*C;gq6W6R^H6xh$A-(29N^(jJea*a}umDA^
ziEx44JDC}01z2NfHOO}$22;C;c6N1V{>cv>je9zlF_dBdIc^Dd<A@qOvm{hvV>c`q
zB~2MtCf?j;^ULNrJbFho(3+Rwg9^W0(rlgm-2uD>%#1@-&d6Q4BKjGNbQ-us8JG~z
z=1{NM@)}0uFjjzQc`Q~|ESu4Voi9NZVu>O-D7sl05q9uMv_%j)FZ+k-Vn;cLFf`xs
z>Q|f7l@c%OnJE&DTYlL1<JUj@uEaLcc%QKqcmOKOZd_!rM*IXLX-=Ha_AC#}HE!qS
zR&?-*<ryM^x$%FhAvraF$9@dYBD~%r>cVfkGu-x^<Lf%5NWVu&(~u#auG|+SN-h2z
zRevZN=2`=G`9W*zs><J}B{2-xMHtTyn~fypqOxmemkfHoLP|YWW^zTa^7K?Rsx>x{
z)TFmXe{Mtu`N(jvlPyOiUw~<rw)qOBE^WG``HZX&P0AUU!AVp|?vFST6tSW@Aw3)y
zcGx4GIv2j1V92@>oKq;TR7*XRK#>mU5(V_KYDSE9seIW{K!pu$mQzPRfpWOtdWLif
zB?q!|OGPeBysswVyGz4a@(|TQ2(!ZK3SPAtM8Fs(u1mqtgbC&dD^AGTL6JP%MM@wb
z?wXE{E}=EIJG-~2+1N>l$OsV`7tLW%?Tf&0F5%8Rc<|VZ*7<YQ-s4Twrc;3kL4z#7
z3!Gv4XPyjdXa->VS|xou7BtUy8?cdN%^sn5t@_yjnKd>nGNuV7`_OaN@|Fhb?CNs9
zP5aCOx9W_BhVr${G+V|nSx?VB6Obpc@jq?{0bl>7W%5_aYj^~dDPUzd_79cR!)y_$
zvXE!o;-;iExe({{GV^JyA2&a?N&-dzDF%ciil9xg*d}9oh0Ddkm}i5SPhR+uBe)|E
zM<O^MRIKZMw&w}|IYuOd(9TQ>gP-5huyivq!v77tpY8Jg{k#==wR~ihzRdo;Y?c+H
zsH6C4?a<CeW%aGGF$bEgpU3fwf!&Q-iU&qQc2E&nZ|hiY$?S~=qu=2P!B1?H5?$q6
zJP}v<$d{~tU)SN}oU^0Lv7WzC)tU<2^r$Z$SkQZ2F-lwwV1Uug@!4GsI(ZMhHT=xg
zE`@^dwg&^+wrV|R2rnZI=NkHN-jf}nbYYX;Q9VQ={h~?G`aFAZ`DaaD`F7RQb!<c=
zRmw(q`y}HXm@px8R}^;+z+>p}_-6?XY+JdN(qwRh2;Itq&9Tak$hJtv#Au%E-o4Ae
zYU)@>1wNK^926ew)wswqeWori&9kXTs=Dtw_P%Gscj2T<;IMzP_utC@svL2vxsPvm
z{P`<L4Iuz`>etBY)_t^)gkIO_fA@S48CBNGLMA+F^ZU$Adi}gFCjl=dZz*SnA;Ks+
zzyTxw-7&^0qsI`nCs%nszx#0`RF8IWAIHQnooJlakreZMn|va=<mDd92=xY>gZS`R
z$6Ld3tH;S|H*_G}s$82C0iB+O4m!e<(Id7Tp0vU=jOzrKg7w)B{ZHl%PDT3R8Wh3b
z3yNVoF~DDaxJaW&e3?J#gWJ}4t~h8ckgDQggB!K;QJU_Kvn7+4<`Jvg>wRWKLktSt
zqF2A4d)ZWA_d$jz>|b3Jo?|r7?=Xh!0HbsjxbyL`bY4XbOW5Vx9V(T<uBt;J!|u)8
zF=XL>Vv^NCX#}z`OyK)sSnVaeAbiLZF2c`GibNN?U=MxXKSvFA`w70W{BUKK>_{kO
zr2VSN_@;4b-Dv61R4ji{ANo}7?%2}iD0!dFVV{&7nOuRzq5lEj%Kp8><KXX)sGX~l
zqQ}2skM9b&6Zzi1+ZhO~FOhPapDUF+T1sFQ!`E3oW);ODb(l8nGzmP|&^FKyWI;C?
z{W3LxTNRI^;3wr4_VHGVT@1sFb<aAQq0;_@&kVey{fBwqd4!A_2Hdc;fG}SuZlOYv
zp~AsIrI3u_;;CnI`OAw0`K6UW*IP1&tY*M)VZuAYklYo<mcWXlLY$TqRGPG1ff=Ko
z8<Kp|U6x<>gLfpMHxnw`u7ezGGz~SJU@6a#fAIgyUtboz@jkiq?cn*$7k;-o$wbeC
zlb~6Ze~Vl^-^hcoD!zi^=y#vBuT*6^!glEHHC?coZ&pFER()r+7qNbUZcL*gKUp2k
zhIqctHt(_C>o8|&5!Gb`ua~n}M!3T#E41MAi0~J|wW^R6B;sV?pV55?&RgN{hQsYv
z7!!t#n4z?7B>uwkD1_wSy9t6WP@lBj6T+}aJdV{r*3|@5cYlJ5GmK#qn^5X7D>*!h
zTmZMl8FC=>{EFJ{$QC&42zjwaf=aU*<3*W2jybKYHG}RT3*px=3bmfdB)M=LVJKY*
z$-xfYm7R@TFo^>=AUEY4^{K__TVjtT!fz1SN8I=Nk?8H86FVKXxJku{YBB}uSFET+
zs@`SfpL=DD49BOfj)lC7b^iKo2}KR$ueTm(m~1&B>kx^JS4<}tg?=?}wP_Ej{4IaF
zaQ-`t&!@s9yo;7T>=%Ues=?hpc0U23pyZLpau6>19A)mqELagSWhm=)?H8;8Bj2zL
zngJh5Oa<Irrx5VxP2_>6mI}ZvAd|@^N_D{>NazN0T-sN1C#_#X^uZ;o?&pd@C33W(
z9NbCN9BZsBpA5g^m37i&+xNQ5T6+Kksws|Alh?l7eMub_@Hm@H;pWk;X3$VMqqgrH
zQWN0&PCg`gF~kk-<8s0<*gkSSyns}%5X#G!6EVgf7-5?jg!A(+PgWNg`2O-D<^3C<
zF|v$>SCX9L%NlmkGTyK*jIuOO{N0_0mcPS!<~WydqZ^S^Zc4H`WCl)5i7iR%3(BW^
z!_T6rP4x72vpf#M4JOJ!6*-~PRHbpMQ|RnCP-a>3UI3md>YXdd7=lw9$4@Ya=gR@Q
zOn=Qp>9g`I8i0^b#pNAzCC0D=;J#>lc_<X_v9IO%;j>ar?($0OGl^$&%kfx~kK7w7
zhv;!()ngvNg)njh@MHvae3iYk)cTKP0V5JdRRDHAR2L@{>$jw#0*X9O6TGc@lkwLa
z6~!6-gaP^#c((=!T>vl$nvSO5zQkk^RlRVov1qY<7-{z4rWtvWAxr~V%?96-!NhqC
z`~nbO)XnBdt*=^{*54Aft;6vuABEsW)F88$YgymCe#{UR*NxI3B(CQX%&U9U(2SK3
zc$b?JVJu&Sh9nzk=w_b|7)i)N`fTo#bPKxEHGQl-xgt<N$}QqzX)>sh+!zyR@Z_aZ
zJ(Rj*9|@wl*QKm8le#<L1=h&xd?b!=99mH0%-Y+DrvfJ(+pwHcSX~iDe0RQam{{7I
zes9o6Rj=$06tt#D-(9STuHq<b{_h0VCNIQbSMJjNA=@<R<8DPg{6E}u-TH=!J4;!h
z<$bZUPB1Od)Fkkeefc8rX@?nLLxpK<MaWiC^*XUuI$WkZoB*|&hF-36XK3wy3n=?#
zqLbP{lb~jTq^)zMR1(`GnFjLJGf_S>TK$63!I~bED`_4#HrB#90xS5r(csDV`osm^
zF2$JE>y<7$ZgzIh4k8dKkScXM3&)9qBh`TMJdkw%DkWFwUfg5ie(tiKwnj5VYG%by
z-PXOo*xB(>3h$uBaKTnK#dqgV`4`mMo~ICVZmrI@i=FgKK<)DS&LQ=>=NnfxmKcv;
zqIoshekVMT;JYcWA-Wf|mt>Q;6bTH;CBxs3noUmp&wdky5zC}AGgY}$6SFN<`(wtC
zS;zbIOWB0OTPB1?YyiWO_>Xf-NV4Za?$F|wo7+e=vQ|nsx{+u}9#b)L*u7@Bk{M6J
z)l{AK<A9dImQTECOlWeox@_3Jb=jeC&Dg;S|Hw({KcW)F84FOC9CM79c}qS8HqLk_
zunVy<6MnmQ3yrpsJ;2%Uy!N|x$7$vR?UU0d_CunH4j1_;)hXiIg3zLwmhb=09pxj4
zsNSn-E4tRkU_JXUGNU~^uFW?zGkDmKayBj4T0C0FSEN<Lt)7x{%yl1w_>p)2$ddWq
z<fS_eC?WkaIFp``?@w>wasCF*6#E9OAMq(~Z@;Rlc&<sPHg&ht%1yFV-IxfN&ETmP
zBxUmg`GOcD_PnjNahT$yil~hy6)I91^V#3>$l6%hGI-zbcb^$Kw%&J{UGJ>ygtT>3
z_7e`1K}^wz6(TY<W6Z5~1$oeUSjs5vz38D7U;ohoL>#f~sf~WxadmpUq-rMFWL?w0
znBG^XtVYqg5`{NR{Gc>xoJP5IxCLg~x{q?26&v`je`<pM3T*qwrRtz5x?WJTRkMD$
z)OqXhC26X*z^;s+ct3O_yVl_XHLY0PKB5Nsgda0QxJ%CB{iUOV>5Gf#3SfUX=uVQU
z<W<d?KQ3yt&AVVB=+_sjr_hKdu?nujOsCtOb5;i(TTE`)bXE#$?+aBigrNU4HI?sq
zVPt1$T(m5N(?D69Ls1D#xTNAv4t_<*A3yLB<@nKJm?~^YtbRV*uRtmU>tZ&KI&ZZC
zC3L5-YtJG2rDnNV`s<qUIVSzgv0k}YbrZ%L35q(rH5=4_!B@0SAm72Wx+X8pbZ?F#
z5)6JC_CCBzah{~-93Sp3rpdHvK{#Q<nq4P8ExsFlW|V>uu}NaI3_aL$)?=kE@8k72
zU7np2+2xEoP<cGF0%5$vT-G^X)bIR!3#ZngNCjXzdp$@9up1r=+$$j8-?vyISR%Yz
zSoCaY`HD*H#&9~+!<j&i$3DWo_OMmB%b5HLhkv5&u6)2J?0ax`A^4cG)DdHYQu}W(
zAtn4sDsEUMS%j}a=6g>3ilBlmd#*ZduxIzuC&$+>%R8UMBdh$d6OFfCXmjymNGzrI
z%Wp;KwAQ>TiJF1Fb$|B$n80yIIt)WF#~4Jtqs3I2{*eqqnvyg7m6LbKkeNoMhXuD-
zXJ25nT~pjtoF<2`)x*zFa9leu#DNf?5O$~ccd0{DTzZ(Ns>^4Kn}l98Q$%8aJM_fn
z>9vo22poL8=_S$3AS3>X_i*BXF8kY0ei`jI^pE@uythLwZ^smDky24SZ5spv0%V7-
zm4w9lenSlKPYi}SGRsy-%<s{LiJ-$NuK??(DWSh$URacPvRQ>_xvoNi*4l_6CS*$p
zsoR#SIvB#95U+L}xTAh-s2?@OK8F4>fmFe`^;(7F%Si-Tuc*N_ZNx>+@gT;{uU^tZ
zagqVC#Fq|kV^9rmO2N29Qjx2P>s6-^eOHxK9jwZ`nVo&j2uuRDZ!qbAGARBc--oIR
zQz6t}iR%?iQM=uD-aAo)Om}v%u>^GFM<RNn4cfF8pS5d_W@A_>NTz^zKpYiIVRj5T
zn$l040qs)SR~sD`;;tS%Uvs%H3@~&d(Fx2EmRb@xCGWS7O&&HM46)Y6uSNU<d363o
zG{*rcP-vVdj18r50@hq8)6P)5ckjqur6x8}!s<z7kf^g?${ueY!^tGBJVzrzmt?Ml
zFDHF}82L8UjcofmO{DW%3O!B`hP`EPef?laoyZ-rcHQuF^Y+ggh}3|PZ<@dJas`UI
zI$U_rH29h#2y#iT3To7R>o7$k`hYq#HO$qc2eKzHWusUCHIA!y(p()#i?}Zwg-6ek
zr`2S$b`kKrcAL1kixVQ(-GZ=g-`~!y2KeOUgt_|u?fv6C)X&=lziZiVmP=lk)yn7z
z{L*S0W{13NXoE`k`fnMxcIceTA)aNz_OLsSXxtxDpW;YVL#Tmvx&3En3s?h={{T~N
z6=Gz8q3}t(*UzWaf;WL01l?ST28(OssOUJmI78VzoQrz;06bE8p(BzD>GhT!_G!Q+
zJ@(h+@-R>UgNW;u8PkVCk8(_O%y*n#aOKM18rqByL^8{Xt~WN*B7L@?kak08XRBPN
z7u|?bIY#?Yi&d>o-|OyxmE%)3<x&J^uYGPxwzGc{R|7+Q)#0HLMu)G2?T0;eZ?dYl
z$&(rO+^-t$R`GWeay~PEMQJ(T?nH7j;xQ`jns7vFAVRmgI|l5nzdn#XWy$N64AZ$B
z7&T{gUG`El%^TfacKPKoGwu#&FtldP%?XVW6w#(f`ADoz_$^WpF8}xr1W*aY5`LPy
zMM(-Ov59l%Qtq-$i}b@d{)K;`Lg`EYE;*VPP*-U><{NNYX8uoRD|@V_-VNY1fe=2y
zx<Kj80fg8j-~C!=Dmk~>eKrO`?QF8{a?U6m16e@1-`(L<^pPLn1^C96#OG8_HV+BI
z{@)nusKrudIs-LIeFCCEO#bmSb;jQ72@)Qc#V?uU(<c{BhO7XM)cAZAc5LHkdJ*r$
zXOoQQs-i-wki83a$USTW8O2<OBaDX|cioM${R+0l2_K?Op6d$5B}I9#gnkz-yMZiG
zcRtcf^1o!!6fO0ppd^TdWi<)F6shM^5<*P>;G-4;8$fX8WDi>hrF8<s9+7Lbvc9zj
z8r?_Nu{UF|_m133uI4;CWn+zs?6r_LpFl3<S)ZhR-@48GtOcoQ!{3i9$K7h`E>xzC
z_>1pFNe-T^t8n@wyy1Z;O_Jd?r4Z;DZwjvtFv>@noOPs+`vAf}Y;0!640naMiz-5L
z2M{xYM{#lgDb+7c0??9^RS9+Z;WF4X=pW1PY|XUi-2R_2-8R~5%`BJS+@E{3<U9IV
zI3;QS9&7`}Gdq~mWLJzQ)psGPDV?7*IkbOfBL3{}Otw7ex!fEX4#<Vv8GiYV1jhqn
zkCRKy7d|e|q-%OMD(-4{O<_#ee{ETE>|QdX$C$kq3RQZBWK?xn7IeI5IDEBxlnlsh
zkc!C0$DStGQX&vqi7yL2wmOr3y6=`Hnq6ceO<)$TRXH$WCUt5hgkOu(?bBI|cto2z
zMtwh8{m^P?2k&Wf>NS?B&@Aa#kQclhe7q`1AK!2*k2?#Q!y}*%IW$qrCU&#uNBzpB
zmv|4MBrL`(gpB|Q95lD@p9e*LzQ$!3h{Z5ixXdpp%}XmixZ8b(oizQGst1cBdCaH+
zDoyAF(KVrqPr@>SS;IfkeaMRpa<SG5-k&r%?%YA%Pk6r_QxgIa(8XxUwUzkc_pgiN
zw)VZdEFRg&I|OSNGZ)_NzfTHGhNzbm{?6=yqF<$H*gw~owm-Ark~B6>Q%B(9=oSsf
z)AjNm?^GQw+d!2&FT#b#e>&!qkrB7;a_8F@5_UWQbdsiqlFbA!PMeggjxwBC7=C2f
zMN&53ja@JBjS;?6#fsj|`EWAL&9)Eeu!~`%jA=J6Y77!GPBxoiRkrWNL-1oIWe3?J
zCR$pXB6Ahh#`iL!BMoO!zq@z%KZ!<!OBwb$Nfu02M>tr;AGAj7@jQH2PVRPQ&=*48
z9pGQ$s3pW@pHtB8-kq0Et<>c@|5e3?wy=Vs86Ur>7y{w1Zc3W!j{gLY^*+s`Ia6nC
zx8^>m$+J-X*z!j^Oalof49@<{UhVhWZGQ&-ZI3oaCf%Wkh~G^;_F_&Q$rKLK>`sSR
zzK%0>PLkiBLwZZyM@41GIc4c2;zv(5ov*!Xjdo6g5HFa!Q<~F7j6O4_=bh%ZgmNtd
zbF{_LTN&JET6br_lw#O$@ncjHv56}lN>^miGCR8@nyRy9!C>4(wW=1m!tHbkAOoH5
zpfYobM0#4MgMaQAwK`8b2DZi~W4^=g_^@~<9lk%5JmXKFW0>?~%49qNBk|`QCuLa2
zvTtDtB$V~}E^84^9E8#W)gLcu?Q1^Z`F5BsG#5nXd$)-(AIpm++XZqYYx901P#dd$
z$*Pnx!kAr>_r)A?R911$2g2d}K~1`1)oE<Vgd(C7Y5-(me`K@A=+;rXM{~Yf+-aR#
z=1A29;$fv7y1b`H2Y6o81C0TotMlb(Dkr87<Z9DQOTjP^>@MAv>%^6W`)xfU`jRv}
zTiLfq>ycA^R*UO*r$=?16+X)NX@#kHX$vVDOK_Tqdf)x4I1O`7hearp09@Bu!@ofw
z!NHRyU^L`N(f42o;c5AGIIQ=JgGKUqMt)k9%L>tdquD1j`&%B$o|!ZLj+H%V=)09X
zgk9hJ$*GB$nDfOWP>RSz<3_OfHH@ZxhBZQVnGJULH_oBT|0W-tvakz2`tha%41>->
zj|5vMI~W`Nuj$>>R|*&84~QA2dARxu6DAFrz`6!DFJZGYI@ln@0gC4SbV(w1BmA@n
zrzFP!z)yld#D!KDvV>V{9R2SxAH}V%dY@-N(KCg)AWRky!U?%%l+kvzm7lH-RY#F1
zu~gKZ9rCow!#+uS#j`1iMZTliy`Tx;DZmE;cRfq6=Eeyp2(K9jHLOFqT~UpWO*^fX
z&%@+@Y#{l^_)u4aPrfn_j1+U$8X~;AyEg2X5tj>^^Nt`EhF2M!^Jv3Bdji4=8XK}W
z@t<{SdHc|-fOVDGT3AzJ73{Y)3$nUG=(&Zr9!nm0+L|t6^?8iVmahepIB%aP++i4R
z>?f!(1oi#V!r)!kl*X*WKK0gvFaOPM0r%4gF{9S>Ufo-Tcu?i*bs|8C*q=SMDu0T{
zS$_Z__6nvqH+gA9^1l6l)@I+2^R;(VU+#rH^QkhbL{@ap20%|V^Nmd2Vq7T{c{G-^
z>C`7>t7u1IK0VY!-tUQs%=IH57@>FALX;u&jt>2heIge?91|~MJM*jHEDm{f3EQs!
zhCdp$$rc$K&XKl$Zxh9GQ5nvjMDACZ%P33;$A9J699KS^t*QSN)5Tr1=#W1hqydM0
zgqupIE>GzPO*?@acwyZij{dNERRRRF3m@D#|NT*j&1z{#5yNS?b7wYQiSt&K(^*;9
zL?=w`k^M&QQ*9@yELI{-ui3KovYljJyz%?E@QNI3dSs+@NvXa=k2*<coFihBH5foh
z8e^z~vE9XiP6664d9{GeU%#rsU&I7+4Wiiq|NXsChLLn38^=IScjAQfn6u57<#Wi+
z@OAA`(NprVB;!#RwrB|2le8MtuA2>0DNT6VBz~<caY_QPMCN1n#n~?3Kvc;tBhXFq
zv&nHRGbuD2ySrZg^Svh}pV%*~d?i06&O!au-Ll7~>@ru`L3x=$ka4uHH%M(>xw3rz
zsZT>o&zunmD;9OA68gu9Vgh`CR3^L!Kb#A?+^2L!V#R9b@F>p%6G}FcvYDBkASp9c
z+_vQxCUm2kFA!rf3c;~POgj^#ReN^59e{xDxrPMC{LC=~XZDPs1YH9vys_%PfYpZZ
z3lL8T!O#~JUc$J@nNMNwmZ*yK^VdLR$P*f*h!h%dss@SuGWBFZYU5m+4hk832(=)+
zn}&+Oj$HJe;CaRHJ^zfO9W_g&k8F<lqLzm3`9A2qalrRUR?utqJEB`OIRi<3Wa$AX
zuE&!BU&QEPMco|riwJf(Y~bh;_CITmhjjcU^xe;B-^;FoQ$a+I)!IK-Ou=lS8Q%wD
z78D=7JAU}QcD!$-OwS=sK{uVLFDT~L#FkJHAqXMTla;`n@{e7if26+3q?rA(!#t@i
zuoZUDP?D;o<i<D~ZH!0o8Sjgy;a4OvNx2(6b9W!EzhnGiVH12bg{2V!VJxHIu^RjY
zeXlG%1mt&m?f0~@J-BH%#(h{m=0wYVleFx=Ta1usb2XBZ`Fnk_gEW7TCDo9*9-}hJ
z07ht?qp?BLzM#Jxv!O487b_6~j`s5#KwwxxNml~F3^1cF>A!W7$bN^_hLIPax_ht{
zgiUt8!Pa#98u#uBz}bwmV27Uh2i|Jq<Qm&2I=}>S#89fqpGnxvM7|%dlo1r>gmgV3
zS|~PwNiBCe9M4PcS0R3OflS0Lb)QifMaF)P8!tJRpvHB_zeucI`Kn3g?Nsnwri@pB
z<LsRf`wPJrX+eK~$pl@rP1Y$uhOoyIZby?EVzI?Qz4nSw0c7|bkMSV2)w_45fA3Oa
z#5@lc#*|;^;PJR)k&;p`ZiL4Q#_@{cl<?)V1(iU>SrorCD<aL-Un9r<`hdzl9&c2w
zd0ANOAnUh2nILziBgxqH+Y*jRhj<~fvpW^}jMq0#EN~--*A#!K9QAuAAtLyqMsj%+
zowqPLHnk=K;s_=CVGp(zoKzq4cc+61b;y@q+d_oxbfw~=SvuMHBW4Z4Y@;g!PPuV$
za%MHc2t0|b=aJ`Yg7BZz8Ym&E8U|2Kd6{*;>+em0nIf2JfVeE#$&h00*6fVgye;DQ
zbrz1U7DdhdiT<3>I9qvw`BC}0UD(}PHm5%U11Eem`<@*C;gna;0lo5+zQ>p614Nz8
z=#?jOmw|?7+{Z=u$B0A)C^epW^mr00p1lDuQHv2!q4l-@rK;dXmek2#B+gHjD~6H+
z8tfJ&Dn$985#7{!aV`ZMftIy->xy2OZ~^a`k35>i<`@@iHiGkgz5OWQXn=XvQ2vZ-
z!|zl5)wz-#oBugvWwG4i>5(bs3=PJ21QDR9RR<mt4C2=?LMZnQ$G|#RiMYDIp?>7x
z*%!G{B+twEowi?~?)LsS;tvfCooE)Yy?DtoR@S_v@-G+2izP~v0*F@aQm%QPiStnJ
zS#eK?eQF|ncUJDOwJ{iTDPB%JLQ?I^_p8q(r7?_}WUbJp7G;t~4eVf`=1_rghhl`i
zp##H@8Ebh<{2k91D<|uTnf%>7PlQWdxJ&pjvcHYk)&iPD{#}%#<TJhqdrq?^M@O(f
zFvdzq`b=G`n&LCbiq?7+2#28XzG_szaSFXE1r2^VTL_3&AVW4-pr-0&m-QcPEQo-P
zxiYgnCW#j7uN=g>AM~p5Zg<9cDn25NLsx}C6fdY?Pz!ze!n=iPzQ-lT_Q_I019MP!
z`zS%8oshU!$NIA}15L89IDQX6>oZU0Z`3+6lxnT@Nf!k}Qj3<D(W1q^?~%Jg92sd^
zk*pe-U!%EGdVXy#fAcEfnoG_ZAk$j00S$WnoD~_ED=WVDSLSigx@DG|;qTKS`q|hJ
za2Kg6%vLPx;@L=gtIkx?&v?EAve#iSKwhrYXUx&EwXAFx)rtI#6#DHzlQ!DYT~tzw
z@5q-Ychwj8Pf!Fr(#e$}ts2I)Xl#Hffsn|ZA8l}E7grMhMMTVkX_#?4vt*@`9}Crt
zRq8|>U~W(YANk@zy!?ei{x4s?B{Vp8eQS$_>D|se<BI<s=XWUGAwv8x_0=_OE2iZ+
zORus3%`^Vtn8V{#qg;Zcj9Q>2R!MO-ZA0eDS?0(n@E_J8i;|Ec)=>QYaop^T5obTt
zO{K1W-eHGl+z&mZd4E+w5H=dy2#Pff4Z2tri;Yt3K&3cH86e4%jx@z5c6pfqIu=nH
zcNxPl>Ck|BHG0<=*x{aCjznHQx_lz16US#e{rQApD8`_2K0TQDueM57!D3A|)wxiF
zD^C(jG~-0Z-1URB&w1{$!>GYn?nWfKLwJ&FwdHU*+p+%r)pj44_EpSd1qRhL-n`{g
z3lR{)x0X$Ebv_gH0x=Rj5^u4=AbtpYRZ^8o!I5?}@SM4ew>+eZpx%FC72F4Lb8*3M
zO)%|9XO>e&X}>hs8=GsxXZ<iG^pZn_Egf(G(Isz;QtObwJUOfX^!|L^m^93u%`Fmb
z*->p@Lbu%({q7rksBZ{0qfDL59@8|V5!B|PGSE{NEm4lg*JgG?(Hj=fgZJKKG3MPy
zt4@4?6ckjAinyc<aNR}5#y(6My#IKgfc`xoH=N_EjeZ6CrLy|zlZVsW|MP|58SKn;
zN|3i&i@+B#6L>^mo>9cIS*SIy&}cd8ycbkT*Rk&;7B%m|R7ma4p=LuQAH$FL9;Sa5
zLB%d!AhR}~09jJ}BAgVyq)w1FV2!2asEUB(fH%rNY1ZzVz`YH1y_+f4jG%jgc>c!3
z9B@|XkWrMszH@rIip0jBQQGmoxSSc4006e?{aDK$K4mX)+5A`usLz0}qX-~cy7o79
z`tEX7us7XfLJDe`s|^4epl#P2InMqy*ki?2i+WthP>f-5N>ruR=>V5+oI91{^~XdW
z$!PKS@_XL+dP5{rLOQ-?{%9KECbD#joLGJ~LA~Z|v(^jhL&bBfR|u#yvj0z1?e*9~
ze3Wr>;1QYkGVN#K)sYNhV`SyLIBeuUz^G-()6t}yqZ11ImeZIT#WOcZG3uqV)rGcE
zaEEEl3kgRsnNnn8FOjbrp~woc3fqcgVW-2(##u-<MVN+tIqG5TfZK)pZG5qjw}>!G
zh=traSw(C2?CRgIu#ENPO4W2j8F=pAuY|F)&2L@=tZ9KfdgL;uZ#kIv-GD~+j9K2Z
zTN8r>-@fG|y1k!hT|6IvTC21Y{oE}HppaU%`yWV*GTNwNpz~=a^(nCKYm|)#q-{fA
z|Jx1hAfq5Rf2tBo4B8FDCDk(a?+N|GTJT4_07pDcQJsco1~_AbZ<?8U`lfSePT;$Z
zE=s1*;gT%M_ZJ(h)@j-}S&)TY+D3S?23}TM5Nq|B@G#+#q3AYrGQ$0cUUW>!F7pwS
z$7$ihNNn5Tp%skDv<mhxtp(Z<0jt=f#?VTHbyHN*%kzF%BPh|MA5m1xf`~kWiX0i-
z<^qMoqV4JjUs|Ki!%&;;!9<2mbmG(YTkm{wL>Db+GRi+%MBtd6Yw_a2vk2x*ONgb1
z=wtYhoSFYe(^-Z^`9)hC>29SNQo0oogrO0TmR5#FO1dP5lm?{{q*Fk;B!))18|e;#
zp_#h#zt6p2Vc=zk^PIEK-fR8VjYJ(HExH`h6N`Pw`hdr>D+iW!AR-mix4@iA#i7J^
ze*eLnjh6=UCb_PE5=*|e%$yGVcEH6>u)CQs1LUr3r$XOsuORyAz@6J}Pr&%X06k?v
zZf_T2z?$#tAfac`E7+(5IMHlPE4-fn$W>0^Z@Uj(PH0F2i}Ph=gqlWt_Zt@h7`ww8
z@>jOk!Baqrl>AwZzz6o!#vS{}zmg9ycw7VmO2b(%#nE&VRgN-MyS;i^!#f3dNodNH
zhEen`KD1(ywv;e}kM|Yyx!%P1p7|@{wAd=y_jNY>Q*GAvSB1x>OmWH~P#HC`Zpy65
z--6VNF$Kgvs~iiR3U3$^z{S4jvcE;@<q{=bwF6c^b*aY22f4BN5s+EsYu&E1b2t>>
zv?upgO3EQWKH}{u|2`*_vv~NoY+w4re}T?pn=%D$T4Ohs?bhtlJfq@Oqr&Bj4v$*H
zdUbvI*LVGf7}{pcNcx?%`gEElqTZlzw(^APk2_SAY$OfxEWWt@l>nCroXEM}<-L0y
zf5o@5{c#U(EHhaX?m_#@yML=1BPLHQP>sIpT7STXK0bOIvOx;z;4$)sAAt%Pr%J4v
z5{jFN(*KP4$MqmIsJbD>1RAN*!KZr=|G2kX_UbsS6#ELFwtUX5P#^X-Uej<PO)=uH
zFUVMunX!WIG4X3CQ2BkeyDC5W#c<WEuL0BXREQ#N9a=c?;%RHZ^(0B$XY8(0BYsL-
zMUo);qWiWnz0j+l08NH&KxCnf$w~wd8PB0Gx0R@4&V9!{#RNPo$Ja07W)O-(ULWmo
zG9#oJMt$4jRW2}D(@p0(5EIff6pqBfJeURayhFL>?7QHVqq33@{_|;Bl3SuzKPy!>
zgAMlod}9}zb|26%?c2-C{r2xQVlHL;^X=);0;&axFg#*v*{CB5Brs6%=`H=E6<Es6
zZP4oFMV}YEU$JK1c~4o0Ie1iB(z4+$y(Rn<9I^Q3p?x_sMW7_=xgVXTy<&p4bt;OB
z8C*!G#pfd9IXGr0W<TL9h9-EV(|+w9d#YyZY5FE18I`+P!(Aghj7gdvYf0sH1i}iS
z25JwS&Q&OO-bOhu3;?y1e{F>vkGHHP*KD(xQIu&cPBemd6Ci(nH#IU4M)D*|Lh*To
zsFE1i7z)6cX>C>1RDVDg^zdsUpW-B_b|)A4*!*U-AY6E20a<91Mlc*g29U&1%w{8@
z^}5f0hq1zSo3#4jYoK|9XaliIGGXDFJ|im4z#tS2cQjbK1w=8}a9R()gaI1tg5S$p
z558qA7<<x?f0exfmzsq_9QQ_eor&b9g{8t~3!QlR+FEk90fEFTjNVNbXpO`4jJCy#
zR~sEBxFYyb@1R`4!}tIIF+$v2@i-asJi|E^vLsM0+Crymk?6U44u%kk=?Z@ww4pdy
z1LdTImK5!KeI$6RgH&?j?)i|u$M=lk?PEW|nfbQ9DCYmO0EDb1J7TVz`FcOfZqw@{
zYni=of#RRmqPG)n!C&%3b3C5$y7^v`F^RswX*k?9x##*Ml|6IMkK8IF(`FE{Qd%&8
zfABX*sr<$GZ9uW1*0p}3i<$+qXFIwA%uk3DgUI(@D6sf_*1YQD`ZuiesV2<#U)zCQ
zj(_R(4afSnkiaZ58S_BS(35$abAX+O44F==)QkW?`%>&8MafXfMp*NeA^yBD=4F6Q
z0uR^$f_{z~-G><Iy%*4*-%QR{8rf~OBK@gL{9ap*l=Ls_>{DEgV7QedT=!cptS+qG
z%6=yYNT?&}4>F6uVL>my87lI>>j7Wa4O#evu;P4gibP0Vl|Q5<qwO=C=yAK`S<)u>
zs3b!@B>Y<hO*lwcO`Im#3^`i{Ha6$bQ0L6{#C>Eyi{hHcF09jqPkW`$9l?EQ7R{e0
zBUU${@K69~G%G~s)#muMTRIgDuy=b0yS&)&e)_$5$#D44?@KWf$_q@Z{vrDXVC$Dl
zhU(Oa^x)yiQ$m8I-Li?hngj;%V`8^0sqGvOD39SU5j4GsDfW2c@z-reQTJevb**ss
zK+R>Z#RsUpV{ryiT~7fJU=2>B<v6R4q>oB{^#;GtC0^5kdpdJvFDabCiFr`1TVf-S
zC^6lTdu)adV0({G(+9zAGbYx<yFr+B``6y@XS)u{=DI0G7oM(_#C5pNM*?{6j8RW{
zLl*~YEMt}R@WpiVl0dP%rHF7ZZcY#qZNS;82B*e-Bs)jTdk39LQc?p9Q1}X>NV!X*
z12m>hHin0Zhy7X7H+JjYA#&vID<N02CdXh5&~nOsvbDG#)f?!3ccN;;v+*%X+Wr1T
zA?tX8SnjsZ3)C4g>hT~&5`t!VOeJyG`FVIP;m5#U(5FwoxH0q?WXbXQ7tKAr?NazZ
zF;*W*^3nH*CvfzNB}-A9(i{ff_e6<Kb+4ZfbLHj8!r$@pDZR$I7#?ciZEax`6~hW&
z<Fk9B3@XH64wxS%V*8eL`i9ZXPk}wXnvGb5`pb)nSOD4EK0eDURq!>PTQ&T{x8Ls$
zHC|Jit#b$oirg>OY_N#k#o*%QpyinQx=Vp|_m!18!59VoAvL9%Jg<9wL}tO`f1JMC
zSoVFmpMJHosIZ?BAsFlfz5bEJf;AyDA+6n2KC}ZoSo7TD<F`ahY%J4cE~x?CT)jyd
z^|fb8+ZHi$z|*FuNgEgPyA+>@J8iG*m`<_4M)9qMYFdJKm|p(+>1mRWI6x@@>URQ2
z0;<r*+cD$up$I|LH70(zGu>qm2dDAnmE+}fQk_F^j#%5)G8Nn^f<RCn;dx0ULYSp?
z(hn$!s-PUn6P9=Ggd1&bX59hrF}OllID@%Rr@Pm)U&vHVQZzfdca&s4>@yF6vF=$}
zDgyYyS%~sYKbLs8e1{#im9dICE!NRN(!^dKS11s<1oCXVPHBCBZHAML3?=~1Nher6
z!}s#Sf+CpFd)OLUn6@O3-<|a@GKCzXXI<kx3~16_qJ$1pt2w43y}RQN(=!vMe;R14
znc<o>ex!5!f=J`H8;KBp(z*`iI_~U&2ncDL^JYp%EPqhlytW&l>qJ|^92}%PLzHx2
zktc(xkUuuV+nk~S#;U*zQQG}yW*lb0q-4%Z9AY>x4xyuhqhotr#UvNn?R72ifXi7>
zC31(utP;$z@Q&-V^@HkQIYOE0Of9y=_>0gNsfnjX@0YP%G8^aoydKIn;sAKh=^o}j
zAm1A*lULz?u$jG<nT0%D9a!3h*KRSQwUcuFGOCqq05DW-Z>`OfPsCP@zCVwVQ|x;&
z63yk*vAYV@%0Rtz@+Yj@2BKS2v!2;6xp=m(pNozC(08XSLq9RS+N_e-jh2=%g=2FA
zTbG^^B!POvQvaOW@9Wyz=C61v1Wz%eZ(UDY-EnfV-t6w8?!a(sttish@08xh!(DiL
zIhYjU-oFUwyajAxH?;jkq>$S+M~HO4j%&RPVHqzMY5fI)bj6naNLE+?^834D+CzvK
ztS~1cAsugSKTwS;m3t{X%?!b@Ad^+1wNa19gM78&rsB1FP$k~N$gIQ0<mLqjP9<1q
z?_*AoHjcrOWMJo&0!6NgUNN{-sO@N%JmxUhqFCJ`!<+gSj_Tp4c(IApB*Q_Z<Pu2t
z_CRbIhYW+=_3z`xR|KnzIXnbA<Q_{6K1~PL^Nk?}@8SuL06U&5^|^cR31OLtK91_B
zecbEm7r7_!|NGl}=8g?%*%$o%i|y*dr>|^1lYK`PMYGk2p5vHfDAXhJSAXk$P0y2n
z1!OvPnhFxxOZ0kr^+JaMGB_^?&WS&Mi@LxHj|kT-D_ym1=kL{)MHXX<Rbwn(a7$1W
z?q#sTm+k#@i%wN3aTV$5K@7m&56G<O{IB#E$AaMT?QM-{NEcKUmtD0$niUyziHsDj
zS${k;49sWw9TF}pJ<;`1AyDLAs0*L#LkbbW;A&!Yr7SWlUF$au2~;Q<)6Ka;x5<|1
zFti8>@)@wra)w~!n<KRQd;oeJf`3UefO`-d5i+A$C|8(cPO8@WLmxX+4Z&WLMfRY{
zZ!ZEv{ExURAV&Pbj#Nr8X5SU@dF~1D3QMjN&S%#~|NS-|teB$5vv{tGQdXA@K8zIt
ze{?T8*+9;N4L1<yyE}xZFRGu`H9S=ipn=F%Zl;Q6#wBE*@w{mycydt6;5st)XICxE
zue)X=1UcNY=Al74MvK|6gO!iCP#3m>vS)rOkrCgW*<*;gEZSkA%hcE9X6}xuGM*sm
zmai`G8#}C9R^#y?r#2xExgS~Hg^t!Z7haR&ieC=q$6S0|ia!7!r?#|u>C9NM!#D(o
zZMD?xe)98ikj%`8>EJw>theQpbTNxMa|1~GycaiD&yp)I2vLb|WlO<Q7j^FI$FE8^
z%((ya76Da#78Z&HNUg*JVh%s&@qJiK)rCisRGD`25~G=+t}q0^W5oi<yRRJq#u3Nj
zV$@h(60z<vO6H-dKfp%+M$s#@>1Og8I+^v%%N!}v5blVjAdlYkNEp&T4?JZT{;EFm
z6qRO__=i@?i(6`pa=!zWhf1{!$<jCY)BZ4@j*5NCSJ~=K3N+Ls2g9)*9K%cg*1_3V
z1W@hgZN3=_v69AujDfdD!{e~qBbSU-@{9|*-lISu>S1!W&Zcc(%tXwLUGfW9gNA3Y
z#{41RvQJxtg~(IAE8-?8!uVmf9q<0h*c?#RuqAHu>*R%v&NjM<Z;NI5&2Q&Da<A>l
z13SsUItxm_^es=r9(v9$<=uM<3imuV)306jLEKwXVba<VTG$zpXYb*CxB5cUOtCpk
zmCBj!Q;M6tC$32UfaB?z9ru)iZtzO`GtQ6g-Cdl4Bzs5kU*D6~hQ$DvJGq!W-H1Ej
zSI^zeyv+eJ)<5lD%k?AZ!L7+$z5kWms9|*&E%gqDNxp5Ip*-Vu$iXu;zXt<4KJ{H<
zm46Ua*IG|FUYRL;w9CZMfAL33tSLs~J{CV?`cyKOi|En<TQ`-e@-Fl52vXag$cY#H
zw3dUye6PP#2NZ%?C^24hviDNx>Zq$c4=_ZAU}s_avtM|c<kO&4<B7e}%BiT}C2H7$
z88}1p))^7?9e;WKaih(1Xew$J=={=s`~LKwWPS{q>C9!xxwlkTRCmr7qmMaVAaN@+
zav<Zo(K%W_9`rYNFgG@*#Kq&A%<x+n_;&fA*pet}U(9~&BUYv!al#&mwhq69d*_sF
zy9zlP#UBp3x2_AJ=Og)SjIvoUVnp4o2TgtwuwCgJ+uX=Sn2AlyBo1lAz@(>Jd^H^_
z&bW4dY`L2!RVe?B{o#*1wj(KO?r40>WfFOTR=@I`xd0K`%%0aUG@nJw@AQ+Ohv(N;
z-28zja7d%0U}+8|v>)V<F5@7cjzY6Cx|Yz%-MRk-Qm>uz)Adus>FADnQ~^Pa{&rG$
zrH#~RpYE%yZ-4=S09el@u5Ys@1DpiU(z*uiCUH4|DgHrGIHWZG&<d_st*mdvvTbnB
zJI}jH=eS5>`B0J%`b@WfkXV_j$oijp4_tQg0)$Sv80m*c+y<;T%xY0&H7_STCuM4e
zrW7L340>YOJNVT&x`1Q1_UFkD>Wy%JwN^H=0^YAmKM#!=&5Qo3#Af{hOa8MG_PdE^
z*oX7UiqWd5VO;h%)s60$R8Q`QSQ*o_Wf8>bn8I9k+1q^wL3e*=U+}0IzSBr2IaxFq
z9(!G6ugd7IbS%)amP42PA~w&3(k?;*ZN@YH-2{A{<@rE(O%U^UbHnI1D(9<Y{g@2N
zo6c&~GvFJ_(vJIY>VC<hhUuMq=f`;?id5Xpg_IOf3J7=b7Zi#2z_xa84;DD+y5|12
z08fnqtnyi9vrd)S<#|~)o5bjUb_W{7?P1;~TFR#S@sL2#Rvh5=%C+P2vxA8J;X*jb
zp)fxZnhDK=E;Q<?e0BT8GuP(H<uyVPvXNS$ud#C(=lu0qqKOSI-y`Lr(+dsJI}20O
z?;2W;rr-N5BlT-}WP|r!48(hKDu<l@fOA%E9t^y;ocT<SAiU)<tp%|J#icgBdv%iu
z)$ZHU6ChvzsjSh0q99)QhdPV96RILhdY$z6=}gFQy0%NgDdtSf7&T?@GpL>URmSTu
zru>}ut-jP(ro9?x&U7F<XXv!&>woeO8$pwQJywV=r@ORsU$-fruSb1l=6TyqomFa)
zJTf_H2fI<fq7$>L18Q3-q5O`pnX-^uQPpVdT4rSUm}3(-Fp5#aj+iu5$<dnTnSd#O
z87%>?HCW1uZ24#w==jPVt~9$5T@6<2;jq8{*h>Mo0%!1>6eCDD+jQYnu{6M}m5fI&
zQOe&|ClHdmOBnR-M*9@MGOTs!(O&WHoC$aAtZh0z)?bvmm!<dpcAg6xQ>W8nRkdlo
zjaqA7ZrA~_l$8#z`GlFEX=8akPggGS>r>$l&y$MpGYiwP+3AE9{8!lg(e6WeVcHRS
zZCPJxTrZ|BM?$*4BrsG;e0mQW2&$v?*p5*|qqnmbl0io^Gqa2{OB(63Jh(m~k}n3c
z>{=;+Cf3EhFW_MDgNE3%Ro}TyoF9C)ni-`kT4~>rJzip~WFpB_CNF($uJ&){{{zDv
zzx}+a#Ue9X+H_BQT^yd<g&<WsT5a$Zg*APT^nJZ_nJM|OA@$kIu!i|>+W}1^P9fG4
zuP|X5Mt?aP@kq^J=<rZ>ObCep?O|-b`^xwp^&8ynEXgl=cnwRAexJGSo>+MSry>W-
zU)q0&5ZNJYWpnMkF?>LSh8nZ|7W5~w#UrG>4>`Det*loX(Na~X8v;AfR>Za(&^c_q
zUEB3jIaeT$G<nE%DK`OGu-~xskFUhe5C%kh&Q|7p(=!Ge-+yzQUfkk8=VvSn-|WVq
z1DS#*in%$;Y^piI{CySvC<K|hw#<XgE7m0Ryn>;+c?Wy{CvS7l6Z;X!25$hGEW2C$
zjBp>V;i=9PyXz(Vhf*r<gxzWmS_%q06NF23d_p`51Mz$gmk2)3vGd?%w|WLPDx`;o
ziduFHlQhfmDwBJA{{awiFkKSq@`|H-M4zs!m;bik_2+sk^<;e`P5*qSPWiy5m?8K<
zQTz1+_6QRXHr_$Rf+W?D_EJ;0Mt7AM9lyaBy+M`B6pJmaL;sc984d>yI=$pK1Q&jn
z9gFayU;~d^a_tA|8)_*mEq68DaXdg!|DN9$UL}t1q;TmO^d^}5o-dd)5nJ~!QyG_(
zU0yI$jiDv5dow{|Jrjjytf`&|($zw_SY)^IQa)Z&oR_8wFduJ296tHz+@k8{*!<D0
zJ^d+pXXR*fI5eJ!vtu{A#L^kw)fYngVqo|;*ChrE8L}&gOzmN_@2I-C7@K^kO+Mu#
zF{Of_@dE9>3ZnPL$7&7KJ=+_2BRJX6gQy*IJmUAGs?R2M3?H}&!bZgXBQ-88KlQMZ
z3W6?38{L$#1LDB~b~XZL^~K2^1uorhp>r*z9rJ`|TFP2lvzwM5eI*;>@zE$AwBBrT
z><=M2O+ox<I}V)Yf2mAkF9@m=ecK+sCpn+v9+pr)TkA_o=0t9ShR2a!p6pV!^AWlc
z!3f$#$~-PMi*Ou3r&M>3CpC@l(Ww&yk4;XMmkQ60qU8s2%ZHYJ%D?Fi_T<nm=FCvJ
zND5^0*e}We8bOGKyB23PvN;nui|EJ5N9ZR_-^U+}5`LoO@>S}Dtq0iBO#Da@xj(d)
zbfLSg^&R1>>0E%GC=>CCSFN&ydoxLUtN&ZBw8t+K^k^|E3k!UygKUt^G6+oy@$h2Z
zyFBKrY3@C(`T4rBVaZK1(|@~yE4KE<`-oyM95#>@3oceh{!{MSJG#s9?>8~0Me0bj
zG{UZAPX0da1LJ<Uyy$Mrljs=id_LPn<o=?`ht{a)3XgYyuTn0@bI-0sJ{l(=#z==k
zUshk}CIMo}$FYnY&4X^5C}qjHezd?JxCydyFLy!x<EeuVA)BiBJ+yDWEAJ(Jd=f&9
z8=`!7!Jc#~`%Hrgk67|uGdArKSZ+iUf^gaYd$-niJ0*acZi$~bp032h)iUW&aKnhA
z&DU0n_j5=K?oAoT&yZiUPbx0V(}@noR3Q2AM*}tle4aM<N3NGst`Iv`slZlm{l%MO
z6dGM^I>Nai(8fgrWe)p%IURpg?QmX4$&#6#Q%EHL^oei<?Vd;?8se+=#I_k;@+nzx
z*pZsv|D+x~M<qpvK}E!G#qzHHncw|ZR9uqGe&*bh%rs3T%$l<sExJwhMl*ZVQBh)F
z(Mfw<e_J$Lt1JFsdi*{<uB_L3wYN*0(`YjM6c2%WP2}A-BNN-Zl83HCY$WU=etJ<G
z*?^V-`R=2jSfVl7%eH%EXPca4(fd7J?9uBH$gNlb@HxfVn<VB=Zvtt!aq=IeiXgct
zk*L+Jo@RpQYJW_7K9D*q9BH*&gJu;sP~nRIL7^2JdZlQOjz<stK@V&Kxi28xRB~z+
zjmFDhshE21+t)pB1d0^0lv-ydHBx#Ggtf>Vqvj2e4F?mX);B6I?Ta-~d9+)#cc$a2
z0L`RNcluGtAENN<M%cej21LTrtx<>^>wV8*iZ;+ebNxbyIKc|MgLN&@pM&O~*-Sfo
zZ{96HW+x?O5JKQK=?r@QFl#NT*TMl@OD!g153KZZnqjM-U_o2iuG<)N1MC&wvLktR
zFG(|M5%vQ5Z<{tC_$c%rDA-A;afA;3<G~q3PL9z5n)Zp|Yip%X7)$ZK@qN2RXpG@s
zu(r<uH-C*o{_P6{w(+wSU8d~%Au=9O>+R=h;NY$I*9Uk-z$B#chHSy2Ik;qAp%HYl
z92`p5JlgsBcIKAI**fXM^!~xJM03?gjRtkRJr*~mZQSPJzqj%-vnM);K<pxv0%ld(
z)R)_Jn)IZ!Z+Yxwu{z<l)1a{YobL4;ABP);)1Jg=pVLASBvkR2FhWGw2LF-aY-%H4
z_;RvqaHVMmZU4gX&05DoR#!!vQ!5ZoI)?G!KjA+-PKPML?oF_};L6!nO7ds1)4a5K
zzfXmJN}TWwe4I})_;MUvdz?q;1vH;-HCt}j-HnN~%E4Z;=V4UY<WrkQSAeU;E}h0F
z3x4j7v%fWeFWK4f40dt+$CwQJrfeUYf{PRNf+H5oC|#6w)fC&+3O+WvJ3}ZMwL4Qq
zVZYXT899kUoR7D;#mF!+{-*eSxE)tK8`hZI(by<ie|Vz2)iY#)VtU>u%GERZku@Qg
zJ2*K4w+M}07aER$s#9(cC3iqac>kuzBzmDiuJK$llfVrHyM`yEc&tLr*TPhrscEST
zn*%&(oB-{6%)sU0iSWFNLoLZqZyb|y|4#XH_~c`pDUd)fvcy>3tvE8i$@#Q~f!AuI
z-o{zc9j4f*{8Zvk(^cy{KnBG56$i98FY%k&kh_~Uef)(b^k%8+gS0|Qe@8q(`V&pp
zLKFVxSEB80%O?={-T<pZ^|#z2-6c9{=uP23+RUHiF30pYjKNu&G1vIdO;6h?x1d8$
zuy8k(Dv?W9aXCCd3_5=d274jYK10_>s;}OcKa1Y7^4YCW-<>ZCl`u*4q!Y{I2{GBJ
zl<qV-ZIA|sgk>dvd_Ne^{2_Wa%rg=A&v=ZDSW-=GIFy|f_<GL`{%+e4DW?eiiYGzm
zS%=L!Mk`A|F-5FjzbB%CG>1RKC15*5OYm5mj3)m<XTIVCXD!2_FU(NUUu?sK+LZ0`
zwad_BKk6q1$u`;#W^m{<sBjpgDe8q;l<Jmzu7NqdK^gpMT7c#lPzkjTL-DllCTrBz
zq;F!(MPF^f0I3F+6(l(YtRl!%YR^wmb--TW#vpO!MFmw7uENmA=<cFgCA&00sYs+c
z9j{|r8Ao{(>e!J8^N68aJIvU~PmRQ~9uuyR`<_-K+3IqXs`o`|WLdE&ll)~|o6Vfl
zkH;2rJhk_3Jvh>Ca+<}p`Q)2&Eg9hbD0YeXIWBX~kOur5bo}UOOk;5mdO9Isy}=Z-
zYswXz!cl<CTEi?9gi{hUYHR1d4@<ZfsV#-0Z6e~)^3o5+J+*B7Ju9{D`tz)`Rrbtt
zWCaUxApT?$6%z{#nJi#wi+6%-Z=XE>%S8~l^Ix7~bJm+5ABnsAY2Kn?M>*D(;U-AG
z3im|X7u-*Q*`&U)`kpgo+6gI;Cx%48H}O(kR>tr2DlYl0MD=X>>6GX{|4DE(q>fOd
zqm}vWyj3jyY4X*-`yJc;r)0g79#a$*s*J(tkkb*bIkaZsLQdx<9Y~tVBLh2a5c8{j
za<xOvUFHJwVP!Pjq?~H<JSfiMnDpkJEo3`oYW*GC5Lkso2XHYp1kWS4u?$|No7rht
zNB``4s?k!rn1!|sKh*RfyLN_>_yRYPcpeYE+Q{q{=Ugx7FwisO`1{LoEqQs%@z%N>
zLN5?7gPC>p>+?O=2bzMy=Wp`UV>-j$+NBI(KTf(aoRxY#91tWLGwI$Zf#H?5&(ixT
zkbCUE{(MI)+ov_4Q(Jn|QI}lAYDd%60kJM9neA{IJ2DQ&r215=A!R6Q6^<QEQC@z%
zg8C@95kEp)Bk4lu^-l|eRbh-89<bm*zoode8#y-V^KI5=j^GDfRZcoL@d8(4Lv#9X
zR0aZ6VW48mO9CBbWdgKn?~f@FB!V{7$vie;xce!~m8#aI5L}qhBT;7p^>_d@yWq@)
zCv~g9@`A)$wr910>9|KFG$7u-{NR;IEo9alL0Avv2FLaJdl)<X33J_L<04uTLnx*Y
z^M!S!x2q9o=miZ;OgC0`X~kK<zSXXX*~>$W{X2Bk(JCDM@~(O=pGkq?GyJR9DvE=6
zq|X29nexmewqpf|YLI3<>Tw{;&ZbrQ>RCCctT31Wl^SBRmIl%ZuNENW>rIRQN@@AI
zcR(IbtuHDsk&3j@&0W%b*~hugsxT{FtMdDkN>+Z|!A!382s$|&eo~ANpO;JOZF2mg
zPl2@2J2U1dw29yhW`E51xm254Gc#1j4X_I_WL`+kWkFXSp+O#oWt4<`8L`nXR+&O<
zN^JcL!TH?}o*YG&PkjiRqKX3OD48cmU#8DUBI$%^-O?D7N9_cL*4r{bB37`SBvjKY
zQlk`E3C}k{TsrxGBZkRJBwuzIxdsPf&>2rgT8yl`KfK(wrxyUPCr}|1fVp0*)9I)~
zks_jhtwDOT=qN2x!~@Ht+PyIM*&@XfH+iJo*O1ct5BDN)EFm`Ix2>UeIk`V(Dt!SX
zax=Opmxu6{?+m{ntQ*^SUO2JEQ09+xa=GjG7t?Wg(x#s>_4HJCJKg5W8CrqD14L2y
zvF1O<St*F)W51AvaEB%@4V<f|3Ezbx3A`+>{`dMiIfuJ`TZ{DfI5ny{qAwQ-_0}os
zea<`RARNZQ$d!?nL?_)m<rQJ6PC@*J`~DC8*!|AvG}>C69fZe5YL5Rjm*}aG?m&r8
zl1u-UbqYpJB*5R&UQMT)M@YyMlF5QK>*1h{4i1T5YWqCSYa;GsLhk4HVA^2keZS%q
z+<DdT%Jb5jr0s%Fo{I`YQ#*;r=_*O{V)Wy9^x`(y>DcW32>Zl#%OvI#VR`NQ5kA#Z
z4s#qna&A^Zw8Fx?>F4oxCzbt4d9In@6+xaMS;hF4eujq>Eur92i^cEpDNlV)k6uGn
zcf#rHA0uOR-zeh`ZmE61{&A*haF81`;q&%`kV%)-t6Pp=(WOc$dWLo*Z$+_l{6`iO
zU-B89d@*2#J6|qTeIV)j^;hJe;ngisg?=KgFf*7(OWlU{2=x1-8fSVp^)AhB13OJP
zq_(zp->zTgX3Qq=MzcQ@`!@wIHCHcZFgl@Qf^>@r_82NcT|~kCH9akhEISvv(G?Ux
zLJH!}j26m+Qx2<S7RCypwhRBhJl6_ncjmvl(Jge`QWgKQ?6x&8i?5@UtPfwT0PpGj
zYq}KE|FAdtO{T*}Eh_VVl-EtYf<oOS?9u)*BW=s6l(n|F@m&zf9Juev?C&bNchuPu
z9a=~fqNZh}3TeiT8syjO9TeO0%ZXFzbx&sDTIZMp3#lD1J{r9r(>D`%<M$dmWOqWj
zLx_ncT+x&@&Mbr)!y^=~=jScUe*TQTimyT_#%C|wKZUS$KaCh#&2y8C4;pG+ncA&Z
zL~V~ks@@vPeq$WvohFaw48z|8h-vqNtkaJNNf<7yge<*}0UlI|C#@o%RjB^%%pGs2
z%rzWMFO%PFxAZF&h?7EWqqtJG!xb%Um2KZXc!pSw|9)v8u_o+zupJq<CLys@YkG?p
zE;o<vW2p?I^SLXxZze|oqcFDFkP|r3#73RtQ>{Yp0lGeUxzoXyi@T_;=9tK}^AxEg
zH7B_9NvzX4Zik5VV5WRu=MDhluSe*R*@PC4%a<P4Reep@wi&Lb6P@5<fyGc$B{clH
zv>`~<9PM=f#glmtTeTo-SzNkJI&^su1Ku?&fbzXg4@Dv|<;P1i1dH|Hjbip_NzQE)
zbD-N@Zw-xMFiha~aX^Jg>C=E&7}dM+hA$^6;n$+JUu&D4SKfD;Y8kylzS4JosJAsJ
zMQvF;7a!gDnG=_n|7;AT6N5$5Jo)Hn_{!dLAOmPmI)Q*+#a;!we`2<0Vz_2@tAnb7
zl@4tXL#l$wLkAIXBK{0MRz5vl-dj@-3kPm7zQ4JTQTpIYF3sQ88R{b290k*mtuG9s
znx<+=WKjwAK#oRSX>-F=I(WBPY$s`TX{tH{-QId~<X8L^O4j5(KuTgNEppLH<wOYl
zFv^6w9|EciQ%SrXQ1Y<vdn7SHe<8bM2`m8QiS`Y4xM8wi6f|+k_zKpO|Iq|DL+r%Y
zLkWw7-tP9e=F$>2e!S8cRTJ#s<~njxcZ)|@L$+>L&zHt+oKcrw{=N4_psdt>VE?%p
z)GdO#c0QzsX);KtgT!=EaRCu^;BMJm7VKbwcOe)nK@MOHUAc^B*1g%c5EpV|TX241
zI)X~&9ls!I8d+B0MYaMM*{E{X`T9o+aC6d;m)E|7-eLt0Dj>}|&Zsy9y0gCjE+=5U
zZ55b}Fu|EJ=8C?gr47ZZOV+<;5O9BuxSq9`nBt_I<A3W!{t+YZxB`qCR3{brTuAT+
zA7d6NGjMzG0ggGQkGdxgARNuduR@A|3!yEIg)XH&>;}#cL~zLm_9}EK`FyM3S9>`B
z&6d$?b+Jc{{P4DyskuQnNag7Aop~B_udNA*b+{_Q2C6*3E9dmG28<}${f>qb3_&gP
zOC;GQe*MJ}b(hqA5Ca@Hy&$$}G}cOZb}2m4C;#_9>_Y&0v?4}#1?@@;Z{R5E(H6c=
zKNUZN8oOjr6i4eI&01V4{ddqgQnh*h-XG2Y4>mC0t%pOdDwBb})aWn5{5=#4cM=;q
zlIh^MjTPYS%jK3=s4ya*U#2*c?vFG$E%xY9GF1lW^XC%io(@tLSzgSdktA8PrDF7c
zI`%77DntkjLcQlK@V?J|pC1IfozIqVeMl#CV8SmVvA}TX|GValiCufSuUDo>`ii5C
zt5m+BLEQJB{Znb53l_FaU5CG%fUWMBJQ||$Ugb>XA>){qC&|O(1=Gn&(qwYs)N2A5
zqZT>2GM_oT&!@$*xbmt^JAZ%PG6ETG+xB~L;ZO^05Cm_T9O}m=Cx<=ZhY;T!P7CyR
z{x+<Buiu2mFuRF}hlsyD(?{-Hf{mbL&pBVo{JwkhFO+j&iHjrp$@otkqApy}ubdJk
z`Z$Pmx*60W!_C0fW(!`^>$LDI%_NY#A}!_3;(I03M<bVqa}8u&+uK?$Ew6v;oeaP|
zm1gIM=Fdc02Yp1(C(NeBo^0Q^g0`bD7^+dS!9ITv-?7tIf(z{kLvDLAAcRV9=g~m=
zJpaGmke)8@RN@G1qA#{)k*>&{@%r;Z<Vz0Jb7Mo#KdeEDGPMcv)BpayMCbEXH;QSX
zB}+LnGff&9<aT^kppw#_-rg|!t_#njvqU)jF#D&dOQYf^i|o!zW0+!lXbp1sZ-CcM
zu3D&o8KinWwlDa8x{MG@gH7_ias(TQ{jJeoYGp+@l@c5LxkUZ>>a7G9m&8&#*-HH<
z<8{14bl6Jua=o|4%iGV@+eDrJ7Owh!f-4*<GRK!CB1~*~SWhjRoF62%T+_k&kxBZ_
zd5A}$M+bwal$K(Q-U&01xBR+0mWmG#(m419mdgPr{LAbj+h|vM!6sTUTPE%3n?DNh
z779sw(lcRPI)Yf29BH=fd*o%*(ut%ixnJPjQ4l6)lUNlDbt0%$NH}$Z6%7<UqkBW&
z@5=v8bq%*yb_&(l_->__99^$VPv(asD*Hw=!209zX5V7DQ_<1CuiDyrjsSsEQdqDt
z-H(9ad&^h2O(GVK9^C#N;_9du*#mnDScD9AmF?LxxU~JU$iX?(*cdV1kR#reua#Vq
z3&q-6TVBg__@mAS*IR!00T4C3{44tM`|7z0^0h^c@8m~tZrR^YD(xMgZ@vqYdSO#E
zw^Hrc%bYDViQOtXr_8;eK}5hYoo5@{2mv&eM9?ddK!L!e&xuj}XF@I5Jw6(&RlyqD
zJ_0y6?Nb{|#tom&eqT($f9%T`6k8EccB^Qq=dikio6&1XpLm+`;*2aiqZL_G`Q7^v
zvfyo$O{xxy3q>`<-KH8H^j}!b@%`yrGYAgwNtm?mf-a7XJr(f^y=7W4a9MBUBnzhJ
z9pD!+O}wVJ-|6&KQNF?_))N@~v6Z~=x%=DUmoH+xvNZ?GhZIzF2LmTzN{omF)`X;u
z|7b|%<jslEbki&Qi@;{huO$5ilyzSe`(8Kqw*VImt-}!q-%-2eMYUDtOrVeG#M$`Q
z6U<+(&T769eIk$EK;EAvZ6Ime<*;-s5j_jc!zp<`))WL(``fOQM|~!;CA4opcvU95
zf<M5VY}o1}HUjMDk_M59^e=f&78jAvH3mOS89eMo(wyBtI{hN1JlI>kb)mg1+5&#b
z0DMCNWbV0mQn*mnuOyQ8Y#^h8?OsD2{-DqH<_(N44>OZ`GKbfo)@S=cNCbK`1E7p<
zID<N$VV`@sJCL3t?-m5iR)PRnK}#azRj79bCR=puqhv%@Aw|&m*fh#Ls+l)Z?CwMg
zPoS~nh}0NuK<!4LQu!+C%C0sT0O4*E0viAvzv;dPp}2{qAjk^6ZoB(iRceK~-tRj8
zwX6XyV10f4oX{xd<9}4@C1`b!YMk(&gOj`(a4_ur4(zxLVy1O_Kxe@(DSrIg-2`lF
zdo>}@vd-TS?$AU8C93o<|5|6b;P-%lgx8`LIf~RQhGz!0N;EPIkwh9U5Tt3drLff2
z9jZ8yF$A%JzNWD!zyRB+wt_54KCd^OV#Dh{{l4)vd2EidZI6_$%n&f^bxC-;N|DlI
zcYA`8H%1i*20u8RUEZKnf1*SN-GQ<Z`MS*wiS5<)Qa{7wUj>DyC(?V9p_(yTv#Ork
z%U))!wN6K8bM+DD(#rYu<Jo(hh=q6hbNshZfN5Vw3IX?lh^rI88Qxg5EBH1JvDZvo
zVeB(>CE2Fr@_<f|pRLvARJVj|-km^PQGqa2pCd{Ocou(+_GPHIAMIzOZ^8Gov3uzF
zT#pzA(tE-mK7({epC!|MIRDd!TAkkD?QGwnUI*=m*P{XsKKOe4`1b2%m@32P4J6ay
z?KxV}RYn3k(w;@v48B=;flzlG82$r}H2cysUO!ytCtADnvkpCf*pm=VnXq3eT;`kQ
zCrDVHD=Ht)kW-1v?Q#Q*K-Mfp1IA$xw=0?Veo_M7!-k?oMveitZ<B)FYI68Ka>m8O
zSOKaQbH-xEpPiyTRLNe7Y_(4eipWts+_U0QbP9oWsSJofC?(Pk9qC=c?X46L%Gf9n
zcEz;1!Ksn{4&>JJu&Rt_x!{h0BVKWRGg$+EhY3N-WAfrvumq#<5~!QwrjZ~*EoK=4
zEVO1rT2~8_I@!TElQKf()^#8FiIZ%cQif9GSUFqDln#OjmqgqG2*cF(@4z3e`<X1x
zgcb`6yxgMI-Ii*pW_1sm_URpMI|XGaClFSj1}cRhdTdRmJ5@Bk-*q9#fPw8*pe~s?
z{PBDhIE_^ez{^B5*f!YjfJS<QyR3dTjgT2N@!`v<j$wQFr}KegGQ7UWgnxGY?oi~t
z89IBtW|6(HCg5b3&Z59s^8WDVl0o<WzZobmkzMt}jW%DTF|FT#*8Odi!m`k9hR+YK
zTWE{TQSyaPuKL+17&5$3gQ9MdgrJ`2Zsv7XW1+FBRqxH4h`8oXXt_zA2E3SgH6#-<
z`+1ZdjJyK*e2}&3*OFNsxhPQ<s3_@2+>+Jn6v#1mAr-0bftxpZzn!8}vkOe#(Pseu
z!X}}6qkXTb<A}HUJq0-0z6A|cl$V#colN?k(Yp^s!;ilo1DH^HOGuay(JB~4a|UcZ
zhSZ?u0@E;gpYVe^_a+Y!|1g=P8f(x)NKd#W<BVJ=ebd|*KgAD)l4y;TyF~blZTrj+
zi`PY(^g-l)^xGu%!eYz9va_z}7xYRT1;JHxRGw4Q?D1^Zi8lH2*}}%8nf`mhs@o&g
z07aMD`DmU(n3!lmYv2QecfFMDx#8%k*tu7X*IR4Kp@+wVMPQL)7eeIeKnqZhD-c$B
z`|fAd;zX>)TfTFWvPa>GFPB-tCzJ!M{LP3141=2WPQ?#yqApj@#<A!e=t9TMB<8D3
zo1{9>n1<t@ystXft?F9&bCo3NBLOian%H|S5S1zOS8*0ymC(CAu-g&fI3OSGhEkJ^
zlxj1%+V8n;yzX9bg;bk2dDuQZmi{TN{SUf<YBcwAu3UKI+WF#kB*jkX6pfuG{q;z*
zfqdKpTco4ze2+iDNDa`{-wN))1wDfg=6zLSo}Fe3M(Abs$@067)z`n2Gla*_BPSc5
zMJe1~2JBheD!$Sc?Scm(s5CE5@?62&B&AFEo%gp!dz&r5ui?{FiEXuri)NwJWEbo0
zc^=sx|D7r|8>lH$HqfsfzWDEqZI8D`kz1=EYYTVu$@72Tjy^YfK-3&&l9`dz1XelI
zB8!f}R{7_!SKc&;Ai~UqZ|>7s^Y~M;B)mL@oC!y}7rIoAvTfVFA9*<57Yb7ud1Qz9
z7dgm?tp>rn;00K7+#nSE@n98TZK2D)iGEC@va^g5v&ZEs0D`!I0m=!3QKPeE*RZ_C
zWIdsN)1MoJ(eA-0vsH@NFpuOxY@-_(LK}i|IgaLy*g&CKdv~bvALJ*YMDyW52;${U
zBwLsgH{e^`>&gvrsd(w76#)Aegl`{n(9fJD(gBN?Sm1ly0#=WClR&gz5%c1k3Xv9(
zE|e|AogY2r-=+o#H4D3hu6l|+#0$KqX6Q^_7(%ZvQ+8fkJNJi2`xDa2%tyqdJqcby
zqANHMcG3b2hH0!G-T~hcvJt+ABQu(*S3W5)A9~FQ0U;=dY+VRSz<U6Uy4V2rd#HC_
zY=C))P>9iHCL}Bag{=5Jb${nt#|wk?hRPa?#!onvMcum`40TBEO#6IwHllFI{Ijz=
z?e%nyQHdRgdE0q**k&cV{OiT(&fVVm&(uSrc|2xa1`w)Pw63}K-&9-gjA})L_)HDh
zDk0uRDWQKIeUMiFas?x9hg`t}v9ZI~FaY}VJx4tvz^hIdu)Gy}C~N}>i$Wo79iMEp
z!S94%u}2W_%Al3dI^-|SEaHg3QFE|0RPUF5<JnZM$bI2<F=3Hz$ED`9<m=HE9fDr0
zodMUGrD8kT4x5Y@ezTi@;el{Af<L5~MPpTKN*2+x_8=r186V?30EA*8qacV-e2Cuo
z^Jne!Gc`qC@#RTglS~KfR<-!a-_Twi`>OTmUKXvqAQ(Hew)gUktZA?XGKHs0Ku>Ar
z8=q)wa0vsF$H%JL?zRBg@Q#V*2hYL!l;x_Wg3F(a3W8xp(2G^jG+rg6sW1F?XpT;V
zqe@Zlo1aMVx{GpHo;hKH@72{=(i=<<k@`knyMfZlU<8%F@m4wV{$}!!*dQ88aY;*O
zqKmeFC7*(6L}iG1TgmAQgfPW0qKHrqI9`GjfnKfZ9j{qLR=31mOgTyDz5ED^uAorI
z{qbxXyXV7|1SG`%ZqnlPB^W&AodZJe+AOYz(MxD!5m-H1ZXfUgrA05!U#+>iAa98B
z2L;oa*I6m2Rku{tuaMEK%C)mFo8J~An;d4PBoAx*^eucaSE10K`{Q|_Hi_GVAsrO!
z!Q6t&D(;W(-!V?@2S%Rq{bW`C(_#sOS#JWQW<SC<=pQ{>8>K0lr71=dez%o94mEnI
zxHBZ=aiAm~YnI3u;Y{sbT2lWqt!FVaZSq=N%*LYtT0(dK9iXQ2{f%6ws55O?N=`E6
z=|X3K-lE_K1x-)S<>AoZQs2&2TU6K4IlQ6^6<?0Q*$dU0;FsIGF01A;U}VR|`cfXi
z41xLu+fXHwm1;6;`J~2QfW8kB3Yj&(eWdI{JpCbaxSDrvis~2EnR6UjyE6u%(1p$!
zcn7vI^&Mb<x|41JHupjD&I{yN{>U;Cj!M3Gc`;l>N|8zHpZ$%SWZ^9_`39P{km24}
z&QO2f`swe=#Zg&a7Z%p0qYfuSyOkjQmuPG5Iz-F;lee{-&#%c_|Es;Z(`&$0#ORMc
zSmJTvRFFwJ3V%D2CReD-bLK~T!gRikOAr;0L^JZoT^y)*!|m_Q@(aw9g=(7io}ZOB
zM!!0Qu`h6x6=31i0g))VdSH=i((v(Ig|%o_&{iZ(9M|7h6@Q|wYVHAE{rOWzWj}J)
z(Q!mNuv;dJ6DIqseE|aoiK-gpBpNm}nI%>RmD>i5wz;28`lG24B7|q8^NOoK#C+t8
zRlr?f*kX+<WGaU1N9MDN7;IkN5vSa&*KPfWKWhW>hf#BRxyiw^0+4Y#@0C^u>l?gT
zApfF=CF0S25z;vg6wsJ%0dyc9STDfGJX~do3=)D2Sa8;6%Bn-&`;e=%7PCt9KM(8B
zsqZEaF@Ity5mp{@vha%}&*$-I6^sv0k$`HH_HcF{H&{t_!ypjkxT`20!22EV=-Hl;
zIZr1-8&xxv&b};qN(U2oLK**JGvyRn`(R`jL2=3a@pdBvyz>a)?gzX>T%ie1KfYmA
zmjIC#E4tr?%@a{9HMI6?&OsMLpkroK{c+32KUSZZi%Et0iPycGN5V{f4hWmX($_4J
z5yE9Qsz<m3WO9EZGU#uFO#|PS61>Gf5Ebo?K;GRObY83H=pG-%SwSx~V(y{ZRbX@<
z4dfvz`rYEzwBLU-6y{rF-uWGr!?1t?)FIXO>`2n`s<i^AVh3og*9{00%E8#IIyo%P
zPX@+R+mxLydf31h+OMQ2Mie*-3LQ95<KM+K9wDnJAy^q&Ku*f-rc!m`-NR3NaBrOx
zC-}R3cqlJeFL<>dZNcmt6HqJ70Hne%fAH#IA;UuHi-2rxScAwU=BxIcqD1-}^``YU
zPx~9sNg&A7-~(rzTyb<$go)fj5Cl5(tMlvg^1bYrrUWJD`ORQ%+B|T1q_I7rBK2Yu
zPvD9ZOsIBF?qxX&t)n3Od)JMX*^6iD=x3WAO;wE|UT$~<5c5jE{ZMq4C`T27NxNox
zb~g&nI|4?&-BCT#u&fBGt6#*t*%Q)(-b^;i1|wGOZ<3x8&!2Rkf%B{8YhkyGH7MZB
zqfnX~%3Q%w5vM}Dt;*Jp`VE8acbtl#)=aI`=XVnnqUVR-6NNy+oX$f65?1B+7L_#&
z*1w(NMPu$LA-AN&!~lp8s&fV+HYp{h=!O3ixd1^K)PEj7K9-q90cw!SyVbETspknt
z)whbAcaBl(m)d>uA%P#n{^eJrUL;##JAk*S+Af0dlPJw=5HE*W$J@^l8WU*4V@9c{
z!4Z_#t(C8`gF`iECrMiNEEJC!-yB*AI;;9sK|%fICOjGPm1vNSmhq+)s}~87a+8DV
zsv?wdAGlE&=6<@k4{OkOVI?0oWps93*D>Fr%1Hz}1M<P8#H9ESs>&muqUOjTsGga|
z+uiOth}79+LT0G_Xx(6ik8IYBJ38ZWBSK?TeL5POF|fAV5O15l0NlL7Bz#k&g*-V2
z#|4|&(f2?Wh~A9vBeX7wn(2czS)}Cs^Oqs#spwr2FEY`pWdxV=Vifc?osSZPx^;wa
zMOmV&AF$gZxcV4|8rdV8*{;X3jj#C<@{GI03+fOvFFv~YV@QRlhqBY=Xl5i!%s$<d
z+ihHGB5X#&?={tnY2m!?ly)0~wQD4LlT+Bb5~O~(*K~M*y2c~r<I3d<9}}iffF@*}
zci6K6mF0@|DyIcCm%cvpc}R&yx?%7OPZheZ3q0X+-Ucol$|uY=(3W%ALU4IUKpzSP
z-v-Yly}Dg`kvM#@*HYdp2}NfOEy-B##}g9INDVQ1z8&#i1ZAYGHquQg=P2SafA<)O
zrl3p7^DmvFJ~m%Qbqat}lAZ_DtmF;E(HM>Ah!o{Kw%Og#FQ3PB-|NAHRw3UO&1bPw
zyK!>1lefRqn13$lKNROFF8ZT<8ZZik61CtaKJNW)fqU9<@Z~P}>)De};ng(m$Q?*g
z2?Umdeg(t<+?3e5y}r(aN1G=h$A*CqcZbt_StD;0FIOsS(%?thDA$Zzq3V7mgM{9N
z8gL_nnBCZBaBygo@o%SY%DNh`AqAxJkxPJ#Q*bl{I~%=tolxbF!iG7slZ>yAHvosD
z%%Kcm#O8nP1wD#D*m(>3C%WQplML?y+}2uR#=|=PWD6!@t2yxXo!;pq+)HTMy|O2|
zj-VPpO~mXC17CX@mQ-@q{)o<y+|36hQr-SF>7(o>${FZ+7Z8~z*Z4j<OdI=nr;IW1
z;k*s0J8$r}K<Q_rp#&O9`Ay72VK3P0G0OX!g$8lRoCs9CY`d<><@|U9?FHbwtgKC=
zu^>Y;GDkn&Xya5FeWZ>UFaLceq(6gXx=AV0>l_R`&8))#1ik1~8097J34S*}3NbOi
z>5T)sCVIJ19Q-LtRQI=oij}-G4-@f8l{_N-h{!_+&%Oe4q`IW6kz&9mNe-fZc<Ftg
z!l8p)?q`=MD|6ZjmVDz^Gqkr2#P|b@j%?@u3_m*kps~t)1n@u{o`S58^CnTg`beJP
z0*ezvfwM3(^h__0E_;80vkn}<3$~Wn-DKAFT|7k8p5{&c5--+;x0}papWFx60$Eaw
zB?rr9YaOue*n?4s@MIKn1bt%v*9C_^a#2cRz#tngFxQbF$VP2X*E^}M^J#1P53{6)
zIrx;ETOCF016=!7Z2k>lLw3TxcHbn6hiLQYDC9)xj%MdD`#ZYWsxb+QOG>2BajWV_
zu{0$&Cku=G9~xWh^FPvTK^Iw&K4&X9WWYcjM|E|_%}N}Q!7r2c=AVLa42L7{OCn}H
z0mdRw3{!q|##Yedt=hkpCNpjc39dgWE9e`xNs~L`(UJ4V@O!^N7W^%U$)^Sj2ojOJ
ziq8F9`R(mApFE(^yXt$2VIhGgU^@`vFv{b{gxZaN$C2_q%2_K2iYl%;9kY-Rw)9@V
zJ$vb7R9!V8v}T)L)rxkZ20TpS<Ou$d=4v^g65)~N6Z;A>)=6m*5UPI`Fuh0fEZM~C
zcf4^|5!8NIzZlKuLN(4chNK283aXv3%yMdEMEE{EZ7zKJAf_MmxLD=?DIW|$7ThvP
zMTonuzYkxwO7(2Y08jfqt*BQg&~Wd=>Lm{B-xB#6fmv&dVer*2L7|SEkW2G&kVpX?
zVoL+$?5+v}z2eNLeJJDL#QA-9OmV!{=A@@tyt3Tk;CZ8->Tj#eIjTNo#!A4USD5Ht
z2rhp2vu&m(mA%+CZ@u8x-``(6Jig=lIvWL<LxMX$v8d3N!r5QW``s-rq8tTx_VV`f
zhIawXPboZO<x*3ApFpD4ac@A=A0Pfa$m{4yW}xO88@nl@0O@Nb8ZA?gHzz-7gv|At
z&~KP~DR;|tvD9TIzc1-cDIyDE5lq|g`X@i?3!t{*{$w|glg|4WyvUKl3AO#OC_>4@
z&n~Zvr_jhet(^gm(2&oh<m_1Q3{Z5ah?VrS-YGpsOV(%ls3QaifUd}n5wuf{;O=Oa
z3+M6h`gEEd$K;(Regv6U?jxk;G|31RqfQZ;gnN-f5C20~^351kc!BSev<pxt!1?TT
z^6kGVL$RatLX++2^SYC?G`O8Ixq?+Z{0{p+$={FRA6QxKg@tU;D#l)2@B@*(9KQ6I
z+y9~ItpA$e{x(j7ba#g!oi`yckQQVjAl)Sh(jB8)y1QGtq)WPy?w0Nvi)Y^-p8sI4
zv+aE1T-W<50=c|;(0wpyv#-=|baP&Oym<d@pJob#c-bxYtjik{D<xfb6PqskL{q&~
zV{D-9`8uf2Cdndl*42)5-sDQTw#d7(?>rd(@NF<H%=3b?0Q~vG+Yp1iNm3U0XAaVT
z2-|{-&8T=Vx$9lp)S_g!!NFuRwtV03XC@HZj>$)<d2IGlde?h_O0v|$L?9s7NTb=e
zZO0}%T(72btdRA%x{my7twEc*<)5yoQ;>(XM*=iv>6Zap%eOh^$ZirAt~5S^y6t*o
zu9e>w*;ee%FP#rF7N8Ed6KaXu(ZQsNaZVN!{}#qrImgL@%e>Y6j%U##vfrP}e5>G8
zR8;+2-9Fha@nVQ5M}$?&`qM*P?ktNLP=;FZ`vf2*_V#p(>$hsTdOvl|!*-Xg>Y^xO
z%~{x|%lxneNTCi2ar^k?1*rN74_5+mt<@~5a<*JsXB^u~1!l?Rx=oD)Einuf;ARQ$
zzVIVo4n<|}pKoc0{(6aw<i?VSEc*dv5f3C;fU^cs=TU<EA9@`O9)$>iDyk}PCQa%K
zzO2P?NCvZI^1`ESws$et2il!#_lAX@8)%U|dwcwo-+NwUrK}5!wmYo1iEz!C81*`%
zu8A-aqz^%^a9$DKg6xvPx%ioHNl^jM!Q<N1I?k!__GKSkJ~bo}!-&&B{<liJQ{_mZ
zECc|oP0%f-3j=_Sevw`JToj5J_s<x}rk4TBd76{~&=6dEcnC^Rz<JXn$Z?&a)B<kO
z;HL9lr9E?+=3ee0>@gWH<Gz#-ukb`js%=~P-SOWA^)Z==DN~GHpeBz|W7lotL_mwC
z8A>QlcH=O~#vclkl%StGu92pP(PX=c%W;#v$CtiY_>^AX?Cb>b^GdRa-+opPcwF6k
zz3QwRfB!!1|5*T$xlU-*9|-HNz-W|WcGnv35HSC0M7)GU(sf12zEmk=ZvnU#0QY_Z
zg1`&Sh%QduTGv$WJ}H912a8=FB`9GqoyKbvrElid#W=h9-VMb$00BBU=jP#Z9ge3<
z-z*1SSu)88Vh7kv+qjO8{G@C9Zm{*A=U;681a9J&MXPjSD(}V7$+TbkY?c2K=GqZ4
z>)P<$r(QmY{j{N<b{t|kfgQ{1)iCg-vt}VYKP`{+;3y*8e3u$+zx&`U%p`)r>tBD-
zZ!rbUey)HzNT=ILmfI#A=D2jdfS_-_o47X<t;@2rnJfB3Mj-k8`DQ~r9}!ZJZh37x
zric(R&#{1_<C-h0e{L(9_}$cHspar9MV!pu;KtK><BdZv%Odb3gxN?xDk_>XQ>WZE
z&8YMCJZ<^LXk0$*^&+&Tf^|Jdr;`ZF%*_;1Lh)fQdU>pRm%|=!N^(HAC|K!nTKeo<
z_@82JJtwP>=yeloA&5Zw8EKD{mIrNt2n>hb5TMufJSwgR20`WOdT#Yqhp*8sM-!OV
zZ#^%ECR8^eI4C6}fnRp+W&n<;dFYp;i8@yY6V;3uaPd{~p!aV#6NTLV%?kIpdEYFX
z3c**Kj<sTQ`D^(>N<H3%H3qOd@=3>uAT36h0O*;?ae8XH((q5Z?9Dcy$s9sH+Qd|T
zV=+R0<S;Wh(U>NhzM^b>a7?$sgdz=m*>=18q^DyfMI1uI3IFYSoD$#eA|Dj^S-~Ro
zt{kwrb>F-@c$k2N*Gj8|GLgnz-F4qMaoY{%<ItlmTQh-F$7FB(XU2T4*r(Uvqwt(n
zUAyXiCG{lC!0#mU(d8rO2Qq-Ee4h7ZX431`Z%~_k>yJPC??8QVkOTG*%}YeCZ<)hd
zE3pB`A;Bd!Hg**pa@^@bP`pX$;zxZ5hivEb`5*$0Rf%ta*8_~18zHw8nbkWg;VTSX
zttdk3vgNQbuKL8@2za(*kGL-@Mq(@^cjnm77_m8zM2P{giJ)VS71(E_zTPBq#zSsK
zW!QTe87dih<Xs7suyu7KTi~zbu=c&EWI$9C<a?GbBr=7$<q-6G0kVru4qaemM!O+)
z0HyI7koTO=t9o8WL7JMHf|K8V`T&(+5+VIatV@c*^fh7-U!9egK{UXS2_vWmt7Qeb
ztMJxwv+C3Jq|mgQMKxC7G{U+uetWB%A4-wfD^EGvu7XH79xFZ3iKornZ1l$A2zvM4
z@&hl`4t&s|jchVch<$@F;5J?&4ZLpfWBhWq)}JHLLk>Hue&;ho&W!a;t=H}qh%Zn4
zY(L|%Jp7}DG*dmRe&I#OYo4zQ!65NfN{VHpoD0&RbDsYtyy*#%G)<<ne7v>nTO56F
zEsIQ}+qYF8WDeAlQGi-pk^byXm;dv_-lYCJx4=;hn>l)av?;3Xytm}e4Y(7o|9vLM
z_lnDuxX5IZ&g(c&sL7_T`{}Qc&A8mzkM5Tx5w8MeY!=X-Z!R{D<+1r+i+b0Nh0Ti7
zvoo_}g1G?WMjxw}k0Z=^Fwc#fSM%m|akLx(f5nSOO5L01hlij2&r$p1@0+g(|EFM$
znKT}s>;IoM>M_mWhcS({lh^UV0S0@{^;uV;T)4Gk(?x6MiLI?^bq%^%9~txV*JY6a
zF$ew4(3}0Qd?OJAHq9jvPmHx$A<!L7?k(hoUC0i8Jv;avVS)QRU*=#yx#}8=Hj&O(
zo$s|e6x{}gdF<I+eGsSlOoDvJUJ2iw|M;K0DY10EXbKFI-plk6vBlD<e>uvX*G=Wn
z$Vg8(f_!_~^1WJ?jE2pmyi<ERdJa=iuw6F(>0#rk!z&{nr3b$u%zWAc)md+pa#K{e
z5TAnbVF)6p;pOuUNlfI^1MT8W^^cyzqa@fm{^+R8dqoeoS+QqSuzTB<&lxq1VQP&U
z)+jAbfIFnl1p!>p;Wm%pbKdRW2y1t6E0%A4Ob>CuWN;%?pZR$VxJ5Z0UDPo$atr+K
zIh5>&MupZ?e=%7Hgov!st;#)P{g{Kjzi8H6!do^m`P(BmaxV`-#8^^0w!^}syPsBZ
zpp#7Y2(N)8O!@H2Q3<dR*vE$zCl1c&QXTmz2WJltxDs_|QKEn2om~zeib^M=b^n{_
zjr+3Q3w2yXKQ^k*dZ*lwT?QXnuyLD|2L)5-I)iPwmh0-GnSNrw{#X@F)~~SVup{hx
zg1vqO{8i#U#Ij1Fgq2l*JgA#VUUwDf-n%J#ZexU*^w?=5<T~5U7*OqB%Xoz(*Gzba
zs|8Sld6U&aW|oXvZv^ulesr5Y09*y6!oM8OELZkGRTcp?>$|Y^GZU)a^4^ka2ZgB;
z_(z;GH5t+eq#WgI`S|E*iJyr@dqvF~IfiN9S|@R@p?L*0HIyL^*Yzcbbwm~J?8%Iy
z6UUDV<g=|t>&=)9UKPzYGxRGV=q1s|%%~3sbH#T}{Bl=_xRlE4XJ!|-2s{AyYcy9a
z_w-*GqTei{Dpk6lzkCUfJ6rrS7b}dbvtk>}_DA8=hbm=(OG}h|Vp;?6Gd5W2X+y|n
z=z4dRD$^_It<CkK3~AU9Ts8#L#&PTSf&}jUY7FhSkE*Kki17A~A||<r9X#srzz1sN
zqnpb8qg+v-FJfOdaoPTTe$Dr?$Cqx3ExcAJA_B{rR-OR_Y532o)GB-vMVjmaV7fku
zFkrBANzWd;74;n~wE81(IP?w+WzBfo(eDVmktu)~&CT}(AUI6#^|DE)o95pgN}^KJ
zeR|CvAALA$8MBR{W<-E<hORO1a5!B+XRE_J!U7&NkLbLuIl2P}93O|@lJ_Gi%33Qb
z-XjECe^RCoAWBCW@1i7~d5oFOZ2D%W70H00$!j%)=?HWDGRKYm+>Zd$b4qrAwnRvw
zxE>L>k@4m^j&Rr1juVOOBtBiSM_eh5`)G$(n>}8+-UyCN1@hf@?-6UO>b0OYHO0P?
zI-zD{y-6xP^-9*MG3gD+r2Nc@2*+j_C%W+#At7O~CEMLuz?qTWe%!d5=E|3bvWWI^
zX^*nJ0bqvsNy9Iio}~36=slEwytUS4E$dwdr5j;bxnItU)1mrbD#+aV7^)+mRWvd`
zt8$p5@4t=Z6N9zy-*rQe&4y>%o%cC&Mz_3D-hI_KBp#dEXY8;-O<z-nDSuunn~YaZ
z_<H|bilg}-CL$U`XSTM6=XS>5fnO7=DK)DUWI0(O@UnWcO3VLCCPzNNhuV3?OuSd2
zJ4p0%nq4H0K_^5fSkUi5WSP{JaC9KJ0E@4mu|T-%AAk=wZT8tPc`k`t1(dwWVbnp*
zb6DOs1LtI6YPn|+{oyxv(+kt4|0TQevOQDRdoZu6`ycL`ISOvw+1VCVomgD1d`12O
zqDse|lKpm=R^j*M+HnJ1-FheFQ{JMOy7EoShxkkmG$ef5ovhPsQU<M*FkUsd`DEPm
z*qFv!Eu@v%K1<zjesECE`18sX!eRuD-G*MqCB<E=mkYt?ULe3%3sWi67as)hX)O-~
z^R5Pfzxm+V+e?Dv!SU4oU!-qSPS=LRhY{vddKu_e2P}h!svAE9Q_f?ZXPpZDpzyQ`
z#7`r6vGvOE&2@P*d1>ptE%7sxA?w&nT}26p%OA%&?k&(Z)CD4AvG5qNAJBQ(`u*$i
zlqm4^b=}dTAZU6X5G{xAhI90-xY)kf=jrrkKyd%dW4tw`|NKA5<h|NbKevgSHH%Gk
z!212fGt}X0d;{#wna1ITavzw$#S#FAxL!<m?gVQye98{@QS;99;}^4GSf`9{DrZFv
ztOV-&2)DyJ&Q$-|oWz@?s}9Ff8C?&b)h+wQX1eo=A@t-_$2somg*As0<R`haY9Rb1
z0;)z;@&#xx4lf7%S}q_o*)?a*`e5WNKL{1W`iKABQYj@;>K1)|n%#1%5jfX#OWWf@
zWLZlR!Hr494|h5u+|M6_|5^l8WEbfeJ6p~5yk2Bq6Csk8?+NCEjXV`Pim!qQ0w%Kd
z97FCqpq_2%9z*BWd~e-vPSV0VEJblsq~RNP7t`<IklT1^^UmZPxRbe*u!R)$o3*qS
zRo`nErmAnDzhf2*mmws8PRF>wq%FL1)azL@>EHm7C_%fY`8FRekMmJgc4yb*2l-u$
z#%g>mC;SiFpE=1<av<o4<u&h%{#R`O<Qt*|-$<rCg>V9fyt{R-I_}}fmK&8mKAv|`
z#;%LnY$ues<)}}}8fGg5Y3kQ;WTd3>f`Z?+u%wS}?1^;hLY>M$0RcZ!9?QbRUeLqY
zhwsg4gOaThQgfqhoaFx^jL2NCJ979_a@kk*7O)=Zw$*WNDh!gK1g%^ys{+M|K_WLM
zcza_n-aP;Z_;`8ZZdpuHQVD{He&qi$STaHTl9cu548C;RTQRCNeZz_i<xb|G^qbT%
z{|u7W*TTq#l1Nfw0hLCg>!P4U6L+6>7xcHjTBoK!HDBVznY3Yh51}=?XC`EsvyzqI
zk;Bv>$n8Wmh-VJeSPdVFu2ODk{9Z8-jzg8?kE>(R<S37MBMpZ%>EmXYRS^{RVfqr6
zBC=8MXc|593bWk3z&0EF_+GmaL9seR?M@~$u#O-717Q!Fou0s})nX+@+%rotU(<up
zLD#E}v$z&AvWx-?Ecxh`5tlqf7DY6%+A*?fXdi{D+^Nk}p7wH&|2jtxt4*o%TjXF$
zbxGXRX9E{Ok1=qF@;HVPoxdAz$Ruuq=}i#>HDcCZ9z`xe@c_R==T#@W={OnAj`rNL
zvN=z+VnW2pHBc>-FJE)nmB(e5UeqtBXIe7!*913BOEv|n((s3b@{#QwS#|8S>5!(H
zdtj0sG4tnfidv1o7a4Ly%#Hd4E8k*%wGIj6$nTek*2UZ;a;KcN=|EaXF>pS?OI3CL
z0=<tf^nd(~?;lb|Sg8bC`_6d@^7=3vknLNY-!|NPHe!c7;Y<2GN=9BuexmQu>(pG1
zo)zaEXe53{YeMw6`(FlsY<8ACoks=H*uYuhBn6-1RFao!^twB!U<iM!?f{#?*7Rci
z-F>{-F`FvQi+L<`d=@oMvB*|q<%N6YC7BvOTpt#r(9`dd^iFfD*8GdI*reL3|5Ksf
z+i$GT0n<4h=rQEZCw$yBI=EJ8tGY)DnF8O7&E|^29uRtCT=F-qbhG)W{)U_<lZDxq
zP$Fdr;;;N|l@)cO!4ll**t@9u&Lr?h*UfNIT((1+HD8>@WDlofhSb>v7;F3k;(cqr
zVMC42+(F>8&;BRTl=I$g*aS8IdyE=ZAJu1=)dd2yc$WjCwlqZW5uj@#-z}PTjE(cw
zQC0k6Db!e|jE)l2!sRqVxavBp2<iN~Hs?Mxm`>+hohs%E+mWTK$>CEotAPH}xc^c1
z%ss%t*lf_EQH`nRrdq{)1g7NPqzb=zAs~`tQ~hjnjUGpD0t)j%oml92`j@s<tOT6Y
z68;`b>n(pt=eZT69q?VaOb+REn_eiDw|6g^xF=<n2(-0vMPm&TK{Nrck8?rLR|^A<
zu31?{6WDWHaN|x%p<N+|aG2cC&%dqw&+I2xH~s8m`Bu0>29_WjFM(UVyVL4gZppn!
z7O_FO*k0)4x=$BJotp>#jWfRjnfihP{gI59%KiPq^k^^Y!`qA~o*ST;nbr^X$@|*}
zzDMPnGGp~0d(j@6i-0m9En?j)4?@(ceELrd@Vl9nOVTE~q-ovYN{@&aK65Usu~D{&
zA4%tG9W=F_mF=h)FI_NhP!m5*!cUzm>2AUCjo1#43JXUWqn_;mOm2sYx-br9Rf#v`
zBMB+(eSqQ2V3v3>=H=sFL>u1ZgP$Jse)$V{JCtfF<OW5ZIBmg>`yp4_BK)*rieKov
z(s^N|w@0EI?vLECRm*%v+za$G9CmC4AxL#ymwwZZr1ZP`gT^1cr-F@FL2PAGzE931
zYm^f=SQmAtlqrcwA-8kHxOswb(A~qi#N>y%t0l6-Y8xOK^)S7-i{&MvH2hAR_*My^
z8Yuh`IrO88{(*As{rHFO@rF-BI!)Hgf`>j2r<to|4m72dHiKqg9mbGfuX<^lAfs}A
zthwLeD$kdlS4-C+e+y(oCcl38;0uR#`Api?9oj$O;&(7Te*U{p`L7zCptLth-6c?5
z`gtlF&=vrLpyS1)bJy-iWWzEJmrGSC$i4h3xMQ|NY`>i3`JOkBI<NxSnUdxK!K;Ul
zp*GKEPM^I@rgQW}LH)rUKQ`ym9ydQc5d4%xZi*L=v6F6<CnPY0r9!s#VVxKZLgKG0
z#~-J+UJ+2j?{l@n*ZXRo%{Se?Ps27i>UWEjZeM;E_|S?Sl4Dpyl<TuD;=Z3Ds(NOj
z2WG3O&!*EL-XBavBig91TE`F9P?9JUKeIVv+G;Wxfh^Fy#6JjWh8;Q{Bq|+jM1gJb
z!0wTX$@71D(4?&CzApUxD^3$q|Iu?tv!{-6S<v6Gg`=x+d$j#|zqm5Ucgyc)^|%Ex
z8ft)6zj>0??-3a^S&b%}AmHk(5+f6i{?A6SuIm=t?|GLoU)-KZV}^%tZCCCg5QfTs
z^wWGd;hhz!3El_UF3C4ghK=D6^!&(pS{%wp(66#$j@hv3oqcE7F_686BE2`OG#XK?
z6>r~Hv>2M@8iVywS%2Q+wCfzLa#Mk5hiEV+16y%A{PC7Kfc56twdb`K|H4J;tlk0a
zkUS<Uz4!gQ^oDMF>R+d+`*g=|AnBG`KnQJ(0**rnO{IOm*DPKwPjfGpIe)H@z@;I0
zK`0Dy@T#lZx7rzw8^wZJobZP0c0sG~ei3b0(yc-jOfz-jT=psE7wA)WKCB8ETQ@y3
zZukMC^|rz~&L8DY$>4l2#P_P(aT8IHC-@fcV{)8_;S;Y@nQ#J{%ANiWl07pb+V}2S
z%DXE&5p<-|O(CE~ZJl2M;FEH9V(RxMByZI?BraDhL_*l!zZVs>Uy)r+W(OJr@gt*F
z8b;r-=O;x>x2BTR`y6H3aPf7X3r@Z@7Zr?bxC8Cui57(n>##kJy_CZ!GL;Dl|C`&k
zG-t&8Zxqtf3;T5%%@tq}#O8lq6{O87X8(M>(NLa~)n<L6|2ad__o~TrX}WWbkwJUk
z*p<S_%UK*l=CqW1<>o+@TU5TcDbzp0R5GoR-ebjV;&*6R*Dk9J92vDy61J|n^{ZcS
zPg~dg?3+AszpBF88}{7K*MBB6a~7?FH5E8H$579`+l|V!(AU<lx=^Ldf9<J}gx{eI
zC~x-|l;n$@mTd6#JPS@^!iF#t|DC4^{8Ka8(AC{@CGlfQh&`EkQoa`=!vWwu;0d@D
zEK5Qsg(g*<5|LC3qvND5b#ax=Fwm{@=-hT-;>qj)z0}BFQR_12gc((VvkAQx3PU$p
zboH$op{Wq8i&!hUQc1HEmO?{pVZZ0d!v>6>vbN$YwiduUzK~Fy9z@47)z#Iu<+0we
z41a91WB;|9Chy`C>j%Cm7s<8&%8ZhmV&I(PwlP7&h;dq1tqpjp&A_0?F?MP(`N<Vo
z-P`3~2A*94x@OrgFURiXaZ*-R-oGz2Gt=`Kx{oha*w!6;Ey&+L`U$)z4k=7#cU_7+
zd`Y``(U<MdSZmm+tAn<H5o2;+r{V83*q491Ea5g5@7!V3xDXYB;exq_cfDNdAO8zC
zdlqhg1fNCYzduMYEcyc1YwD??@xRSTC9CGj_-)B(QDOj=zm(1G2aEv1OPyYHv2~P(
zSBMi2Ag)AN$ACk9g>YU*$BOEBBj>}^@4A<jfHOSqOs*l~N<Wvep)LRBlY=pkA<%DJ
zB{F#=Cub%ewHc6~FAM8LoR4#KF&48fN_tp-#Ft491^xvT23qcQEIQ`k*;NBt;ylD8
z^ZqTyQHGgJ7Fl4n5i_<{Y2uCqw}8~a?BI33>_PweYLneatc16=_@lC`A7lP5Fko-2
ziYP;`VKL3%%kQ0LxTjCQ$GT(s4TAgd*TuD#&T~cJ`;(N%@{Sli>bcF=r)vg!4|h&~
zT#DrtL|;2_pjO{INJKxBay{e*OXIk9)Q1;LnRV{l$S6&VL1VkNa~`rkWMNbed4*a8
zM@0y@od?EuB_P5_bPPhG`!Xv;NAg^-TP2Nt{hb<#ol|+*FzOh@U;o|*5;_-gzen7S
zFz4HY67WdW`5`MUTO<S=O5*BzCvf@6G<3@q4mJKN9q|HmVMaM^u%B+!m@oQ)IHlDV
z3S+PSQ*l=W@#qTx3xj|@$9v*eo7qN*a<S7sdn_Myz`tuUyq|a~&z%LEvaiKdMnfh>
z4IM-d6Q`ovUN{U4JN=V!`M+AXIQOf#>Nxjs*~f!azk#gW!GQ^!f0vigEAn;r`H5O5
zJ_`{W{zr6pmSJ(H2Xpz{6HX`0eH=9ge7gw1r1Sf%E{f~pjFek1WD{T<qZv7&Q#UVN
zFDosbv?+CRnMCKYf*j)UHJ;A>uf{3}!ZKbdKVM7w5tP;oY|!~1HnuV8xvmT1vVOVw
zLPRLICxmO?<AVOke~{N=p-x}yvJH{}E&ll%bY4|eWnQmz{&RV|!Uu9Q!euj)cYzsJ
z!6P4wW|QY`O}~cv1B2q==ty3-&c#vTnviA{gE)%qTO^REwsSYUC0_cL!$xo1X(t&3
zwk@ZK7LXP!tR3sbo$!i6p?8W4>tvGl`*(smggG;H3$V!6B%Qkm*7NaYVu->)(b3To
zj%5JU?tNO%7qX0Zo9RO2q{q036zdy?Dg}q&OK^1h&Rp7!RKO?sdMc#Q4~tMjc2e+8
z$gF%E;$8YPX!{P8#O_D5(qAEbwT1U9`NY0pv(@ucn>=s*2fjNLuzT1@mC4AX6uZxC
z(4foP^%{gu(X*kM5@erkONv`Sp#XT^f#UDQPq;4|>j=27X#rL)+*!r{IDUoA9o2Lm
zOE<sANA|Bogij}?-ZFypBxS|%Js8$NxUH%?OU&4R4)vNvN%(s0@%EBf)?&=`mbaaZ
zDy3-?qd!FOHBE<{<j=x)Szef$OYhSw#`)81b#Zg<qZQCBVyjhTL1L2dhdR)&fe7kH
z9odoHGu?xFqCr=6tJj`sVBe<O1Hrg8eH-P?GY3KHH^8PESovJp&#Ch~dLm|lImZt;
zr*JaX9seZKEwkDT14b&m&BH$*8ptzH1|iSye7NR+i_Tnn&7;s|)@7vm*!IEZcUjAA
zgj(h}sPdL#NvRTCuJ@W<1=0wsXd-g#4;X)M-<<Q=H<PjE;6!VceF-uRq$BxGLHw^>
z1rT);G2OPmt5-<P+AEf#v1j+3xDy8Gu7{o2<UKYO{#6-(@gVjsasZlKC&ghMIR_42
zW3TCniJ!Cq&shHbto*&y`)r}Pb%by}1pWv5cLAvVQDi5PV1=q@2sj^lL#QUDY;K0&
zWDRw=&WLA+FyFFDzk2dX!u=M52JsF1r7&d2zBS-X_sWEj`*EA-Z8@#2G*pX?j)=)<
zL!NHJ7<>nR9g#d7<Nnt*x$1*C-+#j;khWj{m?G~8hyJp=EG}1?<6!N>EeUr{kK+RE
zh8^3!_xY$mv_~$KUKFMfMti8mVGYr;NQieE?%NCmZX$A>8i#Mp+)nnRSW{jE`Z5y7
z=Yn$oJ=7dL%0e8{VD~9#GriY-Y#1;01^uD1PJrR@mNT>|oc~IXsmUdvJH)?t2JUdC
z#5N+FwNW3vxR)6jY-wSyD~^}LXJ$5veZ9u@cZ`!|Xbg=HRev01<dK3npwQXqJ6C}D
zvH7Qb=}m_pbU0v#MFK~ZaU=8o?vDC8Ees5O!4_OmCOCqnwnS}j3U(E8?E5&XQLKL8
zL$6GMb9#DeUY_eA@%CQ(Iq^i9%{pU;t+A`og>GBuP+j7LwI*ac5X#2STTt$N?b3RQ
zu&5)O&@}&NF=VbBb80p@v*Jb<`!2kuPu5|$xR~8WWW#6u*B{!0WcFZb=za1U2~f;d
z0UeW7G!KRmHR^#{>xH}*lNiFdPPh%2jlWXCX2fDfY?yGgX-nkni!tL3e)L!wv7O@e
zY$XIVsb|oQeVc~;_Ws>Z#1cQsBz6HO!$;p4K}Ji)ga_*&-rSEW%k%bBrTubX*hI*e
zq(z?%uT7szhBb4NNRNp2CRl=kj{inVq!5u&rH#!0+F3Gi<dQy^m224AtU!D`&6O8<
z{M#1+U{b{MPlVHt=#>_B0fK)$d|+t4+p*_v;j-Lp#(dmD>E3vsA>g{<Jo2kzIPd3e
zK^A@hV%7?04YAh(6+}F%;~xTU6FzMaT;6QUf6Y2cqvRx_X@*y5aC04<YV-`7&wTX6
zBKobE;2bQZ{{C0aON3Tej_@gKud${%>mEx+0AtKaU-UjdQkn87{(^MQ*SkM9`3(+?
z8Zlst&%oDifnsyO>TpAO5&dA{n>@ao?GgJc1lwV{JGYpAFqY#|C5Ews5Wa`Q=ixx$
zM|6`iS6(xOu%Htw4~#G=w5-6tzpONr*D|A;kB-3v)L(+jU!>s!IA`AG^^g)d?sl@*
zvahu!Ba4A98Fb_GX9o#+i5l#2178BTK<*D!BVwb+5#ts)sd3N`6I{zWMFJnRoWyQQ
zNbdS)WefkFh$KrV?(9<uouiT-e4wh(WJ85q9r-Qyg@i`VG%{K3m}vFMYRq5@-GH78
zozrtY^<rhquyJo+keSDTBA=gzE}x-vsTs&4t@_}mOAk&Tb!EA1lfxT0cp3gH08xtv
zWTl5<6K4KaF4%R!BItdTdDHCIwg?aKE-(4~W~Ts&a3Vez1m=xAlC9nRtMEMZKs)Wy
z8R|@dNG|z};!kWZNd@%47V^30NW~d8{f&h8wxjmZgbcO$eZzvfl8<(+=Nmd4Lp^g+
z=5@aBY_=owly8iEZh)z@2Q1PM+oPSO^&fgo^e5^P#uDcLiJK<|OFk>H2UseUN6%ey
z_t{7*QS9C6QGIM64MFktyXx;cydfDi7&`V~L5LnU)+C%hfPk-j9fHi_CjJjIA~TW?
z_Y$|w0M0?aEVrra?lznjCHctxPK0qNK^wV?jg9yDiYLT(b8o-|0=)sjbiJonj|+P3
zLQeA@!;VdK0ro5PhZ{7r93iHfe*qcqC}SxFHo&`m`7bY%5{L+o!<7_WhWRREzg>m<
z!FMIDZzRUqH9!lC8e)GofkM#If(cNGit=YUJ8O{5JBHH(m0cmwO?+JMyVnWQLJdnA
z!)w6gNFzz!rXwf3bUdF=Zj#uo5{#K<+I@~Q1@eV{U)^KxQv9WJMVL&CvMK!iIYo>&
z>~nTy<>Q;-$gU@GebE)%86iu!8o|;2SUU;vZ&$O@h8>E&gIL0-LLth*f)ET@%3iq<
zeBw7x=7`C8S@^y1Aez^a`1EOicZBSrs$W;Vj<+9dxc-BBH@hN^E!B<{8(A6^V=NzY
z?;tW6d47xc8Q4PHfs}pi_5jT(4k32Cbvi`Y1|D22ZlrWsZ}(LBwE6l~z8QmXA?+<A
zf#Iy$iz1Ipbt8-`zWM&%38NS{bhb$_Nw1*X@A17e(g?{l_9MN)T)voApq2+8K_fik
zre9{3-lUi$OD>!cNfP{zCE!1zcM7ewjg2>F2;);~DAJ!V9}UzGu5FKNjXG=}ky#`m
z*DQ!D8gQLh0*^stuZA5~UWTy|+lMW1i<SUhGAY$SRrwqsS7^Dv@TXU?M8RH0z*>_I
zumn(y-mgGmq8qx(;(*}9H~g3JDH5-pr@&#|!<MccPLGudTR9tj3`TK!qL<q2$(-Ba
z!5yzPOw9n{=0AF0)Pam<j42QQ1jL`{>Fqv$N`jf@r@+2*aar`jH*?Q&TzHN^^=Ru}
z;05|2v%I4`L(dIorLln5i~Ri?fu<sl$qa#Ner0n@bx?ibyMuC7-Ibk-+x+q9M8dhz
ztR0dy^k)dBI!DB{-@U+e$s4L<VbkuL#bpy){=ga9=8r>HTcy4dr+8#eYYa`1+Kx!9
zZ{Vvon@GZ5{77GX{eVi3*n2-cwbnL<AAl*6(G+rm#gvk|2Z*=3&|HTZ9x(9ro83dk
zoW)l=@j^L5ZxX0prA|%%fqWE3z;5m-Z<mpr3|5rri*AYmq0cc3<2a)A?=x(jXVW6j
z$gY4P(=^0!F)ijOPF>8D_87xOw|%Ou7puIwnFd+P_)NA0bL)ixA-?(_C=TD3Cu8>4
z?I_WU3sSr`nG?U2AJ|4EkgoqB2ex2nYpylw{PxJ}Ep>a%@?Ga2Kf@ZgF^uxDoWi7L
z_=^JG2aVlduMQzzE`G629>xeeo$z7g^F|+n{hL{0({4n39`7hclqX2zLq!zPVECiq
z@oH{_ey*p?eDA*8zh@vx()ugdLa$i5FA<&YVyV~$q0n}`KB95d+W$=QcSbN-gK>AZ
zb=cVVf-mFUw~bD>)10zyxkFi&fsJV%y$&ro<z_f`j_%b20DtP5femFvU6ZyFWE}Ju
zUCd$r11ryH;w7Gp&1Tp@AQHoBg&O(#%?+yBXk+dlNtn=#-P;ZuZreA}1nK`=DLEgX
ze%}AB9LcM(@=Gv4D+g3&?cpqs$@Akk-k)y1&#?=q`loF&ou`uBCo%)a%NPS7H0B<?
zqw9oDgH%bB?#W1wU19eFOxB-nxDqcx{ud$-rIbVrJ1du;t?M!{?EPWo5~s@=#1QYs
zad+)!nW%UbBvWXN)%}07|C^r8S;V5cXwSr?H3rI$z?#@!7_UBrdBG8@gdNX*@^_~;
z%qEHME5;m2S|od#!0$528_4~om8SzLhI~yD?`mP_hTq_2&nX*cvJKn;)epc7B;{ht
zwsz;DL<QoWml$tLL`gPk;LZ{99m`G!bUz25EwHWUKPK|4gE&^IV8R7BpAvetp<xak
z0`5>F!5)<n{)K$e!rgy#S(*Q-?v|g|Z6uC^IH|cAD{n`zQK>$7e;{votsgElse(DD
z$$A8t5s$}<E+8(!vx~b0XxVzJF8-{G0Lk#Y5*~wr#b!I2=JEPBnLkGfg#};uB9mRb
z&O=i%(G0dD@1O6STkayeBI7mXL#}#W<M`<CIpcc$exLni@lnJe7`m1WR!-;570?_h
zBHRgia@Xg^L_%ce?p}UBKOUe$GYlxIA>Tzq8b&f2#Ruk5$+7+*{9m%I$ahZr)smNR
zB4xVM8GetWQZeOk_&M_WUbkcH6r+KxUx&*bMp=TXqP)dSHSL3?{lTo4rnLQeO2|Mv
z`}Njt>n1#UNsco%ZoPrV(o<VXN-(4ecxrbxtK;#=-s2esws34*!M?Q}nReq|@xI=v
zNjC{-n3_OXg`q?kmC`TgF>7Fb8k>)^47UQmy<VJ8t{PslBZ03A6R?EK^OM^?<bP9E
zquc)F&}wD5<j|8|zf~9in{u14K5wmUA~6-B-L6(iIs!4jB$r7(ZMfppPbv!$*K6TU
z&}}XyHi}-vzR^&R{RO_i$sQ$aD7_c`G62Pb3dGb0sUAef*n`Fq1VBqf=9Gjkk06$<
z;)8eW;f`#GP(zys=`pkLkG4&u$)jSG;DU~h)*Dwp<YTEPnepMHgD&=GOff2wfo5IU
z7U*hIf7)96D~ia|it7Y4Yc*eSk%ls0duYBT`Z;MP?Ver0GV+Yz=F{61aD_$Oe3G3b
z9J~fzsVt8((lgk<C1fk#<W{UcG+|Cmc@@EqD?*a#8++!}95v-<_(*OcjL}YT<R`j3
zLmXTuzE`IkC52Lnu4`@et;vOx6_)MUk4tO=N(0z;Ficm38V=I~Or~H}aTB*O*kazK
z@B*@0XDa8mhT9RbglI`QzcE<`aM<}qh#Ua?uUI%{@)lUInp>VD*ecmST_u*a*Y<r`
z8ayjUkox#<>~MSM4eV^`t1z!&dj&GfXQFc+YMwr6mm#Tx1UVNB{0-^-gJh+;EC8ry
zTVICQz6yNIFvpOFJpuS7d)7CAC>s@Tq5fMXvs=hbe;^SHk@M|jNGAQ2aKxT7qWg{i
zEu#ktf)(7O<2!^kNglzT4s=Ag#7GYj`Jw|@Dv$As3&F|!O=*42;*Wo8vTvtJv%}t6
zl_a2|BBKqPQa+Xmi)8$s7Qf12Zly5o&(vEn5FU7=pYaEq+CHLRs<ndJeRF;-h98cA
zx)`n35oLq;x*=aupEKAf(Lq?(z4yD_PkSV0x_}8YJxR`Lao3~MmYl?s3znJ#Zi(qk
zIluE58;y;Y=H^eVs^x*f^t(CzwG~X1l60`ns~!^}^C6<OJk;WEL^;H?xk8?CJB;`N
zQ_?NkB1y5&A}w7bpuY&3YR>47TIvbcZs_V#TM0<R%<Mo1p(NmKQ{U<N&cSCZmNKSz
zRRHuT!_)n&`Ip8tCkIZ=?<F^<2j^$o@_mw8+*C({^25zC-vQTCVI>N`RbLUgs{h%6
z1lW8xR{RBf+Ir=Yw1Iw<MPVEy7Q3iLJOb>*ewKs+By!*+=Wn2`)_x{s%6cKW!5Xnx
zoD(+c*|+<>udvRRK>~&#46>gnK5sYj)0#NLj(Ej%$r=(sr!@TgUz#+j%-b)Qrv?s!
zrjXk{CkQE2U>~rG^M%L9Q+&xaR_tShY%9adwV{8|MUb!MmazjU{&7&-Bt2aukgswP
zF}z|d=@fKx$oLjs^4}(_ob;J448h_fLxDech_6$}4)9)Tpo__|jIBj!u-H=-6VU!o
z&RV1bhn@d2VA)l$lfSk?e^uo}XlIY1PtK7)59?VWK)_2$j~x`Oi=XyK$X6Cb%8XsL
zq5_@(syLhwU=y{J^d4eio5mepjr=1xMf33bSP#NBAs=D00$Cqw!HVA`VXHNP<9FRE
zZ!ry^k>K>QkBcC<`$O;eD9~S4C)53Rh_=R3H`ia>T|YuHmoG0`{nZ3Qm7RfawpRXp
zq;u+a2>ePKty&h#Ro;Hux*!zJcf;kjBdcud<rjM$7)FU1zH=*vGcxvpKHFhw%z<`l
zmQtP9i1YW2OsmRs_19l0BpyKVgGBC+2zv8-g6Q6FyB{WTi#TpA<u_F^(RV(uwj&m0
zE}IpOFhArXKA_&j3}58!9~M9_e=s!Li(!|MVV{H3$K5N+)$reU$mKFjy#_}OZY-8_
zP}4Nc>qX1{PaXbEF`_)ruj>47gT<ZmhYIFh<~;DHSvW#iH$-6^{S9m(L+m%r>2*Ih
zvNrkrO<#%Ifp<`_%8xdBXJ3`Uuwp3wBZxgP9%%HeB)!MxByBoR+==g&@iWL-oGm6#
z?qkB@U#+mYJM3n=@Wf||v$^8;>7&t28T<cjpHuU2kH(W;OA|Z}Bg|hm3Yz!!E34+%
z^FOH6l)@GV|0B?+&!bs{H_b@z$0Wj@u6lX4eOL?}Tihko(OYY!Ee~ZW)*afqw;~&y
zJ)f;1hw1sti=r!HB*t0%z0uTEFu_SfTRhOJVAnUAlF_-<qlw7nk|^kjgCE7tH6bTD
zfkfv+LsuQn2+QD&hxxstbrWM3bU{dvSr_BmYj8{SRm1(6%oGs((MGZ@n7}cdFi);s
z-#{61xRPEi5binYHFlFFZ&&60nN#3%>v@SWL%8hRlmkXo#u}4oiTxXfiFXY|L8*W_
zF}*%Dh`TK^Lm}c~yZvlvVcn)KXx%(?FN*GjF8u_Mz{X@?%(9=OhIt?7YR)Df4lV*f
z18G=@%Wmci?LmY2&~60Zw#AH8y7XQ1HUUYKtmrm39s84=<6;@uu?jq*Rl0VhX1lrm
zi$KF?Y`Zi^t!3`kCdZ7u^*wzN`m1A)_pxwUNgYT`NbTspf%rO|CqBR8)2ju8`VrNa
z)^G3-0{XN;)GR+JJR$<tXXRJ&U?>%x5)4?2`B5=Kn3Dj<!CsLjb>dHR*Ga*YE`-H6
zCCpIjzD!IFQnD6dqo{RQEG07Oy*8QBtA9a=N92)I_cW=+K31ue9u<PAUWc)VD=1|+
zaa$Kp<!~8vXZ9l0dsm)KBJ?APDONI3W%GuEsHO0Q2MW-B_wAOu+VG;bW<b6T8m#qJ
zWf`DFE8+U1Y;Y)Jrtf^kwX?I^u?1TkH5B<6$G-PCU+G%j_G{X7tY`l>TPWA``goD8
z_vK5hHu5SFbl2^6=vK#I#7F!$ETX~;8q$4TkE1y8FjIB-&v6t+$}`}gM0`q{tb^S3
zkd{b(?G83j7VN>nc{SP0xQr&SgX9B1d8-{^5Wea5jKlj9gY-7Cd@!GZb(5jNfC)n3
zEhSXc2Di?YAYv#PCTLn2fDu?bFNv;tilJ#kW7!q|oJ`L%9?S>BHrSUUA>5KtaU4m4
zL!tshX*DO?!ni@aL%R!d)0+SFUp2p2PbSB46LSxqf0-$MC*4M5<~jzZ08L$!yaG;z
zG`rHS$ySRxAJerU#Woo*{OvBH#&1m4CrOt|C7`EITJVBxb13b{@OzUU+$KkZeiP)^
zXRv1oID}+nZjxsSfXgVW`KpQ1&QRL>k2cy|1@>%&4X}c1!BkTL+Co(^y7anc!qp)E
zseY#pE$G5WsN--V-hSJb-Bz@<g^m#X_LhMRUYTo*&;4{deh`$o7=LZ;n1@>f<*wse
zFo<>{PffJDNP3RUws^zotOMsVC-IgEeTVbluFGSgHFf<*<I1tUNlyA3%kEvM+~FJP
zU4|z<)YJoOz{GWI(-c3ygv>x8$?#T&lKPNMy`gZQ8f7=lo<@VAj1ZJ+nhK>6nPYV%
z`{mE1gooRzO6mD2Z3v+;Vu_k76KRU#M4rK4QQriIo7SZY+avu<_Qr7*WJD`~v@>Hv
zUmw;bn*Jw59HH}7!#6e_2Vmxr634W|;CFy{?NXbPpc%ce)m8DVw*#w$ZYQ=Ui4LPS
zXAXk#;zyLU6}Q>iCVtbU0Qp3r4_@syu;vN?&n9tCrR81-%JU8qVjhbsA0S#-xs9NT
zdTj8No~3yc{BO--iI}Hfoo$o*TwFVT74^0V)0}fc`J-}*DJbu2wCVo#2XOYuSSW8H
zh_Ci2=6e#10hq7R`I=BD&P}XFz#o6{pIe)~DqqtZ6U}hkRi5u_&GB}vYaJ$O(FBxJ
z8L&6=v6If@R(h5B(HsTXUCMjm{ceq^n-~H)(w}%Ph~`tw$nhMO8lm10+yf-K$Eu<^
zg|jg!>E}#6BbckM8s9uBPaa&2y9pk)@_JE>*lPWzt+w)WdYt<SB=K`e`}Na-#ILR?
z;CFS!-?(-k)E;Y$%EOy?4Q&9yK(^rK7&LTB<(o$vsHWc7pps>nHQ1t+00G(n6&4pp
z%2*O)hQ@Q;>#!RCR|BvTflb{ptVlra_(F35U@VWL#)G40NgmROPv5k19ta)}ss_z)
z$wuLC*_gGpwMTdnZ+#+C&M3zS{Crad9HC>#+eAPQ?!C7`GkX3*gCgYXS`Rbv%e{w?
z;~I4XUy8Qgj0K-|Gy3v(yZVhFs`2!sFg&D7!xzES3%fBSs7BA{LS3kwHCridGXi1g
zU<aQo9zJ+^bnJ(OJ=Ar9kDYo~m+l?6dqToz#oGrUa5nrORgN+bth<$A_og(Jk0IAJ
zWH&?pY%d>xMyc?DR;5Ig07;y)xTR|YUbvdCtGjzuKD6olG<fATSSp8te#fanZN_gD
zqQnfYsnn%A0(he4G0M1y2?t7)0rXN*(#&KgZyBgnP?69d>khh+Ww~9fp#&g4jGYZ7
z*3YYyF_CWK{}MtF#qQOfu9@kpJ?QilWtw~N_5x!%&Zf%cEbPO@)reICb>PP(6CVwu
zGso-clD)<IavcXbo_DD%l_pfyQ*-&k_ak-pZMv4SlvKEYvffdu{v5Zbr-BF&_prko
zZfZTn;8ZSwgaITH1!r$(#kU$lerY%%0#V|DV;uOZl8`&<A8!f>eMI*{&4)xj8nTF~
zjQ%Zw3S56ACvB#Z<|#<v*Hbv0oHYbxh4LrSi=qfo@$`9z5zs6!uoL<E%}{ac4~_J_
zzhmX6qQ$9~2n{9FO~YbRNlp$~wVS7K;C-blv#J0LVZQ=08dXyXV+PK$0trw%z~#2^
zh=Z}`*zjk<lL&@@*@!NN<o~sF?|3=CbaN)lw6}a;ZXA*6{QS<y4`#uTtMC;H9Ks&_
z$teq3UBbN6Y2Cv!B!N!FE1Q`&2LrP{>A?bNKa^c-J`xDYal+?Fr^Z25kkZq9_$64!
zVG$TGw`|&+^-bO=9~Cej{T3UC^VRa)owe2C{;LU|RVLiIKi{`y2L`bJL>7`#VzyA@
z8&kIRZr#Oe?e<LsBVWwqvlBih@Wv-3$DAwO6)q@4wO`QO%-xZs`go8TyRCbrfvbsv
zos^?ojp>tI3?pi&vg`Kw&a1V1Z^IoT0;O_1nYY@#$LuM(?h8?f5&MiqO&FLb8htMB
z0XT~Kjv`HDo~T40;I-*0R%8C}($^A?s>5KZRoCS&9^c_`{DH2|LXQ!+W!cEYoc*aI
zT}X)OMRT4~eW}LpsM4nDu`epS6OSrM1fd>}<u!5!vvPF3y;y5e?S!qJeRRsYcHv$(
z*BXn68KZL?`N>s>8y(L#hpRQG_U-29Fd{}9e>62jojQ<&o#E4sp=F~pLZFGypqkYm
znw1T+$@5=2Wgv$ZbRmHTpIicQ=3<RS?`77Iw;Rei6yqRel4=AP`oxZEaN7mI-cF&`
z*=n_p#A9akWyf7D<#i0k1iwY8kH5A>dacpC=c@N|&3bX0QtM@#h;<j`KrEGzoussN
z?%IJs<OE39dbsT^_S_^a=iTW8dw<ofHfcZUpE^w>CO67u6fB1N2m&en#eBQh(E<z7
zXXW>jOlW@f!fu<00LZi2p3^E~mrpa}v0E-@ze<&81zfz{Th<50{*p)wVf}QN?D}-b
zhL#WKpe%?aW}e5q*#mb{s1QZ71nW<Ouu@<82un451io?)Pz`OtEH%E&zYX>Y`ADo!
zQ74ejm$iY_;;Ab=;9Y6(M>L>hBLTK2ueF9c*zo3sZ*^KWA&g3?-gOKi8ce?<)kx-w
zo00SP3dGby;Hwcb?4^Ax5@3O?IlSCS|41h1^b@pFWm~#ie70P#XbYBI1G7aop`0Ei
z`~=qgyyfjDB_|n)g??Y+w3YQ2OJ;4Y9m}tv%Hl+i<5w3{=a(fF5fbIF*t&jGjsC#$
zt@X%Hwfd%RkT+S!2>aFM6K&RJxnn-=HVnGE3(zY1QOu$8>}LwwCqUPd3TMwx=AY=G
z<vWFO7%^<05pXocQ}jLSfs@lmY=#==zZ}@+{g#<LI^jc2OxTTjY$H!~8Q9K}-VtsB
z++rLsQ%n=5tCM2R$l|_6cZ5jPK*-3+x%v*scz6#O(86>-o;}$3l_d_0PFx4=<ScJ9
z-4M+d8jS)$jG{sQL*MN8LZcM$0TqL$r*v(wA5+OdDea%KZ$#Yach?XUV`@aIaqYdQ
z5ynu=8N<gANb(55&!O~Db6Fy+{J7GMXJ`9j**~Wuyhh0n?6OHvqV=;YO8yVD`5T9m
zb~%gZcK{q|06EhpoAfAa-|##`NQl{(8C26yzWaa@@TM2(#7frMgZ6o+%`j0k?Z1eJ
zc!uX6Zy2frcu)gr7A7a(E*kvZu8CGwoK&_R{dx|(G+nELQRlMq?Nzs?5T;a7NyoXh
zO75)z@GV`_I5Sn-Lhp}dq|`X#cuwFJuK-<qzOg=R^+pZ;v17;wD9J)^V-i=J92w%b
z8vCC%w5icARYmzvP)2-+jqpl2yA6x7f*HRml`jcP;FmSb4bVHdXbYfyURP@-;AZv<
zj0E`|C9l5JXpgjDFo(+*7=@1F2X1s&@(W*><DYGAmFlu{0)vuUhDO;ch~8l-B%ulv
zpz*+W)|o$O)`!(i;kxwmTDz87+}(VYaD4Y&R~TlesQs0el52R@l$s1X`*fl>IWQ_E
zFV#JS@*MGYgo%nBr2LO8gSKm)MG!>vU+UYyyOU-;CBQ5@;paCDjS92KON~4|NDCwY
zt(^JfbY~|KT!wa`q`SrVF2YY{<m@USbANzm+<*O#-IlaT3D&6oJSTi_f9-Q+RE?n6
z_b~V#rlwcJVgY-uRI`anbeX>MQS3*q;q(tztJO+AaEG?B=jUXgJzWJ__&>qC-TnH|
z;dB%4Qf$!L3YK4y61}(9WfXf}LOfN-N33&DdJoTwALNZSC3QeW^8)DK>}He4hOJU>
zCT*f=hVFS@=hbkbU+Z?GWG<A5lSWR>@92>PDFeviJ@FX9A2|qDM<<qmh`ZL;F^JF0
zwomIOmGiCs^G!7Sr$5jpL$EOk^J^jdUe<e05o+%3hryAc<Me#KFk`oCuD9ZrE5wS4
zN1Y;WDg#$j1U=<?R@o+-xJya<BLvrzE4CxDna`&)_R872fno6wdSGH$4EZA4UYqT@
zarNXoRwL$s&c}<tW^bia_3j6mr^>#ofb<j8p-#T0q@1!#^B>})UQA$&ETz^<^$-PT
z>I;*lZNIyzwR7KPBhO#bJAtT;D#20%^X%%BCc*&&XlmQemr5)7O$MJ(AWmrt!M~BY
zA@WcwVMQ52m<D>$XMNUyg?l9=X0E5i2AGBSdhp9G2X4%Wb+)_Of{Y0X^c{iCUPAbi
z>uWj{HCw_Vt<KOU9qPaLOc#l@6&oDB1^!it>x<qp=wZmxP$Da~U*(ZK4+z(R-|8<S
zJYkLDDG2X}!6QQ98d2FkSK!-rc|tM_3`DGz>)r$$Pc_8iBkb0y&R(eb$jQno@uLK)
z<k{?{Na1NhqH`w5SpVzpe#k{w<F7fFb63xatMCvHlD3X^KOw$Pf3`<QM|6MyG#9xt
z{=BYV!)Ee1)UgW71|svlidQ#O5Jex)gsEMw(_=5hU_T)+UT-k#kKFooDnh}JPD%UK
zhsq`b$dKcb#U~VuM-bYFRK1k>-ycjYXVQGp?U~F$iL@M6^J8A4qM8xfM0D2R)?i?*
zYj3{64EIR88l2atqXY!K5S1j7{F~2#7Qs@4a;-|U!g7DC=1WuvTR;-Gn2<{xF!=LD
z4N3RB9#S~vipqi|gX<UBh^###L6nb4l8I&-4#&}m7a+IYd$z~ZYRAhTQ?Vyv5|Qdr
zp+5r6&N3#}A|&({pLPDEi%hmG8+RU!vFGim)RQm3gL^cOr+;LTt-Z76AWn?d-LZCd
z`XguNY)1N8t9Z>5cpC~%ZpFio{W61{NCl1f6Z4-wEVrwOJx2yBEAYyZO5N<p6eO8I
zDPrz%vcZN|UM2B5xUW<KA5g%N1&S@XDA)bxu=q^$;iK<or|+2Eu}hK^yz&f_*QEdg
zQgcg*UOQxRG@Hs@F|%}Ir?he>?+6-IzJ>)?X6cbTB7;^ZBUC2^T%Tx(F_`7Q=OAy@
zXKH#mEex(MZOF^YHlpc;s<y}dA5U)`6;=0!4J$330un<>BPEhDq;#mHAl)G#B{_6=
zHwXd}(g-RrARW?3cb72a0K=U3JiqUI-@j(9nYGv1bMC$O9s9bki$Qc#rjQONVRK5r
zd1yfayptqmK@8GbEk1l_6TuGV5bxX2pW}2mn0fYI3#Kc?@p&rl@!M#HJ)bRP2iFCO
zbVDU{Cxs-^v{}u)@iu20{sKv(<s>l|-7+Z$r&EQIHx&cWR5Wpxee&<?{iFuyc~wK|
z_VCUn<UBr{S(1CV6|e67Ihw=35Ia@50=b1b_FwJ`2br~2^?^EKq)NV{BT*^?mza$d
zx~qcR{o2X4Ti~x-bq`H9dTCZlagz==pIdzSJez^5pC-_XY4nxqN9x!Pd@@JRSmheM
zfyhUNYF}uyMuOn{CJ{G;nPE_mfe%?$>DH{V##W?_(rN2PSSFjuFU$n4e{1b%^1>3$
zSXr2rcUyy{Pkt<S9=lRjwoX=2-S<jjC1fc4`M+EMr1|S>k0-tu)9|7|{vXjL#IMy_
zuto7)U$EzJ^_!&a?I770c2ffU)8IzLDuDJr9EBG8f2|6zI9{N-LyO_?twUTp(c&D5
zwE0kn={?j$2}06W9SvT2;!9X`_JE2k`B-XwwkM->#h!OY7P;zHPrW|hBR+O-a~V95
zPhy(;;CB?DgxI&Q(e-D2$g{*Y&Xb|yK%2c^Fcv_mNQ)yZ0nmty0GF4S^&p(KSd$sA
zC*sz}et(XY;f=bFpXy~=%j#q&x0d|N&A6%h&r}whK#O}vFSDTW3kPDlCDFe#7B1pg
z<S<+M9kBLQ^Xn*Y|8m#pv=}?q=^(q_p%U(YX;b<dNwnv3`&vn?PEhSN3s<{S@5i$Y
zbmn`nn}esZ)SDpKM__SXiN3&ZybHIH@I~)#qkeA7=lkWwf?@$6dekb(^zFUiE|FOV
z=hXoRZ#q2eA}&+iO6;iu2D&)>%EIEJ-VA<Uy`p_f_x%DA6a1?>j&LTKl5ujP5T>%v
zFUvgn5SKAY*kSrBM*1UEf`q+J7l=}P6BMj)DkIfHxrueZ4w1n4accI|=3pRh&F`jX
znENqMXRtrqvPU*Y2!ML*HY?iif`TthT^hOM#~LPu0tXP!Rgm;ir?<iwnI$4KtDBM!
zY1I)dfYZG@(~<Cw)n6)(-NaY-Zj*bj#T0h8P=6$x%6vEbH{P1!$>oa|$E1XCuq6mH
z_Lh#eu`tyD_#-0~T`$O1NF|S@!~%6h1}G3dcF8nBk~kEhkkf{fOAgya_;P13EoRFq
zb1G8dZW96+L_duk8qh#IB^n6BT5#DtE5dM1Z>l$oJjOY=z}-}k2oHYqtO<%KC4F)u
z3fkmj+JzVm?l&eZX}9~_4URbi!MGIK^caI*vl7z#zi&B)E-#`sPU~At<vrsi+a7Pb
z?8-_`jIJEDrCWVj&9;{b?qzy>*M;*)USs3q*SE5;zYjuKq{UQVugU{Gc0SV~6)cP{
zj;pRlW??X&OA*PhJrg|S&%ma$WWJU;412R%M=R}=7`ZEsFIMUL&*!X9N7aQ@$qvTA
zrw|RLF*%*CJ$54?RV^uRMf-YCV{|6>3=9-K>L4gV_r#gocp3mgf0;qP>uZFETW@-v
zQ4<tZ@9(21&$qy^iY8%fYviH+gTOs*aQ{vnld4xADR^i08J)p)A%nJCt3&ji+KZ{K
zb81|J)sC{yM~)>?&tn>cWW$ktDyNzw@teQIOo%Nw*54{^4DOBF0r%IN(R>Y1JFfQA
zA8%NMQ*rymwF*=x6@Z^%x8;<O<TMUht=*#_6hpkn@e-|1#&^UL<&ibP6lCJ}?U<Sd
z^vv?23|U5#<l0zq0P!!X1_{E=aY-1R{76N+P7-z5=1QJ$zvbN`;dv6rvU}Md8m%JI
z!%A2N1yU|{h4=UNml7wT!6p-LkTy8RZ?7`B-rVr(qWul++R=)7U@LaT?X^-fv{ElH
zf*|+Zi<rteH%qEEKjDO7itj~#gWj?EvSXcw;#e{@1Tb%7`fu<xC+)@31+M%R5|Ng8
zcCo=~xHro<j`)oG6ZaAN%XZ(CS_W^$EWMze5UOrne5uozKJMXwMVDJYqb*1H8yPei
zjpCHZ(HF{R@{~jmTfN&KdG(Iun&7w4`9?f!>z-VWP<$unpu>^>oV)hxSAo2>EK13T
zrW`B1J}Hh-mU(hn;}B7@qx~%#(v3&&W@l#P1qZiSnTo9Mx+SN9*lg1tT=lL8!&(Cz
zT|Qpy)V3P~aZS(jTA;%cj4DU0O))2_!H9JQ5{p>d!Q*3yf^!-5{(xyYS&936k&5>x
z#_;U;-d;sY%TVOM3th|9BB+!cYMZByeyJ2jax@zz02!fM|3%j)=;L;d;DF4&;qX1K
z>n8Sn{ktPru%PW`{cg%ZaE2_Z-mIU&d-?%}Jv5(ew1W__JF+cpUpBz#car_Svb{@=
zhIwmUCi(tq6*_x3CL49|F7D~~O8BrgR(cXDz8pS_*?}|72Hc$WE1Qr{eoQ(mj^#IG
z*c5Wv!fxnr+OY1OTUwrvzl!N!PZjs!0fN1iI}I7}T|!QJ<+4`JmDxnn<l{;#*bn$M
zi?M?1FOjR3(cHMB{`bQEJ+67qL6~tbKX*fS<}5v9DrX^Z^B=BF3H6atjRF<#`pPv<
zp}a6@FZmL`%h$L4rt)GX|3HDh_YB=!Gybt`v(cFvyef5#Qnmr&1dTqMEDRq{nb*~R
zY{?qC*PG1+<8Fs7FyU*(c~lRwe0hGGWV@%e0Bb_a5)pqJ{2fS+h?Xz-eV2?Z(#_pG
zgdjv2P0Z>pvWFh*jILKZcCY#+wi|RP^Y|tf=4R5Fl{qA|YdEa(5E|RV1@ZZJ?O4n6
ze7T>{OECkrMlBr(L_cHybdLZTX;K`dF9L6P!UT1SX+t1x4-5Dmjjj09!2BoKeWR;T
zOTTEKL5is^?cJ4;s61)G-M?R2qaaCzeJFMTUh>H6YUS}7b>Wshs)Jg>8kEvtyE_K^
zCwr^08GxyLgwUFDMX>`Y@Om-Uezhd|E9=r=APFhU%P%SVyUR40nf$u@Tg|JNI~TYS
z^<KwtQu+stWQXuN8H^zubTqBRLpM5nSz&UtzmY7fM7eT#-be0H>2+_Kw`|g+WM?{`
zw^I9|{$C`clndPMBNN34F+c1?PuaTtM0w}E->2WUGeNIA%FwC6gxs3QoO;K_u78~z
z_}~8;TT%6f&7}s#RVZ!<fLuUJv;4G$+rM|G+pqL~xK^k=-|YM-=mcOkKVrDt6>?7_
zSP~~c^=K^kqh{Gyz|$7@Mif=HISjAGBU`FO_w_!WPl?*t?B8=Mk^J;i@+5IL13}jH
zeel!`vG@et=5zie(4b8r^sE{d3Gt%&?xKERix13gCb-*cmVNwl3W@`BOE;NHB=D^S
z-Z5n9rOa-U(0Q5ZRb2gezMp#q8<?NqE~teKP*m@=xZRsqY3KsHK>>gDYxN70#v>WL
zI5qK8LKWQZAU<rwsVPYhl$59WPOr}-@(1K{#2BTs5<kOBE`4+Q0Oi}z@AfxZ>%aU{
z8(>*uyd)9xycb&A(Czeb0bkX0=nlz3&m#61;+DVSN_7Sb^j_A^aD%_*i(9FR_>6qH
z?WPc}9BcXvr%*@#ZB$ZUKGhXlarzl3e#6}@9Ma81_HshWR@9_R27fRtJudNv(&B-y
zWe<<VD-5qSNWew1YBYiAQGUwR9&2KHv&(A2)F+nx{p@77&3-DP`2fz2PV!K`EHAQh
znO1k?pG*B#y5gq=K%*UTAqjbye$^HRucI+*O{?n<(yMvy!(Y9RKdq+($lXr~ZXRkA
zs%wI>;72Dg*slPLh?Ng@Fq4bR*;Tv5r@q)PeXq9SsE1_wSMjble(n{=;@ivBf}I3n
zW*i>A>+IzFG41Onu=98?gExkqQ(k1*ujPt4ugHI16sr;RWHY-8LxDU@*l#y@+b#s;
z?I^<fX1Rm-1|x0gix+H)Dua5T3O+QLqGjBZg57TnMy2!1*b*KcZ2b%$ezGqA_y#+C
z0vF={)q|k1(dyzhH=ktKXCs<J4UpbGzIvw0`Q^E4r)i8~0)|p&vQpg0ZlLe<{C#rX
zb&$yXF*|t|*T9oUOu=%lH^|LI!A|{o10z$qTnW!gztD7q3<ZJoZ)V0XTGPOU5~JZR
z!tJBg)<3_0&vvBsm{^`^CjBA$_tWtW*HvW7j|!k9@ugn0cDSSm`y)A;n5gHR5Cq3M
zMHEefl5Zr8#oIRr+KsS@;8B&>m%A_5D%88~3>BNn?r>d_JpF6*flE_OOMZFdl*$6p
zgYod9Sm&10Y#So|XoGz{vVkkd9y6YF8EZX1v$K&n8~;(;Q&EJVS)VWF+c|~dQ1xQ5
z;Gb!@Pm;tahHLv13$^R+#+OC3AOD30=4zeV<)C{+KWGvFGSS-`NW3?km&$nE`+eUl
zqtjMK@yeI#?Wf9SmSC%xN!g5KBhuV)OBj;n<(4fxhAdHtaLU~LT>8^xM$FOOd~Xxx
zNeo_kX{_D2?smbbqs!XbZ;1hyGqYYaq;sJ{4WRcwP{Nk;SJjF}93mKkFWAHpH^a*R
zW+T@pP@7lYTR0oVL9ehfIv-ozLgPHHk^2S?i48h>I(y$;FkSLK(5ZtZ*GVZtq`^Hz
z{>C>?ZRRBgEFIlm2iXPhN<Xqa^Dhk8*}tSuqjKg!;ywSQ<T0gD-T#%{CXI?pk<s_`
za|7SqhptT6dh069LH$~t{OiP*HwybkFu*Ue72QN;@H<a**<<s`8MEkC>4WVCr|V_!
zF&0*26a?YpAWm$@?YD*KAELA}Cu|A!hz;U+#14y~{Wkd2AE`~7srt<LXAh&#7MU~7
zkl23qKAF>@_M0$`yZ4m&EdIM+R7!oM>Sy<XIY6p|c+33O@9yqQ$;9=DWB{Gk^FbX}
zl_Tdi@+>My)`|X;RY*fl>&0X&!Td9W7p%j|P8WNEKRDtgR4^$U()@D|$3EI;6QF|N
zpt$%BBMgP`X(hP?Wi6-9aO_`k`rvjA!vcQ{5ql?pwim(=#k=jwC#5xoX$q{QGF|k)
z%tuj70e!h2-WUzY5aMHlWMMM<+7~{g%j*Jc<eOLciOhdqUvn)}ARvKT6P^iD17XhW
z8gG1W0wafd-}6#qqnP9_luzd@6YF^&b{}a`{##@jM=D}an95~oSFZTqxGao0yoSBn
zg`IjLw=&bv{t+bnuO<~>I4mhgg$95b#ltgvAZJ6=Y-%6We9kJjBY-zmYb=x`N>>K5
zU)n<5QDWbzn|`FqSj-u4(b9R4c2!)9d1gG<1M&l|#KXBUiQ%g+?kD+wu7$9~%CZ*;
z<9LZk{7zB0<zWc;>Q6RUPEbIBaC135OT@}8MjM*yGDrbO=jJ}EWvee}cTHWTNjj2~
zdLV)uQAg|DN^9M;3Tor4J=P7%>h~|2VRAHsDyd)Kj1)tKc7b2eR#8YURN8&FR1$dG
zVyrW&EhhKt>(?(sg-0m{K-mFAr@!Jh^9Ey7#OGTR^ws&4sT&RMFEaDU7fxB-#m@#y
zLxsc?;>?38il}WQKM&d{^zJYJ$|UwOYaS=MQwA4Tz*EAmeM*C<pi%M1(i&M}=9e*4
zJlJ2g5H$hY(rTKX_aGnrzrHdI&VeaGQ!YwOG2N2WjfL+TbVrvIkG}Uv+qrby=-pXo
z@x9i0L%-c&uk(7EJWTDh8gu7@JxPfI7Fz0+f*+`|es+mm8+Ij+>36Jc*SqhUCaJ<b
z7URq%6sTg^+%GS1x*jYqoE<HM!V@s*-v9DYIb1IHe#LBaC-~v=c1w`uBhSEC{D;5w
z@(YN5hC-0{r+*uEe>v;vzBB5KG#@0ny!mmH{245DHJ^+#FT-R1<X#8d8yDp4OX#z|
z;myd+gdERx1W5SM!<O7`8f{_kMM>_&`TEq!)nReO%K^%IO3(6B!L)Vd`h1|@CcEdd
zJkVc=+x|$^%kIgwx~fEP`b;vne;Dp+kATK+tFl6^>!e32ROup-GmKd09uZnOpvE!3
zt`fxEW3(tA$5Fs$n6G8v)4_iELg3Y)t>@}kp*}7fp`M3I_wXkhw`6CeNoc^uSBz&@
ztCQ(b>?|0ofp^O}&aP{Zrig{1ELtxSI*X9Uz<3bRs9+6YqYUo9A6Hk4E{@_gS}@{I
zf?7rXtnBoCy=CfT@fRRt8+`WY$83SPn{J5NK~u#CSce!o7Uo;;do(w7@XPCPM0Dao
z{!X>NNniy74w2&l-4hnf7P_pi`))g}4S_-^qQ?pvt2`d2U$lMu1x2E3|71K_rxl&a
z`1yV_qpZurrndJ18H48xf7Y^F|H<Fuw)3KD=kMXmYl|+q&O&1^@0L)xE<ds{Nz89c
zRtEZm$(F3?i7OHX7%`X)*XG-eW-maM@>-oP(qx{&XyJz({U1++k?!PpoEqM7Hm!zO
z<l#=9CCD7UHO9-$ls+zCi$bdg^3q0K7NpwHX?OZD^Eew^Wo0vTy<bHeghxIE5gbBR
ze-d!kz(YMxs{TC+85$vvz+l^?(`~rtv)vflS}zpeSHtmM^6CHC^^5RtuoPiw{+Rgg
z5=M(HOXUxPqwk9@M#AR5L1{F&1+9<t)%7s?sFDA`^_{#EXtz<Yxizx!#}@v-w)4?u
z5s?}HA|mS^Fy=}se;T(>(b()A<|Z*@+IsQXd(ZOqT6ykVIJJqvbd@*%=qouvE1bBV
z+lznkrKyC8*voaEUG3LPZ)33J4?-~n1=WN)SCXmhypiF|R~v;UmC^x6`<GJmkuUy1
z&2r;14LYQ6TFc0`{nmnxg`5GkVNSJ7K9^5t(SzKFn$i?Fr&)h8>7wTh@UHj#Pf1AJ
ziiYxDBc99_DvoVKIo!9JXVGu&yKt3e2>+7nHBkq&41us=a0Q}!%SGIGN4q0{<e&z*
zF%SB%q6h-D(9eG7s7Q&5oo}M6)hi$psv#Twbf6z3_~XtEpYj)3Bsn&{u2~k=)-Nl!
z{i4)S80l-Gd86GRRG{F(47{dBab-b&A`Hd2c=613E2lJ}thH*pqqI)2mg5$U9S~By
z<kfeP=tw6xF73J&G~&h3O2X2*1~gc!(G_G#W&6=R5lYfwbhW;5SLE;EkU#|7QTMrH
zu-p%3u_a^ArBXBk$vf|-3;|+>pGsFewQZA+8^1Z$X}z;L{B~!3wTv<B*DLTDg)sEp
zf7LcJY|bO_WX<ZZ80636+`aQTKlJlBNv{9%;$F!AX471ZWXT(HhD|slcT3Q9V2;>r
z6p+)fcfUcpUXyCUn)sT({;Hhluu5%eZDl+D_v_!Yd=WoAKCSF>hF{lv*$E`(wD$J2
z$=G#@7|+O9`P(nbE2p#|M&qUKEgm@^7SZ=Yrh$+4FA;H1)cDf~j@ow=yU>M1F#nBc
zRps?<f~Ofl)j(Y9Hj3Z*)A~Wem#gL8vx#`v$886M@&vgwilM0#P^5kzl$aMV$%Pld
zX?G%hRQm+tPxz<xq{C0Gi;(TAzEsc-k3B9o$}6&5zaJxQ@X~VJWDXtvx7H8yeq?(%
zLxi#<&-(0?(Dva+>)Wb_>xn(gu52&7N3V&5ZAUAY9jf?d`sV^8gR{Zevkcwsiu8sn
z?%&^$3=E9?7B@-K5H~pBm{&SV#yl2nf+H#B^GKXSNOa@ARnsq8U5?4aKGmJ=StgFE
zDWO>|vR+%Bc`tjmjMNIgZ4<UZUPA<!DCpibXpp>bTP@TEm~@IIjW)=<%i@;rBFk?5
z4kfRkZ(t>w>)pgnG~Wsupz)wHd&c@@2!!FQ%)o2j5juwN9J|QHciomWUqzZjL%YpF
zAQ$96Ymeqr!{5|s6*-LUM-?*5d;K|>Z)`D{D@|k-!M{;(m2>*;S?R%D81Z*VfTrbR
zFFs*Z5hN_z>VS-sZMsd--^+b&qC4@65bHZ!e6@flS`u#4sw4i~hYR6!_PGkjl1*yo
z$n(d%)wLCs3cEEfKQ(g9UAn#R!ZarK={sJMt7qXCLqe8G7>#kCT@XrofP4zCv0tEw
zT@8Y5$X`tfhcJ9!edg|m`q3e6P|vR<rY;?K!g6vt0eKS{hoq;A#R?D@E&<Un|I&;f
zfh{oWY%`bj!edfZOA4&9ttF5ZS5Fyy`R_{&-hGdauDS}m`f~BPaD2^lb!XzierxvY
z`$e<cU(#i7MvsUn??oSN?0Mm$k5t^4SW+VDX`i;8reorbMR}l2RBW$sL*y7-t}zz|
zdh5<bW;;j4s)Oi-1SrfU=dxhZo)u3sv%A7HxjN{^eenIpsn|%QJpiyjUXl$Lx5AZ)
zPM9sktnrUzDWVR;5a0i&_lZe-=E0W>(_dci1$KXlU*?H${fmms<cF{DM^K;UfZBWN
zr~z*TiQ1D^cz$=Oo`>@Ft5G>V`0;n6;e~YpVv7t50f)i>HyX@8@-Nkci;Dd{H$gJF
zAxB5uFTYW?)f=+{_x87(yZuSB!?(f@z@jinZPr8@RZo1mYjd$%2<tikJMTXe*(g-V
z(Te!$pzk1Ursp89%SR90efVLGe8b(vez0Mw)tnSy?ow>l!mO+oQFS1g)9~GSw#MMc
zP=@Af%H6t>UxN-T9EW41Vs0`~c$X};JKc;H24?}2F@FDkw0OAxi|l!=xMfFlMk7Le
zY+zvezP+Pfzfd~+pW@qM$wzYc`GZ+fL4t_ZYVB+q6B|kCbHzyx)8F3&lbR;!+&q+{
zX}hL_Ah<b#bGqmy;j!<Val%i0FTPIroWKF*BdO9135&$mODRGdkpAZn0+}!2t#T3v
zRr6&3R*H96=)Dq9dyB^XcikwcfbjyvD11JRz_AY6{q7#hF&T!@@c8rEj+{U3w`jDy
z_aa{-wR95alResaGLJ}HG(^ZFD&vpeq0sj5Leu+S<d^|XP>Y_vc(}*qx0Yp-$pST+
z;IYi>fa`hO?O1tL6RZNO_MhfUt!mmGN0`Cm^mdU643m)zt`9N}XkX$aRO;~>)kG+=
zJT;b)HJgEv%b1(|W@^P6UakGHb5OkOMHgb2QP1>}m6fJ-`N|Lz_uqs4WA~_L*qVaB
z`S&ICn&rD*U42ukqh<~prx2+a<A&|O_d)_$z4J>^TQM)#<c8(>eNuVya{oOe9gh&s
z=j;f%ClMC}xI~jN^Ip$kf{D<i+OvvQkR(a%2ZZg=bhLHV1!!L;9QbsbS^LbTjZ$sO
z+|~t3L5|!SyjsOCz)T((5<e}<&@&7w;ardQP0)8Qii-b_JzzZ&!lkCwVlJP7>yO${
z_uJfAfNMeTnm(K|EtU{x=|sTR)KuiSda_8RtVM`~gT#{rAHd946qvj_TR~C6zy6Wk
zB?D%g+pCuA`r4DR2Fx84@`3DRn+hS(6dZcS3_m31EJ+B@ek)GAb8eo|%l;2HUA6#4
zs*nY6*Go1sR3IK=|M}gj)}OiRd*@tw{7D9%{?>8g{%Tp2V+A1B(N3WF%HQs><luC)
zt1wOyPolJ9mSqR~!~$|1`lCe-g{XgKJ!?QX6~oycTc$qovf;I5QY52(Qd6<$Iq=Ug
zz)1v?MSM!GxaZbZ^ny8M2)eh><lKUT84yxaQxlyZcD1o`_m5B3RK{6KcY3Wnh2t@=
zaa~d1{cUBD7O2I-GJZg3$fg1tX{~PC&M=xNOY(dUf_yFCMG_yoJ;|AY8e<EPEKWK#
zZ~xu1lsBo|rC6zECGjR;Z*2rlU235IDW~xvI}J-exeh?}jLhdIKD|^_6!o4;I0yU(
ziS2^If|BARu(@He)9o=X#h0AKx}VRl0atW+jMe0uTNibhg4+7jE!SQ7Sz&s(&W+<F
z`cvcAGP7sFku##zjUJhmFrDBmH!EiE;4z#<$byjO0WXT68CLv0aLDgsYbM^zrnJ7j
z>oQg|;<`JYT$`%%R&@le9hF?w{d-zLbor+B8J1Y3Qdw7qfwQNG-{TlVU3*CAAZb2p
zUmE<aiBpuRZZqSFwEufYw)brq7~yPkJwL>-Hs>r84ADozW4fcgCc>XeD5N!KtNR~C
z9rh=@^t67?0I7Vc`P`u0SEST);weclJ_7Mkiypi6tySuUQq+Yvp`6N+yVK1XRXkXl
zR29eZ8v4NzTUIEx>F_ER&ojq*lLr=9dax18&!yGFu|L_Xc2MYZyMKAUGuE$?Tn2qQ
zIfo<C1sm17IWGi^JuhA>@oi@MC7yg5OjGOJowqIgmIpU`n8E+r@k)l)s%(p@k=Ozj
zc*(CjCvT07wA-QNdZz|B5aJDq3DNGEsg4?dwYZJ?MZiR{OUg9uxrgV6s^l*FCC1GA
z0d~9o^<6-p4I8lx`wo;v=&umHiQ7;`-FZ)RgS+Dm$uKP)fI6r;<ZnlAe8ix&8Qv#Z
z4v{B$>2Y%cyS@`C47jpCPAOG;QrAz;lKr&_dXa{Hql`NGXL<BPY3JfytE+kFmGz|X
zl}k@1%zwErPO}jxFAO};QqpT+N=PM83$z{i3I+LktWV5dnPJ+%pKAe3SL@Rxj;@^D
zF(BVKNh1c)>R@Q0)!n)4g9tLSWeEnnn8l1s?~N47ixInrLuMi$)B(>!G4^RG;O%Nv
z&Cj25WMrv6=n-L9s+P1zXQFNiuiyQCw}Or=>%$eoq}Wf9tzY{1|B0J*(yB|}zh)$h
zAVt+yZz#N4c`XUk9T~X2{BVTtu+d}0&BM~4;b!4pmwf+P3DTUh9qPwA`PYNs@kkZy
zpW!rJdBIP7wJqj^ba+e*eupqcTkjdXqe0atgT?2t!Ppg2m2ryAe$zhUWg&7|`-<`W
z3ith2AmoPNiC}Ac&Ku5b=7nsyxV%?JNKx;{x*4!c6)3J5)7xQ2N@d?A@CtFYyW%=`
z?Lu|P#fJZfC4uQP7;+`nV?IOc3o_(PL*wgl(p(r#lH>T9jnUoh7yaadgfepKXq9&+
zu7}l&Z*I!(opJKindHZ^5N^xstgm=senV-M5wAr579;@{N&DR-($(T}+lQEZ_E$F~
zgm|N+1wJ%MsSomMKs}Rd$3M@kJ%1{{fPF@{*)j#5Dt+E&8P4E$6x*Jz-=<(sFl~1l
z6jCn~aUf3_*oFG5+xc&&>sLMdft>v4=89kd`OMxmSFQv3h}@4&TvZcSO*v>#M&R2I
z@I2)iSTP$xi`~<>j6|4PTPv??T-I7Gf8&%5`uHv6kn(pTw(DUCS!I8jjwsW1FQ?%B
zYa}%9R+ca0g0J69<WN3kd_NOu0&pM6;=y#E=%ypCaGj&tXrqs@rgA6TS_#|bL<4T)
zp3u`YZ{)hvdlzBF&q7B4`Z#$*gG*+dKl1koH_~S+uo~^t8<)RF^PZW;9|sR&X0{iw
z1Ox$Q1`FGK_rF6*OXM~(5;_RXu}`;{nC5h2K(S*f`k~1tt!-XC{#hEoVFTq(*`8~w
z3NP@sJW$7dN+Zvn;f*qM!}7}H<xnsFsDg`5E=SjIR3uG3iF97f^OqL1(i^T9xd}h_
zBJ}?@U$A&jcRhXpTiRo!-cbD8$j8KhcK!+|y?f>2^mP;L;=ZY^ta+1bvyNk_ztI{O
zEh8}_iKHs&LG7L@rfH+I(PGMMUn{PhOJ|@?{0UNLS-NB9+1w;1meAA>>mfIuN45nY
zhvw4v?NJ35xB5EO-*JeZpHd29g6sq{2WtH7U+8%Vi$dGhW9>oCZTE4Q;x9umBP_gm
zJ*{^Km9`NXW?{?%%wWc;m*sJUUhoDe<NFJ<)EOwK@O*STr77wB^w#>%nQ3p12vMe~
z*Zct-2vBX#w35Gv4mn`|Nr@N79>wST$QF=~v7YbOHwFTvk?-giA~fM#{<`x`*gP*6
zo>~KX2d2Wrwa-B&wn6eo)HJ=;OzC_XhA%@EZieU8w?}W7nbLu_0Fd3<x)3-$%hYBI
zoLp2c*UUel=6lyP^7-fQ-Jyc?t{z-|<F=%C#7!9Zrb}P3ekt?yT^5+_xZJ3<sGPc=
zpO?&MXLqT3d}kON04wfupX>1Maz4|6K(5v^Fscl0Z-o&^%Q9HrySfzf39#1UW{j-2
zOMU+|Slp)=`&jh!!hmsZZ2&RVfM$^Jiu-72`Rj^dvW}kTjY&r(8C|BRKlJ)8B7OV&
zm*nJ`9;Z(9)>Mh(b(0svLYcXb7Nx(%+FO3<s=B6cRQ|gsQv=KhTn98n6?W8&EqSeR
z7~I|{kO%tXrdG1=HNd~c69L+xZ*M{qq$i%j_m4am*>1)-I0Ij%?P}%T%OmIK4JV|>
zD_mBkX|wVv*2(|PH`>hTnvWZw0gwiu?+lV2c^7%1#iZ5nxqhMPCXo)YIo)G6Q~5Cs
zTlfSQ(zZHroJ<o(C(79PxG*u17X=vxG>%CSEDVy)kB=js#=igQF*Dg5PVo3|K;o1M
zHJ`~5j$&T1jW#z?W|p&MGFa`PIRT9J6VIqFjzi}sjV`)AL{6AJ#@V#B{6T9{5P;Bl
z9-+he>=_~Y>Nc0*tik;`Gx~DYv{w3jM0hxNVO7`_$Me9&7${Cj*?VkIx!9=h;siG0
z8OC9jyFPJdh0?eBj+9RIox{xC+{URFsgtNz6Wt`dms?f?rh;h2(4oXWHx1iJ_DcH4
z`XJaP@Oei`yp^rBQmfSCW3wkV*NS$V^QM1lcGs4)g0(*HPZrw?I!UHXP&i`|mqu-D
zo!@Ff(Uj$dzuKu3XMUooja?sV&M<}tUn&du{XP2Gt;E<t|C%Mh_gV!a=4xi+tl_!Y
zKPMfsXxXV89oIvfIbIakZ+jgJahX*(Ny;l&ah^sWxnKNS=D;+nG_#hsv|`q@2E0bS
zJ+l-Ow%7PDl3O<E9yQeaH<4VmEf@3K2wU20>zlH++k7^j8(g95^`>FuR`EJ{Bn3O{
zmPfT3qQ&nSHp@_@CD$l@#CbiRs?Cc<f=l72XVWB5yRny{(QXyZ)PY7s7E|H)h&3_Z
zb&ZqdDy_bpW~z8d8z4*c{i}@6DfxjYqDw4nAL}<v{tnJ{0O6h2>gJv0J({N*$&zmW
zS5*tI>Hp-Lg8pPzxd_v_RYSu<?^FMf+fXkI{nEJ+Rzn$`!G_S$y+Y|g(u~2%f86rY
zz|PffrZM_4zsXWE#H4;1cV(1U?Pj&rM>KHud4i)+uA=d;jK$dQVuOgF;EwR&2m8`L
z7I*QsoD%XkHrb7YL~m<sUn<L)C{SzBBA%a&rye8)ZzMe!W$ZPc!j0>rQN7oQhJHFN
zio*p?BVWjc&~Tt`^?6Ri;d+IY&isWi9`x8Z7(TH32gY>=*e<}v*JKSzpck&$nP`0u
zl<#(2V%d3?%3qzIUkmVE_7B^;a|_$iYTMAl5LJi?y7X#yq;Zs6?D%5J^9gYawdBqm
ztG*dY54*6(+x;;)Ie8%EY*mrkI4e<J5?>6{@v55tkQj=>Bf7}09C=r9cH)dsQ-@tJ
zcXw1zkr*yb<{7a|^#rnGu4y7?YW3DS`D(u4Z5j-~^#FryDw`(KRj|o1d>#JvtcCfm
z{2~+k&3>&7M>_ESm2x_ubD!$~tCn!p=oy<uqm3~GvbMVdL#k*+_}*Oq_0cYWwO%d!
z`@yo&`nt1RfE;GT#ei|8<w)ezqYa2K8EzMf!-e{=um@@faz{#upZ8`0O^m}I<+Gzq
zb#&;(fwpr3R%4yWdwadiOwo~?%cp-GRi-sUNMr=wUTdniYebDPeVU9lAJuD`FPnml
zyhU=|{c0;+D!bD`FS_1H?sbMXEH?4QN&%=shriVoYiE)R@!?#3w1QtnU7v^y@%!tW
zn^yAMj!xP{eF?VQRM|Z$;0EfjHK-T1GIIdeGtaHzY+;eQYY?XTe2&SK`yQa1H1)Hs
zd?(v(MkP~;su~B*&f&M&Ppv2Z)6jF!=*<Z$?RMginG#rR)F#5q2|G)#dSV+WZghvy
z>h$~P#CEz4K=R$JpGE`gPchIo;Qw#pk3eT?bG@6y?V1X6#g(Woz-fy*J1nfr`*H@h
zo|J>0X!>?l^+e0xv;2DlK7zmc@0^6VKRjGR=>7SEPC9R>m3K*hXtVUF7D;qI{p4_k
zVE-~a4AxnP*#HKdCwcB;(DFTy;qx2%pvvVy&yvfbUo*eBJA!D~aj}Ns#RE*NE88EA
zlV3a+4qYfV=&A~}07_{-5DOW1+L#7D9Ob=Mhxzep!LiWk$d=mAb|~!$FTY%SeWhEY
zX8t6x)Ls#N!PYki61{f6$z{hTQ%?7s8U2pmlq%d{+?57Dto>C`u5x$La#UCeGawE`
zT#{%~$(kxNJn@M5@&SB>SRe@@5RA*1)p%{<XI<#MeiMG8?o)nC$E(C=3#Ewk{9G7)
zg%NpY@E7l2hb{Rcfl<aYIH*fE%UxvJac>A0JFgshx>CNds&fm7HbJ9(q!H5Tz}p*8
zM*?8IE&OW?^yueFloR7!OLX#0EOWf@`#$<h;}2<ROsd4iztG%?{g_yS#}seoAAAm|
z5H=|*a{Q{;*}8!o+pxs0V`sO36qzNyydGL1fDw0k6zlA<sOL*GgD6{e_pvmM7?Kar
zD)fJsSJ~yTnzQS|9N=ha)F9|B2CLt{cKxe@Ptj9VVFv`ZuQ^38Ln}nI)C-Jzjjv$!
z=sT@uxN}{})vjqJ@b(robK!Ti<@LjW%(?>Qd7!)*dVDW@3H@xxz7X4fbqgE?;094C
zP6B=|-t!NfSVB`qim@<v@<;{p_NCo>j>^4lF<y_kn&Dig%nRq+N}mAl1#AVGY?<&>
z1%kGk>U>s#>pR`+wt4Hpx+1TWj_d+r-I<vg-I<p!h3_`mCpyk}Zg8HsbKTT8d2Cqv
za~?)>jF`xX3i7;tkg3|mya)H(1pLr8Bkoh9P>jITlTO$PBhHOG#Swcp$U8*c2XQ_~
zR0hUz?It^29uH6n+J?7oH$SiI)C``lE1kj^oJ`By_V|{geua)zTN}hSQh)Bx9XY$1
zO{ehXLq`ic@&|?Ox`niAvgQ}%>~g&E=rq&N_M5VG0xjs~v`=%h?}kPG#x)V;Poi;j
z(5e_I5^mnNny8EJ$P@eQFj1_y<oR%HB<<D3o40sxpL$s>`JeNR)0L0SQ2U6!xxcpD
z27XQgpYQvEi-5mybd}m%Wb-~UYnLtWAgB|#9D@nGi}9657E*Bd8@A&GvP&A>YrV;%
z5pd(`APhMCBg!vDbtPvCdu75~EegzT;+<VjWk3g>Jaq^igmprYkS+c==t3@$ISj^f
z8+qh-)>-@SFPL;(WM}Q?&{k-L{0ZEj$%+;P`izY;n*6=v30fGmWwNM$NO*PSU#o63
z<ygNTpLw^wYx&&B`G>V8*x}UpuGt}dXlz(bqYxqgN8ePVI$O$G)tRB=L#)W)Wkey7
zoAcS9-_}#j&@~bi$yv+oZKSW|FyHr~f0N(b^$zvEy}h})8Qcfy-!*R!s&cqeIcC>+
z%G=WGCl28P=x!v*ChW2w+8>{qr+Wr{x6a@UW)|U$6L~Kk^?c8^2K`BLodVZ@+g<qi
z*A3~%l68Z~F*-S;56#vuP$N23lao#h1Z`$?f$T@v9X2MI&{QmDEPx*gH+h^V5Oxzu
z5$!1rxMO|@{R72BufeeIfT<S1@el^GHU)J1dwQp8<~wxUq3^PFbnu!KYWUD>biGnE
zeA`3s6dx1XXW{afnB|ZE^3@}wW^ChDq%jzh>m-pDTk(CIYD*XluuIFLnFvh8#J>DS
z65QgRtttLadydup^fYbam)^5IQ}`#InI{Y(_k!~B5k1?3?{n?eX)Z{_i%BnB>Y!a{
z8N;4SMSo_Fxk58oD6oG23`UGrDiQtLR@B+lcln5quO<|D_#*6vKWi;KR0v^t27NKD
z@BQ{e)9X*qW0+o%k!0h%SP*evo^xkS;6jpx2pI;ErSAs6Uz<Flr+WLeuzxye74hs8
zIsn1N!Nhq*1Cs@??hkR~>!9rTVna4LF?d&^NJz3}Z&X-V<Qgm*6nRQu&|&Wao^uWE
zkqM|YP@u-vU=CqxGTC_NZ~-7)N;wt>2yMed>-T-g;!1Z-5@}#gP-@lwIYxLj>mEYr
zu#uFne)i3)o@(;BOP{#y>#+H?SNJt)r5H8j6sJ=dRYKNu^kVIygHoE5!GEGmf}YAa
zaKDZIW6sQp8>wr+wnklo0WcGh$1}kw@#-*25(w+FEQvMIId@LZ427lty=0C(Qx_XC
z7Rr$ONB^6AreX<;V^<d$ir-Dv7eff6BTA$TU{dOgS%WDv#ZhztlWTZr+f#TcZ4t|F
z6zd4Q$)EL)j20cLu9GsnumU*FUA5YEYG4G&HiPHi|1PYz#vqs9?St1A;H<ovj+Hpo
z)gL|O$*gMWcwt#x#A-RR89*LfKOJNmH}R03SrP+aeMBxCf|@7nj%RyscX~?NXF3j*
z1ssGJk4P?M>)^?kc<9LNM-1EMSO5>QFbM}g?0hH`_!j&bbB-M4@?$9wr#yBIh6^m>
zM0>o-f@%AuFiVBq=x4#c-J)XOO!Yi8UA{aRK9WAQOfj=>K!0DKyyACPe9;&i<rm4e
z|8;ZLp~NxB+B4Wpnnhi}j&qx!Z@4b61~U-xhv5@G3YUV-S{BVlLeFiEQgmS3gS`D}
z@=Z<)_nyZ{u06ObM3&-6s}9};6kP^ooW@}2tDBpV!@2+hbh*`Ua6FnLixf2`0E9+N
ze=4dZM7JD;Lue(=gTOD>V87ff&Vs<X+xqhfmU5BI)2Gm99pQmwOpI|9cTq1>HHqn7
z80#xrNeC^ylu56%5G(V$I!K?gTy%B^6;9rYtPek$c^*^qT$X~U>#kH*o+<0M7X6O8
zK>SlOnY5wC)1gx%vJlzV44CLn7+&ZX<^j|HR<MjH&b{OJ@W&y+`l_;Wbx?~(NOLLt
z|JFhm@Y_J3Jf+0q23<SFs;ASx2Eze_k%e7A*)86Aq5yz*PBJ%8h(cMOt}z?9twBkm
zd+N-)4-#SL^|`355WzB|;&f^6;($JQL7o2N$4h&+!tstS+%B|I3r%ZVshZraI|q(2
zS96xv#$W0PS4qn{vE@yKqj7t(H_Z+tevf@5j-<wCdCwI%jmZ?!$GpbDiUEY8+@#E8
z!VyX@T$N9QKK-{gaPBNEgEyJyOx?Oraci)Fegbsn4M`UOzTQTv;X*(=GU6sO%`OWT
ze#3#yJOcd_7<Mx|=71iY;SQY0;0a)VfVdGo?uo#g4<sYfN#-TiHfZ#)K%TB&p#R)^
z?hgoW*iTebahvHPC|!%6C97K3d!htMwgp%2V<2=VjuJYY{W7D|-L*Q46kq-6vEJIz
z^^RGPvCKR|VuI5RM^Imo=yJ%9!@JO8!wg6K{h<(=E&$x~r_l9CN9}Q1TRgNVlG!AR
ze{BGN2WpWu%h85+4ncscy9)q&!2bI{+20ku6AeA<Ppvmzog&xqM@<PhMJ0s@a+s`C
zHV7Y6oG9Bl4Uy?BEpNZ5+SOY$h#}w_QUk?-NBS3>j0xE*IW<o0MYE#|yA5i2>uZ<;
zbtu`ph>=~Ev*p2nEZQl_9xDQzr`CUy#Jc0*kd<d{Nbdq3K>v;a^1W-Y!BM#yws&2C
z(2FF757iSqms0p>II7;afgBtInm|>lGi#i8v(5o*8Kpi-oc-2?R{r#&_5L$bm0S3V
zgo}>F>eq2NQ&>|czI(T`Rh&vG21UHV9<!00D#z`=X;ItG&WAUPPK_EMD%UwXRj$H)
z>}BnCXE!lF(!4J&XG|KX-YEgAfb=hYJ#;mkzcIT$h)!S?4mmuf5R0jEYV$8a#!EDJ
zP7O-nCFrS@7M}_Ph|7}v@BQ~Od>~E~KzD`}!9vhPSCKnia&_>P@~9gqxJzBJ0D{n-
z#MCvIswoz*I9Ftu1q-{OzLZ}o#5>n=1&=rDm-&BAH^_EOKU9B;(2hp$p|n;Og_@}q
zH;&D7bDmpCa$#zm>3Yz*8w)%Uq~}Y#_H8DStYw0V`_G+j$P-J8nX)rb`FEe4ou}lw
zd^dan1F!CES$tNo`8354Vd5xdTqB!ry{}2|s=mq5_b2M8y$!cU{8Gn!O3J2@?%&Qy
zLUurblh2FU9|UJK1y4srl$GL}sVJ1BPmC4eHh54zaIbdj&Wn4rS-T=ea2pvTwzp~q
zLxzxIOZK8j-agHk&jQFUYClmNC7$nh#+$*M$Fc4l9ax{xMNLl$X9QcG0*8pFNZ^SC
zB?%5R;j3XrHn^c!8Rxa%Jl`|zC*&6;b0Mt|9R+7l1Uo=%mzTq;L+P&IM44sKvQ`--
z3wj4BO?C9Jiv_tT@<!?^9P1_rY}S=RuE{qIl&{D=vTjWgX%_Jei9D3pZY6w1iLZ|}
zrSFcdlVy+o`5G1CyxE^Auc#I6pd=918A|X!lbMf%A#5es-WZuAYQI<b8JhD&@ZQ$b
z^7d7_#jNjKXPV|XbSuNsWgHIf{d>Cqe7~EY{4ouj_==-D(F{hH4Z{ZHr4{}2!fs5n
z0Glml<SH3IP4u+=DLi)s=p!^LWU?QCdG_OoeQ71N?NMf|`%N7X96B1gIGjnA{_XpM
z#O^?MqTT4bt%bXiSGonCen&R~H)8+~N73SkcIVfHChfKbUI+Fd@A?>w{~IsAmcCA!
zyEXH|uyX6a$kg|o7&~i6`30{Kjd^Ch6_4@wOh}(0#Aq1P$T86B`nc%+o`ex?ytDp?
zo47<{!*Q^)N3_U9H@-Ni0P7xPD7J@n&r~#GX^`;Ee?iTs(!s_=Tb3@gYbR2++r18I
zh7oERqbarqC5M!)v&=y@G5<5}7F)^_OXdG>K-d32V5zmf<i7!U^2VQ;5&&iYtngSf
zSRBb3(NSWDF>^+e-*7cluwF$T-{@B8VN6n!`CEvD<|?6E{?`JlA0A`JEo0`?Z#j71
zzbok2N--Vlw)`Q&h{rQsdPoilyfB}sg`FRUOP(xw_aPCRRT{ifLe(7X&5q+bv9-op
zWTFX$RGhjU_@l2hd6^dyqcZBmM;h=S!t1%f2nuvPGz7B1r*u2j$wS?|P;_a=MOn8X
z&W_+5<n;G&v<gxGYhLBXJ&8F}fmdxp5k4=l@92(P>fqXBU1;BQnE=`y=t|8RJt}bx
zh6Sj->w*+9hX6O5r|^m)gc9p&6rg0i+Qh6&{Y?U+UWF_?`XaeRr?ss}oV+X7YlRYW
zYW7u4XI8I#_%YvPx-@gO-sdNW^)G514=>1wGh{`WH)(+oIg_s)#5PyivdZxriMrbM
zB_fz1^<se!&hets+zND+5kZB#jiktvE!Kg;K2_FDXdGPG9P2)Gg8YL2kL5k-5eZ>+
zBhZD$0lMQ8z*rgdovY?(@F+1y)9$Q-<U=21og|{G3j1$E-6M0Z!iWMc-@CP7MJpJx
z(b({<BXV9zfHZQ|@BU#}6;giZRX=XNHu(`%*~W0`EA4*Xti5(tE!{<)lz#nM&gQh@
zS%li-?Ibf|HAK0XFwIogW{W?itaz?N9WRWqx~k|W;_DdV>3as_2D?rd6jLUWHB()k
zlmL~Pmc&75k`e;?DJ9w><L7BaTvRHt`<Zdm$dnr5XQAjvx1w_pTlc)cZO%tm{n;yK
zu+pdPJ79cDsCEhs0m%Ndz-#^&)A3zEbw9;C$y83k+h?mEf1@D&OtyALH*fPODEdNx
zhwR!@@1js7$4Vv%XgBNJi!_$#SNREn`PtNL1<<~dL&RpE-r`7iN`#5K=WBQ<$>8wt
zpQ#nN4tFmf|MNydsY$NgpGB4tEb3?07K#Bc^<LjtpHgsQC`Sz$s4#Sy<lV$RB>I02
zH&MrS98MZ$1`D~rl$IOOJq?uKGQtAnEfslL`16Q~{&T)1f*YkF4kG{0Ci~7jy9jf%
z2Hle#(@}4v&j|EF!)RC1ts!|Irtv!ml>~yu7sekQ;I=6w9eUPi#c6YYAYi&q6|}5e
z1$7(or>qAR$`kS%K0w5aFM=>h2KuXR$o-Cf*sgR%(x;ft6$@12Bz;)VG{YjsO>B@3
zWRn-<g+L#W)_i?|^-jRUUg1jysR9-onDv!E&uYWEX_Uo_XeA?u0LlcLW5Q)*_y5m7
ztJOY5LTDa+H={@KH&S&0VG08?_~@4NngP%jx!T(QxiT=$bUCq!yulS`_U!Tmc?-`%
z5Ud5T*PDyBoKFs52c2akT&I&LT_GxqS0z@MiK9{jy%R>f!urt{>G~!=PE!R7bp*#m
z<lq0s{{8;;Uy9_%o~V@nv{CN|B$X(eofjXAjc|BPs=IP>^~C(Lxzp7uq8{4bxZZx4
zK0W`FDdDl(4=Ke*525qxNbZ8o&IJ8DA3QL@<CjIV{IK&!<+hp;g2jc4MEzg?1#lET
z_$Km5&|ZVdX0WGV>=sl@g{u88-ZZ*>;H3S(XtT%}?;O+*N=alA-cMr_!HO%}l3xhP
zq`N^;Y^9il`J!u|iXf6>UCC5^AS^@tXl5<70B(zUvr~}!!%<5b@kLzUSnv}X7d+AR
z^mJ#|7wHECwZo#6K2d<0tjb+*^iA!HfZL1F*U!$r;mOovzW1r>EqEJO@vPhpHDIgj
zCFwYq$dg9<2}i{MD}9!nfQS4P7ma%p8&6FL#up)ILBS$U&Q~)FQD`NTaX6?40=4mr
zr~cpepT^k^W=5JOMS*b!c?iI;1ED8+Luihs+A$R%q4nD@4Y4iznYRYZA&Q^d^r1kx
zoQsRT1KtvAv!WAyKVs6?jdPT%V-oaq87e(rc(lv)adUKtJJ}jk!#<%ZFLdi$dVhPB
zfAe?IMR(!WTIjW&UYQrUcA#wF!S}@v{2x||6$!Z;1XVs#IR1`3CHPeRrRKiXC1`cl
z-4ko7)F&i-!1QY=H~s(q4Z)_?P*7wMtP{&l@ol;+5JH6*|B7vHk@h)@57j#rdLOK#
zs2<bG{T=HLg6K8~Q?t~ifzgiI(Y)Z6MY!4I5o{*<$DU))nxjOxUxJ6-h0Cj9Wd&FJ
zV)6@@2w_>EZ@DdsUsI1|hGp>4RV0d8OUl&s{=5nLT{l7asBfWGcIFF+Rr~z*`L-=b
zvH;D4Z_Vd93_FvaeWjyzk(W<dL2Owx*!MgubPoPCBagL*xFi0T&H4yNC;@ooHL&6W
z%1*i|Dtu3iiX|l2KsG<vMBFx(2R~5Mr-#cdFtOtESYD4UVW)<%{;#@1O~*!0`@sn*
z_zHJCQ4)6L!%N>+*q5Y3kWR}YhI23fLx$9pQ?`%#i@~dLxE1jyvI{MBWlq7q$I*`z
zpY9bF!73Cu3DCShIz>V!LjjJLbVrFT!d>W(#!Sl3z@z8m!vq@35I}bQ0Y7+Bg3l7{
z%UFX2k<oK^0q=0p)cv&B1aRNm$XPm;HA{M5wv{#<@(8{FhjJ~l`U&<$PAV^5IrCpg
z8pZdSzw8hjKY5<PExJGq15&0|`(m%&nOG-ofdpA8lWh^W!;6<eYi^OlzblyJ6Tc>E
z=0%B<?iNENfB|NEQQAphZ744V?^Y@9Yq@DC`l(jPeLZu7#MSETn)sZlP_QwWRcC(w
z&q?thO~KUZ9BSA<()I#r>Oo7o=ZOtWxrf-gNS3rJ{=V(+Ye%y(f6wnCLO~DVWzuCS
z_8$&nL%s#ip(zO^k`L2Ta&LOrWq5;fJWRC5YR?T3rD~aFyMOYH`llsOAOPX*5-;93
zXQz-8oJFro`P6NtkoA+vujh}ITsis-9@uVG<qe-P8O&k4QBTD|{g<AI(F+LtMq*M7
z;Gz9b5&y;Ur9RPvk-}2{u!0|5;YvM#be5RGDrD53x8a+|V1K~^LaYDFuiznoqGwPS
zDT?0#>$+Pdc$TmWz(-S$fN|jS$IsdFHup7^@zLc!jK^u|J_Ca*6YsvH8E*j<JffY<
z*zu|p%#EM=Ug|&lL;L<;wSUchy>X$m<Q5|^ym_9x{i2alkj}?W=gHmm8?V_H^Yw50
ztBDyTtOWB5X$zk3S2;Y?_POmzAn;;Xx246}xbT?nCi&9(s-GN#prX2WsX5a6$G<2A
zYvHMxiRRvH+hgxuL-sXMaVCBy(u9CuU`^>ii-n-w@F_RDEdD*=*nd;5dK{);ow#><
z@qf7hgx^+*?7<M-pU939Q)!2ALPz6oAZwIoV4ib3>zGf-u@qDsgZOAQ8OBPU{zp9(
zJWwTek{|`P1uhbih;pAKBn8S;)IS6rE`@cMI`K0*i;b;BEzh@};w<k0_B}y@Ohm}N
z8whDWaC)&xC;_w{lk_aN;1Hdi)&6x3l0UMfe?eSt++Qkgf@~c4XvIM?2LqO>Y8l?4
z&eUp~7(8~0cEC;9vk5mImam$w^C<Sa{$S|6>Z9-G<@LRzC$pwX%^%qn`EHNZn36)M
z$1v2bkgctCdVV6<iORwdO`7z_Pnxi)(>S+@e)s>-^p#;v{_oo&Al=;!A`Q|p6#)SW
z6$xpO5Rec_kr4vYT@nLPx{;27bR*p@9is<qyPw<d@Bh5nyB*tc-=Day^EzW~mnV40
zt{BqXgax6uY$@qw<2ea1Uxi$gZ|Z!wqo1a`y4geilsgJSLhs7`Z)XOh#fHfbD&A=x
zZ^Q{qQYpwUF`&pqe}61E={iwUS6HP3!BvibAV&c6eOF!f^^f@F;Bqm29P<xX0=Izp
zFt~2`LrCBlY!NcXH%pHdX(pC9EBna|cibtTOss{d_;LFDn51<3>9<go`s~-c1>XIc
zR7^2qD%Je`RR<p1FE-H}s8SIy<svL}(+e?kYSxN<pYZ}uLIE>tZDZXVeL?hj#235#
zk^B!g)M?0zDhkwn7BOu}9~%gZ+t-B8Mqa%9#9+D1fiO?_jvd0w1?~jqS1ByOdZKy^
zL-N1XL2#2Q4wjh><OePY$c~w-sJHRj$f;b~kiy@AfgSP#5u+_bEcje^5c<6gaK}2+
zzVUrVOEoM;=Brl=!e%M`NiX^4=<KQtk0*#y`~%vY@8h7sGpvSsuoUW(@kE}}O>9B=
z@Wl#-or<h}fVdHKHOM9PU((iFw~#+;5yL&XkxtC<X#S^f6BZJQ{riJT$oSXu{0k{1
ziNSt7{ktMtnv;`1sdOM0=LyEnjW%MBD*q5Wv}nJL(bUg>CHd7jot}1*%0HQkUh6?=
z=0M`Hm7+V1rMtJK$6f!^yB#OQ1?>Pk6olG>?{0ML6ESf;1_bi}tyIRrACI5Ua5DZ6
z_jP!S18^bDKl};;`cEvRxR5K_(s3;GY}MKSK%j!IC)V8mKoqIZ@8md#ApR|9WG|Kr
z(O$MW?{wyz&$1<yOm5st8dbx5j!di)c{R9UzI#PKMOu(n|Kj4anva!kH$4yMC7Z#F
zh`IL*b;BAwFT*1uPS1a+n;Yn$K0LWdgns(aKU=loU^y+0u&&|ALByrPbmaW_yPlB~
zMt<{VR%gBESV+OhS6UV%96po2%5mF-InXpTGJo)|+;hdf-jJ!X{OcX~%J1OI37@Q+
z0>Mq#I)|`KRW4H0dw9>L7bY~b?_mC5XC(*9!9Y$qpgsl>GyCsdF;Oxzc3>QwK-eZ7
zAA>h#4aQ|SCy*(5j}F|LVlw;fhEfUtorUbA;GKgDP~{Pebkv;anFBXfQ$Mzy;*`Y~
zt>`OUBXQ43SjFix4ik1QJHy=4G6EuzPrp}x=R7&p6ftN+jcd}3ENI8ji+yic;Xt1P
zsO?X5E1!-PH75zDA4=xtKPV?2z5kAUt15{bpCXZ~Ic9I460b`8=j)lHzy@pHg+nSm
ziVjKp(2!YtgJ@OjbUWD;Mns}wkJyJVCZ#h#Pgy&ZgnA<}Mn>j@_|#6BAffXs+fUxt
z&vYH=p^R@H1G?;)ZI(Ec!9WhQ?_Nyyzx_>cNrxTyO&kfe`0~s8-(er}$HMbv?+^kX
z!$(pe$j6nfx%FDK*T#`J-YdnrNM?NnIRH9t2BS&9FM@C(;*ng?e6HK=r@t1Z862<v
z8h)`fLg#JfD}c?oh5G0@OLO9v4~?<Z)sOL~l^`d&4wKY0g`Gcb^0e~<OZS7JOQCoJ
z9#4BNA~)2&HP};^G5T{-*iMrm`(JI8a?0UgG9JZCN8w(BB~=q%wXP1Ju9Pzrgu&u_
zsHa~J7>VzgPY85i`ttE^t@YECgE?kF+=d_T|B%7pe?{WIW|7U73@UymBI9E+AU;~*
z2E-~oO2j+Z+1UKj_3o#z7>F{-_@p-q8=P2a+MhfL$n7>OCwHi~LO(a9AotX%`SM+c
zoNEJrHL5c<vQUasu!2ilpvy&9Z+@C7-GXBkkFD#x9XgO`7^wX3zPV4t$nqFS!{A8-
zVUnMF4}!P?0|=;eg!P3)-V5*7=;_Uwog5w7{I3`P*ZtXO+an;s00T;A4n(!d&SGIb
zC~Tef=_|~lpN6Uq29{y+@PuDwln7XsopM$hTcwV3H)?$n`Y=HW7Jk3HF`!?CDxm$f
zsZiVRc>ayZH!9d_^!`(cZm4Nih#MujrNj|A9_sDA>$1d{bqcv?yDK6T9bY>iKCw;D
zU^IQGLbF*QDzWwc(CLHyJKi#Zz}q-6BL%`!KHE4t>WtcHcuezS%zvY#V2&Mg2b|GR
z3!sQT7)?R<mMaKc1~Vl1eahf|ktD%D4tTW+Bw#TDmKbXk{uzXUT!c9v;)KR?(|X%-
z&>-Gsp9Um6c9!9v?+SC0?%cc^CO6<L=YFW2$71)swx(Cxf{fnvoTX3T2QSsA(v{P7
znixz!mKAN8ED)?$&dVV9LzaHXrh0^eSv77`3SFk;KPA<KlO7fT`5ziG{_wwHQdHD)
ztx5<pZ3jkm;J@365VQU52Iv4%9)}A){|8QjlZ?=7yZ=5mtyGumG~fMx^&wG9s^}VY
zlDD02QA^{prZN6jgEs$0H@h84KSc<maP-ugHjCZvIbbHlw@Mmee32MmtO5^Mq2F!%
zSu!-KfH1$y`8Yy9Fc_t>aX$)DVB;!2+~rtc+{Ggu?3O3E!#4W$--Zjk#0MYQ*JrV-
zAS}aR;>I~^UKMCo5fx^{;G!0Uj_%Q_gnwhe{dX3307))1D3`PtQ9v}3K%d>axqohc
zbO6W}vsUfpW;8W1iK=5_Ld_Y1F^r)e2iWkzY10<(D$1Hhbuw^t6u&3DHaaV6^H@%L
zKCg(VN%Dgiy`@jy9IYAt3*qVtEg8XlF6+K2UPIo7|Ba5E{*8`;QFDD_miQYw55k7x
z*2n1A0@jkxS;ylG7o!sS-{)Bg+Hw4=48VaHS7L+(6g5k39E8SV3IaA1WyHAtO%0!`
z<J=M{J)?iC;0+eUK4$;w#eyE}ZKU(%Z+g6_n5d9zs3EXg(?X5UM*|T7jDvIDks<fW
zz09MI8AF}bbr$QJ=P#pb&AJL+-+%DYP@3uYo(NNqzo>PbW8=6Nd%P$|liCpxA*|L2
z&5B4=o944JTZPP#Z^l}KrHdR{0@!-}L#g>@&5KoVpvn`?V0({`Nv)ycWo!6v?$(J4
z&b#|&TtLG_EQDhS9)<U>i-a*!9kstogK8*S7zq!-xykfs93KMgY|@XO1)A}D>mD=a
zQ2(@SRM+$wdi03#Gmk(8wS0rqPh%6cR_9n(a-1Go7oiZI^^0HRJLAt@fD_q&jqS!W
zSL_fmRY@t=OAe(N!E$S`(NkeQC;P&?V;(~v!^-sX#0{Kwh4TGtah0Wb|J73X7&Qbu
zGxv)&KBfT7g^P?6SX*-Uq3r-JmuU(r{;1}xLX|Co0Ij*o_)fRevvYWVFbVlf`Y0<I
zJ30J=d%Q+!h6S!2>bps=Q|&@b+k_4OJgWM&m+_V=Cx=UmVyh}Ym;sRp4FooW`k($g
zu-J)~weZ0iCU|tpu!1`p6LxKDD;Ny?{e16)3kmyJW+Tn8W^hjZU(cNYq9EVdU7cLt
z%D|q?SYmjlKrD`#?;jcm8&4g92aUTnSsl*6?|21&Npkses3pnsl}^U3h%~z957|J=
zho@pZx5OG>V)N2Wh{Qu6wulv089he!+ui2ZXEtk*m7$a!!vSoWchoqi#h;Mkf{!rI
z(7OYFLqzJ?zfx^xSKWw;k*)Z-Ysd@|_m=9Q;%#6)HAIB2g|1(d=idKz4GD(tVUSnN
za}iz0m+RQsbp~)`oEC@kZ|pWkan8M|HFo`D0DQRH>IgUo6BGC9AJbhY;n(82krQ3b
ze`QEa>`sd&vhK(`_P)FyQ9O`WF(i&8NDD5~;~@{UC<y?^KThpr(>UON1Fxlg@g26^
zSFds>bJrta?;m-9VEX?}FP*_PC!4(*vN*g7Wn}6j?Pli!r+zN{SOjNe{mQLXlw0QH
z(V_t1KR|}?OoUPM!{h4J>4s^4jEzQpf9zb{T;P26rAQXN_@)N0Pl1@CAJUaFgjT+@
zPg1c_*S>}TTW8m-)%UMc^Kjj856bKL)E5FOhe^u6kuRbc?%K@K#6NY-bLw5Z`D^eM
z3P)eLOt*c$E&XUJC+j=3Qygxt?er4m5LzoRSN5sC)YNNEGBtGqnr3#pweO-|9Y1ZA
zWvc$rm8BLEvl7tU#;Jem#?=X(wZuLH#l+bmpIF`o`kJ{*F5V)KZjbk}KOJ3vNOcm*
z=_-4QnbpM^p#R;o<R6c(0WC+f&6AOS!I<-%u9TZDOp?l<_j4%Q4QIZVzDfKuWr@N=
z^Rd)qAFN<*4^wCAOq&JQ=@l6<Jze2(vLUr~ki&&~t&80nWr-&ll8*X9t5lbx<CsIx
zbfA%b#i;-71N2ERn?dC0;0dG~Z2=@Af;k|czr7&08wpiHd4HVh*#e3x{JAeds~cyd
zW>A|ZF(Q;dip;$nu3rv-=%5Mza-uo6=WmM~6)}>NS}_EJooJ&Nz+(>MdAMM6IBOTi
zEdFu2G#x>uR78l8#vQsQ{3aJKPhQIoW&UJ|!bR82-+1-Kbvz_He<@l$9=_HYD&2+&
zLgf?BapPlcn7$w9u`=B2WXum$h)J<iH;i&CizWNA+0U1?_#FtqT-Sr5Z_fI$Z7jkl
z*Hw#T*N>43N{TTM4P~5X1`$B@poqZUd}9f%5E~dGR&CiCDs(9t@UC@(E;&?G5wsz0
zIU9xNkf(-&3>E`;NQhFe$S9e(S5_S)2Ifr>HB9?%{F3Na0|E0L*d4AvtkS9>PNtSA
zdFZh>$tZX(<l!3EaEh^eJ!8?kN4%MT1iXF+jJ5*Gx6&x&an<3p?Cn8~IjgEh)A#S3
z=v8boVK?PC&V$}Rst`<!(#;NvNTj7QE<->6dDhD%I24#GXE9rG)<w@)XRv}_g}Vq}
zyi)P;xdHn)6Ut3!=O8eTWJ@*k_pwYJ$@(j==zvirxuv_i-5cGUq-890ecLS(^PmBA
zW_dIIT`NQU=gk-vwrxcOP+N}3V<2v0Vfu(N_n-S4lGW_lpWk_nw2n<$%XcSP(or+%
zvL0*JxP*c>IQFW5Q=*o<-TP|w0_LWT6&;{$E92eDWZU`aAPrj-<LjT(F5HK7LM6KZ
zGnkb-9#%?ZUd(uywSoMZC`Quju>-}PdT;`JsLpm&&*uDPhIdfl!33Ei(t=@PrUy_v
zeEoYRUn^rW5X@Rj9qRd<`_%Mw;kd2r^KDtZz*m1C<SiLJJ5(v;1qviW&$L``?bl4}
zVZPcbpTYSN_3xJC_S>;Z`?PHAG)LOdN6p{rmwih<nErw;l+_O}(_K=(VK*{*@#5;v
z0soxCVZ?b#Gd27tG*)Tgnqa4e|5d^3D>hgAR=27a4Blq)2*dyvGT=nLQNe!$Lw&9F
zsy$%a6KmiIHC%;)kywV%H*?4<@!Gb(u%Jl(<S|_YMG+s+x6F<;@&I^B{O$*ao1-6G
zui>^Y4(_ochab{CgG+uTNNcgjBxwAcl}pikU9y_vdZ<ePdX2>iSlqQ9GsPu!=cs)%
z*b&Rw^L*OM-U{{f9k(k<YT1jR25TV?g8d@28%lNHW*ZQyUwoNluKNh!``p_{VUq~Y
zKJXfk!xcCH9%c%TN4>nimmcEyH6}br$D|fxCo~F;ET@N)*Ca#+1l1-$u(`>n(~^Hd
zJrFA&&W5`|vQ}CmHx<_rebvr>zxjgmYpyx5<AMduYX)FH5rDi#feBVNe@5hwqq5lg
zyFjdZkM(+xOViQ8;kl^_<AIte=9!o()*)dMX)kt#K_OJ%4psIZF!%iXSLL(UQ6$S7
zkMPE`tts^1_}&3Whhhbo$Gty~0mB0CHt*ItjZ2v6a?%Z3G5yDNi&oxmGc^89_>}fJ
zg~1Z{uFt9;GhCr^<G7aFfzuhLcob7dxxB#yP!tSnKPd=J>~NgLjF0OV?fZXv{|5_?
zB~64@g;|Tc$>T63YgRE!1_O<8!5n=$)+c6>``9s*E}`|KeY2JYaGdb>JY`(HTJMyS
z2{e+xRB-s8Q;(e%W^>Unpi-6DjuySPZMmI}78`40A*ZtmdyLL<n{fXsLdQvr4Z>^h
z*SqOCJJ{5EWha?qc4`LM2jYc>s*U1?F}yu+^b+ce<oL7`EJv=ooz(58OEV)%$=Yo8
z_?CYp-S*8VgD+4UG<096o_337(+*43x9cl~jbT)&83iyS>Ayl>2cO_&`Ddq}xuwSJ
z_SC;7Gn2YG3)vIPWd1XxZHgHPXpKU3X476S`Pd0kXRMrpPEUeG#YIN4fI9vzh5I6^
z)1zx10a^ABz`h?A^p#vXu<GrPO8L*p_bCwztKnijVoq}yz6rsu9wthuNhH-?05oq6
z7&c73fB*jKZz$!BE5*5G**&HEP7x<zEPgM=g7L^wh^3hU-exW6P(Fc#RRD9uSE&Jd
zD*gwQPIO04dB3Mr<lj3XP2c!gB&UB`8<#5=I*@FD#iGDYEq<Qz^F!Z;5guKER9P4#
zSz{XO9qoyGWNU8Z)SFRcV0c=YX{dSXWtHW4mH&b{8N>+JL6Ba39~%e=#3uSBjQ3Oo
zg%0_d2*=EG8T0!ev}exbdoZ1+UI)WbFmoxkfTf%tvRUP47PzAq*MzsQDFl1~S*B2B
z^tDPrwK;cj42eg|e7~*IO{4|!`=#(XhnWs0{vz=`5V{5EP(Ulp6l)s$)QXCNxfL&w
zRGPo~>O*h5ln2-zer2ketg?SjwF|d7T&cb(Fc>wHZ4MY6$`$fnKj9l#<Ye28dh)S~
z;uNyOHW%o7iKnC*kwS#WJn_pQs*LJZ*@u?B(V)w!18asL3>Jdv)d-YLU&UvNshmIT
z)p&eYnn&|;_OtZCUGcxGJ{nsu0RlNWcaZ7Z*SVQPldYZp%Gf}_q<Ed80?R-A9(mDd
zsXVShnOoS`Y!6Y4M?v--ju@s4V6Mil!bx!a;n`t`QWs~mvu_;V=8@b5yl&Pn@}Opv
zVY1pBu6$NqgUF}P?Tg~yXM&oL`o9+c{oRy2hg#Q9!US5Lal%I8&FA=tb6JL4ZjF2m
z)M`9(*TF}1emIgFYIm)ju0g%8>fSO6zL&MMKIR{`WoP3)Oc8j>my*!r!38LOx^N23
zu$^Uz&0t3=o**|&Hr=C5!~jM9(u}T*T@`9l;%w;t8;l7ZA@<jgj&)X=U&KK?DfWvc
z%RU^Ihhho!Acz5_u5{VJEv4~}vGffdn%gw5s)Z5_t7?_{ZM|W>DS5#muQL8Q=OV#h
zDivQl!9d%L;lTovtTrtkse+)_{`<OtCEt>=DjoTFnX49eV^)7q@3jKPliYT1!wjGx
ze4ES`i)m=8qa`Ydk8#g7RvsO6s!Z#z7U(?g(+1rcix?P1H}Ct~hW>ph0J3TWZ3$GS
zJVKM(r^(@tY4KdBdxgT$^5Zc{yq!8$3NJGrmZn~6@)-eDOa5-!3Wf}rqF4D-T3K==
zb@NC#DCXMB3awn`&Mtk~Q+x?=B&d=vC5Fp%F_OaRjy%QzZd;bqmHNTW-cY_DgTg|I
zCoremKQC*iBpb3ZZY>0dV3-}-$LTrWhjAzY^Ediepe5PKNvcO4aL3kk02sJ|E;hKm
zc4@i3=V`-Dm3UH&BbCR066rX&1{ej8IH>!IK7O8*oc#0T4Z(&4Kk?1BS}v3+5%Mv6
zm*cHfL2W7R?Oa%GJY1wFrpzBbJR@MyH1Vq7)cJhW0C>kPpP$eVvV4G8#jRP?QbS+C
zUVqm*kIgOweWDZD*op6NZB@VI)!&E+iX@EGjCgep@x40Aa-ZKVpiu}gU_jBMW2@r8
zbVxFeZv<Yi;$Cd8Kige(=-gowzE{Ln$(Q5Af4;U6D<r8{IKmM><oVPpsq8I=V#?tu
zu&$UY8>?{oY+q2p^64CfSpY4e^G;B2#KVFxu4jX*UXf2!>9fr(L!$eEYR@UV_W2#y
z)L#f|*eK{<r8fUoR<-Kv7jgKjsPqV?WDO5LwM7qtlK3ha;d)?{@nK=(;B!IKreCBL
zS~-dr9{7)Qt1e@I!Vo<f-dA37;RUe{g$+<*4AlD4&N=}i>X(cheez<)nH^1qxcyUO
zc@BMrfM;U@n|dxntDuau)aRi{Npf)7K1^c&!d3tIC_#cQzuCK|%}*Y4^PJqbT+d(Y
zj3krWT=n~=G%?zTQ`pjidRu>#vHfwysV1}aa$e#XbiHx;XHYl9Dq;J4>yP%0qtq#Z
zwysKWr%PN)?8@u7DhqSYLJ1qrH1(iTBM>gcAM2hG!W5!InPL}L%^uE_1PsSGyiZ)k
zBhZ@kZ_qI`vjM1hK=zpu@FJ0X)$d*UsJnKQsXoSJw-DGs@sX6ouEfJbPwTT!<gs|8
zlOBk4KD)Qi59~8Q6gfR()2I<Z!}Ut*r>j!X?o)bnNQd*}d}37C2*f)`0-|4G4DLf+
zTCeq|GF;jip!F$BnF()xBkZlv#}_(R!%cR_^?<+6Q&^YY+1z$E7c4nC_m}qJiZ3gm
zCy|d8gyCRIsC-2)5|5Tpw;pY(l)BtLtY0o}ABB$+di(cW>hP-Bl9q@1+$(W}dhR*O
z2W*<$SzZ+=PXqQGE5hMB<>%BbcqfAdRE`bzlQs{nKJIJFA12+lW0MKm*a5T1QQYUK
z2M_HZE6m$>8eA?cl;_Vts^xDF6Gf~lrT(eTb=iUzvK3zJ@lid)*`Emle0+TR^=R)s
z_@;q2Hb~WOx!fzEX+EgdtVszGiVyr~X)NYHPxgeI-}91&JB?`(`0y*xm{_hX8WYZ_
zp<B`ppcefUbZv|`A8CBg&lf(K->(o^vPsQ4BP1evg_-{Kr*7+XCfa|{|8_f(Tk3SK
z0A}_kROQp<_n(#5w2Y1rzb_iwe3f#yaagZEd#yiM{?o<T4zWfv&69E9qmO^F^=kRG
zJ2Br>bf8i(bss??CbhI$727KFm~c$Z8!DF(Uq)bXosTI)VU^|ch0$7?veZ}&XGxAU
zO&@pYx#WzAsUM;PZ(Bmy$BIpazDRRYf98k#hi|gDLzKmP`%Jo;PZ@JW!@6;Z?IMNf
zAg3z4jxXst#>izcMVGid6Y+NouvG;Uuj@#LfYKwm4ze49lrnaO47@nnDslq+45#XF
z*3^<v9@Kixs6)PX##Wt7x$mtpC>YrLW8Li3Mr7S{&L9bn{Z)oDW!?AoHtOpb^}X~G
zcHGm$AFfo?Pw5+PeLQY6l5%fDZ!LW5Pb`=mNtakS<}B=mx}^yHN(oA||K*ldJeD%D
zH1^VnHu`CA-c<UIVe%MtNU#uV{QPX)jW4pSbg#y#6~o7mbVulg@)LXN>0L)ic2zK^
zbX8dQk{W&XoUJl)uCY}Y)Hbl>Ts1dQMG^}(Y9Ni1!FqGHT#fWbY5(>ZUeS4!2io1(
zou%ja9>#9)SyXjDvwQJXQdgs{-@^ov6xgx8UyAOE$&p%Tf9Vs*KH#dKJ$Og#L9HdC
zgy|9eCRyNlc+dN~WnMgU_=qsSu=+?B-88RurXG4&diL>NkbQl1#BUBQ&%<e<g3ryD
zMbl-PuiUqXD>7s(pB(;j$)8#kQ@o@Jw%Bkw<kN=LeM4>kph=!f<}`^TnBq8<A;x?_
z<UO=36$bFu%4JsaG}cQV2vCtJo?F-&bbmm&TTPZZUS(b)KbV4%i;1A!ftK|L6UmE=
zqMoeeUoc;~$I<#Yzr1$mB{M{ND@seBZ)hG)O~7HSpEmovTa@OHPnZs#R{#3NJ%=lT
zTKO@-YxHk2CS)jD;W>RE>j7$;UmphH60u7-_5hFVNF6!|$mMH`i$g`Syqd4MADVe`
zLv2&pai7=5jSLP>%}6w_?Qi~*rL$ah&+c6l(N*7pGF4z6N3zfExw;BFkiV<T7h3Qa
z0q9Bl^v=3Gy5h*OUZ4*SY{P}>W(5lzQ-zIcXX7uHyjEsDUtIhsE*^NWRT4E4+V}!B
z$OK(*s@3wWKQgU}h}5jM9lptR9{*8MT%dJpYlMz<Q==K0cAHVkLmJ<M;CVl#Fy5LC
z42o(z{VJ}iAu%bgs$E#9Y0H1_ZzFLubPvLf?f*q6JvAeBHus8D*0kAc*p{gcxqkL7
zgcow}BM(yEb0@B~Ge&-M^X>?rwW@(mx<ax)R;M@;tMbofb9M2T-~wne!fpWj*Ec@V
zFIB|gxhy4U7(^}hqkhqfNa3B;R2yjD`$q8eB+F@Niva%doB19q#M1AgZow&%?BfqA
zW2Z(Q`1I-k((IK_YUZ=L2SQq&M|WGR`tyxKLWICKIjr@{<vGUp<pt`R==I#A%80us
z*L`w_P~Ex_<cgrYz@N{NLN#J-2ny<$id{+2PpmMI^z2-u6L{SbyJRSo&@VVdIv&nA
zM8@j7!?CA)VxGyP=NVC%^LRDx;>8BaK!xx41<<=`9(6BZe*W7z1f-6hf~?;HV)-^l
z&_wpnOQpxZN$<Q35>syve?do|H;MHylt%in+McEUZn0kVS$;;oCm0lBTWdIbb5NsG
zlCPBr?eGhIhB+Aj*+|66bD&?QQ8NTPPEusSpk_sSe#2ZA0ovy*k7y-hf;kfM1n8N&
z;)khUK8TSaeZ!alcFs`8O@RDf&aGK-QMoqi%p4GgUu8o?vZH)(JSzs<67elR;w4Ox
zL#XtgM_Uq<JY{A0_S9<3$gZ}1yM8KXub2=iM3!8Y)Oq~o!Lw4h2FgIT+DaA~U(PH(
zIAFy^bZ!Y_x!LsWok=Tb7mh_+nGAzD5)LYc`O$;jE1;=iDT~))6~mK<a6?v%_pPFT
zW^HYV-B#}c{6cEs;r?`)BQ0u~8a}H;;4k85SW!Pmiz_x||9WyOS+QE)V=qY&JoUbT
zHC0Kv#3!kg9`*FZ?B@%8B!q@7z{F3UZX-|%9;S4V<}g<+Dhb7)nn0!bjD>-l(0cL4
z7}FR%_>*g~Kbuxti!uUIQiP1Tw@1x&<(bUM0LErfmQ2+X=^j8b9V*Khf*p2)u^ddX
zPu)@90EtFtW92eHKb--z5k2a6;w*dUbrAwp+exjm?lnkF6`Ar-sNevY93cZW*<{&u
zuX{!>D@uVHgk>HGASjf8hIO(n>8I$cl@7D#L9Ju0R~Ip`=*V+;S9Q$3JbT76-3(7*
z56z@MKOuAJ`xu%bOMdfltI`Hgj#2^a4l*(-$K)Z@478a0Z8u7@<i2SS7Ahrd5KuGK
zEjyHCa>dA0w?|C!EVD@#pOSg4wC?;!)OPT<2QawEy`$e@tbX47(W@e{^5tNX!R25{
zVY`~%l=JVGU+lgSkl<U=GUm*L>{9d+<%_;;!g8a2+SG?jtl!C#a6rZ%MgMS%+uvi?
z<xQqXPr7%~Kyma9B6vVzMCNn03ji=fpI|9Pn{*uzG<1GC5K}wbk0vf1VMiH|vAp@X
zC;~Nllq3RnkEbiBt#RBKaW~3D`{X=#Lanq#JJ{z_B<GIQ;lhIE6K0GL(bmkeYbQx0
z=Ij`nN);Gi9J<Qsz;wdfzwp=&wv=gJQ(djmlS_*2=zBP2K=v=L0*~Hk+I~yQ3EpqY
z>9doIJ_B7m*1v1XxezuJfDsxdd|K9YoNP7>7ag}Wv8ca)cwAa9^5Oeg3I~;)r=SI6
z%KBH0-*m=KhnpkvYIU5p9t7zfP!luv3rV7EpDhMQSd(c;-0-3|kZAMFDu(l7A(r?a
z?P*}t6WmP0<qvw2P4;6z8(P1G1M}3%ZgIC8&t5~$B3EaVz+PMoifL)eaBg}BA|<S8
z&D-ET5I>;C`uW!Z2<`lyS!e8po~jo-gq$5n82{3TGI02P&G=@0bG|F7T*27nI*G@o
zCzS+rk}{=voe4>&cAb>WanlWhrL4SWwB}oE>rJTm$%11=7BD%Xvr&c9*=?c+B4PrL
zK*VM&f;?(axUKve&WnUFpxr(lvGcy0l~t%`HkV{kKn`%WsIrF%Ci1O&pB@!n351!*
zzU?SAs&V9p8t!Okei+~%zFKyyXfbQ8b4k%~bLOM?-QO^zQW&drQ@B@LQvRkL_l=`3
zXBB8~Wd|I(=+vH|Rvbqap{rrE`XK<SlCZ}iEYtRzChxs0pRGlZB1$ImfKuBl;%&zL
z^p47DlnaQA)3$LM23%)&ZeZY0j5|Ne6RP1G<k{I-JM2})aqE?tkK(6Gr<CMwX$hIr
zXC!^arGh%p^OK$8T;<Rq7;bN6)up*>2d<EC%PJ}*2>`6tnCo(hMOs9h7s|^NkB-kr
zOO4!fddtla(+ji1laBy`EJq+(dQo@rcue_P)q~p@%E9Z_yCFMOkm+}7l41}P@5sZn
z11oo(d~7_ZOeTwSOtb#GKxjZEWUbck@_PIA*n6A21INsgA;9yneLE0cdmGS+05B_%
z0lVRBm20db&M$VlsoL4zD1zZIv(K+7PISIKtnwY33*K7t-9PMZJyGIZ7IYuBeeG9u
z70BbY=znWfUjAMD?Afayr}TfjL&qTtR|n~5lPlRyoz83I^B_E7H`3YgC}~FT=<Bo#
zWKbMJx3Qi_263wJQpgqM^>jaR!<lEd<s*!YNPyoiMXP|Gq&jB$QV{RKw-eCJAvmyH
zIMAVdPb5v+OPI=F7Koc8y~dq4Ns<9|;@c?(f?DRX-uUM|`m%R5*VXBTm!UwbMvI{j
zM^E@IKIMmYPb#7C7MiI)NF5aXX1Ia~bWa(geQp`K64nOUIG5O>;JqLl*#np=;8n;m
z44PfwnUxoz<X#TF3vrg;X@6nfqaeSpH$WGaj+6h?YvqWqHtRpsr|dNSodu4jnhk24
z5d9kk2u0MYvW?fGTd&o;Pb_Ts*YsZ6QM0D`Y)6KM+(&!ZU-z%niQnckEb&exhg%dc
z7bRkSz;#Gh6ReufUgbe-&yk1YfS7VprCBpNboshMqpFl%x_5W$`#qC%UI2a%Hu}Mj
zcS7~?Xz-}JqW{qWr|KTt=ljmGNIGG|%}w6)_H|y0PbM+=%}1e3)Z5A~x_CCbA!7PT
z!#w_N-?z?2l}egGn?BlD-<7uY5=zH$fAP`T-kJh6H&HUsZJEjC3yOK342KFUyqzMt
z00@uO((CLQHl;xcMMk{r^uKEU-g-61bX+qiCWC|L?F|(`qX=j9qbhuUa3w&xLJV;!
zqJ^!{E38e+%N@@HpYdW&VgUnf`GZKNl(*|0c&zuAJg!XL)q!3%sGj;fE*st#n|YuY
zg2{cm^0`W$#Ryf|Bi73*-MaycV)`|kY;+0cw+m-s&{wr@2`soh5+fCd+a{vv#Yob>
z|IUi4e=?AcgLzFT{o`uM4z}nBy<J%MJd{y-7!#MOJp`-IxeR4;F~o<OnV+c8SiMyV
z9uhF+qvFf{$cetDMG}hYE5+}iTz;p=grwven6}1!7;3@~3UvSGFQYV~Zxv-BezFnK
z8VGMbZYt?2cY9iQ1ubvA{D!LoIV1Ke<b3_5G#OC-afgQ(IsRG5*-FU&G#oCBrgf)S
zu^+c5v8_T5lXsHI-3e;(KykdACeIW{sacI5>^|CgmWKf_$3V(RrsRUIA>{|+ggfi&
z_o5<|Z!QuO_}(&dWcz&Fuo{U#z&@^rUn`e4X}Gfro2*uy$<{A>I;z9W#!6(F*@7OV
zD51uJBVFJmzOT`bs%LSi$>C+2BhBZ-9j{z@4i~&8oBMg7_obmn;KA+E_-+k@$DG!C
zjoYDg+GlO!wIus;0eI2Xr+<qt8&9w3`|Iq}KIL}yr{$K2)6*sn<xpzp+KXxA4jtl*
zt#%d|dz`F%kIYOo5u;WLii|-cR6c14Q&WxB!n6?y8n%mMydKM)5u}&gQ*0&0wJ)>$
z&OQN{x&@=YpN+aKACF<KXCG^pULGShRAtZC3SM)8&Z#GO<6+TP&{XH8Y7rR#MT;gq
zG>A(UH=p?CY`=Tvcez_I<+X&{8X<`%0%h;@k|kuEn3)7Pdb{5Dna`A)uCkfo_>y8N
zo|F7xx6YyO$cS<RL*kZ%e3Nz&Ty4(*&2c6KROPfcBR(#8S~Eph9k?|I9zges3R3+r
z*LE+=OAFEacj4ZTA5FVv?_WR%e}6Bv>~t1fbUbc7b4Pf*|6uk2s~e2po;Yp={Qs^B
zRG2g<0LMrw?Y=NY{!qeaI$hB}Kv#0oeIW+SCsdjMHCP9_4P(ipK}y+c)Rr_nUFXfL
z|8Qz9nfe=M2>(wslTT`yrtTvYDr2~Di?K}8BDk}7mraT_*X-6{1lo~57AKK}R{*4s
zpLftg)Prh+_hD5kx;lAW#EXm0w}<aTBTi}l((Ia>o|at0z^Ss9P&U>UPQqe)WE7R_
zyZ~q&I}TbI9m>0-kRm1Nx%!&8M$IHVdtC@Fk~d20MH?^fL9Cv4#?q#7q?dQ&F&hRW
zmwHvA$_8|}%bOhRHHA-&u0MiKUGSnthrZQoR+5u?`#%cFA#|6vd^HK(4a)n)rw0i3
z(93%JIq{+o4QEEPlo&~bglS{bYNQp7x>McU)*P2=j38+88BBXkTqySawYvKBA!vE|
zVPtOmm!a9Mrlw|%D_=G8!F{*SEu13^;)KwwN~*tYx5qA@mwmQRKI^jI!`X<!&Lg~^
zF8n}HeM$Di+y2A)75yfD+Utjd_pDwzXLe~n-Pu+2TvF5_%GOWjE+7&mn6TkOh79~H
z0kFpF;XdxIFN2dJ7-#%D^w{JH75&#9{hd05>ajmZ<G(C(81vWUzUNWUleIkt+EJ#1
zwdGaa`jXUgizMn^(T^Y87xFSBpkl(+A8S4s_xoFlOsi4Jq?jA{j~@>&3O->>e7oZW
zBInnwx%_$t?_R|*2C~R|4z&S+x5lQf7#|@8{}sRxXWY(a9ci?J?0FU?QFxG%6<JZ<
zXf=2U(A2JM&=ChjTe^J?VZIlu%WczRuJBn43C~BK)%M{zJU+ps1uVOdwwBfX=7gof
zWdN@gk1LbKkT5(;^h%L(*km_w3l9Nx937l6FTt@&LtuMri}z~LeROdf_NjbWxcOjy
zsQxT09g?FL3bcCdVB--rf{+J#;r$FYk&I{*^Cu)))ZO;*TiwbgCl^$p6WX&|P#^F@
zUnGCuVS;QC3inKx428)Xi?q!mgXz+-ALjOQV;}Y|9dgsUe}MU58tYccR%#lb-||oR
zImIx@pC3&eOdGrKgUnHq{O8mDAEFbw)JNI;fiV4E;1rtkuumn#X0zhQuZP_g4m1|I
z`Ld(e!-+n#S($hWJUnI9hE$NCuK_s)d%JAUnP0|2ZtP32(7T!A$Fz*fJ2$XTT!=pj
zi@~G{_#%L(CCy*3K-6{#oV(MI93)h#x%%0B{<DQEar!(yVeTtVRGD$@KpU`pYkbii
z1M=x3jH#G0n+&c4c%8HXj9Ub8hDST|V>jDj3=r3Hs$FOsUu33ZAC&j{Qh=?sM$uDg
zqWtFMs&k0J+45ohQR9-QtcU{eWFMPUhCH%*GtwcDAS!6^*#cDs!M|AB1;jnBXNH!5
zH3gGDsm9v&MJVkxzK|3~{o1+tP_@+(yPac_M7%Bnn)&n7lSzhfoSQ=Xv2;7j_|bFV
z*SnQz6G>z-uBta06ZW~IME8F0b=+>y+cO0e`$CSG$}L%f38bWG+M;gs0{R$hvp0Hh
zx>6P_Kh1Yzyw4{G*&H~2$lRr}%XU*Gl9@?@*&s*jSbe%EaIco!UG`(%Y~~%D@VyNm
zPZ%#{f?hQz1S7b^*q}Tr-W4pp`oWhKQ2@?jCBP!gtM=xe{6LrZ%8m?clFmjb1MT&_
zTErnt&f^V<Hyo5zg0O8Mb2=uswXb@r@do)PbOaGTsecY!A;=ii*!R8yhn0B@$GDD)
z7VUQgPvi4c(|dJ*Fd}tDkPYuShJ`o(DU2W|5F?hBGd`;+c20LOzd{cEB03GserDW-
z`}L995SUwPN%f}7d)%@9iL766zIB>!0Q*V^gs;2Xl5z_gj>Gri(_y2*GRUYHyB8}d
zZ(LuB;b<+VeJon++OumXIU29@#ksIVT>-I*w)wrLfxL`mk*=GMg&f&}(LskF{=z}~
zxNt?!6;pF_9>6CNua6T28A^K*sf8DL!j0>EU~>+COSrVv3n4g18nNlAo%T9vH_QzZ
zd*ATbaXZ(2SW`ENzJRK~Q=fhh9%gbo%&lRSX19tM{qCPdAid@lKdsFwTU{M4+nv}2
znD*fs8~B<^&UV=nSl@m^ohx$XCydeipRk;U)jhqL*@tai>#97Hmbsg1#su{4h!=y=
zp1E7o3(f+!v^u4trXS;6(nx(#;W$Gduu;($@Kvc*$O0K$<+L+9SFx3is3F_&$u0v$
z=V*cKH@b(Z+95HM-m7Uj+3%N{k}t%<d4g1X%+0XqZp$7mNR_=JYq#r_-*tZ<uT$Fv
z{jPKvCGp0rUyD-=Rk)YKN2$hqLNp|D<T913C`BQo>U|x&_`|v7#4F95nY&d3ZT?2j
zJ`@}AEc+PB@s!cUjGWZ1lXnXP635@TG*0OcGmgOfpz{@4(uc%G5*9dk%?V$aQ-~W+
z2fj}un%7Uad)ZL%gWKcgf{SazF2}F1L!8WypQ3_$SwENlT4~3^WxOBV$97?Pye$8S
z%@;DTDY6W_pRdzYyxhr~EWu5KV#^q9Lsg}-W1d}xR`{<5;#pa)Aec<aWoJNF764y3
z=cK30I<^DC>{>{BEq*9Hpey_sy#m^B2O`K6{inV3YS{A#?=;Szj)puq4Ny7~Q)4ql
z)WgwbBxb;PsPtvdEjwFDIdldG&XuKQu8OJr!?7Jgm+j)wj={5tCtEppXPg*h^V{28
zZeaKti(Q-FYEKLu+`{d5a$;SLUZQ=YM$z0??|Vbn9Bl*Dm71f}F$-k9(ror1(0doK
zBJe#5BX;Y8#?QW6?>l~>YrO$gIh1D9AA(*sT!$ZYdjs-)T7JKY>E741uLVhMBuqac
z#tr=ON9@ZV;jHFIM!Ceo#l<C*k#r&n<ks={B+8Es^x3g0wAt2lx5=YMZPa7Kk%tM3
zqtxQuPxl<U^Gcl`bh38Ss24g}o6WxaIWc4IW%}oj8rwuBKXm}VxlTFw_9wQ6(-p&}
z2<A7`qFm0{37*W}_vh-VZqOzsPhfb|G0WW-<sGl)(}-%YVQj|X)6+_qtIZ$G&vLKZ
ztt#VvbS^6bYNdaBEq^LVShyqzF8u6n`6$v8yj>KiikhC<sJ!+)@68ji8~OG+tk<i?
zGgLV?{9cl_{`z;IwUEba$TjR|Evs5EAEQgl$qlErL!Wo!sJ-lw-fL(`#m5)y%^v&N
zt=%aZorCUPHeGZ{J;0BOwsQadL+L7s*bVGEuJc6lpTFSEtiB^*exTr6ppZb88Qzte
zSlM2(`e{HqTKDxc$<io8HD_O1QA>tvYek&ju{Y+rEP!bnVfR8T&id&b1*T3^e`dwi
zRE#?1X&4$9{#7Ko(W_JF9E=;Nw8)T~CF%WyvDq2FE5rt|;<+&V6Qrhn`X#FS+SDiv
z_t-&U{MAAcD2B@NoR>|tC9Y4VqBHTfTuakYD)M!iynp&tH*qI&PkP0NDVFvzG50|K
zLodB+4D9q`^4oFSZHfqGT_`&?hvM#F_>_~tUlC<i4odQvb%%{ZHJ{U$NK>ESvh#~k
zpti#$N%JXXFYBl0?owtX9hN<05)O#<3pp7BS<xsbu3kvZX9_|&Vb`bK@6x#aZx8Dw
zy}#tw-O*-kBTrjMZzA>iS@xy?gX~>NJ!&5Huc1v9+TtScSh0+}$@gZ4nH)BL9<{Al
zM?*?}14`bRF*u@#Kf1RMl7#u87d>!%Y=05=llu;WV14jAw%3J9jqQ`*a*@LZ0LJuI
zWJX-Qq9FBOSO1J67w=^nSOJF-`cV19g*OWGF9r$l-~lr~-R)}O9`8yf+1g>~%Q>$t
zE5DCV%GMrRIo!g$)zKL<f(CYN4>8Ry@Uo-vT4PeBtt4fN;oo<6;z~kkEyJvNSf#sg
zSSEXzNc8<em&8>}EG%eOJvy^2o_osf_h_Ah&OucEG$j?#O0GP7qEKhAkK$tPTV%E1
zY*gE3E`i6x)$ditTGeq`{j#b#53N5ImE;Qpa$m(lXH;!~#9gCbBGABWX)|b<-)U06
z$uG`C#lY{>+#AX-a}r3fDiid}61so>1f$pfcB#kp9v3%z?I$d;9JlaX6+&Z__6mcV
zk1^<V@J^X#n`(#WUW_s;SOxcTy*J4rY4yDt^0}BYu!!ArBb42I(5&{oY})z-Ink~y
zl+LPNo^|R4;65=ddcX??54@KWsKN#<M|Gv0QAmg9zfb6ow`9FDP0+CfM$={Wi*FW>
zSA*>~9HX9&6=JxY?{O-DW-@N|X#r)3kAmb$$wI}QB)<-}hI6IkdWB#5NK^CRq~Q2k
zXc3UBVa%au5*62>zb=(WGnHAOiuN8VdML&srS3tTonK{X;SYT2yIACR7i%?VGAaG(
zg9L`_zBa6%kY%#cv%-E`c~zaygUl@>w9rTDRU4PkE1pFE7<gW+T>k3Oin2egFsG_i
zh>*HFsM=(5zW-bJ5!K687$NlUpa`FyC6-t-m{A~WqOfUi3kerVFcFK<oo+?1O;B(q
z2#yrqWo+FqhnFKkWABbc8jYDSZ*9ooFQ1z2p*2J6jHeS!E-hvq8Imo6JwI+x?xQYl
zS8PWq36%Cpa)*<zh-OzxRc^t2DwhuiwB_was1kU*>r(9ujb#TF<vSw@*UoLwq_nI(
z%yX|nxsmCHG<Nha(nu~s@&WYA;qA(qIkHsY0l#1{M3wOL4t6gX;#=C((13rY-9kzd
zn{sMu%hTO$!k!2SJfqgycf^y6fuwg)5zTglXQ|%rzH~=*0P(QEljNl)8qaKwFliB&
z4nqZGoPW*91w!=#rpDf4Pi7v5h_sH0KpoGRf6DVCWIg2ec|_OGRsmqvBQ<>_g1g4a
zSVUbdSj~j0y3RnV)d8x%_x3e+?AxssbCf*lRkb`V;~L~+Azs+pR`cVj`@?rvEdq$Q
znuVX<7C|%m>AK1*PpnJe=~5ui>d9r@!f%+`yPLCA6F>E}=HnJ)+*|#rO2DOYqwf0>
zNF9#dh{LKF8H+(0)!0otkGmz7X5H)&9oqXma9dLWjFJ6(F#YJ8JI!d8$L2aW#i7Rt
z?(HO;&KA&tar;L9c{<8t*lPuP{9djP5BkFP_tSHpAjZzGl1|ZRwrM(IR(0lZta4ur
z9$w(A8fGr&Gd2q6_k0j1el!AJS*dbbnD<U68mNF@zTt*k{Aj|$jLHgYM82AR5$dnS
z+hmOgrRc%+`m*Xw&2OxVnY}m4{hIULeWNe9ZzhvJiCO+mokE};uA5?oq*hEYWPvR1
zLw|6+tKXmeR!Jkfz2kjYY4|y7i*C+Dc_MYbz)zyq_U-|lXGnhCN*f<7ncG=JbO!_k
zoA5)K+dl(#-&4AuoPYAMeRuRR{iKsjGLlYctK|Dj++m`JmM`+s-YX_I;7S{Nd7V)|
zm>n31IPdiqx4z7rlLR9LhmIELBCnI4IN>!Sz7uhTSr<2UJ`6UWO_;%4zG)EPdGqw`
zfZ$^0r|qSy2LrUJKYb+X1<?0}A4Rl%tv%A<E&(c<kLp!^A~*<w-@|yI2TKFh)jVS*
z0TVxsN2CxGvY1i^g<QKy+nEQhuJ6%ot90?_WNRRu`)9|5QSEW-t<-!icQlE#lfj78
zg0oNtVT4g+bdd<~T^I4lMo}Z$^R-bMYT_nR)?OU#^1;@)CBZ&}!+^%pz<5nl1g?iU
zf2ETQignbdZrWWob9*<kj&OGKGn|Frt>h|tsl_#P{q`Z+%dsvNtpr_s8dW@*PDyhm
zQB`2+--wJ;CQT19U2}?gie-c|bP|RmOCh*ih{4rJQIYC}L^e);M;VwyU*BFXjD;!P
z!S<xz^0}3_+1qp&+TBqj3~C|>BQW>xpQ$Q!MPYNtQA*wyZMpb9R54Q$eGV@nkh#$C
zb;vj$ViBfzBL4C`Lg=|_kXt(4`WczGSG0~(c=GJ$%jISUW-kAZ=Zilqt0LqWYly?-
z5*~FaR;s6YuzM>9Xij@|5H=GDxX@8-e^d|CeWOP$L9p!d;6IC^PBI8{tPewiNY!j;
z?>huF;c_dELz08h-8`Z2C&%iBv~Y5@=ecvP?Q{3_tZ%vEB7RVEsV!ISfXYbYyJG`g
zQV7~q)J?(@8|8?Ro{Mfe^OgXb6Om2tr@UVEre58@Go#BvXAc8&&u$tbg!3K7_wiMO
z<;{O%8a6H|{lrP-JI2$v$@t~g`^<-W){7r8rT3q+emY3`)Q*L>X*`h-9%2u?Rt^*N
zMtk@#=@bdV7R%Mh1bt1-6Jkxpt?-K;WB9zoh8wq|%q-r?<@d(2%}^xjMW;}39h)Hc
z1VkpPEPXoPhs3YH>Go{AlwJm&OIqpHvif8Hy%`kVyMjy@E+H0@HH{fC5~Ffd&6x);
zXx5>Z>2|3m?uWIJW3fSFY@~l(?@Kv#Qci?m%Rc%WQEABO*6xqDc^D%<RNC{+HK_zd
z6vjgm`P{`+Dia!-r-@^=laV129m*9C<kk^fTeEq3;azEe@=8V&x0#)_E;$ta7iVKi
zwYH+^Wvx!YT&O4Aw2s9hO}2-zSNbLx;$p^)8!I#d`X2G=I&V@J<AyD9GOj6-YJRn_
zBD^X8q)$pa1tfDJP&FfrdWLo0@e0}z8a^sMz8&8~JSu`<u^`owQn2fc=jnk`ZE7Sw
zo!Q41XJ;ddY8$`U;p`p<BC!JP8!C&qshE#L&=NV1#V-qNlpxb^{lGhUv%+rlki)4E
z#}*n<2D~_qH>_Gf7~eE)0Q`Kgamwb^b`A@?+1n#{tV^}$_jj}F$ZMItCxV3*xxDMK
z$>U<f^0jnku9lkqHd!c<_N<+acD6&aGu`y~xM2exBmFMt*6WlIGRUdu^7ftb+#xVC
zYBESZK^9ZF!Rxk_9{g=Xu`&`zRkT#DPun8wjIzz8KQTsrL`b*+@%_mqoGl}0@ImqZ
zo1dY1_yGqwDm+}LS@kRBGRKQ&Tkdpn7OLpciawa{d=aj>9|o6Co49l@xJo!>^_DI6
zP2Fk?pUs-<%IC$;0gLqhaox~l^`Gqd<)RDbrlyJQ0xahP*wfgf3Cdw+rry6#dZqbZ
z9xQ8-(vLxo`{5W5{_qP+>pu`{%<am9=i-|<&NJ5XM-3fZ&p4B;DpY$HT#S5~Sz}s4
zoz^FGAYKYOeD^Nd(pFlH4c>29-$K}KRW2IsU=m(fJ<_?SN0)5Cc|k&!XM5@b#}cR!
z8CBY9*f@oGuM+@;j1g14$GxzZ{ZCQwFEg$t0Ql0=q*sQR2bp~~<9&ihluCH?yPu{F
zM6OW^25~jF{C_Wi1MMgKPE~hakt3O;Nd%O@f#=0nhREp7TaOWiv(iQ)x^Kb`rRb~0
zGrPVs7(W*y>$VlM$;Ur{gWy+DWfj-xL0A{wq#U~U3T6rh6B3;a5XXq@!gDJndX@dZ
z2E+=I?Lb72D|D1zI3M!uJY5%T!6rJkbC*f*n^QboeR3lKy5)>1pE>`w7EenGBIhDp
zQX%i5^?aatBcT6MEJ$x1WDj?ns;_NGmQbWRWWaRlh2179Ga^VK>y>vafZomu`Hl05
zZ6T8%UWQHIieadQL>(bT!pMyU=Y?QnC#r38Z-33B_8tL^otk`~nvX6Dq{3E#jsr<W
zk|1TL(o-%nfFAgCv70s6$ouZMm3Fu6cBVX>R6Z}9{IQivE0_~f@DN}=o;2CNtobX3
zVx@3pD2YdGLsnk(z<Qw|vMLS7m!?pUqm@-Kh;Fm#0ef%k)221saPnMJ^ME7w5m~!(
zC>t&8<Mjj^FmyF9$u;iDvS7#NwJ3HC?M6O1d2Xl;z#>%ijx;PEpRzSiJreMp--Ya(
zV4q2{#%F%TbvPQ}izVyMOZ65^`Y^Qm_SMOGI|hB`2S8(Ia{a__sFn}jO3<Sy_%Hs(
z$~|ETd7J2zJkya(U6v9de)EPyK5&32;DpJi_p8d)ikHhrwaAL8>#6QkY6>YaShOSZ
zEHgk2dDZKzzWj^MGl@ak-{j(ND#+kA5BU3?Z&&N6>b6|Ae#u|$-3tno&o5Z)CYw*!
znmeM4vS0nwGy!~8Z(_^ipXvYJKqJT=v-AL8<<*3J|Jq!K367Gl87SmKXQlxPf6CQh
zUuwFP9wtNK5gsB(nBiAH+V`aZ(+2QQ6!hD3HHS5B*;<FAa9^Jr>TF`c%%pciw@Cch
zs`86U3PVwq)MTefO5*bg$XH4EzDq;L{?tRX@^X^G8qTcEok7Qx)B{Kk6az}rf1s4B
za2e9}Ev3I7J}E#!&IGsU49siDv0n%({94KN78)P!Zs@QQkmr65c_L~{kRsWoqS96a
zS+`qH22cg4rhRC$Ju54R9ml{v1sE)R$H*ygSjH*(De{p5XUnbgCkwi7wM1u;dtelp
zA7-;ZG0!W^G5f>q;cVq_x7LtAmGKFk8mnwZGruYMNz1!o$CqcUsQbvEGshEqn8+7*
zO6lh{I^A5qow*|SN!Vkfp+`|v)T_Q%rh8Log$5)K{~rJrLFvBfMvz`T?bH@ujQt{-
z|Hk`&UHCt~|9R8V_xrnVzf*C}xzzJf+eO#5TW_6x(kZ95K)dL}lbP$({t;ileuvCF
z>Zo573><iP!6w)!LZ<V_9i2xUet5xQNXO!S^)vX;+jGx8Td~M(x)MF2lDu=Ra{X^t
z_4&`D48Hw##pAN_HxRFv>gN10vSi%2u~lcoAHyrI)Ke{RbM#N}$M7CXyn-Q-;0>hX
zjyo3q*k8**P0apSTjX&&gpK2;I8nl=L?m{U2Su>RSqWR^H#V^dAItCH1#rY2Bg$TR
z<yC%Zn-~PbwO?0C^@Ujgar_g$3rg_U%=SU}<MKxmEm1`*i)4GK!f1qeAWeC8rpX$|
zMsj9>t5};zj&ExsJs$7<;1yfKyX`}-zNV<(A%{Trv?k@t`U)te))I*0w~MgXGFVie
zAXRP!_?2&<Sk}tZ7=spZ7x8R3tXN!&7Wvr2|NZpSs#8umSrY^i(kOldmuarY=F(9S
zu*e}NpXypGq(n3}(<YI}JIeRnOXmi`<=qP>;qABHsn9JRBy$mt@5G6>|I$k@EhKbu
zj|-DfHuLxbP{A=!c-PnaRl{$(X(4XgXpw`D3h%OWU;h{(iy|YPxcu@fqD4ho;4=rE
zHTU(`UdIk356xQq#n`d6e9y_b=boeYTt&GVhD0@d|FaCouZmdf$qD`#gx_EA%7T(J
z{qG8}ttzs*{ZF8Tv6}d~P5$VkjxO-je);93nyat5hFer4O7Vi>il;H@F)7CGQRHxP
z$CJZK?1@V+`wiZ+#Tff*e%(3e44MbysYO2D{`c|T0=%a~Z|Y{*&AV-u!>_=p5)KX~
zK?o9|5icdq@M}4n$-b-yZPcu0`y2LuWB7$kP4#Fk#g*Nl_^E#wy!^wMl;Qo8SOd_@
zf0>1OYFz@4{gvaffLZt`hwf~Xd;Ivr?z`^x0~S#ha*<Dkjf>(xpFzCq?z@+K_0?qU
zcqRXL+@X)Vi<d}zJbHAs$KPYyZJS9eIR0~Y3_mon!wx&<bm-7dJI4s0oz|mA4>>jL
z|No92lQB}3ZTyV&zv`_e|EZgg$GhMp)<FCrUaRogr=MX<hC#<scwL{W{g^z}!QpfK
z`O@)?EwBJbBzgDm?=HiR#A?s~K7Dp1e+bLV1<VPRvuhA=zx>im<q!V_6KU|u<G=gv
zyUVci)xD=MkvRPD!wUE!W``;UE`#6Es)6Y70}tt|ho4N303nx;gB9ZABIG~y?;CHt
zQOQL<1_zT6(i6U%P{Vh#J^#WBSXhrkP*Gnt%3u+GxPb56vl0pL`J+m_s9p9_X{63a
zqV_|G9TZaf!r%YC^qFV1NMj{YXT*pRix)3}3IbN@pH3a&^jWP4|Hh(!G~srw+-|$=
zID7HUOK^9Cjf+0b+PCYV9TKi+lH<ac95dz<KQ0od;c;`X|EjC2(&yuyMAWao{oGA;
zJ{<9-<=FUxM6v}twD{N?15!LxyHYCBeE;+MiN8Lv1Uqq}MLvK)b~^F=3(uGL?>}HR
zKFU!~{y9-pedlxF(e~tsk$04Ek<WMLr|>sUJMC00@<p8_`iN0vMe>gX6+x;E2^?9J
zJ5N~J!$c$wfq8T;vG#;yM++XWEXN`roLdFyKRCSDXbbrv(fGmF;Ejn0KX-m`G0byn
zB6i}-4zj#LGV!l}{j1`cr=Kd5{X?4CA2kdKj2qdaOVvcLhpPN|a)cj=f&^>^(Wwhw
zv9@$8;_&OzBkvelLj558X!EC^eO7tuDW}*XUnBT2w$rDbdiva#d4r6V@WX;j?j@J}
zs_@cZ{iaBZe1<jg)?05^o^a9$b1JJUe8U~RN$8DssiLAnE)j^x*Is`O3x%dPRERKu
zpSEPk;2{g~XcPN@2wkJ>N@Xp1<?Xk^I649aFM`0tC_^!}Ukg)FMMPGN|8$Hm52doI
zI)Q~|taWQ)T0kf_=beAvys{;HA-w4yjxWcCW$_zLO6P|Qjz9i?xGk0~PJD>>RANWA
zd?F+?+WvpyeN-F;EZ<}M?V91H0qzt<XqcR6jUBvrL?55k<y9i_AJsv`s<E)Ifb#X*
z&s~oyh#c>K`|?aeoJZkN92Z{yu-;p*zfp0YE%HTp@Y<IpZ@=?)CB=)C&7bFEnuKHc
zFTM1#LN9-O?=xQ6GmlTg7!Jex?t7!EhY!DLp>Kcp&AaFHm4E1)lcCGestiB=kxL39
zy5jhSNAxka_Wn;CzhDz<48Lw*i4?Zq(I3OlvZm~!+9cizI{xRvZ#e;vDti8Z^wEbE
z_>iIIKr6#9s4@NvwHyEN35j9F_^D4pji`tJ{rn5C%lJ~XgDc%UV#FOV%S-A!|2uZ<
zM2Tb@)DAo{ocP5ret}&R)*vooUvu@<xEld#9DeH6zdiLgEoOU3#mx+n>v4Iu;9BVf
z&Zc<zfAWdPmt6cS*e_e;6Mo`=4qDp3|Dm(+Q4W(c)VUP9!Gs*~1#{=uVxffd6u+t_
zy5Gm{J<cnA`?tUcjZ6*=Kj~^iKdRUsF=qQ;rypgDe8SH%2+)V)tMRD%g6E%yJ{0vz
z771)6{IOJ_dsLb2f9>@*D(mnvF4c|>N$kR+UL8E2zPy7F$Ft7nUq%o7Lm*-M*)D!$
z!i6X@4j=2o0x11Mv$do~9h>QYr67@63Q=uDT>rZq6+x;Mb@I>MXnYs^!3Q5S>-00u
zoQrooFRff!PO_r@?~dL2S6p^k@tbeH(f*Fx?<nfqcNgwn_b7$PUo^)572$VzF>s0W
z>3A)T$6sAjoxsg5_+xl)s}d7w_+#mF;g8`1BJi#)5%$;ou~_@%!1=XPM_|MD8-9#_
zH~-bi5#`FdnvO*AKa+&ib>4o5o`8ucgN(6Q|ASU$F9$#Knl?DaB*g-v#26?*lO<dm
z`ATPA0$*SoQ}y=S?^H^8Bc)TP4%v5%7+DJArbjvPa{F8?{N-XYMFXwos-haL0~1}k
zPDJBy3kMZ2GnnSjJ|9Vz?u`e4S=5jua`0%_@9+M--X+7r3?F>-LFJhkC~#U>xl#O3
zoWN@Ih??c#M|~9aNTCaa9Y^bA5iBSMD)HQN&*_snu8jmO{LerC>{2bNg1!_Uz1?EV
zt(;?!Nb?a1e$mY@5o2P!7+=@*UL{*<Xc76xKVGc(VWwWRimODzy+hGRL^13xN#XGe
z+eHNGUVi1}@(E+{m@tB|nXwH2xf>9VByb1{k2^EYA43K|Vr&eKOm+E6i17Og4oB2}
zOLt6?xDkwXB?>V^c-)zB2j9}Iq_2XCYk<EqwwCAf{euqw)6dF~FC%|XJ<W8m1Qf6+
z@AAg+w`tQBU!3a7{!{qNUmh--Gj}dZ8+VLw@tBXNRPc+AA{g123}bO5!+!v1fS<lQ
z!AdJee2L>1o;7HHWBnh;k1r|lk*#dJ*xk;(dN=FUyLWbPoO}1~oztsVuN>qv-mG`e
z-i+rUk7t(0hsEqE=1n_y&Qd*;>*>qmjCUCU2Fl}yGw?VVJ$o4*!Ue4CW?Tzxr2id<
z*^VV;OY44r7eA09nOZ&hTOR*0(#MYb0*(jK*Ck3zwI!Wb$&Ww&7$1!g=dr7(B_8+O
z%=LdVam5u^w0!LG$67yz_c`H19!07S9BtaR$>MvSC>8Ag4?q6c?dV%k|Et{uVPNcB
zPyR&33i=;AFbeQq7U+5#CJ#J--NgbZUa>hIzRtLc<jmpq`BqH`0gL>>4l5N$iPo+8
zPO<v@M;WLw*B!`v=DBB=s`(A@!;!|0XQPK-yxwfHEyzz#N2B;j3>K1%T$WI%kDp1F
zr8Xv)Vkf8PKO=a@3U^s}_&OUvRa*u8q!EC?|6k%!LcT*#6yWfH-X&BYKM)vt(WR0o
z;LgZ-^pQu(8sg_8ER!Zq)FT=!ibV%(5wJR_lH8c|55|Q)e@pT-E;idtk0O)Dyy5id
zV~@6e9AjhX&>^__WNm2Mrfmv4@$l%NU4Q)1N1V*DFCYiqv;6qu&8fL_=h6<c**IB*
zixB_$_e*}~kG^o9i?0?d7i9<talsS+QB@rVC|t<+!(D&ii_e*_Uqk-;betI=(oX-Q
zbZ%}o7QFvZa?n8s%l}~kzMuGvGtZbu*s8!o96!+``1ZRz;pXFnqLejQC`OlEipHq@
z*jQ`i3R40f$avItl!!sb&@#Nj0I%uL$GWH{#A^XI4Ba|+%aR?m;)!RTdYZf>L>3TT
zJmZDnnq}B%wk#tA#}()wBQ3`N6||ptBL2${HT%c+n&Of5(t{2;D9_{n@PiNG*PT9J
zd|m;5PMq;L8|22wWHWvL10ON!v|!=F+AO{!$~vZA`|&|JVUYbtZM?Hr{k>k>-+=!j
z()z>DB4HW)K1WTmcCCp2-Me?kqOX<1lR4%1m`!cN_EZ17^wPh%LsmsQZL(=L-d`(n
zmccKPK}pCTZW<Txy;)xWKk(p#+y#d!nL^ek$p*<x|Kr6M%hR<s1El|pMP2e)c~&-&
z#s{VHbF$zzIbgUs!bJp@K~P&vM1;yJBc1sK=?FjtQlgN-kIRhw5g1l6y#67EXP<wL
zW5aXVMUqJ@WJHTVe1F##TW&$WP6%N4Q(e2#KQ#IK%U}LdHg_&I>KUyBN80pz5$&J#
z!%X@5Bo^=V<?d*okEr5t{73*AmLLLyx%~E{K)jG@#qi@g)BY9sKXLslkPY~+Ns<Bg
zq>(~4bd~Y{@)*ibamw@m{`>S!VZm7$ez1Yf#LrlxU3^F)nU>0QWjnG&CSj}nh~Uh8
z(?9(15H1)Z{8;2mPn^id08tL9?b`93k`5*Ccfrml>Q!SXe4l49=WC?>&piFC*)B(z
z?u|M;4j*yy#~{|Kc}Q8Zq%3{c-LPK`_zyBbNT&UW%m3`$rL&$wAtxSw<S%7&=J4ZH
z8Tli8TqP-oGx5${q9y;G911@U$%+cx3_&_Eu>J1cdCamhjo@dds}dC|$9w*Pk#z*@
z;DZk2>!p~0qS2Xg{uq=l@VEf}b?X0A&_8sT*#8F|jCb%E&gJ446|2C1k_#YYS=4@{
zxn#AAI80nzJ9&)`PxH}f?7UpC=iYn$aLqN>F8D8=D57HW{O3*Pe*O9tJpAy(t?==V
zHiHJ8)e;}jb9f>gYlNRPxL*RVhJZgu?kDkDn%B$c&v*0OSo^v7{jY!jD|)1MlTAB$
zdlBKsr$5n9k;fL3K#!wA`>`y~9G2I4+5WH3f5%*bH279cy&B;+gbsfr^6%(jfru{F
zLEtsTP8SxzG1h*TK_M1Up*Vh3+5iXtR(Rha5KNjKiH<^Rn>7$QX@1=fU%x5F%Q5wZ
zEX!xpk_oK*=i<w4xpgqsue|!o(qY4fEuQ`V+4~LvtEy}5d#6{14oVjU8>ndPfM8-*
z!1p4SsDO%zQH-M4&3i9KjlW%^u_yK(V?j-fMv4tl1W`a>=$#qb^m702`_|s)-aB(=
z7!U{4dtlBzXYaLF+iTae_uB9&Cq3}<KCA?g_TS|&UZeC$U<>pa4MYONUCLA{&_C_8
z5m-@yDE1XViN`!&FlJ0qMFso04bx|oP;Oa%qfRD}$Z?@JMfjVeKY7Yz4tzv7mi~ty
zeuS;A6oGU@Asi>}2eu*1(lcKaP4O=K-R}x;3SmA67{oz*GA(}6L6{wS0VD|Q-Mcqe
z)d(jed*D<gDVL052>RM<Z(_@ige8#Ioj?$vcR<>c9vG$v-aH&al%ozsofJ%ONtDJC
z;jsbz>kFHJ0Av4SC^bl*xS3_1zkoM}H-&ze&Yh%Z!6Nl1SRsj&%9W_3q43-}v*EX?
zq*hK)NmUeG&VxP%qqYSe`X?@~7NC=G!f{mwe77j;c-RTP4u#EU8~{P7cOT}L^1)$t
ztRt<-puVONHLc*8QBnE<pnGrtgc43eMS36@WIm%B&;NVicp6TAt+fzMVGeG_uxC{G
z9ZEdo|G3M?72%6z1x^ra-Mcq@T0nm8LZO-j;D2S&79^IK1Nft*<0-_GmVk#}&O9;6
z&p5BT_uhNAym$k**co;uY=Zpwni&4o8NbTww{PFH4wyjUX?j_7*3S-pO(X>!H4r5w
zoW__Db-#p_Y}N1;R@1ToK1vY3-~Rh%z-I(j|Aj&a9dwX6qJs=S!xuJm{KMS#fGwlx
zcDh*z{x-`aGiS|kU-TQxf68o<)|Fr4Z^8bt#WsA_S!d(m7vO;Yxt(wl{7NycQ=b1d
zA^FBAr|E(g1t~lw5GU`Z<7;OcCMv^lYLEE{EvDmv9IS+tD#H!_nB1`ps;IJXH%kmf
zrcBle!$_bsq(We<PW})RrwoR+p|@Rk?U*`!dWibjlKf1sKWPz9x)_uo|2J*i3?DFS
zYB=di8$0CCgEC)x?H}#YF)5`#%^A~YR#sMPPQ=h|nZEd=lmD|uo}<-#B>j!_j1z>B
z-c*UugyoM71><mt6~2&iE0<WeM2Iu_;Zv4?0!=r+uL7fjcc%J><)WD7q6PefLBIQ9
zTMqoxY2bSBA%|pm`#%`vB86vfK-&HG-;W2~D7z}kE9AG1?`>PRO~J<k)*6W93An1C
zsRe|{qId^nB=q4&Q!0o5*Kn*_B`6N5+ND#<f<mpBsjq);DB$n?_y1j1ydhWtOfH1N
z_~D!3cfrP`D6%RIg-$*7bn9>M4U{U;&lrQPk2tYguuN|cir-@W%a2IJOWnCk)bPvz
zj}tF}{4Od&NA(fs+QSJU7|~w?|B2*;i&@}j%%L_#bV5hmFoOhwa4I-Xgm-8~Q@ljr
z_pf@>rp>ka*e<OQx3aOG#)#dL@V-^@2T23^*8ZJ-8n?&=c;O$qDndQO&lw?k1u69A
z=%da`eGHED;pY-En*5tKZK_?mWN{4|X4Esgq~cID`G>-(ra9O~mU$kwTQ6RQ1383)
zcq5^W8{wN3CyV3IAk}wRiJ$rU8*j9I^Nlyk`O#;_jOkUVI4lJjaP-NSF@}JI<zK*_
zcm7&ZA0oL78FBgOnEXeW;$z|fWi25i8l>N*ZJX50Echm-nIQGYAAXpy|3m!juMQs$
zUwZ@vY$x<ru@Z=mm+H|6%}^>D(2*n0R(;6&e->QNaDf0*1BLykvFXw;!b0JdD_7QX
zOV)u09U$Lx#~gEP_Wk!iV3XJ4G8Dln!#dHN31;J<zj^cKY4RVh46;j4QTtbEmHsKN
zkyXD_&{6t)RZ@cR0i{MOwjd^7>B|*AcouHnCI5%iol8SF_}o+H9FO6iyX^+QF9=ot
z2Y&q2KRj2fB59IPgZdkUrAl)1xCji0k)%)WKHLFNcj7&UzGqYtlC)iVN+iF~B9;J=
z@V54U>dFsfo{?Dk?pdoSHFg2nM)RKu$Qk{^opsJxSP5k1|7-Zno-}C^?Ne71=@XUg
zU;3xA$%@v+6OA(j`xUH0abvb9YjCfvsfG_w^DD_j24nfZb`3u~F(`sXCMZk(LJ)j7
zb4&+;ja!};YnYipX#@{HsMVX{`<Wlc$ch^Js5bFLSlwKx@>&7#wOj_*5Cn*(@X%(X
zlAkGh_S)T@u1f%nQ!f2o!FlJMn~y$uoc&Q_n5&N9Fca1DwEsT6d7^K~+ac=1jkWNH
zS`D9d8v7h_2<yYw+r9b51k{I9%V$iVQH_3-_%g=un4tc{w&Dm*w3jbFvU~7Bhi3lc
zwb$Fd_4b?Sk9}5!6~Gw6E8F8_jLrY;+5bU34}Q=;?9f(zEYMHMdY%2lx85rK6dxcx
zKe6;({%leIiR4#CB(T4j+yq{Vu3NYiA2nZm>BTbqm0~eaDttEQo_OMk+7ZZnBNP`2
zUHZGr@-eYog53`eRbu^b4gIz_Kqw0b6p{!z`UvhXtQ3g9IQc)C@^Qr}!?9Zq7b80D
ziuPh*A=^|d|1@$w5tkK8JPTB~qw;V4_*dMh5Q)3M{<nwz#jxX=41<Cx-FO#ihD%6R
zAb2#z;89H<W1IiNsxh=j(TmvtzQCpguslID!|+39Lm_-suf^#vMer|{g{8^a{r252
zGb<ar*92j*rlzHYjz0S695_PGKJWbV*M0fL7ge0?0F2p&S)~CRa&p0Uj|RVq=?e;x
z1_*pgg?1!{zRiK*i#t~M@yp^fPdx>nB8}502G`9dCkg43hQCmOI~MdKe#9~WNWZkC
ztd=Je<JFWJL!T8&b!Al~9nO6Tz!P5y$E5hmif3zTcxT(hMnHDME&!pT^7GOE$0<GT
zgj|7yLRe{(hI*WR3@K{q(nT0Ni;O}X7@l=00#A+RzmfxpmSaWUlJjowc!;@xw4VIN
zzLSKocw~{LD15^|JT)!<Es=d6*c$qsvDBXSFLk1|TeWJnn|P^Df8Dww4R9QP<T0>6
zoW`crD6#VAx4>Wsh-p*&c44|=B64UNVMgX=t1nD^yvT}2Bl-El{8zDLyu}hWpzo5n
zcS*ze;4*5oo5t-Q3F7HvAQwyD*`F`K@%c|4g}~@jV02#@B<cCYf=YLq5(1dbkfZun
zm9EmDWP&rAeCHo<yB`L`+TYS;%jshT5Jn%5!G(~7_IJUU^K-HEJdY=~sz=Yy_eu{;
znq^dt5a_?Es)|KPY~UWAIekXefI$OQR^g{F1O6RL_kuHao|b9yhC(g!^27Tda6tMr
zbQ1dZ-4`eP(y>)I^c7ACL{G>wORT*3?!^!jju@XU+WipDJtB>s+`C5!2wW$fcvAMR
zIGI}z(Enfm`k3>X<~bA?qj|;AhwqJ?UtcgLAAaFbPD~dhMZ3loLl1%YUxlq-j$Z)?
z2sdB<6s=#6Hr;Q_h^LP)%VrVQ{)9ThDKwB`LQ=$x0H5(>K}MewjtV4%wyha+0Rsje
zm;Vnx^3djMuDPzj+h4C<yQf`zQBNG{l@h{s1Z>-#Q^i9hUU>dRbd-wJB?$=Ep$}@J
zf5HhT!jDR)G;54Pp~wIFxL*N4fH?Zbp_iY1X&^=Y107)Vi}g^Dh!Qa=MG2R~aXU#f
z6ixv7==2|o>}>T9wyjnjIcN|D6*!Ost8?iuZtuPK%xI01=6S3xMaxBdb^x}vPn|lo
zlB<J#{r?qw2GMad<?958;uO@^f9traodHrwRDLQ2opTN0eEILvwR5VQ=p%TX{!Oh`
z|14X&+}HU)EX+osj{c>1MkChjrcV3Ea3ILYNJoF;zjL2{>S<f0VMycXN7;8J$&wm<
zA`vFswNcdb#0aCW5JnT!2jXQNCWD>*Sd6<<{>lm#C98jP^JqWb{%q35>!1CfRjaY0
zr~&!c7Z=rVqK~Mt)FzfGXOAXbECZxZf?M1E;Ls}OX{yiv*!CwqJw1HtfB$#xQ%^sQ
zNg%P2kp5+tUDl!pT$%_1^1uH2KT2@QrEO(~(D1z)zVfOoThOUJ%YWxCol~#6_Uil#
zfAbqSYmAmZ(!dtYP1nNTq0hBmn7|o3b}UzJ<)bnW&7Cv15<YY*UU=aJ4zL16Y^(fr
z>HDmX&41!1Z&Wewdc|Fhquv#gQ2(5Wi0%KZS-Z}c1=mPN<zJ0mBf^gx<;O%{S|PUl
z)ur#t9}m*lb=O_B@|ZOm+8u1CX<Gl|jR|j-9eB`znKZ%PyYHUf3tI>0eLGKEemOCV
zk4~DYrV+mN)&!I@@tH9HsRHr{wq<`jv&4a;1TdYnX{w7p2l7LY8iul2D#hw4tz<HV
zJ9?&nOnii@G5MS(f6wU8!<Qjx^XiWNA%SE2KY95rtUnJf$OLOS^?zd6q5Rm9qgW#e
zNOEckL_c5|;m`-EIQZxfLIU~4hN8mZ@7n)ytazrJJ{*0=oq7$fAGtN<pY3TU^;>NG
z^VnmqJ#|DOf}>~pr-&AnSbnu4$a?F4sz!;b!n8`QFtO0E&rbcb&RK)im#A1Rt`7Zj
z9Au#+2&aFtSp8#sfqs`w+_52BxoQ;%`yK+>6;9F(7ioOa!dAc9AOZ2RYsEXZ?1v$^
zX#YI?%E2`%Kaq9s)-B!lKWPzc$MW+)lgR4Y9}J$uTgp#u@c=e~@oovi55r&bHQ2Et
zrV!o>+epWby_gG4@~iRD5(k%5zW49<DxQ7e`I3#O4;#vV`0d<8KY+gf-wTJFz)vl<
zy5p2(^vAxQ{Y^Cw@p=CF=StyLz*jLr{%`O8&%=*CLVjBM{ND`+5?$15Ec%C$P<2f;
z{L{}y|M1@xI1Hl%`&LoCNhw>@e?#&^U#8m_`vWP2HIV;K|4Xp*?(Vzq-uU_FUsU|z
z#y_-b*S3vDSInoT)c>*e$27QzS;8cu&&5cwR=aMsK0YH&efd|f!7f7~GyCt1MK$P;
zc|VY$TI^!9iceh$g7Qj8Kid8qSAqgjW0Y@E`i24_hL#ZoNLc?NnDlrF4!;TMTfC#@
zei-H+<LG<iRIEcEOCRZW$c1H?)Pa<RUs#u^gkg|AI_*UxC&L6mi~w=cRXP7M(lR3V
z{`sEP1CAJor7)oo92eBWgQ`@`Bh7EW?Y5RfhYnqX{oBML+(3m#U3_OSetnR^Y>B?Z
zK>y6fTz~}u9zA~P?+)96D)2>`9g_y=V=Sw0DPl)3iRddmb!0_~aQHJ~<Q|okfgot(
zrocHgB~!E_C3Ymj(_F<kQt?D6!)1P?2u<Wn1P7B<_^Jd@KWU^om}FHGbN3D#CensK
zA#{kMy5tvV&bLq>#D~tD`0zYCnxsZK@T!ZTfNw1S4ML*3#kDSVU0gzlKt{7{3wJDi
z4QSY-vO%sxye0Z<h=iJa>&afFxmZ~mq|f8Jz5ZD<;6zoy;#N=o>}-C?fc_-_k_A*l
zVVw4;*(!2DE%NI%PNm}un4}i@h%{WSp>*oh(V=ey{*YK9x|B`=5)u=pe<rf(Qjo-^
z^7mckCk<Srm5~0D#fxg_jGID13jE;^Ge~3hMj6bmC<j+An(aHD!QxtUkVpW&CaPQH
z=M&fzhr3Z^Sz$HK-ZvFR8YZ4}N&NW7?Rxg4*Fb(Ln`!We6I}faQe9cd0?FZj)c#I9
z@r0~P@MYbC8Iyw5zZIBlDXLkwZcS|!oZ6F@-LP7-1y;3D|2aIQhAcY$e?I+-N=)?0
zIVlbv&}q5@2Mxj?grblfF8uOjJk&px{rUk$A69S>$Mor182||2BX6`Em&U?~g_`0;
z<uI1FfW9NabOQ6RvAE!a$$Z=Z1UjmIbHZDs8>F#kqK>DJuY_5bVkNOrr6y`a)z!5T
zocJ9nE-K>JT7*GASju03K?`YT!RIA;jl-ok(?==%sqqys1Y;6jN>g3U9b;<J!AS&u
znA)&f-=h5d8p!-NWC9mOv0?aiM<7865Ps_EXG&4`hAtU9HXmEi&`yB`SO3r{cHe#W
z&cMM$8C*ql(M1=n`|7K&;AgLK{f{0!I+xWKwYYf6(&`Bl-VC-bkbzkGVklmI(XW90
zxl1~Vm!HFBtAF^*|4xHDUH$U~wv`Oh0SDOfv-jRwVGdttTJGTOpBfo3U|=RD`l|Lu
z+41`4$?*~tH`oAu5hByf{?@O@iroh6e*;$Ydi@im6($vtG`QmQPo&DvaA@hWB~&az
z;_aUh@%oR;f9YR0WP-Op<_EFRAJ=D7KdVB2BW48(X_);HcaVFADULqvUwLa^x@ilI
zl>eyxSK`AVVT}tu##~`dngK61&9L9#tp~vQ`KSh+{gWN`(|9G4KRq)Grx7AKN<2%e
zz#J||F(G{fGFs(Nsbc8ky>1%AtoDM5EdM#QRRuy!pg->N%L}Grt2p$`FAO3Oi>pnW
z)+r|(e?qqJ|L{PwtFO6sBmA@l;H71yq2J@sk)FMJrT6E`Qb;}c$U)iNx^>$G7bZcQ
z!t($0)6bNoVuJB^V=u|e%y#vL%YPi`7210*S8tqtdd_bz`fagu)J|IDZL8%^q<>(6
zZlFdeMK(f)WAty6S4e3FB-#zp$4Qs8G(;0+3Qn^QCMTu;So%2S8-P~-FcVv&er8Hb
zY@E1v!i7hV9+j_HMB$WD)Q4|z;=4)tkF96r@W&OwM|#4Cu+lQ?t~>6aaYs%#@gy`d
ztg>N$Fb1r~_8)^J3BX0))GZElV_H1$TM)Anmu`HZtaxdl{Ig%<><_cU4c0$Il$NUV
zUVse!d7cdKF8U@FalEtq&BDiwnrdtp0A~0j0~}N-E&zomZZ&uPhw!)a<X;UO#MM8s
z`43fCF8ZH3vWN>|Mg#?A!1n0>SgsSFJyAwnB*8HE=0vlAfWA)yAW0sV1~2Eb-(twn
zZ&_OX)>~>%DJX)0rUCn}N8h+W68mVa_D8Ha?h%t94Qk6Ef*&v&(LY%U^iOJm{QTHY
z)o6f<-xByQW2CXfM_r<yiE%P48UZT1f{87EarqB!XflMwL?03vDu)n1G5R+egot$P
z&;cE7nk6A4I1uI=ER5!cvxe=DrG+Y=H*c<e#pR3B|I;{-Clx0Kt3J%iVkh2F4#S^n
zI^7aw^xb=(jMGj(EeHLmBJ`v91y8bpKAGSZ=3#hg>FJ@1al$Wli>L|{E<~oPKh`h3
zA6y)rHey8XZ!f;c>eZP1-`?Y|r=NPNEFFG#@e!v5{Y3im4?SU}X*v$A?3=L<{D<;@
ztKa_iw?(sf!Zt1^P@n~d`3r%JZnFI|U4!`#G(CImmPY^b#~puMcE@%d?4S<XEVRok
z!b!@Ul=S3D{5#Wc)26L?+$JWN3|w6ZCs6ZO1negq4i3gb6zw1Fh4LMMKL5pM3|r!y
zcyI}Z^6LdZ9DgV{#{QfIF<n5P2?)}Z_K&!6S(5lNV|1G^{;>2>`go^^<jF}v5_%(#
z!mEI0zVWM*V}L)@Sd<^>)F~UGF-+pk145^jHI-p(=@9tsx8Jtm`4?U)yZNR+77W25
z6U-_)e;$0~;A|}Im4jj;5;eo=2r48lxT*A!h?d~4NQk~b78Ne6;t8^(k1coMJMOr%
z^?&{Mf34+dk`2)(5@SHMD0Cr6VHOQgfd42^W8F$<HaK+^MhuoR4_{045~n*;D4{AV
z%drB$TmTdo(N}_zU%h56N4-w-Ar453mcuzd;{C<sygbX|k*V>ZIB||w9GQ-<^Gu31
z2T0qZb5{)iaSnk43zEeJCz4-ONrI5XLJ84hAqIrW!eJUzJ3(UbBfu^n$2Y}mur7o^
z!%>dvLmHT(dGomVhzlSw_J;t$FaaKD!=8o^1o2FYcpr%EOhBX{A)s#HTMx=Ih*<hq
zWg?P{3D_eb@_+T3H3sT%p@Aq`v3!}IR3;52Q*;b{7w+Q4isL7iK2w=4T%_K&hx}Wj
zfAQE$aFkM@t~eRU6|RK#=L7<ak~=c?;)~->Y&Pj!dI}fSj}y^D=r{I7iIjvY;iwPx
zM-F+49P!|Bi}{asCw%?&*W*j1k>dp4z4zX;5i7V#G1(jBKiT@@A8%~MRm;p^cwLU8
z&&fMVNcz3t2NQ>0q#SYBp(xP!3cO}bO(`7bc7sop!*F``UE!3?d*aXzaz_)NhQmC_
zFaE^0<HZ<q!Ljy-2*SDxZ%wfOfrAETX=}JE|9}14-%2pZ4KftS64S?^?}qEH$0VO!
zJOlw>4mZ8<;)|u5H*I3Dj|$&(^UW=W4I64(w9q3mgwgWHL5r_{a%?3~Li%Y~0Ul@q
z5F6ny3-VJ?$&H7E@?+JH^<BkOefo~qn6yBMJoxM5kC)(ZfwCiyJTmi$BL-w~YjTh7
z-Q`b?+!KZl_;0@X=2kepZZ&+D#^4}Zj$4#}v~5n$)K?_*H~7Bc%r{<`#{V*sR~`8Y
zXE}}SZiL03C99MFh_DcW#L(Z_>K~R1FL<xsyQgux2Tml<qTp*+uc<CAEz$Op!wy5a
zxGTJAuf6u<{y~Ty4&h`;Zf}xK)?xJ+6-Id}xp&%KSAGD5Ti~OO)FwP|G+wOJ2R$47
z^%vOinv8@{M%g$bp7dQ}AqrrW)@6!tz{pMe%sQAY`x{(6c;g>#Y)KUKF?rXWcNPpk
z<-gX!=a0j$q@v-O!i#?l=(GLv_Q%1gPZdi)R(^bTX_EZ|sau|nRV~u5FpK_Lv|nET
zB*;!VR!^dKRWxr@jDBmm+S2uZq%EJ&fSOeQ3M=6g$R8W5f}#M+i$@=ObTd|wRo{5y
zA6l{$WufncljvJwz_U*EKR5$!<cifl@bj6GnuhsaSO2{X|DX-ke=j`$T*(3Z?~emv
zh#-uuYQ57IEyDKQxcUcW`>%g3dHJOmO9r8C9dN`Enf><PH=QeGjBnmqZ?sRn^_E);
zPCEHyEV0yFp>*e9Bo^u5@~R-)e2)uGq<;bl%q*~O`zzCAybwp%pC_bm{*??L0b1gN
zmLXSak40(oTi_sQ7ee#FibX4%3G#o?kw<1=%c<3+Nc}g|wLH9ulyGfPe(rXeGI?_O
z;2}rhaGOvFKEJc?yyFhdK4aT%mbbrYQ$MS~hbOM`HQaUbAIfAnb?Rwje9B?FNuq)l
z#5bgWa$xXs-NIL*OrZbDstOw)0Al_6X#KMqE4j!5``_%d{0{v?9Ck(h)#Xo2#0N`V
zq!`FhhrY8=VMEtOta%;R#gAAV-UEGYkN%G+CdhxN1`V;*U1S7hj(qTsm*<VoG5kq%
z-HseQI1~1x52pm8PeV@XI(YoxIf4EW7FYfO72s!Hi?C`n;qv(S0yu@a2)wc$CWO22
zOkB}7N1r_o&7CPGzW=cXE1pbPHUTM`9OtTZ&lCdvW4OkBI3-P|JJ46O=*H0x>fZ?a
zy)5N|X-s~y$1Sp~9ohdRZmhmrzYK@cIX(#DL=M<uQ0$A*As90mam*X;WU+qK5n21~
z+b^wax9;XH%B5}(Hz~K=d`qj7hYejrAMhR_qTOR8jQ&{ZOE11yHV7Ze@c}Sv-+q15
zyLIp3>Q&>nJ$xYIFhedHS{<{(a=VYenDLLJo_`T?4H`5sd%(bf>HYfdli9s{4|8M0
zattXtz_;+9Zv9gMb~a+kCyH|;_6J%0l|X*#L8{lytEF!K<AYonK1;KQ4m~-0pMCmj
zD<EypB@+I^!Ua_?zw-CezrXTI8T`^RihnNO1hUQa*A*2ZEzmjn3#`u-#UCSo3-C&6
zMyxhegtVgWg4obRIVY5&9SoCNo@2+OB&06v1EovHXv$Tm{_!}Y#2p-y*|p8`djz7<
z0DTIADEt=(CP=*gqiCA(iQA(@P7Jz7SH(fMsJOte$%G%Mm30I(EJ)t?!pql-Y|*gq
zzIOaoSFWG<!3UW*c?i=$;m}_D?3IRzK7k^Mp>PJn*ML4A9mOWoM<p(X$jX~<y<LVC
zgd0id@FNb(qK^;K@4j32wCk_Ct_7Uqa~irHeGESIv5x{}q&Z()3FPNj5#lD70Z|1I
zC)#m_QW!kv<z|QRMIfcJyqwJx)x}FvqtK?vrxo-|c~>r9Q7s6FQaFDeKKBt+DhPG$
z+$9wged^FOq<;b1jdYYPWMcugS5SU^iUbp#yLL&N`|VsV_ja5JoNv}U2FWJrU-APX
z+i+3~jKrish~dPKgCHSZl3%ed{}n+L!YNNC29rSlTPr`%Hb{Tz(q*WfU0ngdU9dEn
zhiKH5p9t_Z!&bIIRt)0FGJ_>LbX=`xytCEiwz1`y=tCGa(;$6cVN!X5H6(zSGL`ve
zOvGY{JWh~ekO=S@7l3pNf<3JNWjwBW`frrJ*M<Q#SpI>x+39nTZHvH6f8@b5Woq$q
z`(MQK3U}+)BbDXP>;F$UVeGl*o-0wVO3hLIckR-ZQ&nEsad|oOs~J@l<&}}l%#3h)
zS{nV6rtjTv-%MuA<SA1s%220t>vm?|UVHDA_On9{%E-m`2Xe~#YU)%R!~r<h67q5D
z%3r_|9_*^8|1o1my9u~3x1ZF${IZ-rZ!!OSU~)3A0RCcVmr%-|Zn|Z|GtWO;3MS*^
zC;Ql*!V^4Qgjx<s<y2-XJ&}s_Ps@S=xC~4U+u#>q;zZy$$fGS5YLKKf6k4_dA2ym$
z{#oIA`e33-`48U6acDD~X}|Htgt9l@c(WW_L^{BI!Y{EMaMZ|=IFOqz5F*%)(kpG>
zzJ1fbm_EHq^20Qg7-YpcUPg}|Z6}c-Yz?;HU?RX~oq>R`MC8*j8J_KxPeh74L%2qk
z0deI&D1V4U3?*~}R6!H*&Q|}-K)EQdtc+yg16wM-j2{Bue0}%Dc02GoY4YSsp2&7a
zx9)j+?73I^K?fb0fz|&MnOPb6?6Ya8OEn~paJ52g{l}C3Vs%MvQGQ;STv3auQ4b=P
zEM3}Q{Y#ze&*`7(g;xk0(myz){Y(AG6lxzYZ%=r;^tRh>(_tRi(U5WUF-PYxs#}ll
z={MYPUH&y#K_=WrRHVQ%{#*LG<=<9Dg9xOll|?vfU>Z-~;Q|KDc?g?c8nu5>wKi73
zNK8(+s&Of|>f#aMP-v%)9n&x%Mg0`t|HGtuxE;%>q(E`y6Vka$Pq-<RFM|dS$T*Nb
zN+AMg?HPfS8AA^}_?Jy3_z2?Z6A9w#*METb`TzDiZ<pdD@+Rt^6KuyEcO0CjMnc`Y
z_DDycuEllNU8j#pvGn1CSF1XG|7X=I9daP4#io;=^jEA{ff1;<08QwCY3s;OW=J3Y
zdc$wN`9}E!{DEGiBR*u0IQ7)*v(G`jf&L!R^yt|G2TY;f_+mOw-KLr1M^`|9z`!Fi
z4>|Y{tn$WmEr_!G*Hl%9AA0aXoG*h@3mc&CaS@@ne?AgB^-M~9p`R`MIH~H>XBjaK
z0}TJ$THhA%5RxG=^!d?)m{k7&=`xi~0Fi=SdcrMy{`sTxU{-=%i~8^tOt5+&{08#d
zlcW&KOhc-q|N5J6lnp*=2v0I#|2M5)-@a*^@qu8^K6_vSh*ZKMZt>-#y8`;e!WXK+
zAnliMwL~aYxF0<?V1I&jTg(8So0k_x{)Vu97jK5e%g+xD{AkbS2&|#~S`pMg3kwUe
zB#i0=Lx}9srAz9v<txyiR{&BpOrI=BUIVJv{|fp)pb2b#oYA2CWN&-*f2ag6zl5-x
zf~5y>&Sss02A8Ck_8O4?ywRic{rIP7E!tB|0134#e?UeWmUB_edUA1z<d=d}#x)5E
z6b;a)#*v9McKkP+Z-_qU+zebCk#3-t<;%IP)=;tkv+FLqq}T@(r3mP=!eIZ$*FUHU
z)RvKWqWmXL85#N4_)8&pF;@7)7ce4z{4e_nq(KH5+nIK_4C79)BN#^DF;V%q7{tLC
zos7c67pwqBKk5ziqu!7oZ7l3b`Q@pn=8Qc1Y`Dcia|nz*umWvgd`$g<F1$#Esq5$;
zhek!-eDlqU3HT#SNA$-=!0i@J`ObykY|PPzxjmS8GT0vzy8!&Y`ahdXHiag<IiU<Z
zsr~{#X(N95%dE4{IXgc)2YnXszgzd7>3z{ZoIZWJU)AT?GMz$71Oz&x;v15mHB(*v
zr(%oiAnXVlHf&hVfI)+@v#`*}*MGu<{4cL8i@f`<cgvoC;f2y^pM7R4FG)z~z8n2m
z`(r=B;gnSEJHTHpgmIUia1#jnYHZRd4j5n`gJW%7l3yQK1xerM8Zy;y|3SQChmO(l
z7vS+f(4~^sq3`>D45qQ_CngQw5sLpr#wTGhyzX&p?Vm(&iI^b<k3=t4>*?R1oB579
zM*Mj$RVW?PlGn;L^+3LzG{z(q&csp=KH4BV@o4DeG;-ZK?q5d`!r+{naJ*a^{KyV0
zf$pkr1Yj^C&eV<5CtdDx;lFij*H{~aL^z#h!*VpJvJAuzA3iJxThh3M&KQlMufsa*
zt5K*;yEfEAJ^68R6HfH&BB#z2iUW4X8y;Am!GUKNT=3iZ;fEcruf&KGFyJN6p@$xt
z!CnFNPvcyQjsaq%qxq<i1tnaO(EbPXH=dEwBOxC5$~1U1`grCgJgl<|3k&Hm83O_X
z8#Z((Pcg%bQUe6PxOCqN{YN;2XCkD}%f+_L2IvR4Js~3%M}H$6e2X;hZ84!H&d6gE
z^WWG{EPrG4xh25spY)IZ`7iVZxi0-91`NRB0c_ocz$P<w8P&fUP-lOP!J!MxFR)LZ
zoNgPDKY&T3e`uMN28|j%K%z@LV(1%*t(Twr^=xfz{*z{)CyBTN=#y!0znUeHx)B()
zf4)dI4~W-3d-TDVLWH{VhmQktq)BZ!cwx?mf4x2S#K6MopOJ=(P*}+fAA4Wp)LFeC
z|KY?vF9TZ;NFE<K%HMxqhcWOyeBlKb!m%_hB7$uY-^%$iUcWc}?~m0f`|p3C*&&#I
z_Niw#<A4CMDh4S@1N8gsu?M#20ZPUm3BCEw1l#VbBt)Srl8^1!(2x8jvHnGe-p4sT
zvJy2ktbh1&_~D0{g6hye_~1h@N+MCR#epO`1}bh=;t<68Kyie@CHn)2(IS1zKE?&~
z1;|@W{_{nc>d3!x#fsW{@4a`^W#h&biI9`OJ0@+ECIS8aIFRaq0}jaW?awpt8K$-b
z37FgXaXdRiwbwZMtp90x*cU-?!t)`n{zE{t{;{r)<R{$DR{vmMcW4&2JG1@cHTv9h
z^D<ItCXvv@NgtH|=RfbGQ>>L`p$jj(Am7VBZ!XFO4odLyW2IRQY&NL>4&`AU!l+vy
zKM@~t@S$03|EX|B(0&@yKeL_mefcLg;bkV+GhgHM@7^t?BSJb@F;7_hg~K=8aKna`
zTB!p7)Gfn?!BO@JC*qV?UJd6zV+G?FcF(d06#?>M{1_Y)APL~`=Z3^vuz&QK39kAF
zZ8z}g6#)@Vib`~6e@7pCtnY6SKiLs|PO#|<JIxxwY?E9ZU>Ha+U3xg?*yFR$#U%L1
zQKR$E9d&Nr=+UF{&L4AL-Y&cDf)C75`b<G0WY0YtO_2r%2wlZh^GXs5U5~A{E0!-;
zzlQvua>^+=&@<ZZc>1O0A6XKx{%H#zMvfE!<LS3;i;3cB`O|640Ev^|(<hI($es9H
zxngDY-FM%+dE8~=ij4!@p`3150U|(w*U$gsjy*05I>{e3`dsMf-2Bn!jLJX%{PUro
zUCC#I_9t{P^zjZpO#e(IJ%GM_xi%&d#t2>x0IoH#a|F9eu-=iW!l6SjDeC|XCPsc7
zq?6^f!AK0;xDC(Y;;+$1eVD#~f3!QG&l3JL>cjF1I_0lV9{{pH&lKN0efsv=i~~@J
zh53K{i6`d3-)xpl0;I4CKl0Xu33QLZGy#34$K~*lCu7pn=YWS~8LBej*kTBS>_-67
zKW;(&L-`Ls>@eww&`85%qJQWihoXaM^$&xVV-gkUgl`@{wzJ5Q0O;-CABPw+X(RFr
zFXHvzXeevNCn9l)K91nA7vM*K#VTBb7c~J2BC7xG)&Gf=A0#25#3eO;*#muJ$J837
zulNS!@87?FdVjR1jHZN7KlAkF3OkG;q5Ou6&~@lDxzj&UVbi79rT**Ie~1=2CUDP8
zBKnLWa=ay`@3LI&e;~f$S-iw1H<(e(|D%uA_=30ri65c{KZg%E0*k<Ls9CiBF&Je&
zQ`ezSQ4wr0>i+<yarqICMIZAu-jPHgeZc+)z-0!}iyPh~0YZ#sL-dtG<PA>nQTi)z
zTJJq~-?Qmb)Q7?iD9YcxdpFjHE)9OjNF(&oAFH|hp1U{w?y^hQ!<+zbGIzsi#`b2o
zzSsVb(=zCVjh}lqORlK?Lp{3pzz3zM{Dj3Hh4cDk5as68B>B;E4qtuMRrxsCw*7s7
z{&Sn7e({TJ7>VNsXhDC@oVisu-*VH&K?4S@8bAKZ4bwiG=3Rw+XZqli_8v&dcl5_<
z(YH0R5OdH$=(C%wkSSjN!%!dk^3T<{%cH)KB|o<ovyNbSY}KZ<eB4uEz()lMhW+_2
zUAt&oGV`C2jBpn?FgU#9(b1P%4nQIS{Xi4e(rlgnk*uElL}a*#RawDT$5y=jrn!Xq
zuf)xL!@du%TgNcf7rhwCs*Hh(U_(A)#Oc`?*q)-4UUpz&xfK?Kb=q~;RLty~pBzBW
zo;#Z@5^=a>c;d6L2I2OmC>LLcek@J@tUfI2asEU3APz~z)77rR%0kYSsGOlseEkhK
zwCe0mLyD!pa^(v4cf=f5A)v8w15yMz`Hws9xGZ!Q%|{Ir$L6EuyH)$(z(<{O%J3W^
zHI~Sm*yf}od7}P#s?(frzTwv&$&V%0HMX?h2#*{!GPj@rzDj*!2j}HyID)XUC^!|=
zaus1b0v;71R-*tl<i~dEoIUs4Qyowws;7Sn&|W9Y2`Nbg@-xKKTm#47CTu9Q8@|?%
zKK@*^e{ja6P{jrE3%jGg3_e^iQ!C_L-N7#;L3{)BV|g*yt*5_e@xq!FD^_s@30SWU
z4I4fzTdPYPar{XBGtNB2JkjFK8+|N&=GXES?AQShU`CD{mD>udmrN%POP%~@daMNV
zUqrlK_#1nLS99W;bP>v<&H0N<aIw!uYuohi@DW`-`Up#y{|FaP(KK7Hf1xmnyl(@2
z(}1K#{R8%$O8i4&`>UyOAD3MDYu!p8A?nc|GiD6Tfj$b2Io2(XfVk!}zAV})38;S#
zJn#U0nyQ9>KWsg!_yng?u}Cn;O#lEu07*naRQ%Cseg@~_8j~ZX|N8gc<p+i!&*J6B
zN#mMWBtR)vhdlZ86Z|Ua^~_*i^~yg3O+S>*qFc4ZjzmW%R(>30f<+E_rWD8ze?u<1
zuKp41>Yw2_C5*`270|~A2-TBBz{42k;{ydA`P!)cF;86nH$tD(1l1(@IZ5S7GXeNv
zKZB2ADE9gMF=KK){Y@pCB2Pd4lun2=MI^RA;&B(`cjCGF&qoCDUVb%hcoAa5Zg;p2
z*a_<&^Fb+<g%14L&rmMl$hxXFGI`SE%1?2sYY9$|W7vTQ9>gyw&~9yL`V9Lj9;1UW
zx5QHEly&fsAz5u&w`S)pE-$ikbHc};a4aU&5DdT-*p7sbB#{cvGA)|_zTG1Idi|dm
z;&>$41op>Zi*Wr7yhS3|$q>5g>Z^+3f6L`l1pSTcTe7o?cqSr0mKYCuHV%EbMDS5T
zW?Lx{q)Qw;H`V@ao{vqEVRv_7hA+Bmx|$$o#E-2}IjHyeXn&6W8E2p!WQau3u4STe
z7~|_7CA4(Ff;U(G4VtmKJOptFvkSK$WR4dUncyEooD9D5s;kyxJE-8u&hP){h5|bL
zcIn08>~Frdfsdnq;t415Lta2!&&GY^gyWA3>L22O-@hi+KL9lh$p5cq&Gfr6BytT8
zZ{j72_4A)>(f*_aSN>y}b14(pUz`>L`a#AZL?V0bHb9^F3kw&?|0v7fkRgM!aFCP+
zM`RlpQ-*VMb3(_X@5?vh#mDn%o*FN-G4hlC`4^zwar8?|H`k&*<VtW{_2n0S<DPdy
z*&7~s(k2|<+Xpzr9CP$BndpCGcMhS#A)Me_j+I0~y^KJl^(^^^`sLqN%!(lpLl?FI
z`k=xK3$}n0;7WlTCY5PJN@ZB=dDtn#bP_NDYvF%yuKY$CeLALJhW?>%|3{uPG7tTE
z>bX(+=06rN233zH>GJ?5NsacmhkcMjXv6X&F1$VaKcq#1_`z>f|2*^|h?1fdM_8ve
zrl~Lg7)*3422mxOOCnF=5XHvi2W&$6MkJd5TpjK8uMG7>EVbv$;nF-oz@FTXI697b
z!TD#e|5|-O5n=@`T2xrgmBPOM8#Z)!w)&Gsn|I~xnW$I&_$O95iYH9n{C8@0ayXvj
z^<P(h<_%Ai#a3N((k%AubI!^yXwk~Irwk0_Cv&(MhFxiX{@(%+7AHRe5ri<un0xrz
z`L6TwS65+(6rfNdlg#inNdN1vXUP=^xncQ-Kj%35-)H|v{MOO`*EmRz+<QG%)o2l2
zJ^4*10>n+aX}bIn^sKYa&TE5{ZY8%7#A@O)tdRbDDf|Pj89r>-nkS!pa<jP`s;~d=
zM4$95uj1?vTZ1uHXI6zmM-4fO?S;L><Ue+ChK@V_Sk#lsCa#vRF0bHXPX!2GtLt6=
zi@Tu?=&!{wmVl7Bjyvx7tTyn|?B!21{sNdwWAe){JVIzEcBm;JL~$$iPX-dm?}hb|
z_>H5_a9mt`${&l1r_YFHzu5C58{THgp>byt8KWAi8q85g{XFaUzrVgEmWp=ZmwJ4i
z<z$|7UMf^L1vH&?P*m^R#t{S*q(vkbq>)A>1Xc+_8tLwCL6BU!yAcrSZYhZ+q`OO`
zyPI8h_x$!d^S=M=?9Bdg=Ios3InRCH*L8hdny=eVJKMfe(R}^<>fYvwY10zKPo3B~
z&W6S>q@QhooiD6&hGTj$hE5=nQK^_e`uQh-3jS>TJIH%KkJNbS*Wd*Hn%6)M_Vp^M
z0*K81co9akIkm;5$}aFEkU`jHjTL!$q5bO|k3n!8lqA8;C@<&zs5^e0SoGWZdZn7p
zVrXA?ES;dJ^<-i&Z&#h@Z7zVY&SY_amYVd>V+H8FHJAF4o0WTsrn5G8A5y}^`Mg;m
zdLO@wqP>p~4l9u$MZ2?u2mu8;_)IS9*U(6Al%`O;#HGy<dSY~lU$}wEfF2D`G2WC}
z|8OFJ;ycpXUP!`7xL)FSEyV7;=2eOBry(gp-IcYv|BjRWc*Qdb{!s*8#XgZd-?{;N
zo*Eog5<f}thxDG|*V6V2y_Yvmm-w8OM=x1=+@yJZAhG8Rd3cSxJJ`hAwAb{>Z*z!M
z-_vI8L#hH5VP@;@vc2B3Z3Y2M{*7Zg6`%?5T)`QZN)CuE61!Y9ALYra4M8Oscn`hz
zC!iMPM5DxV9k(u{U6sk1%*@!ar%f<__m_#dAC^H!mqxNz7?s5Qir!G^R{{O|WX}1B
zHIe-+WZj?4Zox6s?&uHoA%;R8$QIhwXd+TSat*e-F8!Oh*i**K*y}+22=N%6`}U+^
zn9XklK*z_mldeeaJiD7wDbX5a(+H}h-$>z{50#jq9)t8aR-ru48hu2y^F*ofHl7di
zU*il)*k0tvzL5jL>xi%j5yKbS<Q9bo7=7>kXHC7VbNsaEKC~lrE)?6J9us{~Mw!Qp
zh(2grqoRU~0#Mi#1__Y!Jh*7-WqcK>CH1%8-?cr1;Nef65~~<XOpr~c)8mCt{Fy~N
zJfO776An{kD_;nLt+B^*)zzi8YTD~V$)(g6Ml+3F?K_7{ZKCXipW&ixD`h(nHSO2(
zPkra)Cjz3=4l*uP(p;a$V)4G}wv!`MpcxoED@awviYi5PQT$sv%$+D!+R?IZn^g|u
zV@G*0vv$7bOMEz(RjCEI^!gf5NZ;kXaWIJa^YkE@ikRBw5!C&f^%M#O&SPU=``KUa
znIxSBKAbw|C{QrSNq<(6fIYTaxFDTeAk!=%miUtb36n8BnuYd<>hh>llR`YngL_A8
zoQ5FJOKwSm&JAw7SE_&-!R#pgR}7Wuz#~6+_VXu4tm%CL)e9)h)@F#v+LnTRi|NC{
zJi!K&K2@ksp5QrTvy62IEB1tEr5h>^lg=Wf6;&0=`<3#Gw`t%-*Zk_CG+F4%6dNP=
zs;ha(E6QM_gudSh>nGTc9*@Yq2g6HMiz)h3W;MD=^ls0d@TP_5{Ac>wU(iAJ&Yhy+
z7qSXz#{J1CNt)t7$ENJDK7C<#42eH6)SkNjdgWgWO5OK`#q4HF+Zn*%sCTp)z`Fa*
zAWf@KBIh>63T;~v@}UFL482`GQguEK^AMke?iZPfT+MCOj8m{P{UjE!_A8QLo*@%N
z-H$|1wD|JU89rKg(w#uuwN5pGR?_k~1z0#fKY{Qk<^4w25U>rm$)>p=2^IeT0(13D
zsmqONXuHd5HXcqN-0XcX%uLCpRO%Jy6LVc{JU`<Snn36Gp%F7pnxMCmprJv16X4sM
zOcFTSbMex75Qw8)?!D92UI6+yt`-^{mp`|)Z413f1qPRiS-JI_?Q(`6v7<g8@T5G}
zK{dF3d)|8;9;|;JZAMz8!i&W9;~$C!QGbjzgGhV_3O>dSQ$L29JrB~o8wank@8xNJ
zcqO*#v2sG)j=Ulk&K~~fJt2PGEv}4uQ@I>CQFCma>(exb3sQ7o&6gvhKNw7r8vO{_
zDNmj2L{hpQMr5PM<@%0P>-nNp1^;RMNm$oIfA`8}xV$d0u2OZA@0}MroIm;w`*122
z970+nW=M&e)F3RY_zy|k;EO5r3VgxVv06%p;v?JIj;{hZMKPZ2Gv+89Mi(%6o~TG7
zXN=lWj&mj{5^;wFdB~opDcd+V94{ipF8-`7oA@&P5&pyPej>Q={8{0s>rSpi1m&<~
z<l#0{TH3`VBd9-?B<c^BvOmcGU4JTOP#9kA$mzuZoo&Ma-OG}f;sKe+Hdo6R{i%);
z-vBIr8dmUO@3kj@bizH7y_pq8YYbM!VxUw=HX~(JCOp87p`FaMx!Q1sH*f7x$z8tD
z$<q}<cwDZWyq)}$iaCc=e6@|UiW;j+sme!GYv?6{)jA3Gt?Aerc)`)P500t&rEMhg
zqeL4Uo-62<mUX{Uk75_%j$(k_kcn|<xUxV;o?8g8C{>`&!@-rZQ2)8FF5ugpbb*%q
z@9e=ol_-*QUI2U50^ZMh8i+)mIM-TZZ*`?!&z@sJynbp1!aSH?JMc)}0kF<__odx$
z=9H5IX94<MOK;b0fU_h8p0Vcm=(H-Ivj$K2{p*31K;`k#rSgm~5h4;m4(ThMmf%Q-
z;D;Ub{@nM$*_}(8i;o@RB{FxA+FV+FxR{H!aITU1g=Zz(sAb<A;5)kgTVzY{{N<yO
zEiUide!g%~njb}h(A%q`Ri>g9ax%b2<?+RDn_|Wu)V%ccdL*ij5#$sQH~nRvlJ#^y
zn$H!ZD)GExpORP#RKt{=An}26j74+bl~HmLvo}aioF8)m{bV&C@H(Ux<<eKjecZJ+
ziXszoZlmo)(2VwA<J-IZcHH^lb5=C-h-eWC>CdWx{&RwlW@=Ws1ii>^v_2dOV`r8h
zNo1n^Daom6%kymAW9@bI%eBo#^Y}52KNNKL0|65yevLTkIRwW61mcKusdMqIG4(R3
zvv#ENQVFBPxWvARLna0dYpjtks;|j-Ji|z{#YIh!s+t%PUUd4;`tJG#4ErUmv?O8}
zZ&*Xb*lR)1cDgX?Zq0{iJQmkl4TVO56-l@NSdK0ZUONb9Xy2Dp7mH>(@fn}HgV^4!
z>E37x?%5_0GAYj*`(C0-b%|_^f6i<E2Zd9Z#;mzM8=)Q}bwnU#A^USn{E98cbHS_0
zVj>oQVnbzzCs;HIxxSnD7ng^Sj;k8}d!b>g>Yfr^oF*st^?9ymcziU^WYO>!NQyb7
zkRJ~ze(06hg(ih6yK)lxU6Nn59+}^rC=u@fKKtwDw$kJnu57^+;uuYdE)<Z22>Fmy
z#SM4&&lWM#q%Pd#15=QP9M54D<b462(}qc>*<9gB4Nt|37u=O$lwFVf7JjYz+$fv-
z^Qnx~agCWePNG<qete#)aRxi;nuo%B@F$uJAnC8NrSS)vIGBh~JKbYstjZR<&W(tq
zr;5Jmm$Gx`c200o3h55gEO}4~#sar)OJTA7UG;LlylfAdQSPMEW?>|`m}N9;_3gn7
zD}nCgzpCtXa=l>##pceCb9SvhLfRb8x~{sfS#P|OSS~YcrvF5e2gi$%=4dx*>2yTb
zs(@h{6*BEeb<Y)bU@uODhhqG^@MU$(H^jw&NQ8<FKw3$NWLC%n3FpfqlllW$CFCtS
zZu_ZEN)$6c_iN(3R4hE38W0&ti{m89?)|DR?Eovd%tjb=V?r&t;=vpDe`OS2Xx|*y
z=~Jm#U)_MT4@@wOF*^+e<&&H0CH(*1BaAwH^0U9QZTsE*Ya6i@`t;McXsbZkp2Y$w
zML_S|g9fJ{;a|_yA}sQ<vwh)6xp!AF0$1p0y-|Z_-sKcrdOD$+9E~C`?`d7P11b&Q
zZEleh*L&-=d{evW3B`B(s-n2sjQ|7fR~uOqqBO#t+(EsVi+N={U`#_{av3f5=lXbJ
z4Lh&6_{Ufyxr8x?P;AhJ60ECRYg@^@oGSGGwzQY(fHR5uAdja-{aqM_<@6{WK?csy
ziHtW{`T-e^{}M>(){a2Sc=VRgDLhB*)h~&Oo6b7@1dJfa*jwS8<{;F+S^{n?R4*^1
z1)g58_k-^2!B6v)>z`Sa1UE#a(_Hv19~fTeBS9bVqY{G(A9McOG!*J+8CAt(c;&K>
zUdu~=s^YFcNz3~^+$un?J=1?eT_0HDgI(@jGMasO2$CXx+)Igjo)uM{`<@2&nwm^h
zJyGzndKcRy7}7l#_NscD?*|k14`kGQ$Zg4q-Fn;&(Iu8lFbi&72Jynxgt)OcH_O?|
zFMC;VL|(`3q5u+n*0DySZ)LC7#3{EyNZ8FkO`@fh85GeI1T*;_^nO&cy#;Z11EQA$
zk;)vfPJ>DDC?_#qmS&?!*edT<ea@_CE|Z=j%l)=LMWmZ`t;4_8x3!)AcH8>8U=$vl
zUWuY5xWgNu@pG7u$rR9Wmc0+GN6SwSwo~?pj{NRcn_KfMX%qt3l21vLna+Z|H)4!)
z5<TIRC1`7gr;{eb@(uYtae8WM4*&jOU}j8u`#OcIpu?RK#+PT(VUtgp{n#ZF`L6R=
z`N$O3%EaUps*GG=_b<@t*Yd$H&)0}t)fV!MKIRa_1RVdX@>vchk{Hw_Z*bZthJjj9
z%SUfbc7m^g<s*O%Ip*x2v(jiU1nXQWabAlNQd@w;U1IwtBG<!0#;-qR2ruyjfmc3H
z54?swt9F}sCuA&OnE=gie|5cB5N~_A_-HmAf)4|x!a-V>sudo!pHy;1x3@RYfL3dK
zT(kXX5NYzQr0H!dA8ch=*pjpLqu6t4a#z-2bSU0C9a4oiw@C_7YsdxYFhlw*n;b^;
zGv_By;8*xBv^)pi_V^=jLy=GUlmxHO3o-(Bi=@3JA*homm5<qafhaL6s@^<t_;KO|
zBATZbY~1=1>BT>Q@}2nC!SBL`w}h{$r7>v}Ie4@z{Qe1Zw?fA2!iUotqLuAMBIiI9
z1AODPwnmNaSk-AMr%6}sqoZ(qO}2V;3n1k}r}9=h(_ZF!mSVVZNEzp%X3t4HZ|@Ur
z2Z|kFhEnSzYCHk*d!542AMy2{UK(jGzPis?p6TC-pQ{^WI3d@Lo4``?x@fL-DMZI`
ze;+kNE}-em?$?<sCN4P2#P6{SJOkn>kJPxIcbR0e!nz^B)A28_;j-MSdNM8KexDy<
zhQMKaxjfXdRj`v~S4+}MT7TO$2mq$luF=)h54gZ?GN+Po?croJEs}Y1arlD`;2OtZ
z!}22LR;X(0S&h|^ayB;**_>7RLMX9q603f@E*$D1jJCPu%S3-`cgaY0ZZn^5#PF|7
z<Pz&nz5Wyc&JWC?5w>t!(6}ua7e<b@qf<$KN^n*hwSKWwdLhwC(DTT;t!v<i^as0Y
zCxez!UMFqP5s;1e%eyfydZpc}vy?GH#EHL$HBr7ZC$iL<_XrEu(#`s30g)Jfg<8#*
zqlksbKPyH^5T~We!4ps;RP<`}SHrlNfb}iSc|&cjH>`fA(FRKrYZCm+`^WH;@E3W<
zFSt_-l%^q-gzV5a@<n<CO3eCn`Q2H-$=~t`D5Cxnop{QHWcj_Na`6x4>&=nJ4qLN;
zug8R-O*_lcm-zl}AHLpIug(&kwW+Kr`X<=M_Yv&J&xO?9NCbx$NAU25+~(i5TF-)#
zkzVjnd_4P3xRut<KcCG2Ndw$lFb4AX!b*doQzR@64JH&47svrwc443Li%|wH8B1NN
zWb(J>gWwU0#4+i0QH`ZGT)(4fFhdw2Uh6!}G)IEv0M0gUh0+Wdy{@AMMz)*xte|b=
z1p6Pn3ksBVTQ@Lsztz6;FTFb7>{D>DGtvz)p4ObjNRR&{(IY_lnj_$;l;HD+;SnCk
z&YLEEA>9=ECkl+OWF)pQIaG`vbG;$)s}GJ26>C|PVSP2=@eC*MC-ighP}A$Ei_lU(
zryn9y+uE%vXuhJ^bP9V$1V5anbQR4gDEAUU*u`T)-k@x3w!e{O$8m=ud`=r#5gtR`
z?OSUt{B)xnFvV(g<k_o((osIOj429QO!M*ks=oI-aqrIl3j5p|C<ft#N)Vq!U2F-V
z4;VtBaW7q7A__vJ$}&EjL4ik<NHw<Xdgh;M`3SQC`Os(*>Xua(<joO4{JU-^F_`ZF
z<An%A9T8q89+g`#{!<!DfSI-?0{vGE{u25(*c&g_1p7m#GM;B{+T*fWr;t8g=CA)o
z<ltX{EENlU`(@0T4Oyg0d`sUBaN_x|)Ah{nc6fibtO18=7NYNdel8^^I>0jW$Zw!L
z-*u*f_)0{ApDI1TUqrOfI#;~@o`*<$vK$}5Ly8MzZ+Ye!)w{cX)wT5sA<J_zFbWUp
z_>v`jS+RcJOSFLZo{k`%d5988wC~Ky^i*KU_0~>HQS*%r5HEp{8$xHcXRH>H`AK~y
zKPQWnk}9;;#`88|M*BL%ZmW_&qw97Vof-<EvqQi)@+<@ni=64#=8redylbhQt}_~N
zV&*R=jSJ7+b~qep>$~|}7shQDzxTscy$g}4DQVKR-zzQ?q=<T&^iw=<@lWs$K`pou
z&tHsJ^gN9}sCW9)js`5%dj*-j|LlQ0tJxdnJ^}ywvU5rGjIdGi*-yeX&s1<ZMEIGq
z2ujDn71J?4mv>`~lrZi3M;A&d`y0Hnx2ALV`^`P+LK=ue2gN&;6czbPYzdq|qWLtN
zRRN3(iqWLOD8L;3{H!W;NHhHRY(j3yNKsKy`0biA)E&jXM;te?>0+u%wmBS*?Jh_!
zJxfF%@gmdXzKgNmV~<0OF^qS_^CQQT<SJPj*AT78I;0i6_iE)ft9ti#ecv(~8WX}V
z6vLjbUQ2Xb$h<2?nP*P`(L9|ki!%c}FD)f$|0aGpb{*K=CkS+*H<Sml#JKUk=<_t#
zWX(f~(Ar+&4|WU0esc0u^N2B((V`dGaEa_6*8p6YaW3nq#vAhV%f)Em6Fy|fa?}&w
zi4*`8MvYfV8>~{H$wA?y;z$47s>#kYTDt~%G~TAy*c*Z+P>g10v4hd%D@9Uyhe(yV
z^}><mikePuKW5}$#&D$Edsle;E_jQCd<L+U1L|%-S0i}ubh;Ec3B(!<p_`W@(E#eO
z!tv_Mm)c1ze>~ZotcM}l+<YisB&aikO^o<NdScacV1U1!xfXoM;)4TC!(>Q+8m@R`
z&70;EIiG&Hb;g+uKnCLM4+aQ!^;Nva(fA;O<F*$=(|XDSfhinS8~!ewN{Eb07USfZ
z-P~l3wjWj)v0oyT_y5!Oy4+myQ0bGL#*B9-B3WYb=O5Q=vKwHM&w2v`WHKx2Www^o
z(}&@J1^T`Kg&(f1e8GOy5K?g^0oy05*_#xY5K|BO;E01f<FAPL>6SijyI)aSO;KSn
zcmVVcsSks^wn>y`6YA50$ZUNJP`VR0{TvzpO5bH8;C#tlpE8&&8`EQG+s6AMLxx^I
z5#Pj#e2z`329Nn;>CiV>viu&b>^~Q-qv`M|g7|4BDdbg9LLe57$@_TEkW7s8;J?);
zAARo=P<%iBcwE`P{p+<rTeaLgV=AQ8xlT5Gu}K;()yHY9o#(splU8L0`B7L0jJn@)
zc;GPG_|y6PByKc<cazl=X<Zk2nQQhR&DIhsdZg%pTTC2){qdM3Xa$NhEZpb**Y?YI
zo@&$ujK}AduJqG4AA!sRDo?#y^iw38`xXD9o@e5zRsPdA_=f*n2WY9SA>!{mg0x!(
zMYZ~Cpy)cvCQ|+1oKbPF3^Ah6lCBo?*PDqA7^JoaUa9c_pI{rZbnGGrg~|0(AVqVO
z`llR^CBdpI?l#G{0vV?nG1(FR!Ykl&JoQC?B<S<#U@f+(6{J|Be)EJY5tZ5hC}NMW
z&0S7}@V3_-;X_*i|N33*2YEsligKs={Xn6_dF><J4v(|Q&d?#yBA8Ai;JwLu*P|(9
z>Ei&D8n?^KHN6{go0exR$+H=Bhbds3Wy>U%LtuS9Z8@=ET=#Ar3u3!U2~v*rXPWJ%
zrIQ&&V;9Q01MwO=JkP3T>;h$Xa9r2BPAz&P8IwAZPhWOnEn&Z5Fz4xDAKwA)EBYyb
zi+*Z-f&f~6enDpOzrcIy5?%&VX0UMtcOBvp`R=<1HJ`4##+vCEinjE$^!d1sZ=49a
zqt&&)_wg)FH=sGRDd6ZI8Kh9<y<vI#<eD@Du^AnJ%Z|B;lecg(1$2)Vw`kx5gi6>P
z!H+kVZTPoemCD~jc+7wV`5xx(Lf%en?Kk5GAihEpAr!W5u5*wz2vL|PwSX60b3^?L
zdZLo+-u-0p*E@d;$o(zZ@7+WD1vInIkjs@feVGp4iNs#PmrV9a4>{=*Trg1A(2XU~
zcvj5_m=l?I?!>L|v0KC9pU!KbNYd<feMdH#70U0H@sVy_gRz)BuFRv5VyTsm%o|gR
z*>H;te9L#92PwnBt(7SsCB;3C)ZW@oOTRKDHTY>P3p`U|0%K8Hg1zV8IZKDR>=gVc
zBgSqO9-8>M3oXUH+>MQ?{9v(z-|A{668fH6M@{4HdPJ`_>NKfN1_C^+DRgGs%Jdy-
zzMk5{#CwlE`rDr0ZASB?{Se(uxAzAgfF-$Hbk=uonLnB{C=1${R(%D3g8zz3f~K3@
zUs45r8A%>`@vVn9<2$u8d<&;|FO<Z1zbBe|b9yoWrSIIK=|487P0=tDeaPzFeTcWm
zQ~J@e(P>v(V9XdJA~ki>#;r73l#!Q&(y#NQWP_ETrq@ByR@B1AHeWPFmhUriXC32r
zPJee~(7ar>^q&3$&{R)&+~=DNzC8+K$ST2+c8#9nNHeAxAw{Y4zh8Wq{}j}w>ZaB7
zR{sk0y1el?359ml-lKWX9J|^S{7TP)q!_Kgda+$E&6bfj|BI^X^q?d$rcVH#S$+Sq
zEf5DY@;ej1bIKOk8j(M39Y|?S4kjki91R)RnMC^wf+QfT#!U4V7fIhYdR26<FqOeM
z;?^FTg6I(dvol6mb>KVswZ2CzM!=JFx!<kUVU+x<UeOIubgf*j402u8`ysCv(anxa
zJPN6FD9;Cn;EzLpK3VbmgInkPxAp_<X@W5PI?xpb8>~5U)`8jys@w~Fo#gg{Dei7h
zhBRjyYqx!T<%$w`>dP-3_T!EFSjXL8Eb)m-dL!kC$C|P3y*YM&CIEdNXaZ$C2S68|
zH@i9u6F-3HA2g83to&r}CZe7DYXK`U_2KILRXtbuIR>e&x(gn8*OXF?yx)qiyLs^@
zfbzAKV2ei+w%jzn?6;&0qw}z2N&DT2@ELO)dQ$ywcGl)|FO4$*f#Qkv_uz3<lcs;(
zbB+<Wgm{;q(UETw!n2%w*T3!O$^IIC=87{O!7_<f6ivLAjiqb!_}31*9LmFdES^C6
zjsbsnqUN{BDE1NhjbQH3{pPszL6@89w^Lzo)1MV^r@WS--%VpF{H=*#q<M(L2jD0=
z+8*tEFC27ab{nEK(+1>#2(?1l!^>Qo=S*5px^ee00&9~oNYZZ`9DD2}9sP)_MPbGS
z9UbDPl1mXJj9L>}Lh-naPdS@V-9rIhi-$O*2}a)j8KDW%*!E8iL=PX4yl~`I?8i75
zohl(<q)q<49b{V1%R;0Bu=h86hVkkFC+G-@;n0s;qZGgUGva5qb4YtC)|;co3z^xr
za|3x6QdXE^(t+p+XepJ1!~OS9WUQ&KGFj8;ab>zW8YW#r-WyJ2e1#^nk;Kc=t9JGu
z=K4J^PcpR>Tm2PyOED#px#4<a>?H!Hj+0nsR?dG-*A=oLpv+v=irxx^cmsYCb0V^$
zx!sWj<jYTpqKRE-AI!x`766PC9*9AHFP3~jns$gEu`x=XECq~(A4-DzmQ$CqNd>D&
zhmp`V;+>YoY_|Wht-Y}~tY|t^EN|**tHo5(A+&%Nag$+OqomaA<?+#RvGx&+vJw0W
zQzG(@KKnrehBKlMd`mXvsamI&F#Wi)ZwDe{8G5LXnLb@&9&~GsHW<vk{Pm>>dO*2d
zX3e+pt<~a~`N*q_P>a8e?gb|Xrd1w9Sg*!vEdp63ja(zwkpV8FdD2blXAW=Qv)Mx;
z$dDjkolMm*E-CxHiR7wxZ#f@g@)L_tux<kkK3F_+*1ptAkVcerdkggs(Mv3D8{jdE
z<yGYRZGM~Shlm;QQEvvKq#{y%@~&qcm(^{uXY(XpmIVSIVkHmIMNSQXbb)jW=|7hs
zM_X?2I(^ylge;xcqE;fcfdNcPHF*Vmyq!?@?V-fRxgGVLMxt+;l`^5YaGKm%xV7a6
zk|d6T9E35j51s8N?fJlK?K#|~YwTy}wPcx2PEo)^D`+<Y+}O-;Q+rZATsb%!hQUB1
zko&_5+TgcW-oEa}k#HUoKhoj}t|svL-OwijemlhM5TrlFeCJ>?Sw+u>2p+yTuH9<4
z!||-yS8ybIHbV}|QWx2Q?g&_B1dwF4A4MK7N1x)ENBGdIXlYXtrwkbi+TQbyr#L`B
zeF3ZHQuR1HLhAM3=ovd*o*r3?Q}z8U?Vqg40)F{ilf6{b+xW6b=>N6sWJetnIWQ09
zh)?^+=Kwb7c+)diQEFbH)Bh<V+RDi9W{$KnK`-5k8#l$Iqm_$9hEG-2Kdz%4nYvjJ
zw3Rvi$-g*{cq;cE9$q0nVBpgI`^Y5RAa4Yf{`#l9Y*igHk4SOeT00&ZwUr_a)2>EC
zf6+PgsV0BJ;FB7bp|JslPRNO;Xj2V*#Q4YWQ~le5XUbxd{-}>y-QgPwHN+EUb7N`z
zov4lQhGxD_TGvC{ioHCd4GTtw^@t|$N&(RDWiE=Ug@#R+YDSB<!R!dMj7Nxx31*xh
z%@xY^ds+9`iiw)iP0U-XxfR98Z6YZ4^q5BrwVMy7J?T3~d%w&|=$G-=QZcep=pcx1
z*H4%6ZwDm)lskm5qySaTYaG4dOPgP4o{-x^j<@Q7!1&`MtI=%TgBxQtE99dZje-|r
z=yqhM;eKJVictZa_=@y3AJ3!Q0}N(+3ss4c$Z6LRV_pX}S0oX$X^`V2IGG{OT2RYB
z+HTjUMZLtZV&kWqph*57ouO`nZitnMFj{dgq>exTUBq&BgCuX`Jje6jzsn5sxRK6>
z(|1A=XyL8hwmBJlED0ZH*q_%ungkl`L9+zuY3KQ6^Ew(Is0PCK1xWr;?p<J!xy?Xv
z>i8a2V_>U&1XCDq-2Jt$`6Y3`+-cg|zZ@@tYWYH&<}a$TA`P{!`C*H@84y1_Tt1m@
ztXyMIOYicQ=<v~2EIQYK>y4lH-KV|J-|*`2$UNMuML{L(b6sa@&k6YK9MB#B?DO8~
ztd?&HIQ8j1yL_cJK@&uS>{vUoKvoKXZg0Q)E`gj{uW)=qE4n|s4Q$V-h;HwgTjNQd
zr(#w-F^WBLkW{%jsnPsU!P~5rbrzYR<+dUG@Ev=w#?Fn6dXW?q@OugYaNk<LV0iV5
z41(M~aErF*sf_9}7HxVG>bm)rya{_#<L_8C)=h665EPVFrt@JjPJhToei4NZL+GQ>
zWsMba`q-oi%f-xPx|Ug}Sa2$HtlPwbm!U|>vL@pPf{iPFVc}UBmO};%{dFapt9fm1
zkDbevMbHk;^H!mzu;Vo#U^FVKe(?IhSc^NT4TIiJ>)|Y-%0t}SU14i}0zFzOHj&X8
zBh6-MEv>Efpl#}xGDH~Hpb8joAiePl${ugC<o97~I~2ygB)FEvrfBkmgZ@K9#~~DC
zj!aHX?R(2xbw}qny^g~sW_|m&T*S>vdq9!jr|s|VEyM@?o_+wm!$%_8#eM~6=6#hp
zve`Y9-{>9SKHuoK;(cuV;pn1{qTw?^I^cK!@iV?mR&WqfI0($aF~}R`|NRn6(P3;L
z&*1gCAO@o_naoZ`C<r)81q^Ese^P5rc^*$Pq^_KuC%y_I66@*p4h{t^5KW`_8yZ^5
zS%O(>3P?U}SRjNNtY<PstudI>Pp9-Bi^|E+E=s)1vQCrv7V(i1$My)af4ioNQg?5P
z+@G-4(9&8^MsMaE{`4PtlZ3eh8324dy`t+6fQ!)eUhAgW(q*dPh&Fc(ceW5{&r3r{
z0Wi1T2hM+fSX3EsxWC)XPrv);M{#n{Clh;+>$T3UQ$()U?wpFEZJ%rj8Jh;WnzUyt
z4)XF}!5Cg3RnSi|qo2@c)Ddr|NyoCmr8+vpA>0*DS-7t{d1u5vJr5KT->TPMS9Af^
zx+>m~UY$jc`}0AX#N6CQ#v?@k@F}><6GxtZ+W$qnK+gunM0)PGD9GRaXe;t?Sm2Jm
zImDT(SjPhWjEYjLd8-P%NdeXxfnKiP;*(k~p4t^!*c-0~`-r~%6^(hz=TV1SUyiyz
z8!!N1oT1<bV(l+xso=xf+4H}x4X>fyJvjcO_T`90QrfV#>g!cLmc?3EbAn;Xx#dQC
z>SKt{@~LMD2cW}-Bc<vXl=Pf%)%{9I&4VO{D6Gw8ho_&qwDF1TQR5ohdRp#b@y2Gf
zG{p;Y_LsS;EoGyX8Vu{CmTG0fV^oTbQ9k?@4ez;0uu^D}Yh!vT^gCBVe`!^sBS55E
zpPIZJ#-yn|V9AX5Fry@4g@65sn?r-z>(}+lM^MG3U0r?EWy8d}>R%nk^sd*W{b_2Z
z0pgB<D1;Y&xyXY`r%S8*w?#ad&~xXQu6VUR4TMPfpWf)pOG>CxG6<W4|3+X?I5r&n
zCFZN1opXA{#UgpkbtSbGCaB&yNDk$eG+>K~DJzK!@^$%$PZMEQtV_MQK(|X>8I8xF
zD2b$S=B!53PE=k?<U}E+>kS(eO3aH_%Mn1?KFBU{N-!L0DySNQN^_xCbXanD3)fdi
zHKT?9*=`<hSz#JQUBBtPw;ARyt%`m@9oZm)I^%qID<X5}-9drRl;-6FD=c3IK>yrM
zz(FU`C1+pA*%Pczo7d*oYutT?iP{H+1}Kf2CQ;{wH<}e%4quT%m)UOXt(a{wqw?G4
zsr-&yeqE579biBQa3Mc?=3AD-cQqof4SbFrjm%L7^y|U=os1_Cg=-;Gd(ya03s_NA
zIFZDCLd*-UOWiJwVc}2xvZVlS9z+8|a*tKrZOny;{fuy&275?%h0hKjf(nq`LZ<f$
zmDPP9xA|1|5r}1D1z=b`^8DiuKaZx|ZN_K5m6uY$i=#EiIdEkE^cu-+vk9u5qjLFI
z(W@05z+q7}rq^dOR~DqE^mONo{BEyG5fFU)M(CaFo|~;+j>Jfo0*Y1*==WvPMD||D
zNE~Vok8+Qg-D5i`!|J5id&qU}$?#h;Md}gJuS3@(dFFv=E{K>WImC(5b`q%9V(gMr
zs>nHKK*Ux+yw2$#ES}7l`^v5^zqoltHp8kS9STO^TuY%BNQ2p2lpbP=ApYn`=HMO2
zvo2#ZIQaS&%6>zH5Hj0HTE-XBCfx@m&rd2O2oUT+*tH(3^eIcCWUff`iac`IH*uYx
zl{!P-rK0$-_6TV6)x8Hih%0~Yb{0)ZUl?;R|A!eE>X0AnXM102sot(`|K>X{+pK@k
zN|l`TRPAhaLMd;C?~@Hy(~oVF0TRLOR+!J8tdROy8)1-rtguMBE;}nkS>h6`tUYDT
zPFO8gT1kPJr2Y$w{hOxX7BbWw1e?3LbWJ~USHq#8sH%Zc4OHlVHIFFUDnyoTGmoqh
zRzmhm4$<ny3*wOTcI>MPD_@b|*fT;dU~#u=`Nz(X|G9LW|KJT+B_DBE;XFxMMPQ!g
zu@gfnAbc^At+EUd{sIb7&@5yg?PxwUN81=FOWCwj4_Jw_Wq6DP1<ksq$B!%wKFgCi
zLLbw5AF-Pzovf*}Ags$)Gs`4M3}`j#Bs40_=NqI}K=zI<&EAnj;QL!y@g>o%8qk-A
z;8b6BbkSTzRONDp@c<jX(+`5<_Ek(>?2U5*7Xt-Gjx#KXL$DFoS_G|G9WwU?mtIj<
zhk78*r+f~sF#Kfa&P-%M(wbgk*nlxdB1gt=hKa-#C&W%r@)iK9MFJ_8Kyj8Z1P9Bi
zVnOv`FXp!hBzuc5@j8_w;}0XMZL>H`FYztogo%McRbW=p^tbU){*VIEE?uUzi+uNQ
z37A1IDXQN{(=#)?0MLCmrF`ccM1V<>|7Sp{35s@~y!9DWld4~b6!oRBCv#X$WU3n)
zXc)}2s_#AjK`6g>R<HPS2?;@6S>3;zwy#98o=iklJVzfxenDAQjDHIFEEdDlZ#_r2
zghsSerFsvOA?+Rp$Pp`yU3x2>gB5#KwKihJ;}0vGkY{mcb10|IoflOp8u)uu^%k%@
zk&#NpGyr6V9GDS^7qydnt6a^M5hKN3JKb7e+VXP6(DRe{#UC=hr;GE-Gg3HfK$l<E
zM#Us#)e=0JdTfCLW{&}t`O`nUV11hQw&6tQYA*R(Kv$^WhNU=GYiQ%)Z4A_ZaOdoW
zy^7yjD5FFy%tG~4H*I$C-px7<_%>f56=q@VaZr>u1oGE;>v{Xv4$kziNPwtTM54rR
z#bfcdtNabkZ*&a1P`65<;>N%$bfIGblimIPDrpB`H2}&?&H|_r4P}B_AKb_4Lo?Jq
zzBXu7s*}nJ(4Uj7K_F8<JC$X^4`$^v-*8ysR`C-SO7r-_8@Hd4>0<g(paHqxK24Xr
zO@ceuBQGXpT5@-6?SgTMhD5)dtMN0?UCZum@N@i?Kw8-KHB5k6tw*dne`k$l(z2e!
zdndd|x?Qk%2&VjC2_A<}kdvIP583(XJ~2<afgY?6WC7&_i^r@h5OTMp?b@*IM)f5y
z2mQ^&v_QS2R2WU)Cn#qVL~J~bR(f_{=QqXEsjq`*?$_DMhq+tj7e4dix&Z4DWI3k1
z$pWS_52-xzPuc?GjoY@zjE+twbW7ETKchR=2<!=zQ&*JVCv({Fzg@Ccc#iQztJ&9s
zoHO^l)Z=+w_f9@7Rld4hJxXaFTK_@^Ym99Pkc?cqxKUAc$hr&k6V}2%9K67VJTuGC
z#(VJ8qUhE!pvkwChHsqoqTS~|d^d-tovqB@g=-4_&8t$lV*3+rr=(@=PBVTYl^c@H
zwylL=Jz%}zX{(h12$t7q?yXm9pDG;YY_#n7)Ox%m_0>t!Oj-E%<!X#tHkPWDkbA^N
z|97^Z$ZM5l<9fu<o1_~R2jocPmvQ>{f+Y7x<_yvsrkS7Sfnt2h*b2?UWJg<wE(7yO
zu0|#&q;4nPqb~F|zDeo<jp$G&M+(k40v1^|#~i~WcFr9;^8}2tv3lCk$$ZHtAi)xE
zMWUh0bWR9why}7C_9p(d!pa+z#iPHvBWviWa{IToz8?su{#2xvB%Kq<6u0N+-=^t1
zFY(&Vij->GL)<Tg8j-NNUC3wu8+wz2AsA?0{oN*>=i%Qn@1<!=)U4s9$=t6WZ^Rm?
zhUQ^q%(6&nHX$~(jy`LOQC34mMT=^y23`!^;cqs$uQQnZX82RmXTd3xVz;=OThGn1
z>E;9*2@ubxTCXoHU)$~ZJvhz<h2q=UnW+pZEranr>JbIQ0_q9eoA$rxPfHAe#xQ59
zA9jl3RYnag^*>!cXkt2giPt}pn+JyA#<YPJ4-1GBFxyA(yMyF^9s13)^HnRwyB3zA
z={0(40?wymYlQGPqk0t4;r(MlJ>t8WY9JX2SfCm{d8UuKAI#lkb8gD6q15%}DpuP{
znryfFDMr%gMzii5Z-THx@0~txb!IU=fDh$nxRbVwGn52kA!Sa7+2A2m$;_YIGswo|
zciJz9PUsqMd~PI-%P@5GtGWy6IRD>2noVssYpuyQOEh%m_s=zU<#woq;%9(YJ*qgK
zOlArGN!LYx3Q>lsTLc`o5Kgsw+^e6;LCdVVsGo$sobvPFA-K>I>i#gv(Y_w-;816J
z0988|jlUrHW6b;A0(d>HRq0ja?;9w83;r2n0WdBB=x@nLXD#ef;^Zxe(4kx$IBBb<
ziV|{K8rk_q=>4mjYG?D*%;j4fYurFR|AT0ek>AneVJ*reuOdcE;!Z5Qg%cY#B7&8s
zJ@FI{K~X=E--7=zQl}Ln)kvx{mC~RV$mB}M+;^rG&>CrjhbryHk-WWQ@=1*%Q?+<v
zaT1b9i(v?ro=Um4Dt8Mt5Z@%1ykUAU?#y0%BU=xo9z&QPjE7JZ75zV%TD+4@=ZO?<
zp+E7j+metxdXf%4@*QuEQq5irRhBMvyIKvO)*9MuCD>wKn<92VSzsPHgX~_F$9T=2
ze;t(|Z<LZcujLFy4KwKu)`ty0p<fI<x~QZZB96z#tmo;FA$YS>hpqQT!^_GKMGY1Y
zQkqOFYZidih(v*3tOcNOQ%X)aM_$gO+OW*Sn1n?C1loCwv*8#7MJO~uhi--R(tGG#
zhTc{}N!smQ(j6elNFp6v>a@}^rWND40ycKFoZ3ai;Ii@D<9F-m1QC7j1DlF3`QEGV
zW@%_&Uo;q{$bJnF%Wlw5k8^7w3}<#Rp%3+Je=JNMixD4=j$}Uj1pkEe(Vw*5DMWe^
zFpU^1iYHb=G#Xisj8o$*9>{*>*_rscegE&e@fH9+GSUK=xp}1_{+^*TzVGhmsma6l
zV*s})=@`N?0GZF$V`Xg0W_rjSLRrt!B_Su?Q)rnOT%mu3d&~<$$L^A~qB(~7gU3Ws
z*gSR!*p2+?#qN)#%e>x7@__AGnX(TShc9Wk@z_)Q<zVlN=g1QfiPO-dxZvflCrQbt
zJ5`nCWyrauWGzkYEVS_gW-9{TL8uJpjsk_qg0cHZ^h&(U<@~=7xJp5Et^ol4Zx077
zkhzsW@(rXOb?5ee44Jiiclw)BD67<bB&3Yecl;_?V29X*H*3JF-6Sb~$d@W_J@#mk
zpa+y?{=Pe#o?-THbPNHI!RthSzm=Dpno3%%jG(cx^460_i(lC^47X;7gbl!-VYc*$
zhqC|ns}X=fDsK3AGS837KGD`#u_F7OwQ{2-D}UUX1wi}GLvaZLAVo6ij2f&o$E<Vx
zjIcvKXkM$=Lkr@lFvUF;%lhord5Zmv_^eN9?mm4;<<`7TE{9}&Mwx)i9?ozd0<E-a
zj0^=Fm-kYKZk<<FfYVi<LOS0;hRib6&3f_?d(;&Q!tvh?BXkuKDk1(H$Th=B?z3nQ
z%CvazuSz$+Y;!e%mn*qagd$Al&8r>?eT41j=x&3C|J9hoAZ+Fs@;Ilu5E01ny#lcH
zSQO`aE+2^wh}hF~vzn;3lLutQ&rf(!7T|XDeek!C#3D;4N|Y)bl;J6is@~HmOwBjx
zNah<T^Mm>)`&)gzsu!Cgzo%?je~s`GkRx1#g;)iBry~u&Xqa5M;>?qIo!rP2S?<Wi
zHjN&Jvz>i!#R-dvNl7tf^&G)^oJ4BLgqVPE^RWL5sCP~aHx6l|Agqrm4#0wQtFoJs
z+SD$;^rL67RKYk9=R>^Z@vDC&LOU~!jamD1x`8zTRDqbijhlrep_G3DXbtQ_y-)LL
z87BfQ`_~v66IyFG^;rVgOR|&v(5;(B`p%xvP)*is7X(#WX-*+Rr~+x|+LsD5Z2LNe
zx5=9OZTcEPdkF-fkOFaN+2iOqdNBR<be5efJBd`c)7^F~A3dA?humx10r??FSX}ed
zYXFEG9Be6kY|VLG@>cqxOkyL1Y+gsda925%g88r7$%K*5S&r!bAY;R;#AO#5FPRhb
zcyX;^mLid5sE6Z9F#=JVYaKT8c``({XC#fg>W8qanWg!49<&l4;*&SL6@;z@c&EZI
z_o>^goFQ3_2*(O!v;6}1*TDqz<4{(1n9Hf(^a~ywnaq(@0L-A3O}~;=Bt)o@Wc567
zQwvWnxC;BMQIx3bAfWd=;`t-R4Bk9n(~W$p`MtV@rePu<^e|E}lWl3T?1yI@T=uVn
z6jI3H{yZD4SYQL;Jm=sv=<@#Bc=$+wGV{Ad(IaHQ6(9tKDgB!ugzK_IkGoBPn_&Rz
z3?lUTRSNc6cM0BVLu$>puc+D`+`H~nPJpd-^nf-2_|=OA@la)v-Kp(O0v>XK0^0gt
zg3(9<Sug1RW*w~1SSP}N_F`XFkkM~)^Hl+DG1@wVzD<^sJ@iU@Qu4)1Q}~w#vh)*q
zF<qg<E}RJY`#hn*KQZ<+Z26&RWUA)D<kfxN&9uQc`xaz(27LwKj}-7YYNYPR&QV_=
zud2ut*{V3qM6XB1OtHH9($a_@xQ02bA*V1_Ltsk!J5s)Zj&}cdd6#RK&~r`8Z-v%1
z?J*=Jw>Bg$;m6-azdFK#dX(me8crz%5+Us&P3X|P^8-fjpNa8C(dlVgeu$~VFTIZU
zspTZ_n4TTit2wK3Q)#Pc{vq${M|(;9UJ3t5=H5;J$;zkaGNcDQOU`tKWK8`)LvnGu
zc|2ueWbfXia_NxzfV=$%We>uN(@Aunw$&DefC)}xIz0)R5-dTU(7^XFNUqpk3Vi0`
zG*Tx2rPz5f!QHpPqS<O9dGR?r`pGaD_h%a2^Lr7#<t`nLndTp<w*!?B!u}#mwm@<2
zwsutZG;F2?rQhh335Nm?;V)#7zH)B|*c9J4l3K<)txgl+)6$6|e+hg+>w*pZSHCVe
z=``92Hl(MI;E#~tfBr(zO12Dr%DO}YwV=z}W!B}_m6m*PyZy-7-qeQJs(ESbLX49%
z3sIX|UM~6ZEx)k-w`eVJ7L2OSn57li4f>lWr7}D;*tPg5C=pdz11<ml#&wgbDVv}X
znoV4YnJH=KE)*tLcIy-$w)p<(I;meS9J-^@+%!5i)?W{Id3<waH9Mi%?|d~Ww4_L$
zBkCzn>xRa)B&*PUPfpDw%n9P+6|kSz)&!|em_^q9E>vZ&CPBW_HTYa~bwG9qSc4yQ
z`_a(!lnKSF>)>`Q*{>tu3kq`b1+><i6HAiimA{I4+Y02_>6wiGZ~?eXUL|F@OgGS|
ziOFxjkG;72^2|Nb5<@wbZ&*{Wf!wFi3bGF`!AJ=-j`BZ5675#GZ=7;Sd{{LJJ;Y4|
z_9vQ0hsL@~;#IfD+fM(sW1PsCpRC0t=QavCCW<?xb<h*(47>Y5cX+}&Z!X42IiXpB
zos4y4OU5P2HfuaB^v?T3tb2vl79k>I1CQueJbif$3zA5()YGij^dDx56iQOA#;KEq
z-1mnL7rfvNo!>P>BPGCmEA)P+{;db`5KiIkNvVdEs*sTP2%Q#ZsDEZ{`(Ly<dmh~~
zusUgnT_IYUGmoA3Mj)=w&4JSnT}W;0xNxmMRR#BCe6=vEz=mMO>vPj|m-a15=IQdU
zAN5LkLv{{6)be`0oEPBID=Z<+HhmekB}AjwT#cC={LO^fq(H3`L-H=<Iua|L(P;uh
z8uJAO69PEyzzxvsy8-*J-5MRR)jqFNmDV`!e~G_nPuljxtoMadP(VjOejT;`v0;Hu
zvhPWUSxMy2&ySnx+Z@*XfQdaft5YBS?vF_je~Q~xAM5e#2@&h@(VTalQGF4P-=uiA
ztg^jId<-2-d<lJ-T9Eb|N4$OM!>B^)<d#@u(FLRtMT}ar0|?@wXZ{aXi+eG0yboop
z_E00l*BR&p@U|Vr37ib)ViLzJOLL<H;E>1a<o73$xT2(nBA=f&nB9VRAgV7|&J8tc
z<rmKemc!<)Rkd$;6e&9n%k953ulcvVVd~l-kn8lQNvAS6ZP_BUMeE)Dwg(yGIqhw&
zZnz=ln3hi<sF@M)jX<l{eB<@Gknn>~;s-%u$Bey+!9>R7<|Pk(_sglDQ)ovOU8U1{
zJrN68FcaAhp|dClWSHo)dkzqcOYrF<BbVFpV#h@zMZt(WTh0aUKhYams^oO5o|!e)
zX8gw<ClI;qlauqDG?r(tAm5R9D-h_jI!VJfK5q~AYAD>wp`4GeRQHXa=fa8T_=UaD
zK7vf2_|?~pe0+VJA027=!7=Nn6jRVDq@}W?!dHX+T0+@Yg^a+9owdZw_Isok!dYqw
zS^;;K+6DkZi51{q?1CYH@Z1Iaf@eu~dWP##=64`E$b}|ETa<I~JOofeq5pJWqYSSf
z-;vLADYCyi-dsU6kk&gfC(yJPonQ6GI`fu|pWcp2lA!L^8!|2eI@=M=Y0&QAbKl%I
z>~3crx1(}${pGx*1ZH(YGQseB-`E-s|E1f3gzoujG{(DQa$~>gSpcW6q1hd$H~oSx
zYUZ;#<J}qr(k$Tz&vzd1TS#BzZL9%)8r4X2ke;;xou?()U*wlqL6E;Kd5AMGJMiun
zYze~wKAEY#mte4O_fu9E`Tr~cis_5z#BdW=S3`k_b^O6kNeoIK{O?0S<9QA#=W&TT
z+q++E3BP<SlX{G$T~nRssnd!7W%b^jA+dis(c%%^<|?~HzIdlz$w%iQrgfYi2(ocb
zaMh=HBepCw4UdXCIIS3mAnXln-V{QN)IOScmY<AlI|k0Wnx8dL6xlqthJjV6{{bjk
zxcXGn4iS-XO8{k1GKNfE(&+1?im1u>(@F&YlqeFdFNE57@1$xU$-!=3eJxMIHYCgj
zni26~H>iO`P4GuRictKGRF3a>#GL&?(_i0_vAG)PE!7JLo2N}{P7f(VB{^xyS?LpA
zzTHoJhu+<0Z1Dpg3psQ0(;rX*0>qUwVU>^tS%|-(ANnGPOP|^;_^2;Lvn!8o!EVN0
zb+FZmQXrCy)gtpv;?Li|MWe#B2ogpUo>wLB@l30tK-)lptYfP0ncv;lhPPQs(UGaj
z+f-3iw1!&+OHW{xDD`miq@fIe9d=d$dSW?}o)I=G3oB-4PrNYiJFs?u#Qd|<xD>zp
zw;;}7z_fHsH6{CAln5n429Vx6j;x{O+|;>#yP0}+6IygawkumgJ{E;VMeJ)-RMZ6k
zVh>Dw<_3PU>knfVm4z4qE2_876;SzVOC-(^0FWclCfodjIc?*bB2V+@&p&!1tmgr+
z2#}Xs{Q75Yc@%>32p~{Hp^FPGzq<QN`O_+alO9pbkAZY8sIyT>1Yy<Bd2b1zluey?
zDQq_P<}HW;A-(<XhY%BL&j#&%J*@cZdkHyNR-+~bz<q$(3ENw$QRi%6<n=G&uq)>5
z>_sMvUm`?`rA+s*p_BNkTIEBui)Mv(<TQYbQuG<`9hXR>P=c=EMlP?Zq*ktk-{cUk
zB;xh!3Y$*&az#Zgi>>)xkkeCHIzQ=MG?+U3BQP>HrjQ}(sCSwdP7`J6A_uJLqw)yd
zq+q=x8FT(R4+GOq_r{#dwo2abv#9><d~=Q!KBgpzP1BwgqS!5A)|H`ndU>gyq-rVU
znvS9ELgyw|BCD(%b>kADN&Lp7)=fr+G5kxEvIGmwZ_mB^ko7?6jUuNVk(@1cQCNXb
zi?IBFeAl)$>JEPsd_K6~3;U`^Y?Sc^fzyqv*j^N(Vu}KxcpM?#G~%Q6KRn+^!~yKU
z9g4!lQHW#wEM}3dC*CC8d79<Eq$FMdEro~$Owp9|6oS<0O0;RTX2Dd{v}3i*H*pIh
z4ZDNCTk^j^+!2Un#=pHM*@28UnSZu@-vD8{pUDMuP{Rs5Go4A0p-tw-#q9#h*l<a|
z4vYhI=wMDzoJ0Zf93&ozhO{+?p_$iJDf3?jh%Ui!y_LPSi46!AE;;iFyu#Q#N*cfZ
z6~lj4ss$}gO*Q#U!%!(tFp<B!9@XFQ@+~6Yf~nnopyU1vGJ|i0X>WJiw9d=<$Jcd6
z5x?-u)=-<i@s)Y$wCloOE4ivDNFnmksGaP9N;$-z&EHOs<8~{*=Y4pN-go_=bR+*(
z5B-?GqhmuGdtXBeT4QXSukOo<Nr6fj7=l6+gHbS*o#Cg}@sHwPFcW|z6!9x~bT7Yd
z<)ZEf@Y0c1{D6JyUGzQJv4P>bL_9Nm7F^8O1%Oa0_2A;-xhtaEuU4sU-Q{oYp&f{s
z#{E8)ag`B>M&_5?d!ce*=r;UI2G~l)s=?tI<IK1i3jb>D2egwriSR=2!-DZ943Ihk
zX_?KZVlldfq{R_fL#i*rz|~8Y))Xh#Ks+LS27YWk?g>LES-u<Y*x)6bbS6bEDDccX
zLdP;@D-FcfTy1s}kFOeL!G>^SZ_%_h8CH<E<eBl<Soes7bIcOAAgd7d7WcZyE|05d
z5EbC}9?yz42JG)!EdB8wJ<co$r}J=mT6~c2@^}jN(|>Dh;Rt;e$b_zSJ`@X_>}ENB
zZy#cjN}}L47*sON2FpJa!NJssvQfFD4`r16W{(h7o4185FI-@qgk3>u)<w_BI~X97
zQxs$bVcWE^`-Is0osVZc@$q=0@jZ_TPPGEc7H<s%^nO2PkInIK;1~HH07XH%zIE3H
zBC@Qk-pw~s1`<y6xw)x{y?Ul5a!tS7yp%*vZ7nUSZC<&muDPVRwz<Lfj5K<OCa#91
z5OQ>qTL&8B7zVKt6NAVmLvm7!in0?cD;ryuEw5?*=G!Xc8pngZ&=8aLH4;)e251U$
z!l;pjDT&ylc=0!tjo*E{wh5z?tk2Wr5uMi`0$3c<;t&&%IYZzC#weAc{+@-SB%Kb*
zfWzM#JpyvFQzD~A6=18ANaUMus+zuCTGNOZg?9F*?9`ut<ddF}7;L_2UP|A-nMvO*
zt8SV*x1yn;p5K2E=_#H5mPSe2;e*^%6<Z}I`8x4wRFek3>!H77kPgBK^^f86mDFW}
z!%t03i{R@;N>Nc!;y2%X+w$d?a~syIDc3lO^~EnJEKC@_#TH3@H`*w1#fs(4UwrXp
zQ%Ok)2VDE3o&HdVmP5Q=ldW!40#vTFt%5Bh@Jp>g4FboM(adkoKaDw-;@53|gEoBQ
z=YM^!21!Xt2}6bqNgOa>Kw>jqDwnTV*8J61Uo|z<$M#X6`1tSfpo;?hJ^1s|8Jc!C
zlwi}%H%}Vae?W3xer^JG))U`vzx~!vRW`0P0r}zKM;ty>e0lLk_4qOsc^fi=dH6H0
z+u1)R7NZHIUvO|-$*qn5Q6ko5UJp|80gc^zQ?O}B(s$o|*EILb&l}6vR7x5rhd9d;
zaRDB`cke!lTVeBxRIJ7EF@~&T4J%FwWSVyP3XS98BsHy>g6X>Se-YVFm@S4D<E=IY
zZ`<K}{SjrDv<2yKV3@z24YbcvY`pREOE1$=ylk@nM<0GvKY!l*hM}8no)SUn7=i~n
z)8Y`k$==%jh4}>u{b1XTHtw64lamuED=mu_7Z*2UjkKnU@^WT{$1pZOLjSJtO&a|E
zEcFjnwIeApDKccp;H3W8YzB{p02@}Y95gpHG@|a2IojD@p=K#D=_vmvo^V1IM}5&K
z^$qpG-|oI^EiT*ne^~z*KmUtlt?lpir|XkxTmLuXM}nq?#^8k)UZ}b4w!c<?y?9CU
z{rBBhxYgEMClZ)d6i#9Jm+*1^NBNkMrgj2fJa{Ml`)#yw;#Q-#PHApw3O@bpv&Qef
z`PQ%D;w3c^98>cl-B5HLg$0F?VZ*mb?$c+Z#P3-@V>DVxF+LhIrPrL4@*StKDwQx+
zF(QSajM5*XS^o+Iktz+MR7i+V&Lqmp%1IblG$65O@7{^s3JMd-%1fj3=Pzvh?z?ZB
zFm0+8KFFoNw?A*mq^Yq1cK%1rt+(D<&5@*-?$T|mt+q~KzNo(J0$(<kXq1Q^tusTs
z6%b;G2y2bMKK>6b@(<%kMnuq^pbW)@#PDH4Go5O9!^g-#?TS7S&*de^^DpOp(YU5!
zjp&R)D5=LlFaVtXeR}s!+G_OZl;qTu;FCEYH++MI-hZh6l1tLVKjZY@Y_rXhi;9Yp
z3i9(JE3wY#!i8ToArCqFEW}4LD&h~BIzPWKVc4)OlG#r9e))=KtX<huTwFqbHd4uM
z`Xj7E`xl@-WSznKFgH6pQd(9X)`#V&554|O-xfb!|AM@NgaJkUllo#&bk(b6Wi5CX
zM;9+%+*n>-_Ji6#UdeUoACFHte|G-^(}Mhb+9zpa*f=XY8)dA#1!cV%8~ikJjmS{e
zUkJag{d@N6nXnZ`J!fZSMLwGIapTutFS60!W?`T6Ce}LgpY6=e@$B4q<BbzmtbqS~
z@kL{CNlAP*cj$j~B-B!T1qsz>du8<Ktx{_1>Z9ECcLn^>WbfMlK*PFEWsda?)CkMp
zW}9xBTr_Y%QXWR_uU@sf`Kv`=HKAQ6|L&^%7Zw&qw%B3|yl3=HLMK4emtTI)a-q%u
zlLo(W<<BeOBn|PYd}exj!jMgdCJi1m2m?zZ!BT7hwiwf9OG`>H{KTikxr6-A&dN!|
zPRI$pdi6*wC@4%UD=%waxL{$^x2S(w`1y&+<9Nj5)5gvcGB)q&-~8h>J83lQk&ima
z6>4Ps{4c3-ty^P(OUM%0e3<1s+6j0^nb%lSQj8ZkQ6h~$6yWa}?T;vSvrZhj<*1ab
ztjx&ApM28r^`b@1Du1BxbPy1a-uC!375*DPPmFYq(&HH?P&!bfw;L<!acKeiqszbd
zKbVrT3lCF71J?Hg2J}z*=9}-D=V7E^`5HVgegS;PQ~IkRfPk<8vkv_!Y=`+zN%4o3
zY@*LU|4i+zx8AmP@sh=j58VGi;iyqtr4r2NS3JJg-@<UW4t$?>UG|4Qa9PUJ9DVM&
z=WB1h{nlzc8=CIJ?2XY|jmEkm%s>hq<~J@|<8R!5<D@jMYYaN-{rKZgtmRsKOccY9
z2D4_(s@!9bJ&}beAWH}iJM7T(%PzaT35mLV{~tJ@DDkhi-dYH55w3xG(#a>6k+1lh
zd%8<A-MY%ZrFC9Sz1D%hA^hJfu%XX*nPYC6F>zr=WsM&*u%e5xw%#TTbl#bho6NM4
z?%mQ7rcN1A;L_@Gcl`}>E0%my-I$llj3y&YS_N@wDW(AHhz5DNsR{dy+bCnJ(FJM!
z`)Ao4U&N`<kcNdGp4p7|q<_8m{o02gS%QHK4gPTou1;1^rl14v{`+?BorHcx?-k!I
zt!_O3f=^4&IDKgT=9}iHreNkQ)nYt<mo8h|c+o|ll$MrjkV@pzi$@i1v3XvK$8T<G
z38qY&Q+(2iL-UFTWGAzbs3w5^->;}?y!^_~DwZv);X|JGGie}lT3TYleRuEN3;ikz
zHZ;@U<D=s;dc;w$uOx;gHnBsUKzQjzqq=RrMLrt*#=8mKlIKnPNb(FEkfqU-d_L3J
zAy3m4SAJf;3_3YUh|QGviw3mMX_Gh4+i{0(v;tUC5)^t&AO7b{-(&aWrj|nw>aR^x
zy#80s`n>$@cZ%Iq9kZI_DHG@BC9`AJ^^Jld{$aFcQ+YW*-s%YPTc!3<uAU<i4)Mgb
z&iHNTf2NMa7R~REJR)-%h6OVOFVu|_Pn=kO)m5`{w;Z`;N^&yxm~m{eNkeeY-FH`A
zHS6kXUfY309pE2%)KQrePdqWJd-raM<V#nl{b^_HkkmZ=g6ZY&zWpw3%xH%ZMEBos
zzw{Yb&dg_^1?wWbzW%x!3YgPWOSO%q4=%po!tzHRd$ex&h~dePJp4#^rslEp&O5Ix
zEiLs-5JD*3@<+J1(3w-KKKS5+UWrMzQ{#jQ6HDKI`z`yThD5nJ*$J0jet9l<ro%3+
z@S_;2`}VtU*H4*p-WuSsBhz&1#Qt;U%;|~RTaG>Hq)BCUXjD#_G9`P{p+iw_yoh%3
z?z`{S{rS&R)~sH=DqKuV6|<|Id2$si62^2o`|Pu`Cvd7F;>q*<ciyc(e*6h#ZS}wS
z(o6EjjvcFAB2frbEy1>YK1b%wo7;Hw(MOk<M6`KaYNCPp5x+k&WBSyoxx|qFOq^IY
z>#AA#BS(!)#-RctonV!_?z*S?nrmiN;pH7t#bgyL$9l||ZBwqeVn%MSUcKW!o<xH3
z^3s->Gp=0o>)m%x-+AX9Q|JPi8d-hab=Osea<%2ziTx#bTUv+jl$3lDUcwQ9?d$gX
zpMBQZ*%MEgkR=^K@ZP(y^YP<hXB=RVmX_)oZu}7F>oPeZ+3`Z>@`^PrT>P0$%9K<L
zJagejLNc>|e>}ubJ@u3<toxRckf7qF=_MW?Yx@PCefD|7_19lt_3nG`*1KfnhohAS
zt?&^^ojr;4*S&>@_#!e&L`Q>5F1|E(pRr@pG}<g=Z+zy>o!0>WF<XdPND%VJh2-E%
z_2n#IyP$j}v7a-fRio;icT~PARG#DTA%awQLE`0kf`#h89zA;|jvKd6hOg(JfBw0(
z#csoskQU1P?asdyZnwjB*zqw4KK$UrhGULBrc_GG2JQX-=9_OW*!5StYI?;NbH8jj
z?6AW~&*YKC=s>ya?!Q$%_`rj;%a<?b^9`~=AUy!FdIyMj#N#W#)Ml)7;Zw#g?Yzq_
zyQW@r(FM7^diKJu+e$B9WfkQu7hiJmnt%S|pMHZb!2v*g#9Noq;OJwHPM>(f#2nPm
zCWc`ucG>df&C{o&ety^LX9oeOXt4i&`=?(qb4EVR8rHvv@ei--uD`B;3WbN`d;SF%
zR6PFJW17xt5(iOiu#|AjF~?*uzcF1s1#1|ZbS@2rudlC*e)!Rc_2*5Qx~8~zby)w!
zFrvZY#Y>v*zVoiC2Og50UAu@?A{gP9^&?*7$rVS)oKh+b7cS0mHIgtMbiBr2`}}vo
z>-0Y&$YN|~gs|a7hxkVvaU`D0Q*(hG)~i>~nw2*kQ~Oh}E>O(=(cqrD?yj13&8%uv
ztKt>v<ousJ#%zmvb;gW5)T=Nwq@Y$fO3`_RkppYE8}v>)?wC#v_uhM7)%Dk1$Bu9w
z?ew2B=c8U}sdD=OFA=46HMP+x=lwZ%C^|GmZRup$ciw)d{?F%4sj%`!@dV7D$T3GB
zopHj%3EA8wnZb&6B+Hk<56_=o0Y7x3*gCfVfc`~^lTSG%Yp-#r58*>?@mrdjgHONs
zyy1rHP#?bg9-ikhe2VE{g8>5uBuqZ_)a<>+jzzu7dODO<*DdH!$4-b1*Is{J73+AW
zRqFMqe~gyDAy4Vg5RY${AxZSoOD@gZ8*6)##;3D9j|Ow+&TTmM7}iZly$<{$bX=W+
z&0)swt#v|G9^&)Asihfueco{0_19NIFYN$Mo(`1YycSR^=^10e>-K-q@+X4P>f5Hw
zm~nY-Z$00QIn7d5THXx*uEhIn`}gEd@Q*s`=*)>|<Mim(O&?BT<_!YYW9P@UGfjk;
z2B)5KYW8WTotjPM*ujI{*Q?H-Ha)L<PxD1@bJjc4r(aO<`s=UN$5I=&w)%hc5y}NV
za58q%Nhg)n*VVQB`Ohd97>&d7=AS>bKg-2=Q>K)!TD_Vg@USydAAQu(>1cnVT%i4|
z!;qQ({8)JY`P0hZ^S-=}{2#mb*z_~cIxBl4bQaRD)ogU-AJ@^h(8j$N8&bXT#v65U
zP|<YM&&M8nbOxU{!-ow|MY|a2eE(uO<X<GHt*?)M^x=o~Q>UC)vARTi9Z7epN?!XN
zuwUxTD`pnZL0ajL^n7MqkLQJyHuaQ<v=^W~|Jb9CnmlF~kj2VB?2|EZ!i4N@s5hA2
zKYz$T^~QA78}wy*GP%3M0f8B3T3m6(<+;7^;lqGUXm)_({bvo*#UHKkV{r=pLH_Tu
zncO88E_A;1(#vwj?!8xrY{eoVxk(lTYDXP&bZJa_1>+}%f5eeTWN>;XgTBHC7QDxm
z&boS5-pCOnQ<75f+D#xlf7tZC8|{*-uf7J)3%xfB-<aXoKnNTkE}*XPnZT#H<IXz^
zx8Htybi%oI)G^2K9l}M6GUSho$j!IhlK-n+cU8gRl;y(@JDeL?2!F{pOPWwNs~>vk
zp|vYerb$muQLUSZ>}7y|9rbbU49ZUP-}CqU$dY`;ovAzz3&*`V65AVSCssZ3&_gv#
zA&*ZYq4)zzm{qr(;SVSpfH_%A338m@d`s_{7GOLW8(F=2b<5|Uf7Y<|*4Tv{jCcR_
zZ_?1wS0(904Km2;U>PFZ+`PO*Zs@@~*vTRJXx)lGLvW!qc8OnO7RI}9+{en_y6{7u
zzkvNISPY*x8}?9V9jqjScxYdr;@-@Mi{g@6j?f813i8tQ_BVJ)b_zS{EG-EVg3UM2
zOJ4GAbyHS$vS`?i%eThT(gx-pifs^VIy5`^;DfDmiD|_e5qw%2D5_)xCZW$}?B0Dd
zcip*r`Wa_^P+W>pfglGDmm9c<ppPS2`+gWcUv9IqlM<&*9Z@iNP*zGz3#;%sqITnr
zGLo}$k`vI;2Y!)gYAQ@Yt`0vjF(LTlIl~LOVIUv5N<s-41ikxYBwv2X=)x0Eert6-
zM#QN-&MFQ^5*{p+S;EVek<#gpKs|6$k`p3{;EGKXjjs_ixek(39_mkA@(0`CkAE0e
z(5-t~*tleAqb_~=WF%d7$*96fC%?U_j;~9MkbxpWMn*zp`qYv6n-0xGp`&Fi4M~zx
z5+nPJ-3UW*rJXXy>z|rN*N9n;H|~%X&OUQk-tb`<f(d;8J~DqnMg5eiAG1>?#OJlt
za0XFgFv3|xy6QlG#)Hfo$Yb-Y@XU-%I)G$mgZs|g?#v%FWDxw&d4@~Lhs1H?kIzoV
zBBGaFda2EMGbSNEzp(LTeV1K#!S13E-GeLt@a+%hzJ2>7-hS)t-EO(%mP))RuXQML
znKbUMOR3x;=s3w^`A^}&-;5TdA#<2y)%UBc%6H+Tw%ju1#g|@UgCUNKWA60#_``<}
z$IB)+&o%*8tr9QUfB3KwN!MQcmxA7X@RB55h#td_z)`uL!jpf0GWo2t&o2MyqYpK_
zPwv`*{ZrA&XKW(DZ+^2!>V8<DSRFzPboi8#LT`sn9Pp*OnjL*68EOFN=keVYC>d)O
z#{)m-$Rm!(^7iLwpYx`kSK)|o(xC(#3Bg^B!4fVTnh6(?ps=uj<^hDlon+$5AIX=Q
znMQ$d7Y(|1>z;V~?RORo*<>(Y_}b(@QXD`2_^h<F<N%GDN+kdbZ+~7KaKM4-7hQBw
zt~v-Ee=kx#<h=CqOY@Qv`7ML!(I7uJ*Xl({64M`%IshqQabp6yaCcIIc>MVKM@hVr
zJmavFSn?;BI(2H!k?1I=lQ8zXZ@z1qGG%ILXW}niw!DcW?^t8NzXNn=MDaDyvorlc
z*stG4$>IaM;p;RyhQyOWq5aumg>~f$3kve}Mr&q=CvbWqrGv59`L`uTQvPO--=y-z
zjiHGAar!G0WB6nQRs!-&3kvcgR{nel&J+xKKv2G@#6^gK|4}&A+XAC`(CE+a)yvi_
z@dOeYKP;CjUr+wM``Kszq5Q)SKjicUuM|BEcM8D|&vwxM3>bg>@mX9nSxp{Hp}qa~
zJ2aXPRAzsq;l-C2(T4J-`h7IMg7@svBVkoBc0lgH|1-0*B0KD`JsPKGe~wmmwh{Qs
z@4s)Jb>&snP9QHJo-+`afe67!fmZnK{0~ON!L&Mx1{EcvGYwzc_}z*!lZoNyW5mui
zv#!a%uHW@*ZoBPPb<%kKky!Zo1qBH+uDC33=bd-af^lT62wG6ASU>koyz|aG3U9pe
z=IUE+xw#4iq5q|4U>c250JaT2L!6ytRk@B+J_DmkAOr4V2kO#<)6X~~SNP%u0vRPn
z#s#Z)+;PXWzyJO3Dd(K?hw}H{dk-Bf%2NJFl9emJZ@zNYtSSRnoIo_t+2IodM~rdo
zex3G@*WVbl#wP@<=h(;a34uEcFvaxzV?E#wvg;H-Gc%J}B9rok_Rc$RFBpVHz`cz_
z`-A4V@#C|TQc@D|>|GPDrpG_<zymW_uO=n)gE8=7XL%KV3Ne}vol5!aJTzBBy_%PY
z{1Q4<^Tg1T2ith;<fG5v`L+A6)AqwI$Mi`rn{y^9&lf(7K21VLU-;#c&z#F=T#>g6
z{LoOyi-y#XP&m2|epqnhO*d8Fa`RuYWJ~+@PcPMn_jW75nnu#wl#*4ID-f8Sf1^fP
zeTa^}PzHd6_V3ZNd%^<`+~1ue3oTe8m<1#t_@G|J$Ey^qx9ICti>F}z%4N5urlrCF
z$Hm9!9O9cTL2LTU%q-8D85!Y6BFQB#d@dKVEp7hM1%9s{J+Y8GpBIIwhuQu@qBi-T
zl#mo`iFVQ+zu7$<ok!R)+hw!qMAdx0hWQUj`n6GXf!|jDLk>A4{elao=Orbf-^=Nu
z6F3(Z<|kfq=_UDbAH#qkf!pEp`FA-wX?ERZmo$nS+CMJ;(Xo|yC)$}expt;8lil@$
zonMuX_-rR$J?pB%loWhm^Xem<aov0LNWAf;8w;<v{PGHPHegLxs@}2wX=(UgDw)}?
z+dcJw{jeJ+>M$!8*8cVO-+qVfQ#abUUou9E;u#GMU}yMW1UPy4_@P}mkuWS$6q=}b
zfls{Sjyt>Ebn{J>f4%vZwG<}QKXf;)>y?{u@kJNq?Xl;c=q#ot9ppbyciM5MRPr1*
zZft$L|8f1WGfqDv$LACEYTN!!$45+VAoj$QPj*NBT=Cv}@1uOtGwjGnRlN_XJU*SN
zb^XH_=3#vKx95e$AVHY_e12Vi1?vsk$I?*y`1TK<U$@_JN8v3u-&~15*#{6}=EMpP
zKKS5_3op7bmu<<m_$+sqU3N(xUxq{bb1Xd$)2#FScfR3am>VKSKr4JlKz7V_S~kef
z&rM9{yO^Qi>|$_*5vy!Rb%~#$_c(*;-lKa0pBLN=OftvY9}*pZ{P=8qOxAmx$EP6i
z`R_!gYlZe-U;VMpTm$QUDnEMk*2z6k5AprQ>FrO_KO3X3cOWe_hn#c2oTqmukN^G3
z?^|Zgx|+{-gEy1PrI^O@pBFs5xx+gjV1}_^|110-s{hKBE1NLVj!THaFa}5?ne7b5
zPu&H0hxi-!-IxQ6AUo0V-nw#Sb7%HnxeC*H-O;TFJO0IzKT3;p`|>ZtI7(4@QqM`}
zAEp0#;X9bl^moxe3BQ#l8}Np`Nwm4;wB<oqWPJ%md{Def9b(8GcmXm5Bf40NL<jWC
zR*w*A$c5~N49?*f(%Niv^wF6T5JnVq(&<HzfYOnuyrkoJ*8;sF%`XsdE}fZ~lJNWA
z56r&trg?lJ1r0gkOaLLr@EKl^o0fpi$P^NJeARoHpss`@GQI6AJjTTEyA`IYqOuSP
z8|t5(os_WGUK^#)p8XvcMkg~8;6k><^9i?<3_l&=tAL4!NjtK?m(uhnvu+rW=j~6$
zO?9T{blzmjlQDbtQpkft$)nLj4jz!b+0finS&KOqufJ3>k=xoo&Pvk4abyZ{CVf1<
zG_~gnNIaELtzKg?mxzeQ#@VVv{XGw}qPq+6kzUN1G!G5@ygYQCAa=q01&zy=Eo~|q
zFd%8*Aa?u#7L<n^ba3X4H{4LY2GcOx;$L;umHBMI(5B>9hY=Ycef(kl>XpSU?BLsa
z>#b9{h$%;JoQ4euFtV-DeX(bf$RbQ>cmr$1AvLgIIsD&cr=7J%0r8h$TH>;0D>!sn
z5LANtFIYIABW8ltcqzw-!6tppK;q%}n)Tw#=;$LuX1ra9J?<6i{U6gzp(BH$L3u@m
zra&qY_{^L+Bd<56l~I4HR<Wj{dG6eKO&r6G9Uqgr>B}po;p2SOtSj^O++)w;rY7sp
zC#oT}!Vl38J@im?6ycW2Vx;8v=pd-7u5Q_=Pv4|WOebKwh_U#I<-bB&If+aGg2=^}
zT#|Fh!G~nZc<?Pu&1pRTxbbDhn9@KVOd5B_*Zj{K@-Wp3&`2E(24d<}9vV9)b7->G
z`0@THuF?SOjlzEl@RA5|7c5vv|7kA5l)OO$2dNW_Ob>=^*I$3b+RDmG*V`rC0yYLN
zx)_~&?A>=#e)HY8jq|>o*TiW)9LbW5olE7d=#}RNq%E!i29>10JA3^?73`vw{k<I!
zW%&5@%7$_5m682<LOddH#fwPv!V53X!%%wdAjeQlnT4H?FT>Py>O~%cef8Cs>vlq8
znCuJl^Ab-v>6GjnZn_~{Yn1rM9(!Cy-@Y58jx;;I`r50p7g7ef{J-eJ3vw|93!m0a
ze{@DSzxCFeb(K|>uwVCtq5%VwHrsqNb+R%)l{BUeu8bKNhM`^RFX$M)B?6DQ{Kx3Q
zMt(sg71<9QSd@q<O6m|_AACp|oq6Sz7{Tc~`K<iSpSPe1{g=@p*m128BR0ssJI*s_
z%*@|w+}PEe5)1zJzl;3O$;pmj5o6>No*y88@#R<QmMmEkHag?=fBNa!wI`f#d=~A?
zdTQLh`=s6Vx4X1q2jH3i-~dSIzxQ5a(^FE|C&>F~@XWKbN$2g#Gh-0vFL;I2e%nk&
zT8PLx^gpJzSYFXoK`J|IAPE}8nA-YXW510zO5PkDr6fcHGdT0CGjiX0>y1V%wV=+>
zc>GzYpV_GPEIDEhqfqKmZ#MVo-8X5QZBRc$Cg>iSJb7~V#~;tBw~>7+BauZ|q5$i6
zVxu0QfeB85UP|R@sB174Z29tKHX7a+NyKqo8HyjLjQJ+*fe8L#8d%fPrAwQ>|9(Yt
z8rH!XIecVlzyAFaS^n_BA>pQ*ZYtPqw_mNQszTpsoc~#B4;HgO?JPYVQd@inO9@1V
zUoRikQW(x&WZt*Re^8LK{qMs6WF&Dj|Fg<17TOiQl0koVyz!6uKcCO#70a9Y_v@cL
zc<^9rGeVL>4?Q^J#v5;_cJ(TCkP<z6^+>qr!i)0o@dTjc7zvhq^G);o1q<r&VJ~Ua
zmLoBM79B64=`2r}UWbH`jpFrJ{mb}64?QeX+JHCb;Niujsj9Lv=!@y#dVY0a|Ep$Q
zm9G&WOamVE4Gk?ALEE^xcvW*>bTD9NY&kg>XPSH}{BX|4@<YoQq;UCv!G#y)pcBg$
zOaiBsSmWsJx8JU<#@d_Ry7x#d!n16%&4+3<75s?#>+{y1DFN#8i*jO}e9>Ul>f)w1
z-*~g3y1J?vAFq-I4jz=q(e|`Ip3y9S6#NI~zwl`?%LF?MUx97>@AJ<;*K-+waGZqb
zfB^%N3(z)WPN019myGOxC;oTAg%{=)paV^EgMRg@mCbLy`DQ)WChgg?XJkN8Q8K5M
zf{9?9NTF>gm!w53uHy6m2kX!F(*@^G&*x}uGULx8OxH!7(!fsLVOtDKwN5@n5J@NX
zCzF^-Li|}*U!6N<+wIWFM@B(VS63T+Gzaa>RmIJHH|m?X4cnOk9+PZmPCnJQGh2=3
zw4_wSR8%J)?zoxMcgvPF7WFSm-gMKU_&S6^2jFww)Tw!#;qmRa-!(&$&h%%tNZi8?
zIUMBz-1!F{oSIivT@~$%T{cxNBmi48rUiZ@YCrQslgoiRmW%g4Xe=%*X~LBIWayQG
zGNI1v(@s4-=i@n_HoW`p+tiCG2<%b@5snDm{WrVggN}1l;C=Pgf+kMoqg0rRn~3@Y
zO)A(4{^X<}6VF4oq3q=G4VI8uw)DHE6)RRYXJn*DMxbrouU|jaKZV^25^uWs#)92;
z{q-v7s1#)M)uKh#o`(o*Gck;vbf!8smBF-eJTEZE%KB{>&)k^*)dJ1-akmU(k_ew)
z+ikZ4>|^a8jF^mmH0PuGRjXIo`^D&OxL|9Lh-dd{r%twfw^<Ej1-+sH{4n8y3ogJ1
zV~TG1kIgO`7cN-9_l86)A&|o7AC;G!&<3Il-wcDx&hy{fj%Q2nLma*f4nuwZbF?tp
zQEZ~{IUc3|u{}-uQ(dGB{l8;;nw^OQdymV-=5DxO_|<}jrQa=UDZ)&UL4yWr00)_&
zvorGsyvJ3pS;K_1Fj6ummjAr5pdY6H?AcG&jYnsqI)*W%VV`m1((lqzDdNwcQ2)L6
z-YYGcA1<BiKK=Al;YL+m<HIP<?NuimvFFQkTW!34t?<45f3p5^Z?Gl`pAoo{w!G3s
zXx}K_i@jYHm6)8|VfmvDDVp744EX+o_H06B70Q?^*2buH`IoyQNS`B23bOiT^(R7H
z{i8enbfABH=#REPdH)-ZBrfnBcQ9v6MHL`gTbUJEiM8^0ZKW1dZ?Tph2qOb9ja2Co
z!Gxq4G$<Q$zS;T2<)-<(&@&%9?$*JRoNw@D*H~*<?xIC&>Q{VU-&|5!+nk%5k}z~=
z4!)?8H%v<2pxteko*555w73#${V}DhK*)uX#PAhKwJb*Xl%gK{MW$o&D&t*Y)1`Rv
z%4xt8Zz+2nrnTZalAgw4dNKV;J!b2|G<5V~6ap!2d{7gnL#`^WYf4GBsg%$*l3&2K
z0AISz4hF?Eg5g;=?q1AdVKMzlUSHqLr8yu^BHt$|5z~W1Bp9<zH_BrjeF!4WUVHS-
z^!AU(FD_|l&dEwlz{o*k&`y7vH<tfS$M8hRw)kcOF=BLhAcQ3v<ybaS?TcFkxl7|p
zdM2hkPO+}=*>o^MCTVPH#B{t%DzI2RD_j6YBAD8nbHwkDfc~&WdRl~2Js)}aVSX*c
zVfdW-v;FpX2&=~^A(%UVZsWP<o?E_n@nZP9;cthR%xkW`CO_YGCQd!?yxap0Jg^wU
ziz#q)4%Q5sH0h*rr;y~w^wD%`N3Xo*+UqJ`e(^<fTF}SiOB9e{3-X4IF@k`V+=!7Q
zk}PAp(q9S$7}2MPAgzYZFElia`@Z|_n>GNAY~oY@xo8NUIB8NT)<L5`2bo#f34gui
z=KQTkZ><+-j50_%{P4rmAAImZ*{>sfDn=ZiYqbBr{_p>4F1+x<%JT9u<}nLM<bVSY
zNIP-jiP?C0lQ8)4`H!~0>Ux$1vWv2jd<DLC?zi8*7#3-jJQjv;z$m)%H5JyWW~d?;
zK2^k84r{TlmHYA;2~Ixwr0mmApNuIjEN6s^9dY=f)3sov1FdUb%(b!_qZeO%@fz<x
z5G8W{^b4|o|GVF2@$tv6-gxk*J@m-KYl)9T3QU|hF*7-d?{`)bAARi6nhP$xpn{eF
zO?2$oap^PA;hKVuK-PSE*HMmyqKFrNaFDYps`Ts5f9mFvm_c!?a>nY_$KaCdd0u|S
zjJyN(-#3FcVvca9%?aZtl$Ni-T2OZIEc}Naez^AFgAU2qeDlpxsQ<~Qo{~Lkt1VOB
z!IW%_?2B+JlSU>uk<kg&boX6%qb~HU97mi+j@k+heaaIJ-hTVdx|2>isT@m%AjW%A
z5W&ky5_j$WaxQoBq!N_l$LSwKwksfc{|k-IHB-1Qnxl=Ja>~h>lTSMxBLM*H8pK`U
z@3YUo=>t)|WJ`#O-6b1OI%!fV){T;4Sy@>L82zjA#q!q&qiPR5<d6(ZooH46czkze
zTG{`oqmRzc(C8@mGeR($&tz4ss9k;s(XYN*)VN^bS52D^-6V<faN3h~^cmN9{rA~t
ztX`sM5lks*n)A`e{1Q#BJVN}o_V*DXCDJ%i5Tz@3Pf8rRV~o{5YzSQQm%miraocSi
zEhvH$Pn?)})|qGJ=pOa&q!UldJpGK*ZDgs-e~i3J-3}jNSfo)q1oP(4YdGheb1PUs
zdwka4S6_3r>SyXd6;nqKJmA0*Hv$ze(;qh=Z<H}eBd5a$k3MQx;wg6Rwbxd@_~MIx
z%9UeFrRaY;c#R7@f9q<aYw(is5=LA<aNqrF=Pj5Ie^nec#vqMI<h0W!XR$sa5J#RL
zcKC18@4EBOn)P}9(NT>bez_S(m?wts#1N4S0gbL&+n*Hf06{zdCwBysKMykC!Fyv%
z`=cE2hW@AQAce*1%3Zd?Hx?js^-oh{Q*hBG7gzip&t)>_tLW6}({q3SyCX7b|Maws
z2&Si}J^b)P;b>KmMNc?kLJnS}0B8RH#A8paz2JiL@jyW$2!m&N+LbeB<|Xn23x$#}
z6xXXn5$!;T^k-7mztROE#Q(qld#UF93(l{qz(+Dtv)zD^glSkl0?)51hLK@p_uYS!
z#?EHqAXzXM%R~I>+&`A%W!sNpj-V3|Bdlf>;DeJIC)1`*Lp$LB`l0ZB{<9vXz{G#^
zt+!o$=mx$!O@^Yg=D1^z&%nBW@gqfCEF}%N7O|#AF_0Z$Cu2>c_)*uOiEfGxv7?VY
zHghiP)t|NfB?qE$@L$H4|NZsWzplj}>na68rtH(u`Ofl>DR-dZQ-DY3{x=G1+%h@y
z>8&^4sGD^1N#!kCk&T&#U_?MKJTH!+Ua*gz6T)X?+k-L!9_Iex?N3a#%uIBnMhSiI
z{r6R0arqS(sY3~a;IP9FPn$md{Cuq6t$X5QS9(T;2l0Qi`|fGmjTwWX#n%2o{nPkI
zYiIIfFX^K@?65-$rY)jh6dx>cOr1I{=fDH@FK*U!Kaq%#aXd%_yy(oCS5@9~&s{a3
zpl$iFBMZ+n)jvsS=Zv2)G4sOd)A5D7GyR!TZwW9I?H39D^{;=`U3B5aXfE3Nj&x|q
zl78YzlQLbqPWHx<Bq?e?^SOzXEElo%voa%s_H)W#P(O1QPL{uE)28I^kNO$Qbr6gP
zlLi<CouW=YrzMsJX`Y4|9WTG~N|?upiVoX+i{y(gzBrE~N0E#w^CWp{Yiq*#8M6r1
zqAf}LTK?k#?Vu?A@uW#7XS4iere~pkK0M=Zf4kFv#Ei_DGe_-t@C9#)7(ssZX8se(
zJum!}=y-e*OBbAV@cm*8o==hxcncTIYxu*tcz%7&k9JlR`0?PHtFOj45p;3^lJ711
zAFw~{!+5d`BB&3uuqKhXGnCVoXU>?x1~&djxDHw-Is$Xqo>l_Yzf@ZUKidC2zNsZB
z7i8t1WgTsC*v@<lOCn_RW1C*iB+0t)`HX{@&i@*l8>5$8a!JKwk3ELxF`hrL2cH*5
z@Oc4MGw>ca4)1XfKm0KLoyvQmescM@cGUdFp+m8h1CFt1@1vv7)nyLNo%V(duKWed
zm#=8TJ7A+lL7X-RWkj6nANW5CiiN11DfvU6VPellNi3RS7VJ-?b0J8hs~@F*g4!5J
zPy1VYgVL*x1z!rvdk|pyJ=QEIh<Pn$MfUEKG=J{g@cAbxj6T3e5cLbO!e;vyAM~+5
zLM83slE-tB0)#Q!;Ffh&TYSl4Ad<;l{v`d$2nSj5pt8nR)mdx(e-3=1{2PAQ>~Z#z
zpLm6JhPioG{OVQg=wk-p7JsR!iP+pBDYEg#85)V9>|>6Crcdw8<n;8!NLCg`{V^Mu
z1Zhf3>R7XjXH|7W3rG0<{i$!OPdeq@Rew6~<Fe~+_;Sqy4=%30`Ih;WXPo(d@weYr
zhhIoo$obU+(^Og8DI1t80;KEk&*9U#bPuwx7FIS)oj#}J_eZ_{{qK)_edTcz-(L0j
z6W>;&!z|j^AfKZ=d<25paU@e*qC>IejI-Y_K4$!zE1#PEEed>0e=3z<p!ux?qa6Ch
z@)j*8o&0X`_z7>W9zXHTRVSSI7M8Q9!>W9eN_G&cew0l3;LS7tcu-whIy@LqR@T^j
z`dJ^89CzHCE1!INX|+AtfK6WbE6CUSX}A%uV7FiQO3y?ddHa(e_Us6*zj1!WiId)1
zHDS`*E5l7mP&2pHADCVyTu4WfAdL2BETd!ijzNeY3h$_R&q$o`7aG7Z5i?%%(79`T
zQW-fP*t4ISy%wD`?Bo<ao0HdEb4_J+HO*ww^Q(JX{6Cy?b{+xwW>Sjv)Fz!csmwb0
zD1_<%?mO?)&z!;OMX0n8G-%L}q%qr#(P&Yo6eKRdn}@@<8>&gyLZG4<i5RBQy<G><
zkFeefnutoY`DUA`Vc_vG^)X@eR-;m|XlimVtr0`}8$&L7?74sR(Z?K7MTp38#~qs`
zW`Mycy(k{QrCi+G<FCaROmw)Et*!Cz-3h_5$GS8oBOu!5zv-`F;6I2?i!;tReT{1j
zN<r8?`qY!N>&A^6SB$mq*vK+5AQu(Kny`|PFMOEV82sfg*A(oBsUoyL_5bwKPaCiX
zRv8v*ho`p12TACEVng1}61a!?h+!p-QLzJh%idmp-jbE~`KM;ju5q1wOvH%bnyY73
zSFeTtKny;v`u5$3LIT3<&yJXb4mwCLtfXJK;Hw5Sw$RDv921OQc;WdvG+NZT6Y4K9
zTjxK5Omq{O*A&8s;lha@hp!OhrBv=7Cs2ox*o-KNcD^?E08F*^_W$(LPa2TlC9ac?
zX*`yoxeMsA#~xGme=ojR>-A@Y{>-z^&OPT3=jLFVJ35RcX7J`4uh$-N#1SQRZruRK
zOEUHB-Xnq2aVQR{Uw-A)dTs^-`#T90%uNiMrkpor%~MZ4$&O|*{t5b<U|{4AfC&#j
zjKg1Rd_Dkt`9s_~@sGo_TCaa|Q)3G{cFNr1@Pvr4-ck9&&Sbv+8Gqby90l7UKGT?7
z>{L#R9ElGU44}{-y#GP{=bwGrx&suEjKiTTtlwAT{eRf7;VJyeZ_)M(+Gw}JZV98e
z-Ud5rF)YeWAiS*+62nI%q45**KQ&Mh!uk)NtK^08_@sCDj+eg!DOkVq>Z`T4-*y|z
z0eMsA=xylqd;N{qY!oQU|8BeQmX0;BD0hf|&bjC0djErcn<t()2_IpW*yw12f|lzb
z&bZ==HD3Qg0|zH>yDis;i5<X|Kymm8V5!1C#dNJdDRD&6sBb|zSUGL_v^D7Db1&(N
z69tx*iE_ljB8&<VI+$~F9#9yAIQ^Y;)D>}t4=2Qxqjq1|8Sn8y33{u4#8CX~%H886
zUXHz;5U6NIA_RY}{okcw91lCAP%x3VKQ67(>>6LmJ@?s9J+<};JeNH_M;POySrvBd
z<E0p4+8Q1TG5cp`W+WVfj|>!o_*g){5u>Ws@Y#X@1V^GT{NshXM;?7tA2t2+51vVK
z{B^9q__^l~$sT;@;c9d&udz-(!zaX(Pd-_<&$xYx7k#ym9eql6?zw-+;U)dQ9Daxo
zdu8b4bMb@?f_KnPm@#uEI;x=;f(BwF%C_5VtB>Be6;XGL0ME(hu8XG1E3dqQ`cTbc
z;_#101Tzzw&YSY*$|s+EiXG7H^1nyV9tk;a2?*-{>Z`Bv0}L_n7t@~|9aE=FsQ@3@
zijm|GGRb4tVVV#h;nc#>w#OF-5*aUDIEJn8jk9^Ly%=|m-vi4Ia9v@g1J_qxeWf1H
zqIUYvN7<Wl-g#@7S5g_Y9pXze#VMM?A!xnyM@Le^fd?Ik=es@su|z_Hb@Ii^-=kQQ
z?djQ1>EoZTe>f_y?QzZ@&&?(<pTB%gpq*KYcBZR8%t{#5**N2h8I`{LV*`rhZO3e@
z;n!wCG;#PM!EBKh)***ZJ}r6R^}peU8>`=Y|9$HqMmA#&=?rXSB9S`LAN;KSMWTlu
zdSLCDXPjAHfsePimDogn@~Nk4@DZtm9U`(IBF{O8^)txu9}Av0n_jVz=j6xs^NblY
zE4=;#F;jwTZ!!*t@rTcz`^R%p#t;DWa+K|a2`7|WCtqv-`vRlB(K%Pb^#m<F#kBli
zv0_CN>gQGHEL#KL58oe6LUuMsBbb>{&6y0o{z3iBcS>1Qj7%m7Mnju?Z2$3+o`_)8
zLWaut7`}-SD}S(0j(`56{oOKw&#$jpZ^X(U>y0aB%*0L;*8U%adSeXg4Uf-u<{<|k
zsL}nz=QL4#Jhrdsk}n#djal;)-hn7EgUB6HI1weGt{E(XIDFh2wZ$0&<Kk#r+aF||
z>d$u_vN7!hNqz*-jUt5;(_aM6|4>iWS|^{l(6u6e!SkY~rdq9g>W@*^>Q#5#yR^S}
zuN$9YN!J&if1%cwzv07%u^pu$l+Ki@w9$@=VDz>|Xp;XwUwDD-C~s`fi$URmK#2?a
zLsl-5xIPW9dFTv6$%K1cD0%q&BZWfDmP+LAJuij%9|S6zkqBdIyZ0X@VE?!e6r=%B
zYy9uNU5ZgpOo~7J$IKC~#mWGZdwHU0e<p9f#pdcPB@F$)5H@o(JTr|Y(lwK+)Qg5!
ze3rMx7lb^obN@3jl$V4H4*&>{KnUy*-@=u|<Y=QmVt%sy#r@y#<DR`zobWUTZJ{%4
z%CnBu7}3W@kXZowBBoF8jKp5O(-ZlbR^@~zB!|xgLx<!hXL8qFCUAMW3LSmCLs0a~
zFDn`*ocLDpefNJ|SzFr}6cuGAZ8N$sWzRkOq>UT5aXQwHOD`*L1U;$sU&8g^8g&+6
zvJsHQo_VYP%nM#df{#Bgub+0&oYHyoDjK<#9*+vF@%P|^iz|;l_Vtx3zOP}R$R)QZ
zEHy))eSTRLM<F(0X~9PxTT-o|bfke<s8V*Ort8rt{HGW@@oDVD;90j!CmMZ;bC*2D
z0PPz0baJ~<B7~6Wndg?SEndxCh#}9TORBJJ6O0K;XaB4$econD;cwg*YbS~kQ{%w(
z2k#fxy!y)bYV=iCH=)yS9!H|#;1@j}q}3I3+a**e1C2x~8EHH|h+PS5qratdX)XVe
zng_!iprH6eHad5OuVHEY0SC6-@r8>zwZg~CM6httR}Ja`0$~sAR7L(wg0sFdaK}5|
zGXL+r``+r3QchuPk3akAXX?Jk6cW;L71hnR7-kijIZj9UPY8hlpL+6-M~IJWhEbNt
zhws0SFG5C=ot+aIG-wbyCC&bS{?nhbv1Uy-?#MU|>#HdVvc5<6?g_nmV{v<yVkG_W
z!w>XT3Gq=hru0RHV6VLVa$Vf!9w9#M^Ur_&6LvHGv9nzg*5M;F%G56Z0SOq>e{FS5
z%Z=DLK>_RXf726A4PnR?Jg^IJ1XH#OxI2@_XNSi4@#9O;yQXsK^@l7%rC_|)9fjfH
z?QhrkrF@}{Nl!YSU0REy$t=pw_ug|4{fD$<pmX)wnifnsLu1@D@7}YAY$_524d^!j
z>yxD0plEP^?D5BH4WzaIKlbP&Xb6~4)E`Z1^5;QvUgNAF;d=ZZq`v{1|AUL&1_9T2
zyYYtWX=g2%Oz02Zf8W`eA1gb@=kOPdUII6t^RfI_Dp&q6Wt`L63E8Ur@xBJbsD1gP
z<L$M_p6tYyvW)Kv|3~W&B^^c_|Ij2p4$!UfefdL$s(k1QA5(~u&@vK-m+-QVp?vh&
zR{E=a{R`!bZ-9X6yD`dFN@}P0AQJAO7-7Kmz`T*}yyFh`##0ym;lN!R|9|G`XE0()
z$rZo<{`;d`#p@SD#_c;UjUzl*WO#6@3QoLn=JE{Mmw%{=z*hNhOnmt>$zuAuuftT9
z`eVI1V)1CDKN|KL1xhxQZIhv!pguPIZasQL`t|FNGH1wl-+Rwm?6wGF0=kX<Pe1c?
zovjN)v7!MQn=GqBcW09jk+?9~-3dbbAWPgy{pa|Ie_MPZ0Z)KvD1G?_M;aLz7GvXc
zrvv<W`6Lqh0gxCH$^x-3?39%09S_{K(ci_y>~A_s9G7mr@F_B2C=4npops5a$FUyx
ztlJzl65M^?z3hZwx)8qxoqP+_NlF+#hgq-cTDbi%T?^}7dGO!~?Cyt%I3Boz{*OQU
zSPet{^AAB?>TkYiK3r3?w&jK!v~dS9$%Ufu2Y;qNC>4mQ!U^<4nw)-m&%Jk7bJtHM
zP(a-C@0q8cu7w|Jv?-&94Ik$HQ2N)^*75@uqi{rnJ@)vGE2j$M5B^%?8zp7bpGazJ
zuu@1|`)7|m_7ER|{K)#xu-6YCRHj5{<=<?HK_bw_)qk=-!o9JbKIG$rqP2Ck>dT@9
z7=g8bwXp}TTj{^P_)e#|v|ZyHz1hDXmhbTE*D>eOsi+rvNfxL7W1K}2A}~U2X^PL#
zDA$ngw{ibu?|=8+1OF*yJ!bKCCV3Ej`st@@R<6VbKDcGb7F!JS9mPW6k5=(#B=Y}>
zzdyk;pc;%ZibwwQ!#7EZnTkyf1`itSJJvd|zxg$pumk@38*k!>MHFP&fov#?@O8sG
zsLA$cf9#6t%iq1MpQTs(=kM&<v+GxKy)$w};$g$oekM<963NU=k8HxVJQ)B9Uw-MO
z8jPZ|&PpR{h0oD|-*N}wb@-npjh7uJK@I!G7oVdOkkH%(x1d%1192G9Mt=gC?9Tp{
zxC{L5n1+vK956e_vik0O?oqt~MJ%n^l-Cg~zfs4XjVTZHhka1rnEeL~7?6;P86_V7
zso77WP2qUN;XjV{r?EnRN+AFMKmbWZK~$!kxUyF|@h1j(<LDs&87GnWgTIdSkGCO6
zI>1L-_@A*@e|-PEpv;lr-uv$1fEqFJ`qL-b4)^-^?4^xoNJFhGp=lTTzf(wJh>DbU
zbg4hu5j7}Q`ocv3tV7<e{uzf^5p1jY`u8d1o#Vbvd=A+(8^MGsCNh{4*BP&k{uCRs
zP=2Qa?mD%<sJ)J)ry6l-Tj#%J7){8>y|sHm&NOZOKZq>*etFAEEK%a?AB<K_#}X(U
zb|2P11^KxN(=h_m#y5kBBxu1}j%ou*xUENTm5g;yGx&!kpwe`G=)vjZ#*X7NO#aWh
z<&Z-UQygg04|epRP4CtX%U=9U`V$U+kdi0;;G$#wjn0w%cziP0;0G!==7ec#nPP<%
z+OnLXbCoU-4H_`|t)jBAr2x}vWf>&fYE(gLgro6k7xNfoEb|=e^lg%poRf{|YM|pw
zH3zJ-lZsH{4XV+j3sUzT*Dqts5qVrK8&gE^gGkb|q^Sgx0V_(z;XgY1T(^d9>5WQ*
zUnULlnf9TFzpiXR2Ol{g4ksPL*HUB>mBEMwoSKQa<mg&HygvW3T%9kJgd_E;*EY4}
zVw56rC{9{Bh8Xh34qf3#3`OH`K?~k8rz59@KqgB4@X{B1lB<Boc5(WDF}J)ybVyl`
zKGW*8jV;+(DJWA!#VE_zJ{>Yk_wLw81PQ$TnHev=`n}eY6FAZ>S+chAn{TQbiw0yR
zhxYf@ipzhfsO&%z#V-1~sxgDppaIRgi%x(rE}}1mTIuiX;Os<cjZ9Y}Z?C`bV*b|_
zpE{Xhk)Wxi5$k5?>!_EUXYnj9E(Q~RkHb1qm<q&TkB>F{<o~oc|DSpGSvlh;oRF;y
zMgtW==(C1q$}Vhdl9{Pcgkv)qtf7OmfXG!G^kc#JB?lQzkVb^x5Z|s$f387-?c-bW
z@Rgo$+?Zg|;;);rvPrP*Hrv?He+Yu<A1PSNBZBE1!KkgUJ|FuK!Lc4YiE(`#%FK!|
z6$=h~{P*5_C$@H48~nH5dZ+$itY1j|(Xqot?UR<kmbjI}(r2gz4%{=B?e685U#hQ&
zZFg_+BI-Q<r73xU?svcYy{!cU{zPbOXpBz8PQDFw^^7+gb>V*m6hDcEYkmg8;Yz!1
z5U)J+XU5|&-a^40@S9N?a7{pCXxZ)c$1trXBv6NWil&koPcqu5Utg@nWzs?|jOcim
z)3b49ZsBn`A_eQwMRTx#FH4HGzbu^!I!((oO4%B}wfzz2${+DX?(`=n!-y{;v5yA7
z{q1kFD4Qk>A+n*dF~Ah=vif?sicIf7+u);96AL5XSvYtg*3*&|gJ2ETNcw*Ha(*R`
z^y<?mDK9q%%0$!{;#cwUC!A1<;r(pYGKF-)x>pgb|JPKAb+u^tZ7_Z5nP;Ev{@ioV
z*M9K9`;AyD4@+Gs&wn=k<MCw=lZT4(h|7P(I-|4DF>fS!_?5Hc`iG0k+b)Gj5B=YH
z8|w{)g(Q|O<n|Wg4nFuGEFYla6!h7sZ!*dkY=~G%La}1`kEu5a#~yWbmR_C^K5y>)
zM(ix;M!j{O|5$9f`9rK*r}ad^a?ic?O2?w!>L8>Xv;(K~Qb!_k&9p^WJ5+MS;q%g!
zcnR$NPmMsP1t*NQAPZW{G8$)Ix}PxE_#h1^-+b#$UkA0a|J!fBt0_=SP1$<GuaJ)Q
zSd=3hB(3wmv(7pz=fnvUvN#2h=;Z5-2(v{qFak%fR0!S#Q~PjIN`Iz&I9lOb{_FP#
z`5#A99d+c986$>|NW$o<q+a-lgf;pANG+mh8>ENzFY01Lw%-o$WBE@b$ZmMRVHtXA
z32x4`RCzthKVYag^Lah>kH@EFg(y(slM8;ua9#LZ2uw*p&X;jF#aeQZ1rF(7Qc}v7
zbnr&I#n-F44<h~W4D$X@|9kfxuIB}z+UUPv;ew{>%IcP^>?|%j3(oXT<JzJA2=xB{
z(o3(@;rYderDF{(-DRjhYik5ztycPyr3J#7XP%kMsl@<Ab~Btaw%KY>O3Y-zATWx9
z$W6FLUJ&?>%7E*Vt}ZTVW+wnGF=ov6spzEdj*;Ir?|t||!{?uV*3`(xw)8dpj`F_>
z&lBtzinaKR&vx65Nqy#-XS+T7+_QBbefU8=>eWWaho&Jvs=!0`*R8Ik86!K@zaxAx
z!Vej{Lst$*!Q{zaJ9;$hKXc=*@vADU@Sd=$h0h-**nYe1Q=Wb1neNX&|9tIxAAHdG
z1=i-p14Ft<@^#=-9_jWY^ydr^@BcK=yYIahw!f*f$N%J$Pa11$YPjPoJ^?F*RQ0$+
z_|X=&HgiV;E>|#N!iiZNK|>z`F=xi&m!ANmk!+0Mk}o1?)1jNPqnL;MU-Z1AP4Qmz
z)|+qp9qMHX>Py<U-+2eJiZw_hK`(3~6nyfrQi8_FT>diwLs&Lmdimvgtiysk9M1nc
z%YS@~#>XzCrfxW)T;u>5LFT@o4ZvyI$bXFcMi@U3VF4%kK~^UBSu^`=vI+Deuq$)}
ziw0uA2(z3Nn4yCYH|xSza+8$O>Iy#!&PM%w^ifA<Y=ND3`}FP=!R91M>FO*q0(Iaz
z{nJvlUt^d4Z=ynWb9mlT<u3hy@Sq~)o%jE<V4o9Y9|BulVJ~msg{;rW%%TG*W|PgZ
z&Z4t_U+l0OkB<?OYJ;`KhaWbqt*zyAkO2NW4dtZNB<CTmb?fw}=|m%j)Jr*zz|QL*
zF~X0TgLh_sj6Ja;g8*bF#poK}$d$SYUb1-c5_l9#3x$f|W1xaPS^$Xk-}w5sPWyYk
z{TXR^bg4huQPDYAcXjl(TjOOh8jRa}TpE^OQO7q$MPe++GZr(Dz!f(O<}Yk;qxY#R
z6_ypHIBt0#kKY2FjKrOcoWEWApIAG5hY<rJu%OqC54zU+x414jFts{|@^+m6QPfvh
z=f3i?%P-3(RT9Q=VZ*6{XP<q#wzRZNYl>lWoD8mOD*d6o+yS(;^&Hf%BXY{Ar)6)q
z9hbo{P~!1m{X>iKJ}o0X;o?g!%9puhMT=+on}*$~pLpU44XR+2J9LE~Ffq3@ZmsQ)
zxYqi+`ey^$-^;r}&zRTgj7(VCSSMLt`K>HB<7w(`ehxbNP|TQY<j8!jS;FWlbOP4Y
zG&lF`nTiSuI}&c1mx`Tmm4`&At!ZXFFZmbw{qKr04?ko;4hK)j!-1^rrfG2y(CZ`s
zuU!~1@t~88q!68Ak%Ub)K3QC+U|nrf^s7Y}vPMGwc(1Zs5>ho*CJLdGwZ$(l#r)pT
zXYi6-k7f(@sP*~_&*RIV2qiSi2mpDmLLw+o1d#ZWT%<94iWqNyMANA~H=fJO8e~9{
z;)r6DV$??D0}lEpq2JLR!Y?eu{At0Em*Fp4R-=c6#B=(uSXtXVpeQ>zUVp*^JWc{4
z>c1fFy>}6JAmt$}oZMOWx{lYM5+HRPjaYZC|2pu2t4222mg1!WL-J#yIGKo#g>N|!
z6J(J9Q-WII4;(NMTU7DGIDHKVc(5~umpE`{hRB5}JQ4YyPKe!%@lr<uhlP{lElRd*
zp)K=6d5E}m>;Ks&pEhtxBsq*2F(QRikvRmKyH|l7IAD#6jLd{l_#%Quz#B#mAAuH%
z@B)k=X~g=Fph5@KM%W-B4uAD(em(9Oe|5<!?W!)Np+9&3!poWYNW1)x>AwsMKLeTI
zPVYAQBd&w|hn2{~WVSME_UF!uhaGZQ#sd%B@27cn>3_iWT!hcBmzIlOBnn5FWPgfD
zah<HnTUTd91H3Sy??5s!o=O=LB;|BereXl6@`#E=2<n3cs=fW$H-v5FEd!iQ;_=s%
zS2X2hXW4dX;wBW3=&TU@w8MAOE1X2}`0ko<xQw?yg5vU@hO+iWOOS%<8SA-Z+<*TA
zoNm-9{@G`pojr)7)<^_)Phr{)cE{vYc)4OaIyErTGzU{?v}-q}QzV@?Wl9d#Wa1iY
zlF93T8`i@+@4RWbR{sUu_#%1o<kPged2>rs^vk*Pn_hkOmD)!he7J^Fi6Jgk`$75N
zTL0GgWJU{st+N&50n<u<1kndbVGqSl@i8(Fn|3g<v9*m%;_V;9FJ8SmtbeHg#v5;x
zuw?P#4)DPX2HSU^eN(wGyD^Ujcm3^eY-Ca@S;cg*J9o`E3Lbgk`R8l6pgYMqI%3d}
zA<5i`f^>a)_emHrVmQ`Hgxrvw9Sca+Y5pTgEB!g;Njj66ROOwH5Fd94QYhc-fMoSw
z4MxV+)oMt+qoqD(|H`V0pbi_9=pzj5kHy>BNF<ZUK#c6-r7wT1|1$Y9WNZzca`M0f
z++E-X^>Z3`SY?pQr}p`;GQ$2DS2>bYEIdAwy3`?S3U=b86EiVIEemCUlGp(uLo{AM
z7hnIQX96_q@;{K6z&PpJnnq^kR``s@(WU(@K9mTz>xVDKl!QhU0`*V;{lR1-Q78CX
zg`H-E{>8<m=!;-=!J{>PJvLPF^?$mrSDpRc5(!8nOJI`;>>w?9d<glObfsk_QFQd7
z*~i-7%p_XHx6|M92zuf9#a*X>Xi5pGll(72eI)_t4J5?#Kik>~A)x$Eb|Qi4&-~}k
z@Zue(|LwQmR(;-iQ**uk1F<>DX_HUSIStIY)-V>>Z$O7j-6M}YR8wBAMdu9%jEol`
zaLK9f*g-v4H_)F`J<mA(bhf{<vFT3~8<#Y`EIz1L%PXJ)b5blQDYaiO{gI|ad?$<J
zNn4Y*LUj%17Kk7{e=Lp!i0>T#jyvwG#4-+8QboKl1$t2OsgoxspN523^D#Pq;rzyz
zU!r{;fnMbZC1J<-j502*{jV#0&@)M7BXsmBJ*7ne>hf0YZ{sW5L`#axTKe_N6g>sv
zLH+qV0MAhjhyX`5QlNP>KxeSJLEs`0*Z#Ef=CA~aA9UJ~6+&?UQ1!6bMgz<_N4v!@
zRoYtr(&CbM(x7i|PLJ0i-M}o&f8RODGP@k>wt~QDK;f(x;xob>(IRY&A-6_=${(oI
zerC3VSC}P~U#=I^AMIz>C!zn*MwZ6FzvJd1>%e!iP_{U*XfSEgq^yY(CTfja<3<XQ
z@dd}(PT{;o{a<ezWHCs3f*Dy$KCgeP^6$tx!&h4H7*OP9)lfQzk4*`f&lE-|t@2+s
zGw_VG4El%c-v=K);_+8u6Dn%d5kB69S~BQ|;ML-$kQ?0(_kWM?^pRi=6G0v0(`eF-
z`0BYaeP{t((Y}tLz5kW0D(3To@kSGu|Fw0Tp|5}-1NA*=NQA@jZ0-LDN4zpy%(}uS
zfq1$6fA+cOYDRBk9esm`3`!m{WN<R3t814+c4CbfIWk4E0OYynp5+HjBws&#eH;oU
zf=y(W*7#1GR{jSJ5lK$n{7m}e(`Z=!wUlfK(;+^lhu0o_=pmU{M#?rig+lvd_j+b+
z%-R?kTvgqYiFK;UjTyCa`6~6r#I!)5D}S#3Q=7pRi_joa+lmTIWxTBT{Y?6Ac>7!K
zZQ$P|>qeI6#TCL(3Wl*L!NNgMQc~YEWKe*uRxEgn&GNO7Kb!Pe>#eb3O=AmoOVbP7
zmRmB;xg|WH1nb>_69XcnF%t05gZrzKPYyy1SIO~`2g@A)DS>$q<-qzynj$8~PGI_x
zmJL$YyTG*=eFrW|&UCnRF}f25ew=2ILQg8ORUGkcEh$`hDkcCIuRkMjxI_+1seO%R
zVSMgI`H+VQF@Z$rIa{#t5>u-;9KF*Y`+Nuy#KH_;ZCGC*m3nOA@VQQ+NQuwl418>e
zWfb-+{0z*#Zfk#N>Sc;q$<!yf;e&_2##M|SH&h}lmb&TM{vfv`b~fq!wYO4hd}w76
z4Onckb9~^^IFgiS%QRke@6k>EPc9UH9yWo%S8z=?k)=6u1S3U+0utF9bbNlX;`dz1
zs~tWfWB#vrM;^mRsMk!koAb$>hFx7p-!N^m5kz*{c_*xe20~Go@Vo4?YbrbXhK(3u
zQymch$)}&-fg>AZDncQu-xxj@k9Tp73+2%fSyNF3B@xW*L!!ch0^cAc0cGZ|sX{q$
zOaI3%!oGz`o(jc}(T8BpCwwA`M;I|AH9dr1lnnnItb>Hn2n~EeAx9j>&*S4>ti;74
znNo!M7Aoe<CmDj=#lzzpt?^`XhmR3`EEJBl!z5FL8FRac@iolc9Imwlrbx*Sl<I2V
z_ubzAQ_?W<mYwZN>O}ySS=Qui6G?pX52*-)TM&D(!fOP19=eLp|5z%+|HB{tkoy7r
zX90F>>j)ns))L0;vyaw<Ayce})PRM-EBHmv<JZ>K2H1pU4R^rXax^#Fhz7gvx@-D?
z0sX7K!A_(`XEHtT;Dc)ulanH6Og<w!4T~wq=YL{ia%9BtVaX$~1MBa8dwAw)r=C{+
z#g{hiQJUlDhw6_M>y!WSoS_<u0feU9afjXdTypj=Ea;|uH$9@<%{un1vBV+1%3f%-
zg!m~8r1YG9-bK0Vo3YU1$IZ{Z@H~e*nwL0y5R+cA`fKL@bI(6lKV{0Fqshq_%?ru*
z$A&!DT=SP|67IYIzIe0ZdnijqG{6)wPNnsnLwv`U?0LlWXF}X5fSK(g<MBg!pxD=Z
zkp-35wGlx~$^heu3tdATOf5qUObDU5ORGh(e(r(kOQKRioQut4P*zd>7z@vc#))Un
z`UyLsqYg3uv&atcp$6+80D8In*^A(T2q8)K+jrmeGtW3n%P08!hfsLYFK#Kp%XJg3
z*%%pw&Y^5qKX8pDK*Wm}<8PcjE(LON%o<7VVTA9Ph$#L#)YVcuuyyE9{%!H&^9P3X
zKyWD5k>1Wem@?|R6+S|kMHo_MaT2tR{*3YV=k(5ybr8ws8f`){=2$0H*rbWqnb#Oa
zCCkz!qtS52Y{&Y$`j-YpM<021t-lk3yQdS2BJs>M!nhuu!f;O$@;X!kF_eeTi-j0<
zXpu4fA9&!wnxv$Z;Plf^%Spp#B+6-K6|T78{uWpp3L}wHes}oqvQC|RY8f^t;)r1$
zt@OvnSv4GGe%j>Ia?t6__aGAx=Va8k+=-Kazx&;9GfzGB)bcN_UiD&&pM;MS-Em+X
z52N)~YJ=}|HpzThvvl$H4^vqq-SIR!&pA%=AaXxG_VIaf`sB&5Pa3n!9>h3HuPuhB
zV7FW7^*d~!bXwWx*a!(Kcpl^&kFWHIcH*uZ-$V-n?#eFZ9KKsjo>}38!|Up`m3V`R
za$N)+24*s0YPxlZIsfBE9Ne@Ijc&LIzu`hQ<v*_2JED0b;DBcmmY$*iSSf`WxS534
zZY@5bP*+22t$%Yfk~vv;QP2%L${Vc@WioN*kKspx<x7|PkChf5Qt_g-|4A<d(z5h-
zJhvM;ikGJL{*QMk4pN73C=XPV=x9f{^_#tB(H`8Po_rXMzmn2YE1$TI*WblU=lE+=
zAc$a7x3n|PI1^J1h-jv1f=vA2R)$eWXy6Njvw6_z2Eh{8>1rqjO}759YbUmsFFul%
zv-{TeXTqL6d${yGX>@)Ao)x%cuP?tDcb@;)`PV+SBV~R8HuoV2et5>HSK3C`ZSk?=
zHV4mQ00ZK!MsS2?d6$gId4%@Ybr<?OEhUG?q%8g#SGbf&3N(D5iiDlvvv`t=K5~#p
z{6PpWr7Bq;V8McNY2xq^Y_hp9-E@X88NKW}zwnRe>!wUSFN(StUajf7Y)9#XE2r|J
z9z!U+3+$hH<{2%6B?Y|xUEphkvuO+t_Ua{Ome$Kb^>}!7y(_Pu{ky;qd5S%{zBQr`
zu+W9|js=Im?eIYu9CzIDrDvXTM%MAiAD@k~9hQHe16YHy@eX{<y8MbO^2G^KuUNU<
z*HsZL(bVAkb5YsBjK~`#M&D7w;6X#Qn>tm;nx)#nl64-Nhpa$20(LRiXyz^cC^@gC
zfVUTJEY3-!oAu9s<EP(t`p09&U;hC7IQARvk|Q=KuX`90n3;|LrUi}2awrE|ZJTK*
zfWexM1UgpWUw>WQfDvacJMGvL1wkATfh%%=y%EREVN|fwj=fSNc<iX+7XgCNlv=uU
zZR5M|mDCkuJ;3Uk#^{b?dZzBUV~-5>{IaD*Rw1}9z?ex11R2QO_ZR9p$^hXj%5))*
zkQG&v{`e&^{*=ZPb`29!E0!0=#Qo~!MBJ1LKk_UxA_aIU0Ua3!L%;|zgv8mZIKwww
zQIG%^7OqrIe`u!|vJrElk&j~m8z~{<c~P;Zp`~XJEHOYcIsE+m<iyfat(6$!%ZlE>
z1QflPk`1{kHA4ugFa;|m0x6FKcF~4!B#g0mONU>E;OJ6+aTHyL_(W#sB_*>V9^~i6
zi^Jz7r2?IaPGq~phyyfgTqyLPeER9-E0$vo0){!^B&Pdu7GVNFQ9!!_xuop?-`E?3
zOQ%!{X{$dv@9O1;kazIlLCI+3MzIrFD%C8;G@TmkDApfq1?{l?c4^lpBvfy<*=Cw^
zz^=%TKKjT{D?wSqNQ#(jL5{s}c8HJ04jX`B0pm_*x|c>WPH2CIi!Xk$yO~`ZU1$1R
zfpPYc0M1B!g}m#|d#V>NUet8yrI+ThfMfl#$TfetHt&#w4=Sm(t=vs!q;CU&TZ%<5
zkWl=^B|juH6a(b#wiUieNC-7ZMb9CD9yG=WQB11TJSoean;ET=6BQ%)ii<V<jP@rn
zI)EZr;}N+P=YP}yQgT6YhEfs8$xxm{2wV!*lE&~wX363Un7B}Kmrkkig8=fSR=N<+
zzukFf^^$MCX}sj(i`8OGO-;j2(AVT0dhns8?6A`jhmR>a$w^7<6tcj_AH^C(Y@B)k
zLKsT);m01S-fFAS1txqX7&2sN5<2>9<bxB0_Pyusd#bV4R?V+|wQK6mJMEG(eB|(y
zqW(p0*IGz`{O^H<>StVeWiB=iDQ;%nYHE<n`s6>QmHyP+>2Dmol_a;cb<uJ5XZ?r6
z${#Lx+X;R-HtjL}d5Q#iIo3JV5kATuKmcbNploU_zxMb@yxXsKOWg#!4;ww!488BZ
zDmNl(z4Wif3&0z1yj8dRuXjr)z+QXrovw~P=#Sl>wc9QkefYtgx>c)Ip;v@YBXe=5
zFBL~p%G*YN_W+ULdQnkYZ&^{}C$v8sw4P@+N8yR7LU2g{LYV!r>;RUXz(7QVV!g+(
z{^68w()sd-jT6eOekLD5w#7Hb7U^{$Ul9vZ3?V1f<kSSqV#Irj&h%$G_z0$rU<4J#
z$49fq`snqT%JS&LkJeV<1uJBM$jdIfEcc*;4?-^#sAVsg$l>$k^;eKfj5m4NhGM|v
zcFju=#W^@`Wjn7~o9G|m{|+B~DKXh&^D_-3m;GrmhPe#JRmb=(Y>gqk1Sd}(UP^Jb
z5Zd3@zc%zpbohy&(-iC9NenXJCS!$(WvEv>(jOffSk}<!i0rtS;k+OopO_$_4mEW(
zs?gTQ|5vYE9p)|d!Uj}mCw$L#Ldco8CIv+>L7X8N?4x)_s%Z4?yYJ#ACAIjlm%7u=
zJEx5pIU;#L{{cz<`A_|Opo4M74D6JCzyZa4(`lza_+VGawOG8q_E)>2Ufp?@)L|I4
zJ8%H_5XhmjLuMxG)&2LwPM$3)UM^Y&l1!eK_J@Q%E$K+~<Nc3v(BR+@+FAf)92e#-
z1biF;>{IhNHW=9TSG%U|yyMQPBS(%%>0jjZqI^ipogA;gj`j!ahn<bFMJZSiiATrz
z&qQ{JtTTMCKSn{es(;XNAHh--25z#4`OkHg$xp+#fdL}NKHx}y8_MPkdFJV7mM&Yd
zjQ$5Xy~IkSWUW(6<~H^>5i+o8jbfb?@%p3ef-@s5bj_MdW_;)R^Z5t1HJAY-6Oqz{
z>oos0g8_8D{6Vj><tvuQaFo5RFx%o&e}xrmZEQeNQ{-Y{VL?I}r)yH?_4PlPbLzC|
zxdw|54NZ;F>#n`7iW^l_RjG3<#J~KC%X1Gp;2>;{g@19+D!{=CVK$hdJ-$pL>rgDp
z?kq1I+xZ`s4KiEOE1?(OFDh1;eaIJy){*}bB#4w@v?v8<BL1<1va+%oT-)Pk$q%U&
zX#I<!my(cnczn>A{Y?W#cA>vzjflvqBYX~#^!ATK^WwL|Cm<Q}*=k3}_&!>KuSfgC
zDd-FlYUe?^)E~R8N4bmnuXp=3){Kh=d+oV*`d{$Dl$OG7y9%S&AAb0L{VJ|IX*#sa
ze~`4p4}+j4pMNf`<Dgr}hX0h*QZq@L^3Pat@;NJN{Ls@p6GtLG#?81gKGYvI7UR}w
z|9Ai{b#(RB*Hl09$iuZGMvP1vy2;RFbZRFqSh%q9wbx&-$1+sS_y~jP&4$Ef4P586
zux|P5U)gDj=+^!}YSdOq4?OTdcWUw7(r=q4OqftAGWR1-^)|7zKUsgUGyR>ckZMEN
zpXzVWgKG#d(^)4#L%Wm&&H~Pobf8GdDs&LZ4tjim%xpyZudrrY@oF}n$jpAiPmBmC
zDXHZMQKCir_s_ykq2^*_$H31%DX+iq(of2~r!sIzQI6I)U^+)8?_dhJxnyDl<Lr;p
zB8K!nki>SF(556Mq0)AT>sX!WAVLNbI>d_CUkuGaLI9-rQUv_tuN}NI4mcqd32ATi
zr+XUR>xR-Zo@y8yawRKNp*&f<Y3Oe)rJBNscL__d+b=dn!7yVcA!rbc8daFGXi=3$
zOi}-|)P%^ULv!@$g3Jv-fG(BNdi`7Biz7qap?h9?!Q<i-YGN>yS8eT2l@-c3Ty~8w
z>q<^Gu8g1K+Xi2h_O=o}FGauj8?4Lb4(2~Lqext_Twfm6jSu@v-#8t0Pks*3Ol~qN
zl&Gep$=llhBA<QsSrev;25Hz3BPlT{z|Lf;s7TeB_tu+lHDCep=Ke?Z&)Rge&9rM-
zCP#_@l<W0<@ZpD?N-Mrgmt$HI4+TU5E+&q<4*egEWu>A16m99UrEHw&#>CZcOjipe
z0l13}Cp$d8rEVPu3ca_gBOX})z)n@OuD-I8GVX!}UGXr@AU+m%PM$VxdfwD&Q?*G<
zeElN<iAiQ{>`!5so-N<-%M=4+M=Skt1C>F5|M)7Ur86vR%$LYaK!n48vQp`b!(YA(
zjap-&cx;T4gpNM0^+#6x)q$^87-fks>fl5D)vzSHHu>-IciwsD)G=6#k+57M7m`M?
zb8_U?TW`hgV>Jk-5S{y<6I?>e&a-Ce!Mf9qJJjyE*WMWV5eeAIhE9v@so1$t{Nn0=
z>@=oP*%A*;3^Zmm{Zm@S=?_&RD_5*kr!rNg!W(hgX&e2?A4h~c7(e^$bG7)>#tglB
z_f9zcu){Kr!)~-#KL<S=(V(cPC>hh%Q$POX6Rq9WQT}`T$iB1&z%c<K`qx|jx)$~^
z%g5PY=oHUrO;jdpZGVx`s+d2b9v~yvulIkYUAk-;I>{`HiQNs0turw$NzC6c|267?
zsa$W>GE9vU1%BG#M<$G)kVSkl;c^6c(bXm{plpSYXhQff-s&L!|Hs~U09a9EYxfP4
zb0B9FFoFaHM9c{==NwQl>stc~ioW;M{ar<Ob)W8{1k<iL?CP4<1Q-wz69N*3%mBkA
z7$)93_y4|gs`}nLi9rEZ>6*FS)fG;vQ>Ut{EBx!tH>!`s>9r)LOXn`ZzWen};Ebp~
zy?corVPU=b=9@B`uOWV`e+HPSk(EE;$xk?>D4WJFdC5PykSn)2Nb@CQ&(LZN=pl@d
z1PbwE38bF~09pI9W}Vnyk>K*BST4h)rey#>u+Qt{<!PJvw^9Cr&(wd=(`@~>{F9X)
zUAqNjwwdr1ad47k`E$=bXGY2myA%M3>)fRa25jjir80Q8E&UTNZCfUJS;FK$Dr*}c
zPz@QxC{CW~6Y0rSBlOxT{J<q;BjsfAtNazJ64Wey8POGzfmB~}Ee&z_@j&}0Lc>d3
zocyH?A~V1bv*dKd{$jGpe~j)>s+{_S+3Pav3dz|IATHuzN?v1~;J57$P!qpGWTqJV
zCz*&E9)c-YUck0hXvHJzRiJR~I@-iI9P-R`E#Mc*m;!Fg)-Cl|CRW8C<$--3{b!tY
zX6nTkU6jEkn<Q_KJ@yRt>(?*%_19n9+1HX6D9Ekg=Lz2ij@nho>&(;7NW+YaRI#f_
z*|SIYgns?@Px$)lZ)6=g@wb+Lq_nswhDP`ai>_JznM>@Scw89U!oRhm!ui*mZ&m*b
zZ3Y1Na3Z(=%(E$<i_`V679aTPnXo@rHhlBV*PK2ow24%jDgRjcZwvprwQKMa50I+=
zPTTx8elyTV6jml=jt4qG54HcH@9zi{b{z*ZTu^qX4A5ojAGUr-z(8N^w(ye~vJoqP
zqn5%V_j3;T13t_yMVff|qfNrTZu&<`rC+N6o0GqY25Ff}G`K1J5~m3;vj(Tf0vZAG
z*BOURVW5xic@%}{CW5V#`X@0WROE@Ne=C-)5GF_~@pkRfHL!H?5;++cDXpws+8fHB
zNV;|F7R<tl)_^Mn;RNGY`y7YAbEnQY97WTySfo7=E~56Y0sqP*1L2y&4`>=|_{Yh<
zSlM7wLjSvT#rws&=G%V?jZzT=rl2W}wS}^r+QrZPJuz^i{e5OJj`;Iw50!9yT_%IB
zi{qc6vGQ-p{vl<n<WKxaN>M7UE!ck-ziA{SlTh23f5C6{39y;0HS(8)M5J!J_{YAW
zl}8<ZL^9i-E?v6>G0Qpuearejd-cKlwBV<0!Uu4WVw?oiZ_2+Z{L&Wyiy|WSGL@Yc
z+aKW{P!An`XyQRU?bkZw4oAYy<i9>%fp<eKBgVCW9~g;KXlD7#w@wC7?2Ktb|1AF4
zyp;bMy#Mfr{Zq~IWra)pCt&3R;gQpg8!;h5y~GiRU!D{{L6RZ?Ld_K!>9zIxM;5k&
z|5*IZ)xYNW7ZS;hafalU@!Q0^_^ty0+Uc?+^DcfRT(1mUUsM^k1Hh&_x+#||DX%M7
zUQt(9hc9bx7SShJu~uA+8GV|`m){1XOF%(8&&H48bLMTrW>|t3fr@|szBzgdi?LUd
z-Lz>;6m{A<$$CWu8vHhiz!Nn#_>n|?MyE&wRg7p2D*9l8m<+*&4asB%z$He*NrvDu
zkIDr@)d?1<+Q>w{4Lm`IB*<p*O9sLMF(M%iFhogfBq5B4BSP^A3K6A*NEl{;VUIy3
z<B9=`|Jb8Drln`dJD=b`@q}*aDaklsL~sC($;%slz@S%o6d;7?L~gycZ_Z24AKrn#
zmtQ!%J$@Y~-rf&0dyv7vkdy+z2vP*7REw+(*-h~;NLs)zcnkulkYE&;P2o5E;|mJY
ziPU&0SjuDW;XoJpA2@IzPwQYBfrkr{=~cpF_?H9-G)^94@nZ=Fq6C$bmLcaMKrWI(
z0>#&We+=eC7GQae=5n0NF26hjOH}|S;>?^iqw1p>AJ?*7#KzywRaajv>kWv1*|H^d
z75HK)FhMYvkYQgaLwLj)GIXe(blL=dY>Jv}`KOUxw?;Z5!jA$lU?>P8Fpal@B6e|-
z-r`s3*(iBpa^YXnfFC(M)9^p>jypG_Gb3fecpP4kG71ev6Zj1ZqyH`nm8_T&q7!P|
zNItpv;U^3{b1A!~!DImHzs)7-83PZ}@~Tm44<wHyHiM#)l0c6??l{`3M*7cz%;Y32
zK>}8$<3J?uNGXp9G4_XnPGr=mQAwAM9-WR~#^}+P;C@NQm@#A0c~F6*KpLgUJP{I{
zz=WUB)sGJ>`c<6xB6m)_tGrN7%~HgtopMSV<=hZIX8FmCJWFI=ejW$1n8~1s;?L)j
z8_Nh{`O>M>#L*`Br4*D*0lmJku>O%p9;v|Q<Yj7qG_re-9&DEghGc7C41Uf|!=~Tq
zqc0nsJ{of3{qoB$&*&(7Dj`F>aQM_DexxHm_(5~D(<K2M_-zS4XB^ek)w$i+p+g7j
zDL>3aI%Du3JalLxU;IRL$bpwf=Ch)8@gFeYfQ0@7`^%v_4CHcWY&tLCgs2$)85n~C
zkBX7`xVKjY_D7+gSg~X``NWgB+yo)O%7ahddgpCD9Xf{pmh~TyxU7RfLA{JT3w-w?
z<S0(%U#kp55C#5+9X!l@a1tmk|3il!oJ6{8`Evk8Gda%E<;#H$`Az-9-lVpZ+bsW*
zH(oe=B0iLhP$)!khLi#8V3T-mmTz-OdgKwz_R7aTd+&wAj~IgosEq00$|ElV9Z{L-
znf|@|Ag!`0{5QleX`7Hg4UrHCcocOkemqGwM7hKgFPzYBBIESW#5Lky(l&wLrYBH*
zKtjm@v<ix;TZ2DJG7YlQ)(Ag?t^Cnc#@S!)pC^T2vLAaqPiAL^c>LJb0%OG5v@xma
z|Fy`!fCOR#nm7F7?XRI(I49bI<;%36z|<%d^b^eTB0Q_xA@VO=Ul{%~PO`uG=9`OS
z`RB=|K+}kSi(KMx5uT84{W`$;^Pjiec;k)Ozz&d%{psF~dtOR1tqCfIZSrpbw;DfD
zS|?xkto>t0^k?8N+<^At;YTX4^+XBlpLIQYbR%Cb|FQTHY(*JY|0VY}_{T>X<i)>H
z)Pr!~iNP6H|1jGy$O8~ak|>|C5jHIbie<ou_J?=}Vvpt4;3sCqFOXFJ<OYuXWA?8z
z<luvCpEZtu9NHFVe=yMJzJEz}0U}wXUt;aAB2)=BiJ$p^o@8L4Pd_LlIr+hXTuO_f
zkqP1W)TsV9<bT-;9t@>r$hZ?vJZZc7f6Ti#?6b&U35R`thXdb@@MC7Cv)5iYOwZ7X
zrXbG#m^{p=;^37WlQ5KRdO8mkiF5MEXgJsY6cj9n-9VJl|A7MrajP9B+phY@*`EY#
z@edg?q)GdO4+04(y7!?XQ8c7&oAPf>`v;(g#pc@|sqerj30tuL5-(~4;ea~PKZP#z
zl3fL3fFX$hg(UbM$3!ts9u0A>{7pRLwwwR=c_@u;IRb<c=cJQPN<IPoDBJ$mV!NNW
z-+5a;tPnnNwFW<Sz<?B$6^zm`3w|xPKL&8*_z}maU~3oC=hgl%_M%Mh*s;B9ScR5&
z;k3*@4T+II1V?%#J?`=H=VL3%pV@lv**iE;Y=MHqL2T9V8Sui5AQFfT_-78y#R8{S
zuR=~M@MAJW&Ww*{w43qqjJ6-oz<tKYZFw?qYw;`FL~1c_AAZRuxd}lWpUAJ}-vsa4
z8)w9V5Y!tbj#U%?@*^c0YV>mB#v0jggbB2&Gppll-dtN>R8-AvOClWXV<r}pX4bTf
zH{c>AB{i6QYtRq`)D-*uv5|1`4;|7rdCxsEX&AMgMLMyrhCqhHNvI7XJ{n}+;WG&2
z!5C(V;f1|vNzR1K#l&=aHw-IArjTI1jngL&z{4t{piGd!GHGMLF{wr7VrYP0s6nIw
zFP#PjK@9NWhowgJDFTfYW`!PocB2{g#hfCJw39sn&&>IG$$@+R`+)r8M|4iP?9$#D
z=bzg{Pk0o_7Petn`QcSjnBD*%uxh{`#5Y48020KG5CI&mm6|4pLrGfA;F7vc`8VXB
zWWy;{P2fk1YiU9%^&>IUH^LA0#hF5uG%SBEJt!<J3_-9W<BKo8I6VhnNi7WAHD?3-
zm~m&=W4yeW$uk}VHj!;A=2r}rdr!<#vVaWCM*3$k`M&v@U#9tG*l}=zrVJp2FnIpS
z%ui~+nEhq-RxIBoGQ`OsIMtk|z9EPpT>Q(?xwQBXKm72N9NBwMsE{<|pEGSnj>M8a
z!#_HMVQi94P%-=oV0|WL{Z~wKZJK`rz}$=q+b4q5{UAt7gv;K>-*#Imzf3a;`Ty^`
z?#k-YrHeFRc+{LR`iEq6$RC4Wpdk>|*`Tr*8|fd;yA!pL1nvsHX#G?0gikEeHls}9
z>)(o%E9y3^-+)fMCOi3*Q&Q4!SPHYm;^)b?0>*;lm#Y@)KX%y0P;QJf_yJQ8S*DNz
z&oTUKyacFM=|Vc;A99Y2zioUemJyql$1!s5Y=*g%|Ah+|hGOxbcmg^&bWO;A)W}gB
z!PIEneq4w>so-My=c7r%D0<`g|6$>RT9ZKX;cF4o(b;SY&f;g{m`ZK&oAi=)d+-Y|
z#U%JK2xPK1gCB^vJb?sKkVhPGcnW58P&o+2#gCUi|8XO5(yf7w*=phHYCV*qVfkM%
zW~}H4GjGAn$G<)MEcbrVoUPS=q_4%`;QQ}?fJ)4)5$Bj=j!8N0xZ`9;ch)P+46edQ
z0g|l=Bq1nNOm6#w%yd!weAPfEawiN*G~*lVpF~N4Dp>M=+Uci*1_8&5TmBeqcI^-M
zmBK*;)E_|s`y5)!trUQl;4Z!R($uW1EL*pU2BD4dC&E4(8ZD_ty`uPwFaR!u07%b0
z_b`W_G*|zXo^S{i2M`4)n99z<c>zt}A2W7LdPauq%cmTpJ`3h1_*WjH@+UY-jrC7n
znsCRX@?rI#Vd|RXpHYT!a})6)G|GQ#${*8(^aaz%ALSqbEKmg)FMrrBgPlnwIqps2
z*O67il0jrmD*Cr##ftET!u49e5P!-^r=+FRt~S7b-g)QgCg28-6058?#lKZ@64V<0
znT%;SVv~4TGLB4yehK;s&_fmx;^X;8n4so`dWaictIHo5eDmkekF&qwIx(pvTIjJr
z0k=i`^M9DH1E!LTOBn?YpGY+C<`>mJ;%7X5bei*L>L2UB0uv7}KMOzh8pNQL1?qF~
zfz-ekdWCkwfaPPm<WKqtaOJ9%buvTT=>KV_oGR_01&Smf!WTL7j5Fk;tB`~cVUPd}
z94_5mhkmBjzl$(qGcyM(Ot&F_&U6+RD}Uq?{D%KCPdlAkC23F$>Qhd^2Kk_bwAA9T
ziGpQj(8;8UD}U4fBQ62t-XuG7XmA7llm7F%Lbw0Jnfaz(G=vi;fAEEYHGxg?D6z=a
zimmlLy_ASZ^)bgBowCn9`^W$;9vk6@q3~g)3c{oHPxd_|L`hEjta~UkK!S-1;Kz;`
zlK}%QVS<l+QB5HB#{iJDyb!-^Cjg=edXGJLNSQd~isHuup%A28HsbW?wd>a5tyt1J
z7hQZ2?FQpp)c>R;j!TG>oU2!?3Ri8#N(F;o%htw6@t=9-nKFw?u^XfcCysvvwTPeb
zn$1Y13He9kqxgXlU2o!Lc90wGN41PUUjIZsQTPJNXbYnF&lKu_EFM3CCDtUdDO<)*
zW1`}6%RhvZ&p-U=L*0K5azFOyV^T)p1YW@pB(rADsL|!%+lL>AVhSb}rBX`Fjqxjc
z@$#4V59AZ3tWp7x8`MDmTnrSF094crM>am-H4IU$kw5b{sQ(O6P=+Kt^Zn<JJMH!+
z5eNHY@<2Ir<Zfg93d7}J0I@Jk8A}E}5`Am%ck0+Fh`pTyZQJGt+G3>*XTRoT=jdLm
z!m?ak{u|(T%U|#bf0Clr_>o%DY6e4hy!;L5U3)_ji!3dJd_`8_D#Zvl&!Bw$2F&P#
zV;+$`VyUppmT$FhX1-<1Hp`48cDkY)NMQP=UAl|#b?d6?;y$3`lkS0o@>8z4YVWLJ
z!`mmFf8HJ$H{G~T4u!>^;3B0_b+u8rGh9=_>-N-<N2`Dlyntddb!31p29AnAU-2{{
zc#q>B_$7jwg(h>68-R7{n3gbo%CNT6rykO7+LS}uPM?DN69>0%-;SqUAXQYf&J%w*
zxb3tjhP6j}q>+1j$RNqep9a$sCqD3BFGqI~k{cxyx%^8oqa_WF{@z^o!-7(j2O&lA
zW9f9l*voolpD?O3mx{@H0v%c89CqebD*$gC{|Z&{3r&cnL|ptTQy0JDRiXr_z$SbU
zqiGo;KU{ckQU3(9WX7y?c@-jVhPuNN0s~0|yx=!-Bs%4au~Gc@-+%uW{YoPz>G`KV
z`DE^1dvP{~5ajY7Obq%?I{Bm&EY-^U=;M#uYcy##y1)#E2YL$eqGI@W&N}<7RGgk`
zrcp9BiXVQ`3_QyJ+<EgbIP1zEKA$rW%WW#Ew$_J2wa%P5b7X^36(0a0<5%;()&X4u
zg9x5{>Zz?3KTouL>@SbyW@TZ&Fm(~02KeZskLKX?Gd(B~c%FIoS?og*RZ`Lf7;Z_$
z)IUNYEc}}0U*#?6<ifO8{*qA}D)BN7`xDkpojMiM5;X|RlKl@(dN7Aen8gVcB?VVE
zUlhM$WDH-Bo5C--6dG936r^4@z*d-z^^XEZMt+Ql;a>tVVCI|t)RSBFbWI2Q%H#*0
zdG_htcJ10p!;**%*ReD<3j?ikXc51vxQ^&!_#oMM7W|O82wjj!u)z;n>2TF3xi=?&
zmOk>ubheo5%P+sIoicR_MtTTIPNMctnlvdV7!1mbE6ac7%9Yq7RkvXvjDZ6OCEaxM
zO&Nipav=C2<V#0intsGlN2OT)`9iUHsUD<4@XXt-YuDfhAAHbu!tE2X&_ULYyB3-d
zfZ21tTgQ#VzGq~K!}mU(AT4ih2#M1_;T&mLrG<R@k;vl5BY{Yi#c#rJ6LNT`qtNJ>
zUVpTMa9025M?ll~5&qQEPj6)!=1NFRmim>MnMM8tGENfpJ@)8hIXtPEfEoC=XP>FS
zjV=y94>TEm=%F%jPyDaE^or~$)DnKcAXxkwm;W1Y{IiPonSa#9?%lhKK9Ue@9?fNN
zarg;`xERjzXIsF5OB~D-$ji<1Wy7D8nuG`y8U`@@2n%qz8a4{|^CJQQ5DsC`!|Fx+
zbiDFo!=;yAVrL->er)QT4!+G-a-Z|wd;hN5z<n=`Lq6YwlO|zlx$1v<W_n=S^yzth
z)IJj|e#$@e*N45#QfZ%O&Y0PbL>T-`M`y{QKe7R{o&+xP^F@8%efO2wC@tB)g+Kmi
z`ajC#t>bRZ4hA_f#G-I~myI4ROVO?Ti3~a(Lk>e!{*W`4p62+ovngkhr!NtwSu0&Q
zcnos3^3TPdRg^W$Mnua*@@riFihz+qmnANae*)3`3I{a$xy3_%+qS;8ZQ6=IIguxy
zDVmhD6dw++3bbj9H0(g5GYyBxc>LTrTk$hz^Z4WKuhcpw7X9O3;ZsjPwM8-GfT+BD
z|I@ImZLtp!VFzHVCg8N$Ls4fM)PF@yK=?JpuhvTi*N}hUa`6)g9m4=a_?h(J1Lao#
zF-YL29%?@!o`2|}13gUn8}x7%^iaVVZ~(|Xc0c^^gSK}}xIL45p_+JBAHk0=rjgrj
zy)9GeXQ0pde*O>K4gyX{;nmj_%M?HO@Pl?ZbvKg-3kU`SgMQBTx^3KTI5Z|2_`?t1
z+kQHUwo!!a;%`a+WAPiX$Q#c;!UZxfq@C@LFotKN8t_Rb-UT=B@JO;Q-MjfecprS-
zaYrUk5w`M|SY+egbK}O16ZsGT%U|Tf2Lpp1i{FGXh~!w;D*mf0tDM(feGPVA?aw~@
z@0*C(gc*QMNb)=N)YDQ<IrTL8kRm|{Wkf^#>}Oj2!y#V2C#O!g{Y-&lv-uMfBh;Vg
zpMM^9Y(~3={F4E~=8x`}V~<Te@BH%(enoxdl~<(?9y|o2%mnQ?JdK^F*_%fO#q%#C
z<eFAXi%FE5X7CHmOmhDN4{WyWFZL<)V{b*_t0DhtpHE7Lea@dbb4FXkfC~p6ANnEX
ziXT{^5mTO+l7IMNhs(!qrCqu1jt}S0Jo~r2r=EJMjk2P&%i&_`1$dt`{?_rC#4F5@
z9r&;UAdLf(il4R=F!3P<QA{WH$E0Tf!nOXd-%zMa)ew35>1U*KDJQ&0(z5<P0Qm@D
zB+kO#dKmPe-H>e^G{4~W;ZPkv%02n-FT9ZZ@y9dxe&OP;tg4E<`ueNrXDa{u;vkwE
zZ@P(f+r@wC>8GZgf)yG94H4wu>|IXubi%)Sm2C+V7}5IobL&6LjV`AB+XjBTamMIh
z^Y|fW!#_WSM`>?a{w5ts+HU^e_{Tpn6HQUI?a(gJxmy=`FJvjaq1(?OvU&Vmd6k=+
z&3=-feI>N@zN8fM5fVU>lT#YC|2V}=3t0(w^^as=dm0i0jQSJ5P$0p4q(}1eVi>lO
zQZ$AZUv5s0(3F^%;J*Ly;G^ukJkTWcO8?K6r$AQF4s3JQl~-MrL7rmy@3m*I1RSK4
zHwf<ww){W*;Df4l80?Oc1D|H%owUgh7opSEf2Ls=cu;vrta@?flljHVUp^W#GolUu
zv?Vd(KxFgyo2~zX&G6q6et~T+4dt&eh<?|*Aoe*SetGQ`^k5Ztk*N3#bCg_7b;Q}S
zrKUbJ150lqJMGLn&hq73?7kn79~W;9jU0i*1j@WpTs)c{%Sa`_aX$TYWA)G>Z7?+(
z4L6GtX$kM>qdKJWXVAM9n*<S#+>u8>^CDhmwUjU+-&gVB9m!!B6eBajf*^zNg(n3?
zkFoWLk~mc>O~#XQt#Kh*8C4Vfq?vm;0f4}gygsY|a<a3Nq5QC1f`LS83er!%eay^E
z)IB}OJRH$yXW~mvocvt`NI-^UK#P!E4oJQLB|_;v6QJ@!{-1k(`R4z=D=QB(@7$z{
zQ5m=LSN4fRsNqFOHo$o!0)`5H@=r7ZOY%@Aq$D1{&?ea!t8@W~WFrpALr{F6i{oDc
zB)B1dcA69jbtsCZA%5B1T=B;siQ<3ny?3kTd^soOpo0#?i?+|%t52WAmtJ}?@0)MF
zt>u6R4M*25T@rft>K)9;<X8N9rv}Sn4L5|0pYSDEEdEbFomGPkwq-vDe&u}Wg_rWN
zG$&NF37d*@Miu`4I(c%%C$nZ&lX}blR~YaTIng>1BJj=nWJV1V;K}Ep^H+W3;fM3+
zQj;m-d^zU}xBglDeA$OFPUk=ibN1c8U*el@yxC?RW(@L0s$akUNj&994SB>_zj1vS
zolBgsAy|bR#cwEc^`DbkY*~{&LT}7JBO2E~hN|PrIr?JDAImtm3>`8wY5%_ap>yYR
z_QU;mH~v@p1Cu6ISpJD?+%4lWc<jAEB6)z+YtP<z)(4#YnlO3tUvu%c!|F@P;V_H{
zHqxI^z6pDuNe;9qYJWH*)z7M|j5gq(Hh`5vZ$h$)MY;C92$@}urK9=zd<l(UNyt8l
zAAj^wyA2!H*Jowt`Y^~!aUm*J{e^M?7R$ec62IyCC?fWP$N<S`j9(%f$X}}=sbQg^
z<G=u`vB>b}NB&%a7XjG-o}H1t`|qFlU;lMO`lLw@V$Vdec#(%5dT7hUiFaTCPVrxU
z>17$m9&=pE{Q2M3V&=Ak(;O3ebl1Z)#1sI@qmMmWUR_O9RLAm9PtR~VbnFng;QR~I
z&Oh(`w8hx47c+J+Q>!qXnwH|{Ch{HHw}&lMJgb(k2rXZ+TxX~%y9O8#@Sg-i67td{
zB?k7S@PuplSToelG}b>2=Zj*`p3om;1pkz3WY1oE$_oWeXpbJ<1Ct-0oC|Y>>QCs9
z0`=#PJIb*Kqa5w|#y|g2dDWFyq<6)OJ5xygdh?BZ?15ERUmuF}?|(p2+jdw|!Q4QA
z4gJH<J%{?Gj*N(7`Cl=1ERWt4S6f}<Oq)JU_Ea>*tr09mmwyD|38XTY`b;ElzS*-s
zuPG|pSdYON7eDonU!Xtu=p%j<U_Nn8=^vJeBw@2<)E_2M2B?3OJoN!D;K9#7{iGeE
z40||1^oEjuzyEK{Bvkp!RSQP2@wMZYTgGJ`cif2N6)Tp9Ah(2m2lPu|`$I;sFQW6r
z6Hj0OT96PdNp{|O@15$izBsF9=s`oUk)O}m8%wURcVYgw-+fcNeEACbn9{Xd*8mQI
zN#G{sL{?LSaZbq(z?Q%m{YR8<=B!U^aB6uX^`CoPz3}2qmk6%_06+jqL_t&w`PgqV
zgabfuHUv+ObbQc(ikUNEp9PrXTf1s?c-5*^A=*@ueFO&Z-}=`ZZLo27bz)+Ye_zyz
zK3KA=)s3<Na-oC(girf~2RSSy`Hv4hltccbgfd2n#!SQDtWRg+rBCZWS-9bb>q_4L
z_xsffj#uN8J2M)A5(<@BLGb}(;aQ#Fr<b8jGji0(<oo|{zn+q3Gm&IdFS~Z`8l3Sl
z2d>oq6D#&oEqmpaS1@oaa0wHTSfT*QyjpcsOB>?HGZ9n%7-MW?f1iKhg{sk)jm~V-
zh9_L3-23beyZUjvjT_d7v$J#jNy+RhkpqCook+Ap-#q^=_spj9a`_if3~iu)giQC&
zJMY$<ebyH>gNGa>11S4onc#~rzS!owZ_!V{%r9ia;2ZRC&t8ey_@GAqamWla$MK(<
zmd?HA0vMc0Kli-z(sBA|-AWvkv>MCv(o@nMEHg^!(4oByXcERs)Rh%0F&j&uh=>{N
zWTdD1Is(r5=bx8;!TIN<E&6dW(ygc~Tvu41ib46|haQ&Pp+g6qsY*D@SB6ku%+x@Z
zo;q9p+v2|=enNme2}gan-!g7oI&1?@V5g>mOxV^wy?aalg9_2DTaV!6$&cr<g!BLw
z!5X;(C%UuVk)n*0bbkjdMLQp|Iq$r4({XBX-3riMxORP*%VUQhc1Uu^4jpB`TNaJT
zXStlhNLmomeEE|q;(%jXaogg5+VrVg&pPL<^uz$V7f5^=+WJF=9g?_s$&VrI^A<ed
zfCCbtzbYQ07to3(w*I~Q?t9g<Kc5Z#fgOXx$BM)kpg;4!|Goz0AL5%v*Dl=xy?gg^
z?HKoKHg(8ok+R4uxwPo+z@YaDqfSVH9)@~g&qAJJPbHCx4Zu%Kc>*7p7|=BTA~93X
zVKOXa7MVdJH#|v{2E)tpfA`&YYUX@#cJ)CA4MG1o;`Bj1MgKYf+i$<ETe)&o9h5-!
zIP2A`x8cjJ7Xm$2{;;(*AAk5!^$|xLCVlbj+-(1&e|a>Ir>!qrg8j6SxM$BE!M$K(
z6Y$|3{d4NGQiA)c)vH6W&tceS*{AN%!w*fy_6qs4X3eZkN=){tea4bq!<Dr^fhOz^
zlEm@<$;??b`=bv{`-hX^eJ`QCSd0C<xtA`L9R|$z_~Vne%$P9~9Uzr6%m3YX->v%M
zi!V|+@JjJ>e{I^0Z@>Mn7WFkmYuUY9H~$`c?vaQOh4O-j?KPw>#L9o#)ahH#!YSMd
z2~>TbGv@Nk(hoWK;H1T{A6>h43H0rIKoUN(h&WvPtBY2&mNvA%WDqV^{t~bq<$ud9
zH)Alqm(*{`2K4BMi(w}1-Fx;3JU;pHY#~^xMg-eIM4XB2N16H#8zH)^?F=Yr7C*Qa
zfnbUU`)p!k06C`onOiuDk-x1YC``>EOiDiSwZ#ADvuD?CDB2L_KFjR?Xr-&i_B31T
zKmO=L?H9Cw|F{vyC1J9H_M?P$wF^pu<MhPL&`&@8tUbw<x(c#xaQjj5`iBJOg^<OG
zKXNYMcoBUwA&iOYUo8K}AAfxEgAYC^6R0E?a@zhE<&O_f!B1z+LVts?0E7P<uD>4r
zy7%4pPr`=%OX}9WYw&6e_F?;-P+56deb=tt<rHgXvieuCb!$EL58Pq`wkdzsBX(Jc
zpM$xv`i~$b2>9W#Ql}TcDF5(jkusEg7*<R&KG6vX@d&Y+Ok$eVzt-UgXiE=mw=Gs6
zAX!4EpxM=zAW`GrWgG;UN61sjBux~q2)+n=?PX-(vl9lLn1IO_FWFLO*z+w~R4y};
zm`S1u1i6cFVy}eZ^6BgiRm11BO&WYqo75=lh6LUOH4$nK-q@6Kw3kc%B$yN#1n7D~
zUlk7xG1)<RTk4feRR#r!5bYcSg5n^1N<bWb*j<fx`4=@pCfUW(P(p;vt<_KQ3nC>{
z_*dXe!_=gXJ`ket)z3O27&VnhT?2%FlST9JK?0ZouTf-I22TW{scnw)!-BH9yZ+~!
z;@igUpOcZEz)$dT__3#J{qlk>b$$Eh>N)|TK<J{}EOo?WDjx75G*Zt=B9b_YpM)rN
zE`DNDC{a!s(pdf^Oq_+g4gAyt#V@ZOin$T~2*3V_oWP7J;)eKdx#gDfd+xp0H~f%8
z<a0|fkl@2UJV}EF4iw&0!nhKh!5M207)a1cknrhyV#>6N6Hhofg&PzzBib`;D&8@O
zA5v@iV@Ypd*36j}DDMuJu`a{jC;Zy4GV(hgefY8LsYU!Bef&}NU3cCIWB`cg^%y+F
z>_Pbu5{n-jlSd|uA7A#TKmIYN4Nfy94|&*6jZ66~eikmNEh{UlpD=zx8JGPr$ne-m
z{=zzihZM%#n)HqNXEH*9qYsW&Tm%Sl-~~@V?_1L+5gdTL<>s5pUU}`cHauvA{9kg(
z==9IgLH_iUPwG_ujx+p_Vaa=NU{7)p4fP*ATBH}WNQf65?ER$#7=E1m{5D%;ppS`Q
zP?()bbT2A}#-LdKg-?P(V#&ZepEb9G0|p`&U3_Wr<i9?e*99GQ#qT(6+jRg2CUl(D
ztJZ{YN^zujZw^Mn$=I6#qe+Ali4*)vi!FZ%Y6d^@2z9agr)A?3$`tlNP+$Y!$gSgU
zDS73!SKFke%897XCD{Api_hoO%)$UQnSJi>f3F;h13`{H=2%QI0t!Ijro`A#TE9kv
ze<ht=1Rs`!&a9d8#1k0E5~ic|pEC-LtXN6<^y!n(XRqGSZJS>tMxi*BTen88yZ*Y8
zSovF-0KIE}NRLcZL?Hdd&+>=7ET2*Q1SW)<!a$B;!-pmH-lLaUPEQ~rG@W%&l>OVq
zLAnu;6cz~qN$FlG32CIHy9Go#mhJ`#LApUYC6;apX;8YGrP+G-`OUn4@66u!?0)lH
z=lUGkj=0#O6q=w>H!fvc)tm22lutU1${E|ei{d*Y8>V;VQOK+W8PiG6ny8>XoJ6Vp
z!(emE^0k7&qlDY6S%cW8Ql?`0%^kT;FZyRA4Bjtoe-%nI@BVB<=o*Gg3169GVbm$j
z?3wk_W~;m|N#F%_1$W<@?qMC6F;0Y_>e?37`>7O-)>m|7V<ny`@?8{Hg@uS1b|p%@
zgAp6$Qiz6X#ywlO5*Jb4Po%7rMunQH(#`EqWkDeHj4jIjIib!qDHfrRi)pj{b0{wE
zD|0Q<*Y12CwKwbj=VM~KGjg-<3v1q{)gaNsQlIVtEMsGu&TxGP^u*owC4VD$LYbpS
zn;mrCpb++h=~JTh;W9yHy+_NHR`oh|%XVSE6z>_(CyA{EOSvI-V$$$k9n^^`B6&<s
zWJ>zJ>+4XRqkf2u-o`YthZ1V7oHO2!iCY?Jx>@clHYZM7wdZ=H5$&piz>DE?dZup8
zA}t%w4eEPW`@$*>Cc=dbXI!7gB;~O;%Ie^N$x3b&!LC|eVxs$!-f|45G1_!Fz(}*K
z-+xL6W>dii)m@3O#p*x$ldB(2ob?N*H#}^ye4^>HgqyYay=eVjfq$`5O@i(0fHYK%
zrFY2L%kQ_7-R6g|eLcYh78Q~1_FW}(o-Oj{l?9B}Ta4`jn#6vfFE6zrdu6bJ6Z!Al
z(UHy1Z}46dMHIO!MKvm@lpH0H6SSBl=Q0V${c0@Y|ANA|XC{-E?MEbDb_5o=g>Z7^
zyViC4StQeVEey&P61_@ndf_%-tKwByVeyzlz5aa<ND0;)EJ<a+MEh4b5Xp9pk$VXU
z+bFXs+8Q94odct*evy-G&hfcgQnY{OD6qXOU)+7z?Jb+X{!$W$iOGUcM;2k!fDUi@
zW6B;BZd7K}j8xiNH49Nl*TOlBO{i$+-#JHiciv3Jkb8ty)Wz>a!l-AwMSc-)4REt1
zYQe)f@nab#3jSV&K=e?lhlRjHa6O-UvlQ_N9h$_V*(t5B4yBO5u8jq*d`E9BzUU$Y
zENZ~>Iq<0(=LV%ck+6Mwm5ml$zs<;h6ap35;Ul%uCrU#D7$H>3oIsb<dmFoMSJ#HP
z=F$ArsO8jX;-dTh^Tw+v!VyNFLA-~s9`p)w4D8XoC8dKh8!yTC1XYEwEBA)eJk+=x
zCUhH(j)710Ku>e(0YR;>7`<OFWWz`;PBjLjUQm>3NZ)=9VjSh+CBZq#bvy4k$VuuA
zj|vPg6fqFe3=1PljRA9@ijA{mg9GW6I&FEuKMj9<J!iR?L{*07D?b$Ilu!9Q|8rOF
ze}CRbBXFseN2url9ZnF~Q}0Bl8Z`e`5Q0I5vrY9aVLW<|L~2`(;#ug-bRBY|6WMlJ
z+j&0O|AxxYuVrZ+%Hp;;vrS^vPHn{Q@Q8-_%a@Y4mqs}aO@1f?9L{Hqs_UUxymD#&
zx2xoA0c&?6>xh)+r^T^|Vu<bY-L|o{P^n)wCxq#Fuj0QNm8Raf!@`2Ftjs%<SuGDx
z4pMU8i+}f3Jnd+3_HQf(mtq%4=*Hn)4*mG2-lP{&lMxhGu+F=DE%OgQ7Qym{t^cw>
z;T3SZ4*sM{q`Zb<#d@+zOu`(n@)hn#jh4&;S<q}()*bK_dKn(OF$`bk7_bJs1BrVc
z(JmpGutd|@zM?LdnOr8n<k|GtO~xGso}!X43O%O8I-@;%N-zbIAIo`&!EV&wIOde#
zih!x5LOF>hwzL;m>ST4hQD$QcOhIuUUJ&87k^}h+O4P<TdXWmBXLwSmQ*_Lk1lLN@
z7Iw2mT2P*4H3i9_A2O$=_RkmwEe5GqqPri)$F1)em|ncRyBxTa2%s03A(cGpd)xzo
zddxjMh1#CaqB23n^O(d>()z1#08fSTny=#dcW2Z+zo}NBv4_{QZ!Q-s7~+SQMeFD@
zd&%cz{b+wA_X$lA8&dxMeKnbu0XxL#G%m6mXsy98On~$hf?d8(C#)J-r)tE)hv6!?
z5xL{5QHGSgKuaZ<PF*0a-4*DB>FU#c*D7^#s^>{g-rF|+DWSezljb5#*dDE;Gja32
zyw{=yGHHy)Udr4-#l>FTeYDRTSFUE%=(|`>$C=6fvjXburL~Zz!OH=@ZSBZ;!zss@
z4;l_xgETrmZw|&Gi($?znj}`&tnr*MbHuz{VuvSOrZJHIDS~AW!whC*+d3{6aX~h^
zSZJ|&qPmjqN-=F*?J%p=&S2K$s-KPca(pY{;U*tHeoQhH8X{*?=US_`D9$db<B*S4
zlGksr@qim4{i=@_*M>8n<8E_hy?>~#u4)K5iOFFIdPw0$iTy5T!$frb2L9FBn+ykT
zk{oy<7UbSfd%o*S*L=mwGIc{^uFE9x0t}=SG0uPM-!|G`ZIjx4PXPsqEl|IX{xbj>
zQ4aJh&+}S+9WYz7&-fiTg^&jJKztN%HFWx2M?=bU4y8Cx5yx)2sv{P3Ma7K9WZ816
z1J2TpL2@u3FW;~ceUlh>#xTH0F|E?9;3OEI?fW_u>R)fHQT&$iuyg;r)7Q$xS@2JG
zoe5xz*{z1nn~n;q?FRM&;>~>Cq)?*1Wq+K*LndP4d~;c7+#HZ_M){3t0k9S!(6I-?
zx|5Sc#g@jRm?8^5v9c0|SCj{nc&E0OO#OdCVmXJ?H>(>6jrnza$85PZB2LF~lS=wV
zsHktN+Oy)rUL}Ll9<q7$kYW|~j~l;q4_!YZFK;E{`^ZxS@HYKd7M4tZpw~?xiBJiE
zv8<h?FqK3%%LeNX$OuE`)>YfTPvTyuFGSz|)9m{=jG*|utciqh^17HLWNXT%aezX~
z-&ueMrchTq!x+|ch2`=nw$3=!$q11F;!U|zqggi*R7_W$jxG`W<H2^@G@9(>N6K{O
zva(KMw4pjfn!^4$mPvWV$0fmJq{zl(wbX68j)(=A(pj_mXb;~}neXH;mB;>kp4V}u
zLO$q@##V$qD5J4#I7A}rRcco6)rOzLz4hIY@PnddaO^Q4@8>S}@+i;@$!7QIRjj&i
zz%>Au8Tj_$%33siaB{QQrNx&UiTh4d&`R!6|Fh>wa!F0i=D6(;a)9L8$@S@9LTTv`
ztKcVd-IF)u8Q(G&H{#_m>YX>3Ja08{2gpx7tWRI)r*GPHQV9GiDWKgxFnCTJS~()a
z{H;wE@DuSI$Cw#z_aiEh$M0ba=<-PEpKFQD^W9%P*V3{>+~60EpMrEP;y2XM6c?wD
zg4d{r0wBVnkC6EnoWIvi$kuG?KD4~ed+FW}F-v$NG&P1ZlUZs)>ud%f<#9vP2a%Av
ze&rHETb04LVkX6q4N9aiGbA>PlaupfEvD@Q+h*hg_xo`${+co$QEnW#3Lh>vj)nWC
zx&mXH_6pzxn&rV=QyP=NthxoE+73|o3Y~bvux}`IP5!lQvL);3Y;_%28<pZ`6^G$-
z)B@q<<@G*thy|sW<0d?@`PXr{^n?58qs*8r$HBP%PnMuM?HlrO5ef^ZMC?5cH_YC-
zuN&`yTf&5d{Df0`0RLZ+sJx?vpVfLlg_}-jGeM$c+cLbmb^{DNoWWAzs<`?kHDiG%
zA~ghH+0Ix))eMkwe_RUi?AXY)`=^_^eqYiT4D)A64m4$nGO!Ma>nMmT=(S4)h~3o%
zjS#_3DcAfCXFlsGX{BkE$H|hg=0&7gz~higvlvr;*-g^zso6!Bq3@Jf^0c<tVBZ2T
zGcyap`^a<w!)q%DE1_m{?w@8XoH@>yXB<J5ZH)tmzUfm^x%@4_4#iVL5|rmJZulMy
z{-F`D9U}xhL#0UW+VeDZ)^GJmyDHpTjU;ks`#?=>=n6hWN1+OXIh^CnTp+G39wCa(
zz3I}KRDuU8?oXN`3;_Fy36<Xl-}rkWyqw%W!HB05zQbDz2{dj<9USme{15Ni)E!RK
z$bd7l6sg*S>H>)UZN%gXzE<D+xih@Oz3y2XuVkmJth{^dRLi6AkK<oGIux*G@H)u>
zv_A<i+V8^wEISvp?;#hud|QeY&3-wokmW6ZZm5V~!QnFK={k>nt4~=B<}_=`js#HS
z{eyj<M^+slkB+hBY2IAsGpzSZ-#;ZpSbRM!^>K#BHE_7YNyZQGmx-FqZ0I(V7C=S1
zlqXjy;39+>*ZtaX%)ex}1p^MGzG+Yg*#!q{fLX)Si2XJ%Z(T*c&%t0LjeuQI0*<QN
zz?1zRh5^tJi7t03QiEJLbTx!M{Tx>MyD6f<qz92@gw@qn=}Ls~wPIv|x~jGC(6!G%
zT*!1VH|P$Dhey}}qX|Cu(78?GC$(0=F^|@{QQ^8C*+Py05f*mmuOe(=<<6i+7nuD9
z5k9xobEXfkh7ovxRFxCJss&}9g-PYsw{Tqx3Hpf!ZqOU)@xBERx<Y~4GT`(YSBZOv
zEpPd5qYH@}WP|`%>W(hHdHE1I6S-&h$&@k(83xk-5xBpSGsy^0cAP~ReD9Or?Y!tA
z3A~556$&}&wTL1Zzc^_kp!ffPuUJ`MY(%lk%AA-lx=<V0%m<&)*CK(+NW!Mhr~QHb
zh*$AFp9>h}h0_Z>xfCR|PTYz~OxqGy*~q!G=Uru09VMR&B1|-&rB0`$?*@ZEEH%Hg
zJ9W*>puKrfvuxaEeMG4m6uf=$48{^VMXFp!sxs}01tQZU&yf+;;n#X(W5o^t`8wOL
z{dMMHEweIPjmku<(Aj9b$Na8()7NP=VWx?qU9o_;h#*&-PzL`y)y>YK$bO=&mXoE(
zOm6Pp&H{;cr&0?W6+P73d@4qE#)3XyPNWTAveLS~m)_V0P%Ux8+%4#_SxT3YX}hjA
z&m7LbLap4-ln`?Qf8c-f>zZrAcjTV=-BC5I*;%@>RgH$PjbwHsR!>%q-eR6A!3LE$
zTZ?a!1UOf{j}I@_fBKW^+}Ui@e&g(jcgLdLZL!ar4bv;n%ITYCb@<nLkJ~z6YGi1*
zg80+ec)7aZ)NkCct!?Z~6n9u041MtpM0O|A*9e-NIwBto$F{rbA1YJ;@>C6cpfGUw
z1>YI|3kbTjkjP6{)Z0LA!mCbdJBitBXzw|<H%ha<FR4B<qdN7TV`FdL{1p#if$rzj
zHNf;T{=NNB4FyQ@RZ^WA)S3EYc3`@}pKebF=B@Ve@AjesKcfTf3xeKa{it?Y3(Kd0
zBZ9+L2=V;Q@kH-_UUPFB&_3OrxSohEw{u>mMcTu?9yO=D(UD+GM04|3;Og6evytG2
zEkIMZgxj<LCCgnk=T6i&6ISHQQ;+#-{W{EJ!K-TucLs*Az7A62&nf!cPRN9+>{Knd
z(?($!7{}SM^X?2*kA*&2L$Wit#h1C9kxp^KD1erO`iq@@mq5b}3F%?~_;M<w?sg`p
z#_ueEtxrPL^R<)%wM?u*58g5yL6RQ|V(dNPR(`*J`~(^M{U!2$-a0~wEBY`zZOHI&
zNwclJZaHdaw-c34dkf_2oZkRUc=~1yEIlxG+HWO23|j4f{`A<|h?qq*0bAKJ4vP%}
zBTg2hmMCk9xWnk>fN3+dTO(h_Ze}x0#{-|eooTB$7YrDU5cxy!AqdA3oBqk;b|c_E
zfy+B_+-@lYq^F(%sx#f3SU!+lwqv+ybzb4mZL@tXpc(S15R^@m-6L(UbAOtUZB_BS
zdZ`xw1s4bIRroPGsFtC6*PX~bQn+;o*Ah97c`A0iQ!voB5rhHd0<dKzo>R?&7Ckd0
zGET4!_;<0Q;PZ0Quc(PL%gV+9EFUC^s|d_r+cVua4&%UA6(k2$ioKMfid!u#AQfR+
zu+uHcm$cN|%edBev=XKW8C8pYj_I>CZ`}QZgU5E(g#f}}tD?x4%TFKDk-GY(+3x>t
zMXU|H3=wTsM$!6a3i<D<f6Wrkl2+9lEyX8q_kXGasZuZSQYH3_7!+M;J?_Zq;dBLA
z#fj9|+dT^@_V%^k8`^IfJ5#C)Z1r|tVm389Q2)^{`aY=JA~qgFYK=-Cd(jQ|F&blG
zb}ABUv@<4-NZV($QcUzC_s$Sy`(Cmrmo^EQ6aV?%bSemX$I+(<p!w^CfHi*i-r)WF
z1os~DG<qWo5qc{kBIdKVY?>WL>|E^BQj#pX2cS#Ohq}KqEmG>8?oWahrI|kJq~{?n
z5^q7H$$c?@yMAo6*zfYRZ}zL1{f5SxrAt9a91DeQ+nSKn^Am&8Y)4O5Lfg3>cPk38
zA{rNbla+S8<>rP~csk~t<@PD_g(>u;1qfcb^S+b`ODhB7bvpi4pfYWCIM-j^5k8iL
z-`^lbN|8IC88Us34nO><TqdC6sgZ!+%r(rb{jfvs{hN;s^R7eq-y%hHk=+Qh>m3bL
zNZJG)fBIUf+mI3_XO&*~`$S3fyIB-Rk;Dhd!)3gbg5Ob%^A!5hH|!(3l%F-9M)_xL
zy_a9Cn<KAzFoI`<F`cAe3&gmk4NjtsOe!T|wSDGeT+7A&_WJhng6nZ7Sp2is+09u_
z+92RV=`a3|W^vru{QUJT6vyGGEOBlUMfdQ~R7X_>Swp`)*N;ZWSe~nMpsEOcBr3sF
zq;Yz}X$Q48nO48y-8h~4TnwL>9KZVKv!h01$?eX;!A-<#+>XXuT%^5didrgDNq<{1
z%UUVj)475!g&6!Rcs930rMaf-b{GL2>n0Cu)!I`Pgc8;8>n8ws9kEoA!d9|-u=`{N
z+PQUH)@=&ctqJGl6d3WI;})^8_x^K`-e1dO5IyHm__0=9rmhQuyv;zm{zD)spi!Rr
zFw^LoQ<Hk;_w;Sz7pppY=w9nm@F?7_dkrVD?t52P7<#Mhyi9zwZoF9_k~11k3MCOm
z^Y5ryC}s^fodr9`RKhF;K}V2s3j}NKOA53>pN@Loi<eg^kP!vR(+{swe-%t0KM#>j
zthIM>!f^X@N1gS3rHbl&o=-GR?#0vqxM`O}D=xa&QbPsrDa~!aA^j!R^s{eF*A~3*
zMzX~{In;sa{M!qhAYBVx|4})q<no(Wl5i^J_7}N+%;U{#^T-tD_oXj`cAt-dJFmPA
z^Mjt0Z?^%N^WQQu!aF*UqtBUj+@3gulQZ!n(i{NQGl9%4dX0XwQ+{_Er-V+cpXU&N
zy*C1vt(3;|MNU>+9?G}<pDq@V`==Yx&qvq*zPl+LNYCqwMrr7c!14mXDXt-kO0V!i
zG4bWM?;FAZoDKV-=bfL%Y#=p?o%+yX!kl{%mEIkI*HCMvrR8!|1kSlW0wLq{YSkrc
z>s_lpf+B|79DleP3D$+%Z8g@H()wSRtv|%IB1PjX%q%UnWAo6W>PtURF7;e3()|K6
zb>c2c!v5Tuo!-@gHwRxjAeZ&fB;dAgytMDCNJsB56E|X(J1swry&)YOF;KRebF6s5
zzvC>fTuGD>a<V0|y|M*aDhfq?W3Oz{<}24_<&|f~1iz;T6pr2Bjb|)4wSKWxcJ}q%
zbNz3~9;WFdTeJ%^dP@o^W1fFdSNfVLxjkx)C~?ukD8D5{beK*4^xf(>u<>wS<Vm<Y
z1(Z??iAelK_?{&RLmKXk2hWc3=S^J@fA^>6fI2i*w|i8M$Q6wk(J@hnhiK+RrTwI|
z0N<LtuPp9`t|;rL5DFmt(py@@#=*IYMK-G(nJ(|_>vs$I^B}Ye#??EhXoCB~<z1gi
z!Kq|?Zq0@m^`{ZOcgQwZ<l9}t$Zmi5vP`Z-BK#4FsO!&lz00pe4x3+8(X|p$MO86&
zGhJ7}*<;@B9NZKqv05Fb^7riYZjspXYt5=-^{?dp8B?3vitP(sc0;X{4ElOZE%_Ws
z2!u9QzP+qSqi%BW{NEgTs3?5y95Sgca5tOe{HB%&8Jy;eMBInQ7O5>5Gg-xA_vFWH
zaDp_DRws|H4G84J&h|`57;)9~=%5ANIO7}A_F*6n?2Wtl3Ns0?YwxH$f4$0UstJ?_
zzh4C#bZ)jFnTS4-h%?hZc<tO#2^7nP5r>=n9+j^fa*XR~(NdC(fNcSRjgLp=d9@`{
zF)2AGQ6s;{Bxyscmyq#kar($0`rGNZY+*W?w*uYE_!saGyIZSjb%-3{!T%o8#?9t3
z?Aii{I-dXiWf4Vaq`|O-usQ*!ww=_8#ut0wvKhLB^HT?sGSw7V(vi~HR-`M^MM^-4
z%9=_GiFVk75^IOWeH*i_nErMR4}2A#WJyDP-Wdflf{fU=@iI%z=4aE~l$T)!*w}bl
z5S}i0BuP`|v4QlT)tb^Im4i&-P2#g9@ILJ7l=VPAlnA{j6|7SM8&e(&%B`pP6gsz_
zK~*y|_gxBlu!1z;baJkB=`ubcM+L@02@11XD~FyAT9Dx1h$Mgz8r#}-^94g6tV<H0
zQDNHl*~I54wX`tw1(s;;eBSos+U~{)$mbTgh}hfT+bTJb3N!xE)L?HFC?gYM7`Sr;
z6jZ4GaH_kiokA37iX1or4SsF9`9XDTNimqfZ=30nBMBvU0vY2Sxy5s`)gc$ep+@cJ
zRN|g(R^{rFPXWb;9&?eJ_~cYyWEGtpIk9&RsacOEe^|I_?bGeXh=>T+MS&|Lm3AF>
z6$||!_cznkAgvr`&(PsW&w;-**as^BA*uxDNIQ_O%&D&Dh!d#mj;+Vmz~6Gs_&Dx%
zO%!ins0o+{PguaK!py7WN%$IhWckAmR3VWEzddyg_+5WHwradcbJFHc78z#;GK~62
zoQ{`k2l{A2d!*WxVfgRrG|3LMEi|ym=Hy{eS+g;$OwCER^WPgLoB&>fU`*xbmdfF&
zEK7$~xTNu}?>`2xnu-=|%wzFen_%oG&qdHk32O-~<H}}yjD3Ya)<5)b;9_iJ4)~F%
zlDy2)=a%FRx*@fD^j5(JEhXONX;L&g)igr(t-St6i<<8~XGu#4KR8K4POHj{wGSM)
zR=atA3+zUeFCi(a&3R8Xec-%xNQbA7&itG90#-)PFW?*BBA1Yn>?LXokqh{?-WQ+`
z-7BS3;LpsiZpZaGmF@LMf3DJ=i)AEp@P${W&9^Vxk;jKmj{J?5c}+)Bx4UOThNnvP
zGEWkg{vw<?^?LW>2=KM98dO2iYFhB69ebb&$V5Gj=r<h}tAoo3U9FncA<?0|*n=O5
zy?({hmr?=WckWYYm?9@eqxi$jyAU`FQAF|IKGgL4oYmnDJAo1c-Ca$gagN(9U{mOX
z-k=j`#cQTv&SLes-<8$!`4W<Gqw}wYtXbC^T6|RwrKl){emlxk4tAP<X`hqtB3SYa
zT?(tR(?;LBKTD6<N?sqhP*E%4`SLtp1$$)72U0F63BNwhw*$p<lMZl1%G6+<;Lz{M
z9jut0IqL8b*~q;b3h#3&wUtxr8uq!P`ch!c&Waf1<xj^oE+G%es$h|VU*9B&zcblN
znp))dv+S1#2}TeJUD56=07pYo3t<oB;89H`x2t1-jjZD1jPKpZe*^65l=n<lZtWfO
zb8_su7Fyx?L8tg7#5>}2!qUO~2Zczokhmp;=IgI|D3csW@Tj)?$<SHlhp`O>!>a(s
zE7&Xm8n2i*^2<T+n{kIiP5dma=yxg$*pprOD+cTp!BizJMxwV07XA;qeCe^=B>1Cg
zppS|l`M=!Wki;^1@|9^HQTf)P*6^qdIidzTQ1=~bCY07$_%S&0bt9ri2hY}g{~IU@
z37gX=pw+zB=X@x{fiMN+>M5Tzb_rSXUQ;6eEO^NudAknmx+l?LwP$zWRHKineABw#
z-ujK-N^LtSh<U)Q364bt4kpkJw{Ky5mr_U*F{goEpokey;QeAZ&B!GCL+SLhuqBER
z^g+8wK0HaKfif-FcQvwQNroV1;cs;>@=^d;`{Uri&N~DG4rS9$SD+JFoQ6A^p0)0R
z`tjIadtb~lqqS2erYi-qY@2nq)}Oa5nO3gq?rn4{-fzwn%8^$RoGel<f&_PpkMpZQ
zY<X_7D)$Uh7~{ZK{ULHMnNDlWnqJ?GJJsn59JUpJ&Q{w<ZUDhwa9rs`J`;j&7xY_p
z4ScST0oC!MIw{UC$Vwl$)4}zq;n9{`_-G2<SwNb#z$IXp%&8Jz4;ft``W^?1+@@Wk
z@)EWQRI&Q1l02>dKDQu7Zpd?s5)`&N%zg`<4WUM@IApY#Y^}wW>fK1Mi1)gFOR~q0
z(dAYeQ{<dr&Md;tXw(UXoodae$%ZcI3q`xMAY_s_OzPk*!mIws=QhEgsB^IM^^pbi
zr(^ZC(R?LAF)pdpFIF@fkf!kKQ<9IPP2d_c{?(A`2aqAOc)@SUENli#3%g*^_V4$X
zT4Xo8SFS`~YBG;>tzTo*q>)^hTGny_92?MpJgio%^vubod()i_ZrIrUDO{8egdClm
zh&gpBp}p0U+UXKwJuWi_TCp!5Q{FoK9!D0%@v3Z~PH*Jw`aquBbS|uDvp&d+SM-N#
zLJ)wMrS&*UyiSw(J3)Yd%r~Qt!K=J>4gnvg#?9UTv)jPjePLVi5g)f+zXrD(^5mpj
zvj@h4OWZc==+uJmo>bLY*j$U>Cve49>vp=sozgNdfKORgspez#g~`B1zlEx&>?T{?
z;@y>q)uTPYB~I=@lBlG^;pQvlAL8D3-lxlNU$Kg<7`FBBH9PKAU7{|cM)#{Hb-IgD
zVwl{CRd2$#rm7f|Ld^NTEL%je0^&p5awGH5L=oxf)&T6mf$F6i{J{I)-kx<mcaAoJ
zQciqa!MpN$Sc}eZB=;e(lyZ&22j;(rbXr29BvGMar=`yi%e3yOSca9@4J3HO)z-w;
zvn(iXc;pS->jtDQaVB^}Ui;gc#7S)RL96(^OMK|-_cHZHH{j0<-XHYZYE8m+A6?%Z
z%uH{AdV@n^nBOzx|7rQKWPUL91LN<|=YPLE>u)&+F5u7&-6p%~S}XJ-OmAgqlfWse
z<t{J7@1N(Aou&>xzFxRGwa^!<nm4JPW{rrm?u&Ii#g|_4{6ogNx-YU3yEm~Ww}_Pd
zjn{7TZxvr-1w42WxB1;3U)E^Y>R#Z(en@!Y<@!KkD&K=*OkaNGBa;F59^4nlMa!XG
z*3idCU!$-=`qw7tzF7&M+p3VJNVeKCzrBkius+fO(}LQZbdOtw!Ta9>`N<}aC-q@d
zt69qi-{<JwG(jo|`?v+Oy!dQQs`~Gkk{Rl;31<j9hS*a$=Px|6Dh?A&pY&m!tIe?i
z*S%MeDt$P`tA!nObyjw=1m8c@yAcJIy>9#^6SJh!TTCL{SnofG_H#*xZ#pPWY)m5x
zlS>D{p@zIHHl3H8NZFz!EB2rdjqBgMFun!I5I=>V)TtqlmEZ0%moi5%<tVmqI~Bqd
zs=!_dT`BHPrpQEk39MRb31N7Nj=Hik;p>M$cF?DDECR~;@pt*r4hI>?_8iwKNxZO&
zjukQVxDB$Ejt`leGC0IuQ=&VBb~lH!NB8ip9*BnRRF#F6&^*|EXV@n93q+Y?MXUo|
z=VJ}QN5k^}m_V<>NL0jk;st(ucyIO{5d}rFquk^R@$9sC^oOnWkHCRlunSbETJHS(
z$5#(YByjhM#=VLDqMo<n&W^`ZE}-DL$|uEsFR37YUd$L{uV+EMLJ380-^5}pnHfRL
zhnT+<%~Y`b{D~}sGQ$B!7(x~xJRc*-^w{rP<UJCmu{f(p|4mi&6m&&wA^xw^lZ2Sg
ztKI{Zv04@gIVxWuzi2NG7>FcNwIFy{T0j;!s;Is4hP-=Uv&QpCPW+d64+Q(!W<&ha
zhY@%#mJ|D-e_HZ-a#2&%T9ZRI70kT1@jUDoN_|(BI2ugTPD@J*XoZ2^fvhOktjs;$
zrtQ$j=WD+d^wIo-TB&npHIaOi2ZE=dWX#y^=8|Rxj6e&@5=Z9RPA&Kb%@dmfz0NCx
z#m*vFi)tI{(gC~hf$n?*HjmGNbm-lkY~V?@%PrD`H_CJJ-KC1>&ZJ5{=@eQ{Y4QXA
zn!lTQd~aY*OL7d(f3}U0Kd<Z-Z{mzLH?UCyGbGcdC4EKbzvS>-3uWF2dVa$#lEgVN
zF+GCz40tOxWoY*!O&H~;rI<Pw7-J=25V}xL2ZF^@xoGk7X)2oJop}-NZHb(}N1S<H
z(f%9#FAc|LzJmNx_((SNK%@v%7H(i06x7{f!#YWecmDdeZYi%j)T)*`%^l`GQjQtc
z2o1goXx<8e99OBoxmV{!lB<hzu=298y|c2tT4S1JDndNwo=f>*0-#_;58m#ZKbBl!
zRW>ioQ$pW~12PKBEt8X6_k8|572+k+ebcj0%$34Dm>v1T+i{a>$+fXR`5ddT_mE2M
z?Uuw35DAzKbQr9AYkTWT(Q0Vk)c@=9>7-7do6~?Yb^#Rn&UWG7k7WdDlDVTMQuUB$
z=pys+wwJJ`*-#=2ghg2S6o{S?hmu$xNj5?H-+)+Lv3ShK_?8lncHpBBWfE(8N$ZM9
zredl6UVQW~#V65^qw>a4gmf9Oav*#R)b~h55p^QgV<}%Z3ZjRUtK)C2B7*J3zw~PQ
z?SAgRQ68eBOSG2gK`zv}g2QFPh*cXy0}&UXrmz5>z{pzqP_RDljmU7k8sP2r!>;)|
zyDOB{fp2nxXEVQ8IW!h)CLZDNHiUth@wWv_zj?;G*D*NcXgu=}D_x;A?g2-=?_}#9
zbtKJK3ikY?=h+s-6dnZg>VmV1qum_?u?oMet3NsooA~a%1K_KIuMGwv-HJ4t*DlOA
zJmZ7IVP~}B?{XUw=bzp<qWmb`cND7Oo0|%P;k4AcG9=&ys@QhcM~~J&ih$_~+deK%
z16s!fSZ198!}b@AO><$pnF1M~G0P8iJNTW=Fd1}--&}z-o-8szE#$+uFMF|j7W7Lo
z^1Yc{J1;K#Io}!%!8}hkLa~7JL9p48#+NPT4l+L8KS3DS#7aK<m39z#kZ(7c3ICm<
zpmKA}IQKJch2r0D#alg2Nw{fme19J=6!Pu|7<PU=+WxhjnyS=REA<Rj5C8nhOTBf{
zYUq#g2At$?z6WHioWf<L5z9kUS4Wu+_8{V>_mlYdBV>a1l=TG<2REMQ#Uis0!<Mzp
zL@?8qs-L+wamFQu%g+il$FXwfH<Kn4;3%M@t>j~It@2#rC-$cV9Q*cBthZ&;y|gsd
z$biP$(mRbt^uMlsh=uClUh&<*Qm^;85~0XP;3P>P?CmPSsOKYO?}72%1AkTpZEVy(
z1w^_`E`r9wnFMK<>+W}~NeHP_f#&`+;$%V*zm_u$n`{@uXEA8Rzbb8eE}7({e2d8b
z$3FU>)4%H>^~0YswVY3d-{B{zKxnpr^miF}jGI4Ibq*5m))i$MUVg&b$D*D5;<LYE
z$Eh_q99;1`<yle#5U7hpW&M!`pu(80wWJJ{6O?san1bf4n?@RRE=NY`O>6WF+6(Ry
zMAmDx?_xF%B=)nc($Z3`*PP00Yk45&ovv2XE=QWdhtU{DC^;EvW(CLi&0>_Ey~nV_
z0&AN=xFo@EAG}#NzX6Yj>U5F+wEqq<oRi4qSQ6o1tXi&+z7?MT=`#@KrG`=38Y}XB
zplnglnIMJ6VL4mD@8QPmihpr`??+0*Yhnws{y4R$<bUKyR06T%Wp#_CcD7(L^|ORg
zdD}OFJ_)cZqVFURcFnLFW8bA3VR<tC1kBDtpb6r%0FM?ey?YpUwf`G#pRHUg4mea-
z)-&aq4E*(t>u`KF`+aunUz4Nyx|NDSX9qa;iJ3N;o|*+Q8xbA>6?9z;5O688V9w?8
zdvZKgXVB`SZFwe$og$ITxVhl->U`x3*KW9%F6M_CEr!s{Somp^hJFw1Pn_=$aZfx;
z$Ar0Blab!~uqf7^>vM^Km`2(-n|E8IMG*wYW$M{_S9fc!`b*bJG-r4Xf=-CL$+>US
z;0Mbb9+O{gwzUJl_o9gCG9FL?^p;5<isDw^OWP;^DI5<K%!9wkmL+=vFoT%iawK8@
zvG)BGQ^n4Db-sdV|K9TBtd7O5J7O#fP8A|s%jD`|xBQtE<Xjbjc(XhV<X%nO1-)J+
zfca2=YX&{@7x{@~`lP2n3sm`w8z^x@V#If8j=w}<4jM{DaXgZt1aVV5W~Q1gha&*F
zX-T+hPq=vtDzlncrT5)NT_f_XRoU7!MeFZ9sy2|6{~h7~^v_l}=y6ZKZM&F;GwDOl
z%$tRygEr9E*jP{nk+~Dm5TZSWMEarL_EH9i)z;d!2)tF~DJ4M$hLldufbD0CNc9@i
z`*=eL{kMib`$8|;%$S_~WMpLQ|F#>^xE`&Xoq+M5ZLg}G<&OY4<Ma`Eh~j_VbfE9k
zW(7#R8gMwlQ~N&S@o0AoLHinUityJzt@d0VS;X=4jFQJNu1d}L1a~x*7)vFsKZkT=
zjTmTGg*&cT=khc4PnR#a3!U0(@v8NIRvPgkp_&f9Vt;4`xi_cf2i7n?tX-0wPEY(M
zNKa1>_f7qW@0>bGBt*N-W-IsFA%r=mY%e48bpO%2^1wgti^Z;mjJUcj_TiDT-zxOl
z!viC0PY3LCmDIwiUn>YbQoN!Q&oUJIiyc%ZQ1p)BN~qt}Tzk|Vl4+^HkgXU#K;SI?
z*C+xgAT_X5Y&RW#cgA=C3jn#hE5noGK!jET$E4J8=;iAMF#hKs29F0)sr)GHGI@SH
z3&W;Qr^b)Sz373eTMt5J?D_56g+z9pQbB2^X>=-<SInK&pjwgd-)|lu5J&*@v{OSn
zbIJsMviK8k8o3oUQ&zNH-@A^DIGaW8U&g6=y?dl9Eerj%m(*>;1c#C+p)B)?Znsr0
z3bC%K7Qba=rn-u6nVn0Zf!}>Bc<z<aVUc2FQu6R=2BaJZ83Ag`9KZ45F?wx$JhtZA
zZ6fw~HTD7vYeEjyOsk6MMS1=>kdZdQggnTf9H3Vn-(dLxkTE(D*ZsKnUxVHpHPv=?
zbs<PdR99gKQGlt^!d}xAltb|>?Q*J<{~cQw<Ijr{a*e;uG)=I>k)*BNY_~1XfYQC3
z6E-!!0vL(~hW-*;Y^ulqVjx7iYw|;e?FmREw;hh^P5Z96i#3rkkJ|MXN=M0GL_A|u
z3e%UTj@sCCb5&ZihC8wQV|*<iGsBwaN2)SU3fhB6Uycp+82vS?);Ul|Zw5#=)1(v?
z6<z)bE!}EN{qpm=zh%=t1++|rl!l(BMR(Jne$m>WW|sq@zlzip{z^3)!qQ1zhRnew
zA9L_sZ^O`5@)%~oAld2je_{4Gas+RgOPW8fV}#79tuP_}c6IdzLC>j9=TWZT`g*>b
z0oY?<ky_3!r<w<(t#yRYhBjycr1dg>agLIYA+h<AV;tCTO;IBQ*VkQ=Wcj5Gi%$0T
z80MUL4<W%O5A60kdoI6%bNqI*m9o5<*R+x4qtS#b2TNpD(XECOisDA$pajTg{W-=+
z;(ykyFFVa36(%MoCVf8lzP)-Dr;z47@ql2DKAJStOb<77$ufF~_Xp9K%4#^<U+Uhj
z4EF1n7zr_3S&`|&gGuH&Sp{gC&edN-la(7;*w|!2*es#>Xm-=Q1`l#34jfRcp94u4
z5pJJg!Qs}EqTfX>PCiZcXNK_!`b!3}E+~m+fLJm>nY!9*;xJXE%D9_g9>(p~-I1L(
zm;k}J&O=ltW59nfRn1pdmk~l1gpex=t769Zn1`O>48k}{?wU3Ki*E9EgCY?Kp8%sE
zCz9R)6pmk-X>YPb7L=xB5N3wSe2-Gs2L}t9Mi{!u?2QIeo<>)Ns!u@1jm<p9Mo!_i
ztc~3d9f}OxIP`Cvte<WiUX)R@q~9h_t>*6^19gH;)J|W!)*zLJwtU!(sl3*MpxkG!
zT%5ST>r(;WFgNzNZ5=<KmWK#jkCh_`)!7&BJTh{*cODO8bZN6Z2HK!0C{@VU!x`xr
zKs8V5m5kRq$`O;LHrZ{Evj7TP8cMSJBvA?4jP`yl(>1-~e<9t+P%pQ#vJ#R&ClZ;-
zWlHv`!;#fChrja<{5=&!{B#X1G}&i}qr+c{SkC8t^X9!7=O={xGezrXgwoqAM}+r#
z`}>9YGeXOyPIjPApWYWVH#g^%XL}IfH<yRMC<jei(}&>ljf(M#j4b{1zsC%CPyjK9
z!4v#$M3^QrxWi1i6Yh|-n{C!K$GEGT%pu&@fH(jL(cI*^A3_SoWTj7-2a|#e&^DN$
z7{TEtfg{S+mb=PaoIOJt4Cd07!0tG_1XK;S!=X(hD>;Vxe`XDf;zzYb^Q^zmP7-6<
z?D7H^4J&iEAc!cy$MuKKjj=T>W;|%u_0)&%okWSoXpgIHR!^%sY9k0*M$7Gq|2s=<
z?a(YnVUxpfiMcY3x`!P(lFwTP^oV2tc2=M@+6QIjE3<%E1&#p{DZx_SyK`LZdKGm|
zb|Jxqg%+Wd4wO6<d=5!aP!KG0(_$8JS-r`9B^Sj~tn9rX^r*|NUde46TlT<)088Fw
zo(?3668aNA=Atg6J;eS4FYx4zwRN<A5b*wDhtJ4GvE836iG;9uxTl95j*8alF6d5m
z)%8^6@on8T7BMkIMs3>eg6^ff?dX%z90Ms>?pE=ZmUak=!P48+_uR(y_2>NryqG`7
z<G%dGrBt?JEao5%w#=?(S7V+w$4eXZ*_6sa&d*zKpz6}O*kY)st%>vjti1_1MyW!W
z71h*S;Qy&@iBY+InJG=O)?}gSx3M=guqb*jdx(iQTtm<QD=9n3l9iQ}TCxk(SU2vu
zPu^FJ*oriuY{&px*Ta}4@a)L4xzWL%l)!V<XH?uEX~t#mKCFZCM0x??Vzsq^mnOsE
z*qrComjwTOM@($;e<M^gWdtM4Hs5feS5AL%Awu!$di>9OB%CnEP1?&!tj0mJ{SiV`
zrU4c)TWGKf64AqODlQteZup%<qk(W-CQs$Sm&|SDwAXt#C*JQYWo2hZgGJ`+95g=r
zUKZkT)`N=BdKI?&q?+bh)Df?_ZD<DK1OlIK{`Q68u#q2TRzy*meAS96rI8_|{O*zm
zhV3={9Uzu?c@${urR|S8%YJU$1J@K31U)q$86gm`jq1f(!?+M?&vf#Is4N-oI(K5+
zQT)fZ?g<kc+jio%pNWt;BCfXD?(%4g6r-+rq?f;!%$6WA@0fiWMwD}W(BntIz69&~
zgr@$k(a00ujrqo7l|u90dI@Pq`_<t+KwLfsF?B#Ht4%ICP0q-sqmsu<r0Cf6<MD(T
zJ&Hk4$ZdRi5f{#6u`#-%=xp3%ON28JZaCmBXE3Pf!1u&9f$Z{_R;C9A$x>eNnsk-i
z-3Vy#3X_%8U<vV(Uu0$Z?i<>bYSnFk0B2JPA{inPVE_BiAx^a&#84jkoa1}Bcx};i
zqFn-zC`Fk|UEo8CV(TWwZ`x|m=CcNK<}!rY*DWlLOp_qr_jI|#6|B6y(TjzN>adGW
z6+4tsRWUh;AIZJNhCKL@boceyv4kdSgCM+xH)<0S+R+E!369#BkUp>6uGkUmdI`MQ
zlrysLR3;C)96aJ0$c^J^=R1QmWR@Nrv_+h23I}zh#t1#2eK{D6u}LO+h#k+bSC_mh
zNe9BVdS3RMe`*E&QRgFjLh@mE(;O60rif4d@K)#Ye=N<ce!Ba|d-Zr=Hfaa9>z1~D
zxV$YL(*7HO>2d{08p==2-41wbr#@m%N^Z6_Y%E>&FgGndgf6-}du3y7`*;C|cdtaz
z``K&rjW*EXQEDF_JN{V7|6QBy1`TiA-nQ)8Xmdu^E86<^P^XP>q9$m2W8)is3)n-A
zwEx-A6ZZo*vI&Un@`JgweREy5UsFhYYRG>3us1`<L9kE$NRGVt-1T+`GBHwO^aw%>
zovzMiCazOdgLaV&H{|bM0?D8wDYoOC>jxwcCqLW<+stSCKb^4&)`1RwfPz-(+ce&R
zCJ(p_na&i(!t8lbMy$-_<Ye5v`aOVqUO4;*g$pmcoQ0m)YZOUlvk&Jr0t`K$IG$+@
z<ZDIh#Ah15eBJz5QJknkD-D}r`SW-)H|^Yq6aQ1swgG08RfQMaod8iZ?E_%ML97dK
zb)C?=Rho!;uF7)wdBM(K#dR892Ou6#zfZhR;%Rsg+Z+>J1mrgIm=j`BQO;$2yDH6x
zB#C;7v4+Ov&wj)y@y<o<nOwa8&4v=?{K*#@gl<=Bl7s`iU+$&uZIeV1%M^?5Zv=gt
zZe9EOBU-46^EvohUm<HIxi-4N$iOKS=a5Ct9kY-d6qE}MxH~<*+8N2rq_`fa6z$sx
zwoQ3{n=e10j4bAs<|^jR9cJTE@x3-fR`mxbDHjp)pUpeWK_ZE1QU~Kb!15prxNl)M
z4FVtsLR>NvYgph|B4B{!{1FMF$D{{7IUY%u<K|eZeE-j=h^0RpXkVD$KNr9%`fl#v
z(n}zt^$`DA4?zSG90T{-%OV8pLecP&Q}ny>Y`c}#sbLbw@Hk0yn_b39x2_8${8hDF
zl$TFA%VRI@NZ316R2RvfXzy!0fBhohiAP@0Q{~T!i`E@$GDU|-69u!dgMSaXoOQp7
z+8e8Ay>44;x}Q#eFmemZ6vJqcG|te6wb$vN2mRA6;~}6v1*(#SZf9q|pfzEiw)&48
zzgk3D>2UVz;r!5-idPuo<XdE01;(4-Pi8bk&zI-Xp74mSuF<j{H-6XoKBPo(E^E9K
zPJWIPSMaj;%FO?_Q1(aybqd)#kjjs5Y14iFKd#~48}rhT(fpN-<T|xMSKmej!o$(<
z%`61Yo`#RGiw=s;dHACU#1N!`x-PZUBDB=O;l)GGG0aCx0Kf)b!Gr+Hk#{};G&Dy&
zXxP4?Aq8pQQYr({O@{<yBjg&DSTLG;o`n?fW|4mVqph=YvPcmf&X$^yF`m==d9Exu
z>E8AKSpaJ0<K#&P^n!=IgM;$K5cHQt)DyfOhi;`C!a)JH6p`{O`-wlqpX!ixbd66W
zhxydKjQRW8#p;{#!^BJV7Evr<$ZE9<-=?|$ef;|x@<(*&%1m-<Oh_2^>t>fV_5PfF
z;DE@Dx$~&%>EUeyISWlT#-+HIGvGfufB>pXD*y1_Dp`Y3`I@nL=5_gNHZcRQOxSUC
zT{B9f;{!i2eXAcJ2-14Avpaau(a{dzsC4MrO}7qEQ}NW+P9x1Yp4i!kXSju#xk6$R
z>oGe!oG3OwjG%?cV_kj!+7$yN24WnEe?25^X9&1O5g?eB{}`X%KC4p2AEN(qM?xno
z`1noVYz)Bf6TLOjPxZ-~GT+uK7Zs4jvRTSoE|u}>lW=t0{6T0N4)Q@$7`tNTk+NS2
zyoK&_OBD0!lUs?L?gwovzI4L3-Q77|pPA$xBzvlGUTYwnh_OSPAZu>PyePMxJgMlG
zkf`tY&ZEAG=ZixJS|C|tgq<H{=aAFI?`=D2H6GvOb*imRRTal75;ol@+6<7X^msQO
z0&iqnBccbFwY{}ZhU-665b&^9Mj3B;<M;SRs;J*hDb1l$Lr{ud-?YEZlSWpmHQfV|
zT*)hbK+~5orU-uf&4NKMmo?$@BV0$e)V!1}LMb1E)St+j9BgKb$3-g2$OeulO2Psq
z(Y|e*JksA3vOPw_gpbM)yB_)>P^Z_KIWiq2%Pr5Amfk-!qsSkzXuCJP_e<L=moDbx
z$>OubEi>Pw3?Q0OkCt|N*Y-iY68VxNY%-0|AA^*igy8sy;0c4cXO+Mpaz|tH=<MJG
zX!D#C*?jX6#7KQ91Nsp^d1HGEWM=+7B9j+x9-5YsG37NfE~7l)0rhf$qi&qehzc!c
zzR_~!8tO63%8?1lyOrboXmq@P0cI29y=Y2GFNDYMmqyqQ{t8<Jc+vH!Dsjzfu`alm
zZIY+4&3(4cDmcpkUZcN}8Q!AuiM$kC^bP|8fxLX4$MY{g8vs=0J?x|lDkw##_Cz~;
z`!U<3gdkgL))9t@zCB|gxRWrd=W1lLl#gJu2GaHA^JkQg(q0Er+p~Wxh&lWXDBVLN
z5uRJZfelWtDrh*oQExwTY+{Ny5s7q$+c_gKh?SNpkp;n1Z5s%vtb(c*qd7eC_NAtI
zjVrhZ$_m@LUAj&h{sVlu9mcmsqcu*Ye(n_s5SKhcRURh*f^Lj%DiZNN${c*VA&-pl
z6qBD`S+|1b(@@!Fx!@(!+@TlTpa~@D>BV9PXXd}oR=i5S4E99bk1&?#n(@GXdT;aO
zi!TnYxG4hsv+pg0Yqv9NC|*{K%J^ree&5zmQ<KR_+5VvM!GrJcNJ9q5DIyZ(LsZKi
zME>4b`et@Ma{Con%?LTqmN!ZtjiAPM8ZBg;t==&fe<Ew9BLA3A6og?iPT!Q9mhTgw
z@)_zyz016q1sOToMQm*NYb-X5Fc1hSV|Q2foSt&czAc;2hk&^snYla25LQ<hgtPc&
z&qy-l$?&<EaIt5UM=_hBRy<(Bu*!h1j0d{u9)?^9R1lPvEt!@=?ru5@!0c&gXj9Q_
zVM%Q~>xl2#^#w4r{VThh<OMr)jue=u*6q{_h8%52p-`3k6TinGD7THbw)UR@hx+?g
zWJ*%@_-HQ-8#|Ak@E0}WegHDNWCjvKD$Vn<C(4gx05`BAivftI>biX^pbbyNYsvlw
zmf0k;xjmrY&7oij0hFA0K|-fowK950Llkoqjzv^B)r(^7wU)Z*8MhCe05|OF!A1U>
zq<6go=4uomi>)U=LLb**#(b}BybzWzgu{2BO3~O$wh1%y<5ELJ$a1{`j7cQ2-isqB
zM!{GPz7(LxqAlVz52d=w|1!=|sZ&<aW0gGJXr8jSyZ>;}0R?#^itR6dTxGhm@n~vt
z7QA4g_Fmr&)itpPhAWJSZAUZfFo0lJUDAPfp;C)aY)*1nFChTG%RXh3Ulv9b5$q5g
z^^M)JG>_MRU&DR9pM@M3^&ieRSh<a-vq9>5p56pd#E&E?$|g0tEUhQa<*vok7Q(~J
zE^(e6vfW%{e!ZDhY|5Xper$7E5)MYZ&q-m6SHZg!sD!9cJj^P*{OU3@b*q8-l2B9e
zR%3^iRqP{AHg6g1`BU6+e$+-9kmcP{34*R$=oiYC`g}wsShSL$Yx6#55meuPLjS9x
zES%lEt$vV2d!1d>NSfC5gM4hdR++sU72rdR^JO2cpsLJHvFASe7z-<oXCquvIc+%z
z<rN0>AcJmEg!N;Cb<2Td=%m1u>K23XXi-6mQDf7iLiEFyNuv5HTmEEK&{k<?YtQ38
z-8WACpZFg2$!Gi-*H6fc*%1g|RzUzA3<(<nR^!UGD{N~qD{k)UwZDEqc>v_eu$g5j
z`BAP5RM(ftv)4pl_PQj<<nU5KUQ@uw-LzvWGe3(H6gZ0GhP_3ajTbnLiYx#<B2NQx
z3SJD|BG#7x7gvWSM?=_N4OEus{&C%*p>G!rp2vT;j1!8HqJ)i*bp}_&Sjr6HR}=&@
zswE@X>)N2mo{P!Te^7Cio6KFFuI^3&yD9If?8c@h0lU>Nn(4~9WT}fg)45_z&jdop
z?IyEKrHKT>7VC`c%w)5lA&G=SF4SZ!2FZcv`dl>5?|8a#T+o0i$P$ge+{W$oe&f)Y
z6Tmd3S{7g7*Rky(+OA*(x|!fb$3<T2sr+-^*l8LuT>hiWv~NSa-ZGa$*s5lM@Y_^F
zvp`+t&a1r`H*m*|2zT3>m(d+9tFZkK$L*XFU?cGl22GY|`IFCmvWh<-_oy0L<t?f$
z8AB1(;IC!+36*BCg=53pb7MKi1^{U%2Bp2h1RPVD_*hK*^9D@T4ZT;xgwD~hz1>Qn
zD&`1Crv2F$<|=tNG|9_Zu9mO&mVV+#7BY(?_zXIUP|tmTmB3bt`^>BL3DsdOBW5@K
z!{~81C+)+*G?MamqT=CtVkb!--d}o2qht2y{fkez_(2Okk_0d-a!tbxPq11J(P5Tn
zFw<;iYA2=_Z&naC<#D+bWl*ICHiTb^(*6eROT}a%-vHb18h@F+zph9_;(vwFXg~#=
zJ&wS1rov25IQbUJaV6xjVUE~{sm{|>m-*Lwc5}`CygCpKyIlExI^)AAeBXd6T-(jE
z&9uU-(3GHWFZFGY%dQeaD}7+^px5L<sKsR!F|LMo$yix=dRYfXMCuvG?xf?_cQrmm
z9OUx`onDRnA5CW&71i5+eGsG@q&uZkLShu@E=gtRMp~KyhWydp4h;g*AV_zYG)RNA
zGz>8D%>7^Mc|R}CtaZ*6`@8r4#Bplo8mIwdyJ1D2On9!7$L;h_!f3o)?>C%*!M7~0
z?8UVGk>KmB*)Ku2V<QLDow}w(GN0W^*Aq7GJUhPM`@UG{%d)YdoJ&0D(Oh4041T)b
z!2zOW;eAZo8SvbMxmBsyyME%6L^V;HQ8b4qaf`l~*(LtcfU0zCnUZ@x&zs0E9-5dK
z-_-|L1VYKyJ{*-%eIkgmD}70o53)p;JF#JDVejKss_`w?;2uzVX?xN6{N*v7TVE~s
zkqr_45}&uCQ<@`w?+z7mGJ8uWIu_GI+vJ^Tfz>jyWjTA_Y_|6#9V8%{A)@23@vEPf
zFSdVJQG*WuOZ#!=5`(nw*Lex+_bhfm%X@{@=<KeRfJLXt;50>WB2>r|-;m12<|-~T
zaxuD2)sG$m{*4k9uKZD=n-l2uILdcW-JK&{(OB7*t;u+%wFkz(^#TNGD_VV+9gzSR
zQwUG*1MU{|#h`<j*(L`5Pc#*EJJCef+mO*Q0uV6dQE|vyhD+`PQ`k&G%WT5q%s}w%
z?>Aa3-QWMdyGw3z?u@B;INs8pZ)kJco08ak&Cy*4vhhA^7}@{n6iM7g#MJZaBs7V(
z=NV4;L$r~MDV<W#{L|x!b6uv^vx}+XtFJ{ZIqAJ*`6J2!zN*fuD*;cy7-piqwA%-0
zjDe|gDbqcm3%-i9C>-rYuf{Sh2w8K?=D-?mgGhkP7ilUATK_&DP%|fP_uNcNub}l^
z<1y|076$7V(5ZfinnlKoPP@#Nty9u^7h+v>PfYQ#SG*^qe8{VY<G%8NZcnjH2~ktU
z7Zs#lo?{giFW@%CcJo2Rt(By*%(O<lUjCDrO&3z{U#M-S)gD=v#22INIao3?^Evy&
zu>iTd0DnitjGvB58W)}GQ?b08g#l+<p7^I!*z1JA*Z&&3VbNxh+besCO?6plpy%_S
z<86EfzjauQ5U<CfSwQ)~57V62J11_T!-*;gY;;3S8*487<M*qV0==v2T4Yfx9I2eg
zN&m2dX9@?x{7hxTwW<Fbq(-y>v2IlQsa|2I#*qu=f!(|%$-^Lnmjht3Q!1`23V<$m
zexF9MaSEdCp-zk8ZP{lK{O$*whg1$k$!}`>=D1~9twI}F(^>V4HaJLzF=iZ@oFt|j
z#Fbza{?svsakV{2uH}+aLNlbs$cGH^f3;T1(^^fqiWG0&fLeg-gvuRl6&0rfnL3RS
zzvBcmEYd`4{u3G$yFC<a+b(`FiP-nvc-_tC1t(l?aoS3Ju2)&J7#e@IDA;`|f7LcJ
z{A!-*X4$K|wi%|}8MbJK{DQjtgo~fwdYC^60vk|YJe4_Lh|3@AA=F-Mifede5U~Ev
ztC1|E86Gy6s_mI8S*Tx0^VgmqlnOTdVFcn5Ej!SyfN|F|K3CkjwZV%R^dE_ND;JI*
z0A;X-Hsn5bfOT`y>V$+3j%DGRnKNKPgx7$Lo6oB9ccz|4n?bvmsz(X09PR+KdA-YS
zmSb-yr1%mseBiM7@#EFj1}bBD_zjdOtyB~-VukX=a7!NS>tAQ%o%+uUjb`4Uu+G-8
z(L~}r?`bmoeiNgJbDbvl4_x2)P)=-KIvjE$%8^3s;J%ks`w$5{QJzZ<AwfZjsIpLg
zMt{t1*~%A~aJx;3kMw9Xv&6u?FrTBM=)W>gE7n8tbw7}(>I+wvkEBiB$G@u_=K*_Y
zR0_gyVHFA>F~~G+%dd$dL`LmMW_joa`?_?9MSBAE0n~BajijzL?==iQ>Yhz2Ilfb{
zvttWIl~2PJp*L@_50NLZPJDr1g}u23wv6);(9DHv%rlZhF`Z|p`=6^AD*X?$c7H*r
zLp*8^1rB5>RZs!P{cxBB$s6zmJB8d9{7ZyH`6&184$I-!SzP_o#Cx%PBCvO$bOOPY
z8RYs!o7dhJsw=T%?^Qg#l*mP@x&S(py8pk?6n?>O=&t;xX$&<F@-r>wjnBC6M5(yL
z>GIZZm3Sy>AUn1hoFv;cL?s(qw_|<yA8+mJ!MFq@EfZ=XVO&Ld{sQTsSaYeH!qy{{
z7EAqAgCZ*b**;#dr)%bd-Bx$?6t9tC&rGj}AxmC*n>Rvf$>8{MvDIqKOCw{S%aor>
z<l!wWpEYfLU{PDBMoUyE`>>a$+9-%G^WIa!XsL&9pX$U&;KT@b)G_ht6hL}jX$`{c
zDCJCBM&`Nw{Wz5e*Hr954{paI0Q*PRBff_$E<t?qxA!pt_8(~{MHtBcoc0}hdQSu&
zJ7YO1A(n@IXY({c)0}dz1XGP2iTN*UG3+-{(?Q&mM2(l^$3`gQ^4O1c_U96K+*PE3
zl5(D5!Vkus#CH?#r%Va60M~cWkV|}MP1IDs@>S?Q2}IR_CiqLypI;@DZI09s)ofau
z#LNJ3CP-`;aUiu^mJF-LcKqI(kXv355rO>Y)*XMvRKCG2%V>tPDI$$6q=njQrEU+;
zzTN9Ys*rG~p>aqo$6tR`<@~icB^%jQFF|e1#+-oPKj75Uuj_H%x=;8JS+Q5dXM^p^
z;+dnZj*GNRm4$C1_J2HR{C|!;(J3d{`D#(l1F;&_b4#m=MGzfZNTRz9S?w!BvHLY=
z(}EzpZx!|QK|Z_SCCgQ9S$MjfK`fOTMwY?9ZmwHTbl}Xl&mNBlS#`>RNA^X--yax!
z3uRpvX~AVzXy-WV1B=uON>!47^fanv+!iWZGP#Cv?)!RK%&(Yt8GJVzNGGbKaO8D!
z*jd`XfT6d?qC7&*I`id1<TG~27-{n3N(m%3Av^!d`*c(+Mo+!)bsuRo!?%rUBkeD8
zQJ$p4c2l_@g|G8dobe?r-eEu=A0NHP=CDMc?)Z*=x2r$lj=)78#wskB()5P2#KWoR
z290sJ_H}=P;5T=Tr?p6i?vWouH{dB368Z$1FKo)+vQRcbEV3KoBEAB8)kZ{;Mku*2
zdCzfqo+*RJASwSlR(8IwAA>ICEoX<+&C{w+sP7Rx1Rc1M_nCacr82Lyuk<J?Ojrb{
zjGvX*SO7mBKU?2-7J3?=7`k7pave4xtlu&|sYV~jptk9gI$b07IEb{Bf?U>96~gj<
zylF<x%oBdM{6o}oufY<k6L2#n@$;Zj3kl=m5&kU2Ea#TC22gs&`Mjs)$S!P6u$8KZ
zKP*b{IAsq;Iq{M2=yQ{eVSnk|oP73mm7BM3l5o4Dw5N6siGWSrI$yQ=E541;dueQn
zo4KW_!a)f%zoakfKTu*d^0d7lsO>n*>_Q@*i_Wr-@c)9$%H-Hz_AxPES>JEbpA)ar
z0_R&$3ELfgYL1F}GG3g2pzSa#SR~V;Bt}jLjwtu21LNAjasR9h3^f6f`RO}jp6jFd
z+XOgWLmew#Sg%tJ*?aWow|+pu66|9Cg&(YWJbFs+w2^ymhqHZ$lUjpS8&Rg&f^Rb>
z6?(MyARM?N7m@9NEh}<vtMc2;UA|gRM99jlWxKm}f7wo=coDMR@`IPu<zP(NW!Gq!
z)?PI8>o1Sr9f~CLz~l-$glG0MC75y_#!w{#ZKRg6&`rc{9A@cYi=;%9wn!N%rGn3S
zlAbsfWG0^J5#cl4&W0zJe0YhXkJ2ol=4b<wB!W>-a$<*>W?vi&Ql`g9mk@aYzeV^!
zzd4F}QY3A&osqCZz{IE#Q|B1<{fH<R6>kWhxXbqNk{uEVvr-W^ih$l@%Q=1qg`j@}
zW+JouViB+czmT1F0=P0zw0v=HguaU>@%>mOTsVz>hKv^uHU1cacs#7L?ZFot2mUUG
zBu9qG$K?R0Um%5yspOEpE0!ZJTZo`b#Ix;TfkajPuiONFB6Tth2*JI?(J~cj)SSxW
zhjA4|8sd--#0^V_>mMZf{I059bOItxa&+aWN7fKc^rq!FHsfTidZen<!xhYX9D+|@
zmaf}zm=cdFS%Xfs6ijF?VXv&mR#R!7senP<6yTullCVoZcWkUs@#_gfJt5M}W2^8c
zqO_M;w=JPmRR`8}3>^Y*NA10-e}`XyQKwZwI#(qOEXI^nt>=V<d4i(4{;lYdRZ4Y|
z*3dn}*<{U1P@s#<dmx2ek9pv^&+-_D#5~ir!5;pcXXnC?5oQQslqz-L=(}&!``nE*
zAIp&foW$QtsoLAwa3Pks`n$u7@dBFs&vEDj?h2Rw%8}me<BZ3&LqJaHi*DActUXo&
zs9rqsQP7uaW`xSa>Ae&Rv#M;?!y;b+5Rv&0xny>cu7veCh_8PaS8hScu4vU8hRu+@
z(e6c+NE<k&NHtUeKQ`EKwro;4U4{hxA?<)&^SYY8P^!mYer1@1^4YuYmt~SPd}q?)
zADI{nxGpyj4tSWN?_9S4bf`5#VZK416TZ-H9Z33<Ok8<>;?p=F=Bman^)#Hd%`P`Y
zL~D(xGUA*29Y^W`MwN-GfWDjE4V9IcN*H{%7fV0#TqgZ|N#vo>3>V$Wqc>8!GcO<G
zA`s-j0^{<T=0e)Gjb4of!R|pbEV>J7yYS(!Lvf*&BQJv9EXLy~FTR$0>w<=X%WlCn
zi>bOTy*fHDp_0uW^ameI`j7cM={FOYoxj5=6WiE2cSUqY*2pR(KVsGe##`6M3YmCk
zf^gWd9~;S+kj|lN0+4;LZPHO#bo+)-vAk!e<9t}Hp>t~*zWiQI21ix;!v1D}OetPd
zOl=;cYvwS7j3hG5o3(hVNB7>I|J>q^Be<3_v--;`H*2A~6)<_i?`5c$ZydIIkOf5N
z{Q9%i-F2$+Mv0T~TG)=quIUd7?m(xJ?Kj(Dv^DwJcYP|uZG1uIc{$oGc4)w6sU+b)
zHUfZP4@?gi>+#J0KOq9Hp?_^~tp(pnAurDXk6(6=rg-Z9LkC&b?lIVQoqc1Ha*Y%r
z9cWGMgNrKzTb~}MBsMxXZ;ls#`u_a_zWPLfAJr4H06?AH^E`G0-)RJVE7->)mJHlb
z-t&(?#G#=k&FrtR9H^}+*dbsN;P{khd!XH1XoJv($R)_7r5{Z;&A1$|L&pCbw^*pW
zS#lz0jYbi@C;%5mhd=l&K?59bZ!}6Rozg@Gm9sm_N41<gh2*aG$%m+bp17QNwFfE!
z)_$0RR#9{HAEIl^1+6emDFlrxGw7g-J!tCld%l|<%Fcw>v3!&oNZ8GPqBC#3-e5i6
zQl5}4r$icSk)d;a)Z}m~M$7?tk2>82yI`JUUNe9hM8Yw#qU1X>J-ta)k3pPYKIg-7
zsWvQfnZe}@fiMs1!qPA3LGY;`ZU264SsfCkQp<g%5FD`x4Q?a2qe9PlYu?rfwoF(7
zDzJ19SQMtsW&!Fw4w44*Edvi3d|Rb<M+eOOo<VZfzgAbpX-Tc~<%5X+vM?=mqVy+Y
zc;7Y}6WYUM6!C0k)@Kj@z7Xu*twIXo7t=bj=L`CVS(cnNIEr7M+-mQmgEaBnnoJ)B
zE$RSn1b`F`Ou{9=D=lUnbfW)K(e)LCOP1{+!FJutOn2%&xZoghA;SLR-2`;GRw_y=
zYtNoNPt+8;P%E{%uMPOJjhyAEQAw^VC;s4MFG-GjB+AwJv1mYYfd^UFEskruT-?ea
zNdor|7PAOdkK#Bn_U}hGb&N$2!`??<Fb$hFC!_<c55^_@I>JfKVK~ouXqXO|Km|X6
z7qsU|KLPRu%n7?-LA}=!vr6#L2SL6&E$RD}JyRS4sMp`=+RlH!PQ^wK`N)-n1qUoZ
z4RxSQ4ogb0Pl){E97|M7tO2PU%sN%Xo;z>a#b_t0=(c`<$Se#chHKd(d3C5_`#i(1
zjS^HboUc%DjK}1+SjfCr5?ev!PdDYDt?pnEtczc~Te!Ft82|Eq<89A;MBlzcH9Kco
zCC^YXGEIiazkI?yZF}Mp3-lvRYU=jl$Xy0qo4IA6B-Vk5rw+vMFVqsA;#v!+{4)P2
z=rq5@;i82|6B}IiQ2>o_MM4@uRWK8N+*6qor2=P6mdTGDm*JL@#&Kjbz)jdbHjp^T
z_Um>)rS#6HfoNsinCu-rZ2MWgz*G8@VXb(bQnB=KoOfJH(R*3ge7(v9&qu`sjHr^j
zjhYtB5DyQJsXtO)Lb7Xv$CwaYB~8^o&iR%{@#H0s%ABcG%kRQJI6ZB?d;Q9Bs}@}H
zFebDC+KtdFMK9|QXG@fMkr-Rxu7&(SEG>pjRQsMe1}&ij3p-Yso=O*+X+Qp_LTB&Q
z0pC{x4bW4JDABI`+Yw<JAliR#3^i8(3q9g;@u5j86nKJ&$*7ng?yHjB5hd(C=fwHY
ztZejw)c2gO>n(?IXm5z`9y}PCLh#@d5h}6>R6lm8JEye@U+ZEhqLqEH@?_}nP|A=$
zL*vADEbWrNeGva`Kb7voKeIIp_C}vSZ61o%%kG?5MC#71p)m5{B*8s008{;W>$>Gg
zOS0C2q;L#K^+2!+khblv8Z1&s!&pq)*mFHbMjJtD`gW!g9p;AyWXoqb(v1M>eWHa(
zD~oEqQJ;8B)&JxQPtg%EWw$>43wS}-TLI@xceiFR6eKGO$pQ1Gsdh?zVBdJWFQRGN
zrz+J*b^uZ65O=TP?8{^~Y3y-X&Z|5&?UVJ9zhecBtwf!<iKQ1PK(|Wa(F||-4h<yR
zvvg)HP*C(mUrT+KQYtzwi!|r}5lv>`33r7bFyjw(`BUxs#kReR>h8=XC_DB*vweig
z_Y*#>Rgy?>V`PU>^tEu_f2<=rbq$~2itCK`*-;is%TZmGvbcVECSsUnUR-2iYG~(m
zygON}u5MU&dXr_@hZ`_8oRDqs{<wgmtyBfZmNw-CGSFtheTSGl`3ZQ5w@$4tADeCH
zX^GYLt-Bi@mge4igKKg+2RZJ0CuSoL3X%=D4W0K06p}@(>?xu;U>Z1zTW*zU1U?tp
zqV7~9%o5l?*yFIvT=F6Wp8_Tz8K4sY5z$QFB2fj%L)9aHLe=)e=<jx~<)ab4lZ+*X
zjvF4*-8sfDpTHYF&ZpY2t39rCeqfkwX|KwMc}(P|zmq>Q5xZp?!f;2G%Mu)O$Ebxl
z<h-`r@C04S3+TTI?Y#+Vw;U2tE_?*yfol!f(*xKHLD}2svng2CZm6GduB}ynY0Di<
zn$Y)NtXBwrYsgITbL2JY$joznO{4uw0mO!Q0w52tl=u2FHv&sNqy*-{Dq>`x{P;j9
zmsL+`W!v9xJ%9F2#dqU3_tf#qyjY%Cnmr~b$M6tOSv{>%M<fd$8MiOTxFDGcy&B!D
zE(`hqx#M_K)p#13U3Ap#g$OSA$t)jVc$OXBz`#$uh4e=iY&L^&4{s}i|5_Y??K3Xb
z9aXvlZq>3t{Os2KDC^s>xoOJg6&V6`35lMw!-|6U=ooSnS#brD$qn#@8r>~}k}!T@
zYWv`2vlDF<&_HLOmY1*@JegsQGze7L^(SFiKB=?R3U4virLY&TagQa2NP%8`Cdc)b
zy<}0F%`2iRRV!r$<kTDjCn)VUi=DGMOGSg7SsT}EPUWq!okmz2zY|qLoJ~F{t!j<$
zg`9D;^ZCrWo2I~kop|{he<}DXqBD`BV80Kx<r(+yxDq%S@e4|nJ9d@t6t<zZm}O%M
zH5}-W7m+(oR;clhz5h<(6WWK9fUV5vUm8?t5_%LqKqUL;?vV69>`7FC*`!<r$A8=U
zA%8fJ-DDjmKovkTxomdt|Mo!?Tcjl1@7Fbg*m2KiW^y}O$SWFq-n0c=>V8P!sR03w
z;MIXi|Bf&5|1<x&13>=44~i~<r(Qz*vCc#JsA=`Yzp6<T_N-Whw!IEP-FF14T#=QC
zMkXy6<eXgzz3KDKN}I>f>*#<G|MtrXw&}y`@mJNe%UQ4czJjsV0z;bs;u;E=iUVOT
za!0)wbJ5oeooXvg6s+EJWS?S5L;FIuZxU5^`}(lQvX~r`N4aiL!gs!+)Q)_U>svXg
zaQv`QqtJhAV3En#aNdfZ5-}4!sLu)DY*6GM|A}bo`$kbM+`RHL2oGrNE{WriOLpbE
z(N41>`&Vw<Swqu*M>XYm>3of~I^awS!<f%x%Q7oBQRhEWyh54<p-WgLyM@K|Roei2
z1NZOXY-+xN$e!E|FI=oV*->Hdm<wAyk&rii6YiV$D;%|K`H;qetryalv4lcL?{c`M
zENLf{7TVFeRWXQoyMeklt6UJnUjI5fCqh{phiUl3=HaG|D=bDGErN*AYa0@V0F`Fp
zemS|O&82GQQvtx6=e>T?wS5-1XLcXJ4a&h}9ZZ&K`}#DXj3WTwQ+0}d>JaZgr8PAh
z=5VBD)o1O!d_|N$YAJ=CAiP;zW;3X)l>8sGtx3HsWk=@O9mc2CqlMxTnQjuT_-6sD
z-}?N^C#rx^Fb%FaU~1)enY-Ijhedy6XBdAGqewLPunE$Z{<t^{!2=qNGd_f#y*O+q
zNowAG(a@zSPcVIyR&7=hyMSxW(9O-w*!6tZ8m1x=sR4Cbae~H>X75A?QfkBcSxvu8
zWtDXX9bPhqx&LA;Na3XTebV3fo39#;%89_yX0A_*lMo}fwI{*@2l~AlM8OnHPR^MA
zapnBqx|^;cN|@>;RQ>Ksne}P03gj~mN$cVcq83m^9!zA7RA?&0*Zi0HtcpTf+EAwZ
zwojk2@08*F1o$8FZ|=^<A8&-D(>cV7oE<vWpeu2-HEqT;wi9;D*<JCnGnS9bZ?y6p
zKqvFea_GhPTaF_Ijc%}k1Xmojg7Jxo-K<Xm9y?KlbUAOPrjZQ3Yf?AEd0$-kMRyFs
z7zR;#V5&SHMsuq&sRD60umD+|8R$v#cD#pOF?-}NUNbi}&k6P~YU`&io6W&{N7WIN
zxtVo7#&X{S$o29d@muJ21~YrEjZyhZ%fB(ql&`LtyHWwL*U!$|{Y7RQH9atWG@u8I
zA4AX@XmR}GB7JFL0hYDza4b1zbDr4oqDc4U4D>p#stOf@pr2!+9~*1#cVp^WNR2>w
z#MK45nk@#~5BG1tl%GW}%Tmr?mIHYh3jPE>KU`d_5st+=a9N3-fMT@E-1lr#6Zs5m
zhOd(tQuc0od=S+X)oEuvc-==1%xm1_bikct%)yKKYHiMT9&*xv<Dsl(TH)RN7jkTs
zN#0GZ85ya01v;F<M@jc2S!(|^(J1HRh7Du@%<4<`LtTuKk2imfYDWl84S!sP6Ke?g
z=1aJl3tuxz|MC=Xd4HKpS5-(%dRD(jME&L+!I8T9#F4KCM)3Jsi#8beS?Tx@*@yi{
zszB5HbI{qWna8BC@`OEIvGs-!9hEB=wld-G;}|-9D*LL(;r%h&T$WKkL3%ba<&A4d
z48E4!&c2M({`pMVGTV$SO3Z5__MoQ5Wren}==mLe^X1IPB(I!X7}8z>2E_ouIlNob
zkR-zKQTam>(4rI6R5S){#&_538(YnK=Eiml>HB)X!IQ&@vUo`<?xX-g(g3lS4{7Fl
z3!ek`qb{veGEMx89H+XYlL0EGg478>c=no&u;H%j4$jwui@`LlaW+bRH7TiQmxaod
zYToeyT&rR5-0pX;&JQT)r@O>lxi4gMg@2kLso=MB+o>crTF2MZ)I>R^Z}P$+gH8<t
ziPClu>D~OrxGcWRu3okOlc#*bJ>|6hs!LelpS@8t184R#VykM#QF=LT8n6RmR8BW&
zQLru3LhKH?UGhEiLT!Jx0AYOc>Fb&BhzFM(L2c2b#Vd3p9W;Jih;ivo=rJmD8u=>>
zgG*p2V#XOdhkuG`?agfJ;z)lh;Zz>{Wb%k=g03p-kEZu@|JU`f;rvgYeq(kZ%CUrl
z^RFJTSuhA&n31UG>m%_V%MTR}Y5@<0D-ZHaK-`e5l(LI4@EIfAZb$ii#-0tI27Ph#
zsu(v2XMiAc7H|u%e$HI^G-`aw1+}PZsU~9&*X}t*^(-vRO1xbMrGGj(!lSM|EB}fB
zGc$I+c|6xUZ0v3Jd?a7olEg$mwQGjAQ~U!>(+IyvATZW9IzWr!;HFEIarwj1=OJ6T
zg(fj;f4>!j4qvP`G_<s4Z4c}%k6k4n(RM(NSEs4%{Os6OpM1?<H=B<|tZkU-OZx1#
zQqR&&22V(25I#otas1iWVZT@6J7UDyrS~*e0m)3$e)&X4m;oYxQ*$cTBy=+0BL~xw
ztdNZ$@OP=bJ`_gnJvUqHN{_?&>Z?dl2TT!fP}|=T{A%gQjMQM>jn#O_XK|U4;kL92
zW5zbq#ChctE$@h7x(5TN&DEjonlEBIiEHv7`bz|MwP9^vKh9xOZ#V(Q*b&YjoE<98
zx|i5Te#RpMwG9OJHk+d<CD-lVgUUFVmF8-e=ot?gD~;+`wS5)dF1MWBA`R)%X(F|5
zJs~-$f$`MB02BJ>4sT7mW_TgraZ+F>^;#AvEzBu2E+Q%Et*-%MH07{$U#nde`mKLX
z&!01b{Nd<>b|=ZCWPP(}2#S+<oXm~u5G^m;UGbg#@NDK_S?xcAdMbgtSvL`+aw2UG
zagP$enfr*1Z5jD6x(P{6E<X>?IY;DNswOmF#WG58Sfo*;GkGyON$~LMdK^#cnga#>
z`20xl@Pw+49xZP;hV=TTkcos{OaMtv7rU}#|BzA~8jB&Qniqy&Puf*kV|yx7T8G|M
z*53$AoZ=;6VznRDerqeeCjQ}+0mu^2NWf=a%K_7g6xV@R0zbb_@b-op>hjs#q1s87
z4_yzEUwDv(`1`k43EvrY<IQF(UzL4qIujhP^e%F#)5tbx#K(HdhQOciCXSXX-2O_4
zXH$9qTQj+f>%Vei&1Z1K>sI=gqVt)RC5klyI(9x&z6#R6y;!aQ4tG8Lndg+oPNPgo
zhIlIjWq-LZP1cF^qKz5j<V}KF0S|v}mRnb)0*Z*XG5Fg~s;cpifqV<o0vgITb$AdO
zqUC1xFBbH#EDNh%v=<M)=D0lo^v7il4^OwTNORby|EB3;YYF-QoiRmlq>`^LTEz0G
zw>>?~4uIAr?QV~j43bk&Se~iyE&VUA``&vHDHxzEGI_R_MkZCZOLoIL$jz=m>tvF!
zqF1}`CtyKsNIjD81qZs$jzkfD&n1ZsmEyce79yztI~KWl{ePo<T_5sQt}O1xKl<hW
zijpUw$JcT1rRi6ZlM&+PE&H(RM=z-6nb7yHY&cTfK&=^c4>RJ)m*+miAO^D-VLTGY
zD?FAUG^Uy8qh<yr<rnRO5dMoH&*v3kazVWlq0UJw;_EJHVKkS1W}>jp&Q7skF}-I$
z@d&VTlZ4zuds^`Ra?pHfI6$#XPp*WGZNbKO+jZe3-gpOh7g)Y5Tb|bSN)rIsUC2WL
z9ksIx=!CbZ?5&o=TtQWR6bK=d3d&xkmqujuOa|`8a=F;ql|b!8g}>e(ws?f6KGk4D
zO`&7=%MXl})|48r-r7(Qxm;SuJN_{C=l(_|Im)xfWKE6b`a9!M05^YmKE9YL4o5C)
zamQq$&oaJG_uY2v?*e{Hh9GV0Qszdsu=kz&DhG|ZwF-}EYNZ3pTPs&1kmQHKG-F+>
z<Nk#<oT~-}2_QIV0jEeXfeDDRCc)6vciuFhtoP-p`S8gLC}@e<!?!J@9c525Tv;UV
z<|)7}Kmc0d=+Z#X(cEa8%!Jc<Cd~ihR+t_V<Upf38R<21<~Su`_b4*Zj$Sym<ke$G
z0EZnqS7L-qFR;b)<@E;>*6+G@Ldo4|URb9yNH!vAK5TI1Un?}&j&l+(d2Sg}fuQ{C
zKZFbf1m6MW&DcKe**(>M?yzy`*?8wwf~LsTB|c{dQR5;1mV25xzE}$q_kSO8lD9KH
zs^Ca)mR|~>jwPs2I-e;`*i|M80-4|2^RPr=5^f`*4|M_?msg*o54h|en@GQ#AxYZ4
zYFcWBgrEb$9`9pvRLr(jz94Ci*0)eDl2qusjdzb2?cQe_)l_Tb^FSpm;QgV=xk&`!
zv|3AO0tKndgizly(bet&2C<xRG0mPDJ$`^SxEdc6Y-#6?{)B7%_wvpN__6D5$*c^C
z!c(f@;p6jLpUxqRdSng6D5V3R4~fOc$J?OAaYvNJwu&EZh3LSOZe6nNw@lh`+Qz=j
zC>}g&VUwF0DKR+!rdw@~|K(f&g_U0F-)m<8jQquo;9f1)T!@`kBZs&B(R`3swfu9$
zd9PZg@P_A&1rs_gd4K$!-+U1t`#UDGMP=!)S2@@jlKk62=;3|Bt61JDF>tuY-45GJ
zQ%NC}5;i=tof+uMD>fnk>tSk~pnwJM>!=tDw)i^XH~ECdCaPH;S7=~7n#Y&?SB1FY
zfAZ-&E4j1J+?h!c^N_)8=ix!o20CixjJ8ga?oZ9CSne+0u`!GOWj{@k@|5bGs$bzS
zjSvCbFXzD~mifY8o{YAugLZOTK4!~))c^P~cK?c+E-(Z=Q|6IcOx}wA?igYNau=g5
zeDejwmG6-mM5F*ke7BM5t-*z{)qAaSPyu-kHyZ(|mx@k=nKeI5yI9R5jWFyqF3h_`
zkJrPKPCf;uq?<PrBCXp)lVg(1MVOrAsuB_2*VPz<mku*Ks=t>Sb^8%QF~{h5yr6WI
zT#n-;p;v2K1=3@PpfOf-U)Yb@Dy4rqTI{wdzn%2|izn$!x;*91na-0oVo-{d?$aRU
zR6x^?cfkavhP`8tK<m=B2;-EVE+=YN6Q8?g$5Bx0u?Z68U)`N30h8fq|K568Y?Xts
zalq-+t8wtKwL-OykkHA76fpi%{+pm3aK6|$xBQ9xuy&DM66Lb=I(mp5L+NgJ>W`ET
z@0?jP4JBzR1Jj`N%N8$7F^fp_M!xW83;+A}$>%iu?3d-U=x5Q}kx=g^FetE+;cIEc
zN5U6^5p>(g5g4I3IYg8JfnqthZfhs%zq0MkbNl7Eaaz|iy-Hy2J-iLUjnb4GZ+TCE
zqamwj^_}~x)P65dnI(>$ScaFDV7Wx!e$dveF|+UezQxN4GGfGKoyk2m%OkaHNGzD{
z!TQl{P6^|MDA5tcbUKQ&#y5LavcfaX$>8{h1*Z=1Wu=wnKZ;sMVfjVkB;?>0(mXdM
zhqU7;93TIZua{^B&BAKd({ZbH{YzS8L3a}h*S$~KBZq|fP#Yhh@$bL-SVL|nVrFUW
zK+vRNw=4X?dN&iwGg8jz6&+$CMVAOWoGPg3+tgeFglnIVPK59wJzQyGW5&nFmCoFj
z$ivPQ4DTVL%?UrJ2p;jIi*6prYKk>W&YAAGh(Fq7ALO;)NLJZJKz&4hF%jDwXg7+p
zAuDFG&7;EPTnNI;`bLRi!zd0MFgT_usQjf>A1c3FFc8*#-o|H2HW*GLx^Do4x~@0R
z;d6UMpl7r6+ho3PdwAMoZMDSsq`{&l`hjG&mEo&>tBpZ6kJ3ct<qj?z^k0Xq_vvgQ
zf^x*6gjCLTJXGaT6ikD7Wn`X`MCdy%#in$8vI{Oc06fw~H8jhJzIvP_Yb<1gQaZ3Y
z<~e%K*I4HJB!}1J8(V;RH_)b@hyv0_g;r=5Eo_Tu<+fzQcQt(mW`=vSg_U0)veDQs
zv=RuXz7A=GlWrv=)Le>lPpO4Ol@<u@iE#y@fps%-@KP)Bv$JqTD~k6u3}27r=<_sR
zla~G!$g!@a>FUG!K**GrF?0;6L5*5+r2Bl?*O^?VQ|2+$cc}P39gRn&$0JwnxlD%3
z@1hxf&bD+OA37gTiSNU_QLCr(2!o<WJ(|eKlI1-02$xN?1$;!whgSFg-fg*-!NK5Q
zv{(y4%p@lR`C9Q}EBI&g^`a41hJSg~Qaz%y%kK8g(Tx3n7dy&@fI5T{i8OsMv2#U=
zzJt_APfb|&TWI>&tGv=D$X`II4rzO;J6<YdmX?y>3FrEjcgfVrh&?6|Oa~-w1M=OV
zK>YPXI(?i~%WZ^PPxTi{F#QUzO{iPc*i3dwa`;%G;2>4n;vIXRC2AKeV*H9bbq!e2
zqv$<2&V5CZMSFKBEKO4fi9M{7L<6Wq<7k=wCp>cw{kLEKYEK&loY%$rH0G`&kX4;o
znOgvkzr9^SrPoEVzev2k*-z7&e7<{0Ra+qCWq12QK#^2>;USgpvK=jtt)YkIFVSmW
zHc@IxhYk%F)(rpOxLkiNKMb@0r}K|D`8D$Xo@nod{*;uy|7Smc3b^wH-DQH5OoImQ
zh{d>rvbgFa;SUc9nIJc_EC}HG5&H|zJ(jBsT^)!!h<6=H`8?4ExEt#ZEo5$^bsV5}
zL2<|ikwJLt^MkUg#$$I}Z?}T2RE!(I1g^1P%4poA;=N^5hB?>6#kPhvQ)&py*-3-C
zRG7J?2b`vJR@|Ar`KZ0lTYfZD#yHm3{2)US)cs|H<!3?Zxy-7xn4r$9q#r2S7BwHC
zf)#*yAF9L56EF5ge-l*aGK!A9ulK)R&#A7{#E$wP2}Ws~6_)nFisV1%WQaAG^$Wfn
zT6=mF2!#Jz$glZnAK#7OWu<>IR8LLC?e2fP_Y!_2zI~$RQ$?ebiLr5T(p3kkU?K9p
zfKauk-1JGah&6vLz24d-RTiF?&S-#`1UTwBI}!AfPd5-`XW#M5ml_UMf4t`tR>D#O
z<}hLk(=M;V?TpbTX57YztW*r>AQMhPE6Qou&dYNRqIKT)GX7L+kj?};4ZPn`w^aCp
z^E26v;0-+$pE*UUAD{1KVOlA~)S?u~F8JqZe@va%a$#-{oa`K~cw2LO%JH-f00m1@
z--DT&?So1t2qJ_*ZrIyKzA1qt@hBW^mIpuOMLSsXSUa>5A=Y9uM6-iH{VKiX?yxrP
zqDP`EXf&Bc%Eo7Owy2%@Xnwl?LxW2ey$LyL=@DHLoUU<{3&~A?hX<rP-Bow03x`Jq
zT)ud3_!d-%SgGNH&nYuHE`PV?nsO;ZpoGpXrL&dM)gHnXh^hJ<392XX>#;HCQmcM6
z5p|&j9WCaAtlyT><UdlTKhd80Hg&?8^7G1xXR4Xgh`vPW^Xx~=pj;1wz`5d~kB9kQ
z)3k#(IFEkt&mRpXQ4!GzWYRRKC})H1K#)bH<X(GZB7zr5-=;G9Z5Cqr=OCNjkv#Bg
z#M`KQ<^Q18NiwFeKcX|4p3IIY@YL95$ZYS~x2}M)CRjtOj>a0w1n|YxXD~&%wl;PT
zzL0@@#k=w)`|9;rq_Nr*Lvb)kh=0WWPqV1)8D}jlN-}ej)|~SmZ-agzB>4ekhm&a{
zanTkt@=2Y5MB#i?s5M#_-Z1g-%XXrB1dY)z=9N_R{Q{xZHs;4ENvo-tHE5^(qZg-G
zIF4YJkSeI{cW;0iFEaS~VQPDFN%rB7eurn>r<ST;&86%|n<e&7C<InP@bYKhk=D%s
zx=BjTxA2?bD4&nzfUhITZXc79-uqdb5{HEF%60SS)+|xgs%!Xo_3K+&UDl^&N0s%j
z4Gw(QH3B6^-P?=M#)!{F1|npxM+X#dP<`RBy^E0LD38?~6URSdFA(BJSsB*hUb4{b
z&{-1k&idcX@UD8FOAc}^nO?=W!bpY><$It%JV;dqJwxKLMDpG5=xM{?kJa@xSy{j0
z`lviR#GrSjuVqp%o$IRw!3)T_jE@~m<_Jyk?W1rm2r?vj;}Ed6RE(-@GeC_=K%oWB
z4u>l!cfjU-+a9RBF<#WXfWJ}(G4gzSoR^W=C&)HS5#Rp(71pB$muaF67Tv(vH!GrB
z;dmt0HU>WSQ@$kYhyR!s5ooI>Ijrn^f$xi-((sg1;hKLinJV7v!9_{_lGZ9P7vwAy
z4~jDao4yuISpOcvAV7;`2+3fWV<9YtkGLA8w^@e&SGA%~<E%D_422Vo(#(R;?2cJq
z&@=g;>8^a%`A?#i@O0*2=gf`17l9QMT||6=^|U(>MKsj-nHK~Jf;kSUoz8IWU_>CD
zvp~m50jxB}&XRlwL{VcZGP*l!PiB1J40##912S<s;CG+vr$7P9c?!7}){`WEq<nC6
zr;YUmkh)p3f(fXmL)Swlx*P<z4k~$47ihvYgc+}<hD|z1Mt{X9sYhHr9#|XO3AP{Y
z%0DSmGHTn|SX+g$F!`p~fHH?inCOfKHGdHGCawj3hX}o{=EAzr1QfDaVz<Ti+Xeqf
zlDV#2{Dh^sL<t#1Dl-K)W9E@${Oj35pqd=Oh~ay%NZ{?Zz@pAf3zE80qlZ))B{mPH
ztn`_a)AV&AuI+d6xfhsx4NA;|h9VmZNi%*LW~1KU@Cwv@z=*EA(K-^#ezToT7fHg*
zqm+DI;fiEmM+OJc9@<Na904(xbejZ&oPXKAd9z!q*h@TW^<Fr?<ach+<WAXtszIJu
zO$0}bO=bHSsw|}<B3Fxq-_l)N>%(4jCuW~wr7ZR@+f(UWpT-4xh&F`&CMTN1H?<n0
zD6R1O`N#9-7fQ6J6%8vT8hyob#NXkg{h(Itpl68CHGLCcE(CS%f47Bjk72-XJ?gd{
z{t9lL+Sjr)d)UH5#ATOq`q}RCa%f<OBqr_L9nFdUD6>2M?u03^;W__Q@oi8&Bxauj
z=jd5^BEAw7U^?(*mVsW=1n_vt^KBvY4<XPXHcNnnHUGbqOxf3Jlj`~k|5a4vC3)2W
zSQYu-S`LCy`O0#t{g%OW3akappPQZ&sAmnS!u&%W+JhPL^NU$OcgOL}MUZ6t_}+RU
z`9O<-7#A1U_Vw8slz(T2O_WZw2g-~&_@JJ(6Gq68A4>EF7l_do!z?GE>8Jt{9(0tm
z7ivh8_YZ602uif@wS1Agz5gW(*2jR6f8}lhL6|F*x%47p$nAd%8R6)ffz<0nwZrJG
zq@TUE6OU;JMkWYvwy5znUj$~8KwgYiHHsde{_Vl7_rHY*d063MKaG;BpNL=)(x&Ui
z3-)2Ot>O{op1qpAG)?uJ5VHk!7yXx6m6NM^01$Q<34U0Wa9-Z{I`!V9w@pF=f8N8s
z`I)J$r>(SfP}unsXz95Je(vV_!G4xx4>yQ(I25YHE3SYS=kEZD())zb7e|8Cv*Xgq
zKW<fi3?!Gi8cZ7kMSXBmJr#+Op_>4m{JoP9BChMex<YO|YPY+)h=g1X>s1ce_z90-
z;ZElg^g_<YozFZE#jPz~f4H1ahPR)6A<OjD>`y#x27JBO0_;QpTP06xL~rW9qXoxf
zcRk%s(l^6<Cu!#Gx1GC~ckvtW`GKZ<^SkJo$7Pm<Gm-B^(zu#IAD|SqUlB-)=VfDQ
zN@3S7=rm`<F#5d0IFp^XVIv~PDgaR?2oIsb7E(O9t0<m6>AZcqrj4aTvD{;KwXqu2
z$hzg(&Swrqdn$RVU&pcaSkpj%K5xr5Lc<jbiMQ7?@;>CRl_+nbM4tjwAf?0pV6H4;
zWofWN^Eo~-$>3*O3c-MENc4Sn$|_n&#XbF}3c`29U(~zJ&ax7vHe>H0o})tSS(^z*
z7iKQ0Z(TxcZe}2=b=`Ua>#jdtE&hZAUVQYt?2C4gnE2KeXcOP{Rikf3*m~Kl5i`X4
z4yfH{*Nl`yUa1K4kEYwch|YNRS#9dIoY(4^0+`p;<vUgf`Np%r=MMM6nbo9EgcvjB
z#(CndcPXn+fEN;lDu_T>@THZE-*TUL7bN(7^Zf0YA2Rr%#CcdbawqRy`lNdhLSJuO
z%kOMoOWJEb-D0Neo=@6)rO1zR2yEUJShmOJ+LtZ7EJU1oyA`gkzerg0`wcY-Ff0VT
zBHX)oMcch&xZT1qlvo6f4q?pv#@nkGii7Pag>i!20#MUHEHw_@ulqu3KKl;+YdFI#
z$@i#xQ{xmXd)bRYr#|cZ%2f71J6uJ)LI~qz1)@%CLFB>WxpDpTwu8fgjUpOqJo{Zg
zFd-=N-YDIq1_NeK9)*2=v+=uZZE!S0WXAmGzzoB;i;B-bKDU(reMwL+LbFObeOgzo
z6S@zx2knId3wy#0%v>65vFt4^?awWGL(!?@TON{7Fu1|!&R88~5SIx*+|g+)%w}Pd
zeb-GSgmw6~;z*K@TQIj71V^Q{(zYW72`UNjBU2aqw+JqP*V?#fK$$j-x8h~;n&<*V
zNi$EI-L8RozrPe;xvU!3Avl{)lFebG@wXa!KVedx)DU1Pse1C4x!^c4f?E%@w~_Db
z#||2<*7=@q3Ve45jm9~(@*_UdT=`MmlWW0j<3y(=MIq|<-vQz!V>ZCA!|^ng_+w9j
zFjkipG16c{n1_$@Y`gm5Eec^Q{7@r0GdVH6Q!ds}sEvZnhzeOh#nXuM18Hz}?T!Si
zAVn~#U|U<0W^_2H67E=?j^I-ix#Da=(V_s2u!^&u)d`5klm0i674{uKTsYtl|9F}#
zC-roH*+Y$5%^W8BlXOF&>-yJAiQ1F6>By>%>7$sTU%nSC%0JX5)2d;=*zFTPwCO;<
zS&fALL>(#?Ysi!HRr`ROdv?8sW)mZ{fW6Y4Fd;{>tP$>|mixjFc%2cbLy{fup-YBp
zLiNgJdT-Rt@)#=5!g0x!5^cZ5wPgAKy8xszsTf0S1k7Kbsgu_8@>K2q&m6|4PoWg+
zpNcSZee-U*S>pv1?iWdng=25?c2BO5{N%@#Co2)o(BywucU-bW#jAm}_9J!g#G-If
zyRRa<XB`nDsyIPyYH;*JNboDR%{}*@q27-@i=jWnXdMh1wii|JPPfS9BvHq>(DC$d
z5@+<wOH4|U@Gg-))DbV^jsJC?F2uTj%Q{K+O-9noNY<hc*-%q#Jd;71Olm%mySJ-6
zTX%5aS&hc8HK;&@e+L>y@HlTu*-Pp3X8n8AevWD4kQjmZO8y^xCLm{AE6)a0UxCa1
zZNO~-F_;xo+^_eJqWfu_$uF#54RXYv5!u$XN4}fZl+rh?HnR?bAkw(B1-6Vk8_GGb
z61nlSe%(ZFP$u<*>}+42WSRXn)qWlj`<?uzpS=QF-{V*$Kaon7Y5w`q06L^Qfrz#c
z-<eZpN}!1pdZ*y?ZxV~CfEKD)Uk&oP^71k(mA#$CIIo`zC-nS~enmc<1>1S(S&r)<
zpU14h29oUzCb(?Rl%1o67!>lUT#0<;MeH#l+PZ~<%9C1qcB$q7dWIw~%Uf=#WVQa0
zpdXRZyWjM}AAT~_x3v7cM}$sE4<~*`ZU*Wv48Mum`UIyNs2Fe>O#sgnv_c&Qc1y6L
zzGfhT@GPiYp9}Xe^<L<S=^#q(+#atloF#>xQ6@}-Kd5G|^P0r+m#CgVH6%SoFpuZ9
z*u}bA17nO7Yj+=!i-a5kM~;Si_XOA<(CI`e_uYNL8C2{Kdm0CY(j>`X#`QUM;DFsN
zbM<Vt5No}mC4I!^>Gch0xNR?Z7|-GpEaaYa=y*te>B7pdnP7uphe!8tqLA_^7wb$L
z`a~UM)qhpFb#}p@8`#8GnO}ZYni|pLq3qc%@Gak#O8B1|G_-toGsC0^QPv9-$RwTM
zkJy{au{&59RLWBhwYy{lHzBT)D&D-DsY&hK@~V@)B#?lcbhfc)4OeP|c#~lYm|o88
zF+qb3@1OOR@WvWnHGnJxM^o8C&Rcpm>NmcE8#{c?!*lu^`x-{**LMeq%QLkHy|Tup
z+(V1MpBYpj*g{Pz2fV#=MFw|7*CNAna;;lH3tN>k(Upi=$r6}Z2P^H4ph+VpSbWm4
zJn>~Ty|)UHxI)nd1wAe-_<lp0SAxn~P(bW$Q~G-f5`a}?92(eTRhh}hfN^W_)sKjV
z?Xs-ltSN|_`VJj0C|rVNn^z;RV+^qj^o9RoXx(ZEMl}cux8+f~lV^U{2UPZ|%K|8)
zp=BIpmdK<=kH31QnjFuwi1YQ5)q0Zp7;B*<eECWpdF0bM6XujFXfT%JxA%X0j~Rie
zF}YO>UR=S4{;ZfQLG9OJ!NwuMuLUdRQATY&;T*s_O<#<9@mga<@8T@|N7o>iOANq#
z859k?Sg(TGo&#+FFG1E()y$XTrLqqzY!g2LVg#9co_GcfFb3a0!p>CF@!kRd=k2{+
z)fiucS}?9{4Mp8)!wFq-<(aAsE^*p$xCI)<@H(SGXHecW&d9t@meE*@?RqT5i5`~A
z42~KkNn^vca-x=ixlT0aIq{Ry6-SCafgV5Ppw5JAVQUuW#4|T*zmsOOC)?L%WW4X8
z4ooa3`G9gTHOpzsKT+G&+gdX7ri}RQ;WX*C?zsBB!*>RmAfSBV%{b0ak0pmxu{lIE
zjW>zX_B)S?$SNBfmCgtk!`6XW_8>B5&Z4j{WY8@^WcL%QXQt6(_;!Z3!K&oPa*xr>
zw;WMBjh_b{u?wB7J#V2CJwS6Gls@S;xNUI|{IIb_DMlfEgbM^yABjTrHB9k=`3|Hb
z)KmcHNA;bGGo)852<dS^`~tavZKk_5+Q72Q#7IV2jw2^R@^`HY`Y_S`Q(f#VCx@mF
zWoqpg{DClw-9=eUa_1Srp|vb8Fy5T;;SXyX?4F`BD1-5;{Uc|zf=mJ=uG&TsLpu}I
zc;VMfbPvsinx`*hCx<2iBGsgw_ElW6oiKczRPT~GONnM6D;@&s!FyAnojx~tM!(B2
z{wN~4D%(hx>aD!%FOS0sx3VQlt1<2a!#`;e%oJ$Oa~40$2I}$|#2hLC;?2F1R^Q?<
zips3?5FE#XcO=6&#qN}$0+t{^o24*;kNk~9F<_tss-ESLlS5`fsgN5)XR;P>_2^?f
zm`;u~Yw6R9X$zGni-XZbPQBfxV_@K^0Q`!}B)VdeqrelZ<xTAK7-87+ZDAHfs3NTs
zrPRbL=0ce!3#6%tT?!Shd&CjH%eHbJe6|mNj)KiEPi>T6K*-P|-+42366inE4F1FO
z^>tpvlAEJNwFr(7kT2!EeFEdIUOOxxO0Odd-}vEMxpzIzWXWfw30aaut(*rjdx6FX
zr@cV<oS8ETFh94x=XO}NhcLYdk6^#+YGy3Jl4IvRHbc7fZSsfYWpN#0+ws5yx<}85
z51tJHdyU*d%KROkO6JxFJ++AaFVIdsK@x>c+Jqf1$H%UR&3U`oLWWzGu;aOq^nM8v
zyX|Z|t61m1Ve;=3-ukLc)zrj8Wgj-z?Y0ZU0!Ueh=-fJW1E$^#E8hYZ5IXE)tYwwh
zOpPSrDBZD#zjcMRge?euMJ%neTNfPAaqr3@J#Ru@e%m(WhVl46ad{p`&Th_Kwd=Kr
z$mO3^+mV{JJJ3qefG3pf-#Qb{tMTYKrE{hs$eTDhPX|18gGkLtZ`7EcLtee-@Jn8^
zGoK{gxzc-dapU_~s96$1%4Chg&|r9j*}JuwpmrId8#IT;TGeA7L&AcUkPb2#Z0VVn
zEJ|2mv@)b**oz~#qut-5DPMI%{r4za{l^|!u&W`&>ixyH;FeolW*PaQPwFs-XKB|b
z`yh|s4X4x67%Fl&VD5`9v#T*KeO}4E%%q~vUmIwEHbQ$hH12BSXIhu$l?AdiWcX2M
z$hds*mDvv(Y-0S|`u8Nwiss0REdFYqIvstExsT(YKNeTYAyJ{yH#VG?KO~UvQw)%r
z9@a6`<p;p{^Q}eH7?ApHgyOc(GH}aDeUhGo&yfIl+xEi@naosdS!x%`M))H2k|r7q
z>mBt>ezDMY*viVMC=a4GygdRrlz44Q!Xk}}pWy!;WWUF77kYbg#5Tv&JDnLb!aWFh
z9Mp%2LUc7|z*MkmeZ)Y(*-1~#A`+KeVhu6dOd+qPLW@ycO}XMP>q~Qg4uGAttQ7}J
z<bBp+R=K%b26mYIAR$KXoKAr#iaTZG{}&eHTRzp^m730SGXPy*;-+MhU0IMItu$Kz
zr7YY8Co4h^HIlr&t4wn&7n*(1uw7z$TiSEM?uFkuA~b*)LE|=+yL9glQS{04t%T1=
z+>IE>a<SsttmS}bFjD)jn(quxh#Q%XL}mNZlAL#_ER`0w+PO8^poRfmvX`eP06CJE
zZrzVjuqWMEFp(W-Pp4+30fVV(7GeZKMUEOo%+Iec?xL$nP${Y&+J0Xl)dPqg*(5`F
z-(C3*xU(DP8{DP?ibfgJcZej?OU+@!n?0y(woYUpk3<`Ua@*Rmw(epRF$g%=Pg}$>
zhGW#|Nsh@&kv%=%XHm?ic#5N9H=w&iDGY`M4fo-kik~iuTbuR#*%9Z&DU~(SR;wm|
z?_WI-7(QC(6D;5$jDRz#&bWpjmH>R(_bz$OJzVUQM%U>1N1*<s4zReRA0?dlHBx1w
zL>Hc*@XIX~5qq8GfRs0H`PP%L3eaeZz1QA}{(nrpcRbbq|No!yvNN-iO$b?K=VW9g
z6v}ptP<F`XWbajG=#ahl$~ZP5lD)FB$v&L<{62eset-Nf&p)`ha4yGrKA!h|zupF}
z9b94hsMSN{DkBn(9#YC}jl8kuZ1q#qq)6i+uR7e6{bjFlyg|O-@gibvBTh_+jLnDG
zt!1Tq4CIW_XWO1AzZODuMKJX{TZ`uKRGzBvC<@Y9IXkUaG-&73IxRiQbS9(N?)9s8
z_YJf9>z|$yLUT5ltD}QGY?v5V*c@v(TZsQiYOr~bF;pMUwAHt<Dex@3Mp%)P_E(u|
zN#mE5fY;)p@KbXNEAvc4(y7xm*M#P9Wzpw~ERWFp>48H0yfwf{gT|j+zu7F*AI5ze
z&PXd2C9Kml-n`i+T=C$9`L)BG{JB(tvf3%Dq|fhVN8QnjYmkl;qzp=T1PxVE<7MU<
zM-KGDD{8*Q`umyVs5vF>7%WV5S5hp?<JPk$zgUv--Z@o^A4;DCH?C=hS(O4?p`HV~
z*9#6e-Ri*c%JXw^_61Tm>^ZzhxUqnlC3~KpeNM5T9&rkura^U6cKkne@SkO#4t9k@
zGDT_Xd-#izrP*xrxAWHZTt_L0N55RVKUBS;WHKYy?TxRDzo8^++P!Mp?z8Gw!W)XE
z+u-f4e(ySuPrU!RS`H<aP1hsfMR>jRvxDa`2?jlM>*ih(S%%ncIRB_T>i9<Y*LN6&
z&YTZ74<ObXzOFc}EJAd{K}gZMbR6-eQ!nv2v6bOR9DhciL$mvi&Q-?vs))$3l$@<H
zb-F<}0gOtw*H%5uq~Zgw!8>Vk)%JI^Gn-Ohx+?*6Pmn6QAaDp|X(Tqc({RMEU`pw{
zG1&csk!;s4J5`MLk?s64S7d_tFOWu-IoqWg#e)CU>P&l7RO9q9TB-2wxAO@X(oac!
z@J9i<13EIRjRZtSZ&}Q>4}QJ~6z`tpE)F;$=Jd8vebnm|p>~+`#j_FT={4zPn0AG&
zfB@FKZ&~QS**D8wTM0LH=P=7EGS#sD;=_L|TD9Je3XwYH&%hVk83IQnt{LwJ7>%qN
zxPH;nd}11t5h-Q3e)Kcl_C}MG_mtC2yB??XxYqSE&#knA$wU*(1kz#lSqrO1A$Ap6
zvecCNQFeYo>?lQp)3s&hmFukRf3JlIMV0{GBzgHO@<ui{M4a~~>AstXv^kK82z`$Z
z2z*LE19hWHK{BUkp(`GFZE;FXOmPHXuQ!{yMX;`X)n04BLH0`vJl1PFh!*>F6ZHgD
zT(HOMnCZEaO+DHBuxuB4PV3C{wn!+RKMkQ*_dSyE-5Cl%#j|c1e>4tDP}$%NzRusU
zs5B0Yv}<qG10lD_YuW5UBA2!WCI@FGtG+wyA+q4n|J%9qTl)HWM5u0mqt)^%=bUb3
zM_))PIZkwV#DqsF<-exWlvZ7gYTu^{3_lxQ3x*~L2GNMI#(0)!v9z}>E8YRw7gW;h
z>EX<>cRG3xZ#!V4@Jjby;4Pl2Uu*WN+R|@A{{9?#?%DHrg<)WT>(y-Cq8Jl5=ZO5@
zx_9&Z^M{1+qPLqIunvn7-P|@ut}lt-KJX9!hxywg7FZn9w7KXGOq?hSPrBCw*YB7q
zPR}H0qsAw(L;6r+ZFg3)TVFRw)aNhWgt-9=#mn!Oa;tWK^&cR7*S|W7&}}ok?C@Fe
z+o>GA-(Jc8W>___R0=JDQjNqC5(O1QmLbztd3vMdWsrOsBMi|iyw%`(ve$J{d?d)Z
zVzTCdGpqmk^NM=-fhBVqq$!u|bc^O~vi|cwR_4Rs_aLsztvsK2BhhKB?KGTKCn?>6
zHzE=iLJ>9s{<BilX3rOgI04v&kZ^G7;%V&F(Ue%wYS0xW1}3I>r6NIU$JXZ)*g@8D
z^8n~4uSvbe9uv<|Kl1k)iXvGc#(_NqjZ^NF*Jmi2kcHLgrom?(_%kt??Dodbxotg!
zN_WJ~gHoF3bBI&8yC!F<0NRfl>^P^*Z2dyjgh9`F2ryZrsR8hWaS9GcddV%c9SWa>
zna=~7+EW|li$_Tx*o|J@yt@NGgCnL9bys4k3D>rp9K!ZIcMIIshlU>g{^FXQnZqeo
z!zxw$!Ef(K?5E~temGa+2IzKvSz&z1?YuxZ!H|IWL6tjfZ3H4M8P{|CcB!g)F_JU=
z<Hb(EMv8B6Pm_MTPjSbTM64bqsHek=`|;h)yO(q+w5t=d8}tErb@r<mB>y#a?(ig|
z+jZK<VjpnEYWSRFDWa+pYgM%m7hT#l1e_C;p8C6A?pBzhkx@uc+rlKr`X1)|OI}CP
zhFS9X{m-X~hTM^EUfGsF%KeB5kI(<xOXFWuyqxgG{c*V7Z3uj=9j8(?*gGO~-_L>Z
z%UoXc5OZ*Q?d|qYubdlxNSpYQS*fq;n)u2c4{zzZn6_y3#iu%7%TQ#+gavV{`+M(R
zbVlZ&?kG=@4_+k9&?=c}53CR9WIVHWL2f+JE@uWQHZz?8K0zTXZU~&`UEMpYr(ifM
zwrTioY<Hwk3MxIJ|0MdUXyEYUaj-B2`HZ&SDt{?lq2To<spxy)I;kAjp7!C<cee(*
zS!;b+VeZ%8H~44%A;2SRl$3TugRYjuuF{MwzyC2(6>*Aok#V;o$&s>^BaAMS*~*u0
zI_bpKv6+ts2W_=e9fUcqjo)QDUUhriO5CP#^@Wv2>BNf7K|#pir2!)b%-=0YS7nXq
zZ0ia7(m%;!#LT``?kC9LO+0=oM>TTcrROKz&&)n4SjQMVOxM<GA!iUsT?TbJybd{`
z9bQ^9JYL?YlY%jKD>zZ7{4+nFr*eUY#7oXCI_Za0<bMqGpc!R_KX&6bJW1`f2KF$&
zAY}Iu8?mo4wNl!xdRkuAT5MA<9p@FrVW0KXpRTFWOqNi4PMXD!SqO=<`_XikLx=tr
z&(A9d`!uVw4(K21g1cJfW!>7`q^SZ{a(6F2CUNk^gmhsGlJxGeDf-G(@h_5$GOQOO
zHg}+bmUZsyq2<P={&(=dB+-{g*#n70=jzn$2R%M0d$dW%pZNU=o-wTYgCzga)wB%g
zOuZYRbY}fWa|4G)_Bd!XnCQt8MFQ;4E(LfpCnZmWhKf=v=DJaGt)9OUN#CJv+%xT9
zQZlJcJmuskN}1}DI(Z)^n6S87#4E*qGYwH@P?FBAS6<t3`-tY<O$1pks^zzTobCnd
zBA1dqmBT8@&R%amL2sDM!+BJj-gdw-Vs0UxH==fOWWWiy6boLcDT3&Cms<<Uo#-JS
z3yK|$t-Z#XZMDSSWR>Jou--9#%uL|cb$XXXiPkax&GVS2-qWe=SsbLK80vd(BACD8
zqO7d4w^shM`6)<Aq`%fjAg~xJ_{{B@-xVVXV-f`4`m%M}dYPbC^UiO)$jwyc{oS-V
zgXpZ3yYsWzz?*|KZ4qT%HfQPKLT<6|gUc7(9591X#8jVWI*vK8Jr7hFvVZAZLBONv
z<Gn1wradJec)G>RShdusyA=ErX(G4CN~02Sl*Gyt3x}`r%z`p!jRtxO506s~bbny%
z|K^nc7svF{%3DiEH!f!$k2%bkD$+J`Degr&oPOj_qZIcf@K-ri!#Ct+$zS%LfdI5h
z?2wi5b_3ws+!rrqZzy8gsL2`Ve=#rF31VBanu(+`VqVrO8@i5oY?KK@2UEXa?$Ko5
zU6)FW4R85)7U~zaKT*`)|AN2wKgl0&$Zsks7T}&_?z%H?cpB{_L9n%f;+KR3(yhaR
z+iea@o_l9s2jZGU$S2HpXT&}wUVhK-=rE6TEydEoMli=2G%6f)9q*M7<~=7KO}Xy<
zvU}*9%}w&<<>`DF%`)ON*XQ?T_8ZNHiDDgLheVHyAE~kb85F;1YrPnHFLc1=)vX-+
zdF@jYBqiqsP9Prs99aR)g)W43iE$rsU8DPMJRV}5DtWnf@cc)j!eR1}5BuE=#!O}O
zg@N8@B3Y7Y2biX=rjVGI;~e%(4`U$oR-MY05e(sZ#TJ9E9@VcmkSkCRg@q8cjD9=(
zIBNRaf2qoxLjZ>YgB2st&yyv{uMe;&+A1UPxIU9lj{>|W0#ABKmk6mhUREfFbZ+`u
zI$J?{*7r4Rrb`J?{)eL^{1F~^1*261Ezhl%r}Q8e@`3%)>Fnae8to^3Xyno-1zV!*
z{n_j5kGWZIyT0}AAQ<)2jN7R$eIjQhRYU3I7V%sae!l0F2qnx=zSPlJWeP>i1O4p@
z7)pDRBj7NF2yhXED~r3gAJv13SRd2JGdM+V(|}PTGQoDpa%p5U=|dtZr<eQRF%v1_
z+K;^R-b*f00ayDj<Chkgu!Qy4HCW~m%ovb1!tf60c#d+C469U%4%=i6kbS-6%rY&(
zwQY<DpHCuQz$vBEbkKbc_YWW##G`ctZ8h8C+m{3dJ?YsD39Oz+=!Z_u=Mkr3Nn*H}
z(sNVq<2rs4sb969cDqGdYj$OW7QN<6?lm(k-vBoQ9?j4eLYw^U7)N6n7BeI$?kHR>
zdz#f#F~Gx6G!V2nCZE_IWy_sz<LxRB)ZJ;Pmx`T)?^JKxe>eiAGw<xUoPFJv@U{}m
z?y>tbXUVPo$7RbK4&l;3Am0#_f*213I<Mp#uoXa@1M&$ov=NyA!;KabX)HpYPuD?M
zr6Z3w3PEKPj+B6ds+Knm9B*~s_3|=#9d|t$RB%INPXpISZZ#GYH(zs!7)M;UN;}mj
zt#B!wE8m+70>0wls3EBV-f`BHx%?o~j&oyRr|P?#j}2y__<cpA$XL2<;vOx}QB96*
zUWO9+>eHIt$6O0<-1k-u@gPuqJxbu!+NN-zIEintOD^hAO0NI{JQ?VH5-0Jp`fl@9
z`pVQE131I->K=_9BO|iE(b?|(fO-f@LN{3UsB!9CR{__^<Y_<A)1G_DApV9uZ1v|I
z^nQV5ze%h6i<#d4T&LJ;?q6FoIaO+B=(6s*{ek;0zV-72MG;Lu+|0OMr##l(!&oz;
z#x1H4%IbeYegw?d*NLB=G`~&9f4JB)*6z<QLv!|UbzT_#x)nTvFFR{7IpCz6o_Ob8
z{Q0G8&gtss3$?zn!3Ynb9E9@?j^ID*8{iG#jT56h?5R}_=k*NSs7IEODYY`${&ZsN
z;ER^~6hp@$*)Ns8kq{u_SJg}V3U_UJtLx<BtC$7)&Cog9>Nfk8)}f&$J?%|n=*_N7
zZ@uGpj#r9GPvb?pNq7bxLW57AY^|;MOx#U+(50yG@?DSW1P?y}G3RUzaDMp<RN%~o
zUmYn&JplYSp>`*io2&+u4`Pd1vc&hmmg}s_7iz4&s@>`H@3N>ugRvoYq2v!r(34Qp
z@2rZyV#0hccM-?GF<TdXl?(?htn|uRktHk~QkcVrjIPA&=k~B*EeBGL*H)A_-%zoW
zV^+PF*x69Omfy#@va$qjo_*=gNev^dZuj0)9kU&@wH=HXy>oSKTPt;;B7P~q)o393
znsag>^rQYfYBY=S&I2jTD46{$hh*&q9fho>`P!@7JJZT95Rp>%>YFWDeA-Z{TmyFu
zmt+IRovW)-Itx%q;`KJ+2I3t5V0?2^LayL)3U@Z+U*wVeZp5uZg5FDa?{7jYX-4LC
z_$1ghQDDqrTn6$p*CVM%^W;SHyE(mjT(mRi;(Uo;Ln37q_t(taS?2O^1=kz4Psv`_
z;E-c~=USk}XCS}Yt2N~qvk})a1Gx-ICOuMUT>22AwD&q)2G<j1trk5CA(5b}X-fzC
z4f2NligIi+g_2f_5A|$(#Ot&)S=h<3;4EL~;RCN=vb|H_vPNcdr<@G3E*+kvW17c7
z{|z~GFj3zpFD68=cMfMi6S+oyRk=q`PulVedR>j5v=jmERt4G3G)2Elt3)`GiT1w1
zKa6)%RHm#K8JB<cft5siNc;n}94*s;Lr+{Yq|gf0pc0kEFi#Z|pK53m8M$ro26p{X
zC~9iw<sAa!D0a;!w|khYB=YG?KTFb9ivV>d&#7`vnacREA0?fWC#kULMR+M*XI+W|
z_HL|0Xz*{QdA;^R=(vSKNdZFw`!7~n%Ijs5`akXERV}|ql!~9rn~Fc6B%(i}VZ-6g
zZVs>Iku5<sKfQs)#%XUd<I$mDF7h?=bm$SR`Wt%W{Tmt6<AjxKmdp^F?+Z%phbpW3
zU#Q4eD7i^Y_C;ZT4kTZEo@oZ>9G*ro<ZU#^{~CdJCNse8cuiop2$q^jiXTVn3*h-d
z0`_HEgbdhbs=8Wqg5OC;T!53Ny6%&83|>+;#T0FugPi&KthDKnMIa@L<DUH4NuQZB
zIcKasy<QF|j9TQg^wmuMNELH+xS&8p6twjMCvnXQha6|`ccItpwqR#VNDtlkmetSZ
z!7FaCIANxV&sGCxj4yp-eswzwa-U2N|5s4c<^L#<r)iMu7Ky}9%VxI>Z%~q8%QtWv
zLPznB#?xhg@hz6Z=w&ziSdqUzX6RLP2cszcuWMc{809lp*c;gAlp}bB$6)`8717Xq
z8lug4<y@@uC$|{QC#4TwB(I1-fGdXac+>W-FMU|hheM^HUCvuB86LUuLTr~kAydBt
zj;n4a-%1D=i8mQ~vMcah>(tt`334ZP)9%p`;tT8}y}%XpFq+7a8VxGPWL4~WmMfsi
z`b&c3qVG`@qFld!EdThc-WR~*8rNwrYFdEJ(-*<Xv8e22yhJKcaNX~&@djpSWXCpT
zrX}#7{>W3ohweHa19llz0e>Ty72LTJU-U)6b7dGCo=AM)RRGz%1_Qegdv@P7<&&<7
z!rdk7=W#^BF<8Au;CO>~ca;OpW?#uahxoC8e@-52GZ0}!9=L`0`swr~U#1WpxL@s5
zvy7i-pT7XfU>)usjJMbzpzIdhzDlZW4iOZEWSiUQ<2jl@zyFar88MIhc2g;NRL?WY
zoBbC}uT?3dx&+^-mBqTeNESz@<%B=UC;qH8W<32=q_x$Le(lXcbFguyV~jUZmy8n8
z(76@IOa2zyBl|NOUxPrJ?!7I6SK~>VY*Tup8ubNKqupL4CI|z&3VA0pqOgQZ$S%!;
zST_~^IUu?tVS~3yZQD(~_*;`^Y@R(5CMh-JtXjqwC~n0FtRF*DOFBA4WDmv~W|v_A
zQR(r@NgV-|^`&m<ak`Fj_ji_g?nl32H@u(QH+tM;j=?%Uh8+NEmqyJpDS#35y&bpr
zv}=OS>;+w7gXcPo4Ts9*VZXbs4Vwo17de~37Nc<FOC{F%?k7iCjPg^TE{PNf2gEvd
zdz<Kjl3&db*C_b9z5gM3l!RBmd%e~<e}dY?AfBvwP7W|vE8jOEs4T&`B;tvOPThpS
z+343g3|kXpAZx`~wbx#*3>T8s8%?qgiK{IStq_59;93+>s8frD>+i5-^n*uNWaIi{
zQG$T)XhZdj=FYmXxx1aF^634^2)o_sQ_l*qE38Ow?z4Y%&L$RPPj>GI;YEwn$y70q
zl_ZurGf>g2`tvHeG&crjd&LGu`FL3@)JujtysK{VW2m51Q8b)&_W$^};^y3SRafz(
zEM4;8DjIeqr9izZ7oCz5tKIiizlud%?Ok;RaGf!@>BRei$FQbbBG@I+n=i+O>lJMu
zRd{*B1V^1e9*Z*m`*iYjC<fc15(k0(#+G|(d@;N3A?19ttzwJLNVjRzB!*|8KRxNE
zU*<&)J?!WwwX^$d%`HU+XZ=It0Pt%w&D{walc<0P?`PS7K05FC!5$??AXHFva33U@
z>A|I|Jo?>tAG%qlO?zOYCz$1AgR13smR~qQK1eya0bl9S3PS*y(w$N%Vp4l)5CwRe
ztt}=jVs6HQj^Kf8)QFiwgHUew%`mhiY3!8yd4-eM8W)%>ag7|h)b<r_a}Rdw#}|e6
zdP3d#PF##*`^6*&`KZU;&Ea$Ps)3A&-YsE?zL274liyKE7H5vNbXt4673!P$)J%df
zu%@O@_s5FtJ6e@!KP4QVmsTvX(8Up$k-P;_48)&Pf|ya(`+?WhDhu4!ih@F(3PY03
zOu=u3%7rQv-)L)_AU;<E2@9*63}q5HsQ=!Rv1%zPUo822_gA^=q5=MOw$?egj>-}G
z_|gH-jFK)*$3HN7`_?4)jMV<!EM(8tMDu*~%o2Ed?OM_QTWuNyOcyp0-EnMz%)Fd=
z$oO(h!K3aB3Pn}q0!5|JA40HNRVv+jVTprp^trB6Li%`eXTK-7{cQjVCM+>q%8mnk
zM5VIAEZMtx9{eq^wg2e#{l2_@OF%^&YS71hcXBqV=K1jDZSS!TaL4j}+E&gVyQste
zqEV~kJDw#cabmS^NlbVvTN_<5Vaj>eQXt5%H*2nGl#?L^dh-ikjjn&yACN_B{BT09
zfmC#h#HdtNa=6Od_K%;FY?wc4gz?UO=8&PQEt>2JE1w@)Med?6$U-?QVJ?C06zA}x
z&qHEDzoZ&|qm2yBsZRa!ECjjP2TuL?J8i(V;8=LT-(gU{SiyURV$4|}gkdo_LAm>;
z*xgRFKlz2J2K^9K;fpU632EtR19j6rTPr>*o$t^)aHC*EAnWg%?$1p_Es!@2$?0h^
zFxfl~!nI8EQP1!1S<~HN3KQN&d^53W6%{*US(H1PuYh&9o;H8le1D$ox6evJ{`^?Y
zDnHDM&*<s9$xz;F-^2kBBK#@VHc83*($G10{nRea|BUm9pSW>H3>(dwm0D8)`BTUH
z5qRUn)w~C_ak-h0RtVVaVxl0whky7M5)Uqifm%j4l>X8ZKCO+jeSCX9p#{eAMderN
za?`B6&F9L2za~0ChQXSD4kw7auo?NfZG_=x1~AO|Q43{-uKa1?%ZaWNb8`DVVYlG~
zF|1g}iOu)6-6UliK?>(xgf)&t-fUaBkPk=4Bn632?ZJh_iVfLqHNvKj^vFjzvd$l)
zc9ICrpPIKhuD3f<xz-p2e4XVN_3o*G=|JA4l9m`BZp7Wc-+`?kr9haCS=b+)ppK7{
zEXu)7ilf(h>5GC|oS?O6UCC<B5e<I<zH*2I8ZCZzR1(rZJs2fB9zVX(+JtZUetW;>
z4WnKR$0CQ%7;KR<Oi>F7mv-@I+@ISAiG4Nkqw+zR9Srmku<;C!El7G~|4`<UM0T=N
z{|wD?Gu2R}!dn(Gl^dgi(j^{@lv^qzWSsPCvwO!Q_60{1qYQW5k$JMu4J@A-8cQl=
zh6>BYMeZ0&{8rFp#Iq97e-LQ{ehA*{`~F`sgNotLC*#D42~)-`<hX;r5)oaEKMw;x
zN)y4~cHpX91vcHPuf)<J<0=a4{S32;7%U}!AP`pJvCk@ET3@<f#0(Wtw=mBBvd6^3
z-Qmt&&MIXb72Jz0!53Y3+fN4isI4+iTf**!;3<@?^id7nT+Q?o#IuMx1be$~SI`P3
zV=emdekBAjB~Ra}e*Y^u;tasp375lRf7`&?BvVCol%L!6M)wXg947F^mwq)4TP(??
zv)i8)FrfsPlfNP{20KGWbzI^Xpn{}Uk-(Q|{9uP$8@Qu_l5&BWqcXY`al>aCOgamY
zazte(>nMx@Vg~@bXG4TosXKMmE8kv<ntk))Uy^x{JxlWKGlie;#4F*`IDA&u88<Ed
znN7~^gttHU4rXg=P$2Um%~U?R)l`G0GwFtrQtb&G`|h__-~<KYwDF=b4+{U^ZvFQ>
zs7MEup$;a{pFe$x9<!Qw{93}o{ZnF=TM+v4`)(Zn!_3()(r!H+<r8(<44n7Bu8g5U
z&h8c7p<xdmxxk)dH(w%l5t_SWy>{#=3)!KLzCn3;)%|yF=yWd86n%BHBu3O=EqU+W
zsO?nUGv^*c(TuoaUN^;J`mKouec$1S^q*Vf&&Y+??!k<|#+BiSB+<yDu$9XViNA?W
zx3n?hzH!{F<6Y17czaexn2%w#ct|r=!CL=%(p<~jO&_muCh_^NfG`Z0J2~ym_QBV{
zZUR1nyKhS5)*Z&?>kce^*Z&LfL&uE5l+yd$wcdhd8Oho6w)4rTtrQDwA^RiV&q+*C
z%ZIU9yDI_6k=^Ao1NjU_rfLf_aNLxChLTyN+_Hh>c&|8Pt9|B3eF^k)i-nh~<xu<M
z-)A^x5wosJf7GwziUn79Rqi3Nez#H_K}gNei#AyE*&NAzO0+eT3do0RYjJb_&(gB>
z?GP3fST=>B-1@V=)!g1MR~{7+dbTqS5s(pRX0-P}_EFF6v3PwIYg&L#RC{qUb#j0&
zC5`E`B9{ve-QhfuuE3*C0y0x_>C9SYC+<=c9_p{OaUqIw2oeX%<C&qstOaS=v%s@k
zVhd3%mVY%<?=v9JCGxO6TQrK_y!Jl+rfh#_8|g?wBDxuv0+od+-#kzpYz1kXRm?EY
z7RU|E+Y2{!033A}Sfi@0LemUC#!+-d#u1CaD*vpt#_K2HCdY~0o&^_px>5&?|F^7G
zZ~<x&ZfJyu<M2eIu#Z^7c#TJBU?>&1dj=o1Y|~mWRn*g2;8MCQD6=qaaZb1w)zz2j
zL;(%lEBeK04t(zR$y`tR0?pKl@{#y)56=;Hs+|#(M5BIwk}wk_<@yKLK#2{!QiBk5
zkxrTRJev8|+jI){bgOS?)4Y6wChvD@#OMFG0sq1ZiYGr)h4H$uA2zTkFx!^7Ufy2Z
zhZNzK)G&SbW6%elTZmR{03$C#2(%T(OL~3Sq-_WZzI}skFu_zVHJ@h##=BMYeRT0H
zy^e;5{&n+1DiL^@N=Z;e9P;K%K2_TA*aX!M-uF3;Uvzmk?{-|h<MKF?Gr3-VrT@kE
z`awrEoBFs=;KE>5?~=CqYvROIoOQS%it<3;SlT_M9F`(INL3)Erx+Nt@qVS&5W~<t
z>A$q%z4AmGn7`F$q_dSD#s2NK_F2b~{!tQR;ZKe(^Zds}`_RI~vhA|ZC|33|^ibpw
zJHT)>;Tq;M;ScJeESgD>g@P5spi2k%JEAm0%)v;An}!wLtr#E$e+&ZMjotAz!4V1j
z#`HElS^{5M_bJEJ0O%xuXu=*#`?_xzBq=RgF2s&KI=Ya06(oIR01=jcF>7!Mz`o*I
zv?9uOAO}Q=hA0_@6D$;phgE|d1gEKv#nKRy6YL|0W0aGU8*jwNV=-=a9-b@dQ{z36
z5L*Jl<;}Z)%H9ym5}qcV>44K^$D``y*rI*-LxDg(wI#OYqD44N50m{VEsX@on$J`|
zc>NlM_<cT?U>w2dQeuEiN*|g&7ZYK7Wo^Om#UBsoUBIXx9o8O#6Vkj%?YHN~fzVe~
zQ!vkkqN?d+u6j`GcKe{FE4J$*$}TD)upD4TrU3^S$h?WXlGCgaqm;vs@<325@adW(
zp{otv=fX&4&=MO2zk+<l7If|81P^A3K41L-y#IqT`fyY3e*2+ECCTHa$X8BtjI)6c
z1JbkAOO%MiI=d<{WoUTq5DYAwi|Sn>fJeAvL(J9c48EZndq;z0b#A_Xe=QU0TQHch
zN<Tw({-^q_U+R9pGj*JPr1<;rDD8;Ur?$_Po+m3tBnx4qkMxlalbUG=L!2$!`t6&z
zQc<lYNY{c_G3u%j5mYPm%v;)fTvb@-@%4FS&cz5HTFkcj<ho^}WFJ<J*Pt*d#}{ni
zpl$%DAW}Jy%#9dsJCw;_?6|_Gp2>M4%FJ7eYl|tRujLPGRXvw{x~X%Wl}>!X9Xl66
zEs>pPm#|*@nZ+5P2zk7n?N$s?`dfRDWC%=rsljt&VD&g~72xNc>8s_@V9&Qb;0$gQ
zTB(J8^up<z_rd4jUF*K*t925j9v`#(z*ltrV;`;*hGJtvO=F<tI7-Ssz!F26V1NQv
z;lO0^u|WHvYZzT+VTf$1{I#4t<{5<p%uDieBx9I5F4iNaQo7b9Ow*bCBBz)AH{1J|
z=XJb<iMNz~{E1Kf*IoplfpQ$mZ)w#8`lDQyAY1>Z5x=)*l}S@*#$kO_lv_jZhknNf
zLrl`3`JiN2(HB^Cdop-xn6F^YE9#2FV<Yi5<*YQv@z(|4tmh)l*sLb<|8;0K_DbLv
z!Ab@=gds2o(LTxE2k<)=uphRDcd=*x+CUD&V${Q@3=$^bKc56{^EMuqm3*ncIfsv1
z0{>*_z5ky{xf#H^AblTr@&y2<HX)6Dda%NXrEm00?-B0@XomKEOX-Xnp3xJZevT?d
z$u=+bn~3c^OJI3aCrXj=bQHvDaEhsTw`#8kC`@?>VM<0g?`f6e^ChqS>0HD?D?oMb
z<_epPo%k%*;K<}X`~|f&R?awYG5h)45Hq2l<&Vc@kAj~~K?qQ=h>-K_Dx0r;N90{)
zLz?vC0mi?WaH7a=;MB~u%MZ8U0B^gk;8o6BD$PFwoTHwN7NKEf_*Ix1;5NQ2mv$h-
zw;!N$r{G%TyT|~5=&XpVYxq`uWto(q^QhXu-~~{K)mkeLN!2|0Nce({P~R{@iSK1d
z^R0)+FX~d2KAfxPkv{=toMw^vrTWt?c_e7+@LnQ<RGT9DGhgQ+o!BAY_(xJLPF0;(
zsICJ}7B>H(>bW|^IdH!6{>m}{?uk%fo{SP;GWr54d0%n*?@qu5ptkl^SFo>-j$xfZ
z#$E%C0cuW-tO-DrWU}oK$x^Qw`PdmwvBj}*?NZtB72+gw_59zwV7{-_<n&zqVfuh$
zhGR=z4kS<+X$QYOh4vIzK^$HtAhv3}deIuld%<MQ(XFkoLm?kumm^R^*z9b_B~HPo
zd(TQZ^R;pHM>R*sU@IV4@%?6kOm#aGLbA<eshKV~;(a(ot#hmfzd3g=BO`r(;%osR
zI>>}|0Ih{r5OL~0a8U9s?%|xdRA^UCyT?>oAJI8!I`U|#<pSI|W`^Z<F3{MY*qAMx
zx#6N7oBui!6J`q5hunw8zSsFJ3S`va`$!jcSKpu!-`Z_=eubdg`h2Hvt7Kg)1#LR2
zJjT#dwMBI7PtB(;?LJM4ASm%mOAFuG`LtW{o@c-)Y%;gv)J@kvXp__H4N7>0qUfV~
z5vUAbcR7Kz#TW6cQ51wZv$8M2NuJ!`(;lrns_9_Zumbw<88|)6>Tj4Yu!SqR0>23W
zs#esN%sg9u+>TtfRU?=wg#frYQ}&C5Yf1O^{6B#&++j`);TgBY+B>DwOiEsiak1(3
zt3m(rs90=-TRz%-p}`+FA1YMN-`REAg4J>=1!v&SX=b=pJnV$)a*Qy-vfI!v#|wBe
zq9v$A8Fj6`lV%wb!o_lnw#_p35XSgp5#XVJO^xB?qdbQ3QF7C0v4}jD|D5}zN!p{d
z5t!_Y7+$Z(o#GKfDL5JoRGGqN@?p&N(5+s8@;0*`w@s{nN-IT2yKlSy6S|x)Beut5
z7nT|gnbr&*mOm1rDR<;=_bnK2OT3*82<oCF4(qv&3M9V$q3=v%kF2T=p9Q;ZkQ!+i
zfy#(3v`BGLevO$rto$>8oWqm8@538SQDWdoh$_o)G7@nF`@|_kN%nuAUB(rBryZb1
zW_rYjb!~{UO46}tiTovU!FJpwJj^*0@!T1f3ZPDm8=9Sw+Gi<<?3>nTq_y}JvX6H9
z@A7aq+S(HFToRw_Y>Y28m_=+b@mS-9ip2r_`_3?DSUw#R(wh=0rv9Li1&JV2n}CWM
zX3~HC5aU{bo9I`GHJqOZzP_FZ>VYS6WG1zM$uqi4arK0wnm=LE5pVLio+a1e=vYKQ
z780uwFuXhfvT!b9-XpAcE@DcFMXYq>3@wgd(O>OWpbwXBKaiy2JSY#|$lbSp*@VBR
za{nvda`jr9V<TSiNtjm5R5<bFmdH0_e4Ywn#f=8M@@tBC^1YDCLhHAL_IL^4Im-va
z%Tng?d&=8z4he0KF~l}>39ckIk6*+u0)pC$mF3gDc%wdEHR1vH2Zu1PVNLHtSP{iT
zbNyGh#gT{)KlwLdOx(I+Tgsf_MY-P$k~O<;acv8~d^AE;K6m<n;u_B|L<51H?>PKL
z0C-`aV|*^_<#+V$WG8p-V7u6Jr1=NEuHdfknN2!Xm^1WgBrEKD=GFw-0l$~RhmvT^
zm&J!(uVRJUHATn;MN5y8o^>A4FbcmPLy|szE)lJHMHi2Q^w5>t;5$FyqK=Y|Xyl4C
zM4J)Kh_?=W%<?TKsIa4BQ#9w-(udI}ws+8<MD(LyYx!BM$L=NmoaK<L3T~`eWVxrl
z*8>S~KL-=yZ<ldUEKc~r)8AF5Q+0iJR8eia?Al)Ex??cqgPl&Nw>31x@epM$igbt{
z1bkGIP#NV`7+Z`mXFlp75<*Dh7X;pO^>eSR>|`3{_ul{oiO@%fFgjuk6bU(kEdkWj
zmw3*=H^BKB60vvZ86-Z^R%v=JbeSRbnwBrsKnXfqwDXA^JuT31%kpBDmnv+s-%CPF
zKD;EH(=jx&A+s;dI$vdL0v0qz+w#g_I@R>Y0R#1>8>#^x!Zl1+D0Z%A^Fb|tcnTZP
zg`_zFOV*K3!};`LOWk`1kwf4WwSS|t7N=Fe%b>pH0-jbY$#GjiE8(6~L1SF0do!fF
z4><>38D2N+jM*?tb-%nkd5sM{xGdW&eckOm?ow|VzfzdUpQ)jub$nUi{l`66#&TWc
zcJCXWT2f)!vM>@gnsk%g%kt^#b5qFO^|jC13@^i<Vw2SQGNEwk`jG>lO!6ymWIksI
zlcY@8njJUaY=sqt-69z#up0yKyVf^xpxCs~^0{_6InTM94FMP5{S|^6tZL6=v{OeV
z=~48PpC#_ijHw%D!NwpTqmuv2;y-|%>Dt(U=Q&+B6E+%{;{;F^X{qGLaJw=Pq&eF2
z-gfr`vTo2N^;WtYI08d>=q^Q!?92}R93mA}CeW9w;B)`Sk00#gX%Y7BbPd0H4AmI-
zNoJ0bORlRYGZ6HC@k+ao+kDW}->l1nIU0y!o$POj4B`O<W(6|vVgCD|CM@a%0tzoo
zpPhNInK8@~X4T_5X6IUyZ_tJ9@~}RbD=qq(E1cJPFQvx0DIiFBI;yDWB@4Ogd*0wd
z#4Y}@v@Jc3XHTC)ll5O$!v3SUQ6^$Qa-L+h+h>E<Y7=DL`yPXuLu%yE)e|5e4`L~A
zYLR?bdm=&kzU*GRYt;%?IF*9C2&d8~E`<aRfkoivx0EXqI|;zM-~ZL$(vj+HlniPb
zsqr{9T=0mQzIahU+4a5zJ{O!w8IM|Tc3t^QGZ3OUjy2D-+>x7_8j4@qA^D`r#KdG6
z64qrQySoHqd9%@DIlbQhAZ2SosOzO3pC?lq>84J$bOHx#Bc|#qaO-cvCgVk-+u!mG
zV>koX$prB3BPnO#8Z)R>H>f{-PhBRV?@yp&HgwMdhn6swI$<Az=@zGcY6-Nr`CICs
zp!zJIdFPTK>XekMA`LbQ_o}@013kBS$2|@u&^C`{izJc#`GG!>q8Snno=<!d4&oky
z6MM(U>cNOf+W58W3UHS4-;xv)g|i-mhx!OM5Ad)X)&gzn_?>^=@Zw716uFt3k&?id
zP@;S7HLSrsxgdmj^zEun6xzlX6)3VhA!sE?jonzaazFc1)^h{8$xd@dgFJ1lkss6-
zw5=T{XsTyY<Fhu@u8iUzH-}$Ecau<WvlKQu+#YYviF!Xt{_=1%**4iXh>N3EP#VuK
z#?8Bv4AAn9!XF5F-84CX{-Pe}!}5N82<Wr)S3PNLhV)dafv)PGvl8Nw?FD^%O>)GV
zCI<c+@B^~(gn^E2RA04U*fV`+9rg#-aZzKWcAGZ8VW;?F4)s%(PuO_F%$NWx_KD+C
z=MIu~5D2y1Rf9WC8*5kx1tIV!A*7tLXT1pAt}G6D47tP=KwB><NjcD?2=K?05c#gw
zR#{8MccJno=Lb4#zTug2+ttW7G1u{zp0$6A;6t~XNHiSlN>#PkJC)uEJxG>hfobXY
z@jngGS!1vn_iwtitA^8<XxFK7FM4UZfClJAU^Jnf-~fr-0URa3Qu2rADSbjJ&G|$)
zkTSxXgZ4YG!GUtgW`oF<x@gc;*Wi-s8|<u)VBteATGh&al0#>ZGKFgM7eR@^zwuGH
zq;2oUF%w*pZhLWNAFt2i2mLImKN^)U?%$5y^q5`=JQqEXAPI^J+l=FkM_kUWqPN&;
z5bqpoJ3?<$-%d1ol^zB1?>-qM9s2!&xwao6!;U-7sS(X=VK!-ow?)4yS6Dz?qdU({
z)O6?yQtTRLm8Uz4uL}(?>pIYeq&2HU<zE!Z&0|>UT#jLeEZ~{E)ca<I=T;^APc1y0
zIUyP)^I8>a(#mD0IVm*nZ=3~-(9twp3kN|;mqOj#^4qJ1Jo^Sh^cB8YFnvoh>PwAx
z8>xPVOwMU`J4r}D6xJWzZ30xnxXBq+1;-%&{H{0;60o!Ep>|k=8tTfNv^Vhx;M;P@
z{7#~V&cCX^yQA~<Z^K+56KPPR*JjVJvZB*o%;^yRmGA3eqkiTYOb&5Wuw2c4RtAqd
z1=cT}NBy-?i_*|LdJ(#F;^@kae&=j(AcHP#%@5cA{n`w#;*xhTizti*ODkTI02%SQ
zTQ}|5<MldR9WL$J1(tK<2?>UCePaQPQ}`h(_!69+J1?pm{CfQ06B0o{{3tq=j8%v3
zzk_KecAn$&q?3Ce$Zw=r(D@5eiWbw|X96nzI+P31pl?ts<;JSY+`qr^gKCjp$^OPn
zepr;3#}I^5vE6QT7u-_oP_aFcL0#9iKi;OY_!;<FP%WdAhgl`|Y=3Uzt?G%u+#01d
z+570gRNGE{_8K?PTjaA&{|6p2hZ!uq(Gjo1ML|>C3{m-K8T87ZjD+FD&}^W$1q`^~
z+&zTRlOF?ul&u|r#Sw~VfTRcSu=c!8k(z=b6ju|s1jPEh9XTcIB{0sDA<zwcQha1m
z->jREp8yW6B8A8e%NKtSAzj<9eg{aqEVsVUh`7#zJ}miZr@u=2lPCWA2HjN0D}>T%
znU-zGmnZs+cc+#+m1Z6ylDfBdH!mpziU*-@er`nirY&n){baHmhUqoyr;EU1vWUs^
z$SR1%84h6NA5j{g?eQ(Rf~SA%FuZ*KV#p)dPX|Fn{+NC05sW;EP~dtBFK|N3cO&Xr
z5YA#}12o(ca;e6NVW78SIu2nvlK|o26wQHs%h+EFV`Eurbv~gDP1R*%x~KBXr9<E_
zBn^jo+g7@nG#2@AZmf1{dqK1StQ7c6UCvoV)m%`MN*&DJWYP<iRr0$2IU<BdyVBR_
z{}?G}GA^K`n@X}kps)1p<<hyghXa3m&An=SQ-iM*C7n8ejbZdEb=&Ec_y*zg;W}y0
zwAOBsXOGa8kyTDcM3-$%oN0W|6A>r8{Rx}x;#?DFaycPC%K3qdX&V;vM1U=gGBBL(
z9Ytm8XV8`NGjGG!XwTlB!?dCPLJdVG&we0o5cFV$pC&~6Hs-9o;QM>Ca@r9O+E4L*
zf#_1zZMfFTTX_Rn^1EM|TC-pblo&*jI#``1k!6)JQHewWp7@pX;V%o^jkjqAmD@HW
z@8z~OBnee|kA43n@Nmi<9KF%@#9VRSJ9_NWVI>_^NIY2@_IYrr*@f*9=5Q6ZJ-ga|
z8T;mz3JWbiN4nUi+j-~3F9av3oII4ofgf0BRIE(wk(EoNtx49dm2#{IdD;5aH}UeJ
ztbK*wJY=Zpy{!BfLqqKf4WmoD{eKDVzp$2$jf9^^8lb0Gf;X1c7ZQd`o2xU^Rkqa&
zi7m7&m@GjtoJhoHhs6t?%m@iW$A6Bj7NFbbN_+eo;7!)dcEqsJbITsW3e)F-Zx`4J
z6bi+zSh)1<{XvQU&nUNF`uE1ke53W=AJ{vz9D<D43)!dBUp;0QjQRQ$DczSDX_%74
z5@FYUFpFgb43PXncE`DWUuLcfI^jmJGfw72efoM8T(POevq1rLO(*)(oGyo=>}qft
z@7<|J#&=cUWItcVFRm2)oORfYh-22eaf8lKOHJAEZP5OQhC#3F_+8^m7eQhFkb!R<
zU8f~)o()q`q$8$*pKQHT;`Mm)L~5EpHlGxFghTEGJh>9_2{LxUlY7y}b!#S@;Qd2+
z$?wHi!a`L;RpC9zRWKL6d7Sn6h2kXd)UdsIP(A0T?-HeTfGvhWpF2M*nQn=*XVUBc
z;@Tl($)Vta@|(kj26erQqvbYFKUdek&sWIwKN`BopiUpXY$o(ne!HvOJ`~n}lTDfm
zR3%%OSO#}R*%nUc>uiM^vK=%w34-&9R(5u1L{_evFo}6z&eI5Mg;le~Vg=zlXczNP
zR=X7o>Aj>?$A5Mx;OrTy78{YCnr;S+L3RcJt@;?#^oz3RF{vo#wP=Tb53(~XmN)gO
zSh8?E7<Au#QhyInm>hc%QH5L8Ep&!)-ASb(T*nzn=#<8~b3b@NtXrm~SqW1sNG6ZJ
zZP^64wZ3QhI)a@FBXV@W737%z#d=x=2P;4rvycoy1%){J{=8Q4{}TS_H{|~{v@8oM
zL6`PleHik+m+VRP#ee_!H_#^rL!D@gbv7Dvo;$C0d2UyW1!+Ogb$(gR<w$R<=I^)4
z??5lnyQAF_5+ycNZnuh_DK4}4SUSzL>Rq7a$V2C3@aYi8(90w*D=@&0Yzk4~vc;&n
z*5ddnkdP50vY1+6=6g5}iUD409mCF&g>oEC6B~{pTBT(DV|baAT5yT77H|O+I)21`
z2a1EMm03dM!<a&Oo}`!Bl=X*`2xu8L3;2Ik4HlK{PJO37bUNa`zB_r^0&FiG!@zmm
zz(Sga1X2X1ZQ^uDek6Z0Gw0mE6n@Ze*kQH;`^`C*G`D$~02$zWJ#ofttO+mTF8jn>
z2>dTKV>Z1(`|lQTlOiFd)HnWxSbC`2NPwFx^}l1V5_FE|^$J1fX}B7Q`GTZ8t?-}W
zomw`RbUQS=yEsH%Bj87eS^c>CFj~Dx4ebJdpmNO^pz`0=$F-B@%#`{qKg);Dd8HsK
z8EFK%)C+Eb*z40%F#uyEyW6K04GZ#SVi)%mbkSX4?a=E|DvmGEsG87UX0v=2tg`#h
z9O%h2FA_xL{i?OX5mEHmo!q@24#=9DVS1;r47Z%|O*pOGTF@ES;qr^f3~Vu!T!)}B
zs0Xw}Yk}_##Q(}b=G`Eod}m`7c6xt~XRV@LzGU--9MLX`gAchUVTMMqydCGN|3TFO
zaKQ$vf7=%+?E7JyT_W<UORHqR#H!U3shgw<-iIs}ow$8gotV`<U!T=3gEm5=-ZWv!
z(TG=VN(!6LL$AIAE9mms*N(f}hI5&@VW`Ci^I*!UZ2iv<b8}VzA6Y<GJcM-uvtTEn
z01LrDv6Ui0+N@I-LWeNIw3GY0it~Uj>nT2LV-2SP7jCTC3eIK@rM{m!$C16L+J6Wm
zomm8}+`BRqr{UT|vg@AswM0Ji<<Q}XmS3z6FUwcgX#REuZ2mqDbU26;!(Z>a;b&xI
z+*a{sQkh{>@fva$;21vm2ue+02ho?;&G-98M%KWbY+adCAcpekZAwAq=5);N<z|_s
z_n@rYP2Z<nf8|`04+f@rG;d|rCs6w0db`1hD34ahs1l|^<a;aW7B_ie9_{N(zbKT3
zhb=yhy&jh`p8DG>hyGzR0tpc$M<Pb9Y#f16JoBTt#fo`={&si4VKlBrEnLM0kQ(U4
z%M_^umsFBn_u+T=w_x6;j|P@$!BSx=;#)Rh;Y^&ftu5Pf#p<l@pOi-pG!X2`_Wm=c
zAm{aY7DWA$(i;}BzN8+5z)1($>nIp{$W|}#s$F9#^8^(;+}_m7`nsh$F?PiaVcU@z
zo=aDVXEEHAZ8;lW>oN_Z)|cXqyxoV*dT+@|_FpRblXZSt^4p<cV)aPQX`ag#b+BiA
zqac$`^*h74!|cBZbenT85@l5WJdn;%<@Ns_7vg5bk96sk$Afr{i6JtpTT(WHO4j%>
zc?>6yg^ewSSMaH&N~++)W=J!HmT(C^SfnEZ)~xmxGXHrar?ZOo!16C{k-PU?qt#y7
zVUNPGYYCz81)E?D<@WZp-v)cs8OSU%;kuo@pnh|1;3VyI<QfI@!(U(FkpYy>+xojv
zgVGK+D=v+<Uv5dw?mVDte0|xMXPGrY`{#~nUhz44aP`aqCk5Pci{*H+o5AMuQB`jT
z;DbtEVzOWu-+BClh2#%uz6<}VSpU0_N1_XLP}k+R;0Xomf(pXBk7hN+rtt#GT=Y~*
z!0z|HCx@`1_J=s%RwBI%_RMUBJN1M;<P#l#3*)JqbTsQ%2NT#de3t!&BHRCVIBotL
zi)nD0tDbymWbshyb^?ijZVt<Fz}1QY1hW7GJ7I7*1V5|bCi?DKqTBflVV1rX>V4$P
zD%hfV&R2-o&PcZz(+gjmFMyV1)O_~;g$5G9NAC8Y*OD&OX1Xo><*K*t+!i|cpZz+5
zJ*Ly0%hD1RUXcJk!vy&Iu-PClc<Knk5cl!s?ZpwJ5qaVz=)X%a^vLZafmVp`+J01N
zb|_HyO7G&w9~tM(Cwf>>)(%JPxO&h_>6DOeD!<H@vyCLEV#t9i)vY!q+{KjHF(~`1
zGXdfgduf7CmPt=tg!9Xt<Hh1n3v232i<~}va=5RM8-T;=`gguCMNm9Dr}O+XD0*-i
zK_x*R9uLX8!ITa;fF={YR2`vvYJ-<!2C`wJ-%<>+$4a|P|F4`~nt6mcsu7&U!~aFE
z|4L#3|5Dp4&UFPS6Q-tFC)3fs@hj1>xzvhS>RM!;a`%CrRBF`ty=~U%>?LcaLF>ko
zcDCJ~cXxi6JYWtGuc&)=%E>I{BA=?%gU+c8og=OO-{Ih$x&=+~%5;bYS~DepTP~kr
zE--z_>$ZteypIasOg(5;oBr<tz{$k;g8!?l_irC~{DxgxY?W=DKIXhG(HLm+0992_
zJhjIp1B&tnRVgdCvN#;yjYmP2q7Fx_vJAqrE7WK2P2bBYG%7irEO2aiWa<?@oStM3
zx%-^czBAalDcUUG5v#zxXC3OyZP1hs;iell20jp-iUY(Xy@XcLD{+9rjQ%**3139@
z{FSf7tx?IT3e{%Qa_Oal0W8s-XsQ<*MIGXXL_9p~`N@s=|9fQ5diRze)9=l2n^nGO
zTHp}fhORw+9ZfH`6_J0NHVYO*uB!DB%(0V>CgcwFN=Ljl>D~%A8b}O$LXTvQjK-mY
zS)VA;OrcAeIU>8SUPpz!@EZ5C5g|D@iQyx%GkzH~EtLM4vwHeR=l-RiUJgUw`^&pq
z31Gj%4OQT%%vdTooi?5Ftk8EB((|+R2bR|)C7L#FI$sI}SsX*qaxQU>#9V0B9f`dk
zM#{AHfyLU#3eK<r>N8E+Cp}<lPcuUJLJ$`A?_FRxpQrZnCF?r_lzCuXT;#dDiW^uj
zjfxuteqkgp->jsInjtyBNLIwC*f(0)-|n7nOv2&<Df0m@B@1(6kT`xX+b!20m6oB$
zA?H!3_v?^XfClFjnE1o*VG>W%P)Aiq`DGg!e(rg(xzwm7{0)6xfB!W@@?Fjs!yXJ@
zMa=LN0>8GvCSutLnuL9H7Sa0y>wu>j5W-0Sgh?OxBv~mr)jR7^Ex!F&Gj!jB_hbu^
zaYuSkw`9GS^?<fHpHN5)N`{z!i<g4nMN7;G_?s7{r|}mfSl&7bU=gp$DM&UT@T?OM
z{=Itya4a-9q|@}Tle&bw>V8=^{WfjVaVSU8PqNW#XWU}c(-TAURqb|M)J<E7u6MGm
zgBZr0J|5|#`ThT<m%ig!mi#pW5<k+`YEaur?~CU^DXUGuD7yvw-qZ#(hne6R|Cc%r
zYuwW)!<KBzMQGRo74!9hBRAqDR2@u?U=$2$NQCyQ%tfFXSg9kPE;xEqCiWZf=DUZl
z#qHhT_IdDDNH=AgjNhvf$4$n{2Z_F~fN6Mz_!j53h|CnN4`jGdFBQ#k?t(0Pykyf#
zQV-$X`1&cWpgvKwbY1*%a))~|;$Fx|HRRjt3D*Rc?Mq7j&DHObTS@YEIAK?A`fa#P
z?3&qNDHup{6ELZTMMh?V(Il_9DWBG!EYsz4v87eotmk~&eqh~N@}DbGqyI>}v}zOE
z9WLSM4C_n2LHRW#R9txwX=K$nj5K=wTutR!-s61L7fJd}3wV0grB&^5ytEzMBNC>c
zWTjQ7pJHrdAy)YN33SF`bvBPx<>V>r0?o>|Tosv$az8@Lo&!?jkdo75K2`c({gpGk
zQyC3{CirMQPUh4qm_r)Ja4f21*GN*;pSpAmGF@OPTS0tzIfhkz@c-+S0Gb8&f}dsc
z)YSr$CMK-Lx6*k2nuZ%2!XvGq6V9-h$Rn|>VligH0KoIr(J9{HCd#N#dPWeYP!P1Q
z_JsR}GTRgQbb70=r~cg_#W2Dy`}nTtu-C>6LFG!Md6t{Br`g}D7!(}Ls@B0ccT4r`
z<J<2f5l=4D|6c&{0}lK@sgU)rc*gugy+CNxicI_wh-fhX5*%P*`_mH=iA?v@2}Q;B
z*Y?-;*Zv2&pyWWj5L{vZi@4bTl%HY$)Bb1pnfAZQk)#Gj^dJHk6<B5eJ3+Xt{clRb
zT7(hg4+7dAqNbEeB12wvOQ@S@S0(gX#$T~)e{TePNbJ>`Z!G2*YM(_dNTsNGE7crc
zpZJL{m|<=LA5|KE%O3<`Z2hA;h)z0<X;tPQKw<tZ4z>M(qVO|0+h0;dXICfetNjl`
z)3K@j5Bpyw4V8jJ?0=C!?0=Cg?0-!#W`o53CvgF3gblI(W&i84_diJv(+{KJm=E=}
zAjU?C=kwH0ma{Hxd?u)`lUWL{`b1N9Z&PZ5@TA9Mj3N244~Hw$A5eL(Z~P%2mcP^y
z>I<$eVU7SHh0a+2I%tYQSQ7y?<{v^~{<ZzF{Useh8SH<M5%NN!z%qmVFZ*BizwCeZ
z_`&|Cm@#2M-u}1uAKrh-hw%QB+z`}IE|l0p5o+50v#XtMZUm36gq3OBYo<7qt2$)#
z0y+l}E%}mKF3U*dL{GdDRH~Vcu}*vzmTT4+wlOI6`o=$H!SYw?QyY+`b<`E9R_SBu
zk`$>TRH_pj15@i?VnaL%Gv*nTnt#kcDGTPGq7U;AxB-qWViBsiB63+SE)kJbgi1BD
zF=Wd8o7fPK!i;$arRHDrZ_0xCx9G$C3vMv~+Wy%7%Av6T0X_&M5|8pF<VaM6N;R`F
zY|7gBUv)pzPG_(n0VuEpMqrU=dUY5Xm3e>Y#%9*V2_V5^9Z&dxARZl2QK07h>Y-lQ
z#(ZTtOl^#+S~kt=6C<LdlzEkmzva*RXZ|t&cJ{^g$M)C$hy5@6pZ34QOYZG2<T%TD
zu1XXti`4s%fQ%3YEZ%<!2S(n1dH*Rnpe%U*4X*V0!-bwdga}PJ#`ktZeh~++qar^^
zMUG#!ZSt*l^@~B=R7mD!Bjb(dF=?x=zM0lbi|0JqO+6Jc>-7@~<1ate@@M@s{{%?}
z(}Ewwlfj(kU)vwsU%FdyDYpL+gh4QhD>9|FFxdYJ7=lHUUxg7O;$#2I{#QtX_dnkM
z1t~xty#ECh;>lo6`=2C<@I9E?{{Ra1zdqLgl4+TCG}7P4OnD6|lkA3{2;tTLRBVbe
z8#3@sjebh0_l*>l0W)UG5$RvHF&d37F{9!<>Qf6R^ZLeL+#$iDJXrop`v67L6YC$K
zF#ni;ZGVy;Y<~fS{SW(J)CU*`1pA+YA>aT%$a}E=?fr+uLOSC8SM65`hxeb}e|!J!
n{daId@WH2X{*Y#Py2<|nYh_Nemx-+K00000NkvXXu0mjf?x4O3

literal 0
HcmV?d00001


From ccc1ca0b700a563530d572c75c8dc3594f7b88e6 Mon Sep 17 00:00:00 2001
From: takaf04 <takaaki.fj@gmail.com>
Date: Thu, 3 Sep 2020 23:20:28 +0900
Subject: [PATCH 205/496] Update content/ja/docs/concepts/security/overview.md

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/concepts/security/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index 0e4f1c21dd..31a3dec3c2 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -29,7 +29,7 @@ weight: 10
 
 ## クラウド
 
-いろいろな意味でも、クラウド（または同じ場所に設置されたサーバー、企業のデータセンター）はKubernetesクラスターの[トラステッド・コンピューティング・ベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な（または脆弱な方法で構成されている）場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
+いろいろな意味でも、クラウド（または同じ場所に設置されたサーバー、企業のデータセンター）はKubernetesクラスターの[トラステッド・コンピューティング・ベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な(または脆弱な方法で構成されている)場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
 
 ### クラウドプロバイダーのセキュリティ
 

From 6c0d39e16c50a5d80514f806bab72fb705a68d4b Mon Sep 17 00:00:00 2001
From: Takaaki Fujii <takaaki.fj@gmail.com>
Date: Thu, 3 Sep 2020 23:28:40 +0900
Subject: [PATCH 206/496] checked bracket char

---
 content/ja/docs/concepts/security/overview.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/concepts/security/overview.md b/content/ja/docs/concepts/security/overview.md
index 31a3dec3c2..b50a4ea1a5 100644
--- a/content/ja/docs/concepts/security/overview.md
+++ b/content/ja/docs/concepts/security/overview.md
@@ -25,11 +25,11 @@ weight: 10
 
 {{< figure src="/images/docs/4c.png" title="クラウドネイティブセキュリティの４C" >}}
 
-クラウドネイティブセキュリティモデルの各レイヤーは次の最も外側のレイヤー上に構築します。コードレイヤーは、強固な基盤（クラウド、クラスター、コンテナ）セキュリティレイヤーから恩恵を受けます。コードレベルのセキュリティに対応しても基盤レイヤーが低い水準のセキュリティでは守ることができません。
+クラウドネイティブセキュリティモデルの各レイヤーは次の最も外側のレイヤー上に構築します。コードレイヤーは、強固な基盤(クラウド、クラスター、コンテナ)セキュリティレイヤーから恩恵を受けます。コードレベルのセキュリティに対応しても基盤レイヤーが低い水準のセキュリティでは守ることができません。
 
 ## クラウド
 
-いろいろな意味でも、クラウド（または同じ場所に設置されたサーバー、企業のデータセンター）はKubernetesクラスターの[トラステッド・コンピューティング・ベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な(または脆弱な方法で構成されている)場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
+いろいろな意味でも、クラウド(または同じ場所に設置されたサーバー、企業のデータセンター)はKubernetesクラスターの[トラステッド・コンピューティング・ベース](https://en.wikipedia.org/wiki/Trusted_computing_base)です。クラウドレイヤーが脆弱な(または脆弱な方法で構成されている)場合、この基盤の上に構築されたコンポーネントが安全であるという保証はありません。各クラウドプロバイダーは、それぞれの環境でワークロードを安全に実行させるためのセキュリティの推奨事項を作成しています。
 
 ### クラウドプロバイダーのセキュリティ
 

From 42303b266ad524ae36370621ff007e6d3425717c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20Rozi=C3=A8re?=
 <benjamin.roziere@ov-corporation.com>
Date: Thu, 3 Sep 2020 17:31:17 +0200
Subject: [PATCH 207/496] Move setup/independent files to
 setup/production-environment

---
 .../reference/setup-tools/kubeadm/kubeadm-init.md    |  2 +-
 content/fr/docs/setup/independent/_index.md          |  5 -----
 content/fr/docs/setup/pick-right-solution.md         | 10 +++++-----
 .../fr/docs/setup/production-environment/_index.md   |  4 ++++
 .../on-premises-vm/_index.md                         |  0
 .../setup/production-environment/tools/_index.md     |  4 ++++
 .../production-environment/tools/kubeadm/_index.md   |  4 ++++
 .../tools/kubeadm}/control-plane-flags.md            |  0
 .../tools/kubeadm}/create-cluster-kubeadm.md         | 10 +++++-----
 .../tools/kubeadm}/ha-topology.md                    |  2 +-
 .../tools/kubeadm}/high-availability.md              | 12 ++++++------
 .../tools/kubeadm}/install-kubeadm.md                |  8 ++++----
 .../tools/kubeadm}/kubelet-integration.md            |  0
 .../tools/kubeadm}/setup-ha-etcd-with-kubeadm.md     |  4 ++--
 .../tools/kubeadm}/troubleshooting-kubeadm.md        |  6 +++---
 .../{ => production-environment}/turnkey/_index.md   |  0
 .../{ => production-environment}/windows/_index.md   |  0
 17 files changed, 39 insertions(+), 32 deletions(-)
 delete mode 100755 content/fr/docs/setup/independent/_index.md
 create mode 100644 content/fr/docs/setup/production-environment/_index.md
 rename content/fr/docs/setup/{ => production-environment}/on-premises-vm/_index.md (100%)
 create mode 100644 content/fr/docs/setup/production-environment/tools/_index.md
 create mode 100644 content/fr/docs/setup/production-environment/tools/kubeadm/_index.md
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/control-plane-flags.md (100%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/create-cluster-kubeadm.md (98%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/ha-topology.md (96%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/high-availability.md (95%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/install-kubeadm.md (95%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/kubelet-integration.md (100%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/setup-ha-etcd-with-kubeadm.md (97%)
 rename content/fr/docs/setup/{independent => production-environment/tools/kubeadm}/troubleshooting-kubeadm.md (97%)
 rename content/fr/docs/setup/{ => production-environment}/turnkey/_index.md (100%)
 rename content/fr/docs/setup/{ => production-environment}/windows/_index.md (100%)

diff --git a/content/fr/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/fr/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index dcd43b3634..edf5c7e4c9 100644
--- a/content/fr/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/fr/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -170,7 +170,7 @@ Vous remarquerez que la commande CLI `kubeadm` ne modifiera jamais ce fichier.
 Ce fichier ad-hoc appartient au paquet deb/rpm de kubeadm.
 
 Pour en savoir plus sur comment kubeadm gère kubelet, vous pouvez consulter
-[cette page](/docs/setup/independent/kubelet-integration).
+[cette page](/fr/docs/setup/production-environment/tools/kubeadm/kubelet-integration).
 
 ### Utilisation de kubeadm avec des runtimes CRI
 
diff --git a/content/fr/docs/setup/independent/_index.md b/content/fr/docs/setup/independent/_index.md
deleted file mode 100755
index 0025e6d6ec..0000000000
--- a/content/fr/docs/setup/independent/_index.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Déployer des clusters avec kubeadm
-description: Déploiement cluster Kubernetes kubeadm
-weight: 30
----
diff --git a/content/fr/docs/setup/pick-right-solution.md b/content/fr/docs/setup/pick-right-solution.md
index 929e7ffbfb..a730ce8eb1 100644
--- a/content/fr/docs/setup/pick-right-solution.md
+++ b/content/fr/docs/setup/pick-right-solution.md
@@ -15,13 +15,13 @@ de votre propre cluster personnalisé. Utilisez ce guide pour choisir la solutio
 
 Si vous voulez simplement jeter un coup d'oeil rapide, utilisez alors de préférence les [solutions locales basées sur Docker](#solutions-locales).
 
-Lorsque vous êtes prêts à augmenter le nombre de machines et souhaitez bénéficier de la haute disponibilité, une 
+Lorsque vous êtes prêts à augmenter le nombre de machines et souhaitez bénéficier de la haute disponibilité, une
 [solution hébergée](#solutions-hebergées) est la plus simple à déployer et à maintenir.
 
-[Les solutions cloud clés en main](#solutions-clés-en-main) ne demandent que peu de commande pour déployer et couvrent un large panel de 
+[Les solutions cloud clés en main](#solutions-clés-en-main) ne demandent que peu de commande pour déployer et couvrent un large panel de
  fournisseurs de cloud. [Les solutions clés en main pour cloud privé](#solutions-on-premises-clés-en-main) possèdent la simplicité des solutions cloud clés en main combinées avec la sécurité de votre propre réseau privé.
 
-Si vous avez déjà un moyen de configurer vos resources, utilisez [kubeadm](/fr/docs/setup/independent/create-cluster-kubeadm/) pour facilement
+Si vous avez déjà un moyen de configurer vos resources, utilisez [kubeadm](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/) pour facilement
 déployer un cluster grâce à une seule ligne de commande par machine.
 
 [Les solutions personnalisées](#solutions-personnalisées) varient d'instructions pas à pas, à des conseils relativement généraux pour déployer un
@@ -168,7 +168,7 @@ essayez le guide [Getting Started from Scratch](/docs/setup/release/building-fro
 ### Universel
 
 Si vous avez déjà un moyen de configurer les ressources d'hébergement, utilisez
-[kubeadm](/docs/setup/independent/create-cluster-kubeadm/) pour déployer facilement un cluster
+[kubeadm](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/) pour déployer facilement un cluster
 avec une seule commande par machine.
 
 ### Cloud
@@ -220,7 +220,7 @@ Ci-dessous vous trouverez un tableau récapitulatif de toutes les solutions list
 
 | Fournisseur de IaaS                            | Config. Mgmt.                                                                | OS                                                                       | Réseau                                                                                                           | Docs                                                                                          | Niveau de support                                                                                                                                                                                                                              |
 |------------------------------------------------|------------------------------------------------------------------------------|--------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| tous                                           | tous                                                                         | multi-support                                                            | tout les CNI                                                                                                     | [docs](/docs/setup/independent/create-cluster-kubeadm/)                                       | Project ([SIG-cluster-lifecycle](https://git.k8s.io/community/sig-cluster-lifecycle))                                                                                                                                                          |
+| tous                                           | tous                                                                         | multi-support                                                            | tout les CNI                                                                                                     | [docs](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)                                       | Project ([SIG-cluster-lifecycle](https://git.k8s.io/community/sig-cluster-lifecycle))                                                                                                                                                          |
 | Google Kubernetes Engine                       |                                                                              |                                                                          | GCE                                                                                                              | [docs](https://cloud.google.com/kubernetes-engine/docs/)                                      | Commercial                                                                                                                                                                                                                                     |
 | Docker Enterprise                              | personnalisé                                                                 | [multi-support](https://success.docker.com/article/compatibility-matrix) | [multi-support](https://docs.docker.com/ee/ucp/kubernetes/install-cni-plugin/)                                   | [docs](https://docs.docker.com/ee/)                                                           | Commercial                                                                                                                                                                                                                                     |
 | IBM Cloud Private                              | Ansible                                                                      | multi-support                                                            | multi-support                                                                                                    | [docs](https://www.ibm.com/support/knowledgecenter/SSBS6K/product_welcome_cloud_private.html) | [Commercial](https://www.ibm.com/mysupport/s/topic/0TO500000001o0fGAA/ibm-cloud-private?language=en_US&productId=01t50000004X1PWAA0) and [Community](https://www.ibm.com/support/knowledgecenter/SSBS6K_3.1.2/troubleshoot/support_types.html) |
diff --git a/content/fr/docs/setup/production-environment/_index.md b/content/fr/docs/setup/production-environment/_index.md
new file mode 100644
index 0000000000..232922eccd
--- /dev/null
+++ b/content/fr/docs/setup/production-environment/_index.md
@@ -0,0 +1,4 @@
+---
+title: Environnement de production
+weight: 30
+---
diff --git a/content/fr/docs/setup/on-premises-vm/_index.md b/content/fr/docs/setup/production-environment/on-premises-vm/_index.md
similarity index 100%
rename from content/fr/docs/setup/on-premises-vm/_index.md
rename to content/fr/docs/setup/production-environment/on-premises-vm/_index.md
diff --git a/content/fr/docs/setup/production-environment/tools/_index.md b/content/fr/docs/setup/production-environment/tools/_index.md
new file mode 100644
index 0000000000..5beb1d5a9d
--- /dev/null
+++ b/content/fr/docs/setup/production-environment/tools/_index.md
@@ -0,0 +1,4 @@
+---
+title: Installing Kubernetes with deployment tools
+weight: 30
+---
diff --git a/content/fr/docs/setup/production-environment/tools/kubeadm/_index.md b/content/fr/docs/setup/production-environment/tools/kubeadm/_index.md
new file mode 100644
index 0000000000..7ab8b1b5bb
--- /dev/null
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Déploiement d'un cluster avec kubeadm"
+weight: 10
+---
diff --git a/content/fr/docs/setup/independent/control-plane-flags.md b/content/fr/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
similarity index 100%
rename from content/fr/docs/setup/independent/control-plane-flags.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/control-plane-flags.md
diff --git a/content/fr/docs/setup/independent/create-cluster-kubeadm.md b/content/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
similarity index 98%
rename from content/fr/docs/setup/independent/create-cluster-kubeadm.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index a2ac112b3a..f25ac905be 100644
--- a/content/fr/docs/setup/independent/create-cluster-kubeadm.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -95,14 +95,14 @@ problème de sécurité est trouvé. Voici les dernières versions de Kubernetes
 ## Objectifs
 
 * Installer un cluster Kubernetes à master unique ou un
-[cluster à haute disponibilité](/docs/setup/independent/high-availability/)
+[cluster à haute disponibilité](/fr/docs/setup/production-environment/tools/kubeadm/high-availability/)
 * Installez un réseau de pods sur le cluster afin que vos pods puissent se parler
 
 ## Instructions
 
 ### Installer kubeadm sur vos hôtes
 
-Voir ["Installation de kubeadm"](/docs/setup/independent/install-kubeadm/).
+Voir ["Installation de kubeadm"](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/).
 
 {{< note >}}
 Si vous avez déjà installé kubeadm, lancez `apt-get update &&
@@ -436,7 +436,7 @@ vérifiant que le pod CoreDNS est en cours d’exécution dans l'output de `kube
 Et une fois que le pod CoreDNS est opérationnel, vous pouvez continuer en joignant vos nœuds.
 
 Si votre réseau ne fonctionne pas ou si CoreDNS n'est pas en cours d'exécution, vérifiez
-notre [documentation de dépannage](/docs/setup/independent/troubleshooting-kubeadm/).
+notre [documentation de dépannage](/fr/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/).
 
 ### Isolation des nœuds du control plane
 
@@ -653,7 +653,7 @@ Ces ressources fournissent plus d'informations sur le saut de version pris en
 charge entre les kubelets et le control plane, ainsi que sur d'autres composants Kubernetes:
 
 * [politique de compatibilité de versions](/docs/setup/version-skew-policy/) de Kubernetes
-* [Guide d'installation](/docs/setup/independent/install-kubeadm/#installing-kubeadm-kubelet-and-kubectl)
+* [Guide d'installation](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-kubeadm-kubelet-and-kubectl)
 spécifique à Kubeadm
 
 ## kubeadm fonctionne sur plusieurs plates-formes {#multi-platform}
@@ -682,4 +682,4 @@ le répertoire des données etcd configuré par kubeadm se trouve dans `/var/lib
 ## Diagnostic {#troubleshooting}
 
 Si vous rencontrez des difficultés avec kubeadm, veuillez consulter nos
- [troubleshooting docs](/docs/setup/independent/troubleshooting-kubeadm/).
+ [troubleshooting docs](/fr/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/).
diff --git a/content/fr/docs/setup/independent/ha-topology.md b/content/fr/docs/setup/production-environment/tools/kubeadm/ha-topology.md
similarity index 96%
rename from content/fr/docs/setup/independent/ha-topology.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/ha-topology.md
index cd0b6aec36..f760dec10d 100644
--- a/content/fr/docs/setup/independent/ha-topology.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/ha-topology.md
@@ -78,5 +78,5 @@ Schéma de la [Topologie externe etcd](/images/kubeadm/kubeadm-ha-topology-exter
 ## {{% heading "whatsnext" %}}
 
 
-- [Configurer un cluster hautement disponible avec kubeadm](/docs/setup/independent/high-availability/)
+- [Configurer un cluster hautement disponible avec kubeadm](/fr/docs/setup/production-environment/tools/kubeadm/high-availability/)
 
diff --git a/content/fr/docs/setup/independent/high-availability.md b/content/fr/docs/setup/production-environment/tools/kubeadm/high-availability.md
similarity index 95%
rename from content/fr/docs/setup/independent/high-availability.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/high-availability.md
index 210ba7e30c..06b2c0a735 100644
--- a/content/fr/docs/setup/independent/high-availability.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/high-availability.md
@@ -16,7 +16,7 @@ Les membres etcd et les nœuds du control plane sont co-localisés.
 Les nœuds du control plane et les membres etcd sont séparés.
 
 Avant de poursuivre, vous devez déterminer avec soin quelle approche répond le mieux
-aux besoins de vos applications et de l'environnement. [Cette comparaison](/docs/setup/independent/ha-topology/)
+aux besoins de vos applications et de l'environnement. [Cette comparaison](/fr/docs/setup/production-environment/tools/kubeadm/ha-topology/)
 décrit les avantages et les inconvénients de chacune.
 
 Vos clusters doivent exécuter Kubernetes version 1.12 ou ultérieure. Vous devriez aussi savoir que
@@ -42,8 +42,8 @@ load balancer, ni avec des volumes persistants dynamiques.
 
 Pour les deux méthodes, vous avez besoin de cette infrastructure:
 
-- Trois machines qui répondent aux pré-requis des [exigences de kubeadm](/docs/setup/independent/install-kubeadm/#before-you-begin) pour les maîtres (masters)
-- Trois machines qui répondent aux pré-requis des [exigences de kubeadm](/docs/setup/independent/install-kubeadm/#before-you-begin) pour les workers
+- Trois machines qui répondent aux pré-requis des [exigences de kubeadm](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) pour les maîtres (masters)
+- Trois machines qui répondent aux pré-requis des [exigences de kubeadm](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) pour les workers
 - Connectivité réseau complète entre toutes les machines du cluster (public ou réseau privé)
 - Privilèges sudo sur toutes les machines
 - Accès SSH d'une machine à tous les nœuds du cluster
@@ -71,7 +71,7 @@ Toutes les commandes d'un control plane ou d'un noeud etcd doivent être
 
 - Certains plugins réseau CNI tels que Calico nécessitent un CIDR tel que `192.168.0.0 / 16` et 
 certains comme Weave n'en ont pas besoin. Voir la
-[Documentation du CNI réseau](/docs/setup/independent/create-cluster-kubeadm/#pod-network).
+[Documentation du CNI réseau](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network).
   Pour ajouter un CIDR de pod, définissez le champ `podSubnet: 192.168.0.0 / 16` sous
   l'objet `networking` de` ClusterConfiguration`.
 
@@ -260,7 +260,7 @@ donnée par` kubeadm init` sur le premier noeud. Ça devrait ressembler a quelqu
 
 ### Configurer le cluster etcd
 
-- Suivez ces [instructions](/docs/setup/independent/setup-ha-etcd-with-kubeadm/)
+- Suivez ces [instructions](/fr/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/)
   pour configurer le cluster etcd.
 
 ### Configurer le premier nœud du control plane
@@ -335,7 +335,7 @@ Pour résumer:
 
 ### Installer un réseau de pod
 
-[Suivez ces instructions](/docs/setup/independent/create-cluster-kubeadm/#pod-network) afin
+[Suivez ces instructions](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network) afin
  d'installer le réseau de pod. Assurez-vous que cela correspond au pod CIDR que vous avez fourni
  dans le fichier de configuration principal.
 
diff --git a/content/fr/docs/setup/independent/install-kubeadm.md b/content/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
similarity index 95%
rename from content/fr/docs/setup/independent/install-kubeadm.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index a32225872f..cc33bbbdeb 100644
--- a/content/fr/docs/setup/independent/install-kubeadm.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -10,7 +10,7 @@ weight: 20
 <img src="https://raw.githubusercontent.com/cncf/artwork/master/projects/kubernetes/certified-kubernetes/versionless/color/certified-kubernetes-color.png" align="right" width="150px">Cette page vous
 apprend comment installer la boîte à outils `kubeadm`.
 Pour plus d'informations sur la création d'un cluster avec kubeadm, une fois que vous avez
-effectué ce processus d'installation, voir la page: [Utiliser kubeadm pour créer un cluster](/docs/setup/independent/create-cluster-kubeadm/).
+effectué ce processus d'installation, voir la page: [Utiliser kubeadm pour créer un cluster](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/).
 
 
 
@@ -126,7 +126,7 @@ C’est parce que kubeadm et Kubernetes ont besoin d'une
 Pour plus d'informations sur les compatibilités de version, voir:
 
 * Kubernetes [version et politique de compatibilité de version](/docs/setup/version-skew-policy/)
-* Kubeadm-specific [politique de compatibilité de version](/docs/setup/independent/create-cluster-kubeadm/#version-skew-policy)
+* Kubeadm-specific [politique de compatibilité de version](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#version-skew-policy)
 
 {{< tabs name="k8s_install" >}}
 {{% tab name="Ubuntu, Debian or HypriotOS" %}}
@@ -252,11 +252,11 @@ systemctl restart kubelet
 
 ## Dépannage
 
-Si vous rencontrez des difficultés avec kubeadm, veuillez consulter notre [documentation de dépannage](/docs/setup/independent/troubleshooting-kubeadm/).
+Si vous rencontrez des difficultés avec kubeadm, veuillez consulter notre [documentation de dépannage](/fr/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/).
 
 ## {{% heading "whatsnext" %}}
 
 
-* [Utiliser kubeadm pour créer un cluster](/docs/setup/independent/create-cluster-kubeadm/)
+* [Utiliser kubeadm pour créer un cluster](/fr/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)
 
 
diff --git a/content/fr/docs/setup/independent/kubelet-integration.md b/content/fr/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
similarity index 100%
rename from content/fr/docs/setup/independent/kubelet-integration.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
diff --git a/content/fr/docs/setup/independent/setup-ha-etcd-with-kubeadm.md b/content/fr/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
similarity index 97%
rename from content/fr/docs/setup/independent/setup-ha-etcd-with-kubeadm.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
index 446548d0f1..b2127b9733 100644
--- a/content/fr/docs/setup/independent/setup-ha-etcd-with-kubeadm.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
@@ -23,7 +23,7 @@ le fichier de configuration kubeadm.
 * Chaque hôte doit avoir [docker, kubelet et kubeadm installés][toolbox].
 * Certains paquets pour copier des fichiers entre les hôtes. Par exemple, `ssh` et` scp`.
 
-[toolbox]: /docs/setup/independent/install-kubeadm/
+[toolbox]: /fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/
 
 
 
@@ -257,7 +257,7 @@ kubeadm contient tout ce qui est nécessaire pour générer les certificats déc
 
 Une fois que vous avez un cluster de 3 membres etcd qui fonctionne, vous pouvez continuer à
  configurer un control plane hautement disponible utilisant la
-[méthode etcd externe avec kubeadm](/docs/setup/independent/high-availability/).
+[méthode etcd externe avec kubeadm](/fr/docs/setup/production-environment/tools/kubeadm/high-availability/).
 
 
 
diff --git a/content/fr/docs/setup/independent/troubleshooting-kubeadm.md b/content/fr/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
similarity index 97%
rename from content/fr/docs/setup/independent/troubleshooting-kubeadm.md
rename to content/fr/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 497c7ae7d7..bf9b0d69cb 100644
--- a/content/fr/docs/setup/independent/troubleshooting-kubeadm.md
+++ b/content/fr/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -68,9 +68,9 @@ de `journalctl -u kubelet`. Si vous voyez quelque chose comme ce qui suit:
   Il existe deux méthodes courantes pour résoudre le problème du driver cgroup:
 
  1. Installez à nouveau Docker en suivant les instructions
-  [ici](/docs/setup/independent/install-kubeadm/#installing-docker).
+  [ici](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-docker).
  1. Changez manuellement la configuration de la kubelet pour correspondre au driver Docker cgroup, vous pouvez vous référer à
-    [Configurez le driver de cgroupe utilisé par la kubelet sur le Nœud Master](/docs/setup/independent/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
+    [Configurez le driver de cgroupe utilisé par la kubelet sur le Nœud Master](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
     pour des instruction détaillées.
 
 - Les conteneurs Docker du control plane sont en crashloop ou suspendus. Vous pouvez le vérifier en lançant `docker ps` et étudier chaque conteneur en exécutant `docker logs`.
@@ -238,7 +238,7 @@ dernière comme` InternalIP` du noeud au lieu du public.
 Si vous avez des nœuds qui exécutent SELinux avec une version plus ancienne de Docker, vous risquez
 de rencontrer un problème ou les pods de `coredns` ne démarrent pas. Pour résoudre ce problème, vous pouvez essayer l'une des options suivantes:
 
-- Mise à niveau vers une [nouvelle version de Docker](/docs/setup/independent/install-kubeadm/#installing-docker).
+- Mise à niveau vers une [nouvelle version de Docker](/fr/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-docker).
 - [Désactiver SELinux](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security-enhanced_linux/sect-security-enhanced_linux-enabling_and_disabling_selinux-disabling_selinux).
 - Modifiez le déploiement de `coredns` pour définir` allowPrivilegeEscalation` à `true`:
 
diff --git a/content/fr/docs/setup/turnkey/_index.md b/content/fr/docs/setup/production-environment/turnkey/_index.md
similarity index 100%
rename from content/fr/docs/setup/turnkey/_index.md
rename to content/fr/docs/setup/production-environment/turnkey/_index.md
diff --git a/content/fr/docs/setup/windows/_index.md b/content/fr/docs/setup/production-environment/windows/_index.md
similarity index 100%
rename from content/fr/docs/setup/windows/_index.md
rename to content/fr/docs/setup/production-environment/windows/_index.md

From a0b0644943a4f11853849795a67b5fc139024dd0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20Rozi=C3=A8re?=
 <benjamin.roziere@ov-corporation.com>
Date: Thu, 3 Sep 2020 17:51:36 +0200
Subject: [PATCH 208/496] Fix missing translation in tools _index.md

---
 content/fr/docs/setup/production-environment/tools/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/setup/production-environment/tools/_index.md b/content/fr/docs/setup/production-environment/tools/_index.md
index 5beb1d5a9d..f12147d4ed 100644
--- a/content/fr/docs/setup/production-environment/tools/_index.md
+++ b/content/fr/docs/setup/production-environment/tools/_index.md
@@ -1,4 +1,4 @@
 ---
-title: Installing Kubernetes with deployment tools
+title: Installer Kubernetes avec les outils de déploiement
 weight: 30
 ---

From d95e3d09d230470c8ce9e88703a074319dd27ded Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Thu, 3 Sep 2020 18:16:35 +0200
Subject: [PATCH 209/496] fixing various typos / spelling errors in page

---
 .../concepts/overview/what-is-kubernetes.md   | 38 +++++++++----------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/content/fr/docs/concepts/overview/what-is-kubernetes.md b/content/fr/docs/concepts/overview/what-is-kubernetes.md
index e71283aadf..07a6c738d8 100644
--- a/content/fr/docs/concepts/overview/what-is-kubernetes.md
+++ b/content/fr/docs/concepts/overview/what-is-kubernetes.md
@@ -13,19 +13,19 @@ Cette page est une vue d'ensemble de Kubernetes.
 
 
 <!-- body -->
-Kubernetes est une plate-forme open-source extensible et portable pour la gestion de charges de travail (workloads) et des services conteneurisés.
+Kubernetes est une plate-forme open-source extensible et portable pour la gestion de charges de travail (workloads) et de services conteneurisés.
 Elle favorise à la fois l'écriture de configuration déclarative (declarative configuration) et l'automatisation.
 C'est un large écosystème en rapide expansion.
 Les services, le support et les outils Kubernetes sont largement disponibles.
 
 Google a rendu open-source le projet Kubernetes en 2014.
-Le développement de Kubernetes est basé sur une [décennie et demie d’expérience de Google avec la gestion de la charge et de la mise à l'échelle (scale) en production](https://research.google.com/pubs/pub43438.html), associé aux meilleures idées et pratiques de la communauté.
+Le développement de Kubernetes est basé sur une [décennie et demie d’expérience de Google avec la gestion de la charge et de la mise à l'échelle (scale) en production](https://research.google.com/pubs/pub43438.html), associée aux meilleures idées et pratiques de la communauté.
 
 ## Pourquoi ai-je besoin de Kubernetes et que peut-il faire ?
 
 Kubernetes a un certain nombre de fonctionnalités. Il peut être considéré comme:
 
-- une plate-forme de conteneur
+- une plate-forme de conteneurs
 - une plate-forme de microservices
 - une plate-forme cloud portable
 et beaucoup plus.
@@ -46,7 +46,7 @@ C'est pourquoi Kubernetes a également été conçu pour servir de plate-forme e
 
 De plus, le [plan de contrôle Kubernetes (control
 plane)](/docs/concepts/overview/components/) est construit sur les mêmes [APIs](/docs/reference/using-api/api-overview/) que celles accessibles aux développeurs et utilisateurs.
-Les utilisateurs peuvent écrire leurs propres controlleurs (controllers), tels que les [ordonnanceurs (schedulers)](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/devel/scheduler.md),
+Les utilisateurs peuvent écrire leurs propres contrôleurs (controllers), tels que les [ordonnanceurs (schedulers)](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/devel/scheduler.md),
 avec [leurs propres APIs](/docs/concepts/api-extension/custom-resources/) qui peuvent être utilisés par un [outil en ligne de commande](/docs/user-guide/kubectl-overview/).
 
 Ce choix de [conception](https://git.k8s.io/community/contributors/design-proposals/architecture/architecture.md) a permis de construire un ensemble d'autres systèmes par dessus Kubernetes.
@@ -60,8 +60,8 @@ Ces implémentations par défaut sont optionnelles et interchangeables. Kubernet
 
 Kubernetes:
 
-- Ne limite pas les types d'applications supportées. Kubernetes prend en charge des workloads extrêmement divers, dont des applications stateless, stateful ou orientées traitement de données (data-processing).
-Si l'application peut fonctionner dans un conteneur, elle devrait bien fonctionner sur Kubernetes.
+- Ne limite pas les types d'applications supportées. Kubernetes prend en charge des workloads extrêmement diverses, dont des applications stateless, stateful ou orientées traitement de données (data-processing).
+Si l'application peut fonctionner dans un conteneur, elle devrait fonctionner correctement sur Kubernetes.
 - Ne déploie pas de code source et ne build pas d'application non plus. Les workflows d'Intégration Continue, de Livraison Continue et de Déploiement Continu (CI/CD) sont réalisés en fonction de la culture d'entreprise, des préférences ou des pré-requis techniques.
 - Ne fournit pas nativement de services au niveau applicatif tels que des middlewares (e.g., message buses), des frameworks de traitement de données (par exemple, Spark), des bases de données (e.g., mysql), caches, ou systèmes de stockage clusterisés (e.g., Ceph).
 Ces composants peuvent être lancés dans Kubernetes et/ou être accessibles à des applications tournant dans Kubernetes via des mécaniques d'intermédiation tel que Open Service Broker.
@@ -72,11 +72,11 @@ Il fournit une API déclarative qui peut être ciblée par n'importe quelle form
 - Ne fournit ou n'adopte aucune mécanique de configuration des machines, de maintenance, de gestion ou de contrôle de la santé des systèmes.
 
 De plus, Kubernetes n'est pas vraiment un _système d'orchestration_. En réalité, il élimine le besoin d'orchestration.
-Techniquement, l'_orchestration_ se définie par l'exécution d'un workflow défini : premièrement faire A, puis B, puis C.
-Kubernetes quant à lui est composé d'un ensemble de processus de contrôle qui pilote l'état courant vers l'état désiré.
+Techniquement, l'_orchestration_ se définit par l'exécution d'un workflow spécifié : premièrement faire A, puis B, puis C.
+Kubernetes quant à lui est composé d'un ensemble de processus de contrôle qui pilotent l'état courant vers l'état désiré.
 Peu importe comment on arrive du point A au point C.
 Un contrôle centralisé n'est pas non plus requis.
-Cela abouti à un système plus simple à utiliser et plus puissant, robuste, résiliant et extensible.
+Cela aboutit à un système plus simple à utiliser et plus puissant, robuste, résiliant et extensible.
 
 ## Pourquoi les conteneurs ?
 
@@ -91,23 +91,23 @@ Il est bien entendu possible de construire une image de machine virtuelle (VM) i
 La _nouvelle façon (new way)_ consiste à déployer des conteneurs basés sur une virtualisation au niveau du système d'opération (operation-system-level) plutôt que de la virtualisation hardware.
 Ces conteneurs sont isolés les uns des autres et de l'hôte :
 ils ont leurs propres systèmes de fichiers, ne peuvent voir que leurs propres processus et leur usage des ressources peut être contraint.
-Ils sont aussi plus facile à construire que des VMs, et vu qu'ils sont décorrélés de l'infrastructure sous-jacente et du système de fichiers de l'hôte, ils sont aussi portables entre les différents fournisseurs de Cloud et les OS.
+Ils sont aussi plus faciles à construire que des VMs, et vu qu'ils sont décorrélés de l'infrastructure sous-jacente et du système de fichiers de l'hôte, ils sont aussi portables entre les différents fournisseurs de Cloud et les OS.
 
-Étant donné que les conteneurs sont petits et rapides, une application peut être packagées dans chaque image de conteneurs.
-Cette relation application-image tout-en-un permet de bénéficier de tous les bénéfices des conteneurs. Avec les conteneurs, des images immuables de conteneur peuvent être créées au moment du build/release plutôt qu'au déploiement, vu que chaque application ne dépend pas du reste de la stack applicative et n'est pas liée à l'environnement de production.
+Étant donné que les conteneurs sont petits et rapides, une application peut être packagée dans chaque image de conteneurs.
+Cette relation application-image tout-en-un permet de bénéficier de tous les bénéfices des conteneurs. Avec les conteneurs, des images immuables de conteneurs peuvent être créées au moment du build/release plutôt qu'au déploiement, vu que chaque application ne dépend pas du reste de la stack applicative et n'est pas liée à l'environnement de production.
 La génération d'images de conteneurs au moment du build permet d'obtenir un environnement constant qui peut être déployé tant en développement qu'en production. De la même manière, les conteneurs sont bien plus transparents que les VMs, ce qui facilite le monitoring et le management.
 Cela est particulièrement vrai lorsque le cycle de vie des conteneurs est géré par l'infrastructure plutôt que caché par un gestionnaire de processus à l'intérieur du conteneur. Avec une application par conteneur, gérer ces conteneurs équivaut à gérer le déploiement de son application.
 
 Résumé des bénéfices des conteneurs :
 
-- **Création et déploiement agile d'application** :
-  Augmente la simplicité et l'efficacité de la création d'images par rapport à l'utilisation d'image de VM.
+- **Création et déploiement agile d'applications** :
+  Augmente la simplicité et l'efficacité de la création d'images par rapport à l'utilisation d'images de VM.
 - **Développement, intégration et déploiement Continus**:
-  Fournit un processus pour constuire et déployer fréquemment et de façon fiable avec la capacité de faire des rollbacks rapide et simple (grâce à l'immuabilité de l'image).
+  Fournit un processus pour constuire et déployer fréquemment et de façon fiable avec la capacité de faire des rollbacks rapides et simples (grâce à l'immuabilité de l'image).
 - **Séparation des besoins entre Dev et Ops**:
   Création d'images applicatives au moment du build plutôt qu'au déploiement, tout en séparant l'application de l'infrastructure.
 - **Observabilité**
-  Pas seulement des informations venant du système d'exploitation sous-jacent mais aussi des signaux propres de l'application.
+  Informations venant non seulement du système d'exploitation sous-jacent mais aussi des signaux propres de l'application.
 - **Consistance entre les environnements de développement, tests et production**:
   Fonctionne de la même manière que ce soit sur un poste local que chez un fournisseur d'hébergement / dans le Cloud.
 - **Portabilité entre Cloud et distribution système**:
@@ -115,15 +115,15 @@ Résumé des bénéfices des conteneurs :
 - **Gestion centrée Application**:
   Bascule le niveau d'abstraction d'une virtualisation hardware liée à l'OS à une logique de ressources orientée application.
 - **[Micro-services](https://martinfowler.com/articles/microservices.html) faiblement couplés, distribués, élastiques**:
-  Les applications sont séparées en petits morceaux indépendants et peuvent être déployés et gérés dynamiquement -- pas une stack monolithique dans une seule machine à tout faire.
+  Les applications sont séparées en petits morceaux indépendants et peuvent être déployées et gérées dynamiquement -- pas une stack monolithique dans une seule machine à tout faire.
 - **Isolation des ressources**:
-  Performances de l'application prédictible.
+  Performances de l'application prédictibles.
 - **Utilisation des ressources**:
   Haute efficacité et densité.
 
 ## Qu'est-ce-que Kubernetes signifie ? K8s ?
 
-Le nom **Kubernetes** tire son origine du grec ancien, signifiant _capitaine_ ou _pilôte_ et est la racine de _gouverneur_ et [cybernetic](http://www.etymonline.com/index.php?term=cybernetics). _K8s_ est l'abréviation dérivée par le remplacement des 8 lettres "ubernete" par "8".
+Le nom **Kubernetes** tire son origine du grec ancien, signifiant _capitaine_ ou _pilote_ et est la racine de _gouverneur_ et [cybernetic](http://www.etymonline.com/index.php?term=cybernetics). _K8s_ est l'abbréviation dérivée par le remplacement des 8 lettres "ubernete" par "8".
 
 
 

From 6f628b07894e3a957144378b61048672755541c2 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 3 Sep 2020 20:53:40 +0100
Subject: [PATCH 210/496] Remove section: On-Premises VMs (#23500)

* Remove on-premises VMs section

* Remove CloudStack page

This page does not fit in with current content guidelines.

* Remove DC/OS page

This page does not fit in with current content guidelines.

* Remove oVirt page

This page does not fit in with current content guidelines.

* Remove empty section: On-Premises VMs
---
 .../on-premises-vm/_index.md                  |   4 -
 .../on-premises-vm/cloudstack.md              | 116 ------------------
 .../on-premises-vm/dcos.md                    |  25 ----
 .../on-premises-vm/ovirt.md                   |  72 -----------
 4 files changed, 217 deletions(-)
 delete mode 100644 content/en/docs/setup/production-environment/on-premises-vm/_index.md
 delete mode 100644 content/en/docs/setup/production-environment/on-premises-vm/cloudstack.md
 delete mode 100644 content/en/docs/setup/production-environment/on-premises-vm/dcos.md
 delete mode 100644 content/en/docs/setup/production-environment/on-premises-vm/ovirt.md

diff --git a/content/en/docs/setup/production-environment/on-premises-vm/_index.md b/content/en/docs/setup/production-environment/on-premises-vm/_index.md
deleted file mode 100644
index 42c4ec3899..0000000000
--- a/content/en/docs/setup/production-environment/on-premises-vm/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: On-Premises VMs
-weight: 40
----
diff --git a/content/en/docs/setup/production-environment/on-premises-vm/cloudstack.md b/content/en/docs/setup/production-environment/on-premises-vm/cloudstack.md
deleted file mode 100644
index c440f14b31..0000000000
--- a/content/en/docs/setup/production-environment/on-premises-vm/cloudstack.md
+++ /dev/null
@@ -1,116 +0,0 @@
----
-reviewers:
-- thockin
-title: Cloudstack
-content_type: concept
----
-
-<!-- overview -->
-
-[CloudStack](https://cloudstack.apache.org/) is a software to build public and private clouds based on hardware virtualization principles (traditional IaaS). To deploy Kubernetes on CloudStack there are several possibilities depending on the Cloud being used and what images are made available. CloudStack also has a vagrant plugin available, hence Vagrant could be used to deploy Kubernetes either using the existing shell provisioner or using new Salt based recipes.
-
-[CoreOS](https://coreos.com) templates for CloudStack are built [nightly](https://stable.release.core-os.net/amd64-usr/current/). CloudStack operators need to [register](https://docs.cloudstack.apache.org/projects/cloudstack-administration/en/latest/templates.html) this template in their cloud before proceeding with these Kubernetes deployment instructions.
-
-This guide uses a single [Ansible playbook](https://github.com/apachecloudstack/k8s), which is completely automated and can deploy Kubernetes on a CloudStack based Cloud using CoreOS images. The playbook, creates an ssh key pair, creates a security group and associated rules and finally starts coreOS instances configured via cloud-init.
-
-<!-- body -->
-
-## Prerequisites
-
-```shell
-sudo apt-get install -y python-pip libssl-dev
-sudo pip install cs
-sudo pip install sshpubkeys
-sudo apt-get install software-properties-common
-sudo apt-add-repository ppa:ansible/ansible
-sudo apt-get update
-sudo apt-get install ansible
-```
-
-On CloudStack server you also have to install libselinux-python :
-
-```shell
-yum install libselinux-python
-```
-
-[_cs_](https://github.com/exoscale/cs) is a python module for the CloudStack API.
-
-Set your CloudStack endpoint, API keys and HTTP method used.
-
-You can define them as environment variables: `CLOUDSTACK_ENDPOINT`, `CLOUDSTACK_KEY`, `CLOUDSTACK_SECRET` and `CLOUDSTACK_METHOD`.
-
-Or create a `~/.cloudstack.ini` file:
-
-```none
-[cloudstack]
-endpoint = <your cloudstack api endpoint>
-key = <your api access key>
-secret = <your api secret key>
-method = post
-```
-
-We need to use the http POST method to pass the _large_ userdata to the coreOS instances.
-
-### Clone the playbook
-
-```shell
-git clone https://github.com/apachecloudstack/k8s
-cd kubernetes-cloudstack
-```
-
-### Create a Kubernetes cluster
-
-You simply need to run the playbook.
-
-```shell
-ansible-playbook k8s.yml
-```
-
-Some variables can be edited in the `k8s.yml` file.
-
-```none
-vars:
-  ssh_key: k8s
-  k8s_num_nodes: 2
-  k8s_security_group_name: k8s
-  k8s_node_prefix: k8s2
-  k8s_template: <templatename>
-  k8s_instance_type: <serviceofferingname>
-```
-
-This will start a Kubernetes master node and a number of compute nodes (by default 2).
-The `instance_type` and `template` are specific, edit them to specify your CloudStack cloud specific template and instance type (i.e. service offering).
-
-Check the tasks and templates in `roles/k8s` if you want to modify anything.
-
-Once the playbook as finished, it will print out the IP of the Kubernetes master:
-
-```none
-TASK: [k8s | debug msg='k8s master IP is {{ k8s_master.default_ip }}'] ********
-```
-
-SSH to it using the key that was created and using the _core_ user.
-
-```shell
-ssh -i ~/.ssh/id_rsa_k8s core@<master IP>
-```
-
-And you can list the machines in your cluster:
-
-```shell
-fleetctl list-machines
-```
-
-```none
-MACHINE        IP             METADATA
-a017c422...    <node #1 IP>   role=node
-ad13bf84...    <master IP>    role=master
-e9af8293...    <node #2 IP>   role=node
-```
-
-## Support Level
-
-IaaS Provider        | Config. Mgmt | OS     | Networking  | Docs                                              | Conforms | Support Level
--------------------- | ------------ | ------ | ----------  | ---------------------------------------------     | ---------| ----------------------------
-CloudStack           | Ansible      | CoreOS | flannel     | [docs](/docs/setup/production-environment/on-premises-vm/cloudstack/)                             |          | Community ([@Guiques](https://github.com/ltupin/))
-
diff --git a/content/en/docs/setup/production-environment/on-premises-vm/dcos.md b/content/en/docs/setup/production-environment/on-premises-vm/dcos.md
deleted file mode 100644
index e4b310902c..0000000000
--- a/content/en/docs/setup/production-environment/on-premises-vm/dcos.md
+++ /dev/null
@@ -1,25 +0,0 @@
----
-reviewers:
-- smugcloud
-title: Kubernetes on DC/OS
-content_type: concept
----
-
-<!-- overview -->
-
-Mesosphere provides an easy option to provision Kubernetes onto [DC/OS](https://mesosphere.com/product/), offering:
-
-* Pure upstream Kubernetes
-* Single-click cluster provisioning
-* Highly available and secure by default
-* Kubernetes running alongside fast-data platforms (e.g. Akka, Cassandra, Kafka, Spark)
-
-
-
-<!-- body -->
-
-## Official Mesosphere Guide
-
-The canonical source of getting started on DC/OS is located in the [quickstart repo](https://github.com/mesosphere/dcos-kubernetes-quickstart).
-
-
diff --git a/content/en/docs/setup/production-environment/on-premises-vm/ovirt.md b/content/en/docs/setup/production-environment/on-premises-vm/ovirt.md
deleted file mode 100644
index 1d57b6f7eb..0000000000
--- a/content/en/docs/setup/production-environment/on-premises-vm/ovirt.md
+++ /dev/null
@@ -1,72 +0,0 @@
----
-reviewers:
-- caesarxuchao
-- erictune
-title: oVirt
-content_type: concept
----
-
-<!-- overview -->
-
-oVirt is a virtual datacenter manager that delivers powerful management of multiple virtual machines on multiple hosts. Using KVM and libvirt, oVirt can be installed on Fedora, CentOS, or Red Hat Enterprise Linux hosts to set up and manage your virtual data center.
-
-
-
-<!-- body -->
-
-## oVirt Cloud Provider Deployment
-
-The oVirt cloud provider allows to easily discover and automatically add new VM instances as nodes to your Kubernetes cluster.
-At the moment there are no community-supported or pre-loaded VM images including Kubernetes but it is possible to [import] or [install] Project Atomic (or Fedora) in a VM to [generate a template]. Any other distribution that includes Kubernetes may work as well.
-
-It is mandatory to [install the ovirt-guest-agent] in the guests for the VM ip address and hostname to be reported to ovirt-engine and ultimately to Kubernetes.
-
-Once the Kubernetes template is available it is possible to start instantiating VMs that can be discovered by the cloud provider.
-
-[import]: https://ovedou.blogspot.it/2014/03/importing-glance-images-as-ovirt.html
-[install]: https://www.ovirt.org/documentation/quickstart/quickstart-guide/#create-virtual-machines
-[generate a template]: https://www.ovirt.org/documentation/quickstart/quickstart-guide/#using-templates
-[install the ovirt-guest-agent]: https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-agent-in-fedora/
-
-## Using the oVirt Cloud Provider
-
-The oVirt Cloud Provider requires access to the oVirt REST-API to gather the proper information, the required credential should be specified in the `ovirt-cloud.conf` file:
-
-```none
-[connection]
-uri = https://localhost:8443/ovirt-engine/api
-username = admin@internal
-password = admin
-```
-
-In the same file it is possible to specify (using the `filters` section) what search query to use to identify the VMs to be reported to Kubernetes:
-
-```none
-[filters]
-# Search query used to find nodes
-vms = tag=kubernetes
-```
-
-In the above example all the VMs tagged with the `kubernetes` label will be reported as nodes to Kubernetes.
-
-The `ovirt-cloud.conf` file then must be specified in kube-controller-manager:
-
-```shell
-kube-controller-manager ... --cloud-provider=ovirt --cloud-config=/path/to/ovirt-cloud.conf ...
-```
-
-## oVirt Cloud Provider Screencast
-
-This short screencast demonstrates how the oVirt Cloud Provider can be used to dynamically add VMs to your Kubernetes cluster.
-
-[![Screencast](https://img.youtube.com/vi/JyyST4ZKne8/0.jpg)](https://www.youtube.com/watch?v=JyyST4ZKne8)
-
-## Support Level
-
-
-IaaS Provider        | Config. Mgmt | OS     | Networking  | Docs                                              | Conforms | Support Level
--------------------- | ------------ | ------ | ----------  | ---------------------------------------------     | ---------| ----------------------------
-oVirt                |              |        |             | [docs](/docs/setup/production-environment/on-premises-vm/ovirt/)                                  |          | Community ([@simon3z](https://github.com/simon3z))
-
-
-

From b5beb4cded5d39753d054d0bb8ff5dbf602651b2 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Sun, 16 Aug 2020 22:54:03 +0100
Subject: [PATCH 211/496] Suppress printing any announcements

When people print the documentation, omit any configured announcement.

Co-authored-by: Celeste Horgan <celeste@cncf.io>
---
 static/css/announcement.css | 7 +++++++
 themes/docsy                | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/static/css/announcement.css b/static/css/announcement.css
index 9b15f9407a..816d7c1fc0 100644
--- a/static/css/announcement.css
+++ b/static/css/announcement.css
@@ -1,3 +1,10 @@
+@media print {
+  /* Do not print announcements */
+  #announcement, section#announcement, #fp-announcement, section#fp-announcement {
+    display: none;
+  }
+}
+
 .announcement.content {
   margin-bottom: 0px;
 }
diff --git a/themes/docsy b/themes/docsy
index 5d5e6402c9..25f73360dc 160000
--- a/themes/docsy
+++ b/themes/docsy
@@ -1 +1 @@
-Subproject commit 5d5e6402c901492f325af4117adbd151bf869c52
+Subproject commit 25f73360dc4b72c7606531b37edace0417b40858

From 71303db06b9b229e730297336cd0fce8fe2fbf6e Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 18 Aug 2020 16:52:24 -0400
Subject: [PATCH 212/496] use docsy page edit/issue setup

setting feedback buttons, primary color setting

update i18n with issue string

remove local edit page string
---
 assets/scss/_variables_project.scss     |  2 ++
 config.toml                             |  8 ++++-
 i18n/en.toml                            | 10 ++----
 layouts/blog/baseof.html                |  1 -
 layouts/docs/baseof.html                |  2 +-
 layouts/partials/docs/content-page.html |  9 -----
 layouts/partials/git-info.html          | 48 -------------------------
 layouts/partials/toc.html               |  8 +++++
 8 files changed, 21 insertions(+), 67 deletions(-)
 delete mode 100644 layouts/partials/git-info.html
 create mode 100644 layouts/partials/toc.html

diff --git a/assets/scss/_variables_project.scss b/assets/scss/_variables_project.scss
index da42c07367..9030d61dc9 100644
--- a/assets/scss/_variables_project.scss
+++ b/assets/scss/_variables_project.scss
@@ -11,3 +11,5 @@ Add styles or override variables from the theme here. */
 @import "base";
 @import "tablet";
 @import "desktop";
+
+$primary: #3371e3;
\ No newline at end of file
diff --git a/config.toml b/config.toml
index 0915eeb4c3..f5425257d9 100644
--- a/config.toml
+++ b/config.toml
@@ -112,6 +112,8 @@ copyright_linux =  "Copyright © 2020 The Linux Foundation ®."
 version_menu = "Versions"
 
 time_format_blog = "Monday, January 02, 2006"
+time_format_default = "January 02, 2006 at 3:04 PM PST"
+
 description = "Production-Grade Container Orchestration"
 showedit = true
 
@@ -124,9 +126,13 @@ docsbranch = "master"
 deprecated = false
 currentUrl = "https://kubernetes.io/docs/home/"
 nextUrl = "https://kubernetes-io-vnext-staging.netlify.com/"
-githubWebsiteRepo = "github.com/kubernetes/website"
+
+# See codenew shortcode
 githubWebsiteRaw = "raw.githubusercontent.com/kubernetes/website"
 
+# GitHub repository link for editing a page and opening issues.
+github_repo = "https://github.com/kubernetes/website"
+
 # param for displaying an announcement block on every page.
 # See /i18n/en.toml for message text and title.
 announcement = true
diff --git a/i18n/en.toml b/i18n/en.toml
index 79145e3dd9..dd6e7545a4 100644
--- a/i18n/en.toml
+++ b/i18n/en.toml
@@ -150,12 +150,6 @@ other = """The Linux Foundation &reg;. All rights reserved. The Linux Foundation
 [main_documentation_license]
 other = """The Kubernetes Authors | Documentation Distributed under <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
 
-[main_edit_this_page]
-other = "Edit This Page"
-
-[main_github_create_an_issue]
-other = "Create an Issue"
-
 [main_github_invite]
 other = "Interested in hacking on the core Kubernetes code base?"
 
@@ -195,6 +189,9 @@ other = "Objectives"
 [options_heading]
 other = "Options"
 
+[post_create_issue]
+other = "Create an issue"
+
 [prerequisites_heading]
 other = "Before you begin"
 
@@ -207,7 +204,6 @@ other = "Subscribe"
 [synopsis_heading]
 other = "Synopsis"
 
-
 [thirdparty_message]
 other = """This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects. This page follows <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF website guidelines</a> by listing projects alphabetically. To add a project to this list, read the <a href="/contribute/style/content-guide/#third-party-content">content guide</a> before submitting a change."""
 
diff --git a/layouts/blog/baseof.html b/layouts/blog/baseof.html
index 704968d73e..f208811236 100644
--- a/layouts/blog/baseof.html
+++ b/layouts/blog/baseof.html
@@ -37,7 +37,6 @@
           </main>
           <div class="d-none d-xl-block col-xl-2 td-toc d-print-none">
             {{ partial "blog-meta-links.html" . }}
-            {{ partial "toc.html" . }}
           </div>
         </div>
       </div>
diff --git a/layouts/docs/baseof.html b/layouts/docs/baseof.html
index 04ca30871b..ec0b4d575a 100644
--- a/layouts/docs/baseof.html
+++ b/layouts/docs/baseof.html
@@ -25,7 +25,7 @@
             {{ if (and (not .Params.hide_feedback) (.Site.Params.ui.feedback.enable) (.Site.GoogleAnalytics)) }}
               {{ partial "feedback.html" .Site.Params.ui.feedback }}
             {{ end }}
-            {{ partial "git-info.html" . }}
+            <div class="text-muted mt-5 pt-3 border-top">{{ partial "page-meta-lastmod.html" . }}</div>
             {{ if (.Site.DisqusShortname) }}
               <br />
               {{ partial "disqus-comment.html" . }}
diff --git a/layouts/partials/docs/content-page.html b/layouts/partials/docs/content-page.html
index 38a1f205cb..02430aa9d3 100644
--- a/layouts/partials/docs/content-page.html
+++ b/layouts/partials/docs/content-page.html
@@ -1,12 +1,3 @@
-{{ if not (.Site.Param "deprecated") }}
-{{- $filepath := .page.File.Path }}
-{{- $editLink := printf "https://github.com/kubernetes/website/edit/master/content/%s/%s" .page.Language.Lang $filepath }}
-<p>
-  <a href="{{ $editLink }}" id="editPageButton" target="_blank" data-proofer-ignore>
-    Edit This Page
-  </a>
-</p>
-{{- end -}}
 {{ if not .page.Params.notitle }}
   <h1>{{ .page.Title }}</h1>
   {{ $desc := .page.Description }}
diff --git a/layouts/partials/git-info.html b/layouts/partials/git-info.html
deleted file mode 100644
index 3b7b5ed396..0000000000
--- a/layouts/partials/git-info.html
+++ /dev/null
@@ -1,48 +0,0 @@
-<div id="pre-footer">
-  <!-- This is at the bottom of every topic underneath the TOC and content -->
-  <hr/>
-
-  <div class="issue-button-container">
-    {{ if and (ne .Kind "404") (not (strings.Contains .Path "search")) }}
-      {{ if not .Params.no_issue }}
-        <script type="text/javascript">
-          PDRTJS_settings_8345992 = {
-            "id": "8345992",
-            "unique_id": "{{ .RelPermalink }}",
-            "title": "{{ .Title }}",
-            "permalink": "{{ .Permalink }}"
-          };
-          (function (d, c, j) {
-            if (!document.getElementById(j)) {
-              var pd = d.createElement(c),
-                s;
-              pd.id = j;
-              pd.src = ("https:" == document.location.protocol)
-                ? "https://polldaddy.com/js/rating/rating.js"
-                : "http://i0.poll.fm/js/rating/rating.js";
-              s = document.getElementsByTagName(c)[0];
-              s.parentNode.insertBefore(pd, s);
-            }
-          }(document, "script", "pd-rating-js"));
-        </script>
-        <a class="btn btn-primary mb-4 issue" href="" onclick="window.open('https://github.com/kubernetes/website/issues/new?template=bug-report.md&title=Issue%20with%20' +
-              'k8s.io'+window.location.pathname)">{{ T "main_github_create_an_issue" }}</a>
-      {{ end }}
-    {{ end }}
-    {{ if not .Params.noedit }}
-      {{ if .File }}
-        <a class="btn btn-primary mb-4 issue" href="https://github.com/kubernetes/website/edit/master/content/{{ site.Language.Lang }}/{{ .File.Path }}">{{ T "main_edit_this_page" }}</a>
-      {{ end }}
-    {{ end }}
-  </div>
-  {{ if and (not .Params.showcommit) $.GitInfo }}
-
-    <div class="lastedit issue-button-container" id="lastedit">
-      {{ T "main_page_last_modified_on" }}
-      {{ .GitInfo.AuthorDate.Format "January 02, 2006 at 3:04 PM PST" }}
-      {{ T "main_by" }}
-      <a href="https://github.com/kubernetes/website/commit/{{ .GitInfo.Hash }}/">{{ .GitInfo.Subject }}</a>
-      (<a href="https://github.com/kubernetes/website/commits/master/content/en/{{ .File.Path }}">{{ T "main_page_history" }}</a>)
-    </div>
-  {{ end }}
-</div>
diff --git a/layouts/partials/toc.html b/layouts/partials/toc.html
new file mode 100644
index 0000000000..a57cad567b
--- /dev/null
+++ b/layouts/partials/toc.html
@@ -0,0 +1,8 @@
+{{ partial "page-meta-links.html" . }}
+{{ if not .Params.notoc }}
+{{ with .TableOfContents }}
+{{ if ge (len .) 100 }}
+{{ . }}
+{{ end }}
+{{ end }}
+{{ end }}
\ No newline at end of file

From 2e143b058377fe36c26a8fc4a667d72dd24ef3c2 Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Thu, 3 Sep 2020 23:02:35 +0000
Subject: [PATCH 213/496] Fix issue with
 k8s.io/docs/reference/command-line-tools-reference/feature-gates/

---
 .../reference/command-line-tools-reference/feature-gates.md  | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
index 806d7a2021..eca4a65b87 100644
--- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md
@@ -423,7 +423,7 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `CustomResourceWebhookConversion`: Enable webhook-based conversion
   on resources created from [CustomResourceDefinition](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
   troubleshoot a running Pod.
-- `DisableAcceleratorUsageMetrics`: [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/monitoring.md).
+- `DisableAcceleratorUsageMetrics`: [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/).
 - `DevicePlugins`: Enable the [device-plugins](/docs/concepts/cluster-administration/device-plugins/)
   based resource provisioning on nodes.
 - `DefaultPodTopologySpread`: Enables the use of `PodTopologySpread` scheduling plugin to do
@@ -475,9 +475,6 @@ Each feature gate is designed for enabling/disabling a specific feature:
 - `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the feature-specific labels provided by `NodeDisruptionExclusion` and `ServiceNodeExclusion`.
 - `LocalStorageCapacityIsolation`: Enable the consumption of [local ephemeral storage](/docs/concepts/configuration/manage-compute-resources-container/) and also the `sizeLimit` property of an [emptyDir volume](/docs/concepts/storage/volumes/#emptydir).
 - `LocalStorageCapacityIsolationFSQuotaMonitoring`: When `LocalStorageCapacityIsolation` is enabled for [local ephemeral storage](/docs/concepts/configuration/manage-compute-resources-container/) and the backing filesystem for [emptyDir volumes](/docs/concepts/storage/volumes/#emptydir) supports project quotas and they are enabled, use project quotas to monitor [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than filesystem walk for better performance and accuracy.
-  [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/) and the backing filesystem for
-  [emptyDir volumes](/docs/concepts/storage/volumes/#emptydir) supports project quotas and they are enabled, use project quotas to monitor
-  [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than filesystem walk for better performance and accuracy.
 - `MountContainers`: Enable using utility containers on host as the volume mounter.
 - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods.
   For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation).

From a8fa528b193c3c8a735c06c6db8e52ffaedcb862 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=99=88=E9=80=A2=E9=94=A6/FengjinChen?=
 <19762931+chenfengjin@users.noreply.github.com>
Date: Fri, 4 Sep 2020 17:11:53 +0800
Subject: [PATCH 214/496] Update pod-priority-preemption.md

---
 .../zh/docs/concepts/configuration/pod-priority-preemption.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/configuration/pod-priority-preemption.md b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
index 885db86cb7..f7ff237fb4 100644
--- a/content/zh/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
@@ -24,7 +24,7 @@ pending Pod possible.
 -->
 [Pods](/zh/docs/concepts/workloads/pods/pod/) 可以有*优先级（Priority）*。
 优先级体现的是当前 Pod 与其他 Pod 相比的重要成都。如果 Pod 无法被调度，则
-调度器会尝试抢占（逐出）低优先级的 Pod，从而是的悬决的 Pod 可被调度。
+调度器会尝试抢占（逐出）低优先级的 Pod，从而使得悬决的 Pod 可被调度。
 
 <!-- body -->
 

From f4028e2a0184cdad89eb6642c0af759a3c83b65e Mon Sep 17 00:00:00 2001
From: Roman Marusyk <Marusyk@users.noreply.github.com>
Date: Fri, 4 Sep 2020 12:21:34 +0300
Subject: [PATCH 215/496] Removes IPVS prerequisites

---
 content/en/docs/tasks/network/validate-dual-stack.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/en/docs/tasks/network/validate-dual-stack.md b/content/en/docs/tasks/network/validate-dual-stack.md
index 1e21af226d..305f78db28 100644
--- a/content/en/docs/tasks/network/validate-dual-stack.md
+++ b/content/en/docs/tasks/network/validate-dual-stack.md
@@ -16,7 +16,6 @@ This document shares how to validate IPv4/IPv6 dual-stack enabled Kubernetes clu
 
 * Provider support for dual-stack networking (Cloud provider or otherwise must be able to provide Kubernetes nodes with routable IPv4/IPv6 network interfaces)
 * A [network plugin](/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/) that supports dual-stack (such as Kubenet or Calico)
-* Kube-proxy running in mode IPVS
 * [Dual-stack enabled](/docs/concepts/services-networking/dual-stack/) cluster
 
 {{< version-check >}}

From 1d4e0308ad4dc971153817c4d8dd96a2cf3c32cc Mon Sep 17 00:00:00 2001
From: Joseph Sandoval <sandoval@adobe.com>
Date: Mon, 31 Aug 2020 21:11:26 -0700
Subject: [PATCH 216/496] Add blog intro for structured logs

---
 .../2020-09-04-introducing-structured-logs.md | 56 +++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 content/en/blog/_posts/2020-09-04-introducing-structured-logs.md

diff --git a/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md b/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md
new file mode 100644
index 0000000000..35079ddfab
--- /dev/null
+++ b/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md
@@ -0,0 +1,56 @@
+---
+layout: blog 
+title: 'Introducing Structured Logs'
+date: 2020-09-04 
+slug: kubernetes-1-19-Introducing-Structured-Logs
+---
+
+**Authors:** Marek Siarkowicz (Google), Nathan Beach (Google)
+
+Logs are an essential aspect of observability and a critical tool for debugging. But Kubernetes logs have traditionally been unstructured strings, making any automated parsing difficult and any downstream processing, analysis, or querying challenging to do reliably.
+
+In Kubernetes 1.19, we are adding support for structured logs, which natively support (key, value) pairs and object references. We have also updated many logging calls such that over 99% of logging volume in a typical deployment are now migrated to the structured format.
+
+To maintain backwards compatibility, structured logs will still be outputted as a string where the string contains representations of those "key"="value" pairs. Starting in alpha in 1.19, logs can also be outputted in JSON format using the `--logging-format=json` flag.
+
+## Using Structured Logs
+
+We've added two new methods to the klog library: InfoS and ErrorS. For example, this invocation of InfoS:
+
+```golang
+klog.InfoS(“Pod status updated”, “pod”, klog.KObj(pod), “status”, status)
+```
+
+will result in this log:
+
+```
+I1025 00:15:15.525108       1 controller_utils.go:116] "Pod status updated" pod="kube-system/kubedns" status=”ready”
+```
+
+Or, if the --logging-format=json flag is set, it will result in this output:
+
+```json
+{
+  "ts": 1580306777.04728,
+  "msg": "Pod status updated",
+  "Pod”: {
+    “Name”: “kubedns”,
+    “Namespace”: “kubedns”
+  },
+  “status”: “ready”
+}
+```
+
+This means downstream logging tools can easily ingest structured logging data and instead of using regular expressions to parse unstructured strings. This also makes processing logs easier, querying logs more robust, and analyzing logs much faster.
+
+With structured logs, all references to Kubernetes objects are structured the same way, so you can filter the output and only log entries referencing the particular pod. You can also find logs indicating how the scheduler was scheduling the pod, how the pod was created, the health probes of the pod, and all other changes in the lifecycle of the pod.
+
+Suppose you are debugging an issue with a pod. With structured logs, you can filter to only those log entries referencing the pod of interest, rather than needing to scan through potentially thousands of log lines to find the relevant ones.
+
+Not only are structured logs more useful when manual debugging of issues, they also enable richer features like automated pattern recognition within logs or tighter correlation of log and trace data.
+
+Finally, structured logs can help reduce storage costs for logs because most storage systems are more efficiently able to compress structured key=value data than unstructured strings.
+
+## Get Involved
+
+While we have updated over 99% of the log entries by log volume in a typical deployment, there are still thousands of logs to be updated. Pick a file or directory that you would like to improve and [migrate existing log calls to use structured logs](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/migration-to-structured-logging.md). It's a great and easy way to make your first contribution to Kubernetes!

From e6015970e20c2f1ebdc03dcf28c0fa2ec0652571 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sat, 5 Sep 2020 01:23:01 +0300
Subject: [PATCH 217/496] sync video block

---
 content/uk/_index.html | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/content/uk/_index.html b/content/uk/_index.html
index 4bef7023f6..c67fcfde42 100644
--- a/content/uk/_index.html
+++ b/content/uk/_index.html
@@ -62,12 +62,7 @@ Kubernetes - проект з відкритим вихідним кодом. В
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Переглянути відео</button>
         <br>
         <br>
-        <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2020/" button id="desktopKCButton">Відвідати KubeCon в Амстердамі, 30.03-02.04 2020</a>
-        <br>
-        <br>
-        <br>
-        <br>
-        <a href="https://events.linuxfoundation.cn/kubecon-cloudnativecon-open-source-summit-china/" button id="desktopKCButton">Відвідати KubeCon у Шанхаї, 28-30 липня 2020</a>
+        <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=kubernetes.io&utm_medium=nav&utm_campaign=kccncna20" button id="desktopKCButton">Відвідайте KubeCon NA онлайн, 17-20 листопада 2020 року</a>
 </div>
 <div id="videoPlayer">
     <iframe data-url="https://www.youtube.com/embed/H06qrNmGqyE?autoplay=1" frameborder="0" allowfullscreen></iframe>

From 83c34b14b0aa685ac05d1e09eef7c2341547a4d0 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Thu, 3 Sep 2020 11:33:17 +0800
Subject: [PATCH 218/496] [zh] Translate API concepts reference

---
 .../docs/reference/using-api/api-concepts.md  | 1902 +++++++++++++++++
 .../ssa/nginx-deployment-no-replicas.yaml     |   18 +
 .../ssa/nginx-deployment-replicas-only.yaml   |    6 +
 .../application/ssa/nginx-deployment.yaml     |   19 +
 4 files changed, 1945 insertions(+)
 create mode 100644 content/zh/docs/reference/using-api/api-concepts.md
 create mode 100644 content/zh/examples/application/ssa/nginx-deployment-no-replicas.yaml
 create mode 100644 content/zh/examples/application/ssa/nginx-deployment-replicas-only.yaml
 create mode 100644 content/zh/examples/application/ssa/nginx-deployment.yaml

diff --git a/content/zh/docs/reference/using-api/api-concepts.md b/content/zh/docs/reference/using-api/api-concepts.md
new file mode 100644
index 0000000000..6a3c4946df
--- /dev/null
+++ b/content/zh/docs/reference/using-api/api-concepts.md
@@ -0,0 +1,1902 @@
+---
+title: Kubernetes API 概念
+content_type: concept
+weight: 20
+---
+<!--
+title: Kubernetes API Concepts
+reviewers:
+- smarterclayton
+- lavalamp
+- liggitt
+content_type: concept
+weight: 20
+-->
+
+<!-- overview -->
+<!--
+This page describes common concepts in the Kubernetes API.
+-->
+本页描述 Kubernetes API 的通用概念。
+
+<!-- body -->
+<!--
+The Kubernetes API is a resource-based (RESTful) programmatic interface provided via HTTP. It supports retrieving, creating,
+updating, and deleting primary resources via the standard HTTP verbs (POST, PUT, PATCH, DELETE, GET), includes additional subresources for many objects that allow fine grained authorization (such as binding a pod to a node), and can accept and serve those resources in different representations for convenience or efficiency. It also supports efficient change notifications on resources via "watches" and consistent lists to allow other components to effectively cache and synchronize the state of resources.
+-->
+Kubernetes API 是基于资源的（RESTful）、通过 HTTP 提供的编程接口。
+API 支持通过标准的 HTTP 动词（POST、PUT、PATCH、DELETE 和  GET）
+检视、创建、更新和删除主要资源，为很多允许细粒度权限控制的对象提供子资源
+（如将 Pod 绑定到节点上），并且出于便利性或效率考虑，支持并提供这些资源的
+不同表示形式。
+Kubernetes  API 还通过 "watch" 和一致性的列表支持高效的资源变更通知，
+从而允许其他组件对资源的状态进行高效的缓存和同步。
+
+<!--
+## Standard API terminology
+
+Most Kubernetes API resource types are [objects](/docs/concepts/overview/working-with-objects/kubernetes-objects/#kubernetes-objects): they represent a concrete instance of a concept on the cluster, like a pod or namespace. A smaller number of API resource types are "virtual" - they often represent operations rather than objects, such as a permission check (use a POST with a JSON-encoded body of `SubjectAccessReview` to the `subjectaccessreviews` resource). All objects will have a unique name to allow idempotent creation and retrieval, but virtual resource types may not have unique names if they are not retrievable or do not rely on idempotency.
+-->
+## 标准 API 术语  {#standard-api-terminology}
+
+大多数 Kubernetes API 资源类型都是
+[对象](/zh/docs/concepts/overview/working-with-objects/kubernetes-objects/#kubernetes-objects)：
+它们代表的是集群中某一概念的具体实例，例如一个 Pod 或名字空间。
+为数不多的几个 API 资源类型是“虚拟的” - 它们通常代表的是操作而非对象本身，
+例如访问权限检查（使用 POST 请求发送一个 JSON 编码的 `SubjectAccessReview`
+负载到 `subjectaccessreviews` 资源）。
+所有对象都有一个唯一的名字，以便支持幂等的创建和检视操作，不过如果虚拟资源类型
+不可检视或者不要求幂等，可以不具有唯一的名字。
+
+<!--
+Kubernetes generally leverages standard RESTful terminology to describe the API concepts:
+
+* A **resource type** is the name used in the URL (`pods`, `namespaces`, `services`)
+* All resource types have a concrete representation in JSON (their object schema) which is called a **kind**
+* A list of instances of a resource type is known as a **collection**
+* A single instance of the resource type is called a **resource**
+-->
+Kubernetes 一般会利用标准的 RESTful 术语来描述 API 概念：
+
+* **资源类型（Resource Type）** 是在 URL 中使用的名称（`pods`、`namespaces`、`services`）
+* 所有资源类型都有具有一个 JSON 形式（其对象的模式定义）的具体表示，称作**类别（Kind）**
+* 某资源类型的实例的列表称作 **集合（Collection）**
+* 资源类型的单个实例被称作 **资源（Resource）**
+
+<!--
+All resource types are either scoped by the cluster (`/apis/GROUP/VERSION/*`) or to a namespace (`/apis/GROUP/VERSION/namespaces/NAMESPACE/*`). A namespace-scoped resource type will be deleted when its namespace is deleted and access to that resource type is controlled by authorization checks on the namespace scope. The following paths are used to retrieve collections and resources:
+
+* Cluster-scoped resources:
+  * `GET /apis/GROUP/VERSION/RESOURCETYPE` - return the collection of resources of the resource type
+  * `GET /apis/GROUP/VERSION/RESOURCETYPE/NAME` - return the resource with NAME under the resource type
+* Namespace-scoped resources:
+  * `GET /apis/GROUP/VERSION/RESOURCETYPE` - return the collection of all instances of the resource type across all namespaces
+  * `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE` - return collection of all instances of the resource type in NAMESPACE
+  * `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE/NAME` - return the instance of the resource type with NAME in NAMESPACE
+-->
+所有资源类型要么是集群作用域的（`/apis/GROUP/VERSION/*`），要么是名字空间
+作用域的（`/apis/GROUP/VERSION/namespaces/NAMESPACE/*`）。
+名字空间作用域的资源类型会在其名字空间被删除时也被删除，并且对该资源类型的
+访问是由定义在名字空间域中的授权检查来控制的。
+下列路径用来检视集合和资源：
+
+* 集群作用域的资源：
+  * `GET /apis/GROUP/VERSION/RESOURCETYPE` - 返回指定资源类型的资源的集合
+  * `GET /apis/GROUP/VERSION/RESOURCETYPE/NAME` - 返回指定资源类型下名称为 NAME 的资源
+* 名字空间作用域的资源：
+  * `GET /apis/GROUP/VERSION/RESOURCETYPE` - 返回所有名字空间中指定资源类型的全部实例的集合
+  * `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE` - 返回名字空间 NAMESPACE 内给定资源类型的全部实例的集合
+  * `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE/NAME` - 返回名字空间 NAMESPACE 中给定资源类型的名称为 NAME 的实例
+
+<!--
+Since a namespace is a cluster-scoped resource type, you can retrieve the list of all namespaces with `GET /api/v1/namespaces` and details about a particular namespace with `GET /api/v1/namespaces/NAME`.
+
+Almost all object resource types support the standard HTTP verbs - GET, POST, PUT, PATCH, and DELETE. Kubernetes uses the term **list** to describe returning a collection of resources to distinguish from retrieving a single resource which is usually called a **get**.
+-->
+由于名字空间本身是一个集群作用域的资源累;，你可以通过 `GET /api/v1/namespaces/`
+检视所有名字空间的列表，使用 `GET /api/v1/namespaces/NAME` 查看特定名字空间的
+详细信息。
+
+几乎所有对象资源类型都支持标准的 HTTP 动词 - GET、POST、PUT、PATCH 和 DELETE。
+Kubernetes 使用术语 **list** 来描述返回资源集合的操作，以便与返回单个资源的、
+通常称作 **get** 的操作相区分。
+
+<!--
+Some resource types will have one or more sub-resources, represented as sub paths below the resource:
+
+* Cluster-scoped subresource: `GET /apis/GROUP/VERSION/RESOURCETYPE/NAME/SUBRESOURCE`
+* Namespace-scoped subresource: `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE/NAME/SUBRESOURCE`
+
+The verbs supported for each subresource will differ depending on the object - see the API documentation more information. It is not possible to access sub-resources across multiple resources - generally a new virtual resource type would be used if that becomes necessary.
+-->
+某些资源类型有一个或多个子资源（Sub-resource），表现为对应资源下面的子路径：
+
+* 集群作用域的子资源：`GET /apis/GROUP/VERSION/RESOURCETYPE/NAME/SUBRESOURCE`
+* 名字空间作用域的子资源：`GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE/NAME/SUBRESOURCE`
+
+取决于对象是什么，每个子资源所支持的动词有所不同 - 参见 API 文档以了解更多信息。
+跨多个资源来访问其子资源是不可能的 - 如果需要这一能力，则通常意味着需要一种
+新的虚拟资源类型了。
+
+<!--
+## Efficient detection of changes
+
+To enable clients to build a model of the current state of a cluster, all Kubernetes object resource types are required to support consistent lists and an incremental change notification feed called a **watch**.  Every Kubernetes object has a `resourceVersion` field representing the version of that resource as stored in the underlying database. When retrieving a collection of resources (either namespace or cluster scoped), the response from the server will contain a `resourceVersion` value that can be used to initiate a watch against the server. The server will return all changes (creates, deletes, and updates) that occur after the supplied `resourceVersion`. This allows a client to fetch the current state and then watch for changes without missing any updates. If the client watch is disconnected they can restart a new watch from the last returned `resourceVersion`, or perform a new collection request and begin again. See [Resource Version Semantics](#resource-versions) for more detail.
+
+For example:
+-->
+## 高效检测变更  {#efficient-detection-of-changes}
+
+为了使客户端能够构造一个模型来表达集群的当前状态，所有 Kubernetes 对象资源类型
+都需要支持一致的列表和一个称作 **watch** 的增量变更通知信源（feed）。
+每个 Kubernetes 对象都有一个 `resourceVersion` 字段，代表该资源在下层数据库中
+存储的版本。检视资源集合（名字空间作用域或集群作用域）时，服务器返回的响应
+中会包含 `resourceVersion` 值，可用来向服务器发起 watch 请求。
+服务器会返回所提供的 `resourceVersion` 之后发生的所有变更（创建、删除和更新）。
+这使得客户端能够取回当前的状态并监视其变更，且不会错过任何变更事件。
+客户端的监视连接被断开时，可以从最后返回的 `resourceVersion` 重启新的监视连接，
+或者执行一个新的集合请求之后从头开始监视操作。
+参阅[资源版本语义](#resource-versions)以了解更多细节。
+
+例如：
+
+<!--
+1. List all of the pods in a given namespace.
+-->
+1. 列举给定名字空间中的所有 Pods：
+
+   ```console
+   GET /api/v1/namespaces/test/pods
+   ---
+   200 OK
+   Content-Type: application/json
+   {
+     "kind": "PodList",
+     "apiVersion": "v1",
+     "metadata": {"resourceVersion":"10245"},
+     "items": [...]
+   }
+   ```
+
+<!--
+2. Starting from resource version 10245, receive notifications of any creates, deletes, or updates as individual JSON objects.
+-->
+2. 从资源版本 10245 开始，以 JSON 对象的形式接收所有创建、删除或更新操作的通知：
+
+   ```console
+   GET /api/v1/namespaces/test/pods?watch=1&resourceVersion=10245
+   ---
+   200 OK
+   Transfer-Encoding: chunked
+   Content-Type: application/json
+
+   {
+     "type": "ADDED",
+     "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "10596", ...}, ...}
+   }
+   {
+     "type": "MODIFIED",
+     "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "11020", ...}, ...}
+   }
+   ...
+   ```
+
+<!--
+A given Kubernetes server will only preserve a historical list of changes for a limited time. Clusters using etcd3 preserve changes in the last 5 minutes by default.  When the requested watch operations fail because the historical version of that resource is not available, clients must handle the case by recognizing the status code `410 Gone`, clearing their local cache, performing a list operation, and starting the watch from the `resourceVersion` returned by that new list operation. Most client libraries offer some form of standard tool for this logic. (In Go this is called a `Reflector` and is located in the `k8s.io/client-go/cache` package.)
+-->
+给定的 Kubernetes 服务器只会保留一定的时间内发生的历史变更列表。
+使用 etcd3 的集群默认保存过去 5 分钟内发生的变更。
+当所请求的 watch 操作因为资源的历史版本不存在而失败，客户端必须能够处理
+因此而返回的状态代码 `410 Gone`，清空其本地的缓存，重新执行 list 操作，
+并基于新的 list 操作所返回的 `resourceVersion` 来开始新的 watch 操作。
+大多数客户端库都能够提供某种形式的、包含此逻辑的工具。
+（在 Go 语言客户端库中，这一设施称作 `Reflector`，位于
+`k8s.io/client-go/cache` 包中。)
+
+<!--
+### Watch bookmarks
+
+To mitigate the impact of short history window, we introduced a concept of `bookmark` watch event. It is a special kind of event to mark that all changes up to a given `resourceVersion` the client is requesting have already been sent. Object returned in that event is of the type requested by the request, but only `resourceVersion` field is set, e.g.:
+-->
+### 监视书签（Watch Bookmark）
+
+为了处理历史窗口过短的问题，我们引入了 `bookmark（书签）` 监视事件的概念。
+该事件是一种特殊事件，用来标示客户端所请求的、指定的 `resourceVersion` 之前
+的所有变更都以被发送。该事件中返回的对象是所请求的资源类型，但其中仅包含
+`resourceVersion` 字段，例如：
+
+```console
+GET /api/v1/namespaces/test/pods?watch=1&resourceVersion=10245&allowWatchBookmarks=true
+---
+200 OK
+Transfer-Encoding: chunked
+Content-Type: application/json
+
+{
+  "type": "ADDED",
+  "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "10596", ...}, ...}
+}
+...
+{
+  "type": "BOOKMARK",
+  "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "12746"} }
+}
+```
+
+<!--
+`Bookmark` events can be requested by `allowWatchBookmarks=true` option in watch requests, but clients shouldn't assume bookmarks are returned at any specific interval, nor may they assume the server will send any `bookmark` event.
+-->
+通过在 watch 请求中设置 `allowWatchBookmarks=true` 选项，可以请求 `bookmark`
+事件，但是客户端不能假定服务器端会按某特定时间间隔返回书签事件，甚至也不能
+假定服务器一定会发送 `bookmark` 事件。
+
+<!--
+## Retrieving large results sets in chunks
+-->
+## 分块检视大体量结果
+
+{{< feature-state for_k8s_version="v1.9" state="beta" >}}
+
+<!--
+On large clusters, retrieving the collection of some resource types may result in very large responses that can impact the server and client. For instance, a cluster may have tens of thousands of pods, each of which is 1-2kb of encoded JSON. Retrieving all pods across all namespaces may result in a very large response (10-20MB) and consume a large amount of server resources. Starting in Kubernetes 1.9 the server supports the ability to break a single large collection request into many smaller chunks while preserving the consistency of the total request. Each chunk can be returned sequentially which reduces both the total size of the request and allows user-oriented clients to display results incrementally to improve responsiveness.
+-->
+在较大规模的集群中，检视某些资源类型的集合时可能会返回较大体量的响应数据，对
+服务器和客户端都会造成影响。例如，某集群可能包含数万个 Pod，每个 Pod 的 JSON
+编码都有 1-2 KB 的大小。返回所有名字空间的全部 Pod 时，其结果可能体量很大
+（10-20 MB）且耗用大量的服务器资源。
+从 Kubernetes 1.9 开始，服务器支持将单一的大体量集合请求分解成多个小数据块
+同时还保证整个请求的一致性的能力。
+各个数据块可以按顺序返回，进而降低请求的尺寸，允许面向用户的客户端以增量形式
+呈现返回结果，改进系统响应效果。
+
+<!--
+To retrieve a single list in chunks, two new parameters `limit` and `continue`
+are supported on collection requests and a new field `continue` is returned
+from all list operations in the list `metadata` field. A client should specify
+the maximum results they wish to receive in each chunk with `limit` and the
+server will return up to `limit` resources in the result and include a
+`continue` value if there are more resources in the collection. The client can
+then pass this `continue` value to the server on the next request to instruct
+the server to return the next chunk of results. By continuing until the server
+returns an empty `continue` value the client can consume the full set of
+results.
+-->
+为了用分块的形式返回一个列表，集合请求上可以设置两个新的参数 `limit` 和
+`continue`，并且所有 list 操作的返回结果列表的 `metadata` 字段中会包含一个
+新的 `continue` 字段。
+客户端应该将 `limit` 设置为希望在每个数据块中收到的结果个数上限，而服务器则
+会在结果中至多返回 `limit` 个资源并在集合中还有更多资源的时候包含一个
+`continue` 值。客户端在下次请求时则可以将此 `continue` 值传递给服务器，
+告知后者要从何处开始返回结果的下一个数据块。
+通过重复这一操作直到服务器端返回空的 `continue` 值，客户端可以受到结果的
+全集。
+
+<!--
+Like a watch operation, a `continue` token will expire after a short amount of time (by default 5 minutes) and return a `410 Gone` if more results cannot be returned. In this case, the client will need to start from the beginning or omit the `limit` parameter.
+
+For example, if there are 1,253 pods on the cluster and the client wants to receive chunks of 500 pods at a time, they would request those chunks as follows:
+-->
+与 watch 操作类似，`continue` 令牌也会在很短的时间（默认为 5 分钟）内过期，
+并在无法返回更多结果时返回 `410 Gone` 代码。
+这时，客户端需要从头开始执行上述检视操作或者忽略 `limit` 参数。
+
+例如，如果集群上有 1253 个 Pods，客户端希望每次收到包含至多 500 个 Pod 的
+数据块，它应按下面的步骤来请求数据块：
+
+<!--
+1. List all of the pods on a cluster, retrieving up to 500 pods each time.
+-->
+1. 列举集群中所有 Pod，每次接收至多 500 个 Pods：
+
+```console
+GET /api/v1/pods?limit=500
+---
+200 OK
+Content-Type: application/json
+
+{
+  "kind": "PodList",
+  "apiVersion": "v1",
+  "metadata": {
+    "resourceVersion":"10245",
+    "continue": "ENCODED_CONTINUE_TOKEN",
+    ...
+  },
+  "items": [...] // returns pods 1-500
+}
+```
+<!--
+2. Continue the previous call, retrieving the next set of 500 pods.
+-->
+2. 继续前面的调用，返回下一组 500 个 Pods：
+
+```console
+GET /api/v1/pods?limit=500&continue=ENCODED_CONTINUE_TOKEN
+---
+200 OK
+Content-Type: application/json
+
+{
+  "kind": "PodList",
+  "apiVersion": "v1",
+  "metadata": {
+    "resourceVersion":"10245",
+    "continue": "ENCODED_CONTINUE_TOKEN_2",
+    ...
+  },
+  "items": [...] // returns pods 501-1000
+}
+```
+
+<!--
+3. Continue the previous call, retrieving the last 253 pods.
+-->
+3. 继续前面的调用，返回最后 253 个 Pods：
+
+```console
+GET /api/v1/pods?limit=500&continue=ENCODED_CONTINUE_TOKEN_2
+---
+200 OK
+Content-Type: application/json
+
+{
+  "kind": "PodList",
+  "apiVersion": "v1",
+  "metadata": {
+    "resourceVersion":"10245",
+    "continue": "", // continue token is empty because we have reached the end of the list
+    ...
+  },
+  "items": [...] // returns pods 1001-1253
+}
+```
+
+<!--
+Note that the `resourceVersion` of the list remains constant across each request, indicating the server is showing us a consistent snapshot of the pods. Pods that are created, updated, or deleted after version `10245` would not be shown unless the user makes a list request without the `continue` token.  This allows clients to break large requests into smaller chunks and then perform a watch operation on the full set without missing any updates.
+-->
+注意 list 操作的 `resourceVersion` 在每个请求中都设置的是同一个数值，
+这表明服务器要向我们展示一个一致的 Pods 快照视图。
+在版本 `10245` 之后创建、更新或删除的 Pods 都不会显示出来，除非用户发出
+list 请求时不指定 `continue` 令牌。
+这一设计使得客户端能够将较大的响应切分为较小的数据块，且能够对较大的集合
+执行监视动作而不会错失任何更新事件。
+
+<!--
+## Receiving resources as Tables
+
+The output from the `kubectl get` command is a simple tabular representation of one or more instances of a particular resource type. In the past, clients were required to reproduce the tabular and describe output implemented in `kubectl` to perform simple lists of objects.
+A few limitations of that approach include non-trivial logic when dealing with certain objects. Additionally, types provided by API aggregation or third party resources are not known at compile time. This means that generic implementations had to be in place for types unrecognized by a client.
+-->
+## 以表格形式接收资源
+
+`kubectl get` 命令的输出是一个包含一个或多个资源的简单表格形式。
+过去，客户端需要重复 `kubectl` 中所实现的表格输出和描述输出逻辑，以执行
+简单的对象列表操作。
+这一方法在处理某些对象时，需要引入不容忽视的逻辑。
+此外，[API 聚合](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
+和[定制资源](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
+所提供的资源类型都是编译时不可预知的。这意味着，客户端必须针对无法
+识别的类型提供通用的实现逻辑。
+
+<!--
+In order to avoid potential limitations as described above, clients may request the Table representation of objects, delegating specific details of printing to the server. The Kubernetes API implements standard HTTP content type negotiation: passing an `Accept` header containing a value of `application/json;as=Table;g=meta.k8s.io;v=v1beta1` with a `GET` call will request that the server return objects in the Table content type.
+
+For example:
+-->
+为了避免上述各种潜在的局限性，客户端可以请求服务器端返回对象的表格（Table）
+表现形式，从而将打印输出的特定细节委托给服务器。
+Kubernetes API 实现标准的 HTTP 内容类型（Content Type）协商：为 `GET` 调用
+传入一个值为 `application/json;as=Table;g=meta.k8s.io;v=v1beta1` 的 `Accept`
+头部即可请求服务器以 Table 的内容类型返回对象。
+
+例如，以 Table 格式列举集群中所有 Pods：
+
+```console
+GET /api/v1/pods
+Accept: application/json;as=Table;g=meta.k8s.io;v=v1beta1
+---
+200 OK
+Content-Type: application/json
+
+{
+    "kind": "Table",
+    "apiVersion": "meta.k8s.io/v1beta1",
+    ...
+    "columnDefinitions": [
+        ...
+    ]
+}
+```
+
+<!--
+For API resource types that do not have a custom Table definition on the
+server, a default Table response is returned by the server, consisting of the
+resource's `name` and `creationTimestamp` fields.
+-->
+对于在服务器上不存在定制的 Table 定义的 API 资源类型而言，服务器会返回
+一个默认的 Table 响应，其中包含资源的 `name` 和 `creationTimestamp` 字段。
+
+```console
+GET /apis/crd.example.com/v1alpha1/namespaces/default/resources
+---
+200 OK
+Content-Type: application/json
+...
+
+{
+    "kind": "Table",
+    "apiVersion": "meta.k8s.io/v1beta1",
+    ...
+    "columnDefinitions": [
+        {
+            "name": "Name",
+            "type": "string",
+            ...
+        },
+        {
+            "name": "Created At",
+            "type": "date",
+            ...
+        }
+    ]
+}
+```
+
+<!--
+Table responses are available beginning in version 1.10 of the kube-apiserver.
+As such, not all API resource types will support a Table response,
+specifically when using a client against older clusters. Clients that must
+work against all resource types, or can potentially deal with older clusters,
+should specify multiple content types in their `Accept` header to support
+fallback to non-Tabular JSON:
+-->
+`kube-apiserver` 从 1.10 版本开始提供 Table 响应。
+因此，并非所有 API 资源类型都支持 Table 响应，尤其是使用客户端访问较老的集群时。
+如果客户端需要能够处理所有资源类型，或者有可能需要与较老的集群交互，
+则需要在其 `Accept` 头部设定多个内容类型值，以便可以回退到非表格形式的 JSON
+表示。
+
+```
+Accept: application/json;as=Table;g=meta.k8s.io;v=v1beta1, application/json
+```
+
+<!--
+## Alternate representations of resources
+
+By default Kubernetes returns objects serialized to JSON with content type `application/json`. This is the default serialization format for the API. However, clients may request the more efficient Protobuf representation of these objects for better performance at scale. The Kubernetes API implements standard HTTP content type negotiation: passing an `Accept` header with a `GET` call will request that the server return objects in the provided content type, while sending an object in Protobuf to the server for a `PUT` or `POST` call takes the `Content-Type` header. The server will return a `Content-Type` header if the requested format is supported, or the `406 Not acceptable` error if an invalid content type is provided.
+
+See the API documentation for a list of supported content types for each API.
+
+For example:
+-->
+## 资源的其他表示形式
+
+默认情况下，Kubernetes 返回 JSON 序列化的的对象并设定内容类型为
+`application/json`。这是 API 的默认序列化格式。
+不过，客户端也可出于大规模环境中更佳性能的需求而请求对象的更为高效的 Protobuf
+表现形式。
+Kubernetes API 实现了标准的 HTTP 内容类型协商：为 `GET` 调用传递一个 `Accept`
+头部来请求服务器以所指定的内容类型返回对象，同时在通过 `PUT` 或 `POST` 调用
+向服务器发送 Protobuf 格式的对象时提供 `Content-Type` 头部。
+服务器会能够支持所请求的格式时返回 `Content-Type` 头部，并在所提供的内容类型
+不合法时返回 `406 Not acceptable（无法接受）` 错误。
+
+请参阅 API 文档了解每个 API 所支持的内容类型。
+
+例如：
+
+<!--
+1. List all of the pods on a cluster in Protobuf format.
+-->
+1. 以 Protobuf 格式列举集群上的所有 Pods：
+
+```console
+GET /api/v1/pods
+Accept: application/vnd.kubernetes.protobuf
+---
+200 OK
+Content-Type: application/vnd.kubernetes.protobuf
+
+... binary encoded PodList object
+```
+
+<!--
+2. Create a pod by sending Protobuf encoded data to the server, but request a response in JSON.
+-->
+2. 通过向服务器发送 Protobuf 编码的数据创建 Pod，但请求以 JSON 形式接收响应：
+
+```console
+POST /api/v1/namespaces/test/pods
+Content-Type: application/vnd.kubernetes.protobuf
+Accept: application/json
+... binary encoded Pod object
+---
+200 OK
+Content-Type: application/json
+
+{
+  "kind": "Pod",
+  "apiVersion": "v1",
+  ...
+}
+```
+
+<!--
+Not all API resource types will support Protobuf, specifically those defined
+via Custom Resource Definitions or those that are API extensions. Clients that
+must work against all resource types should specify multiple content types in
+their `Accept` header to support fallback to JSON:
+-->
+并非所有 API 资源类型都支持 Protobuf，尤其是那些通过定制资源定义（CRD）或通过
+API 扩展而加入的资源。如果客户端必须能够处理所有资源类型，则应在其 `Accept`
+头部指定多种内容类型以便可以回退到 JSON 格式：
+
+```
+Accept: application/vnd.kubernetes.protobuf, application/json
+```
+
+<!--
+### Protobuf encoding
+
+Kubernetes uses an envelope wrapper to encode Protobuf responses. That wrapper starts with a 4 byte magic number to help identify content in disk or in etcd as Protobuf (as opposed to JSON), and then is followed by a Protobuf encoded wrapper message, which describes the encoding and type of the underlying object and then contains the object.
+
+The wrapper format is:
+-->
+### Protobuf encoding
+
+Kubernetes 使用封套形式来对 Protobuf 响应进行编码。
+封套外层由 4 个字节的特殊数字开头，便于从磁盘文件或 etcd 中辩识 Protobuf
+格式的（而不是 JSON）数据。
+接下来存放的是 Protobuf 编码的封套消息，其中描述下层对象的编码和类型，最后
+才是对象本身。
+
+封套格式如下：
+
+<!--
+```
+A four byte magic number prefix:
+  Bytes 0-3: "k8s\x00" [0x6b, 0x38, 0x73, 0x00]
+
+An encoded Protobuf message with the following IDL:
+  message Unknown {
+    // typeMeta should have the string values for "kind" and "apiVersion" as set on the JSON object
+    optional TypeMeta typeMeta = 1;
+
+    // raw will hold the complete serialized object in protobuf. See the protobuf definitions in the client libraries for a given kind.
+    optional bytes raw = 2;
+
+    // contentEncoding is encoding used for the raw data. Unspecified means no encoding.
+    optional string contentEncoding = 3;
+
+    // contentType is the serialization method used to serialize 'raw'. Unspecified means application/vnd.kubernetes.protobuf and is usually
+    // omitted.
+    optional string contentType = 4;
+  }
+
+  message TypeMeta {
+    // apiVersion is the group/version for this type
+    optional string apiVersion = 1;
+    // kind is the name of the object schema. A protobuf definition should exist for this object.
+    optional string kind = 2;
+  }
+```
+-->
+```
+四个字节的特殊数字前缀：
+  字节 0-3: "k8s\x00" [0x6b, 0x38, 0x73, 0x00]
+
+使用下面 IDL 来编码的 Protobuf 消息：
+  message Unknown {
+    // typeMeta 应该包含 "kind" 和 "apiVersion" 的字符串值，就像
+    // 对应的 JSON 对象中所设置的那样
+    optional TypeMeta typeMeta = 1;
+
+    // raw 中将保存用 protobuf 序列化的完整对象。
+    // 参阅客户端库中为指定 kind 所作的 protobuf 定义
+    optional bytes raw = 2;
+
+    // contentEncoding 用于 raw 数据的编码格式。未设置此值意味着没有特殊编码。
+    optional string contentEncoding = 3;
+
+    // contentType 包含 raw 数据所采用的序列化方法。
+    // 未设置此值意味着  application/vnd.kubernetes.protobuf，且通常被忽略
+    optional string contentType = 4;
+  }
+
+  message TypeMeta {
+    // apiVersion 是 type 对应的组名/版本
+    optional string apiVersion = 1;
+    // kind 是对象模式定义的名称。此对象应该存在一个 protobuf 定义。
+    optional string kind = 2;
+  }
+```
+
+<!--
+Clients that receive a response in `application/vnd.kubernetes.protobuf` that does not match the expected prefix should reject the response, as future versions may need to alter the serialization format in an incompatible way and will do so by changing the prefix.
+-->
+收到 `application/vnd.kubernetes.protobuf` 格式响应的客户端在响应与预期的前缀
+不匹配时应该拒绝响应，因为将来的版本可能需要以某种不兼容的方式更改序列化格式，
+并且这种更改是通过变更前缀完成的。
+
+<!--
+## Resource deletion
+
+Resources are deleted in two phases: 1) finalization, and 2) removal.
+-->
+## 资源删除
+
+资源删除要经过两个阶段：1) 终止（finalization），和 2）去除。
+
+```json
+{
+  "kind": "ConfigMap",
+  "apiVersion": "v1",
+  "metadata": {
+    "finalizers": {"url.io/neat-finalization", "other-url.io/my-finalizer"},
+    "deletionTimestamp": nil,
+  }
+}
+```
+
+<!--
+When a client first deletes a resource, the `.metadata.deletionTimestamp` is
+set to the current time.  Once the `.metadata.deletionTimestamp` is set,
+external controllers that act on finalizers may start performing their cleanup
+work at any time, in any order.  Order is NOT enforced because it introduces
+significant risk of stuck `.metadata.finalizers`.  `.metadata.finalizers` is a
+shared field, any actor with permission can reorder it.  If the finalizer list
+is processed in order, then this can lead to a situation in which the
+component responsible for the first finalizer in the list is waiting for a
+signal (field value, external system, or other) produced by a component
+responsible for a finalizer later in the list, resulting in a deadlock.
+Without enforced ordering finalizers are free to order amongst themselves and
+are not vulnerable to ordering changes in the list.
+
+Once the last finalizer is removed, the resource is actually removed from
+etcd.
+-->
+当客户端首先删除某资源时，其 `.metadata.deletionTimestamp` 会被设置为当前时间。
+一旦 `.metadata.deletionTimestamp` 被设置，则对终结器（finalizers）执行动作
+的外部控制器就可以在任何时候、以任何顺序执行其清理工作。
+这里不强调顺序是因为很可能带来 `.metadata.finalizers` 被锁定的风险。
+`.metadata.finalizers` 是一个共享的字段，任何具有相关权限的主体都可以对其
+执行重排序的操作。如果终结器列表要按顺序处理，则很可能导致负责列表中第一个
+终结器的组件要等待负责列表中排序靠后的终结器的组件的信号（可能是字段值变更、
+外部系统或者其他形式），从而导致死锁行为。
+在不对终结器顺序作强制要求的情况下，终结器可以自行排序，且不会因为其在列表
+中的顺序而引入任何不稳定因素。
+
+当最后一个终结器也被移除时，资源才真正从 etcd 中移除。
+
+<!--
+## Single resource API
+
+API verbs GET, CREATE, UPDATE, PATCH, DELETE and PROXY support single resources only.
+These verbs with single resource support have no support for submitting
+multiple resources together in an ordered or unordered list or transaction.
+Clients including kubectl will parse a list of resources and make
+single-resource API requests.
+
+API verbs LIST and WATCH support getting multiple resources, and
+DELETECOLLECTION supports deleting multiple resources.
+-->
+## 单个资源 API  {#single-resource-api}
+
+API 动词 GET、CREATE、UPDATE、PATCH、DELETE 和 PROXY 仅支持单个资源。
+这些支持单一资源的动词不支持以有序或无序列表甚或事务的形式同时提交给
+多个资源。
+包括 kubectl 在内的客户端将解析资源的列表，并执行单一资源的 API 请求。
+
+API 动词 LIST 和 WATCH 支持获取多个资源，而 DELETECOLLECTION 支持删除多个
+资源。
+
+<!--
+## Dry-run
+-->
+## 试运行  {#dry-run}
+
+{{< feature-state for_k8s_version="v1.18" state="stable" >}}
+
+<!--
+The modifying verbs (`POST`, `PUT`, `PATCH`, and `DELETE`) can accept requests in a _dry run_ mode. Dry run mode helps to evaluate a request through the typical request stages (admission chain, validation, merge conflicts) up until persisting objects to storage. The response body for the request is as close as possible to a non-dry-run response. The system guarantees that dry-run requests will not be persisted in storage or have any other side effects.
+-->
+修改性质的动词（`POST`、`PUT`、`PATCH` 和 `DELETE`）可以支持 _试运行（dry
+run）_ 模式的请求。试运行模式可帮助通过典型的请求阶段（准入控制链、合法性
+检查、合并冲突）来评估请求，只是最终的对象不会写入存储。请求的响应主体与
+非试运行模式下的响应尽可能接近。系统会保证试运行模式的请求不会被写入到存储
+中，也不会产生其他副作用。
+
+<!--
+### Make a dry-run request
+
+Dry-run is triggered by setting the `dryRun` query parameter. This parameter is a string, working as an enum, and the only accepted values are:
+
+* `All`: Every stage runs as normal, except for the final storage stage. Admission controllers are run to check that the request is valid, mutating controllers mutate the request, merge is performed on `PATCH`, fields are defaulted, and schema validation occurs. The changes are not persisted to the underlying storage, but the final object which would have been persisted is still returned to the user, along with the normal status code. If the request would trigger an admission controller which would have side effects, the request will be failed rather than risk an unwanted side effect. All built in admission control plugins support dry-run. Additionally, admission webhooks can declare in their [configuration object](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#webhook-v1beta1-admissionregistration-k8s-io) that they do not have side effects by setting the sideEffects field to "None". If a webhook actually does have side effects, then the sideEffects field should be set to "NoneOnDryRun", and the webhook should also be modified to understand the `DryRun` field in AdmissionReview, and prevent side effects on dry-run requests.
+* Leave the value empty, which is also the default: Keep the default modifying behavior.
+
+For example:
+-->
+### 发起试运行请求  {#make-a-dry-run-request}
+
+通过设置 `dryRun` 查询参数可以触发试运行模式。此参数是一个字符串，以枚举值
+的形式工作且可接受的值只有：
+
+* `All`：每个阶段被会正常运行，除了最后的存储阶段。准入控制器会被运行来检查请求
+  是否合法，变更性（Mutating）控制器会变更请求，`PATCH` 请求也会触发合并操作，
+  对象字段的默认值也会被设置，且基于模式定义的合法性检查也会被执行。
+  所生成的变更不会被写入到下层的持久性存储中，但本来会写入到数据库中的最终对象
+  会和正常的状态代码一起被返回给用户。如果请求会触发准入控制器而该准入控制器
+  带有一定的副作用，则请求会失败而不是冒险产生不希望的副作用。
+  所有的内置准入控制器插件都支持试运行模式。此外，准入控制 Webhook 也可在其
+  [配置对象](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#webhook-v1beta1-admissionregistration-k8s-io)
+  中通过将 `sideEffects` 字段设置为 "None" 来声明自身不会产生副作用。
+  如果某 Webhook 确实会产生副作用，那么 `sideEffects` 字段应该设置为 "NoneOnDryRun"，
+  并且 Webhook 应该被更改以支持 AdmissionReview 中的 `dryRun` 字段，从而避免
+  在试运行时产生副作用。
+
+* 空字符串（也即默认值）：保留默认的修改行为。
+
+例如：
+
+```console
+POST /api/v1/namespaces/test/pods?dryRun=All
+Content-Type: application/json
+Accept: application/json
+```
+
+<!--
+The response would look the same as for non-dry-run request, but the values of some generated fields may differ.
+-->
+响应会与非试运行模式请求的响应看起来相同，只是某些生成字段的值可能会不同。
+
+<!--
+### Dry-run authorization
+
+Authorization for dry-run and non-dry-run requests is identical. Thus, to make
+a dry-run request, the user must be authorized to make the non-dry-run request.
+
+For example, to run a dry-run `PATCH` for Deployments, you must have the
+`PATCH` permission for Deployments, as in the example of the RBAC rule below.
+-->
+### 试运行的授权    {#dry-run-authorization}
+
+试运行和非试运行请求的鉴权是完全相同的。因此，要发起一个试运行请求，用户必须
+被授权执行非试运行请求。
+
+例如，要在 Deployment 对象上试运行 `PATCH` 操作，你必须具有对 Deployment 执行
+`PATCH` 操作的访问权限，如下面的 RBAC 规则所示：
+
+```yaml
+rules:
+- apiGroups: ["extensions", "apps"]
+  resources: ["deployments"]
+  verbs: ["patch"]
+```
+
+<!--
+See [Authorization Overview](/docs/reference/access-authn-authz/authorization/).
+-->
+参阅[鉴权概述](/zh/docs/reference/access-authn-authz/authorization/)以了解鉴权细节。
+
+<!--
+### Generated values
+
+Some values of an object are typically generated before the object is persisted. It is important not to rely upon the values of these fields set by a dry-run request, since these values will likely be different in dry-run mode from when the real request is made. Some of these fields are:
+
+* `name`: if `generateName` is set, `name` will have a unique random name
+* `creationTimestamp`/`deletionTimestamp`: records the time of creation/deletion
+* `UID`: uniquely identifies the object and is randomly generated (non-deterministic)
+* `resourceVersion`: tracks the persisted version of the object
+* Any field set by a mutating admission controller
+* For the `Service` resource: Ports or IPs that kube-apiserver assigns to v1.Service objects
+-->
+### 生成的值  {#generated-values}
+
+对象的某些值通常是在对象被写入数据库之前生成的。很重要的一点是不要依赖试运行
+请求为这些字段所设置的值，因为试运行模式下所得到的这些值与真实请求所获得的
+值很可能不同。这类字段有：
+
+* `name`：如果设置了 `generateName` 字段，则 `name` 会获得一个唯一的随机名称
+* `creationTimestamp`/`deletionTimestamp`：记录对象的创建/删除时间
+* `UID`：唯一性标识对象，取值随机生成（非确定性）
+* `resourceVersion`： 跟踪对象的持久化（存储）版本
+* 变更性准入控制器所设置的字段
+* 对于 `Service` 资源：`kube-apiserver` 为 `v1.Service` 对象分配的端口和 IP
+
+<!--
+## Server Side Apply
+-->
+## 服务器端应用  {#server-side-apply}
+
+{{< feature-state for_k8s_version="v1.16" state="beta" >}}
+
+<!--
+Starting from Kubernetes v1.18, if you have Server Side Apply enabled then the
+control plane tracks managed fields for all newly created objects.
+-->
+从 Kubernetes v1.18 开始，如果你启动了服务器端应用（Service Side Apply）功能
+特性，则控制面会跟踪所有新创建的对象的托管字段（Managed Fields）。
+
+<!--
+### Introduction
+
+Server Side Apply helps users and controllers manage their resources via
+declarative configurations. It allows them to create and/or modify their
+objects declaratively, simply by sending their fully specified intent.
+
+A fully specified intent is a partial object that only includes the fields and
+values for which the user has an opinion. That intent either creates a new
+object or is [combined](#merge-strategy), by the server, with the existing object.
+
+The system supports multiple appliers collaborating on a single object.
+-->
+### 介绍  {#introduction}
+
+服务器端应用可以通过声明式配置帮助用户和控制器管理其资源。此功能特性允许
+用户和控制器通过将完全设定的意愿发送到服务器以声明式方式创建与/或更改其对象。
+
+完全设定的意愿（Fully Specified Intent）是对象的一个部分，仅包含用户希望表达
+其意愿的字段和取值。此意愿或者是要创建一个新的对象，或者是由服务器来负责
+完成的、与现有对象的[合并](#merge-strategy)。
+
+系统支持多个施加者（Applier）同一个对象上进行协作。
+
+<!--
+Changes to an object's fields are tracked through a "[field management](#field-management)"
+mechanism. When a field's value changes, ownership moves from its current
+manager to the manager making the change. When trying to apply an object, fields
+that have a different value and are owned by another manager will result in a
+[conflict](#conflicts). This is done in order to signal that the operation might undo another
+collaborator's changes. Conflicts can be forced, in which case the value will be
+overridden, and the ownership will be transferred.
+-->
+对对象字段的变更是通过“[字段管理](#field-management)”来进行跟踪的。
+当字段的值发生变化时，其属主从其当前的管理器切换为作出变更的管理器。
+尝试应用对象时，取值不同的字段以及由另一个管理器所拥有的字段都会导致
+[冲突](#conflicts)。引发冲突的目的是通告该操作可能会撤销掉另一协作方
+所做的变更。冲突可以被强制解决，从而导致字段取值被覆盖且其属主关系
+被转移。
+
+<!--
+If you remove a field from a configuration and apply the configuration, server side apply checks
+if there are any other field managers that also own the field.  If the field is
+not owned by any other field managers, it is either deleted from the live
+object or reset to its default value, if it has one. The same rule applies to associative list or
+map items.
+
+Server side apply is meant both as a replacement for the original `kubectl
+apply` and as a simpler mechanism for controllers to enact their changes.
+-->
+如果你从配置中去除了一个字段并应用该配置，服务器端应用组件会检查是否有其他字段
+管理器也拥有该字段。如果该字段不再被任何其他字段管理器所拥有，则或者它会被
+从现时对象上删除，或者会被重置为其默认值（假设有的话）。
+同样的规则也适用于关联列表或映射条目。
+
+服务器端应用旨在成为原来的 `kubectl apply` 的替代技术，同时也作为控制器来
+施加其变更的一种更简单的机制。
+
+<!--
+### Field Management
+
+Compared to the `last-applied` annotation managed by `kubectl`, Server Side
+Apply uses a more declarative approach, which tracks a user's field management,
+rather than a user's last applied state. This means that as a side effect of
+using Server Side Apply, information about which field manager manages each
+field in an object also becomes available.
+
+For a user to manage a field, in the Server Side Apply sense, means that the
+user relies on and expects the value of the field not to change. The user who
+last made an assertion about the value of a field will be recorded as the
+current field manager. This can be done either by changing the value with
+`POST`, `PUT`, or non-apply `PATCH`, or by including the field in a config sent
+to the Server Side Apply endpoint. When using Server-Side Apply, trying to
+change a field which is managed by someone else will result in a rejected
+request (if not forced, see [Conflicts](#conflicts)).
+-->
+### 字段管理    {#field-management}
+
+与 `kubectl` 所管理的 `last-applied` 注解相比，服务器端应用机制使用的是一种
+更为贴近声明式管理的方法。该方法会跟踪用户的字段管理而不是其上一次应用的
+状态。这就意味着，作为服务器端应用的一种副作用，关于哪个字段管理器管理对象中
+哪个字段的信息也变得透明。
+
+从服务器端应用的角度，让用户来管理字段意味着用户可以相信并期望字段不会发生变更。
+上次对某字段取值做出断言的用户会被记录为当前的字段管理器。
+这一记录操作可以通过使用 `POST`、`PUT` 或非应用性（non-apply）的 `PATCH` 去
+更改字段值来实现，或者将字段包含在发送该服务器端应用末端的配置中来实现。
+当使用服务器端应用特性时，尝试更给由其他人所管理的字段会导致请求被拒绝
+（这里指非强制应用场景，参见[冲突](#conflicts)）。
+
+<!--
+When two or more appliers set a field to the same value, they share ownership of
+that field. Any subsequent attempt to change the value of the shared field, by any of
+the appliers, results in a conflict. Shared field owners may give up ownership
+of a field by removing it from their configuration.
+
+Field management is stored in a`managedFields` field that is part of an object's
+[`metadata`](/docs/reference/generated/kubernetes-api/{{< latest-version >}}/#objectmeta-v1-meta).
+
+A simple example of an object created by Server Side Apply could look like this:
+-->
+当两个或者多个施加者将某字段设置为相同的值，它们会共享字段的属主地位。
+由任何施加者所发起的、尝试变更共享字段取值的请求都会导致冲突。
+共享字段的属主可以通过将字段从其配置中去除来放弃其属主角色。
+
+字段管理信息保存在 `managedFields` 字段中，而该字段是对象
+[`metadata`](/docs/reference/generated/kubernetes-api/{{< latest-version >}}/#objectmeta-v1-meta)
+的一部分。
+
+通过服务器端应用创建的对象的一个简单例子看起来可能像这样：
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: test-cm
+  namespace: default
+  labels:
+    test-label: test
+  managedFields:
+  - manager: kubectl
+    operation: Apply
+    apiVersion: v1
+    time: "2010-10-10T0:00:00Z"
+    fieldsType: FieldsV1
+    fieldsV1:
+      f:metadata:
+        f:labels:
+          f:test-label: {}
+      f:data:
+        f:key: {}
+data:
+  key: some value
+```
+
+<!--
+The above object contains a single manager in `metadata.managedFields`. The
+manager consists of basic information about the managing entity itself, like
+operation type, api version, and the fields managed by it.
+
+This field is managed by the apiserver and should not be changed by
+the user.
+
+Nevertheless it is possible to change `metadata.managedFields` through an
+`Update` operation. Doing so is highly discouraged, but might be a reasonable
+option to try if, for example, the `managedFields` get into an inconsistent
+state (which clearly should not happen).
+
+The format of the `managedFields` is described in the [API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#fieldsv1-v1-meta).
+-->
+上面的对象在其 `metadata.managedFields` 中包含了唯一的管理器。管理器记录中
+包含了管理实体自身的一些基本信息，例如操作类型、API 版本以及所管理的字段。
+
+此字段由 API 服务器管理，因而不应被用户修改。
+
+尽管如此，通过 `Update` 操作来更改 `metadata.managedFields` 字段值还是可能的。
+这样做是非常不鼓励的，但在某些场合也可能是一种合理的选择。例如，`managedFields`
+陷入了某种不一致的状态（很明显这种事不应该发生）。
+
+`managedFields` 的格式在[API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#fieldsv1-v1-meta)
+中有详细描述。
+
+### 冲突    {#conflicts}
+
+<!--
+A conflict is a special status error that occurs when an `Apply` operation tries
+to change a field, which another user also claims to manage. This prevents an
+applier from unintentionally overwriting the value set by another user. When
+this occurs, the applier has 3 options to resolve the conflicts:
+-->
+冲突是一种特殊的状态错误，发生在某 `Apply` 操作尝试变更某字段，而另一个用户
+也声称要管理之的时候。冲突的检测可以避免某一施加者不小心覆盖另一个用户所设置
+的字段值。当发生冲突时，解决它的方法有三种：
+
+<!--
+* **Overwrite value, become sole manager:** If overwriting the value was
+  intentional (or if the applier is an automated process like a controller) the
+  applier should set the `force` query parameter to true and make the request
+  again. This forces the operation to succeed, changes the value of the field,
+  and removes the field from all other managers' entries in managedFields.
+
+* **Don't overwrite value, give up management claim:** If the applier doesn't
+  care about the value of the field anymore, they can remove it from their
+  config and make the request again. This leaves the value unchanged, and causes
+  the field to be removed from the applier's entry in managedFields.
+
+* **Don't overwrite value, become shared manager:** If the applier still cares
+  about the value of the field, but doesn't want to overwrite it, they can
+  change the value of the field in their config to match the value of the object
+  on the server, and make the request again. This leaves the value unchanged,
+  and causes the field's management to be shared by the applier and all other
+  field managers that already claimed to manage it.
+-->
+- **覆盖字段值，成为唯一的管理器：** 如果有意要覆盖字段值（或者施加者本身是
+  一个控制器这种自动化进程），施加者应该设置查询参数 `force` 为 `true，并
+  再次发出请求。这样做会强迫操作成功，更改字段值，将字段从 `managedFields`
+  中其他管理器项中去除。
+
+- **不重载字段值，放弃管理主张：** 如果施加者不再关心字段取值，它们可以将字段
+  从其配置中删除并再次发出请求。这样做会保留字段值不变，同时从 `managedFields`
+  中施加者条目中删除该字段。
+
+- **不重载字段值，成为共享管理器：** 如果施加者仍然关心字段取值，但不想重载
+  其当前值，它可以将其配置中该字段的值更改为与服务器端对象上的值匹配，并再次
+  发出请求。这样做会保留字段取值不变，同时使得字段的管理权力被施加者以及所有
+  原来声称要管理该字段的其他字段管理器一起分享。
+
+<!--
+### Managers
+
+Managers identify distinct workflows that are modifying the object (especially
+useful on conflicts!), and can be specified through the `fieldManager` query
+parameter as part of a modifying request. It is required for the apply endpoint,
+though kubectl will default it to `kubectl`. For other updates, its default is
+computed from the user-agent.
+-->
+### 管理器   {#managers}
+
+管理器标示更改对象的不同工作流（尤其是在有冲突的场合），可以作为更改对象的请求
+的一部分，在 `fieldManager` 查询参数中设定。该参数对于 Apply 操作的端点是必需
+的，尽管 `kubectl` 会将其默认设置为 `kubectl`。对于其他更新操作，其默认值是
+基于用户代理（User-agent）计算而来的。
+
+<!--
+### Apply and Update
+
+The two operation types considered by this feature are `Apply` (`PATCH` with
+content type `application/apply-patch+yaml`) and `Update` (all other operations
+which modify the object). Both operations update the `managedFields`, but behave
+a little differently.
+-->
+### 应用与更新    {#apply-and-update}
+
+服务器端应用所考虑的两种操作分别是 `Apply` （内容类型设置为
+`application/apply-patch+yaml` 的 `PATCH` 操作）和 `Update`（所有其他会更改
+对象的操作）。这两种操作都会更新 `managedFields` 字段值，但其行为略有不同。
+
+<!--
+Whether you are submitting JSON data or YAML data, use `application/apply-patch+yaml` as the
+Content-Type header value.
+
+All JSON documents are valid YAML.
+-->
+{{< note >}}
+无论你所提交的是 JSON 数据或者 YAML 数据，都应将 `Content-Type` 头部字段
+的值设置为 `application/apply-patch+yaml`。
+
+所有 JSON 文档也都是合法的 YAML 文档。
+{{< /note >}}
+
+<!--
+For instance, only the apply operation fails on conflicts while update does
+not. Also, apply operations are required to identify themselves by providing a
+`fieldManager` query parameter, while the query parameter is optional for update
+operations. Finally, when using the apply operation you cannot have `managedFields` in the object that is being applied.
+
+An example object with multiple managers could look like this:
+-->
+例如，发生冲突时只有 Apply 操作会失败，而 Update 操作不会失败。
+还有，Apply 操作要求通过提供一个 `fieldManager` 查询参数来标识自身，而
+对于 Update 操作而言，这一查询参数是可选的。
+最后，使用 Apply 操作时，被应用的对象中不能包含 `managedFields` 字段。
+
+带有多个管理器的一个对象示例可能看起来是这个样子：
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: test-cm
+  namespace: default
+  labels:
+    test-label: test
+  managedFields:
+  - manager: kubectl
+    operation: Apply
+    apiVersion: v1
+    fields:
+      f:metadata:
+        f:labels:
+          f:test-label: {}
+  - manager: kube-controller-manager
+    operation: Update
+    apiVersion: v1
+    time: '2019-03-30T16:00:00.000Z'
+    fields:
+      f:data:
+        f:key: {}
+data:
+  key: new value
+```
+
+<!--
+In this example, a second operation was run as an `Update` by the manager called
+`kube-controller-manager`. The update changed a value in the data field which
+caused the field's management to change to the `kube-controller-manager`.
+-->
+在此例中，第二个操作是由一个称作 `kube-controller-manager` 的管理器所发起的
+`Update` 执行的。该 Update 操作更改了 data 字段的值，导致该字段的管理者被更改
+为 `kube-controller-manager`。
+
+<!--
+If this update would have been an `Apply` operation, the operation
+would have failed due to conflicting ownership.
+-->
+{{< note >}}
+如果此操作是一个 Apply 操作，则操作可能已因为属主冲突而失败。
+{{< /note >}}
+
+<!--
+### Merge strategy
+
+The merging strategy, implemented with Server Side Apply, provides a generally
+more stable object lifecycle. Server Side Apply tries to merge fields based on
+the fact who manages them instead of overruling just based on values. This way
+it is intended to make it easier and more stable for multiple actors updating
+the same object by causing less unexpected interference.
+
+When a user sends a "fully-specified intent" object to the Server Side Apply
+endpoint, the server merges it with the live object favoring the value in the
+applied config if it is specified in both places. If the set of items present in
+the applied config is not a superset of the items applied by the same user last
+time, each missing item not managed by any other appliers is removed. For
+more information about how an object's schema is used to make decisions when
+merging, see
+[sigs.k8s.io/structured-merge-diff](https://sigs.k8s.io/structured-merge-diff).
+-->
+### 合并策略   {#merge-strategy}
+
+服务器端应用所实现的合并策略能够支持相对更为稳定的对象生命周期。
+服务器端应用机制尝试基于字段的管理器是谁来合并字段而不是仅仅基于字段取值来判断。
+这种机制旨在通过减少意外的干扰而将多个主体更新同一对象的操作变得更为简单和稳定。
+
+当用户发送一个“完全指定的意愿”对象到服务器端应用端点，如果字段值同时出现在现时
+对象中和所给的意愿对象中，服务器会优先选择应用配置中的字段值。
+如果应用的配置中存在的条目集合不是同一用户上次应用的条目集合的超集，所有未被其他
+施加者管理的、在应用的配置中缺失的条目都会被移除。
+关于如何使用对象的模式定义（Schema）来决定合并行为的更多信息，可参阅
+[sigs.k8s.io/structured-merge-diff](https://sigs.k8s.io/structured-merge-diff)。
+
+<!--
+A number of markers were added in Kubernetes 1.16 and 1.17, to allow API
+developers to describe the merge strategy supported by lists, maps, and
+structs. These markers can be applied to objects of the respective type,
+in Go files or in the [OpenAPI schema definition of the
+CRD](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io):
+-->
+Kubernetes 1.16 和 1.17 中都添加了若干的标志（Markers），便于 API 开发人员
+描述 list、map 和 struct 所支持的合并策略。这些标志可以应用到 Go 文件中
+对应类型的对象或者 [CRD 的 OpenAPI 模式定义](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io)：
+
+<!--
+| Golang marker | OpenAPI extension | Accepted values | Description | Introduced in |
+|----|----|----|----|----|
+| `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | Applicable to lists. `atomic` and `set` apply to lists with scalar elements only. `map` applies to lists of nested types only. If configured as `atomic`, the entire list is replaced during merge; a single manager manages the list as a whole at any one time. If `granular`, different managers can manage entries separately. | 1.16          |
+| `//+listMapKeys` | `x-kubernetes-list-map-keys` | Slice of map keys that uniquely identify entries for example `["port", "protocol"]` | Only applicable when `+listType=map`. A slice of strings whose values in combination must uniquely identify list entries. | 1.16 |
+| `//+mapType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to maps. `atomic` means that the map can only be entirely replaced by a single manager. `granular` means that the map supports separate managers updating individual fields. | 1.17 |
+| `//+structType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to structs; otherwise same usage and OpenAPI annotation as `//+mapType`.| 1.17 |
+-->
+| Golang 标志 | OpenAPI 扩展 | 可接受的值 | 描述 | 引入版本 |
+|---|---|---|---|---|
+| `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | 可应用到 list 类型。`atomic` 和 `set` 适用于仅包含标量的 list。`map` 适用于由内嵌类型组成的  list。如果配置为 `atomic`，则整个 list 会在合并时被替换掉；每次只会有一个管理器负责总体管理这个 list。如果配置为 `granular`，则不同的管理器可以分别管理不同的表项。 | 1.16  |
+| `//+listMapKeys` | `x-kubernetes-list-map-keys` | 由 map 主键构成的可唯一标识表项的切片，例如 `["port", "protocol"]` | 仅当标记了 `+listType=map` 时适用。切片中各个字符串对应的取值的组合必须能够唯一性地标识 list 中的表项。 | 1.16 |
+| `//+mapType` | `x-kubernetes-map-type` | `atomic`/`granular` | 适用于 map 类型。`atomic` 意味着 map 只能被某管理器整体替换。`granular` 则意味着 map 支持使用不同管理器来更新不同字段。 | 1.17 |
+| `//+structType` | `x-kubernetes-map-type` | `atomic`/`granular` | 适用于 struct 类型。除此以外，其用法和 OpenAPI 注解都与 `//+mapType` 相同。 | 1.17 |
+
+<!--
+### Custom Resources
+
+By default, Server Side Apply treats custom resources as unstructured data. All
+keys are treated the same as struct fields, and all lists are considered atomic.
+
+If the Custom Resource Definition defines a
+[schema](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io)
+that contains annotations as defined in the previous "Merge Strategy"
+section, these annotations will be used when merging objects of this
+type.
+-->
+### 定制资源  {#custom-resources}
+
+默认情况下，服务器端应用机制会将定制资源视为无结构的数据。其中所有键都会
+被视同 struct 的字段，而所有 list 都会被视为 atomic。
+
+如果定制资源定义（CRD）定义了包含如[合并策略](#merge-strategy)节所述的注解的
+[模式定义（Schema）](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io)，
+则在合并该类型对象时会使用到这些注解。
+
+<!--
+### Using Server-Side Apply in a controller
+
+As a developer of a controller, you can use server-side apply as a way to
+simplify the update logic of your controller. The main differences with a
+read-modify-write and/or patch are the following:
+
+* the applied object must contain all the fields that the controller cares about.
+* there are no way to remove fields that haven't been applied by the controller
+  before (controller can still send a PATCH/UPDATE for these use-cases).
+* the object doesn't have to be read beforehand, `resourceVersion` doesn't have
+  to be specified.
+
+It is strongly recommended for controllers to always "force" conflicts, since they
+might not be able to resolve or act on these conflicts.
+-->
+### 在控制器中使用服务器端应用机制  {#using-server-side-apply-in-a-controller}
+
+作为控制器的开发人员，你可以将服务器端应用机制作为一种方法来简化你的控制器中的更新逻辑。
+与“读出-更改-写回”或“读出-更改-打补丁”方式相比，区别如下：
+
+* 所应用的对象必需包含控制器所关心的所有字段；
+* 没有办法移除控制器之前未曾应用过的字段（控制器在这些使用场景中仍然可以发送一个
+  PATCH/UPDATE 请求）。
+* 对象不需要事先读出，且不必指定 `resourceVersion` 值。
+
+强烈建议控制器总是“强制解决”冲突，因为它们可能无法更好地解决或者处理这些冲突。
+
+<!--
+### Transferring Ownership
+
+In addition to the concurrency controls provided by [conflict
+resolution](#conflicts), Server Side Apply provides ways to perform coordinated
+field ownership transfers from users to controllers.
+
+This is best explained by example. Let's look at how to safely transfer
+ownership of the `replicas` field from a user to a controller while enabling
+automatic horizontal scaling for a Deployment, using the HorizontalPodAutoscaler
+resource and its accompanying controller.
+
+Say a user has defined deployment with `replicas` set to the desired value:
+-->
+### 转移属主关系   {#transferring-ownership}
+
+除了[冲突解决](#conflicts)机制所提供的并发控制外，服务器端应用机制还提供了一些
+方法，通过协作式途径将字段属主从用户转移到控制器。
+
+这一转移操作最好通过示例来阐明。我们来看如何安全地将 `replicas` 字段的属主从
+一个用户转移给一个控制器，同时允许使用 HorizontalPodAutoscaler 资源及其相配套
+的控制器为 Deployment 提供自动的水平扩缩。
+
+假定一个用户定义了一个 Deployment，并将其 `replicas` 设置为其期望值：
+
+{{< codenew file="application/ssa/nginx-deployment.yaml" >}}
+
+<!--
+And the user has created the deployment using server side apply like so:
+-->
+用户使用服务器端应用机制创建了 Deployment：
+
+```shell
+kubectl apply -f application/ssa/nginx-deployment.yaml --server-side
+```
+
+<!--
+Then later, HPA is enabled for the deployment, e.g.:
+-->
+再接下来，为 Deployment 启用了 HPA，例如：
+
+```shell
+kubectl autoscale deployment nginx-deployment --cpu-percent=50 --min=1 --max=10
+```
+
+<!--
+Now, the user would like to remove `replicas` from their configuration, so they
+don't accidentally fight with the HPA controller. However, there is a race: it
+might take some time before HPA feels the need to adjust `replicas`, and if
+the user removes `replicas` before the HPA writes to the field and becomes
+its owner, then apiserver will set `replicas` to 1, its default value. This
+is not what the user wants to happen, even temporarily.
+-->
+现在，用户希望将 `replicas` 从其配置中移除，这样它们就不会与 HPA
+控制器产生冲突。不过，仍然会有竞争条件出现：在 HPA 觉得需要调整 `replicas`
+之前可能还有一段时间。如果用户在向 `replicas` 字段写入新值进而成为其属主之前，
+已经从配置中移除了该字段，则 API 服务器会将 `replicas` 设置为 1，也就是该字段
+的默认值。这一复位操作并非用户希望发生的事情，即使是临时性的复位也不可以。
+
+<!--
+There are two solutions:
+
+- (easy) Leave `replicas` in the configuration; when HPA eventually writes to that
+  field, the system gives the user a conflict over it. At that point, it is safe
+  to remove from the configuration.
+
+- (more advanced) If, however, the user doesn't want to wait, for example
+  because they want to keep the cluster legible to coworkers, then they can take
+  the following steps to make it safe to remove `replicas` from their
+  configuration:
+-->
+解决方案有两种：
+
+- （较容易的方案）在配置中保留 `replicas`，当 HPA 终于向该字段中写入取值时，
+  系统会向用户报告一个冲突事件。在这一刻，从配置中移除该字段是相对安全的。
+
+- （更高级的方案）如果用户不想等待 HPA 写入字段值的事件，例如他们希望集群状态对
+  他们的同事而言也是清晰明确的，则他们可以采取以下步骤安全地从他们的配置中移除
+  `replicas` 字段。
+
+<!--
+First, the user defines a new configuration containing only the `replicas` field:
+-->
+首先，用户定义一个新的，仅包含 `replicas` 字段的配置：
+
+{{< codenew file="application/ssa/nginx-deployment-replicas-only.yaml" >}}
+
+<!--
+The user applies that configuration using the field manager name `handover-to-hpa`:
+-->
+接下来使用名为 `handover-to-hpa` 的字段管理器应用该配置：
+
+```shell
+kubectl apply -f application/ssa/nginx-deployment-replicas-only.yaml --server-side --field-manager=handover-to-hpa --validate=false
+```
+
+<!--
+If the apply results in a conflict with the HPA controller, then do nothing. The
+conflict just indicates the controller has claimed the field earlier in the
+process than it sometimes does.
+
+At this point the user may remove the `replicas` field from their configuration.
+-->
+如果应用操作与 HPA 控制器发生冲突，则什么也不做。冲突恰好表明控制器比平时早了
+一点发出对该字段的主张：
+
+这时，用户可以从其配置中删除 `replicas` 字段。
+
+{{< codenew file="application/ssa/nginx-deployment-no-replicas.yaml" >}}
+
+<!--
+Note that whenever the HPA controller sets the `replicas` field to a new value,
+the temporary field manager will no longer own any fields and will be
+automatically deleted. No clean up is required.
+-->
+注意，无论 HPA 控制器何时将 `replicas` 字段设置为新的取值，临时性的字段管理器
+都不再拥有任何字段，并且会被自动删除。用户不需要执行清理操作。
+
+<!--
+### Transferring Ownership Between Users
+
+Users can transfer ownership of a field between each other by setting the field
+to the same value in both of their applied configs, causing them to share
+ownership of the field. Once the users share ownership of the field, one of them
+can remove the field from their applied configuration to give up ownership and
+complete the transfer to the other user.
+-->
+### 在用户间移交属主角色     {#transferring-ownership-between-users}
+
+用户之间可以通过在他们所应用的配置中将字段设置为相同的值来转移字段属主关系，
+这样做会共享对字段的拥有权。一旦用户间共享了字段的属主关系，其中一个用户就
+可以从其所应用的配置中移除该字段，放弃属主角色，从而完成了属主关系的移交。
+
+<!--
+### Comparison with Client Side Apply
+
+A consequence of the conflict detection and resolution implemented by Server
+Side Apply is that an applier always has up to date field values in their local
+state. If they don't, they get a conflict the next time they apply. Any of the
+three options to resolve conflicts results in the applied configuration being an
+up to date subset of the object on the server's fields.
+
+This is different from Client Side Apply, where outdated values which have been
+overwritten by other users are left in an applier's local config. These values
+only become accurate when the user updates that specific field, if ever, and an
+applier has no way of knowing whether their next apply will overwrite other
+users' changes.
+
+Another difference is that an applier using Client Side Apply is unable to
+change the API version they are using, but Server Side Apply supports this use
+case.
+-->
+### 与客户端应用的比较   {#comparison-with-client-side-apply}
+
+服务器端应用机制所实现的冲突检测和解决方案的后果之一是施加者在其本地状态中总是
+能够看到最新的字段值。如果他们看不到，则在下次执行 Apply 操作时会收到冲突事件。
+解决冲突的三种方法中，任何一种都会让所应用的配置成为服务器端对象字段的最新
+子集。
+
+这点与客户端应用不同，施加者本地配置中保留的可能是已经被其他用户更改过了的过时
+的取值。只有用户更新该字段时，相应的字段值才会变得准确。施加者也无法知道他们
+下次执行 Apply 操作时是否会重载其他用户做出的变更。
+
+另外一点区别在于使用客户端应用的施加者无法更改他们所使用的 API
+版本，但是服务器端应用能够支持这种使用场景。
+
+<!--
+### Upgrading from client-side apply to server-side apply
+
+Client-side apply users who manage a resource with `kubectl apply` can start
+using server-side apply with the following flag.
+-->
+### 从客户端应用升级到服务器端应用   {#upgrading-from-client-side-apply-to-server-side-apply}
+
+客户端应用机制的用户如果在使用 `kubectl apply` 来管理资源，可以使用下面的标志
+来开始使用服务器端应用：
+
+```shell
+kubectl apply --server-side [--dry-run=server]
+```
+
+<!--
+By default, field management of the object transfers from client-side apply
+to kubectl server-side apply without encountering conflicts.
+-->
+默认情况下，对象的字段管理会从客户端应用转移到 kubectl
+服务器端应用，且不会出现冲突状况。
+
+<!--
+Keep the `last-applied-configuration` annotation up to date. The annotation infers client-side apply's managed fields. Any fields not managed by client-side apply raise conflicts.
+
+For example, if you used `kubectl scale` to update the replicas field after client-side apply,
+then this field is not owned by client-side apply and creates conflicts on `kubectl apply -server-side`.
+-->
+{{< caution >}}
+请保持 `last-applied-configuration` 注解内容是最新的。该注解用来推测客户端
+应用所管理的字段。所有没有被客户端应用管理的字段都会引发冲突。
+
+例如，如果你在客户端应用操作后使用 `kubectl scale` 命令更新了 `replicas`
+字段，该字段不再由客户端应用所拥有，在 `kubectl apply --server-side` 时会
+引发冲突。
+{{< /caution >}}
+
+<!--
+This behavior applies to server-side apply with the `kubectl` field manager. As
+an exception, you can opt-out of this behavior by specifying a different,
+non-default field manager, as seen in the following example. The default field manager for kubectl
+server-side apply is `kubectl`.
+-->
+此行为适用于使用 `kubectl` 字段管理器执行的服务器端应用。
+作为一种例外情况，你也可以选择不采用这种行为，而是像下面的例子中所给的那样，
+指定一个不同的、非默认的字段管理器。用 `kubectl` 来执行服务器端应用时，默认
+的字段管理器总是 `kubectl`。
+
+```shell
+kubectl apply --server-side --field-manager=my-manager [--dry-run=server]
+```
+
+<!--
+### Downgrading from server-side apply to client-side apply
+
+If you manage a resource with `kubectl apply -server-side`,
+you can downgrade to client-side apply directly with `kubectl apply`.
+
+Downgrading works because kubectl server-side apply keeps the
+`last-applied-configuration` annotation up-to-date if you use
+`kubectl apply`.
+
+This behavior applies to server-side apply with the `kubectl` field manager. As
+an exception, you can opt-out of this behavior by specifying a different,
+non-default field manager, as seen in the following example. The default field manager for kubectl
+server-side apply is `kubectl`.
+-->
+### 从服务器端应用降格为客户端应用   {#downgrading-from-server-side-apply-to-client-side-apply}
+
+如果你使用 `kubectl apply --server-side` 来管理资源，你可以直接使用
+`kubectl apply` 来降格到客户端应用机制。
+
+降格操作之所以能够有效是因为 kubectl 服务器端应用在你使用 `kubectl apply`
+时会保持 `last-applied-configuration` 注解内容一直是最新的。
+
+这一行为适用于使用 `kubectl` 字段管理器执行的服务器端应用。
+作为一种例外情况，你也可以选择不采用这种默认行为，而像下面例子中所展示的
+那样，设置一个不同的、非默认的字段管理器。`kubectl` 所触发的服务器端应用
+默认会将字段管理器设置为 `kubectl`。
+
+```shell
+kubectl apply --server-side --field-manager=my-manager [--dry-run=server]
+```
+
+<!--
+### API Endpoint
+
+With the Server Side Apply feature enabled, the `PATCH` endpoint accepts the
+additional `application/apply-patch+yaml` content type. Users of Server Side
+Apply can send partially specified objects as YAML to this endpoint.
+When applying a configuration, one should always include all the fields
+that they have an opinion about.
+-->
+### API 端点    {#api-endpoint}
+
+启用了服务器端应用功能特性之后，`PATCH` 操作的端点能够接受
+`application/apply-patch+yaml` 内容类型。
+服务器端应用机制的用户可以以 YAML 格式将部分设定的对象发送到该端点。
+在应用配置时，用户应该包含希望设置的所有字段在内。
+
+<!--
+### Clearing ManagedFields
+
+It is possible to strip all managedFields from an object by overwriting them
+using `MergePatch`, `StrategicMergePatch`, `JSONPatch` or `Update`, so every
+non-apply operation. This can be done by overwriting the managedFields field
+with an empty entry. Two examples are:
+-->
+### 清除 `managedFields`  {#clearing-managedfields}
+
+通过 `MergePatch`、`StrategicMergePatch`、`JSONPatch` 或 `Update` 等非 Apply
+操作是可以清除对象上的所有 `managedFields` 内容的。通过这些操作，用户可以将
+`managedFields` 字段重新设置为空的列表。
+下面是两个例子：
+
+
+```console
+PATCH /api/v1/namespaces/default/configmaps/example-cm
+Content-Type: application/merge-patch+json
+Accept: application/json
+
+Data: {"metadata":{"managedFields": [{}]}}
+```
+
+```console
+PATCH /api/v1/namespaces/default/configmaps/example-cm
+Content-Type: application/json-patch+json
+Accept: application/json
+
+Data: [{"op": "replace", "path": "/metadata/managedFields", "value": [{}]}]
+```
+
+<!--
+This will overwrite the managedFields with a list containing a single empty
+entry that then results in the managedFields being stripped entirely from the
+object. Note that just setting the managedFields to an empty list will not reset
+the field. This is on purpose, so managedFields never get stripped by clients
+not aware of the field.
+
+In cases where the reset operation is combined with changes to other fields than
+the managedFields, this will result in the managedFields being reset first and
+the other changes being processed afterwards. As a result the applier takes
+ownership of any fields updated in the same request.
+-->
+上面的操作会覆盖 `managedFields` 字段取值，使之成为一个只有一个空表项的列表，
+进而使得 `managedFields` 整个会被充对象上剥离。
+注意，仅仅将 `managedFields` 设为空列表还不足以将字段取值复位。
+这样的设计是有意为之的，目的是避免 `managedFields` 字段被不了解该字段的客户端
+意外清除。
+
+如果此复位操作和对 `managedFields` 字段之外的其它字段的变更一起提交，则
+`managedFields` 的内容会首先被重置，之后才会处理其他字段变更。因此，施加者会
+成为同一请求中被更新的字段的属主。
+
+<!--
+Server Side Apply does not correctly track ownership on
+sub-resources that don't receive the resource object type. If you are
+using Server Side Apply with such a sub-resource, the changed fields
+won't be tracked.
+-->
+{{< caution >}}
+服务器端应用机制无法正确地跟踪某些子资源的属主，如果这些子资源不能接收资源
+对象类型数据的话。如果你针对这类子资源使用服务器端应用机制，则所变更的字段
+不会被跟踪记录。
+{{< /caution >}}
+
+<!--
+### Disabling the feature
+
+Server Side Apply is a beta feature, so it is enabled by default. To turn this
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates) off,
+you need to include the `-feature-gates ServerSideApply=false` flag when
+starting `kube-apiserver`. If you have multiple `kube-apiserver` replicas, all
+should have the same flag setting.
+-->
+### 禁用此功能特性    {#disabling-the-feature}
+
+服务器端应用是一种 Beta 阶段的特性，因此默认是被启用的。如要将此
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates)关闭，
+你需要在启动 `kube-apiserver` 时包含 `--feature-gates ServerSideApply=false`
+标志。如果你运行了多个 `kube-apiserver`
+副本，则每个副本上都要作同样的标志设置。
+
+<!--
+## Resource Versions
+
+Resource versions are strings that identify the server's internal version of an object. Resource versions can be used by clients to determine when objects have changed, or to express data consistency requirements when getting, listing and watching resources. Resource versions must be treated as opaque by clients and passed unmodified back to the server. For example, clients must not assume resource versions are numeric, and may only compare two resource version for equality (i.e. must not compare resource versions for greater-than or less-than relationships).
+-->
+## 资源版本   {#resource-versions}
+
+资源版本采用字符串来表达，用来标示对象的服务器端内部版本。
+客户端可以使用资源版本来判定对象是否被更改，或者在读取、列举或监视资源时
+用来表达数据一致性需求。
+客户端必需将资源版本视为不透明的对象，将其原封不动地传递回服务器端。
+例如，客户端一定不能假定资源版本是某种数值标识，也不可以对两个资源版本值
+进行比较看其是否相同（也就是不可以比较两个版本值以判断其中一个比另一个
+大或小）。
+
+<!--
+### ResourceVersion in metadata
+
+Clients find resource versions in resources, including the resources in watch events, and list responses returned from the server:
+
+[v1.meta/ObjectMeta](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#objectmeta-v1-meta) - The `metadata.resourceVersion` of a resource instance identifies the resource version the instance was last modified at.
+
+[v1.meta/ListMeta](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#listmeta-v1-meta) - The `metadata.resourceVersion` of a resource collection (i.e. a list response) identifies the resource version at which the list response was constructed.
+-->
+### `metadata` 中的 `resourceVersion`
+
+客户端可以在资源中看到资源版本信息，这里的资源包括从服务器返回的 Watch 事件
+以及 list 操作响应：
+
+[v1.meta/ObjectMeta](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#objectmeta-v1-meta) - 资源
+的 `metadata.resourceVersion` 值标明该实例上次被更改时的资源版本。
+
+[v1.meta/ListMeta](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#listmeta-v1-meta) - 资源集合
+（即 list 操作的响应）的 `metadata.resourceVersion` 所标明的是 list 响应被构造
+时的资源版本。
+
+<!--
+### The ResourceVersion Parameter
+
+The get, list and watch operations support the `resourceVersion` parameter.
+
+The exact meaning of this parameter differs depending on the operation and the value of `resourceVersion`.
+
+For get and list, the semantics of resource version are:
+
+**Get:**
+-->
+### `resourceVersion` 参数   {#the-resourceversion-parameter}
+
+GET、LIST 和 WATCH 操作都支持 `resourceVersion` 参数。
+
+参数的具体含义取决于所执行的操作和所给的 `resourceVersion` 值：
+
+对于 GET 和 LIST 而言，资源版本的语义为：
+
+**GET：**
+
+<!--
+| resourceVersion unset | resourceVersion="0" | resourceVersion="{value other than 0}" |
+|------------------------|---------------------|----------------------------------------|
+| Most Recent           | Any                 | Not older than                         |
+-->
+| resourceVersion 未设置 | resourceVersion="0" | resourceVersion="\<非零值\>" |
+|------------------------|---------------------|----------------------------------------|
+| 最新版本               | 任何版本            | 不老于给定版本                         |
+
+
+**LIST：**
+
+<!--
+v1.19+ API servers and newer support the `resourceVersionMatch` parameter, which
+determines how resourceVersion is applied to list calls.  It is highly
+recommended that `resourceVersionMatch` be set for list calls where
+`resourceVersion` is set. If `resourceVersion` is unset, `resourceVersionMatch`
+is not allowed.  For backward compatibility, clients must tolerate the server
+ignoring `resourceVersionMatch`:
+-->
+v1.19 及以上版本的 API 服务器支持 `resourceVersionMatch` 参数，用以确定如何对
+LIST 调用应用 resourceVersion 值。
+强烈建议在为 LIST 调用设置了 `resourceVersion` 时也设置 `resourceVersionMatch`。
+如果 `resourceVersion` 未设置，则 `resourceVersionMatch` 是不允许设置的。
+为了向后兼容，客户端必须能够容忍服务器在某些场景下忽略 `resourceVersionMatch` 的行为：
+
+<!--
+- When using `resourceVersionMatch=NotOlderThan` and limit is set, clients must
+  handle HTTP 410 "Gone" responses. For example, the client might retry with a
+  newer `resourceVersion` or fall back to `resourceVersion=""`.
+
+- When using `resourceVersionMatch=Exact` and `limit` is unset, clients must
+  verify that the `resourceVersion` in the `ListMeta` of the response matches
+  the requested `resourceVersion`, and handle the case where it does not. For
+  example, the client might fall back to a request with `limit` set.
+-->
+- 当设置 `resourceVersionMatch=NotOlderThan` 且指定了 `limit` 时，客户端必须能够
+  处理 HTTP 410 "Gone" 响应。例如，客户端可以使用更新一点的 `resourceVersion`
+  来重试，或者回退到 `resourceVersion=""` （即允许返回任何版本）。
+
+- 当设置了 `resourceVersionMatch=Exact` 且未指定 `limit` 时，客户端必须验证
+  响应数据中 `ListMeta` 的 `resourceVersion` 与所请求的 `resourceVersion` 匹配，
+  并处理二者可能不匹配的情况。例如，客户端可以重试设置了 `limit` 的请求。
+
+<!--
+Unless you have strong consistency requirements, using `resourceVersionMatch=NotOlderThan` and
+a known `resourceVersion` is preferable since it can achieve better performance and scalability
+of your cluster than leaving `resourceVersion` and `resourceVersionMatch` unset, which requires
+quorum read to be served.
+-->
+除非你对一致性有着非常强烈的需求，使用 `resourceVersionMatch=NotOlderThan`
+同时为 `resourceVersion` 设定一个已知值是优选的交互方式，因为与不设置
+`resourceVersion` 和 `resourceVersionMatch` 相比，这种配置可以取得更好的
+集群性能和可扩缩性。后者需要提供带票选能力的读操作。
+
+<!--
+| resourceVersionMatch param              | paging params                  | resourceVersion unset  | resourceVersion="0"                        | resourceVersion="{value other than 0}" |
+|-----------------------------------------|--------------------------------|------------------------|--------------------------------------------|----------------------------------------|
+| resourceVersionMatch unset              | limit unset                    | Most Recent            | Any                                        | Not older than                         |
+| resourceVersionMatch unset              | limit="n", continue unset      | Most Recent            | Any                                        | Exact                                  |
+| resourceVersionMatch unset              | limit="n", continue="<token>"  | Continue Token, Exact  | Invalid, treated as Continue Token, Exact  | Invalid, HTTP `400 Bad Request`        |
+| resourceVersionMatch=Exact<sup>\*</sup> | limit unset                    | Invalid                | Invalid                                    | Exact                                  |
+| resourceVersionMatch=Exact<sup>\*</sup> | limit="n", continue unset      | Invalid                | Invalid                                    | Exact                                  |
+| resourceVersionMatch=NotOlderThan<sup>\*</sup> | limit unset               | Invalid              | Any                                        | Not older than                         |
+| resourceVersionMatch=NotOlderThan<sup>\*</sup> | limit="n", continue unset | Invalid              | Any                                        | Not older than                         |
+
+<br/>
+<small>
+
+**Footnotes:**
+
+\* If the server does not honor the `resourceVersionMatch` parameter, it is treated as if it is unset.
+</small>
+-->
+| resourceVersionMatch 参数               | 分页参数                        | resourceVersion 未设置  | resourceVersion="0"                     | resourceVersion="\<非零值\>"     |
+|-----------------------------------------|---------------------------------|-------------------------|-----------------------------------------|----------------------------------|
+| resourceVersionMatch 未设置             | limit 未设置                    | 最新版本                | 任意版本                                | 不老于指定版本                   |
+| resourceVersionMatch 未设置             | limit=n, continue 未设置        | 最新版本                | 任意版本                                | 精确匹配                         |
+| resourceVersionMatch 未设置             | limit=n, continue=\<token\>     | Continue 令牌、精确匹配 | 非法请求，视为 Continue 令牌、精确匹配  | 非法请求，HTTP `400 Bad Request` |
+| resourceVersionMatch=Exact<sup>\*</sup> | limit 未设置                    | 非法请求                | 非法请求                                | 精确匹配                         |
+| resourceVersionMatch=Exact<sup>\*</sup> | limit=n, continue 未设置        | 非法请求                | 非法请求                                | 精确匹配                         |
+| resourceVersionMatch=NotOlderThan<sup>\*</sup> | limit 未设置             | 非法请求                | 任意版本                                | 不老于指定版本                   |
+| resourceVersionMatch=NotOlderThan<sup>\*</sup> | limit=n, continue 未设置 | 非法请求                | 任意版本                                | 不老于指定版本                   |
+
+<br />
+<small>
+
+**脚注：**
+
+\* 如果服务器无法正确处理 `resourceVersionMatch` 参数，其行为与未设置该参数相同。
+</small>
+
+<!--
+The meaning of the get and list semantics are:
+
+- **Most Recent:** Return data at the most recent resource version. The returned data must be
+  consistent (i.e. served from etcd via a quorum read).
+- **Any:** Return data at any resource version. The newest available resource version is preferred,
+  but strong consistency is not required; data at any resource version may be served. It is possible
+  for the request to return data at a much older resource version that the client has previously
+  observed, particularly in high availabiliy configurations, due to partitions or stale
+  caches. Clients that cannot tolerate this should not use this semantic.
+-->
+GET 和 LIST 操作的语义含义如下：
+
+- **最新版本：** 返回资源版本为最新的数据。所返回的数据必须一致
+  （通过票选读操作从 etcd 中取出）。
+- **任意版本：** 返回任意资源版本的数据。优选最新可用的资源版本，不过不能保证
+  强一致性；返回的数据可能是任何资源版本的。请求返回的数据有可能是客户端以前
+  看到过的很老的资源版本。尤其在某些高可用配置环境中，网络分区或者高速缓存
+  未被更新等状态都可能导致这种状况。不能容忍这种不一致性的客户端不应采用此
+  语义。
+<!--
+- **Not older than:** Return data at least as new as the provided resourceVersion. The newest
+  available data is preferred, but any data not older than the provided resourceVersion may be
+  served.  For list requests to servers that honor the resourceVersionMatch parameter, this
+  guarantees that resourceVersion in the ListMeta is not older than the requested resourceVersion,
+  but does not make any guarantee about the resourceVersion in the ObjectMeta of the list items
+  since ObjectMeta.resourceVersion tracks when an object was last updated, not how up-to-date the
+  object is when served.
+- **Exact:** Return data at the exact resource version provided. If the provided resourceVersion is
+  unavailable, the server responds with HTTP 410 "Gone".  For list requests to servers that honor the
+  resourceVersionMatch parameter, this guarantees that resourceVersion in the ListMeta is the same as
+  the requested resourceVersion, but does not make any guarantee about the resourceVersion in the
+  ObjectMeta of the list items since ObjectMeta.resourceVersion tracks when an object was last
+  updated, not how up-to-date the object is when served.
+- **Continue Token, Exact:** Return data at the resource version of the initial paginated list
+  call. The returned Continue Tokens are responsible for keeping track of the initially provided
+  resource version for all paginated list calls after the initial paginated list call.
+-->
+- **不老于指定版本：** 返回至少比所提供的 `resourceVersion` 还要新的数据。
+  优选最新的可用数据，不过最终提供的可能是不老于所给 `resourceVersion` 的任何版本。
+  对于发给能够正确处理 `resourceVersionMatch` 参数的服务器的 LIST 请求，此语义
+  保证 `ListMeta` 中的 `resourceVersion` 不老于请求的 `resourceVersion`，不过
+  不对列表条目之 `ObjectMeta` 的 `resourceVersion` 提供任何保证。
+  这是因为 `ObjectMeta.resourceVersion` 所跟踪的是列表条目对象上次更新的时间，
+  而不是对象被返回时是否是最新。
+
+- **确定版本：** 返回精确匹配所给资源版本的数据。如果所指定的 resourceVersion
+  的数据不可用，服务器会响应 HTTP 410 "Gone"。
+  对于发送给能够正确处理 `resourceVersionMatch` 参数的服务器的 LIST 请求而言，
+  此语义会保证 ListMeta 中的 `resourceVersion` 与所请求的 `resourceVersion`
+  匹配， 不过不对列表条目之 `ObjectMeta` 的 `resourceVersion` 提供任何保证。
+  这是因为 `ObjectMeta.resourceVersion` 所跟踪的是列表条目对象上次更新的时间，
+  而不是对象被返回时是否是最新。
+
+- **Continue 令牌、精确匹配：** 返回原先带分页参数的 LIST 调用中指定的资源版本的数据。
+  在最初的带分页参数的 LIST 调用之后，所有分页式的 LIST 调用都使用所返回的 Continue
+  令牌来跟踪最初提供的资源版本，
+
+<!--
+For watch, the semantics of resource version are:
+-->
+对于 WATCH 操作而言，资源版本的语义如下：
+
+**WATCH：**
+
+<!--
+| resourceVersion unset               | resourceVersion="0"        | resourceVersion="{value other than 0}" |
+|-------------------------------------|----------------------------|----------------------------------------|
+| Get State and Start at Most Recent  | Get State and Start at Any | Start at Exact                         |
+-->
+| resourceVersion 未设置    | resourceVersion="0"      | resourceVersion="\<非零值\>" |
+|---------------------------|--------------------------|------------------------------|
+| 读取状态并从最新版本开始  | 读取状态并从任意版本开始 | 从指定版本开始               |
+
+<!--
+The meaning of the watch semantics are:
+
+- **Get State and Start at Most Recent:** Start a watch at the most recent
+  resource version, which must be consistent (i.e. served from etcd via a
+  quorum read). To establish initial state, the watch begins with synthetic
+  "Added" events of all resources instances that exist at the starting resource
+  version. All following watch events are for all changes that occurred after
+  the resource version the watch started at.
+-->
+WATCH 操作语义的含义如下：
+
+- **读取状态并从最新版本开始：** 从最新的资源版本开始 WATCH 操作。这里的
+  最新版本必须是一致的（即通过票选读操作从 etcd 中取出）。为了建立初始状态，
+  WATCH 首先会处理一组合成的 "Added" 事件，这些事件涵盖在初始资源版本中存在
+  的所有资源实例。
+  所有后续的 WATCH 事件都是关于 WATCH 开始时所处资源版本之后发生的变更。
+
+<!--
+- **Get State and Start at Any:** Warning: Watches initialize this way may
+  return arbitrarily stale data! Please review this semantic before using it,
+  and favor the other semantics where possible. Start a watch at any resource
+  version, the most recent resource version available is preferred, but not
+  required; any starting resource version is allowed. It is possible for the
+  watch to start at a much older resource version that the client has previously
+  observed, particularly in high availability configurations, due to partitions
+  or stale caches. Clients that cannot tolerate this should not start a watch
+  with this semantic. To establish initial state, the watch begins with
+  synthetic "Added" events for all resources instances that exist at the
+  starting resource version. All following watch events are for all changes that
+  occurred after the resource version the watch started at.
+-->
+- **读取状态并从任意版本开始：** 警告：通过这种方式初始化的 WATCH 操作可能会
+  返回任何状态的停滞数据。请在使用此语义之前执行复核，并在可能的情况下采用其他
+  语义。此语义会从任意资源版本开始执行 WATCH 操作，优选最新的可用的资源版本，
+  不过不是必须的；采用任何资源版本作为起始版本都是被允许的。
+  WATCH 操作有可能起始于客户端已经观测到的很老的版本。在高可用配置环境中，因为
+  网络分裂或者高速缓存未及时更新的原因都会造成此现象。
+  如果客户端不能容忍这种不一致性，就不要使用此语义来启动 WATCH 操作。
+  为了建立初始状态，WATCH 首先会处理一组合成的 "Added" 事件，这些事件涵盖在
+  初始资源版本中存在的所有资源实例。
+  所有后续的 WATCH 事件都是关于 WATCH 开始时所处资源版本之后发生的变更。
+
+<!--
+- **Start at Exact:** Start a watch at an exact resource version. The watch
+  events are for all changes after the provided resource version. Unlike "Get
+  State and Start at Most Recent" and "Get State and Start at Any", the watch is
+  not started with synthetic "Added" events for the provided resource version.
+  The client is assumed to already have the initial state at the starting
+  resource version since the client provided the resource version.
+-->
+- **从指定版本开始：** 从某确切资源版本开始执行 WATCH 操作。WATCH 事件都是
+  关于 WATCH 开始时所处资源版本之后发生的变更。与前面两种语义不同，WATCH 操作
+  开始的时候不会生成或处理为所提供资源版本合成的 "Added" 事件。
+  我们假定客户端既然能够提供确切资源版本，就应该已经拥有了起始资源版本对应的初始状态。
+
+<!--
+### "410 Gone" responses
+
+Servers are not required to serve all older resource versions and may return a
+HTTP `410 (Gone)` status code if a client requests a resourceVersion older
+than the server has retained. Clients must be able to tolerate `410 (Gone)`
+responses. See [Efficient detection of
+changes](#efficient-detection-of-changes) for details on how to handle `410
+(Gone)` responses when watching resources.
+
+If you request a a resourceVersion outside the applicable limit then,
+depending on whether a request is served from cache or not, the API server may
+reply with a `410 Gone` HTTP response.
+-->
+### "410 Gone" 响应     {#410-gone-responses}
+
+服务器不需要提供所有老的资源版本，在客户端请求的是早于服务器端所保留版本的
+`resourceVersion` 时，可以返回 HTTP `410 (Gone)` 状态码。
+客户端必须能够容忍 `410 (Gone)` 响应。
+参阅[高效检测变更](#efficient-detection-of-changes)以了解如何在监测资源时
+处理 `410 (Gone)` 响应。
+
+如果所请求的 `resourceVersion` 超出了可应用的 `limit`，那么取决于请求是否
+是通过高速缓存来满足的，API 服务器可能会返回一个 `410 Gone` HTTP 响应。
+
+<!--
+### Unavailable resource versions
+
+Servers are not required to serve unrecognized resource versions. List and Get requests for unrecognized resource versions may wait briefly for the resource version to become available, should timeout with a `504 (Gateway Timeout)` if the provided resource versions does not become available in a resonable amount of time, and may respond with a `Retry-After` response header indicating how many seconds a client should wait before retrying the request. Currently the kube-apiserver also identifies these responses with a "Too large resource version" message. Watch requests for a unrecognized resource version may wait indefinitely (until the request timeout) for the resource version to become available.
+-->
+### 不可用的资源版本  {#unavailable-resource-versions}
+
+服务器不必未无法识别的资源版本提供服务。针对无法识别的资源版本的 LIST 和 GET 请求
+可能会短暂等待，以期资源版本可用。如果所给的资源版本在一定的时间段内仍未变得
+可用，服务器应该超时并返回 `504 (Gateway Timeout)`，且可在响应中添加
+`Retry-After` 响应头部字段，标明客户端在再次尝试之前应该等待多少秒钟。
+目前，`kube-apiserver` 也能使用 `Too large resource version（资源版本过高）`
+消息来标识这类响应。针对某无法识别的资源版本的 WATCH 操作可能会无限期
+（直到请求超时）地等待下去，直到资源版本可用。
+
diff --git a/content/zh/examples/application/ssa/nginx-deployment-no-replicas.yaml b/content/zh/examples/application/ssa/nginx-deployment-no-replicas.yaml
new file mode 100644
index 0000000000..c18bdd35c0
--- /dev/null
+++ b/content/zh/examples/application/ssa/nginx-deployment-no-replicas.yaml
@@ -0,0 +1,18 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+  labels:
+    app: nginx
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
diff --git a/content/zh/examples/application/ssa/nginx-deployment-replicas-only.yaml b/content/zh/examples/application/ssa/nginx-deployment-replicas-only.yaml
new file mode 100644
index 0000000000..0848ba0e21
--- /dev/null
+++ b/content/zh/examples/application/ssa/nginx-deployment-replicas-only.yaml
@@ -0,0 +1,6 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  replicas: 3
diff --git a/content/zh/examples/application/ssa/nginx-deployment.yaml b/content/zh/examples/application/ssa/nginx-deployment.yaml
new file mode 100644
index 0000000000..7797b13d9a
--- /dev/null
+++ b/content/zh/examples/application/ssa/nginx-deployment.yaml
@@ -0,0 +1,19 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+  labels:
+    app: nginx
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.14.2

From 37830480201be9b7122bd69bb614dd1199aff35e Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:33:19 +0900
Subject: [PATCH 219/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

問題ありません。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index a28efed015..9af0b9ac82 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -20,7 +20,7 @@ Kubernetesを使用してLinuxノードとWindowsノードを混在させて実
 * WindowsコンテナをホストするWindowsノードを構成するには、[Windows Server 2019ライセンス](https://www.microsoft.com/en-us/cloud-platform/windows-server-pricing)(またはそれ以上)を取得します。
 VXLAN/オーバーレイネットワークを使用している場合は、[KB4489899](https://support.microsoft.com/help/4489899)もインストールされている必要があります。
 
-* コントロールプレーンにアクセスできるLinuxベースのKubernetes kubeadmクラスター([kubeadmを使用した単一のコントロールプレーンクラスターの作成](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)を参照)
+* コントロールプレーンにアクセスできるLinuxベースのKubernetes kubeadmクラスター([kubeadmを使用したシングルコントロールプレーンクラスターの作成](/ja/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)を参照)
 
 
 

From 62da4dae04d4ef3b66a1dabaf6307b9c269a7bfe Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:33:39 +0900
Subject: [PATCH 220/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

問題ありません。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 9af0b9ac82..7b7ae9749e 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -36,7 +36,7 @@ VXLAN/オーバーレイネットワークを使用している場合は、[KB44
 
 <!-- lessoncontent -->
 
-## はじめに: クラスタへのWindowsノードの追加
+## はじめに: クラスターへのWindowsノードの追加
 
 ### ネットワーク構成
 

From cce07490126e671b24565afbff785a4e0815c3b0 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:33:52 +0900
Subject: [PATCH 221/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

問題ありません。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 7b7ae9749e..f7e56c8e27 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -60,7 +60,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
     wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
     ```
 
-    VNIを4096、ポートを4789に設定するために、flannelマニフェストの`net-conf.json`セクションを変更します。次のようになります。:
+    VNIを4096、ポートを4789に設定するために、flannelマニフェストの`net-conf.json`セクションを変更します。次のようになります:
 
     ```json
     net-conf.json: |

From 8ebb83473af2c2231d4ed75bac8d1e901ec25c2d Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:34:16 +0900
Subject: [PATCH 222/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index f7e56c8e27..a94f7ac5ee 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -103,7 +103,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
 1. Windows Flannelとkube-proxy DaemonSetを追加する
 
     これで、Windows互換バージョンのFlannelおよびkube-proxyを追加できます。
-    順番に互換性のあるバージョンのkube-proxyを確実に入手するには、イメージのタグを代用する必要があります。
+    互換性のあるバージョンのkube-proxyを確実に入手するには、イメージのタグを置換する必要があります。
     次の例は、Kubernetes{{< param "fullversion" >}}の使用方法を示していますが、
     独自のdeploymentに合わせてバージョンを調整する必要があります。
 

From 6ee6bad0cce6f496335b01581ca84b8d8772bd61 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:34:58 +0900
Subject: [PATCH 223/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

良いと思います。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index a94f7ac5ee..523ff02c46 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -105,7 +105,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
     これで、Windows互換バージョンのFlannelおよびkube-proxyを追加できます。
     互換性のあるバージョンのkube-proxyを確実に入手するには、イメージのタグを置換する必要があります。
     次の例は、Kubernetes{{< param "fullversion" >}}の使用方法を示していますが、
-    独自のdeploymentに合わせてバージョンを調整する必要があります。
+    独自のデプロイに合わせてバージョンを調整する必要があります。
 
     ```bash
     curl -L https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/kube-proxy.yml | sed 's/VERSION/{{< param "fullversion" >}}/g' | kubectl apply -f -

From 055ee7a821a8328fd33054e676d40589d2032db3 Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:35:23 +0900
Subject: [PATCH 224/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

問題ありません。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index 523ff02c46..e0574030c6 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -112,7 +112,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
     kubectl apply -f https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/flannel-overlay.yml
     ```
     {{< note >}}
-    ホストゲートウェイを使用している場合は、代わりにhttps://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/flannel-host-gw.ymlを使用してください。
+    ホストゲートウェイを使用している場合は、代わりに https://github.com/kubernetes-sigs/sig-windows-tools/releases/latest/download/flannel-host-gw.yml を使用してください。
     {{< /note >}}
 
     {{< note >}}

From 61fce1c014b120b4487e24905109012526b6589f Mon Sep 17 00:00:00 2001
From: cyberblack28 <y.ichikawa2014@gmail.com>
Date: Sat, 5 Sep 2020 16:35:36 +0900
Subject: [PATCH 225/496] Update
 content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

問題ありません。

Co-authored-by: Naoki Oketani <okepy.naoki@gmail.com>
---
 .../tasks/administer-cluster/kubeadm/adding-windows-nodes.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
index e0574030c6..62e610b277 100644
--- a/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
+++ b/content/ja/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes.md
@@ -116,7 +116,7 @@ LinuxベースのKubernetesコントロールプレーンノードを取得し
     {{< /note >}}
 
     {{< note >}}
-Windowsノードでイーサネット(「Ethernet0 2」など)ではなく別のインターフェースを使用している場合は、次の行を変更する必要があります。:
+Windowsノードでイーサネット(「Ethernet0 2」など)ではなく別のインターフェースを使用している場合は、次の行を変更する必要があります:
 
 ```powershell
 wins cli process run --path /k/flannel/setup.exe --args "--mode=overlay --interface=Ethernet"

From e2f152a867cfd55c84597a60f0344bca970b7de7 Mon Sep 17 00:00:00 2001
From: Marek Siarkowicz <siarkowicz@google.com>
Date: Sat, 5 Sep 2020 13:50:31 +0200
Subject: [PATCH 226/496] Small fixes in structured logging post

* Fix name of namespace to kube-system
* Change kubedns to coredns
* Remove tailing whitespaces
* Fix names of json keys (should be lowerCamelCase)
* Fix quotation mark (fixes broken json highlighting)
---
 .../2020-09-04-introducing-structured-logs.md    | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md b/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md
index 35079ddfab..e466711aa4 100644
--- a/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md
+++ b/content/en/blog/_posts/2020-09-04-introducing-structured-logs.md
@@ -1,7 +1,7 @@
 ---
-layout: blog 
+layout: blog
 title: 'Introducing Structured Logs'
-date: 2020-09-04 
+date: 2020-09-04
 slug: kubernetes-1-19-Introducing-Structured-Logs
 ---
 
@@ -18,13 +18,13 @@ To maintain backwards compatibility, structured logs will still be outputted as
 We've added two new methods to the klog library: InfoS and ErrorS. For example, this invocation of InfoS:
 
 ```golang
-klog.InfoS(“Pod status updated”, “pod”, klog.KObj(pod), “status”, status)
+klog.InfoS("Pod status updated", "pod", klog.KObj(pod), "status", status)
 ```
 
 will result in this log:
 
 ```
-I1025 00:15:15.525108       1 controller_utils.go:116] "Pod status updated" pod="kube-system/kubedns" status=”ready”
+I1025 00:15:15.525108       1 controller_utils.go:116] "Pod status updated" pod="kube-system/kubedns" status="ready"
 ```
 
 Or, if the --logging-format=json flag is set, it will result in this output:
@@ -33,11 +33,11 @@ Or, if the --logging-format=json flag is set, it will result in this output:
 {
   "ts": 1580306777.04728,
   "msg": "Pod status updated",
-  "Pod”: {
-    “Name”: “kubedns”,
-    “Namespace”: “kubedns”
+  "pod": {
+    "name": "coredns",
+    "namespace": "kube-system"
   },
-  “status”: “ready”
+  "status": "ready"
 }
 ```
 

From ba388e321f06133430e5381e3715d9c4c7946433 Mon Sep 17 00:00:00 2001
From: Joway <joway.w@gmail.com>
Date: Sun, 6 Sep 2020 11:53:51 +0800
Subject: [PATCH 227/496] Fix typo in pod-priority-preemption.md

---
 .../zh/docs/concepts/configuration/pod-priority-preemption.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/configuration/pod-priority-preemption.md b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
index f7ff237fb4..b897f0e266 100644
--- a/content/zh/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
@@ -23,7 +23,7 @@ scheduler tries to preempt (evict) lower priority Pods to make scheduling of the
 pending Pod possible.
 -->
 [Pods](/zh/docs/concepts/workloads/pods/pod/) 可以有*优先级（Priority）*。
-优先级体现的是当前 Pod 与其他 Pod 相比的重要成都。如果 Pod 无法被调度，则
+优先级体现的是当前 Pod 与其他 Pod 相比的重要程度。如果 Pod 无法被调度，则
 调度器会尝试抢占（逐出）低优先级的 Pod，从而使得悬决的 Pod 可被调度。
 
 <!-- body -->

From c16a8909e218f4667809c41d36b66b4809521ea6 Mon Sep 17 00:00:00 2001
From: Joway <joway.w@gmail.com>
Date: Sun, 6 Sep 2020 11:59:59 +0800
Subject: [PATCH 228/496] Fix typo about "Node" in zh

---
 .../zh/docs/concepts/configuration/pod-priority-preemption.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/configuration/pod-priority-preemption.md b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
index f7ff237fb4..6952f6ec9d 100644
--- a/content/zh/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/zh/docs/concepts/configuration/pod-priority-preemption.md
@@ -377,7 +377,7 @@ the Pods are gone, P can be scheduled on the Node.
 Pod 被创建时会被放入一个队列中等待调度。调度器从队列中选择 Pod，尝试将其调度到某 Node 上。
 如果找不到能够满足 Pod 所设置需求的 Node，就会触发悬决 Pod 的抢占逻辑。
 假定 P 是悬决的 Pod，抢占逻辑会尝试找到一个这样的节点，在该节点上移除一个或者多个
-优先级比 P 低的 Pod 后，P 就可以被调度到丐姐点。如果调度器能够找到这样的节点，
+优先级比 P 低的 Pod 后，P 就可以被调度到该节点。如果调度器能够找到这样的节点，
 该节点上的一个或者多个优先级较低的 Pod 就会被逐出。当被逐出的 Pod 从该节点上
 消失时，P 就可以调度到此节点。
 

From 6cde84264806fec5a34592319219f681925182e9 Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Sun, 6 Sep 2020 21:35:55 +0900
Subject: [PATCH 229/496] Fix issue with
 k8s.io/docs/concepts/services-networking/ingress.md

---
 content/en/docs/concepts/services-networking/ingress.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/ingress.md b/content/en/docs/concepts/services-networking/ingress.md
index d3e60cccbe..4c9accf3a3 100644
--- a/content/en/docs/concepts/services-networking/ingress.md
+++ b/content/en/docs/concepts/services-networking/ingress.md
@@ -493,7 +493,6 @@ You can achieve the same outcome by invoking `kubectl replace -f` on a modified
 
 Techniques for spreading traffic across failure domains differs between cloud providers.
 Please check the documentation of the relevant [Ingress controller](/docs/concepts/services-networking/ingress-controllers) for details.
-for details on deploying Ingress in a federated cluster.
 
 ## Alternatives
 

From b5b9d88433e154495ea1d14cde5e7ca3d698b8bb Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Thu, 20 Aug 2020 19:12:00 +0100
Subject: [PATCH 230/496] Add headings for Immutable ConfigMaps and Secrets

---
 .../docs/concepts/configuration/configmap.md  |  2 +
 .../en/docs/concepts/configuration/secret.md  | 66 ++++++++++---------
 2 files changed, 36 insertions(+), 32 deletions(-)

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index 3e7abfd593..93bc555746 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -213,6 +213,8 @@ when new keys are projected to the Pod can be as long as the kubelet sync period
 propagation delay, where the cache propagation delay depends on the chosen cache type
 (it equals to watch propagation delay, ttl of cache, or zero correspondingly).
 
+## Immutable ConfigMaps {#configmap-immutable}
+
 {{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
 The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 651e90f270..12627b2cda 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -717,38 +717,6 @@ A container using a Secret as a
 Secret updates.
 {{< /note >}}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
-
-The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
-individual Secrets and ConfigMaps as immutable. For clusters that extensively use Secrets
-(at least tens of thousands of unique Secret to Pod mounts), preventing changes to their
-data has the following advantages:
-
-- protects you from accidental (or unwanted) updates that could cause applications outages
-- improves performance of your cluster by significantly reducing load on kube-apiserver, by
-closing watches for secrets marked as immutable.
-
-This feature is controlled by the `ImmutableEphemeralVolumes` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/),
-which is enabled by default since v1.19. You can create an immutable
-Secret by setting the `immutable` field to `true`. For example,
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  ...
-data:
-  ...
-immutable: true
-```
-
-{{< note >}}
-Once a Secret or ConfigMap is marked as immutable, it is _not_ possible to revert this change
-nor to mutate the contents of the `data` field. You can only delete and recreate the Secret.
-Existing Pods maintain a mount point to the deleted Secret - it is recommended to recreate
-these pods.
-{{< /note >}}
-
 ### Using Secrets as environment variables
 
 To use a secret in an {{< glossary_tooltip text="environment variable" term_id="container-env-variables" >}}
@@ -809,6 +777,40 @@ The output is similar to:
 1f2d1e2e67df
 ```
 
+## Immutable Secrets {#secret-immutable}
+
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+The Kubernetes beta feature _Immutable Secrets and ConfigMaps_ provides an option to set
+individual Secrets and ConfigMaps as immutable. For clusters that extensively use Secrets
+(at least tens of thousands of unique Secret to Pod mounts), preventing changes to their
+data has the following advantages:
+
+- protects you from accidental (or unwanted) updates that could cause applications outages
+- improves performance of your cluster by significantly reducing load on kube-apiserver, by
+closing watches for secrets marked as immutable.
+
+This feature is controlled by the `ImmutableEphemeralVolumes` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/),
+which is enabled by default since v1.19. You can create an immutable
+Secret by setting the `immutable` field to `true`. For example,
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  ...
+data:
+  ...
+immutable: true
+```
+
+{{< note >}}
+Once a Secret or ConfigMap is marked as immutable, it is _not_ possible to revert this change
+nor to mutate the contents of the `data` field. You can only delete and recreate the Secret.
+Existing Pods maintain a mount point to the deleted Secret - it is recommended to recreate
+these pods.
+{{< /note >}}
+
 ### Using imagePullSecrets
 
 The `imagePullSecrets` field is a list of references to secrets in the same namespace.

From 68fae217dd706e6c4c7b355140e2bdc94c5d7823 Mon Sep 17 00:00:00 2001
From: lfzyx zhou <lfzyx.me@gmail.com>
Date: Thu, 3 Sep 2020 13:08:34 +0800
Subject: [PATCH 231/496] 1.The create-cluster-kubeadm.md should be in
 "setup/production-environment/tools/kubeadm" directory 2.Retranslate the
 create-cluster-kubeadm.md

---
 .../independent/create-cluster-kubeadm.md     | 1113 -----------------
 .../tools/kubeadm/create-cluster-kubeadm.md   | 1005 +++++++++++++++
 2 files changed, 1005 insertions(+), 1113 deletions(-)
 delete mode 100644 content/zh/docs/setup/independent/create-cluster-kubeadm.md
 create mode 100644 content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md

diff --git a/content/zh/docs/setup/independent/create-cluster-kubeadm.md b/content/zh/docs/setup/independent/create-cluster-kubeadm.md
deleted file mode 100644
index 2f80c85c2d..0000000000
--- a/content/zh/docs/setup/independent/create-cluster-kubeadm.md
+++ /dev/null
@@ -1,1113 +0,0 @@
----
-title: 使用 kubeadm 创建一个单主集群
-content_type: task
-weight: 30
----
-
-<!-- ---
-reviewers:
-- sig-cluster-lifecycle
-title: Creating a single master cluster with kubeadm
-content_type: task
-weight: 30
---- -->
-
-
-<!-- overview -->
-<!--
-<img src="https://raw.githubusercontent.com/cncf/artwork/master/projects/kubernetes/certified-kubernetes/versionless/color/certified-kubernetes-color.png" align="right" width="150px">**kubeadm** helps you bootstrap a minimum viable Kubernetes cluster that conforms to best practices.  With kubeadm, your cluster should pass [Kubernetes Conformance tests](https://kubernetes.io/blog/2017/10/software-conformance-certification). Kubeadm also supports other cluster
-lifecycle functions, such as upgrades, downgrade, and managing [bootstrap tokens](/docs/reference/access-authn-authz/bootstrap-tokens/).  -->
-
-<img src="https://raw.githubusercontent.com/cncf/artwork/master/projects/kubernetes/certified-kubernetes/versionless/color/certified-kubernetes-color.png" align="right" width="150px">**kubeadm** 能帮助您建立一个小型的符合最佳实践的 Kubernetes 集群。通过使用 kubeadm, 您的集群会符合 [Kubernetes 合规性测试](https://kubernetes.io/blog/2017/10/software-conformance-certification)的要求. Kubeadm 也支持其他的集群生命周期操作，比如升级、降级和管理[启动引导令牌](/docs/reference/access-authn-authz/bootstrap-tokens/)。
-
-<!-- Because you can install kubeadm on various types of machine (e.g. laptop, server,
-Raspberry Pi, etc.), it's well suited for integration with provisioning systems
-such as Terraform or Ansible. -->
-
-因为您可以在不同类型的机器（比如笔记本、服务器和树莓派等）上安装 kubeadm，因此它非常适合与 Terraform 或 Ansible 这类自动化管理系统集成。
-
-<!-- kubeadm's simplicity means it can serve a wide range of use cases:
-
-- New users can start with kubeadm to try Kubernetes out for the first time.
-- Users familiar with Kubernetes can spin up clusters with kubeadm and test their applications.
-- Larger projects can include kubeadm as a building block in a more complex system that can also include other installer tools. -->
-
-kubeadm 的简单便捷为大家带来了广泛的用户案例：
-
-- 新用户可以从 kubeadm 开始来试用 Kubernetes。
-- 熟悉 Kubernetes 的用户可以使用 kubeadm 快速搭建集群并测试他们的应用。
-- 大型的项目可以将 kubeadm 和其他的安装工具一起形成一个比较复杂的系统。
-
-<!-- kubeadm is designed to be a simple way for new users to start trying
-Kubernetes out, possibly for the first time, a way for existing users to
-test their application on and stitch together a cluster easily, and also to be
-a building block in other ecosystem and/or installer tool with a larger
-scope. -->
-
-kubeadm 的设计初衷是为新用户提供一种便捷的方式来首次试用 Kubernetes，
-同时也方便老用户搭建集群测试他们的应用。
-此外 kubeadm 也可以跟其它生态系统与/或安装工具集成到一起，提供更强大的功能。
-
-<!-- You can install _kubeadm_ very easily on operating systems that support
-installing deb or rpm packages. The responsible SIG for kubeadm,
-[SIG Cluster Lifecycle](https://github.com/kubernetes/community/tree/master/sig-cluster-lifecycle), provides these packages pre-built for you,
-but you may also build them from source for other OSes. -->
-
-您可以很方便地在支持 rpm 或 deb 软件包的操作系统上安装 _kubeadm_。对应 kubeadm 的 SIG，
-[SIG Cluster Lifecycle](https://github.com/kubernetes/community/tree/master/sig-cluster-lifecycle)，
-提供了预编译的这类安装包，当然您也可以自己基于源码为其它操作系统来构造安装包。
-
-<!-- ### kubeadm Maturity
-
-| Area                      | Maturity Level |
-|---------------------------|--------------- |
-| Command line UX           | beta           |
-| Implementation            | beta           |
-| Config file API           | alpha          |
-| Self-hosting              | alpha          |
-| kubeadm alpha subcommands | alpha          |
-| CoreDNS                   | GA             |
-| DynamicKubeletConfig      | alpha          | -->
-
-### kubeadm 成熟程度
-
-| 功能                       | 成熟程度        |
-|---------------------------|--------------- |
-| 命令行用户体验               | beta           |
-| 功能实现                    | beta           |
-| 配置文件 API                | alpha          |
-| 自托管                     | alpha          |
-| kubeadm alpha 子命令       | alpha          |
-| CoreDNS                   | GA             |
-| 动态 Kubelet 配置          | alpha          |
-
-<!-- kubeadm's overall feature state is **Beta** and will soon be graduated to
-**General Availability (GA)** during 2018. Some sub-features, like self-hosting
-or the configuration file API are still under active development. The
-implementation of creating the cluster may change slightly as the tool evolves,
-but the overall implementation should be pretty stable. Any commands under
-`kubeadm alpha` are by definition, supported on an alpha level. -->
-
-kubeadm 的整体功能目前还是 **Beta** 状态，然而很快在 2018 年就会转换成**正式发布 (GA)** 状态。
-一些子功能，比如自托管或者配置文件 API 还在开发过程当中。
-随着工具的发展，创建集群的方法可能会有所变化，但是整体部署方案还是比较稳定的。
-在 `kubeadm alpha` 下面的任何命令都只是 alpha 状态，目前只提供初期阶段的服务。
-
-<!-- ### Support timeframes
-
-Kubernetes releases are generally supported for nine months, and during that
-period a patch release may be issued from the release branch if a severe bug or
-security issue is found. Here are the latest Kubernetes releases and the support
-timeframe; which also applies to `kubeadm`.
-
-| Kubernetes version | Release month  | End-of-life-month |
-|--------------------|----------------|-------------------|
-| v1.6.x             | March 2017     | December 2017     |
-| v1.7.x             | June 2017      | March 2018        |
-| v1.8.x             | September 2017 | June 2018         |
-| v1.9.x             | December 2017  | September 2018    |
-| v1.10.x            | March 2018     | December 2018     |
-| v1.11.x            | June 2018      | March 2019        |
-| v1.12.x            | September 2018 | June 2019         |
--->
-
-### 维护周期
-
-Kubernetes 发布的版本通常只维护支持九个月，在维护周期内，如果发现有比较重大的 bug 或者安全问题的话，
-可能会发布一个补丁版本。下面是 Kubernetes 的发布和维护周期，同时也适用于 `kubeadm`。
-
-| Kubernetes 版本     | 发行月份        | 终止维护月份        |
-|--------------------|----------------|-------------------|
-| v1.6.x             | 2017 年 3 月    | 2017 年 12 月     |
-| v1.7.x             | 2017 年 6 月    | 2018 年 3 月      |
-| v1.8.x             | 2017 年 9 月    | 2018 年 6 月      |
-| v1.9.x             | 2017 年 12 月   |  2018 年 9 月     |
-| v1.10.x            | 2018 年 3 月    | 2018 年 12 月     |
-| v1.11.x            | 2018 年 6 月    | 2019 年 3 月      |
-| v1.12.x            | 2018 年 9 月    | 2019 年 6 月      |
-
-
-
-## {{% heading "prerequisites" %}}
-
-<!--
-
-- One or more machines running a deb/rpm-compatible OS, for example Ubuntu or CentOS
-- 2 GB or more of RAM per machine. Any less leaves little room for your
-   apps.
-- 2 CPUs or more on the master
-- Full network connectivity among all machines in the cluster. A public or
-   private network is fine.
- -->
-
-- 一个或者多个兼容 deb 或者 rpm 软件包的操作系统，比如 Ubuntu 或者 CentOS
-- 每台机器 2 GB 以上的内存，内存不足时应用会受限制
-- 主节点上 2 CPU 以上
-- 集群里所有的机器有完全的网络连接，公有网络或者私有网络都可以
-
-
-<!-- steps -->
-<!--
-## Objectives
-
-* Install a single master Kubernetes cluster or [high availability cluster](https://kubernetes.io/docs/setup/independent/high-availability/)
-* Install a Pod network on the cluster so that your Pods can
-  talk to each other
--->
-
-## 目标
-
-* 搭建一个单主 Kubernetes 集群或者[高可用集群](/docs/setup/independent/high-availability/)
-* 在集群上安装 Pod 网络组件以便 Pod 之间可以互相通信
-
-<!-- ## Instructions
-
-### Installing kubeadm on your hosts
-
-See ["Installing kubeadm"](/docs/setup/independent/install-kubeadm/).
-
-{{< note >}}
-**Note:** If you have already installed kubeadm, run `apt-get update &&
-apt-get upgrade` or `yum update` to get the latest version of kubeadm.
-
-When you upgrade, the kubelet restarts every few seconds as it waits in a crashloop for
-kubeadm to tell it what to do. This crashloop is expected and normal.
-After you initialize your master, the kubelet runs normally.
-{{< /note >}}-->
-
-## 步骤
-
-### 在您的机器上安装 kubeadm
-
-请查阅[安装 kubeadm](/docs/setup/independent/install-kubeadm/)。
-
-{{< note >}}
-如果您的机器已经安装了 kubeadm, 请运行 `apt-get update &&
-apt-get upgrade` 或者 `yum update` 来升级至最新版本的 kubeadm.
-
-升级过程中，kubelet 会每隔几秒钟重启并陷入了不断循环等待 kubeadm 发布指令的状态。
-这个死循环的过程是正常的，当升级并初始化完成您的主节点之后，kubelet 才会正常运行。
-{{< /note >}}
-
-<!-- ### Initializing your master
-
-The master is the machine where the control plane components run, including
-etcd (the cluster database) and the API server (which the kubectl CLI
-communicates with). -->
-
-### 初始化您的主节点
-
-主节点是集群里运行控制面的机器，包括 etcd (集群的数据库)和 API 服务（kubectl CLI 与之交互）。
-
-<!-- 1. Choose a Pod network add-on, and verify whether it requires any arguments to
-be passed to kubeadm initialization. Depending on which
-third-party provider you choose, you might need to set the `--Pod-network-cidr` to
-a provider-specific value. See [Installing a Pod network add-on](#Pod-network).
-1. (Optional) Unless otherwise specified, kubeadm uses the network interface associated
-with the default gateway to advertise the master's IP. To use a different
-network interface, specify the `--apiserver-advertise-address=<ip-address>` argument
-to `kubeadm init`. To deploy an IPv6 Kubernetes cluster using IPv6 addressing, you
-must specify an IPv6 address, for example `--apiserver-advertise-address=fd00::101`
-1. (Optional) Run `kubeadm config images pull` prior to `kubeadm init` to verify
-connectivity to gcr.io registries.
-
-Now run:
-
-```bash
-kubeadm init <args>
-``` -->
-
-
-1. 选择一个 Pod 网络插件，并检查是否在 kubeadm 初始化过程中需要传入什么参数。这个取决于
-您选择的网络插件，您可能需要设置 `--Pod-network-cidr` 来指定网络驱动的 CIDR。请参阅[安装网络插件](#Pod-network)。
-1. (可选) 除非特别指定，kubeadm 会使用默认网关所在的网络接口广播其主节点的 IP 地址。若需使用其他网络接口，请
-给 `kubeadm init` 设置 `--apiserver-advertise-address=<ip-address>` 参数。如果需要部署
-IPv6 的集群，则需要指定一个 IPv6 地址，比如 `--apiserver-advertise-address=fd00::101`。
-1. (可选) 在运行 `kubeadm init` 之前请先执行 `kubeadm config images pull` 来测试与 gcr.io 的连接。
-
-现在运行:
-
-```bash
-kubeadm init <args>
-```
-
-<!-- ### More information
-
-For more information about `kubeadm init` arguments, see the [kubeadm reference guide](/docs/reference/setup-tools/kubeadm/kubeadm/).
-
-For a complete list of configuration options, see the [configuration file documentation](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
-
-To customize control plane components, including optional IPv6 assignment to liveness probe for control plane components and etcd server, provide extra arguments to each component as documented in [custom arguments](/docs/admin/kubeadm#custom-args). -->
-
-### 补充信息
-
-想了解更多关于 `kubeadm init` 的参数, 请参阅[kubeadm 参考指南](/docs/reference/setup-tools/kubeadm/kubeadm/)。
-
-想了解完整的配置选项，请参阅[配置文件](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)。
-
-如果想定制控制面组件，包括为活跃性探测和 etcd 服务提供 IPv6 支持以及为各组件提供额外参数，请参阅[定制参数](/docs/admin/kubeadm#custom-args)。
-
-<!-- To run `kubeadm init` again, you must first [tear down the cluster](#tear-down).
-
-If you join a node with a different architecture to your cluster, create a separate
-Deployment or DaemonSet for `kube-proxy` and `kube-dns` on the node. This is because the Docker images for these
-components do not currently support multi-architecture.
-
-`kubeadm init` first runs a series of prechecks to ensure that the machine
-is ready to run Kubernetes. These prechecks expose warnings and exit on errors. `kubeadm init`
-then downloads and installs the cluster control plane components. This may take several minutes.
-The output should look like: -->
-
-如果需要再次运行 `kubeadm init`，您必须先[卸载集群](#tear-down)。
-
-如果您需要将不同架构的节点加入您的集群，请单独在这类节点上为 `kube-proxy` 和 `kube-dns` 创建 Deployment 或 DaemonSet。
-这是因为这些组件的 Docker 镜像并不支持多架构。
-
-`kubeadm init` 首先会执行一系列的运行前检查来确保机器满足运行 Kubernetes 的条件。
-这些检查会抛出警告并在发现错误的时候终止整个初始化进程。
-然后 `kubeadm init` 会下载并安装集群的控制面组件，这可能会花费几分钟时间，其输出如下所示：
-
-```none
-[init] Using Kubernetes version: vX.Y.Z
-[preflight] Running pre-flight checks
-[kubeadm] WARNING: starting in 1.8, tokens expire after 24 hours by default (if you require a non-expiring token use --token-ttl 0)
-[certificates] Generated ca certificate and key.
-[certificates] Generated apiserver certificate and key.
-[certificates] apiserver serving cert is signed for DNS names [kubeadm-master kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.138.0.4]
-[certificates] Generated apiserver-kubelet-client certificate and key.
-[certificates] Generated sa key and public key.
-[certificates] Generated front-proxy-ca certificate and key.
-[certificates] Generated front-proxy-client certificate and key.
-[certificates] Valid certificates and keys now exist in "/etc/kubernetes/pki"
-[kubeconfig] Wrote KubeConfig file to disk: "admin.conf"
-[kubeconfig] Wrote KubeConfig file to disk: "kubelet.conf"
-[kubeconfig] Wrote KubeConfig file to disk: "controller-manager.conf"
-[kubeconfig] Wrote KubeConfig file to disk: "scheduler.conf"
-[controlplane] Wrote Static Pod manifest for component kube-apiserver to "/etc/kubernetes/manifests/kube-apiserver.yaml"
-[controlplane] Wrote Static Pod manifest for component kube-controller-manager to "/etc/kubernetes/manifests/kube-controller-manager.yaml"
-[controlplane] Wrote Static Pod manifest for component kube-scheduler to "/etc/kubernetes/manifests/kube-scheduler.yaml"
-[etcd] Wrote Static Pod manifest for a local etcd instance to "/etc/kubernetes/manifests/etcd.yaml"
-[init] Waiting for the kubelet to boot up the control plane as Static Pods from directory "/etc/kubernetes/manifests"
-[init] This often takes around a minute; or longer if the control plane images have to be pulled.
-[apiclient] All control plane components are healthy after 39.511972 seconds
-[uploadconfig] Storing the configuration used in ConfigMap "kubeadm-config" in the "kube-system" Namespace
-[markmaster] Will mark node master as master by adding a label and a taint
-[markmaster] Master master tainted and labelled with key/value: node-role.kubernetes.io/master=""
-[bootstraptoken] Using token: <token>
-[bootstraptoken] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
-[bootstraptoken] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token
-[bootstraptoken] Creating the "cluster-info" ConfigMap in the "kube-public" namespace
-[addons] Applied essential addon: CoreDNS
-[addons] Applied essential addon: kube-proxy
-
-Your Kubernetes master has initialized successfully!
-
-To start using your cluster, you need to run (as a regular user):
-
-  mkdir -p $HOME/.kube
-  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
-  sudo chown $(id -u):$(id -g) $HOME/.kube/config
-
-You should now deploy a Pod network to the cluster.
-Run "kubectl apply -f [Podnetwork].yaml" with one of the addon options listed at:
-  http://kubernetes.io/docs/admin/addons/
-
-You can now join any number of machines by running the following on each node
-as root:
-
-  kubeadm join --token <token> <master-ip>:<master-port> --discovery-token-ca-cert-hash sha256:<hash>
-```
-
-
-<!-- To make kubectl work for your non-root user, run these commands, which are
-also part of the `kubeadm init` output:
-
-```bash
-mkdir -p $HOME/.kube
-sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
-sudo chown $(id -u):$(id -g) $HOME/.kube/config
-``` -->
-
-如果需要让普通用户可以运行 kubectl，请运行如下命令，其实这也是 `kubeadm init` 输出的一部分：
-
-```bash
-mkdir -p $HOME/.kube
-sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
-sudo chown $(id -u):$(id -g) $HOME/.kube/config
-```
-
-<!-- Alternatively, if you are the `root` user, you can run:
-
-```bash
-export KUBECONFIG=/etc/kubernetes/admin.conf
-``` -->
-
-或者，如果您是 `root` 用户，则可以运行：
-
-```bash
-export KUBECONFIG=/etc/kubernetes/admin.conf
-```
-
-<!-- Make a record of the `kubeadm join` command that `kubeadm init` outputs. You
-need this command to [join nodes to your cluster](#join-nodes).
-
-The token is used for mutual authentication between the master and the joining
-nodes.  The token included here is secret. Keep it safe, because anyone with this
-token can add authenticated nodes to your cluster. These tokens can be listed,
-created, and deleted with the `kubeadm token` command. See the
-[kubeadm reference guide](/docs/reference/setup-tools/kubeadm/kubeadm-token/). -->
-
-请备份好 `kubeadm init` 输出中的 `kubeadm join` 命令，因为您会需要这个命令来[给集群添加节点](#join-nodes)。
-
-令牌是主节点和新添加的节点之间进行相互身份验证的，因此请确保其安全。任何人只要知道了这些令牌，就可以随便给您的集群添加节点。
-可以使用 `kubeadm token` 命令来列出、创建和删除这类令牌。
-请参阅[kubeadm 参考指南](/docs/reference/setup-tools/kubeadm/kubeadm-token/)。
-
-<!-- ### Installing a Pod network add-on {#Pod-network}
-
-{{< caution >}}
-**Caution:** This section contains important information about installation and deployment order. Read it carefully before proceeding.
-{{< /caution >}}
-
-You must install a Pod network add-on so that your Pods can communicate with
-each other. -->
-
-### 安装 Pod 网络插件 {#Pod-network}
-
-{{< caution >}}
-**注意:** 这一节包含了安装和部署顺序的重要信息，执行之前请仔细阅读。
-{{< /caution >}}
-
-您必须先安装 Pod 网络插件，以便您的 Pod 可以互相通信。
-
-<!-- **The network must be deployed before any applications. Also, CoreDNS will not start up before a network is installed.
-kubeadm only supports Container Network Interface (CNI) based networks (and does not support kubenet).**
-
-Several projects provide Kubernetes Pod networks using CNI, some of which also
-support [Network Policy](/docs/concepts/services-networking/networkpolicies/). See the [add-ons page](/docs/concepts/cluster-administration/addons/) for a complete list of available network add-ons.
-- IPv6 support was added in [CNI v0.6.0](https://github.com/containernetworking/cni/releases/tag/v0.6.0).
-- [CNI bridge](https://github.com/containernetworking/plugins/blob/master/plugins/main/bridge/README.md) and [local-ipam](https://github.com/containernetworking/plugins/blob/master/plugins/ipam/host-local/README.md) are the only supported IPv6 network plugins in Kubernetes version 1.9. -->
-
-**网络必须在部署任何应用之前部署好。此外，在网络安装之前 CoreDNS 是不会启用的。
-kubeadm 只支持基于容器网络接口（CNI）的网络而且不支持 kubenet 。**
-
-有一些项目为 Kubernetes 提供使用 CNI 的 Pod 网络，其中一些也支持[网络策略](/docs/concepts/services-networking/networkpolicies/).
-请参阅[插件页面](/docs/concepts/cluster-administration/addons/)了解可用网络插件的完整列表。
-- [CNI v0.6.0](https://github.com/containernetworking/cni/releases/tag/v0.6.0) 也提供了 IPv6 的支持。
-- [CNI 网桥](https://github.com/containernetworking/plugins/blob/master/plugins/main/bridge/README.md) 和 [local-ipam](https://github.com/containernetworking/plugins/blob/master/plugins/ipam/host-local/README.md) 是 Kubernetes 1.9 版本里提供的唯一支持 IPv6 的网络插件。
-
-<!-- Note that kubeadm sets up a more secure cluster by default and enforces use of [RBAC](/docs/reference/access-authn-authz/rbac/).
-Make sure that your network manifest supports RBAC.
-
-You can install a Pod network add-on with the following command:
-
-```bash
-kubectl apply -f <add-on.yaml>
-``` -->
-
-注意 kubeadm 默认会创建一个比较安全的集群并强制启用[RBAC](/docs/reference/access-authn-authz/rbac/)。
-请确保您的网络方案支持 RBAC。
-
-您可以使用下列命令安装网络插件：
-
-```bash
-kubectl apply -f <add-on.yaml>
-```
-
-<!-- You can install only one Pod network per cluster.
-
-{{< tabs name="tabs-Pod-install" >}}
-{{% tab name="Choose one..." %}}
-Please select one of the tabs to see installation instructions for the respective third-party Pod Network Provider.
-{{% /tab %}} -->
-
-您仅可以给任何一个集群安装一个网络插件。
-
-{{< tabs name="tabs-Pod-install" >}}
-{{% tab name="Choose one..." %}}
-请选择一个选项来查看对应的第三方网络插件驱动的安装向导。
-{{% /tab %}}
-
-<!--
-For more information about using Calico, see [Quickstart for Calico on Kubernetes](https://docs.projectcalico.org/latest/getting-started/kubernetes/), [Installing Calico for policy and networking](https://docs.projectcalico.org/latest/getting-started/kubernetes/installation/calico), and other related resources.
-
-For Calico to work correctly, you need to pass `--Pod-network-cidr=192.168.0.0/16` to `kubeadm init` or update the `calico.yml` file to match your Pod network. Note that Calico works on `amd64` only.
-
-```shell
-kubectl apply -f https://docs.projectcalico.org/v3.8/manifests/calico.yaml
-```
--->
-
-{{% tab name="Calico" %}}
-想了解关于 Calico 的使用的更多信息, 请参阅[Kubernetes上的Calico快速实践](https://docs.projectcalico.org/latest/getting-started/kubernetes/)、[安装 Calico 实现网络策略](https://docs.projectcalico.org/latest/getting-started/kubernetes/installation/calico)和其他相关资源。
-
-为了 Calico 可以正确工作，您需要给 `kubeadm init` 传递 `--Pod-network-cidr=192.168.0.0/16` 这样的选项，
-或者根据您的网络方案更新 `calico.yml` 。注意 Calico 只适用于 `amd64` 架构。
-
-```shell
-kubectl apply -f https://docs.projectcalico.org/v3.8/manifests/calico.yaml
-```
-
-{{% /tab %}}
-
-<!--
-Canal uses Calico for policy and Flannel for networking. Refer to the Calico documentation for the [official getting started guide](https://docs.projectcalico.org/latest/getting-started/kubernetes/installation/flannel).
-
-For Canal to work correctly, `--Pod-network-cidr=10.244.0.0/16` has to be passed to `kubeadm init`. Note that Canal works on `amd64` only.
-
-```shell
-kubectl apply -f https://docs.projectcalico.org/v3.8/manifests/canal.yaml
-```
--->
-
-{{% tab name="Canal" %}}
-Canal 使用 Calico 提供的网络策略和 Flannel 提供的网络功能。请查阅 Calico 的官方文档
-[入门指引](https://docs.projectcalico.org/latest/getting-started/kubernetes/installation/flannel)。
-
-为了 Canal 可以正确运行，`kubeadm init` 运行时需要设置`--Pod-network-cidr=10.244.0.0/16`，同时注意它只适用于 `amd64` 架构。
-
-```shell
-kubectl apply -f https://docs.projectcalico.org/v3.8/manifests/canal.yaml
-```
-
-{{% /tab %}}
-<!--
-For more information about using Cilium with Kubernetes, see [Quickstart for Cilium on Kubernetes](http://docs.cilium.io/en/v1.2/kubernetes/quickinstall/) and [Kubernetes Install guide for Cilium](http://docs.cilium.io/en/v1.2/kubernetes/install/).
-
-Passing `--Pod-network-cidr` option to `kubeadm init` is not required, but highly recommended.
-
-These commands will deploy Cilium with its own etcd managed by etcd operator.
-
-```shell
-# Download required manifests from Cilium repository
-wget https://github.com/cilium/cilium/archive/v1.2.0.zip
-unzip v1.2.0.zip
-cd cilium-1.2.0/examples/kubernetes/addons/etcd-operator
-
-# Generate and deploy etcd certificates
-export CLUSTER_DOMAIN=$(kubectl get ConfigMap --namespace kube-system coredns -o yaml | awk '/kubernetes/ {print $2}')
-tls/certs/gen-cert.sh $CLUSTER_DOMAIN
-tls/deploy-certs.sh
-
-# Label kube-dns with fixed identity label
-kubectl label -n kube-system Pod $(kubectl -n kube-system get Pods -l k8s-app=kube-dns -o jsonpath='{range .items[]}{.metadata.name}{" "}{end}') io.cilium.fixed-identity=kube-dns
-
-kubectl create -f ./
-
-# Wait several minutes for Cilium, coredns and etcd Pods to converge to a working state
-```
--->
-{{% tab name="Cilium" %}}
-想了解 Kubernetes 上使用 Cilium 的更多相关信息，请查参阅[Kubernetes 上 Cilium 的快速指南](http://docs.cilium.io/en/v1.2/kubernetes/quickinstall/) 和 [Kubernetes 上 Cilium 的安装向导](http://docs.cilium.io/en/v1.2/kubernetes/install/)。
-
-尽管这里并不要求给 `kubeadm init` 设置 `--Pod-network-cidr` 参数，但是这是一个高度推荐操作的步骤。
-
-这些命令会部署 Cilium 和它自己受 etcd 操作者管理的 etcd。
-
-```shell
-# 从 Cilium 库下载所需清单文件
-wget https://github.com/cilium/cilium/archive/v1.2.0.zip
-unzip v1.2.0.zip
-cd cilium-1.2.0/examples/kubernetes/addons/etcd-operator
-
-# 生成并部署 etcd 证书
-export CLUSTER_DOMAIN=$(kubectl get ConfigMap --namespace kube-system coredns -o yaml | awk '/kubernetes/ {print $2}')
-tls/certs/gen-cert.sh $CLUSTER_DOMAIN
-tls/deploy-certs.sh
-
-# 为 kube-dns 设置固定的标识标签
-kubectl label -n kube-system Pod $(kubectl -n kube-system get Pods -l k8s-app=kube-dns -o jsonpath='{range .items[]}{.metadata.name}{" "}{end}') io.cilium.fixed-identity=kube-dns
-
-kubectl create -f ./
-
-# 等待几分钟，Cilium、coredns 和 etcd 的 Pods 会收敛到工作状态
-```
-
-{{% /tab %}}
-
-<!--
-
-For `flannel` to work correctly, you must pass `--Pod-network-cidr=10.244.0.0/16` to `kubeadm init`.
-
-Set `/proc/sys/net/bridge/bridge-nf-call-iptables` to `1` by running `sysctl net.bridge.bridge-nf-call-iptables=1`
-to pass bridged IPv4 traffic to iptables' chains. This is a requirement for some CNI plugins to work, for more information
-please see [here](https://kubernetes.io/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements).
-
-Note that `flannel` works on `amd64`, `arm`, `arm64` and `ppc64le`.
-
-```shell
-kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/bc79dd1505b0c8681ece4de4c0d86c5cd2643275/Documentation/kube-flannel.yml
-```
-
-For more information about `flannel`, see [the CoreOS flannel repository on GitHub
-](https://github.com/coreos/flannel).-->
-
-{{% tab name="Flannel" %}}
-
-为了让 `flannel` 能正确工作，您必须在运行 `kubeadm init` 时设置 `--Pod-network-cidr=10.244.0.0/16`。
-
-通过运行 `sysctl net.bridge.bridge-nf-call-iptables=1` 将 `/proc/sys/net/bridge/bridge-nf-call-iptables` 设置成 `1`，
-进而确保桥接的 IPv4 流量会传递给 iptables。
-这是一部分 CNI 插件运行的要求条件，请查看[这篇文档](/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements)获取更详细信息。
-
-注意 `flannel` 适用于 `amd64`、`arm`、`arm64` 和 `ppc64le` 架构平台。
-
-```shell
-kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/bc79dd1505b0c8681ece4de4c0d86c5cd2643275/Documentation/kube-flannel.yml
-```
-
-想了解更多关于 `flannel` 的信息,请查阅[ GitHub 上的 CoreOS flannel 仓库](https://github.com/coreos/flannel)。
-{{% /tab %}}
-
-<!--
-Set `/proc/sys/net/bridge/bridge-nf-call-iptables` to `1` by running `sysctl net.bridge.bridge-nf-call-iptables=1`
-to pass bridged IPv4 traffic to iptables' chains. This is a requirement for some CNI plugins to work, for more information
-please see [here](https://kubernetes.io/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements).
-
-Kube-router relies on kube-controller-manager to allocate Pod CIDR for the nodes. Therefore, use `kubeadm init` with the `--Pod-network-cidr` flag.
-
-Kube-router provides Pod networking, network policy, and high-performing IP Virtual Server(IPVS)/Linux Virtual Server(LVS) based service proxy.
-
-For information on setting up Kubernetes cluster with Kube-router using kubeadm, please see official [setup guide](https://github.com/cloudnativelabs/kube-router/blob/master/docs/kubeadm.md).
--->
-
-{{% tab name="Kube-router" %}}
-通过运行 `sysctl net.bridge.bridge-nf-call-iptables=1` 将 `/proc/sys/net/bridge/bridge-nf-call-iptables` 设置成 `1`，
-确保桥接的 IPv4 流量会传递给 iptables。
-这是一部分 CNI 插件的运行条件。请查看[这篇文档](/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements)了解更详细的信息。
-
-Kube-router 依赖于 kube-controller-manager 来给节点分配 CIDR， 因此需要设置 `kubeadm init` 的 `--Pod-network-cidr` 参数。
-
-Kube-router 提供 Pod 间联网、网络策略和和高效的基于 IPVS/LVS 的服务代理功能。
-
-想了解关于使用 kubeadm 搭建 Kubernetes 和 Kube-router 的更多信息。请查看官方的[安装指引](https://github.com/cloudnativelabs/kube-router/blob/master/docs/kubeadm.md)。
-{{% /tab %}}
-
-<!--
-Set `/proc/sys/net/bridge/bridge-nf-call-iptables` to `1` by running `sysctl net.bridge.bridge-nf-call-iptables=1`
-to pass bridged IPv4 traffic to iptables' chains. This is a requirement for some CNI plugins to work, for more information
-please see [here](https://kubernetes.io/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements).
-
-The official Romana set-up guide is [here](https://github.com/romana/romana/tree/master/containerize#using-kubeadm).
-
-Romana works on `amd64` only.
-
-```shell
-kubectl apply -f https://raw.githubusercontent.com/romana/romana/master/containerize/specs/romana-kubeadm.yml
-```
--->
-
-{{% tab name="Romana" %}}
-通过运行 `sysctl net.bridge.bridge-nf-call-iptables=1` 将 `/proc/sys/net/bridge/bridge-nf-call-iptables` 设置成 `1`，
-确保桥接的 IPv4 流量会传递给 iptables。这是一部分 CNI 插件的运行条件。
-请查看[这篇文档](/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements)
-获取更详细的信息。
-
-官方的 Romana 安装指引在[这里](https://github.com/romana/romana/tree/master/containerize#using-kubeadm)。
-
-注意，Romana 只适用于 `amd64` 架构。
-
-```shell
-kubectl apply -f https://raw.githubusercontent.com/romana/romana/master/containerize/specs/romana-kubeadm.yml
-```
-{{% /tab %}}
-
-<!--
-Set `/proc/sys/net/bridge/bridge-nf-call-iptables` to `1` by running `sysctl net.bridge.bridge-nf-call-iptables=1`
-to pass bridged IPv4 traffic to iptables' chains. This is a requirement for some CNI plugins to work, for more information
-please see [here](https://kubernetes.io/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements).
-
-The official Weave Net set-up guide is [here](https://www.weave.works/docs/net/latest/kube-addon/).
-
-Weave Net works on `amd64`, `arm`, `arm64` and `ppc64le` without any extra action required.
-Weave Net sets hairpin mode by default. This allows Pods to access themselves via their Service IP address
-if they don't know their PodIP.
-
-```shell
-kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
-```
--->
-
-{{% tab name="Weave Net" %}}
-
-通过运行 `sysctl net.bridge.bridge-nf-call-iptables=1` 将 `/proc/sys/net/bridge/bridge-nf-call-iptables` 设置成 `1`，
-将桥接的 IPv4 流量传递给 iptables。这是一部分 CNI 插件的运行条件。
-请查看[这篇文档](/docs/concepts/cluster-administration/network-plugins/#network-plugin-requirements)
-获取更详细的信息。
-
-官方的 Weave Net 配置向导在[这里](https://www.weave.works/docs/net/latest/kube-addon/)。
-
-Weave Net 适用于`amd64`、`arm`、`arm64` 和 `ppc64le` 而不需要其它额外的配置。
-Weave Net 默认启用 hairpin 模式，可以让 Pod 在不知道他们自己的 PodIP 的时候仍可以使用服务的 IP 地址来访问他们自己。
-
-```shell
-kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
-```
-{{% /tab %}}
-
-<!--
-Provides overlay SDN solution, delivering multicloud networking, hybrid cloud networking,
-simultaneous overlay-underlay support, network policy enforcement, network isolation,
-service chaining and flexible load balancing.
-
-There are multiple, flexible ways to install JuniperContrail/TungstenFabric CNI.
-
-Kindly refer to this quickstart: [TungstenFabric](https://tungstenfabric.github.io/website/)
--->
-
-{{% tab name="JuniperContrail/TungstenFabric" %}}
-提供了支持 overlay 的 SDN 解决方案，支持多云环境和混合云环境的网络方案，同时支持 overlay 和 underlay、网络策略、
-网络隔离、服务链和灵活的负载均衡。
-
-安装 JuniperContrail/TungstenFabric CNI 有很多灵活的方式。
-
-请查阅这个[安装指引](https://tungstenfabric.github.io/website/)。
-{{% /tab %}}
-{{< /tabs >}}
-
-<!-- Once a Pod network has been installed, you can confirm that it is working by
-checking that the CoreDNS Pod is Running in the output of `kubectl get Pods --all-namespaces`.
-And once the CoreDNS Pod is up and running, you can continue by joining your nodes.
-
-If your network is not working or CoreDNS is not in the Running state, check
-out our [troubleshooting docs](/docs/setup/independent/troubleshooting-kubeadm/). -->
-
-一旦 Pod 网络安装完成，您就可以通过 `kubectl get Pods --all-namespaces` 的输出来验证 CoreDNS Pod 是否正常运行。
-只要确认了 CoreDNS 正常运行，您就可以向集群中添加节点了。
-
-如果您的网络不能工作或者 CoreDNS 不在运行状态，请查阅[查错方案](/docs/setup/independent/troubleshooting-kubeadm/)。
-
-<!-- ### Master Isolation
-
-By default, your cluster will not schedule Pods on the master for security
-reasons. If you want to be able to schedule Pods on the master, e.g. for a
-single-machine Kubernetes cluster for development, run:
-
-```bash
-kubectl taint nodes --all node-role.kubernetes.io/master-
-```
-
-With output looking something like:
-
-```
-node "test-01" untainted
-taint "node-role.kubernetes.io/master:" not found
-taint "node-role.kubernetes.io/master:" not found
-```
-
-This will remove the `node-role.kubernetes.io/master` taint from any nodes that
-have it, including the master node, meaning that the scheduler will then be able
-to schedule Pods everywhere. -->
-
-### 主节点隔离
-
-出于安全原因，默认您的主节点不会被调度运行任何 Pod。
-如果您需要在主节点上运行 Pod，比如说部署环境是一个单机器集群，运行：
-
-```bash
-kubectl taint nodes --all node-role.kubernetes.io/master-
-```
-
-输出类似这样：
-
-```
-node "test-01" untainted
-taint "node-role.kubernetes.io/master:" not found
-taint "node-role.kubernetes.io/master:" not found
-```
-
-这个操作会从任何有 `node-role.kubernetes.io/master` 这种标签的节点移除该标签，包括主节点，
-标签的移除意味着集群调度器可以将 Pod 调度到任何节点。
-
-<!-- ### Joining your nodes {#join-nodes}
-
-The nodes are where your workloads (containers and Pods, etc) run. To add new nodes to your cluster do the following for each machine:
-
-* SSH to the machine
-* Become root (e.g. `sudo su -`)
-* Run the command that was output by `kubeadm init`. For example:
-
-``` bash
-kubeadm join --token <token> <master-ip>:<master-port> --discovery-token-ca-cert-hash sha256:<hash>
-``` -->
-
-### 添加节点 {#join-nodes}
-
-节点就是工作负载（容器和 Pod 等）运行的地方。如需向集群添加新节点，可以在每台机器上面执行如下操作：
-
-* SSH 连接到机器上
-* 成为 root 用户（比如 `sudo su -`）
-* 运行 `kubeadm init` 输出里的命令，即：
-
-``` bash
-kubeadm join --token <token> <master-ip>:<master-port> --discovery-token-ca-cert-hash sha256:<hash>
-```
-<!--
-If you do not have the token, you can get it by running the following command on the master node:
-
-``` bash
-kubeadm token list
-```
-
-The output is similar to this:
-
-``` console
-TOKEN                    TTL  EXPIRES              USAGES           DESCRIPTION            EXTRA GROUPS
-8ewj1p.9r9hcjoqgajrj4gi  23h  2018-06-12T02:51:28Z authentication,  The default bootstrap  system:
-                                                   signing          token generated by     bootstrappers:
-                                                                    'kubeadm init'.        kubeadm:
-                                                                                           default-node-token
-``` -->
-
-
-如果您没有保存令牌的话，可以通过在主节点上执行下面的命令来获取：
-
-``` bash
-kubeadm token list
-```
-
-输出类似这样:
-
-``` console
-TOKEN                    TTL  EXPIRES              USAGES           DESCRIPTION            EXTRA GROUPS
-8ewj1p.9r9hcjoqgajrj4gi  23h  2018-06-12T02:51:28Z authentication,  The default bootstrap  system:
-                                                   signing          token generated by     bootstrappers:
-                                                                    'kubeadm init'.        kubeadm:
-                                                                                           default-node-token
-```
-
-<!-- By default, tokens expire after 24 hours. If you are joining a node to the cluster after the current token has expired,
-you can create a new token by running the following command on the master node:
-
-``` bash
-kubeadm token create
-```
-
-The output is similar to this:
-
-``` console
-5didvk.d09sbcov8ph2amjw
-```
-
-If you don't have the value of `--discovery-token-ca-cert-hash`, you can get it by running the following command chain on the master node:
-
-``` bash
-openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | \
-   openssl dgst -sha256 -hex | sed 's/^.* //'
-```
-
-The output is similar to this:
-
-``` console
-8cb2de97839780a412b93877f8507ad6c94f73add17d5d7058e91741c9d5ec78
-``` -->
-
-默认情况下，令牌会在 24 小时内过期。如果在令牌过期之后添加节点，您可以在主节点上执行下面的命令创建一个新令牌：
-
-``` bash
-kubeadm token create
-```
-
-输出类似这样：
-
-``` console
-5didvk.d09sbcov8ph2amjw
-```
-
-如果您也不知道这个 `--discovery-token-ca-cert-hash` 的值，您也可以在主节点上运行下面的命令来获取：
-
-``` bash
-openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | \
-   openssl dgst -sha256 -hex | sed 's/^.* //'
-```
-
-输出类似这样：
-
-``` console
-8cb2de97839780a412b93877f8507ad6c94f73add17d5d7058e91741c9d5ec78
-```
-
-<!-- {{< note >}}
-**Note:** To specify an IPv6 tuple for `<master-ip>:<master-port>`, IPv6 address must be enclosed in square brackets, for example: `[fd00::101]:2073`.
-{{< /note >}}
-
-The output should look something like:
-
-```
-[preflight] Running pre-flight checks
-
-... (log output of join workflow) ...
-
-Node join complete:
-* Certificate signing request sent to master and response
-  received.
-* Kubelet informed of new secure connection details.
-
-Run 'kubectl get nodes' on the master to see this machine join.
-```
-
-A few seconds later, you should notice this node in the output from `kubectl get
-nodes` when run on the master. -->
-
-{{< note >}}
-若需为 `<master-ip>:<master-port>` 参数设定一个 IPv6 的元组，地址必须写在一对方括号里面，比如: `[fd00::101]:2073`。
-{{< /note >}}
-
-输出类似这样:
-
-```
-[preflight] Running pre-flight checks
-
-... (log output of join workflow) ...
-
-Node join complete:
-* Certificate signing request sent to master and response
-  received.
-* Kubelet informed of new secure connection details.
-
-Run 'kubectl get nodes' on the master to see this machine join.
-```
-
-几秒钟之后，您将能在主节点上的 `kubectl get nodes` 的输出里发现新添加的节点。
-
-<!-- ### (Optional) Controlling your cluster from machines other than the master
-
-In order to get a kubectl on some other computer (e.g. laptop) to talk to your
-cluster, you need to copy the administrator kubeconfig file from your master
-to your workstation like this:
-
-``` bash
-scp root@<master ip>:/etc/kubernetes/admin.conf .
-kubectl --kubeconfig ./admin.conf get nodes
-```
-
-{{< note >}}
-**Note:** The example above assumes SSH access is enabled for root. If that is not the
-case, you can copy the `admin.conf` file to be accessible by some other user
-and `scp` using that other user instead.
-
-The `admin.conf` file gives the user _superuser_ privileges over the cluster.
-This file should be used sparingly. For normal users, it's recommended to
-generate an unique credential to which you whitelist privileges. You can do
-this with the `kubeadm alpha phase kubeconfig user --client-name <CN>`
-command. That command will print out a KubeConfig file to STDOUT which you
-should save to a file and distribute to your user. After that, whitelist
-privileges by using `kubectl create (cluster)rolebinding`.
-{{< /note >}} -->
-
-### (可选) 在非主节点上控制集群
-
-为了能在其他机器（比如，笔记本）上使用 kubectl 来控制您的集群，您可以从主节点上复制管理员的
-kubeconfig 到您的机器上，像下面这样操作：
-
-``` bash
-scp root@<master ip>:/etc/kubernetes/admin.conf .
-kubectl --kubeconfig ./admin.conf get nodes
-```
-
-{{< note >}}
-上面的例子生效的前提是 SSH 允许 root 用户连接登录。
-如果root 用户不能连接的话，您可以将 `admin.conf` 复制到允许其他用户访问的其他地方并将 `scp` 命令里的用户改成相对应的用户再复制。
-
-这个 `admin.conf` 文件给予了用户整个集群的超级用户权限，因此这个操作必须小心谨慎。对于普通用户来说，
-更建议创建一个适用于白名单某些权限的验证文件。您可以通过这个命令来生成 `kubeadm alpha phase kubeconfig user --client-name <CN>`。
-这个命令会打印 KubeConfig 的内容到标准输出，然后您需要将它保存到一个文件里并分发给您的用户。然后再创建权限的白名单列表，
-命令如下： `kubectl create (cluster)rolebinding` 。
-{{< /note >}}
-
-<!-- ### (Optional) Proxying API Server to localhost
-
-If you want to connect to the API Server from outside the cluster you can use
-`kubectl proxy`:
-
-```bash
-scp root@<master ip>:/etc/kubernetes/admin.conf .
-kubectl --kubeconfig ./admin.conf proxy
-```
-
-You can now access the API Server locally at `http://localhost:8001/api/v1` -->
-
-### (可选) 将 API 服务代理到本地
-
-如果您需要从集群外部连接到您的 API 服务器，请运行`kubectl proxy`:
-
-```bash
-scp root@<master ip>:/etc/kubernetes/admin.conf .
-kubectl --kubeconfig ./admin.conf proxy
-```
-
-现在您就可以在本地访问 `http://localhost:8001/api/v1` 来连接 API 服务器了。
-
-<!-- ## Tear down {#tear-down}
-
-To undo what kubeadm did, you should first [drain the
-node](/docs/reference/generated/kubectl/kubectl-commands#drain) and make
-sure that the node is empty before shutting it down.
-
-Talking to the master with the appropriate credentials, run:
-
-```bash
-kubectl drain <node name> --delete-local-data --force --ignore-daemonsets
-kubectl delete node <node name>
-```
-
-Then, on the node being removed, reset all kubeadm installed state:
-
-```bash
-kubeadm reset
-```
-
-If you wish to start over simply run `kubeadm init` or `kubeadm join` with the
-appropriate arguments.
-
-More options and information about the
-[`kubeadm reset command`](/docs/reference/setup-tools/kubeadm/kubeadm-reset/).-->
-
-## 卸载集群 {#tear-down}
-
-想要回退 kubeadm 做出的修改，您需要首先[腾空节点](/docs/reference/generated/kubectl/kubectl-commands#drain)
-而且必须确保在关闭节点之前没有任何工作负载在运行。
-
-使用正确的登录凭据来连接到主节点：
-
-```bash
-kubectl drain <node name> --delete-local-data --force --ignore-daemonsets
-kubectl delete node <node name>
-```
-
-然后在待移除的节点上，重置所有 kubeadm 的安装状态：
-
-```bash
-kubeadm reset
-```
-
-如果您只是想重新运行 `kubeadm init` 或者 `kubeadm join`，[`kubeadm reset`](/docs/reference/setup-tools/kubeadm/kubeadm-reset/)页面有更多的信息可供参考.
-
-<!-- ## Maintaining a cluster {#lifecycle}
-
-Instructions for maintaining kubeadm clusters (e.g. upgrades,downgrades, etc.) can be found [here.](/docs/tasks/administer-cluster/kubeadm)
-
-## Explore other add-ons {#other-addons}
-
-See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to explore other add-ons,
-including tools for logging, monitoring, network policy, visualization &amp;
-control of your Kubernetes cluster. -->
-
-## 集群维护 {#lifecycle}
-
-维护集群（比如升级，降级）的详细指令，可参考[这里](/docs/tasks/administer-cluster/kubeadm)。
-
-## 探索其他插件 {#other-addons}
-
-查看[插件列表](/docs/concepts/cluster-administration/addons/)来发现其他插件，包括日志、监控、网络策略、
-可视化和集群管理工具等等。
-
-<!-- ## What's next {#whats-next}
-
-* Verify that your cluster is running properly with [Sonobuoy](https://github.com/heptio/sonobuoy)
-* Learn about kubeadm's advanced usage in the [kubeadm reference documentation](/docs/reference/setup-tools/kubeadm/kubeadm)
-* Learn more about Kubernetes [concepts](/docs/concepts/) and [`kubectl`](/docs/user-guide/kubectl-overview/).
-* Configure log rotation. You can use **logrotate** for that. When using Docker, you can specify log rotation options for Docker daemon, for example `--log-driver=json-file --log-opt=max-size=10m --log-opt=max-file=5`. See [Configure and troubleshoot the Docker daemon](https://docs.docker.com/engine/admin/) for more details.
-
-## Feedback {#feedback}
-
-* For bugs, visit [kubeadm GitHub issue tracker](https://github.com/kubernetes/kubeadm/issues)
-* For support, visit kubeadm Slack Channel:
-  [#kubeadm](https://kubernetes.slack.com/messages/kubeadm/)
-* General SIG Cluster Lifecycle Development Slack Channel:
-  [#sig-cluster-lifecycle](https://kubernetes.slack.com/messages/sig-cluster-lifecycle/)
-* SIG Cluster Lifecycle [SIG information](#TODO)
-* SIG Cluster Lifecycle Mailing List:
-  [kubernetes-sig-cluster-lifecycle](https://groups.google.com/forum/#!forum/kubernetes-sig-cluster-lifecycle) -->
-
-## 后续 {#whats-next}
-
-* 使用 [Sonobuoy](https://github.com/heptio/sonobuoy) 验证集群是否正确运行
-* 阅读[kubeadm 参考文档](/docs/reference/setup-tools/kubeadm/kubeadm)，学习 kubeadm 的高级应用
-* 进一步了解 Kubernetes 的[概念](/docs/concepts/)和 [`kubectl`](/docs/user-guide/kubectl-overview/)
-* 您可以使用 **logrotate** 配置日志轮转。使用 Docker 的时候，您可以给 Docker 守护进程设置日志轮转的选项，
-比如 `--log-driver=json-file --log-opt=max-size=10m --log-opt=max-file=5`。请查阅 [Docker 守护进程的配置和纠错](https://docs.docker.com/engine/admin/)。
-
-## 反馈 {#feedback}
-
-* 如果发现故障，请访问 [kubeadm GitHub issue tracker](https://github.com/kubernetes/kubeadm/issues)
-* 如果需要支持，请访问 kubeadm 的 Slack 频道：[#kubeadm](https://kubernetes.slack.com/messages/kubeadm/)
-* 访问 SIG cluster-lifecycle 开发者所使用的 Slack 频道：
-  [#sig-cluster-lifecycle](https://kubernetes.slack.com/messages/sig-cluster-lifecycle/)
-* SIG cluster-lifecycle 的 [SIG 信息](#TODO)
-* SIG cluster-lifecycle 的邮件列表:
-  [kubernetes-sig-cluster-lifecycle](https://groups.google.com/forum/#!forum/kubernetes-sig-cluster-lifecycle)
-
-<!-- ## Version skew policy {#version-skew-policy}
-
-The kubeadm CLI tool of version vX.Y may deploy clusters with a control plane of version vX.Y or vX.(Y-1).
-kubeadm CLI vX.Y can also upgrade an existing kubeadm-created cluster of version vX.(Y-1).
-
-Due to that we can't see into the future, kubeadm CLI vX.Y may or may not be able to deploy vX.(Y+1) clusters.
-
-Example: kubeadm v1.8 can deploy both v1.7 and v1.8 clusters and upgrade v1.7 kubeadm-created clusters to
-v1.8.
-
-Please also check our [installation guide](/docs/setup/independent/install-kubeadm/#installing-kubeadm-kubelet-and-kubectl)
-for more information on the version skew between kubelets and the control plane. -->
-
-## 版本偏差策略 {#version-skew-policy}
-
-vX.Y 版本的 kubeadm 命令行工具可能会部署一个控制面版本为 vX.Y 或者 vX.(Y-1) 的集群，也可以用于升级一个 vX.(Y-1) 的由 kubeadm 创建的集群。
-因为我们无法预见未来，版本为 vX.Y 的 kubeadm 可能可以也可能无法用于部署 vX.(Y+1) 版本的集群。
-例子: kubeadm v1.8 可以用于部署 v1.7 和 v1.8 的集群，也可以升级 v1.7 的由 kubeadm 创建的集群到 1.8 版本。
-请查看我们的[安装向导](/docs/setup/independent/install-kubeadm/#installing-kubeadm-kubelet-and-kubectl)，其中提供了关于 kubelet 和控制面版本偏差的更多信息。
-
-<!-- ## kubeadm works on multiple platforms {#multi-platform}
-
-kubeadm deb/rpm packages and binaries are built for amd64, arm (32-bit), arm64, ppc64le, and s390x
-following the [multi-platform
-proposal](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/multi-platform.md).
-
-Only some of the network providers offer solutions for all platforms. Please consult the list of
-network providers above or the documentation from each provider to figure out whether the provider
-supports your chosen platform. -->
-
-## 跨多平台上使用 kubeadm {#multi-platform}
-
-kubeadm 的 deb/rpm 包和可执行文件都是适用于 amd64、arm (32位)、arm64、ppc64le 和 s390x等架构平台的，
-请查阅[多平台方案](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/multi-platform.md)。
-
-只有一部分的网络驱动提供了所有平台的网络解决方案，请查询上面的网络驱动列表或者对应的官方文档来确定是否支持您的平台。
-
-<!-- ## Limitations {#limitations}
-
-Please note: kubeadm is a work in progress and these limitations will be
-addressed in due course.
-
-1. The cluster created here has a single master, with a single etcd database
-   running on it. This means that if the master fails, your cluster may lose
-   data and may need to be recreated from scratch. Adding HA support
-   (multiple etcd servers, multiple API servers, etc) to kubeadm is
-   still a work-in-progress.
-
-   Workaround: regularly
-   [back up etcd](https://coreos.com/etcd/docs/latest/admin_guide.html). The
-   etcd data directory configured by kubeadm is at `/var/lib/etcd` on the master.
-
-## Troubleshooting {#troubleshooting}
-
-If you are running into difficulties with kubeadm, please consult our [troubleshooting docs](/docs/setup/independent/troubleshooting-kubeadm/). -->
-
-## 局限 {#limitations}
-
-请注意，kubeadm 还处于正在开发的状态中，这些局限将会在适当的时间修正。
-
-1. 这篇文档介绍的创建的集群只能有单一的主节点和单一的 etcd 数据库，这表示如果主节点宕机，您的集群将会丢失数据
-   而且可能无法重新创建。目前给 kubeadm 添加高可用支持（比如多 etcd 多 API服务等等）的功能还在开发当中，因此可先参照下面的
-   临时解决方案: 经常性地[备份 etcd](https://coreos.com/etcd/docs/latest/admin_guide.html)。
-   由 kubeadm 配置的 etcd 数据位于主节点上的 `/var/lib/etcd` 目录。
-
-## 查错 {#troubleshooting}
-
-如果您在使用 kubeadm 发现任何问题，请查阅我们的[纠错文档](/docs/setup/independent/troubleshooting-kubeadm/)。
-
-
-
-
-
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
new file mode 100644
index 0000000000..2aedb5a9e0
--- /dev/null
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -0,0 +1,1005 @@
+---
+reviewers:
+- sig-cluster-lifecycle
+title: 使用 kubeadm 创建集群
+content_type: task
+weight: 30
+---
+
+<!-- ---
+reviewers:
+- sig-cluster-lifecycle
+title: Creating a cluster with kubeadm
+content_type: task
+weight: 30
+--- -->
+
+<!-- overview -->
+
+<!--
+<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">Creating a minimum viable Kubernetes cluster that conforms to best practices. In fact, you can use `kubeadm` to set up a cluster that will pass the [Kubernetes Conformance tests](https://kubernetes.io/blog/2017/10/software-conformance-certification).
+`kubeadm` also supports other cluster
+lifecycle functions, such as [bootstrap tokens](/docs/reference/access-authn-authz/bootstrap-tokens/) and cluster upgrades.
+-->
+<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">创建一个符合最佳实践的最小化 Kubernetes 集群。事实上，你可以使用 `kubeadm` 配置一个通过 [Kubernetes 一致性测试](https://kubernetes.io/blog/2017/10/software-conformance-certification) 的集群。
+`kubeadm` 还支持其他集群生命周期功能，
+例如 [启动引导令牌](/zh/docs/reference/access-authn-authz/bootstrap-tokens/) 和集群升级。
+
+<!--
+The `kubeadm` tool is good if you need:
+
+- A simple way for you to try out Kubernetes, possibly for the first time.
+- A way for existing users to automate setting up a cluster and test their application.
+- A building block in other ecosystem and/or installer tools with a larger
+  scope.
+-->
+kubeadm 工具很棒，如果你需要：
+
+- 一个尝试 Kubernetes 的简单方法。
+- 一个现有用户可以自动设置集群并测试其应用程序的途径。
+- 其他具有更大范围的生态系统和/或安装工具中的构建模块。
+
+<!--
+You can install and use `kubeadm` on various machines: your laptop, a set
+of cloud servers, a Raspberry Pi, and more. Whether you're deploying into the
+cloud or on-premises, you can integrate `kubeadm` into provisioning systems such
+as Ansible or Terraform.
+-->
+你可以在各种机器上安装和使用 `kubeadm`：笔记本电脑，
+一组云服务器，Raspberry Pi 等。无论是部署到云还是本地，
+你都可以将 `kubeadm` 集成到预配置系统中，例如 Ansible 或 Terraform。
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+<!--
+To follow this guide, you need:
+
+- One or more machines running a deb/rpm-compatible Linux OS; for example: Ubuntu or CentOS.
+- 2 GiB or more of RAM per machine--any less leaves little room for your
+   apps.
+- At least 2 CPUs on the machine that you use as a control-plane node.
+- Full network connectivity among all machines in the cluster. You can use either a
+  public or a private network.
+-->
+要遵循本指南，你需要：
+
+- 一台或多台运行兼容 deb/rpm 的 Linux 操作系统的计算机；例如：Ubuntu 或 CentOS。
+- 每台机器 2 GB 以上的内存，内存不足时应用会受限制。
+- 用作控制平面节点的计算机上至少有2个 CPU。
+- 集群中所有计算机之间具有完全的网络连接。你可以使用公共网络或专用网络。
+
+<!--
+You also need to use a version of `kubeadm` that can deploy the version
+of Kubernetes that you want to use in your new cluster.
+-->
+你还需要使用可以在新集群中部署特定 Kubernetes 版本对应的 `kubeadm`。
+
+
+<!--
+[Kubernetes' version and version skew support policy](/docs/setup/release/version-skew-policy/#supported-versions) applies to `kubeadm` as well as to Kubernetes overall.
+Check that policy to learn about what versions of Kubernetes and `kubeadm`
+are supported. This page is written for Kubernetes {{< param "version" >}}.
+-->
+[Kubernetes 版本及版本倾斜支持策略](/zh/docs/setup/release/version-skew-policy/#supported-versions) 适用于 `kubeadm` 以及整个 Kubernetes。
+查阅该策略以了解支持哪些版本的 Kubernetes 和 `kubeadm`。
+该页面是为 Kubernetes {{< param "version" >}} 编写的。
+
+<!--
+The `kubeadm` tool's overall feature state is General Availability (GA). Some sub-features are
+still under active development. The implementation of creating the cluster may change
+slightly as the tool evolves, but the overall implementation should be pretty stable.
+-->
+`kubeadm` 工具的整体功能状态为一般可用性（GA）。一些子功能仍在积极开发中。
+随着工具的发展，创建集群的实现可能会略有变化，但总体实现应相当稳定。
+
+<!--
+Any commands under `kubeadm alpha` are, by definition, supported on an alpha level.
+-->
+{{< note >}}
+根据定义，在 `kubeadm alpha` 下的所有命令均在 alpha 级别上受支持。
+{{< /note >}}
+
+
+
+<!-- steps -->
+
+<!--
+## Objectives
+-->
+## 目标
+
+<!--
+* Install a single control-plane Kubernetes cluster
+* Install a Pod network on the cluster so that your Pods can
+  talk to each other
+-->
+* 安装单个控制平面的 Kubernetes 集群
+* 在集群上安装 Pod 网络，以便你的 Pod 可以相互连通
+
+<!--
+## Instructions
+-->
+## 操作指南
+
+<!--
+### Installing kubeadm on your hosts
+-->
+### 在你的主机上安装安装 kubeadm
+
+<!--
+See ["Installing kubeadm"](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/).
+-->
+查看 ["安装 kubeadm"](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/)。
+
+<!--
+If you have already installed kubeadm, run `apt-get update &&
+apt-get upgrade` or `yum update` to get the latest version of kubeadm.
+
+When you upgrade, the kubelet restarts every few seconds as it waits in a crashloop for
+kubeadm to tell it what to do. This crashloop is expected and normal.
+After you initialize your control-plane, the kubelet runs normally.
+-->
+{{< note >}}
+如果你已经安装了kubeadm，执行 `apt-get update &&
+apt-get upgrade` 或 `yum update` 以获取 kubeadm 的最新版本。
+
+升级时，kubelet 每隔几秒钟重新启动一次，
+在 crashloop 状态中等待 kubeadm 发布指令。crashloop 状态是正常现象。
+初始化控制平面后，kubelet 将正常运行。
+{{< /note >}}
+
+<!--
+### Initializing your control-plane node
+-->
+### 初始化控制平面节点
+
+<!--
+The control-plane node is the machine where the control plane components run, including
+{{< glossary_tooltip term_id="etcd" >}} (the cluster database) and the
+{{< glossary_tooltip text="API Server" term_id="kube-apiserver" >}}
+(which the {{< glossary_tooltip text="kubectl" term_id="kubectl" >}} command line tool
+communicates with).
+-->
+控制平面节点是运行控制平面组件的机器，
+包括 {{< glossary_tooltip term_id="etcd" >}} （集群数据库）
+和 {{< glossary_tooltip text="API Server" term_id="kube-apiserver" >}}
+（命令行工具 {{< glossary_tooltip text="kubectl" term_id="kubectl" >}} 与之通信）。
+
+<!--
+1. (Recommended) If you have plans to upgrade this single control-plane `kubeadm` cluster
+to high availability you should specify the `--control-plane-endpoint` to set the shared endpoint
+for all control-plane nodes. Such an endpoint can be either a DNS name or an IP address of a load-balancer.
+1. Choose a Pod network add-on, and verify whether it requires any arguments to
+be passed to `kubeadm init`. Depending on which
+third-party provider you choose, you might need to set the `--pod-network-cidr` to
+a provider-specific value. See [Installing a Pod network add-on](#pod-network).
+1. (Optional) Since version 1.14, `kubeadm` tries to detect the container runtime on Linux
+by using a list of well known domain socket paths. To use different container runtime or
+if there are more than one installed on the provisioned node, specify the `--cri-socket`
+argument to `kubeadm init`. See [Installing runtime](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-runtime).
+1. (Optional) Unless otherwise specified, `kubeadm` uses the network interface associated
+with the default gateway to set the advertise address for this particular control-plane node's API server.
+To use a different network interface, specify the `--apiserver-advertise-address=<ip-address>` argument
+to `kubeadm init`. To deploy an IPv6 Kubernetes cluster using IPv6 addressing, you
+must specify an IPv6 address, for example `--apiserver-advertise-address=fd00::101`
+1. (Optional) Run `kubeadm config images pull` prior to `kubeadm init` to verify
+connectivity to the gcr.io container image registry.
+-->
+1. （推荐）如果计划将单个控制平面 kubeadm 集群升级成高可用，
+你应该指定 `--control-plane-endpoint` 为所有控制平面节点设置共享端点。
+端点可以是负载均衡器的 DNS 名称或 IP 地址。
+1. 选择一个Pod网络插件，并验证是否需要为 `kubeadm init` 传递参数。
+根据你选择的第三方网络插件，你可能需要设置 `--pod-network-cidr` 的值。
+请参阅 [安装Pod网络附加组件](#pod-network)。
+1. （可选）从版本1.14开始，`kubeadm` 尝试使用一系列众所周知的域套接字路径来检测 Linux 上的容器运行时。
+要使用不同的容器运行时，
+或者如果在预配置的节点上安装了多个容器，请为 `kubeadm init` 指定 `--cri-socket` 参数。
+请参阅[安装运行时](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-runtime)。
+1. （可选）除非另有说明，否则 `kubeadm` 使用与默认网关关联的网络接口来设置此控制平面节点 API server 的广播地址。
+要使用其他网络接口，请为 `kubeadm init` 设置 `--apiserver-advertise-address=<ip-address>` 参数。
+要部署使用 IPv6 地址的 Kubernetes 集群，
+必须指定一个 IPv6 地址，例如 `--apiserver-advertise-address=fd00::101`
+1. （可选）在 `kubeadm init` 之前运行 `kubeadm config images pull`，以验证与 gcr.io 容器镜像仓库的连通性。
+
+
+<!--
+To initialize the control-plane node run:
+-->
+要初始化控制平面节点，请运行：
+
+```bash
+kubeadm init <args>
+```
+
+<!--
+### Considerations about apiserver-advertise-address and ControlPlaneEndpoint
+-->
+### 关于 apiserver-advertise-address 和 ControlPlaneEndpoint 的注意事项
+
+<!--
+While `--apiserver-advertise-address` can be used to set the advertise address for this particular
+control-plane node's API server, `--control-plane-endpoint` can be used to set the shared endpoint
+for all control-plane nodes.
+-->
+`--apiserver-advertise-address`  可用于为控制平面节点的 API server 设置广播地址，
+`--control-plane-endpoint` 可用于为所有控制平面节点设置共享端点。
+
+<!--
+`--control-plane-endpoint` allows both IP addresses and DNS names that can map to IP addresses.
+Please contact your network administrator to evaluate possible solutions with respect to such mapping.
+-->
+`--control-plane-endpoint` 允许 IP 地址和可以映射到 IP 地址的 DNS 名称。
+请与你的网络管理员联系，以评估有关此类映射的可能解决方案。
+
+<!--
+Here is an example mapping:
+-->
+这是一个示例映射：
+
+```
+192.168.0.102 cluster-endpoint
+```
+
+<!--
+Where `192.168.0.102` is the IP address of this node and `cluster-endpoint` is a custom DNS name that maps to this IP.
+This will allow you to pass `--control-plane-endpoint=cluster-endpoint` to `kubeadm init` and pass the same DNS name to
+`kubeadm join`. Later you can modify `cluster-endpoint` to point to the address of your load-balancer in an
+high availability scenario.
+-->
+其中 `192.168.0.102` 是此节点的 IP 地址，`cluster-endpoint` 是映射到该 IP 的自定义 DNS 名称。
+这将允许你将 `--control-plane-endpoint=cluster-endpoint` 传递给 `kubeadm init`，并将相同的 DNS 名称传递给 `kubeadm join`。
+稍后你可以修改 `cluster-endpoint` 以指向高可用性方案中的负载均衡器的地址。
+
+<!--
+Turning a single control plane cluster created without `--control-plane-endpoint` into a highly available cluster
+is not supported by kubeadm.
+-->
+kubeadm 不支持将没有 `--control-plane-endpoint` 参数的单个控制平面集群转换为高可用性集群。
+
+<!--
+### More information
+-->
+### 更多信息
+
+<!--
+For more information about `kubeadm init` arguments, see the [kubeadm reference guide](/docs/reference/setup-tools/kubeadm/kubeadm/).
+-->
+有关 `kubeadm init` 参数的更多信息，请参见 [kubeadm 参考指南](/zh/docs/reference/setup-tools/kubeadm/kubeadm/)。
+
+<!--
+For a complete list of configuration options, see the [configuration file documentation](/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file).
+-->
+有关配置选项的完整列表，请参见[配置文件文档](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init/#config-file)。
+
+<!--
+To customize control plane components, including optional IPv6 assignment to liveness probe for control plane components and etcd server, provide extra arguments to each component as documented in [custom arguments](/docs/setup/production-environment/tools/kubeadm/control-plane-flags/).
+-->
+要自定义控制平面组件，包括可选的对控制平面组件和 etcd 服务器的活动探针提供 IPv6 支持，请参阅[自定义参数](/zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags/)。
+
+<!--
+To run `kubeadm init` again, you must first [tear down the cluster](#tear-down).
+-->
+要再次运行 `kubeadm init`，你必须首先[卸载集群](#tear-down)。
+
+<!--
+If you join a node with a different architecture to your cluster, make sure that your deployed DaemonSets
+have container image support for this architecture.
+-->
+如果将具有不同架构的节点加入集群，
+请确保已部署的 DaemonSet 对这种体系结构具有容器镜像支持。
+
+
+<!--
+`kubeadm init` first runs a series of prechecks to ensure that the machine
+is ready to run Kubernetes. These prechecks expose warnings and exit on errors. `kubeadm init`
+then downloads and installs the cluster control plane components. This may take several minutes.
+The output should look like:
+-->
+`kubeadm init` 首先运行一系列预检查以确保机器
+准备运行 Kubernetes。这些预检查会显示警告并在错误时退出。然后 `kubeadm init`
+下载并安装集群控制平面组件。这可能会需要几分钟。
+输出应如下所示：
+
+```none
+[init] Using Kubernetes version: vX.Y.Z
+[preflight] Running pre-flight checks
+[preflight] Pulling images required for setting up a Kubernetes cluster
+[preflight] This might take a minute or two, depending on the speed of your internet connection
+[preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
+[kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env"
+[kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
+[kubelet-start] Activating the kubelet service
+[certs] Using certificateDir folder "/etc/kubernetes/pki"
+[certs] Generating "etcd/ca" certificate and key
+[certs] Generating "etcd/server" certificate and key
+[certs] etcd/server serving cert is signed for DNS names [kubeadm-cp localhost] and IPs [10.138.0.4 127.0.0.1 ::1]
+[certs] Generating "etcd/healthcheck-client" certificate and key
+[certs] Generating "etcd/peer" certificate and key
+[certs] etcd/peer serving cert is signed for DNS names [kubeadm-cp localhost] and IPs [10.138.0.4 127.0.0.1 ::1]
+[certs] Generating "apiserver-etcd-client" certificate and key
+[certs] Generating "ca" certificate and key
+[certs] Generating "apiserver" certificate and key
+[certs] apiserver serving cert is signed for DNS names [kubeadm-cp kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.138.0.4]
+[certs] Generating "apiserver-kubelet-client" certificate and key
+[certs] Generating "front-proxy-ca" certificate and key
+[certs] Generating "front-proxy-client" certificate and key
+[certs] Generating "sa" key and public key
+[kubeconfig] Using kubeconfig folder "/etc/kubernetes"
+[kubeconfig] Writing "admin.conf" kubeconfig file
+[kubeconfig] Writing "kubelet.conf" kubeconfig file
+[kubeconfig] Writing "controller-manager.conf" kubeconfig file
+[kubeconfig] Writing "scheduler.conf" kubeconfig file
+[control-plane] Using manifest folder "/etc/kubernetes/manifests"
+[control-plane] Creating static Pod manifest for "kube-apiserver"
+[control-plane] Creating static Pod manifest for "kube-controller-manager"
+[control-plane] Creating static Pod manifest for "kube-scheduler"
+[etcd] Creating static Pod manifest for local etcd in "/etc/kubernetes/manifests"
+[wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s
+[apiclient] All control plane components are healthy after 31.501735 seconds
+[uploadconfig] storing the configuration used in ConfigMap "kubeadm-config" in the "kube-system" Namespace
+[kubelet] Creating a ConfigMap "kubelet-config-X.Y" in namespace kube-system with the configuration for the kubelets in the cluster
+[patchnode] Uploading the CRI Socket information "/var/run/dockershim.sock" to the Node API object "kubeadm-cp" as an annotation
+[mark-control-plane] Marking the node kubeadm-cp as control-plane by adding the label "node-role.kubernetes.io/master=''"
+[mark-control-plane] Marking the node kubeadm-cp as control-plane by adding the taints [node-role.kubernetes.io/master:NoSchedule]
+[bootstrap-token] Using token: <token>
+[bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles
+[bootstraptoken] configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
+[bootstraptoken] configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token
+[bootstraptoken] configured RBAC rules to allow certificate rotation for all node client certificates in the cluster
+[bootstraptoken] creating the "cluster-info" ConfigMap in the "kube-public" namespace
+[addons] Applied essential addon: CoreDNS
+[addons] Applied essential addon: kube-proxy
+
+Your Kubernetes control-plane has initialized successfully!
+
+To start using your cluster, you need to run the following as a regular user:
+
+  mkdir -p $HOME/.kube
+  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
+  sudo chown $(id -u):$(id -g) $HOME/.kube/config
+
+You should now deploy a Pod network to the cluster.
+Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
+  /docs/concepts/cluster-administration/addons/
+
+You can now join any number of machines by running the following on each node
+as root:
+
+  kubeadm join <control-plane-host>:<control-plane-port> --token <token> --discovery-token-ca-cert-hash sha256:<hash>
+```
+
+<!--
+To make kubectl work for your non-root user, run these commands, which are
+also part of the `kubeadm init` output:
+-->
+要使非 root 用户可以运行 kubectl，请运行以下命令，
+它们也是 `kubeadm init` 输出的一部分：
+
+
+```bash
+mkdir -p $HOME/.kube
+sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
+sudo chown $(id -u):$(id -g) $HOME/.kube/config
+```
+
+<!--
+Alternatively, if you are the `root` user, you can run:
+-->
+或者，如果你是 `root` 用户，则可以运行：
+
+```bash
+export KUBECONFIG=/etc/kubernetes/admin.conf
+```
+
+<!--
+Make a record of the `kubeadm join` command that `kubeadm init` outputs. You
+need this command to [join nodes to your cluster](#join-nodes).
+-->
+记录 `kubeadm init` 输出的 `kubeadm join` 命令。
+你需要此命令[将节点加入集群](#join-nodes)。
+
+<!--
+The token is used for mutual authentication between the control-plane node and the joining
+nodes. The token included here is secret. Keep it safe, because anyone with this
+token can add authenticated nodes to your cluster. These tokens can be listed,
+created, and deleted with the `kubeadm token` command. See the
+[kubeadm reference guide](/docs/reference/setup-tools/kubeadm/kubeadm-token/).
+-->
+令牌用于控制平面节点和加入节点之间的相互身份验证。
+这里包含的令牌是密钥。确保它的安全，
+因为拥有此令牌的任何人都可以将经过身份验证的节点添加到你的集群中。
+可以使用 `kubeadm token` 命令列出，创建和删除这些令牌。
+请参阅 [kubeadm 参考指南](/zh/docs/reference/setup-tools/kubeadm/kubeadm-token/)。
+
+
+<!--
+### Installing a Pod network add-on {#pod-network}
+-->
+### 安装 Pod 网络附加组件 {#pod-network}
+
+{{< caution >}}
+<!--
+This section contains important information about networking setup and
+deployment order.
+Read all of this advice carefully before proceeding.
+-->
+本节包含有关网络设置和部署顺序的重要信息。
+在继续之前，请仔细阅读所有建议。
+
+<!--
+**You must deploy a
+{{< glossary_tooltip text="Container Network Interface" term_id="cni" >}}
+(CNI) based Pod network add-on so that your Pods can communicate with each other.
+Cluster DNS (CoreDNS) will not start up before a network is installed.**
+-->
+**你必须部署一个基于 Pod 网络插件的
+{{< glossary_tooltip text="容器网络接口" term_id="cni" >}}
+(CNI)，以便你的 Pod 可以相互通信。
+在安装网络之前，集群 DNS (CoreDNS) 将不会启动。**
+
+<!--
+- Take care that your Pod network must not overlap with any of the host
+  networks: you are likely to see problems if there is any overlap.
+  (If you find a collision between your network plugin's preferred Pod
+  network and some of your host networks, you should think of a suitable
+  CIDR block to use instead, then use that during `kubeadm init` with
+  `--pod-network-cidr` and as a replacement in your network plugin's YAML).
+-->
+- 注意你的 Pod 网络不得与任何主机网络重叠：
+  如果有重叠，你很可能会遇到问题。
+  （如果你发现网络插件的首选 Pod 网络与某些主机网络之间存在冲突，
+  则应考虑使用一个合适的 CIDR 块来代替，
+  然后在执行 `kubeadm init` 时使用 `--pod-network-cidr` 参数并在你的网络插件的 YAML 中替换它）。
+
+<!--
+- By default, `kubeadm` sets up your cluster to use and enforce use of
+  [RBAC](/docs/reference/access-authn-authz/rbac/) (role based access
+  control).
+  Make sure that your Pod network plugin supports RBAC, and so do any manifests
+  that you use to deploy it.
+-->
+- 默认情况下，`kubeadm` 将集群设置为使用和强制使用 [RBAC](/zh/docs/reference/access-authn-authz/rbac/)（基于角色的访问控制）。
+  确保你的 Pod 网络插件支持 RBAC，以及用于部署它的 manifests 也是如此。
+
+<!--
+- If you want to use IPv6--either dual-stack, or single-stack IPv6 only
+  networking--for your cluster, make sure that your Pod network plugin
+  supports IPv6.
+  IPv6 support was added to CNI in [v0.6.0](https://github.com/containernetworking/cni/releases/tag/v0.6.0).
+-->
+- 如果要为集群使用 IPv6（双协议栈或仅单协议栈 IPv6 网络），
+  请确保你的Pod网络插件支持 IPv6。
+  IPv6 支持已在 CNI [v0.6.0](https://github.com/containernetworking/cni/releases/tag/v0.6.0) 版本中添加。
+{{< /caution >}}
+
+<!--
+Currently Calico is the only CNI plugin that the kubeadm project performs e2e tests against.
+If you find an issue related to a CNI plugin you should log a ticket in its respective issue
+tracker instead of the kubeadm or kubernetes issue trackers.
+-->
+{{< note >}}
+目前 Calico 是 kubeadm 项目中执行 e2e 测试的唯一 CNI 插件。
+如果你发现与 CNI 插件相关的问题，应在其各自的问题跟踪器中记录而不是在 kubeadm 或 kubernetes 问题跟踪器中记录。
+{{< /note >}}
+
+<!--
+Several external projects provide Kubernetes Pod networks using CNI, some of which also
+support [Network Policy](/docs/concepts/services-networking/network-policies/).
+-->
+一些外部项目为 Kubernetes 提供使用 CNI 的 Pod 网络，其中一些还支持[网络策略](/zh/docs/concepts/services-networking/network-policies/)。
+
+<!--
+See a list of add-ons that implement the
+[Kubernetes networking model](/docs/concepts/cluster-administration/networking/#how-to-implement-the-kubernetes-networking-model).
+-->
+请参阅实现 [Kubernetes 网络模型](/zh/docs/concepts/cluster-administration/networking/#how-to-implement-the-kubernetes-networking-model) 的附加组件列表。
+
+<!--
+You can install a Pod network add-on with the following command on the
+control-plane node or a node that has the kubeconfig credentials:
+-->
+你可以使用以下命令在控制平面节点或具有 kubeconfig 凭据的节点上安装 Pod 网络附加组件：
+
+```bash
+kubectl apply -f <add-on.yaml>
+```
+
+<!--
+You can install only one Pod network per cluster.
+-->
+每个集群只能安装一个 Pod 网络。
+
+<!--
+Once a Pod network has been installed, you can confirm that it is working by
+checking that the CoreDNS Pod is `Running` in the output of `kubectl get pods --all-namespaces`.
+And once the CoreDNS Pod is up and running, you can continue by joining your nodes.
+-->
+安装 Pod 网络后，您可以通过在 `kubectl get pods --all-namespaces` 输出中检查 CoreDNS Pod 是否 `Running` 来确认其是否正常运行。
+一旦 CoreDNS Pod 启用并运行，你就可以继续加入节点。
+
+<!--
+If your network is not working or CoreDNS is not in the `Running` state, check out the
+[troubleshooting guide](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)
+for `kubeadm`.
+-->
+如果您的网络无法正常工作或CoreDNS不在“运行中”状态，请查看 `kubeadm` 的[故障排除指南](/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)。
+
+
+<!--
+### Control plane node isolation
+-->
+### 控制平面节点隔离
+
+<!--
+By default, your cluster will not schedule Pods on the control-plane node for security
+reasons. If you want to be able to schedule Pods on the control-plane node, for example for a
+single-machine Kubernetes cluster for development, run:
+-->
+默认情况下，出于安全原因，你的集群不会在控制平面节点上调度 Pod。
+如果你希望能够在控制平面节点上调度 Pod，
+例如用于开发的单机 Kubernetes 集群，请运行：
+
+```bash
+kubectl taint nodes --all node-role.kubernetes.io/master-
+```
+<!--
+With output looking something like:
+-->
+输出看起来像：
+
+```
+node "test-01" untainted
+taint "node-role.kubernetes.io/master:" not found
+taint "node-role.kubernetes.io/master:" not found
+```
+
+<!--
+This will remove the `node-role.kubernetes.io/master` taint from any nodes that
+have it, including the control-plane node, meaning that the scheduler will then be able
+to schedule Pods everywhere.
+-->
+这将从任何拥有 `node-role.kubernetes.io/master` taint 标记的节点中移除该标记，
+包括控制平面节点，这意味着调度程序将能够在任何地方调度 Pods。
+
+
+<!--
+### Joining your nodes {#join-nodes}
+-->
+### 加入节点 {#join-nodes}
+
+<!--
+The nodes are where your workloads (containers and Pods, etc) run. To add new nodes to your cluster do the following for each machine:
+-->
+节点是你的工作负载（容器和 Pod 等）运行的地方。要将新节点添加到集群，请对每台计算机执行以下操作：
+
+<!--
+* SSH to the machine
+* Become root (e.g. `sudo su -`)
+* Run the command that was output by `kubeadm init`. For example:
+-->
+* SSH 到机器
+* 成为 root （例如 `sudo su -`）
+* 运行 `kubeadm init` 输出的命令。例如：
+
+```bash
+kubeadm join --token <token> <control-plane-host>:<control-plane-port> --discovery-token-ca-cert-hash sha256:<hash>
+```
+
+<!--
+If you do not have the token, you can get it by running the following command on the control-plane node:
+-->
+如果没有令牌，可以通过在控制平面节点上运行以下命令来获取令牌：
+
+
+```bash
+kubeadm token list
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于以下内容：
+
+```console
+TOKEN                    TTL  EXPIRES              USAGES           DESCRIPTION            EXTRA GROUPS
+8ewj1p.9r9hcjoqgajrj4gi  23h  2018-06-12T02:51:28Z authentication,  The default bootstrap  system:
+                                                   signing          token generated by     bootstrappers:
+                                                                    'kubeadm init'.        kubeadm:
+                                                                                           default-node-token
+```
+
+<!--
+By default, tokens expire after 24 hours. If you are joining a node to the cluster after the current token has expired,
+you can create a new token by running the following command on the control-plane node:
+-->
+默认情况下，令牌会在24小时后过期。如果要在当前令牌过期后将节点加入集群，
+则可以通过在控制平面节点上运行以下命令来创建新令牌：
+
+
+```bash
+kubeadm token create
+```
+<!--
+The output is similar to this:
+-->
+输出类似于以下内容：
+
+```console
+5didvk.d09sbcov8ph2amjw
+```
+
+<!--
+If you don't have the value of `--discovery-token-ca-cert-hash`, you can get it by running the following command chain on the control-plane node:
+-->
+如果你没有 `--discovery-token-ca-cert-hash` 的值，则可以通过在控制平面节点上执行以下命令链来获取它：
+
+```bash
+openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | \
+   openssl dgst -sha256 -hex | sed 's/^.* //'
+```
+
+<!--
+The output is similar to:
+-->
+输出类似于以下内容：
+
+```console
+8cb2de97839780a412b93877f8507ad6c94f73add17d5d7058e91741c9d5ec78
+```
+
+<!--
+To specify an IPv6 tuple for `<control-plane-host>:<control-plane-port>`, IPv6 address must be enclosed in square brackets, for example: `[fd00::101]:2073`.
+-->
+{{< note >}}
+要为 `<control-plane-host>:<control-plane-port>` 指定 IPv6 元组，必须将 IPv6 地址括在方括号中，例如：`[fd00::101]:2073`
+{{< /note >}}
+
+<!--
+The output should look something like:
+-->
+输出应类似于：
+
+```
+[preflight] Running pre-flight checks
+
+... (log output of join workflow) ...
+
+Node join complete:
+* Certificate signing request sent to control-plane and response
+  received.
+* Kubelet informed of new secure connection details.
+
+Run 'kubectl get nodes' on control-plane to see this machine join.
+```
+
+<!--
+A few seconds later, you should notice this node in the output from `kubectl get
+nodes` when run on the control-plane node.
+-->
+几秒钟后，当你在控制平面节点上执行 `kubectl get nodes`，你会注意到该节点出现在输出中。
+
+<!--
+### (Optional) Controlling your cluster from machines other than the control-plane node
+-->
+### （可选）从控制平面节点以外的计算机控制集群
+
+<!--
+In order to get a kubectl on some other computer (e.g. laptop) to talk to your
+cluster, you need to copy the administrator kubeconfig file from your control-plane node
+to your workstation like this:
+-->
+为了使 kubectl 在其他计算机（例如笔记本电脑）上与你的集群通信，
+你需要将管理员 kubeconfig 文件从控制平面节点复制到工作站，如下所示：
+
+```bash
+scp root@<control-plane-host>:/etc/kubernetes/admin.conf .
+kubectl --kubeconfig ./admin.conf get nodes
+```
+<!--
+The example above assumes SSH access is enabled for root. If that is not the
+case, you can copy the `admin.conf` file to be accessible by some other user
+and `scp` using that other user instead.
+
+The `admin.conf` file gives the user _superuser_ privileges over the cluster.
+This file should be used sparingly. For normal users, it's recommended to
+generate an unique credential to which you grant privileges. You can do
+this with the `kubeadm alpha kubeconfig user --client-name <CN>`
+command. That command will print out a KubeConfig file to STDOUT which you
+should save to a file and distribute to your user. After that, grant
+privileges by using `kubectl create (cluster)rolebinding`.
+-->
+{{< note >}}
+上面的示例假定为 root 用户启用了SSH访问。如果不是这种情况，
+你可以使用 `scp` 将 admin.conf 文件复制给其他允许访问的用户。
+
+admin.conf 文件为用户提供了对集群的超级用户特权。
+该文件应谨慎使用。对于普通用户，建议生成一个你为其授予特权的唯一证书。
+你可以使用 `kubeadm alpha kubeconfig user --client-name <CN>` 命令执行此操作。
+该命令会将 KubeConfig 文件打印到 STDOUT，你应该将其保存到文件并分发给用户。
+之后，使用 `kubectl create (cluster)rolebinding` 授予特权。
+{{< /note >}}
+
+<!--
+### (Optional) Proxying API Server to localhost
+-->
+### （可选）将API服务器代理到本地主机
+
+<!--
+If you want to connect to the API Server from outside the cluster you can use
+`kubectl proxy`:
+-->
+如果要从集群外部连接到 API 服务器，则可以使用 `kubectl proxy`：
+
+```bash
+scp root@<control-plane-host>:/etc/kubernetes/admin.conf .
+kubectl --kubeconfig ./admin.conf proxy
+```
+<!--
+You can now access the API Server locally at `http://localhost:8001/api/v1`
+-->
+你现在可以在本地访问API服务器 http://localhost:8001/api/v1
+
+<!--
+## Clean up {#tear-down}
+-->
+## 清理 {#tear-down}
+
+<!--
+If you used disposable servers for your cluster, for testing, you can
+switch those off and do no further clean up. You can use
+`kubectl config delete-cluster` to delete your local references to the
+cluster.
+-->
+如果你在集群中使用了一次性服务器进行测试，则可以关闭这些服务器，而无需进一步清理。你可以使用 `kubectl config delete-cluster` 删除对集群的本地引用。
+
+<!--
+However, if you want to deprovision your cluster more cleanly, you should
+first [drain the node](/docs/reference/generated/kubectl/kubectl-commands#drain)
+and make sure that the node is empty, then deconfigure the node.
+-->
+但是，如果要更干净地取消配置群集，
+则应首先[清空节点](/zh/docs/reference/generated/kubectl/kubectl-commands#drain)并确保该节点为空，
+然后取消配置该节点。
+
+
+<!--
+### Remove the node
+-->
+### 删除节点
+
+<!--
+Talking to the control-plane node with the appropriate credentials, run:
+-->
+使用适当的凭证与控制平面节点通信，运行：
+
+```bash
+kubectl drain <node name> --delete-local-data --force --ignore-daemonsets
+```
+
+<!--
+Before removing the node, reset the state installed by `kubeadm`:
+-->
+在删除节点之前，请重置 `kubeadm` 安装的状态：
+
+```bash
+kubeadm reset
+```
+
+<!--
+The reset process does not reset or clean up iptables rules or IPVS tables. If you wish to reset iptables, you must do so manually:
+-->
+重置过程不会重置或清除 iptables 规则或 IPVS 表。如果你希望重置 iptables，则必须手动进行：
+
+```bash
+iptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X
+```
+
+<!--
+If you want to reset the IPVS tables, you must run the following command:
+-->
+如果要重置 IPVS 表，则必须运行以下命令：
+
+```bash
+ipvsadm -C
+```
+<!--
+Now remove the node:
+-->
+现在删除节点：
+
+```bash
+kubectl delete node <node name>
+```
+
+<!--
+If you wish to start over simply run `kubeadm init` or `kubeadm join` with the
+appropriate arguments.
+-->
+如果你想重新开始，只需运行 `kubeadm init` 或 `kubeadm join` 并加上适当的参数。
+
+<!--
+### Clean up the control plane
+-->
+### 清理控制平面
+
+<!--
+You can use `kubeadm reset` on the control plane host to trigger a best-effort
+clean up.
+-->
+你可以在控制平面主机上使用 `kubeadm reset` 来触发尽力而为的清理。
+
+<!--
+See the [`kubeadm reset`](/docs/reference/setup-tools/kubeadm/kubeadm-reset/)
+reference documentation for more information about this subcommand and its
+options.
+-->
+有关此子命令及其选项的更多信息，请参见[`kubeadm reset`](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset/)参考文档。
+
+
+<!-- discussion -->
+
+<!--
+## What's next {#whats-next}
+-->
+## 下一步 {#whats-next}
+
+<!--
+* Verify that your cluster is running properly with [Sonobuoy](https://github.com/heptio/sonobuoy)
+* <a id="lifecycle" />See [Upgrading kubeadm clusters](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
+  for details about upgrading your cluster using `kubeadm`.
+* Learn about advanced `kubeadm` usage in the [kubeadm reference documentation](/docs/reference/setup-tools/kubeadm/kubeadm)
+* Learn more about Kubernetes [concepts](/docs/concepts/) and [`kubectl`](/docs/reference/kubectl/overview/).
+* See the [Cluster Networking](/docs/concepts/cluster-administration/networking/) page for a bigger list
+  of Pod network add-ons.
+* <a id="other-addons" />See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to
+  explore other add-ons, including tools for logging, monitoring, network policy, visualization &amp;
+  control of your Kubernetes cluster.
+* Configure how your cluster handles logs for cluster events and from
+  applications running in Pods.
+  See [Logging Architecture](/docs/concepts/cluster-administration/logging/) for
+  an overview of what is involved.
+-->
+* 使用 [Sonobuoy](https://github.com/heptio/sonobuoy) 验证集群是否正常运行
+* <a id="lifecycle" />有关使用kubeadm升级集群的详细信息，请参阅[升级 kubeadm 集群](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)。
+* 在[kubeadm 参考文档](/zh/docs/reference/setup-tools/kubeadm/kubeadm)中了解有关高级 `kubeadm` 用法的信息
+* 了解有关Kubernetes[概念](/zh/docs/concepts/)和[`kubectl`](/zh/docs/reference/kubectl/overview/)的更多信息。
+* 有关Pod网络附加组件的更多列表，请参见[集群网络](/zh/docs/concepts/cluster-administration/networking/)页面。
+* <a id="other-addons" />请参阅[附加组件列表](/zh/docs/concepts/cluster-administration/addons/)以探索其他附加组件，
+  包括用于 Kubernetes 集群的日志记录，监视，网络策略，可视化和控制的工具。
+* 配置集群如何处理集群事件的日志以及
+   在Pods中运行的应用程序。
+  有关所涉及内容的概述，请参见[日志架构](/zh/docs/concepts/cluster-administration/logging/)。
+
+<!--
+### Feedback {#feedback}
+-->
+### 反馈 {#feedback}
+
+<!--
+* For bugs, visit the [kubeadm GitHub issue tracker](https://github.com/kubernetes/kubeadm/issues)
+* For support, visit the
+  [#kubeadm](https://kubernetes.slack.com/messages/kubeadm/) Slack channel
+* General SIG Cluster Lifecycle development Slack channel:
+  [#sig-cluster-lifecycle](https://kubernetes.slack.com/messages/sig-cluster-lifecycle/)
+* SIG Cluster Lifecycle [SIG information](https://github.com/kubernetes/community/tree/master/sig-cluster-lifecycle#readme)
+* SIG Cluster Lifecycle mailing list:
+  [kubernetes-sig-cluster-lifecycle](https://groups.google.com/forum/#!forum/kubernetes-sig-cluster-lifecycle)
+-->
+* 有关 bugs, 访问 [kubeadm GitHub issue tracker](https://github.com/kubernetes/kubeadm/issues)
+* 有关支持, 访问
+  [#kubeadm](https://kubernetes.slack.com/messages/kubeadm/) Slack 频道
+* General SIG 集群生命周期开发 Slack 频道:
+  [#sig-cluster-lifecycle](https://kubernetes.slack.com/messages/sig-cluster-lifecycle/)
+* SIG 集群生命周期 [SIG information](https://github.com/kubernetes/community/tree/master/sig-cluster-lifecycle#readme)
+* SIG 集群生命周期邮件列表:
+  [kubernetes-sig-cluster-lifecycle](https://groups.google.com/forum/#!forum/kubernetes-sig-cluster-lifecycle)
+
+
+<!--
+## Version skew policy {#version-skew-policy}
+-->
+## 版本倾斜政策 {#version-skew-policy}
+
+<!--
+The `kubeadm` tool of version v{{< skew latestVersion >}} may deploy clusters with a control plane of version v{{< skew latestVersion >}} or v{{< skew prevMinorVersion >}}.
+`kubeadm` v{{< skew latestVersion >}} can also upgrade an existing kubeadm-created cluster of version v{{< skew prevMinorVersion >}}.
+-->
+版本 v{{< skew latestVersion >}} 的kubeadm 工具可以使用版本 v{{< skew latestVersion >}} 或 v{{< skew prevMinorVersion >}} 的控制平面部署集群。kubeadm v{{< skew latestVersion >}} 还可以升级现有的 kubeadm 创建的 v{{< skew prevMinorVersion >}} 版本的集群。
+
+<!--
+Due to that we can't see into the future, kubeadm CLI v{{< skew latestVersion >}} may or may not be able to deploy v{{< skew nextMinorVersion >}} clusters.
+-->
+由于没有未来，kubeadm CLI v{{< skew latestVersion >}} 可能会或可能无法部署 v{{< skew nextMinorVersion >}} 集群。
+
+<!--
+These resources provide more information on supported version skew between kubelets and the control plane, and other Kubernetes components:
+-->
+这些资源提供了有关 kubelet 与控制平面以及其他 Kubernetes 组件之间受支持的版本倾斜的更多信息：
+
+<!--
+* Kubernetes [version and version-skew policy](/docs/setup/release/version-skew-policy/)
+* Kubeadm-specific [installation guide](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-kubeadm-kubelet-and-kubectl)
+-->
+* Kubernetes [版本和版本偏斜政策](/zh/docs/setup/release/version-skew-policy/)
+* Kubeadm-specific [安装指南](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-kubeadm-kubelet-and-kubectl)
+
+
+<!--
+## Limitations {#limitations}
+-->
+## 局限性 {#limitations}
+
+<!--
+### Cluster resilience {#resilience}
+-->
+### 集群弹性 {#resilience}
+
+<!--
+The cluster created here has a single control-plane node, with a single etcd database
+running on it. This means that if the control-plane node fails, your cluster may lose
+data and may need to be recreated from scratch.
+-->
+
+此处创建的集群具有单个控制平面节点，运行单个 etcd 数据库。
+这意味着如果控制平面节点发生故障，你的集群可能会丢失数据并且可能需要从头开始重新创建。
+
+<!--
+Workarounds:
+-->
+解决方法:
+
+<!--
+* Regularly [back up etcd](https://coreos.com/etcd/docs/latest/admin_guide.html). The
+  etcd data directory configured by kubeadm is at `/var/lib/etcd` on the control-plane node.
+-->
+* 定期[备份etcd](https://coreos.com/etcd/docs/latest/admin_guide.html)。
+  kubeadm 配置的 etcd 数据目录位于控制平面节点上的 `/var/lib/etcd` 中。
+
+<!--
+* Use multiple control-plane nodes. You can read
+  [Options for Highly Available topology](/docs/setup/production-environment/tools/kubeadm/ha-topology/) to pick a cluster
+  topology that provides [high-availability](/docs/setup/production-environment/tools/kubeadm/high-availability/).
+-->
+* 使用多个控制平面节点。你可以阅读
+  [可选的高可用性拓扑](/zh/docs/setup/production-environment/tools/kubeadm/ha-topology/) 选择集群拓扑提供的
+  [高可用性](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/).
+
+<!--
+### Platform compatibility {#multi-platform}
+-->
+### 平台兼容性 {#multi-platform}
+
+<!--
+kubeadm deb/rpm packages and binaries are built for amd64, arm (32-bit), arm64, ppc64le, and s390x
+following the [multi-platform
+proposal](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/multi-platform.md).
+-->
+kubeadm deb/rpm 软件包和二进制文件是为 amd64，arm (32-bit)，arm64，ppc64le 和 s390x 构建的遵循[多平台提案](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/multi-platform.md)。
+
+<!--
+Multiplatform container images for the control plane and addons are also supported since v1.12.
+-->
+从 v1.12 开始还支持用于控制平面和附加组件的多平台容器镜像。
+
+<!--
+Only some of the network providers offer solutions for all platforms. Please consult the list of
+network providers above or the documentation from each provider to figure out whether the provider
+supports your chosen platform.
+-->
+只有一些网络提供商为所有平台提供解决方案。请查阅上方的
+网络提供商清单或每个提供商的文档以确定提供商是否
+支持你选择的平台。
+
+<!--
+## Troubleshooting {#troubleshooting}
+-->
+## 故障排除 {#troubleshooting}
+
+<!--
+If you are running into difficulties with kubeadm, please consult our [troubleshooting docs](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/).
+-->
+
+如果你在使用kubeadm时遇到困难，请查阅我们的[故障排除文档](/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)。

From 3fda142df9ec8f5697c86f9b1f4cd261587c1304 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 7 Sep 2020 13:35:20 +0800
Subject: [PATCH 232/496] [zh] Fix links in setup section

---
 .../setup-tools/kubeadm/kubeadm-init.md       | 228 +++++++++++-------
 .../tools/kubeadm/create-cluster-kubeadm.md   |   2 +-
 .../tools/kubeadm/ha-topology.md              |   2 +-
 .../tools/kubeadm/high-availability.md        |  24 +-
 .../tools/kubeadm/install-kubeadm.md          |  28 +--
 .../tools/kubeadm/kubelet-integration.md      |   2 +-
 .../kubeadm/setup-ha-etcd-with-kubeadm.md     |   8 +-
 7 files changed, 175 insertions(+), 119 deletions(-)

diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
index b975d3df60..50042ea558 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-init.md
@@ -5,7 +5,6 @@ weight: 20
 ---
 
 <!--
----
 reviewers:
 - mikedanese
 - luxas
@@ -13,9 +12,9 @@ reviewers:
 title: kubeadm init
 content_type: concept
 weight: 20
----
 -->
 <!-- overview -->
+
 <!--
 This command initializes a Kubernetes control-plane node.
 -->
@@ -30,34 +29,52 @@ This command initializes a Kubernetes control-plane node.
 ### Init workflow {#init-workflow}
 -->
 ### Init 命令的工作流程 {#init-workflow}
+
 <!--
 `kubeadm init` bootstraps a Kubernetes control-plane node by executing the
 following steps:
 -->
 `kubeadm init` 命令通过执行下列步骤来启动一个 Kubernetes 控制平面节点。
 
-<!-- 1. Runs a series of pre-flight checks to validate the system state
+<!--
+1. Runs a series of pre-flight checks to validate the system state
    before making changes. Some checks only trigger warnings, others are
    considered errors and will exit kubeadm until the problem is corrected or the
-   user specifies `--ignore-preflight-errors=<list-of-errors>`.  -->
-1.  在做出变更前运行一系列的预检项来验证系统状态。一些检查项目仅仅触发警告，其它的则会被视为错误并且退出 kubeadm，除非问题得到解决或者用户指定了 `--ignore-preflight-errors=<list-of-errors>` 参数。
-<!-- 2. Generates a self-signed CA (or using an existing one if provided) to set up
+   user specifies `-ignore-preflight-errors=<list-of-errors>`.
+-->
+1. 在做出变更前运行一系列的预检项来验证系统状态。一些检查项目仅仅触发警告，
+   其它的则会被视为错误并且退出 kubeadm，除非问题得到解决或者用户指定了
+   `--ignore-preflight-errors=<list-of-errors>` 参数。
+
+<!--
+2. Generates a self-signed CA (or using an existing one if provided) to set up
    identities for each component in the cluster. If the user has provided their
-   own CA cert and/or key by dropping it in the cert directory configured via `--cert-dir`
+   own CA cert and/or key by dropping it in the cert directory configured via `-cert-dir`
    (`/etc/kubernetes/pki` by default) this step is skipped as described in the
    [Using custom certificates](#custom-certificates) document.
-   The APIServer certs will have additional SAN entries for any `--apiserver-cert-extra-sans` arguments, lowercased if necessary. -->
+   The APIServer certs will have additional SAN entries for any `-apiserver-cert-extra-sans` arguments, lowercased if necessary.
+-->
+2. 生成一个自签名的 CA 证书 (或者使用现有的证书，如果提供的话) 来为集群中的每一个组件建立身份标识。
+   如果用户已经通过 `--cert-dir` 配置的证书目录（默认为 `/etc/kubernetes/pki`）提供了他们自己的
+   CA 证书以及/或者密钥，那么将会跳过这个步骤，正如文档[使用自定义证书](#custom-certificates)所述。
+   如果指定了 `--apiserver-cert-extra-sans` 参数, APIServer 的证书将会有额外的 SAN 条目，
+   如果必要的话，将会被转为小写。
 
-2.  生成一个自签名的 CA 证书 (或者使用现有的证书，如果提供的话) 来为集群中的每一个组件建立身份标识。如果用户已经通过 `--cert-dir` 配置的证书目录（默认为 `/etc/kubernetes/pki`）提供了他们自己的 CA 证书以及/或者密钥， 那么将会跳过这个步骤，正如文档[使用自定义证书](#custom-certificates)所述。如果指定了 `--apiserver-cert-extra-sans` 参数, APIServer 的证书将会有额外的 SAN 条目，如果必要的话，将会被转为小写。
-<!-- 3. Writes kubeconfig files in `/etc/kubernetes/`  for
+<!--
+3. Writes kubeconfig files in `/etc/kubernetes/`  for
    the kubelet, the controller-manager and the scheduler to use to connect to the
    API server, each with its own identity, as well as an additional
-   kubeconfig file for administration named `admin.conf`. -->
+   kubeconfig file for administration named `admin.conf`.
+-->
+3. 将 kubeconfig 文件写入 `/etc/kubernetes/` 目录以便 kubelet、控制器管理器和调度器用来连接到
+   API 服务器，它们每一个都有自己的身份标识，同时生成一个名为 `admin.conf` 的独立的 kubeconfig
+   文件，用于管理操作。
 
-3.  将 kubeconfig 文件写入 `/etc/kubernetes/` 目录以便 kubelet、控制器管理器和调度器用来连接到 API 服务器，它们每一个都有自己的身份标识，同时生成一个名为 `admin.conf` 的独立的 kubeconfig 文件，用于管理操作。
-<!-- 4. Generates static Pod manifests for the API server,controller-manager and scheduler. In case an external etcd is not provided,an additional static Pod manifest is generated for etcd. -->
-
-4.  为 API 服务器、控制器管理器和调度器生成静态 Pod 的清单文件。假使没有提供一个外部的 etcd 服务的话，也会为 etcd 生成一份额外的静态 Pod 清单文件。
+<!--
+4. Generates static Pod manifests for the API server,controller-manager and scheduler. In case an external etcd is not provided,an additional static Pod manifest is generated for etcd.
+-->
+4. 为 API 服务器、控制器管理器和调度器生成静态 Pod 的清单文件。假使没有提供一个外部的 etcd
+   服务的话，也会为 etcd 生成一份额外的静态 Pod 清单文件。
 
 <!--
 Static Pod manifests are written to `/etc/kubernetes/manifests`; the kubelet watches this directory for Pods to create on startup.
@@ -68,15 +85,29 @@ Once control plane Pods are up and running, the `kubeadm init` sequence can cont
 
 一旦控制平面的 Pod 都运行起来， `kubeadm init` 的工作流程就继续往下执行。
 
-<!-- 1. Apply labels and taints to the control-plane node so that no additional workloads will
-run there. -->1.  对控制平面节点应用 labels 和 taints 标记以便不会在它上面运行其它的工作负载。
+<!--
+1. Apply labels and taints to the control-plane node so that no additional workloads will
+run there.
+-->
+1. 对控制平面节点应用 labels 和 taints 标记以便不会在它上面运行其它的工作负载。
 
-<!-- 2. Generates the token that additional nodes can use to register themselves with a control-plane in the future. Optionally, the user can provide a token via `--token`, as described in the [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token/) docs. -->2.  生成令牌以便其它节点以后可以使用这个令牌向控制平面节点注册它们自己。(可选)，用户可以通过 `--token` 提供一个令牌，正如文档 [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token/) 所述。
+<!--
+2. Generates the token that additional nodes can use to register themselves with a control-plane in the future. Optionally, the user can provide a token via `-token`, as described in the [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token/) docs.
+-->
+2. 生成令牌以便其它节点以后可以使用这个令牌向控制平面节点注册它们自己。
+   (可选)，用户可以通过 `--token` 提供一个令牌，正如文档
+   [kubeadm token](/zh/docs/reference/setup-tools/kubeadm/kubeadm-token/) 所述。
 
-<!-- 3. Makes all the necessary configurations for allowing node joining with the [Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/) and [TLS Bootstrap](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) mechanism:
+<!--
+3. Makes all the necessary configurations for allowing node joining with the [Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/) and [TLS Bootstrap](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) mechanism:
 - Write a ConfigMap for making available all the information required for joining, and set up related RBAC access rules.
 - Let Bootstrap Tokens access the CSR signing API.
-- Configure auto-approval for new CSR requests. -->3.  为了使得节点能够遵照 [Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/) 和 [TLS Bootstrap](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) 这两份文档中描述的机制加入到集群中，kubeadm 会执行所有的必要配置：
+- Configure auto-approval for new CSR requests.
+-->
+3. 为了使得节点能够遵照[启动引导令牌](/zh/docs/reference/access-authn-authz/bootstrap-tokens/)
+   和 [TLS 启动引导](/zh/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)
+   这两份文档中描述的机制加入到集群中，kubeadm 会执行所有的必要配置：
+
    - 创建一份 ConfigMap 提供添加集群节点所需的信息，并为该 ConfigMap 设置相关的 RBAC 访问规则。
    - 使得 Bootstrap Tokens 可以访问 CSR 签名 API。
    - 对新的 CSR 请求配置为自动签发。
@@ -84,7 +115,7 @@ run there. -->1.  对控制平面节点应用 labels 和 taints 标记以便不
 <!--
 See [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/) for additional info.
 -->
-查阅[kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/)文档以获取更多信息。
+查阅[kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/)文档以获取更多信息。
 
 <!-- 
 1. Installs a DNS server (CoreDNS) and the kube-proxy addon components via the API server.
@@ -94,7 +125,8 @@ See [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/) for additi
    Please note that although the DNS server is deployed, it will not be scheduled until CNI is installed. -->
 1.  通过 API 服务器安装一个 DNS 服务器 (CoreDNS) 和 kube-proxy 附加组件。
    在 1.11 版本以及更新版本的 Kubernetes 中 CoreDNS 是默认的 DNS 服务器。
-   要安装 kube-dns 而不是 CoreDNS，必须在 kubeadm `ClusterConfiguration` 中配置 DNS 插件。有关配置的更多信息，请参见下面的 `Using kubeadm init with a configuration file` 一节。
+   要安装 kube-dns 而不是 CoreDNS，必须在 kubeadm `ClusterConfiguration` 中配置 DNS 插件。
+   有关配置的更多信息，请参见下面的"带配置文件使用 kubeadm init" 一节。
    请注意，尽管已部署 DNS 服务器，但直到安装 CNI 时才调度它。
 
 <!--
@@ -105,10 +137,10 @@ See [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/) for additi
 <!--
 Kubeadm allows you to create a control-plane node in phases using the `kubeadm init phase` command.
 -->
-Kubeadm 允许您使用 `kubeadm init phase` 命令分阶段创建控制平面节点。
+Kubeadm 允许你使用 `kubeadm init phase` 命令分阶段创建控制平面节点。
 
 <!--
-To view the ordered list of phases and sub-phases you can call `kubeadm init --help`. The list will be located at the top of the help screen and each phase will have a description next to it.
+To view the ordered list of phases and sub-phases you can call `kubeadm init -help`. The list will be located at the top of the help screen and each phase will have a description next to it.
 Note that by calling `kubeadm init` all of the phases and sub-phases will be executed in this exact order.
 -->
 要查看阶段和子阶段的有序列表，可以调用 `kubeadm init --help`。
@@ -116,7 +148,7 @@ Note that by calling `kubeadm init` all of the phases and sub-phases will be exe
 注意，通过调用 `kubeadm init`，所有阶段和子阶段都将按照此确切顺序执行。
 
 <!--
-Some phases have unique flags, so if you want to have a look at the list of available options add `--help`, for example:
+Some phases have unique flags, so if you want to have a look at the list of available options add `-help`, for example:
 -->
 某些阶段具有唯一的标志，因此，如果要查看可用选项的列表，请添加 `--help`，例如：
 
@@ -125,18 +157,19 @@ sudo kubeadm init phase control-plane controller-manager --help
 ```
 
 <!--
-You can also use `--help` to see the list of sub-phases for a certain parent phase:
+You can also use `-help` to see the list of sub-phases for a certain parent phase:
 -->
-您也可以使用 `--help` 查看特定父阶段的子阶段列表：
+你也可以使用 `--help` 查看特定父阶段的子阶段列表：
 
 ```shell
 sudo kubeadm init phase control-plane --help
 ```
 
 <!--
-`kubeadm init` also exposes a flag called `--skip-phases` that can be used to skip certain phases. The flag accepts a list of phase names and the names can be taken from the above ordered list.
+`kubeadm init` also exposes a flag called `-skip-phases` that can be used to skip certain phases. The flag accepts a list of phase names and the names can be taken from the above ordered list.
 -->
-`kubeadm init` 还公开了一个名为 `--skip-phases` 的参数，该参数可用于跳过某些阶段。参数接受阶段名称列表，并且这些名称可以从上面的有序列表中获取。
+`kubeadm init` 还公开了一个名为 `--skip-phases` 的参数，该参数可用于跳过某些阶段。
+参数接受阶段名称列表，并且这些名称可以从上面的有序列表中获取。
 
 <!--
 An example:
@@ -149,32 +182,37 @@ An example:
 ```shell
 sudo kubeadm init phase control-plane all --config=configfile.yaml
 sudo kubeadm init phase etcd local --config=configfile.yaml
-# 您现在可以修改控制平面和 etcd 清单文件
+# 你现在可以修改控制平面和 etcd 清单文件
 sudo kubeadm init --skip-phases=control-plane,etcd --config=configfile.yaml
 ```
 
 <!--
-What this example would do is write the manifest files for the control plane and etcd in `/etc/kubernetes/manifests` based on the configuration in `configfile.yaml`. This allows you to modify the files and then skip these phases using `--skip-phases`. By calling the last command you will create a control plane node with the custom manifest files.
+What this example would do is write the manifest files for the control plane and etcd in `/etc/kubernetes/manifests` based on the configuration in `configfile.yaml`. This allows you to modify the files and then skip these phases using `-skip-phases`. By calling the last command you will create a control plane node with the custom manifest files.
 -->
-该示例将执行的操作是基于 `configfile.yaml` 中的配置在 `/etc/kubernetes/manifests` 中写入控制平面和 etcd 的清单文件。这允许您修改文件，然后使用 `--skip-phases` 跳过这些阶段。通过调用最后一个命令，您将使用自定义清单文件创建一个控制平面节点。
+该示例将执行的操作是基于 `configfile.yaml` 中的配置在 `/etc/kubernetes/manifests` 
+中写入控制平面和 etcd 的清单文件。
+这允许你修改文件，然后使用 `--skip-phases` 跳过这些阶段。
+通过调用最后一个命令，你将使用自定义清单文件创建一个控制平面节点。
 
 <!--
 ### Using kubeadm init with a configuration file {#config-file}
 -->
 ### 结合一份配置文件来使用 kubeadm init {#config-file}
 
-{{< caution >}}
 <!--
 The config file is still considered beta and may change in future versions.
--->配置文件的功能仍然处于 alpha 状态并且在将来的版本中可能会改变。
+-->
+{{< caution >}}
+配置文件的功能仍然处于 alpha 状态并且在将来的版本中可能会改变。
 {{< /caution >}}
 
 <!--
 It's possible to configure `kubeadm init` with a configuration file instead of command
 line flags, and some more advanced features may only be available as
-configuration file options. This file is passed with the `--config` option.
+configuration file options. This file is passed with the `-config` option.
 -->
-通过一份配置文件而不是使用命令行参数来配置 `kubeadm init` 命令是可能的，但是一些更加高级的功能只能够通过配置文件设定。这份配置文件通过 `--config` 选项参数指定。
+通过一份配置文件而不是使用命令行参数来配置 `kubeadm init` 命令是可能的，
+但是一些更加高级的功能只能够通过配置文件设定。这份配置文件通过 `--config` 选项参数指定。
 
 <!--
 The default configuration can be printed out using the
@@ -186,11 +224,13 @@ the [kubeadm config migrate](/docs/reference/setup-tools/kubeadm/kubeadm-config/
 For more details on each field in the `v1beta2` configuration you can navigate to our
 [API reference pages](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2).
 -->
-可以使用[kubeadm config print](/docs/reference/setup-tools/kubeadm/kubeadm-config/)命令打印出默认配置。
+可以使用 [kubeadm config print](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)命令打印出默认配置。
 
-**推荐**使用[kubeadm config migrate](/docs/reference/setup-tools/kubeadm/kubeadm-config/)命令将旧的 `v1beta1` 版本的配置迁移到 `v1beta2` 版本。
+**推荐**使用 [kubeadm config migrate](/zh/docs/reference/setup-tools/kubeadm/kubeadm-config/)
+命令将旧的 `v1beta1` 版本的配置迁移到 `v1beta2` 版本。
 
-获取 `v1beta2` 版本配置中每个字段的细节说明，查看我们的[API 参考页面](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)。
+获取 `v1beta2` 版本配置中每个字段的细节说明，查看我们的
+[API 参考页面](https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2)。
 
 <!--
 ### Adding kube-proxy parameters {#kube-proxy}
@@ -219,7 +259,7 @@ kubeadm 配置中有关 kube-proxy 的说明请查看：
 For information about passing flags to control plane components see:
 - [control-plane-flags](/docs/setup/production-environment/tools/kubeadm/control-plane-flags/) -->
 有关向控制平面组件传递命令行参数的说明请查看：
-[控制平面命令行参数](/docs/setup/production-environment/tools/kubeadm/control-plane-flags/)
+[控制平面命令行参数](//zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags/)
 
 <!--
 ### Using custom images {#custom-images}
@@ -231,13 +271,13 @@ By default, kubeadm pulls images from `k8s.gcr.io`. If the
 requested Kubernetes version is a CI label (such as `ci/latest`)
 `gcr.io/kubernetes-ci-images` is used.
 -->
-默认情况下, kubeadm 会从 `k8s.gcr.io` 仓库拉取镜像。如果请求的 Kubernetes 版本是 CI label (例如 `ci/latest`)，则使用 `gcr.io/kubernetes-ci-images`。
+默认情况下, kubeadm 会从 `k8s.gcr.io` 仓库拉取镜像。如果请求的 Kubernetes 版本是 CI 标签
+（例如 `ci/latest`），则使用 `gcr.io/kubernetes-ci-images`。
 
 <!--
 You can override this behavior by using [kubeadm with a configuration file](#config-file).
 -->
-
-您可以通过使用[带有配置文件的 kubeadm](#config-file)来重写此操作。
+你可以通过使用[带有配置文件的 kubeadm](#config-file)来重写此操作。
 
 <!--
 Allowed customization are:
@@ -247,7 +287,6 @@ Allowed customization are:
 * To set `useHyperKubeImage` to `true` to use the HyperKube image.
 * To provide a specific `imageRepository` and `imageTag` for etcd or DNS add-on.
 -->
-
 允许的自定义功能有：
 
 * 使用其他的 `imageRepository` 来代替 `k8s.gcr.io`。
@@ -256,9 +295,10 @@ Allowed customization are:
 
 <!--
 Please note that the configuration field `kubernetesVersion` or the command line flag
-`--kubernetes-version` affect the version of the images.
+`-kubernetes-version` affect the version of the images.
 -->
-请注意配置文件中的配置项 `kubernetesVersion` 或者命令行参数 `--kubernetes-version` 会影响到镜像的版本。
+请注意配置文件中的配置项 `kubernetesVersion` 或者命令行参数 `--kubernetes-version`
+会影响到镜像的版本。
 
 <!--
 ### Uploading control-plane certificates to the cluster
@@ -266,14 +306,17 @@ Please note that the configuration field `kubernetesVersion` or the command line
 ### 将控制平面证书上传到集群
 
 <!--
-By adding the flag `--upload-certs` to `kubeadm init` you can temporary upload
+By adding the flag `-upload-certs` to `kubeadm init` you can temporary upload
 the control-plane certificates to a Secret in the cluster. Please note that this Secret
 will expire automatically after 2 hours. The certificates are encrypted using
-a 32byte key that can be specified using `--certificate-key`. The same key can be used
+a 32byte key that can be specified using `-certificate-key`. The same key can be used
 to download the certificates when additional control-plane nodes are joining, by passing
-`--control-plane` and `--certificate-key` to `kubeadm join`.
+`-control-plane` and `-certificate-key` to `kubeadm join`.
 -->
-通过将参数 `--upload-certs` 添加到 `kubeadm init`，您可以将控制平面证书临时上传到集群中的 Secret。请注意，此 Secret 将在 2 小时后自动过期。证书使用 32 字节密钥加密，可以使用 `--certificate-key` 指定。通过将 `--control-plane` 和 `--certificate-key` 传递给 `kubeadm join`，可以在添加其他控制平面节点时使用相同的密钥下载证书。
+通过将参数 `--upload-certs` 添加到 `kubeadm init`，你可以将控制平面证书临时上传到集群中的 Secret。
+请注意，此 Secret 将在 2 小时后自动过期。证书使用 32 字节密钥加密，可以使用 `--certificate-key` 指定。
+通过将 `--control-plane` 和 `--certificate-key` 传递给 `kubeadm join`，
+可以在添加其他控制平面节点时使用相同的密钥下载证书。
 
 <!--
 The following phase command can be used to re-upload the certificates after expiration:
@@ -285,10 +328,11 @@ kubeadm init phase upload-certs --upload-certs --certificate-key=SOME_VALUE
 ```
 
 <!--
-If the flag `--certificate-key` is not passed to `kubeadm init` and
+If the flag `-certificate-key` is not passed to `kubeadm init` and
 `kubeadm init phase upload-certs` a new key will be generated automatically.
 -->
-如果未将参数 `--certificate-key` 传递给 `kubeadm init` 和 `kubeadm init phase upload-certs`，则会自动生成一个新密钥。
+如果未将参数 `--certificate-key` 传递给 `kubeadm init` 和 `kubeadm init phase upload-certs`，
+则会自动生成一个新密钥。
 
 <!--
 The following command can be used to generate a new key on demand:
@@ -313,10 +357,11 @@ You can override this behavior by providing your own certificates.
 
 <!--
 To do so, you must place them in whatever directory is specified by the
-`--cert-dir` flag or `CertificatesDir` configuration file key. By default this
+`-cert-dir` flag or `CertificatesDir` configuration file key. By default this
 is `/etc/kubernetes/pki`.
 -->
-如果要这样做, 你必须将证书文件放置在通过 `--cert-dir` 命令行参数或者配置文件里的 `CertificatesDir` 配置项指明的目录中。默认的值是 `/etc/kubernetes/pki`。
+如果要这样做, 你必须将证书文件放置在通过 `--cert-dir` 命令行参数或者配置文件里的
+`CertificatesDir` 配置项指明的目录中。默认的值是 `/etc/kubernetes/pki`。
 
 <!--
 If a given certificate and private key pair exists before running `kubeadm init`,
@@ -324,7 +369,9 @@ kubeadm will not overwrite them. This means you can, for example, copy an existi
 CA into `/etc/kubernetes/pki/ca.crt` and `/etc/kubernetes/pki/ca.key`,
 and kubeadm will use this CA for signing the rest of the certificates.
 -->
-如果在运行 `kubeadm init` 之前存在给定的证书和私钥对，则 kubeadm 将不会重写它们。例如，这意味着您可以将现有的 CA 复制到 `/etc/kubernetes/pki/ca.crt` 和 `/etc/kubernetes/pki/ca.key` 中，而 kubeadm 将使用此 CA 对其余证书进行签名。
+如果在运行 `kubeadm init` 之前存在给定的证书和私钥对，则 kubeadm 将不会重写它们。
+例如，这意味着你可以将现有的 CA 复制到 `/etc/kubernetes/pki/ca.crt` 和
+`/etc/kubernetes/pki/ca.key` 中，而 kubeadm 将使用此 CA 对其余证书进行签名。
 
 <!--
 #### External CA mode {#external-ca-mode}
@@ -339,13 +386,15 @@ this condition and activates the "External CA" mode. kubeadm will proceed withou
 CA key on disk.
 -->
 如果只提供了 `ca.crt` 文件但是没有提供 `ca.key` 文件也是可以的 (这只对 CA 根证书可用，其它证书不可用)。
-如果所有的其它证书和 kubeconfig 文件已就绪， kubeadm 检测到满足以上条件就会激活 "外部 CA" 模式。kubeadm 将会在没有 CA 密钥文件的情况下继续执行。
+如果所有的其它证书和 kubeconfig 文件已就绪， kubeadm 检测到满足以上条件就会激活 "外部 CA" 模式。
+kubeadm 将会在没有 CA 密钥文件的情况下继续执行。
 
 <!--
-Instead, run the controller-manager standalone with `--controllers=csrsigner` and
+Instead, run the controller-manager standalone with `-controllers=csrsigner` and
 point to the CA certificate and key.
 -->
-否则, kubeadm 将独立运行 controller-manager，附加一个 `--controllers=csrsigner` 的参数，并且指明 CA 证书和密钥。
+否则, kubeadm 将独立运行 controller-manager，附加一个 `--controllers=csrsigner` 的参数，
+并且指明 CA 证书和密钥。
 
 <!--
 ### Managing the kubeadm drop-in file for the kubelet {#kubelet-drop-in}
@@ -355,12 +404,15 @@ point to the CA certificate and key.
 <!--
 The `kubeadm` package ships with a configuration file for running the `kubelet` by `systemd`. Note that the kubeadm CLI never touches this drop-in file. This drop-in file is part of the kubeadm DEB/RPM package.
 -->
-`kubeadm` 包自带了关于 `systemd` 如何运行 `kubelet` 的配置文件。请注意 `kubeadm` 客户端命令行工具永远不会修改这份 `systemd` 配置文件。这份 `systemd` 配置文件属于 kubeadm DEB/RPM 包。
+`kubeadm` 包自带了关于 `systemd` 如何运行 `kubelet` 的配置文件。
+请注意 `kubeadm` 客户端命令行工具永远不会修改这份 `systemd` 配置文件。
+这份 `systemd` 配置文件属于 kubeadm DEB/RPM 包。
 
 <!--
 For further information, see [Managing the kubeadm drop-in file for systemd](/docs/setup/production-environment/tools/kubeadm/kubelet-integration/#the-kubelet-drop-in-file-for-systemd).
 -->
-有关更多信息，请阅读[管理 systemd 的 kubeadm 内嵌文件](/docs/setup/production-environment/tools/kubeadm/kubelet-integration/#the-kubelet-drop-in-file-for-systemd)。
+有关更多信息，请阅读
+[管理 systemd 的 kubeadm 内嵌文件](/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration/#the-kubelet-drop-in-file-for-systemd)。
 
 <!--
 ### Use kubeadm with CRI runtimes
@@ -371,7 +423,8 @@ For further information, see [Managing the kubeadm drop-in file for systemd](/do
 By default kubeadm attempts to detect your container runtime. For more details on this detection, see
 the [kubeadm CRI installation guide](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-runtime).
 -->
-默认情况下，kubeadm 尝试检测您的容器运行环境。有关此检测的更多详细信息，请参见[kubeadm CRI 安装指南](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-runtime)。
+默认情况下，kubeadm 尝试检测你的容器运行环境。有关此检测的更多详细信息，请参见
+[kubeadm CRI 安装指南](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#installing-runtime)。
 
 <!--
 ### Setting the node name
@@ -379,12 +432,14 @@ the [kubeadm CRI installation guide](/docs/setup/production-environment/tools/ku
 ### 设置节点的名称
 
 <!--
-By default, `kubeadm` assigns a node name based on a machine's host address. You can override this setting with the `--node-name` flag.
-The flag passes the appropriate [`--hostname-override`](/docs/reference/command-line-tools-reference/kubelet/#options)
+By default, `kubeadm` assigns a node name based on a machine's host address. You can override this setting with the `-node-name` flag.
+The flag passes the appropriate [`-hostname-override`](/docs/reference/command-line-tools-reference/kubelet/#options)
 value to the kubelet.
 -->
 默认情况下, `kubeadm` 基于机器的主机地址分配一个节点名称。你可以使用 `--node-name` 参数覆盖此设置。
-注意覆盖主机名称可能会[干扰到云服务提供商](https://github.com/kubernetes/website/pull/8873)。
+此标识将合适的
+[`--hostname-override`](/zh/docs/reference/command-line-tools-reference/kubelet/#options)
+值传递给 kubelet。
 
 <!--
 ### Running kubeadm without an internet connection
@@ -394,12 +449,12 @@ value to the kubelet.
 <!--
 For running kubeadm without an internet connection you have to pre-pull the required control-plane images.
 -->
-要在没有互联网连接的情况下运行 kubeadm，您必须提前拉取所需的控制平面镜像。
+要在没有互联网连接的情况下运行 kubeadm，你必须提前拉取所需的控制平面镜像。
 
 <!--
 You can list and pull the images using the `kubeadm config images` sub-command:
 -->
-您可以使用 `kubeadm config images` 子命令列出并拉取镜像：
+你可以使用 `kubeadm config images` 子命令列出并拉取镜像：
 
 ```shell
 kubeadm config images list
@@ -423,13 +478,16 @@ token distribution for easier automation. To implement this automation, you must
 know the IP address that the control-plane node will have after it is started,
 or use a DNS name or an address of a load balancer.
 -->
-不必像文档[kubeadm 基础教程](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)所述，将从 `kubeadm init` 取得的令牌复制到每个节点，而是简单自动地并行化令牌分发。要实现自动化，您必须知道控制平面节点启动后将拥有的 IP 地址，或使用 DNS 名称或负载均衡器的地址。
-
+不必像文档[kubeadm 基础教程](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)所述，
+将从 `kubeadm init` 取得的令牌复制到每个节点，你可以并行地分发令牌以实现简单自动化。要实现自动化，
+你必须知道控制平面节点启动后将拥有的 IP 地址，或使用 DNS 名称或负载均衡器的地址。
 
 <!--
 1.  Generate a token. This token must have the form  `<6 character string>.<16
 character string>`. More formally, it must match the regex: `[a-z0-9]{6}\.[a-z0-9]{16}`.
-kubeadm can generate a token for you: -->1.  生成一个令牌。这个令牌必须具有以下格式：`< 6 个字符的字符串>.< 16 个字符的字符串>`。更加正式的说法是，它必须符合以下正则表达式：`[a-z0-9]{6}\.[a-z0-9]{16}`。
+kubeadm can generate a token for you: -->
+1. 生成一个令牌。这个令牌必须具有以下格式：`< 6 个字符的字符串>.< 16 个字符的字符串>`。
+   更加正式的说法是，它必须符合以下正则表达式：`[a-z0-9]{6}\.[a-z0-9]{16}`。
    kubeadm 可以为你生成一个令牌：
 
    ```shell
@@ -438,11 +496,16 @@ kubeadm can generate a token for you: -->1.  生成一个令牌。这个令牌
 
 <!--
 2.  Start both the control-plane node and the worker nodes concurrently with this token.
-As they come up they should find each other and form the cluster. The same `--token` argument can be used on both `kubeadm init` and `kubeadm join`. 
--->2.  使用这个令牌同时启动控制平面节点和工作节点。它们一旦运行起来应该就会互相寻找对方并且建立集群。同样的 `--token` 参数可以同时用于 `kubeadm init` 和 `kubeadm join` 命令。
+As they come up they should find each other and form the cluster. The same `-token` argument can be used on both `kubeadm init` and `kubeadm join`. 
+-->
+2. 使用这个令牌同时启动控制平面节点和工作节点。它们一旦运行起来应该就会互相寻找对方并且建立集群。
+   同样的 `--token` 参数可以同时用于 `kubeadm init` 和 `kubeadm join` 命令。
+
+<!--
+3.  Similar can be done for `-certificate-key` when joining additional control-plane nodes. The key can be generated using:
+-->
+3. 当加入其他控制平面节点时，可以对 `--certificate-key` 执行类似的操作。可以使用以下方式生成密钥：
 
-<!-- 3.  Similar can be done for `--certificate-key` when joining additional control-plane nodes. The key can be generated using: -->3.  当加入其他控制平面节点时，可以对 `--certificate-key` 执行类似的操作。可以使用以下方式生成密钥：
-   
    ```shell
    kubeadm alpha certs certificate-key
    ```
@@ -451,17 +514,18 @@ As they come up they should find each other and form the cluster. The same `--to
 Once the cluster is up, you can grab the admin credentials from the control-plane node
 at `/etc/kubernetes/admin.conf` and use that to talk to the cluster.
 -->
-一旦集群启动起来，你就可以从控制平面节点的 `/etc/kubernetes/admin.conf` 文件获取管理凭证，然后你就可以使用这个凭证同集群通信。
+一旦集群启动起来，你就可以从控制平面节点的 `/etc/kubernetes/admin.conf` 文件获取管理凭证，
+并使用这个凭证同集群通信。
 
 <!--
 Note that this style of bootstrap has some relaxed security guarantees because
 it does not allow the root CA hash to be validated with
-`--discovery-token-ca-cert-hash` (since it's not generated when the nodes are
+`-discovery-token-ca-cert-hash` (since it's not generated when the nodes are
 provisioned). For details, see the [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/).
 -->
-注意这种搭建集群的方式在安全保证上会有一些宽松，因为这种方式不允许使用 `--discovery-token-ca-cert-hash` 来验证根 CA 的哈希值（因为当配置节点的时候，它还没有被生成）。获取需更多信息请参阅[kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/)文档。
-
-
+注意这种搭建集群的方式在安全保证上会有一些宽松，因为这种方式不允许使用 `--discovery-token-ca-cert-hash` 
+来验证根 CA 的哈希值（因为当配置节点的时候，它还没有被生成）。
+更多信息请参阅[kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/)文档。
 
 ## {{% heading "whatsnext" %}}
 
@@ -472,8 +536,8 @@ provisioned). For details, see the [kubeadm join](/docs/reference/setup-tools/ku
 * [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/) to upgrade a Kubernetes cluster to a newer version
 * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/) to revert any changes made to this host by `kubeadm init` or `kubeadm join`
 -->
-* 了解更多有关[kubeadm init phase](/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/)
-* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/)启动一个 Kubernetes 工作节点并且将其加入到集群
-* [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)将 Kubernetes 集群升级到新版本
-* [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/)使用 `kubeadm init` 或 `kubeadm join` 来恢复对节点的变更
+* 进一步阅读了解[kubeadm init 阶段](/zh/docs/reference/setup-tools/kubeadm/kubeadm-init-phase/)
+* [kubeadm join](/zh/docs/reference/setup-tools/kubeadm/kubeadm-join/)启动一个 Kubernetes 工作节点并且将其加入到集群
+* [kubeadm upgrade](/zh/docs/reference/setup-tools/kubeadm/kubeadm-upgrade/)将 Kubernetes 集群升级到新版本
+* [kubeadm reset](/zh/docs/reference/setup-tools/kubeadm/kubeadm-reset/)使用 `kubeadm init` 或 `kubeadm join` 来恢复对节点的变更
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
index 2aedb5a9e0..b1ed43f952 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm.md
@@ -761,7 +761,7 @@ first [drain the node](/docs/reference/generated/kubectl/kubectl-commands#drain)
 and make sure that the node is empty, then deconfigure the node.
 -->
 但是，如果要更干净地取消配置群集，
-则应首先[清空节点](/zh/docs/reference/generated/kubectl/kubectl-commands#drain)并确保该节点为空，
+则应首先[清空节点](/docs/reference/generated/kubectl/kubectl-commands#drain)并确保该节点为空，
 然后取消配置该节点。
 
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/ha-topology.md b/content/zh/docs/setup/production-environment/tools/kubeadm/ha-topology.md
index f3f41d664d..fb41278c42 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/ha-topology.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/ha-topology.md
@@ -146,6 +146,6 @@ A minimum of three hosts for control plane nodes and three hosts for etcd nodes
 <!--
 - [Set up a highly available cluster with kubeadm](/docs/setup/production-environment/tools/kubeadm/high-availability/)
 -->
- -  [使用 kubeadm 设置高可用集群](/docs/setup/production-environment/tools/kubeadm/high-availability/)
+ -  [使用 kubeadm 设置高可用集群](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)
 
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
index 68003f8445..b0247ec776 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/high-availability.md
@@ -42,12 +42,12 @@ in the kubeadm [issue tracker](https://github.com/kubernetes/kubeadm/issues/new)
 
 See also [The upgrade documentation](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-15).
 -->
-在下一步之前，您应该仔细考虑哪种方法更好的满足您的应用程序和环境的需求。 [这是对比文档](/docs/setup/production-environment/tools/kubeadm/ha-topology/) 讲述了每种方法的优缺点。
+在下一步之前，您应该仔细考虑哪种方法更好的满足您的应用程序和环境的需求。 
+[这是对比文档](/zh/docs/setup/production-environment/tools/kubeadm/ha-topology/) 讲述了每种方法的优缺点。
 
 如果您在安装 HA 集群时遇到问题，请在 kubeadm [问题跟踪](https://github.com/kubernetes/kubeadm/issues/new)里向我们提供反馈。
 
-您也可以阅读 [升级文件](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-15)。
-
+您也可以阅读 [升级文件](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
 <!--
 This page does not address running your cluster on a cloud provider. In a cloud
 environment, neither approach documented here works with Service objects of type
@@ -133,7 +133,6 @@ option. Your cluster requirements may need a different configuration.
     - Read the [Options for Software Load Balancing](https://github.com/kubernetes/kubeadm/blob/master/docs/ha-considerations.md#options-for-software-load-balancing)
       guide for more details.
 -->
-
 1.  创建一个名为 kube-apiserver 的负载均衡器解析 DNS。
 
     - 在云环境中，应该将控制平面节点放置在 TCP 后面转发负载平衡。 该负载均衡器将流量分配给目标列表中所有运行状况良好的控制平面节点。健康检查 apiserver 是在 kube-apiserver 监听端口(默认值 `:6443`)上的一个 TCP 检查。
@@ -161,17 +160,16 @@ option. Your cluster requirements may need a different configuration.
 
 1.  Add the remaining control plane nodes to the load balancer target group.
 -->
+2.  添加第一个控制平面节点到负载均衡器并测试连接：
 
-1.  添加第一个控制平面节点到负载均衡器并测试连接：
-
-    ```sh
+    ```shell
     nc -v LOAD_BALANCER_IP PORT
     ```
 
     - 由于 apiserver 尚未运行，预期会出现一个连接拒绝错误。然而超时意味着负载均衡器不能和控制平面节点通信。
    如果发生超时，请重新配置负载均衡器与控制平面节点进行通信。
 
-1.  将其余控制平面节点添加到负载均衡器目标组。
+3.  将其余控制平面节点添加到负载均衡器目标组。
 
 <!-- ## Stacked control plane and etcd nodes -->
 ## 使用堆控制平面和 etcd 节点
@@ -180,7 +178,6 @@ option. Your cluster requirements may need a different configuration.
 ### 控制平面节点的第一步
 
 <!--
-
 1.  Initialize the control plane:
 
     ```sh
@@ -203,7 +200,6 @@ option. Your cluster requirements may need a different configuration.
     sudo kubeadm init --control-plane-endpoint "LOAD_BALANCER_DNS:LOAD_BALANCER_PORT" --upload-certs
     ```
 
-
     - 您可以使用 `--kubernetes-version` 标志来设置要使用的 Kubernetes 版本。建议将 kubeadm、kebelet、kubectl 和 Kubernetes 的版本匹配。
     - 这个 `--control-plane-endpoint` 标志应该被设置成负载均衡器的地址或 DNS 和端口。
     - 这个 `--upload-certs` 标志用来将在所有控制平面实例之间的共享证书上传到集群。如果正好相反，你更喜欢手动地通过控制平面节点或者使用自动化
@@ -224,7 +220,8 @@ To add a pod CIDR pass the flag `--pod-network-cidr`, or if you are using a kube
 set the `podSubnet` field under the `networking` object of `ClusterConfiguration`.
 -->
 {{< note >}}
-一些 CNI 网络插件如 Calico 需要 CIDR 例如 `192.168.0.0/16` 和一些像 Weave 没有。参考 [CNI 网络文档](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network)。
+一些 CNI 网络插件如 Calico 需要 CIDR 例如 `192.168.0.0/16` 和一些像 Weave 没有。参考
+[CNI 网络文档](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network)。
 通过传递 `--pod-network-cidr` 标志添加 pod CIDR，或者您可以使用 kubeadm 配置文件，在 `ClusterConfiguration` 的 `networking` 对象下设置 `podSubnet` 字段。
 {{< /note >}}
 
@@ -323,7 +320,8 @@ As stated in the command output, the certificate key gives access to cluster sen
 
 -->
 1.  应用您选择的 CNI 插件：
-    [请遵循以下指示](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network) 安装 CNI 提供程序。如果适用，请确保配置与 kubeadm 配置文件中指定的 Pod CIDR 相对应。
+    [请遵循以下指示](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network)
+    安装 CNI 提供程序。如果适用，请确保配置与 kubeadm 配置文件中指定的 Pod CIDR 相对应。
 
     在此示例中，我们使用 Weave Net：
 
@@ -414,7 +412,7 @@ in the kubeadm config file.
 
 ### 设置 ectd 集群
 
-1.  按照 [这些指示](/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/) 去设置 etcd 集群。
+1.  按照 [这些指示](/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm/) 去设置 etcd 集群。
 
 1.  设置 SSH 在 [这](#manual-certs)描述。
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index accb3a5b43..9922918718 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -8,7 +8,6 @@ card:
   title: 安装 kubeadm 设置工具
 ---
 <!--
----
 title: Installing kubeadm
 content_type: task
 weight: 10
@@ -16,7 +15,6 @@ card:
   name: setup
   weight: 20
   title: Install the kubeadm setup tool
----
 -->
 
 <!-- overview -->
@@ -26,13 +24,11 @@ card:
 For information how to create a cluster with kubeadm once you have performed this installation process, see the [Using kubeadm to Create a Cluster](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/) page.
 -->
 <img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">本页面显示如何安装 `kubeadm` 工具箱。
-有关在执行此安装过程后如何使用 kubeadm 创建集群的信息，请参见[使用 kubeadm 创建集群](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/) 页面。
-
-
+有关在执行此安装过程后如何使用 kubeadm 创建集群的信息，请参见
+[使用 kubeadm 创建集群](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/) 页面。
 
 ## {{% heading "prerequisites" %}}
 
-
 <!--
 * One or more machines running one of:
   - Ubuntu 16.04+
@@ -65,7 +61,6 @@ For information how to create a cluster with kubeadm once you have performed thi
 * 禁用交换分区。为了保证 kubelet 正常工作，您 **必须** 禁用交换分区。
 
 
-
 <!-- steps -->
 
 <!--
@@ -187,7 +182,7 @@ documentation for the plugins about what port(s) those need.
 | TCP      | 入站   | 10250       | Kubelet API           | kubelet 自身、控制平面组件     |
 | TCP      | 入站   | 30000-32767 | NodePort 服务**   | 所有组件                     |
 
-** [NodePort 服务](/docs/concepts/services-networking/service/) 的默认端口范围。
+** [NodePort 服务](/zh/docs/concepts/services-networking/service/) 的默认端口范围。
 
 使用 * 标记的任意端口号都可以被覆盖，所以您需要保证所定制的端口是开放的。
 
@@ -255,7 +250,7 @@ Refer to the [CRI installation instructions](/docs/setup/cri) for more informati
 - [cri-o](https://cri-o.io/)
 - [frakti](https://github.com/kubernetes/frakti)
 
-请参考 [CRI 安装指南](/docs/setup/cri) 获取更多信息。
+请参考 [CRI 安装指南](/zh/docs/setup/production-environment/container-runtimes/)获取更多信息。
 
 <!--
 ## Installing kubeadm, kubelet and kubectl
@@ -294,7 +289,7 @@ kubeadm **不能** 帮您安装或者管理 `kubelet` 或 `kubectl`，所以您
 然而，控制平面与 kubelet 间的相差一个次要版本不一致是支持的，但 kubelet 的版本不可以超过 API 服务器的版本。
 例如，1.7.0 版本的 kubelet 可以完全兼容 1.8.0 版本的 API 服务器，反之则不可以。
 
-有关安装 `kubectl` 的信息，请参阅[安装和设置 kubectl](/docs/tasks/tools/install-kubectl/)文档。
+有关安装 `kubectl` 的信息，请参阅[安装和设置 kubectl](/zh/docs/tasks/tools/install-kubectl/)文档。
 
 {{< warning >}}
 <!--
@@ -302,7 +297,8 @@ These instructions exclude all Kubernetes packages from any system upgrades.
 This is because kubeadm and Kubernetes require
 [special attention to upgrade](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-14/).
 -->
-这些指南不包括系统升级时使用的所有 Kubernetes 程序包。这是因为 kubeadm 和 Kubernetes 有[特殊的升级注意事项](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-14/)。
+这些指南不包括系统升级时使用的所有 Kubernetes 程序包。这是因为 kubeadm 和 Kubernetes
+有[特殊的升级注意事项](/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)。
 {{</ warning >}}
 
 <!--
@@ -313,8 +309,8 @@ For more information on version skews, see:
 -->
 关于版本偏差的更多信息，请参阅以下文档：
 
-* Kubernetes [版本与版本间的偏差策略](/docs/setup/release/version-skew-policy/)
-* Kubeadm-specific [版本偏差策略](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#version-skew-policy)
+* Kubernetes [版本与版本间的偏差策略](/zh/docs/setup/release/version-skew-policy/)
+* Kubeadm-specific [版本偏差策略](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#version-skew-policy)
 
 {{< tabs name="k8s_install" >}}
 {{% tab name="Ubuntu、Debian 或 HypriotOS" %}}
@@ -506,7 +502,8 @@ If you are running into difficulties with kubeadm, please consult our [troublesh
 -->
 ## 故障排查
 
-如果您在使用 kubeadm 时遇到困难，请参阅我们的[故障排查文档](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)。
+如果您在使用 kubeadm 时遇到困难，请参阅我们的
+[故障排查文档](/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/)。
 
 ## {{% heading "whatsnext" %}}
 
@@ -514,6 +511,5 @@ If you are running into difficulties with kubeadm, please consult our [troublesh
 <!--
 * [Using kubeadm to Create a Cluster](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)
 -->
-* [使用 kubeadm 创建集群](/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)
-
+* [使用 kubeadm 创建集群](/zh/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/)
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
index 8416f5969f..d2a8a87d1f 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
@@ -36,7 +36,7 @@ characteristics of a given machine, such as OS, storage, and networking. You can
 of your kubelets manually, but [kubeadm now provides a `KubeletConfiguration` API type for managing your
 kubelet configurations centrally](#configure-kubelets-using-kubeadm).
 -->
-kubeadm CLI 工具的生命周期与 [kubelet](/docs/reference/command-line-tools-reference/kubelet)解耦，它是一个守护程序，在 Kubernetes 集群中的每个节点上运行。
+kubeadm CLI 工具的生命周期与 [kubelet](/zh/docs/reference/command-line-tools-reference/kubelet)解耦，它是一个守护程序，在 Kubernetes 集群中的每个节点上运行。
 当 Kubernetes 初始化或升级时，kubeadm CLI 工具由用户执行，而 kubelet 始终在后台运行。
 
 由于kubelet是守护程序，因此需要通过某种初始化系统或服务管理器进行维护。
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
index e79718b204..b29cf2215c 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
@@ -414,17 +414,15 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具；在这
     -->
     - 将 `${HOST0}` 设置为要测试的主机的 IP 地址
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 <!--
 Once your have a working 3 member etcd cluster, you can continue setting up a
 highly available control plane using the [external etcd method with
 kubeadm](/docs/setup/independent/high-availability/).
 -->
-一旦拥有了一个正常工作的 3 成员的 etcd 集群，你就可以基于[使用 kubeadm 的外部 etcd 方法](/docs/setup/independent/high-availability/)，继续部署一个高可用的控制平面。
-
+一旦拥有了一个正常工作的 3 成员的 etcd 集群，你就可以基于
+[使用 kubeadm 的外部 etcd 方法](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/)，
+继续部署一个高可用的控制平面。
 
 

From 73415d973b747187b3809ebd12c07ea918f00a89 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 7 Sep 2020 16:32:13 +0800
Subject: [PATCH 233/496] [zh] Fix links in setup section (2)

There are some style corrections in the minikube page as well.
---
 .../docs/setup/best-practices/certificates.md |  43 +-
 .../setup/best-practices/cluster-large.md     |  27 +-
 .../setup/learning-environment/minikube.md    | 488 +++++++++---------
 content/zh/docs/setup/release/notes.md        |   2 +-
 .../docs/setup/release/version-skew-policy.md |   2 +-
 5 files changed, 279 insertions(+), 283 deletions(-)

diff --git a/content/zh/docs/setup/best-practices/certificates.md b/content/zh/docs/setup/best-practices/certificates.md
index 281125e367..cead60c2a0 100644
--- a/content/zh/docs/setup/best-practices/certificates.md
+++ b/content/zh/docs/setup/best-practices/certificates.md
@@ -6,13 +6,11 @@ content_type: concept
 weight: 40
 ---
 <!--
----
 title: PKI certificates and requirements
 reviewers:
 - sig-cluster-lifecycle
 content_type: concept
 weight: 40
----
 -->
 
 <!-- overview -->
@@ -20,10 +18,13 @@ weight: 40
 <!--
 Kubernetes requires PKI certificates for authentication over TLS.
 If you install Kubernetes with [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), the certificates that your cluster requires are automatically generated.
-You can also generate your own certificates -- for example, to keep your private keys more secure by not storing them on the API server.
+You can also generate your own certificates - for example, to keep your private keys more secure by not storing them on the API server.
 This page explains the certificates that your cluster requires.
 -->
-Kubernetes 需要 PKI 证书才能进行基于 TLS 的身份验证。如果您是使用 [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) 安装的 Kubernetes，则会自动生成集群所需的证书。您还可以生成自己的证书。例如，不将私钥存储在 API 服务器上，可以让私钥更加安全。此页面说明了集群必需的证书。
+Kubernetes 需要 PKI 证书才能进行基于 TLS 的身份验证。如果你是使用
+[kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 安装的 Kubernetes，
+则会自动生成集群所需的证书。你还可以生成自己的证书。
+例如，不将私钥存储在 API 服务器上，可以让私钥更加安全。此页面说明了集群必需的证书。
 
 
 
@@ -57,11 +58,13 @@ Kubernetes 需要 PKI 才能执行以下操作：
 * 调度器的客户端证书/kubeconfig，用于和 API server 的会话
 * [前端代理](/zh/docs/tasks/extend-kubernetes/configure-aggregation-layer/) 的客户端及服务端证书
 
-{{< note >}}
 <!--
 `front-proxy` certificates are required only if you run kube-proxy to support [an extension API server](/docs/tasks/access-kubernetes-api/setup-extension-api-server/).
 -->
-只有当您运行 kube-proxy 并要支持[扩展 API 服务器](/docs/tasks/access-kubernetes-api/setup-extension-api-server/)时，才需要 `front-proxy` 证书
+{{< note >}}
+只有当你运行 kube-proxy 并要支持
+[扩展 API 服务器](/zh/docs/tasks/extend-kubernetes/setup-extension-api-server/)
+时，才需要 `front-proxy` 证书
 {{< /note >}}
 
 <!--
@@ -146,9 +149,12 @@ Required certificates:
 
 where `kind` maps to one or more of the [x509 key usage][usage] types:
 -->
-[1]: 用来连接到集群的不同 IP 或 DNS 名（就像 [kubeadm][kubeadm] 为负载均衡所使用的固定 IP 或 DNS 名，`kubernetes`、`kubernetes.default`、`kubernetes.default.svc`、`kubernetes.default.svc.cluster`、`kubernetes.default.svc.cluster.local`）
+[1]: 用来连接到集群的不同 IP 或 DNS 名
+（就像 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 为负载均衡所使用的固定
+IP 或 DNS 名，`kubernetes`、`kubernetes.default`、`kubernetes.default.svc`、
+`kubernetes.default.svc.cluster`、`kubernetes.default.svc.cluster.local`）。
 
-其中，`kind` 对应一种或多种类型的 [x509 密钥用途][usage]：
+其中，`kind` 对应一种或多种类型的 [x509 密钥用途][https://godoc.org/k8s.io/api/certificates/v1beta1#KeyUsage]：
 
 <!--
 | kind   | Key usage                                                                       |
@@ -227,20 +233,21 @@ You must manually configure these administrator account and service accounts:
 -->
 ## 为用户帐户配置证书
 
-您必须手动配置以下管理员帐户和服务帐户：
+你必须手动配置以下管理员帐户和服务帐户：
 
-| 文件名                | 凭据名称            | 默认 CN                     | O (位于 Subject 中) |
-|-------------------------|----------------------------|--------------------------------|----------------|
-| admin.conf              | default-admin              | kubernetes-admin               | system:masters |
-| kubelet.conf            | default-auth               | system:node:`<nodeName>` (see note) | system:nodes   |
-| controller-manager.conf | default-controller-manager | system:kube-controller-manager |                |
-| scheduler.conf          | default-scheduler          | system:kube-scheduler          |                |
+| 文件名                  | 凭据名称                   | 默认 CN                        | O (位于 Subject 中) |
+|-------------------------|----------------------------|--------------------------------|---------------------|
+| admin.conf              | default-admin              | kubernetes-admin               | system:masters      |
+| kubelet.conf            | default-auth               | system:node:`<nodeName>` （参阅注释） | system:nodes |
+| controller-manager.conf | default-controller-manager | system:kube-controller-manager |                     |
+| scheduler.conf          | default-scheduler          | system:kube-scheduler          |                     |
 
-{{< note >}}
 <!--
 The value of `<nodeName>` for `kubelet.conf` **must** match precisely the value of the node name provided by the kubelet as it registers with the apiserver. For further details, read the [Node Authorization](/docs/reference/access-authn-authz/node/).
 -->
-`kubelet.conf` 中 `<nodeName>` 的值 **必须** 与 kubelet 向 apiserver 注册时提供的节点名称的值完全匹配。有关更多详细信息，请阅读[节点授权](/docs/reference/access-authn-authz/node/)。
+{{< note >}}
+`kubelet.conf` 中 `<nodeName>` 的值 **必须** 与 kubelet 向 apiserver 注册时提供的节点名称的值完全匹配。
+有关更多详细信息，请阅读[节点授权](/zh/docs/reference/access-authn-authz/node/)。
 {{< /note >}}
 
 <!--
@@ -278,5 +285,3 @@ These files are used as follows:
 | controller-manager.conf | kube-controller-manager | 必需添加到 `manifests/kube-controller-manager.yaml` 清单中               |
 | scheduler.conf          | kube-scheduler          | 必需添加到 `manifests/kube-scheduler.yaml` 清单中                        |
 
-[usage]: https://godoc.org/k8s.io/api/certificates/v1beta1#KeyUsage
-[kubeadm]: /docs/reference/setup-tools/kubeadm/kubeadm/
diff --git a/content/zh/docs/setup/best-practices/cluster-large.md b/content/zh/docs/setup/best-practices/cluster-large.md
index a9237ebc48..4a27b867e1 100644
--- a/content/zh/docs/setup/best-practices/cluster-large.md
+++ b/content/zh/docs/setup/best-practices/cluster-large.md
@@ -42,7 +42,9 @@ A cluster is a set of nodes (physical or virtual machines) running Kubernetes ag
 <!--
 Normally the number of nodes in a cluster is controlled by the value `NUM_NODES` in the platform-specific `config-default.sh` file (for example, see [GCE's `config-default.sh`](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/gce/config-default.sh)).
 -->
-通常，集群中的节点数由特定于云平台的配置文件 `config-default.sh`（可以参考 [GCE 平台的 `config-default.sh`](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/gce/config-default.sh)）中的 `NUM_NODES` 参数控制。
+通常，集群中的节点数由特定于云平台的配置文件 `config-default.sh`
+（可以参考 [GCE 平台的 `config-default.sh`](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/gce/config-default.sh)）
+中的 `NUM_NODES` 参数控制。
 
 <!--
 Simply changing that value to something very large, however, may cause the setup script to fail for many cloud providers. A GCE deployment, for example, will run in to quota issues and fail to bring the cluster up.
@@ -175,7 +177,9 @@ On AWS, master node sizes are currently set at cluster startup time and do not c
 <!--
 To prevent memory leaks or other resource issues in [cluster addons](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons) from consuming all the resources available on a node, Kubernetes sets resource limits on addon containers to limit the CPU and Memory resources they can consume (See PR [#10653](http://pr.k8s.io/10653/files) and [#10778](http://pr.k8s.io/10778/files)).
 -->
-为了防止内存泄漏或 [集群插件](https://releases.k8s.io/{{<param "githubbranch" >}}/cluster/addons) 中的其它资源问题导致节点上所有可用资源被消耗，Kubernetes 限制了插件容器可以消耗的 CPU 和内存资源（请参阅 PR [#10653](http://pr.k8s.io/10653/files) 和 [#10778](http://pr.k8s.io/10778/files)）。
+为了防止内存泄漏或 [集群插件](https://releases.k8s.io/{{<param "githubbranch" >}}/cluster/addons)
+中的其它资源问题导致节点上所有可用资源被消耗，Kubernetes 限制了插件容器可以消耗的 CPU 和内存资源
+（请参阅 PR [#10653](http://pr.k8s.io/10653/files) 和 [#10778](http://pr.k8s.io/10778/files)）。
 
 例如：
 
@@ -211,33 +215,34 @@ To avoid running into cluster addon resource issues, when creating a cluster wit
   * [FluentD with GCP Plugin](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml)
 -->
 * 根据集群的规模，如果使用了以下插件，提高其内存和 CPU 上限（每个插件都有一个副本处理整个群集，因此内存和 CPU 使用率往往与集群的规模/负载成比例增长） ：
-  * [InfluxDB 和 Grafana](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/cluster-monitoring/influxdb/influxdb-grafana-controller.yaml)
-  * [kubedns、dnsmasq 和 sidecar](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/kube-dns/kube-dns.yaml.in)
-  * [Kibana](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/kibana-deployment.yaml)
+  * [InfluxDB 和 Grafana](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/cluster-monitoring/influxdb/influxdb-grafana-controller.yaml)
+  * [kubedns、dnsmasq 和 sidecar](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/dns/kube-dns/kube-dns.yaml.in)
+  * [Kibana](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/kibana-deployment.yaml)
 * 根据集群的规模，如果使用了以下插件，调整其副本数量（每个插件都有多个副本，增加副本数量有助于处理增加的负载，但是，由于每个副本的负载也略有增加，因此也请考虑增加 CPU/内存限制）：
-  * [elasticsearch](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/es-statefulset.yaml)
+  * [elasticsearch](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/es-statefulset.yaml)
 * 根据集群的规模，如果使用了以下插件，限制其内存和 CPU 上限（这些插件在每个节点上都有一个副本，但是 CPU/内存使用量也会随集群负载/规模而略有增加）：
-  * [FluentD 和 ElasticSearch 插件](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml)
-  * [FluentD 和 GCP 插件](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml)
+  * [FluentD 和 ElasticSearch 插件](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-elasticsearch/fluentd-es-ds.yaml)
+  * [FluentD 和 GCP 插件](https://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/fluentd-gcp/fluentd-gcp-ds.yaml)
 
 <!--
 Heapster's resource limits are set dynamically based on the initial size of your cluster (see [#16185](http://issue.k8s.io/16185)
 and [#22940](http://issue.k8s.io/22940)). If you find that Heapster is running
 out of resources, you should adjust the formulas that compute heapster memory request (see those PRs for details).
 -->
-Heapster 的资源限制与您集群的初始大小有关（请参阅 [#16185](http://issue.k8s.io/16185)
+Heapster 的资源限制与您集群的初始大小有关（请参阅 [#16185](https://issue.k8s.io/16185)
 和 [#22940](http://issue.k8s.io/22940)）。如果您发现 Heapster 资源不足，您应该调整堆内存请求的计算公式（有关详细信息，请参阅相关 PR）。
 
 <!--
 For directions on how to detect if addon containers are hitting resource limits, see the [Troubleshooting section of Compute Resources](/docs/concepts/configuration/manage-compute-resources-container/#troubleshooting).
 -->
-关于如何检测插件容器是否达到资源限制，参见 [计算资源的故障排除](/docs/concepts/configuration/manage-compute-resources-container/#troubleshooting) 部分。
+关于如何检测插件容器是否达到资源限制，参见
+[计算资源的故障排除](/zh/docs/concepts/configuration/manage-resources-containers/#troubleshooting) 部分。
 
 <!--
 In the [future](http://issue.k8s.io/13048), we anticipate to set all cluster addon resource limits based on cluster size, and to dynamically adjust them if you grow or shrink your cluster.
 We welcome PRs that implement those features.
 -->
-[未来](http://issue.k8s.io/13048)，我们期望根据集群规模大小来设置所有群集附加资源限制，并在集群扩缩容时动态调整它们。
+[未来](https://issue.k8s.io/13048)，我们期望根据集群规模大小来设置所有群集附加资源限制，并在集群扩缩容时动态调整它们。
 我们欢迎您来实现这些功能。
 
 <!--
diff --git a/content/zh/docs/setup/learning-environment/minikube.md b/content/zh/docs/setup/learning-environment/minikube.md
index bd828ec871..0a535dc8e8 100644
--- a/content/zh/docs/setup/learning-environment/minikube.md
+++ b/content/zh/docs/setup/learning-environment/minikube.md
@@ -3,14 +3,12 @@ title: 使用 Minikube 安装 Kubernetes
 content_type: concept
 ---
 <!--
----
 reviewers:
 - dlorenc
 - balopat
 - aaron-prindle
 title: Installing Kubernetes with Minikube
 content_type: concept
----
 -->
 
 <!-- overview -->
@@ -18,20 +16,19 @@ content_type: concept
 <!--
 Minikube is a tool that makes it easy to run Kubernetes locally. Minikube runs a single-node Kubernetes cluster inside a Virtual Machine (VM) on your laptop for users looking to try out Kubernetes or develop with it day-to-day.
 -->
-Minikube 是一种可以让您在本地轻松运行 Kubernetes 的工具。Minikube 在笔记本电脑上的虚拟机（VM）中运行单节点 Kubernetes 集群，供那些希望尝试 Kubernetes 或进行日常开发的用户使用。
-
-
+Minikube 是一种可以让你在本地轻松运行 Kubernetes 的工具。
+Minikube 在笔记本电脑上的虚拟机（VM）中运行单节点 Kubernetes 集群，
+供那些希望尝试 Kubernetes 或进行日常开发的用户使用。
 
 <!-- body -->
 
 <!--
 ## Minikube Features
+
+Minikube supports the following Kubernetes features:
 -->
 ## Minikube 功能
 
-<!--
-Minikube supports the following Kubernetes features:
--->
 Minikube 支持以下 Kubernetes 功能：
 
 <!--
@@ -48,250 +45,241 @@ Minikube 支持以下 Kubernetes 功能：
 * NodePorts
 * ConfigMaps 和 Secrets
 * Dashboards
-* 容器运行时: Docker、[CRI-O](https://github.com/kubernetes-incubator/cri-o) 以及 [containerd](https://github.com/containerd/containerd)
+* 容器运行时: Docker、[CRI-O](https://github.com/kubernetes-incubator/cri-o) 以及
+  [containerd](https://github.com/containerd/containerd)
 * 启用 CNI （容器网络接口）
 * Ingress
 
 <!--
 ## Installation
+
+See [Installing Minikube](/docs/tasks/tools/install-minikube/).
 -->
 ## 安装
 
-<!--
-See [Installing Minikube](/docs/tasks/tools/install-minikube/).
--->
 请参阅[安装 Minikube](/zh/docs/tasks/tools/install-minikube/)。
 
 <!--
 ## Quickstart
+
+This brief demo guides you on how to start, use, and delete Minikube locally. Follow the steps given below to start and explore Minikube.
 -->
 ## 快速开始
 
-<!--
-This brief demo guides you on how to start, use, and delete Minikube locally. Follow the steps given below to start and explore Minikube.
--->
-这个简短的演示将指导您如何在本地启动、使用和删除 Minikube。请按照以下步骤开始探索 Minikube。
+这个简短的演示将指导你如何在本地启动、使用和删除 Minikube。请按照以下步骤开始探索 Minikube。
 
 <!--
 1. Start Minikube and create a cluster:
 -->
 1. 启动 Minikube 并创建一个集群：
 
-    ```shell
-    minikube start
+   ```shell
+   minikube start
+   ```
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
+
+   ```
+   Starting local Kubernetes cluster...
+   Running pre-create checks...
+   Creating machine...
+   Starting local Kubernetes cluster...
+   ```
+
+   <!--
+   For more information on starting your cluster on a specific Kubernetes version, VM, or container runtime, see [Starting a Cluster](#starting-a-cluster).
+   -->
+
+   有关使用特定 Kubernetes 版本、VM 或容器运行时启动集群的详细信息，请参阅[启动集群](#starting-a-cluster)。
+
+<!--
+2. Now, you can interact with your cluster using kubectl. For more information, see [Interacting with Your Cluster](#interacting-with-your-cluster).
+-->
+2. 现在，你可以使用 kubectl 与集群进行交互。有关详细信息，请参阅[与集群交互](#interacting-with-your-cluster)。
+
+   <!--
+   Let’s create a Kubernetes Deployment using an existing image named `echoserver`, which is a simple HTTP server and expose it on port 8080 using `-port`.
+   -->
+   让我们使用名为 `echoserver` 的镜像创建一个 Kubernetes Deployment，并使用 `--port` 在端口 8080 上暴露服务。`echoserver` 是一个简单的 HTTP 服务器。
+
+   ```shell
+   kubectl create deployment hello-minikube --image=k8s.gcr.io/echoserver:1.10
+   ```
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
+
+   ```
+   deployment.apps/hello-minikube created
     ```
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
-
-    ```
-    Starting local Kubernetes cluster...
-    Running pre-create checks...
-    Creating machine...
-    Starting local Kubernetes cluster...
-    ```
-
-    <!--
-    For more information on starting your cluster on a specific Kubernetes version, VM, or container runtime, see [Starting a Cluster](#starting-a-cluster).
-    -->
-
-    有关使用特定 Kubernetes 版本、VM 或容器运行时启动集群的详细信息，请参阅[启动集群](#starting-a-cluster)。
-
-2. 现在，您可以使用 kubectl 与集群进行交互。有关详细信息，请参阅[与集群交互](#interacting-with-your-cluster)。
-
-    <!--
-    Now, you can interact with your cluster using kubectl. For more information, see [Interacting with Your Cluster](#interacting-with-your-cluster).
-    -->
-
-    <!--
-    Let’s create a Kubernetes Deployment using an existing image named `echoserver`, which is a simple HTTP server and expose it on port 8080 using `--port`.
-    -->
-    让我们使用名为 `echoserver` 的镜像创建一个 Kubernetes Deployment，并使用 `--port` 在端口 8080 上暴露服务。`echoserver` 是一个简单的 HTTP 服务器。
-
-    ```shell
-    kubectl create deployment hello-minikube --image=k8s.gcr.io/echoserver:1.10
-    ```
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
-
-    ```
-    deployment.apps/hello-minikube created
-    ```
-
+<!--
+3. To access the `hello-minikube` Deployment, expose it as a Service:
+-->
 3. 要访问 `hello-minikube` Deployment，需要将其作为 Service 公开：
 
-    <!--
-    To access the `hello-minikube` Deployment, expose it as a Service:
-    -->
+   ```shell
+   kubectl expose deployment hello-minikube --type=NodePort --port=8080
+   ```
+   <!--
+   The option `-type=NodePort` specifies the type of the Service.
+   -->
+   选项 `--type = NodePort` 指定 Service 的类型。
 
-    ```shell
-    kubectl expose deployment hello-minikube --type=NodePort --port=8080
-    ```
-    <!--
-    The option `--type=NodePort` specifies the type of the Service.
-    -->
-    选项 `--type = NodePort` 指定 Service 的类型。
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
 
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
+   ```
+   service/hello-minikube exposed
+   ```
+<!--
+4.  The `hello-minikube` Pod is now launched but you have to wait until the Pod is up before accessing it via the exposed Service.
+-->
+4. 现在 `hello-minikube` Pod 已经启动，但是你必须等到 Pod 启动完全才能通过暴露的 Service 访问它。
 
-    ```
-    service/hello-minikube exposed
-    ```
+   <!--
+   Check if the Pod is up and running:
+   -->
+   检查 Pod 是否启动并运行：
 
-4. 现在 `hello-minikube` Pod 已经启动，但是您必须等到 Pod 启动完全才能通过暴露的 Service 访问它。
+   ```shell
+   kubectl get pod
+   ```
+   <!--
+   If the output shows the `STATUS` as `ContainerCreating`, the Pod is still being created:
+   -->
+   如果输出显示 `STATUS` 为 `ContainerCreating`，则表明 Pod 仍在创建中：
 
-    <!--
-    The `hello-minikube` Pod is now launched but you have to wait until the Pod is up before accessing it via the exposed Service.
-    -->
+   ```
+   NAME                              READY     STATUS              RESTARTS   AGE
+   hello-minikube-3383150820-vctvh   0/1       ContainerCreating   0          3s
+   ```
+   <!--
+   If the output shows the `STATUS` as `Running`, the Pod is now up and running:
+   -->
+   如果输出显示 `STATUS` 为 `Running`，则 Pod 现在正在运行：
 
-    <!--
-	Check if the Pod is up and running:
-    -->
-    检查 Pod 是否启动并运行：
-
-	```shell
-	kubectl get pod
-	```
-    <!--
-	If the output shows the `STATUS` as `ContainerCreating`, the Pod is still being created:
-    -->
-    如果输出显示 `STATUS` 为 `ContainerCreating`，则表明 Pod 仍在创建中：
-	```
-	NAME                              READY     STATUS              RESTARTS   AGE
-	hello-minikube-3383150820-vctvh   0/1       ContainerCreating   0          3s
-	```
-    <!--
-	If the output shows the `STATUS` as `Running`, the Pod is now up and running:
-    -->
-    如果输出显示 `STATUS` 为 `Running`，则 Pod 现在正在运行：
-	```
-	NAME                              READY     STATUS    RESTARTS   AGE
-	hello-minikube-3383150820-vctvh   1/1       Running   0          13s
-	```
+   ```
+   NAME                              READY     STATUS    RESTARTS   AGE
+   hello-minikube-3383150820-vctvh   1/1       Running   0          13s
+   ```
 
+<!--
+5.  Get the URL of the exposed Service to view the Service details:
+-->
 5. 获取暴露 Service 的 URL 以查看 Service 的详细信息：
 
-    <!--
-    Get the URL of the exposed Service to view the Service details:
-    -->
-
-	```shell
-	minikube service hello-minikube --url
-	```
-
+   ```shell
+   minikube service hello-minikube --url
+   ```
+<!--
+6.  To view the details of your local cluster, copy and paste the URL you got as the output, on your browser.
+-->
 6. 要查看本地集群的详细信息，请在浏览器中复制粘贴并访问上一步骤输出的 URL。
 
-    <!--
-    To view the details of your local cluster, copy and paste the URL you got as the output, on your browser.
-    -->
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
 
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
+   ```
+   Hostname: hello-minikube-7c77b68cff-8wdzq
 
-    ```
-    Hostname: hello-minikube-7c77b68cff-8wdzq
+   Pod Information:
+       -no pod information available-
 
-    Pod Information:
-        -no pod information available-
+   Server values:
+       server_version=nginx: 1.13.3 - lua: 10008
 
-    Server values:
-        server_version=nginx: 1.13.3 - lua: 10008
+   Request Information:
+       client_address=172.17.0.1
+       method=GET
+       real path=/
+       query=
+       request_version=1.1
+       request_scheme=http
+       request_uri=http://192.168.99.100:8080/
 
-    Request Information:
-        client_address=172.17.0.1
-        method=GET
-        real path=/
-        query=
-        request_version=1.1
-        request_scheme=http
-        request_uri=http://192.168.99.100:8080/
+   Request Headers:
+       accept=*/*
+       host=192.168.99.100:30674
+       user-agent=curl/7.47.0
 
-    Request Headers:
-        accept=*/*
-        host=192.168.99.100:30674
-        user-agent=curl/7.47.0
+   Request Body:
+       -no body in request-
+   ```
 
-    Request Body:
-        -no body in request-
-    ```
-    <!--
-	If you no longer want the Service and cluster to run, you can delete them.
-    -->
-    如果您不再希望运行 Service 和集群，则可以删除它们。
+   <!--
+   If you no longer want the Service and cluster to run, you can delete them.
+   -->
+   如果你不再希望运行 Service 和集群，则可以删除它们。
 
+<!--
+7. Delete the `hello-minikube` Service:
+-->
 7. 删除 `hello-minikube` Service：
 
-    <!--
-    Delete the `hello-minikube` Service:
-    -->
+   ```shell
+   kubectl delete services hello-minikube
+   ```
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
 
-    ```shell
-    kubectl delete services hello-minikube
-    ```
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
-
-    ```
-    service "hello-minikube" deleted
-    ```
+   ```
+   service "hello-minikube" deleted
+   ```
 
+<!--
+8.  Delete the `hello-minikube` Deployment:
+-->
 8. 删除 `hello-minikube` Deployment：
 
-    <!--
-    Delete the `hello-minikube` Deployment:
-    -->
+   ```shell
+   kubectl delete deployment hello-minikube
+   ```
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
 
-    ```shell
-    kubectl delete deployment hello-minikube
-    ```
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
+   ```
+   deployment.extensions "hello-minikube" deleted
+   ```
 
-    ```
-    deployment.extensions "hello-minikube" deleted
-    ```
+<!--
+9. Stop the local Minikube cluster:
+-->
+9. 停止本地 Minikube 集群：
 
-9.  停止本地 Minikube 集群：
+   ```shell
+   minikube stop
+   ```
+   <!--
+   The output is similar to this:
+   -->
+   输出类似于：
 
-    <!--
-    Stop the local Minikube cluster:
-    -->
+   ```
+   Stopping "minikube"...
+   "minikube" stopped.
+   ```
 
-    ```shell
-    minikube stop
-    ```
-    <!--
-    The output is similar to this:
-    -->
-    输出类似于：
-
-    ```
-    Stopping "minikube"...
-    "minikube" stopped.
-    ```
-    <!--
-	For more information, see [Stopping a Cluster](#stopping-a-cluster).
-    -->
-    有关更多信息，请参阅[停止集群](#stopsing-a-cluster)。
+   <!--
+   For more information, see [Stopping a Cluster](#stopping-a-cluster).
+   -->
+   有关更多信息，请参阅[停止集群](#stopping-a-cluster)。
 
+<!--
+10.  Delete the local Minikube cluster:
+-->
 10. 删除本地 Minikube 集群：
 
-    <!--
-    Delete the local Minikube cluster:
-    -->
-
     ```shell
     minikube delete
     ```
@@ -305,48 +293,42 @@ This brief demo guides you on how to start, use, and delete Minikube locally. Fo
     The "minikube" cluster has been deleted.
     ```
     <!--
-	For more information, see [Deleting a cluster](#deleting-a-cluster).
+    For more information, see [Deleting a cluster](#deleting-a-cluster).
     -->
     有关更多信息，请参阅[删除集群](#deletion-a-cluster)。
 
 <!--
 ## Managing your Cluster
--->
-## 管理您的集群
 
-<!--
 ### Starting a Cluster
--->
-### 启动集群 {#starting-a-cluster}
 
-<!--
 The `minikube start` command can be used to start your cluster.
 -->
+## 管理你的集群
+
+### 启动集群 {#starting-a-cluster}
+
 `minikube start` 命令可用于启动集群。
+
 <!--
 This command creates and configures a Virtual Machine that runs a single-node Kubernetes cluster.
--->
-此命令将创建并配置一台虚拟机，使其运行单节点 Kubernetes 集群。
-<!--
+
 This command also configures your [kubectl](/docs/user-guide/kubectl-overview/) installation to communicate with this cluster.
 -->
-此命令还会配置您的 [kubectl](/docs/user-guide/kubectl-overview/) 安装，以便使其能与您的 Kubernetes 集群正确通信。
+此命令将创建并配置一台虚拟机，使其运行单节点 Kubernetes 集群。
+
+此命令还会配置你的 [kubectl](/zh/docs/reference/kubectl/overview/) 安装，以便使其能与你的 Kubernetes 集群正确通信。
 
 <!--
 If you are behind a web proxy, you need to pass this information to the `minikube start` command:
--->
-<!--
+
 Unfortunately, setting the environment variables alone does not work.
--->
-<!--
 Minikube also creates a "minikube" context, and sets it to default in kubectl.
--->
-<!--
 To switch back to this context, run this command: `kubectl config use-context minikube`.
 -->
 
 {{< note >}}
-如果您启用了 web 代理，则需要将此信息传递给 `minikube start` 命令：
+如果你启用了 web 代理，则需要将此信息传递给 `minikube start` 命令：
 
 ```shell
 https_proxy=<my proxy> minikube start --docker-env http_proxy=<my proxy> --docker-env https_proxy=<my proxy> --docker-env no_proxy=192.168.99.0/24
@@ -361,25 +343,27 @@ Minikube 还创建了一个 `minikube` 上下文，并将其设置为 kubectl 
 
 <!--
 #### Specifying the Kubernetes version
+
+You can specify the version of Kubernetes for Minikube to use byadding the `--kubernetes-version` string to the `minikube start` command. Forexample, to run version {{< param "fullversion" >}}, you would run the following:
 -->
 #### 指定 Kubernetes 版本
 
-<!--
-You can specify the version of Kubernetes for Minikube to use byadding the `--kubernetes-version` string to the `minikube start` command. Forexample, to run version {{< param "fullversion" >}}, you would run the following:
--->
-您可以通过将 `--kubernetes-version` 字符串添加到 `minikube start` 命令来指定要用于 Minikube 的 Kubernetes 版本。例如，要运行版本 {{< param "fullversion" >}}，您可以运行以下命令：
+你可以通过将 `--kubernetes-version` 字符串添加到 `minikube start` 命令来指定要用于 
+Minikube 的 Kubernetes 版本。例如，要运行版本 {{< param "fullversion" >}}，你可以运行以下命令：
 
-```
+```shell
 minikube start --kubernetes-version {{< param "fullversion" >}}
 ```
+
 <!--
 #### Specifying the VM driver
 
-You can change the VM driver by adding the `--vm-driver=<enter_driver_name>` flag to `minikube start`.
+You can change the VM driver by adding the `-vm-driver=<enter_driver_name>` flag to `minikube start`.
 -->
 #### 指定 VM 驱动程序 {#specifying-the-vm-driver}
 
-您可以通过将 `--vm-driver=<enter_driver_name>` 参数添加到 `minikube start` 来更改 VM 驱动程序。
+你可以通过将 `--vm-driver=<enter_driver_name>` 参数添加到 `minikube start` 来更改 VM 驱动程序。
+
 <!--
 For example the command would be.
 -->
@@ -396,6 +380,9 @@ Minikube 支持以下驱动程序：
 <!--
  See [DRIVERS](https://minikube.sigs.k8s.io/docs/drivers/) for details on supported drivers and how to install plugins.
 -->
+{{< note >}}
+有关支持的驱动程序以及如何安装插件的详细信息，请参阅[驱动程序](https://minikube.sigs.k8s.io/docs/drivers/)。
+{{< /note >}}
 
 <!--
 * virtualbox
@@ -408,22 +395,20 @@ Note that the IP below is dynamic and can change. It can be retrieved with `mini
 * none (Runs the Kubernetes components on the host and not in a VM. Using this driver requires Docker ([docker install](https://docs.docker.com/install/linux/docker-ce/ubuntu/)) and a Linux environment)
 -->
 
-
- {{< note >}}
-有关支持的驱动程序以及如何安装插件的详细信息，请参阅[驱动程序](https://minikube.sigs.k8s.io/docs/drivers/)。
-{{< /note >}}
-
 * virtualbox
 * vmwarefusion
 * kvm2 ([驱动安装](https://minikube.sigs.k8s.io/docs/drivers/#kvm2-driver))
 * hyperkit ([驱动安装](https://minikube.sigs.k8s.io/docs/drivers/#hyperkit-driver))
 * hyperv ([驱动安装](https://github.com/kubernetes/minikube/blob/master/docs/drivers.md#hyperv-driver))
+
 <!--
 Note that the IP below is dynamic and can change. It can be retrieved with `minikube ip`.
 -->
 请注意，下面的 IP 是动态的，可以更改。可以使用 `minikube ip` 检索。
+
 * vmware ([驱动安装](https://github.com/kubernetes/minikube/blob/master/docs/drivers.md#vmware-unified-driver)) （VMware 统一驱动）
-* none (在主机上运行Kubernetes组件，而不是在 VM 中。使用该驱动依赖 Docker ([安装 Docker](https://docs.docker.com/install/linux/docker-ce/ubuntu/)) 和 Linux 环境)
+* none (在主机上运行Kubernetes组件，而不是在 VM 中。使用该驱动依赖 Docker 
+  ([安装 Docker](https://docs.docker.com/install/linux/docker-ce/ubuntu/)) 和 Linux 环境)
 
 <!--
 #### Starting a cluster on alternative container runtimes
@@ -432,7 +417,7 @@ You can start Minikube on the following container runtimes.
 -->
 #### 通过别的容器运行时启动集群
 
-您可以通过以下容器运行时启动 Minikube。
+你可以通过以下容器运行时启动 Minikube。
 
 {{< tabs name="container_runtimes" >}}
 {{% tab name="containerd" %}}
@@ -452,7 +437,7 @@ minikube start \
 <!--
 Or you can use the extended version:
 -->
-或者您可以使用扩展版本：
+或者你可以使用扩展版本：
 
 ```bash
 minikube start \
@@ -480,7 +465,7 @@ minikube start \
 <!--
 Or you can use the extended version:
 -->
-或者您可以使用扩展版本：
+或者你可以使用扩展版本：
 
 ```bash
 minikube start \
@@ -502,12 +487,12 @@ minikube start \
 <!--
 When using a single VM for Kubernetes, it's useful to reuse Minikube's built-in Docker daemon. Reusing the built-in daemon means you don't have to build a Docker registry on your host machine and push the image into it. Instead, you can build inside the same Docker daemon as Minikube, which speeds up local experiments.
 -->
-当为 Kubernetes 使用单个 VM 时，重用 Minikube 的内置 Docker 守护程序非常有用。重用内置守护程序意味着您不必在主机上构建 Docker 镜像仓库并将镜像推入其中。相反，您可以在与 Minikube 相同的 Docker 守护进程内部构建，这可以加速本地实验。
+当为 Kubernetes 使用单个 VM 时，重用 Minikube 的内置 Docker 守护程序非常有用。重用内置守护程序意味着你不必在主机上构建 Docker 镜像仓库并将镜像推入其中。相反，你可以在与 Minikube 相同的 Docker 守护进程内部构建，这可以加速本地实验。
 
-{{< note >}}
 <!--
 Be sure to tag your Docker image with something other than latest and use that tag to pull the image. Because `:latest` is the default value, with a corresponding default image pull policy of `Always`, an image pull error (`ErrImagePull`) eventually results if you do not have the Docker image in the default Docker registry (usually DockerHub).
 -->
+{{< note >}}
 一定要用非 `latest` 的标签来标记你的 Docker 镜像，并使用该标签来拉取镜像。因为 `:latest` 标记的镜像，其默认镜像拉取策略是 `Always`，如果在默认的 Docker 镜像仓库（通常是 DockerHub）中没有找到你的 Docker 镜像，最终会导致一个镜像拉取错误（`ErrImagePull`）。
 {{< /note >}}
 
@@ -523,13 +508,12 @@ eval $(minikube docker-env)
 <!--
 You can now use Docker at the command line of your host Mac/Linux machine to communicate with the Docker daemon inside the Minikube VM:
 -->
-您现在可以在 Mac/Linux 机器的命令行中使用 Docker 与 Minikube VM 内的 Docker 守护程序进行通信：
+你现在可以在 Mac/Linux 机器的命令行中使用 Docker 与 Minikube VM 内的 Docker 守护程序进行通信：
 
 ```shell
 docker ps
 ```
 
-{{< note >}}
 <!--
 On Centos 7, Docker may report the following error:
 -->
@@ -542,7 +526,7 @@ Could not read CA certificate "/etc/docker/ca.pem": open /etc/docker/ca.pem: no
 <!--
 You can fix this by updating /etc/sysconfig/docker to ensure that Minikube's environment changes are respected:
 -->
-您可以通过更新 /etc/sysconfig/docker 来解决此问题，以确保 Minikube 的环境更改得到遵守：
+你可以通过更新 /etc/sysconfig/docker 来解决此问题，以确保 Minikube 的环境更改得到遵守：
 
 ```shell
 < DOCKER_CERT_PATH=/etc/docker
@@ -551,7 +535,6 @@ You can fix this by updating /etc/sysconfig/docker to ensure that Minikube's env
 >   DOCKER_CERT_PATH=/etc/docker
 > fi
 ```
-{{< /note >}}
 
 <!--
 ### Configuring Kubernetes
@@ -570,7 +553,7 @@ To use this feature, you can use the `--extra-config` flag on the `minikube star
 <!--
 This flag is repeated, so you can pass it several times with several different values to set multiple options.
 -->
-此参数允许重复，因此您可以使用多个不同的值多次传递它以设置多个选项。
+此参数允许重复，因此你可以使用多个不同的值多次传递它以设置多个选项。
 
 <!--
 This flag takes a string of the form `component.key=value`, where `component` is one of the strings from the below list, `key` is a value on the configuration struct and `value` is the value to set.
@@ -611,7 +594,7 @@ This feature also supports nested structs. To change the `LeaderElection.LeaderE
 <!--
 To set the `AuthorizationMode` on the `apiserver` to `RBAC`, you can use: `--extra-config=apiserver.authorization-mode=RBAC`.
 -->
-要将 `apiserver` 的 `AuthorizationMode` 设置为 `RBAC`，您可以使用：`--extra-config=apiserver.authorization-mode=RBAC`。
+要将 `apiserver` 的 `AuthorizationMode` 设置为 `RBAC`，你可以使用：`--extra-config=apiserver.authorization-mode=RBAC`。
 
 <!--
 ### Stopping a ClusterThe
@@ -665,7 +648,7 @@ This context contains the configuration to communicate with your Minikube cluste
 <!--
 Minikube sets this context to default automatically, but if you need to switch back to it in the future, run:
 -->
-Minikube 会自动将此上下文设置为默认值，但如果您以后需要切换回它，请运行：
+Minikube 会自动将此上下文设置为默认值，但如果你以后需要切换回它，请运行：
 
 <!--
 `kubectl config use-context minikube`,
@@ -685,7 +668,8 @@ Or pass the context on each command like this: `kubectl get pods --context=minik
 <!--
 To access the [Kubernetes Dashboard](/docs/tasks/access-application-cluster/web-ui-dashboard/), run this command in a shell after starting Minikube to get the address:
 -->
-要访问 [Kubernetes Dashboard](/docs/tasks/access-application-cluster/web-ui-dashboard/)，请在启动 Minikube 后在 shell 中运行此命令以获取地址：
+要访问 [Kubernetes Dashboard](/zh/docs/tasks/access-application-cluster/web-ui-dashboard/)，
+请在启动 Minikube 后在 shell 中运行此命令以获取地址：
 
 ```shell
 minikube dashboard
@@ -781,7 +765,7 @@ Some drivers will mount a host folder within the VM so that you can easily share
 -->
 ## 挂载宿主机文件夹
 
-一些驱动程序将在 VM 中挂载一个主机文件夹，以便您可以轻松地在 VM 和主机之间共享文件。目前这些都是不可配置的，并且根据您正在使用的驱动程序和操作系统的不同而不同。
+一些驱动程序将在 VM 中挂载一个主机文件夹，以便你可以轻松地在 VM 和主机之间共享文件。目前这些都是不可配置的，并且根据你正在使用的驱动程序和操作系统的不同而不同。
 
 <!--
 Host folder sharing is not implemented in the KVM driver yet.
@@ -807,12 +791,12 @@ KVM 驱动程序中尚未实现主机文件夹共享。
 <!--
 To access a private container registry, follow the steps on [this page](/docs/concepts/containers/images/).
 -->
-要访问私有容器镜像仓库，请按照[本页](/docs/concepts/containers/images/)上的步骤操作。
+要访问私有容器镜像仓库，请按照[此页](/zh/docs/concepts/containers/images/)上的步骤操作。
 
 <!--
 We recommend you use `ImagePullSecrets`, but if you would like to configure access on the Minikube VM you can place the `.dockercfg` in the `/home/docker` directory or the `config.json` in the `/home/docker/.docker` directory.
 -->
-我们建议您使用 `ImagePullSecrets`，但是如果您想在 Minikube VM 上配置访问权限，可以将 `.dockercfg` 放在 `/home/docker` 目录中，或将`config.json` 放在 `/home/docker/.docker` 目录。
+我们建议你使用 `ImagePullSecrets`，但是如果你想在 Minikube VM 上配置访问权限，可以将 `.dockercfg` 放在 `/home/docker` 目录中，或将`config.json` 放在 `/home/docker/.docker` 目录。
 
 <!--
 ## Add-ons
@@ -822,7 +806,7 @@ We recommend you use `ImagePullSecrets`, but if you would like to configure acce
 <!--
 In order to have Minikube properly start or restart custom addons,place the addons you wish to be launched with Minikube in the `~/.minikube/addons`directory. Addons in this folder will be moved to the Minikube VM and launched each time Minikube is started or restarted.
 -->
-为了让 Minikube 正确启动或重新启动自定义插件，请将您希望用 Minikube 启动的插件放在 `~/.minikube/addons` 目录中。此文件夹中的插件将被移动到 Minikube VM 并在每次 Minikube 启动或重新启动时被启动。
+为了让 Minikube 正确启动或重新启动自定义插件，请将你希望用 Minikube 启动的插件放在 `~/.minikube/addons` 目录中。此文件夹中的插件将被移动到 Minikube VM 并在每次 Minikube 启动或重新启动时被启动。
 
 <!--
 ## Using Minikube with an HTTP Proxy
@@ -841,7 +825,7 @@ When Kubernetes attempts to schedule containers using Docker, the Docker daemon
 <!--
 If you are behind an HTTP proxy, you may need to supply Docker with the proxy settings.
 -->
-如果您配置了 HTTP 代理，则可能也需要为 Docker 进行代理设置。
+如果你配置了 HTTP 代理，则可能也需要为 Docker 进行代理设置。
 <!--
 To do this, pass the required environment variables as flags during `minikube start`.
 -->
@@ -860,11 +844,11 @@ minikube start --docker-env http_proxy=http://$YOURPROXY:PORT \
 <!--
 If your Virtual Machine address is 192.168.99.100, then chances are your proxy settings will prevent `kubectl` from directly reaching it.
 -->
-如果您的虚拟机地址是 192.168.99.100，那么您的代理设置可能会阻止 `kubectl` 直接访问它。
+如果你的虚拟机地址是 192.168.99.100，那么你的代理设置可能会阻止 `kubectl` 直接访问它。
 <!--
 To by-pass proxy configuration for this IP address, you should modify your no_proxy settings. You can do so with:
 -->
-要绕过此 IP 地址的代理配置，您应该修改 no_proxy 设置。您可以这样做：
+要绕过此 IP 地址的代理配置，你应该修改 no_proxy 设置。你可以这样做：
 
 ```shell
 export no_proxy=$no_proxy,$(minikube ip)
@@ -918,12 +902,14 @@ For more information about Minikube, see the [proposal](https://git.k8s.io/commu
 
 <!--
 ## Community
+
+Contributions, questions, and comments are all welcomed and encouraged! Minikube developers hang out on [Slack](https://kubernetes.slack.com) in the #minikube channel (get an invitation [here](http://slack.kubernetes.io/)). We also have the [kubernetes-dev Google Groups mailing list](https://groups.google.com/forum/#!forum/kubernetes-dev). If you are posting to the list please prefix your subject with "minikube: ".
 -->
 ## 社区
 
-<!--
-Contributions, questions, and comments are all welcomed and encouraged! Minikube developers hang out on [Slack](https://kubernetes.slack.com) in the #minikube channel (get an invitation [here](http://slack.kubernetes.io/)). We also have the [kubernetes-dev Google Groups mailing list](https://groups.google.com/forum/#!forum/kubernetes-dev). If you are posting to the list please prefix your subject with "minikube: ".
--->
-我们欢迎您向社区提交贡献、提出问题以及参与评论！Minikube 开发人员可以在 [Slack](https://kubernetes.slack.com) 的 #minikube 频道上互动交流（点击[这里](http://slack.kubernetes.io/)获得邀请）。我们还有 [kubernetes-dev Google Groups 邮件列表](https://groups.google.com/forum/#!forum/kubernetes-dev)。如果您要发信到列表中，请在主题前加上 "minikube: "。
-
+我们欢迎你向社区提交贡献、提出问题以及参与评论！Minikube 开发人员可以在
+[Slack](https://kubernetes.slack.com) 的 #minikube 频道上互动交流
+（点击[这里](https://slack.kubernetes.io/)获得邀请）。
+我们还有 [kubernetes-dev Google Groups 邮件列表](https://groups.google.com/forum/#!forum/kubernetes-dev)。
+如果你要发信到列表中，请在主题前加上 "minikube: "。
 
diff --git a/content/zh/docs/setup/release/notes.md b/content/zh/docs/setup/release/notes.md
index 804e0c3670..2a4d377368 100644
--- a/content/zh/docs/setup/release/notes.md
+++ b/content/zh/docs/setup/release/notes.md
@@ -86,7 +86,7 @@ The `IngressClass` resource is used to describe a type of Ingress within a Kuber
 
 ### SIG CLI introduces kubectl debug
 
-SIG CLI was debating the need for a debug utility for quite some time already. With the development of [ephemeral containers](https://kubernetes.io/docs/concepts/workloads/pods/ephemeral-containers/), it became more obvious how we can support developers with tooling built on top of `kubectl exec`. The addition of the `kubectl debug` [command](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/20190805-kubectl-debug.md) (it is alpha but your feedback is more than welcome), allows developers to easily debug their Pods inside the cluster. We think this addition is invaluable.  This command allows one to create a temporary container which runs next to the Pod one is trying to examine, but also attaches to the console for interactive troubleshooting.
+SIG CLI was debating the need for a debug utility for quite some time already. With the development of [ephemeral containers](/zh/docs/concepts/workloads/pods/ephemeral-containers/), it became more obvious how we can support developers with tooling built on top of `kubectl exec`. The addition of the `kubectl debug` [command](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/20190805-kubectl-debug.md) (it is alpha but your feedback is more than welcome), allows developers to easily debug their Pods inside the cluster. We think this addition is invaluable.  This command allows one to create a temporary container which runs next to the Pod one is trying to examine, but also attaches to the console for interactive troubleshooting.
 
 ### Introducing Windows CSI support alpha for Kubernetes
 
diff --git a/content/zh/docs/setup/release/version-skew-policy.md b/content/zh/docs/setup/release/version-skew-policy.md
index 0bc7b4e4e0..9523879ac2 100644
--- a/content/zh/docs/setup/release/version-skew-policy.md
+++ b/content/zh/docs/setup/release/version-skew-policy.md
@@ -33,7 +33,7 @@ where **x** is the major version, **y** is the minor version, and **z** is the p
 For more information, see [Kubernetes Release Versioning](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning).
 -->
 Kubernetes 版本号格式为 **x.y.z**，其中 **x** 为大版本号，**y** 为小版本号，**z** 为补丁版本号。
-版本号格式遵循 [Semantic Versioning](http://semver.org/) 规则。
+版本号格式遵循 [Semantic Versioning](https://semver.org/) 规则。
 更多信息，请参阅 [Kubernetes Release Versioning](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning)。
 
 <!--

From 844cb38372fa2a71e3a484c7dc94431544773257 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Mon, 7 Sep 2020 11:53:17 +0300
Subject: [PATCH 234/496] sync video block

---
 content/ru/_index.html | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/content/ru/_index.html b/content/ru/_index.html
index 7298da03f4..e86c2bf206 100644
--- a/content/ru/_index.html
+++ b/content/ru/_index.html
@@ -41,12 +41,7 @@ Kubernetes — это проект с открытым исходным кодо
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Смотреть видео</button>
         <br>
         <br>
-        <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2020/" button id="desktopKCButton">Посетите KubeCon в Амстердаме, с 30 марта по 2 апреля 2020</a>
-        <br>
-        <br>
-        <br>
-        <br>
-        <a href="https://events.linuxfoundation.cn/kubecon-cloudnativecon-open-source-summit-china/" button id="desktopKCButton"> Посетите KubeCon в Шанхае, с 28 по 30 июля 2020</a>
+        <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=kubernetes.io&utm_medium=nav&utm_campaign=kccncna20" button id="desktopKCButton">Посетите KubeCon NA онлайн, 17-20 ноября 2020</a>
 </div>
 <div id="videoPlayer">
     <iframe data-url="https://www.youtube.com/embed/H06qrNmGqyE?autoplay=1" frameborder="0" allowfullscreen></iframe>

From 4b6fc1610ab29f0330c15f51181b4c45cdfc0d71 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Miguel=20Parrella?= <j@bureado.com>
Date: Mon, 7 Sep 2020 03:49:42 -0700
Subject: [PATCH 235/496] Add
 content/es/docs/concepts/overview/kubernetes-api.md (#14649)

* Add content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Rael Garcia <me@rael.io>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Rael Garcia <me@rael.io>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Rael Garcia <me@rael.io>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-Authored-By: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

* Update content/es/docs/concepts/overview/kubernetes-api.md

Co-authored-by: Victor Morales <chipahuac@hotmail.com>
Co-authored-by: Rael Garcia <me@rael.io>
Co-authored-by: Rael Garcia <rael@rael.io>
---
 .../docs/concepts/overview/kubernetes-api.md  | 129 ++++++++++++++++++
 1 file changed, 129 insertions(+)
 create mode 100644 content/es/docs/concepts/overview/kubernetes-api.md

diff --git a/content/es/docs/concepts/overview/kubernetes-api.md b/content/es/docs/concepts/overview/kubernetes-api.md
new file mode 100644
index 0000000000..f8b3fe64b6
--- /dev/null
+++ b/content/es/docs/concepts/overview/kubernetes-api.md
@@ -0,0 +1,129 @@
+---
+reviewers:
+- raelga
+title: API de Kubernetes
+content_template: templates/concept
+weight: 30
+card: 
+  name: concepts
+  weight: 30
+---
+
+{{% capture overview %}}
+
+Las convenciones globales de la API se describen en el [documento de convenciones de la API](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md).
+
+Los endpoints, tipos de recursos y ejemplos se describen en la [Referencia](/es/docs/reference) de la API.
+
+El acceso remoto a la API se discute en el documento [Controlando el acceso a la API](/docs/reference/access-authn-authz/controlling-access/).
+
+La API de Kubernetes sirve como base para el esquema de configuración declarativa del sistema. La herramienta de
+línea de comandos [kubectl](/docs/reference/kubectl/overview/) puede ser usada para crear, actualizar, eliminar y consultar objetos a través de la API.
+
+Kubernetes también almacena el estado de los recursos de la API en forma serializada. Actualmente esto se hace en [etcd](https://coreos.com/docs/distributed-configuration/getting-started-with-etcd/).
+
+Kubernetes está compuesto, en si mismo, por varios componentes que interactúan a través de su API.
+
+{{% /capture %}}
+
+
+{{% capture body %}}
+
+## Cambios a la API
+
+En nuestra experiencia, cualquier sistema exitoso necesita crecer y evolucionar al cambiar o emerger nuevos casos de uso. Por lo tanto, esperamos que la API de Kubernetes cambie y crezca continuamente. Dicho esto, nuestro objetivo es no romper la compatibilidad con los clientes ya existentes, por un período de tiempo razonable. En general, podemos esperar que se agreguen nuevos recursos y propiedades con cierta frecuencia. Para eliminar un recurso o propiedad, se requiere seguir la [política de obsolescencia de la API](/docs/reference/using-api/deprecation-policy/).
+
+En el documento de [cambios a la API](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md) describimos como cambiar la API y definimos lo que es considerado como un cambio compatible.
+
+## Definiciones OpenAPI y Swagger
+
+Los detalles completos de la API se documentan usando [OpenAPI](https://www.openapis.org/).
+
+A partir de Kubernetes 1.10, el servidor de API de Kubernetes provee una especificación OpenAPI en el endpoint  `/openapi/v2`.
+
+Se puede solicitar un formato en particular utilizando las siguientes cabeceras HTTP:
+
+| Cabecera        | Valores admitidos                                                                                                                                                                  |
+| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Accept          | `application/json`, `application/com.github.proto-openapi.spec.v2@v1.0+protobuf` (el content-type predeterminado es `application/json` si esta cabecera contiene `*/*` o se omite) |
+| Accept-Encoding | `gzip` (esta cabecera es opcional)                                                                                                                                                 |
+
+Antes de 1.14, los endpoints separados por formato (`/swagger.json`, `/swagger-2.0.0.json`, `/swagger-2.0.0.pb-v1`, `/swagger-2.0.0.pb-v1.gz`)
+servían la especificación OpenAPI en distintos formatos. Estos endpoints se consideran obsoletos y serán removidos en Kubernetes 1.14.
+
+**Ejemplos**:
+
+| Antes de 1.10               | A partir de 1.10                                                                                                 |
+| --------------------------- | ---------------------------------------------------------------------------------------------------------------- |
+| GET /swagger.json           | GET /openapi/v2 **Accept**: application/json                                                                     |
+| GET /swagger-2.0.0.pb-v1    | GET /openapi/v2 **Accept**: application/com.github.proto-openapi.spec.v2@v1.0+protobuf                           |
+| GET /swagger-2.0.0.pb-v1.gz | GET /openapi/v2 **Accept**: application/com.github.proto-openapi.spec.v2@v1.0+protobuf **Accept-Encoding**: gzip |
+
+Kubernetes implementa un formato alternativo de serialización basado en [Protocol Buffer (_Protobuf_)](https://developers.google.com/protocol-buffers/) diseñado principalmente para las comunicaciones dentro del clúster. Este formato está documentado en su [propuesta de diseño](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/protobuf.md) y los archivos IDL de cada esquema se encuentran en los paquetes de Go que definen los objetos de la API.
+
+Antes de 1.14, el `apiserver` de Kubernetes ofrecía una API para obtener la especificación [Swagger v1.2](http://swagger.io/) de la API de Kubernetes en `/swaggerapi`. Este endpoint se considera obsoleto y será removido en Kubernetes 1.14.
+
+## Versionado de la API
+
+Para facilitar la eliminación de propiedades o reestructurar la representación de un recurso, Kubernetes soporta múltiples versiones de la API en distintas rutas como `/api/v1` or `/apis/extensions/v1beta1`.
+
+Se versiona a nivel de la API en vez de a nivel de los recursos o propiedades para asegurarnos de que la API presenta una visión clara y consistente de los recursos y el comportamiento del sistema, y para controlar el acceso a las APIs experimentales o que estén terminando su ciclo de vida. Los esquemas de serialización JSON y Protobuf siguen los mismos lineamientos para los cambios, es decir, estas descripciones cubren ambos formatos.
+
+Se ha de tener en cuenta que hay una relación indirecta entre el versionado de la API y el versionado del resto del software. La propuesta de [versionado de la API y releases](https://git.k8s.io/community/contributors/design-proposals/release/versioning.md) describe esta relación.
+
+Las distintas versiones de la API implican distintos niveles de estabilidad y soporte. El criterio para cada nivel se describe en detalle en la documentación de [Cambios a la API](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions). A continuación se ofrece un resumen:
+
+- Nivel "alpha":
+  - El nombre de la versión contiene `alpha` (p. ej., `v1alpha1`).
+  - Puede tener muchos errores. Activar esta característica podría exponer errores. Desactivada por defecto.
+  - El soporte para esta característica podría ser eliminado sin previo aviso.
+  - La API podría volverse incompatible en el futuro y sin previo aviso.
+  - Se recomienda su uso solo en clústers efímeros y de prueba ya que hay mayor riesgo de errores y carece de soporte a largo plazo
+- Nivel "beta":
+  - El nombre de la versión contiene `beta` (p. ej., `v2beta3`).
+  - El código ha sido probado. Activar esta característica es seguro. Activada por defecto.
+  - Los detalles de esta característica podrían cambiar, pero se mantendrá el soporte.
+  - El esquema y/o la semántica de un objeto podría volverse incompatible en el futuro. Si esto pasa, se ofrecerán instrucciones para migrar a una nueva versión. Esto podría requerir eliminar, editar o volver a crear objetos. El proceso de edición podría requerir planificación, incluyendo tiempo de inactividad para aplicaciones que usaban esta característica.
+  - No se recomienda para aplicaciones críticas de negocio ya que podría volverse incompatible en futuras versiones. Si tiene múltiples clústeres que pueden actualizarse de forma independiente se podría decidir correr este riesgo.
+  - **Por favor, ¡pruebe las características en fase beta y comparta sus comentarios! Una vez que salgan de la fase beta, sería más difícil hacer cambios.**
+- Nivel estable:
+  - El nombre de la versión es `vX` donde `X` es un entero.
+  - Las versiones estables de las características aparecerán en los siguientes releases.
+
+## Grupos de API
+
+Para que sea más fácil extender la API de Kubernetes, se han creado los [*grupos de API*](https://git.k8s.io/community/contributors/design-proposals/api-machinery/api-group.md).
+Estos grupos se especifican en una ruta REST y en la propiedad `apiVersion` de un objeto serializado.
+
+Actualmente hay varios grupos de API en uso:
+
+1. El grupo *core* (o *group*) en la ruta REST `/api/v1` y usa `apiVersion: v1`.
+
+2. Los grupos con entidad propia están en la ruta REST `/apis/$NOMBRE_GRUPO/$VERSION` y usan `apiVersion: $NOMBRE_GRUPO/$VERSION`.
+   (p. ej., `apiVersion: batch/v1`).  La lista completa de los grupos soportados está disponible en la [Referencia de la API](/es/docs/reference/).
+
+
+Hay dos rutas soportadas para extender la API con [recursos personalizados](/docs/concepts/api-extension/custom-resources/):
+
+1. [CustomResourceDefinition](/docs/tasks/access-kubernetes-api/extend-api-custom-resource-definitions/)
+   es para los usuarios que tengan necesidades CRUD muy básicas.
+2. Los usuarios que necesiten la semántica completa de la API pueden implementar su propio `apiserver`
+   usando el [agregador](/docs/tasks/access-kubernetes-api/configure-aggregation-layer/) para hacerlo
+   transparente para los clientes.
+
+## Activar los grupos de API
+
+Ciertos recursos y grupos de API están activados por defecto. Pueden activarse o desactivarse con la opción `--runtime-config` en `apiserver`. `--runtime-config` acepta valores separados por coma. Por ejemplo, para desactivar `batch/v1`, use la opción
+`--runtime-config=batch/v1=false`. Para activar `batch/v2alpha1`, pase la opción `--runtime-config=batch/v2alpha1`.
+Esta opción acepta pares de `clave=valor` separados por coma que describen la configuración operativa del `apiserver`.
+
+**IMPORTANTE:** Activar o desactivar grupos o recursos requiere reiniciar el `apiserver` y el controller-manager para que estos reconozcan los cambios a `--runtime-config`.
+
+## Activar recursos en los grupos
+
+Los `DaemonSets`, `Deployments`, `HorizontalPodAutoscalers`, `Ingresses`, `Jobs` y `ReplicaSets` están activados por defecto.
+
+Se pueden activar otros recursos con la opción `--runtime-config` del `apiserver`. Por ejemplo, como `--runtime-config` acepta valores separados por coma, puede desactivar los Deployments y los Ingress con la opción
+`--runtime-config=extensions/v1beta1/deployments=false,extensions/v1beta1/ingresses=false`
+
+{{% /capture %}}

From 8bdeda57acb3e2064f8f42d1e40336897e96b329 Mon Sep 17 00:00:00 2001
From: Hannes Leutloff <hannes.leutloff@yeldirium.de>
Date: Fri, 28 Aug 2020 20:13:50 +0200
Subject: [PATCH 236/496] Update setup-ha-etcd-with-kubeadm.md

It was not clear to me that I had to add the unit file to all nodes and restart the kubelet service. I was stuck wondering why etcd could not connect to the other peers until i realized that kubelet was only running on `HOST-0`.

Remove parantheses.

Improve phrasing.

Update content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../tools/kubeadm/setup-ha-etcd-with-kubeadm.md               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
index b707828cc9..69c96ca08f 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/setup-ha-etcd-with-kubeadm.md
@@ -50,7 +50,8 @@ this example.
 
 
 1. Configure the kubelet to be a service manager for etcd.
-
+  
+   {{< note >}}You must do this on every host where etcd should be running.{{< /note >}}
     Since etcd was created first, you must override the service priority by creating a new unit file
     that has higher precedence than the kubeadm-provided kubelet unit file.
 
@@ -270,4 +271,3 @@ Once you have a working 3 member etcd cluster, you can continue setting up a
 highly available control plane using the [external etcd method with
 kubeadm](/docs/setup/production-environment/tools/kubeadm/high-availability/).
 
-

From e592fc15f563994761a6662d84fac9c97f854089 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 7 Sep 2020 20:50:06 +0800
Subject: [PATCH 237/496] [zh] fix links in setup section (3)

---
 .../on-premises-vm/ovirt.md                   |  40 ++---
 .../tools/kubeadm/self-hosting.md             |  47 +++---
 .../tools/kubeadm/troubleshooting-kubeadm.md  | 155 ++++++++++--------
 .../windows/user-guide-windows-containers.md  | 148 +++++++++--------
 .../docs/setup/release/version-skew-policy.md |  66 ++++----
 5 files changed, 234 insertions(+), 222 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md b/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md
index ea8790f452..5d9c3fdd10 100644
--- a/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md
+++ b/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md
@@ -3,13 +3,11 @@ title: oVirt
 content_type: concept
 ---
 <!--
----
 reviewers:
 - caesarxuchao
 - erictune
 title: oVirt
 content_type: concept
----
 -->
 
 <!-- overview -->
@@ -20,52 +18,44 @@ oVirt is a virtual datacenter manager that delivers powerful management of multi
 oVirt 是一个虚拟数据中心管理器，可以对多个主机上的多个虚拟机进行强大的管理。
 使用 KVM 和 libvirt ，可以将 oVirt 安装在 Fedora、CentOS 或者 Red Hat Enterprise Linux 主机上，以部署和管理您的虚拟数据中心。
 
-
-
 <!-- body -->
 
 <!--
 ## oVirt Cloud Provider Deployment
--->
-## oVirt 云驱动的部署
 
-<!--
 The oVirt cloud provider allows to easily discover and automatically add new VM instances as nodes to your Kubernetes cluster.
 At the moment there are no community-supported or pre-loaded VM images including Kubernetes but it is possible to [import] or [install] Project Atomic (or Fedora) in a VM to [generate a template]. Any other distribution that includes Kubernetes may work as well.
 -->
+## oVirt 云驱动的部署
+
 oVirt 云驱动可以轻松发现新 VM 实例并自动将其添加为 Kubernetes 集群的节点。
-目前，包括 Kubernetes 在内，尚无社区支持或预加载的 VM 镜像，但可以在 VM 中 [导入] 或 [安装] Project Atomic（或 Fedora）来 [生成模版]。
+目前，包括 Kubernetes 在内，尚无社区支持或预加载的 VM 镜像，但可以在 VM 中
+[导入](https://ovedou.blogspot.it/2014/03/importing-glance-images-as-ovirt.html) 或
+[安装](https://www.ovirt.org/documentation/quickstart/quickstart-guide/#create-virtual-machines)
+Project Atomic（或 Fedora）来 
+[生成模版](https://www.ovirt.org/documentation/quickstart/quickstart-guide/#using-templates)。
 包括 Kubernetes 的任何其他 Linux 发行版也可能可行。
 
 <!--
 It is mandatory to [install the ovirt-guest-agent] in the guests for the VM ip address and hostname to be reported to ovirt-engine and ultimately to Kubernetes.
 -->
-必须在寄宿系统中 [安装 ovirt-guest-agent]，才能将 VM 的 IP 地址和主机名报给 ovirt-engine 并最终报告给 Kubernetes。
+必须在寄宿系统中
+[安装 ovirt-guest-agent](https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-agent-in-fedora/)，
+才能将 VM 的 IP 地址和主机名报给 ovirt-engine 并最终报告给 Kubernetes。
 
 <!--
 Once the Kubernetes template is available it is possible to start instantiating VMs that can be discovered by the cloud provider.
 -->
 一旦 Kubernetes 模版可用，就可以开始创建可由云驱动发现的 VM。
 
-<!--
-[import]: https://ovedou.blogspot.it/2014/03/importing-glance-images-as-ovirt.html
-[install]: https://www.ovirt.org/documentation/quickstart/quickstart-guide/#create-virtual-machines
-[generate a template]: https://www.ovirt.org/documentation/quickstart/quickstart-guide/#using-templates
-[install the ovirt-guest-agent]: https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-agent-in-fedora/
--->
-[导入]: https://ovedou.blogspot.it/2014/03/importing-glance-images-as-ovirt.html
-[安装]: https://www.ovirt.org/documentation/quickstart/quickstart-guide/#create-virtual-machines
-[生成模版]: https://www.ovirt.org/documentation/quickstart/quickstart-guide/#using-templates
-[安装 ovirt-guest-agent]: https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-agent-in-fedora/
-
 <!--
 ## Using the oVirt Cloud Provider
+
+The oVirt Cloud Provider requires access to the oVirt REST-API to gather the proper information,
+the required credential should be specified in the `ovirt-cloud.conf` file:
 -->
 ## 使用 oVirt 云驱动
 
-<!--
-The oVirt Cloud Provider requires access to the oVirt REST-API to gather the proper information, the required credential should be specified in the `ovirt-cloud.conf` file:
--->
 oVirt 云驱动需要访问 oVirt REST-API 来收集正确的信息，所需的凭据应在 `ovirt-cloud.conf` 文件中设定：
 
 ```none
@@ -128,8 +118,6 @@ oVirt                |              |        |             | [docs](/docs/setup/
 -->
 IaaS 提供商        | 配置管理 | OS     | 联网  | 文件                                              | 遵从性 | 支持级别
 ----------------- | ------- | ------ | ---- | ------------------------------------------------- |------| ---------------
-oVirt | | | | [文件](/docs/setup/production-environment/on-premises-vm/ovirt/) | | 社区 ([@simon3z](https://github.com/simon3z))
-
-
+oVirt | | | | [文件](/zh/docs/setup/production-environment/on-premises-vm/ovirt/) | | 社区 ([@simon3z](https://github.com/simon3z))
 
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md b/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
index 66444b3101..d02d2b7a0c 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/self-hosting.md
@@ -1,18 +1,12 @@
 ---
-reviewers:
-- sig-cluster-lifecycle
 title: 配置您的 kubernetes 集群以自托管控制平台
 content_type: concept
 weight: 100
 ---
 <!--
----
-reviewers:
-- sig-cluster-lifecycle
 title: Configuring your kubernetes cluster to self-host the control plane
 content_type: concept
 weight: 100
----
 -->
 
 <!-- overview -->
@@ -30,15 +24,17 @@ configured via the Kubernetes API instead of [static pods](/docs/tasks/administe
 configured in the kubelet via static files.
 -->
 kubeadm 允许您实验性地创建 _self-hosted_ Kubernetes 控制平面。
-这意味着 API 服务器，控制管理器和调度程序之类的关键组件将通过配置 Kubernetes API 以 [DaemonSet pods](/docs/concepts/workloads/controllers/daemonset/) 的身份运行，而不是通过静态文件将 [static pods](/docs/tasks/administer-cluster/static-pod/) 在 kubelet 中配置。
+这意味着 API 服务器，控制管理器和调度程序之类的关键组件将通过配置 Kubernetes API 以
+[DaemonSet Pods](/zh/docs/concepts/workloads/controllers/daemonset/) 的身份运行，
+而不是通过静态文件在 kubelet 中配置[静态 Pods](/zh/docs/tasks/configure-pod-container/static-pod/)。
 
 <!--
 To create a self-hosted cluster see the
 [kubeadm alpha selfhosting pivot](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting) command.
 -->
-要创建自托管集群，请参见 [kubeadm alpha 自托管枢纽](/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting) 命令。
-
-
+要创建自托管集群，请参见
+[kubeadm alpha selfhosting pivot](/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha/#cmd-selfhosting)
+命令。
 
 <!-- body -->
 
@@ -47,11 +43,11 @@ To create a self-hosted cluster see the
 -->
 #### 警告
 
-{{< caution >}}
 <!--
 This feature pivots your cluster into an unsupported state, rendering kubeadm unable
 to manage you cluster any longer. This includes `kubeadm upgrade`.
 -->
+{{< caution >}}
 此功能将您的集群设置为不受支持的状态，从而使 kubeadm 无法再管理您的集群。
 这包括 `kubeadm 升级` 。
 {{< /caution >}}
@@ -62,7 +58,7 @@ to manage you cluster any longer. This includes `kubeadm upgrade`.
   without manual intervention.
 -->
 1. 1.8及更高版本中的自托管功能有一些重要限制。
-特别是，自托管集群在没有人工干预的情况下_无法从控制平面节点的重新启动中恢复_ 。
+   特别是，自托管集群在没有人工干预的情况下_无法从控制平面节点的重新启动中恢复_ 。
 
 <!--
 1. By default, self-hosted control plane Pods rely on credentials loaded from
@@ -70,30 +66,30 @@ to manage you cluster any longer. This includes `kubeadm upgrade`.
   volumes. Except for initial creation, these credentials are not managed by
   kubeadm.
 -->
-1. 默认情况下，自托管的控制平面 Pod 依赖于从  [`hostPath`](/docs/concepts/storage/volumes/#hostpath) 卷加载的凭据。
-除初始创建外，这些凭据不由 kubeadm 管理。
+2. 默认情况下，自托管的控制平面 Pod 依赖于从
+   [`hostPath`](/zh/docs/concepts/storage/volumes/#hostpath) 卷加载的凭据。
+   除初始创建外，这些凭据不由 kubeadm 管理。
 
 <!--
 1. The self-hosted portion of the control plane does not include etcd,
   which still runs as a static Pod.
 -->
-1. 控制平面的自托管部分不包括 etcd，后者仍作为静态 Pod 运行。
+3. 控制平面的自托管部分不包括 etcd，后者仍作为静态 Pod 运行。
 
 <!--
 #### Process
--->
-#### 处理
 
-<!--
 The self-hosting bootstrap process is documented in the [kubeadm design
 document](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting).
 -->
-自托管引导过程记录在 [kubeadm 设计文档](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting) 中。
+#### 过程
+
+自托管引导过程描述于 [kubeadm 设计文档](https://github.com/kubernetes/kubeadm/blob/master/docs/design/design_v1.9.md#optional-self-hosting) 中。
 
 <!--
 In summary, `kubeadm alpha selfhosting` works as follows:
 -->
-总而言之，`kubeadm alpha 自托管` 的工作原理如下：
+总体而言，`kubeadm alpha 自托管` 的工作原理如下：
 
 <!--
   1. Waits for this bootstrap static control plane to be running and
@@ -107,28 +103,27 @@ In summary, `kubeadm alpha selfhosting` works as follows:
     It also modifies these manifests where necessary, for example adding new volumes
     for secrets.
 -->
-  1. 使用静态控制平面 Pod 清单来构造一组 DaemonSet 清单，这些清单将运行自托管的控制平面。
+  2. 使用静态控制平面 Pod 清单来构造一组 DaemonSet 清单，这些清单将运行自托管的控制平面。
      它还会在必要时修改这些清单，例如添加新的秘密卷。
 
 <!--
   1. Creates DaemonSets in the `kube-system` namespace and waits for the
      resulting Pods to be running.
 -->
-  1. 在 `kube-system` 名称空间中创建 DaemonSets ，并等待生成的 Pod 运行。
+  3. 在 `kube-system` 名称空间中创建 DaemonSets ，并等待生成的 Pod 运行。
 
 <!--
   1. Once self-hosted Pods are operational, their associated static Pods are deleted
      and kubeadm moves on to install the next component. This triggers kubelet to
      stop those static Pods.
 -->
- 1. 自托管 Pod 运行后，将删除其关联的静态 Pod，然后 kubeadm 继续安装下一个组件。
-    这将触发 kubelet 停止那些静态 Pod 。
+  4. 自托管 Pod 运行后，将删除其关联的静态 Pod，然后 kubeadm 继续安装下一个组件。
+     这将触发 kubelet 停止那些静态 Pod 。
 
 <!--
   1. When the original static control plane stops, the new self-hosted control
     plane is able to bind to listening ports and become active.
 -->
-  1. 当原始静态控制平面停止时，新的自托管控制平面能够绑定到侦听端口并变为活动状态。
-
+  5. 当原始静态控制平面停止时，新的自托管控制平面能够绑定到侦听端口并变为活动状态。
 
 
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
index 43176afae3..a5cf846a30 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm.md
@@ -5,11 +5,9 @@ weight: 20
 ---
 
 <!--
----
 title: Troubleshooting kubeadm
 content_type: concept
 weight: 20
----
 -->
 <!-- overview -->
 
@@ -26,19 +24,18 @@ If your problem is not listed below, please follow the following steps:
 - If you are unsure about how kubeadm works, you can ask on [Slack](http://slack.k8s.io/) in #kubeadm, or open a question on [StackOverflow](https://stackoverflow.com/questions/tagged/kubernetes). Please include
   relevant tags like `#kubernetes` and `#kubeadm` so folks can help you.
 -->
-与任何程序一样，您可能会在安装或者运行 kubeadm 时遇到错误。
-本文列举了一些常见的故障场景，并提供可帮助您理解和解决这些问题的步骤。
+与任何程序一样，你可能会在安装或者运行 kubeadm 时遇到错误。
+本文列举了一些常见的故障场景，并提供可帮助你理解和解决这些问题的步骤。
 
-如果您的问题未在下面列出，请执行以下步骤：
+如果你的问题未在下面列出，请执行以下步骤：
 
-- 如果您认为问题是 kubeadm 的错误：
+- 如果你认为问题是 kubeadm 的错误：
   - 转到 [github.com/kubernetes/kubeadm](https://github.com/kubernetes/kubeadm/issues) 并搜索存在的问题。
   - 如果没有问题，请 [打开](https://github.com/kubernetes/kubeadm/issues/new) 并遵循问题模板。
 
-- 如果您对 kubeadm 的工作方式有疑问，可以在 [Slack](http://slack.k8s.io/) 上的 #kubeadm 频道提问，
+- 如果你对 kubeadm 的工作方式有疑问，可以在 [Slack](https://slack.k8s.io/) 上的 #kubeadm 频道提问，
 或者在 [StackOverflow](https://stackoverflow.com/questions/tagged/kubernetes) 上提问。
-请加入相关标签，例如 `#kubernetes` 和 `#kubeadm`，这样其他人可以帮助您。
-
+请加入相关标签，例如 `#kubernetes` 和 `#kubeadm`，这样其他人可以帮助你。
 
 
 <!-- body -->
@@ -67,8 +64,8 @@ Then you may be missing `ebtables`, `ethtool` or a similar executable on your no
 [preflight] WARNING: ethtool not found in system path
 ```
 
-那么或许在您的节点上缺失 `ebtables`、`ethtool` 或者类似的可执行文件。
-您可以使用以下命令安装它们：
+那么或许在你的节点上缺失 `ebtables`、`ethtool` 或者类似的可执行文件。
+你可以使用以下命令安装它们：
 
 - 对于 Ubuntu/Debian 用户，运行 `apt install ebtables ethtool` 命令。
 - 对于 CentOS/Fedora 用户，运行 `yum install ebtables ethtool` 命令。
@@ -84,7 +81,7 @@ If you notice that `kubeadm init` hangs after printing out the following line:
 -->
 ## 在安装过程中，kubeadm 一直等待控制平面就绪
 
-如果您注意到 `kubeadm init` 在打印以下行后挂起：
+如果你注意到 `kubeadm init` 在打印以下行后挂起：
 
 ```sh
 [apiclient] Created API client, waiting for the control plane to become ready
@@ -114,9 +111,9 @@ This may be caused by a number of problems. The most common are:
 -->
 这可能是由许多问题引起的。最常见的是：
 
-- 网络连接问题。在继续之前，请检查您的计算机是否具有全部联通的网络连接。
+- 网络连接问题。在继续之前，请检查你的计算机是否具有全部联通的网络连接。
 - kubelet 的默认 cgroup 驱动程序配置不同于 Docker 使用的配置。
-  检查系统日志文件 (例如 `/var/log/message`) 或检查 `journalctl -u kubelet` 的输出。 如果您看见以下内容：
+  检查系统日志文件 (例如 `/var/log/message`) 或检查 `journalctl -u kubelet` 的输出。 如果你看见以下内容：
 
   ```shell
   error: failed to run Kubelet: failed to create kubelet:
@@ -125,12 +122,12 @@ This may be caused by a number of problems. The most common are:
 
   有两种常见方法可解决 cgroup 驱动程序问题：
 
- 1. 按照 [此处](/docs/setup/production-environment/container-runtimes/#docker) 的说明再次安装 Docker。
+  1. 按照 [此处](/zh/docs/setup/production-environment/container-runtimes/#docker) 的说明再次安装 Docker。
 
- 1. 更改 kubelet 配置以手动匹配 Docker cgroup 驱动程序，您可以参考
-    [在主节点上配置 kubelet 要使用的 cgroup 驱动程序](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
+  1. 更改 kubelet 配置以手动匹配 Docker cgroup 驱动程序，你可以参考
+     [在主节点上配置 kubelet 要使用的 cgroup 驱动程序](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
 
-- 控制平面上的 Docker 容器持续进入崩溃状态或（因其他原因）挂起。您可以运行 `docker ps` 命令来检查以及 `docker logs` 命令来检视每个容器的运行日志。
+- 控制平面上的 Docker 容器持续进入崩溃状态或（因其他原因）挂起。你可以运行 `docker ps` 命令来检查以及 `docker logs` 命令来检视每个容器的运行日志。
 
 <!--
 ## kubeadm blocks when removing managed containers
@@ -181,7 +178,7 @@ sudo kubeadm reset
 
 检查 docker 的日志也可能有用：
 
-```sh
+```shell
 journalctl -ul docker
 ```
 
@@ -209,15 +206,17 @@ Right after `kubeadm init` there should not be any pods in these states.
 
 - 在 `kubeadm init` 命令执行完后，如果有 pods 处于这些状态之一，请在 kubeadm
   仓库提起一个 issue。`coredns` (或者 `kube-dns`) 应该处于 `Pending` 状态，
-  直到您部署了网络解决方案为止。
+  直到你部署了网络解决方案为止。
+
 - 如果在部署完网络解决方案之后，有 Pods 处于 `RunContainerError`、`CrashLoopBackOff`
   或 `Error` 状态之一，并且`coredns` （或者 `kube-dns`）仍处于 `Pending` 状态，
-  那很可能是您安装的网络解决方案由于某种原因无法工作。您或许需要授予它更多的
+  那很可能是你安装的网络解决方案由于某种原因无法工作。你或许需要授予它更多的
   RBAC 特权或使用较新的版本。请在 Pod Network 提供商的问题跟踪器中提交问题，
   然后在此处分类问题。
-- 如果您安装的 Docker 版本早于 1.12.1，请在使用 `systemd` 来启动 `dockerd` 和重启 `docker` 时，
+
+- 如果你安装的 Docker 版本早于 1.12.1，请在使用 `systemd` 来启动 `dockerd` 和重启 `docker` 时，
   删除 `MountFlags=slave` 选项。
-  您可以在 `/usr/lib/systemd/system/docker.service` 中看到 MountFlags。
+  你可以在 `/usr/lib/systemd/system/docker.service` 中看到 MountFlags。
   MountFlags 可能会干扰 Kubernetes 挂载的卷， 并使 Pods 处于 `CrashLoopBackOff` 状态。
   当 Kubernetes 不能找到 `var/run/secrets/kubernetes.io/serviceaccount` 文件时会发生错误。
 
@@ -232,8 +231,8 @@ before CoreDNS may be deployed fully. Hence the `Pending` state before the netwo
 ## `coredns` （或 `kube-dns`）停滞在 `Pending` 状态
 
 这一行为是 **预期之中** 的，因为系统就是这么设计的。
-kubeadm 的网络供应商是中立的，因此管理员应该选择 [安装 pod 的网络解决方案](/docs/concepts/cluster-administration/addons/)。
-您必须完成 Pod 的网络配置，然后才能完全部署 CoreDNS。
+kubeadm 的网络供应商是中立的，因此管理员应该选择 [安装 pod 的网络解决方案](/zh/docs/concepts/cluster-administration/addons/)。
+你必须完成 Pod 的网络配置，然后才能完全部署 CoreDNS。
 在网络被配置好之前，DNS 组件会一直处于 `Pending` 状态。
 
 <!--
@@ -252,14 +251,16 @@ services](/docs/concepts/services-networking/service/#nodeport) or use `HostNetw
 -->
 ## `HostPort` 服务无法工作
 
-此 `HostPort` 和 `HostIP` 功能是否可用取决于您的 Pod 网络配置。请联系 Pod 解决方案的作者，
+此 `HostPort` 和 `HostIP` 功能是否可用取决于你的 Pod 网络配置。请联系 Pod 解决方案的作者，
 以确认 `HostPort` 和 `HostIP` 功能是否可用。
 
 已验证 Calico、Canal 和 Flannel CNI 驱动程序支持 HostPort。
 
 有关更多信息，请参考 [CNI portmap 文档](https://github.com/containernetworking/plugins/blob/master/plugins/meta/portmap/README.md).
 
-如果您的网络提供商不支持 portmap CNI 插件，您或许需要使用 [NodePort 服务的功能](/docs/concepts/services-networking/service/#nodeport) 或者使用 `HostNetwork=true`。
+如果你的网络提供商不支持 portmap CNI 插件，你或许需要使用
+[NodePort 服务的功能](/zh/docs/concepts/services-networking/service/#nodeport)
+或者使用 `HostNetwork=true`。
 
 <!--
 ## Pods are not accessible via their Service IP
@@ -277,10 +278,11 @@ services](/docs/concepts/services-networking/service/#nodeport) or use `HostNetw
 -->
 ## 无法通过其服务 IP 访问 Pod
 
-- 许多网络附加组件尚未启用 [hairpin 模式](/docs/tasks/debug-application-cluster/debug-service/#a-pod-cannot-reach-itself-via-service-ip)
-  该模式允许 Pod 通过其服务 IP 进行访问。这是与 [CNI](https://github.com/containernetworking/cni/issues/476) 有关的问题。请与网络附加组件提供商联系，以获取他们所提供的 hairpin 模式的最新状态。
+- 许多网络附加组件尚未启用 [hairpin 模式](/zh/docs/tasks/debug-application-cluster/debug-service/#a-pod-cannot-reach-itself-via-service-ip)
+  该模式允许 Pod 通过其服务 IP 进行访问。这是与 [CNI](https://github.com/containernetworking/cni/issues/476) 有关的问题。
+  请与网络附加组件提供商联系，以获取他们所提供的 hairpin 模式的最新状态。
 
-- 如果您正在使用 VirtualBox (直接使用或者通过 Vagrant 使用)，您需要
+- 如果你正在使用 VirtualBox (直接使用或者通过 Vagrant 使用)，你需要
   确保 `hostname -i` 返回一个可路由的 IP 地址。默认情况下，第一个接口连接不能路由的仅主机网络。
   解决方法是修改 `/etc/hosts`，请参考示例 [Vagrantfile](https://github.com/errordeveloper/k8s-playground/blob/22dd39dfc06111235620e6c4404a96ae146f26fd/Vagrantfile#L11)。
 
@@ -334,19 +336,19 @@ Unable to connect to the server: x509: certificate signed by unknown authority (
   可以用于查看证书信息。
 - 使用如下方法取消设置 `KUBECONFIG` 环境变量的值：
 
-  ```sh
+  ```shell
   unset KUBECONFIG
   ```
 
   或者将其设置为默认的 `KUBECONFIG` 位置：
 
-  ```sh
+  ```shell
   export KUBECONFIG=/etc/kubernetes/admin.conf
   ```
 
 - 另一个方法是覆盖 `kubeconfig` 的现有用户 "管理员" ：
 
-  ```sh
+  ```shell
   mv  $HOME/.kube $HOME/.kube.bak
   mkdir $HOME/.kube
   sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
@@ -366,7 +368,7 @@ Error from server (NotFound): the server could not find the requested resource
 
   Vagrant typically assigns two interfaces to all VMs. The first, for which all hosts are assigned the IP address `10.0.2.15`, is for external traffic that gets NATed.
 
-  This may lead to problems with flannel, which defaults to the first interface on a host. This leads to all hosts thinking they have the same public IP address. To prevent this, pass the `--iface eth1` flag to flannel so that the second interface is chosen.
+  This may lead to problems with flannel, which defaults to the first interface on a host. This leads to all hosts thinking they have the same public IP address. To prevent this, pass the `-iface eth1` flag to flannel so that the second interface is chosen.
 -->
 ## 在 Vagrant 中使用 flannel 作为 pod 网络时的默认 NIC
 
@@ -401,7 +403,7 @@ Error from server: Get https://10.19.0.41:10250/containerLogs/default/mysql-ddc6
   curl http://169.254.169.254/metadata/v1/interfaces/public/0/anchor_ipv4/address
   ```
 
-  The workaround is to tell `kubelet` which IP to use using `--node-ip`. When using Digital Ocean, it can be the public one (assigned to `eth0`) or the private one (assigned to `eth1`) should you want to use the optional private network. The [`KubeletExtraArgs` section of the kubeadm `NodeRegistrationOptions` structure](https://github.com/kubernetes/kubernetes/blob/release-1.13/cmd/kubeadm/app/apis/kubeadm/v1beta1/types.go) can be used for this.
+  The workaround is to tell `kubelet` which IP to use using `-node-ip`. When using Digital Ocean, it can be the public one (assigned to `eth0`) or the private one (assigned to `eth1`) should you want to use the optional private network. The [`KubeletExtraArgs` section of the kubeadm `NodeRegistrationOptions` structure](https://github.com/kubernetes/kubernetes/blob/release-1.13/cmd/kubeadm/app/apis/kubeadm/v1beta1/types.go) can be used for this.
 
   Then restart `kubelet`:
 
@@ -433,14 +435,15 @@ Error from server: Get https://10.19.0.41:10250/containerLogs/default/mysql-ddc6
 
   解决方法是通知 `kubelet` 使用哪个 `--node-ip`。当使用 Digital Ocean 时，可以是公网IP（分配给 `eth0`的），
   或者是私网IP（分配给 `eth1` 的）。私网 IP 是可选的。
-  这个 [`KubeletExtraArgs` section of the kubeadm `NodeRegistrationOptions` structure](https://github.com/kubernetes/kubernetes/blob/release-1.13/cmd/kubeadm/app/apis/kubeadm/v1beta1/types.go) 被用来处理这种情况。
+  [kubadm `NodeRegistrationOptions` 结构的 `KubeletExtraArgs` 部分](https://github.com/kubernetes/kubernetes/blob/release-1.13/cmd/kubeadm/app/apis/kubeadm/v1beta1/types.go) 被用来处理这种情况。
 
   然后重启 `kubelet`：
 
-  ```sh
+  ```shell
   systemctl daemon-reload
   systemctl restart kubelet
   ```
+
 <!--
 ## `coredns` pods have `CrashLoopBackOff` or `Error` state
 
@@ -463,15 +466,16 @@ are available to avoid Kubernetes trying to restart the CoreDNS Pod every time C
 -->
 ## `coredns` pods 有 `CrashLoopBackOff` 或者 `Error` 状态
 
-如果有些节点运行的是旧版本的 Docker，同时启用了 SELinux，您或许会遇到 `coredns` pods 无法启动的情况。
-要解决此问题，您可以尝试以下选项之一：
+如果有些节点运行的是旧版本的 Docker，同时启用了 SELinux，你或许会遇到 `coredns` pods 无法启动的情况。
+要解决此问题，你可以尝试以下选项之一：
 
-- 升级到 [Docker 的较新版本](/docs/setup/production-environment/container-runtimes/#docker)。
+- 升级到 [Docker 的较新版本](/zh/docs/setup/production-environment/container-runtimes/#docker)。
 
 - [禁用 SELinux](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security-enhanced_linux/sect-security-enhanced_linux-enabling_and_disabling_selinux-disabling_selinux).
+
 - 修改 `coredns` 部署以设置 `allowPrivilegeEscalation` 为 `true`：
 
-```bash
+```shell
 kubectl -n kube-system get deployment coredns -o yaml | \
   sed 's/allowPrivilegeEscalation: false/allowPrivilegeEscalation: true/g' | \
   kubectl apply -f -
@@ -481,11 +485,11 @@ CoreDNS 处于 `CrashLoopBackOff` 时的另一个原因是当 Kubernetes 中部
 到环路时。[有许多解决方法](https://github.com/coredns/coredns/tree/master/plugin/loop#troubleshooting-loops-in-kubernetes-clusters)
 可以避免在每次 CoreDNS 监测到循环并退出时，Kubernetes 尝试重启 CoreDNS Pod 的情况。
 
-{{< warning >}}
 <!--
 Disabling SELinux or setting `allowPrivilegeEscalation` to `true` can compromise
 the security of your cluster.
 -->
+{{< warning >}}
 禁用 SELinux 或设置 `allowPrivilegeEscalation` 为 `true` 可能会损害集群的安全性。
 {{< /warning >}}
 
@@ -510,65 +514,72 @@ yum downgrade docker-1.13.1-75.git8633870.el7.centos.x86_64 docker-client-1.13.1
 
 - Install one of the more recent recommended versions, such as 18.06:
 ```bash
-sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
+sudo yum-config-manager -add-repo https://download.docker.com/linux/centos/docker-ce.repo
 yum install docker-ce-18.06.1.ce-3.el7.x86_64
 ```
 -->
 ## etcd pods 持续重启
 
-如果您遇到以下错误：
+如果你遇到以下错误：
 
 ```
 rpc error: code = 2 desc = oci runtime error: exec failed: container_linux.go:247: starting container process caused "process_linux.go:110: decoding init error from pipe caused \"read parent: connection reset by peer\""
 ```
 
-如果您使用 Docker 1.13.1.84 运行 CentOS 7 就会出现这种问题。
+如果你使用 Docker 1.13.1.84 运行 CentOS 7 就会出现这种问题。
 此版本的 Docker 会阻止 kubelet 在 etcd 容器中执行。
 
 为解决此问题，请选择以下选项之一：
 
 - 回滚到早期版本的 Docker，例如 1.13.1-75
-```
-yum downgrade docker-1.13.1-75.git8633870.el7.centos.x86_64 docker-client-1.13.1-75.git8633870.el7.centos.x86_64 docker-common-1.13.1-75.git8633870.el7.centos.x86_64
-```
+
+  ```shell
+  yum downgrade docker-1.13.1-75.git8633870.el7.centos.x86_64 docker-client-1.13.1-75.git8633870.el7.centos.x86_64 docker-common-1.13.1-75.git8633870.el7.centos.x86_64
+  ```
 
 - 安装较新的推荐版本之一，例如 18.06:
-```bash
-sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
-yum install docker-ce-18.06.1.ce-3.el7.x86_64
-```
+
+  ```shell
+  sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
+  yum install docker-ce-18.06.1.ce-3.el7.x86_64
+  ```
 
 <!--
-## Not possible to pass a comma separated list of values to arguments inside a `--component-extra-args` flag
+## Not possible to pass a comma separated list of values to arguments inside a `-component-extra-args` flag
 
-`kubeadm init` flags such as `--component-extra-args` allow you to pass custom arguments to a control-plane
+`kubeadm init` flags such as `-component-extra-args` allow you to pass custom arguments to a control-plane
 component like the kube-apiserver. However, this mechanism is limited due to the underlying type used for parsing
 the values (`mapStringString`).
 
 If you decide to pass an argument that supports multiple, comma-separated values such as
-`--apiserver-extra-args "enable-admission-plugins=LimitRanger,NamespaceExists"` this flag will fail with
+`-apiserver-extra-args "enable-admission-plugins=LimitRanger,NamespaceExists"` this flag will fail with
 `flag: malformed pair, expect string=string`. This happens because the list of arguments for
-`--apiserver-extra-args` expects `key=value` pairs and in this case `NamespacesExists` is considered
+`-apiserver-extra-args` expects `key=value` pairs and in this case `NamespacesExists` is considered
 as a key that is missing a value.
 
 Alternatively, you can try separating the `key=value` pairs like so:
-`--apiserver-extra-args "enable-admission-plugins=LimitRanger,enable-admission-plugins=NamespaceExists"`
+`-apiserver-extra-args "enable-admission-plugins=LimitRanger,enable-admission-plugins=NamespaceExists"`
 but this will result in the key `enable-admission-plugins` only having the value of `NamespaceExists`.
 
 A known workaround is to use the kubeadm [configuration file](/docs/setup/production-environment/tools/kubeadm/control-plane-flags/#apiserver-flags).
 -->
 ## 无法将以逗号分隔的值列表传递给 `--component-extra-args` 标志内的参数
 
-`kubeadm init` 标志例如 `--component-extra-args` 允许您将自定义参数传递给像 kube-apiserver 这样的控制平面组件。然而，由于解析 (`mapStringString`) 的基础类型值，此机制将受到限制。
+`kubeadm init` 标志例如 `--component-extra-args` 允许你将自定义参数传递给像
+kube-apiserver 这样的控制平面组件。然而，由于解析 (`mapStringString`) 的基础类型值，此机制将受到限制。
 
-如果您决定传递一个支持多个逗号分隔值（例如 `--apiserver-extra-args "enable-admission-plugins=LimitRanger,NamespaceExists"`）参数，将出现 `flag: malformed pair, expect string=string` 错误。
-发生这种问题是因为参数列表 `--apiserver-extra-args` 预期的是 `key=value` 形式，而这里的 `NamespacesExists` 被误认为是缺少取值的键名。
+如果你决定传递一个支持多个逗号分隔值（例如
+`--apiserver-extra-args "enable-admission-plugins=LimitRanger,NamespaceExists"`）参数，
+将出现 `flag: malformed pair, expect string=string` 错误。
+发生这种问题是因为参数列表 `--apiserver-extra-args` 预期的是 `key=value` 形式，
+而这里的 `NamespacesExists` 被误认为是缺少取值的键名。
 
 一种解决方法是尝试分离 `key=value` 对，像这样：
 `--apiserver-extra-args "enable-admission-plugins=LimitRanger,enable-admission-plugins=NamespaceExists"`
 但这将导致键 `enable-admission-plugins` 仅有值 `NamespaceExists`。
 
-已知的解决方法是使用 kubeadm [配置文件](/docs/setup/production-environment/tools/kubeadm/control-plane-flags/#apiserver-flags)。
+已知的解决方法是使用 kubeadm
+[配置文件](/zh/docs/setup/production-environment/tools/kubeadm/control-plane-flags/#apiserver-flags)。
 
 <!--
 ## kube-proxy scheduled before node is initialized by cloud-controller-manager
@@ -599,17 +610,20 @@ The tracking issue for this problem is [here](https://github.com/kubernetes/kube
 这会导致 kube-proxy 无法正确获取节点的 IP 地址，并对管理负载平衡器的代理功能产生连锁反应。
 
 在 kube-proxy Pod 中可以看到以下错误：
+
 ```
 server.go:610] Failed to retrieve node IP: host IP unknown; known addresses: []
 proxier.go:340] invalid nodeIP, initializing kube-proxy with 127.0.0.1 as nodeIP
 ```
 
-一种已知的解决方案是修补 kube-proxy DaemonSet，以允许在控制平面节点上调度它，而不管它们的条件如何，将其与其他节点保持隔离，直到它们的初始保护条件消除：
-```
+一种已知的解决方案是修补 kube-proxy DaemonSet，以允许在控制平面节点上调度它，
+而不管它们的条件如何，将其与其他节点保持隔离，直到它们的初始保护条件消除：
+
+```shell
 kubectl -n kube-system patch ds kube-proxy -p='{ "spec": { "template": { "spec": { "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" } ] } } } }'
 ```
 
-此问题的跟踪 [在这里](https://github.com/kubernetes/kubeadm/issues/1027)。
+此问题的跟踪[在这里](https://github.com/kubernetes/kubeadm/issues/1027)。
 
 <!--
 ## The NodeRegistration.Taints field is omitted when marshalling kubeadm configuration
@@ -631,20 +645,21 @@ kubectl taint nodes NODE_NAME node-role.kubernetes.io/master:NoSchedule-
 -->
 ## NodeRegistration.Taints 字段在编组 kubeadm 配置时丢失
 
-*注意：这个 [问题](https://github.com/kubernetes/kubeadm/issues/1358) 仅适用于操控 kubeadm 数据类型的工具（例如，YAML 配置文件）。它将在 kubeadm API v1beta2 修复。*
+*注意：这个 [问题](https://github.com/kubernetes/kubeadm/issues/1358) 
+仅适用于操控 kubeadm 数据类型的工具（例如，YAML 配置文件）。它将在 kubeadm API v1beta2 修复。*
 
 默认情况下，kubeadm 将 `node-role.kubernetes.io/master:NoSchedule` 污点应用于控制平面节点。
-如果您希望 kubeadm 不污染控制平面节点，并将 `InitConfiguration.NodeRegistration.Taints` 设置成空切片，则应在编组时省略该字段。
+如果你希望 kubeadm 不污染控制平面节点，并将 `InitConfiguration.NodeRegistration.Taints` 设置成空切片，则应在编组时省略该字段。
 如果省略该字段，则 kubeadm 将应用默认污点。
 
 至少有两种解决方法：
 
 1. 使用 `node-role.kubernetes.io/master:PreferNoSchedule` 污点代替空切片。
-除非其他节点具有容量，[否则将在主节点上调度 Pods](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)。
+  除非其他节点具有容量，[否则将在主节点上调度 Pods](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)。
 
 2. 在 kubeadm init 退出后删除污点：
-```bash
-kubectl taint nodes NODE_NAME node-role.kubernetes.io/master:NoSchedule-
-```
 
+   ```shell
+   kubectl taint nodes NODE_NAME node-role.kubernetes.io/master:NoSchedule-
+   ```
 
diff --git a/content/zh/docs/setup/production-environment/windows/user-guide-windows-containers.md b/content/zh/docs/setup/production-environment/windows/user-guide-windows-containers.md
index 314b0de627..80a470cfad 100644
--- a/content/zh/docs/setup/production-environment/windows/user-guide-windows-containers.md
+++ b/content/zh/docs/setup/production-environment/windows/user-guide-windows-containers.md
@@ -1,20 +1,15 @@
 ---
-reviewers:
-- michmike
-- patricklang
 title: Kubernetes 中调度 Windows 容器的指南
 content_type: concept
 weight: 75
 ---
 <!--
----
 reviewers:
 - michmike
 - patricklang
 title: Guide for scheduling Windows containers in Kubernetes
 content_type: concept
 weight: 75
----
 -->
 
 <!-- overview -->
@@ -22,9 +17,8 @@ weight: 75
 <!--
 Windows applications constitute a large portion of the services and applications that run in many organizations. This guide walks you through the steps to configure and deploy a Windows container in Kubernetes.
 -->
-Windows 应用程序构成了许多组织中运行的服务和应用程序的很大一部分。本指南将引导您完成在 Kubernetes 中配置和部署 Windows 容器的步骤。
-
-
+Windows 应用程序构成了许多组织中运行的服务和应用程序的很大一部分。
+本指南将引导您完成在 Kubernetes 中配置和部署 Windows 容器的步骤。
 
 <!-- body -->
 
@@ -47,8 +41,10 @@ Windows 应用程序构成了许多组织中运行的服务和应用程序的很
 -->
 ## 在你开始之前
 
-* 创建一个 Kubernetes 集群，其中包括一个[运行 Windows Server 的主节点和工作节点](../user-guide-windows-nodes)
-* 重要的是要注意，对于 Linux 和 Windows 容器，在 Kubernetes  上创建和部署服务和工作负载的行为几乎相同。与集群接口的  [Kubectl  命令](/docs/reference/kubectl/overview/)相同。提供以下部分中的示例只是为了快速启动  Windows 容器的使用体验。
+* 创建一个 Kubernetes 集群，其中包括一个
+  [运行 Windows 服务器的主节点和工作节点](/zh/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes/)
+* 重要的是要注意，对于 Linux 和 Windows 容器，在 Kubernetes  上创建和部署服务和工作负载的行为几乎相同。
+  与集群接口的  [Kubectl 命令](/zh/docs/reference/kubectl/overview/)相同。提供以下部分中的示例只是为了快速启动  Windows 容器的使用体验。
 
 <!--
 ## Getting Started: Deploying a Windows container
@@ -57,7 +53,9 @@ To deploy a Windows container on Kubernetes, you must first create an example ap
 -->
 ## 入门：部署 Windows 容器
 
-要在 Kubernetes 上部署 Windows 容器，您必须首先创建一个示例应用程序。下面的示例 YAML  文件创建了一个简单的 Web 服务器应用程序。创建一个名为  `win-webserver.yaml`  的服务规约，其内容如下：
+要在 Kubernetes 上部署 Windows 容器，您必须首先创建一个示例应用程序。
+下面的示例 YAML  文件创建了一个简单的 Web 服务器应用程序。
+创建一个名为  `win-webserver.yaml`  的服务规约，其内容如下：
 
 ```yaml
 apiVersion: v1
@@ -103,10 +101,10 @@ spec:
       kubernetes.io/os: windows
 ```
 
-{{< note >}}
 <!--
 Port mapping is also supported, but for simplicity in this example the container port 80 is exposed directly to the service.
 -->
+{{< note >}}
 端口映射也是支持的，但为简单起见，在此示例中容器端口 80 直接暴露给服务。
 {{< /note >}}
 
@@ -139,34 +137,34 @@ Port mapping is also supported, but for simplicity in this example the container
 -->
 1. 检查所有节点是否健康：
 
-    ```bash
-    kubectl get nodes
-    ```
+   ```bash
+   kubectl get nodes
+   ```
 
 1. 部署服务并观察 pod 更新：
 
-    ```bash
-    kubectl apply -f win-webserver.yaml
-    kubectl get pods -o wide -w
-    ```
+   ```bash
+   kubectl apply -f win-webserver.yaml
+   kubectl get pods -o wide -w
+   ```
 
-    正确部署服务后，两个 Pod 都标记为“Ready”。要退出 watch 命令，请按 Ctrl + C。
+   正确部署服务后，两个 Pod 都标记为“Ready”。要退出 watch 命令，请按 Ctrl + C。
 
 1. 检查部署是否成功。验证：
 
-    * Windows 节点上每个 Pod 有两个容器，使用  `docker ps` 
-    * Linux 主机列出两个 Pod，使用  `kubectl get pods` 
-    * 跨网络的节点到 Pod 通信，从 Linux 主服务器 `curl` 您的 pod IPs 的端口80，以检查 Web 服务器响应
-    * Pod 到 Pod 的通信，使用 docker exec 或 kubectl exec 在 pod 之间（以及跨主机，如果您有多个 Windows 节点）进行 ping 操作
-    * 服务到 Pod 的通信，从 Linux 主服务器和各个 Pod 中 `curl` 虚拟服务 IP（在 `kubectl get services` 下可见）
-    * 服务发现，使用 Kubernetes `curl` 服务名称[默认 DNS 后缀](/docs/concepts/services-networking/dns-pod-service/#services)
-    * 入站连接，从 Linux 主服务器或集群外部的计算机 `curl` NodePort
-    * 出站连接，使用 kubectl exec 从 Pod 内部 curl 外部 IP
+   * Windows 节点上每个 Pod 有两个容器，使用  `docker ps` 
+   * Linux 主机列出两个 Pod，使用  `kubectl get pods` 
+   * 跨网络的节点到 Pod 通信，从 Linux 主服务器 `curl` 您的 pod IPs 的端口80，以检查 Web 服务器响应
+   * Pod 到 Pod 的通信，使用 docker exec 或 kubectl exec 在 pod 之间（以及跨主机，如果您有多个 Windows 节点）进行 ping 操作
+   * 服务到 Pod 的通信，从 Linux 主服务器和各个 Pod 中 `curl` 虚拟服务 IP（在 `kubectl get services` 下可见）
+   * 服务发现，使用 Kubernetes `curl` 服务名称[默认 DNS 后缀](/zh/docs/concepts/services-networking/dns-pod-service/#services)
+   * 入站连接，从 Linux 主服务器或集群外部的计算机 `curl` NodePort
+   * 出站连接，使用 kubectl exec 从 Pod 内部 curl 外部 IP
 
-{{< note >}}
 <!--
 Windows container hosts are not able to access the IP of services scheduled on them due to current platform limitations of the Windows networking stack. Only Windows pods are able to access service IPs.
 -->
+{{< note >}}
 由于当前平台对 Windows 网络堆栈的限制，Windows 容器主机无法访问在其上调度的服务的 IP。只有 Windows pods 才能访问服务 IP。
 {{< /note >}}
 
@@ -177,7 +175,9 @@ Starting with Kubernetes v1.16, Windows containers can be configured to run thei
 -->
 ## 使用可配置的容器用户名
 
-从 Kubernetes v1.16 开始，可以为 Windows  容器配置与其镜像默认值不同的用户名来运行其入口点和进程。此能力的实现方式和 Linux 容器有些不同。在[此处](/docs/tasks/configure-pod-container/configure-runasusername/)可了解更多信息。
+从 Kubernetes v1.16 开始，可以为 Windows  容器配置与其镜像默认值不同的用户名来运行其入口点和进程。
+此能力的实现方式和 Linux 容器有些不同。
+在[此处](/zh/docs/tasks/configure-pod-container/configure-runasusername/)可了解更多信息。
 
 <!--
 ## Managing Workload Identity with Group Managed Service Accounts
@@ -186,7 +186,11 @@ Starting with Kubernetes v1.14, Windows container workloads can be configured to
 -->
 ## 使用组托管服务帐户管理工作负载身份
 
-从 Kubernetes v1.14 开始，可以将 Windows 容器工作负载配置为使用组托管服务帐户（GMSA）。组托管服务帐户是 Active Directory 帐户的一种特定类型，它提供自动密码管理，简化的服务主体名称（SPN）管理以及将管理委派给跨多台服务器的其他管理员的功能。配置了 GMSA 的容器可以访问外部 Active Directory 域资源，同时携带通过 GMSA 配置的身份。在[此处](/docs/tasks/configure-pod-container/configure-gmsa/)了解有关为 Windows 容器配置和使用 GMSA 的更多信息。
+从 Kubernetes v1.14 开始，可以将 Windows 容器工作负载配置为使用组托管服务帐户（GMSA）。
+组托管服务帐户是 Active Directory 帐户的一种特定类型，它提供自动密码管理，
+简化的服务主体名称（SPN）管理以及将管理委派给跨多台服务器的其他管理员的功能。
+配置了 GMSA 的容器可以访问外部 Active Directory 域资源，同时携带通过 GMSA 配置的身份。
+在[此处](/zh/docs/tasks/configure-pod-container/configure-gmsa/)了解有关为 Windows 容器配置和使用 GMSA 的更多信息。
 
 <!--
 ## Taints and Tolerations
@@ -196,7 +200,9 @@ Starting with Kubernetes v1.14, Windows container workloads can be configured to
 <!--
 Users today need to use some combination of taints and node selectors in order to keep Linux and Windows workloads on their respective OS-specific nodes. This likely imposes a burden only on Windows users. The recommended approach is outlined below, with one of its main goals being that this approach should not break compatibility for existing Linux workloads.
 -->
-目前，用户需要将 Linux 和 Windows 工作负载运行在各自特定的操作系统的节点上，因而需要结合使用污点和节点选择算符。这可能仅给 Windows 用户造成不便。推荐的方法概述如下，其主要目标之一是该方法不应破坏与现有 Linux 工作负载的兼容性。
+目前，用户需要将 Linux 和 Windows 工作负载运行在各自特定的操作系统的节点上，
+因而需要结合使用污点和节点选择算符。 这可能仅给 Windows 用户造成不便。
+推荐的方法概述如下，其主要目标之一是该方法不应破坏与现有 Linux 工作负载的兼容性。
 
 <!--
 ### Ensuring OS-specific workloads land on the appropriate container host
@@ -214,12 +220,18 @@ Users can ensure Windows containers can be scheduled on the appropriate host usi
 <!--
 If a Pod specification does not specify a nodeSelector like `"kubernetes.io/os": windows`, it is possible the Pod can be scheduled on any host, Windows or Linux. This can be problematic since a Windows container can only run on Windows and a Linux container can only run on Linux. The best practice is to use a nodeSelector.
 -->
-如果 Pod 规范未指定诸如 `"kubernetes.io/os": windows` 之类的 nodeSelector，则该 Pod 可能会被调度到任何主机（Windows 或 Linux）上。这是有问题的，因为 Windows 容器只能在 Windows 上运行，而 Linux 容器只能在 Linux 上运行。最佳实践是使用 nodeSelector。
+如果 Pod 规范未指定诸如 `"kubernetes.io/os": windows` 之类的 nodeSelector，则该 Pod 
+可能会被调度到任何主机（Windows 或 Linux）上。
+这是有问题的，因为 Windows 容器只能在 Windows 上运行，而 Linux 容器只能在 Linux 上运行。
+最佳实践是使用 nodeSelector。
 
 <!--
 However, we understand that in many cases users have a pre-existing large number of deployments for Linux containers, as well as an ecosystem of off-the-shelf configurations, such as community Helm charts, and programmatic Pod generation cases, such as with Operators. In those situations, you may be hesitant to make the configuration change to add nodeSelectors. The alternative is to use Taints. Because the kubelet can set Taints during registration, it could easily be modified to automatically add a taint when running on Windows only.
 -->
-但是，我们了解到，在许多情况下，用户都有既存的大量的 Linux 容器部署，以及一个现成的配置生态系统，例如社区 Helm charts，以及程序化 Pod 生成案例，例如 Operators。在这些情况下，您可能会不愿意更改配置添加 nodeSelector。替代方法是使用污点。由于 kubelet 可以在注册期间设置污点，因此可以轻松修改它，使其仅在 Windows 上运行时自动添加污点。
+但是，我们了解到，在许多情况下，用户都有既存的大量的 Linux 容器部署，以及一个现成的配置生态系统，
+例如社区 Helm charts，以及程序化 Pod 生成案例，例如 Operators。
+在这些情况下，您可能会不愿意更改配置添加 nodeSelector。替代方法是使用污点。
+由于 kubelet 可以在注册期间设置污点，因此可以轻松修改它，使其仅在 Windows 上运行时自动添加污点。
 
 <!--
 For example:  `--register-with-taints='os=windows:NoSchedule'`
@@ -229,17 +241,19 @@ For example:  `--register-with-taints='os=windows:NoSchedule'`
 <!--
 By adding a taint to all Windows nodes, nothing will be scheduled on them (that includes existing Linux Pods). In order for a Windows Pod to be scheduled on a Windows node, it would need both the nodeSelector to choose Windows, and the appropriate matching toleration.
 -->
-向所有 Windows 节点添加污点后，Kubernetes 将不会在它们上调度任何负载（包括现有的 Linux Pod）。为了使某 Windows Pod 调度到 Windows 节点上，该 Pod 既需要 nodeSelector 选择 Windows，也需要合适的匹配的容忍度设置。
+向所有 Windows 节点添加污点后，Kubernetes 将不会在它们上调度任何负载（包括现有的 Linux Pod）。
+为了使某 Windows Pod 调度到 Windows 节点上，该 Pod 既需要 nodeSelector 选择 Windows，
+也需要合适的匹配的容忍度设置。
 
 ```yaml
 nodeSelector:
-    kubernetes.io/os: windows
-    node.kubernetes.io/windows-build: '10.0.17763'
+  kubernetes.io/os: windows
+  node.kubernetes.io/windows-build: '10.0.17763'
 tolerations:
-    - key: "os"
-      operator: "Equal"
-      value: "windows"
-      effect: "NoSchedule"
+  - key: "os"
+    operator: "Equal"
+    value: "windows"
+    effect: "NoSchedule"
 ```
 
 <!--
@@ -257,14 +271,15 @@ Server versions in the same cluster, then you should set additional node labels
 <!--
 Kubernetes 1.17 automatically adds a new label `node.kubernetes.io/windows-build` to simplify this. If you're running an older version, then it's recommended to add this label manually to Windows nodes.
 -->
-Kubernetes 1.17 自动添加了一个新标签 `node.kubernetes.io/windows-build` 来简化此操作。 如果您运行的是旧版本，则建议手动将此标签添加到 Windows 节点。
+Kubernetes 1.17 自动添加了一个新标签 `node.kubernetes.io/windows-build` 来简化此操作。 
+如果您运行的是旧版本，则建议手动将此标签添加到 Windows 节点。
 
 <!--
 This label reflects the Windows major, minor, and build number that need to match for compatibility. Here are values used today for each Windows Server version.
 -->
 此标签反映了需要兼容的 Windows 主要、次要和内部版本号。以下是当前每个 Windows Server 版本使用的值。
 
-| 产品名称                              |   内部编号             |
+| 产品名称                             |   内部编号             |
 |--------------------------------------|------------------------|
 | Windows Server 2019                  | 10.0.17763             |
 | Windows Server version 1809          | 10.0.17763             |
@@ -279,38 +294,38 @@ This label reflects the Windows major, minor, and build number that need to matc
 <!--
 [RuntimeClass] can be used to simplify the process of using taints and tolerations. A cluster administrator can create a `RuntimeClass` object which is used to encapsulate these taints and tolerations.
 -->
-[RuntimeClass] 可用于简化使用污点和容忍度的过程。集群管理员可以创建 `RuntimeClass` 对象，用于封装这些污点和容忍度。
-
+[RuntimeClass](/zh/docs/concepts/containers/runtime-class/) 可用于简化使用污点和容忍度的过程。
+集群管理员可以创建 `RuntimeClass` 对象，用于封装这些污点和容忍度。
 
 <!--
 1. Save this file to `runtimeClasses.yml`. It includes the appropriate `nodeSelector` for the Windows OS, architecture, and version.
 -->
 1. 将此文件保存到 `runtimeClasses.yml` 文件。它包括适用于 Windows 操作系统、体系结构和版本的 `nodeSelector`。
 
-```yaml
-apiVersion: node.k8s.io/v1beta1
-kind: RuntimeClass
-metadata:
-  name: windows-2019
-handler: 'docker'
-scheduling:
-  nodeSelector:
-    kubernetes.io/os: 'windows'
-    kubernetes.io/arch: 'amd64'
-    node.kubernetes.io/windows-build: '10.0.17763'
-  tolerations:
-  - effect: NoSchedule
-    key: os
-    operator: Equal
-    value: "windows"
-```
+   ```yaml
+   apiVersion: node.k8s.io/v1beta1
+   kind: RuntimeClass
+   metadata:
+     name: windows-2019
+   handler: 'docker'
+   scheduling:
+     nodeSelector:
+       kubernetes.io/os: 'windows'
+       kubernetes.io/arch: 'amd64'
+       node.kubernetes.io/windows-build: '10.0.17763'
+     tolerations:
+     - effect: NoSchedule
+       key: os
+       operator: Equal
+       value: "windows"
+   ```
 
 <!--
 1. Run `kubectl create -f runtimeClasses.yml` using as a cluster administrator
 1. Add `runtimeClassName: windows-2019` as appropriate to Pod specs
 -->
-1. 集群管理员运行 `kubectl create -f runtimeClasses.yml` 操作
-1. 根据需要向 Pod 规约中添加 `runtimeClassName: windows-2019`
+2. 集群管理员运行 `kubectl create -f runtimeClasses.yml` 操作
+3. 根据需要向 Pod 规约中添加 `runtimeClassName: windows-2019`
 
 <!--
 For example:
@@ -361,8 +376,3 @@ spec:
   selector:
     app: iis-2019
 ```
-
-
-
-
-[RuntimeClass]: https://kubernetes.io/docs/concepts/containers/runtime-class/
diff --git a/content/zh/docs/setup/release/version-skew-policy.md b/content/zh/docs/setup/release/version-skew-policy.md
index 9523879ac2..518e249064 100644
--- a/content/zh/docs/setup/release/version-skew-policy.md
+++ b/content/zh/docs/setup/release/version-skew-policy.md
@@ -1,12 +1,5 @@
 ---
-reviewers:
-- sig-api-machinery
-- sig-architecture
-- sig-cli
-- sig-cluster-lifecycle
-- sig-node
-- sig-release
-title: Kubernetes 版本及版本倾斜支持策略
+title: Kubernetes 版本及版本偏差支持策略
 content_type: concept
 weight: 30
 ---
@@ -16,7 +9,7 @@ weight: 30
 This document describes the maximum version skew supported between various Kubernetes components.
 Specific cluster deployment tools may place additional restrictions on version skew.
 -->
-本文描述 Kubernetes 各组件之间版本倾斜支持策略。
+本文描述 Kubernetes 各组件之间版本偏差支持策略。
 特定的集群部署工具可能会有额外的限制。
 
 
@@ -34,7 +27,7 @@ For more information, see [Kubernetes Release Versioning](https://github.com/kub
 -->
 Kubernetes 版本号格式为 **x.y.z**，其中 **x** 为大版本号，**y** 为小版本号，**z** 为补丁版本号。
 版本号格式遵循 [Semantic Versioning](https://semver.org/) 规则。
-更多信息，请参阅 [Kubernetes Release Versioning](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning)。
+更多信息，请参阅 [Kubernetes 发布版本](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/release/versioning.md#kubernetes-release-versioning)。
 
 <!--
 The Kubernetes project maintains release branches for the most recent three minor releases.
@@ -48,9 +41,11 @@ This decision is owned by the [patch release manager](https://github.com/kuberne
 The patch release manager is a member of the [release team for each release](https://github.com/kubernetes/sig-release/tree/master/release-team).
 -->
 一些 bug 修复，包括安全修复，根据其安全性和可用性，有可能会回合到这些分支。
-补丁版本会定期或根据需要从这些分支中发布。
-最终是否发布是由[patch release team](https://github.com/kubernetes/sig-release/blob/master/release-engineering/role-handbooks/patch-release-manager.md#release-timing)
-来决定的。Patch release team同时也是[release managers](https://github.com/kubernetes/sig-release/blob/master/release-managers.md). 如需了解更多信息，请查看 [Kubernetes Patch releases](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md).
+补丁版本会定期或根据需要从这些分支中发布。 最终是否发布是由
+[补丁发布团队](https://github.com/kubernetes/sig-release/blob/master/release-engineering/role-handbooks/patch-release-manager.md#release-timing)
+来决定的。补丁发布团队同时也是
+[发布管理者](https://github.com/kubernetes/sig-release/blob/master/release-managers.md)。
+如需了解更多信息，请查看 [Kubernetes 补丁发布](https://github.com/kubernetes/sig-release/blob/master/releases/patch-releases.md)。
 
 <!--
 Minor releases occur approximately every 3 months, so each minor release branch is maintained for approximately 9 months.
@@ -60,14 +55,14 @@ Minor releases occur approximately every 3 months, so each minor release branch
 <!--
 ## Supported version skew
 -->
-## 版本倾斜策略
+## 版本偏差策略
 
 ### kube-apiserver
 
 <!--
 In [highly-available (HA) clusters](/docs/setup/production-environment/tools/kubeadm/high-availability/), the newest and oldest `kube-apiserver` instances must be within one minor version.
 -->
-在 [高可用（HA）集群](/docs/setup/production-environment/tools/kubeadm/high-availability/) 中，
+在 [高可用（HA）集群](/zh/docs/setup/production-environment/tools/kubeadm/high-availability/) 中，
 多个 `kube-apiserver` 实例小版本号最多差1。
 
 <!--
@@ -100,10 +95,11 @@ Example:
 * `kube-apiserver` 版本号如果是 **1.13**
 * `kubelet` 只能是 **1.13** 、 **1.12** 和 **1.11**
 
-{{< note >}}
 <!--
-If version skew exists between `kube-apiserver` instances in an HA cluster, this narrows the allowed `kubelet` versions.-->如果
-HA集群中多个 `kube-apiserver` 实例版本号不一致，相应的 `kubelet` 版本号可选范围也要减小。
+If version skew exists between `kube-apiserver` instances in an HA cluster, this narrows the allowed `kubelet` versions.
+-->
+{{< note >}}
+如果 HA 集群中多个 `kube-apiserver` 实例版本号不一致，相应的 `kubelet` 版本号可选范围也要减小。
 {{</ note >}}
 
 <!--
@@ -139,9 +135,11 @@ Example:
 * 如果 `kube-apiserver` 版本号为 **1.13**
 * `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本支持 **1.13** 和 **1.12**
 
-{{< note >}}
 <!--
-If version skew exists between `kube-apiserver` instances in an HA cluster, and these components can communicate with any `kube-apiserver` instance in the cluster (for example, via a load balancer), this narrows the allowed versions of these components.-->如果在 HA 集群中，多个 `kube-apiserver` 实例版本号不一致，他们也可以跟任意一个 `kube-apiserver` 实例通信（例如，通过 load balancer），
+If version skew exists between `kube-apiserver` instances in an HA cluster, and these components can communicate with any `kube-apiserver` instance in the cluster (for example, via a load balancer), this narrows the allowed versions of these components.
+-->
+{{< note >}}
+如果在 HA 集群中，多个 `kube-apiserver` 实例版本号不一致，他们也可以跟任意一个 `kube-apiserver` 实例通信（例如，通过 load balancer），
 但 `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本可用范围会相应的减小。
 {{< /note >}}
 
@@ -176,9 +174,10 @@ Example:
 * 如果 `kube-apiserver` 当前是 **1.13** 版本
 * `kubectl` 则支持 **1.14** 、**1.13** 和 **1.12**
 
-{{< note >}}
 <!--
-If version skew exists between `kube-apiserver` instances in an HA cluster, this narrows the supported `kubectl` versions.-->
+If version skew exists between `kube-apiserver` instances in an HA cluster, this narrows the supported `kubectl` versions.
+-->
+{{< note >}}
 如果 HA 集群中的多个 `kube-apiserver` 实例版本号不一致，相应的 `kubectl` 可用版本范围也会减小。
 {{< /note >}}
 
@@ -202,7 +201,7 @@ Example:
 The supported version skew between components has implications on the order in which components must be upgraded.
 This section describes the order in which components must be upgraded to transition an existing cluster from version **1.n** to version **1.(n+1)**.
 -->
-组件之间支持的版本倾斜会影响组件升级的顺序。
+组件之间支持的版本偏差会影响组件升级的顺序。
 本节描述组件从版本 **1.n** 到 **1.(n+1)** 的升级次序。
 
 ### kube-apiserver
@@ -226,7 +225,9 @@ Pre-requisites:
 * `kube-controller-manager`、`kube-scheduler` 和 `cloud-controller-manager` 版本号必须为 **1.n**（确保不高于 API server 的版本，且版本号相差不大于1）
 * `kubelet` 实例版本号必须是 **1.n** 或 **1.(n-1)**（确保版本号不高于 API server，且版本号相差不大于2）
 * 注册的 admission 插件必须能够处理新的 `kube-apiserver` 实例发送过来的数据：
-  * `ValidatingWebhookConfiguration` 和 `MutatingWebhookConfiguration` 对象必须升级到可以处理 **1.(n+1)** 版本新加的 REST 资源(或使用1.15版本提供的 [`matchPolicy: Equivalent` 选项](/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-matchpolicy))
+  * `ValidatingWebhookConfiguration` 和 `MutatingWebhookConfiguration` 对象必须升级到可以处理
+    **1.(n+1)** 版本新加的 REST 资源（或使用 1.15 版本提供的
+    [`matchPolicy: Equivalent` 选项](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-matchpolicy)）
   * 插件可以处理任何 **1.(n+1)** 版本新的 REST 资源数据和新加的字段
 
 <!--
@@ -238,7 +239,10 @@ Upgrade `kube-apiserver` to **1.(n+1)**
 <!--
 Project policies for [API deprecation](/docs/reference/using-api/deprecation-policy/) and
 [API change guidelines](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api_changes.md)
-require `kube-apiserver` to not skip minor versions when upgrading, even in single-instance clusters.-->跟据 [API deprecation](/docs/reference/using-api/deprecation-policy/) 和 [API change guidelines](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api_changes.md) 规则，
+require `kube-apiserver` to not skip minor versions when upgrading, even in single-instance clusters.
+-->
+跟据 [API 弃用策略](/zh/docs/reference/using-api/deprecation-policy/) 和
+[API 变更指南](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api_changes.md)，
 `kube-apiserver` 不能跨小版本号升级，即使是单实例集群也不可以。
 
 {{< /note >}}
@@ -246,7 +250,7 @@ require `kube-apiserver` to not skip minor versions when upgrading, even in sing
 <!--
 ### kube-controller-manager, kube-scheduler, and cloud-controller-manager
 -->
-### kube-controller-manager、 kube-scheduler 和 cloud-controller-manager
+### kube-controller-manager、kube-scheduler 和 cloud-controller-manager
 
 <!--
 Pre-requisites:
@@ -277,15 +281,15 @@ Optionally upgrade `kubelet` instances to **1.(n+1)** (or they can be left at **
 
 `kubelet` 可以升级到 **1.(n+1)**（或者停留在 **1.n** 或 **1.(n-1)**）
 
-{{< warning >}}
 <!--
 Running a cluster with `kubelet` instances that are persistently two minor versions behind `kube-apiserver` is not recommended:
--->集群中 `kubelet` 版本号不建议比 `kube-apiserver` 低两个版本号：
 
-<!--
 * they must be upgraded within one minor version of `kube-apiserver` before the control plane can be upgraded
 * it increases the likelihood of running `kubelet` versions older than the three maintained minor releases
 -->
-* 他们必须升级到与 `kube-apiserver` 相差不超过1个小版本，才可以升级其他控制面组件
-* 有可能使用低于3个在维护的小版本
+{{< warning >}}
+集群中 `kubelet` 版本号不建议比 `kube-apiserver` 低两个版本号：
+
+* 它们必须升级到与 `kube-apiserver` 相差不超过 1 个小版本，才可以升级其他控制面组件
+* 有可能使用低于 3 个在维护的小版本
 {{</ warning >}}

From 8e3437245f123083a990f3bc792861fcce70a29a Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 7 Sep 2020 21:19:52 +0800
Subject: [PATCH 238/496] [zh] fix links in setup section (4)

---
 content/zh/docs/setup/_index.md               |   7 +-
 .../container-runtimes.md                     |  23 ++-
 .../production-environment/tools/kops.md      | 158 ++++++++----------
 .../tools/kubeadm/install-kubeadm.md          |   2 +-
 .../production-environment/turnkey/aws.md     |  37 ++--
 .../production-environment/turnkey/clc.md     |  48 +++---
 6 files changed, 129 insertions(+), 146 deletions(-)

diff --git a/content/zh/docs/setup/_index.md b/content/zh/docs/setup/_index.md
index 042a75f203..16c58a7b6c 100644
--- a/content/zh/docs/setup/_index.md
+++ b/content/zh/docs/setup/_index.md
@@ -82,8 +82,8 @@ If you're learning Kubernetes, use the Docker-based solutions: tools supported b
 
 |社区           |生态系统     |
 | ------------       | --------     |
-| [Minikube](/docs/setup/learning-environment/minikube/) | [Docker Desktop](https://www.docker.com/products/docker-desktop)|
-| [kind (Kubernetes IN Docker)](/docs/setup/learning-environment/kind/) | [Minishift](https://docs.okd.io/latest/minishift/)|
+| [Minikube](/zh/docs/setup/learning-environment/minikube/) | [Docker Desktop](https://www.docker.com/products/docker-desktop)|
+| [kind (Kubernetes IN Docker)](/zh/docs/setup/learning-environment/kind/) | [Minishift](https://docs.okd.io/latest/minishift/)|
 |                     | [MicroK8s](https://microk8s.io/)|
 
 
@@ -100,4 +100,5 @@ When evaluating a solution for a production environment, consider which aspects
 <!--
 [Kubernetes Partners](https://kubernetes.io/partners/#conformance) includes a list of [Certified Kubernetes](https://github.com/cncf/k8s-conformance/#certified-kubernetes) providers.
 -->
-[Kubernetes 合作伙伴](https://kubernetes.io/zh/partners/#kcsp) 包括一个 [已认证的 Kubernetes](https://github.com/cncf/k8s-conformance/#certified-kubernetes) 提供商列表。
+[Kubernetes 合作伙伴](https://kubernetes.io/zh/partners/#kcsp) 包括一个
+[已认证的 Kubernetes](https://github.com/cncf/k8s-conformance/#certified-kubernetes) 提供商列表。
diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 7be7f189cd..88815ddfd5 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -7,17 +7,17 @@ content_type: concept
 weight: 10
 ---
 <!--
----
 reviewers:
 - vincepri
 - bart0sh
 title: Container runtimes
 content_type: concept
 weight: 10
----
 -->
+
 <!-- overview -->
 {{< feature-state for_k8s_version="v1.6" state="stable" >}}
+
 <!--
 To run containers in Pods, Kubernetes uses a container runtime. Here are
 the installation instructions for various runtimes.
@@ -25,11 +25,8 @@ the installation instructions for various runtimes.
 Kubernetes 使用容器运行时来实现在 pod 中运行容器。
 这是各种运行时的安装说明。
 
-
-
 <!-- body -->
 
-{{< caution >}}
 <!--
 A flaw was found in the way runc handled system file descriptors when running containers.
 A malicious container could use this flaw to overwrite contents of the runc binary and
@@ -38,6 +35,7 @@ consequently run arbitrary commands on the container host system.
 Please refer to [CVE-2019-5736](https://access.redhat.com/security/cve/cve-2019-5736) for more
 information about the issue.
 -->
+{{< caution >}}
 我们发现 runc 在运行容器，处理系统文件描述符时存在一个漏洞。
 恶意容器可以利用此漏洞覆盖 runc 二进制文件的内容，并以此在主机系统的容器上运行任意的命令。
 
@@ -49,20 +47,20 @@ information about the issue.
 -->
 ### 适用性
 
-{{< note >}}
 <!--
 This document is written for users installing CRI onto Linux. For other operating
 systems, look for documentation specific to your platform
 -->
+{{< note >}}
 本文档是为在 Linux 上安装 CRI 的用户编写的。
-对于其他操作系统，请查找特定于您平台的文档。
+对于其他操作系统，请查找特定于你平台的文档。
 {{< /note >}}
 
 <!--
 You should execute all the commands in this guide as `root`. For example, prefix commands
 with `sudo `, or become `root` and run the commands as that user.
 -->
-您应该以 `root` 身份执行本指南中的所有命令。
+你应该以 `root` 身份执行本指南中的所有命令。
 例如，使用 `sudo` 前缀命令，或者成为 `root` 并以该用户身份运行命令。
 
 <!--
@@ -79,7 +77,7 @@ that there will then be two different cgroup managers.
 -->
 当某个 Linux 系统发行版使用 systemd 作为其初始化系统时，初始化进程会生成并使用一个 root 控制组 （`cgroup`），并充当 cgroup 管理器。
 systemd 与 cgroup 集成紧密，并将为每个进程分配 cgroup。
-您也可以配置容器运行时和 kubelet 使用 `cgroupfs`。
+你也可以配置容器运行时和 kubelet 使用 `cgroupfs`。
 连同 systemd 一起使用 `cgroupfs` 意味着将有两个不同的 cgroup 管理器。
 
 <!--
@@ -127,11 +125,11 @@ Use the following commands to install Docker on your system:
 -->
 ## Docker
 
-在您的每台机器上安装 Docker。
+在你的每台机器上安装 Docker。
 推荐安装 19.03.11 版本，但是 1.13.1、17.03、17.06、17.09、18.06 和 18.09 版本也是可以的。
 请跟踪 Kubernetes 发行说明中经过验证的 Docker 最新版本变化。
 
-使用以下命令在您的系统上安装 Docker：
+使用以下命令在你的系统上安装 Docker：
 
 {{< tabs name="tab-cri-docker-installation" >}}
 {{% tab name="Ubuntu 16.04+" %}}
@@ -866,8 +864,9 @@ Refer to the [Frakti QuickStart guide](https://github.com/kubernetes/frakti#quic
 systemd_cgroup = true
 ```
 当使用 kubeadm 时，请手动配置
-[kubelet 的 cgroup 驱动](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
+[kubelet 的 cgroup 驱动](/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-master-node)
 
 ## 其他的 CRI 运行时：frakti
 
 请参阅 [Frakti 快速开始指南](https://github.com/kubernetes/frakti#quickstart) 来获取更多的信息。
+
diff --git a/content/zh/docs/setup/production-environment/tools/kops.md b/content/zh/docs/setup/production-environment/tools/kops.md
index 99c05d2fbf..86cb3ddf0f 100644
--- a/content/zh/docs/setup/production-environment/tools/kops.md
+++ b/content/zh/docs/setup/production-environment/tools/kops.md
@@ -4,11 +4,9 @@ content_type: concept
 weight: 20
 ---
 <!--
----
 title: Installing Kubernetes with kops
 content_type: concept
 weight: 20
----
 -->
 
 <!-- overview -->
@@ -44,40 +42,35 @@ kops 是一个自用的供应系统：
 If your opinions differ from these you may prefer to build your own cluster using [kubeadm](/docs/admin/kubeadm/) as
 a building block.  kops builds on the kubeadm work.
 -->
-如果您有不同的观点，您可能更喜欢使用 [kubeadm](/docs/admin/kubeadm/) 作为构建工具来构建自己的集群。kops 建立在 kubeadm 工作的基础上。
-
-
+如果你有不同的观点，你可能更喜欢使用 [kubeadm](/zh/docs/reference/setup-tools/kubeadm/)
+作为构建工具来构建自己的集群。kops 建立在 kubeadm 工作的基础上。
 
 <!-- body -->
 
 <!--
 ## Creating a cluster
+
+### (1/5) Install kops
+
+#### Requirements
+
+You must have [kubectl](/docs/tasks/tools/install-kubectl/) installed in order for kops to work.
 -->
 ## 创建集群
 
-<!--
-### (1/5) Install kops
--->
 ### (1/5) 安装 kops
 
-<!--
-#### Requirements
--->
 #### 前提条件
 
-<!--
-You must have [kubectl](/docs/tasks/tools/install-kubectl/) installed in order for kops to work.
--->
-您必须安装 [kubectl](/docs/tasks/tools/install-kubectl/) 才能使 kops 工作。
+你必须安装 [kubectl](/zh/docs/tasks/tools/install-kubectl/) 才能使 kops 工作。
 
 <!--
 #### Installation
+
+Download kops from the [releases page](https://github.com/kubernetes/kops/releases) (it is also easy to build from source):
 -->
 #### 安装
 
-<!--
-Download kops from the [releases page](https://github.com/kubernetes/kops/releases) (it is also easy to build from source):
--->
 从[下载页面](https://github.com/kubernetes/kops/releases)下载 kops（从源代码构建也很容易）：
 
 <!--
@@ -90,7 +83,7 @@ On macOS:
 curl -OL https://github.com/kubernetes/kops/releases/download/1.10.0/kops-darwin-amd64
 chmod +x kops-darwin-amd64
 mv kops-darwin-amd64 /usr/local/bin/kops
-# 您也可以使用 Homebrew 安装 kops
+# 你也可以使用 Homebrew 安装 kops
 brew update && brew install kops
 ```
 
@@ -107,28 +100,27 @@ mv kops-linux-amd64 /usr/local/bin/kops
 
 <!--
 ### (2/5) Create a route53 domain for your cluster
--->
-### (2/5) 为您的集群创建一个 route53 域名
 
-<!--
 kops uses DNS for discovery, both inside the cluster and so that you can reach the kubernetes API server
 from clients.
 -->
-kops 在集群内部都使用 DNS 进行发现操作，因此您可以从客户端访问 kubernetes API 服务器。
+### (2/5) 为你的集群创建一个 route53 域名
+
+kops 在集群内部都使用 DNS 进行发现操作，因此你可以从客户端访问 kubernetes API 服务器。
 
 <!--
 kops has a strong opinion on the cluster name: it should be a valid DNS name.  By doing so you will
 no longer get your clusters confused, you can share clusters with your colleagues unambiguously,
 and you can reach them without relying on remembering an IP address.
 -->
-kops 对集群名称有明显的要求：它应该是有效的 DNS 名称。这样一来，您就不会再使集群混乱，
+kops 对集群名称有明显的要求：它应该是有效的 DNS 名称。这样一来，你就不会再使集群混乱，
 可以与同事明确共享集群，并且无需依赖记住 IP 地址即可访问群集。
 
 <!--
 You can, and probably should, use subdomains to divide your clusters.  As our example we will use
 `useast1.dev.example.com`.  The API server endpoint will then be `api.useast1.dev.example.com`.
 -->
-您应该使用子域名来划分集群。作为示例，我们将使用域名 `useast1.dev.example.com`。
+你应该使用子域名来划分集群。作为示例，我们将使用域名 `useast1.dev.example.com`。
 然后，API 服务器端点域名将为 `api.useast1.dev.example.com`。
 
 <!--
@@ -137,53 +129,56 @@ but also `dev.example.com` or even `example.com`.  kops works with any of these,
 you choose for organization reasons (e.g. you are allowed to create records under `dev.example.com`,
 but not under `example.com`).
 -->
-Route53 托管区域可以服务子域名。您的托管区域可能是 `useast1.dev.example.com`，还有 `dev.example.com` 甚至 `example.com`。
-kops 可以与以上任何一种配合使用，因此通常您出于组织原因选择不同的托管区域。
-例如，允许您在 `dev.example.com` 下创建记录，但不能在 `example.com` 下创建记录。
+Route53 托管区域可以服务子域名。你的托管区域可能是 `useast1.dev.example.com`，还有 `dev.example.com` 甚至 `example.com`。
+kops 可以与以上任何一种配合使用，因此通常你出于组织原因选择不同的托管区域。
+例如，允许你在 `dev.example.com` 下创建记录，但不能在 `example.com` 下创建记录。
 
 <!--
 Let's assume you're using `dev.example.com` as your hosted zone.  You create that hosted zone using
 the [normal process](http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/CreatingNewSubdomain.html), or
 with a command such as `aws route53 create-hosted-zone --name dev.example.com --caller-reference 1`.
 -->
-假设您使用 `dev.example.com` 作为托管区域。您可以使用[正常流程](http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/CreatingNewSubdomain.html) 或者使用诸如 `aws route53 create-hosted-zone --name dev.example.com --caller-reference 1` 之类的命令来创建该托管区域。
+假设你使用 `dev.example.com` 作为托管区域。你可以使用
+[正常流程](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/CreatingNewSubdomain.html)
+或者使用诸如 `aws route53 create-hosted-zone --name dev.example.com --caller-reference 1`
+之类的命令来创建该托管区域。
 
 <!--
 You must then set up your NS records in the parent domain, so that records in the domain will resolve.  Here,
 you would create NS records in `example.com` for `dev`.  If it is a root domain name you would configure the NS
 records at your domain registrar (e.g. `example.com` would need to be configured where you bought `example.com`).
 -->
-然后，您必须在父域名中设置您的 DNS 记录，以便该域名中的记录可以被解析。在这里，您将在 `example.com` 中为 `dev` 创建 DNS 记录。
-如果它是根域名，则可以在域名注册机构配置 DNS 记录。例如，您需要在购买 `example.com` 的地方配置 `example.com`。
+然后，你必须在父域名中设置你的 DNS 记录，以便该域名中的记录可以被解析。
+在这里，你将在 `example.com` 中为 `dev` 创建 DNS 记录。
+如果它是根域名，则可以在域名注册机构配置 DNS 记录。
+例如，你需要在购买 `example.com` 的地方配置 `example.com`。
 
 <!--
 This step is easy to mess up (it is the #1 cause of problems!)  You can double-check that
 your cluster is configured correctly if you have the dig tool by running:
 -->
 这一步很容易搞砸（这是问题的第一大原因！）
-如果您安装了 dig 工具，则可以通过运行以下步骤再次检查集群是否配置正确：
+如果你安装了 dig 工具，则可以通过运行以下步骤再次检查集群是否配置正确：
 
-<!--
-`dig NS dev.example.com`
--->
-`dig DNS dev.example.com`
+```shell
+dig DNS dev.example.com
+```
 
 <!--
 You should see the 4 NS records that Route53 assigned your hosted zone.
 -->
-您应该看到 Route53 分配了您的托管区域的 4 条 DNS 记录。
+你应该看到 Route53 分配了你的托管区域的 4 条 DNS 记录。
 
 <!--
 ### (3/5) Create an S3 bucket to store your clusters state
--->
-### (3/5) 创建一个 S3 存储桶来存储集群状态
 
-<!--
 kops lets you manage your clusters even after installation.  To do this, it must keep track of the clusters
 that you have created, along with their configuration, the keys they are using etc.  This information is stored
 in an S3 bucket.  S3 permissions are used to control access to the bucket.
 -->
-kops 使您即使在安装后也可以管理集群。为此，它必须跟踪已创建的集群及其配置、所使用的密钥等。
+### (3/5) 创建一个 S3 存储桶来存储集群状态
+
+kops 使你即使在安装后也可以管理集群。为此，它必须跟踪已创建的集群及其配置、所使用的密钥等。
 此信息存储在 S3 存储桶中。S3 权限用于控制对存储桶的访问。
 
 <!--
@@ -192,8 +187,8 @@ administer the same clusters - this is much easier than passing around kubecfg f
 to the S3 bucket will have administrative access to all your clusters, so you don't want to share it beyond
 the operations team.
 -->
-多个集群可以使用同一 S3 存储桶，并且您可以在管理同一集群的同事之间共享一个 S3 存储桶 - 这比传递 kubecfg 文件容易得多。
-但是有权访问 S3 存储桶的任何人都将拥有对所有集群的管理访问权限，因此您不想在运营团队之外共享它。
+多个集群可以使用同一 S3 存储桶，并且你可以在管理同一集群的同事之间共享一个 S3 存储桶 - 这比传递 kubecfg 文件容易得多。
+但是有权访问 S3 存储桶的任何人都将拥有对所有集群的管理访问权限，因此你不想在运营团队之外共享它。
 
 <!--
 So typically you have one S3 bucket for each ops team (and often the name will correspond
@@ -209,31 +204,23 @@ the S3 bucket name.
 
 <!--
 * Export `AWS_PROFILE` (if you need to select a profile for the AWS CLI to work)
--->
-* 导出 `AWS_PROFILE` 文件（如果您需要选择一个配置文件用来使 AWS CLI 正常工作）
-
-<!--
 * Create the S3 bucket using `aws s3 mb s3://clusters.dev.example.com`
--->
-* 使用 `aws s3 mb s3://clusters.dev.example.com` 创建 S3 存储桶
-
-<!--
 * You can `export KOPS_STATE_STORE=s3://clusters.dev.example.com` and then kops will use this location by default.
    We suggest putting this in your bash profile or similar.
 -->
-* 您可以进行 `export KOPS_STATE_STORE=s3://clusters.dev.example.com` 操作，然后 kops 将默认使用此位置。
-   我们建议将其放入您的 bash profile 文件或类似文件中。
-
+* 导出 `AWS_PROFILE` 文件（如果你需要选择一个配置文件用来使 AWS CLI 正常工作）
+* 使用 `aws s3 mb s3://clusters.dev.example.com` 创建 S3 存储桶
+* 你可以进行 `export KOPS_STATE_STORE=s3://clusters.dev.example.com` 操作，然后 kops 将默认使用此位置。
+  我们建议将其放入你的 bash profile 文件或类似文件中。
 
 <!--
 ### (4/5) Build your cluster configuration
--->
-### (4/5) 建立您的集群配置
 
-<!--
 Run "kops create cluster" to create your cluster configuration:
 -->
-运行 "kops create cluster" 以创建您的集群配置：
+### (4/5) 建立你的集群配置
+
+运行 "kops create cluster" 以创建你的集群配置：
 
 `kops create cluster --zones=us-east-1c useast1.dev.example.com`
 
@@ -242,8 +229,8 @@ kops will create the configuration for your cluster.  Note that it _only_ create
 not actually create the cloud resources - you'll do that in the next step with a `kops update cluster`.  This
 give you an opportunity to review the configuration or change it.
 -->
-kops 将为您的集群创建配置。请注意，它_仅_创建配置，实际上并没有创建云资源 - 您将在下一步中使用 `kops update cluster` 进行配置。
-这使您有机会查看配置或进行更改。
+kops 将为你的集群创建配置。请注意，它_仅_创建配置，实际上并没有创建云资源 - 你将在下一步中使用 `kops update cluster` 进行配置。
+这使你有机会查看配置或进行更改。
 
 <!--
 It prints commands you can use to explore further:
@@ -258,8 +245,8 @@ It prints commands you can use to explore further:
 -->
 * 使用以下命令列出集群：`kops get cluster`
 * 使用以下命令编辑该集群：`kops edit cluster useast1.dev.example.com`
-* 使用以下命令编辑您的节点实例组：`kops edit ig --name = useast1.dev.example.com nodes`
-* 使用以下命令编辑您的主实例组：`kops edit ig --name = useast1.dev.example.com master-us-east-1c`
+* 使用以下命令编辑你的节点实例组：`kops edit ig --name = useast1.dev.example.com nodes`
+* 使用以下命令编辑你的主实例组：`kops edit ig --name = useast1.dev.example.com master-us-east-1c`
 
 <!--
 If this is your first time using kops, do spend a few minutes to try those out!  An instance group is a
@@ -267,60 +254,62 @@ set of instances, which will be registered as kubernetes nodes.  On AWS this is
 You can have several instance groups, for example if you wanted nodes that are a mix of spot and on-demand instances, or
 GPU and non-GPU instances.
 -->
-如果这是您第一次使用 kops，请花几分钟尝试一下！ 实例组是一组实例，将被注册为 kubernetes 节点。
-在 AWS 上，这是通过 auto-scaling-groups 实现的。您可以有多个实例组，例如，如果您想要的是混合实例和按需实例的节点，或者
- GPU 和非 GPU 实例。
+如果这是你第一次使用 kops，请花几分钟尝试一下！ 实例组是一组实例，将被注册为 kubernetes 节点。
+在 AWS 上，这是通过 auto-scaling-groups 实现的。你可以有多个实例组。
+例如，如果你想要的是混合实例和按需实例的节点，或者 GPU 和非 GPU 实例。
 
 <!--
 ### (5/5) Create the cluster in AWS
+
+Run "kops update cluster" to create your cluster in AWS:
 -->
 ### (5/5) 在 AWS 中创建集群
 
-<!--
-Run "kops update cluster" to create your cluster in AWS:
--->
 运行 "kops update cluster" 以在 AWS 中创建集群：
 
-`kops update cluster useast1.dev.example.com --yes`
+```shell
+kops update cluster useast1.dev.example.com --yes
+```
 
 <!--
 That takes a few seconds to run, but then your cluster will likely take a few minutes to actually be ready.
 `kops update cluster` will be the tool you'll use whenever you change the configuration of your cluster; it
 applies the changes you have made to the configuration to your cluster - reconfiguring AWS or kubernetes as needed.
 -->
-这需要几秒钟的时间才能运行，但实际上集群可能需要几分钟才能准备就绪。每当更改集群配置时，都会使用 `kops update cluster` 工具。
-它将对配置进行的更改应用于您的集群 - 根据需要重新配置 AWS 或者 kubernetes。
+这需要几秒钟的时间才能运行，但实际上集群可能需要几分钟才能准备就绪。
+每当更改集群配置时，都会使用 `kops update cluster` 工具。
+它将对配置进行的更改应用于你的集群 - 根据需要重新配置 AWS 或者 kubernetes。
 
 <!--
 For example, after you `kops edit ig nodes`, then `kops update cluster --yes` to apply your configuration, and
 sometimes you will also have to `kops rolling-update cluster` to roll out the configuration immediately.
 -->
-例如，在您运行 `kops edit ig nodes` 之后，然后运行 `kops update cluster --yes` 应用您的配置，有时您还必须运行 `kops rolling-update cluster` 立即回滚更新配置。
+例如，在你运行 `kops edit ig nodes` 之后，然后运行 `kops update cluster --yes`
+应用你的配置，有时你还必须运行 `kops rolling-update cluster` 立即回滚更新配置。
 
 <!--
 Without `--yes`, `kops update cluster` will show you a preview of what it is going to do.  This is handy
 for production clusters!
 -->
-如果没有 `--yes` 参数，`kops update cluster` 操作将向您显示其操作的预览效果。这对于生产集群很方便！
+如果没有 `--yes` 参数，`kops update cluster` 操作将向你显示其操作的预览效果。这对于生产集群很方便！
 
 <!--
 ### Explore other add-ons
+
+See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to explore other add-ons, including tools for logging, monitoring, network policy, visualization &amp; control of your Kubernetes cluster.
 -->
 ### 探索其他附加组件
 
-<!--
-See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to explore other add-ons, including tools for logging, monitoring, network policy, visualization &amp; control of your Kubernetes cluster.
--->
-请参阅[附加组件列表](/docs/concepts/cluster-administration/addons/)探索其他附加组件，包括用于 Kubernetes 集群的日志记录、监视、网络策略、可视化和控制的工具。
+请参阅[附加组件列表](/zh/docs/concepts/cluster-administration/addons/)探索其他附加组件，
+包括用于 Kubernetes 集群的日志记录、监视、网络策略、可视化和控制的工具。
 
 <!--
 ## Cleanup
+
+* To delete your cluster: `kops delete cluster useast1.dev.example.com --yes`
 -->
 ## 清理
 
-<!--
-* To delete your cluster: `kops delete cluster useast1.dev.example.com --yes`
--->
 * 删除集群：`kops delete cluster useast1.dev.example.com --yes`
 
 <!--
@@ -332,21 +321,18 @@ See the [list of add-ons](/docs/concepts/cluster-administration/addons/) to expl
 * Slack Channel: [#kops-users](https://kubernetes.slack.com/messages/kops-users/)
 * [GitHub Issues](https://github.com/kubernetes/kops/issues)
 -->
-* Slack Channel: [#kops-users](https://kubernetes.slack.com/messages/kops-users/)
+* Slack 频道: [#kops-users](https://kubernetes.slack.com/messages/kops-users/)
 * [GitHub Issues](https://github.com/kubernetes/kops/issues)
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 <!--
 * Learn more about Kubernetes [concepts](/docs/concepts/) and [`kubectl`](/docs/user-guide/kubectl-overview/).
 * Learn about `kops` [advanced usage](https://github.com/kubernetes/kops)
 * See the `kops` [docs](https://github.com/kubernetes/kops) section for tutorials, best practices and advanced configuration options.
 -->
-* 了解有关 Kubernetes 的 [concepts](/docs/concepts/) 和 [`kubectl`](/docs/user-guide/kubectl-overview/) 的更多信息。
+* 了解有关 Kubernetes 的[概念](/zh/docs/concepts/) 和
+  [`kubectl`](/zh/docs/reference/kubectl/overview/) 的更多信息。
 * 了解 `kops` [高级用法](https://github.com/kubernetes/kops)。
 * 请参阅 `kops` [文档](https://github.com/kubernetes/kops) 获取教程、最佳做法和高级配置选项。
 
-
diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
index 9922918718..095f15875e 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md
@@ -471,7 +471,7 @@ The automatic detection of cgroup driver for other container runtimes
 like CRI-O and containerd is work in progress.
 
 -->
-## 在控制平面节点上配置 kubelet 使用的 cgroup 驱动程序
+## 在控制平面节点上配置 kubelet 使用的 cgroup 驱动程序  {#configure-cgroup-driver-used-by-kubelet-on-master-node}
 
 使用 docker 时，kubeadm 会自动为其检测 cgroup 驱动并在运行时对 `/var/lib/kubelet/kubeadm-flags.env` 文件进行配置。
 
diff --git a/content/zh/docs/setup/production-environment/turnkey/aws.md b/content/zh/docs/setup/production-environment/turnkey/aws.md
index 64bff1dab9..3b97c77bb7 100644
--- a/content/zh/docs/setup/production-environment/turnkey/aws.md
+++ b/content/zh/docs/setup/production-environment/turnkey/aws.md
@@ -1,21 +1,15 @@
 ---
-reviewers:
-- justinsb
-- clove
 title: 在 AWS EC2 上运行 Kubernetes
 content_type: task
 ---
 <!--
----
 reviewers:
 - justinsb
 - clove
 title: Running Kubernetes on AWS EC2
 content_type: task
----
 -->
 
-
 <!-- overview -->
 
 <!--
@@ -23,14 +17,12 @@ This page describes how to install a Kubernetes cluster on AWS.
 -->
 本页面介绍了如何在 AWS 上安装 Kubernetes 集群。
 
-
-
 ## {{% heading "prerequisites" %}}
 
 <!--
 To create a Kubernetes cluster on AWS, you will need an Access Key ID and a Secret Access Key from AWS.
 -->
-在 AWS 上创建 Kubernetes 集群，您将需要 AWS 的 Access Key ID 和 Secret Access Key。
+在 AWS 上创建 Kubernetes 集群，你将需要 AWS 的 Access Key ID 和 Secret Access Key。
 
 <!--
 ### Supported Production Grade Tools
@@ -40,7 +32,7 @@ To create a Kubernetes cluster on AWS, you will need an Access Key ID and a Secr
 <!--
 * [conjure-up](/docs/getting-started-guides/ubuntu/) is an open-source installer for Kubernetes that creates Kubernetes clusters with native AWS integrations on Ubuntu.
 -->
-* [conjure-up](/docs/getting-started-guides/ubuntu/) 是 Kubernetes 的开源安装程序，可在 Ubuntu 上创建与原生 AWS 集成的 Kubernetes 集群。
+* [conjure-up](/zh/docs/setup/) 是 Kubernetes 的开源安装程序，可在 Ubuntu 上创建与原生 AWS 集成的 Kubernetes 集群。
 
 <!--
 * [Kubernetes Operations](https://github.com/kubernetes/kops) - Production Grade K8s Installation, Upgrades, and Management. Supports running Debian, Ubuntu, CentOS, and RHEL in AWS.
@@ -77,10 +69,10 @@ Alternately, you can download the latest Kubernetes release from [this page](htt
 
 Next, add the appropriate binary folder to your `PATH` to access kubectl:
 -->
-集群启动脚本将在您的工作站上为您提供一个 `kubernetes` 目录。
-或者，您可以从[此页面](https://github.com/kubernetes/kubernetes/releases)下载最新的 Kubernetes 版本。
+集群启动脚本将在你的工作站上为你提供一个 `kubernetes` 目录。
+或者，你可以从[此页面](https://github.com/kubernetes/kubernetes/releases)下载最新的 Kubernetes 版本。
 
-接下来，将适当的二进制文件夹添加到您的 `PATH` 以访问 kubectl： 
+接下来，将适当的二进制文件夹添加到你的 `PATH` 以访问 kubectl： 
 
 ```shell
 # macOS
@@ -96,10 +88,10 @@ An up-to-date documentation page for this tool is available here: [kubectl manua
 By default, `kubectl` will use the `kubeconfig` file generated during the cluster startup for authenticating against the API.
 For more information, please read [kubeconfig files](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
 -->
-此工具的最新文档页面位于此处：[kubectl 手册](/docs/user-guide/kubectl/) 
+此工具的最新文档页面位于此处：[kubectl 手册](/zh/docs/reference/kubectl/kubectl/) 
 
 默认情况下，`kubectl` 将使用在集群启动期间生成的 `kubeconfig` 文件对 API 进行身份验证。
-有关更多信息，请阅读 [kubeconfig 文件](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)。
+有关更多信息，请阅读 [kubeconfig 文件](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)。
 
 <!--
 ### Examples
@@ -112,7 +104,7 @@ For more complete applications, please look in the [examples directory](https://
 -->
 ### 示例
 
-请参阅[一个简单的 nginx 示例](/docs/tasks/run-application/run-stateless-application-deployment/)试用您的新集群。
+请参阅[一个简单的 nginx 示例](/zh/docs/tasks/run-application/run-stateless-application-deployment/)试用你的新集群。
 
 “Guestbook” 应用程序是另一个入门 Kubernetes 的流行示例：[guestbook 示例](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/guestbook/)。
 
@@ -125,7 +117,9 @@ Adding and removing nodes through `kubectl` is not supported. You can still scal
 -->
 ## 集群伸缩
 
-不支持通过 `kubectl` 添加和删除节点。您仍然可以通过调整在安装过程中创建的 [Auto Scaling Group](http://docs.aws.amazon.com/autoscaling/latest/userguide/as-manual-scaling.html) 中的 “Desired” 和 “Max” 属性来手动伸缩节点数量。
+不支持通过 `kubectl` 添加和删除节点。你仍然可以通过调整在安装过程中创建的
+[Auto Scaling Group](https://docs.aws.amazon.com/autoscaling/latest/userguide/as-manual-scaling.html)
+中的 “Desired” 和 “Max” 属性来手动伸缩节点数量。
 
 <!--
 ## Tearing down the cluster
@@ -135,7 +129,7 @@ Make sure the environment variables you used to provision your cluster are still
 -->
 ## 集群拆除
 
-确保您用于配置集群的环境变量已被导出，然后在运行如下在 Kubernetes 目录的脚本：
+确保你用于配置集群的环境变量已被导出，然后在运行如下在 Kubernetes 目录的脚本：
 
 ```shell
 cluster/kube-down.sh
@@ -156,8 +150,8 @@ AWS                  | KubeOne         | Ubuntu, CoreOS, CentOS   | canal, weave
 IaaS 提供商          | 配置管理     | 操作系统      | 网络        | 文档                                          | 符合率   | 支持等级 
 -------------------- | ------------ | ------------- | ----------  | --------------------------------------------- | ---------| ----------------------------
 AWS                  | kops         | Debian        | k8s (VPC)   | [docs](https://github.com/kubernetes/kops)    |          | Community ([@justinsb](https://github.com/justinsb))
-AWS                  | CoreOS       | CoreOS        | flannel     | [docs](/docs/getting-started-guides/aws)      |          | Community
-AWS                  | Juju         | Ubuntu        | flannel, calico, canal     | [docs](/docs/getting-started-guides/ubuntu)      | 100%     | Commercial, Community
+AWS                  | CoreOS       | CoreOS        | flannel     | [docs](/zh/docs/setup/)      |          | Community
+AWS                  | Juju         | Ubuntu        | flannel, calico, canal     | [docs](/zh/docs/setup/)      | 100%     | Commercial, Community
 AWS                  | KubeOne         | Ubuntu, CoreOS, CentOS   | canal, weavenet     | [docs](https://github.com/kubermatic/kubeone)      | 100%    | Commercial, Community
 
 <!--
@@ -168,6 +162,5 @@ and using a Kubernetes cluster.
 -->
 ## 进一步阅读
 
-请参阅 [Kubernetes 文档](/docs/)了解有关管理和使用 Kubernetes 集群的更多详细信息。
-
+请参阅 [Kubernetes 文档](/zh/docs/)了解有关管理和使用 Kubernetes 集群的更多详细信息。
 
diff --git a/content/zh/docs/setup/production-environment/turnkey/clc.md b/content/zh/docs/setup/production-environment/turnkey/clc.md
index 6be7d06157..cba761aab6 100644
--- a/content/zh/docs/setup/production-environment/turnkey/clc.md
+++ b/content/zh/docs/setup/production-environment/turnkey/clc.md
@@ -2,12 +2,9 @@
 title: 在 CenturyLink Cloud 上运行 Kubernetes
 ---
 <!--
----
 title: Running Kubernetes on CenturyLink Cloud
----
 --->
 
-
 <!--
 These scripts handle the creation, deletion and expansion of Kubernetes clusters on CenturyLink Cloud.
 
@@ -15,7 +12,8 @@ You can accomplish all these tasks with a single command. We have made the Ansib
 --->
 这些脚本适用于在 CenturyLink Cloud 上创建、删除和扩展 Kubernetes 集群。
 
-您可以使用单个命令完成所有任务。我们提供了用于执行这些任务的 Ansible 手册 [点击这里](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
+你可以使用单个命令完成所有任务。我们提供了用于执行这些任务的
+[Ansible 手册](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
 
 <!--
 ## Find Help
@@ -32,7 +30,7 @@ If you run into any problems or want help with anything, we are here to help. Re
 
 - 提交 github issue
 - 给 Kubernetes AT ctl DOT io 发送邮件
-- 访问 [http://info.ctl.io/kubernetes](http://info.ctl.io/kubernetes)
+- 访问 [https://info.ctl.io/kubernetes](https://info.ctl.io/kubernetes)
 
 <!--
 ## Clusters of VMs or Physical Servers, your choice.
@@ -105,7 +103,7 @@ sudo pip install -r ansible/requirements.txt
 <!--
 3) Create the credentials file from the template and use it to set your ENV variables
 --->
-3）从模板创建凭证文件，并使用它来设置您的 ENV 变量
+3）从模板创建凭证文件，并使用它来设置你的 ENV 变量
 
 ```shell
 cp ansible/credentials.sh.template ansible/credentials.sh
@@ -117,7 +115,7 @@ source ansible/credentials.sh
 <!--
 4) Grant your machine access to the CenturyLink Cloud network by using a VM inside the network or [ configuring a VPN connection to the CenturyLink Cloud network.](https://www.ctl.io/knowledge-base/network/how-to-configure-client-vpn/)
 --->
-4）使用内网的虚拟机或 [ 配置与 CenturyLink Cloud 网络的 VPN 连接.](https://www.ctl.io/knowledge-base/network/how-to-configure-client-vpn/)   授予您的计算机对 CenturyLink Cloud 网络的访问权限。
+4）使用内网的虚拟机或 [ 配置与 CenturyLink Cloud 网络的 VPN 连接.](https://www.ctl.io/knowledge-base/network/how-to-configure-client-vpn/)   授予你的计算机对 CenturyLink Cloud 网络的访问权限。
 
 <!--
 #### Script Installation Example: Ubuntu 14 Walkthrough
@@ -126,7 +124,7 @@ If you use an ubuntu 14, for your convenience we have provided a step by step gu
 --->
 #### 脚本安装示例：Ubuntu 14 演练
 
-如果您使用 Ubuntu 14，为方便起见，我们会提供分步指导帮助安装必备条件和脚本。
+如果你使用 Ubuntu 14，为方便起见，我们会提供分步指导帮助安装必备条件和脚本。
 
 ```shell
 # system
@@ -174,7 +172,7 @@ point to the new cluster.
 When the cluster creation is complete, the configuration files for it are stored
 locally on your administrative host, in the following directory
 --->
-创建集群大约需要15分钟。脚本完成后，它将输出一些命令，这些命令将帮助您在计算机上设置 kubectl 以指向新集群。
+创建集群大约需要15分钟。脚本完成后，它将输出一些命令，这些命令将帮助你在计算机上设置 kubectl 以指向新集群。
 
 完成集群创建后，其配置文件会存储在本地管理主机的以下目录中
 
@@ -323,7 +321,7 @@ We configure the Kubernetes cluster with the following features:
 * Heapster / InfluxDB：用于指标收集，是 Grafana 和 auto-scaling 需要的。
 * Grafana：Kubernetes/Docker 指标仪表板
 * KubeUI：用于查看 Kubernetes 状态的简单 Web 界面
-* Kube 仪表板：新的 Web 界面可与您的集群进行交互
+* Kube 仪表板：新的 Web 界面可与你的集群进行交互
 
 <!--
 We use the following to create the Kubernetes cluster:
@@ -358,7 +356,7 @@ download it and install it in ```/usr/bin/local```.
 --->
 ## 管理集群
 
-管理 Kubernetes 集群最常用工具是 command-line 实用程序 ```kubectl```。如果您的管理器上还没有此二进制文件的副本，可以运行脚本 ```install_kubectl.sh```，它将下载该脚本并将其安装在 ```/usr/bin/local``` 中。 
+管理 Kubernetes 集群最常用工具是 command-line 实用程序 ```kubectl```。如果你的管理器上还没有此二进制文件的副本，可以运行脚本 ```install_kubectl.sh```，它将下载该脚本并将其安装在 ```/usr/bin/local``` 中。 
 
 <!--
 The script requires that the environment variable ```CLC_CLUSTER_NAME``` be defined. ```install_kubectl.sh``` also writes a configuration file which will embed the necessary
@@ -383,7 +381,8 @@ To demonstrate how to use these locally stored certificates, we provide the foll
 --->
 ### 以编程方式访问集群
 
-可以使用本地存储的客户端证书来访问 apiserver。例如，您可以使用 [Kubernetes API 客户端库](/docs/reference/using-api/client-libraries/) 选择编程语言对 Kubernetes 集群进行编程。
+可以使用本地存储的客户端证书来访问 apiserver。例如，你可以使用
+[Kubernetes API 客户端库](/zh/docs/reference/using-api/client-libraries/) 选择编程语言对 Kubernetes 集群进行编程。
 
 为了演示如何使用这些本地存储的证书，我们提供以下示例，使用 ```curl``` 通过 https 与主 apiserver 进行通信：
 
@@ -410,9 +409,14 @@ kubernetes-dashboard is running at ```https://${MASTER_IP}:6443/api/v1/namespace
 --->
 ### 使用浏览器访问集群
 
-安装 [Kubernetes 仪表板](/docs/tasks/web-ui-dashboard/)。创建集群时，脚本会为这些接口输出 URL，如下所示：
+安装 [Kubernetes 仪表板](/zh/docs/tasks/access-application-cluster/web-ui-dashboard/)。
+创建集群时，脚本会为这些接口输出 URL，如下所示：
 
-kubernetes-dashboard 在以下位置运行 ```https://${MASTER_IP}:6443/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy```
+kubernetes-dashboard 在以下位置运行
+
+```
+https://${MASTER_IP}:6443/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy
+```
 
 <!--
 Note on Authentication to the UIs: 
@@ -425,7 +429,7 @@ password written to file at: ```> _${CLC_CLUSTER_HOME}/kube/admin_password.txt_`
 --->
 对 UI 进行身份验证的注意事项：
 
-群集设置为对用户 _admin_ 使用基本的身份验证。进入 URL ```https://${MASTER_IP}:6443```  获取从 apiserver 上接收的自签名证书，然后出示管理员密码并写入文件 ```> _${CLC_CLUSTER_HOME}/kube/admin_password.txt_```
+集群设置为对用户 _admin_ 使用基本的身份验证。进入 URL ```https://${MASTER_IP}:6443```  获取从 apiserver 上接收的自签名证书，然后出示管理员密码并写入文件 ```> _${CLC_CLUSTER_HOME}/kube/admin_password.txt_```
 
 
 <!--
@@ -436,7 +440,7 @@ to access the cluster from machines other than where you created the cluster fro
 --->
 ### 配置文件
 
-多个配置文件被写入几个子目录，子目录在 ```.clc_kube/${CLC_CLUSTER_NAME}``` 下的主目录 *CLC_CLUSTER_HOME* 中。使用这些文件可以从创建群集的计算机之外的其他计算机访问群集。
+多个配置文件被写入几个子目录，子目录在 ```.clc_kube/${CLC_CLUSTER_NAME}``` 下的主目录 *CLC_CLUSTER_HOME* 中。使用这些文件可以从创建集群的计算机之外的其他计算机访问集群。
 
 <!--
 * ```config/```: Ansible variable files containing parameters describing the master and minion hosts
@@ -477,7 +481,7 @@ The Kubernetes API server exposes services on web URLs, which are protected by r
 client certificates.  If you run a kubectl proxy locally, ```kubectl``` will provide
 the necessary certificates and serve locally over http.
 --->
-Kubernetes API 服务器在 Web URL 上公开服务，这些 URL 受客户端证书的保护。如果您在本地运行 kubectl 代理，```kubectl``` 将提供必要的证书，并通过 http 在本地提供服务。
+Kubernetes API 服务器在 Web URL 上公开服务，这些 URL 受客户端证书的保护。如果你在本地运行 kubectl 代理，```kubectl``` 将提供必要的证书，并通过 http 在本地提供服务。
 
 ```shell
 kubectl proxy -p 8001
@@ -486,7 +490,7 @@ kubectl proxy -p 8001
 <!--
 Then, you can access urls like ```http://127.0.0.1:8001/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy/``` without the need for client certificates in your browser.
 --->
-然后，您可以访问 ```http://127.0.0.1:8001/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy/``` 之类的 URL，不再需要浏览器中的客户端证书 。
+然后，你可以访问 ```http://127.0.0.1:8001/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy/``` 之类的 URL，不再需要浏览器中的客户端证书 。
 
 
 <!--
@@ -504,11 +508,11 @@ These are the known items that don't work on CenturyLink cloud but do work on ot
 
 这些是已知的在 CenturyLink Cloud 上不能使用，但在其他云提供商中可以使用：
 
-- 目前，没有 [LoadBalancer](/docs/tasks/access-application-cluster/create-external-load-balancer/)类型的支持服务。我们正在为此积极努力，并希望在2016年4月左右发布更改。
+- 目前，没有 [LoadBalancer](/zh/docs/tasks/access-application-cluster/create-external-load-balancer/)
+  类型的支持服务。我们正在为此积极努力，并希望在2016年4月左右发布更改。
 
 - 目前，不支持 CenturyLink Cloud 提供的永久存储卷。但是，客户可以自带永久性存储产品。我们自己使用 Gluster。
 
-
 <!--
 ## Ansible Files
 
@@ -516,7 +520,7 @@ If you want more information about our Ansible files, please [read this file](ht
 --->
 ## Ansible 文件
 
-如果您想了解有关 Ansible 文件的更多信息，请 [浏览此文件](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
+如果你想了解有关 Ansible 文件的更多信息，请 [浏览此文件](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
 
 <!--
 ## Further reading
@@ -526,7 +530,7 @@ and using a Kubernetes cluster.
 --->
 ## 更多
 
-有关管理和使用 Kubernetes 集群的更多详细信息，请参见 [Kubernetes 文档](/docs/) 
+有关管理和使用 Kubernetes 集群的更多详细信息，请参见 [Kubernetes 文档](/zh/docs/) 
 
 
 

From ad501e4d265071dd191b5fcc12f01998d19b3746 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 22 Aug 2020 18:09:21 +0800
Subject: [PATCH 239/496] [zh] Translate
 /docs/concepts/storage/persistent-volumes.md

---
 .../concepts/storage/persistent-volumes.md    | 1408 +++++++++++++++++
 1 file changed, 1408 insertions(+)
 create mode 100644 content/zh/docs/concepts/storage/persistent-volumes.md

diff --git a/content/zh/docs/concepts/storage/persistent-volumes.md b/content/zh/docs/concepts/storage/persistent-volumes.md
new file mode 100644
index 0000000000..46c7e58072
--- /dev/null
+++ b/content/zh/docs/concepts/storage/persistent-volumes.md
@@ -0,0 +1,1408 @@
+---
+title: 持久卷
+feature:
+  title: 存储编排
+  description: >
+    自动挂载所选存储系统，包括本地存储、诸如 <a href="https://cloud.google.com/storage/">GCP</a> 或 <a href="https://aws.amazon.com/products/storage/">AWS</a> 之类公有云提供商所提供的存储或者诸如 NFS、iSCSI、Gluster、Ceph、Cinder 或 Flocker 这类网络存储系统。
+
+content_type: concept
+weight: 20
+---
+<!--
+reviewers:
+- jsafrane
+- saad-ali
+- thockin
+- msau42
+- xing-yang
+title: Persistent Volumes
+feature:
+  title: Storage orchestration
+  description: >
+    Automatically mount the storage system of your choice, whether from local storage, a public cloud provider such as <a href="https://cloud.google.com/storage/">GCP</a> or <a href="https://aws.amazon.com/products/storage/">AWS</a>, or a network storage system such as NFS, iSCSI, Gluster, Ceph, Cinder, or Flocker.
+
+content_type: concept
+weight: 20
+-->
+
+<!-- overview -->
+
+<!--
+This document describes the current state of _persistent volumes_ in Kubernetes. Familiarity with [volumes](/docs/concepts/storage/volumes/) is suggested.
+-->
+本文描述 Kubernetes 中 _持久卷（Persistent Volume）_ 的当前状态。
+建议先熟悉[卷（Volume）](/zh/docs/concepts/storage/volumes/)的概念。
+
+<!-- body -->
+
+<!--
+## Introduction
+
+Managing storage is a distinct problem from managing compute instances. The PersistentVolume subsystem provides an API for users and administrators that abstracts details of how storage is provided from how it is consumed. To do this, we introduce two new API resources:  PersistentVolume and PersistentVolumeClaim.
+-->
+## 介绍  {#introduction}
+
+存储的管理是一个与计算实例的管理完全不同的问题。PersistentVolume 子系统为用户
+和管理员提供了一组 API，将存储如何供应的细节从其如何被使用中抽象出来。
+为了实现这点，我们引入了两个新的 API 资源：PersistentVolume 和
+PersistentVolumeClaim。
+
+<!--
+A _PersistentVolume_ (PV) is a piece of storage in the cluster that has been provisioned by an administrator or dynamically provisioned using [Storage Classes](/docs/concepts/storage/storage-classes/). It is a resource in the cluster just like a node is a cluster resource. PVs are volume plugins like Volumes, but have a lifecycle independent of any individual Pod that uses the PV. This API object captures the details of the implementation of the storage, be that NFS, iSCSI, or a cloud-provider-specific storage system.
+-->
+持久卷（PersistentVolume，PV）是集群中的一块存储，可以由管理员事先供应，或者
+使用[存储类（Storage Class）](/zh/docs/concepts/storage/storage-classes/)来动态供应。
+持久卷是集群资源，就像节点也是集群资源一样。PV 持久卷和普通的 Volume 一样，也是使用
+卷插件来实现的，只是它们拥有独立于任何使用 PV 的 Pod 的生命周期。
+此 API 对象中记述了存储的实现细节，无论其背后是 NFS、iSCSI 还是特定于云平台的存储系统。
+
+<!--
+A _PersistentVolumeClaim_ (PVC) is a request for storage by a user. It is similar to a Pod. Pods consume node resources and PVCs consume PV resources. Pods can request specific levels of resources (CPU and Memory).  Claims can request specific size and access modes (e.g., they can be mounted ReadWriteOnce, ReadOnlyMany or ReadWriteMany, see [AccessModes](#access-modes)).
+-->
+持久卷申领（PersistentVolumeClaim，PVC）表达的是用户对存储的请求。概念上与 Pod 类似。
+Pod 会耗用节点资源，而 PVC 申领会耗用 PV 资源。Pod 可以请求特定数量的资源（CPU
+和内存）；同样 PVC 申领也可以请求特定的大小和访问模式
+（例如，可以要求 PV 卷能够以 ReadWriteOnce、ReadOnlyMany 或 ReadWriteMany
+模式之一来挂载，参见[访问模式](#access-modes)）。
+
+<!--
+While PersistentVolumeClaims allow a user to consume abstract storage resources, it is common that users need PersistentVolumes with varying properties, such as performance, for different problems. Cluster administrators need to be able to offer a variety of PersistentVolumes that differ in more ways than just size and access modes, without exposing users to the details of how those volumes are implemented. For these needs, there is the _StorageClass_ resource.
+
+See the [detailed walkthrough with working examples](/docs/tasks/configure-pod-container/configure-persistent-volume-storage/).
+-->
+尽管 PersistentVolumeClaim 允许用户消耗抽象的存储资源，常见的情况是针对不同的
+问题用户需要的是具有不同属性（如，性能）的 PersistentVolume 卷。
+集群管理员需要能够提供不同性质的 PersistentVolume，并且这些 PV 卷之间的差别不
+仅限于卷大小和访问模式，同时又不能将卷是如何实现的这些细节暴露给用户。
+为了满足这类需求，就有了 _存储类（StorageClass）_ 资源。
+
+参见[基于运行示例的详细演练](/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage/)。
+
+<!--
+## Lifecycle of a volume and claim
+
+PVs are resources in the cluster. PVCs are requests for those resources and also act as claim checks to the resource. The interaction between PVs and PVCs follows this lifecycle:
+
+### Provisioning
+
+There are two ways PVs may be provisioned: statically or dynamically.
+-->
+## 卷和申领的生命周期   {#lifecycle-of-a-volume-and-claim}
+
+PV 卷是集群中的资源。PVC 申领是对这些资源的请求，也被用来执行对资源的申领检查。
+PV 卷和 PVC 申领之间的互动遵循如下生命周期：
+
+### 供应   {#provisioning}
+
+PV 卷的供应有两种方式：静态供应或动态供应。
+
+<!--
+#### Static
+
+A cluster administrator creates a number of PVs. They carry the details of the real storage, which is available for use by cluster users. They exist in the Kubernetes API and are available for consumption.
+-->
+#### 静态供应  {#static}
+
+集群管理员创建若干 PV 卷。这些卷对象带有真实存储的细节信息，并且对集群
+用户可用（可见）。PV 卷对象存在于 Kubernetes  API 中，可供用户消费（使用）。
+
+<!--
+#### Dynamic
+
+When none of the static PVs the administrator created match a user's PersistentVolumeClaim,
+the cluster may try to dynamically provision a volume specially for the PVC.
+This provisioning is based on StorageClasses: the PVC must request a
+[storage class](/docs/concepts/storage/storage-classes/) and
+the administrator must have created and configured that class for dynamic
+provisioning to occur. Claims that request the class `""` effectively disable
+dynamic provisioning for themselves.
+-->
+#### 动态供应     {#dynamic}
+
+如果管理员所创建的所有静态 PV 卷都无法与用户的 PersistentVolumeClaim 匹配，
+集群可以尝试为该 PVC 申领动态供应一个存储卷。
+这一供应操作是基于 StorageClass 来实现的：PVC 申领必须请求某个
+[存储类](/zh/docs/concepts/storage/storage-classes/)，同时集群管理员必须
+已经创建并配置了该类，这样动态供应卷的动作才会发生。
+如果 PVC 申领指定存储类为 `""`，则相当于为自身禁止使用动态供应的卷。
+
+<!--
+To enable dynamic storage provisioning based on storage class, the cluster administrator
+needs to enable the `DefaultStorageClass` [admission controller](/docs/reference/access-authn-authz/admission-controllers/#defaultstorageclass)
+on the API server. This can be done, for example, by ensuring that `DefaultStorageClass` is
+among the comma-delimited, ordered list of values for the `-enable-admission-plugins` flag of
+the API server component. For more information on API server command-line flags,
+check [kube-apiserver](/docs/admin/kube-apiserver/) documentation.
+-->
+为了基于存储类完成动态的存储供应，集群管理员需要在 API 服务器上启用
+`DefaultStorageClass` [准入控制器](/zh/docs/reference/access-authn-authz/admission-controllers/#defaultstorageclass)。
+举例而言，可以通过保证 `DefaultStorageClass` 出现在 API 服务器组件的
+`--enable-admission-plugins` 标志值中实现这点；该标志的值可以是逗号
+分隔的有序列表。关于 API 服务器标志的更多信息，可以参考
+[kube-apiserver](/zh/docs/reference/command-line-tools-reference/kube-apiserver/)
+文档。
+
+<!--
+### Binding
+
+A user creates, or in the case of dynamic provisioning, has already created, a PersistentVolumeClaim with a specific amount of storage requested and with certain access modes. A control loop in the master watches for new PVCs, finds a matching PV (if possible), and binds them together. If a PV was dynamically provisioned for a new PVC, the loop will always bind that PV to the PVC. Otherwise, the user will always get at least what they asked for, but the volume may be in excess of what was requested. Once bound, PersistentVolumeClaim binds are exclusive, regardless of how they were bound. A PVC to PV binding is a one-to-one mapping, using a ClaimRef which is a bi-directional binding between the PersistentVolume and the PersistentVolumeClaim.
+
+Claims will remain unbound indefinitely if a matching volume does not exist. Claims will be bound as matching volumes become available. For example, a cluster provisioned with many 50Gi PVs would not match a PVC requesting 100Gi. The PVC can be bound when a 100Gi PV is added to the cluster.
+-->
+### 绑定     {#binding}
+
+用户创建一个带有特定存储容量和特定访问模式需求的 PersistentVolumeClaim 对象；
+在动态供应场景下，这个 PVC 对象可能已经创建完毕。
+主控节点中的控制回路监测新的 PVC 对象，寻找与之匹配的 PV 卷（如果可能的话），
+并将二者绑定到一起。
+如果为了新的 PVC 申领动态供应了 PV 卷，则控制回路总是将该 PV 卷绑定到这一 PVC 申领。
+否则，用户总是能够获得他们所请求的资源，只是所获得的 PV 卷可能会超出所请求的配置。
+一旦绑定关系建立，则 PersistentVolumeClaim 绑定就是排他性的，无论该 PVC 申领是
+如何与 PV 卷建立的绑定关系。
+PVC 申领与 PV 卷之间的绑定是一种一对一的映射，实现上使用 ClaimRef 来记述 PV 卷
+与 PVC 申领间的双向绑定关系。
+
+<!--
+Claims will remain unbound indefinitely if a matching volume does not exist. Claims will be bound as matching volumes become available. For example, a cluster provisioned with many 50Gi PVs would not match a PVC requesting 100Gi. The PVC can be bound when a 100Gi PV is added to the cluster.
+-->
+如果找不到匹配的 PV 卷，PVC 申领会无限期地处于未绑定状态。
+当与之匹配的 PV 卷可用时，PVC 申领会被绑定。
+例如，即使某集群上供应了很多 50 Gi 大小的 PV 卷，也无法与请求
+100 Gi 大小的存储的 PVC 匹配。当新的 100 Gi PV 卷被加入到集群时，该
+PVC 才有可能被绑定。
+
+<!--
+### Using
+
+Pods use claims as volumes. The cluster inspects the claim to find the bound volume and mounts that volume for a Pod. For volumes that support multiple access modes, the user specifies which mode is desired when using their claim as a volume in a Pod.
+-->
+### 使用    {#using}
+
+Pod 将 PVC 申领当做存储卷来使用。集群会检视 PVC 申领，找到所绑定的卷，并
+为 Pod 挂载该卷。对于支持多种访问模式的卷，用户要在 Pod 中以卷的形式使用申领
+时指定期望的访问模式。
+
+<!--
+Once a user has a claim and that claim is bound, the bound PV belongs to the user for as long as they need it. Users schedule Pods and access their claimed PVs by including a `persistentVolumeClaim` section in a Pod's `volumes` block. See [Claims As Volumes](#claims-as-volumes) for more details on this.
+-->
+一旦用户有了申领对象并且该申领已经被绑定，则所绑定的 PV 卷在用户仍然需要它期间
+一直属于该用户。用户通过在 Pod 的 `volumes` 块中包含 `persistentVolumeClaim`
+节区来调度 Pod，访问所申领的 PV 卷。
+相关细节可参阅[使用申领作为卷](#claims-as-volumes)。
+
+<!--
+### Storage Object in Use Protection
+
+The purpose of the Storage Object in Use Protection feature is to ensure that PersistentVolumeClaims (PVCs) in active use by a Pod and PersistentVolume (PVs) that are bound to PVCs are not removed from the system, as this may result in data loss.
+-->
+### 保护使用中的存储对象   {#storage-object-in-use-protection}
+
+保护使用中的存储对象（Storage Object in Use Protection）这一功能特性的目的
+是确保仍被 Pod 使用的 PersistentVolumeClaim（PVC）对象及其所绑定的
+PersistentVolume（PV）对象在系统中不会被删除，因为这样做可能会引起数据丢失。
+
+<!--
+PVC is in active use by a Pod when a Pod object exists that is using the PVC.
+-->
+{{< note >}}
+当使用某 PVC 的 Pod 对象仍然存在时，认为该 PVC 仍被此 Pod 使用。
+{{< /note >}}
+
+<!--
+If a user deletes a PVC in active use by a Pod, the PVC is not removed immediately. PVC removal is postponed until the PVC is no longer actively used by any Pods. Also, if an admin deletes a PV that is bound to a PVC, the PV is not removed immediately. PV removal is postponed until the PV is no longer bound to a PVC.
+
+You can see that a PVC is protected when the PVC's status is `Terminating` and the `Finalizers` list includes `kubernetes.io/pvc-protection`:
+-->
+如果用户删除被某 Pod 使用的 PVC 对象，该 PVC 申领不会被立即移除。
+PVC 对象的移除会被推迟，直至其不再被任何 Pod 使用。
+此外，如果管理员删除已绑定到某 PVC 申领的 PV 卷，该 PV 卷也不会被立即移除。
+PV 对象的移除也要推迟到该 PV 不再绑定到 PVC。
+
+你可以看到当 PVC 的状态为 `Terminating` 且其 `Finalizers` 列表中包含
+`kubernetes.io/pvc-protection` 时，PVC 对象是处于被保护状态的。
+
+```shell
+kubectl describe pvc hostpath
+```
+```
+Name:          hostpath
+Namespace:     default
+StorageClass:  example-hostpath
+Status:        Terminating
+Volume:
+Labels:        <none>
+Annotations:   volume.beta.kubernetes.io/storage-class=example-hostpath
+               volume.beta.kubernetes.io/storage-provisioner=example.com/hostpath
+Finalizers:    [kubernetes.io/pvc-protection]
+...
+```
+
+<!--
+You can see that a PV is protected when the PV's status is `Terminating` and the `Finalizers` list includes `kubernetes.io/pv-protection` too:
+-->
+你也可以看到当 PV 对象的状态为 `Terminating` 且其 `Finalizers` 列表中包含
+`kubernetes.io/pvc-protection` 时，PV 对象是处于被保护状态的。
+
+```shell
+kubectl describe pv task-pv-volume
+```
+```
+Name:            task-pv-volume
+Labels:          type=local
+Annotations:     <none>
+Finalizers:      [kubernetes.io/pv-protection]
+StorageClass:    standard
+Status:          Terminating
+Claim:
+Reclaim Policy:  Delete
+Access Modes:    RWO
+Capacity:        1Gi
+Message:
+Source:
+    Type:          HostPath (bare host directory volume)
+    Path:          /tmp/data
+    HostPathType:
+Events:            <none>
+```
+
+<!--
+### Reclaiming
+
+When a user is done with their volume, they can delete the PVC objects from the API that allows reclamation of the resource. The reclaim policy for a PersistentVolume tells the cluster what to do with the volume after it has been released of its claim. Currently, volumes can either be Retained, Recycled, or Deleted.
+-->
+### 回收   {#reclaiming}
+
+当用户不再使用其存储卷时，他们可以从 API 中将 PVC 对象删除，从而允许
+该资源被回收再利用。PersistentVolume 对象的回收策略告诉集群，当其被
+从申领中释放时如何处理该数据卷。
+目前，数据卷可以被 Retained（保留）、Recycled（回收）或 Deleted（删除）。
+
+<!--
+#### Retain
+
+The `Retain` reclaim policy allows for manual reclamation of the resource. When the PersistentVolumeClaim is deleted, the PersistentVolume still exists and the volume is considered "released". But it is not yet available for another claim because the previous claimant's data remains on the volume. An administrator can manually reclaim the volume with the following steps.
+-->
+#### 保留（Retain）    {#retain}
+
+回收策略 `Retain` 使得用户可以手动回收资源。当 PersistentVolumeClaim 对象
+被删除时，PersistentVolume 卷仍然存在，对应的数据卷被视为"已释放（released）"。
+由于卷上仍然存在这前一申领人的数据，该卷还不能用于其他申领。
+管理员可以通过下面的步骤来手动回收该卷：
+
+<!--
+1. Delete the PersistentVolume. The associated storage asset in external infrastructure (such as an AWS EBS, GCE PD, Azure Disk, or Cinder volume) still exists after the PV is deleted.
+1. Manually clean up the data on the associated storage asset accordingly.
+1. Manually delete the associated storage asset, or if you want to reuse the same storage asset, create a new PersistentVolume with the storage asset definition.
+-->
+1. 删除 PersistentVolume 对象。与之相关的、位于外部基础设施中的存储资产
+   （例如 AWS EBS、GCE PD、Azure Disk 或 Cinder 卷）在 PV 删除之后仍然存在。
+1. 根据情况，手动清除所关联的存储资产上的数据。
+1. 手动删除所关联的存储资产；如果你希望重用该存储资产，可以基于存储资产的
+   定义创建新的 PersistentVolume 卷对象。
+
+<!--
+#### Delete
+
+For volume plugins that support the `Delete` reclaim policy, deletion removes both the PersistentVolume object from Kubernetes, as well as the associated storage asset in the external infrastructure, such as an AWS EBS, GCE PD, Azure Disk, or Cinder volume. Volumes that were dynamically provisioned inherit the [reclaim policy of their StorageClass](#reclaim-policy), which defaults to `Delete`. The administrator should configure the StorageClass according to users' expectations; otherwise, the PV must be edited or patched after it is created. See [Change the Reclaim Policy of a PersistentVolume](/docs/tasks/administer-cluster/change-pv-reclaim-policy/).
+-->
+#### 删除（Delete）    {#delete}
+
+对于支持 `Delete` 回收策略的卷插件，删除动作会将 PersistentVolume 对象从
+Kubernetes 中移除，同时也会从外部基础设施（如 AWS EBS、GCE PD、Azure Disk 或
+Cinder 卷）中移除所关联的存储资产。 
+动态供应的卷会继承[其 StorageClass 中设置的回收策略](#reclaim-policy)，该策略默认
+为 `Delete`。
+管理员需要根据用户的期望来配置 StorageClass；否则 PV 卷被创建之后必须要被
+编辑或者修补。参阅[更改 PV 卷的回收策略](/zh/docs/tasks/administer-cluster/change-pv-reclaim-policy/).
+
+<!--
+#### Recycle
+
+The `Recycle` reclaim policy is deprecated. Instead, the recommended approach is to use dynamic provisioning.
+
+If supported by the underlying volume plugin, the `Recycle` reclaim policy performs a basic scrub (`rm -rf /thevolume/*`) on the volume and makes it available again for a new claim.
+-->
+#### 回收（Recycle）     {#recycle}
+
+{{< warning >}}
+回收策略 `Recycle` 已被废弃。取而代之的建议方案是使用动态供应。
+{{< /warning >}}
+
+如果下层的卷插件支持，回收策略 `Recycle` 会在卷上执行一些基本的
+擦除（`rm -rf /thevolume/*`）操作，之后允许该卷用于新的 PVC 申领。
+
+<!--
+However, an administrator can configure a custom recycler Pod template using
+the Kubernetes controller manager command line arguments as described in the
+[reference](/docs/reference/command-line-tools-reference/kube-controller-manager/).
+The custom recycler Pod template must contain a `volumes` specification, as
+shown in the example below:
+-->
+不过，管理员可以按
+[参考资料](/zh/docs/reference/command-line-tools-reference/kube-controller-manager/)
+中所述，使用 Kubernetes 控制器管理器命令行参数来配置一个定制的回收器（Recycler）
+Pod 模板。此定制的回收器 Pod 模板必须包含一个 `volumes` 规约，如下例所示：
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pv-recycler
+  namespace: default
+spec:
+  restartPolicy: Never
+  volumes:
+  - name: vol
+    hostPath:
+      path: /any/path/it/will/be/replaced
+  containers:
+  - name: pv-recycler
+    image: "k8s.gcr.io/busybox"
+    command: ["/bin/sh", "-c", "test -e /scrub && rm -rf /scrub/..?* /scrub/.[!.]* /scrub/*  && test -z \"$(ls -A /scrub)\" || exit 1"]
+    volumeMounts:
+    - name: vol
+      mountPath: /scrub
+```
+
+<!--
+However, the particular path specified in the custom recycler Pod template in the `volumes` part is replaced with the particular path of the volume that is being recycled.
+-->
+定制回收器 Pod 模板中在 `volumes` 部分所指定的特定路径要替换为
+正被回收的卷的路径。
+
+<!--
+### Expanding Persistent Volumes Claims
+-->
+### 扩充 PVC 申领   {#expanding-persistent-volumes-claims}
+
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
+
+<!--
+Support for expanding PersistentVolumeClaims (PVCs) is now enabled by default. You can expand
+the following types of volumes:
+-->
+现在，对扩充 PVC 申领的支持默认处于被启用状态。你可以扩充以下类型的卷：
+
+* gcePersistentDisk
+* awsElasticBlockStore
+* Cinder
+* glusterfs
+* rbd
+* Azure File
+* Azure Disk
+* Portworx
+* FlexVolumes
+* CSI
+
+<!--
+You can only expand a PVC if its storage class's `allowVolumeExpansion` field is set to true.
+-->
+只有当 PVC 的存储类中将 `allowVolumeExpansion` 设置为 true 时，你才可以扩充该 PVC 申领。
+
+``` yaml
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: gluster-vol-default
+provisioner: kubernetes.io/glusterfs
+parameters:
+  resturl: "http://192.168.10.100:8080"
+  restuser: ""
+  secretNamespace: ""
+  secretName: ""
+allowVolumeExpansion: true
+```
+
+<!--
+To request a larger volume for a PVC, edit the PVC object and specify a larger
+size. This triggers expansion of the volume that backs the underlying PersistentVolume. A
+new PersistentVolume is never created to satisfy the claim. Instead, an existing volume is resized.
+-->
+如果要为某 PVC 请求较大的存储卷，可以编辑 PVC 对象，设置一个更大的尺寸值。
+这一编辑操作会触发为下层 PersistentVolume 提供存储的卷的扩充。
+Kubernetes 不会创建新的 PV 卷来满足此申领的请求。
+与之相反，现有的卷会被调整大小。
+
+<!--
+#### CSI Volume expansion
+-->
+#### CSI 卷的扩充     {#csi-volume-expansion}
+
+{{< feature-state for_k8s_version="v1.16" state="beta" >}}
+
+<!--
+Support for expanding CSI volumes is enabled by default but it also requires a specific CSI driver to support volume expansion. Refer to documentation of the specific CSI driver for more information.
+-->
+对 CSI 卷的扩充能力默认是被启用的，不过扩充 CSI 卷要求 CSI 驱动支持
+卷扩充操作。可参阅特定 CSI 驱动的文档了解更多信息。
+
+<!--
+#### Resizing a volume containing a file system
+
+You can only resize volumes containing a file system if the file system is XFS, Ext3, or Ext4.
+-->
+#### 重设包含文件系统的卷的大小 {#resizing-a-volume-containing-a-file-system}
+
+只有卷中包含的文件系统是 XFS、Ext3 或者 Ext4 时，你才可以重设卷的大小。
+
+<!--
+When a volume contains a file system, the file system is only resized when a new Pod is using
+the PersistentVolumeClaim in `ReadWrite` mode. File system expansion is either done when a Pod is starting up
+or when a Pod is running and the underlying file system supports online expansion.
+
+FlexVolumes allow resize if the driver is set with the `RequiresFSResize` capability to `true`.
+The FlexVolume can be resized on Pod restart.
+-->
+当卷中包含文件系统时，只有在 Pod 使用 `ReadWrite` 模式来使用 PVC 申领的
+情况下才能重设其文件系统的大小。
+文件系统扩充的操作或者是在 Pod 启动期间完成，或者在下层文件系统支持在线
+扩充的前提下在 Pod 运行期间完成。
+
+如果 FlexVolumes 的驱动将 `RequiresFSResize` 能力设置为 `true`，则该
+FlexVolume 卷可以在 Pod 重启期间调整大小。
+
+<!--
+#### Resizing an in-use PersistentVolumeClaim
+-->
+#### 重设使用中 PVC 申领的大小    {#resizing-an-in-use-persistentvolumevlaim}
+
+{{< feature-state for_k8s_version="v1.15" state="beta" >}}
+
+<!--
+Expanding in-use PVCs is available as beta since Kubernetes 1.15, and as alpha since 1.11. The `ExpandInUsePersistentVolumes` feature must be enabled, which is the case automatically for many clusters for beta features. Refer to the [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) documentation for more information.
+-->
+{{< note >}}
+Kubernetes 从 1.15 版本开始将调整使用中 PVC 申领大小这一能力作为 Beta
+特性支持；该特性在 1.11 版本以来处于 Alpha 阶段。
+`ExpandInUsePersistentVolumes` 特性必须被启用；在很多集群上，与此类似的
+Beta 阶段的特性是自动启用的。
+可参考[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)
+文档了解更多信息。
+{{< /note >}}
+
+<!--
+In this case, you don't need to delete and recreate a Pod or deployment that is using an existing PVC.
+Any in-use PVC automatically becomes available to its Pod as soon as its file system has been expanded.
+This feature has no effect on PVCs that are not in use by a Pod or deployment. You must create a Pod that
+uses the PVC before the expansion can complete.
+-->
+在这种情况下，你不需要删除和重建正在使用某现有 PVC 的 Pod 或 Deployment。
+所有使用中的 PVC 在其文件系统被扩充之后，立即可供其 Pod 使用。
+此功能特性对于没有被 Pod 或 Deployment 使用的 PVC 而言没有效果。
+你必须在执行扩展操作之前创建一个使用该 PVC 的 Pod。
+
+<!--
+Similar to other volume types - FlexVolume volumes can also be expanded when in-use by a Pod.
+-->
+与其他卷类型类似，FlexVolume 卷也可以在被 Pod 使用期间执行扩充操作。
+
+<!--
+FlexVolume resize is possible only when the underlying driver supports resize.
+-->
+{{< note >}}
+FlexVolume 卷的重设大小只能在下层驱动支持重设大小的时候才可进行。
+{{< /note >}}
+
+<!--
+Expanding EBS volumes is a time-consuming operation. Also, there is a per-volume quota of one modification every 6 hours.
+-->
+{{< note >}}
+扩充 EBS 卷的操作非常耗时。同时还存在另一个配额限制：
+每 6 小时只能执行一次（尺寸）修改操作。
+{{< /note >}}
+
+<!--
+#### Recovering from Failure when Expanding Volumes
+
+If expanding underlying storage fails, the cluster administrator can manually recover the Persistent Volume Claim (PVC) state and cancel the resize requests. Otherwise, the resize requests are continuously retried by the controller without administrator intervention.
+-->
+#### 处理扩充卷过程中的失败      {#recovering-from-failure-when-expanding-volumes}
+
+如果扩充下层存储的操作失败，集群管理员可以手动地恢复 PVC 申领的状态并
+取消重设大小的请求。否则，在没有管理员干预的情况下，控制器会反复重试
+重设大小的操作。
+
+<!--
+1. Mark the PersistentVolume(PV) that is bound to the PersistentVolumeClaim(PVC) with `Retain` reclaim policy.
+2. Delete the PVC. Since PV has `Retain` reclaim policy - we will not lose any data when we recreate the PVC.
+3. Delete the `claimRef` entry from PV specs, so as new PVC can bind to it. This should make the PV `Available`.
+4. Re-create the PVC with smaller size than PV and set `volumeName` field of the PVC to the name of the PV. This should bind new PVC to existing PV.
+5. Don't forget to restore the reclaim policy of the PV.
+-->
+1. 将绑定到 PVC 申领的 PV 卷标记为 `Retain` 回收策略；
+2. 删除 PVC 对象。由于 PV 的回收策略为 `Retain`，我们不会在重建 PVC 时丢失数据。
+3. 删除 PV 规约中的 `claimRef` 项，这样新的 PVC 可以绑定到该卷。
+   这一操作会使得 PV 卷变为 "可用（Available）"。
+4. 使用小于 PV 卷大小的尺寸重建 PVC，设置 PVC 的 `volumeName` 字段为 PV 卷的名称。
+   这一操作将把新的 PVC 对象绑定到现有的 PV 卷。
+5. 不要忘记恢复 PV 卷上设置的回收策略。
+
+<!--
+## Types of Persistent Volumes
+
+PersistentVolume types are implemented as plugins.  Kubernetes currently supports the following plugins:
+-->
+
+## 持久卷的类型     {#types-of-persistent-volumes}
+
+PV 持久卷是用插件的形式来实现的。Kubernetes 目前支持以下插件：
+
+* GCEPersistentDisk
+* AWSElasticBlockStore
+* AzureFile
+* AzureDisk
+* CSI
+* FC （光纤通道）
+* FlexVolume
+* Flocker
+* NFS
+* iSCSI
+* RBD （Ceph 块设备）
+* CephFS
+* Cinder （OpenStack 块存储）
+* Glusterfs
+* VsphereVolume
+* Quobyte 卷
+* HostPath （仅供单节点测试用，本地存储都是不支持的，在多节点集群中无法工作）
+* Portworx 卷
+* ScaleIO 卷
+* StorageOS
+
+<!--
+## Persistent Volumes
+
+Each PV contains a spec and status, which is the specification and status of the volume.
+The name of a PersistentVolume object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+-->
+## 持久卷    {#persistent-volumes}
+
+每个 PV 对象都包含 `spec` 部分和 `status` 部分，分别对应卷的规约和状态。
+PersistentVolume 对象的名称必须是合法的
+[DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+
+```yaml
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv0003
+spec:
+  capacity:
+    storage: 5Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Recycle
+  storageClassName: slow
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /tmp
+    server: 172.17.0.2
+```
+
+<!--
+Helper programs relating to the volume type may be required for consumption of a PersistentVolume within a cluster.  In this example, the PersistentVolume is of type NFS and the helper program /sbin/mount.nfs is required to support the mounting of NFS filesystems.
+-->
+{{< note >}}
+在集群中使用持久卷存储通常需要一些特定于具体卷类型的辅助程序。
+在这个例子中，PersistentVolume 是 NFS 类型的，因此需要辅助程序 `/sbin/mount.nfs`
+来支持挂载 NFS 文件系统。
+{{< /note >}}
+
+<!--
+### Capacity
+
+Generally, a PV will have a specific storage capacity.  This is set using the PV's `capacity` attribute.  See the Kubernetes [Resource Model](https://git.k8s.io/community/contributors/design-proposals/scheduling/resources.md) to understand the units expected by `capacity`.
+
+Currently, storage size is the only resource that can be set or requested.  Future attributes may include IOPS, throughput, etc.
+-->
+### 容量    {#capacity}
+
+一般而言，每个 PV 卷都有确定的存储容量。
+容量属性是使用 PV 对象的 `capacity` 属性来设置的。
+参考 Kubernetes
+[资源模型（Resource Model）](https://git.k8s.io/community/contributors/design-proposals/scheduling/resources.md) 
+设计提案，了解 `capacity` 字段可以接受的单位。
+
+目前，存储大小是可以设置和请求的唯一资源。
+未来可能会包含 IOPS、吞吐量等属性。
+
+<!--
+### Volume Mode
+-->
+### 卷模式     {#volume-mode}
+
+{{< feature-state for_k8s_version="v1.18" state="stable" >}}
+
+<!--
+Kubernetes supports two `volumeModes` of PersistentVolumes: `Filesystem` and `Block`.
+
+`volumeMode` is an optional API parameter.
+`Filesystem` is the default mode used when `volumeMode` parameter is omitted.
+
+A volume with `volumeMode: Filesystem` is *mounted* into Pods into a directory. If the volume
+is backed by a block device and the device is empty, Kuberneretes creates a filesystem
+on the device before mounting it for the first time.
+-->
+针对 PV 持久卷，Kuberneretes
+支持两种卷模式（`volumeModes`）：`Filesystem（文件系统）` 和 `Block（块）`。
+`volumeMode` 是一个可选的 API 参数。
+如果该参数被省略，默认的卷模式是 `Filesystem`。
+
+`volumeMode` 属性设置为 `Filesystem` 的卷会被 Pod *挂载（Mount）* 到某个目录。
+如果卷的存储来自某块设备而该设备目前为空，Kuberneretes 会在第一次挂载卷之前
+在设备上创建文件系统。
+
+<!--
+You can set the value of `volumeMode` to `Block` to use a volume as a raw block device.
+Such volume is presented into a Pod as a block device, without any filesystem on it.
+This mode is useful to provide a Pod the fastest possible way to access a volume, without
+any filesystem layer between the Pod and the volume. On the other hand, the application
+running in the Pod must know how to handle a raw block device.
+See [Raw Block Volume Support](#raw-block-volume-support)
+for an example on how to use a volume with `volumeMode: Block` in a Pod.
+-->
+你可以将 `volumeMode` 设置为 `Block`，以便将卷作为原始块设备来使用。
+这类卷以块设备的方式交给 Pod 使用，其上没有任何文件系统。
+这种模式对于为 Pod 提供一种使用最快可能方式来访问卷而言很有帮助，Pod 和
+卷之间不存在文件系统层。另外，Pod 中运行的应用必须知道如何处理原始块设备。
+关于如何在 Pod 中使用 `volumeMode: Block` 的卷，可参阅
+[原始块卷支持](#raw-block-volume-support)。
+
+<!--
+### Access Modes
+
+A PersistentVolume can be mounted on a host in any way supported by the resource provider. As shown in the table below, providers will have different capabilities and each PV's access modes are set to the specific modes supported by that particular volume.  For example, NFS can support multiple read/write clients, but a specific NFS PV might be exported on the server as read-only. Each PV gets its own set of access modes describing that specific PV's capabilities.
+-->
+### 访问模式   {#access-modes}
+
+PersistentVolume 卷可以用资源提供者所支持的任何方式挂载到宿主系统上。
+如下表所示，提供者（驱动）的能力不同，每个 PV 卷的访问模式都会设置为
+对应卷所支持的模式值。
+例如，NFS 可以支持多个读写客户，但是某个特定的 NFS PV 卷可能在服务器
+上以只读的方式导出。每个 PV 卷都会获得自身的访问模式集合，描述的是
+特定 PV 卷的能力。
+
+<!--
+The access modes are:
+
+* ReadWriteOnce -- the volume can be mounted as read-write by a single node
+* ReadOnlyMany -- the volume can be mounted read-only by many nodes
+* ReadWriteMany -- the volume can be mounted as read-write by many nodes
+-->
+访问模式有：
+
+* ReadWriteOnce -- 卷可以被一个节点以读写方式挂载；
+* ReadOnlyMany -- 卷可以被多个节点以只读方式挂载；
+* ReadWriteMany -- 卷可以被多个节点以读写方式挂载。
+
+<!--
+In the CLI, the access modes are abbreviated to:
+
+* RWO - ReadWriteOnce
+* ROX - ReadOnlyMany
+* RWX - ReadWriteMany
+-->
+在命令行接口（CLI）中，访问模式也使用以下缩写形式：
+
+* RWO - ReadWriteOnce
+* ROX - ReadOnlyMany
+* RWX - ReadWriteMany
+
+<!--
+> __Important!__ A volume can only be mounted using one access mode at a time, even if it supports many.  For example, a GCEPersistentDisk can be mounted as ReadWriteOnce by a single node or ReadOnlyMany by many nodes, but not at the same time.
+-->
+> __重要提醒！__ 每个卷只能同一时刻只能以一种访问模式挂载，即使该卷能够支持
+> 多种访问模式。例如，一个 GCEPersistentDisk 卷可以被某节点以 ReadWriteOnce
+> 模式挂载，或者被多个节点以 ReadOnlyMany 模式挂载，但不可以同时以两种模式
+> 挂载。
+
+<!--
+| Volume Plugin        | ReadWriteOnce          | ReadOnlyMany          | ReadWriteMany|
+-->
+
+| 卷插件               | ReadWriteOnce  | ReadOnlyMany | ReadWriteMany|
+| :---                 | :---:          | :---:        | :---:        |
+| AWSElasticBlockStore | &#x2713;       | -            | -            |
+| AzureFile            | &#x2713;       | &#x2713;     | &#x2713;     |
+| AzureDisk            | &#x2713;       | -            | -            |
+| CephFS               | &#x2713;       | &#x2713;     | &#x2713;     |
+| Cinder               | &#x2713;       | -            | -            |
+| CSI                  | 取决于驱动     | 取决于驱动   | 取决于驱动   |
+| FC                   | &#x2713;       | &#x2713;     | -            |
+| FlexVolume           | &#x2713;       | &#x2713;     | 取决于驱动   |
+| Flocker              | &#x2713;       | -            | -            |
+| GCEPersistentDisk    | &#x2713;       | &#x2713;     | -            |
+| Glusterfs            | &#x2713;       | &#x2713;     | &#x2713;     |
+| HostPath             | &#x2713;       | -            | -            |
+| iSCSI                | &#x2713;       | &#x2713;     | -            |
+| Quobyte              | &#x2713;       | &#x2713;     | &#x2713;     |
+| NFS                  | &#x2713;       | &#x2713;     | &#x2713;     |
+| RBD                  | &#x2713;       | &#x2713;     | -            |
+| VsphereVolume        | &#x2713;       | -            | - (Pod 运行于同一节点上时可行)  |
+| PortworxVolume       | &#x2713;       | -            | &#x2713;     |
+| ScaleIO              | &#x2713;       | &#x2713;     | -            |
+| StorageOS            | &#x2713;       | -            | -            |
+
+<!--
+### Class
+
+A PV can have a class, which is specified by setting the
+`storageClassName` attribute to the name of a
+[StorageClass](/docs/concepts/storage/storage-classes/).
+A PV of a particular class can only be bound to PVCs requesting
+that class. A PV with no `storageClassName` has no class and can only be bound
+to PVCs that request no particular class.
+-->
+### 类    {#class}
+
+每个 PV 可以属于某个类（Class），通过将其 `storageClassName` 属性设置为某个
+[StorageClass](/zh/docs/concepts/storage/storage-classes/) 的名称来指定。
+特定类的 PV 卷只能绑定到请求该类存储卷的 PVC 申领。
+未设置 `storageClassName` 的 PV 卷没有类设定，只能绑定到那些没有指定特定
+存储类的 PVC 申领。
+
+<!--
+In the past, the annotation `volume.beta.kubernetes.io/storage-class` was used instead
+of the `storageClassName` attribute. This annotation is still working; however,
+it will become fully deprecated in a future Kubernetes release.
+-->
+早前，Kubernetes 使用注解 `volume.beta.kubernetes.io/storage-class` 而不是
+`storageClassName` 属性。这一注解目前仍然起作用，不过在将来的 Kubernetes
+发布版本中该注解会被彻底废弃。
+
+
+<!--
+### Reclaim Policy
+
+Current reclaim policies are:
+
+* Retain -- manual reclamation
+* Recycle -- basic scrub (`rm -rf /thevolume/*`)
+* Delete -- associated storage asset such as AWS EBS, GCE PD, Azure Disk, or OpenStack Cinder volume is deleted
+
+Currently, only NFS and HostPath support recycling. AWS EBS, GCE PD, Azure Disk, and Cinder volumes support deletion.
+-->
+### 回收策略   {#reclaim-policy}
+
+目前的回收策略有：
+
+* Retain -- 手动回收
+* Recycle -- 基本擦除   (`rm -rf /thevolume/*`)
+* Delete -- 诸如 AWS EBS、GCE PD、Azure Disk 或 OpenStack Cinder 卷这类关联存储资产也被删除
+
+目前，仅 NFS 和 HostPath 支持回收（Recycle）。
+AWS EBS、GCE PD、Azure Disk 和 Cinder 卷都支持删除（Delete）。
+
+<!--
+### Mount Options
+
+A Kubernetes administrator can specify additional mount options for when a Persistent Volume is mounted on a node.
+-->
+### 挂载选项    {#mount-options}
+
+Kubernetes 管理员可以指定持久卷被挂载到节点上时使用的附加挂载选项。
+
+<!--
+Not all Persistent Volume types support mount options.
+-->
+{{< note >}}
+并非所有持久卷类型都支持挂载选项。
+{{< /note >}}
+
+<!--
+The following volume types support mount options:
+-->
+以下卷类型支持挂载选项：
+
+* AWSElasticBlockStore
+* AzureDisk
+* AzureFile
+* CephFS
+* Cinder （OpenStack 块存储）
+* GCEPersistentDisk
+* Glusterfs
+* NFS
+* Quobyte 卷
+* RBD （Ceph 块设备）
+* StorageOS
+* VsphereVolume
+* iSCSI
+
+<!--
+Mount options are not validated, so mount will simply fail if one is invalid.
+-->
+Kubernetes 不对挂载选项执行合法性检查，因此非法的挂载选项只是会导致挂载失败。
+
+<!--
+In the past, the annotation `volume.beta.kubernetes.io/mount-options` was used instead
+of the `mountOptions` attribute. This annotation is still working; however,
+it will become fully deprecated in a future Kubernetes release.
+-->
+早前，Kubernetes 使用注解 `volume.beta.kubernetes.io/mount-options` 而不是
+`mountOptions` 属性。这一注解目前仍然起作用，不过在将来的 Kubernetes
+发布版本中该注解会被彻底废弃。
+
+<!--
+### Node Affinity
+-->
+### 节点亲和性   {#node-affinity}
+
+<!--
+A PV can specify [node affinity](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#volumenodeaffinity-v1-core) to define constraints that limit what nodes this volume can be accessed from. Pods that use a PV will only be scheduled to nodes that are selected by the node affinity.
+-->
+每个 PV 卷可以通过设置
+[节点亲和性](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#volumenodeaffinity-v1-core)
+来定义一些约束，进而限制从哪些节点上可以访问此卷。
+使用这些卷的 Pod 只会被调度到节点亲和性规则所选择的节点上执行。
+
+<!--
+For most volume types, you do not need to set this field. It is automatically populated for [AWS EBS](/docs/concepts/storage/volumes/#awselasticblockstore), [GCE PD](/docs/concepts/storage/volumes/#gcepersistentdisk) and [Azure Disk](/docs/concepts/storage/volumes/#azuredisk) volume block types. You need to explicitly set this for [local](/docs/concepts/storage/volumes/#local) volumes.
+-->
+{{< note >}}
+对大多数类型的卷而言，你不需要设置节点亲和性字段。
+[AWS EBS](/zh/docs/concepts/storage/volumes/#awselasticblockstore)、
+[GCE PD](/zh/docs/concepts/storage/volumes/#gcepersistentdisk) 和
+[Azure Disk](/zh/docs/concepts/storage/volumes/#azuredisk) 卷类型都能
+自动设置相关字段。
+你需要为 [local](/zh/docs/concepts/storage/volumes/#local) 卷显式地设置
+此属性。
+{{< /note >}}
+
+<!--
+### Phase
+
+A volume will be in one of the following phases:
+
+* Available -- a free resource that is not yet bound to a claim
+* Bound -- the volume is bound to a claim
+* Released -- the claim has been deleted, but the resource is not yet reclaimed by the cluster
+* Failed -- the volume has failed its automatic reclamation
+
+The CLI will show the name of the PVC bound to the PV.
+-->
+### 阶段   {#phase}
+
+每个卷会处于以下阶段（Phase）之一：
+
+* Available（可用）-- 卷是一个空闲资源，尚未绑定到任何申领；
+* Bound（已绑定）-- 该卷已经绑定到某申领；
+* Released（已释放）-- 所绑定的申领已被删除，但是资源尚未被集群回收；
+* Failed（失败）-- 卷的自动回收操作失败。
+
+命令行接口能够显示绑定到某 PV 卷的 PVC 对象。
+
+## PersistentVolumeClaims
+
+<!--
+Each PVC contains a spec and status, which is the specification and status of the claim.
+The name of a PersistentVolumeClaim object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+-->
+每个 PVC 对象都有 `spec` 和 `status` 部分，分别对应申领的规约和状态。
+PersistentVolumeClaim 对象的名称必须是合法的
+[DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+
+
+```yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: myclaim
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 8Gi
+  storageClassName: slow
+  selector:
+    matchLabels:
+      release: "stable"
+    matchExpressions:
+      - {key: environment, operator: In, values: [dev]}
+```
+
+<!--
+### Access Modes
+
+Claims use the same conventions as volumes when requesting storage with specific access modes.
+-->
+### 访问模式   {#access-modes}
+
+申领在请求具有特定访问模式的存储时，使用与卷相同的访问模式约定。
+
+<!--
+### Volume Modes
+
+Claims use the same convention as volumes to indicate the consumption of the volume as either a filesystem or block device.
+-->
+### 卷模式   {#volume-modes}
+
+申领使用与卷相同的约定来表明是将卷作为文件系统还是块设备来使用。
+
+<!--
+### Resources
+
+Claims, like Pods, can request specific quantities of a resource. In this case, the request is for storage. The same [resource model](https://git.k8s.io/community/contributors/design-proposals/scheduling/resources.md) applies to both volumes and claims.
+-->
+### 资源    {#resources}
+
+申领和 Pod 一样，也可以请求特定数量的资源。在这个上下文中，请求的资源是存储。
+卷和申领都使用相同的
+[资源模型](https://git.k8s.io/community/contributors/design-proposals/scheduling/resources.md)。
+
+<!--
+### Selector
+
+Claims can specify a [label selector](/docs/concepts/overview/working-with-objects/labels/#label-selectors) to further filter the set of volumes. Only the volumes whose labels match the selector can be bound to the claim. The selector can consist of two fields:
+-->
+### 选择算符    {#selector}
+
+申领可以设置[标签选择算符](/zh/docs/concepts/overview/working-with-objects/labels/#label-selectors)
+来进一步过滤卷集合。只有标签与选择算符相匹配的卷能够绑定到申领上。
+选择算符包含两个字段：
+
+<!--
+* `matchLabels` - the volume must have a label with this value
+* `matchExpressions` - a list of requirements made by specifying key, list of values, and operator that relates the key and values. Valid operators include In, NotIn, Exists, and DoesNotExist.
+
+All of the requirements, from both `matchLabels` and `matchExpressions`, are ANDed together – they must all be satisfied in order to match.
+-->
+* `matchLabels` - 卷必须包含带有此值的标签
+* `matchExpressions` - 通过设定键（key）、值列表和操作符（operator）
+  来构造的需求。合法的操作符有 In、NotIn、Exists 和 DoesNotExist。
+
+来自 `matchLabels` 和 `matchExpressions` 的所有需求都按逻辑与的方式组合在一起。
+这些需求都必须被满足才被视为匹配。
+
+<!--
+### Class
+
+A claim can request a particular class by specifying the name of a
+[StorageClass](/docs/concepts/storage/storage-classes/)
+using the attribute `storageClassName`.
+Only PVs of the requested class, ones with the same `storageClassName` as the PVC, can
+be bound to the PVC.
+-->
+### 类      {#class}
+
+申领可以通过为 `storageClassName` 属性设置
+[StorageClass](/docs/concepts/storage/storage-classes/) 的名称来请求特定的存储类。
+只有所请求的类的 PV 卷，即 `storageClassName` 值与 PVC 设置相同的 PV 卷，
+才能绑定到 PVC 申领。
+
+<!--
+PVCs don't necessarily have to request a class. A PVC with its `storageClassName` set
+equal to `""` is always interpreted to be requesting a PV with no class, so it
+can only be bound to PVs with no class (no annotation or one set equal to
+`""`). A PVC with no `storageClassName` is not quite the same and is treated differently
+by the cluster, depending on whether the
+[`DefaultStorageClass` admission plugin](/docs/reference/access-authn-authz/admission-controllers/#defaultstorageclass)
+is turned on.
+-->
+PVC 申领不必一定要请求某个类。如果 PVC 的 `storageClassName` 属性值设置为 `""`，
+则被视为要请求的是没有设置存储类的 PV 卷，因此这一 PVC 申领只能绑定到未设置
+存储类的 PV 卷（未设置注解或者注解值为 `""` 的 PersistentVolume（PV）对象在系统中不会被删除，因为这样做可能会引起数据丢失。
+未设置 `storageClassName` 的 PVC 与此大不相同，也会被集群作不同处理。
+具体筛查方式取决于
+[`DefaultStorageClass` 准入控制器插件](/zh/docs/reference/access-authn-authz/admission-controllers/#defaultstorageclass)
+是否被启用。
+
+<!--
+* If the admission plugin is turned on, the administrator may specify a
+  default StorageClass. All PVCs that have no `storageClassName` can be bound only to
+  PVs of that default. Specifying a default StorageClass is done by setting the
+  annotation `storageclass.kubernetes.io/is-default-class` equal to `true` in
+  a StorageClass object. If the administrator does not specify a default, the
+  cluster responds to PVC creation as if the admission plugin were turned off. If
+  more than one default is specified, the admission plugin forbids the creation of
+  all PVCs.
+* If the admission plugin is turned off, there is no notion of a default
+  StorageClass. All PVCs that have no `storageClassName` can be bound only to PVs that
+  have no class. In this case, the PVCs that have no `storageClassName` are treated the
+  same way as PVCs that have their `storageClassName` set to `""`.
+-->
+* 如果准入控制器插件被启用，则管理员可以设置一个默认的 StorageClass。
+  所有未设置 `storageClassName` 的 PVC 都只能绑定到隶属于默认存储类的 PV 卷。
+  设置默认 StorageClass 的工作是通过将对应 StorageClass 对象的注解
+  `storageclass.kubernetes.io/is-default-class` 赋值为 `true` 来完成的。
+  如果管理员未设置默认存储类，集群对 PVC 创建的处理方式与未启用准入控制器插件
+  时相同。如果设定的默认存储类不止一个，准入控制插件会禁止所有创建 PVC 操作。
+* 如果准入控制器插件被关闭，则不存在默认 StorageClass 的说法。
+  所有未设置 `storageClassName` 的 PVC 都只能绑定到未设置存储类的 PV 卷。
+  在这种情况下，未设置 `storageClassName` 的 PVC 与 `storageClassName` 设置未
+  `""` 的 PVC 的处理方式相同。
+
+<!--
+Depending on installation method, a default StorageClass may be deployed
+to a Kubernetes cluster by addon manager during installation.
+
+When a PVC specifies a `selector` in addition to requesting a StorageClass,
+the requirements are ANDed together: only a PV of the requested class and with
+the requested labels may be bound to the PVC.
+-->
+取决于安装方法，默认的 StorageClass 可能在集群安装期间由插件管理器（Addon
+Manager）部署到集群中。
+
+当某 PVC 除了请求 StorageClass 之外还设置了 `selector`，则这两种需求会按
+逻辑与关系处理：只有隶属于所请求类且带有所请求标签的 PV 才能绑定到 PVC。
+
+<!--
+Currently, a PVC with a non-empty `selector` can't have a PV dynamically provisioned for it.
+-->
+{{< note >}}
+目前，设置了非空 `selector` 的 PVC 对象无法让集群为其动态供应 PV 卷。
+{{< /note >}}
+
+<!--
+In the past, the annotation `volume.beta.kubernetes.io/storage-class` was used instead
+of `storageClassName` attribute. This annotation is still working; however,
+it won't be supported in a future Kubernetes release.
+-->
+早前，Kubernetes 使用注解 `volume.beta.kubernetes.io/storage-class` 而不是
+`storageClassName` 属性。这一注解目前仍然起作用，不过在将来的 Kubernetes
+发布版本中该注解会被彻底废弃。
+
+<!--
+## Claims As Volumes
+
+Pods access storage by using the claim as a volume. Claims must exist in the same namespace as the Pod using the claim. The cluster finds the claim in the Pod's namespace and uses it to get the PersistentVolume backing the claim. The volume is then mounted to the host and into the Pod.
+-->
+## 使用申领作为卷     {#claims-as-volumes}
+
+Pod 将申领作为卷来使用，并藉此访问存储资源。
+申领必须位于使用它的 Pod 所在的同一名字空间内。
+集群在 Pod 的名字空间中查找申领，并使用它来获得申领所使用的 PV 卷。
+之后，卷会被挂载到宿主上并挂载到 Pod 中。
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: mypod
+spec:
+  containers:
+    - name: myfrontend
+      image: nginx
+      volumeMounts:
+      - mountPath: "/var/www/html"
+        name: mypd
+  volumes:
+    - name: mypd
+      persistentVolumeClaim:
+        claimName: myclaim
+```
+
+<!--
+### A Note on Namespaces
+
+PersistentVolumes binds are exclusive, and since PersistentVolumeClaims are namespaced objects, mounting claims with "Many" modes (`ROX`, `RWX`) is only possible within one namespace.
+-->
+### 关于名字空间的说明    {#a-note-on-namespaces}
+
+PersistentVolume 卷的绑定是排他性的。
+由于 PersistentVolumeClaim 是名字空间作用域的对象，使用
+"Many" 模式（`ROX`、`RWX`）来挂载申领的操作只能在同一名字空间内进行。
+
+<!--
+## Raw Block Volume Support
+-->
+## 原始块卷支持   {#raw-block-volume-support}
+
+{{< feature-state for_k8s_version="v1.18" state="stable" >}}
+
+<!--
+The following volume plugins support raw block volumes, including dynamic provisioning where
+applicable:
+-->
+以下卷插件支持原始块卷，包括其动态供应（如果支持的话）的卷：
+
+* AWSElasticBlockStore
+* AzureDisk
+* CSI
+* FC （光纤通道）
+* GCEPersistentDisk
+* iSCSI
+* Local 卷
+* OpenStack Cinder
+* RBD （Ceph 块设备）
+* VsphereVolume
+
+<!--
+### PersistentVolume using a Raw Block Volume {#persistent-volume-using-a-raw-block-volume}
+-->
+### 使用原始块卷的持久卷      {#persistent-volume-using-a-raw-block-volume}
+
+```yaml
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: block-pv
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Block
+  persistentVolumeReclaimPolicy: Retain
+  fc:
+    targetWWNs: ["50060e801049cfd1"]
+    lun: 0
+    readOnly: false
+```
+
+<!--
+### PersistentVolumeClaim requesting a Raw Block Volume {#persistent-volume-claim-requesting-a-raw-block-volume}
+-->
+### 申请原始块卷的 PVC 申领      {#persistent-volume-claim-requesting-a-raw-block-volume}
+
+```yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: block-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Block
+  resources:
+    requests:
+      storage: 10Gi
+```
+
+<!--
+### Pod specification adding Raw Block Device path in container
+-->
+### 在容器中添加原始块设备路径的 Pod 规约
+
+```yaml
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pod-with-block-volume
+spec:
+  containers:
+    - name: fc-container
+      image: fedora:26
+      command: ["/bin/sh", "-c"]
+      args: [ "tail -f /dev/null" ]
+      volumeDevices:
+        - name: data
+          devicePath: /dev/xvda
+  volumes:
+    - name: data
+      persistentVolumeClaim:
+        claimName: block-pvc
+```
+
+<!--
+When adding a raw block device for a Pod, you specify the device path in the container instead of a mount path.
+-->
+{{< note >}}
+向 Pod 中添加原始块设备时，你要在容器内设置设备路径而不是挂载路径。
+{{< /note >}}
+
+<!--
+### Binding Block Volumes
+
+If a user requests a raw block volume by indicating this using the `volumeMode` field in the PersistentVolumeClaim spec, the binding rules differ slightly from previous releases that didn't consider this mode as part of the spec.
+Listed is a table of possible combinations the user and admin might specify for requesting a raw block device. The table indicates if the volume will be bound or not given the combinations:
+Volume binding matrix for statically provisioned volumes:
+-->
+### 绑定块卷     {#binding-block-volumes}
+
+如果用户通过 PersistentVolumeClaim 规约的 `volumeMode` 字段来表明对原始
+块设备的请求，绑定规则与之前版本中未在规约中考虑此模式的实现略有不同。
+下面列举的表格是用户和管理员可以为请求原始块设备所作设置的组合。
+此表格表明在不同的组合下卷是否会被绑定。
+
+静态供应卷的卷绑定矩阵：
+
+<!--
+| PV volumeMode | PVC volumeMode  | Result           |
+| --------------|:---------------:| ----------------:|
+|   unspecified | unspecified     | BIND             |
+|   unspecified | Block           | NO BIND          |
+|   unspecified | Filesystem      | BIND             |
+|   Block       | unspecified     | NO BIND          |
+|   Block       | Block           | BIND             |
+|   Block       | Filesystem      | NO BIND          |
+|   Filesystem  | Filesystem      | BIND             |
+|   Filesystem  | Block           | NO BIND          |
+|   Filesystem  | unspecified     | BIND             |
+-->
+| PV volumeMode | PVC volumeMode  | Result           |
+| --------------|:---------------:| ----------------:|
+|   未指定      | 未指定          | 绑定             |
+|   未指定      | Block           | 不绑定           |
+|   未指定      | Filesystem      | 绑定             |
+|   Block       | 未指定          | 不绑定           |
+|   Block       | Block           | 绑定             |
+|   Block       | Filesystem      | 不绑定           |
+|   Filesystem  | Filesystem      | 绑定             |
+|   Filesystem  | Block           | 不绑定           |
+|   Filesystem  | 未指定          | 绑定             |
+
+<!--
+Only statically provisioned volumes are supported for alpha release. Administrators should take care to consider these values when working with raw block devices.
+-->
+{{< note >}}
+Alpha 发行版本中仅支持静态供应的卷。
+管理员需要在处理原始块设备时小心处理这些值。
+{{< /note >}}
+
+<!--
+## Volume Snapshot and Restore Volume from Snapshot Support
+-->
+## 对卷快照及从卷快照中恢复卷的支持
+
+{{< feature-state for_k8s_version="v1.17" state="beta" >}}
+
+<!--
+Volume snapshot feature was added to support CSI Volume Plugins only. For details, see [volume snapshots](/docs/concepts/storage/volume-snapshots/).
+
+To enable support for restoring a volume from a volume snapshot data source, enable the
+`VolumeSnapshotDataSource` feature gate on the apiserver and controller-manager.
+-->
+卷快照（Volume Snapshot）功能的添加仅是为了支持 CSI 卷插件。
+有关细节可参阅[卷快照](/zh/docs/concepts/storage/volume-snapshots/)文档。
+
+要启用从卷快照数据源恢复数据卷的支持，可在 API 服务器和控制器管理器上启用
+`VolumeSnapshotDataSource` 特性门控。
+
+<!--
+### Create a PersistentVolumeClaim from a Volume Snapshot {#create-persistent-volume-claim-from-volume-snapshot}
+-->
+### 基于卷快照创建 PVC 申领     {#create-persistent-volume-claim-from-volume-snapshot}
+
+```yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: restore-pvc
+spec:
+  storageClassName: csi-hostpath-sc
+  dataSource:
+    name: new-snapshot-test
+    kind: VolumeSnapshot
+    apiGroup: snapshot.storage.k8s.io
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+```
+
+<!--
+## Volume Cloning
+
+[Volume Cloning](/docs/concepts/storage/volume-pvc-datasource/) only available for CSI volume plugins.
+-->
+## 卷克隆     {#volume-cloning}
+
+[卷克隆](/zh/docs/concepts/storage/volume-pvc-datasource/)功能特性仅适用于
+CSI 卷插件。
+
+<!--
+### Create PersistentVolumeClaim from an existing PVC {#create-persistent-volume-claim-from-an-existing-pvc}
+-->
+### 基于现有 PVC 创建新的 PVC 申领    {#create-persistent-volume-claim-from-an-existing-pvc}
+
+```yaml
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: cloned-pvc
+spec:
+  storageClassName: my-csi-plugin
+  dataSource:
+    name: existing-src-pvc-name
+    kind: PersistentVolumeClaim
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+```
+
+<!--
+## Writing Portable Configuration
+
+If you're writing configuration templates or examples that run on a wide range of clusters
+and need persistent storage, it is recommended that you use the following pattern:
+-->
+## 编写可移植的配置   {#writing-portable-configuration}
+
+如果你要编写配置模板和示例用来在很多集群上运行并且需要持久性存储，建议你使用以下模式：
+
+<!--
+- Include PersistentVolumeClaim objects in your bundle of config (alongside
+  Deployments, ConfigMaps, etc).
+- Do not include PersistentVolume objects in the config, since the user instantiating
+  the config may not have permission to create PersistentVolumes.
+-->
+- 将 PersistentVolumeClaim 对象包含到你的配置包（Bundle）中，和 Deployment
+  以及 ConfigMap 等放在一起。
+- 不要在配置中包含 PersistentVolume 对象，因为对配置进行实例化的用户很可能
+  没有创建 PersistentVolume 的权限。
+<!--
+- Give the user the option of providing a storage class name when instantiating
+  the template.
+  - If the user provides a storage class name, put that value into the
+    `persistentVolumeClaim.storageClassName` field.
+    This will cause the PVC to match the right storage
+    class if the cluster has StorageClasses enabled by the admin.
+  - If the user does not provide a storage class name, leave the
+    `persistentVolumeClaim.storageClassName` field as nil. This will cause a
+    PV to be automatically provisioned for the user with the default StorageClass
+    in the cluster. Many cluster environments have a default StorageClass installed,
+    or administrators can create their own default StorageClass.
+-->
+- 为用户提供在实例化模板时指定存储类名称的能力。
+  - 仍按用户提供存储类名称，将该名称放到 `persistentVolumeClaim.storageClassName` 字段中。
+    这样会使得 PVC 在集群被管理员启用了存储类支持时能够匹配到正确的存储类，
+  - 如果用户未指定存储类名称，将 `persistentVolumeClaim.storageClassName` 留空（nil）。
+    这样，集群会使用默认 `StorageClass` 为用户自动供应一个存储卷。
+    很多集群环境都配置了默认的 `StorageClass`，或者管理员也可以自行创建默认的
+    `StorageClass`。
+<!--
+- In your tooling, watch for PVCs that are not getting bound after some time
+  and surface this to the user, as this may indicate that the cluster has no
+  dynamic storage support (in which case the user should create a matching PV)
+  or the cluster has no storage system (in which case the user cannot deploy
+  config requiring PVCs).
+-->
+- 在你的工具链中，监测经过一段时间后仍未被绑定的 PVC 对象，要让用户知道这些对象，
+  因为这可能意味着集群没有动态存储支持（因而用户必须先创建一个匹配的 PV），或者
+  集群没有配置存储系统（因而用户无法配置需要 PVC 的工作负载配置）。 
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Learn more about [Creating a PersistentVolume](/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#create-a-persistentvolume).
+* Learn more about [Creating a PersistentVolumeClaim](/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#create-a-persistentvolumeclaim).
+* Read the [Persistent Storage design document](https://git.k8s.io/community/contributors/design-proposals/storage/persistent-storage.md).
+-->
+* 进一步了解[创建持久卷](/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#create-a-persistentvolume).
+* 进一步学习[创建 PVC 申领](/zh/docs/tasks/configure-pod-container/configure-persistent-volume-storage/#create-a-persistentvolumeclaim).
+* 阅读[持久存储的设计文档](https://git.k8s.io/community/contributors/design-proposals/storage/persistent-storage.md).
+
+<!--
+### Reference
+
+* [PersistentVolume](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolume-v1-core)
+* [PersistentVolumeSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumespec-v1-core)
+* [PersistentVolumeClaim](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaim-v1-core)
+* [PersistentVolumeClaimSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaimspec-v1-core)
+-->
+### 参考    {#reference}
+
+* [PersistentVolume](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolume-v1-core)
+* [PersistentVolumeSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumespec-v1-core)
+* [PersistentVolumeClaim](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaim-v1-core)
+* [PersistentVolumeClaimSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaimspec-v1-core)
+

From ad56b48a0b4c55641caa7cdc58d16c857abf3554 Mon Sep 17 00:00:00 2001
From: Evgeny Shmarnev <shmarnev@gmail.com>
Date: Mon, 7 Sep 2020 18:04:53 +0200
Subject: [PATCH 240/496] Rewrite GKE refernce in Control Plane-Node
 Communication

---
 .../concepts/architecture/control-plane-node-communication.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/architecture/control-plane-node-communication.md b/content/en/docs/concepts/architecture/control-plane-node-communication.md
index 8040213495..f581b7dcb4 100644
--- a/content/en/docs/concepts/architecture/control-plane-node-communication.md
+++ b/content/en/docs/concepts/architecture/control-plane-node-communication.md
@@ -21,7 +21,7 @@ This document catalogs the communication paths between the control plane (really
 Kubernetes has a "hub-and-spoke" API pattern. All API usage from nodes (or the pods they run) terminate at the apiserver (none of the other control plane components are designed to expose remote services). The apiserver is configured to listen for remote connections on a secure HTTPS port (typically 443) with one or more forms of client [authentication](/docs/reference/access-authn-authz/authentication/) enabled.
 One or more forms of [authorization](/docs/reference/access-authn-authz/authorization/) should be enabled, especially if [anonymous requests](/docs/reference/access-authn-authz/authentication/#anonymous-requests) or [service account tokens](/docs/reference/access-authn-authz/authentication/#service-account-tokens) are allowed.
 
-Nodes should be provisioned with the public root certificate for the cluster such that they can connect securely to the apiserver along with valid client credentials. For example, on a default GKE deployment, the client credentials provided to the kubelet are in the form of a client certificate. See [kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) for automated provisioning of kubelet client certificates.
+Nodes should be provisioned with the public root certificate for the cluster such that they can connect securely to the apiserver along with valid client credentials. A good approach is that the client credentials provided to the kubelet are in the form of a client certificate. See [kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) for automated provisioning of kubelet client certificates.
 
 Pods that wish to connect to the apiserver can do so securely by leveraging a service account so that Kubernetes will automatically inject the public root certificate and a valid bearer token into the pod when it is instantiated.
 The `kubernetes` service (in all namespaces) is configured with a virtual IP address that is redirected (via kube-proxy) to the HTTPS endpoint on the apiserver.

From 7c55747b18244351e05d4f63f320365faa8273b8 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Mon, 7 Sep 2020 17:22:17 +0100
Subject: [PATCH 241/496] Remove legacy capture shortcodes

---
 content/es/docs/concepts/overview/kubernetes-api.md | 13 ++++---------
 1 file changed, 4 insertions(+), 9 deletions(-)

diff --git a/content/es/docs/concepts/overview/kubernetes-api.md b/content/es/docs/concepts/overview/kubernetes-api.md
index f8b3fe64b6..25cfe18049 100644
--- a/content/es/docs/concepts/overview/kubernetes-api.md
+++ b/content/es/docs/concepts/overview/kubernetes-api.md
@@ -2,14 +2,14 @@
 reviewers:
 - raelga
 title: API de Kubernetes
-content_template: templates/concept
+content_type: concept
 weight: 30
-card: 
+card:
   name: concepts
   weight: 30
 ---
 
-{{% capture overview %}}
+<!-- overview -->
 
 Las convenciones globales de la API se describen en el [documento de convenciones de la API](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md).
 
@@ -24,10 +24,7 @@ Kubernetes también almacena el estado de los recursos de la API en forma serial
 
 Kubernetes está compuesto, en si mismo, por varios componentes que interactúan a través de su API.
 
-{{% /capture %}}
-
-
-{{% capture body %}}
+<!-- body -->
 
 ## Cambios a la API
 
@@ -125,5 +122,3 @@ Los `DaemonSets`, `Deployments`, `HorizontalPodAutoscalers`, `Ingresses`, `Jobs`
 
 Se pueden activar otros recursos con la opción `--runtime-config` del `apiserver`. Por ejemplo, como `--runtime-config` acepta valores separados por coma, puede desactivar los Deployments y los Ingress con la opción
 `--runtime-config=extensions/v1beta1/deployments=false,extensions/v1beta1/ingresses=false`
-
-{{% /capture %}}

From b330bb0256015b5ffe3909c8b16e16f3d1c54154 Mon Sep 17 00:00:00 2001
From: gm7y8 <gm7y8@mail.umkc.edu>
Date: Sun, 6 Sep 2020 12:14:41 -0700
Subject: [PATCH 242/496] Move eviction-policy from tasks to concepts

add what's next to eviction policy
---
 .../scheduling-eviction/eviction-policy.md    |  23 ++++
 .../scheduling-eviction/kube-scheduler.md     |  11 +-
 .../scheduler-perf-tuning.md                  |   5 +-
 .../scheduling-framework.md                   |   2 +-
 .../administer-cluster/out-of-resource.md     | 111 +++++++-----------
 5 files changed, 74 insertions(+), 78 deletions(-)
 create mode 100644 content/en/docs/concepts/scheduling-eviction/eviction-policy.md

diff --git a/content/en/docs/concepts/scheduling-eviction/eviction-policy.md b/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
new file mode 100644
index 0000000000..32a7fb14b3
--- /dev/null
+++ b/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
@@ -0,0 +1,23 @@
+---
+title: Eviction Policy
+content_template: templates/concept
+weight: 60
+---
+
+<!-- overview -->
+
+This page is an overview of Kubernetes' policy for eviction.
+
+<!-- body -->
+
+## Eviction Policy
+
+The {{< glossary_tooltip text="Kubelet" term_id="kubelet" >}} can proactively monitor for and prevent total starvation of a
+compute resource. In those cases, the `kubelet` can reclaim the starved
+resource by proactively failing one or more Pods. When the `kubelet` fails
+a Pod, it terminates all of its containers and transitions its `PodPhase` to `Failed`.
+If the evicted Pod is managed by a Deployment, the Deployment will create another Pod
+to be scheduled by Kubernetes.
+
+## {{% heading "whatsnext" %}}
+- Read [Configure out of resource handling](/docs/tasks/administer-cluster/out-of-resource/) to learn more about eviction signals, thresholds, and handling.
\ No newline at end of file
diff --git a/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
index 19e22707b8..cf7e2713b9 100644
--- a/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/en/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -33,7 +33,7 @@ kube-scheduler is designed so that, if you want and need to, you can
 write your own scheduling component and use that instead.
 
 For every newly created pod or other unscheduled pods, kube-scheduler
-selects an optimal node for them to run on.  However, every container in
+selects an optimal node for them to run on. However, every container in
 pods has different requirements for resources and every pod also has
 different requirements. Therefore, existing nodes need to be filtered
 according to the specific scheduling requirements.
@@ -77,12 +77,9 @@ one of these at random.
 There are two supported ways to configure the filtering and scoring behavior
 of the scheduler:
 
-1. [Scheduling Policies](/docs/reference/scheduling/policies) allow you to
-  configure _Predicates_ for filtering and _Priorities_ for scoring.
-1. [Scheduling Profiles](/docs/reference/scheduling/config/#profiles) allow you
-  to configure Plugins that implement different scheduling stages, including:
-  `QueueSort`, `Filter`, `Score`, `Bind`, `Reserve`, `Permit`, and others. You
-  can also configure the kube-scheduler to run different profiles.
+
+1. [Scheduling Policies](/docs/reference/scheduling/policies) allow you to configure _Predicates_ for filtering and _Priorities_ for scoring.
+1. [Scheduling Profiles](/docs/reference/scheduling/profiles) allow you to configure Plugins that implement different scheduling stages, including: `QueueSort`, `Filter`, `Score`, `Bind`, `Reserve`, `Permit`, and others. You can also configure the kube-scheduler to run different profiles.
 
 
 ## {{% heading "whatsnext" %}}
diff --git a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 06f535a574..ed9fb04585 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -3,7 +3,7 @@ reviewers:
 - bsalamat
 title: Scheduler Performance Tuning
 content_type: concept
-weight: 70
+weight: 80
 ---
 
 <!-- overview -->
@@ -48,10 +48,13 @@ To change the value, edit the kube-scheduler configuration file (this is likely
 to be `/etc/kubernetes/config/kube-scheduler.yaml`), then restart the scheduler.
 
 After you have made this change, you can run
+
 ```bash
 kubectl get componentstatuses
 ```
+
 to verify that the kube-scheduler component is healthy. The output is similar to:
+
 ```
 NAME                 STATUS    MESSAGE             ERROR
 controller-manager   Healthy   ok
diff --git a/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md b/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
index de67c75016..20ecb6cf6b 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
@@ -3,7 +3,7 @@ reviewers:
 - ahg-g
 title: Scheduling Framework
 content_type: concept
-weight: 60
+weight: 70
 ---
 
 <!-- overview -->
diff --git a/content/en/docs/tasks/administer-cluster/out-of-resource.md b/content/en/docs/tasks/administer-cluster/out-of-resource.md
index 10ef986b8c..b989ceac62 100644
--- a/content/en/docs/tasks/administer-cluster/out-of-resource.md
+++ b/content/en/docs/tasks/administer-cluster/out-of-resource.md
@@ -18,28 +18,19 @@ nodes become unstable.
 
 <!-- body -->
 
-## Eviction Policy
-
-The `kubelet` can proactively monitor for and prevent total starvation of a
-compute resource. In those cases, the `kubelet` can reclaim the starved
-resource by proactively failing one or more Pods. When the `kubelet` fails
-a Pod, it terminates all of its containers and transitions its `PodPhase` to `Failed`.
-If the evicted Pod is managed by a Deployment, the Deployment will create another Pod 
-to be scheduled by Kubernetes.
-
 ### Eviction Signals
 
 The `kubelet` supports eviction decisions based on the signals described in the following
 table. The value of each signal is described in the Description column, which is based on
 the `kubelet` summary API.
 
-| Eviction Signal  | Description                                                                     |
-|----------------------------|-----------------------------------------------------------------------|
-| `memory.available` | `memory.available` := `node.status.capacity[memory]` - `node.stats.memory.workingSet` |
-| `nodefs.available` | `nodefs.available` := `node.stats.fs.available` |
-| `nodefs.inodesFree` | `nodefs.inodesFree` := `node.stats.fs.inodesFree` |
-| `imagefs.available` | `imagefs.available` := `node.stats.runtime.imagefs.available` |
-| `imagefs.inodesFree` | `imagefs.inodesFree` := `node.stats.runtime.imagefs.inodesFree` |
+| Eviction Signal      | Description                                                                           |
+|----------------------|---------------------------------------------------------------------------------------|
+| `memory.available`   | `memory.available` := `node.status.capacity[memory]` - `node.stats.memory.workingSet` |
+| `nodefs.available`   | `nodefs.available` := `node.stats.fs.available`                                       |
+| `nodefs.inodesFree`  | `nodefs.inodesFree` := `node.stats.fs.inodesFree`                                     |
+| `imagefs.available`  | `imagefs.available` := `node.stats.runtime.imagefs.available`                         |
+| `imagefs.inodesFree` | `imagefs.inodesFree` := `node.stats.runtime.imagefs.inodesFree`                       |
 
 Each of the above signals supports either a literal or percentage based value.
 The percentage based value is calculated relative to the total capacity
@@ -65,7 +56,7 @@ memory is reclaimable under pressure.
 `imagefs` is optional. `kubelet` auto-discovers these filesystems using
 cAdvisor. `kubelet` does not care about any other filesystems. Any other types
 of configurations are not currently supported by the kubelet. For example, it is
-*not OK* to store volumes and logs in a dedicated `filesystem`.
+_not OK_ to store volumes and logs in a dedicated `filesystem`.
 
 In future releases, the `kubelet` will deprecate the existing [garbage
 collection](/docs/concepts/cluster-administration/kubelet-garbage-collection/)
@@ -83,9 +74,7 @@ where:
 
 * `eviction-signal` is an eviction signal token as defined in the previous table.
 * `operator` is the desired relational operator, such as `<` (less than).
-* `quantity` is the eviction threshold quantity, such as `1Gi`. These tokens must
-match the quantity representation used by Kubernetes. An eviction threshold can also
-be expressed as a percentage using the `%` token.
+* `quantity` is the eviction threshold quantity, such as `1Gi`. These tokens must match the quantity representation used by Kubernetes. An eviction threshold can also be expressed as a percentage using the `%` token.
 
 For example, if a node has `10Gi` of total memory and you want trigger eviction if
 the available memory falls below `1Gi`, you can define the eviction threshold as
@@ -108,12 +97,9 @@ termination.
 
 To configure soft eviction thresholds, the following flags are supported:
 
-* `eviction-soft` describes a set of eviction thresholds (e.g. `memory.available<1.5Gi`) that if met over a
-corresponding grace period would trigger a Pod eviction.
-* `eviction-soft-grace-period` describes a set of eviction grace periods (e.g. `memory.available=1m30s`) that
-correspond to how long a soft eviction threshold must hold before triggering a Pod eviction.
-* `eviction-max-pod-grace-period` describes the maximum allowed grace period (in seconds) to use when terminating
-pods in response to a soft eviction threshold being met.
+* `eviction-soft` describes a set of eviction thresholds (e.g. `memory.available<1.5Gi`) that if met over a corresponding grace period would trigger a Pod eviction.
+* `eviction-soft-grace-period` describes a set of eviction grace periods (e.g. `memory.available=1m30s`) that correspond to how long a soft eviction threshold must hold before triggering a Pod eviction.
+* `eviction-max-pod-grace-period` describes the maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met.
 
 #### Hard Eviction Thresholds
 
@@ -124,8 +110,7 @@ with no graceful termination.
 
 To configure hard eviction thresholds, the following flag is supported:
 
-* `eviction-hard` describes a set of eviction thresholds (e.g. `memory.available<1Gi`) that if met
-would trigger a Pod eviction.
+* `eviction-hard` describes a set of eviction thresholds (e.g. `memory.available<1Gi`) that if met would trigger a Pod eviction.
 
 The `kubelet` has the following default hard eviction threshold:
 
@@ -150,10 +135,10 @@ reflects the node is under pressure.
 
 The following node conditions are defined that correspond to the specified eviction signal.
 
-| Node Condition | Eviction Signal  | Description                                                      |
-|-------------------------|-------------------------------|--------------------------------------------|
-| `MemoryPressure` | `memory.available` | Available memory on the node has satisfied an eviction threshold |
-| `DiskPressure` | `nodefs.available`, `nodefs.inodesFree`, `imagefs.available`, or `imagefs.inodesFree` | Available disk space and inodes on either the node's root filesystem or image filesystem has satisfied an eviction threshold |
+| Node Condition    | Eviction Signal                                                                       | Description                                                                                                                  |
+|-------------------|---------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------|
+| `MemoryPressure`  | `memory.available`                                                                    | Available memory on the node has satisfied an eviction threshold                                                             |
+| `DiskPressure`    | `nodefs.available`, `nodefs.inodesFree`, `imagefs.available`, or `imagefs.inodesFree` | Available disk space and inodes on either the node's root filesystem or image filesystem has satisfied an eviction threshold |
 
 The `kubelet` continues to report node status updates at the frequency specified by
 `--node-status-update-frequency` which defaults to `10s`.
@@ -168,8 +153,7 @@ as a consequence.
 To protect against this oscillation, the following flag is defined to control how
 long the `kubelet` must wait before transitioning out of a pressure condition.
 
-* `eviction-pressure-transition-period` is the duration for which the `kubelet` has
-to wait before transitioning out of an eviction pressure condition.
+* `eviction-pressure-transition-period` is the duration for which the `kubelet` has to wait before transitioning out of an eviction pressure condition.
 
 The `kubelet` would ensure that it has not observed an eviction threshold being met
 for the specified pressure condition for the period specified before toggling the
@@ -207,17 +191,8 @@ then by [Priority](/docs/concepts/configuration/pod-priority-preemption/), and t
 
 As a result, `kubelet` ranks and evicts Pods in the following order:
 
-* `BestEffort` or `Burstable` Pods whose usage of a starved resource exceeds its request.
-Such pods are ranked by Priority, and then usage above request.
-* `Guaranteed` pods and `Burstable` pods whose usage is beneath requests are evicted last.
-`Guaranteed` Pods are guaranteed only when requests and limits are specified for all
-the containers and they are equal. Such pods are guaranteed to never be evicted because
-of another Pod's resource consumption. If a system daemon (such as `kubelet`, `docker`,
-and `journald`) is consuming more resources than were reserved via `system-reserved` or
-`kube-reserved` allocations, and the node only has `Guaranteed` or `Burstable` Pods using
-less than requests remaining, then the node must choose to evict such a Pod in order to
-preserve node stability and to limit the impact of the unexpected consumption to other Pods.
-In this case, it will choose to evict pods of Lowest Priority first.
+* `BestEffort` or `Burstable` Pods whose usage of a starved resource exceeds its request. Such pods are ranked by Priority, and then usage above request.
+* `Guaranteed` pods and `Burstable` pods whose usage is beneath requests are evicted last. `Guaranteed` Pods are guaranteed only when requests and limits are specified for all the containers and they are equal. Such pods are guaranteed to never be evicted because of another Pod's resource consumption. If a system daemon (such as `kubelet`, `docker`, and `journald`) is consuming more resources than were reserved via `system-reserved` or `kube-reserved` allocations, and the node only has `Guaranteed` or `Burstable` Pods using less than requests remaining, then the node must choose to evict such a Pod in order to preserve node stability and to limit the impact of the unexpected consumption to other Pods. In this case, it will choose to evict pods of Lowest Priority first.
 
 If necessary, `kubelet` evicts Pods one at a time to reclaim disk when `DiskPressure`
 is encountered. If the `kubelet` is responding to `inode` starvation, it reclaims
@@ -228,6 +203,7 @@ that consumes the largest amount of disk and kills those first.
 #### With `imagefs`
 
 If `nodefs` is triggering evictions, `kubelet` sorts Pods based on the usage on `nodefs`
+
 - local volumes + logs of all its containers.
 
 If `imagefs` is triggering evictions, `kubelet` sorts Pods based on the writable layer usage of all its containers.
@@ -235,13 +211,13 @@ If `imagefs` is triggering evictions, `kubelet` sorts Pods based on the writable
 #### Without `imagefs`
 
 If `nodefs` is triggering evictions, `kubelet` sorts Pods based on their total disk usage
+
 - local volumes + logs & writable layer of all its containers.
 
 ### Minimum eviction reclaim
 
 In certain scenarios, eviction of Pods could result in reclamation of small amount of resources. This can result in
-`kubelet` hitting eviction thresholds in repeated successions. In addition to that, eviction of resources like `disk`,
- is time consuming.
+`kubelet` hitting eviction thresholds in repeated successions. In addition to that, eviction of resources like `disk`, is time consuming.
 
 To mitigate these issues, `kubelet` can have a per-resource `minimum-reclaim`. Whenever `kubelet` observes
 resource pressure, `kubelet` attempts to reclaim at least `minimum-reclaim` amount of resource below
@@ -268,10 +244,10 @@ The node reports a condition when a compute resource is under pressure. The
 scheduler views that condition as a signal to dissuade placing additional
 pods on the node.
 
-| Node Condition    | Scheduler Behavior                               |
-| ---------------- | ------------------------------------------------ |
-| `MemoryPressure` | No new `BestEffort` Pods are scheduled to the node. |
-| `DiskPressure` | No new Pods are scheduled to the node. |
+| Node Condition    | Scheduler Behavior                                  |
+| ------------------| ----------------------------------------------------|
+| `MemoryPressure`  | No new `BestEffort` Pods are scheduled to the node. |
+| `DiskPressure`    | No new Pods are scheduled to the node.              |
 
 ## Node OOM Behavior
 
@@ -280,11 +256,11 @@ the node depends on the [oom_killer](https://lwn.net/Articles/391222/) to respon
 
 The `kubelet` sets a `oom_score_adj` value for each container based on the quality of service for the Pod.
 
-| Quality of Service | oom_score_adj |
-|----------------------------|-----------------------------------------------------------------------|
-| `Guaranteed` | -998 |
-| `BestEffort` | 1000 |
-| `Burstable` | min(max(2, 1000 - (1000 * memoryRequestBytes) / machineMemoryCapacityBytes), 999) |
+| Quality of Service | oom_score_adj                                                                     |
+|--------------------|-----------------------------------------------------------------------------------|
+| `Guaranteed`       | -998                                                                              |
+| `BestEffort`       | 1000                                                                              |
+| `Burstable`        | min(max(2, 1000 - (1000 * memoryRequestBytes) / machineMemoryCapacityBytes), 999) |
 
 If the `kubelet` is unable to reclaim memory prior to a node experiencing system OOM, the `oom_killer` calculates
 an `oom_score` based on the percentage of memory it's using on the node, and then add the `oom_score_adj` to get an
@@ -325,10 +301,7 @@ and trigger eviction assuming those Pods use less than their configured request.
 
 ### DaemonSet
 
-As `Priority` is a key factor in the eviction strategy, if you do not want 
-pods belonging to a `DaemonSet` to be evicted, specify a sufficiently high priorityClass 
-in the pod spec template. If you want pods belonging to a `DaemonSet` to run only if 
-there are sufficient resources, specify a lower or default priorityClass.
+As `Priority` is a key factor in the eviction strategy, if you do not want pods belonging to a `DaemonSet` to be evicted, specify a sufficiently high priorityClass in the pod spec template. If you want pods belonging to a `DaemonSet` to run only if there are sufficient resources, specify a lower or default priorityClass.
 
 
 ## Deprecation of existing feature flags to reclaim disk
@@ -338,15 +311,15 @@ there are sufficient resources, specify a lower or default priorityClass.
 As disk based eviction matures, the following `kubelet` flags are marked for deprecation
 in favor of the simpler configuration supported around eviction.
 
-| Existing Flag | New Flag |
-| ------------- | -------- |
-| `--image-gc-high-threshold` | `--eviction-hard` or `eviction-soft` |
-| `--image-gc-low-threshold` | `--eviction-minimum-reclaim` |
-| `--maximum-dead-containers` | deprecated |
-| `--maximum-dead-containers-per-container` | deprecated |
-| `--minimum-container-ttl-duration` | deprecated |
-| `--low-diskspace-threshold-mb` | `--eviction-hard` or `eviction-soft` |
-| `--outofdisk-transition-frequency` | `--eviction-pressure-transition-period` |
+| Existing Flag                              | New Flag                                |
+| ------------------------------------------ | ----------------------------------------|
+| `--image-gc-high-threshold`                | `--eviction-hard` or `eviction-soft`    |
+| `--image-gc-low-threshold`                 | `--eviction-minimum-reclaim`            |
+| `--maximum-dead-containers`                | deprecated                              |
+| `--maximum-dead-containers-per-container`  | deprecated                              |
+| `--minimum-container-ttl-duration`         | deprecated                              |
+| `--low-diskspace-threshold-mb`             | `--eviction-hard` or `eviction-soft`    |
+| `--outofdisk-transition-frequency`         | `--eviction-pressure-transition-period` |
 
 ## Known issues
 

From 82b25694e3b246aa22962064f126962590dbc59d Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sat, 15 Aug 2020 00:13:08 +0800
Subject: [PATCH 243/496] [zh] Resync namespace task

The English content has changed a lot. This PR resync  the content.
---
 .../tasks/administer-cluster/namespaces.md    | 664 ++++++++----------
 1 file changed, 299 insertions(+), 365 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/namespaces.md b/content/zh/docs/tasks/administer-cluster/namespaces.md
index 9c5ce28310..fe82f0cbdc 100644
--- a/content/zh/docs/tasks/administer-cluster/namespaces.md
+++ b/content/zh/docs/tasks/administer-cluster/namespaces.md
@@ -1,44 +1,40 @@
 ---
-reviewers:
-- derekwaynecarr
-- janetkuo
-title: 通过命名空间共享集群
+title: 通过名字空间共享集群
 content_type: task
 ---
-<!-- ---
+<!--
 reviewers:
 - derekwaynecarr
 - janetkuo
 title: Share a Cluster with Namespaces
 content_type: task
---- -->
+-->
 
 <!-- overview -->
-<!-- This page shows how to view, work in, and delete {{< glossary_tooltip text="namespaces" term_id="namespace" >}}. The page also shows how to use Kubernetes namespaces to subdivide your cluster. -->
-
-本页展示了如何查看、使用和删除{{< glossary_tooltip text="namespaces" term_id="namespace" >}}。本页同时展示了如何使用 Kubernetes 命名空间去细分集群。
-
-
+<!--
+This page shows how to view, work in, and delete {{< glossary_tooltip text="namespaces" term_id="namespace" >}}. The page also shows how to use Kubernetes namespaces to subdivide your cluster.
+-->
+本页展示如何查看、使用和删除{{< glossary_tooltip text="名字空间" term_id="namespace" >}}。
+本页同时展示如何使用 Kubernetes 名字空间来划分集群。
 
 ## {{% heading "prerequisites" %}}
 
-<!-- * Have an [existing Kubernetes cluster](/docs/setup/).
-* Have a basic understanding of Kubernetes _[Pods](/docs/concepts/workloads/pods/pod/)_, _[Services](/docs/concepts/services-networking/service/)_, and _[Deployments](/docs/concepts/workloads/controllers/deployment/)_. -->
-
-* 您已拥有一个 [配置好的 Kubernetes 集群](/docs/setup/).
-* 您已对 Kubernetes 的 _[Pods](/docs/concepts/workloads/pods/pod/)_, _[Services](/docs/concepts/services-networking/service/)_, 和 _[Deployments](/docs/concepts/workloads/controllers/deployment/)_ 有基本理解。
-
-
+<!--
+* Have an [existing Kubernetes cluster](/docs/setup/).
+* Have a basic understanding of Kubernetes _[Pods](/docs/concepts/workloads/pods/pod/)_, _[Services](/docs/concepts/services-networking/service/)_, and _[Deployments](/docs/concepts/workloads/controllers/deployment/)_.
+-->
+* 你已拥有一个[配置好的 Kubernetes 集群](/zh/docs/setup/).
+* 你已对 Kubernetes 的 _[Pods](/zh/docs/concepts/workloads/pods/)_, 
+  _[Services](/zh/docs/concepts/services-networking/service/)_, 和
+  _[Deployments](/zh/docs/concepts/workloads/controllers/deployment/)_ 有基本理解。
 
 <!-- steps -->
 
 <!-- ## Viewing namespaces -->
-
-## 查看命名空间
+## 查看名字空间
 
 <!-- 1. List the current namespaces in a cluster using: -->
-
-1. 列出集群中现有的命名空间：
+1. 列出集群中现有的名字空间：
 
 ```shell
 kubectl get namespaces
@@ -51,32 +47,31 @@ kube-public   Active    11d
 ```
 
 <!-- Kubernetes starts with three initial namespaces: -->
-
 初始状态下，Kubernetes 具有三个名字空间：
 
-<!--    * `default` The default namespace for objects with no other namespace
-   * `kube-system` The namespace for objects created by the Kubernetes system
-   * `kube-public` This namespace is created automatically and is readable by all users (including those not authenticated). This namespace is mostly reserved for cluster usage, in case that some resources should be visible and readable publicly throughout the whole cluster. The public aspect of this namespace is only a convention, not a requirement. -->
+<!--
+* `default` The default namespace for objects with no other namespace
+* `kube-system` The namespace for objects created by the Kubernetes system
+* `kube-public` This namespace is created automatically and is readable by all users (including those not authenticated). This namespace is mostly reserved for cluster usage, in case that some resources should be visible and readable publicly throughout the whole cluster. The public aspect of this namespace is only a convention, not a requirement. -->
 
-   * `default` 无命名空间对象的默认命名空间
-   * `kube-system` 由 Kubernetes 系统创建的对象的命名空间
-   * `kube-public` 自动创建且被所有用户可读的命名空间（包括未经身份认证的）。此命名空间通常在某些资源在整个集群中可见且可公开读取时被集群使用。此命名空间的公共方面只是一个约定，而不是一个必要条件。
+* `default` 无名字空间对象的默认名字空间
+* `kube-system` 由 Kubernetes 系统创建的对象的名字空间
+* `kube-public` 自动创建且被所有用户可读的名字空间（包括未经身份认证的）。此名字空间通常在某些资源在整个集群中可见且可公开读取时被集群使用。此名字空间的公共方面只是一个约定，而不是一个必要条件。
 
 <!-- You can also get the summary of a specific namespace using: -->
-
-您还可以通过下列命令获取特定命名空间的摘要：
+你还可以通过下列命令获取特定名字空间的摘要：
 
 ```shell
 kubectl get namespaces <name>
 ```
 
 <!-- Or you can get detailed information with: -->
-
-或获取详细信息：
+或用下面的命令获取详细信息：
 
 ```shell
 kubectl describe namespaces <name>
 ```
+
 ```
 Name:           default
 Labels:         <none>
@@ -92,12 +87,10 @@ Resource Limits
 ```
 
 <!-- Note that these details show both resource quota (if present) as well as resource limit ranges. -->
-
 请注意，这些详情同时显示了资源配额（如果存在）以及资源限制区间。
 
 <!-- Resource quota tracks aggregate usage of resources in the *Namespace* and allows cluster operators
 to define *Hard* resource usage limits that a *Namespace* may consume. -->
-
 资源配额跟踪并聚合 *Namespace* 中资源的使用情况，并允许集群运营者定义 *Namespace* 可能消耗的 *Hard* 资源使用限制。
 
 <!-- A limit range defines min/max constraints on the amount of resources a single entity can consume in
@@ -109,428 +102,366 @@ See [Admission control: Limit Range](https://git.k8s.io/community/contributors/d
 
 参阅 [准入控制: 限制区间](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_limit_range.md)
 
-<!-- A namespace can be in one of two phases:
+<!--
+A namespace can be in one of two phases:
 
-   * `Active` the namespace is in use
-   * `Terminating` the namespace is being deleted, and can not be used for new objects
+* `Active` the namespace is in use
+* `Terminating` the namespace is being deleted, and can not be used for new objects
 
 See the [design doc](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#phases) for more details. -->
 
-命名空间可以处于下列两个阶段中的一个:
+名字空间可以处于下列两个阶段中的一个:
 
-   * `Active` 命名空间使用中
-   * `Terminating` 命名空间正在被删除，且不能被用于新对象。
+* `Active` 名字空间正在被使用中
+* `Terminating` 名字空间正在被删除，且不能被用于新对象。
 
-参见 [设计文档](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#phases) 查看更多细节。
+参见[设计文档](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#phases) 查看更多细节。
 
 <!-- ## Creating a new namespace -->
-
-## 创建命名空间
+## 创建名字空间
 
 <!--
 Avoid creating namespace with prefix `kube-`, since it is reserved for Kubernetes system namespaces.
 -->
 {{< note >}}
-避免使用前缀 `kube-` 创建命名空间，因为它是为 Kubernetes 系统命名空间保留的。
+避免使用前缀 `kube-` 创建名字空间，因为它是为 Kubernetes 系统名字空间保留的。
 {{< /note >}}
 
 <!-- 1. Create a new YAML file called `my-namespace.yaml` with the contents: -->
-
 1. 新建一个名为 `my-namespace.yaml` 的 YAML 文件，并写入下列内容：
 
+   ```yaml
+   apiVersion: v1
+   kind: Namespace
+   metadata:
+     name: <insert-namespace-name-here>
+   ```
 
-```yaml
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: <insert-namespace-name-here>
-```
+   <!-- Then run: -->
+   然后运行：
 
-<!--
-Then run:
--->
-然后运行：
-
-```
-kubectl create -f ./my-namespace.yaml
-```
+   ```shell
+   kubectl create -f ./my-namespace.yaml
+   ```
 
 <!--
 2. Alternatively, you can create namespace using below command:
 -->
-2. 或者，你可以使用下面的命令创建命名空间：
+2. 或者，你可以使用下面的命令创建名字空间：
 
    ```
    kubectl create namespace <insert-namespace-name-here>
    ```
 
-<!-- Note that the name of your namespace must be a DNS compatible label. -->
+<!--
+The name of your namespace must be a valid
+[DNS label](/docs/concepts/overview/working-with-objects/names#dns-label-names).
+-->
+请注意，名字空间的名称必须是一个合法的
+[DNS 标签](/zh/docs/concepts/overview/working-with-objects/names#dns-label-names)。
 
-请注意，命名空间的名称必须是 DNS 兼容的标签。
+<!--
+There's an optional field `finalizers`, which allows observables to purge resources whenever the namespace is deleted. Keep in mind that if you specify a nonexistent finalizer, the namespace will be created but will get stuck in the `Terminating` state if the user tries to delete it.
 
-<!-- There's an optional field `finalizers`, which allows observables to purge resources whenever the namespace is deleted. Keep in mind that if you specify a nonexistent finalizer, the namespace will be created but will get stuck in the `Terminating` state if the user tries to delete it.
+More information on `finalizers` can be found in the namespace [design doc](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#finalizers).
+-->
+可选字段 `finalizers` 允许观察者们在名字空间被删除时清除资源。记住如果指定了一个不存在的终结器，名字空间仍会被创建，但如果用户试图删除它，它将陷入 `Terminating` 状态。
 
-More information on `finalizers` can be found in the namespace [design doc](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#finalizers). -->
-
-可选字段 `finalizers` 允许观察者们在命名空间被删除时清除资源。记住如果指定了一个不存在的终结器，命名空间仍会被创建，但如果用户试图删除它，它将陷入 `Terminating` 状态。
-
-更多有关 `finalizers` 的信息请查阅 [设计文档](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#finalizers) 中命名空间部分。
+更多有关 `finalizers` 的信息请查阅 [设计文档](https://git.k8s.io/community/contributors/design-proposals/architecture/namespaces.md#finalizers) 中名字空间部分。
 
 <!-- ## Deleting a namespace -->
+## 删除名字空间
 
-## 删除命名空间
-
-<!-- 1. Delete a namespace with -->
-
-1. 删除命名空间使用命令
+<!--
+Delete a namespace with
+-->
+删除名字空间使用命令：
 
 ```shell
 kubectl delete namespaces <insert-some-namespace-name>
 ```
 
-{{< warning >}}
 <!-- This deletes _everything_ under the namespace! -->
-
-这会删除命名空间下的 _所有内容_ ！
-
+{{< warning >}}
+这会删除名字空间下的 _所有内容_ ！
 {{< /warning >}}
 
 <!-- This delete is asynchronous, so for a time you will see the namespace in the `Terminating` state. -->
+删除是异步的，所以有一段时间你会看到名字空间处于 `Terminating` 状态。
 
-删除是异步的,所以有一段时间你会看到命名空间处于 `Terminating` 状态。
+<!--
+## Subdividing your cluster using Kubernetes namespaces
+-->
+## 使用 Kubernetes 名字空间细分你的集群
 
-<!-- ## Subdividing your cluster using Kubernetes namespaces -->
+<!--
+1. Understand the default namespace
 
-## 使用 Kubernetes 命名空间细分您的集群
+   By default, a Kubernetes cluster will instantiate a default namespace when provisioning
+   the cluster to hold the default set of Pods, Services, and Deployments used by the cluster.
+-->
 
-<!-- 1. Understand the default namespace
+1. 理解 default 名字空间
 
-By default, a Kubernetes cluster will instantiate a default namespace when provisioning the cluster to hold the default set of Pods,
-Services, and Deployments used by the cluster. -->
+   默认情况下，Kubernetes 集群会在配置集群时实例化一个 default 名字空间，用以存放集群所使用的默认
+   Pods、Services 和 Deployments 集合。
 
-1. 理解默认命名空间
+   <!--
+   Assuming you have a fresh cluster, you can introspect the available namespace's by doing the following:
+   -->
 
-默认情况下，Kubernetes 集群会在配置集群时实例化一个默认命名空间，用以存放集群所使用的默认 Pods、Services 和 Deployments 集合。
+   假设你有一个新的集群，你可以通过执行以下操作来内省可用的名字空间
 
-<!-- Assuming you have a fresh cluster, you can introspect the available namespace's by doing the following: -->
+   ```shell
+   kubectl get namespaces
+   ```
+   ```
+   NAME      STATUS    AGE
+   default   Active    13m
+   ```
 
-假设您有一个新的集群，您可以通过执行以下操作来内省可用的命名空间
+<!--
+2. Create new namespaces
+-->
+2. 创建新的名字空间
 
-```shell
-kubectl get namespaces
-```
-```
-NAME      STATUS    AGE
-default   Active    13m
-```
+   <!--
+   For this exercise, we will create two additional Kubernetes namespaces to hold our content.
+   -->
+   在本练习中，我们将创建两个额外的 Kubernetes 名字空间来保存我们的内容。
 
-<!-- 2. Create new namespaces -->
+   <!--
+   In a scenario where an organization is using a shared Kubernetes cluster for development and
+   production use cases:
+   -->
+   在某组织使用共享的 Kubernetes 集群进行开发和生产的场景中：
 
-2. 创建新的命名空间
+   <!--
+   The development team would like to maintain a space in the cluster where they can
+   get a view on the list of Pods, Services, and Deployments
+   they use to build and run their application.  In this space, Kubernetes resources come
+   and go, and the restrictions on who can or cannot modify resources
+   are relaxed to enable agile development.
+   -->
+   开发团队希望在集群中维护一个空间，以便他们可以查看用于构建和运行其应用程序的 Pods、Services
+   和 Deployments 列表。在这个空间里，Kubernetes 资源被自由地加入或移除，
+   对谁能够或不能修改资源的限制被放宽，以实现敏捷开发。
+   
+   <!--
+   The operations team would like to maintain a space in the cluster where they can enforce
+   strict procedures on who can or cannot manipulate the set of
+   Pods, Services, and Deployments that run the production site.
+   -->
+   运维团队希望在集群中维护一个空间，以便他们可以强制实施一些严格的规程，
+   对谁可以或不可以操作运行生产站点的 Pods、Services 和 Deployments 集合进行控制。
+   
+   <!--
+   One pattern this organization could follow is to partition the Kubernetes cluster into
+   two namespaces: `development` and `production`.
+   -->
+   该组织可以遵循的一种模式是将 Kubernetes 集群划分为两个名字空间：development 和 production。
+   
+   <!-- Let's create two new namespaces to hold our work. -->
+   让我们创建两个新的名字空间来保存我们的工作。
+   
+   <!-- Create the `development` namespace using kubectl. -->
+   使用 kubectl 创建 `development` 名字空间。
+   
+   ```shell
+   kubectl create -f https://k8s.io/examples/admin/namespace-dev.json
+   ```
 
-<!-- For this exercise, we will create two additional Kubernetes namespaces to hold our content. -->
+   <!-- And then let's create the `production` namespace using kubectl. -->
+   让我们使用 kubectl 创建 `production` 名字空间。
 
-在本练习中，我们将创建两个额外的 Kubernetes 命名空间来保存我们的内容。
+   ```shell
+   kubectl create -f https://k8s.io/examples/admin/namespace-prod.json
+   ```
 
-<!-- In a scenario where an organization is using a shared Kubernetes cluster for development and production use cases: -->
+   <!-- To be sure things are right, list all of the namespaces in our cluster. -->
+   为了确保一切正常，列出集群中的所有名字空间。
 
-在某组织使用共享的 Kubernetes 集群进行开发和生产的场景中：
-
-<!-- The development team would like to maintain a space in the cluster where they can get a view on the list of Pods, Services, and Deployments
-they use to build and run their application.  In this space, Kubernetes resources come and go, and the restrictions on who can or cannot modify resources
-are relaxed to enable agile development. -->
-
-开发团队希望在集群中维护一个空间，以便他们可以查看用于构建和运行其应用程序的 Pods、Services 和 Deployments 列表。在这个空间里，Kubernetes 资源被自由地加入或移除，对谁能够或不能修改资源的限制被放宽，以实现敏捷开发。
-
-<!-- The operations team would like to maintain a space in the cluster where they can enforce strict procedures on who can or cannot manipulate the set of
-Pods, Services, and Deployments that run the production site. -->
-
-运维团队希望在集群中维护一个空间，以便他们可以强制实施一些严格的规程，对谁可以或不可以操作运行生产站点的 Pods、Services 和 Deployments 集合进行控制。
-
-<!-- One pattern this organization could follow is to partition the Kubernetes cluster into two namespaces: `development` and `production`. -->
-
-该组织可以遵循的一种模式是将 Kubernetes 集群划分为两个命名空间：development 和 production。
-
-<!-- Let's create two new namespaces to hold our work. -->
-
-让我们创建两个新的命名空间来保存我们的工作。
-
-<!-- Use the file [`namespace-dev.json`](/examples/admin/namespace-dev.json) which describes a `development` namespace: -->
-
-文件 [`namespace-dev.json`](/examples/admin/namespace-dev.json) 描述了 development 命名空间:
-
-{{< codenew language="json" file="admin/namespace-dev.json" >}}
-
-<!-- Create the `development` namespace using kubectl. -->
-
-使用 kubectl 创建 `development` 命名空间。
-
-```shell
-kubectl create -f https://k8s.io/examples/admin/namespace-dev.json
-```
-
-<!-- And then let's create the `production` namespace using kubectl. -->
-
-让我们使用 kubectl 创建 `production` 命名空间。
-
-```shell
-kubectl create -f https://k8s.io/examples/admin/namespace-prod.json
-```
-
-<!-- To be sure things are right, list all of the namespaces in our cluster. -->
-
-为了确保一切正常，列出集群中的所有命名空间。
-
-```shell
-kubectl get namespaces --show-labels
-```
-```
-NAME          STATUS    AGE       LABELS
-default       Active    32m       <none>
-development   Active    29s       name=development
-production    Active    23s       name=production
-```
+   ```shell
+   kubectl get namespaces --show-labels
+   ```
+   ```
+   NAME          STATUS    AGE       LABELS
+   default       Active    32m       <none>
+   development   Active    29s       name=development
+   production    Active    23s       name=production
+   ```
 
 <!-- 3. Create pods in each namespace -->
+3. 在每个名字空间中创建 pod
 
-3. 在每个命名空间中创建 pod
+   <!--
+   A Kubernetes namespace provides the scope for Pods, Services, and Deployments in the cluster.
 
-<!-- A Kubernetes namespace provides the scope for Pods, Services, and Deployments in the cluster.
+   Users interacting with one namespace do not see the content in another namespace.
+   -->
+   Kubernetes 名字空间为集群中的 Pods、Services 和 Deployments 提供了作用域。
+   
+   与一个名字空间交互的用户不会看到另一个名字空间中的内容。
+   
+   <!-- To demonstrate this, let's spin up a simple Deployment and Pods in the `development` namespace. -->
+   为了演示这一点，让我们在 `development` 名字空间中启动一个简单的 Deployment 和 Pod。
 
-Users interacting with one namespace do not see the content in another namespace. -->
+   ```shell
+   kubectl create deployment snowflake --image=k8s.gcr.io/serve_hostname -n=development
+   kubectl scale deployment snowflake --replicas=2 -n=development
+   ```
 
-Kubernetes 命名空间为集群中的 Pods、Services 和 Deployments 提供了作用域。
+   <!--
+   We have just created a deployment whose replica size is 2 that is running the pod
+   called `snowflake` with a basic container that just serves the hostname.
+   -->
+   我们刚刚创建了一个副本个数为 2 的 Deployment，运行名为 `snowflake` 的
+   Pod，其中包含一个仅负责提供主机名的基本容器。
 
-与一个命名空间交互的用户不会看到另一个命名空间中的内容。
+   ```shell
+   kubectl get deployment -n=development
+   ```
+   ```
+   NAME         READY   UP-TO-DATE   AVAILABLE   AGE
+   snowflake    2/2     2            2           2m
+   ```
+   ```shell
+   kubectl get pods -l app=snowflake -n=development
+   ```
+   ```
+   NAME                         READY     STATUS    RESTARTS   AGE
+   snowflake-3968820950-9dgr8   1/1       Running   0          2m
+   snowflake-3968820950-vgc4n   1/1       Running   0          2m
+   ```
 
-<!-- To demonstrate this, let's spin up a simple Deployment and Pods in the `development` namespace. -->
+   <!--
+   And this is great, developers are able to do what they want, and they do not have to worry about affecting content in the `production` namespace.
 
-为了演示这一点，让我们在 `development` 命名空间中启动一个简单的 Deployment 和 Pod。
+   Let's switch to the `production` namespace and show how resources in one namespace are hidden from the other.
 
-<!-- We first check what is the current context: -->
+   The `production` namespace should be empty, and the following commands should return nothing.
+   -->
+   看起来还不错，开发人员能够做他们想做的事，而且他们不必担心会影响到
+   `production` 名字空间下面的内容。
 
-我们首先检查一下当前的上下文：
+   让我们切换到 `production` 名字空间，展示一下一个名字空间中的资源是如何对
+   另一个名字空间隐藏的。
 
-```shell
-kubectl config view
-```
-```yaml
-apiVersion: v1
-clusters:
-- cluster:
-    certificate-authority-data: REDACTED
-    server: https://130.211.122.180
-  name: lithe-cocoa-92103_kubernetes
-contexts:
-- context:
-    cluster: lithe-cocoa-92103_kubernetes
-    user: lithe-cocoa-92103_kubernetes
-  name: lithe-cocoa-92103_kubernetes
-current-context: lithe-cocoa-92103_kubernetes
-kind: Config
-preferences: {}
-users:
-- name: lithe-cocoa-92103_kubernetes
-  user:
-    client-certificate-data: REDACTED
-    client-key-data: REDACTED
-    token: 65rZW78y8HbwXXtSXuUw9DbP4FLjHi4b
-- name: lithe-cocoa-92103_kubernetes-basic-auth
-  user:
-    password: h5M0FtUUIflBSdI7
-    username: admin
-```
+   名字空间 `production` 应该是空的，下面的命令应该不会返回任何东西。
 
-```shell
-kubectl config current-context
-```
-```
-lithe-cocoa-92103_kubernetes
-```
+   ```shell
+   kubectl get deployment -n=production
+   kubectl get pods -n=production
+   ```
 
-<!-- The next step is to define a context for the kubectl client to work in each namespace. The values of "cluster" and "user" fields are copied from the current context. -->
+   <!--
+   Production likes to run cattle, so let's create some cattle pods.
+   -->
+   生产环境下一般以养牛的方式运行负载，所以让我们创建一些 Cattle（牛）Pod。
 
-下一步是为 kubectl 客户端定义一个上下文，以便在每个命名空间中工作。"cluster" 和 "user" 字段的值将从当前上下文中复制。
+   ```shell
+   kubectl create deployment cattle --image=k8s.gcr.io/serve_hostname -n=production
+   kubectl scale deployment cattle --replicas=5 -n=production
 
-```shell
-kubectl config set-context dev --namespace=development --cluster=lithe-cocoa-92103_kubernetes --user=lithe-cocoa-92103_kubernetes
-kubectl config set-context prod --namespace=production --cluster=lithe-cocoa-92103_kubernetes --user=lithe-cocoa-92103_kubernetes
-```
+   kubectl get deployment -n=production
+   ```
+   ```
+   NAME         READY   UP-TO-DATE   AVAILABLE   AGE
+   cattle       5/5     5            5           10s
+   ```
 
-<!-- The above commands provided two request contexts you can alternate against depending on what namespace you
-wish to work against. -->
-
-上述命令提供了两个可以替代的请求上下文，具体取决于您希望使用的命名空间。
-
-<!-- Let's switch to operate in the `development` namespace. -->
-
-让我们切换到 `development` 命名空间进行操作。
-
-```shell
-kubectl config use-context dev
-```
-
-<!-- You can verify your current context by doing the following: -->
-
-您可以使用下列命令验证当前上下文：
-
-```shell
-kubectl config current-context
-dev
-```
-
-<!-- At this point, all requests we make to the Kubernetes cluster from the command line are scoped to the `development` namespace. -->
-
-此时，我们从命令行向 Kubernetes 集群发出的所有请求都限定在 `development` 命名空间中。
-
-<!-- Let's create some contents. -->
-
-让我们创建一些内容。
-
-```shell
-kubectl run snowflake --image=k8s.gcr.io/serve_hostname --replicas=2
-```
-<!-- We have just created a deployment whose replica size is 2 that is running the pod called `snowflake` with a basic container that just serves the hostname.
-Note that `kubectl run` creates deployments only on Kubernetes cluster >= v1.2. If you are running older versions, it creates replication controllers instead.
-If you want to obtain the old behavior, use `--generator=run/v1` to create replication controllers. See [`kubectl run`](/docs/reference/generated/kubectl/kubectl-commands/#run) for more details. -->
-
-我们刚刚创建了一个副本大小为 2 的 deployment，该 deployment 运行名为 snowflake 的 pod，其中包含一个仅提供主机名服务的基本容器。请注意，`kubectl run` 仅在 Kubernetes 集群版本 >= v1.2 时创建 deployment。如果您运行在旧版本上，则会创建 replication controllers。如果期望执行旧版本的行为，请使用 `--generator=run/v1` 创建 replication controllers。 参见 [`kubectl run`](/docs/reference/generated/kubectl/kubectl-commands/#run) 获取更多细节。
-
-```shell
-kubectl get deployment
-```
-```
-NAME        DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
-snowflake   2         2         2            2           2m
-```
-```shell
-kubectl get pods -l run=snowflake
-```
-```
-NAME                         READY     STATUS    RESTARTS   AGE
-snowflake-3968820950-9dgr8   1/1       Running   0          2m
-snowflake-3968820950-vgc4n   1/1       Running   0          2m
-```
-
-<!-- And this is great, developers are able to do what they want, and they do not have to worry about affecting content in the `production` namespace. -->
-
-这很棒，开发人员可以做他们想要的事情，而不必担心影响 `production` 命名空间中的内容。
-
-<!-- Let's switch to the `production` namespace and show how resources in one namespace are hidden from the other. -->
-
-让我们切换到 `production` 命名空间，展示一个命名空间中的资源如何对另一个命名空间不可见。
-
-```shell
-kubectl config use-context prod
-```
-
-<!-- The `production` namespace should be empty, and the following commands should return nothing. -->
-
-`production` 命名空间应该是空的，下列命令应该返回的内容为空。
-
-```shell
-kubectl get deployment
-kubectl get pods
-```
-
-<!-- Production likes to run cattle, so let's create some cattle pods. -->
-
-生产环境需要运行 cattle，让我们创建一些名为 cattle 的 pods。
-
-```shell
-kubectl run cattle --image=k8s.gcr.io/serve_hostname --replicas=5
-
-kubectl get deployment
-```
-```
-NAME      DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
-cattle    5         5         5            5           10s
-```
-
-```shell
-kubectl get pods -l run=cattle
-```
-```
-NAME                      READY     STATUS    RESTARTS   AGE
-cattle-2263376956-41xy6   1/1       Running   0          34s
-cattle-2263376956-kw466   1/1       Running   0          34s
-cattle-2263376956-n4v97   1/1       Running   0          34s
-cattle-2263376956-p5p3i   1/1       Running   0          34s
-cattle-2263376956-sxpth   1/1       Running   0          34s
-```
-
-<!-- At this point, it should be clear that the resources users create in one namespace are hidden from the other namespace. -->
-
-此时，应该很清楚的展示了用户在一个命名空间中创建的资源对另一个命名空间是隐藏的。
-
-<!-- As the policy support in Kubernetes evolves, we will extend this scenario to show how you can provide different
-authorization rules for each namespace. -->
-
-随着 Kubernetes 中的策略支持的发展，我们将扩展此场景，以展示如何为每个命名空间提供不同的授权规则。
+   ```shell
+   kubectl get pods -l app=cattle -n=production
+   ```
+   ```
+   NAME                      READY     STATUS    RESTARTS   AGE
+   cattle-2263376956-41xy6   1/1       Running   0          34s
+   cattle-2263376956-kw466   1/1       Running   0          34s
+   cattle-2263376956-n4v97   1/1       Running   0          34s
+   cattle-2263376956-p5p3i   1/1       Running   0          34s
+   cattle-2263376956-sxpth   1/1       Running   0          34s
+   ```
 
+<!--
+At this point, it should be clear that the resources users create in one namespace are hidden from the other namespace.
+-->
+此时，应该很清楚的展示了用户在一个名字空间中创建的资源对另一个名字空间是隐藏的。
 
+<!--
+As the policy support in Kubernetes evolves, we will extend this scenario to show how you can provide different
+authorization rules for each namespace.
+-->
+随着 Kubernetes 中的策略支持的发展，我们将扩展此场景，以展示如何为每个名字空间提供不同的授权规则。
 
 <!-- discussion -->
 
-<!-- ## Understanding the motivation for using namespaces -->
-
-## 理解使用命名空间的动机
-
-<!-- A single cluster should be able to satisfy the needs of multiple users or groups of users (henceforth a 'user community'). -->
+<!--
+## Understanding the motivation for using namespaces
+-->
+## 理解使用名字空间的动机
 
+<!--
+A single cluster should be able to satisfy the needs of multiple users or groups of users (henceforth a 'user community').
+-->
 单个集群应该能满足多个用户及用户组的需求（以下称为 “用户社区”）。
 
 <!-- Kubernetes _namespaces_ help different projects, teams, or customers to share a Kubernetes cluster. -->
+Kubernetes _名字空间_ 帮助不同的项目、团队或客户去共享 Kubernetes 集群。
 
-Kubernetes _命名空间_ 帮助不同的项目、团队或客户去共享 Kubernetes 集群。
-
-<!-- It does this by providing the following:
+<!--
+It does this by providing the following:
 
 1. A scope for [Names](/docs/concepts/overview/working-with-objects/names/).
-2. A mechanism to attach authorization and policy to a subsection of the cluster. -->
-
+2. A mechanism to attach authorization and policy to a subsection of the cluster.
+-->
 名字空间通过以下方式实现这点：
 
-1. 为[名字](/docs/concepts/overview/working-with-objects/names/)设置作用域.
+1. 为[名字](/zh/docs/concepts/overview/working-with-objects/names/)设置作用域.
 2. 为集群中的部分资源关联鉴权和策略的机制。
 
-<!-- Use of multiple namespaces is optional. -->
-
-使用多个命名空间是可选的。
-
-<!-- Each user community wants to be able to work in isolation from other communities. -->
+<!--
+Use of multiple namespaces is optional.
+-->
+使用多个名字空间是可选的。
 
+<!--
+Each user community wants to be able to work in isolation from other communities.
+-->
 每个用户社区都希望能够与其他社区隔离开展工作。
 
-<!-- Each user community has its own:
+<!--
+Each user community has its own:
 
 1. resources (pods, services, replication controllers, etc.)
 2. policies (who can or cannot perform actions in their community)
-3. constraints (this community is allowed this much quota, etc.) -->
+3. constraints (this community is allowed this much quota, etc.)
+-->
+每个用户社区都有自己的：
 
-每个用户社区都有:
-
-1. 资源（pods, services, replication controllers, 等等）
+1. 资源（pods、服务、 副本控制器等等）
 2. 策略（谁能或不能在他们的社区里执行操作）
 3. 约束（该社区允许多少配额，等等）
 
-<!-- A cluster operator may create a Namespace for each unique user community. -->
+<!--
+A cluster operator may create a Namespace for each unique user community.
+-->
+集群运营者可以为每个唯一用户社区创建名字空间。
 
-集群运营者可以为每个唯一用户社区创建命名空间。
-
-<!-- The Namespace provides a unique scope for:
+<!--
+The Namespace provides a unique scope for:
 
 1. named resources (to avoid basic naming collisions)
 2. delegated management authority to trusted users
-3. ability to limit community resource consumption -->
-
-命名空间为下列内容提供唯一的作用域：
+3. ability to limit community resource consumption
+-->
+名字空间为下列内容提供唯一的作用域：
 
 1. 命名资源（避免基本的命名冲突）
 2. 将管理权限委派给可信用户
 3. 限制社区资源消耗的能力
 
-<!-- Use cases include:
+<!--
+Use cases include:
 
 1.  As a cluster operator, I want to support multiple user communities on a single cluster.
 2.  As a cluster operator, I want to delegate authority to partitions of the cluster to trusted users
@@ -538,41 +469,44 @@ Kubernetes _命名空间_ 帮助不同的项目、团队或客户去共享 Kuber
 3.  As a cluster operator, I want to limit the amount of resources each community can consume in order
     to limit the impact to other communities using the cluster.
 4.  As a cluster user, I want to interact with resources that are pertinent to my user community in
-    isolation of what other user communities are doing on the cluster. -->
+    isolation of what other user communities are doing on the cluster.
+-->
 
 用例包括:
-
 1.  作为集群运营者, 我希望能在单个集群上支持多个用户社区。
 2.  作为集群运营者，我希望将集群分区的权限委派给这些社区中的受信任用户。
 3.  作为集群运营者，我希望能限定每个用户社区可使用的资源量，以限制对使用同一集群的其他用户社区的影响。
 4.  作为群集用户，我希望与我的用户社区相关的资源进行交互，而与其他用户社区在该集群上执行的操作无关。
 
-<!-- ## Understanding namespaces and DNS -->
+<!--
+## Understanding namespaces and DNS
+-->
+## 理解名字空间和 DNS
 
-## 理解命名空间和 DNS
-
-<!-- When you create a [Service](/docs/concepts/services-networking/service/), it creates a corresponding [DNS entry](/docs/concepts/services-networking/dns-pod-service/).
+<!--
+When you create a [Service](/docs/concepts/services-networking/service/), it creates a corresponding [DNS entry](/docs/concepts/services-networking/dns-pod-service/).
 This entry is of the form `<service-name>.<namespace-name>.svc.cluster.local`, which means
 that if a container just uses `<service-name>` it will resolve to the service which
 is local to a namespace.  This is useful for using the same configuration across
 multiple namespaces such as Development, Staging and Production.  If you want to reach
-across namespaces, you need to use the fully qualified domain name (FQDN). -->
-
-当您创建 [Service](/docs/concepts/services-networking/service/) 时，它会创建相应的 [DNS 条目](/docs/concepts/services-networking/dns-pod-service/)。此条目的格式为 `<service-name>。<namespace-name> .svc.cluster.local`，这意味着如果容器只使用 `<service-name>`，它将解析为本地服务到命名空间。 这对于在多个命名空间（如开发，暂存和生产）中使用相同的配置非常有用。 如果要跨命名空间访问，则需要使用完全限定的域名（FQDN）。
-
-
+across namespaces, you need to use the fully qualified domain name (FQDN).
+-->
+当你创建[服务](/zh/docs/concepts/services-networking/service/)时，Kubernetes
+会创建相应的 [DNS 条目](/zh/docs/concepts/services-networking/dns-pod-service/)。
+此条目的格式为 `<服务名称>.<名字空间名称>.svc.cluster.local`。
+这意味着如果容器只使用 `<服务名称>`，它将解析为名字空间本地的服务。
+这对于在多个名字空间（如开发、暂存和生产）中使用相同的配置非常有用。
+如果要跨名字空间访问，则需要使用完全限定的域名（FQDN）。
 
 ## {{% heading "whatsnext" %}}
 
-<!-- * Learn more about [setting the namespace preference](/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-preference).
+<!--
+* Learn more about [setting the namespace preference](/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-preference).
 * Learn more about [setting the namespace for a request](/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-for-a-request)
-* See [namespaces design](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/architecture/namespaces.md). -->
-
-
-* 了解更多 [设置命名空间首选项](/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-preference) 的内容。
-* 了解更多 [设置请求的命名空间](/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-for-a-request) 的内容。
-* 参见 [命名空间设计](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/architecture/namespaces.md)。
-
-
+* See [namespaces design](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/architecture/namespaces.md).
+-->
 
+* 进一步了解[设置名字空间偏好](/zh/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-preference)
+* 进一步了解[设置请求的名字空间](/zh/docs/concepts/overview/working-with-objects/namespaces/#setting-the-namespace-for-a-request)
+* 参阅[名字空间的设计文档](https://github.com/kubernetes/community/blob/{{< param "githubbranch" >}}/contributors/design-proposals/architecture/namespaces.md)
 

From e9c0380502676f4ea9ab848c5e8dda0e40678dd2 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Tue, 11 Aug 2020 16:35:35 +0800
Subject: [PATCH 244/496] [zh] Rework stateful application tasks

English context is lost and there are punctuation and space nits.
---
 ...un-single-instance-stateful-application.md | 310 ++++++++++++------
 1 file changed, 201 insertions(+), 109 deletions(-)

diff --git a/content/zh/docs/tasks/run-application/run-single-instance-stateful-application.md b/content/zh/docs/tasks/run-application/run-single-instance-stateful-application.md
index 5bd417375a..f2cd9de27c 100644
--- a/content/zh/docs/tasks/run-application/run-single-instance-stateful-application.md
+++ b/content/zh/docs/tasks/run-application/run-single-instance-stateful-application.md
@@ -1,123 +1,174 @@
 ---
 title: 运行一个单实例有状态应用
 content_type: tutorial
+weight: 20
 ---
 
 <!-- overview -->
 
-本文介绍在 Kubernetes 中使用 PersistentVolume 和 Deployment 如何运行一个单实例有状态应用. 该应用是 MySQL.
-
-
-
+<!--
+This page shows you how to run a single-instance stateful application
+in Kubernetes using a PersistentVolume and a Deployment. The
+application is MySQL.
+-->
+本文介绍在 Kubernetes 中如何使用 PersistentVolume 和 Deployment 运行一个单实例有状态应用。该应用是 MySQL.
 
 ## {{% heading "objectives" %}}
 
-
-* 在环境中通过磁盘创建一个PersistentVolume.
-* 创建一个MySQL Deployment.
-* 在集群内以一个已知的 DNS 名将 MySQL 暴露给其他 pods.
-
-
-
+<!--
+* Create a PersistentVolume referencing a disk in your environment.
+* Create a MySQL Deployment.
+* Expose MySQL to other pods in the cluster at a known DNS name.
+-->
+* 在你的环境中创建一个引用磁盘的 PersistentVolume
+* 创建一个 MySQL Deployment.
+* 在集群内以一个已知的 DNS 名称将 MySQL 暴露给其他 Pod
 
 ## {{% heading "prerequisites" %}}
 
-
 * {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
 * {{< include "default-storage-class-prereqs.md" >}}
 
-
-
 <!-- lessoncontent -->
 
-## 部署MySQL
+## 部署 MySQL   {#deploy-mysql}
 
-注意: 在配置的 yaml 文件中定义密码的做法是不安全的. 具体安全解决方案请参考
-[Kubernetes Secrets](/docs/concepts/configuration/secret/).
+<!--
+You can run a stateful application by creating a Kubernetes Deployment
+and connecting it to an existing PersistentVolume using a
+PersistentVolumeClaim.  For example, this YAML file describes a
+Deployment that runs MySQL and references the PersistentVolumeClaim. The file
+defines a volume mount for /var/lib/mysql, and then creates a
+PersistentVolumeClaim that looks for a 20G volume. This claim is
+satisfied by any existing volume that meets the requirements,
+or by a dynamic provisioner.
+-->
+你可以通过创建一个 Kubernetes Deployment 并使用 PersistentVolumeClaim 将其连接到
+某已有的 PV 卷来运行一个有状态的应用。
+例如，这里的 YAML 描述的是一个运行 MySQL 的 Deployment，其中引用了 PVC 申领。
+文件为 /var/lib/mysql 定义了加载卷，并创建了一个 PVC 申领，寻找一个 20G 大小的卷。
+该申领可以通过现有的满足需求的卷来满足，也可以通过动态供应卷的机制来满足。
+
+<!--
+Note: The password is defined in the config yaml, and this is insecure. See
+[Kubernetes Secrets](/docs/concepts/configuration/secret/)
+for a secure solution.
+-->
+注意：在配置的 YAML 文件中定义密码的做法是不安全的。具体安全解决方案请参考
+[Kubernetes Secrets](/zh/docs/concepts/configuration/secret/).
 
 {{< codenew file="application/mysql/mysql-deployment.yaml" >}}
 {{< codenew file="application/mysql/mysql-pv.yaml" >}}
 
-1. 部署 YAML 文件中定义的 PV 和 PVC：
+1. <!--Deploy the PV and PVC of the YAML file-->
+   部署 YAML 文件中定义的 PV 和 PVC：
 
-        kubectl apply -f https://k8s.io/examples/application/mysql/mysql-pv.yaml
+   ```shell
+   kubectl apply -f https://k8s.io/examples/application/mysql/mysql-pv.yaml
+   ```
 
-1. 部署 YAML 文件中定义的 Deployment：
+1. <!-- Deploy the contents of the YAML file -->
+   部署 YAML 文件中定义的 Deployment：
 
-        kubectl apply -f https://k8s.io/examples/application/mysql/mysql-deployment.yaml
+   ```shell
+   kubectl apply -f https://k8s.io/examples/application/mysql/mysql-deployment.yaml
+   ```
 
-1. 展示 Deployment 相关信息:
+1. <!-- Display information about the Deployment -->
+   展示 Deployment 相关信息:
 
-        kubectl describe deployment mysql
+   ```shell
+   kubectl describe deployment mysql
+   ```
 
-        Name:                 mysql
-        Namespace:            default
-        CreationTimestamp:    Tue, 01 Nov 2016 11:18:45 -0700
-        Labels:               app=mysql
-        Annotations:          deployment.kubernetes.io/revision=1
-        Selector:             app=mysql
-        Replicas:             1 desired | 1 updated | 1 total | 0 available | 1 unavailable
-        StrategyType:         Recreate
-        MinReadySeconds:      0
-        Pod Template:
-          Labels:       app=mysql
-          Containers:
-           mysql:
-            Image:      mysql:5.6
-            Port:       3306/TCP
-            Environment:
-              MYSQL_ROOT_PASSWORD:      password
-            Mounts:
-              /var/lib/mysql from mysql-persistent-storage (rw)
-          Volumes:
-           mysql-persistent-storage:
-            Type:       PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace)
-            ClaimName:  mysql-pv-claim
-            ReadOnly:   false
-            Conditions:
-              Type          Status  Reason
-              ----          ------  ------
-              Available     False   MinimumReplicasUnavailable
-              Progressing   True    ReplicaSetUpdated
-              OldReplicaSets:       <none>
-              NewReplicaSet:        mysql-63082529 (1/1 replicas created)
-              Events:
-                FirstSeen    LastSeen    Count    From                SubobjectPath    Type        Reason            Message
-                ---------    --------    -----    ----                -------------    --------    ------            -------
-                33s          33s         1        {deployment-controller }             Normal      ScalingReplicaSet Scaled up replica set mysql-63082529 to 1
+   ```
+   Name:                 mysql
+   Namespace:            default
+   CreationTimestamp:    Tue, 01 Nov 2016 11:18:45 -0700
+   Labels:               app=mysql
+   Annotations:          deployment.kubernetes.io/revision=1
+   Selector:             app=mysql
+   Replicas:             1 desired | 1 updated | 1 total | 0 available | 1 unavailable
+   StrategyType:         Recreate
+   MinReadySeconds:      0
+   Pod Template:
+     Labels:       app=mysql
+     Containers:
+      mysql:
+       Image:      mysql:5.6
+       Port:       3306/TCP
+       Environment:
+         MYSQL_ROOT_PASSWORD:      password
+       Mounts:
+         /var/lib/mysql from mysql-persistent-storage (rw)
+     Volumes:
+      mysql-persistent-storage:
+       Type:       PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace)
+       ClaimName:  mysql-pv-claim
+       ReadOnly:   false
+       Conditions:
+         Type          Status  Reason
+         ----          ------  ------
+         Available     False   MinimumReplicasUnavailable
+         Progressing   True    ReplicaSetUpdated
+         OldReplicaSets:       <none>
+         NewReplicaSet:        mysql-63082529 (1/1 replicas created)
+         Events:
+           FirstSeen    LastSeen    Count    From                SubobjectPath    Type        Reason            Message
+           ---------    --------    -----    ----                -------------    --------    ------            -------
+           33s          33s         1        {deployment-controller }             Normal      ScalingReplicaSet Scaled up replica set mysql-63082529 to 1
+   ```
+
+1. <!-- List the pods created by the Deployment -->
+   列举出 Deployment 创建的 pods:
+
+   ```shell
+   kubectl get pods -l app=mysql
+   ```
+
+   ```
+   NAME                   READY     STATUS    RESTARTS   AGE
+   mysql-63082529-2z3ki   1/1       Running   0          3m
+   ```
+
+1. <!-- Inspect the PersistentVolumeClaim -->
+   查看 PersistentVolumeClaim：
+
+   ```shell
+   kubectl describe pvc mysql-pv-claim
+   ```
+
+   ```
+   Name:         mysql-pv-claim
+   Namespace:    default
+   StorageClass:
+   Status:       Bound
+   Volume:       mysql-pv-volume
+   Labels:       <none>
+   Annotations:    pv.kubernetes.io/bind-completed=yes
+                   pv.kubernetes.io/bound-by-controller=yes
+   Capacity:     20Gi
+   Access Modes: RWO
+   Events:       <none>
+   ```
+
+<!--
+## Accessing the MySQL instance
+
+The preceding YAML file creates a service that
+allows other Pods in the cluster to access the database. The Service option
+`clusterIP: None` lets the Service DNS name resolve directly to the
+Pod's IP address. This is optimal when you have only one Pod
+behind a Service and you don't intend to increase the number of Pods.
+
+Run a MySQL client to connect to the server:
+-->
+## 访问 MySQL 实例   {#accessing-the-mysql-instance}
 
 
-1. 列举出 Deployment 创建的 pods:
-
-        kubectl get pods -l app=mysql
-
-        NAME                   READY     STATUS    RESTARTS   AGE
-        mysql-63082529-2z3ki   1/1       Running   0          3m
-
-1. 查看 PersistentVolumeClaim:
-
-        kubectl describe pvc mysql-pv-claim
-
-        Name:         mysql-pv-claim
-        Namespace:    default
-        StorageClass:
-        Status:       Bound
-        Volume:       mysql-pv-volume
-        Labels:       <none>
-        Annotations:    pv.kubernetes.io/bind-completed=yes
-                        pv.kubernetes.io/bound-by-controller=yes
-        Capacity:     20Gi
-        Access Modes: RWO
-        Events:       <none>
-
-## 访问 MySQL 实例
-
-
-前面 YAML 文件中创建了一个允许集群内其他 pods 访问数据库的服务. 该服务中选项
-`clusterIP: None` 让服务 DNS 名称直接解析为 Pod 的 IP 地址. 当在一个服务下只有一个 pod
-并且不打算增加 pods 的数量这是最好的.
-
+前面 YAML 文件中创建了一个允许集群内其他 Pod 访问的数据库服务。该服务中选项
+`clusterIP: None` 让服务 DNS 名称直接解析为 Pod 的 IP 地址。
+当在一个服务下只有一个 Pod 并且不打算增加 Pod 的数量这是最好的.
 
 运行 MySQL 客户端以连接到服务器:
 
@@ -125,7 +176,13 @@ content_type: tutorial
 kubectl run -it --rm --image=mysql:5.6 --restart=Never mysql-client -- mysql -h mysql -ppassword
 ```
 
-此命令在集群内创建一个新的 Pod 并运行 MySQL 客户端,并通过 Service 将其连接到服务器.如果连接成功,你就知道有状态的 MySQL 数据库正处于运行状态.
+<!--
+This command creates a new Pod in the cluster running a MySQL client
+and connects it to the server through the Service. If it connects, you
+know your stateful MySQL database is up and running.
+-->
+此命令在集群内创建一个新的 Pod 并运行 MySQL 客户端，并通过 Service 连接到服务器。
+如果连接成功，你就知道有状态的 MySQL 数据库正处于运行状态。
 
 ```
 Waiting for pod default/mysql-client-274442439-zyp6i to be running, status is Pending, pod ready: false
@@ -134,20 +191,43 @@ If you don't see a command prompt, try pressing enter.
 mysql>
 ```
 
-## 更新
+<!--
+## Updating
 
+The image or any other part of the Deployment can be updated as usual
+with the `kubectl apply` command. Here are some precautions that are
+specific to stateful apps:
+-->
+## 更新   {#updating}
 
-Deployment 中镜像或其他部分同往常一样可以通过 `kubectl apply` 命令更新. 以下是
-特定于有状态应用的一些注意事项:
+Deployment 中镜像或其他部分同往常一样可以通过 `kubectl apply` 命令更新。
+以下是特定于有状态应用的一些注意事项:
 
-* 不要弹性伸缩. 弹性伸缩仅适用于单实例应用. 下层的 PersistentVolume 仅只能挂载一个 pod. 对于集群级有状态应用, 请参考 StatefulSet 文档
+<!--
+* Don't scale the app. This setup is for single-instance apps
+  only. The underlying PersistentVolume can only be mounted to one
+  Pod. For clustered stateful apps, see the
   [StatefulSet documentation](/docs/concepts/workloads/controllers/statefulset/).
-* 在 Deployment 的 YAML 文件中使用 `strategy:` `type: Recreate` . 该选项指示 Kubernetes 不使用滚动升级. 滚动升级将无法工作, 由于一次不能运行多个 pod. 在更新配置文件
-创建一个新的 pod 前 `Recreate` 策略将先停止第一个 pod.
+* Use `strategy:` `type: Recreate` in the Deployment configuration
+  YAML file. This instructs Kubernetes to _not_ use rolling
+  updates. Rolling updates will not work, as you cannot have more than
+  one Pod running at a time. The `Recreate` strategy will stop the
+  first pod before creating a new one with the updated configuration.
+-->
+* 不要对应用进行规模扩缩。这里的设置仅适用于单实例应用。下层的 PersistentVolume
+  仅只能挂载到一个 Pod 上。对于集群级有状态应用，请参考
+  [StatefulSet 文档](/zh/docs/concepts/workloads/controllers/statefulset/).
+* 在 Deployment 的 YAML 文件中使用 `strategy:` `type: Recreate`。
+  该选项指示 Kubernetes _不_ 使用滚动升级。滚动升级无法工作，因为这里一次不能
+  运行多个 Pod。在使用更新的配置文件创建新的 Pod 前，`Recreate` 策略将
+  保证先停止第一个 Pod。
 
+<!--
+## Deleting a deployment
 
-## 删除 Deployment
-
+Delete the deployed objects by name:
+-->
+## 删除 Deployment    {#deleting-a-deployment}
 
 通过名称删除部署的对象:
 
@@ -157,23 +237,35 @@ kubectl delete pvc mysql-pv-claim
 kubectl delete pv mysql-pv-volume
 ```
 
-如果通过手动的方式分配 PersistentVolume, 那么也需要手动的删除它，以及释放下层资源.
-如果是用过动态分配 PersistentVolume 的方式，在删除 PersistentVolumeClaim 后 PersistentVolume 将被自动的删除. 一些存储服务(比如 EBS 和 PD)也会在 PersistentVolume 被删除时自动回收下层资源.
-
-
-
+<!--
+If you manually provisioned a PersistentVolume, you also need to manually
+delete it, as well as release the underlying resource.
+If you used a dynamic provisioner, it automatically deletes the
+PersistentVolume when it sees that you deleted the PersistentVolumeClaim.
+Some dynamic provisioners (such as those for EBS and PD) also release the
+underlying resource upon deleting the PersistentVolume.
+-->
+如果通过手动的方式供应 PersistentVolume, 那么也需要手动删除它以释放下层资源。
+如果是用动态供应方式创建的 PersistentVolume，在删除 PersistentVolumeClaim 后
+PersistentVolume 将被自动删除。
+一些存储服务（比如 EBS 和 PD）也会在 PersistentVolume 被删除时自动回收下层资源。
 
 ## {{% heading "whatsnext" %}}
 
+<!--
+* Learn more about [Deployment objects](/docs/concepts/workloads/controllers/deployment/).
 
-* 了解更多 Deployment 对象请参考 [Deployment objects](/docs/concepts/workloads/controllers/deployment/).
+* Learn more about [Deploying applications](/docs/tasks/run-application/run-stateless-application-deployment/)
 
-* 了解更多 Deployment 应用请参考 [Deploying applications](/docs/user-guide/deploying-applications/)
-
-* kubectl run 文档请参考[kubectl run documentation](/docs/reference/generated/kubectl/kubectl-commands/#run)
-
-* 卷和持久卷请参考 [Volumes](/docs/concepts/storage/volumes/) 和 [Persistent Volumes](/docs/concepts/storage/persistent-volumes/)
+* [kubectl run documentation](/docs/reference/generated/kubectl/kubectl-commands/#run)
 
+* [Volumes](/docs/concepts/storage/volumes/) and [Persistent Volumes](/docs/concepts/storage/persistent-volumes/)
+-->
+* 欲进一步了解 Deployment 对象，请参考 [Deployment 对象](/zh/docs/concepts/workloads/controllers/deployment/)
+* 进一步了解[部署应用](/zh/docs/tasks/run-application/run-stateless-application-deployment/)
 
+* 参阅 [kubectl run 文档](/docs/reference/generated/kubectl/kubectl-commands/#run)
+
+* 参阅[卷](/zh/docs/concepts/storage/volumes/)和[持久卷](/zh/docs/concepts/storage/persistent-volumes/)
 
 

From 62399b853217de4616f57638c30d54fa272c54cb Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 2 Aug 2020 20:55:04 +0800
Subject: [PATCH 245/496] [zh] Rework Deployment concept

---
 .../workloads/controllers/deployment.md       | 2190 ++++++++---------
 1 file changed, 1088 insertions(+), 1102 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/controllers/deployment.md b/content/zh/docs/concepts/workloads/controllers/deployment.md
index bcda474a0f..c5fd7b38a4 100644
--- a/content/zh/docs/concepts/workloads/controllers/deployment.md
+++ b/content/zh/docs/concepts/workloads/controllers/deployment.md
@@ -1,251 +1,205 @@
 ---
-reviewers:
-- janetkuo
 title: Deployments
 feature:
-  <!-- title: Automated rollouts and rollbacks -->
-  title: 自动化展开和回滚
+  title: 自动化上线和回滚
   description: >
-    <!-- Kubernetes progressively rolls out changes to your application or its configuration, while monitoring application health to ensure it doesn't kill all your instances at the same time. If something goes wrong, Kubernetes will rollback the change for you. Take advantage of a growing ecosystem of deployment solutions. -->
-    Kubernetes 会逐步推出针对应用或其配置的更改，确保在监视应用程序运行状况的同时，不会终止所有实例。如果出现问题，Kubernetes 会为您回滚更改。充分利用不断成长的部署解决方案生态系统。
-
+    Kubernetes 会分步骤地将针对应用或其配置的更改上线，同时监视应用程序运行状况以确保你不会同时终止所有实例。如果出现问题，Kubernetes 会为你回滚所作更改。你应该充分利用不断成长的部署方案生态系统。
 content_type: concept
 weight: 30
 ---
+<!--
+title: Deployments
+feature:
+  title: Automated rollouts and rollbacks
+  description: >
+    Kubernetes progressively rolls out changes to your application or its configuration, while monitoring application health to ensure it doesn't kill all your instances at the same time. If something goes wrong, Kubernetes will rollback the change for you. Take advantage of a growing ecosystem of deployment solutions.
+
+content_type: concept
+weight: 30
+-->
 
 <!-- overview -->
 
 <!--
-
 A _Deployment_ controller provides declarative updates for [Pods](/docs/concepts/workloads/pods/pod/) and
 [ReplicaSets](/docs/concepts/workloads/controllers/replicaset/).
-
 -->
-一个 _Deployment_ 控制器为 [Pods](/zh/docs/concepts/workloads/pods/)和 [ReplicaSets](/zh/docs/concepts/workloads/controllers/replicaset/)提供描述性的更新方式。
+一个 _Deployment_ 控制器为 {{< glossary_tooltip text="Pods" term_id="pod" >}}
+和 {{< glossary_tooltip term_id="replica-set" text="ReplicaSets" >}}
+提供声明式的更新能力。
 
 <!--
-
 You describe a _desired state_ in a Deployment, and the Deployment controller changes the actual state to the desired state at a controlled rate. You can define Deployments to create new ReplicaSets, or to remove existing Deployments and adopt all their resources with new Deployments.
 
 -->
-描述 Deployment 中的 _desired state_，并且 Deployment 控制器以受控速率更改实际状态，以达到期望状态。可以定义 Deployments 以创建新的 ReplicaSets ，或删除现有 Deployments ，并通过新的 Deployments 使用其所有资源。
+你负责描述 Deployment 中的 _目标状态_，而 Deployment 控制器以受控速率更改实际状态，
+使其变为期望状态。你可以定义 Deployment 以创建新的 ReplicaSet，或删除现有 Deployment，
+并通过新的 Deployment 收养其资源。
 
-{{< note >}}
 <!--
-
 Do not manage ReplicaSets owned by a Deployment. Consider opening an issue in the main Kubernetes repository if your use case is not covered below.
-
 -->
-不要管理 Deployment 拥有的 ReplicaSets 。如果存在下面未介绍的用例，请考虑在主 Kubernetes 仓库中提出 issue。
-
+{{< note >}}
+不要管理 Deployment 所拥有的 ReplicaSet 。
+如果存在下面未覆盖的使用场景，请考虑在 Kubernetes 仓库中提出 Issue。
 {{< /note >}}
 
-
-
 <!-- body -->
 
 <!--
-
 ## Use Case
 
+The following are typical use cases for Deployments:
 -->
 ## 用例
 
-<!--
-
-The following are typical use cases for Deployments:
-
--->
-以下是典型的 Deployments 用例：
+以下是 Deployments 的典型用例：
 
 <!--
-
 * [Create a Deployment to rollout a ReplicaSet](#creating-a-deployment). The ReplicaSet creates Pods in the background. Check the status of the rollout to see if it succeeds or not.
-
--->
-* [创建 Deployment 以展开 ReplicaSet ](#creating-a-deployment)。 ReplicaSet 在后台创建 Pods。检查 ReplicaSet 展开的状态，查看其是否成功。
-
-<!--
-
 * [Declare the new state of the Pods](#updating-a-deployment) by updating the PodTemplateSpec of the Deployment. A new ReplicaSet is created and the Deployment manages moving the Pods from the old ReplicaSet to the new one at a controlled rate. Each new ReplicaSet updates the revision of the Deployment.
-
--->
-* [声明 Pod 的新状态](#updating-a-deployment) 通过更新 Deployment 的 PodTemplateSpec。将创建新的 ReplicaSet ，并且 Deployment 管理器以受控速率将 Pod 从旧 ReplicaSet 移动到新 ReplicaSet 。每个新的 ReplicaSet 都会更新 Deployment 的修改历史。
-
-<!--
-
 * [Rollback to an earlier Deployment revision](#rolling-back-a-deployment) if the current state of the Deployment is not stable. Each rollback updates the revision of the Deployment.
-
--->
-* [回滚到较早的 Deployment 版本](#rolling-back-a-deployment)，如果 Deployment 的当前状态不稳定。每次回滚都会更新 Deployment 的修改。
-
-<!--
-
 * [Scale up the Deployment to facilitate more load](#scaling-a-deployment).
-
--->
-* [扩展 Deployment 以承担更多负载](#scaling-a-deployment).
-
-<!--
-
  * [Pause the Deployment](#pausing-and-resuming-a-deployment) to apply multiple fixes to its PodTemplateSpec and then resume it to start a new rollout.
-
--->
-* [暂停 Deployment ](#pausing-and-resuming-a-deployment) 对其 PodTemplateSpec 进行修改，然后恢复它以启动新的展开。
-
-<!--
-
  * [Use the status of the Deployment](#deployment-status) as an indicator that a rollout has stuck.
--->
-* [使用 Deployment 状态](#deployment-status) 作为卡住展开的指示器。
-
-<!--
-
  * [Clean up older ReplicaSets](#clean-up-policy) that you don't need anymore.
-
 -->
-* [清理较旧的 ReplicaSets ](#clean-up-policy) ，那些不再需要的。
+* [创建 Deployment 以将 ReplicaSet 上线](#creating-a-deployment)。 ReplicaSet 在后台创建 Pods。
+  检查 ReplicaSet 的上线状态，查看其是否成功。
+* 通过更新 Deployment 的 PodTemplateSpec，[声明 Pod 的新状态](#updating-a-deployment) 。
+  新的 ReplicaSet 会被创建，Deployment 以受控速率将 Pod 从旧 ReplicaSet 迁移到新 ReplicaSet。
+  每个新的 ReplicaSet 都会更新 Deployment 的修订版本。
+* 如果 Deployment 的当前状态不稳定，[回滚到较早的 Deployment 版本](#rolling-back-a-deployment)。
+  每次回滚都会更新 Deployment 的修订版本。
+* [扩大 Deployment 规模以承担更多负载](#scaling-a-deployment)。
+* [暂停 Deployment ](#pausing-and-resuming-a-deployment) 以应用对 PodTemplateSpec 所作的多项修改，
+  然后恢复其执行以启动新的上线版本。
+* [使用 Deployment 状态](#deployment-status) 来判定上线过程是否出现停滞。
+* [清理较旧的不再需要的 ReplicaSet](#clean-up-policy) 。
 
 <!--
  ## Creating a Deployment
--->
-## 创建 Deployment
-
-<!--
 
 The following is an example of a Deployment. It creates a ReplicaSet to bring up three `nginx` Pods:
-
 -->
-下面是 Deployment 示例。创建一个 ReplicaSet 展开三个 `nginx` Pods：
+## 创建 Deployment  {#creating-a-deployment}
+
+下面是 Deployment 示例。其中创建了一个 ReplicaSet，负责启动三个 `nginx` Pods：
 
 {{< codenew file="controllers/nginx-deployment.yaml" >}}
 
 <!--
- In this example:
+In this example:
 -->
 在该例中：
 
 <!--
  * A Deployment named `nginx-deployment` is created, indicated by the `.metadata.name` field.
--->
-* 将创建名为 `nginx-deployment` 的 Deployment ，由 `.metadata.name` 字段指示。
-
-<!--
  * The Deployment creates three replicated Pods, indicated by the `replicas` field.
 -->
-*  Deployment 创建三个复制的 Pods，由 `replicas` 字段指示。
+* 创建名为 `nginx-deployment`（由 `.metadata.name` 字段标明）的 Deployment。
+* 该 Deployment 创建三个（由 `replicas` 字段标明）Pod 副本。
 
 <!--
- * The `selector` field defines how the Deployment finds which Pods to manage.
+* The `selector` field defines how the Deployment finds which Pods to manage.
   In this case, you simply select a label that is defined in the Pod template (`app: nginx`).
   However, more sophisticated selection rules are possible,
   as long as the Pod template itself satisfies the rule.
 -->
 * `selector` 字段定义 Deployment 如何查找要管理的 Pods。
-  在这种情况下，只需选择在 Pod 模板（`app: nginx`）中定义的标签。但是，更复杂的选择规则是可能的，只要 Pod 模板本身满足规则。
-
-  {{< note >}}
+  在这里，你只需选择在 Pod 模板中定义的标签（`app: nginx`）。
+  不过，更复杂的选择规则是也可能的，只要 Pod 模板本身满足所给规则即可。
 
   <!--
-   The `matchLabels` field is a map of {key,value} pairs. A single {key,value} in the `matchLabels` map
-    is equivalent to an element of `matchExpressions`, whose key field is "key" the operator is "In",
-    and the values array contains only "value".
-    All of the requirements, from both `matchLabels` and `matchExpressions`, must be satisfied in order to match.
+  The `matchLabels` field is a map of {key,value} pairs. A single {key,value} in the `matchLabels` map
+  is equivalent to an element of `matchExpressions`, whose key field is "key" the operator is "In",
+  and the values array contains only "value".
+  All of the requirements, from both `matchLabels` and `matchExpressions`, must be satisfied in order to match.
   -->
-    `matchLabels` 字段是 {key,value} 的映射。单个 {key,value}在 `matchLabels` 映射中的值等效于 `matchExpressions` 的元素，其键字段是“key”，运算符为“In”，值数组仅包含“value”。所有要求，从 `matchLabels` 和 `matchExpressions`，必须满足才能匹配。
+  {{< note >}}
+  `matchLabels` 字段是 `{key,value}` 偶对的映射。在 `matchLabels` 映射中的单个 `{key,value}`
+  映射等效于 `matchExpressions` 中的一个元素，即其 `key` 字段是 “key”，operator 为 “In”，`value`
+  数组仅包含 “value”。在 `matchLabels` 和 `matchExpressions` 中给出的所有条件都必须满足才能匹配。
   {{< /note >}}
 
 <!--
- * The `template` field contains the following sub-fields:
+* The `template` field contains the following sub-fields:
+   * The Pods are labeled `app: nginx`using the `labels` field.
+  * The Pod template's specification, or `.template.spec` field, indicates that
+    the Pods run one container, `nginx`, which runs the `nginx`
+    [Docker Hub](https://hub.docker.com/) image at version 1.14.2.
+  * Create one container and name it `nginx` using the `name` field.
 -->
 * `template` 字段包含以下子字段：
+  * Pod 被使用 `labels` 字段打上 `app: nginx` 标签。
+  * Pod 模板规约（即 `.template.spec` 字段）指示 Pods 运行一个 `nginx` 容器，
+    该容器运行版本为 1.14.2 的 `nginx` [Docker Hub](https://hub.docker.com/)镜像。
+  * 创建一个容器并使用 `name` 字段将其命名为 `nginx`。
 
 <!--
- * The Pods are labeled `app: nginx`using the `labels` field.
--->
-  * Pod 标记为`app: nginx`，使用`labels`字段。
-
-  <!--
-   * The Pod template's specification, or `.template.spec` field, indicates that
-    the Pods run one container, `nginx`, which runs the `nginx`
-    [Docker Hub](https://hub.docker.com/) image at version 1.7.9.
-  -->
-  * Pod 模板规范或 `.template.spec` 字段指示 Pods 运行一个容器， `nginx`，运行 `nginx` [Docker Hub](https://hub.docker.com/)版本1.7.9的镜像 。
-
-  <!--
-   * Create one container and name it `nginx` using the `name` field.
-  -->
-  * 创建一个容器并使用`name`字段将其命名为 `nginx`。
-
-<!--
- Follow the steps given below to create the above Deployment:
+Before you begin, make sure your Kubernetes cluster is up and running.
+Follow the steps given below to create the above Deployment:
 -->
+开始之前，请确保的 Kubernetes 集群已启动并运行。
 按照以下步骤创建上述 Deployment ：
 
 <!--
- Before you begin, make sure your Kubernetes cluster is up and running.
--->
-开始之前，请确保的 Kubernetes 集群已启动并运行。
-
-<!--
- 1. Create the Deployment by running the following command:
+1. Create the Deployment by running the following command:
 -->
 1. 通过运行以下命令创建 Deployment ：
 
-    {{< note >}}
-    <!--
-    You may specify the `--record` flag to write the command executed in the resource annotation `kubernetes.io/change-cause`. It is useful for future introspection.
-    -->
-      可以指定 `--record` 标志来写入在资源注释`kubernetes.io/change-cause`中执行的命令。它对以后的检查是有用的。
-    <!--
-    For example, to see the commands executed in each Deployment revision.
-    -->
-      例如，查看在每个 Deployment 修改中执行的命令。
-    {{< /note >}}
-
-    ```shell
-    kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
-    ```
+   ```shell
+   kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
+   ```
+   <!--
+   You may specify the `-record` flag to write the command executed in the resource annotation
+   `kubernetes.io/change-cause`. It is useful for future introspection.
+   For example, to see the commands executed in each Deployment revision.
+   -->
+   {{< note >}}
+   你可以设置 `--record` 标志将所执行的命令写入资源注解 `kubernetes.io/change-cause` 中。
+   这对于以后的检查是有用的。例如，要查看针对每个 Deployment 修订版本所执行过的命令。
+   {{< /note >}}
 
 <!--
  2. Run `kubectl get deployments` to check if the Deployment was created. If the Deployment is still being created, the output is similar to the following:
 -->
-2. 运行 `kubectl get deployments` 以检查 Deployment 是否已创建。如果仍在创建 Deployment ，则输出以下内容：
+2. 运行 `kubectl get deployments` 检查 Deployment 是否已创建。如果仍在创建 Deployment，
+   则输出类似于：
 
-    ```
-    NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
-    nginx-deployment   3         0         0            0           1s
-    ```
+   ```
+   NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
+   nginx-deployment   3         0         0            0           1s
+   ```
 
-    <!--
-    When you inspect the Deployments in your cluster, the following fields are displayed:
-    -->
-    检查集群中的 Deployments 时，将显示以下字段：
+   <!--
+   When you inspect the Deployments in your cluster, the following fields are displayed:
+   -->
+   在检查集群中的 Deployment 时，所显示的字段有：
 
-    <!--
-    * `NAME` lists the names of the Deployments in the cluster.
-        * `DESIRED` displays the desired number of _replicas_ of the application, which you define when you create the Deployment. This is the _desired state_.
-        * `CURRENT` displays how many replicas are currently running.
-        * `UP-TO-DATE` displays the number of replicas that have been updated to achieve the desired state.
-        * `AVAILABLE` displays how many replicas of the application are available to your users.
-        * `AGE` displays the amount of time that the application has been running.
-    -->
-    * `NAME` 列出了集群中 Deployments 的名称。
-    * `DESIRED` 显示应用程序的所需 _副本_ 数，在创建 Deployment 时定义这些副本。这是 _期望状态_。
-    * `CURRENT`显示当前正在运行的副本数。
-    * `UP-TO-DATE`显示已更新以实现期望状态的副本数。
-    * `AVAILABLE`显示应用程序可供用户使用的副本数。
-    * `AGE` 显示应用程序运行的时间量。
+   <!--
+   * `NAME` lists the names of the Deployments in the cluster.
+   * `READY` displays how many replicas of the application are available to your users. It follows the pattern ready/desired.
+   * `UP-TO-DATE` displays the number of replicas that have been updated to achieve the desired state.
+   * `AVAILABLE` displays how many replicas of the application are available to your users.
+   * `AGE` displays the amount of time that the application has been running.
+   -->
+   * `NAME` 列出了集群中 Deployment 的名称。
+   * `READY` 显示应用程序的可用的 _副本_ 数。显示的模式是“就绪个数/期望个数”。
+   * `UP-TO-DATE` 显示为了打到期望状态已经更新的副本数。
+   * `AVAILABLE` 显示应用可供用户使用的副本数。
+   * `AGE` 显示应用程序运行的时间。
 
-    <!--
-    Notice how the number of desired replicas is 3 according to `.spec.replicas` field.
-    -->
-    请注意，根据`.spec.replicas`副本字段，所需副本的数量为 3。
+   <!--
+   Notice how the number of desired replicas is 3 according to `.spec.replicas` field.
+   -->
+   请注意期望副本数是根据 `.spec.replicas` 字段设置 3。
 
 <!--
  3. To see the Deployment rollout status, run `kubectl rollout status deployment.v1.apps/nginx-deployment`. The output is similar to this:
 -->
-3. 要查看 Deployment 展开状态，运行 `kubectl rollout status deployment.v1.apps/nginx-deployment`。输出：
+3. 要查看 Deployment 上线状态，运行 `kubectl rollout status deployment.v1.apps/nginx-deployment`。
+   输出类似于：
 
     ```
     Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
@@ -253,57 +207,85 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
     ```
 
 <!--
- 4. Run the `kubectl get deployments` again a few seconds later. The output is similar to this:
+4. Run the `kubectl get deployments` again a few seconds later. The output is similar to this:
 -->
-4. 几秒钟后再次运行 `kubectl get deployments`。输出：
+4. 几秒钟后再次运行 `kubectl get deployments`。输出类似于：
 
     ```
     NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
     nginx-deployment   3         3         3            3           18s
     ```
-    <!--
-    Notice that the Deployment has created all three replicas, and all replicas are up-to-date (they contain the latest Pod template) and available.
-    -->
-    请注意， Deployment 已创建所有三个副本，并且所有副本都是最新的（它们包含最新的 Pod 模板）并且可用。
+
+   <!--
+   Notice that the Deployment has created all three replicas, and all replicas are up-to-date (they contain the latest Pod template) and available.
+   -->
+   注意 Deployment 已创建全部三个副本，并且所有副本都是最新的（它们包含最新的 Pod 模板）
+   并且可用。
 
 <!--
- 5. To see the ReplicaSet (`rs`) created by the Deployment, run `kubectl get rs`. The output is similar to this:
+5. To see the ReplicaSet (`rs`) created by the Deployment, run `kubectl get rs`. The output is similar to this:
 -->
-5. 要查看 Deployment 创建的 ReplicaSet  （`rs`），运行 `kubectl get rs`。输出：
+5. 要查看 Deployment 创建的 ReplicaSet（`rs`），运行 `kubectl get rs`。
+   输出类似于：
 
-    ```
-    NAME                          DESIRED   CURRENT   READY   AGE
-    nginx-deployment-75675f5897   3         3         3       18s
-    ```
-    <!--
-    Notice that the name of the ReplicaSet is always formatted as `[DEPLOYMENT-NAME]-[RANDOM-STRING]`. The random string is
-            randomly generated and uses the pod-template-hash as a seed.
-    -->
-    请注意， ReplicaSet 的名称始终被格式化为`[DEPLOYMENT-NAME]-[RANDOM-STRING]`。随机字符串是随机生成并使用 pod-template-hash 作为种子。
+   ```
+   NAME                          DESIRED   CURRENT   READY   AGE
+   nginx-deployment-75675f5897   3         3         3       18s
+   ```
+
+   <!--
+   ReplicaSet output shows the following fields:
+
+   * `NAME` lists the names of the ReplicaSets in the namespace.
+   * `DESIRED` displays the desired number of _replicas_ of the application, which you define when you create the Deployment. This is the _desired state_.
+   * `CURRENT` displays how many replicas are currently running.
+   * `READY` displays how many replicas of the application are available to your users.
+   * `AGE` displays the amount of time that the application has been running.
+   -->
+   ReplicaSet 输出中包含以下字段：
+
+   * `NAME` 列出名字空间中 ReplicaSet 的名称；
+   * `DESIRED` 显示应用的期望副本个数，即在创建 Deployment 时所定义的值。
+     此为期望状态；
+   * `CURRENT` 显示当前运行状态中的副本个数；
+   * `READY` 显示应用中有多少副本可以为用户提供服务；
+   * `AGE` 显示应用已经运行的时间长度。
+
+   <!--
+   Notice that the name of the ReplicaSet is always formatted as `[DEPLOYMENT-NAME]-[RANDOM-STRING]`. The random string is
+   randomly generated and uses the pod-template-hash as a seed.
+   -->
+   注意 ReplicaSet 的名称始终被格式化为`[Deployment名称]-[随机字符串]`。
+   其中的随机字符串是使用 pod-template-hash 作为种子随机生成的。
 
 <!--
- 6. To see the labels automatically generated for each Pod, run `kubectl get pods --show-labels`. The following output is returned:
+ 6. To see the labels automatically generated for each Pod, run `kubectl get pods -show-labels`. The following output is returned:
 -->
 6. 要查看每个 Pod 自动生成的标签，运行 `kubectl get pods --show-labels`。返回以下输出：
 
-    ```
-    NAME                                READY     STATUS    RESTARTS   AGE       LABELS
-    nginx-deployment-75675f5897-7ci7o   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
-    nginx-deployment-75675f5897-kzszj   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
-    nginx-deployment-75675f5897-qqcnn   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
-    ```
+   ```
+   NAME                                READY     STATUS    RESTARTS   AGE       LABELS
+   nginx-deployment-75675f5897-7ci7o   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
+   nginx-deployment-75675f5897-kzszj   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
+   nginx-deployment-75675f5897-qqcnn   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
+   ```
 
-    <!--
-    The created ReplicaSet ensures that there are three `nginx` Pods.
-    -->
-    创建的复制集可确保有三个 `nginx` Pods。
+   <!--
+   The created ReplicaSet ensures that there are three `nginx` Pods.
+   -->
+   所创建的 ReplicaSet 确保总是存在三个 `nginx` Pod。
 
-{{< note >}}
 <!--
- You must specify an appropriate selector and Pod template labels in a Deployment (in this case,
-  `app: nginx`). Do not overlap labels or selectors with other controllers (including other Deployments and StatefulSets). Kubernetes doesn't stop you from overlapping, and if multiple controllers have overlapping selectors those controllers might conflict and behave unexpectedly.
+You must specify an appropriate selector and Pod template labels in a Deployment (in this case,
+`app: nginx`). Do not overlap labels or selectors with other controllers
+(including other Deployments and StatefulSets). Kubernetes doesn't stop you from overlapping,
+and if multiple controllers have overlapping selectors those controllers might conflict and behave unexpectedly.
 -->
-  必须在 Deployment 中指定适当的选择器和 Pod 模板标签（在本例中为`app: nginx`）。不要与其他控制器（包括其他 Deployments 和状态设置）重叠标签或选择器。Kubernetes 不会阻止重叠，如果多个控制器具有重叠的选择器，这些控制器可能会冲突并运行意外。
+{{< note >}}
+你必须在 Deployment 中指定适当的选择算符和 Pod 模板标签（在本例中为 `app: nginx`）。
+标签或者选择算符不要与其他控制器（包括其他 Deployment 和 StatefulSet）重叠。
+Kubernetes 不会阻止你这样做，但是如果多个控制器具有重叠的选择算符，它们可能会发生冲突
+执行难以预料的操作。
 {{< /note >}}
 
 <!--
@@ -311,202 +293,207 @@ The following is an example of a Deployment. It creates a ReplicaSet to bring up
 -->
 ### Pod-template-hash 标签
 
+<!-- Do not change this label.  -->
 {{< note >}}
-<!--
- Do not change this label.
--->
 不要更改此标签。
 {{< /note >}}
 
 <!--
- The `pod-template-hash` label is added by the Deployment controller to every ReplicaSet that a Deployment creates or adopts.
+The `pod-template-hash` label is added by the Deployment controller to every ReplicaSet
+that a Deployment creates or adopts.
 -->
- Deployment 控制器将 `pod-template-hash` 标签添加到 Deployment 创建或使用的每个 ReplicaSet 。
+Deployment 控制器将 `pod-template-hash` 标签添加到 Deployment 所创建或收留的
+每个 ReplicaSet 。
 
 <!--
- This label ensures that child ReplicaSets of a Deployment do not overlap. It is generated by hashing the `PodTemplate` of the ReplicaSet and using the resulting hash as the label value that is added to the ReplicaSet selector, Pod template labels,
+This label ensures that child ReplicaSets of a Deployment do not overlap. It is generated by hashing the `PodTemplate` of the ReplicaSet and using the resulting hash as the label value that is added to the ReplicaSet selector, Pod template labels,
 and in any existing Pods that the ReplicaSet might have.
 -->
-此标签可确保 Deployment 的子 ReplicaSets 不重叠。它通过对 ReplicaSet 的 `PodTemplate` 进行哈希处理，并使用生成的哈希值添加到 ReplicaSet 选择器、Pod 模板标签,并在 ReplicaSet 可能具有的任何现有 Pod 中。
+此标签可确保 Deployment 的子 ReplicaSets 不重叠。
+标签是通过对 ReplicaSet 的 `PodTemplate` 进行哈希处理。
+所生成的哈希值被添加到 ReplicaSet 选择算符、Pod 模板标签，并存在于在 ReplicaSet
+可能拥有的任何现有 Pod 中。
 
 <!--
  ## Updating a Deployment
 -->
-## 更新 Deployment
+## 更新 Deployment   {#updating-a-deployment}
 
-{{< note >}}
 <!--
  A Deployment's rollout is triggered if and only if the Deployment's Pod template (that is, `.spec.template`)
 is changed, for example if the labels or container images of the template are updated. Other updates, such as scaling the Deployment, do not trigger a rollout.
 -->
-仅当 Deployment  Pod 模板（即 `.spec.template`）时，才会触发 Deployment 展开，例如，如果模板的标签或容器镜像已更新，其他更新（如扩展 Deployment ）不会触发展开。
+{{< note >}}
+仅当 Deployment Pod 模板（即 `.spec.template`）发生改变时，例如模板的标签或容器镜像被更新，
+才会触发 Deployment 上线。
+其他更新（如对 Deployment 执行扩缩容的操作）不会触发上线动作。
 {{< /note >}}
 
 <!--
  Follow the steps given below to update your Deployment:
 -->
-按照以下步骤更新 Deployment ：
+按照以下步骤更新 Deployment：
 
 <!--
- 1. Let's update the nginx Pods to use the `nginx:1.9.1` image instead of the `nginx:1.7.9` image.
+1. Let's update the nginx Pods to use the `nginx:1.16.1` image instead of the `nginx:1.14.2` image.
 -->
-1. 让我们更新 nginx Pods，以使用 `nginx:1.9.1` 镜像 ，而不是 `nginx:1.7.9` 镜像 。
+1. 先来更新 nginx Pod 以使用 `nginx:1.16.1` 镜像，而不是 `nginx:1.14.2` 镜像。
 
-    ```shell
-    kubectl --record deployment.apps/nginx-deployment set image deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1
-    ```
+   ```shell
+   kubectl --record deployment.apps/nginx-deployment set image \
+      deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1
+   ```
+   <!-- or simply use the following command: -->
+   或者使用下面的命令：
+    
+   ```shell
+   kubectl set image deployment/nginx-deployment nginx=nginx:1.16.1 --record
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    ```shell
-    deployment.apps/nginx-deployment image updated
-    ```
+   ```
+   deployment.apps/nginx-deployment image updated
+   ```
 
-    <!--
-    Alternatively, you can `edit` the Deployment and change `.spec.template.spec.containers[0].image` from `nginx:1.7.9` to `nginx:1.9.1`:
-    -->
-    或者，可以 `edit`  Deployment 并将 `.spec.template.spec.containers[0].image` 从 `nginx:1.7.9` 更改至 `nginx:1.9.1`。
+   <!--
+   Alternatively, you can `edit` the Deployment and change `.spec.template.spec.containers[0].image` from `nginx:1.7.9` to `nginx:1.9.1`:
+   -->
+   或者，可以 `edit`  Deployment 并将 `.spec.template.spec.containers[0].image` 从
+   `nginx:1.14.2` 更改至 `nginx:1.16.1`。
 
-    ```shell
-    kubectl edit deployment.v1.apps/nginx-deployment
-    ```
+   ```shell
+   kubectl edit deployment.v1.apps/nginx-deployment
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    输出：
-
-    ```shell
-    deployment.apps/nginx-deployment edited
-    ```
+   ```
+   deployment.apps/nginx-deployment edited
+   ```
 
 <!--
- 2. To see the rollout status, run:
+2. To see the rollout status, run:
 -->
-2. 要查看展开状态，运行：
+2. 要查看上线状态，运行：
 
-    ```shell
-    kubectl rollout status deployment.v1.apps/nginx-deployment
-    ```
+   ```shell
+   kubectl rollout status deployment.v1.apps/nginx-deployment
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    ```shell
-    Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
-    ```
-    <!--
-    or
-    -->
-    或者
+   ```
+   Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
+   ```
+   <!-- or -->
+   或者
 
-    ```shell
-    deployment.apps/nginx-deployment successfully rolled out
-    ```
+   ```
+   deployment.apps/nginx-deployment successfully rolled out
+   ```
 
 <!--
- Get more details on your updated Deployment:
+Get more details on your updated Deployment:
 -->
-在更新后的 Deployment 上获取更多信息
+获取关于已更新的 Deployment 的更多信息：
 
 <!--
- * After the rollout succeeds, you can view the Deployment by running `kubectl get deployments`.
-    The output is similar to this:
+* After the rollout succeeds, you can view the Deployment by running `kubectl get deployments`.
+  The output is similar to this:
 -->
-* 在展开成功后，可以通过运行 `kubectl get deployments`来查看 Deployment 。
-    输出：
+* 在上线成功后，可以通过运行 `kubectl get deployments` 来查看 Deployment：
+  输出类似于：
 
-    ```shell
-    NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
-    nginx-deployment   3         3         3            3           36s
-    ```
+  ```shell
+  NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
+  nginx-deployment   3         3         3            3           36s
+  ```
 
 <!--
- * Run `kubectl get rs` to see that the Deployment updated the Pods by creating a new ReplicaSet and scaling it
+* Run `kubectl get rs` to see that the Deployment updated the Pods by creating a new ReplicaSet and scaling it
 up to 3 replicas, as well as scaling down the old ReplicaSet to 0 replicas.
 -->
-* 运行 `kubectl get rs` 以查看 Deployment 通过创建新的 ReplicaSet 并缩放它更新了 Pods 最多 3 个副本，以及将旧 ReplicaSet 缩放到 0 个副本。
+* 运行 `kubectl get rs` 以查看 Deployment 通过创建新的 ReplicaSet 并将其扩容到
+  3 个副本并将旧 ReplicaSet 缩容到 0 个副本完成了 Pod 的更新操作：
 
-    ```shell
-    kubectl get rs
-    ```
+  ```shell
+  kubectl get rs
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    NAME                          DESIRED   CURRENT   READY   AGE
-    nginx-deployment-1564180365   3         3         3       6s
-    nginx-deployment-2035384211   0         0         0       36s
-    ```
+  ```
+  NAME                          DESIRED   CURRENT   READY   AGE
+  nginx-deployment-1564180365   3         3         3       6s
+  nginx-deployment-2035384211   0         0         0       36s
+  ```
 
 <!--
- * Running `get pods` should now show only the new Pods:
+* Running `get pods` should now show only the new Pods:
 -->
-* 运行 `get pods` 现在应仅显示新的 Pods:
+* 现在运行 `get pods` 应仅显示新的 Pods:
 
-    ```shell
-    kubectl get pods
-    ```
+  ```shell
+  kubectl get pods
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    NAME                                READY     STATUS    RESTARTS   AGE
-    nginx-deployment-1564180365-khku8   1/1       Running   0          14s
-    nginx-deployment-1564180365-nacti   1/1       Running   0          14s
-    nginx-deployment-1564180365-z9gth   1/1       Running   0          14s
-    ```
+  ```
+  NAME                                READY     STATUS    RESTARTS   AGE
+  nginx-deployment-1564180365-khku8   1/1       Running   0          14s
+  nginx-deployment-1564180365-nacti   1/1       Running   0          14s
+  nginx-deployment-1564180365-z9gth   1/1       Running   0          14s
+  ```
 
-    <!--
-    Next time you want to update these Pods, you only need to update the Deployment's Pod template again.
-    -->
-    下次要更新这些 Pods 时，只需再次更新 Deployment  Pod 模板。
+  <!--
+  Next time you want to update these Pods, you only need to update the Deployment's Pod template again.
 
-    <!--
-    Deployment ensures that only a certain number of Pods are down while they are being updated. By default,
-        it ensures that at least 75% of the desired number of Pods are up (25% max unavailable).
-    -->
-     Deployment 可确保在更新时仅关闭一定数量的 Pods。默认情况下，它确保至少 75%所需 Pods 运行（25%最大不可用）。
+  Deployment ensures that only a certain number of Pods are down while they are being updated. By default,
+  it ensures that at least 75% of the desired number of Pods are up (25% max unavailable).
+  -->
+  下次要更新这些 Pods 时，只需再次更新 Deployment Pod 模板即可。
 
-    <!--
-    Deployment also ensures that only a certain number of Pods are created above the desired number of Pods.
-        By default, it ensures that at most 25% of the desired number of Pods are up (25% max surge).
-    -->
-     Deployment 还确保仅创建一定数量的 Pods 高于期望的 Pods 数。默认情况下，它可确保最多增加 25% 期望 Pods 数（25%最大增量）。
+  Deployment 可确保在更新时仅关闭一定数量的 Pod。默认情况下，它确保至少所需 Pods
+  75% 处于运行状态（最大不可用比例为 25%）。
 
-    <!--   
-    For example, if you look at the above Deployment closely, you will see that it first created a new Pod,
-        then deleted some old Pods, and created new ones. It does not kill old Pods until a sufficient number of
-        new Pods have come up, and does not create new Pods until a sufficient number of old Pods have been killed.
-        It makes sure that at least 2 Pods are available and that at max 4 Pods in total are available.
-    -->
-    例如，如果仔细查看上述 Deployment ，将看到它首先创建了一个新的 Pod，然后删除了一些旧的 Pods，并创建了新的 Pods。它不会杀死老 Pods，直到有足够的数量新的 Pods 已经出现，并没有创造新的 Pods，直到足够数量的旧 Pods 被杀死。它确保至少 2 个 Pods 可用，并且总共最多 4 个 Pods 可用。
+  <!--
+  Deployment also ensures that only a certain number of Pods are created above the desired number of Pods.
+  By default, it ensures that at most 25% of the desired number of Pods are up (25% max surge).
+  -->
+  Deployment 还确保仅所创建 Pod 数量只可能比期望 Pods 数高一点点。
+  默认情况下，它可确保启动的 Pod 个数比期望个数最多多出 25%（最大峰值 25%）。
+
+  <!--   
+  For example, if you look at the above Deployment closely, you will see that it first created a new Pod,
+  then deleted some old Pods, and created new ones. It does not kill old Pods until a sufficient number of
+  new Pods have come up, and does not create new Pods until a sufficient number of old Pods have been killed.
+  It makes sure that at least 2 Pods are available and that at max 4 Pods in total are available.
+  -->
+  例如，如果仔细查看上述 Deployment ，将看到它首先创建了一个新的 Pod，然后删除了一些旧的 Pods，
+  并创建了新的 Pods。它不会杀死老 Pods，直到有足够的数量新的 Pods 已经出现。
+  在足够数量的旧 Pods 被杀死前并没有创建新 Pods。它确保至少 2 个 Pod 可用，同时
+  最多总共 4 个 Pod 可用。
 
 <!--
- * Get details of your Deployment:
+* Get details of your Deployment:
 -->
 * 获取 Deployment 的更多信息
+
   ```shell
   kubectl describe deployments
   ```
-  <!--
-    The output is similar to this:
-  -->
-  输出：
 
-  ```shell
+  <!-- The output is similar to this: -->
+  输出类似于：
+
+  ```
   Name:                   nginx-deployment
   Namespace:              default
   CreationTimestamp:      Thu, 30 Nov 2017 10:56:25 +0000
@@ -521,7 +508,7 @@ up to 3 replicas, as well as scaling down the old ReplicaSet to 0 replicas.
     Labels:  app=nginx
      Containers:
       nginx:
-        Image:        nginx:1.9.1
+        Image:        nginx:1.16.1
         Port:         80/TCP
         Environment:  <none>
         Mounts:       <none>
@@ -545,63 +532,77 @@ up to 3 replicas, as well as scaling down the old ReplicaSet to 0 replicas.
       Normal  ScalingReplicaSet  14s   deployment-controller  Scaled down replica set nginx-deployment-2035384211 to 0
   ```
 
-    <!--
-    Here you see that when you first created the Deployment, it created a ReplicaSet (nginx-deployment-2035384211)
-        and scaled it up to 3 replicas directly. When you updated the Deployment, it created a new ReplicaSet
-        (nginx-deployment-1564180365) and scaled it up to 1 and then scaled down the old ReplicaSet to 2, so that at
-        least 2 Pods were available and at most 4 Pods were created at all times. It then continued scaling up and down
-        the new and the old ReplicaSet, with the same rolling update strategy. Finally, you'll have 3 available replicas
-        in the new ReplicaSet, and the old ReplicaSet is scaled down to 0.
-    -->
-    可以看到，当第一次创建 Deployment 时，它创建了一个 ReplicaSet  （nginx-deployment-2035384211）并将其直接扩展至 3 个副本。更新 Deployment 时，它创建了一个新的 ReplicaSet （nginx-deployment-1564180365），并将其扩展为 1，然后将旧 ReplicaSet 缩小到 2，以便至少有 2 个 Pod 可用，并且最多创建 4 个 Pod。然后，它继续向上和向下扩展新的和旧的 ReplicaSet ，具有相同的滚动更新策略。最后，将有 3 个可用的副本在新的 ReplicaSet 中，旧 ReplicaSet 将缩小到 0。
+  <!--
+  Here you see that when you first created the Deployment, it created a ReplicaSet (nginx-deployment-2035384211)
+  and scaled it up to 3 replicas directly. When you updated the Deployment, it created a new ReplicaSet
+  (nginx-deployment-1564180365) and scaled it up to 1 and then scaled down the old ReplicaSet to 2, so that at
+  least 2 Pods were available and at most 4 Pods were created at all times. It then continued scaling up and down
+  the new and the old ReplicaSet, with the same rolling update strategy. Finally, you'll have 3 available replicas
+  in the new ReplicaSet, and the old ReplicaSet is scaled down to 0.
+  -->
+  可以看到，当第一次创建 Deployment 时，它创建了一个 ReplicaSet（nginx-deployment-2035384211）
+  并将其直接扩容至 3 个副本。更新 Deployment 时，它创建了一个新的 ReplicaSet
+  （nginx-deployment-1564180365），并将其扩容为 1，然后将旧 ReplicaSet 缩容到 2，
+  以便至少有 2 个 Pod 可用且最多创建 4 个 Pod。
+  然后，它使用相同的滚动更新策略继续对新的 ReplicaSet 扩容并对旧的 ReplicaSet 缩容。
+  最后，你将有 3 个可用的副本在新的 ReplicaSet 中，旧 ReplicaSet 将缩容到 0。
 
 <!--
- ### Rollover (aka multiple updates in-flight)
--->
-### 翻转（多 Deployment 动态更新）
+### Rollover (aka multiple updates in-flight)
 
-<!--
- Each time a new Deployment is observed by the Deployment controller, a ReplicaSet is created to bring up
+Each time a new Deployment is observed by the Deployment controller, a ReplicaSet is created to bring up
 the desired Pods. If the Deployment is updated, the existing ReplicaSet that controls Pods whose labels
 match `.spec.selector` but whose template does not match `.spec.template` are scaled down. Eventually, the new
 ReplicaSet is scaled to `.spec.replicas` and all old ReplicaSets is scaled to 0.
 -->
-每次 Deployment 控制器观察新 Deployment 时，都会创建一个 ReplicaSet 以启动所需的 Pods。如果更新了 Deployment ，则控制其标签的 Pods 的现有 ReplicaSet 匹配 `.spec.selector`，但其模板不匹配 `.spec.template` 被缩小。最终，新的 ReplicaSet 缩放为 `.spec.replicas`，所有旧 ReplicaSets 缩放为 0。
+### 翻转（多 Deployment 动态更新）
+
+Deployment 控制器每次注意到新的 Deployment 时，都会创建一个 ReplicaSet 以启动所需的 Pods。
+如果更新了 Deployment，则控制标签匹配 `.spec.selector` 但模板不匹配 `.spec.template` 的
+Pods 的现有 ReplicaSet 被缩容。最终，新的 ReplicaSet 缩放为 `.spec.replicas` 个副本，
+所有旧 ReplicaSets 缩放为 0 个副本。
 
 <!--
- If you update a Deployment while an existing rollout is in progress, the Deployment creates a new ReplicaSet
+If you update a Deployment while an existing rollout is in progress, the Deployment creates a new ReplicaSet
 as per the update and start scaling that up, and rolls over the ReplicaSet that it was scaling up previously
- -- it will add it to its list of old ReplicaSets and start scaling it down.
+- it will add it to its list of old ReplicaSets and start scaling it down.
 -->
-当 Deployment 正在展开时进行更新， Deployment 会为每个更新创建一个新的 ReplicaSet 并开始向上扩展，之前的 ReplicaSet 会被添加到旧 ReplicaSets 队列并开始向下扩展。
+当 Deployment 正在上线时被更新，Deployment 会针对更新创建一个新的 ReplicaSet
+并开始对其扩容，之前正在被扩容的 ReplicaSet 会被翻转，添加到旧 ReplicaSets 列表
+并开始缩容。
 
 <!--
- For example, suppose you create a Deployment to create 5 replicas of `nginx:1.7.9`,
-but then update the Deployment to create 5 replicas of `nginx:1.9.1`, when only 3
+For example, suppose you create a Deployment to create 5 replicas of `nginx:1.14.2`,
+but then update the Deployment to create 5 replicas of `nginx:1.16.1`, when only 3
 replicas of `nginx:1.7.9` had been created. In that case, the Deployment immediately starts
 killing the 3 `nginx:1.7.9` Pods that it had created, and starts creating
-`nginx:1.9.1` Pods. It does not wait for the 5 replicas of `nginx:1.7.9` to be created
+`nginx:1.9.1` Pods. It does not wait for the 5 replicas of `nginx:1.14.2` to be created
 before changing course.
 -->
-例如，假设创建一个 Deployment 以创建 `nginx:1.7.9` 的 5 个副本，然后更新 Deployment 以创建 5 个 `nginx:1.9.1` 的副本，而此时只有 3 个`nginx:1.7.9` 的副本已创建。在这种情况下， Deployment 会立即开始杀死3个 `nginx:1.7.9` Pods，并开始创建 `nginx:1.9.1` Pods。它不等待 `nginx:1.7.9` 的 5 个副本在改变任务之前完成创建。
+例如，假定你在创建一个 Deployment 以生成 `nginx:1.14.2` 的 5 个副本，但接下来
+更新 Deployment 以创建 5 个 `nginx:1.16.1` 的副本，而此时只有 3 个`nginx:1.14.2`
+副本已创建。在这种情况下，Deployment 会立即开始杀死 3 个 `nginx:1.14.2` Pods，
+并开始创建 `nginx:1.16.1` Pods。它不会等待 `nginx:1.14.2` 的 5 个副本都创建完成
+后才开始执行变更动作。
 
 <!--
- ### Label selector updates
--->
-### 使用标签选择器进行更新
+### Label selector updates
 
-<!--
  It is generally discouraged to make label selector updates and it is suggested to plan your selectors up front.
 In any case, if you need to perform a label selector update, exercise great caution and make sure you have grasped
 all of the implications.
 -->
-通常不鼓励更新标签选择器，建议提前规划选择器。在任何情况下，如果需要执行标签选择器更新，请格外小心，并确保已掌握所有的含义。
+### 更改标签选择算符
+
+通常不鼓励更新标签选择算符。建议你提前规划选择算符。
+在任何情况下，如果需要更新标签选择算符，请格外小心，并确保自己了解
+这背后可能发生的所有事情。
 
-{{< note >}}
 <!--
- In API version `apps/v1`, a Deployment's label selector is immutable after it gets created.
+In API version `apps/v1`, a Deployment's label selector is immutable after it gets created.
 -->
-在 API 版本 `apps/v1` 中， Deployment 标签选择器在创建后是不可变的。
+{{< note >}}
+在 API 版本 `apps/v1` 中，Deployment 标签选择算符在创建后是不可变的。
 {{< /note >}}
 
 <!--
@@ -609,559 +610,550 @@ all of the implications.
 otherwise a validation error is returned. This change is a non-overlapping one, meaning that the new selector does
 not select ReplicaSets and Pods created with the old selector, resulting in orphaning all old ReplicaSets and
 creating a new ReplicaSet.
-* Selector updates changes the existing value in a selector key -- result in the same behavior as additions.
-* Selector removals removes an existing key from the Deployment selector -- do not require any changes in the
+* Selector updates changes the existing value in a selector key - result in the same behavior as additions.
+* Selector removals removes an existing key from the Deployment selector - do not require any changes in the
 Pod template labels. Existing ReplicaSets are not orphaned, and a new ReplicaSet is not created, but note that the
 removed label still exists in any existing Pods and ReplicaSets.
 -->
-* 选择器添加还需要使用新标签更新 Deployment 规范中的 Pod 模板标签，否则将返回验证错误。此更改是非重叠的，这意味着新的选择器不选择使用旧选择器创建的 ReplicaSets 和 Pod，从而导致弃用所有旧 ReplicaSets 和创建新的 ReplicaSet 。
-* 选择器更新更改选择器键中的现有值 -- 导致发生与添加相同的行为。
-* 选择器删除从 Deployment 选择器中删除现有密钥 -- 不需要在Pod 模板标签做任意更改。现有 ReplicaSets 不会孤立，并且不会创建新的 ReplicaSet ，但请注意，已删除的标签仍然存在于任何现有的 Pods 和 ReplicaSets 中。
+* 添加选择算符时要求使用新标签更新 Deployment 规约中的 Pod 模板标签，否则将返回验证错误。
+  此更改是非重叠的，也就是说新的选择算符不会选择使用旧选择算符所创建的 ReplicaSet 和 Pod，
+  这会导致创建新的 ReplicaSet 时所有旧 ReplicaSet 都会被孤立。
+* 选择算符的更新如果更改了某个算符的键名，这会导致与添加算符时相同的行为。
+* 删除选择算符的操作会删除从 Deployment 选择算符中删除现有算符。
+  此操作不需要更改 Pod 模板标签。现有 ReplicaSet 不会被孤立，也不会因此创建新的 ReplicaSet，
+  但请注意已删除的标签仍然存在于现有的 Pod 和 ReplicaSet 中。
 
 <!--
- ## Rolling Back a Deployment
+## Rolling Back a Deployment
 -->
-## 回滚 Deployment
+## 回滚 Deployment {#rolling-back-a-deployment}
 
 <!--
  Sometimes, you may want to rollback a Deployment; for example, when the Deployment is not stable, such as crash looping.
 By default, all of the Deployment's rollout history is kept in the system so that you can rollback anytime you want
 (you can change that by modifying revision history limit).
 -->
-有时，可能需要回滚 Deployment ；例如，当 Deployment 不稳定时，例如循环崩溃。默认情况下，所有 Deployment 历史记录都保留在系统中，以便可以随时回滚（可以通过修改修改历史记录限制来更改该限制）。
+有时，你可能想要回滚 Deployment；例如，当 Deployment 不稳定时（例如进入反复崩溃状态）。
+默认情况下，Deployment 的所有上线记录都保留在系统中，以便可以随时回滚
+（你可以通过修改修订历史记录限制来更改这一约束）。
 
-{{< note >}}
 <!--
- A Deployment's revision is created when a Deployment's rollout is triggered. This means that the
+A Deployment's revision is created when a Deployment's rollout is triggered. This means that the
 new revision is created if and only if the Deployment's Pod template (`.spec.template`) is changed,
 for example if you update the labels or container images of the template. Other updates, such as scaling the Deployment,
 do not create a Deployment revision, so that you can facilitate simultaneous manual- or auto-scaling.
 This means that when you roll back to an earlier revision, only the Deployment's Pod template part is
 rolled back.
 -->
-触发 Deployment 展开时，将创建 Deployment 修改版。这意味着仅当 Deployment  Pod 模板 （`.spec.template`） 发生更改时，才会创建新修改版本，例如，如果更新模板的标签或容器镜像 。其他更新，如扩展 Deployment 、不要创建 Deployment 修改版，以便方便同时手动或自动缩放。这意味着，当回滚到较早的修改版时，只有 Deployment  Pod 模板部分回滚。
+{{< note >}}
+Deployment 被触发上线时，系统就会创建 Deployment 的新的修订版本。
+这意味着仅当 Deployment 的 Pod 模板（`.spec.template`）发生更改时，才会创建新修订版本
+-- 例如，模板的标签或容器镜像发生变化。
+其他更新，如 Deployment 的扩缩容操作不会创建 Deployment 修订版本。
+这是为了方便同时执行手动缩放或自动缩放。
+换言之，当你回滚到较早的修订版本时，只有 Deployment 的 Pod 模板部分会被回滚。
 {{< /note >}}
 
 <!--
- * Suppose that you made a typo while updating the Deployment, by putting the image name as `nginx:1.91` instead of `nginx:1.9.1`:
+* Suppose that you made a typo while updating the Deployment, by putting the image name as `nginx:1.91` instead of `nginx:1.9.1`:
 -->
-* 假设在更新 Deployment 时犯了一个拼写错误，将镜像名称命名为 `nginx:1.91` 而不是 `nginx:1.9.1`：
-    ```shell
-    kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.91 --record=true
-    ```
+* 假设你在更新 Deployment 时犯了一个拼写错误，将镜像名称命名设置为 `nginx:1.161` 而不是 `nginx:1.16.1`：
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  ```shell
+  kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.161 --record=true
+  ```
 
-    ```shell
-    deployment.apps/nginx-deployment image updated
-    ```
+  <!-- The output is similar to this: -->
+  输出类似于：
+
+  ```shell
+  deployment.apps/nginx-deployment image updated
+  ```
 
 <!--
- * The rollout gets stuck. You can verify it by checking the rollout status:
+* The rollout gets stuck. You can verify it by checking the rollout status:
 -->
-* 展开遇到问题。可以通过检查展开状态来验证它：
+* 此上线进程会出现停滞。你可以通过检查上线状态来验证：
 
-    ```shell
-    kubectl rollout status deployment.v1.apps/nginx-deployment
-    ```
+  ```shell
+  kubectl rollout status deployment.v1.apps/nginx-deployment
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    Waiting for rollout to finish: 1 out of 3 new replicas have been updated...
-    ```
+  ```
+  Waiting for rollout to finish: 1 out of 3 new replicas have been updated...
+  ```
 
 <!--
- * Press Ctrl-C to stop the above rollout status watch. For more information on stuck rollouts,
+* Press Ctrl-C to stop the above rollout status watch. For more information on stuck rollouts,
 [read more here](#deployment-status).
 -->
-* 按 Ctrl-C 停止上述展开状态表。有关卡住展开的详细信息，[参考这里](#deployment-status)
+* 按 Ctrl-C 停止上述上线状态观测。有关上线停滞的详细信息，[参考这里](#deployment-status)。
 
 <!--
  * You see that the number of old replicas (`nginx-deployment-1564180365` and `nginx-deployment-2035384211`) is 2, and new replicas (nginx-deployment-3066724191) is 1.
 -->
-<!--
- * You see that the number of old replicas
--->
-* 查看旧 ReplicaSets ：
-    ```shell
-    kubectl get rs
-    ```
+* 你可以看到旧的副本有两个（`nginx-deployment-1564180365` 和 `nginx-deployment-2035384211`），
+  新的副本有 1 个（`nginx-deployment-3066724191`）：
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  ```shell
+  kubectl get rs
+  ```
 
-    ```shell
-    NAME                          DESIRED   CURRENT   READY   AGE
-    nginx-deployment-1564180365   3         3         3       25s
-    nginx-deployment-2035384211   0         0         0       36s
-    nginx-deployment-3066724191   1         1         0       6s
-    ```
+  <!-- The output is similar to this: -->
+  输出类似于：
+
+  ```shell
+  NAME                          DESIRED   CURRENT   READY   AGE
+  nginx-deployment-1564180365   3         3         3       25s
+  nginx-deployment-2035384211   0         0         0       36s
+  nginx-deployment-3066724191   1         1         0       6s
+  ```
 
 <!--
- * Looking at the Pods created, you see that 1 Pod created by new ReplicaSet is stuck in an image pull loop.
+* Looking at the Pods created, you see that 1 Pod created by new ReplicaSet is stuck in an image pull loop.
 -->
-* 查看创建的 Pod，看到由新 ReplicaSet 创建的 1 个 Pod 卡在镜像拉取循环中。
+* 查看所创建的 Pod，你会注意到新 ReplicaSet 所创建的 1 个 Pod 卡顿在镜像拉取循环中。
 
-    ```shell
-    kubectl get pods
-    ```
+  ```shell
+  kubectl get pods
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    NAME                                READY     STATUS             RESTARTS   AGE
-    nginx-deployment-1564180365-70iae   1/1       Running            0          25s
-    nginx-deployment-1564180365-jbqqo   1/1       Running            0          25s
-    nginx-deployment-1564180365-hysrc   1/1       Running            0          25s
-    nginx-deployment-3066724191-08mng   0/1       ImagePullBackOff   0          6s
-    ```
+  ```shell
+  NAME                                READY     STATUS             RESTARTS   AGE
+  nginx-deployment-1564180365-70iae   1/1       Running            0          25s
+  nginx-deployment-1564180365-jbqqo   1/1       Running            0          25s
+  nginx-deployment-1564180365-hysrc   1/1       Running            0          25s
+  nginx-deployment-3066724191-08mng   0/1       ImagePullBackOff   0          6s
+  ```
 
-    {{< note >}}
-    <!--
-    The Deployment controller stops the bad rollout automatically, and stops scaling up the new
-        ReplicaSet. This depends on the rollingUpdate parameters (`maxUnavailable` specifically) that you have specified.
-        Kubernetes by default sets the value to 25%.
-    -->
-    Deployment 控制器自动停止不良展开，并停止向上扩展新的 ReplicaSet 。这取决于指定的滚动更新参数（具体为 `maxUnavailable`）。默认情况下，Kubernetes 将值设置为 25%。
-    {{< /note >}}
+  <!--
+  The Deployment controller stops the bad rollout automatically, and stops scaling up the new
+  ReplicaSet. This depends on the rollingUpdate parameters (`maxUnavailable` specifically) that you have specified.
+  Kubernetes by default sets the value to 25%.
+  -->
+  {{< note >}}
+  Deployment 控制器自动停止有问题的上线过程，并停止对新的 ReplicaSet 扩容。
+  这行为取决于所指定的 rollingUpdate 参数（具体为 `maxUnavailable`）。
+  默认情况下，Kubernetes 将此值设置为 25%。
+  {{< /note >}}
 
 <!--
  * Get the description of the Deployment:
 -->
 * 获取 Deployment 描述信息：
-    ```shell
-    kubectl describe deployment
-    ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  ```shell
+  kubectl describe deployment
+  ```
 
-    ```shell
-    Name:           nginx-deployment
-    Namespace:      default
-    CreationTimestamp:  Tue, 15 Mar 2016 14:48:04 -0700
-    Labels:         app=nginx
-    Selector:       app=nginx
-    Replicas:       3 desired | 1 updated | 4 total | 3 available | 1 unavailable
-    StrategyType:       RollingUpdate
-    MinReadySeconds:    0
-    RollingUpdateStrategy:  25% max unavailable, 25% max surge
-    Pod Template:
-      Labels:  app=nginx
-      Containers:
-       nginx:
-        Image:        nginx:1.91
-        Port:         80/TCP
-        Host Port:    0/TCP
-        Environment:  <none>
-        Mounts:       <none>
-      Volumes:        <none>
-    Conditions:
-      Type           Status  Reason
-      ----           ------  ------
-      Available      True    MinimumReplicasAvailable
-      Progressing    True    ReplicaSetUpdated
-    OldReplicaSets:     nginx-deployment-1564180365 (3/3 replicas created)
-    NewReplicaSet:      nginx-deployment-3066724191 (1/1 replicas created)
-    Events:
-      FirstSeen LastSeen    Count   From                    SubobjectPath   Type        Reason              Message
-      --------- --------    -----   ----                    -------------   --------    ------              -------
-      1m        1m          1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-2035384211 to 3
-      22s       22s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-1564180365 to 1
-      22s       22s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled down replica set nginx-deployment-2035384211 to 2
-      22s       22s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-1564180365 to 2
-      21s       21s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled down replica set nginx-deployment-2035384211 to 1
-      21s       21s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-1564180365 to 3
-      13s       13s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled down replica set nginx-deployment-2035384211 to 0
-      13s       13s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-3066724191 to 1
-    ```
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    <!--
-    To fix this, you need to rollback to a previous revision of Deployment that is stable.
-    -->
-    要解决此问题，需要回滚到以前稳定的 Deployment 版本。
+  ```shell
+  Name:           nginx-deployment
+  Namespace:      default
+  CreationTimestamp:  Tue, 15 Mar 2016 14:48:04 -0700
+  Labels:         app=nginx
+  Selector:       app=nginx
+  Replicas:       3 desired | 1 updated | 4 total | 3 available | 1 unavailable
+  StrategyType:       RollingUpdate
+  MinReadySeconds:    0
+  RollingUpdateStrategy:  25% max unavailable, 25% max surge
+  Pod Template:
+    Labels:  app=nginx
+    Containers:
+     nginx:
+      Image:        nginx:1.91
+      Port:         80/TCP
+      Host Port:    0/TCP
+      Environment:  <none>
+      Mounts:       <none>
+    Volumes:        <none>
+  Conditions:
+    Type           Status  Reason
+    ----           ------  ------
+    Available      True    MinimumReplicasAvailable
+    Progressing    True    ReplicaSetUpdated
+  OldReplicaSets:     nginx-deployment-1564180365 (3/3 replicas created)
+  NewReplicaSet:      nginx-deployment-3066724191 (1/1 replicas created)
+  Events:
+    FirstSeen LastSeen    Count   From                    SubobjectPath   Type        Reason              Message
+    --------- --------    -----   ----                    -------------   --------    ------              -------
+    1m        1m          1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-2035384211 to 3
+    22s       22s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-1564180365 to 1
+    22s       22s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled down replica set nginx-deployment-2035384211 to 2
+    22s       22s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-1564180365 to 2
+    21s       21s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled down replica set nginx-deployment-2035384211 to 1
+    21s       21s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-1564180365 to 3
+    13s       13s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled down replica set nginx-deployment-2035384211 to 0
+    13s       13s         1       {deployment-controller }                Normal      ScalingReplicaSet   Scaled up replica set nginx-deployment-3066724191 to 1
+  ```
+
+  <!--
+  To fix this, you need to rollback to a previous revision of Deployment that is stable.
+  -->
+  要解决此问题，需要回滚到以前稳定的 Deployment 版本。
 
 <!--
- ### Checking Rollout History of a Deployment
--->
-### 检查 Deployment 展开历史
+### Checking Rollout History of a Deployment
 
-<!--
- Follow the steps given below to check the rollout history:
+Follow the steps given below to check the rollout history:
 -->
+### 检查 Deployment 上线历史
+
 按照如下步骤检查回滚历史：
 
 <!--
  1. First, check the revisions of this Deployment:
 -->
-1. 首先，检查 Deployment 修改历史：
+1. 首先，检查 Deployment 修订历史：
 
-    ```shell
-    kubectl rollout history deployment.v1.apps/nginx-deployment
-    ```
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   ```shell
+   kubectl rollout history deployment.v1.apps/nginx-deployment
+   ```
 
-    ```shell
-    deployments "nginx-deployment"
-    REVISION    CHANGE-CAUSE
-    1           kubectl apply --filename=https://k8s.io/examples/controllers/nginx-deployment.yaml --record=true
-    2           kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1 --record=true
-    3           kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.91 --record=true
-    ```
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    <!--
-    `CHANGE-CAUSE` is copied from the Deployment annotation `kubernetes.io/change-cause` to its revisions upon creation. You can specify the`CHANGE-CAUSE` message by:
-    -->
-    `CHANGE-CAUSE` 从 Deployment 注释 `kubernetes.io/change-cause` 创建时复制到其修改版。可以通过以下条件指定 `CHANGE-CAUSE` 消息：
+   ```shell
+   deployments "nginx-deployment"
+   REVISION    CHANGE-CAUSE
+   1           kubectl apply --filename=https://k8s.io/examples/controllers/nginx-deployment.yaml --record=true
+   2           kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1 --record=true
+   3           kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.91 --record=true
+   ```
 
-    <!--
-    * Annotating the Deployment with `kubectl annotate deployment.v1.apps/nginx-deployment kubernetes.io/change-cause="image updated to 1.9.1"`
-        * Append the `--record` flag to save the `kubectl` command that is making changes to the resource.
-        * Manually editing the manifest of the resource.
-    -->
-    * 使用 `kubectl annotate deployment.v1.apps/nginx-deployment kubernetes.io/change-cause="image updated to 1.9.1"`  Deployment 对 Deployment 进行分号。
-    * 追加 `--record` 以保存正在更改资源的 `kubectl` 命令。
-    * 手动编辑资源的清单。
+   <!--
+   `CHANGE-CAUSE` is copied from the Deployment annotation `kubernetes.io/change-cause` to its revisions upon creation. You can specify the`CHANGE-CAUSE` message by:
+   -->
+   `CHANGE-CAUSE` 的内容是从 Deployment 的 `kubernetes.io/change-cause` 注解复制过来的。
+   复制动作发生在修订版本创建时。你可以通过以下方式设置 `CHANGE-CAUSE` 消息：
+
+   <!--
+   * Annotating the Deployment with `kubectl annotate deployment.v1.apps/nginx-deployment kubernetes.io/change-cause="image updated to 1.9.1"`
+   * Append the `-record` flag to save the `kubectl` command that is making changes to the resource.
+   * Manually editing the manifest of the resource.
+   -->
+   * 使用 `kubectl annotate deployment.v1.apps/nginx-deployment kubernetes.io/change-cause="image updated to 1.9.1"` 为 Deployment 添加注解。
+   * 追加 `--record` 命令行标志以保存正在更改资源的 `kubectl` 命令。
+   * 手动编辑资源的清单。
 
 <!--
- 2. To see the details of each revision, run:
+2. To see the details of each revision, run:
 -->
-2. 查看修改历史的详细信息，运行：
+2. 要查看修订历史的详细信息，运行：
 
-    ```shell
-    kubectl rollout history deployment.v1.apps/nginx-deployment --revision=2
-    ```
+   ```shell
+   kubectl rollout history deployment.v1.apps/nginx-deployment --revision=2
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    ```shell
-    deployments "nginx-deployment" revision 2
-      Labels:       app=nginx
-              pod-template-hash=1159050644
-      Annotations:  kubernetes.io/change-cause=kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1 --record=true
-      Containers:
-       nginx:
-        Image:      nginx:1.9.1
-        Port:       80/TCP
-         QoS Tier:
-            cpu:      BestEffort
-            memory:   BestEffort
-        Environment Variables:      <none>
-      No volumes.
-    ```
+   ```shell
+   deployments "nginx-deployment" revision 2
+     Labels:       app=nginx
+             pod-template-hash=1159050644
+     Annotations:  kubernetes.io/change-cause=kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.16.1 --record=true
+     Containers:
+      nginx:
+       Image:      nginx:1.16.1
+       Port:       80/TCP
+        QoS Tier:
+           cpu:      BestEffort
+           memory:   BestEffort
+       Environment Variables:      <none>
+     No volumes.
+   ```
 
 <!--
- ### Rolling Back to a Previous Revision
+### Rolling Back to a Previous Revision
 Follow the steps given below to rollback the Deployment from the current version to the previous version, which is version 2.
 -->
-### 回滚到上一次修改
+### 回滚到之前的修订版本   {#rolling-back-to-a-previous-revision}
 
 按照下面给出的步骤将 Deployment 从当前版本回滚到以前的版本（即版本 2）。
 
 <!--
  1. Now you've decided to undo the current rollout and rollback to the previous revision:
 -->
-1. 现在已决定撤消当前展开并回滚到以前的版本：
+1. 假定现在你已决定撤消当前上线并回滚到以前的修订版本：
 
-    ```shell
-    kubectl rollout undo deployment.v1.apps/nginx-deployment
-    ```
+   ```shell
+   kubectl rollout undo deployment.v1.apps/nginx-deployment
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    ```shell
-    deployment.apps/nginx-deployment
-    ```
-    <!--
-    Alternatively, you can rollback to a specific revision by specifying it with `--to-revision`:
-    -->
-    或者，可以通过使用 `--to-revision` 来回滚到特定修改版本：
+   ```
+   deployment.apps/nginx-deployment
+   ```
 
-    ```shell
-    kubectl rollout undo deployment.v1.apps/nginx-deployment --to-revision=2
-    ```
+   <!--
+   Alternatively, you can rollback to a specific revision by specifying it with `-to-revision`:
+   -->
+   或者，你也可以通过使用 `--to-revision` 来回滚到特定修订版本：
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   ```shell
+   kubectl rollout undo deployment.v1.apps/nginx-deployment --to-revision=2
+   ```
 
-    ```shell
-    deployment.apps/nginx-deployment
-    ```
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    <!--
-    For more details about rollout related commands, read [`kubectl rollout`](/docs/reference/generated/kubectl/kubectl-commands#rollout).
-    -->
-    更多有关回滚相关指令，请参考 [`kubectl rollout`](/docs/reference/generated/kubectl/kubectl-commands#rollout).
+   ```
+   deployment.apps/nginx-deployment
+   ```
 
-    <!--
-    The Deployment is now rolled back to a previous stable revision. As you can see, a `DeploymentRollback` event
-        for rolling back to revision 2 is generated from Deployment controller.
-    -->
-    现在， Deployment 将回滚到以前的稳定版本。如所见， Deployment 回滚事件回滚到修改版 2 是从 Deployment 控制器生成的。
+   <!--
+   For more details about rollout related commands, read [`kubectl rollout`](/docs/reference/generated/kubectl/kubectl-commands#rollout).
+   -->
+   与回滚相关的指令的更详细信息，请参考 [`kubectl rollout`](/docs/reference/generated/kubectl/kubectl-commands#rollout)。
+
+   <!--
+   The Deployment is now rolled back to a previous stable revision. As you can see, a `DeploymentRollback` event
+   for rolling back to revision 2 is generated from Deployment controller.
+   -->
+   现在，Deployment 正在回滚到以前的稳定版本。正如你所看到的，Deployment 控制器生成了
+   回滚到修订版本 2 的 `DeploymentRollback` 事件。
 
 <!--
  2. Check if the rollback was successful and the Deployment is running as expected, run:
 -->
-2. 检查回滚是否成功、 Deployment 是否正在运行，运行：
+2. 检查回滚是否成功以及 Deployment 是否正在运行，运行：
 
-    ```shell
-    kubectl get deployment nginx-deployment
-    ```
+   ```shell
+   kubectl get deployment nginx-deployment
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    ```shell
-    NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
-    nginx-deployment   3         3         3            3           30m
-    ```
+   ```shell
+   NAME               DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
+   nginx-deployment   3         3         3            3           30m
+   ```
 
 <!--
- 3. Get the description of the Deployment:
+3. Get the description of the Deployment:
 -->
 3. 获取 Deployment 描述信息：
 
-    ```shell
-    kubectl describe deployment nginx-deployment
-    ```
+   ```shell
+   kubectl describe deployment nginx-deployment
+   ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+   <!-- The output is similar to this: -->
+   输出类似于：
 
-    ```shell
-    Name:                   nginx-deployment
-    Namespace:              default
-    CreationTimestamp:      Sun, 02 Sep 2018 18:17:55 -0500
-    Labels:                 app=nginx
-    Annotations:            deployment.kubernetes.io/revision=4
-                            kubernetes.io/change-cause=kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1 --record=true
-    Selector:               app=nginx
-    Replicas:               3 desired | 3 updated | 3 total | 3 available | 0 unavailable
-    StrategyType:           RollingUpdate
-    MinReadySeconds:        0
-    RollingUpdateStrategy:  25% max unavailable, 25% max surge
-    Pod Template:
-      Labels:  app=nginx
-      Containers:
-       nginx:
-        Image:        nginx:1.9.1
-        Port:         80/TCP
-        Host Port:    0/TCP
-        Environment:  <none>
-        Mounts:       <none>
-      Volumes:        <none>
-    Conditions:
-      Type           Status  Reason
-      ----           ------  ------
-      Available      True    MinimumReplicasAvailable
-      Progressing    True    NewReplicaSetAvailable
-    OldReplicaSets:  <none>
-    NewReplicaSet:   nginx-deployment-c4747d96c (3/3 replicas created)
-    Events:
-      Type    Reason              Age   From                   Message
-      ----    ------              ----  ----                   -------
-      Normal  ScalingReplicaSet   12m   deployment-controller  Scaled up replica set nginx-deployment-75675f5897 to 3
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-c4747d96c to 1
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled down replica set nginx-deployment-75675f5897 to 2
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-c4747d96c to 2
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled down replica set nginx-deployment-75675f5897 to 1
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-c4747d96c to 3
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled down replica set nginx-deployment-75675f5897 to 0
-      Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-595696685f to 1
-      Normal  DeploymentRollback  15s   deployment-controller  Rolled back deployment "nginx-deployment" to revision 2
-      Normal  ScalingReplicaSet   15s   deployment-controller  Scaled down replica set nginx-deployment-595696685f to 0
-    ```
+   ```
+   Name:                   nginx-deployment
+   Namespace:              default
+   CreationTimestamp:      Sun, 02 Sep 2018 18:17:55 -0500
+   Labels:                 app=nginx
+   Annotations:            deployment.kubernetes.io/revision=4
+                           kubernetes.io/change-cause=kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.16.1 --record=true
+   Selector:               app=nginx
+   Replicas:               3 desired | 3 updated | 3 total | 3 available | 0 unavailable
+   StrategyType:           RollingUpdate
+   MinReadySeconds:        0
+   RollingUpdateStrategy:  25% max unavailable, 25% max surge
+   Pod Template:
+     Labels:  app=nginx
+     Containers:
+      nginx:
+       Image:        nginx:1.16.1
+       Port:         80/TCP
+       Host Port:    0/TCP
+       Environment:  <none>
+       Mounts:       <none>
+     Volumes:        <none>
+   Conditions:
+     Type           Status  Reason
+     ----           ------  ------
+     Available      True    MinimumReplicasAvailable
+     Progressing    True    NewReplicaSetAvailable
+   OldReplicaSets:  <none>
+   NewReplicaSet:   nginx-deployment-c4747d96c (3/3 replicas created)
+   Events:
+     Type    Reason              Age   From                   Message
+     ----    ------              ----  ----                   -------
+     Normal  ScalingReplicaSet   12m   deployment-controller  Scaled up replica set nginx-deployment-75675f5897 to 3
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-c4747d96c to 1
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled down replica set nginx-deployment-75675f5897 to 2
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-c4747d96c to 2
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled down replica set nginx-deployment-75675f5897 to 1
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-c4747d96c to 3
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled down replica set nginx-deployment-75675f5897 to 0
+     Normal  ScalingReplicaSet   11m   deployment-controller  Scaled up replica set nginx-deployment-595696685f to 1
+     Normal  DeploymentRollback  15s   deployment-controller  Rolled back deployment "nginx-deployment" to revision 2
+     Normal  ScalingReplicaSet   15s   deployment-controller  Scaled down replica set nginx-deployment-595696685f to 0
+   ```
 
 <!--
- ## Scaling a Deployment
--->
-## 缩放 Deployment
+## Scaling a Deployment
 
-
-<!--
- You can scale a Deployment by using the following command:
+You can scale a Deployment by using the following command:
 -->
-可以使用如下指令缩放 Deployment ：
+## 缩放 Deployment   {#scaling-a-deployment}
+
+你可以使用如下指令缩放 Deployment：
 
 ```shell
 kubectl scale deployment.v1.apps/nginx-deployment --replicas=10
 ```
 
-<!--
- The output is similar to this:
--->
-输出：
+<!-- The output is similar to this: -->
+输出类似于：
 
-```shell
+```
 deployment.apps/nginx-deployment scaled
 ```
 
 <!--
- Assuming [horizontal Pod autoscaling](/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/) is enabled
+Assuming [horizontal Pod autoscaling](/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/) is enabled
 in your cluster, you can setup an autoscaler for your Deployment and choose the minimum and maximum number of
 Pods you want to run based on the CPU utilization of your existing Pods.
 -->
-假设启用[水平自动缩放 Pod](/zh/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/)在集群中，可以为 Deployment 设置自动缩放器，并选择最小和最大
-要基于现有 Pods 的 CPU 利用率运行的 Pods。
+假设集群启用了[Pod 的水平自动缩放](/zh/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough/)，
+你可以为 Deployment 设置自动缩放器，并基于现有 Pods 的 CPU 利用率选择
+要运行的 Pods 个数下限和上限。
 
 ```shell
 kubectl autoscale deployment.v1.apps/nginx-deployment --min=10 --max=15 --cpu-percent=80
 ```
 
-<!--
- The output is similar to this:
--->
-输出：
+<!-- The output is similar to this: -->
+输出类似于：
 
-```shell
+```
 deployment.apps/nginx-deployment scaled
 ```
 
 <!--
- ### Proportional scaling
--->
-### 比例缩放
+### Proportional scaling
 
-<!--
- RollingUpdate Deployments support running multiple versions of an application at the same time. When you
+RollingUpdate Deployments support running multiple versions of an application at the same time. When you
 or an autoscaler scales a RollingUpdate Deployment that is in the middle of a rollout (either in progress
 or paused), the Deployment controller balances the additional replicas in the existing active
 ReplicaSets (ReplicaSets with Pods) in order to mitigate risk. This is called *proportional scaling*.
 -->
-滚动更新 Deployments 支持同时运行应用程序的多个版本。当自动缩放器缩放处于展开中间的滚动更新 Deployment （仍在进行中或暂停）时， Deployment 控制器平衡现有活动中的其他 ReplicaSets （带 Pods 的 ReplicaSets ），以降低风险。这称为比例缩放。
+### 比例缩放  {#proportional-scaling}
+
+RollingUpdate 的 Deployment 支持同时运行应用程序的多个版本。
+当自动缩放器缩放处于上线进程（仍在进行中或暂停）中的 RollingUpdate Deployment 时，
+Deployment 控制器会平衡现有的活跃状态的 ReplicaSets（含 Pods 的 ReplicaSets）中的额外副本，
+以降低风险。这称为 *比例缩放（Proportional Scaling）*。
 
 <!--
- For example, you are running a Deployment with 10 replicas, [maxSurge](#max-surge)=3, and [maxUnavailable](#max-unavailable)=2.
+For example, you are running a Deployment with 10 replicas, [maxSurge](#max-surge)=3, and [maxUnavailable](#max-unavailable)=2.
 -->
-例如，运行一个10个副本的 Deployment ，[最大增加](#max-surge)=3， [最大不可用](#max-unavailable)=2.
+例如，你正在运行一个 10 个副本的 Deployment，其 [maxSurge](#max-surge)=3，[maxUnavailable](#max-unavailable)=2。
 
 <!--
- * Ensure that the 10 replicas in your Deployment are running.
+* Ensure that the 10 replicas in your Deployment are running.
 -->
-* 确保这10个副本都在运行。
+* 确保 Deployment 的这 10 个副本都在运行。
+
   ```shell
   kubectl get deploy
   ```
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-  <!--
-  The output is similar to this:
-  -->
-  输出：
-
-  ```shell
+  ```
   NAME                 DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
   nginx-deployment     10        10        10           10          50s
   ```
 
 <!--
- * You update to a new image which happens to be unresolvable from inside the cluster.
+* You update to a new image which happens to be unresolvable from inside the cluster.
 -->
-* 更新到新镜像，该镜像恰好无法从集群内部解析。
-    ```shell
-    kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:sometag
-    ```
+* 更新 Deployment 使用新镜像，碰巧该镜像无法从集群内部解析。
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  ```shell
+  kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:sometag
+  ```
 
-    ```shell
-    deployment.apps/nginx-deployment image updated
-    ```
+  <!-- The output is similar to this: -->
+  输出类似于：
+
+  ```
+  deployment.apps/nginx-deployment image updated
+  ```
 
 <!--
- * The image update starts a new rollout with ReplicaSet nginx-deployment-1989198191, but it's blocked due to the
+* The image update starts a new rollout with ReplicaSet nginx-deployment-1989198191, but it's blocked due to the
 `maxUnavailable` requirement that you mentioned above. Check out the rollout status:
 -->
-* 镜像更新使用 ReplicaSet  nginx-deployment-1989198191 启动新的展开，但由于上面提到的最大不可用要求。检查展开状态：
-    ```shell
-    kubectl get rs
-    ```
-    <!--
-    The output is similar to this:
-    -->
-      输出：
+* 镜像更新使用 ReplicaSet `nginx-deployment-1989198191` 启动新的上线过程，
+  但由于上面提到的 `maxUnavailable` 要求，该进程被阻塞了。检查上线状态：
 
-    ```shell
-    NAME                          DESIRED   CURRENT   READY     AGE
-    nginx-deployment-1989198191   5         5         0         9s
-    nginx-deployment-618515232    8         8         8         1m
-    ```
+  ```shell
+  kubectl get rs
+  ```
+  <!-- The output is similar to this: -->
+  输出类似于：
+
+  ```
+  NAME                          DESIRED   CURRENT   READY     AGE
+  nginx-deployment-1989198191   5         5         0         9s
+  nginx-deployment-618515232    8         8         8         1m
+  ```
 
 <!--
- * Then a new scaling request for the Deployment comes along. The autoscaler increments the Deployment replicas
+* Then a new scaling request for the Deployment comes along. The autoscaler increments the Deployment replicas
 to 15. The Deployment controller needs to decide where to add these new 5 replicas. If you weren't using
 proportional scaling, all 5 of them would be added in the new ReplicaSet. With proportional scaling, you
 spread the additional replicas across all ReplicaSets. Bigger proportions go to the ReplicaSets with the
 most replicas and lower proportions go to ReplicaSets with less replicas. Any leftovers are added to the
 ReplicaSet with the most replicas. ReplicaSets with zero replicas are not scaled up.
 -->
-* 然后，出现了新的 Deployment 扩展请求。自动缩放器增加 Deployment 副本到15。 Deployment 控制器需要决定在何处添加这些新 5 个副本。如果未使用比例缩放，所有 5 个都将添加到新的 ReplicaSet 中。使用比例缩放，可以将其他副本分布到所有 ReplicaSets 。更大的比例转到 ReplicaSets 与大多数副本和较低的比例都转到副本较少的 ReplicaSets 。任何剩余部分都添加到具有最多副本的 ReplicaSet 。具有零副本的 ReplicaSets 不会放大。
+* 然后，出现了新的 Deployment 扩缩请求。自动缩放器将 Deployment 副本增加到 15。
+  Deployment 控制器需要决定在何处添加 5 个新副本。如果未使用比例缩放，所有 5 个副本
+  都将添加到新的 ReplicaSet 中。使用比例缩放时，可以将额外的副本分布到所有 ReplicaSet。
+  较大比例的副本会被添加到拥有最多副本的 ReplicaSet，而较低比例的副本会进入到
+  副本较少的 ReplicaSet。所有剩下的副本都会添加到副本最多的 ReplicaSet。
+  具有零副本的 ReplicaSets 不会被扩容。
 
 <!--
- In our example above, 3 replicas are added to the old ReplicaSet and 2 replicas are added to the
+In our example above, 3 replicas are added to the old ReplicaSet and 2 replicas are added to the
 new ReplicaSet. The rollout process should eventually move all replicas to the new ReplicaSet, assuming
 the new replicas become healthy. To confirm this, run:
 -->
-在上面的示例中，3 个副本添加到旧 ReplicaSet 中，2 个副本添加到新 ReplicaSet 。展开过程最终应将所有副本移动到新的 ReplicaSet ，假定新的副本变得正常。要确认这一点，请运行：
+在上面的示例中，3 个副本被添加到旧 ReplicaSet 中，2 个副本被添加到新 ReplicaSet。
+假定新的副本都很健康，上线过程最终应将所有副本迁移到新的 ReplicaSet 中。
+要确认这一点，请运行：
 
 ```shell
 kubectl get deploy
 ```
+<!-- The output is similar to this: -->
+输出类似于：
 
-<!--
- The output is similar to this:
--->
-输出：
-
-```shell
+```
 NAME                 DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
 nginx-deployment     15        18        7            8           7m
 ```
 
 <!--
- The rollout status confirms how the replicas were added to each ReplicaSet.
+The rollout status confirms how the replicas were added to each ReplicaSet.
 -->
-展开状态确认副本如何添加到每个 ReplicaSet 。
+上线状态确认了副本是如何被添加到每个 ReplicaSet 的。
 
 ```shell
 kubectl get rs
 ```
 
-<!--
- The output is similar to this:
--->
-输出：
+<!-- The output is similar to this: -->
+输出类似于：
 
 ```shell
 NAME                          DESIRED   CURRENT   READY     AGE
@@ -1170,249 +1162,231 @@ nginx-deployment-618515232    11        11        11        7m
 ```
 
 <!--
- ## Pausing and Resuming a Deployment
--->
-## 暂停、恢复 Deployment
+## Pausing and Resuming a Deployment
 
-<!--
- You can pause a Deployment before triggering one or more updates and then resume it. This allows you to
+You can pause a Deployment before triggering one or more updates and then resume it. This allows you to
 apply multiple fixes in between pausing and resuming without triggering unnecessary rollouts.
 -->
-可以在触发一个或多个更新之前暂停 Deployment ，然后继续它。这允许在暂停和恢复之间应用多个修补程序，而不会触发不必要的 Deployment 。
+## 暂停、恢复 Deployment   {#pausing-and-resuming-a-deployment}
+
+你可以在触发一个或多个更新之前暂停 Deployment，然后再恢复其执行。
+这样做使得你能够在暂停和恢复执行之间应用多个修补程序，而不会触发不必要的上线操作。
 
 <!--
- * For example, with a Deployment that was just created:
+* For example, with a Deployment that was just created:
   Get the Deployment details:
 -->
-* 例如，对于一个刚刚创建的 Deployment ：
+* 例如，对于一个刚刚创建的 Deployment：
   获取 Deployment 信息：
 
   ```shell
   kubectl get deploy
   ```
-    <!--
-    The output is similar to this:
-    -->
-  输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-  ```shell
+  ```
   NAME      DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
   nginx     3         3         3            3           1m
   ```
 
-    <!--
-    Get the rollout status:
-    -->
-  获取 Deployment 状态：
+  <!-- Get the rollout status: -->
+  获取上线状态：
 
   ```shell
   kubectl get rs
   ```
-  <!--
-  The output is similar to this:
-  -->
-  输出：
+
+  <!-- The output is similar to this: -->
+  输出类似于：
 
   ```shell
   NAME               DESIRED   CURRENT   READY     AGE
   nginx-2142116321   3         3         3         1m
   ```
 
-    <!--
-    * Pause by running the following command:
-    -->
-    使用如下指令中断运行：
+<!--
+* Pause by running the following command:
+-->
+* 使用如下指令暂停运行：
 
-    ```shell
-    kubectl rollout pause deployment.v1.apps/nginx-deployment
-    ```
+  ```shell
+  kubectl rollout pause deployment.v1.apps/nginx-deployment
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    deployment.apps/nginx-deployment paused
-    ```
+  ```shell
+  deployment.apps/nginx-deployment paused
+  ```
 
 <!--
- * Then update the image of the Deployment:
+* Then update the image of the Deployment:
 -->
-* 然后更新 Deployment 镜像：
+* 接下来更新 Deployment 镜像：
 
-    ```shell
-    kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.9.1
-    ```
+  ```shell
+  kubectl set image deployment.v1.apps/nginx-deployment nginx=nginx:1.16.1
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    deployment.apps/nginx-deployment image updated
-    ```
+  ```
+  deployment.apps/nginx-deployment image updated
+  ```
 
 <!--
  * Notice that no new rollout started:
 -->
-* 注意没有新的展开：
+* 注意没有新的上线被触发：
 
-    ```shell
-    kubectl rollout history deployment.v1.apps/nginx-deployment
-    ```
+  ```shell
+  kubectl rollout history deployment.v1.apps/nginx-deployment
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    deployments "nginx"
-    REVISION  CHANGE-CAUSE
-    1   <none>
-    ```
+  ```shell
+  deployments "nginx"
+  REVISION  CHANGE-CAUSE
+  1   <none>
+  ```
 
 <!--
- * Get the rollout status to ensure that the Deployment is updates successfully:
+* Get the rollout status to ensure that the Deployment is updates successfully:
 -->
-* 获取展开状态确保 Deployment 更新已经成功：
+* 获取上线状态确保 Deployment 更新已经成功：
 
-    ```shell
-    kubectl get rs
-    ```
+  ```shell
+  kubectl get rs
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    NAME               DESIRED   CURRENT   READY     AGE
-    nginx-2142116321   3         3         3         2m
-    ```
+  ```shell
+  NAME               DESIRED   CURRENT   READY     AGE
+  nginx-2142116321   3         3         3         2m
+  ```
 
 <!--
- * You can make as many updates as you wish, for example, update the resources that will be used:
+* You can make as many updates as you wish, for example, update the resources that will be used:
 -->
-* 更新是很容易的，例如，可以这样更新使用到的资源：
+* 你可以根据需要执行很多更新操作，例如，可以要使用的资源：
 
-    ```shell
-    kubectl set resources deployment.v1.apps/nginx-deployment -c=nginx --limits=cpu=200m,memory=512Mi
-    ```
+  ```shell
+  kubectl set resources deployment.v1.apps/nginx-deployment -c=nginx --limits=cpu=200m,memory=512Mi
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    deployment.apps/nginx-deployment resource requirements updated
-    ```
+  ```
+  deployment.apps/nginx-deployment resource requirements updated
+  ```
 
-    <!--
-    The initial state of the Deployment prior to pausing it will continue its function, but new updates to
-        the Deployment will not have any effect as long as the Deployment is paused.
-    -->
-    暂停 Deployment 之前的初始状态将继续其功能，但新的更新只要暂停 Deployment ， Deployment 就不会产生任何效果。
+  <!--
+  The initial state of the Deployment prior to pausing it will continue its function, but new updates to
+  the Deployment will not have any effect as long as the Deployment is paused.
+  -->
+  暂停 Deployment 之前的初始状态将继续发挥作用，但新的更新在 Deployment 被
+  暂停期间不会产生任何效果。
 
 <!--
- * Eventually, resume the Deployment and observe a new ReplicaSet coming up with all the new updates:
+* Eventually, resume the Deployment and observe a new ReplicaSet coming up with all the new updates:
 -->
-* 最后，恢复 Deployment 并观察新的 ReplicaSet ，并更新所有新的更新：
+* 最终，恢复 Deployment 执行并观察新的 ReplicaSet 的创建过程，其中包含了所应用的所有更新：
 
-    ```shell
-    kubectl rollout resume deployment.v1.apps/nginx-deployment
-    ```
+  ```shell
+  kubectl rollout resume deployment.v1.apps/nginx-deployment
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出：
 
-    ```shell
-    deployment.apps/nginx-deployment resumed
-    ```
-<!--
- * Watch the status of the rollout until it's done.
--->
-* 观察展开的状态，直到完成。
-
-    ```shell
-    kubectl get rs -w
-    ```
-
-    <!--
-    The output is similar to this:
-    -->
-    输出：
-
-    ```shell
-    NAME               DESIRED   CURRENT   READY     AGE
-    nginx-2142116321   2         2         2         2m
-    nginx-3926361531   2         2         0         6s
-    nginx-3926361531   2         2         1         18s
-    nginx-2142116321   1         2         2         2m
-    nginx-2142116321   1         2         2         2m
-    nginx-3926361531   3         2         1         18s
-    nginx-3926361531   3         2         1         18s
-    nginx-2142116321   1         1         1         2m
-    nginx-3926361531   3         3         1         18s
-    nginx-3926361531   3         3         2         19s
-    nginx-2142116321   0         1         1         2m
-    nginx-2142116321   0         1         1         2m
-    nginx-2142116321   0         0         0         2m
-    nginx-3926361531   3         3         3         20s
-    ```
+  ```shell
+  deployment.apps/nginx-deployment resumed
+  ```
 
 <!--
- * Get the status of the latest rollout:
+* Watch the status of the rollout until it's done.
 -->
-* 获取最近展开的状态：
+* 观察上线的状态，直到完成。
 
-    ```shell
-    kubectl get rs
-    ```
+  ```shell
+  kubectl get rs -w
+  ```
 
-    <!--
-    The output is similar to this:
-    -->
-    输出：
+  <!-- The output is similar to this: -->
+  输出类似于：
 
-    ```shell
-    NAME               DESIRED   CURRENT   READY     AGE
-    nginx-2142116321   0         0         0         2m
-    nginx-3926361531   3         3         3         28s
-    ```
+  ```
+  NAME               DESIRED   CURRENT   READY     AGE
+  nginx-2142116321   2         2         2         2m
+  nginx-3926361531   2         2         0         6s
+  nginx-3926361531   2         2         1         18s
+  nginx-2142116321   1         2         2         2m
+  nginx-2142116321   1         2         2         2m
+  nginx-3926361531   3         2         1         18s
+  nginx-3926361531   3         2         1         18s
+  nginx-2142116321   1         1         1         2m
+  nginx-3926361531   3         3         1         18s
+  nginx-3926361531   3         3         2         19s
+  nginx-2142116321   0         1         1         2m
+  nginx-2142116321   0         1         1         2m
+  nginx-2142116321   0         0         0         2m
+  nginx-3926361531   3         3         3         20s
+  ```
 
+<!--
+* Get the status of the latest rollout:
+-->
+* 获取最近上线的状态：
+
+  ```shell
+  kubectl get rs
+  ```
+
+  <!-- The output is similar to this: -->
+  输出类似于：
+
+  ```
+  NAME               DESIRED   CURRENT   READY     AGE
+  nginx-2142116321   0         0         0         2m
+  nginx-3926361531   3         3         3         28s
+  ```
+
+<!--
+You cannot rollback a paused Deployment until you resume it.
+-->
 {{< note >}}
-<!--
- You cannot rollback a paused Deployment until you resume it.
--->
-暂停的 Deployment 不可以回滚，除非恢复它以后。
+你不可以回滚处于暂停状态的 Deployment，除非先恢复其执行状态。
 {{< /note >}}
 
 <!--
- ## Deployment status
--->
-##  Deployment 状态
+## Deployment status
 
-<!--
- A Deployment enters various states during its lifecycle. It can be [progressing](#progressing-deployment) while
+A Deployment enters various states during its lifecycle. It can be [progressing](#progressing-deployment) while
 rolling out a new ReplicaSet, it can be [complete](#complete-deployment), or it can [fail to progress](#failed-deployment).
 -->
-一个 Deployment 的生命周期中会有许多状态。当正在生产新的 ReplicaSet 时可能是[正在运行](#progressing-deployment)，可能是[已完成](#complete-deployment)，也可能是[ Deployment 失败](#failed-deployment)。
+##  Deployment 状态 {#deployment-status}
+
+Deployment 的生命周期中会有许多状态。上线新的 ReplicaSet 期间可能处于
+[Progressing（进行中）](#progressing-deployment)，可能是
+[Complete（已完成）](#complete-deployment)，也可能是
+[Failed（失败）](#failed-deployment)以至于无法继续进行。
 
 <!--
- ### Progressing Deployment
--->
-### 正在 Deployment
+### Progressing Deployment
 
-<!--
- Kubernetes marks a Deployment as _progressing_ when one of the following tasks is performed:
+Kubernetes marks a Deployment as _progressing_ when one of the following tasks is performed:
 -->
-Kubernetes 使用 _运行中_ 来标记一个 Deployment ，当下面的任务被执行时：
+### 进行中的 Deployment  {#progressing-deployment}
+
+执行下面的任务期间，Kubernetes 标记 Deployment 为 _进行中（Progressing）_：
 
 <!--
  * The Deployment creates a new ReplicaSet.
@@ -1420,56 +1394,48 @@ Kubernetes 使用 _运行中_ 来标记一个 Deployment ，当下面的任务
 * The Deployment is scaling down its older ReplicaSet(s).
 * New Pods become ready or available (ready for at least [MinReadySeconds](#min-ready-seconds)).
 -->
-* 创建新的 ReplicaSet 。
-* 正在向上扩展最新的 ReplicaSet 。
-*  Deployment 向下扩展旧的 ReplicaSet(s) 。
-* 新的 Pods 已经就绪或者可用（在[最小就绪时间](#min-ready-seconds)内就绪）。
+* Deployment 创建新的 ReplicaSet
+* Deployment 正在为其最新的 ReplicaSet 扩容
+* Deployment 正在为其旧有的 ReplicaSet(s) 缩容
+* 新的 Pods 已经就绪或者可用（就绪至少持续了 [MinReadySeconds](#min-ready-seconds) 秒）。
 
 <!--
- You can monitor the progress for a Deployment by using `kubectl rollout status`.
+You can monitor the progress for a Deployment by using `kubectl rollout status`.
 -->
-可以使用 `kubectl rollout status` 监视 Deployment 的进度。
+你可以使用 `kubectl rollout status` 监视 Deployment 的进度。
 
 <!--
- ### Complete Deployment
+### Complete Deployment
+
+Kubernetes marks a Deployment as _complete_ when it has the following characteristics:
 -->
-### 完成 Deployment
+### 完成的 Deployment    {#complete-deployment}
+
+当 Deployment 具有以下特征时，Kubernetes 将其标记为 _完成（Complete）_：
 
 <!--
- Kubernetes marks a Deployment as _complete_ when it has the following characteristics:
--->
-Kubernetes 将 Deployment 标记为 _完成_，当它具有以下特征时：
-
-<!--
- * All of the replicas associated with the Deployment have been updated to the latest version you've specified, meaning any
+* All of the replicas associated with the Deployment have been updated to the latest version you've specified, meaning any
 updates you've requested have been completed.
+* All of the replicas associated with the Deployment are available.
+* No old replicas for the Deployment are running.
 -->
-* 与 Deployment 关联的所有副本都已更新到指定的最新版本，这意味着请求的任何更新都已完成。
-
-<!--
- * All of the replicas associated with the Deployment are available.
--->
+* 与 Deployment 关联的所有副本都已更新到指定的最新版本，这意味着之前请求的所有更新都已完成。
 * 与 Deployment 关联的所有副本都可用。
-
-<!--
- * No old replicas for the Deployment are running.
--->
 * 未运行 Deployment 的旧副本。
 
 <!--
- You can check if a Deployment has completed by using `kubectl rollout status`. If the rollout completed
+You can check if a Deployment has completed by using `kubectl rollout status`. If the rollout completed
 successfully, `kubectl rollout status` returns a zero exit code.
 -->
-可以使用 `kubectl rollout status` 检查 Deployment 是否已完成。如果展开成功完成，`kubectl rollout status` 返回退出代码 0。
+你可以使用 `kubectl rollout status` 检查 Deployment 是否已完成。
+如果上线成功完成，`kubectl rollout status` 返回退出代码 0。
 
 ```shell
 kubectl rollout status deployment.v1.apps/nginx-deployment
 ```
 
-<!--
- The output is similar to this:
--->
-输出：
+<!-- The output is similar to this: -->
+输出类似于：
 
 ```shell
 Waiting for rollout to finish: 2 of 3 updated replicas are available...
@@ -1479,15 +1445,16 @@ $ echo $?
 ```
 
 <!--
- ### Failed Deployment
+### Failed Deployment
 -->
-###  Deployment 失败
+### 失败的 Deployment   {#failed-deployment}
 
 <!--
- Your Deployment may get stuck trying to deploy its newest ReplicaSet without ever completing. This can occur
+Your Deployment may get stuck trying to deploy its newest ReplicaSet without ever completing. This can occur
 due to some of the following factors:
 -->
-你的 Deployment 可能会在未完成的情况下尝试 Deployment 其最新的 ReplicaSet 时遇到问题。可能发生此情况由于以下一些因素：
+你的 Deployment 可能会在尝试部署其最新的 ReplicaSet 受挫，一直处于未完成状态。
+造成此情况一些可能因素如下：
 
 <!--
  * Insufficient quota
@@ -1497,90 +1464,93 @@ due to some of the following factors:
 * Limit ranges
 * Application runtime misconfiguration
 -->
-* 配额不足
-* 就绪探测失败
+* 配额（Quota）不足
+* 就绪探测（Readiness Probe）失败
 * 镜像拉取错误
 * 权限不足
-* 限制范围
-* 应用程序运行时配置错误
+* 限制范围（Limit Ranges）问题
+* 应用程序运行时的配置错误
 
 <!--
- One way you can detect this condition is to specify a deadline parameter in your Deployment spec:
+One way you can detect this condition is to specify a deadline parameter in your Deployment spec:
 ([`.spec.progressDeadlineSeconds`](#progress-deadline-seconds)). `.spec.progressDeadlineSeconds` denotes the
 number of seconds the Deployment controller waits before indicating (in the Deployment status) that the
 Deployment progress has stalled.
 -->
-检测此条件的一种方法是在 Deployment 规范中指定截止时间参数：（[`.spec.progressDeadlineSeconds`]（#progress-deadline-seconds））。`.spec.progressDeadlineSeconds` 进度截止时间秒表示 Deployment 控制器在指示（处于 Deployment 状态）之前等待的秒数 Deployment 进度已停止。
+检测此状况的一种方法是在 Deployment 规约中指定截止时间参数：
+（[`.spec.progressDeadlineSeconds`]（#progress-deadline-seconds））。
+`.spec.progressDeadlineSeconds` 给出的是一个秒数值，Deployment 控制器在（通过 Deployment 状态）
+标示 Deployment 进展停滞之前，需要等待所给的时长。
 
 <!--
- The following `kubectl` command sets the spec with `progressDeadlineSeconds` to make the controller report
+The following `kubectl` command sets the spec with `progressDeadlineSeconds` to make the controller report
 lack of progress for a Deployment after 10 minutes:
 -->
-以下 `kubectl` 命令设置具有进度的规范，使控制器报告 10 分钟后 Deployment 进度不足：
+以下 `kubectl` 命令设置规约中的 `progressDeadlineSeconds`，从而告知控制器
+在 10 分钟后报告 Deployment 没有进展：
 
 ```shell
 kubectl patch deployment.v1.apps/nginx-deployment -p '{"spec":{"progressDeadlineSeconds":600}}'
 ```
 
-<!--
- The output is similar to this:
--->
-输出：
+<!-- The output is similar to this: -->
+输出类似于：
 
-```shell
+```
 deployment.apps/nginx-deployment patched
 ```
 
 <!--
- Once the deadline has been exceeded, the Deployment controller adds a DeploymentCondition with the following
+Once the deadline has been exceeded, the Deployment controller adds a DeploymentCondition with the following
 attributes to the Deployment's `.status.conditions`:
 -->
-超过截止时间后， Deployment 控制器将添加具有以下属性到 Deployment 的 `.status.conditions` ：
+超过截止时间后， Deployment 控制器将添加具有以下属性的 DeploymentCondition 到
+Deployment 的 `.status.conditions` 中：
 
 * Type=Progressing
 * Status=False
 * Reason=ProgressDeadlineExceeded
 
 <!--
- See the [Kubernetes API conventions](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties) for more information on status conditions.
+See the [Kubernetes API conventions](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties) for more information on status conditions.
 -->
-参考 [Kubernetes API 约定](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties) 获取更多状态条件相关信息。
+参考 [Kubernetes API 约定](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties) 获取更多状态状况相关的信息。
 
-{{< note >}}
 <!--
  Kubernetes takes no action on a stalled Deployment other than to report a status condition with
 `Reason=ProgressDeadlineExceeded`. Higher level orchestrators can take advantage of it and act accordingly, for
 example, rollback the Deployment to its previous version.
--->
-Kubernetes 对已停止的 Deployment 不执行任何操作，只需使用`Reason=ProgressDeadlineExceeded`。更高级别的编排器可以利用它并相应地采取行动，例如，将 Deployment 回滚到其以前的版本。
-{{< /note >}}
 
+If you pause a Deployment, Kubernetes does not check progress against your specified deadline. You can
+safely pause a Deployment in the middle of a rollout and resume without triggering the condition for
+exceeding the deadline.
+-->
 {{< note >}}
-<!--
- If you pause a Deployment, Kubernetes does not check progress against your specified deadline. You can
-safely pause a Deployment in the middle of a rollout and resume without triggering the condition for exceeding the
-deadline.
--->
-如果暂停 Deployment ，Kubernetes 不会根据指定的截止时间检查进度。可以在展开栏中间安全地暂停 Deployment ，并在不触发超过最后期限时恢复。
+除了报告 `Reason=ProgressDeadlineExceeded` 状态之外，Kubernetes 对已停止的
+Deployment 不执行任何操作。更高级别的编排器可以利用这一设计并相应地采取行动。
+例如，将 Deployment 回滚到其以前的版本。
+
+如果你暂停了某个 Deployment，Kubernetes 不再根据指定的截止时间检查 Deployment 进展。
+你可以在上线过程中间安全地暂停 Deployment 再恢复其执行，这样做不会导致超出最后时限的问题。
 {{< /note >}}
 
 <!--
- You may experience transient errors with your Deployments, either due to a low timeout that you have set or
+You may experience transient errors with your Deployments, either due to a low timeout that you have set or
 due to any other kind of error that can be treated as transient. For example, let's suppose you have
 insufficient quota. If you describe the Deployment you will notice the following section:
 -->
- Deployments 可能会出现短暂的错误，既不是因为设置的超时时间过短，也不是因为任何真正的暂时性错误。例如配额不足。如果描述 Deployment ，将注意到以下部分：
+Deployment 可能会出现瞬时性的错误，可能因为设置的超时时间过短，
+也可能因为其他可认为是临时性的问题。例如，假定所遇到的问题是配额不足。
+如果描述 Deployment，你将会注意到以下部分：
 
 ```shell
 kubectl describe deployment nginx-deployment
 ```
 
-<!--
- The output is similar to this:
--->
-输出：
+<!-- The output is similar to this: -->
+输出类似于：
 
-```shell
+```
 <...>
 Conditions:
   Type            Status  Reason
@@ -1592,11 +1562,12 @@ Conditions:
 ```
 
 <!--
- If you run `kubectl get deployment nginx-deployment -o yaml`, the Deployment status is similar to this:
+If you run `kubectl get deployment nginx-deployment -o yaml`, the Deployment status is similar to this:
 -->
-如果运行 `kubectl get deployment nginx-deployment -o yaml`， Deployment 状态输出：
+如果运行 `kubectl get deployment nginx-deployment -o yaml`，Deployment 状态输出
+将类似于这样：
 
-```shell
+```
 status:
   availableReplicas: 2
   conditions:
@@ -1625,12 +1596,12 @@ status:
 ```
 
 <!--
- Eventually, once the Deployment progress deadline is exceeded, Kubernetes updates the status and the
+Eventually, once the Deployment progress deadline is exceeded, Kubernetes updates the status and the
 reason for the Progressing condition:
 -->
-最终，一旦超过 Deployment 进度截止时间，Kubernetes 将更新状态和进度状态：
+最终，一旦超过 Deployment 进度限期，Kubernetes 将更新状态和进度状况的原因：
 
-```shell
+```
 Conditions:
   Type            Status  Reason
   ----            ------  ------
@@ -1640,14 +1611,16 @@ Conditions:
 ```
 
 <!--
- You can address an issue of insufficient quota by scaling down your Deployment, by scaling down other
+You can address an issue of insufficient quota by scaling down your Deployment, by scaling down other
 controllers you may be running, or by increasing quota in your namespace. If you satisfy the quota
 conditions and the Deployment controller then completes the Deployment rollout, you'll see the
 Deployment's status update with a successful condition (`Status=True` and `Reason=NewReplicaSetAvailable`).
 -->
-可以通过缩减 Deployment 来解决配额不足的问题，或者直接在命名空间中增加配额。如果配额条件满足， Deployment 控制器完成了 Deployment 展开， Deployment 状态会更新为成功（`Status=True` and `Reason=NewReplicaSetAvailable`）。
+可以通过缩容 Deployment 或者缩容其他运行状态的控制器，或者直接在命名空间中增加配额
+来解决配额不足的问题。如果配额条件满足，Deployment 控制器完成了 Deployment 上线操作，
+Deployment 状态会更新为成功状况（`Status=True` and `Reason=NewReplicaSetAvailable`）。
 
-```shell
+```
 Conditions:
   Type          Status  Reason
   ----          ------  ------
@@ -1656,29 +1629,34 @@ Conditions:
 ```
 
 <!--
- `Type=Available` with `Status=True` means that your Deployment has minimum availability. Minimum availability is dictated
+`Type=Available` with `Status=True` means that your Deployment has minimum availability. Minimum availability is dictated
 by the parameters specified in the deployment strategy. `Type=Progressing` with `Status=True` means that your Deployment
 is either in the middle of a rollout and it is progressing or that it has successfully completed its progress and the minimum
 required new replicas are available (see the Reason of the condition for the particulars - in our case
 `Reason=NewReplicaSetAvailable` means that the Deployment is complete).
 -->
-`Type=Available`和 `Status=True` 表示 Deployment 具有最低可用性。最低可用性由 Deployment 策略中的参数指定。`Type=Progressing` 和 `Status=True` 表示 Deployment 处于展开中间，并且正在运行，或者已成功完成进度，最小所需新的副本处于可用（请参阅此种状态原因的相关细节，在我们的案例中`Reason=NewReplicaSetAvailable` 表示 Deployment 已完成）。
+`Type=Available` 加上 `Status=True` 意味着 Deployment 具有最低可用性。
+最低可用性由 Deployment 策略中的参数指定。
+`Type=Progressing` 加上 `Status=True` 表示 Deployment 处于上线过程中，并且正在运行，
+或者已成功完成进度，最小所需新副本处于可用。
+请参阅对应状况的 Reason 了解相关细节。
+在我们的案例中 `Reason=NewReplicaSetAvailable` 表示 Deployment 已完成。
 
 <!--
- You can check if a Deployment has failed to progress by using `kubectl rollout status`. `kubectl rollout status`
+You can check if a Deployment has failed to progress by using `kubectl rollout status`. `kubectl rollout status`
 returns a non-zero exit code if the Deployment has exceeded the progression deadline.
 -->
-可以使用 `kubectl rollout status` 检查 Deployment 是否未能取得进展。`kubectl rollout status`如果 Deployment 已超过进度截止时间，则返回非零退出代码。
+你可以使用 `kubectl rollout status` 检查 Deployment 是否未能取得进展。
+如果 Deployment 已超过进度限期，`kubectl rollout status` 返回非零退出代码。
 
 ```shell
 kubectl rollout status deployment.v1.apps/nginx-deployment
 ```
-<!--
- The output is similar to this:
--->
-输出：
 
-```shell
+<!-- The output is similar to this: -->
+输出类似于：
+
+```
 Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
 error: deployment "nginx" exceeded its progress deadline
 $ echo $?
@@ -1686,227 +1664,254 @@ $ echo $?
 ```
 
 <!--
- ### Operating on a failed deployment
+### Operating on a failed deployment
+
+All actions that apply to a complete Deployment also apply to a failed Deployment. You can scale it up/down,
+roll back to a previous revision, or even pause it if you need to apply multiple tweaks in the Deployment
+Pod template.
 -->
-### 对失败 Deployment 的操作
+### 对失败 Deployment 的操作   {#operating-on-a-failed-deployment}
+
+可应用于已完成的 Deployment 的所有操作也适用于失败的 Deployment。
+你可以对其执行扩缩容、回滚到以前的修订版本等操作，或者在需要对 Deployment 的
+Pod 模板应用多项调整时，将 Deployment 暂停。
 
 <!--
- All actions that apply to a complete Deployment also apply to a failed Deployment. You can scale it up/down, roll back
-to a previous revision, or even pause it if you need to apply multiple tweaks in the Deployment Pod template.
--->
-应用于完整 Deployment 的所有操作也适用于失败的 Deployment 。可以向上/向下扩展，回滚到以前的修改版，或者如果需要在 Deployment  Pod 模板中应用多个调整，甚至将其暂停。
+## Clean up Policy
 
-<!--
- ## Clean up Policy
--->
-## 清理策略
-
-<!--
- You can set `.spec.revisionHistoryLimit` field in a Deployment to specify how many old ReplicaSets for
+You can set `.spec.revisionHistoryLimit` field in a Deployment to specify how many old ReplicaSets for
 this Deployment you want to retain. The rest will be garbage-collected in the background. By default,
 it is 10.
 -->
-可以在 Deployment 中设置 `.spec.revisionHistoryLimit` ，以指定保留多少此 Deployment 的 ReplicaSets。其余的将在后台进行垃圾回收。默认情况下，是10。
+## 清理策略   {#clean-up-policy}
+
+你可以在 Deployment 中设置 `.spec.revisionHistoryLimit` 字段以指定保留此
+Deployment 的多少个旧有 ReplicaSet。其余的 ReplicaSet 将在后台被垃圾回收。
+默认情况下，此值为 10。
 
-{{< note >}}
 <!--
  Explicitly setting this field to 0, will result in cleaning up all the history of your Deployment
 thus that Deployment will not be able to roll back.
 -->
-显式将此字段设置为 0 将导致清理 Deployment 的所有历史记录，因此 Deployment 将无法回滚。
+{{< note >}}
+显式将此字段设置为 0 将导致 Deployment 的所有历史记录被清空，因此 Deployment 将无法回滚。
 {{< /note >}}
 
 <!--
- ## Canary Deployment
--->
-## 金丝雀 Deployment
+## Canary Deployment
 
-<!--
- If you want to roll out releases to a subset of users or servers using the Deployment, you
+If you want to roll out releases to a subset of users or servers using the Deployment, you
 can create multiple Deployments, one for each release, following the canary pattern described in
 [managing resources](/docs/concepts/cluster-administration/manage-deployment/#canary-deployments).
 -->
-如果要使用 Deployment 向用户或服务器子集展开版本，则可以创建多个 Deployments ，每个版本一个，遵循[资源管理](/zh/docs/concepts/cluster-administration/manage-deployment/#canary-deployments)。
+## 金丝雀部署 {#canary-deployment}
+
+如果要使用 Deployment 向用户子集或服务器子集上线版本，则可以遵循
+[资源管理](/zh/docs/concepts/cluster-administration/manage-deployment/#canary-deployments)
+所描述的金丝雀模式，创建多个 Deployment，每个版本一个。
 
 <!--
- ## Writing a Deployment Spec
--->
-## 编写 Deployment 脚本
+## Writing a Deployment Spec
 
-<!--
- As with all other Kubernetes configs, a Deployment needs `apiVersion`, `kind`, and `metadata` fields.
+As with all other Kubernetes configs, a Deployment needs `apiVersion`, `kind`, and `metadata` fields.
 For general information about working with config files, see [deploying applications](/docs/tutorials/stateless-application/run-stateless-application-deployment/),
 configuring containers, and [using kubectl to manage resources](/docs/concepts/overview/working-with-objects/object-management/) documents.
 -->
-同其他 Kubernetes 配置， Deployment 需要 `apiVersion`， `kind`， 和 `metadata` 字段。有关配置文件的其他信息，参考 [应用 Deployment ](/zh/docs/tasks/run-application/run-stateless-application-deployment/)，配置容器，和 [使用 kubectl 管理资源](/zh/docs/concepts/overview/working-with-objects/object-management/) 相关文档。
+## 编写 Deployment 规约       {#writing-a-deployment-spec}
+
+同其他 Kubernetes 配置一样， Deployment 需要 `apiVersion`，`kind` 和 `metadata` 字段。
+有关配置文件的其他信息，请参考
+[部署 Deployment ](/zh/docs/tasks/run-application/run-stateless-application-deployment/)、配置容器和
+[使用 kubectl 管理资源](/zh/docs/concepts/overview/working-with-objects/object-management/)等相关文档。
 
 <!--
- A Deployment also needs a [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status).
+The name of a Deployment object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+
+A Deployment also needs a [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status).
 -->
- Deployment 还需要 [`.spec` 部分](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)。
+Deployment 对象的名称必须是合法的
+[DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)。
+Deployment 还需要 [`.spec` 部分](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)。
 
 <!--
- ### Pod Template
--->
-### Pod 示例
+### Pod Template
 
-<!--
- The `.spec.template` and `.spec.selector` are the only required field of the `.spec`.
+The `.spec.template` and `.spec.selector` are the only required field of the `.spec`.
 -->
-`.spec`仅需要 `.spec.template` 和 `.spec.selector`。
+### Pod 模板     {#pod-template}
+
+`.spec` 中只有 `.spec.template` 和 `.spec.selector` 是必需的字段。
 
 <!--
  The `.spec.template` is a [Pod template](/docs/concepts/workloads/pods/pod-overview/#pod-templates). It has exactly the same schema as a [Pod](/docs/concepts/workloads/pods/pod/), except it is nested and does not have an
 `apiVersion` or `kind`.
 -->
-`.spec.template` 是一个 [Pod 示例](/zh/docs/concepts/workloads/pods/#pod-templates)。它和 [Pod](/zh/docs/concepts/workloads/pods)的约束完全相同，除了它是嵌套的，而且没有 `apiVersion` 或 `kind`。
+`.spec.template` 是一个 [Pod 模板](/zh/docs/concepts/workloads/pods/#pod-templates)。
+它和 {{< glossary_tooltip text="Pod" term_id="pod" >}} 的语法规则完全相同。
+只是这里它是嵌套的，因此不需要 `apiVersion` 或 `kind`。
 
 <!--
- In addition to required fields for a Pod, a Pod template in a Deployment must specify appropriate
-labels and an appropriate restart policy. For labels, make sure not to overlap with other controllers. See [selector](#selector).
+In addition to required fields for a Pod, a Pod template in a Deployment must specify appropriate
+labels and an appropriate restart policy. For labels, make sure not to overlap with other controllers. See [selector](#selector)).
 -->
-除了 Pod 的必填字段外， Deployment 中的 Pod 模板必须指定适当的标签和适当的重新启动策略。对于标签，请确保不要与其他控制器重叠。请参考[选择器](#selector)。
+除了 Pod 的必填字段外，Deployment 中的 Pod 模板必须指定适当的标签和适当的重新启动策略。
+对于标签，请确保不要与其他控制器重叠。请参考[选择算符](#selector)。
 
 <!--
- Only a [`.spec.template.spec.restartPolicy`](/docs/concepts/workloads/pods/#restart-policy) equal to `Always` is
+Only a [`.spec.template.spec.restartPolicy`](/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy) equal to `Always` is
 allowed, which is the default if not specified.
 -->
-只有 [`.spec.template.spec.restartPolicy`](/zh/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy) 等于 `Always` 被允许，这是在没有指定时的默认设置。
+只有 [`.spec.template.spec.restartPolicy`](/zh/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy)
+等于 `Always` 才是被允许的，这也是在没有指定时的默认设置。
 
 <!--
- ### Replicas
--->
-### 副本
+### Replicas
 
-<!--
- `.spec.replicas` is an optional field that specifies the number of desired Pods. It defaults to 1.
+`.spec.replicas` is an optional field that specifies the number of desired Pods. It defaults to 1.
 -->
+### 副本   {#replicas}
+
 `.spec.replicas` 是指定所需 Pod 的可选字段。它的默认值是1。
 
 <!--
- ### Selector
--->
-### 选择器
+### Selector
 
-<!--
- `.spec.selector` is an required field that specifies a [label selector](/docs/concepts/overview/working-with-objects/labels/)
+`.spec.selector` is an required field that specifies a [label selector](/docs/concepts/overview/working-with-objects/labels/)
 for the Pods targeted by this Deployment.
--->
-`.spec.selector` 是指定本次 Deployment  Pods [标签选择器](/zh/docs/concepts/overview/working-with-objects/labels/)的必要字段。
 
-<!--
- `.spec.selector` must match `.spec.template.metadata.labels`, or it will be rejected by the API.
+`.spec.selector` must match `.spec.template.metadata.labels`, or it will be rejected by the API.
 -->
+### 选择算符   {#selector}
+
+`.spec.selector` 是指定本 Deployment 的 Pod
+[标签选择算符](/zh/docs/concepts/overview/working-with-objects/labels/)的必需字段。
+
 `.spec.selector` 必须匹配 `.spec.template.metadata.labels`，否则请求会被 API 拒绝。
 
 <!--
  In API version `apps/v1`, `.spec.selector` and `.metadata.labels` do not default to `.spec.template.metadata.labels` if not set. So they must be set explicitly. Also note that `.spec.selector` is immutable after creation of the Deployment in `apps/v1`.
 -->
-在 API `apps/v1`版本中，`.spec.selector` 和 `.metadata.labels` 不会被默认设置为 `.spec.template.metadata.labels`，如果没有设置的话。所以需要明确进行设置。同时在 `apps/v1`版本中， Deployment 创建后 `.spec.selector` 是可变的。
+在 API `apps/v1`版本中，`.spec.selector` 和 `.metadata.labels` 如果没有设置的话，
+不会被默认设置为 `.spec.template.metadata.labels`，所以需要明确进行设置。
+同时在 `apps/v1`版本中，Deployment 创建后 `.spec.selector` 是不可变的。
 
 <!--
- A Deployment may terminate Pods whose labels match the selector if their template is different
+A Deployment may terminate Pods whose labels match the selector if their template is different
 from `.spec.template` or if the total number of such Pods exceeds `.spec.replicas`. It brings up new
 Pods with `.spec.template` if the number of Pods is less than the desired number.
 -->
-当 Pods 的标签和选择器匹配时，此类 Pods 的模板和 `.spec.template` 不同，或者此类 Pods 的总数超过 `.spec.replicas`， Deployment 会终结这些 Pods。如果 Pods 总数达不到期望值，会用 `.spec.template` 创建新的 Pods。
+当 Pod 的标签和选择算符匹配，但其模板和 `.spec.template` 不同时，或者此类 Pod
+的总数超过 `.spec.replicas` 的设置时，Deployment 会终结之。
+如果 Pods 总数未达到期望值，Deployment 会基于 `.spec.template` 创建新的 Pod。
 
-{{< note >}}
 <!--
- You should not create other Pods whose labels match this selector, either directly, by creating
+You should not create other Pods whose labels match this selector, either directly, by creating
 another Deployment, or by creating another controller such as a ReplicaSet or a ReplicationController. If you
 do so, the first Deployment thinks that it created these other Pods. Kubernetes does not stop you from doing this.
 -->
-不应创建其标签与此选择器匹配的 Pods，或者直接创建另一个 Deployment ，或通过创建其他控制器（如 ReplicaSet 或复制控制器）。如果这样做，第一个 Deployment 认为它创建了这些其他 Pods。Kubernetes 不会阻止你这么做。
+{{< note >}}
+你不应直接创建、或者通过创建另一个 Deployment，或者创建类似 ReplicaSet
+或 ReplicationController 这类控制器来创建标签与此选择算符匹配的 Pod。
+如果这样做，第一个 Deployment 会认为它创建了这些 Pod。
+Kubernetes 不会阻止你这么做。
 {{< /note >}}
 
 <!--
- If you have multiple controllers that have overlapping selectors, the controllers will fight with each
+If you have multiple controllers that have overlapping selectors, the controllers will fight with each
 other and won't behave correctly.
 -->
-如果有多个具有重叠选择器的控制器，则控制器之间会因冲突而故障。
+如果有多个控制器的选择算符发生重叠，则控制器之间会因冲突而无法正常工作。
 
 <!--
- ### Strategy
--->
-### 策略
-<!--
- `.spec.strategy` specifies the strategy used to replace old Pods by new ones.
+### Strategy
+
+`.spec.strategy` specifies the strategy used to replace old Pods by new ones.
 `.spec.strategy.type` can be "Recreate" or "RollingUpdate". "RollingUpdate" is
 the default value.
 -->
-`.spec.strategy` 策略指定用于用新 Pods 替换旧 Pods 的策略。`.spec.strategy.type` 可以是“Recreate”或“RollingUpdate”。“RollingUpdate”是默认值。
+### 策略   {#strategy}
+
+`.spec.strategy` 策略指定用于用新 Pods 替换旧 Pods 的策略。
+`.spec.strategy.type` 可以是 “Recreate” 或 “RollingUpdate”。“RollingUpdate” 是默认值。
 
 <!--
- #### Recreate Deployment
+#### Recreate Deployment
+
+All existing Pods are killed before new ones are created when `.spec.strategy.type==Recreate`.
 -->
-#### 重新创建 Deployment
+#### 重新创建 Deployment   {#recreate-deployment}
+
+如果 `.spec.strategy.type==Recreate`，在创建新 Pods 之前，所有现有的 Pods 会被杀死。
 
 <!--
- All existing Pods are killed before new ones are created when `.spec.strategy.type==Recreate`.
--->
-当 `.spec.strategy.type==Recreate`,所有现有的 Pods 在创建新 Pods 之前被杀死。
+#### Rolling Update Deployment
 
-<!--
- #### Rolling Update Deployment
--->
-#### 滚动更新 Deployment
-
-<!--
- The Deployment updates Pods in a [rolling update](/docs/tasks/run-application/rolling-update-replication-controller/)
+The Deployment updates Pods in a rolling update
 fashion when `.spec.strategy.type==RollingUpdate`. You can specify `maxUnavailable` and `maxSurge` to control
 the rolling update process.
 -->
- Deployment 会在 `.spec.strategy.type==RollingUpdate`时，采取滚动更新的方式更新Pods。可以指定 `maxUnavailable` 和 `maxSurge` 来控制滚动更新操作。
+#### 滚动更新 Deployment   {#rolling-update-deployment}
+
+Deployment 会在 `.spec.strategy.type==RollingUpdate`时，采取
+滚动更新的方式更新 Pods。你可以指定 `maxUnavailable` 和 `maxSurge` 来控制滚动更新
+过程。
 
 <!--
- ##### Max Unavailable
+##### Max Unavailable
 -->
-##### 最大不可用
+##### 最大不可用   {#max-unavailable}
 
 <!--
- `.spec.strategy.rollingUpdate.maxUnavailable` is an optional field that specifies the maximum number
+`.spec.strategy.rollingUpdate.maxUnavailable` is an optional field that specifies the maximum number
 of Pods that can be unavailable during the update process. The value can be an absolute number (for example, 5)
 or a percentage of desired Pods (for example, 10%). The absolute number is calculated from percentage by
 rounding down. The value cannot be 0 if `.spec.strategy.rollingUpdate.maxSurge` is 0. The default value is 25%.
 -->
-`.spec.strategy.rollingUpdate.maxUnavailable` 是指定最大数量的可选字段，表示在更新过程中不可用的 Pods。该值可以是绝对数字（例如，5）或所需 Pods 的百分比（例如，10%）。绝对数按百分比计算，四舍五入下来。如果 `.spec.strategy.rollingUpdate.maxSurge` 为 0，则该值不能为 0。默认值为 25%。
+`.spec.strategy.rollingUpdate.maxUnavailable` 是一个可选字段，用来指定
+更新过程中不可用的 Pod 的个数上限。该值可以是绝对数字（例如，5），也可以是
+所需 Pods 的百分比（例如，10%）。百分比值会转换成绝对数并去除小数部分。
+如果 `.spec.strategy.rollingUpdate.maxSurge` 为 0，则此值不能为 0。
+默认值为 25%。
 
 <!--
- For example, when this value is set to 30%, the old ReplicaSet can be scaled down to 70% of desired
+For example, when this value is set to 30%, the old ReplicaSet can be scaled down to 70% of desired
 Pods immediately when the rolling update starts. Once new Pods are ready, old ReplicaSet can be scaled
 down further, followed by scaling up the new ReplicaSet, ensuring that the total number of Pods available
 at all times during the update is at least 70% of the desired Pods.
 -->
-例如，当此值设置为 30% 时，滚动更新开始时会立即将旧 ReplicaSet 向下扩展到期望 Pods 的70%。新 Pods 准备就绪后，可以缩放旧 ReplicaSet 进一步向下，然后向上扩展新的 ReplicaSet ，确保可用的 Pods 总数在更新期间，任何时候都至少为 70% 所需的 Pods。
+例如，当此值设置为 30% 时，滚动更新开始时会立即将旧 ReplicaSet 缩容到期望 Pod 个数的70%。
+新 Pod 准备就绪后，可以继续缩容旧有的 ReplicaSet，然后对新的 ReplicaSet 扩容，确保在更新期间
+可用的 Pods 总数在任何时候都至少为所需的 Pod 个数的 70%。
 
 <!--
- ##### Max Surge
--->
-##### 最大增量
+##### Max Surge
 
-<!--
  `.spec.strategy.rollingUpdate.maxSurge` is an optional field that specifies the maximum number of Pods
 that can be created over the desired number of Pods. The value can be an absolute number (for example, 5) or a
 percentage of desired Pods (for example, 10%). The value cannot be 0 if `MaxUnavailable` is 0. The absolute number
 is calculated from the percentage by rounding up. The default value is 25%.
 -->
-`.spec.strategy.rollingUpdate.maxSurge`  是指定最大 Pods 数的可选字段可在所需的 Pods 数上创建。该值可以是绝对数（例如，5）或所需 Pods 的百分比（例如，10%）。如果 `MaxUnavailable` 0，则值不能为 0。绝对数通过舍入从百分比计算。默认值为 25%。
+##### 最大峰值   {#max-surge}
+
+`.spec.strategy.rollingUpdate.maxSurge` 是一个可选字段，用来指定可以创建的超出
+期望 Pod 个数的 Pod 数量。此值可以是绝对数（例如，5）或所需 Pods 的百分比（例如，10%）。
+如果 `MaxUnavailable` 为 0，则此值不能为 0。百分比值会通过向上取整转换为绝对数。
+此字段的默认值为 25%。
 
 <!--
- For example, when this value is set to 30%, the new ReplicaSet can be scaled up immediately when the
+For example, when this value is set to 30%, the new ReplicaSet can be scaled up immediately when the
 rolling update starts, such that the total number of old and new Pods does not exceed 130% of desired
 Pods. Once old Pods have been killed, the new ReplicaSet can be scaled up further, ensuring that the
 total number of Pods running at any time during the update is at most 130% of desired Pods.
 -->
-例如，当此值设置为 30% 时，启动滚动更新后，会立即展开新的 ReplicaSet ，以便新旧 Pod 的总数不超过所需的 130%。一旦旧 Pods 被杀死，新的 ReplicaSet 可以进一步扩展，确保更新期间任何时间运行的 Pods 总数最多为所需 Pods 总数的130%。
+例如，当此值为 30% 时，启动滚动更新后，会立即对新的 ReplicaSet 扩容，同时保证新旧 Pod
+的总数不超过所需 Pod 总数的 130%。一旦旧 Pods 被杀死，新的 ReplicaSet 可以进一步扩容，
+同时确保更新期间的任何时候运行中的 Pods 总数最多为所需 Pods 总数的 130%。
 
 <!--
  ### Progress Deadline Seconds
--->
-###  Deployment 失败等待时间
 
-<!--
  `.spec.progressDeadlineSeconds` is an optional field that specifies the number of seconds you want
 to wait for your Deployment to progress before the system reports back that the Deployment has
 [failed progressing](#failed-deployment) - surfaced as a condition with `Type=Progressing`, `Status=False`.
@@ -1914,89 +1919,70 @@ and `Reason=ProgressDeadlineExceeded` in the status of the resource. The Deploym
 retrying the Deployment. In the future, once automatic rollback will be implemented, the Deployment
 controller will roll back a Deployment as soon as it observes such a condition.
 -->
-`.spec.progressDeadlineSeconds` 是一个可选字段，用于指定等待的秒数而后在系统报告中返回[ Deployment 失败](#failed-deployment)，同时在资源状态中 `Type=Progressing`、 `Status=False` 、 `Reason=ProgressDeadlineExceeded` 。  Deployment 控制器将保留正在重试 Deployment 。将来，一旦实现自动回滚， Deployment 控制器将回滚 Deployment ，只要它探测到这样的条件。
+### 进度期限秒数    {#progress-deadline-seconds}
+ 
+`.spec.progressDeadlineSeconds` 是一个可选字段，用于指定系统在报告 Deployment
+[进展失败](#failed-deployment) 之前等待 Deployment 取得进展的秒数。
+这类报告会在资源状态中体现为 `Type=Progressing`、`Status=False`、
+`Reason=ProgressDeadlineExceeded`。Deployment 控制器将持续重试 Deployment。
+将来，一旦实现了自动回滚，Deployment 控制器将在探测到这样的条件时立即回滚 Deployment。
 
 <!--
- If specified, this field needs to be greater than `.spec.minReadySeconds`.
+If specified, this field needs to be greater than `.spec.minReadySeconds`.
 -->
-如果指定，则此字段需要大于 `.spec.minReadySeconds`。
+如果指定，则此字段值需要大于 `.spec.minReadySeconds` 取值。
 
 <!--
- ### Min Ready Seconds
--->
-### 最小就绪时间
+### Min Ready Seconds
 
-<!--
  `.spec.minReadySeconds` is an optional field that specifies the minimum number of seconds for which a newly
 created Pod should be ready without any of its containers crashing, for it to be considered available.
 This defaults to 0 (the Pod will be considered available as soon as it is ready). To learn more about when
 a Pod is considered ready, see [Container Probes](/docs/concepts/workloads/pods/pod-lifecycle/#container-probes).
 -->
-`.spec.minReadySeconds` 是一个可选字段，用于指定新创建的 Pod 在没有任意容器崩溃情况下的最小就绪时间，以便将其视为可用。默认值为 0（Pod 在准备就绪后立即将被视为可用）。了解有关何时Pod 被视为已准备就绪，参考[容器探针](/zh/docs/concepts/workloads/pods/pod-lifecycle/#container-probes)。
+### 最短就绪时间    {#min-ready-seconds}
+
+`.spec.minReadySeconds` 是一个可选字段，用于指定新创建的 Pod 在没有任意容器崩溃情况下的最小就绪时间，
+只有超出这个时间 Pod 才被视为可用。默认值为 0（Pod 在准备就绪后立即将被视为可用）。
+要了解何时 Pod 被视为就绪，可参考[容器探针](/zh/docs/concepts/workloads/pods/pod-lifecycle/#container-probes)。
 
 <!--
- ### Rollback To
+### Revision History Limit
+
+A Deployment's revision history is stored in the ReplicaSets it controls.
 -->
-### 回滚
+### 修订历史限制
+
+Deployment 的修订历史记录存储在它所控制的 ReplicaSets 中。
 
 <!--
- Field `.spec.rollbackTo` has been deprecated in API versions `extensions/v1beta1` and `apps/v1beta1`, and is no longer supported in API versions starting `apps/v1beta2`. Instead, `kubectl rollout undo` as introduced in [Rolling Back to a Previous Revision](#rolling-back-to-a-previous-revision) should be used.
--->
-`.spec.rollbackTo` 字段已经在 API 版本 `extensions/v1beta1` 和 `apps/v1beta1`中废弃了，并且从 `apps/v1beta2`版本开始不在支持。相应的，会开始使用已经引入[回滚到上一个版本](#rolling-back-to-a-previous-revision)中的 `kubectl rollout undo`。
-
-<!--
- ### Revision History Limit
--->
-### 修改历史限制
-
-<!--
- A Deployment's revision history is stored in the ReplicaSets it controls.
--->
- Deployment 修改历史记录存储在它所控制的 ReplicaSets 中。
-
-<!--
- `.spec.revisionHistoryLimit` is an optional field that specifies the number of old ReplicaSets to retain
+`.spec.revisionHistoryLimit` is an optional field that specifies the number of old ReplicaSets to retain
 to allow rollback. These old ReplicaSets consume resources in `etcd` and crowd the output of `kubectl get rs`. The configuration of each Deployment revision is stored in its ReplicaSets; therefore, once an old ReplicaSet is deleted, you lose the ability to rollback to that revision of Deployment. By default, 10 old ReplicaSets will be kept, however its ideal value depends on the frequency and stability of new Deployments.
 -->
-`.spec.revisionHistoryLimit` 修改历史记录限制是一个可选字段，用于指定要保留的旧 ReplicaSets 的数量以允许回滚。这些旧 ReplicaSets 消耗 etcd 中的资源，并占用 `kubectl get rs` 的输出。每个 Deployment 修改版的配置都存储在其 ReplicaSets 中；因此，一旦删除了旧的 ReplicaSet ，将失去回滚到 Deployment 版本的能力。默认情况下，将保留 10 个旧 ReplicaSets ，但其理想值取决于新 Deployment 的频率和稳定性。
+`.spec.revisionHistoryLimit` 是一个可选字段，用来设定出于会滚目的所要保留的旧 ReplicaSet 数量。
+这些旧 ReplicaSet 会消耗 etcd 中的资源，并占用 `kubectl get rs` 的输出。
+每个 Deployment 修订版本的配置都存储在其 ReplicaSets 中；因此，一旦删除了旧的 ReplicaSet，
+将失去回滚到 Deployment 的对应修订版本的能力。
+默认情况下，系统保留 10 个旧 ReplicaSet，但其理想值取决于新 Deployment 的频率和稳定性。
 
 <!--
- More specifically, setting this field to zero means that all old ReplicaSets with 0 replicas will be cleaned up.
+More specifically, setting this field to zero means that all old ReplicaSets with 0 replicas will be cleaned up.
 In this case, a new Deployment rollout cannot be undone, since its revision history is cleaned up.
 -->
-更具体地说，将此字段设置为 0 意味着将清理所有具有 0 个副本的旧 ReplicaSets 。在这种情况下，无法撤消新的 Deployment 展开，因为它的修改历史被清除了。
+更具体地说，将此字段设置为 0 意味着将清理所有具有 0 个副本的旧 ReplicaSet。
+在这种情况下，无法撤消新的 Deployment 上线，因为它的修订历史被清除了。
 
 <!--
- ### Paused
--->
-### 暂停
+### Paused
 
-<!--
- `.spec.paused` is an optional boolean field for pausing and resuming a Deployment. The only difference between
+`.spec.paused` is an optional boolean field for pausing and resuming a Deployment. The only difference between
 a paused Deployment and one that is not paused, is that any changes into the PodTemplateSpec of the paused
 Deployment will not trigger new rollouts as long as it is paused. A Deployment is not paused by default when
 it is created.
 -->
-`.spec.paused` 是用于暂停和恢复 Deployment 的可选布尔字段。暂停的 Deployment 和未暂停的 Deployment 唯一的区别，只要暂停 Deployment 处于暂停状态， PodTemplateSpec 的任意修改都不会触发新的展开。默认 Deployment 在创建时是不会被暂停的。
-
-<!--
- ## Alternative to Deployments
--->
-##  Deployments 的替代方案
-
-<!--
- ### kubectl rolling update
--->
-### kubectl滚动更新
-
-<!--
- [`kubectl rolling update`](/docs/reference/generated/kubectl/kubectl-commands#rolling-update) updates Pods and ReplicationControllers
--->
-
-<!--
- in a similar fashion. But Deployments are recommended, since they are declarative, server side, and have
-additional features, such as rolling back to any previous revision even after the rolling update is done.
--->
-[`kubectl rolling update`](/docs/reference/generated/kubectl/kubectl-commands#rolling-update)更新 Pods 和副本控制器的方式类似。但是，建议采取 Deployments 的方式来更新，因为它们是声明性的，在服务器端，并且具有其他功能，例如，即使在滚动更新完成后，也会回滚到以前的任何修改版本。
-
+### paused（暂停的）  {#paused}
 
+`.spec.paused` 是用于暂停和恢复 Deployment 的可选布尔字段。
+暂停的 Deployment 和未暂停的 Deployment 的唯一区别是，Deployment 处于暂停状态时，
+PodTemplateSpec 的任何修改都不会触发新的上线。
+Deployment 在创建时是默认不会处于暂停状态。

From 0bd68f3c426ba62d8ba43c3323a6d345f5f1b0d7 Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Sat, 5 Sep 2020 19:39:05 +0700
Subject: [PATCH 246/496] Add ID translation for
 /docs/tutorials/kubernetes-basics/explore/

---
 .../kubernetes-basics/explore/_index.md       |   4 +
 .../explore/explore-interactive.html          |  41 +++++
 .../explore/explore-intro.html                | 143 ++++++++++++++++++
 3 files changed, 188 insertions(+)
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/explore/_index.md
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html

diff --git a/content/id/docs/tutorials/kubernetes-basics/explore/_index.md b/content/id/docs/tutorials/kubernetes-basics/explore/_index.md
new file mode 100644
index 0000000000..89eba57482
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/explore/_index.md
@@ -0,0 +1,4 @@
+---
+title: Menjelajahi Aplikasimu
+weight: 30
+---
diff --git a/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
new file mode 100644
index 0000000000..a6439aa789
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -0,0 +1,41 @@
+---
+title: Tutorial Interaktif - Menjelajahi Aplikasimu
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <br>
+        <div class="katacoda">
+
+            <div class="katacoda__alert">
+                Untuk berinteraksi dengan Terminal, tolong gunakan dalam desktop/tablet
+            </div>
+
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/expose/expose-intro/" role="button">Lanjut ke Modul 4<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>
diff --git a/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html b/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html
new file mode 100644
index 0000000000..ffc6519a37
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html
@@ -0,0 +1,143 @@
+---
+title: Melihat Pod dan Node
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+
+<div class="layout" id="top">
+
+    <main class="content">
+
+        <div class="row">
+
+     <div class="col-md-8">
+          <h3>Tujuan</h3>
+                <ul>
+                    <li>Belajar tentang Pod Kubernetes.</li>
+                    <li>Belajar tentang Node Kubernetes.</li>
+                    <li>Mengatasi masalah pada aplikasi-aplikasi yang di-<i>deploy</i>.</li>
+                </ul>
+            </div>
+
+            <div class="col-md-8">
+                <h2>Pod Kubernetes</h2>
+                <p>Ketika kamu membuat sebuah Deployment di Modul <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, Kubernetes membuatkan sebuah <b>Pod</b> untuk menempatkan instans aplikasimu. Pod merupakan sebuah abstraksi Kubernetes yang merepresentasikan sebuah grup yang terdiri dari satu atau lebih kontainer (seperti Docker), dan beberapa sumber daya bersama untuk kontainer-kontainer itu. Sumber daya tersebut termasuk:</p>
+                <ul>
+                    <li>Penyimpanan bersama, disebut Volume</li>
+                    <li>Jaringan, sebagai satu alamat IP klaster unik</li>
+                    <li>Informasi tentang bagaimana mejalankan tiap kontainer, seperti versi <i>image</i> kontainer atau porta spesifik yang digunakan</li>
+                </ul>
+                <p>Pod memodelkan sebuah "logical host" spesifik aplikasi dan dapat berisi beberapa kontainer aplikasi berbeda yang relatif terkait erat. Contohnya, sebuah Pod mungkin terdiri atas kontainer aplikasi Node.js dan juga kontainer berbeda yang bertugas menyediakan data untuk dipublikasikan ke server web Node.js. Kontainer-kontainer dalam sebuah Pod berbagi satu alamat IP dan ruang porta, selalu terletak bersama dan terjadwal bersama, dan berjalankan dalam satu konteks bersama (<i>shared context</i>) pada Node yang sama.</p>
+
+            <p>Pod merupakan unit terkecil dalam platform Kubernetes. Ketika kita membuat sebuat Deployment, Deployment tersebut membuat Pod dengan kontainer-kontainer di dalamnya (bukannya dengan membuat kontainer secara langsung). Tiap Pod terikat langsung dengan Node di mana dia dijadwalkan dan tetap di sana sampai terminasi (berdasarkan <i>restart policy</i>) atau pengapusan. Jika terjadi kegagalan pada sebuah Node, Pod indentik akan dijadwalkan di Node lain dalam klaster.</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_lined">
+                    <h3>Ringkasan:</h3>
+                    <ul>
+                        <li>Pod</li>
+                        <li>Node</li>
+                        <li>Perintah utama kubectl</li>
+                    </ul>
+                </div>
+                <div class="content__box content__box_fill">
+                        <p><i>
+                            Pod merupakan sebuah grup yang terdiri dari satu atau lebih kontainer aplikasi (seperti Docker) dan berisi penyimpanan bersama (volume), alamat IP dan informasi tentang bagaimana menjalankan mereka.
+                        </i></p>
+                </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2 style="color: #3771e3;">Ikhtisar Pod</h2>
+            </div>
+        </div>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p><img src="/docs/tutorials/kubernetes-basics/public/images/module_03_pods.svg"></p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2>Node</h2>
+                <p>Sebuah Pod selalu berjalan dalam sebuah <b>Node</b>. Node merupakan sebuah mesin pekerja di Kubernetes dan dapat dimungkinkan mesin virtual ataupun fisik, tergantung dari klaster. Tiap Node dikelola oleh Master. Satu Node dapat memiliki beberapa pod, dan master Kubernetes otomatis menangani penjadwalan pod seluruh Node-Node dalam klaster. Penjadwalan otomatis oleh Master memperhitungkan tersedianya sumber daya tiap Node.</p>
+
+                <p>Tiap Node Kuberbetes menjalankan setidaknya:</p>
+                <ul>
+                    <li>Kubelet, satu proses yang bertanggung jawab untuk berkomunikasi antara Master Kuberneter dan Node; ini juga mengelola Pod-Pod dan kontainer-kontainer yang berjalan di sebuah mesin.</li>
+                    <li>Satu waktu larian kontainer (<i>container runtime</i>), seperti Docker, bertanggung jawab untuk menarik <i>image</i> kontainer dari registri, membuka kontainer, dan menjalankan aplikasi.</li>
+                </ul>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_fill">
+                    <p><i> Kontainer seharusnya hanya dijadwalkan bersama di satu Pod jika terkait erat dan membutuhkan sumber daya bersama seperti diska. </i></p>
+                </div>
+            </div>
+        </div>
+
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2 style="color: #3771e3;">Ikhtisar Node</h2>
+            </div>
+        </div>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p><img src="/docs/tutorials/kubernetes-basics/public/images/module_03_nodes.svg"></p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2>Mengatasi masalah dengan kubectl</h2>
+                <p>Dalam Modul <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, kamu menggunakan antarmuka baris perintah Kubctl. Kamu akan lanjut menggunakannya di Modul 3 untuk mendapatkan informasi tentang aplikasi-aplikasi yang di-<i>deploy</i> dan lingkungannya. Operasi yang paling umum dapat dilakukan dengan perintah kubectl berikut:</p>
+                <ul>
+                    <li><b>kubectl get</b> - daftar sumber daya</li>
+                    <li><b>kubectl describe</b> - menampilkan detil informasi tentang suatu sumber daya</li>
+                    <li><b>kubectl logs</b> - mecetak log-log dari satu kontainer dalam sebuah pod</li>
+                    <li><b>kubectl exec</b> - eksekusi sebuah perintah pada satu kontainer dalam sebuah pod</li>
+                </ul>
+
+                <p>Kamu dapat menggunakan perintah ini kapan aplikasi-aplikasi di-<i>deploy</i>, apa status mereka saat ini, di mana mereka berjalan, dan apa konfigurasi mereka.</p>
+
+                <p>Sekarang karena kita lebih mengetahui tentang klaster kita dan baris perintahnya, mari kita menjelajah aplikasi kita.</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_fill">
+                    <p><i> Node merupakan mesin pekerja di Kubernetes dan bisa berupa VM ataupun mesin fisik, tergantung pada klaster. Beberapa Pod dapat berjalan dalam satu Node. </i></p>
+                </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/explore/explore-interactive/" role="button">Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>

From c24b2a12bc7cb3f85c06f2785bfde40ed228ddaf Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Tue, 8 Sep 2020 08:50:48 +0800
Subject: [PATCH 247/496] Add eviction policy page

This is a sync to English site change (#23478)
---
 .../scheduling-eviction/eviction-policy.md    | 44 +++++++++++++++++++
 .../scheduling-eviction/kube-scheduler.md     |  2 -
 .../scheduler-perf-tuning.md                  |  4 +-
 .../scheduling-framework.md                   |  2 +-
 .../administer-cluster/out-of-resource.md     | 28 +++---------
 5 files changed, 52 insertions(+), 28 deletions(-)
 create mode 100644 content/zh/docs/concepts/scheduling-eviction/eviction-policy.md

diff --git a/content/zh/docs/concepts/scheduling-eviction/eviction-policy.md b/content/zh/docs/concepts/scheduling-eviction/eviction-policy.md
new file mode 100644
index 0000000000..f7dba04ca1
--- /dev/null
+++ b/content/zh/docs/concepts/scheduling-eviction/eviction-policy.md
@@ -0,0 +1,44 @@
+---
+title: 驱逐策略
+content_template: templates/concept
+weight: 60
+---
+<!--
+title: Eviction Policy
+content_template: templates/concept
+weight: 60
+-->
+
+<!-- overview -->
+<!--
+This page is an overview of Kubernetes' policy for eviction.
+-->
+本页提供 Kubernetes 驱逐策略的概览。
+
+<!-- body -->
+
+<!--
+## Eviction Policy
+
+The {{< glossary_tooltip text="Kubelet" term_id="kubelet" >}} can proactively monitor for and prevent total starvation of a
+compute resource. In those cases, the `kubelet` can reclaim the starved
+resource by proactively failing one or more Pods. When the `kubelet` fails
+a Pod, it terminates all of its containers and transitions its `PodPhase` to `Failed`.
+If the evicted Pod is managed by a Deployment, the Deployment will create another Pod
+to be scheduled by Kubernetes.
+-->
+## 驱逐策略  {#eviction-policy}
+
+{{< glossary_tooltip text="Kubelet" term_id="kubelet" >}} 能够主动监测和防止计算资源的全面短缺。
+在资源短缺的情况下，`kubelet` 可以主动地结束一个或多个 Pod 以回收短缺的资源。
+当 `kubelet` 结束一个 Pod 时，它将终止 Pod 中的所有容器，而 Pod 的 `Phase` 将变为 `Failed`。
+如果被驱逐的 Pod 由 Deployment 管理，这个 Deployment 会创建另一个 Pod 给 Kubernetes 来调度。
+
+## {{% heading "whatsnext" %}}
+
+<!--
+- Read [Configure out of resource handling](/docs/tasks/administer-cluster/out-of-resource/) to learn more about eviction signals, thresholds, and handling.
+-->
+- 阅读[配置资源不足的处理](/zh/docs/tasks/administer-cluster/out-of-resource/)，
+  进一步了解驱逐信号、阈值以及处理方法。
+
diff --git a/content/zh/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/zh/docs/concepts/scheduling-eviction/kube-scheduler.md
index 7d0e65d619..221cfd740f 100644
--- a/content/zh/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/zh/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -5,11 +5,9 @@ weight: 50
 ---
 
 <!--
----
 title: Kubernetes Scheduler
 content_type: concept
 weight: 50
----
 -->
 <!-- overview -->
 
diff --git a/content/zh/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/zh/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index 0efa384a27..76586133bf 100644
--- a/content/zh/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/zh/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -1,14 +1,14 @@
 ---
 title: 调度器性能调优
 content_type: concept
-weight: 70
+weight: 80
 ---
 <!--
 reviewers:
 - bsalamat
 title: Scheduler Performance Tuning
 content_type: concept
-weight: 70
+weight: 80
 -->
 
 <!-- overview -->
diff --git a/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md b/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
index d62f206d76..4b3cfd6627 100644
--- a/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
+++ b/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
@@ -3,7 +3,7 @@ reviewers:
 - ahg-g
 title: 调度框架
 content_type: concept
-weight: 60
+weight: 70
 ---
 
 <!--
diff --git a/content/zh/docs/tasks/administer-cluster/out-of-resource.md b/content/zh/docs/tasks/administer-cluster/out-of-resource.md
index 69dc7ae65b..ac46f5a69f 100644
--- a/content/zh/docs/tasks/administer-cluster/out-of-resource.md
+++ b/content/zh/docs/tasks/administer-cluster/out-of-resource.md
@@ -29,24 +29,6 @@ nodes become unstable.
 
 <!-- body -->
 
-<!--
-## Eviction Policy
-
-The `kubelet` can proactively monitor for and prevent total starvation of a
-compute resource. In those cases, the `kubelet` can reclaim the starved
-resource by proactively failing one or more Pods. When the `kubelet` fails
-a Pod, it terminates all of its containers and transitions its `PodPhase` to `Failed`.
-
-If the evicted Pod is managed by a Deployment, the Deployment will create another Pod 
-to be scheduled by Kubernetes.
--->
-## 驱逐策略
-
-`kubelet` 能够主动监测和防止计算资源的全面短缺。
-在那种情况下，`kubelet` 可以主动地结束一个或多个 Pod 以回收短缺的资源。
-当 `kubelet` 结束一个 Pod 时，它将终止 Pod 中的所有容器，而 Pod 的 `PodPhase` 将变为 `Failed`。
-
-如果被驱逐的 Pod 由 Deployment 管理，这个 Deployment 会创建另一个 Pod 给 Kubernetes 来调度。
 
 <!--
 ### Eviction Signals
@@ -61,16 +43,16 @@ the `kubelet` summary API.
 每个信号的值在 description 列描述，基于 `kubelet` 摘要 API。
 
 <!--
-| Eviction Signal  | Description                                                                     |
-|----------------------------|-----------------------------------------------------------------------|
+| Eviction Signal            | Description                                                         |
+|----------------------------|---------------------------------------------------------------------|
 | `memory.available` | `memory.available` := `node.status.capacity[memory]` - `node.stats.memory.workingSet` |
 | `nodefs.available` | `nodefs.available` := `node.stats.fs.available` |
 | `nodefs.inodesFree` | `nodefs.inodesFree` := `node.stats.fs.inodesFree` |
 | `imagefs.available` | `imagefs.available` := `node.stats.runtime.imagefs.available` |
 | `imagefs.inodesFree` | `imagefs.inodesFree` := `node.stats.runtime.imagefs.inodesFree` |
 -->
-| 驱逐信号  | 描述                                                                     |
-|----------------------------|-----------------------------------------------------------------------|
+| 驱逐信号                   | 描述                                                                |
+|----------------------------|---------------------------------------------------------------------|
 | `memory.available` | `memory.available` := `node.status.capacity[memory]` - `node.stats.memory.workingSet` |
 | `nodefs.available` | `nodefs.available` := `node.stats.fs.available` |
 | `nodefs.inodesFree` | `nodefs.inodesFree` := `node.stats.fs.inodesFree` |
@@ -131,7 +113,7 @@ support in favor of eviction in response to disk pressure.
 -->
 `imagefs` 可选。`kubelet` 使用 cAdvisor 自动发现这些文件系统。
 `kubelet` 不关心其它文件系统。当前不支持配置任何其它类型。
-例如，在专用 `filesytem` 中存储卷和日志是不可以的。
+例如，在专用 `filesytem` 中存储卷和日志是 _不可以_ 的。
 
 在将来的发布中，`kubelet`将废除当前存在的
 [垃圾回收](/zh/docs/concepts/cluster-administration/kubelet-garbage-collection/)

From c43613b8cf63cece923d1fecb622ec7ae3a86d0a Mon Sep 17 00:00:00 2001
From: RA489 <rohit.anand@india.nec.com>
Date: Thu, 20 Aug 2020 11:16:37 +0530
Subject: [PATCH 248/496] containerd config improvement

---
 .../setup/production-environment/container-runtimes.md     | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index c22dd0be85..6feb1be1a5 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -445,7 +445,12 @@ systemctl restart containerd
 
 ### systemd
 
-To use the `systemd` cgroup driver, set `plugins.cri.systemd_cgroup = true` in `/etc/containerd/config.toml`.
+To use the `systemd` cgroup driver in `/etc/containerd/config.toml` set
+
+```
+[plugins.cri]
+systemd_cgroup = true
+```
 When using kubeadm, manually configure the
 [cgroup driver for kubelet](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)
 

From 00abf7a80f3a97f87254b60f2108f82e57094f4b Mon Sep 17 00:00:00 2001
From: Tom Boettger <t.boettger@live.de>
Date: Tue, 8 Sep 2020 12:37:51 +0200
Subject: [PATCH 249/496] Fix false Object in persistentVolumeClaim explanation

The persistentVolumeClaim explanation was contradictory. I've changed it, since PersistentVolumeClaims are an abstraction layer for PersistentVolumes, which in turn "capture[..] the details of the implementation of the storage".
---
 content/en/docs/concepts/storage/volumes.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/storage/volumes.md b/content/en/docs/concepts/storage/volumes.md
index 1793a7a5f8..19d491b1b3 100644
--- a/content/en/docs/concepts/storage/volumes.md
+++ b/content/en/docs/concepts/storage/volumes.md
@@ -756,8 +756,8 @@ See the [NFS example](https://github.com/kubernetes/examples/tree/{{< param "git
 ### persistentVolumeClaim {#persistentvolumeclaim}
 
 A `persistentVolumeClaim` volume is used to mount a
-[PersistentVolume](/docs/concepts/storage/persistent-volumes/) into a Pod.  PersistentVolumes are a
-way for users to "claim" durable storage (such as a GCE PersistentDisk or an
+[PersistentVolume](/docs/concepts/storage/persistent-volumes/) into a Pod. PersistentVolumeClaims
+are a way for users to "claim" durable storage (such as a GCE PersistentDisk or an
 iSCSI volume) without knowing the details of the particular cloud environment.
 
 See the [PersistentVolumes example](/docs/concepts/storage/persistent-volumes/) for more

From 321342b3f0a2481f0ac527f15525b01a80e548cf Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Fri, 28 Aug 2020 19:25:10 +0800
Subject: [PATCH 250/496] Fix nits in CRD task

---
 .../custom-resource-definitions.md            | 105 ++++++++++--------
 1 file changed, 57 insertions(+), 48 deletions(-)

diff --git a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
index f9333b01c5..3b51469e56 100644
--- a/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
+++ b/content/en/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -150,7 +150,7 @@ kubectl get ct -o yaml
 ```
 
 You should see that it contains the custom `cronSpec` and `image` fields
-from the yaml you used to create it:
+from the YAML you used to create it:
 
 ```yaml
 apiVersion: v1
@@ -174,7 +174,7 @@ metadata:
 
 ## Delete a CustomResourceDefinition
 
-When you delete a CustomResourceDefinition, the server will uninstall the RESTful API  endpoint
+When you delete a CustomResourceDefinition, the server will uninstall the RESTful API endpoint
 and delete all custom objects stored in it.
 
 ```shell
@@ -190,11 +190,17 @@ If you later recreate the same CustomResourceDefinition, it will start out empty
 
 ## Specifying a structural schema
 
-CustomResources store structured data in custom fiels (alongside the built-in fields `apiVersion`, `kind` and `metadata`, which the API server validates implicitly). With [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) a schema can be specified, which is validated during creation and updates, compare below for details and limits of such a schema.
+CustomResources store structured data in custom fields (alongside the built-in
+fields `apiVersion`, `kind` and `metadata`, which the API server validates
+implicitly). With [OpenAPI v3.0 validation](#validation) a schema can be
+specified, which is validated during creation and updates, compare below for
+details and limits of such a schema.
 
-With `apiextensions.k8s.io/v1` the definition of a structural schema is mandatory for CustomResourceDefinitions (in the beta version of CustomResourceDefinition, structural schemas were optional).
+With `apiextensions.k8s.io/v1` the definition of a structural schema is
+mandatory for CustomResourceDefinitions. In the beta version of
+CustomResourceDefinition, the structural schema was optional.
 
-A structural schema is an [OpenAPI v3.0 validation schema](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) which:
+A structural schema is an [OpenAPI v3.0 validation schema](#validation) which:
 
 1. specifies a non-empty type (via `type` in OpenAPI) for the root, for each specified field of an object node (via `properties` or `additionalProperties` in OpenAPI) and for each item in an array node (via `items` in OpenAPI), with the exception of:
    * a node with `x-kubernetes-int-or-string: true`
@@ -274,7 +280,7 @@ is not a structural schema because of the following violations:
 * `bar` inside of `anyOf` is not specified outside (rule 2).
 * `bar`'s `type` is within `anyOf` (rule 3).
 * the description is set within `anyOf` (rule 3).
-* `metadata.finalizer` might not be restricted (rule 4).
+* `metadata.finalizers` might not be restricted (rule 4).
 
 In contrast, the following, corresponding schema is structural:
 ```yaml
@@ -308,7 +314,7 @@ CustomResourceDefinitions store validated resource data in the cluster's persist
 {{< note >}}
 CRDs converted from `apiextensions.k8s.io/v1beta1` to `apiextensions.k8s.io/v1` might lack structural schemas, and `spec.preserveUnknownFields` might be `true`.
 
-For migrated CustomResourceDefinitions where `spec.preserveUnknownFields` is set, pruning is _not_ enabled and you can store arbitrary data. For best compatibility, you should update customer resources to meet an OpenAPI schema, and you should set `spec.preserveUnknownFields` true for the CustomResourceDefinition itself.
+For migrated CustomResourceDefinitions where `spec.preserveUnknownFields` is set, pruning is _not_ enabled and you can store arbitrary data. For best compatibility, you should update your custom resources to meet an OpenAPI schema, and you should set `spec.preserveUnknownFields` to true for the CustomResourceDefinition itself.
 {{< /note >}}
 
 If you save the following YAML to `my-crontab.yaml`:
@@ -350,12 +356,12 @@ spec:
 Notice that the field `someRandomField` was pruned.
 
 This example turned off client-side validation to demonstrate the API server's behavior, by adding the `--validate=false` command line option.
-Because the [OpenAPI validation schemas are also published](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#publish-validation-schema-in-openapi-v2)
+Because the [OpenAPI validation schemas are also published](#publish-validation-schema-in-openapi-v2)
 to clients, `kubectl` also checks for unknown fields and rejects those objects well before they would be sent to the API server.
 
 #### Controlling pruning
 
-By default, all unspecified fields for a custom resource, across all versions, are pruned. It is possible though to opt-out of that for specifc sub-trees fof fields by adding `x-kubernetes-preserve-unknown-fields: true` in the [structural OpenAPI v3 validation schema](#specifying-a-structural-schema).  
+By default, all unspecified fields for a custom resource, across all versions, are pruned. It is possible though to opt-out of that for specifc sub-trees of fields by adding `x-kubernetes-preserve-unknown-fields: true` in the [structural OpenAPI v3 validation schema](#specifying-a-structural-schema).  
 For example:
 
 ```yaml
@@ -458,7 +464,7 @@ allOf:
 
 With one of those specification, both an integer and a string validate.
 
-In [Validation Schema Publishing](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#publish-validation-schema-in-openapi-v2),
+In [Validation Schema Publishing](#publish-validation-schema-in-openapi-v2),
 `x-kubernetes-int-or-string: true` is unfolded to one of the two patterns shown above.
 
 ### RawExtension
@@ -520,7 +526,7 @@ of a resource is not possible while they exist.
 
 The first delete request on an object with finalizers sets a value for the
 `metadata.deletionTimestamp` field but does not delete it. Once this value is set,
-entries in the `finalizer` list can only be removed.
+entries in the `finalizers` list can only be removed.
 
 When the `metadata.deletionTimestamp` field is set, controllers watching the object
 execute any finalizers they handle, by polling update requests for that
@@ -537,7 +543,9 @@ meaning all finalizers have been executed.
 ### Validation
 
 Custom resources are validated via
-[OpenAPI v3 schemas](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#schemaObject) and you can add additional validation using [admission webhooks](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook).
+[OpenAPI v3 schemas](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#schemaObject)
+and you can add additional validation using
+[admission webhooks](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook).
 
 Additionally, the following restrictions are applied to the schema:
 
@@ -552,17 +560,18 @@ Additionally, the following restrictions are applied to the schema:
   - `writeOnly`,
   - `xml`,
   - `$ref`.
-- The field `uniqueItems` cannot be set to _true_.
-- The field `additionalProperties` cannot be set to _false_.
+- The field `uniqueItems` cannot be set to `true`.
+- The field `additionalProperties` cannot be set to `false`.
 - The field `additionalProperties` is mutually exclusive with `properties`.
 
-These fields can only be set with specific features enabled:
+The `default` field can be set when the [Defaulting feature](#defaulting) is enabled,
+which is the case with `apiextensions.k8s.io/v1` CustomResourceDefinitions. 
+Defaulting is in GA since 1.17 (beta since 1.16 with the `CustomResourceDefaulting`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
+enabled, which is the case automatically for many clusters for beta features).
 
-You can also use [Validation Schema Defaulting](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#defaulting) to apply default values.
-
-{{< note >}}
-Compare with [structural schemas](#specifying-a-structural-schema) for further restriction required for certain CustomResourceDefinition features.
-{{< /note >}}
+Refer to the [structural schemas](#specifying-a-structural-schema) section for other
+restrictions and CustomResourceDefinition features.
 
 The schema is defined in the CustomResourceDefinition. In the following example, the
 CustomResourceDefinition applies the following validations on the custom object:
@@ -756,7 +765,7 @@ Default values for `metadata` fields of `x-kubernetes-embedded-resources: true`
 
 ### Publish Validation Schema in OpenAPI v2
 
-CustomResourceDefinition [OpenAPI v3 validation schemas](#validation) which are [structural](#specifying-a-structural-schema) and [enable pruning](#preserving-unknown-fields) are published as part of the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions) from Kubernetes API server.
+CustomResourceDefinition [OpenAPI v3 validation schemas](#validation) which are [structural](#specifying-a-structural-schema) and [enable pruning](#field-pruning) are published as part of the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions) from Kubernetes API server.
 
 The [kubectl](/docs/reference/kubectl/overview) command-line tool consumes the published schema to perform client-side validation (`kubectl create` and `kubectl apply`), schema explanation (`kubectl explain`) on custom resources. The published schema can be consumed for other purposes as well, like client generation or documentation.
 
@@ -853,7 +862,7 @@ The `NAME` column is implicit and does not need to be defined in the CustomResou
 
 #### Priority
 
-Each column includes a `priority` field for each column. Currently, the priority
+Each column includes a `priority` field. Currently, the priority
 differentiates between columns shown in standard view or wide view (using the `-o wide` flag).
 
 - Columns with priority `0` are shown in standard view.
@@ -866,7 +875,7 @@ A column's `type` field can be any of the following (compare [OpenAPI v3 data ty
 - `integer` – non-floating-point numbers
 - `number` – floating point numbers
 - `string` – strings
-- `boolean` – true or false
+- `boolean` – `true` or `false`
 - `date` – rendered differentially as time since this timestamp.
 
 If the value inside a CustomResource does not match the type specified for the column,
@@ -906,42 +915,42 @@ When the status subresource is enabled, the `/status` subresource for the custom
 - The `.metadata.generation` value is incremented for all changes, except for changes to `.metadata` or `.status`.
 - Only the following constructs are allowed at the root of the CRD OpenAPI validation schema:
 
-  - Description
-  - Example
-  - ExclusiveMaximum
-  - ExclusiveMinimum
-  - ExternalDocs
-  - Format
-  - Items
-  - Maximum
-  - MaxItems
-  - MaxLength
-  - Minimum
-  - MinItems
-  - MinLength
-  - MultipleOf
-  - Pattern
-  - Properties
-  - Required
-  - Title
-  - Type
-  - UniqueItems
+  - `description`
+  - `example`
+  - `exclusiveMaximum`
+  - `exclusiveMinimum`
+  - `externalDocs`
+  - `format`
+  - `items`
+  - `maximum`
+  - `maxItems`
+  - `maxLength`
+  - `minimum`
+  - `minItems`
+  - `minLength`
+  - `multipleOf`
+  - `pattern`
+  - `properties`
+  - `required`
+  - `title`
+  - `type`
+  - `uniqueItems`
 
 #### Scale subresource
 
 When the scale subresource is enabled, the `/scale` subresource for the custom resource is exposed.
 The `autoscaling/v1.Scale` object is sent as the payload for `/scale`.
 
-To enable the scale subresource, the following values are defined in the CustomResourceDefinition.
+To enable the scale subresource, the following fields are defined in the CustomResourceDefinition.
 
-- `SpecReplicasPath` defines the JSONPath inside of a custom resource that corresponds to `Scale.Spec.Replicas`.
+- `specReplicasPath` defines the JSONPath inside of a custom resource that corresponds to `scale.spec.replicas`.
 
   - It is a required value.
   - Only JSONPaths under `.spec` and with the dot notation are allowed.
-  - If there is no value under the `SpecReplicasPath` in the custom resource,
+  - If there is no value under the `specReplicasPath` in the custom resource,
 the `/scale` subresource will return an error on GET.
 
-- `StatusReplicasPath` defines the JSONPath inside of a custom resource that corresponds to `Scale.Status.Replicas`.
+- `statusReplicasPath` defines the JSONPath inside of a custom resource that corresponds to `scale.status.replicas`.
 
   - It is a required value.
   - Only JSONPaths under `.status` and with the dot notation are allowed.
@@ -1141,7 +1150,7 @@ and create it:
 kubectl apply -f my-crontab.yaml
 ```
 
-You can specify the category using `kubectl get`:
+You can specify the category when using `kubectl get`:
 
 ```
 kubectl get all

From 939a3896d22198087b4fd82292fa0ce889b1060b Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Tue, 8 Sep 2020 18:39:18 +0700
Subject: [PATCH 251/496] [id] Fix HorizontalPodAutoscaler path and typo

---
 ...l-pod-autoscaler.md => horizontal-pod-autoscale.md} | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)
 rename content/id/docs/tasks/run-application/{horizontal-pod-autoscaler.md => horizontal-pod-autoscale.md} (98%)

diff --git a/content/id/docs/tasks/run-application/horizontal-pod-autoscaler.md b/content/id/docs/tasks/run-application/horizontal-pod-autoscale.md
similarity index 98%
rename from content/id/docs/tasks/run-application/horizontal-pod-autoscaler.md
rename to content/id/docs/tasks/run-application/horizontal-pod-autoscale.md
index c4ed16413f..1ae40d2090 100644
--- a/content/id/docs/tasks/run-application/horizontal-pod-autoscaler.md
+++ b/content/id/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -251,16 +251,8 @@ digunakan oleh HorizontalPodAutoscaler dan anotasi sebelumnya untuk menentukan m
 
 Kubernetes versi 1.6 menambah dukungan untuk menggunakan metrik khusus pada HorizontalPodAutoscaler.
 Kamu dapat menambahkan metrik khusus untuk HorizontalPodAutoscaler pada API versi `autoscaling/v2beta2`.
-Kubernetes kemudian memanggil API metrik khusu untuk mengambil nilai dari metrik khusus. 
-	
-@girikuncoro
-girikuncoro 4 days ago Contributor
-
-typo
-Suggested change
-Kubernetes kemudian memanggil API metrik khusu untuk mengambil nilai dari metrik khusus. 
 Kubernetes kemudian memanggil API metrik khusus untuk mengambil nilai dari metrik khusus. 
-@ecojuntak
+
 
 Lihat [Dukungan untuk API metrik](#dukungan-untuk-api-metrik) untuk kubutuhannya.
 

From d12b6a6715c4499a1a25c14ddb008b25934abe7f Mon Sep 17 00:00:00 2001
From: Lars Helmuth Probst <larsprobst@ibm.com>
Date: Tue, 8 Sep 2020 14:26:09 +0200
Subject: [PATCH 252/496] Updating readme files to use the right make functions
 for build and serve

---
 README-de.md | 4 ++--
 README-es.md | 4 ++--
 README-fr.md | 4 ++--
 README-hi.md | 4 ++--
 README-id.md | 4 ++--
 README-it.md | 4 ++--
 README-ko.md | 4 ++--
 README-pl.md | 4 ++--
 README-pt.md | 4 ++--
 README-vi.md | 4 ++--
 10 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/README-de.md b/README-de.md
index bf647d828f..9efc1fb597 100644
--- a/README-de.md
+++ b/README-de.md
@@ -40,13 +40,13 @@ Um die Kubernetes-Website lokal laufen zu lassen, empfiehlt es sich, ein speziel
 Wenn Sie Docker [installiert](https://www.docker.com/get-started) haben, erstellen Sie das Docker-Image `kubernetes-hugo` lokal:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Nachdem das Image erstellt wurde, können Sie die Site lokal ausführen:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Öffnen Sie Ihren Browser unter http://localhost:1313, um die Site anzuzeigen. Wenn Sie Änderungen an den Quelldateien vornehmen, aktualisiert Hugo die Site und erzwingt eine Browseraktualisierung.
diff --git a/README-es.md b/README-es.md
index ba2f13a80f..cc4a6cefa0 100644
--- a/README-es.md
+++ b/README-es.md
@@ -33,13 +33,13 @@ El método recomendado para levantar una copia local del sitio web kubernetes.io
 Una vez tenga Docker [configurado en su máquina](https://www.docker.com/get-started), puede construir la imagen de Docker `kubernetes-hugo` localmente ejecutando el siguiente comando en la raíz del repositorio:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Una vez tenga la imagen construida, puede levantar el sitio web ejecutando:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Abra su navegador y visite http://localhost:1313 para acceder a su copia local del sitio. A medida que vaya haciendo cambios en el código fuente, Hugo irá actualizando la página y forzará la actualización en el navegador.
diff --git a/README-fr.md b/README-fr.md
index b493ea60f0..7129c6b78b 100644
--- a/README-fr.md
+++ b/README-fr.md
@@ -38,13 +38,13 @@ La façon recommandée d'exécuter le site web Kubernetes localement est d'utili
 Si vous avez Docker [up and running](https://www.docker.com/get-started), construisez l'image Docker `kubernetes-hugo' localement:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Une fois l'image construite, vous pouvez exécuter le site localement :
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Ouvrez votre navigateur à l'adresse: http://localhost:1313 pour voir le site.
diff --git a/README-hi.md b/README-hi.md
index e572cfc738..649ece0e55 100644
--- a/README-hi.md
+++ b/README-hi.md
@@ -41,13 +41,13 @@
 यदि आप [डॉकर](https://www.docker.com/get-started) चला रहे हैं, तो स्थानीय रूप से `कुबेरनेट्स-ह्यूगो` Docker image बनाएँ:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 एक बार image बन जाने के बाद, आप साइट को स्थानीय रूप से चला सकते हैं:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 साइट देखने के लिए अपने browser को `http://localhost:1313` पर खोलें। जैसा कि आप source फ़ाइलों में परिवर्तन करते हैं, Hugo साइट को अपडेट करता है और browser को refresh करने पर मजबूर करता है।
diff --git a/README-id.md b/README-id.md
index 1d6b830f2e..5685e72ab9 100644
--- a/README-id.md
+++ b/README-id.md
@@ -30,13 +30,13 @@ Petunjuk yang disarankan untuk menjalankan Dokumentasi Kubernetes pada mesin lok
 Jika kamu sudah memiliki **Docker** [yang sudah dapat digunakan](https://www.docker.com/get-started), kamu dapat melakukan **build** `kubernetes-hugo` **Docker image** secara lokal:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Setelah **image** berhasil di-**build**, kamu dapat menjalankan website tersebut pada mesin lokal-mu:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Buka **browser** kamu ke http://localhost:1313 untuk melihat laman dokumentasi. Selama kamu melakukan penambahan konten, **Hugo** akan secara otomatis melakukan perubahan terhadap laman dokumentasi apabila **browser** melakukan proses **refresh**.
diff --git a/README-it.md b/README-it.md
index 5530a673e5..7002aef9ee 100644
--- a/README-it.md
+++ b/README-it.md
@@ -30,13 +30,13 @@ Il modo consigliato per eseguire localmente il sito Web Kubernetes prevede l'uti
 Se hai Docker [attivo e funzionante](https://www.docker.com/get-started), crea l'immagine Docker `kubernetes-hugo` localmente:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Dopo aver creato l'immagine, è possibile eseguire il sito Web localmente:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Apri il tuo browser su http://localhost:1313 per visualizzare il sito Web. Mentre modifichi i file sorgenti, Hugo aggiorna automaticamente il sito Web e forza un aggiornamento della pagina visualizzata nel browser.
diff --git a/README-ko.md b/README-ko.md
index f0b13168e3..f5b549439a 100644
--- a/README-ko.md
+++ b/README-ko.md
@@ -41,13 +41,13 @@
 도커 [동작 및 실행](https://www.docker.com/get-started) 환경이 있는 경우, 로컬에서 `kubernetes-hugo` 도커 이미지를 빌드 합니다:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 해당 이미지가 빌드 된 이후, 사이트를 로컬에서 실행할 수 있습니다:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 브라우저에서 http://localhost:1313 를 열어 사이트를 살펴봅니다. 소스 파일에 변경 사항이 있을 때, Hugo는 사이트를 업데이트하고 브라우저를 강제로 새로고침합니다.
diff --git a/README-pl.md b/README-pl.md
index f8bffdb0b2..166bc5ef4e 100644
--- a/README-pl.md
+++ b/README-pl.md
@@ -49,13 +49,13 @@ choco install make
 Jeśli [zainstalowałeś i uruchomiłeś](https://www.docker.com/get-started) już Dockera, zbuduj obraz `kubernetes-hugo` lokalnie:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Po zbudowaniu obrazu, możesz uruchomić serwis lokalnie:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Aby obejrzeć zawartość serwisu otwórz w przeglądarce adres http://localhost:1313. Po każdej zmianie plików źródłowych, Hugo automatycznie aktualizuje stronę i odświeża jej widok w przeglądarce.
diff --git a/README-pt.md b/README-pt.md
index 8ce121a792..3154b77bab 100644
--- a/README-pt.md
+++ b/README-pt.md
@@ -35,13 +35,13 @@ A maneira recomendada de executar o site do Kubernetes localmente é executar um
 Se você tiver o Docker [em funcionamento](https://www.docker.com/get-started), crie a imagem do Docker do `kubernetes-hugo` localmente:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Depois que a imagem foi criada, você pode executar o site localmente:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Abra seu navegador para http://localhost:1313 para visualizar o site. Conforme você faz alterações nos arquivos de origem, Hugo atualiza o site e força a atualização do navegador.
diff --git a/README-vi.md b/README-vi.md
index b06b6df368..3a1ee99195 100644
--- a/README-vi.md
+++ b/README-vi.md
@@ -31,13 +31,13 @@ Cách được đề xuất để chạy trang web Kubernetes cục bộ là dù
 Nếu bạn có Docker đang [up và running](https://www.docker.com/get-started), build `kubernetes-hugo` Docker image cục bộ:
 
 ```bash
-make docker-image
+make container-image
 ```
 
 Khi image đã được built, bạn có thể chạy website cục bộ:
 
 ```bash
-make docker-serve
+make container-serve
 ```
 
 Mở trình duyệt và đến địa chỉ http://localhost:1313 để xem website. Khi bạn thay đổi các file nguồn, Hugo cập nhật website và buộc làm mới trình duyệt.

From 57026aa8092ac78482768c9a9553773fdc23be38 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Thu, 27 Aug 2020 22:17:26 +0800
Subject: [PATCH 253/496] [zh]
 tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md

---
 .../custom-resource-definitions.md            | 1847 +++++++++++++++++
 1 file changed, 1847 insertions(+)
 create mode 100644 content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md

diff --git a/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
new file mode 100644
index 0000000000..791f46eff0
--- /dev/null
+++ b/content/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions.md
@@ -0,0 +1,1847 @@
+---
+title: 使用 CustomResourceDefinition 扩展 Kubernetes API
+content_type: task
+min-kubernetes-server-version: 1.16
+weight: 20
+---
+<!--
+title: Extend the Kubernetes API with CustomResourceDefinitions
+reviewers:
+- deads2k
+- jpbetz
+- liggitt
+- roycaihw
+- sttts
+content_type: task
+min-kubernetes-server-version: 1.16
+weight: 20
+-->
+
+<!-- overview -->
+本页展示如何使用
+[CustomResourceDefinition](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#customresourcedefinition-v1-apiextensions-k8s-io).
+将
+[自定义资源（Custom Resource）](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
+安装到 Kubernetes API。
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+<!--
+If you are using an older version of Kubernetes that is still supported, switch to
+the documentation for that version to see advice that is relevant for your cluster.
+-->
+如果你在使用较老的、仍处于被支持范围的 Kubernetes 版本，请切换到该版本的
+文档查看对于的集群而言有用的建议。
+
+<!-- steps -->
+
+<!--
+## Create a CustomResourceDefinition
+
+When you create a new CustomResourceDefinition (CRD), the Kubernetes API Server
+creates a new RESTful resource path for each version you specify. The CRD can be
+either namespaced or cluster-scoped, as specified in the CRD's `scope` field. As
+with existing built-in objects, deleting a namespace deletes all custom objects
+in that namespace. CustomResourceDefinitions themselves are non-namespaced and
+are available to all namespaces.
+
+For example, if you save the following CustomResourceDefinition to `resourcedefinition.yaml`:
+-->
+## 创建 CustomResourceDefinition  {#create-a-customresourcedefinition}
+
+当你创建新的 CustomResourceDefinition（CRD）时，Kubernetes API 服务器会为你所
+指定的每一个版本生成一个 RESTful 的 资源路径。CRD 可以是名字空间作用域的，也可以
+是集群作用域的，取决于 CRD 的 `scope` 字段设置。和其他现有的内置对象一样，删除
+一个名字空间时，该名字空间下的所有定制对象也会被删除。CustomResourceDefinition
+本身是不受名字空间限制的，对所有名字空间可用。
+
+例如，如果你将下面的 CustomResourceDefinition 保存到 `resourcedefinition.yaml`
+文件：
+
+<!--
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  # name must match the spec fields below, and be in the form: <plural>.<group>
+  name: crontabs.stable.example.com
+spec:
+  # group name to use for REST API: /apis/<group>/<version>
+  group: stable.example.com
+  # list of versions supported by this CustomResourceDefinition
+  versions:
+    - name: v1
+      # Each version can be enabled/disabled by Served flag.
+      served: true
+      # One and only one version must be marked as the storage version.
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                cronSpec:
+                  type: string
+                image:
+                  type: string
+                replicas:
+                  type: integer
+  # either Namespaced or Cluster
+  scope: Namespaced
+  names:
+    # plural name to be used in the URL: /apis/<group>/<version>/<plural>
+    plural: crontabs
+    # singular name to be used as an alias on the CLI and for display
+    singular: crontab
+    # kind is normally the CamelCased singular type. Your resource manifests use this.
+    kind: CronTab
+    # shortNames allow shorter string to match your resource on the CLI
+    shortNames:
+    - ct
+```
+-->
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  # 名字必需与下面的 spec 字段匹配，并且格式为 '<名称的复数形式>.<组名>'
+  name: crontabs.stable.example.com
+spec:
+  # 组名称，用于 REST API: /apis/<组>/<版本>
+  group: stable.example.com
+  # 列举此 CustomResourceDefinition 所支持的版本
+  versions:
+    - name: v1
+      # 每个版本都可以通过 served 标志来独立启用或禁止
+      served: true
+      # 其中一个且只有一个版本必需被标记为存储版本
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                cronSpec:
+                  type: string
+                image:
+                  type: string
+                replicas:
+                  type: integer
+  # 可以是 Namespaced 或 Cluster
+  scope: Namespaced
+  names:
+    # 名称的复数形式，用于 URL：/apis/<组>/<版本>/<名称的复数形式>
+    plural: crontabs
+    # 名称的单数形式，作为命令行使用时和显示时的别名
+    singular: crontab
+    # kind 通常是单数形式的驼峰编码（CamelCased）形式。你的资源清单会使用这一形式。
+    kind: CronTab
+    # shortNames 允许你在命令行使用较短的字符串来匹配资源
+    shortNames:
+    - ct
+```
+
+<!--
+and create it:
+-->
+之后创建它：
+
+```shell
+kubectl apply -f resourcedefinition.yaml
+```
+
+<!--
+Then a new namespaced RESTful API endpoint is created at:
+-->
+这样一个新的受名字空间约束的 RESTful API 端点会被创建在：
+
+```
+/apis/stable.example.com/v1/namespaces/*/crontabs/...
+```
+
+<!--
+This endpoint URL can then be used to create and manage custom objects.
+The `kind` of these objects will be `CronTab` from the spec of the
+CustomResourceDefinition object you created above.
+
+It might take a few seconds for the endpoint to be created.
+You can watch the `Established` condition of your CustomResourceDefinition
+to be true or watch the discovery information of the API server for your
+resource to show up.
+-->
+此端点 URL 自此可以用来创建和管理定制对象。对象的 `kind` 将是来自你上面创建时
+所用的 spec 中指定的 `CronTab`。
+
+创建端点的操作可能需要几秒钟。你可以监测你的 CustomResourceDefinition 的
+`Established` 状况变为 true，或者监测 API 服务器的发现信息等待你的资源出现在
+那里。
+
+<!--
+## Create custom objects
+
+After the CustomResourceDefinition object has been created, you can create
+custom objects. Custom objects can contain custom fields. These fields can
+contain arbitrary JSON.
+In the following example, the `cronSpec` and `image` custom fields are set in a
+custom object of kind `CronTab`.  The kind `CronTab` comes from the spec of the
+CustomResourceDefinition object you created above.
+
+If you save the following YAML to `my-crontab.yaml`:
+-->
+## 创建定制对象   {#create-custom-objects}
+
+在创建了 CustomResourceDefinition 对象之后，你可以创建定制对象（Custom
+Objects）。定制对象可以包含定制字段。这些字段可以包含任意的 JSON 数据。
+在下面的例子中，在类别为 `CrontTab` 的定制对象中，设置了`cronSpec` 和 `image`
+定制字段。类别 `CronTab` 来自你在上面所创建的 CRD 的规约。
+
+如果你将下面的 YAML 保存到 `my-crontab.yaml`：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "* * * * */5"
+  image: my-awesome-cron-image
+```
+
+<!--
+and create it:
+-->
+并执行创建命令：
+
+```shell
+kubectl apply -f my-crontab.yaml
+```
+
+<!--
+You can then manage your CronTab objects using kubectl. For example:
+-->
+你就可以使用 kubectl 来管理你的 CronTab 对象了。例如：
+
+```shell
+kubectl get crontab
+```
+
+<!--
+Should print a list like this:
+-->
+应该会输出如下列表：
+
+```none
+NAME                 AGE
+my-new-cron-object   6s
+```
+
+<!--
+Resource names are not case-sensitive when using kubectl, and you can use either
+the singular or plural forms defined in the CRD, as well as any short names.
+
+You can also view the raw YAML data:
+-->
+使用 kubectl 时，资源名称是大小写不敏感的，而且你既可以使用 CRD 中所定义的单数
+形式或复数形式，也可以使用其短名称：
+
+```shell
+kubectl get ct -o yaml
+```
+
+<!--
+You should see that it contains the custom `cronSpec` and `image` fields
+from the yaml you used to create it:
+-->
+你可以看到输出中包含了你创建定制对象时在 YAML 文件中指定的定制字段 `cronSpec`
+和 `image`：
+
+```yaml
+apiVersion: v1
+kind: List
+items:
+- apiVersion: stable.example.com/v1
+  kind: CronTab
+  metadata:
+    creationTimestamp: 2017-05-31T12:56:35Z
+    generation: 1
+    name: my-new-cron-object
+    namespace: default
+    resourceVersion: "285"
+    uid: 9423255b-4600-11e7-af6a-28d2447dc82b
+  spec:
+    cronSpec: '* * * * */5'
+    image: my-awesome-cron-image
+metadata:
+  resourceVersion: ""
+```
+
+<!--
+## Delete a CustomResourceDefinition
+
+When you delete a CustomResourceDefinition, the server will uninstall the RESTful API  endpoint
+and delete all custom objects stored in it.
+-->
+## 删除 CustomResourceDefinition    {#delete-a-customresourcedefinition}
+
+当你删除某 CustomResourceDefinition 时，服务器会卸载其 RESTful API
+端点，并删除服务器上存储的所有定制对象。
+
+```shell
+kubectl delete -f resourcedefinition.yaml
+kubectl get crontabs
+```
+
+```none
+Error from server (NotFound): Unable to list {"stable.example.com" "v1" "crontabs"}: the server could not find the requested resource (get crontabs.stable.example.com)
+```
+
+<!--
+If you later recreate the same CustomResourceDefinition, it will start out empty.
+-->
+如果你在以后创建相同的 CustomResourceDefinition 时，该 CRD 会一个空的结构。
+
+<!--
+## Specifying a structural schema
+
+CustomResources store structured data in custom fiels (alongside the built-in fields `apiVersion`, `kind` and `metadata`, which the API server validates implicitly). With [OpenAPI v3.0 validation](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) a schema can be specified, which is validated during creation and updates, compare below for details and limits of such a schema.
+
+With `apiextensions.k8s.io/v1` the definition of a structural schema is mandatory for CustomResourceDefinitions (in the beta version of CustomResourceDefinition, structural schemas were optional).
+-->
+## 设置结构化的模式   {#specifying-a-structural-schema}
+
+CustomResource 对象在定制字段中保存结构化的数据，这些字段和内置的字段
+`apiVersion`、`kind` 和 `metadata` 等一起存储，不过内置的字段都会被 API
+服务器隐式完成合法性检查。
+有了 [OpenAPI v3.0 检查](#validation)
+能力之后，你可以设置一个模式（Schema），在创建和更新定制对象时，这一模式会被用来
+对对象内容进行合法性检查。参阅下文了解这类模式的细节和局限性。
+
+在 `apiextensions.k8s.io/v1` 版本中，CustomResourceDefinition 的这一结构化模式
+定义是必需的（在 CustomResourceDefinition 的 beta
+版本中，结构化模式定义是可选的）。
+
+<!--
+A structural schema is an [OpenAPI v3.0 validation schema](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation) which:
+
+1. specifies a non-empty type (via `type` in OpenAPI) for the root, for each specified field of an object node (via `properties` or `additionalProperties` in OpenAPI) and for each item in an array node (via `items` in OpenAPI), with the exception of:
+   * a node with `x-kubernetes-int-or-string: true`
+   * a node with `x-kubernetes-preserve-unknown-fields: true`
+2. for each field in an object and each item in an array which is specified within any of `allOf`, `anyOf`, `oneOf` or `not`, the schema also specifies the field/item outside of those logical junctors (compare example 1 and 2).
+3. does not set `description`, `type`, `default`, `additionalProperties`, `nullable` within an `allOf`, `anyOf`, `oneOf` or `not`, with the exception of the two pattern for `x-kubernetes-int-or-string: true` (see below).
+4. if `metadata` is specified, then only restrictions on `metadata.name` and `metadata.generateName` are allowed.
+-->
+结构化模式本身是一个 [OpenAPI v3.0 验证模式](#validation)，其中：
+
+1. 为对象根（root）设置一个非空的 type 值（藉由 OpenAPI 中的 `type`），对每个
+   object 节点的每个字段（藉由 OpenAPI 中的 `properties` 或 `additionalProperties`）以及
+   array 节点的每个条目（藉由 OpenAPI 中的 `items`）也要设置非空的 type 值，
+   除非：
+   * 节点包含属性 `x-kubernetes-int-or-string: true`
+   * 节点包含属性 `x-kubernetes-preserve-unknown-fields: true`
+2. 对于 object 的每个字段或 array 中的每个条目，如果其定义中包含 `allOf`、`anyOf`、`oneOf`
+   或 `not`，则模式也要指定这些逻辑组合之外的字段或条目（试比较例 1 和例 2)。
+3. 在 `allOf`、`anyOf`、`oneOf` 或 `not` 上下文内不设置 `description`、`type`、`default`、
+   `additionalProperties` 或者 `nullable`。此规则的例外是
+   `x-kubernetes-int-or-string` 的两种模式（见下文）。
+4. 如果 `metadata` 被设置，则只允许对 `metadata.name` 和 `metadata.generateName` 设置约束。
+
+<!--
+Non-structural example 1:
+-->
+非结构化的例 1:
+
+```yaml
+allOf:
+- properties:
+    foo:
+      ...
+```
+
+<!--
+conflicts with rule 2. The following would be correct:
+-->
+违反了第 2 条规则。下面的是正确的：
+
+```yaml
+properties:
+  foo:
+    ...
+allOf:
+- properties:
+    foo:
+      ...
+```
+
+<!--
+Non-structural example 2:
+-->
+非结构化的例 2：
+
+```yaml
+allOf:
+- items:
+    properties:
+      foo:
+        ...
+```
+
+<!--
+conflicts with rule 2. The following would be correct:
+-->
+违反了第 2 条规则。下面的是正确的：
+
+```yaml
+items:
+  properties:
+    foo:
+      ...
+allOf:
+- items:
+    properties:
+      foo:
+        ...
+```
+
+<!--
+Non-structural example 3:
+-->
+非结构化的例 3：
+
+```yaml
+properties:
+  foo:
+    pattern: "abc"
+  metadata:
+    type: object
+    properties:
+      name:
+        type: string
+        pattern: "^a"
+      finalizers:
+        type: array
+        items:
+          type: string
+          pattern: "my-finalizer"
+anyOf:
+- properties:
+    bar:
+      type: integer
+      minimum: 42
+  required: ["bar"]
+  description: "foo bar object"
+```
+
+<!--
+is not a structural schema because of the following violations:
+
+* the type at the root is missing (rule 1).
+* the type of `foo` is missing (rule 1).
+* `bar` inside of `anyOf` is not specified outside (rule 2).
+* `bar`'s `type` is within `anyOf` (rule 3).
+* the description is set within `anyOf` (rule 3).
+* `metadata.finalizer` might not be restricted (rule 4).
+-->
+不是一个结构化的模式，因为其中存在以下违例：
+
+* 根节点缺失 type 设置（规则 1）
+* `foo` 的 type 缺失（规则 1）
+* `anyOf` 中的 `bar` 未在外部指定（规则 2）
+* `bar` 的 `type` 位于 `anyOf` 中（规则 3）
+* `anyOf` 中设置了 `description` （规则 3）
+* `metadata.finalizer` 不可以被限制 (规则 4）
+
+<!--
+In contrast, the following, corresponding schema is structural:
+-->
+作为对比，下面的 YAML 所对应的模式则是结构化的：
+
+```yaml
+type: object
+description: "foo bar object"
+properties:
+  foo:
+    type: string
+    pattern: "abc"
+  bar:
+    type: integer
+  metadata:
+    type: object
+    properties:
+      name:
+        type: string
+        pattern: "^a"
+anyOf:
+- properties:
+    bar:
+      minimum: 42
+  required: ["bar"]
+```
+
+<!--
+Violations of the structural schema rules are reported in the `NonStructural` condition in the CustomResourceDefinition.
+-->
+如果违反了结构化模式规则，CustomResourceDefinition 的 `NonStructural` 状况中
+会包含报告信息。
+
+<!--
+### Field pruning
+
+CustomResourceDefinitions store validated resource data in the cluster's persistence store, {{< glossary_tooltip term_id="etcd" text="etcd">}}. As with native Kubernetes resources such as {{< glossary_tooltip text="ConfigMap" term_id="configmap" >}}, if you specify a field that the API server does not recognize, the unknown field  is _pruned_ (removed) before being persisted.
+-->
+### 字段剪裁     {#field-pruning}
+
+CustomResourceDefinition 在集群的持久性存储
+{{< glossary_tooltip term_id="etcd" text="etcd">}}
+中保存经过合法性检查的资源数据。
+就像原生的 Kubernetes 资源，例如 {{< glossary_tooltip text="ConfigMap" term_id="configmap" >}}，
+如果你指定了 API 服务器所无法识别的字段，则该未知字段会在保存资源之前
+被 _剪裁（Pruned）_ 掉（删除）。
+
+<!--
+CRDs converted from `apiextensions.k8s.io/v1beta1` to
+`apiextensions.k8s.io/v1` might lack structural schemas, and
+`spec.preserveUnknownFields` might be `true`.
+
+For migrated CustomResourceDefinitions where `spec.preserveUnknownFields` is
+set, pruning is _not_ enabled and you can store arbitrary data. For best
+compatibility, you should update customer resources to meet an OpenAPI schema,
+and you should set `spec.preserveUnknownFields` true for the
+CustomResourceDefinition itself.
+-->
+{{< note >}}
+从 `apiextensions.k8s.io/v1beta1` 转换到 `apiextensions.k8s.io/v1` 的 CRD
+可能没有结构化的模式定义，因此其 `spec.preserveUnknownFields` 可能为 `true`。
+
+对于迁移而来的 CustomResourceDefinition，如果其 `spec.preserveUnknownFields`
+被设置为 `true`，则 Kubernetes _不会_ 执行剪裁操作，你可以存储任意数据。
+要实现最佳的兼容性，你应该更新定制资源以满足某 OpenAPI 模式定义，并且你
+应该将 CustomResourceDefinition 自身的 `spec.preserveUnknownFields` 设置为
+`true`。
+{{< /note >}}
+
+<!--
+If you save the following YAML to `my-crontab.yaml`:
+-->
+如果你将下面的 YAML 保存到 `my-crontab.yaml` 文件：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "* * * * */5"
+  image: my-awesome-cron-image
+  someRandomField: 42
+```
+
+<!--
+and create it:
+-->
+并创建之：
+
+```shell
+kubectl create --validate=false -f my-crontab.yaml -o yaml
+```
+
+<!--
+your output is similar to:
+-->
+输出类似于：
+
+```console
+apiVersion: stable.example.com/v1
+kind: CronTab
+metadata:
+  creationTimestamp: 2017-05-31T12:56:35Z
+  generation: 1
+  name: my-new-cron-object
+  namespace: default
+  resourceVersion: "285"
+  uid: 9423255b-4600-11e7-af6a-28d2447dc82b
+spec:
+  cronSpec: '* * * * */5'
+  image: my-awesome-cron-image
+```
+
+<!--
+Notice that the field `someRandomField` was pruned.
+-->
+注意其中的字段 `someRandomField` 已经被剪裁掉。
+
+<!--
+This example turned off client-side validation to demonstrate the API server's behavior, by adding the `--validate=false` command line option.
+Because the [OpenAPI validation schemas are also published](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#publish-validation-schema-in-openapi-v2)
+to clients, `kubectl` also checks for unknown fields and rejects those objects well before they would be sent to the API server.
+-->
+本例中通过 `--validate=false` 命令行选项 关闭了客户端的合法性检查以展示 API 服务器的行为，
+因为 [OpenAPI 合法性检查模式也会发布到](#publish-validation-schema-in-openapi-v2)
+客户端，`kubectl` 也会检查未知的字段并在对象被发送到 API
+服务器之前就拒绝它们。
+
+<!--
+#### Controlling pruning
+
+By default, all unspecified fields for a custom resource, across all versions, are pruned. It is possible though to opt-out of that for specifc sub-trees fof fields by adding `x-kubernetes-preserve-unknown-fields: true` in the [structural OpenAPI v3 validation schema](#specifying-a-structural-schema).  
+For example:
+-->
+#### 控制剪裁   {#controlling-pruning}
+
+默认情况下，定制资源的所有版本中的所有未规定的字段都会被剪裁掉。
+通过在 [结构化 OpenAPI v3 合法性检查模式定](#specifying-a-structural-schema)
+中为特定字段的子树添加 `x-kubernetes-preserve-unknown-fields: true` 属性，可以
+选择不对其执行剪裁操作。
+例如：
+
+```yaml
+type: object
+properties:
+  json:
+    x-kubernetes-preserve-unknown-fields: true
+```
+
+<!--
+The field `json` can store any JSON value, without anything being pruned.
+
+You can also partially specify the permitted JSON; for example:
+-->
+字段 `json` 可以保存任何 JSON 值，其中内容不会被剪裁掉。
+
+你也可以部分地指定允许的 JSON 数据格式；例如：
+
+```yaml
+type: object
+properties:
+  json:
+    x-kubernetes-preserve-unknown-fields: true
+    type: object
+    description: this is arbitrary JSON
+```
+
+<!--
+With this, only `object` type values are allowed.
+
+Pruning is enabled again for each specified property (or `additionalProperties`):
+-->
+通过这样设置，JSON 中只能设置 `object` 类型的值。
+
+对于所指定的每个属性（或 `additionalProperties`），剪裁会再次被启用。
+
+```yaml
+type: object
+properties:
+  json:
+    x-kubernetes-preserve-unknown-fields: true
+    type: object
+    properties:
+      spec:
+        type: object
+        properties:
+          foo:
+            type: string
+          bar:
+            type: string
+```
+
+<!--
+With this, the value:
+-->
+对于上述定义，如果提供的数值如下：
+
+```yaml
+json:
+  spec:
+    foo: abc
+    bar: def
+    something: x
+  status:
+    something: x
+```
+
+<!--
+is pruned to:
+-->
+则该值会被剪裁为：
+
+```yaml
+json:
+  spec:
+    foo: abc
+    bar: def
+  status:
+    something: x
+```
+
+<!--
+This means that the `something` field in the specified `spec` object is pruned, but everything outside is not.
+-->
+这意味着所指定的 `spec` 对象中的 `something` 字段被剪裁掉，而其外部的内容都被保留。
+
+<!--
+### IntOrString
+
+Nodes in a schema with `x-kubernetes-int-or-string: true` are excluded from rule 1, such that the following is structural:
+-->
+### IntOrString
+
+模式定义中标记了 `x-kubernetes-int-or-string: true` 的节点不受前述规则 1
+约束，因此下面的定义是结构化的模式：
+
+```yaml
+type: object
+properties:
+  foo:
+    x-kubernetes-int-or-string: true
+```
+
+<!--
+Also those nodes are partially excluded from rule 3 in the sense that the
+following two patterns are allowed (exactly those, without variations in order
+to additional fields):
+-->
+此外，所有这类节点也不再受规则 3 约束，也就是说，下面两种模式是被允许的
+（注意，仅限于这两种模式，不支持添加新字段的任何其他变种）：
+
+```yaml
+x-kubernetes-int-or-string: true
+anyOf:
+- type: integer
+- type: string
+...
+```
+
+和
+
+```yaml
+x-kubernetes-int-or-string: true
+allOf:
+- anyOf:
+  - type: integer
+  - type: string
+- ... # zero or more
+...
+```
+
+<!--
+With one of those specification, both an integer and a string validate.
+
+In [Validation Schema Publishing](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#publish-validation-schema-in-openapi-v2),
+`x-kubernetes-int-or-string: true` is unfolded to one of the two patterns shown above.
+-->
+在以上两种规约中，整数值和字符串值都会被认为是合法的。
+
+在[合法性检查模式定义的发布时](#publish-validation-schema-in-openapi-v2)，
+`x-kubernetes-int-or-string: true` 会被展开为上述两种模式之一。
+
+### RawExtension
+
+<!--
+RawExtensions (as in `runtime.RawExtension` defined in
+[k8s.io/apimachinery](https://github.com/kubernetes/apimachinery/blob/03ac7a9ade429d715a1a46ceaa3724c18ebae54f/pkg/runtime/types.go#L94))
+holds complete Kubernetes objects, i.e. with `apiVersion` and `kind` fields.
+
+It is possible to specify those embedded objects (both completely without constraints or partially specified) by setting `x-kubernetes-embedded-resource: true`. For example:
+-->
+RawExtensions（就像在
+[k8s.io/apimachinery](https://github.com/kubernetes/apimachinery/blob/03ac7a9ade429d715a1a46ceaa3724c18ebae54f/pkg/runtime/types.go#L94)
+项目中 `runtime.RawExtension` 所定义的那样）
+可以保存完整的 Kubernetes 对象，也就是，其中会包含 `apiVersion` 和 `kind`
+字段。
+
+通过 `x-kubernetes-embedded-resource: true` 来设定这些嵌套对象的规约（无论是
+完全无限制还是部分指定都可以）是可能的。例如：
+
+```yaml
+type: object
+properties:
+  foo:
+    x-kubernetes-embedded-resource: true
+    x-kubernetes-preserve-unknown-fields: true
+```
+
+<!--
+Here, the field `foo` holds a complete object, e.g.:
+-->
+这里，字段 `foo` 包含一个完整的对象，例如：
+
+```yaml
+foo:
+  apiVersion: v1
+  kind: Pod
+  spec:
+    ...
+```
+
+<!--
+Because `x-kubernetes-preserve-unknown-fields: true` is specified alongside,
+nothing is pruned. The use of `x-kubernetes-preserve-unknown-fields: true` is
+optional though.
+
+With `x-kubernetes-embedded-resource: true`, the `apiVersion`, `kind` and `metadata` are implicitly specified and validated.
+-->
+由于字段上设置了 `x-kubernetes-preserve-unknown-fields: true`，其中的内容不会
+被剪裁。不过，在这个语境中，`x-kubernetes-preserve-unknown-fields: true` 的
+使用是可选的。
+
+设置了 `x-kubernetes-embedded-resource: true` 之后，`apiVersion`、`kind` 和
+`metadata` 都是隐式设定并隐式完成合法性验证。
+
+<!--
+## Serving multiple versions of a CRD
+
+See [Custom resource definition versioning](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/)
+for more information about serving multiple versions of your
+CustomResourceDefinition and migrating your objects from one version to another.
+-->
+## 提供 CRD 的多个版本   {#serving-multiple-versions-of-a-crd}
+
+关于如何为你的 CustomResourceDefinition 提供多个版本的支持，以及如何将你的对象
+从一个版本迁移到另一个版本， 详细信息可参阅
+[定制资源定义的版本](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/)。
+
+<!-- discussion -->
+
+<!--
+## Advanced topics
+
+### Finalizers
+-->
+## 高级主题     {#advanced-topics}
+
+### Finalizers
+
+<!--
+*Finalizers* allow controllers to implement asynchronous pre-delete hooks.
+Custom objects support finalizers just like built-in objects.
+
+You can add a finalizer to a custom object like this:
+-->
+*Finalizer* 能够让控制器实现异步的删除前（Pre-delete）回调。
+定制对象和内置对象一样支持 Finalizer。
+
+你可以像下面一样为定制对象添加 Finalizer：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  finalizers:
+  - finalizer.stable.example.com
+```
+
+<!--
+Finalizers are arbitrary string values, that when present ensure that a hard delete
+of a resource is not possible while they exist.
+
+The first delete request on an object with finalizers sets a value for the
+`metadata.deletionTimestamp` field but does not delete it. Once this value is set,
+entries in the `finalizer` list can only be removed.
+
+When the `metadata.deletionTimestamp` field is set, controllers watching the object
+execute any finalizers they handle, by polling update requests for that
+object. When all finalizers have been executed, the resource is deleted.
+-->
+Finalizer 可以取任意的字符串值。当资源上存在 Finalizer 时，无法硬性删除该资源。
+
+对带有 Finalizer 的对象的第一个删除请求会为其 `metadata.deletionTimestamp`
+设置一个值，但不会真的删除对象。一旦此值被设置，`finalizers`
+列表中的表项只能被移除。
+
+当 `metadata.deletionTimestamp` 字段被设置时，负责监测该对象的各个控制器会通过
+轮询对该对象的更新请求来执行它们所要处理的所有 Finalizer。
+当所有 Finalizer 都被执行过，资源被删除。
+
+<!--
+The value of `metadata.deletionGracePeriodSeconds` controls the interval between
+polling updates.
+
+It is the responsibility of each controller to remove its finalizer from the list.
+
+Kubernetes only finally deletes the object if the list of finalizers is empty,
+meaning all finalizers have been executed.
+-->
+`metadata.deletionGracePeriodSeconds` 的取值控制对更新的轮询周期。
+
+每个控制器要负责将其 Finalizer 从列表中去除。
+
+只有 `finalizers` 列表为空时，意味着所有 Finalizer 都被执行过之后，
+Kubernetes 才会最终删除对象，
+
+<!--
+### Validation
+
+Custom resources are validated via
+[OpenAPI v3 schemas](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#schemaObject) and you can add additional validation using [admission webhooks](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook).
+-->
+### 合法性检查    {#validation}
+
+定制资源是通过
+[OpenAPI v3 模式定义](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#schemaObject)
+来执行合法性检查的，
+你可以通过使用[准入控制 Webhook](/zh/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook)
+来添加额外的合法性检查逻辑。
+
+<!--
+Additionally, the following restrictions are applied to the schema:
+
+- These fields cannot be set:
+  - `definitions`,
+  - `dependencies`,
+  - `deprecated`,
+  - `discriminator`,
+  - `id`,
+  - `patternProperties`,
+  - `readOnly`,
+  - `writeOnly`,
+  - `xml`,
+  - `$ref`.
+- The field `uniqueItems` cannot be set to _true_.
+- The field `additionalProperties` cannot be set to _false_.
+- The field `additionalProperties` is mutually exclusive with `properties`.
+-->
+此外，对模式定义存在以下限制：
+
+- 以下字段不可设置：
+  - `definitions`
+  - `dependencies`
+  - `deprecated`
+  - `discriminator`
+  - `id`
+  - `patternProperties`
+  - `readOnly`
+  - `writeOnly`
+  - `xml`
+  - `$ref`
+- 字段 `uniqueItems` 不可设置为 `true`
+- 字段 `additionalProperties` 不可设置为 `false`
+- 字段 `additionalProperties` 与 `properties` 互斥，不可同时使用
+
+<!--
+These fields can only be set with specific features enabled:
+
+- `default`: can be set for `apiextensions.k8s.io/v1` CustomResourceDefinitions. Defaulting is in GA since 1.17 (beta since 1.16 with the `CustomResourceDefaulting` feature gate to be enabled, which is the case automatically for many clusters for beta features). Compare [Validation Schema Defaulting](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#defaulting).
+-->
+以下字段仅可用于某些条件被满足的情况下：
+
+- `default`：可在 `apiextensions.k8s.io/v1` API 组中的 CustomResourceDefinition 的
+  模式定义中使用。设置默认值的功能特性从 1.17 开始正式发布。该特性在 1.16 版本中处于
+  Beta 状态，要求 `CustomResourceDefaulting` 特性门控被启用。对于大多数集群而言， 
+  Beta 状态的特性门控默认都是自动启用的。
+  你可以将此字段的作用与[合法性检查模式的默认值设定](#defaulting)相比较。
+
+{{< note >}}
+关于对某些 CustomResourceDefinition 特性所必需的限制，可参见
+[结构化的模式定义](#specifying-a-structural-schema)。
+{{< /note >}}
+
+<!--
+The schema is defined in the CustomResourceDefinition. In the following example, the
+CustomResourceDefinition applies the following validations on the custom object:
+
+- `spec.cronSpec` must be a string and must be of the form described by the regular expression.
+- `spec.replicas` must be an integer and must have a minimum value of 1 and a maximum value of 10.
+
+Save the CustomResourceDefinition to `resourcedefinition.yaml`:
+-->
+模式定义是在 CustomResourceDefinition 中设置的。在下面的例子中，
+CustomResourceDefinition 对定制对象执行以下合法性检查：
+
+- `spec.cronSpec` 必须是一个字符串，必须是正则表达式所描述的形式；
+- `spec.replicas` 必须是一个整数，且其最小值为 1、最大值为 10。
+
+将此 CustomResourceDefinition 保存到 `resourcedefinition.yaml` 文件中：
+
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: crontabs.stable.example.com
+spec:
+  group: stable.example.com
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        # openAPIV3Schema is the schema for validating custom objects.
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                cronSpec:
+                  type: string
+                  pattern: '^(\d+|\*)(/\d+)?(\s+(\d+|\*)(/\d+)?){4}$'
+                image:
+                  type: string
+                replicas:
+                  type: integer
+                  minimum: 1
+                  maximum: 10
+  scope: Namespaced
+  names:
+    plural: crontabs
+    singular: crontab
+    kind: CronTab
+    shortNames:
+    - ct
+```
+
+<!--
+and create it:
+-->
+并创建 CustomResourceDefinition：
+
+```shell
+kubectl apply -f resourcedefinition.yaml
+```
+
+<!--
+A request to create a custom object of kind CronTab is rejected if there are invalid values in its fields.
+In the following example, the custom object contains fields with invalid values:
+
+- `spec.cronSpec` does not match the regular expression.
+- `spec.replicas` is greater than 10.
+
+If you save the following YAML to `my-crontab.yaml`:
+-->
+对于一个创建 CronTab 类别对象的定制对象的请求而言，如果其字段中包含非法值，则
+该请求会被拒绝。
+在下面的例子中，定制对象中包含带非法值的字段：
+
+- `spec.cronSpec` 与正则表达式不匹配
+- `spec.replicas` 数值大于 10。
+
+如果你将下面的 YAML 保存到 `my-crontab.yaml`：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "* * * *"
+  image: my-awesome-cron-image
+  replicas: 15
+```
+
+<!--
+and attempt to create it:
+-->
+并尝试创建定制对象：
+
+```shell
+kubectl apply -f my-crontab.yaml
+```
+
+<!--
+then you get an error:
+-->
+你会看到下面的错误信息：
+
+```console
+The CronTab "my-new-cron-object" is invalid: []: Invalid value: map[string]interface {}{"apiVersion":"stable.example.com/v1", "kind":"CronTab", "metadata":map[string]interface {}{"name":"my-new-cron-object", "namespace":"default", "deletionTimestamp":interface {}(nil), "deletionGracePeriodSeconds":(*int64)(nil), "creationTimestamp":"2017-09-05T05:20:07Z", "uid":"e14d79e7-91f9-11e7-a598-f0761cb232d1", "clusterName":""}, "spec":map[string]interface {}{"cronSpec":"* * * *", "image":"my-awesome-cron-image", "replicas":15}}:
+validation failure list:
+spec.cronSpec in body should match '^(\d+|\*)(/\d+)?(\s+(\d+|\*)(/\d+)?){4}$'
+spec.replicas in body should be less than or equal to 10
+```
+
+<!--
+If the fields contain valid values, the object creation request is accepted.
+
+Save the following YAML to `my-crontab.yaml`:
+-->
+如果所有字段都包含合法值，则对象创建的请求会被接受。
+
+将下面的 YAML 保存到 `my-crontab.yaml` 文件：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "* * * * */5"
+  image: my-awesome-cron-image
+  replicas: 5
+```
+
+<!--
+And create it:
+-->
+并创建定制对象：
+
+```shell
+kubectl apply -f my-crontab.yaml
+crontab "my-new-cron-object" created
+```
+
+<!--
+### Defaulting
+-->
+### 设置默认值   {#efaulting}
+
+<!--
+To use defaulting, your CustomResourceDefinition must use API version `apiextensions.k8s.io/v1`.
+-->
+{{< note >}}
+要使用设置默认值功能，你的 CustomResourceDefinition 必须使用 API 版本 `apiextensions.k8s.io/v1`。
+{{< /note >}}
+
+<!--
+Defaulting allows to specify default values in the [OpenAPI v3 validation schema](#validation):
+-->
+设置默认值的功能允许在 [OpenAPI v3 合法性检查模式定义](#validation)中设置默认值：
+
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: crontabs.stable.example.com
+spec:
+  group: stable.example.com
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        # openAPIV3Schema 是用来检查定制对象的模式定义
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                cronSpec:
+                  type: string
+                  pattern: '^(\d+|\*)(/\d+)?(\s+(\d+|\*)(/\d+)?){4}$'
+                  default: "5 0 * * *"
+                image:
+                  type: string
+                replicas:
+                  type: integer
+                  minimum: 1
+                  maximum: 10
+                  default: 1
+  scope: Namespaced
+  names:
+    plural: crontabs
+    singular: crontab
+    kind: CronTab
+    shortNames:
+    - ct
+```
+
+<!--
+With this both `cronSpec` and `replicas` are defaulted:
+-->
+使用此 CRD 定义时，`cronSpec` 和 `replicas` 都会被设置默认值：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  image: my-awesome-cron-image
+```
+
+<!--
+leads to
+-->
+会生成：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "5 0 * * *"
+  image: my-awesome-cron-image
+  replicas: 1
+```
+
+<!--
+Defaulting happens on the object
+
+* in the request to the API server using the request version defaults,
+* when reading from etcd using the storage version defaults,
+* after mutating admission plugins with non-empty patches using the admission webhook object version defaults.
+
+Defaults applied when reading data from etcd are not automatically written back to etcd. An update request via the API is required to persist those defaults back into etcd.
+-->
+默认值设定的行为发生在定制对象上：
+
+* 在向 API 服务器发送的请求中，基于请求版本的设定设置默认值；
+* 在从 etcd 读取对象时，使用存储版本来设置默认值；
+* 在 Mutating 准入控制插件执行非空的补丁操作时，基于准入 Webhook 对象
+  版本设置默认值。
+
+从 etcd 中读取数据时所应用的默认值设置不会被写回到 etcd 中。
+需要通过 API 执行更新请求才能将这种方式设置的默认值写回到 etcd。
+
+<!--
+Default values must be pruned (with the exception of defaults for `metadata` fields) and must validate against a provided schema.
+
+Default values for `metadata` fields of `x-kubernetes-embedded-resources: true` nodes (or parts of a default value covering `metadata`) are not pruned during CustomResourceDefinition creation, but through the pruning step during handling of requests.
+-->
+默认值一定会被剪裁（除了 `metadata` 字段的默认值设置），且必须通过所提供
+的模式定义的检查。
+
+针对 `x-kubernetes-embedded-resource: true` 节点（或者包含 `metadata` 字段的结构的默认值）
+的 `metadata` 字段的默认值设置不会在 CustomResourceDefinition 创建时被剪裁，
+而是在处理请求的字段剪裁阶段被删除。
+
+<!--
+### Publish Validation Schema in OpenAPI v2
+
+CustomResourceDefinition [OpenAPI v3 validation schemas](#validation) which are [structural](#specifying-a-structural-schema) and [enable pruning](#preserving-unknown-fields) are published as part of the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions) from Kubernetes API server.
+
+The [kubectl](/docs/reference/kubectl/overview) command-line tool consumes the published schema to perform client-side validation (`kubectl create` and `kubectl apply`), schema explanation (`kubectl explain`) on custom resources. The published schema can be consumed for other purposes as well, like client generation or documentation.
+-->
+### 以 OpenAPI v2 形式发布合法性检查模式      {#publish-validation-schema-in-openapi-v2}
+
+CustomResourceDefinition 的[结构化的](#specifying-a-structural-schema)、
+[启用了剪裁的](#preserving-unknown-fields) [OpenAPI v3 合法性检查模式](#validation)
+会在 Kubernetes API 服务器上作为
+[OpenAPI v2 规约](/zh/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions)
+的一部分发布出来。
+
+[kubectl](/zh/docs/reference/kubectl/overview) 命令行工具会基于所发布的模式定义来执行
+客户端的合法性检查（`kubectl create` 和 `kubectl apply`），为定制资源的模式定义
+提供解释（`kubectl explain`）。
+所发布的模式还可被用于其他目的，例如生成客户端或者生成文档。
+
+<!--
+The OpenAPI v3 validation schema is converted to OpenAPI v2 schema, and
+show up in `definitions` and `paths` fields in the [OpenAPI v2 spec](/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions).
+
+The following modifications are applied during the conversion to keep backwards compatibility with
+kubectl in previous 1.13 version. These modifications prevent kubectl from being over-strict and rejecting
+valid OpenAPI schemas that it doesn't understand. The conversion won't modify the validation schema defined in CRD,
+and therefore won't affect [validation](#validation) in the API server.
+-->
+OpenAPI v3 合法性检查模式定义会被转换为 OpenAPI v2 模式定义，并出现在
+[OpenAPI v2 规范](/zh/docs/concepts/overview/kubernetes-api/#openapi-and-swagger-definitions)
+的 `definitions` 和 `paths` 字段中。
+
+在转换过程中会发生以下修改，目的是保持与 1.13 版本以前的 kubectl 工具兼容。
+这些修改可以避免 kubectl 过于严格，以至于拒绝它无法理解的 OpenAPI 模式定义。
+转换过程不会更改 CRD 中定义的合法性检查模式定义，因此不会影响到 API 服务器中
+的[合法性检查](#validation)。
+
+<!--
+1. The following fields are removed as they aren't supported by OpenAPI v2 (in future versions OpenAPI v3 will be used without these restrictions)
+   - The fields `allOf`, `anyOf`, `oneOf` and `not` are removed
+2. If `nullable: true` is set, we drop `type`, `nullable`, `items` and `properties` because OpenAPI v2 is not able to express nullable. To avoid kubectl to reject good objects, this is necessary.
+-->
+1. 以下字段会被移除，因为它们在 OpenAPI v2 中不支持（在将来版本中将使用 OpenAPI v3，
+   因而不会有这些限制）
+   - 字段 `allOf`、`anyOf`、`oneOf` 和 `not` 会被删除
+2. 如果设置了 `nullable: true`，我们会丢弃 `type`、`nullable`、`items` 和 `properties`
+   OpenAPI v2 无法表达 Nullable。为了避免 kubectl 拒绝正常的对象，这一转换是必要的。
+
+<!--
+### Additional printer columns
+
+The kubectl tool relies on server-side output formatting. Your cluster's API server decides which
+columns are shown by the `kubectl get` command. You can customize these columns for a
+CustomResourceDefinition. The following example adds the `Spec`, `Replicas`, and `Age`
+columns.
+
+Save the CustomResourceDefinition to `resourcedefinition.yaml`:
+-->
+### 额外的打印列    {#additional-printer-columns}
+
+`kubectl` 工具依赖服务器端的输出格式化。你的集群的 API 服务器决定 `kubectl
+get` 命令要显示的列有哪些。
+你可以为 CustomResourceDefinition 定制这些要打印的列。
+下面的例子添加了 `Spec`、`Replicas` 和 `Age` 列：
+
+将此 CustomResourceDefinition 保存到 `resourcedefinition.yaml` 文件：
+
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: crontabs.stable.example.com
+spec:
+  group: stable.example.com
+  scope: Namespaced
+  names:
+    plural: crontabs
+    singular: crontab
+    kind: CronTab
+    shortNames:
+    - ct
+  versions:
+  - name: v1
+    served: true
+    storage: true
+    schema:
+      openAPIV3Schema:
+        type: object
+        properties:
+          spec:
+            type: object
+            properties:
+              cronSpec:
+                type: string
+              image:
+                type: string
+              replicas:
+                type: integer
+    additionalPrinterColumns:
+    - name: Spec
+      type: string
+      description: The cron spec defining the interval a CronJob is run
+      jsonPath: .spec.cronSpec
+    - name: Replicas
+      type: integer
+      description: The number of jobs launched by the CronJob
+      jsonPath: .spec.replicas
+    - name: Age
+      type: date
+      jsonPath: .metadata.creationTimestamp
+```
+
+<!--
+Create the CustomResourceDefinition:
+-->
+创建 CustomResourceDefinition：
+
+```shell
+kubectl apply -f resourcedefinition.yaml
+```
+
+<!--
+Create an instance using the `my-crontab.yaml` from the previous section.
+-->
+使用前文中的 `my-crontab.yaml` 创建一个实例。
+
+<!--
+Invoke the server-side printing:
+-->
+启用服务器端打印输出：
+
+```shell
+kubectl get crontab my-new-cron-object
+```
+
+<!--
+Notice the `NAME`, `SPEC`, `REPLICAS`, and `AGE` columns in the output:
+-->
+注意输出中的 `NAME`、`SPEC`、`REPLICAS` 和 `AGE` 列：
+
+```
+NAME                 SPEC        REPLICAS   AGE
+my-new-cron-object   * * * * *   1          7s
+```
+
+<!--
+The `NAME` column is implicit and does not need to be defined in the CustomResourceDefinition.
+-->
+{{< note >}}
+`NAME` 列是隐含的，不需要在 CustomResourceDefinition 中定义。
+{{< /note >}}
+
+<!--
+#### Priority
+
+Each column includes a `priority` field for each column. Currently, the priority
+differentiates between columns shown in standard view or wide view (using the `-o wide` flag).
+
+- Columns with priority `0` are shown in standard view.
+- Columns with priority greater than `0` are shown only in wide view.
+-->
+#### 优先级    {#priority}
+
+每个列都包含一个 `priority` 字段。当前，优先级用来区分标准视图（Standard
+View）和宽视图（Wide View）（使用 `-o wide` 标志）中显示的列：
+
+- 优先级为 `0` 的列会在标准视图中显示。
+- 优先级大于 `0` 的列只会在宽视图中显示。
+
+<!--
+#### Type
+
+A column's `type` field can be any of the following (compare [OpenAPI v3 data types](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#dataTypes)):
+
+- `integer` – non-floating-point numbers
+- `number` – floating point numbers
+- `string` – strings
+- `boolean` – true or false
+- `date` – rendered differentially as time since this timestamp.
+-->
+#### 类型    {#type}
+
+列的 `type` 字段可以是以下值之一
+（比较 [OpenAPI v3 数据类型](https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.0.md#dataTypes)）：
+
+- `integer` – 非浮点数字
+- `number` – 浮点数字
+- `string` – 字符串
+- `boolean` – `true` 或 `false`
+- `date` – 显示为以自此时间戳以来经过的时长
+
+<!--
+If the value inside a CustomResource does not match the type specified for the column,
+the value is omitted. Use CustomResource validation to ensure that the value
+types are correct.
+-->
+如果定制资源中的值与列中指定的类型不匹配，该值会被忽略。
+你可以通过定制资源的合法性检查来确保取值类型是正确的。
+
+<!--
+#### Format
+
+A column's `format` field can be any of the following:
+-->
+#### 格式    {#format}
+
+列的 `format` 字段可以是以下值之一：
+
+- `int32`
+- `int64`
+- `float`
+- `double`
+- `byte`
+- `date`
+- `date-time`
+- `password`
+
+<!--
+The column's `format` controls the style used when `kubectl` prints the value.
+-->
+列的 `format` 字段控制 `kubectl` 打印对应取值时采用的风格。
+
+<!--
+### Subresources
+
+Custom resources support `/status` and `/scale` subresources.
+
+The status and scale subresources can be optionally enabled by
+defining them in the CustomResourceDefinition.
+-->
+### 子资源     {#subresources}
+
+定制资源支持 `/status` 和 `/scale` 子资源。
+
+通过在 CustomResourceDefinition 中定义 `status` 和 `scale`，
+可以有选择地启用这些子资源。
+
+<!--
+#### Status subresource
+
+When the status subresource is enabled, the `/status` subresource for the custom resource is exposed.
+
+- The status and the spec stanzas are represented by the `.status` and `.spec` JSONPaths respectively inside of a custom resource.
+- `PUT` requests to the `/status` subresource take a custom resource object and ignore changes to anything except the status stanza.
+- `PUT` requests to the `/status` subresource only validate the status stanza of the custom resource.
+- `PUT`/`POST`/`PATCH` requests to the custom resource ignore changes to the status stanza.
+- The `.metadata.generation` value is incremented for all changes, except for changes to `.metadata` or `.status`.
+-->
+#### Status 子资源  {#status-subresource}
+
+当启用了 status 子资源时，对应定制资源的 `/status` 子资源会被暴露出来。
+
+- status 和 spec 内容分别用定制资源内的 `.status` 和 `.spec` JSON 路径来表达；
+- 对 `/status` 子资源的 `PUT` 请求要求使用定制资源对象作为其输入，但会忽略
+  status 之外的所有内容。
+- 对 `/status` 子资源的 `PUT` 请求仅对定制资源的 status 内容进行合法性检查。
+- 对定制资源的 `PUT`、`POST`、`PATCH` 请求会忽略 status 内容的改变。
+- 对所有变更请求，除非改变是针对 `.metadata` 或 `.status`，`.metadata.generation`
+  的取值都会增加。
+<!--
+- Only the following constructs are allowed at the root of the CRD OpenAPI validation schema:
+
+  - Description
+  - Example
+  - ExclusiveMaximum
+  - ExclusiveMinimum
+  - ExternalDocs
+  - Format
+  - Items
+  - Maximum
+  - MaxItems
+  - MaxLength
+  - Minimum
+  - MinItems
+  - MinLength
+  - MultipleOf
+  - Pattern
+  - Properties
+  - Required
+  - Title
+  - Type
+  - UniqueItems
+-->
+- 在 CRD OpenAPI 合法性检查模式定义的根节点，只允许存在以下结构：
+
+  - `description`
+  - `example`
+  - `exclusiveMaximum`
+  - `exclusiveMinimum`
+  - `externalDocs`
+  - `format`
+  - `items`
+  - `maximum`
+  - `maxItems`
+  - `maxLength`
+  - `minimum`
+  - `minItems`
+  - `minLength`
+  - `multipleOf`
+  - `pattern`
+  - `properties`
+  - `required`
+  -` title`
+  - `type`
+  - `uniqueItems`
+
+<!--
+#### Scale subresource
+
+When the scale subresource is enabled, the `/scale` subresource for the custom resource is exposed.
+The `autoscaling/v1.Scale` object is sent as the payload for `/scale`.
+
+To enable the scale subresource, the following values are defined in the CustomResourceDefinition.
+-->
+#### Scale 子资源   {#scale-subresource}
+
+当启用了 scale 子资源时，定制资源的 `/scale` 子资源就被暴露出来。
+针对 `/scale` 所发送的对象是 `autoscaling/v1.Scale`。
+
+为了启用 scale 子资源，CustomResourceDefinition 定义了以下字段：
+
+<!--
+- `specReplicasPath` defines the JSONPath inside of a custom resource that corresponds to `scale.spec.replicas`.
+
+  - It is a required value.
+  - Only JSONPaths under `.spec` and with the dot notation are allowed.
+  - If there is no value under the `SpecReplicasPath` in the custom resource,
+the `/scale` subresource will return an error on GET.
+-->
+- `specReplicasPath` 指定定制资源内与 `scale.spec.replicas` 对应的 JSON 路径。
+
+  - 此字段为必需值。
+  - 只可以使用 `.spec` 下的 JSON 路径，只可使用带句点的路径。
+  - 如果定制资源的 `specReplicasPath` 下没有取值，则针对 `/scale` 子资源执行 GET
+    操作时会返回错误。
+
+<!--
+- `statusReplicasPath` defines the JSONPath inside of a custom resource that corresponds to `scale.status.replicas`.
+
+  - It is a required value.
+  - Only JSONPaths under `.status` and with the dot notation are allowed.
+  - If there is no value under the `statusReplicasPath` in the custom resource,
+the status replica value in the `/scale` subresource will default to 0.
+-->
+- `statusReplicasPath` 指定定制资源内与 `scale.status.replicas` 对应的 JSON 路径。
+
+  - 此字段为必需值。
+  - 只可以使用 `.status` 下的 JSON 路径，只可使用带句点的路径。
+  - 如果定制资源的 `statusReplicasPath` 下没有取值，则针对 `/scale` 子资源的
+    副本个数状态值默认为 0。
+
+<!--
+- `labelSelectorPath` defines the JSONPath inside of a custom resource that corresponds to `scale.status.selector`.
+
+  - It is an optional value.
+  - It must be set to work with HPA.
+  - Only JSONPaths under `.status` or `.spec` and with the dot notation are allowed.
+  - If there is no value under the `labelSelectorPath` in the custom resource,
+the status selector value in the `/scale` subresource will default to the empty string.
+  - The field pointed by this JSON path must be a string field (not a complex selector struct) which contains a serialized label selector in string form.
+-->
+- `labelSelectorPath` 指定定制资源内与 `scale.status.selector` 对应的 JSON 路径。
+
+  - 此字段为可选值。
+  - 此字段必须设置才能使用 HPA。
+  - 只可以使用 `.status` 或 `.spec` 下的 JSON 路径，只可使用带句点的路径。
+  - 如果定制资源的 `labelSelectorPath` 下没有取值，则针对 `/scale` 子资源的
+    选择算符状态值默认为空字符串。
+  - 此 JSON 路径所指向的字段必须是一个字符串字段（而不是复合的选择算符结构），
+    其中包含标签选择算符串行化的字符串形式。
+
+<!--
+In the following example, both status and scale subresources are enabled.
+
+Save the CustomResourceDefinition to `resourcedefinition.yaml`:
+-->
+在下面的例子中，`status` 和 `scale` 子资源都被启用。
+
+将此 CustomResourceDefinition 保存到 `resourcedefinition.yaml` 文件：
+
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: crontabs.stable.example.com
+spec:
+  group: stable.example.com
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                cronSpec:
+                  type: string
+                image:
+                  type: string
+                replicas:
+                  type: integer
+            status:
+              type: object
+              properties:
+                replicas:
+                  type: integer
+                labelSelector:
+                  type: string
+      # subresources 描述定制资源的子资源
+      subresources:
+        # status 启用 status 子资源
+        status: {}
+        # scale 启用 scale 子资源
+        scale:
+          # specReplicasPath 定义定制资源中对应 scale.spec.replicas 的 JSON 路径
+          specReplicasPath: .spec.replicas
+          # statusReplicasPath 定义定制资源中对应 scale.status.replicas 的 JSON 路径 
+          statusReplicasPath: .status.replicas
+          # labelSelectorPath  定义定制资源中对应 scale.status.selector 的 JSON 路径 
+          labelSelectorPath: .status.labelSelector
+  scope: Namespaced
+  names:
+    plural: crontabs
+    singular: crontab
+    kind: CronTab
+    shortNames:
+    - ct
+```
+
+<!--
+And create it:
+-->
+之后创建此 CustomResourceDefinition：
+
+```shell
+kubectl apply -f resourcedefinition.yaml
+```
+
+<!--
+After the CustomResourceDefinition object has been created, you can create custom objects.
+
+If you save the following YAML to `my-crontab.yaml`:
+-->
+CustomResourceDefinition 对象创建完毕之后，你可以创建定制对象，。
+
+如果你将下面的 YAML 保存到 `my-crontab.yaml` 文件：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "* * * * */5"
+  image: my-awesome-cron-image
+  replicas: 3
+```
+
+<!--
+and create it:
+-->
+并创建定制对象：
+
+```shell
+kubectl apply -f my-crontab.yaml
+```
+
+<!--
+Then new namespaced RESTful API endpoints are created at:
+-->
+那么会创建新的、命名空间作用域的 RESTful  API 端点：
+
+```
+/apis/stable.example.com/v1/namespaces/*/crontabs/status
+```
+
+<!-- and -->
+和
+
+```
+/apis/stable.example.com/v1/namespaces/*/crontabs/scale
+```
+
+<!--
+A custom resource can be scaled using the `kubectl scale` command.
+For example, the following command sets `.spec.replicas` of the
+custom resource created above to 5:
+-->
+定制资源可以使用 `kubectl scale` 命令来扩缩其规模。
+例如下面的命令将前面创建的定制资源的 `.spec.replicas` 设置为 5：
+
+```shell
+kubectl scale --replicas=5 crontabs/my-new-cron-object
+```
+```
+crontabs "my-new-cron-object" scaled
+```
+```shell
+kubectl get crontabs my-new-cron-object -o jsonpath='{.spec.replicas}'
+```
+```
+5
+```
+
+<!--
+You can use a [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) to protect custom
+resources that have the scale subresource enabled.
+-->
+你可以使用 [PodDisruptionBudget](/zh/docs/tasks/run-application/configure-pdb/)
+来保护启用了 scale 子资源的定制资源。
+
+<!--
+### Categories
+-->
+### 分类   {#categories}
+
+{{< feature-state state="beta" for_k8s_version="v1.10" >}}
+
+<!--
+Categories is a list of grouped resources the custom resource belongs to (eg. `all`).
+You can use `kubectl get <category-name>` to list the resources belonging to the category.
+
+The following example adds `all` in the list of categories in the CustomResourceDefinition
+and illustrates how to output the custom resource using `kubectl get all`.
+
+Save the following CustomResourceDefinition to `resourcedefinition.yaml`:
+-->
+分类（Categories）是定制资源所归属的分组资源列表（例如，`all`）。
+你可以使用 `kubectl get <分类名称>` 来列举属于某分类的所有资源。
+
+下面的示例在 CustomResourceDefinition 中将 `all` 添加到分类列表中，
+并展示了如何使用 `kubectl get all` 来输出定制资源：
+
+将下面的 CustomResourceDefinition 保存到 `resourcedefinition.yaml` 文件中：
+
+```yaml
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: crontabs.stable.example.com
+spec:
+  group: stable.example.com
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                cronSpec:
+                  type: string
+                image:
+                  type: string
+                replicas:
+                  type: integer
+  scope: Namespaced
+  names:
+    plural: crontabs
+    singular: crontab
+    kind: CronTab
+    shortNames:
+    - ct
+    # categories 是定制资源所归属的分类资源列表
+    categories:
+    - all
+```
+
+<!--
+and create it:
+-->
+之后创建此 CRD：
+
+```shell
+kubectl apply -f resourcedefinition.yaml
+```
+
+<!--
+After the CustomResourceDefinition object has been created, you can create custom objects.
+
+Save the following YAML to `my-crontab.yaml`:
+-->
+创建了 CustomResourceDefinition 对象之后，你可以创建定制对象。
+
+将下面的 YAML 保存到 `my-crontab.yaml` 中：
+
+```yaml
+apiVersion: "stable.example.com/v1"
+kind: CronTab
+metadata:
+  name: my-new-cron-object
+spec:
+  cronSpec: "* * * * */5"
+  image: my-awesome-cron-image
+```
+
+<!--
+and create it:
+-->
+并创建定制对象：
+
+```shell
+kubectl apply -f my-crontab.yaml
+```
+
+<!--
+You can specify the category using `kubectl get`:
+-->
+你可以在使用 `kubectl get` 时指定分类：
+
+```shell
+kubectl get all
+```
+
+<!--
+The output will include the custom resources of kind `CronTab`:
+-->
+输出中会包含类别为 `CronTab` 的定制资源：
+
+```console
+NAME                          AGE
+crontabs/my-new-cron-object   3s
+```
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Read about [custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/).
+
+* See [CustomResourceDefinition](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#customresourcedefinition-v1-apiextensions-k8s-io).
+
+* Serve [multiple versions](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/) of a
+  CustomResourceDefinition.
+-->
+* 阅读了解[定制资源](/zh/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
+* 参阅 [CustomResourceDefinition](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#customresourcedefinition-v1-apiextensions-k8s-io)
+* 参阅支持 CustomResourceDefinition 的[多个版本](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definition-versioning/)
+

From 68396d46e279bdb59e773bdb476f7960ebfc10b3 Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Tue, 8 Sep 2020 18:28:43 +0700
Subject: [PATCH 254/496] Apply suggestions from code review

Co-authored-by: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
---
 .../explore/explore-intro.html                | 28 +++++++++----------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html b/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html
index ffc6519a37..a6381b3275 100644
--- a/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html
+++ b/content/id/docs/tutorials/kubernetes-basics/explore/explore-intro.html
@@ -23,21 +23,21 @@ weight: 10
                 <ul>
                     <li>Belajar tentang Pod Kubernetes.</li>
                     <li>Belajar tentang Node Kubernetes.</li>
-                    <li>Mengatasi masalah pada aplikasi-aplikasi yang di-<i>deploy</i>.</li>
+                    <li>Mengatasi masalah pada aplikasi-aplikasi yang digelar.</li>
                 </ul>
             </div>
 
             <div class="col-md-8">
                 <h2>Pod Kubernetes</h2>
-                <p>Ketika kamu membuat sebuah Deployment di Modul <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, Kubernetes membuatkan sebuah <b>Pod</b> untuk menempatkan instans aplikasimu. Pod merupakan sebuah abstraksi Kubernetes yang merepresentasikan sebuah grup yang terdiri dari satu atau lebih kontainer (seperti Docker), dan beberapa sumber daya bersama untuk kontainer-kontainer itu. Sumber daya tersebut termasuk:</p>
+                <p>Ketika kamu membuat sebuah Deployment pada Modul <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, Kubernetes membuatkan sebuah <b>Pod</b> untuk menempatkan instans aplikasimu. Pod merupakan sebuah abstraksi Kubernetes yang merepresentasikan sebuah grup yang terdiri dari satu atau lebih kontainer (seperti Docker), dan beberapa sumber daya bersama untuk kontainer-kontainer itu. Sumber daya tersebut termasuk:</p>
                 <ul>
                     <li>Penyimpanan bersama, disebut Volume</li>
                     <li>Jaringan, sebagai satu alamat IP klaster unik</li>
-                    <li>Informasi tentang bagaimana mejalankan tiap kontainer, seperti versi <i>image</i> kontainer atau porta spesifik yang digunakan</li>
+                    <li>Informasi tentang bagaimana mejalankan tiap kontainer, seperti versi <i>image</i> atau porta spesifik yang digunakan oleh kontainer</li>
                 </ul>
                 <p>Pod memodelkan sebuah "logical host" spesifik aplikasi dan dapat berisi beberapa kontainer aplikasi berbeda yang relatif terkait erat. Contohnya, sebuah Pod mungkin terdiri atas kontainer aplikasi Node.js dan juga kontainer berbeda yang bertugas menyediakan data untuk dipublikasikan ke server web Node.js. Kontainer-kontainer dalam sebuah Pod berbagi satu alamat IP dan ruang porta, selalu terletak bersama dan terjadwal bersama, dan berjalankan dalam satu konteks bersama (<i>shared context</i>) pada Node yang sama.</p>
 
-            <p>Pod merupakan unit terkecil dalam platform Kubernetes. Ketika kita membuat sebuat Deployment, Deployment tersebut membuat Pod dengan kontainer-kontainer di dalamnya (bukannya dengan membuat kontainer secara langsung). Tiap Pod terikat langsung dengan Node di mana dia dijadwalkan dan tetap di sana sampai terminasi (berdasarkan <i>restart policy</i>) atau pengapusan. Jika terjadi kegagalan pada sebuah Node, Pod indentik akan dijadwalkan di Node lain dalam klaster.</p>
+            <p>Pod merupakan unit terkecil dalam platform Kubernetes. Ketika kita membuat sebuat Deployment, Deployment tersebut membuat Pod dengan kontainer-kontainer di dalamnya (bukannya dengan membuat kontainer secara langsung). Tiap Pod terikat langsung dengan Node di mana dia dijadwalkan dan tetap di sana sampai diterminasi (berdasarkan <i>restart policy</i>) atau penghapusan. Jika terjadi kegagalan pada sebuah Node, Pod indentik akan dijadwalkan di Node lain dalam klaster.</p>
 
             </div>
             <div class="col-md-4">
@@ -51,7 +51,7 @@ weight: 10
                 </div>
                 <div class="content__box content__box_fill">
                         <p><i>
-                            Pod merupakan sebuah grup yang terdiri dari satu atau lebih kontainer aplikasi (seperti Docker) dan berisi penyimpanan bersama (volume), alamat IP dan informasi tentang bagaimana menjalankan mereka.
+                            Pod merupakan sebuah grup yang terdiri dari satu atau lebih kontainer aplikasi (seperti Docker) dan berisi penyimpanan bersama (<i>volume</i>), alamat IP dan informasi tentang bagaimana menjalankan mereka.
                         </i></p>
                 </div>
             </div>
@@ -74,12 +74,12 @@ weight: 10
         <div class="row">
             <div class="col-md-8">
                 <h2>Node</h2>
-                <p>Sebuah Pod selalu berjalan dalam sebuah <b>Node</b>. Node merupakan sebuah mesin pekerja di Kubernetes dan dapat dimungkinkan mesin virtual ataupun fisik, tergantung dari klaster. Tiap Node dikelola oleh Master. Satu Node dapat memiliki beberapa pod, dan master Kubernetes otomatis menangani penjadwalan pod seluruh Node-Node dalam klaster. Penjadwalan otomatis oleh Master memperhitungkan tersedianya sumber daya tiap Node.</p>
+                <p>Sebuah Pod selalu berjalan dalam sebuah <b>Node</b>. Node merupakan sebuah mesin pekerja (<i>worker</i>) di Kubernetes dan mungkin merupakan mesin virtual ataupun fisik, tergantung dari klaster. Tiap Node dikelola oleh control plane. Satu Node dapat memiliki beberapa Pod, dan control plane Kubernetes yang otomatis menangani penjadwalan pod seluruh Node-Node dalam klaster. Penjadwalan otomatis oleh control plane memperhitungkan tersedianya sumber daya tiap Node.</p>
 
                 <p>Tiap Node Kuberbetes menjalankan setidaknya:</p>
                 <ul>
-                    <li>Kubelet, satu proses yang bertanggung jawab untuk berkomunikasi antara Master Kuberneter dan Node; ini juga mengelola Pod-Pod dan kontainer-kontainer yang berjalan di sebuah mesin.</li>
-                    <li>Satu waktu larian kontainer (<i>container runtime</i>), seperti Docker, bertanggung jawab untuk menarik <i>image</i> kontainer dari registri, membuka kontainer, dan menjalankan aplikasi.</li>
+                    <li>Kubelet, satu proses yang bertanggung jawab untuk berkomunikasi antara control plane Kuberneter dan Node; ini juga mengelola Pod-Pod dan kontainer-kontainer yang berjalan di sebuah mesin.</li>
+                    <li>Satu <i>container runtime</i>, seperti Docker, bertanggung jawab untuk menarik <i>image</i> kontainer dari register, membuka kontainer, dan menjalankan aplikasi.</li>
                 </ul>
 
             </div>
@@ -108,15 +108,15 @@ weight: 10
         <div class="row">
             <div class="col-md-8">
                 <h2>Mengatasi masalah dengan kubectl</h2>
-                <p>Dalam Modul <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, kamu menggunakan antarmuka baris perintah Kubctl. Kamu akan lanjut menggunakannya di Modul 3 untuk mendapatkan informasi tentang aplikasi-aplikasi yang di-<i>deploy</i> dan lingkungannya. Operasi yang paling umum dapat dilakukan dengan perintah kubectl berikut:</p>
+                <p>Dalam Modul <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>, kamu menggunakan antarmuka baris perintah kubectl. Kamu akan lanjut menggunakannya pada modul 3 untuk mendapatkan informasi tentang aplikasi-aplikasi yang digelar dan lingkungannya. Operasi yang paling umum dapat dilakukan dengan perintah kubectl berikut:</p>
                 <ul>
-                    <li><b>kubectl get</b> - daftar sumber daya</li>
+                    <li><b>kubectl get</b> - melihat daftar sumber daya</li>
                     <li><b>kubectl describe</b> - menampilkan detil informasi tentang suatu sumber daya</li>
-                    <li><b>kubectl logs</b> - mecetak log-log dari satu kontainer dalam sebuah pod</li>
-                    <li><b>kubectl exec</b> - eksekusi sebuah perintah pada satu kontainer dalam sebuah pod</li>
+                    <li><b>kubectl logs</b> - mencetak log-log dari satu kontainer dalam sebuah Pod</li>
+                    <li><b>kubectl exec</b> - eksekusi sebuah perintah pada satu kontainer dalam sebuah Pod</li>
                 </ul>
 
-                <p>Kamu dapat menggunakan perintah ini kapan aplikasi-aplikasi di-<i>deploy</i>, apa status mereka saat ini, di mana mereka berjalan, dan apa konfigurasi mereka.</p>
+                <p>Kamu dapat menggunakan perintah ini kapan aplikasi-aplikasi digelar, apa status mereka saat ini, di mana mereka berjalan, dan apa konfigurasi mereka.</p>
 
                 <p>Sekarang karena kita lebih mengetahui tentang klaster kita dan baris perintahnya, mari kita menjelajah aplikasi kita.</p>
 
@@ -131,7 +131,7 @@ weight: 10
 
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/explore/explore-interactive/" role="button">Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/explore/explore-interactive/" role="button">Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
             </div>
         </div>
 

From 5568883a78a78b8d118d4e65aa45303cf11c2988 Mon Sep 17 00:00:00 2001
From: Evgeny Shmarnev <shmarnev@gmail.com>
Date: Tue, 8 Sep 2020 15:37:49 +0200
Subject: [PATCH 255/496] Fix Broken layout for tabs page in Korean

---
 .../container-runtimes.md                     | 30 +++++++++----------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index 39c2d07464..fe955eb75d 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -68,7 +68,7 @@ kubelet을 재시작 하는 것은 에러를 해결할 수 없을 것이다.
 시스템에 도커를 설치하기 위해서 아래의 커맨드들을 사용한다.
 
 {{< tabs name="tab-cri-docker-installation" >}}
-{{< tab name="Ubuntu 16.04+" >}}
+{{% tab name="Ubuntu 16.04+" %}}
 
 ```shell
 # (도커 CE 설치)
@@ -122,8 +122,8 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{< /tab >}}
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% /tab %}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # (도커 CE 설치)
@@ -177,7 +177,7 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{< /tab >}}
+{{% /tab %}}
 {{< /tabs >}}
 
 부팅 시 도커 서비스를 시작하려면, 다음 명령을 실행한다.
@@ -217,7 +217,7 @@ sysctl --system
 ```
 
 {{< tabs name="tab-cri-cri-o-installation" >}}
-{{< tab name="Debian" >}}
+{{% tab name="Debian" %}}
 
 ```shell
 # Debian 개발 배포본(Unstable/Sid)
@@ -247,9 +247,9 @@ wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:st
 ```shell
 sudo apt-get install cri-o-1.17
 ```
-{{< /tab >}}
+{{% /tab %}}
 
-{{< tab name="Ubuntu 18.04, 19.04 and 19.10" >}}
+{{% tab name="Ubuntu 18.04, 19.04 and 19.10" %}}
 
 ```shell
 #  패키지 리포지터리 설정
@@ -263,9 +263,9 @@ sudo apt-get update
 # CRI-O 설치
 sudo apt-get install cri-o-1.17
 ```
-{{< /tab >}}
+{{% /tab %}}
 
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # 선행 조건 설치
@@ -278,12 +278,12 @@ curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:{{< skew late
 yum install -y cri-o
 ```
 
-{{< tab name="openSUSE Tumbleweed" >}}
+{{% tab name="openSUSE Tumbleweed" %}}
 
 ```shell
 sudo zypper install cri-o
 ```
-{{< /tab >}}
+{{% /tab %}}
 {{< /tabs >}}
 
 ### CRI-O 시작
@@ -326,7 +326,7 @@ sysctl --system
 ### containerd 설치
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{< tab name="Ubuntu 16.04" >}}
+{{% tab name="Ubuntu 16.04" %}}
 
 ```shell
 # (containerd 설치)
@@ -363,8 +363,8 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-{{< /tab >}}
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% /tab %}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # (containerd 설치)
@@ -395,7 +395,7 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-{{< /tab >}}
+{{% /tab %}}
 {{< /tabs >}}
 
 ### systemd

From 928c038559cf00c4337ee6657b0e3ad5e195ce62 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 8 Sep 2020 19:36:54 +0100
Subject: [PATCH 256/496] Tidy 404 Not Found error page

---
 assets/scss/_custom.scss |  8 ++++++++
 i18n/en.toml             |  3 +++
 layouts/404.html         | 35 ++++++++++-------------------------
 3 files changed, 21 insertions(+), 25 deletions(-)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index 97286fb077..f1f4b297ac 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -53,6 +53,14 @@ section {
   }
 }
 
+body.td-404 main .error-details {
+  max-width: 1100px;
+  margin-left: auto;
+  margin-right: auto;
+  margin-top: 4em;
+  margin-bottom: 0;
+}
+
 /* HEADER */
 
 .td-navbar {
diff --git a/i18n/en.toml b/i18n/en.toml
index dd6e7545a4..1c45087dec 100644
--- a/i18n/en.toml
+++ b/i18n/en.toml
@@ -63,6 +63,9 @@ other = "Latest version"
 [docs_version_other_heading]
 other = "Older versions"
 
+[error_404_were_you_looking_for]
+other = "Were you looking for:"
+
 [examples_heading]
 other = "Examples"
 
diff --git a/layouts/404.html b/layouts/404.html
index 5b18c48491..962894ee29 100644
--- a/layouts/404.html
+++ b/layouts/404.html
@@ -1,29 +1,14 @@
 {{ define "main" }}
 {{ partial "handle-version-switch-404.html" . }}
-<div class="container-404">
-    <h4>
-        Perhaps you were looking for:
-    </h4>
-
-    <br />
-    <br />
-
-    <ul>
-        <li>
-            <a href="/docs">
-                The Kubernetes documentation
-            </a>
-        </li>
-        <li>
-            <a href="/blog">
-                The Kubernetes blog
-            </a>
-        </li>
-        <li>
-            <a href="/community">
-                The Kubernetes community
-            </a>
-        </li>
+<section id="error-404" class="error-details">
+    <p>
+    {{ T "error_404_were_you_looking_for" }}
+    </p>
+    <ul id="error-sections">
+        {{ $sections := slice "docs" "blog" "training" "partners" "community" "case-studies" }}
+        {{ range $sections }}
+        {{ with site.GetPage "section" . }}<li><a href="{{ .RelPermalink }}" data-proofer-ignore>{{ .Title }}</a></li>{{ end }}
+        {{ end }}
     </ul>
-</div>
+</section>
 {{ end }}

From 4b3617299a0ba2aa79d362e096ccb1dd049cab9c Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 8 Sep 2020 19:47:50 +0100
Subject: [PATCH 257/496] Link to well-known labels rather than repeating the
 list

- easier to maintain
- less visual space; readers who are interested can follow the hyperlink
---
 .../concepts/scheduling-eviction/assign-pod-node.md  | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
index a30efc6ef6..c132d9affe 100644
--- a/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
+++ b/content/en/docs/concepts/scheduling-eviction/assign-pod-node.md
@@ -73,17 +73,7 @@ verify that it worked by running `kubectl get pods -o wide` and looking at the
 ## Interlude: built-in node labels {#built-in-node-labels}
 
 In addition to labels you [attach](#step-one-attach-label-to-the-node), nodes come pre-populated
-with a standard set of labels. These labels are
-
-* [`kubernetes.io/hostname`](/docs/reference/kubernetes-api/labels-annotations-taints/#kubernetes-io-hostname)
-* [`failure-domain.beta.kubernetes.io/zone`](/docs/reference/kubernetes-api/labels-annotations-taints/#failure-domainbetakubernetesiozone)
-* [`failure-domain.beta.kubernetes.io/region`](/docs/reference/kubernetes-api/labels-annotations-taints/#failure-domainbetakubernetesioregion)
-* [`topology.kubernetes.io/zone`](/docs/reference/kubernetes-api/labels-annotations-taints/#topologykubernetesiozone)
-* [`topology.kubernetes.io/region`](/docs/reference/kubernetes-api/labels-annotations-taints/#topologykubernetesiozone)
-* [`beta.kubernetes.io/instance-type`](/docs/reference/kubernetes-api/labels-annotations-taints/#beta-kubernetes-io-instance-type)
-* [`node.kubernetes.io/instance-type`](/docs/reference/kubernetes-api/labels-annotations-taints/#nodekubernetesioinstance-type)
-* [`kubernetes.io/os`](/docs/reference/kubernetes-api/labels-annotations-taints/#kubernetes-io-os)
-* [`kubernetes.io/arch`](/docs/reference/kubernetes-api/labels-annotations-taints/#kubernetes-io-arch)
+with a standard set of labels. See [Well-Known Labels, Annotations and Taints](/docs/reference/kubernetes-api/labels-annotations-taints/) for a list of these.
 
 {{< note >}}
 The value of these labels is cloud provider specific and is not guaranteed to be reliable.

From 68267228850b0222941d4bebb204837c7bc914cf Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Thu, 3 Sep 2020 17:54:26 +0800
Subject: [PATCH 258/496] Fix errors/nits in api-concepts

Nits fixed include:

- incorrectly specified code syntax, e.g. code snippet marked 'json' but
  the content is not JSON;
- the footnote in the paging table contains a nested table which cannot
  be rendered correctly, so the content is removed considering that it
  is just redundant table rows;
- some `kubectl apply` commands failed to provide the correct artifact
  to use while the artifact is stored online.
- fixed some other code fences by explicitly marking them as code
  snippet rather than relying on indentation (hard to maintain).
---
 .../docs/reference/using-api/api-concepts.md  | 395 ++++++++++--------
 1 file changed, 221 insertions(+), 174 deletions(-)

diff --git a/content/en/docs/reference/using-api/api-concepts.md b/content/en/docs/reference/using-api/api-concepts.md
index a937d18598..350dd41539 100644
--- a/content/en/docs/reference/using-api/api-concepts.md
+++ b/content/en/docs/reference/using-api/api-concepts.md
@@ -30,9 +30,12 @@ Kubernetes generally leverages standard RESTful terminology to describe the API
 All resource types are either scoped by the cluster (`/apis/GROUP/VERSION/*`) or to a namespace (`/apis/GROUP/VERSION/namespaces/NAMESPACE/*`). A namespace-scoped resource type will be deleted when its namespace is deleted and access to that resource type is controlled by authorization checks on the namespace scope. The following paths are used to retrieve collections and resources:
 
 * Cluster-scoped resources:
+
   * `GET /apis/GROUP/VERSION/RESOURCETYPE` - return the collection of resources of the resource type
   * `GET /apis/GROUP/VERSION/RESOURCETYPE/NAME` - return the resource with NAME under the resource type
+
 * Namespace-scoped resources:
+
   * `GET /apis/GROUP/VERSION/RESOURCETYPE` - return the collection of all instances of the resource type across all namespaces
   * `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE` - return collection of all instances of the resource type in NAMESPACE
   * `GET /apis/GROUP/VERSION/namespaces/NAMESPACE/RESOURCETYPE/NAME` - return the instance of the resource type with NAME in NAMESPACE
@@ -57,33 +60,39 @@ For example:
 
 1. List all of the pods in a given namespace.
 
-        GET /api/v1/namespaces/test/pods
-        ---
-        200 OK
-        Content-Type: application/json
-        {
-          "kind": "PodList",
-          "apiVersion": "v1",
-          "metadata": {"resourceVersion":"10245"},
-          "items": [...]
-        }
+   ```console
+   GET /api/v1/namespaces/test/pods
+   ---
+   200 OK
+   Content-Type: application/json
+
+   {
+     "kind": "PodList",
+     "apiVersion": "v1",
+     "metadata": {"resourceVersion":"10245"},
+     "items": [...]
+   }
+   ```
 
 2. Starting from resource version 10245, receive notifications of any creates, deletes, or updates as individual JSON objects.
 
-        GET /api/v1/namespaces/test/pods?watch=1&resourceVersion=10245
-        ---
-        200 OK
-        Transfer-Encoding: chunked
-        Content-Type: application/json
-        {
-          "type": "ADDED",
-          "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "10596", ...}, ...}
-        }
-        {
-          "type": "MODIFIED",
-          "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "11020", ...}, ...}
-        }
-        ...
+   ```
+   GET /api/v1/namespaces/test/pods?watch=1&resourceVersion=10245
+   ---
+   200 OK
+   Transfer-Encoding: chunked
+   Content-Type: application/json
+
+   {
+     "type": "ADDED",
+     "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "10596", ...}, ...}
+   }
+   {
+     "type": "MODIFIED",
+     "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "11020", ...}, ...}
+   }
+   ...
+   ```
 
 A given Kubernetes server will only preserve a historical list of changes for a limited time. Clusters using etcd3 preserve changes in the last 5 minutes by default.  When the requested watch operations fail because the historical version of that resource is not available, clients must handle the case by recognizing the status code `410 Gone`, clearing their local cache, performing a list operation, and starting the watch from the `resourceVersion` returned by that new list operation. Most client libraries offer some form of standard tool for this logic. (In Go this is called a `Reflector` and is located in the `k8s.io/client-go/cache` package.)
 
@@ -91,24 +100,28 @@ A given Kubernetes server will only preserve a historical list of changes for a
 
 To mitigate the impact of short history window, we introduced a concept of `bookmark` watch event. It is a special kind of event to mark that all changes up to a given `resourceVersion` the client is requesting have already been sent. Object returned in that event is of the type requested by the request, but only `resourceVersion` field is set, e.g.:
 
-        GET /api/v1/namespaces/test/pods?watch=1&resourceVersion=10245&allowWatchBookmarks=true
-        ---
-        200 OK
-        Transfer-Encoding: chunked
-        Content-Type: application/json
-        {
-          "type": "ADDED",
-          "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "10596", ...}, ...}
-        }
-        ...
-        {
-          "type": "BOOKMARK",
-          "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "12746"} }
-        }
+```console
+GET /api/v1/namespaces/test/pods?watch=1&resourceVersion=10245&allowWatchBookmarks=true
+---
+200 OK
+Transfer-Encoding: chunked
+Content-Type: application/json
+
+{
+  "type": "ADDED",
+  "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "10596", ...}, ...}
+}
+...
+{
+  "type": "BOOKMARK",
+  "object": {"kind": "Pod", "apiVersion": "v1", "metadata": {"resourceVersion": "12746"} }
+}
+```
 
 `Bookmark` events can be requested by `allowWatchBookmarks=true` option in watch requests, but clients shouldn't assume bookmarks are returned at any specific interval, nor may they assume the server will send any `bookmark` event.
 
 ## Retrieving large results sets in chunks
+
 {{< feature-state for_k8s_version="v1.9" state="beta" >}}
 
 On large clusters, retrieving the collection of some resource types may result in very large responses that can impact the server and client. For instance, a cluster may have tens of thousands of pods, each of which is 1-2kb of encoded JSON. Retrieving all pods across all namespaces may result in a very large response (10-20MB) and consume a large amount of server resources. Starting in Kubernetes 1.9 the server supports the ability to break a single large collection request into many smaller chunks while preserving the consistency of the total request. Each chunk can be returned sequentially which reduces both the total size of the request and allows user-oriented clients to display results incrementally to improve responsiveness.
@@ -121,54 +134,63 @@ For example, if there are 1,253 pods on the cluster and the client wants to rece
 
 1. List all of the pods on a cluster, retrieving up to 500 pods each time.
 
-        GET /api/v1/pods?limit=500
-        ---
-        200 OK
-        Content-Type: application/json
-        {
-          "kind": "PodList",
-          "apiVersion": "v1",
-          "metadata": {
-            "resourceVersion":"10245",
-            "continue": "ENCODED_CONTINUE_TOKEN",
-            ...
-          },
-          "items": [...] // returns pods 1-500
-        }
+   ```console
+   GET /api/v1/pods?limit=500
+   ---
+   200 OK
+   Content-Type: application/json
+
+   {
+     "kind": "PodList",
+     "apiVersion": "v1",
+     "metadata": {
+       "resourceVersion":"10245",
+       "continue": "ENCODED_CONTINUE_TOKEN",
+       ...
+     },
+     "items": [...] // returns pods 1-500
+   }
+   ```
 
 2. Continue the previous call, retrieving the next set of 500 pods.
 
-        GET /api/v1/pods?limit=500&continue=ENCODED_CONTINUE_TOKEN
-        ---
-        200 OK
-        Content-Type: application/json
-        {
-          "kind": "PodList",
-          "apiVersion": "v1",
-          "metadata": {
-            "resourceVersion":"10245",
-            "continue": "ENCODED_CONTINUE_TOKEN_2",
-            ...
-          },
-          "items": [...] // returns pods 501-1000
-        }
+   ```console
+   GET /api/v1/pods?limit=500&continue=ENCODED_CONTINUE_TOKEN
+   ---
+   200 OK
+   Content-Type: application/json
+
+   {
+     "kind": "PodList",
+     "apiVersion": "v1",
+     "metadata": {
+       "resourceVersion":"10245",
+       "continue": "ENCODED_CONTINUE_TOKEN_2",
+       ...
+     },
+     "items": [...] // returns pods 501-1000
+   }
+   ```
 
 3. Continue the previous call, retrieving the last 253 pods.
 
-        GET /api/v1/pods?limit=500&continue=ENCODED_CONTINUE_TOKEN_2
-        ---
-        200 OK
-        Content-Type: application/json
-        {
-          "kind": "PodList",
-          "apiVersion": "v1",
-          "metadata": {
-            "resourceVersion":"10245",
-            "continue": "", // continue token is empty because we have reached the end of the list
-            ...
-          },
-          "items": [...] // returns pods 1001-1253
-        }
+   ```console
+   GET /api/v1/pods?limit=500&continue=ENCODED_CONTINUE_TOKEN_2
+   ---
+   200 OK
+   Content-Type: application/json
+
+   {
+     "kind": "PodList",
+     "apiVersion": "v1",
+     "metadata": {
+       "resourceVersion":"10245",
+       "continue": "", // continue token is empty because we have reached the end of the list
+       ...
+     },
+     "items": [...] // returns pods 1001-1253
+   }
+   ```
 
 Note that the `resourceVersion` of the list remains constant across each request, indicating the server is showing us a consistent snapshot of the pods. Pods that are created, updated, or deleted after version `10245` would not be shown unless the user makes a list request without the `continue` token.  This allows clients to break large requests into smaller chunks and then perform a watch operation on the full set without missing any updates.
 
@@ -180,52 +202,56 @@ A few limitations of that approach include non-trivial logic when dealing with c
 
 In order to avoid potential limitations as described above, clients may request the Table representation of objects, delegating specific details of printing to the server. The Kubernetes API implements standard HTTP content type negotiation: passing an `Accept` header containing a value of `application/json;as=Table;g=meta.k8s.io;v=v1beta1` with a `GET` call will request that the server return objects in the Table content type.
 
-For example:
+For example, list all of the pods on a cluster in the Table format.
 
-1. List all of the pods on a cluster in the Table format.
+```console
+GET /api/v1/pods
+Accept: application/json;as=Table;g=meta.k8s.io;v=v1beta1
+---
+200 OK
+Content-Type: application/json
 
-        GET /api/v1/pods
-        Accept: application/json;as=Table;g=meta.k8s.io;v=v1beta1
-        ---
-        200 OK
-        Content-Type: application/json
-        {
-            "kind": "Table",
-            "apiVersion": "meta.k8s.io/v1beta1",
-            ...
-            "columnDefinitions": [
-                ...
-            ]
-        }
+{
+    "kind": "Table",
+    "apiVersion": "meta.k8s.io/v1beta1",
+    ...
+    "columnDefinitions": [
+        ...
+    ]
+}
+```
 
 For API resource types that do not have a custom Table definition on the server, a default Table response is returned by the server, consisting of the resource's `name` and `creationTimestamp` fields.
 
-        GET /apis/crd.example.com/v1alpha1/namespaces/default/resources
-        ---
-        200 OK
-        Content-Type: application/json
-        ...
+```console
+GET /apis/crd.example.com/v1alpha1/namespaces/default/resources
+---
+200 OK
+Content-Type: application/json
+...
+
+{
+    "kind": "Table",
+    "apiVersion": "meta.k8s.io/v1beta1",
+    ...
+    "columnDefinitions": [
         {
-            "kind": "Table",
-            "apiVersion": "meta.k8s.io/v1beta1",
+            "name": "Name",
+            "type": "string",
+            ...
+        },
+        {
+            "name": "Created At",
+            "type": "date",
             ...
-            "columnDefinitions": [
-                {
-                    "name": "Name",
-                    "type": "string",
-                    ...
-                },
-                {
-                    "name": "Created At",
-                    "type": "date",
-                    ...
-                }
-            ]
         }
+    ]
+}
+```
 
 Table responses are available beginning in version 1.10 of the kube-apiserver. As such, not all API resource types will support a Table response, specifically when using a client against older clusters. Clients that must work against all resource types, or can potentially deal with older clusters, should specify multiple content types in their `Accept` header to support fallback to non-Tabular JSON:
 
-```
+```console
 Accept: application/json;as=Table;g=meta.k8s.io;v=v1beta1, application/json
 ```
 
@@ -240,42 +266,47 @@ For example:
 
 1. List all of the pods on a cluster in Protobuf format.
 
-        GET /api/v1/pods
-        Accept: application/vnd.kubernetes.protobuf
-        ---
-        200 OK
-        Content-Type: application/vnd.kubernetes.protobuf
-        ... binary encoded PodList object
+   ```console
+   GET /api/v1/pods
+   Accept: application/vnd.kubernetes.protobuf
+   ---
+   200 OK
+   Content-Type: application/vnd.kubernetes.protobuf
+
+   ... binary encoded PodList object
+   ```
 
 2. Create a pod by sending Protobuf encoded data to the server, but request a response in JSON.
 
-        POST /api/v1/namespaces/test/pods
-        Content-Type: application/vnd.kubernetes.protobuf
-        Accept: application/json
-        ... binary encoded Pod object
-        ---
-        200 OK
-        Content-Type: application/json
-        {
-          "kind": "Pod",
-          "apiVersion": "v1",
-          ...
-        }
+   ```console
+   POST /api/v1/namespaces/test/pods
+   Content-Type: application/vnd.kubernetes.protobuf
+   Accept: application/json
+   ... binary encoded Pod object
+   ---
+   200 OK
+   Content-Type: application/json
+
+   {
+     "kind": "Pod",
+     "apiVersion": "v1",
+     ...
+   }
+   ```
 
 Not all API resource types will support Protobuf, specifically those defined via Custom Resource Definitions or those that are API extensions. Clients that must work against all resource types should specify multiple content types in their `Accept` header to support fallback to JSON:
 
-```
+```console
 Accept: application/vnd.kubernetes.protobuf, application/json
 ```
 
-
 ### Protobuf encoding
 
 Kubernetes uses an envelope wrapper to encode Protobuf responses. That wrapper starts with a 4 byte magic number to help identify content in disk or in etcd as Protobuf (as opposed to JSON), and then is followed by a Protobuf encoded wrapper message, which describes the encoding and type of the underlying object and then contains the object.
 
 The wrapper format is:
 
-```
+```console
 A four byte magic number prefix:
   Bytes 0-3: "k8s\x00" [0x6b, 0x38, 0x73, 0x00]
 
@@ -362,9 +393,11 @@ Dry-run is triggered by setting the `dryRun` query parameter. This parameter is
 
 For example:
 
-        POST /api/v1/namespaces/test/pods?dryRun=All
-        Content-Type: application/json
-        Accept: application/json
+```console
+POST /api/v1/namespaces/test/pods?dryRun=All
+Content-Type: application/json
+Accept: application/json
+```
 
 The response would look the same as for non-dry-run request, but the values of some generated fields may differ.
 
@@ -400,7 +433,7 @@ Some values of an object are typically generated before the object is persisted.
 
 {{< feature-state for_k8s_version="v1.16" state="beta" >}}
 
-{{< note >}}Starting from Kubernetes v1.18, if you have Server Side Apply enabled then the control plane tracks managed fields for all newly created objects.{{< /note >}}
+Starting from Kubernetes v1.18, if you have Server Side Apply enabled then the control plane tracks managed fields for all newly created objects.
 
 ### Introduction
 
@@ -484,10 +517,12 @@ data:
 
 The above object contains a single manager in `metadata.managedFields`. The
 manager consists of basic information about the managing entity itself, like
-operation type, api version, and the fields managed by it.
+operation type, API version, and the fields managed by it.
 
-{{< note >}} This field is managed by the apiserver and should not be changed by
-the user. {{< /note >}}
+{{< note >}}
+This field is managed by the  API server and should not be changed by
+the user.
+{{< /note >}}
 
 Nevertheless it is possible to change `metadata.managedFields` through an
 `Update` operation. Doing so is highly discouraged, but might be a reasonable
@@ -537,7 +572,7 @@ a little differently.
 
 {{< note >}}
 Whether you are submitting JSON data or YAML data, use `application/apply-patch+yaml` as the
-Content-Type header value.
+`Content-Type` header value.
 
 All JSON documents are valid YAML.
 {{< /note >}}
@@ -580,8 +615,8 @@ In this example, a second operation was run as an `Update` by the manager called
 `kube-controller-manager`. The update changed a value in the data field which
 caused the field's management to change to the `kube-controller-manager`.
 
-{{< note >}}If this update would have been an `Apply` operation, the operation
-would have failed due to conflicting ownership.{{< /note >}}
+If this update would have been an `Apply` operation, the operation
+would have failed due to conflicting ownership.
 
 ### Merge strategy
 
@@ -603,8 +638,8 @@ merging, see
 A number of markers were added in Kubernetes 1.16 and 1.17, to allow API
 developers to describe the merge strategy supported by lists, maps, and
 structs. These markers can be applied to objects of the respective type,
-in Go files or in the [OpenAPI schema definition of the
-CRD](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io):
+in Go files or in the
+[OpenAPI schema definition of the CRD](/docs/reference/generated/kubernetes-api/{{< param "version" >}}#jsonschemaprops-v1-apiextensions-k8s-io):
 
 | Golang marker | OpenAPI extension | Accepted values | Description | Introduced in |
 |---|---|---|---|---|
@@ -641,8 +676,8 @@ might not be able to resolve or act on these conflicts.
 
 ### Transferring Ownership
 
-In addition to the concurrency controls provided by [conflict
-resolution](#conflicts), Server Side Apply provides ways to perform coordinated
+In addition to the concurrency controls provided by [conflict resolution](#conflicts),
+Server Side Apply provides ways to perform coordinated
 field ownership transfers from users to controllers.
 
 This is best explained by example. Let's look at how to safely transfer
@@ -657,12 +692,12 @@ Say a user has defined deployment with `replicas` set to the desired value:
 And the user has created the deployment using server side apply like so:
 
 ```shell
-kubectl apply -f application/ssa/nginx-deployment.yaml --server-side
+kubectl apply -f https://k8s.io/examples/application/ssa/nginx-deployment.yaml --server-side
 ```
 
 Then later, HPA is enabled for the deployment, e.g.:
 
-```
+```shell
 kubectl autoscale deployment nginx-deployment --cpu-percent=50 --min=1 --max=10
 ```
 
@@ -691,7 +726,7 @@ First, the user defines a new configuration containing only the `replicas` field
 The user applies that configuration using the field manager name `handover-to-hpa`:
 
 ```shell
-kubectl apply -f application/ssa/nginx-deployment-replicas-only.yaml --server-side --field-manager=handover-to-hpa --validate=false
+kubectl apply -f https://k8s.io/examples/application/ssa/nginx-deployment-replicas-only.yaml --server-side --field-manager=handover-to-hpa --validate=false
 ```
 
 If the apply results in a conflict with the HPA controller, then do nothing. The
@@ -737,7 +772,7 @@ case.
 Client-side apply users who manage a resource with `kubectl apply` can start
 using server-side apply with the following flag.
 
-```
+```shell
 kubectl apply --server-side [--dry-run=server]
 ```
 
@@ -745,7 +780,9 @@ By default, field management of the object transfers from client-side apply
 to kubectl server-side apply without encountering conflicts.
 
 {{< caution >}}
-Keep the `last-applied-configuration` annotation up to date. The annotation infers client-side apply's managed fields. Any fields not managed by client-side apply raise conflicts.
+Keep the `last-applied-configuration` annotation up to date.
+The annotation infers client-side apply's managed fields.
+Any fields not managed by client-side apply raise conflicts.
 
 For example, if you used `kubectl scale` to update the replicas field after client-side apply,
 then this field is not owned by client-side apply and creates conflicts on `kubectl apply --server-side`.
@@ -756,7 +793,7 @@ an exception, you can opt-out of this behavior by specifying a different,
 non-default field manager, as seen in the following example. The default field manager for kubectl
 server-side apply is `kubectl`.
 
-```
+```shell
 kubectl apply --server-side --field-manager=my-manager [--dry-run=server]
 ```
 
@@ -774,7 +811,7 @@ an exception, you can opt-out of this behavior by specifying a different,
 non-default field manager, as seen in the following example. The default field manager for kubectl
 server-side apply is `kubectl`.
 
-```
+```shell
 kubectl apply --server-side --field-manager=my-manager [--dry-run=server]
 ```
 
@@ -793,14 +830,14 @@ using `MergePatch`, `StrategicMergePatch`, `JSONPatch` or `Update`, so every
 non-apply operation. This can be done by overwriting the managedFields field
 with an empty entry. Two examples are:
 
-```json
+```console
 PATCH /api/v1/namespaces/default/configmaps/example-cm
 Content-Type: application/merge-patch+json
 Accept: application/json
 Data: {"metadata":{"managedFields": [{}]}}
 ```
 
-```json
+```console
 PATCH /api/v1/namespaces/default/configmaps/example-cm
 Content-Type: application/json-patch+json
 Accept: application/json
@@ -818,10 +855,12 @@ the managedFields, this will result in the managedFields being reset first and
 the other changes being processed afterwards. As a result the applier takes
 ownership of any fields updated in the same request.
 
-{{< caution >}} Server Side Apply does not correctly track ownership on
+{{< caution >}}
+Server Side Apply does not correctly track ownership on
 sub-resources that don't receive the resource object type. If you are
 using Server Side Apply with such a sub-resource, the changed fields
-won't be tracked.  {{< /caution >}}
+won't be tracked.
+{{< /caution >}}
 
 ### Disabling the feature
 
@@ -859,12 +898,13 @@ For get and list, the semantics of resource version are:
 
 **List:**
 
-v1.19+ API servers and newer support the `resourceVersionMatch` parameter, which
+v1.19+ API servers support the `resourceVersionMatch` parameter, which
 determines how resourceVersion is applied to list calls.  It is highly
 recommended that `resourceVersionMatch` be set for list calls where
 `resourceVersion` is set. If `resourceVersion` is unset, `resourceVersionMatch`
 is not allowed.  For backward compatibility, clients must tolerate the server
 ignoring `resourceVersionMatch`:
+
 - When using `resourceVersionMatch=NotOlderThan` and limit is set, clients must
   handle HTTP 410 "Gone" responses. For example, the client might retry with a
   newer `resourceVersion` or fall back to `resourceVersion=""`.
@@ -878,27 +918,29 @@ a known `resourceVersion` is preferable since it can achieve better performance
 of your cluster than leaving `resourceVersion` and `resourceVersionMatch` unset, which requires
 quorum read to be served.
 
+{{< table caption="resourceVersionMatch and paging parameters for list" >}}
+
 | resourceVersionMatch param            | paging params                 | resourceVersion unset | resourceVersion="0"                       | resourceVersion="{value other than 0}" |
 |---------------------------------------|-------------------------------|-----------------------|-------------------------------------------|----------------------------------------|
 | resourceVersionMatch unset            | limit unset                   | Most Recent           | Any                                       | Not older than                         |
-| resourceVersionMatch unset            | limit="n", continue unset     | Most Recent           | Any                                       | Exact                                  |
-| resourceVersionMatch unset            | limit="n", continue="<token>" | Continue Token, Exact | Invalid, treated as Continue Token, Exact | Invalid, HTTP `400 Bad Request`        |
-| resourceVersionMatch=Exact[^1]        | limit unset                   | Invalid               | Invalid                                   | Exact                                  |
-| resourceVersionMatch=Exact[^1]        | limit="n", continue unset     | Invalid               | Invalid                                   | Exact                                  |
-| resourceVersionMatch=NotOlderThan[^1] | limit unset                   | Invalid               | Any                                       | Not older than                         |
-| resourceVersionMatch=NotOlderThan[^1] | limit="n", continue unset     | Invalid               | Any                                       | Not older than                         |
+| resourceVersionMatch unset            | limit=\<n\>, continue unset     | Most Recent           | Any                                       | Exact                                  |
+| resourceVersionMatch unset            | limit=\<n\>, continue=\<token\> | Continue Token, Exact | Invalid, treated as Continue Token, Exact | Invalid, HTTP `400 Bad Request`        |
+| resourceVersionMatch=Exact [1]        | limit unset                   | Invalid               | Invalid                                   | Exact                                  |
+| resourceVersionMatch=Exact [1]        | limit=\<n\>, continue unset     | Invalid               | Invalid                                   | Exact                                  |
+| resourceVersionMatch=NotOlderThan [1] | limit unset                   | Invalid               | Any                                       | Not older than                         |
+| resourceVersionMatch=NotOlderThan [1] | limit=\<n\>, continue unset     | Invalid               | Any                                       | Not older than                         |
 
-[^1]: If the server does not honor the `resourceVersionMatch` parameter, it is treated as if it is unset.
-| paging                          | resourceVersion unset | resourceVersion="0"                            | resourceVersion="{value other than 0}" |
-|---------------------------------|-----------------------|------------------------------------------------|----------------------------------------|
-| limit unset                     | Most Recent           | Any                                            | Not older than                         |
-| limit="n", continue unset       | Most Recent           | Any                                            | Exact                                  |
-| limit="n", continue="\<token\>" | Continue Token, Exact | Invalid, but treated as Continue Token, Exact  | Invalid, HTTP `400 Bad Request`        |
+{{< /table >}}
+
+**Footnotes:**
+
+[1] If the server does not honor the `resourceVersionMatch` parameter, it is treated as if it is unset.
 
 The meaning of the get and list semantics are:
 
 - **Most Recent:** Return data at the most recent resource version. The returned data must be
   consistent (i.e. served from etcd via a quorum read).
+
 - **Any:** Return data at any resource version. The newest available resource version is preferred,
   but strong consistency is not required; data at any resource version may be served. It is possible
   for the request to return data at a much older resource version that the client has previously
@@ -911,6 +953,7 @@ The meaning of the get and list semantics are:
   but does not make any guarantee about the resourceVersion in the ObjectMeta of the list items
   since ObjectMeta.resourceVersion tracks when an object was last updated, not how up-to-date the
   object is when served.
+
 - **Exact:** Return data at the exact resource version provided. If the provided resourceVersion is
   unavailable, the server responds with HTTP 410 "Gone".  For list requests to servers that honor the
   resourceVersionMatch parameter, this guarantees that resourceVersion in the ListMeta is the same as
@@ -925,10 +968,14 @@ For watch, the semantics of resource version are:
 
 **Watch:**
 
+{{< table caption="resourceVersion for watch" >}}
+
 | resourceVersion unset               | resourceVersion="0"        | resourceVersion="{value other than 0}" |
 |-------------------------------------|----------------------------|----------------------------------------|
 | Get State and Start at Most Recent  | Get State and Start at Any | Start at Exact                         |
 
+{{< /table >}}
+
 The meaning of the watch semantics are:
 
 - **Get State and Start at Most Recent:** Start a watch at the most recent resource version, which must be consistent (i.e. served from etcd via a quorum read). To establish initial state, the watch begins with synthetic "Added" events of all resources instances that exist at the starting resource version. All following watch events are for all changes that occurred after the resource version the watch started at.

From ed8ffbda4c012d0bf453f173616cab9939db8f52 Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 20:56:13 -0400
Subject: [PATCH 259/496] [en]: Add package main to client-go example

The package main is missing from the example.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 content/en/docs/tasks/administer-cluster/access-cluster-api.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/tasks/administer-cluster/access-cluster-api.md b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
index 5c94dceffc..a99b6fe984 100644
--- a/content/en/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
@@ -171,6 +171,8 @@ The Go client can use the same [kubeconfig file](/docs/concepts/configuration/or
 as the kubectl CLI does to locate and authenticate to the API server. See this [example](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go):
 
 ```golang
+package main
+
 import (
   "fmt"
   "k8s.io/apimachinery/pkg/apis/meta/v1"

From d3f537f2c6b7fad27c2cfe3d67646c7366d18291 Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 20:57:24 -0400
Subject: [PATCH 260/496] [ko]: Add package main to client-go example

The package main is missing from the example.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 content/ko/docs/tasks/administer-cluster/access-cluster-api.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
index 1b92c1283a..8ee76377de 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
@@ -174,6 +174,8 @@ Go 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 
 사용할 수 있다. 이 [예제](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go)를 참고한다.
 
 ```golang
+package main
+
 import (
   "fmt"
   "k8s.io/apimachinery/pkg/apis/meta/v1"

From ee17ef17a50fa923e34d54e2bd6d01e18b0576de Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 20:58:16 -0400
Subject: [PATCH 261/496] [zh]: Add package main to client-go example

The package main is missing from the example.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 content/zh/docs/tasks/administer-cluster/access-cluster-api.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
index 1d2bed1a0a..35d7cc2a20 100644
--- a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
@@ -277,6 +277,8 @@ Go 客户端可以使用与 kubectl 命令行工具相同的
 [例子](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go)：
 
 ```golang
+package main
+
 import (
    "fmt"
    "k8s.io/client-go/1.4/kubernetes"

From bdafcf5aa4d16f1ac745628a355afaeee512fec7 Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 20:59:00 -0400
Subject: [PATCH 262/496] [en]: add missing context module for the go example

The client-go example is missing the param context.
This patch adds the missing param.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 content/en/docs/tasks/administer-cluster/access-cluster-api.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/access-cluster-api.md b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
index a99b6fe984..d09a29c671 100644
--- a/content/en/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/en/docs/tasks/administer-cluster/access-cluster-api.md
@@ -174,6 +174,7 @@ as the kubectl CLI does to locate and authenticate to the API server. See this [
 package main
 
 import (
+  "context"
   "fmt"
   "k8s.io/apimachinery/pkg/apis/meta/v1"
   "k8s.io/client-go/kubernetes"
@@ -187,7 +188,7 @@ func main() {
   // creates the clientset
   clientset, _ := kubernetes.NewForConfig(config)
   // access the API to list pods
-  pods, _ := clientset.CoreV1().Pods("").List(v1.ListOptions{})
+  pods, _ := clientset.CoreV1().Pods("").List(context.TODO(), v1.ListOptions{})
   fmt.Printf("There are %d pods in the cluster\n", len(pods.Items))
 }
 ```

From eac11ac629d904e992a40fb496d5ee84f1f88b9a Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 20:59:36 -0400
Subject: [PATCH 263/496] [ko]: add missing context module for the go example

The client-go example is missing the param context.
This patch adds the missing param.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 content/ko/docs/tasks/administer-cluster/access-cluster-api.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
index 8ee76377de..10b97ce630 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
@@ -177,6 +177,7 @@ Go 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 
 package main
 
 import (
+  "context"
   "fmt"
   "k8s.io/apimachinery/pkg/apis/meta/v1"
   "k8s.io/client-go/kubernetes"
@@ -190,7 +191,7 @@ func main() {
   // clientset을 생성한다
   clientset, _ := kubernetes.NewForConfig(config)
   // 파드를 나열하기 위해 API에 접근한다
-  pods, _ := clientset.CoreV1().Pods("").List(v1.ListOptions{})
+  pods, _ := clientset.CoreV1().Pods("").List(context.TODO(), v1.ListOptions{})
   fmt.Printf("There are %d pods in the cluster\n", len(pods.Items))
 }
 ```

From 6fb5b93ad76a39e562fdb36c0f53bc696999abc4 Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 21:00:14 -0400
Subject: [PATCH 264/496] [zh]: add missing context module for the go example

The client-go example is missing the param context.
This patch adds the missing param.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 content/zh/docs/tasks/administer-cluster/access-cluster-api.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
index 35d7cc2a20..fc25f2645c 100644
--- a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
@@ -280,6 +280,7 @@ Go 客户端可以使用与 kubectl 命令行工具相同的
 package main
 
 import (
+   "context"
    "fmt"
    "k8s.io/client-go/1.4/kubernetes"
    "k8s.io/client-go/1.4/pkg/api/v1"
@@ -293,7 +294,7 @@ func main() {
   // creates the clientset
   clientset, _ := kubernetes.NewForConfig(config)
   // access the API to list pods
-  pods, _ := clientset.CoreV1().Pods("").List(v1.ListOptions{})
+  pods, _ := clientset.CoreV1().Pods("").List(context.TODO(), v1.ListOptions{})
   fmt.Printf("There are %d pods in the cluster\n", len(pods.Items))
 }
 ```

From a4fc1d7b4f93cd20c8c83bbd7a14e520ee649f7c Mon Sep 17 00:00:00 2001
From: Douglas Schilling Landgraf <dougsland@redhat.com>
Date: Tue, 8 Sep 2020 21:00:48 -0400
Subject: [PATCH 265/496] [zh] fix import examples for the client-go

The import is broken, this patch fix the libraries.

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
---
 .../zh/docs/tasks/administer-cluster/access-cluster-api.md  | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
index fc25f2645c..e66ebb3e3a 100644
--- a/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/zh/docs/tasks/administer-cluster/access-cluster-api.md
@@ -282,9 +282,9 @@ package main
 import (
    "context"
    "fmt"
-   "k8s.io/client-go/1.4/kubernetes"
-   "k8s.io/client-go/1.4/pkg/api/v1"
-   "k8s.io/client-go/1.4/tools/clientcmd"
+   "k8s.io/apimachinery/pkg/apis/meta/v1"
+   "k8s.io/client-go/kubernetes"
+   "k8s.io/client-go/tools/clientcmd"
 )
 
 func main() {

From 040afda42a959198cd2ea9428d8082ad7c0c4694 Mon Sep 17 00:00:00 2001
From: Ben Hall <ben@benhall.me.uk>
Date: Mon, 7 Sep 2020 15:26:31 +0100
Subject: [PATCH 266/496] Remove Roboto from English docs

Signed-off-by: Ben Hall <ben@benhall.me.uk>
---
 .../create-cluster/cluster-interactive.html   |   2 +-
 .../deploy-app/deploy-interactive.html        |   2 +-
 .../explore/explore-interactive.html          |   2 +-
 .../expose/expose-interactive.html            |   2 +-
 .../kubernetes-basics/public/css/styles.css   | 687 +-----------------
 .../scale/scale-interactive.html              |   2 +-
 .../update/update-interactive.html            |   2 +-
 7 files changed, 9 insertions(+), 690 deletions(-)

diff --git a/content/en/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/en/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index 1816442416..ad7b856223 100644
--- a/content/en/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/en/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 The screen is too narrow to interact with the Terminal, please use a desktop/tablet.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/en/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/en/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index fb782458de..ab008c38af 100644
--- a/content/en/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/en/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -31,7 +31,7 @@ weight: 20
                 To interact with the Terminal, please use the desktop/tablet version
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/en/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/en/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index ac23bbf61b..8c87cfab18 100644
--- a/content/en/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/en/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 To interact with the Terminal, please use the desktop/tablet version
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/en/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/en/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 9e1605c518..e89414b917 100644
--- a/content/en/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/en/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 To interact with the Terminal, please use the desktop/tablet version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css b/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
index 8c743991d9..a4a7c321cc 100644
--- a/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
+++ b/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
@@ -8392,46 +8392,6 @@ button.close
     src: url('../fonts/Inconsolata-Bold.eot?#iefix') format('embedded-opentype'), url('../fonts/Inconsolata-Bold.woff2') format('woff2'), url('../fonts/Inconsolata-Bold.woff') format('woff'), url('../fonts/Inconsolata-Bold.ttf') format('truetype'), url('../fonts/Inconsolata-Bold.svg#Inconsolata-Bold') format('svg');
 }
 
-@font-face
-{
-    font-family: 'Roboto Slab';
-    font-weight: normal;
-    font-style: normal;
-
-    src: url('../fonts/RobotoSlab-Regular.eot');
-    src: url('../fonts/RobotoSlab-Regular.eot?#iefix') format('embedded-opentype'), url('../fonts/RobotoSlab-Regular.woff2') format('woff2'), url('../fonts/RobotoSlab-Regular.woff') format('woff'), url('../fonts/RobotoSlab-Regular.ttf') format('truetype'), url('../fonts/RobotoSlab-Regular.svg#RobotoSlab-Regular') format('svg');
-}
-
-@font-face
-{
-    font-family: 'Roboto Slab';
-    font-weight: 100;
-    font-style: normal;
-
-    src: url('../fonts/RobotoSlab-Thin.eot');
-    src: url('../fonts/RobotoSlab-Thin.eot?#iefix') format('embedded-opentype'), url('../fonts/RobotoSlab-Thin.woff2') format('woff2'), url('../fonts/RobotoSlab-Thin.woff') format('woff'), url('../fonts/RobotoSlab-Thin.ttf') format('truetype'), url('../fonts/RobotoSlab-Thin.svg#RobotoSlab-Thin') format('svg');
-}
-
-@font-face
-{
-    font-family: 'Roboto Slab';
-    font-weight: 300;
-    font-style: normal;
-
-    src: url('../fonts/RobotoSlab-Light.eot');
-    src: url('../fonts/RobotoSlab-Light.eot?#iefix') format('embedded-opentype'), url('../fonts/RobotoSlab-Light.woff2') format('woff2'), url('../fonts/RobotoSlab-Light.woff') format('woff'), url('../fonts/RobotoSlab-Light.ttf') format('truetype'), url('../fonts/RobotoSlab-Light.svg#RobotoSlab-Light') format('svg');
-}
-
-@font-face
-{
-    font-family: 'Roboto Slab';
-    font-weight: bold;
-    font-style: normal;
-
-    src: url('../fonts/RobotoSlab-Bold.eot');
-    src: url('../fonts/RobotoSlab-Bold.eot?#iefix') format('embedded-opentype'), url('../fonts/RobotoSlab-Bold.woff2') format('woff2'), url('../fonts/RobotoSlab-Bold.woff') format('woff'), url('../fonts/RobotoSlab-Bold.ttf') format('truetype'), url('../fonts/RobotoSlab-Bold.svg#RobotoSlab-Bold') format('svg');
-}
-
 .layout
 {
     display: -webkit-box;
@@ -8574,7 +8534,7 @@ button.close
 
 .nav
 {
-    font-family: Roboto Slab, Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
+    font-family: 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
     font-size: 14px;
 
     min-height: 600px;
@@ -9035,7 +8995,7 @@ button.close
 }
 .content__modules .caption h5
 {
-    font-family: Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
+    font-family: 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
     font-size: 16px;
 }
 
@@ -9075,641 +9035,6 @@ button.close
     max-width: 300px;
 }
 
-/*
-.header
-{
-    padding: 20px 20px;
-
-    background: #fff;
-}
-@media screen and (max-width: 480px)
-{
-    .header
-    {
-        position: relative;
-
-        padding: 10px 20px;
-
-        background: none;
-    }
-}
-
-.header__site
-{
-    font-family: Roboto Slab, Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
-    font-size: 32px;
-    font-weight: bold;
-    line-height: 60px;
-
-    text-decoration: none !important;
-
-    color: #231f20 !important;
-}
-@media screen and (max-width: 480px)
-{
-    .header__site
-    {
-        display: block;
-        overflow: hidden;
-
-        width: 42px;
-    }
-}
-
-.header__logo
-{
-    height: 60px;
-    margin: 0 10px 0 0;
-
-    vertical-align: top;
-}
-@media screen and (max-width: 480px)
-{
-    .header__logo
-    {
-        display: none;
-    }
-}
-
-.header__logo-mobile
-{
-    display: none;
-}
-@media screen and (max-width: 480px)
-{
-    .header__logo-mobile
-    {
-        display: block;
-
-        height: 40px;
-    }
-}
-
-@media screen and (max-width: 480px)
-{
-    .header__name
-    {
-        display: none;
-    }
-}
-
-.header__sider
-{
-    position: absolute;
-    z-index: 1010;
-    top: 15px;
-    right: 20px;
-
-    display: none;
-
-    box-sizing: border-box;
-    width: 30px;
-    height: 30px;
-
-    cursor: pointer;
-
-    -webkit-tap-highlight-color: transparent;
-}
-@media screen and (max-width: 480px)
-{
-    .header__sider
-    {
-        display: block;
-    }
-}
-
-.header__burger
-{
-    position: absolute;
-    top: 50%;
-    left: 0;
-
-    width: 30px;
-    height: 3px;
-    margin: -1px 0 0 0;
-
-    border-radius: 3px;
-    background: #fff;
-}
-.header__burger:before,
-.header__burger:after
-{
-    position: absolute;
-    top: -9px;
-    left: 0;
-
-    width: 100%;
-    height: 3px;
-    margin: -1px 0 0 0;
-
-    content: '';
-    -webkit-transition: .12s linear;
-            transition: .12s linear;
-
-    border-radius: 3px;
-    background: inherit;
-}
-.header__burger:after
-{
-    top: auto;
-    bottom: -10px;
-}
-.page_open .header__burger
-{
-    background: transparent;
-}
-.page_open .header__burger:before
-{
-    top: 0;
-
-    -webkit-transform: rotate(45deg);
-        -ms-transform: rotate(45deg);
-            transform: rotate(45deg);
-
-    background: #326de6;
-}
-.page_open .header__burger:after
-{
-    bottom: 0;
-
-    -webkit-transform: rotate(-45deg);
-        -ms-transform: rotate(-45deg);
-            transform: rotate(-45deg);
-
-    background: #326de6;
-}
-
-.footer
-{
-    font-family: Roboto Slab, Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
-
-    margin: 20px 0 0;
-
-    text-align: left;
-}
-.layout > .footer
-{
-    display: none;
-}
-@media screen and (max-width: 480px)
-{
-    .footer
-    {
-        display: none;
-    }
-    .layout > .footer
-    {
-        display: block;
-
-        padding: 0 0 20px;
-
-        text-align: center;
-
-        background: #326de6;
-    }
-    .footer:before
-    {
-        position: relative;
-
-        display: block;
-
-        height: 15px;
-        margin: 0 0 40px;
-
-        content: '';
-
-        background: -webkit-linear-gradient(45deg, #326de6 0%, #4cffd4 100%);
-        background:         linear-gradient(45deg, #326de6 0%, #4cffd4 100%);
-    }
-}
-
-.footer__content
-{
-    padding: 0 20px;
-}
-
-.footer__social
-{
-    font-size: 32px;
-    line-height: 1;
-
-    width: 60px;
-    margin: 0;
-    padding: 10px 0;
-
-    list-style: none;
-
-    text-align: left;
-
-    border-top: 1px solid rgba(255, 255, 255, .3);
-    border-bottom: 1px solid rgba(255, 255, 255, .3);
-}
-.page_open .footer__social
-{
-    width: auto;
-    padding: 0;
-
-    border: none;
-}
-@media screen and (min-width: 999px)
-{
-    .footer__social
-    {
-        width: auto;
-        padding: 0;
-
-        border: none;
-    }
-}
-@media screen and (max-width: 480px)
-{
-    .footer__social
-    {
-        width: auto;
-        padding: 0;
-
-        text-align: center;
-
-        border: none;
-    }
-}
-@media screen and (min-width: 1000px)
-{
-    .page_desktop_hide .footer__social
-    {
-        width: 60px;
-        padding: 10px 0;
-
-        border-top: 1px solid rgba(255, 255, 255, .3);
-        border-bottom: 1px solid rgba(255, 255, 255, .3);
-    }
-}
-
-.footer__social-item
-{
-    width: 60px;
-    margin: 10px 0;
-
-    text-align: center;
-}
-.page_open .footer__social-item
-{
-    display: inline-block;
-
-    width: auto;
-    margin: 0 20px 0 0;
-
-    text-align: left;
-}
-@media screen and (min-width: 999px)
-{
-    .footer__social-item
-    {
-        display: inline-block;
-
-        width: auto;
-        margin: 0 20px 0 0;
-
-        text-align: left;
-    }
-}
-@media screen and (max-width: 480px)
-{
-    .footer__social-item
-    {
-        display: inline-block;
-
-        width: auto;
-        margin: 0 10px;
-
-        text-align: center;
-    }
-}
-@media screen and (min-width: 1000px)
-{
-    .page_desktop_hide .footer__social-item
-    {
-        width: 60px;
-        margin: 10px 0;
-
-        text-align: center;
-    }
-}
-
-.footer__network
-{
-    display: inline-block;
-
-    text-decoration: none;
-
-    opacity: .7;
-    color: #fff;
-}
-.page_open .footer__network
-{
-    opacity: 1;
-    color: #326de6;
-}
-@media screen and (min-width: 999px)
-{
-    .footer__network
-    {
-        opacity: 1;
-        color: #326de6;
-    }
-}
-@media screen and (max-width: 480px)
-{
-    .footer__network
-    {
-        display: inline-block;
-
-        width: auto;
-        margin: 0 20px 0 0;
-    }
-    .footer__network:hover
-    {
-        opacity: 1;
-        color: #fff;
-    }
-}
-@media screen and (min-width: 1000px)
-{
-    .page_desktop_hide .footer__network
-    {
-        display: inline-block;
-
-        text-decoration: none;
-
-        opacity: .7;
-        color: #fff;
-    }
-}
-
-.footer__menu
-{
-    display: none;
-
-    margin: 20px 0;
-    padding: 10px 0;
-
-    list-style: none;
-
-    border-top: 1px solid rgba(255, 255, 255, .3);
-    border-bottom: 1px solid rgba(255, 255, 255, .3);
-}
-.page_open .footer__menu
-{
-    display: block;
-}
-@media screen and (min-width: 999px)
-{
-    .footer__menu
-    {
-        display: block;
-    }
-}
-@media screen and (max-width: 480px)
-{
-    .footer__menu
-    {
-        display: block;
-
-        padding-bottom: 40px;
-
-        text-align: left;
-
-        border-top: none;
-        border-bottom: 2px solid rgba(255, 255, 255, .3);
-    }
-}
-@media screen and (min-width: 1000px)
-{
-    .page_desktop_hide .footer__menu
-    {
-        display: none;
-    }
-}
-
-.footer__item
-{
-    margin: 10px 0;
-}
-@media screen and (max-width: 480px)
-{
-    .footer__item:before
-    {
-        display: inline;
-
-        margin: 0 5px 0 0;
-
-        content: '›';
-
-        opacity: .7;
-        color: #fff;
-    }
-}
-
-.footer__link
-{
-    color: #273d6d;
-}
-@media screen and (max-width: 480px)
-{
-    .footer__link
-    {
-        opacity: .7;
-        color: #fff;
-    }
-    .footer__link:hover
-    {
-        opacity: 1;
-        color: #fff;
-    }
-}
-
-.footer__copyright
-{
-    font-size: 12px;
-    padding-top: 20px;
-}
-.page_open .footer__copyright
-{
-    display: block;
-}
-@media screen and (min-width: 999px)
-{
-    .footer__copyright
-    {
-        display: block;
-    }
-}
-@media screen and (max-width: 480px)
-{
-    .footer__copyright
-    {
-        display: block;
-
-        color: #fff;
-    }
-    .footer__copyright b
-    {
-        font-size: 16px;
-
-        display: block;
-    }
-}
-@media screen and (min-width: 1000px)
-{
-    .page_desktop_hide .footer__copyright
-    {
-        display: none;
-    }
-}
-*/
-
-/*
-.scrolltop
-{
-    position: fixed;
-    z-index: 300;
-    bottom: -100px;
-    left: 20px;
-
-    display: none;
-
-    width: 56px;
-    height: 56px;
-
-    -webkit-transition: .36s ease-out;
-            transition: .36s ease-out;
-
-    opacity: 0;
-    border: 2px solid #fff;
-    border-radius: 50%;
-    outline: none;
-}
-.scrolltop:before,
-.scrolltop:after
-{
-    position: absolute;
-    top: 23px;
-    left: 4px;
-
-    width: 26px;
-    height: 2px;
-
-    content: '';
-    -webkit-transform: rotate(-45deg);
-        -ms-transform: rotate(-45deg);
-            transform: rotate(-45deg);
-
-    background: #fff;
-}
-.scrolltop:after
-{
-    right: 4px;
-    left: auto;
-
-    -webkit-transform: rotate(45deg);
-        -ms-transform: rotate(45deg);
-            transform: rotate(45deg);
-
-    background: #fff;
-}
-@media screen and (max-width: 992px)
-{
-    .scrolltop
-    {
-        display: block;
-    }
-}
-@media screen and (max-width: 480px)
-{
-    .scrolltop
-    {
-        background: #326de6;
-        background: rgba(50, 109, 230, .5);
-        box-shadow: 0 0 0 1px #326de6;
-    }
-}
-.scrolltop_active
-{
-    bottom: 20px;
-
-    opacity: 1;
-}
-*/
-
-
-/*
-body
-{
-    font-family: Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
-    font-size: 15px;
-    line-height: 1.5;
-
-    min-height: 100vh;
-
-    background: #eee;
-}
-body.page_open
-{
-    overflow: hidden;
-}
-
-h1,
-h2,
-h3,
-h4,
-h5,
-h6
-{
-    font-family: Roboto Slab, Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
-}
-
-h1
-{
-    font-size: 36px;
-    font-weight: bold;
-
-    margin-bottom: 20px;
-}
-
-h2,
-h3
-{
-    padding-bottom: 10px;
-
-    border-bottom: 1px solid #ebebec;
-}
-
-h2
-{
-    font-size: 28px;
-}
-
-.title-light
-{
-    border: none;
-}
-
-a
-{
-    color: #326de6;
-}
-
-p a
-{
-    text-decoration: underline;
-}
-p a:hover
-{
-    text-decoration: none;
-}
-*/
-
-
 .breadcrumb
 {
     font-weight: 100;
@@ -9735,12 +9060,6 @@ p a:hover
     content: '|';
 }
 
-/* .btn
-{
-    font-family: Roboto Slab, Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
-
-    border-radius: 0;
-} */
 .btn.btn-success
 {
     color: #273d6d;
@@ -9945,7 +9264,7 @@ p a:hover
 
 .katacoda__alert
 {
-    font-family: Inconsolata, Roboto, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
+    font-family: Inconsolata, 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
 
     display: none;
 
diff --git a/content/en/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/en/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index 8c6da7c579..77e707c429 100644
--- a/content/en/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/en/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 To interact with the Terminal, please use the desktop/tablet version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/en/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/en/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 37f7cc0fbe..42663ecdaa 100644
--- a/content/en/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/en/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 To interact with the Terminal, please use the desktop/tablet version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">

From 3fa95f0c9375532fcdb1a17b202bd5f443ada4f6 Mon Sep 17 00:00:00 2001
From: Ben Hall <ben@benhall.me.uk>
Date: Wed, 9 Sep 2020 08:53:08 +0100
Subject: [PATCH 267/496] Remove Roboto reference from interactive translated
 pages

Signed-off-by: Ben Hall <ben@benhall.me.uk>
---
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../kubernetes-basics/create-cluster/cluster-interactive.html   | 2 +-
 .../kubernetes-basics/deploy-app/deploy-interactive.html        | 2 +-
 .../kubernetes-basics/explore/explore-interactive.html          | 2 +-
 .../tutorials/kubernetes-basics/expose/expose-interactive.html  | 2 +-
 .../tutorials/kubernetes-basics/scale/scale-interactive.html    | 2 +-
 .../tutorials/kubernetes-basics/update/update-interactive.html  | 2 +-
 50 files changed, 50 insertions(+), 50 deletions(-)

diff --git a/content/de/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/de/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index a8e40fad5e..7a5fe0ce4f 100644
--- a/content/de/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/de/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Um mit dem Terminal zu interagieren, verwenden Sie bitte die Desktop- / Tablet-Version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/de/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/de/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index f6c836c6c4..8c74aafd78 100644
--- a/content/de/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/de/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -23,7 +23,7 @@ weight: 20
                 Um mit dem Terminal zu interagieren, verwenden Sie bitte die Desktop- / Tablet-Version
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/de/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/de/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 9d4026933e..d3fb05eff5 100644
--- a/content/de/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/de/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 Um mit dem Terminal zu interagieren, verwenden Sie bitte die Desktop- / Tablet-Version
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/de/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/de/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 2c6ebd5ecd..ab5b880397 100644
--- a/content/de/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/de/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Um mit dem Terminal zu interagieren, verwenden Sie bitte die Desktop- / Tablet-Version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/de/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/de/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index 1ea0c1a70d..648623339f 100644
--- a/content/de/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/de/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Um mit dem Terminal zu interagieren, verwenden Sie bitte die Desktop- / Tablet-Version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/de/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/de/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 8971b0dd17..448ddc81b9 100644
--- a/content/de/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/de/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Um mit dem Terminal zu interagieren, verwenden Sie bitte die Desktop- / Tablet-Version
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/es/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/es/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index b2f5b453de..a91e00f679 100644
--- a/content/es/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/es/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Para interactuar con la Terminal, use la versión de escritorio / tableta
             </div>
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="es" data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="es" data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/es/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/es/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 269fa5c387..28a2f35a0e 100644
--- a/content/es/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/es/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -23,7 +23,7 @@ weight: 20
                 Para interactuar con la Terminal, use la versión de escritorio / tableta
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="es" data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="es" data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/fr/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/fr/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index 564745c86d..c8137aa987 100644
--- a/content/fr/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/fr/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Pour interagir avec le terminal, veuillez utiliser la version bureau / tablette.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/fr/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/fr/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 99bab76a41..de064cd22e 100644
--- a/content/fr/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/fr/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -23,7 +23,7 @@ weight: 20
                 Pour interagir avec le terminal, veuillez utiliser la version bureau / tablette.
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index aeae9f469d..f1c2921b96 100644
--- a/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Layar terlalu kecil untuk berinteraksi dengan Terminal, silahkan gunakan desktop/tablet.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/ja/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/ja/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index 4d99a7b1cc..8f260a0831 100644
--- a/content/ja/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/ja/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 ターミナルを使うには、PCまたはタブレットをお使いください
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/ja/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/ja/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 9b59db721b..4af01cc759 100644
--- a/content/ja/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/ja/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -30,7 +30,7 @@ weight: 20
                 ターミナルを使うには、PCまたはタブレットをお使いください
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/ja/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/ja/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 2b35d0eefb..78f62dd310 100644
--- a/content/ja/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/ja/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 ターミナルを使うには、PCまたはタブレットをお使いください
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ja/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/ja/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 0f02900cd5..eadf0ed06d 100644
--- a/content/ja/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/ja/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 ターミナルを使うには、PCまたはタブレットをお使いください
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ja/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/ja/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index 77b5890c8a..2a6185b57e 100644
--- a/content/ja/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/ja/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 ターミナルを使うには、PCまたはタブレットをお使いください
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ja/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/ja/docs/tutorials/kubernetes-basics/update/update-interactive.html
index ae0c72cbd3..dd8e0a6266 100644
--- a/content/ja/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/ja/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 ターミナルを使うには、PCまたはタブレットをお使いください
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index 1dc1733cf8..b9aca86acd 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -23,7 +23,7 @@ weight: 20
             </div>
             <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/1"
                  data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                 data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab"
+                
                  data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
diff --git a/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index e2b8098b9e..3643dfa36b 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -33,7 +33,7 @@ weight: 20
 
             <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/7"
                  data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                 data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab"
+                
                  data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
diff --git a/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 01e7fcbf11..a0190373f8 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -26,7 +26,7 @@ weight: 20
 
             <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/4"
                  data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                 data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab"
+                
                  data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
diff --git a/content/ko/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index f81c1fd09a..bfbb0eb1c8 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 터미널과 상호작용하기 위해, 데스크탑/태블릿 버전을 이용한다.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index a4e3aa4ed1..dca41b91a0 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -23,7 +23,7 @@ weight: 20
             </div>
             <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/5"
                  data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                 data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab"
+                
                  data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
diff --git a/content/ko/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 029acc6331..24da082b89 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 터미널과 상호작용하기 위해, 데스크탑/태블릿 버전을 이용한다.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/pl/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/pl/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index 019b6837fe..12211e42b6 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Ekran jest za wąski do pracy z terminalem. Użyj wersji na desktop/tablet.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/pl/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/pl/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 4b6676a0c2..64c1a0a9a1 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -32,7 +32,7 @@ weight: 20
                 Do pracy z terminalem użyj wersji na desktop/tablet
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/pl/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/pl/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 1fded17990..1ae1e88382 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 Do pracy z terminalem użyj wersji na desktop/tablet
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/pl/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/pl/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 3d61cf2d1d..a1aca99ce3 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Do pracy z terminalem użyj wersji na desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/pl/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/pl/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index f4cbe234bb..e8017f5ad6 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Do pracy z terminalem użyj wersji na desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/pl/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/pl/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 46a3172ee8..07731b5849 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Do pracy z terminalem użyj wersji na desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ru/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/ru/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index a473d280d3..a918dd2d6f 100644
--- a/content/ru/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/ru/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
               Данный экран слишком маленький, чтобы работать с терминалом, пожалуйста, используйте компьютер или планшет.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/ru/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/ru/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index f95fd9537b..02b45c8da2 100644
--- a/content/ru/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/ru/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -31,7 +31,7 @@ weight: 20
                 Для работы с терминалом, пожалуйста, используйте компьютер или планшет.
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/ru/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/ru/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index b0c9e767cb..ec9f66a43c 100644
--- a/content/ru/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/ru/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 Для работы с терминалом, пожалуйста, используйте компьютер или планшет.
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ru/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/ru/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 791d1a82e2..be2d9c85a8 100644
--- a/content/ru/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/ru/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для работы с терминалом, пожалуйста, используйте компьютер или планшет.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ru/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/ru/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index e429b92118..d7d82990bf 100644
--- a/content/ru/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/ru/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для работы с терминалом, пожалуйста, используйте компьютер или планшет
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ru/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/ru/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 5dbfa154df..1c7b42b73e 100644
--- a/content/ru/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/ru/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для работы с терминалом, пожалуйста, используйте компьютер или планшет
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/uk/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/uk/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index f90f229c2a..ddcbbc1416 100644
--- a/content/uk/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/uk/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для роботи з терміналом використовуйте комп'ютер або планшет
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/uk/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/uk/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index d91c2bb1c0..0974776265 100644
--- a/content/uk/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/uk/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -23,7 +23,7 @@ weight: 20
                 Для роботи з терміналом використовуйте комп'ютер або планшет
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/uk/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/uk/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 56a3793019..59a46eabaf 100644
--- a/content/uk/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/uk/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 Для роботи з терміналом використовуйте комп'ютер або планшет
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/uk/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/uk/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 9ed658fa21..cd52d244cb 100644
--- a/content/uk/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/uk/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для роботи з терміналом використовуйте комп'ютер або планшет
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/uk/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/uk/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index a405a98e92..253e6119ad 100644
--- a/content/uk/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/uk/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для роботи з терміналом використовуйте комп'ютер або планшет
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/uk/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/uk/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 0ac0d169a8..9ecd8aa95a 100644
--- a/content/uk/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/uk/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Для роботи з терміналом використовуйте комп'ютер або планшет
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/vi/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/vi/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index b9adf950b8..76fd8004ee 100644
--- a/content/vi/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/vi/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Để tương tác với Terminal, hãy dùng phiên bản dành cho desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/vi/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/vi/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 9cba9b9ee6..b3b0b141af 100644
--- a/content/vi/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/vi/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -23,7 +23,7 @@ weight: 20
                 Để tương tác với Terminal, hãy sử dụng phiên bản dành cho desktop/tablet
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/vi/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/vi/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index c592705757..2a8d45f170 100644
--- a/content/vi/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/vi/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 Để tương tác với Terminal, hãy sử dụng phiên bản dành cho desktop/tablet
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/zh/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/zh/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index 01dea341b8..2231587445 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -33,7 +33,7 @@ weight: 20
                 要与终端交互，请使用桌面/平板
             
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/zh/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/zh/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 4adb6a44a2..8b6693beae 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -26,7 +26,7 @@ weight: 20
                 要与终端进行交互，请使用桌面/平板电脑版本
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/zh/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/zh/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 32f52502b4..3d94bda16f 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -37,7 +37,7 @@ weight: 20
                 要与终端交互，请使用桌面/平板 版本
             </div>
             
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/zh/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/zh/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 55297633a7..bf20a9e4f3 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -33,7 +33,7 @@ weight: 20
                 要与终端交互，请使用台式机/平板电脑
                 
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/zh/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/zh/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index d612cdfce4..9f29959853 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -29,7 +29,7 @@ weight: 20
                 -->
                 与终端交互，请使用桌面/平板电脑版本
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/zh/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/zh/docs/tutorials/kubernetes-basics/update/update-interactive.html
index 0f9ea050c3..777d7515ad 100644
--- a/content/zh/docs/tutorials/kubernetes-basics/update/update-interactive.html
+++ b/content/zh/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -27,7 +27,7 @@ weight: 20
             <div class="katacoda__alert">
                 要与终端交互，请使用桌面/平板电脑版本
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">

From 87d36ecfe14c7e7fdba4306ef9cc31a051deb0e4 Mon Sep 17 00:00:00 2001
From: Paulo Gomes <pjbgf@linux.com>
Date: Wed, 9 Sep 2020 09:48:47 +0100
Subject: [PATCH 268/496] Fix incorrect guidance on enabling EventRateLimit

---
 .../docs/reference/access-authn-authz/admission-controllers.md  | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md
index fda7119caf..0684ae22b7 100644
--- a/content/en/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md
@@ -202,8 +202,6 @@ is recommended instead.
 This admission controller mitigates the problem where the API server gets flooded by
 event requests. The cluster admin can specify event rate limits by:
 
- * Ensuring that `eventratelimit.admission.k8s.io/v1alpha1=true` is included in the
-   `--runtime-config` flag for the API server;
  * Enabling the `EventRateLimit` admission controller;
  * Referencing an `EventRateLimit` configuration file from the file provided to the API
    server's command line flag `--admission-control-config-file`:

From 651e339928d3a38700853d2d5cf1b3ea5dec594b Mon Sep 17 00:00:00 2001
From: Jordan Liggitt <liggitt@google.com>
Date: Wed, 9 Sep 2020 10:58:21 -0400
Subject: [PATCH 269/496] Redirect to correct 1.19 release blog date

---
 static/_redirects | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/_redirects b/static/_redirects
index 56b1af54bd..805c7b8546 100644
--- a/static/_redirects
+++ b/static/_redirects
@@ -20,6 +20,7 @@
 /vi/docs/     /vi/docs/home/ 301!
 /zh/docs/     /zh/docs/home/ 301!
 /blog/2018/03/kubernetes-1.10-stabilizing-storage-security-networking/     /blog/2018/03/26/kubernetes-1.10-stabilizing-storage-security-networking/     301!
+/blog/2020/08/25/kubernetes-release-1.19-accentuate-the-paw-sitive/     /blog/2020/08/26/kubernetes-release-1.19-accentuate-the-paw-sitive/     301!
 /docs/admin/     /docs/concepts/cluster-administration/ 301
 /docs/admin/add-ons/     /docs/concepts/cluster-administration/addons/ 301
 /docs/admin/addons/     /docs/concepts/cluster-administration/addons/ 301

From 86c2b3ba3872bad9b0ee415b292a0555eedec8c3 Mon Sep 17 00:00:00 2001
From: Maciej Filocha <maciej.filocha@gmail.com>
Date: Wed, 9 Sep 2020 16:50:03 +0200
Subject: [PATCH 270/496] Change links for localized tutorials in Polish

Localized links in a page body are not automatically detected/created.
Thus this manual change.
---
 content/pl/docs/tutorials/_index.md                     | 4 ++--
 content/pl/docs/tutorials/kubernetes-basics/_index.html | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/pl/docs/tutorials/_index.md b/content/pl/docs/tutorials/_index.md
index 5593490dc3..5d398da14a 100644
--- a/content/pl/docs/tutorials/_index.md
+++ b/content/pl/docs/tutorials/_index.md
@@ -18,11 +18,11 @@ Przed zapoznaniem się z samouczkami warto stworzyć zakładkę do
 
 ## Podstawy
 
-* [Podstawy Kubernetes](/docs/tutorials/kubernetes-basics/) to interaktywny samouczek, który pomoże zrozumieć system Kubernetes i wypróbować jego podstawowe możliwości.
+* [Podstawy Kubernetesa (PL)](/pl/docs/tutorials/kubernetes-basics/) to interaktywny samouczek, który pomoże zrozumieć system Kubernetes i wypróbować jego podstawowe możliwości.
 
 * [Introduction to Kubernetes (edX)](https://www.edx.org/course/introduction-kubernetes-linuxfoundationx-lfs158x#)
 
-* [Hello Minikube](/docs/tutorials/hello-minikube/)
+* [Hello Minikube (PL)](/pl/docs/tutorials/hello-minikube/)
 
 ## Konfiguracja
 
diff --git a/content/pl/docs/tutorials/kubernetes-basics/_index.html b/content/pl/docs/tutorials/kubernetes-basics/_index.html
index 780c21d0ff..93cc5ea966 100644
--- a/content/pl/docs/tutorials/kubernetes-basics/_index.html
+++ b/content/pl/docs/tutorials/kubernetes-basics/_index.html
@@ -1,6 +1,6 @@
 ---
 title: Naucz się podstaw
-linkTitle: Podstawy Kubernetes
+linkTitle: Podstawy Kubernetesa
 weight: 10
 card:
   name: tutorials
@@ -22,7 +22,7 @@ card:
 
     <div class="row">
       <div class="col-md-9">
-        <h2>Podstawy Kubernetes</h2>
+        <h2>Podstawy Kubernetesa</h2>
         <p>Ten samouczek poprowadzi Cię przez podstawy systemu zarządzania zadaniami na klastrze Kubernetes. W każdym module znajdziesz najważniejsze informacje o głównych pojęciach i funkcjonalnościach Kubernetes oraz interaktywny samouczek online. Dzięki samouczkom nauczysz się zarządzać prostym klasterem i skonteneryzowanymi aplikacjami uruchamianymi na tym klastrze.</p>
         <p>Nauczysz się, jak:</p>
         <ul>

From d3475e6a5c2db54c885d709882544427555c1c09 Mon Sep 17 00:00:00 2001
From: Lorenzo Paris <lparis@vmware.com>
Date: Wed, 9 Sep 2020 14:37:24 -0700
Subject: [PATCH 271/496] Update
 content/en/docs/concepts/storage/storage-classes.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 content/en/docs/concepts/storage/storage-classes.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index 9926ffc973..25edf94aed 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -422,7 +422,7 @@ There are two types of provisioners for vSphere storage classes:
 
 In-tree provisioners are [deprecated](https://kubernetes.io/blog/2019/12/09/kubernetes-1-17-feature-csi-migration-beta/#why-are-we-migrating-in-tree-plugins-to-csi). For more information on the CSI provisioner, see [Kubernetes vSphere CSI Driver](https://vsphere-csi-driver.sigs.k8s.io/) and [vSphereVolume CSI migration](https://kubernetes.io/docs/concepts/storage/volumes/#csi-migration-5).
 
-#### CSI Provisioner
+#### CSI Provisioner {#vsphere-provisioner-csi}
 
 The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters.
 
@@ -846,4 +846,3 @@ Delaying volume binding allows the scheduler to consider all of a Pod's
 scheduling constraints when choosing an appropriate PersistentVolume for a
 PersistentVolumeClaim.
 
-

From 7ff239625bb909934d7d0723d935e6dad04a012a Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Tue, 8 Sep 2020 15:14:16 +0800
Subject: [PATCH 272/496] Improve object management page by adding a hint

The current instruction doesn't work if one is using `generateName`
field when creating an object.
---
 .../manage-kubernetes-objects/imperative-config.md   | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md b/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md
index a8faefd63e..2b97ed271c 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/imperative-config.md
@@ -64,6 +64,18 @@ configuration file.
 
 * `kubectl delete -f <filename|url>`
 
+{{< note >}}
+If configuration file has specified the `generateName` field in the `metadata`
+section instead of the `name` field, you cannot delete the object using
+`kubectl delete -f <filename|url>`.
+You will have to use other flags for deleting the object. For example:
+
+```shell
+kubectl delete <type> <name>
+kubectl delete <type> -l <label>
+```
+{{< /note >}}
+
 ## How to view an object
 
 You can use `kubectl get -f` to view information about an object that is

From a5cbc1f31260661ba8c96989b3c96192bce21ec9 Mon Sep 17 00:00:00 2001
From: Maxime Guyot <maxime@root314.com>
Date: Thu, 10 Sep 2020 09:47:44 +0200
Subject: [PATCH 273/496] Update Kubespray page

---
 .../setup/production-environment/tools/kubespray.md | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubespray.md b/content/en/docs/setup/production-environment/tools/kubespray.md
index 02d99d926a..ac635101a0 100644
--- a/content/en/docs/setup/production-environment/tools/kubespray.md
+++ b/content/en/docs/setup/production-environment/tools/kubespray.md
@@ -13,12 +13,13 @@ Kubespray is a composition of [Ansible](https://docs.ansible.com/) playbooks, [i
 * a highly available cluster
 * composable attributes
 * support for most popular Linux distributions
-  * Container Linux by CoreOS
+  * Ubuntu 16.04, 18.04, 20.04
+  * CentOS/RHEL/Oracle Linux 7, 8
   * Debian Buster, Jessie, Stretch, Wheezy
-  * Ubuntu 16.04, 18.04
-  * CentOS/RHEL/Oracle Linux 7
-  * Fedora 28
+  * Fedora 31, 32
+  * Fedora CoreOS
   * openSUSE Leap 15
+  * Flatcar Container Linux by Kinvolk
 * continuous integration tests
 
 To choose a tool which best fits your use case, read [this comparison](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/comparisons.md) to
@@ -32,8 +33,8 @@ To choose a tool which best fits your use case, read [this comparison](https://g
 
 Provision servers with the following [requirements](https://github.com/kubernetes-sigs/kubespray#requirements):
 
-* **Ansible v2.7.8 and python-netaddr is installed on the machine that will run Ansible commands**
-* **Jinja 2.9 (or newer) is required to run the Ansible Playbooks**
+* **Ansible v2.9 and python-netaddr is installed on the machine that will run Ansible commands**
+* **Jinja 2.11 (or newer) is required to run the Ansible Playbooks**
 * The target servers must have access to the Internet in order to pull docker images. Otherwise, additional configuration is required ([See Offline Environment](https://github.com/kubernetes-sigs/kubespray/blob/master/docs/offline-environment.md))
 * The target servers are configured to allow **IPv4 forwarding**
 * **Your ssh key must be copied** to all the servers part of your inventory

From 957fcae26b29409ed564e7fd409380133a97d3a1 Mon Sep 17 00:00:00 2001
From: Ben Hall <Ben@Benhall.me.uk>
Date: Thu, 10 Sep 2020 09:30:33 +0100
Subject: [PATCH 274/496] Update
 content/en/docs/tutorials/kubernetes-basics/public/css/styles.css

Co-authored-by: Celeste Horgan <celeste@cncf.io>
---
 .../en/docs/tutorials/kubernetes-basics/public/css/styles.css   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css b/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
index a4a7c321cc..21d779dcd3 100644
--- a/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
+++ b/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
@@ -8534,7 +8534,7 @@ button.close
 
 .nav
 {
-    font-family: 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
+    font-family: 'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif;
     font-size: 14px;
 
     min-height: 600px;

From 537957f8b4fbd5ed33557cf7aa565252f6be37e1 Mon Sep 17 00:00:00 2001
From: Ben Hall <Ben@Benhall.me.uk>
Date: Thu, 10 Sep 2020 09:30:49 +0100
Subject: [PATCH 275/496] Update
 content/en/docs/tutorials/kubernetes-basics/public/css/styles.css

Co-authored-by: Celeste Horgan <celeste@cncf.io>
---
 .../en/docs/tutorials/kubernetes-basics/public/css/styles.css   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css b/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
index 21d779dcd3..a9e2a62009 100644
--- a/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
+++ b/content/en/docs/tutorials/kubernetes-basics/public/css/styles.css
@@ -8995,7 +8995,7 @@ button.close
 }
 .content__modules .caption h5
 {
-    font-family: 'Helvetica Neue', Helvetica, 'Open Sans', Arial, sans-serif;
+    font-family: 'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif;
     font-size: 16px;
 }
 

From 26c784ae377436932244a428020547d0e86bbc92 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 10 Sep 2020 19:38:40 +0900
Subject: [PATCH 276/496] Improve the translation of "organization"

Co-authored-by: nasa9084 <nasa9084@users.noreply.github.com>
---
 content/ja/docs/contribute/style/content-organization.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/style/content-organization.md b/content/ja/docs/contribute/style/content-organization.md
index 36f141acfd..cc9e3b836b 100644
--- a/content/ja/docs/contribute/style/content-organization.md
+++ b/content/ja/docs/contribute/style/content-organization.md
@@ -1,5 +1,5 @@
 ---
-title: コンテンツの構成
+title: コンテンツの構造化
 content_type: concept
 weight: 40
 ---

From 8d7792555447312e3d649cfe4dd94a0039c46f7f Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 10 Sep 2020 20:20:07 +0900
Subject: [PATCH 277/496] Update content-organization.md

---
 content/ja/docs/contribute/style/content-organization.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/contribute/style/content-organization.md b/content/ja/docs/contribute/style/content-organization.md
index cc9e3b836b..1ecc86307f 100644
--- a/content/ja/docs/contribute/style/content-organization.md
+++ b/content/ja/docs/contribute/style/content-organization.md
@@ -6,7 +6,7 @@ weight: 40
 
 <!-- overview -->
 
-このサイトではHugoを使用しています。Hugoでは、[コンテンツの構成](https://gohugo.io/content-management/organization/)がコアコンセプトとなっています。
+このサイトではHugoを使用しています。Hugoでは、[コンテンツの構造化](https://gohugo.io/content-management/organization/)がコアコンセプトとなっています。
 
 <!-- body -->
 

From acbaf2577a9ab4711612ab750af0109926136f65 Mon Sep 17 00:00:00 2001
From: Kumar Kaushik <kkaushik@apple.com>
Date: Thu, 10 Sep 2020 10:30:18 -0700
Subject: [PATCH 278/496] Limited resources in quota when scoped for priority
 class

---
 content/en/docs/concepts/policy/resource-quotas.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/content/en/docs/concepts/policy/resource-quotas.md b/content/en/docs/concepts/policy/resource-quotas.md
index 6a29cb1741..23b731ae41 100644
--- a/content/en/docs/concepts/policy/resource-quotas.md
+++ b/content/en/docs/concepts/policy/resource-quotas.md
@@ -208,6 +208,19 @@ field in the quota spec.
 
 A quota is matched and consumed only if `scopeSelector` in the quota spec selects the pod.
 
+When quota is scoped for priority class using `scopeSelector` field, quota object is restricted to track only following resources:
+
+* `pods`
+* `cpu`
+* `memory`
+* `ephemeral-storage`
+* `limits.cpu`
+* `limits.memory`
+* `limits.ephemeral-storage`
+* `requests.cpu`
+* `requests.memory`
+* `requests.ephemeral-storage`
+
 This example creates a quota object and matches it with pods at specific priorities. The example
 works as follows:
 

From e0859fdc4bd58b0e97ec9b8997a7c7ac19bf40d7 Mon Sep 17 00:00:00 2001
From: cimes-isi <41927022+cimes-isi@users.noreply.github.com>
Date: Thu, 10 Sep 2020 14:19:29 -0400
Subject: [PATCH 279/496] Typo in 'What's next' section

---
 content/en/docs/concepts/workloads/pods/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/_index.md b/content/en/docs/concepts/workloads/pods/_index.md
index 90dd7b5618..bcd2cbcf16 100644
--- a/content/en/docs/concepts/workloads/pods/_index.md
+++ b/content/en/docs/concepts/workloads/pods/_index.md
@@ -254,7 +254,7 @@ but cannot be controlled from there.
 
 * Learn about the [lifecycle of a Pod](/docs/concepts/workloads/pods/pod-lifecycle/).
 * Learn about [PodPresets](/docs/concepts/workloads/pods/podpreset/).
-* Lean about [RuntimeClass](/docs/concepts/containers/runtime-class/) and how you can use it to
+* Learn about [RuntimeClass](/docs/concepts/containers/runtime-class/) and how you can use it to
   configure different Pods with different container runtime configurations.
 * Read about [Pod topology spread constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
 * Read about [PodDisruptionBudget](/docs/concepts/workloads/pods/disruptions/) and how you can use it to manage application availability during disruptions.

From dee4a58df247954a6f63430ffab6cd9d946fb275 Mon Sep 17 00:00:00 2001
From: Adolfo Julcamoro <julcamorosm@gmail.com>
Date: Thu, 10 Sep 2020 16:30:05 -0500
Subject: [PATCH 280/496] Update _index.md

---
 content/en/docs/concepts/containers/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/containers/_index.md b/content/en/docs/concepts/containers/_index.md
index edee4eccc4..746e1b7fc9 100644
--- a/content/en/docs/concepts/containers/_index.md
+++ b/content/en/docs/concepts/containers/_index.md
@@ -31,7 +31,7 @@ and default values for any essential settings.
 
 By design, a container is immutable: you cannot change the code of a
 container that is already running. If you have a containerized application
-and want to make changes, you need to build a new container that includes
+and want to make changes, you need to build a new image that includes
 the change, then recreate the container to start from the updated image.
 
 ## Container runtimes

From ffc303b1ad0a35418e8d7c3e119a30f8a87f6dc8 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Fri, 11 Sep 2020 00:30:47 +0300
Subject: [PATCH 281/496] translate subscribe button

---
 i18n/id.toml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/i18n/id.toml b/i18n/id.toml
index aa196a6758..44eb85784e 100644
--- a/i18n/id.toml
+++ b/i18n/id.toml
@@ -15,6 +15,9 @@ other = "Bersihkan"
 [prerequisites_heading]
 other = "Sebelum mulai"
 
+[subscribe_button]
+other = "Berlangganan"
+
 [whatsnext_heading]
 other = "Selanjutnya"
 

From 5f5b1f3d25a578460cfde5e4f44ae5f1ad787437 Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Fri, 11 Sep 2020 06:21:54 +0700
Subject: [PATCH 282/496] [id] Fix typo on Web UI (Dashboard)

Fix typo that causes the article not rendered properly for "Web UI (Dashboard)" in id l10n
---
 .../access-application-cluster/web-ui-dashboard.md     | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/id/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/id/docs/tasks/access-application-cluster/web-ui-dashboard.md
index 99d23c823d..c8023c79d4 100644
--- a/content/id/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/id/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -94,11 +94,11 @@ Jika membutuhkan, kamu dapat membuka bagian **Advanced options** di mana kamu da
   Contoh:
 
   ```conf
-release=1.0
-tier=frontend
-environment=pod
-track=stable
-```
+  release=1.0
+  tier=frontend
+  environment=pod
+  track=stable
+  ```
 
 - **_Namespace_**: Kubernetes mendukung beberapa klaster virtual yang berjalan di atas klaster fisik yang sama. Klaster virtual ini disebut [Namespace](/docs/tasks/administer-cluster/namespaces/). Mereka mengizinkan kamu untuk mempartisi sumber daya ke beberapa grup yang diberi nama secara logis.
 

From 21eb079ff7db1136cad13ef2b17cef8304b094c6 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 6 Sep 2020 13:58:46 +0800
Subject: [PATCH 283/496] Update kubelet reference doc

As usual, we have to manually synchronize the reference for kubelet
for which the auto reference generation fails to work.
---
 .../command-line-tools-reference/kubelet.md   | 656 ++++++++++--------
 1 file changed, 379 insertions(+), 277 deletions(-)

diff --git a/content/en/docs/reference/command-line-tools-reference/kubelet.md b/content/en/docs/reference/command-line-tools-reference/kubelet.md
index 54dc1a84d9..2a123796a1 100644
--- a/content/en/docs/reference/command-line-tools-reference/kubelet.md
+++ b/content/en/docs/reference/command-line-tools-reference/kubelet.md
@@ -42,21 +42,21 @@ kubelet [flags]
 <td colspan="2">--add-dir-header</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, adds the file directory to the header</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, adds the file directory to the header of the log messages</td>
 </tr>
     
 <tr>
-<td colspan="2">--address 0.0.0.0</td>
+<td colspan="2">--address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 0.0.0.0 </td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address for the Kubelet to serve on (set to 0.0.0.0 for all IPv4 interfaces and `::` for all IPv6 interfaces) (default 0.0.0.0) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address for the Kubelet to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces)  (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
     
 <tr>
 <td colspan="2">--allowed-unsafe-sysctls strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in *). Use these at your own risk. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated whitelist of unsafe sysctls or unsafe sysctl patterns (ending in `*`). Use these at your own risk. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
@@ -67,116 +67,108 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--anonymous-auth</td>
+<td colspan="2">--anonymous-auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: true</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:unauthenticated. (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of `system:anonymous`, and a group name of `system:unauthenticated`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--application-metrics-count-limit int</td>
+<td colspan="2">--application-metrics-count-limit int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 100</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"> Max number of application metrics to store (per container) (default 100) (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns,it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Max number of application metrics to store (per container) (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns,it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--authentication-token-webhook</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use the TokenReview API to determine authentication for bearer tokens. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Use the `TokenReview` API to determine authentication for bearer tokens. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--authentication-token-webhook-cache-ttl duration</td>
+<td colspan="2">--authentication-token-webhook-cache-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `2m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache responses from the webhook token authenticator. (default 2m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's
---config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache responses from the webhook token authenticator. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--authorization-mode string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Authorization mode for Kubelet server. Valid options are AlwaysAllow or Webhook. Webhook mode uses the SubjectAccessReview API to determine authorization. (default "AlwaysAllow" when --config flag is not provided; "Webhook" when --config flag presents.) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Authorization mode for Kubelet server. Valid options are `AlwaysAllow` or `Webhook`. `Webhook` mode uses the `SubjectAccessReview` API to determine authorization. (default "AlwaysAllow" when `--config` flag is not provided; "Webhook" when `--config` flag presents.) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--authorization-webhook-cache-authorized-ttl duration</td>
+<td colspan="2">--authorization-webhook-cache-authorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `5m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'authorized' responses from the webhook authorizer. (default 5m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'authorized' responses from the webhook authorizer. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--authorization-webhook-cache-unauthorized-ttl duration</td>
+<td colspan="2">--authorization-webhook-cache-unauthorized-ttl duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `30s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'unauthorized' responses from the webhook authorizer. (default 30s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The duration to cache 'unauthorized' responses from the webhook authorizer. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--azure-container-registry-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file container Azure container registry configuration information.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the file containing Azure container registry configuration information.</td>
 </tr>
 
 <tr>
-<td colspan="2">--boot-id-file string</td>
+<td colspan="2">--boot-id-file string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/proc/sys/kernel/random/boot_id`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of files to check for boot-id. Use the first one that exists. (default "/proc/sys/kernel/random/boot_id") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
-</tr>
-
-<tr>
-<td colspan="2">--bootstrap-checkpoint-path string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; Path to the directory where the checkpoints are stored</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of files to check for `boot-id`. Use the first one that exists. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--bootstrap-kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by --kubeconfig does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated client certificate and key is written to the path specified by --kubeconfig. The client certificate and key file will be stored in the directory pointed by --cert-dir.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeconfig file that will be used to get client certificate for kubelet. If the file specified by `--kubeconfig` does not exist, the bootstrap kubeconfig is used to request a client certificate from the API server. On success, a kubeconfig file referencing the generated client certificate and key is written to the path specified by `--kubeconfig`. The client certificate and key file will be stored in the directory pointed by `--cert-dir`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--cert-dir string</td>
+<td colspan="2">--cert-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/var/lib/kubelet/pki`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "/var/lib/kubelet/pki")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The directory where the TLS certs are located. If `--tls-cert-file` and `--tls-private-key-file` are provided, this flag will be ignored.</td>
 </tr>
 
 <tr>
-<td colspan="2">--cgroup-driver string</td>
+<td colspan="2">--cgroup-driver string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `cgroupfs`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Driver that the kubelet uses to manipulate cgroups on the host.  Possible values: 'cgroupfs', 'systemd' (default "cgroupfs") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)/td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Driver that the kubelet uses to manipulate cgroups on the host.  Possible values: `cgroupfs`, `systemd`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)/td>
 </tr>
 
 <tr>
-<td colspan="2">--cgroup-root string</td>
+<td colspan="2">--cgroup-root string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `''`</td>
 </tr>
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;">Optional root cgroup to use for pods. This is handled by the container runtime on a best effort basis. Default: '', which means use the container runtime default. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--cgroups-per-qos</td>
+<td colspan="2">--cgroups-per-qos&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable creation of QoS cgroup hierarchy, if true top level QoS and pod cgroups are created. (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable creation of QoS cgroup hierarchy, if true top level QoS and pod cgroups are created. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--chaos-chance float</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If > 0.0, introduce random client errors and latency. Intended for testing.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If &gt; 0.0, introduce random client errors and latency. Intended for testing. (DEPRECATED: will be removed in a future version.)</td>
 </tr>
 
 <tr>
@@ -190,49 +182,49 @@ kubelet [flags]
 <td colspan="2">--cloud-config string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the cloud provider configuration file.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The path to the cloud provider configuration file. Empty string for no configuration file. (DEPRECATED: will be removed in 1.23, in favor of removing cloud providers code from Kubelet.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--cloud-provider string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The provider for cloud services. Specify empty string for running with no cloud provider. If set, the cloud provider determines the name of the node (consult cloud provider documentation to determine if and how the hostname is used).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The provider for cloud services. Set to empty string for running with no cloud provider. If set, the cloud provider determines the name of the node (consult cloud provider documentation to determine if and how the hostname is used). (DEPRECATED: will be removed in 1.23, in favor of removing cloud provider code from Kubelet.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-dns strings</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of DNS server IP address.  This value is used for containers DNS server in case of Pods with "dnsPolicy=ClusterFirst". Note: all DNS servers appearing in the list MUST serve the same set of records otherwise name resolution within the cluster may not work correctly. There is no guarantee as to which DNS server may be contacted for name resolution. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of DNS server IP address. This value is used for containers DNS server in case of Pods with "dnsPolicy=ClusterFirst". Note: all DNS servers appearing in the list MUST serve the same set of records otherwise name resolution within the cluster may not work correctly. There is no guarantee as to which DNS server may be contacted for name resolution. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--cluster-domain string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Domain for this cluster.  If set, kubelet will configure all containers to search this domain in addition to the host's search domains (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Domain for this cluster. If set, kubelet will configure all containers to search this domain in addition to the host's search domains (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--cni-bin-dir string</td>
+<td colspan="2">--cni-bin-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/opt/cni/bin`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; A comma-separated list of full paths of directories in which to search for CNI plugin binaries. This docker-specific flag only works when container-runtime is set to docker. (default "/opt/cni/bin")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; A comma-separated list of full paths of directories in which to search for CNI plugin binaries. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--cni-cache-dir string</td>
+<td colspan="2">--cni-cache-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/var/lib/cni/cache`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The full path of the directory in which CNI should store cache files. This docker-specific flag only works when container-runtime is set to docker. (default "/var/lib/cni/cache")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The full path of the directory in which CNI should store cache files. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--cni-conf-dir string</td>
+<td colspan="2">--cni-conf-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/etc/cni/net.d`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The full path of the directory in which to search for CNI config files. This docker-specific flag only works when container-runtime is set to docker. (default "/etc/cni/net.d")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The full path of the directory in which to search for CNI config files. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
@@ -243,94 +235,94 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--container-hints string</td>
+<td colspan="2">--container-hints string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/etc/cadvisor/container_hints.json`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">location of the container hints file (default "/etc/cadvisor/container_hints.json") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">location of the container hints file. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--container-log-max-files int32</td>
+<td colspan="2">--container-log-max-files int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Set the maximum number of container log files that can be present for a container. The number must be &ge; 2. This flag can only be used with --container-runtime=remote. (default 5) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Set the maximum number of container log files that can be present for a container. The number must be &ge; 2. This flag can only be used with `--container-runtime=remote`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--container-log-max-size string</td>
+<td colspan="2">--container-log-max-size string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `10Mi`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Set the maximum size (e.g. 10Mi) of container log file before it is rotated. This flag can only be used with --container-runtime=remote. (default "10Mi") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Set the maximum size (e.g. 10Mi) of container log file before it is rotated. This flag can only be used with `--container-runtime=remote`.  (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--container-runtime string</td>
+<td colspan="2">--container-runtime string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `docker`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The container runtime to use. Possible values: 'docker', 'remote', 'rkt(deprecated)'. (default "docker")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The container runtime to use. Possible values: `docker`, `remote`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--container-runtime-endpoint string</td>
+<td colspan="2">--container-runtime-endpoint string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `unix:///var/run/dockershim.sock`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] The endpoint of remote runtime service. Currently unix socket endpoint is supported on Linux, while npipe and tcp endpoints are supported on windows.  Examples:'unix:///var/run/dockershim.sock', 'npipe:////./pipe/dockershim' (default "unix:///var/run/dockershim.sock")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] The endpoint of remote runtime service. Currently unix socket endpoint is supported on Linux, while npipe and tcp endpoints are supported on windows. Examples: `unix:///var/run/dockershim.sock`, `npipe:////./pipe/dockershim`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--containerd string</td>
+<td colspan="2">--containerd string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/run/containerd/containerd.sock`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">  containerd endpoint (default "/run/containerd/containerd.sock") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The `containerd` endpoint. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
     
 <tr>
 <td colspan="2">--contention-profiling</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable lock contention profiling, if profiling is enabled (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable lock contention profiling, if profiling is enabled (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--cpu-cfs-quota</td>
+<td colspan="2">--cpu-cfs-quota&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable CPU CFS quota enforcement for containers that specify CPU limits (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable CPU CFS quota enforcement for containers that specify CPU limits (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--cpu-cfs-quota-period duration</td>
+<td colspan="2">--cpu-cfs-quota-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `100ms`</td>
    </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Sets CPU CFS quota period value, cpu.cfs_period_us, defaults to Linux Kernel default (default 100ms) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Sets CPU CFS quota period value, `cpu.cfs_period_us`, defaults to Linux Kernel default. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--cpu-manager-policy string</td>
+<td colspan="2">--cpu-manager-policy string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `none`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">CPU Manager policy to use. Possible values: 'none', 'static'. Default: 'none' (default "none") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">CPU Manager policy to use. Possible values: `none`, `static`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--cpu-manager-reconcile-period NodeStatusUpdateFrequency</td>
+<td colspan="2">--cpu-manager-reconcile-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `10s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; CPU Manager reconciliation period. Examples: '10s', or '1m'. If not supplied, defaults to NodeStatusUpdateFrequency (default 10s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; CPU Manager reconciliation period. Examples: `10s`, or `1m`. If not supplied, defaults to node status update frequency. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--docker string</td>
+<td colspan="2">--docker string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `unix:///var/run/docker.sock`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">docker endpoint (default "unix:///var/run/docker.sock") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The `docker` endpoint. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
     
 <tr>
-<td colspan="2">--docker-endpoint string</td>
+<td colspan="2">--docker-endpoint string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `unix:///var/run/docker.sock`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this for the docker endpoint to communicate with. This docker-specific flag only works when container-runtime is set to docker. (default "unix:///var/run/docker.sock")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Use this for the `docker` endpoint to communicate with. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
@@ -348,10 +340,10 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--docker-root string</td>
+<td colspan="2">--docker-root string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/var/lib/docker`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: docker root is read from docker info (this is a fallback, default: /var/lib/docker) (default "/var/lib/docker")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: docker root is read from docker info (this is a fallback).</td>
 </tr>
 
 <tr>
@@ -362,143 +354,143 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--docker-tls-ca string</td>
+<td colspan="2">--docker-tls-ca string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `ca.pem`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">path to trusted CA (default "ca.pem") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">path to trusted CA. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--docker-tls-cert string</td>
+<td colspan="2">--docker-tls-cert string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `cert.pem`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">path to client certificate (default "cert.pem") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">path to client certificate. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--docker-tls-key string</td>
+<td colspan="2">--docker-tls-key string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `key.pem`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">path to private key (default "key.pem") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to private key. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--dynamic-config-dir string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The Kubelet will use this directory for checkpointing downloaded configurations and tracking configuration health. The Kubelet will create this directory if it does not already exist. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Providing this flag enables dynamic Kubelet configuration. The DynamicKubeletConfig feature gate must be enabled to pass this flag; this gate currently defaults to true because the feature is beta.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The Kubelet will use this directory for checkpointing downloaded configurations and tracking configuration health. The Kubelet will create this directory if it does not already exist. The path may be absolute or relative; relative paths start at the Kubelet's current working directory. Providing this flag enables dynamic Kubelet configuration. The `DynamicKubeletConfig` feature gate must be enabled to pass this flag; this gate currently defaults to `true` because the feature is beta.</td>
 </tr>
 
 <tr>
-<td colspan="2">--enable-cadvisor-json-endpoints</td>
+<td colspan="2">--enable-cadvisor-json-endpoints&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `false`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable cAdvisor json /spec and /stats/* endpoints. (default false) (DEPRECATED: will be removed in a future version)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable cAdvisor json `/spec` and `/stats/*` endpoints. (DEPRECATED: will be removed in a future version)</td>
 </tr>
 
 <tr>
-<td colspan="2">--enable-controller-attach-detach</td>
+<td colspan="2">--enable-controller-attach-detach&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations (default true)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables the Attach/Detach controller to manage attachment/detachment of volumes scheduled to this node, and disables kubelet from executing any attach/detach operations.</td>
 </tr>
 
 <tr>
-<td colspan="2">--enable-debugging-handlers</td>
+<td colspan="2">--enable-debugging-handlers&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables server endpoints for log collection and local running of containers and commands (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables server endpoints for log collection and local running of containers and commands. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--enable-load-reader</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable cpu load reader (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Whether to enable CPU load reader (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--enable-server</td>
+<td colspan="2">--enable-server&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable the Kubelet's server (default true)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enable the Kubelet's server. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--enforce-node-allocatable stringSlice</td>
+<td colspan="2">--enforce-node-allocatable strings&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `pods`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma separated list of levels of node allocatable enforcement to be enforced by kubelet. Acceptable options are 'none', 'pods', 'system-reserved', and 'kube-reserved'. If the latter two options are specified, '--system-reserved-cgroup' and '--kube-reserved-cgroup' must also be set, respectively. If 'none' is specified, no additional options should be set. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. (default [pods]) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma separated list of levels of node allocatable enforcement to be enforced by kubelet. Acceptable options are `none`, `pods`, `system-reserved`, and `kube-reserved`. If the latter two options are specified, `--system-reserved-cgroup` and `--kube-reserved-cgroup` must also be set, respectively. If `none` is specified, no additional options should be set. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--event-burst int32</td>
+<td colspan="2">--event-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding event-qps. Only used if --event-qps > 0 (default 10) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of a bursty event records, temporarily allows event records to burst to this number, while still not exceeding `--event-qps`. Only used if `--event-qps` &gt; 0. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--event-qps int32</td>
+<td colspan="2">--event-qps int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If &gt; 0, limit event creations per second to this value. If 0, unlimited. (default 5) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If &gt; `0`, limit event creations per second to this value. If `0`, unlimited. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--event-storage-age-limit string</td>
+<td colspan="2">--event-storage-age-limit string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `default=0`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is a duration. Default is applied to all non-specified event types (default "default=0") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Max length of time for which to store events (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: `creation`, `oom`) or `default` and the value is a duration. Default is applied to all non-specified event types. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--event-storage-event-limit string</td>
+<td colspan="2">--event-storage-event-limit string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `default=0`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: creation, oom) or "default" and the value is an integer. Default is applied to all non-specified event types (default "default=0") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Max number of events to store (per type). Value is a comma separated list of key values, where the keys are event types (e.g.: `creation`, `oom`) or `default` and the value is an integer. Default is applied to all non-specified event types. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--eviction-hard mapStringString</td>
+<td colspan="2">--eviction-hard mapStringString&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `imagefs.available<15%,memory.available<100Mi,nodefs.available<10%,nodefs.inodesFree<5%`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of eviction thresholds (e.g. memory.available&lt;1Gi) that if met would trigger a pod eviction. (default imagefs.available&lt;15%,memory.available&lt;100Mi,nodefs.available&lt;10%,nodefs.inodesFree&lt;5%) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of eviction thresholds (e.g. `memory.available<1Gi`) that if met would trigger a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--eviction-max-pod-grace-period int32</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"> Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met.  If negative, defer to pod specified value. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"> Maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. If negative, defer to pod specified value. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--eviction-minimum-reclaim mapStringString</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of minimum reclaims (e.g. imagefs.available=2Gi) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of minimum reclaims (e.g. `imagefs.available=2Gi`) that describes the minimum amount of resource the kubelet will reclaim when performing a pod eviction if that resource is under pressure. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--eviction-pressure-transition-period duration</td>
+<td colspan="2">--eviction-pressure-transition-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `5m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition. (default 5m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Duration for which the kubelet has to wait before transitioning out of an eviction pressure condition. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--eviction-soft mapStringString</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of eviction thresholds (e.g. memory.available&lt;1.5Gi) that if met over a corresponding grace period would trigger a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of eviction thresholds (e.g. `memory.available>1.5Gi`) that if met over a corresponding grace period would trigger a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--eviction-soft-grace-period mapStringString</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of eviction grace periods (e.g. memory.available=1m30s) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of eviction grace periods (e.g. `memory.available=1m30s`) that correspond to how long a soft eviction threshold must hold before triggering a pod eviction. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
@@ -509,88 +501,173 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--experimental-allocatable-ignore-eviction</td>
+<td colspan="2">--experimental-allocatable-ignore-eviction&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `false`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">When set to 'true', Hard Eviction Thresholds will be ignored while calculating Node Allocatable. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. [default=false]</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">When set to `true`, Hard eviction thresholds will be ignored while calculating node allocatable. See https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ for more details. (DEPRECATED: will be removed in 1.23)</td>
 </tr>
     
 <tr>
 <td colspan="2">--experimental-bootstrap-kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">(DEPRECATED: Use --bootstrap-kubeconfig)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">DEPRECATED: Use `--bootstrap-kubeconfig`</td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-check-node-capabilities-before-mount</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] if set true, the kubelet will check the underlying node for required components (binaries, etc.) before performing the mount</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] if set to `true`, the kubelet will check the underlying node for required components (binaries, etc.) before performing the mount (DEPRECATED: will be removed in 1.23, in favor of using CSI.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--experimental-kernel-memcg-notification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling. This flag will be removed in 1.23. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--experimental-mounter-path string</td>
+<td colspan="2">--experimental-mounter-path string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `mount`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] Path of mounter binary. Leave empty to use the default mount.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] Path of mounter binary. Leave empty to use the default `mount`. (DEPRECATED: will be removed in 1.23, in favor of using CSI.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--fail-swap-on</td>
+<td colspan="2">--fail-swap-on&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Makes the Kubelet fail to start if swap is enabled on the node.  (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Makes the Kubelet fail to start if swap is enabled on the node. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--feature-gates mapStringBool</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:<br/>APIListChunking=true|false (BETA - default=true)<br/>APIResponseCompression=true|false (BETA - default=true)<br/>AllAlpha=true|false (ALPHA - default=false)<br/>AppArmor=true|false (BETA - default=true)<br/>AttachVolumeLimit=true|false (BETA - default=true)<br/>BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>BlockVolume=true|false (BETA - default=true)<br/>BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>CPUManager=true|false (BETA - default=true)<br/>CRIContainerLogRotation=true|false (BETA - default=true)
-<br/>CSIBlockVolume=true|false (BETA - default=true)<br/>CSIDriverRegistry=true|false (BETA - default=true)<br/>CSIInlineVolume=true|false (BETA - default=true)<br/>CSIMigration=true|false (ALPHA - default=false)<br/>CSIMigrationAWS=true|false (ALPHA - default=false)<br/>CSIMigrationAzureDisk=true|false (ALPHA - default=false)<br/>CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>CSIMigrationGCE=true|false (ALPHA - default=false)<br/>CSIMigrationOpenStack=true|false (ALPHA - default=false)<br/>CSINodeInfo=true|false (BETA - default=true)<br/>CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>CustomResourceDefaulting=true|false (BETA - default=true)<br/>DevicePlugins=true|false (BETA - default=true)<br/>DryRun=true|false (BETA - default=true)<br/>DynamicAuditing=true|false (ALPHA - default=false)<br/>DynamicKubeletConfig=true|false (BETA - default=true)<br/>EndpointSlice=true|false (ALPHA - default=false)<br/>EphemeralContainers=true|false (ALPHA - default=false)<br/>EvenPodsSpread=true|false (ALPHA - default=false)<br/>ExpandCSIVolumes=true|false (BETA - default=true)<br/>ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>ExpandPersistentVolumes=true|false (BETA - default=true)<br/>ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>HPAScaleToZero=true|false (ALPHA - default=false)<br/>HyperVContainer=true|false (ALPHA - default=false)<br/>IPv6DualStack=true|false (ALPHA - default=false)<br/>KubeletPodResources=true|false (BETA - default=true)<br/>LegacyNodeRoleBehavior=true|false (ALPHA - default=true)<br/>LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>MountContainers=true|false (ALPHA - default=false)<br/>NodeDisruptionExclusion=true|false (ALPHA - default=false)<br/>NodeLease=true|false (BETA - default=true)<br/>NonPreemptingPriority=true|false (ALPHA - default=false)<br/>PodOverhead=true|false (ALPHA - default=false)<br/>PodShareProcessNamespace=true|false (BETA - default=true)<br/>ProcMountType=true|false (ALPHA - default=false)br/>QOSReserved=true|false (ALPHA - default=false)<br/>RemainingItemCount=true|false (BETA - default=true)<br/>RemoveSelfLink=true|false (ALPHA - default=false)<br/>RequestManagement=true|false (ALPHA - default=false)<br/>ResourceLimitsPriorityFunction=true|false (ALPHA - default=false)<br/>ResourceQuotaScopeSelectors=true|false (BETA - default=true)<br/>RotateKubeletClientCertificate=true|false (BETA - default=true)<br/>RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>RunAsGroup=true|false (BETA - default=true)<br/>RuntimeClass=true|false (BETA - default=true)<br/>SCTPSupport=true|false (ALPHA - default=false)<br/>ScheduleDaemonSetPods=true|false (BETA - default=true)<br/>ServerSideApply=true|false (BETA - default=true)<br/>ServiceLoadBalancerFinalizer=true|false (BETA - default=true)<br/>ServiceNodeExclusion=true|false (ALPHA - default=false)<br/>StartupProbe=true|false (BETA - default=true)<br/>StorageVersionHash=true|false (BETA - default=true)<br/>StreamingProxyRedirects=true|false (BETA - default=true)<br/>SupportNodePidsLimit=true|false (BETA - default=true)<br/>SupportPodPidsLimit=true|false (BETA - default=true)<br/>Sysctls=true|false (BETA - default=true)<br/>TTLAfterFinished=true|false (ALPHA - default=false)<br/>TaintBasedEvictions=true|false (BETA - default=true)<br/>TaintNodesByCondition=true|false (BETA - default=true)<br/>TokenRequest=true|false (BETA - default=true)<br/>TokenRequestProjection=true|false (BETA - default=true)<br/>TopologyManager=true|false (ALPHA - default=false)<br/>ValidateProxyRedirects=true|false (BETA - default=true)<br/>VolumePVCDataSource=true|false (BETA - default=true)<br/>VolumeSnapshotDataSource=true|false (ALPHA - default=false)<br/>VolumeSubpathEnvExpansion=true|false (BETA - default=true)<br/>WatchBookmark=true|false (BETA - default=true)<br/>WinDSR=true|false (ALPHA - default=false)<br/>WinOverlay=true|false (ALPHA - default=false)<br/>WindowsGMSA=true|false (BETA - default=true)<br/>WindowsRunAsUserName=true|false (ALPHA - default=false) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of `key=value` pairs that describe feature gates for alpha/experimental features. Options are:<br/>
+APIListChunking=true|false (BETA - default=true)<br/>
+APIPriorityAndFairness=true|false (ALPHA - default=false)<br/>
+APIResponseCompression=true|false (BETA - default=true)<br/>
+AllAlpha=true|false (ALPHA - default=false)<br/>
+AllBeta=true|false (BETA - default=false)<br/>
+AllowInsecureBackendProxy=true|false (BETA - default=true)<br/>
+AnyVolumeDataSource=true|false (ALPHA - default=false)<br/>
+AppArmor=true|false (BETA - default=true)<br/>
+BalanceAttachedNodeVolumes=true|false (ALPHA - default=false)<br/>
+BoundServiceAccountTokenVolume=true|false (ALPHA - default=false)<br/>
+CPUManager=true|false (BETA - default=true)<br/>
+CRIContainerLogRotation=true|false (BETA - default=true)<br/>
+CSIInlineVolume=true|false (BETA - default=true)<br/>
+CSIMigration=true|false (BETA - default=true)<br/>
+CSIMigrationAWS=true|false (BETA - default=false)<br/>
+CSIMigrationAWSComplete=true|false (ALPHA - default=false)<br/>
+CSIMigrationAzureDisk=true|false (BETA - default=false)<br/>
+CSIMigrationAzureDiskComplete=true|false (ALPHA - default=false)<br/>
+CSIMigrationAzureFile=true|false (ALPHA - default=false)<br/>
+CSIMigrationAzureFileComplete=true|false (ALPHA - default=false)<br/>
+CSIMigrationGCE=true|false (BETA - default=false)<br/>
+CSIMigrationGCEComplete=true|false (ALPHA - default=false)<br/>
+CSIMigrationOpenStack=true|false (BETA - default=false)<br/>
+CSIMigrationOpenStackComplete=true|false (ALPHA - default=false)<br/>
+CSIMigrationvSphere=true|false (BETA - default=false)<br/>
+CSIMigrationvSphereComplete=true|false (BETA - default=false)<br/>
+CSIStorageCapacity=true|false (ALPHA - default=false)<br/>
+CSIVolumeFSGroupPolicy=true|false (ALPHA - default=false)<br/>
+ConfigurableFSGroupPolicy=true|false (ALPHA - default=false)<br/>
+CustomCPUCFSQuotaPeriod=true|false (ALPHA - default=false)<br/>
+DefaultPodTopologySpread=true|false (ALPHA - default=false)<br/>
+DevicePlugins=true|false (BETA - default=true)<br/>
+DisableAcceleratorUsageMetrics=true|false (ALPHA - default=false)<br/>
+DynamicKubeletConfig=true|false (BETA - default=true)<br/>
+EndpointSlice=true|false (BETA - default=true)<br/>
+EndpointSliceProxying=true|false (BETA - default=true)<br/>
+EphemeralContainers=true|false (ALPHA - default=false)<br/>
+ExpandCSIVolumes=true|false (BETA - default=true)<br/>
+ExpandInUsePersistentVolumes=true|false (BETA - default=true)<br/>
+ExpandPersistentVolumes=true|false (BETA - default=true)<br/>
+ExperimentalHostUserNamespaceDefaulting=true|false (BETA - default=false)<br/>
+GenericEphemeralVolume=true|false (ALPHA - default=false)<br/>
+HPAScaleToZero=true|false (ALPHA - default=false)<br/>
+HugePageStorageMediumSize=true|false (BETA - default=true)<br/>
+HyperVContainer=true|false (ALPHA - default=false)<br/>
+IPv6DualStack=true|false (ALPHA - default=false)<br/>
+ImmutableEphemeralVolumes=true|false (BETA - default=true)<br/>
+KubeletPodResources=true|false (BETA - default=true)<br/>
+LegacyNodeRoleBehavior=true|false (BETA - default=true)<br/>
+LocalStorageCapacityIsolation=true|false (BETA - default=true)<br/>
+LocalStorageCapacityIsolationFSQuotaMonitoring=true|false (ALPHA - default=false)<br/>
+NodeDisruptionExclusion=true|false (BETA - default=true)<br/>
+NonPreemptingPriority=true|false (BETA - default=true)<br/>
+PodDisruptionBudget=true|false (BETA - default=true)<br/>
+PodOverhead=true|false (BETA - default=true)<br/>
+ProcMountType=true|false (ALPHA - default=false)<br/>
+QOSReserved=true|false (ALPHA - default=false)<br/>
+RemainingItemCount=true|false (BETA - default=true)<br/>
+RemoveSelfLink=true|false (ALPHA - default=false)<br/>
+RotateKubeletServerCertificate=true|false (BETA - default=true)<br/>
+RunAsGroup=true|false (BETA - default=true)<br/>
+RuntimeClass=true|false (BETA - default=true)<br/>
+SCTPSupport=true|false (BETA - default=true)<br/>
+SelectorIndex=true|false (BETA - default=true)<br/>
+ServerSideApply=true|false (BETA - default=true)<br/>
+ServiceAccountIssuerDiscovery=true|false (ALPHA - default=false)<br/>
+ServiceAppProtocol=true|false (BETA - default=true)<br/>
+ServiceNodeExclusion=true|false (BETA - default=true)<br/>
+ServiceTopology=true|false (ALPHA - default=false)<br/>
+SetHostnameAsFQDN=true|false (ALPHA - default=false)<br/>
+StartupProbe=true|false (BETA - default=true)<br/>
+StorageVersionHash=true|false (BETA - default=true)<br/>
+SupportNodePidsLimit=true|false (BETA - default=true)<br/>
+SupportPodPidsLimit=true|false (BETA - default=true)<br/>
+Sysctls=true|false (BETA - default=true)<br/>
+TTLAfterFinished=true|false (ALPHA - default=false)<br/>
+TokenRequest=true|false (BETA - default=true)<br/>
+TokenRequestProjection=true|false (BETA - default=true)<br/>
+TopologyManager=true|false (BETA - default=true)<br/>
+ValidateProxyRedirects=true|false (BETA - default=true)<br/>
+VolumeSnapshotDataSource=true|false (BETA - default=true)<br/>
+WarningHeaders=true|false (BETA - default=true)<br/>
+WinDSR=true|false (ALPHA - default=false)<br/>
+WinOverlay=true|false (ALPHA - default=false)<br/>
+WindowsEndpointSliceProxying=true|false (ALPHA - default=false)<br/>
+(DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--file-check-frequency duration</td>
+<td colspan="2">--file-check-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `20s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Duration between checking config files for new data (default 20s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Duration between checking config files for new data. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--global-housekeeping-interval duration</td>
+<td colspan="2">--global-housekeeping-interval duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `1m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Interval between global housekeepings (default 1m0s) (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Interval between global housekeepings. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
     
 <tr>
-<td colspan="2">--hairpin-mode string</td>
+<td colspan="2">--hairpin-mode string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `promiscuous-bridge`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">How should the kubelet setup hairpin NAT. This allows endpoints of a Service to loadbalance back to themselves if they should try to access their own Service. Valid values are "promiscuous-bridge", "hairpin-veth" and "none". (default "promiscuous-bridge") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">How should the kubelet setup hairpin NAT. This allows endpoints of a Service to load balance back to themselves if they should try to access their own Service. Valid values are `promiscuous-bridge`, `hairpin-veth` and `none`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--healthz-bind-address 0.0.0.0</td>
+<td colspan="2">--healthz-bind-address ip&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `127.0.0.1`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address for the healthz server to serve on (set to 0.0.0.0 for all IPv4 interfaces and `::` for all IPv6 interfaces) (default 127.0.0.1) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The IP address for the healthz server to serve on (set to `0.0.0.0` for all IPv4 interfaces and `::` for all IPv6 interfaces). (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--healthz-port int32</td>
+<td colspan="2">--healthz-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10248</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The port of the localhost healthz endpoint (set to 0 to disable) (default 10248) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The port of the localhost healthz endpoint (set to `0` to disable). (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
@@ -604,119 +681,126 @@ kubelet [flags]
 <td colspan="2">--hostname-override string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, will use this string as identification instead of the actual hostname. If --cloud-provider is set, the cloud provider determines the name of the node (consult cloud provider documentation to determine if and how the hostname is used).</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If non-empty, will use this string as identification instead of the actual hostname. If `--cloud-provider` is set, the cloud provider determines the name of the node (consult cloud provider documentation to determine if and how the hostname is used).</td>
 </tr>
 
 <tr>
-<td colspan="2">--housekeeping-interval duration</td>
+<td colspan="2">--housekeeping-interval duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `10s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Interval between container housekeepings (default 10s)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Interval between container housekeepings.</td>
 </tr>
 
 <tr>
-<td colspan="2">--http-check-frequency duration</td>
+<td colspan="2">--http-check-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `20s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Duration between checking http for new data (default 20s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Duration between checking HTTP for new data. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--image-gc-high-threshold int32</td>
+<td colspan="2">--image-gc-high-threshold int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 85</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The percent of disk usage after which image garbage collection is always run. Values must be within the range [0, 100], To disable image garbage collection, set to 100.  (default 85) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The percent of disk usage after which image garbage collection is always run. Values must be within the range [0, 100], To disable image garbage collection, set to 100.   (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--image-gc-low-threshold int32</td>
+<td colspan="2">--image-gc-low-threshold int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 80</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. Values must be within the range [0, 100] and should not be larger than that of --image-gc-high-threshold. (default 80) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. Values must be within the range [0, 100] and should not be larger than that of `--image-gc-high-threshold`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--image-pull-progress-deadline duration</td>
+<td colspan="2">--image-pull-progress-deadline duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `1m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If no pulling progress is made before this deadline, the image pulling will be cancelled. This docker-specific flag only works when container-runtime is set to docker. (default 1m0s)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If no pulling progress is made before this deadline, the image pulling will be cancelled. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
 <td colspan="2">--image-service-endpoint string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] The endpoint of remote image service. If not specified, it will be the same with container-runtime-endpoint by default. Currently unix socket endpoint is supported on Linux, while npipe and tcp endpoints are supported on windows.  Examples:'unix:///var/run/dockershim.sock', 'npipe:////./pipe/dockershim'</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">[Experimental] The endpoint of remote image service. If not specified, it will be the same with `--container-runtime-endpoint` by default. Currently UNIX socket endpoint is supported on Linux, while npipe and TCP endpoints are supported on Windows.  Examples: `unix:///var/run/dockershim.sock`, `npipe:////./pipe/dockershim`</td>
 </tr>
     
 <tr>
-<td colspan="2">--iptables-drop-bit int32</td>
+<td colspan="2">--iptables-drop-bit int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 15</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The bit of the fwmark space to mark packets for dropping. Must be within the range [0, 31]. (default 15) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The bit of the `fwmark` space to mark packets for dropping. Must be within the range [0, 31]. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
     
 <tr>
-<td colspan="2">--iptables-masquerade-bit int32</td>
+<td colspan="2">--iptables-masquerade-bit int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 14</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The bit of the fwmark space to mark packets for SNAT. Must be within the range [0, 31]. Please match this parameter with corresponding parameter in kube-proxy. (default 14) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The bit of the `fwmark` space to mark packets for SNAT. Must be within the range [0, 31]. Please match this parameter with corresponding parameter in `kube-proxy`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
     
 <tr>
 <td colspan="2">--keep-terminated-pod-volumes</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Keep terminated pod volumes mounted to the node after the pod terminates.  Can be useful for debugging volume related issues. (DEPRECATED: will be removed in a future version)</td>
-</tr>
-    
-<tr>
-<td colspan="2">--kube-api-burst int32</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"> Burst to use while talking with kubernetes apiserver (default 10) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Keep terminated pod volumes mounted to the node after the pod terminates. Can be useful for debugging volume related issues. (DEPRECATED: will be removed in a future version)</td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-api-content-type string</td>
+<td colspan="2">--kernel-memcg-notification</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Content type of requests sent to apiserver. (default "application/vnd.kubernetes.protobuf") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If enabled, the kubelet will integrate with the kernel memcg notification to determine if memory eviction thresholds are crossed rather than polling. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-api-qps int32</td>
+<td colspan="2">--kube-api-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">QPS to use while talking with kubernetes apiserver (default 5) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"> Burst to use while talking with kubernetes API server. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-reserved mapStringString</td>
+<td colspan="2">--kube-api-content-type string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `application/vnd.kubernetes.protobuf`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral-storage=1Gi) pairs that describe resources reserved for kubernetes system components. Currently cpu, memory and local ephemeral storage for root file system are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. [default=none] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Content type of requests sent to apiserver. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--kube-reserved-cgroup string</td>
+<td colspan="2">--kube-api-qps int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Absolute name of the top level cgroup that is used to manage kubernetes components for which compute resources were reserved via '--kube-reserved' flag. Ex. '/kube-reserved'. [default=''] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">QPS to use while talking with kubernetes API server. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+</tr>
+
+<tr>
+<td colspan="2">--kube-reserved mapStringString&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: &lt;None&gt;</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of `<resource name>=<resource quantity>` (e.g. `cpu=200m,memory=500Mi,ephemeral-storage=1Gi`) pairs that describe resources reserved for kubernetes system components. Currently `cpu`, `memory` and local `ephemeral-storage` for root file system are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+</tr>
+
+<tr>
+<td colspan="2">--kube-reserved-cgroup string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `''`</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Absolute name of the top level cgroup that is used to manage kubernetes components for which compute resources were reserved via `--kube-reserved` flag. Ex. `/kube-reserved`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--kubeconfig string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeconfig file, specifying how to connect to the API server. Providing --kubeconfig enables API server mode, omitting --kubeconfig enables standalone mode. </td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeconfig file, specifying how to connect to the API server. Providing `--kubeconfig` enables API server mode, omitting `--kubeconfig` enables standalone mode. </td>
 </tr>
 
 <tr>
 <td colspan="2">--kubelet-cgroups string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional absolute name of cgroups to create and run the Kubelet in. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional absolute name of cgroups to create and run the Kubelet in. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
@@ -727,10 +811,10 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--log-backtrace-at traceLocation</td>
+<td colspan="2">--log-backtrace-at traceLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `:0`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">when logging hits line file:N, emit a stack trace (default :0)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">When logging hits line `<file>:<N>`, emit a stack trace.</td>
 </tr>
 
 <tr>
@@ -755,114 +839,121 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--log-file-max-size uint</td>
+<td colspan="2">--log-file-max-size uint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1800</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.</td>
 </tr>
 
 <tr>
-<td colspan="2">--log-flush-frequency duration</td>
+<td colspan="2">--log-flush-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `5s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes (default 5s)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of seconds between log flushes.</td>
 </tr>
 
 <tr>
-<td colspan="2">--logtostderr</td>
+<td colspan="2">--logging-format string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `text`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error instead of files (default true)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Sets the log format. Permitted formats: `text`, `json`.\nNon-default formats don't honor these flags: `--add-dir-header`, `--alsologtostderr`, `--log-backtrace-at`, `--log_dir`, `--log-file`, `--log-file-max-size`, `--logtostderr`, `--skip_headers`, `--skip_log_headers`, `--stderrthreshold`, `--log-flush-frequency`.\nNon-default choices are currently alpha and subject to change without warning. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--machine-id-file string</td>
+<td colspan="2">--logtostderr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of files to check for machine-id. Use the first one that exists. (default "/etc/machine-id,/var/lib/dbus/machine-id") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">log to standard error instead of files.</td>
 </tr>
 
 <tr>
-<td colspan="2">--make-iptables-util-chains</td>
+<td colspan="2">--machine-id-file string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/etc/machine-id,/var/lib/dbus/machine-id`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, kubelet will ensure iptables utility rules are present on host. (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of files to check for `machine-id`. Use the first one that exists. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+</tr>
+
+<tr>
+<td colspan="2">--make-iptables-util-chains&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, kubelet will ensure `iptables` utility rules are present on host. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--manifest-url string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"> URL for accessing additional Pod specifications to run (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">URL for accessing additional Pod specifications to run (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--manifest-url-header --manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful'</td>
+<td colspan="2">--manifest-url-header string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of HTTP headers to use when accessing the url provided to --manifest-url. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: --manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful' (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of HTTP headers to use when accessing the URL provided to `--manifest-url`. Multiple headers with the same name will be added in the same order provided. This flag can be repeatedly invoked. For example: `--manifest-url-header 'a:hello,b:again,c:world' --manifest-url-header 'b:beautiful'` (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 <tr>
-<td colspan="2">--master-service-namespace string</td>
+<td colspan="2">--master-service-namespace string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `default`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The namespace from which the kubernetes master services should be injected into pods (default "default") (DEPRECATED: This flag will be removed in a future version.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The namespace from which the kubernetes master services should be injected into pods. (DEPRECATED: This flag will be removed in a future version.)</td>
 </tr>
     
 <tr>
-<td colspan="2">--max-open-files int</td>
+<td colspan="2">--max-open-files int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1000000</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of files that can be opened by Kubelet process. (default 1000000) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of files that can be opened by Kubelet process. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--max-pods int32</td>
+<td colspan="2">--max-pods int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 110</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of Pods that can run on this Kubelet. (default 110) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of Pods that can run on this Kubelet. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--maximum-dead-containers int32</td>
+<td colspan="2">--maximum-dead-containers int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: -1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of old instances of containers to retain globally.  Each container takes up some disk space. To disable, set to a negative number. (default -1) (DEPRECATED: Use --eviction-hard or --eviction-soft instead. Will be removed in a future version.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of old instances of containers to retain globally. Each container takes up some disk space. To disable, set to a negative number. (DEPRECATED: Use `--eviction-hard` or `--eviction-soft` instead. Will be removed in a future version.)</td>
 </tr>
 
  <tr>
-<td colspan="2">--maximum-dead-containers-per-container int32</td>
+<td colspan="2">--maximum-dead-containers-per-container int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of old instances to retain per container.  Each container takes up some disk space. (default 1) (DEPRECATED: Use --eviction-hard or --eviction-soft instead. Will be removed in a future version.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum number of old instances to retain per container.  Each container takes up some disk space. (DEPRECATED: Use `--eviction-hard` or `--eviction-soft` instead. Will be removed in a future version.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--minimum-container-ttl-duration duration</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum age for a finished container before it is garbage collected.  Examples: '300ms', '10s' or '2h45m' (DEPRECATED: Use --eviction-hard or --eviction-soft instead. Will be removed in a future version.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum age for a finished container before it is garbage collected.  Examples: `300ms`, `10s` or `2h45m` (DEPRECATED: Use `--eviction-hard` or `--eviction-soft` instead. Will be removed in a future version.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--minimum-image-ttl-duration duration</td>
+<td colspan="2">--minimum-image-ttl-duration duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `2m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum age for an unused image before it is garbage collected.  Examples: '300ms', '10s' or '2h45m'. (default 2m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum age for an unused image before it is garbage collected.  Examples: `300ms`, `10s` or `2h45m`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--network-plugin string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The name of the network plugin to be invoked for various events in kubelet/pod lifecycle. This docker-specific flag only works when container-runtime is set to docker.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The name of the network plugin to be invoked for various events in kubelet/pod lifecycle. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
 <td colspan="2">--network-plugin-mtu int32</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The MTU to be passed to the network plugin, to override the default. Set to 0 to use the default 1460 MTU. This docker-specific flag only works when container-runtime is set to docker.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The MTU to be passed to the network plugin, to override the default. Set to `0` to use the default 1460 MTU. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
@@ -876,189 +967,196 @@ kubelet [flags]
 <td colspan="2">--node-labels mapStringString</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; Labels to add when registering the node in the cluster.  Labels must be key=value pairs separated by ','. Labels in the 'kubernetes.io' namespace must begin with an allowed prefix (kubelet.kubernetes.io, node.kubernetes.io) or be in the specifically allowed set (beta.kubernetes.io/arch, beta.kubernetes.io/instance-type, beta.kubernetes.io/os, failure-domain.beta.kubernetes.io/region, failure-domain.beta.kubernetes.io/zone, failure-domain.kubernetes.io/region, failure-domain.kubernetes.io/zone, kubernetes.io/arch, kubernetes.io/hostname, kubernetes.io/instance-type, kubernetes.io/os)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; Labels to add when registering the node in the cluster. Labels must be `key=value` pairs separated by `,`. Labels in the `kubernetes.io` namespace must begin with an allowed prefix (`kubelet.kubernetes.io`, `node.kubernetes.io`) or be in the specifically allowed set (`beta.kubernetes.io/arch`, `beta.kubernetes.io/instance-type`, `beta.kubernetes.io/os`, `failure-domain.beta.kubernetes.io/region`, `failure-domain.beta.kubernetes.io/zone`, `failure-domain.kubernetes.io/region`, `failure-domain.kubernetes.io/zone`, `kubernetes.io/arch`, `kubernetes.io/hostname`, `kubernetes.io/instance-type`, `kubernetes.io/os`)</td>
 </tr>
 
 <tr>
-<td colspan="2">--node-status-max-images int32</td>
+<td colspan="2">--node-status-max-images int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 50</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The maximum number of images to report in Node.Status.Images. If -1 is specified, no cap will be applied. (default 50)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The maximum number of images to report in `node.status.images`. If `-1` is specified, no cap will be applied. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--node-status-update-frequency duration</td>
+<td colspan="2">--node-status-update-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `10s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in nodecontroller. (default 10s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Specifies how often kubelet posts node status to master. Note: be cautious when changing the constant, it must work with nodeMonitorGracePeriod in Node controller. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--non-masquerade-cidr string</td>
+<td colspan="2">--non-masquerade-cidr string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `10.0.0.0/8`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Traffic to IPs outside this range will use IP masquerade. Set to '0.0.0.0/0' to never masquerade. (default "10.0.0.0/8") (DEPRECATED: will be removed in a future version)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Traffic to IPs outside this range will use IP masquerade. Set to `0.0.0.0/0` to never masquerade. (DEPRECATED: will be removed in a future version)</td>
 </tr>
 
 <tr>
-<td colspan="2">--oom-score-adj int32</td>
+<td colspan="2">--oom-score-adj int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: -999</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000] (default -999) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The oom-score-adj value for kubelet process. Values must be within the range [-1000, 1000]. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-cidr string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The CIDR to use for pod IP addresses, only used in standalone mode.  In cluster mode, this is obtained from the master. For IPv6, the maximum number of IP's allocated is 65536 (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The CIDR to use for pod IP addresses, only used in standalone mode. In cluster mode, this is obtained from the master. For IPv6, the maximum number of IP's allocated is 65536 (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--pod-infra-container-image string</td>
+<td colspan="2">--pod-infra-container-image string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `k8s.gcr.io/pause:3.2`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The image whose network/ipc namespaces containers in each pod will use. This docker-specific flag only works when container-runtime is set to docker. (default "k8s.gcr.io/pause:3.2")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The image whose network/IPC namespaces containers in each pod will use. This docker-specific flag only works when container-runtime is set to `docker`.</td>
 </tr>
 
 <tr>
 <td colspan="2">--pod-manifest-path string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the directory containing static pod files to run, or the path to a single static pod file. Files starting with dots will be ignored. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Path to the directory containing static pod files to run, or the path to a single static pod file. Files starting with dots will be ignored. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--pod-max-pids int</td>
+<td colspan="2">--pod-max-pids int&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: -1</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Set the maximum number of processes per pod.  If -1, the kubelet defaults to the node allocatable pid capacity. (default -1) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Set the maximum number of processes per pod.  If `-1`, the kubelet defaults to the node allocatable PID capacity. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--pods-per-core int32</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed max-pods, so max-pods will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of 0 disables this limit. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Number of Pods per core that can run on this Kubelet. The total number of Pods on this Kubelet cannot exceed `--max-pods`, so `--max-pods` will be used if this calculation results in a larger number of Pods allowed on the Kubelet. A value of `0` disables this limit. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--port int32</td>
+<td colspan="2">--port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10250</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The port for the Kubelet to serve on. (default 10250) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The port for the Kubelet to serve on. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--protect-kernel-defaults</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;"> Default kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;"> Default kubelet behaviour for kernel tuning. If set, kubelet errors if any of kernel tunables is different than kubelet defaults. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--provider-id string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Unique identifier for identifying the node in a machine database, i.e cloudprovider</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Unique identifier for identifying the node in a machine database, i.e cloud provider. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--qos-reserved mapStringString</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; A set of ResourceName=Percentage (e.g. memory=50%) pairs that describe how pod resource requests are reserved at the QoS level. Currently only memory is supported. Requires the QOSReserved feature gate to be enabled. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; A set of `<resource name>=<percentage>` (e.g. `memory=50%`) pairs that describe how pod resource requests are reserved at the QoS level. Currently only memory is supported. Requires the `QOSReserved` feature gate to be enabled. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--read-only-port int32</td>
+<td colspan="2">--read-only-port int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10255</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">The read-only port for the Kubelet to serve on with no authentication/authorization (set to 0 to disable) (default 10255) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The read-only port for the Kubelet to serve on with no authentication/authorization (set to `0` to disable). (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--really-crash-for-testing</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, when panics occur crash. Intended for testing.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, when panics occur crash. Intended for testing. (DEPRECATED: will be removed in a future version.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--redirect-container-streaming</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables container streaming redirect. If false, kubelet will proxy container streaming data between apiserver and container runtime; if true, kubelet will return an http redirect to apiserver, and apiserver will access container runtime directly. The proxy approach is more secure, but introduces some overhead. The redirect approach is more performant, but less secure because the connection between apiserver and container runtime may not be authenticated.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Enables container streaming redirect. If false, kubelet will proxy container streaming data between the API server and container runtime; if `true`, kubelet will return an HTTP redirect to the API server, and the API server will access container runtime directly. The proxy approach is more secure, but introduces some overhead. The redirect approach is more performant, but less secure because the connection between apiserver and container runtime may not be authenticated. (DEPRECATED: Container streaming redirection will be removed from the kubelet in v1.20, and this flag will be removed in v1.22. For more details, see http://git.k8s.io/enhancements/keps/sig-node/20191205-container-streaming-requests.md)</td>
 </tr>
 
 <tr>
 <td colspan="2">--register-node</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Register the node with the apiserver. If --kubeconfig is not provided, this flag is irrelevant, as the Kubelet won't have an apiserver to register with. Default=true. (default true)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Register the node with the API server. If `--kubeconfig` is not provided, this flag is irrelevant, as the Kubelet won't have an API server to register with. Default to `true`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--register-schedulable</td>
+<td colspan="2">--register-schedulable&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Register the node as schedulable. Won't have any effect if register-node is false. (default true) (DEPRECATED: will be removed in a future version)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Register the node as schedulable. Won't have any effect if `--register-node` is false. (DEPRECATED: will be removed in a future version)</td>
   </tr>
 
 <tr>
 <td colspan="2">--register-with-taints []api.Taint</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Register the node with the given list of taints (comma separated "<key>=<value>:<effect>"). No-op if register-node is false.</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Register the node with the given list of taints (comma separated `<key>=<value>:<effect>`). No-op if `--register-node` is `false`.</td>
 </tr>
 
 <tr>
-<td colspan="2">--registry-burst int32</td>
+<td colspan="2">--registry-burst int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 10</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding registry-qps. Only used if --registry-qps > 0 (default 10) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum size of a bursty pulls, temporarily allows pulls to burst to this number, while still not exceeding `--registry-qps`. Only used if `--registry-qps > 0`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--registry-qps int32</td>
+<td colspan="2">--registry-qps int32&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 5</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If > 0, limit registry pull QPS to this value.  If 0, unlimited. (default 5) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If &gt; 0, limit registry pull QPS to this value.  If `0`, unlimited. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--resolv-conf string</td>
+<td colspan="2">--reserved-cpus string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Resolver configuration file used as the basis for the container DNS resolution configuration. (default "/etc/resolv.conf") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A comma-separated list of CPUs or CPU ranges that are reserved for system and kubernetes usage. This specific list will supersede cpu counts in `--system-reserved` and `--kube-reserved`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--root-dir string</td>
+<td colspan="2">--resolv-conf string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/etc/resolv.conf`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Directory path for managing kubelet files (volume mounts,etc). (default "/var/lib/kubelet")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Resolver configuration file used as the basis for the container DNS resolution configuration. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+</tr>
+
+<tr>
+<td colspan="2">--root-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/var/lib/kubelet`</td>
+</tr>
+<tr>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Directory path for managing kubelet files (volume mounts, etc).</td>
 </tr>
 
 <tr>
 <td colspan="2">--rotate-certificates</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Auto rotate the kubelet client certificates by requesting new certificates from the kube-apiserver when the certificate expiration approaches. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Beta feature&gt; Auto rotate the kubelet client certificates by requesting new certificates from the `kube-apiserver` when the certificate expiration approaches. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--rotate-server-certificates</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Auto-request and rotate the kubelet serving certificates by requesting new certificates from the kube-apiserver when the certificate expiration approaches. Requires the RotateKubeletServerCertificate feature gate to be enabled, and approval of the submitted CertificateSigningRequest objects. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Auto-request and rotate the kubelet serving certificates by requesting new certificates from the `kube-apiserver` when the certificate expiration approaches. Requires the `RotateKubeletServerCertificate` feature gate to be enabled, and approval of the submitted `CertificateSigningRequest` objects. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--runonce</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, exit after spawning pods from local manifests or remote urls. Exclusive with --enable-server</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If `true`, exit after spawning pods from local manifests or remote urls. Exclusive with `--enable-server` (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
@@ -1069,172 +1167,176 @@ kubelet [flags]
 </tr>
 
 <tr>
-<td colspan="2">--runtime-request-timeout duration</td>
+<td colspan="2">--runtime-request-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `2m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Timeout of all runtime requests except long running request - pull, logs, exec and attach. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later. (default 2m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Timeout of all runtime requests except long running request - `pull`, `logs`, `exec` and `attach`. When timeout exceeded, kubelet will cancel the request, throw out an error and retry later. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--seccomp-profile-root string</td>
+<td colspan="2">--seccomp-profile-root string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/var/lib/kubelet/seccomp`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; Directory path for seccomp profiles. (default "/var/lib/kubelet/seccomp")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; Directory path for seccomp profiles. (DEPRECATED: will be removed in 1.23, in favor of using the `<root-dir>/seccomp` directory)
+</td>
 </tr>
 
 <tr>
-<td colspan="2">--serialize-image-pulls</td>
+<td colspan="2">--serialize-image-pulls&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `true`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Pull images one at a time. We recommend *not* changing the default value on nodes that run docker daemon with version < 1.9 or an Aufs storage backend. Issue #10959 has more details. (default true) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Pull images one at a time. We recommend *not* changing the default value on nodes that run docker daemon with version &lt; 1.9 or an `aufs` storage backend. Issue #10959 has more details. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid header prefixes in the log messages</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If `true`, avoid header prefixes in the log messages</td>
 </tr>
 
 <tr>
 <td colspan="2">--skip-log-headers</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">If true, avoid headers when opening log files</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">If `true`, avoid headers when opening log files</td>
 </tr>
 
 <tr>
-<td colspan="2">--stderrthreshold severity</td>
+<td colspan="2">--stderrthreshold severity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: 2</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">logs at or above this threshold go to stderr (default 2)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">logs at or above this threshold go to stderr.</td>
 </tr>
 
 <tr>
-<td colspan="2">--storage-driver-buffer-duration duration</td>
+<td colspan="2">--storage-driver-buffer-duration duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `1m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction (default 1m0s) (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Writes in the storage driver will be buffered for this duration, and committed to the non memory backends as a single transaction. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--storage-driver-db string</td>
+<td colspan="2">--storage-driver-db string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `cadvisor`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">database name (default "cadvisor") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Database name. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--storage-driver-host string</td>
+<td colspan="2">--storage-driver-host string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `localhost:8086`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">database host:port (default "localhost:8086") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Database `host:port`. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--storage-driver-password string</td>
+<td colspan="2">--storage-driver-password string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `root`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">database password (default "root") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Database password. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--storage-driver-secure</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">use secure connection with database (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Use secure connection with database (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--storage-driver-table string</td>
+<td colspan="2">--storage-driver-table string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `stats`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">table name (default "stats") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Table name. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--storage-driver-user string</td>
+<td colspan="2">--storage-driver-user string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `root`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">database username (default "root") (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Database username. (DEPRECATED: This is a cadvisor flag that was mistakenly registered with the Kubelet. Due to legacy concerns, it will follow the standard CLI deprecation timeline before being removed.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--streaming-connection-idle-timeout duration</td>
+<td colspan="2">--streaming-connection-idle-timeout duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `4h0m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum time a streaming connection can be idle before the connection is automatically closed. 0 indicates no timeout. Example: '5m' (default 4h0m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Maximum time a streaming connection can be idle before the connection is automatically closed. `0` indicates no timeout. Example: `5m`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--sync-frequency duration</td>
+<td colspan="2">--sync-frequency duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `1m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Max period between synchronizing running containers and config (default 1m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Max period between synchronizing running containers and config. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--system-cgroups /</td>
+<td colspan="2">--system-cgroups string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional absolute name of cgroups in which to place all non-kernel processes that are not already inside a cgroup under /. Empty for no container. Rolling back the flag requires a reboot. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Optional absolute name of cgroups in which to place all non-kernel processes that are not already inside a cgroup under `/`. Empty for no container. Rolling back the flag requires a reboot. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--system-reserved mapStringString</td>
+<td colspan="2">--system-reserved mapStringString&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: \<none\></td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of ResourceName=ResourceQuantity (e.g. cpu=200m,memory=500Mi,ephemeral-storage=1Gi) pairs that describe resources reserved for non-kubernetes components. Currently only cpu and memory are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. [default=none] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">A set of `<resource name>=<resource quantity>` (e.g. `cpu=200m,memory=500Mi,ephemeral-storage=1Gi`) pairs that describe resources reserved for non-kubernetes components. Currently only `cpu` and `memory` are supported. See http://kubernetes.io/docs/user-guide/compute-resources for more detail. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--system-reserved-cgroup string</td>
+<td colspan="2">--system-reserved-cgroup string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `''`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Absolute name of the top level cgroup that is used to manage non-kubernetes components for which compute resources were reserved via '--system-reserved' flag. Ex. '/system-reserved'. [default=''] (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Absolute name of the top level cgroup that is used to manage non-kubernetes components for which compute resources were reserved via `--system-reserved` flag. Ex. `/system-reserved`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-cert-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing x509 Certificate used for serving HTTPS (with intermediate certs, if any, concatenated after server cert). If --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory passed to --cert-dir. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing x509 Certificate used for serving HTTPS (with intermediate certs, if any, concatenated after server cert). If `--tls-cert-file` and `--tls-private-key-file` are not provided, a self-signed certificate and key are generated for the public address and saved to the directory passed to `--cert-dir`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-cipher-suites stringSlice</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used. Possible values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_RC4_128_SHA (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.<br/>
+Preferred values:
+TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.<br/> 
+Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)
 </tr>
 
 <tr>
 <td colspan="2">--tls-min-version string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13 (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Minimum TLS version supported. Possible values: `VersionTLS10`, `VersionTLS11`, `VersionTLS12`, `VersionTLS13` (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">--tls-private-key-file string</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing x509 private key matching --tls-cert-file. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">File containing x509 private key matching `--tls-cert-file`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 
 <tr>
-<td colspan="2">--topology-manager-policy string</td>
+<td colspan="2">--topology-manager-policy string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `none`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Topology Manager policy to use. Possible values: 'none', 'best-effort', 'restricted', 'single-numa-node'. (default "none") (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Topology Manager policy to use. Possible values: `none`, `best-effort`, `restricted`, `single-numa-node`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
 <td colspan="2">-v, --v Level</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">number for the log level verbosity</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Number for the log level verbosity</td>
 </tr>
 
 <tr>
@@ -1248,21 +1350,21 @@ kubelet [flags]
 <td colspan="2">--vmodule moduleSpec</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">comma-separated list of pattern=N settings for file-filtered logging</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Comma-separated list of `pattern=N` settings for file-filtered logging</td>
 </tr>
 
 <tr>
-<td colspan="2">--volume-plugin-dir string</td>
+<td colspan="2">--volume-plugin-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `/usr/libexec/kubernetes/kubelet-plugins/volume/exec/`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">&lt;Warning: Alpha feature&gt; The full path of the directory in which to search for additional third party volume plugins (default "/usr/libexec/kubernetes/kubelet-plugins/volume/exec/")</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">The full path of the directory in which to search for additional third party volume plugins. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 
 <tr>
-<td colspan="2">--volume-stats-agg-period duration</td>
+<td colspan="2">--volume-stats-agg-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: `1m0s`</td>
 </tr>
 <tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">Specifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes.  To disable volume calculations, set to 0. (default 1m0s) (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
+<td></td><td style="line-height: 130%; word-wrap: break-word;">Specifies interval for kubelet to calculate and cache the volume disk usage for all pods and volumes. To disable volume calculations, set to `0`. (DEPRECATED: This parameter should be set via the config file specified by the Kubelet's `--config` flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.)</td>
 </tr>
 </tbody>
 </table>

From 8adb4c29e5da8fb530c0742a869fc40a0b004d2a Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Fri, 11 Sep 2020 11:48:43 +0700
Subject: [PATCH 284/496] Clean up case study images in content/pt/case-studies

---
 content/pt/case-studies/chinaunicom/index.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/pt/case-studies/chinaunicom/index.html b/content/pt/case-studies/chinaunicom/index.html
index 63131d0031..c3a1f81f8a 100644
--- a/content/pt/case-studies/chinaunicom/index.html
+++ b/content/pt/case-studies/chinaunicom/index.html
@@ -12,7 +12,7 @@ quote: >
    O Kubernetes melhorou nossa experiência usando a infraestrutura de nuvem. Atualmente, não há tecnologia alternativa que possa substituí-lo.
 ---
 
-<div class="banner1" style="background-image: url('/images/CaseStudy_chinaunicom_banner1.jpg')">
+<div class="banner1" style="background-image: url('/images/case-studies/chinaunicom/banner1.jpg')">
   <h1> ESTUDO DE CASO:<img src="/images/chinaunicom_logo.png" class="header_logo" style="width:25%;margin-bottom:-1%"><br> <div class="subhead" style="margin-top:1%;line-height:1.4em">China Unicom: Como o Kubernetes alavancou a utilização de recursos, aumentando sua eficiência operacional e menores custos em TI
 
 </div></h1>
@@ -55,7 +55,7 @@ quote: >
 
 </div>
 </section>
-<div class="banner3" style="background-image: url('/images/CaseStudy_chinaunicom_banner3.jpg');width:100%;padding-left:0;">
+<div class="banner3" style="background-image: url('/images/case-studies/chinaunicom/banner3.jpg');width:100%;padding-left:0;">
   <div class="banner3text">
     "Nós nunca poderíamos imaginar que alcançaríamos essa escalabilidade em tão pouco tempo."<br style="height:25px"><span style="font-size:14px;letter-spacing:2px;text-transform:uppercase;margin-top:5% !important;"><br>- Chengyu Zhang, Líder do Grupo de Tecnologia de Plataforma de Pesquisa e Desenvolvimento, China Unicom</span>
 
@@ -68,7 +68,7 @@ quote: >
   "O Kubernetes melhorou nossa experiência usando a infraestrutura de nuvem", diz Zhang. "Atualmente, não há tecnologia alternativa que possa substituí-lo."
 </div>
 </section>
-<div class="banner4" style="background-image: url('/images/CaseStudy_chinaunicom_banner4.jpg');width:100%">
+<div class="banner4" style="background-image: url('/images/case-studies/chinaunicom/banner4.jpg');width:100%">
   <div class="banner4text">
     "Essa tecnologia é relativamente complicada, mas quando os desenvolvedores se acostumarem, eles poderão desfrutar de todos os benefícios." <br style="height:25px"> <span style = "font-size: 14px; letter-spacing: 2px; text-transform: uppercase; margin-top: 5%! important;"> <br> - Jie Jia , Membro da Plataforma de Tecnologia de I & D, China Unicom </ span>
   </div>

From 8b0014260d2296f431f8ad227090b98fad1d7fdf Mon Sep 17 00:00:00 2001
From: Aleg Malinovsky <cerberusn2@gmail.com>
Date: Fri, 11 Sep 2020 15:24:51 +0300
Subject: [PATCH 285/496] missing a word

it felt like the sentence was missing a word in that place
---
 content/en/docs/concepts/services-networking/endpoint-slices.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/endpoint-slices.md b/content/en/docs/concepts/services-networking/endpoint-slices.md
index 3a2d622fc4..b028139c1d 100644
--- a/content/en/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/en/docs/concepts/services-networking/endpoint-slices.md
@@ -23,7 +23,7 @@ Endpoints.
 
 The Endpoints API has provided a simple and straightforward way of
 tracking network endpoints in Kubernetes. Unfortunately as Kubernetes clusters
-and {{< glossary_tooltip text="Services" term_id="service" >}} have grown to handle
+and {{< glossary_tooltip text="Services" term_id="service" >}} have grown to handle and
 send more traffic to more backend Pods, limitations of that original API became
 more visible.
 Most notably, those included challenges with scaling to larger numbers of

From 986be3462d83703ffa4d71ffdbb02585af7b7804 Mon Sep 17 00:00:00 2001
From: June Yi <gochist@gmail.com>
Date: Fri, 11 Sep 2020 23:21:22 +0900
Subject: [PATCH 286/496] First Korean l10n work for release-1.19

- Translate tasks/job/parallel-processing-expansion.md into Korean (#23544)
- Fix issue with ko/docs/concepts/workloads/controllers/job.md (#23720)
- Translate reference/scheduling/policies.md in Korean (#23690)
- Update outdated files in the dev-1.19-ko.1 branch (#23702)
- Modify translation access by Korean glossary (#23627)

Co-authored-by: Jerry Park <jaehwa@gmail.com>
Co-authored-by: junghyeonsu <54893898+junghyeonsu@users.noreply.github.com>
Co-authored-by: coolguyhong <podolsmith@naver.com>
---
 content/ko/_index.html                        |    5 -
 content/ko/docs/_index.md                     |    1 +
 .../concepts/architecture/cloud-controller.md |    3 +-
 .../docs/concepts/architecture/controller.md  |   73 +-
 .../concepts/cluster-administration/addons.md |    2 +-
 .../cluster-administration/cloud-providers.md |   81 +-
 .../cluster-administration/logging.md         |    5 +-
 .../{monitoring.md => system-metrics.md}      |    0
 .../docs/concepts/configuration/configmap.md  |    4 +-
 .../manage-resources-containers.md            |    4 +-
 .../configuration/pod-priority-preemption.md  |   40 +-
 .../configuration/resource-bin-packing.md     |    2 +-
 .../ko/docs/concepts/configuration/secret.md  |    8 +-
 content/ko/docs/concepts/containers/images.md |    4 +-
 .../compute-storage-net/device-plugins.md     |   32 +-
 .../extend-kubernetes/extend-cluster.md       |    2 +-
 .../concepts/extend-kubernetes/operator.md    |    5 +-
 .../ko/docs/concepts/overview/components.md   |    4 +-
 .../concepts/policy/pod-security-policy.md    |   16 +-
 .../docs/concepts/policy/resource-quotas.md   |    3 +-
 .../scheduling-eviction/kube-scheduler.md     |    6 +-
 .../services-networking/dns-pod-service.md    |   20 +-
 .../services-networking/endpoint-slices.md    |  113 +-
 .../concepts/services-networking/ingress.md   |  293 ++--
 .../services-networking/network-policies.md   |   29 +-
 .../concepts/services-networking/service.md   |   28 +-
 .../concepts/storage/dynamic-provisioning.md  |    3 +-
 .../concepts/storage/persistent-volumes.md    |   10 +
 .../docs/concepts/storage/volume-snapshots.md |    4 +-
 content/ko/docs/concepts/storage/volumes.md   |   86 +-
 .../workloads/controllers/daemonset.md        |    2 +-
 .../workloads/controllers/deployment.md       |   12 +-
 .../controllers/garbage-collection.md         |    2 +-
 .../concepts/workloads/controllers/job.md     |   10 +-
 .../workloads/controllers/replicaset.md       |    7 +-
 .../controllers/replicationcontroller.md      |   34 +-
 .../workloads/controllers/statefulset.md      |    2 +-
 .../ko/docs/concepts/workloads/pods/_index.md |    2 +-
 .../concepts/workloads/pods/pod-lifecycle.md  |    6 +-
 .../pods/pod-topology-spread-constraints.md   |   78 +-
 content/ko/docs/reference/_index.md           |   10 +-
 .../command-line-tools-reference/_index.md    |    1 -
 .../feature-gates.md                          |   81 +-
 .../docs/reference/glossary/kube-apiserver.md |    8 +-
 .../reference/glossary/managed-service.md     |   14 +-
 .../docs/reference/issues-security/_index.md  |    1 -
 .../ko/docs/reference/kubectl/cheatsheet.md   |   26 +-
 content/ko/docs/reference/kubectl/overview.md |   27 +-
 .../ko/docs/reference/scheduling/_index.md    |    5 +
 .../ko/docs/reference/scheduling/policies.md  |  118 ++
 .../ko/docs/reference/setup-tools/_index.md   |    2 -
 .../reference/setup-tools/kubeadm/_index.md   |   26 +-
 .../reference/setup-tools/kubeadm/kubeadm.md  |   28 -
 content/ko/docs/reference/using-api/_index.md |    1 -
 .../reference/using-api/client-libraries.md   |    7 +-
 .../container-runtimes.md                     |  201 ++-
 content/ko/docs/setup/release/notes.md        | 1370 -----------------
 content/ko/docs/tasks/_index.md               |    2 +-
 .../access-application-cluster/_index.md      |    2 +-
 .../access-cluster.md                         |   67 +-
 ...icate-containers-same-pod-shared-volume.md |   36 +-
 .../web-ui-dashboard.md                       |  151 +-
 .../administer-cluster/access-cluster-api.md  |   15 +-
 .../access-cluster-services.md                |    3 +-
 .../administer-cluster/cluster-management.md  |   40 +-
 .../dns-custom-nameservers.md                 |   30 +-
 .../kubeadm/kubeadm-upgrade.md                |  188 ++-
 .../romana-network-policy.md                  |   14 +-
 .../weave-network-policy.md                   |   21 +-
 .../quality-service-pod.md                    |    3 +-
 .../debug-init-containers.md                  |   26 +-
 .../logging-elasticsearch-kibana.md           |    7 +-
 .../resource-metrics-pipeline.md              |   21 +-
 .../resource-usage-monitoring.md              |   37 +-
 .../define-environment-variable-container.md  |   35 +-
 .../job/parallel-processing-expansion.md      |  310 ++++
 .../tasks/manage-daemon/update-daemon-set.md  |   11 +-
 .../manage-hugepages/scheduling-hugepages.md  |    2 +-
 .../declarative-config.md                     |    2 +-
 .../imperative-command.md                     |    2 +-
 .../imperative-config.md                      |    2 +-
 .../kustomization.md                          |    6 +-
 .../horizontal-pod-autoscale-walkthrough.md   |   12 +-
 .../ko/docs/tasks/tls/certificate-rotation.md |   14 +-
 .../ko/docs/tasks/tools/install-kubectl.md    |   21 +-
 .../ko/docs/tutorials/clusters/apparmor.md    |    7 +-
 content/ko/docs/tutorials/hello-minikube.md   |    2 +-
 .../explore/explore-intro.html                |    6 +-
 .../ko/docs/tutorials/services/source-ip.md   |    8 +-
 .../stateful-application/cassandra.md         |   46 +-
 .../stateful-application/zookeeper.md         |   65 +-
 .../ko/examples/application/job/job-tmpl.yaml |   18 +
 .../service/networking/external-lb.yaml       |   10 +
 .../networking/ingress-resource-backend.yaml  |   20 +
 .../networking/ingress-wildcard-host.yaml     |   26 +
 .../examples/service/networking/ingress.yaml  |    9 -
 .../service/networking/minimal-ingress.yaml   |   17 +
 ...me-virtual-host-ingress-no-third-host.yaml |   35 +
 .../networking/name-virtual-host-ingress.yaml |   26 +
 .../networking/simple-fanout-example.yaml     |   23 +
 .../service/networking/test-ingress.yaml      |   10 +
 .../networking/tls-example-ingress.yaml       |   20 +
 102 files changed, 1943 insertions(+), 2452 deletions(-)
 rename content/ko/docs/concepts/cluster-administration/{monitoring.md => system-metrics.md} (100%)
 create mode 100644 content/ko/docs/reference/scheduling/_index.md
 create mode 100644 content/ko/docs/reference/scheduling/policies.md
 delete mode 100644 content/ko/docs/reference/setup-tools/kubeadm/kubeadm.md
 delete mode 100644 content/ko/docs/setup/release/notes.md
 create mode 100644 content/ko/docs/tasks/job/parallel-processing-expansion.md
 create mode 100644 content/ko/examples/application/job/job-tmpl.yaml
 create mode 100644 content/ko/examples/service/networking/external-lb.yaml
 create mode 100644 content/ko/examples/service/networking/ingress-resource-backend.yaml
 create mode 100644 content/ko/examples/service/networking/ingress-wildcard-host.yaml
 delete mode 100644 content/ko/examples/service/networking/ingress.yaml
 create mode 100644 content/ko/examples/service/networking/minimal-ingress.yaml
 create mode 100644 content/ko/examples/service/networking/name-virtual-host-ingress-no-third-host.yaml
 create mode 100644 content/ko/examples/service/networking/name-virtual-host-ingress.yaml
 create mode 100644 content/ko/examples/service/networking/simple-fanout-example.yaml
 create mode 100644 content/ko/examples/service/networking/test-ingress.yaml
 create mode 100644 content/ko/examples/service/networking/tls-example-ingress.yaml

diff --git a/content/ko/_index.html b/content/ko/_index.html
index 0916d04245..fd7053211b 100644
--- a/content/ko/_index.html
+++ b/content/ko/_index.html
@@ -41,11 +41,6 @@ Google이 일주일에 수십억 개의 컨테이너들을 운영하게 해준 
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Watch Video</button>
         <br>
         <br>
-        <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/?utm_source=kubernetes.io&utm_medium=nav&utm_campaign=kccnceu20" button id="desktopKCButton">Attend KubeCon EU virtually on August 17-20, 2020</a>
-        <br>
-        <br>
-        <br>
-        <br>
         <a href="https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/?utm_source=kubernetes.io&utm_medium=nav&utm_campaign=kccncna20" button id="desktopKCButton">Attend KubeCon NA virtually on November 17-20, 2020</a>
 </div>
 <div id="videoPlayer">
diff --git a/content/ko/docs/_index.md b/content/ko/docs/_index.md
index e3c4620130..8a2dbc31a5 100644
--- a/content/ko/docs/_index.md
+++ b/content/ko/docs/_index.md
@@ -1,3 +1,4 @@
 ---
+linktitle: 쿠버네티스 문서
 title: 문서
 ---
diff --git a/content/ko/docs/concepts/architecture/cloud-controller.md b/content/ko/docs/concepts/architecture/cloud-controller.md
index b3806591c2..f7666ef0c3 100644
--- a/content/ko/docs/concepts/architecture/cloud-controller.md
+++ b/content/ko/docs/concepts/architecture/cloud-controller.md
@@ -23,7 +23,7 @@ weight: 40
 
 ## 디자인
 
-![쿠버네티스 컴포넌트](/images/docs/components-of-kubernetes.png)
+![쿠버네티스 컴포넌트](/images/docs/components-of-kubernetes.svg)
 
 클라우드 컨트롤러 매니저는 컨트롤 플레인에서 복제된 프로세스의 집합으로 실행된다(일반적으로,
 파드의 컨테이너). 각 클라우드 컨트롤러 매니저는 단일
@@ -213,4 +213,3 @@ rules:
 이 문서(노드, 라우트와 서비스)에서 강조된 공유 컨트롤러의 구현과 공유 cloudprovider 인터페이스와 함께 일부 스캐폴딩(scaffolding)은 쿠버네티스 핵심의 일부이다. 클라우드 공급자 전용 구현은 쿠버네티스의 핵심 바깥에 있으며 `CloudProvider` 인터페이스를 구현한다.
 
 플러그인 개발에 대한 자세한 내용은 [클라우드 컨트롤러 매니저 개발하기](/docs/tasks/administer-cluster/developing-cloud-controller-manager/)를 참조한다.
-
diff --git a/content/ko/docs/concepts/architecture/controller.md b/content/ko/docs/concepts/architecture/controller.md
index 7782d27855..836b4a5b6b 100644
--- a/content/ko/docs/concepts/architecture/controller.md
+++ b/content/ko/docs/concepts/architecture/controller.md
@@ -6,14 +6,14 @@ weight: 30
 
 <!-- overview -->
 
-로보틱스와 자동화에서 _컨트롤 루프_ 는 
+로보틱스와 자동화에서 _컨트롤 루프_ 는
 시스템 상태를 조절하는 종료되지 않는 루프이다.
 
 컨트롤 루프의 예시: 실내 온도 조절기
 
 사용자는 온도를 설정해서, 사용자가 *의도한 상태* 를
 온도 조절기에 알려준다.
-*현재 상태* 이다. 온도 조절기는 장비를 켜거나 꺼서 
+*현재 상태* 이다. 온도 조절기는 장비를 켜거나 꺼서
 현재 상태를 의도한 상태에 가깝게 만든다.
 
 {{< glossary_definition term_id="controller" length="short">}}
@@ -28,64 +28,64 @@ weight: 30
 컨트롤러는 적어도 하나 이상의 쿠버네티스 리소스 유형을 추적한다.
 이 [오브젝트](/ko/docs/concepts/overview/working-with-objects/kubernetes-objects/#kubernetes-objects)
 는 의도한 상태를 표현하는 사양 필드를 가지고 있다.
-해당 리소스의 컨트롤러(들)은 현재 상태를 의도한 
+해당 리소스의 컨트롤러(들)은 현재 상태를 의도한
 상태에 가깝게 만드는 역할을 한다.
 
-컨트롤러는 스스로 작업을 수행할 수 있다. 보다 일반적으로, 
-쿠버네티스에서는 컨트롤러가 
+컨트롤러는 스스로 작업을 수행할 수 있다. 보다 일반적으로,
+쿠버네티스에서는 컨트롤러가
 {{< glossary_tooltip text="API 서버" term_id="kube-apiserver" >}} 로
 유용한 부수적인 효과가 있는 메시지를 발송한다. 그 예시는 아래에서 볼 수 있다.
 
 {{< comment >}}
-네임스페이스 컨트롤러와 같은 일부 내장된 컨트롤러는 사양을 가지지 않는 
-오브젝트에 대해 작동한다. 내용의 간결함을 위해서, 이 페이지에서는 
+네임스페이스 컨트롤러와 같은 일부 내장된 컨트롤러는 사양을 가지지 않는
+오브젝트에 대해 작동한다. 내용의 간결함을 위해서, 이 페이지에서는
 자세한 설명을 생략한다.
 {{< /comment >}}
 
 ### API 서버를 통한 제어
 
-{{< glossary_tooltip term_id="job" >}} 컨트롤러는 쿠버네티스 
-내장 컨트롤러의 예시이다. 내장 컨트롤러는 클러스터 API 서버와 
+{{< glossary_tooltip term_id="job" >}} 컨트롤러는 쿠버네티스
+내장 컨트롤러의 예시이다. 내장 컨트롤러는 클러스터 API 서버와
 상호 작용하며 상태를 관리한다.
 
-잡은 단일 {{< glossary_tooltip text="파드" term_id="pod" >}} 또는 여러 파드를 실행하고, 
-작업을 수행한 다음 중지하는 
+잡은 단일 {{< glossary_tooltip text="파드" term_id="pod" >}} 또는 여러 파드를 실행하고,
+작업을 수행한 다음 중지하는
 쿠버네티스 리소스 이다.
 
-(일단 [스케줄되면](/ko/docs/concepts/scheduling-eviction/), 파드 오브젝트는 kubelet 
+(일단 [스케줄되면](/ko/docs/concepts/scheduling-eviction/), 파드 오브젝트는 kubelet
 의 의도한 상태 중 일부가 된다.)
 
-잡 컨트롤러가 새로운 작업을 확인하면, 클러스터 어딘가에서 
+잡 컨트롤러가 새로운 작업을 확인하면, 클러스터 어딘가에서
 노드 집합의 kubelet이 작업을 수행하기에 적합한
 수의 파드를 실행하게 한다.
 잡 컨트롤러는 어떤 파드 또는 컨테이너를 스스로 실행하지 않는다.
-대신, 잡 컨트롤러는 API 서버에 파드를 생성하거나 삭제하도록 
+대신, 잡 컨트롤러는 API 서버에 파드를 생성하거나 삭제하도록
 지시한다.
-{{< glossary_tooltip text="컨트롤 플레인" term_id="control-plane" >}}의 
+{{< glossary_tooltip text="컨트롤 플레인" term_id="control-plane" >}}의
 다른 컴포넌트는 신규 정보
-(예약 및 실행해야 하는 새 파드가 있다는 정보)에 대응하여, 
+(예약 및 실행해야 하는 새 파드가 있다는 정보)에 대응하여,
 결국 해당 작업을 완료시킨다.
 
 새 잡을 생성하고 나면, 의도한 상태는 해당 잡을 완료하는 것이 된다.
-잡 컨트롤러는 현재 상태를 의도한 상태에 가깝게 
-만들며, 사용자가 원하는 잡을 수행하기 위해 파드를 생성해서 
+잡 컨트롤러는 현재 상태를 의도한 상태에 가깝게
+만들며, 사용자가 원하는 잡을 수행하기 위해 파드를 생성해서
 잡이 완료에 가까워 지도록 한다.
 
 또한, 컨트롤러는 오브젝트의 설정을 업데이트 한다.
 예시: 잡을 위한 작업이 종료된 경우, 잡 컨트롤러는
 잡 오브젝트가 `Finished`  로 표시되도록 업데이트한다.
 
-(이것은 지금 방 온도가 설정한 온도인 것을 표시하기 
+(이것은 지금 방 온도가 설정한 온도인 것을 표시하기
 위해 실내 온도 조절기의 빛을 끄는 것과 약간 비슷하다).
 
 ### 직접 제어
 
-잡과는 대조적으로, 일부 컨트롤러는 클러스터 외부의 것을 
+잡과는 대조적으로, 일부 컨트롤러는 클러스터 외부의 것을
 변경해야 할 필요가 있다.
 
-예를 들어, 만약 컨트롤 루프를 사용해서 
+예를 들어, 만약 컨트롤 루프를 사용해서
 클러스터에 충분한 {{< glossary_tooltip text="노드들" term_id="node" >}}이
-있도록 만드는 경우, 해당 컨트롤러는 필요할 때 새 노드를 설정할 수 있도록 
+있도록 만드는 경우, 해당 컨트롤러는 필요할 때 새 노드를 설정할 수 있도록
 현재 클러스터 외부의 무언가를 필요로 한다.
 
 외부 상태와 상호 작용하는 컨트롤러는 API 서버에서 의도한
@@ -101,7 +101,7 @@ weight: 30
 쿠버네티스는 클라우드-네이티브 관점에서 시스템을 관찰하며, 지속적인
 변화에 대응할 수 있다.
 
-작업이 발생함에 따라 어떤 시점에서든 클러스터가 
+작업이 발생함에 따라 어떤 시점에서든 클러스터가
 변경 될 수 있으며 컨트롤 루프가 자동으로 실패를 바로잡는다. 이는 잠재적으로,
 클러스터가 안정적인 상태에 도달하지 못하는 것을 의미한다.
 
@@ -110,26 +110,26 @@ weight: 30
 
 ## 디자인
 
-디자인 원리에 따라, 쿠버네티스는 클러스터 상태의 각 특정 측면을 
+디자인 원리에 따라, 쿠버네티스는 클러스터 상태의 각 특정 측면을
 관리하는 많은 컨트롤러를 사용한다. 가장 일반적으로, 특정 컨트롤 루프
-(컨트롤러)는 의도한 상태로서 한 종류의 리소스를 사용하고, 의도한 상태로 
+(컨트롤러)는 의도한 상태로서 한 종류의 리소스를 사용하고, 의도한 상태로
 만들기 위해 다른 종류의 리소스를 관리한다. 예를 들어, 잡 컨트롤러는
-잡 오브젝트(새 작업을 발견하기 위해)와 파드 오브젝트(잡을 실행하고, 완료된 시기를 
+잡 오브젝트(새 작업을 발견하기 위해)와 파드 오브젝트(잡을 실행하고, 완료된 시기를
 확인하기 위해)를 추적한다. 이 경우 파드는 잡 컨트롤러가 생성하는 반면,
 잡은 다른 컨트롤러가 생성한다.
 
-컨트롤 루프들로 연결 구성된 하나의 모놀리식(monolithic) 집합보다, 
-간단한 컨트롤러를 여러 개 사용하는 것이 유용하다. 컨트롤러는 실패할 수 있으므로, 쿠버네티스는 이를 
+컨트롤 루프들로 연결 구성된 하나의 모놀리식(monolithic) 집합보다,
+간단한 컨트롤러를 여러 개 사용하는 것이 유용하다. 컨트롤러는 실패할 수 있으므로, 쿠버네티스는 이를
 허용하도록 디자인되었다.
 
 {{< note >}}
 동일한 종류의 오브젝트를 만들거나 업데이트하는 여러 컨트롤러가 있을 수 있다.
-이면에, 쿠버네티스 컨트롤러는 컨트롤 하고 있는 리소스에 
+이면에, 쿠버네티스 컨트롤러는 컨트롤 하고 있는 리소스에
 연결된 리소스에만 주의를 기울인다.
 
 예를 들어, 디플로이먼트와 잡을 가지고 있다. 이 두 가지 모두 파드를 생성한다.
-잡 컨트롤러는 디플로이먼트가 생성한 파드를 삭제하지 않는다. 
-이는 컨트롤러가 해당 파드를 구별하기 위해 사용할 수 있는 
+잡 컨트롤러는 디플로이먼트가 생성한 파드를 삭제하지 않는다.
+이는 컨트롤러가 해당 파드를 구별하기 위해 사용할 수 있는
 정보({{< glossary_tooltip term_id="label" text="레이블" >}})가 있기 때문이다.
 {{< /note >}}
 
@@ -139,14 +139,14 @@ weight: 30
 내부에서 실행되는 내장된 컨트롤러 집합이 있다. 이
 내장 컨트롤러는 중요한 핵심 동작을 제공한다.
 
-디플로이먼트 컨트롤러와 잡 컨트롤러는 쿠버네티스의 
+디플로이먼트 컨트롤러와 잡 컨트롤러는 쿠버네티스의
 자체("내장" 컨트롤러)로 제공되는 컨트롤러 예시이다.
-쿠버네티스를 사용하면 복원력이 뛰어난 컨트롤 플레인을 실행할 수 있으므로, 
+쿠버네티스를 사용하면 복원력이 뛰어난 컨트롤 플레인을 실행할 수 있으므로,
 어떤 내장 컨트롤러가 실패하더라도 다른 컨트롤 플레인의 일부가 작업을 이어서 수행한다.
 
 컨트롤 플레인의 외부에서 실행하는 컨트롤러를 찾아서 쿠버네티스를 확장할 수 있다.
 또는, 원하는 경우 새 컨트롤러를 직접 작성할 수 있다.
-소유하고 있는 컨트롤러를 파드 집합으로서 실행하거나, 
+소유하고 있는 컨트롤러를 파드 집합으로서 실행하거나,
 또는 쿠버네티스 외부에서 실행할 수 있다. 가장 적합한 것은 특정 컨트롤러의 기능에
 따라 달라진다.
 
@@ -154,8 +154,7 @@ weight: 30
 
 ## {{% heading "whatsnext" %}}
 
-* [쿠버네티스 컨트롤 플레인](/ko/docs/concepts/#쿠버네티스-컨트롤-플레인)에 대해 읽기
-* [쿠버네티스 오브젝트](/ko/docs/concepts/#쿠버네티스-오브젝트)의 몇 가지 기본 사항을 알아보자.
+* [쿠버네티스 컨트롤 플레인](/ko/docs/concepts/overview/components/#컨트롤-플레인-컴포넌트)에 대해 읽기
+* [쿠버네티스 오브젝트](/ko/docs/concepts/overview/working-with-objects/kubernetes-objects/)의 몇 가지 기본 사항을 알아보자.
 * [쿠버네티스 API](/ko/docs/concepts/overview/kubernetes-api/)에 대해 더 배워 보자.
 * 만약 자신만의 컨트롤러를 작성하기 원한다면, 쿠버네티스 확장하기의 [확장 패턴](/ko/docs/concepts/extend-kubernetes/extend-cluster/#익스텐션-패턴)을 본다.
-
diff --git a/content/ko/docs/concepts/cluster-administration/addons.md b/content/ko/docs/concepts/cluster-administration/addons.md
index 067ebab037..c0caa56526 100644
--- a/content/ko/docs/concepts/cluster-administration/addons.md
+++ b/content/ko/docs/concepts/cluster-administration/addons.md
@@ -29,7 +29,7 @@ content_type: concept
 * [NSX-T](https://docs.vmware.com/en/VMware-NSX-T/2.0/nsxt_20_ncp_kubernetes.pdf) 컨테이너 플러그인(NCP)은 VMware NSX-T와 쿠버네티스와 같은 컨테이너 오케스트레이터 간의 통합은 물론 NSX-T와 PKS(Pivotal 컨테이너 서비스) 및 OpenShift와 같은 컨테이너 기반 CaaS/PaaS 플랫폼 간의 통합을 제공한다.
 * [Nuage](https://github.com/nuagenetworks/nuage-kubernetes/blob/v5.1.1-1/docs/kubernetes-1-installation.rst)는 가시성과 보안 모니터링 기능을 통해 쿠버네티스 파드와 비-쿠버네티스 환경 간에 폴리시 기반 네트워킹을 제공하는 SDN 플랫폼이다.
 * [Romana](https://romana.io)는 [네트워크폴리시 API](/ko/docs/concepts/services-networking/network-policies/)도 지원하는 파드 네트워크용 Layer 3 네트워킹 솔루션이다. Kubeadm 애드온 설치에 대한 세부 정보는 [여기](https://github.com/romana/romana/tree/master/containerize)에 있다.
-* [Weave Net](https://www.weave.works/docs/net/latest/kube-addon/)은 네트워킹 및 네트워크 폴리시를 제공하고, 네트워크 파티션의 양면에서 작업을 수행하며, 외부 데이터베이스는 필요하지 않다.
+* [Weave Net](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/)은 네트워킹 및 네트워크 폴리시를 제공하고, 네트워크 파티션의 양면에서 작업을 수행하며, 외부 데이터베이스는 필요하지 않다.
 
 ## 서비스 검색
 
diff --git a/content/ko/docs/concepts/cluster-administration/cloud-providers.md b/content/ko/docs/concepts/cluster-administration/cloud-providers.md
index 9c1c556808..6bb421a3d5 100644
--- a/content/ko/docs/concepts/cluster-administration/cloud-providers.md
+++ b/content/ko/docs/concepts/cluster-administration/cloud-providers.md
@@ -6,7 +6,7 @@ weight: 30
 
 <!-- overview -->
 이 페이지에서는 특정 클라우드 제공자에서 실행 중인 쿠버네티스를 관리하는 방법에
-대해 설명한다.
+대해 설명한다. 다른 많은 타사 클라우드 제공자 프로젝트가 있지만, 이 목록은 쿠버네티스 자체에 의존하거나, 포함되어있는 프로젝트에 한정한다.
 
 <!-- body -->
 ### kubeadm
@@ -116,15 +116,6 @@ AWS 어노테이션에 대한 정보 출처는 [aws.go](https://github.com/kuber
 Azure 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름(hostname)을 사용한다.
 참고로 쿠버네티스 노드 이름은 Azure VM 이름과 일치해야 한다.
 
-## CloudStack
-
-이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [apache/cloudstack-kubernetes-provider](https://github.com/apache/cloudstack-kubernetes-provider)이다.
-
-### 노드 이름
-
-CloudStack 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름을 사용한다.
-참고로 쿠버네티스 노드 이름은 CloudStack VM 이름과 일치해야 한다.
-
 ## GCE
 
 이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes/cloud-provider-gcp](https://github.com/kubernetes/cloud-provider-gcp#readme)이다.
@@ -138,11 +129,6 @@ GCE 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으
 
 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes-sigs/cloud-provider-huaweicloud](https://github.com/kubernetes-sigs/cloud-provider-huaweicloud)이다.
 
-### 노드 이름
-
-HUAWEI CLOUD 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 프라이빗 IP 주소가 필요하다.
-노드에서 kubelet을 시작할 때 반드시 `--hostname-override=<node private IP>` 를 사용한다.
-
 ## OpenStack
 이 섹션에서는 쿠버네티스와 함께 OpenStack을 사용할 때 사용할 수 있는
 모든 구성에 대해 설명한다.
@@ -251,11 +237,9 @@ OpenStack 제공자에 대한 다음의 구성 옵션은 로드 밸런서와 관
   값은 `v1` 또는 `v2` 이다. 값이 제공되지 않는 경우 자동 감지는
   기본 OpenStack 클라우드에 의해 제공되는 가장 최신의 지원되는 버전을
   선택한다.
-* `use-octavia` (선택): Octavia LBaaS V2 서비스 카탈로그 엔드포인트를 찾고 사용할지의
-  여부를 결정하는 데 사용된다. 유효한 값은 `true` 또는 `false` 이다.
-  `true` 가 지정되고 Octaiva LBaaS V2 항목을 찾을 수 없는 경우,
-  제공자는 폴백(fall back)하고 대신 Neutron LBaaS V2 엔드포인트를 찾으려고
-  시도한다. 기본값은 `false` 이다.
+* `use-octavia` (선택): Neutron-LBaaS를 사용하는 대신 LoadBalancer 유형의
+  서비스 구현에 Octavia를 사용할지 여부를 결정한다. 기본값: true
+  주의: Openstack CCM은 v1.17.0 이후로 기본 로드 밸런서 구현으로 Octavia를 사용한다.
 * `subnet-id` (선택): 로드 밸런서를 생성하려는 서브넷의 id를
   지정하는 데 사용된다. Network > Networks 에서 찾을 수 있다. 해당
   네트워크를 클릭하여 서브넷을 가져온다.
@@ -362,19 +346,7 @@ OpenStack 제공자에 대한 다음의 구성 옵션은 [kubenet]
   [kubenet](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#kubenet)을
   사용하는 데 필요하다.
 
-## OVirt
-
-### 노드 이름
-
-OVirt 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름을 사용한다.
-참고로 쿠버네티스 노드 이름은 VM FQDN(Ovirt의 `<vm><guest_info><fqdn>...</fqdn></guest_info></vm>` 아래에서 보고된)과 일치해야 한다.
-
-## Photon
-
-### 노드 이름
-
-Photon 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름을 사용한다.
-참고로 쿠버네티스 노드 이름은 Photon VM 이름(또는 `--cloud-config` 에서 `overrideIP` 가 true로 설정된 경우, 쿠버네티스 노드 이름은 Photon VM IP 주소와 일치해야 함)과 일치해야 한다.
+[kubenet]: /ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#kubenet
 
 ## vSphere
 
@@ -388,46 +360,3 @@ vSphere 6.7U3 미만을 사용할 경우, 인-트리 vSphere 클라우드 제공
 {{< /tabs >}}
 
 vSphere 클라우드 제공자에 대한 자세한 문서를 보려면, [vSphere 클라우드 제공자 문서 사이트](https://cloud-provider-vsphere.sigs.k8s.io)를 방문한다.
-
-## IBM 클라우드 쿠버네티스 서비스
-
-### 컴퓨트 노드
-IBM 클라우드 쿠버네티스 서비스 제공자를 사용하면, 단일 영역 또는 하나의 리전에서 여러 영역에 걸쳐 가상 노드와 물리(베어 메탈) 노드가 혼합된 클러스터를 생성할 수 있다. 자세한 정보는, [클러스터와 워커(worker) 노드 설정 계획](https://cloud.ibm.com/docs/containers?topic=containers-planning_worker_nodes)을 참고한다.
-
-쿠버네티스 노드 오브젝트의 이름은 IBM 클라우드 쿠버네티스 서비스 워커 노드 인스턴스의 프라이빗 IP 주소이다.
-
-### 네트워킹
-IBM 클라우드 쿠버네티스 서비스 제공자는 노드의 네트워크 성능 품질과 네트워크 격리를 위한 VLAN을 제공한다. 사용자 정의 방화벽 및 Calico 네트워크 폴리시를 설정하여 클러스터에 추가적인 보안 계층을 추가하거나 VPN을 통해 온-프레미스 데이터센터에 클러스터를 연결할 수 있다. 자세한 내용은 [클러스터 네트워킹 구성](https://cloud.ibm.com/docs/containers?topic=containers-plan_clusters)을 참고한다.
-
-퍼블릭 또는 클러스터 내에서 앱을 노출하기 위해 노드포트(NodePort), 로드밸런서 또는 인그레스 서비스를 활용할 수 있다. 어노테이션을 사용하여 인그레스 애플리케이션 로드 밸런서를 커스터마이징 할 수도 있다. 자세한 내용은 [앱을 노출할 서비스 선택하기](https://cloud.ibm.com/docs/containers?topic=containers-cs_network_planning#cs_network_planning)을 참고한다.
-
-### 스토리지
-IBM 클라우드 쿠버네티스 서비스 제공자는 쿠버네티스-네이티브 퍼시스턴트 볼륨을 활용하여 사용자가 파일, 블록 및 클라우드 오브젝트 스토리지를 앱에 마운트할 수 있도록 한다. 데이터를 지속적으로 저장하기 위해 서비스로서의-데이터베이스(database-as-a-service)와 써드파티 애드온을 사용할 수도 있다. 자세한 정보는 [고가용성 퍼시스턴트 스토리지 계획](https://cloud.ibm.com/docs/containers?topic=containers-storage_planning#storage_planning)을 참고한다.
-
-## Baidu 클라우드 컨테이너 엔진
-
-### 노드 이름
-
-Baidu 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 프라이빗 IP 주소를 사용한다.
-참고로 쿠버네티스 노드 이름은 Baidu VM 프라이빗 IP와 일치해야 한다.
-
-## Tencent 쿠버네티스 엔진
-
-이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [TencentCloud/tencentcloud-cloud-controller-manager](https://github.com/TencentCloud/tencentcloud-cloud-controller-manager)이다.
-
-### 노드 이름
-
-Tencent 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름을 사용한다.
-참고로 쿠버네티스 노드 이름은 Tencent VM 프라이빗 IP와 일치해야 한다.
-
-## Alibaba 클라우드 쿠버네티스
-
- 이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes/cloud-provider-alibaba-cloud](https://github.com/kubernetes/cloud-provider-alibaba-cloud)이다.
-
-### 노드 이름
-
-Alibaba 클라우드는 노드 이름의 형식을 요구하지는 않지만, kubelet은 `--provider-id=${REGION_ID}.${INSTANCE_ID}` 를 추가해야만 한다. 파라미터 `${REGION_ID}` 는 쿠버네티스의 지역 ID에 해당하고, `${INSTANCE_ID}` 는 Alibaba ECS (Elastic Compute Service) ID를 의미한다.
-
-### 로드 밸런서
-
-[어노테이션](https://www.alibabacloud.com/help/en/doc-detail/86531.htm)을 구성해서 Alibaba 클라우드의 특정 기능을 사용하도록 외부 로드 밸런서를 설정할 수 있다.
diff --git a/content/ko/docs/concepts/cluster-administration/logging.md b/content/ko/docs/concepts/cluster-administration/logging.md
index 4896a8e7b8..4a0b700e02 100644
--- a/content/ko/docs/concepts/cluster-administration/logging.md
+++ b/content/ko/docs/concepts/cluster-administration/logging.md
@@ -6,7 +6,7 @@ weight: 60
 
 <!-- overview -->
 
-애플리케이션과 시스템 로그는 클러스터 내부에서 발생하는 상황을 이해하는 데 도움이 된다. 로그는 문제를 디버깅하고 클러스터 활동을 모니터링하는 데 특히 유용하다. 대부분의 최신 애플리케이션에는 일종의 로깅 메커니즘이 있다. 따라서, 대부분의 컨테이너 엔진은 일종의 로깅을 지원하도록 설계되었다. 컨테이너화된 애플리케이션에 가장 쉽고 가장 널리 사용되는 로깅 방법은 표준 출력과 표준 에러 스트림에 작성하는 것이다.
+애플리케이션 로그는 애플리케이션 내부에서 발생하는 상황을 이해하는 데 도움이 된다. 로그는 문제를 디버깅하고 클러스터 활동을 모니터링하는 데 특히 유용하다. 대부분의 최신 애플리케이션에는 일종의 로깅 메커니즘이 있다. 따라서, 대부분의 컨테이너 엔진은 일종의 로깅을 지원하도록 설계되었다. 컨테이너화된 애플리케이션에 가장 쉽고 가장 널리 사용되는 로깅 방법은 표준 출력과 표준 에러 스트림에 작성하는 것이다.
 
 그러나, 일반적으로 컨테이너 엔진이나 런타임에서 제공하는 기본 기능은 완전한 로깅 솔루션으로 충분하지 않다. 예를 들어, 컨테이너가 크래시되거나, 파드가 축출되거나, 노드가 종료된 경우에도 여전히 애플리케이션의 로그에 접근하려고 한다. 따라서, 로그는 노드, 파드 또는 컨테이너와는 독립적으로 별도의 스토리지와 라이프사이클을 가져야 한다. 이 개념을 _클러스터-레벨-로깅_ 이라고 한다. 클러스터-레벨 로깅은 로그를 저장하고, 분석하고, 쿼리하기 위해 별도의 백엔드가 필요하다. 쿠버네티스는 로그 데이터를 위한 네이티브 스토리지 솔루션을 제공하지 않지만, 기존의 많은 로깅 솔루션을 쿠버네티스 클러스터에 통합할 수 있다.
 
@@ -91,6 +91,7 @@ GCP의 COS 이미지 로깅을 설정하는 방법에 대한 자세한 정보를
 그 후 `kubectl logs` 는 빈 응답을 반환한다.
 {{< /note >}}
 
+[cosConfigureHelper]: https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/cluster/gce/gci/configure-helper.sh
 ### 시스템 컴포넌트 로그
 
 시스템 컴포넌트에는 컨테이너에서 실행되는 것과 컨테이너에서 실행되지 않는 두 가지 유형이 있다.
@@ -257,5 +258,3 @@ fluentd를 구성하는 것에 대한 자세한 내용은,
 모든 애플리케이션에서 직접 로그를 노출하거나 푸시하여 클러스터-레벨 로깅을
 구현할 수 있다. 그러나, 이러한 로깅 메커니즘의 구현은
 쿠버네티스의 범위를 벗어난다.
-
-
diff --git a/content/ko/docs/concepts/cluster-administration/monitoring.md b/content/ko/docs/concepts/cluster-administration/system-metrics.md
similarity index 100%
rename from content/ko/docs/concepts/cluster-administration/monitoring.md
rename to content/ko/docs/concepts/cluster-administration/system-metrics.md
diff --git a/content/ko/docs/concepts/configuration/configmap.md b/content/ko/docs/concepts/configuration/configmap.md
index 8e025addd3..458e56358b 100644
--- a/content/ko/docs/concepts/configuration/configmap.md
+++ b/content/ko/docs/concepts/configuration/configmap.md
@@ -214,9 +214,9 @@ kubelet은 모든 주기적인 동기화에서 마운트된 컨피그맵이 최
 전파 지연은 선택한 캐시 유형에 따라 달라질 수 있다(전파
 지연을 지켜보거나, 캐시의 ttl 또는 0에 상응함).
 
-{{< feature-state for_k8s_version="v1.18" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-쿠버네티스 알파 기능인 _변경할 수 없는(immutable) 시크릿과 컨피그맵_ 은 개별 시크릿과
+쿠버네티스 베타 기능인 _변경할 수 없는(immutable) 시크릿과 컨피그맵_ 은 개별 시크릿과
 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 컨피그맵을 광범위하게
 사용하는 클러스터(최소 수만 개의 고유한 컨피그맵이 파드에 마운트)의 경우
 데이터 변경을 방지하면 다음과 같은 이점이 있다.
diff --git a/content/ko/docs/concepts/configuration/manage-resources-containers.md b/content/ko/docs/concepts/configuration/manage-resources-containers.md
index 99e5c27298..41e6422e75 100644
--- a/content/ko/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/ko/docs/concepts/configuration/manage-resources-containers.md
@@ -112,7 +112,7 @@ CPU는 항상 절대 수량으로 요청되며, 상대적 수량은 아니다.
 
 `memory` 에 대한 제한 및 요청은 바이트 단위로 측정된다.
 E, P, T, G, M, K와 같은 접미사 중 하나를 사용하여 메모리를
-일반 정수 또는 고정 소수점 정수로 표현할 수 있다. Ei, Pi, Ti, Gi, Mi, Ki와
+일반 정수 또는 고정 소수점 숫자로 표현할 수 있다. Ei, Pi, Ti, Gi, Mi, Ki와
 같은 2의 거듭제곱을 사용할 수도 있다. 예를 들어, 다음은 대략 동일한 값을 나타낸다.
 
 ```shell
@@ -311,7 +311,7 @@ _임시-스토리지_ 를 사용하여 로컬 임시 저장소를 관리할 수
 * `spec.containers[].resources.requests.ephemeral-storage`
 
 `ephemeral-storage` 에 대한 제한 및 요청은 바이트 단위로 측정된다. E, P, T, G, M, K와
-같은 접미사 중 하나를 사용하여 스토리지를 일반 정수 또는 고정 소수점 정수로 표현할 수 있다.
+같은 접미사 중 하나를 사용하여 스토리지를 일반 정수 또는 고정 소수점 숫자로 표현할 수 있다.
 Ei, Pi, Ti, Gi, Mi, Ki와 같은 2의 거듭제곱을 사용할 수도 있다.
 예를 들어, 다음은 대략 동일한 값을 나타낸다.
 
diff --git a/content/ko/docs/concepts/configuration/pod-priority-preemption.md b/content/ko/docs/concepts/configuration/pod-priority-preemption.md
index da165814da..ec97dec798 100644
--- a/content/ko/docs/concepts/configuration/pod-priority-preemption.md
+++ b/content/ko/docs/concepts/configuration/pod-priority-preemption.md
@@ -48,40 +48,6 @@ weight: 70
 이들은 일반적인 클래스이며 [중요한(critical) 컴포넌트가 항상 먼저 스케줄링이 되도록 하는 데](/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/) 사용된다.
 {{< /note >}}
 
-## 선점을 비활성화하는 방법
-
-{{< caution >}}
-중요 파드는 클러스터에 리소스 압박(resource pressure)이 가해지면
-스케줄러 선점에 따라 스케줄링된다. 이런 이유로, 선점을 비활성화하지
-않는 것을 권장한다.
-{{< /caution >}}
-
-{{< note >}}
-쿠버네티스 1.15 이상에서, `NonPreemptingPriority` 기능이 활성화된 경우,
-프라이어리티클래스는 옵션을 `preemptionPolicy: Never` 로 설정할 수 있다.
-이렇게 하면 해당 프라이어리티클래스의 파드가 다른 파드를 축출할 수 없다.
-{{< /note >}}
-
-선점은 기본값이 `false`로 설정된 `disablePreemption` kube-scheduler
-플래그에 의해 제어된다.
-위의 주의에도 불구하고 선점을 비활성화하려는 경우,
-`disablePreemption` 을 `true` 로 설정할 수 있다.
-
-이 옵션은 컴포넌트 구성에서만 사용할 수 있으며
-이전 스타일의 커맨드 라인 옵션에서는 사용할 수 없다. 다음은 선점을 비활성화하는 샘플 컴포넌트
-구성이다.
-
-```yaml
-apiVersion: kubescheduler.config.k8s.io/v1alpha1
-kind: KubeSchedulerConfiguration
-algorithmSource:
-  provider: DefaultProvider
-
-...
-
-disablePreemption: true
-```
-
 ## 프라이어리티클래스
 
 프라이어리티클래스는 프라이어리티 클래스 이름에서 우선순위의 정수 값으로의 매핑을
@@ -135,7 +101,7 @@ description: "이 프라이어리티 클래스는 XYZ 서비스 파드에만 사
 
 ## 비-선점 프라이어리티클래스 {#non-preempting-priority-class}
 
-{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
 `PreemptionPolicy: Never` 를 가진 파드는 낮은 우선순위 파드의 스케줄링 대기열의
 앞쪽에 배치되지만,
@@ -159,10 +125,6 @@ description: "이 프라이어리티 클래스는 XYZ 서비스 파드에만 사
 `PreemptionPolicy` 가 `Never` 로 설정된 경우,
 해당 프라이어리티클래스의 파드는 비-선점될 것이다.
 
-`PreemptionPolicy` 필드를 사용하려면 `NonPreemptingPriority`
-[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가
-활성화되어야 한다.
-
 예제 유스케이스는 데이터 과학 관련 워크로드이다.
 사용자는 다른 워크로드보다 우선순위가 높은 잡(job)을 제출할 수 있지만,
 실행 중인 파드를 축출하여 기존의 작업을 삭제하지는 않을 것이다.
diff --git a/content/ko/docs/concepts/configuration/resource-bin-packing.md b/content/ko/docs/concepts/configuration/resource-bin-packing.md
index 998456ca49..b6efd38404 100644
--- a/content/ko/docs/concepts/configuration/resource-bin-packing.md
+++ b/content/ko/docs/concepts/configuration/resource-bin-packing.md
@@ -168,7 +168,7 @@ Node Score:
 
 intel.com/foo  = resourceScoringFunction((2+2),8)
                =  (100 - ((8-4)*100/8)
-               =  (100 - 25)
+               =  (100 - 50)
                =  50
                =  rawScoringFunction(50)
                = 5
diff --git a/content/ko/docs/concepts/configuration/secret.md b/content/ko/docs/concepts/configuration/secret.md
index 5b95d9a484..e75dd37da8 100644
--- a/content/ko/docs/concepts/configuration/secret.md
+++ b/content/ko/docs/concepts/configuration/secret.md
@@ -350,6 +350,8 @@ NAME                             TYPE                                  DATA
 db-user-pass-96mffmfh4k          Opaque                                2         51s
 ```
 
+시크릿에 대한 설명을 볼 수 있다.
+
 ```shell
 kubectl describe secrets/db-user-pass-96mffmfh4k
 ```
@@ -713,9 +715,9 @@ kubelet은 마운트된 시크릿이 모든 주기적인 동기화에서 최신
 받지 않는다.
 {{< /note >}}
 
-{{< feature-state for_k8s_version="v1.18" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-쿠버네티스 알파 기능인 _변경할 수 없는(immutable) 시크릿과 컨피그맵_ 은
+쿠버네티스 베타 기능인 _변경할 수 없는(immutable) 시크릿과 컨피그맵_ 은
 개별 시크릿과 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 시크릿을 광범위하게 사용하는
 클러스터(최소 수만 개의 고유한 시크릿이 파드에 마운트)의 경우, 데이터 변경을 방지하면
 다음과 같은 이점이 있다.
@@ -1000,6 +1002,8 @@ kubectl create secret generic prod-db-secret --from-literal=username=produser --
 secret "prod-db-secret" created
 ```
 
+테스트 환경의 자격 증명에 대한 시크릿을 만들 수도 있다.
+
 ```shell
 kubectl create secret generic test-db-secret --from-literal=username=testuser --from-literal=password=iluvtests
 ```
diff --git a/content/ko/docs/concepts/containers/images.md b/content/ko/docs/concepts/containers/images.md
index f17841027b..497f4cbfda 100644
--- a/content/ko/docs/concepts/containers/images.md
+++ b/content/ko/docs/concepts/containers/images.md
@@ -94,7 +94,7 @@ weight: 10
 이 방법은 노드 구성을 제어할 수 있는 경우에 적합하다.
 
 {{< note >}}
-쿠버네티스는 도커 구성에서 `auths` 와 `HttpHeaders` 섹션만 지원한다.
+기본 쿠버네티스는 도커 구성에서 `auths` 와 `HttpHeaders` 섹션만 지원한다.
 도커 자격 증명 도우미(`credHelpers` 또는 `credsStore`)는 지원되지 않는다.
 {{< /note >}}
 
@@ -262,7 +262,7 @@ EOF
 
 이것은 프라이빗 레지스트리를 사용하는 각 파드에 대해서 수행될 필요가 있다.
 
-그러나, 이 필드의 셋팅은 [서비스 어카운트](/docs/tasks/configure-pod-container/configure-service-accounts/)) 리소스에
+그러나, 이 필드의 셋팅은 [서비스 어카운트](/docs/tasks/configure-pod-container/configure-service-account/) 리소스에
 imagePullSecrets을 셋팅하여 자동화할 수 있다.
 
 자세한 지침을 위해서는 [서비스 어카운트에 ImagePullSecrets 추가](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account)를 확인한다.
diff --git a/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md b/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
index 2c57af0b5d..1966d2db5d 100644
--- a/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
+++ b/content/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins.md
@@ -45,7 +45,7 @@ service Registration {
 해당 자원을 API 서버에 알리는 역할을 한다.
 예를 들어, 장치 플러그인이 kubelet에 `hardware-vendor.example/foo` 를 등록하고
 노드에 두 개의 정상 장치를 보고하고 나면, 노드 상태가 업데이트되어
-노드에 2개의 “Foo” 장치가 설치되어 사용 가능함을 알릴 수 있다.
+노드에 2개의 "Foo" 장치가 설치되어 사용 가능함을 알릴 수 있다.
 
 그러고 나면, 사용자가
 [컨테이너](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#container-v1-core) 명세에 있는 장치를 요청할 수 있다.
@@ -91,6 +91,9 @@ spec:
 
   ```gRPC
   service DevicePlugin {
+		    // GetDevicePluginOptions는 장치 관리자와 통신할 옵션을 반환한다.
+        rpc GetDevicePluginOptions(Empty) returns (DevicePluginOptions) {}
+
     		// ListAndWatch는 장치 목록 스트림을 반환한다.
 		    // 장치 상태가 변경되거나 장치가 사라질 때마다, ListAndWatch는
 		    // 새 목록을 반환한다.
@@ -100,10 +103,31 @@ spec:
 				// 플러그인이 장치별 작업을 실행하고 Kubelet에 장치를
 				// 컨테이너에서 사용할 수 있도록 하는 단계를 지시할 수 있다.
         rpc Allocate(AllocateRequest) returns (AllocateResponse) {}
+
+        // GetPreferredAllocation은 사용 가능한 장치 목록에서 할당할
+				// 기본 장치 집합을 반환한다. 그 결과로 반환된 선호하는 할당은
+				// devicemanager가 궁극적으로 수행하는 할당이 되는 것을 보장하지
+				// 않는다. 가능한 경우 devicemanager가 정보에 입각한 할당 결정을
+				// 내릴 수 있도록 설계되었다.
+        rpc GetPreferredAllocation(PreferredAllocationRequest) returns (PreferredAllocationResponse) {}
+
+        // PreStartContainer는 등록 단계에서 장치 플러그인에 의해 표시되면 각 컨테이너가
+				// 시작되기 전에 호출된다. 장치 플러그인은 장치를 컨테이너에서 사용할 수 있도록 하기 전에
+				// 장치 재설정과 같은 장치별 작업을 실행할 수 있다.
+        rpc PreStartContainer(PreStartContainerRequest) returns (PreStartContainerResponse) {}
   }
   ```
 
-*	플러그인은 호스트 경로 `/var/lib/kubelet/device-plugins/kubelet.sock` 에서
+  {{< note >}}
+  `GetPreferredAllocation()` 또는 `PreStartContainer()` 에 대한 유용한 구현을
+  제공하기 위해 플러그인이 필요하지 않다. 이러한 호출(있는 경우) 중
+  사용할 수 있는 경우를 나타내는 플래그는 `GetDevicePluginOptions()`
+  호출에 의해 다시 전송된 `DevicePluginOptions` 메시지에 설정되어야 한다. `kubelet` 은
+  항상 `GetDevicePluginOptions()` 를 호출하여 사용할 수 있는
+  선택적 함수를 확인한 후 직접 호출한다.
+  {{< /note >}}
+
+* 플러그인은 호스트 경로 `/var/lib/kubelet/device-plugins/kubelet.sock` 에서
   유닉스 소켓을 통해 kubelet에 직접 등록한다.
 
 * 성공적으로 등록하고 나면, 장치 플러그인은 서빙(serving) 모드에서 실행되며, 그 동안 플러그인은 장치 상태를
@@ -183,7 +207,7 @@ gRPC 서비스는 `/var/lib/kubelet/pod-resources/kubelet.sock` 의 유닉스 
 
 ## 토폴로지 관리자와 장치 플러그인 통합
 
-{{< feature-state for_k8s_version="v1.17" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.18" state="beta" >}}
 
 토폴로지 관리자는 Kubelet 컴포넌트로, 리소스를 토폴로지 정렬 방식으로 조정할 수 있다. 이를 위해, 장치 플러그인 API가 `TopologyInfo` 구조체를 포함하도록 확장되었다.
 
@@ -230,3 +254,5 @@ pluginapi.Device{ID: "25102017", Health: pluginapi.Healthy, Topology:&pluginapi.
 * 노드에서의 [확장 리소스 알리기](/ko/docs/tasks/administer-cluster/extended-resource-node/)에 대해 배우기
 * 쿠버네티스에서 [TLS 수신에 하드웨어 가속](https://kubernetes.io/blog/2019/04/24/hardware-accelerated-ssl/tls-termination-in-ingress-controllers-using-kubernetes-device-plugins-and-runtimeclass/) 사용에 대해 읽기
 * [토폴로지 관리자](/docs/tasks/adminster-cluster/topology-manager/)에 대해 알아보기
+
+
diff --git a/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md b/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md
index 8a98d9bd28..e4e2b9b96d 100644
--- a/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md
+++ b/content/ko/docs/concepts/extend-kubernetes/extend-cluster.md
@@ -93,7 +93,7 @@ kubectl에서
 1. 사용자는 종종 `kubectl`을 사용하여 쿠버네티스 API와 상호 작용한다. [Kubectl 플러그인](/ko/docs/tasks/extend-kubectl/kubectl-plugins/)은 kubectl 바이너리를 확장한다. 개별 사용자의 로컬 환경에만 영향을 미치므로 사이트 전체 정책을 적용할 수는 없다.
 2. apiserver는 모든 요청을 처리한다. apiserver의 여러 유형의 익스텐션 포인트는 요청을 인증하거나, 콘텐츠를 기반으로 요청을 차단하거나, 콘텐츠를 편집하고, 삭제 처리를 허용한다. 이 내용은 [API 접근 익스텐션](/ko/docs/concepts/extend-kubernetes/extend-cluster/#api-접근-익스텐션) 섹션에 설명되어 있다.
 3. apiserver는 다양한 종류의 *리소스* 를 제공한다. `pods`와 같은 *빌트인 리소스 종류* 는 쿠버네티스 프로젝트에 의해 정의되며 변경할 수 없다. 직접 정의한 리소스를 추가할 수도 있고, [커스텀 리소스](/ko/docs/concepts/extend-kubernetes/extend-cluster/#사용자-정의-유형) 섹션에 설명된대로 *커스텀 리소스* 라고 부르는 다른 프로젝트에서 정의한 리소스를 추가할 수도 있다. 커스텀 리소스는 종종 API 접근 익스텐션과 함께 사용된다.
-4. 쿠버네티스 스케줄러는 파드를 배치할 노드를 결정한다. 스케줄링을 확장하는 몇 가지 방법이 있다. 이들은 [스케줄러 익스텐션](/ko/docs/concepts/extend-kubernetes/extend-cluster/#스케줄러-익스텐션) 섹션에 설명되어 있다.
+4. 쿠버네티스 스케줄러는 파드를 배치할 노드를 결정한다. 스케줄링을 확장하는 몇 가지 방법이 있다. 이들은 [스케줄러 익스텐션](/ko/docs/concepts/extend-kubernetes/#스케줄러-익스텐션) 섹션에 설명되어 있다.
 5. 쿠버네티스의 많은 동작은 API-Server의 클라이언트인 컨트롤러(Controller)라는 프로그램으로 구현된다. 컨트롤러는 종종 커스텀 리소스와 함께 사용된다.
 6. kubelet은 서버에서 실행되며 파드가 클러스터 네트워크에서 자체 IP를 가진 가상 서버처럼 보이도록 한다. [네트워크 플러그인](/ko/docs/concepts/extend-kubernetes/extend-cluster/#네트워크-플러그인)을 사용하면 다양한 파드 네트워킹 구현이 가능하다.
 7. kubelet은 컨테이너의 볼륨을 마운트 및 마운트 해제한다. 새로운 유형의 스토리지는 [스토리지 플러그인](/ko/docs/concepts/extend-kubernetes/extend-cluster/#스토리지-플러그인)을 통해 지원될 수 있다.
diff --git a/content/ko/docs/concepts/extend-kubernetes/operator.md b/content/ko/docs/concepts/extend-kubernetes/operator.md
index bcd9bb9945..9e55dfae04 100644
--- a/content/ko/docs/concepts/extend-kubernetes/operator.md
+++ b/content/ko/docs/concepts/extend-kubernetes/operator.md
@@ -9,7 +9,7 @@ weight: 30
 오퍼레이터(Operator)는
 [사용자 정의 리소스](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)를
 사용하여 애플리케이션 및 해당 컴포넌트를 관리하는 쿠버네티스의 소프트웨어 익스텐션이다. 오퍼레이터는
-쿠버네티스 원칙, 특히 [컨트롤 루프](/ko/docs/concepts/#쿠버네티스-컨트롤-플레인)를 따른다.
+쿠버네티스 원칙, 특히 [컨트롤 루프](/ko/docs/concepts/architecture/controller/)를 따른다.
 
 <!-- body -->
 
@@ -126,6 +126,3 @@ kubectl edit SampleDB/example-database # 일부 설정을 수동으로 변경하
 * 다른 사람들이 사용할 수 있도록 자신의 오퍼레이터를 [게시](https://operatorhub.io/)하기
 * 오퍼레이터 패턴을 소개한 [CoreOS 원본 기사](https://coreos.com/blog/introducing-operators.html) 읽기
 * 오퍼레이터 구축을 위한 모범 사례에 대한 구글 클라우드(Google Cloud)의 [기사](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps) 읽기
-
-
-
diff --git a/content/ko/docs/concepts/overview/components.md b/content/ko/docs/concepts/overview/components.md
index ace13900c6..d4b77e9319 100644
--- a/content/ko/docs/concepts/overview/components.md
+++ b/content/ko/docs/concepts/overview/components.md
@@ -5,7 +5,7 @@ description: >
   쿠버네티스 클러스터는 컴퓨터 집합인 노드 컴포넌트와 컨트롤 플레인
   컴포넌트로 구성된다.
 weight: 20
-card: 
+card:
   name: concepts
   weight: 20
 ---
@@ -19,7 +19,7 @@ card:
 
 여기에 모든 컴포넌트가 함께 있는 쿠버네티스 클러스터 다이어그램이 있다.
 
-![쿠버네티스의 컴포넌트](/images/docs/components-of-kubernetes.png)
+![쿠버네티스의 컴포넌트](/images/docs/components-of-kubernetes.svg)
 
 
 
diff --git a/content/ko/docs/concepts/policy/pod-security-policy.md b/content/ko/docs/concepts/policy/pod-security-policy.md
index a81038e444..a3d9b641e9 100644
--- a/content/ko/docs/concepts/policy/pod-security-policy.md
+++ b/content/ko/docs/concepts/policy/pod-security-policy.md
@@ -593,8 +593,11 @@ spec:
 
 ### Seccomp
 
-파드에서 seccomp 프로파일의 사용은 파드시큐리티폴리시의 어노테이션을 통해
-제어할 수 있다. Seccomp는 쿠버네티스의 알파 기능이다.
+쿠버네티스 v1.19부터 파드나 컨테이너의 `securityContext` 에서
+`seccompProfile` 필드를 사용하여 [seccomp 프로파일 사용을
+제어](/docs/tutorials/clusters/seccomp)할 수 있다. 이전 버전에서는, 파드에
+어노테이션을 추가하여 seccomp를 제어했다. 두 버전에서 동일한 파드시큐리티폴리시를 사용하여
+이러한 필드나 어노테이션이 적용되는 방식을 적용할 수 있다.
 
 **seccomp.security.alpha.kubernetes.io/defaultProfileName** - 컨테이너에
 적용할 기본 seccomp 프로파일을 지정하는 어노테이션이다. 가능한 값은
@@ -607,7 +610,14 @@ spec:
   되었다. 대신 `runtime/default` 사용을 권장한다.
 - `localhost/<path>` - `<seccomp_root>/<path>`에 있는 노드에서 파일을 프로파일로
   지정한다. 여기서 `<seccomp_root>`는 Kubelet의 `--seccomp-profile-root` 플래그를
-  통해 정의된다.
+  통해 정의된다. `--seccomp-profile-root` 플래그가
+  정의되어 있지 않으면, `<root-dir>` 이 `--root-dir` 플래그로
+  지정된 `<root-dir>/seccomp` 기본 경로가 사용된다.
+
+{{< note >}}
+  `--seccomp-profile-root` 플래그는 쿠버네티스 v1.19부터 더 이상 사용되지
+  않는다. 사용자는 기본 경로를 사용하는 것이 좋다.
+{{< /note >}}
 
 **seccomp.security.alpha.kubernetes.io/allowedProfileNames** - 파드 seccomp
 어노테이션에 허용되는 값을 지정하는 어노테이션. 쉼표로 구분된
diff --git a/content/ko/docs/concepts/policy/resource-quotas.md b/content/ko/docs/concepts/policy/resource-quotas.md
index 13107a0613..526cf03e53 100644
--- a/content/ko/docs/concepts/policy/resource-quotas.md
+++ b/content/ko/docs/concepts/policy/resource-quotas.md
@@ -495,8 +495,7 @@ kubectl create quota test --hard=count/deployments.extensions=2,count/replicaset
 ```
 
 ```shell
-kubectl create deployment nginx --image=nginx --namespace=myspace
-kubectl scale deployment nginx --replicas=2 --namespace=myspace
+kubectl create deployment nginx --image=nginx --namespace=myspace --replicas=2
 ```
 
 ```shell
diff --git a/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
index a306a26a23..b812305cbd 100644
--- a/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -77,7 +77,7 @@ _스코어링_ 단계에서 스케줄러는 목록에 남아있는 노드의 순
 스케줄러의 필터링 및 스코어링 동작을 구성하는 데 지원되는 두 가지
 방법이 있다.
 
-1. [스케줄링 정책](/docs/reference/scheduling/policies)을 사용하면
+1. [스케줄링 정책](/docs/reference/scheduling/config/#profiles)을 사용하면
    필터링을 위한 _단정(Predicates)_ 및 스코어링을 위한 _우선순위(Priorities)_ 를 구성할 수 있다.
 1. [스케줄링 프로파일](/docs/reference/scheduling/profiles)을 사용하면
    `QueueSort`, `Filter`, `Score`, `Bind`, `Reserve`, `Permit` 등의
@@ -93,3 +93,7 @@ _스코어링_ 단계에서 스케줄러는 목록에 남아있는 노드의 순
 * [멀티 스케줄러 구성하기](/docs/tasks/extend-kubernetes/configure-multiple-schedulers/)에 대해 배우기
 * [토폴로지 관리 정책](/docs/tasks/administer-cluster/topology-manager/)에 대해 배우기
 * [파드 오버헤드](/ko/docs/concepts/configuration/pod-overhead/)에 대해 배우기
+* 볼륨을 사용하느 파드의 스케줄링에 대해 배우기
+  * [볼륨 토폴리지 지원](/ko/docs/concepts/storage/storage-classes/#볼륨-바인딩-모드)
+  * [스토리지 용량 추적](/docs/concepts/storage/storage-capacity/)
+  * [노드별 볼륨 한도](/ko/docs/concepts/storage/storage-limits/)
diff --git a/content/ko/docs/concepts/services-networking/dns-pod-service.md b/content/ko/docs/concepts/services-networking/dns-pod-service.md
index 927201d90c..a7e3336fa2 100644
--- a/content/ko/docs/concepts/services-networking/dns-pod-service.md
+++ b/content/ko/docs/concepts/services-networking/dns-pod-service.md
@@ -163,6 +163,24 @@ A 또는 AAAA 레코드만 생성할 수 있다. (`default-subdomain.my-namespac
 또한 서비스에서 `publishNotReadyAddresses=True` 를 설정하지 않았다면, 파드가 준비 상태가 되어야 레코드를 가질 수 있다.
 {{< /note >}}
 
+### 파드의 setHostnameAsFQDN 필드 {# pod-sethostnameasfqdn-field}
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+**전제 조건**: `SetHostnameAsFQDN` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를
+{{< glossary_tooltip text="API 서버" term_id="kube-apiserver" >}}에
+대해 활성화해야 한다.
+
+파드가 전체 주소 도메인 이름(FQDN)을 갖도록 구성된 경우, 해당 호스트네임은 짧은 호스트네임이다. 예를 들어, 전체 주소 도메인 이름이 `busybox-1.default-subdomain.my-namespace.svc.cluster-domain.example` 인 파드가 있는 경우, 기본적으로 해당 파드 내부의 `hostname` 명령어는 `busybox-1` 을 반환하고 `hostname --fqdn` 명령은 FQDN을 반환한다.
+
+파드 명세에서 `setHostnameAsFQDN: true` 를 설정하면, kubelet은 파드의 FQDN을 해당 파드 네임스페이스의 호스트네임에 기록한다. 이 경우, `hostname` 과 `hostname --fqdn` 은 모두 파드의 FQDN을 반환한다.
+
+{{< note >}}
+리눅스에서, 커널의 호스트네임 필드(`struct utsname` 의 `nodename` 필드)는 64자로 제한된다.
+
+파드에서 이 기능을 사용하도록 설정하고 FQDN이 64자보다 길면, 시작되지 않는다. 파드는 파드 호스트네임과 클러스터 도메인에서 FQDN을 구성하지 못한다거나, FQDN `long-FDQN` 이 너무 길다(최대 64자, 70자 요청인 경우)와 같은 오류 이벤트를 생성하는 `Pending` 상태(`kubectl` 에서 표시하는 `ContainerCreating`)로 유지된다. 이 시나리오에서 사용자 경험을 개선하는 한 가지 방법은 사용자가 최상위 레벨을 오브젝트(예를 들어, 디플로이먼트)를 생성할 때 FQDN 크기를 제어하기 위해 [어드미션 웹훅 컨트롤러](/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks)를 생성하는 것이다.
+{{< /note >}}
+
 ### 파드의 DNS 정책
 
 DNS 정책은 파드별로 설정할 수 있다.
@@ -188,7 +206,7 @@ DNS 정책은 파드별로 설정할 수 있다.
 
 {{< note >}}
 "Default"는 기본 DNS 정책이 아니다. `dnsPolicy`가 명시적으로 지정되어있지 않다면
-“ClusterFirst”가 기본값으로 사용된다.
+"ClusterFirst"가 기본값으로 사용된다.
 {{< /note >}}
 
 
diff --git a/content/ko/docs/concepts/services-networking/endpoint-slices.md b/content/ko/docs/concepts/services-networking/endpoint-slices.md
index d5f7a2abf3..900f771cee 100644
--- a/content/ko/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/ko/docs/concepts/services-networking/endpoint-slices.md
@@ -1,7 +1,7 @@
 ---
 title: 엔드포인트슬라이스
 content_type: concept
-weight: 15
+weight: 35
 ---
 
 
@@ -21,7 +21,9 @@ _엔드포인트슬라이스_ 는 쿠버네티스 클러스터 내의 네트워
 
 엔드포인트 API는 쿠버네티스에서 네트워크 엔드포인트를 추적하는
 간단하고 직접적인 방법을 제공한다. 불행하게도 쿠버네티스 클러스터와
-서비스가 점점 더 커짐에 따라, 이 API의 한계가 더욱 눈에 띄게 되었다.
+{{< glossary_tooltip text="서비스" term_id="service" >}}가 점점 더
+커짐에 따라, 이 API의 한계가 더욱 눈에 띄게
+되었다.
 특히나, 많은 수의 네트워크 엔드포인트로 확장하는 것에
 어려움이 있었다.
 
@@ -34,16 +36,17 @@ _엔드포인트슬라이스_ 는 쿠버네티스 클러스터 내의 네트워
 
 ## 엔드포인트슬라이스 리소스 {#endpointslice-resource}
 
-쿠버네티스에서 EndpointSlice는 일련의 네트워크 엔드 포인트에 대한
+쿠버네티스에서 엔드포인트슬라이스는 일련의 네트워크 엔드포인트에 대한
 참조를 포함한다. 쿠버네티스 서비스에 {{< glossary_tooltip text="셀렉터"
-term_id="selector" >}} 가 지정되면 EndpointSlice
-컨트롤러는 자동으로 엔드포인트슬라이스를 생성한다. 이 엔드포인트슬라이스는
+term_id="selector" >}}가 지정되면 컨트롤 플레인은 자동으로
+엔드포인트슬라이스를 생성한다. 이 엔드포인트슬라이스는
 서비스 셀렉터와 매치되는 모든 파드들을 포함하고 참조한다. 엔드포인트슬라이스는
-고유한 서비스와 포트 조합을 통해 네트워크 엔드포인트를 그룹화 한다.
-EndpointSlice 오브젝트의 이름은 유효한
+프로토콜, 포트 번호 및 서비스 이름의 고유한 조합을 통해 네트워크 엔드포인트를
+그룹화한다.
+엔드포인트슬라이스 오브젝트의 이름은 유효한
 [DNS 서브도메인 이름](/ko/docs/concepts/overview/working-with-objects/names/#dns-서브도메인-이름)이어야 한다.
 
-예를 들어, 여기에 `example` 쿠버네티스 서비스를 위한 EndpointSlice
+예를 들어, 여기에 `example` 쿠버네티스 서비스를 위한 엔드포인트슬라이스
 리소스 샘플이 있다.
 
 ```yaml
@@ -69,28 +72,30 @@ endpoints:
       topology.kubernetes.io/zone: us-west2-a
 ```
 
-기본적으로, EndpointSlice 컨트롤러가 관리하는 엔드포인트슬라이스에는
-각각 100개 이하의 엔드포인트를 가지고 있다. 이 스케일 아래에서 엔드포인트슬라이스는
-엔드포인트 및 서비스와 1:1로 매핑해야하며, 유사한 성능을 가져야 한다.
+기본적으로, 컨트롤 플레인은 각각 100개 이하의 엔드포인트를
+갖도록 엔드포인트슬라이스를 생성하고 관리한다. `--max-endpoints-per-slice`
+{{< glossary_tooltip text="kube-controller-manager" term_id="kube-controller-manager" >}}
+플래그를 사용하여, 최대 1000개까지 구성할 수 있다.
 
-엔드포인트슬라이스는 내부 트래픽을 라우트하는 방법에 대해 kube-proxy에
+엔드포인트슬라이스는 내부 트래픽을 라우트하는 방법에 대해
+{{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}에
 신뢰할 수 있는 소스로 역할을 할 수 있다. 이를 활성화 하면, 많은 수의 엔드포인트를 가지는
 서비스에 대해 성능 향상을 제공해야 한다.
 
 ### 주소 유형
 
-EndpointSlice는 다음 주소 유형을 지원한다.
+엔드포인트슬라이스는 다음 주소 유형을 지원한다.
 
 * IPv4
 * IPv6
-* FQDN (Fully Qualified Domain Name)
+* FQDN (전체 주소 도메인 이름)
 
-### 토폴로지
+### 토폴로지 정보 {#토폴로지}
 
 엔드포인트슬라이스 내 각 엔드포인트는 연관된 토폴로지 정보를 포함할 수 있다.
 이는 해당 노드, 영역 그리고 지역에 대한 정보가 포함된
-엔드포인트가 있는 위치를 나타나는데 사용 한다. 값을 사용할 수 있으면
-다음의 토폴로지 레이블이 엔드포인트슬라이스 컨트롤러에 의해 설정된다.
+엔드포인트가 있는 위치를 나타나는데 사용 한다. 값을 사용할 수 있으면,
+컨트롤 플레인은 엔드포인트슬라이스에 대해 다음의 토폴로지 레이블을 설정한다.
 
 * `kubernetes.io/hostname` - 이 엔드포인트가 있는 노드의 이름.
 * `topology.kubernetes.io/zone` - 이 엔드포인트가 있는 영역의 이름.
@@ -103,37 +108,48 @@ NodeName 필드 값을 나타낸다. 영역 및 지역 레이블은 해당
 
 ### 관리
 
-기본적으로 엔드포인트슬라이스는 엔드포인트슬라이스 컨트롤러에의해
-생성되고 관리된다. 서비스 메시 구현과 같은 다른 엔드포인트슬라이스
-유스 케이스는 다른 엔터티나 컨트롤러가 추가 엔드포인트슬라이스
-집합을 관리할 수 있게 할 수 있다. 여러 엔티티가 서로 간섭하지 않고
-엔드포인트슬라이스를 관리할 수 있도록 엔드포인트슬라이스를 관리하는
-엔티티를 나타내는데 `endpointslice.kubernetes.io/managed-by` 레이블이 사용된다.
-엔드포인트슬라이스 컨트롤러는 관리하는 모든 엔드포인트
-슬라이스에 레이블의 값으로 `endpointslice-controller.k8s.io` 를 설정한다.
-엔드포인트슬라이스를 관리하는 다른 엔티티도 이 레이블에
-고유한 값을 설정해야 한다.
+대부분의 경우, 컨트롤 플레인(특히, 엔드포인트 슬라이스
+{{< glossary_tooltip text="컨트롤러" term_id="controller" >}})는
+엔드포인트슬라이스 오브젝트를 생성하고 관리한다. 다른 엔티티나 컨트롤러가 추가
+엔드포인트슬라이스 집합을 관리하게 할 수 있는 서비스 메시 구현과 같이
+엔드포인트슬라이스에 대한 다양한 다른 유스케이스가 있다.
+
+여러 엔티티가 서로 간섭하지 않고 엔드포인트슬라이스를
+관리할 수 있도록 쿠버네티스는 엔드포인트슬라이스를 관리하는
+엔티티를 나타내는 `endpointslice.kubernetes.io/managed-by`
+{{< glossary_tooltip term_id="label" text="레이블" >}}을
+정의한다.
+엔드포인트 슬라이스 컨트롤러는 관리하는 모든 엔드포인트슬라이스에 레이블의 값으로
+`endpointslice-controller.k8s.io` 를 설정한다. 엔드포인트슬라이스를
+관리하는 다른 엔티티도 이 레이블에 고유한 값을 설정해야 한다.
 
 ### 소유권
 
-대부분의 유스 케이스에서 엔드포인트를 추적하는 서비스가 엔드포인트슬라이스를
-소유한다. 이는 각 엔드포인트슬라이스의 참조와 서비스에 속하는 모든
-엔드포인트슬라이스를 간단하게 조회할 수 있는 `kubernetes.io/service-name`
-레이블로 표시된다.
+대부분의 유스케이스에서, 엔드포인트 슬라이스 오브젝트가 엔드포인트를
+추적하는 서비스가 엔드포인트슬라이스를 소유한다. 이 소유권은 각 엔드포인트슬라이스의 소유자
+참조와 서비스에 속한 모든 엔드포인트슬라이스의 간단한 조회를 가능하게 하는
+`kubernetes.io/service-name` 레이블로 표시된다.
 
-## 엔드포인트슬라이스 컨트롤러
+### 엔드포인트슬라이스 미러링
 
-엔드포인트슬라이스 컨트롤러는 해당 엔드포인트슬라이스가 최신 상태인지
-확인하기 위해 서비스와 파드를 감시한다. 컨트롤러가 셀렉터로 지정한 모든
-서비스에 대해 엔드포인트슬라이스를 관리한다. 이는 서비스 셀렉터와
-일치하는 파드의 IP를 나타내게 된다.
+경우에 따라, 애플리케이션이 사용자 지정 엔드포인트 리소스를 생성한다. 이러한
+애플리케이션이 엔드포인트와 엔드포인트슬라이스 리소스에 동시에 쓸 필요가 없도록
+클러스터의 컨트롤 플레인은 대부분의 엔드포인트 리소스를
+해당 엔드포인트슬라이스에 미러링한다.
 
-### 엔드포인트슬라이스의 크기
+컨트롤 플레인은 다음을 제외하고 엔드포인트 리소스를 미러링한다.
 
-기본적으로 엔드포인트슬라이스는 각각 100개의 엔드포인트 크기로 제한된다.
-최대 1000개까지 `--max-endpoints-per-slice` {{< glossary_tooltip
-text="kube-controller-manager" term_id="kube-controller-manager" >}} 플래그를
-사용해서 구성할 수 있다.
+* 엔드포인트 리소스에는 `endpointslice.kubernetes.io/skip-mirror` 레이블이
+  `true` 로 설정되어 있다.
+* 엔드포인트 리소스에는 `control-plane.alpha.kubernetes.io/leader`
+  어노테이션이 있다.
+* 해당 서비스 리소스가 존재하지 않는다.
+* 해당 서비스 리소스에 nil이 아닌 셀렉터가 있다.
+
+개별 엔드포인트 리소스는 여러 엔드포인트슬라이스로 변환될 수 있다.
+엔드포인트 리소스에 여러 하위 집합이 있거나 여러 IP 제품군(IPv4 및 IPv6)이 있는
+엔드포인트가 포함된 경우 변환이 일어난다. 하위 집합 당 최대 1000개의 주소가
+엔드포인트슬라이스에 미러링된다.
 
 ### 엔드포인트슬라이스의 배포
 
@@ -143,8 +159,8 @@ text="kube-controller-manager" term_id="kube-controller-manager" >}} 플래그
 엔드포인트슬라이스가 필요하다. 이는 하위 집합이 엔드포인트와 그룹화하는
 방식의 논리와 유사하다.
 
-컨트롤러는 엔드포인트슬라이스를 최대한 채우려고 노력하지만,
-적극적으로 재조정하지는 않는다. 컨트롤러의 동작은 매우 직관적이다.
+컨트롤 플레인은 엔드포인트슬라이스를 최대한 채우려고 노력하지만,
+적극적으로 재조정하지는 않는다. 로직은 매우 직관적이다.
 
 1. 기존 엔드포인트슬라이스에 대해 반복적으로, 더 이상 필요하지 않는 엔드포인트를
    제거하고 변경에 의해 일치하는 엔드포인트를 업데이트 한다.
@@ -173,10 +189,17 @@ text="kube-controller-manager" term_id="kube-controller-manager" >}} 플래그
 교체되는 엔드포인트에 대해서 엔드포인트슬라이스를
 자연스럽게 재포장한다.
 
+### 중복 엔드포인트
 
+엔드포인트슬라이스 변경의 특성으로 인해, 엔드포인트는 동시에 둘 이상의
+엔드포인트슬라이스에 표시될 수 있다. 이는 다른 엔드포인트슬라이스 오브젝트에
+대한 변경 사항이 다른 시간에서의 쿠버네티스 클라이언트 워치(watch)/캐시에
+도착할 수 있기 때문에 자연스럽게 발생한다. 엔드포인트슬라이스를 사용하는 구현은
+엔드포인트가 둘 이상의 슬라이스에 표시되도록 할 수 있어야 한다. 엔드포인트
+중복 제거를 수행하는 방법에 대한 레퍼런스 구현은 `kube-proxy` 의
+`EndpointSliceCache` 구현에서 찾을 수 있다.
 
 ## {{% heading "whatsnext" %}}
 
-
-* [엔드포인트슬라이스 활성화하기](/docs/tasks/administer-cluster/enabling-endpointslices)
+* [엔드포인트슬라이스 활성화하기](/docs/tasks/administer-cluster/enabling-endpointslices)에 대해 배우기
 * [애플리케이션을 서비스와 함께 연결하기](/ko/docs/concepts/services-networking/connect-applications-service/)를 읽어보기
diff --git a/content/ko/docs/concepts/services-networking/ingress.md b/content/ko/docs/concepts/services-networking/ingress.md
index 9ec0d2f5bf..3f75069300 100644
--- a/content/ko/docs/concepts/services-networking/ingress.md
+++ b/content/ko/docs/concepts/services-networking/ingress.md
@@ -5,7 +5,7 @@ weight: 40
 ---
 
 <!-- overview -->
-{{< feature-state for_k8s_version="v1.1" state="beta" >}}
+{{< feature-state for_k8s_version="v1.19" state="stable" >}}
 {{< glossary_definition term_id="ingress" length="all" >}}
 
 
@@ -23,7 +23,7 @@ weight: 40
 
 ## 인그레스란?
 
-[인그레스](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ingress-v1beta1-networking-k8s-io)는 클러스터 외부에서 클러스터 내부
+[인그레스](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ingress-v1-networking-k8s-io)는 클러스터 외부에서 클러스터 내부
 {{< link text="서비스" url="/docs/concepts/services-networking/service/" >}}로 HTTP와 HTTPS 경로를 노출한다.
 트래픽 라우팅은 인그레스 리소스에 정의된 규칙에 의해 컨트롤된다.
 
@@ -59,23 +59,7 @@ weight: 40
 
 최소한의 인그레스 리소스 예제:
 
-```yaml
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: test-ingress
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /
-spec:
-  rules:
-  - http:
-      paths:
-      - path: /testpath
-        pathType: Prefix
-        backend:
-          serviceName: test
-          servicePort: 80
-```
+{{< codenew file="service/networking/minimal-ingress.yaml" >}}
 
 다른 모든 쿠버네티스 리소스와 마찬가지로 인그레스에는 `apiVersion`, `kind`, 그리고 `metadata` 필드가 필요하다.
 인그레스 오브젝트의 이름은 유효한
@@ -98,44 +82,100 @@ spec:
 * 선택적 호스트. 이 예시에서는, 호스트가 지정되지 않기에 지정된 IP 주소를 통해 모든 인바운드
   HTTP 트래픽에 규칙이 적용 된다. 만약 호스트가 제공되면(예,
   foo.bar.com), 규칙이 해당 호스트에 적용된다.
-* 경로 목록 (예, `/testpath`)에는 각각 `serviceName` 과 `servicePort` 가 정의되어있는 관련
-  백엔드를 가지고 있다. 로드 밸런서가 트래픽을 참조된 서비스로 보내기 전에 호스트와 경로가
-  모두 수신 요청의 내용과 일치해야 한다.
-* 백엔드는 [서비스 문서](/ko/docs/concepts/services-networking/service/)에 설명된 바와 같이
+* 경로 목록 (예, `/testpath`)에는 각각 `service.name` 과
+  `service.port.name` 또는 `service.port.number` 가 정의되어 있는 관련
+  백엔드를 가지고 있다. 로드 밸런서가 트래픽을 참조된 서비스로
+  보내기 전에 호스트와 경로가 모두 수신 요청의 내용과
+  일치해야 한다.
+* 백엔드는 [서비스 문서](/ko/docs/concepts/services-networking/service/) 또는 [사용자 정의 리소스 백엔드](#resource-backend)에 설명된 바와 같이
   서비스와 포트 이름의 조합이다. 호스트와 규칙 경로가 일치하는 인그레스에 대한
   HTTP(와 HTTPS) 요청은 백엔드 목록으로 전송된다.
 
-기본 백엔드는 종종 사양의 경로와 일치하지 않는 서비스에 대한 모든 요청을 처리하도록 인그레스
+`defaultBackend` 는 종종 사양의 경로와 일치하지 않는 서비스에 대한 모든 요청을 처리하도록 인그레스
 컨트롤러에 구성되는 경우가 많다.
 
-### 기본 벡엔드
+### DefaultBackend {#default-backend}
 
-규칙이 없는 인그레스는 모든 트래픽을 단일 기본 백엔드로 전송한다. 기본
-백엔드는 일반적으로 [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers)의 구성 옵션이며, 인그레스 리소스에 지정되어 있지 않다.
+규칙이 없는 인그레스는 모든 트래픽을 단일 기본 백엔드로 전송한다. `defaultBackend` 는 일반적으로
+[인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers)의 구성 옵션이며, 인그레스 리소스에 지정되어 있지 않다.
 
 만약 인그레스 오브젝트의 HTTP 요청과 일치하는 호스트 또는 경로가 없으면, 트래픽은
 기본 백엔드로 라우팅 된다.
 
-### 경로(Path) 유형
+### 리소스 백엔드 {#resource-backend}
 
-인그레스의 각 경로에는 해당하는 경로 유형이 있다. 지원되는 세 가지의 경로
-유형이 있다.
+`Resource` 백엔드는 인그레스 오브젝트의 동일한 네임스페이스 내에 있는
+다른 쿠버네티스 리소스에 대한 ObjectRef이다. `Resource` 는 서비스와
+상호 배타적인 설정이며, 둘 다 지정하면 유효성 검사에 실패한다. `Resource`
+백엔드의 일반적인 용도는 정적 자산이 있는 오브젝트 스토리지 백엔드로 데이터를
+수신하는 것이다.
 
-* _`ImplementationSpecific`_ (기본): 이 경로 유형의 일치 여부는 IngressClass에 따라
+{{< codenew file="service/networking/ingress-resource-backend.yaml" >}}
+
+위의 인그레스를 생성한 후, 다음의 명령으로 확인할 수 있다.
+
+```bash
+kubectl describe ingress ingress-resource-backend
+```
+
+```
+Name:             ingress-resource-backend
+Namespace:        default
+Address:
+Default backend:  APIGroup: k8s.example.com, Kind: StorageBucket, Name: static-assets
+Rules:
+  Host        Path  Backends
+  ----        ----  --------
+  *
+              /icons   APIGroup: k8s.example.com, Kind: StorageBucket, Name: icon-assets
+Annotations:  <none>
+Events:       <none>
+```
+
+### 경로 유형
+
+인그레스의 각 경로에는 해당 경로 유형이 있어야 한다. 명시적
+`pathType` 을 포함하지 않는 경로는 유효성 검사에 실패한다. 지원되는
+경로 유형은 세 가지이다.
+
+* `ImplementationSpecific`: 이 경로 유형의 일치 여부는 IngressClass에 따라
   달라진다. 이를 구현할 때 별도 `pathType` 으로 처리하거나, `Prefix` 또는 `Exact`
   경로 유형과 같이 동일하게 처리할 수 있다.
 
-* _`Exact`_: URL 경로의 대소문자를 엄격하게 일치시킨다.
+* `Exact`: URL 경로의 대소문자를 엄격하게 일치시킨다.
 
-* _`Prefix`_: URL 경로의 접두사를 `/` 를 기준으로 분리한 값과 일치시킨다.
+* `Prefix`: URL 경로의 접두사를 `/` 를 기준으로 분리한 값과 일치시킨다.
   일치는 대소문자를 구분하고,
   요소별로 경로 요소에 대해 수행한다.
   모든 _p_ 가 요청 경로의 요소별 접두사가 _p_ 인 경우
   요청은 _p_ 경로에 일치한다.
 
-  {{< note >}}
-  경로의 마지막 요소가 요청 경로에 있는 마지막 요소의 하위 문자열인 경우에는 일치하지 않는다(예시: `/foo/bar` 와 `/foo/bar/baz` 와 일치하지만, `/foo/barbaz` 는 일치하지 않는다).
-  {{< /note >}}
+  {{< note >}} 경로의 마지막 요소가 요청 경로에 있는 마지막
+  요소의 하위 문자열인 경우에는 일치하지 않는다(예시: `/foo/bar` 와
+  `/foo/bar/baz` 와 일치하지만, `/foo/barbaz` 는 일치하지 않는다). {{< /note >}}
+
+### 예제
+
+| 종류    | 경로                             | 요청 경로                       | 일치 여부                            |
+|--------|---------------------------------|-------------------------------|------------------------------------|
+| Prefix | `/`                             | (모든 경로)                     | 예                                  |
+| Exact  | `/foo`                          | `/foo`                        | 예                                  |
+| Exact  | `/foo`                          | `/bar`                        | 아니오                               |
+| Exact  | `/foo`                          | `/foo/`                       | 아니오                               |
+| Exact  | `/foo/`                         | `/foo`                        | 아니오                               |
+| Prefix | `/foo`                          | `/foo`, `/foo/`               | 예                                  |
+| Prefix | `/foo/`                         | `/foo`, `/foo/`               | 예                                  |
+| Prefix | `/aaa/bb`                       | `/aaa/bbb`                    | 아니오                               |
+| Prefix | `/aaa/bbb`                      | `/aaa/bbb`                    | 예                                  |
+| Prefix | `/aaa/bbb/`                     | `/aaa/bbb`                    | 예, 마지막 슬래시 무시함                 |
+| Prefix | `/aaa/bbb`                      | `/aaa/bbb/`                   | 예, 마지막 슬래시 일치함                 |
+| Prefix | `/aaa/bbb`                      | `/aaa/bbb/ccc`                | 예, 하위 경로 일치함                    |
+| Prefix | `/aaa/bbb`                      | `/aaa/bbbxyz`                 | 아니오, 문자열 접두사 일치하지 않음         |
+| Prefix | `/`, `/aaa`                     | `/aaa/ccc`                    | 예, `/aaa` 접두사 일치함                |
+| Prefix | `/`, `/aaa`, `/aaa/bbb`         | `/aaa/bbb`                    | 예, `/aaa/bbb` 접두사 일치함            |
+| Prefix | `/`, `/aaa`, `/aaa/bbb`         | `/ccc`                        | 예, `/` 접두사 일치함                   |
+| Prefix | `/aaa`                          | `/ccc`                        | 아니오, 기본 백엔드 사용함                |
+| Mixed  | `/foo` (Prefix), `/foo` (Exact) | `/foo`                        | 예, Exact 선호함                      |
 
 #### 다중 일치
 경우에 따라 인그레스의 여러 경로가 요청과 일치할 수 있다.
@@ -143,6 +183,20 @@ spec:
 여전히 동일하게 일치하는 경우 접두사(prefix) 경로 유형보다
 정확한(exact) 경로 유형을 가진 경로가 사용 된다.
 
+## 호스트네임 와일드카드
+호스트는 정확한 일치(예: "`foo.bar.com`") 또는 와일드카드(예:
+"`* .foo.com`")일 수 있다. 정확한 일치를 위해서는 HTTP `host` 헤더가
+`host` 필드와 일치해야 한다. 와일드카드 일치를 위해서는 HTTP `host` 헤더가
+와일드카드 규칙의 접미사와 동일해야 한다.
+
+| 호스트        | 호스트 헤더         | 일치 여부                                            |
+| ----------- |-------------------| --------------------------------------------------|
+| `*.foo.com` | `bar.foo.com`     | 공유 접미사를 기반으로 일치함                            |
+| `*.foo.com` | `baz.bar.foo.com` | 일치하지 않음, 와일드카드는 단일 DNS 레이블만 포함함          |
+| `*.foo.com` | `foo.com`         | 일치하지 않음, 와일드카드는 단일 DNS 레이블만 포함함          |
+
+{{< codenew file="service/networking/ingress-wildcard-host.yaml" >}}
+
 ## 인그레스 클래스
 
 인그레스는 서로 다른 컨트롤러에 의해 구현될 수 있으며, 종종 다른 구성으로
@@ -150,18 +204,7 @@ spec:
 이름을 포함하여 추가 구성이 포함된 IngressClass
 리소스에 대한 참조 클래스를 지정해야 한다.
 
-```yaml
-apiVersion: networking.k8s.io/v1beta1
-kind: IngressClass
-metadata:
-  name: external-lb
-spec:
-  controller: example.com/ingress-controller
-  parameters:
-    apiGroup: k8s.example.com/v1alpha
-    kind: IngressParameters
-    name: external-lb
-```
+{{< codenew file="service/networking/external-lb.yaml" >}}
 
 IngressClass 리소스에는 선택적인 파라미터 필드가 있다. 이 클래스에 대한
 추가 구성을 참조하는데 사용할 수 있다.
@@ -179,7 +222,7 @@ IngressClass 리소스에는 선택적인 파라미터 필드가 있다. 이 클
 이 필드는 인그레스 컨트롤러의 이름을 포함하는 추가 인그레스 구성이
 포함된 인그레스 클래스 리소스에 대한 참조이다.
 
-### 기본 인그레스 클래스
+### 기본 IngressClass {#default-ingress-class}
 
 특정 IngressClass를 클러스터의 기본 값으로 표시할 수 있다. IngressClass
 리소스에서 `ingressclass.kubernetes.io/is-default-class` 를 `true` 로
@@ -195,24 +238,24 @@ IngressClass 리소스에는 선택적인 파라미터 필드가 있다. 이 클
 
 ## 인그레스 유형들
 
-### 단일 서비스 인그레스
+### 단일 서비스로 지원되는 인그레스 {#single-service-ingress}
 
 단일 서비스를 노출할 수 있는 기존 쿠버네티스 개념이 있다
 ([대안](#대안)을 본다). 인그레스에 규칙 없이 *기본 백엔드* 를 지정해서
 이를 수행할 수 있다.
 
-{{< codenew file="service/networking/ingress.yaml" >}}
+{{< codenew file="service/networking/test-ingress.yaml" >}}
 
 만약 `kubectl apply -f` 를 사용해서 생성한다면 방금 추가한 인그레스의
 상태를 볼 수 있어야 한다.
 
-```shell
+```bash
 kubectl get ingress test-ingress
 ```
 
 ```
-NAME           HOSTS     ADDRESS           PORTS     AGE
-test-ingress   *         203.0.113.123   80        59s
+NAME           CLASS         HOSTS   ADDRESS         PORTS   AGE
+test-ingress   external-lb   *       203.0.113.123   80      59s
 ```
 
 여기서 `203.0.113.123` 는 인그레스 컨트롤러가 인그레스를 충족시키기 위해
@@ -229,34 +272,14 @@ test-ingress   *         203.0.113.123   80        59s
 트래픽을 라우팅 한다. 인그레스를 사용하면 로드 밸런서의 수를
 최소로 유지할 수 있다. 예를 들어 다음과 같은 설정을 한다.
 
-```none
+```
 foo.bar.com -> 178.91.123.132 -> / foo    service1:4200
                                  / bar    service2:8080
 ```
 
 다음과 같은 인그레스가 필요하다.
 
-```yaml
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: simple-fanout-example
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /
-spec:
-  rules:
-  - host: foo.bar.com
-    http:
-      paths:
-      - path: /foo
-        backend:
-          serviceName: service1
-          servicePort: 4200
-      - path: /bar
-        backend:
-          serviceName: service2
-          servicePort: 8080
-```
+{{< codenew file="service/networking/simple-fanout-example.yaml" >}}
 
 `kubectl apply -f` 를 사용해서 인그레스를 생성 할 때 다음과 같다.
 
@@ -275,8 +298,6 @@ Rules:
   foo.bar.com
                /foo   service1:4200 (10.8.0.90:4200)
                /bar   service2:8080 (10.8.0.91:8080)
-Annotations:
-  nginx.ingress.kubernetes.io/rewrite-target:  /
 Events:
   Type     Reason  Age                From                     Message
   ----     ------  ----               ----                     -------
@@ -289,8 +310,8 @@ Events:
 볼 수 있다.
 
 {{< note >}}
-사용중인 [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers)
-에 따라 default-http-backend
+사용 중인 [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers/)에
+따라 default-http-backend
 [서비스](/ko/docs/concepts/services-networking/service/)를 만들어야 할 수도 있다.
 {{< /note >}}
 
@@ -307,68 +328,26 @@ bar.foo.com --|                 |-> bar.foo.com service2:80
 다음 인그레스는 [호스트 헤더](https://tools.ietf.org/html/rfc7230#section-5.4)에 기반한 요청을
 라우팅 하기 위해 뒷단의 로드 밸런서를 알려준다.
 
-```yaml
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: name-virtual-host-ingress
-spec:
-  rules:
-  - host: foo.bar.com
-    http:
-      paths:
-      - backend:
-          serviceName: service1
-          servicePort: 80
-  - host: bar.foo.com
-    http:
-      paths:
-      - backend:
-          serviceName: service2
-          servicePort: 80
-```
+{{< codenew file="service/networking/name-virtual-host-ingress.yaml" >}}
 
 만약 규칙에 정의된 호스트 없이 인그레스 리소스를 생성하는 경우,
 이름 기반 가상 호스트가 없어도 인그레스 컨트롤러의 IP 주소에 대한 웹
 트래픽을 일치 시킬 수 있다.
 
-예를 들어, 다음 인그레스 리소스는 `first.bar.com`에 요청된 트래픽을
+예를 들어, 다음 인그레스는 `first.bar.com`에 요청된 트래픽을
 `service1`로, `second.foo.com`는 `service2`로, 호스트 이름이 정의되지
 않은(즉, 요청 헤더가 표시 되지 않는) IP 주소로의 모든
 트래픽은 `service3`로 라우팅 한다.
 
-```yaml
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: name-virtual-host-ingress
-spec:
-  rules:
-  - host: first.bar.com
-    http:
-      paths:
-      - backend:
-          serviceName: service1
-          servicePort: 80
-  - host: second.foo.com
-    http:
-      paths:
-      - backend:
-          serviceName: service2
-          servicePort: 80
-  - http:
-      paths:
-      - backend:
-          serviceName: service3
-          servicePort: 80
-```
+{{< codenew file="service/networking/name-virtual-host-ingress-no-third-host.yaml" >}}
 
 ### TLS
 
-TLS 개인 키 및 인증서가 포함된 {{< glossary_tooltip term_id="secret" >}}
-을 지정해서 인그레스를 보호할 수 있다. 현재 인그레스는
-단일 TLS 포트인 443만 지원하며 TLS 종료를 가정한다. 만약 인그레스의 TLS
-구성 섹션에서 다른 호스트를 지정하면, SNI TLS 확장을 통해
+TLS 개인 키 및 인증서가 포함된 {{< glossary_tooltip term_id="secret" >}}을
+지정해서 인그레스를 보호할 수 있다. 인그레스 리소스는
+단일 TLS 포트인 443만 지원하고 인그레스 지점에서 TLS 종료를
+가정한다(서비스 및 해당 파드에 대한 트래픽은 일반 텍스트임).
+인그레스의 TLS 구성 섹션에서 다른 호스트를 지정하면, SNI TLS 확장을 통해
 지정된 호스트이름에 따라 동일한 포트에서 멀티플렉싱
 된다(인그레스 컨트롤러가 SNI를 지원하는 경우). TLS secret에는
 `tls.crt` 와 `tls.key` 라는 이름의 키가 있어야 하고, 여기에는 TLS에 사용할 인증서와
@@ -391,25 +370,7 @@ type: kubernetes.io/tls
 TLS 시크릿이 `sslexample.foo.com` 의 정규화 된 도메인 이름(FQDN)이라고
 하는 일반 이름(CN)을 포함하는 인증서에서 온 것인지 확인해야 한다.
 
-```yaml
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: tls-example-ingress
-spec:
-  tls:
-  - hosts:
-      - sslexample.foo.com
-    secretName: testsecret-tls
-  rules:
-  - host: sslexample.foo.com
-    http:
-      paths:
-      - path: /
-        backend:
-          serviceName: service1
-          servicePort: 80
-```
+{{< codenew file="service/networking/tls-example-ingress.yaml" >}}
 
 {{< note >}}
 TLS 기능을 제공하는 다양한 인그레스 컨트롤러간의 기능
@@ -419,7 +380,7 @@ TLS 기능을 제공하는 다양한 인그레스 컨트롤러간의 기능
 플랫폼의 특정 인그레스 컨트롤러에 대한 설명서를 참조한다.
 {{< /note >}}
 
-### 로드밸런싱
+### 로드 밸런싱 {#load-balancing}
 
 인그레스 컨트롤러는 로드 밸런싱 알고리즘, 백엔드 가중치 구성표 등
 모든 인그레스에 적용되는 일부 로드 밸런싱
@@ -432,8 +393,8 @@ TLS 기능을 제공하는 다양한 인그레스 컨트롤러간의 기능
 [준비 상태 프로브](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)와
 같은 동일한 최종 결과를 얻을 수 있는 병렬 개념이
 있다는 점도 주목할 가치가 있다. 컨트롤러 별
-설명서를 검토하여 헬스 체크를 처리하는 방법을 확인한다(
-[nginx](https://git.k8s.io/ingress-nginx/README.md),
+설명서를 검토하여 헬스 체크를 처리하는 방법을 확인한다(예:
+[nginx](https://git.k8s.io/ingress-nginx/README.md), 또는
 [GCE](https://git.k8s.io/ingress-gce/README.md#health-checks)).
 
 ## 인그레스 업데이트
@@ -476,16 +437,22 @@ spec:
     http:
       paths:
       - backend:
-          serviceName: service1
-          servicePort: 80
+          service:
+            name: service1
+            port:
+              number: 80
         path: /foo
+        pathType: Prefix
   - host: bar.baz.com
     http:
       paths:
       - backend:
-          serviceName: service2
-          servicePort: 80
+          service:
+            name: service2
+            port:
+              number: 80
         path: /foo
+        pathType: Prefix
 ..
 ```
 
@@ -523,15 +490,9 @@ Events:
 ## 가용성 영역에 전체에서의 실패
 
 장애 도메인에 트래픽을 분산시키는 기술은 클라우드 공급자마다 다르다.
-자세한 내용은 [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers) 설명서를 확인한다. 페더레이션 클러스터에서 인그레스 배포에 대한 자세한 내용은 [페더레이션 설명서](https://github.com/kubernetes-sigs/federation-v2)
-를 참조할 수 있다.
-
-## 앞으로의 할일
-
-[SIG Network](https://github.com/kubernetes/community/tree/master/sig-network)
-를 추적하여 인그레스와 진행중인 리소스의 발전에 대한 자세한 내용을 알아 본다. 다양한
-인그레스 컨트롤러의 발전에 대한 자세한 내용은
-[인그레스 리포지터리](https://github.com/kubernetes/ingress/tree/master)에서 추적할 수 있다.
+자세한 내용은 [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers) 설명서를 확인한다.
+페더레이션 클러스터에서 인그레스 배포에 대한 자세한 내용은 [페더레이션 설명서](https://github.com/kubernetes-sigs/federation-v2)를
+참조할 수 있다.
 
 ## 대안
 
@@ -546,4 +507,4 @@ Events:
 
 * [인그레스 API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ingress-v1beta1-networking-k8s-io)에 대해 배우기
 * [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers/)에 대해 배우기
-* [NGINX 컨트롤러로 Minikube에서 인그레스 구성하기](/docs/tasks/access-application-cluster/ingress-minikube)
+* [NGINX 컨트롤러로 Minikube에서 인그레스 구성하기](/docs/tasks/access-application-cluster/ingress-minikube/)
diff --git a/content/ko/docs/concepts/services-networking/network-policies.md b/content/ko/docs/concepts/services-networking/network-policies.md
index 4d8bb47bda..76076f5965 100644
--- a/content/ko/docs/concepts/services-networking/network-policies.md
+++ b/content/ko/docs/concepts/services-networking/network-policies.md
@@ -5,11 +5,18 @@ weight: 50
 ---
 
 <!-- overview -->
-네트워크 정책은 {{< glossary_tooltip text="파드" term_id="pod">}} 그룹이 서로 간에 또는 다른 네트워크 엔드포인트와 통신할 수 있도록 허용하는 방법에 대한 명세이다.
 
-`네트워크폴리시(NetworkPolicy)` 리소스는 {{< glossary_tooltip text="레이블" term_id="label">}}을 사용해서 파드를 선택하고 선택한 파드에 허용되는 트래픽을 지정하는 규칙을 정의한다.
+IP 주소 또는 포트 수준(OSI 계층 3 또는 4)에서 트래픽 흐름을 제어하려는 경우, 클러스터의 특정 애플리케이션에 대해 쿠버네티스 네트워크폴리시(NetworkPolicy) 사용을 고려할 수 있다. 네트워크폴리시는 {{< glossary_tooltip text="파드" term_id="pod" >}}가 네트워크 상의 다양한 네트워크 "엔티티"(여기서는 "엔티티"를 사용하여 쿠버네티스에서 특별한 의미로 사용되는 "엔드포인트" 및 "서비스"와 같은 일반적인 용어가 중의적으로 표현되는 것을 방지함)와 통신할 수 있도록 허용하는 방법을 지정할 수 있는 애플리케이션 중심 구조이다.
 
+파드가 통신할 수 있는 엔티티는 다음 3개의 식별자 조합을 통해 식별된다.
 
+1. 허용되는 다른 파드(예외: 파드는 자신에 대한 접근을 차단할 수 없음)
+2. 허용되는 네임스페이스
+3. IP 블록(예외: 파드 또는 노드의 IP 주소와 관계없이 파드가 실행 중인 노드와의 트래픽은 항상 허용됨)
+
+pod- 또는 namespace- 기반의 네트워크폴리시를 정의할 때, {{< glossary_tooltip text="셀렉터" term_id="selector" >}}를 사용하여 셀렉터와 일치하는 파드와 주고받는 트래픽을 지정한다.
+
+한편, IP 기반의 네트워크폴리시가 생성되면, IP 블록(CIDR 범위)을 기반으로 정책을 정의한다.
 
 <!-- body -->
 ## 전제 조건
@@ -199,17 +206,29 @@ __ipBlock__: 인그레스 소스 또는 이그레스 대상으로 허용할 IP C
 
 ## SCTP 지원
 
-{{< feature-state for_k8s_version="v1.12" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-이 기능을 사용하려면 사용자(또는 클러스터 관리자가) API 서버에 `--feature-gates=SCTPSupport=true,…` 를 사용해서 `SCTPSupport` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화 해야 한다.
-기능 게이트가 활셩화 되면, 네트워크폴리시의 `protocol` 필드를 `SCTP` 로 설정할 수 있다.
+베타 기능으로, 기본 활성화되어 있다. 클러스터 수준에서 SCTP를 비활성화하려면, 사용자(또는 클러스터 관리자)가 API 서버에 `--feature-gates=SCTPSupport=false,…` 를 사용해서 `SCTPSupport` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 비활성화해야 한다.
 
 {{< note >}}
 SCTP 프로토콜 네트워크폴리시를 지원하는 {{< glossary_tooltip text="CNI" term_id="cni" >}} 플러그인을 사용하고 있어야 한다.
 {{< /note >}}
 
+# 네트워크 정책으로 할 수 없는 것(적어도 아직은 할 수 없는)
 
+쿠버네티스 1.20부터 다음의 기능은 네트워크폴리시 API에 존재하지 않지만, 운영 체제 컴포넌트(예: SELinux, OpenVSwitch, IPTables 등) 또는 Layer 7 기술(인그레스 컨트롤러, 서비스 메시 구현) 또는 어드미션 컨트롤러를 사용하여 제2의 해결책을 구현할 수 있다. 쿠버네티스의 네트워크 보안을 처음 사용하는 경우, 네트워크폴리시 API를 사용하여 다음의 사용자 스토리를 (아직) 구현할 수 없다는 점에 유의할 가치가 있다. 이러한 사용자 스토리 중 일부(전부는 아님)가 네트워크폴리시 API의 향후 릴리스에서 활발히 논의되고 있다.
 
+- 내부 클러스터 트래픽이 공통 게이트웨이를 통과하도록 강제한다(서비스 메시나 기타 프록시와 함께 제공하는 것이 가장 좋을 수 있음).
+- TLS와 관련된 모든 것(이를 위해 서비스 메시나 인그레스 컨트롤러 사용).
+- 노드별 정책(이에 대해 CIDR 표기법을 사용할 수 있지만, 특히 쿠버네티스 ID로 노드를 대상으로 지정할 수 없음).
+- 이름으로 네임스페이스나 서비스를 타겟팅한다(그러나, {{< glossary_tooltip text="레이블" term_id="label" >}}로 파드나 네임스페이스를 타겟팅할 수 있으며, 이는 종종 실행할 수 있는 해결 방법임).
+- 타사 공급사가 이행한 "정책 요청"의 생성 또는 관리.
+- 모든 네임스페이스나 파드에 적용되는 기본 정책(이를 수행할 수 있는 타사 공급사의 쿠버네티스 배포본 및 프로젝트가 있음).
+- 고급 정책 쿼리 및 도달 가능성 도구.
+- 단일 정책 선언에서 포트 범위를 대상으로 하는 기능.
+- 네트워크 보안 이벤트를 기록하는 기능(예: 차단되거나 수락된 연결).
+- 명시적으로 정책을 거부하는 기능(현재 네트워크폴리시 모델은 기본적으로 거부하며, 허용 규칙을 추가하는 기능만 있음).
+- 루프백 또는 들어오는 호스트 트래픽을 방지하는 기능(파드는 현재 로컬 호스트 접근을 차단할 수 없으며, 상주 노드의 접근을 차단할 수 있는 기능도 없음).
 
 ## {{% heading "whatsnext" %}}
 
diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index 90ec166c03..df51f54ec5 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -31,8 +31,8 @@ weight: 10
 한 시점에 실행되는 파드 집합이
 잠시 후 실행되는 해당 파드 집합과 다를 수 있다.
 
-이는 다음과 같은 문제를 야기한다. (“백엔드”라 불리는) 일부 파드 집합이
-클러스터의 (“프론트엔드”라 불리는) 다른 파드에 기능을 제공하는 경우,
+이는 다음과 같은 문제를 야기한다. ("백엔드"라 불리는) 일부 파드 집합이
+클러스터의 ("프론트엔드"라 불리는) 다른 파드에 기능을 제공하는 경우,
 프론트엔드가 워크로드의 백엔드를 사용하기 위해,
 프론트엔드가 어떻게 연결할 IP 주소를 찾아서 추적할 수 있는가?
 
@@ -89,7 +89,7 @@ spec:
       targetPort: 9376
 ```
 
-이 명세는 “my-service”라는 새로운 서비스 오브젝트를 생성하고,
+이 명세는 "my-service"라는 새로운 서비스 오브젝트를 생성하고,
 `app=MyApp` 레이블을 가진 파드의 TCP 9376 포트를 대상으로 한다.
 
 쿠버네티스는 이 서비스에 서비스 프록시가 사용하는 IP 주소 ("cluster IP"라고도 함)
@@ -97,7 +97,7 @@ spec:
 (이하 [가상 IP와 서비스 프록시](#가상-ip와-서비스-프록시) 참고)
 
 서비스 셀렉터의 컨트롤러는 셀렉터와 일치하는 파드를 지속적으로 검색하고,
-“my-service”라는 엔드포인트 오브젝트에 대한
+"my-service"라는 엔드포인트 오브젝트에 대한
 모든 업데이트를 POST한다.
 
 {{< note >}}
@@ -200,14 +200,11 @@ API 리소스이다. 개념적으로 엔드포인트와 매우 유사하지만,
 
 ### 애플리케이션 프로토콜
 
-{{< feature-state for_k8s_version="v1.18" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
 AppProtocol 필드는 각 서비스 포트에 사용될 애플리케이션 프로토콜을
-지정하는 방법을 제공한다.
-
-알파 기능으로 이 필드는 기본적으로 활성화되어 있지 않다. 이 필드를 사용하려면,
-[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)에서
-`ServiceAppProtocol` 을 활성화해야 한다.
+지정하는 방법을 제공한다. 이 필드의 값은 해당 엔드포인트와 엔드포인트슬라이스에
+의해 미러링된다.
 
 ## 가상 IP와 서비스 프록시
 
@@ -862,6 +859,7 @@ Classic ELB의 연결 드레이닝은
         service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: "20"
         # 개별 인스턴스의 상태 점검 사이의
         # 대략적인 간격 (초 단위). 기본값은 10이며, 5와 300 사이여야 한다.
+
         service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: "5"
         # 헬스 체크 실패를 의미하는 무 응답의 총 시간 (초 단위)
         # 이 값은 service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval
@@ -869,6 +867,10 @@ Classic ELB의 연결 드레이닝은
 
         service.beta.kubernetes.io/aws-load-balancer-extra-security-groups: "sg-53fae93f,sg-42efd82e"
         # ELB에 추가될 추가 보안 그룹(security group) 목록
+
+        service.beta.kubernetes.io/aws-load-balancer-target-node-labels: "ingress-gw,gw-name=public-api"
+        # 로드 밸런서의 대상 노드를 선택하는 데
+        # 사용되는 키-값 쌍의 쉼표로 구분된 목록
 ```
 
 #### AWS의 네트워크 로드 밸런서 지원 {#aws-nlb-support}
@@ -1189,11 +1191,11 @@ PROXY TCP4 192.0.2.202 10.0.42.7 12345 7\r\n
 
 ### SCTP
 
-{{< feature-state for_k8s_version="v1.12" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-쿠버네티스는 서비스, 엔드포인트, 네트워크 정책 및 파드 정의에서 알파 기능으로 SCTP를 `프로토콜` 값으로 지원한다. 이 기능을 활성화하기 위해서는, 클러스터 관리자가 API 서버에서 `--feature-gates=SCTPSupport=true,…`처럼 `SCTPSupport` 기능 게이트를 활성화해야 한다.
+쿠버네티스는 서비스, 엔드포인트, 엔드포인트슬라이스, 네트워크폴리시 및 파드 정의에서 SCTP를 `protocol` 값으로 지원한다. 이 기능은 베타 기능으로, 기본 활성화되어 있다. 클러스터 수준에서 SCTP를 비활성화하려면, 사용자(또는 클러스터 관리자)가 API 서버에서 `--feature-gates=SCTPSupport=false,…` 를 사용해서 `SCTPSupport` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 비활성화해야 한다.
 
-기능 게이트가 활성화되면, 서비스, 엔드포인트, 네트워크 정책 또는 파드의 `프로토콜` 필드를 `SCTP`로 설정할 수 있다. 쿠버네티스는 TCP 연결과 마찬가지로, SCTP 연결에 맞게 네트워크를 설정한다.
+기능 게이트가 활성화되면, 서비스, 엔드포인트, 엔드포인트슬라이스, 네트워크폴리시 또는 파드의 `protocol` 필드를 `SCTP` 로 설정할 수 있다. 쿠버네티스는 TCP 연결과 마찬가지로, SCTP 연결에 맞게 네트워크를 설정한다.
 
 #### 경고 {#caveat-sctp-overview}
 
diff --git a/content/ko/docs/concepts/storage/dynamic-provisioning.md b/content/ko/docs/concepts/storage/dynamic-provisioning.md
index 87ce9c9d27..412645e734 100644
--- a/content/ko/docs/concepts/storage/dynamic-provisioning.md
+++ b/content/ko/docs/concepts/storage/dynamic-provisioning.md
@@ -80,7 +80,7 @@ v1.6부터 더 이상 사용하지 않는다. 사용자는 이제 `PersistentVol
 관리자가 구성한 `StorageClass` 의 이름과
 일치해야 한다. ([아래](#동적-프로비저닝-활성화하기)를 참고)
 
-예를 들어 “fast” 스토리지 클래스를 선택하려면 다음과
+예를 들어 "fast" 스토리지 클래스를 선택하려면 다음과
 같은 `PersistentVolumeClaim` 을 생성한다.
 
 ```yaml
@@ -127,4 +127,3 @@ spec:
 여러 영역에 걸쳐 분산될 수 있다. 파드가 예약된 영역에서 단일 영역 스토리지 백엔드를
 프로비전해야 한다. [볼륨 바인딩 모드](/ko/docs/concepts/storage/storage-classes/#볼륨-바인딩-모드)를
 설정해서 수행할 수 있다.
-
diff --git a/content/ko/docs/concepts/storage/persistent-volumes.md b/content/ko/docs/concepts/storage/persistent-volumes.md
index 71e78eae96..d67ee4d993 100644
--- a/content/ko/docs/concepts/storage/persistent-volumes.md
+++ b/content/ko/docs/concepts/storage/persistent-volumes.md
@@ -248,6 +248,16 @@ FlexVolume의 크기 조정은 기본 드라이버가 크기 조정을 지원하
 EBS 볼륨 확장은 시간이 많이 걸리는 작업이다. 또한 6시간마다 한 번의 수정을 할 수 있는 볼륨별 쿼터가 있다.
 {{< /note >}}
 
+#### 볼륨 확장 시 오류 복구
+
+기본 스토리지 확장에 실패하면, 클러스터 관리자가 수동으로 퍼시스턴트 볼륨 클레임(PVC) 상태를 복구하고 크기 조정 요청을 취소할 수 있다. 그렇지 않으면, 컨트롤러가 관리자 개입 없이 크기 조정 요청을 계속해서 재시도한다.
+
+1. 퍼시스턴트볼륨클레임(PVC)에 바인딩된 퍼시스턴트볼륨(PV)을 `Retain` 반환 정책으로 표시한다.
+2. PVC를 삭제한다. PV에는 `Retain` 반환 정책이 있으므로 PVC를 재생성할 때 데이터가 손실되지 않는다.
+3. 새 PVC를 바인딩할 수 있도록 PV 명세에서 `claimRef` 항목을 삭제한다. 그러면 PV가 `Available` 상태가 된다.
+4. PV 보다 작은 크기로 PVC를 다시 만들고 PVC의 `volumeName` 필드를 PV 이름으로 설정한다. 이것은 새 PVC를 기존 PV에 바인딩해야 한다.
+5. PV의 반환 정책을 복원하는 것을 잊지 않는다.
+
 
 ## 퍼시스턴트 볼륨의 유형
 
diff --git a/content/ko/docs/concepts/storage/volume-snapshots.md b/content/ko/docs/concepts/storage/volume-snapshots.md
index 9aadbe3726..5ad5a938eb 100644
--- a/content/ko/docs/concepts/storage/volume-snapshots.md
+++ b/content/ko/docs/concepts/storage/volume-snapshots.md
@@ -87,14 +87,14 @@ spec:
 
 사전 프로비저닝된 스냅샷의 경우, 다음 예와 같이 `volumeSnapshotContentName`을 스냅샷 소스로 지정해야 한다. 사전 프로비저닝된 스냅샷에는 `volumeSnapshotContentName` 소스 필드가 필요하다.
 
-```
+```yaml
 apiVersion: snapshot.storage.k8s.io/v1beta1
 kind: VolumeSnapshot
 metadata:
   name: test-snapshot
 spec:
   source:
-        volumeSnapshotContentName: test-content
+    volumeSnapshotContentName: test-content
 ```
 
 ## 볼륨 스냅샷 컨텐츠
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index f57a003d13..13917ecfef 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -150,7 +150,7 @@ awsElasticBlockStore 의 CSI 마이그레이션 기능이 활성화된 경우, 
 드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [AWS EBS CSI
 드라이버](https://github.com/kubernetes-sigs/aws-ebs-csi-driver)
 를 설치하고 `CSIMigration` 과 `CSIMigrationAWS`
-베타 기능을 활성화 해야 한다.
+베타 기능을 활성화해야 한다.
 
 #### CSI 마이그레이션 완료
 {{< feature-state for_k8s_version="v1.17" state="alpha" >}}
@@ -165,14 +165,14 @@ awsElasticBlockStore 의 CSI 마이그레이션 기능이 활성화된 경우, 
 
 #### CSI 마이그레이션
 
-{{< feature-state for_k8s_version="v1.15" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
 azureDisk의 CSI 마이그레이션 기능이 활성화된 경우, 기존 트리 내 플러그인에서
 `disk.csi.azure.com` 컨테이너 스토리지 인터페이스(CSI)
 드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [Azure 디스크 CSI
 드라이버](https://github.com/kubernetes-sigs/azuredisk-csi-driver)
 를 설치하고 `CSIMigration` 과 `CSIMigrationAzureDisk`
-알파 기능을 활성화 해야 한다.
+기능을 활성화해야 한다.
 
 ### azureFile {#azurefile}
 
@@ -190,7 +190,7 @@ azureFile의 CSI 마이그레이션 기능이 활성화된 경우, 기존 트리
 드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [Azure 파일 CSI
 드라이버](https://github.com/kubernetes-sigs/azurefile-csi-driver)
 를 설치하고 `CSIMigration` 과 `CSIMigrationAzureFile`
-알파 기능을 활성화 해야 한다.
+알파 기능을 활성화해야 한다.
 
 ### cephfs {#cephfs}
 
@@ -493,7 +493,7 @@ GCE PD의 CSI 마이그레이션 기능이 활성화된 경우 기존 트리 내
 드라이버로 모든 플러그인 작업을 수행한다. 이 기능을 사용하려면, 클러스터에 [GCE PD CSI
 드라이버](https://github.com/kubernetes-sigs/gcp-compute-persistent-disk-csi-driver)
 를 설치하고 `CSIMigration` 과 `CSIMigrationGCE`
-베타 기능을 활성화 해야 한다.
+베타 기능을 활성화해야 한다.
 
 ### gitRepo (사용 중단(deprecated)) {#gitrepo}
 
@@ -1151,6 +1151,38 @@ spec:
 
 더 많은 예시는 [여기](https://github.com/kubernetes/examples/tree/master/staging/volumes/vsphere)에서 확인할 수 있다.
 
+#### CSI 마이그레이션
+
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+vsphereVolume용 CSI 마이그레이션 기능이 활성화되면, 기존 인-트리 플러그인에서
+`csi.vsphere.vmware.com` {{< glossary_tooltip text="CSI" term_id="csi" >}} 드라이버로 모든 플러그인 작업을 shim한다.
+이 기능을 사용하려면, [vSphere CSI
+드라이버](https://github.com/kubernetes-sigs/vsphere-csi-driver)가
+클러스터에 설치되어야 하며 `CSIMigration` 및 `CSIMigrationvSphere`
+[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가 활성화되어 있어야 한다.
+
+또한 최소 vSphere vCenter/ESXi 버전은 7.0u1이고 최소 HW 버전은 VM 버전 15여야 한다.
+
+{{< note >}}
+빌트인 vsphereVolume 플러그인의 다음 스토리지클래스 파라미터는 vSphere CSI 드라이버에서 지원되지 않는다.
+
+* `diskformat`
+* `hostfailurestotolerate`
+* `forceprovisioning`
+* `cachereservation`
+* `diskstripes`
+* `objectspacereservation`
+* `iopslimit`
+
+이러한 파라미터를 사용하여 생성된 기존 볼륨은 vSphere CSI 드라이버로 마이그레이션되지만, vSphere CSI 드라이버에서 생성된 새 볼륨은 이러한 파라미터를 따르지 않는다.
+{{< /note >}}
+
+#### CSI 마이그레이션 완료
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+vsphereVolume 플러그인이 컨트롤러 관리자와 kubelet에 의해 로드되지 않도록 기능을 비활성화하려면, 이 기능 플래그를 true로 설정해야 한다. 이를 위해서는 모든 워커 노드에 `csi.vsphere.vmware.com` {{< glossary_tooltip text="CSI" term_id="csi" >}} 드라이버가 설치되어 있어야 한다.
+
 
 ## subPath 사용하기
 
@@ -1194,7 +1226,6 @@ spec:
 
 
 `subPathExpr` 필드를 사용해서 Downward API 환경 변수로부터 `subPath` 디렉터리 이름을 구성한다.
-이 기능을 사용하려면 `VolumeSubpathEnvExpansion` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화 해야 한다. 쿠버네티스 1.15에서는 시작 시 기본적으로 활성화되어 있다.
 `subPath` 와 `subPathExpr` 속성은 상호 배타적이다.
 
 이 예제는 파드가 `subPathExpr` 을 사용해서 Downward API로부터 파드 이름을 사용해서 hostPath 볼륨 `/var/log/pods` 내에 `pod1` 디렉터리를 생성한다.  호스트 디렉터리 `/var/log/pods/pod1` 은 컨테이너의 `/logs` 에 마운트 된다.
@@ -1284,8 +1315,11 @@ CSI 호환 볼륨 드라이버가 쿠버네티스 클러스터에 배포되면
 `csi` 볼륨 유형을 사용해서 CSI 드라이버에 의해 노출된 볼륨에 연결, 마운트,
 등을 할 수 있다.
 
-`csi` 볼륨 유형은 파드에서의 직접 참조를 지원하지 않으며
-`PersistentVolumeClaim` 오브젝트를 통해 파드에서 참조할 수 있다.
+`csi` 볼륨은 세 가지 방법으로 파드에서 사용할 수 있다.
+- [`persistentVolumeClaim`](#persistentvolumeclaim)에 대한 참조를 통해서
+- [일반 임시 볼륨](/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volume)과 함께 (알파 기능)
+- 드라이버가 지원하는 경우
+  [CSI 임시 볼륨](/docs/concepts/storage/ephemeral-volumes/#csi-ephemeral-volume) (베타 기능)
 
 스토리지 관리자가 다음 필드를 사용해서 CSI 퍼시스턴트 볼륨을
 구성할 수 있다.
@@ -1348,38 +1382,14 @@ CSI 설정 변경 없이 평소와 같이
 
 {{< feature-state for_k8s_version="v1.16" state="beta" >}}
 
-이 기능을 사용하면 CSI 볼륨을 퍼시스턴트볼륨 대신에 파드 사양에 직접적으로 포함할 수 있다.
-이러한 방식으로 지정된 볼륨은 임시적이고 파드 재시작시에는 유지되지 않는다.
+파드 명세 내에서 CSI 볼륨을 직접 구성할 수
+있다. 이 방식으로 지정된 볼륨은 임시 볼륨이며
+파드가 다시 시작할 때 지속되지 않는다. 자세한 내용은 [임시
+볼륨](/docs/concepts/storage/ephemeral-volumes/#csi-ephemeral-volume)을
+참고한다.
 
-예시
+#### {{% heading "whatsnext" %}}
 
-```yaml
-kind: Pod
-apiVersion: v1
-metadata:
-  name: my-csi-app
-spec:
-  containers:
-    - name: my-frontend
-      image: busybox
-      volumeMounts:
-      - mountPath: "/data"
-        name: my-csi-inline-vol
-      command: [ "sleep", "1000000" ]
-  volumes:
-    - name: my-csi-inline-vol
-      csi:
-        driver: inline.storage.kubernetes.io
-        volumeAttributes:
-          foo: bar
-```
-
-이 기능을 사용하려면 CSIInlineVolume 기능 게이트를 활성화 해야 한다.
-쿠버네티스 1.16 시작시 기본적으로 활성화 되어있다.
-
-CSI 임시 볼륨은 CSI 드라이버의 하위집합에서만 지원된다. CSI 드라이버의 목록은 [여기](https://kubernetes-csi.github.io/docs/drivers.html)를 본다.
-
-# 개발자 리소스
 CSI 드라이버의 개발 방법에 대한 더 자세한 정보는 [쿠버네티스-csi
 문서](https://kubernetes-csi.github.io/docs/)를 참조한다.
 
diff --git a/content/ko/docs/concepts/workloads/controllers/daemonset.md b/content/ko/docs/concepts/workloads/controllers/daemonset.md
index dca5a651f4..3fd5f2830a 100644
--- a/content/ko/docs/concepts/workloads/controllers/daemonset.md
+++ b/content/ko/docs/concepts/workloads/controllers/daemonset.md
@@ -1,7 +1,7 @@
 ---
 title: 데몬셋
 content_type: concept
-weight: 50
+weight: 40
 ---
 
 <!-- overview -->
diff --git a/content/ko/docs/concepts/workloads/controllers/deployment.md b/content/ko/docs/concepts/workloads/controllers/deployment.md
index e782c7c60d..0e5c5e94fb 100644
--- a/content/ko/docs/concepts/workloads/controllers/deployment.md
+++ b/content/ko/docs/concepts/workloads/controllers/deployment.md
@@ -6,7 +6,7 @@ feature:
     쿠버네티스는 애플리케이션 또는 애플리케이션의 설정 변경시 점진적으로 롤아웃하는 동시에 애플리케이션을 모니터링해서 모든 인스턴스가 동시에 종료되지 않도록 보장한다. 만약 어떤 문제가 발생하면 쿠버네티스는 변경 사항을 롤백한다. 성장하는 디플로이먼트 솔루션 생태계를 이용한다.
 
 content_type: concept
-weight: 30
+weight: 10
 ---
 
 <!-- overview -->
@@ -82,7 +82,7 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
 2. `kubectl get deployments` 을 실행해서 디플로이먼트가 생성되었는지 확인한다.
 
   만약 디플로이먼트가 여전히 생성 중이면, 다음과 유사하게 출력된다.
-   ```shell
+   ```
    NAME               READY   UP-TO-DATE   AVAILABLE   AGE
    nginx-deployment   0/3     0            0           1s
    ```
@@ -98,21 +98,21 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
 3. 디플로이먼트의 롤아웃 상태를 보려면, `kubectl rollout status deployment.v1.apps/nginx-deployment` 를 실행한다.
 
    다음과 유사하게 출력된다.
-   ```shell
+   ```
    Waiting for rollout to finish: 2 out of 3 new replicas have been updated...
    deployment.apps/nginx-deployment successfully rolled out
    ```
 
 4. 몇 초 후 `kubectl get deployments` 를 다시 실행한다.
    다음과 유사하게 출력된다.
-   ```shell
+   ```
    NAME               READY   UP-TO-DATE   AVAILABLE   AGE
    nginx-deployment   3/3     3            3           18s
    ```
    디플로이먼트에서 3개의 레플리카가 생성되었고, 모든 레플리카는 최신 상태(최신 파드 템플릿을 포함)이며 사용 가능한 것을 알 수 있다.
 
 5. 디플로이먼트로 생성된 레플리카셋(`rs`)을 보려면, `kubectl get rs` 를 실행한다. 다음과 유사하게 출력된다.
-   ```shell
+   ```
    NAME                          DESIRED   CURRENT   READY   AGE
    nginx-deployment-75675f5897   3         3         3       18s
    ```
@@ -129,7 +129,7 @@ kubectl apply -f https://k8s.io/examples/controllers/nginx-deployment.yaml
 
 6. 각 파드에 자동으로 생성된 레이블을 보려면, `kubectl get pods --show-labels` 를 실행한다.
    다음과 유사하게 출력된다.
-   ```shell
+   ```
    NAME                                READY     STATUS    RESTARTS   AGE       LABELS
    nginx-deployment-75675f5897-7ci7o   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
    nginx-deployment-75675f5897-kzszj   1/1       Running   0          18s       app=nginx,pod-template-hash=3123191453
diff --git a/content/ko/docs/concepts/workloads/controllers/garbage-collection.md b/content/ko/docs/concepts/workloads/controllers/garbage-collection.md
index 902326a9a4..21bfce8fc2 100644
--- a/content/ko/docs/concepts/workloads/controllers/garbage-collection.md
+++ b/content/ko/docs/concepts/workloads/controllers/garbage-collection.md
@@ -1,7 +1,7 @@
 ---
 title: 가비지(Garbage) 수집
 content_type: concept
-weight: 70
+weight: 60
 ---
 
 <!-- overview -->
diff --git a/content/ko/docs/concepts/workloads/controllers/job.md b/content/ko/docs/concepts/workloads/controllers/job.md
index a77678a975..e69761b9e6 100644
--- a/content/ko/docs/concepts/workloads/controllers/job.md
+++ b/content/ko/docs/concepts/workloads/controllers/job.md
@@ -1,11 +1,11 @@
 ---
-title: 잡 - 실행부터 완료까지
+title: 잡
 content_type: concept
 feature:
   title: 배치 실행
   description: >
     쿠버네티스는 서비스 외에도 배치와 CI 워크로드를 관리할 수 있으며, 원하는 경우 실패한 컨테이너를 교체할 수 있다.
-weight: 70
+weight: 50
 ---
 
 <!-- overview -->
@@ -116,6 +116,7 @@ kubectl logs $pods
 
 `.spec.template` 은 `.spec` 의 유일한 필수 필드이다.
 
+
 `.spec.template` 은 [파드 템플릿](/ko/docs/concepts/workloads/pods/#파드-템플릿)이다. 이것은 `apiVersion` 또는 `kind` 가 없다는 것을 제외한다면 {{< glossary_tooltip text="파드" term_id="pod" >}}와 정확하게 같은 스키마를 가지고 있다.
 
 추가로 파드의 필수 필드 외에도 잡의 파드 템플릿은 적절한
@@ -129,7 +130,7 @@ kubectl logs $pods
 [자신의 파드 셀렉터를 지정하기](#자신의-파드-셀렉터를-지정하기) 섹션을 참고한다.
 
 
-### 병렬 잡
+### 잡에 대한 병렬 실행 {#parallel-jobs}
 
 잡으로 실행하기에 적합한 작업 유형은 크게 세 가지가 있다.
 
@@ -212,9 +213,6 @@ _작업 큐_ 잡은 `.spec.completions` 를 설정하지 않은 상태로 두고
 해당 시간 동안 잡에 대한 다른 파드가 실패 없이 성공했을 때 백 오프
 카운트가 재설정된다.
 
-{{< note >}}
-1.12 이전 버전의 쿠버네티스 버전에 대해 여전히 [#54870](https://github.com/kubernetes/kubernetes/issues/54870) 이슈가 있다.
-{{< /note >}}
 {{< note >}}
 만약 잡에 `restartPolicy = "OnFailure"` 가 있는 경우 잡 백오프 한계에
 도달하면 잡을 실행 중인 컨테이너가 종료된다. 이로 인해 잡 실행 파일의 디버깅이
diff --git a/content/ko/docs/concepts/workloads/controllers/replicaset.md b/content/ko/docs/concepts/workloads/controllers/replicaset.md
index a23c3605cf..5c0852dc12 100644
--- a/content/ko/docs/concepts/workloads/controllers/replicaset.md
+++ b/content/ko/docs/concepts/workloads/controllers/replicaset.md
@@ -1,7 +1,7 @@
 ---
 title: 레플리카셋
 content_type: concept
-weight: 10
+weight: 20
 ---
 
 <!-- overview -->
@@ -241,9 +241,10 @@ API 버전에 대해서는 `frontend.yaml` 예제의 첫 번째 줄을 참고한
 `.spec.selector` 필드는 [레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/)이다.
 [앞서](#레플리카-셋의-작동-방식) 논의한 것처럼 이 레이블은 소유될 가능성이 있는 파드를 식별하는데 사용된다.
 우리 `frontend.yaml` 예제에서의 셀렉터는 다음과 같다.
-```shell
+
+```yaml
 matchLabels:
-	tier: frontend
+  tier: frontend
 ```
 
 레플리카셋에서 `.spec.template.metadata.labels`는 `spec.selector`과 일치해야 하며
diff --git a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
index e800a253d7..5c5b5c750f 100644
--- a/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
+++ b/content/ko/docs/concepts/workloads/controllers/replicationcontroller.md
@@ -7,7 +7,7 @@ feature:
     오류가 발생한 컨테이너를 재시작하고, 노드가 죽었을 때 컨테이너를 교체하기 위해 다시 스케줄하고, 사용자 정의 상태 체크에 응답하지 않는 컨테이너를 제거하며, 서비스를 제공할 준비가 될 때까지 클라이언트에 해당 컨테이너를 알리지 않는다.
 
 content_type: concept
-weight: 20
+weight: 90
 ---
 
 <!-- overview -->
@@ -112,20 +112,20 @@ nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 다른 모든 쿠버네티스 컨피그와 마찬가지로 레플리케이션 컨트롤러는 `apiVersion`, `kind`, `metadata` 와 같은 필드가 필요하다.
 레플리케이션 컨트롤러 오브젝트의 이름은 유효한
 [DNS 서브도메인 이름](/ko/docs/concepts/overview/working-with-objects/names/#dns-서브도메인-이름)이어야 한다.
-컨피그 파일의 동작에 관련된 일반적인 정보는 다음을 참조하라 [쿠버네티스 오브젝트 관리 ](/ko/docs/concepts/overview/working-with-objects/object-management/).
+컨피그 파일의 동작에 관련된 일반적인 정보는 [쿠버네티스 오브젝트 관리](/ko/docs/concepts/overview/working-with-objects/object-management/)를 참고한다.
 
-레플리케이션 컨트롤러는 또한 [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status) 도 필요하다.
+레플리케이션 컨트롤러는 또한 [`.spec` section](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)도 필요하다.
 
 ### 파드 템플릿
 
 `.spec.template` 는 오직 `.spec` 필드에서 요구되는 것이다.
 
-`.spec.template` 는 [파드 템플릿](/ko/docs/concepts/workloads/pods/#파드-템플릿) 이다. 정확하게 {{< glossary_tooltip text="파드" term_id="pod" >}} 스키마와 동일하나, 중첩되어 있고 `apiVersion` 혹은 `kind`를 갖지 않는다.
+`.spec.template` 는 [파드 템플릿](/ko/docs/concepts/workloads/pods/#파드-템플릿)이다. 정확하게 {{< glossary_tooltip text="파드" term_id="pod" >}} 스키마와 동일하나, 중첩되어 있고 `apiVersion` 혹은 `kind`를 갖지 않는다.
 
 파드에 필요한 필드 외에도 레플리케이션 컨트롤러의 파드 템플릿은 적절한 레이블과 적절한 재시작 정책을 지정해야 한다. 레이블의 경우 다른 컨트롤러와
 중첩되지 않도록 하라. [파드 셀렉터](#파드-셀렉터)를 참조하라.
 
-오직 `Always` 와 동일한 [`.spec.template.spec.restartPolicy`](/ko/docs/concepts/workloads/pods/pod-lifecycle/#재시작-정책) 만 허용되며, 특별히 지정되지 않으면 기본값이다.
+오직 `Always` 와 동일한 [`.spec.template.spec.restartPolicy`](/ko/docs/concepts/workloads/pods/pod-lifecycle/#재시작-정책)만 허용되며, 특별히 지정되지 않으면 기본값이다.
 
 로컬 컨테이너의 재시작의 경우, 레플리케이션 컨트롤러는 노드의 에이전트에게 위임한다.
 예를 들어 [Kubelet](/docs/reference/command-line-tools-reference/kubelet/) 혹은 도커이다.
@@ -139,7 +139,7 @@ nginx-3ntk0 nginx-4ok8v nginx-qrm3m
 
 ### 파드 셀렉터
 
-`.spec.selector` 필드는 [레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/#레이블-셀렉터) 이다. 레플리케이션 컨트롤러는 셀렉터와 일치하는 레이블이 있는 모든 파드를 관리한다.
+`.spec.selector` 필드는 [레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/#레이블-셀렉터)이다. 레플리케이션 컨트롤러는 셀렉터와 일치하는 레이블이 있는 모든 파드를 관리한다.
 직접 생성하거나 삭제된 파드와 다른 사람이나 프로세스가 생성하거나
 삭제한 파드를 구분하지 않는다. 이렇게 하면 실행중인 파드에 영향을 주지 않고
 레플리케이션 컨트롤러를 교체할 수 있다.
@@ -181,14 +181,14 @@ REST API나 go 클라이언트 라이브러리를 사용하는 경우 명시적
 
 해당 파드에 영향을 주지 않고 레플리케이션 컨트롤러를 삭제할 수 있다.
 
-kubectl을 사용하여, [`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands#delete) 에 옵션으로 `--cascade=false`를 지정하라.
+kubectl을 사용하여, [`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands#delete)에 옵션으로 `--cascade=false`를 지정하라.
 
 REST API나 go 클라이언트 라이브러리를 사용하는 경우 간단히 레플리케이션 컨트롤러 오브젝트를 삭제하라.
 
 원본이 삭제되면 대체할 새로운 레플리케이션 컨트롤러를 생성하여 교체할 수 있다. 오래된 파드와 새로운 파드의 `.spec.selector` 가 동일하다면,
 새로운 레플리케이션 컨트롤러는 오래된 파드를 채택할 것이다. 그러나 기존 파드를
 새로운 파드 템플릿과 일치시키려는 노력은 하지 않을 것이다.
-새로운 spec에 대한 파드를 제어된 방법으로 업데이트하려면 [롤링 업데이트](#롤링-업데이트) 를 사용하라.
+새로운 spec에 대한 파드를 제어된 방법으로 업데이트하려면 [롤링 업데이트](#롤링-업데이트)를 사용하라.
 
 ### 레플리케이션 컨트롤러에서 파드 격리
 
@@ -208,7 +208,7 @@ REST API나 go 클라이언트 라이브러리를 사용하는 경우 간단히
 
 레플리케이션 컨트롤러는 파드를 하나씩 교체함으로써 서비스에 대한 롤링 업데이트를 쉽게 하도록 설계되었다.
 
-[#1353](https://issue.k8s.io/1353) 에서 설명한 것처럼, 권장되는 접근법은 1 개의 레플리카를 가진 새로운 레플리케이션 컨트롤러를 생성하고 새로운 (+1) 컨트롤러 및 이전 (-1) 컨트롤러를 차례대로 스케일한 후 0개의 레플리카가 되면 이전 컨트롤러를 삭제하는 것이다. 예상치 못한 오류와 상관없이 파드 세트를 예측 가능하게 업데이트한다.
+[#1353](https://issue.k8s.io/1353)에서 설명한 것처럼, 권장되는 접근법은 1 개의 레플리카를 가진 새로운 레플리케이션 컨트롤러를 생성하고 새로운 (+1) 컨트롤러 및 이전 (-1) 컨트롤러를 차례대로 스케일한 후 0개의 레플리카가 되면 이전 컨트롤러를 삭제하는 것이다. 예상치 못한 오류와 상관없이 파드 세트를 예측 가능하게 업데이트한다.
 
 이상적으로 롤링 업데이트 컨트롤러는 애플리케이션 준비 상태를 고려하며 주어진 시간에 충분한 수의 파드가 생산적으로 제공되도록 보장할 것이다.
 
@@ -229,15 +229,15 @@ REST API나 go 클라이언트 라이브러리를 사용하는 경우 간단히
 
 ## 레플리케이션을 위한 프로그램 작성
 
-레플리케이션 컨트롤러에 의해 생성된 파드는 해당 구성이 시간이 지남에 따라 이질적이 될 수 있지만 균일하고 의미상 동일하도록 설계되었다. 이는 레플리카된 상태 스테이트리스 서버에 적합하지만 레플리케이션 컨트롤러를 사용하여 마스터 선출, 샤드 및 워크-풀 애플리케이션의 가용성을 유지할 수도 있다. [RabbitMQ work queues](https://www.rabbitmq.com/tutorials/tutorial-two-python.html) 와 같은 애플리케이션은 안티패턴으로 간주되는 각 파드의 구성에 대한 정적/일회성 사용자 정의와 반대로 동적 작업 할당 메커니즘을 사용해야 한다. 리소스의 수직 자동 크기 조정 (예 : CPU 또는 메모리)과 같은 수행된 모든 파드 사용자 정의는 레플리케이션 컨트롤러 자체와 달리 다른 온라인 컨트롤러 프로세스에 의해 수행되어야 한다.
+레플리케이션 컨트롤러에 의해 생성된 파드는 해당 구성이 시간이 지남에 따라 이질적이 될 수 있지만 균일하고 의미상 동일하도록 설계되었다. 이는 레플리카된 상태 스테이트리스 서버에 적합하지만 레플리케이션 컨트롤러를 사용하여 마스터 선출, 샤드 및 워크-풀 애플리케이션의 가용성을 유지할 수도 있다. [RabbitMQ work queues](https://www.rabbitmq.com/tutorials/tutorial-two-python.html)와 같은 애플리케이션은 안티패턴으로 간주되는 각 파드의 구성에 대한 정적/일회성 사용자 정의와 반대로 동적 작업 할당 메커니즘을 사용해야 한다. 리소스의 수직 자동 크기 조정 (예 : CPU 또는 메모리)과 같은 수행된 모든 파드 사용자 정의는 레플리케이션 컨트롤러 자체와 달리 다른 온라인 컨트롤러 프로세스에 의해 수행되어야 한다.
 
 ## 레플리케이션 컨트롤러의 책임
 
 레플리케이션 컨트롤러는 의도한 수의 파드가 해당 레이블 선택기와 일치하고 동작하는지를 단순히 확인한다. 현재, 종료된 파드만 해당 파드의 수에서 제외된다. 향후 시스템에서 사용할 수 있는 [readiness](https://issue.k8s.io/620) 및 기타 정보가 고려될 수 있으며 교체 정책에 대한 통제를 더 추가 할 수 있고 외부 클라이언트가 임의로 정교한 교체 또는 스케일 다운 정책을 구현하기 위해 사용할 수 있는 이벤트를 내보낼 계획이다.
 
-레플리케이션 컨트롤러는 이 좁은 책임에 영원히 제약을 받는다. 그 자체로는 준비성 또는 활성 프로브를 실행하지 않을 것이다. 오토 스케일링을 수행하는 대신, 외부 오토 스케일러 ([#492](https://issue.k8s.io/492)에서 논의된) 가 레플리케이션 컨트롤러의 `replicas` 필드를 변경함으로써 제어되도록 의도되었다. 레플리케이션 컨트롤러에 스케줄링 정책 (예를 들어 [spreading](https://issue.k8s.io/367#issuecomment-48428019)) 을 추가하지 않을 것이다. 오토사이징 및 기타 자동화 된 프로세스를 방해할 수 있으므로 제어된 파드가 현재 지정된 템플릿과 일치하는지 확인해야 한다. 마찬가지로 기한 완료, 순서 종속성, 구성 확장 및 기타 기능은 다른 곳에 속한다. 대량의 파드 생성 메커니즘 ([#170](https://issue.k8s.io/170)) 까지도 고려해야 한다.
+레플리케이션 컨트롤러는 이 좁은 책임에 영원히 제약을 받는다. 그 자체로는 준비성 또는 활성 프로브를 실행하지 않을 것이다. 오토 스케일링을 수행하는 대신, 외부 오토 스케일러 ([#492](https://issue.k8s.io/492)에서 논의된)가 레플리케이션 컨트롤러의 `replicas` 필드를 변경함으로써 제어되도록 의도되었다. 레플리케이션 컨트롤러에 스케줄링 정책 (예를 들어 [spreading](https://issue.k8s.io/367#issuecomment-48428019))을 추가하지 않을 것이다. 오토사이징 및 기타 자동화 된 프로세스를 방해할 수 있으므로 제어된 파드가 현재 지정된 템플릿과 일치하는지 확인해야 한다. 마찬가지로 기한 완료, 순서 종속성, 구성 확장 및 기타 기능은 다른 곳에 속한다. 대량의 파드 생성 메커니즘 ([#170](https://issue.k8s.io/170))까지도 고려해야 한다.
 
-레플리케이션 컨트롤러는 조합 가능한 빌딩-블록 프리미티브가 되도록 고안되었다. 향후 사용자의 편의를 위해 더 상위 수준의 API 및/또는 도구와 그리고 다른 보완적인 기본 요소가 그 위에 구축 될 것으로 기대한다. 현재 kubectl이 지원하는 "매크로" 작업 (실행, 스케일)은 개념 증명의 예시이다. 예를 들어 [Asgard](https://techblog.netflix.com/2012/06/asgard-web-based-cloud-management-and.html) 와 같이 레플리케이션 컨트롤러, 오토 스케일러, 서비스, 정책 스케줄링, 카나리 등을 관리할 수 있다.
+레플리케이션 컨트롤러는 조합 가능한 빌딩-블록 프리미티브가 되도록 고안되었다. 향후 사용자의 편의를 위해 더 상위 수준의 API 및/또는 도구와 그리고 다른 보완적인 기본 요소가 그 위에 구축 될 것으로 기대한다. 현재 kubectl이 지원하는 "매크로" 작업 (실행, 스케일)은 개념 증명의 예시이다. 예를 들어 [Asgard](https://techblog.netflix.com/2012/06/asgard-web-based-cloud-management-and.html)와 같이 레플리케이션 컨트롤러, 오토 스케일러, 서비스, 정책 스케줄링, 카나리 등을 관리할 수 있다.
 
 
 ## API 오브젝트
@@ -250,14 +250,14 @@ API 오브젝트에 대한 더 자세한 것은
 
 ### 레플리카셋
 
-[`레플리카셋`](/ko/docs/concepts/workloads/controllers/replicaset/)은 새로운 [집합성 기준 레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/#집합성-기준-요건) 이다.
-이것은 주로 [`디플로이먼트`](/ko/docs/concepts/workloads/controllers/deployment/) 에 의해 파드의 생성, 삭제 및 업데이트를 오케스트레이션 하는 메커니즘으로 사용된다.
+[`ReplicaSet`](/ko/docs/concepts/workloads/controllers/replicaset/)은 새로운 [집합성 기준 레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/#집합성-기준-요건)이다.
+이것은 주로 [디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/)에 의해 파드의 생성, 삭제 및 업데이트를 오케스트레이션 하는 메커니즘으로 사용된다.
 사용자 지정 업데이트 조정이 필요하거나 업데이트가 필요하지 않은 경우가 아니면 레플리카셋을 직접 사용하는 대신 디플로이먼트를 사용하는 것이 좋다.
 
 
 ### 디플로이먼트 (권장되는)
 
-[`디플로이먼트`](/ko/docs/concepts/workloads/controllers/deployment/) 는 기본 레플리카셋과 그 파드를 업데이트하는 상위 수준의 API 오브젝트이다. 선언적이며, 서버 사이드이고, 추가 기능이 있기 때문에 롤링 업데이트 기능을 원한다면 디플로이먼트를 권장한다.
+[`Deployment`](/ko/docs/concepts/workloads/controllers/deployment/)는 기본 레플리카셋과 그 파드를 업데이트하는 상위 수준의 API 오브젝트이다. 선언적이며, 서버 사이드이고, 추가 기능이 있기 때문에 롤링 업데이트 기능을 원한다면 디플로이먼트를 권장한다.
 
 ### 베어 파드
 
@@ -266,12 +266,12 @@ API 오브젝트에 대한 더 자세한 것은
 ### 잡
 
 자체적으로 제거될 것으로 예상되는 파드 (즉, 배치 잡)의 경우
-레플리케이션 컨트롤러 대신 [`잡`](/ko/docs/concepts/workloads/controllers/job/)을 사용하라.
+레플리케이션 컨트롤러 대신 [`Job`](/ko/docs/concepts/workloads/controllers/job/)을 사용하라.
 
 ### 데몬셋
 
 머신 모니터링이나 머신 로깅과 같은 머신 레벨 기능을 제공하는 파드에는 레플리케이션 컨트롤러 대신
-[`데몬셋`](/ko/docs/concepts/workloads/controllers/daemonset/)을 사용하라. 이런 파드들의 수명은 머신의 수명에 달려 있다.
+[`DaemonSet`](/ko/docs/concepts/workloads/controllers/daemonset/)을 사용하라. 이런 파드들의 수명은 머신의 수명에 달려 있다.
 다른 파드가 시작되기 전에 파드가 머신에서 실행되어야 하며,
 머신이 재부팅/종료 준비가 되어 있을 때 안전하게 종료된다.
 
diff --git a/content/ko/docs/concepts/workloads/controllers/statefulset.md b/content/ko/docs/concepts/workloads/controllers/statefulset.md
index d588276b25..6b8299a0c3 100644
--- a/content/ko/docs/concepts/workloads/controllers/statefulset.md
+++ b/content/ko/docs/concepts/workloads/controllers/statefulset.md
@@ -1,7 +1,7 @@
 ---
 title: 스테이트풀셋
 content_type: concept
-weight: 40
+weight: 30
 ---
 
 <!-- overview -->
diff --git a/content/ko/docs/concepts/workloads/pods/_index.md b/content/ko/docs/concepts/workloads/pods/_index.md
index 42e0b14607..1daf452200 100644
--- a/content/ko/docs/concepts/workloads/pods/_index.md
+++ b/content/ko/docs/concepts/workloads/pods/_index.md
@@ -255,7 +255,7 @@ kubelet은 자동으로 각 정적 파드에 대한 쿠버네티스 API 서버
 * [런타임클래스(RuntimeClass)](/ko/docs/concepts/containers/runtime-class/)와 이를 사용하여
   다양한 컨테이너 런타임 구성으로 다양한 파드를 설정하는 방법에 대해 알아본다.
 * [파드 토폴로지 분배 제약 조건](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/)에 대해 읽어본다.
-* [PodDisruptionBudget](https://kubernetes.io/ko/docs/concepts/workloads/pods/disruptions/)과 이를 사용하여 서비스 중단 중에 애플리케이션 가용성을 관리하는 방법에 대해 읽어본다.
+* [PodDisruptionBudget](/ko/docs/concepts/workloads/pods/disruptions/)과 이를 사용하여 서비스 중단 중에 애플리케이션 가용성을 관리하는 방법에 대해 읽어본다.
 * 파드는 쿠버네티스 REST API의 최상위 리소스이다.
   [파드](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#pod-v1-core)
   오브젝트 정의는 오브젝트를 상세히 설명한다.
diff --git a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
index 43d54aff46..a84fb28b4c 100644
--- a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -45,7 +45,7 @@ ID([UID](/ko/docs/concepts/overview/working-with-objects/names/#uids))가
 상대적으로 일회용인 파드 인스턴스를 관리하는 작업을 처리한다.
 
 UID로 정의된 특정 파드는 다른 노드로 절대 "다시 스케줄"되지 않는다. 대신,
-해당 파드는 사용자가 원하는 이름은 같지만, UID가 다른, 거의 동일한 새 파드로
+해당 파드는 사용자가 원한다면 이름은 같지만, UID가 다른, 거의 동일한 새 파드로
 대체될 수 있다.
 
 {{< glossary_tooltip term_id="volume" text="볼륨" >}}과
@@ -118,7 +118,7 @@ UID로 정의된 특정 파드는 다른 노드로 절대 "다시 스케줄"되
 ### `Running` {#container-state-running}
 
 `Running` 상태는 컨테이너가 문제없이 실행되고 있음을 나타낸다. `postStart` 훅이
-구성되어 있었다면, 이미 실행이 완료되었다. `kubectl` 을
+구성되어 있었다면, 이미 실행되고 완료되었다. `kubectl` 을
 사용하여 컨테이너가 `Running` 인 파드를 쿼리하면, 컨테이너가 `Running` 상태에 진입한 시기에 대한
 정보도 볼 수 있다.
 
@@ -341,7 +341,7 @@ kubelet은 실행 중인 컨테이너들에 대해서 선택적으로 세 가지
 적용되면, {{< glossary_tooltip text="kubelet" term_id="kubelet" >}}은 정상
 종료를 시도한다.
 
-일반적으로, 컨테이너 런타임은 TERM 시그널을 각 컨테이너의 기본 프로세스로
+일반적으로, 컨테이너 런타임은 각 컨테이너의 기본 프로세스에 TERM 신호를
 전송한다. 일단 유예 기간이 만료되면, KILL 시그널이 나머지 프로세스로
 전송되고, 그런 다음 파드는
 {{< glossary_tooltip text="API 서버" term_id="kube-apiserver" >}}로부터 삭제된다. 프로세스가
diff --git a/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index 8fe6e45134..c81db66021 100644
--- a/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -6,8 +6,6 @@ weight: 40
 
 <!-- overview -->
 
-{{< feature-state for_k8s_version="v1.18" state="beta" >}}
-
 사용자는 _토폴로지 분배 제약 조건_ 을 사용해서 지역, 영역, 노드 그리고 기타 사용자-정의 토폴로지 도메인과 같이 장애-도메인으로 설정된 클러스터에 걸쳐 파드가 분산되는 방식을 제어할 수 있다. 이를 통해 고가용성뿐만 아니라, 효율적인 리소스 활용의 목적을 이루는 데 도움이 된다.
 
 
@@ -16,13 +14,6 @@ weight: 40
 
 ## 필수 구성 요소
 
-### 기능 게이트 활성화
-
-를 참조한다. {{< glossary_tooltip text="API 서버" term_id="kube-apiserver" >}} **와**
-{{< glossary_tooltip text="스케줄러" term_id="kube-scheduler" >}}에 대해
-`EvenPodsSpread` [기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)가
-활성화되어야 한다.
-
 ### 노드 레이블
 
 토폴로지 분배 제약 조건은 노드 레이블을 의지해서 각 노드가 속한 토폴로지 도메인(들)을 인식한다. 예를 들어, 노드에 다음과 같은 레이블을 가지고 있을 수 있다. `node=node1,zone=us-east-1a,region=us-east-1`
@@ -53,7 +44,7 @@ node4   Ready    <none>   2m43s   v1.16.0   node=node4,zone=zoneB
 
 ### API
 
-`pod.spec.topologySpreadConstraints` 필드는 1.16에서 다음과 같이 도입되었다.
+API 필드 `pod.spec.topologySpreadConstraints` 는 다음과 같이 정의된다.
 
 ```
 apiVersion: v1
@@ -70,7 +61,15 @@ spec:
 
 사용자는 하나 또는 다중 `topologySpreadConstraint` 를 정의해서 kube-scheduler 에게 클러스터에 걸쳐 있는 기존 파드와 시작하는 각각의 파드와 연관하여 배치하는 방법을 명령할 수 있다. 필드는 다음과 같다.
 
-- **maxSkew** 는 파드가 균등하지 않게 분산될 수 있는 정도를 나타낸다. 이것은 주어진 토폴로지 유형의 임의의 두 토폴로지 도메인에 일치하는 파드의 수 사이에서 허용되는 차이의 최댓값이다. 이것은 0보다는 커야 한다.
+- **maxSkew** 는 파드가 균등하지 않게 분산될 수 있는 정도를 나타낸다.
+  이것은 주어진 토폴로지 유형의 임의의 두 토폴로지 도메인에 일치하는
+  파드의 수 사이에서 허용되는 차이의 최댓값이다. 이것은 0보다는 커야
+  한다. 그 의미는 `whenUnsatisfiable` 의 값에 따라 다르다.
+  - `whenUnsatisfiable` 이 "DoNotSchedule"과 같을 때, `maxSkew` 는
+    대상 토폴로지에서 일치하는 파드 수와 전역 최솟값 사이에
+    허용되는 최대 차이이다.
+  - `whenUnsatisfiable` 이 "ScheduleAnyway"와 같으면, 스케줄러는
+    왜곡을 줄이는데 도움이 되는 토폴로지에 더 높은 우선 순위를 부여한다.
 - **topologyKey** 는 노드 레이블의 키다. 만약 두 노드가 이 키로 레이블이 지정되고, 레이블이 동일한 값을 가진다면 스케줄러는 두 노드를 같은 토폴로지에 있는것으로 여기게 된다. 스케줄러는 각 토폴로지 도메인에 균형잡힌 수의 파드를 배치하려고 시도한다.
 - **whenUnsatisfiable** 는 분산 제약 조건을 만족하지 않을 경우에 처리하는 방법을 나타낸다.
   - `DoNotSchedule` (기본값)은 스케줄러에 스케줄링을 하지 말라고 알려준다.
@@ -186,7 +185,7 @@ spec:
 
 ### 클러스터 수준의 기본 제약 조건
 
-{{< feature-state for_k8s_version="v1.18" state="alpha" >}}
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
 클러스터에 대한 기본 토폴로지 분배 제약 조건을 설정할 수 있다. 기본
 토폴로지 분배 제약 조건은 다음과 같은 경우에만 파드에 적용된다.
@@ -194,7 +193,7 @@ spec:
 - `.spec.topologySpreadConstraints` 에는 어떠한 제약도 정의되어 있지 않는 경우.
 - 서비스, 레플리케이션컨트롤러(ReplicationController), 레플리카셋(ReplicaSet) 또는 스테이트풀셋(StatefulSet)에 속해있는 경우.
 
-기본 제약 조건은 [스케줄링 프로파일](/docs/reference/scheduling/profiles)에서
+기본 제약 조건은 [스케줄링 프로파일](/docs/reference/scheduling/config/#profiles)에서
 `PodTopologySpread` 플러그인의 일부로 설정할 수 있다.
 제약 조건은 `labelSelector` 가 비어 있어야 한다는 점을 제외하고, [위와 동일한 API](#api)로
 제약 조건을 지정한다. 셀렉터는 파드가 속한 서비스, 레플리케이션 컨트롤러,
@@ -203,7 +202,7 @@ spec:
 예시 구성은 다음과 같다.
 
 ```yaml
-apiVersion: kubescheduler.config.k8s.io/v1alpha2
+apiVersion: kubescheduler.config.k8s.io/v1beta1
 kind: KubeSchedulerConfiguration
 
 profiles:
@@ -212,18 +211,49 @@ profiles:
       args:
         defaultConstraints:
           - maxSkew: 1
-            topologyKey: failure-domain.beta.kubernetes.io/zone
+            topologyKey: topology.kubernetes.io/zone
             whenUnsatisfiable: ScheduleAnyway
 ```
 
 {{< note >}}
 기본 스케줄링 제약 조건에 의해 생성된 점수는
-[`DefaultPodTopologySpread` 플러그인](/docs/reference/scheduling/profiles/#scheduling-plugins)에
+[`SelectorSpread` 플러그인](/docs/reference/scheduling/config/#scheduling-plugins)에
 의해 생성된 점수와 충돌 할 수 있다.
 `PodTopologySpread` 에 대한 기본 제약 조건을 사용할 때 스케줄링 프로파일에서
 이 플러그인을 비활성화 하는 것을 권장한다.
 {{< /note >}}
 
+#### 내부 기본 제약
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+`DefaultPodTopologySpread` 기능 게이트를 활성화하면, 기존
+`SelectorSpread` 플러그인이 비활성화된다.
+kube-scheduler는 `PodTopologySpread` 플러그인 구성에 다음과 같은
+기본 토폴로지 제약 조건을 사용한다.
+
+```yaml
+defaultConstraints:
+  - maxSkew: 3
+    topologyKey: "kubernetes.io/hostname"
+    whenUnsatisfiable: ScheduleAnyway
+  - maxSkew: 5
+    topologyKey: "topology.kubernetes.io/zone"
+    whenUnsatisfiable: ScheduleAnyway
+```
+
+또한, 같은 동작을 제공하는 레거시 `SelectorSpread` 플러그인이
+비활성화된다.
+
+{{< note >}}
+노드에 `kubernetes.io/hostname` 및 `topology.kubernetes.io/zone`
+레이블 세트 **둘 다**가 설정되지 않을 것으로 예상되는 경우, 쿠버네티스 기본값을 사용하는
+대신 자체 제약 조건을 정의한다.
+
+`PodTopologySpread` 플러그인은 분배 제약 조건에 지정된 토폴로지 키가
+없는 노드에 점수를 매기지 않는다.
+{{< /note >}}
+
 ## 파드어피니티(PodAffinity)/파드안티어피니티(PodAntiAffinity)와의 비교
 
 쿠버네티스에서 "어피니티(Affinity)"와 관련된 지침은 파드가
@@ -234,13 +264,19 @@ profiles:
 - `PodAntiAffinity` 로는, 단일 토폴로지 도메인에
   단 하나의 파드만 스케줄 될 수 있다.
 
-"EvenPodsSpread" 기능은 다양한 토폴로지 도메인에 파드를 균등하게 분배해서
-고 가용성 또는 비용 절감을 달성할 수 있는 유연한 옵션을 제공한다. 또한 워크로드의 롤링 업데이트와 레플리카의 원활한 스케일링 아웃에 도움이 될 수 있다.
-더 자세한 내용은 [모티베이션(Motivation)](https://github.com/kubernetes/enhancements/tree/master/keps/sig-scheduling/895-pod-topology-spread#motivation)를 참조한다.
+더 세밀한 제어를 위해, 토폴로지 분배 제약 조건을 지정하여 다양한 토폴로지 도메인에 파드를
+분배해서 고 가용성 또는 비용 절감을 달성할 수 있는 유연한 옵션을
+제공한다. 또한 워크로드의 롤링 업데이트와 레플리카의 원활한 스케일링 아웃에 도움이 될 수 있다.
+더 자세한 내용은
+[모티베이션(Motivation)](https://github.com/kubernetes/enhancements/tree/master/keps/sig-scheduling/895-pod-topology-spread#motivation)를
+참고한다.
 
 ## 알려진 제한사항
 
-1.18을 기준으로 이 기능은 베타(Beta)이며, 몇 가지 알려진 제한사항이 있다.
-
 - 디플로이먼트를 스케일링 다운하면 그 결과로 파드의 분포가 불균형이 될 수 있다.
 - 파드와 일치하는 테인트(taint)가 된 노드가 존중된다. [이슈 80921](https://github.com/kubernetes/kubernetes/issues/80921)을 본다.
+
+## {{% heading "whatsnext" %}}
+
+- [블로그: PodTopologySpread 소개](https://kubernetes.io/blog/2020/05/introducing-podtopologyspread/)에서는
+  `maxSkew` 에 대해 자세히 설명하고, 몇 가지 고급 사용 예제를 제공한다.
diff --git a/content/ko/docs/reference/_index.md b/content/ko/docs/reference/_index.md
index 148abd29a3..b566402cf0 100644
--- a/content/ko/docs/reference/_index.md
+++ b/content/ko/docs/reference/_index.md
@@ -33,7 +33,7 @@ content_type: concept
 ## CLI 레퍼런스
 
 * [kubectl](/ko/docs/reference/kubectl/overview/) - 명령어를 실행하거나 쿠버네티스 클러스터를 관리하기 위해 사용하는 주된 CLI 도구.
-    * [JSONPath](/docs/reference/kubectl/jsonpath/) - kubectl에서 [JSONPath 표현](http://goessner.net/articles/JsonPath/)을 사용하기 위한 문법 가이드.
+    * [JSONPath](/docs/reference/kubectl/jsonpath/) - kubectl에서 [JSONPath 표현](https://goessner.net/articles/JsonPath/)을 사용하기 위한 문법 가이드.
 * [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) - 안정적인 쿠버네티스 클러스터를 쉽게 프로비전하기 위한 CLI 도구.
 
 ## 컴포넌트 레퍼런스
@@ -44,10 +44,10 @@ content_type: concept
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - 간단한 TCP/UDP 스트림 포워딩이나 백-엔드 집합에 걸쳐서 라운드-로빈 TCP/UDP 포워딩을 할 수 있다.
 * [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - 가용성, 성능 및 용량을 관리하는 스케줄러.
   * [kube-scheduler 정책](/docs/reference/scheduling/policies)
-  * [kube-scheduler 프로파일](/docs/reference/scheduling/profiles)
+  * [kube-scheduler 프로파일](/docs/reference/scheduling/config#profiles)
 
 ## 설계 문서
 
-쿠버네티스 기능에 대한 설계 문서의 아카이브. [쿠버네티스 아키텍처](https://git.k8s.io/community/contributors/design-proposals/architecture/architecture.md)와 [쿠버네티스 디자인 개요](https://git.k8s.io/community/contributors/design-proposals)가 좋은 출발점이다.
-
-
+쿠버네티스 기능에 대한 설계 문서의 아카이브.
+[쿠버네티스 아키텍처](https://git.k8s.io/community/contributors/design-proposals/architecture/architecture.md)와
+[쿠버네티스 디자인 개요](https://git.k8s.io/community/contributors/design-proposals)가 좋은 출발점이다.
diff --git a/content/ko/docs/reference/command-line-tools-reference/_index.md b/content/ko/docs/reference/command-line-tools-reference/_index.md
index 0639d05b15..14025d0f71 100644
--- a/content/ko/docs/reference/command-line-tools-reference/_index.md
+++ b/content/ko/docs/reference/command-line-tools-reference/_index.md
@@ -1,5 +1,4 @@
 ---
 title: 커맨드 라인 도구 레퍼런스
 weight: 60
-toc-hide: true
 ---
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index 1e2796b484..8992cb4999 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -67,7 +67,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIMigrationAWS` | `false` | 알파 | 1.14 | |
 | `CSIMigrationAWS` | `false` | 베타 | 1.17 | |
 | `CSIMigrationAWSComplete` | `false` | 알파 | 1.17 | |
-| `CSIMigrationAzureDisk` | `false` | 알파 | 1.15 | |
+| `CSIMigrationAzureDisk` | `false` | 알파 | 1.15 | 1.18 |
+| `CSIMigrationAzureDisk` | `false` | 베타 | 1.19 | |
 | `CSIMigrationAzureDiskComplete` | `false` | 알파 | 1.17 | |
 | `CSIMigrationAzureFile` | `false` | 알파 | 1.15 | |
 | `CSIMigrationAzureFileComplete` | `false` | 알파 | 1.17 | |
@@ -76,15 +77,20 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CSIMigrationGCEComplete` | `false` | 알파 | 1.17 | |
 | `CSIMigrationOpenStack` | `false` | 알파 | 1.14 | |
 | `CSIMigrationOpenStackComplete` | `false` | 알파 | 1.17 | |
+| `CSIMigrationvSphere` | `false` | 베타 | 1.19 | |
+| `CSIMigrationvSphereComplete` | `false` | 베타 | 1.19 | |
+| `CSIStorageCapacity` | `false` | 알파 | 1.19 | |
+| `CSIVolumeFSGroupPolicy` | `false` | 알파 | 1.19 | |
 | `ConfigurableFSGroupPolicy` | `false` | 알파 | 1.18 | |
 | `CustomCPUCFSQuotaPeriod` | `false` | 알파 | 1.12 | |
 | `CustomResourceDefaulting` | `false` | 알파| 1.15 | 1.15 |
 | `CustomResourceDefaulting` | `true` | 베타 | 1.16 | |
+| `DefaultPodTopologySpread` | `false` | 알파 | 1.19 | |
 | `DevicePlugins` | `false` | 알파 | 1.8 | 1.9 |
 | `DevicePlugins` | `true` | 베타 | 1.10 | |
+| `DisableAcceleratorUsageMetrics` | `false` | 알파 | 1.19 | 1.20 |
 | `DryRun` | `false` | 알파 | 1.12 | 1.12 |
 | `DryRun` | `true` | 베타 | 1.13 | |
-| `DynamicAuditing` | `false` | 알파 | 1.13 | |
 | `DynamicKubeletConfig` | `false` | 알파 | 1.4 | 1.10 |
 | `DynamicKubeletConfig` | `true` | 베타 | 1.11 | |
 | `EndpointSlice` | `false` | 알파 | 1.16 | 1.16 |
@@ -99,12 +105,13 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ExpandPersistentVolumes` | `false` | 알파 | 1.8 | 1.10 |
 | `ExpandPersistentVolumes` | `true` | 베타 | 1.11 | |
 | `ExperimentalHostUserNamespaceDefaulting` | `false` | 베타 | 1.5 | |
-| `EvenPodsSpread` | `false` | 알파 | 1.16 | 1.17 |
-| `EvenPodsSpread` | `true` | 베타 | 1.18 | |
+| `GenericEphemeralVolume` | `false` | 알파 | 1.19 | |
 | `HPAScaleToZero` | `false` | 알파 | 1.16 | |
-| `HugePageStorageMediumSize` | `false` | 알파 | 1.18 | |
+| `HugePageStorageMediumSize` | `false` | 알파 | 1.18 | 1.18 |
+| `HugePageStorageMediumSize` | `true` | 베타 | 1.19 | |
 | `HyperVContainer` | `false` | 알파 | 1.10 | |
-| `ImmutableEphemeralVolumes` | `false` | 알파 | 1.18 | |
+| `ImmutableEphemeralVolumes` | `false` | 알파 | 1.18 | 1.18 |
+| `ImmutableEphemeralVolumes` | `true` | 베타 | 1.19 | |
 | `IPv6DualStack` | `false` | 알파 | 1.16 | |
 | `KubeletPodResources` | `false` | 알파 | 1.13 | 1.14 |
 | `KubeletPodResources` | `true` | 베타 | 1.15 | |
@@ -113,34 +120,37 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `LocalStorageCapacityIsolation` | `true` | 베타 | 1.10 | |
 | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | 알파 | 1.15 | |
 | `MountContainers` | `false` | 알파 | 1.9 | |
-| `NodeDisruptionExclusion` | `false` | 알파 | 1.16 | |
-| `NonPreemptingPriority` | `false` | 알파 | 1.15 | |
+| `NodeDisruptionExclusion` | `false` | 알파 | 1.16 | 1.18 |
+| `NodeDisruptionExclusion` | `true` | 베타 | 1.19 | |
+| `NonPreemptingPriority` | `false` | 알파 | 1.15 | 1.18 |
+| `NonPreemptingPriority` | `true` | 베타 | 1.19 | |
 | `PodDisruptionBudget` | `false` | 알파 | 1.3 | 1.4 |
 | `PodDisruptionBudget` | `true` | 베타 | 1.5 | |
 | `PodOverhead` | `false` | 알파 | 1.16 | - |
 | `ProcMountType` | `false` | 알파 | 1.12 | |
 | `QOSReserved` | `false` | 알파 | 1.11 | |
 | `RemainingItemCount` | `false` | 알파 | 1.15 | |
-| `ResourceLimitsPriorityFunction` | `false` | 알파 | 1.9 | |
-| `RotateKubeletClientCertificate` | `true` | 베타 | 1.8 | |
 | `RotateKubeletServerCertificate` | `false` | 알파 | 1.7 | 1.11 |
 | `RotateKubeletServerCertificate` | `true` | 베타 | 1.12 | |
 | `RunAsGroup` | `true` | 베타 | 1.14 | |
 | `RuntimeClass` | `false` | 알파 | 1.12 | 1.13 |
 | `RuntimeClass` | `true` | 베타 | 1.14 | |
-| `SCTPSupport` | `false` | 알파 | 1.12 | |
+| `SCTPSupport` | `false` | 알파 | 1.12 | 1.18 |
+| `SCTPSupport` | `true` | 베타 | 1.19 | |
+| `ServiceAppProtocol` | `false` | 알파 | 1.18 | 1.18 |
+| `ServiceAppProtocol` | `true` | 베타 | 1.19 | |
 | `ServerSideApply` | `false` | 알파 | 1.14 | 1.15 |
 | `ServerSideApply` | `true` | 베타 | 1.16 | |
 | `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | |
 | `ServiceAppProtocol` | `false` | 알파 | 1.18 | |
-| `ServiceNodeExclusion` | `false` | 알파 | 1.8 | |
+| `ServiceNodeExclusion` | `false` | 알파 | 1.8 | 1.18 |
+| `ServiceNodeExclusion` | `true` | 베타 | 1.19 | |
 | `ServiceTopology` | `false` | 알파 | 1.17 | |
+| `SetHostnameAsFQDN` | `false` | 알파 | 1.19 | |
 | `StartupProbe` | `false` | 알파 | 1.16 | 1.17 |
 | `StartupProbe` | `true` | 베타 | 1.18 | |
 | `StorageVersionHash` | `false` | 알파 | 1.14 | 1.14 |
 | `StorageVersionHash` | `true` | 베타 | 1.15 | |
-| `StreamingProxyRedirects` | `false` | 베타 | 1.5 | 1.5 |
-| `StreamingProxyRedirects` | `true` | 베타 | 1.6 | |
 | `SupportNodePidsLimit` | `false` | 알파 | 1.14 | 1.14 |
 | `SupportNodePidsLimit` | `true` | 베타 | 1.15 | |
 | `SupportPodPidsLimit` | `false` | 알파 | 1.10 | 1.13 |
@@ -156,6 +166,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ValidateProxyRedirects` | `true` | 베타 | 1.14 | |
 | `VolumeSnapshotDataSource` | `false` | 알파 | 1.12 | 1.16 |
 | `VolumeSnapshotDataSource` | `true` | 베타 | 1.17 | - |
+| `WindowsEndpointSliceProxying` | `false` | 알파 | 1.19 | |
 | `WindowsGMSA` | `false` | 알파 | 1.14 | |
 | `WindowsGMSA` | `true` | 베타 | 1.16 | |
 | `WinDSR` | `false` | 알파 | 1.14 | |
@@ -210,6 +221,8 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `CustomResourceWebhookConversion` | `false` | 알파 | 1.13 | 1.14 |
 | `CustomResourceWebhookConversion` | `true` | 베타 | 1.15 | 1.15 |
 | `CustomResourceWebhookConversion` | `true` | GA | 1.16 | - |
+| `DynamicAuditing` | `false` | 알파 | 1.13 | 1.18 |
+| `DynamicAuditing` | - | 사용 중단 | 1.19 | - |
 | `DynamicProvisioningScheduling` | `false` | 알파 | 1.11 | 1.11 |
 | `DynamicProvisioningScheduling` | - | 사용 중단| 1.12 | - |
 | `DynamicVolumeProvisioning` | `true` | 알파 | 1.3 | 1.7 |
@@ -218,6 +231,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `EnableEquivalenceClassCache` | - | 사용 중단 | 1.15 | - |
 | `ExperimentalCriticalPodAnnotation` | `false` | 알파 | 1.5 | 1.12 |
 | `ExperimentalCriticalPodAnnotation` | `false` | 사용 중단 | 1.13 | - |
+| `EvenPodsSpread` | `false` | 알파 | 1.16 | 1.17 |
+| `EvenPodsSpread` | `true` | 베타 | 1.18 | 1.18 |
+| `EvenPodsSpread` | `true` | GA | 1.19 | - |
 | `GCERegionalPersistentDisk` | `true` | 베타 | 1.10 | 1.12 |
 | `GCERegionalPersistentDisk` | `true` | GA | 1.13 | - |
 | `HugePages` | `false` | 알파 | 1.8 | 1.9 |
@@ -251,9 +267,13 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `PVCProtection` | `false` | 알파 | 1.9 | 1.9 |
 | `PVCProtection` | - | 사용 중단 | 1.10 | - |
 | `RequestManagement` | `false` | 알파 | 1.15 | 1.16 |
+| `ResourceLimitsPriorityFunction` | `false` | 알파 | 1.9 | 1.18 |
+| `ResourceLimitsPriorityFunction` | - | 사용 중단 | 1.19 | - |
 | `ResourceQuotaScopeSelectors` | `false` | 알파 | 1.11 | 1.11 |
 | `ResourceQuotaScopeSelectors` | `true` | 베타 | 1.12 | 1.16 |
 | `ResourceQuotaScopeSelectors` | `true` | GA | 1.17 | - |
+| `RotateKubeletClientCertificate` | `true` | 베타 | 1.8 | 1.18 |
+| `RotateKubeletClientCertificate` | `true` | GA | 1.19 | - |
 | `ScheduleDaemonSetPods` | `false` | 알파 | 1.11 | 1.11 |
 | `ScheduleDaemonSetPods` | `true` | 베타 | 1.12 | 1.16  |
 | `ScheduleDaemonSetPods` | `true` | GA | 1.17 | - |
@@ -262,6 +282,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 | `ServiceLoadBalancerFinalizer` | `true` | GA | 1.17 | - |
 | `StorageObjectInUseProtection` | `true` | 베타 | 1.10 | 1.10 |
 | `StorageObjectInUseProtection` | `true` | GA | 1.11 | - |
+| `StreamingProxyRedirects` | `false` | 베타 | 1.5 | 1.5 |
+| `StreamingProxyRedirects` | `true` | 베타 | 1.6 | 1.18 |
+| `StreamingProxyRedirects` | - | 사용 중단| 1.19 | - |
 | `SupportIPVSProxyMode` | `false` | 알파 | 1.8 | 1.8 |
 | `SupportIPVSProxyMode` | `false` | 베타 | 1.9 | 1.9 |
 | `SupportIPVSProxyMode` | `true` | 베타 | 1.10 | 1.10 |
@@ -377,11 +400,16 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `CSIMigrationGCEComplete`: kubelet 및 볼륨 컨트롤러에서 GCE-PD 인-트리 플러그인 등록을 중지하고 shim 및 변환 로직을 통해 볼륨 작업을 GCE-PD 인-트리 플러그인에서 PD CSI 플러그인으로 라우팅할 수 있다. CSIMigration과 CSIMigrationGCE 기능 플래그가 필요하다.
 - `CSIMigrationOpenStack`: shim 및 변환 로직을 통해 볼륨 작업을 Cinder 인-트리 플러그인에서 Cinder CSI 플러그인으로 라우팅할 수 있다. 노드에 Cinder CSI 플러그인이 설치 및 구성이 되어 있지 않은 경우 인-트리 Cinder 플러그인으로 폴백을 지원한다. CSIMigration 기능 플래그가 필요하다.
 - `CSIMigrationOpenStackComplete`: kubelet 및 볼륨 컨트롤러에서 Cinder 인-트리 플러그인 등록을 중지하고 shim 및 변환 로직이 Cinder 인-트리 플러그인에서 Cinder CSI 플러그인으로 볼륨 작업을 라우팅할 수 있도록 한다. 클러스터의 모든 노드에 CSIMigration과 CSIMigrationOpenStack 기능 플래그가 활성화되고 Cinder CSI 플러그인이 설치 및 구성이 되어 있어야 한다.
+- `CSIMigrationvSphere`: vSphere 인-트리 플러그인에서 vSphere CSI 플러그인으로 볼륨 작업을 라우팅하는 shim 및 변환 로직을 사용한다. 노드에 vSphere CSI 플러그인이 설치 및 구성이 되어 있지 않은 경우 인-트리 vSphere 플러그인으로 폴백을 지원한다. CSIMigration 기능 플래그가 필요하다.
+- `CSIMigrationvSphereComplete`: kubelet 및 볼륨 컨트롤러에서 vSphere 인-트리 플러그인 등록을 중지하고 shim 및 변환 로직을 활성화하여 vSphere 인-트리 플러그인에서 vSphere CSI 플러그인으로 볼륨 작업을 라우팅할 수 있도록 한다. CSIMigration 및 CSIMigrationvSphere 기능 플래그가 활성화되고 vSphere CSI 플러그인이 클러스터의 모든 노드에 설치 및 구성이 되어 있어야 한다.
 - `CSINodeInfo`: csi.storage.k8s.io에서 CSINodeInfo API 오브젝트와 관련된 모든 로직을 활성화한다.
 - `CSIPersistentVolume`: [CSI (Container Storage Interface)](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/container-storage-interface.md)
   호환 볼륨 플러그인을 통해 프로비저닝된 볼륨을 감지하고
   마운트할 수 있다.
   자세한 내용은 [`csi` 볼륨 유형](/ko/docs/concepts/storage/volumes/#csi) 문서를 확인한다.
+- `CSIStorageCapacity`: CSI 드라이버가 스토리지 용량 정보를 게시하고 쿠버네티스 스케줄러가 파드를 스케줄할 때 해당 정보를 사용하도록 한다. [스토리지 용량](/docs/concepts/storage/storage-capacity/)을 참고한다.
+  자세한 내용은 [`csi` 볼륨 유형](/ko/docs/concepts/storage/volumes/#csi) 문서를 확인한다.
+- `CSIVolumeFSGroupPolicy`: CSI드라이버가 `fsGroupPolicy` 필드를 사용하도록 허용한다. 이 필드는 CSI드라이버에서 생성된 볼륨이 마운트될 때 볼륨 소유권과 권한 수정을 지원하는지 여부를 제어한다.
 - `CustomCPUCFSQuotaPeriod`: 노드가 CPUCFSQuotaPeriod를 변경하도록 한다.
 - `CustomPodDNS`: `dnsConfig` 속성을 사용하여 파드의 DNS 설정을 사용자 정의할 수 있다.
   자세한 내용은 [파드의 DNS 설정](/ko/docs/concepts/services-networking/dns-pod-service/#pod-dns-config)을
@@ -395,11 +423,15 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `CustomResourceWebhookConversion`: [커스텀리소스데피니션](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)에서
   생성된 리소스에 대해 웹 훅 기반의 변환을 활성화한다.
   실행 중인 파드 문제를 해결한다.
+- `DisableAcceleratorUsageMetrics`: [kubelet이 수집한 액셀러레이터 지표 비활성화](/docs/concepts/cluster-administration/monitoring.md).
 - `DevicePlugins`: 노드에서 [장치 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
   기반 리소스 프로비저닝을 활성화한다.
+- `DefaultPodTopologySpread`: `PodTopologySpread` 스케줄링 플러그인을 사용하여
+  [기본 분배](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/#내부-기본-제약)를 수행한다.
 - `DryRun`: 서버 측의 [dry run](/docs/reference/using-api/api-concepts/#dry-run) 요청을
   요청을 활성화하여 커밋하지 않고 유효성 검사, 병합 및 변화를 테스트할 수 있다.
 - `DynamicAuditing`: [동적 감사](/docs/tasks/debug-application-cluster/audit/#dynamic-backend) 기능을 활성화한다.
+- `DynamicAuditing`(*사용 중단됨*): v1.19 이전의 버전에서 동적 감사를 활성화하는 데 사용된다.
 - `DynamicKubeletConfig`: kubelet의 동적 구성을 활성화한다. [kubelet 재구성](/docs/tasks/administer-cluster/reconfigure-kubelet/)을 참고한다.
 - `DynamicProvisioningScheduling`: 볼륨 스케줄을 인식하고 PV 프로비저닝을 처리하도록 기본 스케줄러를 확장한다.
   이 기능은 v1.12의 `VolumeScheduling` 기능으로 대체되었다.
@@ -420,10 +452,16 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   재 매핑이 활성화된 경우에만 활성화해야 한다.
 - `EndpointSlice`: 보다 스케일링 가능하고 확장 가능한 네트워크 엔드포인트에 대한
   엔드포인트 슬라이스를 활성화한다. [엔드포인트 슬라이스 활성화](/docs/tasks/administer-cluster/enabling-endpointslices/)를 참고한다.
-- `EndpointSliceProxying`: 이 기능 게이트가 활성화되면, kube-proxy는
-  엔드포인트슬라이스를 엔드포인트 대신 기본 데이터 소스로 사용하여
-  확장성과 성능을 향상시킨다. [엔드포인트 슬라이스 활성화](/docs/tasks/administer-cluster/enabling-endpointslices/)를 참고한다.
+- `EndpointSliceProxying`: 이 기능 게이트가 활성화되면, 리눅스에서 실행되는
+  kube-proxy는 엔드포인트 대신 엔드포인트슬라이스를
+  기본 데이터 소스로 사용하여 확장성과 성능을 향상시킨다.
+  [엔드포인트 슬라이스 활성화](/docs/tasks/administer-cluster/enabling-endpointslices/)를 참고한다.
+- `WindowsEndpointSliceProxying`: 이 기능 게이트가 활성화되면, 윈도우에서 실행되는
+  kube-proxy는 엔드포인트 대신 엔드포인트슬라이스를
+  기본 데이터 소스로 사용하여 확장성과 성능을 향상시킨다.
+  [엔드포인트 슬라이스 활성화](/docs/tasks/administer-cluster/enabling-endpointslices/)를 참고한다.
 - `GCERegionalPersistentDisk`: GCE에서 지역 PD 기능을 활성화한다.
+- `GenericEphemeralVolume`: 일반 볼륨의 모든 기능을 지원하는 임시, 인라인 볼륨을 활성화한다(타사 스토리지 공급 업체, 스토리지 용량 추적, 스냅샷으로부터 복원 등에서 제공할 수 있음). [임시 볼륨](/docs/concepts/storage/ephemeral-volumes/)을 참고한다.
 - `HugePages`: 사전 할당된 [huge page](/ko/docs/tasks/manage-hugepages/scheduling-hugepages/)의 할당 및 사용을 활성화한다.
 - `HugePageStorageMediumSize`: 사전 할당된 [huge page](/ko/docs/tasks/manage-hugepages/scheduling-hugepages/)의 여러 크기를 지원한다.
 - `HyperVContainer`: 윈도우 컨테이너를 위한 [Hyper-V 격리](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/manage-containers/hyperv-container) 기능을 활성화한다.
@@ -435,9 +473,9 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   플러그인을 검색할 수 있도록 프로브 기반 플러그인 감시자(watcher) 유틸리티를 사용한다.
 - `KubeletPodResources`: kubelet의 파드 리소스 grpc 엔드포인트를 활성화한다.
    자세한 내용은 [장치 모니터링 지원](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md)을 참고한다.
-- `LegacyNodeRoleBehavior`: 비활성화되면, 서비스 로드 밸런서 및 노드 중단의 레거시 동작은 기능별 레이블을 대신하여 `node-role.kubernetes.io/master` 레이블을 무시한다.
+- `LegacyNodeRoleBehavior`: 비활성화되면, 서비스 로드 밸런서 및 노드 중단의 레거시 동작은 `NodeDisruptionExclusion` 과 `ServiceNodeExclusion` 에 의해 제공된 기능별 레이블을 대신하여 `node-role.kubernetes.io/master` 레이블을 무시한다.
 - `LocalStorageCapacityIsolation`: [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)와 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)의 `sizeLimit` 속성을 사용할 수 있게 한다.
-- `LocalStorageCapacityIsolationFSQuotaMonitoring`: [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)에 대해 `LocalStorageCapacityIsolation`이 활성화되고 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)에 대한 백업 파일시스템이 프로젝트 쿼터를 지원하고 활성화된 경우, 프로젝트 쿼터를 사용하여 파일시스템 사용보다는 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir) 스토리지 사용을 모니터링하여 성능과 정확성을 향상시킨다.
+- `LocalStorageCapacityIsolationFSQuotaMonitoring`: [로컬 임시 스토리지](/ko/docs/concepts/configuration/manage-resources-containers/)에 `LocalStorageCapacityIsolation` 이 활성화되고 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir)의 백업 파일시스템이 프로젝트 쿼터를 지원하고 활성화된 경우, 파일시스템 사용보다는 프로젝트 쿼터를 사용하여 [emptyDir 볼륨](/ko/docs/concepts/storage/volumes/#emptydir) 스토리지 사용을 모니터링하여 성능과 정확성을 향상시킨다.
 - `MountContainers`: 호스트의 유틸리티 컨테이너를 볼륨 마운터로 사용할 수 있다.
 - `MountPropagation`: 한 컨테이너에서 다른 컨테이너 또는 파드로 마운트된 볼륨을 공유할 수 있다.
   자세한 내용은 [마운트 전파(propagation)](/ko/docs/concepts/storage/volumes/#마운트-전파-propagation)을 참고한다.
@@ -460,7 +498,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
   삭제되지 않도록 한다.  
 - `QOSReserved`: QoS 수준에서 리소스 예약을 허용하여 낮은 QoS 수준의 파드가 더 높은 QoS 수준에서
   요청된 리소스로 파열되는 것을 방지한다(현재 메모리만 해당).
-- `ResourceLimitsPriorityFunction`: 입력 파드의 CPU 및 메모리 한도 중
+- `ResourceLimitsPriorityFunction` (*사용 중단됨*): 입력 파드의 CPU 및 메모리 한도 중
   하나 이상을 만족하는 노드에 가능한 최저 점수 1을 할당하는
   스케줄러 우선 순위 기능을 활성화한다. 의도는 동일한 점수를 가진
   노드 사이의 관계를 끊는 것이다.
@@ -472,7 +510,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `RunAsGroup`: 컨테이너의 init 프로세스에 설정된 기본 그룹 ID 제어를 활성화한다.
 - `RuntimeClass`: 컨테이너 런타임 구성을 선택하기 위해 [런타임클래스(RuntimeClass)](/ko/docs/concepts/containers/runtime-class/) 기능을 활성화한다.
 - `ScheduleDaemonSetPods`: 데몬셋(DaemonSet) 컨트롤러 대신 기본 스케줄러로 데몬셋 파드를 스케줄링할 수 있다.
-- `SCTPSupport`: SCTP를 `Service`, `Endpoint`, `NetworkPolicy` 및 `Pod` 정의에서 `protocol` 값으로 사용하는 것을 활성화한다.
+- `SCTPSupport`: 파드, 서비스, 엔드포인트, 엔드포인트슬라이스 및 네트워크폴리시 정의에서 _SCTP_ `protocol` 값을 활성화한다.
 - `ServerSideApply`: API 서버에서 [SSA(Sever Side Apply)](/docs/reference/using-api/api-concepts/#server-side-apply) 경로를 활성화한다.
 - `ServiceAccountIssuerDiscovery`: API 서버에서 서비스 어카운트 발행자에 대해 OIDC 디스커버리 엔드포인트(발급자 및 JWKS URL)를 활성화한다. 자세한 내용은 [파드의 서비스 어카운트 구성](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery)을 참고한다.
 - `ServiceAppProtocol`: 서비스와 엔드포인트에서 `AppProtocol` 필드를 활성화한다.
@@ -480,6 +518,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `ServiceNodeExclusion`: 클라우드 제공자가 생성한 로드 밸런서에서 노드를 제외할 수 있다.
   "`alpha.service-controller.kubernetes.io/exclude-balancer`" 키 또는 `node.kubernetes.io/exclude-from-external-load-balancers` 로 레이블이 지정된 경우 노드를 제외할 수 있다.
 - `ServiceTopology`: 서비스가 클러스터의 노드 토폴로지를 기반으로 트래픽을 라우팅할 수 있도록 한다. 자세한 내용은 [서비스토폴로지(ServiceTopology)](/ko/docs/concepts/services-networking/service-topology/)를 참고한다.
+- `SetHostnameAsFQDN`: 전체 주소 도메인 이름(FQDN)을 파드의 호스트 이름으로 설정하는 기능을 활성화한다. [파드의 `setHostnameAsFQDN` 필드](/ko/docs/concepts/services-networking/dns-pod-service/#파드의-sethostnameasfqdn-필드)를 참고한다.
 - `StartupProbe`: kubelet에서 [스타트업](/ko/docs/concepts/workloads/pods/pod-lifecycle/#언제-스타트업-프로브를-사용해야-하는가) 프로브를 활성화한다.
 - `StorageObjectInUseProtection`: 퍼시스턴트볼륨 또는 퍼시스턴트볼륨클레임 오브젝트가 여전히
   사용 중인 경우 삭제를 연기한다.
diff --git a/content/ko/docs/reference/glossary/kube-apiserver.md b/content/ko/docs/reference/glossary/kube-apiserver.md
index b219acb340..201bc3780e 100644
--- a/content/ko/docs/reference/glossary/kube-apiserver.md
+++ b/content/ko/docs/reference/glossary/kube-apiserver.md
@@ -2,21 +2,21 @@
 title: API 서버
 id: kube-apiserver
 date: 2018-04-12
-full_link: /docs/reference/generated/kube-apiserver/
+full_link: /ko/docs/concepts/overview/components/#kube-apiserver
 short_description: >
   쿠버네티스 API를 제공하는 컨트롤 플레인 컴포넌트.
 
-aka: 
+aka:
 - kube-apiserver
 tags:
 - architecture
 - fundamental
 ---
- API 서버는 쿠버네티스 API를 
+ API 서버는 쿠버네티스 API를
 노출하는 쿠버네티스 {{< glossary_tooltip text="컨트롤 플레인" term_id="control-plane" >}} 컴포넌트이다.
 API 서버는 쿠버네티스 컨트롤 플레인의 프론트 엔드이다.
 
-<!--more--> 
+<!--more-->
 
 쿠버네티스 API 서버의 주요 구현은 [kube-apiserver](/docs/reference/generated/kube-apiserver/) 이다.
 kube-apiserver는 수평으로 확장되도록 디자인되었다. 즉, 더 많은 인스턴스를 배포해서 확장할 수 있다.
diff --git a/content/ko/docs/reference/glossary/managed-service.md b/content/ko/docs/reference/glossary/managed-service.md
index 282bc7e9d6..d34e2832e3 100644
--- a/content/ko/docs/reference/glossary/managed-service.md
+++ b/content/ko/docs/reference/glossary/managed-service.md
@@ -2,17 +2,21 @@
 title: 매니지드 서비스
 id: managed-service
 date: 2018-04-12
-full_link: 
+full_link:
 short_description: >
   타사 공급자가 유지보수하는 소프트웨어.
 
-aka: 
+aka:
 
 tags:
 - extension
 ---
- 타사 공급자가 유지보수하는 소프트웨어. 
+ 타사 공급자가 유지보수하는 소프트웨어.
 
-<!--more--> 
+<!--more-->
 
-매니지드 서비스의 몇 가지 예시로 AWS EC2, Azure SQL Database 그리고 GCP Pub/Sub이 있으나, 애플리케이션에서 사용할 수 있는 모든 소프트웨어 제품이 될 수 있다. [서비스 카탈로그](/docs/concepts/service-catalog/)는 {{< glossary_tooltip text="서비스 브로커" term_id="service-broker" >}}가 제공하는 매니지드 서비스의 목록과 프로비전, 바인딩하는 방법을 제공한다.
+매니지드 서비스의 몇 가지 예시로 AWS EC2, Azure SQL Database 그리고
+GCP Pub/Sub이 있으나, 애플리케이션에서 사용할 수 있는 모든 소프트웨어 제품이 될 수 있다.
+[서비스 카탈로그](/ko/docs/concepts/extend-kubernetes/service-catalog/)는
+{{< glossary_tooltip text="서비스 브로커" term_id="service-broker" >}}가 제공하는
+매니지드 서비스의 목록과 프로비전, 바인딩하는 방법을 제공한다.
diff --git a/content/ko/docs/reference/issues-security/_index.md b/content/ko/docs/reference/issues-security/_index.md
index a1f56bc08e..596a6e01a4 100644
--- a/content/ko/docs/reference/issues-security/_index.md
+++ b/content/ko/docs/reference/issues-security/_index.md
@@ -1,5 +1,4 @@
 ---
 title: 쿠버네티스 이슈와 보안
 weight: 10
-toc-hide: true
 ---
diff --git a/content/ko/docs/reference/kubectl/cheatsheet.md b/content/ko/docs/reference/kubectl/cheatsheet.md
index 3446c11a06..bf3e0cc81d 100644
--- a/content/ko/docs/reference/kubectl/cheatsheet.md
+++ b/content/ko/docs/reference/kubectl/cheatsheet.md
@@ -8,16 +8,10 @@ card:
 
 <!-- overview -->
 
-참고 항목: [Kubectl 개요](/ko/docs/reference/kubectl/overview/)와 [JsonPath 가이드](/docs/reference/kubectl/jsonpath).
-
-이 페이지는 `kubectl` 커맨드의 개요이다.
-
-
+이 페이지는 일반적으로 사용하는 `kubectl` 커맨드와 플래그에 대한 목록을 포함한다.
 
 <!-- body -->
 
-# kubectl - 치트 시트
-
 ## Kubectl 자동 완성
 
 ### BASH
@@ -77,7 +71,8 @@ kubectl config set-context gce --user=cluster-admin --namespace=foo \
 kubectl config unset users.foo                       # foo 사용자 삭제
 ```
 
-## Apply
+## Kubectl apply
+
 `apply`는 쿠버네티스 리소스를 정의하는 파일을 통해 애플리케이션을 관리한다. `kubectl apply`를 실행하여 클러스터에 리소스를 생성하고 업데이트한다. 이것은 프로덕션 환경에서 쿠버네티스 애플리케이션을 관리할 때 권장된다. [Kubectl Book](https://kubectl.docs.kubernetes.io)을 참고한다.
 
 ## 오브젝트 생성
@@ -200,6 +195,13 @@ kubectl get events --sort-by=.metadata.creationTimestamp
 
 # 매니페스트가 적용된 경우 클러스터의 현재 상태와 클러스터의 상태를 비교한다.
 kubectl diff -f ./my-manifest.yaml
+
+# 노드에 대해 반환된 모든 키의 마침표로 구분된 트리를 생성한다.
+# 복잡한 중첩 JSON 구조 내에서 키를 찾을 때 유용하다.
+kubectl get nodes -o json | jq -c 'path(..)|[.[]|tostring]|join(".")'
+
+# 파드 등에 대해 반환된 모든 키의 마침표로 구분된 트리를 생성한다.
+kubectl get pods -o json | jq -c 'path(..)|[.[]|tostring]|join(".")'
 ```
 
 ## 리소스 업데이트
@@ -249,6 +251,7 @@ kubectl patch sa default --type='json' -p='[{"op": "add", "path": "/secrets/1",
 ```
 
 ## 리소스 편집
+
 편집기로 모든 API 리소스를 편집.
 
 ```bash
@@ -382,15 +385,12 @@ Kubectl 로그 상세 레벨(verbosity)은 `-v` 또는`--v` 플래그와 로그
 `--v=8` | HTTP 요청 내용을 표시.
 `--v=9` | 내용을 잘라 내지 않고 HTTP 요청 내용을 표시.
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
-* [kubectl 개요](/ko/docs/reference/kubectl/overview/)에 대해 더 배워보자.
+* [kubectl 개요](/ko/docs/reference/kubectl/overview/)를 읽고 [JsonPath](/docs/reference/kubectl/jsonpath)에 대해 배워보자.
 
 * [kubectl](/docs/reference/kubectl/kubectl/) 옵션을 참고한다.
 
 * 재사용 스크립트에서 kubectl 사용 방법을 이해하기 위해 [kubectl 사용법](/docs/reference/kubectl/conventions/)을 참고한다.
 
-* 더 많은 [kubectl 치트 시트](https://github.com/dennyzhang/cheatsheet-kubernetes-A4) 커뮤니티 확인
+* 더 많은 커뮤니티 [kubectl 치트시트](https://github.com/dennyzhang/cheatsheet-kubernetes-A4)를 확인한다.
diff --git a/content/ko/docs/reference/kubectl/overview.md b/content/ko/docs/reference/kubectl/overview.md
index 6eab3cbafe..04b3e6c1d3 100644
--- a/content/ko/docs/reference/kubectl/overview.md
+++ b/content/ko/docs/reference/kubectl/overview.md
@@ -8,10 +8,16 @@ card:
 ---
 
 <!-- overview -->
-Kubectl은 쿠버네티스 클러스터를 제어하기 위한 커맨드 라인 도구이다. 구성을 위해, `kubectl` 은 config 파일을 $HOME/.kube 에서 찾는다. KUBECONFIG 환경 변수를 설정하거나 [`--kubeconfig`](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/) 플래그를 설정하여 다른 [kubeconfig](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/) 파일을 지정할 수 있다.
-
-이 개요는 `kubectl` 구문을 다루고, 커맨드 동작을 설명하며, 일반적인 예제를 제공한다. 지원되는 모든 플래그 및 하위 명령을 포함한 각 명령에 대한 자세한 내용은 [kubectl](/docs/reference/generated/kubectl/kubectl-commands/) 참조 문서를 참고한다. 설치 방법에 대해서는 [kubectl 설치](/ko/docs/tasks/tools/install-kubectl/)를 참고한다.
+Kubectl은 쿠버네티스 클러스터를 제어하기 위한 커맨드 라인 도구이다.
+구성을 위해, `kubectl` 은 config 파일을 $HOME/.kube 에서 찾는다.
+KUBECONFIG 환경 변수를 설정하거나 [`--kubeconfig`](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
+플래그를 설정하여 다른 [kubeconfig](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
+파일을 지정할 수 있다.
 
+이 개요는 `kubectl` 구문을 다루고, 커맨드 동작을 설명하며, 일반적인 예제를 제공한다.
+지원되는 모든 플래그 및 하위 명령을 포함한 각 명령에 대한 자세한 내용은
+[kubectl](/docs/reference/generated/kubectl/kubectl-commands/) 참조 문서를 참고한다.
+설치 방법에 대해서는 [kubectl 설치](/ko/docs/tasks/tools/install-kubectl/)를 참고한다.
 
 <!-- body -->
 
@@ -25,9 +31,12 @@ kubectl [command] [TYPE] [NAME] [flags]
 
 다음은 `command`, `TYPE`, `NAME` 과 `flags` 에 대한 설명이다.
 
-* `command`: 하나 이상의 리소스에서 수행하려는 동작을 지정한다. 예: `create`, `get`, `describe`, `delete`
+* `command`: 하나 이상의 리소스에서 수행하려는 동작을 지정한다.
+예: `create`, `get`, `describe`, `delete`
 
-* `TYPE`: [리소스 타입](#리소스-타입)을 지정한다. 리소스 타입은 대소문자를 구분하지 않으며 단수형, 복수형 또는 약어 형식을 지정할 수 있다. 예를 들어, 다음의 명령은 동일한 출력 결과를 생성한다.
+* `TYPE`: [리소스 타입](#리소스-타입)을 지정한다. 리소스 타입은 대소문자를 구분하지 않으며
+  단수형, 복수형 또는 약어 형식을 지정할 수 있다.
+  예를 들어, 다음의 명령은 동일한 출력 결과를 생성한다.
 
    ```shell
    kubectl get pod pod1
@@ -205,11 +214,13 @@ kubectl [command] [TYPE] [NAME] -o <output_format>
 kubectl get pod web-pod-13je7 -o yaml
 ```
 
-기억하기: 각 명령이 지원하는 출력 형식에 대한 자세한 내용은 [kubectl](/docs/user-guide/kubectl/) 참조 문서를 참고한다.
+기억하기: 각 명령이 지원하는 출력 형식에 대한 자세한 내용은
+[kubectl](/docs/reference/kubectl/kubectl/) 참조 문서를 참고한다.
 
 #### 사용자 정의 열 {#custom-columns}
 
-사용자 정의 열을 정의하고 원하는 세부 정보만 테이블에 출력하려면, `custom-columns` 옵션을 사용할 수 있다. 사용자 정의 열을 인라인으로 정의하거나 템플릿 파일을 사용하도록 선택할 수 있다. `-o custom-columns=<spec>` 또는 `-o custom-columns-file=<filename>`
+사용자 정의 열을 정의하고 원하는 세부 정보만 테이블에 출력하려면, `custom-columns` 옵션을 사용할 수 있다.
+사용자 정의 열을 인라인으로 정의하거나 템플릿 파일을 사용하도록 선택할 수 있다. `-o custom-columns=<spec>` 또는 `-o custom-columns-file=<filename>`
 
 ##### 예제
 
@@ -493,8 +504,6 @@ kubectl whoami
 Current user: plugins-user
 ```
 
-
-
 ## {{% heading "whatsnext" %}}
 
 * [kubectl](/docs/reference/generated/kubectl/kubectl-commands/) 명령을 사용하여 시작한다.
diff --git a/content/ko/docs/reference/scheduling/_index.md b/content/ko/docs/reference/scheduling/_index.md
new file mode 100644
index 0000000000..7a37a35981
--- /dev/null
+++ b/content/ko/docs/reference/scheduling/_index.md
@@ -0,0 +1,5 @@
+---
+title: 스케줄링
+weight: 70
+toc-hide: true
+---
diff --git a/content/ko/docs/reference/scheduling/policies.md b/content/ko/docs/reference/scheduling/policies.md
new file mode 100644
index 0000000000..71ccef5e87
--- /dev/null
+++ b/content/ko/docs/reference/scheduling/policies.md
@@ -0,0 +1,118 @@
+---
+title: 스케줄링 정책
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+
+스케줄링 정책을 사용하여 {{< glossary_tooltip text="kube-scheduler" term_id="kube-scheduler" >}}가 각각 노드를 필터링하고 스코어링(scoring)하기 위해 실행하는 *단정(predicates)* 및 *우선순위(priorities)* 를 지정할 수 있다.
+
+`kube-scheduler --policy-config-file <filename>` 또는 `kube-scheduler --policy-configmap <ConfigMap>`을 실행하고 [정책 유형](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy)을 사용하여 스케줄링 정책을 설정할 수 있다.
+
+
+
+<!-- body -->
+
+## 단정 {#predicates}
+
+다음의 *단정* 은 필터링을 구현한다.
+
+- `PodFitsHostPorts`: 파드가 요청하는 파드의 포트에 대해 노드에 사용할 수 있는
+  포트(네트워크 프로토콜 종류)가 있는지 확인한다.
+
+- `PodFitsHost`: 파드가 호스트 이름으로 특정 노드를 지정하는지 확인한다.
+
+- `PodFitsResources`: 파드의 요구 사항을 충족할 만큼 노드에 사용할 수 있는
+  리소스(예: CPU 및 메모리)가 있는지 확인한다.
+
+- `PodMatchNodeSelector`: 파드의 노드 {{< glossary_tooltip text="셀렉터" term_id="selector" >}}가
+  노드의 {{< glossary_tooltip text="레이블" term_id="label" >}}과 일치하는지 확인한다.
+
+- `NoVolumeZoneConflict`: 해당 스토리지에 대한 장애 영역 제한이 주어지면
+  파드가 요청하는 {{< glossary_tooltip text="볼륨" term_id="volume" >}}을 노드에서 사용할 수 있는지
+  평가한다.
+
+- `NoDiskConflict`: 요청하는 볼륨과 이미 마운트된 볼륨으로 인해
+  파드가 노드에 적합한지 평가한다.
+
+- `MaxCSIVolumeCount`: 연결해야 하는 {{< glossary_tooltip text="CSI" term_id="csi" >}} 볼륨의 수와
+  구성된 제한을 초과하는지 여부를 결정한다.
+
+- `CheckNodeMemoryPressure`: 노드가 메모리 압박을 보고하고 있고, 구성된
+  예외가 없는 경우, 파드가 해당 노드에 스케줄되지 않는다.
+
+- `CheckNodePIDPressure`: 노드가 프로세스 ID 부족을 보고하고 있고, 구성된
+  예외가 없는 경우, 파드가 해당 노드에 스케줄되지 않는다.
+
+- `CheckNodeDiskPressure`: 노드가 스토리지 압박(파일시스템이 가득차거나
+  거의 꽉 참)을 보고하고 있고, 구성된 예외가 없는 경우, 파드가 해당 노드에 스케줄되지 않는다.
+
+- `CheckNodeCondition`: 노드는 파일시스템이 완전히 가득찼거나,
+  네트워킹을 사용할 수 없거나, kubelet이 파드를 실행할 준비가 되지 않았다고 보고할 수 있다.
+  노드에 대해 이러한 조건이 설정되고, 구성된 예외가 없는 경우, 파드가
+  해당 노드에 스케줄되지 않는다.
+
+- `PodToleratesNodeTaints`: 파드의 {{< glossary_tooltip text="톨러레이션" term_id="toleration" >}}이
+  노드의 {{< glossary_tooltip text="테인트" term_id="taint" >}}를 용인할 수 있는지 확인한다.
+
+- `CheckVolumeBinding`: 파드가 요청한 볼륨에 적합할 수 있는지 평가한다.
+  이는 바인딩된 {{< glossary_tooltip text="PVC" term_id="persistent-volume-claim" >}}와
+  바인딩되지 않은 PVC 모두에 적용된다.
+
+## 우선순위 {#priorities}
+
+다음의 *우선순위* 는 스코어링을 구현한다.
+
+- `SelectorSpreadPriority`: 동일한 {{< glossary_tooltip text="서비스" term_id="service" >}},
+  {{< glossary_tooltip text="스테이트풀셋(StatefulSet)" term_id="statefulset" >}} 또는
+  {{< glossary_tooltip text="레플리카셋(ReplicaSet)" term_id="replica-set" >}}에 속하는
+  파드를 고려하여, 파드를 여러 호스트에 파드를 분산한다.
+
+- `InterPodAffinityPriority`: 선호된
+  [파드간 어피니티와 안티-어피니티](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#파드간-어피니티와-안티-어피니티)를 구현한다.
+
+- `LeastRequestedPriority`: 요청된 리소스가 적은 노드를 선호한다. 즉,
+  노드에 배치되는 파드가 많고, 해당 파드가 사용하는 리소스가
+  많을수록 이 정책이 부여하는 순위가 낮아진다.
+
+- `MostRequestedPriority`: 요청된 리소스가 가장 많은 노드를 선호한다.
+  이 정책은 전체 워크로드 세트를 실행하는 데 필요한 최소 노드 수에 스케줄된
+  파드를 맞춘다.
+
+- `RequestedToCapacityRatioPriority`: 기본 리소스 스코어링 기능을 사용하여 ResourceAllocationPriority에 기반한 requestedToCapacity를 생성한다.
+
+- `BalancedResourceAllocation`: 균형 잡힌 리소스 사용의 노드를 선호한다.
+
+- `NodePreferAvoidPodsPriority`: 노드 어노테이션 `scheduler.alpha.kubernetes.io/preferAvoidPods`에 따라
+  노드의 우선순위를 지정한다. 이를 사용하여 두 개의 다른 파드가
+  동일한 노드에서 실행되면 안된다는 힌트를 줄 수 있다.
+
+- `NodeAffinityPriority`: PreferredDuringSchedulingIgnoredDuringExecution에 표시된 노드 어피니티 스케줄링
+  설정에 따라 노드의 우선순위를 지정한다.
+  이에 대한 자세한 내용은 [노드에 파드 할당하기](/ko/docs/concepts/scheduling-eviction/assign-pod-node/)에서 확인할 수 있다.
+
+- `TaintTolerationPriority`: 노드에서 용인할 수 없는 테인트 수를 기반으로,
+  모든 노드의 우선순위 목록을 준비한다. 이 정책은 해당 목록을
+  고려하여 노드의 순위를 조정한다.
+
+- `ImageLocalityPriority`: 해당 파드의
+  {{< glossary_tooltip text="컨테이너 이미지" term_id="image" >}}가 이미 로컬로 캐시된
+  노드를 선호한다.
+
+- `ServiceSpreadingPriority`: 특정 서비스에 대해, 이 정책은 해당 서비스에 대한
+  파드가 서로 다른 노드에서 실행되는 것을 목표로 한다. 해당 서비스에 대한
+  파드가 이미 할당되지 않은 노드에 스케줄링하는 것을 선호한다. 전반적인 결과는
+  서비스가 단일 노드 장애에 대해 더 탄력적이라는 것이다.
+
+- `EqualPriority`: 모든 노드에 동일한 가중치를 부여한다.
+
+- `EvenPodsSpreadPriority`: 선호된
+  [파드 토폴로지 분배 제약 조건](/ko/docs/concepts/workloads/pods/pod-topology-spread-constraints/)을 구현한다.
+
+
+
+## {{% heading "whatsnext" %}}
+
+* [스케줄링](/ko/docs/concepts/scheduling-eviction/kube-scheduler/)에 대해 배우기
+* [kube-scheduler 프로파일](/docs/reference/scheduling/profiles/)에 대해 배우기
\ No newline at end of file
diff --git a/content/ko/docs/reference/setup-tools/_index.md b/content/ko/docs/reference/setup-tools/_index.md
index 268a280c50..051fba4c5d 100644
--- a/content/ko/docs/reference/setup-tools/_index.md
+++ b/content/ko/docs/reference/setup-tools/_index.md
@@ -1,6 +1,4 @@
 ---
 title: 설치 도구 레퍼런스
 weight: 50
-toc-hide: true
 ---
-
diff --git a/content/ko/docs/reference/setup-tools/kubeadm/_index.md b/content/ko/docs/reference/setup-tools/kubeadm/_index.md
index 085b1e1ef9..683f78000b 100644
--- a/content/ko/docs/reference/setup-tools/kubeadm/_index.md
+++ b/content/ko/docs/reference/setup-tools/kubeadm/_index.md
@@ -1,6 +1,30 @@
 ---
 title: "Kubeadm"
 weight: 10
-toc-hide: true
+no_list: true
+content_type: concept
+card:
+  name: reference
+  weight: 40
 ---
 
+<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">Kubeadm은 쿠버네티스 클러스터 생성을 위한 모범 사례의 "빠른 경로"로 `kubeadm init` 과 `kubeadm join` 을 제공하도록 만들어진 도구이다.
+
+kubeadm은 실행 가능한 최소 클러스터를 시작하고 실행하는 데 필요한 작업을 수행한다. 설계 상, 시스템 프로비저닝이 아닌 부트스트랩(bootstrapping)만 다룬다. 마찬가지로, 쿠버네티스 대시보드, 모니터링 솔루션 및 클라우드별 애드온과 같은 다양한 있으면 좋은(nice-to-have) 애드온을 설치하는 것은 범위에 포함되지 않는다.
+
+대신, 우리는 더 높은 수준의 맞춤형 도구가 kubeadm 위에 구축될 것으로 기대하며, 이상적으로는, 모든 배포의 기반으로 kubeadm을 사용하면 규격을 따르는 클러스터를 더 쉽게 생성할 수 있다.
+
+## 설치 방법
+
+kubeadm을 설치하려면, [설치 가이드](/docs/setup/production-environment/tools/kubeadm/install-kubeadm)를 참고한다.
+
+## {{% heading "whatsnext" %}}
+
+* [kubeadm init](/docs/reference/setup-tools/kubeadm/kubeadm-init): 쿠버네티스 컨트롤 플레인 노드를 부트스트랩한다.
+* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join): 쿠버네티스 워커(worker) 노드를 부트스트랩하고 클러스터에 조인시킨다.
+* [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade): 쿠버네티스 클러스터를 새로운 버전으로 업그레이드한다.
+* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config): kubeadm v1.7.x 이하의 버전을 사용하여 클러스터를 초기화한 경우, `kubeadm upgrade` 를 위해 사용자의 클러스터를 구성한다.
+* [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token): `kubeadm join` 을 위한 토큰을 관리한다.
+* [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset): `kubeadm init` 또는 `kubeadm join` 에 의한 호스트의 모든 변경 사항을 되돌린다.
+* [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version): kubeadm 버전을 출력한다.
+* [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha): 커뮤니티에서 피드백을 수집하기 위해서 기능 미리 보기를 제공한다.
diff --git a/content/ko/docs/reference/setup-tools/kubeadm/kubeadm.md b/content/ko/docs/reference/setup-tools/kubeadm/kubeadm.md
deleted file mode 100644
index f011459dd6..0000000000
--- a/content/ko/docs/reference/setup-tools/kubeadm/kubeadm.md
+++ /dev/null
@@ -1,28 +0,0 @@
----
-title: kubeadm 개요
-weight: 10
-card:
-  name: reference
-  weight: 40
----
-<img src="https://raw.githubusercontent.com/kubernetes/kubeadm/master/logos/stacked/color/kubeadm-stacked-color.png" align="right" width="150px">Kubeadm은 쿠버네티스 클러스터를 "빠른 경로"로 생성하기 위한 모범 사례인 `kubeadm init`과 `kubeadm join`을 제공하기 위해 구성된 도구이다.
-
-kubeadm은 최소 기능 클러스터(minimum viable cluster)를 시작하고 실행하는 데 필요한 작업을 수행한다. 설계상, 부트스트랩만 다루며, 머신을 프로비저닝하지는 않는다. 마찬가지로, 쿠버네티스 대시보드, 모니터링 솔루션 및 클라우드 별 애드온과 같은 다양한 기능을 갖춘 애드온을 설치하는 것은 범위에 포함되지 않는다.
-
-대신, kubeadm 위에 있는 더 높은 수준의 맞춤형 도구가 구축될 것으로 예상되며, 모든 배포의 기초로서 kubeadm을 사용하면 적합한 클러스터를 보다 쉽게 만들 수 있다.
-
-## 설치하는 방법
-
-kubeadm을 설치하려면 [설치 가이드](/docs/setup/production-environment/tools/kubeadm/install-kubeadm)를 참조한다.
-
-## 다음 내용
-
-* [kubeadm init](/docs/reference/setup-tools/kubeadm/kubeadm-init): 쿠버네티스 컨트롤 플레인 노드를 부트스트랩 함
-* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join): 쿠버네티스 워커 노드를 부트스트랩 후 클러스터에 결합시킴
-* [kubeadm upgrade](/docs/reference/setup-tools/kubeadm/kubeadm-upgrade): 쿠버네티스 클러스터를 최신 버전으로 업그레이드
-* [kubeadm config](/docs/reference/setup-tools/kubeadm/kubeadm-config): kubeadm v1.7.x이하의 버전을 사용하여 클러스터를 초기화한 경우, 클러스터를 설정하여 `kubeadm upgrade`하기 위해 사용
-* [kubeadm token](/docs/reference/setup-tools/kubeadm/kubeadm-token): `kubeadm join`을 위한 토큰 관리
-* [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset): `kubeadm init`나 `kubeadm join`를 의한 호스트에 대해서 변경된 사항을 되돌림
-* [kubeadm version](/docs/reference/setup-tools/kubeadm/kubeadm-version): kubeadm 버전을 출력
-* [kubeadm alpha](/docs/reference/setup-tools/kubeadm/kubeadm-alpha): 커뮤니티의 피드백 수집을 위해서 기능 미리 보기를 제공
-
diff --git a/content/ko/docs/reference/using-api/_index.md b/content/ko/docs/reference/using-api/_index.md
index a224824aa1..7751aef2f4 100644
--- a/content/ko/docs/reference/using-api/_index.md
+++ b/content/ko/docs/reference/using-api/_index.md
@@ -1,5 +1,4 @@
 ---
 title: 쿠버네티스 API 사용하기
 weight: 10
-toc-hide: true
 ---
diff --git a/content/ko/docs/reference/using-api/client-libraries.md b/content/ko/docs/reference/using-api/client-libraries.md
index a0a87e0837..5b9f179cbc 100644
--- a/content/ko/docs/reference/using-api/client-libraries.md
+++ b/content/ko/docs/reference/using-api/client-libraries.md
@@ -22,8 +22,8 @@ API 호출 또는 요청/응답 타입을 직접 구현할 필요는 없다.
 
 ## 공식적으로 지원되는 쿠버네티스 클라이언트 라이브러리
 
-다음의 클라이언트 라이브러리들은 [쿠버네티스 SIG API
-Machinery](https://github.com/kubernetes/community/tree/master/sig-api-machinery)에서 공식적으로 관리된다.
+다음의 클라이언트 라이브러리들은
+[쿠버네티스 SIG API Machinery](https://github.com/kubernetes/community/tree/master/sig-api-machinery)에서 공식적으로 관리된다.
 
 
 | 언어      | 클라이언트 라이브러리 | 예제 프로그램 |
@@ -73,6 +73,3 @@ Machinery](https://github.com/kubernetes/community/tree/master/sig-api-machinery
 | DotNet (RestSharp)   | [github.com/masroorhasan/Kubernetes.DotNet](https://github.com/masroorhasan/Kubernetes.DotNet) |
 | Elixir               | [github.com/obmarg/kazan](https://github.com/obmarg/kazan/) |
 | Elixir               | [github.com/coryodaniel/k8s](https://github.com/coryodaniel/k8s) |
-
-
-
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index 39c2d07464..aa21c110d4 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -219,71 +219,155 @@ sysctl --system
 {{< tabs name="tab-cri-cri-o-installation" >}}
 {{< tab name="Debian" >}}
 
-```shell
-# Debian 개발 배포본(Unstable/Sid)
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_Unstable/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_Unstable/Release.key -O- | sudo apt-key add -
-```
+다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
 
-```shell
-# Debian Testing
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_Testing/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_Testing/Release.key -O- | sudo apt-key add -
-```
+| 운영 체제          | $OS               |
+| ---------------- | ----------------- |
+| Debian Unstable  | `Debian_Unstable` |
+| Debian Testing   | `Debian_Testing`  |
 
-```shell
-# Debian 10
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_10/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_10/Release.key -O- | sudo apt-key add -
-```
+<br />
+그런 다음, `$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+사용자의 설치를 특정 릴리스에 고정할 수 있다.
+버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
+<br />
 
+그런 다음, 아래를 실행한다.
 ```shell
-# Raspbian 10
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Raspbian_10/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Raspbian_10/Release.key -O- | sudo apt-key add -
-```
+echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
+echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
 
-그리고 다음과 같이 CRI-O 설치한다.
-```shell
-sudo apt-get install cri-o-1.17
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | apt-key add -
+
+apt-get update
+apt-get install cri-o cri-o-runc
 ```
+<<<<<<< HEAD
 {{< /tab >}}
 
 {{< tab name="Ubuntu 18.04, 19.04 and 19.10" >}}
+=======
+<<<<<<< HEAD
+{{% /tab %}}
 
-```shell
-#  패키지 리포지터리 설정
-. /etc/os-release
-sudo sh -c "echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/x${NAME}_${VERSION_ID}/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list"
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/x${NAME}_${VERSION_ID}/Release.key -O- | sudo apt-key add -
-sudo apt-get update
-```
+{{% tab name="Ubuntu 18.04, 19.04 and 19.10" %}}
+=======
 
+{{% /tab %}}
+>>>>>>> upstream/dev-1.19-ko.1
+
+{{% tab name="Ubuntu" %}}
+
+다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
+
+| 운영 체제          | $OS               |
+| ---------------- | ----------------- |
+| Ubuntu 20.04     | `xUbuntu_20.04`   |
+| Ubuntu 19.10     | `xUbuntu_19.10`   |
+| Ubuntu 19.04     | `xUbuntu_19.04`   |
+| Ubuntu 18.04     | `xUbuntu_18.04`   |
+
+<br />
+그런 다음, `$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+사용자의 설치를 특정 릴리스에 고정할 수 있다.
+버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
+<br />
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
+
+그런 다음, 아래를 실행한다.
 ```shell
-# CRI-O 설치
-sudo apt-get install cri-o-1.17
+echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
+echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
+
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | apt-key add -
+
+apt-get update
+apt-get install cri-o cri-o-runc
 ```
+{{% /tab %}}
+
+{{% tab name="CentOS" %}}
+
+다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
+
+| 운영 체제          | $OS               |
+| ---------------- | ----------------- |
+| Centos 8         | `CentOS_8`        |
+| Centos 8 Stream  | `CentOS_8_Stream` |
+| Centos 7         | `CentOS_7`        |
+
+<br />
+그런 다음, `$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+사용자의 설치를 특정 릴리스에 고정할 수 있다.
+버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
+<br />
+
+그런 다음, 아래를 실행한다.
+```shell
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/devel:kubic:libcontainers:stable.repo
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
+yum install cri-o
+```
+<<<<<<< HEAD
 {{< /tab >}}
 
 {{< tab name="CentOS/RHEL 7.4+" >}}
+=======
+<<<<<<< HEAD
+{{% /tab %}}
 
-```shell
-# 선행 조건 설치
-curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/CentOS_7/devel:kubic:libcontainers:stable.repo
-curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:{{< skew latestVersion >}}.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:{{< skew latestVersion >}}/CentOS_7/devel:kubic:libcontainers:stable:cri-o:{{< skew latestVersion >}}.repo
-```
+{{% tab name="CentOS/RHEL 7.4+" %}}
+=======
 
-```shell
-# CRI-O 설치
-yum install -y cri-o
-```
+{{% /tab %}}
 
-{{< tab name="openSUSE Tumbleweed" >}}
+{{% tab name="openSUSE Tumbleweed" %}}
+>>>>>>> upstream/dev-1.19-ko.1
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 
 ```shell
 sudo zypper install cri-o
 ```
+{{% /tab %}}
+{{% tab name="Fedora" %}}
+
+`$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+
+사용할 수 있는 버전을 찾으려면 다음을 실행한다.
+```shell
+dnf module list cri-o
+```
+CRI-O는 Fedora에서 특정 릴리스를 고정하여 설치하는 방법은 지원하지 않는다.
+
+<<<<<<< HEAD
+{{< tab name="openSUSE Tumbleweed" >}}
+=======
+<<<<<<< HEAD
+{{% tab name="openSUSE Tumbleweed" %}}
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
+
+=======
+그런 다음, 아래를 실행한다.
+>>>>>>> upstream/dev-1.19-ko.1
+```shell
+dnf module enable cri-o:$VERSION
+dnf install cri-o
+```
+<<<<<<< HEAD
 {{< /tab >}}
+=======
+<<<<<<< HEAD
+=======
+
+>>>>>>> upstream/dev-1.19-ko.1
+{{% /tab %}}
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### CRI-O 시작
@@ -395,7 +479,40 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
+<<<<<<< HEAD
 {{< /tab >}}
+=======
+<<<<<<< HEAD
+=======
+{{< /tab >}}
+{{% tab name="윈도우 (PowerShell)" %}}
+```powershell
+# (containerd 설치)
+# containerd 다운로드
+cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.0-beta.2/containerd-1.4.0-beta.2-windows-amd64.tar.gz
+cmd /c tar xvf .\containerd-1.4.0-beta.2-windows-amd64.tar.gz
+```
+
+```powershell
+# 압축을 풀고 구성
+Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
+cd $Env:ProgramFiles\containerd\
+.\containerd.exe config default | Out-File config.toml -Encoding ascii
+
+# 구성을 검토한다. 설정에 따라 아래를 조정할 수 있다.
+# - sandbox_image (쿠버네티스 pause 이미지)
+# - cni bin_dir 및 conf_dir 위치
+Get-Content config.toml
+```
+
+```powershell
+# containerd 시작
+.\containerd.exe --register-service
+Start-Service containerd
+```
+>>>>>>> upstream/dev-1.19-ko.1
+{{% /tab %}}
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### systemd
@@ -407,5 +524,3 @@ kubeadm을 사용하는 경우에도 마찬가지로, 수동으로
 ## 다른 CRI 런타임: frakti
 
 자세한 정보는 [Frakti 빠른 시작 가이드](https://github.com/kubernetes/frakti#quickstart)를 참고한다.
-
-
diff --git a/content/ko/docs/setup/release/notes.md b/content/ko/docs/setup/release/notes.md
deleted file mode 100644
index 740d468acc..0000000000
--- a/content/ko/docs/setup/release/notes.md
+++ /dev/null
@@ -1,1370 +0,0 @@
----
-title: v1.18 릴리스 노트
-weight: 10
-card:
-  name: release-notes
-  weight: 20
-  anchors:
-  - anchor: "#"
-    title: 최신 릴리스 노트
-  - anchor: "#긴급-업그레이드-노트"
-    title: 긴급 업그레이드 노트
----
-
-<!-- NEW RELEASE NOTES ENTRY -->
-
-# v1.18.0
-
-[문서](https://docs.k8s.io)
-
-## v1.18.0 다운로드
-
-파일명 | sha512 해시
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes.tar.gz) | `cd5b86a3947a4f2cea6d857743ab2009be127d782b6f2eb4d37d88918a5e433ad2c7ba34221c34089ba5ba13701f58b657f0711401e51c86f4007cb78744dee7`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-src.tar.gz) | `fb42cf133355ef18f67c8c4bb555aa1f284906c06e21fa41646e086d34ece774e9d547773f201799c0c703ce48d4d0e62c6ba5b2a4d081e12a339a423e111e52`
-
-### 클라이언트 바이너리
-
-파일명 | sha512 해시
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-darwin-386.tar.gz) | `26df342ef65745df12fa52931358e7f744111b6fe1e0bddb8c3c6598faf73af997c00c8f9c509efcd7cd7e82a0341a718c08fbd96044bfb58e80d997a6ebd3c2`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-darwin-amd64.tar.gz) | `803a0fed122ef6b85f7a120b5485723eaade765b7bc8306d0c0da03bd3df15d800699d15ea2270bb7797fa9ce6a81da90e730dc793ea4ed8c0149b63d26eca30`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-386.tar.gz) | `110844511b70f9f3ebb92c15105e6680a05a562cd83f79ce2d2e25c2dd70f0dbd91cae34433f61364ae1ce4bd573b635f2f632d52de8f72b54acdbc95a15e3f0`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-amd64.tar.gz) | `594ca3eadc7974ec4d9e4168453e36ca434812167ef8359086cd64d048df525b7bd46424e7cc9c41e65c72bda3117326ba1662d1c9d739567f10f5684fd85bee`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-arm.tar.gz) | `d3627b763606557a6c9a5766c34198ec00b3a3cd72a55bc2cb47731060d31c4af93543fb53f53791062bb5ace2f15cbaa8592ac29009641e41bd656b0983a079`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-arm64.tar.gz) | `ba9056eff1452cbdaef699efbf88f74f5309b3f7808d372ebf6918442d0c9fea1653c00b9db3b7626399a460eef9b1fa9e29b827b7784f34561cbc380554e2ea`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-ppc64le.tar.gz) | `f80fb3769358cb20820ff1a1ce9994de5ed194aabe6c73fb8b8048bffc394d1b926de82c204f0e565d53ffe7562faa87778e97a3ccaaaf770034a992015e3a86`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-linux-s390x.tar.gz) | `a9b658108b6803d60fa3cd4e76d9e58bf75201017164fe54054b7ccadbb68c4ad7ba7800746940bc518d90475e6c0a96965a26fa50882f4f0e56df404f4ae586`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-windows-386.tar.gz) | `18adffab5d1be146906fd8531f4eae7153576aac235150ce2da05aee5ae161f6bd527e8dec34ae6131396cd4b3771e0d54ce770c065244ad3175a1afa63c89e1`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-client-windows-amd64.tar.gz) | `162396256429cef07154f817de2a6b67635c770311f414e38b1e2db25961443f05d7b8eb1f8da46dec8e31c5d1d2cd45f0c95dad1bc0e12a0a7278a62a0b9a6b`
-
-### 서버 바이너리
-
-파일명 | sha512 해시
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-amd64.tar.gz) | `a92f8d201973d5dfa44a398e95fcf6a7b4feeb1ef879ab3fee1c54370e21f59f725f27a9c09ace8c42c96ac202e297fd458e486c489e05f127a5cade53b8d7c4`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-arm.tar.gz) | `62fbff3256bc0a83f70244b09149a8d7870d19c2c4b6dee8ca2714fc7388da340876a0f540d2ae9bbd8b81fdedaf4b692c72d2840674db632ba2431d1df1a37d`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-arm64.tar.gz) | `842910a7013f61a60d670079716b207705750d55a9e4f1f93696d19d39e191644488170ac94d8740f8e3aa3f7f28f61a4347f69d7e93d149c69ac0efcf3688fe`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-ppc64le.tar.gz) | `95c5b952ac1c4127a5c3b519b664972ee1fb5e8e902551ce71c04e26ad44b39da727909e025614ac1158c258dc60f504b9a354c5ab7583c2ad769717b30b3836`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-server-linux-s390x.tar.gz) | `a46522d2119a0fd58074564c1fa95dd8a929a79006b82ba3c4245611da8d2db9fd785c482e1b61a9aa361c5c9a6d73387b0e15e6a7a3d84fffb3f65db3b9deeb`
-
-### 노드 바이너리
-
-파일명 | sha512 해시
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-amd64.tar.gz) | `f714f80feecb0756410f27efb4cf4a1b5232be0444fbecec9f25cb85a7ccccdcb5be588cddee935294f460046c0726b90f7acc52b20eeb0c46a7200cf10e351a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-arm.tar.gz) | `806000b5f6d723e24e2f12d19d1b9b3d16c74b855f51c7063284adf1fcc57a96554a3384f8c05a952c6f6b929a05ed12b69151b1e620c958f74c9600f3db0fcb`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-arm64.tar.gz) | `c207e9ab60587d135897b5366af79efe9d2833f33401e469b2a4e0d74ecd2cf6bb7d1e5bc18d80737acbe37555707f63dd581ccc6304091c1d98dafdd30130b7`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-ppc64le.tar.gz) | `a542ed5ed02722af44ef12d1602f363fcd4e93cf704da2ea5d99446382485679626835a40ae2ba47a4a26dce87089516faa54479a1cfdee2229e8e35aa1c17d7`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-linux-s390x.tar.gz) | `651e0db73ee67869b2ae93cb0574168e4bd7918290fc5662a6b12b708fa628282e3f64be2b816690f5a2d0f4ff8078570f8187e65dee499a876580a7a63d1d19`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0/kubernetes-node-windows-amd64.tar.gz) | `d726ed904f9f7fe7e8831df621dc9094b87e767410a129aa675ee08417b662ddec314e165f29ecb777110fbfec0dc2893962b6c71950897ba72baaa7eb6371ed`
-
-## v1.17.0 이후 체인지로그
-
-릴리스 노트의 전체 체인지로그는 이제 [https://relnotes.k8s.io](https://relnotes.k8s.io/?releaseVersions=1.18.0)에서 사용자 정의 가능한
-형식으로 호스팅된다. 확인하고 의견을 보내주기
-바란다!
-
-## 새로운 소식 (주요 테마)
-
-### 쿠버네티스 토폴로지 매니저가 베타로 전환 - 정렬!
-
-릴리스 1.18의 쿠버네티스 베타 기능인 [토폴로지 매니저 기능](https://github.com/nolancon/website/blob/f4200307260ea3234540ef13ed80de325e1a7267/content/en/docs/tasks/administer-cluster/topology-manager.md)은 저-지연(low-latency)에 최적화된 환경에서 워크로드를 실행할 수 있도록 CPU 및 장치(예: SR-IOV VF)를 NUMA 정렬 할 수 있다. 토폴로지 매니저가 도입되기 전에, CPU와 장치 관리자는 서로 독립적으로 리소스 할당 결정을 내렸다. 이로 인해 다중-소켓 시스템에 의도하지 않은 할당이 발생하여, 지연에 민감한 애플리케이션의 성능을 저하시킬 수 있었다.
-
-### 서버 사이드(server-side) 적용 - 베타 2
-
-서버-사이드 적용은 1.16에서 베타로 승격되었지만, 1.18에서 두 번째 베타가 도입된다. 이 새 버전은 모든 새로운 쿠버네티스 오브젝트의 필드 변경 사항을 추적하고 관리하여, 리소스의 변경된 부분과 시기를 알 수 있다.
-
-### 인그레스 확장 및 IngressClass로 사용 중단(deprecated) 어노테이션을 교체
-
-쿠버네티스 1.18에서 인그레스에 두 가지 중요한 추가 사항이 있는데, 그것은 새로운 `pathType` 필드와 새로운 `IngressClass` 리소스이다. `pathType` 필드는 경로(path)를 일치시키는 방법을 지정한다. 기본 `ImplementationSpecific` 유형 외에도 새로운 `Exact` 와 `Prefix` 경로 유형이 있다.
-
-`IngressClass` 리소스는 쿠버네티스 클러스터 내에서 인그레스 유형을 설명하는 데 사용된다. 인그레스는 인그레스에서 새로운 `ingressClassName` 필드를 사용하여 연관된 클래스를 지정할 수 있다. 이 새 리소스와 필드는 사용 중단된 `kubernetes.io/ingress.class` 어노테이션을 대체한다.
-
-### SIG CLI의 kubectl 디버그 소개
-
-SIG CLI는 이미 오랫동안 디버그 유틸리티의 필요성에 대해 논의하고 있었다. [임시(ephemeral) 컨테이너](/ko/docs/concepts/workloads/pods/ephemeral-containers/)가 개발되면서, `kubectl exec` 위에 구축된 도구를 통해 개발자를 지원할 수 있는 방법이 더욱 분명해졌다. `kubectl debug` [커맨드](https://github.com/kubernetes/enhancements/blob/master/keps/sig-cli/20190805-kubectl-debug.md) 추가(알파이지만 피드백은 언제나 환영)로 개발자는 클러스터 내에서 파드를 쉽게 디버깅할 수 있다. 우리는 이 추가 기능이 매우 유용하다고 생각한다. 이 커맨드를 사용하면 검사하려는 파드 바로 옆에서 실행되는 임시 컨테이너를 만들 수 있고, 대화식 문제 해결을 위해 콘솔에 연결할 수도 있다.
-
-### 쿠버네티스를 위한 윈도우 CSI 지원 알파 소개
-
-쿠버네티스 1.18 릴리스에서는 윈도우 용 CSI 프록시(CSI Proxy)의 알파 버전이 릴리스 된다. CSI 프록시를 사용하면 권한이 없는(사전 승인된) 컨테이너가 윈도우에서 권한이 있는 스토리지 작업을 수행할 수 있다. CSI 프록시를 활용하여 윈도우에서 CSI 드라이버를 지원할 수 있다.
-SIG 스토리지는 1.18 릴리스에서 많은 진전을 이루었다.
-특히, 다음 스토리지 기능이 쿠버네티스 1.18에서 GA 되었다.
-- 원시(Raw) 블록 지원: 볼륨을 마운트된 파일시스템 대신, 컨테이너 내에 블록 장치로 표시할 수 있다.
-- 볼륨 복제: CSI를 통해 쿠버네티스 API를 사용하여 퍼시스턴트볼륨클레임(PersistentVolumeClaim) 및 기본 스토리지 볼륨을 복제한다.
-- CSIDriver 쿠버네티스 API 오브젝트: CSI 드라이버 검색을 단순화하고 CSI 드라이버가 쿠버네티스 동작을 사용자 정의할 수 있게 한다.
-
-SIG 스토리지는 쿠버네티스 1.18에서 다음과 같은 새로운 스토리지 기능을 알파로 도입했다.
-- 윈도우 CSI 지원: 새로운 [CSIProxy](https://github.com/kubernetes-csi/csi-proxy)를 통해 윈도우에서 컨테이너화 된 CSI 노드 플러그인 활성화한다.
-- 재귀 볼륨 소유권 OnRootMismatch 옵션: 소유권 변경이 필요하고 많은 디렉터리와 파일이 있는 볼륨의 마운트 시간을 단축할 수 있는 새로운 “OnRootMismatch” 정책을 추가한다.
-
-### 다른 중요한 발표
-
-새로운 CI 작업으로 테스트 커버리지를 크게 늘린 이후, SIG 네트워크는 쿠버네티스 1.18에서 IPv6를 베타로 전환한다.
-
-NodeLocal DNSCache는 dnsCache 파드를 데몬셋으로 실행하여 clusterDNS 성능과 안정성을 향상시키는 애드온이다. 이 기능은 1.13 릴리스 이후 알파 버전으로 존재해왔다. SIG 네트워크는 Node Local DNSCache [#1351](https://github.com/kubernetes/enhancements/pull/1351)의 GA를 발표한다.
-
-## 알려진 이슈
-
-알려진 이슈가 보고되지 않음
-
-## 긴급 업그레이드 노트
-
-### (업그레이드하기 전에 반드시 읽어야 한다)
-
-#### kube-apiserver:
-- `--encryption-provider-config` 설정 파일에서, 명시적인 `cacheSize: 0` 파라미터는 이전에는 묵시적으로 1000개의 키를 캐싱하도록 기본으로 설정되었다. 쿠버네티스 1.18에서 이것은 이제 설정 유효성 검사 오류를 반환한다. 캐싱을 비활성화하려면 쿠버네티스 1.18 이상에서 음의 cacheSize 값을 지정할 수 있다.
-- 'certificatesigningrequests/approval' API 사용자는 이제 CSR이 요청한 특정 서명자(signer)에 대해 CSR을 '승인'할 권한이 있어야 한다. 새 signerName 필드 및 필수 권한 부여에 대한 자세한 정보는 https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests#authorization ([#88246](https://github.com/kubernetes/kubernetes/pull/88246), [@munnerz](https://github.com/munnerz)) [SIG API Machinery, 앱, 인증, CLI, 노드 및 테스트] 에서 확인할 수 있다.
-- 다음 기능은 무조건 활성화되며, 다음의 `--feature-gates`의 플래그가 제거되었다. `PodPriority`, `TaintNodesByCondition`, `ResourceQuotaScopeSelectors` 및 `ScheduleDaemonSetPods` ([#86210](https://github.com/kubernetes/kubernetes/pull/86210), [@draveness](https://github.com/draveness)) [SIG 앱과 스케줄]
-
-#### kubelet:
-- `--enable-cadvisor-endpoints` 는 이제 기본적으로 비활성화되어 있다. cAdvisor v1 Json API에 접근해야 하는 경우, kubelet 커맨드 라인에서 명시적으로 활성화한다. 이 플래그는 1.15에서 사용 중단되었으며 1.19에서 제거될 것이다. ([#87440](https://github.com/kubernetes/kubernetes/pull/87440), [@dims](https://github.com/dims)) [SIG Instrumentation, 노드 및 테스트]
-- CSIMigrationOpenStack을 베타로 승격한다(OpenStack Cinder CSI 드라이버를 설치해야 하므로 기본적으로 해제되어 있다). 인-트리(in-tree) AWS OpenStack Cinder 드라이버 "kubernetes.io/cinder"는 1.16에서 사용 중단되었으며, 1.20에서 제거될 것이다. 사용자는 CSIMigration + CSIMigrationOpenStack 기능을 활성화하고 OpenStack Cinder CSI 드라이버 (https://github.com/kubernetes-sigs/cloud-provider-openstack)를 설치하여 기존 파드와 PVC 오브젝트가 중단되지 않도록 해야한다. 사용자는 새 볼륨에 대해 OpenStack Cinder CSI 드라이버를 직접 사용해야 한다. ([#85637](https://github.com/kubernetes/kubernetes/pull/85637), [@dims](https://github.com/dims)) [SIG 클라우드 공급자]
-
-#### kubectl:
-- `kubectl` 및 k8s.io/client-go의 기본값은 더 이상 `http://localhost:8080`의 서버 주소가 아니다. 이러한 레거시 클러스터 중 하나를 소유한 경우, 서버를 안전하게 보호하는 것을 *강력히* 권장한다. 서버를 보호할 수 없다면, `$KUBERNETES_MASTER` 환경 변수를 `http://localhost:8080`으로 설정하여 서버 주소의 기본값을 계속 유지할 수 있다. `kubectl` 사용자는 `--server` 플래그를 사용하거나 `--kubeconfig` 또는 `$KUBECONFIG`를 통해 지정된 kubeconfig 파일에서 서버 주소를 설정할 수도 있다. ([#86173](https://github.com/kubernetes/kubernetes/pull/86173), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI 및 테스트]
-- `kubectl run`은 파드 생성과 관련이 없는 플래그와 함께, 이전에 사용 중단된 생성기(generator)를 삭제했다. `kubectl run`은 이제 파드만 생성한다. 파드 이외의 오브젝트를 만드려면, 특정 `kubectl create` 하위 커맨드를 참조한다.
-([#87077](https://github.com/kubernetes/kubernetes/pull/87077), [@soltysh](https://github.com/soltysh)) [SIG Architecture, CLI 및 테스트]
-- 사용 중단된 커맨드 `kubectl rolling-update`는 삭제되었다. ([#88057](https://github.com/kubernetes/kubernetes/pull/88057), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG 아키텍처, CLI 및 테스트]
-
-#### client-go:
-- 생성된 클라이언트 세트, 동적, 메타데이터 및 스케일 클라이언트의 메소드에 대한 서명이 `context.Context`를 첫 번째 인수로 채택하도록 수정되었다. Create, Update 및 Patch 메소드의 서명이 각각 CreateOptions, UpdateOptions 및 PatchOptions를 허용하도록 업데이트되었다. Delete 및 DeleteCollection 메소드의 서명은 이제 참조 대신 값으로 DeleteOptions를 허용한다. 이전 인터페이스를 사용하여 생성된 클라이언트 세트가 새로운 "사용 중단된" 패키지에 추가되어 새로운 API로 증분(incremental) 마이그레이션 할 수 있다. 사용 중단된 패키지는 1.21 릴리스에서 제거된다. http://sigs.k8s.io/clientgofix 에서 도구를 사용하여 새로운 서명에 대한 메소드 호출을 다시 쓸 수 있다.
-
-- 다음의 사용 중단된 메트릭이 제거되었다. 해당 메트릭으로 변환한다.
-  - 다음 교체 메트릭은 v1.14.0부터 제공된다.
-      - `rest_client_request_latency_seconds` -> `rest_client_request_duration_seconds`
-      - `scheduler_scheduling_latency_seconds` -> `scheduler_scheduling_duration_seconds `
-      - `docker_operations` -> `docker_operations_total`
-      - `docker_operations_latency_microseconds` -> `docker_operations_duration_seconds`
-      - `docker_operations_errors` -> `docker_operations_errors_total`
-      - `docker_operations_timeout` -> `docker_operations_timeout_total`
-      - `network_plugin_operations_latency_microseconds` -> `network_plugin_operations_duration_seconds`
-      - `kubelet_pod_worker_latency_microseconds` -> `kubelet_pod_worker_duration_seconds`
-      - `kubelet_pod_start_latency_microseconds` -> `kubelet_pod_start_duration_seconds`
-      - `kubelet_cgroup_manager_latency_microseconds` -> `kubelet_cgroup_manager_duration_seconds`
-      - `kubelet_pod_worker_start_latency_microseconds` -> `kubelet_pod_worker_start_duration_seconds`
-      - `kubelet_pleg_relist_latency_microseconds` -> `kubelet_pleg_relist_duration_seconds`
-      - `kubelet_pleg_relist_interval_microseconds` -> `kubelet_pleg_relist_interval_seconds`
-      - `kubelet_eviction_stats_age_microseconds` -> `kubelet_eviction_stats_age_seconds`
-      - `kubelet_runtime_operations` -> `kubelet_runtime_operations_total`
-      - `kubelet_runtime_operations_latency_microseconds` -> `kubelet_runtime_operations_duration_seconds`
-      - `kubelet_runtime_operations_errors` -> `kubelet_runtime_operations_errors_total`
-      - `kubelet_device_plugin_registration_count` -> `kubelet_device_plugin_registration_total`
-      - `kubelet_device_plugin_alloc_latency_microseconds` -> `kubelet_device_plugin_alloc_duration_seconds`
-      - `scheduler_e2e_scheduling_latency_microseconds` -> `scheduler_e2e_scheduling_duration_seconds`
-      - `scheduler_scheduling_algorithm_latency_microseconds` -> `scheduler_scheduling_algorithm_duration_seconds`
-      - `scheduler_scheduling_algorithm_predicate_evaluation` -> `scheduler_scheduling_algorithm_predicate_evaluation_seconds`
-      - `scheduler_scheduling_algorithm_priority_evaluation` -> `scheduler_scheduling_algorithm_priority_evaluation_seconds`
-      - `scheduler_scheduling_algorithm_preemption_evaluation` -> `scheduler_scheduling_algorithm_preemption_evaluation_seconds`
-      - `scheduler_binding_latency_microseconds` -> `scheduler_binding_duration_seconds`
-      - `kubeproxy_sync_proxy_rules_latency_microseconds` -> `kubeproxy_sync_proxy_rules_duration_seconds`
-      - `apiserver_request_latencies` -> `apiserver_request_duration_seconds`
-      - `apiserver_dropped_requests` -> `apiserver_dropped_requests_total`
-      - `etcd_request_latencies_summary` -> `etcd_request_duration_seconds`
-      - `apiserver_storage_transformation_latencies_microseconds ` -> `apiserver_storage_transformation_duration_seconds`
-      - `apiserver_storage_data_key_generation_latencies_microseconds` -> `apiserver_storage_data_key_generation_duration_seconds`
-      - `apiserver_request_count` -> `apiserver_request_total`
-      - `apiserver_request_latencies_summary`
-  - 다음 교체 메트릭은 v1.15.0부터 제공된다.
-      - `apiserver_storage_transformation_failures_total` -> `apiserver_storage_transformation_operations_total` ([#76496](https://github.com/kubernetes/kubernetes/pull/76496), [@danielqsj](https://github.com/danielqsj)) [SIG API Machinery, 클러스터 라이프사이클, Instrumentation, 네트워크, 노드 및 스케줄링]
-
-## 종류(Kind)별 변경
-
-### 사용 중단
-
-#### kube-apiserver:
-- 다음의 사용 중단된 API는 더 이상 제공되지 않는다.
-  - `apps/v1beta1`와 `apps/v1beta2`의 모든 리소스 대신 `apps/v1`을 사용한다.
-  - `extensions/v1beta1`의 `daemonsets`, `deployments`, `replicasets` 리소스 대신 `apps/v1`을 사용한다.
-  - `extensions/v1beta1`의 `networkpolicies` 리소스 대신 `networking.k8s.io/v1`을 사용한다.
-  - `extensions/v1beta1`의 `podsecuritypolicies`의 리소스 대신 `policy/v1beta1`을 사용한다. ([#85903](https://github.com/kubernetes/kubernetes/pull/85903), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, 앱, 클러스터 라이프사이클, Instrumentation 및 테스트]
-
-#### kube-controller-manager:
-- Azure 서비스 어노테이션 service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset은 사용 중단되었다. 향후 릴리스에서는 지원이 제거될 것이다. ([#88462](https://github.com/kubernetes/kubernetes/pull/88462), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-
-#### kubelet:
-- StreamingProxyRedirects 기능과 `--redirect-container-streaming` 플래그는 사용 중단되었으며, 향후 릴리스에서 제거될 예정이다. 디폴트 동작 (kubelet을 통한 프록시 스트리밍 요청)이 유일하게 지원되는 옵션이다. `--redirect-container-streaming=true`로 설정하는 경우, 이 설정으로부터 마이그레이션 해야 한다. v1.20부터는 이 플래그를 더 이상 사용할 수 없다. 플래그를 설정하지 않으면, 아무것도 할 필요가 없다. ([#88290](https://github.com/kubernetes/kubernetes/pull/88290), [@tallclair](https://github.com/tallclair)) [SIG API Machinery와 노드]
-- `/metrics/resource/v1alpha1` 리소스 메트릭 엔드포인트와 이 엔드포인트 이하 모든 메트릭은 사용 중단되었다. `/metrics/resource` 엔드포인트에서 생성된 다음의 메트릭으로 변환해야 한다.
-      - scrape_error --> scrape_error
-      - node_cpu_usage_seconds_total --> node_cpu_usage_seconds
-      - node_memory_working_set_bytes --> node_memory_working_set_bytes
-      - container_cpu_usage_seconds_total --> container_cpu_usage_seconds
-      - container_memory_working_set_bytes --> container_memory_working_set_bytes
-      - scrape_error --> scrape_error
-      ([#86282](https://github.com/kubernetes/kubernetes/pull/86282), [@RainbowMango](https://github.com/RainbowMango)) [SIG 노드]
-- 향후 릴리스에서, kubelet은 CSI 명세에 따라 더 이상 CSI NodePublishVolume 대상 디렉터리를 만들지 않는다. 대상 경로를 적절하게 생성하고 처리하려면 CSI 드라이버를 상황에 맞게 업데이트해야 한다. ([#75535](https://github.com/kubernetes/kubernetes/issues/75535)) [SIG 스토리지]
-
-#### kube-proxy:
-- `--healthz-port`와 `--metrics-port` 플래그는 사용 중단되었으므로, 대신 `--healthz-bind-address`와 `--metrics-bind-address`를 사용한다. ([#88512](https://github.com/kubernetes/kubernetes/pull/88512), [@SataQiu](https://github.com/SataQiu)) [SIG 네트워크]
-- kube-proxy에서 엔드포인트슬라이스(EndpointSlice)의 사용을 제어하기 위해 새로운 `EndpointSliceProxying` 기능 게이트가 추가되었다. 이 동작을 제어하는데 사용된 엔드포인트슬라이스 기능 게이트는 더 이상 kube-proxy에 영향을 미치지 않는다. 이 기능은 기본적으로 비활성화되어 있다. ([#86137](https://github.com/kubernetes/kubernetes/pull/86137), [@robscott](https://github.com/robscott))
-
-#### kubeadm:
-- `kubeadm upgrade node`에 대한 커맨드 라인 옵션 "kubelet-version"은 사용 중단되었으며 향후 릴리스에서 제거될 예정이다. ([#87942](https://github.com/kubernetes/kubernetes/pull/87942), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- `kubeadm alpha certs renew` 커맨드에서 실험용 플래그 `--use-api`의 사용을 중단한다. ([#88827](https://github.com/kubernetes/kubernetes/pull/88827), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- kube-dns는 사용 중단되었으며 향후 버전에서 지원되지 않는다. ([#86574](https://github.com/kubernetes/kubernetes/pull/86574), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- kubeadm-config 컨피그맵(ConfigMap)에 있는 `ClusterStatus` 구조체는 사용 중단되었으며, 향후 버전에서 제거될 예정이다. 제거될 때까지 kubeadm에 의해 유지 관리된다. 동일 정보는 `etcd`, `kube-apiserver` 파드 어노테이션, `kubeadm.kubernetes.io/etcd.advertise-client-urls`, `kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint`에서 각각 찾을 수 있다. ([#87656](https://github.com/kubernetes/kubernetes/pull/87656), [@ereslibre](https://github.com/ereslibre)) [SIG 클러스터 라이프사이클]
-
-#### kubectl:
-- --dry-run 플래그의 boolean 값과 설정되지 않은 값은 사용 중단되었으며 이후 버전에서는 --dry-run=server|client|none 값이 필요하다. ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-- `kubectl apply --server-dry-run` 은 사용 중단되었으며 --dry-run=server로 대체되었다. ([# 87580] (https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto) [SIG CLI]
-
-#### add-ons:
-- 클러스터-모니터링 애드온을 제거한다. ([#85512](https://github.com/kubernetes/kubernetes/pull/85512), [@serathius](https://github.com/serathius)) [SIG 클러스터 라이프사이클, Instrumentation, 확장성, 테스트]
-
-#### kube-scheduler:
-- `scheduling_duration_seconds` 요약 메트릭은 사용 중단되었다. ([#86586](https://github.com/kubernetes/kubernetes/pull/86586), [@xiaoanyunfei](https://github.com/xiaoanyunfei)) [SIG 스케줄링]
-- `scheduling_algorithm_predicate_evaluation_seconds`,
- `scheduling_algorithm_priority_evaluation_seconds` 메트릭은 사용 중단되었으며, `framework_extension_point_duration_seconds[extension_point="Filter"]`, `framework_extension_point_duration_seconds[extension_point="Score"]`으로 대체되었다. ([#86584](https://github.com/kubernetes/kubernetes/pull/86584), [@xiaoanyunfei](https://github.com/xiaoanyunfei)) [SIG 스케줄링]
-- 스케줄러 정책 API에서 `AlwaysCheckAllPredicates`는 사용 중단되었다. ([#86369](https://github.com/kubernetes/kubernetes/pull/86369), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG 스케줄링]
-
-#### 기타 사용 중단:
-- k8s.io/node-api 컴포넌트는 더 이상 업데이트되지 않는다. 대신, k8s.io/api의 RuntimeClass 타입과 k8s.io/client-go의 생성된 클라이언트를 사용한다. ([#87503](https://github.com/kubernetes/kubernetes/pull/87503), [@liggitt](https://github.com/liggitt)) [SIG 노드와 릴리스]
-- apiserver_request_total에서 'client' 레이블을 제거했다. ([#87669](https://github.com/kubernetes/kubernetes/pull/87669), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery 와 Instrumentation]
-
-### API 변경
-
-#### 새로운 API 타입/버전:
-- 새로운 IngressClass 리소스가 추가되어 보다 나은 인그레스 구성이 가능하다. ([#88509](https://github.com/kubernetes/kubernetes/pull/88509), [@robscott](https://github.com/robscott)) [SIG API Machinery, 앱, CLI, 네트워크, 노드, 테스트]
-- CSIDriver API는 storage.k8s.io/v1을 졸업했으며, 이제 사용이 가능하다. ([#84814](https://github.com/kubernetes/kubernetes/pull/84814), [@huffmanca](https://github.com/huffmanca)) [SIG 스토리지]
-
-#### 새로운 API 필드:
-- autoscaling/v2beta2 HorizontalPodAutoscaler는 스케일 동작을 구성할 수 있는 `spec.behavior` 필드를 추가했다. 스케일 업과 다운에 대한 동작은 별도로 지정된다. 정책 목록과 정책 선택 방법 뿐만 아니라, 양 방향에서 안정화 윈도우를 지정할 수 있다. 정책은 추가되거나 제거되는 절대 파드 개수 또는 파드 비율을 제한할 수 있다.] ([#74525](https://github.com/kubernetes/kubernetes/pull/74525), [@gliush](https://github.com/gliush)) [SIG API Machinery, 앱, 오토스케일링, CLI]
-- 인그레스:
-  - `spec.ingressClassName`은 사용 중단된 `kubernetes.io/ingress.class` 어노테이션을 대체하고, 인그레스 오브젝트를 특정 컨트롤러와 연결할 수 있게 한다.
-  - 경로 정의는 `pathType` 필드를 추가했는데, 지정 경로가 유입되는 요청과 어떻게 일치해야 하는지 표시하는 것을 허용한다. 유효한 값은 `Exact`, `Prefix`, `ImplementationSpecific` 이다. ([#88587](https://github.com/kubernetes/kubernetes/pull/88587), [@cmluciano](https://github.com/cmluciano)) [SIG 앱, 클러스터 라이프사이클과 네트워크]
-- 알파 기능인 `AnyVolumeDataSource`는 퍼시스턴트볼륨클레임 오브젝트가 spec.dataSource 필드를 사용하여 사용자 정의 유형을 데이터 소스로 참조할 수 있도록 한다. ([#88636](https://github.com/kubernetes/kubernetes/pull/88636), [@bswartz](https://github.com/bswartz)) [SIG 앱, 스토리지]
-- 알파 기능인 `ConfigurableFSGroupPolicy`는 v1 파드가 spec.securityContext.fsGroupChangePolicy 정책을 지정하여 파드에 마운트된 볼륨에 파일 권한이 적용되는 방식을 제어할 수 있다. ([#88488](https://github.com/kubernetes/kubernetes/pull/88488), [@gnufied](https://github.com/gnufied)) [SIG 스토리지]
-- 알파 기능인 `ServiceAppProtocol`을 사용하면 ServicePort 및 EndpointPort 정의에서 `appProtocol` 필드를 설정할 수 있다. ([#88503](https://github.com/kubernetes/kubernetes/pull/88503), [@robscott](https://github.com/robscott)) [SIG 앱, 네트워크]
-- 알파 기능인 `ImmutableEphemeralVolumes`는 시크릿(Secret) 및 컨피그맵 오브젝트의 `immutable` 필드를 통해 내용을 변경할 수 없는(immutable) 것으로 표시할 수 있다. ([#86377](https://github.com/kubernetes/kubernetes/pull/86377), [@wojtek-t](https://github.com/wojtek-t)) [SIG 앱, CLI, 테스팅]
-
-#### 다른 API 변경:
-- 베타 기능인 `ServerSideApply`는 모든 새로운 오브젝트에 대해 변경된 필드를 추적하고 관리할 수 있게 해준다. 이는 관리자와 그것의 자체 필드에 대한 목록과 함께 `metadata`에 `managedFields`가 있음을 의미한다.
-- 알파 기능인 `ServiceAccountIssuerDiscovery`는 서비스 어카운트 토큰을 발행하도록 구성된 API 서버에 의해 `/.well-known/openid-configuration` 및 `/openid/v1/jwks` 엔드포인트에 위치한 OIDC 디스커버리 정보 및 서비스 어카운트 토큰 검증 키를 공개할 수 있게 한다. ([#80724](https://github.com/kubernetes/kubernetes/pull/80724), [@cceckman](https://github.com/cceckman)) [SIG API Machinery, 인증, 클러스터 라이프사이클, 테스트]
-- `x-kubernetes-list-map-keys`를 사용하여 목록 아이템을 고유하게 식별하는 속성을 지정하는 커스텀리소스데피니션(CustomResourceDefinition) 스키마는 해당 속성이 모든 목록 아이템에 존재하도록 하기 위해, 해당 속성을 필수로 설정하거나 기본값을 가져야 한다. 자세한 내용은 https://kubernetes.io/docs/reference/using-api/api-concepts/#merge-strategy 를 확인한다. ([#88076](https://github.com/kubernetes/kubernetes/pull/88076), [@eloyekunle](https://github.com/eloyekunle)) [SIG API Machinery, 테스트]
-- `x-kubernetes-list-type: map` 또는 `x-kubernetes-list-type: set`을 사용하는 커스텀리소스데피니션 스키마는 이제 해당 커스텀 리소스의 목록 아이템이 고유한지 확인할 수 있다. ([#84920](https://github.com/kubernetes/kubernetes/pull/84920), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-
-#### 설정 파일 변경:
-
-#### kube-apiserver:
-- `--egress-selector-config-file` 설정 파일은 이제 apiserver.k8s.io/v1beta1 EgressSelectorConfiguration 설정 오브젝트를 수용하며, 네트워크 프록시에 대한 HTTP 또는 GRPC 연결을 지정할 수 있도록 업데이트되었다. ([#87179](https://github.com/kubernetes/kubernetes/pull/87179), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, 클라우드 공급자, 클러스터 라이프사이클]
-
-#### kube-scheduler:
-- 다중 스케줄링 프로파일을 지원하는 kubescheduler.config.k8s.io/v1alpha2 설정 파일 버전이 승인되었다. ([#87628](https://github.com/kubernetes/kubernetes/pull/87628), [@alculquicondor](https://github.com/alculquicondor)) [SIG 스케줄링]
-  - `kubescheduler.config.k8s.io/v1alpha2`에서 HardPodAffinityWeight가 최상위 ComponentConfig 파라미터에서 InterPodAffinity 플러그인의 PluginConfig 파라미터로 이동했다. ([#88002](https://github.com/kubernetes/kubernetes/pull/88002), [@alculquicondor](https://github.com/alculquicondor)) [SIG 스케줄링, 테스트]
-  - Kube-scheduler는 둘 이상의 스케줄링 프로파일을 실행할 수 있다. 파드가 주어지면, 프로파일은 `.spec.schedulerName`을 사용하여 선택된다. ([#88285](https://github.com/kubernetes/kubernetes/pull/88285), [@alculquicondor](https://github.com/alculquicondor)) [SIG 앱, 스케줄링, 테스트]
-  - v1alpha2 컴포넌트 설정에서 스케줄러 확장자(Scheduler Extender)를 설정할 수 있다. ([#88768](https://github.com/kubernetes/kubernetes/pull/88768), [@damemi](https://github.com/damemi)) [SIG 릴리스, 스케줄링, 테스트]
-  - 스케줄러 프레임워크의 PostFilter는 kubescheduler.config.k8s.io/v1alpha2에서 PreScore로 이름이 변경되었다. ([#87751](https://github.com/kubernetes/kubernetes/pull/87751), [@skilxn-go](https://github.com/skilxn-go)) [SIG 스케줄링, 테스트]
-
-#### kube-proxy:
-- IPVS 연결 타임아웃을 설정하기 위해 kube-proxy 플래그 `--ipvs-tcp-timeout`, `--ipvs-tcpfin-timeout`, `--ipvs-udp-timeout`을 추가했다. ([#85517](https://github.com/kubernetes/kubernetes/pull/85517), [@andrewsykim](https://github.com/andrewsykim)) [SIG 클러스터 라이프사이클, 네트워크]
-- kube-proxy에 옵션 `--detect-local-mode` 플래그를 추가했다. 유효한 값은 "ClusterCIDR"(기본값은 이전 동작과 일치)과 "NodeCIDR"이다. ([#87748](https://github.com/kubernetes/kubernetes/pull/87748), [@satyasm](https://github.com/satyasm)) [SIG 클러스터 라이프사이클, 네트워크, 스케줄링]
-- Kube-controller-manager와 kube-scheduler는 기본적으로 kube-apiserver와 일치하도록 프로파일링을 노출한다. 비활성화하려면 `--enable-profiling=false`를 사용한다. ([#88663](https://github.com/kubernetes/kubernetes/pull/88663), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, 클라우드 공급자, 스케줄링]
-- Kubelet 파드 리소스 API는 이제 활성화(active)된 파드에 대한 정보만 제공한다. ([#79409](https://github.com/kubernetes/kubernetes/pull/79409), [@takmatsu](https://github.com/takmatsu)) [SIG 노드]
-- kube-controller-manager의 새로운 플래그 `--endpointslice-updates-batch-period`를 사용하여 파드 변경으로 생성된 엔드포인트슬라이스 업데이트 수를 줄일 수 있다. ([#88745](https://github.com/kubernetes/kubernetes/pull/88745), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, 앱, 네트워크]
-- kube-proxy, kubelet, kube-controller-manager 및 kube-scheduler의 새로운 플래그 `--show-hidden-metrics-for-version`은 이전 마이너 릴리스에서 사용 중단된 모든 숨겨진 메트릭을 표시하는 데 사용할 수 있다. ([#85279](https://github.com/kubernetes/kubernetes/pull/85279), [@RainbowMango](https://github.com/RainbowMango)) [SIG 클러스터 라이프사이클, 네트워크]
-
-#### 베타가 된 기능:
-  - StartupProbe ([#83437](https://github.com/kubernetes/kubernetes/pull/83437), [@matthyx](https://github.com/matthyx)) [SIG 노드, Scalability, 테스트]
-
-#### GA 된 기능:
-  - VolumePVCDataSource ([#88686](https://github.com/kubernetes/kubernetes/pull/88686), [@j-griffith](https://github.com/j-griffith)) [SIG 스토리지]
-  - TaintBasedEvictions ([#87487](https://github.com/kubernetes/kubernetes/pull/87487), [@skilxn-go](https://github.com/skilxn-go)) [SIG API Machinery, 앱, 노드, 스케줄링, 테스트]
-  - BlockVolume 및 CSIBlockVolume ([#88673](https://github.com/kubernetes/kubernetes/pull/88673), [@jsafrane](https://github.com/jsafrane)) [SIG 스토리지]
-  - 윈도우 RunAsUserName ([#87790](https://github.com/kubernetes/kubernetes/pull/87790), [@marosset](https://github.com/marosset)) [SIG 앱 및 윈도우]
-- 이전 릴리스에서는 관련 기능이 무조건 활성화되었으므로, 다음 기능 게이트가 제거되었다. CustomResourceValidation, CustomResourceSubresources, CustomResourceWebhookConversion, CustomResourcePublishOpenAPI, CustomResourceDefaulting ([#87475](https://github.com/kubernetes/kubernetes/pull/87475), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-
-### 기능
-
-- (많은 요청으로 인한) API 요청량 제한이 이제 로그 레벨 2의 client-go 로그에 리포트 된다. 메시지는 `Throttling request took 1.50705208s, request: GET:<URL>` 형태이다. 이러한 메시지가 있으면 관리자에게 클러스터를 적절히 조정해야 함을 알릴 수 있다. ([#87740](https://github.com/kubernetes/kubernetes/pull/87740), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery]
-- FC 볼륨 플러그인에 마운트 옵션 지원이 추가된다. ([#87499](https://github.com/kubernetes/kubernetes/pull/87499), [@ejweber](https://github.com/ejweber)) [SIG 스토리지]
-- 이용자 그룹(audience) 클레임의 spn: 접두사 없이 AAD 토큰을 가져올 수 있도록 azure 인증 모듈에 config-mode 플래그를 추가한다. 지정하지 않으면, 디폴트 동작이 변경되지 않는다. ([#87630](https://github.com/kubernetes/kubernetes/pull/87630), [@weinong](https://github.com/weinong)) [SIG API Machinery, 인증, CLI, 클라우드 공급자]
-- CoreDNS 레플리카 개수 설정을 허용한다. ([#85837](https://github.com/kubernetes/kubernetes/pull/85837), [@pickledrick](https://github.com/pickledrick)) [SIG 클러스터 라이프사이클]
-- kubectl exec 호출 시 --filename 플래그를 사용하여 리소스를 지정할 수 있도록 허용 ([#88460](https://github.com/kubernetes/kubernetes/pull/88460), [@soltysh](https://github.com/soltysh)) [SIG CLI, 테스트]
-- Apiserver는 HTTP/2 클라이언트가 단일 apiserver에 갇히는 것을 방지하기 위해 그레이스풀(GOAWAY)하게 닫히게 하는 요청의 일부인 새로운 플래그 --goaway-chance를 추가했다. ([#88567](https://github.com/kubernetes/kubernetes/pull/88567), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- Azure 클라우드 공급자는 이제 쿠버네티스 클러스터와 다른 AAD 테넌트 및 구독에서 Azure 네트워크 리소스(가상 네트워크, 로드 밸런서, 퍼블릭 IP, 라우팅 테이블, 네트워크 보안 그룹 등) 사용을 지원한다. 이 기능을 사용하려면, 다음을 참고한다.  https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/docs/cloud-provider-config.md#host-network-resources-in-different-aad-tenant-and-subscription. ([#88384](https://github.com/kubernetes/kubernetes/pull/88384), [@bowen5](https://github.com/bowen5)) [SIG 클라우드 공급자]
-- Azure VMSS/VMSSVM 클라이언트는 이제 스로틀링(throttling) 요청을 금지한다. ([#86740](https://github.com/kubernetes/kubernetes/pull/86740), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Azure 클라우드 공급자 캐시 TTL은 설정 가능하며, Azure 클라우드 공급자 목록은 다음과 같다.
-  - "availabilitySetNodesCacheTTLInSeconds"
-  - "vmssCacheTTLInSeconds"
-  - "vmssVirtualMachinesCacheTTLInSeconds"
-  - "vmCacheTTLInSeconds"
-  - "loadBalancerCacheTTLInSeconds"
-  - "nsgCacheTTLInSeconds"
-  - "routeTableCacheTTLInSeconds"
-  ([#86266](https://github.com/kubernetes/kubernetes/pull/86266), [@zqingqing1](https://github.com/zqingqing1)) [SIG 클라우드 공급자]
-- Azure 글로벌 속도 제한(rate limit)은 클라이언트별로 전환된다. 새로운 속도 제한 설정 옵션이 도입되었고, 다음과 같다. routeRateLimit, SubnetsRateLimit, InterfaceRateLimit, RouteTableRateLimit, LoadBalancerRateLimit, PublicIPAddressRateLimit, SecurityGroupRateLimit, VirtualMachineRateLimit, StorageAccountRateLimit, DiskRateLimit, SnapshotRateLimit, VirtualMachineScaleSetRateLimit, VirtualMachineSizeRateLimit. 원래 속도 제한 옵션은 새 클라이언트의 속도 리미터(limiter)의 디폴트 값이다. ([#86515](https://github.com/kubernetes/kubernetes/pull/86515), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Azure 네트워크 및 VM 클라이언트가 이제 스로틀링 요청을 금지한다. ([#87122](https://github.com/kubernetes/kubernetes/pull/87122), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Azure 스토리지 클라이언트가 이제 스로틀링 요청을 금지한다. ([#87306](https://github.com/kubernetes/kubernetes/pull/87306), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Azure: 단일 스택 IPv6에 대한 지원을 추가한다. ([#88448](https://github.com/kubernetes/kubernetes/pull/88448), [@aramase](https://github.com/aramase)) [SIG 클라우드 공급자]
-- 스케줄러의 ComponentConfig에서 PodTopologySpread 플러그인에 대한 DefaultConstraints를 지정할 수 있다. ([#88671](https://github.com/kubernetes/kubernetes/pull/88671), [@alculquicondor](https://github.com/alculquicondor)) [SIG 스케줄링]
-- VMSS 클러스터의 VM list 작업을 피하기 위해 DisableAvailabilitySetNodes가 추가되었다. vmType이 "vmss"이고 모든 노드(컨트롤 플레인 노드 포함)가 VMSS 가상 머신인 경우에만 사용해야 한다. ([#87685](https://github.com/kubernetes/kubernetes/pull/87685), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Elasticsearch는 advertise 주소 자동 설정을 지원한다. ([#85944](https://github.com/kubernetes/kubernetes/pull/85944), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클, Instrumentation]
-- 엔드포인트슬라이스가 이제 디폴트로 활성화된다. 새로운 `EndpointSliceProxying` 기능 게이트는 kube-proxy가 엔드포인트슬라이스를 사용할지 여부를 결정하며, 디폴트로 비활성화되어 있다. ([#86137](https://github.com/kubernetes/kubernetes/pull/86137), [@robscott](https://github.com/robscott)) [SIG 네트워크]
-- Kube-proxy: iptables 프록시에 이중 스택 IPv4/IPv6 지원이 추가되었다. ([#82462](https://github.com/kubernetes/kubernetes/pull/82462), [@vllry](https://github.com/vllry)) [SIG 네트워크]
-- Kubeadm은 이제 kube-controller-manager에 대한 이중 스택 노드 cidr 마스크의 자동 계산을 지원한다. ([#85609](https://github.com/kubernetes/kubernetes/pull/85609), [@Arvinderpal](https://github.com/Arvinderpal)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 잡(Job)을 배포하는 업그레이드된 헬스 체크를 추가한다. ([#81319](https://github.com/kubernetes/kubernetes/pull/81319), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 실험 기능 게이트 PublicKeysECDSA를 추가하여 "kubeadm init"에서 ECDSA 인증서가 있는
-클러스터를 생성할 수 있게 한다. "kubeadm alpha certs renew"을 사용하여 기존 ECDSA 인증서의 갱신도 지원되지만, 즉시 또는 업그레이드 중에 RSA와 ECDSA 알고리즘간에 전환하지는 않는다. ([#86953](https://github.com/kubernetes/kubernetes/pull/86953), [@rojkov](https://github.com/rojkov)) [SIG API Machinery, Auth 및 클러스터 라이프사이클]
-- Kubeadm: JSON, YAML, Go 템플릿 및 JsonPath 형식으로 'kubeadm config images list' 커맨드의 구조화된 출력을 구현했다. ([#86810](https://github.com/kubernetes/kubernetes/pull/86810), [@bart0sh](https://github.com/bart0sh)) [SIG 클러스터 라이프사이클]
-- Kubeadm: kubeconfig 인증서 갱신 시, 내장된 CA를 디스크의 CA와 동기화된 상태로 유지한다. ([#88052](https://github.com/kubernetes/kubernetes/pull/88052), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 같은 이름의 노드가 이미 존재하는 경우 클러스터에 조인하려는 노드를 거부한다. ([#81056](https://github.com/kubernetes/kubernetes/pull/81056), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: kubeadm-flags.env에서 윈도우 특화된 kubelet 플래그를 지원한다. ([#88287](https://github.com/kubernetes/kubernetes/pull/88287), [@gab-satchi](https://github.com/gab-satchi)) [SIG 클러스터 라이프사이클, 윈도우]
-- Kubeadm: 이미지를 가져오는 데 실패한 후 자동 재시도를 지원한다. ([#86899](https://github.com/kubernetes/kubernetes/pull/86899), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 알 수 없는 k8s 버전이 전달되면 가장 근접한 알려진 etcd 버전으로 폴백(fallback) 업그레이드를 지원한다. ([#88373](https://github.com/kubernetes/kubernetes/pull/88373), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- Kubectl/drain: 축출 비활성화(disable-eviction) 옵션을 추가한다. 축출이 지원되는 경우에도, 삭제하기 위해 강제로 드레인(drain)한다. 이것은 PodDisruptionBudgets 확인을 우회하므로 주의해서 사용해야 한다. ([#85571](https://github.com/kubernetes/kubernetes/pull/85571), [@michaelgugino](https://github.com/michaelgugino)) [SIG CLI]
-- Kubectl/drain: skip-wait-for-delete-timeout 옵션을 추가한다. 파드의 `DeletionTimestamp`가 N초 보다 오래된 경우, 파드를 기다리는 것을 건너뛴다. 건너뛰려면 0초보다 커야 한다. ([#85577](https://github.com/kubernetes/kubernetes/pull/85577), [@michaelgugino](https://github.com/michaelgugino)) [SIG CLI]
-- 사전 구성된 로드 밸런서의 Azure 클라우드 공급자에 `preConfiguredBackendPoolLoadBalancerTypes` 옵션이 추가됐다. 가능한 값: `""`, `"internal"`, `"external"`,`"all"` ([#86338](https://github.com/kubernetes/kubernetes/pull/86338), [@gossion](https://github.com/gossion)) [SIG 클라우드 공급자]
-- PodTopologySpread 플러그인은 이제 스케줄링 결정을 할 때 terteringPod를 제외한다. ([#87845](https://github.com/kubernetes/kubernetes/pull/87845), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG 스케줄링]
-- 클라우드 공급자/azure : 네트워크 보안 그룹은 이제 별도의 리소스 그룹에 있을 수 있다. ([#87035](https://github.com/kubernetes/kubernetes/pull/87035), [@CecileRobertMichon](https://github.com/CecileRobertMichon)) [SIG 클라우드 공급자]
-- SafeSysctlWhitelist: net.ipv4.ping_group_range를 추가한다. ([#85463](https://github.com/kubernetes/kubernetes/pull/85463), [@AkihiroSuda](https://github.com/AkihiroSuda)) [SIG 인증]
-- 스케줄러 프레임워크 허용 플러그인은 이제 예약 플러그인 후 스케줄링 주기가 끝나는 시점에 플러그인이 실행된다. 바인딩 주기 시작 시 허가 대기 상태가 유지된다. ([#88199](https://github.com/kubernetes/kubernetes/pull/88199), [@mateuszlitwin](https://github.com/mateuszlitwin)) [SIG 스케줄링]
-- 스케줄러: DefaultBinder 플러그인을 추가한다. ([#87430](https://github.com/kubernetes/kubernetes/pull/87430), [@alculquicondor](https://github.com/alculquicondor)) [SIG 스케줄링, 테스트]
-- TopologySpreadConstraints를 정의하는 파드에 대한 디폴트 스프레드 스코어링(spreading scoring) 플러그인을 건너뛴다. ([#87566](https://github.com/kubernetes/kubernetes/pull/87566), [@skilxn-go](https://github.com/skilxn-go)) [SIG 스케줄링]
-- kubectl --dry-run 플래그는 이제 클라이언트-사이드와 서버-사이드의 dry-run 전략을 지원하기 위해 'client', 'server', 'none' 값을 허용한다. --dry-run 플래그의 boolean 값과 설정되지 않은 값은 사용 중단(deprecated)되었으며 향후 버전에서는 값이 필요하다. ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-- apply, patch, create, run, annotate, label, set, autoscale, drain, rollout undo, 그리고 expose를 포함한 명령에 대해 --dry-run=server를 사용하여 kubectl에서 서버-사이드 dry-run을 지원한다. ([#87714](https://github.com/kubernetes/kubernetes/pull/87714), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery, CLI, 테스트]
-- --dry-run=server|client를 kubectl delete, taint, replace에 추가한다. ([#88292](https://github.com/kubernetes/kubernetes/pull/88292), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI, 테스트]
-- PodTopologySpread(기능 게이트 `EvenPodsSpread`) 기능은 1.18에서 디폴트로 활성화되었다. ([#88105](https://github.com/kubernetes/kubernetes/pull/88105), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG 스케줄링, 테스트]
-- kubelet 및 디폴트 도커 런타임은 이제 대상 컨테이너의 리눅스 프로세스 네임스페이스에서 임시 컨테이너 실행을 지원한다. 다른 컨테이너 런타임은 이 기능에 대한 지원을 구현해야 해당 런타임에서 사용할 수 있다. ([#84731](https://github.com/kubernetes/kubernetes/pull/84731), [@verb](https://github.com/verb)) [SIG 노드]
-- `CPUManager` 상태 파일의 기본 형식이 변경되었다. 업그레이드는 원활해야 하지만, 이전 형식을 참조하는 써드파티 도구는 업데이트해야 한다. ([#84462](https://github.com/kubernetes/kubernetes/pull/84462), [@klueska](https://github.com/klueska)) [SIG 노드, 테스트]
-- CNI 버전을 v0.8.5로 업데이트한다. ([#78819](https://github.com/kubernetes/kubernetes/pull/78819), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, 클러스터 라이프사이클, 네트워크, 릴리스, 테스트]
-- Webhook은 네트워크 프록시를 알파 버전으로 지원한다. ([#85870](https://github.com/kubernetes/kubernetes/pull/85870), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, 인증, 테스트]
-- 클라이언트 인증서 파일이 제공되면, 새 연결을 위해 파일을 다시 로드하고 인증서가 변경되면 연결을 닫는다. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, 인증, 노드, 테스트]
-- --force 플래그로 kubectl을 사용하여 오브젝트를 삭제할 때, 더 이상 --grace-period=0을 지정할 필요가 없다. ([#87776](https://github.com/kubernetes/kubernetes/pull/87776), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- GCE의 윈도우 노드는 컨트롤 플레인에 가상 TPM-기반 인증을 사용할 수 있다. ([#85466](https://github.com/kubernetes/kubernetes/pull/85466), [@pjh](https://github.com/pjh)) [SIG 클러스터 라이프사이클]
-- 이제 "--node-ip ::"를 kubelet에 전달하여 노드의 기본 주소로 사용할 IPv6 주소를 자동으로 감지해야 함을 나타낼 수 있다. ([#85850](https://github.com/kubernetes/kubernetes/pull/85850), [@danwinship](https://github.com/danwinship)) [SIG 클라우드 공급자, 네트워크, 노드]
-- `kubectl`은 이제 `kubectl alpha debug` 명령을 포함한다. 이 명령을 사용하면 디버깅 목적으로 임시 컨테이너를 실행 중인 파드에 연결할 수 있다. ([#88004](https://github.com/kubernetes/kubernetes/pull/88004), [@verb](https://github.com/verb)) [SIG CLI]
-- kubeconfig 파일 및 kubectl의 --tls-server-name을 통해 TLS 서버 이름 재정의를 지정할 수 있다. ([#88769](https://github.com/kubernetes/kubernetes/pull/88769), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, 인증, CLI]
-
-#### 메트릭:
-- `rest_client_rate_limiter_duration_seconds` 메트릭을 컴포넌트 기반에 추가하여 클라이언트 사이드 속도 제한기(rate limiter) 지연(latency)을 초 단위로 추적한다. 동사(verb)와 URL로 분류된다. ([#88134](https://github.com/kubernetes/kubernetes/pull/88134), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery, 클러스터 라이프사이클, Instrumentation]
-- exec 인증에 대한 두 개의 클라이언트 인증서 메트릭을 추가했다.
-    - `rest_client_certificate_expiration_seconds`는 현재 클라이언트 인증서의 수명을 보고하는 측정기이다. UTC 1970년 1월 1일 이후 만료 시간을 초 단위로 보고한다.
-    - `rest_client_certificate_rotation_age`는 방금 교체한 클라이언트 인증서의 수명을 초 단위로 보고하는 히스토그램이다. ([#84382](https://github.com/kubernetes/kubernetes/pull/84382), [@sambdavidson](https://github.com/sambdavidson)) [SIG API Machinery, 인증, 클러스터 라이프사이클, Instrumentation]
-- 컨트롤러 관리자는 작업큐 메트릭을 제공한다. ([#87967](https://github.com/kubernetes/kubernetes/pull/87967), [@zhan849](https://github.com/zhan849)) [SIG API Machinery]
-- 다음의 메트릭 기능이 꺼져 있다.
-  - kubelet_pod_worker_latency_microseconds
-  - kubelet_pod_start_latency_microseconds
-  - kubelet_cgroup_manager_latency_microseconds
-  - kubelet_pod_worker_start_latency_microseconds
-  - kubelet_pleg_relist_latency_microseconds
-  - kubelet_pleg_relist_interval_microseconds
-  - kubelet_eviction_stats_age_microseconds
-  - kubelet_runtime_operations
-  - kubelet_runtime_operations_latency_microseconds
-  - kubelet_runtime_operations_errors
-  - kubelet_device_plugin_registration_count
-  - kubelet_device_plugin_alloc_latency_microseconds
-  - kubelet_docker_operations
-  - kubelet_docker_operations_latency_microseconds
-  - kubelet_docker_operations_errors
-  - kubelet_docker_operations_timeout
-  - network_plugin_operations_latency_microseconds ([#83841](https://github.com/kubernetes/kubernetes/pull/83841), [@RainbowMango](https://github.com/RainbowMango)) [SIG 네트워크, 노드]
-- Kube-apiserver 메트릭은 이제 /healthz, /livez, /readyz 요청에 대한 요청 수, 대기 시간 및 응답 크기를 포함한다. ([#83598](https://github.com/kubernetes/kubernetes/pull/83598), [@jktomer](https://github.com/jktomer)) [SIG API Machinery]
-- Kubelet은 이제 인증서 로테이션(rotation)을 수행할 수 없는 경우, `server_expiration_renew_failure` 및 `client_expiration_renew_failure` 메트릭 카운터를 제공한다. ([#84614](https://github.com/kubernetes/kubernetes/pull/84614), [@rphillips](https://github.com/rphillips)) [SIG API Machinery, 인증, CLI, 클라우드 공급자, 클러스터 라이프사이클, Instrumentation, 노드, 릴리스]
-- Kubelet: 메트릭 process_start_time_seconds는 ALPHA 안정성 레벨로 표시된다. ([#85446](https://github.com/kubernetes/kubernetes/pull/85446), [@RainbowMango](https://github.com/RainbowMango)) [SIG API Machinery, 클러스터 라이프사이클, Instrumentation, 노드]
-- 헬스 상태가 좋지 않은 PLEG의 진단을 돕기 위한 새로운 메트릭 `kubelet_pleg_last_seen_seconds`를 추가한다. ([#86251](https://github.com/kubernetes/kubernetes/pull/86251), [@bboreham](https://github.com/bboreham)) [SIG 노드]
-
-### 기타 (버그, 정리(Cleanup) or Flake(플레이크))
-
-- 1.16 이상의 API 서버에 대해, 1.15 이전으로 클라이언트 회귀가 파드 상태의 podIP 또는 노드 명세의 podCIDR을 업데이트할 수 없었던 문제를 수정했다. ([#88505](https://github.com/kubernetes/kubernetes/pull/88505), [@liggitt](https://github.com/liggitt)) [SIG 앱, 네트워크]
-- 롤링 업데이트 파티션에 대한 "kubectl describe statefulsets.apps" 출력 가비지를 수정했다. ([#85846](https://github.com/kubernetes/kubernetes/pull/85846), [@phil9909](https://github.com/phil9909)) [SIG CLI]
-- PV의 파일시스템이 디스크의 실제 파일시스템과 일치하지 않을 때 PV에 이벤트를 추가한다. ([#86982](https://github.com/kubernetes/kubernetes/pull/86982), [@gnufied](https://github.com/gnufied)) [SIG 스토리지]
-- azure 디스크 WriteAccelerator 지원을 추가한다. ([#87945](https://github.com/kubernetes/kubernetes/pull/87945), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- VM 인스턴스 업데이트를 위해 고 루틴(goroutines) 간 지연(delay)을 추가한다. ([#88094](https://github.com/kubernetes/kubernetes/pull/88094), [@aramase](https://github.com/aramase)) [SIG 클라우드 공급자]
-- 클러스터 덤프 정보에 init 컨테이너 로그를 추가한다. ([#88324](https://github.com/kubernetes/kubernetes/pull/88324), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- 애드온 : elasticsearch 디스커버리는 IPv6를 지원한다. ([#85543](https://github.com/kubernetes/kubernetes/pull/85543), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클, Instrumentation]
-- PV 및 PVC에 "volume.beta.kubernetes.io/migrated-to" 어노테이션을 추가하면, PV 및 PVC가 마이그레이션되어 프로비저닝과 삭제를 위해 해당 오브젝트를 선택할 수 있도록 외부 프로비저너에 신호를 보낸다. ([#87098](https://github.com/kubernetes/kubernetes/pull/87098), [@davidz627](https://github.com/davidz627)) [SIG 스토리지]
-- 모든 api-server 로그 요청 라인은 grep으로 찾기 쉬운 형식으로 되어 있다. ([#87203](https://github.com/kubernetes/kubernetes/pull/87203), [@lavalamp](https://github.com/lavalamp)) [SIG API Machinery]
-- Azure VMSS LoadBalancerBackendAddressPools 업데이트는 순차적-동기(sequential-sync) + 동시-비동기(concurrent-async) 요청으로 개선되었다. ([#88699](https://github.com/kubernetes/kubernetes/pull/88699), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Azure 클라우드 공급자는 이제 이용자 그룹 클레임에 spn: 접두사가 없는 AAD 토큰을 얻는다. ([#87590](https://github.com/kubernetes/kubernetes/pull/87590), [@weinong](https://github.com/weinong)) [SIG 클라우드 공급자]
-- AzureFile 및 CephFS는 민감한 마운트 옵션의 로깅을 방지하는 새로운 마운트 라이브러리를 사용한다. ([#88684](https://github.com/kubernetes/kubernetes/pull/88684), [@saad-ali](https://github.com/saad-ali)) [SIG 스토리지]
-- 리눅스 노드와 윈도우 노드를 포함하는 쿠버네티스 클러스터에서 윈도우 스케줄링을 피하기 위해, dns-horizontal 컨테이너를 리눅스 노드에 바인딩한다. ([#83364](https://github.com/kubernetes/kubernetes/pull/83364), [@wawa0210](https://github.com/wawa0210)) [SIG 클러스터 라이프사이클, 윈도우]
-- 윈도우 스케줄링을 피하기 위해 kube-dns 컨테이너를 리눅스 노드에 바인딩한다. ([#83358](https://github.com/kubernetes/kubernetes/pull/83358), [@wawa0210](https://github.com/wawa0210)) [SIG 클러스터 라이프사이클, 윈도우]
-- 리눅스 노드와 윈도우 노드를 포함하는 쿠버네티스 클러스터에서 윈도우 스케줄링을 피하기 위해, metadata-agent 컨테이너를 리눅스 노드에 바인딩한다. ([#83363](https://github.com/kubernetes/kubernetes/pull/83363), [@wawa0210](https://github.com/wawa0210)) [SIG 클러스터 라이프사이클, Instrumentation, 윈도우]
-- 리눅스 노드와 윈도우 노드를 포함하는 쿠버네티스 클러스터에서 윈도우 스케줄링을 피하기 위해, metrics-server 컨테이너를 리눅스 노드에 바인딩한다. ([#83362](https://github.com/kubernetes/kubernetes/pull/83362), [@wawa0210](https://github.com/wawa0210)) [SIG 클러스터 라이프사이클, Instrumentation, 윈도우]
-- 버그 수정: 최신 패키지 노드를 포함해야 한다. &#35;351 (@caseydavenport) ([#84163](https://github.com/kubernetes/kubernetes/pull/84163), [@david-tigera](https://github.com/david-tigera)) [SIG 클러스터 라이프사이클]
-- CPU 상한(limit)은 이제 윈도우 컨테이너에 적용된다. 노드가 오버-프로비저닝된 경우, 가중치가 사용되지 않으며 상한만 고려된다. ([#86101](https://github.com/kubernetes/kubernetes/pull/86101), [@PatrickLang](https://github.com/PatrickLang)) [SIG 노드, 테스트, 윈도우]
-- COS 노드의 core_pattern을 절대 경로로 변경했다. ([#86329](https://github.com/kubernetes/kubernetes/pull/86329), [@mml](https://github.com/mml)) [SIG 클러스터 라이프사이클, 노드]
-- Client-go 인증서 관리자 교체는 발급된 인증서와 함께 선택적인 중급(intermediate)의 체인을 유지하는 기능을 얻었다. ([#88744](https://github.com/kubernetes/kubernetes/pull/88744), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, 인증]
-- 클라우드 공급자 설정인 CloudProviderBackoffMode가 더 이상 사용되지 않으므로 제거되었다. ([#88463](https://github.com/kubernetes/kubernetes/pull/88463), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- debian-hyperkube-base 이미지가 사용 중단되고 제거되므로 적합(Conformance) 이미지는 이제 stretch-slim에 의존한다. ([#88702](https://github.com/kubernetes/kubernetes/pull/88702), [@dims](https://github.com/dims)) [SIG 클러스터 라이프사이클, 릴리스, 테스트]
-- kubectl create 커맨드에서 --generator 플래그는 사용 중단(deprecated)됨 ([#88655](https://github.com/kubernetes/kubernetes/pull/88655), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- 초기화 단계(preflight) 동안, kubeadm은 이제 conntrack 실행 파일이 있는지 확인한다. ([#85857](https://github.com/kubernetes/kubernetes/pull/85857), [@hnanni](https://github.com/hnanni)) [SIG 클러스터 라이프사이클]
-- 엔드포인트슬라이스에는 파드 종료를 위한 엔드포인트가 없어야 한다. ([#89056](https://github.com/kubernetes/kubernetes/pull/89056), [@andrewsykim](https://github.com/andrewsykim)) [SIG 앱, 네트워크]
-- 임시 저장 한도를 초과하는 파드로 인한 축출은 이제 `kubelet_evictions` 메트릭에 의해 기록되며 경고할 수 있다. ([#87906](https://github.com/kubernetes/kubernetes/pull/87906), [@smarterclayton](https://github.com/smarterclayton)) [SIG 노드]
-- kubectl이 널(null) 값을 잘못 거부하지 않도록 하기 위해 널 입력 가능(nullable), 필수/비필수 필드를 만들어 공개된 OpenAPI 스키마를 필터링한다. ([#85722](https://github.com/kubernetes/kubernetes/pull/85722), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- --shutdown-delay-duration이 경과하기 전에, 종료가 시작된 직후 오류를 반환하도록 /readyz를 수정한다. ([#88911](https://github.com/kubernetes/kubernetes/pull/88911), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- 감시(watch) 요청 처리 시 API Server 잠재적 메모리 누수 이슈를 수정한다. ([#85410](https://github.com/kubernetes/kubernetes/pull/85410), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- 엔드포인트슬라이스 컨트롤러 경합 조건(race condition)을 수정하고 엔드포인트슬라이스의 외부 변경을 처리하는지 확인한다. ([#85703](https://github.com/kubernetes/kubernetes/pull/85703), [@robscott](https://github.com/robscott)) [SIG 앱, 네트워크]
-- 순수한 ipv6 vsphere 환경에서 손실된 IPv6 주소 이슈를 수정한다. ([#86001](https://github.com/kubernetes/kubernetes/pull/86001), [@hubv](https://github.com/hubv)) [SIG 클라우드 공급자]
-- 예기치 않은 LoadBalancer 업데이트가 발생하지 않도록 LoadBalancer 규칙 검사를 수정한다. ([#85990](https://github.com/kubernetes/kubernetes/pull/85990), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- Kube-proxy에서 다른 IP 군으로 로드 밸런서를 사용할 때 다운되는 버그를 수정한다. ([#87117](https://github.com/kubernetes/kubernetes/pull/87117), [@aojea](https://github.com/aojea)) [SIG 네트워크]
-- port-forward 버그 수정: 이름이 지정된 포트가 서비스와 작동하지 않는 문제를 수정한다. ([#85511](https://github.com/kubernetes/kubernetes/pull/85511), [@oke-py](https://github.com/oke-py)) [SIG CLI]
-- 오래된 IPv6 엔드포인트가 정리되지 않은 이중 스택 IPVS 프록시의 버그를 수정한다. ([#87695](https://github.com/kubernetes/kubernetes/pull/87695), [@andrewsykim](https://github.com/andrewsykim)) [SIG 네트워크]
-- orphan 리비전(revision)을 채택할 수 없고 스테이트풀셋(statefulset)을 동기화 할 수 없는 버그를 수정한다. ([#86801](https://github.com/kubernetes/kubernetes/pull/86801), [@likakuli](https://github.com/likakuli)) [SIG 앱]
-- ExternalTrafficPolicy가 ExternalIP 서비스에 적용되지 않는 버그를 수정한다. ([#88786](https://github.com/kubernetes/kubernetes/pull/88786), [@freehan](https://github.com/freehan)) [SIG 네트워크]
-- kubenet이 tc 출력을 파싱(parse)하지 못하는 버그를 수정한다. ([#83572](https://github.com/kubernetes/kubernetes/pull/83572), [@chendotjs](https://github.com/chendotjs)) [SIG 네트워크]
-- 파드가 IP 주소를 얻지 못하게 하는 kubenet의 회귀 문제를 수정한다. ([#85993](https://github.com/kubernetes/kubernetes/pull/85993), [@chendotjs](https://github.com/chendotjs)) [SIG 네트워크, 노드]
-- azure 파일 AuthorizationFailure를 수정한다. ([#85475](https://github.com/kubernetes/kubernetes/pull/85475), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- 엔드포인트슬라이스 컨트롤러가 공유 오브젝트를 수정하려고 하는 버그를 수정한다. ([#85368](https://github.com/kubernetes/kubernetes/pull/85368), [@robscott](https://github.com/robscott)) [SIG API Machinery, 앱, 네트워크]
-- aws-load-balancer-security-groups 어노테이션 처리 문제를 수정한다. 이 어노테이션이 할당된 보안 그룹은 더 이상 쿠버네티스에 의해 수정되지 않으며, 대부분의 사용자가 예상하는 동작이다. 이 어노테이션을 사용하면, 더 이상 불필요한 보안 그룹이 만들어지지 않는다. ([#83446](https://github.com/kubernetes/kubernetes/pull/83446), [@Elias481](https://github.com/Elias481)) [SIG 클라우드 공급자]
-- 부정확한 캐시로 인한 잘못된 VMSS 업데이트를 수정한다. ([#89002](https://github.com/kubernetes/kubernetes/pull/89002), [@ArchangelSDY](https://github.com/ArchangelSDY)) [SIG 클라우드 공급자]
-- hostname의 종속성을 제거하여 윈도우 용 isCurrentInstance를 수정한다. ([#89138](https://github.com/kubernetes/kubernetes/pull/89138), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- LoadBalancer가 또다른 리소스 그룹에 지정된 경우 azure 클라우드 공급자에서 찾을 수 없는 리소스에 대한 이슈 #85805를 수정한다. ([#86502](https://github.com/kubernetes/kubernetes/pull/86502), [@levimm](https://github.com/levimm)) [SIG 클라우드 공급자]
-- local=true로 설정한 경우 kubectl annotate 오류를 수정한다. ([#86952](https://github.com/kubernetes/kubernetes/pull/86952), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- kubectl create deployment 커맨드가 사용하는 이미지 이름을 수정한다. ([#86636](https://github.com/kubernetes/kubernetes/pull/86636), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- `kubectl drain ignore` 데몬셋(daemonset) 및 기타 오류를 수정한다. ([#87361](https://github.com/kubernetes/kubernetes/pull/87361), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- 노드 이벤트에서 "involvedObject"에 대한 "apiVersion"이 누락되는 문제를 수정한다. ([#87537](https://github.com/kubernetes/kubernetes/pull/87537), [@uthark](https://github.com/uthark)) [SIG 앱, 노드]
-- azure 클라우드 공급자에서 nil 포인터 역참조를 수정한다. ([#85975](https://github.com/kubernetes/kubernetes/pull/85975), [@ldx](https://github.com/ldx)) [SIG 클라우드 공급자]
-- 스테이트풀셋을 여러 번 적용하지 못하게 하는 스테이트풀셋 변환에서 회귀 문제를 수정 ([#87706](https://github.com/kubernetes/kubernetes/pull/87706), [@liggitt](https://github.com/liggitt)) [SIG 앱, 테스트]
-- 여러 경로를 함께 업데이트 할 때 경로 충돌된 경로 업데이트 작업을 수정한다. ([#88209](https://github.com/kubernetes/kubernetes/pull/88209), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- 파드 볼륨 처리가 실패할 때 kubelet이 PVC/PV 오브젝트를 반복적으로 가져오는 것을 방지하도록 수정한다. 이렇게 하면 이 같은 오류 시나리오에서 API 서버로의 계속적인 연결시도(hammering)를 막을 수 있지만, 파드 볼륨 처리의 일부 오류가 재시도되기까지 최대 2-3분이 소요될 수 있다. ([#88141](https://github.com/kubernetes/kubernetes/pull/88141), [@tedyu](https://github.com/tedyu)) [SIG 노드, 스토리지]
-- DNS 레이블 서비스 어노테이션이 설정되지 않은 경우, PIP의 DNS가 삭제되는 버그를 수정한다. ([#87246] ([#87246](https://github.com/kubernetes/kubernetes/pull/87246), [@nilo19](https://github.com/nilo19)) [SIG 클라우드 공급자]
-- 컨트롤 플레인을 사용할 수 없게 하는 etcd LIST에서 썬더링 허드(thundering herd)를 야기하는 컨트롤 플레인 호스트 롤링 업그레이드를 수정한다. ([#86430](https://github.com/kubernetes/kubernetes/pull/86430), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, 노드, 테스트]
-- 수정: CSINode에 대한 azure 디스크 마이그레이션 지원을 추가한다. ([#88014](https://github.com/kubernetes/kubernetes/pull/88014), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- 수정: azure 클라이언트에서 다시 시도할 수 없는(non-retriable) 오류를 추가한다. ([#87941](https://github.com/kubernetes/kubernetes/pull/87941), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자]
-- 수정: azure 디스크 연결/해제 시 복구를 추가한다. ([#88444](https://github.com/kubernetes/kubernetes/pull/88444), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자]
-- 수정: azure 데이터 디스크는 기본적으로 os 디스크와 동일한 키를 사용해야 한다. ([#86351](https://github.com/kubernetes/kubernetes/pull/86351), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자]
-- 수정: azure 디스크를 Standard_DC4s/DC2s 인스턴스에 마운트할 수 없다. ([#86612](https://github.com/kubernetes/kubernetes/pull/86612), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- 수정: azure 파일 마운트 타임아웃 이슈를 해결한다. ([#88610](https://github.com/kubernetes/kubernetes/pull/88610), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- 수정: azure 디스크 전에 디스크 상태를 확인한다. ([#88360](https://github.com/kubernetes/kubernetes/pull/88360), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자]
-- 수정: csi 드라이버에서 손상된 마운트 포인트를 해결한다. ([#88569](https://github.com/kubernetes/kubernetes/pull/88569), [@andyzhangx](https://github.com/andyzhangx)) [SIG 스토리지]
-- 수정: azure 디스크 lun 이슈를 해결한다. ([#88158](https://github.com/kubernetes/kubernetes/pull/88158), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- 수정: azure 디스크 최대 개수를 업데이트한다. ([#88201](https://github.com/kubernetes/kubernetes/pull/88201), [@andyzhangx](https://github.com/andyzhangx)) [SIG 클라우드 공급자, 스토리지]
-- AWS에서 "디바이스 X를 ​​요청했지만 Y를 찾음" 연결 오류를 수정했다. ([#85675](https://github.com/kubernetes/kubernetes/pull/85675), [@jsafrane](https://github.com/jsafrane)) [SIG 클라우드 공급자, 스토리지]
-- CIDR 범위를 벗어나면 `Except` 값이 허용되는 네트워크폴리시(NetworkPolicy) 유효성 검사를 수정했다. ([#86578](https://github.com/kubernetes/kubernetes/pull/86578), [@tnqn](https://github.com/tnqn)) [SIG 네트워크]
-- TopologyManager의 버그를 수정했다. 이전에는 컨테이너 생성이 직렬화된(serialized) 상황에서만 TopologyManager가 정렬을 보장했다. 이제는 컨테이너 생성의 모든 시나리오에서 정렬이 보장된다. ([#87759](https://github.com/kubernetes/kubernetes/pull/87759), [@klueska](https://github.com/klueska)) [SIG 노드]
-- 노드가 추가될 때 공급자 ID를 판별하는 중에 오류가 발생하면 공급자 ID가 노드에 대해 설정되지 않는 버그가 수정되었다. ([#87043](https://github.com/kubernetes/kubernetes/pull/87043), [@zjs](https://github.com/zjs)) [SIG 앱, 클라우드 공급자]
-- kubelet 이미지 관리자에서 스태틱(static) 파드 워커가 아무 경고 없이 작업을 중지시킬 수 있는 데이터 경합을 수정했다. ([#88915](https://github.com/kubernetes/kubernetes/pull/88915), [@roycaihw](https://github.com/roycaihw)) [SIG 노드]
-- kubelet이 파드 볼륨을 정리하는 문제를 수정했다. ([#86277](https://github.com/kubernetes/kubernetes/pull/86277), [@tedyu](https://github.com/tedyu)) [SIG 스토리지]
-- kubelet이 파드의 준비(ready) 상태를 업데이트하지 못하는 회귀 문제를 수정했다. ([#84951](https://github.com/kubernetes/kubernetes/pull/84951), [@tedyu](https://github.com/tedyu)) [SIG 노드]
-- kubelet이 동시 파드 조정(reconciliation) 루프를 잘못 실행하여 충돌하는 문제를 수정했다. ([#89055](https://github.com/kubernetes/kubernetes/pull/89055), [@tedyu](https://github.com/tedyu)) [SIG 노드]
-- 타임아웃 후 블록 CSI 볼륨 정리 문제를 수정했다. ([#88660](https://github.com/kubernetes/kubernetes/pull/88660), [@jsafrane](https://github.com/jsafrane)) [SIG 스토리지]
-- 타임아웃 후 CSI 원시 블록 볼륨 정리 문제를 수정했다. ([#87978](https://github.com/kubernetes/kubernetes/pull/87978), [@jsafrane](https://github.com/jsafrane)) [SIG 스토리지]
-- AWS 클라우드 공급자가 프로비저닝하지 않은 LoadBalancer 보안 그룹을 삭제 시도하도록 수정했으며, `service.beta.kubernetes.io/aws-load-balancer-security-groups` 어노테이션이 있더라도 AWS 클라우드 공급자가 기본 LoadBalancer 보안 그룹을 생성하도록 수정했다. aws-load-balancer-security-groups의 의도된 동작은 로드 밸런서에 할당된 모든 보안 그룹을 바꾸는 것이다. ([#84265](https://github.com/kubernetes/kubernetes/pull/84265), [@bhagwat070919](https://github.com/bhagwat070919)) [SIG 클라우드 공급자]
-- 두 개의 스케줄러 메트릭(pending_pods와 schedule_attempts_total)이 기록되지 않는 문제를 수정했다. ([#87692](https://github.com/kubernetes/kubernetes/pull/87692), [@everpeace](https://github.com/everpeace)) [SIG 스케줄링]
-- 삭제/재생성된 파드에 대해 kubelet이 보고한(kubelet-reported) 파드 상태와 관련된 이슈를 수정했다. ([#86320](https://github.com/kubernetes/kubernetes/pull/86320), [@liggitt](https://github.com/liggitt)) [SIG 노드]
-- 커스텀 리소스의 no-op 패치 또는 업데이트 시 metadata.generation의 증가를 야기하는 멀티-버전 커스텀 리소스의 변환(conversion) 오류를 수정했다. ([#88995](https://github.com/kubernetes/kubernetes/pull/88995), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- kubectl이 획득한 AAD 토큰이 on-behalf-of flow 및 oidc와 호환되지 않는 문제를 수정했다. 이 수정 이전의 이용자 그룹은 "spn:" 접두사를 가진다. 이 수정 후에는 "spn:" 접두사가 생략된다. ([#86412](https://github.com/kubernetes/kubernetes/pull/86412), [@weinong](https://github.com/weinong)) [SIG API Machinery, 인증, 클라우드 공급자]
-- c2, n2, m1, m2 머신 유형에 15개 이상의 GCE 퍼시스턴트(Persistent) 디스크를 연결할 수 없는 문제를 수정했다. ([#88602](https://github.com/kubernetes/kubernetes/pull/88602), [@yuga711](https://github.com/yuga711)) [SIG 스토리지]
-- 윈도우에서 엔드포인트슬라이스 기능 게이트를 활성화할 때 kube-proxy가 지원하도록 수정한다. ([#86016](https://github.com/kubernetes/kubernetes/pull/86016), [@robscott](https://github.com/robscott)) [SIG 인증, 네트워크]
-- 클라이언트 인증서 교체 사례에서 kubelet이 크래시되는 이슈를 수정한다. ([#88079](https://github.com/kubernetes/kubernetes/pull/88079), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, 인증, 노드]
-- 서비스 어카운트(service account) 토큰 컨트롤러를 실행하지 않는 클러스터에서 서비스 어카운트 토큰 승인 오류를 수정한다. ([#87029](https://github.com/kubernetes/kubernetes/pull/87029), [@liggitt](https://github.com/liggitt)) [SIG 인증]
-- 65536개의 IP 주소보다 큰 IPv4 범위를 사용하여 --service-cluster-ip-range 처리 중 v1.17.0 회귀 문제를 수정한다. ([#86534](https://github.com/kubernetes/kubernetes/pull/86534), [@liggitt](https://github.com/liggitt)) [SIG 네트워크]
-- 네트워크 폴리시(NetworkPolicy) PolicyTypes의 잘못된 유효성 검사 결과를 수정한다. ([#85747](https://github.com/kubernetes/kubernetes/pull/85747), [@tnqn](https://github.com/tnqn)) [SIG 네트워크]
-- 하위 프로토콜 교섭(negotiation)의 경우 클라이언트 및 서버 프로토콜이 모두 필요하다. ([#86646](https://github.com/kubernetes/kubernetes/pull/86646), [@tedyu](https://github.com/tedyu)) [SIG API Machinery, 노드]
-- 여러 노드에서 연결을 허용하는 볼륨의 경우 이제 다른 노드에서 연결 및 분리 작업이 병렬로 실행된다. ([#88678](https://github.com/kubernetes/kubernetes/pull/88678), [@verult](https://github.com/verult)) [SIG 스토리지]
-- 분리(orphan) 전파 정책으로 스테이트풀셋이 삭제되면 가비지 수집기가 ControllerRevisions를 올바르게 분리할 수 있다. ([#84984](https://github.com/kubernetes/kubernetes/pull/84984), [@cofyc](https://github.com/cofyc)) [SIG 앱]
-- `Get-kube.sh`는 공급자가 메타데이터 서버 기본값 대신 GCE 또는 GKE 인 경우, 인증을 위해 gcloud의 현재 로컬 GCP 서비스 계정을 사용한다. ([#88383](https://github.com/kubernetes/kubernetes/pull/88383), [@BenTheElder](https://github.com/BenTheElder)) [SIG 클러스터 라이프사이클]
-- CVE-2020-9283에 대한 수정 사항을 제공하도록 Golang/x/net이 업데이트되었다. ([#88381](https://github.com/kubernetes/kubernetes/pull/88381), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, CLI, 클라우드 공급자, 클러스터 라이프사이클, Instrumentation]
-- 서빙 인증서(serving certificate)의 파라미터가 SNI 인증서의 IP인 이름을 지정하면 서버 연결에 응답하는 데 우선 순위가 부여된다. ([#85308](https://github.com/kubernetes/kubernetes/pull/85308), [@deads2k](https://github.com/deads2k)) [SIG API Machinery]
-- yaml 파싱 성능을 개선했다. ([#85458](https://github.com/kubernetes/kubernetes/pull/85458), [@cjcullen](https://github.com/cjcullen)) [SIG API Machinery, CLI, 클라우드 공급자, 클러스터 라이프사이클, Instrumentation, 노드]
-- 노드 인증자(authorizer)의 성능을 개선한다. ([#87696](https://github.com/kubernetes/kubernetes/pull/87696), [@liggitt](https://github.com/liggitt)) [SIG 인증]
-- GKE 알파 클러스터에서는 서비스 어노테이션 `cloud.google.com/network-tier: Standard`를 사용할 수 있다. ([#88487](https://github.com/kubernetes/kubernetes/pull/88487), [@zioproto](https://github.com/zioproto)) [SIG 클라우드 공급자]
-- CSI 퍼시스턴트 볼륨을 설명할 때 FSType을 포함한다. ([#85293](https://github.com/kubernetes/kubernetes/pull/85293), [@huffmanca](https://github.com/huffmanca)) [SIG CLI, 스토리지]
-- Iptables/유저스페이스(userspace) 프록시: 모든 외부 IP 대신, 동기화 루프 당 하나씩 로컬 주소를 가져옴으로써 성능을 개선한다 ([#85617](https://github.com/kubernetes/kubernetes/pull/85617), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery, CLI, 클라우드 공급자, 클러스터 라이프사이클, Instrumentation , 네트워크]
-- Kube-aggregator: 항상 서비스의 현재 상태를 반영하기 위해 unavailableGauge 메트릭을 설정한다. ([#87778](https://github.com/kubernetes/kubernetes/pull/87778), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
-- Kube-apiserver: gracePeriodSeconds=0 및 resourceVersion 전제 조건(precondition)이 있는 파드를 삭제하는 중에 발생하는 충돌 오류를 수정했다. ([#85516](https://github.com/kubernetes/kubernetes/pull/85516), [@michaelgugino](https://github.com/michaelgugino)) [SIG API Machinery]
-- Kube-proxy가 더 이상 공유 엔드포인트슬라이스를 수정하지 않는다. ([#86092](https://github.com/kubernetes/kubernetes/pull/86092), [@robscott](https://github.com/robscott)) [SIG 네트워크]
-- Kube-proxy: 이중 스택 모드에서 엔드포인트의 IP Family를 얻을 수 없는 경우, 주소가 없는 엔드포인트에 대한 로그가 넘치지 않도록 경고 대신 InfoV(4) 레벨로 로그를 남긴다. ([#88934](https://github.com/kubernetes/kubernetes/pull/88934), [@aojea](https://github.com/aojea)) [SIG 네트워크]
-- Kubeadm을 사용하면 이중 스택이 활성화된 경우 단일 스택 클러스터를 구성할 수 있다. ([#87453](https://github.com/kubernetes/kubernetes/pull/87453), [@aojea](https://github.com/aojea)) [SIG API Machinery, 클러스터 라이프사이클, 네트워크]
-- Kubeadm에 이제 CoreDNS 버전 1.6.7이 포함된다. ([#86260](https://github.com/kubernetes/kubernetes/pull/86260), [@rajansandeep](https://github.com/rajansandeep)) [SIG 클러스터 라이프사이클]
-- Kubeadm 업그레이드는 항상 스택에 대한 etcd 백업을 유지한다. ([#86861](https://github.com/kubernetes/kubernetes/pull/86861), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 'kubeadm alpha kubelet config download'가 제거되었다. 대신 'kubeadm upgrade node phase kubelet-config'를 사용한다. ([#87944](https://github.com/kubernetes/kubernetes/pull/87944), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 클러스터 이름을 controller-manager 인수(argument)로 포워딩한다. ([#85817](https://github.com/kubernetes/kubernetes/pull/85817), [@ereslibre](https://github.com/ereslibre)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 더 이상 존재하지 않는 "ci-cross/*" 대신 "ci/k8s-master" 버전 레이블 지원을 추가한다. ([#86609](https://github.com/kubernetes/kubernetes/pull/86609), [@Pensu](https://github.com/Pensu)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 동시 etcd 멤버 조인에 대한 잠정 지원을 추가로 개선한다. 여러 구성원이 동일한 호스트 이름을 받을 수 있는 버그를 수정한다. etcd 클라이언트 다이얼 타임아웃을 늘리고 추가/제거/... 작업에 대한 타임아웃을 다시 시도한다. ([#87505](https://github.com/kubernetes/kubernetes/pull/87505), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: "upgrade apply"에 kubelet 환경 파일을 쓰지 않도록 한다. ([#85412](https://github.com/kubernetes/kubernetes/pull/85412), [@boluisa](https://github.com/boluisa)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 손상된 kubelet.conf 파일로 "kubeadm reset"을 실행할 때 발생할 수 있는 문제를 수정한다. ([#86216](https://github.com/kubernetes/kubernetes/pull/86216), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 단일 노드 클러스터에서 'kubeadm upgrade'가 멈추는 버그를 수정한다. ([#88434](https://github.com/kubernetes/kubernetes/pull/88434), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 태그가 변경되지 않았지만 내용이 변경된 경우에도 이미지를 미리 가져오도록 한다. ([#85603](https://github.com/kubernetes/kubernetes/pull/85603), [@bart0sh](https://github.com/bart0sh)) [SIG 클러스터 라이프사이클]
-- Kubeadm: v1.15에서 사용 중단(deprecated) 되었으므로 'kubeadm upgrade node config' 명령을 제거한다. 대신 'kubeadm upgrade node phase kubelet-config'를 사용한다. ([#87975](https://github.com/kubernetes/kubernetes/pull/87975), [@SataQiu](https://github.com/SataQiu)) [SIG 클러스터 라이프사이클]
-- Kubeadm: 사용 중단된 CoreDNS 기능-게이트(feature-gate)를 제거한다. 기능이 GA로 전환된 v1.11 이후부터 'true'로 설정되었다. v1.13에서는 CLI에서 사용 중단(deprecated) 및 히든(hidden)으로 표시되었다. ([#87400](https://github.com/kubernetes/kubernetes/pull/87400), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: apiserver가 응답하지 않으면 `kubeadm-config` 컨피그맵 생성 또는 변경(mutation)을 다시 시도한다. 이것은 새로운 컨트롤 플레인 노드에 조인할 때 복원력을 향상시킨다. ([#85763](https://github.com/kubernetes/kubernetes/pull/85763), [@ereslibre](https://github.com/ereslibre)) [SIG 클러스터 라이프사이클]
-- Kubeadm: kubeconfig 파일에서 인증 기관(certificate authority) PEM 데이터의 유효성을 검사할 때 공백을 허용한다. ([#86705](https://github.com/kubernetes/kubernetes/pull/86705), [@neolit123](https://github.com/neolit123)) [SIG 클러스터 라이프사이클]
-- Kubeadm: bind-address 옵션을 사용하여 kube-controller-manager 및 kube-scheduler http 프로브(probe)를 구성한다. ([#86493](https://github.com/kubernetes/kubernetes/pull/86493), [@aojea](https://github.com/aojea)) [SIG 클러스터 라이프사이클]
-- Kubeadm: api-server AdvertiseAddress IP family를 사용하여 비 외부(non external) etcd 클러스터에 대한 etcd 엔드포인트 IP family를 선택한다. ([#85745](https://github.com/kubernetes/kubernetes/pull/85745), [@aojea](https://github.com/aojea)) [SIG 클러스터 라이프사이클]
-- kubectl cluster-info dump --output-directory=xxx 는 이제 출력 형식에 따라 확장자가 있는 파일을 생성한다. ([#82070](https://github.com/kubernetes/kubernetes/pull/82070), [@olivierlemasle](https://github.com/olivierlemasle)) [SIG CLI]
-- `kubectl describe <type>` 및 `kubectl top pod`는 표시할 결과가 없는 경우 `"No resources found"` 또는 `"No resources found in <namespace> namespace"` 라는 메시지를 반환한다. ([#87527](https://github.com/kubernetes/kubernetes/pull/87527), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- `kubectl drain node --dry-run`은 축출되거나 삭제될 파드를 나열한다. ([#82660](https://github.com/kubernetes/kubernetes/pull/82660), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-- `kubectl set resources`는 리소스에 대한 빈(empty) 변경 사항을 전달하면 더 이상 오류를 반환하지 않는다. `kubectl set subject`는 리소스에 대한 빈 변경 사항을 전달하면 더 이상 오류를 반환하지 않는다. ([#85490](https://github.com/kubernetes/kubernetes/pull/85490), [@sallyom](https://github.com/sallyom)) [SIG CLI]
-- metrics-server 또는 prometheus를 통해 수집한 Kubelet 메트릭은 더 이상 3개 이상의 파드를 실행하는 윈도우 노드에 대해 타임아웃되지 않아야 한다. ([#87730](https://github.com/kubernetes/kubernetes/pull/87730), [@marosset](https://github.com/marosset)) [SIG 노드, 테스트, 윈도우]
-- kubelet 메트릭이 버킷(bucket)으로 변경되었다. 예를 들어 `exec/{podNamespace}/{podID}/{containerName}`은 이제 exec 일뿐이다. ([#87913](https://github.com/kubernetes/kubernetes/pull/87913), [@cheftako](https://github.com/cheftako)) [SIG 노드]
-- kubelet은 API 서버에서 불필요한 파드 상태 업데이트 작업을 줄인다. ([#88591](https://github.com/kubernetes/kubernetes/pull/88591), [@smarterclayton](https://github.com/smarterclayton)) [SIG 노드, 확장성]
-- 쿠버네티스는 매초가 아닌 5초 동안 100 msec마다 iptables 잠금을 획득하려고 시도한다. 이는 이탈률이 높은 iptables 모드에서 kube-proxy를 사용하는 환경에 특히 유용하다. ([#85771](https://github.com/kubernetes/kubernetes/pull/85771), [@aojea](https://github.com/aojea)) [SIG 네트워크]
-- GCE 대상 풀에 대한 단일 업데이트의 인스턴스 수를 1000으로 제한한다. ([#87881](https://github.com/kubernetes/kubernetes/pull/87881), [@wojtek-t](https://github.com/wojtek-t)) [SIG 클라우드 공급자, Network, 확장성]
-- Azure 클라이언트가 지정된 HTTP 상태 코드에서만 다시 시도한다. ([#88017](https://github.com/kubernetes/kubernetes/pull/88017), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- 오류 메시지 및 서비스 이벤트 메시지를 보다 명확하게 만든다. ([#86078](https://github.com/kubernetes/kubernetes/pull/86078), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- externalTrafficPolicy가 로컬로 설정된 경우 AWS NLB 헬스 체크 타임아웃을 최소화한다. ([#73363](https://github.com/kubernetes/kubernetes/pull/73363), [@kellycampbell](https://github.com/kellycampbell)) [SIG 클라우드 공급자]
-- Pause 이미지에 non-amd64 이미지의 "Architecture"가 포함된다. ([#87954](https://github.com/kubernetes/kubernetes/pull/87954), [@BenTheElder](https://github.com/BenTheElder)) [SIG 릴리스]
-- kubelet 및 kubeadm에서 pause 이미지가 3.2로 업그레이드되었다. ([#88173](https://github.com/kubernetes/kubernetes/pull/88173), [@BenTheElder](https://github.com/BenTheElder)) [SIG CLI, 클러스터 라이프사이클, 노드, 테스트]
-- 스케줄러를 실행할 때 플러그인/PluginConfig 및 정책 API는 상호 배타적이다. ([#88864](https://github.com/kubernetes/kubernetes/pull/88864), [@alculquicondor](https://github.com/alculquicondor)) [SIG 스케줄링]
-- `PreScore` 인터페이스에서 `FilteredNodesStatuses` 인수를 제거한다. ([#88189](https://github.com/kubernetes/kubernetes/pull/88189), [@skilxn-go](https://github.com/skilxn-go)) [SIG 스케줄링, 테스트]
-- 노드 인증자(node authorizer) 인덱스 유지보수에서 성능 문제를 해결했다. ([#87693](https://github.com/kubernetes/kubernetes/pull/87693), [@liggitt](https://github.com/liggitt)) [SIG 인증]
-- v1.17.0-rc.1에서 승인(admission), 인증(authentication) 및 권한(authorization) 웹훅(webhook) 성능의 회귀를 해결했다. ([#85810](https://github.com/kubernetes/kubernetes/pull/85810), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, 테스트]
-- `kubectl get all` 과 `NewDiscoveryClientForConfig` 또는 `NewDiscoveryClientForConfigOrDie`를 사용하여 구성된 client-go 디스커버리 클라이언트에서 성능 회귀를 해결했다. ([#86168](https://github.com/kubernetes/kubernetes/pull/86168), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-- oidc claim spn: 접두사가 생략되어 기존 Azure AD OIDC 활성화된 api-server와의 동작이 중단되는 kubectl azure 인증 모듈 변경을 되돌렸다. ([#87507](https://github.com/kubernetes/kubernetes/pull/87507), [@weinong](https://github.com/weinong)) [SIG API Machinery, 인증, 클라우드 공급자]
-- 공유 정보 제공자(Shared informers)는 이제 네트워크 중단 시에 더 안정적이다. ([#86015](https://github.com/kubernetes/kubernetes/pull/86015), [@squeed](https://github.com/squeed)) [SIG API Machinery]
-- 동일한 플러그인에 대해 PluginConfig를 두 번 이상 지정하면 스케줄러 시작을 실패한다.
-  Extender 지정 및 NodeResourcesFit 플러그인에 대한 .ignoredResources 구성이 실패된다. ([#88870](https://github.com/kubernetes/kubernetes/pull/88870), [@alculquicondor](https://github.com/alculquicondor)) [SIG 스케줄링]
-- restartPolicy=Never 파드의 종료(terminate)가 실제로 실패했을 때 더 이상 파드가 성공했다고 보고할 수 없다. ([#88440](https://github.com/kubernetes/kubernetes/pull/88440), [@smarterclayton](https://github.com/smarterclayton)) [SIG 노드, 테스트]
-- CSR 서명 인증서/키 페어는 kube-apiserver 인증서/키 페어와 같이 디스크에서 다시 로드된다. ([#86816](https://github.com/kubernetes/kubernetes/pull/86816), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, 앱, 인증]
-- k8s.io/client-go/tools/events의 EventRecorder는 관련 오브젝트에 설정되어 있지 않은 경우 (kube-system 대신) 디폴트 네임스페이스에 이벤트를 생성한다. ([#88815](https://github.com/kubernetes/kubernetes/pull/88815), [@enj](https://github.com/enj)) [SIG API Machinery]
-- 이제 감사(audit) 이벤트 소스 IP 목록은 요청을 API 서버로 보낸 IP로 항상 끝난다. ([#87167](https://github.com/kubernetes/kubernetes/pull/87167), [@tallclair](https://github.com/tallclair)) [SIG API Machinery, 인증]
-- 쿠버네티스 v1.17.0 샘플 apiserver를 사용하도록 sample-apiserver 집계 적합성 테스트가 업데이트되었다. ([#84735](https://github.com/kubernetes/kubernetes/pull/84735), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, 아키텍처, CLI, 테스트]
-- 스로틀링 가능성을 줄이기 위해, Azure 노드 프로비저닝 상태가 삭제될 때 VM 캐시가 nil로 설정된다. ([#87635](https://github.com/kubernetes/kubernetes/pull/87635), [@feiskyer](https://github.com/feiskyer)) [SIG 클라우드 공급자]
-- VMSS 캐시가 추가되어 VMSS GET 스로틀링 가능성이 감소한다. ([#85885](https://github.com/kubernetes/kubernetes/pull/85885), [@nilo19](https://github.com/nilo19)) [SIG 클라우드 공급자]
-- 윈도우 노드에서 10초 이내로 kubelet 및 kube-proxy가 준비될 때까지 대기한다. ([#85228](https://github.com/kubernetes/kubernetes/pull/85228), [@YangLu1031](https://github.com/YangLu1031)) [SIG 클러스터 라이프사이클]
-- `kubectl apply -f <file> --prune -n ​​<namespace>`는 cli 지정 네임스페이스에서 파일에 정의되지 않은 모든 리소스를 제거(prune)해야 한다. ([#85613](https://github.com/kubernetes/kubernetes/pull/85613), [@MartinKaburu](https://github.com/MartinKaburu)) [SIG CLI]
-- `kubectl create clusterrolebinding`는 rbac.authorization.k8s.io/v1 오브젝트를 생성한다. ([#85889](https://github.com/kubernetes/kubernetes/pull/85889), [@oke-py](https://github.com/oke-py)) [SIG CLI]
-- `kubectl diff`는 이제 diff가 변경 내역을 찾은 경우에만 1을, kubectl 오류에서는 >1을 반환한다. "exit status code 1" 메시지도 뮤트(mute)되었다. ([#87437](https://github.com/kubernetes/kubernetes/pull/87437), [@apelisse](https://github.com/apelisse)) [SIG CLI, 테스트]
-
-## 의존성(Dependencies)
-
-- v3.8.4로 칼리코(Calico) 업데이트 ([#84163](https://github.com/kubernetes/kubernetes/pull/84163), [@david-tigera](https://github.com/david-tigera))[SIG 클러스터 라이프사이클]
-- v1.28.2로 aws-sdk-go 의존성 업데이트 ([#87253](https://github.com/kubernetes/kubernetes/pull/87253), [@SaranBalaji90](https://github.com/SaranBalaji90))[SIG API Machinery, 클라우드 공급자]
-- v0.8.5로 CNI 버전 업데이트 ([#78819](https://github.com/kubernetes/kubernetes/pull/78819), [@justaugustus](https://github.com/justaugustus))[SIG 릴리스, 테스트, 네트워크, 클러스터 라이프사이클, API Machinery]
-- v1.17.0으로 cri-tools 업데이트 ([#86305](https://github.com/kubernetes/kubernetes/pull/86305), [@saschagrunert](https://github.com/saschagrunert))[SIG 릴리스, 클러스터 라이프사이클]
-- kubelet 및 kubeadm에서 Pause 이미지가 3.2로 업그레이드 ([#88173](https://github.com/kubernetes/kubernetes/pull/88173), [@BenTheElder](https://github.com/BenTheElder))[SIG CLI, 노드, 테스트, 클러스터 라이프사이클]
-- kubeadm에서 1.6.7로 CoreDNS 버전 업데이트 ([#86260](https://github.com/kubernetes/kubernetes/pull/86260), [@rajansandeep](https://github.com/rajansandeep))[SIG 클러스터 라이프사이클]
-- CVE-2020-9283을 수정하기 위해 golang.org/x/crypto를 업데이트 ([#8838](https://github.com/kubernetes/kubernetes/pull/88381), [@BenTheElder](https://github.com/BenTheElder))[SIG CLI, Instrumentation, API Machinery, 클러스터 라이프사이클, 클라우드 공급자]
-- 1.13.8로 Go 업데이트 ([#87648](https://github.com/kubernetes/kubernetes/pull/87648), [@ialidzhikov](https://github.com/ialidzhikov))[SIG 릴리스, 테스트]
-- 1.18.0으로 Cluster-Autoscaler 업데이트 ([#89095](https://github.com/kubernetes/kubernetes/pull/89095), [@losipiuk](https://github.com/losipiuk))[SIG 오토스케일링, 클러스터 라이프사이클]
-
-
-
-# v1.18.0-rc.1
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-rc.1
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes.tar.gz) | `c17231d5de2e0677e8af8259baa11a388625821c79b86362049f2edb366404d6f4b4587b8f13ccbceeb2f32c6a9fe98607f779c0f3e1caec438f002e3a2c8c21`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-src.tar.gz) | `e84ffad57c301f5d6e90f916b996d5abb0c987928c3ca6b1565f7b042588f839b994ca12c43fc36f0ffb63f9fabc15110eb08be253b8939f49cd951e956da618`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-darwin-386.tar.gz) | `1aea99923d492436b3eb91aaecffac94e5d0aa2b38a0930d266fda85c665bbc4569745c409aa302247df3b578ce60324e7a489eb26240e97d4e65a67428ea3d1`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-darwin-amd64.tar.gz) | `07fa7340a959740bd52b83ff44438bbd988e235277dad1e43f125f08ac85230a24a3b755f4e4c8645743444fa2b66a3602fc445d7da6d2fc3770e8c21ba24b33`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-386.tar.gz) | `48cebd26448fdd47aa36257baa4c716a98fda055bbf6a05230f2a3fe3c1b99b4e483668661415392190f3eebb9cb6e15c784626b48bb2541d93a37902f0e3974`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-amd64.tar.gz) | `c3a5fedf263f07a07f59c01fea6c63c1e0b76ee8dc67c45b6c134255c28ed69171ccc2f91b6a45d6a8ec5570a0a7562e24c33b9d7b0d1a864f4dc04b178b3c04`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-arm.tar.gz) | `a6b11a55bd38583bbaac14931a6862f8ce6493afe30947ba29e5556654a571593358278df59412bbeb6888fa127e9ae4c0047a9d46cb59394995010796df6b14`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-arm64.tar.gz) | `9e15331ac8010154a9b64f5488969fc8ee2f21059639896cb84c5cf4f05f4c9d1d8970cb6f9831de6b34013848227c1972c12a698d07aac1ecc056e972fe6f79`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-ppc64le.tar.gz) | `f828fe6252678de9d4822e482f5873309ae9139b2db87298ab3273ce45d38aa07b6b9b42b76c140705f27ba71e101d58b43e59ac7259d7c08dc647ea809e207c`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-linux-s390x.tar.gz) | `19da4b45f0666c063934af616f3e7ed3caa99d4ee1e46d53efadc7a8a4d38e43a36ced7249acd7ad3dcc4b4f60d8451b4f7ec7727e478ee2fadd14d353228bce`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-windows-386.tar.gz) | `775c9afb6cb3e7c4ba53e9f48a5df2cf207234a33059bd74448bc9f177dd120fb3f9c58ab45048a566326acc43bc8a67e886e10ef99f20780c8f63bb17426ebd`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-client-windows-amd64.tar.gz) | `208d2595a5b57ac97aac75b4a2a6130f0c937f781a030bde1a432daf4bc51f2fa523fca2eb84c38798489c4b536ee90aad22f7be8477985d9691d51ad8e1c4dc`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-amd64.tar.gz) | `dcf832eae04f9f52ff473754ef5cfe697b35f4dc1a282622c94fa10943c8c35f4a8777a0c58c7de871c3c428c8973bf72d6bcd8751416d4c682125268b8fcefe`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-arm.tar.gz) | `a04e34bea28eb1c8b492e8b1dd3c0dd87ebee71a7dbbef72be10a335e553361af7e48296e504f9844496b04e66350871114d20cfac3f3b49550d8be60f324ba3`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-arm64.tar.gz) | `a6af086b07a8c2e498f32b43e6511bf6a5e6baf358c572c6910c8df17cd6cae94f562f459714fcead1595767cb14c7f639c5735f1411173bbd38d5604c082a77`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-ppc64le.tar.gz) | `5a960ef5ba0c255f587f2ac0b028cd03136dc91e4efc5d1becab46417852e5524d18572b6f66259531ec6fea997da3c4d162ac153a9439672154375053fec6c7`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-server-linux-s390x.tar.gz) | `0f32c7d9b14bc238b9a5764d8f00edc4d3bf36bcf06b340b81061424e6070768962425194a8c2025c3a7ffb97b1de551d3ad23d1591ae34dd4e3ba25ab364c33`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-amd64.tar.gz) | `27d8955d535d14f3f4dca501fd27e4f06fad84c6da878ea5332a5c83b6955667f6f731bfacaf5a3a23c09f14caa400f9bee927a0f269f5374de7f79cd1919b3b`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-arm.tar.gz) | `0d56eccad63ba608335988e90b377fe8ae978b177dc836cdb803a5c99d99e8f3399a666d9477ca9cfe5964944993e85c416aec10a99323e3246141efc0b1cc9e`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-arm64.tar.gz) | `79bb9be66f9e892d866b28e5cc838245818edb9706981fab6ccbff493181b341c1fcf6fe5d2342120a112eb93af413f5ba191cfba1ab4c4a8b0546a5ad8ec220`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-ppc64le.tar.gz) | `3e9e2c6f9a2747d828069511dce8b4034c773c2d122f005f4508e22518055c1e055268d9d86773bbd26fbd2d887d783f408142c6c2f56ab2f2365236fd4d2635`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-linux-s390x.tar.gz) | `4f96e018c336fa13bb6df6f7217fe46a2b5c47f806f786499c429604ccba2ebe558503ab2c72f63250aa25b61dae2d166e4b80ae10f6ab37d714f87c1dcf6691`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-rc.1/kubernetes-node-windows-amd64.tar.gz) | `ab110d76d506746af345e5897ef4f6993d5f53ac818ba69a334f3641047351aa63bfb3582841a9afca51dd0baff8b9010077d9c8ec85d2d69e4172b8d4b338b0`
-
-## Changelog since v1.18.0-beta.2
-
-## Changes by Kind
-
-### API Change
-
-- Removes ConfigMap as suggestion for IngressClass parameters ([#89093](https://github.com/kubernetes/kubernetes/pull/89093), [@robscott](https://github.com/robscott)) [SIG Network]
-
-### Other (Bug, Cleanup or Flake)
-
-- EndpointSlice should not contain endpoints for terminating pods ([#89056](https://github.com/kubernetes/kubernetes/pull/89056), [@andrewsykim](https://github.com/andrewsykim)) [SIG Apps and Network]
-- Fix a bug where ExternalTrafficPolicy is not applied to service ExternalIPs. ([#88786](https://github.com/kubernetes/kubernetes/pull/88786), [@freehan](https://github.com/freehan)) [SIG Network]
-- Fix invalid VMSS updates due to incorrect cache ([#89002](https://github.com/kubernetes/kubernetes/pull/89002), [@ArchangelSDY](https://github.com/ArchangelSDY)) [SIG Cloud Provider]
-- Fix isCurrentInstance for Windows by removing the dependency of hostname. ([#89138](https://github.com/kubernetes/kubernetes/pull/89138), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fixed a data race in kubelet image manager that can cause static pod workers to silently stop working. ([#88915](https://github.com/kubernetes/kubernetes/pull/88915), [@roycaihw](https://github.com/roycaihw)) [SIG Node]
-- Fixed an issue that could cause the kubelet to incorrectly run concurrent pod reconciliation loops and crash. ([#89055](https://github.com/kubernetes/kubernetes/pull/89055), [@tedyu](https://github.com/tedyu)) [SIG Node]
-- Kube-proxy: on dual-stack mode, if it is not able to get the IP Family of an endpoint, logs it with level InfoV(4) instead of Warning, avoiding flooding the logs for endpoints without addresses ([#88934](https://github.com/kubernetes/kubernetes/pull/88934), [@aojea](https://github.com/aojea)) [SIG Network]
-- Update Cluster Autoscaler to 1.18.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.18.0 ([#89095](https://github.com/kubernetes/kubernetes/pull/89095), [@losipiuk](https://github.com/losipiuk)) [SIG Autoscaling and Cluster Lifecycle]
-
-
-# v1.18.0-beta.2
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-beta.2
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes.tar.gz) | `3017430ca17f8a3523669b4a02c39cedfc6c48b07281bc0a67a9fbe9d76547b76f09529172cc01984765353a6134a43733b7315e0dff370bba2635dd2a6289af`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-src.tar.gz) | `c5fd60601380a99efff4458b1c9cf4dc02195f6f756b36e590e54dff68f7064daf32cf63980dddee13ef9dec7a60ad4eeb47a288083fdbbeeef4bc038384e9ea`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-darwin-386.tar.gz) | `7e49ede167b9271d4171e477fa21d267b2fb35f80869337d5b323198dc12f71b61441975bf925ad6e6cd7b61cbf6372d386417dc1e5c9b3c87ae651021c37237`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-darwin-amd64.tar.gz) | `3f5cdf0e85eee7d0773e0ae2df1c61329dea90e0da92b02dae1ffd101008dc4bade1c4951fc09f0cad306f0bcb7d16da8654334ddee43d5015913cc4ac8f3eda`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-386.tar.gz) | `b67b41c11bfecb88017c33feee21735c56f24cf6f7851b63c752495fc0fb563cd417a67a81f46bca091f74dc00fca1f296e483d2e3dfe2004ea4b42e252d30b9`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-amd64.tar.gz) | `1fef2197cb80003e3a5c26f05e889af9d85fbbc23e27747944d2997ace4bfa28f3670b13c08f5e26b7e274176b4e2df89c1162aebd8b9506e63b39b311b2d405`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-arm.tar.gz) | `84e5f4d9776490219ee94a84adccd5dfc7c0362eb330709771afcde95ec83f03d96fe7399eec218e47af0a1e6445e24d95e6f9c66c0882ef8233a09ff2022420`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-arm64.tar.gz) | `ba613b114e0cca32fa21a3d10f845aa2f215d3af54e775f917ff93919f7dd7075efe254e4047a85a1f4b817fc2bd78006c2e8873885f1208cbc02db99e2e2e25`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-ppc64le.tar.gz) | `502a6938d8c4bbe04abbd19b59919d86765058ff72334848be4012cec493e0e7027c6cd950cf501367ac2026eea9f518110cb72d1c792322b396fc2f73d23217`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-linux-s390x.tar.gz) | `c24700e0ed2ef5c1d2dd282d638c88d90392ae90ea420837b39fd8e1cfc19525017325ccda71d8472fdaea174762208c09e1bba9bbc77c89deef6fac5e847ba2`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-windows-386.tar.gz) | `0d4c5a741b052f790c8b0923c9586ee9906225e51cf4dc8a56fc303d4d61bb5bf77fba9e65151dec7be854ff31da8fc2dcd3214563e1b4b9951e6af4aa643da4`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-client-windows-amd64.tar.gz) | `841ef2e306c0c9593f04d9528ee019bf3b667761227d9afc1d6ca8bf1aa5631dc25f5fe13ff329c4bf0c816b971fd0dec808f879721e0f3bf51ce49772b38010`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-amd64.tar.gz) | `b373df2e6ef55215e712315a5508e85a39126bd81b7b93c6b6305238919a88c740077828a6f19bcd97141951048ef7a19806ef6b1c3e1772dbc45715c5fcb3af`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-arm.tar.gz) | `b8103cb743c23076ce8dd7c2da01c8dd5a542fbac8480e82dc673139c8ee5ec4495ca33695e7a18dd36412cf1e18ed84c8de05042525ddd8e869fbdfa2766569`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-arm64.tar.gz) | `8f8f05cf64fb9c8d80cdcb4935b2d3e3edc48bdd303231ae12f93e3f4d979237490744a11e24ba7f52dbb017ca321a8e31624dcffa391b8afda3d02078767fa0`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-ppc64le.tar.gz) | `b313b911c46f2ec129537407af3f165f238e48caeb4b9e530783ffa3659304a544ed02bef8ece715c279373b9fb2c781bd4475560e02c4b98a6d79837bc81938`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-server-linux-s390x.tar.gz) | `a1b6b06571141f507b12e5ef98efb88f4b6b9aba924722b2a74f11278d29a2972ab8290608360151d124608e6e24da0eb3516d484cb5fa12ff2987562f15964a`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-amd64.tar.gz) | `20e02ca327543cddb2568ead3d5de164cbfb2914ab6416106d906bf12fcfbc4e55b13bea4d6a515e8feab038e2c929d72c4d6909dfd7881ba69fd1e8c772ab99`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-arm.tar.gz) | `ecd817ef05d6284f9c6592b84b0a48ea31cf4487030c9fb36518474b2a33dad11b9c852774682e60e4e8b074e6bea7016584ca281dddbe2994da5eaf909025c0`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-arm64.tar.gz) | `0020d32b7908ffd5055c8b26a8b3033e4702f89efcfffe3f6fcdb8a9921fa8eaaed4193c85597c24afd8c523662454f233521bb7055841a54c182521217ccc9d`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-ppc64le.tar.gz) | `e065411d66d486e7793449c1b2f5a412510b913bf7f4e728c0a20e275642b7668957050dc266952cdff09acc391369ae6ac5230184db89af6823ba400745f2fc`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-linux-s390x.tar.gz) | `082ee90413beaaea41d6cbe9a18f7d783a95852607f3b94190e0ca12aacdd97d87e233b87117871bfb7d0a4b6302fbc7688549492a9bc50a2f43a5452504d3ce`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.2/kubernetes-node-windows-amd64.tar.gz) | `fb5aca0cc36be703f9d4033eababd581bac5de8399c50594db087a99ed4cb56e4920e960eb81d0132d696d094729254eeda2a5c0cb6e65e3abca6c8d61da579e`
-
-## Changelog since v1.18.0-beta.1
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
-- `kubectl` no longer defaults to `http://localhost:8080`.  If you own one of these legacy clusters, you are *strongly- encouraged to secure your server.   If you cannot secure your server, you can set `KUBERNETES_MASTER` if you were relying on that behavior and you're a client-go user. Set `--server`, `--kubeconfig` or `KUBECONFIG` to make it work in `kubectl`. ([#86173](https://github.com/kubernetes/kubernetes/pull/86173), [@soltysh](https://github.com/soltysh)) [SIG API Machinery, CLI and Testing]
-
-## Changes by Kind
-
-### Deprecation
-
-- AlgorithmSource is removed from v1alpha2 Scheduler ComponentConfig ([#87999](https://github.com/kubernetes/kubernetes/pull/87999), [@damemi](https://github.com/damemi)) [SIG Scheduling]
-- Kube-proxy: deprecate `--healthz-port` and `--metrics-port` flag, please use `--healthz-bind-address` and `--metrics-bind-address` instead ([#88512](https://github.com/kubernetes/kubernetes/pull/88512), [@SataQiu](https://github.com/SataQiu)) [SIG Network]
-- Kubeadm: deprecate the usage of the experimental flag '--use-api' under the 'kubeadm alpha certs renew' command. ([#88827](https://github.com/kubernetes/kubernetes/pull/88827), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-
-### API Change
-
-- A new IngressClass resource has been added to enable better Ingress configuration. ([#88509](https://github.com/kubernetes/kubernetes/pull/88509), [@robscott](https://github.com/robscott)) [SIG API Machinery, Apps, CLI, Network, Node and Testing]
-- Added GenericPVCDataSource feature gate to enable using arbitrary custom resources as the data source for a PVC. ([#88636](https://github.com/kubernetes/kubernetes/pull/88636), [@bswartz](https://github.com/bswartz)) [SIG Apps and Storage]
-- Allow user to specify fsgroup permission change policy for pods ([#88488](https://github.com/kubernetes/kubernetes/pull/88488), [@gnufied](https://github.com/gnufied)) [SIG Apps and Storage]
-- BlockVolume and CSIBlockVolume features are now GA. ([#88673](https://github.com/kubernetes/kubernetes/pull/88673), [@jsafrane](https://github.com/jsafrane)) [SIG Apps, Node and Storage]
-- CustomResourceDefinition schemas that use `x-kubernetes-list-map-keys` to specify properties that uniquely identify list items must make those properties required or have a default value, to ensure those properties are present for all list items. See https://kubernetes.io/docs/reference/using-api/api-concepts/&#35;merge-strategy for details. ([#88076](https://github.com/kubernetes/kubernetes/pull/88076), [@eloyekunle](https://github.com/eloyekunle)) [SIG API Machinery and Testing]
-- Fixes a regression with clients prior to 1.15 not being able to update podIP in pod status, or podCIDR in node spec, against >= 1.16 API servers ([#88505](https://github.com/kubernetes/kubernetes/pull/88505), [@liggitt](https://github.com/liggitt)) [SIG Apps and Network]
-- Ingress: Add Exact and Prefix maching to Ingress PathTypes ([#88587](https://github.com/kubernetes/kubernetes/pull/88587), [@cmluciano](https://github.com/cmluciano)) [SIG Apps, Cluster Lifecycle and Network]
-- Ingress: Add alternate backends via TypedLocalObjectReference ([#88775](https://github.com/kubernetes/kubernetes/pull/88775), [@cmluciano](https://github.com/cmluciano)) [SIG Apps and Network]
-- Ingress: allow wildcard hosts in IngressRule ([#88858](https://github.com/kubernetes/kubernetes/pull/88858), [@cmluciano](https://github.com/cmluciano)) [SIG Network]
-- Kube-controller-manager and kube-scheduler expose profiling by default to match the kube-apiserver.  Use `--enable-profiling=false` to disable. ([#88663](https://github.com/kubernetes/kubernetes/pull/88663), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Cloud Provider and Scheduling]
-- Move TaintBasedEvictions feature gates to GA ([#87487](https://github.com/kubernetes/kubernetes/pull/87487), [@skilxn-go](https://github.com/skilxn-go)) [SIG API Machinery, Apps, Node, Scheduling and Testing]
-- New flag --endpointslice-updates-batch-period in kube-controller-manager can be used to reduce number of endpointslice updates generated by pod changes. ([#88745](https://github.com/kubernetes/kubernetes/pull/88745), [@mborsz](https://github.com/mborsz)) [SIG API Machinery, Apps and Network]
-- Scheduler Extenders can now be configured in the v1alpha2 component config ([#88768](https://github.com/kubernetes/kubernetes/pull/88768), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
-- The apiserver/v1alph1&#35;EgressSelectorConfiguration API is now beta. ([#88502](https://github.com/kubernetes/kubernetes/pull/88502), [@caesarxuchao](https://github.com/caesarxuchao)) [SIG API Machinery]
-- The storage.k8s.io/CSIDriver has moved to GA, and is now available for use. ([#84814](https://github.com/kubernetes/kubernetes/pull/84814), [@huffmanca](https://github.com/huffmanca)) [SIG API Machinery, Apps, Auth, Node, Scheduling, Storage and Testing]
-- VolumePVCDataSource moves to GA in 1.18 release ([#88686](https://github.com/kubernetes/kubernetes/pull/88686), [@j-griffith](https://github.com/j-griffith)) [SIG Apps, CLI and Cluster Lifecycle]
-
-### Feature
-
-- Add `rest_client_rate_limiter_duration_seconds` metric to component-base to track client side rate limiter latency in seconds. Broken down by verb and URL. ([#88134](https://github.com/kubernetes/kubernetes/pull/88134), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery, Cluster Lifecycle and Instrumentation]
-- Allow user to specify resource using --filename flag when invoking kubectl exec ([#88460](https://github.com/kubernetes/kubernetes/pull/88460), [@soltysh](https://github.com/soltysh)) [SIG CLI and Testing]
-- Apiserver add a new flag --goaway-chance which is the fraction of requests that will be closed gracefully(GOAWAY) to prevent HTTP/2 clients from getting stuck on a single apiserver.
-  After the connection closed(received GOAWAY), the client's other in-flight requests won't be affected, and the client will reconnect.
-  The flag min value is 0 (off), max is .02 (1/50 requests); .001 (1/1000) is a recommended starting point.
-  Clusters with single apiservers, or which don't use a load balancer, should NOT enable this. ([#88567](https://github.com/kubernetes/kubernetes/pull/88567), [@answer1991](https://github.com/answer1991)) [SIG API Machinery]
-- Azure: add support for single stack IPv6 ([#88448](https://github.com/kubernetes/kubernetes/pull/88448), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- DefaultConstraints can be specified for the PodTopologySpread plugin in the component config ([#88671](https://github.com/kubernetes/kubernetes/pull/88671), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Kubeadm: support Windows specific kubelet flags in kubeadm-flags.env ([#88287](https://github.com/kubernetes/kubernetes/pull/88287), [@gab-satchi](https://github.com/gab-satchi)) [SIG Cluster Lifecycle and Windows]
-- Kubectl cluster-info dump changed to only display a message telling you the location where the output was written when the output is not standard output. ([#88765](https://github.com/kubernetes/kubernetes/pull/88765), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Print NotReady when pod is not ready based on its conditions. ([#88240](https://github.com/kubernetes/kubernetes/pull/88240), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- Scheduler Extender API is now located under k8s.io/kube-scheduler/extender ([#88540](https://github.com/kubernetes/kubernetes/pull/88540), [@damemi](https://github.com/damemi)) [SIG Release, Scheduling and Testing]
-- Signatures on scale client methods have been modified to accept `context.Context` as a first argument. Signatures of Get, Update, and Patch methods have been updated to accept GetOptions, UpdateOptions and PatchOptions respectively. ([#88599](https://github.com/kubernetes/kubernetes/pull/88599), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG API Machinery, Apps, Autoscaling and CLI]
-- Signatures on the dynamic client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. ([#88906](https://github.com/kubernetes/kubernetes/pull/88906), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps, CLI, Cluster Lifecycle, Storage and Testing]
-- Signatures on the metadata client methods have been modified to accept `context.Context` as a first argument. Signatures of Delete and DeleteCollection methods now accept DeleteOptions by value instead of by reference. ([#88910](https://github.com/kubernetes/kubernetes/pull/88910), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Apps and Testing]
-- Webhooks will have alpha support for network proxy ([#85870](https://github.com/kubernetes/kubernetes/pull/85870), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Auth and Testing]
-- When client certificate files are provided, reload files for new connections, and close connections when a certificate changes. ([#79083](https://github.com/kubernetes/kubernetes/pull/79083), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery, Auth, Node and Testing]
-- When deleting objects using kubectl with the --force flag, you are no longer required to also specify --grace-period=0. ([#87776](https://github.com/kubernetes/kubernetes/pull/87776), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- `kubectl` now contains a `kubectl alpha debug` command. This command allows attaching an ephemeral container to a running pod for the purposes of debugging. ([#88004](https://github.com/kubernetes/kubernetes/pull/88004), [@verb](https://github.com/verb)) [SIG CLI]
-
-### Documentation
-
-- Update Japanese translation for kubectl help ([#86837](https://github.com/kubernetes/kubernetes/pull/86837), [@inductor](https://github.com/inductor)) [SIG CLI and Docs]
-- `kubectl plugin` now prints a note how to install krew ([#88577](https://github.com/kubernetes/kubernetes/pull/88577), [@corneliusweig](https://github.com/corneliusweig)) [SIG CLI]
-
-### Other (Bug, Cleanup or Flake)
-
-- Azure VMSS LoadBalancerBackendAddressPools updating has been improved with squential-sync + concurrent-async requests. ([#88699](https://github.com/kubernetes/kubernetes/pull/88699), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- AzureFile and CephFS use new Mount library that prevents logging of sensitive mount options. ([#88684](https://github.com/kubernetes/kubernetes/pull/88684), [@saad-ali](https://github.com/saad-ali)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Storage]
-- Build: Enable kube-cross image-building on K8s Infra ([#88562](https://github.com/kubernetes/kubernetes/pull/88562), [@justaugustus](https://github.com/justaugustus)) [SIG Release and Testing]
-- Client-go certificate manager rotation gained the ability to preserve optional intermediate chains accompanying issued certificates ([#88744](https://github.com/kubernetes/kubernetes/pull/88744), [@jackkleeman](https://github.com/jackkleeman)) [SIG API Machinery and Auth]
-- Conformance image now depends on stretch-slim instead of debian-hyperkube-base as that image is being deprecated and removed. ([#88702](https://github.com/kubernetes/kubernetes/pull/88702), [@dims](https://github.com/dims)) [SIG Cluster Lifecycle, Release and Testing]
-- Deprecate --generator flag from kubectl create commands ([#88655](https://github.com/kubernetes/kubernetes/pull/88655), [@soltysh](https://github.com/soltysh)) [SIG CLI]
-- FIX: prevent apiserver from panicking when failing to load audit webhook config file ([#88879](https://github.com/kubernetes/kubernetes/pull/88879), [@JoshVanL](https://github.com/JoshVanL)) [SIG API Machinery and Auth]
-- Fix /readyz to return error immediately after a shutdown is initiated, before the --shutdown-delay-duration has elapsed. ([#88911](https://github.com/kubernetes/kubernetes/pull/88911), [@tkashem](https://github.com/tkashem)) [SIG API Machinery]
-- Fix a bug where kubenet fails to parse the tc output. ([#83572](https://github.com/kubernetes/kubernetes/pull/83572), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
-- Fix describe ingress annotations not sorted. ([#88394](https://github.com/kubernetes/kubernetes/pull/88394), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix handling of aws-load-balancer-security-groups annotation. Security-Groups assigned with this annotation are no longer modified by kubernetes which is the expected behaviour of most users. Also no unnecessary Security-Groups are created anymore if this annotation is used. ([#83446](https://github.com/kubernetes/kubernetes/pull/83446), [@Elias481](https://github.com/Elias481)) [SIG Cloud Provider]
-- Fix kubectl create deployment image name ([#86636](https://github.com/kubernetes/kubernetes/pull/86636), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix missing "apiVersion" for "involvedObject" in Events for Nodes. ([#87537](https://github.com/kubernetes/kubernetes/pull/87537), [@uthark](https://github.com/uthark)) [SIG Apps and Node]
-- Fix that prevents repeated fetching of PVC/PV objects by kubelet when processing of pod volumes fails. While this prevents hammering API server in these error scenarios, it means that some errors in processing volume(s) for a pod could now take up to 2-3 minutes before retry. ([#88141](https://github.com/kubernetes/kubernetes/pull/88141), [@tedyu](https://github.com/tedyu)) [SIG Node and Storage]
-- Fix: azure file mount timeout issue ([#88610](https://github.com/kubernetes/kubernetes/pull/88610), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: corrupted mount point in csi driver ([#88569](https://github.com/kubernetes/kubernetes/pull/88569), [@andyzhangx](https://github.com/andyzhangx)) [SIG Storage]
-- Fixed a bug in the TopologyManager. Previously, the TopologyManager would only guarantee alignment if container creation was serialized in some way. Alignment is now guaranteed under all scenarios of container creation. ([#87759](https://github.com/kubernetes/kubernetes/pull/87759), [@klueska](https://github.com/klueska)) [SIG Node]
-- Fixed block CSI volume cleanup after timeouts. ([#88660](https://github.com/kubernetes/kubernetes/pull/88660), [@jsafrane](https://github.com/jsafrane)) [SIG Node and Storage]
-- Fixes issue where you can't attach more than 15 GCE Persistent Disks to c2, n2, m1, m2 machine types. ([#88602](https://github.com/kubernetes/kubernetes/pull/88602), [@yuga711](https://github.com/yuga711)) [SIG Storage]
-- For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. ([#88678](https://github.com/kubernetes/kubernetes/pull/88678), [@verult](https://github.com/verult)) [SIG Apps, Node and Storage]
-- Hide kubectl.kubernetes.io/last-applied-configuration in describe command ([#88758](https://github.com/kubernetes/kubernetes/pull/88758), [@soltysh](https://github.com/soltysh)) [SIG Auth and CLI]
-- In GKE alpha clusters it will be possible to use the service annotation `cloud.google.com/network-tier: Standard` ([#88487](https://github.com/kubernetes/kubernetes/pull/88487), [@zioproto](https://github.com/zioproto)) [SIG Cloud Provider]
-- Kubelets perform fewer unnecessary pod status update operations on the API server. ([#88591](https://github.com/kubernetes/kubernetes/pull/88591), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Scalability]
-- Plugin/PluginConfig and Policy APIs are mutually exclusive when running the scheduler ([#88864](https://github.com/kubernetes/kubernetes/pull/88864), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Specifying PluginConfig for the same plugin more than once fails scheduler startup.
-
-  Specifying extenders and configuring .ignoredResources for the NodeResourcesFit plugin fails ([#88870](https://github.com/kubernetes/kubernetes/pull/88870), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Support TLS Server Name overrides in kubeconfig file and via --tls-server-name in kubectl ([#88769](https://github.com/kubernetes/kubernetes/pull/88769), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, Auth and CLI]
-- Terminating a restartPolicy=Never pod no longer has a chance to report the pod succeeded when it actually failed. ([#88440](https://github.com/kubernetes/kubernetes/pull/88440), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node and Testing]
-- The EventRecorder from k8s.io/client-go/tools/events will now create events in the default namespace (instead of kube-system) when the related object does not have it set. ([#88815](https://github.com/kubernetes/kubernetes/pull/88815), [@enj](https://github.com/enj)) [SIG API Machinery]
-- The audit event sourceIPs list will now always end with the IP that sent the request directly to the API server. ([#87167](https://github.com/kubernetes/kubernetes/pull/87167), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Auth]
-- Update to use golang 1.13.8 ([#87648](https://github.com/kubernetes/kubernetes/pull/87648), [@ialidzhikov](https://github.com/ialidzhikov)) [SIG Release and Testing]
-- Validate kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout ([#88657](https://github.com/kubernetes/kubernetes/pull/88657), [@chendotjs](https://github.com/chendotjs)) [SIG Network]
-
-
-# v1.18.0-beta.1
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-beta.1
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes.tar.gz) | `7c182ca905b3a31871c01ab5fdaf46f074547536c7975e069ff230af0d402dfc0346958b1d084bd2c108582ffc407484e6a15a1cd93e9affbe34b6e99409ef1f`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-src.tar.gz) | `d104b8c792b1517bd730787678c71c8ee3b259de81449192a49a1c6e37a6576d28f69b05c2019cc4a4c40ddeb4d60b80138323df3f85db8682caabf28e67c2de`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-darwin-386.tar.gz) | `bc337bb8f200a789be4b97ce99b9d7be78d35ebd64746307c28339dc4628f56d9903e0818c0888aaa9364357a528d1ac6fd34f74377000f292ec502fbea3837e`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-darwin-amd64.tar.gz) | `38dfa5e0b0cfff39942c913a6bcb2ad8868ec43457d35cffba08217bb6e7531720e0731f8588505f4c81193ce5ec0e5fe6870031cf1403fbbde193acf7e53540`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-386.tar.gz) | `8e63ec7ce29c69241120c037372c6c779e3f16253eabd612c7cbe6aa89326f5160eb5798004d723c5cd72d458811e98dac3574842eb6a57b2798ecd2bbe5bcf9`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-amd64.tar.gz) | `c1be9f184a7c3f896a785c41cd6ece9d90d8cb9b1f6088bdfb5557d8856c55e455f6688f5f54c2114396d5ae7adc0361e34ebf8e9c498d0187bd785646ccc1d0`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-arm.tar.gz) | `8eab02453cfd9e847632a774a0e0cf3a33c7619fb4ced7f1840e1f71444e8719b1c8e8cbfdd1f20bb909f3abe39cdcac74f14cb9c878c656d35871b7c37c7cbe`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-arm64.tar.gz) | `f7df0ec02d2e7e63278d5386e8153cfe2b691b864f17b6452cc824a5f328d688976c975b076e60f1c6b3c859e93e477134fbccc53bb49d9e846fb038b34eee48`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-ppc64le.tar.gz) | `36dd5b10addca678a518e6d052c9d6edf473e3f87388a2f03f714c93c5fbfe99ace16cf3b382a531be20a8fe6f4160f8d891800dd2cff5f23c9ca12c2f4a151b`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-linux-s390x.tar.gz) | `5bdbb44b996ab4ccf3a383780270f5cfdbf174982c300723c8bddf0a48ae5e459476031c1d51b9d30ffd621d0a126c18a5de132ef1d92fca2f3e477665ea10cc`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-windows-386.tar.gz) | `5dea3d4c4e91ef889850143b361974250e99a3c526f5efee23ff9ccdcd2ceca4a2247e7c4f236bdfa77d2150157da5d676ac9c3ba26cf3a2f1e06d8827556f77`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-client-windows-amd64.tar.gz) | `db298e698391368703e6aea7f4345aec5a4b8c69f9d8ff6c99fb5804a6cea16d295fb01e70fe943ade3d4ce9200a081ad40da21bd331317ec9213f69b4d6c48f`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-amd64.tar.gz) | `c6284929dd5940e750b48db72ffbc09f73c5ec31ab3db283babb8e4e07cd8cbb27642f592009caae4717981c0db82c16312849ef4cbafe76acc4264c7d5864ac`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-arm.tar.gz) | `6fc9552cf082c54cc0833b19876117c87ba7feb5a12c7e57f71b52208daf03eaef3ca56bd22b7bce2d6e81b5a23537cf6f5497a6eaa356c0aab1d3de26c309f9`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-arm64.tar.gz) | `b794b9c399e548949b5bfb2fe71123e86c2034847b2c99aca34b6de718a35355bbecdae9dc2a81c49e3c82fb4b5862526a3f63c2862b438895e12c5ea884f22e`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-ppc64le.tar.gz) | `fddaed7a54f97046a91c29534645811c6346e973e22950b2607b8c119c2377e9ec2d32144f81626078cdaeca673129cc4016c1a3dbd3d43674aa777089fb56ac`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-server-linux-s390x.tar.gz) | `65951a534bb55069c7419f41cbcdfe2fae31541d8a3f9eca11fc2489addf281c5ad2d13719212657da0be5b898f22b57ac39446d99072872fbacb0a7d59a4f74`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-amd64.tar.gz) | `992059efb5cae7ed0ef55820368d854bad1c6d13a70366162cd3b5111ce24c371c7c87ded2012f055e08b2ff1b4ef506e1f4e065daa3ac474fef50b5efa4fb07`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-arm.tar.gz) | `c63ae0f8add5821ad267774314b8c8c1ffe3b785872bf278e721fd5dfdad1a5db1d4db3720bea0a36bf10d9c6dd93e247560162c0eac6e1b743246f587d3b27a`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-arm64.tar.gz) | `47adb9ddf6eaf8f475b89f59ee16fbd5df183149a11ad1574eaa645b47a6d58aec2ca70ba857ce9f1a5793d44cf7a61ebc6874793bb685edaf19410f4f76fd13`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-ppc64le.tar.gz) | `a3bc4a165567c7b76a3e45ab7b102d6eb3ecf373eb048173f921a4964cf9be8891d0d5b8dafbd88c3af7b0e21ef3d41c1e540c3347ddd84b929b3a3d02ceb7b2`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-linux-s390x.tar.gz) | `109ddf37c748f69584c829db57107c3518defe005c11fcd2a1471845c15aae0a3c89aafdd734229f4069ed18856cc650c80436684e1bdc43cfee3149b0324746`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-beta.1/kubernetes-node-windows-amd64.tar.gz) | `a3a75d2696ad3136476ad7d811e8eabaff5111b90e592695e651d6111f819ebf0165b8b7f5adc05afb5f7f01d1e5fb64876cb696e492feb20a477a5800382b7a`
-
-## Changelog since v1.18.0-beta.0
-
-## Urgent Upgrade Notes
-
-### (No, really, you MUST read this before you upgrade)
-
-- The StreamingProxyRedirects feature and `--redirect-container-streaming` flag are deprecated, and will be removed in a future release. The default behavior (proxy streaming requests through the kubelet) will be the only supported option.
-  If you are setting `--redirect-container-streaming=true`, then you must migrate off this configuration. The flag will no longer be able to be enabled starting in v1.20. If you are not setting the flag, no action is necessary. ([#88290](https://github.com/kubernetes/kubernetes/pull/88290), [@tallclair](https://github.com/tallclair)) [SIG API Machinery and Node]
-
-- Yes.
-
-  Feature Name: Support using network resources (VNet, LB, IP, etc.) in different AAD Tenant and Subscription than those for the cluster.
-
-  Changes in Pull Request:
-
-    1. Add properties `networkResourceTenantID` and `networkResourceSubscriptionID` in cloud provider auth config section, which indicates the location of network resources.
-    2. Add function `GetMultiTenantServicePrincipalToken` to fetch multi-tenant service principal token, which will be used by Azure VM/VMSS Clients in this feature.
-    3. Add function `GetNetworkResourceServicePrincipalToken` to fetch network resource service principal token, which will be used by Azure Network Resource (Load Balancer, Public IP, Route Table, Network Security Group and their sub level resources) Clients in this feature.
-    4. Related unit tests.
-
-  None.
-
-  User Documentation: In PR https://github.com/kubernetes-sigs/cloud-provider-azure/pull/301 ([#88384](https://github.com/kubernetes/kubernetes/pull/88384), [@bowen5](https://github.com/bowen5)) [SIG Cloud Provider]
-
-## Changes by Kind
-
-### Deprecation
-
-- Azure service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset has been deprecated. Its support would be removed in a future release. ([#88462](https://github.com/kubernetes/kubernetes/pull/88462), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-
-### API Change
-
-- API additions to apiserver types ([#87179](https://github.com/kubernetes/kubernetes/pull/87179), [@Jefftree](https://github.com/Jefftree)) [SIG API Machinery, Cloud Provider and Cluster Lifecycle]
-- Add Scheduling Profiles to kubescheduler.config.k8s.io/v1alpha2 ([#88087](https://github.com/kubernetes/kubernetes/pull/88087), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling and Testing]
-- Added support for multiple sizes huge pages on a container level ([#84051](https://github.com/kubernetes/kubernetes/pull/84051), [@bart0sh](https://github.com/bart0sh)) [SIG Apps, Node and Storage]
-- AppProtocol is a new field on Service and Endpoints resources, enabled with the ServiceAppProtocol feature gate. ([#88503](https://github.com/kubernetes/kubernetes/pull/88503), [@robscott](https://github.com/robscott)) [SIG Apps and Network]
-- Fixed missing validation of uniqueness of list items in lists with `x-kubernetes-list-type: map` or x-kubernetes-list-type: set` in CustomResources. ([#84920](https://github.com/kubernetes/kubernetes/pull/84920), [@sttts](https://github.com/sttts)) [SIG API Machinery]
-- Introduces optional --detect-local flag to kube-proxy.
-  Currently the only supported value is "cluster-cidr",
-  which is the default if not specified. ([#87748](https://github.com/kubernetes/kubernetes/pull/87748), [@satyasm](https://github.com/satyasm)) [SIG Cluster Lifecycle, Network and Scheduling]
-- Kube-scheduler can run more than one scheduling profile. Given a pod, the profile is selected by using its `.spec.SchedulerName`. ([#88285](https://github.com/kubernetes/kubernetes/pull/88285), [@alculquicondor](https://github.com/alculquicondor)) [SIG Apps, Scheduling and Testing]
-- Moving Windows RunAsUserName feature to GA ([#87790](https://github.com/kubernetes/kubernetes/pull/87790), [@marosset](https://github.com/marosset)) [SIG Apps and Windows]
-
-### Feature
-
-- Add --dry-run to kubectl delete, taint, replace ([#88292](https://github.com/kubernetes/kubernetes/pull/88292), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI and Testing]
-- Add huge page stats to Allocated resources in "kubectl describe node" ([#80605](https://github.com/kubernetes/kubernetes/pull/80605), [@odinuge](https://github.com/odinuge)) [SIG CLI]
-- Kubeadm: The ClusterStatus struct present in the kubeadm-config ConfigMap is deprecated and will be removed on a future version. It is going to be maintained by kubeadm until it gets removed. The same information can be found on `etcd` and `kube-apiserver` pod annotations, `kubeadm.kubernetes.io/etcd.advertise-client-urls` and `kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint` respectively. ([#87656](https://github.com/kubernetes/kubernetes/pull/87656), [@ereslibre](https://github.com/ereslibre)) [SIG Cluster Lifecycle]
-- Kubeadm: add the experimental feature gate PublicKeysECDSA that can be used to create a
-  cluster with ECDSA certificates from "kubeadm init". Renewal of existing ECDSA certificates is
-  also supported using "kubeadm alpha certs renew", but not switching between the RSA and
-  ECDSA algorithms on the fly or during upgrades. ([#86953](https://github.com/kubernetes/kubernetes/pull/86953), [@rojkov](https://github.com/rojkov)) [SIG API Machinery, Auth and Cluster Lifecycle]
-- Kubeadm: on kubeconfig certificate renewal, keep the embedded CA in sync with the one on disk ([#88052](https://github.com/kubernetes/kubernetes/pull/88052), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Kubeadm: upgrade supports fallback to the nearest known etcd version if an unknown k8s version is passed ([#88373](https://github.com/kubernetes/kubernetes/pull/88373), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- New flag `--show-hidden-metrics-for-version` in kube-scheduler can be used to show all hidden metrics that deprecated in the previous minor release. ([#84913](https://github.com/kubernetes/kubernetes/pull/84913), [@serathius](https://github.com/serathius)) [SIG Instrumentation and Scheduling]
-- Scheduler framework permit plugins now run at the end of the scheduling cycle, after reserve plugins. Waiting on permit will remain in the beginning of the binding cycle. ([#88199](https://github.com/kubernetes/kubernetes/pull/88199), [@mateuszlitwin](https://github.com/mateuszlitwin)) [SIG Scheduling]
-- The kubelet and the default docker runtime now support running ephemeral containers in the Linux process namespace of a target container. Other container runtimes must implement this feature before it will be available in that runtime. ([#84731](https://github.com/kubernetes/kubernetes/pull/84731), [@verb](https://github.com/verb)) [SIG Node]
-
-### Other (Bug, Cleanup or Flake)
-
-- Add delays between goroutines for vm instance update ([#88094](https://github.com/kubernetes/kubernetes/pull/88094), [@aramase](https://github.com/aramase)) [SIG Cloud Provider]
-- Add init containers log to cluster dump info. ([#88324](https://github.com/kubernetes/kubernetes/pull/88324), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- CPU limits are now respected for Windows containers. If a node is over-provisioned, no weighting is used - only limits are respected. ([#86101](https://github.com/kubernetes/kubernetes/pull/86101), [@PatrickLang](https://github.com/PatrickLang)) [SIG Node, Testing and Windows]
-- Cloud provider config CloudProviderBackoffMode has been removed since it won't be used anymore. ([#88463](https://github.com/kubernetes/kubernetes/pull/88463), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Evictions due to pods breaching their ephemeral storage limits are now recorded by the `kubelet_evictions` metric and can be alerted on. ([#87906](https://github.com/kubernetes/kubernetes/pull/87906), [@smarterclayton](https://github.com/smarterclayton)) [SIG Node]
-- Fix: add remediation in azure disk attach/detach ([#88444](https://github.com/kubernetes/kubernetes/pull/88444), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fix: check disk status before disk azure disk ([#88360](https://github.com/kubernetes/kubernetes/pull/88360), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixed cleaning of CSI raw block volumes. ([#87978](https://github.com/kubernetes/kubernetes/pull/87978), [@jsafrane](https://github.com/jsafrane)) [SIG Storage]
-- Get-kube.sh uses the gcloud's current local GCP service account for auth when the provider is GCE or GKE instead of the metadata server default ([#88383](https://github.com/kubernetes/kubernetes/pull/88383), [@BenTheElder](https://github.com/BenTheElder)) [SIG Cluster Lifecycle]
-- Golang/x/net has been updated to bring in fixes for CVE-2020-9283 ([#88381](https://github.com/kubernetes/kubernetes/pull/88381), [@BenTheElder](https://github.com/BenTheElder)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle and Instrumentation]
-- Kubeadm now includes CoreDNS version 1.6.7 ([#86260](https://github.com/kubernetes/kubernetes/pull/86260), [@rajansandeep](https://github.com/rajansandeep)) [SIG Cluster Lifecycle]
-- Kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster ([#88434](https://github.com/kubernetes/kubernetes/pull/88434), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Optimize kubectl version help info ([#88313](https://github.com/kubernetes/kubernetes/pull/88313), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Removes the deprecated command `kubectl rolling-update` ([#88057](https://github.com/kubernetes/kubernetes/pull/88057), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG Architecture, CLI and Testing]
-
-
-# v1.18.0-alpha.5
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.5
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes.tar.gz) | `6452cac2b80721e9f577cb117c29b9ac6858812b4275c2becbf74312566f7d016e8b34019bd1bf7615131b191613bf9b973e40ad9ac8f6de9007d41ef2d7fd70`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-src.tar.gz) | `e41d9d4dd6910a42990051fcdca4bf5d3999df46375abd27ffc56aae9b455ae984872302d590da6aa85bba6079334fb5fe511596b415ee79843dee1c61c137da`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-darwin-386.tar.gz) | `5c95935863492b31d4aaa6be93260088dafea27663eb91edca980ca3a8485310e60441bc9050d4d577e9c3f7ffd96db516db8d64321124cec1b712e957c9fe1c`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-darwin-amd64.tar.gz) | `868faa578b3738604d8be62fae599ccc556799f1ce54807f1fe72599f20f8a1f98ad8152fac14a08a463322530b696d375253ba3653325e74b587df6e0510da3`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-386.tar.gz) | `76a89d1d30b476b47f8fb808e342f89608e5c1c1787c4c06f2d7e763f9482e2ae8b31e6ad26541972e2b9a3a7c28327e3150cdd355e8b8d8b050a801bbf08d49`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-amd64.tar.gz) | `07ad96a09b44d1c707d7c68312c5d69b101a3424bf1e6e9400b2e7a3fba78df04302985d473ddd640d8f3f0257be34110dbe1304b9565dd9d7a4639b7b7b85fd`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-arm.tar.gz) | `c04fed9fa370a75c1b8e18b2be0821943bb9befcc784d14762ea3278e73600332a9b324d5eeaa1801d20ad6be07a553c41dcf4fa7ab3eadd0730ab043d687c8c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-arm64.tar.gz) | `4199147dea9954333df26d34248a1cb7b02ebbd6380ffcd42d9f9ed5fdabae45a59215474dab3c11436c82e60bd27cbd03b3dde288bf611cd3e78b87c783c6a9`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-ppc64le.tar.gz) | `4f6d4d61d1c52d3253ca19031ebcd4bad06d19b68bbaaab5c8e8c590774faea4a5ceab1f05f2706b61780927e1467815b3479342c84d45df965aba78414727c4`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-linux-s390x.tar.gz) | `e2a454151ae5dd891230fb516a3f73f73ab97832db66fd3d12e7f1657a569f58a9fe2654d50ddd7d8ec88a5ff5094199323a4c6d7d44dcf7edb06cca11dd4de1`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-windows-386.tar.gz) | `14b262ba3b71c41f545db2a017cf1746075ada5745a858d2a62bc9df7c5dc10607220375db85e2c4cb85307b09709e58bc66a407488e0961191e3249dc7742b0`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-client-windows-amd64.tar.gz) | `26353c294755a917216664364b524982b7f5fc6aa832ce90134bb178df8a78604963c68873f121ea5f2626ff615bdbf2ffe54e00578739cde6df42ffae034732`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-amd64.tar.gz) | `ba77e0e7c610f59647c1b2601f82752964a0f54b7ad609a89b00fcfd553d0f0249f6662becbabaa755bb769b36a2000779f08022c40fb8cc61440337481317a1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-arm.tar.gz) | `45e87b3e844ea26958b0b489e8c9b90900a3253000850f5ff9e87ffdcafba72ab8fd17b5ba092051a58a4bc277912c047a85940ec7f093dff6f9e8bf6fed3b42`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-arm64.tar.gz) | `155e136e3124ead69c594eead3398d6cfdbb8f823c324880e8a7bbd1b570b05d13a77a69abd0a6758cfcc7923971cc6da4d3e0c1680fd519b632803ece00d5ce`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-ppc64le.tar.gz) | `3fa0fb8221da19ad9d03278961172b7fa29a618b30abfa55e7243bb937dede8df56658acf02e6b61e7274fbc9395e237f49c62f2a83017eca2a69f67af31c01c`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-server-linux-s390x.tar.gz) | `db3199c3d7ba0b326d71dc8b80f50b195e79e662f71386a3b2976d47d13d7b0136887cc21df6f53e70a3d733da6eac7bbbf3bab2df8a1909a3cee4b44c32dd0b`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-amd64.tar.gz) | `addcdfbad7f12647e6babb8eadf853a374605c8f18bf63f416fa4d3bf1b903aa206679d840433206423a984bb925e7983366edcdf777cf5daef6ef88e53d6dfa`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-arm.tar.gz) | `b2ac54e0396e153523d116a2aaa32c919d6243931e0104cd47a23f546d710e7abdaa9eae92d978ce63c92041e63a9b56f5dd8fd06c812a7018a10ecac440f768`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-arm64.tar.gz) | `7aab36f2735cba805e4fd109831a1af0f586a88db3f07581b6dc2a2aab90076b22c96b490b4f6461a8fb690bf78948b6d514274f0d6fb0664081de2d44dc48e1`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-ppc64le.tar.gz) | `a579936f07ebf86f69f297ac50ba4c34caf2c0b903f73190eb581c78382b05ef36d41ade5bfd25d7b1b658cfcbee3d7125702a18e7480f9b09a62733a512a18a`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-linux-s390x.tar.gz) | `58fa0359ddd48835192fab1136a2b9b45d1927b04411502c269cda07cb8a8106536973fb4c7fedf1d41893a524c9fe2e21078fdf27bfbeed778273d024f14449`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.5/kubernetes-node-windows-amd64.tar.gz) | `9086c03cd92b440686cea6d8c4e48045cc46a43ab92ae0e70350b3f51804b9e2aaae7178142306768bae00d9ef6dd938167972bfa90b12223540093f735a45db`
-
-## Changelog since v1.18.0-alpha.3
-
-### Deprecation
-
-- Kubeadm: command line option "kubelet-version" for `kubeadm upgrade node` has been deprecated and will be removed in a future release. ([#87942](https://github.com/kubernetes/kubernetes/pull/87942), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-
-### API Change
-
-- Kubelet podresources API now provides the information about active pods only. ([#79409](https://github.com/kubernetes/kubernetes/pull/79409), [@takmatsu](https://github.com/takmatsu)) [SIG Node]
-- Remove deprecated fields from .leaderElection in kubescheduler.config.k8s.io/v1alpha2 ([#87904](https://github.com/kubernetes/kubernetes/pull/87904), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Signatures on generated clientset methods have been modified to accept `context.Context` as a first argument. Signatures of generated Create, Update, and Patch methods have been updated to accept CreateOptions, UpdateOptions and PatchOptions respectively. Clientsets that with the previous interface have been added in new "deprecated" packages to allow incremental migration to the new APIs. The deprecated packages will be removed in the 1.21 release. ([#87299](https://github.com/kubernetes/kubernetes/pull/87299), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery, Apps, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Scheduling, Storage, Testing and Windows]
-- The k8s.io/node-api component is no longer updated. Instead, use the RuntimeClass types located within k8s.io/api, and the generated clients located within k8s.io/client-go ([#87503](https://github.com/kubernetes/kubernetes/pull/87503), [@liggitt](https://github.com/liggitt)) [SIG Node and Release]
-
-### Feature
-
-- Add indexer for storage cacher ([#85445](https://github.com/kubernetes/kubernetes/pull/85445), [@shaloulcy](https://github.com/shaloulcy)) [SIG API Machinery]
-- Add support for mount options to the FC volume plugin ([#87499](https://github.com/kubernetes/kubernetes/pull/87499), [@ejweber](https://github.com/ejweber)) [SIG Storage]
-- Added a config-mode flag in azure auth module to enable getting AAD token without spn: prefix in audience claim. When it's not specified, the default behavior doesn't change. ([#87630](https://github.com/kubernetes/kubernetes/pull/87630), [@weinong](https://github.com/weinong)) [SIG API Machinery, Auth, CLI and Cloud Provider]
-- Introduced BackoffManager interface for backoff management ([#87829](https://github.com/kubernetes/kubernetes/pull/87829), [@zhan849](https://github.com/zhan849)) [SIG API Machinery]
-- PodTopologySpread plugin now excludes terminatingPods when making scheduling decisions. ([#87845](https://github.com/kubernetes/kubernetes/pull/87845), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-- Promote CSIMigrationOpenStack to Beta (off by default since it requires installation of the OpenStack Cinder CSI Driver)
-  The in-tree AWS OpenStack Cinder "kubernetes.io/cinder" was already deprecated a while ago and will be removed in 1.20. Users should enable CSIMigration + CSIMigrationOpenStack features and install the OpenStack Cinder CSI Driver (https://github.com/kubernetes-sigs/cloud-provider-openstack) to avoid disruption to existing Pod and PVC objects at that time.
-  Users should start using the OpenStack Cinder CSI Driver directly for any new volumes. ([#85637](https://github.com/kubernetes/kubernetes/pull/85637), [@dims](https://github.com/dims)) [SIG Cloud Provider]
-
-### Design
-
-- The scheduler Permit extension point doesn't return a boolean value in its Allow() and Reject() functions. ([#87936](https://github.com/kubernetes/kubernetes/pull/87936), [@Huang-Wei](https://github.com/Huang-Wei)) [SIG Scheduling]
-
-### Other (Bug, Cleanup or Flake)
-
-- Adds "volume.beta.kubernetes.io/migrated-to" annotation to PV's and PVC's when they are migrated to signal external provisioners to pick up those objects for Provisioning and Deleting. ([#87098](https://github.com/kubernetes/kubernetes/pull/87098), [@davidz627](https://github.com/davidz627)) [SIG Apps and Storage]
-- Fix a bug in the dual-stack IPVS proxier where stale IPv6 endpoints were not being cleaned up ([#87695](https://github.com/kubernetes/kubernetes/pull/87695), [@andrewsykim](https://github.com/andrewsykim)) [SIG Network]
-- Fix kubectl drain ignore daemonsets and others. ([#87361](https://github.com/kubernetes/kubernetes/pull/87361), [@zhouya0](https://github.com/zhouya0)) [SIG CLI]
-- Fix: add azure disk migration support for CSINode ([#88014](https://github.com/kubernetes/kubernetes/pull/88014), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider and Storage]
-- Fix: add non-retriable errors in azure clients ([#87941](https://github.com/kubernetes/kubernetes/pull/87941), [@andyzhangx](https://github.com/andyzhangx)) [SIG Cloud Provider]
-- Fixed NetworkPolicy validation that Except values are accepted when they are outside the CIDR range. ([#86578](https://github.com/kubernetes/kubernetes/pull/86578), [@tnqn](https://github.com/tnqn)) [SIG Network]
-- Improves performance of the node authorizer ([#87696](https://github.com/kubernetes/kubernetes/pull/87696), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- Iptables/userspace proxy: improve performance by getting local addresses only once per sync loop, instead of for every external IP ([#85617](https://github.com/kubernetes/kubernetes/pull/85617), [@andrewsykim](https://github.com/andrewsykim)) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation and Network]
-- Kube-aggregator: always sets unavailableGauge metric to reflect the current state of a service. ([#87778](https://github.com/kubernetes/kubernetes/pull/87778), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery]
-- Kubeadm allows to configure single-stack clusters if dual-stack is enabled ([#87453](https://github.com/kubernetes/kubernetes/pull/87453), [@aojea](https://github.com/aojea)) [SIG API Machinery, Cluster Lifecycle and Network]
-- Kubeadm:  'kubeadm alpha kubelet config download' has been removed, please use 'kubeadm upgrade node phase kubelet-config' instead ([#87944](https://github.com/kubernetes/kubernetes/pull/87944), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubeadm: remove 'kubeadm upgrade node config' command since it was deprecated in v1.15, please use 'kubeadm upgrade node phase kubelet-config' instead ([#87975](https://github.com/kubernetes/kubernetes/pull/87975), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-- Kubectl describe <type> and kubectl top pod will return a message saying "No resources found" or "No resources found in <namespace> namespace" if there are no results to display. ([#87527](https://github.com/kubernetes/kubernetes/pull/87527), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- Kubelet metrics gathered through metrics-server or prometheus should no longer timeout for Windows nodes running more than 3 pods. ([#87730](https://github.com/kubernetes/kubernetes/pull/87730), [@marosset](https://github.com/marosset)) [SIG Node, Testing and Windows]
-- Kubelet metrics have been changed to buckets.
-  For example the exec/{podNamespace}/{podID}/{containerName} is now just exec. ([#87913](https://github.com/kubernetes/kubernetes/pull/87913), [@cheftako](https://github.com/cheftako)) [SIG Node]
-- Limit number of instances in a single update to GCE target pool to 1000. ([#87881](https://github.com/kubernetes/kubernetes/pull/87881), [@wojtek-t](https://github.com/wojtek-t)) [SIG Cloud Provider, Network and Scalability]
-- Make Azure clients only retry on specified HTTP status codes ([#88017](https://github.com/kubernetes/kubernetes/pull/88017), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Pause image contains "Architecture" in non-amd64 images ([#87954](https://github.com/kubernetes/kubernetes/pull/87954), [@BenTheElder](https://github.com/BenTheElder)) [SIG Release]
-- Pods that are considered for preemption and haven't started don't produce an error log. ([#87900](https://github.com/kubernetes/kubernetes/pull/87900), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- Prevent error message from being displayed when running kubectl plugin list and your path includes an empty string ([#87633](https://github.com/kubernetes/kubernetes/pull/87633), [@brianpursley](https://github.com/brianpursley)) [SIG CLI]
-- `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object ([#85889](https://github.com/kubernetes/kubernetes/pull/85889), [@oke-py](https://github.com/oke-py)) [SIG CLI]
-
-# v1.18.0-alpha.4
-
-[Documentation](https://docs.k8s.io)
-
-## Important note about manual tag
-
-Due to a [tagging bug in our Release Engineering tooling](https://github.com/kubernetes/release/issues/1080) during `v1.18.0-alpha.3`, we needed to push a manual tag (`v1.18.0-alpha.4`).
-
-**No binaries have been produced or will be provided for `v1.18.0-alpha.4`.**
-
-The changelog for `v1.18.0-alpha.4` is included as part of the [changelog since v1.18.0-alpha.3][#changelog-since-v1180-alpha3] section.
-
-# v1.18.0-alpha.3
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.3
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes.tar.gz) | `60bf3bfc23b428f53fd853bac18a4a905b980fcc0bacd35ccd6357a89cfc26e47de60975ea6b712e65980e6b9df82a22331152d9f08ed4dba44558ba23a422d4`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-src.tar.gz) | `8adf1016565a7c93713ab6fa4293c2d13b4f6e4e1ec4dcba60bd71e218b4dbe9ef5eb7dbb469006743f498fc7ddeb21865cd12bec041af60b1c0edce8b7aecd5`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-darwin-386.tar.gz) | `abb32e894e8280c772e96227b574da81cd1eac374b8d29158b7f222ed550087c65482eef4a9817dfb5f2baf0d9b85fcdfa8feced0fbc1aacced7296853b57e1f`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-darwin-amd64.tar.gz) | `5e4b1a993264e256ec1656305de7c306094cae9781af8f1382df4ce4eed48ce030827fde1a5e757d4ad57233d52075c9e4e93a69efbdc1102e4ba810705ccddc`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-386.tar.gz) | `68da39c2ae101d2b38f6137ceda07eb0c2124794982a62ef483245dbffb0611c1441ca085fa3127e7a9977f45646788832a783544ff06954114548ea0e526e46`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-amd64.tar.gz) | `dc236ffa8ad426620e50181419e9bebe3c161e953dbfb8a019f61b11286e1eb950b40d7cc03423bdf3e6974973bcded51300f98b55570c29732fa492dcde761d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-arm.tar.gz) | `ab0a8bd6dc31ea160b731593cdc490b3cc03668b1141cf95310bd7060dcaf55c7ee9842e0acae81063fdacb043c3552ccdd12a94afd71d5310b3ce056fdaa06c`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-arm64.tar.gz) | `159ea083c601710d0d6aea423eeb346c99ffaf2abd137d35a53e87a07f5caf12fca8790925f3196f67b768fa92a024f83b50325dbca9ccd4dde6c59acdce3509`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-ppc64le.tar.gz) | `16b0459adfa26575d13be49ab53ac7f0ffd05e184e4e13d2dfbfe725d46bb8ac891e1fd8aebe36ecd419781d4cc5cf3bd2aaaf5263cf283724618c4012408f40`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-linux-s390x.tar.gz) | `d5aa1f5d89168995d2797eb839a04ce32560f405b38c1c0baaa0e313e4771ae7bb3b28e22433ad5897d36aadf95f73eb69d8d411d31c4115b6b0adf5fe041f85`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-windows-386.tar.gz) | `374e16a1e52009be88c94786f80174d82dff66399bf294c9bee18a2159c42251c5debef1109a92570799148b08024960c6c50b8299a93fd66ebef94f198f34e9`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-client-windows-amd64.tar.gz) | `5a94c1068c19271f810b994adad8e62fae03b3d4473c7c9e6d056995ff7757ea61dd8d140c9267dd41e48808876673ce117826d35a3c1bb5652752f11a044d57`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-amd64.tar.gz) | `a677bec81f0eba75114b92ff955bac74512b47e53959d56a685dae5edd527283d91485b1e86ad74ef389c5405863badf7eb22e2f0c9a568a4d0cb495c6a5c32f`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-arm.tar.gz) | `2fb696f86ff13ebeb5f3cf2b254bf41303644c5ea84a292782eac6123550702655284d957676d382698c091358e5c7fe73f32803699c19be7138d6530fe413b6`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-arm64.tar.gz) | `738e95da9cfb8f1309479078098de1c38cef5e1dd5ee1129b77651a936a412b7cd0cf15e652afc7421219646a98846ab31694970432e48dea9c9cafa03aa59cf`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-ppc64le.tar.gz) | `7a85bfcbb2aa636df60c41879e96e788742ecd72040cb0db2a93418439c125218c58a4cfa96d01b0296c295793e94c544e87c2d98d50b49bc4cb06b41f874376`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-server-linux-s390x.tar.gz) | `1f1cdb2efa3e7cac857203d8845df2fdaa5cf1f20df764efffff29371945ec58f6deeba06f8fbf70b96faf81b0c955bf4cb84e30f9516cb2cc1ed27c2d2185a6`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-amd64.tar.gz) | `4ccfced3f5ba4adfa58f4a9d1b2c5bdb3e89f9203ab0e27d11eb1c325ac323ebe63c015d2c9d070b233f5d1da76cab5349da3528511c1cd243e66edc9af381c4`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-arm.tar.gz) | `d695a69d18449062e4c129e54ec8384c573955f8108f4b78adc2ec929719f2196b995469c728dd6656c63c44cda24315543939f85131ebc773cfe0de689df55b`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-arm64.tar.gz) | `21df1da88c89000abc22f97e482c3aaa5ce53ec9628d83dda2e04a1d86c4d53be46c03ed6f1f211df3ee5071bce39d944ff7716b5b6ada3b9c4821d368b0a898`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-ppc64le.tar.gz) | `ff77e3aacb6ed9d89baed92ef542c8b5cec83151b6421948583cf608bca3b779dce41fc6852961e00225d5e1502f6a634bfa61a36efa90e1aee90dedb787c2d2`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-linux-s390x.tar.gz) | `57d75b7977ec1a0f6e7ed96a304dbb3b8664910f42ca19aab319a9ec33535ff5901dfca4abcb33bf5741cde6d152acd89a5f8178f0efe1dc24430e0c1af5b98f`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.3/kubernetes-node-windows-amd64.tar.gz) | `63fdbb71773cfd73a914c498e69bb9eea3fc314366c99ffb8bd42ec5b4dae807682c83c1eb5cfb1e2feb4d11d9e49cc85ba644e954241320a835798be7653d61`
-
-## Changelog since v1.18.0-alpha.2
-
-### Deprecation
-
-- Remove all the generators from kubectl run. It will now only create pods. Additionally, deprecates all the flags that are not relevant anymore. ([#87077](https://github.com/kubernetes/kubernetes/pull/87077), [@soltysh](https://github.com/soltysh)) [SIG Architecture, SIG CLI, and SIG Testing]
-- kubeadm: kube-dns is deprecated and will not be supported in a future version ([#86574](https://github.com/kubernetes/kubernetes/pull/86574), [@SataQiu](https://github.com/SataQiu)) [SIG Cluster Lifecycle]
-
-### API Change
-
-- Add kubescheduler.config.k8s.io/v1alpha2 ([#87628](https://github.com/kubernetes/kubernetes/pull/87628), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling]
-- --enable-cadvisor-endpoints is now disabled by default. If you need access to the cAdvisor v1 Json API please enable it explicitly in the kubelet command line. Please note that this flag was deprecated in 1.15 and will be removed in 1.19. ([#87440](https://github.com/kubernetes/kubernetes/pull/87440), [@dims](https://github.com/dims)) [SIG Instrumentation, SIG Node, and SIG Testing]
-- The following feature gates are removed, because the associated features were unconditionally enabled in previous releases: CustomResourceValidation, CustomResourceSubresources, CustomResourceWebhookConversion, CustomResourcePublishOpenAPI, CustomResourceDefaulting ([#87475](https://github.com/kubernetes/kubernetes/pull/87475), [@liggitt](https://github.com/liggitt)) [SIG API Machinery]
-
-### Feature
-
-- aggragation api will have alpha support for network proxy ([#87515](https://github.com/kubernetes/kubernetes/pull/87515), [@Sh4d1](https://github.com/Sh4d1)) [SIG API Machinery]
-- API request throttling (due to a high rate of requests) is now reported in client-go logs at log level 2.  The messages are of the form
-
-  Throttling request took 1.50705208s, request: GET:<URL>
-
-  The presence of these messages, may indicate to the administrator the need to tune the cluster accordingly. ([#87740](https://github.com/kubernetes/kubernetes/pull/87740), [@jennybuckley](https://github.com/jennybuckley)) [SIG API Machinery]
-- kubeadm: reject a node joining the cluster if a node with the same name already exists ([#81056](https://github.com/kubernetes/kubernetes/pull/81056), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- disableAvailabilitySetNodes is added to avoid VM list for VMSS clusters. It should only be used when vmType is "vmss" and all the nodes (including masters) are VMSS virtual machines. ([#87685](https://github.com/kubernetes/kubernetes/pull/87685), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- The kubectl --dry-run flag now accepts the values 'client', 'server', and 'none', to support client-side and server-side dry-run strategies. The boolean and unset values for the --dry-run flag are deprecated and a value will be required in a future version. ([#87580](https://github.com/kubernetes/kubernetes/pull/87580), [@julianvmodesto](https://github.com/julianvmodesto)) [SIG CLI]
-- Add support for pre-allocated hugepages for more than one page size ([#82820](https://github.com/kubernetes/kubernetes/pull/82820), [@odinuge](https://github.com/odinuge)) [SIG Apps]
-- Update CNI version to v0.8.5 ([#78819](https://github.com/kubernetes/kubernetes/pull/78819), [@justaugustus](https://github.com/justaugustus)) [SIG API Machinery, SIG Cluster Lifecycle, SIG Network, SIG Release, and SIG Testing]
-- Skip default spreading scoring plugin for pods that define TopologySpreadConstraints ([#87566](https://github.com/kubernetes/kubernetes/pull/87566), [@skilxn-go](https://github.com/skilxn-go)) [SIG Scheduling]
-- Added more details to taint toleration errors ([#87250](https://github.com/kubernetes/kubernetes/pull/87250), [@starizard](https://github.com/starizard)) [SIG Apps, and SIG Scheduling]
-- Scheduler: Add DefaultBinder plugin ([#87430](https://github.com/kubernetes/kubernetes/pull/87430), [@alculquicondor](https://github.com/alculquicondor)) [SIG Scheduling, and SIG Testing]
-- Kube-apiserver metrics will now include request counts, latencies, and response sizes for /healthz, /livez, and /readyz requests. ([#83598](https://github.com/kubernetes/kubernetes/pull/83598), [@jktomer](https://github.com/jktomer)) [SIG API Machinery]
-
-### Other (Bug, Cleanup or Flake)
-
-- Fix the masters rolling upgrade causing thundering herd of LISTs on etcd leading to control plane unavailability. ([#86430](https://github.com/kubernetes/kubernetes/pull/86430), [@wojtek-t](https://github.com/wojtek-t)) [SIG API Machinery, SIG Node, and SIG Testing]
-- `kubectl diff` now returns 1 only on diff finding changes, and >1 on kubectl errors. The "exit status code 1" message as also been muted. ([#87437](https://github.com/kubernetes/kubernetes/pull/87437), [@apelisse](https://github.com/apelisse)) [SIG CLI, and SIG Testing]
-- To reduce chances of throttling, VM cache is set to nil when Azure node provisioning state is deleting ([#87635](https://github.com/kubernetes/kubernetes/pull/87635), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]
-- Fix regression in statefulset conversion which prevented applying a statefulset multiple times. ([#87706](https://github.com/kubernetes/kubernetes/pull/87706), [@liggitt](https://github.com/liggitt)) [SIG Apps, and SIG Testing]
-- fixed two scheduler metrics (pending_pods and schedule_attempts_total) not being recorded ([#87692](https://github.com/kubernetes/kubernetes/pull/87692), [@everpeace](https://github.com/everpeace)) [SIG Scheduling]
-- Resolved a performance issue in the node authorizer index maintenance. ([#87693](https://github.com/kubernetes/kubernetes/pull/87693), [@liggitt](https://github.com/liggitt)) [SIG Auth]
-- Removed the 'client' label from apiserver_request_total. ([#87669](https://github.com/kubernetes/kubernetes/pull/87669), [@logicalhan](https://github.com/logicalhan)) [SIG API Machinery, and SIG Instrumentation]
-- `(*"k8s.io/client-go/rest".Request).{Do,DoRaw,Stream,Watch}` now require callers to pass a `context.Context` as an argument. The context is used for timeout and cancellation signaling and to pass supplementary information to round trippers in the wrapped transport chain. If you don't need any of this functionality, it is sufficient to pass a context created with `context.Background()` to these functions. The `(*"k8s.io/client-go/rest".Request).Context` method is removed now that all methods that execute a request accept a context directly. ([#87597](https://github.com/kubernetes/kubernetes/pull/87597), [@mikedanese](https://github.com/mikedanese)) [SIG API Machinery, SIG Apps, SIG Auth, SIG Autoscaling, SIG CLI, SIG Cloud Provider, SIG Cluster Lifecycle, SIG Instrumentation, SIG Network, SIG Node, SIG Scheduling, SIG Storage, and SIG Testing]
-- For volumes that allow attaches across multiple nodes, attach and detach operations across different nodes are now executed in parallel. ([#87258](https://github.com/kubernetes/kubernetes/pull/87258), [@verult](https://github.com/verult)) [SIG Apps, SIG Node, and SIG Storage]
-- kubeadm: apply further improvements to the tentative support for concurrent etcd member join. Fixes a bug where multiple members can receive the same hostname. Increase the etcd client dial timeout and retry timeout for add/remove/... operations. ([#87505](https://github.com/kubernetes/kubernetes/pull/87505), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Reverted a kubectl azure auth module change where oidc claim spn: prefix was omitted resulting a breaking behavior with existing Azure AD OIDC enabled api-server ([#87507](https://github.com/kubernetes/kubernetes/pull/87507), [@weinong](https://github.com/weinong)) [SIG API Machinery, SIG Auth, and SIG Cloud Provider]
-- Update cri-tools to v1.17.0 ([#86305](https://github.com/kubernetes/kubernetes/pull/86305), [@saschagrunert](https://github.com/saschagrunert)) [SIG Cluster Lifecycle, and SIG Release]
-- kubeadm: remove the deprecated CoreDNS feature-gate. It was set to "true" since v1.11 when the feature went GA. In v1.13 it was marked as deprecated and hidden from the CLI. ([#87400](https://github.com/kubernetes/kubernetes/pull/87400), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]
-- Shared informers are now more reliable in the face of network disruption. ([#86015](https://github.com/kubernetes/kubernetes/pull/86015), [@squeed](https://github.com/squeed)) [SIG API Machinery]
-- the CSR signing cert/key pairs will be reloaded from disk like the kube-apiserver cert/key pairs ([#86816](https://github.com/kubernetes/kubernetes/pull/86816), [@deads2k](https://github.com/deads2k)) [SIG API Machinery, SIG Apps, and SIG Auth]
-- "kubectl describe statefulsets.apps" prints garbage for rolling update partition ([#85846](https://github.com/kubernetes/kubernetes/pull/85846), [@phil9909](https://github.com/phil9909)) [SIG CLI]
-
-
-<!-- NEW RELEASE NOTES ENTRY -->
-
-
-# v1.18.0-alpha.2
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.2
-
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes.tar.gz) | `7af83386b4b35353f0aa1bdaf73599eb08b1d1ca11ecc2c606854aff754db69f3cd3dc761b6d7fc86f01052f615ca53185f33dbf9e53b2f926b0f02fc103fbd3`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-src.tar.gz) | `a14b02a0a0bde97795a836a8f5897b0ee6b43e010e13e43dd4cca80a5b962a1ef3704eedc7916fed1c38ec663a71db48c228c91e5daacba7d9370df98c7ddfb6`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-darwin-386.tar.gz) | `427f214d47ded44519007de2ae87160c56c2920358130e474b768299751a9affcbc1b1f0f936c39c6138837bca2a97792a6700896976e98c4beee8a1944cfde1`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-darwin-amd64.tar.gz) | `861fd81ac3bd45765575bedf5e002a2294aba48ef9e15980fc7d6783985f7d7fcde990ea0aef34690977a88df758722ec0a2e170d5dcc3eb01372e64e5439192`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-386.tar.gz) | `7d59b05d6247e2606a8321c72cd239713373d876dbb43b0fb7f1cb857fa6c998038b41eeed78d9eb67ce77b0b71776ceed428cce0f8d2203c5181b473e0bd86c`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-amd64.tar.gz) | `7cdefb4e32bad9d2df5bb8e7e0a6f4dab2ae6b7afef5d801ac5c342d4effdeacd799081fa2dec699ecf549200786c7623c3176252010f12494a95240dd63311d`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-arm.tar.gz) | `6212bbf0fa1d01ced77dcca2c4b76b73956cd3c6b70e0701c1fe0df5ff37160835f6b84fa2481e0e6979516551b14d8232d1c72764a559a3652bfe2a1e7488ff`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-arm64.tar.gz) | `1f0d9990700510165ee471acb2f88222f1b80e8f6deb351ce14cf50a70a9840fb99606781e416a13231c74b2bd7576981b5348171aa33b628d2666e366cd4629`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-ppc64le.tar.gz) | `77e00ba12a32db81e96f8de84609de93f32c61bb3f53875a57496d213aa6d1b92c09ad5a6de240a78e1a5bf77fac587ff92874f34a10f8909ae08ca32fda45d2`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-linux-s390x.tar.gz) | `a39ec2044bed5a4570e9c83068e0fc0ce923ccffa44380f8bbc3247426beaff79c8a84613bcb58b05f0eb3afbc34c79fe3309aa2e0b81abcfd0aa04770e62e05`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-windows-386.tar.gz) | `1a0ab88f9b7e34b60ab31d5538e97202a256ad8b7b7ed5070cae5f2f12d5d4edeae615db7a34ebbe254004b6393c6b2480100b09e30e59c9139492a3019a596a`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-client-windows-amd64.tar.gz) | `1966eb5dfb78c1bc33aaa6389f32512e3aa92584250a0164182f3566c81d901b59ec78ee4e25df658bc1dd221b5a9527d6ce3b6c487ca3e3c0b319a077caa735`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-amd64.tar.gz) | `f814d6a3872e4572aa4da297c29def4c1fad8eba0903946780b6bf9788c72b99d71085c5aef9e12c01133b26fa4563c1766ba724ad2a8af2670a24397951a94d`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-arm.tar.gz) | `56aa08225e546c92c2ff88ac57d3db7dd5e63640772ea72a429f080f7069827138cbc206f6f5fe3a0c01bfca043a9eda305ecdc1dcb864649114893e46b6dc84`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-arm64.tar.gz) | `fb87128d905211ba097aa860244a376575ae2edbaca6e51402a24bc2964854b9b273e09df3d31a2bcffc91509f7eecb2118b183fb0e0eb544f33403fa235c274`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-ppc64le.tar.gz) | `6d21fbf39b9d3a0df9642407d6f698fabdc809aca83af197bceb58a81b25846072f407f8fb7caae2e02dc90912e3e0f5894f062f91bcb69f8c2329625d3dfeb7`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-server-linux-s390x.tar.gz) | `ddcda4dc360ca97705f71bf2a18ddacd7b7ddf77535b62e699e97a1b2dd24843751313351d0112e238afe69558e8271eba4d27ab77bb67b4b9e3fbde6eec85c9`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-amd64.tar.gz) | `78915a9bde35c70c67014f0cea8754849db4f6a84491a3ad9678fd3bc0203e43af5a63cfafe104ae1d56b05ce74893a87a6dcd008d7859e1af6b3bce65425b5d`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-arm.tar.gz) | `3218e811abcb0cb09d80742def339be3916db5e9bbc62c0dc8e6d87085f7e3d9eeed79dea081906f1de78ddd07b7e3acdbd7765fdb838d262bb35602fd1df106`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-arm64.tar.gz) | `fa22de9c4440b8fb27f4e77a5a63c5e1c8aa8aa30bb79eda843b0f40498c21b8c0ad79fff1d841bb9fef53fe20da272506de9a86f81a0b36d028dbeab2e482ce`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-ppc64le.tar.gz) | `bbda9b5cc66e8f13d235703b2a85e2c4f02fa16af047be4d27a3e198e11eb11706e4a0fbb6c20978c770b069cd4cd9894b661f09937df9d507411548c36576e0`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-linux-s390x.tar.gz) | `b2ed1eda013069adce2aac00b86d75b84e006cfce9bafac0b5a2bafcb60f8f2cb346b5ea44eafa72d777871abef1ea890eb3a2a05de28968f9316fa88886a8ed`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.2/kubernetes-node-windows-amd64.tar.gz) | `bd8eb23dba711f31b5148257076b1bbe9629f2a75de213b2c779bd5b29279e9bf22f8bde32f4bc814f4c0cc49e19671eb8b24f4105f0fe2c1490c4b78ec3c704`
-
-## Changelog since v1.18.0-alpha.1
-
-### Other notable changes
-
-* Bump golang/mock version to v1.3.1 ([#87326](https://github.com/kubernetes/kubernetes/pull/87326), [@wawa0210](https://github.com/wawa0210))
-* fix a bug that orphan revision cannot be adopted and statefulset cannot be synced ([#86801](https://github.com/kubernetes/kubernetes/pull/86801), [@likakuli](https://github.com/likakuli))
-* Azure storage clients now suppress requests on throttling ([#87306](https://github.com/kubernetes/kubernetes/pull/87306), [@feiskyer](https://github.com/feiskyer))
-* Introduce Alpha field `Immutable` in both Secret and ConfigMap objects to mark their contents as immutable. The implementation is hidden behind feature gate `ImmutableEphemeralVolumes` (currently in Alpha stage). ([#86377](https://github.com/kubernetes/kubernetes/pull/86377), [@wojtek-t](https://github.com/wojtek-t))
-* EndpointSlices will now be enabled by default. A new `EndpointSliceProxying` feature gate determines if kube-proxy will use EndpointSlices, this is disabled by default. ([#86137](https://github.com/kubernetes/kubernetes/pull/86137), [@robscott](https://github.com/robscott))
-* kubeadm upgrades always persist the etcd backup for stacked ([#86861](https://github.com/kubernetes/kubernetes/pull/86861), [@SataQiu](https://github.com/SataQiu))
-* Fix the bug PIP's DNS is deleted if no DNS label service annotation isn't set. ([#87246](https://github.com/kubernetes/kubernetes/pull/87246), [@nilo19](https://github.com/nilo19))
-* New flag `--show-hidden-metrics-for-version` in kube-controller-manager can be used to show all hidden metrics that deprecated in the previous minor release. ([#85281](https://github.com/kubernetes/kubernetes/pull/85281), [@RainbowMango](https://github.com/RainbowMango))
-* Azure network and VM clients now suppress requests on throttling ([#87122](https://github.com/kubernetes/kubernetes/pull/87122), [@feiskyer](https://github.com/feiskyer))
-* `kubectl apply  -f <file> --prune -n <namespace>` should prune all resources not defined in the file in the cli specified namespace. ([#85613](https://github.com/kubernetes/kubernetes/pull/85613), [@MartinKaburu](https://github.com/MartinKaburu))
-* Fixes service account token admission error in clusters that do not run the service account token controller ([#87029](https://github.com/kubernetes/kubernetes/pull/87029), [@liggitt](https://github.com/liggitt))
-* CustomResourceDefinition status fields are no longer required for client validation when submitting manifests.  ([#87213](https://github.com/kubernetes/kubernetes/pull/87213), [@hasheddan](https://github.com/hasheddan))
-* All apiservers log request lines in a more greppable format. ([#87203](https://github.com/kubernetes/kubernetes/pull/87203), [@lavalamp](https://github.com/lavalamp))
-* provider/azure: Network security groups can now be in a separate resource group. ([#87035](https://github.com/kubernetes/kubernetes/pull/87035), [@CecileRobertMichon](https://github.com/CecileRobertMichon))
-* Cleaned up the output from `kubectl describe CSINode <name>`. ([#85283](https://github.com/kubernetes/kubernetes/pull/85283), [@huffmanca](https://github.com/huffmanca))
-* Fixed the following  ([#84265](https://github.com/kubernetes/kubernetes/pull/84265), [@bhagwat070919](https://github.com/bhagwat070919))
-    * -  AWS Cloud Provider attempts to delete LoadBalancer security group it didn’t provision
-    * -  AWS Cloud Provider creates default LoadBalancer security group even if annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present
-* kubelet: resource metrics endpoint `/metrics/resource/v1alpha1` as well as all metrics under this endpoint have been deprecated. ([#86282](https://github.com/kubernetes/kubernetes/pull/86282), [@RainbowMango](https://github.com/RainbowMango))
-    * Please convert to the following metrics emitted by endpoint `/metrics/resource`:
-    * - scrape_error --> scrape_error
-    * - node_cpu_usage_seconds_total --> node_cpu_usage_seconds
-    * - node_memory_working_set_bytes --> node_memory_working_set_bytes
-    * - container_cpu_usage_seconds_total --> container_cpu_usage_seconds
-    * - container_memory_working_set_bytes --> container_memory_working_set_bytes
-    * - scrape_error --> scrape_error
-* You can now pass "--node-ip ::" to kubelet to indicate that it should autodetect an IPv6 address to use as the node's primary address. ([#85850](https://github.com/kubernetes/kubernetes/pull/85850), [@danwinship](https://github.com/danwinship))
-* kubeadm: support automatic retry after failing to pull image ([#86899](https://github.com/kubernetes/kubernetes/pull/86899), [@SataQiu](https://github.com/SataQiu))
-* TODO ([#87044](https://github.com/kubernetes/kubernetes/pull/87044), [@jennybuckley](https://github.com/jennybuckley))
-* Improved yaml parsing performance ([#85458](https://github.com/kubernetes/kubernetes/pull/85458), [@cjcullen](https://github.com/cjcullen))
-* Fixed a bug which could prevent a provider ID from ever being set for node if an error occurred determining the provider ID when the node was added. ([#87043](https://github.com/kubernetes/kubernetes/pull/87043), [@zjs](https://github.com/zjs))
-* fix a regression in kubenet that prevent pods to obtain ip addresses ([#85993](https://github.com/kubernetes/kubernetes/pull/85993), [@chendotjs](https://github.com/chendotjs))
-* Bind kube-dns containers to linux nodes to avoid Windows scheduling ([#83358](https://github.com/kubernetes/kubernetes/pull/83358), [@wawa0210](https://github.com/wawa0210))
-* The following features are unconditionally enabled and the corresponding `--feature-gates` flags have been removed: `PodPriority`, `TaintNodesByCondition`, `ResourceQuotaScopeSelectors` and `ScheduleDaemonSetPods` ([#86210](https://github.com/kubernetes/kubernetes/pull/86210), [@draveness](https://github.com/draveness))
-* Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83364](https://github.com/kubernetes/kubernetes/pull/83364), [@wawa0210](https://github.com/wawa0210))
-* fix kubectl annotate error when local=true is set ([#86952](https://github.com/kubernetes/kubernetes/pull/86952), [@zhouya0](https://github.com/zhouya0))
-* Bug fixes: ([#84163](https://github.com/kubernetes/kubernetes/pull/84163), [@david-tigera](https://github.com/david-tigera))
-    * Make sure we include latest packages node #351 ([@caseydavenport](https://github.com/caseydavenport))
-* fix kuebctl apply set-last-applied namespaces error   ([#86474](https://github.com/kubernetes/kubernetes/pull/86474), [@zhouya0](https://github.com/zhouya0))
-* Add VolumeBinder method to FrameworkHandle interface, which allows user to get the volume binder when implementing scheduler framework plugins. ([#86940](https://github.com/kubernetes/kubernetes/pull/86940), [@skilxn-go](https://github.com/skilxn-go))
-* elasticsearch supports automatically setting the advertise address ([#85944](https://github.com/kubernetes/kubernetes/pull/85944), [@SataQiu](https://github.com/SataQiu))
-* If a serving certificates param specifies a name that is an IP for an SNI certificate, it will have priority for replying to server connections. ([#85308](https://github.com/kubernetes/kubernetes/pull/85308), [@deads2k](https://github.com/deads2k))
-* kube-proxy: Added dual-stack IPv4/IPv6 support to the iptables proxier. ([#82462](https://github.com/kubernetes/kubernetes/pull/82462), [@vllry](https://github.com/vllry))
-* Azure VMSS/VMSSVM clients now suppress requests on throttling ([#86740](https://github.com/kubernetes/kubernetes/pull/86740), [@feiskyer](https://github.com/feiskyer))
-* New metric kubelet_pleg_last_seen_seconds to aid diagnosis of PLEG not healthy issues. ([#86251](https://github.com/kubernetes/kubernetes/pull/86251), [@bboreham](https://github.com/bboreham))
-* For subprotocol negotiation, both client and server protocol is required now. ([#86646](https://github.com/kubernetes/kubernetes/pull/86646), [@tedyu](https://github.com/tedyu))
-* kubeadm: use bind-address option to configure the kube-controller-manager and kube-scheduler http probes ([#86493](https://github.com/kubernetes/kubernetes/pull/86493), [@aojea](https://github.com/aojea))
-* Marked scheduler's metrics scheduling_algorithm_predicate_evaluation_seconds and ([#86584](https://github.com/kubernetes/kubernetes/pull/86584), [@xiaoanyunfei](https://github.com/xiaoanyunfei))
-    * scheduling_algorithm_priority_evaluation_seconds as deprecated. Those are replaced by framework_extension_point_duration_seconds[extenstion_point="Filter"] and framework_extension_point_duration_seconds[extenstion_point="Score"] respectively.
-* Marked scheduler's scheduling_duration_seconds Summary metric as deprecated ([#86586](https://github.com/kubernetes/kubernetes/pull/86586), [@xiaoanyunfei](https://github.com/xiaoanyunfei))
-* Add instructions about how to bring up e2e test cluster ([#85836](https://github.com/kubernetes/kubernetes/pull/85836), [@YangLu1031](https://github.com/YangLu1031))
-* If a required flag is not provided to a command, the user will only see the required flag error message, instead of the entire usage menu. ([#86693](https://github.com/kubernetes/kubernetes/pull/86693), [@sallyom](https://github.com/sallyom))
-* kubeadm: tolerate whitespace when validating certificate authority PEM data in kubeconfig files ([#86705](https://github.com/kubernetes/kubernetes/pull/86705), [@neolit123](https://github.com/neolit123))
-* kubeadm: add support for the "ci/k8s-master" version label as a replacement for "ci-cross/*", which no longer exists. ([#86609](https://github.com/kubernetes/kubernetes/pull/86609), [@Pensu](https://github.com/Pensu))
-* Fix EndpointSlice controller race condition and ensure that it handles external changes to EndpointSlices. ([#85703](https://github.com/kubernetes/kubernetes/pull/85703), [@robscott](https://github.com/robscott))
-* Fix nil pointer dereference in azure cloud provider ([#85975](https://github.com/kubernetes/kubernetes/pull/85975), [@ldx](https://github.com/ldx))
-* fix: azure disk could not mounted on Standard_DC4s/DC2s instances ([#86612](https://github.com/kubernetes/kubernetes/pull/86612), [@andyzhangx](https://github.com/andyzhangx))
-* Fixes v1.17.0 regression in --service-cluster-ip-range handling with IPv4 ranges larger than 65536 IP addresses ([#86534](https://github.com/kubernetes/kubernetes/pull/86534), [@liggitt](https://github.com/liggitt))
-* Adds back support for AlwaysCheckAllPredicates flag. ([#86496](https://github.com/kubernetes/kubernetes/pull/86496), [@ahg-g](https://github.com/ahg-g))
-* Azure global rate limit is switched to per-client. A set of new rate limit configure options are introduced, including routeRateLimit, SubnetsRateLimit, InterfaceRateLimit, RouteTableRateLimit, LoadBalancerRateLimit, PublicIPAddressRateLimit, SecurityGroupRateLimit, VirtualMachineRateLimit, StorageAccountRateLimit, DiskRateLimit, SnapshotRateLimit, VirtualMachineScaleSetRateLimit and VirtualMachineSizeRateLimit. ([#86515](https://github.com/kubernetes/kubernetes/pull/86515), [@feiskyer](https://github.com/feiskyer))
-    * The original rate limit options would be default values for those new client's rate limiter.
-* Fix issue [#85805](https://github.com/kubernetes/kubernetes/pull/85805) about resource not found in azure cloud provider when lb specified in other resource group. ([#86502](https://github.com/kubernetes/kubernetes/pull/86502), [@levimm](https://github.com/levimm))
-* `AlwaysCheckAllPredicates` is deprecated in scheduler Policy API. ([#86369](https://github.com/kubernetes/kubernetes/pull/86369), [@Huang-Wei](https://github.com/Huang-Wei))
-* Kubernetes KMS provider for data encryption now supports disabling the in-memory data encryption key (DEK) cache by setting cachesize to a negative value. ([#86294](https://github.com/kubernetes/kubernetes/pull/86294), [@enj](https://github.com/enj))
-* option `preConfiguredBackendPoolLoadBalancerTypes` is added to azure cloud provider for the pre-configured load balancers, possible values: `""`, `"internal"`, "external"`, `"all"` ([#86338](https://github.com/kubernetes/kubernetes/pull/86338), [@gossion](https://github.com/gossion))
-* Promote StartupProbe to beta for 1.18 release ([#83437](https://github.com/kubernetes/kubernetes/pull/83437), [@matthyx](https://github.com/matthyx))
-* Fixes issue where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. ([#86412](https://github.com/kubernetes/kubernetes/pull/86412), [@weinong](https://github.com/weinong))
-    * The audience claim before this fix has "spn:" prefix. After this fix, "spn:" prefix is omitted.
-* change CounterVec to Counter about  PLEGDiscardEvent ([#86167](https://github.com/kubernetes/kubernetes/pull/86167), [@yiyang5055](https://github.com/yiyang5055))
-* hollow-node do not use remote CRI anymore ([#86425](https://github.com/kubernetes/kubernetes/pull/86425), [@jkaniuk](https://github.com/jkaniuk))
-* hollow-node use fake CRI ([#85879](https://github.com/kubernetes/kubernetes/pull/85879), [@gongguan](https://github.com/gongguan))
-
-
-
-# v1.18.0-alpha.1
-
-[Documentation](https://docs.k8s.io)
-
-## Downloads for v1.18.0-alpha.1
-
-
-filename | sha512 hash
--------- | -----------
-[kubernetes.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes.tar.gz) | `0c4904efc7f4f1436119c91dc1b6c93b3bd9c7490362a394bff10099c18e1e7600c4f6e2fcbaeb2d342a36c4b20692715cf7aa8ada6dfac369f44cc9292529d7`
-[kubernetes-src.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-src.tar.gz) | `0a50fc6816c730ca5ae4c4f26d5ad7b049607d29f6a782a4e5b4b05ac50e016486e269dafcc6a163bd15e1a192780a9a987f1bb959696993641c603ed1e841c8`
-
-### Client Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-client-darwin-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-darwin-386.tar.gz) | `c6d75f7f3f20bef17fc7564a619b54e6f4a673d041b7c9ec93663763a1cc8dd16aecd7a2af70e8d54825a0eecb9762cf2edfdade840604c9a32ecd9cc2d5ac3c`
-[kubernetes-client-darwin-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-darwin-amd64.tar.gz) | `ca1f19db289933beace6daee6fc30af19b0e260634ef6e89f773464a05e24551c791be58b67da7a7e2a863e28b7cbcc7b24b6b9bf467113c26da76ac8f54fdb6`
-[kubernetes-client-linux-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-386.tar.gz) | `af2e673653eb39c3f24a54efc68e1055f9258bdf6cf8fea42faf42c05abefc2da853f42faac3b166c37e2a7533020b8993b98c0d6d80a5b66f39e91d8ae0a3fb`
-[kubernetes-client-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-amd64.tar.gz) | `9009032c3f94ac8a78c1322a28e16644ce3b20989eb762685a1819148aed6e883ca8e1200e5ec37ec0853f115c67e09b5d697d6cf5d4c45f653788a2d3a2f84f`
-[kubernetes-client-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-arm.tar.gz) | `afba9595b37a3f2eead6e3418573f7ce093b55467dce4da0b8de860028576b96b837a2fd942f9c276e965da694e31fbd523eeb39aefb902d7e7a2f169344d271`
-[kubernetes-client-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-arm64.tar.gz) | `04fc3b2fe3f271807f0bc6c61be52456f26a1af904964400be819b7914519edc72cbab9afab2bb2e2ba1a108963079367cedfb253c9364c0175d1fcc64d52f5c`
-[kubernetes-client-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-ppc64le.tar.gz) | `04c7edab874b33175ff7bebfff5b3a032bc6eb088fcd7387ffcd5b3fa71395ca8c5f9427b7ddb496e92087dfdb09eaf14a46e9513071d3bd73df76c182922d38`
-[kubernetes-client-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-linux-s390x.tar.gz) | `499287dbbc33399a37b9f3b35e0124ff20b17b6619f25a207ee9c606ef261af61fa0c328dde18c7ce2d3dfb2eea2376623bc3425d16bc8515932a68b44f8bede`
-[kubernetes-client-windows-386.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-windows-386.tar.gz) | `cf84aeddf00f126fb13c0436b116dd0464a625659e44c84bf863517db0406afb4eefd86807e7543c4f96006d275772fbf66214ae7d582db5865c84ac3545b3e6`
-[kubernetes-client-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-client-windows-amd64.tar.gz) | `69f20558ccd5cd6dbaccf29307210db4e687af21f6d71f68c69d3a39766862686ac1333ab8a5012010ca5c5e3c11676b45e498e3d4c38773da7d24bcefc46d95`
-
-### Server Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-server-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-amd64.tar.gz) | `3f29df2ce904a0f10db4c1d7a425a36f420867b595da3fa158ae430bfead90def2f2139f51425b349faa8a9303dcf20ea01657cb6ea28eb6ad64f5bb32ce2ed1`
-[kubernetes-server-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-arm.tar.gz) | `4a21073b2273d721fbf062c254840be5c8471a010bcc0c731b101729e36e61f637cb7fcb521a22e8d24808510242f4fff8a6ca40f10e9acd849c2a47bf135f27`
-[kubernetes-server-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-arm64.tar.gz) | `7f1cb6d721bedc90e28b16f99bea7e59f5ad6267c31ef39c14d34db6ad6aad87ee51d2acdd01b6903307c1c00b58ff6b785a03d5a491cc3f8a4df9a1d76d406c`
-[kubernetes-server-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-ppc64le.tar.gz) | `8f2b552030b5274b1c2c7c166eacd5a14b0c6ca0f23042f4c52efe87e22a167ba4460dcd66615a5ecd26d9e88336be1fb555548392e70efe59070dd2c314da98`
-[kubernetes-server-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-server-linux-s390x.tar.gz) | `8d9f2c96f66edafb7c8b3aa90960d29b41471743842aede6b47b3b2e61f4306fb6fc60b9ebc18820c547ee200bfedfe254c1cde962d447c791097dd30e79abdb`
-
-### Node Binaries
-
-filename | sha512 hash
--------- | -----------
-[kubernetes-node-linux-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-amd64.tar.gz) | `84194cb081d1502f8ca68143569f9707d96f1a28fcf0c574ebd203321463a8b605f67bb2a365eaffb14fbeb8d55c8d3fa17431780b242fb9cba3a14426a0cd4a`
-[kubernetes-node-linux-arm.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-arm.tar.gz) | `0091e108ab94fd8683b89c597c4fdc2fbf4920b007cfcd5297072c44bc3a230dfe5ceed16473e15c3e6cf5edab866d7004b53edab95be0400cc60e009eee0d9d`
-[kubernetes-node-linux-arm64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-arm64.tar.gz) | `b7e85682cc2848a35d52fd6f01c247f039ee1b5dd03345713821ea10a7fa9939b944f91087baae95eaa0665d11857c1b81c454f720add077287b091f9f19e5d3`
-[kubernetes-node-linux-ppc64le.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-ppc64le.tar.gz) | `cd1f0849e9c62b5d2c93ff0cebf58843e178d8a88317f45f76de0db5ae020b8027e9503a5fccc96445184e0d77ecdf6f57787176ac31dbcbd01323cd0a190cbb`
-[kubernetes-node-linux-s390x.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-linux-s390x.tar.gz) | `e1e697a34424c75d75415b613b81c8af5f64384226c5152d869f12fd7db1a3e25724975b73fa3d89e56e4bf78d5fd07e68a709ba8566f53691ba6a88addc79ea`
-[kubernetes-node-windows-amd64.tar.gz](https://dl.k8s.io/v1.18.0-alpha.1/kubernetes-node-windows-amd64.tar.gz) | `c725a19a4013c74e22383ad3fb4cb799b3e161c4318fdad066daf806730a89bc3be3ff0f75678d02b3cbe52b2ef0c411c0639968e200b9df470be40bb2c015cc`
-
-## Changelog since v1.17.0
-
-### Action Required
-
-* action required ([#85363](https://github.com/kubernetes/kubernetes/pull/85363), [@immutableT](https://github.com/immutableT))
-    * 1. Currently, if users were to explicitly specify CacheSize of 0 for KMS provider, they would end-up with a provider that caches up to 1000 keys. This PR changes this behavior.
-    * Post this PR, when users supply 0 for CacheSize this will result in a validation error.
-    * 2. CacheSize type was changed from int32 to *int32. This allows defaulting logic to differentiate between cases where users explicitly supplied 0 vs. not supplied any value.
-    * 3. KMS Provider's endpoint (path to Unix socket) is now validated when the EncryptionConfiguration files is loaded. This used to be handled by the GRPCService.
-
-### Other notable changes
-
-* fix: azure data disk should use same key as os disk by default ([#86351](https://github.com/kubernetes/kubernetes/pull/86351), [@andyzhangx](https://github.com/andyzhangx))
-* New flag `--show-hidden-metrics-for-version` in kube-proxy can be used to show all hidden metrics that deprecated in the previous minor release. ([#85279](https://github.com/kubernetes/kubernetes/pull/85279), [@RainbowMango](https://github.com/RainbowMango))
-* Remove cluster-monitoring addon ([#85512](https://github.com/kubernetes/kubernetes/pull/85512), [@serathius](https://github.com/serathius))
-* Changed core_pattern on COS nodes to be an absolute path. ([#86329](https://github.com/kubernetes/kubernetes/pull/86329), [@mml](https://github.com/mml))
-* Track mount operations as uncertain if operation fails with non-final error ([#82492](https://github.com/kubernetes/kubernetes/pull/82492), [@gnufied](https://github.com/gnufied))
-* add kube-proxy flags --ipvs-tcp-timeout, --ipvs-tcpfin-timeout, --ipvs-udp-timeout to configure IPVS connection timeouts. ([#85517](https://github.com/kubernetes/kubernetes/pull/85517), [@andrewsykim](https://github.com/andrewsykim))
-* The sample-apiserver aggregated conformance test has updated to use the Kubernetes v1.17.0 sample apiserver ([#84735](https://github.com/kubernetes/kubernetes/pull/84735), [@liggitt](https://github.com/liggitt))
-* The underlying format of the `CPUManager` state file has changed. Upgrades should be seamless, but any third-party tools that rely on reading the previous format need to be updated. ([#84462](https://github.com/kubernetes/kubernetes/pull/84462), [@klueska](https://github.com/klueska))
-* kubernetes will try to acquire the iptables lock every 100 msec during 5 seconds instead of every second. This specially useful for environments using kube-proxy in iptables mode with a high churn rate of services. ([#85771](https://github.com/kubernetes/kubernetes/pull/85771), [@aojea](https://github.com/aojea))
-* Fixed a panic in the kubelet cleaning up pod volumes ([#86277](https://github.com/kubernetes/kubernetes/pull/86277), [@tedyu](https://github.com/tedyu))
-* azure cloud provider cache TTL is configurable, list of the azure cloud provider is as following: ([#86266](https://github.com/kubernetes/kubernetes/pull/86266), [@zqingqing1](https://github.com/zqingqing1))
-    * - "availabilitySetNodesCacheTTLInSeconds"
-    * - "vmssCacheTTLInSeconds"
-    * - "vmssVirtualMachinesCacheTTLInSeconds"
-    * - "vmCacheTTLInSeconds"
-    * - "loadBalancerCacheTTLInSeconds"
-    * - "nsgCacheTTLInSeconds"
-    * - "routeTableCacheTTLInSeconds"
-* Fixes kube-proxy when EndpointSlice feature gate is enabled on Windows. ([#86016](https://github.com/kubernetes/kubernetes/pull/86016), [@robscott](https://github.com/robscott))
-* Fixes wrong validation result of NetworkPolicy PolicyTypes ([#85747](https://github.com/kubernetes/kubernetes/pull/85747), [@tnqn](https://github.com/tnqn))
-* Fixes an issue with kubelet-reported pod status on deleted/recreated pods. ([#86320](https://github.com/kubernetes/kubernetes/pull/86320), [@liggitt](https://github.com/liggitt))
-* kube-apiserver no longer serves the following deprecated APIs: ([#85903](https://github.com/kubernetes/kubernetes/pull/85903), [@liggitt](https://github.com/liggitt))
-        * All resources under `apps/v1beta1` and `apps/v1beta2` - use `apps/v1` instead
-        * `daemonsets`, `deployments`, `replicasets` resources under `extensions/v1beta1` - use `apps/v1` instead
-        * `networkpolicies` resources under `extensions/v1beta1` - use `networking.k8s.io/v1` instead
-        * `podsecuritypolicies` resources under `extensions/v1beta1` - use `policy/v1beta1` instead
-* kubeadm: fix potential panic when executing "kubeadm reset" with a corrupted kubelet.conf file ([#86216](https://github.com/kubernetes/kubernetes/pull/86216), [@neolit123](https://github.com/neolit123))
-* Fix a bug in port-forward: named port not working with service ([#85511](https://github.com/kubernetes/kubernetes/pull/85511), [@oke-py](https://github.com/oke-py))
-* kube-proxy no longer modifies shared EndpointSlices. ([#86092](https://github.com/kubernetes/kubernetes/pull/86092), [@robscott](https://github.com/robscott))
-* allow for configuration of CoreDNS replica count ([#85837](https://github.com/kubernetes/kubernetes/pull/85837), [@pickledrick](https://github.com/pickledrick))
-* Fixed a regression where the kubelet would fail to update the ready status of pods. ([#84951](https://github.com/kubernetes/kubernetes/pull/84951), [@tedyu](https://github.com/tedyu))
-* Resolves performance regression in client-go discovery clients constructed using `NewDiscoveryClientForConfig` or `NewDiscoveryClientForConfigOrDie`. ([#86168](https://github.com/kubernetes/kubernetes/pull/86168), [@liggitt](https://github.com/liggitt))
-* Make error message and service event message more clear ([#86078](https://github.com/kubernetes/kubernetes/pull/86078), [@feiskyer](https://github.com/feiskyer))
-* e2e-test-framework: add e2e test namespace dump if all tests succeed but the cleanup fails. ([#85542](https://github.com/kubernetes/kubernetes/pull/85542), [@schrodit](https://github.com/schrodit))
-* SafeSysctlWhitelist: add net.ipv4.ping_group_range ([#85463](https://github.com/kubernetes/kubernetes/pull/85463), [@AkihiroSuda](https://github.com/AkihiroSuda))
-* kubelet: the metric process_start_time_seconds be marked as with the ALPHA stability level. ([#85446](https://github.com/kubernetes/kubernetes/pull/85446), [@RainbowMango](https://github.com/RainbowMango))
-* API request throttling (due to a high rate of requests) is now reported in the kubelet (and other component) logs by default.  The messages are of the form ([#80649](https://github.com/kubernetes/kubernetes/pull/80649), [@RobertKrawitz](https://github.com/RobertKrawitz))
-    * Throttling request took 1.50705208s, request: GET:<URL>
-    * The presence of large numbers of these messages, particularly with long delay times, may indicate to the administrator the need to tune the cluster accordingly.
-* Fix API Server potential memory leak issue in processing watch request. ([#85410](https://github.com/kubernetes/kubernetes/pull/85410), [@answer1991](https://github.com/answer1991))
-* Verify kubelet & kube-proxy can recover after being killed on Windows nodes ([#84886](https://github.com/kubernetes/kubernetes/pull/84886), [@YangLu1031](https://github.com/YangLu1031))
-* Fixed an issue that the scheduler only returns the first failure reason. ([#86022](https://github.com/kubernetes/kubernetes/pull/86022), [@Huang-Wei](https://github.com/Huang-Wei))
-* kubectl/drain: add skip-wait-for-delete-timeout option. ([#85577](https://github.com/kubernetes/kubernetes/pull/85577), [@michaelgugino](https://github.com/michaelgugino))
-    * If pod DeletionTimestamp older than N seconds, skip waiting for the pod.  Seconds must be greater than 0 to skip.
-* Following metrics have been turned off: ([#83841](https://github.com/kubernetes/kubernetes/pull/83841), [@RainbowMango](https://github.com/RainbowMango))
-    * - kubelet_pod_worker_latency_microseconds
-    * - kubelet_pod_start_latency_microseconds
-    * - kubelet_cgroup_manager_latency_microseconds
-    * - kubelet_pod_worker_start_latency_microseconds
-    * - kubelet_pleg_relist_latency_microseconds
-    * - kubelet_pleg_relist_interval_microseconds
-    * - kubelet_eviction_stats_age_microseconds
-    * - kubelet_runtime_operations
-    * - kubelet_runtime_operations_latency_microseconds
-    * - kubelet_runtime_operations_errors
-    * - kubelet_device_plugin_registration_count
-    * - kubelet_device_plugin_alloc_latency_microseconds
-    * - kubelet_docker_operations
-    * - kubelet_docker_operations_latency_microseconds
-    * - kubelet_docker_operations_errors
-    * - kubelet_docker_operations_timeout
-    * - network_plugin_operations_latency_microseconds
-* - Renamed Kubelet metric certificate_manager_server_expiration_seconds to certificate_manager_server_ttl_seconds and changed to report the second until expiration at read time rather than absolute time of expiry. ([#85874](https://github.com/kubernetes/kubernetes/pull/85874), [@sambdavidson](https://github.com/sambdavidson))
-    * - Improved accuracy of Kubelet metric rest_client_exec_plugin_ttl_seconds.
-* Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83363](https://github.com/kubernetes/kubernetes/pull/83363), [@wawa0210](https://github.com/wawa0210))
-* Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ([#83362](https://github.com/kubernetes/kubernetes/pull/83362), [@wawa0210](https://github.com/wawa0210))
-* During initialization phase (preflight), kubeadm now verifies the presence of the conntrack executable ([#85857](https://github.com/kubernetes/kubernetes/pull/85857), [@hnanni](https://github.com/hnanni))
-* VMSS cache is added so that less chances of VMSS GET throttling ([#85885](https://github.com/kubernetes/kubernetes/pull/85885), [@nilo19](https://github.com/nilo19))
-* Update go-winio module version from 0.4.11 to 0.4.14 ([#85739](https://github.com/kubernetes/kubernetes/pull/85739), [@wawa0210](https://github.com/wawa0210))
-* Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made ([#85990](https://github.com/kubernetes/kubernetes/pull/85990), [@feiskyer](https://github.com/feiskyer))
-* kubectl drain node --dry-run will list pods that would be evicted or deleted ([#82660](https://github.com/kubernetes/kubernetes/pull/82660), [@sallyom](https://github.com/sallyom))
-* Windows nodes on GCE can use TPM-based authentication to the master. ([#85466](https://github.com/kubernetes/kubernetes/pull/85466), [@pjh](https://github.com/pjh))
-* kubectl/drain: add disable-eviction option. ([#85571](https://github.com/kubernetes/kubernetes/pull/85571), [@michaelgugino](https://github.com/michaelgugino))
-    * Force drain to use delete, even if eviction is supported. This will bypass checking PodDisruptionBudgets, and should be used with caution.
-* kubeadm now errors out whenever a not supported component config version is supplied for the kubelet and kube-proxy ([#85639](https://github.com/kubernetes/kubernetes/pull/85639), [@rosti](https://github.com/rosti))
-* Fixed issue with addon-resizer using deprecated extensions APIs ([#85793](https://github.com/kubernetes/kubernetes/pull/85793), [@bskiba](https://github.com/bskiba))
-* Includes FSType when describing CSI persistent volumes. ([#85293](https://github.com/kubernetes/kubernetes/pull/85293), [@huffmanca](https://github.com/huffmanca))
-* kubelet now exports a "server_expiration_renew_failure" and "client_expiration_renew_failure" metric counter if the certificate rotations cannot be performed. ([#84614](https://github.com/kubernetes/kubernetes/pull/84614), [@rphillips](https://github.com/rphillips))
-* kubeadm: don't write the kubelet environment file on "upgrade apply" ([#85412](https://github.com/kubernetes/kubernetes/pull/85412), [@boluisa](https://github.com/boluisa))
-* fix azure file AuthorizationFailure ([#85475](https://github.com/kubernetes/kubernetes/pull/85475), [@andyzhangx](https://github.com/andyzhangx))
-* Resolved regression in admission, authentication, and authorization webhook performance in v1.17.0-rc.1 ([#85810](https://github.com/kubernetes/kubernetes/pull/85810), [@liggitt](https://github.com/liggitt))
-* kubeadm: uses the apiserver AdvertiseAddress IP family to choose the etcd endpoint IP family for non external etcd clusters ([#85745](https://github.com/kubernetes/kubernetes/pull/85745), [@aojea](https://github.com/aojea))
-* kubeadm: Forward cluster name to the controller-manager arguments ([#85817](https://github.com/kubernetes/kubernetes/pull/85817), [@ereslibre](https://github.com/ereslibre))
-* Fixed "requested device X but found Y" attach error on AWS. ([#85675](https://github.com/kubernetes/kubernetes/pull/85675), [@jsafrane](https://github.com/jsafrane))
-* addons: elasticsearch discovery supports IPv6 ([#85543](https://github.com/kubernetes/kubernetes/pull/85543), [@SataQiu](https://github.com/SataQiu))
-* kubeadm: retry `kubeadm-config` ConfigMap creation or mutation if the apiserver is not responding. This will improve resiliency when joining new control plane nodes. ([#85763](https://github.com/kubernetes/kubernetes/pull/85763), [@ereslibre](https://github.com/ereslibre))
-* Update Cluster Autoscaler to 1.17.0; changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.17.0 ([#85610](https://github.com/kubernetes/kubernetes/pull/85610), [@losipiuk](https://github.com/losipiuk))
-* Filter published OpenAPI schema by making nullable, required fields non-required in order to avoid kubectl to wrongly reject null values. ([#85722](https://github.com/kubernetes/kubernetes/pull/85722), [@sttts](https://github.com/sttts))
-* kubectl set resources will no longer return an error if passed an empty change for a resource.  ([#85490](https://github.com/kubernetes/kubernetes/pull/85490), [@sallyom](https://github.com/sallyom))
-    * kubectl set subject will no longer return an error if passed an empty change for a resource.
-* kube-apiserver: fixed a conflict error encountered attempting to delete a pod with gracePeriodSeconds=0 and a resourceVersion precondition ([#85516](https://github.com/kubernetes/kubernetes/pull/85516), [@michaelgugino](https://github.com/michaelgugino))
-* kubeadm: add a upgrade health check that deploys a Job ([#81319](https://github.com/kubernetes/kubernetes/pull/81319), [@neolit123](https://github.com/neolit123))
-* kubeadm: make sure images are pre-pulled even if a tag did not change but their contents changed ([#85603](https://github.com/kubernetes/kubernetes/pull/85603), [@bart0sh](https://github.com/bart0sh))
-* kube-apiserver: Fixes a bug that hidden metrics can not be enabled by the command-line option `--show-hidden-metrics-for-version`. ([#85444](https://github.com/kubernetes/kubernetes/pull/85444), [@RainbowMango](https://github.com/RainbowMango))
-* kubeadm now supports automatic calculations of dual-stack node cidr masks to kube-controller-manager.  ([#85609](https://github.com/kubernetes/kubernetes/pull/85609), [@Arvinderpal](https://github.com/Arvinderpal))
-* Fix bug where EndpointSlice controller would attempt to modify shared objects. ([#85368](https://github.com/kubernetes/kubernetes/pull/85368), [@robscott](https://github.com/robscott))
-* Use context to check client closed instead of http.CloseNotifier in processing watch request which will reduce 1 goroutine for each request if proto is HTTP/2.x . ([#85408](https://github.com/kubernetes/kubernetes/pull/85408), [@answer1991](https://github.com/answer1991))
-* kubeadm: reset raises warnings if it cannot delete folders ([#85265](https://github.com/kubernetes/kubernetes/pull/85265), [@SataQiu](https://github.com/SataQiu))
-* Wait for kubelet & kube-proxy to be ready on Windows node within 10s ([#85228](https://github.com/kubernetes/kubernetes/pull/85228), [@YangLu1031](https://github.com/YangLu1031))
diff --git a/content/ko/docs/tasks/_index.md b/content/ko/docs/tasks/_index.md
index e6c80f32ed..89b653cb6f 100644
--- a/content/ko/docs/tasks/_index.md
+++ b/content/ko/docs/tasks/_index.md
@@ -12,4 +12,4 @@ content_type: concept
 시퀀스를 제공함으로써, 하나의 일을 수행하는 방법을 보여준다.
 
 만약 태스크 페이지를 작성하고 싶다면,
-[문서 풀 리퀘스트(Pull Request) 생성하기](/ko/docs/contribute/new-content/new-content/)를 참조한다.
+[문서 풀 리퀘스트(Pull Request) 생성하기](/ko/docs/contribute/new-content/open-a-pr/)를 참조한다.
diff --git a/content/ko/docs/tasks/access-application-cluster/_index.md b/content/ko/docs/tasks/access-application-cluster/_index.md
index 603b186517..3576ebd0a6 100755
--- a/content/ko/docs/tasks/access-application-cluster/_index.md
+++ b/content/ko/docs/tasks/access-application-cluster/_index.md
@@ -1,5 +1,5 @@
 ---
-title: "클러스터 내 어플리케이션 액세스"
+title: "클러스터 내 어플리케이션 접근"
 description: 클러스터의 애플리케이션에 접근하기 위해 로드 밸런싱, 포트 포워딩, 방화벽 설정 또는 DNS 구성을 설정한다.
 weight: 60
 ---
diff --git a/content/ko/docs/tasks/access-application-cluster/access-cluster.md b/content/ko/docs/tasks/access-application-cluster/access-cluster.md
index c28c51ea16..c433384f05 100644
--- a/content/ko/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/ko/docs/tasks/access-application-cluster/access-cluster.md
@@ -1,5 +1,5 @@
 ---
-title: 클러스터 액세스
+title: 클러스터 접근
 weight: 20
 content_type: concept
 ---
@@ -8,17 +8,14 @@ content_type: concept
 
 여기에서는 클러스터와 통신을 하는 다양한 방식에 대해서 다룰 것이다.
 
-
-
-
 <!-- body -->
 
-## 처음이라면 kubectl을 사용하여 액세스
+## 처음이라면 kubectl을 사용하여 접근
 
-최초로 쿠버네티스 API에 액세스할 때 우리는
+최초로 쿠버네티스 API에 접근할 때 우리는
 쿠버네티스 CLI인 `kubectl`을 사용하는 것을 추천한다.
 
-클러스터에 액세스하려면 클러스터의 위치정보를 알아야 하고 클러스터에 접속하기 위한
+클러스터에 접근하려면 클러스터의 위치정보를 알아야 하고 클러스터에 접속하기 위한
 인증정보를 가져야 한다. 일반적으로 이는 당신이
 [Getting started guide](/ko/docs/setup/)를 다 진행했을 때 자동으로 구성되거나,
 다른 사람이 클러스터를 구성하고 당신에게 인증정보와 위치정보를 제공할 수도 있다.
@@ -29,14 +26,15 @@ kubectl이 인지하는 위치정보와 인증정보는 다음 커맨드로 확
 kubectl config view
 ```
 
-많은 [예제들](/ko/docs/reference/kubectl/cheatsheet/)에서 kubectl을 사용하는 것을 소개하고 있으며
-완전한 문서는 [kubectl manual](/docs/user-guide/kubectl-overview)에서 찾아볼 수 있다.
+많은 [예제들](/ko/docs/reference/kubectl/cheatsheet/)에서
+kubectl을 사용하는 것을 소개하고 있으며 완전한 문서는
+[kubectl 매뉴얼](/ko/docs/reference/kubectl/overview/)에서 찾아볼 수 있다.
 
-## REST API에 직접 액세스
+## REST API에 직접 접근
 
 kubectl은 apiserver의 위치 파악과 인증을 처리한다.
 만약 당신이 curl, wget 또는 웹브라우저와 같은 http 클라이언트로
-REST API에 직접 액세스하려고 한다면 위치 파악과 인증을 하는 몇 가지 방법이 존재한다.
+REST API에 직접 접근하려고 한다면 위치 파악과 인증을 하는 몇 가지 방법이 존재한다.
 
   - kubectl을 proxy 모드로 실행.
     - 권장하는 접근 방식.
@@ -155,7 +153,7 @@ localhost에서 제공되거나 방화벽으로 보호되는 몇몇 클러스터
 는 클러스터 관리자가 이를 어떻게 구성할 수 있는지를 설명한다.
 이 방식들은 미래의 고가용성 지원과 충돌될 수 있다.
 
-## API에 프로그래밍 방식으로 액세스
+## API에 프로그래밍 방식으로 접근
 
 쿠버네티스는 공식적으로 [Go](#go-클라이언트)와 [Python](#python-클라이언트)
 클라이언트 라이브러리를 지원한다.
@@ -165,16 +163,16 @@ localhost에서 제공되거나 방화벽으로 보호되는 몇몇 클러스터
 * 라이브러리를 취득하려면 `go get k8s.io/client-go@kubernetes-<kubernetes-version-number>` 커맨드를 실행한다. [INSTALL.md](https://github.com/kubernetes/client-go/blob/master/INSTALL.md#for-the-casual-user)에서 상세한 설치 방법을 알 수 있다. [https://github.com/kubernetes/client-go](https://github.com/kubernetes/client-go#compatibility-matrix)에서 어떤 버젼이 지원되는지 확인할 수 있다.
 * client-go 클라이언트 위에 애플리케이션을 작성하자. client-go는 자체적으로 API 오브젝트를 정의하므로 필요하다면 main 레포지터리보다는 client-go에서 API 정의들을 import하기를 바란다. 정확하게 `import "k8s.io/client-go/kubernetes"`로 import하는 것을 예로 들 수 있다.
 
-Go 클라이언트는 apiserver의 위치지정과 인증에 kubectl CLI와 동일하게 [kubeconfig file](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/)을 사용할 수 있다.
+Go 클라이언트는 apiserver의 위치지정과 인증에 kubectl CLI와 동일하게 [kubeconfig file](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을 사용할 수 있다.
 [예제](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go)를 참고한다.
 
-만약 애플리케이션이 클러스터 내에 파드로 배포되었다면 [다음 장](#파드에서-api-액세스)을 참조하기를 바란다.
+만약 애플리케이션이 클러스터 내에 파드로 배포되었다면 [다음 장](#파드에서-api-접근)을 참조하기를 바란다.
 
 ### Python 클라이언트
 
 Python 클라이언트를 사용하려면 `pip install kubernetes` 커맨드를 실행한다. 설치 옵션에 대한 상세 사항은 [Python Client Library page](https://github.com/kubernetes-client/python)를 참조한다.
 
-Python 클라이언트는 apiserver의 위치지정과 인증에 kubectl CLI와 동일하게 [kubeconfig file](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/)을 사용할 수 있다.
+Python 클라이언트는 apiserver의 위치지정과 인증에 kubectl CLI와 동일하게 [kubeconfig file](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을 사용할 수 있다.
 [예제](https://github.com/kubernetes-client/python/tree/master/examples)를 참조한다.
 
 ### 다른 언어
@@ -182,7 +180,7 @@ Python 클라이언트는 apiserver의 위치지정과 인증에 kubectl CLI와
 다른 언어에서 API를 접속하기 위한 [클라이언트 라이브러리들](/ko/docs/reference/using-api/client-libraries/)도 존재한다.
 이들이 어떻게 인증하는지는 다른 라이브러리들의 문서를 참조한다.
 
-## 파드에서 API 액세스
+## 파드에서 API 접근
 
 파드에서 API를 접속한다면 apiserver의
 위치지정과 인증은 다소 다르다.
@@ -215,11 +213,13 @@ apiserver의 인증서 제공을 검증하는데 사용되어야 한다.
 
 각각의 사례에서 apiserver와의 보안 통신에 파드의 인증정보가 사용된다.
 
-## 클러스터에서 실행되는 서비스로 액세스
+## 클러스터에서 실행되는 서비스로 접근
 
 이전 장은 쿠버네티스 API server 접속에 대한 내용을 다루었다. 이번 장은
 쿠버네티스 클러스터 상에서 실행되는 다른 서비스로의 연결을 다룰 것이다. 쿠버네티스에서
-[노드들](/ko/docs/concepts/architecture/nodes/), [파드들](/ko/docs/concepts/workloads/pods/pod/), [서비스들](/docs/user-guide/services)은
+[노드들](/ko/docs/concepts/architecture/nodes/),
+[파드들](/ko/docs/concepts/workloads/pods/pod/),
+[서비스들](/ko/docs/concepts/services-networking/service/)은
 모두 자신의 IP들을 가진다. 당신의 데스크탑 PC와 같은 클러스터 외부 장비에서는
 클러스터 상의 노드 IP들, 파드 IP들, 서비스 IP들로 라우팅되지 않아서 접근을
 할 수 없을 것이다.
@@ -228,9 +228,9 @@ apiserver의 인증서 제공을 검증하는데 사용되어야 한다.
 
 클러스터 외부에서 노드들, 파드들, 서비스들에 접속하는 데는 몇 가지 선택지들이 있다.
 
-  - 공인 IP를 통해 서비스에 액세스.
+  - 공인 IP를 통해 서비스에 접근.
     - 클러스터 외부에서 접근할 수 있도록 `NodePort` 또는 `LoadBalancer` 타입의
-      서비스를 사용한다. [서비스](/docs/user-guide/services)와
+      서비스를 사용한다. [서비스](/ko/docs/concepts/services-networking/service/)와
       [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) 문서를 참조한다.
     - 당신의 클러스터 환경에 따라 회사 네트워크에만 서비스를 노출하거나
       인터넷으로 노출할 수 있다. 이 경우 노출되는 서비스의 보안 여부를 고려해야 한다.
@@ -238,19 +238,19 @@ apiserver의 인증서 제공을 검증하는데 사용되어야 한다.
     - 파드들은 서비스 뒤에 위치시킨다. 레플리카들의 집합에서 특정 파드 하나에 debugging 같은 목적으로 접근하려면
       해당 파드에 고유의 레이블을 붙이고 셀렉터에 해당 레이블을 선택한 신규 서비스를 생성한다.
     - 대부분의 경우에는 애플리케이션 개발자가 노드 IP를 통해 직접 노드에
-      액세스할 필요는 없다.
-  - Proxy Verb를 사용하여 서비스, 노드, 파드에 액세스.
-    - 원격 서비스에 액세스하기에 앞서 apiserver의 인증과 인가를 받아야 한다.
+      접근할 필요는 없다.
+  - Proxy Verb를 사용하여 서비스, 노드, 파드에 접근.
+    - 원격 서비스에 접근하기에 앞서 apiserver의 인증과 인가를 받아야 한다.
       서비스가 인터넷에 노출하기에 보안이 충분하지 않거나 노드 IP 상의 port에
-      액세스를 취득하려고 하거나 debugging을 하려면 이를 사용한다.
+      접근을 하려고 하거나 debugging을 하려면 이를 사용한다.
     - 어떤 web 애플리케이션에서는 proxy가 문제를 일으킬 수 있다.
     - HTTP/HTTPS에서만 동작한다.
     - [여기](#수작업으로-apiserver-proxy-url들을-구축)에서 설명하고 있다.
-  - 클러스터 내 노드 또는 파드에서 액세스.
+  - 클러스터 내 노드 또는 파드에서 접근.
     - 파드를 Running시킨 다음 [kubectl exec](/docs/reference/generated/kubectl/kubectl-commands/#exec)를 사용하여 해당 파드의 셸로 접속한다.
       해당 셸에서 다른 노드들, 파드들, 서비스들에 연결한다.
     - 어떤 클러스터는 클러스터 내의 노드에 ssh 접속을 허용하기도 한다. 이런 클러스터에서는
-      클러스터 서비스에 액세스도 가능하다. 이는 비표준 방식으로 특정 클러스터에서는 동작하지만
+      클러스터 서비스에 접근도 가능하다. 이는 비표준 방식으로 특정 클러스터에서는 동작하지만
       다른 클러스터에서는 동작하지 않을 수 있다. 브라우저와 다른 도구들이 설치되지 않았거나 설치되었을 수 있다. 클러스터 DNS가 동작하지 않을 수도 있다.
 
 ### 빌트인 서비스들의 발견
@@ -273,10 +273,10 @@ grafana is running at https://104.197.5.247/api/v1/namespaces/kube-system/servic
 heapster is running at https://104.197.5.247/api/v1/namespaces/kube-system/services/monitoring-heapster/proxy
 ```
 
-이는 각 서비스에 액세스하기 위한 proxy-verb URL을 보여준다.
+이는 각 서비스에 접근하기 위한 proxy-verb URL을 보여준다.
 예를 들어 위 클러스터는 클러스터 수준의 logging(Elasticsearch 사용)이 활성화되었으므로 적절한 인증을 통과하여
-`https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`로 액세스할 수 있다. 예를 들어 kubectl proxy로
-`http://localhost:8080/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`를 통해 logging에 액세스할 수도 있다.
+`https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`로 접근할 수 있다. 예를 들어 kubectl proxy로
+`http://localhost:8080/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/`를 통해 logging에 접근할 수도 있다.
 (인증을 통과하는 방법이나 kubectl proxy를 사용하는 것은 [쿠버네티스 API를 사용해서 클러스터에 접근하기](/ko/docs/tasks/administer-cluster/access-cluster-api/)을 참조한다.)
 
 #### 수작업으로 apiserver proxy URL을 구축
@@ -298,8 +298,8 @@ URL의 네임 부분에 지원되는 양식은 다음과 같다.
 
 ##### 예제들
 
- * Elasticsearch 서비스 endpoint `_search?q=user:kimchy`에 액세스하려면 `http://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_search?q=user:kimchy`를 사용할 수 있다.
- * Elasticsearch 클러스터 상태 정보 `_cluster/health?pretty=true`에 액세스하려면 `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_cluster/health?pretty=true`를 사용할 수 있다.
+ * Elasticsearch 서비스 endpoint `_search?q=user:kimchy`에 접근하려면 `http://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_search?q=user:kimchy`를 사용할 수 있다.
+ * Elasticsearch 클러스터 상태 정보 `_cluster/health?pretty=true`에 접근하려면 `https://104.197.5.247/api/v1/namespaces/kube-system/services/elasticsearch-logging/proxy/_cluster/health?pretty=true`를 사용할 수 있다.
 
 ```json
 {
@@ -316,7 +316,7 @@ URL의 네임 부분에 지원되는 양식은 다음과 같다.
 }
 ```
 
-### 클러스터 상에서 실행되는 서비스에 웹브라우저를 사용하여 액세스
+### 클러스터 상에서 실행되는 서비스에 웹브라우저를 사용하여 접근
 
 브라우저의 주소창에 apiserver proxy url을 넣을 수도 있다. 하지만
 
@@ -333,7 +333,7 @@ redirect 기능은 deprecated되고 제거 되었다. 대신 (아래의) proxy
 
 쿠버네티스를 사용하면서 당신이 접할 수 있는 몇 가지 다른 proxy들이 존재한다.
 
-1.  [kubectl proxy](#rest-api에-직접-액세스):
+1.  [kubectl proxy](#rest-api에-직접-접근):
 
     - 사용자의 데스크탑이나 파드 내에서 실행한다
     - localhost 주소에서 쿠버네티스 apiserver로 proxy한다
@@ -375,3 +375,4 @@ redirect 기능은 deprecated되고 제거 되었다. 대신 (아래의) proxy
 
 일반적으로 쿠버네티스 사용자들은 처음 두 타입이 아닌 다른 방식은 고려할 필요가 없지만 클러스터 관리자는
 나머지 타입을 적절하게 구성해줘야 한다.
+
diff --git a/content/ko/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume.md b/content/ko/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume.md
index 5a585eddd4..40e0a05fcf 100644
--- a/content/ko/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume.md
+++ b/content/ko/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume.md
@@ -6,20 +6,15 @@ weight: 110
 
 <!-- overview -->
 
-이 페이지에서는 동일한 파드에서 실행 중인 두 개의 컨테이너 간에 통신할 때에, 어떻게 볼륨을 이용하는지
-살펴본다. 컨테이너 간에 [프로세스 네임스페이스 공유하기](/docs/tasks/configure-pod-container/share-process-namespace/)를 통해 통신할 수 있는 방법을 참고하자.
-
-
-
+이 페이지에서는 동일한 파드에서 실행 중인 두 개의 컨테이너 간에 통신할 때에,
+어떻게 볼륨을 이용하는지 살펴본다. 컨테이너 간에
+[프로세스 네임스페이스 공유하기](/docs/tasks/configure-pod-container/share-process-namespace/)를
+통해 통신할 수 있는 방법을 참고하자.
 
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
-
-
 <!-- steps -->
 
 ## 두 개의 컨테이너를 실행하는 파드 생성
@@ -103,14 +98,15 @@ nginx 컨테이너의 쉘(shell)을 실행한다.
 Debian 컨테이너에서 nginx 웹 서버가 호스팅하는 문서의 루트 디렉터리에 `index.html` 파일을 생성했었음을 상기하자.
 `curl`을 이용하여 nginx 웹 서버에 HTTP GET 요청을 보낸다.
 
-    root@two-containers:/# curl localhost
+```
+root@two-containers:/# curl localhost
+```
 
 출력을 보면, nginx 웹 서버에서 debian 컨테이너에서 쓰여진 웹 페이지를 제공하는 것을 알 수 있다.
 
-    debian 컨테이너에서 안녕하세요
-
-
-
+```
+debian 컨테이너에서 안녕하세요
+```
 
 <!-- discussion -->
 
@@ -127,20 +123,14 @@ Debian 컨테이너에서 nginx 웹 서버가 호스팅하는 문서의 루트 
 이 예제에서 볼륨은 파드의 생명 주기 동안 컨테이너를 위한 통신 방법으로 이용했다.
 파드가 삭제되고 재생성되면, 공유 볼륨에 저장된 데이터는 잃어버린다.
 
-
-
-
 ## {{% heading "whatsnext" %}}
 
 
-* [합성 컨테이너(composite container) 패턴](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns)에 관하여
-더 공부한다.
+* [합성 컨테이너(composite container) 패턴](https://kubernetes.io/blog/2015/06/the-distributed-system-toolkit-patterns)에 관하여 더 공부한다.
 
-* [모듈 구조를 위한 합성 컨테이너 구조](http://www.slideshare.net/Docker/slideshare-burns)에 관하여
-더 공부한다.
+* [모듈 구조를 위한 합성 컨테이너 구조](https://www.slideshare.net/Docker/slideshare-burns)에 관하여 더 공부한다.
 
-* [파드에서 저장소로 볼룸을 사용하도록 구성하기](/ko/docs/tasks/configure-pod-container/configure-volume-storage/)에 관하여
-확인한다.
+* [파드에서 저장소로 볼룸을 사용하도록 구성하기](/ko/docs/tasks/configure-pod-container/configure-volume-storage/)에 관하여 확인한다.
 
 * [파드에서 컨테이너 간에 프로세스 네임스페이스를 공유하는 파드 구성하는 방법](/docs/tasks/configure-pod-container/share-process-namespace/)을 참고한다.
 
diff --git a/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md
index 3aa05a92b0..fb67628dec 100644
--- a/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -10,15 +10,19 @@ card:
 
 <!-- overview -->
 
-대시보드는 웹 기반 쿠버네티스 유저 인터페이스이다. 대시보드를 통해 컨테이너화 된 애플리케이션을 쿠버네티스 클러스터에 배포할 수 있고, 컨테이너화 된 애플리케이션을 트러블슈팅 할 수 있으며, 클러스터 리소스들을 관리할 수 있다. 대시보드를 통해 클러스터에서 동작중인 애플리케이션의 정보를 볼 수 있고, 개별적인 쿠버네티스 리소스들을(예를 들면 디플로이먼트, 잡, 데몬셋 등) 생성하거나 수정할 수 있다. 예를 들면, 디플로이먼트를 스케일하거나, 롤링 업데이트를 초기화하거나, 파드를 재시작하거나 또는 배포 마법사를 이용해 새로운 애플리케이션을 배포할 수 있다.
+대시보드는 웹 기반 쿠버네티스 유저 인터페이스이다.
+대시보드를 통해 컨테이너화 된 애플리케이션을 쿠버네티스 클러스터에 배포할 수 있고,
+컨테이너화 된 애플리케이션을 트러블슈팅할 수 있으며, 클러스터 리소스들을 관리할 수 있다.
+대시보드를 통해 클러스터에서 동작 중인 애플리케이션의 정보를 볼 수 있고,
+개별적인 쿠버네티스 리소스들을(예를 들면 디플로이먼트, 잡, 데몬셋 등)
+생성하거나 수정할 수 있다.
+예를 들면, 디플로이먼트를 스케일하거나, 롤링 업데이트를 초기화하거나, 파드를 재시작하거나
+또는 배포 마법사를 이용해 새로운 애플리케이션을 배포할 수 있다.
 
 또한 대시보드는 클러스터 내 쿠버네티스 리소스들의 상태와 발생하는 모든 에러 정보를 제공한다.
 
 ![Kubernetes Dashboard UI](/images/docs/ui-dashboard.png)
 
-
-
-
 <!-- body -->
 
 ## 대시보드 UI 배포
@@ -32,7 +36,10 @@ kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/a
 ## 대시보드 UI 접근
 
 
-클러스터 데이터를 보호하기 위해, 대시보드는 기본적으로 최소한의 RBAC 설정을 제공한다. 현재, 대시보드는 Bearer 토큰으로 로그인 하는 방법을 제공한다. 본 시연을 위한 토큰을 생성하기 위해서는, [샘플 사용자 만들기](https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md) 가이드를 따른다.
+클러스터 데이터를 보호하기 위해, 대시보드는 기본적으로 최소한의 RBAC 설정을 제공한다.
+현재, 대시보드는 Bearer 토큰으로 로그인 하는 방법을 제공한다.
+본 시연을 위한 토큰을 생성하기 위해서는,
+[샘플 사용자 만들기](https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md) 가이드를 따른다.
 
 {{< warning >}}
 시연 중에 생성한 샘플 사용자는 어드민 권한이 부여되며, 이는 교육 목적으로만 사용한다.
@@ -55,13 +62,17 @@ Kubeconfig 인증 방법은 외부 아이덴티티 프로파이더 또는 x509 
 
 ## 웰컴 뷰
 
-초기 클러스터 대시보드에 접근하면, 환영 페이지를 볼 수 있다. 이 페이지는 첫 애플리케이션을 배포하는 버튼이 있을 뿐만 아니라, 이 문서의 링크를 포함하고 있다. 게다가, 대시보드가 있는 클러스터에서 기본적으로 `kube-system` [네임스페이스](/docs/tasks/administer-cluster/namespaces/)이 동작중인 시스템 애플리케이션을 볼 수 있다.
+초기 클러스터 대시보드에 접근하면, 환영 페이지를 볼 수 있다.
+이 페이지는 첫 애플리케이션을 배포하는 버튼이 있을 뿐만 아니라, 이 문서의 링크를 포함하고 있다.
+게다가, 대시보드가 있는 클러스터에서 기본적으로 `kube-system`
+[네임스페이스](/docs/tasks/administer-cluster/namespaces/)이 동작중인 시스템 애플리케이션을 볼 수 있다.
 
 ![Kubernetes Dashboard welcome page](/images/docs/ui-dashboard-zerostate.png)
 
 ## 컨테이너화 된 애플리케이션 배포
 
-대시보드를 이용하여 컨테이너화 된 애플리케이션을 디플로이먼트와 간단한 마법사를 통한 선택적인 서비스로 생성하고 배포할 수 있다. 애플리케이션 세부 정보를 수동으로 지정할 수 있고, 또는 애플리케이션 구성을 포함한 YAML, JSON 파일을 업로드 할 수 있다.
+대시보드를 이용하여 컨테이너화 된 애플리케이션을 디플로이먼트와 간단한 마법사를 통한 선택적인 서비스로 생성하고 배포할 수 있다.
+애플리케이션 세부 정보를 수동으로 지정할 수 있고, 또는 애플리케이션 구성을 포함한 YAML, JSON 파일을 업로드할 수 있다.
 
 시작하는 페이지의 상위 오른쪽 코너에 있는 **CREATE** 버튼을 클릭한다.
 
@@ -69,17 +80,29 @@ Kubeconfig 인증 방법은 외부 아이덴티티 프로파이더 또는 x509 
 
 배포 마법사는 다음 정보를 제공한다.
 
-- **앱 이름** (필수): 애플리케이션 이름. [레이블](/ko/docs/concepts/overview/working-with-objects/labels/) 이름은 배포할 모든 디플로이먼트와 서비스에 추가되어야 한다.
+- **앱 이름** (필수): 애플리케이션 이름.
+  [레이블](/ko/docs/concepts/overview/working-with-objects/labels/) 이름은
+  배포할 모든 디플로이먼트와 서비스에 추가되어야 한다.
 
-  애플리케이션 이름은 선택된 쿠버네티스 [네임스페이스](/docs/tasks/administer-cluster/namespaces/) 안에서 유일해야 한다. 소문자로 시작해야하며, 소문자 또는 숫자로 끝나고, 소문자, 숫자 및 대쉬(-)만을 포함해야한다. 24 문자만을 제한한다. 처음과 끝의 스페이스는 무시된다.
+  애플리케이션 이름은 선택된 쿠버네티스 [네임스페이스](/docs/tasks/administer-cluster/namespaces/) 안에서 유일해야 한다.
+  소문자로 시작해야 하며, 소문자 또는 숫자로 끝나고,
+  소문자, 숫자 및 대쉬(-)만을 포함해야 한다. 24 문자만을 제한한다.
+  처음과 끝의 스페이스는 무시된다.
 
-- **컨테이너 이미지** (필수): 레지스트리에 올라간 퍼블릭 도커 [컨테이너 이미지](/ko/docs/concepts/containers/images/) 또는 프라이빗 이미지(대체로 Google Container Registry 또는 도커 허브에 올라간)의 URL. 컨테이너 이미지 사양은 콜론으로 끝난다.
+- **컨테이너 이미지** (필수):
+  레지스트리에 올라간 퍼블릭 도커 [컨테이너 이미지](/ko/docs/concepts/containers/images/)
+  또는 프라이빗 이미지(대체로 Google Container Registry 또는 도커 허브에 올라간)의 URL.
+  컨테이너 이미지 사양은 콜론으로 끝난다.
 
-- **파드의 수** (필수): 배포하고 싶은 애플리케이션의 원하는 목표 파드 개수. 값은 양의 정수만 허용됩니다.
+- **파드의 수** (필수): 배포하고 싶은 애플리케이션의 원하는 목표 파드 개수.
+  값은 양의 정수만 허용됩니다.
 
-  클러스터에 의도한 파드의 수를 유지하기 위해서 [디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/)가 생성될 것이다.
+  클러스터에 의도한 파드의 수를 유지하기 위해서
+  [디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/)가 생성될 것이다.
 
-- **서비스** (선택): 일부 애플리케이션의 경우, (예를 들어, 프론트엔드) 아마도 클러스터 바깥의 퍼블릭 IP 주소를 가진 (외부 서비스) 외부에 [서비스](/ko/docs/concepts/services-networking/service/)를 노출 시키고 싶을 수 있다.
+- **서비스** (선택): 일부 애플리케이션의 경우, (예를 들어, 프론트엔드) 아마도 클러스터 바깥의
+  퍼블릭 IP 주소를 가진 (외부 서비스) 외부에 [서비스](/ko/docs/concepts/services-networking/service/)를
+  노출시키고 싶을 수 있다.
 
   {{< note >}}
   외부 서비스들을 위해, 한 개 또는 여러 개의 포트를 열어 둘 필요가 있다.
@@ -87,13 +110,22 @@ Kubeconfig 인증 방법은 외부 아이덴티티 프로파이더 또는 x509 
 
   클러스터 내부에서만 보고 싶은 어떤 서비스들이 있을 것이다. 이를 내부 서비스라고 한다.
 
-  서비스 타입과는 무관하게, 서비스 생성을 선택해서 컨테이너의 (들어오는 패킷의) 포트를 리슨한다면, 두 개의 포트를 정의해야 한다. 서비스는 컨테이너가 바라보는 타겟 포트와 (들어오는 패킷의) 맵핑하는 포트가 만들어져야 할 것이다. 서비스는 배포된 파드에 라우팅 될 것이다. 지원하는 프로토콜은 TCP와 UDP이다. 서비스가 이용하는 내부 DNS 이름은 애플리케이션 이름으로 지정한 값이 될 것이다.
+  서비스 타입과는 무관하게, 서비스 생성을 선택해서 컨테이너의 (들어오는 패킷의) 포트를 리슨한다면,
+  두 개의 포트를 정의해야 한다.
+  서비스는 컨테이너가 바라보는 타겟 포트와 (들어오는 패킷의) 맵핑하는 포트가 만들어져야 할 것이다.
+  서비스는 배포된 파드에 라우팅 될 것이다. 지원하는 프로토콜은 TCP와 UDP이다.
+  서비스가 이용하는 내부 DNS 이름은 애플리케이션 이름으로 지정한 값이 될 것이다.
 
 만약 필요하다면, 더 많은 세팅을 지정할 수 있는 **자세한 옵션 보기** 섹션에서 확장할 수 있다.
 
-- **설명**: 입력하는 텍스트값은 디플로이먼트에 [어노테이션](/ko/docs/concepts/overview/working-with-objects/annotations/) 으로 추가될 것이고, 애플리케이션의 세부사항에 표시될 것이다.
+- **설명**: 입력하는 텍스트값은 디플로이먼트에
+  [어노테이션](/ko/docs/concepts/overview/working-with-objects/annotations/)으로
+  추가될 것이고, 애플리케이션의 세부사항에 표시될 것이다.
 
-- **레이블**: 애플리케이션에 사용되는 기본적인 [레이블](/ko/docs/concepts/overview/working-with-objects/labels/)은 애플리케이션 이름과 버전이다. 릴리스, 환경, 티어, 파티션, 그리고 릴리스 트랙과 같은 레이블을 디플로이먼트, 서비스, 그리고 파드를 생성할 때 추가적으로 정의할 수 있다.
+- **레이블**: 애플리케이션에 사용되는 기본적인 [레이블](/ko/docs/concepts/overview/working-with-objects/labels/)은
+  애플리케이션 이름과 버전이다.
+  릴리스, 환경, 티어, 파티션, 그리고 릴리스 트랙과 같은 레이블을 디플로이먼트, 서비스, 그리고 파드를
+  생성할 때 추가적으로 정의할 수 있다.
 
   예를 들면:
 
@@ -104,66 +136,111 @@ Kubeconfig 인증 방법은 외부 아이덴티티 프로파이더 또는 x509 
   track=stable
   ```
 
-- **네임스페이스**: 쿠버네티스는 동일한 물리 클러스터를 바탕으로 여러 가상의 클러스터를 제공한다. 이러한 가상 클러스터들을 [네임스페이스](/docs/tasks/administer-cluster/namespaces/)라고 부른다. 논리적으로 명명된 그룹으로 리소스들을 분할 할 수 있다.
+- **네임스페이스**: 쿠버네티스는 동일한 물리 클러스터를 바탕으로 여러 가상의 클러스터를 제공한다.
+  이러한 가상 클러스터들을 [네임스페이스](/docs/tasks/administer-cluster/namespaces/)라고 부른다.
+  논리적으로 명명된 그룹으로 리소스들을 분할할 수 있다.
 
-  대시보드는 드롭다운 리스트로 가능한 모든 네임스페이스를 제공하고, 새로운 네임스페이스를 생성할 수 있도록 한다. 네임스페이스 이름은 최대 63개의 영숫자 단어와 대시(-)를 포함하고 있지만 대문자를 가지지 못한다.
-  네임스페이스 이름은 숫자로만 구성할 수 없다. 만약 이름을 10이라는 숫자로 세팅한다면, 파드는 기본 네임스페이스로 배정하게 될 것이다.
+  대시보드는 드롭다운 리스트로 가능한 모든 네임스페이스를 제공하고, 새로운 네임스페이스를 생성할 수 있도록 한다.
+  네임스페이스 이름은 최대 63개의 영숫자 단어와 대시(-)를 포함하고 있지만 대문자를 가지지 못한다.
+  네임스페이스 이름은 숫자로만 구성할 수 없다.
+  만약 이름을 10이라는 숫자로 세팅한다면, 파드는 기본 네임스페이스로 배정하게 될 것이다.
 
-  네임스페이스 생성이 성공하는 경우, 생성된 네임스페이스가 기본으로 선택된다. 만약 생성에 실패하면, 첫번째 네임스페이스가 선택된다.
+  네임스페이스 생성이 성공하는 경우, 생성된 네임스페이스가 기본으로 선택된다.
+  만약 생성에 실패하면, 첫번째 네임스페이스가 선택된다.
 
-- **이미지 풀(Pull) 시크릿**: 특정 도커 컨테이너 이미지가 프라이빗한 경우, [풀(Pull) 시크릿](/docs/concepts/configuration/secret/) 증명을 요구한다.
+- **이미지 풀(Pull) 시크릿**:
+  특정 도커 컨테이너 이미지가 프라이빗한 경우,
+  [풀(Pull) 시크릿](/docs/concepts/configuration/secret/) 자격 증명을 요구한다.
 
-  대시보드는 가능한 모든 시크릿을 드롭다운 리스트로 제공하며, 새로운 시크릿을 생성 할 수 있도록 한다. 시크릿 이름은 예를 들어 `new.image-pull.secret` 과 같이 DNS 도메인 이름 구문으로 따르기로 한다. 시크릿 내용은 base64 인코딩 방식이며, [`.dockercfg`](/ko/docs/concepts/containers/images/#파드에-imagepullsecrets-명시) 파일로 정의된다. 시크릿 이름은 최대 253 문자를 포함할 수 있다.
+  대시보드는 가능한 모든 시크릿을 드롭다운 리스트로 제공하며, 새로운 시크릿을 생성할 수 있도록 한다.
+  시크릿 이름은 예를 들어 `new.image-pull.secret` 과 같이 DNS 도메인 이름 구문으로 따르기로 한다.
+  시크릿 내용은 base64 인코딩 방식이며,
+  [`.dockercfg`](/ko/docs/concepts/containers/images/#파드에-imagepullsecrets-명시) 파일로 정의된다.
+  시크릿 이름은 최대 253 문자를 포함할 수 있다.
 
   이미지 풀(Pull) 시크릿의 생성이 성공한 경우, 기본으로 선택된다. 만약 생성에 실패하면, 시크릿은 허용되지 않는다.
 
-- **CPU 요구 사항 (cores)** 와 **메모리 요구 사항 (MiB)**: 컨테이너를 위한 최소 [리소스 상한](/docs/tasks/configure-pod-container/limit-range/)을 정의할 수 있다. 기본적으로, 파드는 CPU와 메모리 상한을 두지 않고 동작한다.
+- **CPU 요구 사항 (cores)** 와 **메모리 요구 사항 (MiB)**:
+  컨테이너를 위한 최소 [리소스 상한](/ko/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/)을
+  정의할 수 있다. 기본적으로, 파드는 CPU와 메모리 상한을 두지 않고 동작한다.
 
-- **커맨드 실행** 와 **커맨드 인수 실행**: 기본적으로, 컨테이너는 선택된 도커 이미지의 [기본 엔트리포인트 커맨드](/ko/docs/tasks/inject-data-application/define-command-argument-container/)를 실행한다. 커맨드 옵션과 인자를 기본 옵션에 우선 적용하여 사용할 수 있다.
+- **커맨드 실행** 와 **커맨드 인수 실행**:
+  기본적으로, 컨테이너는 선택된 도커 이미지의
+  [기본 엔트리포인트 커맨드](/ko/docs/tasks/inject-data-application/define-command-argument-container/)를 실행한다.
+  커맨드 옵션과 인자를 기본 옵션에 우선 적용하여 사용할 수 있다.
 
-- **특권을 가진(privileged) 상태로 실행**: 다음 세팅은 호스트에서 루트 권한을 가진 프로세스들이 [특권을 가진 컨테이너](/ko/docs/concepts/workloads/pods/pod/#파드-컨테이너의-특권-privileged-모드)의 프로세스들과 동등한 지 아닌지 정의한다. 특권을 가진(privileged) 컨테이너는 네트워크 스택과 디바이스에 접근하는 것을 조작하도록 활용할 수 있다.
+- **특권을 가진(privileged) 상태로 실행**: 다음 세팅은 호스트에서 루트 권한을 가진 프로세스들이
+  [특권을 가진 컨테이너](/ko/docs/concepts/workloads/pods/pod/#파드-컨테이너의-특권-privileged-모드)의
+  프로세스들과 동등한지 아닌지 정의한다.
+  특권을 가진(privileged) 컨테이너는 네트워크 스택과 디바이스에 접근하는 것을 조작하도록 활용할 수 있다.
 
-- **환경 변수**: 쿠버네티스 서비스를 [환경 변수](/docs/tasks/inject-data-application/environment-variable-expose-pod-information/)를 통해 노출한다. 환경 변수 또는 인자를 환경 변수들의 값으로 커맨드를 통해 구성할 수 있다. 애플리케이션들이 서비스를 찾는데 사용된다. 값들은 `$(VAR_NAME)` 구문을 사용하는 다른 변수들로 참조할 수 있다.
+- **환경 변수**: 쿠버네티스 서비스를
+  [환경 변수](/docs/tasks/inject-data-application/environment-variable-expose-pod-information/)를 통해 노출한다.
+  환경 변수 또는 인자를 환경 변수들의 값으로 커맨드를 통해 구성할 수 있다.
+  애플리케이션들이 서비스를 찾는데 사용된다.
+  값들은 `$(VAR_NAME)` 구문을 사용하는 다른 변수들로 참조할 수 있다.
 
 ### YAML 또는 JSON 파일 업로드
 
-쿠버네티스는 선언적인 설정을 제공한다. 이 방식으로 모든 설정은 쿠버네티스 [API](/ko/docs/concepts/overview/kubernetes-api/) 리소스 스키마를 이용하여 YAML 또는 JSON 설정 파일에 저장한다.
+쿠버네티스는 선언적인 설정을 제공한다.
+이 방식으로 모든 설정은 쿠버네티스 [API](/ko/docs/concepts/overview/kubernetes-api/) 리소스 스키마를
+이용하여 YAML 또는 JSON 설정 파일에 저장한다.
 
-배포 마법사를 통해 애플리케이션 세부사항들을 지정하는 대신, 애플리케이션을 YAML 또는 JSON 파일로 정의할 수 있고 대시보드를 이용해서 파일을 업로드할 수 있다.
+배포 마법사를 통해 애플리케이션 세부사항들을 지정하는 대신,
+애플리케이션을 YAML 또는 JSON 파일로 정의할 수 있고 대시보드를 이용해서 파일을 업로드할 수 있다.
 
 ## 대시보드 사용
 다음 섹션들은 어떻게 제공하고 어떻게 사용할 수 있는지에 대한 쿠버네티스 대시보드 UI의 모습을 보여준다.
 
 ### 탐색
 
-클러스터에 정의된 쿠버네티스 오프젝트가 있으면, 대시보드는 초기화된 뷰를 제공한다. 기본적으로 _기본_ 네임스페이스의 오프젝트만이 보이는데, 이는 탐색 창에 위치한 네임스페이스 셀렉터를 이용해 변경할 수 있다.
+클러스터에 정의된 쿠버네티스 오프젝트가 있으면, 대시보드는 초기화된 뷰를 제공한다.
+기본적으로 _기본_ 네임스페이스의 오프젝트만이 보이는데,
+이는 탐색 창에 위치한 네임스페이스 셀렉터를 이용해 변경할 수 있다.
 
 대시보드는 몇가지 메뉴 카테고리 중에서 대부분의 쿠버네티스 오브젝트 종류와 그룹을 보여준다.
 
 #### 어드민 개요
-클러스터와 네임스페이스 관리자에게 대시보드는 노드, 네임스페이스 그리고 퍼시스턴트 볼륨과 세부사항들이 보여진다. 노드는 모든 노드를 통틀어 CPU와 메모리 사용량을 보여준다. 세부사항은 각 노드들에 대한 사용량, 사양, 상태, 할당된 리소스, 이벤트 그리고 노드에서 돌아가는 파드를 보여준다.
+클러스터와 네임스페이스 관리자에게 대시보드는 노드, 네임스페이스 그리고 퍼시스턴트 볼륨과 세부사항들이 보여진다.
+노드는 모든 노드를 통틀어 CPU와 메모리 사용량을 보여준다.
+세부사항은 각 노드들에 대한 사용량, 사양, 상태,
+할당된 리소스, 이벤트 그리고 노드에서 돌아가는 파드를 보여준다.
 
 #### 워크로드
-선택된 네임스페이스에서 구동되는 모든 애플리케이션을 보여준다. 애플리케이션의 워크로드 종류(예를 들어, 디플로이먼트, 레플리카셋(ReplicaSet), 스테이트풀셋(StatefulSet) 등)를 보여주고 각각의 워크로드 종류는 따로 보여진다. 리스트는 예를 들어 레플리카셋에서 준비된 파드의 숫자 또는 파드의 현재 메모리 사용량과 같은 워크로드에 대한 실용적인 정보를 요약한다.
 
-워크로드에 대한 세부적인 것들은 상태와 사양 정보, 오프젝트들 간의 관계를 보여준다. 예를 들어, 레플리카셋으로 관리하는 파드들 또는 새로운 레플리카셋과 디플로이먼트를 위한 Horizontal Pod Autoscalers 이다.
+선택된 네임스페이스에서 구동되는 모든 애플리케이션을 보여준다.
+애플리케이션의 워크로드 종류(예를 들어, 디플로이먼트, 레플리카셋(ReplicaSet), 스테이트풀셋(StatefulSet) 등)를 보여주고
+각각의 워크로드 종류는 따로 보여진다.
+리스트는 예를 들어 레플리카셋에서 준비된 파드의 숫자 또는 파드의 현재 메모리 사용량과 같은
+워크로드에 대한 실용적인 정보를 요약한다.
+
+워크로드에 대한 세부적인 것들은 상태와 사양 정보,
+오프젝트들 간의 관계를 보여준다.
+예를 들어, 레플리카셋으로 관리하는 파드들 또는 새로운 레플리카셋과 디플로이먼트를 위한 Horizontal Pod Autoscalers 이다.
 
 #### 서비스
-외부로 노출되는 서비스들과 클러스터 내에 발견되는 서비스들을 허용하는 쿠버네티스 리소스들을 보여준다. 이러한 이유로 서비스와 인그레스는 클러스터간의 연결을 위한 내부 엔드포인트들과 외부 사용자를 위한 외부 엔드포인트들에 의해 타게팅된 파드들을 보여준다.
+
+외부로 노출되는 서비스들과 클러스터 내에 발견되는 서비스들을 허용하는
+쿠버네티스 리소스들을 보여준다.
+이러한 이유로 서비스와 인그레스는 클러스터간의 연결을 위한 내부 엔드포인트들과
+외부 사용자를 위한 외부 엔드포인트들에 의해 타게팅된 파드들을 보여준다.
 
 #### 스토리지
+
 스토리지는 애플리케이션이 데이터를 저장하기 위해 사용하는 퍼시턴트 볼륨 클레임 리소스들을 보여준다.
 
 #### 컨피그 맵과 시크릿
-클러스터에서 동작 중인 애플리케이션의 라이브 설정을 사용하는 모든 쿠버네티스 리소스들을 보여준다. 컨피그 오브젝트들을 수정하고 관리할 수 있도록 허용하며, 기본적으로는 숨겨져 있는 시크릿들을 보여준다.
+
+클러스터에서 동작 중인 애플리케이션의 라이브 설정을 사용하는 모든 쿠버네티스 리소스들을 보여준다.
+컨피그 오브젝트들을 수정하고 관리할 수 있도록 허용하며, 기본적으로는 숨겨져 있는 시크릿들을 보여준다.
 
 #### 로그 뷰어
-파드 목록과 세부사항 페이지들은 대시보드에 구현된 로그 뷰어에 링크된다. 뷰어는 단일 파드에 있는 컨테이너들의 로그들을 내려가면 볼 수 있도록 한다.
+
+파드 목록과 세부사항 페이지들은 대시보드에 구현된 로그 뷰어에 링크된다.
+뷰어는 단일 파드에 있는 컨테이너들의 로그들을 내려가면 볼 수 있도록 한다.
 
 ![Logs viewer](/images/docs/ui-dashboard-logs-view.png)
 
-
-
 ## {{% heading "whatsnext" %}}
 
 
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
index 1b92c1283a..21be3970d2 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-api.md
@@ -6,13 +6,10 @@ content_type: task
 <!-- overview -->
 이 페이지는 쿠버네티스 API를 사용하여 클러스터에 접근하는 방법을 보여준다.
 
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
 <!-- steps -->
 
 ## 쿠버네티스 API에 접근
@@ -170,7 +167,7 @@ client-go는 자체 API 오브젝트를 정의하므로, 필요한 경우, 기
 
 {{< /note >}}
 
-Go 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)을
+Go 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을
 사용할 수 있다. 이 [예제](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go)를 참고한다.
 
 ```golang
@@ -199,7 +196,7 @@ func main() {
 
 [Python 클라이언트](https://github.com/kubernetes-client/python)를 사용하려면, 다음 명령을 실행한다. `pip install kubernetes` 추가 설치 옵션은 [Python Client Library 페이지](https://github.com/kubernetes-client/python)를 참고한다.
 
-Python 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)을
+Python 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을
 사용할 수 있다. 이 [예제](https://github.com/kubernetes-client/python/blob/master/examples/out_of_cluster_config.py)를 참고한다.
 
 ```python
@@ -229,7 +226,7 @@ mvn install
 
 어떤 버전이 지원되는지를 확인하려면 [https://github.com/kubernetes-client/java/releases](https://github.com/kubernetes-client/java/releases)를 참고한다.
 
-Java 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)을
+Java 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을
 사용할 수 있다. 이 [예제](https://github.com/kubernetes-client/java/blob/master/examples/src/main/java/io/kubernetes/client/examples/KubeConfigFileClientExample.java)를 참고한다.
 
 ```java
@@ -283,7 +280,7 @@ public class KubeConfigFileClientExample {
 
 [dotnet 클라이언트](https://github.com/kubernetes-client/csharp)를 사용하려면, 다음 명령을 실행한다. `dotnet add package KubernetesClient --version 1.6.1` 추가 설치 옵션은 [dotnet Client Library 페이지](https://github.com/kubernetes-client/csharp)를 참고한다. 어떤 버전이 지원되는지를 확인하려면 [https://github.com/kubernetes-client/csharp/releases](https://github.com/kubernetes-client/csharp/releases)를 참고한다.
 
-dotnet 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)을
+dotnet 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을
 사용할 수 있다. 이 [예제](https://github.com/kubernetes-client/csharp/blob/master/examples/simple/PodList.cs)를 참고한다.
 
 ```csharp
@@ -318,7 +315,7 @@ namespace simple
 
 [JavaScript 클라이언트](https://github.com/kubernetes-client/javascript)를 설치하려면, 다음 명령을 실행한다. `npm install @kubernetes/client-node` 어떤 버전이 지원되는지를 확인하려면 [https://github.com/kubernetes-client/javascript/releases](https://github.com/kubernetes-client/javascript/releases)를 참고한다.
 
-JavaScript 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)을
+JavaScript 클라이언트는 kubectl CLI가 API 서버를 찾아 인증하기 위해 사용하는 것과 동일한 [kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)을
 사용할 수 있다. 이 [예제](https://github.com/kubernetes-client/javascript/blob/master/examples/example.js)를 참고한다.
 
 ```javascript
@@ -387,7 +384,7 @@ exampleWithKubeConfig = do
 호스트 이름을 사용하여 API 서버를 쿼리할 수 있다. 공식 클라이언트 라이브러리는
 이를 자동으로 수행한다.
 
-API 서버를 인증하는 권장 방법은 [서비스 어카운트](/docs/user-guide/service-accounts)
+API 서버를 인증하는 권장 방법은 [서비스 어카운트](/docs/tasks/configure-pod-container/configure-service-account/)
 자격 증명을 사용하는 것이다. 기본적으로, 파드는
 서비스 어카운트와 연결되어 있으며, 해당 서비스 어카운트에 대한 자격 증명(토큰)은
 해당 파드에 있는 각 컨테이너의 파일시스템 트리의
diff --git a/content/ko/docs/tasks/administer-cluster/access-cluster-services.md b/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
index 0b1cf9540f..e65ec1cc1f 100644
--- a/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
+++ b/content/ko/docs/tasks/administer-cluster/access-cluster-services.md
@@ -17,7 +17,8 @@ content_type: task
 
 ## 클러스터에서 실행되는 서비스에 접근
 
-쿠버네티스에서, [노드](/ko/docs/concepts/architecture/nodes/), [파드](/ko/docs/concepts/workloads/pods/pod/) 및 [서비스](/ko/docs/concepts/services-networking/service/)는 모두
+쿠버네티스에서, [노드](/ko/docs/concepts/architecture/nodes/),
+[파드](/ko/docs/concepts/workloads/pods/pod/) 및 [서비스](/ko/docs/concepts/services-networking/service/)는 모두
 고유한 IP를 가진다. 대부분의 경우, 클러스터의 노드 IP, 파드 IP 및 일부 서비스 IP는 라우팅할 수
 없으므로, 데스크톱 시스템과 같은 클러스터 외부 시스템에서
 도달할 수 없다.
diff --git a/content/ko/docs/tasks/administer-cluster/cluster-management.md b/content/ko/docs/tasks/administer-cluster/cluster-management.md
index 440ece1531..b57e07db65 100644
--- a/content/ko/docs/tasks/administer-cluster/cluster-management.md
+++ b/content/ko/docs/tasks/administer-cluster/cluster-management.md
@@ -10,9 +10,6 @@ content_type: concept
 노드 유지보수(예. 커널 업그레이드) 수행, 운영 중인 클러스터의
 쿠버네티스 API 버전 업그레이드.
 
-
-
-
 <!-- body -->
 
 ## 클러스터 생성과 설정
@@ -77,24 +74,33 @@ Oracle은 당신이 고가용성의 관리형 쿠버네티스 컨트롤 플레
 * [Digital Rebar](https://provision.readthedocs.io/en/tip/doc/content-packages/krib.html)
 * ...
 
-위 리스트에서 언급되지 않은 플랫폼의 클러스터 업그레이드는 [버전 차이 지원(skew)](/docs/setup/release/version-skew-policy/#supported-component-upgrade-order) 페이지 상의 구성요소 업그레이드 순서 부분을 확인해보는 것이 좋다.
+위 리스트에서 언급되지 않은 플랫폼의 클러스터 업그레이드는 [버전 차이 지원(skew)](/docs/setup/release/version-skew-policy/#supported-component-upgrade-order)
+페이지 상의 구성요소 업그레이드 순서 부분을 확인해보는 것이 좋다.
 
 ## 클러스터 크기 재조정
 
-[노드 자가 등록 모드](/ko/docs/concepts/architecture/nodes/#노드에-대한-자체-등록)로 운영 중인 클러스터가 리소스가 부족하다면 쉽게 머신들을 더 추가할 수 있다. GCE나 Google Kubernetes Engine을 사용하고 있다면 노드들을 관리하는 인스턴스 그룹의 크기를 재조정하여 이를 수행할 수 있다.
-[Google Cloud 콘솔 페이지](https://console.developers.google.com)를 사용한다면 `Compute > Compute Engine > Instance groups > your group > Edit group`에서 인스턴스들의 숫자를 고쳐서 이를 수행할 수 있으며 gcloud CLI를 사용한다면 다음 커맨드를 사용하여 이를 수행할 수 있다.
+[노드 자가 등록 모드](/ko/docs/concepts/architecture/nodes/#노드에-대한-자체-등록)로 운영 중인
+클러스터가 리소스가 부족하다면 쉽게 머신들을 더 추가할 수 있다.
+GCE나 Google Kubernetes Engine을 사용하고 있다면 노드들을 관리하는 인스턴스 그룹의 크기를 재조정하여 이를 수행할 수 있다.
+[Google Cloud 콘솔 페이지](https://console.developers.google.com)를 사용한다면
+`Compute > Compute Engine > Instance groups > your group > Edit group`에서
+인스턴스들의 숫자를 고쳐서 이를 수행할 수 있으며 gcloud CLI를 사용한다면 다음 커맨드를 사용하여 이를 수행할 수 있다.
 
 ```shell
 gcloud compute instance-groups managed resize kubernetes-node-pool --size=42 --zone=$ZONE
 ```
 
-인스턴스 그룹은 신규 머신들에 적절한 이미지를 넣고 시작하는 것을 관리하는 반면에 Kubelet은 자신의 노드를 API 서버에 등록하여 스케줄링할 수 있도록 해준다. 사용자가 인스턴스 그룹을 스케일 다운하면 시스템은 임의로 노드들을 선택하여 죽일 것이다.
+인스턴스 그룹은 신규 머신들에 적절한 이미지를 넣고 시작하는 것을 관리하는 반면에
+Kubelet은 자신의 노드를 API 서버에 등록하여 스케줄링할 수 있도록 해준다.
+사용자가 인스턴스 그룹을 스케일 다운하면 시스템은 임의로 노드들을 선택하여 죽일 것이다.
 
 다른 환경에서는 사용자가 직접 머신을 구성하고 어떤 머신에서 API 서버가 동작하는지를 Kubelet에 알려줘야 할 수도 있다.
 
 ### Azure Kubernetes Service (AKS) 클러스터 크기 재조정
 
-Azure Kubernetes Service는 사용자가 CLI나 Azure 포털에서 클러스터의 크기를 재조정할 수 있게 해주며 [Azure AKS 문서](https://docs.microsoft.com/en-us/azure/aks/scale-cluster)에서 이를 설명하고 있다.
+Azure Kubernetes Service는 사용자가 CLI나 Azure 포털에서 클러스터의 크기를 재조정할 수 있게 해주며
+[Azure AKS 문서](https://docs.microsoft.com/en-us/azure/aks/scale-cluster)에서
+이를 설명하고 있다.
 
 
 ### 클러스터 오토스케일링
@@ -102,7 +108,8 @@ Azure Kubernetes Service는 사용자가 CLI나 Azure 포털에서 클러스터
 GCE나 Google Kubernetes Engine을 사용한다면, 파드가 필요로하는 리소스를 기반으로 클러스터의 크기를 자동으로
 재조정하도록 클러스터를 구성할 수 있다.
 
-[컴퓨트 리소스](/ko/docs/concepts/configuration/manage-resources-containers/)에 기술된 것처럼 사용자들은 파드에 얼마만큼의 CPU와 메모리를 할당할 것인지 예약할 수 있다. 
+[컴퓨트 리소스](/ko/docs/concepts/configuration/manage-resources-containers/)에 기술된 것처럼
+사용자들은 파드에 얼마만큼의 CPU와 메모리를 할당할 것인지 예약할 수 있다.
 이 정보는 쿠버네티스 스케줄러가 해당 파드를 어디에서 실행시킬 것인지를 결정할 때 사용된다.
 여유 용량이 넉넉한 노드가 없다면 (또는 다른 파드 요구조건을 충족하지 못한다면) 해당 파드는
 다른 파드들이 종료될 때까지 기다리거나 신규 노드가 추가될 때까지 기다린다.
@@ -181,22 +188,11 @@ kubectl uncordon $NODENAME
 
 해당 노드의 VM 인스턴스를 삭제하고 신규로 생성했다면, 신규로 스케줄 가능한 노드 리소스가
 자동으로 생성될 것이다.(당신이 노드 디스커버리를 지원하는 클라우드 제공자를 사용한다면;
-이는 현재 Google Compute Engine만 지원되며 Google Compute Engine 상에서 kube-register를 사용하는 CoreOS를 포함하지는 않는다.) 상세 내용은 [노드](/ko/docs/concepts/architecture/nodes)를 참조하라.
+이는 현재 Google Compute Engine만 지원되며 Google Compute Engine 상에서 kube-register를 사용하는 CoreOS를 포함하지는 않는다.)
+상세 내용은 [노드](/ko/docs/concepts/architecture/nodes)를 참조하라.
 
 ## 고급 주제들
 
-### 다른 API 버전으로 업그레이드
-
-신규 API 버전이 릴리스 되었을 때, 해당 신규 API 버전을 지원하려면 클러스터를 업그레이드해야 할 수 있다.(예. 'v2'가 출시되었을 때 'v1'에서 'v2'로 변경)
-
-이는 드문 경우지만 세심한 관리가 요구된다. 신규 API 버전으로 업그레이드하는데는 일련의 과정이 존재한다.
-
-   1. 신규 API 버전을 ON한다.
-   1. 신규 버전을 사용하도록 클러스터의 스토리지를 업그레이드한다.
-   1. 모든 구성 파일들을 업그레이드한다. 구식 API 버전 엔드포인트의 사용자들을 식별한다.
-   1. `cluster/update-storage-objects.sh`을 실행하여 스토리지 내에 기존 객체들을 신규 버전으로 업데이트한다.
-   1. 구식 API 버전을 OFF한다.
-
 ### 클러스터에서 API 버전을 ON/OFF 하기
 
 특정 API 버전들은 API 서버가 올라오는 동안 `--runtime-config=api/<version>` 플래그를 전달하여 ON/OFF 시킬 수 있다. 예를 들어, v1 API를 OFF 시키려면, `--runtime-config=api/v1=false`를
diff --git a/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md
index 0e5a87bc82..ad76009844 100644
--- a/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/ko/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -5,16 +5,16 @@ min-kubernetes-server-version: v1.12
 ---
 
 <!-- overview -->
-이 페이지는 클러스터 안에서 사용자의 
-DNS {{< glossary_tooltip text="파드(Pod)" term_id="pod" >}} 를 설정하고 
+이 페이지는 클러스터 안에서 사용자의
+DNS {{< glossary_tooltip text="파드(Pod)" term_id="pod" >}} 를 설정하고
 DNS 변환(DNS resolution) 절차를 사용자 정의하는 방법을 설명한다.
 
 ## {{% heading "prerequisites" %}}
 
 {{< include "task-tutorial-prereqs.md" >}}
 
-클러스터는 CoreDNS 애드온을 구동하고 있어야 한다. 
-[CoreDNS로 이관하기](/ko/docs/tasks/administer-cluster/coredns/#coredns로-이관하기) 
+클러스터는 CoreDNS 애드온을 구동하고 있어야 한다.
+[CoreDNS로 이관하기](/ko/docs/tasks/administer-cluster/coredns/#coredns로-이관하기)
 는 `kubeadm` 을 이용하여 `kube-dns` 로부터 이관하는 방법을 설명한다.  
 
 {{% version-check %}}
@@ -23,11 +23,11 @@ DNS 변환(DNS resolution) 절차를 사용자 정의하는 방법을 설명한
 
 ## 소개
 
-DNS는 _애드온 관리자_ 인 [클러스터 애드온](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/README.md)을 
-사용하여 자동으로 시작되는 쿠버네티스 
+DNS는 _애드온 관리자_ 인 [클러스터 애드온](http://releases.k8s.io/{{< param "githubbranch" >}}/cluster/addons/README.md)을
+사용하여 자동으로 시작되는 쿠버네티스
 내장 서비스이다.
 
-쿠버네티스 v1.12 부터, CoreDNS는 kube-dns를 대체하여 권장되는 DNS 서버이다. 만약 사용자의 클러스터가 원래 kube-dns를 사용하였을 경우, 
+쿠버네티스 v1.12 부터, CoreDNS는 kube-dns를 대체하여 권장되는 DNS 서버이다. 만약 사용자의 클러스터가 원래 kube-dns를 사용하였을 경우,
 CoreDNS 대신 `kube-dns` 를 계속 사용할 수도 있다.
 
 {{< note >}}
@@ -35,19 +35,19 @@ CoreDNS와 kube-dns 서비스 모두 `metadata.name` 필드에 `kube-dns` 로 
 이를 통해, 기존의 `kube-dns` 서비스 이름을 사용하여 클러스터 내부의 주소를 확인하는 워크로드에 대한 상호 운용성이 증가된다. `kube-dns` 로 서비스 이름을 사용하면, 해당 DNS 공급자가 어떤 공통 이름으로 실행되고 있는지에 대한 구현 세부 정보를 추상화한다.
 {{< /note >}}
 
-CoreDNS를 디플로이먼트(Deployment)로 실행하고 있을 경우, 일반적으로 고정 IP 주소를 갖는 쿠버네티스 서비스로 노출된다. 
+CoreDNS를 디플로이먼트(Deployment)로 실행하고 있을 경우, 일반적으로 고정 IP 주소를 갖는 쿠버네티스 서비스로 노출된다.
 Kubelet 은 `--cluster-dns=<dns-service-ip>` 플래그를 사용하여 DNS 확인자 정보를 각 컨테이너에 전달한다.
 
-DNS 이름에도 도메인이 필요하다. 사용자는 kubelet 에 있는 `--cluster-domain=<default-local-domain>` 플래그를 
+DNS 이름에도 도메인이 필요하다. 사용자는 kubelet 에 있는 `--cluster-domain=<default-local-domain>` 플래그를
 통하여 로컬 도메인을 설정할 수 있다.
 
 DNS 서버는 정방향 조회(A 및 AAAA 레코드), 포트 조회(SRV 레코드), 역방향 IP 주소 조회(PTR 레코드) 등을 지원한다.
 더 자세한 내용은 [서비스 및 파드용 DNS](/ko/docs/concepts/services-networking/dns-pod-service/)를 참고한다.
 
-만약 파드의 `dnsPolicy` 가 `default` 로 지정되어 있는 경우, 
+만약 파드의 `dnsPolicy` 가 `default` 로 지정되어 있는 경우,
 파드는 자신이 실행되는 노드의 이름 변환(name resolution) 구성을 상속한다.
 파드의 DNS 변환도 노드와 동일하게 작동해야 한다.
-그 외에는 [알려진 이슈](/docs/tasks/debug-application-cluster/dns-debugging-resolution/#known-issues)를 참고한다.
+그 외에는 [알려진 이슈](/docs/tasks/administer-cluster/dns-debugging-resolution/#known-issues)를 참고한다.
 
 만약 위와 같은 방식을 원하지 않거나, 파드를 위해 다른 DNS 설정이 필요한 경우,
 사용자는 kubelet 의 `--resolv-conf` 플래그를 사용할 수 있다.
@@ -63,7 +63,7 @@ CoreDNS는 [dns 명세](https://github.com/kubernetes/dns/blob/master/docs/speci
 CoreDNS는 모듈형이자 플러그인이 가능한 DNS 서버이며, 각 플러그인들은 CoreDNS에 새로운 기능을 부가한다.
 이는 CoreDNS 구성 파일인 [Corefile](https://coredns.io/2017/07/23/corefile-explained/)을 관리하여 구성할 수 있다.
 클러스터 관리자는 CoreDNS Corefile에 대한 {{< glossary_tooltip text="컨피그맵" term_id="configmap" >}}을 수정하여
-해당 클러스터에 대한 DNS 서비스 검색 동작을 
+해당 클러스터에 대한 DNS 서비스 검색 동작을
 변경할 수 있다.
 
 쿠버네티스에서 CoreDNS는 아래의 기본 Corefile 구성으로 설치된다.
@@ -164,7 +164,7 @@ data:
     }
 ```
 
-`Kubeadm` 툴은 kube-dns 컨피그맵에서 동일한 설정의 CoreDNS 컨피그맵으로의 
+`Kubeadm` 툴은 kube-dns 컨피그맵에서 동일한 설정의 CoreDNS 컨피그맵으로의
 자동 변환을 지원한다.
 
 {{< note >}}
@@ -248,11 +248,11 @@ my.cluster.local:53 {
 
 ## CoreDNS로의 이관
 
-kube-dns에서 CoreDNS로 이관하기 위하여, 
+kube-dns에서 CoreDNS로 이관하기 위하여,
 kube-dns를 CoreDNS로 교체하여 적용하는 방법에 대한 상세 정보는
 [블로그 기사](https://coredns.io/2018/05/21/migration-from-kube-dns-to-coredns/)를 참고한다.
 
-또한 공식적인 CoreDNS [배포 스크립트](https://github.com/coredns/deployment/blob/master/kubernetes/deploy.sh)를 
+또한 공식적인 CoreDNS [배포 스크립트](https://github.com/coredns/deployment/blob/master/kubernetes/deploy.sh)를
 사용하여 이관할 수도 있다.
 
 
diff --git a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index 9e48ea900a..60d010936e 100644
--- a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -2,17 +2,18 @@
 title: kubeadm 클러스터 업그레이드
 content_type: task
 weight: 20
-min-kubernetes-server-version: 1.18
+min-kubernetes-server-version: 1.19
 ---
 
 <!-- overview -->
 
 이 페이지는 kubeadm으로 생성된 쿠버네티스 클러스터를
-1.17.x 버전에서 1.18.x 버전으로, 1.18.x 버전에서 1.18.y(여기서 `y > x`) 버전으로 업그레이드하는 방법을 설명한다.
+1.18.x 버전에서 1.19.x 버전으로, 1.19.x 버전에서 1.19.y(여기서 `y > x`) 버전으로 업그레이드하는 방법을 설명한다.
 
 이전 버전의 kubeadm을 사용하여 생성된 클러스터 업그레이드에 대한 정보를 보려면,
 이 페이지 대신 다음의 페이지들을 참고한다.
 
+- [kubeadm 클러스터를 1.17에서 1.18로 업그레이드](https://v1-18.docs.kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
 - [kubeadm 클러스터를 1.16에서 1.17로 업그레이드](https://v1-17.docs.kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
 - [kubeadm 클러스터를 1.15에서 1.16으로 업그레이드](https://v1-16.docs.kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/)
 - [kubeadm 클러스터를 1.14에서 1.15로 업그레이드](https://v1-15.docs.kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-15/)
@@ -24,12 +25,9 @@ min-kubernetes-server-version: 1.18
 1. 추가 컨트롤 플레인 노드를 업그레이드한다.
 1. 워커(worker) 노드를 업그레이드한다.
 
-
-
 ## {{% heading "prerequisites" %}}
 
-
-- 1.17.0 버전 이상을 실행하는 kubeadm 쿠버네티스 클러스터가 있어야 한다.
+- 1.18.0 버전 이상을 실행하는 kubeadm 쿠버네티스 클러스터가 있어야 한다.
 - [스왑을 비활성화해야 한다](https://serverfault.com/questions/684771/best-way-to-disable-swap-in-linux).
 - 클러스터는 정적 컨트롤 플레인 및 etcd 파드 또는 외부 etcd를 사용해야 한다.
 - [릴리스 노트]({{< latest-release-notes >}})를 주의 깊게 읽어야 한다.
@@ -43,25 +41,23 @@ min-kubernetes-server-version: 1.18
   또는 동일한 MINOR의 PATCH 버전 사이에서만 업그레이드할 수 있다. 즉, 업그레이드할 때 MINOR 버전을 건너 뛸 수 없다.
   예를 들어, 1.y에서 1.y+1로 업그레이드할 수 있지만, 1.y에서 1.y+2로 업그레이드할 수는 없다.
 
-
-
 <!-- steps -->
 
 ## 업그레이드할 버전 결정
 
-최신의 안정 버전인 1.18을 찾는다.
+최신의 안정 버전인 1.19를 찾는다.
 
 {{< tabs name="k8s_install_versions" >}}
 {{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
     apt update
     apt-cache madison kubeadm
-    # 목록에서 최신 버전 1.18을 찾는다
-    # 1.18.x-00과 같아야 한다. 여기서 x는 최신 패치이다.
+    # 목록에서 최신 버전 1.19를 찾는다
+    # 1.19.x-00과 같아야 한다. 여기서 x는 최신 패치이다.
 {{% /tab %}}
 {{% tab name="CentOS, RHEL 또는 Fedora" %}}
     yum list --showduplicates kubeadm --disableexcludes=kubernetes
-    # 목록에서 최신 버전 1.18을 찾는다
-    # 1.18.x-0과 같아야 한다. 여기서 x는 최신 패치이다.
+    # 목록에서 최신 버전 1.19를 찾는다
+    # 1.19.x-0과 같아야 한다. 여기서 x는 최신 패치이다.
 {{% /tab %}}
 {{< /tabs >}}
 
@@ -73,18 +69,18 @@ min-kubernetes-server-version: 1.18
 
 {{< tabs name="k8s_install_kubeadm_first_cp" >}}
 {{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
-    # 1.18.x-00에서 x를 최신 패치 버전으로 바꾼다.
+    # 1.19.x-00에서 x를 최신 패치 버전으로 바꾼다.
     apt-mark unhold kubeadm && \
-    apt-get update && apt-get install -y kubeadm=1.18.x-00 && \
+    apt-get update && apt-get install -y kubeadm=1.19.x-00 && \
     apt-mark hold kubeadm
     -
     # apt-get 버전 1.1부터 다음 방법을 사용할 수도 있다
     apt-get update && \
-    apt-get install -y --allow-change-held-packages kubeadm=1.18.x-00
+    apt-get install -y --allow-change-held-packages kubeadm=1.19.x-00
 {{% /tab %}}
 {{% tab name="CentOS, RHEL 또는 Fedora" %}}
-    # 1.18.x-0에서 x를 최신 패치 버전으로 바꾼다.
-    yum install -y kubeadm-1.18.x-0 --disableexcludes=kubernetes
+    # 1.19.x-0에서 x를 최신 패치 버전으로 바꾼다.
+    yum install -y kubeadm-1.19.x-0 --disableexcludes=kubernetes
 {{% /tab %}}
 {{< /tabs >}}
 
@@ -116,33 +112,45 @@ min-kubernetes-server-version: 1.18
     [preflight] Running pre-flight checks.
     [upgrade] Running cluster health checks
     [upgrade] Fetching available versions to upgrade to
-    [upgrade/versions] Cluster version: v1.17.3
-    [upgrade/versions] kubeadm version: v1.18.0
-    [upgrade/versions] Latest stable version: v1.18.0
-    [upgrade/versions] Latest version in the v1.17 series: v1.18.0
+    [upgrade/versions] Cluster version: v1.18.4
+    [upgrade/versions] kubeadm version: v1.19.0
+    [upgrade/versions] Latest stable version: v1.19.0
+    [upgrade/versions] Latest version in the v1.18 series: v1.19.0
 
     Components that must be upgraded manually after you have upgraded the control plane with 'kubeadm upgrade apply':
     COMPONENT   CURRENT             AVAILABLE
-    Kubelet     1 x v1.17.3   v1.18.0
+    Kubelet     1 x v1.18.4         v1.19.0
 
-    Upgrade to the latest version in the v1.17 series:
+    Upgrade to the latest version in the v1.18 series:
 
     COMPONENT            CURRENT   AVAILABLE
-    API Server           v1.17.3   v1.18.0
-    Controller Manager   v1.17.3   v1.18.0
-    Scheduler            v1.17.3   v1.18.0
-    Kube Proxy           v1.17.3   v1.18.0
-    CoreDNS              1.6.5     1.6.7
-    Etcd                 3.4.3     3.4.3-0
+    API Server           v1.18.4   v1.19.0
+    Controller Manager   v1.18.4   v1.19.0
+    Scheduler            v1.18.4   v1.19.0
+    Kube Proxy           v1.18.4   v1.19.0
+    CoreDNS              1.6.7     1.7.0
+    Etcd                 3.4.3-0   3.4.7-0
 
     You can now apply the upgrade by executing the following command:
 
-        kubeadm upgrade apply v1.18.0
+        kubeadm upgrade apply v1.19.0
 
     _____________________________________________________________________
+
+    아래 표는 이 버전의 kubeadm에서 이해하는 컴포넌트 구성의 현재 상태를 보여준다.
+    "MANUAL UPGRADE REQUIRED" 열에 "yes" 표시가 있는 구성은 성공적인 업그레이드를
+    수행하기 전에 수동 구성 업그레이드 또는 kubeadm 기본값으로 재설정이 필요하다. 수동으로
+    업그레이드할 버전은 "PREFERRED VERSION" 열에 표시된다.
+
+    API GROUP                 CURRENT VERSION   PREFERRED VERSION   MANUAL UPGRADE REQUIRED
+    kubeproxy.config.k8s.io   v1alpha1          v1alpha1            no
+    kubelet.config.k8s.io     v1beta1           v1beta1             no
+    _____________________________________________________________________
+
     ```
 
     이 명령은 클러스터를 업그레이드할 수 있는지를 확인하고, 업그레이드할 수 있는 버전을 가져온다.
+    또한 컴포넌트 구성 버전 상태가 있는 표를 보여준다.
 
 {{< note >}}
 또한 `kubeadm upgrade` 는 이 노드에서 관리하는 인증서를 자동으로 갱신한다.
@@ -150,11 +158,17 @@ min-kubernetes-server-version: 1.18
 자세한 내용은 [인증서 관리 가이드](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs)를 참고한다.
 {{</ note >}}
 
+{{< note >}}
+`kubeadm upgrade plan` 이 수동 업그레이드가 필요한 컴포넌트 구성을 표시하는 경우, 사용자는
+`--config` 커맨드 라인 플래그를 통해 대체 구성이 포함된 구성 파일을 `kubeadm upgrade apply` 에 제공해야 한다.
+그렇게 하지 않으면 `kubeadm upgrade apply` 가 오류와 함께 종료되고 업그레이드를 수행하지 않는다.
+{{</ note >}}
+
 -  업그레이드할 버전을 선택하고, 적절한 명령을 실행한다. 예를 들면 다음과 같다.
 
     ```shell
     # 이 업그레이드를 위해 선택한 패치 버전으로 x를 바꾼다.
-    sudo kubeadm upgrade apply v1.18.x
+    sudo kubeadm upgrade apply v1.19.x
     ```
 
 
@@ -166,75 +180,78 @@ min-kubernetes-server-version: 1.18
     [upgrade/config] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
     [preflight] Running pre-flight checks.
     [upgrade] Running cluster health checks
-    [upgrade/version] You have chosen to change the cluster version to "v1.18.0"
-    [upgrade/versions] Cluster version: v1.17.3
-    [upgrade/versions] kubeadm version: v1.18.0
+    [upgrade/version] You have chosen to change the cluster version to "v1.19.0"
+    [upgrade/versions] Cluster version: v1.18.4
+    [upgrade/versions] kubeadm version: v1.19.0
     [upgrade/confirm] Are you sure you want to proceed with the upgrade? [y/N]: y
-    [upgrade/prepull] Will prepull images for components [kube-apiserver kube-controller-manager kube-scheduler etcd]
-    [upgrade/prepull] Prepulling image for component etcd.
-    [upgrade/prepull] Prepulling image for component kube-apiserver.
-    [upgrade/prepull] Prepulling image for component kube-controller-manager.
-    [upgrade/prepull] Prepulling image for component kube-scheduler.
-    [apiclient] Found 1 Pods for label selector k8s-app=upgrade-prepull-kube-controller-manager
-    [apiclient] Found 0 Pods for label selector k8s-app=upgrade-prepull-etcd
-    [apiclient] Found 0 Pods for label selector k8s-app=upgrade-prepull-kube-scheduler
-    [apiclient] Found 1 Pods for label selector k8s-app=upgrade-prepull-kube-apiserver
-    [apiclient] Found 1 Pods for label selector k8s-app=upgrade-prepull-etcd
-    [apiclient] Found 1 Pods for label selector k8s-app=upgrade-prepull-kube-scheduler
-    [upgrade/prepull] Prepulled image for component etcd.
-    [upgrade/prepull] Prepulled image for component kube-apiserver.
-    [upgrade/prepull] Prepulled image for component kube-controller-manager.
-    [upgrade/prepull] Prepulled image for component kube-scheduler.
-    [upgrade/prepull] Successfully prepulled the images for all the control plane components
-    [upgrade/apply] Upgrading your Static Pod-hosted control plane to version "v1.18.0"...
-    Static pod: kube-apiserver-myhost hash: 2cc222e1a577b40a8c2832320db54b46
-    Static pod: kube-controller-manager-myhost hash: f7ce4bc35cb6e646161578ac69910f18
-    Static pod: kube-scheduler-myhost hash: e3025acd90e7465e66fa19c71b916366
+    [upgrade/prepull] Pulling images required for setting up a Kubernetes cluster
+    [upgrade/prepull] This might take a minute or two, depending on the speed of your internet connection
+    [upgrade/prepull] You can also perform this action in beforehand using 'kubeadm config images pull'
+    [upgrade/apply] Upgrading your Static Pod-hosted control plane to version "v1.19.0"...
+    Static pod: kube-apiserver-kind-control-plane hash: b4c8effe84b4a70031f9a49a20c8b003
+    Static pod: kube-controller-manager-kind-control-plane hash: 9ac092f0ca813f648c61c4d5fcbf39f2
+    Static pod: kube-scheduler-kind-control-plane hash: 7da02f2c78da17af7c2bf1533ecf8c9a
     [upgrade/etcd] Upgrading to TLS for etcd
-    [upgrade/etcd] Non fatal issue encountered during upgrade: the desired etcd version for this Kubernetes version "v1.18.0" is "3.4.3-0", but the current etcd version is "3.4.3". Won't downgrade etcd, instead just continue
-    [upgrade/staticpods] Writing new Static Pod manifests to "/etc/kubernetes/tmp/kubeadm-upgraded-manifests308527012"
-    W0308 18:48:14.535122    3082 manifests.go:225] the default kube-apiserver authorization-mode is "Node,RBAC"; using "Node,RBAC"
+    Static pod: etcd-kind-control-plane hash: 171c56cd0e81c0db85e65d70361ceddf
+    [upgrade/staticpods] Preparing for "etcd" upgrade
+    [upgrade/staticpods] Renewing etcd-server certificate
+    [upgrade/staticpods] Renewing etcd-peer certificate
+    [upgrade/staticpods] Renewing etcd-healthcheck-client certificate
+    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/etcd.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-07-13-16-24-16/etcd.yaml"
+    [upgrade/staticpods] Waiting for the kubelet to restart the component
+    [upgrade/staticpods] This might take a minute or longer depending on the component/version gap (timeout 5m0s)
+    Static pod: etcd-kind-control-plane hash: 171c56cd0e81c0db85e65d70361ceddf
+    Static pod: etcd-kind-control-plane hash: 171c56cd0e81c0db85e65d70361ceddf
+    Static pod: etcd-kind-control-plane hash: 59e40b2aab1cd7055e64450b5ee438f0
+    [apiclient] Found 1 Pods for label selector component=etcd
+    [upgrade/staticpods] Component "etcd" upgraded successfully!
+    [upgrade/etcd] Waiting for etcd to become available
+    [upgrade/staticpods] Writing new Static Pod manifests to "/etc/kubernetes/tmp/kubeadm-upgraded-manifests999800980"
     [upgrade/staticpods] Preparing for "kube-apiserver" upgrade
     [upgrade/staticpods] Renewing apiserver certificate
     [upgrade/staticpods] Renewing apiserver-kubelet-client certificate
     [upgrade/staticpods] Renewing front-proxy-client certificate
     [upgrade/staticpods] Renewing apiserver-etcd-client certificate
-    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/kube-apiserver.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-03-08-18-48-14/kube-apiserver.yaml"
+    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/kube-apiserver.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-07-13-16-24-16/kube-apiserver.yaml"
     [upgrade/staticpods] Waiting for the kubelet to restart the component
     [upgrade/staticpods] This might take a minute or longer depending on the component/version gap (timeout 5m0s)
-    Static pod: kube-apiserver-myhost hash: 2cc222e1a577b40a8c2832320db54b46
-    Static pod: kube-apiserver-myhost hash: 609429acb0d71dce6725836dd97d8bf4
+    Static pod: kube-apiserver-kind-control-plane hash: b4c8effe84b4a70031f9a49a20c8b003
+    Static pod: kube-apiserver-kind-control-plane hash: b4c8effe84b4a70031f9a49a20c8b003
+    Static pod: kube-apiserver-kind-control-plane hash: b4c8effe84b4a70031f9a49a20c8b003
+    Static pod: kube-apiserver-kind-control-plane hash: b4c8effe84b4a70031f9a49a20c8b003
+    Static pod: kube-apiserver-kind-control-plane hash: f717874150ba572f020dcd89db8480fc
     [apiclient] Found 1 Pods for label selector component=kube-apiserver
     [upgrade/staticpods] Component "kube-apiserver" upgraded successfully!
     [upgrade/staticpods] Preparing for "kube-controller-manager" upgrade
     [upgrade/staticpods] Renewing controller-manager.conf certificate
-    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/kube-controller-manager.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-03-08-18-48-14/kube-controller-manager.yaml"
+    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/kube-controller-manager.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-07-13-16-24-16/kube-controller-manager.yaml"
     [upgrade/staticpods] Waiting for the kubelet to restart the component
     [upgrade/staticpods] This might take a minute or longer depending on the component/version gap (timeout 5m0s)
-    Static pod: kube-controller-manager-myhost hash: f7ce4bc35cb6e646161578ac69910f18
-    Static pod: kube-controller-manager-myhost hash: c7a1232ba2c5dc15641c392662fe5156
+    Static pod: kube-controller-manager-kind-control-plane hash: 9ac092f0ca813f648c61c4d5fcbf39f2
+    Static pod: kube-controller-manager-kind-control-plane hash: b155b63c70e798b806e64a866e297dd0
     [apiclient] Found 1 Pods for label selector component=kube-controller-manager
     [upgrade/staticpods] Component "kube-controller-manager" upgraded successfully!
     [upgrade/staticpods] Preparing for "kube-scheduler" upgrade
     [upgrade/staticpods] Renewing scheduler.conf certificate
-    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/kube-scheduler.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-03-08-18-48-14/kube-scheduler.yaml"
+    [upgrade/staticpods] Moved new manifest to "/etc/kubernetes/manifests/kube-scheduler.yaml" and backed up old manifest to "/etc/kubernetes/tmp/kubeadm-backup-manifests-2020-07-13-16-24-16/kube-scheduler.yaml"
     [upgrade/staticpods] Waiting for the kubelet to restart the component
     [upgrade/staticpods] This might take a minute or longer depending on the component/version gap (timeout 5m0s)
-    Static pod: kube-scheduler-myhost hash: e3025acd90e7465e66fa19c71b916366
-    Static pod: kube-scheduler-myhost hash: b1b721486ae0ac504c160dcdc457ab0d
+    Static pod: kube-scheduler-kind-control-plane hash: 7da02f2c78da17af7c2bf1533ecf8c9a
+    Static pod: kube-scheduler-kind-control-plane hash: 260018ac854dbf1c9fe82493e88aec31
     [apiclient] Found 1 Pods for label selector component=kube-scheduler
     [upgrade/staticpods] Component "kube-scheduler" upgraded successfully!
     [upload-config] Storing the configuration used in ConfigMap "kubeadm-config" in the "kube-system" Namespace
-    [kubelet] Creating a ConfigMap "kubelet-config-1.18" in namespace kube-system with the configuration for the kubelets in the cluster
-    [kubelet-start] Downloading configuration for the kubelet from the "kubelet-config-1.18" ConfigMap in the kube-system namespace
+    [kubelet] Creating a ConfigMap "kubelet-config-1.19" in namespace kube-system with the configuration for the kubelets in the cluster
     [kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
+    [bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to get nodes
     [bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
     [bootstrap-token] configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token
     [bootstrap-token] configured RBAC rules to allow certificate rotation for all node client certificates in the cluster
+    W0713 16:26:14.074656    2986 dns.go:282] the CoreDNS Configuration will not be migrated due to unsupported version of CoreDNS. The existing CoreDNS Corefile configuration and deployment has been retained.
     [addons] Applied essential addon: CoreDNS
     [addons] Applied essential addon: kube-proxy
 
-    [upgrade/successful] SUCCESS! Your cluster was upgraded to "v1.18.0". Enjoy!
+    [upgrade/successful] SUCCESS! Your cluster was upgraded to "v1.19.0". Enjoy!
 
     [upgrade/kubelet] Now that your control plane is upgraded, please proceed with upgrading your kubelets if you haven't already done so.
     ```
@@ -276,18 +293,18 @@ sudo kubeadm upgrade apply
 
 {{< tabs name="k8s_install_kubelet" >}}
 {{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
-    # 1.18.x-00의 x를 최신 패치 버전으로 바꾼다
+    # 1.19.x-00의 x를 최신 패치 버전으로 바꾼다
     apt-mark unhold kubelet kubectl && \
-    apt-get update && apt-get install -y kubelet=1.18.x-00 kubectl=1.18.x-00 && \
+    apt-get update && apt-get install -y kubelet=1.19.x-00 kubectl=1.19.x-00 && \
     apt-mark hold kubelet kubectl
     -
     # apt-get 버전 1.1부터 다음 방법을 사용할 수도 있다
     apt-get update && \
-    apt-get install -y --allow-change-held-packages kubelet=1.18.x-00 kubectl=1.18.x-00
+    apt-get install -y --allow-change-held-packages kubelet=1.19.x-00 kubectl=1.19.x-00
 {{% /tab %}}
 {{% tab name="CentOS, RHEL 또는 Fedora" %}}
-    # 1.18.x-0에서 x를 최신 패치 버전으로 바꾼다
-    yum install -y kubelet-1.18.x-0 kubectl-1.18.x-0 --disableexcludes=kubernetes
+    # 1.19.x-0에서 x를 최신 패치 버전으로 바꾼다
+    yum install -y kubelet-1.19.x-0 kubectl-1.19.x-0 --disableexcludes=kubernetes
 {{% /tab %}}
 {{< /tabs >}}
 
@@ -309,18 +326,18 @@ sudo systemctl restart kubelet
 
 {{< tabs name="k8s_install_kubeadm_worker_nodes" >}}
 {{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
-    # 1.18.x-00의 x를 최신 패치 버전으로 바꾼다
+    # 1.19.x-00의 x를 최신 패치 버전으로 바꾼다
     apt-mark unhold kubeadm && \
-    apt-get update && apt-get install -y kubeadm=1.18.x-00 && \
+    apt-get update && apt-get install -y kubeadm=1.19.x-00 && \
     apt-mark hold kubeadm
     -
     # apt-get 버전 1.1부터 다음 방법을 사용할 수도 있다
     apt-get update && \
-    apt-get install -y --allow-change-held-packages kubeadm=1.18.x-00
+    apt-get install -y --allow-change-held-packages kubeadm=1.19.x-00
 {{% /tab %}}
 {{% tab name="CentOS, RHEL 또는 Fedora" %}}
-    # 1.18.x-0에서 x를 최신 패치 버전으로 바꾼다
-    yum install -y kubeadm-1.18.x-0 --disableexcludes=kubernetes
+    # 1.19.x-0에서 x를 최신 패치 버전으로 바꾼다
+    yum install -y kubeadm-1.19.x-0 --disableexcludes=kubernetes
 {{% /tab %}}
 {{< /tabs >}}
 
@@ -355,18 +372,18 @@ sudo systemctl restart kubelet
 
 {{< tabs name="k8s_kubelet_and_kubectl" >}}
 {{% tab name="Ubuntu, Debian 또는 HypriotOS" %}}
-    # 1.18.x-00의 x를 최신 패치 버전으로 바꾼다
+    # 1.19.x-00의 x를 최신 패치 버전으로 바꾼다
     apt-mark unhold kubelet kubectl && \
-    apt-get update && apt-get install -y kubelet=1.18.x-00 kubectl=1.18.x-00 && \
+    apt-get update && apt-get install -y kubelet=1.19.x-00 kubectl=1.19.x-00 && \
     apt-mark hold kubelet kubectl
     -
     # apt-get 버전 1.1부터 다음 방법을 사용할 수도 있다
     apt-get update && \
-    apt-get install -y --allow-change-held-packages kubelet=1.18.x-00 kubectl=1.18.x-00
+    apt-get install -y --allow-change-held-packages kubelet=1.19.x-00 kubectl=1.19.x-00
 {{% /tab %}}
 {{% tab name="CentOS, RHEL 또는 Fedora" %}}
-    # 1.18.x-0에서 x를 최신 패치 버전으로 바꾼다
-    yum install -y kubelet-1.18.x-0 kubectl-1.18.x-0 --disableexcludes=kubernetes
+    # 1.19.x-0에서 x를 최신 패치 버전으로 바꾼다
+    yum install -y kubelet-1.19.x-0 kubectl-1.19.x-0 --disableexcludes=kubernetes
 {{% /tab %}}
 {{< /tabs >}}
 
@@ -429,6 +446,7 @@ etcd 업그레이드가 실패하고 자동 롤백이 작동하지 않으면, 
   - 컨트롤 플레인이 정상적으로 동작한다
 - 버전 차이(skew) 정책을 적용한다.
 - 컨트롤 플레인 이미지가 사용 가능한지 또는 머신으로 가져올 수 있는지 확인한다.
+- 컴포넌트 구성에 버전 업그레이드가 필요한 경우 대체 구성을 생성하거나 사용자가 제공한 것으로 덮어 쓰기한다.
 - 컨트롤 플레인 컴포넌트 또는 롤백 중 하나라도 나타나지 않으면 업그레이드한다.
 - 새로운 `kube-dns` 와 `kube-proxy` 매니페스트를 적용하고 필요한 모든 RBAC 규칙이 생성되도록 한다.
 - API 서버의 새 인증서와 키 파일을 작성하고 180일 후에 만료될 경우 이전 파일을 백업한다.
diff --git a/content/ko/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy.md b/content/ko/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy.md
index d59cdd3e15..1b0873f74a 100644
--- a/content/ko/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy.md
+++ b/content/ko/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy.md
@@ -10,14 +10,9 @@ weight: 40
 
 이 페이지는 네트워크 폴리시(NetworkPolicy)로 로마나(Romana)를 사용하는 방법을 살펴본다.
 
-
-
 ## {{% heading "prerequisites" %}}
 
-
-[kubeadm 시작하기](/docs/getting-started-guides/kubeadm/)의 1, 2, 3 단계를 완료하자.
-
-
+[kubeadm 시작하기](/ko/docs/reference/setup-tools/kubeadm/kubeadm/)의 1, 2, 3 단계를 완료하자.
 
 <!-- steps -->
 
@@ -33,9 +28,8 @@ Kubeadm을 위한 [컨테이너화된 설치 안내서](https://github.com/roman
     * [Romana 네트워크 폴리시의 예](https://github.com/romana/core/blob/master/doc/policy.md).
 * 네트워크 폴리시 API.
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
-로마나를 설치한 후에는, 쿠버네티스 네트워크 폴리시를 시도하기 위해 [네트워크 폴리시 선언하기](/ko/docs/tasks/administer-cluster/declare-network-policy/)를 따라 할 수 있다.
+로마나를 설치한 후에는, 쿠버네티스 네트워크 폴리시를 시도하기 위해
+[네트워크 폴리시 선언하기](/ko/docs/tasks/administer-cluster/declare-network-policy/)를
+따라 할 수 있다.
diff --git a/content/ko/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md b/content/ko/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
index 3aea719c56..b20c2e9890 100644
--- a/content/ko/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
+++ b/content/ko/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
@@ -8,14 +8,10 @@ weight: 50
 
 이 페이지는 네트워크 폴리시(NetworkPolicy)로 위브넷(Weave Net)를 사용하는 방법을 살펴본다.
 
-
-
 ## {{% heading "prerequisites" %}}
 
-
-쿠버네티스 클러스터가 필요하다. 맨 땅에서부터 시작하기를 위해서 [kubeadm 시작하기 안내서](/docs/getting-started-guides/kubeadm/)를 따른다.
-
-
+쿠버네티스 클러스터가 필요하다. 맨 땅에서부터 시작하기를 위해서
+[kubeadm 시작하기 안내서](/ko/docs/reference/setup-tools/kubeadm/kubeadm/)를 따른다.
 
 <!-- steps -->
 
@@ -23,7 +19,10 @@ weight: 50
 
 [애드온을 통한 쿠버네티스 통합하기](https://www.weave.works/docs/net/latest/kube-addon/) 가이드를 따른다.
 
-쿠버네티스의 위브넷 애드온은 쿠버네티스의 모든 네임스페이스의 네크워크 정책 어노테이션을 자동으로 모니터링하며, 정책에 따라 트래픽을 허용하고 차단하는 `iptables` 규칙을 구성하는 [네트워크 폴리시 컨트롤러](https://www.weave.works/docs/net/latest/kube-addon/#npc)와 함께 제공된다.
+쿠버네티스의 위브넷 애드온은 쿠버네티스의 모든 네임스페이스의
+네크워크 정책 어노테이션을 자동으로 모니터링하며,
+정책에 따라 트래픽을 허용하고 차단하는 `iptables` 규칙을 구성하는
+[네트워크 폴리시 컨트롤러](https://www.weave.works/docs/net/latest/kube-addon/#npc)와 함께 제공된다.
 
 ## 설치 시험
 
@@ -47,9 +46,9 @@ weave-net-pmw8w                         2/2       Running   0          9d
 
 위브넷 파드를 가진 각 노드와 모든 파드는 `Running`이고 `2/2 READY`이다(`2/2`는 각 파드가 `weave`와 `weave-npc`를 가지고 있음을 뜻한다).
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
-위브넷 애드온을 설치하고 나서, 쿠버네티스 네트워크 폴리시를 시도하기 위해 [네트워크 폴리시 선언하기](/ko/docs/tasks/administer-cluster/declare-network-policy/)를 따라 할 수 있다. 질문이 있으면 [슬랙 #weave-community 이나 Weave 유저그룹](https://github.com/weaveworks/weave#getting-help)에 연락한다.
+위브넷 애드온을 설치하고 나서, 쿠버네티스 네트워크 폴리시를 시도하기 위해
+[네트워크 폴리시 선언하기](/ko/docs/tasks/administer-cluster/declare-network-policy/)를
+따라 할 수 있다. 질문이 있으면
+[슬랙 #weave-community 이나 Weave 유저그룹](https://github.com/weaveworks/weave#getting-help)에 연락한다.
diff --git a/content/ko/docs/tasks/configure-pod-container/quality-service-pod.md b/content/ko/docs/tasks/configure-pod-container/quality-service-pod.md
index 77ac7ce6d5..2d1d482585 100644
--- a/content/ko/docs/tasks/configure-pod-container/quality-service-pod.md
+++ b/content/ko/docs/tasks/configure-pod-container/quality-service-pod.md
@@ -80,7 +80,7 @@ spec:
       requests:
         cpu: 700m
         memory: 200Mi
-  ...
+    ...
 status:
   qosClass: Guaranteed
 ```
@@ -269,4 +269,3 @@ kubectl delete namespace qos-example
 * [API 오브젝트 할당량 구성](/docs/tasks/administer-cluster/quota-api-object/)
 
 * [노드의 토폴로지 관리 정책 제어](/docs/tasks/administer-cluster/topology-manager/)
-
diff --git a/content/ko/docs/tasks/debug-application-cluster/debug-init-containers.md b/content/ko/docs/tasks/debug-application-cluster/debug-init-containers.md
index dc774b9ce3..a831f5d267 100644
--- a/content/ko/docs/tasks/debug-application-cluster/debug-init-containers.md
+++ b/content/ko/docs/tasks/debug-application-cluster/debug-init-containers.md
@@ -5,24 +5,20 @@ content_type: task
 
 <!-- overview -->
 
-이 페이지는 초기화 컨테이너의 실행과 관련된 문제를 
-조사하는 방법에 대해 보여준다. 아래 예제의 커맨드 라인은 파드(Pod)를 `<pod-name>` 으로, 
-초기화 컨테이너를 `<init-container-1>` 과 
+이 페이지는 초기화 컨테이너의 실행과 관련된 문제를
+조사하는 방법에 대해 보여준다. 아래 예제의 커맨드 라인은 파드(Pod)를 `<pod-name>` 으로,
+초기화 컨테이너를 `<init-container-1>` 과
 `<init-container-2>` 로 표시한다.
 
-
-
 ## {{% heading "prerequisites" %}}
 
 
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-* 사용자는 [초기화 컨테이너](/ko/docs/concepts/workloads/pods/init-containers/)의 
+* 사용자는 [초기화 컨테이너](/ko/docs/concepts/workloads/pods/init-containers/)의
   기본 사항에 익숙해야 한다.
 * 사용자는 [초기화 컨테이너를 구성](/ko/docs/tasks/configure-pod-container/configure-pod-initialization/#초기화-컨테이너를-갖는-파드-생성)해야 한다.
 
-
-
 <!-- steps -->
 
 ## 초기화 컨테이너의 상태 체크하기
@@ -33,7 +29,7 @@ content_type: task
 kubectl get pod <pod-name>
 ```
 
-예를 들어, `Init:1/2` 상태는 두 개의 초기화 컨테이너 중 
+예를 들어, `Init:1/2` 상태는 두 개의 초기화 컨테이너 중
 하나가 성공적으로 완료되었음을 나타낸다.
 
 ```
@@ -41,7 +37,7 @@ NAME         READY     STATUS     RESTARTS   AGE
 <pod-name>   0/1       Init:1/2   0          7s
 ```
 
-상태값과 그 의미에 대한 추가 예제는 
+상태값과 그 의미에 대한 추가 예제는
 [파드 상태 이해하기](#파드의-상태-이해하기)를 참조한다.
 
 ## 초기화 컨테이너에 대한 상세 정보 조회하기
@@ -82,7 +78,7 @@ Init Containers:
     ...
 ```
 
-파드 스펙의 `status.initContainerStatuses` 필드를 읽어서 
+파드 스펙의 `status.initContainerStatuses` 필드를 읽어서
 프로그래밍 방식으로 초기화 컨테이너의 상태를 조회할 수도 있다.
 
 
@@ -102,8 +98,8 @@ kubectl get pod nginx --template '{{.status.initContainerStatuses}}'
 kubectl logs <pod-name> -c <init-container-2>
 ```
 
-셸 스크립트를 실행하는 초기화 컨테이너는, 초기화 컨테이너가 
-실행될 때 명령어를 출력한다. 예를 들어, 스크립트의 시작 부분에 
+셸 스크립트를 실행하는 초기화 컨테이너는, 초기화 컨테이너가
+실행될 때 명령어를 출력한다. 예를 들어, 스크립트의 시작 부분에
 `set -x` 를 추가하고 실행하여 Bash에서 명령어를 출력할 수 있도록 수행할 수 있다.
 
 
@@ -112,8 +108,8 @@ kubectl logs <pod-name> -c <init-container-2>
 
 ## 파드의 상태 이해하기
 
-`Init:` 으로 시작하는 파드 상태는 초기화 컨테이너의 
-실행 상태를 요약한다. 아래 표는 초기화 컨테이너를 디버깅하는 
+`Init:` 으로 시작하는 파드 상태는 초기화 컨테이너의
+실행 상태를 요약한다. 아래 표는 초기화 컨테이너를 디버깅하는
 동안 사용자가 확인할 수 있는 몇 가지 상태값의 예이다.
 
 상태 | 의미
diff --git a/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md b/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
index cf0b639cbd..54a2ae61b0 100644
--- a/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
+++ b/content/ko/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana.md
@@ -7,7 +7,7 @@ title: 엘라스틱서치(Elasticsearch) 및 키바나(Kibana)를 사용한 로
 
 Google 컴퓨트 엔진(Compute Engine, GCE) 플랫폼에서, 기본 로깅 지원은
 [스택드라이버(Stackdriver) 로깅](https://cloud.google.com/logging/)을 대상으로 한다. 이는
-[스택드라이버 로깅으로 로깅하기](/docs/user-guide/logging/stackdriver)에 자세히 설명되어 있다.
+[스택드라이버 로깅으로 로깅하기](/docs/tasks/debug-application-cluster/logging-stackdriver)에 자세히 설명되어 있다.
 
 이 문서에서는 GCE에서 운영할 때 스택드라이버 로깅의 대안으로,
 [엘라스틱서치](https://www.elastic.co/products/elasticsearch)에 로그를 수집하고
@@ -87,7 +87,8 @@ monitoring-influx-grafana-v1-o79xf             2/2       Running   0          2h
 
 엘라스틱서치 및 키바나 서비스는 모두 `kube-system` 네임스페이스에
 있으며 공개적으로 접근 가능한 IP 주소를 통해 직접 노출되지 않는다. 이를 위해,
-[클러스터에서 실행 중인 서비스 접근](/ko/docs/tasks/access-application-cluster/access-cluster/#클러스터에서-실행되는-서비스로-액세스)에 대한 지침을 참고한다.
+[클러스터에서 실행 중인 서비스 접근](/ko/docs/tasks/access-application-cluster/access-cluster/#클러스터에서-실행되는-서비스로-액세스)에
+대한 지침을 참고한다.
 
 브라우저에서 `elasticsearch-logging` 서비스에 접근하려고 하면,
 다음과 같은 상태 페이지가 표시된다.
@@ -118,5 +119,3 @@ monitoring-influx-grafana-v1-o79xf             2/2       Running   0          2h
 
 키바나는 로그를 탐색하기 위한 모든 종류의 강력한 옵션을 제공한다! 이를 파헤치는 방법에 대한
 아이디어는 [키바나의 문서](https://www.elastic.co/guide/en/kibana/current/discover.html)를 확인한다.
-
-
diff --git a/content/ko/docs/tasks/debug-application-cluster/resource-metrics-pipeline.md b/content/ko/docs/tasks/debug-application-cluster/resource-metrics-pipeline.md
index ee6991ef30..758c782a44 100644
--- a/content/ko/docs/tasks/debug-application-cluster/resource-metrics-pipeline.md
+++ b/content/ko/docs/tasks/debug-application-cluster/resource-metrics-pipeline.md
@@ -10,9 +10,6 @@ content_type: concept
 `kubectl top` 커맨드 사용과 같이 사용자가 직접적으로 액세스하거나,
 Horizontal Pod Autoscaler 같은 클러스터의 컨트롤러에서 결정을 내릴 때 사용될 수 있다.
 
-
-
-
 <!-- body -->
 
 ## 메트릭 API
@@ -38,11 +35,19 @@ Horizontal Pod Autoscaler 같은 클러스터의 컨트롤러에서 결정을 
 
 ### CPU
 
-CPU는 일정 기간 동안 [CPU 코어](/ko/docs/concepts/configuration/manage-resources-containers/#cpu의-의미)에서 평균 사용량으로 리포트된다. 이 값은 커널(리눅스와 윈도우 커널 모두)에서 제공하는 누적 CPU 카운터보다 높은 비율을 적용해서 얻는다. kubelet은 비율 계산에 사용할 윈도우를 선택한다.
+CPU는 일정 기간 동안
+[CPU 코어](/ko/docs/concepts/configuration/manage-resources-containers/#cpu의-의미)에서
+평균 사용량으로 리포트된다. 이 값은 커널(리눅스와 윈도우 커널 모두)에서 제공하는
+누적 CPU 카운터보다 높은 비율을 적용해서 얻는다.
+kubelet은 비율 계산에 사용할 윈도우를 선택한다.
 
 ### 메모리
 
-메모리는 메트릭이 수집된 순간 작업 집합으로 리포트 된다. 이상적인 환경에서 "작업 집합(working set)"은 압박(memory pressure)에서 풀려날 수 없는 사용 중인(in-use) 메모리의 양이다. 그러나 작업 집합의 계산은 호스트 OS에 따라 다르며, 일반적으로 휴리스틱스를 사용해서 평가한다. 쿠버네티스는 스왑(swap)을 지원하지 않기 때문에 모든 익명(파일로 백업되지 않은) 메모리를 포함한다. 호스트 OS가 항상 이러한 페이지를 회수할 수 없기 때문에 메트릭에는 일반적으로 일부 캐시된(파일 백업) 메모리도 포함된다.
+메모리는 메트릭이 수집된 순간 작업 집합으로 리포트 된다.
+이상적인 환경에서 "작업 집합(working set)"은 압박(memory pressure)에서 풀려날 수 없는 사용 중인(in-use) 메모리의 양이다.
+그러나 작업 집합의 계산은 호스트 OS에 따라 다르며, 일반적으로 휴리스틱스를 사용해서 평가한다.
+쿠버네티스는 스왑(swap)을 지원하지 않기 때문에 모든 익명(파일로 백업되지 않은) 메모리를 포함한다.
+호스트 OS가 항상 이러한 페이지를 회수할 수 없기 때문에 메트릭에는 일반적으로 일부 캐시된(파일 백업) 메모리도 포함된다.
 
 ## 메트릭 서버
 
@@ -51,9 +56,11 @@ CPU는 일정 기간 동안 [CPU 코어](/ko/docs/concepts/configuration/manage-
 디플로이먼트 오브젝트로 배포된다. 만약 다른 쿠버네티스 설치 메커니즘을 사용한다면, 제공된
 [디플로이먼트 components.yaml](https://github.com/kubernetes-sigs/metrics-server/releases) 파일을 사용하여 메트릭 서버를 배포할 수 있다.
 
-메트릭 서버는 각 노드에서 [Kubelet](/docs/admin/kubelet/)에 의해 노출된 Summary API에서 메트릭을 수집한다.
+메트릭 서버는 각 노드에서 [Kubelet](/docs/reference/command-line-tools-reference/kubelet/)에 의해
+노출된 Summary API에서 메트릭을 수집한다.
 
 메트릭 서버는 [쿠버네티스 aggregator](/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)를
 통해 메인 API 서버에 등록된다.
 
-[설계 문서](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/instrumentation/metrics-server.md)에서 메트릭 서버에 대해 자세하게 배울 수 있다.
+[설계 문서](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/instrumentation/metrics-server.md)에서
+메트릭 서버에 대해 자세하게 배울 수 있다.
diff --git a/content/ko/docs/tasks/debug-application-cluster/resource-usage-monitoring.md b/content/ko/docs/tasks/debug-application-cluster/resource-usage-monitoring.md
index 34c51ad860..584afa5b19 100644
--- a/content/ko/docs/tasks/debug-application-cluster/resource-usage-monitoring.md
+++ b/content/ko/docs/tasks/debug-application-cluster/resource-usage-monitoring.md
@@ -5,38 +5,41 @@ title: 리소스 모니터링 도구
 
 <!-- overview -->
 
-애플리케이션을 스케일하여 신뢰할 수 있는 서비스를 제공하려면, 
-애플리케이션이 배포되었을 때 애플리케이션이 어떻게 동작하는지를 이해해야 한다. 
-컨테이너, [파드](/ko/docs/concepts/workloads/pods/pod), 
-[서비스](/ko/docs/concepts/services-networking/service), 그리고 전체 클러스터의 특성을 
-검사하여 쿠버네티스 클러스터 내의 애플리케이션 성능을 검사할 수 있다. 쿠버네티스는 각 레벨에서 
+애플리케이션을 스케일하여 신뢰할 수 있는 서비스를 제공하려면,
+애플리케이션이 배포되었을 때 애플리케이션이 어떻게 동작하는지를 이해해야 한다.
+컨테이너, [파드](/ko/docs/concepts/workloads/pods/pod),
+[서비스](/ko/docs/concepts/services-networking/service),
+그리고 전체 클러스터의 특성을 검사하여
+쿠버네티스 클러스터 내의 애플리케이션 성능을 검사할 수 있다. 쿠버네티스는 각 레벨에서
 애플리케이션의 리소스 사용량에 대한 상세 정보를 제공한다.
-이 정보는 애플리케이션의 성능을 평가하고 
+이 정보는 애플리케이션의 성능을 평가하고
 병목 현상을 제거하여 전체 성능을 향상할 수 있게 해준다.
 
-
-
 <!-- body -->
 
-쿠버네티스에서 애플리케이션 모니터링은 단일 모니터링 솔루션에 의존하지 않는다. 신규 클러스터에서는, [리소스 메트릭](#리소스-메트릭-파이프라인) 또는 [완전한 메트릭](#완전한-메트릭-파이프라인) 파이프라인으로 모니터링 통계를 수집할 수 있다.
+쿠버네티스에서 애플리케이션 모니터링은 단일 모니터링 솔루션에 의존하지 않는다.
+신규 클러스터에서는, [리소스 메트릭](#리소스-메트릭-파이프라인) 또는
+[완전한 메트릭](#완전한-메트릭-파이프라인) 파이프라인으로 모니터링 통계를 수집할 수 있다.
 
 ## 리소스 메트릭 파이프라인
 
-리소스 메트릭 파이프라인은 [Horizontal Pod Autoscaler](/ko/docs/tasks/run-application/horizontal-pod-autoscale)
-컨트롤러와 같은 클러스터 구성요소나 `kubectl top` 유틸리티에 관련되어 있는
+리소스 메트릭 파이프라인은
+[Horizontal Pod Autoscaler](/ko/docs/tasks/run-application/horizontal-pod-autoscale)
+컨트롤러와 같은 클러스터 구성요소나
+`kubectl top` 유틸리티에 관련되어 있는
 메트릭들로 제한된 집합을 제공한다. 이 메트릭은 경량의 단기 인메모리 저장소인
 [metrics-server](https://github.com/kubernetes-incubator/metrics-server)에
-의해서 수집되며 `metrics.k8s.io` API를 통해 노출된다. 
+의해서 수집되며 `metrics.k8s.io` API를 통해 노출된다.
 
-metrics-server는 클러스터 상의 모든 노드를 발견하고 각 노드의 
-[Kubelet](/docs/reference/command-line-tools-reference/kubelet)에 CPU와 메모리 
+metrics-server는 클러스터 상의 모든 노드를 발견하고 각 노드의
+[Kubelet](/docs/reference/command-line-tools-reference/kubelet/)에 CPU와 메모리 
 사용량을 질의한다. Kubelet은 쿠버네티스 마스터와 노드 간의 다리 역할을 해서
 머신에서 구동되는 파드와 컨테이너를 관리한다. Kubelet은 각각의 파드를 해당하는
 컨테이너로 변환하고 컨테이너 런타임 인터페이스를 통해서 컨테이너 런타임에서
-개별 컨테이너의 사용량 통계를 가져온다. Kubelet은 이 정보를 레거시 도커와의 
+개별 컨테이너의 사용량 통계를 가져온다. Kubelet은 이 정보를 레거시 도커와의
 통합을 위해 kubelet에 통합된 cAdvisor를 통해 가져온다. 그 다음으로 취합된 파드
 리소스 사용량 통계를 metric-server 리소스 메트릭 API를 통해 노출한다. 이 API는
-kubelet의 인증이 필요한 읽기 전용 포트 상의 `/metrics/resource/v1beta1`에서 
+kubelet의 인증이 필요한 읽기 전용 포트 상의 `/metrics/resource/v1beta1`에서
 제공된다.
 
 ## 완전한 메트릭 파이프라인
@@ -50,5 +53,3 @@ kubelet의 인증이 필요한 읽기 전용 포트 상의 `/metrics/resource/v1
 
 CNCF 프로젝트인, [프로메테우스](https://prometheus.io)는 기본적으로 쿠버네티스, 노드, 프로메테우스 자체를 모니터링할 수 있다.
 CNCF 프로젝트가 아닌 완전한 메트릭 파이프라인 프로젝트는 쿠버네티스 문서의 범위가 아니다.
-
-
diff --git a/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md b/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md
index c7057c1887..191e82021c 100644
--- a/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md
+++ b/content/ko/docs/tasks/inject-data-application/define-environment-variable-container.md
@@ -9,28 +9,21 @@ weight: 20
 본 페이지는 쿠버네티스 파드의 컨테이너를 위한 환경 변수를
 정의하는 방법에 대해 설명한다.
 
-
-
-
 ## {{% heading "prerequisites" %}}
 
-
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
-
-
-
 <!-- steps -->
 
 ## 컨테이너를 위한 환경 변수 정의하기
 
-파드를 생성할 때, 파드 안에서 동작하는 컨테이너를 위한 환경 변수를 설정할 
+파드를 생성할 때, 파드 안에서 동작하는 컨테이너를 위한 환경 변수를 설정할
 수 있다. 환경 변수를 설정하려면, 구성 파일에 `env`나 `envFrom` 필드를
 포함시켜야 한다.
 
 이 예제에서, 한 개의 컨테이너를 실행하는 파드를 생성한다. 파드를 위한 구성
 파일은 `DEMO_GREETING` 이라는 이름과 `"Hello from the environment"`이라는
-값을 가지는 환경 변수를 정의한다. 다음은 파드를 위한 구성 매니페스트 
+값을 가지는 환경 변수를 정의한다. 다음은 파드를 위한 구성 매니페스트
 예시이다.
 
 {{< codenew file="pods/inject/envars.yaml" >}}
@@ -81,24 +74,24 @@ weight: 20
 1. 셸에서 빠져나오기 위해, `exit`을 입력한다.
 
 {{< note >}}
-`env` 나 `envFrom` 필드를 이용해 설정된 환경 변수들은 컨테이너 이미지 
+`env` 나 `envFrom` 필드를 이용해 설정된 환경 변수들은 컨테이너 이미지
 안에서 명시된 모든 환경 변수들을 오버라이딩한다.
 {{< /note >}}
 
 {{< note >}}
-환경 변수는 서로를 참조할 수 있으며 사이클이 가능하다. 
+환경 변수는 서로를 참조할 수 있으며 사이클이 가능하다.
 사용하기 전에 순서에 주의한다.
 {{< /note >}}
 
 ## 설정 안에서 환경 변수 사용하기
 
-파드의 구성 파일 안에서 정의한 환경 변수는 
-파드의 컨테이너를 위해 설정하는 커맨드와 인자들과 같이, 
-구성 파일 안의 다른 곳에서 사용할 수 있다. 
-아래의 구성 파일 예시에서, `GREETING`, `HONORIFIC`, 그리고 
-`NAME` 환경 변수들이 각각 `Warm greetings to`, `The Most honorable`, 
-그리고 `Kubernetes`로 설정되어 있다. 이 환경 변수들은 
-이후 `env-print-demo` 컨테이너에 전달되어 CLI 인자에서 
+파드의 구성 파일 안에서 정의한 환경 변수는
+파드의 컨테이너를 위해 설정하는 커맨드와 인자들과 같이,
+구성 파일 안의 다른 곳에서 사용할 수 있다.
+아래의 구성 파일 예시에서, `GREETING`, `HONORIFIC`, 그리고
+`NAME` 환경 변수들이 각각 `Warm greetings to`, `The Most honorable`,
+그리고 `Kubernetes`로 설정되어 있다. 이 환경 변수들은
+이후 `env-print-demo` 컨테이너에 전달되어 CLI 인자에서
 사용된다.
 
 ```yaml
@@ -123,12 +116,8 @@ spec:
 
 컨테이너가 생성되면, `echo Warm greetings to The Most Honorable Kubernetes` 커맨드가 컨테이너에서 실행된다.
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 * [환경 변수](/docs/tasks/inject-data-application/environment-variable-expose-pod-information/)에 대해 알아본다.
-* [시크릿을 환경 변수로 사용하기](/docs/user-guide/secrets/#using-secrets-as-environment-variables)에 대해 알아본다.
+* [시크릿을 환경 변수로 사용하기](/ko/docs/concepts/configuration/secret/#시크릿을-환경-변수로-사용하기)에 대해 알아본다.
 * [EnvVarSource](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#envvarsource-v1-core)를 확인한다.
-
diff --git a/content/ko/docs/tasks/job/parallel-processing-expansion.md b/content/ko/docs/tasks/job/parallel-processing-expansion.md
new file mode 100644
index 0000000000..341739ba62
--- /dev/null
+++ b/content/ko/docs/tasks/job/parallel-processing-expansion.md
@@ -0,0 +1,310 @@
+---
+title: 확장을 사용한 병렬 처리
+content_type: task
+min-kubernetes-server-version: v1.8
+weight: 20
+---
+
+<!-- overview -->
+
+이 태스크는 공통 템플릿을 기반으로 하는 여러 개의 {{< glossary_tooltip text="잡(Job)" term_id="job" >}}을
+실행하는 것을 보여준다. 이 접근 방식을 사용하여 일괄 작업을 병렬로 처리할 수
+있다.
+
+이 예에는 _apple_, _banana_ 그리고 _cherry_ 세 항목만 있다.
+샘플 잡들은 단순히 문자열을 출력한 다음 일시 정지하는 각 항목을 처리한다.
+
+이 패턴이 보다 실질적인 유스케이스에 어떻게 부합하는지 알아 보려면
+[실제 워크로드에서 잡 사용하기](#실제-워크로드에서-잡-사용하기)를 참고한다.
+
+## {{% heading "prerequisites" %}}
+
+사용자는 기본적인 내용과, 병렬 작업이 아닌
+[잡](/ko/docs/concepts/workloads/controllers/job/) 사용에 대해 익숙해야 한다.
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+기본 템플릿을 사용하려면 커맨드 라인 유틸리티 `sed` 가 필요하다.
+
+고급 템플릿 예제를 따라하려면, [파이썬(Python)](https://www.python.org/)과
+파이썬용 Jinja2 템플릿 라이브러리의 설치가
+필요하다.
+
+파이썬을 설정했으면, 다음을 실행하여 Jinja2를 설치할 수 있다.
+
+```shell
+pip install --user jinja2
+```
+
+<!-- steps -->
+
+## 템플릿 기반의 잡 생성하기
+
+먼저, 다음의 잡 템플릿을 다운로드해서 `job-tmpl.yaml` 파일로 저장한다.
+다운로드할 내용은 다음과 같다.
+
+{{< codenew file="application/job/job-tmpl.yaml" >}}
+
+```shell
+# job-tmpl.yaml를 다운로드하기 위해 curl을 사용한다
+curl -L -s -O https://k8s.io/examples/application/job/job-tmpl.yaml
+```
+
+다운로드한 파일은 아직 유효한 쿠버네티스
+{{< glossary_tooltip text="매니페스트" term_id="manifest" >}}가 아니다.
+대신 해당 템플릿은 사용하기 전에 채워야하는 자리 표시자가 있는 잡 오브젝트의
+YAML 표현이다. `$ITEM` 구문은 쿠버네티스에 의미가 있지 않다.
+
+
+### 템플릿에서 매니페스트 생성하기
+
+다음의 셸 스니펫은 `sed` 를 사용하여 루프 변수로 `$ITEM` 문자열을 바꾸고,
+`jobs` 라는 임시 디렉터리에 기록한다. 다음과 같이 실행한다.
+
+```shell
+# 처리할 각 항목에 대해 하나씩, 템플릿을 여러 파일로 확장한다.
+mkdir ./jobs
+for i in apple banana cherry
+do
+  cat job-tmpl.yaml | sed "s/\$ITEM/$i/" > ./jobs/job-$i.yaml
+done
+```
+
+작동하는지 확인한다.
+
+```shell
+ls jobs/
+```
+
+출력 결과는 다음과 비슷하다.
+
+```
+job-apple.yaml
+job-banana.yaml
+job-cherry.yaml
+```
+
+모든 유형의 템플릿 언어(예를 들어, Jinja2, ERB)를 사용하거나,
+프로그램을 작성하여 잡 매니페스트를 생성할 수 있다.
+
+### 매니페스트에서 잡 생성하기
+
+다음으로, 하나의 kubectl 명령으로 모든 잡을 생성한다.
+
+```shell
+kubectl create -f ./jobs
+```
+
+출력 결과는 다음과 비슷하다.
+
+```
+job.batch/process-item-apple created
+job.batch/process-item-banana created
+job.batch/process-item-cherry created
+```
+
+이제, 작업을 확인한다.
+
+```shell
+kubectl get jobs -l jobgroup=jobexample
+```
+
+출력 결과는 다음과 비슷하다.
+
+```
+NAME                  COMPLETIONS   DURATION   AGE
+process-item-apple    1/1           14s        22s
+process-item-banana   1/1           12s        21s
+process-item-cherry   1/1           12s        20s
+```
+
+kubectl 명령에 `-l` 옵션을 사용하면 이 잡 그룹의
+일부인 잡만 선택된다(시스템에서 관련이 없는 다른 잡이 있을 수 있음).
+
+파드도 동일한 {{< glossary_tooltip text="레이블 셀렉터" term_id="selector" >}}를
+사용하여 확인할 수 있다.
+
+
+```shell
+kubectl get pods -l jobgroup=jobexample
+```
+
+출력 결과는 다음과 비슷하다.
+
+```
+NAME                        READY     STATUS      RESTARTS   AGE
+process-item-apple-kixwv    0/1       Completed   0          4m
+process-item-banana-wrsf7   0/1       Completed   0          4m
+process-item-cherry-dnfu9   0/1       Completed   0          4m
+```
+
+이 단일 명령을 사용하여 모든 잡의 출력을 한 번에 확인할 수 있다.
+
+```shell
+kubectl logs -f -l jobgroup=jobexample
+```
+
+출력 결과는 다음과 같아야 한다.
+
+```
+Processing item apple
+Processing item banana
+Processing item cherry
+```
+
+### 정리 {#cleanup-1}
+
+```shell
+# 생성한 잡 제거
+# 클러스터가 자동으로 잡의 파드들을 정리
+kubectl delete job -l jobgroup=jobexample
+```
+
+## 고급 템플릿 파라미터 사용하기
+
+[첫 번째 예제](#템플릿-기반의-잡-생성하기)에서, 템플릿의 각 인스턴스는 하나의
+파라미터를 가지고, 해당 파라미터는 잡의 이름에도 사용되었다. 그러나,
+[이름](/ko/docs/concepts/overview/working-with-objects/names/#names)은
+특정 문자들만 포함하도록 제한된다.
+
+이런 약간 더 복잡한 예제는 [Jinja 템플릿 언어](https://palletsprojects.com/p/jinja/)를
+사용하여 각 잡에 대한 여러 파라미터로 매니페스트를 생성한 다음
+해당 매니페스트에서 오브젝트를 생성한다.
+
+태스크의 이 부분에서는, 한줄 파이썬 스크립트를 사용하여
+매니페스트 집합으로 템플릿을 변환한다.
+
+먼저, 다음의 잡 오브젝트 템플릿을 복사하고 붙여넣기하여, `job.yaml.jinja2` 파일로 저장한다.
+
+
+```liquid
+{%- set params = [{ "name": "apple", "url": "http://dbpedia.org/resource/Apple", },
+                  { "name": "banana", "url": "http://dbpedia.org/resource/Banana", },
+                  { "name": "cherry", "url": "http://dbpedia.org/resource/Cherry" }]
+%}
+{%- for p in params %}
+{%- set name = p["name"] %}
+{%- set url = p["url"] %}
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: jobexample-{{ name }}
+  labels:
+    jobgroup: jobexample
+spec:
+  template:
+    metadata:
+      name: jobexample
+      labels:
+        jobgroup: jobexample
+    spec:
+      containers:
+      - name: c
+        image: busybox
+        command: ["sh", "-c", "echo Processing URL {{ url }} && sleep 5"]
+      restartPolicy: Never
+{%- endfor %}
+```
+
+위의 템플릿은 파이썬 딕셔너리(dicts)로 구성된 항목(1-4행)을 사용하여 각 잡 오브젝트에 대해
+두 개의 파라미터를 정의한다. `for` 루프는 각 파라미터의 집합(나머지 행)에 대해
+하나의 잡 매니페스트를 방출한다.
+
+이 예제는 YAML의 기능에 의존한다. 하나의 YAML 파일은 여러
+문서(이 경우, 쿠버네티스 매니페스트)를 포함할 수 있으며, 행에 있는 `---` 로
+구분된다.
+출력 결과를 `kubectl` 에 직접 파이프를 사용해 잡을 생성할 수 있다.
+
+다음으로, 이 한 줄 파이썬 프로그램을 사용하여 템플릿을 확장한다.
+
+```shell
+alias render_template='python -c "from jinja2 import Template; import sys; print(Template(sys.stdin.read()).render());"'
+```
+
+`render_template` 을 사용해서 파라미터와 템플릿을 쿠버네티스 매니페스트가
+포함된 하나의 YAML 파일로 변환한다.
+
+```shell
+# 앞에서 정의한 앨리어스(alias)가 필요하다
+cat job.yaml.jinja2 | render_template > jobs.yaml
+```
+
+`render_template` 스크립트가 제대로 동작하는지 확인하기 위해 `jobs.yaml` 을
+볼 수 있다.
+
+`render_template` 스크립트가 원하는대로 동작하는 것을 확인했다면,
+스크립트의 출력 결과를 파이프를 사용하여 `kubectl` 에 보낼 수 있다.
+
+```shell
+cat job.yaml.jinja2 | render_template | kubectl apply -f -
+```
+
+쿠버네티스는 생성한 잡을 수락하고 실행한다.
+
+### 정리 {#cleanup-2}
+
+```shell
+# 생성한 잡 제거
+# 클러스터가 자동으로 잡이 있던 파드를 정리
+kubectl delete job -l jobgroup=jobexample
+```
+
+
+<!-- discussion -->
+
+## 실제 워크로드에서 잡 사용하기
+
+실제 유스케이스에서, 각 잡은 동영상의 프레임을 렌더링하거나, 데이터베이스에서 행 범위를
+처리하는 것과 같은 상당한 규모의 계산을 수행한다. 동영상을 렌더링하는 경우 프레임 번호에
+`$ITEM` 을 설정한다. 데이터베이스에서 행을 처리하는
+경우, 처리할 데이터베이스 행의 범위를 나타내도록 `$ITEM` 을 설정한다.
+
+이번 태스크에서, 로그를 가져와 파드에서 출력 결과를 수집하는 명령어를
+실행했다. 실제 유스케이스에서, 잡의 각 파드는 완료하기 전에 출력 결과를
+내구성있는 스토리지에 기록한다. 각 잡에 대해 퍼시스턴트볼륨(PersistentVolume)을
+사용하거나 외장 스토리지 서비스를 사용할 수 있다. 예를 들어, 동영상의 프레임을 렌더링하는 경우,
+HTTP를 사용하여 렌더링된 프레임 데이터를 각 프레임에 대한 다른 URL을 사용해서 URL에  `PUT`
+한다.
+
+## 잡과 파드의 레이블
+
+잡을 생성한 후, 쿠버네티스는 한 잡의 파드를 다른 잡의 파드와 구별하기 위해서
+추가 {{< glossary_tooltip text="레이블" term_id="label" >}}을
+자동으로 추가한다.
+
+이 예시에서, 각 잡과 잡의 파드 템플릿은 `jobgroup=jobexample`
+레이블을 갖는다.
+
+쿠버네티스 자체는 `jobgroup` 이라는 레이블에 신경쓰지 않는다. 템플릿에서
+생성한 모든 잡에 대해 레이블을 설정하면 한번에 모든 잡을 편리하게
+조작할 수 있다.
+[첫 번째 예제](#템플릿-기반의-잡-생성하기)에서 템플릿을 사용해서
+여러 잡을 생성했다. 템플릿은 각 파드도 동일한 레이블을 가질 수 있도록 보장하므로,
+단일 명령어로 이러한 템플릿 기반 잡들의 모든 파드에서 확인할 수 있다.
+
+{{< note >}}
+레이블 키 `jobgroup` 은 특별하거나 예약되어 있지 않다.
+고유한 레이블링 체계를 선택할 수 있다.
+원하는 경우 사용할 수 있는
+[권장 레이블](/ko/docs/concepts/overview/working-with-objects/common-labels/#레이블)이 있다.
+{{< /note >}}
+
+## 대안
+
+많은 수의 잡 오브젝트의 생성을 계획 중이라면, 아마도 다음의 사항을 파악하게 될 것이다.
+
+- 레이블을 사용해도, 너무 많은 잡을 관리하는 것은 번거롭다.
+- 일괄적으로 많은 잡을 생성하는 경우, 쿠버네티스 컨트롤 플레인에
+  높음 부하를 가할 수 있다. 대안으로, 쿠버네티스 API 서버가
+  속도를 제한하여 429 상태의 사용자 요청을 일시적으로 거부할 수 있다.
+- 사용자는 잡의 {{< glossary_tooltip text="리소스 쿼터" term_id="resource-quota" >}}로
+  제한될 수 있다. 한번에 많은 작업을 생성하면 API 서버가 사용자의 요청 중
+  일부를 영구적으로 거부한다.
+
+아주 많은 잡 오브젝트를 생성하지 않고 많은 양의 작업을 처리하는데 사용할 수 있는
+다른 [잡 패턴](/ko/docs/concepts/workloads/controllers/job/#잡-패턴)도
+있다.
+
+잡 오브젝트를 자동으로 관리하기 위해 자체 [컨트롤러](/ko/docs/concepts/architecture/controller/)를
+작성하는 것도 고려할 수 있다.
diff --git a/content/ko/docs/tasks/manage-daemon/update-daemon-set.md b/content/ko/docs/tasks/manage-daemon/update-daemon-set.md
index 925f174206..659836833a 100644
--- a/content/ko/docs/tasks/manage-daemon/update-daemon-set.md
+++ b/content/ko/docs/tasks/manage-daemon/update-daemon-set.md
@@ -10,17 +10,10 @@ weight: 10
 
 이 페이지는 데몬셋에서 롤링 업데이트를 수행하는 방법을 보여준다.
 
-
-
-
 ## {{% heading "prerequisites" %}}
 
 * 데몬셋 롤링 업데이트 기능은 쿠버네티스 버전 1.6 이상에서만 지원된다.
 
-
-
-
-
 <!-- steps -->
 
 ## 데몬셋 업데이트 전략
@@ -164,7 +157,7 @@ kubectl get pods -l name=fluentd-elasticsearch -o wide -n kube-system
 
 {{< note >}}
 삭제된 파드가 컨트롤러에 의해 제어되지 않거나 파드가 복제되지 않은 경우 서비스 중단이
-발생한다. 이 때 [PodDisruptionBudget](/docs/tasks/configure-pod-container/configure-pod-disruption-budget/)정책도 적용되지
+발생한다. 이 때 [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/)정책도 적용되지
 않는다.
 {{< /note >}}
 
@@ -200,5 +193,3 @@ kubectl delete ds fluentd-elasticsearch -n kube-system
 * [태스크: 데몬셋에서 롤백
   수행](/ko/docs/tasks/manage-daemon/rollback-daemon-set/)을 참고한다.
 * [개념: 기존 데몬셋 파드를 채택하기 위한 데몬셋 생성](/ko/docs/concepts/workloads/controllers/daemonset/)을 참고한다.
-
-
diff --git a/content/ko/docs/tasks/manage-hugepages/scheduling-hugepages.md b/content/ko/docs/tasks/manage-hugepages/scheduling-hugepages.md
index 515b9c2cdd..ececc7beee 100644
--- a/content/ko/docs/tasks/manage-hugepages/scheduling-hugepages.md
+++ b/content/ko/docs/tasks/manage-hugepages/scheduling-hugepages.md
@@ -115,4 +115,4 @@ glossary_tooltip text="kubelet" term_id="kubelet" >}} 및 {{<
 glossary_tooltip text="kube-apiserver"
 term_id="kube-apiserver" >}} (`--feature-gates=HugePageStorageMediumSize=true`)의
 `HugePageStorageMediumSize` [기능
-게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 사용하여 활성화할 수 있다.
+게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 사용하여 비활성화할 수 있다.
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md b/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md
index f3b15d3206..26fa2830ff 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/declarative-config.md
@@ -1005,5 +1005,5 @@ template:
 
 * [명령형 커맨드 사용하여 쿠버네티스 오브젝트 관리하기](/ko/docs/tasks/manage-kubernetes-objects/imperative-command/)
 * [구성 파일 사용하여 쿠버네티스 오브젝트 관리하기](/ko/docs/tasks/manage-kubernetes-objects/imperative-config/)
-* [Kubectl 명령어 참조](/docs/reference/generated/kubectl/kubectl/)
+* [Kubectl 명령어 참조](/docs/reference/generated/kubectl/kubectl-commands/)
 * [쿠버네티스 API 참조](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md
index ac7690a325..a10cd29362 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -167,5 +167,5 @@ kubectl create --edit -f /tmp/srv.yaml
 
 * [오브젝트 구성을 이용하여 쿠버네티스 관리하기(명령형)](/ko/docs/tasks/manage-kubernetes-objects/imperative-config/)
 * [오브젝트 구성을 이용하여 쿠버네티스 관리하기(선언형)](/ko/docs/tasks/manage-kubernetes-objects/declarative-config/)
-* [Kubectl 커맨드 참조](/docs/reference/generated/kubectl/kubectl/)
+* [Kubectl 커맨드 참조](/docs/reference/generated/kubectl/kubectl-commands/)
 * [쿠버네티스 API 참조](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md
index 49691c341b..b9c90475d8 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/imperative-config.md
@@ -150,5 +150,5 @@ template:
 
 * [명령형 커맨드를 이용한 쿠버네티스 오브젝트 관리하기](/ko/docs/tasks/manage-kubernetes-objects/imperative-command/)
 * [오브젝트 구성을 이용하여 쿠버네티스 오브젝트 관리하기 (선언형)](/ko/docs/tasks/manage-kubernetes-objects/declarative-config/)
-* [Kubectl 커멘드 참조](/docs/reference/generated/kubectl/kubectl/)
+* [Kubectl 커맨드 참조](/docs/reference/generated/kubectl/kubectl-commands/)
 * [쿠버네티스 API 참조](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
diff --git a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
index 6a45b5a73b..2da789fb0d 100644
--- a/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
+++ b/content/ko/docs/tasks/manage-kubernetes-objects/kustomization.md
@@ -832,6 +832,6 @@ deployment.apps "dev-my-nginx" deleted
 
 
 * [Kustomize](https://github.com/kubernetes-sigs/kustomize)
-* [Kubectl Book](https://kubectl.docs.kubernetes.io)
-* [Kubectl Command Reference](/docs/reference/generated/kubectl/kubectl/)
-* [Kubernetes API Reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
+* [Kubectl 북](https://kubectl.docs.kubernetes.io)
+* [Kubectl 커맨드 참조](/docs/reference/generated/kubectl/kubectl-commands/)
+* [쿠버네티스 API 참조](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/)
diff --git a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index b42f8952b8..73c0310493 100644
--- a/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/ko/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -10,11 +10,9 @@ Horizontal Pod Autoscaler는
 CPU 사용량(또는 베타 지원의 다른 애플리케이션 지원 메트릭)을 관찰하여
 레플리케이션 컨트롤러, 디플로이먼트, 레플리카셋(ReplicaSet) 또는 스테이트풀셋(StatefulSet)의 파드 개수를 자동으로 스케일한다.
 
-이 문서는 php-apache 서버를 대상으로 Horizontal Pod Autoscaler를 동작해보는 예제이다. Horizontal Pod Autoscaler 동작과 관련된 더 많은 정보를 위해서는 [Horizontal Pod Autoscaler 사용자 가이드](/ko/docs/tasks/run-application/horizontal-pod-autoscale/)를 참고하기 바란다.
-
-
-
-
+이 문서는 php-apache 서버를 대상으로 Horizontal Pod Autoscaler를 동작해보는 예제이다.
+Horizontal Pod Autoscaler 동작과 관련된 더 많은 정보를 위해서는
+[Horizontal Pod Autoscaler 사용자 가이드](/ko/docs/tasks/run-application/horizontal-pod-autoscale/)를 참고하기 바란다.
 
 ## {{% heading "prerequisites" %}}
 
@@ -457,12 +455,12 @@ Events:
 ## 부록: 수량
 
 HorizontalPodAutoscaler와 메트릭 API에서 모든 메트릭은
-쿠버네티스에서 사용하는 *수량* 숫자 표기법을 사용한다.
+쿠버네티스에서 사용하는
+{{< glossary_tooltip term_id="quantity" text="수량">}} 숫자 표기법을 사용한다.
 예를 들면, `10500m` 수량은 10진법 `10.5`으로 쓰인다.
 메트릭 API들은 가능한 경우 접미사 없이 정수를 반환하며,
 일반적으로 수량을 밀리단위로 반환한다.
 10진수로 표현했을때, `1`과 `1500m` 또는 `1`과 `1.5` 로 메트릭 값을 나타낼 수 있다.
-더 많은 정보를 위해서는 [수량에 관한 용어집](/docs/reference/glossary?core-object=true#term-quantity) 을 참고하기 바란다.
 
 ## 부록: 다른 가능한 시나리오
 
diff --git a/content/ko/docs/tasks/tls/certificate-rotation.md b/content/ko/docs/tasks/tls/certificate-rotation.md
index 7f7422411c..b23bf2a600 100644
--- a/content/ko/docs/tasks/tls/certificate-rotation.md
+++ b/content/ko/docs/tasks/tls/certificate-rotation.md
@@ -10,7 +10,7 @@ content_type: task
 이 페이지는 kubelet에 대한 인증서 갱신을 활성화하고 구성하는 방법을 보여준다.
 
 
-{{< feature-state for_k8s_version="v1.8" state="beta" >}}
+{{< feature-state for_k8s_version="v1.19" state="stable" >}}
 
 ## {{% heading "prerequisites" %}}
 
@@ -39,13 +39,11 @@ kubelet은 쿠버네티스 API 인증을 위해 인증서를 사용한다.
 `kubelet` 프로세스는 현재 사용 중인 인증서의 만료 시한이 다가옴에 따라
 kubelet이 자동으로 새 인증서를 요청할지 여부를 제어하는
 `--rotate-certificates` 인자를 허용한다.
-인증서 갱신은 베타 기능이므로 기능 플래그는
-`--feature-gates = RotateKubeletClientCertificate=true` 를 사용하여 활성화해야 한다.
 
 
 `kube-controller-manager` 프로세스는 얼마나 오랜 기간 인증서가 유효한지를 제어하는
-`--experimental-cluster-signing-duration` 인자를
-허용한다.
+`--cluster-signing-duration` (1.19 이전은 `--experimental-cluster-signing-duration`)
+인자를 허용한다.
 
 ## 인증서 갱신 구성에 대한 이해
 
@@ -62,7 +60,7 @@ kubectl get csr
 인증서 서명 요청이 특정 기준을 충족하면 컨트롤러 관리자가
 자동으로 승인한 후 상태가 `Approved` 가 된다.
 다음으로, 컨트롤러 관리자는
-`--experimental-cluster-signing-duration` 파라미터에 의해 지정된 기간 동안
+`--cluster-signing-duration` 파라미터에 의해 지정된 기간 동안
 발행된 인증서에 서명하고
 서명된 인증서는 인증서 서명 요청에 첨부된다.
 
@@ -77,7 +75,3 @@ kubelet은 쿠버네티스 API로 서명된 인증서를 가져와서
 kubelet은 쿠버네티스 API로 서명된 새로운 인증서를 가져와서 디스크에 쓴다.
 그런 다음 새로운 인증서를 사용한 재연결을 위해서
 가지고 있는 쿠버네티스 API로의 연결을 업데이트 한다.
-
-
-
-
diff --git a/content/ko/docs/tasks/tools/install-kubectl.md b/content/ko/docs/tasks/tools/install-kubectl.md
index baf003f595..4d65b37503 100644
--- a/content/ko/docs/tasks/tools/install-kubectl.md
+++ b/content/ko/docs/tasks/tools/install-kubectl.md
@@ -9,13 +9,18 @@ card:
 ---
 
 <!-- overview -->
-쿠버네티스 커맨드 라인 도구인 [kubectl](/docs/user-guide/kubectl/)을 사용하면, 쿠버네티스 클러스터에 대해 명령을 실행할 수 있다. kubectl을 사용하여 애플리케이션을 배포하고, 클러스터 리소스를 검사 및 관리하며 로그를 볼 수 있다. kubectl 작업의 전체 목록에 대해서는, [kubectl 개요](/ko/docs/reference/kubectl/overview/)를 참고한다.
+쿠버네티스 커맨드 라인 도구인 [kubectl](/docs/reference/kubectl/kubectl/)을 사용하면,
+쿠버네티스 클러스터에 대해 명령을 실행할 수 있다.
+kubectl을 사용하여 애플리케이션을 배포하고, 클러스터 리소스를 검사 및 관리하며
+로그를 볼 수 있다. kubectl 작업의 전체 목록에 대해서는,
+[kubectl 개요](/ko/docs/reference/kubectl/overview/)를 참고한다.
 
 
 ## {{% heading "prerequisites" %}}
 
-클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다. 예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다. 최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
-
+클러스터의 마이너(minor) 버전 차이 내에 있는 kubectl 버전을 사용해야 한다.
+예를 들어, v1.2 클라이언트는 v1.1, v1.2 및 v1.3의 마스터와 함께 작동해야 한다.
+최신 버전의 kubectl을 사용하면 예기치 않은 문제를 피할 수 있다.
 
 <!-- steps -->
 
@@ -306,7 +311,12 @@ kubectl을 Google Cloud SDK의 일부로 설치할 수 있다.
 
 ## kubectl 구성 확인
 
-kubectl이 쿠버네티스 클러스터를 찾아 접근하려면, [kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)를 사용하여 클러스터를 생성하거나 Minikube 클러스터를 성공적으로 배포할 때 자동으로 생성되는 [kubeconfig 파일](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)이 필요하다. 기본적으로, kubectl 구성은 `~/.kube/config` 에 있다.
+kubectl이 쿠버네티스 클러스터를 찾아 접근하려면,
+[kube-up.sh](https://github.com/kubernetes/kubernetes/blob/master/cluster/kube-up.sh)를
+사용하여 클러스터를 생성하거나 Minikube 클러스터를 성공적으로 배포할 때 자동으로 생성되는
+[kubeconfig 파일](/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/)이
+필요하다.
+기본적으로, kubectl 구성은 `~/.kube/config` 에 있다.
 
 클러스터 상태를 가져와서 kubectl이 올바르게 구성되어 있는지 확인한다.
 
@@ -514,5 +524,6 @@ compinit
 * [Minikube 설치](/ko/docs/tasks/tools/install-minikube/)
 * 클러스터 생성에 대한 자세한 내용은 [시작하기](/ko/docs/setup/)를 참고한다.
 * [애플리케이션을 시작하고 노출하는 방법에 대해 배운다.](/docs/tasks/access-application-cluster/service-access-application-cluster/)
-* 직접 생성하지 않은 클러스터에 접근해야하는 경우, [클러스터 접근 공유 문서](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)를 참고한다.
+* 직접 생성하지 않은 클러스터에 접근해야하는 경우,
+  [클러스터 접근 공유 문서](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)를 참고한다.
 * [kubectl 레퍼런스 문서](/docs/reference/kubectl/kubectl/) 읽기
diff --git a/content/ko/docs/tutorials/clusters/apparmor.md b/content/ko/docs/tutorials/clusters/apparmor.md
index 803b58594c..74008f9961 100644
--- a/content/ko/docs/tutorials/clusters/apparmor.md
+++ b/content/ko/docs/tutorials/clusters/apparmor.md
@@ -1,6 +1,7 @@
 ---
-title: AppArmor
+title: AppArmor를 사용하여 리소스에 대한 컨테이너의 접근 제한
 content_type: tutorial
+weight: 10
 ---
 
 
@@ -77,7 +78,7 @@ AppArmor를 이용하면 컨테이너가 수행할 수 있는 작업을 제한
 
 3. 컨테이너 런타임이 AppArmor을 지원한다. -- 현재 모든 일반적인 쿠버네티스를 지원하는
 {{< glossary_tooltip term_id="docker">}}, {{< glossary_tooltip term_id="cri-o" >}} 또는
-{{< glossary_tooltip term_id="containerd" >}} 와 같은 컨테이너 런타임들은 AppArmor를 지원해야 한다. 
+{{< glossary_tooltip term_id="containerd" >}} 와 같은 컨테이너 런타임들은 AppArmor를 지원해야 한다.
 이 런타임 설명서를 참조해서 클러스터가 AppArmor를 사용하기 위한
 요구 사항을 충족하는지 확인해야 한다.
 
@@ -469,5 +470,3 @@ AppArmor 로그는 `dmesg`에서 보이며, 오류는 보통 시스템 로그나
 
 * [퀵 가이드 AppArmor 프로파일 언어](https://gitlab.com/apparmor/apparmor/wikis/QuickProfileLanguage)
 * [AppArmor 코어 정책 참고](https://gitlab.com/apparmor/apparmor/wikis/Policy_Layout)
-
-
diff --git a/content/ko/docs/tutorials/hello-minikube.md b/content/ko/docs/tutorials/hello-minikube.md
index 35b4365eb2..4a566e3776 100644
--- a/content/ko/docs/tutorials/hello-minikube.md
+++ b/content/ko/docs/tutorials/hello-minikube.md
@@ -118,7 +118,7 @@ Katacode는 무료로 브라우저에서 쿠버네티스 환경을 제공한다.
     ```
 
 {{< note >}}
-    `kubectl` 명령어에 관해 자세히 알기 원하면 [kubectl 개요](/ko/docs/reference/kubectl/overview/)을 살펴보자.
+`kubectl` 명령어에 관해 자세히 알기 원하면 [kubectl 개요](/ko/docs/reference/kubectl/overview/)을 살펴보자.
 {{< /note >}}
 
 ## 서비스 만들기
diff --git a/content/ko/docs/tutorials/kubernetes-basics/explore/explore-intro.html b/content/ko/docs/tutorials/kubernetes-basics/explore/explore-intro.html
index 8fa348393e..6e6eabda96 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/explore/explore-intro.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/explore/explore-intro.html
@@ -29,7 +29,7 @@ weight: 10
 
             <div class="col-md-8">
                 <h2>쿠버네티스 파드</h2>
-                <p>모듈 <a href="/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>에서 배포를 생성했을 때, 쿠버네티스는 여러분의 애플리케이션 인스턴스에 <b>파드</b>를 생성했다. 파드는 하나 또는 그 이상의 애플리케이션 컨테이너 (도커 또는 rkt와 같은)들의 그룹을 나타내는 쿠버네티스의 추상적 개념으로 일부는 컨테이너에 대한 자원을 공유한다. 그 자원은 다음을 포함한다:</p>
+                <p>모듈 <a href="/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/">2</a>에서 배포를 생성했을 때, 쿠버네티스는 여러분의 애플리케이션 인스턴스에 <b>파드</b>를 생성했다. 파드는 하나 또는 그 이상의 애플리케이션 컨테이너 (도커와 같은)들의 그룹을 나타내는 쿠버네티스의 추상적 개념으로 일부는 컨테이너에 대한 자원을 공유한다. 그 자원은 다음을 포함한다:</p>
                 <ul>
                     <li>볼륨과 같은, 공유 스토리지</li>
                     <li>클러스터 IP 주소와 같은, 네트워킹</li>
@@ -51,7 +51,7 @@ weight: 10
                 </div>
                 <div class="content__box content__box_fill">
                         <p><i>
-                          파드는 하나 또는 그 이상의 애플리케이션 컨테이너 (도커 또는 rkt와 같은)들의 그룹이고 공유 스토리지 (볼륨), IP 주소 그리고 그것을 동작시키는 방식에 대한 정보를 포함하고 있다.
+                          파드는 하나 또는 그 이상의 애플리케이션 컨테이너 (도커와 같은)들의 그룹이고 공유 스토리지 (볼륨), IP 주소 그리고 그것을 동작시키는 방식에 대한 정보를 포함하고 있다.
                         </i></p>
                 </div>
             </div>
@@ -79,7 +79,7 @@ weight: 10
                 <p>모든 쿠버네티스 노드는 최소한 다음과 같이 동작한다.</p>
                 <ul>
                     <li>Kubelet은, 쿠버네티스 마스터와 노드 간 통신을 책임지는 프로세스이며, 하나의 머신 상에서 동작하는 파드와 컨테이너를 관리한다.</li>
-                    <li>(도커, rkt)와 같은 컨테이너 런타임은 레지스트리에서 컨테이너 이미지를 가져와 묶여 있는 것을 풀고 애플리케이션을 동작시키는 책임을 맡는다. </li>
+                    <li>컨테이너 런타임(도커와 같은)은 레지스트리에서 컨테이너 이미지를 가져와 묶여 있는 것을 풀고 애플리케이션을 동작시키는 책임을 맡는다. </li>
                 </ul>
 
             </div>
diff --git a/content/ko/docs/tutorials/services/source-ip.md b/content/ko/docs/tutorials/services/source-ip.md
index 1e91a85de7..9d47599589 100644
--- a/content/ko/docs/tutorials/services/source-ip.md
+++ b/content/ko/docs/tutorials/services/source-ip.md
@@ -150,7 +150,7 @@ ip addr
 
 그런 다음 `wget` 을 사용해서 로컬 웹 서버에 쿼리한다.
 ```shell
-# 10.0.170.92를 파드의 IPv4 주소로 변경한다.
+# "10.0.170.92"를 "clusterip"라는 이름의 서비스의 IPv4 주소로 변경한다.
 wget -qO - 10.0.170.92
 ```
 ```
@@ -199,7 +199,7 @@ client_address=10.240.0.3
 
 * 클라이언트는 `node2:nodePort`로 패킷을 보낸다.
 * `node2`는 소스 IP 주소(SNAT)를 패킷 상에서 자신의 IP 주소로 교체한다.
-* `node2`는 대상 IP를 패킷 상에서 파드의 IP로 교체한다.
+* `noee2`는 대상 IP를 패킷 상에서 파드의 IP로 교체한다.
 * 패킷은 node 1로 라우팅 된 다음 엔드포인트로 라우팅 된다.
 * 파드의 응답은 node2로 다시 라우팅된다.
 * 파드의 응답은 클라이언트로 다시 전송된다.
@@ -409,10 +409,10 @@ client_address=198.51.100.79
 끝나는 패킷 전달자를 이용한다.
 
 첫 번째 범주의 로드밸런서는 진짜 클라이언트 IP를 통신하기 위해
-HTTP [Forwarded]](https://tools.ietf.org/html/rfc7239#section-5.2)
+HTTP [Forwarded](https://tools.ietf.org/html/rfc7239#section-5.2)
 또는 [X-FORWARDED-FOR](https://en.wikipedia.org/wiki/X-Forwarded-For)
 헤더 또는
-[proxy protocol](http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt)과
+[프록시 프로토콜](https://www.haproxy.org/download/1.5/doc/proxy-protocol.txt)과
 같은 로드밸런서와 백엔드 간에 합의된 프로토콜을 사용해야 한다.
 두 번째 범주의 로드밸런서는 서비스의 `service.spec.healthCheckNodePort` 필드의 저장된 포트를 가르키는
 HTTP 헬스 체크를 생성하여
diff --git a/content/ko/docs/tutorials/stateful-application/cassandra.md b/content/ko/docs/tutorials/stateful-application/cassandra.md
index ea6b3063cc..33fdcb4dbe 100644
--- a/content/ko/docs/tutorials/stateful-application/cassandra.md
+++ b/content/ko/docs/tutorials/stateful-application/cassandra.md
@@ -7,9 +7,13 @@ weight: 30
 
 
 <!-- overview -->
-이 튜토리얼은 쿠버네티스에서 [아파치 카산드라](http://cassandra.apache.org/)를 실행하는 방법을 소개한다. 데이터베이스인 카산드라는 데이터 내구성을 제공하기 위해 퍼시스턴트 스토리지가 필요하다(애플리케이션 _상태_). 이 예제에서 사용자 지정 카산드라 시드 공급자는 카산드라가 클러스터에 가입할 때 카산드라가 인스턴스를 검색할 수 있도록 한다.
+이 튜토리얼은 쿠버네티스에서 [아파치 카산드라](http://cassandra.apache.org/)를 실행하는 방법을 소개한다.
+데이터베이스인 카산드라는 데이터 내구성을 제공하기 위해 퍼시스턴트 스토리지가 필요하다(애플리케이션 _상태_).
+이 예제에서 사용자 지정 카산드라 시드 공급자는 카산드라가 클러스터에 가입할 때 카산드라가 인스턴스를 검색할 수 있도록 한다.
 
-*스테이트풀셋* 은 상태있는 애플리케이션을 쿠버네티스 클러스터에 쉽게 배포할 수 있게 한다. 이 튜토리얼에서 이용할 기능의 자세한 정보는 [스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)을 참조한다.
+*스테이트풀셋* 은 상태있는 애플리케이션을 쿠버네티스 클러스터에 쉽게 배포할 수 있게 한다.
+이 튜토리얼에서 이용할 기능의 자세한 정보는
+[스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)을 참조한다.
 
 {{< note >}}
 카산드라와 쿠버네티스는 클러스터 맴버라는 의미로 _노드_ 라는 용어를 사용한다. 이
@@ -38,12 +42,17 @@ weight: 30
 
 {{< include "task-tutorial-prereqs.md" >}}
 
-이 튜토리얼을 완료하려면 {{< glossary_tooltip text="파드" term_id="pod" >}}, {{< glossary_tooltip text="서비스" term_id="service" >}}, {{< glossary_tooltip text="스테이트풀셋" term_id="StatefulSet" >}}에 대한 기본 지식이 있어야 한다.
+이 튜토리얼을 완료하려면,
+{{< glossary_tooltip text="파드" term_id="pod" >}},
+{{< glossary_tooltip text="서비스" term_id="service" >}},
+{{< glossary_tooltip text="스테이트풀셋" term_id="StatefulSet" >}}에 대한 기본 지식이 있어야 한다.
 
 ### 추가적인 Minikube 설정 요령
 
 {{< caution >}}
-[Minikube](/docs/getting-started-guides/minikube/)는 1024MiB 메모리와 1개 CPU가 기본 설정이다. 이 튜토리얼에서 Minikube를 기본 리소스 설정으로 실행하면 리소스 부족 오류가 발생한다. 이런 오류를 피하려면 Minikube를 다음 설정으로 실행하자.
+[Minikube](/docs/getting-started-guides/minikube/)는 1024MiB 메모리와 1개 CPU가 기본 설정이다.
+이 튜토리얼에서 Minikube를 기본 리소스 설정으로 실행하면 리소스 부족 오류가
+발생한다. 이런 오류를 피하려면 Minikube를 다음 설정으로 실행하자.
 
 ```shell
 minikube start --memory 5120 --cpus=4
@@ -51,11 +60,11 @@ minikube start --memory 5120 --cpus=4
 {{< /caution >}}
 
 
-
 <!-- lessoncontent -->
 ## 카산드라를 위한 헤드리스 서비스 생성하기 {#creating-a-cassandra-headless-service}
 
-쿠버네티스 에서 {{< glossary_tooltip text="서비스" term_id="service" >}}는 동일 작업을 수행하는 {{< glossary_tooltip text="파드" term_id="pod" >}}의 집합을 기술한다.
+쿠버네티스 에서 {{< glossary_tooltip text="서비스" term_id="service" >}}는 동일 작업을 수행하는
+{{< glossary_tooltip text="파드" term_id="pod" >}}의 집합을 기술한다.
 
 다음의 서비스는 클러스터에서 카산드라 파드와 클라이언트 간에 DNS 찾아보기 용도로 사용한다.
 
@@ -83,14 +92,17 @@ NAME        TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE
 cassandra   ClusterIP   None         <none>        9042/TCP   45s
 ```
 
-이와 다른 응답이라면 서비스 생성에 실패한 것이다. 일반적인 문제에 대한 [서비스 디버깅하기](/docs/tasks/debug-application-cluster/debug-service/)를 읽어보자.
+`cassandra` 서비스가 보이지 않는다면, 이와 다른 응답이라면 서비스 생성에 실패한 것이다. 일반적인 문제에 대한
+[서비스 디버깅하기](/docs/tasks/debug-application-cluster/debug-service/)를
+읽어보자.
 
 ## 카산드라 링을 생성하는 스테이트풀셋 이용하기
 
 스테이트풀셋 매니페스트에는 다음을 포함하는데 3개 파드로 구성된 카산드라 링을 생성한다.
 
 {{< note >}}
-이 예는 Minikube를 위한 기본 프로비저너이다. 다음 스테이트풀셋을 작업하는 클라우드 환경에서 갱신한다.
+이 예는 Minikube를 위한 기본 프로비저너이다.
+다음 스테이트풀셋을 작업하는 클라우드 환경에서 갱신한다.
 {{< /note >}}
 
 {{< codenew file="application/cassandra/cassandra-statefulset.yaml" >}}
@@ -182,12 +194,13 @@ kubectl apply -f cassandra-statefulset.yaml
     kubectl edit statefulset cassandra
     ```
 
-    이 명령은 터미널에서 편집기를 연다. 변경해야할 행은 `replicas` 필드이다. 다음 예제는 스테이트풀셋 파일에서 발췌했다.
+    이 명령은 터미널에서 편집기를 연다. 변경해야할 행은 `replicas` 필드이다.
+    다음 예제는 스테이트풀셋 파일에서 발췌했다.
 
     ```yaml
-    # Please edit the object below. Lines beginning with a '#' will be ignored,
-    # and an empty file will abort the edit. If an error occurs while saving this file will be
-    # reopened with the relevant failures.
+    # 다음의 오브젝트를 수정한다. '#'로 시작하는 행은 무시되고,
+    # 빈 파일은 편집을 중단한다. 저장할 때 오류가 발생하면 이 파일이
+    # 관련 실패와 함께 다시 열린다.
     #
     apiVersion: apps/v1
     kind: StatefulSet
@@ -225,10 +238,12 @@ kubectl apply -f cassandra-statefulset.yaml
 
 ## {{% heading "cleanup" %}}
 
-스테이트풀셋을 삭제하거나 스케일링하는 것은 스테이트풀셋에 연관된 볼륨을 삭제하지 않는다. 당신의 데이터가 스테이트풀셋의 관련된 모든 리소스를 자동으로 제거하는 것보다 더 가치있기에 이 설정은 당신의 안전을 위한 것이다.
+스테이트풀셋을 삭제하거나 스케일링하는 것은 스테이트풀셋에 연관된 볼륨을 삭제하지 않는다.
+당신의 데이터가 스테이트풀셋의 관련된 모든 리소스를 자동으로 제거하는 것보다 더 가치있기에 이 설정은 당신의 안전을 위한 것이다.
 
 {{< warning >}}
-스토리지 클래스와 리클레임 정책에 따라 *퍼시스턴스볼륨클레임* 을 삭제하면 그와 연관된 볼륨도 삭제될 수 있다. 볼륨 요청이 삭제되어도 데이터를 접근할 수 있다고 절대로 가정하지 말자.
+스토리지 클래스와 리클레임 정책에 따라 *퍼시스턴스볼륨클레임* 을 삭제하면 그와 연관된 볼륨도
+삭제될 수 있다. 볼륨 요청이 삭제되어도 데이터를 접근할 수 있다고 절대로 가정하지 말자.
 {{< /warning >}}
 
 1. 다음 명령어(한 줄로 연결된)를 실행하여 카산드라 스테이트풀셋을 모두 제거하자.
@@ -271,6 +286,3 @@ kubectl apply -f cassandra-statefulset.yaml
 * 어떻게 [스테이트풀셋 스케일](/docs/tasks/run-application/scale-stateful-set/)하는지 살펴본다.
 * [*쿠버네티스시드제공자*](https://github.com/kubernetes/examples/blob/master/cassandra/java/src/main/java/io/k8s/cassandra/KubernetesSeedProvider.java)에 대해 더 살펴본다.
 * 커스텀 [시드 제공자 설정](https://git.k8s.io/examples/cassandra/java/README.md)를 살펴본다.
-
-
-
diff --git a/content/ko/docs/tutorials/stateful-application/zookeeper.md b/content/ko/docs/tutorials/stateful-application/zookeeper.md
index a253f04a0b..8e17a85527 100644
--- a/content/ko/docs/tutorials/stateful-application/zookeeper.md
+++ b/content/ko/docs/tutorials/stateful-application/zookeeper.md
@@ -7,25 +7,23 @@ weight: 40
 <!-- overview -->
 이 튜토리얼은 [아파치 ZooKeeper](https://zookeeper.apache.org)
 쿠버네티스에서 [스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)과
-[파드디스룹선버짓(PodDisruptionBudget)](/ko/docs/concepts/workloads/pods/disruptions/#specifying-a-poddisruptionbudget)과
-[파드안티어피니티(PodAntiAffinity)](/ko/docs/user-guide/node-selection/#파드간-어피니티와-안티-어피니티)를 이용한 [Apache Zookeeper](https://zookeeper.apache.org) 실행을 설명한다.
-
+[PodDisruptionBudget](/ko/docs/concepts/workloads/pods/disruptions/#파드-disruption-budgets)과
+[파드안티어피니티(PodAntiAffinity)](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#어피니티-affinity-와-안티-어피니티-anti-affinity)를 이용한 [Apache Zookeeper](https://zookeeper.apache.org) 실행을 설명한다.
 
 ## {{% heading "prerequisites" %}}
 
-
 이 튜토리얼을 시작하기 전에
 다음 쿠버네티스 개념에 친숙해야 한다.
 
--   [파드](/docs/user-guide/pods/single-container/)
+-   [파드](/ko/docs/concepts/workloads/pods/)
 -   [클러스터 DNS](/ko/docs/concepts/services-networking/dns-pod-service/)
 -   [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스)
 -   [퍼시스턴트볼륨](/ko/docs/concepts/storage/volumes/)
 -   [퍼시스턴트볼륨 프로비저닝](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/staging/persistent-volume-provisioning/)
 -   [스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)
--   [파드디스룹션버짓](/ko/docs/concepts/workloads/pods/disruptions/#specifying-a-poddisruptionbudget)
--   [파드안티어피니티](/ko/docs/user-guide/node-selection/#파드간-어피니티와-안티-어피니티)
--   [kubectl CLI](/docs/user-guide/kubectl/)
+-   [PodDisruptionBudget](/ko/docs/concepts/workloads/pods/disruptions/#파드-disruption-budgets)
+-   [파드안티어피니티](/ko/docs/concepts/scheduling-eviction/assign-pod-node/#어피니티-affinity-와-안티-어피니티-anti-affinity)
+-   [kubectl CLI](/docs/reference/kubectl/kubectl/)
 
 최소한 4개의 노드가 있는 클러스터가 필요하며, 각 노드는 적어도 2 개의 CPU와 4 GiB 메모리가 필요하다. 이 튜토리얼에서 클러스터 노드를 통제(cordon)하고 비우게(drain) 할 것이다. **이것은 클러스터를 종료하여 노드의 모든 파드를 퇴출(evict)하는 것으로, 모든 파드는 임시로 언스케줄된다는 의미이다.** 이 튜토리얼을 위해 전용 클러스터를 이용하거나, 다른 테넌트에 간섭을 하는 혼란이 발생하지 않도록 해야 합니다.
 
@@ -42,7 +40,7 @@ weight: 40
 -   어떻게 스테이트풀셋을 이용하여 ZooKeeper 앙상블을 배포하는가.
 -   어떻게 지속적해서 컨피그맵을 이용해서 앙상블을 설정하는가.
 -   어떻게 ZooKeeper 서버 디플로이먼트를 앙상블 안에서 퍼뜨리는가.
--   어떻게 파드디스룹션버짓을 이용하여 계획된 점검 기간 동안 서비스 가용성을 보장하는가.
+-   어떻게 PodDisruptionBudget을 이용하여 계획된 점검 기간 동안 서비스 가용성을 보장하는가.
 
 
 <!-- lessoncontent -->
@@ -63,17 +61,17 @@ ZooKeeper는 전체 상태 머신을 메모리에 보존하고 모든 돌연변
 
 ## ZooKeeper 앙상블 생성하기
 
-아래 메니페스트에는
+아래 매니페스트에는
 [헤드리스 서비스](/ko/docs/concepts/services-networking/service/#헤드리스-headless-서비스),
 [서비스](/ko/docs/concepts/services-networking/service/),
-[파드디스룹션버짓](/ko/docs/concepts/workloads/pods/disruptions//#specifying-a-poddisruptionbudget),
+[PodDisruptionBudget](/ko/docs/concepts/workloads/pods/disruptions/#파드-disruption-budgets),
 [스테이트풀셋](/ko/docs/concepts/workloads/controllers/statefulset/)을 포함한다.
 
 {{< codenew file="application/zookeeper/zookeeper.yaml" >}}
 
 터미널을 열고
 [`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands/#apply) 명령어로
-메니페스트를 생성하자.
+매니페스트를 생성하자.
 
 ```shell
 kubectl apply -f https://k8s.io/examples/application/zookeeper/zookeeper.yaml
@@ -118,7 +116,7 @@ zk-2      1/1       Running   0         40s
 ```
 
 스테이트풀셋 컨트롤러는 3개의 파드를 생성하고, 각 파드는
-[ZooKeeper](http://www-us.apache.org/dist/zookeeper/stable/) 서버를 포함한 컨테이너를 가진다.
+[ZooKeeper](https://www-us.apache.org/dist/zookeeper/stable/) 서버를 포함한 컨테이너를 가진다.
 
 
 ### 리더 선출 촉진
@@ -339,7 +337,7 @@ zk-0      0/1       Terminating   0         11m
 zk-0      0/1       Terminating   0         11m
 ```
 
-`zookeeper.yaml` 메니페스트를 다시 적용한다.
+`zookeeper.yaml` 매니페스트를 다시 적용한다.
 
 ```shell
 kubectl apply -f https://k8s.io/examples/application/zookeeper/zookeeper.yaml
@@ -446,7 +444,7 @@ volumeMounts:
 
 `zk` 스테이트풀셋이 (재)스케줄링될 때 항상 동일한 `퍼시스턴트볼륨`을
 ZooKeeper의 서버 디렉터리에 마운트한다.
-파드를 재스케쥴할 때에도 ZooKeeper의 WAL을 통해 이뤄진 모든 쓰기와
+파드를 재스케줄할 때에도 ZooKeeper의 WAL을 통해 이뤄진 모든 쓰기와
 모든 그 스냅샷도 내구성을 유지한다.
 
 ## 일관된 구성 보장하기
@@ -456,7 +454,7 @@ ZooKeeper의 서버 디렉터리에 마운트한다.
 ZooKeeper 앙상블에 서버는 리더 선출과 쿼럼을 구성하기 위한 일관된 설정이 필요하다.
 또한 Zab 프로토콜의 일관된 설정도
 네트워크에 걸쳐 올바르게 동작하기 위해서
-필요하다. 이 예시에서는 메니페스트에 구성을 직접 포함시켜서 일관된 구성을
+필요하다. 이 예시에서는 매니페스트에 구성을 직접 포함시켜서 일관된 구성을
 달성한다.
 
 `zk` 스테이트풀셋을 살펴보자.
@@ -495,7 +493,7 @@ ZooKeeper 서버를 시작하는데 사용한 명령어는 커맨드라인 파
 ### 로깅 설정하기
 
 `zkGenConfig.sh` 스크립트로 생성된 파일 중 하나는 ZooKeeper의 로깅을 제어한다.
-ZooKeeper는 [Log4j](http://logging.apache.org/log4j/2.x/)를 이용하며
+ZooKeeper는 [Log4j](https://logging.apache.org/log4j/2.x/)를 이용하며
 기본 로깅 구성으로는 시간과 파일 크기 기준의 롤링 파일 어펜더를 사용한다.
 
  `zk` `스테이트풀셋`의 한 파드에서 로깅 설정을 살펴보는 아래 명령어를 이용하자.
@@ -517,7 +515,10 @@ log4j.appender.CONSOLE.layout=org.apache.log4j.PatternLayout
 log4j.appender.CONSOLE.layout.ConversionPattern=%d{ISO8601} [myid:%X{myid}] - %-5p [%t:%C{1}@%L] - %m%n
 ```
 
-이는 컨테이너 내에서 안전하게 로깅하는 가장 단순한 방법이다. 표준 출력으로 애플리케이션 로그를 작성하면, 쿠버네티스는 로그 로테이션을 처리한다. 또한 쿠버네티스는 애플리케이션이 표준 출력과 표준 오류에 쓰인 로그로 인하여 로컬 저장 미디어가 고갈되지 않도록 보장하는 정상적인 보존 정책을 구현한다.
+이는 컨테이너 내에서 안전하게 로깅하는 가장 단순한 방법이다.
+표준 출력으로 애플리케이션 로그를 작성하면, 쿠버네티스는 로그 로테이션을 처리한다.
+또한 쿠버네티스는 애플리케이션이 표준 출력과 표준 오류에 쓰인 로그로 인하여
+로컬 저장 미디어가 고갈되지 않도록 보장하는 정상적인 보존 정책을 구현한다.
 
 파드의 마지막 20줄의 로그를 가져오는 [`kubectl logs`](/docs/reference/generated/kubectl/kubectl-commands/#logs) 명령을 이용하자.
 
@@ -787,7 +788,7 @@ zk-0      1/1       Running   1         1h
 
 ### 준비도 테스트
 
-준비도는 활성도와 동일하지 않다. 프로세스가 살아 있다면, 스케쥴링되고 건강하다.
+준비도는 활성도와 동일하지 않다. 프로세스가 살아 있다면, 스케줄링되고 건강하다.
 프로세스가 준비되면 입력을 처리할 수 있다. 활성도는 필수적이나 준비도의 조건으로는
 충분하지 않다. 몇몇 경우
 특별히 초기화와 종료 시에 프로세스는 살아있지만
@@ -796,7 +797,7 @@ zk-0      1/1       Running   1         1h
 준비도 검사를 지정하면, 쿠버네티스는 준비도가 통과할 때까지
 애플리케이션 프로세스가 네트워크 트래픽을 수신하지 않게 한다.
 
-ZooKeeper 서버에서는 준비도가 활성도를 내포한다. 그러므로 `zookeeper.yaml` 메니페스트에서
+ZooKeeper 서버에서는 준비도가 활성도를 내포한다. 그러므로 `zookeeper.yaml` 매니페스트에서
 준비도 검사는 활성도 검사와 동일하다.
 
 ```yaml
@@ -823,7 +824,9 @@ ZooKeeper는 변조된 데이터를 성공적으로 커밋하기 위한 서버
 중단을 방지하기 위해 개별 시스템의 손실로 인해 모범 사례에서는 동일한 시스템에
 여러 인스턴스의 응용 프로그램을 함께 배치하는 것을 배제한다.
 
-기본적으로 쿠버네티스는 동일 노드상에 `스테이트풀셋`의 파드를 위치시킬 수 있다. 생성한 3개의 서버 앙상블에서 2개의 서버가 같은 노드에 있다면, 그 노드는 실패하고 ZooKeeper 서비스 클라이언트는 그 파드들의 최소 하나가 재스케쥴링될 때까지 작동 중단을 경험할 것이다.
+기본적으로 쿠버네티스는 동일 노드상에 `스테이트풀셋`의 파드를 위치시킬 수 있다.
+생성한 3개의 서버 앙상블에서 2개의 서버가 같은 노드에 있다면, 그 노드는 실패하고
+ZooKeeper 서비스 클라이언트는 그 파드들의 최소 하나가 재스케줄링될 때까지 작동 중단을 경험할 것이다.
 
 노드 실패하는 사건 중에도 중요 시스템의 프로세스가 재스케줄될 수 있게
 항상 추가적인 용량을 프로비전해야 한다. 그렇게 하면 쿠버네티스 스케줄러가
@@ -909,7 +912,7 @@ zk-pdb    N/A             1                 1
 kubectl get pods -w -l app=zk
 ```
 
-다른 터미널에서 현재 스케쥴되는 파드의 노드를 살펴보자.
+다른 터미널에서 현재 스케줄되는 파드의 노드를 살펴보자.
 
 ```shell
 for i in 0 1 2; do kubectl get pod zk-$i --template {{.spec.nodeName}}; echo ""; done
@@ -921,7 +924,7 @@ kubernetes-node-ixsl
 kubernetes-node-i4c4
 ```
 
-`zk-0`파드가 스케쥴되는 노드를 통제하기 위해
+`zk-0`파드가 스케줄되는 노드를 통제하기 위해
 [`kubectl drain`](/docs/reference/generated/kubectl/kubectl-commands/#drain)를 이용하자.
 
 ```shell
@@ -937,7 +940,7 @@ node "kubernetes-node-group-pb41" drained
 ```
 
 클러스터에 4개 노드가 있기 때문에 `kubectl drain`이 성공하여
-`zk-0`을 다른 노드로 재스케쥴링 된다.
+`zk-0`을 다른 노드로 재스케줄링 된다.
 
 ```
 NAME      READY     STATUS    RESTARTS   AGE
@@ -957,7 +960,7 @@ zk-0      1/1       Running   0         1m
 ```
 
 계속해서 `스테이트풀셋`의 파드를 첫 터미널에서 지켜보고
-`zk-1` 이 스케쥴된 노드를 비워보자.
+`zk-1` 이 스케줄된 노드를 비워보자.
 
 ```shell
 kubectl drain $(kubectl get pod zk-1 --template {{.spec.nodeName}}) --ignore-daemonsets --force --delete-local-data "kubernetes-node-ixsl" cordoned
@@ -969,7 +972,8 @@ pod "zk-1" deleted
 node "kubernetes-node-ixsl" drained
 ```
 
-`zk-1` 파드는 스케쥴되지 않는데 이는 `zk` `스테이트풀셋`이 오직 2개 노드가 스케쥴되도록 파드를 위치시키는 것을 금하는 `파드안티어피니티` 규칙을 포함하였기 때문이고 그 파드는 Pending 상태로 남을 것이다.
+`zk-1` 파드는 스케줄되지 않는데 이는 `zk` `StatefulSet`이 오직 2개 노드가 스케줄되도록 파드를 위치시키는 것을 금하는
+`PodAntiAffinity` 규칙을 포함하였기 때문이고 그 파드는 Pending 상태로 남을 것이다.
 
 ```shell
 kubectl get pods -w -l app=zk
@@ -1051,7 +1055,7 @@ kubectl uncordon kubernetes-node-pb41
 node "kubernetes-node-pb41" uncordoned
 ```
 
-`zk-1`은 이 노드에서 재스케쥴된다. `zk-1`이 Running과 Ready가 될 때까지 기다리자.
+`zk-1`은 이 노드에서 재스케줄된다. `zk-1`이 Running과 Ready가 될 때까지 기다리자.
 
 ```shell
 kubectl get pods -w -l app=zk
@@ -1083,7 +1087,7 @@ zk-1      0/1       Running   0         13m
 zk-1      1/1       Running   0         13m
 ```
 
-`zk-2`가 스케쥴된 노드를 비워보자.
+`zk-2`가 스케줄된 노드를 비워보자.
 
 ```shell
 kubectl drain $(kubectl get pod zk-2 --template {{.spec.nodeName}}) --ignore-daemonsets --force --delete-local-data
@@ -1111,7 +1115,10 @@ kubectl uncordon kubernetes-node-ixsl
 node "kubernetes-node-ixsl" uncordoned
 ```
 
-`kubectl drain`을 `PodDisruptionBudget`과 결합하면 유지보수 중에도 서비스를 가용하게 할 수 있다. drain으로 노드를 통제하고 유지보수를 위해 노드를 오프라인하기 전에 파드를 추출하기 위해 사용한다면 서비스는 혼란 예산을 표기한 서비스는 그 예산이 존중은 존중될 것이다. 파드가 즉각적으로 재스케줄 할 수 있도록 항상 중요 서비스를 위한 추가 용량을 할당해야 한다.
+`kubectl drain`을 `PodDisruptionBudget`과 결합하면 유지보수 중에도 서비스를 가용하게 할 수 있다.
+drain으로 노드를 통제하고 유지보수를 위해 노드를 오프라인하기 전에 파드를 추출하기 위해 사용한다면
+서비스는 혼란 예산을 표기한 서비스는 그 예산이 존중은 존중될 것이다.
+파드가 즉각적으로 재스케줄 할 수 있도록 항상 중요 서비스를 위한 추가 용량을 할당해야 한다.
 
 
 ## {{% heading "cleanup" %}}
diff --git a/content/ko/examples/application/job/job-tmpl.yaml b/content/ko/examples/application/job/job-tmpl.yaml
new file mode 100644
index 0000000000..790025b38b
--- /dev/null
+++ b/content/ko/examples/application/job/job-tmpl.yaml
@@ -0,0 +1,18 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: process-item-$ITEM
+  labels:
+    jobgroup: jobexample
+spec:
+  template:
+    metadata:
+      name: jobexample
+      labels:
+        jobgroup: jobexample
+    spec:
+      containers:
+      - name: c
+        image: busybox
+        command: ["sh", "-c", "echo Processing item $ITEM && sleep 5"]
+      restartPolicy: Never
diff --git a/content/ko/examples/service/networking/external-lb.yaml b/content/ko/examples/service/networking/external-lb.yaml
new file mode 100644
index 0000000000..adcf7a2fd0
--- /dev/null
+++ b/content/ko/examples/service/networking/external-lb.yaml
@@ -0,0 +1,10 @@
+apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: external-lb
+spec:
+  controller: example.com/ingress-controller
+  parameters:
+    apiGroup: k8s.example.com
+    kind: IngressParameters
+    name: external-lb
diff --git a/content/ko/examples/service/networking/ingress-resource-backend.yaml b/content/ko/examples/service/networking/ingress-resource-backend.yaml
new file mode 100644
index 0000000000..87b6bbd0f3
--- /dev/null
+++ b/content/ko/examples/service/networking/ingress-resource-backend.yaml
@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-resource-backend
+spec:
+  defaultBackend:
+    resource:
+      apiGroup: k8s.example.com
+      kind: StorageBucket
+      name: static-assets
+  rules:
+    - http:
+        paths:
+          - path: /icons
+            pathType: ImplementationSpecific
+            backend:
+              resource:
+                apiGroup: k8s.example.com
+                kind: StorageBucket
+                name: icon-assets
diff --git a/content/ko/examples/service/networking/ingress-wildcard-host.yaml b/content/ko/examples/service/networking/ingress-wildcard-host.yaml
new file mode 100644
index 0000000000..2be7016706
--- /dev/null
+++ b/content/ko/examples/service/networking/ingress-wildcard-host.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-wildcard-host
+spec:
+  rules:
+  - host: "foo.bar.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/bar"
+        backend:
+          service:
+            name: service1
+            port:
+              number: 80
+  - host: "*.foo.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/foo"
+        backend:
+          service:
+            name: service2
+            port:
+              number: 80
diff --git a/content/ko/examples/service/networking/ingress.yaml b/content/ko/examples/service/networking/ingress.yaml
deleted file mode 100644
index 56a0d5138f..0000000000
--- a/content/ko/examples/service/networking/ingress.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: networking.k8s.io/v1beta1
-kind: Ingress
-metadata:
-  name: test-ingress
-spec:
-  backend:
-    serviceName: testsvc
-    servicePort: 80
-
diff --git a/content/ko/examples/service/networking/minimal-ingress.yaml b/content/ko/examples/service/networking/minimal-ingress.yaml
new file mode 100644
index 0000000000..76640b9447
--- /dev/null
+++ b/content/ko/examples/service/networking/minimal-ingress.yaml
@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: minimal-ingress
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  rules:
+  - http:
+      paths:
+      - path: /testpath
+        pathType: Prefix
+        backend:
+          service:
+            name: test
+            port:
+              number: 80
diff --git a/content/ko/examples/service/networking/name-virtual-host-ingress-no-third-host.yaml b/content/ko/examples/service/networking/name-virtual-host-ingress-no-third-host.yaml
new file mode 100644
index 0000000000..16a560b1ff
--- /dev/null
+++ b/content/ko/examples/service/networking/name-virtual-host-ingress-no-third-host.yaml
@@ -0,0 +1,35 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: name-virtual-host-ingress-no-third-host
+spec:
+  rules:
+  - host: first.bar.com
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: service1
+            port:
+              number: 80
+  - host: second.bar.com
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: service2
+            port:
+              number: 80
+  - http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: service3
+            port:
+              number: 80
diff --git a/content/ko/examples/service/networking/name-virtual-host-ingress.yaml b/content/ko/examples/service/networking/name-virtual-host-ingress.yaml
new file mode 100644
index 0000000000..213a73d261
--- /dev/null
+++ b/content/ko/examples/service/networking/name-virtual-host-ingress.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: name-virtual-host-ingress
+spec:
+  rules:
+  - host: foo.bar.com
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: service1
+            port:
+              number: 80
+  - host: bar.foo.com
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: service2
+            port:
+              number: 80
diff --git a/content/ko/examples/service/networking/simple-fanout-example.yaml b/content/ko/examples/service/networking/simple-fanout-example.yaml
new file mode 100644
index 0000000000..19fef9455b
--- /dev/null
+++ b/content/ko/examples/service/networking/simple-fanout-example.yaml
@@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: simple-fanout-example
+spec:
+  rules:
+  - host: foo.bar.com
+    http:
+      paths:
+      - path: /foo
+        pathType: Prefix
+        backend:
+          service:
+            name: service1
+            port:
+              number: 4200
+      - path: /bar
+        pathType: Prefix
+        backend:
+          service:
+            name: service2
+            port:
+              number: 8080
diff --git a/content/ko/examples/service/networking/test-ingress.yaml b/content/ko/examples/service/networking/test-ingress.yaml
new file mode 100644
index 0000000000..acd384ab56
--- /dev/null
+++ b/content/ko/examples/service/networking/test-ingress.yaml
@@ -0,0 +1,10 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: test-ingress
+spec:
+  defaultBackend:
+    service:
+      name: test
+      port:
+        number: 80
diff --git a/content/ko/examples/service/networking/tls-example-ingress.yaml b/content/ko/examples/service/networking/tls-example-ingress.yaml
new file mode 100644
index 0000000000..fe5d52a0cb
--- /dev/null
+++ b/content/ko/examples/service/networking/tls-example-ingress.yaml
@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: tls-example-ingress
+spec:
+  tls:
+  - hosts:
+      - https-example.foo.com
+    secretName: testsecret-tls
+  rules:
+  - host: https-example.foo.com
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: service1
+            port:
+              number: 80

From 2001a7df2b455ab5339a9b65bd797f1bdba4e0e9 Mon Sep 17 00:00:00 2001
From: June Yi <gochist@gmail.com>
Date: Fri, 11 Sep 2020 23:34:22 +0900
Subject: [PATCH 287/496] Resolve conflicts on the Ko l10n milestone branch

---
 .../container-runtimes.md                     | 217 ++++++++++++++----
 1 file changed, 166 insertions(+), 51 deletions(-)

diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index fe955eb75d..aa21c110d4 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -68,7 +68,7 @@ kubelet을 재시작 하는 것은 에러를 해결할 수 없을 것이다.
 시스템에 도커를 설치하기 위해서 아래의 커맨드들을 사용한다.
 
 {{< tabs name="tab-cri-docker-installation" >}}
-{{% tab name="Ubuntu 16.04+" %}}
+{{< tab name="Ubuntu 16.04+" >}}
 
 ```shell
 # (도커 CE 설치)
@@ -122,8 +122,8 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
+{{< /tab >}}
+{{< tab name="CentOS/RHEL 7.4+" >}}
 
 ```shell
 # (도커 CE 설치)
@@ -177,7 +177,7 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{% /tab %}}
+{{< /tab >}}
 {{< /tabs >}}
 
 부팅 시 도커 서비스를 시작하려면, 다음 명령을 실행한다.
@@ -217,73 +217,157 @@ sysctl --system
 ```
 
 {{< tabs name="tab-cri-cri-o-installation" >}}
-{{% tab name="Debian" %}}
+{{< tab name="Debian" >}}
 
-```shell
-# Debian 개발 배포본(Unstable/Sid)
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_Unstable/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_Unstable/Release.key -O- | sudo apt-key add -
-```
+다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
 
-```shell
-# Debian Testing
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_Testing/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_Testing/Release.key -O- | sudo apt-key add -
-```
+| 운영 체제          | $OS               |
+| ---------------- | ----------------- |
+| Debian Unstable  | `Debian_Unstable` |
+| Debian Testing   | `Debian_Testing`  |
 
-```shell
-# Debian 10
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_10/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_10/Release.key -O- | sudo apt-key add -
-```
+<br />
+그런 다음, `$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+사용자의 설치를 특정 릴리스에 고정할 수 있다.
+버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
+<br />
 
+그런 다음, 아래를 실행한다.
 ```shell
-# Raspbian 10
-echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Raspbian_10/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Raspbian_10/Release.key -O- | sudo apt-key add -
-```
+echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
+echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
 
-그리고 다음과 같이 CRI-O 설치한다.
-```shell
-sudo apt-get install cri-o-1.17
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | apt-key add -
+
+apt-get update
+apt-get install cri-o cri-o-runc
 ```
+<<<<<<< HEAD
+{{< /tab >}}
+
+{{< tab name="Ubuntu 18.04, 19.04 and 19.10" >}}
+=======
+<<<<<<< HEAD
 {{% /tab %}}
 
 {{% tab name="Ubuntu 18.04, 19.04 and 19.10" %}}
+=======
 
-```shell
-#  패키지 리포지터리 설정
-. /etc/os-release
-sudo sh -c "echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/x${NAME}_${VERSION_ID}/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list"
-wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/x${NAME}_${VERSION_ID}/Release.key -O- | sudo apt-key add -
-sudo apt-get update
-```
+{{% /tab %}}
+>>>>>>> upstream/dev-1.19-ko.1
 
+{{% tab name="Ubuntu" %}}
+
+다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
+
+| 운영 체제          | $OS               |
+| ---------------- | ----------------- |
+| Ubuntu 20.04     | `xUbuntu_20.04`   |
+| Ubuntu 19.10     | `xUbuntu_19.10`   |
+| Ubuntu 19.04     | `xUbuntu_19.04`   |
+| Ubuntu 18.04     | `xUbuntu_18.04`   |
+
+<br />
+그런 다음, `$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+사용자의 설치를 특정 릴리스에 고정할 수 있다.
+버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
+<br />
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
+
+그런 다음, 아래를 실행한다.
 ```shell
-# CRI-O 설치
-sudo apt-get install cri-o-1.17
+echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
+echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
+
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | apt-key add -
+
+apt-get update
+apt-get install cri-o cri-o-runc
 ```
 {{% /tab %}}
 
+{{% tab name="CentOS" %}}
+
+다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
+
+| 운영 체제          | $OS               |
+| ---------------- | ----------------- |
+| Centos 8         | `CentOS_8`        |
+| Centos 8 Stream  | `CentOS_8_Stream` |
+| Centos 7         | `CentOS_7`        |
+
+<br />
+그런 다음, `$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+사용자의 설치를 특정 릴리스에 고정할 수 있다.
+버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
+<br />
+
+그런 다음, 아래를 실행한다.
+```shell
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/devel:kubic:libcontainers:stable.repo
+curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
+yum install cri-o
+```
+<<<<<<< HEAD
+{{< /tab >}}
+
+{{< tab name="CentOS/RHEL 7.4+" >}}
+=======
+<<<<<<< HEAD
+{{% /tab %}}
+
 {{% tab name="CentOS/RHEL 7.4+" %}}
+=======
 
-```shell
-# 선행 조건 설치
-curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/CentOS_7/devel:kubic:libcontainers:stable.repo
-curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:{{< skew latestVersion >}}.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:{{< skew latestVersion >}}/CentOS_7/devel:kubic:libcontainers:stable:cri-o:{{< skew latestVersion >}}.repo
-```
-
-```shell
-# CRI-O 설치
-yum install -y cri-o
-```
+{{% /tab %}}
 
 {{% tab name="openSUSE Tumbleweed" %}}
+>>>>>>> upstream/dev-1.19-ko.1
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 
 ```shell
 sudo zypper install cri-o
 ```
 {{% /tab %}}
+{{% tab name="Fedora" %}}
+
+`$VERSION` 을 사용자의 쿠버네티스 버전과 일치하는 CRI-O 버전으로 설정한다.
+예를 들어, CRI-O 1.18을 설치하려면, `VERSION=1.18` 로 설정한다.
+
+사용할 수 있는 버전을 찾으려면 다음을 실행한다.
+```shell
+dnf module list cri-o
+```
+CRI-O는 Fedora에서 특정 릴리스를 고정하여 설치하는 방법은 지원하지 않는다.
+
+<<<<<<< HEAD
+{{< tab name="openSUSE Tumbleweed" >}}
+=======
+<<<<<<< HEAD
+{{% tab name="openSUSE Tumbleweed" %}}
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
+
+=======
+그런 다음, 아래를 실행한다.
+>>>>>>> upstream/dev-1.19-ko.1
+```shell
+dnf module enable cri-o:$VERSION
+dnf install cri-o
+```
+<<<<<<< HEAD
+{{< /tab >}}
+=======
+<<<<<<< HEAD
+=======
+
+>>>>>>> upstream/dev-1.19-ko.1
+{{% /tab %}}
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### CRI-O 시작
@@ -326,7 +410,7 @@ sysctl --system
 ### containerd 설치
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{% tab name="Ubuntu 16.04" %}}
+{{< tab name="Ubuntu 16.04" >}}
 
 ```shell
 # (containerd 설치)
@@ -363,8 +447,8 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-{{% /tab %}}
-{{% tab name="CentOS/RHEL 7.4+" %}}
+{{< /tab >}}
+{{< tab name="CentOS/RHEL 7.4+" >}}
 
 ```shell
 # (containerd 설치)
@@ -395,7 +479,40 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
+<<<<<<< HEAD
+{{< /tab >}}
+=======
+<<<<<<< HEAD
+=======
+{{< /tab >}}
+{{% tab name="윈도우 (PowerShell)" %}}
+```powershell
+# (containerd 설치)
+# containerd 다운로드
+cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.0-beta.2/containerd-1.4.0-beta.2-windows-amd64.tar.gz
+cmd /c tar xvf .\containerd-1.4.0-beta.2-windows-amd64.tar.gz
+```
+
+```powershell
+# 압축을 풀고 구성
+Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
+cd $Env:ProgramFiles\containerd\
+.\containerd.exe config default | Out-File config.toml -Encoding ascii
+
+# 구성을 검토한다. 설정에 따라 아래를 조정할 수 있다.
+# - sandbox_image (쿠버네티스 pause 이미지)
+# - cni bin_dir 및 conf_dir 위치
+Get-Content config.toml
+```
+
+```powershell
+# containerd 시작
+.\containerd.exe --register-service
+Start-Service containerd
+```
+>>>>>>> upstream/dev-1.19-ko.1
 {{% /tab %}}
+>>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### systemd
@@ -407,5 +524,3 @@ kubeadm을 사용하는 경우에도 마찬가지로, 수동으로
 ## 다른 CRI 런타임: frakti
 
 자세한 정보는 [Frakti 빠른 시작 가이드](https://github.com/kubernetes/frakti#quickstart)를 참고한다.
-
-

From a6599ab7d11632da4a1f7207c1d5f095c2b916ef Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Fri, 11 Sep 2020 19:55:11 -0400
Subject: [PATCH 288/496] minor cleanup, format notes

---
 .../docs/reference/using-api/api-overview.md  | 64 ++++++++++---------
 1 file changed, 34 insertions(+), 30 deletions(-)

diff --git a/content/en/docs/reference/using-api/api-overview.md b/content/en/docs/reference/using-api/api-overview.md
index 529c6fc799..ca777b15c7 100644
--- a/content/en/docs/reference/using-api/api-overview.md
+++ b/content/en/docs/reference/using-api/api-overview.md
@@ -13,11 +13,13 @@ card:
 ---
 
 <!-- overview -->
-This page provides an overview of the Kubernetes API. 
 
+This page provides an overview of the Kubernetes API.
 
 <!-- body -->
-The REST API is the fundamental fabric of Kubernetes. All operations and communications between components, and external user commands are REST API calls that the API Server handles. Consequently, everything in the Kubernetes
+
+The REST API is the fundamental fabric of Kubernetes. All operations and communications between components
+and external user commands are REST API calls that the API Server handles. Consequently, everything in the Kubernetes
 platform is treated as an API object and has a corresponding entry in the
 [API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/).
 
@@ -38,12 +40,12 @@ multiple API versions, each at a different API path. For example: `/api/v1` or
 The version is set at the API level rather than at the resource or field level to:
 
 - Ensure that the API presents a clear and consistent view of system resources and behavior.
-- Enable control access to end-of-life and/or experimental APIs.
+- Enable control access to deprecated or experimental APIs.
 
 The JSON and Protobuf serialization schemas follow the same guidelines for schema changes. The following descriptions cover both formats.
 
 {{< note >}}
-The API versioning and software versioning are indirectly related.  The [API and release
+The API versioning and software versioning are indirectly related. The [API and release
 versioning proposal](https://git.k8s.io/community/contributors/design-proposals/release/versioning.md) describes the relationship between API versioning and software versioning.
 {{< /note >}}
 
@@ -56,53 +58,55 @@ Here's a summary of each level:
   - The software may contain bugs. Enabling a feature may expose bugs. A feature may be disabled by default.
   - The support for a feature may be dropped at any time without notice.
   - The API may change in incompatible ways in a later software release without notice.
-  - The software is recommended for use only in short-lived testing clusters, due to increased risk of bugs and lack of  long-term support.
-  
+  - The software is recommended for use only in short-lived testing clusters due to increased risk of bugs
+    and lack of long-term support.
+
 - Beta:
   - The version names contain `beta` (for example, `v2beta3`).
   - The software is well tested. Enabling a feature is considered safe. Features are enabled by default.
   - The support for a feature will not be dropped, though the details may change.
-  - The schema and/or semantics of objects may change in incompatible ways in a subsequent beta or stable release. When this happens, migration instructions are provided.  This may require deleting, editing, and re-creating
-    API objects. The editing process may require some thought. This may require downtime for applications that rely on the feature.
-  - The software is recommended for only non-business-critical uses because of potential for incompatible changes in subsequent releases. If you have multiple clusters which can be upgraded independently, you may be able to relax this restriction.
-  
- {{< note >}}
-Try the beta features and provide feedback. After the features exit beta, it may not be practical to make more changes.
- {{< /note >}}
-  
+  - The schema or semantics of objects may change in incompatible ways in a subsequent beta or stable release.
+    When this happens, migration instructions are provided. Schema changes may require deleting, editing,
+    or recreating API objects. The editing process may not be straightforward. Migration may require
+    downtime for applications that rely on the feature.
+  - The software is not recommended for production uses. Subsequent releases may introduce
+    incompatible changes. If you have multiple clusters which can be upgraded independently,
+    you may be able to relax this restriction.
+  - Try the beta features and provide feedback. After the features exit beta, it may not be practical
+    to make more changes.
+
 - Stable:
   - The version name is `vX` where `X` is an integer.
   - The stable versions of features appear in released software for many subsequent versions.
 
 ## API groups
 
-[*API groups*](https://git.k8s.io/community/contributors/design-proposals/api-machinery/api-group.md) make it easier to extend the Kubernetes API. The API group is specified in a REST path and in the `apiVersion` field of a serialized object.
+[API groups](https://git.k8s.io/community/contributors/design-proposals/api-machinery/api-group.md) make it easier to extend the Kubernetes API. The API group is specified in a REST path and in the `apiVersion` field of a serialized object.
 
 Currently, there are several API groups in use:
 
-*  The *core* (also called *legacy*) group, which is at REST path `/api/v1` and is not specified as part of the `apiVersion` field, for example, `apiVersion: v1`.
-*  The named groups are at REST path `/apis/$GROUP_NAME/$VERSION`, and use `apiVersion: $GROUP_NAME/$VERSION`
-   (for example, `apiVersion: batch/v1`). You can find the full list of supported API groups in [Kubernetes API reference](/docs/reference/).
+- The *core* (also called *legacy*) group is found at REST path `/api/v1`. The core group is not specified
+  as part of the `apiVersion` field, for example, `apiVersion: v1`.
+- The named groups are at REST path `/apis/$GROUP_NAME/$VERSION` and use `apiVersion: $GROUP_NAME/$VERSION`
+  (for example, `apiVersion: batch/v1`). You can find the full list of supported API groups in
+  [Kubernetes API reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/).
 
 The two paths that support extending the API with [custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/) are:
 
- - [CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
-   for basic CRUD needs.
- - [aggregator](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md) for a full set of Kubernetes API semantics to implement their own apiserver.
- 
+- [CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
+  for basic CRUD needs.
+- [aggregator](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md) for a full set of Kubernetes API semantics to implement their own API server.
 
 ## Enabling or disabling API groups
 
-Certain resources and API groups are enabled by default. You can enable or disable them by setting `--runtime-config`
-on the apiserver. `--runtime-config` accepts comma separated values. For example:
+Certain resources and API groups are enabled by default. You can enable or disable them by
+setting `--runtime-config` on the API server. The `--runtime-config` flag accepts comma separated
+key=value pairs describing the runtime configuration of the API server. For example:
 
- - to disable batch/v1, set `--runtime-config=batch/v1=false`
- - to enable batch/v2alpha1, set `--runtime-config=batch/v2alpha1`
-
-The flag accepts comma separated set of key=value pairs describing runtime configuration of the apiserver.
+- to disable batch/v1, set `--runtime-config=batch/v1=false`
+- to enable batch/v2alpha1, set `--runtime-config=batch/v2alpha1`
 
 {{< note >}}
-When you enable or disable groups or resources, you need to restart the apiserver and controller-manager
+When you enable or disable groups or resources, you need to restart the API server and controller-manager
 to pick up the `--runtime-config` changes.
 {{< /note >}}
-

From c63b4454ad3ed618a8ee1e371c9e526ca2244194 Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Sat, 12 Sep 2020 13:04:31 +0900
Subject: [PATCH 289/496] Fix broken layout for tabs on Container runtimes page
 in Korean

---
 .../setup/production-environment/container-runtimes.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index aa21c110d4..eac56e99fd 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -68,7 +68,7 @@ kubelet을 재시작 하는 것은 에러를 해결할 수 없을 것이다.
 시스템에 도커를 설치하기 위해서 아래의 커맨드들을 사용한다.
 
 {{< tabs name="tab-cri-docker-installation" >}}
-{{< tab name="Ubuntu 16.04+" >}}
+{{% tab name="Ubuntu 16.04+" %}}
 
 ```shell
 # (도커 CE 설치)
@@ -122,8 +122,8 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{< /tab >}}
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% /tab %}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # (도커 CE 설치)
@@ -177,7 +177,7 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{< /tab >}}
+{{% /tab %}}
 {{< /tabs >}}
 
 부팅 시 도커 서비스를 시작하려면, 다음 명령을 실행한다.

From d4e82281c5f568e9ab7d4201885f5169a2fb48a0 Mon Sep 17 00:00:00 2001
From: June Yi <gochist@gmail.com>
Date: Sat, 12 Sep 2020 14:19:55 +0900
Subject: [PATCH 290/496] Complete unfinished conflict resolution

It corrects incomplete conflict resolution mistakes.
---
 .../container-runtimes.md                     | 68 ++++---------------
 1 file changed, 13 insertions(+), 55 deletions(-)

diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index eac56e99fd..0437815d1c 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -217,7 +217,7 @@ sysctl --system
 ```
 
 {{< tabs name="tab-cri-cri-o-installation" >}}
-{{< tab name="Debian" >}}
+{{% tab name="Debian" %}}
 
 다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
 
@@ -244,19 +244,8 @@ curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/
 apt-get update
 apt-get install cri-o cri-o-runc
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-
-{{< tab name="Ubuntu 18.04, 19.04 and 19.10" >}}
-=======
-<<<<<<< HEAD
-{{% /tab %}}
-
-{{% tab name="Ubuntu 18.04, 19.04 and 19.10" %}}
-=======
 
 {{% /tab %}}
->>>>>>> upstream/dev-1.19-ko.1
 
 {{% tab name="Ubuntu" %}}
 
@@ -275,7 +264,6 @@ apt-get install cri-o cri-o-runc
 사용자의 설치를 특정 릴리스에 고정할 수 있다.
 버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
 <br />
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 
 그런 다음, 아래를 실행한다.
 ```shell
@@ -313,22 +301,10 @@ curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://downlo
 curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
 yum install cri-o
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-
-{{< tab name="CentOS/RHEL 7.4+" >}}
-=======
-<<<<<<< HEAD
-{{% /tab %}}
-
-{{% tab name="CentOS/RHEL 7.4+" %}}
-=======
 
 {{% /tab %}}
 
 {{% tab name="openSUSE Tumbleweed" %}}
->>>>>>> upstream/dev-1.19-ko.1
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 
 ```shell
 sudo zypper install cri-o
@@ -345,29 +321,13 @@ dnf module list cri-o
 ```
 CRI-O는 Fedora에서 특정 릴리스를 고정하여 설치하는 방법은 지원하지 않는다.
 
-<<<<<<< HEAD
-{{< tab name="openSUSE Tumbleweed" >}}
-=======
-<<<<<<< HEAD
-{{% tab name="openSUSE Tumbleweed" %}}
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
-
-=======
 그런 다음, 아래를 실행한다.
->>>>>>> upstream/dev-1.19-ko.1
 ```shell
 dnf module enable cri-o:$VERSION
 dnf install cri-o
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-=======
-<<<<<<< HEAD
-=======
 
->>>>>>> upstream/dev-1.19-ko.1
 {{% /tab %}}
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### CRI-O 시작
@@ -377,8 +337,8 @@ systemctl daemon-reload
 systemctl start crio
 ```
 
-자세한 사항은 [CRI-O 설치 가이드](https://github.com/kubernetes-sigs/cri-o#getting-started)
-를 참고한다.
+자세한 사항은 [CRI-O 설치 가이드](https://github.com/kubernetes-sigs/cri-o#getting-started)를
+참고한다.
 
 ## Containerd
 
@@ -410,7 +370,7 @@ sysctl --system
 ### containerd 설치
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{< tab name="Ubuntu 16.04" >}}
+{{% tab name="Ubuntu 16.04" %}}
 
 ```shell
 # (containerd 설치)
@@ -447,8 +407,8 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-{{< /tab >}}
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% /tab %}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # (containerd 설치)
@@ -479,12 +439,7 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-=======
-<<<<<<< HEAD
-=======
-{{< /tab >}}
+{{% /tab %}}
 {{% tab name="윈도우 (PowerShell)" %}}
 ```powershell
 # (containerd 설치)
@@ -510,14 +465,17 @@ Get-Content config.toml
 .\containerd.exe --register-service
 Start-Service containerd
 ```
->>>>>>> upstream/dev-1.19-ko.1
 {{% /tab %}}
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### systemd
 
-`systemd` cgroup driver를 사용하려면, `/etc/containerd/config.toml`의 `plugins.cri.systemd_cgroup = true`을 설정한다.
+`systemd` cgroup driver를 사용하려면, `/etc/containerd/config.toml`에 다음을 설정한다.
+
+```
+[plugins.cri]
+systemd_cgroup = true
+```
 kubeadm을 사용하는 경우에도 마찬가지로, 수동으로
 [kubelet을 위한 cgroup 드라이버](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)를 설정한다.
 

From fa4181d355680c7ee20e1c575fd0102da0222bb0 Mon Sep 17 00:00:00 2001
From: Maciej Filocha <maciej.filocha@gmail.com>
Date: Sat, 12 Sep 2020 14:08:20 +0200
Subject: [PATCH 291/496] Change language code placement for Polish tutorial
 links

Move language codes outside hyperlinks.
---
 content/pl/docs/tutorials/_index.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/pl/docs/tutorials/_index.md b/content/pl/docs/tutorials/_index.md
index 5d398da14a..e9f8ed32d8 100644
--- a/content/pl/docs/tutorials/_index.md
+++ b/content/pl/docs/tutorials/_index.md
@@ -18,11 +18,11 @@ Przed zapoznaniem się z samouczkami warto stworzyć zakładkę do
 
 ## Podstawy
 
-* [Podstawy Kubernetesa (PL)](/pl/docs/tutorials/kubernetes-basics/) to interaktywny samouczek, który pomoże zrozumieć system Kubernetes i wypróbować jego podstawowe możliwości.
+* [Podstawy Kubernetesa](/pl/docs/tutorials/kubernetes-basics/) (PL) to interaktywny samouczek, który pomoże zrozumieć system Kubernetes i wypróbować jego podstawowe możliwości.
 
 * [Introduction to Kubernetes (edX)](https://www.edx.org/course/introduction-kubernetes-linuxfoundationx-lfs158x#)
 
-* [Hello Minikube (PL)](/pl/docs/tutorials/hello-minikube/)
+* [Hello Minikube](/pl/docs/tutorials/hello-minikube/) (PL)
 
 ## Konfiguracja
 

From a5562bd930c9e6dd00bbfa3205a2aed5aab21d4a Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Sat, 12 Sep 2020 14:55:57 +0200
Subject: [PATCH 292/496] fixing FR language in participating.md

Signed-off-by: didier <durand.didier@gmail.com>
---
 content/fr/docs/contribute/participating.md | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/content/fr/docs/contribute/participating.md b/content/fr/docs/contribute/participating.md
index 34015b19b4..0658be231f 100644
--- a/content/fr/docs/contribute/participating.md
+++ b/content/fr/docs/contribute/participating.md
@@ -27,7 +27,7 @@ Le reste de ce document décrit certaines fonctions uniques de ces rôles au sei
 
 Lorsqu'une pull request est mergée à la branche utilisée pour publier le contenu (actuellement `master`), ce contenu est publié et disponible dans le monde entier.
 Pour nous assurer que la qualité de notre contenu publié est élevée, nous limitons aux approbateurs SIG Docs le droit de merger des pull requests.
-Voici comment ça fonctionne.
+Voici comment ce processus fonctionne.
 
 - Lorsqu'une pull request a les deux labels `lgtm` et `approve` et n'a pas de label `hold`, la pull request est mergée automatiquement.
 - Les membres de l'organisation Kubernetes et les approbateurs SIG Docs peuvent ajouter des commentaires à une pull request ou empêcher le merge automatique d'une pull request donnée (en ajoutant un commentaire `/hold` ou en retirant un commentaire `/lgtm`).
@@ -35,7 +35,7 @@ Voici comment ça fonctionne.
 - Seul un approbateur membre de SIG Docs peut causer le merge d'une pull request en ajoutant un commentaire `/approve`.
   Certains approbateurs remplissent également des rôles spécifiques supplémentaires, tels que [PR Wrangler](#pr-wrangler) or [président(e) du SIG Docs](#sig-docs-chairperson).
 
-Pour plus d'informations sur les attentes et les différences entre les rôles de membre d'organisation Kubernetes et d'approbateurs SIG Docs, voir [Types de contributeur](/docs/contribute#types-of-contributor).
+Pour plus d'informations sur les attentes et les différences entre les rôles de membre de l'organisation Kubernetes et d'approbateurs SIG Docs, voir [Types de contributeur](/docs/contribute#types-of-contributor).
 Les sections suivantes couvrent plus de détails sur ces rôles et leur fonctionnement dans SIG-Docs.
 
 ### N'importe qui
@@ -47,7 +47,7 @@ Si vous ne pouvez pas signer le CLA, le projet Kubernetes ne peut pas accepter v
 
 ### Membres
 
-Tout membre de l'[organisation Kubernetes](https://github.com/kubernetes) peut faire une revue d'une pull request, et SIG Docs les membres de l’équipe demandent fréquemment aux membres d’autres SIG d’être révisés pour des raisons de précision technique.
+Tout membre de l'[organisation Kubernetes](https://github.com/kubernetes) peut faire une revue d'une pull request, et les membres de l’équipe SIG Docs demandent fréquemment aux membres d’autres SIG d'effectuer des révisions de documents pour des raisons de précision technique.
 SIG Docs accueille également des critiques et des commentaires indépendamment du statut de membre d'une personne dans l'organisation Kubernetes.
 Vous pouvez indiquer votre approbation en ajoutant un commentaire de `/lgtm` à une pull request.
 Si vous n'êtes pas membre de l'organisation Kubernetes, votre `/lgtm` n'a aucun effet sur les systèmes automatisés.
@@ -85,7 +85,7 @@ Voir [Equipes et groupes au sein de SIG Docs](#teams-and-groups-within-sig-docs)
 
 Les relecteurs examinent les Pull Request de documentation et font des commentaires sur les changements proposés.
 
-L'automatisation assigne des relecteurs aux pull requets, et les contributeurs peuvent demander une revue d'un relecteur spécifique en laissant un commentaire tel que: `/assign [@_github_handle]`.
+L'automatisation assigne des relecteurs aux pull requests, et les contributeurs peuvent demander une revue d'un relecteur spécifique en laissant un commentaire tel que: `/assign [@_github_handle]`.
 Pour indiquer qu'une pull request est techniquement exacte et ne nécessite aucune modification supplémentaire, un examinateur ajoute un commentaire `/lgtm` à la Pull Request.
 
 Si le relecteur affecté n'a pas encore revu le contenu, un autre relecteur peut intervenir.
@@ -105,7 +105,7 @@ Les relecteurs d'autres SIG doivent demander séparément le statut de relecteur
 Pour postuler, ouvrez une pull request et ajoutez vous à la section `reviewers` du fichier [top-level OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS) dans le dépôt `kubernetes/website`.
 Affectez la PR à un ou plusieurs approbateurs SIG Docs.
 
-Si votre pull request est approuvé, vous êtes maintenant un relecteur SIG Docs.
+Si votre pull request est approuvée, vous êtes maintenant un relecteur SIG Docs.
 [K8s-ci-robot](https://github.com/kubernetes/test-infra/tree/master/prow#bots-home) vous assignera et vous suggérera en tant que relecteur pour les nouvelles Pull Requests.
 
 Si vous êtes approuvé, demandez qu’un approbateur SIG Docs en cours vous ajoute au groupe Github [@kubernetes/sig-docs-pr-reviews](https://github.com/orgs/kubernetes/teams/sig-docs-pr-reviews).
@@ -141,7 +141,7 @@ Seuls les membres du groupe Github `kubernetes-website-admins` peuvent ajouter d
 
 #### Devenir un administrateur de site Web
 
-Les membres du groupe GitHub `kubernetes-website-admins` peut gérer l’appartenance au groupe Github et disposer de tous les droits administratifs sur les paramètres du dépôt, y compris la possibilité d'ajouter, de supprimer et de debugger des Webhooks.
+Les membres du groupe GitHub `kubernetes-website-admins` peuvent gérer l’appartenance au groupe Github et disposer de tous les droits administratifs sur les paramètres du dépôt, y compris la possibilité d'ajouter, de supprimer et de debugger des Webhooks.
 Tous les approbateurs SIG Docs n'ont pas besoin de ce niveau d'accès.
 
 Si vous pensez avoir besoin de ce niveau d’accès, adressez-vous à un administrateur de site Web existant ou posez la question dans le canal Slack [#sig-docs](https://kubernetes.slack.com/messages/C1J0BPD2M/).
@@ -187,12 +187,12 @@ Le [dépôt du site web Kubernetes](https://github.com/kubernetes/website) utili
 Ces deux plugins utilisent les fichiers [OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS) et [OWNERS_ALIASES](https://github.com/kubernetes/website/blob/master/OWNERS_ALIASES) à la racine du dépôt Github `kubernetes/website` pour contrôler comment prow fonctionne.
 
 Un fichier [OWNERS](https://github.com/kubernetes/website/blob/master/OWNERS) contient une liste de personnes qui sont des relecteurs et des approbateurs SIG Docs.
-Les fichiers OWNERS existent aussi dans les sous-dossiers, et peut ignorer qui peut agir en tant que relecteur ou approbateur des fichiers de ce sous-répertoire et de ses descendants.
+Les fichiers OWNERS existent aussi dans les sous-dossiers, et peuvent ignorer qui peut agir en tant que relecteur ou approbateur des fichiers de ce sous-répertoire et de ses descendants.
 Pour plus d'informations sur les fichiers OWNERS en général, voir [OWNERS](https://github.com/kubernetes/community/blob/master/contributors/guide/owners.md).
 
 En outre, un fichier Markdown individuel peut répertorier les relecteurs et les approbateurs dans l'entête, soit en répertoriant les noms d’utilisateur ou les groupes de Github.
 
-La combinaison des fichiers `OWNERS` et des entêtes dans les fichiers Markdown determinent les suggestions automatiques de relecteurs dans la PullRequest.
+La combinaison des fichiers `OWNERS` et des entêtes dans les fichiers Markdown déterminent les suggestions automatiques de relecteurs dans la PullRequest.
 
 
 

From 22da0faae130215977b06611264e6b39fff8b75d Mon Sep 17 00:00:00 2001
From: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Date: Sat, 12 Sep 2020 22:17:57 +0800
Subject: [PATCH 293/496] ID localization for configure pod and container -
 assign memory resources

---
 .../assign-memory-resource.md                 | 367 ++++++++++++++++++
 .../pods/resource/memory-request-limit-2.yaml |  16 +
 .../pods/resource/memory-request-limit-3.yaml |  16 +
 .../pods/resource/memory-request-limit.yaml   |  16 +
 4 files changed, 415 insertions(+)
 create mode 100644 content/id/docs/tasks/configure-pod-container/assign-memory-resource.md
 create mode 100644 content/id/examples/pods/resource/memory-request-limit-2.yaml
 create mode 100644 content/id/examples/pods/resource/memory-request-limit-3.yaml
 create mode 100644 content/id/examples/pods/resource/memory-request-limit.yaml

diff --git a/content/id/docs/tasks/configure-pod-container/assign-memory-resource.md b/content/id/docs/tasks/configure-pod-container/assign-memory-resource.md
new file mode 100644
index 0000000000..bb092e86a5
--- /dev/null
+++ b/content/id/docs/tasks/configure-pod-container/assign-memory-resource.md
@@ -0,0 +1,367 @@
+---
+title: Menetapkan Sumber Daya Memori untuk Container dan Pod
+content_type: task
+weight: 10
+---
+
+<!-- overview -->
+
+Laman ini menunjukkan bagaimana menetapkan permintaan dan batasan memori untuk Container.
+Container dijamin memiliki memori sebanyak yang diminta,
+tetapi tidak diperbolehkan untuk menggunakan memori melebihi batas.
+
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+Setiap Node pada klaster kamu harus memiliki memori setidaknya 300 MiB.
+
+Beberapa langkah pada laman ini mengharuskan kamu menjalankan Service
+[_metrics-server_](https://github.com/kubernetes-incubator/metrics-server)
+pada klaster kamu. Jika kamu memiliki _metrics-server_
+yang sudah berjalan, kamu dapat melewati langkah-langkah berikut ini.
+
+Jika kamu menjalankan Minikube, jalankan perintah berikut untuk mengaktifkan
+_metrics-server_:
+
+```shell
+minikube addons enable metrics-server
+```
+
+Untuk melihat apakah _metrics-server_ sudah berjalan, atau penyedia lain dari API metrik sumber daya
+(`metrics.k8s.io`), jalankan perintah berikut ini:
+
+```shell
+kubectl get apiservices
+```
+
+Jika API metrik sumber daya telah tersedia, keluarannya meliputi seperti
+acuan pada `metrics.k8s.io`.
+
+```shell
+NAME
+v1beta1.metrics.k8s.io
+```
+
+
+
+<!-- steps -->
+
+## Membuat Namespace
+
+Buat Namespace sehingga sumber daya yang kamu buat dalam latihan ini 
+terisolasi dari klaster kamu yang lain.
+
+```shell
+kubectl create namespace mem-example
+```
+
+## Menentukan permintaan memori dan batasan memori
+
+Untuk menentukan permintaan memori untuk Container, sertakan _field_ `resources:requests`
+pada manifes sumber daya dari Container. Untuk menentukan batasan memori, sertakan `resources:limits`.
+
+Dalam latihan ini, kamu akan membuat Pod yang memiliki satu Container. Container memiliki permintaan memori
+sebesar 100 MiB dan batasan memori sebesar 200 MiB. Berikut berkas konfigurasi
+untuk Pod:
+
+{{< codenew file="pods/resource/memory-request-limit.yaml" >}}
+
+Bagian `args` dalam berkas konfigurasi memberikan argumen untuk Container pada saat dimulai.
+Argumen`"--vm-bytes", "150M"` memberi tahu Container agar mencoba mengalokasikan memori sebesar 150 MiB.
+
+Buatlah Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/resource/memory-request-limit.yaml --namespace=mem-example
+```
+
+Verifikasi apakah Container dalam Pod sudah berjalan:
+
+```shell
+kubectl get pod memory-demo --namespace=mem-example
+```
+
+Lihat informasi mendetil tentang Pod:
+
+```shell
+kubectl get pod memory-demo --output=yaml --namespace=mem-example
+```
+
+Keluarannya menunjukkan bahwa satu Container dalam Pod memiliki permintaan memori sebesar 100 MiB
+dan batasan memori sebesar 200 MiB.
+
+```yaml
+...
+resources:
+  limits:
+    memory: 200Mi
+  requests:
+    memory: 100Mi
+...
+```
+
+Jalankan `kubectl top` untuk mengambil metrik dari Pod:
+
+```shell
+kubectl top pod memory-demo --namespace=mem-example
+```
+
+Keluarannya menunjukkan bahwa Pod menggunakan memori sekitar 162.900.000 byte, dimana
+sekitar 150 MiB. Ini lebih besar dari permintaannya sebesar 100 MiB Pod, tetapi masih di dalam
+batasan Pod sebesar 200 MiB.
+
+
+```
+NAME                        CPU(cores)   MEMORY(bytes)
+memory-demo                 <something>  162856960
+```
+
+Hapuslah Pod:
+
+```shell
+kubectl delete pod memory-demo --namespace=mem-example
+```
+
+## Melebihi batasan memori dari Container
+
+Container dapat melebihi permintaan memorinya jika Node memiliki memori yang tersedia. Tapi sebuah Container
+tidak diperbolehkan untuk menggunakan lebih dari batasan memorinya. Jika Container mengalokasikan lebih banyak memori daripada
+batasannya, Container menjadi kandidat untuk dihentikan. Jika Container terus berlanjut
+mengkonsumsi memori melebihi batasnya, maka Container akan diakhiri. Jika Container dihentikan dan bisa
+di mulai ulang, kubelet akan memulai ulang, sama seperti jenis kegagalan _runtime_ yang lainnya.
+
+Dalam latihan ini, kamu membuat Pod yang mencoba mengalokasikan lebih banyak memori dari batasannya.
+Berikut adalah berkas konfigurasi untuk Pod yang memiliki satu Container dengan berkas
+permintaan memori sebesar 50 MiB dan batasan memori sebesar 100 MiB:
+
+{{< codenew file="pods/resource/memory-request-limit-2.yaml" >}}
+
+Dalam bagian `args` dari berkas konfigurasi, kamu dapat melihat bahwa Container tersebut
+akan mencoba mengalokasikan memori sebesar 250 MiB, yang jauh di atas batas yaitu 100 MiB.
+
+Buatlah Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/resource/memory-request-limit-2.yaml --namespace=mem-example
+```
+
+Lihat informasi mendetail tentang Pod:
+
+```shell
+kubectl get pod memory-demo-2 --namespace=mem-example
+```
+
+Sampai sini, Container mungkin sedang berjalan atau dimatikan. Ulangi perintah sebelumnya hingga Container dimatikan:
+
+```shell
+NAME            READY     STATUS      RESTARTS   AGE
+memory-demo-2   0/1       OOMKilled   1          24s
+```
+
+Dapatkan tampilan yang lebih mendetail tentang status Container:
+
+```shell
+kubectl get pod memory-demo-2 --output=yaml --namespace=mem-example
+```
+
+Keluarannya menunjukkan bahwa Container dimatikan karena kehabisan memori (OOM):
+
+```shell
+lastState:
+   terminated:
+     containerID: docker://65183c1877aaec2e8427bc95609cc52677a454b56fcb24340dbd22917c23b10f
+     exitCode: 137
+     finishedAt: 2017-06-20T20:52:19Z
+     reason: OOMKilled
+     startedAt: null
+```
+
+Container dalam latihan ini dapat dimulai ulang, sehingga kubelet akan memulai ulangnya. Ulangi
+perintah ini beberapa kali untuk melihat bahwa Container berulang kali dimatikan dan dimulai ulang:
+
+```shell
+kubectl get pod memory-demo-2 --namespace=mem-example
+```
+
+Keluarannya menunjukkan bahwa Container dimatikan, dimulai ulang, dimatikan lagi, dimulai ulang lagi, dan seterusnya:
+
+```
+kubectl get pod memory-demo-2 --namespace=mem-example
+NAME            READY     STATUS      RESTARTS   AGE
+memory-demo-2   0/1       OOMKilled   1          37s
+```
+```
+
+kubectl get pod memory-demo-2 --namespace=mem-example
+NAME            READY     STATUS    RESTARTS   AGE
+memory-demo-2   1/1       Running   2          40s
+```
+
+Lihat informasi mendetail tentang riwayat Pod:
+
+```
+kubectl describe pod memory-demo-2 --namespace=mem-example
+```
+
+
+Keluarannya menunjukkan bahwa Container dimulai dan gagal berulang kali:
+
+```
+... Normal  Created   Created container with id 66a3a20aa7980e61be4922780bf9d24d1a1d8b7395c09861225b0eba1b1f8511
+... Warning BackOff   Back-off restarting failed container
+```
+
+Lihat informasi mendetail tentang Node klaster Anda:
+
+```
+kubectl describe nodes
+```
+
+Keluarannya mencakup rekaman Container yang dimatikan karena kondisi kehabisan memori:
+
+
+```
+Warning OOMKilling Memory cgroup out of memory: Kill process 4481 (stress) score 1994 or sacrifice child
+```
+
+Hapus Pod kamu:
+
+```shell
+kubectl delete pod memory-demo-2 --namespace=mem-example
+```
+
+## Menentukan permintaan memori yang terlalu besar untuk Node kamu
+
+Permintaan dan batasan memori yang dikaitkan dengan Container, berguna untuk berpikir
+apakah sebuah Pod yang memiliki permintaan dan batasan memori. Permintaan memori untuk Pod tersebut adalah
+jumlah permintaan memori untuk semua Container dalam Pod. Begitu juga dengan batasan memori
+untuk Pod adalah jumlah batasan memori dari semua Container di dalam Pod.
+
+Penjadwalan Pod didasarkan pada permintaan. Sebuah Pod dijadwalkan untuk berjalan di sebuah Node hanya jika sebuah Node
+memiliki cukup memori yang tersedia untuk memenuhi permintaan memori dari Pod tersebut.
+
+Dalam latihan ini, kamu membuat Pod yang memiliki permintaan memori yang sangat besar sehingga melebihi
+kapasitas dari Node mana pun dalam klaster kamu. Berikut adalah berkas konfigurasi untuk Pod yang memiliki
+Container dengan permintaan memori 1000 GiB, yang kemungkinan besar melebihi kapasitas
+dari setiap Node dalam klaster kamu.
+
+{{< codenew file="pods/resource/memory-request-limit-3.yaml" >}}
+
+Buatlah Pod:
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/resource/memory-request-limit-3.yaml --namespace=mem-example
+```
+
+Lihat status Pod:
+
+```shell
+kubectl get pod memory-demo-3 --namespace=mem-example
+```
+
+Keluarannya menunjukkan bahwa status Pod adalah PENDING. Artinya, Pod tidak dijadwalkan untuk berjalan di Node mana pun, dan Pod akan tetap dalam status PENDING tanpa batas waktu:
+
+```
+kubectl get pod memory-demo-3 --namespace=mem-example
+NAME            READY     STATUS    RESTARTS   AGE
+memory-demo-3   0/1       Pending   0          25s
+```
+
+Lihat informasi mendetail tentang Pod, termasuk _event_:
+
+```shell
+kubectl describe pod memory-demo-3 --namespace=mem-example
+```
+
+Keluarannya menunjukkan bahwa Container tidak dapat dijadwalkan karena memori yang tidak cukup pada Node:
+
+```shell
+Events:
+  ...  Reason            Message
+       ------            -------
+  ...  FailedScheduling  No nodes are available that match all of the following predicates:: Insufficient memory (3).
+```
+
+## Satuan Memori
+
+Sumber daya memori diukur dalam satuan _byte_. Kamu dapat mengekspresikan memori sebagai bilangan bulat biasa atau
+bilangan bulan _fixed-point_ dengan salah satu akhiran ini: E, P, T, G, M, K, Ei, Pi, Ti, Gi, Mi, Ki.
+Contoh berikut ini mewakili nilai yang kira-kira sama:
+
+```shell
+128974848, 129e6, 129M , 123Mi
+```
+
+Hapuslah Pod kamu:
+
+```shell
+kubectl delete pod memory-demo-3 --namespace=mem-example
+```
+
+## Jika kamu tidak menentukan batasan memori
+
+Jika kamu tidak menentukan batasan memori untuk sebuah Container, salah satu dari situasi berikut ini berlaku:
+
+* Container tidak memiliki batasan maksimum jumlah memori yang digunakannya. Container
+dapat menggunakan semua memori yang tersedia dalam Node dimana Container itu berjalan yang pada gilirannya dapat memanggil penyetop OOM (_out-of-memory_).
+Lebih lanjut, dalam kasus menghentikan OOM, Container tanpa batas sumber daya akan memiliki peluang lebih besar untuk dihentikan.
+
+* Container berjalan pada Namespace yang memiliki batasan bawaan memori, dan
+Container secara otomatis menetapkan batasan bawaan. Administrator klaster dapat menggunakan
+[LimitRange](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#limitrange-v1-core)
+untuk menentukan batasan memori secara bawaan.
+
+## Motivasi untuk permintaan dan batasan memori
+
+Dengan mengonfigurasi permintaan dan batasan memori untuk Container yang berjalan pada berkas
+klaster, kamu dapat menggunakan sumber daya memori yang tersedia pada Node klaster kamu secara efisien.
+Dengan menjaga permintaan memori pada Pod tetap rendah, kamu memberikan kesempatan yang baik untuk Pod tersebut
+dijadwalkan. Dengan memiliki batas memori yang lebih besar dari permintaan memori, Anda mencapai dua hal:
+
+* Pod dapat memiliki aktivitas yang bersifat _burst_ dengan memanfaatkan memori yang kebetulan tersedia.
+* Jumlah memori yang dapat digunakan Pod selama keadaan _burst_ dibatasi pada jumlah yang wajar.
+
+## Membersihkan
+
+Hapus Namespace kamu. Ini akan menghapus semua Pod yang kamu buat untuk tugas ini:
+
+```shell
+kubectl delete namespace mem-example
+```
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+### Untuk pengembang aplikasi
+
+* [Menetapkan sumber daya CPU ke Container dan Pod](/docs/tasks/configure-pod-container/assign-cpu-resource/)
+
+* [Mengonfigurasi _Quality of Service_ untuk Pod](/docs/tasks/configure-pod-container/quality-service-pod/)
+
+### Untuk administrator klaster
+
+* [Mengonfigurasi permintaan dan batasan bawaan memori untuk Namespace](/id/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/)
+
+* [Mengonfigurasi permintaan dan batasan bawaan CPU untuk Namespace](/id/docs/tasks/administer-cluster/manage-resources/cpu-default-namespace/)
+
+* [Mengonfigurasi batasan memori minimum dan maksimum untuk Namespace](/id/docs/tasks/administer-cluster/manage-resources/memory-constraint-namespace/)
+
+* [Mengonfigurasi batasan CPU minimum dan maksimum untuk Namespace](/id/docs/tasks/administer-cluster/manage-resources/cpu-constraint-namespace/)
+
+* [Mengonfigurasi kuota CPU dan memori untuk Namespace](/id/docs/tasks/administer-cluster/manage-resources/quota-memory-cpu-namespace/)
+
+* [Mengonfigurasi kuota Pod untuk Namespace](/id/docs/tasks/administer-cluster/manage-resources/quota-pod-namespace/)
+
+* [Mengonfigurasi kuota untuk objek API](/id/docs/tasks/administer-cluster/quota-api-object/)
+
+
+
+
+
diff --git a/content/id/examples/pods/resource/memory-request-limit-2.yaml b/content/id/examples/pods/resource/memory-request-limit-2.yaml
new file mode 100644
index 0000000000..99032c4fc2
--- /dev/null
+++ b/content/id/examples/pods/resource/memory-request-limit-2.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: memory-demo-2
+  namespace: mem-example
+spec:
+  containers:
+  - name: memory-demo-2-ctr
+    image: polinux/stress
+    resources:
+      requests:
+        memory: "50Mi"
+      limits:
+        memory: "100Mi"
+    command: ["stress"]
+    args: ["--vm", "1", "--vm-bytes", "250M", "--vm-hang", "1"]
diff --git a/content/id/examples/pods/resource/memory-request-limit-3.yaml b/content/id/examples/pods/resource/memory-request-limit-3.yaml
new file mode 100644
index 0000000000..9f089c4a7a
--- /dev/null
+++ b/content/id/examples/pods/resource/memory-request-limit-3.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: memory-demo-3
+  namespace: mem-example
+spec:
+  containers:
+  - name: memory-demo-3-ctr
+    image: polinux/stress
+    resources:
+      limits:
+        memory: "1000Gi"
+      requests:
+        memory: "1000Gi"
+    command: ["stress"]
+    args: ["--vm", "1", "--vm-bytes", "150M", "--vm-hang", "1"]
diff --git a/content/id/examples/pods/resource/memory-request-limit.yaml b/content/id/examples/pods/resource/memory-request-limit.yaml
new file mode 100644
index 0000000000..985b1308d9
--- /dev/null
+++ b/content/id/examples/pods/resource/memory-request-limit.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: memory-demo
+  namespace: mem-example
+spec:
+  containers:
+  - name: memory-demo-ctr
+    image: polinux/stress
+    resources:
+      limits:
+        memory: "200Mi"
+      requests:
+        memory: "100Mi"
+    command: ["stress"]
+    args: ["--vm", "1", "--vm-bytes", "150M", "--vm-hang", "1"]

From 2770a0e9902ca648169a3cf223f0dd943a3a1731 Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Sat, 12 Sep 2020 16:56:33 +0200
Subject: [PATCH 294/496] fixing language issues in Ingress.md

Signed-off-by: didier <durand.didier@gmail.com>
---
 .../concepts/services-networking/ingress.md   | 54 +++++++++----------
 1 file changed, 27 insertions(+), 27 deletions(-)

diff --git a/content/fr/docs/concepts/services-networking/ingress.md b/content/fr/docs/concepts/services-networking/ingress.md
index 8be9ea32bf..f445ae2593 100644
--- a/content/fr/docs/concepts/services-networking/ingress.md
+++ b/content/fr/docs/concepts/services-networking/ingress.md
@@ -22,12 +22,12 @@ Un Ingress peut fournir un équilibrage de charge, une terminaison TLS et un hé
 Par souci de clarté, ce guide définit les termes suivants :
 
 * Nœud (Node) : une seule machine virtuelle ou physique dans un cluster Kubernetes.
-* Cluster : groupe de nœuds protégés par un pare-feu provenant d'Internet et constituant les principales ressources de calcul gérées par Kubernetes.
+* Cluster : groupe de nœuds protégés par un pare-feu du trafic provenant d'Internet et constituant les principales ressources de calcul gérées par Kubernetes.
 * Routeur Edge : routeur appliquant la stratégie de pare-feu pour votre cluster. Il peut s’agir d’une passerelle gérée par un fournisseur de cloud ou d’un matériel physique.
 * Réseau de cluster : ensemble de liens, logiques ou physiques, facilitant la communication au sein d'un cluster selon le [modèle de réseau Kubernetes](/docs/concepts/cluster-administration/networking/).
 * Service : un Kubernetes [Service](/docs/concepts/services-networking/service/) identifiant un ensemble de pods à l'aide de sélecteurs d'étiquettes. Sauf indication contraire, les services sont supposés avoir des adresses IP virtuelles routables uniquement dans le réseau du cluster.
 
-## Qu'est-ce qu'un ingress ?
+## Qu'est-ce qu'un Ingress ?
 
 Ingress (ou une entrée réseau), ajouté à Kubernetes v1.1, expose les routes HTTP et HTTPS de l'extérieur du cluster à des
 {{<link text = "services" url = "/docs/concepts/services-networking/service/">}} au sein du cluster.
@@ -41,7 +41,7 @@ Le routage du trafic est contrôlé par des règles définies sur la ressource I
    [ Services ]
 ```
 
-Un Ingress peut être configuré pour donner aux services des URLs accessibles de l'extérieur, du trafic de charge équilibrée, la terminaison SSL/TLS et un hébergement virtuel basé sur le nom. Un [contrôleur d'Ingress](/docs/concepts/services-networking/ingress-controllers) est responsable de l'exécution de l'Ingress, généralement avec un load-balancer (équilibreur de charge), bien qu'il puisse également configurer votre routeur périphérique ou des interfaces supplémentaires pour aider à gérer le trafic.
+Un Ingress peut être configuré pour donner aux services des URLs accessibles de l'extérieur, un équilibrage du trafic de charge externe, la terminaison SSL/TLS et un hébergement virtuel basé sur le nom. Un [contrôleur d'Ingress](/docs/concepts/services-networking/ingress-controllers) est responsable de l'exécution de l'Ingress, généralement avec un load-balancer (équilibreur de charge), bien qu'il puisse également configurer votre routeur périphérique ou des interfaces supplémentaires pour aider à gérer le trafic.
 
 Un Ingress n'expose pas de ports ni de protocoles arbitraires. Exposer des services autres que HTTP et HTTPS à Internet généralement utilise un service de type [Service.Type=NodePort](/docs/concepts/services-networking/service/#nodeport) ou [Service.Type=LoadBalancer](/docs/concepts/services-networking/service/#loadbalancer).
 
@@ -52,7 +52,7 @@ Un Ingress n'expose pas de ports ni de protocoles arbitraires. Exposer des servi
 Avant de commencer à utiliser un Ingress, vous devez comprendre certaines choses. Un Ingress est une ressource en "version Beta".
 
 {{< note >}}
-Vous devez avoir un [contrôleur d'Ingress](/docs/concepts/services-networking/ingress-controllers) pour lancer un Ingress. Seule la création d'une ressource Ingress n'a aucun effet.
+Vous devez avoir un [contrôleur d'Ingress](/docs/concepts/services-networking/ingress-controllers) pour lancer un Ingress. Seule, la création d'une ressource Ingress n'a aucun effet.
 {{< /note >}}
 
 GCE/GKE (Google Cloud Engine / Google Kubernetes Engine) déploie un contrôleur d’Ingress sur le master (le maître de kubernetes). Revoir les [limitations beta](https://github.com/kubernetes/ingress-gce/blob/master/BETA_LIMITATIONS.md#glbc-beta-limitations) de ce contrôleur si vous utilisez GCE/GKE.
@@ -64,7 +64,7 @@ Dans les environnements autres que GCE/GKE, vous devrez peut-être [déployer un
 Dans l’idéal, tous les contrôleurs d’Ingress devraient correspondre à cette spécification. Cependant le fonctionnement est légèrement différent d'un contrôleur à un autre (en fonction de son implémentation).
 
 {{< note >}}
-Assurez-vous de consulter la documentation de votre contrôleur d’Ingress pour bien comprendre les mises en garde qu’il ya à faire pour le choisir.
+Assurez-vous de consulter la documentation de votre contrôleur d’Ingress pour bien comprendre les mises en garde à prendre en compte au moment de le choisir.
 {{< /note >}}
 
 ## La ressource Ingress
@@ -88,14 +88,14 @@ spec:
           servicePort: 80
 ```
 
-Comme pour toutes les autres ressources Kubernetes, un ingress (une entrée) a besoin des champs `apiVersion`,` kind` et `metadata`.
+Comme pour toutes les autres ressources Kubernetes, un Ingress (une entrée) a besoin des champs `apiVersion`,` kind` et `metadata`.
  Pour des informations générales sur l'utilisation des fichiers de configuration, voir [déployer des applications](/docs/tasks/run-application/run-stateless-application-deployment/), [configurer des conteneurs](/docs/tasks/configure-pod-container/configure-pod-configmap/), [gestion des ressources](/docs/concepts/cluster-administration/manage-deployment/).
  Ingress utilise fréquemment des annotations pour configurer certaines options en fonction du contrôleur Ingress, dont un exemple
  est l'annotation [rewrite-target](https://github.com/kubernetes/ingress-nginx/blob/master/docs/examples/rewrite/README.md).
- Différents [Ingress controller](/docs/concepts/services-networking/ingress-controllers) prennent en charge différentes annotations. Consultez la documentation de votre choix de contrôleur Ingress pour savoir quelles annotations sont prises en charge.
+ Différents [Ingress controller](/docs/concepts/services-networking/ingress-controllers) prennent en charge différentes annotations. Consultez la documentation du contrôleur Ingress de votre choix pour savoir quelles annotations sont prises en charge.
 
 La [spécification de la ressource Ingress](https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status) dispose de toutes les informations nécessaires pour configurer un loadbalancer ou un serveur proxy. Plus important encore, il
-contient une liste de règles appariées à toutes les demandes entrantes. La ressource ingress ne supporte que les règles pour diriger le trafic HTTP.
+contient une liste de règles d'appariement de toutes les demandes entrantes. La ressource Ingress ne supporte que les règles pour diriger le trafic HTTP.
 
 
 ### Ingress rules
@@ -105,11 +105,11 @@ Chaque règle http contient les informations suivantes :
 * Un hôte optionnel. Dans cet exemple, aucun hôte n'est spécifié. La règle s'applique donc à tous les appels entrants.
   Le trafic HTTP via l'adresse IP est spécifié. Si un hôte est fourni (par exemple,
   foo.bar.com), les règles s’appliquent à cet hôte.
-* une liste de chemins (par exemple, /testpath), chacun étant associé à un backend associé défini par un `serviceName` et `servicePort`. L’hôte et le chemin doivent correspondre au contenu d’une demande entrante avant que le load-balancer dirige le trafic vers le service référencé.
+* une liste de chemins (par exemple, /testpath), chacun étant associé à un backend associé défini par un `serviceName` et `servicePort`. L’hôte et le chemin doivent correspondre au contenu d’une demande entrante avant que le load-balancer ne dirige le trafic vers le service référencé.
 * Un backend est une combinaison de noms de services et de ports, comme décrit dans
-  [services doc](/docs/concepts/services-networking/service/). Les requêtes HTTP (et HTTPS) envoyées à l'Ingress correspondant aux hôtes et au chemin de la règle seront envoyées au backend indiqué.
+  [services doc](/docs/concepts/services-networking/service/). Les requêtes HTTP (et HTTPS) envoyées à l'Ingress correspondant à l'hôte et au chemin de la règle seront envoyées au backend indiqué.
 
-Un backend par défaut est souvent configuré dans un contrôleur d’Ingress qui traite toutes les demandes qui ne corresponds à aucun chemin dans la spécification.
+Un backend par défaut est souvent configuré dans un contrôleur d’Ingress qui traite toutes les demandes qui ne correspondent à aucun chemin dans la spécification.
 
 ### Backend par défaut
 
@@ -122,7 +122,7 @@ Si aucun des hôtes ou chemins ne correspond à la demande HTTP dans les objets
 ### Ingress pour service unique
 
 Il existe des concepts Kubernetes qui vous permettent d’exposer un seul service.
-(voir [alternatives](#alternatives)). Vous pouvez également le faire avec un ingress en spécifiant un *backend par défaut* sans règles.
+(voir [alternatives](#alternatives)). Vous pouvez également le faire avec un Ingress en spécifiant un *backend par défaut* sans règles.
 
 
 ```yaml
@@ -156,7 +156,7 @@ Jusque-là, vous verrez souvent l’adresse listée sous la forme `<pending>` (e
 
 ### Fanout simple
 
-Une configuration d'un fanout achemine le trafic d'une adresse IP unique vers plusieurs services, en se basant sur l'URI HTTP demandé. Une entrée vous permet de garder le nombre de loadbalancers au minimum. Par exemple, une configuration comme :
+Une configuration de type fanout achemine le trafic d'une adresse IP unique vers plusieurs services, en se basant sur l'URI HTTP demandée. Une entrée vous permet de garder le nombre de loadbalancers au minimum. Par exemple, une configuration comme :
 
 ```shell
 foo.bar.com -> 178.91.123.132 -> / foo    service1:4200
@@ -212,17 +212,17 @@ Events:
   Normal   ADD     22s                loadbalancer-controller  default/test
 ```
 
-Le contrôleur d’ingress fournit une implémentation spécifique aux load-balancers qui satisfait l'Ingress, tant que les services (`s1`,` s2`) existent.
+Le contrôleur d’Ingress fournit une implémentation spécifique aux load-balancers qui satisfait l'Ingress, tant que les services (`s1`,` s2`) existent.
 Lorsque cela est fait, vous pouvez voir l’adresse du load-balancer sur le champ d'adresse.
 
 {{< note >}}
-En fonction du [Contrôleur d'ingress](/docs/concepts/services-networking/ingress-controllers) vous utilisez, vous devrez peut-être
+En fonction du [Contrôleur d'ingress](/docs/concepts/services-networking/ingress-controllers) que vous utilisez, vous devrez peut-être
 créer un backend http par défaut [Service](/docs/concepts/services-networking/service/).
 {{< /note >}}
 
 ### Hébergement virtuel basé sur le nom
 
-Les hôtes virtuels basés sur des noms prennent en charge le routage du trafic HTTP vers plusieurs noms d'hôte à la même adresse IP.
+Les hôtes virtuels basés sur des noms prennent en charge le routage du trafic HTTP vers plusieurs noms d'hôte basés sur la même adresse IP.
 
 ```none
 foo.bar.com --|                 |-> foo.bar.com s1:80
@@ -230,7 +230,7 @@ foo.bar.com --|                 |-> foo.bar.com s1:80
 bar.foo.com --|                 |-> bar.foo.com s2:80
 ```
 
-L’ingress suivant indique au load-balancer de router les requêtes en fonction de [En-tête du hôte](https://tools.ietf.org/html/rfc7230#section-5.4).
+L’Ingress suivant indique au load-balancer de router les requêtes en fonction de [En-tête du hôte](https://tools.ietf.org/html/rfc7230#section-5.4).
 
 ```yaml
 apiVersion: networking.k8s.io/v1beta1
@@ -283,7 +283,7 @@ spec:
 
 ### TLS
 
-Vous pouvez sécuriser un ingress en définissant un [secret](/docs/concepts/configuration/secret) qui contient une clé privée et un certificat TLS. Actuellement, l'ingress prend seulement en charge un seul port TLS, 443, et suppose une terminaison TLS. Si la section de configuration TLS dans un ingress spécifie différents hôtes, ils seront multiplexés sur le même port en fonction du nom d’hôte spécifié via l'extension SNI TLS (à condition que le contrôleur d’Ingress prenne en charge SNI). Le secret de TLS doit contenir les clés `tls.crt` et `tls.key` contenant le certificat et clé privée à utiliser pour TLS, par exemple :
+Vous pouvez sécuriser un Ingress en définissant un [secret](/docs/concepts/configuration/secret) qui contient une clé privée et un certificat TLS. Actuellement, l'Ingress prend seulement en charge l'unique port TLS, 443, et suppose une terminaison TLS. Si la section de configuration TLS dans un Ingress spécifie différents hôtes, ils seront multiplexés sur le même port en fonction du nom d’hôte spécifié via l'extension SNI TLS (à condition que le contrôleur d’Ingress prenne en charge SNI). Le secret de TLS doit contenir les clés `tls.crt` et `tls.key` contenant le certificat et clé privée à utiliser pour TLS, par exemple :
 
 ```yaml
 apiVersion: v1
@@ -297,7 +297,7 @@ metadata:
 type: kubernetes.io/tls
 ```
 
-Référencer ce secret dans un ingress indiquera au contrôleur d'ingress de sécuriser le canal du client au load-balancer à l'aide de TLS. Vous devez vous assurer que le secret TLS que vous avez créé provenait d'un certificat contenant un CN pour `sslexample.foo.com`.
+Référencer ce secret dans un Ingress indiquera au contrôleur d'ingress de sécuriser le canal du client au load-balancer à l'aide de TLS. Vous devez vous assurer que le secret TLS que vous avez créé provenait d'un certificat contenant un CN pour `sslexample.foo.com`.
 
 ```yaml
 apiVersion: networking.k8s.io/v1beta1
@@ -329,14 +329,14 @@ ou tout autre contrôleur d’Ingress spécifique à la plate-forme pour compren
 ### L'équilibrage de charge
 
 Un contrôleur d’Ingress est démarré avec certains paramètres de politique d’équilibrage de charge
-qui s'applique à toutes les entrées, telles que l'algorithme d'équilibrage de la charge, régime de pondérations des backends, et d'autres.
-Les concepts un peu plus avancés d'équilibrage de charge  (p. ex. sessions persistantes, pondérations dynamiques) ne sont pas encore exposés pour l'ingress. Vous pouvez toujours obtenir ces fonctionnalités via le [service loadbalancer](https://github.com/kubernetes/ingress-nginx).
+qui s'appliquent à toutes les entrées, tels que l'algorithme d'équilibrage de la charge, le régime de pondérations des backends, et d'autres.
+Les concepts un peu plus avancés d'équilibrage de charge  (p. ex. sessions persistantes, pondérations dynamiques) ne sont pas encore exposés pour l'Ingress. Vous pouvez toujours obtenir ces fonctionnalités via le [service loadbalancer](https://github.com/kubernetes/ingress-nginx).
 
-Il est également intéressant de noter que même si les health checks (contrôles de santé) ne sont pas exposés directement via l'Ingress, il existe des concepts parallèles dans Kubernetes, tels que [readiness probes](/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/) qui vous permettent d'obtenir le même résultat final. Veuillez consulter les documents spécifiques au contrôleur pour voir comment ils gèrent les health checks. ([nginx](https://git.k8s.io/ingress-nginx/README.md),[GCE](https://git.k8s.io/ingress-gce/README.md#health-checks)).
+Il est également intéressant de noter que même si les health checks (contrôles de santé) ne sont pas exposés directement via l'Ingress, il existe des concepts parallèles dans Kubernetes, tels que [readiness probes](/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/) qui vous permettent d'obtenir le même résultat final. Veuillez consulter les documents spécifiques au contrôleur pour voir comment il gère les health checks. ([nginx](https://git.k8s.io/ingress-nginx/README.md),[GCE](https://git.k8s.io/ingress-gce/README.md#health-checks)).
 
-## Mise à jour d'un ingress
+## Mise à jour d'un Ingress
 
-Pour mettre à jour un ingress existant afin d'ajouter un nouvel hôte, vous pouvez le mettre à jour en modifiant la ressource :
+Pour mettre à jour un Ingress existant afin d'ajouter un nouvel hôte, vous pouvez le mettre à jour en modifiant la ressource :
 
 ```shell
 kubectl describe ingress test
@@ -386,7 +386,7 @@ spec:
 ..
 ```
 
-L'enregistrement du yaml mettra à jour la ressource dans le serveur d'API, ce qui devrait indiquer au contrôleur d'ingress de reconfigurer le load-balancer.
+L'enregistrement du yaml mettra à jour la ressource dans le serveur d'API, ce qui devrait indiquer au contrôleur d'Ingress de reconfigurer le load-balancer.
 
 ```shell
 kubectl describe ingress test
@@ -416,12 +416,12 @@ Vous pouvez obtenir le même résultat en appelant `kubectl replace -f` sur un f
 
 ## Échec dans les zones de disponibilité
 
-Les techniques permettant de répartir le trafic sur plusieurs domaines de défaillance qui diffère d'un fournisseur de cloud à l'autre.
+Les techniques permettant de répartir le trafic sur plusieurs domaines de défaillance diffèrent d'un fournisseur de cloud à l'autre.
 Veuillez consulter la documentation du [Contrôleur d'ingress](/docs/concepts/services-networking/ingress-controllers) pour plus de détails. Vous pouvez également vous référer à la [documentation de la fédération](/docs/concepts/cluster-administration/federation/) pour plus d'informations sur le déploiement d'Ingress dans un cluster fédéré.
 
 ## Travail futur
 
-Suivez [SIG network](https://github.com/kubernetes/community/tree/master/sig-network) (groupe d'intérêt spécial Réseau) pour plus de détails sur l'évolution de l'entrée et des ressources associées. Vous pouvez également suivre le [Dépôt Ingress](https://github.com/kubernetes/ingress/tree/master) pour plus de détails sur l'évolution des différents contrôleurs d’ingress.
+Suivez [SIG network](https://github.com/kubernetes/community/tree/master/sig-network) (groupe d'intérêt spécial Réseau) pour plus de détails sur l'évolution de l'Ingress et des ressources associées. Vous pouvez également suivre le [Dépôt Ingress](https://github.com/kubernetes/ingress/tree/master) pour plus de détails sur l'évolution des différents contrôleurs d’Ingress.
 
 ## Alternatives
 

From e5018e2a1b52c6be4dbacff59534947093b13ced Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Sun, 13 Sep 2020 02:07:28 +0300
Subject: [PATCH 295/496] remove indent

---
 content/pt/_index.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/pt/_index.html b/content/pt/_index.html
index 8f1fbd9658..9721bcdd37 100644
--- a/content/pt/_index.html
+++ b/content/pt/_index.html
@@ -42,7 +42,6 @@ O Kubernetes é Open Source, o que te oferece a liberdade de utilizá-lo em seu
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Assista Video</button>
         <br>
         <br>
-        <br>
         <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2019" button id="desktopKCButton">KubeCon em Barcelona on Maio 20-23, 2019</a>
         <br>
         <br>

From 7e22ae5adcacca6f10bcd82048b2d2a395ddb6af Mon Sep 17 00:00:00 2001
From: noms <nomstradamus@gmail.com>
Date: Sun, 13 Sep 2020 05:40:58 +0530
Subject: [PATCH 296/496] Fix for 23732 (#23822)

* Fix for 23732

Explicitly specify that consumed as environment variables  require pod restart to refresh.

* Remove note tag

Remove note tag as suggested
---
 content/en/docs/concepts/configuration/configmap.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index 93bc555746..7cefb2e6cd 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -213,6 +213,7 @@ when new keys are projected to the Pod can be as long as the kubelet sync period
 propagation delay, where the cache propagation delay depends on the chosen cache type
 (it equals to watch propagation delay, ttl of cache, or zero correspondingly).
 
+ConfigMaps consumed as environment variables are not updated automatically and require a pod restart. 
 ## Immutable ConfigMaps {#configmap-immutable}
 
 {{< feature-state for_k8s_version="v1.19" state="beta" >}}

From 68a018eb8ddb190c0e1f8d0293802c9001942341 Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Sun, 13 Sep 2020 11:00:07 +0200
Subject: [PATCH 297/496] fixing some typos / spelling issues

Signed-off-by: didier <durand.didier@gmail.com>
---
 .../en/docs/concepts/services-networking/ingress.md    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/ingress.md b/content/en/docs/concepts/services-networking/ingress.md
index 4c9accf3a3..24907f31e2 100644
--- a/content/en/docs/concepts/services-networking/ingress.md
+++ b/content/en/docs/concepts/services-networking/ingress.md
@@ -37,7 +37,7 @@ Traffic routing is controlled by rules defined on the Ingress resource.
    [ Services ]
 ```
 
-An Ingress may be configured to give Services externally-reachable URLs, load balance traffic, terminate SSL / TLS, and offer name based virtual hosting. An [Ingress controller](/docs/concepts/services-networking/ingress-controllers) is responsible for fulfilling the Ingress, usually with a load balancer, though it may also configure your edge router or additional frontends to help handle the traffic.
+An Ingress may be configured to give Services externally-reachable URLs, load balance traffic, terminate SSL / TLS, and offer name-based virtual hosting. An [Ingress controller](/docs/concepts/services-networking/ingress-controllers) is responsible for fulfilling the Ingress, usually with a load balancer, though it may also configure your edge router or additional frontends to help handle the traffic.
 
 An Ingress does not expose arbitrary ports or protocols. Exposing services other than HTTP and HTTPS to the internet typically
 uses a service of type [Service.Type=NodePort](/docs/concepts/services-networking/service/#nodeport) or
@@ -45,7 +45,7 @@ uses a service of type [Service.Type=NodePort](/docs/concepts/services-networkin
 
 ## Prerequisites
 
-You must have an [ingress controller](/docs/concepts/services-networking/ingress-controllers) to satisfy an Ingress. Only creating an Ingress resource has no effect.
+You must have an [Ingress controller](/docs/concepts/services-networking/ingress-controllers) to satisfy an Ingress. Only creating an Ingress resource has no effect.
 
 You may need to deploy an Ingress controller such as [ingress-nginx](https://kubernetes.github.io/ingress-nginx/deploy/). You can choose from a number of
 [Ingress controllers](/docs/concepts/services-networking/ingress-controllers).
@@ -107,7 +107,7 @@ routed to your default backend.
 ### Resource backends {#resource-backend}
 
 A `Resource` backend is an ObjectRef to another Kubernetes resource within the
-same namespace of the Ingress object. A `Resource` is a mutually exclusive
+same namespace as the Ingress object. A `Resource` is a mutually exclusive
 setting with Service, and will fail validation if both are specified. A common
 usage for a `Resource` backend is to ingress data to an object storage backend
 with static assets.
@@ -235,7 +235,7 @@ IngressClass resource will ensure that new Ingresses without an
 If you have more than one IngressClass marked as the default for your cluster,
 the admission controller prevents creating new Ingress objects that don't have
 an `ingressClassName` specified. You can resolve this by ensuring that at most 1
-IngressClasses are marked as default in your cluster.
+IngressClass is marked as default in your cluster.
 {{< /caution >}}
 
 ## Types of Ingress
@@ -491,7 +491,7 @@ You can achieve the same outcome by invoking `kubectl replace -f` on a modified
 
 ## Failing across availability zones
 
-Techniques for spreading traffic across failure domains differs between cloud providers.
+Techniques for spreading traffic across failure domains differ between cloud providers.
 Please check the documentation of the relevant [Ingress controller](/docs/concepts/services-networking/ingress-controllers) for details.
 
 ## Alternatives

From 9b695da0672c2e277f5c5f38e2d90ab4b1998511 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Sun, 13 Sep 2020 17:00:56 +0800
Subject: [PATCH 298/496] Update access-cluster.md

---
 .../tasks/access-application-cluster/access-cluster.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/access-cluster.md b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
index 1cbf420e1a..d87ec93adc 100644
--- a/content/zh/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
@@ -540,7 +540,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - can be used to reach a Node, Pod, or Service
     - does load balancing when used to reach a Service
 -->
-1.  [apiserver 代理](#discovering-builtin-services)：
+2.  [apiserver 代理](#discovering-builtin-services)：
 
     - 内置于 apiserver 中
     - 将集群外部的用户连接到集群 IP，否则这些 IP 可能无法访问
@@ -559,7 +559,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - provides load balancing
     - is just used to reach services
 -->
-1.  [kube proxy](/docs/concepts/services-networking/service/#ips-and-vips)：
+3.  [kube proxy](/docs/concepts/services-networking/service/#ips-and-vips)：
 
     - 运行在每个节点上
     - 代理 UDP 和 TCP
@@ -574,7 +574,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - sits between all clients and one or more apiservers
     - acts as load balancer if there are several apiservers.
 -->
-1.  位于 apiserver 之前的 Proxy/Load-balancer：
+4.  位于 apiserver 之前的 Proxy/Load-balancer：
 
     - 存在和实现因集群而异（例如 nginx）
     - 位于所有客户和一个或多个 apiserver 之间
@@ -591,7 +591,7 @@ There are several different proxies you may encounter when using Kubernetes:
 Kubernetes users will typically not need to worry about anything other than the first two types.  The cluster admin
 will typically ensure that the latter types are setup correctly.
 -->
-1.  外部服务上的云负载均衡器：
+5.  外部服务上的云负载均衡器：
 
     - 由一些云提供商提供（例如 AWS ELB，Google Cloud Load Balancer）
     - 当 Kubernetes 服务类型为 `LoadBalancer` 时自动创建

From a82524bb12d9eff490d59d3916fff98f23289d1c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Sun, 13 Sep 2020 19:08:37 +0800
Subject: [PATCH 299/496] Update port-forward-access-application-cluster.md

---
 .../port-forward-access-application-cluster.md               | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md b/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
index fd4904ca80..738d663bc6 100644
--- a/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
@@ -227,13 +227,14 @@ local workstation to debug the database that is running in the pod.
 
 与本地 7000 端口建立的连接将转发到运行 Redis 服务器的 pod 的 6379 端口。通过此连接，您可以使用本地工作站来调试在 pod 中运行的数据库。
 
-{{< warning >}}
 <!--
+{{< warning >}}
 Due to known limitations, port forward today only works for TCP protocol.
 The support to UDP protocol is being tracked in
 [issue 47862](https://github.com/kubernetes/kubernetes/issues/47862).
 -->
-**警告：** 由于已知的限制，目前的端口转发仅适用于 TCP 协议。
+{{< warning >}}
+由于已知的限制，目前的端口转发仅适用于 TCP 协议。
 在 [issue 47862](https://github.com/kubernetes/kubernetes/issues/47862) 中正在跟踪对 UDP 协议的支持。
 {{< /warning >}}
 

From 3e2347eedb27faf1d02cd5b8089fb834becd977e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Sun, 13 Sep 2020 19:31:37 +0800
Subject: [PATCH 300/496] Update port-forward-access-application-cluster.md

---
 .../port-forward-access-application-cluster.md                   | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md b/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
index 738d663bc6..3663e9827a 100644
--- a/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
@@ -228,7 +228,6 @@ local workstation to debug the database that is running in the pod.
 与本地 7000 端口建立的连接将转发到运行 Redis 服务器的 pod 的 6379 端口。通过此连接，您可以使用本地工作站来调试在 pod 中运行的数据库。
 
 <!--
-{{< warning >}}
 Due to known limitations, port forward today only works for TCP protocol.
 The support to UDP protocol is being tracked in
 [issue 47862](https://github.com/kubernetes/kubernetes/issues/47862).

From 995b067fdb3645c818bb6cc38285ea8142e9a365 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Thu, 10 Sep 2020 14:27:00 +0800
Subject: [PATCH 301/496] Separating tasks from Secret concept

There are many contents in the (*very big*) Secret concept page which
are actually tasks. This PR proposes a separation of some contents
into separate tasks, so that we have a (hopefully) better organization
of the content and we make room for improvement to the concept itself.

Note that the creation of the `configmap-secret` directory (instead of
`secret`) is an intent to create a folder for both ConfigMap and Secret,
both of which are about configurations though there are quite some
differences between them.
---
 .../en/docs/concepts/configuration/secret.md  | 412 +-----------------
 .../en/docs/tasks/configmap-secret/_index.md  |   6 +
 .../managing-secret-using-config-file.md      | 198 +++++++++
 .../managing-secret-using-kubectl.md          | 157 +++++++
 .../managing-secret-using-kustomize.md        | 128 ++++++
 5 files changed, 509 insertions(+), 392 deletions(-)
 create mode 100755 content/en/docs/tasks/configmap-secret/_index.md
 create mode 100644 content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
 create mode 100644 content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
 create mode 100644 content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md

diff --git a/content/en/docs/concepts/configuration/secret.md b/content/en/docs/concepts/configuration/secret.md
index 651e90f270..2c710ac652 100644
--- a/content/en/docs/concepts/configuration/secret.md
+++ b/content/en/docs/concepts/configuration/secret.md
@@ -37,6 +37,12 @@ its containers.
 - As [container environment variable](#using-secrets-as-environment-variables).
 - By the [kubelet when pulling images](#using-imagepullsecrets) for the Pod.
 
+The name of a Secret object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+
+The keys of `data` and `stringData` must consist of alphanumeric characters,
+`-`, `_` or `.`.
+
 ### Built-in Secrets
 
 #### Service accounts automatically create and attach Secrets with API credentials
@@ -52,401 +58,15 @@ this is the recommended workflow.
 See the [ServiceAccount](/docs/tasks/configure-pod-container/configure-service-account/)
 documentation for more information on how service accounts work.
 
-### Creating your own Secrets
+### Creating a Secret
 
-#### Creating a Secret Using `kubectl`
+There are several options to create a Secret:
 
-Secrets can contain user credentials required by Pods to access a database.
-For example, a database connection string
-consists of a username and password. You can store the username in a file `./username.txt`
-and the password in a file `./password.txt` on your local machine.
+- [create Secret using `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- [create Secret from config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- [create Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 
-```shell
-# Create files needed for the rest of the example.
-echo -n 'admin' > ./username.txt
-echo -n '1f2d1e2e67df' > ./password.txt
-```
-
-The `kubectl create secret` command packages these files into a Secret and creates
-the object on the API server.
-The name of a Secret object must be a valid
-[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
-
-```shell
-kubectl create secret generic db-user-pass --from-file=./username.txt --from-file=./password.txt
-```
-
-The output is similar to:
-
-```
-secret "db-user-pass" created
-```
-
-Default key name is the filename. You may optionally set the key name using `[--from-file=[key=]source]`.
-
-```shell
-kubectl create secret generic db-user-pass --from-file=username=./username.txt --from-file=password=./password.txt
-```
-
-{{< note >}}
-Special characters such as `$`, `\`, `*`, `=`, and `!` will be interpreted by your [shell](https://en.wikipedia.org/wiki/Shell_(computing)) and require escaping.
-In most shells, the easiest way to escape the password is to surround it with single quotes (`'`).
-For example, if your actual password is `S!B\*d$zDsb=`, you should execute the command this way:
-
-```shell
-kubectl create secret generic dev-db-secret --from-literal=username=devuser --from-literal=password='S!B\*d$zDsb='
-```
-
-You do not need to escape special characters in passwords from files (`--from-file`).
-{{< /note >}}
-
-You can check that the secret was created:
-
-```shell
-kubectl get secrets
-```
-
-The output is similar to:
-
-```
-NAME                  TYPE                                  DATA      AGE
-db-user-pass          Opaque                                2         51s
-```
-
-You can view a description of the secret:
-
-```shell
-kubectl describe secrets/db-user-pass
-```
-
-The output is similar to:
-
-```
-Name:            db-user-pass
-Namespace:       default
-Labels:          <none>
-Annotations:     <none>
-
-Type:            Opaque
-
-Data
-====
-password.txt:    12 bytes
-username.txt:    5 bytes
-```
-
-{{< note >}}
-The commands `kubectl get` and `kubectl describe` avoid showing the contents of a secret by
-default. This is to protect the secret from being exposed accidentally to an onlooker,
-or from being stored in a terminal log.
-{{< /note >}}
-
-See [decoding a secret](#decoding-a-secret) to learn how to view the contents of a secret.
-
-#### Creating a Secret manually
-
-You can also create a Secret in a file first, in JSON or YAML format,
-and then create that object.
-The name of a Secret object must be a valid
-[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
-The [Secret](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)
-contains two maps:
-`data` and `stringData`. The `data` field is used to store arbitrary data, encoded using
-base64. The `stringData` field is provided for convenience, and allows you to provide
-secret data as unencoded strings.
-
-For example, to store two strings in a Secret using the `data` field, convert
-the strings to base64 as follows:
-
-```shell
-echo -n 'admin' | base64
-```
-
-The output is similar to:
-
-```
-YWRtaW4=
-```
-
-```shell
-echo -n '1f2d1e2e67df' | base64
-```
-
-The output is similar to:
-
-```
-MWYyZDFlMmU2N2Rm
-```
-
-Write a Secret that looks like this:
-
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  name: mysecret
-type: Opaque
-data:
-  username: YWRtaW4=
-  password: MWYyZDFlMmU2N2Rm
-```
-
-Now create the Secret using [`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands#apply):
-
-```shell
-kubectl apply -f ./secret.yaml
-```
-
-The output is similar to:
-
-```
-secret "mysecret" created
-```
-
-For certain scenarios, you may wish to use the `stringData` field instead. This
-field allows you to put a non-base64 encoded string directly into the Secret,
-and the string will be encoded for you when the Secret is created or updated.
-
-A practical example of this might be where you are deploying an application
-that uses a Secret to store a configuration file, and you want to populate
-parts of that configuration file during your deployment process.
-
-For example, if your application uses the following configuration file:
-
-```yaml
-apiUrl: "https://my.api.com/api/v1"
-username: "user"
-password: "password"
-```
-
-You could store this in a Secret using the following definition:
-
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  name: mysecret
-type: Opaque
-stringData:
-  config.yaml: |-
-    apiUrl: "https://my.api.com/api/v1"
-    username: {{username}}
-    password: {{password}}
-```
-
-Your deployment tool could then replace the `{{username}}` and `{{password}}`
-template variables before running `kubectl apply`.
-
-The `stringData` field is a write-only convenience field. It is never output when
-retrieving Secrets. For example, if you run the following command:
-
-```shell
-kubectl get secret mysecret -o yaml
-```
-
-The output is similar to:
-
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  creationTimestamp: 2018-11-15T20:40:59Z
-  name: mysecret
-  namespace: default
-  resourceVersion: "7225"
-  uid: c280ad2e-e916-11e8-98f2-025000000001
-type: Opaque
-data:
-  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
-```
-
-If a field, such as `username`, is specified in both `data` and `stringData`,
-the value from `stringData` is used. For example, the following Secret definition:
-
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  name: mysecret
-type: Opaque
-data:
-  username: YWRtaW4=
-stringData:
-  username: administrator
-```
-
-Results in the following Secret:
-
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  creationTimestamp: 2018-11-15T20:46:46Z
-  name: mysecret
-  namespace: default
-  resourceVersion: "7579"
-  uid: 91460ecb-e917-11e8-98f2-025000000001
-type: Opaque
-data:
-  username: YWRtaW5pc3RyYXRvcg==
-```
-
-Where `YWRtaW5pc3RyYXRvcg==` decodes to `administrator`.
-
-The keys of `data` and `stringData` must consist of alphanumeric characters,
-'-', '_' or '.'.
-
-{{< note >}}
-The serialized JSON and YAML values of secret data are
-encoded as base64 strings. Newlines are not valid within these strings and must
-be omitted. When using the `base64` utility on Darwin/macOS, users should avoid
-using the `-b` option to split long lines. Conversely, Linux users *should* add
-the option `-w 0` to `base64` commands or the pipeline `base64 | tr -d '\n'` if
-the `-w` option is not available.
-{{< /note >}}
-
-#### Creating a Secret from a generator
-
-Since Kubernetes v1.14, `kubectl` supports [managing objects using Kustomize](/docs/tasks/manage-kubernetes-objects/kustomization/). Kustomize provides resource Generators to
-create Secrets and ConfigMaps. The Kustomize generators should be specified in a
-`kustomization.yaml` file inside a directory. After generating the Secret,
-you can create the Secret on the API server with `kubectl apply`.
-
-#### Generating a Secret from files
-
-You can generate a Secret by defining a `secretGenerator` from the
-files ./username.txt and ./password.txt:
-
-```shell
-cat <<EOF >./kustomization.yaml
-secretGenerator:
-- name: db-user-pass
-  files:
-  - username.txt
-  - password.txt
-EOF
-```
-
-Apply the directory, containing the `kustomization.yaml`, to create the Secret.
-
-```shell
-kubectl apply -k .
-```
-
-The output is similar to:
-
-```
-secret/db-user-pass-96mffmfh4k created
-```
-
-You can check that the secret was created:
-
-```shell
-kubectl get secrets
-```
-
-The output is similar to:
-
-```
-NAME                             TYPE                                  DATA      AGE
-db-user-pass-96mffmfh4k          Opaque                                2         51s
-```
-
-You can view a description of the secret:
-
-```shell
-kubectl describe secrets/db-user-pass-96mffmfh4k
-```
-
-The output is similar to:
-
-```
-Name:            db-user-pass
-Namespace:       default
-Labels:          <none>
-Annotations:     <none>
-
-Type:            Opaque
-
-Data
-====
-password.txt:    12 bytes
-username.txt:    5 bytes
-```
-
-#### Generating a Secret from string literals
-
-You can create a Secret by defining a `secretGenerator`
-from literals `username=admin` and `password=secret`:
-
-```shell
-cat <<EOF >./kustomization.yaml
-secretGenerator:
-- name: db-user-pass
-  literals:
-  - username=admin
-  - password=secret
-EOF
-```
-
-Apply the directory, containing the `kustomization.yaml`, to create the Secret.
-
-```shell
-kubectl apply -k .
-```
-
-The output is similar to:
-
-```
-secret/db-user-pass-dddghtt9b5 created
-```
-
-{{< note >}}
-When a Secret is generated, the Secret name is created by hashing
-the Secret data and appending this value to the name. This ensures that
-a new Secret is generated each time the data is modified.
-{{< /note >}}
-
-#### Decoding a Secret
-
-Secrets can be retrieved by running `kubectl get secret`.
-For example, you can view the Secret created in the previous section by
-running the following command:
-
-```shell
-kubectl get secret mysecret -o yaml
-```
-
-The output is similar to:
-
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  creationTimestamp: 2016-01-22T18:41:56Z
-  name: mysecret
-  namespace: default
-  resourceVersion: "164619"
-  uid: cfee02d6-c137-11e5-8d73-42010af00002
-type: Opaque
-data:
-  username: YWRtaW4=
-  password: MWYyZDFlMmU2N2Rm
-```
-
-Decode the `password` field:
-
-```shell
-echo 'MWYyZDFlMmU2N2Rm' | base64 --decode
-```
-
-The output is similar to:
-
-```
-1f2d1e2e67df
-```
-
-#### Editing a Secret
+### Editing a Secret
 
 An existing Secret may be edited with the following command:
 
@@ -1273,3 +893,11 @@ for secret data, so that the secrets are not stored in the clear into {{< glossa
    by impersonating the kubelet. It is a planned feature to only send secrets to
    nodes that actually require them, to restrict the impact of a root exploit on a
    single node.
+
+
+## {{% heading "whatsnext" %}}
+
+- Learn how to [manage Secret using `kubectl`](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+
diff --git a/content/en/docs/tasks/configmap-secret/_index.md b/content/en/docs/tasks/configmap-secret/_index.md
new file mode 100755
index 0000000000..d80692c967
--- /dev/null
+++ b/content/en/docs/tasks/configmap-secret/_index.md
@@ -0,0 +1,6 @@
+---
+title: "Managing Secrets"
+weight: 28
+description: Managing confidential settings data using Secrets.
+---
+
diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
new file mode 100644
index 0000000000..13ffa70b3c
--- /dev/null
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -0,0 +1,198 @@
+---
+title: Managing Secret using Configuration File
+content_type: task
+weight: 20
+description: Creating Secret objects using resource configuration file.
+---
+
+<!-- overview -->
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+## Create the Config file
+
+You can create a Secret in a file first, in JSON or YAML format, and then
+create that object.  The
+[Secret](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)
+resource contains two maps: `data` and `stringData`.
+The `data` field is used to store arbitrary data, encoded using base64. The
+`stringData` field is provided for convenience, and it allows you to provide
+Secret data as unencoded strings.
+The keys of `data` and `stringData` must consist of alphanumeric characters,
+`-`, `_` or `.`.
+
+For example, to store two strings in a Secret using the `data` field, convert
+the strings to base64 as follows:
+
+```shell
+echo -n 'admin' | base64
+```
+
+The output is similar to:
+
+```
+YWRtaW4=
+```
+
+```shell
+echo -n '1f2d1e2e67df' | base64
+```
+
+The output is similar to:
+
+```
+MWYyZDFlMmU2N2Rm
+```
+
+Write a Secret config file that looks like this:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  username: YWRtaW4=
+  password: MWYyZDFlMmU2N2Rm
+```
+
+Note that the name of a Secret object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
+
+{{< note >}}
+The serialized JSON and YAML values of Secret data are encoded as base64
+strings. Newlines are not valid within these strings and must be omitted. When
+using the `base64` utility on Darwin/macOS, users should avoid using the `-b`
+option to split long lines. Conversely, Linux users *should* add the option
+`-w 0` to `base64` commands or the pipeline `base64 | tr -d '\n'` if the `-w`
+option is not available.
+{{< /note >}}
+
+For certain scenarios, you may wish to use the `stringData` field instead. This
+field allows you to put a non-base64 encoded string directly into the Secret,
+and the string will be encoded for you when the Secret is created or updated.
+
+A practical example of this might be where you are deploying an application
+that uses a Secret to store a configuration file, and you want to populate
+parts of that configuration file during your deployment process.
+
+For example, if your application uses the following configuration file:
+
+```yaml
+apiUrl: "https://my.api.com/api/v1"
+username: "<user>"
+password: "<password>"
+```
+
+You could store this in a Secret using the following definition:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+stringData:
+  config.yaml: |
+    apiUrl: "https://my.api.com/api/v1"
+    username: <user>
+    password: <password>
+```
+
+## Create the Secret object
+
+Now create the Secret using [`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands#apply):
+
+```shell
+kubectl apply -f ./secret.yaml
+```
+
+The output is similar to:
+
+```
+secret/mysecret created
+```
+
+## Check the Secret
+
+The `stringData` field is a write-only convenience field. It is never output when
+retrieving Secrets. For example, if you run the following command:
+
+```shell
+kubectl get secret mysecret -o yaml
+```
+
+The output is similar to:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: 2018-11-15T20:40:59Z
+  name: mysecret
+  namespace: default
+  resourceVersion: "7225"
+  uid: c280ad2e-e916-11e8-98f2-025000000001
+type: Opaque
+data:
+  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
+```
+
+The commands `kubectl get` and `kubectl describe` avoid showing the contents of a `Secret` by
+default. This is to protect the `Secret` from being exposed accidentally to an onlooker,
+or from being stored in a terminal log.
+To check the actual content of the encoded data, please refer to
+[decoding secret](/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
+
+If a field, such as `username`, is specified in both `data` and `stringData`,
+the value from `stringData` is used. For example, the following Secret definition:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  username: YWRtaW4=
+stringData:
+  username: administrator
+```
+
+Results in the following Secret:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: 2018-11-15T20:46:46Z
+  name: mysecret
+  namespace: default
+  resourceVersion: "7579"
+  uid: 91460ecb-e917-11e8-98f2-025000000001
+type: Opaque
+data:
+  username: YWRtaW5pc3RyYXRvcg==
+```
+
+Where `YWRtaW5pc3RyYXRvcg==` decodes to `administrator`.
+
+## Clean Up
+
+To delete the Secret you have just created:
+
+```shell
+kubectl delete secret db-user-pass
+```
+
+## {{% heading "whatsnext" %}}
+
+- Read more about the [Secret concept](/docs/concepts/configuration/secret/)
+- Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- Learn how to [manage Secret using kustomizae](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+
diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
new file mode 100644
index 0000000000..22828d77a3
--- /dev/null
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -0,0 +1,157 @@
+---
+title: Managing Secret using `kubectl`
+content_type: task
+weight: 10
+description: Creating Secret objects using kubectl command line.
+---
+
+<!-- overview -->
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+## Create a Secret
+
+A `Secret` can contain user credentials required by Pods to access a database.
+For example, a database connection string consists of a username and password.
+You can store the username in a file `./username.txt` and the password in a
+file `./password.txt` on your local machine.
+
+```shell
+echo -n 'admin' > ./username.txt
+echo -n '1f2d1e2e67df' > ./password.txt
+```
+
+The `-n` flag in the above two commands ensures that the generated files will
+not contain an extra newline character at the end of the text. This is
+important because when `kubectl` reads a file and encode the content into
+base64 string, the extra newline character gets encoded too.
+
+The `kubectl create secret` command packages these files into a Secret and creates
+the object on the API server.
+
+```shell
+kubectl create secret generic db-user-pass \
+  --from-file=./username.txt \
+  --from-file=./password.txt
+```
+
+The output is similar to:
+
+```
+secret/db-user-pass created
+```
+
+Default key name is the filename. You may optionally set the key name using
+`--from-file=[key=]source`. For example:
+
+```shell
+kubectl create secret generic db-user-pass \
+  --from-file=username=./username.txt \
+  --from-file=password=./password.txt
+```
+
+You do not need to escape special characters in passwords from files
+(`--from-file`).
+
+You can also provide Secret data using the `--from-literal=<key>=<value>` tag.
+This tag can be specified more than once to provide multiple key-value pairs.
+Note that special characters such as `$`, `\`, `*`, `=`, and `!` will be
+interpreted by your [shell](https://en.wikipedia.org/wiki/Shell_(computing))
+and require escaping.
+In most shells, the easiest way to escape the password is to surround it with
+single quotes (`'`).  For example, if your actual password is `S!B\*d$zDsb=`,
+you should execute the command this way:
+
+```shell
+kubectl create secret generic dev-db-secret \
+  --from-literal=username=devuser \
+  --from-literal=password='S!B\*d$zDsb='
+```
+
+## Verify the Secret
+
+You can check that the secret was created:
+
+```shell
+kubectl get secrets
+```
+
+The output is similar to:
+
+```
+NAME                  TYPE                                  DATA      AGE
+db-user-pass          Opaque                                2         51s
+```
+
+You can view a description of the `Secret`:
+
+```shell
+kubectl describe secrets/db-user-pass
+```
+
+The output is similar to:
+
+```
+Name:            db-user-pass
+Namespace:       default
+Labels:          <none>
+Annotations:     <none>
+
+Type:            Opaque
+
+Data
+====
+password.txt:    12 bytes
+username.txt:    5 bytes
+```
+
+The commands `kubectl get` and `kubectl describe` avoid showing the contents
+of a `Secret` by default. This is to protect the `Secret` from being exposed
+accidentally to an onlooker, or from being stored in a terminal log.
+
+## Decoding the Secret  {#decoding-secret}
+
+To view the contents of the Secret we just created, you can run the following
+command:
+
+```shell
+kubectl get secret db-user-pass -o jsonpath='{.data}'
+```
+
+The output is similar to:
+
+```json
+{"password.txt":"MWYyZDFlMmU2N2Rm","username.txt":"YWRtaW4="}
+```
+
+Now you can decode the `password.txt` data:
+
+```shell
+echo 'MWYyZDFlMmU2N2Rm' | base64 --decode
+```
+
+The output is similar to:
+
+```
+1f2d1e2e67df
+```
+
+## Clean Up
+
+To delete the Secret you have just created:
+
+```shell
+kubectl delete secret db-user-pass
+```
+
+<!-- discussion -->
+
+## {{% heading "whatsnext" %}}
+
+- Read more about the [Secret concept](/docs/concepts/configuration/secret/)
+- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
new file mode 100644
index 0000000000..d7b1f48a4a
--- /dev/null
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
@@ -0,0 +1,128 @@
+---
+title: Managing Secret using Kustomize
+content_type: task
+weight: 30
+description: Creating Secret objects using kustomization.yaml file.
+---
+
+<!-- overview -->
+
+Since Kubernetes v1.14, `kubectl` supports
+[managing objects using Kustomize](/docs/tasks/manage-kubernetes-objects/kustomization/).
+Kustomize provides resource Generators to create Secrets and ConfigMaps. The
+Kustomize generators should be specified in a `kustomization.yaml` file inside
+a directory. After generating the Secret, you can create the Secret on the API
+server with `kubectl apply`.
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+## Create the Kustomization file
+
+You can generate a Secret by defining a `secretGenerator` in a
+`kustomization.yaml` file that references other existing files.
+For example, the following kustomization file references the
+`./username.txt` and the `./password.txt` files:
+
+```yaml
+secretGenerator:
+- name: db-user-pass
+  files:
+  - username.txt
+  - password.txt
+```
+
+You can also define the `secretGenerator` in the `kustomization.yaml`
+file by providing some literals.
+For example, the following `kustomization.yaml` file contains two literals
+for `username` and `password` respectively:
+
+```yaml
+secretGenerator:
+- name: db-user-pass
+  literals:
+  - username=admin
+  - password=1f2d1e2e67df
+```
+
+Note that in both cases, you don't need to base64 encode the values.
+
+## Create the Secret
+
+Apply the directory containing the `kustomization.yaml` to create the Secret.
+
+```shell
+kubectl apply -k .
+```
+
+The output is similar to:
+
+```
+secret/db-user-pass-96mffmfh4k created
+```
+
+Note that when a Secret is generated, the Secret name is created by hashing
+the Secret data and appending the hash value to the name. This ensures that
+a new Secret is generated each time the data is modified.
+
+## Check the Secret created
+
+You can check that the secret was created:
+
+```shell
+kubectl get secrets
+```
+
+The output is similar to:
+
+```
+NAME                             TYPE                                  DATA      AGE
+db-user-pass-96mffmfh4k          Opaque                                2         51s
+```
+
+You can view a description of the secret:
+
+```shell
+kubectl describe secrets/db-user-pass-96mffmfh4k
+```
+
+The output is similar to:
+
+```
+Name:            db-user-pass
+Namespace:       default
+Labels:          <none>
+Annotations:     <none>
+
+Type:            Opaque
+
+Data
+====
+password.txt:    12 bytes
+username.txt:    5 bytes
+```
+
+The commands `kubectl get` and `kubectl describe` avoid showing the contents of a `Secret` by
+default. This is to protect the `Secret` from being exposed accidentally to an onlooker,
+or from being stored in a terminal log.
+To check the actual content of the encoded data, please refer to
+[decoding secret](/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
+
+## Clean Up
+
+To delete the Secret you have just created:
+
+```shell
+kubectl delete secret db-user-pass-96mffmfh4k
+```
+
+<!-- Optional section; add links to information related to this topic. -->
+## {{% heading "whatsnext" %}}
+
+- Read more about the [Secret concept](/docs/concepts/configuration/secret/)
+- Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+

From 7f85c7de2aa032a4216b27f6a1c55546fe3e4f18 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Sun, 13 Sep 2020 21:27:04 +0800
Subject: [PATCH 302/496] Update get-shell-running-container.md

The end tag of note is missing.
---
 .../debug-application-cluster/get-shell-running-container.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md b/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md
index 885a2347e8..a9b63cd2a4 100644
--- a/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md
+++ b/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md
@@ -88,7 +88,7 @@ kubectl exec -it shell-demo -- /bin/bash
 The double dash symbol "--" is used to separate the arguments you want to pass to the command from the kubectl arguments.
 -->
 双破折号 "--" 用于将要传递给命令的参数与 kubectl 的参数分开。
-note >}}
+{{< /note >}}
 
 <!--
 In your shell, list the root directory:

From e724187a8a0ebebe4a6c6092f2aeca15ad8ad998 Mon Sep 17 00:00:00 2001
From: zhangguanzhang <zhangguanzhang@qq.com>
Date: Sun, 13 Sep 2020 21:36:52 +0800
Subject: [PATCH 303/496] fix wrong href in zh doc about kubelet-integration

---
 .../tools/kubeadm/kubelet-integration.md                  | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
index d2a8a87d1f..476c27f075 100644
--- a/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
+++ b/content/zh/docs/setup/production-environment/tools/kubeadm/kubelet-integration.md
@@ -319,10 +319,10 @@ This file specifies the default locations for all of the files managed by kubead
   `/etc/default/kubelet` (for DEBs), or `/etc/sysconfig/kubelet` (for RPMs). `KUBELET_EXTRA_ARGS`
   is last in the flag chain and has the highest priority in the event of conflicting settings.
 -->
-##  系统中的 kubelet 插件
+##  kubelet 的 systemd 文件 {#the-kubelet-drop-in-file-for-systemd}
 
-kubeadm 中附带了有关系统如何运行 kubelet 的配置。
-请注意 kubeadm CLI 命令不会触及此插件。
+kubeadm 中附带了有关系统如何运行 kubelet 的 systemd 配置文件。
+请注意 kubeadm CLI 命令不会修改此文件。
 
 通过 `kubeadm` [DEB](https://github.com/kubernetes/kubernetes/blob/master/build/debs/10-kubeadm.conf) 或者 [RPM 包](https://github.com/kubernetes/kubernetes/blob/master/build/rpms/10-kubeadm.conf) 安装的配置文件已被写入 `/etc/systemd/system/kubelet.service.d/10-kubeadm.conf` 并由系统使用。
 它加强了基础设施 [`kubelet.service` for RPM](https://github.com/kubernetes/kubernetes/blob/master/build/rpms/kubelet.service) (resp. [`kubelet.service` for DEB](https://github.com/kubernetes/kubernetes/blob/master/build/debs/kubelet.service)))：
@@ -372,7 +372,7 @@ Kubernetes 版本对应的 DEB 和 RPM 软件包是：
 
 | Package name | Description |
 |--------------|-------------|
-| `kubeadm`    | 给 kubelet 安装 `/usr/bin/kubeadm` CLI 工具和 [kubelet 插件](#the-kubelet-drop-in-file-for-systemd)。 |
+| `kubeadm`    | 给 kubelet 安装 `/usr/bin/kubeadm` CLI 工具和 [kubelet 的 systemd 文件](#the-kubelet-drop-in-file-for-systemd)。 |
 | `kubelet`    | 安装 `/usr/bin/kubelet` 二进制文件和 `/opt/cni/bin` CNI 二进制文件。 |
 | `kubectl`    | 安装 `/usr/bin/kubectl` 二进制文件。 |
 | `cri-tools` | 从 [cri-tools git 仓库](https://github.com/kubernetes-incubator/cri-tools)中安装 `/usr/bin/crictl` 二进制文件。 |

From 252e03784623fe781d9c82738f2c9b62e0436f96 Mon Sep 17 00:00:00 2001
From: zhangguanzhang <zhangguanzhang@qq.com>
Date: Sun, 13 Sep 2020 22:01:17 +0800
Subject: [PATCH 304/496] zh add missing table

---
 .../concepts/services-networking/service.md    | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index 294738085d..a3401b30f5 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -1129,6 +1129,24 @@ metadata:
 [...]
 ```
 {{% /tab %}}
+{{% tab name="Tencent Cloud" %}}
+```yaml
+[...]
+metadata:
+  annotations:
+    service.kubernetes.io/qcloud-loadbalancer-internal-subnetid: subnet-xxxxx
+[...]
+```
+{{% /tab %}}
+{{% tab name="Alibaba Cloud" %}}
+```yaml
+[...]
+metadata:
+  annotations:
+    service.beta.kubernetes.io/alibaba-cloud-loadbalancer-address-type: "intranet"
+[...]
+```
+{{% /tab %}}
 {{< /tabs >}}
 
 <!--

From f6c6b9406ee5ebb0ad8a7a4eaa14a922e02eb0ba Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Fri, 11 Sep 2020 21:12:41 +0800
Subject: [PATCH 305/496] [zh] udpate index page of contribute  #23810 make
 style changes according to idealhack's comment make style and translation
 changes according to tengqm's comment

---
 content/zh/docs/contribute/_index.md | 189 ++++++++++++++++++++++++++-
 1 file changed, 185 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/contribute/_index.md b/content/zh/docs/contribute/_index.md
index 0acea1e84a..a5f076c16b 100644
--- a/content/zh/docs/contribute/_index.md
+++ b/content/zh/docs/contribute/_index.md
@@ -1,9 +1,190 @@
 ---
-title: 贡献新内容
-weight: 20
+content_type: concept
+title: 贡献 Kubernetes 文档
+linktitle: 贡献
+main_menu: true
+no_list: true
+weight: 80
+card:
+  name: 贡献
+  weight: 10
+  title: 开始贡献
 ---
+<!--
+---
+content_type: concept
+title: Contribute to Kubernetes docs
+linktitle: Contribute
+main_menu: true
+no_list: true
+weight: 80
+card:
+  name: contribute
+  weight: 10
+  title: Start contributing
+---
+-->
+
+<!-- overview -->
 
 <!--
-title: Contributing new content
-weight: 20
+This website is maintained by [Kubernetes SIG Docs](/docs/contribute/#get-involved-with-sig-docs).
+
+Kubernetes documentation contributors:
+
+- Improve existing content
+- Create new content
+- Translate the documentation
+- Manage and publish the documentation parts of the Kubernetes release cycle
+
+Kubernetes documentation welcomes improvements from all contributors, new and experienced!
 -->
+
+本网站由 [Kubernetes SIG（特别兴趣小组） Docs](/zh/docs/contribute/#参与docs特别兴趣小组) 维护.
+
+Kubernetes 文档项目的贡献者:
+
+- 改进现有内容
+- 创建新内容
+- 翻译文档
+- 管理并发布 Kubernetes 周期性发行版的文档
+
+Kubernetes 文档欢迎来自各方贡献者的改进，无论新手还是高手！
+
+<!-- body -->
+
+<!-- 
+## Getting started
+
+Anyone can open an issue about documentation, or contribute a change with a
+pull request (PR) to the
+[`kubernetes/website` GitHub repository](https://github.com/kubernetes/website).
+You need to be comfortable with
+[git](https://git-scm.com/) and
+[GitHub](https://lab.github.com/)
+to work effectively in the Kubernetes community.
+
+To get involved with documentation:
+
+1. Sign the CNCF [Contributor License Agreement](https://github.com/kubernetes/community/blob/master/CLA.md).
+1. Familiarize yourself with the [documentation repository](https://github.com/kubernetes/website)
+   and the website's [static site generator](https://gohugo.io).
+1. Make sure you understand the basic processes for
+   [opening a pull request](/docs/contribute/new-content/open-a-pr/) and
+   [reviewing changes](/docs/contribute/review/reviewing-prs/).
+
+Some tasks require more trust and more access in the Kubernetes organization.
+See [Participating in SIG Docs](/docs/contribute/participate/) for more details about
+roles and permissions.
+-->
+## 入门
+
+任何人都可以提出文档方面的问题（issue），或贡献一个变更，用拉取请求（PR）的方式提交到
+[GitHub 上的 `kubernetes/website` 仓库](https://github.com/kubernetes/website)。
+当然你需要熟练使用 [git](https://git-scm.com/) 和 [GitHub](https://lab.github.com/) 才能在 Kubernetes 社区中有效工作。
+
+参与文档编制:
+
+1. 签署 CNCF 的[贡献者许可协议](https://github.com/kubernetes/community/blob/master/CLA.md)。
+2. 熟悉[文档仓库](https://github.com/kubernetes/website)
+   和网站的[静态站点生成器](https://gohugo.io)。
+3. 确保理解
+   [发起拉取请求 (PR)](/zh/docs/contribute/new-content/open-a-pr/) 和
+   [审查变更](/zh/docs/contribute/review/reviewing-prs/) 的基本流程。
+
+有些任务要求 Kubernetes 组织内更高的信任级别和访问权限。
+阅读[参与 SIG Docs 工作](/zh/docs/contribute/participate/) ，获取角色和权限的更多细节。
+
+<!--
+## Your first contribution
+
+- Read the [Contribution overview](/docs/contribute/new-content/overview/) to
+  learn about the different ways you can contribute.
+- Check [`kubernetes/website` issues list](https://github.com/kubernetes/website/issues/)
+  for issues that make good entry points.
+- [Open a pull request using GitHub](/docs/contribute/new-content/open-a-pr/#changes-using-github)
+  to existing documentation and learn more about filing issues in GitHub.
+- [Review pull requests](/docs/contribute/review/reviewing-prs/) from other
+  Kubernetes community members for accuracy and language.
+- Read the Kubernetes [content](/docs/contribute/style/content-guide/) and
+  [style guides](/docs/contribute/style/style-guide/) so you can leave informed comments.
+- Learn about [page content types](/docs/contribute/style/page-content-types/)
+  and [Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/).
+-->
+## 第一次贡献
+
+- 通读[贡献概述](/zh/docs/contribute/new-content/overview/)，了解参与贡献的不同方式。
+- 查看[`kubernetes/website` 问题列表](https://github.com/kubernetes/website/issues/)
+  ，检索最适合作为切入点的问题。
+- 在现有文档上，
+  [使用 GitHub 提交变更 (PR)](/zh/docs/contribute/new-content/open-a-pr/#changes-using-github)，
+  掌握在 GitHub 上登记 Issue 的方法。
+- Kubernetes 社区其他成员会[评审拉取请求 (PR)](/zh/docs/contribute/review/reviewing-prs/)，
+  以确保文档精准和语言流畅。
+- 阅读 kubernetes 的[内容指南](/zh/docs/contribute/style/content-guide/)和
+  [风格指南](/docs/contribute/style/style-guide/) ，以发表有见地的评论。
+- 了解[页面内容类型](/zh/docs/contribute/style/page-content-types/)和 
+  [Hugo 短代码](/zh/docs/contribute/style/hugo-shortcodes/)。
+
+<!--
+## Next steps
+
+- Learn to [work from a local clone](/docs/contribute/new-content/open-a-pr/#fork-the-repo)
+  of the repository.
+- Document [features in a release](/docs/contribute/new-content/new-features/).
+- Participate in [SIG Docs](/docs/contribute/participate/), and become a
+  [member or reviewer](/docs/contribute/participate/roles-and-responsibilities/).
+                       
+- Start or help with a [localization](/docs/contribute/localization/).
+-->
+## 下一步
+
+- 学习在仓库的[本地克隆中工作](/zh/docs/contribute/new-content/open-a-pr/#fork-the-repo)。
+- 为[发行版的特性](/zh/docs/contribute/new-content/new-features/)编写文档。
+- 加入 [SIG Docs](/zh/docs/contribute/participate/), 并成为[成员或评审者](/zh/docs/contribute/participate/roles-and-responsibilities/)。
+                       
+- 开始或帮助[本地化](/zh/docs/contribute/localization/) 工作。
+
+<!--
+## Get involved with SIG Docs
+
+[SIG Docs](/docs/contribute/participate/) is the group of contributors who
+publish and maintain Kubernetes documentation and the website. Getting
+involved with SIG Docs is a great way for Kubernetes contributors (feature
+development or otherwise) to have a large impact on the Kubernetes project.
+
+SIG Docs communicates with different methods:
+
+- [Join `#sig-docs` on the Kubernetes Slack instance](https://slack.k8s.io/). Make sure to
+  introduce yourself!
+- [Join the `kubernetes-sig-docs` mailing list](https://groups.google.com/forum/#!forum/kubernetes-sig-docs),
+  where broader discussions take place and official decisions are recorded.
+- Join the [weekly SIG Docs video meeting](https://github.com/kubernetes/community/tree/master/sig-docs). Meetings are always announced on `#sig-docs` and added to the [Kubernetes community meetings calendar](https://calendar.google.com/calendar/embed?src=cgnt364vd8s86hr2phapfjc6uk%40group.calendar.google.com&ctz=America/Los_Angeles). You'll need to download the [Zoom client](https://zoom.us/download) or dial in using a phone.
+-->
+## 参与 SIG Docs 工作
+
+[SIG Docs](/zh/docs/contribute/participate/) 是负责发布、维护 Kubernetes 文档的贡献者团体。
+参与 SIG Docs 是 Kubernetes 贡献者（开发者和其他人员）对 Kubernetes 项目产生重大影响力的好方式。
+
+SIG Docs 的几种沟通方式:
+
+- [加入 Kubernetes 在 Slack 上的`#sig-docs` 频道](https://slack.k8s.io/)。
+  一定记得自我介绍!
+- [加入`kubernetes-sig-docs` 邮件列表](https://groups.google.com/forum/#!forum/kubernetes-sig-docs),
+  这里有更广泛的讨论，和官方决策的记录。
+- 参加 [SIG Docs 的每周视频会议](https://github.com/kubernetes/community/tree/master/sig-docs)。会议总是在 `#sig-docs` 上宣告，同时添加到 
+  [Kubernetes社区会议日历](https://calendar.google.com/calendar/embed?src=cgnt364vd8s86hr2phapfjc6uk%40group.calendar.google.com&ctz=America/Los_Angeles)。
+  你需要下载 [Zoom 客户端软件](https://zoom.us/download)，或电话拨号接入。
+
+<!--
+## Other ways to contribute
+
+- Visit the [Kubernetes community site](/community/). Participate on Twitter or Stack Overflow, learn about local Kubernetes meetups and events, and more.
+- Read the [contributor cheatsheet](https://github.com/kubernetes/community/tree/master/contributors/guide/contributor-cheatsheet) to get involved with Kubernetes feature development.
+- Submit a [blog post or case study](/docs/contribute/new-content/blogs-case-studies/).
+-->
+## 其他贡献方式
+
+- 访问 [Kubernetes 社区网站](/zh/community/)。 参与 Twitter 或 Stack Overflow, 了解 Kubernetes 当地的聚会和活动, 等等。
+- 阅读[贡献者备忘单](https://github.com/kubernetes/community/tree/master/contributors/guide/contributor-cheatsheet) ，参与 Kubernetes 功能开发。
+- 提交一篇[博客文章或案例研究](/zh/docs/contribute/new-content/blogs-case-studies/)。

From c1f104e5f8b33b20ce4ff2a37f706b50a4e81da4 Mon Sep 17 00:00:00 2001
From: Chris Tomas <chris.tomas20@gmail.com>
Date: Sun, 13 Sep 2020 14:33:38 -0500
Subject: [PATCH 306/496] Update manage-resources-containers.md

Removed the "env" object from the "Meaning of memory" section. It has no utility.
---
 .../docs/concepts/configuration/manage-resources-containers.md   | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/en/docs/concepts/configuration/manage-resources-containers.md b/content/en/docs/concepts/configuration/manage-resources-containers.md
index 1f907ad0d0..e314a2c9d7 100644
--- a/content/en/docs/concepts/configuration/manage-resources-containers.md
+++ b/content/en/docs/concepts/configuration/manage-resources-containers.md
@@ -134,7 +134,6 @@ spec:
   containers:
   - name: app
     image: images.my-company.example/app:v4
-    env:
     resources:
       requests:
         memory: "64Mi"

From b8e9488d84941822bd7828dce1ad0180ae44f431 Mon Sep 17 00:00:00 2001
From: Riley Littlefield <rileylittlefield6122428@gmail.com>
Date: Sun, 13 Sep 2020 22:47:25 -0400
Subject: [PATCH 307/496] Fixes typo

---
 content/en/docs/concepts/workloads/pods/pod-lifecycle.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
index 31a92593da..9dc37c357c 100644
--- a/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/en/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -99,7 +99,7 @@ assigns a Pod to a Node, the kubelet starts creating containers for that Pod
 using a {{< glossary_tooltip text="container runtime" term_id="container-runtime" >}}.
 There are three possible container states: `Waiting`, `Running`, and `Terminated`.
 
-To the check state of a Pod's containers, you can use
+To check the state of a Pod's containers, you can use
 `kubectl describe pod <name-of-pod>`. The output shows the state for each container
 within that Pod.
 

From d4c26e9840afc42e51cde12f62b13bce756fba05 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Mon, 14 Sep 2020 15:48:55 +0800
Subject: [PATCH 308/496] Update get-shell-running-container.md

remove 2-4 which is unused code.
---
 .../debug-application-cluster/get-shell-running-container.md   | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md b/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md
index a9b63cd2a4..591e9ea1a4 100644
--- a/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md
+++ b/content/zh/docs/tasks/debug-application-cluster/get-shell-running-container.md
@@ -1,7 +1,4 @@
 ---
-reviewers:
-- caesarxuchao
-- mikedanese
 title: 获取正在运行容器的 Shell
 content_type: task
 ---

From ea7e9c0f552fec361a5366872c7d49b38f408565 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Fri, 11 Sep 2020 21:12:41 +0800
Subject: [PATCH 309/496] [zh] udpate index page of contribute  #23810 make
 style changes according to idealhack's comment make style and translation
 changes according to tengqm's comment make style change according to style
 guide

---
 content/zh/docs/contribute/_index.md | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/content/zh/docs/contribute/_index.md b/content/zh/docs/contribute/_index.md
index a5f076c16b..f106a3e0c6 100644
--- a/content/zh/docs/contribute/_index.md
+++ b/content/zh/docs/contribute/_index.md
@@ -40,7 +40,7 @@ Kubernetes documentation contributors:
 Kubernetes documentation welcomes improvements from all contributors, new and experienced!
 -->
 
-本网站由 [Kubernetes SIG（特别兴趣小组） Docs](/zh/docs/contribute/#参与docs特别兴趣小组) 维护.
+本网站由 [Kubernetes SIG（特别兴趣小组） Docs](/zh/docs/contribute/#get-involved-with-SIG-Docs) 维护.
 
 Kubernetes 文档项目的贡献者:
 
@@ -77,7 +77,7 @@ Some tasks require more trust and more access in the Kubernetes organization.
 See [Participating in SIG Docs](/docs/contribute/participate/) for more details about
 roles and permissions.
 -->
-## 入门
+## 入门 {#getting-started}
 
 任何人都可以提出文档方面的问题（issue），或贡献一个变更，用拉取请求（PR）的方式提交到
 [GitHub 上的 `kubernetes/website` 仓库](https://github.com/kubernetes/website)。
@@ -89,8 +89,8 @@ roles and permissions.
 2. 熟悉[文档仓库](https://github.com/kubernetes/website)
    和网站的[静态站点生成器](https://gohugo.io)。
 3. 确保理解
-   [发起拉取请求 (PR)](/zh/docs/contribute/new-content/open-a-pr/) 和
-   [审查变更](/zh/docs/contribute/review/reviewing-prs/) 的基本流程。
+   [发起 PR](/zh/docs/contribute/new-content/open-a-pr/) 和
+   [审查变更](/zh/docs/contribute/review/reviewing-prs/)的基本流程。
 
 有些任务要求 Kubernetes 组织内更高的信任级别和访问权限。
 阅读[参与 SIG Docs 工作](/zh/docs/contribute/participate/) ，获取角色和权限的更多细节。
@@ -111,18 +111,18 @@ roles and permissions.
 - Learn about [page content types](/docs/contribute/style/page-content-types/)
   and [Hugo shortcodes](/docs/contribute/style/hugo-shortcodes/).
 -->
-## 第一次贡献
+## 第一次贡献 {#your-first-contribution}
 
 - 通读[贡献概述](/zh/docs/contribute/new-content/overview/)，了解参与贡献的不同方式。
 - 查看[`kubernetes/website` 问题列表](https://github.com/kubernetes/website/issues/)
   ，检索最适合作为切入点的问题。
 - 在现有文档上，
-  [使用 GitHub 提交变更 (PR)](/zh/docs/contribute/new-content/open-a-pr/#changes-using-github)，
+  [使用 GitHub 提交 PR ](/zh/docs/contribute/new-content/open-a-pr/#changes-using-github)，
   掌握在 GitHub 上登记 Issue 的方法。
-- Kubernetes 社区其他成员会[评审拉取请求 (PR)](/zh/docs/contribute/review/reviewing-prs/)，
+- Kubernetes 社区其他成员会[评审 PR ](/zh/docs/contribute/review/reviewing-prs/)，
   以确保文档精准和语言流畅。
 - 阅读 kubernetes 的[内容指南](/zh/docs/contribute/style/content-guide/)和
-  [风格指南](/docs/contribute/style/style-guide/) ，以发表有见地的评论。
+  [风格指南](/zh/docs/contribute/style/style-guide/)，以发表有见地的评论。
 - 了解[页面内容类型](/zh/docs/contribute/style/page-content-types/)和 
   [Hugo 短代码](/zh/docs/contribute/style/hugo-shortcodes/)。
 
@@ -137,7 +137,7 @@ roles and permissions.
                        
 - Start or help with a [localization](/docs/contribute/localization/).
 -->
-## 下一步
+## 下一步 {#next-teps}
 
 - 学习在仓库的[本地克隆中工作](/zh/docs/contribute/new-content/open-a-pr/#fork-the-repo)。
 - 为[发行版的特性](/zh/docs/contribute/new-content/new-features/)编写文档。
@@ -161,7 +161,7 @@ SIG Docs communicates with different methods:
   where broader discussions take place and official decisions are recorded.
 - Join the [weekly SIG Docs video meeting](https://github.com/kubernetes/community/tree/master/sig-docs). Meetings are always announced on `#sig-docs` and added to the [Kubernetes community meetings calendar](https://calendar.google.com/calendar/embed?src=cgnt364vd8s86hr2phapfjc6uk%40group.calendar.google.com&ctz=America/Los_Angeles). You'll need to download the [Zoom client](https://zoom.us/download) or dial in using a phone.
 -->
-## 参与 SIG Docs 工作
+## 参与 SIG Docs 工作 {#get-involved-with-SIG-Docs}
 
 [SIG Docs](/zh/docs/contribute/participate/) 是负责发布、维护 Kubernetes 文档的贡献者团体。
 参与 SIG Docs 是 Kubernetes 贡献者（开发者和其他人员）对 Kubernetes 项目产生重大影响力的好方式。
@@ -183,8 +183,8 @@ SIG Docs 的几种沟通方式:
 - Read the [contributor cheatsheet](https://github.com/kubernetes/community/tree/master/contributors/guide/contributor-cheatsheet) to get involved with Kubernetes feature development.
 - Submit a [blog post or case study](/docs/contribute/new-content/blogs-case-studies/).
 -->
-## 其他贡献方式
+## 其他贡献方式 {#other-ways-to-contribute}
 
 - 访问 [Kubernetes 社区网站](/zh/community/)。 参与 Twitter 或 Stack Overflow, 了解 Kubernetes 当地的聚会和活动, 等等。
-- 阅读[贡献者备忘单](https://github.com/kubernetes/community/tree/master/contributors/guide/contributor-cheatsheet) ，参与 Kubernetes 功能开发。
+- 阅读[贡献者备忘单](https://github.com/kubernetes/community/tree/master/contributors/guide/contributor-cheatsheet)，参与 Kubernetes 功能开发。
 - 提交一篇[博客文章或案例研究](/zh/docs/contribute/new-content/blogs-case-studies/)。

From 4245414a3e9e54981a48ed4975c76b10a2ea305a Mon Sep 17 00:00:00 2001
From: buptliuwei <buptliuwei718@gmail.com>
Date: Mon, 14 Sep 2020 18:04:08 +0800
Subject: [PATCH 310/496] fix "visible" translation in static-pod.md

The translation of visible is wrong in the Chinese document, easily misleading
---
 content/zh/docs/tasks/configure-pod-container/static-pod.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/configure-pod-container/static-pod.md b/content/zh/docs/tasks/configure-pod-container/static-pod.md
index 573bdd8d2d..064313cc6a 100644
--- a/content/zh/docs/tasks/configure-pod-container/static-pod.md
+++ b/content/zh/docs/tasks/configure-pod-container/static-pod.md
@@ -39,7 +39,7 @@ instead.
 
 kubelet 会尝试通过 Kubernetes API 服务器为每个静态 Pod 自动创建一个
 {{< glossary_tooltip text="镜像 Pod" term_id="mirror-pod" >}}。
-这意味着节点上运行的静态 Pod 对 API 服务来说是不可见的，但是不能通过 API 服务器来控制。
+这意味着节点上运行的静态 Pod 对 API 服务来说是可见的，但是不能通过 API 服务器来控制。
 
 {{< note >}}
 如果你在运行一个 Kubernetes 集群，并且在每个节点上都运行一个静态 Pod，

From 3535bf280eb3f02b205fab9e0c537fe38b74024c Mon Sep 17 00:00:00 2001
From: inductor <kohei.ota@hpe.com>
Date: Mon, 14 Sep 2020 20:03:50 +0900
Subject: [PATCH 311/496] small k in url

---
 content/en/docs/reference/glossary/platform-developer.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/glossary/platform-developer.md b/content/en/docs/reference/glossary/platform-developer.md
index ed961c27f2..8489aea94e 100755
--- a/content/en/docs/reference/glossary/platform-developer.md
+++ b/content/en/docs/reference/glossary/platform-developer.md
@@ -14,8 +14,8 @@ tags:
 
 <!--more--> 
 
-A platform developer may, for example, use [Custom Resources](/docs/concepts/extend-Kubernetes/api-extension/custom-resources/) or
-[Extend the Kubernetes API with the aggregation layer](/docs/concepts/extend-Kubernetes/api-extension/apiserver-aggregation/)
+A platform developer may, for example, use [Custom Resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/) or
+[Extend the Kubernetes API with the aggregation layer](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)
 to add functionality to their instance of Kubernetes, specifically for their application.
 Some Platform Developers are also {{< glossary_tooltip text="contributors" term_id="contributor" >}} and
 develop extensions which are contributed to the Kubernetes community.

From b631c25087a460fcd7a779085f810f6e617368cb Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 27 Aug 2020 08:42:04 +0900
Subject: [PATCH 312/496] Translate "deprecation_title" into Japanese.

---
 i18n/ja.toml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/i18n/ja.toml b/i18n/ja.toml
index 460e68b3f7..a7a103f435 100644
--- a/i18n/ja.toml
+++ b/i18n/ja.toml
@@ -28,12 +28,15 @@ other = "Twitter"
 [community_youtube_name]
 other = "YouTube"
 
-[deprecation_warning]
-other = " のドキュメントは積極的にメンテナンスされていません。現在表示されているバージョンはスナップショットです。最新のドキュメントはこちらです: "
-
 [deprecation_file_warning]
 other = "廃止予定"
 
+[deprecation_title]
+other = "現在表示しているのは、次のバージョン向けのドキュメントです。Kubernetesバージョン:"
+
+[deprecation_warning]
+other = " のドキュメントは積極的にメンテナンスされていません。現在表示されているバージョンはスナップショットです。最新のドキュメントはこちらです: "
+
 [docs_label_browse]
 other = "ドキュメントの参照"
 

From bb4e128e23f7789c548e3ea8b9ea83f5ea443cc4 Mon Sep 17 00:00:00 2001
From: Miftahun Najat <miftahunajat@gmail.com>
Date: Sat, 12 Sep 2020 09:38:04 +0700
Subject: [PATCH 313/496] ID localization for run-application
 horizontal-pod-autoscale-walkthrough

---
 .../id/docs/reference/glossary/kuantitas.md   |  28 ++
 .../horizontal-pod-autoscale-walkthrough.md   | 448 ++++++++++++++++++
 .../examples/application/hpa/php-apache.yaml  |  12 +
 .../id/examples/application/php-apache.yaml   |  36 ++
 4 files changed, 524 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/kuantitas.md
 create mode 100644 content/id/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
 create mode 100644 content/id/examples/application/hpa/php-apache.yaml
 create mode 100644 content/id/examples/application/php-apache.yaml

diff --git a/content/id/docs/reference/glossary/kuantitas.md b/content/id/docs/reference/glossary/kuantitas.md
new file mode 100644
index 0000000000..ddac5a5ded
--- /dev/null
+++ b/content/id/docs/reference/glossary/kuantitas.md
@@ -0,0 +1,28 @@
+---
+title: Kuantitas
+id: kuantitas
+date: 2018-08-07
+full_link:
+short_description: >
+  Representasi bilangan bulat dari bilangan kecil atau bilangan besar menggunakan sufiks SI.
+
+aka: 
+tags:
+- core-object
+---
+ Representasi bilangan bulat dari bilangan kecil atau besar menggunakan sufiks SI.
+
+<!--lebih lanjut-->
+
+Kuantitas adalah representasi dari bilangan kecil atau besar menggunakan notasi 
+bilangan bulat kompak dengan sufiks SI. Bilangan pecahan direpresentasikan dengan satuan mili, 
+sedangkan bilangan besar direpresentasikan dengan satuan kilo, mega, atau giga.
+
+Misalnya, angka `1,5` direpresentasikan sebagai` 1500m`, sedangkan angka `1000` dapat direpresentasikan sebagai` 1k`, dan `1000000` sebagai` 1M`.  Kamu juga dapat menentukan sufiks notasi biner; angka 2048 dapat 
+ditulis sebagai `2Ki`.
+
+Satuan desimal yang diterima (pangkat 10) adalah `m` (mili),` k` (kilo,
+sengaja huruf kecil), `M` (mega),` G` (giga), `T` (tera),` P` (peta),
+`E` (exa).
+
+Unit biner (pangkat-2) yang diterima adalah `Ki` (kibi),` Mi` (mebi), `Gi` (gibi),` Ti` (tebi), `Pi` (pebi),` Ei` (exbi).
diff --git a/content/id/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/id/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
new file mode 100644
index 0000000000..da873c4373
--- /dev/null
+++ b/content/id/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -0,0 +1,448 @@
+---
+title: Panduan HorizontalPodAutoscaler
+content_type: task
+weight: 100
+---
+
+<!-- overview -->
+
+HorizontalPodAutoscaler secara otomatis akan memperbanyak jumlah Pod di dalam ReplicationController, Deployment, 
+ReplicaSet ataupun StatefulSet berdasarkan hasil observasi penggunaan CPU (atau, dengan 
+[metrik khusus](https://git.k8s.io/community/contributors/design-proposals/instrumentation/custom-metrics-api.md), pada beberapa aplikasi yang menyediakan metrik).
+
+Laman ini memandu kamu dengan contoh pengaktifan HorizontalPodAutoscaler untuk server php-apache.  Untuk informasi lebih lanjut tentang perilaku HorizontalPodAutoscaler, lihat [Petunjuk pengguna HorizontalPodAutoscaler](/id/docs/tasks/run-application/horizontal-pod-autoscaler/).
+
+
+
+
+## {{% heading "prasyarat" %}}
+
+
+Contoh dibawah ini membutuhkan klaster Kubernetes dan kubectl di versi 1.2 atau yang lebih baru yang sedang berjalan. 
+[Server metrik](https://github.com/kubernetes-incubator/metrics-server/) sebagai pemantauan perlu diluncurkan di dalam sebuah klaster 
+untuk menyediakan metrik melalui metrik API sumber daya, karena HorizontalPodAutoscaler menggunakan API ini untuk mengumpulkan metrik. Petunjuk untuk menerapkan server metrik ada di repositori GitHub dari [server metrik](https://github.com/kubernetes-incubator/metrics-server/), jika kamu mengikuti petunjuk [memulai panduan GCE](/docs/setup/production-environment/turnkey/gce/),
+metrik-pemantauan server akan diaktifkan secara default
+
+Untuk menentukan beberapa metrik sumber daya untuk HorizontalPodAutoscaler, kamu harus memiliki klaster Kubernetes
+dan kubectl di versi 1.6 atau yang lebih baru. Selanjutnya, untuk menggunakan metrik khusus, klaster kamu
+harus dapat berkomunikasi dengan server API yang menyediakan API metrik khusus. Terakhir, untuk menggunakan metrik yang tidak terkait dengan objek Kubernetes apa pun, kamu harus memiliki klaster Kubernetes pada versi 1.10 atau yang lebih baru, dan kamu harus dapat berkomunikasi dengan server API yang menyediakan API metrik eksternal.
+Lihat [Panduan pengguna HorizontalPodAutoscaler](/docs/tasks/run-application/horizontal-pod-autoscale/#support-for-custom-metrics) untuk detail lebih lanjut.
+
+
+<!-- langkah - langkah -->
+
+## Menjalankan & mengekspos server php-apache
+
+Untuk mendemonstrasikan HorizontalPodAutoscaler kita akan menggunakan _image_ Docker khusus berdasarkan _image_ php-apache.
+Dockerfile memiliki konten berikut:
+
+```
+FROM php:5-apache
+ADD index.php /var/www/html/index.php
+RUN chmod a+rx index.php
+```
+
+Bagian ini mendefinisikan laman index.php yang melakukan beberapa komputasi intensif CPU:
+
+```
+<?php
+  $x = 0.0001;
+  for ($i = 0; $i <= 1000000; $i++) {
+    $x += sqrt($x);
+  }
+  echo "OK!";
+?>
+```
+
+Pertama, kita akan memulai Deployment yang menjalankan _image_ dan mengeksposnya sebagai Service
+menggunakan konfigurasi berikut:
+
+{{< codenew file="application/php-apache.yaml" >}}
+
+
+Jalankan perintah berikut:
+```shell
+kubectl apply -f https://k8s.io/examples/application/php-apache.yaml
+```
+```
+deployment.apps/php-apache created
+service/php-apache created
+```
+
+## Membuat HorizontalPodAutoscaler
+
+Sekarang server sudah berjalan, selanjutnya kita akan membuat _autoscaler_ menggunakan
+[kubectl autoscale](/docs/reference/generated/kubectl/kubectl-commands#autoscale).
+Perintah berikut akan membuat HorizontalPodAutoscaler yang mengelola antara 1 dan 10 replika Pod yang dikontrol oleh Deployment php-apache yang kita buat pada langkah pertama instruksi ini.
+Secara kasar, HPA akan menambah dan mengurangi jumlah replika
+(melalui Deployment) untuk mempertahankan pemakaian CPU rata-rata di semua Pod sebesar 50%
+(karena setiap Pod meminta 200 mili-core menurut `kubectl run`), ini berarti penggunaan CPU rata-rata adalah 100 mili-core).
+Lihat [ini](/id/docs/tasks/run-application/horizontal-pod-autoscaler/#detail-algoritma) untuk detail lebih lanjut tentang algoritmanya.
+
+```shell
+kubectl autoscale deployment php-apache --cpu-percent=50 --min=1 --max=10
+```
+```
+horizontalpodautoscaler.autoscaling/php-apache autoscaled
+```
+
+Kita dapat memeriksa status _autoscaler_ saat ini dengan menjalankan:
+
+```shell
+kubectl get hpa
+```
+```
+NAME         REFERENCE                     TARGET    MINPODS   MAXPODS   REPLICAS   AGE
+php-apache   Deployment/php-apache/scale   0% / 50%  1         10        1          18s
+
+```
+
+Harap dicatat bahwa konsumsi CPU saat ini adalah 0% karena kita tidak mengirimkan permintaan apa pun ke server
+(kolom ``TARGET`` menunjukkan nilai rata-rata di semua Pod yang dikontrol oleh Deployment yang sesuai).
+
+## Menambahkan beban
+
+Sekarang, kita akan melihat bagaimana _autoscaler_ bereaksi terhadap peningkatan beban.
+Kita akan memulai sebuah Container, dan mengirimkan perulangan kueri tak terbatas ke Service php-apache (jalankan di terminal yang berbeda):
+
+```shell
+kubectl run -it --rm load-generator --image=busybox /bin/sh
+
+Hit enter for command prompt
+
+while true; do wget -q -O- http://php-apache; done
+```
+
+Dalam satu menit atau lebih, kita akan melihat beban CPU yang lebih tinggi dengan menjalankan:
+
+```shell
+kubectl get hpa
+```
+```
+NAME         REFERENCE                     TARGET      MINPODS   MAXPODS   REPLICAS   AGE
+php-apache   Deployment/php-apache/scale   305% / 50%  1         10        1          3m
+
+```
+
+Di sini, konsumsi CPU meningkat hingga 305% dari permintaan.
+Hasilnya, Deployment mengubah ukurannya menjadi 7 replika:
+
+```shell
+kubectl get deployment php-apache
+```
+```
+NAME         READY   UP-TO-DATE   AVAILABLE   AGE
+php-apache   7/7      7           7           19m
+```
+
+{{< note >}}
+Mungkin perlu beberapa menit untuk menstabilkan jumlah replika. Karena jumlah 
+bebannya tidak dikendalikan dengan cara apa pun, yang mungkin terjadi adalah jumlah replika akhir
+akan berbeda dari contoh.
+{{< /note >}}
+
+## Menghentikan beban
+
+Kita akan menyudahi contoh dengan menghentikan beban pengguna.
+
+Di terminal tempat kita membuat Container dengan _image_ `busybox`, hentikan
+pembangkitan beban dengan mengetik `<Ctrl> + C`.
+
+Kemudian kita akan memverifikasi status hasil (setelah satu menit atau lebih):
+
+```shell
+kubectl get hpa
+```
+```
+NAME         REFERENCE                     TARGET       MINPODS   MAXPODS   REPLICAS   AGE
+php-apache   Deployment/php-apache/scale   0% / 50%     1         10        1          11m
+```
+
+```shell
+kubectl get deployment php-apache
+```
+```
+NAME         READY   UP-TO-DATE   AVAILABLE   AGE
+php-apache   1/1     1            1           27m
+```
+
+Di sini penggunaan CPU turun menjadi 0, sehingga HPA secara otomatis melakukan penyekalaan jumlah replika kembali menjadi 1.
+
+{{< note >}}
+Penyekalaan otomatis replika mungkin memerlukan waktu beberapa menit.
+{{< /note >}}
+
+
+
+<!-- diskusi -->
+
+## Penyekalaan otomatis pada metrik multipel dan metrik kustom
+
+Kamu dapat memperkenalkan metrik tambahan untuk digunakan saat melakukan penyekalaan otomatis pada Deployment `php-apache` dengan menggunakan versi API `autoscaling / v2beta2`.
+
+Pertama, dapatkan YAML HorizontalPodAutoscaler kamu dalam bentuk `autoscaling / v2beta2`:
+
+```shell
+kubectl get hpa.v2beta2.autoscaling -o yaml > /tmp/hpa-v2.yaml
+```
+
+Buka berkas `/tmp/hpa-v2.yaml` di editor, dan kamu akan melihat YAML yang terlihat seperti ini:
+
+```yaml
+apiVersion: autoscaling/v2beta2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: php-apache
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: php-apache
+  minReplicas: 1
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 50
+status:
+  observedGeneration: 1
+  lastScaleTime: <some-time>
+  currentReplicas: 1
+  desiredReplicas: 1
+  currentMetrics:
+  - type: Resource
+    resource:
+      name: cpu
+      current:
+        averageUtilization: 0
+        averageValue: 0
+```
+
+Perhatikan bahwa kolom `targetCPUUtilizationPercentage` telah diganti dengan himpunan yang disebut `metrics`.
+Metrik penggunaan CPU adalah *resource metric*, merepresentasikan sebagai persentase sumber daya
+ditentukan pada Container Pod. Perhatikan bahwa kamu dapat menentukan metrik sumber daya selain CPU. Secara bawaan,
+satu-satunya metrik sumber daya lain yang didukung adalah memori. Sumber daya ini tidak mengubah nama dari klaster
+ke klaster, dan harus selalu tersedia, selama API `metrics.k8s.io` tersedia.
+
+Kamu juga dapat menentukan metrik sumber daya dalam nilai secara langsung, bukan sebagai persentase dari
+nilai yang diminta, dengan menggunakan `target.type` dari `AverageValue` sebagai ganti `Utilization`, dan
+menyetel _field_ `target.averageValue` yang sesuai, bukan `target.averageUtilization`.
+
+Ada dua jenis metrik lainnya, keduanya dianggap sebagai *metrik khusus*: metrik Pod dan
+metrik objek. Metrik ini memungkinkan untuk memiliki nama yang spesifik untuk klaster, dan membutuhkan lebih banyak
+pengaturan pemantauan klaster lanjutan.
+
+Jenis metrik alternatif yang pertama adalah *metrik Pod*. Metrik ini mendeskripsikan Pod, dan
+dirata-ratakan bersama di seluruh Pod dan dibandingkan dengan nilai target untuk menentukan jumlah replika.
+Mereka bekerja seperti metrik sumber daya, kecuali bahwa mereka *hanya* mendukung jenis `target` dari `AverageValue`.
+
+Metrik Pod ditentukan menggunakan blok metrik seperti ini:
+
+```yaml
+type: Pods
+pods:
+  metric:
+    name: packets-per-second
+  target:
+    type: AverageValue
+    averageValue: 1k
+```
+
+Jenis metrik alternatif kedua adalah *metrik objek*. Metrik ini mendeskripsikan perbedaan
+objek di Namespace yang sama, bukan mendeskripsikan Pod. Metriknya belum tentu
+diambil dari objek; mereka hanya mendeskripsikannya. Metrik objek mendukung jenis `target`
+baik `Value` dan `AverageValue`. Dengan `Value`, target dibandingkan langsung dengan yang dikembalikan
+metrik dari API. Dengan `AverageValue`, nilai yang dikembalikan dari API metrik khusus dibagi
+dengan jumlah Pod sebelum dibandingkan dengan target. Contoh berikut adalah YAML
+representasi dari metrik `requests-per-second`.
+
+```yaml
+type: Object
+object:
+  metric:
+    name: requests-per-second
+  describedObject:
+    apiVersion: networking.k8s.io/v1beta1
+    kind: Ingress
+    name: main-route
+  target:
+    type: Value
+    value: 2k
+```
+
+Jika kamu memberikan beberapa blok metrik seperti itu, HorizontalPodAutoscaler akan mempertimbangkan setiap metrik secara bergantian.
+HorizontalPodAutoscaler akan menghitung jumlah replika yang diusulkan untuk setiap metrik, lalu memilih
+satu dengan jumlah replika tertinggi.
+
+Misalnya, jika sistem pemantauan kamu mengumpulkan metrik tentang lalu lintas jaringan,
+kamu dapat memperbarui definisi di atas menggunakan `kubectl edit` agar terlihat seperti ini:
+
+```yaml
+apiVersion: autoscaling/v2beta2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: php-apache
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: php-apache
+  minReplicas: 1
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 50
+  - type: Pods
+    pods:
+      metric:
+        name: packets-per-second
+      target:
+        type: AverageValue
+        averageValue: 1k
+  - type: Object
+    object:
+      metric:
+        name: requests-per-second
+      describedObject:
+        apiVersion: networking.k8s.io/v1beta1
+        kind: Ingress
+        name: main-route
+      target:
+        type: Value
+        value: 10k
+status:
+  observedGeneration: 1
+  lastScaleTime: <some-time>
+  currentReplicas: 1
+  desiredReplicas: 1
+  currentMetrics:
+  - type: Resource
+    resource:
+      name: cpu
+    current:
+      averageUtilization: 0
+      averageValue: 0
+  - type: Object
+    object:
+      metric:
+        name: requests-per-second
+      describedObject:
+        apiVersion: networking.k8s.io/v1beta1
+        kind: Ingress
+        name: main-route
+      current:
+        value: 10k
+```
+
+Kemudian, HorizontalPodAutoscaler kamu akan mencoba memastikan bahwa setiap Pod mengonsumsi kira-kira
+50% dari CPU yang diminta, melayani 1000 paket per detik, dan semua Pod berada di belakang Ingress 
+rute utama melayani total 10.000 permintaan per detik.
+
+### Penyekalaan otomatis pada metrik yang lebih spesifik
+
+Banyak _pipeline_ metrik memungkinkan kamu mendeskripsikan metrik baik berdasarkan nama atau kumpulan tambahan
+deskriptor yang disebut _labels_. Untuk semua jenis metrik non-sumber daya (Pod, objek, dan eksternal,
+dijelaskan seperti dibawah), kamu dapat menentukan pemilih label tambahan yang diteruskan ke pipa metrik kamu. Misalnya, jika kamu mengumpulkan metrik `http_requests` dengan label `verb`
+, kamu dapat menentukan blok metrik berikut untuk diskalakan hanya pada permintaan GET:
+
+```yaml
+type: Object
+object:
+  metric:
+    name: http_requests
+    selector: {matchLabels: {verb: GET}}
+```
+
+_Selector_ ini menggunakan sintaksis yang sama dengan _selector_ lengkap label Kubernetes. Pipa pemantauan
+menentukan cara mengecilkan beberapa seri menjadi satu nilai, jika nama dan pemilih cocok dengan 
+beberapa seri. Selektor bersifat aditif, dan tidak dapat memilih metrik yang mendeskripsikan objek 
+yang **bukan** objek target (target pod dalam kasus tipe `Pod`, dan objek yang dijelaskan dalam kasus tipe `Objek`).
+
+### Penyekalaan otomatis pada metrik yang tidak terkait dengan objek Kubernetes
+
+Aplikasi yang berjalan di Kubernetes mungkin perlu melakukan penyekalaan otomatis berdasarkan metrik yang tidak
+memiliki hubungan yang jelas dengan objek apa pun di klaster Kubernetes, seperti metrik yang mendeskripsikan
+layanan yang dihosting tanpa korelasi langsung dengan namespace Kubernetes. Di Kubernetes 1.10 dan yang lebih baru, kamu dapat menangani kasus penggunaan ini dengan *metrik eksternal*.
+
+Menggunakan metrik eksternal membutuhkan pengetahuan tentang sistem pemantauanmu; penyiapannya mirip dengan yang diperlukan saat menggunakan metrik khusus. Metrik eksternal memungkinkan kamu menskalakan klaster kamu secara otomatis berdasarkan metrik apa pun yang tersedia di sistem pemantauanmu. Cukup berikan blok `metric` dengan `name` dan `selector` (pemilih), seperti di atas, dan gunakan jenis metrik `External`, bukan `Object`.
+Jika beberapa _series_ cocok dengan `metricSelector`, jumlah dari nilai mereka akan digunakan oleh HorizontalPodAutoscaler.
+Metrik eksternal mendukung jenis target `Value` dan `AverageValue`, yang berfungsi persis sama seperti saat kamu menggunakan tipe `Object`.
+
+Misalnya, jika aplikasi kamu memproses tugas dari layanan antrian yang dihosting, kamu dapat menambahkan bagian berikut ke manifes HorizontalPodAutoscaler untuk menentukan bahwa kamu memerlukan satu pekerja per 30 tugas yang belum diselesaikan.
+
+```yaml
+- type: External
+  external:
+    metric:
+      name: queue_messages_ready
+      selector: "queue=worker_tasks"
+    target:
+      type: AverageValue
+      averageValue: 30
+```
+
+Jika memungkinkan, lebih baik menggunakan target metrik khusus daripada metrik eksternal, karena lebih mudah bagi administrator klaster untuk mengamankan API metrik khusus. API metrik eksternal berpotensi memungkinkan akses ke metrik apa pun, jadi administrator klaster harus berhati-hati saat mengeksposnya.
+
+## Lampiran: Kondisi Status Horizontal Pod Autoscaler
+
+Saat menggunakan bentuk `autoscaling/v2beta2` dari HorizontalPodAutoscaler, kamu akan dapat melihat
+*status condition* yang ditetapkan oleh Kubernetes pada HorizontalPodAutoscaler. _Status condition_ ini menunjukkan apakah HorizontalPodAutoscaler dapat melakukan penyekalaan atau tidak, dan apakah saat ini dibatasi atau tidak.
+
+Kondisi muncul pada _field_ `status.conditions`. Untuk melihat kondisi yang memengaruhi HorizontalPodAutoscaler, kita bisa menggunakan `kubectl description hpa`:
+
+```shell
+kubectl describe hpa cm-test
+```
+```shell
+Name:                           cm-test
+Namespace:                      prom
+Labels:                         <none>
+Annotations:                    <none>
+CreationTimestamp:              Fri, 16 Jun 2017 18:09:22 +0000
+Reference:                      ReplicationController/cm-test
+Metrics:                        ( current / target )
+  "http_requests" on pods:      66m / 500m
+Min replicas:                   1
+Max replicas:                   4
+ReplicationController pods:     1 current / 1 desired
+Conditions:
+  Type                  Status  Reason                  Message
+  ----                  ------  ------                  -------
+  AbleToScale           True    ReadyForNewScale        the last scale time was sufficiently old as to warrant a new scale
+  ScalingActive         True    ValidMetricFound        the HPA was able to successfully calculate a replica count from pods metric http_requests
+  ScalingLimited        False   DesiredWithinRange      the desired replica count is within the acceptable range
+Events:
+```
+
+Untuk HorizontalPodAutoscaler ini, kita dapat melihat beberapa kondisi yang menandakan dalam keadaan sehat. Yang pertama, `AbleToScale`, menunjukkan apakah HPA dapat mengambil dan memperbarui skala atau tidak, serta apakah kondisi terkait _backoff_ akan mencegah penyekalaan atau tidak. Yang kedua, `ScalingActive`, menunjukkan apakah HPA diaktifkan atau tidak (yaitu jumlah replika target bukan nol) dan mampu menghitung skala yang diinginkan. Jika `False`, biasanya menunjukkan masalah dengan
+pengambilan metrik. Terakhir, kondisi terakhir, `ScalingLimited`, menunjukkan bahwa skala yang diinginkan telah dibatasi oleh maksimum atau minimum HorizontalPodAutoscaler.  Ini adalah indikasi bahwa kamu mungkin ingin menaikkan atau menurunkan batasan jumlah replika minimum atau maksimum pada HorizontalPodAutoscaler kamu.
+
+## Lampiran: Kuantitas
+
+Semua metrik di HorizontalPodAutoscaler dan metrik API ditentukan menggunakan notasi bilangan bulat khusus yang dikenal di Kubernetes sebagai {{< glossary_tooltip term_id="kuantitas" text="kuantitas">}}. Misalnya, kuantitas `10500m` akan ditulis sebagai `10.5` dalam notasi desimal. Metrik API akan menampilkan bilangan bulat tanpa sufiks jika memungkinkan, dan secara umum akan mengembalikan kuantitas dalam satuan mili.  Ini berarti Anda mungkin melihat nilai metrik Anda berfluktuasi antara `1` dan` 1500m`, atau `1` dan` 1,5` ketika ditulis dalam notasi desimal.
+
+## Lampiran: Skenario lain yang memungkinkan
+
+### Membuat autoscaler secara deklaratif
+
+Daripada menggunakan perintah `kubectl autoscale` untuk membuat HorizontalPodAutoscaler secara imperatif, kita dapat menggunakan berkas berikut untuk membuatnya secara deklaratif:
+
+{{< codenew file="application/hpa/php-apache.yaml" >}}
+
+Kita akan membuat _autoscaler_ dengan menjalankan perintah berikut:
+
+```shell
+kubectl create -f https://k8s.io/examples/application/hpa/php-apache.yaml
+```
+```
+horizontalpodautoscaler.autoscaling/php-apache created
+```
+
+
diff --git a/content/id/examples/application/hpa/php-apache.yaml b/content/id/examples/application/hpa/php-apache.yaml
new file mode 100644
index 0000000000..f3f1ef5d4f
--- /dev/null
+++ b/content/id/examples/application/hpa/php-apache.yaml
@@ -0,0 +1,12 @@
+apiVersion: autoscaling/v1
+kind: HorizontalPodAutoscaler
+metadata:
+  name: php-apache
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: php-apache
+  minReplicas: 1
+  maxReplicas: 10
+  targetCPUUtilizationPercentage: 50
diff --git a/content/id/examples/application/php-apache.yaml b/content/id/examples/application/php-apache.yaml
new file mode 100644
index 0000000000..e8e1b5aeb4
--- /dev/null
+++ b/content/id/examples/application/php-apache.yaml
@@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: php-apache
+spec:
+  selector:
+    matchLabels:
+      run: php-apache
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        run: php-apache
+    spec:
+      containers:
+      - name: php-apache
+        image: k8s.gcr.io/hpa-example
+        ports:
+        - containerPort: 80
+        resources:
+          limits:
+            cpu: 500m
+          requests:
+            cpu: 200m
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: php-apache
+  labels:
+    run: php-apache
+spec:
+  ports:
+  - port: 80
+  selector:
+    run: php-apache

From e566a726de4477a8fe7074733a8325f3a1bb1a56 Mon Sep 17 00:00:00 2001
From: Jordan Liggitt <liggitt@google.com>
Date: Mon, 14 Sep 2020 11:13:30 -0400
Subject: [PATCH 314/496] Remove reference to componentstatus

---
 .../scheduling-eviction/scheduler-perf-tuning.md      | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index ed9fb04585..932e076dfc 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -50,17 +50,10 @@ to be `/etc/kubernetes/config/kube-scheduler.yaml`), then restart the scheduler.
 After you have made this change, you can run
 
 ```bash
-kubectl get componentstatuses
+kubectl get pods -n kube-system | grep kube-scheduler
 ```
 
-to verify that the kube-scheduler component is healthy. The output is similar to:
-
-```
-NAME                 STATUS    MESSAGE             ERROR
-controller-manager   Healthy   ok
-scheduler            Healthy   ok
-...
-```
+to verify that the kube-scheduler component is healthy.
 
 ## Node scoring threshold {#percentage-of-nodes-to-score}
 

From 5061d5587b10d1df1795faf908bf406a384dbada Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Mon, 14 Sep 2020 18:23:25 +0200
Subject: [PATCH 315/496] fixing a typo

Signed-off-by: didier <durand.didier@gmail.com>
---
 content/en/docs/concepts/services-networking/service.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index 4d788fd78e..3f5ec44418 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -1045,7 +1045,7 @@ spec:
 
 ## Shortcomings
 
-Using the userspace proxy for VIPs, work at small to medium scale, but will
+Using the userspace proxy for VIPs works at small to medium scale, but will
 not scale to very large clusters with thousands of Services.  The
 [original design proposal for portals](https://github.com/kubernetes/kubernetes/issues/1107)
 has more details on this.

From 239bae60fb3ab3d6acc943d619474be35bd99468 Mon Sep 17 00:00:00 2001
From: Dennis Schridde <devurandom@gmx.net>
Date: Sun, 13 Sep 2020 14:30:55 +0200
Subject: [PATCH 316/496] kudeadm: Replace "master" with "control-plane node"

This replaces the word "master" with "control-plane node" in order to use
more inclusive language.

Also uses consistent wording / spelling in this context.

References: #21621
Suggested-by: Lubomir I. Ivanov <lubomirivanov@vmware.com>
---
 .../tools/kubeadm/high-availability.md                       | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md b/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md
index e91e9f7a60..b8c3236b73 100644
--- a/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md
+++ b/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md
@@ -36,7 +36,7 @@ LoadBalancer, or with dynamic PersistentVolumes.
 For both methods you need this infrastructure:
 
 - Three machines that meet [kubeadm's minimum requirements](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) for
-  the masters
+  the control-plane nodes
 - Three machines that meet [kubeadm's minimum
   requirements](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#before-you-begin) for the workers
 - Full network connectivity between all machines in the cluster (public or
@@ -224,7 +224,7 @@ in the kubeadm config file.
     scp /etc/kubernetes/pki/apiserver-etcd-client.key "${CONTROL_PLANE}":
     ```
 
-    - Replace the value of `CONTROL_PLANE` with the `user@host` of the first control plane machine.
+    - Replace the value of `CONTROL_PLANE` with the `user@host` of the first control-plane node.
 
 ### Set up the first control plane node
 
@@ -372,4 +372,3 @@ SSH is required if you want to control all nodes from a single machine.
     # Quote this line if you are using external etcd
     mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key
     ```
-

From 6a401072b3e6421116143ad13ece5c316c846ef6 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Mon, 14 Sep 2020 14:19:25 -0400
Subject: [PATCH 317/496] reword pod lifecycle, cleanup

---
 .../concepts/services-networking/service.md   | 153 ++++++++++--------
 1 file changed, 82 insertions(+), 71 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/service.md b/content/en/docs/concepts/services-networking/service.md
index 4d788fd78e..a466c95e89 100644
--- a/content/en/docs/concepts/services-networking/service.md
+++ b/content/en/docs/concepts/services-networking/service.md
@@ -24,8 +24,8 @@ and can load-balance across them.
 
 ## Motivation
 
-Kubernetes {{< glossary_tooltip term_id="pod" text="Pods" >}} are mortal.
-They are born and when they die, they are not resurrected.
+Kubernetes {{< glossary_tooltip term_id="pod" text="Pods" >}} are created and destroyed
+to match the state of your cluster. Pods are nonpermanent resources.
 If you use a {{< glossary_tooltip term_id="deployment" >}} to run your app,
 it can create and destroy Pods dynamically.
 
@@ -45,9 +45,9 @@ Enter _Services_.
 In Kubernetes, a Service is an abstraction which defines a logical set of Pods
 and a policy by which to access them (sometimes this pattern is called
 a micro-service). The set of Pods targeted by a Service is usually determined
-by a {{< glossary_tooltip text="selector" term_id="selector" >}}
-(see [below](#services-without-selectors) for why you might want a Service
-_without_ a selector).
+by a {{< glossary_tooltip text="selector" term_id="selector" >}}.
+To learn about other ways to define Service endpoints,
+see [Services _without_ selectors](#services-without-selectors).
 
 For example, consider a stateless image-processing backend which is running with
 3 replicas.  Those replicas are fungible&mdash;frontends do not care which backend
@@ -129,12 +129,12 @@ Services most commonly abstract access to Kubernetes Pods, but they can also
 abstract other kinds of backends.
 For example:
 
-  * You want to have an external database cluster in production, but in your
-    test environment you use your own databases.
-  * You want to point your Service to a Service in a different
-    {{< glossary_tooltip term_id="namespace" >}} or on another cluster.
-  * You are migrating a workload to Kubernetes. Whilst evaluating the approach,
-    you run only a proportion of your backends in Kubernetes.
+* You want to have an external database cluster in production, but in your
+  test environment you use your own databases.
+* You want to point your Service to a Service in a different
+  {{< glossary_tooltip term_id="namespace" >}} or on another cluster.
+* You are migrating a workload to Kubernetes. While evaluating the approach,
+  you run only a proportion of your backends in Kubernetes.
 
 In any of these scenarios you can define a Service _without_ a Pod selector.
 For example:
@@ -151,7 +151,7 @@ spec:
       targetPort: 9376
 ```
 
-Because this Service has no selector, the corresponding Endpoint object is *not*
+Because this Service has no selector, the corresponding Endpoint object is not
 created automatically. You can manually map the Service to the network address and port
 where it's running, by adding an Endpoint object manually:
 
@@ -188,6 +188,7 @@ selectors and uses DNS names instead. For more information, see the
 [ExternalName](#externalname) section later in this document.
 
 ### EndpointSlices
+
 {{< feature-state for_k8s_version="v1.17" state="beta" >}}
 
 EndpointSlices are an API resource that can provide a more scalable alternative
@@ -204,9 +205,8 @@ described in detail in [EndpointSlices](/docs/concepts/services-networking/endpo
 
 {{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-The AppProtocol field provides a way to specify an application protocol to be
-used for each Service port. The value of this field is mirrored by corresponding
-Endpoints and EndpointSlice resources.
+The `AppProtocol` field provides a way to specify an application protocol for each Service port.
+The value of this field is mirrored by corresponding Endpoints and EndpointSlice resources.
 
 ## Virtual IPs and service proxies
 
@@ -224,20 +224,19 @@ resolution?
 
 There are a few reasons for using proxying for Services:
 
- * There is a long history of DNS implementations not respecting record TTLs,
-   and caching the results of name lookups after they should have expired.
- * Some apps do DNS lookups only once and cache the results indefinitely.
- * Even if apps and libraries did proper re-resolution, the low or zero TTLs
-   on the DNS records could impose a high load on DNS that then becomes
-   difficult to manage.
+* There is a long history of DNS implementations not respecting record TTLs,
+  and caching the results of name lookups after they should have expired.
+* Some apps do DNS lookups only once and cache the results indefinitely.
+* Even if apps and libraries did proper re-resolution, the low or zero TTLs
+  on the DNS records could impose a high load on DNS that then becomes
+  difficult to manage.
 
 ### User space proxy mode {#proxy-mode-userspace}
 
 In this mode, kube-proxy watches the Kubernetes master for the addition and
 removal of Service and Endpoint objects. For each Service it opens a
 port (randomly chosen) on the local node.  Any connections to this "proxy port"
-are
-proxied to one of the Service's backend Pods (as reported via
+are proxied to one of the Service's backend Pods (as reported via
 Endpoints). kube-proxy takes the `SessionAffinity` setting of the Service into
 account when deciding which backend Pod to use.
 
@@ -255,7 +254,7 @@ In this mode, kube-proxy watches the Kubernetes control plane for the addition a
 removal of Service and Endpoint objects. For each Service, it installs
 iptables rules, which capture traffic to the Service's `clusterIP` and `port`,
 and redirect that traffic to one of the Service's
-backend sets.  For each Endpoint object, it installs iptables rules which
+backend sets. For each Endpoint object, it installs iptables rules which
 select a backend Pod.
 
 By default, kube-proxy in iptables mode chooses a backend at random.
@@ -298,12 +297,12 @@ higher throughput of network traffic.
 IPVS provides more options for balancing traffic to backend Pods;
 these are:
 
-- `rr`: round-robin
-- `lc`: least connection (smallest number of open connections)
-- `dh`: destination hashing
-- `sh`: source hashing
-- `sed`: shortest expected delay
-- `nq`: never queue
+* `rr`: round-robin
+* `lc`: least connection (smallest number of open connections)
+* `dh`: destination hashing
+* `sh`: source hashing
+* `sed`: shortest expected delay
+* `nq`: never queue
 
 {{< note >}}
 To run kube-proxy in IPVS mode, you must make IPVS available on
@@ -389,7 +388,7 @@ compatible](https://docs.docker.com/userguide/dockerlinks/) variables (see
 and simpler `{SVCNAME}_SERVICE_HOST` and `{SVCNAME}_SERVICE_PORT` variables,
 where the Service name is upper-cased and dashes are converted to underscores.
 
-For example, the Service `"redis-master"` which exposes TCP port 6379 and has been
+For example, the Service `redis-master` which exposes TCP port 6379 and has been
 allocated cluster IP address 10.0.0.11, produces the following environment
 variables:
 
@@ -423,19 +422,19 @@ Services and creates a set of DNS records for each one.  If DNS has been enabled
 throughout your cluster then all Pods should automatically be able to resolve
 Services by their DNS name.
 
-For example, if you have a Service called `"my-service"` in a Kubernetes
-Namespace `"my-ns"`, the control plane and the DNS Service acting together
-create a DNS record for `"my-service.my-ns"`. Pods in the `"my-ns"` Namespace
+For example, if you have a Service called `my-service` in a Kubernetes
+namespace `my-ns`, the control plane and the DNS Service acting together
+create a DNS record for `my-service.my-ns`. Pods in the `my-ns` namespace
 should be able to find it by simply doing a name lookup for `my-service`
-(`"my-service.my-ns"` would also work).
+(`my-service.my-ns` would also work).
 
-Pods in other Namespaces must qualify the name as `my-service.my-ns`. These names
+Pods in other namespaces must qualify the name as `my-service.my-ns`. These names
 will resolve to the cluster IP assigned for the Service.
 
 Kubernetes also supports DNS SRV (Service) records for named ports.  If the
-`"my-service.my-ns"` Service has a port named `"http"` with the protocol set to
+`my-service.my-ns` Service has a port named `http` with the protocol set to
 `TCP`, you can do a DNS SRV query for `_http._tcp.my-service.my-ns` to discover
-the port number for `"http"`, as well as the IP address.
+the port number for `http`, as well as the IP address.
 
 The Kubernetes DNS server is the only way to access `ExternalName` Services.
 You can find more information about `ExternalName` resolution in
@@ -467,9 +466,9 @@ For headless Services that do not define selectors, the endpoints controller doe
 not create `Endpoints` records. However, the DNS system looks for and configures
 either:
 
-  * CNAME records for [`ExternalName`](#externalname)-type Services.
-  * A records for any `Endpoints` that share a name with the Service, for all
-    other types.
+* CNAME records for [`ExternalName`](#externalname)-type Services.
+* A records for any `Endpoints` that share a name with the Service, for all
+  other types.
 
 ## Publishing Services (ServiceTypes) {#publishing-services-service-types}
 
@@ -481,26 +480,26 @@ The default is `ClusterIP`.
 
 `Type` values and their behaviors are:
 
-   * `ClusterIP`: Exposes the Service on a cluster-internal IP. Choosing this value
-     makes the Service only reachable from within the cluster. This is the
-     default `ServiceType`.
-   * [`NodePort`](#nodeport): Exposes the Service on each Node's IP at a static port
-     (the `NodePort`). A `ClusterIP` Service, to which the `NodePort` Service
-     routes, is automatically created.  You'll be able to contact the `NodePort` Service,
-     from outside the cluster,
-     by requesting `<NodeIP>:<NodePort>`.
-   * [`LoadBalancer`](#loadbalancer): Exposes the Service externally using a cloud
-     provider's load balancer. `NodePort` and `ClusterIP` Services, to which the external
-     load balancer routes, are automatically created.
-   * [`ExternalName`](#externalname): Maps the Service to the contents of the
-     `externalName` field (e.g. `foo.bar.example.com`), by returning a `CNAME` record
+* `ClusterIP`: Exposes the Service on a cluster-internal IP. Choosing this value
+  makes the Service only reachable from within the cluster. This is the
+  default `ServiceType`.
+* [`NodePort`](#nodeport): Exposes the Service on each Node's IP at a static port
+  (the `NodePort`). A `ClusterIP` Service, to which the `NodePort` Service
+  routes, is automatically created.  You'll be able to contact the `NodePort` Service,
+  from outside the cluster,
+  by requesting `<NodeIP>:<NodePort>`.
+* [`LoadBalancer`](#loadbalancer): Exposes the Service externally using a cloud
+  provider's load balancer. `NodePort` and `ClusterIP` Services, to which the external
+  load balancer routes, are automatically created.
+* [`ExternalName`](#externalname): Maps the Service to the contents of the
+  `externalName` field (e.g. `foo.bar.example.com`), by returning a `CNAME` record
+  with its value. No proxying of any kind is set up.
+  {{< note >}}You need either `kube-dns` version 1.7 or CoreDNS version 0.0.8 or higher
+  to use the `ExternalName` type.
+  {{< /note >}}
 
-     with its value. No proxying of any kind is set up.
-     {{< note >}}
-     You need either kube-dns version 1.7 or CoreDNS version 0.0.8 or higher to use the `ExternalName` type.
-     {{< /note >}}
-
-You can also use [Ingress](/docs/concepts/services-networking/ingress/) to expose your Service. Ingress is not a Service type, but it acts as the entry point for your cluster. It lets you consolidate your routing rules into a single resource as it can expose multiple services under the same IP address.
+You can also use [Ingress](/docs/concepts/services-networking/ingress/) to expose your Service. Ingress is not a Service type, but it acts as the entry point for your cluster. It lets you consolidate your routing rules
+into a single resource as it can expose multiple services under the same IP address.
 
 ### Type NodePort {#nodeport}
 
@@ -509,7 +508,6 @@ allocates a port from a range specified by `--service-node-port-range` flag (def
 Each node proxies that port (the same port number on every Node) into your Service.
 Your Service reports the allocated port in its `.spec.ports[*].nodePort` field.
 
-
 If you want to specify particular IP(s) to proxy the port, you can set the `--nodeport-addresses` flag in kube-proxy to particular IP block(s); this is supported since Kubernetes v1.10.
 This flag takes a comma-delimited list of IP blocks (e.g. 10.0.0.0/8, 192.0.2.0/25) to specify IP address ranges that kube-proxy should consider as local to this node.
 
@@ -530,6 +528,7 @@ Note that this Service is visible as `<NodeIP>:spec.ports[*].nodePort`
 and `.spec.clusterIP:spec.ports[*].port`. (If the `--nodeport-addresses` flag in kube-proxy is set, <NodeIP> would be filtered NodeIP(s).)
 
 For example:
+
 ```yaml
 apiVersion: v1
 kind: Service
@@ -606,19 +605,21 @@ Specify the assigned IP address as loadBalancerIP. Ensure that you have updated
 {{< /note >}}
 
 #### Internal load balancer
+
 In a mixed environment it is sometimes necessary to route traffic from Services inside the same
 (virtual) network address block.
 
 In a split-horizon DNS environment you would need two Services to be able to route both external and internal traffic to your endpoints.
 
-You can achieve this by adding one the following annotations to a Service.
-The annotation to add depends on the cloud Service provider you're using.
+To set an internal load balancer, add one of the following annotations to your Service
+depending on the cloud Service provider you're using.
 
 {{< tabs name="service_tabs" >}}
 {{% tab name="Default" %}}
 Select one of the tabs.
 {{% /tab %}}
 {{% tab name="GCP" %}}
+
 ```yaml
 [...]
 metadata:
@@ -627,8 +628,10 @@ metadata:
         cloud.google.com/load-balancer-type: "Internal"
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="AWS" %}}
+
 ```yaml
 [...]
 metadata:
@@ -637,8 +640,10 @@ metadata:
         service.beta.kubernetes.io/aws-load-balancer-internal: "true"
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="Azure" %}}
+
 ```yaml
 [...]
 metadata:
@@ -647,8 +652,10 @@ metadata:
         service.beta.kubernetes.io/azure-load-balancer-internal: "true"
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="IBM Cloud" %}}
+
 ```yaml
 [...]
 metadata:
@@ -657,8 +664,10 @@ metadata:
         service.kubernetes.io/ibm-load-balancer-cloud-provider-ip-type: "private"
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="OpenStack" %}}
+
 ```yaml
 [...]
 metadata:
@@ -667,8 +676,10 @@ metadata:
         service.beta.kubernetes.io/openstack-internal-load-balancer: "true"
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="Baidu Cloud" %}}
+
 ```yaml
 [...]
 metadata:
@@ -677,8 +688,10 @@ metadata:
         service.beta.kubernetes.io/cce-load-balancer-internal-vpc: "true"
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="Tencent Cloud" %}}
+
 ```yaml
 [...]
 metadata:
@@ -686,8 +699,10 @@ metadata:
     service.kubernetes.io/qcloud-loadbalancer-internal-subnetid: subnet-xxxxx
 [...]
 ```
+
 {{% /tab %}}
 {{% tab name="Alibaba Cloud" %}}
+
 ```yaml
 [...]
 metadata:
@@ -695,10 +710,10 @@ metadata:
     service.beta.kubernetes.io/alibaba-cloud-loadbalancer-address-type: "intranet"
 [...]
 ```
+
 {{% /tab %}}
 {{< /tabs >}}
 
-
 #### TLS support on AWS {#ssl-support-on-aws}
 
 For partial TLS / SSL support on clusters running on AWS, you can add three
@@ -823,7 +838,6 @@ to the value of `"true"`. The annotation
 `service.beta.kubernetes.io/aws-load-balancer-connection-draining-timeout` can
 also be used to set maximum time, in seconds, to keep the existing connections open before deregistering the instances.
 
-
 ```yaml
     metadata:
       name: my-service
@@ -991,6 +1005,7 @@ spec:
   type: ExternalName
   externalName: my.database.example.com
 ```
+
 {{< note >}}
 ExternalName accepts an IPv4 address string, but as a DNS names comprised of digits, not as an IP address. ExternalNames that resemble IPv4 addresses are not resolved by CoreDNS or ingress-nginx because ExternalName
 is intended to specify a canonical DNS name. To hardcode an IP address, consider using
@@ -1173,7 +1188,7 @@ of the Service.
 
 {{< note >}}
 You can also use {{< glossary_tooltip term_id="ingress" >}} in place of Service
-to expose HTTP / HTTPS Services.
+to expose HTTP/HTTPS Services.
 {{< /note >}}
 
 ### PROXY protocol
@@ -1189,6 +1204,7 @@ incoming connection, similar to this example
 ```
 PROXY TCP4 192.0.2.202 10.0.42.7 12345 7\r\n
 ```
+
 followed by the data from the client.
 
 ### SCTP
@@ -1227,13 +1243,8 @@ SCTP is not supported on Windows based nodes.
 The kube-proxy does not support the management of SCTP associations when it is in userspace mode.
 {{< /warning >}}
 
-
-
 ## {{% heading "whatsnext" %}}
 
-
 * Read [Connecting Applications with Services](/docs/concepts/services-networking/connect-applications-service/)
 * Read about [Ingress](/docs/concepts/services-networking/ingress/)
 * Read about [EndpointSlices](/docs/concepts/services-networking/endpoint-slices/)
-
-

From d084d63adc3ed0f3c4c42e91958224d610d5f787 Mon Sep 17 00:00:00 2001
From: Wei Huang <wei.huang1@ibm.com>
Date: Mon, 14 Sep 2020 12:57:02 -0700
Subject: [PATCH 318/496] Fix a typo in blog 'Introducing PodTopologySpread'

---
 .../advanced-usage-1.png                      | Bin 68110 -> 67973 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/static/images/blog/2020-05-05-introducing-podtopologyspread/advanced-usage-1.png b/static/images/blog/2020-05-05-introducing-podtopologyspread/advanced-usage-1.png
index aafa4b08ed42a885121570a62d25fb648d5f1dc2..e8c5889f49c70f7e05148502d78d55273c32392c 100644
GIT binary patch
delta 13990
zcmY*<cRXAD8+O-I)UK*c)oN?+8A@8J6s0X~jjFx(igDT^I*=MQijbN`&6+ielG?HN
zOc8s87(w2XKF|C6ysv+dalYq!fA9Ocuj{%`bo_<zxC<q@7~pkLzS5Rj$O7B7CwCrg
zJ<Nl$<$S1gWJ5co#eDT0bVRG#XMZa$@_lHFax%0GdX)9(&R5_`Q?tdl+nol_f-?HA
z>->7urqSeZ@!@SgO>PZ`JLWI5@^GZ%&HX<c)n3)FU#VQ)IVtpc5*xSyS(;3--V6@0
z+YC0*za7JcEXxfC)_-}0hjDYNr6@_SyIdylh|?s`=}AV_ICaW5N*_$=Y4Owx0>@J-
z0|_WC>GD!XE0|~Z<HFp{V5MYv-)UFcnti|ebaTiT$-S;!yZ643oK-Q}yTbztU2^Qg
zox*X7Ro&V=b{1!e*uym|{ZUop;j4P)Nf!l(<FnZN*NOAMeX~;dt<87)zhTo*f4X{Q
zg+<0-O@2S%aAP+x!MPYg+bN$lA<kog49SsHwIJ}QS|N?rAYmn$tkDrxRy<?e*N(eX
z{pmS5dZ~nH>!PRm=T5wAVrTwAGXjg89K{QGD>EOPJy&!|<x7{NLmjDIg+UaBjmQGM
z&0uV@&I&LD<=xE)>P&bo*|828vZ4*=9)t{@4TLJ{LeL&<d!|;aH#<xSciAQlAgzJ9
zbYH6*U#72qHK5-*T3c%I!ouEXj|RRV4e}c5P(flt-8;ucHs&?#)vKGP%x<4)?p?0C
z;<YpkN#y40I(wO$Z;P_m={^dLOjx^<vwc}#cN}<hwK<-;VYi|Rp_+roA6kj;i9CmM
zcQeptKFmej*CcQy%O&7E)F~Nj*ZXl)tBSn24_hzG|Hf5zI+^s!U94g=E$+K#{DM6e
zF?n#$b4k%J2cleAH1oL#dk4AkOU9l<%ITnRS5`WrTX&;&tH|48?1iO%ls3V`Y-F{6
z#0w}KNia{56T{wqy^ogM;U1-+)mJef+%`+J9*z*hsBp`_9TS{D`nUg@s?{ogFuV;@
z<sr1j(!$s;K`4Vp)zYz%PPSRZFY4^_2a2|p?IT;tG}u3fC)=#6HA?OKLEO7iR6^{>
zT~1@F=w~96v->?%RA|0-4Avl=`&gIDooDk^;DA(YS-hucJSzTmyj%Q34>r~jqq>A8
z1Nu_rQe5MJIPke`*k~}bFqbX^`2|Vmb6Y{IBSh7%VdrVohJ5X`q@f$0h>DJ*fzX-a
zViI_z?Q*Iz7ksuy+T(;q0=ao9stRo&b6S+j%~@Z&d3Rsj(}qG6ijGf#EFB{%72M5!
z61BzTVT_ehB8UHPOlEQfw@gSijH!r!+l!S&_q>QIpuQxmrq81SIY};fAhR)#r1r>+
z5w=LpLPzPdr#j28iAQGU@UlcO&aH5xndG@0O8VTLbgg1fc8>gia4OSc{R8WK_2ZUg
z2MrdgM^)!Eetwc+PqYlID?U&}%_RjFgGnc|F=qSIuE&nOve%=uek&QTuzHwQrav5B
z13dsz4|NZYn~4r<k9FTLm{*BoM+MkmL8BNx4u%LRnF}Q-nk;9U-dyfWHl}&G8e`1E
z=!F%e2E94U%FPvovzu~ss1I)!y^m&|(EgLeFc?1_>82Bv<GD9i5)R6LhltS*8968R
z3aPqke5_6sD9)ayY`N9qG*3;VlK4U;Ow<t2p@a~Y5-L7@`qX}Wi1+*P&-(P>;2?jw
zZTEe*2c5<tV({l<QiI`3eb~_SL@~3^Vqlo<#i(Cv&FBM*#av1Ws-H<l_Smrs8p!7W
zociVmID7CI(}w%q_p^Mdd3NXD9_)p2q#8tQREqFgzx8N+ckPYl)m11qKG<vFW(Wi@
zZhD`V#p1NpH!ASzt%W{<iapTdH<QKocp@g$oWE`c_GvihGmLiUWjZ4|X1&2wWOr84
zS(t|Ql35k@q6qra3D;$RjETV7ES|a-d&zv%*k6rPDE(}@aC%F_w4!<}3f)8l(b&3u
zc%`F>VNveU#kK`88&%6dQ~Isrm%Ls8)XUJLS-<AK+0TZXI#9^n!>%CRF<Abn3SaBW
zW!OevCtpY~uJ7{5%|MPP{RWV`Y3gR&nIo4bXw<2TqgKC4Ji-}FzkA^L9)&*DwT5Lm
zYNIH;KJF^4W8JvCoD+#E1qmoL<7JpNhpk5@VzV5|rO=oAnuYy7YDBYiWWXJuhFZ)E
z(D1Z>*@xohIoQiv&C{psptP#dp#{dY^{O&uSR^~KKj}}YGs_Eh^tRl-j4^sz1K}Qo
zdhS;j#uN&9FpriDgG={PPavT5n5~6huX>Rm?cI1k@<S0&W|)Dvff!?C#Ev)z%)0Y7
zk_mQyOBTtmB+?4smbJaU0Z9D$IDI)VKllBR7r0@KxVAx~Kz8%;D%dUJVVDct9l00v
zHJ2Ys4@K|=TQ<aO2&ErALHGCb1Zs*x5mzt6N}@LkCH11AR<RpDJXlO&EEs?4;-yPQ
zIOcv6Q<qCE`lEVQf=VuVO=yWU{~Pxt#}uXBqn>-%&$g98AKcytUcmIic-43WcV`_r
zCdLPt8_qMre!Zq`9KbLMwjJ!(%hrPRz=^}~Df3Hmh_DEsZ{ceCIe9gHE~;<z2O|6$
zd)FbO*o8HH$X)u&8u9QI#g#<3YxYDECiF=3N3funO$w^&z7>={M4oW^5fy<#$JDxy
zB=?v_6P*ewT>xNq>^lwQnE|dzWM3xIKE7{su7g!A!lQAQa@LMLT}AUJ<4k=xL)e~a
z>3m>iQ%NKyZ(;8O)2<9<IiBe{CWSxMe!wKNuanBpKNuIQWA!mOf=b!p`*yH`q8+3~
z8RyvL<PWjH#`#4@anscq593wKsy^6wDygy*z28oi-~lMmEJa(T528gm(a7e=HaK?%
zhiprLf*_%Li8bOHj~tlpb?GH8!_3tAI65SkpBRX*EtmX~uiv5b^4juBvX7rllX@qW
zAeFQuh7@{N7AYk)D7u@PF-<A7q|$>AFwcv)fp0#NSeB+<P+Wk_M8Mv^$}j=*m@zs%
zy?hUN<bN`~a`O$v%C&Q(ts`d$bF;lF$8f~DO$%>xq5%@U_b5**fD{A|GT;6usx6HB
z!eL#ngteg~6`1goWy6@v0I^1YfAjujT;@y%X}obU8H{JNL>QYTGUDKmoUZdFm=osq
zm%iTy(Gu+roa`8eFAqDEDp?wlaJGp*ihxX=zqx_~{e&$S^+YeBHe;^sv649lfl08?
zYQ9<`Gq~<oi-o;{=ckV&Og~E+F(&^QH#V=4>Jo~#w<9#Is?SqX*PESVuX0wCxj5#h
zGA5+P!Vw)egu#zqjWQy1QmH4^tIgiBBKWals%fpJ0?bEMEe_edn`~2#Lmd2>7y#xU
z%5=20NEZEJAuzJH2cfMU+Y-BPq#~4F?WF7^@1%H&778)s(9jiIndhxpXAV9X6n74-
zeYM4Vq1rij^c2db4Y`}dFk&=j&VnkW?R~de1C|hqn`+M#x_1R3|45&)0dqbZj5vfn
zT71yRqnCc=WBriP;N2isk75pB`5rwa_M|$nGiK#aoW8c6Y6aTzsUFU^pQKz$Z2v*G
z*x!(K{x$j^<lRmTG!`sGZK+)hZyf2d$ky5usojtK?cmFFFL0%5RfR+9R1khP*u7Y5
z9IrNo)UNw=BPc!jee&0ou0s)o^@+yiTwnk7@rn-^?3G?u0RVg_mIlJVd<M?_?O6rP
zZmB0N#69BS-Mg)e$HiYd%Af!5`>#;wyDVnj0uWm7gX06VTF6aO!NDiHs#sJ6zc!pZ
z*82>U{*OiFp#H|zHTRXt8vN>^1rz|+_}>x{+_JK=7E_fjDLm7bC6+DlC>LO&@+91@
z@_*N0&_L7`9PKWb*W~21(QjeqO*hW<ItqYLvpJQvDJZ;DtlL=W&5_`C?}@1S0#7&@
z<m}OvTn>=I_|+O8ossN`7hj7C35kMGMDQa+L#dNU>7LO#+irHXU!jravYDDuFkm3(
z!3;hUjGn?5KqYu{fH=f3QD^HVbwmEf$@s^e?S=NWnDSLoit^X6YMM=16}Cy+5<nLW
z6QN~N(rdqf`->`ydpvH*7Lq7N%#_@loF>yMsY=qQwMms_`(Q!tQ6~udA@&oM>-2ic
z>)#U<#P{P=wr<_J6<bzTmZg&@wz-Szv$8$q12)&#zFFfu?$mr;dO&2pBa<WfyV7Be
zYZ;~0dcy4RlMjq6F}l_oSb>v^kCw<G$N3h_Q_hINekkIN++lb8pF|xBdhTOu2Z!Yz
zEJCdTzEHbbL`*-%Hd@aSxBPXU`;FNoiXuj$c+^h6Y8Iw=A1)-S4gc`lB<`ep06e|c
zU~~m-+PehW2`lT%?Q&4zgODB<uh^)^9IMEdPvv)wSh6k8LzMjWequ#NeCovl{<LYW
zgyaajMsBpE4wln43_It49bvTwRC*f9p(>ORe=|uMDoem^q|R)gb>ck_^~^wtjdCaV
z^CxZ`!iz=s5Q$cw)jUFuo`zw84^@h8Yjxh1>8<P)D6LEB4+(qQFao1|$e7>3<U#P2
za-Wmo-Mt{y$JF`0$|2E+aN#s+A@Rv?9J1+Zh;pD36byymOj5Wfh(D(Hd7$8#X6-T9
z$SkldSl;NIuZ2r}DElN83Bsc2bNYvgzxE7F5wATDlb3t57VJmuI02XeVOwd~uJd<&
zIBk3%DmpVVs`Ef$H=}M*am-U?@SnQPwN;KlPEKi`M+cE*dkhL~9Xt0)HG{E#E79J8
z^2!F6yIXA}PWt-#LywVgKLJ0am)(??<~~PSQ7)==-@BMLst<GKN9FGLuFu?3HHU=I
zK%MR2a%R8JS|}W_n`E^nuHiStXVU1l--aR}AYWW@Rak&qx5-NPr#pOypZqc=jjFb2
z<(R4puo+76yRcs5?9F-|*MG9*V?7hIEO$;LwyeiyS=Ge9c<w;`e5^~E3;X1nFkP^{
z0seCdGWb^$bviS;leolM<}X&fRBp+^*}2;^u*#*jssU8lHF(l^gr=YmPPP=wXxRx*
z>+DnuoNs`*f;AX~GKnWA4NF?}aK|M$c_?1(knK?Du<yV#Y`|d=JHkZ~^Dka+-c%m*
zz2OEe{>T8^8m-2ovnMii5fL40qPw%BPc^u-lDXc*8T4)|EQt7=+2cHW=XOTRb~mS7
zd6AyzFyNGp!e;2r?+rA_i%wlkXZCTEOPW*gcOxSL8|-@?CN%B^J3<CddEVZhS^1C-
zb*^4%KJK(64PMI}QG!asuv*u723_VMnL7LHaNfcsWuMhP_^HJH3k2FqeJdH6k2SHH
z2A4Mx7j5mY4PX{zgBDKuN28(VV9+g-NlGA_ae{#zwFbD2Y7xBXi3lkBIo@b-8GFT$
zX?@Bsln>`?)JI)|>S*WuI*4zJGwy>4b_GnZkUV+~ecFzlY7v?nGm0L)J*9n^t*ad&
z9Y3qh--TmBYk6PHZ1)nC3d7t(x%tN2)#~WqP@O|EOyfi5Kf?F6TO;bZC@dd9Z*Gd8
z(ok(+_d%9(FBYX$e*3(jOqdC7xK=#sLG1+mB41RwGfq7;W+{$1%Lcfiv<_(O2R*Ze
ze-t}I6~Zpg{Xx2*iJ9u%M7}#O)Kn5T+U8Em0d8#mQ%Y(|HcEL)^RgBwPO}^KhDQ|*
zha;{~Ln!4&jVn{6da3b1Sg+v3D+EA+5~4G{ioH#~0V7JtjVg^`26*zX1>S|LylCVK
z3a&xl9QJa-9tzmlmU{ZQp(xN@zRlZxUQ%@pCJ-$|ErXts76UA7qzsc%Jo;;xmW!fE
zVdC204LNU3a*Ki@Y(-PwM%Y-`CLvnhzeG_)-D$|xkuXM%sy1m@K@pfFXZs*e@DDh=
z%DUxjQIQQa9NgUnHk92Rx!oJS#~yiC5~|O3;{i%pN*0CbwK{$ojTTsQ^2@0Hmnbcj
zVU;%KW_M-}@WyZz&5v)x!nTN=guxhVT;C%Ngmb{}NzQn)cpn-@=R9u58@tyYjSk$&
zCR3~CGd}$F&>MCEW~Oe;1xu8_vHSO@3<{AB&N#+5SKvyQLohA<&nG&-7D@vde2W1>
z3$#FKC^RLb`XQXVb@9zL))zle^6gEO5L{`K7p09oF8mO}?nvp?oX$1fZ@?!N`MQT7
z;y`K4xBRfF-vFDW=}_w0*{XrqI{d|ZX){sN<)Ds(3HHmFPthUcwb`1N^BOT8YzKK7
z^c{u%$ZR+{_y`PELK)rq`Vs`t$h*A%B{Ooy2&Zn(1+NM_k+-$Cw1SV7aA~l@c&-+B
zVX0n{`>oWj{WgjMZ|wd?*D8kT<zf(}Rgsm<7N|Wu+K00JhlAQA2X1Fu{w63srH|?b
zS?6(=N4P+UDlvQeHx*>=jM*D3lE$*=vU$r;#TqAD;3ddU6NgHDtxcNBCgO)cM+V$h
zhzXk5>ni>Ox!&saYO7`kX+P@aJO{De@0A;sM^PDHfihH7VM0g3t(NvRph@mGKFrLW
zPVYP<E3&v@tRP^aK~LZqfue-|u~8|`4VjaC;}_Bc=N{BS(OLWJCH;;sOSQ7v$gM7V
z3;kTu%aD%`<}@5=iAxU<E#~9@qStO7c1;2S1<3paWSsso7og(j*pp-~A1dzNneAW}
z!pUIl;~B4Rc@c*5Wp?e~meM9vOLoZF2W`WK!_S-r*2LH3Gtd`xf+8({SW@AimhkA!
zVn2fCNBNINXhNH<KbLW1l7Lzp@!fvnU1&_ktC4~1&nK->+U(VZe4H=2tV*%MA<oJm
z6?GPF=)bzb8D~~T%thUANnf(F;8CUDB7OjW@r6Xxsit1B4###)FOoNp%8SqlKC_Yp
z7|=hwXz2P7{;*Qo?QtpW#-JIBCMuA%pZK~=aS*B^9v?a;Rc=zl-huXiw@M4IFlg9O
z*gLP|57|3wqk!gKK^^pn^0HE~P-+BoY&M#3F-9z*xKYTt3Qm3BQ^Am&Q<tt^<Nv~F
z9$V@Dn}4|@SdH|5p@yD}uVBSTe5P)*RaVc9%h<k2Lk^}jZZ7v4NIT-97ubQoy^S8f
zxKDWF918*PHOJASeLn%bMOwP9nW}6Jsg)S#;^u~j#()%(4VHKFe>CbAn1Ti^uhED5
z>FM4n7}1&_!a{pEy?K(zbjc_^85KZ|`ZrMx@J|{lRUEwRQmju>R!=1Uy-oWb6dLsK
zfLM@Z8E*!F-9L7W&rWCo+Zne$G_lHUK^QIb_SY@6HF{8Hzw+hJ`sb=u?m%FKxa>6Y
zq;RSjYg+5!AZ5FqWW7d;e2`!HWazn;JodAnV{A>qk{};Tw61NvN`b4{U7x#B`0V5#
zE{KuB0IMkA446xwUxCIXKVGOue-%gu-OyTdNX!19Hcd;GYqHlws`XUA&)%?++rwTJ
z>62t{j@A|Sm8=@8ML~`Nxs4IfvD&T6wF_NkDYW=FS&6IsvUdf?e0f+L2(D@L{x{-u
zS|FmkgH%!5$Hr&M%a$%Bd2$e+V?Dg}w7vfP#)A%}#G!Aw9sw;k0r{+`?pH2b$E>tZ
z2+}LN4~apMap~!)-t`4eQfpr=+xNLi=7v(0`~hp9&@01BZGU3VBIxcNJy=ilRb0G3
z`AdMw31PE0=^f1JF2S9$^r-RiI?pQ*kOg1C?D~Idx04;dy$foaqm_JSS|vTbWbz`l
zaqQ9lOGi*JbONB!19^7E1T5i4V~}4hvP4z$ng+xhq&e#Yr4JDd{strimhE7ZH%^OY
zaYfkGM4nU6XXsyNRrZXRJksKt^l9`)j1Uh1%i2c&|MqT!Q`e7lo^2YEXGc6Aar+h+
zIcwFiVAQ`Ekh-^fKxtoc8UD+@POl#3Xy^d|t*Tr+5C!`i{Wuyp$<n{y@BR!7>>u~q
zo@W-;iEufY`OR+w`r3i7E*SULDAoKy=^QVBMzH<$`Po!%uCP^9!?i)sS&Y6!sg`Fn
zzvod8g|uGI)S~n;Hnotw=yRVmv#WokyAlUy4&u3rX$k$vw^8qb1!j_lAsM;XL3vz<
zM1Bb4M@@ryL6%y9CGI=T-?v$=hD?uOu&>J~e5q9=Kmz++h{EiBOY`IJpu;@~i70SI
zd1xnERkB3z^JwC}GFm*%lx(;10R6G3SFiYFG+TP>L#7MF?%X_aaHvOK2W!s5pV1q`
zCow2ZX4og}5$uxZqWew&P5EjhN~$H0RxJZP3Nj3MVJc*O4TfNJ4>N~f;LIh>@4{Bu
zPGe~`{;eB>^I)vb(CGN8MuU2R#;gXUol~{v%OTAl6&_hy{?_^VxSUr2+Fzr>U9%mt
zduj4@v*=j|)_!HaA2M>gFZvaWnmuHrH-4E0<5xcOLjgq2YuH=&G}O((yMxNRyQ9x>
zjBuT+&-D+0Jg_e@@oSDUf*m&PO0nJa&3}>D`y)q+r9X94x3e2Pdz#8sKS<9@F4`xx
z-1tu(1FaZp{>VO85%w?{nthq)r_&nr5|iQEqm!;5|3;xtMnZD=cLU!l<SL9+?usKI
zLDFKied>Jjee=PDi$8S|MVPq&sBBp+Btxns(taY%!<GHkbuG{m-TshzR<>KvP3V8O
z@m7N#^OpY)rSuY$A*MTNnyYKG37^EQhE(J+^}z<1rU?&c&_wl@o}f4Il2Yo+iUYmc
z=NXEkB~_Igl!ih7NV!@f1o+I&GhJ~P<V6GOFZ52->ora;3*PF6a|dP9y~JIDFnx_<
zf2P0LBGKo-AUH^8*$y`8q$|q0hR<qhq`o0o4cm{6MhS$<@29AU>#NH?zmKo!!fyRn
z2~y3pZ{9L^Vw^&S?FT6Ii&v-Aq4AnG{H!feI+9fsk&+P<_oB3Ir^VsVFL(+d=ERBb
zFA7B6Wls^&ecAD;;?=9rYy7TB{Zk5U%yO{6(cd6(==<(2{B(tDg=K}x^=YSy5vaEE
zSR6~Dm*TconSs*`zqX$<bRxCU*O17t!G{;vyReM=YZ=jB=q{~NEpgf2{1=g>n?GJH
zDr9uM2PQpT{L2<&f=&Iu>4gc&L{k`d;~aGpUuuKB10?C-SK!=A*D(UgMQub+G%FeS
ztt3Tk^zrKJF8_V)UzZ{-d7F-!Y)z1x5_n2+Lu>rNzyJLgkx%c5!eqoB;YYZ1%}cfq
zc@-5^(F8gsHOjPOTK+bAa?=WwCrfR@@399vqd8*fpCe5bq!dqBa)lt9%gG^X4KM5d
zzt7{`$&H~MY$yE&sGy*LvU*tHlv0BoS8sqVa3sC#m4EfodL=El)l^+6KK9#c)$nul
zYJjuVP@DBeQce5uJA7P~({$1E-rDdumYia{liKXnmEmtmKdwKO@p&lqrT6V0vV05a
zZN`>9{$MQN<(g7HvD#9)ZPK0ddH29ykHD(#b~)My=xfO&xgBj14km}Z;_|;eZtsr*
zbOvr)&&R%N?=e$8X#wXPfBhU9h_^)j5B$`3mVZ#qeDbQXA%M$rMf>>sisd76FIJlg
z=t*1l1m`Pp>NV<n8WiS!M!hMqPh0E+jKtCnH}_s}6=PRHZ084&LtoHbs?-&NV6-pc
zLdsWn&t{d?mB~r4O3Nq1_JF~^mPOuxR`yK!mjBO?PNl@`2}`bG;AlE`br?VTS7_o-
za3Prkn^d0X&M{826fa0Cene3q(g4z-c5(Xt{flan3d?e+=bndaohR7;cN2Z9Z*KE$
z1gKvlE90SX?y$4;@eqS5<O{yS-2IEIhwMNx0!n-CB7qSJebMYRkKxrkBefnlumTyz
zY$g1i559+9on~s%@z=k=b<7FN!vqQt*~5^6L??ZeR=Rd@>`GPsK)PLnj5LU)UxA>1
z2@jdq&<UQq2)p--bzc1*Lj<=Z{0oD1*sHnPqLCq5WlP=?%2g<?$q6{8L4jn^plYUv
z`G$=QWQJvYkwj6nc+3Y|g09lCr1T#F&~}lOBrwrq6&VOuU=oGdV(|e!A+a2Bc!d66
zb@SJfYr2#4vm|!344shOqCy^^(P&_Ps<2<+w;a_r0XzIt@!eV3RtA4}8a`sQE+X^=
zAB~lRE)Hn2qA`9asS<9rI10tZOieev!14ZzU}Qo?g)(jf74=YHq@t9@M+1@F7kN6Y
z(;CGLivyzrDy$$c$3-;}l8yK>j5X!5W?9SUbVt=tI&}cNlwll$wE{Ude8$<ld<?9e
zzk(VJ3_9jjfG8y;PO?c`%@2^^y+i3INd<}pcLqucb==2TUZ46KlpJIW!aIp(VqWnA
z+cwuDaOYu)iY69jPtz{ma#rIo3~M(W6ECL1d;KEPBcyMxk_`oOvhDsV?8NqbeA{f1
z$OSeQRewv^#IpvAI?Ga2gf-3*EPl`_1k<}(GBrFvhLRb;&8crOhG9Z^g$i>cv?x{1
zHOIR9#g{}K3>O!6PQR3E`-8f`JUJ9@DcQvon`RJysD}I0>@}*TQhJLhv^(oj34O(+
zAKOt$kW+VHwPn)(Ic{RJVB=82D1IJLE}1_1+L=2{t^IzF5>$hK7q`Ztpn0QPSO20A
zn=tGic!vLl=06hq(v=P#Ovb+dYLOp=G%{_Dn_Xjz>sq@8dZrbWI<{ikS09+gi%rfy
z`Rlj-yRSP*iq5uDdn;etOI%yXl$H3JoQq`C0)5*U8)s4}_`&~f1=N%>D)Or})<g4;
z_qfU2S?STjiP>hZnz8W{GS?lrZAC_)w*06lI>>ZUfb!H;i_m=FpU2CWu}dYvgv8b(
z@(?~<8e|}_32J1+{<3xJB=f1^zit9~*&EunrqX<DV}5^J5mO*)_^8b&&rVx|+|Oaw
zoorW;XT;7X4XB4GinARVlNq~CKMhzDUY!0qT*f46xd!nktNO#FvaIjbZ@u}s0G3ZS
z&|*KTiYB9I{fWEET7*^Hzs-RhqoMGBoP>vS)EYtbl6jHgrwP?eQ@yqB<8e&`@%e$Q
z!*50ceKVr(L~~?9>@^yR5e^>_O|8RN<o`dHxc<UFW9{{BApA$XkC;vi;uS~@Ed|2Z
z<@f5o;wHI>029o8i3Oa2?Xz5keWr1huHHDL37AtPTS#9;iVHb>$*$>tK_2H@Y|ikb
zuxy^PXi(;Qd3g<Fx@>)Rccd2ABpot5GNAMtbnvV&^t?cud*aPReeHDRx{<9f_>lj5
zY~bmwSQ;8MUx33gE!Vjnce;RGyM82($L6I);^+v5PdB8)*FTt2HYp>1kH*V^MuYWS
zl0p&{Yd&aQJ^@gM)FrmvpS{24=iguKO-~o|TIzX_qnGxqN*Af3$foFNz0<;TTCxb|
za2;(keDZ|Q_Ui2UN>kW!_K@XaGfP7W%5A1$s5QYzAL6sRjpngnN&v9Y%C5vxH205h
zk{?hJSviiNq3ys{>%H9n{Wxf?6ur{XvyDXyRZV(!Dx)Tk7v&pkWaAUlNykfm!a{+B
zwVLcw8|w%<F65pFxeDm0H7J{-{KaTR0-c|-hhYZZNQ7zMIaCbepb37e2-wt0j8II>
z5iv}mA4AtK8x{i3YsJ>Jo3paPfjh{6E{8F^Vu*E@XRBnS5Vzz)3=Hrq=Tf3Bp?z9z
z${%#bfA%+E)Of!<kef@p#>l6ch5A+1u=mYHCSQ#>*6VsWn5$Y5)3!?`l)9y9FH+?=
zv~m)(7hB?9QBqR4Ia-Q+nb6<gPul3u?t~uhHHwJD?Esw!sZQF%h5W9aisSyq*V+0Z
z%Qb2r_A;_UzvbiziW;+sm>95_8syM%tN1G~EI+kNs|YXq9=N~p{HE6PD%TS+8~Y!=
z>y<`u-<82-fsWoxgzC}$VLD)TLm6$;(Y?8mU8fSv)6r(w8w*wtuH+gfBlqH2Xr#d#
z?K^CS8k`DEX^$v5oA2aK-VGnIVOgA`Orj4Pk<x{u16<;!_O1a%D=RCt+*ip%bdE9k
zDenOSFBG1Iy4x6XB6l)1b28;*R_m>O{)0l^jhi<QbsAoq#gLBB$5xHEWJ<J{*@tJu
zW%9+}vJcdMY4hY*Ro52%r(TjgJV=(d6ResEA*L9c`3&WF^+NV5rt1S6x!=snxs0!6
zIcJ-?j1)~_frrUT-wlw+L@IY36`dG<j=<Q#`9h0ERTopQ?2nebyLHuTWu0>2MO|nv
zzsUr>G$j|II`XiBLqI@awOT33&AL}irVMzL6~onh30(iy<!j>RbxG!KZYNt2YLi<-
z#UVa>LTZQYLuNmGrwnlKVhGkB-q5_6)4_L+U1SAft*!K9AK5=*vc>RO&Hs9*45#I&
zjG1P&Lk29S>#H9A8M&{cGsFKI+<id3QLdiwjz#+KU<r}1i-eIc1z}T#Q-u@)vOSe9
z6QE~i+;}t;C_n9wbvi8DA8H6D7AX@(t>i0QCJ3VNgzs)Mr=>w2+rUoe$74^ABHz4w
z#(<82c3G*Aw&-+EnsQu6M@Lp&ol4DS197_k^k}u}c%t!S0*;XmEuAnGT?12WM*|TV
zc*#<eRihs<KhE9>Gw6>H{*cTN&&?5fkv9L7*hnJ!q$&GNKckdGIt}Fy?P`n>*EPgx
z&s+ap=bV=vgCj-<OPnE{wt=St_yr@lAxRvWf-@gOA}j^hC#p!BlN3<h=B>+%%_Xbl
zV5**fn{hZ7!85Jsjl)#fr3d>yw!G1i(5!NoX{QsoqG1zC`}fi>7lVr!q>in@agiGh
zr$WgQIL<Pe$<|5i*5dLR4Aeb-N-4|g*_@`;@C1jl3>^n=UA-CL|1x=zNIsuR9kCkg
zDJ`|5haL0s%HFt=LIZAT&V|%e=tKVYHYERYXz3KW3@a@>TA7Q%(@A!UR$NRH4WDKg
zuW}ez^sAw7^YQxhQBh{xB*ldOzEZXC`uL}wU>V!4B+;cbziFioTR~^B3qA3jG&;*p
z$s**N{tC2O&129!z;S&LHlPK>v;0$n8;S6^h;A`4%4Pg}a$>>ENlk7=I2Z@0g`V`C
z1?8E;p7F-Rl*Xs%Ne*y287N3{Qx<D9O(@{vzM&l(1<@8A`7G-cJ9Dz(r|ed<kl@2&
z?mwq<DCOp&t=&FM$EEaW@xxEHn(;$fdlhMb3HVy^hJ0~^IVTP8al3xV&Unod^2bh+
zRrFYrc!BYfD(e>wHWzxjf3H1ow6{8NC<mwKIc1+hf}^oh7I+qzSs^wJd4YKht`fa)
zvveEC4KCZRxL>B6P&iG%H~n<gRqA?$Q+eZw57_=xFZX+~&THC^UlYVF0Hkh;oXf-~
zWAnofA=T}76^HPh=%CQUis5h1d)rx@{QjuoYUa!yT0?Hgp56Up^4-2K(8k7Ql}#^6
zyqNS^ylQEQ^p9JQ_=y+cdmR7RXx!jsj&^T9q=aR&=He8tFB9!pba63p;c$M{xMo~Y
zzIxrsPRHvh{rv~jRZ(0J7_jSPm+GPU%$IzG^flw=ekZiq0@`u}{)!vkK8v?z!KyDk
zo&O+Sq_q8uiInPgZR8I}#|N*9skGt_#hmBEp@wm-zcTly{AM^vN5!OPL#0+|`SA*;
zebb`KeJ&=Ai8#<Ew9==Td9z0yJ8^X?A@Zq;AlVHZNM9}b?F<y@wi!q2Yl?9utJ*EM
zWrw^_vOlX85D*~c`RDfvaFh$cvYkeXIG$BFR%H6D4g(?=IOi%uWA`!!@2pSO#J&46
zGe?*{^h{N@aOoiFoRk^Bm4!gb*oLJ0W~ooBQ~Lmy5F#opuA_ulO})t3^h%3@A7pzH
z!I8x-8_q`Jz?B$+G3%F|Z1G@+J+QGDben7hVf|yyMif$HFNSMp3hAX*FH5H%c8v!q
zHb^(Bd?Lx$HhG$o_Z0CMv;^5-f@a`@DXSA;pwS!`<1-h^A~@3Zqm5pl7`D+(581^K
z3W^(GHk;G+7B^+yCoVX;DIZLwLLZS&RG0>U9Pb09{h_H^p9uq8w|YR&R0(I<b+9&a
z&)cnhxvNbowOUOmqu{pRbz<xBBz!Mlg(T2Id^g6ERR|qc%U%J;yB4WPQ^=B|n!oJZ
zqHY<uTm9a!4{3{@wB-rTc~=iFdiWF(u9iaaor-er!OWBur%_K;^jdu0RXm6Spb;*I
zo+tV><5c&EPhXM~b2%fq(bGoCldx7B&X83~DM_hF7AY!}ie#@))fR_(nV+8@d($Y#
znN7icwo@q0yI%?Z^~&Phfm+RYK}fDieh19JF@&{J%5}1O1cVm-BHPQ$nbArsrKT>M
zDxE&$N|FuMH5kVu0i=(bapU8(o=wmkBKxg1k~P*76B8@Q7ET^Gx9ATRG|%Z)#J(%J
zkWY^G0<(jO1h++w=2d)aTcqjwx0f~ZOA^drLU#}DEOf@9pb<su)AdA)XH~BCvc}3(
z%h`&7IBjrSUu!JI=ofcEv9aLP8K)X|l*N0G5&~2kQKQhiEIGM&fF|UnyW!D*A@~G=
zHAs_|O*xHCJ?;*D%|#yFs#hRqAiuHl*o}IH+NUqcJDjF0PfpJSNm_B0%Y^R(RHPc3
z;W;@my1A?J)|Io}l)`Klb);7}1}{q_Qdm;<&TY5%>g(|g#C$C)lVVc~IZp2dlsD@V
zqag&7qMiC=@yp!ZLp{wiYK`$G8h=+HLuglu{AO{YIn3d4u3lQ@caZfQnyw#n<`QSb
z$!WqjKD{yhg^vRIID|x;Y4keT8!1-8MoK>cTO#2b*zD_43)VZjlGard;APzL(Wz4D
z$UxGLILUCR$m|EO9$u5knlRc)@+Y4Ps3XU)m8JBm2eZR&A^4Qy)S#VqCvfX~JrA|G
z_H>JUn;*70`Bm)36;k;8nT;0KmFecx4S#p9(@XEpE$|BU36Ut_a&zPYg~x>#Qner$
zxW35i&{Exr86gJ{LfV8VFBvem!wj^%e?lyqfv~9Hqur<7D!Mh}yzgh^Mia=jJLt>|
z&p-Zzx|M!3m}_pEcfa7tw<imZ5&1!Cjk^`r<i)M$hv%xMVXL)>;592JybUS(IDM<w
zvm)+6Aexzc-rC*x`_rNHs?`CrKVOU6!Sf}ss?f)E1@EmPd3>Ygy{bg>r%%TKVIidd
zd^+CeXTov%de*V0d5?KeEEz~YGue)j2GUP=dw$38jRX<O(}TZ){DXrl|N2w<{Dq-^
zCOsB7W)3u2%MKhjLZ5fuj|It-A-*K!<jA|ZPq?W1OTHF@dpT*XdHup>ySVYfze`_z
z{q7!Vwei%6+RxPTdOr{pyrp)i)|=u*_cWe=xdrtSvYZw7#KODpZl_zr;UbG&FS7pA
z#%?T~$m09~mWOmO!gGStD(F#KE&Rl#>^o_S%jx>%g<^@YD$8y$pbwd6O84KUP&;V)
zu&}Ton;LXKqM6(cCtQEH`25A7u3q(G)y?Yb+WlvTE8KxHS^h@d-{Sg<!qZW_G&Qqt
zsF6Z60e@n&<Q^*OIGT?90SSa4wk_(p-*R?hgZunDp`x2I_K8<ddy~u>6I&63{1W1H
zc&xk5QtNT?jv5i<dooTsqi4=g$!OnEf8=u*f758Vk55O*U{1c}3CQN%9{Vo$+XTy~
zp|j!Bu>e08EDdCWHRC_jC8Bq?L6ms!k*%z!Fc&togbdu+AszRUg62T_6VfelN0h57
zl8an7jXR%;>%9B5g}zyp^&RhM6!|_mA^jeTZmCokmZcX6KXS7V36QbaciF(8T5`&J
zl$=`MGV<joh&(L|ePQHCvr*|uT(4>zuL9g=9-A6;kRYO6B(syeEqOuh*w03+{ot-;
zLAWWXTgflDwFwe}3h#xP?+$UI+*}V6M4uD5ff>_(PH|dlwfPeC5oaU3tuyVe;@2kQ
zit)(I9_773Ba6eMkw)`Fd^#xz(v*7vt_9ipd7eYO;b5LcM@Pq^m-Nl~_YeVCJa~qp
z6#y5#skd{qkl5*2!Q|#~&ZH?#sJg7LK5+kWI&pI82@RW+b?cw@xDog4E{_4n4$3t!
zYu~Xi&c5hLah<CDws1!XXvW_^bt9ro*B{TGUgR|VP=ChV9L4E>!$L0WtbH#MVsY9g
z-%#qjGWgXA#P8{He#nl?1W+j&u-m6qWgf8bNnA>#S|WbCy?F*6_fRKxP(#9vvL0G}
z-&boc%){aI&-OPEj$9NE|HN6Sl8*7|TuR<Jyv&svn_S2p?;FJ(3#7$qEB{MX6l+sI
z{A^A)Jp<>Sl;XWAyxeJS9@7SX(lg9_^D&5Pe+lF^jRE5hx%F4x01UAAiZVF?R%QDZ
zq@$6Puj0{arw2aaAF<n}>mNUzD!K`aX~#<G-ITe^Cf365IobZw0ms{4;WT2bcCxH*
zOvfrQ`wytTk|eR>GVJRDUrwmxahAW{p)=G&6YzdRHC{`!U5)B~d&e_V;?zRIEK80;
za`9R81x_g4ni_^MpzcmGbc)amrr9U?Nq49~{e?QGX9L{*{vf5v^{WvcWSj8fne_P}
zQ5OX)#_~G=9z$!prt5`^sga(oX%jV~xrz5CDqUt2P7kog3;O1X!6&O0z{c=%H#5R)
zD1FhwuVLhM(W(@WyLa#Iq|6-KPGC?_<B&OO3;)+1`vQP~!1KeDIk#Ml$-;Y1Yyt7e
zO>mhZQ|L^K`tk|uV%xYbW+qb$@rlJEXxj^XBJJ7sppm|dB#okXvsu*!n3p3-1>uS*
zUwEUWJuAHA(l*kI`L&hen@iXh8Ry=2LTbjva(1tb#k%FyjezhK#X}rL=O^j^DeDw_
zuICox06yS$5^#Ea=;l9?yr?|VCf%!oU(C{udm^dTrMQ%eKZnhuh8p_*NnG-(fabB@
z-<vXB|Mi71`EihQ<vae8(8!=2H6=7jILz`2=>S18Ih@)I*}p4jm_x(=XXtcpxHJgv
zH|e1@B#>yj6STiEWsyyx2NGWMu3(9qvW?UcfXw~aEWxM(2Z&dNm2;yRrDhwm-dmO>
zjyNa0MO<ub><B2okM4uWl^DF?mHzy*+at01!^ISf<FVe5%A<E6dZ!7it&S8|ee$P-
zr@K2fg2HMas0S6CoGEa!SHL>#O&GIlyyt%R)!mP++P6>lpTrc@@7R{`F5g4H^8=D@
z9BYM_6<@cw+7P3rJ>%O<B~%wQ{M1gge*V2Mvi^iHVSKvb*EsQO%KF)ngu%4ho;==d
z(jOZo4s3t02tpYbn~Qr9=Z@|6eNUxLKNr*&bbL(pn~LSv)>2qxMxiNN?2B&6+@jJ-
z!oGedl33+BbtHa)pXRIL5iYYpUlCY{?~v|MuxedWBOQ`N!}xnocXQRgS^IZS)_4`L
zo!8ZmO_;>}xzC=i4$}S|@VU>1?TMLFLWKvm?c4D-0yyrkYCKuD`HPhU-~)urZTAMg
zrGTTM+c$z1O&zSF6G=B@c8M(KM1<bPWzl;Jr<NG`O_?gZ1L`FFe$xRR!(@xdC0#Z6
ziK%<jKO|*)OoqVVW6<Wn)rM2E3>#<~J(1VqB$68@x6g)|-_+iHuy0<1%Sef2OJr@Y
zAD3M>R?dn!3ae@95gt4QH|}_53K7Vx*DNk9^Mz7d@QOz481D^~khbNM{V=#4I-1ME
zYDei@94ODlasgwiPQM0xn!p7i5!38U_50^t!ACkd9J)RwCXR@hlw5O}wMjhT+I+xj
z<Q%yBJxL7+sZ{~d)xj!u0kpVC(&$zV`=(MUQ`|AW*8&u!b`4u#RDx)yLdjcrFc}lE
zuNztpDu>mb8RM&}acJuFzAz2!aenjCZ_$%AKtn{EBDd#~msMZpT(pLwZa^x*KZ}A3
zYL9#1NA55D*HErU9mWl@@S`xQ_!A~UU4NgRRK=mN(XO;BBV1AIwC#0lW3UL9hfA1F
z#1Z^9{A9{^!bQA{^g*oFe!)%^pUe`tw^DJ$$8-4G$uuY<`sSdx4)tEAIISGNb}T>#
zw3OSSw#U@=)r(^><@_T1SJ>S|=$YBQM5uQ<Kd)VeWvs0lR-da@HNVsnd@D1!tuwCA
z<G~HiRZR0X@NEm(BUYysk$le(Z}{v+WAD3_TvT}3X>{H(P-Y+`61DmzD6I@7=|g{3
zCkB>#-DoE4)iJX9w2@~>y8hDMSN^J(lxO45Cc0CerC|Mf^N<t-sO*|@Y{i@bf3)xF
L-6_&|@#g;kzw~6r

delta 14114
zcmZX)cT`hbv^{)n6sd|z52932dWR4pDpI6~h)5FwDI%c?gmOee5D`#12*F72O+mVV
z5UB|rL_lh&p#?(cJMrH4-fxW0e<C9%d+)XPT64}d_X&wP9T|JNB%1)7DEq9u1`C{3
z`p$9Auu=1}xb?^dt^SgtkKe?&yYhMpeBa+aZ<U)tXXdbS>ru}R-8sXlw6h#LV&`-p
zX}o56a6aQ!%1<u3Z%MZ=5YA~rUfbTXoO+Wp-*8MB^}zdNRh>H3^j&g7-*~9AE&$;@
zq2k)TV3p>Pymk7*$fRhE*)X7|YI1kJaXnmArgvP(`gpzRJtyfxUt&##|Gr=F#FFRC
zhx|?4M3>A9PNb|1cb<HP@Q`^6(rL=5?YESNx8u)%lFeZ9;<<?2>};sTmnA6+Z%2_b
zOsjQ8&m&XIq|SP;mwT%FXNUQU?fGh&x2wu3o@~696&V?&;WIfu!fpaAzLk5htLuMf
zaFes?`TSU;)WmP%+)PpNc-&EU^vYIg;K-im{_J#n->PgYrQ@jCyYu<m05t2%3(f1U
z&dXOvPoZ$j!T9f`>&dRY-}mS5omYdI2<@7=@~nGzm#$mZ!v>8_9<I7GKEF1YG0`9Z
zkIG_(ir9z(BI%d#kIah!$XP7ytXT!)J42V%BFJ+Q@+T6Od6=!;dQmA-rijR8rf=9<
zCei)}y(p@t;&rzr;G&;}ehBgv#lC^hl6%PLdW+hr{cPqBkG1DN@Vqh`eCEc^uEEg6
zL?WF$$qLEdyx*B*M0t$#l%&1u6Z!pWEy>_4^kt>3uyjO%&(mHwV8^ekv??~?L;RVp
z3`>A*-^Z8P&G#_&NOJiu{<OU{an8{u48o3L#g2+cU`jA-?p(&#-Gbk_)YOJ<Ior5?
zY~13C@H~^nzq{teBJ7>wrTMGerlb1Cg0kMsf}U=01-}d;C8^%NwS==Rl{k?^663zU
zTqM<|R<wY;w-*=*Y%TWY_qE#bh^*}@-T_1TG#R$vK`LH~?%X4sNhVIyNR8T#vWX{`
z=ujLg+LXufl;-+JW$OBHENu|WKG82FaDeP-C3|<828QdD-{m|)Tc@Z3FpLe<M0huK
zHP}*U@>VdeHeto1prwiFh?Mf)RW+IsntYA?N6PE_56B6&KI!PPSoa&T*w~<0M6973
zC&!RcZNiWNODSe3=6jz6fN32x>Q67oX8wfvjA8b=sVLqaSZ^P=VG*&YkT))MAF)Zn
zM#eBgx2@(s#PiEM%cxAB4Oqvw#Rw1i@$%DF7T7^2HR)8EGIG24$xrTT!J&%c$CE%t
z2ll)V!6@T6p}uz7M$=1NVeLIuQ-%fVaNxQnWUe*k#=)+8>be@BP85#HX2Qg)%{j3}
z)O;gq{C1dWXBS>@n~tFo9%b5Rn9gzh*<yX`TQzR|M}#Jqv+QrKzC_!GTG+TaPOn*U
z9I`q#Hsi}A_drR!LjN19t6)T{-7q9gEbyL#;xpKDa4RGHDmd3tH&f9o9_G#x{zO$g
z@+fOL#><+-S`XOQv(-1O`EvPPjJb@WtaK^9)Ivk}<j6m1eqb4yPB@F466J1Q$_>@v
zWM9lRcp0+gR#ja?2&RM}-|k%<9gUoRVnMeFPd&HT1|1N@Lc*GX_Q$W2UtJCnJQ6RP
z(1CAV7@ge@i~7haK(cG|%T;J9X<x(aoIF)5$iZSA-VdDDhzh8(dtqm1Cyf}dwQy0d
z5tfsaYwJvs=`-uwh{3hEikYFS*OZa|Yd&q!f(yMo8c}m)tUlz!W#TxAP)h!A01J`F
zSacB5lR_cndWW2z1n4BQNd}!-Qy5bI)td?ZZ;kX`^DZ6dHP9R;DRfsHY)jQ-^+ps-
zFjEu{;9|kB7P6FvFT&#Fo1H^);-^yfP}TK|#dY-1`P)szLKDXq1-V0)CAN9pct%Ja
zEgCGA%@s|APXsR&m+$W8BMtmPv=PQl%-|*}7yStd2*EeIZSbzuZ9tb-QrQGJkvu;M
zS5LFV>SK8rtzF=DPs~a8=h!N6TmKYGT#{A*WQ8vZAH?SOpIQD`Cfjcmi|@q67G}Tg
zlDS_XjwM3sRHrDRkQ;8PW!ct(Oan&!oc*&>$ik8?)-P-0-!Nz4A;}wh&b?R;<Z{QY
ztkC@U3rI;?ttcb4-9bZ5?<!om6Sx8)tY(GvC562ms7ikjTL7027JC8t;({NHsS=PR
z3tBd<eYlQ<p~UO4QfAACBLVXLf2I|`AqNQi@T)4M+){-IElkJD6IpIN2oG-$uVqm(
z9ge-)3#X$fH9RH|$OCs!+^jA+R3!hyWTnTrL!uAczHm}Yn(UBA2u23Ehdoh^1x5&0
z&1g1~2}ZBe)&+X3MdjZWOR>3y0{o%m_+bmEaREl`VFGKiY!>F%*jh4lz-VMu*jWa(
zS%A=m3UVSjkUS)Y%?MA}`b?#AeEd<r3>es#_k>_CPx}ZrcOI@7&xwedKfN`tTFrc5
zCW#uw?^~ywj5q?DUUJFwIKr9K&<j7{>Tlb+KNvEOy@j7ri05@WSxpP{d0b)K-4(&o
znv4z)l8V+=q6k-+op(N>F_KcP4Xe35H`)j`KqzE{KWyYl)gw+05*^K4#V1C@yVmi5
z>!*93bVs@JKe1XAMZRbKEc*a&*dXgEHr9%Q^dm-AWZXnY8S9L>xRGm>rIb)cC?k}4
zD5R#_ljPnxTKKEt@B?7q2kw(PmbUzNpX6u5J2s(WHmc0ifeYup+i<0+YJNXAQ5V9B
z+A=Sl@~&tsc}K{ZJv_}umZdA-WV=H6D3IdN_b9!mgWlT*n2*-6c^?o;uj2S+-A_@;
z9@?xj@6_q%1A|S+ct=J+nEf9PZYq^khTFL-*RvPBT~C(eqXls6MQf$^B5&~ENKNlr
z(U4Eva?QSqLfc&wj?l{>4*Zex$CSJnyvUF@&y3;q7H=a=r=Rssx^j!z!(&ZRS5|vX
zFX<Mi4yUd!J3i)?=^aka#Y;#%0|Y9@14G=Z74L_~`dSAhl9NI<QZ_IXaOmxu1_hYU
z-E=tov@`S~Fy4@jeETOz`OSA&EzC?mL^635y=Cn;;`(MyFqY^By|`$o2AklYF!5JU
zm%`GjtEI^>CdEG1m@k#6ERZ8RU^<E+$sawHH-1)b0NV&3p&Rh1W=88fi9~+2Dkip%
zugAG$-#f@k$6nQS=L)5fMLEQlMXt20W?Q$)`!X>B5|-?GznUvdaZTIhb>a@++~OiB
z=tC6!Qlg@GrvsnF`Wib|q`BbC;c3Zb3E78@1I3d2u+>?6{{w6f2kCp01|s2A>y1&C
z2=#4V{q45tr_F9<Tu9#0&u;C3O8j)?6k2n;&LgH%T$R=ZD#Z+=Al$37J6E(#B%l>e
z7?uJx(}X8;UhB32Aa8AJLLU_Hu)rlmJaSHnG>E2&Hi!;2Ax~Pj|5;O;3u)Jr*B-ld
z*d(9BK*y)?s^jI`6<F+tej^mU8#Hdk>s<S<wd8M@=eppYeK5ewJ<wnG2jO>;0c!9T
z1djB{9S!J3%E2e*5hLhriyxFrl<E)60EKXMB($cIr$|qAJ!9raj2}<z>^B$TgNEsv
zv~Qa?#aDEcS$$H7re7GL0$@qM7l5<KB^{(at+%g?#)b-jWD)&^4^GAKLgu^k{A~ny
zH28?tuQY5ZTM`%YF8DnNf_HnZ!E!}R9Nla98vLBtor;18`@R(8L;`oCZRh#5_NB-U
z19<~ADleDU!d2c}yLL@}_V|J^W=#8kejmsP7610<b;p9^r(j|>>~JA`7uJGMt%>_@
zT^WZQ$jiqSf`J~iv_VGT3|9DK&OJZs9RE$BM9#_0-Q623G&|g2e!aCcgm4(G09J}s
z%l~(bQ>@4ti=J%#w0j^21qR&<_o&)b%?H1JTuXUbn^2HgdF61Vx6rCW&9urP^H>Co
zOcuLhR++s;z?$O=Ez0D_Xmq^nz5=qG$mPuF=xE36)R(`q2J%hz1tCw!d7Mh_Gql_a
zE(byOU!t)%>)Bi&On=1)?%cO{ukF+CPh@*|J1$PR{7z?HCC^Wq#YT6VV(ys67c~1(
zTHy0)i89D;wE=j)a6i0ebGg&L&&~=2%+VN7ROz>p`C=HC<gX{W&t5nlmL?C=z8I}I
z>=DgQ*|<WS4UE~hx_$fh{f7_ZJr{as#~@H-=TBfZ6@aFL;W3L1QECIzUcYITr5TZr
zsB4CjbG{W{Ve%0G!Ee<tVOeL4kVpvrWNp=qK0Jq9j+%b|7&&i95Nb$@K5$?E(-@p4
za^uFB+j1#xu*BS>OYS%ZI2yWs0Kp&}m&B`PqV3kJ-KJZiBX7K7#Ouhtntl{gfc}vR
zX&Oi>u$_0iYpQDFR#u2KLzZ<B&IYChEG^r@2hi0+uCvaQu_2DbH=~#>+16A$<SdG{
zAoZllYMf_FL{C6s46>pTpBy2##TC39MI7;d`GyutyDEm}=U-k;P4-^I*qE(*OnP%w
zINL9z>ny#n*-e>USa;Xm6zbGz2zT{g2jq#7Ngu_R%O9o7lkZNdwAaHd@oH1868p>(
z+(6XRih|MT`n1(-r@#Sm9DcpjHPfSU=1h%e`rJOzcN_l_Y!~D%KJT^Je?p`^!o3Hz
z=NHK5cUcFYRT=F}&4&!08CKj!8^#-E*)8!eMt_66U6L{ohe1~szVI;Zzk{;??P}w=
zJ!j6U?2;g9<$kx=Qa4V%P)O`ht&mw{X!R?6Y5-sp6>O6gd3M6E0&)@uHa-i0_}3Y*
z&cL+fIvEmnN+_$NE5Jq1@4;{1qtrHD`!PdGvf<&K%q2&Mb(OK_a2r|K??vKu$^lkB
zJl?0~Y?CSPRK0AgBLfI)?*Q&#=d^(Ft$~_eeu&#zDJbpkjIG6>h5L$=F=|;oT-$6`
zhc^3+d{vZQzZiZ&crV)e`?@ZdqUab4Oq0y}!R6{@0nsJ%cv5f(o-2}1_VS3(XjWra
z{S+aTMsAgUX+)E!cFn@A);}<kKYVB-u%5f3u~e5^wQzjBT-?(Sm=ngaDtz;eY+#wV
zI{L{vt;K$>rX8(8Rq>x8$*w)9FOi%9bMs%!!#he1iVRx~?-*f1T^0IOVy)bu7ibv{
z^hVk$;J)0*5ELPp*osjBOVAFf`rw&9mKN82eo?V~nKcE4j3kQM=bp+T(p^4zk~b0o
zb}U|APNkM&0242**ZI}7z2Mvh`JJL1zw$;#T%$cG_`%dqza0WeIo;=zA$5!6COm(*
z&71Dx{J^<1a_EX|f1x6ZsRh+~c{*-7W@pE(bn=E<&P|(m8iC1EOAf3!C~R0QqK9yE
zPMb?zs}{zUhz-((Cs5X6@H#ds%=Gh2jUH}SWA6aYa0gV`G1QuGWEHv$V|JuNDb^D{
z&F<`~^1r!qD~w2EU9-L}j{?cyYW?eL;F?4i`P&Z+_)r+G*jYDI4ug7+DNL$OI(G6#
z>|tz>TitmEEUg#(d;K)dPo)6m8VtEQ;tKO;eocQ8!#cj{JM|vDwcZj6<)yX02Tzj_
zK4PXPP2)j@bvGKTS$^}BkSyxa{9v_0#J%cKG|knBa_4#V;15GFM}Ig0eXQmVvqQgo
zrdUm}Gh7ixGdY8Kf!j}4?;>8k^#oQMPimdqEC(>td8Tv>bewbwbe3h!@cBDk$k%-J
zI5axy0t1vze%PeqqjWLDCV*NM8hsUYOoJ6>Hn}u?6I=ie%ZfB`3E8{MC==EJZ@-}t
zIW_=i3W1>LTiScjKzrxY*+q;7OJvdtYC4^0>jRV`BOzY=DOr)1$#koBSOu%nutIKS
z=GSf&>N$qa^Y5tKf`)WGRy@bjG2SW37kUvC@LXXBdI?X8R7(S1hk%L)D>XvcnF0U9
z#Dr)=pE9@TK%X5!yV6N(;NLjU8!qom8;D+aJC!^HoO5CocdZ@q)p9_gw@@-IT$wEz
zQ9cE}@5E4(*QUUQ5uS(SzarC3t|qMHUImqs0X?*Amfyp};HBZ9)U6UMG6zctHn8?)
ziwo>01T&oK|3GHOrpyMo)q(o=>g6bym>0YhnN^C_q`S|tcy~vgMF;Uh45U+OvcXji
zfTalH77a=B?Ay7133=fo!|NxnR?y=Dv{%TVa5TmIu~;no9K|7rzmpz#>7xUW_$f)F
zJX)T?Zyu4Mc?SI323&CU4R!`-6NN2Q#NU$Z>*T(R?)*8ch?$HanwO=krKM>`U>X>O
zKw?eTRdtyDZa&CUFC)VbFCqbyfgtI&CT9Z(5(H&N1pPjulhD-4SZ=L?k|e8Le@JX)
z`#~ja+xea;ILln|pVLXLSA>6b?y|O;;~f6Deb%3j&evHl*nMY{6{Ow#e#N5<!j%@m
z1oi233lR*2?q{z5q=!!aWAS<#!)RS}e!O|$>oN~#4FmN1BgYDT%~i&VMq;?16YKn%
z?;{)$?;=ryS!wZj1$J9W4#OVKlQPdJc==%kEWODEIP2GJYMW|9T-AUlx{8E1OxBNY
z7=k$#6f-g{1Ryk6wz-GkSm85vs;k+7lS;3>A@*>V#Y_WQX;ooeTW!<sQYng&xycXy
zd&Bm01G`Y>+=a<DoAHi)y09FhGIoBt&S`?xUquwv3}I>{gukK@ins*{#n72oO`T4q
z;fj!MItj5y6l%kx&>W*r!no6&gIn2G?Jek7zXL~2fv1qpB|mT+72NTXX=nB)PpdJT
zCQbw!T$XikbVgI$w!%#}Z2U1kfT`>S`m;VTi@Xu5--#JP9m-AogHo4N>ZfoO&3?OW
z6;om_CcC9Z1Zx1UJlO-^fbGM{{eOUlox@3$Da6nHW-axHirvdEAYhTp-iBUSJY|4G
z0mwJf@7=?t-<75M=D!_)V@YT29DX;yA7_c}!a}CJusogdNiFRI25PN3<_O7xkc~KE
zF5jc3{ahB2W~FTdmKJXp`o_E8Zn7?p`W&|`zEM<V*`nKGT%GkP+f-Oj+^dvgd#>|0
z7qHKMj5C0E4gxBbv;Hl~i+^Pw8sa3*@p0vJ>VIFye4ph4{_4knl_n^9LML8R^&|D~
ze}Dh?gDNrqePpG_Pi0)^VW-)Lqge349BUQWa8jqAou#zhNbF2KJ4vUazI;I9Hu$vd
zJQhBZHSjT7y-Ixn4<C8QZZ8m3e~<%6f*7If5QM9uq<-`SxF>E@c@Ac_?Xsk#U4Pv0
zQ{v9w-}1wwqKb}J_k^!rdbh?R1TKd5_HOb<Mi=jkXfH(3W(P?ARL)Qeg@oH**Tbal
zI@b*ucNJ?ti%5)%jS|zZFh=D21%fi9Z&Ioh)GTdHq6{(KPUE?Lq~KJ(j8zMx(r3ky
z2%tMp$x&fSEoM)^Dquc;VfDHyOHo;uzvHtyimP1Y5DG2YFjQ+6(`lsuW73<CPBH$P
zd5v=uW)s~Len<G?z{R6xFw!2>poCdk=SNA2LVHZ|&VxE6dLlQ51FbbCy+1h8_Dk^j
zQepP^XN)iMSKosC+X1<LEsr~RE%^s8fZ=SL4DkhDZ#>PA5$<>O+Ta&)tX|va`m;+3
zb@iRF>VHp?_A2?4x?;g-Nk(;9HAzke-F3HU)i*$Tvo)#h#|gHWvTi%CB}a2+n4{0H
z;R1$h8>4@=q__%}?PqeYQWkgU_={2k?0%*0^joDSA9XivE|k_O+9Ze}P6Jm2ZM35!
z5C~m9;vHgiIHXo&VXMP(!A}RUOg5)X3=Q}}@fLEFyo`d{>xThT(P2l^)PQg0cndM5
z#OgLUAs_3n`Ros_EGWPBf=sv#^0p0o;DkV%@jau9j3TJqXT_IHNqdVH3&^HDjv%@%
z0%%@VncyxpQTSB1f#8g#REwo1@Ay}H!CnUfpRz6Ap4zq6XVy`UT1jCH^mnbsC_DYy
z>^o@g_?yuEu~=HDR9O(M$%KQdi)m#hN$GWzpG2L)VJgv7KPu`KjhOY_cdbjYV%Y*0
zDJy0YZ_(&VLVoZ~0o3Iu1zWE)Y5Ji;WX0#dOdSy{x`BX;`>#L0OFcCA5+!Y$rs%zj
z?V%Ay6*s^frM2Wq=}QlGh4!<fxcZIy4NpwcdTH0H6?x}mKYB{0!;;=E<+omD%x3<K
z<M*O%2t7kyyFBy855ZcHMh5h?0jn}=t;Z}aOS$EAS_St1R-zN?ObmNQL_^7%4+0*w
z-vN*&1lPWU{(B#W$5WJ<!KBB9<l!;){M+Ist^`k|XMS#X%V5hcdMsQCvUk)=)b%5L
zdX2a~zH4EA*ifn*5SiwwKIdJ{9V+I102$Pw;;kk@J?gsw-n?%snQYJF^n*_E&KCE;
zA0)c{_wZ8dA@Utayw*S4lZ@~M6rK}+W{xJE;(RU#gI83u`G0FX&GlCHpXTV)D5?hl
zHv!cwGJ*8nIZ9H1+4vF1#(CEP=euq1J;kF!i~SVqPF6Ooh?D8~X-r1v#XASS?ksXH
zeQSAAN(h!3JkZ0xm-H06Zte39gbN<UemH80@g7$E^EfsehtY_V1kB5Zkxj>0XQ3MU
z@1Jg+hvn9AJznLx|1aFgsoTgfBCw@ND=X^hF~q4NoM}ONqxO(ZptMUh2QmmH^~*1O
z^mOZ{tF7D8%~rEbnf+=|K}oP8gC%S2mQ>7^PO?#*F{G}p@@K@MfeKmDS)~8TQIuq7
z+3;R2EU_BsSi2<2LRY7~Z9gwn^z^s5wF=v_P$ZgS7pjY{%5Eyr`4<QKPh)8vZk=~W
zC2i7+&Og&#WuBw_@#=ibhfiTCs$N$v>c05g0DWg6@yKR-L6KhC!TG%21D8BqKZhTQ
zgxK|-clpl(<jJ4*rN+YOVTsLGNpczzENEN_5SfqgRFFUY0jw!my3Sl!j!BMH)2+-A
zLU3BYI->>F{)*Rq_|ifEhmbN;6Y3ZL^${zq=9bxjS4`~vV-#|(6*jOf%Ws|?_?eb}
zDc35;Ba!^z-_7HFg5o}Xj(_IU5RC~TiwW~^s3sUK5@A64*`$&1)P;q^hM9#6i0Q1g
zVyvW_(S|fzZJ#k|o^Ml!N8hopDE)a+mMd;V{0BezQ&8JJhc~bOW3GyOl$nwjmNhk&
zf*_-m9=nQ}F7ht2FVef1cBmS45U&@rJC#HZ8Su4KW^@%1N!Lfrazm@%?dE)I9<Kl7
z-THlk<$86b^)>QcMlZTepC3>aAh9zR^Trz5SQC@j{%?W5lgtPadye9!J;kJr^!>pW
z--^{#t-Vd{QKFtUn`}R;`<IUhYUwyyldgFu-Gr&E);I;Ei|goP7h|(`piu&60V(TW
zKCHWwU|Y?#+Qn<LEsV}2WG4Pe#}+j)`eKFOfGNo=3uDw78S^*rdn^H-G)Rf;4FBU{
zfZG_uzkVggY?%qbX5DwQy1fCq04!}b+;t9~?z78cOE;P^Jac^aq{)(htr~E~UQEOS
zOejh2=^($avr+s#tvlB_KBVmB8^vI}DY^ikiBvZ%*>>LguTlm>@+_g=y4kM3YjMmm
zP%Ba$d01EI!rM?DIiw1<tz<dl&HR@mG<cxYg_Ky;7Vl-YSU7#CT8VXnOWTuEY{yZ)
zZ7OoB{e|{puiF@UDdmAH(O<om;_;@K>nUZDRaN+|HVdmdvBT65qKz1Pq3*K@WxoVU
zsLga0$cYQ<>&eSfug3*=mg+x;Y93E)P0a2p<<AKio8?6da>r)`{Y15}Mf0k713N7G
z|7I0fPJ|%xcqFCQ@&f8CixtInZ+{@uM3{Ohw`2ke1GW0;0+n97saIiCj|GW6wOUh8
z+-mFOwilvUA`x|zV6WP!G-|_3#UtCM+iZ)2n>;}@qmy32ql|jjI>erz3hwcU7B$h+
zLVIz?Q@iIqK!pKMyIfh|VOq^QxPFu^q-I=+AyOHLls2Kc#T|E~_nwXQ&03X@#6;T>
zBh-iVd%yc0^03TAdS|^+t8#rTTF2gE5vKNks)qJ_ojBcvDGdAR^WGT1-eO*z!xb1g
z^je~qZ$cswC787JJ;naZPoD5i%AE#;YK573pPs&K1W0}z_W&W(w81%`x=_(}Qs!JO
z3V(~xI8A_ujEjv>E|X<POh6I6r@I*Qpusp*4YNM=E`v<WJevNu&!x&T&&%f|3Ggee
ztSlO@70GX;E`(gZdYW;_vo6bJn4Tf%_9H$GmT@*#<+W;7ZPq|SIdHW$4I+5@Vgx;u
zBa&^EVYJdkKPrh|f}ec(O;~A~4+s9J1nd*6Z+Kxl#WtgV&!-&k{GV#$y^Eq}6bri%
z;OVH`nGQBZ-!GqL>P%O^c^;jLvID#GEpRp?#vodp<mc5lWJNmpCdqivR9D5h#&I+o
zDL#t?peV@53NIa4QvXRyY$!87xt+t0G>pVcY2Kkb|271|=tbXbHh;0npR490t&KO9
zwoYnT&BN(5x&0^l0*{S+3jMyYXBY)9c}asC>A!q$zH#m2y?llL1m|CosmLQ)eCEUn
zsF30Uky!{uHz_UzUi3i#=94Fc=y>l-XB4rYv2F$}lk8^O;Y-E*Ki{l=Dytz}?QCn@
zTWnvHHL%_vd4EMWzCF-aKQZm<IN*cPG6iq^9#Y1^fKCf6D{z03rSZ1o|EYK!wAnX0
zxUv6vD;$jJFJgcx4$9Wxh{@~V?&RELVR;>O83kcfvId|~RgFLASmRMO>8KY!Dg*5-
zwl9@S39$&~{3#M=47bL-Uq*fIJXSBhVA-rT6=pmF!_wl*c~7SJL_etbnoY0WEcwyr
z<Y4PHF$taE2p`U!{h+NueN*{N%e(grG~fK+S;=9aHk<u5dO<P<v-K~C@k>(mH&s!e
z^YD;dhW{t$|9((?;s3v6j|ra@1wes*`w`Xab8T<(oV--|KUyCgsJZE#waow4SSOcM
zhs3S_=V&Et_M)Wz#kBt>ZZ4NeyZ2E1vFU0Rcx0JyW3}O3^}TP^Wy+#_CKwv7|MaYb
z=lr@}m&!uL4(9^^l;a5;QO(;UR+pCSCzMqJx<H|`^g_ai`p&_IQpaJs_Wy#4K{QoM
zN`v`lfvEuzWD%mzBPo?6>w2F{@vqZH1(~IULd1i4^;gm&3L=M`k{8f|i3--1%Cd8l
zOAtMf;^G-aIqyr<UUsd@T9R7;B)KZ^rOx@|4-qgPmi@`$|EH(%vTjU%E4MIBHJWJ{
z$=wb=e;R3K)roIw&Ks7O3Na})9jWg~<xS)uM+Mi0d6AiG^`LOu(Tw|7B7r-PeSDgc
zk}#Hb)a{x8%5TS=b89MinF5r-^d4r2J+;Qh3eaF79cav-BONtq=u>^=p*jq|MD4Rh
zmMo#T**LFem;Yx$H7({GWYT5bZ%g^!nQ-0LpwBI=K&euq+Htak;R!4)KP~)zlgIjb
zn{OR;3F9B@w_7b0E~QeaaPr?c4_IPepBIvpML{mD8^mM-+0fMOgExLAk`uUbG{kzt
zsG@lvp3`_bv%o%4$A-0u_4|)T-R}meH<l`PXyYEg0-f`09b;o->fNwsl8n8cv|W2_
zwcW-{Tics+SEKokcW`pep)3>aps~H(`s&0fc`N_*mI3SC-h}!u^@xf3ftL6feKp^X
zQXIsLEgrCmRC+erqsdqIRVo}CngJhZjo|K+_5?4M9d~!<)1wCCQm0!ZbX=+zvb^C{
zyDJF5Pe(+eVW&lcbYE|KdBnrRrsF3wud?d2DK&L@FQ8aa-0S9CkM`z!W$CclXRPUB
z-fSqMxETXXr4YBPC5LE7Cn*HB;P=5R=kFJs0&fUnZj!kGd|#h{N;Vz#EKcqqWAaEU
z6Rw&=$KUeBv9FhAyGvmr1$};Ex7)j-H|OYp2y57tN!#tD;p)TjdjICemj2E&&S%*e
z&}nKKXlg1evcW}$KhoCGIj+%35NDYiI<79!ZI^(xU2op(xR^A{y_*S~(n&k$^#GGz
zU5obdy?aLY9v5||!5YNBebVJs^;wf|@000Pw2`rMq>#oc4I(RC#`d7?gqJJ7UZgXw
z^yl`4$EImQd}sJJqX07z72LD-uGLj+t*Vzqd+U8X^@3;qQ_S@(ZdQsN``jd5A`6Nl
zt&1l5B4SLoE&~ONi;LBeOEUJ|y4)i}R={BeKOCKbz1<LaD1S6IaX9weqS{mIRJdY}
zh^Xl9^ZFo*568R21CIt#*%Hl5T!XOdvU&J$uD-g@t?t}l1UJsqNr5*+(VQ~R1S-c~
zj(#*TcWY@a$E)ps9k26ifV}=A|Kiv3C+AG_7ehs3Hh^K0@)rXPCWhWsM^)#80JmRs
z|5SllrT7bTkIeVh{N&niGtoNo=%P*>k4NX6UaInotF_?O&<eMppy2Z=<wS%n{+etV
za6jV%Z_`<D{%hwiOFaJa#u9-z+`+*tkGG0}fC1{2l(9w4OAD*{un*g|;jbBAPlj)H
zB++mH(Y7}F(GMIRustJOwP`}pkA^aFR|Ji7WTyr0<qKncrk-bJW+Kkp#>U3hj^`R>
z&+ev05!HAuX`I^U?lEq18FU#8j^?so8Z30oS^qe3Fn73AR73jeKeDeqQ6De_2_W}y
zk5;_czXaF$Rf#xusQ<PD+qJtJSS4wq@*pE05X=!68IH-gguq4eYJo3W+_$vE{Pw^@
zS1tTjzJ5GjnK*h8FrU;o{G#a6%jID=Q><p|Scv3RM*am&w-*t1P?3f7xE5VH?WhR#
zU>f7&!-?a=U)`xH2+`Br_zI^1r^ndkLl<lU`a~IZ9)X}L89KT7%=KozBiH5;`!t}g
zNHYr38DSWMxZBVn8MD1IdhAVV<`=T|q4%&J-Wov~^akD{91!3vD;&z6^T{%J)$%;a
z3w9pXn9u9Gv#_(+vPSgZp`|v}Oz1cRrJee76lj=v9tHez%r0E&&Fsj!8mTxHAaryc
z#l@&J*?o0FgiI(=e*rH2A8X*ep-b>#dD@}#(rtE&FWb|6$BK6AA9<BMA3YX{;*4~E
z*o_tWdq(8RVUpFs6#J-n&2pKE9_)}jpvmjiKc|6+Nci=|aWnLH=yY|J_D>$J7X|kU
zXa#v6sd$rgiE3O>BzexGTgm>0oeY~i`$_wDJ9H-bt8P4X(fz=bl-s;b6m&bVe!VvE
z`>PYiz<wpLf7XO{vjYugYG>EL>e27MUrk7Z`+W(0jE1}8l={j!#L*mLP?~b5=H&{e
z`?!+#qm_8u05eOhKwB#&BmVi;;y@eU(OM|4!kA~@uT4DcxWzxIGAkp)RwtC1_uA&|
zKV<Wj11?!i5)jtV|G1Glcse^RoDSG7Ppf;mJz`(1xR{eJKhv>jT*VTaV{m6Q7-Vr9
z{reqXT*j(B>m#@kwd-=#Q18|8!(v7)$BFvGxBiBdC;Y#kV3=yuI*<m+KNE$+sua<T
zoEwkR)B*-CBHa!UMHTG07A4}J_kUx*f5WT-xSpi!wK&)z(Qq)UAFycje1mCrWtV32
zd7)V)CRJk41s^c%(OmQSCphA1LX6F1Q^;yUTwI}zqIG?3po*0XzT=p^mcN0FAL-Nk
zyFwjjfxa={gPnEmMDKJkxAMPnC0fPLh8IuFI1zvUsVGjp(FLY0@8fSTmU9e&bW4?$
zFMYjbHTOQs1MLIb)k_GG8(L+h!nwDx`7$Oa5DkahUhI}W)&uJ}zGJ8QAoCc6h(!Cq
zOYizC#6%ZU7VXgMLXbKl#&3LQ2sj+di{w?Q?<umVvG@2|x0=ZM3&Rr)qKfj`T=B;=
zs$phJ{@l|RAn`jvt*GWoIgl&OX(A=gS^DJGUNYFj?1U`5I>R$NJ4>aoyyJzmqlH;;
zup$I_0lp31P9ImXx}rvzwFiTH`JKR$)xB^iUP<XrnEt)%WOLNeU(8_l&BOg}wDWSV
zBa@%|quv+(m1KKUU(;S+XQJ#MIvQ2!%TzVD;BnyWq4^OBVBdTxZeooq_Ma8Yk5nOj
zb82-ba^o176m6j*auT{+Q0pdCMB4su;^0ijI`8gm+X0Y189)6urkrbeV!f<3Tip3e
zn5E;Iqb-f7f=xa}Sd|mWIMDZ(m?t7|t&z6U!gn@K3`rp!x?>G%Wlj7>8&`=upRX*b
z=bBmr^OFt7`whj5gN37e8VKfg4-$Iz{Y9<l2<QsT=#seZUKFQMW$YLLq)&9X#>-@5
zKt<;~Uur{)oass6yJyw0nSHd_Khr*9ve%NY?)f51%D>}AWx-)6uoId9@}3o5;Z45B
z*UC4%$yVKEhS$MaeXZ%H-f_x|KMl-e26&a7yAqawwgJ7Hzwqb(COK_q?M1QZbLGzl
zZlEql+<v3}v&Udw{SWwo&~6|r!C5XE85_s__FJv{NXyK#(@QU$QW9@{EyP#xNWW-1
zZ$c|RuM85K%!e*~$E&ivr4Q`&<tN_Sdvi6?N7iIi1@CS_P1H~|A(0hdz#CtU8$cLm
zZ~CDKHlVw!<>Dzmve!LWJtT<>#cFntTGpxTarn`t+VKTQik2>5t$o}@uT}e(N<mHh
z@*frLDCyoF48AY()p?}McAkKJUhTblGz2CK0*p!n>DCQFQjg2YC9xw|3HnV;hw4n@
zGt?aE&V$!Rq<)Qgsg+&Fg#*4|KE9OLquPE#`k9e$ZZ^v7IJ*Rkhh7_P!VMY{kq-+W
z-{>9yUo(-2bcs)-MySx_JV%`WUA4IczD;0ZAu^4Z{y~K`qjKC0r~UC!1>Pp<=@w2e
zZzp<iYDv`4+QAG_C>y`9_Q2FM=^eKMX#fC`k=T+RrIwuUkC+QbX}W(cU!&k91moXR
zXQ)h7@fPwRb_eWFg-aAIf?{J1Tn02DKQ(Ro!7)V#%=3kkitL)o`L#xaIM~s8)T$-O
zTVncPQC|cX6_5{>wZyDbjkL_Ony5@{0c~b;c4szmyy2ju;lbDELx78!HAxUHxV-_?
zQo)lE+P~~JI!p`kdD2nYaJZ77ue$zYpz!fmB!zl@$|fq4BGX@M9`9)l1}po!;w}m$
zKV!~nx|K1jBzz?f9Klkjl@OOC(M1kdWR&C_OO&!1lzA{~!?!>D9316W{P8MOjA(GN
z4QUYS^&J`r9PBU!?2%1dRCTL<@xPsr8;++gqu===I<L0NAP(<8CnF*CAk#Sip_s>4
zxN%^j)!ySW>g1|!OKWB>Rdy@FYU^QgyJdjiQQ8{9{cFrUKO9&;&dXX|o7&^2SX4_K
z|9lUUutVobPOHI<YxCdQLUWpjK_1-<G&KcAI&gfzLH@4t6OW^`m5c*-y>3hYXevG@
zvppL*?yx%AAc0Wy5IEXQ14@mu^|*QRu9&jq%?_OT?KW#RvG<UpY)6~aY}TPoO|tu&
zB~*fF>gf=#DaZricOh}PY31~4w}i>ezf)fd3cGu})Nu4%#@pQb3ef8xum;-&FbXp~
zWg=R=n(!866TNUj^`F-a@nf#dOcI^Ra?csY76ezUI$PF>u;bm8w1XL8F}&jRyNkRk
zFMmIn&+7c)fn^W1Dbq9Li2Uat`Z}#!>JKu54Ojvfjna^lny|ed1`tu@Qv9{=SyQR8
zuyVXQ52P*$_Bnv~$t2C&{DXiaZ0WJ$2v@XKD=|TM<Kils6`kTe?u$Q%Ry|m2=FUwK
zlq-6^5iO__U220Xs@s_gPlFxpOq;NCebG64j8C*^NN9=jy!*tGXAU<R-yOcw(0)8p
z3>+?Xkm@MoU&%kCw@r4sO5#@ii7IiRq%~#l!n>7Xfl2|bd&M4sN-`#X3UsX>)L#BL
zrzu(Fx$lPKtz29#$6Icv9q*>$VPpclm=m3oIUQdLHX(jn&#m@<g$t*+Ha!;N?vlV0
zo$LpWqs&(now>i<-!!<NbBvx#(A@Bv$O0P@XVvL<GVv4sn_b4?>=NU8C8BaP-ey%R
z6{D8G!f55Hwz$abG4#gI<C;CK$%#Y(Ehjzey9weJ4=GDS#T#$MigIfANi{=+H~^fw
z!pHNGX|?CV{=xp-wKW`Ab8#T@F)C&>b3@A$?TIA+RLXU)@iyVKgAIj--L7^pgA$hL
z)C46}7mxN=CtN2(*y{}*Ki)$gO|<U;<}VPDhzq|Aq6Ko3rUZ(u0;>c}RMsyEzq<I_
z_q7=JSdF*UZis}x_3nFqc)UJF)mP4>okyV%&KWc|9R;&&=Hcn|?E}SvT*~~6zK>=1
z@o1o=iQmO<4JShTpGy3bVkANf=}cg9{O4D>JwBm+s}OM`73>oi^YZd2H?&v)z^u~c
z9@xEnxRGELxXZxEAkJv#|9K73+?FG#<;0(;fEwpF7p$psZTcnvZ0tM)6_<RP&s3O1
zsvoHe&&aDxR^od5yQ~j##i>2teHZXpl~D~DJ+)05tC2olbvK)QSi0%{)x(uh^niQ&
zT586fGyJ>CqyZ3}8+_YEvw>QU*R065O0rqLHf5BFqwUI%ITDf3?cuK>@25-6SKh}R
zDIvtfwW6i<uF0O~6mJ%A|K0XfYo5Os1TPb{{So{_W)8_ezODE5)6@=&Ww}-aKL^k&
z%v=8m!+lZ@j$dER1L1Qi2?!=F?gHKo;wc5@iTSC+2GMGHMIq9&09u1}<BA=#*C_0G
z6K2B9r&b$nd2(ECg#hXG8M5%s^sW-?=NxtC8}|yAtc^JC6x8aipUNA_t@>r!rNlY=
zR;ALz?2g2TiWj5x)Hl3}I@4;!59h#xU%pZKyNnz}3whKWRtUZQ*hOLb?c29A-VOU>
zgIIWI(GJ*!lU0Ffl8&}^#To()sD!j$GnwJA8XG!(7M;uiJ;A}Oy^51m7!-Pa1iq10
z@NKP$A&nP&Np3?p&ELJ;`feY+_gFQUm{vALm*$+`qGk2)1KlH@dB^^OTKA34Ha|<$
zM2U%e6P;=jdyQ;8>aiPv*?Ot+{!?seIZxF-=!jR@asqX?v-DE;7HfSs$JdHvy1a`b
zsGV1rR*X=gZDeA3xAKy2t06l&!x=AupLGf~kcwU0ulf~sd!>p$SE=8TctNiy7eB{_
zmNcPj7CBnyJ1*VWpEy2Z(9O{0y!$ghpt;aymzgRe^TNfe=c~Z9XwYCu0hN92`+e8@
zPQcM6X2)0otx(ybtgX(0$kIa>ehyAEMSjazgl<vWv97kZw&m)tuS*?ueiX|+Y9(mZ
z8&=Jrxm|oF*+K6ij|$&jMF(Kd+Wqh;8zXFT5G0jpzKMEJk`7u?$&ho<b1uog{-*2g
zSGV7{Xx%(oefS~2ZsS=A|AH%k3-eACIS>vhE52fNsr~~@YXbS(4Oi#c%4vVSYPqZf
zLxqWl2a_zo@Xs;Z$9s|nYOpPZO@z7kn3qJrZiiK1y-Bg9gxmh)fj33(NX0xlzb?Q1
zeTw&3G#HiA+(j&ouGyhTMD`lJX5w^E*!6_3pnp(&T7WTEY2)WrAYWg3A)~!dPvylf
zHJsxcC;|KdXloSP`gElzdE{}P($$ZS|2;pW%{8G8_NN;^*z{}HsayP&3dB1LpuC!*
zCRL_=TEKRhk)G15UF+Sx!jE@Eyl;y56U`lMA`^~9WXb#NC$9^?iOFE`5=$vD@*Xo#
z3<C-z9ld|PY#*dLKli{cB|Z&={9_dd!l#yg<0#dQpTEv9T<SNtWAso#lV_hwnQC67
zRPXU!cT>|5ceJeZ^-Rf(_0)qhRTGtr4|}Mp=5EpcT`+K`f5xKxF6uQ&h{}GZ(`sec
zh&D}7r8&U?q?^!pQ0gglEvJRAn`fr0YoBrfn@4Vk&bWkxq0TfI?8P6ugaF>vdmKj2
ze&jES3JA+;)!msGN1Nzb(5CW>n|{jw<<BEdaZgeeu}JZd+?RGdBMhrbCN)w$m^-AO
z&GuQ1Bh_9@Uw0?O7$(|mLRKC8v2KC4C;evP1A&+P@foL#>_e(b=X+fJusm6+dVZ?C
z!IAv3<Sdm*6x&1A_XY|9E6=TT-~mmi+mF_#aShUb+sjTG&U1Qimm*uY(YE97oa>q^
zay;f|H3Q(6n~z-Twg%aUkI%51mrQwptpY<Ga_jL{X;i?noVc0+?!sb%V94I=5Dj;<
z0H8(NFga3A*jY~7FEP=YH$5L;!w{hmPs<RY6u-M`=k<~vYOwuM)ck}wyF|#OT3nCX
z^laGtw^sH@FNevU2E!d)`%7x+&AI})zM?l`C+u%;^$|2o0lx=FFvA?S_#a+|^?Ifg
ziPfR6GVj(IeaJ;<+zj-#K8C$pOtK8wdr-Mfd&2)j!W!*~%N(8}yT=qp5_d68Cc{7A
PKdsw(w~92Ly#D_HnA4v;


From e4ca22b9fd62396d37ec89272c7fd712fae5b205 Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Mon, 14 Sep 2020 22:48:09 +0100
Subject: [PATCH 319/496] Fixing more nits

---
 ...20 -building-operators-for-cluster-addons.md | 38 +++++++++----------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
index e496315dc9..f8773d6459 100644
--- a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
+++ b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -13,7 +13,7 @@ slug: gsoc20-building-operators-for-cluster-addons
 
 My name is Somtochi Onyekwere from the Federal University of Technology, Owerri (Nigeria) and this year, I was given the opportunity to work with Kubernetes (under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
 
-Specifically, I worked on the [Cluster Addons: Package all things!](https://github.com/cncf/mentoring/blob/master/summerofcode/README.md#cluster-addons-package-all-the-things) project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
+Specifically, I worked on the _Cluster Addons: Package all  the things!_ project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
 
 # Background
 
@@ -21,11 +21,11 @@ Kubernetes has progressed greatly in the past few years with a flourishing commu
 
 The community is exploring the use of operators as a mechanism to monitor various resources in the cluster and properly manage these resources. In addition to this, it provides self-healing and it is a kubernetes-native pattern that can encode how best these addons work and manage them properly.
 
-What are cluster addons? Cluster addons are a collection of resources (like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards (for visualization) to more complex ones like Calico (for networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon.
+What are cluster addons? Cluster addons are a collection of resources (like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards (for visualization) to more complex ones like Calico (for networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon. You can get a deeper overview in this [blog post](https://kubernetes.io/docs/concepts/overview/components/#addons).
 
-Operators are custom controllers with custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale.
+Operators are custom controllers with custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale. This [blog post](https://kubernetes.io/docs/concepts/extend-kubernetes/operator) does a good job of explaining operators.
 
-The addon operators can solve a lot of problems, but they have their challenges. Those under the cluster-addons project had missing pieces and were still a proof of concept. Generating the RBAC for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
+The addon operators can solve a lot of problems, but they have their challenges. Those under the cluster-addons project had missing pieces and were still a proof of concept. Generating the RBAC configuration for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
 
 I spent the summer working on these issues, looking at them with fresh eyes and coming up with solutions for both the known and unknown issues.
 
@@ -33,10 +33,10 @@ I spent the summer working on these issues, looking at them with fresh eyes and
 
 The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern) (from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDP and cluster-addons.
 
-## Version check for the operators
+## Operator version checking
 Enabling version check for operators helped in making safer upgrades/downgrades to different versions of the addon, even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
 
-## Git Repository for storing the manifests
+## Git repository for storing the manifests
 Previously, there was support for only local file directories and HTTPS repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory. The channels directory contains manifest for different versions, the controller pulls the manifest from this directory and applies it to the cluster. During the internship period, I extended it to include Git repositories.
 
 ## Annotations to temporarily disable reconciliation
@@ -48,34 +48,34 @@ One of the operators that I worked on is a generic controller that could manage
 # Tools and CLI programs
 There were also some command-line programs I wrote that could be used to make working with addon operators easier. Most of them have uses outside the addon operators as they try to solve a specific problem that could surface anywhere while working with Kubernetes. I encourage you to [check them out](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools) when you have the chance!
 
-## [RBAC generator](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools/rbac-gen)
-One of the biggest concerns with the operator was RBAC. You had to manually look through the manifest and add the RBAC rule for each resource as it needs to have RBAC permissions to create, get, update and delete the resources in the manifest when running in-cluster. Building the RBAC generator automated the process of writing the RBAC roles and role bindings. The function of the RBAC generator is simple. It accepts the file name of the manifest as a flag. Then, it parses the manifest and gets the API group and resource name of the resources and adds it to a role. It outputs the role and role binding to stdout or a file if the `--out` flag is parsed.
+## RBAC Generator
+One of the biggest concerns with the operator was RBAC. You had to manually look through the manifest and add the RBAC rule for each resource as it needs to have RBAC permissions to create, get, update and delete the resources in the manifest when running in-cluster. Building the [RBAC generator](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/rbac-gen) automated the process of writing the RBAC roles and role bindings. The function of the RBAC generator is simple. It accepts the file name of the manifest as a flag. Then, it parses the manifest and gets the API group and resource name of the resources and adds it to a role. It outputs the role and role binding to stdout or a file if the `--out` flag is parsed.
 
-Additionally, the tool enables you to split the RBAC by separating the cluster roles in the manifest. This lessened the security concern of an operator being over-privileged as it needed to have all the permissions that the clusterrole has. If you want to apply the clusterrole yourself and not give the operator these permissions, you can pass in a `--supervisory` boolean flag so that the generator does not add these permissions to the role. The CLI program resides [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/rbac-gen/main.go).
+Additionally, the tool enables you to split the RBAC by separating the cluster roles in the manifest. This lessened the security concern of an operator being over-privileged as it needed to have all the permissions that the clusterrole has. If you want to apply the clusterrole yourself and not give the operator these permissions, you can pass in a `--supervisory` boolean flag so that the generator does not add these permissions to the role. The CLI program resides [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/rbac-gen).
 
-## [Kubectl Ownerref](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools/kubectl-ownerref)
-It is hard to find out at a glance which objects were created by an addon custom resource. This kubectl plugin alleviates that pain by displaying all the objects in the cluster that a resource has ownerrefs on. You simply pass the kind and the name of the resource as arguments to the program and it checks the cluster for the objects and gives the kind, name, the namespace of such an object. It could be useful to get a general overview of all the objects that the controller is reconciling by passing in the name and kind of custom resource.
+## Kubectl Ownerref
+It is hard to find out at a glance which objects were created by an addon custom resource. This kubectl plugin alleviates that pain by displaying all the objects in the cluster that a resource has ownerrefs on. You simply pass the kind and the name of the resource as arguments to the program and it checks the cluster for the objects and gives the kind, name, the namespace of such an object. It could be useful to get a general overview of all the objects that the controller is reconciling by passing in the name and kind of custom resource. The CLI program resides [here](https://github.com/kubernetes-sigs/cluster-addons/tree/master/tools/kubectl-ownerref).
 
 # Addon Operators
 To fully understand addons operators and make changes to how they are being created, you have to try creating and using them. Part of the summer was spent building operators for some popular addons like the Kubernetes dashboard, flannel, NodeLocalDNS and so on. Please check the [cluster-addons](https://github.com/kubernetes-sigs/cluster-addons) repository for the different addon operators. In this section, I will just highlight one that is a little different from the others.
 
 ## Generic Controller
-The generic controller can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. Also instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CRD using this tool ([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory (it could be a Git repository too!). The tool generates the - CRD, RBAC manifest and two custom resources for you.
+The generic controller can be shared between addons that don’t require much configuration. This minimizes resource consumption on the cluster as it reduces the number of controllers that need to be run. Also instead of building your own operator, you can just use the generic controller and whenever you feel that your needs have grown and you need a more complex operator, you can always scaffold the code with kubebuilder and continue from where the generic operator stopped. To use the generic controller, you can generate the CustomResourceDefinition(CRD) using this tool ([generic-addon](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md)). You pass in the kind, group, and the location of your channels directory (it could be a Git repository too!). The tool generates the - CRD, RBAC manifest and two custom resources for you.
 
 The process is as follows:
 - Create the Generic CRD
-- Generate all the manifest needed with the `generic-addon` tool found [here](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md).
+- Generate all the manifests needed with the [`generic-addon tool`](https://github.com/kubernetes-sigs/cluster-addons/blob/master/tools/generic-addon/README.md).
 
 This tool creates:
 1. The CRD for your addon
-2. The RBAC for the CRD
-3. The RBAC for applying manifest
-4. The CR for your addon
-5. A Generic CR
+2. The RBAC rules for the CustomResourceDefinitions
+3. The RBAC rules for applying the manifests
+4. The custom resource for your addon
+5. A Generic custom resource
 
 The Generic custom resource looks like this:
 
-```
+```yaml
 apiVersion: addons.x-k8s.io/v1alpha1
 kind: Generic
 metadata:
@@ -112,7 +112,7 @@ I really want to appreciate my mentors [Justin Santa Barbara](https://github.com
 # Conclusion
 So far I have learnt a lot about Go, the internals of Kubernetes, and operators. I want to conclude by encouraging people to contribute to open-source (especially Kubernetes :)) regardless of your level of experience. It has been a well-rounded experience for me and I have come to love the community. It is a great initiative and it is a great way to learn and meet awesome people. Special shoutout to Google for organizing this program.
 
-If you are interested in cluster addons and finding out more on addon operators, you are welcome to join our slack channel #cluster-addons on the Kubernetes [slack](kubernetes.slack.com).
+If you are interested in cluster addons and finding out more on addon operators, you are welcome to join our slack channel on the Kubernetes [#cluster-addons](https://kubernetes.slack.com/messages/cluster-addons).
 
 ---
 

From 31f9550dd803cc59be20607836e6dead07181740 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 15 Sep 2020 11:02:01 +0900
Subject: [PATCH 320/496] Copy concepts/services-networking/endpoint-slices.md
 from en/ directory.

---
 .../contribute/suggesting-improvements.md     | 65 +++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100644 content/ja/docs/contribute/suggesting-improvements.md

diff --git a/content/ja/docs/contribute/suggesting-improvements.md b/content/ja/docs/contribute/suggesting-improvements.md
new file mode 100644
index 0000000000..e48c2915b9
--- /dev/null
+++ b/content/ja/docs/contribute/suggesting-improvements.md
@@ -0,0 +1,65 @@
+---
+title: Suggesting content improvements
+slug: suggest-improvements
+content_type: concept
+weight: 10
+card:
+  name: contribute
+  weight: 20
+---
+
+<!-- overview -->
+
+If you notice an issue with Kubernetes documentation, or have an idea for new content, then open an issue. All you need is a [GitHub account](https://github.com/join) and a web browser.
+
+In most cases, new work on Kubernetes documentation begins with an issue in GitHub. Kubernetes contributors
+then review, categorize and tag issues as needed. Next, you or another member
+of the Kubernetes community open a pull request with changes to resolve the issue.
+
+
+
+<!-- body -->
+
+## Opening an issue
+
+If you want to suggest improvements to existing content, or notice an error, then open an issue.
+
+1. Go to the bottom of the page and click the **Create an Issue** button. This redirects you
+ to a GitHub issue page pre-populated with some headers.
+2. Describe the issue or suggestion for improvement. Provide as many details as you can.
+3. Click **Submit new issue**.
+
+After submitting, check in on your issue occasionally or turn on GitHub notifications.
+Reviewers and other community members might ask questions before
+they can take action on your issue.
+
+## Suggesting new content
+
+If you have an idea for new content, but you aren't sure where it should go, you can
+still file an issue. Either:
+
+- Choose an existing page in the section you think the content belongs in and click **Create an issue**.
+- Go to [GitHub](https://github.com/kubernetes/website/issues/new/) and file the issue directly.
+
+## How to file great issues
+
+
+Keep the following in mind when filing an issue:
+
+- Provide a clear issue description. Describe what specifically is missing, out of date,
+  wrong, or needs improvement.
+- Explain the specific impact the issue has on users.
+- Limit the scope of a given issue to a reasonable unit of work. For problems
+  with a large scope, break them down into smaller issues. For example, "Fix the security docs"
+  is too broad, but "Add details to the 'Restricting network access' topic" is specific enough
+  to be actionable.
+- Search the existing issues to see if there's anything related or similar to the
+  new issue.
+- If the new issue relates to another issue or pull request, refer to it
+  either by its full URL or by the issue or pull request number prefixed
+  with a `#` character. For example, `Introduced by #987654`.
+- Follow the [Code of Conduct](/community/code-of-conduct/). Respect your
+fellow contributors. For example, "The docs are terrible" is not
+  helpful or polite feedback.
+
+

From c42cfe146b8983697b053a23520ed876d060bcb6 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 15 Sep 2020 11:34:06 +0900
Subject: [PATCH 321/496] Translate
 concepts/services-networking/endpoint-slices into Japanese.

---
 .../contribute/suggesting-improvements.md     | 62 +++++++------------
 1 file changed, 21 insertions(+), 41 deletions(-)

diff --git a/content/ja/docs/contribute/suggesting-improvements.md b/content/ja/docs/contribute/suggesting-improvements.md
index e48c2915b9..3a28a94e06 100644
--- a/content/ja/docs/contribute/suggesting-improvements.md
+++ b/content/ja/docs/contribute/suggesting-improvements.md
@@ -1,5 +1,5 @@
 ---
-title: Suggesting content improvements
+title: コンテンツの改善を提案する
 slug: suggest-improvements
 content_type: concept
 weight: 10
@@ -10,56 +10,36 @@ card:
 
 <!-- overview -->
 
-If you notice an issue with Kubernetes documentation, or have an idea for new content, then open an issue. All you need is a [GitHub account](https://github.com/join) and a web browser.
-
-In most cases, new work on Kubernetes documentation begins with an issue in GitHub. Kubernetes contributors
-then review, categorize and tag issues as needed. Next, you or another member
-of the Kubernetes community open a pull request with changes to resolve the issue.
-
+Kubernetesのドキュメントに何か問題を見つけたり、新しいコンテンツに関してアイデアを思い付いたときは、issueを作ってください。必要なものは、[GitHubアカウント](https://github.com/join)とウェブブラウザーだけです。
 
+Kubernetesのドキュメント上の新しい作業は、ほとんどの場合、GitHubのissueから始まります。Kubernetesのコントリビューターは、必要に応じてレビュー、分類、タグ付けを行います。次に、あなたやKubernetesコミュニティの他のメンバーが、そのissueを解決するための変更を加えるpull requestを開きます。
 
 <!-- body -->
 
-## Opening an issue
+## issueを作る
 
-If you want to suggest improvements to existing content, or notice an error, then open an issue.
+既存のコンテンツに対して改善を提案したい場合や、間違いを発見した場合は、issueを作ってください。
 
-1. Go to the bottom of the page and click the **Create an Issue** button. This redirects you
- to a GitHub issue page pre-populated with some headers.
-2. Describe the issue or suggestion for improvement. Provide as many details as you can.
-3. Click **Submit new issue**.
+1. ページの右側のサイドバーにある**ドキュメントのissueを作成**ボタンをクリックします。GitHubのissueページにリダイレクトし、一部のヘッダーが自動的に挿入されます。
+2. 問題や改善の提案について書きます。できる限り多くの詳細情報を提供するようにしてください。
+3. **Submit new issue**ボタンをクリックします。
 
-After submitting, check in on your issue occasionally or turn on GitHub notifications.
-Reviewers and other community members might ask questions before
-they can take action on your issue.
+送信後、定期的にissueを確認するか、GitHubの通知を設定してください。レビュアや他のコミュニティメンバーが、issueに対して作業を行うために、あなたに何か質問をするかもしれません。
 
-## Suggesting new content
+## 新しいコンテンツの提案
 
-If you have an idea for new content, but you aren't sure where it should go, you can
-still file an issue. Either:
+新しいコンテンツに関するアイデアがあるものの、どの場所に追加すればわからないときでも、issueを作ることができます。次のいずれかを選択して行ってください。
 
-- Choose an existing page in the section you think the content belongs in and click **Create an issue**.
-- Go to [GitHub](https://github.com/kubernetes/website/issues/new/) and file the issue directly.
+- コンテンツが追加されるべきだと思う既存のページを選択し、**ドキュメントのissueを作成**ボタンをクリックする。
+- [GitHub](https://github.com/kubernetes/website/issues/new/)に移動し、直接issueを作る。
 
-## How to file great issues
-
-
-Keep the following in mind when filing an issue:
-
-- Provide a clear issue description. Describe what specifically is missing, out of date,
-  wrong, or needs improvement.
-- Explain the specific impact the issue has on users.
-- Limit the scope of a given issue to a reasonable unit of work. For problems
-  with a large scope, break them down into smaller issues. For example, "Fix the security docs"
-  is too broad, but "Add details to the 'Restricting network access' topic" is specific enough
-  to be actionable.
-- Search the existing issues to see if there's anything related or similar to the
-  new issue.
-- If the new issue relates to another issue or pull request, refer to it
-  either by its full URL or by the issue or pull request number prefixed
-  with a `#` character. For example, `Introduced by #987654`.
-- Follow the [Code of Conduct](/community/code-of-conduct/). Respect your
-fellow contributors. For example, "The docs are terrible" is not
-  helpful or polite feedback.
+## よいissueを作るには
 
+issueを作るときは、以下のことを心に留めてください。
 
+- 明確なissueの説明を書く。不足している点、古くなっている点、誤っている点、改善が必要な点など、どの点がそうであるか明確に書く。
+- issueがユーザーに与える具体的な影響を説明する。
+- 合理的な作業単位になるように、特定のissueのスコープを制限する。スコープの大きな問題については、小さな複数のissueに分割する。たとえば、"Fix the security docs"(セキュリティのドキュメントを修正する)というのはスコープが大きすぎますが、"Add details to the 'Restricting network access' topic"(トピック「ネットワークアクセスの制限」に詳細情報を追加する)であれば十分に作業可能な大きさです。
+- すでにあるissueを検索し、関連または同様のissueがないかどうか確認する。
+- 新しいissueがほかのissueやpull requestと関係する場合は、完全なURLを参照するか、issueやpull requestの数字の前に`#`の文字を付けて参照する。例えば、`Introduced by #987654`のように書きます。
+- [行動規範](/ja/community/code-of-conduct/)に従って、仲間のコントリビューターに敬意を払いましょう。たとえば、"The docs are terrible"(このドキュメントは最悪だ)のようなコメントは、役に立つ敬意のあるフィードバックではありません。

From 2d7b6b85f503dd98b25aee1274c707dba3bbc09e Mon Sep 17 00:00:00 2001
From: "Elvin J. Galarza" <elvinjohngalarza@gmail.com>
Date: Mon, 14 Sep 2020 22:57:40 -0400
Subject: [PATCH 322/496] Fix outbound link to Cilium K8s Installation Guide

Updated the outbound link to Intro to Cilium K8s and Installation Guide to reflect the new link on the Cilium site.
---
 .../network-policy-provider/cilium-network-policy.md            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy.md b/content/en/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy.md
index 83989b1f58..948893d3ea 100644
--- a/content/en/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy.md
+++ b/content/en/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy.md
@@ -72,7 +72,7 @@ policies using an example application.
 ## Deploying Cilium for Production Use
 
 For detailed instructions around deploying Cilium for production, see:
-[Cilium Kubernetes Installation Guide](https://docs.cilium.io/en/stable/kubernetes/intro/)
+[Cilium Kubernetes Installation Guide](https://docs.cilium.io/en/stable/concepts/kubernetes/intro/)
 This documentation includes detailed requirements, instructions and example
 production DaemonSet files.
 

From 9a06c1bc95e446d62854372ad90608d03d535915 Mon Sep 17 00:00:00 2001
From: Chris Tomas <chris.tomas20@gmail.com>
Date: Tue, 15 Sep 2020 00:19:50 -0500
Subject: [PATCH 323/496] Updating apiVersion for Certificate Signing Request
 object #1

Issue detected: There are two references to old apiVersion for CertificateSigningRequest object

Ref: CertificateSigningRequest API is promoted to certificates.k8s.io/v1 (https://kubernetes.io/docs/setup/release/notes/#api-change)

Fix: Replaced "certificates.k8s.io/v1beta1" by "certificates.k8s.io/v1"
---
 .../access-authn-authz/certificate-signing-requests.md        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index 4eb1705f4c..7c74cec092 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -108,7 +108,7 @@ Kubernetes provides built-in signers that each have a well-known `signerName`:
 
 1. `kubernetes.io/legacy-unknown`:  has no guarantees for trust at all. Some distributions may honor these as client
   certs, but that behavior is not standard Kubernetes behavior.
-  This signerName can only be requested in CertificateSigningRequests created via the `certificates.k8s.io/v1beta1` API version.
+  This signerName can only be requested in CertificateSigningRequests created via the `certificates.k8s.io/v1` API version.
   Never auto-approved by {{< glossary_tooltip term_id="kube-controller-manager" >}}.
     1. Trust distribution: None.  There is no standard trust or distribution for this signer in a Kubernetes cluster.
     1. Permitted subjects - any
@@ -245,7 +245,7 @@ Create a CertificateSigningRequest and submit it to a Kubernetes Cluster via kub
 
 ```
 cat <<EOF | kubectl apply -f -
-apiVersion: certificates.k8s.io/v1beta1
+apiVersion: certificates.k8s.io/v1
 kind: CertificateSigningRequest
 metadata:
   name: john

From 42f23e75b7165d59aac70fb28e8e5aac6ba66fa9 Mon Sep 17 00:00:00 2001
From: varadaprasanth <48983411+varadaprasanth@users.noreply.github.com>
Date: Tue, 15 Sep 2020 14:59:08 +0530
Subject: [PATCH 324/496] Update run-stateless-application-deployment.md

Pod name is changed from pod, as per the documentation naming conventions.
---
 .../run-stateless-application-deployment.md               | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/tasks/run-application/run-stateless-application-deployment.md b/content/en/docs/tasks/run-application/run-stateless-application-deployment.md
index 9e6ed4a25e..df604facf8 100644
--- a/content/en/docs/tasks/run-application/run-stateless-application-deployment.md
+++ b/content/en/docs/tasks/run-application/run-stateless-application-deployment.md
@@ -80,7 +80,7 @@ a Deployment that runs the nginx:1.14.2 Docker image:
         NewReplicaSet:    nginx-deployment-1771418926 (2/2 replicas created)
         No events.
 
-1. List the pods created by the deployment:
+1. List the Pods created by the deployment:
 
         kubectl get pods -l app=nginx
 
@@ -113,9 +113,9 @@ specifies that the deployment should be updated to use nginx 1.16.1.
 
 ## Scaling the application by increasing the replica count
 
-You can increase the number of pods in your Deployment by applying a new YAML
+You can increase the number of Pods in your Deployment by applying a new YAML
 file. This YAML file sets `replicas` to 4, which specifies that the Deployment
-should have four pods:
+should have four Pods:
 
 {{< codenew file="application/deployment-scale.yaml" >}}
 
@@ -123,7 +123,7 @@ should have four pods:
 
         kubectl apply -f https://k8s.io/examples/application/deployment-scale.yaml
 
-1. Verify that the Deployment has four pods:
+1. Verify that the Deployment has four Pods:
 
         kubectl get pods -l app=nginx
 

From 19d46f796d87a3daa748413161d6a91c08c4a76a Mon Sep 17 00:00:00 2001
From: varadaprasanth <48983411+varadaprasanth@users.noreply.github.com>
Date: Tue, 15 Sep 2020 15:22:59 +0530
Subject: [PATCH 325/496] Update horizontal-pod-autoscale-walkthrough.md

pod is replaced with 'Pod' as per the documentation naming conventions.
---
 .../horizontal-pod-autoscale-walkthrough.md            | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md b/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
index 2c00e4aa7b..9c8e1f8951 100644
--- a/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
+++ b/content/en/docs/tasks/run-application/horizontal-pod-autoscale-walkthrough.md
@@ -11,7 +11,7 @@ weight: 100
 
 <!-- overview -->
 
-Horizontal Pod Autoscaler automatically scales the number of pods
+Horizontal Pod Autoscaler automatically scales the number of Pods
 in a replication controller, deployment, replica set or stateful set based on observed CPU utilization
 (or, with beta support, on some other, application-provided metrics).
 
@@ -244,8 +244,8 @@ There are two other types of metrics, both of which are considered *custom metri
 object metrics.  These metrics may have names which are cluster specific, and require a more
 advanced cluster monitoring setup.
 
-The first of these alternative metric types is *pod metrics*.  These metrics describe pods, and
-are averaged together across pods and compared with a target value to determine the replica count.
+The first of these alternative metric types is *pod metrics*.  These metrics describe Pods, and
+are averaged together across Pods and compared with a target value to determine the replica count.
 They work much like resource metrics, except that they *only* support a `target` type of `AverageValue`.
 
 Pod metrics are specified using a metric block like this:
@@ -261,11 +261,11 @@ pods:
 ```
 
 The second alternative metric type is *object metrics*. These metrics describe a different
-object in the same namespace, instead of describing pods. The metrics are not necessarily
+object in the same namespace, instead of describing Pods. The metrics are not necessarily
 fetched from the object; they only describe it. Object metrics support `target` types of
 both `Value` and `AverageValue`.  With `Value`, the target is compared directly to the returned
 metric from the API. With `AverageValue`, the value returned from the custom metrics API is divided
-by the number of pods before being compared to the target. The following example is the YAML
+by the number of Pods before being compared to the target. The following example is the YAML
 representation of the `requests-per-second` metric.
 
 ```yaml

From d455c7f5fd3c81859db6e481b673c3c7b7846396 Mon Sep 17 00:00:00 2001
From: varadaprasanth <48983411+varadaprasanth@users.noreply.github.com>
Date: Tue, 15 Sep 2020 15:33:13 +0530
Subject: [PATCH 326/496] Update horizontal-pod-autoscale.md

pod is replaced with 'Pod' as per the documentation naming conventions
---
 .../run-application/horizontal-pod-autoscale.md    | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
index f84744cdd7..f914480905 100644
--- a/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
+++ b/content/en/docs/tasks/run-application/horizontal-pod-autoscale.md
@@ -15,7 +15,7 @@ weight: 90
 
 <!-- overview -->
 
-The Horizontal Pod Autoscaler automatically scales the number of pods
+The Horizontal Pod Autoscaler automatically scales the number of Pods
 in a replication controller, deployment, replica set or stateful set based on observed CPU utilization (or, with
 [custom metrics](https://git.k8s.io/community/contributors/design-proposals/instrumentation/custom-metrics-api.md)
 support, on some other application-provided metrics). Note that Horizontal
@@ -45,16 +45,16 @@ obtains the metrics from either the resource metrics API (for per-pod resource m
 or the custom metrics API (for all other metrics).
 
 * For per-pod resource metrics (like CPU), the controller fetches the metrics
-  from the resource metrics API for each pod targeted by the HorizontalPodAutoscaler.
+  from the resource metrics API for each Pod targeted by the HorizontalPodAutoscaler.
   Then, if a target utilization value is set, the controller calculates the utilization
   value as a percentage of the equivalent resource request on the containers in
-  each pod.  If a target raw value is set, the raw metric values are used directly.
+  each Pod.  If a target raw value is set, the raw metric values are used directly.
   The controller then takes the mean of the utilization or the raw value (depending on the type
-  of target specified) across all targeted pods, and produces a ratio used to scale
+  of target specified) across all targeted Pods, and produces a ratio used to scale
   the number of desired replicas.
 
-  Please note that if some of the pod's containers do not have the relevant resource request set,
-  CPU utilization for the pod will not be defined and the autoscaler will
+  Please note that if some of the Pod's containers do not have the relevant resource request set,
+  CPU utilization for the Pod will not be defined and the autoscaler will
   not take any action for that metric. See the [algorithm
   details](#algorithm-details) section below for more information about
   how the autoscaling algorithm works.
@@ -65,7 +65,7 @@ or the custom metrics API (for all other metrics).
 * For object metrics and external metrics, a single metric is fetched, which describes
   the object in question. This metric is compared to the target
   value, to produce a ratio as above. In the `autoscaling/v2beta2` API
-  version, this value can optionally be divided by the number of pods before the
+  version, this value can optionally be divided by the number of Pods before the
   comparison is made.
 
 The HorizontalPodAutoscaler normally fetches metrics from a series of aggregated APIs (`metrics.k8s.io`,

From b0269a804199a43fe4e9ee4785980d4d31450c8d Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Tue, 15 Sep 2020 13:06:58 +0100
Subject: [PATCH 327/496] Making some review changes

---
 ...c‘20 -building-operators-for-cluster-addons.md | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
index f8773d6459..15269394b3 100644
--- a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
+++ b/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -13,7 +13,7 @@ slug: gsoc20-building-operators-for-cluster-addons
 
 My name is Somtochi Onyekwere from the Federal University of Technology, Owerri (Nigeria) and this year, I was given the opportunity to work with Kubernetes (under the CNCF organization) and this led to an amazing summer spent learning, contributing and interacting with the community.
 
-Specifically, I worked on the _Cluster Addons: Package all  the things!_ project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
+Specifically, I worked on the _Cluster Addons: Package all the things!_ project. The project focused on building operators for better management of various cluster addons, extending the tooling for building these operators and making the creation of these operators a smooth process.
 
 # Background
 
@@ -21,12 +21,11 @@ Kubernetes has progressed greatly in the past few years with a flourishing commu
 
 The community is exploring the use of operators as a mechanism to monitor various resources in the cluster and properly manage these resources. In addition to this, it provides self-healing and it is a kubernetes-native pattern that can encode how best these addons work and manage them properly.
 
-What are cluster addons? Cluster addons are a collection of resources (like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards (for visualization) to more complex ones like Calico (for networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon. You can get a deeper overview in this [blog post](https://kubernetes.io/docs/concepts/overview/components/#addons).
+What are cluster addons? Cluster addons are a collection of resources (like Services and deployment) that are used to give a Kubernetes cluster additional functionalities. They range from things as simple as the Kubernetes dashboards (for visualization) to more complex ones like Calico (for networking). These addons are essential to different applications running in the cluster and the cluster itself. The addon operator provides a nicer way of managing these addons and understanding the health and status of the various resources that comprise the addon. You can get a deeper overview in this [article](https://kubernetes.io/docs/concepts/overview/components/#addons).
 
-Operators are custom controllers with custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale. This [blog post](https://kubernetes.io/docs/concepts/extend-kubernetes/operator) does a good job of explaining operators.
-
-The addon operators can solve a lot of problems, but they have their challenges. Those under the cluster-addons project had missing pieces and were still a proof of concept. Generating the RBAC configuration for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
+Operators are custom controllers with custom resource definitions that encode application-specific knowledge and are used for managing complex stateful applications. It is a widely accepted pattern. Managing addons via operators, with these operators encoding knowledge of how best the addons work, introduces a lot of advantages while setting standards that will be easy to follow and scale. This [article](https://kubernetes.io/docs/concepts/extend-kubernetes/operator) does a good job of explaining operators.
 
+The addon operators can solve a lot of problems, but they have their challenges. Those under the [cluster-addons project](https://github.com/kubernetes-sigs/cluster-addons) had missing pieces and were still a proof of concept. Generating the RBAC configuration for the operators was a pain and sometimes the operators were given too much privilege. The operators weren’t very extensible as it only pulled manifests from local filesystems or HTTP(s) servers and a lot of simple addons were generating the same code.
 I spent the summer working on these issues, looking at them with fresh eyes and coming up with solutions for both the known and unknown issues.
 
 # Various additions to kubebuilder-declarative-pattern
@@ -34,13 +33,13 @@ I spent the summer working on these issues, looking at them with fresh eyes and
 The [kubebuilder-declarative-pattern](https://github.com/kubernetes-sigs/kubebuilder-declarative-pattern) (from here on referred to as KDP) repo is an extra layer of addon specific tooling on top of the [kubebuilder](https://github.com/kubernetes-sigs/kubebuilder) SDK that is enabled by passing the experimental `--pattern=addon` flag to `kubebuilder create` command. Together, they create the base code for the addon operator. During the internship, I worked on a couple of features in KDP and cluster-addons.
 
 ## Operator version checking
-Enabling version check for operators helped in making safer upgrades/downgrades to different versions of the addon, even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
+Enabling version checks for operators helped in making upgrades/downgrades safer to different versions of the addon, even though the operator had complex logic. It is a way of matching the version of an addon to the version of the operator that knows how to manage it well. Most addons have different versions and these versions might need to be managed differently. This feature checks the custom resource for the `addons.k8s.io/min-operator-version` annotation which states the minimum operator version that is needed to manage the version against the version of the operator. If the operator version is below the minimum version required, the operator pauses with an error telling the user that the version of the operator is too low. This helps to ensure that the correct operator is being used for the addon.
 
 ## Git repository for storing the manifests
-Previously, there was support for only local file directories and HTTPS repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass in a flag to specify the location of your channels directory. The channels directory contains manifest for different versions, the controller pulls the manifest from this directory and applies it to the cluster. During the internship period, I extended it to include Git repositories.
+Previously, there was support for only local file directories and HTTPS repositories for storing manifests. Giving creators of addon operators the ability to store manifest in GitHub repository enables faster development and version control.  When starting the controller, you can pass a flag to specify the location of your channels directory. The channels directory contains the manifests for different versions, the controller pulls the manifest from this directory and applies it to the cluster. During the internship period, I extended it to include Git repositories.
 
 ## Annotations to temporarily disable reconciliation
-The reconciliation loop that ensures that the desired state matches the actual state prevents modification of objects in the cluster. This makes it hard to experiment or investigate what might be wrong in the cluster as any changes made are promptly reverted. I resolved this by allowing users to place `addons.k8s.io/ignore` annotation on the resource that they don’t want the controller to reconcile. The controller checks for this annotation and doesn’t reconcile that object. To resume reconciliation, the annotation can be removed from the resource.
+The reconciliation loop that ensures that the desired state matches the actual state prevents modification of objects in the cluster. This makes it hard to experiment or investigate what might be wrong in the cluster as any changes made are promptly reverted. I resolved this by allowing users to place an `addons.k8s.io/ignore` annotation on the resource that they don’t want the controller to reconcile. The controller checks for this annotation and doesn’t reconcile that object. To resume reconciliation, the annotation can be removed from the resource.
 
 ## Unstructured support in kubebuilder-declarative-pattern
 One of the operators that I worked on is a generic controller that could manage more than one cluster addon that did not require extra configuration. To do this, the operator couldn’t use a particular type and needed the kubebuilder-declarative-repo to support using the [unstructured.Unstructured](https://godoc.org/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured#Unstructured) type. There were various functions in the kubebuilder-declarative-pattern that couldn’t handle this type and returned an error if the object passed in was not of type `addonsv1alpha1.CommonObject`. The functions were modified to handle both `unstructured.Unstructured` and `addonsv1alpha.CommonObject`.

From 3e3da2b8f7d8025278e44f2401a01bc78dc2dfca Mon Sep 17 00:00:00 2001
From: Anna Jung <annajung@users.noreply.github.com>
Date: Tue, 15 Sep 2020 08:29:04 -0500
Subject: [PATCH 328/496] Approval permission for 1.20 Release

---
 OWNERS_ALIASES | 1 +
 1 file changed, 1 insertion(+)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 9498e2c228..3d2eec22de 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -22,6 +22,7 @@ aliases:
     - mkorbi
     - rlenferink
   sig-docs-en-owners: # Admins for English content
+    - annajung
     - bradtopol
     - celestehorgan
     - jimangel

From 1425384888d6252b8b43dd8343fd835494f90415 Mon Sep 17 00:00:00 2001
From: Chris Tomas <chris.tomas20@gmail.com>
Date: Tue, 15 Sep 2020 09:14:52 -0500
Subject: [PATCH 329/496] fix description of signerName

Removed a line related to signerName because the feature is GA.
---
 .../reference/access-authn-authz/certificate-signing-requests.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index 7c74cec092..b255aec0d4 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -108,7 +108,6 @@ Kubernetes provides built-in signers that each have a well-known `signerName`:
 
 1. `kubernetes.io/legacy-unknown`:  has no guarantees for trust at all. Some distributions may honor these as client
   certs, but that behavior is not standard Kubernetes behavior.
-  This signerName can only be requested in CertificateSigningRequests created via the `certificates.k8s.io/v1` API version.
   Never auto-approved by {{< glossary_tooltip term_id="kube-controller-manager" >}}.
     1. Trust distribution: None.  There is no standard trust or distribution for this signer in a Kubernetes cluster.
     1. Permitted subjects - any

From 11ec3894b62d730551985e956af816f6e7572f87 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Tue, 15 Sep 2020 20:58:33 +0700
Subject: [PATCH 330/496] Add ID translation for
 /docs/tutorials/kubernetes-basics/update/...

---
 .../kubernetes-basics/update/_index.md        |   4 +
 .../update/update-interactive.html            |  37 +++++
 .../update/update-intro.html                  | 135 ++++++++++++++++++
 3 files changed, 176 insertions(+)
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/update/_index.md
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/update/update-interactive.html
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/update/update-intro.html

diff --git a/content/id/docs/tutorials/kubernetes-basics/update/_index.md b/content/id/docs/tutorials/kubernetes-basics/update/_index.md
new file mode 100644
index 0000000000..860011dfd7
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/update/_index.md
@@ -0,0 +1,4 @@
+---
+title: Memperbarui Aplikasimu
+weight: 60
+---
diff --git a/content/id/docs/tutorials/kubernetes-basics/update/update-interactive.html b/content/id/docs/tutorials/kubernetes-basics/update/update-interactive.html
new file mode 100644
index 0000000000..6e11d5c6a7
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/update/update-interactive.html
@@ -0,0 +1,37 @@
+---
+title: Tutorial Interaktif - Memperbarui Aplikasimu
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <div class="katacoda">
+            <div class="katacoda__alert">
+                Untuk berinteraksi dengan Terminal, silahkan gunakan versi desktop/tablet
+            </div>
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/6" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/" role="button">Kembali Mempelajari Panduan Dasar Kubernetes<span class="btn__next">›</span></a>
+            </div>
+        </div>
+    </main>
+
+</div>
+
+</body>
+</html>
diff --git a/content/id/docs/tutorials/kubernetes-basics/update/update-intro.html b/content/id/docs/tutorials/kubernetes-basics/update/update-intro.html
new file mode 100644
index 0000000000..5fa536f76a
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/update/update-intro.html
@@ -0,0 +1,135 @@
+---
+title: Melakukan Pembaruan Bertahap
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+    <link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+
+<div class="layout" id="top">
+
+    <main class="content">
+
+        <div class="row">
+
+     <div class="col-md-8">
+          <h3>Tujuan</h3>
+                <ul>
+                    <li>Melakukan pembaruan bertahap (<i>rolling update</i>) menggunakan kubectl.</li>
+                </ul>
+            </div>
+
+            <div class="col-md-8">
+            <h3>Memperbarui suatu aplikasi</h3>
+
+            <p>Pengguna mengharapkan aplikasi tersedia sepanjang waktu dan pengembang bisa jadi diharapkan untuk men-<i>deploy</i> versi terbaru dari aplikasi tersebut beberapa kali dalam suatu waktu. Di Kubernetes hal ini dilakukan melalui pembaruan bertahap. <b>Pembaruan bertahap</b> memungkinkan pembaruan Deployment terjadi tanpa berhenti dengan memperbarui instans Pod secara bertahap dengan versi yang baru. Pod yang baru akan dijadwalkan pada Node dengan sumber daya yang tersedia.</p>
+
+            <p>Dalam modul sebelumnya kita telah melakukan penyekalaan aplikasi kita untuk menjalankan beberapa instans. Hal ini dibutuhkan untuk menjalankan pembaruan tanpa mempengaruhi ketersediaan aplikasi. Secara bawaan, jumlah maksimum dari Pod lama yang akan digantikan (menjadi tidak tersedia) selama pembaruan dan jumlah maksimum Pod baru yang dapat dibuat adalah satu. Kedua opsi ini dapat dikonfigurasi dengan angka atau persentase (dari Pod). Di Kubernetes, setiap pembaruan diberi versi masing-masing dan suatu pembaruan Deployment dapat dikembalikan ke versi sebelumnya (yang stabil).</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_lined">
+                    <h3>Ringkasan:</h3>
+                    <ul>
+                        <li>Memperbarui aplikasi</li>
+                    </ul>
+                </div>
+                <div class="content__box content__box_fill">
+                    <p><i>Pembaruan bertahap memungkinkan pembaruan Deployment terjadi tanpa berhenti dengan memperbarui instans Pod secara bertahap dengan versi yang baru.</i></p>
+                </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2 style="color: #3771e3;">Gambaran pembaruan bertahap</h2>
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-1"></div>
+            <div class="col-md-8">
+                <div id="myCarousel" class="carousel" data-ride="carousel" data-interval="3000">
+                    <ol class="carousel-indicators">
+                        <li data-target="#myCarousel" data-slide-to="0" class="active"></li>
+                        <li data-target="#myCarousel" data-slide-to="1"></li>
+                        <li data-target="#myCarousel" data-slide-to="2"></li>
+                        <li data-target="#myCarousel" data-slide-to="3"></li>
+                    </ol>
+                      <div class="carousel-inner" role="listbox">
+                        <div class="item carousel-item active">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_06_rollingupdates1.svg" >
+                        </div>
+
+                        <div class="item carousel-item">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_06_rollingupdates2.svg">
+                        </div>
+
+                        <div class="item carousel-item">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_06_rollingupdates3.svg">
+                        </div>
+
+                        <div class="item carousel-item">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_06_rollingupdates4.svg">
+                        </div>
+                      </div>
+
+                      <a class="left carousel-control" href="#myCarousel" role="button" data-slide="prev">
+                        <span class="sr-only ">Sebelumnya</span>
+                      </a>
+                      <a class="right carousel-control" href="#myCarousel" role="button" data-slide="next">
+                        <span class="sr-only">Selanjutnya</span>
+                      </a>
+
+                    </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+
+                <p>Seperti penyekalaan aplikasi, jika suatu Deployment terekspos secara publik, maka Service akan menyeimbangkan beban trafik hanya ke Pod yang tersedia saat pembaruan berlangsung. Pod yang tersedia adalah instans yang dapat diakses oleh pengguna aplikasi.</p>
+
+                <p>Pembaruan bertahap memungkinan dilakukannya aktivitas-aktivitas berikut:</p>
+                <ul>
+                    <li>Mempromosikan suatu aplikasi dari satu <i>environment</i> yang ke <i>environment</i> yang lain (via pembaruan kontainer <i>image</i>)</li>
+                    <li>Kembali (<i>rollback</i>) ke versi-versi sebelumnya</li>
+                    <li>Continuous Integration dan Continuous Delivery (CI/CD) dari aplikasi tanpa henti</li>
+                </ul>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_fill">
+                    <p><i>Jika suatu Deployment terekspos secara publik, maka Service akan menyeimbangkan beban trafik hanya ke Pod yang tersedia saat pembaruan berlangsung.</i></p>
+                </div>
+            </div>
+        </div>
+
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p>Pada tutorial interaktif berikut ini, kita akan mencoba untuk memperbarui aplikasi kita ke versi terbaru dan kemudian melakukan <i>rollback</i>.</p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/update/update-interactive/" role="button">Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>

From 7ef62d255ad403b4152fa027c2ef0c708b9d8820 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 15 Sep 2020 11:41:28 +0900
Subject: [PATCH 331/496] Fix the instruction to click the "Create an issue"
 link.

---
 content/en/docs/contribute/suggesting-improvements.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/contribute/suggesting-improvements.md b/content/en/docs/contribute/suggesting-improvements.md
index e48c2915b9..dbf5bf1abb 100644
--- a/content/en/docs/contribute/suggesting-improvements.md
+++ b/content/en/docs/contribute/suggesting-improvements.md
@@ -24,7 +24,7 @@ of the Kubernetes community open a pull request with changes to resolve the issu
 
 If you want to suggest improvements to existing content, or notice an error, then open an issue.
 
-1. Go to the bottom of the page and click the **Create an Issue** button. This redirects you
+1. Click the **Create an issue** link on the right sidebar. This redirects you
  to a GitHub issue page pre-populated with some headers.
 2. Describe the issue or suggestion for improvement. Provide as many details as you can.
 3. Click **Submit new issue**.

From c77d436eaf2028cfb0661498d1d219bdad0d2c01 Mon Sep 17 00:00:00 2001
From: Chris Bargmann <chris@cbrgm.net>
Date: Tue, 15 Sep 2020 17:21:59 +0200
Subject: [PATCH 332/496] Fix spelling in authentication.md

Rename `name-of-api-sever` to `name-of-api-server`.
---
 content/en/docs/reference/access-authn-authz/authentication.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/authentication.md b/content/en/docs/reference/access-authn-authz/authentication.md
index d05ef76acd..efdc9026aa 100644
--- a/content/en/docs/reference/access-authn-authz/authentication.md
+++ b/content/en/docs/reference/access-authn-authz/authentication.md
@@ -443,7 +443,7 @@ current-context: webhook
 contexts:
 - context:
     cluster: name-of-remote-authn-service
-    user: name-of-api-sever
+    user: name-of-api-server
   name: webhook
 ```
 

From 141e5aed01834c39893ed5c51d85381c5534b2cf Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Tue, 15 Sep 2020 17:43:45 +0100
Subject: [PATCH 333/496] Updates date on the blog post

---
 ... 2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename content/en/blog/_posts/{2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md => 2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md} (99%)

diff --git a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md
similarity index 99%
rename from content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md
rename to content/en/blog/_posts/2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md
index 15269394b3..377fb5fbff 100644
--- a/content/en/blog/_posts/2020-08-25-gsoc‘20 -building-operators-for-cluster-addons.md	
+++ b/content/en/blog/_posts/2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md	
@@ -1,7 +1,7 @@
 ---
 layout: blog
 title: "GSoC 2020 - Building operators for cluster addons"
-date: 2020-08-25
+date: 2020-09-16
 slug: gsoc20-building-operators-for-cluster-addons
 ---
 

From 7b5bb4d46f0ea1cafcca889c880c6b5ac5810ad9 Mon Sep 17 00:00:00 2001
From: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Date: Tue, 15 Sep 2020 17:47:26 +0100
Subject: [PATCH 334/496] Corrects date on filename

---
 ...=> 2020-09-16-gsoc‘20 -building-operators-for-cluster-addons.md} | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/en/blog/_posts/{2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md => 2020-09-16-gsoc‘20 -building-operators-for-cluster-addons.md} (100%)

diff --git a/content/en/blog/_posts/2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md b/content/en/blog/_posts/2020-09-16-gsoc‘20 -building-operators-for-cluster-addons.md
similarity index 100%
rename from content/en/blog/_posts/2020-09-15-gsoc‘20 -building-operators-for-cluster-addons.md
rename to content/en/blog/_posts/2020-09-16-gsoc‘20 -building-operators-for-cluster-addons.md

From e8a26b08bb97acbc257e073e8da27929fb4650e1 Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Fri, 11 Sep 2020 07:57:12 +0700
Subject: [PATCH 335/496] Add ID translation for Exposing Your App tutorial

Apply suggestions from code review

Co-authored-by: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>

Update [id] explore-interactive.html link to Module 5 & Katacoda embed

Update [id] k8s basic tutorial index links to current localized pages

Apply suggestions from code review

Co-authored-by: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
Co-authored-by: Giri Kuncoro <girikuncoro@users.noreply.github.com>

Update [id] k8s basic tutorial index links to deploy app
---
 .../tutorials/kubernetes-basics/_index.html   |  46 ++++++--
 .../explore/explore-interactive.html          |   4 +-
 .../kubernetes-basics/expose/_index.md        |   4 +
 .../expose/expose-interactive.html            |  38 ++++++
 .../expose/expose-intro.html                  | 109 ++++++++++++++++++
 5 files changed, 187 insertions(+), 14 deletions(-)
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/expose/_index.md
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/expose/expose-intro.html

diff --git a/content/id/docs/tutorials/kubernetes-basics/_index.html b/content/id/docs/tutorials/kubernetes-basics/_index.html
index 7abc15c771..baec152977 100644
--- a/content/id/docs/tutorials/kubernetes-basics/_index.html
+++ b/content/id/docs/tutorials/kubernetes-basics/_index.html
@@ -23,13 +23,13 @@ card:
     <div class="row">
       <div class="col-md-9">
         <h2>Panduan Dasar Kubernetes</h2>
-        <p>Tutorial ini menyediakan panduan dasar mekanisme orkestrasi klaster Kubernetes. Setiap modul memliki beberapa informasi mengenai latar belakang bagi konsep mendasar dan <i>feature</i> Kubernetes, termasuk mode interaktif yang dapat digunakan sebagai metode pembelajaran <i>online</i>. Mode tutorial interaktif ini memberikan kesempatan pengguna untuk melakukan manajemen klaster sederhana beserta aplikasi dalam kontainer yang kamu miliki.</p>
+        <p>Tutorial ini menyediakan panduan dasar mekanisme orkestrasi klaster Kubernetes. Setiap modul memliki beberapa informasi mengenai latar belakang bagi konsep mendasar dan <i>feature</i> Kubernetes, termasuk mode interaktif yang dapat digunakan sebagai metode pembelajaran <i>online</i>. Mode tutorial interaktif ini memberikan kesempatan pengguna untuk melakukan manajemen klaster sederhana beserta aplikasi terkontainerisasi yang kamu miliki.</p>
         <p>Dengan menggunakan mode tutorial interaktif ini, pengguna diharapkan dapat memahami:</p>
         <ul>
-        <li><i>Deploy</i>i> sebuah aplikasi yang sudah dikontainerisasi pada klaster</li>
+        <li><i>Deploy</i> sebuah aplikasi yang sudah dikontainerisasi pada klaster</li>
         <li>Melakukan <i>scale</i> <i>deployment</i></li>
-        <li>Meng-update aplikasi yang sudah dikontainerisasi dengan menggunakan versi aplikasi terbaru</li>
-        <li>Men-debug aplikasi yang sudah dikontainerisasi</li>
+        <li>Memperbarui aplikasi yang sudah dikontainerisasi dengan menggunakan versi aplikasi terbaru</li>
+        <li>Men-<i>debug</i> aplikasi yang sudah dikontainerisasi</li>
         </ul>
         <p>Tutorial ini menggunakan Katakoda untuk menjalankan terminal virtual diatas Minikube pada <i>web browser</i> kamu. Dengan demikian, kamu tidak perlu melakukan instalasi perangkat lunak apa pun, segala modul yang ada dijalankan secara langsung melalui <i>web browser</i> yang kamu miliki.</p>
       </div>
@@ -44,32 +44,34 @@ card:
       </div>
     </div>
 
+    <br>
+    
     <div id="basics-modules" class="content__modules">
-      <h2>Kubernetes Basics Modules</h2>
+      <h2>Modul Dasar Kubernetes</h2>
       <div class="row">
         <div class="col-md-12">
           <div class="row">
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_01.svg?v=1469803628347" alt=""></a>
+                <a href="/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_01.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/"><h5>1. Create a Kubernetes cluster</h5></a>
+                  <a href="/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-intro/"><h5>1. Membuat klaster Kubernetes</h5></a>
                 </div>
               </div>
             </div>
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_02.svg?v=1469803628347" alt=""></a>
+                <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_02.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/"><h5>2. Deploy an app</h5></a>
+                  <a href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/"><h5>2. Menyebarkan (Deploy) Aplikasi</h5></a>
                 </div>
               </div>
             </div>
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/explore/explore-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_03.svg?v=1469803628347" alt=""></a>
+                <a href="/id/docs/tutorials/kubernetes-basics/explore/explore-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_03.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/explore/explore-intro/"><h5>3. Explore your app</h5></a>
+                  <a href="/id/docs/tutorials/kubernetes-basics/explore/explore-intro/"><h5>3. Menjelajahi aplikasimu</h5></a>
                 </div>
               </div>
             </div>
@@ -79,13 +81,33 @@ card:
           <div class="row">
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/expose/expose-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_04.svg?v=1469803628347" alt=""></a>
+                <a href="/id/docs/tutorials/kubernetes-basics/expose/expose-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_04.svg?v=1469803628347" alt=""></a>
+                <div class="caption">
+                  <a href="/id/docs/tutorials/kubernetes-basics/expose/expose-intro/"><h5>4. Mengekspos aplikasimu secara publik</h5></a>
+                </div>
+              </div>
+            </div>
+            <div class="col-md-4">
+              <div class="thumbnail">
+                <a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_05.svg?v=1469803628347" alt=""></a>
+                <div class="caption">
+                  <a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/"><h5>5. Penyekalaan naik aplikasimu</h5></a>
+                </div>
+              </div>
+            </div>
+            <div class="col-md-4">
+              <div class="thumbnail">
+                <a href="/docs/tutorials/kubernetes-basics/update/update-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_06.svg?v=1469803628347" alt=""></a>
+                <div class="caption">
+                  <a href="/docs/tutorials/kubernetes-basics/update/update-intro/"><h5>6. Memperbarui aplikasimu</h5></a>
+                </div>
               </div>
             </div>
           </div>
         </div>
       </div>
     </div>
+
   </main>
 
 </div>
diff --git a/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index a6439aa789..0379fb7230 100644
--- a/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,12 +24,12 @@ weight: 20
                 Untuk berinteraksi dengan Terminal, tolong gunakan dalam desktop/tablet
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/expose/expose-intro/" role="button">Lanjut ke Modul 4<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/expose/expose-intro/" role="button">Lanjut ke Modul 4<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/id/docs/tutorials/kubernetes-basics/expose/_index.md b/content/id/docs/tutorials/kubernetes-basics/expose/_index.md
new file mode 100644
index 0000000000..a00eab636c
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/expose/_index.md
@@ -0,0 +1,4 @@
+---
+title: Mengekspos Aplikasimu Secara Publik
+weight: 40
+---
diff --git a/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
new file mode 100644
index 0000000000..0e6e1c752b
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -0,0 +1,38 @@
+---
+title: Tutorial Interaktif - Mengekspos Aplikasimu
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <div class="katacoda">
+            <div class="katacoda__alert">
+                Untuk berinteraksi dengan Terminal, harap gunakan desktop/tablet
+            </div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Lanjutkan ke Modul 5<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>
diff --git a/content/id/docs/tutorials/kubernetes-basics/expose/expose-intro.html b/content/id/docs/tutorials/kubernetes-basics/expose/expose-intro.html
new file mode 100644
index 0000000000..a395834016
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/expose/expose-intro.html
@@ -0,0 +1,109 @@
+---
+title: Menggunakan Service untuk Mengekspos Aplikasimu
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+<div class="layout" id="top">
+
+	<main class="content">
+
+		<div class="row">
+			<div class="col-md-8">
+    		<h3>Tujuan</h3>
+				<ul>
+					<li>Belajar tentang Service di Kubernetes</li>
+					<li>Memahami bagaimana label dan objek LabelSelector berhubungan dengan sebuah Service</li>
+					<li>Mengekspos sebuah aplikasi keluar klaster Kubernetes menggunakan sebuah Service</li>
+				</ul>
+			</div>
+
+			<div class="col-md-8">
+			<h3>Ikhtisar Service Kubernetes</h3>
+
+			<p><a href="/id/docs/concepts/workloads/pods/">Pod-Pod</a> Kubernetes itu fana. Pod pada kenyataannya punya <a href="/id/docs/concepts/workloads/pods/pod-lifecycle/">siklus hidup</a>. Ketika sebuah Node pekerja mati, Pod yang berjalan dalam Node itu juga hilang. <a href="/id/docs/concepts/workloads/controllers/replicaset/">ReplicaSet</a> mungkin kemudian secara dinamis mendorong klaster kembali ke keadaan yang diinginkan melalui penciptaan Pod baru untuk memastikan aplikasimu berjalan. Contoh lainnya, katakanlah ada <i>backend</i> pengolahan citra dengan 3 replika. Replika tersebut dapat ditukar; sistem <i>front-end</i> seharusnya tidak peduli tentang replika <i>backend</i> atau bahkan jika Pod hilang dan dibuat ulang.  Walaupun demikian, tiap Pod dalam sebuah klaster Kubernetes memiliki alamat IP unik, meskipun Pod-Pod itu berada dalam satu Node yang sama, sehingga seharusnya ada jalan untuk mencocokan perubahan antara Pod-Pod itu sehingga aplikasimu tetap berfungsi.</p>
+
+			<p>Service di Kubernetes merupakan abstraksi yang mendefinisikan satu set Pod secara logis dan aturan untuk mengakses mereka. Service memungkinkan keterkaitan renggang antara Pod-Pod. Sebuah Service didefinisikan menggunakan YAML <a href="/id/docs/concepts/configuration/overview/#tip-konfigurasi-secara-umum">(lebih disukai)</a> atau JSON, sebagaimana semua objek Kubernetes. Kumpulan Pod yang ditargetkan oleh Service biasanya ditentukan oleh <i>LabelSelector</i> (lihat di bawah mengapa kamu mungkin ingin Service tanpa <code>selector</code> dalam <i>spec</i>).</p>
+
+			<p>Meskipun tiap Pod memiliki alamat IP unik, IP tersebut tidak diekpos ke luar klaster tanpa sebuah Service. Service memperbolehkan aplikasimu untuk menerima kunjungan. Service dapat diekspos dengan cara yang berbeda menggunakan <code>type</code> di ServiceSpec:
+			<ul>
+				<li><i>ClusterIP</i> (bawaan) - Mengekspos Service dengan internal IP dalam klaster. <i>Type</i> ini membuat Service hanya bisa diakses dalam klaster.</li>
+				<li><i>NodePort</i> - Mengekspos Service dengan porta yang sama untuk tiap Node dalam klaster menggunakan NAT. Ini membuat Service dapat diakses dari luar dengan <code>&lt;NodeIP&gt;:&lt;NodePort&gt;</code>. <i>Superset</i> dari ClusterIP.</li>
+				<li><i>LoadBalancer</i> - Membuat <i>load balancer</i> eksternal di <i>cloud</i> saat ini (jika didukung) dan memberikan IP eksternal tetap kepada Service. <i>Superset</i> dari NodePort.</li>
+				<li><i>ExternalName</i> - Mengekpos Service menggunakan nama sesuai keinginan (ditentukan oleh <code>externalName</code> dalam <i>spec</i>) dengan mengembalikan catatan CNAME dengan nama tersebut. Tidak menggunakan proksi. <i>Type</i> ini membutuhkan <code>kube-dns</code> versi v1.7 atau lebih tinggi.</li>
+			</ul>
+			<p>Informasi lebih tentang <i>type</i> Service berbeda dapat ditemukan di tutorial <a href="/docs/tutorials/services/source-ip/">Menggunakan IP pengirim</a>. Lihat juga <a href="/id/docs/concepts/services-networking/connect-applications-service">Menghubungkan aplikasi dengan Service</a>.</p>
+			<p>Selain itu, catat bahwa ada kasus penggunaan Service yang tidak mendefinisikan <code>selector</code> di <i>spec</i>. Sebuah Service yang dibuat tanpa <code>selector</code> juga tidak akan membuat objek Endpoint yang sesuai. Ini mengizinkan pengguna untuk memetakan Service secara manual ke <i>endpoint</i> spesifik. Kemungkinan lain kenapa dimungkinan tanpa <i>selector</i> adalah kamu dengan tegas menggunakan <code>type: ExternalName</code>.</p>
+			</div>
+			<div class="col-md-4">
+				<div class="content__box content__box_lined">
+					<h3>Ringkasan</h3>
+					<ul>
+						<li>Mengekspos Pod ke kunjungan eksternal</li>
+						<li><i>Load balancing</i> kunjungan melintasi beberapa Pod</li>
+						<li>Menggunakan label</li>
+					</ul>
+				</div>
+				<div class="content__box content__box_fill">
+						<p><i>Service Kubernetes adalah lapisan abstraksi yang mendefinisikan kumpulan Pod secara logis dan mengijinkan paparan kunjungan eksternal, <i>load balancing</i>, dan <i>service discovery</i> untuk Pod-Pod tersebut.</i></p>
+				</div>
+			</div>
+		</div>
+		<br>
+
+		<div class="row">
+			<div class="col-md-8">
+				<h3>Service dan Label</h3>
+			</div>
+		</div>
+
+		<div class="row">
+			<div class="col-md-8">
+				<p><img src="/docs/tutorials/kubernetes-basics/public/images/module_04_services.svg" width="150%" height="150%"></p>
+			</div>
+		</div>
+
+		<div class="row">
+			<div class="col-md-8">
+				<p>Service mengarahkan kunjungan melintasi sekumpulan Pod. Service merupakan abstraksi yang mengizinkan Pod-Pod untuk mati dan replikasi dalam Kubernetes tanpa memengaruhi aplikasimu. Menemukan dan <i>routing</i> antara Pod dependen (seperti komponen <i>frontend</i> dan <i>backend</i>) yang ditangani oleh Service Kubernetes.</p>
+				<p>Service mencocokan satu set Pod menggunakan <a href="/id/docs/concepts/overview/working-with-objects/labels/">label dan selektor</a>, mengelompokan primitif yang mengizinkan operasi logika pada objek-objek dalam Kubernetes. Label adalah pasangan <i>key/value</i> yang melekat pada objek-objek dan dapat digunakan untuk beberapa tujuan:</p>
+				<ul>
+					<li>Menandai objek-objek untuk lingkungan <i>development</i>, <i>test</i>, dan <i>production</i></li>
+					<li>Melekatkan label versi</li>
+					<li>Klasifikasi sebuah objek dengan label-label</li>
+				</ul>
+			</div>
+			
+		</div>
+
+		<br>
+
+		<div class="row">
+			<div class="col-md-8">
+				<p><img src="/docs/tutorials/kubernetes-basics/public/images/module_04_labels.svg"></p>
+			</div>
+		</div>
+		<br>
+		<div class="row">
+			<div class="col-md-8">
+				<p>Label-label dapat dilekatkan pada objek-objek pada waktu pembuatan ataupun setelahnya. Mereka dapat diubah kapanpun. Mari kita ekspos aplikasi kita sekarang dengan sebuah Service dan menerapkan beberapa label.</p>
+			</div>
+		</div>
+		<br>
+		<div class="row">
+			<div class="col-md-12">
+				<a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/expose/expose-interactive/" role="button">Mulai Tutorial Interaktif<span class="btn__next">›</span></a>
+			</div>
+		</div>
+	</main>
+</div>
+
+</body>
+</html>

From 09a658eeb5acf803f9b499fdb714a58c818f0635 Mon Sep 17 00:00:00 2001
From: unknown <lparis@vmware.com>
Date: Tue, 15 Sep 2020 12:59:42 -0700
Subject: [PATCH 336/496] Addressing feedback

---
 content/en/docs/concepts/storage/storage-classes.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index 25edf94aed..5577208039 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -420,19 +420,19 @@ There are two types of provisioners for vSphere storage classes:
 - [CSI provisioner](#csi-provisioner): `csi.vsphere.vmware.com`
 - [vCP provisioner](#vcp-provisioner): `kubernetes.io/vsphere-volume`
 
-In-tree provisioners are [deprecated](https://kubernetes.io/blog/2019/12/09/kubernetes-1-17-feature-csi-migration-beta/#why-are-we-migrating-in-tree-plugins-to-csi). For more information on the CSI provisioner, see [Kubernetes vSphere CSI Driver](https://vsphere-csi-driver.sigs.k8s.io/) and [vSphereVolume CSI migration](https://kubernetes.io/docs/concepts/storage/volumes/#csi-migration-5).
+In-tree provisioners are [deprecated](/blog/2019/12/09/kubernetes-1-17-feature-csi-migration-beta/#why-are-we-migrating-in-tree-plugins-to-csi). For more information on the CSI provisioner, see [Kubernetes vSphere CSI Driver](https://vsphere-csi-driver.sigs.k8s.io/) and [vSphereVolume CSI migration](/docs/concepts/storage/volumes/#csi-migration-5).
 
 #### CSI Provisioner {#vsphere-provisioner-csi}
 
 The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters.
 
-```
-kind: StorageClass
+```yaml
 apiVersion: storage.k8s.io/v1
+kind: StorageClass
 metadata:
   name: example-vsphere-sc-csi
   annotations:
-    storageclass.kubernetes.io/is-default-class: "true"
+    storageclass.kubernetes.io/is-default-class: true
 provisioner: csi.vsphere.vmware.com
 parameters:
   datastoreurl: "ds:///vmfs/volumes/vsan:52d8eb4842dbf493-41523be9cd4ff7b7/"

From 69009fe3dd887b45fa14ec8d6940496f92a0993d Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 15 Sep 2020 17:01:52 -0400
Subject: [PATCH 337/496] remove atom-snippets.cson

---
 .../en/docs/doc-contributor-tools/README.md   |   2 -
 .../doc-contributor-tools/snippets/README.md  |  51 ----
 .../snippets/atom-snippets.cson               | 226 ------------------
 3 files changed, 279 deletions(-)
 delete mode 100644 content/en/docs/doc-contributor-tools/README.md
 delete mode 100644 content/en/docs/doc-contributor-tools/snippets/README.md
 delete mode 100644 content/en/docs/doc-contributor-tools/snippets/atom-snippets.cson

diff --git a/content/en/docs/doc-contributor-tools/README.md b/content/en/docs/doc-contributor-tools/README.md
deleted file mode 100644
index b493e67bd3..0000000000
--- a/content/en/docs/doc-contributor-tools/README.md
+++ /dev/null
@@ -1,2 +0,0 @@
-Tools for Kubernetes docs contributors. View `README.md` files in
-subdirectories for more info.
\ No newline at end of file
diff --git a/content/en/docs/doc-contributor-tools/snippets/README.md b/content/en/docs/doc-contributor-tools/snippets/README.md
deleted file mode 100644
index 2b4c9c8d45..0000000000
--- a/content/en/docs/doc-contributor-tools/snippets/README.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# Snippets for Atom
-
-Snippets are bits of text that get inserted into your editor, to save typing and
-reduce syntax errors. The snippets provided in `atom-snippets.cson` are scoped to
-only work on Markdown files within Atom.
-
-## Installation
-
-Copy the contents of the `atom-snippets.cson` file into your existing
-`~/.atom/snippets.cson`. **Do not replace your existing file.**
-
-You do not need to restart Atom.
-
-## Usage
-
-Have a look through `atom-snippets.cson` and note the titles and `prefix` values
-of the snippets.
-
-You can trigger a given snippet in one of two ways:
-
-- By typing the snippet's `prefix` and pressing the `<TAB>` key
-- By searching for the snippet's title in **Packages / Snippets / Available**
-
-For example, open a Markdown file and type `anote` and press `<TAB>`. A blank
-note is added, with the correct Hugo shortcodes.
-
-A snippet can insert a single line or multiple lines of text. Some snippets
-have placeholder values. To get to the next placeholder, press `<TAB>` again.
-
-Some of the snippets only insert partially-formed Markdown or Hugo syntax.
-For instance, `coverview` inserts the start of a concept overview tag, while
-`cclose` inserts a close-capture tag. This is because every type of capture
-needs a capture-close tab.
-
-## Creating new topics using snippets
-
-To create a new concept, task, or tutorial from a blank file, use one of the
-following:
-
-- `newconcept`
-- `newtask`
-- `newtutorial`
-
-Placeholder text is included.
-
-## Submitting new snippets
-
-1.  Develop the snippet locally and verify that it works as expected.
-2.  Copy the template's code into the `atom-snippets.cson` file on GitHub. Raise a
-    pull request, and ask for review from another Atom user in `#sig-docs` on
-    Kubernetes Slack.
\ No newline at end of file
diff --git a/content/en/docs/doc-contributor-tools/snippets/atom-snippets.cson b/content/en/docs/doc-contributor-tools/snippets/atom-snippets.cson
deleted file mode 100644
index 878ccc4ed7..0000000000
--- a/content/en/docs/doc-contributor-tools/snippets/atom-snippets.cson
+++ /dev/null
@@ -1,226 +0,0 @@
-# Your snippets
-#
-# Atom snippets allow you to enter a simple prefix in the editor and hit tab to
-# expand the prefix into a larger code block with templated values.
-#
-# You can create a new snippet in this file by typing "snip" and then hitting
-# tab.
-#
-# An example CoffeeScript snippet to expand log to console.log:
-#
-# '.source.coffee':
-#   'Console log':
-#     'prefix': 'log'
-#     'body': 'console.log $1'
-#
-# Each scope (e.g. '.source.coffee' above) can only be declared once.
-#
-# This file uses CoffeeScript Object Notation (CSON).
-# If you are unfamiliar with CSON, you can read more about it in the
-# Atom Flight Manual:
-# http://flight-manual.atom.io/using-atom/sections/basic-customization/#_cson
-
-'.source.gfm':
-
-  # Capture variables for concept template
-  # For full concept template see 'newconcept' below
-  'Insert concept template':
-    'prefix': 'ctemplate'
-    'body': 'content_template: templates/concept'
-  'Insert concept overview':
-    'prefix': 'coverview'
-    'body': '{{% capture overview %}}'
-  'Insert concept body':
-    'prefix': 'cbody'
-    'body': '{{% capture body %}}'
-  'Insert concept whatsnext':
-    'prefix': 'cnext'
-    'body': '{{% capture whatsnext %}}'
-
-
-  # Capture variables for task template
-  # For full task template see 'newtask' below
-  'Insert task template':
-    'prefix': 'ttemplate'
-    'body': 'content_template: templates/task'
-  'Insert task overview':
-    'prefix': 'toverview'
-    'body': '{{% capture overview %}}'
-  'Insert task prerequisites':
-    'prefix': 'tprereq'
-    'body': """
-      {{% capture prerequisites %}}
-
-      {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
-      {{% /capture %}}
-    """
-  'Insert task steps':
-    'prefix': 'tsteps'
-    'body': '{{% capture steps %}}'
-  'Insert task discussion':
-    'prefix': 'tdiscuss'
-    'body': '{{% capture discussion %}}'
-
-
-  # Capture variables for tutorial template
-  # For full tutorial template see 'newtutorial' below
-  'Insert tutorial template':
-    'prefix': 'tutemplate'
-    'body': 'content_template: templates/tutorial'
-  'Insert tutorial overview':
-    'prefix': 'tuoverview'
-    'body': '{{% capture overview %}}'
-  'Insert tutorial prerequisites':
-    'prefix': 'tuprereq'
-    'body': '{{% capture prerequisites %}}'  
-  'Insert tutorial objectives':
-    'prefix': 'tuobjectives'
-    'body': '{{% capture objectives %}}'
-  'Insert tutorial lesson content':
-    'prefix': 'tulesson'
-    'body': '{{% capture lessoncontent %}}'
-  'Insert tutorial whatsnext':
-    'prefix': 'tunext'
-    'body': '{{% capture whatsnext %}}'
-  'Close capture':
-    'prefix': 'ccapture'
-    'body': '{{% /capture %}}'
-  'Insert note':
-    'prefix': 'anote'
-    'body': """
-      {{< note >}}
-      $1
-      {{< /note >}}
-    """
-  
-  # Admonitions
-  'Insert caution':
-    'prefix': 'acaution'
-    'body': """
-      {{< caution >}}
-      $1
-      {{< /caution >}}
-    """
-  'Insert warning':
-    'prefix': 'awarning'
-    'body': """
-      {{< warning >}}
-      $1
-      {{< /warning >}}
-    """
-  
-  # Misc one-liners
-  'Insert TOC':
-    'prefix': 'toc'
-    'body': '{{< toc >}}'
-  'Insert code from file':
-    'prefix': 'codefile'
-    'body': '{{< codenew file="$1" >}}'
-  'Insert feature state':
-    'prefix': 'fstate'
-    'body': '{{< feature-state for_k8s_version="$1" state="$2" >}}'
-  'Insert figure':
-    'prefix': 'fig'
-    'body': '{{< figure src="$1" title="$2" alt="$3" caption="$4" >}}'
-  'Insert Youtube link':
-    'prefix': 'yt'
-    'body': '{{< youtube $1 >}}'
-
-
-  # Full concept template
-  'Create new concept':
-    'prefix': 'newconcept'
-    'body': """
-      ---
-      reviewers:
-      - ${1:"github-id-or-group"}
-      title: ${2:"topic-title"}
-      content_template: templates/concept
-      ---
-      {{% capture overview %}}
-      ${3:"overview-content"}
-      {{% /capture %}}
-      
-      {{< toc >}}
-      
-      {{% capture body %}}
-      ${4:"h2-heading-per-subtopic"}
-      {{% /capture %}}
-      
-      {{% capture whatsnext %}}
-      ${5:"next-steps-or-delete"}
-      {{% /capture %}}
-    """
-
-
-  # Full task template
-  'Create new task':
-    'prefix': 'newtask'
-    'body': """
-      ---
-      reviewers:
-      - ${1:"github-id-or-group"}
-      title: ${2:"topic-title"}
-      content_template: templates/task
-      ---
-      {{% capture overview %}}
-      ${3:"overview-content"}
-      {{% /capture %}}
-      
-      {{< toc >}}
-      
-      {{% capture prerequisites %}}
-      
-      {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-      
-      ${4:"additional-prereqs-or-delete"}
-      
-      {{% /capture %}}
-      
-      {{% capture steps %}}
-      ${5:"h2-heading-per-step"}
-      {{% /capture %}}
-      
-      {{% capture discussion %}}
-      ${6:"task-discussion-or-delete"}
-      {{% /capture %}}
-    """
-
-  # Full tutorial template
-  'Create new tutorial':
-    'prefix': 'newtutorial'
-    'body': """
-      ---
-      reviewers:
-      - ${1:"github-id-or-group"}
-      title: ${2:"topic-title"}
-      content_template: templates/tutorial
-      ---
-      {{% capture overview %}}
-      ${3:"overview-content"}
-      {{% /capture %}}
-      
-      {{< toc >}}
-      
-      {{% capture prerequisites %}}
-      
-      {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-      
-      ${4:"additional-prereqs-or-delete"}
-      
-      {{% /capture %}}
-      
-      {{% capture objectives %}}
-      ${5:"tutorial-objectives"}
-      {{% /capture %}}
-      
-      {{% capture lessoncontent %}}
-      ${6:"lesson-content"}
-      {{% /capture %}}
-      
-      {{% capture whatsnext %}}
-      ${7:"next-steps-or-delete"}
-      {{% /capture %}}
-    """
-  

From a679d93368e745013dd866387937161eee491b3d Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Wed, 16 Sep 2020 08:37:13 +0800
Subject: [PATCH 338/496] Remove dated information for node conformance

This PR addresses an issue about outdated limitation.
---
 content/en/docs/setup/best-practices/node-conformance.md | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/content/en/docs/setup/best-practices/node-conformance.md b/content/en/docs/setup/best-practices/node-conformance.md
index 5e75959b18..af02a7a903 100644
--- a/content/en/docs/setup/best-practices/node-conformance.md
+++ b/content/en/docs/setup/best-practices/node-conformance.md
@@ -13,12 +13,6 @@ verification and functionality test for a node. The test validates whether the
 node meets the minimum requirements for Kubernetes; a node that passes the test
 is qualified to join a Kubernetes cluster.
 
-## Limitations
-
-In Kubernetes version 1.5, node conformance test has the following limitations:
-
-* Node conformance test only supports Docker as the container runtime.
-
 ## Node Prerequisite
 
 To run node conformance test, a node must satisfy the same prerequisites as a

From f3cb3e74ff57927346ca040943827a56cce764e0 Mon Sep 17 00:00:00 2001
From: llhuii <llhuii5614@gmail.com>
Date: Wed, 16 Sep 2020 09:32:23 +0800
Subject: [PATCH 339/496] fix comment error

---
 content/zh/docs/concepts/workloads/controllers/statefulset.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/content/zh/docs/concepts/workloads/controllers/statefulset.md b/content/zh/docs/concepts/workloads/controllers/statefulset.md
index a827581250..100343be99 100644
--- a/content/zh/docs/concepts/workloads/controllers/statefulset.md
+++ b/content/zh/docs/concepts/workloads/controllers/statefulset.md
@@ -254,8 +254,6 @@ the StatefulSet.
 
 <!--
 ## Deployment and Scaling Guarantees
--->
-## 部署和扩缩保证  {#deployment-and-scaling-guarantees}
 
 * For a StatefulSet with N replicas, when Pods are being deployed, they are created sequentially, in order from {0..N-1}.
 * When Pods are being deleted, they are terminated in reverse order, from {N-1..0}.

From ddb26b2be0c7897ce5a03777e50908b8a5a70e36 Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Tue, 15 Sep 2020 13:03:08 +0200
Subject: [PATCH 340/496] fixing FR language issues in page

Signed-off-by: didier <durand.didier@gmail.com>
---
 .../services-networking/endpoint-slices.md    | 36 +++++++++----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/content/fr/docs/concepts/services-networking/endpoint-slices.md b/content/fr/docs/concepts/services-networking/endpoint-slices.md
index f019b1f0fe..4058ede05a 100644
--- a/content/fr/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/fr/docs/concepts/services-networking/endpoint-slices.md
@@ -25,7 +25,7 @@ _EndpointSlices_ offrent une méthode simple pour suivre les Endpoints d'un rés
 
 Dans Kubernetes, un EndpointSlice contient des reférences à un ensemble de Endpoints. 
 Le controleur d'EndpointSlice crée automatiquement des EndpointSlices pour un Service quand un {{< glossary_tooltip text="sélecteur" term_id="selector" >}} est spécifié. 
-Ces EnpointSlices vont inclure des références à n'importe quels Pods qui correspond aux selecteur de Service. 
+Ces EnpointSlices vont inclure des références à n'importe quels Pods qui correspondent aux selecteurs de Service. 
 EndpointSlices groupent ensemble les Endpoints d'un réseau par combinaisons uniques de Services et de Ports.
 
 Par exemple, voici un échantillon d'une resource EndpointSlice pour le Kubernetes Service `exemple`.
@@ -53,8 +53,8 @@ endpoints:
       topology.kubernetes.io/zone: us-west2-a
 ```
 
-Les EndpointSlices géré par le contrôleur d'EndpointSlice n'auront, par défaut, pas plus de 100 Endpoints chacun. 
-En dessous de cette échelle, EndpointSlices devrait mapper 1:1 les Endpoints et les Service et devrait avoir une performance similaire.
+Les EndpointSlices gérés par le contrôleur d'EndpointSlice n'auront, par défaut, pas plus de 100 Endpoints chacun. 
+En dessous de cette échelle, EndpointSlices devraientt mapper 1:1 les Endpoints et les Services et devraientt avoir une performance similaire.
 
 EndpointSlices peuvent agir en tant que source de vérité pour kube-proxy quand il s'agit du routage d'un trafic interne. 
 Lorsqu'ils sont activés, ils devraient offrir une amélioration de performance pour les services qui ont une grand quantité d'Endpoints.
@@ -65,51 +65,51 @@ Les EndpointSlices supportent 3 types d'addresses:
 
 * IPv4
 * IPv6
-* FQDN (Fully Qualified Domain Name) - [serveur entièrement nommé]
+* FQDN (Fully Qualified Domain Name) - [nom de domaine entièrement qualifié]
 
 ### Topologie
 
 Chaque Endpoint dans un EnpointSlice peut contenir des informations de topologie pertinentes. 
-Ceci est utilisé pour indiqué où se trouve un Endpoint, qui contient les informations sur le Node, zone et region correspondante. Lorsque les valeurs sont disponibles, les labels de Topologies suivantes seront définies par le contrôleur EndpointSlice:
+Ceci est utilisé pour indiquer où se trouve un Endpoint, qui contient les informations sur le Node, zone et région correspondantes. Lorsque les valeurs sont disponibles, les labels de Topologies suivants seront définis par le contrôleur EndpointSlice:
 
 * `kubernetes.io/hostname` - Nom du Node sur lequel l'Endpoint se situe.
 * `topology.kubernetes.io/zone` - Zone dans laquelle l'Endpoint se situe.
-* `topology.kubernetes.io/region` - Region dans laquelle l'Endpoint se situe.
+* `topology.kubernetes.io/region` - Région dans laquelle l'Endpoint se situe.
 
 Le contrôleur EndpointSlice surveille les Services et les Pods pour assurer que leurs correspondances avec les EndpointSlices sont à jour. 
-Le contrôleur gère les EndpointSlices pour tous les Services qui ont un sélecteur - [référence: {{< glossary_tooltip text="sélecteur" term_id="selector" >}}] - specifié. Celles-ci représenteront les IPs des Pods qui correspond au sélecteur.
+Le contrôleur gère les EndpointSlices pour tous les Services qui ont un sélecteur - [référence: {{< glossary_tooltip text="sélecteur" term_id="selector" >}}] - specifié. Celles-ci représenteront les IPs des Pods qui correspondent au sélecteur.
 
 ### Capacité d'EndpointSlices
 
-Les EndpointSlices sont limités a une capacité de 100 Endpoints chacun, par défaut. Vous pouvez configurer ceci avec l'indicateur `--max-endpoints-per-slice` {{< glossary_tooltip text="kube-controller-manager" term_id="kube-controller-manager" >}} jusqu'à un maximum de 1000.
+Les EndpointSlices sont limités à une capacité de 100 Endpoints chacun, par défaut. Vous pouvez configurer ceci avec l'indicateur `--max-endpoints-per-slice` {{< glossary_tooltip text="kube-controller-manager" term_id="kube-controller-manager" >}} jusqu'à un maximum de 1000.
 
 ### Distribution d'EndpointSlices
 
 Chaque EndpointSlice a un ensemble de ports qui s'applique à tous les Endpoints dans la resource. 
-Lorsque les ports nommés sont utilisés pour un Service, les Pods peuvent se retrouver avec différents port cible pour le même port nommé, nécessitant différents EndpointSlices. 
+Lorsque les ports nommés sont utilisés pour un Service, les Pods peuvent se retrouver avec différents ports cibles pour le même port nommé, nécessitant différents EndpointSlices. 
 
-Le contrôleur essaie de remplir l'EndpointSlice aussi complètement que possible, mais ne les rééquilibre pas activement. La logique du contrôleur est assez simple:
+Le contrôleur essaie de remplir les EndpointSlices aussi complètement que possible, mais ne les rééquilibre pas activement. La logique du contrôleur est assez simple:
 
-1. Itérer à travers les EnpointSlices existants, retirer les Endpoints qui ne sont plus voulus et mettre à jour les Endpoints qui ont changés.
+1. Itérer à travers les EnpointSlices existants, retirer les Endpoints qui ne sont plus voulus et mettre à jour les Endpoints qui ont changé.
 2. Itérer à travers les EndpointSlices qui ont été modifiés dans la première étape et les remplir avec n'importe quel Endpoint nécéssaire.
-3. S'il reste encore des Endpoints neufs à ajouter, essayez de les mettre dans une slice qui n'a pas été changé et/ou en crée de nouveaux.
+3. S'il reste encore des Endpoints nouveaux à ajouter, essayez de les mettre dans une slice qui n'a pas été changée et/ou en créer une nouvelle.
 
-Par-dessus tout, la troisième étape priorise la limitation de mises à jour d'EnpointSlice sur une distribution complètement pleine d'EndpointSlices. Par exemple, si il y avait 10 nouveaux Endpoints à ajouter et 2 EndpointSlices qui peuvent contenir 5 Endpoints en plus chacun; cette approche créera un nouveau EndpointSlice au lieu de remplir les EndpointSlice existants. 
-C'est à dire, une seule création EndpointSlice est préférable à plusieurs mises à jour d'EndpointSlice.
+Par-dessus tout, la troisième étape priorise la limitation de mises à jour d'EnpointSlice sur une distribution complètement pleine d'EndpointSlices. Par exemple, s'il y avait 10 nouveaux Endpoints à ajouter et 2 EndpointSlices qui peuvent contenir 5 Endpoints en plus chacun; cette approche créera un nouveau EndpointSlice au lieu de remplir les EndpointSlice existants. 
+C'est à dire, une seule création EndpointSlice est préférable à plusieurs mises à jour d'EndpointSlices.
 
 Avec kube-proxy exécuté sur chaque Node et surveillant EndpointSlices, chaque changement d'un EndpointSlice devient relativement coûteux puisqu'ils seront transmis à chaque Node du cluster. 
 Cette approche vise à limiter le nombre de modifications qui doivent être envoyées à chaque Node, même si ça peut causer plusieurs EndpointSlices non remplis.
 
-En pratique, cette distribution bien peu idéale devrait être rare. La plupart des changements traités par le contrôleur EndpointSlice sera suffisamment petite pour tenir dans un EndpointSlice existant, et sinon, un nouveau EndpointSlice aura probablement été bientôt nécessaire de toute façon. Les mises à jour continues des déploiements fournissent également une compaction naturelle des EndpointSlices avec tous leurs pods et les Endpoints correspondants qui se feront remplacer.
+En pratique, cette distribution bien peu idéale devrait être rare. La plupart des changements traités par le contrôleur EndpointSlice seront suffisamment petits pour tenir dans un EndpointSlice existant, et sinon, un nouveau EndpointSlice aurait probablement été bientôt nécessaire de toute façon. Les mises à jour continues des déploiements fournissent également une compaction naturelle des EndpointSlices avec tous leurs pods et les Endpoints correspondants qui se feront remplacer.
 
 ## Motivation
 
 L'API des Endpoints fournit une méthode simple et facile à suivre pour les Endpoints dans Kubernetes. 
-Malheureusement, comme les clusters Kubernetes et Services sont devenus plus larges, les limitations de cette API sont devenues plus visibles. 
-Plus particulièrement, ceux-ci comprenaient des limitations liés au dimensionnement vers un plus grand nombre d'Endpoint d'un réseau.
+Malheureusement, comme les clusters Kubernetes et Services sont devenus plus grands, les limitations de cette API sont devenues plus visibles. 
+Plus particulièrement, celles-ci comprennent des limitations liées au dimensionnement vers un plus grand nombre d'Endpoints d'un réseau.
 
 Puisque tous les Endpoints d'un réseau pour un Service ont été stockés dans une seule ressource Endpoints, ces ressources pourraient devenir assez lourdes. 
-Cela a affecté les performances des composants Kubernetes (notamment le plan de contrôle) et a causé une grande quantité de trafic réseau et de traitements lorsque les Endpoints changent. 
+Cela affecte les performances des composants Kubernetes (notamment le plan de contrôle) et cause une grande quantité de trafic réseau et de traitements lorsque les Endpoints changent. 
 Les EndpointSlices aident à atténuer ces problèmes ainsi qu'à fournir une plate-forme extensible pour des fonctionnalités supplémentaires telles que le routage topologique. 
 
 

From 826a9c15429c4f25d3b262f691e4f6f5d8749c01 Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Tue, 15 Sep 2020 14:10:19 +0200
Subject: [PATCH 341/496] Fixing typo

---
 content/fr/docs/concepts/services-networking/endpoint-slices.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/fr/docs/concepts/services-networking/endpoint-slices.md b/content/fr/docs/concepts/services-networking/endpoint-slices.md
index 4058ede05a..f5b157bc01 100644
--- a/content/fr/docs/concepts/services-networking/endpoint-slices.md
+++ b/content/fr/docs/concepts/services-networking/endpoint-slices.md
@@ -54,7 +54,7 @@ endpoints:
 ```
 
 Les EndpointSlices gérés par le contrôleur d'EndpointSlice n'auront, par défaut, pas plus de 100 Endpoints chacun. 
-En dessous de cette échelle, EndpointSlices devraientt mapper 1:1 les Endpoints et les Services et devraientt avoir une performance similaire.
+En dessous de cette échelle, EndpointSlices devraient mapper 1:1 les Endpoints et les Services et devraientt avoir une performance similaire.
 
 EndpointSlices peuvent agir en tant que source de vérité pour kube-proxy quand il s'agit du routage d'un trafic interne. 
 Lorsqu'ils sont activés, ils devraient offrir une amélioration de performance pour les services qui ont une grand quantité d'Endpoints.

From 7c7a1c84424697b2f1d3a0e71b4b79288e0f94d8 Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Wed, 16 Sep 2020 09:37:46 +0700
Subject: [PATCH 342/496] Add ID translation for Scale You App tutorial update
 links and katakoda embed for id k8s basic tutorial

---
 content/id/docs/tutorials/_index.md           |   2 +-
 .../tutorials/kubernetes-basics/_index.html   |   8 +-
 .../create-cluster/cluster-interactive.html   |   2 +-
 .../expose/expose-interactive.html            |   4 +-
 .../kubernetes-basics/scale/_index.md         |   4 +
 .../scale/scale-interactive.html              |  40 ++++++
 .../kubernetes-basics/scale/scale-intro.html  | 121 ++++++++++++++++++
 7 files changed, 173 insertions(+), 8 deletions(-)
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/scale/_index.md
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
 create mode 100644 content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html

diff --git a/content/id/docs/tutorials/_index.md b/content/id/docs/tutorials/_index.md
index d2c8c3e8b4..9f3ec5afb3 100644
--- a/content/id/docs/tutorials/_index.md
+++ b/content/id/docs/tutorials/_index.md
@@ -18,7 +18,7 @@ Sebelum melangkah lebih lanjut ke tutorial, sebaiknya tandai dulu halaman [Kamus
 
 ## Prinsip Dasar
 
-* [Prinsip Dasar Kubernetes](/docs/tutorials/kubernetes-basics/) merupakan tutorial yang sangat interaktif, membantu kamu mengerti apa itu sistem Kubernetes dan beberapa fitur Kubernetes yang umum digunakan.
+* [Prinsip Dasar Kubernetes](/id/docs/tutorials/kubernetes-basics/) merupakan tutorial yang sangat interaktif, membantu kamu mengerti apa itu sistem Kubernetes dan beberapa fitur Kubernetes yang umum digunakan.
 
 * [Mikroservis yang Scalable dengan Kubernetes (Udacity)](https://www.udacity.com/course/scalable-microservices-with-kubernetes--ud615)
 
diff --git a/content/id/docs/tutorials/kubernetes-basics/_index.html b/content/id/docs/tutorials/kubernetes-basics/_index.html
index baec152977..bac7b2b6da 100644
--- a/content/id/docs/tutorials/kubernetes-basics/_index.html
+++ b/content/id/docs/tutorials/kubernetes-basics/_index.html
@@ -89,17 +89,17 @@ card:
             </div>
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_05.svg?v=1469803628347" alt=""></a>
+                <a href="/id/docs/tutorials/kubernetes-basics/scale/scale-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_05.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/scale/scale-intro/"><h5>5. Penyekalaan naik aplikasimu</h5></a>
+                  <a href="/id/docs/tutorials/kubernetes-basics/scale/scale-intro/"><h5>5. Penyekalaan naik aplikasimu</h5></a>
                 </div>
               </div>
             </div>
             <div class="col-md-4">
               <div class="thumbnail">
-                <a href="/docs/tutorials/kubernetes-basics/update/update-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_06.svg?v=1469803628347" alt=""></a>
+                <a href="/id/docs/tutorials/kubernetes-basics/update/update-intro/"><img src="/docs/tutorials/kubernetes-basics/public/images/module_06.svg?v=1469803628347" alt=""></a>
                 <div class="caption">
-                  <a href="/docs/tutorials/kubernetes-basics/update/update-intro/"><h5>6. Memperbarui aplikasimu</h5></a>
+                  <a href="/id/docs/tutorials/kubernetes-basics/update/update-intro/"><h5>6. Memperbarui aplikasimu</h5></a>
                 </div>
               </div>
             </div>
diff --git a/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index f1c2921b96..5641d5991e 100644
--- a/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -25,7 +25,7 @@ weight: 20
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/" role="button">Lanjut ke Modul 2<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/" role="button">Lanjut ke Modul 2<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index 0e6e1c752b..bd9f075e5b 100644
--- a/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,12 +21,12 @@ weight: 20
             <div class="katacoda__alert">
                 Untuk berinteraksi dengan Terminal, harap gunakan desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Lanjutkan ke Modul 5<span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/scale/scale-intro/" role="button">Lanjutkan ke Modul 5<span class="btn__next">›</span></a>
             </div>
         </div>
 
diff --git a/content/id/docs/tutorials/kubernetes-basics/scale/_index.md b/content/id/docs/tutorials/kubernetes-basics/scale/_index.md
new file mode 100644
index 0000000000..6a3cb3ff36
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/scale/_index.md
@@ -0,0 +1,4 @@
+---
+title: Penyekalaan Aplikasimu
+weight: 50
+---
diff --git a/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
new file mode 100644
index 0000000000..9ec7537fbd
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -0,0 +1,40 @@
+---
+title: Tutorial Interaktif - Penyekalaan Aplikasimu
+weight: 20
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+<link href="/docs/tutorials/kubernetes-basics/public/css/overrides.css" rel="stylesheet">
+<script src="https://katacoda.com/embed.js"></script>
+
+<div class="layout" id="top">
+
+    <main class="content katacoda-content">
+
+        <div class="katacoda">
+            <div class="katacoda__alert">
+                Untuk berinteraksi dengan Terminal, harap gunakan desktop/tablet
+            </div>
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            </div>
+        </div>
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/update/update-intro/" role="button">Lanjutkan ke Modul 6<span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+<a class="scrolltop" href="#top"></a>
+
+</div>
+
+</body>
+</html>
diff --git a/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html b/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html
new file mode 100644
index 0000000000..8de8620b6a
--- /dev/null
+++ b/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html
@@ -0,0 +1,121 @@
+---
+title: Menjalankan Multipel Instans dari Aplikasimu
+weight: 10
+---
+
+<!DOCTYPE html>
+
+<html lang="id">
+
+<body>
+
+<link href="/docs/tutorials/kubernetes-basics/public/css/styles.css" rel="stylesheet">
+
+<div class="layout" id="top">
+
+    <main class="content">
+
+        <div class="row">
+
+     <div class="col-md-8">
+          <h3>Tujuan</h3>
+                <ul>
+                    <li>Penyekalaan aplikasi menggunakan kubectl.</li>
+                </ul>
+            </div>
+
+            <div class="col-md-8">
+       <h3>Penyekalaan sebuah Aplikasi</h3>
+
+            <p>Di modul-modul sebelumnya kita telah membuat <a href="/id/docs/concepts/workloads/controllers/deployment/">Deployment</a>, dan mengeksposnya secara publik via <a href="/id/docs/concepts/services-networking/service/">Service</a>. Deployment yang dibuat itu hanya satu Pod yang menjalankan aplikasi kita. Ketika kunjungan meningkat, kita perlu menyekalakan (<i>scale</i>) aplikasi kita untuk mengikuti tingkat permintaan pengguna.</p>
+
+            <p><b>Penyekalaan</b> dapat dicapai dengan mengubah nilai replicas dalam Deployment</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_lined">
+                    <h3>Ringkasan:</h3>
+                    <ul>
+                        <li>Penyekalaan sebuah Deployment</li>
+                    </ul>
+                </div>
+                <div class="content__box content__box_fill">
+                    <p><i> Kamu dapat dari awal memulai Deployment dengan multipel instans menggunakan parameter --replicas pada perintah kubectl create deployment</i></p>
+                </div>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <h2 style="color: #3771e3;">Ikhtisar Penyekalaan</h2>
+            </div>
+        </div>
+
+        <div class="row">
+            <div class="col-md-1"></div>
+            <div class="col-md-8">
+                <div id="myCarousel" class="carousel" data-ride="carousel" data-interval="3000">
+                    <ol class="carousel-indicators">
+                        <li data-target="#myCarousel" data-slide-to="0" class="active"></li>
+                        <li data-target="#myCarousel" data-slide-to="1"></li>
+                    </ol>
+                      <div class="carousel-inner" role="listbox">
+                        <div class="item carousel-item active">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_05_scaling1.svg">
+                        </div>
+
+                        <div class="item carousel-item">
+                          <img src="/docs/tutorials/kubernetes-basics/public/images/module_05_scaling2.svg">
+                        </div>
+                      </div>
+
+                      <a class="left carousel-control" href="#myCarousel" role="button" data-slide="prev">
+                        <span class="sr-only ">Sebelumnya</span>
+                      </a>
+                      <a class="right carousel-control" href="#myCarousel" role="button" data-slide="next">
+                        <span class="sr-only">Selanjutnya</span>
+                      </a>
+
+                    </div>
+            </div>
+        </div>
+
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+
+                <p>Perluasan skala Deployment akan memastikan Pod baru dibuat dan dijadwalkan ke Node-Node dengan sumber daya yang tersedia. Penyekalaan akan meningkatkan jumlah Pod ke keadaan yang diinginkan. Kubernetes juga mendukung <a href="/id/docs/tasks/run-application/horizontal-pod-autoscale/"><i>autoscaling</i></a> Pod, tetapi itu di luar cakupan tutorial ini. Penyekalaan ke nol juga dimungkinkan, dan tindakan ini akan mengakhiri semua Pod pada Deployment tersebut.</p>
+
+                <p>Menjalankan beberapa instans dari aplikasi akan membutuhkan cara untuk mendistribusikan kunjungan ke semuanya. Service punya penyeimbang beban terintegrasi yang akan mendistribusikan kujungan jaringan ke semua Pod dari sebuah Deployment yang diekspos. Service akan terus-menerus memonitor Pod-Pod yang berjalan menggunakan Endpoints, untuk memastikan kunjungan hanya dikirim kepada Pod yang tersedia.</p>
+
+            </div>
+            <div class="col-md-4">
+                <div class="content__box content__box_fill">
+                    <p><i>Penyekalaan dapat dicapai dengan mengubah jumlah replicas pada sebuah Deployment.</i></p>
+                </div>
+            </div>
+        </div>
+
+        <br>
+
+        <div class="row">
+            <div class="col-md-8">
+                <p>Sewaktu kamu punya multipel instans dari aplikasi berjalan, kamu akan dapat melakukan pembaruan bertahap tanpa perhentian. Kita akan akan membahas hal tersebut pada modul selanjutnya. Sekarang, mari kita pergi ke terminal daring dan menyekalakan aplikasi kita.</p>
+            </div>
+        </div>
+        <br>
+
+        <div class="row">
+            <div class="col-md-12">
+                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-interactive/" role="button"> Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
+            </div>
+        </div>
+
+    </main>
+
+</div>
+
+</body>
+</html>

From f6d4d708b9e19dad64cfaff527f83da5ab8c1b86 Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Wed, 16 Sep 2020 01:18:16 +0800
Subject: [PATCH 343/496] [zh] Translate
 /docs/concepts/cluster-administration/flow-control.md

---
 .../cluster-administration/flow-control.md    | 876 ++++++++++++++++++
 .../health-for-strangers.yaml                 |  20 +
 2 files changed, 896 insertions(+)
 create mode 100644 content/zh/docs/concepts/cluster-administration/flow-control.md
 create mode 100644 content/zh/examples/priority-and-fairness/health-for-strangers.yaml

diff --git a/content/zh/docs/concepts/cluster-administration/flow-control.md b/content/zh/docs/concepts/cluster-administration/flow-control.md
new file mode 100644
index 0000000000..56044e07c8
--- /dev/null
+++ b/content/zh/docs/concepts/cluster-administration/flow-control.md
@@ -0,0 +1,876 @@
+---
+title: API 优先级和公平性
+content_type: concept
+min-kubernetes-server-version: v1.18
+---
+
+<!-- overview -->
+
+{{< feature-state state="alpha"  for_k8s_version="v1.18" >}}
+
+<!--
+Controlling the behavior of the Kubernetes API server in an overload situation
+is a key task for cluster administrators. The {{< glossary_tooltip
+term_id="kube-apiserver" text="kube-apiserver" >}} has some controls available
+(i.e. the `--max-requests-inflight` and `--max-mutating-requests-inflight`
+command-line flags) to limit the amount of outstanding work that will be
+accepted, preventing a flood of inbound requests from overloading and
+potentially crashing the API server, but these flags are not enough to ensure
+that the most important requests get through in a period of high traffic.
+-->
+对于集群管理员来说，控制 Kubernetes API 服务器在过载情况下的行为是一项关键任务。
+{{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}}
+有一些控件（例如：命令行标志 `--max-requests-inflight` 和 `--max-mutating-requests-inflight` ）,
+可以限制将要接受的未处理的请求，从而防止过量请求入站，潜在导致 API 服务器崩溃。
+但是这些标志不足以保证在高流量期间，最重要的请求仍能被服务器接受。
+
+<!--
+The API Priority and Fairness feature (APF) is an alternative that improves upon
+aforementioned max-inflight limitations. APF classifies
+and isolates requests in a more fine-grained way. It also introduces
+a limited amount of queuing, so that no requests are rejected in cases
+of very brief bursts.  Requests are dispatched from queues using a
+fair queuing technique so that, for example, a poorly-behaved
+{{< glossary_tooltip text="controller" term_id="controller" >}} need not
+starve others (even at the same priority level).
+-->
+API 优先级和公平性（ APF ）是一种替代方案，可提升上述最大并发限制。
+APF 以更细粒度的方式对请求进行分类和隔离。
+它还引入了空间有限的排队机制，因此在非常短暂的突发情况下，API 服务器不会拒绝任何请求。
+通过使用公平排队技术从队列中分发请求，这样，
+一个行为不佳的 {{< glossary_tooltip text="控制器" term_id="controller" >}}
+就不会饿死其他控制器（即使优先级相同）。
+
+<!--
+{{< caution >}}
+Requests classified as "long-running" — primarily watches — are not
+subject to the API Priority and Fairness filter. This is also true for
+the `--max-requests-inflight` flag without the API Priority and
+Fairness feature enabled.
+{{< /caution >}}
+-->
+{{< caution >}}
+属于“长时间运行”类型的请求（主要是 watch ）不受 API 优先级和公平性过滤器的约束。
+如果未启用 APF 特性，即便设置 `--max-requests-inflight` 标志，该类请求也不受约束。
+{{< /caution >}}
+
+
+<!-- body -->
+
+<!-- ## Enabling API Priority and Fairness -->
+## 启用 API 优先级和公平性    {#Enabling-API-Priority-and-Fairness}
+
+<!--
+The API Priority and Fairness feature is controlled by a feature gate
+and is not enabled by default.  See
+[Feature Gates](/docs/reference/command-line-tools-reference/feature-gates/)
+for a general explanation of feature gates and how to enable and disable them.  The
+name of the feature gate for APF is "APIPriorityAndFairness".  This
+feature also involves an {{< glossary_tooltip term_id="api-group"
+text="API Group" >}} that must be enabled.  You can do these
+things by adding the following command-line flags to your
+`kube-apiserver` invocation:
+-->
+APF 特性由特性门控控制，默认情况下不启用。有关如何启用和禁用特性门控的描述，
+请参见[特性门控](/docs/reference/command-line-tools-reference/feature-gates/)。
+APF 的特性门控叫做 `APIPriorityAndFairness` 。
+此特性要求必须启用某个 {{< glossary_tooltip term_id="api-group" text="API Group" >}}。
+你可以在启动 `kube-apiserver` 时，添加以下命令行标志来完成这些操作：
+
+```shell
+kube-apiserver \
+--feature-gates=APIPriorityAndFairness=true \
+--runtime-config=flowcontrol.apiserver.k8s.io/v1alpha1=true \
+# …其他配置与之前相同
+```
+
+<!--
+The command-line flag `--enable-priority-and-fairness=false` will disable the
+API Priority and Fairness feature, even if other flags have enabled it.
+-->
+命令行标志 `--enable-priority-fairness=false` 将彻底禁用 APF 特性，即使其他标志启用它也是无效。
+
+<!--
+## Concepts
+There are several distinct features involved in the API Priority and Fairness
+feature. Incoming requests are classified by attributes of the request using
+_FlowSchemas_, and assigned to priority levels. Priority levels add a degree of
+isolation by maintaining separate concurrency limits, so that requests assigned
+to different priority levels cannot starve each other. Within a priority level,
+a fair-queuing algorithm prevents requests from different _flows_ from starving
+each other, and allows for requests to be queued to prevent bursty traffic from
+causing failed requests when the average load is acceptably low.
+-->
+## 概念    {#concepts}
+APF 特性包含几个不同的功能。
+传入的请求通过 _流模式_ 按照其属性分类，并分配优先级。
+每个优先级维护自定义的并发限制，加强了隔离度，这样不同优先级的请求，就不会相互饿死。
+在同一个优先级内，公平排队算法可以防止来自不同 _流_ 的请求相互饿死。
+该算法将请求排队，通过排队机制，防止在平均负载较低时，通信量突增而导致请求失败。
+
+<!--
+### Priority Levels
+Without APF enabled, overall concurrency in
+the API server is limited by the `kube-apiserver` flags
+`--max-requests-inflight` and `--max-mutating-requests-inflight`. With APF
+enabled, the concurrency limits defined by these flags are summed and then the sum is divided up
+among a configurable set of _priority levels_. Each incoming request is assigned
+to a single priority level, and each priority level will only dispatch as many
+concurrent requests as its configuration allows.
+-->
+### 优先级    {#Priority-Levels}
+如果未启用 APF ，API 服务器中的整体并发量将受到 `kube-apiserver` 的参数
+`--max-requests-inflight` 和 `--max-mutating-requests-inflight` 的限制。
+启用 APF 后，将对这些参数定义的并发限制进行求和，然后将总和分配到一组可配置的 _优先级_ 中。
+每个传入的请求都会分配一个优先级，每个优先级仅分发其配置允许的并发请求数。
+
+<!--
+The default configuration, for example, includes separate priority levels for
+leader-election requests, requests from built-in controllers, and requests from
+Pods. This means that an ill-behaved Pod that floods the API server with
+requests cannot prevent leader election or actions by the built-in controllers
+from succeeding.
+-->
+例如，默认配置包括针对领导者选举请求，内置控制器请求和 Pod 请求，都单独设置优先级。
+这表示即使异常的 Pod 向 API 服务器发送大量请求，但无法阻止领导者选举或内置控制器的操作执行成功。
+
+
+<!--
+### Queuing
+Even within a priority level there may be a large number of distinct sources of
+traffic. In an overload situation, it is valuable to prevent one stream of
+requests from starving others (in particular, in the relatively common case of a
+single buggy client flooding the kube-apiserver with requests, that buggy client
+would ideally not have much measurable impact on other clients at all). This is
+handled by use of a fair-queuing algorithm to process requests that are assigned
+the same priority level. Each request is assigned to a _flow_, identified by the
+name of the matching FlowSchema plus a _flow distinguisher_ — which
+is either the requesting user, the target resource's namespace, or nothing — and the
+system attempts to give approximately equal weight to requests in different
+flows of the same priority level.
+-->
+### 排队    {#Queuing}
+即使在同一优先级内，也可能存在大量不同的流量源。
+在过载情况下，防止一个请求流饿死其他流是非常有价值的
+（尤其是在一个较为常见的场景中，一个 bug 客户端会疯狂请求 kube-apiserver ，
+理想情况下，该 bug 客户端不会对其他客户端产生太大的影响）。
+公平排队算法在处理具有相同优先级的请求时，实现了上述场景。
+该算法给每个请求都分配一个 _流_ ，该 _流_ 由匹配的 _流模式_ 的名称加上一个 _流区分器_
+（可以是发出请求的用户、目标资源的名称空间或什么都不是）标识，
+并且系统尝试为不同流中具有相同优先级的的请求，赋予近似相等的权重。
+
+<!--
+After classifying a request into a flow, the API Priority and Fairness
+feature then may assign the request to a queue.  This assignment uses
+a technique known as {{< glossary_tooltip term_id="shuffle-sharding"
+text="shuffle sharding" >}}, which makes relatively efficient use of
+queues to insulate low-intensity flows from high-intensity flows.
+-->
+将请求划分到流中之后，APF 功能将请求分配到队列中。
+分配时使用一种称为 {{< glossary_tooltip term_id="shuffle-sharding" text="混洗分片" >}} 的技术，
+该技术可以相对有效地利用队列，隔离低强度流与高强度流。
+
+<!--
+The details of the queuing algorithm are tunable for each priority level, and
+allow administrators to trade off memory use, fairness (the property that
+independent flows will all make progress when total traffic exceeds capacity),
+tolerance for bursty traffic, and the added latency induced by queuing.
+-->
+排队算法的细节可针对每个优先等级进行调整，并允许管理员在内存占用、
+公平性（当总流量超标时，独立流将都会继续前进）、
+突发流量的容忍度以及排队引发的额外延迟之间进行权衡。
+
+<!--
+### Exempt requests
+Some requests are considered sufficiently important that they are not subject to
+any of the limitations imposed by this feature. These exemptions prevent an
+improperly-configured flow control configuration from totally disabling an API
+server.
+-->
+### 豁免请求    {#Exempt-requests}
+某些特别重要的请求不受制于此特性施加的任何限制。这些豁免可防止不当的流控配置完全禁用 API 服务器。
+
+<!--
+## Defaults
+The Priority and Fairness feature ships with a suggested configuration that
+should suffice for experimentation; if your cluster is likely to
+experience heavy load then you should consider what configuration will work best. 
+The suggested configuration groups requests into five priority classes:
+-->
+## 默认值    {#Defaults}
+APF 特性附带推荐配置，该配置足够进行实验；
+如果你的集群有可能承受较大的负载，那么你应该考虑哪种配置最有效。
+推荐配置将请求分为五个优先级：
+
+<!--
+* The `system` priority level is for requests from the `system:nodes` group,
+  i.e. Kubelets, which must be able to contact the API server in order for
+  workloads to be able to schedule on them.
+-->
+* `system` 优先级用于 `system:nodes` 组（即 Kubelets ）的请求，
+kubelets 必须能连上 API 服务器，以便工作负载能够调度到其上。
+
+<!--
+* The `leader-election` priority level is for leader election requests from
+  built-in controllers (in particular, requests for `endpoints`, `configmaps`,
+  or `leases` coming from the `system:kube-controller-manager` or
+  `system:kube-scheduler` users and service accounts in the `kube-system`
+  namespace). These are important to isolate from other traffic because failures
+  in leader election cause their controllers to fail and restart, which in turn
+  causes more expensive traffic as the new controllers sync their informers.
+-->
+* `leader-election` 优先级用于内置控制器的领导选举的请求
+（特别是来自 `system:kube-controller-manager` 的 `endpoints` 、 `configmaps` 或 `leases` 的请求，
+或者在 `kube-system` 命名空间下的 `system:kube-scheduler` 的用户和服务帐户）。
+隔离其他流量对这些请求非常重要，因为领导者选举失败会导致控制器发生故障并重新启动，
+这反过来会导致新启动的控制器在同步信息时，流量开销更大。
+
+<!--
+* The `workload-high` priority level is for other requests from built-in
+  controllers.
+-->
+* `workload-high` 优先级用于内置控制器的请求。
+
+<!--
+* The `workload-low` priority level is for requests from any other service
+  account, which will typically include all requests from controllers running in
+  Pods.
+-->
+* `workload-low` 优先级适用于来自任何服务帐户的请求，通常包括来自 Pods 中运行的控制器的所有请求。
+
+<!--
+* The `global-default` priority level handles all other traffic, e.g.
+  interactive `kubectl` commands run by nonprivileged users.
+-->
+* `global-default` 优先级可处理所有其他流量，例如：非特权用户运行的交互式 `kubectl` 命令。
+
+<!--
+Additionally, there are two PriorityLevelConfigurations and two FlowSchemas that
+are built in and may not be overwritten:
+-->
+此外，内置了两个优先级配置和两个流模式，它们可能不在上述五个等级之内：
+
+<!--
+* The special `exempt` priority level is used for requests that are not subject
+  to flow control at all: they will always be dispatched immediately. The
+  special `exempt` FlowSchema classifies all requests from the `system:masters`
+  group into this priority level. You may define other FlowSchemas that direct
+  other requests to this priority level, if appropriate.
+-->
+* 特殊的 `exempt` 优先级的请求完全不受流控限制：它们总是立刻被分发。
+特殊的 `exempt` 流模式把 `system:masters` 组的所有请求都归类该优先级。
+如果合适，你可以自定义流模式，将其他请求定向到该优先级。
+
+<!--
+* The special `catch-all` priority level is used in combination with the special
+  `catch-all` FlowSchema to make sure that every request gets some kind of
+  classification. Typically you should not rely on this catch-all configuration,
+  and should create your own catch-all FlowSchema and PriorityLevelConfiguration
+  (or use the `global-default` configuration that is installed by default) as
+  appropriate. To help catch configuration errors that miss classifying some
+  requests, the mandatory `catch-all` priority level only allows one concurrency
+  share and does not queue requests, making it relatively likely that traffic
+  that only matches the `catch-all` FlowSchema will be rejected with an HTTP 429
+  error.
+-->
+* 特殊的 `catch-all` 优先级与特殊的 `catch-all` 流模式结合使用，以确保每个请求都分类。
+一般地，你不应该依赖于 `catch-all` 的配置，而应适当地创建自己的 `catch-all` 流模式和优先级配置
+（或使用默认安装的 `global-default` 配置）。
+为了帮助捕获部分请求未分类的配置错误，强制要求 `catch-all` 优先级仅允许一个并发份额，
+并且不对请求进行排队，使得仅与 `catch-all` 流模式匹配的流量被拒绝的可能性更高，并显示 HTTP 429 错误。
+
+<!-- ## Health check concurrency exemption -->
+## 健康检查并发豁免    {#Health-check-concurrency-exemption}
+
+<!--
+The suggested configuration gives no special treatment to the health
+check requests on kube-apiservers from their local kubelets --- which
+tend to use the secured port but supply no credentials.  With the
+suggested config, these requests get assigned to the `global-default`
+FlowSchema and the corresponding `global-default` priority level,
+where other traffic can crowd them out.
+-->
+推荐配置没有对本地 kubelet 在 kube-apiserver 上运行健康检查请求进行任何特殊处理
+——它们倾向于使用安全端口，但不提供凭据。
+通过推荐配置，这些请求将分配 `global-default` 流模式和 `global-default` 优先级，
+这样其他流量可以排除健康检查。
+
+<!--
+If you add the following additional FlowSchema, this exempts those
+requests from rate limiting.
+-->
+如果添加以下流模式，健康检查请求不受速率限制。
+
+{{< caution >}}
+
+<!--
+Making this change also allows any hostile party to then send
+health-check requests that match this FlowSchema, at any volume they
+like.  If you have a web traffic filter or similar external security
+mechanism to protect your cluster's API server from general internet
+traffic, you can configure rules to block any health check requests
+that originate from outside your cluster.
+-->
+进行此更改后，任何敌对方都可以发送与此流模式匹配的任意数量的健康检查请求。
+如果你有 Web 流量过滤器或类似的外部安全机制保护集群的 API 服务器免受常规网络流量的侵扰，
+则可以配置规则，阻止所有来自集群外部的健康检查请求。
+
+{{< /caution >}}
+
+{{< codenew file="priority-and-fairness/health-for-strangers.yaml" >}}
+
+<!--
+## Resources
+The flow control API involves two kinds of resources.
+[PriorityLevelConfigurations](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#prioritylevelconfiguration-v1alpha1-flowcontrol-apiserver-k8s-io)
+define the available isolation classes, the share of the available concurrency
+budget that each can handle, and allow for fine-tuning queuing behavior.
+[FlowSchemas](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#flowschema-v1alpha1-flowcontrol-apiserver-k8s-io)
+are used to classify individual inbound requests, matching each to a single
+PriorityLevelConfiguration.
+-->
+## 资源    {#Resources}
+流控 API 涉及两种资源。
+[优先级配置](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#prioritylevelconfiguration-v1alpha1-flowcontrol-apiserver-k8s-io)
+定义隔离类型和可处理的并发预算量，还可以微调排队行为。
+[流模式](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#flowschema-v1alpha1-flowcontrol-apiserver-k8s-io)
+用于对每个入站请求进行分类，并匹配一个优先级配置。
+
+<!--
+### PriorityLevelConfiguration
+A PriorityLevelConfiguration represents a single isolation class. Each
+PriorityLevelConfiguration has an independent limit on the number of outstanding
+requests, and limitations on the number of queued requests.
+-->
+### 优先级配置    {#PriorityLevelConfiguration}
+一个优先级配置表示单个隔离类型。每个优先级配置对未完成的请求数都有独立的限制，对排队中的请求数也有限制。
+
+<!--
+Concurrency limits for PriorityLevelConfigurations are not specified in absolute
+number of requests, but rather in "concurrency shares." The total concurrency
+limit for the API Server is distributed among the existing
+PriorityLevelConfigurations in proportion with these shares. This allows a
+cluster administrator to scale up or down the total amount of traffic to a
+server by restarting `kube-apiserver` with a different value for
+`--max-requests-inflight` (or `--max-mutating-requests-inflight`), and all
+PriorityLevelConfigurations will see their maximum allowed concurrency go up (or
+down) by the same fraction.
+-->
+优先级配置的并发限制不是指定请求绝对数量，而是在“并发份额”中指定。
+API 服务器的总并发量限制通过这些份额按例分配到现有优先级配置中。
+集群管理员可以更改 `--max-requests-inflight` （或 `--max-mutating-requests-inflight` ）的值，
+再重新启动 `kube-apiserver` 来增加或减小服务器的总流量，
+然后所有的优先级配置将看到其最大并发增加（或减少）了相同的比例。
+
+<!--
+With the Priority and Fairness feature enabled, the total concurrency limit for
+the server is set to the sum of `--max-requests-inflight` and
+`--max-mutating-requests-inflight`. There is no longer any distinction made
+between mutating and non-mutating requests; if you want to treat them
+separately for a given resource, make separate FlowSchemas that match the
+mutating and non-mutating verbs respectively.
+-->
+{{< caution >}}
+启用 APF 功能后，服务器的总并发量限制将设置为 
+`--max-requests-inflight` 和 `--max-mutating-requests-inflight` 之和。
+可变请求和不可变请求之间不再有任何区别；
+如果对于某种资源，你需要区别对待不同请求，请创建不同的流模式分别匹配可变请求和不可变请求。
+{{< /caution >}}
+
+<!--
+When the volume of inbound requests assigned to a single
+PriorityLevelConfiguration is more than its permitted concurrency level, the
+`type` field of its specification determines what will happen to extra requests.
+A type of `Reject` means that excess traffic will immediately be rejected with
+an HTTP 429 (Too Many Requests) error. A type of `Queue` means that requests
+above the threshold will be queued, with the shuffle sharding and fair queuing techniques used
+to balance progress between request flows.
+-->
+当入站请求的数量大于分配的优先级配置中允许的并发级别时， `type` 字段将确定对额外请求的处理方式。
+`Reject` 类型，表示多余的流量将立即被 HTTP 429（请求过多）错误所拒绝。
+`Queue` 类型，表示对超过阈值的请求进行排队，将使用阈值分片和公平排队技术来平衡请求流之间的进度。
+
+<!--
+The queuing configuration allows tuning the fair queuing algorithm for a
+priority level. Details of the algorithm can be read in the [enhancement
+proposal](#whats-next), but in short:
+-->
+公平排队算法支持通过排队配置对优先级微调。 可以在[增强建议](#whats-next)中阅读算法的详细信息，但总之：
+
+<!--
+* Increasing `queues` reduces the rate of collisions between different flows, at
+  the cost of increased memory usage. A value of 1 here effectively disables the
+  fair-queuing logic, but still allows requests to be queued.
+-->
+* `queues` 递增能减少不同流之间的冲突概率，但代价是增加了内存使用量。
+值为1时，会禁用公平排队逻辑，但仍允许请求排队。
+
+<!--
+* Increasing `queueLengthLimit` allows larger bursts of traffic to be
+  sustained without dropping any requests, at the cost of increased
+  latency and memory usage.
+-->
+* `queueLengthLimit` 递增可以在不丢弃任何请求的情况下支撑更大的突发流量，
+但代价是增加了等待时间和内存使用量。
+
+<!--
+* Changing `handSize` allows you to adjust the probability of collisions between
+  different flows and the overall concurrency available to a single flow in an
+  overload situation.
+  {{< note >}}
+    A larger `handSize` makes it less likely for two individual flows to collide
+    (and therefore for one to be able to starve the other), but more likely that
+    a small number of flows can dominate the apiserver. A larger `handSize` also
+    potentially increases the amount of latency that a single high-traffic flow
+    can cause. The maximum number of queued requests possible from a
+    single flow is `handSize *queueLengthLimit`.
+  {{< /note >}}
+-->
+* 修改 `handSize` 允许你调整过载情况下不同流之间的冲突概率以及单个流可用的整体并发性。
+    {{< note >}}
+    较大的 `handSize` 使两个单独的流程发生碰撞的可能性较小（因此，一个流可以饿死另一个流），
+    但是更有可能的是少数流可以控制 apiserver。
+    较大的 `handSize` 还可能增加单个高并发流的延迟量。
+    单个流中可能排队的请求的最大数量为 `handSize *queueLengthLimit` 。
+    {{< /note >}}
+
+<!--
+Following is a table showing an interesting collection of shuffle
+sharding configurations, showing for each the probability that a
+given mouse (low-intensity flow) is squished by the elephants (high-intensity flows) for
+an illustrative collection of numbers of elephants. See
+https://play.golang.org/p/Gi0PLgVHiUg , which computes this table.
+-->
+下表显示了有趣的随机分片配置集合，
+每行显示给定的老鼠（低强度流）被不同数量的大象挤压（高强度流）的概率。
+表来源请参阅： https://play.golang.org/p/Gi0PLgVHiUg
+
+{{< table caption = "Example Shuffle Sharding Configurations" >}}
+<!-- HandSize | Queues | 1 elephant | 4 elephants | 16 elephants -->
+随机分片 | 队列数 | 1个大象 | 4个大象 | 16个大象
+|----------|-----------|------------|----------------|--------------------|
+| 12 | 32 | 4.428838398950118e-09 | 0.11431348830099144 | 0.9935089607656024 |
+| 10 | 32 | 1.550093439632541e-08 | 0.0626479840223545 | 0.9753101519027554 |
+| 10 | 64 | 6.601827268370426e-12 | 0.00045571320990370776 | 0.49999929150089345 |
+| 9 | 64 | 3.6310049976037345e-11 | 0.00045501212304112273 | 0.4282314876454858 |
+| 8 | 64 | 2.25929199850899e-10 | 0.0004886697053040446 | 0.35935114681123076 |
+| 8 | 128 | 6.994461389026097e-13 | 3.4055790161620863e-06 | 0.02746173137155063 |
+| 7 | 128 | 1.0579122850901972e-11 | 6.960839379258192e-06 | 0.02406157386340147 |
+| 7 | 256 | 7.597695465552631e-14 | 6.728547142019406e-08 | 0.0006709661542533682 |
+| 6 | 256 | 2.7134626662687968e-12 | 2.9516464018476436e-07 | 0.0008895654642000348 |
+| 6 | 512 | 4.116062922897309e-14 | 4.982983350480894e-09 | 2.26025764343413e-05 |
+| 6 | 1024 | 6.337324016514285e-16 | 8.09060164312957e-11 | 4.517408062903668e-07 |
+{{< /table >}}
+
+<!-- ### FlowSchema -->
+### 流模式    {#FlowSchema}
+
+<!--
+A FlowSchema matches some inbound requests and assigns them to a
+priority level. Every inbound request is tested against every
+FlowSchema in turn, starting with those with numerically lowest ---
+which we take to be the logically highest --- `matchingPrecedence` and
+working onward.  The first match wins.
+-->
+流模式匹配一些入站请求，并将它们分配给优先级。
+每个入站请求都会对所有流模式测试是否匹配，
+首先从 `matchingPrecedence` 数值最低的匹配开始（我们认为这是逻辑上匹配度最高），
+然后依次进行，直到首个匹配出现。
+
+{{< caution >}}
+<!--
+Only the first matching FlowSchema for a given request matters. If multiple
+FlowSchemas match a single inbound request, it will be assigned based on the one
+with the highest `matchingPrecedence`. If multiple FlowSchemas with equal
+`matchingPrecedence` match the same request, the one with lexicographically
+smaller `name` will win, but it's better not to rely on this, and instead to
+ensure that no two FlowSchemas have the same `matchingPrecedence`.
+-->
+对一个请求来说，只有首个匹配的流模式才有意义。
+如果一个入站请求与多个流模式匹配，则将基于 `matchingPrecedence` 值最高的请求进行筛选。
+如果一个请求匹配多个流模式且 `matchingPrecedence` 的值相同，则按 `name` 的字典序选择最小，
+但是最好不要依赖它，而是确保不存在两个流模式具有相同的 `matchingPrecedence` 值。
+{{< /caution >}}
+
+<!--
+A FlowSchema matches a given request if at least one of its `rules`
+matches. A rule matches if at least one of its `subjects` *and* at least
+one of its `resourceRules` or `nonResourceRules` (depending on whether the
+incoming request is for a resource or non-resource URL) matches the request.
+-->
+当给定的请求与某个流模式的 `rules` 的其中一条匹配，那么就认为该请求与该流模式匹配。
+判断规则与该请求是否匹配，**不仅**要求该条规则的 `subjects` 字段至少存在一个与该请求相匹配，
+**而且**要求该条规则的 `resourceRules` 或 `nonResourceRules` 
+（取决于传入请求是针对资源URL还是非资源URL）字段至少存在一个与该请求相匹配。
+
+<!--
+For the `name` field in subjects, and the `verbs`, `apiGroups`, `resources`,
+`namespaces`, and `nonResourceURLs` fields of resource and non-resource rules,
+the wildcard `*` may be specified to match all values for the given field,
+effectively removing it from consideration.
+-->
+对于 `subjects` 中的 `name` 字段和资源和非资源规则的
+`verbs`，`apiGroups`，`resources`，`namespaces` 和 `nonResourceURLs` 字段，
+可以指定通配符 `*` 来匹配任意值，从而有效地忽略该字段。
+
+<!--
+A FlowSchema's `distinguisherMethod.type` determines how requests matching that
+schema will be separated into flows. It may be
+either `ByUser`, in which case one requesting user will not be able to starve
+other users of capacity, or `ByNamespace`, in which case requests for resources
+in one namespace will not be able to starve requests for resources in other
+namespaces of capacity, or it may be blank (or `distinguisherMethod` may be
+omitted entirely), in which case all requests matched by this FlowSchema will be
+considered part of a single flow. The correct choice for a given FlowSchema
+depends on the resource and your particular environment.
+-->
+流模式的 `distinguisherMethod.type` 字段决定了如何把与该模式匹配的请求分散到各个流中。
+可能是 `ByUser` ，在这种情况下，一个请求用户将无法饿死其他容量的用户；
+或者是 `ByNamespace` ，在这种情况下，一个名称空间中的资源请求将无法饿死其它名称空间的资源请求；
+或者它可以为空（或者可以完全省略 `distinguisherMethod` ），
+在这种情况下，与此流模式匹配的请求将被视为单个流的一部分。
+资源和你的特定环境决定了如何选择正确一个流模式。
+
+<!--
+## Diagnostics
+Every HTTP response from an API server with the priority and fairness feature
+enabled has two extra headers: `X-Kubernetes-PF-FlowSchema-UID` and
+`X-Kubernetes-PF-PriorityLevel-UID`, noting the flow schema that matched the request
+and the priority level to which it was assigned, respectively. The API objects'
+names are not included in these headers in case the requesting user does not
+have permission to view them, so when debugging you can use a command like
+-->
+## 诊断程序    {#Diagnostics}
+启用了 APF 的 API 服务器，它每个 HTTP 响应都有两个额外的 HTTP 头：
+`X-Kubernetes-PF-FlowSchema-UID` 和 `X-Kubernetes-PF-PriorityLevel-UID`，
+注意与请求匹配的流模式和已分配的优先级。
+如果请求用户没有查看这些对象的权限，则这些 HTTP 头中将不包含 API 对象的名称，
+因此在调试时，你可以使用类似如下的命令：
+
+```shell
+kubectl get flowschemas -o custom-columns="uid:{metadata.uid},name:{metadata.name}"
+kubectl get prioritylevelconfigurations -o custom-columns="uid:{metadata.uid},name:{metadata.name}"
+```
+<!--
+to get a mapping of UIDs to names for both FlowSchemas and
+PriorityLevelConfigurations.
+-->
+来获取 UID 到流模式的名称和 UID 到优先级配置的名称的映射。
+
+<!-- ## Observability -->
+## 可观察性    {#Observability}
+
+<!-- ### Metrics -->
+### 指标    {#Metrics}
+
+<!--
+When you enable the API Priority and Fairness feature, the kube-apiserver
+exports additional metrics. Monitoring these can help you determine whether your
+configuration is inappropriately throttling important traffic, or find
+poorly-behaved workloads that may be harming system health.
+-->
+当你开启了 APF 后，kube-apiserver 会暴露额外指标。
+监视这些指标有助于判断你的配置是否不当地限制了重要流量，
+或者发现可能会损害系统健康的，行为不良的工作负载。
+
+<!--
+* `apiserver_flowcontrol_rejected_requests_total` is a counter vector
+  (cumulative since server start) of requests that were rejected,
+  broken down by the labels `flowSchema` (indicating the one that
+  matched the request), `priorityLevel` (indicating the one to which
+  the request was assigned), and `reason`.  The `reason` label will be
+  have one of the following values:
+    * `queue-full`, indicating that too many requests were already
+      queued,
+    * `concurrency-limit`, indicating that the
+      PriorityLevelConfiguration is configured to reject rather than
+      queue excess requests, or
+    * `time-out`, indicating that the request was still in the queue
+      when its queuing time limit expired.
+-->
+* `apiserver_flowcontrol_rejected_requests_total` 是一个计数器向量，
+记录被拒绝的请求数量（自服务器启动以来累计值），
+由标签 `flowSchema` （表示与请求匹配的流模式）， `priorityLevel` （表示分配给请该求的优先级）和  `reason` 拆分。
+`reason` 标签将具有以下值之一：
+    * `queue-full` ，表明已经有太多请求排队，
+    * `concurrency-limit` ，表示将 PriorityLevelConfiguration 配置为 `Reject` 而不是 `Queue` ，或者
+    * `time-out`, 表示在其排队时间超期的请求仍在队列中。
+
+<!--
+* `apiserver_flowcontrol_dispatched_requests_total` is a counter
+  vector (cumulative since server start) of requests that began
+  executing, broken down by the labels `flowSchema` (indicating the
+  one that matched the request) and `priorityLevel` (indicating the
+  one to which the request was assigned).
+-->
+* `apiserver_flowcontrol_dispatched_requests_total` 是一个计数器向量，
+记录开始执行的请求数量（自服务器启动以来的累积值），
+由标签 `flowSchema` （表示与请求匹配的流模式）和 `priorityLevel`（表示分配给该请求的优先级）拆分。
+
+<!--
+* `apiserver_current_inqueue_requests` is a gauge vector of recent
+  high water marks of the number of queued requests, grouped by a
+  label named `request_kind` whose value is `mutating` or `readOnly`.
+  These high water marks describe the largest number seen in the one
+  second window most recently completed.  These complement the older
+  `apiserver_current_inflight_requests` gauge vector that holds the
+  last window's high water mark of number of requests actively being
+  served.
+-->
+* `apiserver_current_inqueue_requests` 是一个表向量，
+记录最近排队请求数量的高水位线，
+由标签 `request_kind` 分组，标签的值为 `mutating` 或 `readOnly`。
+这些高水位线表示在最近一秒钟内看到的最大数字。
+它们补充说明了老的表向量 `apiserver_current_inflight_requests`
+（该量保存了最后一个窗口中，正在处理的请求数量的高水位线）。
+
+<!--
+* `apiserver_flowcontrol_read_vs_write_request_count_samples` is a
+  histogram vector of observations of the then-current number of
+  requests, broken down by the labels `phase` (which takes on the
+  values `waiting` and `executing`) and `request_kind` (which takes on
+  the values `mutating` and `readOnly`).  The observations are made
+  periodically at a high rate.
+-->
+* `apiserver_flowcontrol_read_vs_write_request_count_samples` 是一个直方图向量，
+记录当前请求数量的观察值，
+由标签 `phase` （取值为 `waiting` 和 `executing` ）和 `request_kind` （取值 `mutating` 和 `readOnly` ）拆分。
+定期以高速率观察该值。
+
+<!--
+* `apiserver_flowcontrol_read_vs_write_request_count_watermarks` is a
+  histogram vector of high or low water marks of the number of
+  requests broken down by the labels `phase` (which takes on the
+  values `waiting` and `executing`) and `request_kind` (which takes on
+  the values `mutating` and `readOnly`); the label `mark` takes on
+  values `high` and `low`.  The water marks are accumulated over
+  windows bounded by the times when an observation was added to
+  `apiserver_flowcontrol_read_vs_write_request_count_samples`.  These
+  water marks show the range of values that occurred between samples.
+-->
+* `apiserver_flowcontrol_read_vs_write_request_count_watermarks` 是一个直方图向量，
+记录请求数量的高/低水位线，
+由标签 `phase` （取值为 `waiting` 和 `executing` ）和 `request_kind` （取值为 `mutating` 和 `readOnly` ）拆分；
+标签 `mark` 取值为 `high` 和 `low` 。
+`apiserver_flowcontrol_read_vs_write_request_count_samples` 向量观察到有值新增，则该向量累积。
+这些水位线显示了样本值的范围。
+
+<!--
+* `apiserver_flowcontrol_current_inqueue_requests` is a gauge vector
+  holding the instantaneous number of queued (not executing) requests,
+  broken down by the labels `priorityLevel` and `flowSchema`.
+-->
+* `apiserver_flowcontrol_current_inqueue_requests` 是一个表向量，
+记录包含排队中的（未执行）请求的瞬时数量，
+由标签 `priorityLevel` 和 `flowSchema` 拆分。
+
+<!--
+* `apiserver_flowcontrol_current_executing_requests` is a gauge vector
+  holding the instantaneous number of executing (not waiting in a
+  queue) requests, broken down by the labels `priorityLevel` and
+  `flowSchema`.
+-->
+* `apiserver_flowcontrol_current_executing_requests` 是一个表向量，
+记录包含执行中（不在队列中等待）请求的瞬时数量，
+由标签 `priorityLevel` 和 `flowSchema` 拆分。
+
+<!--
+* `apiserver_flowcontrol_priority_level_request_count_samples` is a
+  histogram vector of observations of the then-current number of
+  requests broken down by the labels `phase` (which takes on the
+  values `waiting` and `executing`) and `priorityLevel`.  Each
+  histogram gets observations taken periodically, up through the last
+  activity of the relevant sort.  The observations are made at a high
+  rate.
+-->
+* `apiserver_flowcontrol_priority_level_request_count_samples` 是一个直方图向量，
+记录当前请求的观测值，由标签 `phase` （取值为`waiting` 和 `executing`）和 `priorityLevel` 拆分。
+每个直方图都会定期进行观察，直到相关类别的最后活动为止。观察频率高。
+
+<!--
+* `apiserver_flowcontrol_priority_level_request_count_watermarks` is a
+  histogram vector of high or low water marks of the number of
+  requests broken down by the labels `phase` (which takes on the
+  values `waiting` and `executing`) and `priorityLevel`; the label
+  `mark` takes on values `high` and `low`.  The water marks are
+  accumulated over windows bounded by the times when an observation
+  was added to
+  `apiserver_flowcontrol_priority_level_request_count_samples`.  These
+  water marks show the range of values that occurred between samples.
+-->
+* `apiserver_flowcontrol_priority_level_request_count_watermarks` 是一个直方图向量，
+记录请求数的高/低水位线，由标签 `phase` （取值为 `waiting` 和 `executing` ）和 `priorityLevel` 拆分；
+标签 `mark` 取值为 `high` 和 `low` 。
+`apiserver_flowcontrol_priority_level_request_count_samples` 向量观察到有值新增，则该向量累积。
+这些水位线显示了样本值的范围。
+
+<!--
+* `apiserver_flowcontrol_request_queue_length_after_enqueue` is a
+  histogram vector of queue lengths for the queues, broken down by
+  the labels `priorityLevel` and `flowSchema`, as sampled by the
+  enqueued requests.  Each request that gets queued contributes one
+  sample to its histogram, reporting the length of the queue just
+  after the request was added.  Note that this produces different
+  statistics than an unbiased survey would.
+-->
+* `apiserver_flowcontrol_request_queue_length_after_enqueue` 是一个直方图向量，
+记录请求队列的长度，由标签 `priorityLevel` 和 `flowSchema` 拆分。
+每个排队中的请求都会为其直方图贡献一个样本，并在添加请求后立即上报队列的长度。
+请注意，这样产生的统计数据与无偏调查不同。
+    {{< note >}}
+    <!--
+    An outlier value in a histogram here means it is likely that a single flow
+    (i.e., requests by one user or for one namespace, depending on
+    configuration) is flooding the API server, and being throttled. By contrast,
+    if one priority level's histogram shows that all queues for that priority
+    level are longer than those for other priority levels, it may be appropriate
+    to increase that PriorityLevelConfiguration's concurrency shares.
+    -->
+    直方图中的离群值在这里表示单个流（即，一个用户或一个名称空间的请求，具体取决于配置）正在疯狂请求 API 服务器，并受到限制。
+    相反，如果一个优先级的直方图显示该优先级的所有队列都比其他优先级的队列长，则增加优先级配置的并发份额是比较合适的。
+    {{< /note >}}
+
+<!--
+* `apiserver_flowcontrol_request_concurrency_limit` is a gauge vector
+  hoding the computed concurrency limit (based on the API server's
+  total concurrency limit and PriorityLevelConfigurations' concurrency
+  shares), broken down by the label `priorityLevel`.
+-->
+* `apiserver_flowcontrol_request_concurrency_limit` 是一个表向量，
+记录并发限制的计算值（基于 API 服务器的总并发限制和优先级配置的并发份额），
+并按标签 `priorityLevel` 拆分。
+
+<!--
+* `apiserver_flowcontrol_request_wait_duration_seconds` is a histogram
+  vector of how long requests spent queued, broken down by the labels
+  `flowSchema` (indicating which one matched the request),
+  `priorityLevel` (indicating the one to which the request was
+  assigned), and `execute` (indicating whether the request started
+  executing).
+-->
+* `apiserver_flowcontrol_request_wait_duration_seconds` 是一个直方图向量，
+记录请求排队的时间，
+由标签 `flowSchema` （表示与请求匹配的流模式），
+`priorityLevel`  （表示分配该请求的优先级）
+和 `execute` （表示请求是否开始执行）拆分。
+    {{< note >}}
+    <!--
+    Since each FlowSchema always assigns requests to a single
+    PriorityLevelConfiguration, you can add the histograms for all the
+    FlowSchemas for one priority level to get the effective histogram for
+    requests assigned to that priority level.
+    -->
+    由于每个流模式总会给请求分配优先级配置，因此你可以为一个优先级添加所有流模式的直方图，以获取分配给该优先级的请求的有效直方图。
+    {{< /note >}}
+
+<!--
+* `apiserver_flowcontrol_request_execution_seconds` is a histogram
+  vector of how long requests took to actually execute, broken down by
+  the labels `flowSchema` (indicating which one matched the request)
+  and `priorityLevel` (indicating the one to which the request was
+  assigned).
+-->
+* `apiserver_flowcontrol_request_execution_seconds` 是一个直方图向量，
+记录请求实际执行需要花费的时间，
+由标签 `flowSchema` （表示与请求匹配的流模式）和 `priorityLevel` （表示分配给该请求的优先级）拆分。
+
+<!-- ### Debug endpoints -->
+### 调试端点    {#Debug-endpoints}
+
+<!-- 
+When you enable the API Priority and Fairness feature, 
+the kube-apiserver serves the following additional paths at its HTTP[S] ports. 
+-->
+启用 APF 特性后， kube-apiserver 会在其 HTTP/HTTPS 端口提供以下路径：
+
+<!-- 
+- `/debug/api_priority_and_fairness/dump_priority_levels` - a listing of all the priority levels and the current state of each.  
+You can fetch like this: 
+-->
+- `/debug/api_priority_and_fairness/dump_priority_levels` —— 所有优先级及其当前状态的列表。你可以这样获取：
+  ```shell
+  kubectl get --raw /debug/api_priority_and_fairness/dump_priority_levels
+  ```
+  
+  <!-- The output is similar to this: -->
+  输出类似于：
+  ```
+  PriorityLevelName, ActiveQueues, IsIdle, IsQuiescing, WaitingRequests, ExecutingRequests,
+  workload-low,      0,            true,   false,       0,               0,
+  global-default,    0,            true,   false,       0,               0,
+  exempt,            <none>,       <none>, <none>,      <none>,          <none>,
+  catch-all,         0,            true,   false,       0,               0,
+  system,            0,            true,   false,       0,               0,
+  leader-election,   0,            true,   false,       0,               0,
+  workload-high,     0,            true,   false,       0,               0,
+  ```
+
+<!-- 
+- `/debug/api_priority_and_fairness/dump_queues` - a listing of all the queues and their current state.  
+You can fetch like this: 
+-->
+- `/debug/api_priority_and_fairness/dump_queues` ——所有队列及其当前状态的列表。你可以这样获取：
+  ```shell
+  kubectl get --raw /debug/api_priority_and_fairness/dump_queues
+  ```
+ 
+  <!-- The output is similar to this: -->
+  输出类似于：
+  ```
+  PriorityLevelName, Index,  PendingRequests, ExecutingRequests, VirtualStart,
+  workload-high,     0,      0,               0,                 0.0000,
+  workload-high,     1,      0,               0,                 0.0000,
+  workload-high,     2,      0,               0,                 0.0000,
+  ...
+  leader-election,   14,     0,               0,                 0.0000,
+  leader-election,   15,     0,               0,                 0.0000,
+  ```
+
+<!-- 
+- `/debug/api_priority_and_fairness/dump_requests` - a listing of all the requests that are currently waiting in a queue.  
+You can fetch like this: 
+-->
+- `/debug/api_priority_and_fairness/dump_requests` ——当前正在队列中等待的所有请求的列表。你可以这样获取：
+  ```shell
+  kubectl get --raw /debug/api_priority_and_fairness/dump_requests
+  ```
+  
+  <!-- The output is similar to this: -->
+  输出类似于：
+  ```
+  PriorityLevelName, FlowSchemaName, QueueIndex, RequestIndexInQueue, FlowDistingsher,       ArriveTime,
+  exempt,            <none>,         <none>,     <none>,              <none>,                <none>,
+  system,            system-nodes,   12,         0,                   system:node:127.0.0.1, 2020-07-23T15:26:57.179170694Z,
+  ```
+
+  <!-- 
+  In addition to the queued requests, 
+  the output includeas one phantom line for each priority level that is exempt from limitation. 
+  -->
+  除了排队的请求外，对于每个优先级，输出还包括一条不受限制的虚拟线。
+
+  <!-- You can get a more detailed listing with a command like this: -->
+  你可以使用以下命令获得更详细的清单：
+  ```shell
+  kubectl get --raw '/debug/api_priority_and_fairness/dump_requests?includeRequestDetails=1'
+  ```
+  
+  <!-- The output is similar to this: -->
+  输出类似于：
+  ```
+  PriorityLevelName, FlowSchemaName, QueueIndex, RequestIndexInQueue, FlowDistingsher,       ArriveTime,                     UserName,              Verb,   APIPath,                                                     Namespace, Name,   APIVersion, Resource, SubResource,
+  system,            system-nodes,   12,         0,                   system:node:127.0.0.1, 2020-07-23T15:31:03.583823404Z, system:node:127.0.0.1, create, /api/v1/namespaces/scaletest/configmaps,
+  system,            system-nodes,   12,         1,                   system:node:127.0.0.1, 2020-07-23T15:31:03.594555947Z, system:node:127.0.0.1, create, /api/v1/namespaces/scaletest/configmaps,
+  ```
+
+## {{% heading "whatsnext" %}}
+
+<!--
+For background information on design details for API priority and fairness, see the 
+[enhancement proposal](https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/20190228-priority-and-fairness.md).
+You can make suggestions and feature requests via 
+[SIG API Machinery](https://github.com/kubernetes/community/tree/master/sig-api-machinery).
+-->
+有关API优先级和公平性的设计细节的背景信息，
+请参阅[增强建议](https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/20190228-priority-and-fairness.md)。
+你可以通过 [SIG APIMachinery](https://github.com/kubernetes/community/tree/master/sig-api-machinery) 提出建议和特性请求。
\ No newline at end of file
diff --git a/content/zh/examples/priority-and-fairness/health-for-strangers.yaml b/content/zh/examples/priority-and-fairness/health-for-strangers.yaml
new file mode 100644
index 0000000000..79ee80ab17
--- /dev/null
+++ b/content/zh/examples/priority-and-fairness/health-for-strangers.yaml
@@ -0,0 +1,20 @@
+apiVersion: flowcontrol.apiserver.k8s.io/v1alpha1
+kind: FlowSchema
+metadata:
+  name: health-for-strangers
+spec:
+  matchingPrecedence: 1000
+  priorityLevelConfiguration:
+    name: exempt
+  rules:
+  - nonResourceRules:
+    - nonResourceURLs:
+      - "/healthz"
+      - "/livez"
+      - "/readyz"
+      verbs:
+      - "*"
+    subjects:
+    - kind: Group
+      group:
+        name: system:unauthenticated

From e52440931c4b3b34b7d097f455714ce473372acd Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Wed, 16 Sep 2020 22:58:11 +0700
Subject: [PATCH 344/496] Apply suggestions from code review

And remove Roboto font from Katacoda embed for recent localized interactive tutorial page

Co-authored-by: M. Habib Rosyad <habib@volantis.io>
Co-authored-by: Aris Cahyadi Risdianto <aris.risdianto@gmail.com>
---
 .../deploy-app/deploy-interactive.html                 |  2 +-
 .../kubernetes-basics/explore/explore-interactive.html |  2 +-
 .../kubernetes-basics/expose/expose-interactive.html   |  2 +-
 .../kubernetes-basics/scale/scale-interactive.html     |  2 +-
 .../tutorials/kubernetes-basics/scale/scale-intro.html | 10 +++++-----
 5 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 5349a72626..5dc8d1a0e8 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -31,7 +31,7 @@ weight: 20
                 Untuk berinteraksi dengan Terminal, silahkan gunakan desktop/tablet.
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index 0379fb7230..0c96613419 100644
--- a/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,7 +24,7 @@ weight: 20
                 Untuk berinteraksi dengan Terminal, tolong gunakan dalam desktop/tablet
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html b/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
index bd9f075e5b..c10f9d057d 100644
--- a/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/expose/expose-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Untuk berinteraksi dengan Terminal, harap gunakan desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/8" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index 9ec7537fbd..99b83c98f9 100644
--- a/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/id/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,7 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 Untuk berinteraksi dengan Terminal, harap gunakan desktop/tablet
             </div>
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-font="Roboto" data-katacoda-fontheader="Roboto Slab" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-lang="id" data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html b/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html
index 8de8620b6a..e5fb73f9f7 100644
--- a/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html
+++ b/content/id/docs/tutorials/kubernetes-basics/scale/scale-intro.html
@@ -27,7 +27,7 @@ weight: 10
             <div class="col-md-8">
        <h3>Penyekalaan sebuah Aplikasi</h3>
 
-            <p>Di modul-modul sebelumnya kita telah membuat <a href="/id/docs/concepts/workloads/controllers/deployment/">Deployment</a>, dan mengeksposnya secara publik via <a href="/id/docs/concepts/services-networking/service/">Service</a>. Deployment yang dibuat itu hanya satu Pod yang menjalankan aplikasi kita. Ketika kunjungan meningkat, kita perlu menyekalakan (<i>scale</i>) aplikasi kita untuk mengikuti tingkat permintaan pengguna.</p>
+            <p>Di modul-modul sebelumnya kita telah membuat <a href="/id/docs/concepts/workloads/controllers/deployment/">Deployment</a>, dan mengeksposnya secara publik via <a href="/id/docs/concepts/services-networking/service/">Service</a>. Deployment tersebut hanya membuat satu Pod untuk menjalankan aplikasi kita. Ketika kunjungan meningkat, kita perlu  melakukan penyekalaan (<i>scale</i>) aplikasi kita untuk mengikuti tingkat permintaan pengguna.</p>
 
             <p><b>Penyekalaan</b> dapat dicapai dengan mengubah nilai replicas dalam Deployment</p>
 
@@ -40,7 +40,7 @@ weight: 10
                     </ul>
                 </div>
                 <div class="content__box content__box_fill">
-                    <p><i> Kamu dapat dari awal memulai Deployment dengan multipel instans menggunakan parameter --replicas pada perintah kubectl create deployment</i></p>
+                    <p><i> Kamu dapat membuat Deployment dengan beberapa instans sekaligus dari awal dengan menggunakan parameter --replicas pada perintah kubectl create deployment</i></p>
                 </div>
             </div>
         </div>
@@ -88,7 +88,7 @@ weight: 10
 
                 <p>Perluasan skala Deployment akan memastikan Pod baru dibuat dan dijadwalkan ke Node-Node dengan sumber daya yang tersedia. Penyekalaan akan meningkatkan jumlah Pod ke keadaan yang diinginkan. Kubernetes juga mendukung <a href="/id/docs/tasks/run-application/horizontal-pod-autoscale/"><i>autoscaling</i></a> Pod, tetapi itu di luar cakupan tutorial ini. Penyekalaan ke nol juga dimungkinkan, dan tindakan ini akan mengakhiri semua Pod pada Deployment tersebut.</p>
 
-                <p>Menjalankan beberapa instans dari aplikasi akan membutuhkan cara untuk mendistribusikan kunjungan ke semuanya. Service punya penyeimbang beban terintegrasi yang akan mendistribusikan kujungan jaringan ke semua Pod dari sebuah Deployment yang diekspos. Service akan terus-menerus memonitor Pod-Pod yang berjalan menggunakan Endpoints, untuk memastikan kunjungan hanya dikirim kepada Pod yang tersedia.</p>
+                <p>Menjalankan beberapa instans dari aplikasi akan membutuhkan cara untuk mendistribusikan trafik ke semuanya. Service memiliki penyeimbang beban terintegrasi yang akan mendistribusikan trafik jaringan ke semua Pod dari sebuah Deployment yang diekspos. Service akan terus memonitor Pod-Pod yang berjalan menggunakan Endpoints, untuk memastikan trafik hanya dikirim ke Pod yang tersedia.</p>
 
             </div>
             <div class="col-md-4">
@@ -102,14 +102,14 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <p>Sewaktu kamu punya multipel instans dari aplikasi berjalan, kamu akan dapat melakukan pembaruan bertahap tanpa perhentian. Kita akan akan membahas hal tersebut pada modul selanjutnya. Sekarang, mari kita pergi ke terminal daring dan menyekalakan aplikasi kita.</p>
+                <p>Sewaktu kamu memiliki multipel instans dari aplikasi yang berjalan, kamu akan bisa melakukan pembaruan bertahap tanpa henti. Kita akan akan membahas hal tersebut pada modul selanjutnya. Sekarang, mari kita pergi ke terminal daring dan melakukan penyekalaan terhadap aplikasi kita.</p>
             </div>
         </div>
         <br>
 
         <div class="row">
             <div class="col-md-12">
-                <a class="btn btn-lg btn-success" href="/docs/tutorials/kubernetes-basics/scale/scale-interactive/" role="button"> Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
+                <a class="btn btn-lg btn-success" href="/id/docs/tutorials/kubernetes-basics/scale/scale-interactive/" role="button"> Mulai Tutorial Interaktif <span class="btn__next">›</span></a>
             </div>
         </div>
 

From 84c694ccc80ee3dcc98b246c10b385661a0f91af Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Wed, 16 Sep 2020 20:02:08 +0200
Subject: [PATCH 345/496] fixing FR languages issues

Signed-off-by: didier <durand.didier@gmail.com>
---
 .../concepts/architecture/master-node-communication.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/content/fr/docs/concepts/architecture/master-node-communication.md b/content/fr/docs/concepts/architecture/master-node-communication.md
index 23dd1a4b58..c1d1c6e981 100644
--- a/content/fr/docs/concepts/architecture/master-node-communication.md
+++ b/content/fr/docs/concepts/architecture/master-node-communication.md
@@ -16,16 +16,16 @@ L'objectif est de permettre aux utilisateurs de personnaliser leur installation
 
 ## Communication du Cluster vers le Master
 
-Tous les canaux de communication du cluster au master se terminent au apiserver (aucun des autres composants principaux n'est conçu pour exposer des services distants).
+Tous les canaux de communication du cluster au master se terminent à l'apiserver (aucun des autres composants principaux n'est conçu pour exposer des services distants).
 Dans un déploiement typique, l'apiserver est configuré pour écouter les connexions distantes sur un port HTTPS sécurisé (443) avec un ou plusieurs types d'[authentification](/docs/reference/access-authn-authz/authentication/) client.
-Une ou plusieurs formes d'[autorisation](/docs/reference/access-authn-authz/authorization/) devraient être activée, notamment si les [requêtes anonymes](/docs/reference/access-authn-authz/authentication/#anonymous-requests) ou [jeton de compte de service](/docs/reference/access-authn-authz/authentication/#service-account-tokens) sont autorisés.
+Une ou plusieurs formes d'[autorisation](/docs/reference/access-authn-authz/authorization/) devraient être activées, notamment si les [requêtes anonymes](/docs/reference/access-authn-authz/authentication/#anonymous-requests) ou [jeton de compte de service](/docs/reference/access-authn-authz/authentication/#service-account-tokens) sont autorisés.
 
 Le certificat racine public du cluster doit être configuré pour que les nœuds puissent se connecter en toute sécurité à l'apiserver avec des informations d'identification client valides.
 Par exemple, dans un déploiement GKE par défaut, les informations d'identification client fournies au kubelet sont sous la forme d'un certificat client.
 Consultez [amorçage TLS de kubelet](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) pour le provisioning automatisé des certificats de client Kubelet.
 
 Les pods qui souhaitent se connecter à l'apiserver peuvent le faire de manière sécurisée en utilisant un compte de service afin que Kubernetes injecte automatiquement le certificat racine public et un jeton de support valide dans le pod lorsqu'il est instancié.
-Le service `kubernetes` (dans tous les namespaces) est configuré avec une adresse IP virtuelle redirigée (via kube-proxy) vers le point de terminaison HTTPS sur le apiserver.
+Le service `kubernetes` (dans tous les namespaces) est configuré avec une adresse IP virtuelle redirigée (via kube-proxy) vers le point de terminaison HTTPS sur l'apiserver.
 
 Les composants du master communiquent également avec l'apiserver du cluster via le port sécurisé.
 
@@ -48,11 +48,11 @@ Les connexions de l'apiserver au kubelet sont utilisées pour:
 Ces connexions se terminent au point de terminaison HTTPS du kubelet.
 Par défaut, l'apiserver ne vérifie pas le certificat du kubelet, ce qui rend la connexion sujette aux attaques de type "man-in-the-middle", et **non sûre** sur des réseaux non approuvés et/ou publics.
 
-Pour vérifier cette connexion, utilisez l'argument `--kubelet-certificate-authority` pour fournir à apiserver un ensemble de certificats racine à utiliser pour vérifier le certificat du kubelet.
+Pour vérifier cette connexion, utilisez l'argument `--kubelet-certificate-authority` pour fournir à l'apiserver un ensemble de certificats racine à utiliser pour vérifier le certificat du kubelet.
 
 Si ce n'est pas possible, utilisez [SSH tunneling](/docs/tasks/access-application-cluster/port-forward-access-application-cluster/) entre l'apiserver et le kubelet si nécessaire pour éviter la connexion sur un réseau non sécurisé ou public.
 
-Finalement, l'[authentification et/ou autorisation du Kubelet](/docs/admin/kubelet-authentication-authorization/) devrait être activé pour sécuriser l'API kubelet.
+Finalement, l'[authentification et/ou autorisation du Kubelet](/docs/admin/kubelet-authentication-authorization/) devrait être activée pour sécuriser l'API kubelet.
 
 ### apiserver vers nodes, pods et services
 

From 475f1172d136143e946a54529223d6d2f8148ac2 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 17 Sep 2020 11:16:33 +0900
Subject: [PATCH 346/496] Copy concepts/workloads/pods/ephemeral-containers/
 from en/ directory.

---
 .../workloads/pods/ephemeral-containers.md    | 195 ++++++++++++++++++
 1 file changed, 195 insertions(+)
 create mode 100644 content/ja/docs/concepts/workloads/pods/ephemeral-containers.md

diff --git a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
new file mode 100644
index 0000000000..c1852df707
--- /dev/null
+++ b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -0,0 +1,195 @@
+---
+reviewers:
+- verb
+- yujuhong
+title: Ephemeral Containers
+content_type: concept
+weight: 80
+---
+
+<!-- overview -->
+
+{{< feature-state state="alpha" for_k8s_version="v1.16" >}}
+
+This page provides an overview of ephemeral containers: a special type of container
+that runs temporarily in an existing {{< glossary_tooltip term_id="pod" >}} to
+accomplish user-initiated actions such as troubleshooting. You use ephemeral
+containers to inspect services rather than to build applications.
+
+{{< warning >}}
+Ephemeral containers are in early alpha state and are not suitable for production
+clusters. In accordance with the [Kubernetes Deprecation Policy](
+/docs/reference/using-api/deprecation-policy/), this alpha feature could change
+significantly in the future or be removed entirely.
+{{< /warning >}}
+
+
+
+<!-- body -->
+
+## Understanding ephemeral containers
+
+{{< glossary_tooltip text="Pods" term_id="pod" >}} are the fundamental building
+block of Kubernetes applications. Since Pods are intended to be disposable and
+replaceable, you cannot add a container to a Pod once it has been created.
+Instead, you usually delete and replace Pods in a controlled fashion using
+{{< glossary_tooltip text="deployments" term_id="deployment" >}}.
+
+Sometimes it's necessary to inspect the state of an existing Pod, however, for
+example to troubleshoot a hard-to-reproduce bug. In these cases you can run
+an ephemeral container in an existing Pod to inspect its state and run
+arbitrary commands.
+
+### What is an ephemeral container?
+
+Ephemeral containers differ from other containers in that they lack guarantees
+for resources or execution, and they will never be automatically restarted, so
+they are not appropriate for building applications.  Ephemeral containers are
+described using the same `ContainerSpec` as regular containers, but many fields
+are incompatible and disallowed for ephemeral containers.
+
+- Ephemeral containers may not have ports, so fields such as `ports`,
+  `livenessProbe`, `readinessProbe` are disallowed.
+- Pod resource allocations are immutable, so setting `resources` is disallowed.
+- For a complete list of allowed fields, see the [EphemeralContainer reference
+  documentation](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ephemeralcontainer-v1-core).
+
+Ephemeral containers are created using a special `ephemeralcontainers` handler
+in the API rather than by adding them directly to `pod.spec`, so it's not
+possible to add an ephemeral container using `kubectl edit`.
+
+Like regular containers, you may not change or remove an ephemeral container
+after you have added it to a Pod.
+
+## Uses for ephemeral containers
+
+Ephemeral containers are useful for interactive troubleshooting when `kubectl
+exec` is insufficient because a container has crashed or a container image
+doesn't include debugging utilities.
+
+In particular, [distroless images](https://github.com/GoogleContainerTools/distroless)
+enable you to deploy minimal container images that reduce attack surface
+and exposure to bugs and vulnerabilities. Since distroless images do not include a
+shell or any debugging utilities, it's difficult to troubleshoot distroless
+images using `kubectl exec` alone.
+
+When using ephemeral containers, it's helpful to enable [process namespace
+sharing](/docs/tasks/configure-pod-container/share-process-namespace/) so
+you can view processes in other containers.
+
+See [Debugging with Ephemeral Debug Container](
+/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)
+for examples of troubleshooting using ephemeral containers.
+
+## Ephemeral containers API
+
+{{< note >}}
+The examples in this section require the `EphemeralContainers` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/) to be
+enabled, and Kubernetes client and server version v1.16 or later.
+{{< /note >}}
+
+The examples in this section demonstrate how ephemeral containers appear in
+the API. You would normally use `kubectl alpha debug` or another `kubectl`
+[plugin](/docs/tasks/extend-kubectl/kubectl-plugins/) to automate these steps
+rather than invoking the API directly.
+
+Ephemeral containers are created using the `ephemeralcontainers` subresource
+of Pod, which can be demonstrated using `kubectl --raw`. First describe
+the ephemeral container to add as an `EphemeralContainers` list:
+
+```json
+{
+    "apiVersion": "v1",
+    "kind": "EphemeralContainers",
+    "metadata": {
+            "name": "example-pod"
+    },
+    "ephemeralContainers": [{
+        "command": [
+            "sh"
+        ],
+        "image": "busybox",
+        "imagePullPolicy": "IfNotPresent",
+        "name": "debugger",
+        "stdin": true,
+        "tty": true,
+        "terminationMessagePolicy": "File"
+    }]
+}
+```
+
+To update the ephemeral containers of the already running `example-pod`:
+
+```shell
+kubectl replace --raw /api/v1/namespaces/default/pods/example-pod/ephemeralcontainers  -f ec.json
+```
+
+This will return the new list of ephemeral containers:
+
+```json
+{
+   "kind":"EphemeralContainers",
+   "apiVersion":"v1",
+   "metadata":{
+      "name":"example-pod",
+      "namespace":"default",
+      "selfLink":"/api/v1/namespaces/default/pods/example-pod/ephemeralcontainers",
+      "uid":"a14a6d9b-62f2-4119-9d8e-e2ed6bc3a47c",
+      "resourceVersion":"15886",
+      "creationTimestamp":"2019-08-29T06:41:42Z"
+   },
+   "ephemeralContainers":[
+      {
+         "name":"debugger",
+         "image":"busybox",
+         "command":[
+            "sh"
+         ],
+         "resources":{
+
+         },
+         "terminationMessagePolicy":"File",
+         "imagePullPolicy":"IfNotPresent",
+         "stdin":true,
+         "tty":true
+      }
+   ]
+}
+```
+
+You can view the state of the newly created ephemeral container using `kubectl describe`:
+
+```shell
+kubectl describe pod example-pod
+```
+
+```
+...
+Ephemeral Containers:
+  debugger:
+    Container ID:  docker://cf81908f149e7e9213d3c3644eda55c72efaff67652a2685c1146f0ce151e80f
+    Image:         busybox
+    Image ID:      docker-pullable://busybox@sha256:9f1003c480699be56815db0f8146ad2e22efea85129b5b5983d0e0fb52d9ab70
+    Port:          <none>
+    Host Port:     <none>
+    Command:
+      sh
+    State:          Running
+      Started:      Thu, 29 Aug 2019 06:42:21 +0000
+    Ready:          False
+    Restart Count:  0
+    Environment:    <none>
+    Mounts:         <none>
+...
+```
+
+You can interact with the new ephemeral container in the same way as other
+containers using `kubectl attach`, `kubectl exec`, and `kubectl logs`, for
+example:
+
+```shell
+kubectl attach -it example-pod -c debugger
+```
+
+

From d6e6a47baefd379f3f4a787721a59999334a6c6b Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 17 Sep 2020 11:16:52 +0900
Subject: [PATCH 347/496] Translate
 concepts/workloads/pods/ephemeral-containers into japanese.

---
 .../workloads/pods/ephemeral-containers.md    | 100 +++++-------------
 1 file changed, 26 insertions(+), 74 deletions(-)

diff --git a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
index c1852df707..4d5ea9518e 100644
--- a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -1,8 +1,5 @@
 ---
-reviewers:
-- verb
-- yujuhong
-title: Ephemeral Containers
+title: ephemeralコンテナ
 content_type: concept
 weight: 80
 ---
@@ -11,92 +8,51 @@ weight: 80
 
 {{< feature-state state="alpha" for_k8s_version="v1.16" >}}
 
-This page provides an overview of ephemeral containers: a special type of container
-that runs temporarily in an existing {{< glossary_tooltip term_id="pod" >}} to
-accomplish user-initiated actions such as troubleshooting. You use ephemeral
-containers to inspect services rather than to build applications.
+このページでは、特別な種類のコンテナであるephemeralコンテナの概要を説明します。ephemeralコンテナは、トラブルシューティングなどのユーザーが開始するアクションを実行するために、すでに存在する{{< glossary_tooltip term_id="pod" >}}内で一時的に実行するコンテナです。ephemeralコンテナは、アプリケーションの構築ではなく、serviceの調査のために利用します。
 
 {{< warning >}}
-Ephemeral containers are in early alpha state and are not suitable for production
-clusters. In accordance with the [Kubernetes Deprecation Policy](
-/docs/reference/using-api/deprecation-policy/), this alpha feature could change
-significantly in the future or be removed entirely.
+ephemeralコンテナは初期のアルファ状態であり、本番クラスタには適しません。[Kubernetesの非推奨ポリシー](/docs/reference/using-api/deprecation-policy/)に従って、このアルファ機能は、将来大きく変更されたり、完全に削除される可能性があります。
 {{< /warning >}}
 
-
-
 <!-- body -->
 
-## Understanding ephemeral containers
+## ephemeralコンテナを理解する
 
-{{< glossary_tooltip text="Pods" term_id="pod" >}} are the fundamental building
-block of Kubernetes applications. Since Pods are intended to be disposable and
-replaceable, you cannot add a container to a Pod once it has been created.
-Instead, you usually delete and replace Pods in a controlled fashion using
-{{< glossary_tooltip text="deployments" term_id="deployment" >}}.
+{{< glossary_tooltip text="Pod" term_id="pod" >}}は、Kubernetesのアプリケーションの基本的なビルディングブロックです。Podは破棄可能かつ置き換え可能であることが想定されているため、一度Podが作成されると新しいコンテナを追加することはできません。その代わりに、通常は{{< glossary_tooltip text="Deployment" term_id="deployment" >}}を使用した制御されたやり方でPodを削除して置き換えます。
 
-Sometimes it's necessary to inspect the state of an existing Pod, however, for
-example to troubleshoot a hard-to-reproduce bug. In these cases you can run
-an ephemeral container in an existing Pod to inspect its state and run
-arbitrary commands.
+たとえば、再現困難なバグのトラブルシューティングなどのために、すでに存在するPodの状態を調査する必要が出てくることがあります。このような場合、既存のPod内でephemeralコンテナを実行することで、Podの状態を調査したり、任意のコマンドを実行したりできます。
 
-### What is an ephemeral container?
+### ephemeralコンテナとは何か？
 
-Ephemeral containers differ from other containers in that they lack guarantees
-for resources or execution, and they will never be automatically restarted, so
-they are not appropriate for building applications.  Ephemeral containers are
-described using the same `ContainerSpec` as regular containers, but many fields
-are incompatible and disallowed for ephemeral containers.
+ephemeralコンテナは、他のコンテナと異なり、リソースや実行が保証されず、自動的に再起動されることも決してないため、アプリケーションを構築する目的には適しません。ephemeralコンテナは、普通のコンテナと同じ`ContainerSpec`で記述されますが、多くのフィールドに互換性がなかったり、使用できなくなっています。
 
-- Ephemeral containers may not have ports, so fields such as `ports`,
-  `livenessProbe`, `readinessProbe` are disallowed.
-- Pod resource allocations are immutable, so setting `resources` is disallowed.
-- For a complete list of allowed fields, see the [EphemeralContainer reference
-  documentation](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ephemeralcontainer-v1-core).
+- ephemeralコンテナはポートを持つことができないため、`ports`、`livenessProbe`、`readinessProbe`などの使用が禁止されています。
+- Podリソースの割り当てはイミュータブルであるため、`resources`の設定が禁止されています。
+- 利用が許可されているフィールドの一覧については、[EphemeralContainerのリファレンスドキュメント](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ephemeralcontainer-v1-core)を参照してください。
 
-Ephemeral containers are created using a special `ephemeralcontainers` handler
-in the API rather than by adding them directly to `pod.spec`, so it's not
-possible to add an ephemeral container using `kubectl edit`.
+ephemeralコンテナは、直接`pod.spec`に追加するのではなく、API内の特別な`ephemeralcontainers`ハンドラを使用して作成します。そのため、ephemeralコンテナを`kubectl edit`を使用して追加することはできません。
 
-Like regular containers, you may not change or remove an ephemeral container
-after you have added it to a Pod.
+ephemeralコンテナをPodに追加した後は、通常のコンテナのようにephemeralコンテナを変更または削除することはできません。
 
-## Uses for ephemeral containers
+## ephemeralコンテナの用途
 
-Ephemeral containers are useful for interactive troubleshooting when `kubectl
-exec` is insufficient because a container has crashed or a container image
-doesn't include debugging utilities.
+ephemeralコンテナは、コンテナがクラッシュしてしまったり、コンテナイメージにデバッグ用ユーティリティが同梱されていない場合など、`kubectl exec`では不十分なときにインタラクティブなトラブルシューティングを行うために役立ちます。
 
-In particular, [distroless images](https://github.com/GoogleContainerTools/distroless)
-enable you to deploy minimal container images that reduce attack surface
-and exposure to bugs and vulnerabilities. Since distroless images do not include a
-shell or any debugging utilities, it's difficult to troubleshoot distroless
-images using `kubectl exec` alone.
+特に、[distrolessイメージ](https://github.com/GoogleContainerTools/distroless)を利用すると、攻撃対象領域を減らし、バグや脆弱性を露出する可能性を減らせる最小のコンテナイメージをデプロイできるようになります。distrolessイメージにはシェルもデバッグ用のユーティリティも含まれないため、`kubectl exec`のみを使用してdistrolessイメージのトラブルシューティングを行うのは困難です。
 
-When using ephemeral containers, it's helpful to enable [process namespace
-sharing](/docs/tasks/configure-pod-container/share-process-namespace/) so
-you can view processes in other containers.
+ephemeralコンテナを利用する場合には、他のコンテナ内のプロセスにアクセスできるように、[プロセス名前空間の共有](/ja/docs/tasks/configure-pod-container/share-process-namespace/)を有効にすると便利です。
 
-See [Debugging with Ephemeral Debug Container](
-/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)
-for examples of troubleshooting using ephemeral containers.
+ephemeralコンテナを利用してトラブルシューティングを行う例については、[デバッグ用のephemeralコンテナを使用してデバッグする](/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)を参照してください。
 
 ## Ephemeral containers API
 
 {{< note >}}
-The examples in this section require the `EphemeralContainers` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/) to be
-enabled, and Kubernetes client and server version v1.16 or later.
+このセクションの例を実行するには、`EphemeralContainers`[フィーチャーゲート](/ja/docs/reference/command-line-tools-reference/feature-gates/)を有効にして、Kubernetesクライアントとサーバーのバージョンをv1.16以上にする必要があります。
 {{< /note >}}
 
-The examples in this section demonstrate how ephemeral containers appear in
-the API. You would normally use `kubectl alpha debug` or another `kubectl`
-[plugin](/docs/tasks/extend-kubectl/kubectl-plugins/) to automate these steps
-rather than invoking the API directly.
+このセクションの例では、API内でephemeralコンテナを表示する方法を示します。通常は、APIを直接呼び出すのではなく、`kubectl alpha debug`やその他の`kubectl`[プラグイン](/docs/tasks/extend-kubectl/kubectl-plugins/)を使用して、これらのステップを自動化します。
 
-Ephemeral containers are created using the `ephemeralcontainers` subresource
-of Pod, which can be demonstrated using `kubectl --raw`. First describe
-the ephemeral container to add as an `EphemeralContainers` list:
+ephemeralコンテナは、Podの`ephemeralcontainers`サブリソースを使用して作成されます。このサブリソースは、`kubectl --raw`を使用して確認できます。まずはじめに、以下に`EphemeralContainers`リストとして追加するためのephemeralコンテナを示します。
 
 ```json
 {
@@ -119,13 +75,13 @@ the ephemeral container to add as an `EphemeralContainers` list:
 }
 ```
 
-To update the ephemeral containers of the already running `example-pod`:
+すでに実行中の`example-pod`のephemeralコンテナを更新するには、次のコマンドを実行します。
 
 ```shell
-kubectl replace --raw /api/v1/namespaces/default/pods/example-pod/ephemeralcontainers  -f ec.json
+kubectl replace --raw /api/v1/namespaces/default/pods/example-pod/ephemeralcontainers -f ec.json
 ```
 
-This will return the new list of ephemeral containers:
+このコマンドを実行すると、新しいephemeralコンテナのリストが返されます。
 
 ```json
 {
@@ -158,7 +114,7 @@ This will return the new list of ephemeral containers:
 }
 ```
 
-You can view the state of the newly created ephemeral container using `kubectl describe`:
+新しく作成されたephemeralコンテナの状態を確認するには、`kubectl describe`を使用します。
 
 ```shell
 kubectl describe pod example-pod
@@ -184,12 +140,8 @@ Ephemeral Containers:
 ...
 ```
 
-You can interact with the new ephemeral container in the same way as other
-containers using `kubectl attach`, `kubectl exec`, and `kubectl logs`, for
-example:
+新しいephemeralコンテナとやりとりをするには、他のコンテナと同じように、`kubectl attach`、`kubectl exec`、`kubectl logs`などのコマンドが利用できます。例えば、次のようなコマンドが実行できます。
 
 ```shell
 kubectl attach -it example-pod -c debugger
 ```
-
-

From 95951b85086c901a506b924dd3e277fb4b6ff254 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Thu, 17 Sep 2020 18:31:06 +0900
Subject: [PATCH 348/496] Translate contribute/review/index into japanese.

---
 content/ja/docs/contribute/review/_index.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 content/ja/docs/contribute/review/_index.md

diff --git a/content/ja/docs/contribute/review/_index.md b/content/ja/docs/contribute/review/_index.md
new file mode 100644
index 0000000000..01fcdca0b7
--- /dev/null
+++ b/content/ja/docs/contribute/review/_index.md
@@ -0,0 +1,14 @@
+---
+title: 変更のレビュー
+weight: 30
+---
+
+<!-- overview -->
+
+このセクションでは、コンテンツのレビュー方法について説明します。
+
+
+
+<!-- body -->
+
+

From ba9bb9d916946ca1c9930a5cf106aa59f9a276d3 Mon Sep 17 00:00:00 2001
From: povsister <pov@mahou-shoujo.moe>
Date: Thu, 17 Sep 2020 17:41:20 +0800
Subject: [PATCH 349/496] Fix non-existing taint example

---
 .../docs/reference/access-authn-authz/admission-controllers.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md
index 0684ae22b7..f98d1805e4 100644
--- a/content/en/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md
@@ -166,7 +166,7 @@ This admission controller sets the default forgiveness toleration for pods to to
 the taints `notready:NoExecute` and `unreachable:NoExecute` for 5 minutes,
 if the pods don't already have toleration for taints
 `node.kubernetes.io/not-ready:NoExecute` or
-`node.alpha.kubernetes.io/unreachable:NoExecute`.
+`node.kubernetes.io/unreachable:NoExecute`.
 
 ### DenyExecOnPrivileged {#denyexeconprivileged}
 

From d9d8003fe07cffb8cdcd33cbce6d1c9f01bdb688 Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Thu, 17 Sep 2020 11:44:50 +0200
Subject: [PATCH 350/496] Fixing some language issues on logging.md (FR)

Signed-off-by: didier <durand.didier@gmail.com>
---
 .../cluster-administration/logging.md         | 36 +++++++++----------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/content/fr/docs/concepts/cluster-administration/logging.md b/content/fr/docs/concepts/cluster-administration/logging.md
index b6384efe47..88db262738 100644
--- a/content/fr/docs/concepts/cluster-administration/logging.md
+++ b/content/fr/docs/concepts/cluster-administration/logging.md
@@ -12,18 +12,18 @@ weight: 60
 La journalisation des évènements systèmes et d'applications peut aider à
 comprendre ce qui se passe dans un cluster. Les journaux sont particulièrement
 utiles pour débogguer les problèmes et surveiller l'activité du cluster. La
-plupart des application modernes ont un mécanisme de journalisation
+plupart des applications modernes ont un mécanisme de journalisation
 d'évènements, et la plupart des environnements d'exécution de conteneurs ont été
 conçus pour supporter la journalisation des évènements. La méthode de
 journalisation la plus facile et la plus répandue pour des applications
 conteneurisées est d'écrire dans les flux de sortie standard et d'erreur
-standard (`stdout` et `stderr`).
+standards (`stdout` et `stderr`).
 
 Malgré cela, la fonctionnalité de journalisation fournie nativement par
 l'environnement d'exécution de conteneurs n'est pas suffisante comme solution
-complète de journalisation. Quand un conteneur crash, quand un Pod est expulsé
+complète de journalisation. Quand un conteneur crashe, quand un Pod est expulsé
 ou quand un nœud disparaît, il est utile de pouvoir accéder au journal
-d'événement de l'application. C'est pourquoi les journaux doivent avoir leur
+d'événements de l'application. C'est pourquoi les journaux doivent avoir leur
 propre espace de stockage et un cycle de vie indépendamment des nœuds, Pods ou
 conteneurs. Ce concept est appelé _journalisation des évènements au niveau du
 cluster_ (cluster-level-logging). Un backend dédié pour stocker, analyser et
@@ -92,15 +92,15 @@ logs`] (/docs/reference/generated/kubectl/kubectl-commands#logs)
 nœud](/images/docs/user-guide/logging/logging-node-level.png)
 
 Tout ce qu'une application conteneurisée écrit sur `stdout` ou `stderr` est pris
-en compte et redirigé par l'environment d'exécution des conteneurs. Par exemple,
-Docker redirige ces deux flux à un [driver de journalisation
+en compte et redirigé par l'environnement d'exécution des conteneurs. Par exemple,
+Docker redirige ces deux flux vers un [driver de journalisation
 (EN)](https://docs.docker.com/config/containers/logging/configure/) qui est
 configuré dans Kubernetes pour écrire dans un fichier au format json.
 
 {{< note >}} Le driver json de Docker traite chaque ligne comme un message
 différent. Avec ce driver il n'y a pas de support direct pour des messages
 multi-lignes. Il faut donc traiter les messages multi-lignes au niveau de
-l'agent de journalisation ou plus haut. {{< /note >}}
+l'agent de journalisation ou plus en amont encore. {{< /note >}}
 
 Par défaut quand un conteneur redémarre, le kubelet ne conserve le journal que
 du dernier conteneur terminé. Quand un Pod est expulsé d'un nœud, tous ses
@@ -119,11 +119,11 @@ l'environnement d'exécution des conteneurs pour que la rotation des journaux
 s'exécute automatiquement, e.g. en utilisant le paramètre `log-opt` de Docker.
 Dans le script `kube-up.sh`, c'est cette méthode qui est utilisée pour des
 images COS sur GCP et sinon c'est la première méthode dans tous les autres cas.
-Quel que soit la méthode choisie par `kube-up.sh` la rotation est configurée par
-defaut quand la taille d'un journal atteint 10 Mo.
+Quelle que soit la méthode choisie par `kube-up.sh` la rotation est configurée par
+défaut quand la taille d'un journal atteint 10 Mo.
 
 Ce [script][cosConfigureHelper] montre de manière détaillée comment `kube-up.sh`
-met en place la journalisation d'évènement pour des images COS sur GCP.
+met en place la journalisation d'évènements pour des images COS sur GCP.
 
 Quand [`kubectl logs`](/docs/reference/generated/kubectl/kubectl-commands#logs)
 s'exécute comme dans le premier exemple de journalisation simple le kubelet du
@@ -147,10 +147,10 @@ conteneur ou pas.
 Par exemple :
 
 * Le scheduler Kubernetes et kube-proxy s'exécutent dans un conteneur.
-* Kubelet et l'environment d'exécution de conteneurs, comme par exemple
+* Kubelet et l'environnement d'exécution de conteneurs, comme par exemple
 Docker, ne s'exécutent pas dans un conteneur.
 
-Sur les systèmes avec systemd, kubelet et l'environment d'exécution de
+Sur les systèmes avec systemd, kubelet et l'environnement d'exécution de
 conteneurs écrivent dans journald. Si systemd n'est pas présent, ils écrivent
 dans un fichier `.log` dans le répertoire `/var/log`.
 
@@ -198,7 +198,7 @@ le nœud. Ces deux dernières options sont obsolètes et fortement découragées
 Utiliser un agent de journalisation au niveau du nœud est l'approche la plus
 commune et recommandée pour un cluster Kubernetes parce qu'un seul agent par
 nœud est créé et qu'aucune modification dans l'application n'est nécessaire.
-Mais cette approche _ne fonctionne correctement que pour les flux standard de
+Mais cette approche _ne fonctionne correctement que pour les flux standards de
 sortie et d'erreurs des applications_.
 
 Kubernetes ne définit pas d'agent de journalisation, mais deux agents de
@@ -288,13 +288,13 @@ Notez que bien que la consommation en CPU et mémoire soit faible ( de l'ordre d
 quelques milicores pour la CPU et quelques mégaoctets pour la mémoire),  ecrire
 les évènements dans un fichier et les envoyer ensuite dans `stdout` peut doubler
 l'espace disque utilisé. Quand une application écrit dans un seul fichier de
-journal il est préférable de configurer `/dev/stdout` comme destination plutôt
+journal, il est préférable de configurer `/dev/stdout` comme destination plutôt
 que d'implémenter un conteneur side-car diffusant.
 
 Les conteneurs side-car peuvent être utilisés pour faire la rotation des
-journaux quand l'application n'en est pas capable elle même. Un exemple serait
+journaux quand l'application n'en est pas capable elle-même. Un exemple serait
 un petit conteneur side-car qui effectuerait cette rotation périodiquement.
-Toutefois il est recommandé d'utiliser `stdout` et `stderr` directement et de
+Toutefois, il est recommandé d'utiliser `stdout` et `stderr` directement et de
 laisser la rotation et les politiques de rétentions au kubelet.
 
 ### Conteneur side-car avec un agent de journalisation
@@ -303,13 +303,13 @@ laisser la rotation et les politiques de rétentions au kubelet.
 journalisation](/images/docs/user-guide/logging/logging-with-sidecar-agent.png)
 
 Quand un agent de journalisation au niveau du nœud n'est pas assez flexible pour
-votre utilisation vous pouvez créer un conteneur side-car avec un agent de
+votre utilisation, vous pouvez créer un conteneur side-car avec un agent de
 journalisation séparé que vous avez configuré spécialement pour qu'il s'exécute
 avec votre application.
 
 {{< note >}}
 Utiliser un agent de journalisation dans un conteneur side-car peut entraîner
-une consommation de ressource significative. De plus vous n'avez plus accès aux
+une consommation de ressources significative. De plus vous n'avez plus accès aux
 journaux avec la commande `kubectl` parce qu'ils ne sont plus gérés par
 kubelet.
 {{< /note >}}

From 77b1c28c84ea7973f58aceaab9e5ba0abac826b6 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Thu, 17 Sep 2020 14:51:34 +0800
Subject: [PATCH 351/496] [zh] update zh/docs/concepts page, fix 23920

---
 .../zh/docs/concepts/configuration/_index.md  |  3 +-
 content/zh/docs/concepts/containers/_index.md | 61 ++++++++++++++++++-
 content/zh/docs/concepts/overview/_index.md   |  1 +
 content/zh/docs/concepts/policy/_index.md     |  3 +-
 .../concepts/scheduling-eviction/_index.md    |  3 +-
 content/zh/docs/concepts/security/_index.md   |  1 +
 .../concepts/services-networking/_index.md    | 17 +++++-
 content/zh/docs/concepts/storage/_index.md    |  1 +
 content/zh/docs/concepts/workloads/_index.md  |  1 +
 9 files changed, 86 insertions(+), 5 deletions(-)

diff --git a/content/zh/docs/concepts/configuration/_index.md b/content/zh/docs/concepts/configuration/_index.md
index c2419c817b..4cbc3843b8 100644
--- a/content/zh/docs/concepts/configuration/_index.md
+++ b/content/zh/docs/concepts/configuration/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "配置"
-weight: 70
+weight: 80
+description: Kubernetes 为配置 Pods 提供的资源。
 ---
diff --git a/content/zh/docs/concepts/containers/_index.md b/content/zh/docs/concepts/containers/_index.md
index b4c6dc3821..c627f66f1e 100644
--- a/content/zh/docs/concepts/containers/_index.md
+++ b/content/zh/docs/concepts/containers/_index.md
@@ -1,4 +1,63 @@
 ---
 title: "容器"
-weight: 50
+weight: 40
+description: 打包应用及其运行依赖环境的技术。
+content_type: concept
+no_list: true
 ---
+
+<!-- overview -->
+<!--
+Each container that you run is repeatable; the standardization from having
+dependencies included means that you get the same behavior wherever you
+run it.
+
+Containers decouple applications from underlying host infrastructure.
+This makes deployment easier in different cloud or OS environments.
+-->
+
+每个运行的容器都是可重复的；
+包含依赖环境在内的标准，意味着无论您在哪里运行它，您都会得到相同的行为。
+
+容器将应用程序从底层的主机设施中解耦。
+这使得在不同的云或 OS 环境中部署更加容易。
+
+
+
+
+<!-- body -->
+<!--
+## Container images
+A [container image](/docs/concepts/containers/images/) is a ready-to-run
+software package, containing everything needed to run an application:
+the code and any runtime it requires, application and system libraries,
+and default values for any essential settings.
+
+By design, a container is immutable: you cannot change the code of a
+container that is already running. If you have a containerized application
+and want to make changes, you need to build a new image that includes
+the change, then recreate the container to start from the updated image.
+-->
+
+## 容器镜像 {#container-images}
+[容器镜像](/zh/docs/concepts/containers/images/)是一个随时可以运行的软件包，
+包含运行应用程序所需的一切：代码和它需要的所有运行时、应用程序和系统库，以及一些基本设置的默认值。
+
+根据设计，容器是不可变的：你不能更改已经运行的容器的代码。
+如果有一个容器化的应用程序需要修改，则需要构建包含更改的新镜像，然后再基于新构建的镜像重新运行容器。
+
+<!-- ## Container runtimes -->
+## 容器运行时  {#container-runtimes}
+
+{{< glossary_definition term_id="container-runtime" length="all" >}}
+
+## {{% heading "whatsnext" %}}
+<!--
+* Read about [container images](/docs/concepts/containers/images/)
+* Read about [Pods](/docs/concepts/workloads/pods/)
+-->
+
+* 进一步阅读[容器镜像](/zh/docs/concepts/containers/images/)
+* 进一步阅读 [Pods](/zh/docs/concepts/workloads/pods/)
+
+
diff --git a/content/zh/docs/concepts/overview/_index.md b/content/zh/docs/concepts/overview/_index.md
index 932a448363..b255293d26 100644
--- a/content/zh/docs/concepts/overview/_index.md
+++ b/content/zh/docs/concepts/overview/_index.md
@@ -1,4 +1,5 @@
 ---
 title: 概述
 weight: 20
+description: 获得 Kubernetes 及其构件的高层次概要。
 ---
diff --git a/content/zh/docs/concepts/policy/_index.md b/content/zh/docs/concepts/policy/_index.md
index 68973c7a85..fa69e7cae6 100644
--- a/content/zh/docs/concepts/policy/_index.md
+++ b/content/zh/docs/concepts/policy/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "策略"
-weight: 160
+weight: 90
+description: 可配置的、可应用到一组资源的策略。
 ---
diff --git a/content/zh/docs/concepts/scheduling-eviction/_index.md b/content/zh/docs/concepts/scheduling-eviction/_index.md
index 742a054e40..f7388ba108 100644
--- a/content/zh/docs/concepts/scheduling-eviction/_index.md
+++ b/content/zh/docs/concepts/scheduling-eviction/_index.md
@@ -1,4 +1,5 @@
 ---
-title: "调度和驱逐(Scheduling and Eviction)"
+title: 调度和驱逐 (Scheduling and Eviction)
 weight: 90
+description: 在Kubernetes中，调度 (Scheduling) 指的是确保 Pods 匹配到合适的节点，以便 kubelet 能够运行它们。驱逐 (Eviction) 是在资源匮乏的节点上，主动让一个或多个 Pods 失效的过程。
 ---
diff --git a/content/zh/docs/concepts/security/_index.md b/content/zh/docs/concepts/security/_index.md
index ec97d8f155..2f9cec262c 100644
--- a/content/zh/docs/concepts/security/_index.md
+++ b/content/zh/docs/concepts/security/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "安全"
 weight: 81
+description: 确保云原生工作负载安全的一组概念。
 ---
diff --git a/content/zh/docs/concepts/services-networking/_index.md b/content/zh/docs/concepts/services-networking/_index.md
index b8cc1a2f58..f322d74216 100644
--- a/content/zh/docs/concepts/services-networking/_index.md
+++ b/content/zh/docs/concepts/services-networking/_index.md
@@ -1,4 +1,19 @@
 ---
 title: "服务、负载均衡和联网"
-weight: 80
+weight: 60
+description: Kubernetes 网络背后的概念和资源。
 ---
+
+<!--
+Kubernetes networking addresses four concerns:
+- Containers within a Pod use networking to communicate via loopback.
+- Cluster networking provides communication between different Pods.
+- The Service resource lets you expose an application running in Pods to be reachable from outside your cluster.
+- You can also use Services to publish services only for consumption inside your cluster.
+-->
+
+Kubernetes 网络解决四方面的问题：
+- 一个 Pod 中的容器之间通过本地回路（loopback）通信。
+- 集群网络在不同 pod 之间提供通信。
+- Service 资源允许你对外暴露 Pods 中运行的应用程序，以支持来自于集群外部的访问。
+- 可以使用 Services 来发布仅供集群内部使用的服务。
\ No newline at end of file
diff --git a/content/zh/docs/concepts/storage/_index.md b/content/zh/docs/concepts/storage/_index.md
index c6accc5314..ce60d3a46a 100644
--- a/content/zh/docs/concepts/storage/_index.md
+++ b/content/zh/docs/concepts/storage/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "存储"
 weight: 70
+description: 为集群中的 Pods 提供长期和临时存储的方法。
 ---
diff --git a/content/zh/docs/concepts/workloads/_index.md b/content/zh/docs/concepts/workloads/_index.md
index de9c41d3c2..525fab9044 100644
--- a/content/zh/docs/concepts/workloads/_index.md
+++ b/content/zh/docs/concepts/workloads/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "工作负载"
 weight: 50
+description: 理解 Pods，Kubernetes 中可部署的最小计算对象，以及辅助它运行它们的高层抽象对象。
 ---

From d2d808f95fbf33b93609e0bcf81cd383a54bc962 Mon Sep 17 00:00:00 2001
From: yutachaos <18604471+yutachaos@users.noreply.github.com>
Date: Thu, 17 Sep 2020 20:29:45 +0900
Subject: [PATCH 352/496] fixed typo

Signed-off-by: yutachaos <18604471+yutachaos@users.noreply.github.com>
---
 content/ja/docs/concepts/policy/resource-quotas.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ja/docs/concepts/policy/resource-quotas.md b/content/ja/docs/concepts/policy/resource-quotas.md
index 0cc930e473..c6b2ff51e8 100644
--- a/content/ja/docs/concepts/policy/resource-quotas.md
+++ b/content/ja/docs/concepts/policy/resource-quotas.md
@@ -60,7 +60,7 @@ weight: 10
 
 上記で取り上げたリソースに加えて、Kubernetes v1.10において、[拡張リソース](/docs/concepts/configuration/manage-compute-resources-container/#extended-resources)のためのリソースクォータのサポートが追加されました。
 
-拡張リソースに対するオーバーコミットが禁止されているのと同様に、リソースクォータで拡張リソース用に`requests`と`lmits`の両方を指定しても意味がありません。現在、拡張リソースに対しては`requests.`というプレフィックスのついたクォータアイテムのみ設定できます。
+拡張リソースに対するオーバーコミットが禁止されているのと同様に、リソースクォータで拡張リソース用に`requests`と`limits`の両方を指定しても意味がありません。現在、拡張リソースに対しては`requests.`というプレフィックスのついたクォータアイテムのみ設定できます。
 
 GPUリソースを例にすると、もしリソース名が`nvidia.com/gpu`で、ユーザーが名前空間内でリクエストされるGPUの上限を4に指定するとき、下記のようにリソースクォータを定義します。
 

From b600e012fc2ca6e60241404a8294282bdd2c0d4e Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Mon, 31 Aug 2020 22:55:38 +0800
Subject: [PATCH 353/496] translate storage capacity into Chinese

---
 .../docs/concepts/storage/storage-capacity.md | 223 ++++++++++++++++++
 1 file changed, 223 insertions(+)
 create mode 100644 content/zh/docs/concepts/storage/storage-capacity.md

diff --git a/content/zh/docs/concepts/storage/storage-capacity.md b/content/zh/docs/concepts/storage/storage-capacity.md
new file mode 100644
index 0000000000..24c86537b8
--- /dev/null
+++ b/content/zh/docs/concepts/storage/storage-capacity.md
@@ -0,0 +1,223 @@
+---
+title: 存储容量
+content_type: concept
+weight: 45
+---
+
+<!-- overview -->
+<!--
+Storage capacity is limited and may vary depending on the node on
+which a pod runs: network-attached storage might not be accessible by
+all nodes, or storage is local to a node to begin with.
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+This page describes how Kubernetes keeps track of storage capacity and
+how the scheduler uses that information to schedule Pods onto nodes
+that have access to enough storage capacity for the remaining missing
+volumes. Without storage capacity tracking, the scheduler may choose a
+node that doesn't have enough capacity to provision a volume and
+multiple scheduling retries will be needed.
+
+Tracking storage capacity is supported for {{< glossary_tooltip
+text="Container Storage Interface" term_id="csi" >}} (CSI) drivers and
+[needs to be enabled](#enabling-storage-capacity-tracking) when installing a CSI driver.
+-->
+存储容量是有限的，并且会因为运行 pod 的节点不同而变化：网络存储可能并非所有节点都能够访问，或者对于某个节点存储是本地的。
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+本页面描述了 Kubernetes 如何跟踪存储容量以及调度程序如何为了余下的尚未挂载的卷使用该信息将 Pod 调度到能够访问到足够存储容量的节点上。
+如果没有跟踪存储容量，调度程序可能会选择一个没有足够容量来提供卷的节点，并且需要多次调度重试。
+
+{{< glossary_tooltip text="容器存储接口" term_id="csi" >}}（CSI）驱动程序支持跟踪存储容量，
+并且在安装 CSI 驱动程序时[需要启用](#enabling-storage-capacity-tracking)该功能。
+
+<!-- body -->
+<!--
+## API
+
+There are two API extensions for this feature:
+- [CSIStorageCapacity](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#csistoragecapacity-v1alpha1-storage-k8s-io) objects:
+  these get produced by a CSI driver in the namespace
+  where the driver is installed. Each object contains capacity
+  information for one storage class and defines which nodes have
+  access to that storage.
+- [The `CSIDriverSpec.StorageCapacity` field](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#csidriverspec-v1-storage-k8s-io):
+  when set to `true`, the Kubernetes scheduler will consider storage
+  capacity for volumes that use the CSI driver.
+-->
+## API
+
+这个特性有两个 API 扩展接口：
+- [CSIStorageCapacity](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#csistoragecapacity-v1alpha1-storage-k8s-io) 
+对象：这些对象由 CSI 驱动程序在安装驱动程序的命名空间中产生。每个对象都包含一个存储类的容量信息，并定义哪些节点可以访问该存储。
+- [`CSIDriverSpec.StorageCapacity` 字段](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#csidriverspec-v1-storage-k8s-io)：
+设置为 true 时，Kubernetes 调度程序将考虑使用 CSI 驱动程序的卷的存储容量。
+
+<!--
+## Scheduling
+
+Storage capacity information is used by the Kubernetes scheduler if:
+- the `CSIStorageCapacity` feature gate is true,
+- a Pod uses a volume that has not been created yet,
+- that volume uses a {{< glossary_tooltip text="StorageClass" term_id="storage-class" >}} which references a CSI driver and
+  uses `WaitForFirstConsumer` [volume binding
+  mode](/docs/concepts/storage/storage-classes/#volume-binding-mode),
+  and
+- the `CSIDriver` object for the driver has `StorageCapacity` set to
+  true.
+
+In that case, the scheduler only considers nodes for the Pod which
+have enough storage available to them. This check is very
+simplistic and only compares the size of the volume against the
+capacity listed in `CSIStorageCapacity` objects with a topology that
+includes the node.
+
+For volumes with `Immediate` volume binding mode, the storage driver
+decides where to create the volume, independently of Pods that will
+use the volume. The scheduler then schedules Pods onto nodes where the
+volume is available after the volume has been created.
+
+For [CSI ephemeral volumes](/docs/concepts/storage/volumes/#csi),
+scheduling always happens without considering storage capacity. This
+is based on the assumption that this volume type is only used by
+special CSI drivers which are local to a node and do not need
+significant resources there.
+-->
+## 调度
+
+如果有以下情况，存储容量信息将会被 Kubernetes 调度程序使用：
+- `CSIStorageCapacity` 特性门控被设置为 true，
+- Pod 使用的卷还没有被创建，
+- 卷使用引用了 CSI 驱动的 {{< glossary_tooltip text="StorageClass" term_id="storage-class" >}}，
+并且使用了 `WaitForFirstConsumer` [卷绑定模式](/zh/docs/concepts/storage/storage-classes/#volume-binding-mode)，
+- 驱动程序的 `CSIDriver` 对象的 `StorageCapacity` 被设置为 true。
+
+在这种情况下，调度程序仅考虑将 Pod 调度到有足够存储容量的节点上。这个检测非常简单，
+仅将卷的大小与 `CSIStorageCapacity` 对象中列出的容量进行比较，并使用包含该节点的拓扑。
+
+对于具有 `Immediate` 卷绑定模式的卷，存储驱动程序将决定在何处创建该卷，而不取决于将使用该卷的 Pod。
+然后，调度程序将 Pod 调度到创建卷后可使用该卷的节点上。
+
+对于 [CSI 临时卷](/zh/docs/concepts/storage/volumes/#csi)，调度总是在不考虑存储容量的情况下进行。
+这是基于这样的假设：该卷类型仅由节点本地的特殊 CSI 驱动程序使用，并且不需要大量资源。
+
+<!--
+## Rescheduling
+
+When a node has been selected for a Pod with `WaitForFirstConsumer`
+volumes, that decision is still tentative. The next step is that the
+CSI storage driver gets asked to create the volume with a hint that the
+volume is supposed to be available on the selected node.
+
+Because Kubernetes might have chosen a node based on out-dated
+capacity information, it is possible that the volume cannot really be
+created. The node selection is then reset and the Kubernetes scheduler
+tries again to find a node for the Pod.
+-->
+## 重新调度
+
+当为带有 `WaitForFirstConsumer` 的卷的 Pod 来选择节点时，该决定仍然是暂定的。
+下一步是要求 CSI 存储驱动程序创建卷，并提示该卷在被选择的节点上可用。
+
+因为 Kubernetes 可能会根据已经过时的存储容量信息来选择一个节点，因此可能无法真正创建卷。
+然后就会重置节点选择，Kubernetes 调度器会再次尝试为 Pod 查找节点。
+
+<!--
+## Limitations
+
+Storage capacity tracking increases the chance that scheduling works
+on the first try, but cannot guarantee this because the scheduler has
+to decide based on potentially out-dated information. Usually, the
+same retry mechanism as for scheduling without any storage capacity
+information handles scheduling failures.
+
+One situation where scheduling can fail permanently is when a Pod uses
+multiple volumes: one volume might have been created already in a
+topology segment which then does not have enough capacity left for
+another volume. Manual intervention is necessary to recover from this,
+for example by increasing capacity or deleting the volume that was
+already created. [Further
+work](https://github.com/kubernetes/enhancements/pull/1703) is needed
+to handle this automatically.
+-->
+## 限制
+
+存储容量跟踪增加了调度器第一次尝试即成功的机会，但是并不能保证这一点，因为调度器必须根据可能过期的信息来进行决策。
+通常，与没有任何存储容量信息的调度相同的重试机制可以处理调度失败。
+
+当 Pod 使用多个卷时，调度可能会永久失败：一个卷可能已经在拓扑段中创建，而该卷又没有足够的容量来创建另一个卷，
+要想从中恢复，必须要进行手动干预，比如通过增加存储容量或者删除已经创建的卷。
+需要[进一步工作](https://github.com/kubernetes/enhancements/pull/1703)来自动处理此问题。
+
+<!--
+## Enabling storage capacity tracking
+
+Storage capacity tracking is an *alpha feature* and only enabled when
+the `CSIStorageCapacity` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/) and
+the `storage.k8s.io/v1alpha1` {{< glossary_tooltip text="API group" term_id="api-group" >}} are enabled. For details on
+that, see the `--feature-gates` and `--runtime-config` [kube-apiserver
+parameters](/docs/reference/command-line-tools-reference/kube-apiserver/).
+-->
+## 开启存储容量跟踪
+
+存储容量跟踪是一个 *alpha 特性*，只有当 `CSIStorageCapacity` [特性门控](/docs/reference/command-line-tools-reference/feature-gates/)
+和 `storage.k8s.io/v1alpha1` {{< glossary_tooltip text="API 组" term_id="api-group" >}}启用时才能启用。
+更多详细信息，可以查看`--feature-gates` 和 `--runtime-config` [kube-apiserver 参数](/docs/reference/command-line-tools-reference/kube-apiserver/)。
+
+<!--
+A quick check
+whether a Kubernetes cluster supports the feature is to list
+CSIStorageCapacity objects with:
+```shell
+kubectl get csistoragecapacities --all-namespaces
+```
+
+If your cluster supports CSIStorageCapacity, the response is either a list of CSIStorageCapacity objects or:
+```
+No resources found
+```
+-->
+快速检查 Kubernetes 集群是否支持这个特性，可以通过下面命令列出 CSIStorageCapacity 对象：
+
+```shell
+kubectl get csistoragecapacities --all-namespaces
+```
+
+如果集群支持 CSIStorageCapacity，就会返回 CSIStorageCapacity 的对象列表或者：
+```
+No resources found
+```
+
+<!--
+If not supported, this error is printed instead:
+```
+error: the server doesn't have a resource type "csistoragecapacities"
+```
+
+In addition to enabling the feature in the cluster, a CSI
+driver also has to
+support it. Please refer to the driver's documentation for
+details.
+-->
+如果不支持，下面这个错误就会被打印出来：
+```
+error: the server doesn't have a resource type "csistoragecapacities"
+```
+
+除了在集群中启用该功能外，CSI 驱动程序还必须支持它。有关详细信息，请参阅驱动程序的文档。
+
+
+## {{% heading "whatsnext" %}}
+
+<!--
+ - For more information on the design, see the
+[Storage Capacity Constraints for Pod Scheduling KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/1472-storage-capacity-tracking/README.md).
+- For more information on further development of this feature, see the [enhancement tracking issue #1472](https://github.com/kubernetes/enhancements/issues/1472).
+- Learn about [Kubernetes Scheduler](/docs/concepts/scheduling-eviction/kube-scheduler/)
+-->
+- 想要获得更多该设计的信息，查看 [Storage Capacity Constraints for Pod Scheduling KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/1472-storage-capacity-tracking/README.md)。
+- 有关此功能的进一步开发信息，查看[enhancement tracking issue #1472](https://github.com/kubernetes/enhancements/issues/1472)。
+- 学习 [Kubernetes 调度器](/zh/docs/concepts/scheduling-eviction/kube-scheduler/)。
\ No newline at end of file

From 865160e2297f56aaf27ae2ed867dfd8edb2b8f97 Mon Sep 17 00:00:00 2001
From: bryan <fancc24@vip.qq.com>
Date: Fri, 31 Jul 2020 17:15:08 +0800
Subject: [PATCH 354/496] translate overview cloud native security into Chinese

---
 content/zh/docs/concepts/security/overview.md | 274 ++++++++++++++++++
 1 file changed, 274 insertions(+)
 create mode 100644 content/zh/docs/concepts/security/overview.md

diff --git a/content/zh/docs/concepts/security/overview.md b/content/zh/docs/concepts/security/overview.md
new file mode 100644
index 0000000000..b86a394365
--- /dev/null
+++ b/content/zh/docs/concepts/security/overview.md
@@ -0,0 +1,274 @@
+---
+title: 云原生安全概述
+content_type: concept
+weight: 10
+---
+
+<!-- overview -->
+<!--
+This overview defines a model for thinking about Kubernetes security in the context of Cloud Native security.
+-->
+本概述定义了一个模型，用于在 Cloud Native 安全性上下文中考虑 Kubernetes 安全性。
+
+<!--
+This container security model provides suggestions, not proven information security policies.
+-->
+{{< warning >}}
+此容器安全模型只提供建议，而不是经过验证的信息安全策略。
+{{< /warning >}}
+
+<!-- body -->
+
+<!--
+## The 4C's of Cloud Native security
+
+You can think about security in layers. The 4C's of Cloud Native security are Cloud,
+Clusters, Containers, and Code.
+-->
+## 云原生安全的 4 个 C
+
+你可以分层去考虑安全性，云原生安全的 4 个 C 分别是云（Cloud）、集群（Cluster）、容器（Container）和代码（Code）。
+
+<!--
+This layered approach augments the [defense in depth](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))
+computing approach to security, which is widely regarded as a best practice for securing
+software systems.
+-->
+{{< note >}}
+这种分层方法增强了[深度防护方法](https://en.wikipedia.org/wiki/Defense_in_depth_(computing))在安全性方面的
+防御能力，该方法被广泛认为是保护软件系统的最佳实践。
+
+{{< /note >}}
+
+{{< figure src="/images/docs/4c.png" title="云原生安全的 4C" >}}
+
+<!--
+Each layer of the Cloud Native security model builds upon the next outermost layer.
+The Code layer benefits from strong base (Cloud, Cluster, Container) security layers.
+You cannot safeguard against poor security standards in the base layers by addressing
+security at the Code level.
+-->
+云原生安全模型的每一层都是基于下一个最外层，代码层受益于强大的基础安全层（云、集群、容器）。你无法通过在代码层解决安全问题来为基础层中糟糕的安全标准提供保护。
+
+## 云
+
+<!--
+In many ways, the Cloud (or co-located servers, or the corporate datacenter) is the
+[trusted computing base](https://en.wikipedia.org/wiki/Trusted_computing_base)
+of a Kubernetes cluster. If the Cloud layer is vulnerable (or
+configured in a vulnerable way) then there is no guarantee that the components built
+on top of this base are secure. Each cloud provider makes security recommendations
+for running workloads securely in their environment.
+-->
+在许多方面，云（或者位于同一位置的服务器，或者是公司数据中心）是 Kubernetes 集群中的
+[可信计算基](https://en.wikipedia.org/wiki/Trusted_computing_base)。
+如果云层容易受到攻击（或者被配置成了易受攻击的方式），就不能保证在此基础之上构建的组件是安全的。
+每个云提供商都会提出安全建议，以在其环境中安全地运行工作负载。
+
+<!--
+### Cloud provider security
+
+If you are running a Kubernetes cluster on your own hardware or a different cloud provider,
+consult your documentation for security best practices.
+Here are links to some of the popular cloud providers' security documentation:
+-->
+### 云提供商安全性
+
+如果您是在您自己的硬件或者其他不通的云提供商上运行 Kubernetes 集群，
+请查阅相关文档来获取最好的安全实践。
+
+下面是一些比较流行的云提供商的安全性文档链接：
+
+{{< table caption="云提供商安全" >}}
+
+IaaS 提供商        | 链接 |
+-------------------- | ------------ |
+Alibaba Cloud | https://www.alibabacloud.com/trust-center |
+Amazon Web Services | https://aws.amazon.com/security/ |
+Google Cloud Platform | https://cloud.google.com/security/ |
+IBM Cloud | https://www.ibm.com/cloud/security |
+Microsoft Azure | https://docs.microsoft.com/en-us/azure/security/azure-security |
+VMWare VSphere | https://www.vmware.com/security/hardening-guides.html |
+
+{{< /table >}}
+
+<!--
+### Infrastructure security {#infrastructure-security}
+
+Suggestions for securing your infrastructure in a Kubernetes cluster:
+
+{{< table caption="Infrastructure security" >}}
+
+Area of Concern for Kubernetes Infrastructure | Recommendation |
+--------------------------------------------- | -------------- |
+Network access to API Server (Control plane) | All access to the Kubernetes control plane is not allowed publicly on the internet and is controlled by network access control lists restricted to the set of IP addresses needed to administer the cluster.|
+Network access to Nodes (nodes) | Nodes should be configured to _only_ accept connections (via network access control lists)from the control plane on the specified ports, and accept connections for services in Kubernetes of type NodePort and LoadBalancer. If possible, these nodes should not be exposed on the public internet entirely.
+Kubernetes access to Cloud Provider API | Each cloud provider needs to grant a different set of permissions to the Kubernetes control plane and nodes. It is best to provide the cluster with cloud provider access that follows the [principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege) for the resources it needs to administer. The [Kops documentation](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles) provides information about IAM policies and roles.
+Access to etcd | Access to etcd (the datastore of Kubernetes) should be limited to the control plane only. Depending on your configuration, you should attempt to use etcd over TLS. More information can be found in the [etcd documentation](https://github.com/etcd-io/etcd/tree/master/Documentation).
+etcd Encryption | Wherever possible it's a good practice to encrypt all drives at rest, but since etcd holds the state of the entire cluster (including Secrets) its disk should especially be encrypted at rest.
+
+{{< /table >}}
+-->
+### 基础设施安全 {#infrastructure-security}
+
+关于在 Kubernetes 集群中保护你的基础设施的建议：
+
+{{< table caption="基础设施安全" >}}
+
+Kubetnetes 基础架构关注领域 | 建议 |
+--------------------------------------------- | -------------- |
+通过网络访问 API 服务（控制平面）|所有对 Kubernetes 控制平面的访问不允许在 Internet 上公开，同时应由网络访问控制列表控制，该列表包含管理集群所需的 IP 地址集。|
+通过网络访问 Node（节点）| 节点应配置为 _仅能_ 从控制平面上通过指定端口来接受（通过网络访问控制列表）连接，以及接受 NodePort 和 LoadBalancer 类型的 Kubernetes 服务连接。如果可能的话，这些节点不应完全暴露在公共互联网上。|
+Kubernetes 访问云提供商的 API | 每个云提供商都需要向 Kubernetes 控制平面和节点授予不同的权限集。为集群提供云提供商访问权限时，最好遵循对需要管理的资源的[最小特权原则](https://en.wikipedia.org/wiki/Principle_of_least_privilege)。[Kops 文档](https://github.com/kubernetes/kops/blob/master/docs/iam_roles.md#iam-roles)提供有关 IAM 策略和角色的信息。|
+访问 etcd | 对 etcd（Kubernetes 的数据存储）的访问应仅限于控制平面。根据配置情况，你应该尝试通过 TLS 来使用 etcd。更多信息可以在 [etcd 文档](https://github.com/etcd-io/etcd/tree/master/Documentation)中找到。|
+etcd 加密 | 在所有可能的情况下，最好对所有驱动器进行静态数据加密，但是由于 etcd 拥有整个集群的状态（包括机密信息），因此其磁盘更应该进行静态数据加密。|
+
+{{< /table >}}
+
+<!--
+## Cluster
+
+There are two areas of concern for securing Kubernetes:
+
+* Securing the cluster components that are configurable
+* Securing the applications which run in the cluster
+-->
+## 集群
+
+保护 Kubernetes 有两个方面需要注意：
+
+* 保护可配置的集群组件
+* 保护在集群中运行的应用程序
+
+<!--
+### Components of the Cluster {#cluster-components}
+
+If you want to protect your cluster from accidental or malicious access and adopt
+good information practices, read and follow the advice about
+[securing your cluster](/docs/tasks/administer-cluster/securing-a-cluster/).
+-->
+### 集群组件 {#cluster-components}
+
+如果想要保护集群免受意外或恶意的访问，采取良好的信息管理实践，请阅读并遵循有关[保护集群](/zh/docs/tasks/administer-cluster/securing-a-cluster/)的建议。
+
+<!--
+### Components in the cluster (your application) {#cluster-applications}
+
+Depending on the attack surface of your application, you may want to focus on specific
+aspects of security. For example: If you are running a service (Service A) that is critical
+in a chain of other resources and a separate workload (Service B) which is
+vulnerable to a resource exhaustion attack then the risk of compromising Service A
+is high if you do not limit the resources of Service B. The following table lists
+areas of security concerns and recommendations for securing workloads running in Kubernetes:
+
+Area of Concern for Workload Security | Recommendation |
+------------------------------ | --------------------- |
+RBAC Authorization (Access to the Kubernetes API) | https://kubernetes.io/docs/reference/access-authn-authz/rbac/
+Authentication | https://kubernetes.io/docs/reference/access-authn-authz/controlling-access/
+Application secrets management (and encrypting them in etcd at rest) | https://kubernetes.io/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/
+Pod Security Policies | https://kubernetes.io/docs/concepts/policy/pod-security-policy/
+Quality of Service (and Cluster resource management) | https://kubernetes.io/docs/tasks/configure-pod-container/quality-service-pod/
+Network Policies | https://kubernetes.io/docs/concepts/services-networking/network-policies/
+TLS For Kubernetes Ingress | https://kubernetes.io/docs/concepts/services-networking/ingress/#tls
+-->
+### 集群中的组件（您的应用） {#cluster-applications}
+
+根据您的应用程序的受攻击面，您可能需要关注安全性的特定面，比如：
+如果您正在运行中的一个服务（A 服务）在其他资源链中很重要，并且所运行的另一工作负载（服务 B）
+容易受到资源枯竭的攻击，则如果你不限制服务 B 的资源的话，损害服务 A 的风险就会很高。
+下表列出了安全性关注的领域和建议，用以保护 Kubernetes 中运行的工作负载：
+
+工作负载安全性关注领域 |  建议 |
+------------------------------ | --------------------- |
+RBAC 授权(访问 Kubernetes API) | https://kubernetes.io/zh/docs/reference/access-authn-authz/rbac/
+认证方式 | https://kubernetes.io/zh/docs/reference/access-authn-authz/controlling-access/
+应用程序 Secret 管理 (并在 etcd 中对其进行静态数据加密) | https://kubernetes.io/zh/docs/concepts/configuration/secret/ <br> https://kubernetes.io/zh/docs/tasks/administer-cluster/encrypt-data/
+Pod 安全策略 | https://kubernetes.io/zh/docs/concepts/policy/pod-security-policy/
+服务质量（和集群资源管理）| https://kubernetes.io/zh/docs/tasks/configure-pod-container/quality-service-pod/
+网络策略 | https://kubernetes.io/zh/docs/concepts/services-networking/network-policies/
+Kubernetes Ingress 的 TLS 支持 | https://kubernetes.io/zh/docs/concepts/services-networking/ingress/#tls
+
+<!--
+## Container
+
+Container security is outside the scope of this guide. Here are general recommendations and
+links to explore this topic:
+
+Area of Concern for Containers | Recommendation |
+------------------------------ | -------------- |
+Container Vulnerability Scanning and OS Dependency Security | As part of an image build step, you should scan your containers for known vulnerabilities.
+Image Signing and Enforcement | Sign container images to maintain a system of trust for the content of your containers.
+Disallow privileged users | When constructing containers, consult your documentation for how to create users inside of the containers that have the least level of operating system privilege necessary in order to carry out the goal of the container.
+-->
+## 容器
+
+容器安全性不在本指南的探讨范围内。下面是一些探索此主题的建议和连接：
+
+容器关注领域 | 建议 |
+------------------------------ | -------------- |
+容器漏洞扫描和操作系统依赖安全性 | 作为镜像构建的一部分，您应该扫描您的容器里的已知漏洞。
+镜像签名和执行 | 对容器镜像进行签名，以维护对容器内容的信任。
+禁止特权用户 | 构建容器时，请查阅文档以了解如何在具有最低操作系统特权级别的容器内部创建用户，以实现容器的目标。
+
+<!--
+## Code
+
+Application code is one of the primary attack surfaces over which you have the most control.
+While securing application code is outside of the Kubernetes security topic, here
+are recommendations to protect application code:
+-->
+## 代码
+
+应用程序代码是您最能够控制的主要攻击面之一，虽然保护应用程序代码不在 Kubernetes 安全主题范围内，但以下是保护应用程序代码的建议：
+
+<!--
+### Code security
+
+{{< table caption="Code security" >}}
+
+Area of Concern for Code | Recommendation |
+-------------------------| -------------- |
+Access over TLS only | If your code needs to communicate by TCP, perform a TLS handshake with the client ahead of time. With the exception of a few cases, encrypt everything in transit. Going one step further, it's a good idea to encrypt network traffic between services. This can be done through a process known as mutual or [mTLS](https://en.wikipedia.org/wiki/Mutual_authentication) which performs a two sided verification of communication between two certificate holding services. |
+Limiting port ranges of communication | This recommendation may be a bit self-explanatory, but wherever possible you should only expose the ports on your service that are absolutely essential for communication or metric gathering. |
+3rd Party Dependency Security | It is a good practice to regularly scan your application's third party libraries for known security vulnerabilities. Each programming language has a tool for performing this check automatically. |
+Static Code Analysis | Most languages provide a way for a snippet of code to be analyzed for any potentially unsafe coding practices. Whenever possible you should perform checks using automated tooling that can scan codebases for common security errors. Some of the tools can be found at: https://owasp.org/www-community/Source_Code_Analysis_Tools |
+Dynamic probing attacks | There are a few automated tools that you can run against your service to try some of the well known service attacks. These include SQL injection, CSRF, and XSS. One of the most popular dynamic analysis tools is the [OWASP Zed Attack proxy](https://owasp.org/www-project-zap/) tool. |
+
+{{< /table >}}
+-->
+### 代码安全性
+
+{{< table caption="代码安全" >}}
+
+代码关注领域 | 建议 |
+-------------------------| -------------- |
+仅通过 TLS 访问 | 如果您的代码需要通过 TCP 通信，请提前与客户端执行 TLS 握手。除少数情况外，请加密传输中的所有内容。更进一步，加密服务之间的网络流量是一个好主意。这可以通过被称为相互 LTS 或 [mTLS](https://en.wikipedia.org/wiki/Mutual_authentication) 的过程来完成，该过程对两个证书持有服务之间的通信执行双向验证。 |
+限制通信端口范围 | 此建议可能有点不言自明，但是在任何可能的情况下，你都只应公开服务上对于通信或度量收集绝对必要的端口。|
+第三方依赖性安全 | 最好定期扫描应用程序的第三方库以了解已知的安全漏洞。每种编程语言都有一个自动执行此检查的工具。 |
+静态代码分析 | 大多数语言都提供给了一种方法，来分析代码段中是否存在潜在的不安全的编码实践。只要有可能，你都应该使用自动工具执行检查，该工具可以扫描代码库以查找常见的安全错误，一些工具可以在以下连接中找到：https://owasp.org/www-community/Source_Code_Analysis_Tools |
+动态探测攻击 | 您可以对服务运行一些自动化工具，来尝试一些众所周知的服务攻击。这些攻击包括 SQL 注入、CSRF 和 XSS。[OWASP Zed Attack](https://owasp.org/www-project-zap/) 代理工具是最受欢迎的动态分析工具之一。 |
+
+{{< /table >}}
+
+## {{% heading "whatsnext" %}}
+
+<!--
+Learn about related Kubernetes security topics:
+
+* [Pod security standards](/docs/concepts/security/pod-security-standards/)
+* [Network policies for Pods](/docs/concepts/services-networking/network-policies/)
+* [Securing your cluster](/docs/tasks/administer-cluster/securing-a-cluster/)
+* [API access control](/docs/reference/access-authn-authz/controlling-access/)
+* [Data encryption in transit](/docs/tasks/tls/managing-tls-in-a-cluster/) for the control plane
+* [Data encryption at rest](/docs/tasks/administer-cluster/encrypt-data/)
+* [Secrets in Kubernetes](/docs/concepts/configuration/secret/)
+-->
+学习了解相关的 Kubernetes 安全主题：
+
+* [Pod 安全标准](/zh/docs/concepts/security/pod-security-standards/)
+* [Pod 的网络策略](/zh/docs/concepts/services-networking/network-policies/)
+* [保护您的集群](/zh/docs/tasks/administer-cluster/securing-a-cluster/)
+* [API 访问控制](/zh/docs/reference/access-authn-authz/controlling-access/)
+* [加密通信中的数据](/zh/docs/tasks/tls/managing-tls-in-a-cluster/) for the control plane
+* [加密静止状态的数据](/zh/docs/tasks/administer-cluster/encrypt-data/)
+* [Kubernetes 的 Secret](/zh/docs/concepts/configuration/secret/)

From f1aa2583c43c6c9389f5d6f313a672eecc099145 Mon Sep 17 00:00:00 2001
From: Didier Durand <durand.didier@gmail.com>
Date: Thu, 17 Sep 2020 16:06:26 +0200
Subject: [PATCH 355/496] Update
 content/fr/docs/concepts/cluster-administration/logging.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

as proposed per @perriea

Co-authored-by: Aurélien Perrier <aperrier@universe.sh>
---
 content/fr/docs/concepts/cluster-administration/logging.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/fr/docs/concepts/cluster-administration/logging.md b/content/fr/docs/concepts/cluster-administration/logging.md
index 88db262738..465ec742b1 100644
--- a/content/fr/docs/concepts/cluster-administration/logging.md
+++ b/content/fr/docs/concepts/cluster-administration/logging.md
@@ -17,7 +17,7 @@ d'évènements, et la plupart des environnements d'exécution de conteneurs ont
 conçus pour supporter la journalisation des évènements. La méthode de
 journalisation la plus facile et la plus répandue pour des applications
 conteneurisées est d'écrire dans les flux de sortie standard et d'erreur
-standards (`stdout` et `stderr`).
+(`stdout` et `stderr`).
 
 Malgré cela, la fonctionnalité de journalisation fournie nativement par
 l'environnement d'exécution de conteneurs n'est pas suffisante comme solution
@@ -355,4 +355,3 @@ Toutefois l'implémentation de ce mécanisme de journalisation est hors du cadre
 de Kubernetes.
 
 
-

From 96da468f317f9224bf5d694aaa6b73c5458919d0 Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Thu, 17 Sep 2020 13:56:23 +0800
Subject: [PATCH 356/496] optimize the translation of 
 /docs/concepts/cluster-administration/flow-control.md

---
 .../cluster-administration/flow-control.md    | 176 +++++++++---------
 1 file changed, 92 insertions(+), 84 deletions(-)

diff --git a/content/zh/docs/concepts/cluster-administration/flow-control.md b/content/zh/docs/concepts/cluster-administration/flow-control.md
index 56044e07c8..ac5c69190a 100644
--- a/content/zh/docs/concepts/cluster-administration/flow-control.md
+++ b/content/zh/docs/concepts/cluster-administration/flow-control.md
@@ -102,10 +102,11 @@ each other, and allows for requests to be queued to prevent bursty traffic from
 causing failed requests when the average load is acceptably low.
 -->
 ## 概念    {#concepts}
+
 APF 特性包含几个不同的功能。
-传入的请求通过 _流模式_ 按照其属性分类，并分配优先级。
+传入的请求通过 _FlowSchema_ 按照其属性分类，并分配优先级。
 每个优先级维护自定义的并发限制，加强了隔离度，这样不同优先级的请求，就不会相互饿死。
-在同一个优先级内，公平排队算法可以防止来自不同 _流_ 的请求相互饿死。
+在同一个优先级内，公平排队算法可以防止来自不同 _flow_ 的请求相互饿死。
 该算法将请求排队，通过排队机制，防止在平均负载较低时，通信量突增而导致请求失败。
 
 <!--
@@ -119,10 +120,11 @@ to a single priority level, and each priority level will only dispatch as many
 concurrent requests as its configuration allows.
 -->
 ### 优先级    {#Priority-Levels}
-如果未启用 APF ，API 服务器中的整体并发量将受到 `kube-apiserver` 的参数
+
+如果未启用 APF，API 服务器中的整体并发量将受到 `kube-apiserver` 的参数
 `--max-requests-inflight` 和 `--max-mutating-requests-inflight` 的限制。
 启用 APF 后，将对这些参数定义的并发限制进行求和，然后将总和分配到一组可配置的 _优先级_ 中。
-每个传入的请求都会分配一个优先级，每个优先级仅分发其配置允许的并发请求数。
+每个传入的请求都会分配一个优先级；每个优先级都有各自的配置，设定允许分发的并发请求数。
 
 <!--
 The default configuration, for example, includes separate priority levels for
@@ -131,8 +133,8 @@ Pods. This means that an ill-behaved Pod that floods the API server with
 requests cannot prevent leader election or actions by the built-in controllers
 from succeeding.
 -->
-例如，默认配置包括针对领导者选举请求，内置控制器请求和 Pod 请求，都单独设置优先级。
-这表示即使异常的 Pod 向 API 服务器发送大量请求，但无法阻止领导者选举或内置控制器的操作执行成功。
+例如，默认配置包括针对领导者选举请求、内置控制器请求和 Pod 请求都单独设置优先级。
+这表示即使异常的 Pod 向 API 服务器发送大量请求，也无法阻止领导者选举或内置控制器的操作执行成功。
 
 
 <!--
@@ -150,14 +152,15 @@ system attempts to give approximately equal weight to requests in different
 flows of the same priority level.
 -->
 ### 排队    {#Queuing}
+
 即使在同一优先级内，也可能存在大量不同的流量源。
 在过载情况下，防止一个请求流饿死其他流是非常有价值的
-（尤其是在一个较为常见的场景中，一个 bug 客户端会疯狂请求 kube-apiserver ，
-理想情况下，该 bug 客户端不会对其他客户端产生太大的影响）。
+（尤其是在一个较为常见的场景中，一个有故障的客户端会疯狂地向 kube-apiserver 发送请求，
+理想情况下，这个有故障的客户端不应对其他客户端产生太大的影响）。
 公平排队算法在处理具有相同优先级的请求时，实现了上述场景。
-该算法给每个请求都分配一个 _流_ ，该 _流_ 由匹配的 _流模式_ 的名称加上一个 _流区分器_
-（可以是发出请求的用户、目标资源的名称空间或什么都不是）标识，
-并且系统尝试为不同流中具有相同优先级的的请求，赋予近似相等的权重。
+每个请求都被分配到某个 _流_ 中，该 _流_ 由对应的 FlowSchema 的名字加上一个 _流区分项（Flow Distinguisher）_ 来标识。
+这里的流区分项可以是发出请求的用户、目标资源的名称空间或什么都不是。
+系统尝试为不同流中具有相同优先级的请求赋予近似相等的权重。
 
 <!--
 After classifying a request into a flow, the API Priority and Fairness
@@ -167,8 +170,8 @@ text="shuffle sharding" >}}, which makes relatively efficient use of
 queues to insulate low-intensity flows from high-intensity flows.
 -->
 将请求划分到流中之后，APF 功能将请求分配到队列中。
-分配时使用一种称为 {{< glossary_tooltip term_id="shuffle-sharding" text="混洗分片" >}} 的技术，
-该技术可以相对有效地利用队列，隔离低强度流与高强度流。
+分配时使用一种称为 {{< glossary_tooltip term_id="shuffle-sharding" text="混洗分片（Shuffle-Sharding）" >}} 的技术。
+该技术可以相对有效地利用队列隔离低强度流与高强度流。
 
 <!--
 The details of the queuing algorithm are tunable for each priority level, and
@@ -177,7 +180,7 @@ independent flows will all make progress when total traffic exceeds capacity),
 tolerance for bursty traffic, and the added latency induced by queuing.
 -->
 排队算法的细节可针对每个优先等级进行调整，并允许管理员在内存占用、
-公平性（当总流量超标时，独立流将都会继续前进）、
+公平性（当总流量超标时，各个独立的流将都会取得进展）、
 突发流量的容忍度以及排队引发的额外延迟之间进行权衡。
 
 <!--
@@ -188,17 +191,19 @@ improperly-configured flow control configuration from totally disabling an API
 server.
 -->
 ### 豁免请求    {#Exempt-requests}
+
 某些特别重要的请求不受制于此特性施加的任何限制。这些豁免可防止不当的流控配置完全禁用 API 服务器。
 
 <!--
 ## Defaults
 The Priority and Fairness feature ships with a suggested configuration that
 should suffice for experimentation; if your cluster is likely to
-experience heavy load then you should consider what configuration will work best. 
+experience heavy load then you should consider what configuration will work best.
 The suggested configuration groups requests into five priority classes:
 -->
 ## 默认值    {#Defaults}
-APF 特性附带推荐配置，该配置足够进行实验；
+
+APF 特性附带推荐配置，该配置对实验场景应该足够；
 如果你的集群有可能承受较大的负载，那么你应该考虑哪种配置最有效。
 推荐配置将请求分为五个优先级：
 
@@ -207,7 +212,7 @@ APF 特性附带推荐配置，该配置足够进行实验；
   i.e. Kubelets, which must be able to contact the API server in order for
   workloads to be able to schedule on them.
 -->
-* `system` 优先级用于 `system:nodes` 组（即 Kubelets ）的请求，
+* `system` 优先级用于 `system:nodes` 组（即 Kubelets ）的请求；
 kubelets 必须能连上 API 服务器，以便工作负载能够调度到其上。
 
 <!--
@@ -220,9 +225,9 @@ kubelets 必须能连上 API 服务器，以便工作负载能够调度到其上
   causes more expensive traffic as the new controllers sync their informers.
 -->
 * `leader-election` 优先级用于内置控制器的领导选举的请求
-（特别是来自 `system:kube-controller-manager` 的 `endpoints` 、 `configmaps` 或 `leases` 的请求，
-或者在 `kube-system` 命名空间下的 `system:kube-scheduler` 的用户和服务帐户）。
-隔离其他流量对这些请求非常重要，因为领导者选举失败会导致控制器发生故障并重新启动，
+（特别是来自 `kube-system` 名称空间中 `system:kube-controller-manager` 和
+`system:kube-scheduler` 用户和服务账号，针对 `endpoints`、`configmaps` 或 `leases` 的请求）。
+将这些请求与其他流量相隔离非常重要，因为领导者选举失败会导致控制器发生故障并重新启动，
 这反过来会导致新启动的控制器在同步信息时，流量开销更大。
 
 <!--
@@ -248,7 +253,7 @@ kubelets 必须能连上 API 服务器，以便工作负载能够调度到其上
 Additionally, there are two PriorityLevelConfigurations and two FlowSchemas that
 are built in and may not be overwritten:
 -->
-此外，内置了两个优先级配置和两个流模式，它们可能不在上述五个等级之内：
+内置了两个 PriorityLevelConfiguration 和两个 FlowSchema，它们是内置的、不可重载的：
 
 <!--
 * The special `exempt` priority level is used for requests that are not subject
@@ -258,8 +263,8 @@ are built in and may not be overwritten:
   other requests to this priority level, if appropriate.
 -->
 * 特殊的 `exempt` 优先级的请求完全不受流控限制：它们总是立刻被分发。
-特殊的 `exempt` 流模式把 `system:masters` 组的所有请求都归类该优先级。
-如果合适，你可以自定义流模式，将其他请求定向到该优先级。
+  特殊的 `exempt` FlowSchema 把 `system:masters` 组的所有请求都归入该优先级组。
+如果合适，你可以定义新的 FlowSchema，将其他请求定向到该优先级。
 
 <!--
 * The special `catch-all` priority level is used in combination with the special
@@ -273,11 +278,11 @@ are built in and may not be overwritten:
   that only matches the `catch-all` FlowSchema will be rejected with an HTTP 429
   error.
 -->
-* 特殊的 `catch-all` 优先级与特殊的 `catch-all` 流模式结合使用，以确保每个请求都分类。
-一般地，你不应该依赖于 `catch-all` 的配置，而应适当地创建自己的 `catch-all` 流模式和优先级配置
+* 特殊的 `catch-all` 优先级与特殊的 `catch-all` FlowSchema 结合使用，以确保每个请求都分类。
+一般地，你不应该依赖于 `catch-all` 的配置，而应适当地创建自己的 `catch-all` FlowSchema 和 PriorityLevelConfigurations
 （或使用默认安装的 `global-default` 配置）。
 为了帮助捕获部分请求未分类的配置错误，强制要求 `catch-all` 优先级仅允许一个并发份额，
-并且不对请求进行排队，使得仅与 `catch-all` 流模式匹配的流量被拒绝的可能性更高，并显示 HTTP 429 错误。
+并且不对请求进行排队，使得仅与 `catch-all` FlowSchema 匹配的流量被拒绝的可能性更高，并显示 HTTP 429 错误。
 
 <!-- ## Health check concurrency exemption -->
 ## 健康检查并发豁免    {#Health-check-concurrency-exemption}
@@ -290,16 +295,16 @@ suggested config, these requests get assigned to the `global-default`
 FlowSchema and the corresponding `global-default` priority level,
 where other traffic can crowd them out.
 -->
-推荐配置没有对本地 kubelet 在 kube-apiserver 上运行健康检查请求进行任何特殊处理
+推荐配置没有为本地 kubelet 对 kube-apiserver 执行健康检查的请求进行任何特殊处理
 ——它们倾向于使用安全端口，但不提供凭据。
-通过推荐配置，这些请求将分配 `global-default` 流模式和 `global-default` 优先级，
+在推荐配置中，这些请求将分配 `global-default` FlowSchema 和 `global-default` 优先级，
 这样其他流量可以排除健康检查。
 
 <!--
 If you add the following additional FlowSchema, this exempts those
 requests from rate limiting.
 -->
-如果添加以下流模式，健康检查请求不受速率限制。
+如果添加以下 FlowSchema，健康检查请求不受速率限制。
 
 {{< caution >}}
 
@@ -311,7 +316,7 @@ mechanism to protect your cluster's API server from general internet
 traffic, you can configure rules to block any health check requests
 that originate from outside your cluster.
 -->
-进行此更改后，任何敌对方都可以发送与此流模式匹配的任意数量的健康检查请求。
+进行此更改后，任何敌对方都可以发送与此 FlowSchema 匹配的任意数量的健康检查请求。
 如果你有 Web 流量过滤器或类似的外部安全机制保护集群的 API 服务器免受常规网络流量的侵扰，
 则可以配置规则，阻止所有来自集群外部的健康检查请求。
 
@@ -330,11 +335,12 @@ are used to classify individual inbound requests, matching each to a single
 PriorityLevelConfiguration.
 -->
 ## 资源    {#Resources}
+
 流控 API 涉及两种资源。
-[优先级配置](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#prioritylevelconfiguration-v1alpha1-flowcontrol-apiserver-k8s-io)
+[PriorityLevelConfigurations](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#prioritylevelconfiguration-v1alpha1-flowcontrol-apiserver-k8s-io)
 定义隔离类型和可处理的并发预算量，还可以微调排队行为。
-[流模式](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#flowschema-v1alpha1-flowcontrol-apiserver-k8s-io)
-用于对每个入站请求进行分类，并匹配一个优先级配置。
+[FlowSchemas](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#flowschema-v1alpha1-flowcontrol-apiserver-k8s-io)
+用于对每个入站请求进行分类，并与一个 PriorityLevelConfigurations 相匹配。
 
 <!--
 ### PriorityLevelConfiguration
@@ -342,8 +348,9 @@ A PriorityLevelConfiguration represents a single isolation class. Each
 PriorityLevelConfiguration has an independent limit on the number of outstanding
 requests, and limitations on the number of queued requests.
 -->
-### 优先级配置    {#PriorityLevelConfiguration}
-一个优先级配置表示单个隔离类型。每个优先级配置对未完成的请求数都有独立的限制，对排队中的请求数也有限制。
+### PriorityLevelConfiguration    {#PriorityLevelConfiguration}
+
+一个 PriorityLevelConfiguration 表示单个隔离类型。每个 PriorityLevelConfigurations 对未完成的请求数有各自的限制，对排队中的请求数也有限制。
 
 <!--
 Concurrency limits for PriorityLevelConfigurations are not specified in absolute
@@ -356,11 +363,11 @@ server by restarting `kube-apiserver` with a different value for
 PriorityLevelConfigurations will see their maximum allowed concurrency go up (or
 down) by the same fraction.
 -->
-优先级配置的并发限制不是指定请求绝对数量，而是在“并发份额”中指定。
-API 服务器的总并发量限制通过这些份额按例分配到现有优先级配置中。
+PriorityLevelConfigurations 的并发限制不是指定请求绝对数量，而是在“并发份额”中指定。
+API 服务器的总并发量限制通过这些份额按例分配到现有 PriorityLevelConfigurations 中。
 集群管理员可以更改 `--max-requests-inflight` （或 `--max-mutating-requests-inflight` ）的值，
 再重新启动 `kube-apiserver` 来增加或减小服务器的总流量，
-然后所有的优先级配置将看到其最大并发增加（或减少）了相同的比例。
+然后所有的 PriorityLevelConfigurations 将看到其最大并发增加（或减少）了相同的比例。
 
 <!--
 With the Priority and Fairness feature enabled, the total concurrency limit for
@@ -371,10 +378,10 @@ separately for a given resource, make separate FlowSchemas that match the
 mutating and non-mutating verbs respectively.
 -->
 {{< caution >}}
-启用 APF 功能后，服务器的总并发量限制将设置为 
+启用 APF 功能后，服务器的总并发量限制将设置为
 `--max-requests-inflight` 和 `--max-mutating-requests-inflight` 之和。
 可变请求和不可变请求之间不再有任何区别；
-如果对于某种资源，你需要区别对待不同请求，请创建不同的流模式分别匹配可变请求和不可变请求。
+如果对于某种资源，你需要区别对待不同请求，请创建不同的 FlowSchema 分别匹配可变请求和不可变请求。
 {{< /caution >}}
 
 <!--
@@ -386,7 +393,7 @@ an HTTP 429 (Too Many Requests) error. A type of `Queue` means that requests
 above the threshold will be queued, with the shuffle sharding and fair queuing techniques used
 to balance progress between request flows.
 -->
-当入站请求的数量大于分配的优先级配置中允许的并发级别时， `type` 字段将确定对额外请求的处理方式。
+当入站请求的数量大于分配的 PriorityLevelConfigurations 中允许的并发级别时， `type` 字段将确定对额外请求的处理方式。
 `Reject` 类型，表示多余的流量将立即被 HTTP 429（请求过多）错误所拒绝。
 `Queue` 类型，表示对超过阈值的请求进行排队，将使用阈值分片和公平排队技术来平衡请求流之间的进度。
 
@@ -463,7 +470,7 @@ https://play.golang.org/p/Gi0PLgVHiUg , which computes this table.
 {{< /table >}}
 
 <!-- ### FlowSchema -->
-### 流模式    {#FlowSchema}
+### FlowSchema    {#FlowSchema}
 
 <!--
 A FlowSchema matches some inbound requests and assigns them to a
@@ -472,8 +479,8 @@ FlowSchema in turn, starting with those with numerically lowest ---
 which we take to be the logically highest --- `matchingPrecedence` and
 working onward.  The first match wins.
 -->
-流模式匹配一些入站请求，并将它们分配给优先级。
-每个入站请求都会对所有流模式测试是否匹配，
+FlowSchema 匹配一些入站请求，并将它们分配给优先级。
+每个入站请求都会对所有 FlowSchema 测试是否匹配，
 首先从 `matchingPrecedence` 数值最低的匹配开始（我们认为这是逻辑上匹配度最高），
 然后依次进行，直到首个匹配出现。
 
@@ -486,10 +493,10 @@ with the highest `matchingPrecedence`. If multiple FlowSchemas with equal
 smaller `name` will win, but it's better not to rely on this, and instead to
 ensure that no two FlowSchemas have the same `matchingPrecedence`.
 -->
-对一个请求来说，只有首个匹配的流模式才有意义。
-如果一个入站请求与多个流模式匹配，则将基于 `matchingPrecedence` 值最高的请求进行筛选。
-如果一个请求匹配多个流模式且 `matchingPrecedence` 的值相同，则按 `name` 的字典序选择最小，
-但是最好不要依赖它，而是确保不存在两个流模式具有相同的 `matchingPrecedence` 值。
+对一个请求来说，只有首个匹配的 FlowSchema  才有意义。
+如果一个入站请求与多个 FlowSchema 匹配，则将基于 `matchingPrecedence` 值最高的请求进行筛选。
+如果一个请求匹配多个 FlowSchema 且 `matchingPrecedence` 的值相同，则按 `name` 的字典序选择最小，
+但是最好不要依赖它，而是确保不存在两个 FlowSchema 具有相同的 `matchingPrecedence` 值。
 {{< /caution >}}
 
 <!--
@@ -498,9 +505,9 @@ matches. A rule matches if at least one of its `subjects` *and* at least
 one of its `resourceRules` or `nonResourceRules` (depending on whether the
 incoming request is for a resource or non-resource URL) matches the request.
 -->
-当给定的请求与某个流模式的 `rules` 的其中一条匹配，那么就认为该请求与该流模式匹配。
+当给定的请求与某个 FlowSchema 的 `rules` 的其中一条匹配，那么就认为该请求与该 FlowSchema 匹配。
 判断规则与该请求是否匹配，**不仅**要求该条规则的 `subjects` 字段至少存在一个与该请求相匹配，
-**而且**要求该条规则的 `resourceRules` 或 `nonResourceRules` 
+**而且**要求该条规则的 `resourceRules` 或 `nonResourceRules`
 （取决于传入请求是针对资源URL还是非资源URL）字段至少存在一个与该请求相匹配。
 
 <!--
@@ -524,12 +531,12 @@ omitted entirely), in which case all requests matched by this FlowSchema will be
 considered part of a single flow. The correct choice for a given FlowSchema
 depends on the resource and your particular environment.
 -->
-流模式的 `distinguisherMethod.type` 字段决定了如何把与该模式匹配的请求分散到各个流中。
+FlowSchema 的 `distinguisherMethod.type` 字段决定了如何把与该模式匹配的请求分散到各个流中。
 可能是 `ByUser` ，在这种情况下，一个请求用户将无法饿死其他容量的用户；
 或者是 `ByNamespace` ，在这种情况下，一个名称空间中的资源请求将无法饿死其它名称空间的资源请求；
 或者它可以为空（或者可以完全省略 `distinguisherMethod` ），
-在这种情况下，与此流模式匹配的请求将被视为单个流的一部分。
-资源和你的特定环境决定了如何选择正确一个流模式。
+在这种情况下，与此 FlowSchema 匹配的请求将被视为单个流的一部分。
+资源和你的特定环境决定了如何选择正确一个 FlowSchema。
 
 <!--
 ## Diagnostics
@@ -541,9 +548,10 @@ names are not included in these headers in case the requesting user does not
 have permission to view them, so when debugging you can use a command like
 -->
 ## 诊断程序    {#Diagnostics}
+
 启用了 APF 的 API 服务器，它每个 HTTP 响应都有两个额外的 HTTP 头：
 `X-Kubernetes-PF-FlowSchema-UID` 和 `X-Kubernetes-PF-PriorityLevel-UID`，
-注意与请求匹配的流模式和已分配的优先级。
+注意与请求匹配的 FlowSchema 和已分配的优先级。
 如果请求用户没有查看这些对象的权限，则这些 HTTP 头中将不包含 API 对象的名称，
 因此在调试时，你可以使用类似如下的命令：
 
@@ -555,7 +563,7 @@ kubectl get prioritylevelconfigurations -o custom-columns="uid:{metadata.uid},na
 to get a mapping of UIDs to names for both FlowSchemas and
 PriorityLevelConfigurations.
 -->
-来获取 UID 到流模式的名称和 UID 到优先级配置的名称的映射。
+来获取 UID 到 FlowSchema 的名称和 UID 到 PriorityLevelConfigurations 的名称的映射。
 
 <!-- ## Observability -->
 ## 可观察性    {#Observability}
@@ -590,7 +598,7 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_rejected_requests_total` 是一个计数器向量，
 记录被拒绝的请求数量（自服务器启动以来累计值），
-由标签 `flowSchema` （表示与请求匹配的流模式）， `priorityLevel` （表示分配给请该求的优先级）和  `reason` 拆分。
+由标签 `flowSchema` （表示与请求匹配的 FlowSchema ）， `priorityLevel` （表示分配给请该求的优先级）和  `reason` 拆分。
 `reason` 标签将具有以下值之一：
     * `queue-full` ，表明已经有太多请求排队，
     * `concurrency-limit` ，表示将 PriorityLevelConfiguration 配置为 `Reject` 而不是 `Queue` ，或者
@@ -605,7 +613,7 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_dispatched_requests_total` 是一个计数器向量，
 记录开始执行的请求数量（自服务器启动以来的累积值），
-由标签 `flowSchema` （表示与请求匹配的流模式）和 `priorityLevel`（表示分配给该请求的优先级）拆分。
+由标签 `flowSchema` （表示与请求匹配的 FlowSchema ）和 `priorityLevel`（表示分配给该请求的优先级）拆分。
 
 <!--
 * `apiserver_current_inqueue_requests` is a gauge vector of recent
@@ -727,7 +735,7 @@ poorly-behaved workloads that may be harming system health.
     to increase that PriorityLevelConfiguration's concurrency shares.
     -->
     直方图中的离群值在这里表示单个流（即，一个用户或一个名称空间的请求，具体取决于配置）正在疯狂请求 API 服务器，并受到限制。
-    相反，如果一个优先级的直方图显示该优先级的所有队列都比其他优先级的队列长，则增加优先级配置的并发份额是比较合适的。
+    相反，如果一个优先级的直方图显示该优先级的所有队列都比其他优先级的队列长，则增加 PriorityLevelConfigurations 的并发份额是比较合适的。
     {{< /note >}}
 
 <!--
@@ -737,7 +745,7 @@ poorly-behaved workloads that may be harming system health.
   shares), broken down by the label `priorityLevel`.
 -->
 * `apiserver_flowcontrol_request_concurrency_limit` 是一个表向量，
-记录并发限制的计算值（基于 API 服务器的总并发限制和优先级配置的并发份额），
+记录并发限制的计算值（基于 API 服务器的总并发限制和 PriorityLevelConfigurations 的并发份额），
 并按标签 `priorityLevel` 拆分。
 
 <!--
@@ -750,7 +758,7 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_request_wait_duration_seconds` 是一个直方图向量，
 记录请求排队的时间，
-由标签 `flowSchema` （表示与请求匹配的流模式），
+由标签 `flowSchema` （表示与请求匹配的 FlowSchema ），
 `priorityLevel`  （表示分配该请求的优先级）
 和 `execute` （表示请求是否开始执行）拆分。
     {{< note >}}
@@ -760,7 +768,7 @@ poorly-behaved workloads that may be harming system health.
     FlowSchemas for one priority level to get the effective histogram for
     requests assigned to that priority level.
     -->
-    由于每个流模式总会给请求分配优先级配置，因此你可以为一个优先级添加所有流模式的直方图，以获取分配给该优先级的请求的有效直方图。
+    由于每个 FlowSchema 总会给请求分配 PriorityLevelConfigurations，因此你可以为一个优先级添加所有 FlowSchema 的直方图，以获取分配给该优先级的请求的有效直方图。
     {{< /note >}}
 
 <!--
@@ -772,26 +780,26 @@ poorly-behaved workloads that may be harming system health.
 -->
 * `apiserver_flowcontrol_request_execution_seconds` 是一个直方图向量，
 记录请求实际执行需要花费的时间，
-由标签 `flowSchema` （表示与请求匹配的流模式）和 `priorityLevel` （表示分配给该请求的优先级）拆分。
+由标签 `flowSchema` （表示与请求匹配的 FlowSchema ）和 `priorityLevel` （表示分配给该请求的优先级）拆分。
 
 <!-- ### Debug endpoints -->
 ### 调试端点    {#Debug-endpoints}
 
-<!-- 
-When you enable the API Priority and Fairness feature, 
-the kube-apiserver serves the following additional paths at its HTTP[S] ports. 
+<!--
+When you enable the API Priority and Fairness feature,
+the kube-apiserver serves the following additional paths at its HTTP[S] ports.
 -->
 启用 APF 特性后， kube-apiserver 会在其 HTTP/HTTPS 端口提供以下路径：
 
-<!-- 
-- `/debug/api_priority_and_fairness/dump_priority_levels` - a listing of all the priority levels and the current state of each.  
-You can fetch like this: 
+<!--
+- `/debug/api_priority_and_fairness/dump_priority_levels` - a listing of all the priority levels and the current state of each.
+You can fetch like this:
 -->
 - `/debug/api_priority_and_fairness/dump_priority_levels` —— 所有优先级及其当前状态的列表。你可以这样获取：
   ```shell
   kubectl get --raw /debug/api_priority_and_fairness/dump_priority_levels
   ```
-  
+
   <!-- The output is similar to this: -->
   输出类似于：
   ```
@@ -805,15 +813,15 @@ You can fetch like this:
   workload-high,     0,            true,   false,       0,               0,
   ```
 
-<!-- 
-- `/debug/api_priority_and_fairness/dump_queues` - a listing of all the queues and their current state.  
-You can fetch like this: 
+<!--
+- `/debug/api_priority_and_fairness/dump_queues` - a listing of all the queues and their current state.
+You can fetch like this:
 -->
 - `/debug/api_priority_and_fairness/dump_queues` ——所有队列及其当前状态的列表。你可以这样获取：
   ```shell
   kubectl get --raw /debug/api_priority_and_fairness/dump_queues
   ```
- 
+
   <!-- The output is similar to this: -->
   输出类似于：
   ```
@@ -826,15 +834,15 @@ You can fetch like this:
   leader-election,   15,     0,               0,                 0.0000,
   ```
 
-<!-- 
-- `/debug/api_priority_and_fairness/dump_requests` - a listing of all the requests that are currently waiting in a queue.  
-You can fetch like this: 
+<!--
+- `/debug/api_priority_and_fairness/dump_requests` - a listing of all the requests that are currently waiting in a queue.
+You can fetch like this:
 -->
 - `/debug/api_priority_and_fairness/dump_requests` ——当前正在队列中等待的所有请求的列表。你可以这样获取：
   ```shell
   kubectl get --raw /debug/api_priority_and_fairness/dump_requests
   ```
-  
+
   <!-- The output is similar to this: -->
   输出类似于：
   ```
@@ -843,18 +851,18 @@ You can fetch like this:
   system,            system-nodes,   12,         0,                   system:node:127.0.0.1, 2020-07-23T15:26:57.179170694Z,
   ```
 
-  <!-- 
-  In addition to the queued requests, 
-  the output includeas one phantom line for each priority level that is exempt from limitation. 
+  <!--
+  In addition to the queued requests,
+  the output includeas one phantom line for each priority level that is exempt from limitation.
   -->
-  除了排队的请求外，对于每个优先级，输出还包括一条不受限制的虚拟线。
+  针对每个优先级别，输出中还包含一条虚拟记录，对应豁免限制。
 
   <!-- You can get a more detailed listing with a command like this: -->
   你可以使用以下命令获得更详细的清单：
   ```shell
   kubectl get --raw '/debug/api_priority_and_fairness/dump_requests?includeRequestDetails=1'
   ```
-  
+
   <!-- The output is similar to this: -->
   输出类似于：
   ```
@@ -866,9 +874,9 @@ You can fetch like this:
 ## {{% heading "whatsnext" %}}
 
 <!--
-For background information on design details for API priority and fairness, see the 
+For background information on design details for API priority and fairness, see the
 [enhancement proposal](https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/20190228-priority-and-fairness.md).
-You can make suggestions and feature requests via 
+You can make suggestions and feature requests via
 [SIG API Machinery](https://github.com/kubernetes/community/tree/master/sig-api-machinery).
 -->
 有关API优先级和公平性的设计细节的背景信息，

From 073504b3e6022f8e609e46830dbd4f819f91157c Mon Sep 17 00:00:00 2001
From: Sascha Grunert <sgrunert@suse.com>
Date: Wed, 2 Sep 2020 12:56:55 +0200
Subject: [PATCH 357/496] Moving forward from beta blog post: clarify 9 month
 window

The 9 month window can be more explicitly translated to "three
releases", which may not always nine month (like for v1.19.0). This
should avoid confusion when users try to find out which release should
be targeted for the graduation to stable.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
---
 .../_posts/2020-08-21-Moving-Forward-From-Beta/index.md  | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/content/en/blog/_posts/2020-08-21-Moving-Forward-From-Beta/index.md b/content/en/blog/_posts/2020-08-21-Moving-Forward-From-Beta/index.md
index 3be4481954..1d82e67fb2 100644
--- a/content/en/blog/_posts/2020-08-21-Moving-Forward-From-Beta/index.md
+++ b/content/en/blog/_posts/2020-08-21-Moving-Forward-From-Beta/index.md
@@ -61,7 +61,7 @@ mind.
 ## Avoiding permanent beta
 
 For Kubernetes REST APIs, when a new feature's API reaches beta, that starts a countdown.
-The beta-quality API now has **nine calendar months** to either:
+The beta-quality API now has **three releases** (about nine calendar months) to either:
 - reach GA, and deprecate the beta, or
 - have a new beta version (_and deprecate the previous beta_).
 
@@ -69,9 +69,10 @@ To be clear, at this point **only REST APIs are affected**. For example, _APILis
 a beta feature but isn't itself a REST API. Right now there are no plans to automatically
 deprecate _APIListChunking_ nor any other features that aren't REST APIs.
 
-If a REST API reaches the end of that 9 month countdown, then the next Kubernetes release
-will deprecate that API version. There's no option for the REST API to stay at the same
-beta version beyond the first Kubernetes release to come out after the 9 month window.
+If a beta API has not graduated to GA after three Kubernetes releases, then the
+next Kubernetes release will deprecate that API version. There's no option for
+the REST API to stay at the same beta version beyond the first Kubernetes
+release to come out after the release window.
 
 ### What this means for you
 

From ddfc79d5b8693dae8344faa812aff4672bb91095 Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Thu, 17 Sep 2020 10:45:08 +0800
Subject: [PATCH 358/496] Add missing description for each subjects in
 /zh/docs/tasks

---
 content/zh/docs/tasks/access-application-cluster/_index.md     | 1 +
 content/zh/docs/tasks/administer-cluster/_index.md             | 1 +
 content/zh/docs/tasks/configure-pod-container/_index.md        | 1 +
 content/zh/docs/tasks/debug-application-cluster/_index.md      | 1 +
 content/zh/docs/tasks/inject-data-application/_index.md        | 1 +
 content/zh/docs/tasks/job/_index.md                            | 1 +
 content/zh/docs/tasks/manage-daemon/_index.md                  | 1 +
 content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md | 1 +
 content/zh/docs/tasks/manage-kubernetes-objects/_index.md      | 1 +
 content/zh/docs/tasks/network/_index.md                        | 1 +
 content/zh/docs/tasks/run-application/_index.md                | 1 +
 content/zh/docs/tasks/service-catalog/_index.md                | 1 +
 content/zh/docs/tasks/tls/_index.md                            | 1 +
 content/zh/docs/tasks/tools/_index.md                          | 1 +
 14 files changed, 14 insertions(+)

diff --git a/content/zh/docs/tasks/access-application-cluster/_index.md b/content/zh/docs/tasks/access-application-cluster/_index.md
index 3ed8c7e6c0..5fb03229b1 100644
--- a/content/zh/docs/tasks/access-application-cluster/_index.md
+++ b/content/zh/docs/tasks/access-application-cluster/_index.md
@@ -1,4 +1,5 @@
 ---
 title: 访问集群中的应用程序
 weight: 60
+description: 配置负载平衡、端口转发或设置防火墙或 DNS 配置，以访问集群中的应用程序。
 ---
diff --git a/content/zh/docs/tasks/administer-cluster/_index.md b/content/zh/docs/tasks/administer-cluster/_index.md
index 90ff023cc4..1ef44bc080 100644
--- a/content/zh/docs/tasks/administer-cluster/_index.md
+++ b/content/zh/docs/tasks/administer-cluster/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "管理集群"
 weight: 20
+description: 了解管理集群的常见任务。
 ---
diff --git a/content/zh/docs/tasks/configure-pod-container/_index.md b/content/zh/docs/tasks/configure-pod-container/_index.md
index 7a5b336076..4c71a44d89 100644
--- a/content/zh/docs/tasks/configure-pod-container/_index.md
+++ b/content/zh/docs/tasks/configure-pod-container/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "配置 Pods 和容器"
 weight: 20
+description: 对 Pod 和容器执行常见的配置任务。
 ---
diff --git a/content/zh/docs/tasks/debug-application-cluster/_index.md b/content/zh/docs/tasks/debug-application-cluster/_index.md
index 9fb280225f..15912bf00c 100644
--- a/content/zh/docs/tasks/debug-application-cluster/_index.md
+++ b/content/zh/docs/tasks/debug-application-cluster/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "监控、日志和排错"
 weight: 80
+description: 设置监视和日志记录以对集群进行故障排除或调试容器化应用。
 ---
diff --git a/content/zh/docs/tasks/inject-data-application/_index.md b/content/zh/docs/tasks/inject-data-application/_index.md
index d95dfdfb35..8a23b60fc1 100644
--- a/content/zh/docs/tasks/inject-data-application/_index.md
+++ b/content/zh/docs/tasks/inject-data-application/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "给应用注入数据"
 weight: 30
+description: 给你的工作负载 Pod 指定配置和其他数据。
 ---
diff --git a/content/zh/docs/tasks/job/_index.md b/content/zh/docs/tasks/job/_index.md
index 498d5013f9..3f2ac22fe8 100644
--- a/content/zh/docs/tasks/job/_index.md
+++ b/content/zh/docs/tasks/job/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "运行 Jobs"
 weight: 50
+description: 使用并行处理运行 Jobs。
 ---
diff --git a/content/zh/docs/tasks/manage-daemon/_index.md b/content/zh/docs/tasks/manage-daemon/_index.md
index 60765b5da7..fbe5bca836 100644
--- a/content/zh/docs/tasks/manage-daemon/_index.md
+++ b/content/zh/docs/tasks/manage-daemon/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "管理集群守护进程"
 weight: 130
+description: 执行 DaemonSet 管理的常见任务，例如执行滚动更新。
 ---
diff --git a/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md b/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md
index c6f6e5747e..805a055868 100644
--- a/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md
+++ b/content/zh/docs/tasks/manage-hugepages/scheduling-hugepages.md
@@ -3,6 +3,7 @@ reviewers:
 - derekwaynecarr
 title: 管理巨页（HugePages）
 content_type: task
+description: 将大页配置和管理为集群中的可调度资源。
 ---
 <!--
 ---
diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/_index.md b/content/zh/docs/tasks/manage-kubernetes-objects/_index.md
index 626a0ae5c8..88059fb9cd 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/_index.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "管理 Kubernetes 对象"
 weight: 25
+description: 用声明式和命令式范型与 Kubernetes API 交互。
 ---
diff --git a/content/zh/docs/tasks/network/_index.md b/content/zh/docs/tasks/network/_index.md
index 022ce0d2d2..408f2a3f2a 100644
--- a/content/zh/docs/tasks/network/_index.md
+++ b/content/zh/docs/tasks/network/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "网络"
 weight: 160
+description: 了解如何为你的集群配置网络。
 ---
diff --git a/content/zh/docs/tasks/run-application/_index.md b/content/zh/docs/tasks/run-application/_index.md
index 7bb1acba33..d4846746ae 100644
--- a/content/zh/docs/tasks/run-application/_index.md
+++ b/content/zh/docs/tasks/run-application/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "运行应用"
 weight: 40
+description: 运行和管理无状态和有状态的应用程序。
 ---
diff --git a/content/zh/docs/tasks/service-catalog/_index.md b/content/zh/docs/tasks/service-catalog/_index.md
index 3677ab2db0..e5938e9a07 100644
--- a/content/zh/docs/tasks/service-catalog/_index.md
+++ b/content/zh/docs/tasks/service-catalog/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "安装服务目录"
 weight: 150
+description: 安装服务目录扩展 API 。
 ---
diff --git a/content/zh/docs/tasks/tls/_index.md b/content/zh/docs/tasks/tls/_index.md
index 3bf0ceffca..a25b7c5cbe 100644
--- a/content/zh/docs/tasks/tls/_index.md
+++ b/content/zh/docs/tasks/tls/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "TLS"
 weight: 100
+description: 了解如何使用传输层安全性（ TLS ）保护集群中的流量。
 ---
diff --git a/content/zh/docs/tasks/tools/_index.md b/content/zh/docs/tasks/tools/_index.md
index cf1443b625..922e13f0d3 100644
--- a/content/zh/docs/tasks/tools/_index.md
+++ b/content/zh/docs/tasks/tools/_index.md
@@ -1,4 +1,5 @@
 ---
 title: "安装工具"
 weight: 10
+description: 在你的计算机上设置 Kubernetes 工具。
 ---

From 5a57a12da398b2d28807ac72862bbca5aa4701c5 Mon Sep 17 00:00:00 2001
From: dedok1997 <dedok1486@gmail.com>
Date: Thu, 17 Sep 2020 19:29:08 +0300
Subject: [PATCH 359/496] Update overview.md

Fix typo
---
 content/ru/docs/reference/kubectl/overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/ru/docs/reference/kubectl/overview.md b/content/ru/docs/reference/kubectl/overview.md
index 9f1fd9906e..58305f2d95 100644
--- a/content/ru/docs/reference/kubectl/overview.md
+++ b/content/ru/docs/reference/kubectl/overview.md
@@ -74,7 +74,7 @@ kubectl [command] [TYPE] [NAME] [flags]
 `apply`            | `kubectl apply -f FILENAME [flags]`| Внести изменения в конфигурацию ресурса из файла или потока stdin.
 `attach`        | `kubectl attach POD -c CONTAINER [-i] [-t] [flags]` | Подключиться к запущенному контейнеру либо для просмотра потока вывода, либо для работы с контейнером (stdin).
 `autoscale`    | <code>kubectl autoscale (-f FILENAME &#124; TYPE NAME &#124; TYPE/NAME) [--min=MINPODS] --max=MAXPODS [--cpu-percent=CPU] [flags]</code> | Автоматически промасштабировать набор подов, управляемых контроллером репликации.
-`cluster-info`    | `kubectl cluster-info [flags]` | Показать информацию о главном узле и сервисов в кластере.
+`cluster-info`    | `kubectl cluster-info [flags]` | Показать информацию о главном узле и сервисах в кластере.
 `config`        | `kubectl config SUBCOMMAND [flags]` | Изменить файлы kubeconfig. Подробные сведения смотрите в отдельных подкомандах.
 `create`        | `kubectl create -f FILENAME [flags]` | Создать один или несколько ресурсов из файла или stdin.
 `delete`        | <code>kubectl delete (-f FILENAME &#124; TYPE [NAME &#124; /NAME &#124; -l label &#124; --all]) [flags]</code> | Удалить ресурсы из файла, потока stdin, либо с помощью селекторов меток, имен, селекторов ресурсов или ресурсов.

From 82546d3ff88742d0209f78676f17a69f5ff03545 Mon Sep 17 00:00:00 2001
From: Adam Russell <adamlr6+github@gmail.com>
Date: Thu, 17 Sep 2020 11:50:46 -0500
Subject: [PATCH 360/496] Fix a couple issues in docker-cli-to-kubectl.md

---
 content/en/docs/reference/kubectl/docker-cli-to-kubectl.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md b/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md
index af0ba73b90..5afdebd557 100644
--- a/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md
+++ b/content/en/docs/reference/kubectl/docker-cli-to-kubectl.md
@@ -42,6 +42,7 @@ kubectl create deployment --image=nginx nginx-app
 # add env to nginx-app
 kubectl set env deployment/nginx-app  DOMAIN=cluster
 ```
+```
 deployment.apps/nginx-app created
 ```
 
@@ -52,7 +53,6 @@ kubectl set env deployment/nginx-app  DOMAIN=cluster
 ```
 deployment.apps/nginx-app env updated
 ```
-deployment.apps/nginx-app env updated
 
 {{< note >}}
 `kubectl` commands print the type and name of the resource created or mutated, which can then be used in subsequent commands. You can expose a new Service after a Deployment is created.

From 4c67cd640fae9f5b2aa8392b89d9f4ef91da02a0 Mon Sep 17 00:00:00 2001
From: unknown <lparis@vmware.com>
Date: Thu, 17 Sep 2020 10:59:31 -0700
Subject: [PATCH 361/496] Remove example, point to repo

---
 .../en/docs/concepts/storage/storage-classes.md    | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index 5577208039..d440794bf0 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -424,20 +424,8 @@ In-tree provisioners are [deprecated](/blog/2019/12/09/kubernetes-1-17-feature-c
 
 #### CSI Provisioner {#vsphere-provisioner-csi}
 
-The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters.
+The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters. For examples, refer to the [vSphere CSI repository](https://github.com/kubernetes-sigs/vsphere-csi-driver).
 
-```yaml
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: example-vsphere-sc-csi
-  annotations:
-    storageclass.kubernetes.io/is-default-class: true
-provisioner: csi.vsphere.vmware.com
-parameters:
-  datastoreurl: "ds:///vmfs/volumes/vsan:52d8eb4842dbf493-41523be9cd4ff7b7/"
-```
-    
 #### vCP Provisioner 
 
 The following examples use the VMware Cloud Provider (vCP) StorageClass provisioner.  

From 82c612be234ad2dc9d65f4f814bfd85dc6aa7daa Mon Sep 17 00:00:00 2001
From: unknown <lparis@vmware.com>
Date: Thu, 17 Sep 2020 11:13:47 -0700
Subject: [PATCH 362/496] Added direct link

---
 content/en/docs/concepts/storage/storage-classes.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/storage/storage-classes.md b/content/en/docs/concepts/storage/storage-classes.md
index d440794bf0..59579b443c 100644
--- a/content/en/docs/concepts/storage/storage-classes.md
+++ b/content/en/docs/concepts/storage/storage-classes.md
@@ -424,7 +424,7 @@ In-tree provisioners are [deprecated](/blog/2019/12/09/kubernetes-1-17-feature-c
 
 #### CSI Provisioner {#vsphere-provisioner-csi}
 
-The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters. For examples, refer to the [vSphere CSI repository](https://github.com/kubernetes-sigs/vsphere-csi-driver).
+The vSphere CSI StorageClass provisioner works with Tanzu Kubernetes clusters. For an example, refer to the [vSphere CSI repository](https://raw.githubusercontent.com/kubernetes-sigs/vsphere-csi-driver/master/example/vanilla-k8s-file-driver/example-sc.yaml).
 
 #### vCP Provisioner 
 

From 7174cfcd6926833bdc1342217a14bb4dc2fde14c Mon Sep 17 00:00:00 2001
From: Navid Zolghadr <nzolghadr@chromium.org>
Date: Thu, 17 Sep 2020 16:59:45 -0400
Subject: [PATCH 363/496] Fix a small typo

---
 content/en/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/containers/images.md b/content/en/docs/concepts/containers/images.md
index ddd294feda..e681f1a351 100644
--- a/content/en/docs/concepts/containers/images.md
+++ b/content/en/docs/concepts/containers/images.md
@@ -63,7 +63,7 @@ When `imagePullPolicy` is defined without a specific value, it is also set to `A
 
 ## Multi-architecture Images with Manifests
 
-As well as providing binary images, a container registry can also serve a [container image manifest](https://github.com/opencontainers/image-spec/blob/master/manifest.md). A manifest can reference image manifests for architecture-specific versions of an container. The idea is that you can have a name for an image (for example: `pause`, `example/mycontainer`, `kube-apiserver`) and allow different systems to fetch the right binary image for the machine architecture they are using.
+As well as providing binary images, a container registry can also serve a [container image manifest](https://github.com/opencontainers/image-spec/blob/master/manifest.md). A manifest can reference image manifests for architecture-specific versions of a container. The idea is that you can have a name for an image (for example: `pause`, `example/mycontainer`, `kube-apiserver`) and allow different systems to fetch the right binary image for the machine architecture they are using.
 
 Kubernetes itself typically names container images with a suffix `-$(ARCH)`. For backward compatibility, please generate the older images with suffixes. The idea is to generate say `pause` image which has the manifest for all the arch(es) and say `pause-amd64` which is backwards compatible for older configurations or YAML files which may have hard coded the images with suffixes.
 

From e89dc4f7c2f181825718a96cd1ff5ebd15469adc Mon Sep 17 00:00:00 2001
From: Feruzjon Muyassarov <feruzjon.muyassarov@est.tech>
Date: Fri, 18 Sep 2020 00:30:28 +0300
Subject: [PATCH 364/496] Fix 404 in storage doc

---
 content/en/docs/concepts/storage/ephemeral-volumes.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/concepts/storage/ephemeral-volumes.md b/content/en/docs/concepts/storage/ephemeral-volumes.md
index 26e60eb775..450c258614 100644
--- a/content/en/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/en/docs/concepts/storage/ephemeral-volumes.md
@@ -39,11 +39,11 @@ simplifies application deployment and management.
 
 Kubernetes supports several different kinds of ephemeral volumes for
 different purposes:
-- [emptyDir](/docs/concepts/volumes/#emptydir): empty at Pod startup,
+- [emptyDir](/docs/concepts/storage/volumes/#emptydir): empty at Pod startup,
   with storage coming locally from the kubelet base directory (usually
   the root disk) or RAM
-- [configMap](/docs/concepts/volumes/#configmap),
-  [downwardAPI](/docs/concepts/volumes/#downwardapi),
+- [configMap](/docs/concepts/storage/volumes/#configmap),
+  [downwardAPI](/docs/concepts/storage/volumes/#downwardapi),
   [secret](/docs/concepts/storage/volumes/#secret): inject different
   kinds of Kubernetes data into a Pod
 - [CSI ephemeral

From 4c1e3492a9847a175369ccb6d443c7e4d285249c Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Fri, 18 Sep 2020 01:20:47 +0300
Subject: [PATCH 365/496] fix toggle button

---
 assets/scss/_custom.scss | 1 +
 1 file changed, 1 insertion(+)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index f1f4b297ac..ebe073a686 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -422,6 +422,7 @@ body.cid-community > #deprecation-warning > .deprecation-warning > * {
       }
 
       color: $blue;
+      margin: 1rem;
     }
   }
 }

From c65afaea83b1498deb9625d5ac6b71fc87dbdf96 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Wed, 26 Aug 2020 10:42:49 +0800
Subject: [PATCH 366/496] [zh] Translate
 reference/access-authn-authz/authentication.md

---
 .../access-authn-authz/authentication.md      | 1564 +++++++++++++++++
 1 file changed, 1564 insertions(+)
 create mode 100644 content/zh/docs/reference/access-authn-authz/authentication.md

diff --git a/content/zh/docs/reference/access-authn-authz/authentication.md b/content/zh/docs/reference/access-authn-authz/authentication.md
new file mode 100644
index 0000000000..64c70cf898
--- /dev/null
+++ b/content/zh/docs/reference/access-authn-authz/authentication.md
@@ -0,0 +1,1564 @@
+---
+title: 用户认证
+content_type: concept
+weight: 10
+---
+<!--
+reviewers:
+- erictune
+- lavalamp
+- ericchiang
+- deads2k
+- liggitt
+title: Authenticating
+content_type: concept
+weight: 10
+-->
+
+<!-- overview -->
+<!--
+This page provides an overview of authenticating.
+-->
+本页提供身份认证有关的概述。
+
+<!-- body -->
+<!--
+## Users in Kubernetes
+
+All Kubernetes clusters have two categories of users: service accounts managed
+by Kubernetes, and normal users.
+
+It is assumed that a cluster-independent service manages normal users in the following ways:
+
+- an administrator distributing private keys
+- a user store like Keystone or Google Accounts
+- a file with a list of usernames and passwords
+
+In this regard, _Kubernetes does not have objects which represent normal user
+accounts._ Normal users cannot be added to a cluster through an API call.
+-->
+## Kubernetes 中的用户  {#users-in-kubernetes}
+
+所有 Kubernetes 集群都有两类用户：由 Kubernetes 管理的服务账号和普通用户。
+
+Kuernetes 假定使用以下方式之一来利用与集群无关的服务来管理普通用户：
+
+- 负责分发私钥的管理员
+- 类似 Keystone 或者 Google Accounts 这类用户数据库
+- 包含用户名和密码列表的文件
+
+有鉴于此，_Kubernetes 并不包含用来代表普通用户账号的对象_。
+普通用户的信息无法通过 API 调用添加到集群中。
+
+<!--
+Even though normal user cannot be added via an API call, but any user that
+presents a valid certificate signed by the cluster’s certificate authority
+(CA) is considered authenticated. In this configuration, Kubernetes determines
+the username from the common name field in the ‘subject’ of the cert (e.g.,
+“/CN=bob”). From there, the role based access control (RBAC) sub-system would
+determine whether the user is authorized to perform a specific operation on a
+resource. For more details, refer to the normal users topic in
+[certificate request](/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user)
+for more details about this.
+-->
+尽管无法通过 API 调用来添加普通用户，Kubernetes 仍然认为能够提供由集群的证书
+机构签名的合法证书的用户是通过身份认证的用户。基于这样的配置，Kubernetes
+使用证书中的 'subject' 的通用名称（Common Name）字段（例如，"/CN=bob"）来
+确定用户名。接下来，基于角色访问控制（RBAC）子系统会确定用户是否有权针对
+某资源执行特定的操作。进一步的细节可参阅
+[证书请求](/zh/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user)
+下普通用户主题。
+
+<!--
+In contrast, service accounts are users managed by the Kubernetes API. They are
+bound to specific namespaces, and created automatically by the API server or
+manually through API calls. Service accounts are tied to a set of credentials
+stored as `Secrets`, which are mounted into pods allowing in-cluster processes
+to talk to the Kubernetes API.
+
+API requests are tied to either a normal user or a service account, or are treated
+as [anonymous requests](#anonymous-requests). This means every process inside or outside the cluster, from
+a human user typing `kubectl` on a workstation, to `kubelets` on nodes, to members
+of the control plane, must authenticate when making requests to the API server,
+or be treated as an anonymous user.
+-->
+与此不同，服务账号是 Kubernetes API 所管理的用户。它们被绑定到特定的名字空间，
+或者由 API 服务器自动创建，或者通过 API 调用创建。服务账号与一组以 Secret 保存
+的凭据相关，这些凭据会被挂载到 Pod 中，从而允许集群内的进程访问 Kubernetes
+API。
+
+API 请求则或者与某普通用户相关联，或者与某服务账号相关联，亦或者被视作
+[匿名请求](#anonymous-requests)。这意味着集群内外的每个进程在向 API 服务器发起
+请求时都必须通过身份认证，否则会被视作匿名用户。这里的进程可以是在某工作站上
+输入 `kubectl` 命令的操作人员，也可以是节点上的 `kubelet` 组件，还可以是控制面
+的成员。
+
+<!--
+## Authentication strategies
+
+Kubernetes uses client certificates, bearer tokens, an authenticating proxy, or HTTP basic auth to
+authenticate API requests through authentication plugins. As HTTP requests are
+made to the API server, plugins attempt to associate the following attributes
+with the request:
+-->
+## 身份认证策略  {#authentication-strategies}
+
+Kubernetes 使用身份认证插件利用客户端证书、持有者令牌（Bearer Token）、身份认证代理（Proxy）
+或者 HTTP 基本认证机制来认证 API 请求的身份。HTTP 请求发给 API 服务器时，
+插件会将以下属性关联到请求本身：
+
+<!--
+* Username: a string which identifies the end user. Common values might be `kube-admin` or `jane@example.com`.
+* UID: a string which identifies the end user and attempts to be more consistent and unique than username.
+* Groups: a set of strings, each of which indicates the user's membership in a named logical collection of users. Common values might be `system:masters` or `devops-team`.
+* Extra fields: a map of strings to list of strings which holds additional information authorizers may find useful.
+-->
+* 用户名：用来辩识最终用户的字符串。常见的值可以是 `kube-admin` 或 `jane@example.com`。
+* 用户 ID：用来辩识最终用户的字符串，旨在比用户名有更好的一致性和唯一性。
+* 用户组：取值为一组字符串，其中各个字符串用来标明用户是某个命名的用户逻辑集合的成员。
+  常见的值可能是 `system:masters` 或者 `devops-team` 等。
+* 附加字段：一组额外的键-值映射，键是字符串，值是一组字符串；用来保存一些鉴权组件可能
+  觉得有用的额外信息。
+
+<!--
+All values are opaque to the authentication system and only hold significance
+when interpreted by an [authorizer](/docs/reference/access-authn-authz/authorization/).
+
+You can enable multiple authentication methods at once. You should usually use at least two methods:
+
+ - service account tokens for service accounts
+ - at least one other method for user authentication.
+-->
+所有（属性）值对于身份认证系统而言都是不透明的，只有被
+[鉴权组件](/zh/docs/reference/access-authn-authz/authorization/)
+解释过之后才有意义。
+
+你可以同时启用多种身份认证方法，并且你通常会至少使用两种方法：
+
+- 针对服务账号使用服务账号令牌
+- 至少另外一种方法对用户的身份进行认证
+
+<!--
+When multiple authenticator modules are enabled, the first module
+to successfully authenticate the request short-circuits evaluation.
+The API server does not guarantee the order authenticators run in.
+
+The `system:authenticated` group is included in the list of groups for all authenticated users.
+
+Integrations with other authentication protocols (LDAP, SAML, Kerberos, alternate x509 schemes, etc)
+can be accomplished using an [authenticating proxy](#authenticating-proxy) or the
+[authentication webhook](#webhook-token-authentication).
+-->
+当集群中启用了多个身份认证模块时，第一个成功地对请求完成身份认证的模块会
+直接做出评估决定。API 服务器并不保证身份认证模块的运行顺序。
+
+对于所有通过身份认证的用户，`system:authenticated` 组都会被添加到其组列表中。
+
+与其它身份认证协议（LDAP、SAML、Kerberos、X509 的替代模式等等）都可以通过
+使用一个[身份认证代理](#authenticating-proxy)或
+[身份认证 Webhoook](#webhook-token-authentication)来实现。
+
+<!--
+### X509 Client Certs
+
+Client certificate authentication is enabled by passing the `-client-ca-file=SOMEFILE`
+option to API server. The referenced file must contain one or more certificate authorities
+to use to validate client certificates presented to the API server. If a client certificate
+is presented and verified, the common name of the subject is used as the user name for the
+request. As of Kubernetes 1.4, client certificates can also indicate a user's group memberships
+using the certificate's organization fields. To include multiple group memberships for a user,
+include multiple organization fields in the certificate.
+
+For example, using the `openssl` command line tool to generate a certificate signing request:
+-->
+### X509 客户证书   {#x509-client-certs}
+
+通过给 API 服务器传递 `--client-ca-file=SOMEFILE` 选项，就可以启动客户端证书身份认证。
+所引用的文件必须包含一个或者多个证书机构，用来验证向 API 服务器提供的客户端证书。
+如果提供了客户端证书并且证书被验证通过，则 subject 中的公共名称（Common Name）就被
+作为请求的用户名。
+自 Kubernetes 1.4 开始，客户端证书还可以通过证书的 organization 字段标明用户的组成员信息。
+要包含用户的多个组成员信息，可以在证书种包含多个 organization 字段。
+
+例如，使用 `openssl` 命令行工具生成一个证书签名请求：
+
+``` bash
+openssl req -new -key jbeda.pem -out jbeda-csr.pem -subj "/CN=jbeda/O=app1/O=app2"
+```
+
+<!--
+This would create a CSR for the username "jbeda", belonging to two groups, "app1" and "app2".
+
+See [Managing Certificates](/docs/concepts/cluster-administration/certificates/) for how to generate a client cert.
+-->
+此命令将使用用户名 `jbeda` 生成一个证书签名请求（CSR），且该用户属于 "app" 和
+"app2" 两个用户组。
+
+参阅[管理证书](/zh/docs/concepts/cluster-administration/certificates/)了解如何生成客户端证书。
+
+<!--
+### Static Token File
+
+The API server reads bearer tokens from a file when given the `-token-auth-file=SOMEFILE` option on the command line.  Currently, tokens last indefinitely, and the token list cannot be
+changed without restarting API server.
+
+The token file is a csv file with a minimum of 3 columns: token, user name, user uid,
+followed by optional group names.
+-->
+### 静态令牌文件  {#static-token-file}
+
+当 API 服务器的命令行设置了 `--token-auth-file=SOMEFILE` 选项时，会从文件中
+读取持有者令牌。目前，令牌会长期有效，并且在不重启 API 服务器的情况下
+无法更改令牌列表。
+
+令牌文件是一个 CSV 文件，包含至少 3 个列：令牌、用户名和用户的 UID。
+其余列被视为可选的组名。
+
+<!--
+If you have more than one group the column must be double quoted e.g.
+
+```conf
+token,user,uid,"group1,group2,group3"
+```
+-->
+{{< note >}}
+如果要设置的组名不止一个，则对应的列必须用双引号括起来，例如
+
+```conf
+token,user,uid,"group1,group2,group3"
+```
+{{< /note >}}
+
+<!--
+#### Putting a Bearer Token in a Request
+
+When using bearer token authentication from an http client, the API
+server expects an `Authorization` header with a value of `Bearer
+THETOKEN`.  The bearer token must be a character sequence that can be
+put in an HTTP header value using no more than the encoding and
+quoting facilities of HTTP.  For example: if the bearer token is
+`31ada4fd-adec-460c-809a-9e56ceb75269` then it would appear in an HTTP
+header as shown below.
+-->
+#### 在请求中放入持有者令牌   {#putting-a-bearer-token-in-a-request}
+
+当使用持有者令牌来对某 HTTP 客户端执行身份认证时，API 服务器希望看到
+一个名为 `Authorization` 的 HTTP 头，其值格式为 `Bearer THETOKEN`。
+持有者令牌必须是一个可以放入 HTTP 头部值字段的字符序列，至多可使用
+HTTP 的编码和引用机制。
+例如：如果持有者令牌为 `31ada4fd-adec-460c-809a-9e56ceb75269`，则其
+出现在 HTTP 头部时如下所示：
+
+```http
+Authorization: Bearer 31ada4fd-adec-460c-809a-9e56ceb75269
+```
+
+<!--
+### Bootstrap Tokens
+-->
+### 启动引导令牌    {#bootstrap-tokens}
+
+{{< feature-state for_k8s_version="v1.18" state="stable" >}}
+
+<!--
+To allow for streamlined bootstrapping for new clusters, Kubernetes includes a
+dynamically-managed Bearer token type called a *Bootstrap Token*. These tokens
+are stored as Secrets in the `kube-system` namespace, where they can be
+dynamically managed and created. Controller Manager contains a TokenCleaner
+controller that deletes bootstrap tokens as they expire.
+-->
+为了支持平滑地启动引导新的集群，Kubernetes 包含了一种动态管理的持有者令牌类型，
+称作 *启动引导令牌（Bootstrap Token）*。
+这些令牌以 Secret 的形式保存在 `kube-system` 名字空间中，可以被动态管理和创建。
+控制器管理器包含的 `TokenCleaner` 控制器能够在启动引导令牌过期时将其删除。
+
+<!--
+The tokens are of the form `[a-z0-9]{6}.[a-z0-9]{16}`.  The first component is a
+Token ID and the second component is the Token Secret.  You specify the token
+in an HTTP header as follows:
+-->
+这些令牌的格式为 `[a-z0-9]{6}.[a-z0-9]{16}`。第一个部分是令牌的 ID；第二个部分
+是令牌的 Secret。你可以用如下所示的方式来在 HTTP 头部设置令牌：
+
+```http
+Authorization: Bearer 781292.db7bc3a58fc5f07e
+```
+
+<!--
+You must enable the Bootstrap Token Authenticator with the
+`-enable-bootstrap-token-auth` flag on the API Server.  You must enable
+the TokenCleaner controller via the `-controllers` flag on the Controller
+Manager.  This is done with something like `-controllers=*,tokencleaner`.
+`kubeadm` will do this for you if you are using it to bootstrap a cluster.
+-->
+你必须在 API 服务器上设置 `--enable-bootstrap-token-auth` 标志来启用基于启动
+引导令牌的身份认证组件。
+你必须通过控制器管理器的 `--controllers` 标志来启用 TokenCleaner 控制器；
+这可以通过类似 `--controllers=*,tokencleaner` 这种设置来做到。
+如果你使用 `kubeadm` 来启动引导新的集群，该工具会帮你完成这些设置。
+
+<!--
+The authenticator authenticates as `system:bootstrap:<Token ID>`.  It is
+included in the `system:bootstrappers` group.  The naming and groups are
+intentionally limited to discourage users from using these tokens past
+bootstrapping.  The user names and group can be used (and are used by `kubeadm`)
+to craft the appropriate authorization policies to support bootstrapping a
+cluster.
+-->
+身份认证组件的认证结果为 `system:bootstrap:<令牌 ID>`，该用户属于
+`system:bootstrappers` 用户组。
+这里的用户名和组设置都是有意设计成这样，其目的是阻止用户在启动引导集群之后
+继续使用这些令牌。
+这里的用户名和组名可以用来（并且已经被 `kubeadm` 用来）构造合适的鉴权
+策略，以完成启动引导新集群的工作。
+
+<!--
+Please see [Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/) for in depth
+documentation on the Bootstrap Token authenticator and controllers along with
+how to manage these tokens with `kubeadm`.
+-->
+请参阅[启动引导令牌](/zh/docs/reference/access-authn-authz/bootstrap-tokens/)
+以了解关于启动引导令牌身份认证组件与控制器的更深入的信息，以及如何使用
+`kubeadm` 来管理这些令牌。
+
+<!--
+### Static Password File
+
+Basic authentication is enabled by passing the `-basic-auth-file=SOMEFILE`
+option to API server. Currently, the basic auth credentials last indefinitely,
+and the password cannot be changed without restarting API server. Note that basic
+authentication is currently supported for convenience while we finish making the
+more secure modes described above easier to use.
+-->
+### Static Password File
+
+通过向 API 服务器传递 `--basic-auth-file=SOMEFILE` 选项可以启用基本的
+身份认证。目前，基本身份认证所涉及的凭据信息会长期有效，并且在不重启 API
+服务器的情况下无法改变用户的密码。
+要注意的是，对基本身份认证的支持目前仅是出于方便性考虑。
+与此同时我们正在增强前述的、更为安全的模式的易用性。
+
+<!--
+The basic auth file is a csv file with a minimum of 3 columns: password, user name, user id.
+In Kubernetes version 1.6 and later, you can specify an optional fourth column containing
+comma-separated group names. If you have more than one group, you must enclose the fourth
+column value in double quotes ("). See the following example:
+-->
+基本身份认证数据文件是一个 CSV 文件，包含至少 3 列：密码、用户名和用户 ID。
+在 Kuernetes 1.6 及后续版本中，你可以指定一个可选的第 4 列，在其中给出用逗号
+分隔的用户组名。如果用户组名不止一个，你必须将第 4 列的值用双引号括起来。
+参见下面的例子：
+
+```conf
+password,user,uid,"group1,group2,group3"
+```
+
+<!--
+When using basic authentication from an http client, the API server expects an `Authorization` header
+with a value of `Basic BASE64ENCODED(USER:PASSWORD)`.
+-->
+当在 HTTP 客户端使用基本身份认证机制时，API 服务器会期望看到名为
+`Authorization` 的 HTTP 头部，其值形如 `Basic USER:PASSWORD的Base64编码字符串`
+
+<!--
+### Service Account Tokens
+
+A service account is an automatically enabled authenticator that uses signed
+bearer tokens to verify requests. The plugin takes two optional flags:
+
+* `-service-account-key-file` A file containing a PEM encoded key for signing bearer tokens.
+If unspecified, the API server's TLS private key will be used.
+* `-service-account-lookup` If enabled, tokens which are deleted from the API will be revoked.
+-->
+### 服务账号令牌   {#service-account-tokens}
+
+服务账号（Service Account）是一种自动被启用的用户认证机制，使用经过签名的
+持有者令牌来验证请求。该插件可接受两个可选参数：
+
+* `--service-account-key-file` 一个包含用来为持有者令牌签名的 PEM 编码密钥。
+  若未指定，则使用 API 服务器的 TLS 私钥。
+* `--service-account-lookup` 如果启用，则从 API 删除的令牌会被回收。
+
+<!--
+Service accounts are usually created automatically by the API server and
+associated with pods running in the cluster through the `ServiceAccount`
+[Admission Controller](/docs/reference/access-authn-authz/admission-controllers/). Bearer tokens are
+mounted into pods at well-known locations, and allow in-cluster processes to
+talk to the API server. Accounts may be explicitly associated with pods using the
+`serviceAccountName` field of a `PodSpec`.
+-->
+服务账号通常由 API 服务器自动创建并通过 `ServiceAccount` 
+[准入控制器](/zh/docs/reference/access-authn-authz/admission-controllers/)
+关联到集群中运行的 Pod 上。
+持有者令牌会挂载到 Pod 中可预知的为之，允许集群内进程与 API 服务器通信。
+服务账号也可以使用 Pod 规约的 `serviceAccountName` 字段显式地关联到 Pod 上。
+
+<!--
+`serviceAccountName` is usually omitted because this is done automatically.
+-->
+{{< note >}}
+`serviceAccountName` 通常会被忽略，因为关联关系是自动建立的。
+{{< /note >}}
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-deployment
+  namespace: default
+spec:
+  replicas: 3
+  template:
+    metadata:
+    # ...
+    spec:
+      serviceAccountName: bob-the-bot
+      containers:
+      - name: nginx
+        image: nginx:1.14.2
+```
+
+<!--
+Service account bearer tokens are perfectly valid to use outside the cluster and
+can be used to create identities for long standing jobs that wish to talk to the
+Kubernetes API. To manually create a service account, simply use the `kubectl
+create serviceaccount (NAME)` command. This creates a service account in the
+current namespace and an associated secret.
+-->
+在集群外部使用服务账号持有者令牌也是完全合法的，且可用来为长时间运行的、需要与
+Kubernetes  API 服务器通信的任务创建标识。要手动创建服务账号，可以使用
+`kubectl create serviceaccount <名称>` 命令。此命令会在当前的名字空间中生成一个
+服务账号和一个与之关联的 Secret。
+
+```bash
+kubectl create serviceaccount jenkins
+```
+
+```
+serviceaccount/jenkins created
+```
+
+<!--
+Check an associated secret:
+-->
+查验相关联的 Secret：
+
+```bash
+kubectl get serviceaccounts jenkins -o yaml
+```
+
+```yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  # ...
+secrets:
+- name: jenkins-token-1yvwg
+```
+
+<!--
+The created secret holds the public CA of the API server and a signed JSON Web
+Token (JWT).
+-->
+所创建的 Secret 中会保存 API 服务器的公开的 CA 证书和一个已签名的 JSON Web
+令牌（JWT）。
+
+```bash
+kubectl get secret jenkins-token-1yvwg -o yaml
+```
+
+<!--
+```yaml
+apiVersion: v1
+data:
+  ca.crt: (APISERVER'S CA BASE64 ENCODED)
+  namespace: ZGVmYXVsdA==
+  token: (BEARER TOKEN BASE64 ENCODED)
+kind: Secret
+metadata:
+  # ...
+type: kubernetes.io/service-account-token
+```
+-->
+```yaml
+apiVersion: v1
+data:
+  ca.crt: <Base64 编码的 API 服务器 CA>
+  namespace: ZGVmYXVsdA==
+  token: <Base64 编码的持有者令牌>
+kind: Secret
+metadata:
+  # ...
+type: kubernetes.io/service-account-token
+```
+
+<!--
+Values are base64 encoded because secrets are always base64 encoded.
+-->
+{{< note >}}
+字段值是按 Base64 编码的，这是因为 Secret 数据总是采用 Base64 编码来存储。
+{{< /note >}}
+
+<!--
+The signed JWT can be used as a bearer token to authenticate as the given service
+account. See [above](#putting-a-bearer-token-in-a-request) for how the token is included
+in a request.  Normally these secrets are mounted into pods for in-cluster access to
+the API server, but can be used from outside the cluster as well.
+-->
+已签名的 JWT 可以用作持有者令牌，并将被认证为所给的服务账号。
+关于如何在请求中包含令牌，请参阅[前文](#putting-a-bearer-token-in-a-request)。
+通常，这些 Secret 数据会被挂载到 Pod 中以便集群内访问 API 服务器时使用，
+不过也可以在集群外部使用。
+
+<!--
+Service accounts authenticate with the username `system:serviceaccount:(NAMESPACE):(SERVICEACCOUNT)`,
+and are assigned to the groups `system:serviceaccounts` and `system:serviceaccounts:(NAMESPACE)`.
+
+WARNING: Because service account tokens are stored in secrets, any user with
+read access to those secrets can authenticate as the service account. Be cautious
+when granting permissions to service accounts and read capabilities for secrets.
+-->
+服务账号被身份认证后，所确定的用户名为 `system:serviceaccount:<名字空间>:<服务账号>`，
+并被分配到用户组 `system:serviceaccounts` 和 `system:serviceaccounts:<名字空间>`。
+
+警告：由于服务账号令牌保存在 Secret 对象中，任何能够读取这些 Secret 的用户
+都可以被认证为对应的服务账号。在为用户授予访问服务账号的权限时，以及对 Secret
+的读权限时，要格外小心。
+
+<!--
+### OpenID Connect Tokens
+
+[OpenID Connect](https://openid.net/connect/) is a flavor of OAuth2 supported by
+some OAuth2 providers, notably Azure Active Directory, Salesforce, and Google.
+The protocol's main extension of OAuth2 is an additional field returned with
+the access token called an [ID Token](https://openid.net/specs/openid-connect-core-1_0.html#IDToken).
+This token is a JSON Web Token (JWT) with well known fields, such as a user's
+email, signed by the server.
+-->
+### OpenID Connect（OIDC）令牌   {#openid-connect-tokens}
+
+[OpenID Connect](https://openid.net/connect/) 是一种 OAuth2  认证方式，
+被某些 OAuth2 提供者支持，例如 Azure 活动目录、Salesforce 和 Google。
+协议对 OAuth2 的主要扩充体现在有一个附加字段会和访问令牌一起返回，
+这一字段称作 [ID Token（ID 令牌）](https://openid.net/specs/openid-connect-core-1_0.html#IDToken)。
+ID 令牌是一种由服务器签名的 JSON Web 令牌（JWT），其中包含一些可预知的字段，
+例如用户的邮箱地址，
+
+<!--
+To identify the user, the authenticator uses the `id_token` (not the `access_token`)
+from the OAuth2 [token response](https://openid.net/specs/openid-connect-core-1_0.html#TokenResponse)
+as a bearer token.  See [above](#putting-a-bearer-token-in-a-request) for how the token
+is included in a request.
+-->
+要识别用户，身份认证组件使用 OAuth2 
+[令牌响应](https://openid.net/specs/openid-connect-core-1_0.html#TokenResponse)
+中的 `id_token`（而非 `access_token`）作为持有者令牌。
+关于如何在请求中设置令牌，可参见[前文](#putting-a-bearer-token-in-a-request)。
+
+![Kubernetes OpenID Connect Flow](/images/docs/admin/k8s_oidc_login.svg)
+
+<!--
+1.  Login to your identity provider
+2.  Your identity provider will provide you with an `access_token`, `id_token` and a `refresh_token`
+3.  When using `kubectl`, use your `id_token` with the `-token` flag or add it directly to your `kubeconfig`
+4.  `kubectl` sends your `id_token` in a header called Authorization to the API server
+5.  The API server will make sure the JWT signature is valid by checking against the certificate named in the configuration
+6.  Check to make sure the `id_token` hasn't expired
+7.  Make sure the user is authorized
+8.  Once authorized the API server returns a response to `kubectl`
+9.  `kubectl` provides feedback to the user
+-->
+1.  登录到你的身份服务（Identity Provider）
+2.  你的身份服务将为你提供 `access_token`、`id_token` 和 `refresh_token`
+3.  在使用 `kubectl` 时，将 `id_token` 设置为 `--token` 标志值，或者将其直接添加到
+    `kubeconfig` 中
+4.  `kubectl` 将你的 `id_token` 放到一个称作 `Authorization` 的头部，发送给 API 服务器
+5.  API 服务器将负责通过检查配置中引用的证书来确认 JWT 的签名是合法的
+6.  检查确认 `id_token` 尚未过期
+7.  确认用户有权限执行操作
+8.  鉴权成功之后，API 服务器向 `kubectl` 返回响应
+9.  `kubectl` 向用户提供反馈信息
+
+<!--
+Since all of the data needed to validate who you are is in the `id_token`, Kubernetes doesn't need to
+"phone home" to the identity provider.  In a model where every request is stateless this provides a very scalable
+solution for authentication.  It does offer a few challenges:
+-->
+由于用来验证你是谁的所有数据都在 `id_token` 中，Kubernetes 不需要再去联系
+身份服务。在一个所有请求都是无状态请求的模型中，这一工作方式可以使得身份认证
+的解决方案更容易处理大规模请求。不过，此访问也有一些挑战：
+
+<!--
+1.  Kubernetes has no "web interface" to trigger the authentication process.  There is no browser or interface to collect credentials which is why you need to authenticate to your identity provider first.
+2.  The `id_token` can't be revoked, it's like a certificate so it should be short-lived (only a few minutes) so it can be very annoying to have to get a new token every few minutes.
+3.  There's no easy way to authenticate to the Kubernetes dashboard without using the `kubectl proxy` command or a reverse proxy that injects the `id_token`.
+-->
+1.  Kubernetes 没有提供用来触发身份认证过程的 "Web 界面"。
+    因为不存在用来收集用户凭据的浏览器或用户接口，你必须自己先行完成
+    对身份服务的认证过程。
+2.  `id_token` 令牌不可收回。因其属性类似于证书，其生命期一般很短（只有几分钟），
+    所以，每隔几分钟就要获得一个新的令牌这件事可能很让人头疼。
+3.  如果不使用 `kubectl proxy` 命令或者一个能够注入 `id_token` 的反向代理，
+    向 Kubernetes 控制面板执行身份认证是很困难的。
+
+<!--
+#### Configuring the API Server
+
+To enable the plugin, configure the following flags on the API server:
+-->
+#### 配置 API 服务器    {#configuring-the-api-server}
+
+要启用此插件，须在 API 服务器上配置以下标志：
+
+<!--
+| Parameter | Description | Example | Required |
+| --------- | ----------- | ------- | ------- |
+| `--oidc-issuer-url` | URL of the provider which allows the API server to discover public signing keys. Only URLs which use the `https://` scheme are accepted.  This is typically the provider's discovery URL without a path, for example "https://accounts.google.com" or "https://login.salesforce.com".  This URL should point to the level below .well-known/openid-configuration | If the discovery URL is `https://accounts.google.com/.well-known/openid-configuration`, the value should be `https://accounts.google.com` | Yes |
+| `--oidc-client-id` |  A client id that all tokens must be issued for. | kubernetes | Yes |
+| `--oidc-username-claim` | JWT claim to use as the user name. By default `sub`, which is expected to be a unique identifier of the end user. Admins can choose other claims, such as `email` or `name`, depending on their provider. However, claims other than `email` will be prefixed with the issuer URL to prevent naming clashes with other plugins. | sub | No |
+| `--oidc-username-prefix` | Prefix prepended to username claims to prevent clashes with existing names (such as `system:` users). For example, the value `oidc:` will create usernames like `oidc:jane.doe`. If this flag isn't provided and `--oidc-username-claim` is a value other than `email` the prefix defaults to `( Issuer URL )#` where `( Issuer URL )` is the value of `--oidc-issuer-url`. The value `-` can be used to disable all prefixing. | `oidc:` | No |
+| `--oidc-groups-claim` | JWT claim to use as the user's group. If the claim is present it must be an array of strings. | groups | No |
+| `--oidc-groups-prefix` | Prefix prepended to group claims to prevent clashes with existing names (such as `system:` groups). For example, the value `oidc:` will create group names like `oidc:engineering` and `oidc:infra`. | `oidc:` | No |
+| `--oidc-required-claim` | A key=value pair that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a matching value. Repeat this flag to specify multiple claims. | `claim=value` | No |
+| `--oidc-ca-file` | The path to the certificate for the CA that signed your identity provider's web certificate.  Defaults to the host's root CAs. | `/etc/kubernetes/ssl/kc-ca.pem` | No |
+-->
+
+| 参数 | 描述 | 示例 | 必需？ |
+| --------- | ----------- | ------- | ------- |
+| `--oidc-issuer-url` | 允许 API 服务器发现公开的签名密钥的服务的 URL。只接受模式为 `https://` 的 URL。此值通常设置为服务的发现 URL，不含路径。例如："https://accounts.google.com" 或 "https://login.salesforce.com"。此 URL 应指向 .well-known/openid-configuration 下一层的路径。 | 如果发现 URL 是 `https://accounts.google.com/.well-known/openid-configuration`，则此值应为 `https://accounts.google.com` | 是 |
+| `--oidc-client-id` |  所有令牌都应发放给此客户 ID。 | kubernetes | 是 |
+| `--oidc-username-claim` | 用作用户名的 JWT 申领（JWT Claim）。默认情况下使用 `sub` 值，即最终用户的一个唯一的标识符。管理员也可以选择其他申领，例如 `email` 或者 `name`，取决于所用的身份服务。不过，除了 `email` 之外的申领都会被添加令牌发放者的 URL 作为前缀，以免与其他插件产生命名冲突。 | sub | 否 |
+| `--oidc-username-prefix` | 要添加到用户名申领之前的前缀，用来避免与现有用户名发生冲突（例如：`system:` 用户）。例如，此标志值为 `oidc:` 时将创建形如 `oidc:jane.doe` 的用户名。如果此标志未设置，且 `--oidc-username-claim` 标志值不是 `email`，则默认前缀为 `<令牌发放者的 URL>#`，其中 `<令牌发放者 URL >` 的值取自 `--oidc-issuer-url` 标志的设定。此标志值为 `-` 时，意味着禁止添加用户名前缀。 | `oidc:` | 否 |
+| `--oidc-groups-claim` | 用作用户组名的 JWT 申领。如果所指定的申领确实存在，则其值必须是一个字符串数组。 | groups | 否 |
+| `--oidc-groups-prefix` | 添加到组申领的前缀，用来避免与现有用户组名（如：`system:` 组）发生冲突。例如，此标志值为 `oidc:` 时，所得到的用户组名形如 `oidc:engineering` 和 `oidc:infra`。 | `oidc:` | 否 |
+| `--oidc-required-claim` | 取值为一个 key=value 偶对，意为 ID 令牌中必须存在的申领。如果设置了此标志，则 ID 令牌会被检查以确定是否包含取值匹配的申领。此标志可多次重复，以指定多个申领。 | `claim=value` | 否 |
+| `--oidc-ca-file` | 指向一个 CA 证书的路径，该 CA 负责对你的身份服务的 Web 证书提供签名。默认值为宿主系统的根 CA。 | `/etc/kubernetes/ssl/kc-ca.pem` | 否 |
+
+<!--
+Importantly, the API server is not an OAuth2 client, rather it can only be
+configured to trust a single issuer. This allows the use of public providers,
+such as Google, without trusting credentials issued to third parties. Admins who
+wish to utilize multiple OAuth clients should explore providers which support the
+`azp` (authorized party) claim, a mechanism for allowing one client to issue
+tokens on behalf of another.
+-->
+很重要的一点是，API 服务器并非一个 OAuth2 客户端，相反，它只能被配置为
+信任某一个令牌发放者。这使得使用公共服务（如 Google）的用户可以不信任发放给
+第三方的凭据。
+如果管理员希望使用多个 OAuth 客户端，他们应该研究一下那些支持 `azp`
+（Authorized Party，被授权方）申领的服务。
+`azp` 是一种允许某客户端代替另一客户端发放令牌的机制。
+
+<!--
+Kubernetes does not provide an OpenID Connect Identity Provider.
+You can use an existing public OpenID Connect Identity Provider (such as Google, or
+[others](https://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers)).
+Or, you can run your own Identity Provider, such as CoreOS [dex](https://github.com/coreos/dex),
+[Keycloak](https://github.com/keycloak/keycloak), 
+CloudFoundry [UAA](https://github.com/cloudfoundry/uaa), or
+Tremolo Security's [OpenUnison](https://github.com/tremolosecurity/openunison).
+-->
+Kubernetes 并未提供 OpenID Connect 的身份服务。
+你可以使用现有的公共的 OpenID Connect 身份服务（例如 Google 或者
+[其他服务](https://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers)）。
+或者，你也可以选择自己运行一个身份服务，例如
+CoreOS [dex](https://github.com/coreos/dex)、
+[Keycloak](https://github.com/keycloak/keycloak)、
+CloudFoundry [UAA](https://github.com/cloudfoundry/uaa) 或者
+Tremolo Security 的
+[OpenUnison](https://github.com/tremolosecurity/openunison)。
+
+<!--
+For an identity provider to work with Kubernetes it must:
+
+1.  Support [OpenID connect discovery](https://openid.net/specs/openid-connect-discovery-1_0.html); not all do.
+2.  Run in TLS with non-obsolete ciphers
+3.  Have a CA signed certificate (even if the CA is not a commercial CA or is self signed)
+-->
+要在 Kubernetes 环境中使用某身份服务，该服务必须：
+
+1.  支持 [OpenID connect 发现](https://openid.net/specs/openid-connect-discovery-1_0.html)；
+    但事实上并非所有服务都具备此能力
+2.  运行 TLS 协议且所使用的加密组件都未过时
+3.  拥有由 CA 签名的证书（即使 CA 不是商业 CA 或者是自签名的 CA 也可以）
+
+<!--
+A note about requirement #3 above, requiring a CA signed certificate.  If you deploy your own identity provider (as opposed to one of the cloud providers like Google or Microsoft) you MUST have your identity provider's web server certificate signed by a certificate with the `CA` flag set to `TRUE`, even if it is self signed.  This is due to GoLang's TLS client implementation being very strict to the standards around certificate validation.  If you don't have a CA handy, you can use [this script](https://github.com/coreos/dex/blob/1ee5920c54f5926d6468d2607c728b71cfe98092/examples/k8s/gencert.sh) from the CoreOS team to create a simple CA and a signed certificate and key pair.
+Or you can use [this similar script](https://raw.githubusercontent.com/TremoloSecurity/openunison-qs-kubernetes/master/src/main/bash/makessl.sh) that generates SHA256 certs with a longer life and larger key size.
+-->
+关于上述第三条需求，即要求具备 CA 签名的证书，有一些额外的注意事项。
+如果你部署了自己的身份服务，而不是使用云厂商（如 Google 或 Microsoft）所提供的服务，
+你必须对身份服务的 Web 服务器证书进行签名，签名所用证书的 `CA` 标志要设置为
+`TRUE`，即使用的是自签名证书。这是因为 GoLang 的 TLS 客户端实现对证书验证
+标准方面有非常严格的要求。如果你手头没有现成的 CA 证书，可以使用 CoreOS
+团队所开发的[这个脚本](https://github.com/coreos/dex/blob/1ee5920c54f5926d6468d2607c728b71cfe98092/examples/k8s/gencert.sh)来创建一个简单的 CA 和被签了名的证书与密钥对。
+或者你也可以使用[这个类似的脚本](https://raw.githubusercontent.com/TremoloSecurity/openunison-qs-kubernetes/master/src/main/bash/makessl.sh)，生成一个合法期更长、密钥尺寸更大的 SHA256 证书。
+
+<!--
+Setup instructions for specific systems:
+-->
+特定系统的安装指令：
+
+- [UAA](https://docs.cloudfoundry.org/concepts/architecture/uaa.html)
+- [Dex](https://github.com/dexidp/dex/blob/master/Documentation/kubernetes.md)
+- [OpenUnison](https://www.tremolosecurity.com/orchestra-k8s/)
+
+<!--
+#### Using kubectl
+
+##### Option 1 - OIDC Authenticator
+
+The first option is to use the kubectl `oidc` authenticator, which sets the `id_token` as a bearer token for all requests and refreshes the token once it expires. After you've logged into your provider, use kubectl to add your `id_token`, `refresh_token`, `client_id`, and `client_secret` to configure the plugin.
+
+Providers that don't return an `id_token` as part of their refresh token response aren't supported by this plugin and should use "Option 2" below.
+-->
+#### 使用 kubectl   {#using-kubectl}
+
+##### 选项一 - OIDC 身份认证组件
+
+第一种方案是使用 kubectl 的 `oidc` 身份认证组件，该组件将 `id_token` 设置
+为所有请求的持有者令牌，并且在令牌过期时自动刷新。在你登录到你的身份服务之后，
+可以使用 kubectl 来添加你的 `id_token`、`refresh_token`、`client_id` 和
+`client_secret`，以配置该插件。
+
+如果服务在其刷新令牌响应中不包含 `id_token`，则此插件无法支持该服务。
+这时你应该考虑下面的选项二。
+
+```bash
+kubectl config set-credentials USER_NAME \
+   --auth-provider=oidc \
+   --auth-provider-arg=idp-issuer-url=( issuer url ) \
+   --auth-provider-arg=client-id=( your client id ) \
+   --auth-provider-arg=client-secret=( your client secret ) \
+   --auth-provider-arg=refresh-token=( your refresh token ) \
+   --auth-provider-arg=idp-certificate-authority=( path to your ca certificate ) \
+   --auth-provider-arg=id-token=( your id_token )
+```
+
+<!--
+As an example, running the below command after authenticating to your identity provider:
+-->
+作为示例，在完成对你的身份服务的身份认证之后，运行下面的命令：
+
+```bash
+kubectl config set-credentials mmosley  \
+        --auth-provider=oidc  \
+        --auth-provider-arg=idp-issuer-url=https://oidcidp.tremolo.lan:8443/auth/idp/OidcIdP  \
+        --auth-provider-arg=client-id=kubernetes  \
+        --auth-provider-arg=client-secret=1db158f6-177d-4d9c-8a8b-d36869918ec5  \
+        --auth-provider-arg=refresh-token=q1bKLFOyUiosTfawzA93TzZIDzH2TNa2SMm0zEiPKTUwME6BkEo6Sql5yUWVBSWpKUGphaWpxSVAfekBOZbBhaEW+VlFUeVRGcluyVF5JT4+haZmPsluFoFu5XkpXk5BXqHega4GAXlF+ma+vmYpFcHe5eZR+slBFpZKtQA= \
+        --auth-provider-arg=idp-certificate-authority=/root/ca.pem \
+        --auth-provider-arg=id-token=eyJraWQiOiJDTj1vaWRjaWRwLnRyZW1vbG8ubGFuLCBPVT1EZW1vLCBPPVRybWVvbG8gU2VjdXJpdHksIEw9QXJsaW5ndG9uLCBTVD1WaXJnaW5pYSwgQz1VUy1DTj1rdWJlLWNhLTEyMDIxNDc5MjEwMzYwNzMyMTUyIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL29pZGNpZHAudHJlbW9sby5sYW46ODQ0My9hdXRoL2lkcC9PaWRjSWRQIiwiYXVkIjoia3ViZXJuZXRlcyIsImV4cCI6MTQ4MzU0OTUxMSwianRpIjoiMm96US15TXdFcHV4WDlHZUhQdy1hZyIsImlhdCI6MTQ4MzU0OTQ1MSwibmJmIjoxNDgzNTQ5MzMxLCJzdWIiOiI0YWViMzdiYS1iNjQ1LTQ4ZmQtYWIzMC0xYTAxZWU0MWUyMTgifQ.w6p4J_6qQ1HzTG9nrEOrubxIMb9K5hzcMPxc9IxPx2K4xO9l-oFiUw93daH3m5pluP6K7eOE6txBuRVfEcpJSwlelsOsW8gb8VJcnzMS9EnZpeA0tW_p-mnkFc3VcfyXuhe5R3G7aa5d8uHv70yJ9Y3-UhjiN9EhpMdfPAoEB9fYKKkJRzF7utTTIPGrSaSU6d2pcpfYKaxIwePzEkT4DfcQthoZdy9ucNvvLoi1DIC-UocFD8HLs8LYKEqSxQvOcvnThbObJ9af71EwmuE21fO5KzMW20KtAeget1gnldOosPtz1G5EwvaQ401-RPQzPGMVBld0_zMCAwZttJ4knw
+```
+
+<!--
+Which would produce the below configuration:
+-->
+此操作会生成以下配置：
+
+```yaml
+users:
+- name: mmosley
+  user:
+    auth-provider:
+      config:
+        client-id: kubernetes
+        client-secret: 1db158f6-177d-4d9c-8a8b-d36869918ec5
+        id-token: eyJraWQiOiJDTj1vaWRjaWRwLnRyZW1vbG8ubGFuLCBPVT1EZW1vLCBPPVRybWVvbG8gU2VjdXJpdHksIEw9QXJsaW5ndG9uLCBTVD1WaXJnaW5pYSwgQz1VUy1DTj1rdWJlLWNhLTEyMDIxNDc5MjEwMzYwNzMyMTUyIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJodHRwczovL29pZGNpZHAudHJlbW9sby5sYW46ODQ0My9hdXRoL2lkcC9PaWRjSWRQIiwiYXVkIjoia3ViZXJuZXRlcyIsImV4cCI6MTQ4MzU0OTUxMSwianRpIjoiMm96US15TXdFcHV4WDlHZUhQdy1hZyIsImlhdCI6MTQ4MzU0OTQ1MSwibmJmIjoxNDgzNTQ5MzMxLCJzdWIiOiI0YWViMzdiYS1iNjQ1LTQ4ZmQtYWIzMC0xYTAxZWU0MWUyMTgifQ.w6p4J_6qQ1HzTG9nrEOrubxIMb9K5hzcMPxc9IxPx2K4xO9l-oFiUw93daH3m5pluP6K7eOE6txBuRVfEcpJSwlelsOsW8gb8VJcnzMS9EnZpeA0tW_p-mnkFc3VcfyXuhe5R3G7aa5d8uHv70yJ9Y3-UhjiN9EhpMdfPAoEB9fYKKkJRzF7utTTIPGrSaSU6d2pcpfYKaxIwePzEkT4DfcQthoZdy9ucNvvLoi1DIC-UocFD8HLs8LYKEqSxQvOcvnThbObJ9af71EwmuE21fO5KzMW20KtAeget1gnldOosPtz1G5EwvaQ401-RPQzPGMVBld0_zMCAwZttJ4knw
+        idp-certificate-authority: /root/ca.pem
+        idp-issuer-url: https://oidcidp.tremolo.lan:8443/auth/idp/OidcIdP
+        refresh-token: q1bKLFOyUiosTfawzA93TzZIDzH2TNa2SMm0zEiPKTUwME6BkEo6Sql5yUWVBSWpKUGphaWpxSVAfekBOZbBhaEW+VlFUeVRGcluyVF5JT4+haZmPsluFoFu5XkpXk5BXq
+      name: oidc
+```
+
+<!--
+Once your `id_token` expires, `kubectl` will attempt to refresh your `id_token` using your `refresh_token` and `client_secret` storing the new values for the `refresh_token` and `id_token` in your `.kube/config`.
+-->
+当你的 `id_token` 过期时，`kubectl` 会尝试使用你的 `refresh_token` 来刷新你的
+`id_token`，并且在 `client_secret` 中存放 `refresh_token` 的新值，同时把
+`id_token` 的新值写入到 `.kube/config` 文件中。
+
+<!--
+##### Option 2 - Use the `--token` Option
+
+The `kubectl` command lets you pass in a token using the `--token` option.  Simply copy and paste the `id_token` into this option:
+-->
+##### 选项二 - 使用 `--token` 选项
+
+`kubectl` 命令允许你使用 `--token` 选项传递一个令牌。
+你可以将 `id_token` 的内容复制粘贴过来，作为此标志的取值：
+
+```bash
+kubectl --token=eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL21sYi50cmVtb2xvLmxhbjo4MDQzL2F1dGgvaWRwL29pZGMiLCJhdWQiOiJrdWJlcm5ldGVzIiwiZXhwIjoxNDc0NTk2NjY5LCJqdGkiOiI2RDUzNXoxUEpFNjJOR3QxaWVyYm9RIiwiaWF0IjoxNDc0NTk2MzY5LCJuYmYiOjE0NzQ1OTYyNDksInN1YiI6Im13aW5kdSIsInVzZXJfcm9sZSI6WyJ1c2VycyIsIm5ldy1uYW1lc3BhY2Utdmlld2VyIl0sImVtYWlsIjoibXdpbmR1QG5vbW9yZWplZGkuY29tIn0.f2As579n9VNoaKzoF-dOQGmXkFKf1FMyNV0-va_B63jn-_n9LGSCca_6IVMP8pO-Zb4KvRqGyTP0r3HkHxYy5c81AnIh8ijarruczl-TK_yF5akjSTHFZD-0gRzlevBDiH8Q79NAr-ky0P4iIXS8lY9Vnjch5MF74Zx0c3alKJHJUnnpjIACByfF2SCaYzbWFMUNat-K1PaUk5-ujMBG7yYnr95xD-63n8CO8teGUAAEMx6zRjzfhnhbzX-ajwZLGwGUBT4WqjMs70-6a7_8gZmLZb2az1cZynkFRj2BaCkVT3A2RrjeEwZEtGXlMqKJ1_I2ulrOVsYx01_yD35-rw get nodes
+```
+
+<!--
+### Webhook Token Authentication
+
+Webhook authentication is a hook for verifying bearer tokens.
+
+* `--authentication-token-webhook-config-file` a configuration file describing how to access the remote webhook service.
+* `--authentication-token-webhook-cache-ttl` how long to cache authentication decisions. Defaults to two minutes.
+-->
+### Webhook 令牌身份认证   {#webhook-token-authentication}
+
+Webhook 身份认证是一种用来验证持有者令牌的回调机制。
+
+* `--authentication-token-webhook-config-file` 指向一个配置文件，其中描述
+  如何访问远程的 Webhook 服务。
+* `--authentication-token-webhook-cache-ttl` 用来设定身份认证决定的缓存时间。
+  默认时长为 2 分钟。
+
+<!--
+The configuration file uses the [kubeconfig](/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
+file format. Within the file, `clusters` refers to the remote service and
+`users` refers to the API server webhook. An example would be:
+-->
+配置文件使用 [kubeconfig](/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
+文件的格式。文件中，`clusters` 指代远程服务，`users` 指代远程 API 服务
+Webhook。下面是一个例子：
+
+<!--
+```yaml
+# Kubernetes API version
+apiVersion: v1
+# kind of the API object
+kind: Config
+# clusters refers to the remote service.
+clusters:
+  - name: name-of-remote-authn-service
+    cluster:
+      certificate-authority: /path/to/ca.pem         # CA for verifying the remote service.
+      server: https://authn.example.com/authenticate # URL of remote service to query. Must use 'https'.
+
+# users refers to the API server's webhook configuration.
+users:
+  - name: name-of-api-server
+    user:
+      client-certificate: /path/to/cert.pem # cert for the webhook plugin to use
+      client-key: /path/to/key.pem          # key matching the cert
+
+# kubeconfig files require a context. Provide one for the API server.
+current-context: webhook
+contexts:
+- context:
+    cluster: name-of-remote-authn-service
+    user: name-of-api-sever
+  name: webhook
+```
+-->
+```yaml
+# Kubernetes API 版本
+apiVersion: v1
+# API 对象类别
+kind: Config
+# clusters 指代远程服务
+clusters:
+  - name: name-of-remote-authn-service
+    cluster:
+      certificate-authority: /path/to/ca.pem         # 用来验证远程服务的 CA
+      server: https://authn.example.com/authenticate # 要查询的远程服务 URL。必须使用 'https'。
+
+# users 指代 API 服务的 Webhook 配置
+users:
+  - name: name-of-api-server
+    user:
+      client-certificate: /path/to/cert.pem # Webhook 插件要使用的证书
+      client-key: /path/to/key.pem          # 与证书匹配的密钥
+
+# kubeconfig 文件需要一个上下文（Context），此上下文用于本 API 服务器
+current-context: webhook
+contexts:
+- context:
+    cluster: name-of-remote-authn-service
+    user: name-of-api-sever
+  name: webhook
+```
+
+<!--
+When a client attempts to authenticate with the API server using a bearer token
+as discussed [above](#putting-a-bearer-token-in-a-request),
+the authentication webhook POSTs a JSON-serialized `authentication.k8s.io/v1beta1` `TokenReview` object containing the token
+to the remote service. Kubernetes will not challenge a request that lacks such a header.
+-->
+当客户端尝试在 API 服务器上使用持有者令牌完成身份认证（
+如[前](#putting-a-bearer-token-in-a-request)所述）时，
+身份认证 Webhook 会用 POST 请求发送一个 JSON 序列化的对象到远程服务。
+该对象是 `authentication.k8s.io/v1beta1` 组的 `TokenReview` 对象，
+其中包含持有者令牌。
+Kubernetes 不会强制请求提供此 HTTP 头部。
+
+<!--
+Note that webhook API objects are subject to the same [versioning compatibility rules](/docs/concepts/overview/kubernetes-api/)
+as other Kubernetes API objects. Implementers should be aware of looser
+compatibility promises for beta objects and check the "apiVersion" field of the
+request to ensure correct deserialization. Additionally, the API server must
+enable the `authentication.k8s.io/v1beta1` API extensions group (`--runtime-config=authentication.k8s.io/v1beta1=true`).
+
+The POST body will be of the following format:
+-->
+要注意的是，Webhook API 对象和其他 Kubernetes API 对象一样，也要受到同一
+[版本兼容规则](/zh/docs/concepts/overview/kubernetes-api/)约束。
+实现者要了解对 Beta 阶段对象的兼容性承诺，并检查请求的 `apiVersion` 字段，
+以确保数据结构能够正常反序列化解析。此外，API 服务器必须启用
+`authentication.k8s.io/v1beta1` API 扩展组
+（`--runtime-config=authentication.k8s.io/v1beta1=true`）。
+
+POST 请求的 Body 部分将是如下格式：
+
+<!--
+```json
+{
+  "apiVersion": "authentication.k8s.io/v1beta1",
+  "kind": "TokenReview",
+  "spec": {
+    "token": "(BEARERTOKEN)"
+  }
+}
+```
+-->
+```json
+{
+  "apiVersion": "authentication.k8s.io/v1beta1",
+  "kind": "TokenReview",
+  "spec": {
+    "token": "<持有者令牌>"
+  }
+}
+```
+
+<!--
+The remote service is expected to fill the `status` field of
+the request to indicate the success of the login. The response body's `spec`
+field is ignored and may be omitted. A successful validation of the bearer
+token would return:
+-->
+远程服务应该会填充请求的 `status` 字段，以标明登录操作是否成功。
+响应的 Body 中的 `spec` 字段会被忽略，因此可以省略。
+如果持有者令牌验证成功，应该返回如下所示的响应：
+
+```json
+{
+  "apiVersion": "authentication.k8s.io/v1beta1",
+  "kind": "TokenReview",
+  "status": {
+    "authenticated": true,
+    "user": {
+      "username": "janedoe@example.com",
+      "uid": "42",
+      "groups": [
+        "developers",
+        "qa"
+      ],
+      "extra": {
+        "extrafield1": [
+          "extravalue1",
+          "extravalue2"
+        ]
+      }
+    }
+  }
+}
+```
+
+<!--
+An unsuccessful request would return:
+-->
+而不成功的请求会返回：
+
+```json
+{
+  "apiVersion": "authentication.k8s.io/v1beta1",
+  "kind": "TokenReview",
+  "status": {
+    "authenticated": false
+  }
+}
+```
+
+<!--
+HTTP status codes can be used to supply additional error context.
+-->
+HTTP 状态码可用来提供进一步的错误语境信息。
+
+<!--
+### Authenticating Proxy
+
+The API server can be configured to identify users from request header values, such as `X-Remote-User`.
+It is designed for use in combination with an authenticating proxy, which sets the request header value.
+-->
+### 身份认证代理   {#authenticating-proxy}
+
+API 服务器可以配置成从请求的头部字段值（如 `X-Remote-User`）中辩识用户。
+这一设计是用来与某身份认证代理一起使用 API 服务器，代理负责设置请求的头部字段值。
+
+<!--
+* `--requestheader-username-headers` Required, case-insensitive. Header names to check, in order, for the user identity. The first header containing a value is used as the username.
+* `--requestheader-group-headers` 1.6+. Optional, case-insensitive. "X-Remote-Group" is suggested. Header names to check, in order, for the user's groups. All values in all specified headers are used as group names.
+* `-requestheader-extra-headers-prefix` 1.6+. Optional, case-insensitive. "X-Remote-Extra-" is suggested. Header prefixes to look for to determine extra information about the user (typically used by the configured authorization plugin). Any headers beginning with any of the specified prefixes have the prefix removed. The remainder of the header name is lowercased and [percent-decoded](https://tools.ietf.org/html/rfc3986#section-2.1) and becomes the extra key, and the header value is the extra value.
+-->
+* `--requestheader-username-headers` 必需字段，大小写不敏感。用来设置要获得用户身份所要检查的头部字段名称列表（有序）。第一个包含数值的字段会被用来提取用户名。
+* `--requestheader-group-headers` 可选字段，在 Kubernetes 1.6 版本以后支持，大小写不敏感。
+  建议设置为 "X-Remote-Group"。用来指定一组头部字段名称列表，以供检查用户所属的组名称。
+  所找到的全部头部字段的取值都会被用作用户组名。
+* `--requestheader-extra-headers-prefix` 可选字段，在 Kubernetes 1.6 版本以后支持，大小写不敏感。
+  建议设置为 "X-Remote-Extra-"。用来设置一个头部字段的前缀字符串，API 服务器会基于所给
+  前缀来查找与用户有关的一些额外信息。这些额外信息通常用于所配置的鉴权插件。
+  API 服务器会将与所给前缀匹配的头部字段过滤出来，去掉其前缀部分，将剩余部分
+  转换为小写字符串并在必要时执行[百分号解码](https://tools.ietf.org/html/rfc3986#section-2.1)
+  后，构造新的附加信息字段键名。原来的头部字段值直接作为附加信息字段的值。
+
+<!--
+Prior to 1.11.3 (and 1.10.7, 1.9.11), the extra key could only contain characters which were [legal in HTTP header labels](https://tools.ietf.org/html/rfc7230#section-3.2.6).
+For example, with this configuration:
+-->
+{{< note >}}
+在 1.13.3 版本之前（包括 1.10.7、1.9.11），附加字段的键名只能包含
+[HTTP 头部标签的合法字符](https://tools.ietf.org/html/rfc7230#section-3.2.6)。
+{{< /note >}}
+
+例如，使用下面的配置：
+
+```
+--requestheader-username-headers=X-Remote-User
+--requestheader-group-headers=X-Remote-Group
+--requestheader-extra-headers-prefix=X-Remote-Extra-
+```
+
+<!--
+this request:
+-->
+针对所收到的如下请求：
+
+```http
+GET / HTTP/1.1
+X-Remote-User: fido
+X-Remote-Group: dogs
+X-Remote-Group: dachshunds
+X-Remote-Extra-Acme.com%2Fproject: some-project
+X-Remote-Extra-Scopes: openid
+X-Remote-Extra-Scopes: profile
+```
+
+<!--
+would result in this user info:
+-->
+会生成下面的用户信息：
+
+```yaml
+name: fido
+groups:
+- dogs
+- dachshunds
+extra:
+  acme.com/project:
+  - some-project
+  scopes:
+  - openid
+  - profile
+```
+
+<!--
+In order to prevent header spoofing, the authenticating proxy is required to present a valid client
+certificate to the API server for validation against the specified CA before the request headers are
+checked. WARNING: do **not** reuse a CA that is used in a different context unless you understand
+the risks and the mechanisms to protect the CA's usage.
+
+* `--requestheader-client-ca-file` Required. PEM-encoded certificate bundle. A valid client certificate must be presented and validated against the certificate authorities in the specified file before the request headers are checked for user names.
+* `--requestheader-allowed-names` Optional. List of Common Name values (CNs). If set, a valid client certificate with a CN in the specified list must be presented before the request headers are checked for user names. If empty, any CN is allowed.
+-->
+为了防范头部信息侦听，在请求中的头部字段被检视之前，
+身份认证代理需要向 API 服务器提供一份合法的客户端证书，
+供后者使用所给的 CA 来执行验证。
+警告：*不要* 在不同的上下文中复用 CA 证书，除非你清楚这样做的风险是什么以及
+应如何保护 CA 用法的机制。
+
+* `--requestheader-client-ca-file` 必需字段，给出 PEM 编码的证书包。
+  在检查请求的头部字段以提取用户名信息之前，必须提供一个合法的客户端证书，
+  且该证书要能够被所给文件中的机构所验证。
+* `--requestheader-allowed-names` 可选字段，用来给出一组公共名称（CN）。
+  如果此标志被设置，则在检视请求中的头部以提取用户信息之前，必须提供
+  包含此列表中所给的 CN 名的、合法的客户端证书。
+
+<!--
+## Anonymous requests
+
+When enabled, requests that are not rejected by other configured authentication methods are
+treated as anonymous requests, and given a username of `system:anonymous` and a group of
+`system:unauthenticated`.
+-->
+## 匿名请求   {#anonymous-requests}
+
+启用匿名请求支持之后，如果请求没有被已配置的其他身份认证方法拒绝，则被视作
+匿名请求（Anonymous Requests）。这类请求获得用户名 `system:anonymous` 和
+对应的用户组 `system:unauthenticated`。
+
+<!--
+For example, on a server with token authentication configured, and anonymous access enabled,
+a request providing an invalid bearer token would receive a `401 Unauthorized` error.
+A request providing no bearer token would be treated as an anonymous request.
+
+In 1.5.1-1.5.x, anonymous access is disabled by default, and can be enabled by
+passing the `--anonymous-auth=true` option to the API server.
+-->
+例如，在一个配置了令牌身份认证且启用了匿名访问的服务器上，如果请求提供了非法的
+持有者令牌，则会返回 `401 Unauthorized` 错误。
+如果请求没有提供持有者令牌，则被视为匿名请求。
+
+在 1.5.1-1.5.x 版本中，匿名访问默认情况下是被禁用的，可以通过为 API 服务器设定
+`--anonymous-auth=true` 来启用。
+
+<!--
+In 1.6+, anonymous access is enabled by default if an authorization mode other than `AlwaysAllow`
+is used, and can be disabled by passing the `-anonymous-auth=false` option to the API server.
+Starting in 1.6, the ABAC and RBAC authorizers require explicit authorization of the
+`system:anonymous` user or the `system:unauthenticated` group, so legacy policy rules
+that grant access to the `*` user or `*` group do not include anonymous users.
+-->
+在 1.6 及之后版本中，如果所使用的鉴权模式不是 `AlwaysAllow`，则匿名访问默认是被启用的。
+从 1.6 版本开始，ABAC 和 RBAC 鉴权模块要求对 `system:anonymous` 用户或者
+`system:unauthenticated` 用户组执行显式的权限判定，所以之前的为 `*` 用户或
+`*` 用户组赋予访问权限的策略规则都不再包含匿名用户。
+
+<!--
+## User impersonation
+
+A user can act as another user through impersonation headers. These let requests
+manually override the user info a request authenticates as. For example, an admin
+could use this feature to debug an authorization policy by temporarily
+impersonating another user and seeing if a request was denied.
+-->
+## 用户伪装  {#user-impersonation}
+
+一个用户可以通过伪装（Impersonation）头部字段来以另一个用户的身份执行操作。
+使用这一能力，你可以手动重载请求被身份认证所识别出来的用户信息。
+例如，管理员可以使用这一功能特性来临时伪装成另一个用户，查看请求是否被拒绝，
+从而调试鉴权策略中的问题，
+
+<!--
+Impersonation requests first authenticate as the requesting user, then switch
+to the impersonated user info.
+
+* A user makes an API call with their credentials _and_ impersonation headers.
+* API server authenticates the user.
+* API server ensures the authenticated users have impersonation privileges.
+* Request user info is replaced with impersonation values.
+* Request is evaluated, authorization acts on impersonated user info.
+-->
+带伪装的请求首先会被身份认证识别为发出请求的用户，之后会切换到使用被伪装的用户
+的用户信息。
+
+* 用户发起 API 调用时 _同时_ 提供自身的凭据和伪装头部字段信息
+* API 服务器对用户执行身份认证
+* API 服务器确认通过认证的用户具有伪装特权
+* 请求用户的信息被替换成伪装字段的值
+* 评估请求，鉴权组件针对所伪装的用户信息执行操作
+
+<!--
+The following HTTP headers can be used to performing an impersonation request:
+
+* `Impersonate-User`: The username to act as.
+* `Impersonate-Group`: A group name to act as. Can be provided multiple times to set multiple groups. Optional. Requires "Impersonate-User"
+* `Impersonate-Extra-( extra name )`: A dynamic header used to associate extra fields with the user. Optional. Requires "Impersonate-User". In order to be preserved consistently, `( extra name )` should be lower-case, and any characters which aren't [legal in HTTP header labels](https://tools.ietf.org/html/rfc7230#section-3.2.6) MUST be utf8 and [percent-encoded](https://tools.ietf.org/html/rfc3986#section-2.1).
+-->
+以下 HTTP 头部字段可用来执行伪装请求：
+
+* `Impersonate-User`：要伪装成的用户名
+* `Impersonate-Group`：要伪装成的用户组名。可以多次指定以设置多个用户组。
+  可选字段；要求 "Impersonate-User" 必须被设置。
+* `Impersonate-Extra-<附加名称>`：一个动态的头部字段，用来设置与用户相关的附加字段。
+  此字段可选；要求 "Impersonate-User" 被设置。为了能够以一致的形式保留，
+  `<附加名称>`部分必须是小写字符，如果有任何字符不是
+  [合法的 HTTP 头部标签字符](https://tools.ietf.org/html/rfc7230#section-3.2.6)，
+  则必须是 utf8 字符，且转换为[百分号编码](https://tools.ietf.org/html/rfc3986#section-2.1)。
+
+<!--
+Prior to 1.11.3 (and 1.10.7, 1.9.11), `( extra name )` could only contain characters which were [legal in HTTP header labels](https://tools.ietf.org/html/rfc7230#section-3.2.6).
+-->
+{{< note >}}
+在 1.11.3 版本之前（以及 1.10.7、1.9.11），`<附加名称>` 只能包含
+合法的 HTTP 标签字符。
+{{< /note >}}
+
+<!--
+An example set of headers:
+-->
+头部字段集合的示例：
+
+```http
+Impersonate-User: jane.doe@example.com
+Impersonate-Group: developers
+Impersonate-Group: admins
+Impersonate-Extra-dn: cn=jane,ou=engineers,dc=example,dc=com
+Impersonate-Extra-acme.com%2Fproject: some-project
+Impersonate-Extra-scopes: view
+Impersonate-Extra-scopes: development
+```
+
+<!--
+When using `kubectl` set the `--as` flag to configure the `Impersonate-User`
+header, set the `--as-group` flag to configure the `Impersonate-Group` header.
+-->
+在使用 `kubectl` 时，可以使用 `--as` 标志来配置 `Impersonate-User` 头部字段值，
+使用 `--as-group` 标志配置 `Impersonate-Group` 头部字段值。
+
+```bash
+kubectl drain mynode
+```
+
+```none
+Error from server (Forbidden): User "clark" cannot get nodes at the cluster scope. (get nodes mynode)
+```
+
+<!--
+Set the `--as` and `--as-group` flag:
+-->
+设置 `--as` 和 `--as-group` 标志：
+
+```bash
+kubectl drain mynode --as=superman --as-group=system:masters
+```
+
+```none
+node/mynode cordoned
+node/mynode drained
+```
+
+<!--
+To impersonate a user, group, or set extra fields, the impersonating user must
+have the ability to perform the "impersonate" verb on the kind of attribute
+being impersonated ("user", "group", etc.). For clusters that enable the RBAC
+authorization plugin, the following ClusterRole encompasses the rules needed to
+set user and group impersonation headers:
+-->
+要伪装成某个用户、某个组或者设置附加字段，执行伪装操作的用户必须具有对所伪装的
+类别（“user”、“group” 等）执行 “impersonate” 动词操作的能力。
+对于启用了 RBAC 鉴权插件的集群，下面的 ClusterRole 封装了设置用户和组伪装字段
+所需的规则：
+
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: impersonator
+rules:
+- apiGroups: [""]
+  resources: ["users", "groups", "serviceaccounts"]
+  verbs: ["impersonate"]
+```
+
+<!--
+Extra fields are evaluated as sub-resources of the resource "userextras". To
+allow a user to use impersonation headers for the extra field "scopes", a user
+should be granted the following role:
+-->
+附加字段会被作为 `userextras` 资源的子资源来执行权限评估。
+如果要允许用户为附加字段 “scopes” 设置伪装头部，该用户需要被授予以下规则：
+
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: scopes-impersonator
+rules:
+# 可以设置 "Impersonate-Extra-scopes" 头部
+- apiGroups: ["authentication.k8s.io"]
+  resources: ["userextras/scopes"]
+  verbs: ["impersonate"]
+```
+
+<!--
+The values of impersonation headers can also be restricted by limiting the set
+of `resourceNames` a resource can take.
+-->
+你也可以通过约束资源可能对应的 `resourceNames` 限制伪装头部的取值：
+
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: limited-impersonator
+rules:
+# 可以伪装成用户 "jane.doe@example.com"
+- apiGroups: [""]
+  resources: ["users"]
+  verbs: ["impersonate"]
+  resourceNames: ["jane.doe@example.com"]
+
+# 可以伪装成用户组 "developers" 和 "admins"
+- apiGroups: [""]
+  resources: ["groups"]
+  verbs: ["impersonate"]
+  resourceNames: ["developers","admins"]
+
+# 可以将附加字段 "scopes" 伪装成 "view" 和 "development"
+- apiGroups: ["authentication.k8s.io"]
+  resources: ["userextras/scopes"]
+  verbs: ["impersonate"]
+  resourceNames: ["view", "development"]
+```
+
+<!--
+## client-go credential plugins
+-->
+## client-go 凭据插件  {#client-go-credential-plugins}
+
+{{< feature-state for_k8s_version="v1.11" state="beta" >}}
+
+<!--
+`k8s.io/client-go` and tools using it such as `kubectl` and `kubelet` are able to execute an
+external command to receive user credentials.
+
+This feature is intended for client side integrations with authentication protocols not natively
+supported by `k8s.io/client-go` (LDAP, Kerberos, OAuth2, SAML, etc.). The plugin implements the
+protocol specific logic, then returns opaque credentials to use. Almost all credential plugin
+use cases require a server side component with support for the [webhook token authenticator](#webhook-token-authentication)
+to interpret the credential format produced by the client plugin.
+-->
+`k8s.io/client-go` 及使用它的工具（如 `kubectl` 和 `kubelet`）可以执行某个外部
+命令来获得用户的凭据信息。
+
+这一特性的目的是便于客户端与 `k8s.io/client-go` 并不支持的身份认证协议（LDAP、
+Kerberos、OAuth2、SAML 等）继承。
+插件实现特定于协议的逻辑，之后返回不透明的凭据以供使用。
+几乎所有的凭据插件使用场景中都需要在服务器端存在一个支持
+[Webhook 令牌身份认证组件](#webhook-token-authentication)的模块，
+负责解析客户端插件所生成的凭据格式。
+
+<!--
+### Example use case
+
+In a hypothetical use case, an organization would run an external service that exchanges LDAP credentials
+for user specific, signed tokens. The service would also be capable of responding to [webhook token
+authenticator](#webhook-token-authentication) requests to validate the tokens. Users would be required
+to install a credential plugin on their workstation.
+-->
+### 示例应用场景   {#example-use-case}
+
+在一个假想的应用场景中，某组织运行这一个外部的服务，能够将特定用户的已签名的
+令牌转换成 LDAP 凭据。此服务还能够对
+[Webhook 令牌身份认证组件](#webhook-token-authentication)的请求做出响应以
+验证所提供的令牌。用户需要在自己的工作站上安装一个凭据插件。
+
+<!--
+To authenticate against the API:
+
+* The user issues a `kubectl` command.
+* Credential plugin prompts the user for LDAP credentials, exchanges credentials with external service for a token.
+* Credential plugin returns token to client-go, which uses it as a bearer token against the API server.
+* API server uses the [webhook token authenticator](#webhook-token-authentication) to submit a `TokenReview` to the external service.
+* External service verifies the signature on the token and returns the user's username and groups.
+-->
+要对 API 服务器认证身份时：
+
+* 用户发出 `kubectl` 命令。
+* 凭据插件提示用户输入 LDAP 凭据，并与外部服务交互，获得令牌。
+* 凭据插件将令牌返回该 client-go，后者将其用作持有者令牌提交给 API 服务器。
+* API 服务器使用[Webhook 令牌身份认证组件](#webhook-token-authentication)向
+  外部服务发出 `TokenReview` 请求。
+* 外部服务检查令牌上的签名，返回用户的用户名和用户组信息。
+
+<!--
+### Configuration
+
+Credential plugins are configured through [kubectl config files](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
+as part of the user fields.
+-->
+### 配置  {#configuration}
+
+凭据插件通过 [kubectl 配置文件](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
+来作为 user 字段的一部分设置。
+
+<!--
+```yaml
+apiVersion: v1
+kind: Config
+users:
+- name: my-user
+  user:
+    exec:
+      # Command to execute. Required.
+      command: "example-client-go-exec-plugin"
+
+      # API version to use when decoding the ExecCredentials resource. Required.
+      #
+      # The API version returned by the plugin MUST match the version listed here.
+      #
+      # To integrate with tools that support multiple versions (such as client.authentication.k8s.io/v1alpha1),
+      # set an environment variable or pass an argument to the tool that indicates which version the exec plugin expects.
+      apiVersion: "client.authentication.k8s.io/v1beta1"
+
+      # Environment variables to set when executing the plugin. Optional.
+      env:
+      - name: "FOO"
+        value: "bar"
+
+      # Arguments to pass when executing the plugin. Optional.
+      args:
+      - "arg1"
+      - "arg2"
+clusters:
+- name: my-cluster
+  cluster:
+    server: "https://172.17.4.100:6443"
+    certificate-authority: "/etc/kubernetes/ca.pem"
+contexts:
+- name: my-cluster
+  context:
+    cluster: my-cluster
+    user: my-user
+current-context: my-cluster
+```
+-->
+```yaml
+apiVersion: v1
+kind: Config
+users:
+- name: my-user
+  user:
+    exec:
+      # 要执行的命令。必需。
+      command: "example-client-go-exec-plugin"
+
+      # 解析 ExecCredentials 资源时使用的 API 版本。必需。
+      #
+      # 插件返回的 API 版本必需与这里列出的版本匹配。
+      #
+      # 要与支持多个版本的工具（如 client.authentication.k8sio/v1alpha1）集成，
+      # 可以设置一个环境变量或者向工具传递一个参数标明 exec 插件所期望的版本。
+      apiVersion: "client.authentication.k8s.io/v1beta1"
+
+      # 执行此插件时要设置的环境变量。可选字段。
+      env:
+      - name: "FOO"
+        value: "bar"
+
+      # 执行插件时要传递的参数。可选字段。
+      args:
+      - "arg1"
+      - "arg2"
+clusters:
+- name: my-cluster
+  cluster:
+    server: "https://172.17.4.100:6443"
+    certificate-authority: "/etc/kubernetes/ca.pem"
+contexts:
+- name: my-cluster
+  context:
+    cluster: my-cluster
+    user: my-user
+current-context: my-cluster
+```
+
+<!--
+Relative command paths are interpreted as relative to the directory of the config file. If
+KUBECONFIG is set to `/home/jane/kubeconfig` and the exec command is `./bin/example-client-go-exec-plugin`,
+the binary `/home/jane/bin/example-client-go-exec-plugin` is executed.
+-->
+解析相对命令路径时，kubectl 将其视为与配置文件比较而言的相对路径。 
+如果 KUBECONFIG 被设置为 `/home/jane/kubeconfig`，而 exec 命令为
+`./bin/example-client-go-exec-plugin`，则要执行的可执行文件为
+`/home/jane/bin/example-client-go-exec-plugin`。
+
+```yaml
+- name: my-user
+  user:
+    exec:
+      # 对 kubeconfig 目录而言的相对路径
+      command: "./bin/example-client-go-exec-plugin"
+      apiVersion: "client.authentication.k8s.io/v1beta1"
+```
+
+<!--
+### Input and output formats
+
+The executed command prints an `ExecCredential` object to `stdout`. `k8s.io/client-go`
+authenticates against the Kubernetes API using the returned credentials in the `status`.
+
+When run from an interactive session, `stdin` is exposed directly to the plugin. Plugins should use a
+[TTY check](https://godoc.org/golang.org/x/crypto/ssh/terminal#IsTerminal) to determine if it's
+appropriate to prompt a user interactively.
+
+To use bearer token credentials, the plugin returns a token in the status of the `ExecCredential`.
+-->
+### 输出和输出格式   {#input-and-output-formats}
+
+所执行的命令会在 `stdout` 打印 `ExecCredential` 对象。
+`k8s.io/client-go` 使用 `status` 中返回的凭据信息向 Kubernetes API 服务器
+执行身份认证。
+
+在交互式会话中运行时，`stdin` 是直接暴露给插件使用的。
+插件应该使用
+[TTY check](https://godoc.org/golang.org/x/crypto/ssh/terminal#IsTerminal)
+来确定是否适合用交互方式请求用户输入。
+
+与使用持有者令牌凭据，插件在 `ExecCredential` 的状态中返回一个令牌：
+
+```json
+{
+  "apiVersion": "client.authentication.k8s.io/v1beta1",
+  "kind": "ExecCredential",
+  "status": {
+    "token": "my-bearer-token"
+  }
+}
+```
+
+<!--
+Alternatively, a PEM-encoded client certificate and key can be returned to use TLS client auth.
+If the plugin returns a different certificate and key on a subsequent call, `k8s.io/client-go`
+will close existing connections with the server to force a new TLS handshake.
+
+If specified, `clientKeyData` and `clientCertificateData` must both must be present.
+
+`clientCertificateData` may contain additional intermediate certificates to send to the server.
+-->
+另一种方案是，返回 PEM 编码的客户端证书和密钥，以便执行 TLS 客户端身份认证。
+如果插件在后续调用中返回了不同的证书或密钥，`k8s.io/client-go`
+会终止其与服务器的连接，从而强制执行新的 TLS 握手过程。
+
+如果指定了这种方式，则 `clientKeyData` 和 `clientCertificateData` 字段都必需存在。
+
+`clientCertificateData` 字段可能包含一些要发送给服务器的中间证书（Intermediate
+Certificates）。
+
+```json
+{
+  "apiVersion": "client.authentication.k8s.io/v1beta1",
+  "kind": "ExecCredential",
+  "status": {
+    "clientCertificateData": "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----",
+    "clientKeyData": "-----BEGIN RSA PRIVATE KEY-----\n...\n-----END RSA PRIVATE KEY-----"
+  }
+}
+```
+
+<!--
+Optionally, the response can include the expiry of the credential formatted as a
+RFC3339 timestamp. Presence or absence of an expiry has the following impact:
+
+- If an expiry is included, the bearer token and TLS credentials are cached until
+  the expiry time is reached, or if the server responds with a 401 HTTP status code,
+  or when the process exits.
+- If an expiry is omitted, the bearer token and TLS credentials are cached until
+  the server responds with a 401 HTTP status code or until the process exits.
+-->
+作为一种可选方案，响应中还可以包含以 RFC3339 时间戳格式给出的证书到期时间。
+证书到期时间的有无会有如下影响：
+
+- 如果响应中包含了到期时间，持有者令牌和 TLS 凭据会被缓存，直到到期期限到来、
+  或者服务器返回 401 HTTP 状态码，或者进程退出。
+- 如果未指定到期时间，则持有者令牌和 TLS 凭据会被缓存，直到服务器返回 401
+  HTTP 状态码或者进程退出。
+
+```json
+{
+  "apiVersion": "client.authentication.k8s.io/v1beta1",
+  "kind": "ExecCredential",
+  "status": {
+    "token": "my-bearer-token",
+    "expirationTimestamp": "2018-03-05T17:30:20-08:00"
+  }
+}
+```
+

From da033f63afc2ed036c0a32a351c6758ae5c69c08 Mon Sep 17 00:00:00 2001
From: Ramkumar Gowrishankar <ramkumar.gowrishankar@gmail.com>
Date: Thu, 17 Sep 2020 21:29:58 -0400
Subject: [PATCH 367/496] Change PodMatchNodeSelector to MatchNodeSelector

---
 content/en/docs/reference/scheduling/policies.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/scheduling/policies.md b/content/en/docs/reference/scheduling/policies.md
index 9601b22ec4..946150322d 100644
--- a/content/en/docs/reference/scheduling/policies.md
+++ b/content/en/docs/reference/scheduling/policies.md
@@ -32,7 +32,7 @@ The following *predicates* implement filtering:
 - `PodFitsResources`: Checks if the Node has free resources (eg, CPU and Memory)
   to meet the requirement of the Pod.
 
-- `PodMatchNodeSelector`: Checks if a Pod's Node {{< glossary_tooltip term_id="selector" >}}
+- `MatchNodeSelector`: Checks if a Pod's Node {{< glossary_tooltip term_id="selector" >}}
    matches the Node's {{< glossary_tooltip text="label(s)" term_id="label" >}}.
 
 - `NoVolumeZoneConflict`: Evaluate if the {{< glossary_tooltip text="Volumes" term_id="volume" >}}

From 237850da6b3bfde7b9ab3cd13ec8777331de6221 Mon Sep 17 00:00:00 2001
From: Vickey Wu <1143604452@qq.com>
Date: Fri, 18 Sep 2020 10:03:02 +0800
Subject: [PATCH 368/496] add blank between Chinese and English

add blank between Chinese and English
---
 .../reference/access-authn-authz/admission-controllers.md   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index e87aa4e075..1edc1477a9 100755
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -211,7 +211,7 @@ Rejects all requests. AlwaysDeny is DEPRECATED as no real meaning.
 This admission controller observes requests to 'approve' CertificateSigningRequest resources and performs additional authorization checks to ensure the approving user has permission to approve certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
 -->
 
-此准入控制器获取“审批”CertificateSigningRequest资源的请求并执行额外的授权检查，以确保审批请求的用户有权限审批`spec.signerName`请求CertificateSigningRequest资源的证书请求。
+此准入控制器获取“审批” CertificateSigningRequest 资源的请求并执行额外的授权检查，以确保审批请求的用户有权限审批 `spec.signerName` 请求 CertificateSigningRequest 资源的证书请求。
 
 <!--
 See Certificate Signing Requests for more information on the permissions required to perform different actions on CertificateSigningRequest resources.
@@ -225,7 +225,7 @@ See Certificate Signing Requests for more information on the permissions require
 This admission controller observes updates to the status.certificate field of CertificateSigningRequest resources and performs an additional authorization checks to ensure the signing user has permission to sign certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
 -->
 
-此准入控制器获取CertificateSigningRequest资源的`status.certificate`字段更新请求并执行额外的授权检查，以确保签发证书的用户有权限为`spec.signerName`请求CertificateSigningRequest资源的证书请求`签发`证书。
+此准入控制器获取 CertificateSigningRequest 资源的 `status.certificate` 字段更新请求并执行额外的授权检查，以确保签发证书的用户有权限为 `spec.signerName` 请求 CertificateSigningRequest 资源的证书请求`签发`证书。
 
 <!--
 See Certificate Signing Requests for more information on the permissions required to perform different actions on CertificateSigningRequest resources.
@@ -239,7 +239,7 @@ See Certificate Signing Requests for more information on the permissions require
 This admission controller observes creation of CertificateSigningRequest resources that have a spec.signerName of kubernetes.io/kube-apiserver-client. It rejects any request that specifies a 'group' (or 'organization attribute') of system:masters.
 -->
 
-此准入控制器获取具有`kubernetes.io/kube-apiserver-client`的`spec.signerName`的CertificateSigningRequest资源创建请求，它拒绝任何包含了`system:masters`一个“组”（或者“组织”）的请求。
+此准入控制器获取具有 `kubernetes.io/kube-apiserver-client` 的 `spec.signerName` 的 CertificateSigningRequest 资源创建请求，它拒绝任何包含了 `system:masters` 一个“组”（或者“组织”）的请求。
 
 ### DefaultStorageClass {#defaultstorageclass}
 

From 2b84a4db7707a0397a82e410842d0194fd7610c4 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Fri, 18 Sep 2020 10:20:46 +0800
Subject: [PATCH 369/496] [zh] add zh/docs/setup/learning-environment/kind.md,
 fix 23950

---
 .../docs/setup/learning-environment/kind.md   | 23 +++++++++++++++++++
 .../setup/learning-environment/minikube.md    |  1 +
 2 files changed, 24 insertions(+)
 create mode 100644 content/zh/docs/setup/learning-environment/kind.md

diff --git a/content/zh/docs/setup/learning-environment/kind.md b/content/zh/docs/setup/learning-environment/kind.md
new file mode 100644
index 0000000000..d45686fc23
--- /dev/null
+++ b/content/zh/docs/setup/learning-environment/kind.md
@@ -0,0 +1,23 @@
+---
+title: 使用 Kind 安装 Kubernetes
+weight: 40
+content_type: concept
+---
+
+<!-- overview -->
+<!--
+Kind is a tool for running local Kubernetes clusters using Docker container "nodes".
+-->
+
+Kind 是一个使用 Docker 容器“节点”运行本地 Kubernetes 集群的工具。
+
+<!-- body -->
+<!--
+## Installation
+
+See [Installing Kind](https://kind.sigs.k8s.io/docs/user/quick-start/).
+-->
+
+## 安装  {#installation}
+
+参见[安装 Kind ](https://kind.sigs.k8s.io/docs/user/quick-start/)。
diff --git a/content/zh/docs/setup/learning-environment/minikube.md b/content/zh/docs/setup/learning-environment/minikube.md
index 0a535dc8e8..00d7e0587e 100644
--- a/content/zh/docs/setup/learning-environment/minikube.md
+++ b/content/zh/docs/setup/learning-environment/minikube.md
@@ -1,5 +1,6 @@
 ---
 title: 使用 Minikube 安装 Kubernetes
+weight: 30
 content_type: concept
 ---
 <!--

From ed053d70616a8f98a2d9cf67e6c22968bee71a41 Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Fri, 18 Sep 2020 12:06:42 +0800
Subject: [PATCH 370/496] update kubectl api-resouces list base on 1.19.1

---
 content/en/docs/reference/kubectl/overview.md | 19 +++++++---
 content/zh/docs/reference/kubectl/overview.md | 38 ++++++++++++++-----
 2 files changed, 42 insertions(+), 15 deletions(-)

diff --git a/content/en/docs/reference/kubectl/overview.md b/content/en/docs/reference/kubectl/overview.md
index a9177da9f5..20f92e0926 100644
--- a/content/en/docs/reference/kubectl/overview.md
+++ b/content/en/docs/reference/kubectl/overview.md
@@ -127,14 +127,15 @@ To learn more about command operations, see the [kubectl](/docs/reference/kubect
 
 The following table includes a list of all the supported resource types and their abbreviated aliases.
 
-(This output can be retrieved from `kubectl api-resources`, and was accurate as of Kubernetes 1.13.3.)
+(This output can be retrieved from `kubectl api-resources`, and was accurate as of Kubernetes 1.19.1.)
 
-| Resource Name | Short Names | API Group | Namespaced | Resource Kind |
+| NAME | SHORTNAMES | APIGROUP | NAMESPACED | KIND |
 |---|---|---|---|---|
-| `bindings` | | | true | Binding|
+| `bindings` | | | true | Binding |
 | `componentstatuses` | `cs` | | false | ComponentStatus |
 | `configmaps` | `cm` | | true | ConfigMap |
 | `endpoints` | `ep` | | true | Endpoints |
+| `events` | `ev` | | true | Event |
 | `limitranges` | `limits` | | true | LimitRange |
 | `namespaces` | `ns` | | false | Namespace |
 | `nodes` | `no` | | false | Node |
@@ -142,14 +143,14 @@ The following table includes a list of all the supported resource types and thei
 | `persistentvolumes` | `pv` | | false | PersistentVolume |
 | `pods` | `po` | | true | Pod |
 | `podtemplates` | | | true | PodTemplate |
-| `replicationcontrollers` | `rc` | | true| ReplicationController |
+| `replicationcontrollers` | `rc` | | true | ReplicationController |
 | `resourcequotas` | `quota` | | true | ResourceQuota |
 | `secrets` | | | true | Secret |
 | `serviceaccounts` | `sa` | | true | ServiceAccount |
 | `services` | `svc` | | true | Service |
 | `mutatingwebhookconfigurations` | | admissionregistration.k8s.io | false | MutatingWebhookConfiguration |
 | `validatingwebhookconfigurations` | | admissionregistration.k8s.io | false | ValidatingWebhookConfiguration |
-| `customresourcedefinitions` | `crd`, `crds` | apiextensions.k8s.io | false |  CustomResourceDefinition |
+| `customresourcedefinitions` | `crd,crds` | apiextensions.k8s.io | false | CustomResourceDefinition |
 | `apiservices` | | apiregistration.k8s.io | false | APIService |
 | `controllerrevisions` | | apps | true | ControllerRevision |
 | `daemonsets` | `ds` | apps | true | DaemonSet |
@@ -166,9 +167,15 @@ The following table includes a list of all the supported resource types and thei
 | `jobs` | | batch | true | Job |
 | `certificatesigningrequests` | `csr` | certificates.k8s.io | false | CertificateSigningRequest |
 | `leases` | | coordination.k8s.io | true | Lease |
+| `endpointslices` |  | discovery.k8s.io | true | EndpointSlice |
 | `events` | `ev` | events.k8s.io | true | Event |
 | `ingresses` | `ing` | extensions | true | Ingress |
+| `flowschemas` |  | flowcontrol.apiserver.k8s.io | false | FlowSchema |
+| `prioritylevelconfigurations` |  | flowcontrol.apiserver.k8s.io | false | PriorityLevelConfiguration |
+| `ingressclasses` |  | networking.k8s.io | false | IngressClass |
+| `ingresses` | `ing` | networking.k8s.io | true | Ingress |
 | `networkpolicies` | `netpol` | networking.k8s.io | true | NetworkPolicy |
+| `runtimeclasses` |  | node.k8s.io | false | RuntimeClass |
 | `poddisruptionbudgets` | `pdb` | policy | true | PodDisruptionBudget |
 | `podsecuritypolicies` | `psp` | policy | false | PodSecurityPolicy |
 | `clusterrolebindings` | | rbac.authorization.k8s.io | false | ClusterRoleBinding |
@@ -178,7 +185,7 @@ The following table includes a list of all the supported resource types and thei
 | `priorityclasses` | `pc` | scheduling.k8s.io | false | PriorityClass |
 | `csidrivers` | | storage.k8s.io | false | CSIDriver |
 | `csinodes` | | storage.k8s.io | false | CSINode |
-| `storageclasses` | `sc` | storage.k8s.io |  false | StorageClass |
+| `storageclasses` | `sc` | storage.k8s.io | false | StorageClass |
 | `volumeattachments` | | storage.k8s.io | false | VolumeAttachment |
 
 ## Output options
diff --git a/content/zh/docs/reference/kubectl/overview.md b/content/zh/docs/reference/kubectl/overview.md
index b06c66f95a..422904423c 100644
--- a/content/zh/docs/reference/kubectl/overview.md
+++ b/content/zh/docs/reference/kubectl/overview.md
@@ -220,16 +220,18 @@ The following table includes a list of all the supported resource types and thei
 下表列出所有受支持的资源类型及其缩写别名:
 
 <!--
-(This output can be retrieved from `kubectl api-resources`, and is accurate as of Kubernetes 1.13.3.)
+(This output can be retrieved from `kubectl api-resources`, and is accurate as of Kubernetes 1.19.1.)
 -->
-(以下输出可以通过 `kubectl api-resources` 获取，内容以 Kubernetes 1.13.3 版本为准。)
+(以下输出可以通过 `kubectl api-resources` 获取，内容以 Kubernetes 1.19.1 版本为准。)
 
 <!--
-| Resource Name | Short Names | API Group | Namespaced | Resource Kind |
+| NAME | SHORTNAMES | APIGROUP | NAMESPACED | KIND |
 |---|---|---|---|---|
+| `bindings` | | | true | Binding |
 | `componentstatuses` | `cs` | | false | ComponentStatus |
 | `configmaps` | `cm` | | true | ConfigMap |
 | `endpoints` | `ep` | | true | Endpoints |
+| `events` | `ev` | | true | Event |
 | `limitranges` | `limits` | | true | LimitRange |
 | `namespaces` | `ns` | | false | Namespace |
 | `nodes` | `no` | | false | Node |
@@ -237,14 +239,14 @@ The following table includes a list of all the supported resource types and thei
 | `persistentvolumes` | `pv` | | false | PersistentVolume |
 | `pods` | `po` | | true | Pod |
 | `podtemplates` | | | true | PodTemplate |
-| `replicationcontrollers` | `rc` | | true| ReplicationController |
+| `replicationcontrollers` | `rc` | | true | ReplicationController |
 | `resourcequotas` | `quota` | | true | ResourceQuota |
 | `secrets` | | | true | Secret |
 | `serviceaccounts` | `sa` | | true | ServiceAccount |
 | `services` | `svc` | | true | Service |
 | `mutatingwebhookconfigurations` | | admissionregistration.k8s.io | false | MutatingWebhookConfiguration |
 | `validatingwebhookconfigurations` | | admissionregistration.k8s.io | false | ValidatingWebhookConfiguration |
-| `customresourcedefinitions` | `crd`, `crds` | apiextensions.k8s.io | false |  CustomResourceDefinition |
+| `customresourcedefinitions` | `crd,crds` | apiextensions.k8s.io | false | CustomResourceDefinition |
 | `apiservices` | | apiregistration.k8s.io | false | APIService |
 | `controllerrevisions` | | apps | true | ControllerRevision |
 | `daemonsets` | `ds` | apps | true | DaemonSet |
@@ -261,9 +263,15 @@ The following table includes a list of all the supported resource types and thei
 | `jobs` | | batch | true | Job |
 | `certificatesigningrequests` | `csr` | certificates.k8s.io | false | CertificateSigningRequest |
 | `leases` | | coordination.k8s.io | true | Lease |
+| `endpointslices` |  | discovery.k8s.io | true | EndpointSlice |
 | `events` | `ev` | events.k8s.io | true | Event |
 | `ingresses` | `ing` | extensions | true | Ingress |
+| `flowschemas` |  | flowcontrol.apiserver.k8s.io | false | FlowSchema |
+| `prioritylevelconfigurations` |  | flowcontrol.apiserver.k8s.io | false | PriorityLevelConfiguration |
+| `ingressclasses` |  | networking.k8s.io | false | IngressClass |
+| `ingresses` | `ing` | networking.k8s.io | true | Ingress |
 | `networkpolicies` | `netpol` | networking.k8s.io | true | NetworkPolicy |
+| `runtimeclasses` |  | node.k8s.io | false | RuntimeClass |
 | `poddisruptionbudgets` | `pdb` | policy | true | PodDisruptionBudget |
 | `podsecuritypolicies` | `psp` | policy | false | PodSecurityPolicy |
 | `clusterrolebindings` | | rbac.authorization.k8s.io | false | ClusterRoleBinding |
@@ -271,14 +279,18 @@ The following table includes a list of all the supported resource types and thei
 | `rolebindings` | | rbac.authorization.k8s.io | true | RoleBinding |
 | `roles` | | rbac.authorization.k8s.io | true | Role |
 | `priorityclasses` | `pc` | scheduling.k8s.io | false | PriorityClass |
-| `storageclasses` | `sc` | storage.k8s.io |  false | StorageClass |
+| `csidrivers` | | storage.k8s.io | false | CSIDriver |
+| `csinodes` | | storage.k8s.io | false | CSINode |
+| `storageclasses` | `sc` | storage.k8s.io | false | StorageClass |
 | `volumeattachments` | | storage.k8s.io | false | VolumeAttachment |
 -->
 | 资源名 | 缩写名 | API 分组 | 按命名空间 | 资源类型 |
 |---|---|---|---|---|
+| `bindings` | | | true | Binding |
 | `componentstatuses` | `cs` | | false | ComponentStatus |
 | `configmaps` | `cm` | | true | ConfigMap |
 | `endpoints` | `ep` | | true | Endpoints |
+| `events` | `ev` | | true | Event |
 | `limitranges` | `limits` | | true | LimitRange |
 | `namespaces` | `ns` | | false | Namespace |
 | `nodes` | `no` | | false | Node |
@@ -286,14 +298,14 @@ The following table includes a list of all the supported resource types and thei
 | `persistentvolumes` | `pv` | | false | PersistentVolume |
 | `pods` | `po` | | true | Pod |
 | `podtemplates` | | | true | PodTemplate |
-| `replicationcontrollers` | `rc` | | true| ReplicationController |
+| `replicationcontrollers` | `rc` | | true | ReplicationController |
 | `resourcequotas` | `quota` | | true | ResourceQuota |
 | `secrets` | | | true | Secret |
 | `serviceaccounts` | `sa` | | true | ServiceAccount |
 | `services` | `svc` | | true | Service |
 | `mutatingwebhookconfigurations` | | admissionregistration.k8s.io | false | MutatingWebhookConfiguration |
 | `validatingwebhookconfigurations` | | admissionregistration.k8s.io | false | ValidatingWebhookConfiguration |
-| `customresourcedefinitions` | `crd`, `crds` | apiextensions.k8s.io | false |  CustomResourceDefinition |
+| `customresourcedefinitions` | `crd,crds` | apiextensions.k8s.io | false | CustomResourceDefinition |
 | `apiservices` | | apiregistration.k8s.io | false | APIService |
 | `controllerrevisions` | | apps | true | ControllerRevision |
 | `daemonsets` | `ds` | apps | true | DaemonSet |
@@ -310,9 +322,15 @@ The following table includes a list of all the supported resource types and thei
 | `jobs` | | batch | true | Job |
 | `certificatesigningrequests` | `csr` | certificates.k8s.io | false | CertificateSigningRequest |
 | `leases` | | coordination.k8s.io | true | Lease |
+| `endpointslices` |  | discovery.k8s.io | true | EndpointSlice |
 | `events` | `ev` | events.k8s.io | true | Event |
 | `ingresses` | `ing` | extensions | true | Ingress |
+| `flowschemas` |  | flowcontrol.apiserver.k8s.io | false | FlowSchema |
+| `prioritylevelconfigurations` |  | flowcontrol.apiserver.k8s.io | false | PriorityLevelConfiguration |
+| `ingressclasses` |  | networking.k8s.io | false | IngressClass |
+| `ingresses` | `ing` | networking.k8s.io | true | Ingress |
 | `networkpolicies` | `netpol` | networking.k8s.io | true | NetworkPolicy |
+| `runtimeclasses` |  | node.k8s.io | false | RuntimeClass |
 | `poddisruptionbudgets` | `pdb` | policy | true | PodDisruptionBudget |
 | `podsecuritypolicies` | `psp` | policy | false | PodSecurityPolicy |
 | `clusterrolebindings` | | rbac.authorization.k8s.io | false | ClusterRoleBinding |
@@ -320,7 +338,9 @@ The following table includes a list of all the supported resource types and thei
 | `rolebindings` | | rbac.authorization.k8s.io | true | RoleBinding |
 | `roles` | | rbac.authorization.k8s.io | true | Role |
 | `priorityclasses` | `pc` | scheduling.k8s.io | false | PriorityClass |
-| `storageclasses` | `sc` | storage.k8s.io |  false | StorageClass |
+| `csidrivers` | | storage.k8s.io | false | CSIDriver |
+| `csinodes` | | storage.k8s.io | false | CSINode |
+| `storageclasses` | `sc` | storage.k8s.io | false | StorageClass |
 | `volumeattachments` | | storage.k8s.io | false | VolumeAttachment |
 
 

From 924f375c6aa28e3c147a348ba64b64ab1512bf23 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Fri, 18 Sep 2020 17:38:13 +0800
Subject: [PATCH 371/496] Update configure-upgrade-etcd.md

---
 .../docs/tasks/administer-cluster/configure-upgrade-etcd.md   | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index 9d88d93518..d3e6d17cec 100644
--- a/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -16,10 +16,6 @@ content_type: task
 -->
 
 <!-- overview -->
-
-<!--
-{{< glossary_definition term_id="etcd" length="all" prepend="etcd is a ">}}
--->
 {{< glossary_definition term_id="etcd" length="all" prepend="etcd 是一个">}}
 
 

From 1fc81d375e07a1a11c83fb2154ed0e4fbc0820bd Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Fri, 18 Sep 2020 17:42:46 +0800
Subject: [PATCH 372/496] add missing links in/zh/docs/home/contribute

---
 content/zh/docs/contribute/_index.md                   | 2 +-
 content/zh/docs/contribute/localization.md             | 2 +-
 content/zh/docs/contribute/new-content/new-features.md | 2 +-
 content/zh/docs/contribute/new-content/open-a-pr.md    | 2 +-
 content/zh/docs/contribute/style/page-content-types.md | 2 +-
 content/zh/docs/contribute/suggesting-improvements.md  | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/content/zh/docs/contribute/_index.md b/content/zh/docs/contribute/_index.md
index f106a3e0c6..79b23667aa 100644
--- a/content/zh/docs/contribute/_index.md
+++ b/content/zh/docs/contribute/_index.md
@@ -6,7 +6,7 @@ main_menu: true
 no_list: true
 weight: 80
 card:
-  name: 贡献
+  name: contribute
   weight: 10
   title: 开始贡献
 ---
diff --git a/content/zh/docs/contribute/localization.md b/content/zh/docs/contribute/localization.md
index 2241265ec2..3f6788a806 100644
--- a/content/zh/docs/contribute/localization.md
+++ b/content/zh/docs/contribute/localization.md
@@ -3,7 +3,7 @@ title: 本地化 Kubernetes 文档
 content_type: concept
 weight: 50
 card:
-  name: 贡献
+  name: contribute
   weight: 50
   title: 翻译文档
 ---
diff --git a/content/zh/docs/contribute/new-content/new-features.md b/content/zh/docs/contribute/new-content/new-features.md
index 5979fcef0b..3d261e956d 100644
--- a/content/zh/docs/contribute/new-content/new-features.md
+++ b/content/zh/docs/contribute/new-content/new-features.md
@@ -5,7 +5,7 @@ content_type: concept
 main_menu: true
 weight: 20
 card:
-  name: 贡献
+  name: contribute
   weight: 45
   title: 为发行版本撰写功能特性文档 
 ---
diff --git a/content/zh/docs/contribute/new-content/open-a-pr.md b/content/zh/docs/contribute/new-content/open-a-pr.md
index ed3476ca9b..53334aec6b 100644
--- a/content/zh/docs/contribute/new-content/open-a-pr.md
+++ b/content/zh/docs/contribute/new-content/open-a-pr.md
@@ -3,7 +3,7 @@ title: 发起拉取请求（PR）
 content_type: concept
 weight: 10
 card:
-  name: 贡献
+  name: contribute
   weight: 40
 ---
 <!--
diff --git a/content/zh/docs/contribute/style/page-content-types.md b/content/zh/docs/contribute/style/page-content-types.md
index a5526383f5..de72b6b4c4 100644
--- a/content/zh/docs/contribute/style/page-content-types.md
+++ b/content/zh/docs/contribute/style/page-content-types.md
@@ -3,7 +3,7 @@ title: 页面内容类型
 content_type: concept
 weight: 30
 card:
-  name: 贡献
+  name: contribute
   weight: 30
 ---
 <!--
diff --git a/content/zh/docs/contribute/suggesting-improvements.md b/content/zh/docs/contribute/suggesting-improvements.md
index 63383e5637..fe5b469f84 100644
--- a/content/zh/docs/contribute/suggesting-improvements.md
+++ b/content/zh/docs/contribute/suggesting-improvements.md
@@ -4,7 +4,7 @@ slug: suggest-improvements
 content_type: concept
 weight: 10
 card:
-  name: 贡献
+  name: contribute
   weight: 20
 ---
 <!--

From 273f6563c2fb0c2312fdb2413f2cb6e435c84780 Mon Sep 17 00:00:00 2001
From: Firman Rosdiansyah <firman.droid@gmail.com>
Date: Fri, 18 Sep 2020 19:30:56 +0700
Subject: [PATCH 373/496] [id] Fix image path for Deploy App tutorial

/language id
---
 .../tutorials/kubernetes-basics/deploy-app/deploy-intro.html    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
index eaaec3beae..9c06db5b46 100644
--- a/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
+++ b/content/id/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro.html
@@ -65,7 +65,7 @@ weight: 10
 
         <div class="row">
             <div class="col-md-8">
-                <p><img src="/id/docs/tutorials/kubernetes-basics/public/images/module_02_first_app.svg"></p>
+                <p><img src="/docs/tutorials/kubernetes-basics/public/images/module_02_first_app.svg"></p>
             </div>
         </div>
         <br>

From f88b7e66d6a40c42a0885e92f02210075f02be69 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Fri, 18 Sep 2020 20:42:39 +0800
Subject: [PATCH 374/496] Update configure-upgrade-etcd.md

---
 .../zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
index d3e6d17cec..b17cb265ad 100644
--- a/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
+++ b/content/zh/docs/tasks/administer-cluster/configure-upgrade-etcd.md
@@ -16,7 +16,7 @@ content_type: task
 -->
 
 <!-- overview -->
-{{< glossary_definition term_id="etcd" length="all" prepend="etcd 是一个">}}
+{{< glossary_definition term_id="etcd" length="all" >}}
 
 
 

From 7529aca590617d52e7c8fd10adb4a8ab3541234e Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Fri, 18 Sep 2020 19:53:55 +0800
Subject: [PATCH 375/496] translate
 /zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md

---
 .../zh/docs/tasks/configmap-secret/_index.md  |   5 +
 .../managing-secret-using-kubectl.md          | 211 ++++++++++++++++++
 content/zh/includes/task-tutorial-prereqs.md  |   2 +-
 3 files changed, 217 insertions(+), 1 deletion(-)
 create mode 100644 content/zh/docs/tasks/configmap-secret/_index.md
 create mode 100644 content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md

diff --git a/content/zh/docs/tasks/configmap-secret/_index.md b/content/zh/docs/tasks/configmap-secret/_index.md
new file mode 100644
index 0000000000..53202ceb4d
--- /dev/null
+++ b/content/zh/docs/tasks/configmap-secret/_index.md
@@ -0,0 +1,5 @@
+---
+title: "管理 Secrets"
+weight: 28
+description: 使用 Secrets 管理机密配置数据.
+---
\ No newline at end of file
diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
new file mode 100644
index 0000000000..09e7c6fc21
--- /dev/null
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -0,0 +1,211 @@
+---
+title: 使用 kubectl 管理 Secret
+content_type: task
+weight: 10
+description: 使用 kubectl 命令行创建 Secret 对象。
+---
+<!--
+title: Managing Secret using kubectl
+content_type: task
+weight: 10
+description: Creating Secret objects using kubectl command line.
+-->
+
+<!-- overview -->
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+<!-- ## Create a Secret -->
+## 创建 Secret    {#create-a-secret}
+
+<!--
+A `Secret` can contain user credentials required by Pods to access a database.
+For example, a database connection string consists of a username and password.
+You can store the username in a file `./username.txt` and the password in a
+file `./password.txt` on your local machine.
+ -->
+一个 `Secret` 可以包含 Pod 访问数据库所需的用户凭证。
+例如，由用户名和密码组成的数据库连接字符串。
+你可以在本地计算机上，将用户名存储在文件 `./username.txt` 中，将密码存储在文件 `./password.txt` 中。
+
+```shell
+echo -n 'admin' > ./username.txt
+echo -n '1f2d1e2e67df' > ./password.txt
+```
+
+<!--
+The `-n` flag in the above two commands ensures that the generated files will
+not contain an extra newline character at the end of the text. This is
+important because when `kubectl` reads a file and encode the content into
+base64 string, the extra newline character gets encoded too.
+-->
+上面两个命令中的 `-n` 标志确保生成的文件在文本末尾不包含额外的换行符。
+这一点很重要，因为当 `kubectl` 读取文件并将内容编码为 base64 字符串时，多余的换行符也会被编码。
+
+<!--
+The `kubectl create secret` command packages these files into a Secret and creates
+the object on the API server.
+-->
+`kubectl create secret` 命令将这些文件打包成一个 Secret 并在 API 服务器上创建对象。
+
+```shell
+kubectl create secret generic db-user-pass \
+  --from-file=./username.txt \
+  --from-file=./password.txt
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+secret/db-user-pass created
+```
+
+<!--
+Default key name is the filename. You may optionally set the key name using
+`--from-file=[key=]source`. For example:
+-->
+默认密钥名称是文件名。 你可以选择使用 `--from-file=[key=]source` 来设置密钥名称。例如：
+
+```shell
+kubectl create secret generic db-user-pass \
+  --from-file=username=./username.txt \
+  --from-file=password=./password.txt
+```
+
+<!--
+You do not need to escape special characters in passwords from files
+().
+-->
+你无需转义文件（`--from-file`）中的密码的特殊字符。
+
+<!--
+You can also provide Secret data using the `--from-literal=<key>=<value>` tag.
+This tag can be specified more than once to provide multiple key-value pairs.
+Note that special characters such as `$`, `\`, `*`, `=`, and `!` will be
+interpreted by your [shell](https://en.wikipedia.org/wiki/Shell_(computing))
+and require escaping.
+In most shells, the easiest way to escape the password is to surround it with
+single quotes (`'`).  For example, if your actual password is `S!B\*d$zDsb=`,
+you should execute the command this way:
+-->
+你还可以使用 `--from-literal=<key>=<value>` 标签提供 Secret 数据。
+可以多次使用此标签，提供多个键值对。
+请注意，特殊字符（例如：`$`，`\`，`*`，`=` 和 `!`）由你的 [shell](https://en.wikipedia.org/wiki/Shell_(computing)) 解释执行，而且需要转义。
+
+```shell
+kubectl create secret generic dev-db-secret \
+  --from-literal=username=devuser \
+  --from-literal=password='S!B\*d$zDsb='
+```
+
+<!-- ## Verify the Secret -->
+## 验证 Secret    {#verify-the-secret}
+
+<!-- You can check that the secret was created: -->
+你可以检查 secret 是否已创建：
+
+```shell
+kubectl get secrets
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+NAME                  TYPE                                  DATA      AGE
+db-user-pass          Opaque                                2         51s
+```
+
+<!-- You can view a description of the `Secret`: -->
+你可以查看 `Secret` 的描述：
+
+```shell
+kubectl describe secrets/db-user-pass
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+Name:            db-user-pass
+Namespace:       default
+Labels:          <none>
+Annotations:     <none>
+
+Type:            Opaque
+
+Data
+====
+password.txt:    12 bytes
+username.txt:    5 bytes
+```
+
+<!--
+The commands `kubectl get` and `kubectl describe` avoid showing the contents
+of a `Secret` by default. This is to protect the `Secret` from being exposed
+accidentally to an onlooker, or from being stored in a terminal log.
+-->
+默认情况下，`kubectl get` 和 `kubectl describe` 命令可避免显示 `Secret` 的内容。
+这是为了防止 `Secret` 被意外暴露给旁观者或存储在终端日志中。
+
+<!-- ## Decoding the Secret  {#decoding-secret} -->
+## 解码 Secret  {#decoding-secret}
+
+<!--
+To view the contents of the Secret we just created, you can run the following
+command:
+-->
+要查看我们刚刚创建的 Secret 的内容，可以运行以下命令：
+
+```shell
+kubectl get secret db-user-pass -o jsonpath='{.data}'
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```json
+{"password.txt":"MWYyZDFlMmU2N2Rm","username.txt":"YWRtaW4="}
+```
+
+<!-- Now you can decode the `password.txt` data: -->
+现在你可以解码 `password.txt` 的数据：
+
+```shell
+echo 'MWYyZDFlMmU2N2Rm' | base64 --decode
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+1f2d1e2e67df
+```
+
+<!-- ## Clean Up -->
+## 清理    {#clean-up}
+
+<!-- To delete the Secret you have just created: -->
+删除刚刚创建的 Secret：
+
+```shell
+kubectl delete secret db-user-pass
+```
+
+<!-- discussion -->
+
+## {{% heading "whatsnext" %}}
+
+<!--
+- Read more about the [Secret concept](/docs/concepts/configuration/secret/)
+- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+-->
+- 阅读更多有关 [Secret 概念](/docs/concepts/configuration/secret/)
+- 了解如何 [使用配置文件管理 Secret](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- 了解如何 [使用 kustomize 管理 Secret](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
diff --git a/content/zh/includes/task-tutorial-prereqs.md b/content/zh/includes/task-tutorial-prereqs.md
index acd083bde5..88e2f9fcf5 100644
--- a/content/zh/includes/task-tutorial-prereqs.md
+++ b/content/zh/includes/task-tutorial-prereqs.md
@@ -10,4 +10,4 @@ or you can use one of these Kubernetes playgrounds:
 -->
 
 * [Katacoda](https://www.katacoda.com/courses/kubernetes/playground)
-* [Play with Kubernetes](http://labs.play-with-k8s.com/)
+* [玩转 Kubernetes](http://labs.play-with-k8s.com/)

From dfda08a97806088412bf5383755dcbf05332d16b Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Fri, 18 Sep 2020 21:29:19 +0800
Subject: [PATCH 376/496] fix code block cannot be rendered in title

---
 .../tasks/configmap-secret/managing-secret-using-kubectl.md     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 22828d77a3..f370e24281 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -1,5 +1,5 @@
 ---
-title: Managing Secret using `kubectl`
+title: Managing Secret using kubectl
 content_type: task
 weight: 10
 description: Creating Secret objects using kubectl command line.

From cbc06036aa5066aee0f5a8fd6ac6c8d358e9bf75 Mon Sep 17 00:00:00 2001
From: tanjunchen <2799194073@qq.com>
Date: Fri, 18 Sep 2020 22:44:27 +0800
Subject: [PATCH 377/496] add tanjunchen to sig-docs-zh team

---
 OWNERS_ALIASES | 1 +
 1 file changed, 1 insertion(+)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 54d87f0cdf..5f9dc3816d 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -154,6 +154,7 @@ aliases:
     - hanjiayao
     - lichuqiang
     - SataQiu
+    - tanjunchen
     - tengqm
     - xiangpengzhao
     - xichengliudui

From 147668a7d252fb944de4d53996159fc51fa9c38c Mon Sep 17 00:00:00 2001
From: Ramkumar Gowrishankar <ramkumar.gowrishankar@gmail.com>
Date: Fri, 18 Sep 2020 11:38:18 -0400
Subject: [PATCH 378/496] Add reference to default-not-ready-toleration-seconds
 and default-unreachable-toleration-seconds k8s-apiserver input parameters in
 the subsection describing the DefaultTolerationSeconds admission controller

---
 .../reference/access-authn-authz/admission-controllers.md  | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/admission-controllers.md b/content/en/docs/reference/access-authn-authz/admission-controllers.md
index f98d1805e4..29639ac161 100644
--- a/content/en/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/en/docs/reference/access-authn-authz/admission-controllers.md
@@ -163,10 +163,11 @@ storage classes and how to mark a storage class as default.
 ### DefaultTolerationSeconds {#defaulttolerationseconds}
 
 This admission controller sets the default forgiveness toleration for pods to tolerate
-the taints `notready:NoExecute` and `unreachable:NoExecute` for 5 minutes,
-if the pods don't already have toleration for taints
-`node.kubernetes.io/not-ready:NoExecute` or
+the taints `notready:NoExecute` and `unreachable:NoExecute` based on the k8s-apiserver input parameters
+`default-not-ready-toleration-seconds` and `default-unreachable-toleration-seconds` if the pods don't already 
+have toleration for taints `node.kubernetes.io/not-ready:NoExecute` or
 `node.kubernetes.io/unreachable:NoExecute`.
+The default value for `default-not-ready-toleration-seconds` and `default-unreachable-toleration-seconds` is 5 minutes.
 
 ### DenyExecOnPrivileged {#denyexeconprivileged}
 

From 245f989b2a9fa505ed940a5ba17a335d2a74a0ed Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Thu, 17 Sep 2020 20:42:05 -0400
Subject: [PATCH 379/496] fix copy clipboard

---
 layouts/shortcodes/codenew.html | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/layouts/shortcodes/codenew.html b/layouts/shortcodes/codenew.html
index e8c6aa9656..e13e7b9ead 100644
--- a/layouts/shortcodes/codenew.html
+++ b/layouts/shortcodes/codenew.html
@@ -19,11 +19,14 @@
 {{ end }}
 {{ with $.Scratch.Get "content" }}
 <div class="highlight">
-    <div class="includecode" style="text-align: right" id="{{- $file | anchorize -}}">
-        {{- with $ghlink -}}<a href="{{ . }}" download="{{ $file }}">{{- end -}}
-            <code>{{ $file }}</code>
-        {{ if $ghlink }}</a>{{ end }}<img src="{{ "images/copycode.svg" | relURL }}" style="max-height:24px; cursor: pointer" onclick="copyCode('{{ $file | anchorize }}')" title="Copy {{ $file }} to clipboard">
+    <div class="copy-code-icon" style="text-align:right">
+    {{ with $ghlink }}<a href="{{ . }}" download="{{ $file }}">{{ end }}<code>{{ $file }}</code>
+    {{ if $ghlink }}</a>{{ end }}
+    <img src="{{ "images/copycode.svg" | relURL }}" style="max-height:24px; cursor: pointer" onclick="copyCode('{{ $file | anchorize }}')" title="Copy {{ $file }} to clipboard">
+    </img>
+    </div>
+    <div class="includecode" id="{{ $file | anchorize }}">
+    {{ highlight . $codelang "" }}
     </div>
-{{ highlight . $codelang "" }}
 </div>
-{{- end -}}
+{{ end }}

From 55d2702f3fd02389e68e7a55ea31fb1cb8f86bec Mon Sep 17 00:00:00 2001
From: Feruzjon Muyassarov <feruzjon.muyassarov@est.tech>
Date: Sat, 19 Sep 2020 00:07:30 +0300
Subject: [PATCH 380/496] Fix 404 issues

---
 content/en/docs/concepts/storage/ephemeral-volumes.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/concepts/storage/ephemeral-volumes.md b/content/en/docs/concepts/storage/ephemeral-volumes.md
index 450c258614..e4831cfd16 100644
--- a/content/en/docs/concepts/storage/ephemeral-volumes.md
+++ b/content/en/docs/concepts/storage/ephemeral-volumes.md
@@ -92,7 +92,7 @@ Conceptually, CSI ephemeral volumes are similar to `configMap`,
 scheduled onto a node. Kubernetes has no concept of rescheduling Pods
 anymore at this stage. Volume creation has to be unlikely to fail,
 otherwise Pod startup gets stuck. In particular, [storage capacity
-aware Pod scheduling](/docs/concepts/storage-capacity/) is *not*
+aware Pod scheduling](/docs/concepts/storage/storage-capacity/) is *not*
 supported for these volumes. They are currently also not covered by
 the storage resource usage limits of a Pod, because that is something
 that kubelet can only enforce for storage that it manages itself.
@@ -147,7 +147,7 @@ flexible:
   ([snapshotting](/docs/concepts/storage/volume-snapshots/),
   [cloning](/docs/concepts/storage/volume-pvc-datasource/),
   [resizing](/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims),
-  and [storage capacity tracking](/docs/concepts/storage-capacity/).
+  and [storage capacity tracking](/docs/concepts/storage/storage-capacity/).
 
 Example:
 

From 3cc13716519c67a568d69d5d523bf8c0390b4c6a Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Mon, 14 Sep 2020 10:41:23 +0800
Subject: [PATCH 381/496] Remove duplicated content in concepts and reference

We currently have quite some contents duplicated between the concepts
and the reference section, which is not good. This PR is an effort to
remove the duplicated content from the two pages while providing links
for readers to check the reference easily.
---
 .../docs/concepts/overview/kubernetes-api.md  | 144 ++++++------------
 .../docs/reference/using-api/api-overview.md  | 123 ++++++++-------
 2 files changed, 114 insertions(+), 153 deletions(-)

diff --git a/content/en/docs/concepts/overview/kubernetes-api.md b/content/en/docs/concepts/overview/kubernetes-api.md
index aa09776753..4338c932d5 100644
--- a/content/en/docs/concepts/overview/kubernetes-api.md
+++ b/content/en/docs/concepts/overview/kubernetes-api.md
@@ -16,30 +16,23 @@ card:
 
 The core of Kubernetes' {{< glossary_tooltip text="control plane" term_id="control-plane" >}}
 is the {{< glossary_tooltip text="API server" term_id="kube-apiserver" >}}. The API server
-exposes an HTTP API that lets end users, different parts of your cluster, and external components
-communicate with one another.
+exposes an HTTP API that lets end users, different parts of your cluster, and
+external components communicate with one another.
 
 The Kubernetes API lets you query and manipulate the state of objects in the Kubernetes API
 (for example: Pods, Namespaces, ConfigMaps, and Events).
 
-API endpoints, resource types and samples are described in the [API Reference](/docs/reference/kubernetes-api/).
+Most operations can be performed through the
+[kubectl](/docs/reference/kubectl/overview/) command-line interface or other
+command-line tools, such as
+[kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), which in turn use the
+API. However, you can also access the API directly using REST calls.
+
+Consider using one of the [client libraries](/docs/reference/using-api/client-libraries/)
+if you are writing an application using the Kubernetes API.
 
 <!-- body -->
 
-## API changes
-
-Any system that is successful needs to grow and change as new use cases emerge or existing ones change.
-Therefore, Kubernetes has design features to allow the Kubernetes API to continuously change and grow.
-The Kubernetes project aims to _not_ break compatibility with existing clients, and to maintain that
-compatibility for a length of time so that other projects have an opportunity to adapt.
-
-In general, new API resources and new resource fields can be added often and frequently.
-Elimination of resources or fields requires following the
-[API deprecation policy](/docs/reference/using-api/deprecation-policy/).
-
-What constitutes a compatible change, and how to change the API, are detailed in
-[API changes](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#readme).
-
 ## OpenAPI specification {#api-specification}
 
 Complete API details are documented using [OpenAPI](https://www.openapis.org/).
@@ -78,95 +71,58 @@ You can request the response format using request headers as follows:
   <caption>Valid request header values for OpenAPI v2 queries</caption>
 </table>
 
-Kubernetes implements an alternative Protobuf based serialization format for the API that is primarily intended for intra-cluster communication, documented in the [design proposal](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/protobuf.md) and the IDL files for each schema are located in the Go packages that define the API objects.
+Kubernetes implements an alternative Protobuf based serialization format that
+is primarily intended for intra-cluster communication. For more information
+about this format, see the [Kubernetes Protobuf serialization](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/protobuf.md) design proposal and the
+Interface Definition Language (IDL) files for each schema located in the Go
+packages that define the API objects.
 
-## API versioning
+## API changes
 
-To make it easier to eliminate fields or restructure resource representations, Kubernetes supports
-multiple API versions, each at a different API path, such as `/api/v1` or
-`/apis/rbac.authorization.k8s.io/v1alpha1`.
+Any system that is successful needs to grow and change as new use cases emerge or existing ones change.
+Therefore, Kubernetes has designed its features to allow the Kubernetes API to continuously change and grow.
+The Kubernetes project aims to _not_ break compatibility with existing clients, and to maintain that
+compatibility for a length of time so that other projects have an opportunity to adapt.
 
-Versioning is done at the API level rather than at the resource or field level to ensure that the
-API presents a clear, consistent view of system resources and behavior, and to enable controlling
-access to end-of-life and/or experimental APIs.
+In general, new API resources and new resource fields can be added often and frequently.
+Elimination of resources or fields requires following the
+[API deprecation policy](/docs/reference/using-api/deprecation-policy/).
 
-The JSON and Protobuf serialization schemas follow the same guidelines for schema changes - all descriptions below cover both formats.
+What constitutes a compatible change, and how to change the API, are detailed in
+[API changes](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#readme).
 
-Note that API versioning and Software versioning are only indirectly related.  The
-[Kubernetes Release Versioning](https://git.k8s.io/community/contributors/design-proposals/release/versioning.md)
-proposal describes the relationship between API versioning and software versioning.
+## API groups and versioning
 
-Different API versions imply different levels of stability and support.  The criteria for each level are described
-in more detail in the
-[API Changes](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions)
-documentation.  They are summarized here:
+To make it easier to eliminate fields or restructure resource representations,
+Kubernetes supports multiple API versions, each at a different API path, such
+as `/api/v1` or `/apis/rbac.authorization.k8s.io/v1alpha1`.
 
-- Alpha level:
-  - The version names contain `alpha` (e.g. `v1alpha1`).
-  - May be buggy.  Enabling the feature may expose bugs.  Disabled by default.
-  - Support for feature may be dropped at any time without notice.
-  - The API may change in incompatible ways in a later software release without notice.
-  - Recommended for use only in short-lived testing clusters, due to increased risk of bugs and lack of long-term support.
-- Beta level:
-  - The version names contain `beta` (e.g. `v2beta3`).
-  - Code is well tested.  Enabling the feature is considered safe.  Enabled by default.
-  - Support for the overall feature will not be dropped, though details may change.
-  - The schema and/or semantics of objects may change in incompatible ways in a subsequent beta or stable release.  When this happens,
-    we will provide instructions for migrating to the next version.  This may require deleting, editing, and re-creating
-    API objects.  The editing process may require some thought.   This may require downtime for applications that rely on the feature.
-  - Recommended for only non-business-critical uses because of potential for incompatible changes in subsequent releases.  If you have
-    multiple clusters which can be upgraded independently, you may be able to relax this restriction.
-  - **Please do try our beta features and give feedback on them!  Once they exit beta, it may not be practical for us to make more changes.**
-- Stable level:
-  - The version name is `vX` where `X` is an integer.
-  - Stable versions of features will appear in released software for many subsequent versions.
+Versioning is done at the API level rather than at the resource or field level
+to ensure that the API presents a clear, consistent view of system resources
+and behavior, and to enable controlling access to end-of-life and/or
+experimental APIs.
 
-## API groups
+Refer to [API versions reference](/docs/reference/using-api/api-overview/#api-versioning)
+for more details on the API version level definitions.
 
-To make it easier to extend its API, Kubernetes implements [*API groups*](https://git.k8s.io/community/contributors/design-proposals/api-machinery/api-group.md).
-The API group is specified in a REST path and in the `apiVersion` field of a serialized object.
+To make it easier to evolve and to extend its API, Kubernetes implements
+[API groups](/docs/reference/using-api/api-overview/#api-groups) that can be
+[enabled or disabled](/docs/reference/using-api/api-overview/#enabling-or-disabling).
 
-There are several API groups in a cluster:
+## API Extension
 
-1. The *core* group, also referred to as the *legacy* group, is at the REST path `/api/v1` and uses `apiVersion: v1`.
-
-1. *Named* groups are at REST path `/apis/$GROUP_NAME/$VERSION`, and use `apiVersion: $GROUP_NAME/$VERSION`
-   (e.g. `apiVersion: batch/v1`). The Kubernetes [API reference](/docs/reference/kubernetes-api/) has a
-   full list of available API groups.
-
-There are two paths to extending the API with [custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/):
-
-1. [CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
-   lets you declaratively define how the API server should provide your chosen resource API.
-1. You can also [implement your own extension API server](/docs/tasks/extend-kubernetes/setup-extension-api-server/)
-   and use the [aggregator](/docs/tasks/extend-kubernetes/configure-aggregation-layer/)
-   to make it seamless for clients.
-
-## Enabling or disabling API groups
-
-Certain resources and API groups are enabled by default. They can be enabled or disabled by setting `--runtime-config`
-as a command line option to the kube-apiserver.
-
-`--runtime-config` accepts comma separated values. For example: to disable batch/v1, set
-`--runtime-config=batch/v1=false`; to enable batch/v2alpha1, set `--runtime-config=batch/v2alpha1`.
-The flag accepts comma separated set of key=value pairs describing runtime configuration of the API server.
-
-{{< note >}}Enabling or disabling groups or resources requires restarting the kube-apiserver and the
-kube-controller-manager to pick up the `--runtime-config` changes.{{< /note >}}
-
-## Persistence
-
-Kubernetes stores its serialized state in terms of the API resources by writing them into
-{{< glossary_tooltip term_id="etcd" >}}.
+The Kubernetes API can be extended in one of two ways:
 
+1. [Custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/)
+   let you declaratively define how the API server should provide your chosen resource API.
+1. You can also extend the Kubernetes API by implementing an
+   [aggregation layer](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/).
 
 ## {{% heading "whatsnext" %}}
 
-[Controlling API Access](/docs/reference/access-authn-authz/controlling-access/) describes
-how the cluster manages authentication and authorization for API access.
-
-Overall API conventions are described in the
-[API conventions](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#api-conventions)
-document.
-
-API endpoints, resource types and samples are described in the [API Reference](/docs/reference/kubernetes-api/).
+- Learn how to extend the Kubernetes API by adding your own
+  [CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/).
+- [Controlling API Access](/docs/reference/access-authn-authz/controlling-access/) describes
+  how the cluster manages authentication and authorization for API access.
+- Learn about API endpoints, resource types and samples by reading
+  [API Reference](/docs/reference/kubernetes-api/).
diff --git a/content/en/docs/reference/using-api/api-overview.md b/content/en/docs/reference/using-api/api-overview.md
index ca777b15c7..3b39d72e18 100644
--- a/content/en/docs/reference/using-api/api-overview.md
+++ b/content/en/docs/reference/using-api/api-overview.md
@@ -18,95 +18,100 @@ This page provides an overview of the Kubernetes API.
 
 <!-- body -->
 
-The REST API is the fundamental fabric of Kubernetes. All operations and communications between components
-and external user commands are REST API calls that the API Server handles. Consequently, everything in the Kubernetes
+The REST API is the fundamental fabric of Kubernetes. All operations and
+communications between components, and external user commands are REST API
+calls that the API Server handles. Consequently, everything in the Kubernetes
 platform is treated as an API object and has a corresponding entry in the
 [API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/).
 
-Most operations can be performed through the
-[kubectl](/docs/reference/kubectl/overview/) command-line interface or other
-command-line tools, such as [kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/), which in turn use
-the API. However, you can also access the API directly using REST calls.
-
-Consider using one of the [client libraries](/docs/reference/using-api/client-libraries/)
-if you are writing an application using the Kubernetes API.
-
 ## API versioning
 
-To eliminate fields or restructure resource representations, Kubernetes supports
-multiple API versions, each at a different API path. For example: `/api/v1` or
-`/apis/rbac.authorization.k8s.io/v1alpha1`.
+The JSON and Protobuf serialization schemas follow the same guidelines for
+schema changes. The following descriptions cover both formats.
 
-The version is set at the API level rather than at the resource or field level to:
+The API versioning and software versioning are indirectly related.
+The [API and release versioning proposal](https://git.k8s.io/community/contributors/design-proposals/release/versioning.md)
+describes the relationship between API versioning and software versioning.
 
-- Ensure that the API presents a clear and consistent view of system resources and behavior.
-- Enable control access to deprecated or experimental APIs.
-
-The JSON and Protobuf serialization schemas follow the same guidelines for schema changes. The following descriptions cover both formats.
-
-{{< note >}}
-The API versioning and software versioning are indirectly related. The [API and release
-versioning proposal](https://git.k8s.io/community/contributors/design-proposals/release/versioning.md) describes the relationship between API versioning and software versioning.
-{{< /note >}}
-
-Different API versions indicate different levels of stability and support. You can find more information about the criteria for each level in the [API Changes documentation](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions).
+Different API versions indicate different levels of stability and support. You
+can find more information about the criteria for each level in the
+[API Changes documentation](https://git.k8s.io/community/contributors/devel/sig-architecture/api_changes.md#alpha-beta-and-stable-versions).
 
 Here's a summary of each level:
 
 - Alpha:
   - The version names contain `alpha` (for example, `v1alpha1`).
-  - The software may contain bugs. Enabling a feature may expose bugs. A feature may be disabled by default.
+  - The software may contain bugs. Enabling a feature may expose bugs. A
+    feature may be disabled by default.
   - The support for a feature may be dropped at any time without notice.
   - The API may change in incompatible ways in a later software release without notice.
-  - The software is recommended for use only in short-lived testing clusters due to increased risk of bugs
-    and lack of long-term support.
-
+  - The software is recommended for use only in short-lived testing clusters,
+    due to increased risk of bugs and lack of long-term support.
+  
 - Beta:
   - The version names contain `beta` (for example, `v2beta3`).
-  - The software is well tested. Enabling a feature is considered safe. Features are enabled by default.
+  - The software is well tested. Enabling a feature is considered safe.
+    Features are enabled by default.
   - The support for a feature will not be dropped, though the details may change.
-  - The schema or semantics of objects may change in incompatible ways in a subsequent beta or stable release.
-    When this happens, migration instructions are provided. Schema changes may require deleting, editing,
-    or recreating API objects. The editing process may not be straightforward. Migration may require
-    downtime for applications that rely on the feature.
-  - The software is not recommended for production uses. Subsequent releases may introduce
-    incompatible changes. If you have multiple clusters which can be upgraded independently,
-    you may be able to relax this restriction.
-  - Try the beta features and provide feedback. After the features exit beta, it may not be practical
-    to make more changes.
 
+  - The schema and/or semantics of objects may change in incompatible ways in
+    a subsequent beta or stable release. When this happens, migration
+    instructions are provided. Schema changes may require deleting, editing, and
+    re-creating API objects. The editing process may not be straightforward.
+    The migration may require downtime for applications that rely on the feature.
+  - The software is not recommended for production uses. Subsequent releases
+    may introduce incompatible changes. If you have multiple clusters which
+    can be upgraded independently, you may be able to relax this restriction.
+  
+  {{< note >}}
+  Try the beta features and provide feedback. After the features exit beta, it
+  may not be practical to make more changes.
+  {{< /note >}}
+  
 - Stable:
   - The version name is `vX` where `X` is an integer.
   - The stable versions of features appear in released software for many subsequent versions.
 
 ## API groups
 
-[API groups](https://git.k8s.io/community/contributors/design-proposals/api-machinery/api-group.md) make it easier to extend the Kubernetes API. The API group is specified in a REST path and in the `apiVersion` field of a serialized object.
+[API groups](https://git.k8s.io/community/contributors/design-proposals/api-machinery/api-group.md)
+make it easier to extend the Kubernetes API.
+The API group is specified in a REST path and in the `apiVersion` field of a
+serialized object.
 
 Currently, there are several API groups in use:
 
-- The *core* (also called *legacy*) group is found at REST path `/api/v1`. The core group is not specified
-  as part of the `apiVersion` field, for example, `apiVersion: v1`.
-- The named groups are at REST path `/apis/$GROUP_NAME/$VERSION` and use `apiVersion: $GROUP_NAME/$VERSION`
-  (for example, `apiVersion: batch/v1`). You can find the full list of supported API groups in
-  [Kubernetes API reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/).
+*  The *core* (also called *legacy*) group is found at REST path `/api/v1`.
+   The core group is not specified as part of the `apiVersion` field, for
+   example, `apiVersion: v1`.
+*  The named groups are at REST path `/apis/$GROUP_NAME/$VERSION` and use
+   `apiVersion: $GROUP_NAME/$VERSION` (for example, `apiVersion: batch/v1`).
+   You can find the full list of supported API groups in
+   [Kubernetes API reference](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/).
 
-The two paths that support extending the API with [custom resources](/docs/concepts/extend-kubernetes/api-extension/custom-resources/) are:
+## Enabling or disabling API groups   {#enabling-or-disabling}
 
-- [CustomResourceDefinition](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)
-  for basic CRUD needs.
-- [aggregator](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md) for a full set of Kubernetes API semantics to implement their own API server.
+Certain resources and API groups are enabled by default. You can enable or
+disable them by setting `--runtime-config` on the API server.  The
+`--runtime-config` flag accepts comma separated `<key>=<value>` pairs
+describing the runtime configuration of the API server. For example:
 
-## Enabling or disabling API groups
-
-Certain resources and API groups are enabled by default. You can enable or disable them by
-setting `--runtime-config` on the API server. The `--runtime-config` flag accepts comma separated
-key=value pairs describing the runtime configuration of the API server. For example:
-
-- to disable batch/v1, set `--runtime-config=batch/v1=false`
-- to enable batch/v2alpha1, set `--runtime-config=batch/v2alpha1`
+ - to disable `batch/v1`, set `--runtime-config=batch/v1=false`
+ - to enable `batch/v2alpha1`, set `--runtime-config=batch/v2alpha1`
 
 {{< note >}}
-When you enable or disable groups or resources, you need to restart the API server and controller-manager
-to pick up the `--runtime-config` changes.
+When you enable or disable groups or resources, you need to restart the API
+server and controller manager to pick up the `--runtime-config` changes.
 {{< /note >}}
+
+## Persistence
+
+Kubernetes stores its serialized state in terms of the API resources by writing them into
+{{< glossary_tooltip term_id="etcd" >}}.
+
+## {{% heading "whatsnext" %}}
+
+- Learn more about [API conventions](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#api-conventions)
+- Read the design documentation for
+  [aggregator](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md)
+

From c02a3cf9ec9f38017eb07d5eb5a925a5103a6ece Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sat, 19 Sep 2020 12:58:40 +0900
Subject: [PATCH 382/496] Apply suggestions from code review

Co-authored-by: bells17 <bells171@gmail.com>
---
 .../ja/docs/concepts/workloads/pods/ephemeral-containers.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
index 4d5ea9518e..e7e5dfafdc 100644
--- a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -18,13 +18,13 @@ ephemeralコンテナは初期のアルファ状態であり、本番クラス
 
 ## ephemeralコンテナを理解する
 
-{{< glossary_tooltip text="Pod" term_id="pod" >}}は、Kubernetesのアプリケーションの基本的なビルディングブロックです。Podは破棄可能かつ置き換え可能であることが想定されているため、一度Podが作成されると新しいコンテナを追加することはできません。その代わりに、通常は{{< glossary_tooltip text="Deployment" term_id="deployment" >}}を使用した制御されたやり方でPodを削除して置き換えます。
+{{< glossary_tooltip text="Pod" term_id="pod" >}}は、Kubernetesのアプリケーションの基本的なビルディングブロックです。Podは破棄可能かつ置き換え可能であることが想定されているため、一度Podが作成されると新しいコンテナを追加することはできません。その代わりに、通常は{{< glossary_tooltip text="Deployment" term_id="deployment" >}}を使用してPodを削除して置き換えます。
 
 たとえば、再現困難なバグのトラブルシューティングなどのために、すでに存在するPodの状態を調査する必要が出てくることがあります。このような場合、既存のPod内でephemeralコンテナを実行することで、Podの状態を調査したり、任意のコマンドを実行したりできます。
 
 ### ephemeralコンテナとは何か？
 
-ephemeralコンテナは、他のコンテナと異なり、リソースや実行が保証されず、自動的に再起動されることも決してないため、アプリケーションを構築する目的には適しません。ephemeralコンテナは、普通のコンテナと同じ`ContainerSpec`で記述されますが、多くのフィールドに互換性がなかったり、使用できなくなっています。
+ephemeralコンテナは、他のコンテナと異なり、リソースや実行が保証されず、自動的に再起動されることも決してないため、アプリケーションを構築する目的には適しません。ephemeralコンテナは、通常のコンテナと同じ`ContainerSpec`で記述されますが、多くのフィールドに互換性がなかったり、使用できなくなっています。
 
 - ephemeralコンテナはポートを持つことができないため、`ports`、`livenessProbe`、`readinessProbe`などの使用が禁止されています。
 - Podリソースの割り当てはイミュータブルであるため、`resources`の設定が禁止されています。

From 1c7cf96b5ba31931d94624661bfcf2e9e4a67779 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Sat, 19 Sep 2020 13:07:03 +0900
Subject: [PATCH 383/496] =?UTF-8?q?Replace=20"ephemeral"=20with=20"?=
 =?UTF-8?q?=E3=82=A8=E3=83=95=E3=82=A7=E3=83=A1=E3=83=A9=E3=83=AB".?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../workloads/pods/ephemeral-containers.md    | 40 +++++++++----------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
index e7e5dfafdc..0fa45de94b 100644
--- a/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
+++ b/content/ja/docs/concepts/workloads/pods/ephemeral-containers.md
@@ -1,5 +1,5 @@
 ---
-title: ephemeralコンテナ
+title: エフェメラルコンテナ
 content_type: concept
 weight: 80
 ---
@@ -8,41 +8,41 @@ weight: 80
 
 {{< feature-state state="alpha" for_k8s_version="v1.16" >}}
 
-このページでは、特別な種類のコンテナであるephemeralコンテナの概要を説明します。ephemeralコンテナは、トラブルシューティングなどのユーザーが開始するアクションを実行するために、すでに存在する{{< glossary_tooltip term_id="pod" >}}内で一時的に実行するコンテナです。ephemeralコンテナは、アプリケーションの構築ではなく、serviceの調査のために利用します。
+このページでは、特別な種類のコンテナであるエフェメラルコンテナの概要を説明します。エフェメラルコンテナは、トラブルシューティングなどのユーザーが開始するアクションを実行するために、すでに存在する{{< glossary_tooltip term_id="pod" >}}内で一時的に実行するコンテナです。エフェメラルコンテナは、アプリケーションの構築ではなく、serviceの調査のために利用します。
 
 {{< warning >}}
-ephemeralコンテナは初期のアルファ状態であり、本番クラスタには適しません。[Kubernetesの非推奨ポリシー](/docs/reference/using-api/deprecation-policy/)に従って、このアルファ機能は、将来大きく変更されたり、完全に削除される可能性があります。
+エフェメラルコンテナは初期のアルファ状態であり、本番クラスタには適しません。[Kubernetesの非推奨ポリシー](/docs/reference/using-api/deprecation-policy/)に従って、このアルファ機能は、将来大きく変更されたり、完全に削除される可能性があります。
 {{< /warning >}}
 
 <!-- body -->
 
-## ephemeralコンテナを理解する
+## エフェメラルコンテナを理解する
 
 {{< glossary_tooltip text="Pod" term_id="pod" >}}は、Kubernetesのアプリケーションの基本的なビルディングブロックです。Podは破棄可能かつ置き換え可能であることが想定されているため、一度Podが作成されると新しいコンテナを追加することはできません。その代わりに、通常は{{< glossary_tooltip text="Deployment" term_id="deployment" >}}を使用してPodを削除して置き換えます。
 
-たとえば、再現困難なバグのトラブルシューティングなどのために、すでに存在するPodの状態を調査する必要が出てくることがあります。このような場合、既存のPod内でephemeralコンテナを実行することで、Podの状態を調査したり、任意のコマンドを実行したりできます。
+たとえば、再現困難なバグのトラブルシューティングなどのために、すでに存在するPodの状態を調査する必要が出てくることがあります。このような場合、既存のPod内でエフェメラルコンテナを実行することで、Podの状態を調査したり、任意のコマンドを実行したりできます。
 
-### ephemeralコンテナとは何か？
+### エフェメラルコンテナとは何か？
 
-ephemeralコンテナは、他のコンテナと異なり、リソースや実行が保証されず、自動的に再起動されることも決してないため、アプリケーションを構築する目的には適しません。ephemeralコンテナは、通常のコンテナと同じ`ContainerSpec`で記述されますが、多くのフィールドに互換性がなかったり、使用できなくなっています。
+エフェメラルコンテナは、他のコンテナと異なり、リソースや実行が保証されず、自動的に再起動されることも決してないため、アプリケーションを構築する目的には適しません。エフェメラルコンテナは、通常のコンテナと同じ`ContainerSpec`で記述されますが、多くのフィールドに互換性がなかったり、使用できなくなっています。
 
-- ephemeralコンテナはポートを持つことができないため、`ports`、`livenessProbe`、`readinessProbe`などの使用が禁止されています。
+- エフェメラルコンテナはポートを持つことができないため、`ports`、`livenessProbe`、`readinessProbe`などは使えなくなっています。
 - Podリソースの割り当てはイミュータブルであるため、`resources`の設定が禁止されています。
 - 利用が許可されているフィールドの一覧については、[EphemeralContainerのリファレンスドキュメント](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ephemeralcontainer-v1-core)を参照してください。
 
-ephemeralコンテナは、直接`pod.spec`に追加するのではなく、API内の特別な`ephemeralcontainers`ハンドラを使用して作成します。そのため、ephemeralコンテナを`kubectl edit`を使用して追加することはできません。
+エフェメラルコンテナは、直接`pod.spec`に追加するのではなく、API内の特別な`ephemeralcontainers`ハンドラを使用して作成します。そのため、エフェメラルコンテナを`kubectl edit`を使用して追加することはできません。
 
-ephemeralコンテナをPodに追加した後は、通常のコンテナのようにephemeralコンテナを変更または削除することはできません。
+エフェメラルコンテナをPodに追加した後は、通常のコンテナのようにエフェメラルコンテナを変更または削除することはできません。
 
-## ephemeralコンテナの用途
+## エフェメラルコンテナの用途
 
-ephemeralコンテナは、コンテナがクラッシュしてしまったり、コンテナイメージにデバッグ用ユーティリティが同梱されていない場合など、`kubectl exec`では不十分なときにインタラクティブなトラブルシューティングを行うために役立ちます。
+エフェメラルコンテナは、コンテナがクラッシュしてしまったり、コンテナイメージにデバッグ用ユーティリティが同梱されていない場合など、`kubectl exec`では不十分なときにインタラクティブなトラブルシューティングを行うために役立ちます。
 
 特に、[distrolessイメージ](https://github.com/GoogleContainerTools/distroless)を利用すると、攻撃対象領域を減らし、バグや脆弱性を露出する可能性を減らせる最小のコンテナイメージをデプロイできるようになります。distrolessイメージにはシェルもデバッグ用のユーティリティも含まれないため、`kubectl exec`のみを使用してdistrolessイメージのトラブルシューティングを行うのは困難です。
 
-ephemeralコンテナを利用する場合には、他のコンテナ内のプロセスにアクセスできるように、[プロセス名前空間の共有](/ja/docs/tasks/configure-pod-container/share-process-namespace/)を有効にすると便利です。
+エフェメラルコンテナを利用する場合には、他のコンテナ内のプロセスにアクセスできるように、[プロセス名前空間の共有](/ja/docs/tasks/configure-pod-container/share-process-namespace/)を有効にすると便利です。
 
-ephemeralコンテナを利用してトラブルシューティングを行う例については、[デバッグ用のephemeralコンテナを使用してデバッグする](/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)を参照してください。
+エフェメラルコンテナを利用してトラブルシューティングを行う例については、[デバッグ用のエフェメラルコンテナを使用してデバッグする](/docs/tasks/debug-application-cluster/debug-running-pod/#debugging-with-ephemeral-debug-container)を参照してください。
 
 ## Ephemeral containers API
 
@@ -50,9 +50,9 @@ ephemeralコンテナを利用してトラブルシューティングを行う
 このセクションの例を実行するには、`EphemeralContainers`[フィーチャーゲート](/ja/docs/reference/command-line-tools-reference/feature-gates/)を有効にして、Kubernetesクライアントとサーバーのバージョンをv1.16以上にする必要があります。
 {{< /note >}}
 
-このセクションの例では、API内でephemeralコンテナを表示する方法を示します。通常は、APIを直接呼び出すのではなく、`kubectl alpha debug`やその他の`kubectl`[プラグイン](/docs/tasks/extend-kubectl/kubectl-plugins/)を使用して、これらのステップを自動化します。
+このセクションの例では、API内でエフェメラルコンテナを表示する方法を示します。通常は、APIを直接呼び出すのではなく、`kubectl alpha debug`やその他の`kubectl`[プラグイン](/docs/tasks/extend-kubectl/kubectl-plugins/)を使用して、これらのステップを自動化します。
 
-ephemeralコンテナは、Podの`ephemeralcontainers`サブリソースを使用して作成されます。このサブリソースは、`kubectl --raw`を使用して確認できます。まずはじめに、以下に`EphemeralContainers`リストとして追加するためのephemeralコンテナを示します。
+エフェメラルコンテナは、Podの`ephemeralcontainers`サブリソースを使用して作成されます。このサブリソースは、`kubectl --raw`を使用して確認できます。まずはじめに、以下に`EphemeralContainers`リストとして追加するためのエフェメラルコンテナを示します。
 
 ```json
 {
@@ -75,13 +75,13 @@ ephemeralコンテナは、Podの`ephemeralcontainers`サブリソースを使
 }
 ```
 
-すでに実行中の`example-pod`のephemeralコンテナを更新するには、次のコマンドを実行します。
+すでに実行中の`example-pod`のエフェメラルコンテナを更新するには、次のコマンドを実行します。
 
 ```shell
 kubectl replace --raw /api/v1/namespaces/default/pods/example-pod/ephemeralcontainers -f ec.json
 ```
 
-このコマンドを実行すると、新しいephemeralコンテナのリストが返されます。
+このコマンドを実行すると、新しいエフェメラルコンテナのリストが返されます。
 
 ```json
 {
@@ -114,7 +114,7 @@ kubectl replace --raw /api/v1/namespaces/default/pods/example-pod/ephemeralconta
 }
 ```
 
-新しく作成されたephemeralコンテナの状態を確認するには、`kubectl describe`を使用します。
+新しく作成されたエフェメラルコンテナの状態を確認するには、`kubectl describe`を使用します。
 
 ```shell
 kubectl describe pod example-pod
@@ -140,7 +140,7 @@ Ephemeral Containers:
 ...
 ```
 
-新しいephemeralコンテナとやりとりをするには、他のコンテナと同じように、`kubectl attach`、`kubectl exec`、`kubectl logs`などのコマンドが利用できます。例えば、次のようなコマンドが実行できます。
+新しいエフェメラルコンテナとやりとりをするには、他のコンテナと同じように、`kubectl attach`、`kubectl exec`、`kubectl logs`などのコマンドが利用できます。例えば、次のようなコマンドが実行できます。
 
 ```shell
 kubectl attach -it example-pod -c debugger

From 59cac839d45088243313681afb5f91d8262ba16e Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Sun, 16 Aug 2020 19:18:33 +0800
Subject: [PATCH 384/496] [zh] Rework parallel processing expansion

The English content was COMPLETELY REWRITTEN for DAMN REASONS.
---
 .../job/parallel-processing-expansion.md      | 815 ++++++++++--------
 1 file changed, 474 insertions(+), 341 deletions(-)

diff --git a/content/zh/docs/tasks/job/parallel-processing-expansion.md b/content/zh/docs/tasks/job/parallel-processing-expansion.md
index b010ae6848..b4b4cc255b 100644
--- a/content/zh/docs/tasks/job/parallel-processing-expansion.md
+++ b/content/zh/docs/tasks/job/parallel-processing-expansion.md
@@ -1,341 +1,474 @@
----
-title: 使用扩展进行并行处理
-content_type: concept
-min-kubernetes-server-version: v1.8
-weight: 20
----
-
-<!--
----
-title: Parallel Processing using Expansions
-content_type: concept
-min-kubernetes-server-version: v1.8
-weight: 20
----
--->
-
-<!-- overview -->
-
-<!--
-In this example, we will run multiple Kubernetes Jobs created from
-a common template.  You may want to be familiar with the basic,
-non-parallel, use of [Jobs](/docs/concepts/workloads/controllers/jobs-run-to-completion/) first.
--->
-在这个示例中，我们将运行从一个公共模板创建的多个 Kubernetes Job。您可能需要先熟悉 [Jobs](/docs/concepts/workloads/controllers/jobs-run-to-completion/) 的基本概念、非并行以及如何使用它。
-
-
-
-
-<!-- body -->
-
-<!--
-## Basic Template Expansion
--->
-
-## 基本模板扩展
-
-<!--
-First, download the following template of a job to a file called `job-tmpl.yaml`
--->
-首先，将以下作业模板下载到名为 `job-tmpl.yaml` 的文件中。
-
-{{< codenew file="application/job/job-tmpl.yaml" >}}
-
-<!--
-Unlike a *pod template*, our *job template* is not a Kubernetes API type.  It is just
-a yaml representation of a Job object that has some placeholders that need to be filled
-in before it can be used.  The `$ITEM` syntax is not meaningful to Kubernetes.
--->
-与 *pod 模板*不同，我们的 *job 模板*不是 Kubernetes API 类型。它只是 Job 对象的 yaml 表示，
-YAML 文件有一些占位符，在使用它之前需要填充这些占位符。`$ITEM` 语法对 Kubernetes 没有意义。
-
-<!--
-In this example, the only processing the container does is to `echo` a string and sleep for a bit.
-In a real use case, the processing would be some substantial computation, such as rendering a frame
-of a movie, or processing a range of rows in a database.  The `$ITEM` parameter would specify for
-example, the frame number or the row range.
--->
-在这个例子中，容器所做的唯一处理是 `echo` 一个字符串并睡眠一段时间。
-在真实的用例中，处理将是一些重要的计算，例如渲染电影的一帧，或者处理数据库中的若干行。这时，`$ITEM` 参数将指定帧号或行范围。
-
-<!--
-This Job and its Pod template have a label: `jobgroup=jobexample`.  There is nothing special
-to the system about this label.  This label
-makes it convenient to operate on all the jobs in this group at once.
-We also put the same label on the pod template so that we can check on all Pods of these Jobs
-with a single command.
-After the job is created, the system will add more labels that distinguish one Job's pods
-from another Job's pods.
-Note that the label key `jobgroup` is not special to Kubernetes. You can pick your own label scheme.
--->
-这个 Job 及其 Pod 模板有一个标签: `jobgroup=jobexample`。这个标签在系统中没有什么特别之处。
-这个标签使得我们可以方便地同时操作组中的所有作业。
-我们还将相同的标签放在 pod 模板上，这样我们就可以用一个命令检查这些 Job 的所有 pod。
-创建作业之后，系统将添加更多的标签来区分一个 Job 的 pod 和另一个 Job 的 pod。
-注意，标签键 `jobgroup` 对 Kubernetes 并无特殊含义。您可以选择自己的标签方案。
-
-<!--
-Next, expand the template into multiple files, one for each item to be processed.
--->
-下一步，将模板展开到多个文件中，每个文件对应要处理的项。
-
-```shell
-# 下载 job-templ.yaml
-curl -L -s -O https://k8s.io/examples/application/job/job-tmpl.yaml
-
-# 创建临时目录，并且在目录中创建 job yaml 文件
-mkdir ./jobs
-for i in apple banana cherry
-do
-  cat job-tmpl.yaml | sed "s/\$ITEM/$i/" > ./jobs/job-$i.yaml
-done
-```
-
-<!--
-Check if it worked:
--->
-检查是否工作正常：
-
-```shell
-ls jobs/
-```
-
-<!--
-The output is similar to this:
--->
-输出类似以下内容：
-
-```
-job-apple.yaml
-job-banana.yaml
-job-cherry.yaml
-```
-
-<!--
-Here, we used `sed` to replace the string `$ITEM` with the loop variable.
-You could use any type of template language (jinja2, erb) or write a program
-to generate the Job objects.
--->
-在这里，我们使用 `sed` 将字符串 `$ITEM` 替换为循环变量。
-您可以使用任何类型的模板语言(jinja2, erb) 或编写程序来生成 Job 对象。
-
-<!--
-Next, create all the jobs with one kubectl command:
--->
-接下来，使用 kubectl 命令创建所有作业：
-
-```shell
-kubectl create -f ./jobs
-```
-
-<!--
-The output is similar to this:
--->
-输出类似以下内容：
-
-```
-job.batch/process-item-apple created
-job.batch/process-item-banana created
-job.batch/process-item-cherry created
-```
-
-<!--
-Now, check on the jobs:
--->
-现在，检查这些作业：
-
-```shell
-kubectl get jobs -l jobgroup=jobexample
-```
-
-<!--
-The output is similar to this:
--->
-输出类似以下内容：
-
-```
-NAME                  COMPLETIONS   DURATION   AGE
-process-item-apple    1/1           14s        20s
-process-item-banana   1/1           12s        20s
-process-item-cherry   1/1           12s        20s
-```
-
-<!--
-Here we use the `-l` option to select all jobs that are part of this
-group of jobs.  (There might be other unrelated jobs in the system that we
-do not care to see.)
--->
-在这里，我们使用 `-l` 选项选择属于这组作业的所有作业。(系统中可能还有其他不相关的工作，我们不想看到。)
-
-<!--
-We can check on the pods as well using the same label selector:
--->
-使用同样的标签选择器，我们还可以检查 pods：
-
-```shell
-kubectl get pods -l jobgroup=jobexample
-```
-
-<!--
-The output is similar to this:
--->
-输出类似以下内容：
-
-```
-NAME                        READY     STATUS      RESTARTS   AGE
-process-item-apple-kixwv    0/1       Completed   0          4m
-process-item-banana-wrsf7   0/1       Completed   0          4m
-process-item-cherry-dnfu9   0/1       Completed   0          4m
-```
-
-<!--
-We can use this single command to check on the output of all jobs at once:
--->
-我们可以使用以下操作命令一次性地检查所有作业的输出：
-
-```shell
-kubectl logs -f -l jobgroup=jobexample
-```
-
-<!--
-The output is:
--->
-输出内容为：
-
-```
-Processing item apple
-Processing item banana
-Processing item cherry
-```
-
-<!--
-## Multiple Template Parameters
--->
-
-## 多个模板参数
-
-<!--
-In the first example, each instance of the template had one parameter, and that parameter was also
-used as a label.  However label keys are limited in [what characters they can
-contain](/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set).
--->
-在第一个示例中，模板的每个实例都有一个参数，该参数也用作标签。
-但是标签的键名在[可包含的字符](/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set)方面有一定的约束。
-
-<!--
-This slightly more complex example uses the jinja2 template language to generate our objects.
-We will use a one-line python script to convert the template to a file.
--->
-这个稍微复杂一点的示例使用 jinja2 模板语言来生成我们的对象。
-我们将使用一行 python 脚本将模板转换为文件。
-
-<!--
-First, copy and paste the following template of a Job object, into a file called `job.yaml.jinja2`:
--->
-首先，粘贴 Job 对象的以下模板到一个名为 `job.yaml.jinja2` 的文件中：
-
-```liquid
-{%- set params = [{ "name": "apple", "url": "https://www.orangepippin.com/varieties/apples", },
-                  { "name": "banana", "url": "https://en.wikipedia.org/wiki/Banana", },
-                  { "name": "raspberry", "url": "https://www.raspberrypi.org/" }]
-%}
-{%- for p in params %}
-{%- set name = p["name"] %}
-{%- set url = p["url"] %}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: jobexample-{{ name }}
-  labels:
-    jobgroup: jobexample
-spec:
-  template:
-    metadata:
-      name: jobexample
-      labels:
-        jobgroup: jobexample
-    spec:
-      containers:
-      - name: c
-        image: busybox
-        command: ["sh", "-c", "echo Processing URL {{ url }} && sleep 5"]
-      restartPolicy: Never
----
-{%- endfor %}
-
-```
-
-<!--
-The above template defines parameters for each job object using a list of
-python dicts (lines 1-4).  Then a for loop emits one job yaml object
-for each set of parameters (remaining lines).
-We take advantage of the fact that multiple yaml documents can be concatenated
-with the `---` separator (second to last line).
-.)  We can pipe the output directly to kubectl to
-create the objects.
--->
-上面的模板使用 python 字典列表（第 1-4 行）定义每个作业对象的参数。
-然后使用 for 循环为每组参数（剩余行）生成一个作业 yaml 对象。
-我们利用了多个 yaml 文档可以与 `---` 分隔符连接的事实（倒数第二行）。
-我们可以将输出直接传递给 kubectl 来创建对象。
-
-<!--
-You will need the jinja2 package if you do not already have it: `pip install --user jinja2`.
-Now, use this one-line python program to expand the template:
--->
-如果您还没有 jinja2 包则需要安装它: `pip install --user jinja2`。
-现在，使用这个一行 python 程序来展开模板:
-
-```shell
-alias render_template='python -c "from jinja2 import Template; import sys; print(Template(sys.stdin.read()).render());"'
-```
-
-
-<!--
-The output can be saved to a file, like this:
--->
-输出可以保存到一个文件，像这样：
-
-```shell
-cat job.yaml.jinja2 | render_template > jobs.yaml
-```
-
-<!--
-Or sent directly to kubectl, like this:
--->
-或直接发送到 kubectl，如下所示：
-
-```shell
-cat job.yaml.jinja2 | render_template | kubectl apply -f -
-```
-
-<!--
-## Alternatives
--->
-## 替代方案
-
-<!--
-If you have a large number of job objects, you may find that:
--->
-如果您有大量作业对象，您可能会发现：
-
-<!--
-- Even using labels, managing so many Job objects is cumbersome.
-- You exceed resource quota when creating all the Jobs at once,
-  and do not want to wait to create them incrementally.
-- Very large numbers of jobs created at once overload the
-  Kubernetes apiserver, controller, or scheduler.
--->
-
-- 即使使用标签，管理这么多 Job 对象也很麻烦。
-- 在一次创建所有作业时，您超过了资源配额，可是您也不希望以递增方式创建 Job 并等待其完成。
-- 同时创建大量作业会使 Kubernetes apiserver、控制器或者调度器负压过大。
-  
-
-<!--
-In this case, you can consider one of the
-other [job patterns](/docs/concepts/jobs/run-to-completion-finite-workloads/#job-patterns).
--->
-在这种情况下，您可以考虑其他的[作业模式](/docs/concepts/jobs/run-to-completion-finite-workloads/#job-patterns)。
-
-
+---
+title: 使用展开的方式进行并行处理
+content_type: concept
+min-kubernetes-server-version: v1.8
+weight: 20
+---
+
+<!--
+title: Parallel Processing using Expansions
+content_type: concept
+min-kubernetes-server-version: v1.8
+weight: 20
+-->
+
+<!-- overview -->
+
+<!--
+This task demonstrates running multiple {{< glossary_tooltip text="Jobs" term_id="job" >}}
+based on a common template. You can use this approach to process batches of work in
+parallel.
+
+For this example there are only three items: _apple_, _banana_, and _cherry_.
+The sample Jobs process each item simply by printing a string then pausing.
+
+See [using Jobs in real workloads](#using-jobs-in-real-workloads) to learn about how
+this pattern fits more realistic use cases.
+-->
+本任务展示基于一个公共的模板运行多个{{< glossary_tooltip text="Jobs" term_id="job" >}}。
+你可以用这种方法来并行执行批处理任务。
+
+在本任务示例中，只有三个工作条目：_apple_、_banana_ 和 _cherry_。
+示例任务处理每个条目时仅仅是打印一个字符串之后结束。
+参考[在真实负载中使用 Job](#using-jobs-in-real-workloads)了解更适用于真实使用场景的模式。
+
+## {{% heading "prerequisites" %}}
+
+<!--
+You should be familiar with the basic,
+non-parallel, use of [Job](/docs/concepts/workloads/controllers/job/).
+-->
+你应先熟悉基本的、非并行的 [Job](/zh/docs/concepts/workloads/controllers/job/)
+的用法。
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!--
+For basic templating you need the command-line utility `sed`.
+
+To follow the advanced templating example, you need a working installation of
+[Python](https://www.python.org/), and the Jinja2 template
+library for Python.
+
+Once you have Python set up, you can install Jinja2 by running:
+-->
+任务中的基本模板示例要求安装命令行工具 `sed`。
+要使用较高级的模板示例，你需要安装 [Python](https://www.python.org/)，
+并且要安装 Jinja2 模板库。
+
+一旦 Python 已经安装好，你可以运行下面的命令安装 Jinja2：
+
+```shell
+pip install --user jinja2
+```
+
+<!-- steps -->
+
+<!--
+## Create Jobs based on a template
+-->
+
+## 基于模板创建 Job  {#create-jobs-based-on-a-template}
+
+<!--
+First, download the following template of a job to a file called `job-tmpl.yaml`
+-->
+首先，将以下作业模板下载到名为 `job-tmpl.yaml` 的文件中。
+
+{{< codenew file="application/job/job-tmpl.yaml" >}}
+
+```shell
+# 使用 curl 下载 job-tmpl.yaml
+curl -L -s -O https://k8s.io/examples/application/job/job-tmpl.yaml
+```
+
+<!--
+The file you downloaded is not yet a valid Kubernetes
+{{< glossary_tooltip text="manifest" term_id="manifest" >}}.
+Instead that template is a YAML representation of a Job object with some placeholders
+that need to be filled in before it can be used.  The `$ITEM` syntax is not meaningful to Kubernetes.
+-->
+你所下载的文件不是一个合法的 Kubernetes {{< glossary_tooltip text="清单" term_id="manifest" >}}。
+这里的模板只是 Job 对象的 yaml 表示，其中包含一些占位符，在使用它之前需要被填充。
+`$ITEM` 语法对 Kubernetes 没有意义。
+
+<!--
+### Create manifests from the template
+
+The following shell snippet uses `sed` to replace the string `$ITEM` with the loop
+variable, writing into a temporary directory named `jobs`. Run this now:
+-->
+### 基于模板创建清单
+
+下面的 Shell 代码片段使用 `sed` 将字符串 `$ITEM` 替换为循环变量，并将结果
+写入到一个名为 `jobs` 的临时目录。
+
+```shell
+# 展开模板文件到多个文件中，每个文件对应一个要处理的条目
+mkdir ./jobs
+for i in apple banana cherry
+do
+  cat job-tmpl.yaml | sed "s/\$ITEM/$i/" > ./jobs/job-$i.yaml
+done
+```
+
+<!--
+Check if it worked:
+-->
+检查上述脚本的输出：
+
+```shell
+ls jobs/
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+job-apple.yaml
+job-banana.yaml
+job-cherry.yaml
+```
+
+<!--
+You could use any type of template language (for example: Jinja2; ERB), or
+write a program to generate the Job manifests.
+-->
+你可以使用任何一种模板语言（例如：Jinja2、ERB），或者编写一个程序来
+生成 Job 清单。
+
+<!--
+### Create Jobs from the manifests
+
+Next, create all the Jobs with one kubectl command:
+-->
+### 基于清单创建 Job
+
+接下来用一个 kubectl 命令创建所有的 Job：
+
+```shell
+kubectl create -f ./jobs
+```
+
+<!--
+The output is similar to this:
+-->
+
+输出类似于：
+
+```
+job.batch/process-item-apple created
+job.batch/process-item-banana created
+job.batch/process-item-cherry created
+```
+
+<!--
+Now, check on the jobs:
+-->
+现在检查 Job：
+
+```shell
+kubectl get jobs -l jobgroup=jobexample
+```
+
+<!--
+The output is similar to this:
+-->
+输出类似于：
+
+```
+NAME                  COMPLETIONS   DURATION   AGE
+process-item-apple    1/1           14s        22s
+process-item-banana   1/1           12s        21s
+process-item-cherry   1/1           12s        20s
+```
+
+<!--
+Using the `-l` option to kubectl selects only the Jobs that are part
+of this group of jobs (there might be other unrelated jobs in the system).
+
+You can check on the Pods as well using the same
+{{< glossary_tooltip text="label selector" term_id="selector" >}}:
+-->
+使用 kubectl 的 `-l` 选项可以仅选择属于当前 Job 组的对象
+（系统中可能存在其他不相关的 Job）。
+
+你可以使用相同的 {{< glossary_tooltip text="标签选择算符" term_id="selector" >}}
+来过滤 Pods：
+
+```shell
+kubectl get pods -l jobgroup=jobexample
+```
+
+<!--
+The output is similar to:
+-->
+输出类似于：
+
+```
+NAME                        READY     STATUS      RESTARTS   AGE
+process-item-apple-kixwv    0/1       Completed   0          4m
+process-item-banana-wrsf7   0/1       Completed   0          4m
+process-item-cherry-dnfu9   0/1       Completed   0          4m
+```
+
+<!--
+We can use this single command to check on the output of all jobs at once:
+-->
+我们可以用下面的命令查看所有 Job 的输出：
+
+```shell
+kubectl logs -f -l jobgroup=jobexample
+```
+
+<!--
+The output should be:
+-->
+输出类似于：
+
+```
+Processing item apple
+Processing item banana
+Processing item cherry
+```
+
+<!--
+### Clean up {#cleanup-1}
+-->
+### 清理 {#cleanup-1}
+
+```shell
+# 删除所创建的 Job
+# 集群会自动清理 Job 对应的 Pod
+kubectl delete job -l jobgroup=jobexample
+```
+
+<!--
+## Use advanced template parameters
+
+In the [first example](#create-jobs-based-on-a-template), each instance of the template had one
+parameter, and that parameter was also used in the Job's name. However,
+[names](/docs/concepts/overview/working-with-objects/names/#names) are restricted
+to contain only certain characters.
+-->
+## 使用高级模板参数
+
+在[第一个例子](#create-jobs-based-on-a-template)中，模板的每个示例都有一个参数
+而该参数也用在 Job 名称中。不过，对象
+[名称](/zh/docs/concepts/overview/working-with-objects/names/#names)
+被限制只能使用某些字符。
+
+<!--
+This slightly more complex example uses the
+[Jinja template language](https://palletsprojects.com/p/jinja/) to generate manifests
+and then objects from those manifests, with a multiple parameters for each Job.
+
+For this part of the task, you are going to use a one-line Python script to
+convert the template to a set of manifests.
+
+First, copy and paste the following template of a Job object, into a file called `job.yaml.jinja2`:
+-->
+这里的略微复杂的例子使用 [Jinja 模板语言](https://palletsprojects.com/p/jinja/)
+来生成清单，并基于清单来生成对象，每个 Job 都有多个参数。
+
+在本任务中，你将会使用一个一行的 Python 脚本，将模板转换为一组清单文件。
+
+首先，复制下面的 Job 对象模板到一个名为 `job.yaml.jinja2` 的文件。
+
+```liquid
+{%- set params = [{ "name": "apple", "url": "http://dbpedia.org/resource/Apple", },
+                  { "name": "banana", "url": "http://dbpedia.org/resource/Banana", },
+                  { "name": "cherry", "url": "http://dbpedia.org/resource/Cherry" }]
+%}
+{%- for p in params %}
+{%- set name = p["name"] %}
+{%- set url = p["url"] %}
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: jobexample-{{ name }}
+  labels:
+    jobgroup: jobexample
+spec:
+  template:
+    metadata:
+      name: jobexample
+      labels:
+        jobgroup: jobexample
+    spec:
+      containers:
+      - name: c
+        image: busybox
+        command: ["sh", "-c", "echo Processing URL {{ url }} && sleep 5"]
+      restartPolicy: Never
+{%- endfor %}
+```
+
+<!--
+The above template defines two parameters for each Job object using a list of
+python dicts (lines 1-4). A `for` loop emits one Job manifest for each
+set of parameters (remaining lines).
+
+This example relies on a feature of YAML. One YAML file can contain multiple
+documents (Kubernetes manifests, in this case), separated by `---` on a line
+by itself.
+You can pipe the output directly to `kubectl` to create the Jobs.
+
+Next, use this one-line Python program to expand the template:
+-->
+上面的模板使用 python 字典列表（第 1-4 行）定义每个作业对象的参数。
+然后使用 for 循环为每组参数（剩余行）生成一个作业 yaml 对象。
+我们利用了多个 YAML 文档（这里的 Kubernetes 清单）可以用 `---` 分隔符连接的事实。
+我们可以将输出直接传递给 kubectl 来创建对象。
+
+接下来我们用单行的 Python 程序将模板展开。
+
+```shell
+alias render_template='python -c "from jinja2 import Template; import sys; print(Template(sys.stdin.read()).render());"'
+```
+
+<!--
+Use `render_template` to convert the parameters and template into a single
+YAML file containing Kubernetes manifests:
+-->
+使用 `render_template` 将参数和模板转换成一个 YAML 文件，其中包含 Kubernetes
+资源清单：
+
+```shell
+# 此命令需要之前定义的别名
+cat job.yaml.jinja2 | render_template > jobs.yaml
+```
+
+<!--
+You can view `jobs.yaml` to verify that the `render_template` script worked
+correctly.
+
+Once you are happy that `render_template` is working how you intend,
+you can pipe its output into `kubectl`:
+-->
+你可以查看 `jobs.yaml` 以验证 `render_template` 脚本是否正常工作。
+
+当你对输出结果比较满意时，可以用管道将其输出发送给 kubectl，如下所示：
+
+```shell
+cat job.yaml.jinja2 | render_template | kubectl apply -f -
+```
+
+<!--
+Kubernetes accepts and runs the Jobs you created.
+-->
+Kubernets 接收清单文件并执行你所创建的 Job。
+
+<!-- discussion -->
+
+<!--
+## Using Jobs in real workloads
+
+In a real use case, each Job performs some substantial computation, such as rendering a frame
+of a movie, or processing a range of rows in a database. If you were rendering a movie
+you would set `$ITEM` to the frame number. If you were processing rows from a database
+table, you would set `$ITEM` to represent the range of database rows to process.
+
+In the task, you ran a command to collect the output from Pods by fetching
+their logs. In a real use case, each Pod for a Job writes its output to
+durable storage before completing. You can use a PersistentVolume for each Job,
+or an external storage service. For example, if you are rendering frames for a movie,
+use HTTP to `PUT` the rendered frame data to a URL, using a different URL for each
+frame.
+-->
+## 在真实负载中使用 Job
+
+在真实的负载中，每个 Job 都会执行一些重要的计算，例如渲染电影的一帧，
+或者处理数据库中的若干行。这时，`$ITEM` 参数将指定帧号或行范围。
+
+在此任务中，你运行一个命令通过取回 Pod 的日志来收集其输出。
+在真实应用场景中，Job 的每个 Pod 都会在结束之前将其输出写入到某持久性存储中。
+你可以为每个 Job 指定 PersistentVolume 卷，或者使用其他外部存储服务。
+例如，如果你在渲染视频帧，你可能会使用 HTTP 协议将渲染完的帧数据
+用 'PUT' 请求发送到某 URL，每个帧使用不同的 URl。
+
+<!--
+## Labels on Jobs and Pods
+
+After you create a Job, Kubernetes automatically adds additional
+{{< glossary_tooltip text="labels" term_id="label" >}} that
+distinguish one Job's pods from another Job's pods.
+
+In this example, each Job and its Pod template have a label:
+`jobgroup=jobexample`.
+
+Kubernetes itself pays no attention to labels named `jobgroup`. Setting a label
+for all the Jobs you create from a template makes it convenient to operate on all
+those Jobs at once.
+In the [first example](#create-jobs-based-on-a-template) you used a template to
+create several Jobs. The template ensures that each Pod also gets the same label, so
+you can check on all Pods for these templated Jobs with a single command.
+-->
+## Job 和 Pod 上的标签
+
+你创建了 Job 之后，Kubernetes 自动为 Job 的 Pod 添加
+{{< glossary_tooltip text="标签" term_id="label" >}}，以便能够将一个 Job
+的 Pod 与另一个 Job 的 Pod 区分开来。
+
+在本例中，每个 Job 及其 Pod 模板有一个标签: `jobgroup=jobexample`。
+
+Kubernetes 自身对标签名 `jobgroup` 没有什么要求。
+为创建自同一模板的所有 Job 使用同一标签使得我们可以方便地同时操作组中的所有作业。
+在[第一个例子](#create-jobs-based-on-a-template)中，你使用模板来创建了若干 Job。
+模板确保每个 Pod 都能够获得相同的标签，这样你可以用一条命令检查这些模板化
+Job 所生成的全部 Pod。
+
+<!--
+The label key `jobgroup` is not special or reserved.
+You can pick your own labelling scheme.
+There are [recommended labels](/docs/concepts/overview/working-with-objects/common-labels/#labels)
+that you can use if you wish.
+-->
+{{< note >}}
+标签键 `jobgroup` 没什么特殊的，也不是保留字。 你可以选择你自己的标签方案。
+如果愿意，有一些[建议的标签](/zh/docs/concepts/overview/working-with-objects/common-labels/#labels)
+可供使用。
+{{< /note >}}
+
+<!--
+## Alternatives
+
+If you plan to create a large number of Job objects, you may find that:
+-->
+## 替代方案
+
+如果你有计划创建大量 Job 对象，你可能会发现：
+
+<!--
+- Even using labels, managing so many Job objects is cumbersome.
+- If you create many Jobs in a batch, you might place high load
+  on the Kubernetes control plane. Alternatively, the Kubernetes API
+  server could rate limit you, temporarily rejecting your requests with a 429 status.
+- You are limited by a {{< glossary_tooltip text="resource quota" term_id="resource-quota" >}}
+  on Jobs: the API server permanently rejects some of your requests
+  when you create a great deal of work in one batch.
+-->
+- 即使使用标签，管理这么多 Job 对象也很麻烦。
+- 如果你一次性创建很多 Job，很可能会给 Kubernetes 控制面带来很大压力。
+  一种替代方案是，Kubernetes API 可能对请求施加速率限制，通过 429 返回
+  状态值临时拒绝你的请求。
+- 你可能会受到 Job 相关的{{< glossary_tooltip text="资源配额" term_id="resource-quota" >}}
+  限制：如果你在一个批量请求中触发了太多的任务，API 服务器会永久性地拒绝你的某些请求。
+
+<!--
+There are other [job patterns](/docs/concepts/workloads/controllers/job/#job-patterns)
+that you can use to process large amounts of work without creating very many Job
+objects.
+
+You could also consider writing your own [controller](/docs/concepts/architecture/controller/)
+to manage Job objects automatically.
+-->
+还有一些其他[作业模式](/zh/docs/concepts/workloads/controllers/job/#job-patterns)
+可供选择，这些模式都能用来处理大量任务而又不会创建过多的 Job 对象。
+
+你也可以考虑编写自己的[控制器](/zh/docs/concepts/architecture/controller/)
+来自动管理 Job 对象。
+

From 43893acd244af9e86d2c6853353221170be64dec Mon Sep 17 00:00:00 2001
From: didier <durand.didier@gmail.com>
Date: Sat, 19 Sep 2020 12:01:12 +0200
Subject: [PATCH 385/496] namespaces FR : fixing typos and improving a few
 points

---
 .../overview/working-with-objects/namespaces.md    | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/content/fr/docs/concepts/overview/working-with-objects/namespaces.md b/content/fr/docs/concepts/overview/working-with-objects/namespaces.md
index 90229676b0..87aae45e7a 100644
--- a/content/fr/docs/concepts/overview/working-with-objects/namespaces.md
+++ b/content/fr/docs/concepts/overview/working-with-objects/namespaces.md
@@ -6,8 +6,8 @@ weight: 30
 
 <!-- overview -->
 
-Kubernetes prend en charge plusieurs clusters virtuels presents sur le même cluster physique.
-Ces clusters virtuels sont appelés namespaces (espaces de noms en français).
+Kubernetes prend en charge plusieurs clusters virtuels présents sur le même cluster physique.
+Ces clusters virtuels sont appelés namespaces (espaces de nommage en français).
 
 <!-- body -->
 
@@ -38,7 +38,7 @@ La création et la suppression des namespaces sont décrites dans la [Documentat
 
 ### Affichage des namespaces
 
-Dans un cluster vous pouvez lister les namespaces actuels à l'aide de:
+Dans un cluster vous pouvez lister les namespaces actuels à l'aide de :
 
 ```shell
 kubectl get namespace
@@ -54,7 +54,7 @@ kube-system       Active   1d
 
 Kubernetes démarre avec quatre namespaces initiaux:
 
-- `default` Le namespace par défaut pour les objets sans autre namespace
+- `default` Le namespace par défaut pour les objets sans mention d'autre namespace
 - `kube-system` Le namespace pour les objets créés par Kubernetes lui-même
 - `kube-public` Ce namespace est créé automatiquement et est visible par tous les utilisateurs (y compris ceux qui ne sont pas authentifiés). Ce namespace est principalement réservé à l'utilisation du cluster, au cas où certaines ressources devraient être disponibles publiquement dans l'ensemble du cluster. L'aspect public de ce namespace n'est qu'une convention, pas une exigence.
 - `kube-node-lease` Ce namespace contient les objets de bail associés à chaque nœud, ce qui améliore les performances des pulsations du nœud à mesure que le cluster évolue.
@@ -85,15 +85,15 @@ kubectl config view --minify | grep namespace:
 Lorsque vous créez un [Service](/fr/docs/concepts/services-networking/service/), il crée une [entrée DNS](/fr/docs/concepts/services-networking/dns-pod-service/) correspondante.
 Cette entrée est de la forme `<nom-service>.<nom-namespace>.svc.cluster.local`, ce qui signifie
 que si un conteneur utilise simplement `<nom-service>`, il résoudra le service qui
-est local à un namespace. Ceci est utile pour utiliser la même configuration pour
+est local à son namespace. Ceci est utile pour utiliser la même configuration pour
 plusieurs namespaces tels que le Développement, la Qualification et la Production. Si vous voulez naviguer
-entre plusieurs namespaces, vous devez utiliser le nom de domaine complet (FQDN ou nom de domaine complet en français).
+entre plusieurs namespaces, vous devez utiliser le nom de domaine complet (FQDN ou nom de domaine complètement qualifié en français).
 
 ## Tous les objets ne se trouvent pas dans un namespace
 
 La plupart des ressources Kubernetes (par exemple, pods, services, contrôleurs de réplication et autres) sont
 dans des namespaces. Cependant, les ressources de type namespace ne sont pas elles-mêmes dans un namespace.
-Et les ressources de bas niveau, telles que les [noeuds](/docs/admin/node) et les volumes persistants, ne se trouvent dans aucun namespace.
+Et les ressources de bas niveau, telles que les [nœuds](/docs/admin/node) et les volumes persistants, ne se trouvent dans aucun namespace.
 
 Pour voir quelles ressources Kubernetes sont et ne sont pas dans un namespace:
 

From f6496b0de5230c7f5366520faa1456294f038f4d Mon Sep 17 00:00:00 2001
From: Nic Cope <nicc@rk0n.org>
Date: Sat, 19 Sep 2020 03:30:30 -0700
Subject: [PATCH 386/496] Clarify that bind verb does not require resourceNames
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This may be intuitive for most, but the existing phrasing read to me as
if `bind` were a special-case verb that _required_ me to explicitly state
which Roles or ClusterRoles it should apply to.

> You can only create/update a role binding if you […] or if you have
> been authorized to perform the bind verb on the referenced role.

> Grant them permissions needed to bind a particular role […]
> explicitly, by giving them permission to perform the bind verb on the
> particular Role (or ClusterRole).
---
 content/en/docs/reference/access-authn-authz/rbac.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/en/docs/reference/access-authn-authz/rbac.md b/content/en/docs/reference/access-authn-authz/rbac.md
index 2be833826c..f43c8e5045 100644
--- a/content/en/docs/reference/access-authn-authz/rbac.md
+++ b/content/en/docs/reference/access-authn-authz/rbac.md
@@ -908,6 +908,8 @@ subjects:
   name: user-1
 ```
 
+Note that - as with any RBAC verb - you may omit `resourceNames` to allow `user-1` to grant other users _any_ ClusterRole in the namespace `user-1-namespace`.
+
 When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have.
 To bootstrap initial roles and role bindings:
 

From 70eba58d3b6b177ca3f7cfaec485cc1caadd2778 Mon Sep 17 00:00:00 2001
From: Tej-Singh-Rana <58101587+Tej-Singh-Rana@users.noreply.github.com>
Date: Sat, 19 Sep 2020 16:48:42 +0530
Subject: [PATCH 387/496] Contex to Context

---
 content/en/docs/concepts/security/pod-security-standards.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md
index 2dddc711a9..18c1b7e862 100644
--- a/content/en/docs/concepts/security/pod-security-standards.md
+++ b/content/en/docs/concepts/security/pod-security-standards.md
@@ -292,7 +292,7 @@ Containers at runtime. Security contexts are defined as part of the Pod and cont
 in the Pod manifest, and represent parameters to the container runtime.
 
 Security policies are control plane mechanisms to enforce specific settings in the Security Context,
-as well as other parameters outside the Security Contex. As of February 2020, the current native
+as well as other parameters outside the Security Context. As of February 2020, the current native
 solution for enforcing these security policies is [Pod Security
 Policy](/docs/concepts/policy/pod-security-policy/) - a mechanism for centrally enforcing security
 policy on Pods across a cluster. Other alternatives for enforcing security policy are being

From 3bc14789ada38f5d0151be9bcc66ef671346eb71 Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Sat, 19 Sep 2020 20:19:23 +0800
Subject: [PATCH 388/496] fix redirect to en link in chinese page

---
 .../tasks/configmap-secret/managing-secret-using-kubectl.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index 09e7c6fc21..c03ca5510e 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -206,6 +206,6 @@ kubectl delete secret db-user-pass
 - Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
 - Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 -->
-- 阅读更多有关 [Secret 概念](/docs/concepts/configuration/secret/)
-- 了解如何 [使用配置文件管理 Secret](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
-- 了解如何 [使用 kustomize 管理 Secret](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- 阅读更多有关 [Secret 概念](/zh/docs/concepts/configuration/secret/)
+- 了解如何 [使用配置文件管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- 了解如何 [使用 kustomize 管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize/)

From cf14321b7629fb9de609c483c82dbaefb355a0f8 Mon Sep 17 00:00:00 2001
From: Sushil Kumar <suskuma@microsoft.com>
Date: Sat, 19 Sep 2020 12:18:16 -0700
Subject: [PATCH 389/496] Fixed typo

Fixed typo s/kustomizae/kustomize
---
 .../tasks/configmap-secret/managing-secret-using-config-file.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index 13ffa70b3c..8ed9730415 100644
--- a/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/en/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -194,5 +194,5 @@ kubectl delete secret db-user-pass
 
 - Read more about the [Secret concept](/docs/concepts/configuration/secret/)
 - Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
-- Learn how to [manage Secret using kustomizae](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 

From 2f9b5e122ee9aab23552438f21d528f4a22c5f17 Mon Sep 17 00:00:00 2001
From: Nic Cope <nicc@rk0n.org>
Date: Sat, 19 Sep 2020 16:34:06 -0700
Subject: [PATCH 390/496] Move bind verb resourceNames hint inline of example

---
 content/en/docs/reference/access-authn-authz/rbac.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/en/docs/reference/access-authn-authz/rbac.md b/content/en/docs/reference/access-authn-authz/rbac.md
index f43c8e5045..6dea2e0d31 100644
--- a/content/en/docs/reference/access-authn-authz/rbac.md
+++ b/content/en/docs/reference/access-authn-authz/rbac.md
@@ -891,6 +891,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources: ["clusterroles"]
   verbs: ["bind"]
+  # omit resourceNames to allow binding any ClusterRole
   resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -908,8 +909,6 @@ subjects:
   name: user-1
 ```
 
-Note that - as with any RBAC verb - you may omit `resourceNames` to allow `user-1` to grant other users _any_ ClusterRole in the namespace `user-1-namespace`.
-
 When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have.
 To bootstrap initial roles and role bindings:
 

From 7ad80f090dbf1c7406d78ed499518c4abb597783 Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Sat, 19 Sep 2020 20:19:53 +0800
Subject: [PATCH 391/496] translate
 zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md

---
 .../managing-secret-using-config-file.md      | 268 ++++++++++++++++++
 1 file changed, 268 insertions(+)
 create mode 100644 content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md

diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
new file mode 100644
index 0000000000..5557742d47
--- /dev/null
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -0,0 +1,268 @@
+---
+title: 使用配置文件管理 Secret
+content_type: task
+weight: 20
+description: 使用资源配置文件创建 Secret 对象
+---
+<!--  
+title: Managing Secret using Configuration File
+content_type: task
+weight: 20
+description: Creating Secret objects using resource configuration file.
+-->
+
+<!-- overview -->
+
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+<!-- ## Create the Config file -->
+## 创建配置文件    {#create-the-config-file}
+
+<!-- 
+You can create a Secret in a file first, in JSON or YAML format, and then
+create that object.  The
+[Secret](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)
+resource contains two maps: `data` and `stringData`.
+The `data` field is used to store arbitrary data, encoded using base64. The
+`stringData` field is provided for convenience, and it allows you to provide
+Secret data as unencoded strings.
+The keys of `data` and `stringData` must consist of alphanumeric characters,
+`-`, `_` or `.`. 
+-->
+你可以先用 JSON 或 YAML 格式在文件中创建 Secret，然后创建该对象。
+[Secret](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#secret-v1-core)
+资源包含2个键值对： `data` 和 `stringData`。
+`data` 字段用来存储 base64 编码的任意数据。
+提供 `stringData` 字段是为了方便，它允许 Secret 使用未编码的字符串。
+`data` 和 `stringData` 的键必须由字母、数字、`-`，`_` 或 `.` 组成。
+
+<!--  
+For example, to store two strings in a Secret using the `data` field, convert
+the strings to base64 as follows:
+-->
+例如，要使用 Secret 的 `data` 字段存储两个字符串，请将字符串转换为 base64 ，如下所示：
+
+```shell
+echo -n 'admin' | base64
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+YWRtaW4=
+```
+
+```shell
+echo -n '1f2d1e2e67df' | base64
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+MWYyZDFlMmU2N2Rm
+```
+
+<!-- Write a Secret config file that looks like this: -->
+编写一个 Secret 配置文件，如下所示：
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  username: YWRtaW4=
+  password: MWYyZDFlMmU2N2Rm
+```
+
+<!-- 
+Note that the name of a Secret object must be a valid
+[DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names). 
+-->
+注意，Secret 对象的名称必须是有效的 [DNS 子域名](/zh/docs/concepts/overview/working-with-objects/names#dns-subdomain-names). 
+
+{{< note >}}
+<!--  
+The serialized JSON and YAML values of Secret data are encoded as base64
+strings. Newlines are not valid within these strings and must be omitted. When
+using the `base64` utility on Darwin/macOS, users should avoid using the `-b`
+option to split long lines. Conversely, Linux users *should* add the option
+`-w 0` to `base64` commands or the pipeline `base64 | tr -d '\n'` if the `-w`
+option is not available.
+-->
+Secret 数据的 JSON 和 YAML 序列化结果是以 base64 编码的。
+换行符在这些字符串中无效，必须省略。
+在 Darwin/macOS 上使用 `base64` 工具时，用户不应该使用 `-b` 选项分割长行。
+相反地，Linux 用户 *应该* 在 `base64` 地命令中添加 `-w 0` 选项，
+或者在 `-w` 选项不可用的情况下，输入 `base64 | tr -d '\n'`。
+{{< /note >}}
+
+<!-- 
+For certain scenarios, you may wish to use the `stringData` field instead. This
+field allows you to put a non-base64 encoded string directly into the Secret,
+and the string will be encoded for you when the Secret is created or updated.
+-->
+对于某些场景，你可能希望使用 `stringData` 字段。
+这字段可以将一个非 base64 编码的字符串直接放入 Secret 中，
+当创建或更新该 Secret 时，此字段将被编码。
+
+<!--  
+A practical example of this might be where you are deploying an application
+that uses a Secret to store a configuration file, and you want to populate
+parts of that configuration file during your deployment process.
+-->
+上述用例的实际场景可能是这样：当你部署应用时，使用 Secret 存储配置文件，
+你希望在部署过程中，填入部分内容到该配置文件。
+
+<!-- For example, if your application uses the following configuration file: -->
+例如，如果你的应用程序使用以下配置文件:
+
+```yaml
+apiUrl: "https://my.api.com/api/v1"
+username: "<user>"
+password: "<password>"
+```
+
+<!-- You could store this in a Secret using the following definition: -->
+你可以使用以下定义将其存储在 Secret 中:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+stringData:
+  config.yaml: |
+    apiUrl: "https://my.api.com/api/v1"
+    username: <user>
+    password: <password>
+```
+
+<!-- ## Create the Secret object -->
+## 创建 Secret 对象    {#create-the-secret-object}
+
+<!-- Now create the Secret using [`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands#apply): -->
+现在使用 [`kubectl apply`](/zh/docs/reference/generated/kubectl/kubectl-commands#apply) 创建 Secret：
+
+```shell
+kubectl apply -f ./secret.yaml
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+secret/mysecret created
+```
+
+<!-- ## Check the Secret -->
+## 检查 Secret   {#check-the-secret}
+
+<!--  
+The `stringData` field is a write-only convenience field. It is never output when
+retrieving Secrets. For example, if you run the following command:
+-->
+`stringData` 字段是只写的。获取 Secret 时，此字段永远不会输出。
+例如，如果你运行以下命令：
+
+
+```shell
+kubectl get secret mysecret -o yaml
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: 2018-11-15T20:40:59Z
+  name: mysecret
+  namespace: default
+  resourceVersion: "7225"
+  uid: c280ad2e-e916-11e8-98f2-025000000001
+type: Opaque
+data:
+  config.yaml: YXBpVXJsOiAiaHR0cHM6Ly9teS5hcGkuY29tL2FwaS92MSIKdXNlcm5hbWU6IHt7dXNlcm5hbWV9fQpwYXNzd29yZDoge3twYXNzd29yZH19
+```
+
+<!--  
+The commands `kubectl get` and `kubectl describe` avoid showing the contents of a `Secret` by
+default. This is to protect the `Secret` from being exposed accidentally to an onlooker,
+or from being stored in a terminal log.
+To check the actual content of the encoded data, please refer to
+[decoding secret](/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
+-->
+命令 `kubectl get` 和 `kubectl describe` 默认情况不显示 `Secret` 的内容。
+这是为了防止 `Secret` 意外地暴露给旁观者，或者保存在终端日志中。
+检查编码数据的实际内容，请参考 [解码 secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
+
+<!-- 
+If a field, such as `username`, is specified in both `data` and `stringData`,
+the value from `stringData` is used. For example, the following Secret definition: 
+-->
+如果在 `data` 和 `stringData` 中都指定了一个字段，比如 `username`，字段值来自 `stringData`。
+例如，下面的 Secret 定义:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysecret
+type: Opaque
+data:
+  username: YWRtaW4=
+stringData:
+  username: administrator
+```
+
+<!-- Results in the following Secret: -->
+结果有以下 Secret：
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  creationTimestamp: 2018-11-15T20:46:46Z
+  name: mysecret
+  namespace: default
+  resourceVersion: "7579"
+  uid: 91460ecb-e917-11e8-98f2-025000000001
+type: Opaque
+data:
+  username: YWRtaW5pc3RyYXRvcg==
+```
+
+<!-- Where `YWRtaW5pc3RyYXRvcg==` decodes to `administrator`. -->
+其中 `YWRtaW5pc3RyYXRvcg==` 解码成 `administrator`。
+
+<!-- ## Clean Up -->
+## 清理    {#clean-up}
+
+<!-- To delete the Secret you have just created: -->
+删除你刚才创建的 Secret：
+
+```shell
+kubectl delete secret db-user-pass
+```
+
+## {{% heading "whatsnext" %}}
+
+<!-- 
+- Read more about the [Secret concept](/docs/concepts/configuration/secret/)
+- Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- Learn how to [manage Secret using kustomizae](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+-->
+- 阅读更多有关于 [Secret 概念](/zh/docs/concepts/configuration/secret/)
+- 了解如何 [使用 `kubectl` 命令管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- 了解如何 [使用 kustomize 管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+

From 75ba2894c66ace3bffd8e03d624ac1539c5e8e36 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Fri, 18 Sep 2020 20:38:31 +0700
Subject: [PATCH 392/496] Add ID translation for
 /docs/tutorials/stateful-application/basic-stateful-set

---
 .../tutorials/stateful-application/_index.md  |    4 +
 .../basic-stateful-set.md                     | 1202 +++++++++++++++++
 .../application/web/web-parallel.yaml         |   47 +
 content/id/examples/application/web/web.yaml  |   46 +
 4 files changed, 1299 insertions(+)
 create mode 100755 content/id/docs/tutorials/stateful-application/_index.md
 create mode 100644 content/id/docs/tutorials/stateful-application/basic-stateful-set.md
 create mode 100644 content/id/examples/application/web/web-parallel.yaml
 create mode 100644 content/id/examples/application/web/web.yaml

diff --git a/content/id/docs/tutorials/stateful-application/_index.md b/content/id/docs/tutorials/stateful-application/_index.md
new file mode 100755
index 0000000000..22642348c7
--- /dev/null
+++ b/content/id/docs/tutorials/stateful-application/_index.md
@@ -0,0 +1,4 @@
+---
+title: "Aplikasi Stateful"
+weight: 50
+---
diff --git a/content/id/docs/tutorials/stateful-application/basic-stateful-set.md b/content/id/docs/tutorials/stateful-application/basic-stateful-set.md
new file mode 100644
index 0000000000..35c27666b4
--- /dev/null
+++ b/content/id/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -0,0 +1,1202 @@
+---
+title: Dasar-dasar StatefulSet
+content_type: tutorial
+weight: 10
+---
+
+<!-- overview -->
+Tutorial ini memberikan pengantar untuk manajemen aplikasi dengan
+{{< glossary_tooltip text="StatefulSet" term_id="statefulset" >}}.
+Di sini dicontohkan bagaimana cara untuk membuat, menghapus, melakukan penyekalaan, 
+dan memperbarui Pod dari StatefulSet.
+
+
+## {{% heading "prerequisites" %}}
+
+Sebelum memulai tutorial ini, kamu harus mengakrabkan dirimu dengan
+konsep-konsep Kubernetes sebagai berikut:
+
+* [Pod](/id/docs/concepts/workloads/pods/)
+* [DNS klaster](/id/docs/concepts/services-networking/dns-pod-service/)
+* [Service _headless_](/id/docs/concepts/services-networking/service/#service-headless)
+* [PersistentVolume](/id/docs/concepts/storage/persistent-volumes/)
+* [Penyediaan PersistentVolume](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/staging/persistent-volume-provisioning/)
+* [StatefulSet](/id/docs/concepts/workloads/controllers/statefulset/)
+* Alat baris perintah (_command line tool_) [kubectl](/docs/reference/kubectl/kubectl/)
+
+{{< note >}}
+Tutorial ini mengasumsikan bahwa klastermu telah dikonfigurasikan untuk 
+melakukan penyediaan PersistentVolume secara dinamis. Jika klastermu belum 
+dikonfigurasikan seperti itu, kamu harus menyediakan dua volume masing-masing dengan 
+ukuran 1 GiB sebelum memulai tutorial.
+{{< /note >}}
+
+## {{% heading "objectives" %}}
+
+StatefulSet ditujukan untuk digunakan dengan aplikasi-aplikasi _stateful_ 
+dan sistem terdistribusi. Akan tetapi, tata kelola aplikasi-aplikasi _stateful_ 
+dan sistem terdistribusi pada Kubernetes merupakan topik yang luas dan kompleks. 
+Untuk menunjukkan fitur-fitur dasar dari StatefulSet dan tidak mencampuradukkan 
+topik sebelum dan terakhir, kamu akan menggelar sebuah aplikasi web sederhana 
+menggunakan StatefulSet. 
+
+Setelah tutorial ini, kamu akan akrab hal-hal berikut:
+
+* Bagaimana cara membuat sebuah StatefulSet
+* Bagaimana suatu StatefulSet mengelola Pod
+* Bagaimana cara menghapus StatefulSet
+* Bagaimana cara melakukan penyekalaan terhadap suatu StatefulSet
+* Bagaimana cara memperbarui Pod dari StatefulSet
+
+<!-- lessoncontent -->
+
+## Membuat Sebuah StatefulSet
+
+Mulailah dengan membuat sebuah Statefulset dengan menggunakan contoh di bawah ini.
+Hal ini mirip dengan contoh yang ditunjukkan di dalam konsep 
+[StatefulSet](/id/docs/concepts/workloads/controllers/statefulset/).
+Contoh ini menciptakan sebuah 
+[Service _headless_](/id/docs/concepts/services-networking/service/#service-headless), 
+`nginx`, untuk mempublikasikan alamat IP Pod di dalam StatefulSet, `web`.
+
+{{< codenew file="application/web/web.yaml" >}}
+
+Unduh contoh di atas, dan simpan ke dalam berkas dengan nama `web.yaml`.
+
+Kamu perlu menggunakan dua jendela terminal. Pada terminal yang pertama, gunakan perintah
+[`kubectl get`](/docs/reference/generated/kubectl/kubectl-commands/#get) untuk mengamati
+pembuatan Pod dari StatefulSet.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+
+Pada terminal yang kedua, gunakan
+[`kubectl apply`](/docs/reference/generated/kubectl/kubectl-commands/#apply) untuk membuat
+Service _headless_ dan StatefulSet yang didefinisikan di dalam `web.yaml`.
+
+```shell
+kubectl apply -f web.yaml
+```
+```
+service/nginx created
+statefulset.apps/web created
+```
+
+Perintah di atas menciptakan dua Pod, masing-masing menjalankan server web
+[NGINX](https://www.nginx.com). Dapatkan Service `nginx`...
+```shell
+kubectl get service nginx
+```
+```
+NAME      TYPE         CLUSTER-IP   EXTERNAL-IP   PORT(S)   AGE
+nginx     ClusterIP    None         <none>        80/TCP    12s
+```
+...kemudian dapatkan StatefulSet `web`, untuk memastikan keduanya berhasil dibuat:
+```shell
+kubectl get statefulset web
+```
+```
+NAME      DESIRED   CURRENT   AGE
+web       2         1         20s
+```
+
+### Pembuatan Pod Berurutan
+
+Untuk StatefulSet dengan _n_ replika, ketika Pod sedang digelar, kesemuanya
+akan dibuat secara berurutan, terurut dari _{0..n-1}_. Periksa keluaran dari
+perintah `kubectl get` pada terminal pertama. Pada akhirnya, keluaran yang dihasilkan
+akan seperti contoh di bawah ini.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     0/1       Pending   0          0s
+web-0     0/1       Pending   0         0s
+web-0     0/1       ContainerCreating   0         0s
+web-0     1/1       Running   0         19s
+web-1     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-1     0/1       ContainerCreating   0         0s
+web-1     1/1       Running   0         18s
+```
+Perhatikan Pod `web-1` tidak dijalankan hingga `web-0` berganti status menjadi _Running_
+(lihat [Fase Pod](/id/docs/concepts/workloads/pods/pod-lifecycle/#fase-pod)) dan _Ready_
+(lihat `type` di [Kondisi Pod](/id/docs/concepts/workloads/pods/pod-lifecycle/#kondisi-pod)).
+
+## Pod pada StatefulSet
+
+Pod pada StatefulSet memiliki satu indeks urutan unik dan satu identitas jaringan yang tetap.
+
+### Memeriksa Indeks Urutan Pod
+
+Dapatkan Pod dari StatefulSet:
+
+```shell
+kubectl get pods -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          1m
+web-1     1/1       Running   0          1m
+```
+
+Sebagaimana telah disebutkan di dalam konsep 
+[StatefulSet](/id/docs/concepts/workloads/controllers/statefulset/),
+Pod pada StatefulSet memiliki suatu identitas yang melekat (_sticky_) dan unik.
+Identitas ini didasarkan pada sebuah indeks urutan yang unik yang di tetapkan 
+ke masing-masing Pod oleh {{< glossary_tooltip term_id="controller" text="pengontrol">}} StatefulSet.
+Nama Pod memiliki format `<nama statefulset>-<indeks urutan>`.
+Karena StatefulSet `web` memiliki dua replika, maka ada dua Pod yang tercipta, `web-0` dan `web-1`.
+
+### Menggunakan Identitas Jaringan yang Tetap
+
+Setiap Pod memiliki nama hos yang tetep berdasarkan indeks urutannya. Gunakan perintah
+[`kubectl exec`](/docs/reference/generated/kubectl/kubectl-commands/#exec) untuk menjalankan
+perintah `hostname` di tiap Pod:
+
+```shell
+for i in 0 1; do kubectl exec "web-$i" -- sh -c 'hostname'; done
+```
+```
+web-0
+web-1
+```
+
+Gunakan perintah [`kubectl run`](/docs/reference/generated/kubectl/kubectl-commands/#run) untuk
+menjalankan sebuah Container yang menyediakan perintah `nslookup` dari paket `dnsutils`.
+Dengan menjalankan perintah `nslookup` dengan nama hos dari Pod, kamu dapat memeriksa alamat
+DNS mereka di dalam klaster:
+
+```shell
+kubectl run -i --tty --image busybox:1.28 dns-test --restart=Never --rm
+```
+perintah itu akan memulai sebuah _shell_ baru. Pada _shell_ tersebut, jalankan:
+```shell
+# Jalankan ini di dalam shell Container dns-test
+nslookup web-0.nginx
+```
+Keluarannya akan seperti:
+```
+Server:    10.0.0.10
+Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
+
+Name:      web-0.nginx
+Address 1: 10.244.1.6
+
+nslookup web-1.nginx
+Server:    10.0.0.10
+Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
+
+Name:      web-1.nginx
+Address 1: 10.244.2.6
+```
+
+(dan selanjutnya keluarlah dari _shell_ Container dengan menjalankan: `exit`)
+
+CNAME dari _headless service_ mengarah ke SRV _record_ (satu untuk tiap Pod yang
+Running dan Ready). SRC _record_ mengarah ke entri A _record_ yang memuat
+alamat IP Pod.
+
+Pada salah satu terminal, amati Pod dari StatefulSet:
+
+```shell
+kubectl get pod -w -l app=nginx
+```
+Pada terminal yang lain, gunakan perintah
+[`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands/#delete) untuk menghapus
+semua Pod pada StatefulSet:
+
+```shell
+kubectl delete pod -l app=nginx
+```
+```
+pod "web-0" deleted
+pod "web-1" deleted
+```
+
+Tunggu sampai StatefulSet menjalankan mereka kembali, dan untuk keduanya menjadi
+Running dan Ready:
+
+```shell
+kubectl get pod -w -l app=nginx
+```
+```
+NAME      READY     STATUS              RESTARTS   AGE
+web-0     0/1       ContainerCreating   0          0s
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          2s
+web-1     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-1     0/1       ContainerCreating   0         0s
+web-1     1/1       Running   0         34s
+```
+
+Gunakan perintah `kubectl exec` dan `kubectl run` untuk menampilkan nama hos Pod
+dan entri DNS mereka dalam klaster. Pertama-tama, tampilkan nama hos Pod:
+
+```shell
+for i in 0 1; do kubectl exec web-$i -- sh -c 'hostname'; done
+```
+```
+web-0
+web-1
+```
+selanjutnya, jalankan:
+```
+kubectl run -i --tty --image busybox:1.28 dns-test --restart=Never --rm /bin/sh
+```
+perintah itu akan menjalankan _shell_ baru.
+Di dalam _shell_ yang baru jalankan:
+```shell
+# Jalankan ini di dalam shell Container dns-test
+nslookup web-0.nginx
+```
+Keluarannya akan seperti:
+```
+Server:    10.0.0.10
+Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
+
+Name:      web-0.nginx
+Address 1: 10.244.1.7
+
+nslookup web-1.nginx
+Server:    10.0.0.10
+Address 1: 10.0.0.10 kube-dns.kube-system.svc.cluster.local
+
+Name:      web-1.nginx
+Address 1: 10.244.2.8
+```
+
+(dan selanjutnya keluarlah dari _shell_ Container dengan menjalankan: `exit`)
+
+Urutan, nama hos, SRV _record_, dan nama A _record_ dari Pod tidak berubah,
+akan tetapi alamat IP yang terkait dengan Pod bisa jadi mengalami perubahan. Pada klaster
+yang digunakan dalam tutorial ini terjadi perubahan. Karena itulah mengapa sangat penting
+untuk menghindari pengaturan terhadap aplikasi lain yang terhubung ke Pod di dalam
+StatefulSet menggunakan alamat IP.
+
+Jika kamu ingin mencari dan terhubung dengan anggota aktif dari StatefulSet, kamu
+perlu melakukan kueri CNAME dari Service _headless_ (`nginx.default.svc.cluster.local`).
+SRV _record_ yang terkait dengan CNAME hanya akan memuat Pod dari StatefulSet yang
+Running dan Ready.
+
+Jika aplikasimu telah menerapkan logika koneksi yang menguji keaktifan
+(_liveness_) dan kesiapan (_readiness_), kamu dapat menggunakan SRV _record_ dari Pod (
+`web-0.nginx.default.svc.cluster.local`,
+`web-1.nginx.default.svc.cluster.local`), karena mereka tidak akan berubah, dan
+aplikasimu akan bisa menemukan alamat-alamat Pod ketika mereka mengalami peralihan
+ke Running dan Ready.
+
+### Menulis ke Penyimpanan Tetap
+
+Dapatkan PersistentVolumeClaim untuk `web-0` dan `web-1`:
+
+```shell
+kubectl get pvc -l app=nginx
+```
+Keluarannya akan seperti:
+```
+NAME        STATUS    VOLUME                                     CAPACITY   ACCESSMODES   AGE
+www-web-0   Bound     pvc-15c268c7-b507-11e6-932f-42010a800002   1Gi        RWO           48s
+www-web-1   Bound     pvc-15c79307-b507-11e6-932f-42010a800002   1Gi        RWO           48s
+```
+
+Pengontrol StatefulSet membuat dua
+{{< glossary_tooltip text="PersistentVolumeClaim" term_id="persistent-volume-claim" >}}
+yang terikat ke dua
+{{< glossary_tooltip text="PersistentVolume" term_id="persistent-volume" >}}.
+
+Karena klaster yang digunakan dalam tutorial ini dikonfigurasi untuk melakukan penyediaan
+PersistentVolume secara dinamis, maka PersistentVolume dibuat dan terikat secara otomatis.
+
+Server web NGINX, secara bawaan, menyajikan berkas indeks dari
+`/usr/share/nginx/html/index.html`. _Field_ `volumeMounts` pada `spec` StatefulSet
+memastikan direktori `/usr/share/nginx/html` didukung oleh sebuah PersistentVolume.
+
+Tulis nama hos Pod ke dalam berkas `index.html` mereka masing-masing dan periksa
+apakah server web NGINX menyajikan nama hos tersebut:
+
+```shell
+for i in 0 1; do kubectl exec "web-$i" -- sh -c 'echo "$(hostname)" > /usr/share/nginx/html/index.html'; done
+
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+```
+web-0
+web-1
+```
+
+{{< note >}}
+Jika kamu melihat respon **403 Forbidden** untuk perintah curl di atas,
+kamu perlu untuk memperbaiki izin (_permission_) dari direktori yang dipasang
+oleh `volumeMounts` (disebabkan oleh sebuah
+[_bug_ ketika menggunakan volume hostPath](https://github.com/kubernetes/kubernetes/issues/2630)),
+dengan menjalankan:
+
+`for i in 0 1; do kubectl exec web-$i -- chmod 755 /usr/share/nginx/html; done`
+
+sebelum mencoba kembali perintah `curl` di atas.
+{{< /note >}}
+
+Di salah satu terminal, amati Pod dari StatefulSet:
+
+```shell
+kubectl get pod -w -l app=nginx
+```
+
+Di terminal yang lain, hapus semua Pod dari StatefulSet:
+
+```shell
+kubectl delete pod -l app=nginx
+```
+```
+pod "web-0" deleted
+pod "web-1" deleted
+```
+Periksa keluaran dari perintah `kubectl get` pada terminal yang pertama dan tunggu
+semua Pod berubah menjadi Running dan Ready.
+
+```shell
+kubectl get pod -w -l app=nginx
+```
+```
+NAME      READY     STATUS              RESTARTS   AGE
+web-0     0/1       ContainerCreating   0          0s
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          2s
+web-1     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-1     0/1       ContainerCreating   0         0s
+web-1     1/1       Running   0         34s
+```
+
+Periksa apakah server web masih terus menyajikan nama hosnya:
+
+```
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+```
+web-0
+web-1
+```
+
+Walaupun `web-0` dan `web-1` telah dijadwalkan ulang, mereka masih menyajikan
+nama hos masing-masing karena PersistentVolume yang terkait dengan 
+PersistentVolumeClaim-nya dipasang kembali (_remounted_) ke setiap `volumeMounts`.
+Di Node manapun `web-0` dan `web-1` dijadwalkan, PersistentVolume-nya akan
+dipasangkan ke titik pasang (_mount point_) yang sesuai.
+
+## Penyekalaan StatefulSet
+
+Melakukan penyekalaan pada StatefulSet berarti meningkatkan atau mengurangi jumlah
+replika. Hal ini dicapai dengan memperbarui _field_ `replicas`. Kamu dapat menggunakan
+[`kubectl scale`](/docs/reference/generated/kubectl/kubectl-commands/#scale) atau
+[`kubectl patch`](/docs/reference/generated/kubectl/kubectl-commands/#patch) untuk
+melakukan penyekalaan terhadap StatefulSet.
+
+### Penyekalaan Naik
+
+Pada salah satu jendela terminal, amati Pod pada StatefulSet:
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+
+Di jendela terminal yang lain gunakan perintah `kubectl scale` untuk melakukan
+penyekalaan jumlah replika menjadi 5:
+
+```shell
+kubectl scale sts web --replicas=5
+```
+```
+statefulset.apps/web scaled
+```
+
+Periksa keluaran dari perintah `kubectl get` pada terminal pertama dan tunggu
+tambahan tiga Pod yang baru berubah menjadi Running dan Ready.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          2h
+web-1     1/1       Running   0          2h
+NAME      READY     STATUS    RESTARTS   AGE
+web-2     0/1       Pending   0          0s
+web-2     0/1       Pending   0         0s
+web-2     0/1       ContainerCreating   0         0s
+web-2     1/1       Running   0         19s
+web-3     0/1       Pending   0         0s
+web-3     0/1       Pending   0         0s
+web-3     0/1       ContainerCreating   0         0s
+web-3     1/1       Running   0         18s
+web-4     0/1       Pending   0         0s
+web-4     0/1       Pending   0         0s
+web-4     0/1       ContainerCreating   0         0s
+web-4     1/1       Running   0         19s
+```
+
+Pengontrol StatefulSet telah melakukan penyekalaan terhadap jumlah replika.
+Sama seperti [pembuatan StatefulSet](#pembuatan-pod-dengan-urutan), pengontrol
+StatefulSet membuat tiap Pod berurutan sesuai dengan indeks urutan masing-masing
+dan menunggu setiap Pod yang dibuat sebelumnya menjadi Running dan Ready sebelum
+menjalankan Pod berikutnya.
+
+### Penyekalaan Turun
+
+Di salah satu terminal, amati Pod pada StatefulSet:
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+
+Di terminal yang lain, gunakan perintah `kubectl patch` untuk melakukan penyekalaan
+StatefulSet turun menjadi tiga replika:
+
+```shell
+kubectl patch sts web -p '{"spec":{"replicas":3}}'
+```
+```
+statefulset.apps/web patched
+```
+
+Tunggu hingga `web-4` dan `web-3` berubah menjadi Terminating.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+```
+NAME      READY     STATUS              RESTARTS   AGE
+web-0     1/1       Running             0          3h
+web-1     1/1       Running             0          3h
+web-2     1/1       Running             0          55s
+web-3     1/1       Running             0          36s
+web-4     0/1       ContainerCreating   0          18s
+NAME      READY     STATUS    RESTARTS   AGE
+web-4     1/1       Running   0          19s
+web-4     1/1       Terminating   0         24s
+web-4     1/1       Terminating   0         24s
+web-3     1/1       Terminating   0         42s
+web-3     1/1       Terminating   0         42s
+```
+
+### Penghentian Pod Berurutan
+
+Pengontrol menghapus satu Pod dalam satu waktu, dengan urutan terbalik dari indeks
+urutannya, dan setiap Pod akan ditunggu sampai benar-benar mati terlebih dahulu
+sebelum menghapus Pod berikutnya.
+
+Dapatkan PersistentVolumeClaim dari StatefulSet:
+
+```shell
+kubectl get pvc -l app=nginx
+```
+```
+NAME        STATUS    VOLUME                                     CAPACITY   ACCESSMODES   AGE
+www-web-0   Bound     pvc-15c268c7-b507-11e6-932f-42010a800002   1Gi        RWO           13h
+www-web-1   Bound     pvc-15c79307-b507-11e6-932f-42010a800002   1Gi        RWO           13h
+www-web-2   Bound     pvc-e1125b27-b508-11e6-932f-42010a800002   1Gi        RWO           13h
+www-web-3   Bound     pvc-e1176df6-b508-11e6-932f-42010a800002   1Gi        RWO           13h
+www-web-4   Bound     pvc-e11bb5f8-b508-11e6-932f-42010a800002   1Gi        RWO           13h
+
+```
+
+Di sana masih ada lima PersistentVolumeClaim dan lima PersistentVolume.
+Ketika mengeksplorasi [penyimpanan tetap](#menulis-ke-penyimpanan-tetap) pada Pod,
+kita dapat melihat bahwa PersistentVolume yang terpasang pada Pod dari suatu StatefulSet 
+tidak terhapus ketika Pod-nya dihapus. Hal ini tetap berlaku ketika penghapusan Pod
+terjadi karena penyekalaan turun pada suatu StatefulSet.
+
+## Memperbarui StatefulSet
+
+Di Kubernetes 1.7 dan yang lebih baru, pengontrol StatefulSet mendukung
+pembaruan otomatis. Strategi yang digunakan ditentukan oleh _field_ 
+`spec.updateStrategy` dari objek API StatefulSet. Fitur ini dapat digunakan untuk
+memperbarui _image_ Container, permintaan sumber daya dan/atau pembatasan, label,
+dan anotasi Pod dalam suatu StatefulSet. Ada dua strategi pembaruan yang berlaku,
+`RollingUpdate` dan `OnDelete`.
+
+Pembaruan dengan `RollingUpdate` adalah strategi bawaan untuk StatefulSet.
+
+### Pembaruan Bertahap (RollingUpdate)
+
+Pembaruan dengan strategi `RollingUpdate` akan memperbarui semua Pod di dalam
+StatefulSet dalam urutan indeks terbalik, dengan tetap memperhatikan 
+jaminan dari StatefulSet.
+
+Lakukan _patch_ pada StatefulSet `web` dengan menerapkan `RollingUpdate`:
+
+```shell
+kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate"}}}'
+```
+```
+statefulset.apps/web patched
+```
+
+Pada salah satu jendela terminal, _patch_ StatefulSet `web` untuk mengubah 
+_image_ Container lagi:
+
+```shell
+kubectl patch statefulset web --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/image", "value":"gcr.io/google_containers/nginx-slim:0.8"}]'
+```
+```
+statefulset.apps/web patched
+```
+
+Pada terminal yang lain, amati Pod pada StatefulSet:
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+Keluarannya akan seperti:
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          7m
+web-1     1/1       Running   0          7m
+web-2     1/1       Running   0          8m
+web-2     1/1       Terminating   0         8m
+web-2     1/1       Terminating   0         8m
+web-2     0/1       Terminating   0         8m
+web-2     0/1       Terminating   0         8m
+web-2     0/1       Terminating   0         8m
+web-2     0/1       Terminating   0         8m
+web-2     0/1       Pending   0         0s
+web-2     0/1       Pending   0         0s
+web-2     0/1       ContainerCreating   0         0s
+web-2     1/1       Running   0         19s
+web-1     1/1       Terminating   0         8m
+web-1     0/1       Terminating   0         8m
+web-1     0/1       Terminating   0         8m
+web-1     0/1       Terminating   0         8m
+web-1     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-1     0/1       ContainerCreating   0         0s
+web-1     1/1       Running   0         6s
+web-0     1/1       Terminating   0         7m
+web-0     1/1       Terminating   0         7m
+web-0     0/1       Terminating   0         7m
+web-0     0/1       Terminating   0         7m
+web-0     0/1       Terminating   0         7m
+web-0     0/1       Terminating   0         7m
+web-0     0/1       Pending   0         0s
+web-0     0/1       Pending   0         0s
+web-0     0/1       ContainerCreating   0         0s
+web-0     1/1       Running   0         10s
+```
+
+Pod dalam StatefulSet diperbarui dengan urutan indeks terbalik. Pengontrol
+StatefulSet mengakhiri setiap Pod, dan menunggunya beralih menjadi Running dan Ready
+sebelum melakukan pembaruan ke Pod berikutnya. Sebagai catatan, walaupun pengontrol
+StatefulSet tidak akan melanjutkan pembaruan terhadap Pod berikutnya hingga penggantinya
+Running dan Ready, pengontrol akan memulihkan Pod apa pun yang mengalami kegagalan selama
+proses pembaruan berlangsung.
+
+Pod yang telah menerima pembaruan akan dipulihkan ke versi yang diperbarui, sedangkan
+Pod yang belum menerima pembaruan akan dipulihkan ke versi sebelumnya. Dengan cara inilah
+pengontrol mencoba untuk terus mempertahankan kesehatan aplikasi dan
+pembaruan tetap konsisten ditengah adanya kemungkinan kegagalan intermiten.
+
+Dapatkan Pod untuk melihat _image_ Container-nya:
+
+```shell
+for p in 0 1 2; do kubectl get pod "web-$p" --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'; echo; done
+```
+```
+k8s.gcr.io/nginx-slim:0.8
+k8s.gcr.io/nginx-slim:0.8
+k8s.gcr.io/nginx-slim:0.8
+
+```
+
+Semua Pod pada StatefulSet saat ini sedang menjalankan _image_ Container sebelumnya.
+
+{{< note >}}
+Kamu juga bisa menggunakan perintah `kubectl rollout status sts/<name>`
+untuk menampilkan status pembaruan bertahap terhadap sebuah StatefulSet
+{{< /note >}}
+
+#### Pembaruan dengan _Staging_
+
+Kamu dapat melakukan _staging_ terhadap suatu pembaruan StatefulSet dengan
+menggunakan parameter `partition` dari strategi pembaruan `RollingUpdate`. Suatu
+pembaruan yang di-_staging_ akan akan mempertahankan semua Pod dalam StatefulSet
+tersebut pada versi yang digunakan saat ini sembari mengizinkan terjadinya
+perubahan pada `.spec.template` dari StatefulSet.
+
+Lakukan _patch_ terhadap StatefulSet `web` untuk menambahkan partisi pada
+_field_ `updateStrategy`:
+
+```shell
+kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate","rollingUpdate":{"partition":3}}}}'
+```
+```
+statefulset.apps/web patched
+```
+
+Lakukan _patch_ terhadap StatefulSet lagi, untuk mengubah _image_ Container:
+
+```shell
+kubectl patch statefulset web --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/image", "value":"k8s.gcr.io/nginx-slim:0.7"}]'
+```
+```
+statefulset.apps/web patched
+```
+
+Hapus sebuah Pod dari StatefulSet:
+
+```shell
+kubectl delete pod web-2
+```
+```
+pod "web-2" deleted
+```
+
+Tunggu hingga Pod menjadi Running dan Ready.
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+```
+NAME      READY     STATUS              RESTARTS   AGE
+web-0     1/1       Running             0          4m
+web-1     1/1       Running             0          4m
+web-2     0/1       ContainerCreating   0          11s
+web-2     1/1       Running   0         18s
+```
+
+Dapatkan _image_ Container Pod:
+
+```shell
+kubectl get pod web-2 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+```
+```
+k8s.gcr.io/nginx-slim:0.8
+```
+
+Perhatikan, walaupun strategi pembaruan yang digunakan adalah `RollingUpdate`,
+StatefulSet mengembalikan Pod dengan Container-nya yang semula. Hal ini karena
+urutan Pod kurang dari nilai `partition` yang ditetapkan pada `updateStrategy`.
+
+#### Meluncurkan _Canary_
+
+Kamu dapat meluncurkan _canary_ untuk mencoba suatu perubahan dengan mengurangi
+`partition` yang kamu tentukan sebelumnya di [atas](#pembaruan-dengan-staging).
+
+Lakukan _patch_ terhadap StatefulSet untuk mengurangi jumlah partisi:
+
+```shell
+kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate","rollingUpdate":{"partition":2}}}}'
+```
+```
+statefulset.apps/web patched
+```
+
+Tunggu hingga `web-2` menjadi Running dan Ready.
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+```
+NAME      READY     STATUS              RESTARTS   AGE
+web-0     1/1       Running             0          4m
+web-1     1/1       Running             0          4m
+web-2     0/1       ContainerCreating   0          11s
+web-2     1/1       Running   0         18s
+```
+
+Dapatkan _image_ Container Pod:
+
+```shell
+kubectl get pod web-2 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+```
+```
+k8s.gcr.io/nginx-slim:0.7
+
+```
+
+Ketika kamu mengubah `partition`, pengontrol StatefulSet secara otomatis memperbarui Pod
+`web-2` karena urutan dari Pod tersebut lebih besar dari atau sama dengan
+nilai `partition`.
+
+Hapus Pod `web-1`:
+
+```shell
+kubectl delete pod web-1
+```
+```
+pod "web-1" deleted
+```
+
+Tunggu sampai Pod `web-1` menjadi Running dan Ready.
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+Keluarannya akan seperti:
+```
+NAME      READY     STATUS        RESTARTS   AGE
+web-0     1/1       Running       0          6m
+web-1     0/1       Terminating   0          6m
+web-2     1/1       Running       0          2m
+web-1     0/1       Terminating   0         6m
+web-1     0/1       Terminating   0         6m
+web-1     0/1       Terminating   0         6m
+web-1     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-1     0/1       ContainerCreating   0         0s
+web-1     1/1       Running   0         18s
+```
+
+Dapatkan _image_ Container dari Pod `web-1`:
+
+```shell
+kubectl get pod web-1 --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'
+```
+```
+k8s.gcr.io/nginx-slim:0.8
+```
+
+`web-1` dikembalikan ke konfigurasinya yang semula karena urutan Pod lebih kecil
+dari partisi. Ketika partisi ditentukan, semua Pod dengan urutan yang lebih besar
+dari atau sama dengan jumlah partisi akan diperbarui ketika `.spec.template` dari
+StatefulSet diubah. Jika suatu Pod yang memiliki urutan lebih kecil dari partisi
+dihapus atau diakhiri, Pod tersebut akan dikembalikan ke konfigurasinya yang semula.
+
+#### Peluncuran Bertahap
+
+Kamu dapat melakukan peluncuran bertahap (misalkan peluncuran: linier, geometris, atau eksponensial)
+dengan menggunakan pembaruan bertahap yang terpartisi dengan cara yang serupa
+ketika kamu meluncurkan [_canary_](#meluncurkan-canary). Untuk melakukan peluncuran bertahap,
+atur `partition` ke urutan di mana kamu menginginkan pengontrol untuk melakukan 
+pause terhadap pembaruan.
+
+Saat ini partisi sedang di atur menjadi `2`. Ganti partisi menjadi `0`:
+
+```shell
+kubectl patch statefulset web -p '{"spec":{"updateStrategy":{"type":"RollingUpdate","rollingUpdate":{"partition":0}}}}'
+```
+```
+statefulset.apps/web patched
+```
+
+Tunggu semua Pod pada StatefulSet menjadi Running dan Ready.
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+Keluarannya akan seperti:
+```
+NAME      READY     STATUS              RESTARTS   AGE
+web-0     1/1       Running             0          3m
+web-1     0/1       ContainerCreating   0          11s
+web-2     1/1       Running             0          2m
+web-1     1/1       Running   0         18s
+web-0     1/1       Terminating   0         3m
+web-0     1/1       Terminating   0         3m
+web-0     0/1       Terminating   0         3m
+web-0     0/1       Terminating   0         3m
+web-0     0/1       Terminating   0         3m
+web-0     0/1       Terminating   0         3m
+web-0     0/1       Pending   0         0s
+web-0     0/1       Pending   0         0s
+web-0     0/1       ContainerCreating   0         0s
+web-0     1/1       Running   0         3s
+```
+
+Dapatkan detail _image_ Container dari Pod pada StatefulSet:
+
+```shell
+for p in 0 1 2; do kubectl get pod "web-$p" --template '{{range $i, $c := .spec.containers}}{{$c.image}}{{end}}'; echo; done
+```
+```
+k8s.gcr.io/nginx-slim:0.7
+k8s.gcr.io/nginx-slim:0.7
+k8s.gcr.io/nginx-slim:0.7
+```
+
+Dengan mengubah nilai `partition` menjadi `0`, kamu mengizinkan StatefulSet
+untuk melanjutkan proses pembaruan.
+
+### Pembaruan OnDelete
+
+Strategi pembaruan `OnDelete` menerapkan mekanisme lama (versi 1.6 dan sebelumnya).
+Ketika kamu memilih strategi pembaruan ini, pengontrol StatefulSet tidak akan secara
+otomatis melakukan pembaruan terhadap Pod ketika suatu perubahan terjadi pada _field_
+`.spec.template` pada StatefulSet. Strategi ini dapat dipilih dengan mengatur
+`.spec.template.updateStrategy.type` menjadi `OnDelete`.
+
+## Menghapus StatefulSet
+
+StatefulSet mendukung penghapusan tidak berjenjang (_non-cascading_) dan berjenjang (_cascading_).
+Dalam penghapusan tidak berjenjang (_non-cascading delete_), Pod pada StatefulSet 
+tidak dihapus ketika StatefulSet terhapus. Pada penghapusan berjenjang (Cascading Delete),
+StatefulSet bersama Pod-nya dihapus semua.
+
+### Penghapusan Tidak Berjenjang (_Non-Cascading_)
+
+Pada salah satu jendela terminal, amati Pod pada StatefulSet.
+
+```
+kubectl get pods -w -l app=nginx
+```
+
+Gunakan perintah [`kubectl delete`](/docs/reference/generated/kubectl/kubectl-commands/#delete)
+untuk menghapus StatefulSet. Pastikan kamu menambahkan parameter `--cascade=false` ke
+perintah tersebut. Parameter ini memberitahukan Kubernetes untuk hanya menghapus StatefulSet
+dan agar tidak menghapus Pod yang ada padanya.
+
+```shell
+kubectl delete statefulset web --cascade=false
+```
+```
+statefulset.apps "web" deleted
+```
+
+Dapatkan Pod untuk melihat statusnya masing-masing:
+
+```shell
+kubectl get pods -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          6m
+web-1     1/1       Running   0          7m
+web-2     1/1       Running   0          5m
+```
+
+Walaupun `web` telah dihapus, semua Pod masih Running dan Ready.
+Hapus `web-0`:
+
+```shell
+kubectl delete pod web-0
+```
+```
+pod "web-0" deleted
+```
+
+Dapatkan Pod dari StatefulSet:
+
+```shell
+kubectl get pods -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-1     1/1       Running   0          10m
+web-2     1/1       Running   0          7m
+```
+
+Karena StatefulSet `web` telah dihapus, maka `web-0` tidak dijalankan lagi.
+
+Di salah satu terminal, amati Pod pada StatefulSet.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+
+Pada terminal yang lain, buat kembali StatefulSet. Perhatikan, terkecuali
+jika kamu telah menghapus Service `ngingx` (yang seharusnya belum kamu lakukan), 
+kamu akan melihat sebuah galat yang mengindikasikan bahwa Service tersebut sudah ada.
+
+```shell
+kubectl apply -f web.yaml
+```
+```
+statefulset.apps/web created
+service/nginx unchanged
+```
+
+Abaikan galat yang terjadi. Hal itu hanya menunjukkan bahwa suatu upaya telah dilakukan
+untuk membuat Service _headless_ `nginx` walaupun Service tersebut sebenarnya sudah ada.
+
+Perhatikan keluaran dari perintah `kubectl get` yang dijalankan pada terminal
+yang pertama.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-1     1/1       Running   0          16m
+web-2     1/1       Running   0          2m
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     0/1       Pending   0          0s
+web-0     0/1       Pending   0         0s
+web-0     0/1       ContainerCreating   0         0s
+web-0     1/1       Running   0         18s
+web-2     1/1       Terminating   0         3m
+web-2     0/1       Terminating   0         3m
+web-2     0/1       Terminating   0         3m
+web-2     0/1       Terminating   0         3m
+```
+
+Ketika StatefulSet `web` dibuat ulang, yang dijalankan pertama kali adalah `web-0`.
+Karena `web-1` telah menjadi Running dan Ready, ketika `web-0` berubah menjadi
+Running dan Ready, `web-0` mengadopsi Pod tersebut. Karena kamu membuat ulang
+StatefulSet dengan `replicas` sama dengan 2, ketika `web-0` selesai dibuat ulang, dan
+ketika `web-1` telah ditetapkan menjadi Running dan Ready, maka `web-2` diakhiri.
+
+Mari kita lihat kembali konten dari berkas `index.html` yang disajikan oleh server
+web Pod:
+
+```shell
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+```
+web-0
+web-1
+```
+
+Walaupun kamu sebelumnya pernah menghapus StatefulSet dan Pod `web-0`, server web
+masih terus menyajikan nama hos sebelumnya yang dimasukkan ke dalam berkas
+`index.html`. Hal ini terjadi karena StatefulSet tidak menghapus PersistentVolume
+yang terkait dengan Pod. Ketika kamu membuat ulang StatefulSet dan menjalankan
+kembali `web-0`, PersistentVolume yang digunakan sebelumnya akan dipasang kembali.
+
+### Penghapusan Berjenjang (Cascading)
+
+Pada salah satu jendela terminal, amati Pod pada StatefulSet.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+
+Pada terminal yang lain, hapus StatefulSet lagi. Kali ini, hilangkan parameter
+`--cascade=false`.
+
+```shell
+kubectl delete statefulset web
+```
+```
+statefulset.apps "web" deleted
+```
+Perhatikan keluaran dari perintah `kubectl get` yang dijalankan di terminal
+yang pertama, dan tunggu semua status Pod berubah menjadi Terminating.
+
+```shell
+kubectl get pods -w -l app=nginx
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     1/1       Running   0          11m
+web-1     1/1       Running   0          27m
+NAME      READY     STATUS        RESTARTS   AGE
+web-0     1/1       Terminating   0          12m
+web-1     1/1       Terminating   0         29m
+web-0     0/1       Terminating   0         12m
+web-0     0/1       Terminating   0         12m
+web-0     0/1       Terminating   0         12m
+web-1     0/1       Terminating   0         29m
+web-1     0/1       Terminating   0         29m
+web-1     0/1       Terminating   0         29m
+
+```
+
+Seperti yang telah kamu saksikan pada bagian [Penyekalaan Turun](#penyekalaan-turun),
+Pod diakhiri satu demi satu dengan urutan terbalik dari indeks urutan mereka. Sebelum
+mengakhiri suatu Pod, pengontrol StatefulSet menunggu Pod pengganti hingga benar-benar
+berakhir.
+
+{{< note >}}
+Walaupun penghapusan berjenjang menghapus suatu StatefulSet bersama Pod yang ada,
+penghapusan ini tidak menghapus Service _headless_ yang terkait dengan StatefulSet.
+Kamu hapus menghapus Service `nginx` secara manual.
+{{< /note >}}
+
+
+```shell
+kubectl delete service nginx
+```
+```
+service "nginx" deleted
+```
+
+Buat ulang StatefulSet dan Service _headless_ sekali lagi:
+
+```shell
+kubectl apply -f web.yaml
+```
+```
+service/nginx created
+statefulset.apps/web created
+```
+
+Saat semua Pod StatefulSet mengalami transisi ke Running dan Ready, dapatkan
+konten dari berkas `index.html` masing-masing:
+
+```shell
+for i in 0 1; do kubectl exec -i -t "web-$i" -- curl http://localhost/; done
+```
+```
+web-0
+web-1
+```
+
+Walaupun kamu telah menghapus StatefulSet dan semua Pod di dalamnya, Pod dibuat
+lagi dengan PersistentVolume yang sama terpasang, dan `web-0` dan `web-1` masih
+menyajikan nama hos masing-masing.
+
+Akhirnya, hapus Service `nginx`...
+
+```shell
+kubectl delete service nginx
+```
+```
+service "nginx" deleted
+```
+...dan StatefulSet `web`:
+```shell
+kubectl delete statefulset web
+```
+```
+statefulset "web" deleted
+```
+
+## Kebijakan Manajemen Pod
+
+Untuk beberapa sistem terdistribusi, jaminan pengurutan StatefulSet tidak
+penting dan/atau tidak diharapkan. Sistem-sistem tersebut hanya membutuhkan
+keunikan dan identitas. Untuk mengatasi ini, pada Kubernetes 1.7, kami
+memperkenalkan `.spec.podManagementPolicy` pada objek API StatefulSet.
+
+### Manajemen Pod OrderedReady
+
+Manajemen Pod `OrderedReady` adalah bawaan dari StatefulSet. Manajemen
+dengan cara ini memberitahukan pengontrol StatefulSet untuk menghormati
+jaminan pengurutan yang sudah ditunjukkan sebelumnya.
+
+### Manajemen Pod Parallel
+
+Manajemen Pod `Parallel` memberitahukan pengontrol StatefulSet untuk
+menjalankan atau mengakhiri semua Pod secara bersamaan (paralel), dan tidak menunggu
+suatu Pod menjadi Running dan Ready atau benar-benar berakhir sebelum menjalankan atau 
+mengakhiri Pod yang lain.
+
+{{< codenew file="application/web/web-parallel.yaml" >}}
+
+Unduh contoh di atas, dan simpan ke sebuah berkas dengan nama `web-parallel.yaml`.
+
+Manifes ini serupa dengan yang telah kamu unduh sebelumnya kecuali `.spec.podManagementPolicy`
+dari StatefulSet `web` diatur ke `Parallel`.
+
+Di salah satu terminal, amati Pod pada StatefulSet.
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+
+Pada terminal yang lain, buat StatefulSet dan Service dari manifes tadi:
+
+```shell
+kubectl apply -f web-parallel.yaml
+```
+```
+service/nginx created
+statefulset.apps/web created
+```
+
+Perhatikan keluaran dari perintah `kubectl get` yang kamu jalankan pada
+terminal yang pertama.
+
+```shell
+kubectl get pod -l app=nginx -w
+```
+```
+NAME      READY     STATUS    RESTARTS   AGE
+web-0     0/1       Pending   0          0s
+web-0     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-1     0/1       Pending   0         0s
+web-0     0/1       ContainerCreating   0         0s
+web-1     0/1       ContainerCreating   0         0s
+web-0     1/1       Running   0         10s
+web-1     1/1       Running   0         10s
+```
+
+Pengontrol StatefulSet menjalankan `web-0` dan `web-` berbarengan.
+
+Biarkan terminal kedua tetap terbuka, kemudian, di jendela terminal
+yang lain lakukan penyekalaan terhadap StatefulSet:
+
+```shell
+kubectl scale statefulset/web --replicas=4
+```
+```
+statefulset.apps/web scaled
+```
+
+Perhatikan keluaran terminal di mana perintah `kubectl get` dijalankan.
+
+```
+web-3     0/1       Pending   0         0s
+web-3     0/1       Pending   0         0s
+web-3     0/1       Pending   0         7s
+web-3     0/1       ContainerCreating   0         7s
+web-2     1/1       Running   0         10s
+web-3     1/1       Running   0         26s
+```
+
+StatefulSet menjalankan dua Pod baru dan tidak menunggu Pod pertama
+menjadi Running dan Ready terlebih dahulu sebelum menjalankan Pod
+yang kedua.
+
+## {{% heading "cleanup" %}}
+
+Kamu harus membuka dua terminal yang siap untuk menjalankan perintah `kubectl`
+sebagai bagian dari pembersihan.
+
+```shell
+kubectl delete sts web
+# sts adalah singkatan dari statefulset
+```
+
+Kamu dapat mengamati `kubectl get` untuk melihat semua Pod yang sedang dihapus.
+```shell
+kubectl get pod -l app=nginx -w
+```
+```
+web-3     1/1       Terminating   0         9m
+web-2     1/1       Terminating   0         9m
+web-3     1/1       Terminating   0         9m
+web-2     1/1       Terminating   0         9m
+web-1     1/1       Terminating   0         44m
+web-0     1/1       Terminating   0         44m
+web-0     0/1       Terminating   0         44m
+web-3     0/1       Terminating   0         9m
+web-2     0/1       Terminating   0         9m
+web-1     0/1       Terminating   0         44m
+web-0     0/1       Terminating   0         44m
+web-2     0/1       Terminating   0         9m
+web-2     0/1       Terminating   0         9m
+web-2     0/1       Terminating   0         9m
+web-1     0/1       Terminating   0         44m
+web-1     0/1       Terminating   0         44m
+web-1     0/1       Terminating   0         44m
+web-0     0/1       Terminating   0         44m
+web-0     0/1       Terminating   0         44m
+web-0     0/1       Terminating   0         44m
+web-3     0/1       Terminating   0         9m
+web-3     0/1       Terminating   0         9m
+web-3     0/1       Terminating   0         9m
+```
+
+Selama penghapusan, StatefulSet menghapus semua Pod secara serentak; tidak menghentikan
+Pod berdasarkan urutan indeksnya terlebih dahulu sebelum menghapus Pod tersebut.
+
+Tutup terminal di mana perintah `kubectl get` dijalankan dan hapus Service `nginx`:
+
+```shell
+kubectl delete svc nginx
+```
+
+{{< note >}}
+Kamu juga perlu menghapus media penyimpanan persisten untuk PersistentVolume
+yang digunakan dalam tutorial ini.
+
+Ikuti langkah-langkah yang dibutuhkan, berdasarkan lingkungan yang kamu gunakan,
+konfigurasi penyimpanan, dan metode penyediaannya, untuk memastikan semua
+penyimpanan dapat dimanfaatkan lagi.
+{{< /note >}}
diff --git a/content/id/examples/application/web/web-parallel.yaml b/content/id/examples/application/web/web-parallel.yaml
new file mode 100644
index 0000000000..4eab2dc206
--- /dev/null
+++ b/content/id/examples/application/web/web-parallel.yaml
@@ -0,0 +1,47 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx
+  labels:
+    app: nginx
+spec:
+  ports:
+  - port: 80
+    name: web
+  clusterIP: None
+  selector:
+    app: nginx
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: web
+spec:
+  serviceName: "nginx"
+  podManagementPolicy: "Parallel"
+  replicas: 2
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: k8s.gcr.io/nginx-slim:0.8
+        ports:
+        - containerPort: 80
+          name: web
+        volumeMounts:
+        - name: www
+          mountPath: /usr/share/nginx/html
+  volumeClaimTemplates:
+  - metadata:
+      name: www
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 1Gi
diff --git a/content/id/examples/application/web/web.yaml b/content/id/examples/application/web/web.yaml
new file mode 100644
index 0000000000..c1950aecbf
--- /dev/null
+++ b/content/id/examples/application/web/web.yaml
@@ -0,0 +1,46 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx
+  labels:
+    app: nginx
+spec:
+  ports:
+  - port: 80
+    name: web
+  clusterIP: None
+  selector:
+    app: nginx
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: web
+spec:
+  serviceName: "nginx"
+  replicas: 2
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: k8s.gcr.io/nginx-slim:0.8
+        ports:
+        - containerPort: 80
+          name: web
+        volumeMounts:
+        - name: www
+          mountPath: /usr/share/nginx/html
+  volumeClaimTemplates:
+  - metadata:
+      name: www
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 1Gi

From c798084035d8d3ef47536821333b71c5a2856bb6 Mon Sep 17 00:00:00 2001
From: Philippe Martin <contact@elol.fr>
Date: Sun, 20 Sep 2020 11:59:07 +0200
Subject: [PATCH 393/496] newline at end of yamls

---
 .../one-constraint-with-nodeaffinity.yaml                       | 2 +-
 .../pods/topology-spread-constraints/one-constraint.yaml        | 2 +-
 .../pods/topology-spread-constraints/two-constraints.yaml       | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml b/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml
index 98823f9d86..858ecd1b9b 100644
--- a/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml
+++ b/content/fr/examples/pods/topology-spread-constraints/one-constraint-with-nodeaffinity.yaml
@@ -23,4 +23,4 @@ spec:
             - zoneC
   containers:
   - name: pause
-    image: k8s.gcr.io/pause:3.1
\ No newline at end of file
+    image: k8s.gcr.io/pause:3.1
diff --git a/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml b/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml
index a0a41188ec..1062e8a489 100644
--- a/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml
+++ b/content/fr/examples/pods/topology-spread-constraints/one-constraint.yaml
@@ -14,4 +14,4 @@ spec:
         foo: bar
   containers:
   - name: pause
-    image: k8s.gcr.io/pause:3.1
\ No newline at end of file
+    image: k8s.gcr.io/pause:3.1
diff --git a/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml b/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml
index aa142b7abb..6c0ab0009b 100644
--- a/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml
+++ b/content/fr/examples/pods/topology-spread-constraints/two-constraints.yaml
@@ -20,4 +20,4 @@ spec:
         foo: bar
   containers:
   - name: pause
-    image: k8s.gcr.io/pause:3.1
\ No newline at end of file
+    image: k8s.gcr.io/pause:3.1

From 3351468c61f977bcb5e64de22ead647eeb0e7707 Mon Sep 17 00:00:00 2001
From: williamChang80 <william_chang80@rocketmail.com>
Date: Sun, 20 Sep 2020 21:33:08 +0700
Subject: [PATCH 394/496] Fix link and docs in ID docs

---
 content/id/docs/tasks/tools/install-minikube.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/id/docs/tasks/tools/install-minikube.md b/content/id/docs/tasks/tools/install-minikube.md
index d3e10f4fd6..0fa4e2b61a 100644
--- a/content/id/docs/tasks/tools/install-minikube.md
+++ b/content/id/docs/tasks/tools/install-minikube.md
@@ -63,9 +63,9 @@ Hyper-V Requirements:     A hypervisor has been detected. Features required for
 {{< tabs name="tab_with_md" >}}
 {{% tab name="Linux" %}}
 
-### Menginstal kubectl
+### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#install-kubectl-on-linux).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-linux).
 
 ### Menginstal sebuah Hypervisor
 
@@ -125,7 +125,7 @@ brew install minikube
 {{% tab name="macOS" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl berdasarkan instruksi pada laman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#install-kubectl-on-macos).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-macos).
 
 ### Instalasi sebuah Hypervisor
 
@@ -161,7 +161,7 @@ sudo mv minikube /usr/local/bin
 {{% tab name="Windows" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl berdasarkan instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#install-kubectl-on-windows).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-program-kubectl-dengan-curl-pada-windows).
 
 ### Menginstal sebuah Hypervisor
 

From acb5afb410eabd2c59d62431e89b7aabb10fd15c Mon Sep 17 00:00:00 2001
From: William Chang <48861800+WilliamChang80@users.noreply.github.com>
Date: Sun, 20 Sep 2020 21:59:41 +0700
Subject: [PATCH 395/496] Update install-minikube.md

---
 content/id/docs/tasks/tools/install-minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/docs/tasks/tools/install-minikube.md b/content/id/docs/tasks/tools/install-minikube.md
index 0fa4e2b61a..727d263520 100644
--- a/content/id/docs/tasks/tools/install-minikube.md
+++ b/content/id/docs/tasks/tools/install-minikube.md
@@ -161,7 +161,7 @@ sudo mv minikube /usr/local/bin
 {{% tab name="Windows" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-program-kubectl-dengan-curl-pada-windows).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-windows).
 
 ### Menginstal sebuah Hypervisor
 

From 9c58ad1534e74ebc66c065008d0a84a9d9673313 Mon Sep 17 00:00:00 2001
From: williamChang80 <william_chang80@rocketmail.com>
Date: Sun, 20 Sep 2020 21:33:08 +0700
Subject: [PATCH 396/496] Fix link and docs in ID docs

---
 content/id/docs/tasks/tools/install-minikube.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/id/docs/tasks/tools/install-minikube.md b/content/id/docs/tasks/tools/install-minikube.md
index d3e10f4fd6..0fa4e2b61a 100644
--- a/content/id/docs/tasks/tools/install-minikube.md
+++ b/content/id/docs/tasks/tools/install-minikube.md
@@ -63,9 +63,9 @@ Hyper-V Requirements:     A hypervisor has been detected. Features required for
 {{< tabs name="tab_with_md" >}}
 {{% tab name="Linux" %}}
 
-### Menginstal kubectl
+### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#install-kubectl-on-linux).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-linux).
 
 ### Menginstal sebuah Hypervisor
 
@@ -125,7 +125,7 @@ brew install minikube
 {{% tab name="macOS" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl berdasarkan instruksi pada laman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#install-kubectl-on-macos).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-macos).
 
 ### Instalasi sebuah Hypervisor
 
@@ -161,7 +161,7 @@ sudo mv minikube /usr/local/bin
 {{% tab name="Windows" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl berdasarkan instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#install-kubectl-on-windows).
+Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-program-kubectl-dengan-curl-pada-windows).
 
 ### Menginstal sebuah Hypervisor
 

From 46fc5b5e0d4c72e9ff3c549a9bca3965b9ddd22c Mon Sep 17 00:00:00 2001
From: William Chang <48861800+WilliamChang80@users.noreply.github.com>
Date: Sun, 20 Sep 2020 22:53:42 +0700
Subject: [PATCH 397/496] Update install-minikube.md

---
 content/id/docs/tasks/tools/install-minikube.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/id/docs/tasks/tools/install-minikube.md b/content/id/docs/tasks/tools/install-minikube.md
index 727d263520..b674c52b6d 100644
--- a/content/id/docs/tasks/tools/install-minikube.md
+++ b/content/id/docs/tasks/tools/install-minikube.md
@@ -65,7 +65,7 @@ Hyper-V Requirements:     A hypervisor has been detected. Features required for
 
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-linux).
+Pastikan kamu sudah menginstal kubectl. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-linux).
 
 ### Menginstal sebuah Hypervisor
 
@@ -125,7 +125,7 @@ brew install minikube
 {{% tab name="macOS" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-macos).
+Pastikan kamu sudah menginstal kubectl. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-macos).
 
 ### Instalasi sebuah Hypervisor
 
@@ -161,7 +161,7 @@ sudo mv minikube /usr/local/bin
 {{% tab name="Windows" %}}
 ### Instalasi kubectl
 
-Pastikan kamu mempunyai kubectl yang terinstal. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-windows).
+Pastikan kamu sudah menginstal kubectl. Kamu bisa menginstal kubectl dengan mengikuti instruksi pada halaman [Menginstal dan Menyiapkan kubectl](/id/docs/tasks/tools/install-kubectl/#menginstal-kubectl-pada-windows).
 
 ### Menginstal sebuah Hypervisor
 

From 314820acd70a6817a8a9d92f2ad6705973e3c167 Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Mon, 21 Sep 2020 13:12:30 +0800
Subject: [PATCH 398/496] [zh] translate
 /zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md (#24016)

* fix the mixed use of zh/en systembols

* optimize translation

* translate /zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
---
 .../zh/docs/tasks/configmap-secret/_index.md  |   2 +-
 .../managing-secret-using-config-file.md      |  14 +-
 .../managing-secret-using-kubectl.md          |   8 +-
 .../managing-secret-using-kustomize.md        | 173 ++++++++++++++++++
 .../tasks/extend-kubectl/kubectl-plugins.md   |   2 +-
 .../zh/docs/tasks/extend-kubernetes/_index.md |   2 +-
 .../docs/tasks/manage-gpus/scheduling-gpus.md |   2 +-
 .../zh/docs/tasks/service-catalog/_index.md   |   2 +-
 8 files changed, 189 insertions(+), 16 deletions(-)
 create mode 100644 content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md

diff --git a/content/zh/docs/tasks/configmap-secret/_index.md b/content/zh/docs/tasks/configmap-secret/_index.md
index 53202ceb4d..3761ba9655 100644
--- a/content/zh/docs/tasks/configmap-secret/_index.md
+++ b/content/zh/docs/tasks/configmap-secret/_index.md
@@ -1,5 +1,5 @@
 ---
 title: "管理 Secrets"
 weight: 28
-description: 使用 Secrets 管理机密配置数据.
+description: 使用 Secrets 管理机密配置数据。
 ---
\ No newline at end of file
diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
index 5557742d47..1c140cee4c 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-config-file.md
@@ -2,7 +2,7 @@
 title: 使用配置文件管理 Secret
 content_type: task
 weight: 20
-description: 使用资源配置文件创建 Secret 对象
+description: 使用资源配置文件创建 Secret 对象。
 ---
 <!--  
 title: Managing Secret using Configuration File
@@ -202,9 +202,9 @@ or from being stored in a terminal log.
 To check the actual content of the encoded data, please refer to
 [decoding secret](/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
 -->
-命令 `kubectl get` 和 `kubectl describe` 默认情况不显示 `Secret` 的内容。
-这是为了防止 `Secret` 意外地暴露给旁观者，或者保存在终端日志中。
-检查编码数据的实际内容，请参考 [解码 secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
+命令 `kubectl get` 和 `kubectl describe` 默认不显示 `Secret` 的内容。
+这是为了防止 `Secret` 意外地暴露给旁观者或者保存在终端日志中。
+检查编码数据的实际内容，请参考[解码 secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret).
 
 <!-- 
 If a field, such as `username`, is specified in both `data` and `stringData`,
@@ -262,7 +262,7 @@ kubectl delete secret db-user-pass
 - Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
 - Learn how to [manage Secret using kustomizae](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 -->
-- 阅读更多有关于 [Secret 概念](/zh/docs/concepts/configuration/secret/)
-- 了解如何 [使用 `kubectl` 命令管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
-- 了解如何 [使用 kustomize 管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- 进一步阅读 [Secret 概念](/zh/docs/concepts/configuration/secret/)
+- 了解如何[使用 `kubectl` 命令管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- 了解如何[使用 kustomize 管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 
diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
index c03ca5510e..5105500f0e 100644
--- a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl.md
@@ -150,7 +150,7 @@ The commands `kubectl get` and `kubectl describe` avoid showing the contents
 of a `Secret` by default. This is to protect the `Secret` from being exposed
 accidentally to an onlooker, or from being stored in a terminal log.
 -->
-默认情况下，`kubectl get` 和 `kubectl describe` 命令可避免显示 `Secret` 的内容。
+`kubectl get` 和 `kubectl describe` 命令默认不显示 `Secret` 的内容。
 这是为了防止 `Secret` 被意外暴露给旁观者或存储在终端日志中。
 
 <!-- ## Decoding the Secret  {#decoding-secret} -->
@@ -206,6 +206,6 @@ kubectl delete secret db-user-pass
 - Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/)
 - Learn how to [manage Secret using kustomize](/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
 -->
-- 阅读更多有关 [Secret 概念](/zh/docs/concepts/configuration/secret/)
-- 了解如何 [使用配置文件管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-config-file/)
-- 了解如何 [使用 kustomize 管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
+- 进一步阅读 [Secret 概念](/zh/docs/concepts/configuration/secret/)
+- 了解如何[使用配置文件管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-config-file/)
+- 了解如何[使用 kustomize 管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize/)
diff --git a/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
new file mode 100644
index 0000000000..65d73bb3f7
--- /dev/null
+++ b/content/zh/docs/tasks/configmap-secret/managing-secret-using-kustomize.md
@@ -0,0 +1,173 @@
+---
+title: 使用 Kustomize 管理 Secret
+content_type: task
+weight: 30
+description: 使用 kustomization.yaml 文件创建 Secret 对象。
+---
+<!-- 
+title: Managing Secret using Kustomize
+content_type: task
+weight: 30
+description: Creating Secret objects using kustomization.yaml file.
+-->
+
+<!-- overview -->
+
+<!--  
+Since Kubernetes v1.14, `kubectl` supports
+[managing objects using Kustomize](/docs/tasks/manage-kubernetes-objects/kustomization/).
+Kustomize provides resource Generators to create Secrets and ConfigMaps. The
+Kustomize generators should be specified in a `kustomization.yaml` file inside
+a directory. After generating the Secret, you can create the Secret on the API
+server with `kubectl apply`.
+-->
+从 kubernetes v1.14 开始，`kubectl` 支持[使用 Kustomize 管理对象](/zh/docs/tasks/manage-kubernetes-objects/kustomization/)。
+Kustomize 提供了资源生成器（Generators）来创建 Secret 和 ConfigMap。
+Kustomize 生成器应该在某个目录的 `kustomization.yaml` 文件中指定。
+生成 Secret 后，你可以使用 `kubectl apply` 在 API 服务器上创建该 Secret。
+## {{% heading "prerequisites" %}}
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+<!-- ## Create the Kustomization file -->
+## 创建 Kustomization 文件    {#create-the-kustomization-file}
+
+<!--  
+You can generate a Secret by defining a `secretGenerator` in a
+`kustomization.yaml` file that references other existing files.
+For example, the following kustomization file references the
+`./username.txt` and the `./password.txt` files:
+-->
+你可以在 `kustomization.yaml` 中定义 `secreteGenerator`，并在定义中引用其他现成的文件，生成 Secret。
+例如：下面的 kustomization 文件 引用了 `./username.txt` 和 `./password.txt` 文件：
+
+```yaml
+secretGenerator:
+- name: db-user-pass
+  files:
+  - username.txt
+  - password.txt
+```
+
+<!--  
+You can also define the `secretGenerator` in the `kustomization.yaml`
+file by providing some literals.
+For example, the following `kustomization.yaml` file contains two literals
+for `username` and `password` respectively:
+-->
+你也可以在 `kustomization.yaml` 文件中指定一些字面量定义 `secretGenerator`。
+例如：下面的 `kustomization.yaml` 文件中包含了 `username` 和 `password` 两个字面量：
+
+```yaml
+secretGenerator:
+- name: db-user-pass
+  literals:
+  - username=admin
+  - password=1f2d1e2e67df
+```
+
+<!-- Note that in both cases, you don't need to base64 encode the values. -->
+注意，上面两种情况，你都不需要使用 base64 编码。
+
+<!-- ## Create the Secret -->
+## 创建 Secret    {#create-the-secret}
+
+<!-- Apply the directory containing the `kustomization.yaml` to create the Secret. -->
+使用 `kubectl apply` 命令应用包含 `kustomization.yaml` 文件的目录创建 Secret。
+
+```shell
+kubectl apply -k .
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+secret/db-user-pass-96mffmfh4k created
+```
+
+<!-- 
+Note that when a Secret is generated, the Secret name is created by hashing
+the Secret data and appending the hash value to the name. This ensures that
+a new Secret is generated each time the data is modified. 
+-->
+请注意，生成 Secret 时，Secret 的名称最终是由 `name` 字段和数据的哈希值拼接而成。
+
+<!-- ## Check the Secret created -->
+## 检查创建的 Secret    {#check-the-secret-created}
+
+<!-- You can check that the secret was created: -->
+你可以检查刚才创建的 Secret：
+
+```shell
+kubectl get secrets
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+NAME                             TYPE                                  DATA      AGE
+db-user-pass-96mffmfh4k          Opaque                                2         51s
+```
+
+<!-- You can view a description of the secret: -->
+你可以看到 Secret 的描述：
+
+```shell
+kubectl describe secrets/db-user-pass-96mffmfh4k
+```
+
+<!-- The output is similar to: -->
+输出类似于：
+
+```
+Name:            db-user-pass
+Namespace:       default
+Labels:          <none>
+Annotations:     <none>
+
+Type:            Opaque
+
+Data
+====
+password.txt:    12 bytes
+username.txt:    5 bytes
+```
+
+<!-- 
+The commands `kubectl get` and `kubectl describe` avoid showing the contents of a `Secret` by
+default. This is to protect the `Secret` from being exposed accidentally to an onlooker,
+or from being stored in a terminal log.
+To check the actual content of the encoded data, please refer to
+[decoding secret](/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret). 
+-->
+`kubectl get` 和 `kubectl describe` 命令默认不显示 `Secret` 的内容。
+这是为了防止 `Secret` 被意外暴露给旁观者或存储在终端日志中。
+检查编码后的实际内容，请参考[解码 secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret)。 
+-->
+
+
+<!-- ## Clean Up -->
+## 清理    {#clean-up}
+
+<!-- To delete the Secret you have just created: -->
+删除你刚才创建的 Secret：
+
+```shell
+kubectl delete secret db-user-pass-96mffmfh4k
+```
+
+<!-- Optional section; add links to information related to this topic. -->
+## {{% heading "whatsnext" %}}
+
+<!-- 
+- Read more about the [Secret concept](/docs/concepts/configuration/secret/)
+- Learn how to [manage Secret with the `kubectl` command](/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- Learn how to [manage Secret using config file](/docs/tasks/configmap-secret/managing-secret-using-config-file/) 
+-->
+- 进一步阅读 [Secret 概念](/zh/docs/concepts/configuration/secret/)
+- 了解如何[使用 `kubectl` 命令管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/)
+- 了解如何[使用配置文件管理 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-config-file/)
diff --git a/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md b/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md
index bba139ae1d..2a81040a1a 100644
--- a/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md
+++ b/content/zh/docs/tasks/extend-kubectl/kubectl-plugins.md
@@ -1,6 +1,6 @@
 ---
 title: 用插件扩展 kubectl
-description: 通过创建和安装 kubectl 插件扩展 kubectl
+description: 通过创建和安装 kubectl 插件扩展 kubectl。
 content_type: task
 ---
 
diff --git a/content/zh/docs/tasks/extend-kubernetes/_index.md b/content/zh/docs/tasks/extend-kubernetes/_index.md
index 2bf9ad2537..3de1e50de6 100644
--- a/content/zh/docs/tasks/extend-kubernetes/_index.md
+++ b/content/zh/docs/tasks/extend-kubernetes/_index.md
@@ -1,5 +1,5 @@
 ---
 title: "扩展 Kubernetes"
-description: 了解针对工作环境需要来调整 Kubernetes 集群的进阶方法
+description: 了解针对工作环境需要来调整 Kubernetes 集群的进阶方法。
 weight: 90
 ---
diff --git a/content/zh/docs/tasks/manage-gpus/scheduling-gpus.md b/content/zh/docs/tasks/manage-gpus/scheduling-gpus.md
index f2045e78ca..8986b2a6e6 100644
--- a/content/zh/docs/tasks/manage-gpus/scheduling-gpus.md
+++ b/content/zh/docs/tasks/manage-gpus/scheduling-gpus.md
@@ -1,7 +1,7 @@
 ---
 content_type: concept
 title: 调度 GPUs
-description: 配置和调度 GPU 成一类资源以供集群中节点使用
+description: 配置和调度 GPU 成一类资源以供集群中节点使用。
 ---
 <!--
 reviewers:
diff --git a/content/zh/docs/tasks/service-catalog/_index.md b/content/zh/docs/tasks/service-catalog/_index.md
index e5938e9a07..1d12ab1465 100644
--- a/content/zh/docs/tasks/service-catalog/_index.md
+++ b/content/zh/docs/tasks/service-catalog/_index.md
@@ -1,5 +1,5 @@
 ---
 title: "安装服务目录"
 weight: 150
-description: 安装服务目录扩展 API 。
+description: 安装服务目录扩展 API。
 ---

From 99a29f9127e8d509d6bd010d214cda8ce032b451 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Mon, 21 Sep 2020 11:42:11 +0700
Subject: [PATCH 399/496] Complete ID translation for
 /docs/reference/access-authn-authz/rbac

---
 content/id/docs/reference/_index.md           |  13 +
 .../reference/access-authn-authz/_index.md    |   4 +
 .../docs/reference/access-authn-authz/rbac.md | 613 +++++++++---------
 3 files changed, 339 insertions(+), 291 deletions(-)
 create mode 100644 content/id/docs/reference/_index.md
 create mode 100644 content/id/docs/reference/access-authn-authz/_index.md

diff --git a/content/id/docs/reference/_index.md b/content/id/docs/reference/_index.md
new file mode 100644
index 0000000000..2191ab6df8
--- /dev/null
+++ b/content/id/docs/reference/_index.md
@@ -0,0 +1,13 @@
+---
+title: Referensi
+linkTitle: "Referensi"
+main_menu: true
+weight: 70
+content_type: concept
+---
+
+<!-- overview -->
+
+Bagian dari dokumentasi Kubernetes ini berisi referensi-referensi.
+
+<!-- TODO: translate the rest -->
\ No newline at end of file
diff --git a/content/id/docs/reference/access-authn-authz/_index.md b/content/id/docs/reference/access-authn-authz/_index.md
new file mode 100644
index 0000000000..5571044289
--- /dev/null
+++ b/content/id/docs/reference/access-authn-authz/_index.md
@@ -0,0 +1,4 @@
+---
+title: Mengakses API
+weight: 20
+---
diff --git a/content/id/docs/reference/access-authn-authz/rbac.md b/content/id/docs/reference/access-authn-authz/rbac.md
index 49aa20ed6e..03e7d2e076 100644
--- a/content/id/docs/reference/access-authn-authz/rbac.md
+++ b/content/id/docs/reference/access-authn-authz/rbac.md
@@ -6,39 +6,40 @@ weight: 70
 ---
 
 <!-- overview -->
-Kontrol akses berbasis peran (RBAC) adalah metode pengaturan akses ke sumber daya komputer 
-atau jaringan berdasarkan peran pengguna individu dalam organisasi kamu.
+_Role-based access control_ (RBAC) atau kontrol akses berbasis rol adalah metode pengaturan akses ke sumber daya komputer 
+atau jaringan berdasarkan rol pengguna individu dalam organisasimu.
 
 
 <!-- body -->
-Otorisasi RBAC menggunakan `rbac.authorization.k8s.io` kelompok API untuk mengendalikan keputusan
-otorisasi, memungkinkan kamu untuk mengkonfigurasi kebijakan secara dinamis melalui API Kubernetes.
+Otorisasi RBAC menggunakan {{< glossary_tooltip text="grup API" term_id="api-group" >}} `rbac.authorization.k8s.io` untuk mengendalikan keputusan
+otorisasi. Hal ini memungkinkanmu untuk mengonfigurasi kebijakan secara dinamis melalui
+API Kubernetes.
 
-Untuk mengaktifkan RBAC, jalankan Kubernetes dengan _flag_ `--authorization-mode` atur 
-dengan daftar yang dipisahkan koma dengan menyertakan `RBAC`;
+Untuk mengaktifkan RBAC, jalankan {{< glossary_tooltip text="server API" term_id="kube-apiserver" >}} dengan _flag_ `--authorization-mode` diatur 
+dengan daftar yang dipisahkan koma yang menyertakan `RBAC`;
 sebagai contoh:
 ```shell
 kube-apiserver --authorization-mode=Example,RBAC --other-options --more-options
 ```
 
-## Objek API  {#api-overview}
+## Objek API {#api-overview}
 
 API RBAC mendeklarasikan empat jenis objek Kubernetes: Role, ClusterRole,
-RoleBinding and ClusterRoleBinding. kamu bisa [mendeskripsikan beberapa objek](/id/docs/concepts/overview/working-with-objects/kubernetes-objects/#understanding-kubernetes-objects), atau mengubahnya menggunakan alat seperti `kubectl`, seperti objek Kubernetes lain.
+RoleBinding dan ClusterRoleBinding. kamu bisa [mendeskripsikan beberapa objek](/id/docs/concepts/overview/working-with-objects/kubernetes-objects/#understanding-kubernetes-objects), atau mengubahnya menggunakan alat seperti `kubectl`, seperti objek Kubernetes lain.
 
 {{< caution >}}
 Objek-objek ini, dengan disengaja, memaksakan pembatasan akses. Jika kamu melakukan perubahan
 ke klaster saat kamu belajar, lihat
-[pencegahan eskalasi hak istimewa dan _bootstrap_](#privilege-eskalasi-pencegahan-dan-bootstrap)
+[pencegahan eskalasi privilese dan _bootstrapping_](#pencegahan-eskalasi-privilese-dan-bootstrapping)
 untuk memahami bagaimana pembatasan tersebut dapat mencegah kamu melakukan beberapa perubahan.
 {{< /caution >}}
 
 ### Role dan ClusterRole
 
-Sebuah RBAC Role atau ClusterRole berisi aturan yang mewakili sekumpulan izin.
+Sebuah Role RBAC atau ClusterRole memuat aturan yang mewakili sekumpulan izin.
 Izin bersifat aditif (tidak ada aturan "tolak").
 
-Sebuah Role selalu mengatur izin dalam Namespace tertentu;
+Sebuah Role selalu mengatur izin dalam {{< glossary_tooltip text="Namespace" term_id="namespace" >}} tertentu;
 ketika kamu membuat Role, kamu harus menentukan Namespace tempat Role tersebut berada.
 
 ClusterRole, sebaliknya, adalah sumber daya tanpa Namespace. Sumber daya tersebut memiliki nama yang berbeda (Role
@@ -48,16 +49,16 @@ tidak mungkin keduanya.
 ClusterRole memiliki beberapa kegunaan. Kamu bisa menggunakan ClusterRole untuk:
 
 1. mendefinisikan izin pada sumber daya dalam Namespace dan diberikan dalam sebuah Namespace atau lebih
-1. mendefinisikan izin pada sumber daya dalam Namespace dan diberikan dalam seluruh Namespace
-1. mendefinisikan izin pada sumber daya yang dicakup klaster
+2. mendefinisikan izin pada sumber daya dalam Namespace dan diberikan dalam seluruh Namespace
+3. mendefinisikan izin pada sumber daya dalam lingkup klaster
 
-Jika kamu ingin mendefinisikan sebuah peran dalam Namespace, gunakan Role; jika kamu ingin mendefinisikan
-peran di level klaster, gunakan ClusterRole.
+Jika kamu ingin mendefinisikan sebuah rol dalam Namespace, gunakan Role; jika kamu ingin mendefinisikan
+rol di level klaster, gunakan ClusterRole.
  
 #### Contoh Role 
 
 Berikut adalah contoh Role dalam Namespace bawaan yang dapat digunakan 
-untuk memberikan akses baca pada Pod:
+untuk memberikan akses baca pada {{< glossary_tooltip text="Pod" term_id="pod" >}}:
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -66,7 +67,7 @@ metadata:
   Namespace: default
   name: pod-reader
 rules:
-- apiGroups: [""] # "" mengindikasikan core API group
+- apiGroups: [""] # "" mengindikasikan grup API inti
   resources: ["pods"]
   verbs: ["get", "watch", "list"]
 ```
@@ -74,16 +75,16 @@ rules:
 #### Contoh ClusterRole
 
 ClusterRole dapat digunakan untuk memberikan izin yang sama dengan Role.
-Karena ClusterRole memiliki lingkup-klaster, kamu juga dapat menggunakannya untuk memberikan akses ke:
+Karena ClusterRole memiliki lingkup klaster, kamu juga dapat menggunakannya untuk memberikan akses ke:
 
-* sumber daya lingkup-klaster (seperti Nodes)
+* sumber daya lingkup klaster (seperti {{< glossary_tooltip text="Node" term_id="node" >}})
 * berbagai _endpoint_ non-sumber daya (seperti `/healthz`)
 * sumber daya Namespace (seperti Pod), di semua Namespace
  Sebagai contoh: kamu bisa menggunakan ClusterRole untuk memungkinkan pengguna tertentu untuk menjalankan 
 `kubectl get pods --all-namespaces`.
 
 Berikut adalah contoh ClusterRole yang dapat digunakan untuk memberikan akses baca pada
-Secret di Namespace tertentu, atau di semua Namespace (tergantung bagaimana itu [terikat](#rolebinding-dan-clusterrolebinding)):
+{{< glossary_tooltip text="Secret" term_id="secret" >}} di Namespace tertentu, atau di semua Namespace (tergantung bagaimana [keterikatannya](#rolebinding-dan-clusterrolebinding)):
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -112,7 +113,7 @@ memberikan akses tersebut pada lingkup klaster.
 
 RoleBinding dapat merujuk Role apa pun di Namespace yang sama. Atau, RoleBinding
 dapat mereferensikan ClusterRole dan memasangkan ClusterRole tersebut ke Namespace dari RoleBinding.
-Jika kamu ingin memasangkan ClusterRole ke semua Namespace di klaster kamu, kamu dapat menggunakan 
+Jika kamu ingin memasangkan ClusterRole ke semua Namespace di dalam klastermu, kamu dapat menggunakan 
 ClusterRoleBinding.
 
 Nama objek RoleBinding atau ClusterRoleBinding harus valid menggunakan
@@ -121,12 +122,12 @@ Nama objek RoleBinding atau ClusterRoleBinding harus valid menggunakan
 #### Contoh RoleBinding
 
 Berikut adalah contoh dari RoleBinding yang memberikan Role "pod-reader" kepada pengguna "jane"
-pada Namespace bawaan.
-Ini memungkinkan "jane" untuk membaca Pod di Namespace bawaan.
+pada Namespace "default".
+Ini memungkinkan "jane" untuk membaca Pod di Namespace "default".
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
-# Role binding memungkinkan "jane" untuk membaca Pod di Namespace bawaan
+# RoleBinding memungkinkan "jane" untuk membaca Pod di Namespace "default"
 # Kamu harus sudah memiliki Role bernama "pod-reader" di Namespace tersebut.
 kind: RoleBinding
 metadata:
@@ -138,7 +139,7 @@ subjects:
   name: jane # "name" peka huruf besar-kecil
   apiGroup: rbac.authorization.k8s.io
 roleRef:
-  # "roleRef" menentukan pengikatan ke Role / ClusterRole
+  # "roleRef" menentukan pengikatan (binding) ke Role / ClusterRole
   kind: Role # ini harus Role atau ClusterRole
   name: pod-reader # ini harus sesuai dengan nama Role atau ClusterRole yang ingin kamu gunakan
   apiGroup: rbac.authorization.k8s.io
@@ -146,22 +147,22 @@ roleRef:
 
 RoleBinding juga bisa mereferensikan ClusterRole untuk memberikan izin yang didefinisikan di dalam
 ClusterRole ke sumber daya di dalam Namespace RoleBinding. Referensi semacam ini
-memungkinkan kamu menentukan sekumpulan Role yang umum di seluruh klaster kamu, lalu menggunakannya kembali di dalam
+memungkinkan kamu menentukan sekumpulan Role yang umum di seluruh klastermu, lalu menggunakannya kembali di dalam
 beberapa Namespace.
 
 Sebagai contoh, meskipun RoleBinding berikut merujuk ke ClusterRole,
-"dave" (subjek, peka huruf besar-kecil) hanya akan dapat membaca Secret di dalam Namespace "development", 
-karena Namespace RoleBinding (di dalam metadata-nya) adalah "development".
+"dave" (subjek, peka kapital) hanya akan dapat membaca Secret di dalam Namespace "development", 
+karena Namespace RoleBinding (di dalam metadatanya) adalah "development".
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
-# role binding memungkinkan "dave" untuk membaca Secret di Namespace "development".
+# RoleBinding memungkinkan "dave" untuk membaca Secret di Namespace "development".
 # Kamu sudah harus memiliki ClusterRole bernama "secret-reader".
 kind: RoleBinding
 metadata:
   name: read-secrets
   #
-  # Namespace dari RoleBinding menentukan dimana izin akan diberikan.  
+  # Namespace dari RoleBinding menentukan di mana izin akan diberikan.  
   # Ini hanya memberikan izin di dalam Namespace "development".
   namespace: development
 subjects:
@@ -182,37 +183,37 @@ membaca Secret di berbagai Namespace.
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
-# Cluster role binding ini memungkinkan siapapun di dalam kelompok "manager" untuk membaca Secret di berbagai Namespace.
+# ClusterRoleBinding ini memungkinkan siapapun di dalam kelompok "manager" untuk membaca Secret di berbagai Namespace.
 kind: ClusterRoleBinding
 metadata:
   name: read-secrets-global
 subjects:
 - kind: Group
-  name: manager # Nama peka huruf besar-kecil
+  name: manager # Nama peka kapital
   apiGroup: rbac.authorization.k8s.io
 roleRef:
   kind: ClusterRole
   name: secret-reader
   apiGroup: rbac.authorization.k8s.io
 ```
-Setelah kamu membuat sebuat ikatan, kamu tidak dapat mengganti Role atau ClusterRole dirujuk.
-Jika kamu mencoba mengganti sebuah ikatan `roleRef`, kamu mendapatkan kesalahan validasi. Jika kamu
-tidak ingin mengganti `roleRef` untuk sebuah ikatan, kamu harus menghapus objek ikatan tersebut dan membuat
+Setelah kamu membuat ClusterRoleBinding, kamu tidak dapat mengganti Role atau ClusterRole yang dirujuk.
+Jika kamu mencoba mengganti `roleRef` dari sebuah ClusterRoleBinding, kamu akan mendapatkan galat validasi. Jika kamu
+tidak ingin mengganti `roleRef` untuk sebuah ClusterRoleBinding, kamu harus menghapus objek ClusterRoleBinding tersebut dan membuat
 sebuah pengganti.
 
 Ada dua alasan untuk pembatasan tersebut:
 
-1. Membuat `roleRef` tidak dapat diubah memungkinkan seseorang untuk melakukan `update` pada objek ikatan yang ada, 
-sehingga mereka dapat mengelola daftar subyek, tanpa bisa berubah
-Role yang diberikan kepada subyek tersebut.
+1. Membuat `roleRef` menjadi tidak dapat diubah (_immutable_) memungkinkan pemberian izin `update` kepada seseorang pada objek ClusterRoleBinding yang ada, 
+sehingga mereka dapat mengelola daftar subjek, tanpa bisa berubah
+Role yang diberikan kepada subjek tersebut.
 
-1. Ikatan pada Role yang berbeda adalah ikatan yang berbeda secara fundamental.
-Mengharuskan sebuah ikatan untuk dihapus/diciptakan kembali untuk dalam upaya mengubah `roleRef` akan
-memastikan daftar lengkap subyek dalam ikatan akan diberikan diberikan
-Role baru (sebagai langkah untuk mencegah modifikasi secara tidak sengaja hanya pada roleRef
-tanpa memverifikasi semua subyek yang seharusnya diberikan izin pada Role baru).
+2. ClusterRoleBinding dengan Role yang berbeda adalah ClusterRoleBinding yang berbeda secara fundamental.
+Mengharuskan sebuah ClusterRoleBinding untuk dihapus/diciptakan kembali untuk mengubah `roleRef` akan
+memastikan daftar lengkap subjek dalam ClusterRoleBinding akan diberikan
+Role baru (sebagai langkah untuk mencegah modifikasi secara tidak sengaja hanya pada `roleRef`
+tanpa memastikan semua subjek yang seharusnya diberikan izin pada Role baru).
 
-Utilitas baris perintah `kubectl auth reconcile` membuat atau memperbaharui berkas manifes yang mengandung objek RBAC,
+Utilitas baris perintah `kubectl auth reconcile` membuat atau memperbarui berkas manifes yang mengandung objek RBAC,
 dan menangani penghapusan dan pembuatan objek ikatan jika dibutuhkan untuk mengganti Role yang dirujuk.
 Lihat [penggunaan perintah dan contoh](#kubectl-auth-reconcile) untuk informasi tambahan.
 
@@ -222,7 +223,7 @@ Pada API Kubernetes, sebagian besar sumber daya diwakili dan diakses menggunakan
 nama objek, seperti `pods` untuk Pod. RBAC mengacu pada sumber daya yang menggunakan nama yang persis sama
 dengan yang muncul di URL untuk berbagai _endpoint_ API yang relevan.
 Beberapa Kubernetes APIs melibatkan 
-_subresource_, seperti catatan untuk Pod. Permintaan untuk catatan Pod terlihat seperti:
+_subresource_, seperti log untuk Pod. Permintaan untuk log Pod terlihat seperti:
 
 ```http
 GET /api/v1/namespaces/{namespace}/pods/{name}/log
@@ -248,7 +249,7 @@ rules:
 Kamu juga dapat merujuk ke sumber daya dengan nama untuk permintaan tertentu melalui daftar `resourceNames`.
 Ketika nama dicantumkan, permintaan dapat dibatasi untuk setiap objek sumber daya.
 Berikut adalah contoh yang membatasi subjeknya hanya untuk melakukan `get` atau` update` pada sebuah
-ConfigMap bernama `my-configmap`:
+{{< glossary_tooltip term_id="ConfigMap" >}} bernama `my-configmap`:
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -268,18 +269,18 @@ rules:
 
 {{< note >}}
 Kamu tidak dapat membatasi permintaan `create` atau` deletecollection` dengan nama sumber daya. Untuk `create`, 
-Keterbatasan ini dikarenakan nama objek yang tidak dikenal pada waktu otorisasi.
+keterbatasan ini dikarenakan nama objek tidak diketahui pada waktu otorisasi.
 {{< /note >}}
 
-### Agregat ClusterRole
+### ClusterRole gabungan
 
 Kamu dapat mengumpulkan beberapa ClusterRole menjadi satu ClusterRole gabungan.
-_Controller_, yang berjalan sebagai bagian dari _control plane_ klaster, mengamati objek ClusterRole
-dengan `aggregationRule`. `AggregationRule` mendefinisikan label
-Selector yang digunakan oleh _Controller_ untuk mencocokkan objek ClusterRole lain 
+Pengontrol, yang berjalan sebagai bagian dari _control plane_ klaster, mengamati objek ClusterRole
+dengan `aggregationRule`. `AggregationRule` mendefinisikan
+{{< glossary_tooltip text="Selector" term_id="selector" >}} label yang digunakan oleh pengontrol untuk mencocokkan objek ClusterRole lain 
 yang harus digabungkan ke dalam `rules`.
 
-Berikut adalah contoh ClusterRole agregat:
+Berikut adalah contoh ClusterRole gabungan:
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -290,12 +291,12 @@ aggregationRule:
   clusterRoleSelectors:
   - matchLabels:
       rbac.example.com/aggregate-to-monitoring: "true"
-rules: [] # _Control plane_ secara otomatis mengisi rules
+rules: [] # Control plane secara otomatis mengisi rules
 ```
 
-Jika kamu membuat ClusterRole baru yang cocok dengan _selector_ label dari ClusterRole agregat yang ada,
-perubahan itu memicu penambahan aturan baru ke dalam ClusterRole agregat.
-Berikut adalah contoh yang menambahkan aturan ke "monitoring" ClusterRole, dengan membuat sebuah
+Jika kamu membuat ClusterRole baru yang cocok dengan label Selector dari ClusterRole gabungan yang ada,
+maka perubahan itu akan memicu penambahan aturan baru ke dalam ClusterRole gabungan.
+Berikut adalah contoh yang menambahkan aturan ke ClusterRole "monitoring", dengan membuat sebuah
 ClusterRole lain berlabel `rbac.example.com/aggregate-to-monitoring: true`.
 
 ```yaml
@@ -313,12 +314,12 @@ rules:
   verbs: ["get", "list", "watch"]
 ```
 
-[Role bawaan pengguna](#role-dan-role-binding-bawaan) menggunakan agregasi ClusterRole. Ini memungkinkan kamu,
-sebagai administrator klaster, menambahkan aturan untuk sumber daya kustom, seperti yang dilayani oleh CustomResourceDefinition
-atau _aggregated_ server API, untuk memperluas Role bawaan.
+[Role bawaan pengguna](#role-dan-rolebinding-bawaan) menggunakan agregasi ClusterRole. Ini memungkinkan kamu,
+sebagai administrator klaster, menambahkan aturan untuk sumber daya ubah suai, seperti yang dilayani oleh {{< glossary_tooltip term_id="CustomResourceDefinition" text="CustomResourceDefinitions" >}}
+atau server API gabungan, untuk memperluas Role bawaan.
 
-Sebagai contoh: ClusterRole berikut mengizinkan Role bawaan "admin" dan "edit" mengelola sumber daya kustom
-bernama CronTab, sedangkan Role "view" hanya dapat melakukan tindakan membaca sumber daya CronTab.
+Sebagai contoh: ClusterRole berikut mengizinkan Role bawaan "admin" dan "edit" mengelola sumber daya ubah suai
+bernama CronTab, sedangkan Role "view" hanya dapat membaca sumber daya CronTab.
 Kamu dapat mengasumsikan bahwa objek CronTab dinamai `"crontab"` dalam URL yang terlihat oleh server API.
 
 ```yaml
@@ -350,10 +351,10 @@ rules:
 
 #### Contoh Role
 
-Contoh berikut adalah potongan dari objek Role atau ClusterRole, yang hanya menampilkan
+Contoh berikut adalah potongan dari objek Role atau ClusterRole yang hanya menampilkan
 bagian `rules`.
 
-Mengizinkan pembacaan sumber daya `"pods`` pada kumpulan API inti:
+Mengizinkan pembacaan sumber daya `"pods"` pada {{< glossary_tooltip text="grup API" term_id="api-group" >}} inti:
 
 ```yaml
 rules:
@@ -366,7 +367,7 @@ rules:
 ```
 
 Mengizinkan pembacaan/penulisan Deployment (pada tingkat HTTP: objek dengan `"deployments"` 
-di bagian sumber daya dari URL) pada masing-masing kumpulan API `"extensions"` dan `"apps"`:
+di bagian sumber daya dari URL) pada masing-masing grup API `"extensions"` dan `"apps"`:
 
 ```yaml
 rules:
@@ -378,8 +379,8 @@ rules:
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
 ```
 
-Mengizinkan pembacaan pada Pods pada kumpulan API inti, dan juga serta pembacaan atau penulisan Job
-di kumpulan API `"batch"` atau `"extensions"`:
+Mengizinkan pembacaan pada Pods pada grup API inti, dan juga serta pembacaan atau penulisan Job
+di grup API `"batch"` atau `"extensions"`:
 
 ```yaml
 rules:
@@ -397,8 +398,8 @@ rules:
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
 ```
 
-Mengizinkan pembacaan ConfigMap bernama "my-config" (harus terikat dengan
-RoleBinding untuk membatasi pada sebuah ConfigMap di sebuah Namespace):
+Mengizinkan pembacaan ConfigMap bernama "my-config" (harus terikat dengan suatu
+RoleBinding untuk membatasi ke satu ConfigMap di satu Namespace):
 
 ```yaml
 rules:
@@ -411,7 +412,7 @@ rules:
   verbs: ["get"]
 ```
 
-Mengizinkan pembacaan sumber daya `"nodes"` pada kumpulan API inti (karena sebuah node
+Mengizinkan pembacaan sumber daya `"nodes"` pada grup API inti (karena sebuah node
 ada pada lingkup-klaster, ini harus berupa ClusterRole yang terikat dengan ClusterRoleBinding
 agar efektif):
 
@@ -434,33 +435,33 @@ rules:
   verbs: ["get", "post"]
 ```
 
-### Mengacu Pada Subjek
+### Mengacu pada subjek
 
 RoleBinding atau ClusterRoleBinding mengikat sebuah Role ke subjek.
-Subjek dapat berupa kelompok, pengguna atau ServiceAccount.
+Subjek dapat berupa kelompok, pengguna atau {{< glossary_tooltip text="ServiceAccounts" term_id="service-account" >}}.
 
-Kubernetes merepresentasikan _username_ sebagai string.
+Kubernetes merepresentasikan _username_ sebagai _string_.
 Ini bisa berupa: nama sederhana, seperti "alice"; email, seperti "bob@example.com";
-atau ID pengguna numerik yang direpresentasikan sebagai string. Terserah kamu sebagai administrator klaster
-untuk mengkonfigurasi [modul otentikasi](/docs/reference/access-authn-authz/authentication/)
+atau ID pengguna numerik yang direpresentasikan sebagai _string_. Terserah kamu sebagai administrator klaster
+untuk mengonfigurasi [modul otentikasi](/docs/reference/access-authn-authz/authentication/)
 sehingga otentikasi menghasilkan _username_ dalam format yang kamu inginkan.
 
 {{< caution >}}
 Awalan `system:` direservasi untuk sistem Kubernetes, jadi kamu harus memastikan
 bahwa kamu tidak memiliki pengguna atau grup dengan nama yang dimulai dengan `system:` secara tidak sengaja.
-Selain awalan khusus ini, sistem otorisasi RBAC tidak memerlukan format apa pun
+Selain prefiks khusus ini, sistem otorisasi RBAC tidak memerlukan format apa pun
 untuk nama pengguna.
 {{< /caution >}}
 
 Di Kubernetes, modul otentikasi menyediakan informasi grup.
 Grup, seperti halnya pengguna, direpresentasikan sebagai string, dan string tersebut tidak memiliki format tertentu,
-selain awalan `system:` yang sudah direservasi.
+selain prefiks `system:` yang sudah direservasi.
 
 [ServiceAccount](/id/docs/tasks/configure-pod-container/configure-service-account/) memiliki nama yang diawali dengan `system:serviceaccount:`, dan menjadi milik grup yang diawali dengan nama `system:serviceaccounts:`.
 
 {{< note >}}
-- `system:serviceaccount:` (tunggal) adalah awalan untuk ServiceAccount _username_.
-- `system:serviceaccounts:` (jamak) adalah awalan untuk ServiceAccount grup.
+- `system:serviceaccount:` (tunggal) adalah prefiks untuk _username_ ServiceAccount.
+- `system:serviceaccounts:` (jamak) adalah prefiks untuk grup ServiceAccount.
 {{< /note >}}
 
 #### Contoh RoleBinding {#role-binding-examples}
@@ -543,33 +544,33 @@ subjects:
   apiGroup: rbac.authorization.k8s.io
 ```
 
-## Role dan RoleBinding Bawaan
+## Role dan RoleBinding bawaan
 
 API membuat satu set objek ClusterRole dan ClusterRoleBinding bawaan. 
-Sebagian besar dari objek berawalan `system:`, menunjukkan bahwa sumber daya tersebut
-secara langsung dikelolah oleh _control plane_ klaster. Seluruh ClusterRole dan ClusterRoleBinding dilabeli dengan
+Sebagian besar dari objek dengan prefiks `system:` menunjukkan bahwa sumber daya tersebut
+secara langsung dikelola oleh _control plane_ klaster. Seluruh ClusterRole dan ClusterRoleBinding dilabeli dengan
 `kubernetes.io/bootstrapping=rbac-defaults`.
 
 {{< caution >}}
 Berhati-hatilah saat memodifikasi CLusterRole dan ClusterRoleBinding dengan nama yang
-memiliki awalan `system:`.
-Modifikasi sumber daya ini dapat mengakibatkan klaster yang malfungsi.
+memiliki prefiks `system:`.
+Modifikasi sumber daya ini dapat mengakibatkan malfungsi klaster.
 {{< /caution >}}
 
-### Rekonsiliasi Otomatis
+### Rekonsiliasi otomatis
 
-Pada setiap _start-up-_, server API memperbaharui ClusterRole bawaan dengan berbagai izin yang hilang, 
-dan memperbaharui ikatan ClusterRole bawaan dengan subjek yang hilang.
+Pada setiap penyalaan (_start-up_), server API memperbarui ClusterRole bawaan dengan berbagai izin yang hilang, 
+dan memperbarui ClusterRoleBinding bawaan dengan subjek yang hilang.
 Ini memungkinkan klaster untuk memperbaiki modifikasi yang tidak disengaja, dan membantu menjaga Role 
 dan RoleBinding selalu terkini karena izin dan subjek berubah pada rilis terbaru Kubernetes.
 
-Untuk menon-aktifkan rekonsiliasi ini, setel anotasi `rbac.authorization.kubernetes.io/autoupdate`
+Untuk menonaktifkan rekonsiliasi ini, atur anotasi `rbac.authorization.kubernetes.io/autoupdate`
 pada ClusterRole bawaan atau RoleBinding bawaan menjadi `false`.
-Ingat bahwa hilangnya izin dan subjek bawaan dapat mengakibatkan klaster tidak berfungsi.
+Ingat bahwa hilangnya izin dan subjek bawaan dapat mengakibatkan malfungsi klaster.
 
-Rekonsiliasi otomatis diaktifkan secara bawaan jika otorizer RBAC aktif.
+Rekonsiliasi otomatis diaktifkan secara bawaan jika pemberi otorisasi RBAC aktif.
 
-### Role API discovery {#discovery-roles}
+### Role diskoveri API {#discovery-roles}
 
 RoleBinding bawaan memberi otorisasi kepada pengguna yang tidak terotentikasi untuk membaca informasi API yang dianggap aman
 untuk diakses publik (termasuk CustomResourceDefinitions). Untuk menonaktifkan akses anonim, tambahkan `--anonymous-auth=false` ke konfigurasi server API.
@@ -581,13 +582,13 @@ kubectl get clusterroles system:discovery -o yaml
 ```
 
 {{< note >}}
-Jika kamu mengubah ClusterRole tersebut, perubahan kamu akan ditimpa pada penyalaan ulang server API melalui 
+Jika kamu mengubah ClusterRole tersebut, maka perubahanmu akan ditimpa pada penyalaan ulang server API melalui 
 [rekonsiliasi-otomatis](#auto-reconciliation). Untuk menghindari penulisan ulang tersebut, hindari mengubah Role secara manual, 
 atau nonaktifkan rekonsiliasi otomatis
 {{< /note >}}
 
 <table>
-<caption>Kubernetes RBAC API discovery roles</caption>
+<caption>Role diskoveri API Kubernetes RBAC</caption>
 <colgroup><col width="25%" /><col width="25%" /><col /></colgroup>
 <tr>
 <th>ClusterRole Bawaan</th>
@@ -596,29 +597,29 @@ atau nonaktifkan rekonsiliasi otomatis
 </tr>
 <tr>
 <td><b>system:basic-user</b></td>
-<td><b>system:authenticated</b> group</td>
-<td>Mengizinkan pengguna hanya dengan akses baca untuk mengakses informasi dasar tentang diri mereka sendiri. Sebelum  v1.14, Role ini juga terikat pada <tt>system:unauthenticated</tt> secara bawaan.</td>
+<td>Grup <b>system:authenticated</b></td>
+<td>Mengizinkan pengguna hanya dengan akses baca untuk mengakses informasi dasar tentang diri mereka sendiri. Sebelum v1.14, Role ini juga terikat pada <tt>system:unauthenticated</tt> secara bawaan.</td>
 </tr>
 <tr>
 <td><b>system:discovery</b></td>
-<td><b>system:authenticated</b> group</td>
-<td>Mengizinkan akses baca pada berbagai _API discovery endpoint_ yang dibutuhkan untuk menemukan dan melakukan negosiasi pada tingkat API. Sebelum v1.14, Role ini juga terikat pada <tt>system:unauthenticated</tt> secara bawaan.</td>
+<td>Grup <b>system:authenticated</b></td>
+<td>Mengizinkan akses baca pada berbagai <i>endpoint</i> diskoveri API yang dibutuhkan untuk menemukan dan melakukan negosiasi pada tingkat API. Sebelum v1.14, Role ini juga terikat pada <tt>system:unauthenticated</tt> secara bawaan.</td>
 </tr>
 <tr>
 <td><b>system:public-info-viewer</b></td>
-<td><b>system:authenticated</b> and <b>system:unauthenticated</b> groups</td>
+<td>Grup <b>system:authenticated</b> dan <b>system:unauthenticated</b></td>
 <td>Mengizinkan akses baca pada informasi yang tidak sensitif tentang klaster. Diperkenalkan pada Kubernetes v1.14.</td>
 </tr>
 </table>
 
-### Role Pengguna
+### Role pengguna
 
 Beberapa ClusterRole bawaan tidak diawali dengan `system:`. Ini dimaksudkan untuk Role pengguna.
-Ini termasuk Role super-user (`cluster-admin`), Role yang dimaksudkan untuk diberikan akses seluruh klaster dengan
+Ini termasuk Role _super-user_ (`cluster-admin`), Role yang dimaksudkan untuk diberikan akses seluruh klaster dengan
 menggunakan ClusterRoleBinding, dan Role yang dimaksudkan untuk diberikan pada Namespace tertentu 
 dengan menggunakan RoleBinding (`admin`, `edit`, `view`).
 
-ClusterRole menggunakan [aggregasi ClusterRole](#aggregated-clusterroles) untuk mengizinkan admin untuk memasukan peraturan untuk sumber daya khusus pada ClusterRole ini. Untuk menambahkan aturan kepada Role `admin`, `edit`, atau `view`, buat sebuah CLusterRole
+ClusterRole menggunakan [ClusterRole gabungan](#clusterrole-gabungan) untuk mengizinkan administrator untuk memasukan peraturan untuk sumber daya khusus pada ClusterRole ini. Untuk menambahkan aturan kepada Role `admin`, `edit`, atau `view`, buatlah sebuah CLusterRole
 dengan satu atau lebih label berikut:
 
 ```yaml
@@ -638,149 +639,156 @@ metadata:
 </tr>
 <tr>
 <td><b>cluster-admin</b></td>
-<td><b>system:masters</b> group</td>
-<td>Mengizinkan akses super-user access untuk melakukan berbagai aksi pada berbagai sumber daya. 
-Ketika digunakan pada <b>ClusterRoleBinding</b>, ini memberikan kendali penuh terhadap seluruh sumber daya pada klaster dan seluruh Namespace. 
-Ketika digunakan pada <b>RoleBinding</b>, ini memberikan kendali penuh terhadap setiap sumber daya pada Namespace RoleBinding, termasuk Namespace itu sendiri.</td>
+<td>Grup <b>system:masters</b></td>
+<td>Mengizinkan akses <i>super-user</i> untuk melakukan berbagai aksi pada berbagai sumber daya. 
+Ketika digunakan pada <b>ClusterRoleBinding</b>, Role ini akan memberikan kendali penuh terhadap semua sumber daya pada klaster dan seluruh Namespace. 
+Ketika digunakan pada <b>RoleBinding</b>, Role ini akan memberikan kendali penuh terhadap setiap sumber daya pada Namespace RoleBinding, termasuk Namespace itu sendiri.</td>
 </tr>
 <tr>
 <td><b>admin</b></td>
-<td>None</td>
-<td>mengizinkan akses admin, yang dimaksudkan untuk diberikan dalam sebuah Namespace menggunakan <b>RoleBinding</b>.
+<td>Tidak ada</td>
+<td>mengizinkan akses administrator, yang dimaksudkan untuk diberikan dalam sebuah Namespace menggunakan <b>RoleBinding</b>.
 Jika digunakan dalam <b>RoleBinding</b>, ini memungkikan akses baca/tulis ke sebagian besar sumber daya di sebuah Namespace,
 termasuk kemampuan untuk membuat Role dan RoleBinding dalam Namespace. 
 Role ini tidak memungkinkan akses tulis pada kuota sumber daya atau ke Namespace itu sendiri.</td>
 </tr>
 <tr>
 <td><b>edit</b></td>
-<td>None</td>
+<td>Tidak ada</td>
 <td>Mengizinkan akses baca/tulis pada seluruh objek dalam Namespace.
 
-Role ini tidak memungkinkan untuk melihat dan merubah Role dan RoleBinding.
+Role ini tidak memungkinkan untuk melihat dan mengubah Role dan RoleBinding.
 Namun, Role ini memungkinkan untuk mengakses Secret dan menjalankan Pod seperti ServiceAccount dalam Namespace, 
 sehingga dapat digunakan untuk mendapatkan tingkat akses API dari setiap ServiceAccount di Namespace. 
 </td>
 </tr>
 <tr>
 <td><b>view</b></td>
-<td>None</td>
+<td>Tidak ada</td>
 <td>Mengizinkan akses baca untuk melihat hampir seluruh objek dalam Namespace.
 
 Ini tidak memungkinkan untuk melihat Role dan RoleBinding.
 
 Role ini tidak memungkikan melihat Secret, karena pembacaan konten Secret memungkinkan
 akses ke kredensial ServiceAccount dalam Namespace, yang akan memungkinkan akses API sebagai
-ServiceAccount apapun di Namespace (bentuk eskalasi hak istimewa).
+ServiceAccount apapun di Namespace (bentuk eskalasi privilese).
 </td>
 </tr>
 </table>
 
-### Core component roles
+### Role komponen inti
 
 <table>
-<colgroup><col width="25%"><col width="25%"><col></colgroup>
+<colgroup><col style="width: 25%;" /><col style="width: 25%;" /><col /></colgroup>
+<thead>
 <tr>
-<th>Default ClusterRole</th>
-<th>Default ClusterRoleBinding</th>
-<th>Description</th>
+<th>ClusterRole Bawaan</th>
+<th>ClusterRoleBinding Bawaan</th>
+<th>Deskripsi</th>
 </tr>
+</thead>
+<tbody>
 <tr>
 <td><b>system:kube-scheduler</b></td>
-<td><b>system:kube-scheduler</b> user</td>
-<td>Allows access to the resources required by the {{< glossary_tooltip term_id="kube-scheduler" text="scheduler" >}} component.</td>
+<td>Pengguna <b>system:kube-scheduler</b></td>
+<td>Mengizinkan akses ke sumber daya yang dibutuhkan oleh komponen {{< glossary_tooltip term_id="kube-scheduler" text="kube-scheduler" >}}.</td>
 </tr>
 <tr>
 <td><b>system:volume-scheduler</b></td>
-<td><b>system:kube-scheduler</b> user</td>
-<td>Allows access to the volume resources required by the kube-scheduler component.</td>
+<td>Pengguna <b>system:kube-scheduler</b></td>
+<td>Mengizinkan akses ke sumber daya volume yang dibutuhkan oleh komponen kube-scheduler.</td>
 </tr>
 <tr>
 <td><b>system:kube-controller-manager</b></td>
-<td><b>system:kube-controller-manager</b> user</td>
-<td>Allows access to the resources required by the {{< glossary_tooltip term_id="kube-controller-manager" text="controller manager" >}} component.
-The permissions required by individual controllers are detailed in the <a href="#controller-roles">controller roles</a>.</td>
+<td>Pengguna <b>system:kube-controller-manager</b></td>
+<td>Mengizinkan akses ke sumber daya yang dibutuhkan oleh komponen {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}.
+Izin yang diperlukan oleh masing-masing pengontrol dirincikan di <a href="#controller-roles">Role pengontrol</a>.</td>
 </tr>
 <tr>
 <td><b>system:node</b></td>
-<td>None</td>
-<td>Allows access to resources required by the kubelet, <b>including read access to all secrets, and write access to all pod status objects</b>.
+<td>Tidak ada</td>
+<td>Mengizinkan akses ke sumber daya yang dibutuhkan oleh kubelet, <b>termasuk akses baca ke semua Secret, dan akses rulis ke semua objek status Pod</b>.
 
-You should use the <a href="/docs/reference/access-authn-authz/node/">Node authorizer</a> and <a href="/docs/reference/access-authn-authz/admission-controllers/#noderestriction">NodeRestriction admission plugin</a> instead of the <tt>system:node</tt> role, and allow granting API access to kubelets based on the Pods scheduled to run on them.
+Kamu dapat menggunakan <a href="/docs/reference/access-authn-authz/node/">pemberi otorisasi Node</a> dan <a href="/docs/reference/access-authn-authz/admission-controllers/#noderestriction">pugasan admisi NodeRestriction</a> daripada Role <tt>system:node</tt>, dan mengizinkan pemberian akses API ke kubelet berdasarkan Pod yang dijadwalkan untuk berjalan di atasnya.
 
-The <tt>system:node</tt> role only exists for compatibility with Kubernetes clusters upgraded from versions prior to v1.8.
+Role <tt>system:node</tt> hanya ada untuk kompatibilitas dengan klaster Kubernetes yang ditingkatkan dari versi sebelum v1.8.
 </td>
 </tr>
 <tr>
 <td><b>system:node-proxier</b></td>
-<td><b>system:kube-proxy</b> user</td>
-<td>Allows access to the resources required by the {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}} component.</td>
+<td>Pengguna <b>system:kube-proxy</b></td>
+<td>Mengizinkan akses ke sumber daya yang dibutuhkan oleh komponen {{< glossary_tooltip term_id="kube-proxy" text="kube-proxy" >}}.</td>
 </tr>
+</tbody>
 </table>
 
-### Other component roles
+### Role komponen lainnya
 
 <table>
-<colgroup><col width="25%"><col width="25%"><col></colgroup>
+<colgroup><col style="width: 25%;" /><col style="width: 25%;" /><col /></colgroup>
+<thead>
 <tr>
-<th>Default ClusterRole</th>
-<th>Default ClusterRoleBinding</th>
-<th>Description</th>
+<th>ClusterRole Bawaan</th>
+<th>ClusterRoleBinding Bawaan</th>
+<th>Deskripsi</th>
 </tr>
+</thead>
+<tbody>
 <tr>
 <td><b>system:auth-delegator</b></td>
-<td>None</td>
-<td>Allows delegated authentication and authorization checks.
-This is commonly used by add-on API servers for unified authentication and authorization.</td>
+<td>Tidak ada</td>
+<td>Mengizinkan pemeriksaan otentikasi dan otorisasi yang didelegasikan.
+Hal ini umumnya digunakan oleh pugasan server API untuk otentikasi dan otorisasi terpadu.</td>
 </tr>
 <tr>
 <td><b>system:heapster</b></td>
-<td>None</td>
-<td>Role for the <a href="https://github.com/kubernetes/heapster">Heapster</a> component (deprecated).</td>
+<td>Tidak ada</td>
+<td>Role untuk komponen <a href="https://github.com/kubernetes/heapster">Heapster</a> (usang).</td>
 </tr>
 <tr>
 <td><b>system:kube-aggregator</b></td>
-<td>None</td>
-<td>Role for the <a href="https://github.com/kubernetes/kube-aggregator">kube-aggregator</a> component.</td>
+<td>Tidak ada</td>
+<td>Role untuk komponen <a href="https://github.com/kubernetes/kube-aggregator">kube-aggregator</a>.</td>
 </tr>
 <tr>
 <td><b>system:kube-dns</b></td>
-<td><b>kube-dns</b> service account in the <b>kube-system</b> namespace</td>
-<td>Role for the <a href="/docs/concepts/services-networking/dns-pod-service/">kube-dns</a> component.</td>
+<td>ServiceAccount <b>kube-dns</b> dalam Namespace <b>kube-system</b></td>
+<td>Role untuk komponen <a href="/docs/concepts/services-networking/dns-pod-service/">kube-dns</a>.</td>
 </tr>
 <tr>
 <td><b>system:kubelet-api-admin</b></td>
-<td>None</td>
-<td>Allows full access to the kubelet API.</td>
+<td>Tidak ada</td>
+<td>Mengizinkan akses penuh ke API kubelet.</td>
 </tr>
 <tr>
 <td><b>system:node-bootstrapper</b></td>
-<td>None</td>
-<td>Allows access to the resources required to perform
-<a href="/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/">kubelet TLS bootstrapping</a>.</td>
+<td>Tidak ada</td>
+<td>Mengizinkan akses ke sumber daya yang dibutuhkan untuk melakukan <a href="/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/"><i>bootstrapping</i> TLS kubelet</a>.</td>
 </tr>
 <tr>
 <td><b>system:node-problem-detector</b></td>
-<td>None</td>
-<td>Role for the <a href="https://github.com/kubernetes/node-problem-detector">node-problem-detector</a> component.</td>
+<td>Tidak ada</td>
+<td>Role untuk komponen <a href="https://github.com/kubernetes/node-problem-detector">node-problem-detector</a>.</td>
 </tr>
 <tr>
 <td><b>system:persistent-volume-provisioner</b></td>
-<td>None</td>
-<td>Allows access to the resources required by most <a href="/docs/concepts/storage/persistent-volumes/#provisioner">dynamic volume provisioners</a>.</td>
+<td>Tidak ada</td>
+<td>Mengizinkan akses ke sumber daya yang dibutuhkan oleh kebanyakan <a href="/docs/concepts/storage/persistent-volumes/#provisioner">penyedia volume dinamis</a>.</td>
 </tr>
+<tbody>
 </table>
 
-### Roles for built-in controllers {#controller-roles}
+### Role untuk pengontrol bawaan {#controller-roles}
 
-The Kubernetes {{< glossary_tooltip term_id="kube-controller-manager" text="controller manager" >}} runs
-{{< glossary_tooltip term_id="controller" text="controllers" >}} that are built in to the Kubernetes
-control plane.
-When invoked with `--use-service-account-credentials`, kube-controller-manager starts each controller
-using a separate service account.
-Corresponding roles exist for each built-in controller, prefixed with `system:controller:`.
-If the controller manager is not started with `--use-service-account-credentials`, it runs all control loops
-using its own credential, which must be granted all the relevant roles.
-These roles include:
+{{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}
+pada Kubernetes menjalankan {{< glossary_tooltip term_id="controller" text="pengontrol" >}}
+yang merupakan bawaan dari _control plane_ Kubernetes. Ketika dijalankan dengan
+`--use-service-account-credentials`, kube-controller-manager memulai setiap pengontrol
+menggunakan ServiceAccount yang terpisah. Role yang sesuai tersedia untuk setiap
+pengontrol bawaan, dengan prefiks `system:controller:`. Jika manajer pengontrol tidak
+dimulai dengan `--use-service-account-credentials`, maka manajer pengontrol akan menjalankan
+semua kontrol tertutup (_control loop_) menggunakan kredensialnya sendiri, yang harus
+diberikan semua Role yang relevan. Role yang dimaksud termasuk:
 
 * `system:controller:attachdetach-controller`
 * `system:controller:certificate-controller`
@@ -810,40 +818,48 @@ These roles include:
 * `system:controller:statefulset-controller`
 * `system:controller:ttl-controller`
 
-## Privilege escalation prevention and bootstrapping
+## Pencegahan eskalasi privilese dan _bootstrapping_
 
-The RBAC API prevents users from escalating privileges by editing roles or role bindings.
-Because this is enforced at the API level, it applies even when the RBAC authorizer is not in use.
+API RBAC mencegah pengguna dari mengeskalasikan privilese dengan mengubah Role atau RoleBinding.
+Karena hal ini diberlakukan pada level API, maka hal ini berlaku bahkan ketika pemberi otorisasi
+RBAC tidak digunakan.
 
-### Restrictions on role creation or update
+### Pembatasan pada pembuatan dan pembaruan Role
 
-You can only create/update a role if at least one of the following things is true:
+Kamu hanya bisa membuat/memperbaru suatu Role jika setidaknya satu dari beberapa
+hal di bawah ini terpenuhi:
 
-1. You already have all the permissions contained in the role, at the same scope as the object being modified
-(cluster-wide for a ClusterRole, within the same namespace or cluster-wide for a Role).
-2. You are granted explicit permission to perform the `escalate` verb on the `roles` or `clusterroles` resource in the `rbac.authorization.k8s.io` API group.
+1. Kamu telah mempunyai semua izin yang termuat dalam Role tersebut, pada lingkup yang sama
+dengan objek yang diubah
+(di seluruh klaster untuk sebuah ClusterRole, di dalam Namespace yang sama atau keseluruhan
+klaster untuk sebuah Role).
+2. Kamu diberikan izin eksplisit untuk melakukan `escalate` pada sumber daya `roles` atau
+`clusterroles` di dalam grup API `rbac.authorization.k8s.io`.
 
-For example, if `user-1` does not have the ability to list Secrets cluster-wide, they cannot create a ClusterRole
-containing that permission. To allow a user to create/update roles:
+Sebagai contoh, jika `user-1` tidak memiliki kemampuan untuk mendaftar Secret di seluruh klaster,
+maka `user-1` tidak akan bisa membuat suatu ClusterRole yang memuat izin tersebut. Agar pengguna
+bisa membuat/memperbaru Role:
 
-1. Grant them a role that allows them to create/update Role or ClusterRole objects, as desired.
-2. Grant them permission to include specific permissions in the roles they create/update:
-    * implicitly, by giving them those permissions (if they attempt to create or modify a Role or ClusterRole with permissions they themselves have not been granted, the API request will be forbidden)
-    * or explicitly allow specifying any permission in a `Role` or `ClusterRole` by giving them permission to perform the `escalate` verb on `roles` or `clusterroles` resources in the `rbac.authorization.k8s.io` API group
+1. Berikan sebuah Role yang memungkinkan mereka untuk membuat/memperbarui objek Role atau CLusterRole, sesuai keinginan.
+2. Berikan mereka izin untuk menyertakan izin tertentu dalam Role yang mereka buat/perbarui:
+    * secara implisit, dengan memberikan mereka izin tersebut (jika mereka mencoba untuk membuat atau mengubah sebuah Role atau ClusterRole dengan izin yang tidak mereka miliki, permintaan API akan dilarang)
+    * atau secara eksplisit mengizinkan penentuan izin apa pun dalam sebuah `Role` atau `ClusterRole` dengan memberikan mereka izin untuk melakukan `escalate` pada sumber daya `roles` atau `clusterroles` di dalam grup API `rbac.authorization.k8s.io`
 
-### Restrictions on role binding creation or update
+### Pembatasan pada pembuatan dan pembaruan RoleBinding
 
-You can only create/update a role binding if you already have all the permissions contained in the referenced role
-(at the same scope as the role binding) *or* if you have been authorized to perform the `bind` verb on the referenced role.
-For example, if `user-1` does not have the ability to list Secrets cluster-wide, they cannot create a ClusterRoleBinding
-to a role that grants that permission. To allow a user to create/update role bindings:
+Kamu hanya bisa membuat/memperbarui suatu RoleBinding jika kamu telah mempunyai semua izin yang
+terdapat pada Role yang diacu (di dalam lingkup yang sama dengan RoleBinding) *atau* jika
+kamu telah terotorisasi untuk melakukan `bind` pada role yang diacu.
+Sebagai contoh, jika `user-1` tidak mempunyai kemampuan untuk mendaftar Secret di seluruh klaster,
+maka `user-1` tidak akan bisa membuat sebuah ClusterRoleBinding dengan Role yang memberikan
+izin tersebut. Agar pengguna bisa membuat/memperbarui RoleBinding:
 
-1. Grant them a role that allows them to create/update RoleBinding or ClusterRoleBinding objects, as desired.
-2. Grant them permissions needed to bind a particular role:
-    * implicitly, by giving them the permissions contained in the role.
-    * explicitly, by giving them permission to perform the `bind` verb on the particular Role (or ClusterRole).
+1. Berikan sebuah Role yang mengizinkan mereka untuk membuat/memperbarui objek RoleBinding atau ClusterRoleBinding, sesuai keinginan.
+2. Berikan mereka izin yang dibutuhkan untuk RoleBinding tertentu:
+    * secara implisit, dengan memberikan mereka izin yang yang termuat pada Role yang dimaksud
+    * secara eksplisit, dengan memberikan mereka izin untuk melakukan `bind` pada Role (atau ClusterRole) tertentu
 
-For example, this ClusterRole and RoleBinding would allow `user-1` to grant other users the `admin`, `edit`, and `view` roles in the namespace `user-1-namespace`:
+Sebagai contoh, ClusterRole dan RoleBinding berikut akan memungkinkan `user-1` untuk memberikan Role `admin`, `edit`, dan `view` kepada pengguna lain di dalam Namespace `user-1-namespace`:
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -874,43 +890,44 @@ subjects:
   name: user-1
 ```
 
-When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have.
-To bootstrap initial roles and role bindings:
+Ketika melakukan _bootstrapping_ Role dan RoleBinding yang pertama, pengguna awal perlu memberikan
+izin yang belum mereka miliki.
+Untuk melakukan _bootstrapping_ Role dan RoleBinding awal:
 
-* Use a credential with the "system:masters" group, which is bound to the "cluster-admin" super-user role by the default bindings.
-* If your API server runs with the insecure port enabled (`--insecure-port`), you can also make API calls via that port, which does not enforce authentication or authorization.
+* Gunakan kredensial dengan grup "system:masters" yang terikat ke Role _super-user_ "cluster-admin" oleh RoleBinding bawaan.
+* Jika server API dijalankan dengan porta tidak aman diaktifkan (`--insecure-port`), kamu juga bisa membuat panggilan API via porta tersebut, yang tidak memberlakukan otentikasi atau otorisasi.
 
-## Command-line utilities
+## Utilitas baris perintah
 
 ### `kubectl create role`
 
-Creates a Role object defining permissions within a single namespace. Examples:
+Membuat sebuah objek Role yang mendefinisikan izin di dalam sebuah Namespace. Contoh:
 
-* Create a Role named "pod-reader" that allows users to perform `get`, `watch` and `list` on pods:
+* Membuat sebuah Role bernama "pod-reader" yang memungkinkan pengguna untuk melakukan `get`, `watch` dan `list` pada Pod:
 
     ```shell
     kubectl create role pod-reader --verb=get --verb=list --verb=watch --resource=pods
     ```
 
-* Create a Role named "pod-reader" with resourceNames specified:
+* Membuat sebuah Role bernama "pod-reader" dengan resourceNames yang ditentukan:
 
     ```shell
     kubectl create role pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod
     ```
 
-* Create a Role named "foo" with apiGroups specified:
+* Membuat sebuah Role bernama "foo" dengan apiGroups yang ditentukan:
 
     ```shell
     kubectl create role foo --verb=get,list,watch --resource=replicasets.apps
     ```
 
-* Create a Role named "foo" with subresource permissions:
+* Membuat sebuah Role bernama "foo" dengan izin sub-sumber daya:
 
     ```shell
     kubectl create role foo --verb=get,list,watch --resource=pods,pods/status
     ```
 
-* Create a Role named "my-component-lease-holder" with permissions to get/update a resource with a specific name:
+* Membuat sebuah Role bernama "my-component-lease-holder" dengan izin untuk mendapatkan/memperbarui suatu sumber daya dengan nama tertentu:
 
     ```shell
     kubectl create role my-component-lease-holder --verb=get,list,watch,update --resource=lease --resource-name=my-component
@@ -918,39 +935,39 @@ Creates a Role object defining permissions within a single namespace. Examples:
 
 ### `kubectl create clusterrole`
 
-Creates a ClusterRole. Examples:
+Membuat sebuah ClusterRole. Contoh:
 
-* Create a ClusterRole named "pod-reader" that allows user to perform `get`, `watch` and `list` on pods:
+* Membuat sebuah ClusterRole bernama "pod-reader" yang memungkinkan pengguna untuk merlakukan `get`, `watch` dan `list` pada Pod:
 
     ```shell
     kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods
     ```
 
-* Create a ClusterRole named "pod-reader" with resourceNames specified:
+* Membuat sebuah ClusterRole bernama "pod-reader" dengan recourceNames yang ditentukan:
 
     ```shell
     kubectl create clusterrole pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod
     ```
 
-* Create a ClusterRole named "foo" with apiGroups specified:
+* Membuat sebuah ClusterRole bernama "foo" dengan apiGroups yang ditentukan:
 
     ```shell
     kubectl create clusterrole foo --verb=get,list,watch --resource=replicasets.apps
     ```
 
-* Create a ClusterRole named "foo" with subresource permissions:
+* Membuat sebuah ClusterRole bernama "foo" dengan izin sub-sumber daya:
 
     ```shell
     kubectl create clusterrole foo --verb=get,list,watch --resource=pods,pods/status
     ```
 
-* Create a ClusterRole named "foo" with nonResourceURL specified:
+* Membuat sebuah ClusterRole bernama "foo" dengan nonResourceURL yang ditentukan:
 
     ```shell
     kubectl create clusterrole "foo" --verb=get --non-resource-url=/logs/*
     ```
 
-* Create a ClusterRole named "monitoring" with an aggregationRule specified:
+* Membuat sebuah ClusterRole bernama "monitoring" dengan aggregationRule yang ditentukan:
 
     ```shell
     kubectl create clusterrole monitoring --aggregation-rule="rbac.example.com/aggregate-to-monitoring=true"
@@ -958,21 +975,21 @@ Creates a ClusterRole. Examples:
 
 ### `kubectl create rolebinding`
 
-Grants a Role or ClusterRole within a specific namespace. Examples:
+Memberikan sebuah Role atau ClusterRole di dalam Namespace tertentu. Contoh:
 
-* Within the namespace "acme", grant the permissions in the "admin" ClusterRole to a user named "bob":
+* Di dalam Namespace "acme", memberikan izin dalam ClusterRole "admin" kepada pengguna bernama "bob":
 
     ```shell
     kubectl create rolebinding bob-admin-binding --clusterrole=admin --user=bob --namespace=acme
     ```
 
-* Within the namespace "acme", grant the permissions in the "view" ClusterRole to the service account in the namespace "acme" named "myapp":
+* Di dalam Namespace "acme", memberikan izin dalam ClusterRole "view" ke ServiceAccount di dalam Namespace "acme" yang bernama "myapp":
 
     ```shell
     kubectl create rolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp --namespace=acme
     ```
 
-* Within the namespace "acme", grant the permissions in the "view" ClusterRole to a service account in the namespace "myappnamespace" named "myapp":
+* Di dalam Namespace "acme", memberikan izin dalam ClusterRole "view" ke ServiceAccount di dalam Namespace "myappnamespace" yang bernama "myapp":
 
     ```shell
     kubectl create rolebinding myappnamespace-myapp-view-binding --clusterrole=view --serviceaccount=myappnamespace:myapp --namespace=acme
@@ -980,21 +997,21 @@ Grants a Role or ClusterRole within a specific namespace. Examples:
 
 ### `kubectl create clusterrolebinding`
 
-Grants a ClusterRole across the entire cluster (all namespaces). Examples:
+Memberikan sebuah ClusterRole di seluruh klaster (semua Namespace). Contoh:
 
-* Across the entire cluster, grant the permissions in the "cluster-admin" ClusterRole to a user named "root":
+* Di seluruh klaster, memberikan izin dalam ClusterRole "cluster-admin" kepada pengguna bernama "root":
 
     ```shell
     kubectl create clusterrolebinding root-cluster-admin-binding --clusterrole=cluster-admin --user=root
     ```
 
-* Across the entire cluster, grant the permissions in the "system:node-proxier" ClusterRole to a user named "system:kube-proxy":
+* Di seluruh klaster, memberikan izin dalam ClusterRole "system:node-proxier" kepada user bernama "system:kube-proxy":
 
     ```shell
     kubectl create clusterrolebinding kube-proxy-binding --clusterrole=system:node-proxier --user=system:kube-proxy
     ```
 
-* Across the entire cluster, grant the permissions in the "view" ClusterRole to a service account named "myapp" in the namespace "acme":
+* Di seluruh klaster, memberikan izin dalam ClusterRole "view" ke ServiceAccount bernama "myapp" di dalam Namespace "acme":
 
     ```shell
     kubectl create clusterrolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp
@@ -1002,55 +1019,58 @@ Grants a ClusterRole across the entire cluster (all namespaces). Examples:
 
 ### `kubectl auth reconcile` {#kubectl-auth-reconcile}
 
-Creates or updates `rbac.authorization.k8s.io/v1` API objects from a manifest file.
+Membuat atau memperbarui objek API `rbac.authorization.k8s.io/v1` dari suatu berkas manifes.
 
-Missing objects are created, and the containing namespace is created for namespaced objects, if required.
+Objek yang hilang dibuat, dan Namespace dibuat untuk objek dengan Namespace jika diperlukan.
 
-Existing roles are updated to include the permissions in the input objects,
-and remove extra permissions if `--remove-extra-permissions` is specified.
+Role yang sudah ada diperbarui untuk menyertakan izin pada objek masukan,
+dan menghilangkan izin tambahan jika `--remove-extra-permissions` ditetapkan.
 
-Existing bindings are updated to include the subjects in the input objects,
-and remove extra subjects if `--remove-extra-subjects` is specified.
+RoleBinding yang sudah ada diperbarui untuk menyertakan subjek pada objek masukan,
+dan menghapus subjek tambahan jika `--remove-extra-subjects` ditetapkan.
 
-Examples:
+Contoh:
 
-* Test applying a manifest file of RBAC objects, displaying changes that would be made:
+* Mencoba menerapkan sebuah berkas manifes dari objek RBAC, menampilkan perubahan yang akan dibuat:
 
     ```
     kubectl auth reconcile -f my-rbac-rules.yaml --dry-run=client
     ```
 
-* Apply a manifest file of RBAC objects, preserving any extra permissions (in roles) and any extra subjects (in bindings):
+* Menerapkan sebuah berkas manifes dari objek RBAC, mempertahankan izin tambahan (dalam Role) dan subjek tambahan (dalam RoleBinding):
 
     ```shell
     kubectl auth reconcile -f my-rbac-rules.yaml
     ```
 
-* Apply a manifest file of RBAC objects, removing any extra permissions (in roles) and any extra subjects (in bindings):
+* Menerapkan sebuah berkas manifes dari objek RBAC, menghapus izin tambahan (dalam Role) dan subjek tambahan (dalam RoleBinding):
 
     ```shell
     kubectl auth reconcile -f my-rbac-rules.yaml --remove-extra-subjects --remove-extra-permissions
     ```
 
-## ServiceAccount permissions {#service-account-permissions}
+## Izin ServiceAccount {#service-account-permissions}
 
-Default RBAC policies grant scoped permissions to control-plane components, nodes,
-and controllers, but grant *no permissions* to service accounts outside the `kube-system` namespace
-(beyond discovery permissions given to all authenticated users).
+Kebijakan RBAC bawaan memberikan izin terbatas ke komponen _control plane_, Node, dan pengontrol,
+akan tetapi *tidak memberikan izin* ke ServiceAccount di luar Namespace `kube-system`
+(di luar izin diskoveri yang diberikan kepada semua pengguna terotentikasi).
 
-This allows you to grant particular roles to particular ServiceAccounts as needed.
-Fine-grained role bindings provide greater security, but require more effort to administrate.
-Broader grants can give unnecessary (and potentially escalating) API access to
-ServiceAccounts, but are easier to administrate.
+Hal ini memungkinkan kamu untuk memberika Role tertentu ke ServiceAccount tertentu sesuai
+kebutuhan. RoleBinding yang sangat detail memberikan keamanan yang lebih baik,
+akan tetapi membutuhkan lebih banyak usaha untuk pengaturannya. Pemberian izin
+yang lebih luas dapat memberikan akses API yang tidak perlu (dan berpotensi tereskalasi)
+ke ServiceAccount, akan tetapi pengaturannya lebih mudah.
 
-In order from most secure to least secure, the approaches are:
+Dalam urutan dari yang paling aman ke yang paling tidak aman, pendekatannya adalah:
 
-1. Grant a role to an application-specific service account (best practice)
+1. Memberikan sebuah Role ke ServiceAccount aplikasi tertentu (praktik terbaik)
 
-    This requires the application to specify a `serviceAccountName` in its pod spec,
-    and for the service account to be created (via the API, application manifest, `kubectl create serviceaccount`, etc.).
+    Hal ini membutuhkan aplikasi untuk menentukan sebuah `serviceAccountName`
+    di dalam spesifikasi Pod-nya, dan untuk ServiceAccount yang akan dibuat (via
+    API, manifes aplikasi, `kubectl create serviceaccount`, dan lain-lain).
 
-    For example, grant read-only permission within "my-namespace" to the "my-sa" service account:
+    Sebagai contoh, untuk memberikan izin hanya baca (_read-only_) di dalam "my-namespace"
+    ke ServiceAccount "my-sa":
 
     ```shell
     kubectl create rolebinding my-sa-view \
@@ -1059,16 +1079,18 @@ In order from most secure to least secure, the approaches are:
       --namespace=my-namespace
     ```
 
-2. Grant a role to the "default" service account in a namespace
+2. Memberikan sebuah Role ke ServiceAccount "default" di dalam suatu Namespace
 
-    If an application does not specify a `serviceAccountName`, it uses the "default" service account.
+    Jika sebuah aplikasi tidak menetapkan `serviceAccountName`, aplikasi
+    tersebut akan menggunakan ServiceAccount "default".
 
     {{< note >}}
-    Permissions given to the "default" service account are available to any pod
-    in the namespace that does not specify a `serviceAccountName`.
+    Izin yang diberikan ke ServiceAccount "default" tersedia ke Pod apa pun di dalam
+    Namespace yang tidak menetapkan `serviceAccountName`.
     {{< /note >}}
 
-    For example, grant read-only permission within "my-namespace" to the "default" service account:
+    Sebagai contoh, untuk memberikan izin hanya baca di dalam "my-namespace" ke ServiceAccount
+    "default":
 
     ```shell
     kubectl create rolebinding default-view \
@@ -1077,14 +1099,14 @@ In order from most secure to least secure, the approaches are:
       --namespace=my-namespace
     ```
 
-    Many [add-ons](/id/docs/concepts/cluster-administration/addons/) run as the
-    "default" service account in the `kube-system` namespace.
-    To allow those add-ons to run with super-user access, grant cluster-admin
-    permissions to the "default" service account in the `kube-system` namespace.
+    Banyak [pugasan](/id/docs/concepts/cluster-administration/addons/) berjalan sebagai
+    ServiceAccount "default" di dalam Namespace `kube-system`. Untuk mengizinkan pugasan
+    tersebut berjalan dengan akses _super-user_, berikan izin `cluster-admin` kepada
+    ServiceAccount "default" di dalam Namespace `kube-system`.
 
     {{< caution >}}
-    Enabling this means the `kube-system` namespace contains Secrets
-    that grant super-user access to your cluster's API.
+    Mengaktifkan ini berarti Namespace `kube-system` memuat Secret yang
+    memberikan akses _super-user_ ke API klastermu.
     {{< /caution >}}
 
     ```shell
@@ -1093,12 +1115,14 @@ In order from most secure to least secure, the approaches are:
       --serviceaccount=kube-system:default
     ```
 
-3. Grant a role to all service accounts in a namespace
+3. Memberikan Role ke semua ServiceAccount dalam suatu Namespace
 
-    If you want all applications in a namespace to have a role, no matter what service account they use,
-    you can grant a role to the service account group for that namespace.
+    Jika kamu ingin semua aplikasi di dalam satu Namespace untuk memiliki Role, apa pun
+    ServiceAccount yang digunakan, maka kamu dapat memberikan Role ke grup ServiceAccount
+    untuk Namespace tersebut.
 
-    For example, grant read-only permission within "my-namespace" to all service accounts in that namespace:
+    Sebagai contoh, untuk memberikan izin hanya baca di dalam "my-namespace" ke semua
+    ServiceAccount di dalam Namespace tersebut:
 
     ```shell
     kubectl create rolebinding serviceaccounts-view \
@@ -1107,11 +1131,13 @@ In order from most secure to least secure, the approaches are:
       --namespace=my-namespace
     ```
 
-4. Grant a limited role to all service accounts cluster-wide (discouraged)
+4. Memberikan Role terbatas ke semua ServiceAccount di seluruh klaster (tidak disarankan)
+    
+    Jika kamu tidak ingin untuk mengelola izin per Namespace, kamu bisa memberikan
+    Role yang berlaku di seluruh klaster kepada semua ServiceAccount.
 
-    If you don't want to manage permissions per-namespace, you can grant a cluster-wide role to all service accounts.
-
-    For example, grant read-only permission across all namespaces to all service accounts in the cluster:
+    Sebagai contoh, untuk memberikan akses hanya baca di semua Namespace untuk
+    semua ServiceAccount yang ada di klaster:
 
     ```shell
     kubectl create clusterrolebinding serviceaccounts-view \
@@ -1119,14 +1145,15 @@ In order from most secure to least secure, the approaches are:
      --group=system:serviceaccounts
     ```
 
-5. Grant super-user access to all service accounts cluster-wide (strongly discouraged)
-
-    If you don't care about partitioning permissions at all, you can grant super-user access to all service accounts.
+5. Memberikan akses _super-user_ ke semua ServiceAccount di seluruh klaster (sangat tidak disarankan)
+    
+    Jika kamu tidak peduli untuk melakukan partisi terhadap izin sama sekali, maka kamu bisa
+    memberikan akses _super-user_ ke semua ServiceAccount.
 
     {{< warning >}}
-    This allows any application full access to your cluster, and also grants
-    any user with read access to Secrets (or the ability to create any pod)
-    full access to your cluster.
+    Hal ini akan memberikan akses penuh untuk aplikasi apapun ke klastermu, dan juga
+    memberikan pengguna manapun dengan akses baca ke Secret (atau kemampuan untuk membuat
+    Pod apa pun) akses penuh ke klastermu.
     {{< /warning >}}
 
     ```shell
@@ -1135,50 +1162,55 @@ In order from most secure to least secure, the approaches are:
       --group=system:serviceaccounts
     ```
 
-## Upgrading from ABAC
+## Melakukan peningkatan dari ABAC
 
-Clusters that originally ran older Kubernetes versions often used
-permissive ABAC policies, including granting full API access to all
-service accounts.
+Klaster yang awalnya menjalankan versi Kubernetes lawas sering kali menggunakan
+kebijakan ABAC yang permisif, termasuk memberikan akses API penuh ke semua
+ServiceAccount.
 
-Default RBAC policies grant scoped permissions to control-plane components, nodes,
-and controllers, but grant *no permissions* to service accounts outside the `kube-system` namespace
-(beyond discovery permissions given to all authenticated users).
+Kebijakan RBAC bawaan memberikan izin yang terbatas ke komponen _control plane_, Node,
+dan pengontrol, akan tetapi *tidak memberikan izin* ke ServiceAccount di luar Namespace
+`kube-system` (di luar izin diskoveri yang diberikan kepada semua pengguna terotentikasi).
 
-While far more secure, this can be disruptive to existing workloads expecting to automatically receive API permissions.
-Here are two approaches for managing this transition:
+Meskipun jauh lebih aman, hal ini dapat mengganggu beban kerja yang sudah ada yang
+mengharapkan untuk menerima izin API secara otomatis.
+Berikut adalah dua pendekatan untuk mengelola transisi ini:
 
-### Parallel authorizers
+### Pemberi otorisasi paralel
 
-Run both the RBAC and ABAC authorizers, and specify a policy file that contains
-the [legacy ABAC policy](/docs/reference/access-authn-authz/abac/#policy-file-format):
+Jalankan pemberi otorisasi RBAC dan ABAC bersamaan, dan tentukan berkas kebijakan yang
+memuat [kebijakan ABAC lama](/docs/reference/access-authn-authz/abac/#policy-file-format):
 
 ```
 --authorization-mode=...,RBAC,ABAC --authorization-policy-file=mypolicy.json
 ```
 
-To explain that first command line option in detail: if earlier authorizers, such as Node,
-deny a request, then the the RBAC authorizer attempts to authorize the API request. If RBAC
-also denies that API request, the ABAC authorizer is then run. This means that any request
-allowed by *either* the RBAC or ABAC policies is allowed.
+Untuk menjelaskan opsi baris perintah yang pertama secara detail: jika pemberi otorisasi
+sebelumnya, seperti Node, menolak permintaan, maka pemberi otorisasi RBAC mencoba untuk
+mengotorisasi permintaan API tersebut. Jika RBAC juga menolak permintaan API tersebut,
+maka pemberi otorisasi ABAC akan dijalankan. Hal ini berarti permintaan apa pun yang
+diizinkan oleh *salah satu* kebijakan RBAC atau ABAC akan diizinkan.
 
-When the kube-apiserver is run with a log level of 5 or higher for the RBAC component
-(`--vmodule=rbac*=5` or `--v=5`), you can see RBAC denials in the API server log
-(prefixed with `RBAC`).
-You can use that information to determine which roles need to be granted to which users, groups, or service accounts.
+Ketika kube-apiserver dijalankan dengan level log 5 atau lebih tinggi untuk komponen
+RBAC (`--vmodule=rbac*=5` atau `--v=5`), kamu dapat melihat penolakan RBAC di log
+server API (dengan prefiks `RBAC`). Kamu dapat menggunakan informasi tersebut untuk
+menentukan Role mana yang perlu diberikan ke pengguna, grup, atau ServiceAccount yang mana.
 
-Once you have [granted roles to service accounts](#service-account-permissions) and workloads
-are running with no RBAC denial messages in the server logs, you can remove the ABAC authorizer.
+Jika kamu telah [memberikan Role ke ServiceAccount](#service-account-permissions) dan
+beban kerja sedang berjalan tanpa pesan penolakan RBAC dalam log server, maka kamu
+dapat menghapus pemberi otorisasi ABAC.
 
-### Permissive RBAC permissions
+### Izin RBAC permisif
 
-You can replicate a permissive ABAC policy using RBAC role bindings.
+Kamu dapat mereplikasi kebijakan ABAC yang permisif dengan menggunakan RoleBinding
+RBAC.
 
 {{< warning >}}
-The following policy allows **ALL** service accounts to act as cluster administrators.
-Any application running in a container receives service account credentials automatically,
-and could perform any action against the API, including viewing secrets and modifying permissions.
-This is not a recommended policy.
+Kebijakan berikut mengizinkan **SEMUA** ServiceAccount bentindak sebagai administrator
+klaster. Aplikasi apa pun yang berjalan di dalam Container akan menerima kredensial
+ServiceAccount secara otomatis, dan dapat melakukan tindakan apa pun terhadap API,
+termasuk menampilkan Secret dan mengubah izin. Hal ini bukan kebijakan
+yang direkomendasikan.
 
 ```shell
 kubectl create clusterrolebinding permissive-binding \
@@ -1189,7 +1221,6 @@ kubectl create clusterrolebinding permissive-binding \
 ```
 {{< /warning >}}
 
-After you have transitioned to use RBAC, you should adjust the access controls
-for your cluster to ensure that these meet your information security needs.
-
-
+Setelah kamu beralih menggunakan RBAC, kamu harus menyesuaikan kontrol akses untuk
+klastermu untuk memastikan bahwa kesemuanya memenuhi kebutuhanmu terkait keamanan
+informasi.

From 72b842589572411d8177f014bf1b4cc501241b6e Mon Sep 17 00:00:00 2001
From: yue9944882 <291271447@qq.com>
Date: Mon, 21 Sep 2020 16:27:34 +0800
Subject: [PATCH 400/496] a digit typo in apf docs

---
 content/en/docs/concepts/cluster-administration/flow-control.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/cluster-administration/flow-control.md b/content/en/docs/concepts/cluster-administration/flow-control.md
index 2d2abb7b26..5b5653260a 100644
--- a/content/en/docs/concepts/cluster-administration/flow-control.md
+++ b/content/en/docs/concepts/cluster-administration/flow-control.md
@@ -495,7 +495,7 @@ When you enable the API Priority and Fairness feature, the kube-apiserver serves
   system,            system-nodes,   12,         0,                   system:node:127.0.0.1, 2020-07-23T15:26:57.179170694Z,
   ```
   
-  In addition to the queued requests, the output includeas one phantom line for each priority level that is exempt from limitation.
+  In addition to the queued requests, the output includes one phantom line for each priority level that is exempt from limitation.
 
   You can get a more detailed listing with a command like this:
   ```shell

From ac2adccab1be16d6e87baaec303276d11e3387f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Mon, 21 Sep 2020 21:28:37 +0800
Subject: [PATCH 401/496] Update service.md

---
 content/zh/docs/concepts/services-networking/service.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index 294738085d..3815e27fc9 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -379,7 +379,7 @@ There are a few reasons for using proxying for Services:
 
 ### 为什么不使用 DNS 轮询？
 
-时不时会有人问道，就是为什么 Kubernetes 依赖代理将入站流量转发到后端。 那其他方法呢？
+时不时会有人问到，就是为什么 Kubernetes 依赖代理将入站流量转发到后端。 那其他方法呢？
 例如，是否可以配置具有多个A值（或IPv6为AAAA）的DNS记录，并依靠轮询名称解析？
 
 使用服务代理有以下几个原因：

From 02dccc54d4df7793f6671215a7db77c5616fdb1a Mon Sep 17 00:00:00 2001
From: Surya Setiyaputra <4986994+suryast@users.noreply.github.com>
Date: Tue, 22 Sep 2020 00:48:15 +1000
Subject: [PATCH 402/496] Update 404.html

Remove text data-proofer-ignore
---
 layouts/404.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/layouts/404.html b/layouts/404.html
index 962894ee29..beef5c7999 100644
--- a/layouts/404.html
+++ b/layouts/404.html
@@ -7,7 +7,7 @@
     <ul id="error-sections">
         {{ $sections := slice "docs" "blog" "training" "partners" "community" "case-studies" }}
         {{ range $sections }}
-        {{ with site.GetPage "section" . }}<li><a href="{{ .RelPermalink }}" data-proofer-ignore>{{ .Title }}</a></li>{{ end }}
+        {{ with site.GetPage "section" . }}<li><a href="{{ .RelPermalink }}">{{ .Title }}</a></li>{{ end }}
         {{ end }}
     </ul>
 </section>

From 88f94fbbe4857bfe56c6b4ed9776edc6450e6c49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Mon, 21 Sep 2020 23:56:34 +0800
Subject: [PATCH 403/496] Update multiple-zones.md

modify wrong word
---
 content/zh/docs/setup/best-practices/multiple-zones.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/best-practices/multiple-zones.md b/content/zh/docs/setup/best-practices/multiple-zones.md
index c4ca5a5eec..4f17043bd1 100644
--- a/content/zh/docs/setup/best-practices/multiple-zones.md
+++ b/content/zh/docs/setup/best-practices/multiple-zones.md
@@ -47,7 +47,7 @@ Kubernetes 1.2 添加了跨多个失效区（Failure Zone）运行同一集群
 完全的集群联邦可以将运行在多个区域（Region）或云供应商（或本地数据中心）的多个
 Kubernetes 集群组合起来。
 不过，很多用户仅仅是希望在同一云厂商平台的多个区域运行一个可用性更好的集群，
-而者恰恰是 1.2 引入的多区支持所带来的特性
+而这恰恰是 1.2 引入的多区支持所带来的特性
 （此特性之前有一个昵称 “Ubernetes Lite”）。
 
 <!--

From 12d89ee2bbb00a4aeb5bae695705cce3929f6be7 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Tue, 22 Sep 2020 00:58:09 +0300
Subject: [PATCH 404/496] fix indent video block

---
 content/id/_index.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/id/_index.html b/content/id/_index.html
index e95d661b76..10c0775866 100644
--- a/content/id/_index.html
+++ b/content/id/_index.html
@@ -43,7 +43,6 @@ Kubernetes sebagai <i>open source</i> memberikan kamu kebebasan untuk menggunaka
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Watch Video</button>
         <br>
         <br>
-        <br>
         <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2019" button id="desktopKCButton">Hadiri KubeCon di Barcelona tanggal 20-23 Mei 2019</a>
         <br>
         <br>

From 557f95dcb7662067554bd71472918f982b39374d Mon Sep 17 00:00:00 2001
From: Giri Kuncoro <giri.kuncoro@go-jek.com>
Date: Mon, 21 Sep 2020 09:34:43 +0700
Subject: [PATCH 405/496] Translate reserve compute resource page to Bahasa
 Indonesia

---
 .../reserve-compute-resources.md              | 231 ++++++++++++++++++
 1 file changed, 231 insertions(+)
 create mode 100644 content/id/docs/tasks/administer-cluster/reserve-compute-resources.md

diff --git a/content/id/docs/tasks/administer-cluster/reserve-compute-resources.md b/content/id/docs/tasks/administer-cluster/reserve-compute-resources.md
new file mode 100644
index 0000000000..e1ac7b035e
--- /dev/null
+++ b/content/id/docs/tasks/administer-cluster/reserve-compute-resources.md
@@ -0,0 +1,231 @@
+---
+title: Melakukan Reservasi Sumber Daya Komputasi untuk Daemon Sistem
+content_type: task
+min-kubernetes-server-version: 1.8
+---
+
+<!-- overview -->
+
+Node Kubernetes dapat dijadwalkan sesuai dengan kapasitas. Secara bawaan, Pod dapat menggunakan
+semua kapasitas yang tersedia pada sebuah Node. Ini merupakan masalah karena Node
+sebenarnya menjalankan beberapa _daemon_ sistem yang diperlukan oleh OS dan Kubernetes itu sendiri.
+Jika sumber daya pada Node tidak direservasi untuk _daemon-daemon_ tersebut, maka
+Pod dan _daemon_ akan berlomba-lomba menggunakan sumber daya yang tersedia, sehingga
+menyebabkan _starvation_ sumber daya pada Node.
+
+Fitur bernama `Allocatable` pada Node diekspos oleh kubelet yang berfungsi untuk melakukan
+reservasi sumber daya komputasi untuk _daemon_ sistem. Kubernetes merekomendasikan admin
+klaster untuk mengatur `Allocatable` pada Node berdasarkan tingkat kepadatan (_density_) beban kerja setiap Node.
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+Kamu harus menjalankan Kubernetes server dengan versi 1.17 atau yang lebih baru
+untuk menggunakan perintah baris kubelet dengan opsi `--reserved-cpus` untuk
+menyetel [daftar reservasi CPU secara eksplisit](#melakukan-reservasi-daftar-cpu-secara-eksplisit).
+
+
+
+<!-- steps -->
+
+## _Allocatable_ pada Node
+
+```text
+       Kapasitas Node
+------------------------------
+|       kube-reserved        |
+|----------------------------|
+|      system-reserved       |
+|----------------------------|
+|     eviction-threshold     |
+|     (batas pengusiran)     |
+|----------------------------|
+|                            |
+|        allocatable         |
+| (dapat digunakan oleh Pod) |
+|                            |
+|                            |
+------------------------------
+```
+
+`Allocatable` atau sumber daya yang dialokasikan pada sebuah Node Kubernetes merupakan
+jumlah sumber daya komputasi yang dapat digunakan oleh Pod. Penjadwal tidak
+dapat melakukan penjadwalan melebihi `Allocatable`. Saat ini dukungan terhadap
+`CPU`, `memory` dan `ephemeral-storage` tersedia.
+
+`Allocatable` pada Node diekspos oleh objek API `v1.Node` dan merupakan
+bagian dari baris perintah `kubectl describe node`.
+
+Sumber daya dapat direservasi untuk dua kategori _daemon_ sistem melalui kubelet.
+
+### Mengaktifkan QoS dan tingkatan cgroup dari Pod
+
+Untuk menerapkan batasan `Allocatable` pada Node, kamu harus mengaktifkan
+hierarki cgroup yang baru melalui _flag_ `--cgroups-per-qos`. Secara bawaan, _flag_ ini
+telah aktif. Saat aktif, kubelet akan memasukkan semua Pod pengguna di bawah
+sebuah hierarki cgroup yang dikelola oleh kubelet.
+
+### Mengonfigurasi _driver_ cgroup
+
+Manipulasi terhadap hierarki cgroup pada hos melalui _driver_ cgroup didukung oleh kubelet.
+_Driver_ dikonfigurasi melalui _flag_ `--cgroup-driver`.
+
+Nilai yang didukung adalah sebagai berikut:
+
+* `cgroupfs` merupakan _driver_ bawaan yang melakukan manipulasi secara langsung
+terhadap _filesystem_ cgroup pada hos untuk mengelola _sandbox_ cgroup.
+* `systemd` merupakan _driver_ alternatif yang mengelola _sandbox_ cgroup menggunakan
+bagian dari sumber daya yang didukung oleh sistem _init_ yang digunakan.
+
+Tergantung dari konfigurasi _runtime_ Container yang digunakan,
+operator dapat memilih _driver_ cgroup tertentu untuk memastikan perilaku sistem yang tepat.
+Misalnya, jika operator menggunakan _driver_ cgroup `systemd` yang disediakan oleh
+_runtime_ docker, maka kubelet harus diatur untuk menggunakan _driver_ cgroup `systemd`.
+
+### Kube Reserved
+
+- **_Flag_ Kubelet**: `--kube-reserved=[cpu=100m][,][memory=100Mi][,][ephemeral-storage=1Gi][,][pid=1000]`
+- **_Flag_ Kubelet**: `--kube-reserved-cgroup=`
+
+`kube-reserved` berfungsi untuk mengambil informasi sumber daya reservasi
+untuk _daemon_ sistem Kubernetes, seperti kubelet, _runtime_ Container, detektor masalah pada Node, dsb.
+`kube-reserved` tidak berfungsi untuk mereservasi sumber daya untuk _daemon_ sistem yang berjalan
+sebagai Pod. `kube-reserved`  merupakan fungsi dari kepadatan Pod pada Node.
+
+Selain dari `cpu`, `memory`, dan `ephemeral-storage`,`pid` juga dapat
+diatur untuk mereservasi jumlah ID proses untuk _daemon_ sistem Kubernetes.
+
+Secara opsional, kamu dapat memaksa _daemon_ sistem melalui setelan `kube-reserved`.
+Ini dilakukan dengan menspesifikasikan _parent_ cgroup sebagai nilai dari _flag_ `--kube-reserved-cgroup` pada kubelet.
+
+Kami merekomendasikan _daemon_ sistem Kubernetes untuk ditempatkan pada
+tingkatan cgroup yang tertinggi (contohnya, `runtime.slice` pada mesin systemd).
+Secara ideal, setiap _daemon_ sistem sebaiknya dijalankan pada _child_ cgroup
+di bawah _parent_ ini. Lihat [dokumentasi](https://git.k8s.io/community/contributors/design-proposals/node/node-allocatable.md#recommended-cgroups-setup)
+untuk mengetahui rekomendasi hierarki cgroup secara detail.
+
+Catatan: kubelet **tidak membuat** `--kube-reserved-cgroup` jika cgroup
+yang diberikan tidak ada pada sistem. Jika cgroup yang tidak valid diberikan,
+maka kubelet akan mengalami kegagalan.
+
+### System Reserved
+
+- **_Flag_ Kubelet**: `--system-reserved=[cpu=100m][,][memory=100Mi][,][ephemeral-storage=1Gi][,][pid=1000]`
+- **_Flag_ Kubelet**: `--system-reserved-cgroup=`
+
+
+`system-reserved` berfungsi untuk mengetahui reservasi sumber daya untuk
+_daemon_ sistem pada OS, seperti `sshd`, `udev`, dan lainnya. `system-reserved` sebaiknya
+mereservasi memori untuk kernel juga, karena memori kernel tidak termasuk dalam
+hitungan kalkulasi Pod pada Kubernetes. Kami juga merekomendasikan reservasi sumber daya
+untuk sesi (_session_) login pengguna (contohnya, `user.slice` di dalam dunia systemd).
+
+### Melakukan Reservasi Daftar CPU secara Eksplisit
+{{< feature-state for_k8s_version="v1.17" state="stable" >}}
+
+- **_Flag_ Kubelet**: `--reserved-cpus=0-3`
+
+`reserved-cpus` berfungsi untuk mendefinisikan [cpuset](https://www.kernel.org/doc/Documentation/cgroup-v1/cpusets.txt) secara eksplisit untuk
+_daemon_ sistem OS dan _daemon_ sistem Kubernetes. `reserved-cpus` dimaksudkan untuk
+sistem-sistem yang tidak mendefinisikan tingkatan cgroup tertinggi secara terpisah untuk
+_daemon_ sistem OS dan _daemon_ sistem Kubernetes yang berkaitan dengan sumber daya cpuset.
+
+Jika kubelet **tidak memiliki** `--system-reserved-cgroup` dan `--kube-reserved-cgroup`,
+cpuset akan diberikan secara eksplisit oleh `reserved-cpus`, yang akan menimpa definisi
+yang diberikan oleh opsi `--kube-reserved` dan `--system-reserved`.
+
+Opsi ini dirancang secara spesifik untuk kasus-kasus Telco/NFV, di mana _interrupt_ atau _timer_
+yang tidak terkontrol bisa memengaruhi performa dari beban kerja. Kamu dapat menggunakan
+opsi untuk untuk mendefinisikan cpuset secara eksplisit untuk _daemon_ sistem/Kubernetes dan
+_interrupt_/_timer_, sehingga CPU sisanya dalam sistem akan digunakan untuk beban kerja saja,
+dengan dampak yang sedikit terhadap _interrupt_/_timer_ yang tidak terkontrol. Untuk
+memindahkan _daemon_ sistem, _daemon_ Kubernetes serta _interrrupt_/_timer_ Kubernetes supaya
+menggunakan cpuset yang eksplisit didefinisikan oleh opsi ini, sebaiknya digunakan mekanisme lain di luar Kubernetes. Contohnya: pada Centos, kamu dapat melakukan ini dengan menggunakan
+toolset yang sudah disetel.
+
+### Batas Pengusiran (_Eviction Threshold_)
+
+- **_Flag_ Kubelet**: `--eviction-hard=[memory.available<500Mi]`
+
+Tekanan memori pada tingkatan Node menyebabkan sistem OOM (_Out Of Memory_) yang
+berdampak pada Node secara keseluruhan dan semua Pod yang dijalankan di dalamnya. 
+Node dapat berubah menjadi _offline_ sementara sampai memori berhasil diklaim kembali.
+Untuk menghindari sistem OOM, atau mengurangi kemungkinan terjadinya OOM, kubelet
+menyediakan fungsi untuk pengelolaan saat [Kehabisan Sumber Daya (_Out of Resource_)](/docs/tasks/administer-cluster/out-of-resource/).
+Pengusiran dapat dilakukan hanya untuk kasus kehabisan `memory` dan `ephemeral-storage`. Dengan mereservasi
+sebagian memori melalui _flag_ `--eviction-hard`, kubelet akan berusaha untuk "mengusir" (_evict_)
+Pod ketika ketersediaan memori pada Node jatuh di bawah nilai yang telah direservasi.
+Dalam bahasa sederhana, jika _daemon_ sistem tidak ada pada Node, maka Pod tidak dapat menggunakan
+memori melebihi nilai yang ditentukan oleh _flag_ `--eviction-hard`. Karena alasan ini,
+sumber daya yang direservasi untuk pengusiran tidak tersedia untuk Pod.
+
+### Memaksakan _Allocatable_ pada Node
+
+- **_Flag_ Kubelet**: `--enforce-node-allocatable=pods[,][system-reserved][,][kube-reserved]`
+
+Penjadwal menganggap `Allocatable` sebagai kapasitas yang tersedia untuk digunakan oleh Pod.
+
+Secara bawaan, kubelet memaksakan `Allocatable` untuk semua Pod. Pemaksaan dilakukan
+dengan cara "mengusir" Pod-Pod ketika penggunaan sumber daya Pod secara keseluruhan telah
+melewati nilai `Allocatable`. Lihat [bagian ini](/docs/tasks/administer-cluster/out-of-resource/#eviction-policy)
+untuk mengetahui kebijakan pengusiran secara detail. Pemaksaan ini dikendalikan dengan
+cara memberikan nilai Pod melalui _flag_ `--enforce-node-allocatable` pada kubelet.
+
+Secara opsional, kubelet dapat diatur untuk memaksakan `kube-reserved` dan
+`system-reserved` dengan memberikan nilai melalui _flag_ tersebut. Sebagai catatan,
+jika kamu mengatur `kube-reserved`, maka kamu juga harus mengatur `--kube-reserved-cgroup`. Begitu pula
+jika kamu mengatur `system-reserved`, maka kamu juga harus mengatur `--system-reserved-cgroup`.
+
+## Panduan Umum
+
+_Daemon_ sistem dilayani mirip seperti Pod `Guaranteed` yang terjamin sumber dayanya.
+_Daemon_ sistem dapat melakukan _burst_ di dalam jangkauan cgroup. Perilaku ini
+dikelola sebagai bagian dari penggelaran (_deployment_) Kubernetes. Sebagai contoh,
+kubelet harus memiliki cgroup sendiri dan membagikan sumber daya `kube-reserved` dengan
+_runtime_ Container. Namun begitu, kubelet tidak dapat melakukan _burst_ dan menggunakan
+semua sumber daya yang tersedia pada Node jika `kube-reserved` telah dipaksakan pada sistem.
+
+Kamu harus berhati-hati ekstra ketika memaksakan reservasi `system-reserved` karena dapat
+menyebabkan layanan sistem yang terpenting mengalami CPU _starvation_, OOM _killed_, atau tidak
+dapat melakukan _fork_ pada Node. Kami menyarankan untuk memaksakan `system-reserved` hanya
+jika pengguna telah melakukan _profiling_ sebaik mungkin pada Node mereka untuk
+mendapatkan estimasi yang akurat dan percaya diri terhadap kemampuan mereka untuk
+memulihkan sistem ketika ada grup yang terkena OOM _killed_.
+
+* Untuk memulai, paksakan `Allocatable` pada Pod.
+* Ketika _monitoring_ dan _alerting_ telah cukup dilakukan untuk memonitor _daemon_
+dari sistem Kubernetes, usahakan untuk memaksakan `kube-reserved` berdasarkan penggunakan heuristik.
+* Jika benar-benar diperlukan, paksakan `system-reserved` secara bertahap.
+
+Sumber daya yang diperlukan oleh _daemon_ sistem Kubernetes dapat tumbuh seiring waktu dengan
+adanya penambahan fitur-fitur baru. Proyek Kubernetes akan berusaha untuk menurunkan penggunaan sumber daya
+dari _daemon_ sistem Node, tetapi belum menjadi prioritas untuk saat ini.
+Kamu dapat berekspektasi bahwa fitur kapasitas `Allocatable` ini akan dihapus pada versi yang akan datang.
+
+
+
+<!-- discussion -->
+
+## Contoh Skenario
+
+Berikut ini merupakan contoh yang menggambarkan komputasi `Allocatable` pada Node:
+
+* Node memiliki 16 CPU, memori sebesar 32Gi, dan penyimpanan sebesar 100Gi.
+* `--kube-reserved` diatur menjadi `cpu=1,memory=2Gi,ephemeral-storage=1Gi`
+* `--system-reserved` diatur menjadi `cpu=500m,memory=1Gi,ephemeral-storage=1Gi`
+* `--eviction-hard` diatur menjadi `memory.available<500Mi,nodefs.available<10%`
+
+Dalam skenario ini, `Allocatable` akan menjadi 14.5 CPU, memori 28.5Gi, dan penyimpanan
+lokal 88Gi.
+Penjadwal memastikan bahwa semua Pod yang berjalan pada Node ini secara total tidak meminta memori melebihi
+28.5Gi dan tidak menggunakan penyimpanan lokal melebihi 88Gi.
+Pengusiran Pod akan dilakukan kubelet ketika penggunaan memori keseluruhan oleh Pod telah melebihi 28.5Gi,
+atau jika penggunaan penyimpanan keseluruhan telah melebihi 88Gi. Jika semua proses pada Node mengonsumsi
+CPU sebanyak-banyaknya, Pod-Pod tidak dapat mengonsumsi lebih dari 14.5 CPU.
+
+Jika `kube-reserved` dan/atau `system-reserved` tidak dipaksakan dan _daemon_ sistem
+melebihi reservasi mereka, maka kubelet akan mengusir Pod ketika penggunaan memori pada Node
+melebihi 31.5Gi atau penggunaan penyimpanan melebihi 90Gi.

From 47efc81828b01813008de7886a7586440816b859 Mon Sep 17 00:00:00 2001
From: TAKAHASHI Shuuji <shuuji3@gmail.com>
Date: Tue, 22 Sep 2020 13:47:15 +0900
Subject: [PATCH 406/496] Replace text diagrams with ones rendered by mermaid.

---
 .../pods/pod-topology-spread-constraints.md   | 197 +++++++++++++-----
 1 file changed, 143 insertions(+), 54 deletions(-)

diff --git a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
index 5cc52cdbe6..09a02d6afc 100644
--- a/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
+++ b/content/en/docs/concepts/workloads/pods/pod-topology-spread-constraints.md
@@ -30,13 +30,23 @@ node4   Ready    <none>   2m43s   v1.16.0   node=node4,zone=zoneB
 
 Then the cluster is logically viewed as below:
 
-```
-+---------------+---------------+
-|     zoneA     |     zoneB     |
-+-------+-------+-------+-------+
-| node1 | node2 | node3 | node4 |
-+-------+-------+-------+-------+
-```
+{{<mermaid>}}
+graph TB
+    subgraph "zoneB"
+        n3(Node3)
+        n4(Node4)
+    end
+    subgraph "zoneA"
+        n1(Node1)
+        n2(Node2)
+    end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4 k8s;
+    class zoneA,zoneB cluster;
+{{< /mermaid >}}
 
 Instead of manually applying labels, you can also reuse the [well-known labels](/docs/reference/kubernetes-api/labels-annotations-taints/) that are created and populated automatically on most clusters.
 
@@ -80,17 +90,25 @@ You can read more about this field by running `kubectl explain Pod.spec.topology
 
 ### Example: One TopologySpreadConstraint
 
-Suppose you have a 4-node cluster where 3 Pods labeled `foo:bar` are located in node1, node2 and node3 respectively (`P` represents Pod):
+Suppose you have a 4-node cluster where 3 Pods labeled `foo:bar` are located in node1, node2 and node3 respectively:
 
-```
-+---------------+---------------+
-|     zoneA     |     zoneB     |
-+-------+-------+-------+-------+
-| node1 | node2 | node3 | node4 |
-+-------+-------+-------+-------+
-|   P   |   P   |   P   |       |
-+-------+-------+-------+-------+
-```
+{{<mermaid>}}
+graph BT
+    subgraph "zoneB"
+        p3(Pod) --> n3(Node3)
+        n4(Node4)
+    end
+    subgraph "zoneA"
+        p1(Pod) --> n1(Node1)
+        p2(Pod) --> n2(Node2)
+    end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4,p1,p2,p3 k8s;
+    class zoneA,zoneB cluster;
+{{< /mermaid >}}
 
 If we want an incoming Pod to be evenly spread with existing Pods across zones, the spec can be given as:
 
@@ -100,15 +118,46 @@ If we want an incoming Pod to be evenly spread with existing Pods across zones,
 
 If the scheduler placed this incoming Pod into "zoneA", the Pods distribution would become [3, 1], hence the actual skew is 2 (3 - 1) - which violates `maxSkew: 1`. In this example, the incoming Pod can only be placed onto "zoneB":
 
-```
-+---------------+---------------+      +---------------+---------------+
-|     zoneA     |     zoneB     |      |     zoneA     |     zoneB     |
-+-------+-------+-------+-------+      +-------+-------+-------+-------+
-| node1 | node2 | node3 | node4 |  OR  | node1 | node2 | node3 | node4 |
-+-------+-------+-------+-------+      +-------+-------+-------+-------+
-|   P   |   P   |   P   |   P   |      |   P   |   P   |  P P  |       |
-+-------+-------+-------+-------+      +-------+-------+-------+-------+
-```
+{{<mermaid>}}
+graph BT
+    subgraph "zoneB"
+        p3(Pod) --> n3(Node3)
+        p4(mypod) --> n4(Node4)
+    end
+    subgraph "zoneA"
+        p1(Pod) --> n1(Node1)
+        p2(Pod) --> n2(Node2)
+    end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4,p1,p2,p3 k8s;
+    class p4 plain;
+    class zoneA,zoneB cluster;
+{{< /mermaid >}}
+
+OR
+
+{{<mermaid>}}
+graph BT
+    subgraph "zoneB"
+        p3(Pod) --> n3(Node3)
+        p4(mypod) --> n3
+        n4(Node4)
+    end
+    subgraph "zoneA"
+        p1(Pod) --> n1(Node1)
+        p2(Pod) --> n2(Node2)
+    end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4,p1,p2,p3 k8s;
+    class p4 plain;
+    class zoneA,zoneB cluster;
+{{< /mermaid >}}
 
 You can tweak the Pod spec to meet various kinds of requirements:
 
@@ -118,17 +167,26 @@ You can tweak the Pod spec to meet various kinds of requirements:
 
 ### Example: Multiple TopologySpreadConstraints
 
-This builds upon the previous example. Suppose you have a 4-node cluster where 3 Pods labeled `foo:bar` are located in node1, node2 and node3 respectively (`P` represents Pod):
+This builds upon the previous example. Suppose you have a 4-node cluster where 3 Pods labeled `foo:bar` are located in node1, node2 and node3 respectively:
 
-```
-+---------------+---------------+
-|     zoneA     |     zoneB     |
-+-------+-------+-------+-------+
-| node1 | node2 | node3 | node4 |
-+-------+-------+-------+-------+
-|   P   |   P   |   P   |       |
-+-------+-------+-------+-------+
-```
+{{<mermaid>}}
+graph BT
+    subgraph "zoneB"
+        p3(Pod) --> n3(Node3)
+        n4(Node4)
+    end
+    subgraph "zoneA"
+        p1(Pod) --> n1(Node1)
+        p2(Pod) --> n2(Node2)
+    end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4,p1,p2,p3 k8s;
+    class p4 plain;
+    class zoneA,zoneB cluster;
+{{< /mermaid >}}
 
 You can use 2 TopologySpreadConstraints to control the Pods spreading on both zone and node:
 
@@ -138,15 +196,24 @@ In this case, to match the first constraint, the incoming Pod can only be placed
 
 Multiple constraints can lead to conflicts. Suppose you have a 3-node cluster across 2 zones:
 
-```
-+---------------+-------+
-|     zoneA     | zoneB |
-+-------+-------+-------+
-| node1 | node2 | node3 |
-+-------+-------+-------+
-|  P P  |   P   |  P P  |
-+-------+-------+-------+
-```
+{{<mermaid>}}
+graph BT
+    subgraph "zoneB"
+        p4(Pod) --> n3(Node3)
+        p5(Pod) --> n3
+    end
+    subgraph "zoneA"
+        p1(Pod) --> n1(Node1)
+        p2(Pod) --> n1
+        p3(Pod) --> n2(Node2)
+    end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4,p1,p2,p3,p4,p5 k8s;
+    class zoneA,zoneB cluster;
+{{< /mermaid >}}
 
 If you apply "two-constraints.yaml" to this cluster, you will notice "mypod" stays in `Pending` state. This is because: to satisfy the first constraint, "mypod" can only be put to "zoneB"; while in terms of the second constraint, "mypod" can only put to "node2". Then a joint result of "zoneB" and "node2" returns nothing.
 
@@ -169,15 +236,37 @@ There are some implicit conventions worth noting here:
 
     Suppose you have a 5-node cluster ranging from zoneA to zoneC:
 
-    ```
-    +---------------+---------------+-------+
-    |     zoneA     |     zoneB     | zoneC |
-    +-------+-------+-------+-------+-------+
-    | node1 | node2 | node3 | node4 | node5 |
-    +-------+-------+-------+-------+-------+
-    |   P   |   P   |   P   |       |       |
-    +-------+-------+-------+-------+-------+
-    ```
+    {{<mermaid>}}
+    graph BT
+        subgraph "zoneB"
+            p3(Pod) --> n3(Node3)
+            n4(Node4)
+        end
+        subgraph "zoneA"
+            p1(Pod) --> n1(Node1)
+            p2(Pod) --> n2(Node2)
+        end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n1,n2,n3,n4,p1,p2,p3 k8s;
+    class p4 plain;
+    class zoneA,zoneB cluster;
+    {{< /mermaid >}}
+
+    {{<mermaid>}}
+    graph BT
+        subgraph "zoneC"
+            n5(Node5)
+        end
+
+    classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+    classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+    classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+    class n5 k8s;
+    class zoneC cluster;
+    {{< /mermaid >}}
 
     and you know that "zoneC" must be excluded. In this case, you can compose the yaml as below, so that "mypod" will be placed onto "zoneB" instead of "zoneC". Similarly `spec.nodeSelector` is also respected.
 

From d8573d9a427e5b8154b842b7a34438af29d8c092 Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 28 Jul 2020 15:00:36 +0100
Subject: [PATCH 407/496] Switch Ingress concept to use MermaidJS diagrams

Replace ASCII-art diagrams with MermaidJS-rendered drawings.
---
 .../concepts/services-networking/ingress.md   | 74 ++++++++++++++-----
 1 file changed, 57 insertions(+), 17 deletions(-)

diff --git a/content/en/docs/concepts/services-networking/ingress.md b/content/en/docs/concepts/services-networking/ingress.md
index 24907f31e2..795a3546b5 100644
--- a/content/en/docs/concepts/services-networking/ingress.md
+++ b/content/en/docs/concepts/services-networking/ingress.md
@@ -29,13 +29,24 @@ For clarity, this guide defines the following terms:
 {{< link text="services" url="/docs/concepts/services-networking/service/" >}} within the cluster.
 Traffic routing is controlled by rules defined on the Ingress resource.
 
-```none
-    internet
-        |
-   [ Ingress ]
-   --|-----|--
-   [ Services ]
-```
+Here is a simple example where an Ingress sends all its traffic to one Service:
+{{< mermaid >}}
+graph LR;
+  client([client])-. Ingress-managed <br> load balancer .->ingress[Ingress];
+  ingress-->|routing rule|service[Service];
+  subgraph cluster
+  ingress;
+  service-->pod1[Pod];
+  service-->pod2[Pod];
+  end
+  classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+  classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+  classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+  class ingress,service,pod1,pod2 k8s;
+  class client plain;
+  class cluster cluster;
+{{</ mermaid >}}
+
 
 An Ingress may be configured to give Services externally-reachable URLs, load balance traffic, terminate SSL / TLS, and offer name-based virtual hosting. An [Ingress controller](/docs/concepts/services-networking/ingress-controllers) is responsible for fulfilling the Ingress, usually with a load balancer, though it may also configure your edge router or additional frontends to help handle the traffic.
 
@@ -274,10 +285,25 @@ A fanout configuration routes traffic from a single IP address to more than one
 based on the HTTP URI being requested. An Ingress allows you to keep the number of load balancers
 down to a minimum. For example, a setup like:
 
-```
-foo.bar.com -> 178.91.123.132 -> / foo    service1:4200
-                                 / bar    service2:8080
-```
+{{< mermaid >}}
+graph LR;
+  client([client])-. Ingress-managed <br> load balancer .->ingress[Ingress, 178.91.123.132];
+  ingress-->|/foo|service1[Service service1:4200];
+  ingress-->|/bar|service2[Service service2:8080];
+  subgraph cluster
+  ingress;
+  service1-->pod1[Pod];
+  service1-->pod2[Pod];
+  service2-->pod3[Pod];
+  service2-->pod4[Pod];
+  end
+  classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+  classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+  classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+  class ingress,service1,service2,pod1,pod2,pod3,pod4 k8s;
+  class client plain;
+  class cluster cluster;
+{{</ mermaid >}}
 
 would require an Ingress such as:
 
@@ -321,11 +347,26 @@ you are using, you may need to create a default-http-backend
 
 Name-based virtual hosts support routing HTTP traffic to multiple host names at the same IP address.
 
-```none
-foo.bar.com --|                 |-> foo.bar.com service1:80
-              | 178.91.123.132  |
-bar.foo.com --|                 |-> bar.foo.com service2:80
-```
+{{< mermaid >}}
+graph LR;
+  client([client])-. Ingress-managed <br> load balancer .->ingress[Ingress, 178.91.123.132];
+  ingress-->|Host: foo.bar.com|service1[Service service1:80];
+  ingress-->|Host: bar.foo.com|service2[Service service2:80];
+  subgraph cluster
+  ingress;
+  service1-->pod1[Pod];
+  service1-->pod2[Pod];
+  service2-->pod3[Pod];
+  service2-->pod4[Pod];
+  end
+  classDef plain fill:#ddd,stroke:#fff,stroke-width:4px,color:#000;
+  classDef k8s fill:#326ce5,stroke:#fff,stroke-width:4px,color:#fff;
+  classDef cluster fill:#fff,stroke:#bbb,stroke-width:2px,color:#326ce5;
+  class ingress,service1,service2,pod1,pod2,pod3,pod4 k8s;
+  class client plain;
+  class cluster cluster;
+{{</ mermaid >}}
+
 
 The following Ingress tells the backing load balancer to route requests based on
 the [Host header](https://tools.ietf.org/html/rfc7230#section-5.4).
@@ -508,4 +549,3 @@ You can expose a Service in multiple ways that don't directly involve the Ingres
 * Learn about the [Ingress API](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#ingress-v1beta1-networking-k8s-io)
 * Learn about [Ingress controllers](/docs/concepts/services-networking/ingress-controllers/)
 * [Set up Ingress on Minikube with the NGINX Controller](/docs/tasks/access-application-cluster/ingress-minikube/)
-

From ed749d19f689b0d2872f8bf33533fe97dfcaa84c Mon Sep 17 00:00:00 2001
From: Celeste Horgan <celeste@cncf.io>
Date: Thu, 3 Sep 2020 11:23:46 -0700
Subject: [PATCH 408/496] Add overflow CSS for mermaid.js diagrams

---
 assets/scss/_custom.scss | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index ebe073a686..6992a5ee3d 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -61,6 +61,15 @@ body.td-404 main .error-details {
   margin-bottom: 0;
 }
 
+/* Global - Mermaid.js diagrams */
+
+.mermaid {
+  overflow: scroll;
+  max-width: 80%;
+  border: 1px solid rgb(222, 226, 230);
+  border-radius: 5px;
+}
+
 /* HEADER */
 
 .td-navbar {
@@ -542,3 +551,5 @@ body.td-documentation {
     }
   }
 }
+
+

From 61fdeb79bfcfd9dc32f2fc7deaed55ab4f99dd0d Mon Sep 17 00:00:00 2001
From: Tim Bannister <tim@scalefactory.com>
Date: Tue, 22 Sep 2020 18:46:53 +0100
Subject: [PATCH 409/496] Switch Mermaid scrollbar to automatic

---
 assets/scss/_custom.scss | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/assets/scss/_custom.scss b/assets/scss/_custom.scss
index 6992a5ee3d..f511e05e3b 100644
--- a/assets/scss/_custom.scss
+++ b/assets/scss/_custom.scss
@@ -64,7 +64,7 @@ body.td-404 main .error-details {
 /* Global - Mermaid.js diagrams */
 
 .mermaid {
-  overflow: scroll;
+  overflow-x: auto;
   max-width: 80%;
   border: 1px solid rgb(222, 226, 230);
   border-radius: 5px;
@@ -552,4 +552,3 @@ body.td-documentation {
   }
 }
 
-

From 5a362c65c3afc1b52fe9dbcff16fb454eed41e79 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Wed, 23 Sep 2020 11:16:13 +0800
Subject: [PATCH 410/496] Optimize Chinese localization owners

---
 OWNERS_ALIASES | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 54d87f0cdf..d445eace5f 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -147,27 +147,28 @@ aliases:
     - sftim
     - zacharysarah
   sig-docs-zh-owners: # Admins for Chinese content
-    - chenopis
+    # chenopis
     - chenrui333
-    - dchen1107
-    - haibinxie
-    - hanjiayao
-    - lichuqiang
+    # dchen1107
+    # haibinxie
+    # hanjiayao
+    # lichuqiang
     - SataQiu
     - tengqm
     - xiangpengzhao
     - xichengliudui
-    - zacharysarah
-    - zhangxiaoyu-zidif
+    # zacharysarah
+    # zhangxiaoyu-zidif
   sig-docs-zh-reviews: # PR reviews for Chinese content
     - chenrui333
+    - howieyuen
     - idealhack
     - SataQiu
     - tanjunchen
     - tengqm
     - xiangpengzhao
     - xichengliudui
-    - zhangxiaoyu-zidif
+    # zhangxiaoyu-zidif
     - pigletfly
   sig-docs-pt-owners: # Admins for Portuguese content
     - femrtnz

From 9a9ff15214ec48ec81e86110c386269e7fd545d4 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Tue, 22 Sep 2020 20:27:54 -0700
Subject: [PATCH 411/496] Update link in page configure-aggregation-layer.md

---
 .../configure-aggregation-layer.md            | 22 +++++++++----------
 1 file changed, 10 insertions(+), 12 deletions(-)

diff --git a/content/zh/docs/tasks/extend-kubernetes/configure-aggregation-layer.md b/content/zh/docs/tasks/extend-kubernetes/configure-aggregation-layer.md
index a37263f949..0db27194c6 100644
--- a/content/zh/docs/tasks/extend-kubernetes/configure-aggregation-layer.md
+++ b/content/zh/docs/tasks/extend-kubernetes/configure-aggregation-layer.md
@@ -16,7 +16,7 @@ weight: 10
 <!-- overview -->
 
 <!--
-Configuring the [aggregation layer](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) allows the Kubernetes apiserver to be extended with additional APIs, which are not part of the core Kubernetes APIs. 
+Configuring the [aggregation layer](/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) allows the Kubernetes apiserver to be extended with additional APIs, which are not part of the core Kubernetes APIs.
 -->
 配置 [聚合层](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/) 允许
 Kubernetes apiserver 使用其它 API 扩展，这些 API 不是核心 Kubernetes API 的一部分。
@@ -26,7 +26,7 @@ Kubernetes apiserver 使用其它 API 扩展，这些 API 不是核心 Kubernete
 {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
 
 <!--
-There are a few setup requirements for getting the aggregation layer working in your environment to support mutual TLS auth between the proxy and extension apiservers. Kubernetes and the kube-apiserver have multiple CAs, so make sure that the proxy is signed by the aggregation layer CA and not by something else, like the master CA. 
+There are a few setup requirements for getting the aggregation layer working in your environment to support mutual TLS auth between the proxy and extension apiservers. Kubernetes and the kube-apiserver have multiple CAs, so make sure that the proxy is signed by the aggregation layer CA and not by something else, like the master CA.
 -->
 {{< note >}}
 要使聚合层在您的环境中正常工作以支持代理服务器和扩展 apiserver 之间的相互 TLS 身份验证，
@@ -165,7 +165,7 @@ note:
 3.Kube Apiserver 使用任何配置的鉴权方法（例如 RBAC）对请求的 URL 鉴权
 
 kube-apiserver / aggregator -> 聚合的 apiserver:
-   
+
 note:
 4.aggregator 使用`--proxy-client-cert-file`，`--proxy-client-key-file`客户端证书/密钥打开与聚合 Apiserver 的连接以保护通道
 
@@ -217,7 +217,7 @@ The Kubernetes apiserver now is prepared to send the request to the extension ap
 
 用户与 Kubernetes apiserver 通信，请求访问 path 。Kubernetes apiserver 使用它的标准认证和授权配置来对用户认证，以及对特定 path 的鉴权。
 
-有关对 Kubernetes 集群认证的概述，请参见 [对集群认证](/docs/reference/access-authn-authz/authentication/)。有关对Kubernetes群集资源的访问鉴权的概述，请参见 [鉴权概述](/zh/docs/reference/access-authn-authz/authorization/)。
+有关对 Kubernetes 集群认证的概述，请参见 [对集群认证](/zh/docs/reference/access-authn-authz/authentication/)。有关对Kubernetes群集资源的访问鉴权的概述，请参见 [鉴权概述](/zh/docs/reference/access-authn-authz/authorization/)。
 
 到目前为止，所有内容都是标准的 Kubernetes API 请求，认证与鉴权。
 
@@ -283,7 +283,7 @@ When started with these options, the Kubernetes apiserver will:
 1. Use them to authenticate to the extension apiserver.
 2. Create a configmap in the `kube-system` namespace called `extension-apiserver-authentication`, in which it will place the CA certificate and the allowed CNs. These in turn can be retrieved by extension apiservers to validate requests.
 
-Note that the same client certificate is used by the Kubernetes apiserver to authenticate against _all_ extension apiservers. It does not create a client certificate per extension apiserver, but rather a single one to authenticate as the Kubernetes apiserver. This same one is reused for all extension apiserver requests. 
+Note that the same client certificate is used by the Kubernetes apiserver to authenticate against _all_ extension apiservers. It does not create a client certificate per extension apiserver, but rather a single one to authenticate as the Kubernetes apiserver. This same one is reused for all extension apiserver requests.
 -->
 使用这些选项启动时，Kubernetes apiserver 将：
 
@@ -309,7 +309,7 @@ These header names are also placed in the `extension-apiserver-authentication` c
 当 Kubernetes apiserver 将请求代理到扩展 apiserver 时，它将向扩展 apiserver 通知原始请求已成功通过其验证的用户名和组。它在其代理请求的 http 标头中提供这些。您必须将要使用的标头名称告知 Kubernetes apiserver。
 
 * 通过`--requestheader-username-headers` 标明用来保存用户名的头部
-* 通过`--requestheader-group-headers` 标明用来保存 group 的头部 
+* 通过`--requestheader-group-headers` 标明用来保存 group 的头部
 * 通过`--requestheader-extra-headers-prefix` 标明用来保存拓展信息前缀的头部
 
 这些标头名称也放置在`extension-apiserver-authentication` 的 configmap 中，因此扩展 apiserver 可以检索和使用它们。
@@ -323,7 +323,7 @@ The extension apiserver, upon receiving a proxied request from the Kubernetes ap
     * Client CA certificate
     * List of allowed names (CNs)
     * Header names for username, group and extra info
-    
+
 2. Check that the TLS connection was authenticated using a client certificate which:
     * Was signed by the CA whose certificate matches the retrieved CA certificate.
     * Has a CN in the list of allowed CNs, unless the list is blank, in which case all CNs are allowed.
@@ -337,7 +337,7 @@ The extension apiserver, upon receiving a proxied request from the Kubernetes ap
     * 客户端 CA 证书
     * 允许名称（CN）列表
     * 用户名，组和其他信息的头部
-    
+
 2.使用以下证书检查 TLS 连接是否已通过认证：
     * 由其证书与检索到的 CA 证书匹配的 CA 签名。
     * 在允许的 CN 列表中有一个 CN，除非列表为空，在这种情况下允许所有 CN。
@@ -359,7 +359,7 @@ In order to have permission to retrieve the configmap, an extension apiserver re
 <!--
 ### Extension Apiserver Authorizes the Request
 
-The extension apiserver now can validate that the user/group retrieved from the headers are authorized to execute the given request. It does so by sending a standard [SubjectAccessReview](/docs/reference/access-authn-authz/authorization/) request to the Kubernetes apiserver. 
+The extension apiserver now can validate that the user/group retrieved from the headers are authorized to execute the given request. It does so by sending a standard [SubjectAccessReview](/docs/reference/access-authn-authz/authorization/) request to the Kubernetes apiserver.
 
 In order for the extension apiserver to be authorized itself to submit the `SubjectAccessReview` request to the Kubernetes apiserver, it needs the correct permissions. Kubernetes includes a default `ClusterRole` named `system:auth-delegator` that has the appropriate permissions. It can be granted to the extension apiserver's service account.
 -->
@@ -504,7 +504,7 @@ at the subpath "/my-path", and to verify the TLS connection against the ServerNa
 path 配置是可选的，默认为`/`。
 
 下面是为可在端口 `1234` 上调用的扩展 apiserver 的配置示例
-服务位于子路径 `/my-path` 下，并针对 ServerName `my-service-name.my-service-namespace.svc` 
+服务位于子路径 `/my-path` 下，并针对 ServerName `my-service-name.my-service-namespace.svc`
 使用自定义的 CA 包来验证 TLS 连接
 使用自定义 CA 捆绑包的`my-service-name.my-service-namespace.svc`。
 
@@ -533,5 +533,3 @@ spec:
 * 使用聚合层[安装扩展 API 服务器](/zh/docs/tasks/extend-kubernetes/setup-extension-api-server/)。
 * 有关高级概述，请参阅[使用聚合层扩展 Kubernetes API](/zh/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation/)。
 * 了解如何 [使用自定义资源扩展 Kubernetes API](/zh/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)。
-
-

From ec9c6d09313f7eade6f2fc150f2dccdc0d253d3a Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Wed, 23 Sep 2020 14:31:30 +0800
Subject: [PATCH 412/496] [zh] relocate
 /zh/docs/concepts/configuration/resource-bin-packing/md, fix 24061

---
 .../resource-bin-packing.md                                       | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/zh/docs/concepts/{configuration => scheduling-eviction}/resource-bin-packing.md (100%)

diff --git a/content/zh/docs/concepts/configuration/resource-bin-packing.md b/content/zh/docs/concepts/scheduling-eviction/resource-bin-packing.md
similarity index 100%
rename from content/zh/docs/concepts/configuration/resource-bin-packing.md
rename to content/zh/docs/concepts/scheduling-eviction/resource-bin-packing.md

From d7382474a0816a501706bb5c4aa9aeca5c4033d7 Mon Sep 17 00:00:00 2001
From: Imer <cqlq2012@gmail.com>
Date: Wed, 23 Sep 2020 15:24:44 +0800
Subject: [PATCH 413/496] Update taint-and-toleration.md

delete

```shell
kubectl taint nodes node1 key:NoSchedule-
```

docs en no that
---
 .../docs/concepts/scheduling-eviction/taint-and-toleration.md | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/content/zh/docs/concepts/scheduling-eviction/taint-and-toleration.md b/content/zh/docs/concepts/scheduling-eviction/taint-and-toleration.md
index 6d5c10b7b4..caef0f6311 100644
--- a/content/zh/docs/concepts/scheduling-eviction/taint-and-toleration.md
+++ b/content/zh/docs/concepts/scheduling-eviction/taint-and-toleration.md
@@ -64,10 +64,6 @@ kubectl taint nodes node1 key:NoSchedule-
 给节点 `node1` 增加一个污点，它的键名是 `key`，键值是 `value`，效果是 `NoSchedule`。
 这表示只有拥有和这个污点相匹配的容忍度的 Pod 才能够被分配到 `node1` 这个节点。
 
-```shell
-kubectl taint nodes node1 key:NoSchedule-
-```
-
 若要移除上述命令所添加的污点，你可以执行：
 
 ```shell

From b1add796f339627fc179a65a6fcfa6f024ed50df Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Mon, 21 Sep 2020 18:39:43 +0800
Subject: [PATCH 414/496] [zh]
 addzh/docs/concepts/cluster-administration/system-logs.md, fix 24025

Update content/zh/docs/concepts/cluster-administration/system-logs.md

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update content/zh/docs/concepts/cluster-administration/system-logs.md

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update content/zh/docs/concepts/cluster-administration/system-logs.md

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update content/zh/docs/concepts/cluster-administration/system-logs.md

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update content/zh/docs/concepts/cluster-administration/system-logs.md

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update content/zh/docs/concepts/cluster-administration/system-logs.md

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update content/zh/docs/concepts/cluster-administration/system-logs.md
---
 .../cluster-administration/system-logs.md     | 209 ++++++++++++++++++
 1 file changed, 209 insertions(+)
 create mode 100644 content/zh/docs/concepts/cluster-administration/system-logs.md

diff --git a/content/zh/docs/concepts/cluster-administration/system-logs.md b/content/zh/docs/concepts/cluster-administration/system-logs.md
new file mode 100644
index 0000000000..14e455641b
--- /dev/null
+++ b/content/zh/docs/concepts/cluster-administration/system-logs.md
@@ -0,0 +1,209 @@
+---
+title: 系统日志
+content_type: concept
+weight: 60
+---
+<!-- 
+reviewers:
+- dims
+- 44past4
+title: System Logs
+content_type: concept
+weight: 60
+-->
+
+<!-- overview -->
+
+<!--
+System component logs record events happening in cluster, which can be very useful for debugging.
+You can configure log verbosity to see more or less detail.
+Logs can be as coarse-grained as showing errors within a component, or as fine-grained as showing step-by-step traces of events (like HTTP access logs, pod state changes, controller actions, or scheduler decisions).
+-->
+系统组件的日志记录集群中发生的事件，这对于调试非常有用。
+你可以配置日志的精细度，以展示更多或更少的细节。
+日志可以是粗粒度的，如只显示组件内的错误，
+也可以是细粒度的，如显示事件的每一个跟踪步骤（比如 HTTP 访问日志、pod 状态更新、控制器动作或调度器决策）。
+
+<!-- body -->
+
+## Klog
+
+<!--
+klog is the Kubernetes logging library. [klog](https://github.com/kubernetes/klog)
+generates log messages for the Kubernetes system components.
+
+For more information about klog configuration, see the [Command line tool reference](/docs/reference/command-line-tools-reference/).
+
+An example of the klog native format:
+-->
+klog 是 Kubernetes 的日志库。 
+[klog](https://github.com/kubernetes/klog) 
+为 Kubernetes 系统组件生成日志消息。
+
+有关 klog 配置的更多信息，请参见[命令行工具参考](/zh/docs/reference/command-line-tools-reference/)。
+
+klog 原始格式的示例：
+```
+I1025 00:15:15.525108       1 httplog.go:79] GET /api/v1/namespaces/kube-system/pods/metrics-server-v0.3.1-57c75779f-9p8wg: (1.512ms) 200 [pod_nanny/v0.0.0 (linux/amd64) kubernetes/$Format 10.56.1.19:51756]
+```
+
+<!-- 
+### Structured Logging 
+-->
+### 结构化日志
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+<!--
+Migration to structured log messages is an ongoing process. Not all log messages are structured in this version. When parsing log files, you must also handle unstructured log messages.
+
+Log formatting and value serialization are subject to change.
+-->
+{{<warning>}}
+到结构化日志消息的迁移是一个持续的过程。
+在此版本中，并非所有日志消息都是结构化的。
+解析日志文件时，你也必须要处理非结构化日志消息。
+
+日志格式和值的序列化可能会发生变化。
+{{< /warning>}}
+
+<!--
+Structured logging is a effort to introduce a uniform structure in log messages allowing for easy extraction of information, making logs easier and cheaper to store and process.
+New message format is backward compatible and enabled by default.
+
+Format of structured logs:
+-->
+结构化日志记录旨在日志消息中引入统一结构，以方便提取信息，使日志的存储和处理更容易、成本更低。
+新的消息格式向后兼容，并默认启用。
+
+结构化日志的格式：
+```
+<klog header> "<message>" <key1>="<value1>" <key2>="<value2>" ...
+```
+
+<!-- Example: -->
+示例：
+```
+I1025 00:15:15.525108       1 controller_utils.go:116] "Pod status updated" pod="kube-system/kubedns" status="ready"
+```
+
+
+<!--
+### JSON log format
+-->
+### JSON 日志格式
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+<!--
+JSON output does not support many standard klog flags. For list of unsupported klog flags, see the [Command line tool reference](/docs/reference/command-line-tools-reference/).
+
+Not all logs are guaranteed to be written in JSON format (for example, during process start). If you intend to parse logs, make sure you can handle log lines that are not JSON as well.
+
+Field names and JSON serialization are subject to change.
+-->
+{{<warning >}}
+JSON 输出并不支持太多标准 klog 参数。
+对于不受支持的 klog 参数的列表，请参见
+[命令行工具参考](/zh/docs/reference/command-line-tools-reference/)。
+
+并不是所有日志都保证写成 JSON 格式（例如，在进程启动期间）。
+如果你打算解析日志，请确保可以处理非 JSON 格式的日志行。
+
+字段名和 JSON 序列化可能会发生变化。
+{{< /warning >}}
+
+<!--
+The `--logging-format=json` flag changes the format of logs from klog native format to JSON format.
+Example of JSON log format (pretty printed):
+-->
+`--logging-format=json` 参数将日志格式从 klog 原生格式改为 JSON 格式。
+JSON 日志格式示例（美化输出）：
+```json
+{
+   "ts": 1580306777.04728,
+   "v": 4,
+   "msg": "Pod status updated",
+   "pod":{
+      "name": "nginx-1",
+      "namespace": "default"
+   },
+   "status": "ready"
+}
+```
+
+<!--
+Keys with special meaning:
+* `ts` - timestamp as Unix time (required, float)
+* `v` - verbosity (required, int, default 0)
+* `err` - error string (optional, string)
+* `msg` - message (required, string)
+
+List of components currently supporting JSON format:
+-->
+具有特殊意义的 key：
+* `ts` - Unix 时间风格的时间戳（必选项，浮点值）
+* `v` - 精细度（必选项，整数，默认值 0）
+* `err` - 错误字符串（可选项，字符串）
+* `msg` - 消息（必选项，字符串）
+
+当前支持JSON格式的组件列表：
+* {{< glossary_tooltip term_id="kube-controller-manager" text="kube-controller-manager" >}}
+* {{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}}
+* {{< glossary_tooltip term_id="kube-scheduler" text="kube-scheduler" >}}
+* {{< glossary_tooltip term_id="kubelet" text="kubelet" >}}
+
+<!--
+### Log verbosity level
+
+The `-v` flag controls log verbosity. Increasing the value increases the number of logged events. Decreasing the value decreases the number of logged events.
+Increasing verbosity settings logs increasingly less severe events. A verbosity setting of 0 logs only critical events.
+-->
+### 日志精细度级别
+
+参数 `-v` 控制日志的精细度。增大该值会增大日志事件的数量。
+减小该值可以减小日志事件的数量。
+增大精细度会记录更多的不太严重的事件。
+精细度设置为 0 时只记录关键（critical）事件。
+
+<!--
+### Log location
+
+There are two types of system components: those that run in a container and those
+that do not run in a container. For example:
+
+* The Kubernetes scheduler and kube-proxy run in a container.
+* The kubelet and container runtime, for example Docker, do not run in containers.
+-->
+### 日志位置
+
+有两种类型的系统组件：运行在容器中的组件和不运行在容器中的组件。例如：
+* Kubernetes 调度器和 kube-proxy 在容器中运行。
+* kubelet 和容器运行时，例如 Docker，不在容器中运行。
+
+<!--
+On machines with systemd, the kubelet and container runtime write to journald.
+Otherwise, they write to `.log` files in the `/var/log` directory.
+System components inside containers always write to `.log` files in the `/var/log` directory,
+bypassing the default logging mechanism.
+Similar to the container logs, you should rotate system component logs in the `/var/log` directory.
+In Kubernetes clusters created by the `kube-up.sh` script, log rotation is configured by the `logrotate` tool.
+The `logrotate` tool rotates logs daily, or once the log size is greater than 100MB.
+-->
+在使用 systemd 的系统中，kubelet 和容器运行时写入 journald。
+在别的系统中，日志写入 `/var/log` 目录下的 `.log` 文件中。
+容器中的系统组件总是绕过默认的日志记录机制，写入 `/var/log` 目录下的 `.log` 文件。
+与容器日志类似，你应该轮转 `/var/log` 目录下系统组件日志。
+在 `kube-up.sh` 脚本创建的 Kubernetes 集群中，日志轮转由 `logrotate` 工具配置。
+ `logrotate` 工具，每天或者当日志大于 100MB 时，轮转日志。
+
+## {{% heading "whatsnext" %}}
+
+<!--
+* Read about the [Kubernetes Logging Architecture](/docs/concepts/cluster-administration/logging/)
+* Read about [Structured Logging](https://github.com/kubernetes/enhancements/tree/master/keps/sig-instrumentation/1602-structured-logging)
+* Read about the [Conventions for logging severity](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md)
+-->
+* 阅读 [Kubernetes 日志架构](/zh/docs/concepts/cluster-administration/logging/)
+* 阅读 [Structured Logging](https://github.com/kubernetes/enhancements/tree/master/keps/sig-instrumentation/1602-structured-logging)
+* 阅读 [Conventions for logging severity](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md)

From fda4f5b58e1e01292a77e8b2411a3cad2a461d16 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Wed, 23 Sep 2020 01:41:51 -0700
Subject: [PATCH 415/496] Update link in page authorization

---
 content/zh/docs/reference/access-authn-authz/authorization.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/reference/access-authn-authz/authorization.md b/content/zh/docs/reference/access-authn-authz/authorization.md
index 3c2a08a817..49c8616b9a 100644
--- a/content/zh/docs/reference/access-authn-authz/authorization.md
+++ b/content/zh/docs/reference/access-authn-authz/authorization.md
@@ -29,7 +29,7 @@ cloud-provider-wide access control systems which may handle other APIs besides
 the Kubernetes API. -->
 
 在 Kubernetes 中，您必须在授权（授予访问权限）之前进行身份验证（登录），有关身份验证的信息，
-请参阅 [访问控制概述](/docs/reference/access-authn-authz/controlling-access/).
+请参阅 [访问控制概述](/zh/docs/reference/access-authn-authz/controlling-access/).
 
 Kubernetes 期望 REST API 请求中常见的属性。
 这意味着 Kubernetes 授权适用于现有的组织范围或云提供商范围的访问控制系统，

From 41547dc0156ea17e2d50ab8167a36dec66295270 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Wed, 23 Sep 2020 02:11:28 -0700
Subject: [PATCH 416/496] Update link controlling-access

---
 .../docs/reference/access-authn-authz/controlling-access.md   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/controlling-access.md b/content/zh/docs/reference/access-authn-authz/controlling-access.md
index edfc3aab85..c33f27a4ef 100644
--- a/content/zh/docs/reference/access-authn-authz/controlling-access.md
+++ b/content/zh/docs/reference/access-authn-authz/controlling-access.md
@@ -5,7 +5,7 @@ approvers:
 title: Kubernetes API 访问控制
 ---
 
-用户通过 `kubectl`、客户端库或者通过发送 REST 请求[访问 API](/docs/user-guide/accessing-the-cluster)。 用户和 [Kubernetes 服务账户](/docs/tasks/configure-pod-container/configure-service-account/) 都可以被授权进行 API 访问。
+用户通过 `kubectl`、客户端库或者通过发送 REST 请求[访问 API](/zh/docs/user-guide/accessing-the-cluster)。 用户和 [Kubernetes 服务账户](/zh/docs/tasks/configure-pod-container/configure-service-account/) 都可以被授权进行 API 访问。
 请求到达 API 服务器后会经过几个阶段，具体说明如图：
 
 ![Diagram of request handling steps for Kubernetes API request](/images/docs/admin/access-control-overview.svg)
@@ -73,7 +73,7 @@ Bootstrap Tokens，以及 JWT Tokens（用于服务账户）。
   }
 }
 ```
-如果 Bob 对 `projectCaribou` 命名空间下的对象发起一个写（`create` 或者 `update`）请求，那么它的授权会被拒绝。 如果 Bob 请求读取 （`get`）其他命名空间，例如 `projectFish` 下的对象，其授权也会被拒绝。 
+如果 Bob 对 `projectCaribou` 命名空间下的对象发起一个写（`create` 或者 `update`）请求，那么它的授权会被拒绝。 如果 Bob 请求读取 （`get`）其他命名空间，例如 `projectFish` 下的对象，其授权也会被拒绝。
 
 Kubernetes 的授权要求使用通用的 REST 属性与现有的组织或云服务提供商的访问控制系统进行交互。 采用 REST 格式是必要的，因为除 Kubernetes 外，这些访问控制系统还可能与其他的 API 进行交互。
 

From 3af530a20d2e4ad1dfad33507d00d8275b045d62 Mon Sep 17 00:00:00 2001
From: jybarnes <jybarnes21@gmail.com>
Date: Wed, 23 Sep 2020 11:32:25 +0900
Subject: [PATCH 417/496] Fix typo

---
 content/en/docs/reference/using-api/health-checks.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/using-api/health-checks.md b/content/en/docs/reference/using-api/health-checks.md
index a7be3b267f..e198b3d2d9 100644
--- a/content/en/docs/reference/using-api/health-checks.md
+++ b/content/en/docs/reference/using-api/health-checks.md
@@ -94,7 +94,7 @@ The output show that the `etcd` check is excluded:
 {{< feature-state state="alpha" >}}
 
 Each individual health check exposes an http endpoint and could can be checked individually.
-The schema for the individual health checks is `/livez/<healthcheck-name>` where `livez` and `readyz` and be used to indicate if you want to check thee liveness or the readiness of the API server.
+The schema for the individual health checks is `/livez/<healthcheck-name>` where `livez` and `readyz` and be used to indicate if you want to check the liveness or the readiness of the API server.
 The `<healthcheck-name>` path can be discovered using the `verbose` flag from above and take the path between `[+]` and `ok`.
 These individual health checks should not be consumed by machines but can be helpful for a human operator to debug a system:
 

From 6e62a7803aa19b0ee051c0fb7505508772a006e0 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Wed, 23 Sep 2020 03:01:49 -0700
Subject: [PATCH 418/496] update link in page access-cluster

---
 .../zh/docs/tasks/access-application-cluster/access-cluster.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/access-cluster.md b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
index d87ec93adc..cbf2c64633 100644
--- a/content/zh/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
@@ -71,7 +71,7 @@ curl or wget, or a browser, there are several ways to locate and authenticate:
     - Works with some types of client code that are confused by using a proxy.
     - Need to import a root cert into your browser to protect against MITM.
 -->
-有许多 [例子](/docs/user-guide/kubectl-cheatsheet) 介绍了如何使用 kubectl，可以在 [kubectl手册](/docs/user-guide/kubectl-overview) 中找到更完整的文档。
+有许多 [例子](/zh/docs/user-guide/kubectl-cheatsheet) 介绍了如何使用 kubectl，可以在 [kubectl手册](/zh/docs/user-guide/kubectl-overview) 中找到更完整的文档。
 
 ## 直接访问 REST API
 Kubectl 处理 apiserver 的定位和身份验证。

From 53d3f20548d73eb811aa843516f212900980212b Mon Sep 17 00:00:00 2001
From: atomerz <atomerz@users.noreply.github.com>
Date: Wed, 23 Sep 2020 15:37:20 +0330
Subject: [PATCH 419/496] Update guestbook-logs-metrics-with-elk.md

The description was confusing. Moved around the text and removed duplicated/unnecessary parts.
---
 .../guestbook-logs-metrics-with-elk.md           | 16 ++++------------
 1 file changed, 4 insertions(+), 12 deletions(-)

diff --git a/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md b/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
index 0c4964a17f..21103fd902 100644
--- a/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
+++ b/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
@@ -60,23 +60,15 @@ kubectl create clusterrolebinding cluster-admin-binding \
 ## Install kube-state-metrics
 
 Kubernetes [*kube-state-metrics*](https://github.com/kubernetes/kube-state-metrics) is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.  Metricbeat reports these metrics.  Add kube-state-metrics to the Kubernetes cluster that the guestbook is running in.
+```shell
+git clone https://github.com/kubernetes/kube-state-metrics.git kube-state-metrics
+kubectl apply -f kube-state-metrics/examples/standard
+```
 
 ### Check to see if kube-state-metrics is running
 ```shell
 kubectl get pods --namespace=kube-system | grep kube-state
 ```
-### Install kube-state-metrics if needed
-
-```shell
-git clone https://github.com/kubernetes/kube-state-metrics.git kube-state-metrics
-kubectl apply -f kube-state-metrics/examples/standard
-kubectl get pods --namespace=kube-system | grep kube-state-metrics
-```
-Verify that kube-state-metrics is running and ready
-```shell
-kubectl get pods -n kube-system -l app.kubernetes.io/name=kube-state-metrics
-```
-
 Output:
 ```shell
 NAME                                 READY   STATUS    RESTARTS   AGE

From f0bd0a535fd0042030ef2d827e27543beea3b8c1 Mon Sep 17 00:00:00 2001
From: atomerz <atomerz@users.noreply.github.com>
Date: Wed, 23 Sep 2020 17:49:25 +0330
Subject: [PATCH 420/496] Update
 content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../stateless-application/guestbook-logs-metrics-with-elk.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md b/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
index 21103fd902..de67b9eab3 100644
--- a/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
+++ b/content/en/docs/tutorials/stateless-application/guestbook-logs-metrics-with-elk.md
@@ -67,7 +67,7 @@ kubectl apply -f kube-state-metrics/examples/standard
 
 ### Check to see if kube-state-metrics is running
 ```shell
-kubectl get pods --namespace=kube-system | grep kube-state
+kubectl get pods --namespace=kube-system -l app.kubernetes.io/name=kube-state-metrics
 ```
 Output:
 ```shell

From 8c626d69d31f6648ad992c17902931c640ec57c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dalibor=20Karlovi=C4=87?= <dalibor@flexolabs.io>
Date: Wed, 23 Sep 2020 18:36:24 +0200
Subject: [PATCH 421/496] Make the dashboard URL a clickable link

---
 .../docs/tasks/access-application-cluster/web-ui-dashboard.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md
index 7bfcf03ebd..47cec90f26 100644
--- a/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/en/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -55,7 +55,7 @@ You can access Dashboard using the kubectl command-line tool by running the foll
 kubectl proxy
 ```
 
-Kubectl will make Dashboard available at http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.
+Kubectl will make Dashboard available at [http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/](http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/).
 
 The UI can _only_ be accessed from the machine where the command is executed. See `kubectl proxy --help` for more options.
 

From 8e66f243192de58946a39e93453313853c8d7f5f Mon Sep 17 00:00:00 2001
From: Zane Bitter <zbitter@redhat.com>
Date: Wed, 23 Sep 2020 15:46:19 -0400
Subject: [PATCH 422/496] Fix grammatical error

---
 .../en/docs/concepts/services-networking/network-policies.md    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md
index 21f9f596ce..774d7b7808 100644
--- a/content/en/docs/concepts/services-networking/network-policies.md
+++ b/content/en/docs/concepts/services-networking/network-policies.md
@@ -219,7 +219,7 @@ When the feature gate is enabled, you can set the `protocol` field of a NetworkP
 You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports SCTP protocol NetworkPolicies.
 {{< /note >}}
 
-# What you CAN'T do with network policy's (at least, not yet)
+# What you CAN'T do with network policies (at least, not yet)
 
 As of Kubernetes 1.20, the following functionality does not exist in the NetworkPolicy API, but you might be able to implement workarounds using Operating System components (such as SELinux, OpenVSwitch, IPTables, and so on) or Layer 7 technologies (Ingress controllers, Service Mesh implementations) or admission controllers.  In case you are new to network security in Kubernetes, its worth noting that the following User Stories cannot (yet) be implemented using the NetworkPolicy API.  Some (but not all) of these user stories are actively being discussed for future releases of the NetworkPolicy API.
 

From 79e9ccd03b077d055b4d8196e175d393d309327e Mon Sep 17 00:00:00 2001
From: Wenhao Xu <34877512+Wenhao-Xu@users.noreply.github.com>
Date: Thu, 24 Sep 2020 10:00:23 +0800
Subject: [PATCH 423/496] Update images.md

---
 content/zh/docs/concepts/containers/images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/containers/images.md b/content/zh/docs/concepts/containers/images.md
index 946c74ce77..b09148b47e 100644
--- a/content/zh/docs/concepts/containers/images.md
+++ b/content/zh/docs/concepts/containers/images.md
@@ -81,7 +81,7 @@ Instead, specify a meaningful tag such as `v1.42.0`.
 -->
 {{< caution >}}
 你要避免在生产环境中使用 `latest` 标签，因为这会使得跟踪所运行的镜像版本变得
-非常困难，同时也很难会滚到之前运行良好的版本。
+非常困难，同时也很难回滚到之前运行良好的版本。
 
 正确的做法恰恰相反，你应该指定一个有意义的标签，如 `v1.42.0`。
 {{< /caution >}}

From 0f2cad4657ea7a452af3b3459dcf95d265095d2f Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Thu, 24 Sep 2020 11:00:57 +0700
Subject: [PATCH 424/496] Translate glossary for PersistentVolume into Bahasa

---
 .../reference/glossary/persistent-volume.md   | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/persistent-volume.md

diff --git a/content/id/docs/reference/glossary/persistent-volume.md b/content/id/docs/reference/glossary/persistent-volume.md
new file mode 100644
index 0000000000..4d9537b012
--- /dev/null
+++ b/content/id/docs/reference/glossary/persistent-volume.md
@@ -0,0 +1,20 @@
+---
+title: Persistent Volume
+id: persistent-volume
+date: 2018-04-12
+full_link: /docs/concepts/storage/persistent-volumes/
+short_description: >
+  Sebuat objek API yang merepresentasikan bagian penyimpanan pada klaster. Tersedia sebagai sumber daya umum yang dapat dipasang (_pluggable_) yang tetap bertahan bahkan di luar siklus hidup suatu Pod.
+
+aka:
+tags:
+- core-object
+- storage
+---
+Sebuat objek API yang merepresentasikan bagian penyimpanan pada klaster. Tersedia sebagai sumber daya umum yang dapat dipasang (_pluggable_) yang tetap bertahan bahkan di luar siklus hidup suatu {{< glossary_tooltip text="Pod" term_id="pod" >}}.
+
+<!--more-->
+
+PersistentVolume (PV) menyediakan suatu API yang mengabstraksi detail tentang bagaimana penyimpanan disediakan dari cara penggunaannya.
+PV digunakan secara langsung pada skenario di mana penyimpanan dapat dibuat terlebih dahulu (penyediaan statis).
+Untuk skenario yang membutuhkan penyimpanan sesuai permintaan (penyediaan dinamis), maka yang dapat digunakan sebagai penggantinya adalah PersistentVolumeClaim (PV).

From 0a71a53d196d2f40eec844fa80c9a82f5ab4f416 Mon Sep 17 00:00:00 2001
From: xieyanker <xjsisnice@gmail.com>
Date: Thu, 24 Sep 2020 14:05:05 +0800
Subject: [PATCH 425/496] Fix some format error

---
 .../docs/concepts/storage/storage-classes.md  | 52 ++++++++++---------
 1 file changed, 28 insertions(+), 24 deletions(-)

diff --git a/content/zh/docs/concepts/storage/storage-classes.md b/content/zh/docs/concepts/storage/storage-classes.md
index 91761b546e..71b294d5f3 100644
--- a/content/zh/docs/concepts/storage/storage-classes.md
+++ b/content/zh/docs/concepts/storage/storage-classes.md
@@ -668,10 +668,11 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
       diskformat: zeroedthick
     ```
 
+    `diskformat`: `thin`, `zeroedthick` 和 `eagerzeroedthick`。默认值: `"thin"`。
+
 <!--
     `diskformat`: `thin`, `zeroedthick` and `eagerzeroedthick`. Default: `"thin"`.
- -->
-    `diskformat`: `thin`, `zeroedthick` 和 `eagerzeroedthick`。默认值: `"thin"`。
+-->
 
 <!--
 2. Create a StorageClass with a disk format on a user specified datastore.
@@ -689,6 +690,12 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
         datastore: VSANDatastore
     ```
 
+    `datastore`：用户也可以在 StorageClass 中指定数据存储。
+    卷将在 storage class 中指定的数据存储上创建，在这种情况下是 `VSANDatastore`。
+    该字段是可选的。
+    如果未指定数据存储，则将在用于初始化 vSphere Cloud Provider 的 vSphere 
+    配置文件中指定的数据存储上创建该卷。
+
 <!--
     `datastore`: The user can also specify the datastore in the StorageClass.
     The volume will be created on the datastore specified in the storage class,
@@ -697,17 +704,31 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
     specified in the vSphere config file used to initialize the vSphere Cloud
     Provider.
 -->
-    `datastore`：用户也可以在 StorageClass 中指定数据存储。
-    卷将在 storage class 中指定的数据存储上创建，在这种情况下是 `VSANDatastore`。
-    该字段是可选的。
-    如果未指定数据存储，则将在用于初始化 vSphere Cloud Provider 的 vSphere 
-    配置文件中指定的数据存储上创建该卷。
 
 <!--
 3. Storage Policy Management inside kubernetes
 -->
 3. Kubernetes 中的存储策略管理
 
+    * 使用现有的 vCenter SPBM 策略
+
+        vSphere 用于存储管理的最重要特性之一是基于策略的管理。
+        基于存储策略的管理（SPBM）是一个存储策略框架，提供单一的统一控制平面的
+        跨越广泛的数据服务和存储解决方案。
+        SPBM 使能 vSphere 管理员克服先期的存储配置挑战，如容量规划，差异化服务等级和管理容量空间。
+
+        SPBM 策略可以在 StorageClass 中使用 `storagePolicyName` 参数声明。
+
+    * Kubernetes 内的 Virtual SAN 策略支持
+
+        Vsphere Infrastructure（VI）管理员将能够在动态卷配置期间指定自定义 Virtual SAN
+        存储功能。您现在可以定义存储需求，例如性能和可用性，当动态卷供分配时会以存储功能的形式提供。
+        存储功能需求会转换为 Virtual SAN 策略，然后当持久卷（虚拟磁盘）在创建时，
+        会将其推送到 Virtual SAN 层。虚拟磁盘分布在 Virtual SAN 数据存储中以满足要求。
+
+        更多有关 persistent volume 管理的存储策略的详细信息，
+        您可以参考 [基于存储策略的动态分配卷管理](https://vmware.github.io/vsphere-storage-for-kubernetes/documentation/policy-based-mgmt.html)。
+
 <!--
     * Using existing vCenter SPBM policy
 
@@ -722,14 +743,6 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
         The SPBM policies can be specified in the StorageClass using the
         `storagePolicyName` parameter.
 -->
-    * 使用现有的 vCenter SPBM 策略
-
-        vSphere 用于存储管理的最重要特性之一是基于策略的管理。
-        基于存储策略的管理（SPBM）是一个存储策略框架，提供单一的统一控制平面的
-        跨越广泛的数据服务和存储解决方案。
-        SPBM 使能 vSphere 管理员克服先期的存储配置挑战，如容量规划，差异化服务等级和管理容量空间。
-
-        SPBM 策略可以在 StorageClass 中使用 `storagePolicyName` 参数声明。
 
 <!--
     * Virtual SAN policy support inside Kubernetes
@@ -747,15 +760,6 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
         for more details on how to use storage policies for persistent volumes
         management.
 -->
-    * Kubernetes 内的 Virtual SAN 策略支持
-
-        Vsphere Infrastructure（VI）管理员将能够在动态卷配置期间指定自定义 Virtual SAN
-        存储功能。您现在可以定义存储需求，例如性能和可用性，当动态卷供分配时会以存储功能的形式提供。
-        存储功能需求会转换为 Virtual SAN 策略，然后当持久卷（虚拟磁盘）在创建时，
-        会将其推送到 Virtual SAN 层。虚拟磁盘分布在 Virtual SAN 数据存储中以满足要求。
-
-        更多有关 persistent volume 管理的存储策略的详细信息，
-        您可以参考 [基于存储策略的动态分配卷管理](https://vmware.github.io/vsphere-storage-for-kubernetes/documentation/policy-based-mgmt.html)。
 
 <!--
 There are few

From d93ab4004d134ad3bd7bdaf3ea54daedbc03468f Mon Sep 17 00:00:00 2001
From: ChenjunZou <stephen.zcj@gmail.com>
Date: Thu, 24 Sep 2020 14:25:20 +0800
Subject: [PATCH 426/496] Update service.md

fix a mispelled keyword.
---
 content/zh/docs/concepts/services-networking/service.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index 2964583c13..65f65d4f69 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -197,7 +197,7 @@ As many Services need to expose more than one port, Kubernetes supports multiple
 port definitions on a Service object.
 Each port definition can have the same `protocol`, or a different one.
 -->
-Pod 中的端口定义是有名字的，你可以在服务的 `targetTarget` 属性中引用这些名称。
+Pod 中的端口定义是有名字的，你可以在服务的 `targetPort` 属性中引用这些名称。
 即使服务中使用单个配置的名称混合使用 Pod，并且通过不同的端口号提供相同的网络协议，此功能也可以使用。
 这为部署和发展服务提供了很大的灵活性。
 例如，您可以更改Pods在新版本的后端软件中公开的端口号，而不会破坏客户端。

From 9062c42e32bb5c0d53786d9444bf65fc951bf4f3 Mon Sep 17 00:00:00 2001
From: xieyanker <xjsisnice@gmail.com>
Date: Thu, 24 Sep 2020 14:38:38 +0800
Subject: [PATCH 427/496] Fix some format error

---
 .../docs/concepts/storage/storage-classes.md  | 72 +++++++++----------
 1 file changed, 36 insertions(+), 36 deletions(-)

diff --git a/content/zh/docs/concepts/storage/storage-classes.md b/content/zh/docs/concepts/storage/storage-classes.md
index 71b294d5f3..b124e0ad76 100644
--- a/content/zh/docs/concepts/storage/storage-classes.md
+++ b/content/zh/docs/concepts/storage/storage-classes.md
@@ -668,11 +668,11 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
       diskformat: zeroedthick
     ```
 
-    `diskformat`: `thin`, `zeroedthick` 和 `eagerzeroedthick`。默认值: `"thin"`。
-
-<!--
+    <!--
     `diskformat`: `thin`, `zeroedthick` and `eagerzeroedthick`. Default: `"thin"`.
--->
+    -->
+
+    `diskformat`: `thin`, `zeroedthick` 和 `eagerzeroedthick`。默认值: `"thin"`。
 
 <!--
 2. Create a StorageClass with a disk format on a user specified datastore.
@@ -690,46 +690,27 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
         datastore: VSANDatastore
     ```
 
+    <!--
+    `datastore`: The user can also specify the datastore in the StorageClass.
+    The volume will be created on the datastore specified in the storage class,
+    which in this case is `VSANDatastore`. This field is optional. If the
+    datastore is not specified, then the volume will be created on the datastore
+    specified in the vSphere config file used to initialize the vSphere Cloud
+    Provider.
+    -->
+
     `datastore`：用户也可以在 StorageClass 中指定数据存储。
     卷将在 storage class 中指定的数据存储上创建，在这种情况下是 `VSANDatastore`。
     该字段是可选的。
     如果未指定数据存储，则将在用于初始化 vSphere Cloud Provider 的 vSphere 
     配置文件中指定的数据存储上创建该卷。
 
-<!--
-    `datastore`: The user can also specify the datastore in the StorageClass.
-    The volume will be created on the datastore specified in the storage class,
-    which in this case is `VSANDatastore`. This field is optional. If the
-    datastore is not specified, then the volume will be created on the datastore
-    specified in the vSphere config file used to initialize the vSphere Cloud
-    Provider.
--->
-
 <!--
 3. Storage Policy Management inside kubernetes
 -->
 3. Kubernetes 中的存储策略管理
 
-    * 使用现有的 vCenter SPBM 策略
-
-        vSphere 用于存储管理的最重要特性之一是基于策略的管理。
-        基于存储策略的管理（SPBM）是一个存储策略框架，提供单一的统一控制平面的
-        跨越广泛的数据服务和存储解决方案。
-        SPBM 使能 vSphere 管理员克服先期的存储配置挑战，如容量规划，差异化服务等级和管理容量空间。
-
-        SPBM 策略可以在 StorageClass 中使用 `storagePolicyName` 参数声明。
-
-    * Kubernetes 内的 Virtual SAN 策略支持
-
-        Vsphere Infrastructure（VI）管理员将能够在动态卷配置期间指定自定义 Virtual SAN
-        存储功能。您现在可以定义存储需求，例如性能和可用性，当动态卷供分配时会以存储功能的形式提供。
-        存储功能需求会转换为 Virtual SAN 策略，然后当持久卷（虚拟磁盘）在创建时，
-        会将其推送到 Virtual SAN 层。虚拟磁盘分布在 Virtual SAN 数据存储中以满足要求。
-
-        更多有关 persistent volume 管理的存储策略的详细信息，
-        您可以参考 [基于存储策略的动态分配卷管理](https://vmware.github.io/vsphere-storage-for-kubernetes/documentation/policy-based-mgmt.html)。
-
-<!--
+    <!--
     * Using existing vCenter SPBM policy
 
         One of the most important features of vSphere for Storage Management is
@@ -742,9 +723,18 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
 
         The SPBM policies can be specified in the StorageClass using the
         `storagePolicyName` parameter.
--->
+    -->
 
-<!--
+    * 使用现有的 vCenter SPBM 策略
+
+        vSphere 用于存储管理的最重要特性之一是基于策略的管理。
+        基于存储策略的管理（SPBM）是一个存储策略框架，提供单一的统一控制平面的
+        跨越广泛的数据服务和存储解决方案。
+        SPBM 使能 vSphere 管理员克服先期的存储配置挑战，如容量规划，差异化服务等级和管理容量空间。
+
+        SPBM 策略可以在 StorageClass 中使用 `storagePolicyName` 参数声明。
+
+    <!--
     * Virtual SAN policy support inside Kubernetes
 
         Vsphere Infrastructure (VI) Admins will have the ability to specify custom
@@ -759,7 +749,17 @@ OpenStack 的内部驱动程序已经被弃用。请使用 [OpenStack 的外部
         You can see [Storage Policy Based Management for dynamic provisioning of volumes](https://vmware.github.io/vsphere-storage-for-kubernetes/documentation/policy-based-mgmt.html)
         for more details on how to use storage policies for persistent volumes
         management.
--->
+    -->
+
+    * Kubernetes 内的 Virtual SAN 策略支持
+
+        Vsphere Infrastructure（VI）管理员将能够在动态卷配置期间指定自定义 Virtual SAN
+        存储功能。您现在可以定义存储需求，例如性能和可用性，当动态卷供分配时会以存储功能的形式提供。
+        存储功能需求会转换为 Virtual SAN 策略，然后当持久卷（虚拟磁盘）在创建时，
+        会将其推送到 Virtual SAN 层。虚拟磁盘分布在 Virtual SAN 数据存储中以满足要求。
+
+        更多有关 persistent volume 管理的存储策略的详细信息，
+        您可以参考 [基于存储策略的动态分配卷管理](https://vmware.github.io/vsphere-storage-for-kubernetes/documentation/policy-based-mgmt.html)。
 
 <!--
 There are few

From 5586c71b662ec274a97cb9b1fc9ce85865308c43 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Thu, 24 Sep 2020 11:50:17 +0800
Subject: [PATCH 428/496] [zh] add page:
 /zh/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity/
  fix 24086 make change according to tengqm's comment

---
 .../assign-pods-nodes-using-node-affinity.md  | 186 ++++++++++++++++++
 1 file changed, 186 insertions(+)
 create mode 100644 content/zh/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity.md

diff --git a/content/zh/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity.md b/content/zh/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity.md
new file mode 100644
index 0000000000..159468a06b
--- /dev/null
+++ b/content/zh/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity.md
@@ -0,0 +1,186 @@
+---
+title: 用节点亲和性把 Pods 分配到节点
+min-kubernetes-server-version: v1.10
+content_type: task
+weight: 120
+---
+<!--
+title: Assign Pods to Nodes using Node Affinity
+min-kubernetes-server-version: v1.10
+content_type: task
+weight: 120
+-->
+
+<!-- overview -->
+<!--
+This page shows how to assign a Kubernetes Pod to a particular node using Node Affinity in a
+Kubernetes cluster.
+-->
+本页展示在 Kubernetes 集群中，如何使用节点亲和性把 Kubernetes Pod 分配到特定节点。
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+
+
+<!-- steps -->
+
+<!--
+## Add a label to a node
+
+1. List the nodes in your cluster, along with their labels:
+-->
+## 给节点添加标签
+
+1. 列出集群中的节点及其标签：
+
+    ```shell
+    kubectl get nodes --show-labels
+    ```
+    <!--
+    The output is similar to this:
+    -->
+    输出类似于此：
+
+    ```
+    NAME      STATUS    ROLES    AGE     VERSION        LABELS
+    worker0   Ready     <none>   1d      v1.13.0        ...,kubernetes.io/hostname=worker0
+    worker1   Ready     <none>   1d      v1.13.0        ...,kubernetes.io/hostname=worker1
+    worker2   Ready     <none>   1d      v1.13.0        ...,kubernetes.io/hostname=worker2
+    ```
+    <!--
+    1. Chose one of your nodes, and add a label to it:
+    -->
+1. 选择一个节点，给它添加一个标签：
+
+    ```shell
+    kubectl label nodes <your-node-name> disktype=ssd
+    ```
+    <!--
+        where `<your-node-name>` is the name of your chosen node.
+
+    1. Verify that your chosen node has a `disktype=ssd` label:
+    -->
+
+    其中 `<your-node-name>` 是你所选节点的名称。
+
+2. 验证你所选节点具有 `disktype=ssd` 标签：
+
+    ```shell
+    kubectl get nodes --show-labels
+    ```
+
+    <!--
+    The output is similar to this:
+    -->
+    输出类似于此：
+
+    ```
+    NAME      STATUS    ROLES    AGE     VERSION        LABELS
+    worker0   Ready     <none>   1d      v1.13.0        ...,disktype=ssd,kubernetes.io/hostname=worker0
+    worker1   Ready     <none>   1d      v1.13.0        ...,kubernetes.io/hostname=worker1
+    worker2   Ready     <none>   1d      v1.13.0        ...,kubernetes.io/hostname=worker2
+    ```
+
+    <!--
+        In the preceding output, you can see that the `worker0` node has a
+        `disktype=ssd` label.
+    -->
+    在前面的输出中，可以看到 `worker0` 节点有一个 `disktype=ssd` 标签。
+
+<!--
+## Schedule a Pod using required node affinity
+
+This manifest describes a Pod that has a `requiredDuringSchedulingIgnoredDuringExecution` node affinity,`disktype: ssd`. 
+This means that the pod will get scheduled only on a node that has a `disktype=ssd` label. 
+-->
+## 依据强制的节点亲和性调度 Pod  {#schedule-a-Pod-using-required-node-affinity}
+
+下面清单描述了一个 Pod，它有一个节点亲和性配置 `requiredDuringSchedulingIgnoredDuringExecution`，`disktype=ssd`。
+这意味着 pod 只会被调度到具有 `disktype=ssd` 标签的节点上。
+
+{{< codenew file="pods/pod-nginx-required-affinity.yaml" >}}
+
+<!--
+1. Apply the manifest to create a Pod that is scheduled onto your
+   chosen node:
+-->
+1. 执行（Apply）此清单来创建一个调度到所选节点上的 Pod：
+
+    ```shell
+    kubectl apply -f https://k8s.io/examples/pods/pod-nginx-required-affinity.yaml
+    ```
+
+    <!--
+    1. Verify that the pod is running on your chosen node:
+    -->
+1. 验证 pod 已经在所选节点上运行：
+
+    ```shell
+    kubectl get pods --output=wide
+    ```
+
+    <!--
+    The output is similar to this:
+    -->
+    输出类似于此：
+
+    ```
+    NAME     READY     STATUS    RESTARTS   AGE    IP           NODE
+    nginx    1/1       Running   0          13s    10.200.0.4   worker0
+    ```
+    
+<!--    
+## Schedule a Pod using preferred node affinity
+
+This manifest describes a Pod that has a `preferredDuringSchedulingIgnoredDuringExecution` node affinity,`disktype: ssd`. 
+This means that the pod will prefer a node that has a `disktype=ssd` label. 
+-->
+## 使用首选的节点亲和性调度 Pod {#schedule-a-Pod-using-preferred-node-affinity}
+
+本清单描述了一个Pod，它有一个节点亲和性设置 `preferredDuringSchedulingIgnoredDuringExecution`，`disktype: ssd`。
+这意味着 pod 将首选具有 `disktype=ssd` 标签的节点。
+
+{{< codenew file="pods/pod-nginx-preferred-affinity.yaml" >}}
+
+<!--
+1. Apply the manifest to create a Pod that is scheduled onto your
+   chosen node:
+-->
+1. 执行此清单创建一个会调度到所选节点上的 Pod：
+    
+    ```shell
+    kubectl apply -f https://k8s.io/examples/pods/pod-nginx-preferred-affinity.yaml
+    ```
+
+    <!--
+    1. Verify that the pod is running on your chosen node:
+    -->
+1. 验证 pod 是否在所选节点上运行：
+   
+    ```shell
+    kubectl get pods --output=wide
+    ```
+
+    <!--
+    The output is similar to this:
+    -->
+    输出类似于此：
+    
+    ```
+    NAME     READY     STATUS    RESTARTS   AGE    IP           NODE
+    nginx    1/1       Running   0          13s    10.200.0.4   worker0
+    ```
+
+
+
+## {{% heading "whatsnext" %}}
+
+<!--
+Learn more about
+[Node Affinity](/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity).
+-->
+进一步了解
+[节点亲和性](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity).

From fa12dec99aee90afcda40136340bc6fa10234b4e Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Thu, 24 Sep 2020 15:29:19 +0700
Subject: [PATCH 429/496] Translate glossary for ConfigMap into Bahasa

---
 content/id/docs/reference/glossary/configmap.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/configmap.md

diff --git a/content/id/docs/reference/glossary/configmap.md b/content/id/docs/reference/glossary/configmap.md
new file mode 100644
index 0000000000..aaf96d5ad1
--- /dev/null
+++ b/content/id/docs/reference/glossary/configmap.md
@@ -0,0 +1,17 @@
+---
+title: ConfigMap
+id: configmap
+date: 2018-04-12
+full_link: /docs/concepts/configuration/configmap/
+short_description: >
+  Sebuah objek API yang digunakan untuk menyimpan data nonkonfidensial sebagai pasangan kunci-nilai (_key-value_). Pod dapat menggunakan ConfigMap sebagai variabel lingkungan, argumen baris perintah (_command-line_), atau berkas konfigurasi dalam sebuah _volume_.
+
+aka:
+tags:
+- core-object
+---
+Sebuah objek API yang digunakan untuk menyimpan data nonkonfidensial sebagai pasangan kunci-nilai (_key-value_). {{< glossary_tooltip text="Pod" term_id="pod" >}} dapat menggunakan ConfigMap sebagai variabel lingkungan, argumen baris perintah (_command-line_), atau berkas konfigurasi dalam sebuah {{< glossary_tooltip text="volume" term_id="volume" >}}.
+
+<!--more-->
+
+Sebuah ConfigMap memungkinkanmu untuk memisahkan konfigurasi lingkungan tertentu dari {{< glossary_tooltip text="image Container" term_id="image" >}}, sehingga aplikasimu menjadi lebih portabel.

From d4fd5f729767d39aa46fec4997de32051dfe5da6 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Thu, 24 Sep 2020 13:15:32 +0700
Subject: [PATCH 430/496] Translate glossary for PersistentVolumeClaim into
 Bahasa

---
 .../glossary/persistent-volume-claim.md        | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/persistent-volume-claim.md

diff --git a/content/id/docs/reference/glossary/persistent-volume-claim.md b/content/id/docs/reference/glossary/persistent-volume-claim.md
new file mode 100644
index 0000000000..b40fb29e05
--- /dev/null
+++ b/content/id/docs/reference/glossary/persistent-volume-claim.md
@@ -0,0 +1,18 @@
+---
+title: Persistent Volume Claim
+id: persistent-volume-claim
+date: 2018-04-12
+full_link: /id/docs/concepts/storage/persistent-volumes/
+short_description: >
+  Mengklaim sumber daya penyimpanan yang didefinisikan di dalam suatu PersistentVolume, sehingga PersistentVolume tersebut dapat dipasang (_mounted_) sebagai sebuah _volume_ pada suatu Container.
+
+aka:
+tags:
+- core-object
+- storage
+---
+Mengklaim sumber daya penyimpanan yang didefinisikan di dalam suatu {{< glossary_tooltip text="PersistentVolume" term_id="persistent-volume" >}}, sehingga PersistentVolume tersebut dapat dipasang (_mounted_) sebagai sebuah _volume_ pada suatu {{< glossary_tooltip text="Container" term_id="container" >}}.
+
+<!--more-->
+
+Menentukan jumlah penyimpanan, bagaimana penyimpanan akan diakses (hanya baca (_read-only_), baca tulis (_read-write_), dan/atau eksklusif) dan bagaimana penyimpanan tersebut dapat diklaim kembali (dipertahankan, didaur ulang (_recycled_) atau dihapus). Detail dari penyimpanan itu sendiri dideskripsikan pada objek PersistentVolume.

From eafae3d991e3edbd8b9f0c2a7110da9a8fa5da2f Mon Sep 17 00:00:00 2001
From: Alpha <AlphaWong@users.noreply.github.com>
Date: Thu, 24 Sep 2020 18:50:32 +0800
Subject: [PATCH 431/496] doc: fix broken link

---
 .../network-policy-provider/weave-network-policy.md           | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md b/content/en/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
index b6b562620a..988eafda70 100644
--- a/content/en/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
+++ b/content/en/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy.md
@@ -19,10 +19,10 @@ You need to have a Kubernetes cluster. Follow the
 
 ## Install the Weave Net addon
 
-Follow the [Integrating Kubernetes via the Addon](https://www.weave.works/docs/net/latest/kube-addon/) guide.
+Follow the [Integrating Kubernetes via the Addon](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/) guide.
 
 The Weave Net addon for Kubernetes comes with a
-[Network Policy Controller](https://www.weave.works/docs/net/latest/kube-addon/#npc)
+[Network Policy Controller](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/#npc)
 that automatically monitors Kubernetes for any NetworkPolicy annotations on all
 namespaces and configures `iptables` rules to allow or block traffic as directed by the policies.
 

From 9fd549b12c6896b311a55de477691ff910071519 Mon Sep 17 00:00:00 2001
From: Andres Caro <andrescaroc@gmail.com>
Date: Thu, 24 Sep 2020 08:05:24 -0500
Subject: [PATCH 432/496] Update the run command to refer to pod creation

The "run" command refers to deployment creation and it should refer to pod creation
---
 .../docs/tasks/manage-kubernetes-objects/imperative-command.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md
index f8403dec17..a51b5664ba 100644
--- a/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md
+++ b/content/en/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -37,7 +37,7 @@ The `kubectl` tool supports verb-driven commands for creating some of the most c
 object types. The commands are named to be recognizable to users unfamiliar with
 the Kubernetes object types.
 
-- `run`: Create a new Deployment object to run Containers in one or more Pods.
+- `run`: Create a new Pod to run a Container.
 - `expose`: Create a new Service object to load balance traffic across Pods.
 - `autoscale`: Create a new Autoscaler object to automatically horizontally scale a controller, such as a Deployment.
 

From bdea6f87389fb1799589cd7fd957128a60af2926 Mon Sep 17 00:00:00 2001
From: Yuaninga <64267484+Yuaninga@users.noreply.github.com>
Date: Mon, 21 Sep 2020 23:38:11 +0800
Subject: [PATCH 433/496] Update container-runtimes.md

Supplement the Chinese version of containerd installed by windows when running the container of community production environment

Signed-off-by: Yuaninga <1846225041@qq.com>
---
 .../container-runtimes.md                     | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/content/zh/docs/setup/production-environment/container-runtimes.md b/content/zh/docs/setup/production-environment/container-runtimes.md
index 4772996131..500ea95345 100644
--- a/content/zh/docs/setup/production-environment/container-runtimes.md
+++ b/content/zh/docs/setup/production-environment/container-runtimes.md
@@ -842,6 +842,36 @@ systemctl restart containerd
 # 重启 containerd
 systemctl restart containerd
 ```
+{{% /tab %}}
+
+{{% tab name="Windows/(PowerShell)" %}}
+
+```powershell
+# （安装 containerd ）
+# 下载 contianerd
+cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.0-beta.2/containerd-1.4.0-beta.2-windows-amd64.tar.gz
+cmd /c tar xvf .\containerd-1.4.0-beta.2-windows-amd64.tar.gz
+```
+
+```powershell
+# 添加开机启动
+Copy-Item -Path ".\bin\" -Destination "C:\Program Files\containerd" -Recurse -Force
+cd C:\Program Files\containerd\
+.\containerd.exe config default | Out-File config.toml -Encoding ascii
+
+# 检查配置文件主要看以下三个参数
+# sandbox_image 的镜像地址
+# CNI 的 bin_dir 和 conf_dir 路径
+Get-Content config.toml
+```
+
+```powershell
+# containerd 注册服务
+.\containerd.exe --register-service
+# 启动 containerd
+Start-Service containerd
+```
+
 {{% /tab %}}
 {{< /tabs >}}
 

From dc71c947b65c842e90faa55a68847e9f06e99443 Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Thu, 24 Sep 2020 17:42:34 +0800
Subject: [PATCH 434/496] translate
 content/zh/docs/reference/scheduling/config.md

---
 .../zh/docs/reference/scheduling/config.md    | 509 ++++++++++++++++++
 1 file changed, 509 insertions(+)
 create mode 100644 content/zh/docs/reference/scheduling/config.md

diff --git a/content/zh/docs/reference/scheduling/config.md b/content/zh/docs/reference/scheduling/config.md
new file mode 100644
index 0000000000..5fa8497097
--- /dev/null
+++ b/content/zh/docs/reference/scheduling/config.md
@@ -0,0 +1,509 @@
+---
+title: 调度器配置
+content_type: concept
+weight: 20
+---
+<!-- 
+title: Scheduler Configuration
+content_type: concept
+weight: 20
+-->
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+<!-- 
+You can customize the behavior of the `kube-scheduler` by writing a configuration
+file and passing its path as a command line argument. 
+-->
+你可以通过编写配置文件，并将其路径传给 `kube-scheduler` 的命令行参数，定制 `kube-scheduler` 的行为。
+
+<!-- overview -->
+
+<!-- body -->
+
+<!--  
+You can specify scheduling profiles by running `kube-scheduler --config <filename>`,
+using the component config APIs
+([`v1alpha1`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1alpha1?tab=doc#KubeSchedulerConfiguration)
+or [`v1alpha2`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1alpha2?tab=doc#KubeSchedulerConfiguration)).
+The `v1alpha2` API allows you to configure kube-scheduler to run
+[multiple profiles](#multiple-profiles).
+-->
+你可以通过运行 `kube-scheduler --config <filename>` 来设置调度配置，
+配置文件使用组件配置的 API ([`v1alpha1`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1alpha1?tab=doc#KubeSchedulerConfiguration)
+或 [`v1alpha2`](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1alpha2?tab=doc#KubeSchedulerConfiguration))。
+`v1alpha2` 可以配置 kube-scheduler 运行[多个配置文件](#multiple-profiles)。
+
+<!-- A minimal configuration looks as follows: -->
+最简单的配置如下：
+
+```yaml
+apiVersion: kubescheduler.config.k8s.io/v1beta1
+kind: KubeSchedulerConfiguration
+clientConnection:
+  kubeconfig: /etc/srv/kubernetes/kube-scheduler/kubeconfig
+```
+
+<!-- ## Profiles -->
+## 配置文件    {#profiles}
+
+<!--  
+A scheduling Profile allows you to configure the different stages of scheduling
+in the {{< glossary_tooltip text="kube-scheduler" term_id="kube-scheduler" >}}.
+Each stage is exposed in an [extension point](#extension-points).
+[Plugins](#scheduling-plugins) provide scheduling behaviors by implementing one
+or more of these extension points.
+-->
+通过调度配置文件，你可以配置 {{< glossary_tooltip text="kube-scheduler" term_id="kube-scheduler" >}} 在不同阶段的调度行为。
+每个阶段都在一个[扩展点](#extension-points)中公开。
+[调度插件](#scheduling-plugins)通过实现一个或多个扩展点，来提供调度行为。
+
+<!--  
+You can configure a single instance of `kube-scheduler` to run
+[multiple profiles](#multiple-profiles).
+-->
+你可以配置同一 `kube-scheduler` 实例使用[多个配置文件](#multiple-profiles)。
+
+<!-- ### Extension points -->
+### 扩展点    {#extensions-points}
+
+<!--  
+Scheduling happens in a series of stages that are exposed through the following
+extension points:
+-->
+调度行为发生在一系列阶段中，这些阶段是通过以下扩展点公开的：
+
+<!--  
+1. `QueueSort`: These plugins provide an ordering function that is used to
+   sort pending Pods in the scheduling queue. Exactly one queue sort plugin
+   may be enabled at a time.
+-->
+1. `QueueSort`：这些插件对调度队列中的悬决的 Pod 排序。
+   一次只能启用一个队列排序插件。
+<!-- 
+2. `PreFilter`: These plugins are used to pre-process or check information
+   about a Pod or the cluster before filtering. They can mark a pod as
+   unschedulable.
+ -->
+2. `PreFilter`：这些插件用于在过滤之前预处理或检查 Pod 或集群的信息。
+   它们可以将 Pod 标记为不可调度。
+<!-- 
+3. `Filter`: These plugins are the equivalent of Predicates in a scheduling
+   Policy and are used to filter out nodes that can not run the Pod. Filters
+   are called in the configured order. A pod is marked as unschedulable if no
+   nodes pass all the filters.
+-->
+3. `Filter`：这些插件相当于调度策略中的断言（Predicates），用于过滤不能运行 Pod 的节点。
+   过滤器的调用顺序是可配置的。
+   如果没有一个节点通过所有过滤器的筛选，Pod 将会被标记为不可调度。
+<!-- 
+4. `PreScore`: This is an informational extension point that can be used
+   for doing pre-scoring work.
+-->
+4. `PreScore`：这是一个信息扩展点，可用于预打分工作。
+<!--  
+5. `Score`: These plugins provide a score to each node that has passed the
+   filtering phase. The scheduler will then select the node with the highest
+   weighted scores sum.
+-->
+5. `Score`：这些插件给通过筛选阶段的节点打分。调度器会选择得分最高的节点。
+<!--  
+6. `Reserve`: This is an informational extension point that notifies plugins
+   when resources have been reserved for a given Pod. Plugins also implement an
+   `Unreserve` call that gets called in the case of failure during or after
+   `Reserve`.
+-->
+6. `Reserve`：这是一个信息扩展点，当资源已经预留给 Pod 时，会通知插件。
+   这些插件还实现了 `Unreserve` 接口，在 `Reserve` 期间或之后出现故障时调用。
+<!-- 7. `Permit`: These plugins can prevent or delay the binding of a Pod. -->
+7. `Permit`：这些插件可以阻止或延迟 Pod 绑定。
+<!-- 8. `PreBind`: These plugins perform any work required before a Pod is bound.-->
+8. `PreBind`：这些插件在 Pod 绑定节点之前执行。
+<!--  
+9. `Bind`: The plugins bind a Pod to a Node. Bind plugins are called in order
+   and once one has done the binding, the remaining plugins are skipped. At
+   least one bind plugin is required.
+-->
+9. `Bind`：这个插件将 Pod 与节点绑定。绑定插件是按顺序调用的，只要有一个插件完成了绑定，其余插件都会跳过。绑定插件至少需要一个。
+<!-- 
+10. `PostBind`: This is an informational extension point that is called after
+   a Pod has been bound.
+-->
+10.  `PostBind`：这是一个信息扩展点，在 Pod 绑定了节点之后调用。
+
+<!-- 
+For each extension point, you could disable specific [default plugins](#scheduling-plugins)
+or enable your own. For example:
+-->
+对每个扩展点，你可以禁用[默认插件](#scheduling-plugins)或者是启用自己的插件，例如：
+
+```yaml
+apiVersion: kubescheduler.config.k8s.io/v1beta1
+kind: KubeSchedulerConfiguration
+profiles:
+  - plugins:
+      score:
+        disabled:
+        - name: NodeResourcesLeastAllocated
+        enabled:
+        - name: MyCustomPluginA
+          weight: 2
+        - name: MyCustomPluginB
+          weight: 1
+```
+
+<!-- 
+You can use `*` as name in the disabled array to disable all default plugins
+for that extension point. This can also be used to rearrange plugins order, if
+desired.
+-->
+你可以在 `disabled` 数组中使用 `*` 禁用该扩展点的所有默认插件。
+如果需要，这个字段也可以用来对插件重新顺序。
+   
+<!-- ### Scheduling plugins -->
+### 调度插件    {#scheduling-plugin}
+
+<!-- 
+1. `UnReserve`: This is an informational extension point that is called if
+   a Pod is rejected after being reserved and put on hold by a `Permit` plugin.
+-->
+1. `UnReserve`：这是一个信息扩展点，如果一个 Pod 在预留后被拒绝，并且被 `Permit` 插件搁置，它就会被调用。
+
+<!-- ## Scheduling plugins -->
+## 调度插件   {#scheduling-plugins}
+
+<!--  
+The following plugins, enabled by default, implement one or more of these
+extension points:
+-->
+下面默认启用的插件实现了一个或多个扩展点：
+
+<!--  
+- `SelectorSpread`: Favors spreading across nodes for Pods that belong to
+  {{< glossary_tooltip text="Services" term_id="service" >}},
+  {{< glossary_tooltip text="ReplicaSets" term_id="replica-set" >}} and
+  {{< glossary_tooltip text="StatefulSets" term_id="statefulset" >}}
+  Extension points: `PreScore`, `Score`.
+-->
+- `SelectorSpread`：对于属于 {{< glossary_tooltip text="Services" term_id="service" >}}、
+  {{< glossary_tooltip text="ReplicaSets" term_id="replica-set" >}} 和
+  {{< glossary_tooltip text="StatefulSets" term_id="statefulset" >}} 的 Pod，偏好跨多个节点部署。
+  
+  实现的扩展点：`PreScore`，`Score`。
+<!--  
+- `ImageLocality`: Favors nodes that already have the container images that the
+  Pod runs.
+  Extension points: `Score`.
+-->
+- `ImageLocality`：选择已经存在 Pod 运行所需容器镜像的节点。
+  
+  实现的扩展点：`Score`。
+<!--  
+- `TaintToleration`: Implements
+  [taints and tolerations](/docs/concepts/scheduling-eviction/taint-and-toleration/).
+  Implements extension points: `Filter`, `Prescore`, `Score`.
+-->
+- `TaintToleration`：实现了[污点和容忍](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)。
+  
+  实现的扩展点：`Filter`，`Prescore`，`Score`。
+<!--  
+- `NodeName`: Checks if a Pod spec node name matches the current node.
+  Extension points: `Filter`.
+-->
+- `NodeName`：检查 Pod 指定的节点名称与当前节点是否匹配。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `NodePorts`: Checks if a node has free ports for the requested Pod ports.
+  Extension points: `PreFilter`, `Filter`.
+-->
+- `NodePorts`：检查 Pod 请求的端口在节点上是否可用。
+  
+  实现的扩展点：`PreFilter`，`Filter`。
+<!--  
+- `NodePreferAvoidPods`: Scores nodes according to the node
+  {{< glossary_tooltip text=" " term_id="annotation" >}}
+  `scheduler.alpha.kubernetes.io/preferAvoidPods`.
+  Extension points: `Score`.
+-->
+- `NodePreferAvoidPods`：基于节点的 {{< glossary_tooltip text="注解" term_id="annotation" >}} 
+  `scheduler.alpha.kubernetes.io/preferAvoidPods` 打分。
+  
+  实现的扩展点：`Score`。
+<!--  
+- `NodeAffinity`: Implements
+  [node selectors](/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
+  and [node affinity](/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity).
+  Extension points: `Filter`, `Score`.
+-->
+- `NodeAffinity`：实现了[节点选择器](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector)
+  和[节点亲和性](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity)。
+  
+  实现的扩展点：`Filter`，`Score`.
+<!--  
+- `PodTopologySpread`: Implements
+  [Pod topology spread](/docs/concepts/workloads/pods/pod-topology-spread-constraints/).
+  Extension points: `PreFilter`, `Filter`, `PreScore`, `Score`.
+-->
+- `PodTopologySpread`：实现了 [Pod 拓扑分布](/zh/docs/concepts/workloads/pods/pod-topology-spread-constraints/)。
+  
+  实现的扩展点：`PreFilter`，`Filter`，`PreScore`，`Score`。
+<!--  
+- `NodeUnschedulable`: Filters out nodes that have `.spec.unschedulable` set to
+  true.
+  Extension points: `Filter`.
+-->
+- `NodeUnschedulable`：过滤 `.spec.unschedulable` 值为 true 的节点。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `NodeResourcesFit`: Checks if the node has all the resources that the Pod is
+  requesting.
+  Extension points: `PreFilter`, `Filter`.
+-->
+- `NodeResourcesFit`：检查节点是否拥有 Pod 请求的所有资源。
+  
+  实现的扩展点：`PreFilter`，`Filter`。
+<!--  
+- `NodeResourcesBalancedAllocation`: Favors nodes that would obtain a more
+  balanced resource usage if the Pod is scheduled there.
+  Extension points: `Score`.
+-->
+- `NodeResourcesBalancedAllocation`：调度 Pod 时，选择资源使用更为均衡的节点。
+  
+  实现的扩展点：`Score`。
+<!--  
+- `NodeResourcesLeastAllocated`: Favors nodes that have a low allocation of
+  resources.
+  Extension points: `Score`.
+-->
+- `NodeResourcesLeastAllocated`：选择资源分配较少的节点。
+  
+  实现的扩展点：`Score`。
+<!--  
+- `VolumeBinding`: Checks if the node has or if it can bind the requested
+  {{< glossary_tooltip text="volumes" term_id="volume" >}}.
+  Extension points: `PreFilter`, `Filter`, `Reserve`, `PreBind`.
+-->
+- `VolumeBinding`：检查节点是否有请求的卷，或是否可以绑定请求的卷。
+  
+  实现的扩展点: `PreFilter`，`Filter`，`Reserve`，`PreBind`。
+<!-- 
+- `VolumeRestrictions`: Checks that volumes mounted in the node satisfy
+  restrictions that are specific to the volume provider.
+  Extension points: `Filter`. 
+-->
+- `VolumeRestrictions`：检查挂载到节点上的卷是否满足卷提供程序的限制。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `VolumeZone`: Checks that volumes requested satisfy any zone requirements they
+  might have.
+  Extension points: `Filter`.
+-->
+- `VolumeZone`：检查请求的卷是否在任何区域都满足。
+  
+  实现的扩展点：`Filter`。
+<!-- 
+- `NodeVolumeLimits`: Checks that CSI volume limits can be satisfied for the
+  node.
+  Extension points: `Filter`. 
+-->
+- `NodeVolumeLimits`：检查该节点是否满足 CSI 卷限制。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `EBSLimits`: Checks that AWS EBS volume limits can be satisfied for the node.
+  Extension points: `Filter`.
+-->
+- `EBSLimits`：检查节点是否满足 AWS EBS 卷限制。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `GCEPDLimits`: Checks that GCP-PD volume limits can be satisfied for the node.
+  Extension points: `Filter`.
+-->
+- `GCEPDLimits`：检查该节点是否满足 GCP-PD 卷限制。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `AzureDiskLimits`: Checks that Azure disk volume limits can be satisfied for
+  the node.
+  Extension points: `Filter`.
+-->
+- `AzureDiskLimits`：检查该节点是否满足 Azure 卷限制。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `InterPodAffinity`: Implements
+  [inter-Pod affinity and anti-affinity](/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity).
+  Extension points: `PreFilter`, `Filter`, `PreScore`, `Score`.
+-->
+- `InterPodAffinity`：实现 [Pod 间亲和性与反亲和性](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity)。
+  
+  实现的扩展点：`PreFilter`，`Filter`，`PreScore`，`Score`。
+<!--  
+- `PrioritySort`: Provides the default priority based sorting.
+  Extension points: `QueueSort`.
+-->
+- `PrioritySort`：提供默认的基于优先级的排序。
+  
+  实现的扩展点：`QueueSort`。
+<!--  
+- `DefaultBinder`: Provides the default binding mechanism.
+  Extension points: `Bind`.
+-->
+- `DefaultBinder`：提供默认的绑定机制。
+  
+  实现的扩展点：`Bind`。
+<!--  
+- `DefaultPreemption`: Provides the default preemption mechanism.
+  Extension points: `PostFilter`.
+-->
+- `DefaultPreemption`：提供默认的抢占机制。
+  
+  实现的扩展点：`PostFilter`。
+
+<!--  
+You can also enable the following plugins, through the component config APIs,
+that are not enabled by default:
+-->
+你也可以通过组件配置 API 启用以下插件（默认不启用）:
+
+<!--  
+- `NodeResourcesMostAllocated`: Favors nodes that have a high allocation of
+  resources.
+  Extension points: `Score`.
+-->
+- `NodeResourcesMostAllocated`：选择已分配资源多的节点。
+  
+  实现的扩展点：`Score`。
+<!--  
+- `RequestedToCapacityRatio`: Favor nodes according to a configured function of
+  the allocated resources.
+  Extension points: `Score`.
+-->
+- `RequestedToCapacityRatio`：根据已分配资源的某函数设置选择节点。
+  
+  实现的扩展点：`Score`。
+<!--  
+- `NodeResourceLimits`: Favors nodes that satisfy the Pod resource limits.
+  Extension points: `PreScore`, `Score`.
+-->
+- `NodeResourceLimits`：选择满足 Pod 资源限制的节点。
+  
+  实现的扩展点：`PreScore`，`Score`。
+<!--  
+- `CinderVolume`: Checks that OpenStack Cinder volume limits can be satisfied
+  for the node.
+  Extension points: `Filter`.
+-->
+- `CinderVolume`：检查该节点是否满足 OpenStack Cinder 卷限制。
+  
+  实现的扩展点：`Filter`。
+<!--  
+- `NodeLabel`: Filters and / or scores a node according to configured
+  {{< glossary_tooltip text="label(s)" term_id="label" >}}.
+  Extension points: `Filter`, `Score`.
+-->
+- `NodeLabel`：根据配置的 {{< glossary_tooltip text="标签" term_id="label" >}} 
+  过滤节点和/或给节点打分。
+  
+  实现的扩展点：`Filter`，`Score`。
+<!--  
+- `ServiceAffinity`: Checks that Pods that belong to a
+  {{< glossary_tooltip term_id="service" >}} fit in a set of nodes defined by
+  configured labels. This plugin also favors spreading the Pods belonging to a
+  Service across nodes.
+  Extension points: `PreFilter`, `Filter`, `Score`.
+-->
+- `ServiceAffinity`：检查属于某个 {{< glossary_tooltip term_id="service" >}} 的 Pod
+  与配置的标签所定义的节点集是否适配。
+  这个插件还支持将属于某个 Service 的 Pod 分散到各个节点。
+  
+  实现的扩展点：`PreFilter`，`Filter`，`Score`。
+
+<!-- ### Multiple profiles -->
+### 多配置文件    {#multiple-profiles}
+
+<!--  
+You can configure `kube-scheduler` to run more than one profile.
+Each profile has an associated scheduler name and can have a different set of
+plugins configured in its [extension points](#extension-points).
+-->
+你可以配置 `kube-scheduler` 运行多个配置文件。
+每个配置文件都有一个关联的调度器名称，并且可以在其扩展点中配置一组不同的插件。
+
+<!--  
+With the following sample configuration, the scheduler will run with two
+profiles: one with the default plugins and one with all scoring plugins
+disabled.
+-->
+使用下面的配置样例，调度器将运行两个配置文件：一个使用默认插件，另一个禁用所有打分插件。
+
+```yaml
+apiVersion: kubescheduler.config.k8s.io/v1beta1
+kind: KubeSchedulerConfiguration
+profiles:
+  - schedulerName: default-scheduler
+  - schedulerName: no-scoring-scheduler
+    plugins:
+      preScore:
+        disabled:
+        - name: '*'
+      score:
+        disabled:
+        - name: '*'
+```
+
+<!--  
+Pods that want to be scheduled according to a specific profile can include
+the corresponding scheduler name in its `.spec.schedulerName`.
+-->
+希望根据特定配置文件调度的 Pod，可以在 `.spec.schedulerName` 字段指定相应的调度器名称。
+
+<!--  
+By default, one profile with the scheduler name `default-scheduler` is created.
+This profile includes the default plugins described above. When declaring more
+than one profile, a unique scheduler name for each of them is required.
+-->
+默认情况下，将创建一个名为 `default-scheduler` 的配置文件。
+这个配置文件包括上面描述的所有默认插件。
+声明多个配置文件时，每个配置文件中调度器名称必须唯一。
+
+<!--  
+If a Pod doesn't specify a scheduler name, kube-apiserver will set it to
+`default-scheduler`. Therefore, a profile with this scheduler name should exist
+to get those pods scheduled.
+-->
+如果 Pod 未指定调度器名称，kube-apiserver 将会把它设置为 `default-scheduler`。
+因此，应该存在一个名为 `default-scheduler` 的配置文件来调度这些 Pod。
+
+{{< note >}}
+<!--  
+Pod's scheduling events have `.spec.schedulerName` as the ReportingController.
+Events for leader election use the scheduler name of the first profile in the
+list.
+-->
+Pod 的调度事件把 `.spec.schedulerName` 字段值作为 ReportingController。
+领导者选择事件使用列表中第一个配置文件的调度器名称。
+{{< /note >}}
+
+{{< note >}}
+<!--  
+All profiles must use the same plugin in the QueueSort extension point and have
+the same configuration parameters (if applicable). This is because the scheduler
+only has one pending pods queue.
+-->
+所有配置文件必须在 QueueSort 扩展点使用相同的插件，并具有相同的配置参数（如果适用）。
+这是因为调度器只有一个的队列保存悬决的 Pod。
+
+{{< /note >}}
+
+## {{% heading "whatsnext" %}}
+
+<!--  
+* Read the [kube-scheduler reference](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/)
+* Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
+-->
+* 阅读 [kube-scheduler 参考](/zh/docs/reference/command-line-tools-reference/kube-scheduler/)
+* 了解[调度](/zh/docs/concepts/scheduling-eviction/kube-scheduler/)
\ No newline at end of file

From 22ddf4f82e7052bb64ff041822b92d6d88313d2e Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Tue, 22 Sep 2020 22:32:45 +0800
Subject: [PATCH 435/496] translate
 content/zh/docs/reference/scheduling/policies.md

---
 .../zh/docs/reference/scheduling/_index.md    |   5 +
 .../zh/docs/reference/scheduling/policies.md  | 233 ++++++++++++++++++
 2 files changed, 238 insertions(+)
 create mode 100644 content/zh/docs/reference/scheduling/_index.md
 create mode 100644 content/zh/docs/reference/scheduling/policies.md

diff --git a/content/zh/docs/reference/scheduling/_index.md b/content/zh/docs/reference/scheduling/_index.md
new file mode 100644
index 0000000000..438ac7ede3
--- /dev/null
+++ b/content/zh/docs/reference/scheduling/_index.md
@@ -0,0 +1,5 @@
+---
+title: 调度
+weight: 70
+toc-hide: true
+---
diff --git a/content/zh/docs/reference/scheduling/policies.md b/content/zh/docs/reference/scheduling/policies.md
new file mode 100644
index 0000000000..248e3a7f84
--- /dev/null
+++ b/content/zh/docs/reference/scheduling/policies.md
@@ -0,0 +1,233 @@
+---
+title: 调度策略
+content_type: concept
+weight: 10
+---
+<!--  
+title: Scheduling Policies
+content_type: concept
+weight: 10
+-->
+
+<!-- overview -->
+
+<!--  
+A scheduling Policy can be used to specify the *predicates* and *priorities*
+that the {{< glossary_tooltip text="kube-scheduler" term_id="kube-scheduler" >}}
+runs to [filter and score nodes](/docs/concepts/scheduling-eviction/kube-scheduler/#kube-scheduler-implementation),
+respectively.
+-->
+{{< glossary_tooltip text="kube-scheduler" term_id="kube-scheduler" >}}
+根据调度策略指定的*断言（predicates）*和*优先级（priorities）*
+分别对节点进行[过滤和打分](/zh/docs/concepts/scheduling-eviction/kube-scheduler/#kube-scheduler-implementation)。
+
+<!--  
+You can set a scheduling policy by running
+`kube-scheduler --policy-config-file <filename>` or
+`kube-scheduler --policy-configmap <ConfigMap>`
+and using the [Policy type](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy).
+-->
+你可以通过执行 `kube-scheduler --policy-config-file <filename>` 或
+`kube-scheduler --policy-configmap <ConfigMap>` 
+设置并使用[调度策略](https://pkg.go.dev/k8s.io/kube-scheduler@v0.18.0/config/v1?tab=doc#Policy)。
+
+
+<!-- body -->
+
+<!-- ## Predicates -->
+## 断言    {#predicates}
+
+
+<!-- The following *predicates* implement filtering: -->
+以下*断言*实现了过滤接口：
+
+<!-- 
+- `PodFitsHostPorts`: Checks if a Node has free ports (the network protocol kind)
+  for the Pod ports the Pod is requesting. 
+-->
+- `PodFitsHostPorts`：检查 Pod 请求的端口（网络协议类型）在节点上是否可用。
+
+<!-- - `PodFitsHost`: Checks if a Pod specifies a specific Node by its hostname. -->
+- `PodFitsHost`：检查 Pod 是否通过主机名指定了 Node。
+
+<!-- 
+- `PodFitsResources`: Checks if the Node has free resources (eg, CPU and Memory)
+  to meet the requirement of the Pod.
+-->
+- `PodFitsResources`：检查节点的空闲资源（例如，CPU和内存）是否满足 Pod 的要求。
+
+<!--  
+- `MatchNodeSelector`: Checks if a Pod's Node {{< glossary_tooltip term_id="selector" >}}
+   matches the Node's {{< glossary_tooltip text="label(s)" term_id="label" >}}.
+-->
+- `MatchNodeSelector`：检查 Pod 的节点{{< glossary_tooltip text="选择算符" term_id="selector" >}}
+  和节点的 {{< glossary_tooltip text="标签" term_id="label" >}} 是否匹配。
+
+<!--  
+- `NoVolumeZoneConflict`: Evaluate if the {{< glossary_tooltip text="Volumes" term_id="volume" >}}
+  that a Pod requests are available on the Node, given the failure zone restrictions for
+  that storage.
+-->
+- `NoVolumeZoneConflict`：给定该存储的故障区域限制，
+  评估 Pod 请求的{{< glossary_tooltip text="卷" term_id="volume" >}}在节点上是否可用。
+
+<!--  
+- `NoDiskConflict`: Evaluates if a Pod can fit on a Node due to the volumes it requests,
+   and those that are already mounted.
+-->
+- `NoDiskConflict`：根据 Pod 请求的卷是否在节点上已经挂载，评估 Pod 和节点是否匹配。
+
+<!--  
+- `MaxCSIVolumeCount`: Decides how many {{< glossary_tooltip text="CSI" term_id="csi" >}}
+  volumes should be attached, and whether that's over a configured limit.
+-->
+- `MaxCSIVolumeCount`：决定附加 {{< glossary_tooltip text="CSI" term_id="csi" >}} 卷的数量，判断是否超过配置的限制。
+
+<!--  
+- `CheckNodeMemoryPressure`: If a Node is reporting memory pressure, and there's no
+  configured exception, the Pod won't be scheduled there.
+-->
+- `CheckNodeMemoryPressure`：如果节点正上报内存压力，并且没有异常配置，则不会把 Pod 调度到此节点上。
+
+<!--  
+- `CheckNodePIDPressure`: If a Node is reporting that process IDs are scarce, and
+  there's no configured exception, the Pod won't be scheduled there.
+-->
+- `CheckNodePIDPressure`：如果节点正上报进程 ID 稀缺，并且没有异常配置，则不会把 Pod 调度到此节点上。
+
+<!--  
+- `CheckNodeDiskPressure`: If a Node is reporting storage pressure (a filesystem that
+   is full or nearly full), and there's no configured exception, the Pod won't be
+   scheduled there.
+-->
+- `CheckNodeDiskPressure`：如果节点正上报存储压力（文件系统已满或几乎已满），并且没有异常配置，则不会把 Pod 调度到此节点上。
+
+<!--  
+- `CheckNodeCondition`: Nodes can report that they have a completely full filesystem,
+  that networking isn't available or that kubelet is otherwise not ready to run Pods.
+  If such a condition is set for a Node, and there's no configured exception, the Pod
+  won't be scheduled there.
+-->
+- `CheckNodeCondition`：节点可用上报自己的文件系统已满，网络不可用或者 kubelet 尚未准备好运行 Pod。
+  如果节点上设置了这样的状况，并且没有异常配置，则不会把 Pod 调度到此节点上。
+
+<!--  
+- `PodToleratesNodeTaints`: checks if a Pod's {{< glossary_tooltip text="tolerations" term_id="toleration" >}}
+  can tolerate the Node's {{< glossary_tooltip text="taints" term_id="taint" >}}.
+-->
+- `PodToleratesNodeTaints`：检查 Pod 的{{< glossary_tooltip text="容忍" term_id="toleration" >}}
+  是否能容忍节点的{{< glossary_tooltip text="污点" term_id="taint" >}}。
+
+<!-- 
+- `CheckVolumeBinding`: Evaluates if a Pod can fit due to the volumes it requests.
+  This applies for both bound and unbound
+  {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}}. 
+-->
+- `CheckVolumeBinding`：基于 Pod 的卷请求，评估 Pod 是否适合节点，这里的卷包括绑定的和未绑定的
+  {{< glossary_tooltip text="PVCs" term_id="persistent-volume-claim" >}} 都适用。
+
+
+<!-- ## Priorities -->
+## 优先级    {#priorities}
+
+<!-- The following *priorities* implement scoring: -->
+以下*优先级*实现了打分接口：
+
+<!--  
+- `SelectorSpreadPriority`: Spreads Pods across hosts, considering Pods that
+   belong to the same {{< glossary_tooltip text="Service" term_id="service" >}},
+   {{< glossary_tooltip term_id="statefulset" >}} or
+   {{< glossary_tooltip term_id="replica-set" >}}.
+-->
+- `SelectorSpreadPriority`：属于同一 {{< glossary_tooltip text="Service" term_id="service" >}}、
+  {{< glossary_tooltip term_id="statefulset" >}} 或
+  {{< glossary_tooltip term_id="replica-set" >}} 的 Pod，跨主机部署。
+
+<!--  
+- `InterPodAffinityPriority`: Implements preferred
+  [inter pod affininity and antiaffinity](/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity).
+-->
+- `InterPodAffinityPriority`：实现了 [Pod 间亲和性与反亲和性](/zh/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity)的优先级。
+
+<!--
+- `LeastRequestedPriority`: Favors nodes with fewer requested resources. In other
+  words, the more Pods that are placed on a Node, and the more resources those
+  Pods use, the lower the ranking this policy will give.  
+-->
+- `LeastRequestedPriority`：偏向最少请求资源的节点。 
+  换句话说，节点上的 Pod 越多，使用的资源就越多，此策略给出的排名就越低。
+
+<!--  
+- `MostRequestedPriority`: Favors nodes with most requested resources. This policy
+  will fit the scheduled Pods onto the smallest number of Nodes needed to run your
+  overall set of workloads.
+-->
+- `MostRequestedPriority`：支持最多请求资源的节点。
+  该策略将 Pod 调度到整体工作负载所需的最少的一组节点上。
+
+<!-- - `RequestedToCapacityRatioPriority`: Creates a requestedToCapacity based ResourceAllocationPriority using default resource scoring function shape. -->
+- `RequestedToCapacityRatioPriority`：使用默认的打分方法模型，创建基于 ResourceAllocationPriority 的 requestedToCapacity。
+
+<!-- - `BalancedResourceAllocation`: Favors nodes with balanced resource usage. -->
+- `BalancedResourceAllocation`：偏向平衡资源使用的节点。
+
+<!-- 
+- `NodePreferAvoidPodsPriority`: Prioritizes nodes according to the node annotation
+  `scheduler.alpha.kubernetes.io/preferAvoidPods`. You can use this to hint that
+  two different Pods shouldn't run on the same Node. 
+  -->
+- `NodePreferAvoidPodsPriority`：根据节点的注解 `scheduler.alpha.kubernetes.io/preferAvoidPods` 对节点进行优先级排序。
+  你可以使用它来暗示两个不同的 Pod 不应在同一节点上运行。
+
+<!--  
+- `NodeAffinityPriority`: Prioritizes nodes according to node affinity scheduling
+   preferences indicated in PreferredDuringSchedulingIgnoredDuringExecution.
+   You can read more about this in [Assigning Pods to Nodes](/docs/concepts/scheduling-eviction/assign-pod-node/).
+-->
+- `NodeAffinityPriority`：根据节点亲和中 PreferredDuringSchedulingIgnoredDuringExecution 字段对节点进行优先级排序。
+  你可以在[将 Pod 分配给节点](/zh/docs/concepts/scheduling-eviction/assign-pod-node/)中了解更多。
+
+<!--  
+- `TaintTolerationPriority`: Prepares the priority list for all the nodes, based on
+  the number of intolerable taints on the node. This policy adjusts a node's rank
+  taking that list into account.
+-->
+- `TaintTolerationPriority`：根据节点上无法忍受的污点数量，给所有节点进行优先级排序。
+  此策略会根据排序结果调整节点的等级。
+
+<!-- 
+- `ImageLocalityPriority`: Favors nodes that already have the
+  {{< glossary_tooltip text="container images" term_id="image" >}} for that
+  Pod cached locally.
+-->
+- `ImageLocalityPriority`：偏向已在本地缓存 Pod 所需容器镜像的节点。
+
+<!-- 
+- `ServiceSpreadingPriority`: For a given Service, this policy aims to make sure that
+  the Pods for the Service run on different nodes. It favours scheduling onto nodes
+  that don't have Pods for the service already assigned there. The overall outcome is
+  that the Service becomes more resilient to a single Node failure.
+-->
+- `ServiceSpreadingPriority`：对于给定的 Service，此策略旨在确保该 Service 关联的 Pod 在不同的节点上运行。
+  它偏向把 Pod 调度到没有该服务的节点。
+  整体来看，Service 对于单个节点故障变得更具弹性。
+
+<!-- - `EqualPriority`: Gives an equal weight of one to all nodes. -->
+- `EqualPriority`：给予所有节点相等的权重。
+
+<!-- 
+- `EvenPodsSpreadPriority`: Implements preferred
+  [pod topology spread constraints](/docs/concepts/workloads/pods/pod-topology-spread-constraints/). 
+-->
+- `EvenPodsSpreadPriority`：实现了 [Pod 拓扑扩展约束](/zh/docs/concepts/workloads/pods/pod-topology-spread-constraints/)的优先级排序。
+
+
+
+## {{% heading "whatsnext" %}}
+
+<!--  
+* Learn about [scheduling](/docs/concepts/scheduling-eviction/kube-scheduler/)
+* Learn about [kube-scheduler Configuration](/docs/reference/scheduling/config/)
+-->
+* 了解[调度](/zh/docs/concepts/scheduling-eviction/kube-scheduler/)
+* 了解 [kube-scheduler 配置](/zh/docs/reference/scheduling/config/)
\ No newline at end of file

From 112af96e095f6ceebd08ddc153fe97a5e077b912 Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Fri, 25 Sep 2020 01:34:13 +0300
Subject: [PATCH 436/496] fix broken link

---
 i18n/en.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/i18n/en.toml b/i18n/en.toml
index 1c45087dec..899ffdd4bf 100644
--- a/i18n/en.toml
+++ b/i18n/en.toml
@@ -208,7 +208,7 @@ other = "Subscribe"
 other = "Synopsis"
 
 [thirdparty_message]
-other = """This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects. This page follows <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF website guidelines</a> by listing projects alphabetically. To add a project to this list, read the <a href="/contribute/style/content-guide/#third-party-content">content guide</a> before submitting a change."""
+other = """This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects. This page follows <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF website guidelines</a> by listing projects alphabetically. To add a project to this list, read the <a href="/docs/contribute/style/content-guide/#third-party-content">content guide</a> before submitting a change."""
 
 [ui_search_placeholder]
 other = "Search"

From 35eadb974436b117631ff31d161edefb7c8296c9 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Fri, 25 Sep 2020 08:43:45 +0700
Subject: [PATCH 437/496] Translate glossary for Namespace into Bahasa

---
 content/id/docs/reference/glossary/namespace.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/namespace.md

diff --git a/content/id/docs/reference/glossary/namespace.md b/content/id/docs/reference/glossary/namespace.md
new file mode 100644
index 0000000000..58678e689c
--- /dev/null
+++ b/content/id/docs/reference/glossary/namespace.md
@@ -0,0 +1,17 @@
+---
+title: Namespace
+id: namespace
+date: 2018-04-12
+full_link: /id/docs/concepts/overview/working-with-objects/namespaces
+short_description: >
+  Sebuah abstraksi yang digunakan oleh Kubernetes untuk mendukung multipel klaster virtual pada klaster fisik yang sama.
+
+aka:
+tags:
+- fundamental
+---
+Sebuah abstraksi yang digunakan oleh Kubernetes untuk mendukung multipel klaster virtual pada {{< glossary_tooltip text="klaster" term_id="cluster" >}} fisik yang sama.
+
+<!--more-->
+
+Namespace digunakan untuk mengatur objek-objek di dalam suatu klaster dan menyediakan cara untuk membagi sumber daya klaster. Nama sumber daya yang berada di dalam satu Namespace yang sama harus unik, akan tetapi tidak diharuskan dalam hal lintas Namespace.

From 5058f22ee17c635eea81e249ef8aa57d2c94f86f Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Fri, 25 Sep 2020 09:24:29 +0700
Subject: [PATCH 438/496] Translate glossary for kubectl into Bahasa

---
 content/id/docs/reference/glossary/kubectl.md | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/kubectl.md

diff --git a/content/id/docs/reference/glossary/kubectl.md b/content/id/docs/reference/glossary/kubectl.md
new file mode 100644
index 0000000000..579a4003c2
--- /dev/null
+++ b/content/id/docs/reference/glossary/kubectl.md
@@ -0,0 +1,18 @@
+---
+title: Kubectl
+id: kubectl
+date: 2018-04-12
+full_link: /docs/user-guide/kubectl-overview/
+short_description: >
+  Sebuah utilitas baris perintah untuk berkomunikasi dengan suatu server API Kubernetes.
+
+aka:
+tags:
+- tool
+- fundamental
+---
+Sebuah utilitas baris perintah untuk berkomunikasi dengan suatu server {{< glossary_tooltip text="API Kubernetes" term_id="kubernetes-api" >}}.
+
+<!--more-->
+
+Kamu dapat menggunakan kubectl untuk membuat, memeriksa, memperbarui, dan menghapus objek Kubernetes.

From f5af09b9f8a36e09d23abec1c6d56dff5bae3009 Mon Sep 17 00:00:00 2001
From: Nikhita Raghunath <nikitaraghunath@gmail.com>
Date: Fri, 25 Sep 2020 09:51:17 +0530
Subject: [PATCH 439/496] SSA: fix go marker for listMapKey in the merge
 strategy

Ref: https://github.com/kubernetes/kube-openapi/blob/64514a1d5d596b96e6f957e2be275ae14d6b0804/pkg/generators/extension.go#L49-L50
---
 content/en/docs/reference/using-api/api-concepts.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/reference/using-api/api-concepts.md b/content/en/docs/reference/using-api/api-concepts.md
index 350dd41539..c251e228ee 100644
--- a/content/en/docs/reference/using-api/api-concepts.md
+++ b/content/en/docs/reference/using-api/api-concepts.md
@@ -644,7 +644,7 @@ in Go files or in the
 | Golang marker | OpenAPI extension | Accepted values | Description | Introduced in |
 |---|---|---|---|---|
 | `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | Applicable to lists. `atomic` and `set` apply to lists with scalar elements only. `map` applies to lists of nested types only. If configured as `atomic`, the entire list is replaced during merge; a single manager manages the list as a whole at any one time. If `granular`, different managers can manage entries separately. | 1.16          |
-| `//+listMapKeys` | `x-kubernetes-list-map-keys` | Slice of map keys that uniquely identify entries for example `["port", "protocol"]` | Only applicable when `+listType=map`. A slice of strings whose values in combination must uniquely identify list entries. | 1.16 |
+| `//+listMapKey` | `x-kubernetes-list-map-keys` | Slice of map keys that uniquely identify entries for example `["port", "protocol"]` | Only applicable when `+listType=map`. A slice of strings whose values in combination must uniquely identify list entries. While there can be multiple keys, `listMapKey` is singular because keys need to be specified individually in the Go type. | 1.16 |
 | `//+mapType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to maps. `atomic` means that the map can only be entirely replaced by a single manager. `granular` means that the map supports separate managers updating individual fields. | 1.17 |
 | `//+structType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to structs; otherwise same usage and OpenAPI annotation as `//+mapType`.| 1.17 |
 

From c4b2c82254ed635e4eca4abac3858209d6768b3e Mon Sep 17 00:00:00 2001
From: madetara <x@madetara.dev>
Date: Thu, 24 Sep 2020 23:19:20 +0300
Subject: [PATCH 440/496] docs: add russian version community and CoC pages

Refs #18598
---
 content/ru/community/_index.html              | 236 ++++++++++++++++++
 content/ru/community/code-of-conduct.md       |  26 ++
 content/ru/community/static/README.md         |   2 +
 .../community/static/cncf-code-of-conduct.md  |  42 ++++
 4 files changed, 306 insertions(+)
 create mode 100644 content/ru/community/_index.html
 create mode 100644 content/ru/community/code-of-conduct.md
 create mode 100644 content/ru/community/static/README.md
 create mode 100644 content/ru/community/static/cncf-code-of-conduct.md

diff --git a/content/ru/community/_index.html b/content/ru/community/_index.html
new file mode 100644
index 0000000000..20d7ac5e79
--- /dev/null
+++ b/content/ru/community/_index.html
@@ -0,0 +1,236 @@
+---
+title: Сообщество
+layout: basic
+cid: community
+---
+
+<div class="newcommunitywrapper">
+<div class="banner1">
+  <img src="/images/community/kubernetes-community-final-02.jpg" alt="Галерея конференции Kubernetes" style="width:100%;padding-left:0px" class="desktop">
+  <img src="/images/community/kubernetes-community-02-mobile.jpg" alt="Галерея конференции Kubernetes" style="width:100%;padding-left:0px" class="mobile">
+</div>
+
+<div class="intro">
+<br class="mobile">
+<p>Сообщество Kubernetes — пользователи, участники проекта, и культура, которую мы создаём вместе — одна из главных причин космической скорости роста этого проекта с открытым исходным кодом. Наши культура и ценности продолжают расти и изменяться вместе с проектом. Мы все стремимся к постоянному улучшению проекта и того, как мы над ним работаем.
+<br><br>Мы — люди которые докладывают о проблемах и вносят изменения, участвуют во встречах, митапах Kubernetes, и KubeCon, продвигают его внедрение и развитие, запускают <code>kubectl get pods</code>, и поддерживают проект ещё множеством способов. Узнайте как стать частью этого прекрасного сообщества.</p>
+<br class="mobile">
+</div>
+
+<div class="community__navbar">
+
+<a href="#conduct">Кодекс поведения </a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+<a href="#videos">Видео</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+<a href="#discuss">Обсуждения</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+<a href="#events">Конференции и митапы</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+<a href="#news">Новости</a>
+
+</div>
+<br class="mobile"><br class="mobile">
+<div class="imagecols">
+<br class="mobile">
+  <div class="imagecol">
+    <img src="/images/community/kubernetes-community-final-03.jpg" alt="Галерея конференции Kubernetes" style="width:100%" class="desktop">
+  </div>
+
+  <div class="imagecol">
+    <img src="/images/community/kubernetes-community-final-04.jpg" alt="Галерея конференции Kubernetes" style="width:100%" class="desktop">
+  </div>
+
+  <div class="imagecol" style="margin-right:0% important">
+    <img src="/images/community/kubernetes-community-final-05.jpg" alt="Галерея конференции Kubernetes" style="width:100%;margin-right:0% important" class="desktop">
+  </div>
+  <img src="/images/community/kubernetes-community-04-mobile.jpg" alt="Галерея конференции Kubernetes" style="width:100%;margin-bottom:3%" class="mobile">
+
+<a name="conduct"></a>
+</div>
+
+
+
+<div class="conduct">
+<div class="conducttext">
+<br class="mobile"><br class="mobile">
+<br class="tablet"><br class="tablet">
+<div class="conducttextnobutton" style="margin-bottom:2%"><h1>Кодекс поведения</h1>
+Сообщество Kubernetes ценит уважение и инклюзивность, и следит за соблюдением Кодекса поведения. Если вы столкнулись с нарушением Кодекса поведения на конференции или митапе, в Slack, или другом средстве коммуникации, обратитесь в Комитет Кодекса поведения Kubernetes на <a href="mailto:conduct@kubernetes.io" style="color:#0662EE;font-weight:300">conduct@kubernetes.io</a>. Все обращения анонимны. Вы можете почитать о комитете&nbsp;<a href="https://github.com/kubernetes/community/tree/master/committee-code-of-conduct" style="color:#0662EE;font-weight:300">здесь</a>.
+<br>
+<a href="https://kubernetes.io/community/code-of-conduct/">
+<br class="mobile"><br class="mobile">
+
+<span class="fullbutton">
+УЗНАТЬ БОЛЬШЕ
+</span>
+</a>
+</div><a name="videos"></a>
+</div>
+</div>
+
+
+
+<div class="videos">
+<br class="mobile"><br class="mobile">
+<br class="tablet"><br class="tablet">
+<h1 style="margin-top:0px">Видео</h1>
+
+<div style="margin-bottom:4%;font-weight:300;text-align:center;padding-left:10%;padding-right:10%">У нас много видео на YouTube. Подписывайтесь чтобы не пропустить видео на самые разные&nbsp;темы.</div>
+
+<div class="videocontainer">
+
+<div class="video">
+
+  <iframe width="100%" height="250" src="https://www.youtube.com/embed/videoseries?list=PL69nYSiGNLP3azFUvYJjGn45YbF6C-uIg" title="Ежемесячные офисные часы" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>
+
+<a href="https://www.youtube.com/playlist?list=PL69nYSiGNLP3azFUvYJjGn45YbF6C-uIg">
+<div class="videocta">
+Ежемесячные офисные часы&nbsp;&#9654;</div>
+</a>
+</div>
+
+<div class="video">
+  <iframe width="100%" height="250" src="https://www.youtube.com/embed/videoseries?list=PL69nYSiGNLP1pkHsbPjzAewvMgGUpkCnJ" title="Еженедельные встречи сообщества" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>
+<a href="https://www.youtube.com/playlist?list=PL69nYSiGNLP1pkHsbPjzAewvMgGUpkCnJ">
+<div class="videocta">
+Еженедельные встречи сообщества&nbsp;&#9654;
+</div>
+</a>
+</div>
+
+<div class="video">
+
+<iframe width="100%" height="250" src="https://www.youtube.com/embed/videoseries?list=PL69nYSiGNLP3QpQrhZq_sLYo77BVKv09F" title="Доклады от участников сообщества" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>
+
+<a href="https://www.youtube.com/playlist?list=PL69nYSiGNLP3QpQrhZq_sLYo77BVKv09F">
+<div class="videocta">
+Доклады от участников сообщества&nbsp;&#9654;
+</div>
+
+</a>
+<a name="discuss"></a>
+</div>
+</div>
+</div>
+
+
+<div class="resources">
+<br class="mobile"><br class="mobile">
+<br class="tablet"><br class="tablet">
+<h1 style="padding-top:1%">Обсуждения</h1>
+
+<div style="font-weight:300;text-align:center">Мы много общаемся. Присоединяйтесь к нам на платформе которая вам&nbsp;подходит.</div>
+
+<div class="resourcecontainer">
+
+<div class="resourcebox">
+<img src="/images/community/discuss.png" alt=Форум" style="width:80%;padding-bottom:2%">
+<a href="https://discuss.kubernetes.io/" style="color:#0662EE;display:block;margin-top:1%">
+форум&nbsp;&#9654;
+</a>
+<div class="resourceboxtext" style="font-size:12px;text-transform:none !important;font-weight:300;line-height:1.4em;color:#333333;margin-top:4%">
+Тематические технические дискуссии о документации, StackOverflow, и многом&nbsp;другом
+</div>
+</div>
+
+<div class="resourcebox">
+<img src="/images/community/twitter.png" alt="Твиттер" style="width:80%;padding-bottom:2%">
+<a href="https://twitter.com/kubernetesio" style="color:#0662EE;display:block;margin-top:1%">
+Твиттер&nbsp;&#9654;
+</a>
+<div class="resourceboxtext" style="font-size:12px;text-transform:none !important;font-weight:300;line-height:1.4em;color:#333333;margin-top:4%">Анонсы блогов, событий, новостей и идей в реальном времени
+</div>
+</div>
+
+<div class="resourcebox">
+<img src="/images/community/github.png" alt="Гитхаб" style="width:80%;padding-bottom:2%">
+<a href="https://github.com/kubernetes/kubernetes" style="color:#0662EE;display:block;margin-top:1%">
+Гитхаб&nbsp;&#9654;
+</a>
+<div class="resourceboxtext" style="font-size:12px;text-transform:none !important;font-weight:300;line-height:1.4em;color:#333333;margin-top:4%">
+Отслеживание issue проекта, и конечно же исходный код
+</div>
+</div>
+
+<div class="resourcebox">
+<img src="/images/community/stack.png" alt="Stack Overflow" style="width:80%;padding-bottom:2%">
+<a href="https://stackoverflow.com/search?q=kubernetes" style="color:#0662EE;display:block;margin-top:1%">
+stack overflow&nbsp;&#9654;
+</a>
+<div class="resourceboxtext" style="font-size:12px;text-transform:none !important;font-weight:300;line-height:1.4em;color:#333333;margin-top:4%">
+  Техническая помощь на любой&nbsp;случай
+  <a name="events"></a>
+</div>
+</div>
+
+<!--
+<div class="resourcebox">
+
+<img src="/images/community/slack.png" style="width:80%">
+
+slack&nbsp;&#9654;
+
+<div class="resourceboxtext" style="font-size:11px;text-transform:none !important;font-weight:200;line-height:1.4em;color:#333333;margin-top:4%">
+With 170+ channels, you'll find one that fits your needs.
+</div>
+
+</div>-->
+
+</div>
+</div>
+<div class="events">
+  <br class="mobile"><br class="mobile">
+  <br class="tablet"><br class="tablet">
+<div class="eventcontainer">
+ <h1 style="color:white !important">Предстоящие события</h1>
+    {{< upcoming-events >}}
+</div>
+</div>
+
+<div class="meetups">
+<div class="meetupcol">
+<div class="meetuptext">
+<h1 style="text-align:left">Мировое сообщество</h1>
+Мы провели уже более 150 митапов по всему миру. Найдите участников сообщества рядом с вами, а если таких нет, то возьмите ситуацию в свои руки и создайте сообщество.
+</div>
+<a href="https://www.meetup.com/topics/kubernetes/">
+<div class="button">
+НАЙТИ МИТАП
+</div>
+</a>
+<a name="news"></a>
+</div>
+</div>
+
+
+<!--
+<div class="contributor">
+<div class="contributortext">
+<br>
+<h1 style="text-align:left">
+New Contributors Site
+ </h1>
+Text about new contributors site.
+
+<br><br>
+
+<div class="button">
+VISIT SITE
+</div>
+</div>
+</div>
+
+-->
+
+<div class="news">
+<br class="mobile"><br class="mobile">
+<br class="tablet"><br class="tablet">
+<h1 style="margin-bottom:2%">Последние новости</h1>
+
+<br>
+<div class="twittercol1">
+<a class="twitter-timeline" data-tweet-limit="1" href="https://twitter.com/kubernetesio?ref_src=twsrc%5Etfw">Твиты от kubernetesio</a> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
+</div>
+
+<br>
+<br><br><br><br>
+</div>
+
+</div>
diff --git a/content/ru/community/code-of-conduct.md b/content/ru/community/code-of-conduct.md
new file mode 100644
index 0000000000..a4386b67e4
--- /dev/null
+++ b/content/ru/community/code-of-conduct.md
@@ -0,0 +1,26 @@
+---
+title: Сообщество
+layout: basic
+cid: community
+css: /css/community.css
+---
+
+<div class="community_main">
+<h1>Кодекс поведения сообщества Kubernetes</h1>
+
+Kubernetes следует
+<a href="https://github.com/cncf/foundation/blob/master/code-of-conduct.md">Кодексу Поведения CNCF</a>.
+Текст кодекса CNCF продублирован здесь, на момент
+<a href="https://github.com/cncf/foundation/blob/214585e24aab747fb85c2ea44fbf4a2442e30de6/code-of-conduct.md">коммита 214585e</a>.
+Если вы заметили что он устарел, пожалуйста
+<a href="https://github.com/kubernetes/website/issues/new">создайте issue</a>.
+
+Если вы столкнулись с нарушением кодекса поведения во время конференции или митапа, в Slack, или другом средстве общения, обратитесь в
+<a href="https://git.k8s.io/community/committee-code-of-conduct">Комитет кодекса поведения Kubernetes</a>.
+Вы можете написать нам на электронную почту <a href="mailto:conduct@kubernetes.io">conduct@kubernetes.io</a>.
+Ваша анонимность гарантирована.
+
+<div class="cncf_coc_container">
+{{< include "/static/cncf-code-of-conduct.md" >}}
+</div>
+</div>
diff --git a/content/ru/community/static/README.md b/content/ru/community/static/README.md
new file mode 100644
index 0000000000..4a448d9754
--- /dev/null
+++ b/content/ru/community/static/README.md
@@ -0,0 +1,2 @@
+Файлы в этой диркетории было импортированы из других источников.
+Не редактируйте их напрямую, вместо этого заменяйте их более новыми версиями.
diff --git a/content/ru/community/static/cncf-code-of-conduct.md b/content/ru/community/static/cncf-code-of-conduct.md
new file mode 100644
index 0000000000..34adc86258
--- /dev/null
+++ b/content/ru/community/static/cncf-code-of-conduct.md
@@ -0,0 +1,42 @@
+<!-- Не редактируйте этот файл напрямую. Используйте последнюю версию с
+     https://github.com/cncf/foundation/blob/master/code-of-conduct-languages/ru.md -->
+Кодекс поведения Сообщества CNCF v1.0
+------------------------------------
+
+### Кодекс поведения Сообщества
+
+В качестве участников и кураторов этого проекта, а также в интересах создания
+открытого и гостеприимного сообщества, мы обязуемся уважать всех людей, которые вносят свой вклад
+через сообщения о неполадках, разработку нового функционала, обновление документации,
+исправление неполадок, а также другие действия.
+
+Мы стремимся сделать участие в этом проекте беспрепятственным для
+каждого, независимо от опыта, пола, гендерной идентичности и самовыражения,
+сексуальной ориентации, наличия инвалидности, внешности, роста, расы, этнической принадлежности, возраста,
+религии или национальности.
+
+Недопустимы следующие примеры поведения участников:
+
+* Использование оборотов речи или изображений сексуального характера
+* Личностные оскорбления
+* Троллинг или оскорбительные / уничижительные комментарии
+* Домогательства любой формы и проявления
+* Публикация личной информации других лиц, такой как физические или электронные адреса,
+  без явного разрешения от этих лиц
+* Другое неэтичное или непрофессиональное поведение.
+
+Кураторы проекта имеют право и ответственность удалять, редактировать или отклонять
+комментарии, коммиты, код, правки вики, вопросы и другие материалы, которые не соответствуют критериям Кодекса поведения. Приняв этот Кодекс поведения, кураторы проекта
+берут на себя обязательство справедливо и последовательно применять эти принципы к каждому аспекту
+управления этим проектом. Участники проекта, которые не следуют или не соблюдают Кодекс
+Поведения могут быть навсегда удалены из проекта.
+
+Этот кодекс поведения применяется, как внутри проекта так и в публичных местах,
+когда человек представляет проект или его сообщество.
+
+Чтобы проинформировать о злоупотреблении, преследовании и других видах неприемлемого поведения в Kubernetes, отправьте сообщение в [Комитет правил поведения в Kubernetes](https://git.k8s.io/community/committee-code-of-conduct) на электронный адрес: <conduct@kubernetes.io>. Информацию о других проектах можно получить у координатора проектов фонда CNCF или нашего посредника Миши Чоундари (Mishi Choudhary) <mishi@linux.com>.
+
+### Кодекс поведения на мероприятия CNCF
+
+Мероприятия и Эвенты CNCF регулируются Linux Foundation [Кодекс поведения] (https://events.linuxfoundation.org/code-of-conduct/), доступным на странице мероприятий. Он разработан
+в соответствии с вышеупомянутой политикой и также включает больше деталей относительно того, как реагировать на инциденты.

From 9cb997ab159a143ab4202c56d18644f782513e0d Mon Sep 17 00:00:00 2001
From: Jerry Park <jaehwa@gmail.com>
Date: Sat, 12 Sep 2020 17:00:03 +0900
Subject: [PATCH 441/496] Second Korean l10n work for release-1.19

- Fix issue with links to already translated documents (#23829)
- Update outdated files in the dev-1.19-ko.2 branch (#23827)
- Fix issue with links to already translated documents (#23999)
- Translate tasks/configure-pod-container/configure-persistent-volume-storage in Korean (#23867)
- Translate reference/access-authn-authz/service-accounts-admin/ into Korean (#23974)
- Translate reference/access-authn-authz/controlling-access/ into Korean (#23955)
- Translate tasks/job/automated-tasks-with-cron-jobs.md into Korean (#23543)
- Translate reference/access-authn-authz/authorization/ into Korean (#23989)
- Update Ko localization guide (#24023)
- Translate tasks/job/fine-parallel-processing-work-queue/ into Korean (#23841)
- Translate setup/production-environment/windows/intro-windows-in-kubernetes and reflect reviews (#23879)
- Translate tasks/debug-application-cluster/debug-pod-replication-controller in Korean (#23896)

Co-authored-by: seokho-son <shsongist@gmail.com>
Co-authored-by: jmyung <jesang.myung@gmail.com>
Co-authored-by: Jerry Park <jaehwa@gmail.com>
Co-authored-by: markruler <csu0414@gmail.com>
Co-authored-by: bluefriday <bluefriday86@gmail.com>
---
 .../concepts/cluster-administration/addons.md |   4 +-
 .../cluster-administration/cloud-providers.md | 362 ----------
 .../cluster-administration/networking.md      |   3 +-
 .../docs/concepts/configuration/configmap.md  |  13 +-
 .../docs/concepts/configuration/overview.md   |   2 +-
 .../ko/docs/concepts/configuration/secret.md  |  65 +-
 content/ko/docs/concepts/containers/_index.md |   2 +-
 .../api-extension/apiserver-aggregation.md    |   4 +-
 .../api-extension/custom-resources.md         |   2 +-
 .../docs/concepts/overview/kubernetes-api.md  |   2 +-
 .../scheduling-eviction/kube-scheduler.md     |   8 +-
 .../resource-bin-packing.md                   |   0
 .../scheduler-perf-tuning.md                  |   5 +-
 content/ko/docs/concepts/security/overview.md |   4 +-
 .../connect-applications-service.md           |   4 +-
 .../services-networking/dual-stack.md         |   3 +-
 .../concepts/services-networking/ingress.md   |   2 -
 .../concepts/services-networking/service.md   |   2 +-
 content/ko/docs/concepts/storage/volumes.md   |   5 +-
 .../concepts/workloads/controllers/job.md     |   4 +-
 .../ko/docs/concepts/workloads/pods/_index.md |   8 +-
 .../concepts/workloads/pods/pod-lifecycle.md  |   4 +-
 content/ko/docs/contribute/localization_ko.md |   6 +-
 .../contribute/participate/pr-wranglers.md    |   2 +-
 .../participate/roles-and-responsibilities.md |   2 +-
 .../ko/docs/home/supported-doc-versions.md    |  27 +-
 content/ko/docs/reference/_index.md           |   2 +-
 .../reference/access-authn-authz/_index.md    |   4 +
 .../access-authn-authz/authorization.md       | 201 ++++++
 .../access-authn-authz/controlling-access.md  | 162 +++++
 .../service-accounts-admin.md                 | 112 +++
 .../feature-gates.md                          |   6 +-
 .../docs/reference/glossary/cloud-provider.md |   3 +-
 .../reference/using-api/client-libraries.md   |   2 +
 .../docs/setup/best-practices/certificates.md |   7 +-
 .../setup/learning-environment/minikube.md    |  10 +-
 .../container-runtimes.md                     |  76 +-
 .../on-premises-vm/_index.md                  |   4 -
 .../windows/intro-windows-in-kubernetes.md    | 680 ++++++++++++++++++
 .../windows/user-guide-windows-containers.md  |   2 +-
 .../web-ui-dashboard.md                       |   2 +-
 .../declare-network-policy.md                 |  12 +-
 .../kubeadm/kubeadm-upgrade.md                |   2 +-
 .../configure-persistent-volume-storage.md    | 287 ++++++++
 .../pull-image-private-registry.md            |   2 +-
 .../debug-pod-replication-controller.md       | 103 +++
 .../define-command-argument-container.md      |   4 +-
 content/ko/docs/tasks/job/_index.md           |   5 +
 .../job/automated-tasks-with-cron-jobs.md     | 208 ++++++
 .../fine-parallel-processing-work-queue.md    | 233 ++++++
 .../docs/tasks/network/validate-dual-stack.md |   1 -
 ...un-single-instance-stateful-application.md |   2 +-
 content/ko/docs/tasks/tools/_index.md         |   4 +-
 .../ko/docs/tasks/tools/install-kubectl.md    |   2 +-
 .../create-cluster/cluster-interactive.html   |   5 +-
 .../deploy-app/deploy-interactive.html        |   5 +-
 .../explore/explore-interactive.html          |   5 +-
 .../scale/scale-interactive.html              |   5 +-
 .../basic-stateful-set.md                     |   4 +-
 .../mysql-wordpress-persistent-volume.md      |  17 +-
 .../examples/application/job/redis/job.yaml   |  14 +
 .../examples/application/job/redis/worker.py  |  23 +
 .../ko/examples/pods/storage/pv-claim.yaml    |  11 +
 content/ko/examples/pods/storage/pv-pod.yaml  |  20 +
 .../ko/examples/pods/storage/pv-volume.yaml   |  14 +
 65 files changed, 2220 insertions(+), 586 deletions(-)
 delete mode 100644 content/ko/docs/concepts/cluster-administration/cloud-providers.md
 rename content/ko/docs/concepts/{configuration => scheduling-eviction}/resource-bin-packing.md (100%)
 create mode 100644 content/ko/docs/reference/access-authn-authz/_index.md
 create mode 100644 content/ko/docs/reference/access-authn-authz/authorization.md
 create mode 100644 content/ko/docs/reference/access-authn-authz/controlling-access.md
 create mode 100644 content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
 delete mode 100644 content/ko/docs/setup/production-environment/on-premises-vm/_index.md
 create mode 100644 content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
 create mode 100644 content/ko/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
 create mode 100644 content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
 create mode 100644 content/ko/docs/tasks/job/_index.md
 create mode 100644 content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md
 create mode 100644 content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md
 create mode 100644 content/ko/examples/application/job/redis/job.yaml
 create mode 100644 content/ko/examples/application/job/redis/worker.py
 create mode 100644 content/ko/examples/pods/storage/pv-claim.yaml
 create mode 100644 content/ko/examples/pods/storage/pv-pod.yaml
 create mode 100644 content/ko/examples/pods/storage/pv-volume.yaml

diff --git a/content/ko/docs/concepts/cluster-administration/addons.md b/content/ko/docs/concepts/cluster-administration/addons.md
index c0caa56526..325cad9907 100644
--- a/content/ko/docs/concepts/cluster-administration/addons.md
+++ b/content/ko/docs/concepts/cluster-administration/addons.md
@@ -5,12 +5,12 @@ content_type: concept
 
 <!-- overview -->
 
+{{% thirdparty-content %}}
+
 애드온은 쿠버네티스의 기능을 확장한다.
 
 이 페이지는 사용 가능한 일부 애드온과 관련 설치 지침 링크를 나열한다.
 
-각 섹션의 애드온은 알파벳 순으로 정렬되어 있다. 순서는 우선 순위와는 상관없다.
-
 <!-- body -->
 
 ## 네트워킹과 네트워크 폴리시
diff --git a/content/ko/docs/concepts/cluster-administration/cloud-providers.md b/content/ko/docs/concepts/cluster-administration/cloud-providers.md
deleted file mode 100644
index 6bb421a3d5..0000000000
--- a/content/ko/docs/concepts/cluster-administration/cloud-providers.md
+++ /dev/null
@@ -1,362 +0,0 @@
----
-title: 클라우드 제공자
-content_type: concept
-weight: 30
----
-
-<!-- overview -->
-이 페이지에서는 특정 클라우드 제공자에서 실행 중인 쿠버네티스를 관리하는 방법에
-대해 설명한다. 다른 많은 타사 클라우드 제공자 프로젝트가 있지만, 이 목록은 쿠버네티스 자체에 의존하거나, 포함되어있는 프로젝트에 한정한다.
-
-<!-- body -->
-### kubeadm
-[kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/)은 쿠버네티스 클러스터를 생성하는 데 많이 사용하는 옵션이다.
-kubeadm에는 클라우드 제공자에 대한 구성 정보를 지정하는 구성 옵션이 있다. 예를 들어
-kubeadm을 사용하여 일반적인 인-트리(in-tree) 클라우드 제공자를 아래와 같이 구성할 수 있다.
-
-```yaml
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: InitConfiguration
-nodeRegistration:
-  kubeletExtraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
----
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: ClusterConfiguration
-kubernetesVersion: v1.13.0
-apiServer:
-  extraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
-  extraVolumes:
-  - name: cloud
-    hostPath: "/etc/kubernetes/cloud.conf"
-    mountPath: "/etc/kubernetes/cloud.conf"
-controllerManager:
-  extraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
-  extraVolumes:
-  - name: cloud
-    hostPath: "/etc/kubernetes/cloud.conf"
-    mountPath: "/etc/kubernetes/cloud.conf"
-```
-
-인-트리 클라우드 제공자는 일반적으로
-[kube-apiserver](/docs/reference/command-line-tools-reference/kube-apiserver/),
-[kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/)
-및 [kubelet](/docs/reference/command-line-tools-reference/kubelet/)의 커맨드 라인에 지정된 `--cloud-provider` 와 `--cloud-config` 가 모두 필요하다.
-각 제공자에 대해 `--cloud-config` 에 지정된 파일의 내용도 아래에 설명되어 있다.
-
-모든 외부 클라우드 제공자의 경우, 아래 제공자에 대한 제목 아래에 있는 개별 리포지터리의 지침을 따르거나,
-[모든 리포지터리 목록](https://github.com/kubernetes?q=cloud-provider-&type=&language=)을 볼 수 있다
-
-## AWS
-이 섹션에서는 Amazon Web Services에서 쿠버네티스를 실행할 때 사용할 수 있는
-모든 구성에 대해 설명한다.
-
-이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes/cloud-provider-aws](https://github.com/kubernetes/cloud-provider-aws#readme)이다.
-
-### 노드 이름
-
-AWS 클라우드 제공자는 AWS 인스턴스의 프라이빗 DNS 이름을 쿠버네티스 노드 오브젝트의 이름으로 사용한다.
-
-### 로드 밸런서
-아래와 같이 어노테이션을 구성하여 AWS의 특정 기능을 사용하도록
-[외부 로드 밸런서](/docs/tasks/access-application-cluster/create-external-load-balancer/)를 설정할 수 있다.
-
-```yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: example
-  namespace: kube-system
-  labels:
-    run: example
-  annotations:
-     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:xx-xxxx-x:xxxxxxxxx:xxxxxxx/xxxxx-xxxx-xxxx-xxxx-xxxxxxxxx #이 값을 교체한다
-     service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-spec:
-  type: LoadBalancer
-  ports:
-  - port: 443
-    targetPort: 5556
-    protocol: TCP
-  selector:
-    app: example
-```
-_어노테이션_ 을 사용하여 AWS의 로드 밸런서 서비스에 다른 설정을 적용할 수 있다. 다음은 AWS ELB에서 지원하는 어노테이션에 대해 설명한다.
-
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval`: 액세스 로그 방출 간격을 지정하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-enabled`: 서비스에서 액세스 로그를 활성화하거나 비활성화하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name`: 액세스 로그 s3 버킷 이름을 지정하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix`: 액세스 로그 s3 버킷 접두사를 지정하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags`: 서비스에서 쉼표로 구분된 키-값 쌍의 목록을 지정하여 ELB에 추가 태그로 기록된다. 예를 들면 다음과 같다. `"Key1=Val1,Key2=Val2,KeyNoVal1=,KeyNoVal2"`
-* `service.beta.kubernetes.io/aws-load-balancer-backend-protocol`: 서비스에서 리스너 뒤의 백엔드(파드)가 언급한 프로토콜을 지정하는 데 사용된다. 만약 `http` (기본값) 또는 `https` 인 경우, 연결을 종료하고 헤더를 파싱하는 HTTPS 리스너가 생성된다. `ssl` 이나 `tcp` 로 설정된 경우, "원시(raw)" SSL 리스너가 사용된다. `http` 로 설정하고 `aws-load-balancer-ssl-cert` 를 사용하지 않았다면 HTTP 리스너가 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-cert`: 서비스에서 보안 리스너를 요청하는 데 사용된다. 값은 유효한 인증서 ARN이다. 자세한 내용은, [ELB 리스너 구성](https://docs.aws.amazon.com/ko_kr/elasticloadbalancing/latest/classic/elb-listener-config.html)을 참고한다. CertARN은 IAM 또는 CM 인증서 ARN이다(예: `arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012`).
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-enabled`: 서비스에서 연결 드레이닝(draining)을 활성화하거나 비활성화하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-timeout`: 서비스에서 연결 드레이닝 타임아웃 값을 지정하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout`: 서비스에서 유휴 연결 타임아웃 값을 지정하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled`: 서비스에서 교차 영역의 로드 밸런싱을 활성화하거나 비활성화하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-security-groups`: 생성된 ELB에 추가할 보안 그룹을 지정하는 데 사용된다. 이는 이전에 ELB에 할당된 다른 모든 보안 그룹을 대체한다. 여기에 정의된 보안 그룹은 서비스 간에 공유해서는 안된다.
-* `service.beta.kubernetes.io/aws-load-balancer-extra-security-groups`: 서비스에서 생성된 ELB에 추가할 추가적인 보안 그룹을 지정하는 데 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-internal`: 서비스에서 내부 ELB 사용 희망을 표시하기 위해 사용된다.
-* `service.beta.kubernetes.io/aws-load-balancer-proxy-protocol`: 서비스에서 ELB에서 프록시 프로토콜을 활성화하는 데 사용된다. 현재는 모든 ELB 백엔드에서 프록시 프로토콜을 사용하도록 설정하는 `*` 값만 허용한다. 향후에는 특정 백엔드에서만 프록시 프로토콜을 설정할 수 있도록 이를 조정할 수 있게 된다.
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-ports`: SSL/HTTPS 리스너를 사용할 쉼표로 구분된 포트의 목록을 지정하기 위해 서비스에서 사용된다. 기본값은 `*`(모두)이다.
-
-AWS 어노테이션에 대한 정보 출처는 [aws.go](https://github.com/kubernetes/legacy-cloud-providers/blob/master/aws/aws.go)의 코멘트이다.
-
-## Azure
-
-이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes/cloud-provider-azure](https://github.com/kubernetes/cloud-provider-azure#readme)이다.
-
-### 노드 이름
-
-Azure 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름(hostname)을 사용한다.
-참고로 쿠버네티스 노드 이름은 Azure VM 이름과 일치해야 한다.
-
-## GCE
-
-이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes/cloud-provider-gcp](https://github.com/kubernetes/cloud-provider-gcp#readme)이다.
-
-### 노드 이름
-
-GCE 클라우드 제공자는 쿠버네티스 노드 오브젝트의 이름으로 노드의 (kubelet에 의해 결정되거나 `--hostname-override` 로 재정의된) 호스트 이름을 사용한다.
-참고로 쿠버네티스 노드 이름의 첫 번째 세그먼트는 GCE 인스턴스 이름과 일치해야 한다(예: `kubernetes-node-2.c.my-proj.internal` 이름이 지정된 노드는 `kubernetes-node-2` 이름이 지정된 인스턴스에 해당해야 함).
-
-## HUAWEI CLOUD
-
-외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes-sigs/cloud-provider-huaweicloud](https://github.com/kubernetes-sigs/cloud-provider-huaweicloud)이다.
-
-## OpenStack
-이 섹션에서는 쿠버네티스와 함께 OpenStack을 사용할 때 사용할 수 있는
-모든 구성에 대해 설명한다.
-
-이 외부 클라우드 제공자를 사용하려는 경우, 해당 리포지터리는 [kubernetes/cloud-provider-openstack](https://github.com/kubernetes/cloud-provider-openstack#readme)이다.
-
-### 노드 이름
-
-OpenStack 클라우드 제공자는 (OpenStack 메타데이터에서 결정한) 인스턴스 이름을 쿠버네티스 노드 오브젝트의 이름으로 사용한다.
-참고로 kubelet이 노드 오브젝트를 성공적으로 등록하려면 인스턴스 이름이 유효한 쿠버네티스 노드 이름이어야 한다.
-
-### 서비스
-
-쿠버네티스에 대한
-OpenStack 클라우드 제공자 구현은 사용 가능한 경우 기본 클라우드에서
-이러한 OpenStack 서비스 사용을 지원한다.
-
-| 서비스                    | API 버전         | 필수      |
-|--------------------------|----------------|----------|
-| 블록 스토리지 (Cinder)      | V1†, V2, V3    | 아니오     |
-| 컴퓨트 (Nova)              | V2             | 아니오    |
-| 아이덴티티(Identity) (Keystone) | V2‡,  V3       | 예        |
-| 로드 밸런싱 (Neutron)       | V1§, V2        | 아니오     |
-| 로드 밸런싱 (Octavia)       | V2             | 아니오     |
-
-† 블록 스토리지 V1 API 지원은 사용 중단(deprecated)되며, 쿠버네티스 1.9에서 블록 스토리지
-V3 API 지원이 추가되었다.
-
-‡ 아이덴티티 V2 API 지원은 사용 중단되며, 향후 릴리스에서는 제공자에서
-제거될 예정이다. "Queens" 릴리스부터 OpenStack은 더 이상 아이덴티티 V2 API를
-공개하지 않는다.
-
-§ 로드 밸런싱 V1 API 지원이 쿠버네티스 1.9에서 제거되었다.
-
-서비스 디스커버리는 제공자 구성에서 제공된 `auth-url` 을 사용하여
-OpenStack 아이덴티티(Keystone)에서 관리하는 서비스 카탈로그를
-나열하여 수행된다. Keystone 이외의 OpenStack 서비스를 사용할 수 없고
-영향을 받는 기능에 대한 지원을 거부할 경우 제공자는 기능이
-점진적으로 떨어진다. 기본 클라우드에서 Neutron이 게시한 확장 목록을 기반으로
-특정 기능을 활성화하거나 비활성화할 수도 있다.
-
-### cloud.conf
-쿠버네티스는 cloud.conf 파일을 통해 OpenStack과 상호 작용하는 방법을 알고 있다. 쿠버네티스에
-OpenStack 인증 엔드포인트의 자격 증명과 위치를 제공하는 파일이다.
-다음의 세부 정보를 지정하여 cloud.conf 파일을 만들 수 있다.
-
-#### 일반적인 구성
-이것은 가장 자주 설정해야 하는 값에 대한 일반적인 구성의
-예시이다. OpenStack 클라우드의 Keystone
-엔드포인트에서, 제공자를 가리키고 이를 인증하는 방법에 대한 세부 사항을 제공하고,
-로드 밸런서를 구성한다.
-
-```yaml
-[Global]
-username=user
-password=pass
-auth-url=https://<keystone_ip>/identity/v3
-tenant-id=c869168a828847f39f7f06edd7305637
-domain-id=2a73b8f597c04551a0fdc8e95544be8a
-
-[LoadBalancer]
-subnet-id=6937f8fa-858d-4bc9-a3a5-18d2c957166a
-```
-
-##### 글로벌
-OpenStack 제공자에 대한 다음의 구성 옵션은 글로벌
-구성과 관련이 있으며 `cloud.conf` 파일의 `[Global]` 섹션에 있어야
-한다.
-
-* `auth-url` (필수): 인증에 사용되는 Keystone API의 URL이다.
-  OpenStack 제어판의 액세스 및 보안 > API 액세스 >
-  자격 증명에서 찾을 수 있다.
-* `username` (필수): Keystone에 설정된 유효한 사용자의 username을 나타낸다.
-* `password` (필수): Keystone에 설정된 유효한 사용자의 password를 나타낸다.
-* `tenant-id` (필수): 리소스를 생성하려는 프로젝트의 id를 지정하는 데
-  사용된다.
-* `tenant-name` (선택): 리소스를 생성하려는 프로젝트의 이름을
-  지정하는 데 사용된다.
-* `trust-id` (선택): 권한 부여에 사용할 트러스트(trust)의 식별자를 지정하는 데
-  사용된다. 트러스트는 한 사용자(트러스터(trustor))의 권한을 다른 사용자(트러스티(trustee))에게 역할을
-  위임하고, 선택적으로 트러스티가 트러스터를 가장하도록
-  허용한다. 사용 가능한 트러스트는
-  Keystone API의 `/v3/OS-TRUST/trusts` 엔드포인트 아래에 있다.
-* `domain-id` (선택): 사용자가 속한 도메인의 id를 지정하는 데
-  사용된다.
-* `domain-name` (선택): 사용자가 속한 도메인의 이름을 지정하는 데
-  사용된다.
-* `region` (선택): 멀티-리전(multi-region) OpenStack 클라우드에서
-  실행할 때 사용할 리전의 식별자를 지정하는 데 사용된다. 리전은 OpenStack 디플로이먼트의
-  일반 디비전(division)이다. 리전에 엄격한 지리적 의미는 없지만,
-  디플로이먼트 시 `us-east` 와 같은
-  리전의 식별자에 지리적 이름을 사용할 수 있다. 사용 가능한 지역은
-  Keystone API의 `/v3/regions` 엔드포인트 아래에 있다.
-* `ca-file` (선택): 사용자 지정 CA 파일의 경로를 지정하는 데 사용된다.
-
-
-테넌트를 프로젝트로 변경하는 Keystone V3을 사용하면 `tenant-id` 값이
-API의 프로젝트 구성에 자동으로 매핑된다.
-
-#####  로드 밸런서
-OpenStack 제공자에 대한 다음의 구성 옵션은 로드 밸런서와 관련이 있으며
-`cloud.conf` 파일의 `[LoadBalancer]` 섹션에 있어야
-한다.
-
-* `lb-version` (선택): 자동 버전 감지를 대체하는 데 사용된다. 유효한
-  값은 `v1` 또는 `v2` 이다. 값이 제공되지 않는 경우 자동 감지는
-  기본 OpenStack 클라우드에 의해 제공되는 가장 최신의 지원되는 버전을
-  선택한다.
-* `use-octavia` (선택): Neutron-LBaaS를 사용하는 대신 LoadBalancer 유형의
-  서비스 구현에 Octavia를 사용할지 여부를 결정한다. 기본값: true
-  주의: Openstack CCM은 v1.17.0 이후로 기본 로드 밸런서 구현으로 Octavia를 사용한다.
-* `subnet-id` (선택): 로드 밸런서를 생성하려는 서브넷의 id를
-  지정하는 데 사용된다. Network > Networks 에서 찾을 수 있다. 해당
-  네트워크를 클릭하여 서브넷을 가져온다.
-* `floating-network-id` (선택): 지정된 경우, 로드 밸런서에 대한 유동 IP를
-  생성한다.
-* `lb-method` (선택): 로드 밸런서 풀(pool)의 멤버 간에 부하가
-  분산되는 알고리즘을 지정하는 데 사용된다. 값은
-  `ROUND_ROBIN`, `LEAST_CONNECTIONS` 또는 `SOURCE_IP` 가 될 수 있다. 지정되지
-  않은 경우 기본 동작은 `ROUND_ROBIN` 이다.
-* `lb-provider` (선택): 로드 밸런서의 제공자를 지정하는 데 사용된다.
-  지정하지 않으면, neutron에 구성된 기본 제공자 서비스가
-  사용된다.
-* `create-monitor` (선택): Neutron 로드 밸런서에 대한 헬스 모니터를
-  생성할지의 여부를 나타낸다. 유효한 값은 `true` 및 `false` 이다.
-  기본값은 `false` 이다. `true` 가 지정되면 `monitor-delay`,
-  `monitor-timeout` 및 `monitor-max-retries` 도 설정해야 한다.
-* `monitor-delay` (선택): 로드 밸런서의 멤버에게 프로브(probe)를
-  보내는 간격의 시간이다. 유효한 시간 단위를 지정해야 한다. 유효한 시간 단위는 "ns", "us"(또는 "µs"), "ms", "s", "m", "h"이다.
-* `monitor-timeout` (선택): 모니터가 타임아웃 되기 전에 핑(ping) 응답을
-  기다리는 최대 시간이다. 값은 지연 값보다 작아야
-  한다. 유효한 시간 단위를 지정해야 한다. 유효한 시간 단위는 "ns", "us"(또는 "µs"), "ms", "s", "m", "h"이다.
-* `monitor-max-retries` (선택): 로드 밸런서 멤버의 상태를 INACTIVE로
-  변경하기 전에 허용되는 핑 오류 수이다. 1에서 10 사이의
-  숫자여야 한다.
-* `manage-security-groups` (선택): 로드 밸런서가 보안 그룹 규칙을
-  자동으로 관리해야 하는지의 여부를 결정한다. 유효한 값은
-  `true` 및 `false` 이다. 기본값은 `false` 이다. `true` 가 지정되면
-  `node-security-group` 도 제공해야 한다.
-* `node-security-group` (선택): 관리할 보안 그룹의 ID이다.
-
-##### 블록 스토리지
-OpenStack 제공자에 대한 다음의 구성 옵션은 블록 스토리지와 관련이 있으며
-`cloud.conf` 파일의 `[BlockStorage]` 섹션에 있어야 한다.
-
-* `bs-version` (선택): 자동 버전 감지를 대체하는 데 사용된다. 유효한
-  값은 `v1`, `v2`, `v3` 및 `auto` 이다. `auto` 가 지정되면 자동
-  감지는 기본 OpenStack 클라우드에 의해 노출되는 가장 최신의 지원되는
-  버전을 선택한다. 제공되지 않은 경우 기본값은 `auto` 이다.
-* `trust-device-path` (선택): 대부분의 시나리오에서 Cinder가 제공한
-  블록 장치 이름(예: `/dev/vda`)을 신뢰할 수 없다. 이 부울은
-  이 동작을 토글(toggle)한다. 이를 `true` 로 설정하면 Cinder에서 제공한
-  블록 장치 이름을 신뢰하게 된다. 기본값인 `false` 는 일련 번호와
-  `/dev/disk/by-id` 를 매핑하여 장치 경로를 검색하게 하며
-  권장하는 방법이다.
-* `ignore-volume-az` (선택): Cinder 볼륨을 연결할 때 가용 영역(availability zone)
-  사용에 영향을 주기 위해 사용된다. Nova와 Cinder의 가용성
-  영역이 서로 다른 경우, 이 값을 `true` 로 설정해야 한다. 이는 가장 일반적인 상황으로 Nova 가용 영역은
-  많지만 Cinder는 하나의 가용 영역만 있는 경우이다.
-  이전 릴리스에서 사용된 동작을 유지하기 위해 기본값은 `false`
-  이지만, 나중에 변경될 수 있다.
-* `node-volume-attach-limit` (선택): 노드에 연결할 수 있는
-  최대 볼륨 수이다. 기본값은 cinder의 경우 256이다.
-
-포트가 아닌 경로를 사용하여 엔드포인트를 구별하는 OpenStack
-디플로이먼트에서 1.8 이하의 쿠버네티스 버전을 배포하는 경우
-명시적으로 `bs-version` 파라미터를 설정해야 한다. 경로 기반의 엔드포인트는
-`http://foo.bar/volume` 형식이며 포트 기반의 엔드포인트는
-`http://foo.bar:xxx` 형식이다.
-
-경로 기반의 엔드포인트를 사용하고 쿠버네티스가 이전 자동 감지 로직을 사용하는 환경에서는
-볼륨 분리 시도 시 `BS API version autodetection failed.` 오류가
-리턴된다. 이 문제를 해결하려면 클라우드 제공자 구성에
-다음을 추가하여 Cinder API 버전 2를 강제로
-사용할 수 있다.
-
-```yaml
-[BlockStorage]
-bs-version=v2
-```
-
-##### 메타데이터
-OpenStack 제공자에 대한 다음의 구성 옵션은 메타데이터와 관련이 있으며
-`cloud.conf` 파일의 `[Metadata]` 섹션에 있어야 한다.
-
-* `search-order` (선택): 이 구성 키는 실행되는 인스턴스와
-  관련된 메타데이터를 제공자가 검색하는 방식에 영향을 준다. 기본값인
-  `configDrive,metadataService` 를 사용할 수 있는 경우에 제공자가
-  먼저 구성 드라이브에서 인스턴스와 관련된 메타데이터를
-  검색한 다음 메타데이터 서비스를 검색하게 한다. 대체할 수 있는 값은 다음과 같다.
-  * `configDrive` - 구성 드라이브에서 인스턴스 메타데이터만
-    검색한다.
-  * `metadataService` - 메타데이터 서비스에서 인스턴스 메타데이터만
-    검색한다.
-  * `metadataService,configDrive` - 사용할 수 있는 경우 먼저 메타데이터
-    서비스에서 인스턴스 메타데이터를 검색한 다음, 구성 드라이브를 검색한다.
-
-  구성 드라이브의 메타데이터는 시간이 지남에 따라
-  오래될 수 있지만, 메타데이터 서비스는 항상 최신 뷰를 제공하므로
-  이러한 설정은 바람직하다. 모든 OpenStack 클라우드가
-  구성 드라이브와 메타데이터 서비스를 모두 제공하는 것은 아니며 하나 또는 다른 하나만
-  사용할 수 있으므로 기본값은 둘 다를 확인하는 것이다.
-
-##### 라우트
-
-OpenStack 제공자에 대한 다음의 구성 옵션은 [kubenet]
-쿠버네티스 네트워크 플러그인과 관련이 있으며 `cloud.conf` 파일의 `[Route]` 섹션에
-있어야 한다.
-
-* `router-id` (선택): 기본 클라우드의 Neutron 디플로이먼트가
-  `extraroutes` 확장을 지원하는 경우 경로를 추가할 라우터를 지정하는 데 `router-id`
-  를 사용한다. 선택한 라우터는 클러스터 노드를 포함하는 프라이빗 네트워크에
-  걸쳐 있어야 한다(일반적으로 하나의 노드 네트워크만 있으며, 이 값은
-  노드 네트워크의 기본 라우터여야 한다). 이 값은 OpenStack에서
-  [kubenet](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#kubenet)을
-  사용하는 데 필요하다.
-
-[kubenet]: /ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#kubenet
-
-## vSphere
-
-{{< tabs name="vSphere cloud provider" >}}
-{{% tab name="vSphere 6.7U3 이상" %}}
-vSphere 6.7U3 이상의 모든 vSphere 디플로이먼트의 경우, [vSphere CSI 드라이버](https://github.com/kubernetes-sigs/vsphere-csi-driver)와 함께 [외부 vSphere 클라우드 제공자](https://github.com/kubernetes/cloud-provider-vsphere)를 권장한다. 퀵스타트 가이드는 [CSI와 CPI를 사용하여 vSphere에 쿠버네티스 클러스터 배포하기](https://cloud-provider-vsphere.sigs.k8s.io/tutorials/kubernetes-on-vsphere-with-kubeadm.html)를 참고한다.
-{{% /tab %}}
-{{% tab name="vSphere 6.7U3 미만" %}}
-vSphere 6.7U3 미만을 사용할 경우, 인-트리 vSphere 클라우드 제공자를 권장한다. 퀵스타트 가이드는 [kubeadm을 사용하여 vSphere에 쿠버네티스 클러스터 실행하기](https://cloud-provider-vsphere.sigs.k8s.io/tutorials/k8s-vcp-on-vsphere-with-kubeadm.html)를 참고한다.
-{{% /tab %}}
-{{< /tabs >}}
-
-vSphere 클라우드 제공자에 대한 자세한 문서를 보려면, [vSphere 클라우드 제공자 문서 사이트](https://cloud-provider-vsphere.sigs.k8s.io)를 방문한다.
diff --git a/content/ko/docs/concepts/cluster-administration/networking.md b/content/ko/docs/concepts/cluster-administration/networking.md
index e5c492491a..63877bc535 100644
--- a/content/ko/docs/concepts/cluster-administration/networking.md
+++ b/content/ko/docs/concepts/cluster-administration/networking.md
@@ -77,6 +77,8 @@ VM 내의 프로세스와 동일하다. 이것을 "IP-per-pod(파드별 IP)" 모
 이 목록은 알파벳 순으로 정렬되어 있으며, 정렬된 순서가
 우선 상태를 의미하는 것은 아니다.
 
+{{% thirdparty-content %}}
+
 ### ACI
 
 [Cisco 애플리케이션 센트릭 인프라스트럭처(Application Centric Infrastructure)](https://www.cisco.com/c/en/us/solutions/data-center-virtualization/application-centric-infrastructure/index.html)는 컨테이너, 가상 머신 및 베어메탈 서버를 지원하는 통합 오버레이 및 언더레이 SDN 솔루션을 제공한다. [ACI](https://www.github.com/noironetworks/aci-containers)는 ACI를 위한 컨테이너 네트워킹 통합을 제공한다. 통합의 개요는 [여기](https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/solution-overview-c22-739493.pdf)에서 제공된다.
@@ -312,4 +314,3 @@ OVN은 Open vSwitch 커뮤니티에서 개발한 오픈소스 네트워크
 네트워크 모델의 초기 설계와 그 근거 및 미래의 계획은
 [네트워킹 디자인 문서](https://git.k8s.io/community/contributors/design-proposals/network/networking.md)에
 자세히 설명되어 있다.
-
diff --git a/content/ko/docs/concepts/configuration/configmap.md b/content/ko/docs/concepts/configuration/configmap.md
index 458e56358b..7b1bf21b9b 100644
--- a/content/ko/docs/concepts/configuration/configmap.md
+++ b/content/ko/docs/concepts/configuration/configmap.md
@@ -214,9 +214,11 @@ kubelet은 모든 주기적인 동기화에서 마운트된 컨피그맵이 최
 전파 지연은 선택한 캐시 유형에 따라 달라질 수 있다(전파
 지연을 지켜보거나, 캐시의 ttl 또는 0에 상응함).
 
+## 변경할 수 없는(immutable) 컨피그맵 {#configmap-immutable}
+
 {{< feature-state for_k8s_version="v1.19" state="beta" >}}
 
-쿠버네티스 베타 기능인 _변경할 수 없는(immutable) 시크릿과 컨피그맵_ 은 개별 시크릿과
+쿠버네티스 베타 기능인 _변경할 수 없는 시크릿과 컨피그맵_ 은 개별 시크릿과
 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 컨피그맵을 광범위하게
 사용하는 클러스터(최소 수만 개의 고유한 컨피그맵이 파드에 마운트)의 경우
 데이터 변경을 방지하면 다음과 같은 이점이 있다.
@@ -224,9 +226,10 @@ kubelet은 모든 주기적인 동기화에서 마운트된 컨피그맵이 최
 - 애플리케이션 중단을 일으킬 수 있는 우발적(또는 원하지 않는) 업데이트로부터 보호
 - immutable로 표시된 컨피그맵에 대한 감시를 중단하여, kube-apiserver의 부하를 크게 줄임으로써 클러스터의 성능을 향상시킴
 
-이 기능을 사용하려면 `ImmutableEphemeralVolumes`
-[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화하고
-시크릿 또는 컨피그맵의 `immutable` 필드를 `true` 로 한다. 다음은 예시이다.
+이 기능은 v1.19부터 기본적으로 활성화된 `ImmutableEphemeralVolumes` [기능
+게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)에
+의해 제어된다. `immutable` 필드를 `true` 로 설정하여
+변경할 수 없는 컨피그맵을 생성할 수 있다. 다음은 예시이다.
 ```yaml
 apiVersion: v1
 kind: ConfigMap
@@ -247,7 +250,7 @@ immutable: true
 ## {{% heading "whatsnext" %}}
 
 
-* [시크릿](/docs/concepts/configuration/secret/)에 대해 읽어본다.
+* [시크릿](/ko/docs/concepts/configuration/secret/)에 대해 읽어본다.
 * [컨피그맵을 사용하도록 파드 구성하기](/docs/tasks/configure-pod-container/configure-pod-configmap/)를 읽어본다.
 * 코드를 구성에서 분리하려는 동기를 이해하려면
   [Twelve-Factor 앱](https://12factor.net/ko/)을 읽어본다.
diff --git a/content/ko/docs/concepts/configuration/overview.md b/content/ko/docs/concepts/configuration/overview.md
index eb7aa1ff93..5e2047b367 100644
--- a/content/ko/docs/concepts/configuration/overview.md
+++ b/content/ko/docs/concepts/configuration/overview.md
@@ -101,4 +101,4 @@ DNS 서버는 새로운 `서비스`를 위한 쿠버네티스 API를 Watch하며
 
 - `get`과 `delete` 동작을 위해 특정 오브젝트의 이름 대신 레이블 셀렉터를 사용한다. [레이블 셀렉터](/ko/docs/concepts/overview/working-with-objects/labels/#레이블-셀렉터)와 [효율적으로 레이블 사용하기](/ko/docs/concepts/cluster-administration/manage-deployment/#효과적인-레이블-사용)를 참고할 수 있다.
 
-- 단일 컨테이너로 구성된 디플로이먼트와 서비스를 빠르게 생성하기 위해 `kubectl create deployment` 와 `kubectl expose` 를 사용한다. [클러스터 내부의 애플리케이션에 접근하기 위한 서비스 사용](/docs/tasks/access-application-cluster/service-access-application-cluster/)에서 예시를 확인할 수 있다.
+- 단일 컨테이너로 구성된 디플로이먼트와 서비스를 빠르게 생성하기 위해 `kubectl create deployment` 와 `kubectl expose` 를 사용한다. [클러스터 내부의 애플리케이션에 접근하기 위한 서비스 사용](/ko/docs/tasks/access-application-cluster/service-access-application-cluster/)에서 예시를 확인할 수 있다.
diff --git a/content/ko/docs/concepts/configuration/secret.md b/content/ko/docs/concepts/configuration/secret.md
index e75dd37da8..59a7fca1ed 100644
--- a/content/ko/docs/concepts/configuration/secret.md
+++ b/content/ko/docs/concepts/configuration/secret.md
@@ -715,37 +715,6 @@ kubelet은 마운트된 시크릿이 모든 주기적인 동기화에서 최신
 받지 않는다.
 {{< /note >}}
 
-{{< feature-state for_k8s_version="v1.19" state="beta" >}}
-
-쿠버네티스 베타 기능인 _변경할 수 없는(immutable) 시크릿과 컨피그맵_ 은
-개별 시크릿과 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 시크릿을 광범위하게 사용하는
-클러스터(최소 수만 개의 고유한 시크릿이 파드에 마운트)의 경우, 데이터 변경을 방지하면
-다음과 같은 이점이 있다.
-
-- 애플리케이션 중단을 유발할 수 있는 우발적(또는 원하지 않는) 업데이트로부터 보호
-- immutable로 표시된 시크릿에 대한 감시를 중단하여, kube-apiserver의 부하를
-크게 줄임으로써 클러스터의 성능을 향상시킴
-
-이 기능을 사용하려면, `ImmutableEphemeralVolumes`
-[기능 게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)를 활성화하고
-시크릿 또는 컨피그맵의 `immutable` 필드를 `true` 로 한다. 다음은 예시이다.
-```yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  ...
-data:
-  ...
-immutable: true
-```
-
-{{< note >}}
-시크릿 또는 컨피그맵을 immutable로 표시하면, 이 변경 사항을 되돌리거나
-`data` 필드 내용을 변경할 수 _없다_. 시크릿을 삭제하고 다시 생성할 수만 있다.
-기존 파드는 삭제된 시크릿에 대한 마운트 포인트를 유지하며, 이러한 파드를 다시 생성하는 것을
-권장한다.
-{{< /note >}}
-
 ### 시크릿을 환경 변수로 사용하기
 
 파드에서 {{< glossary_tooltip text="환경 변수" term_id="container-env-variables" >}}에
@@ -806,6 +775,40 @@ echo $SECRET_PASSWORD
 1f2d1e2e67df
 ```
 
+## 변경할 수 없는(immutable) 시크릿 {#secret-immutable}
+
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+쿠버네티스 베타 기능인 _변경할 수 없는 시크릿과 컨피그맵_ 은
+개별 시크릿과 컨피그맵을 변경할 수 없는 것으로 설정하는 옵션을 제공한다. 시크릿을 광범위하게 사용하는
+클러스터(최소 수만 개의 고유한 시크릿이 파드에 마운트)의 경우, 데이터 변경을 방지하면
+다음과 같은 이점이 있다.
+
+- 애플리케이션 중단을 유발할 수 있는 우발적(또는 원하지 않는) 업데이트로부터 보호
+- immutable로 표시된 시크릿에 대한 감시를 중단하여, kube-apiserver의 부하를
+크게 줄임으로써 클러스터의 성능을 향상시킴
+
+이 기능은 v1.19부터 기본적으로 활성화된 `ImmutableEphemeralVolumes` [기능
+게이트](/ko/docs/reference/command-line-tools-reference/feature-gates/)에
+의해 제어된다. `immutable` 필드를 `true` 로 설정하여
+변경할 수 없는 시크릿을 생성할 수 있다. 다음은 예시이다.
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  ...
+data:
+  ...
+immutable: true
+```
+
+{{< note >}}
+시크릿 또는 컨피그맵을 immutable로 표시하면, 이 변경 사항을 되돌리거나
+`data` 필드 내용을 변경할 수 _없다_. 시크릿을 삭제하고 다시 생성할 수만 있다.
+기존 파드는 삭제된 시크릿에 대한 마운트 포인트를 유지하며, 이러한 파드를 다시 생성하는 것을
+권장한다.
+{{< /note >}}
+
 ### imagePullSecrets 사용하기
 
 `imagePullSecrets` 필드는 동일한 네임스페이스의 시크릿에 대한 참조 목록이다.
diff --git a/content/ko/docs/concepts/containers/_index.md b/content/ko/docs/concepts/containers/_index.md
index 76b1756a19..fa56660f1a 100755
--- a/content/ko/docs/concepts/containers/_index.md
+++ b/content/ko/docs/concepts/containers/_index.md
@@ -28,7 +28,7 @@ no_list: true
 
 설계 상, 컨테이너는 변경할 수 없다. 이미 실행 중인 컨테이너의 코드를
 변경할 수 없다. 컨테이너화된 애플리케이션이 있고
-변경하려는 경우, 변경 사항이 포함된 새 컨테이너를 빌드한
+변경하려는 경우, 변경 사항이 포함된 새 이미지를 빌드한
 다음, 업데이트된 이미지에서 시작하도록 컨테이너를 다시 생성해야 한다.
 
 ## 컨테이너 런타임
diff --git a/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md b/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
index fd8f2c0107..7e8a10e8b1 100644
--- a/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
+++ b/content/ko/docs/concepts/extend-kubernetes/api-extension/apiserver-aggregation.md
@@ -7,7 +7,7 @@ weight: 10
 <!-- overview -->
 
 애그리게이션 레이어는 코어 쿠버네티스 API가 제공하는 기능 이외에 더 많은 기능을 제공할 수 있도록 추가 API를 더해 쿠버네티스를 확장할 수 있게 해준다.
-추가 API는 [서비스-카탈로그](/docs/concepts/extend-kubernetes/service-catalog/)와 같이 미리 만들어진 솔루션이거나 사용자가 직접 개발한 API일 수 있다.
+추가 API는 [서비스-카탈로그](/ko/docs/concepts/extend-kubernetes/service-catalog/)와 같이 미리 만들어진 솔루션이거나 사용자가 직접 개발한 API일 수 있다.
 
 애그리게이션 레이어는 [사용자 정의 리소스](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)와는 다르며, 애그리게이션 레이어는 {{< glossary_tooltip term_id="kube-apiserver" text="kube-apiserver" >}} 가 새로운 종류의 오브젝트를 인식하도록 하는 방법이다.
 
@@ -31,6 +31,6 @@ extention API server가 레이턴시 요구 사항을 달성할 수 없는 경
 ## {{% heading "whatsnext" %}}
 
 * 사용자의 환경에서 Aggregator를 동작시키려면, [애그리게이션 레이어를 설정한다](/docs/tasks/extend-kubernetes/configure-aggregation-layer/).
-* 다음에, [확장 API 서버를 구성해서](/docs/tasks/extend-kubernetes/setup-extension-api-server/) 애그리게이션 레이어와 연계한다.
+* 다음에, [확장 API 서버를 구성해서](/ko/docs/tasks/extend-kubernetes/setup-extension-api-server/) 애그리게이션 레이어와 연계한다.
 * 또한, 어떻게 [쿠버네티스 API를 커스텀 리소스 데피니션으로 확장하는지](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)를 배워본다.
 * [API 서비스](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#apiservice-v1-apiregistration-k8s-io)의 사양을 읽어본다.
diff --git a/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md b/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
index 18b98db97c..f4301e2933 100644
--- a/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
+++ b/content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md
@@ -96,7 +96,7 @@ _선언_ 하거나 지정할 수 있게 해주며 쿠버네티스 오브젝트
 * 파일이 업데이트될 때 디플로이먼트 등을 통해 롤링 업데이트를 수행하려고 한다.
 
 {{< note >}}
-민감한 데이터에는 [시크릿](/docs/concepts/configuration/secret/)을 사용하자. 이는 컨피그맵과 비슷하지만 더 안전한다.
+민감한 데이터에는 [시크릿](/ko/docs/concepts/configuration/secret/)을 사용하자. 이는 컨피그맵과 비슷하지만 더 안전한다.
 {{< /note >}}
 
 다음 중 대부분이 적용되는 경우 커스텀 리소스(CRD 또는 애그리게이트 API(aggregated API))를 사용하자.
diff --git a/content/ko/docs/concepts/overview/kubernetes-api.md b/content/ko/docs/concepts/overview/kubernetes-api.md
index 8ce410330c..7a02d46b13 100644
--- a/content/ko/docs/concepts/overview/kubernetes-api.md
+++ b/content/ko/docs/concepts/overview/kubernetes-api.md
@@ -136,7 +136,7 @@ API 그룹은 REST 경로와 직렬화된 객체의 `apiVersion` 필드에 명
 
 1. [커스텀리소스데피니션(CustomResourceDefinition)](/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/)은
    API 서버가 선택한 리소스 API를 제공하는 방법을 선언적으로 정의할 수 있다.
-1. 또한, [자신의 확장 API 서버 구현](/docs/tasks/extend-kubernetes/setup-extension-api-server/)과
+1. 또한, [자신의 확장 API 서버 구현](/ko/docs/tasks/extend-kubernetes/setup-extension-api-server/)과
    [aggregator](/docs/tasks/extend-kubernetes/configure-aggregation-layer/)를
    사용해서 클라이언트를 원활하게 만들 수 있다.
 
diff --git a/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md b/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
index b812305cbd..a3bf6a5a25 100644
--- a/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
+++ b/content/ko/docs/concepts/scheduling-eviction/kube-scheduler.md
@@ -77,12 +77,8 @@ _스코어링_ 단계에서 스케줄러는 목록에 남아있는 노드의 순
 스케줄러의 필터링 및 스코어링 동작을 구성하는 데 지원되는 두 가지
 방법이 있다.
 
-1. [스케줄링 정책](/docs/reference/scheduling/config/#profiles)을 사용하면
-   필터링을 위한 _단정(Predicates)_ 및 스코어링을 위한 _우선순위(Priorities)_ 를 구성할 수 있다.
-1. [스케줄링 프로파일](/docs/reference/scheduling/profiles)을 사용하면
-   `QueueSort`, `Filter`, `Score`, `Bind`, `Reserve`, `Permit` 등의
-   다른 스케줄링 단계를 구현하는 플러그인을 구성할 수 있다. 다른 프로파일을 실행하도록
-   kube-scheduler를 구성할 수도 있다.
+1. [스케줄링 정책](/docs/reference/scheduling/config/#profiles)을 사용하면 필터링을 위한 _단정(Predicates)_ 및 스코어링을 위한 _우선순위(Priorities)_ 를 구성할 수 있다.
+1. [스케줄링 프로파일](/docs/reference/scheduling/profiles)을 사용하면 `QueueSort`, `Filter`, `Score`, `Bind`, `Reserve`, `Permit` 등의 다른 스케줄링 단계를 구현하는 플러그인을 구성할 수 있다. 다른 프로파일을 실행하도록 kube-scheduler를 구성할 수도 있다.
 
 
 ## {{% heading "whatsnext" %}}
diff --git a/content/ko/docs/concepts/configuration/resource-bin-packing.md b/content/ko/docs/concepts/scheduling-eviction/resource-bin-packing.md
similarity index 100%
rename from content/ko/docs/concepts/configuration/resource-bin-packing.md
rename to content/ko/docs/concepts/scheduling-eviction/resource-bin-packing.md
diff --git a/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md b/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
index b564eda5fb..a964fb21db 100644
--- a/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
+++ b/content/ko/docs/concepts/scheduling-eviction/scheduler-perf-tuning.md
@@ -1,7 +1,7 @@
 ---
 title: 스케줄러 성능 튜닝
 content_type: concept
-weight: 70
+weight: 80
 ---
 
 <!-- overview -->
@@ -46,10 +46,13 @@ kube-scheduler 의 `percentageOfNodesToScore` 설정을 통해
 일 수 있다)을 편집한 다음 스케줄러를 재시작 한다.
 
 이를 변경한 후에 다음을 실행해서
+
 ```bash
 kubectl get componentstatuses
 ```
+
 kube-scheduler 컴포넌트가 정상인지 확인할 수 있다. 출력은 다음과 유사하다.
+
 ```
 NAME                 STATUS    MESSAGE             ERROR
 controller-manager   Healthy   ok
diff --git a/content/ko/docs/concepts/security/overview.md b/content/ko/docs/concepts/security/overview.md
index bcbc22d915..1a8316024c 100644
--- a/content/ko/docs/concepts/security/overview.md
+++ b/content/ko/docs/concepts/security/overview.md
@@ -103,7 +103,7 @@ etcd 암호화 | 가능한 한 모든 드라이브를 암호화하는 것이 좋
 ------------------------------ | ------------ |
 RBAC 인증(쿠버네티스 API에 대한 접근) | https://kubernetes.io/docs/reference/access-authn-authz/rbac/
 인증 | https://kubernetes.io/docs/reference/access-authn-authz/controlling-access/
-애플리케이션 시크릿 관리(및 유휴 상태에서의 etcd 암호화 등) | https://kubernetes.io/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/
+애플리케이션 시크릿 관리(및 유휴 상태에서의 etcd 암호화 등) | https://kubernetes.io/docs/concepts/configuration/secret/ <br> https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/
 파드 보안 정책 | https://kubernetes.io/docs/concepts/policy/pod-security-policy/
 서비스 품질(및 클러스터 리소스 관리) | https://kubernetes.io/docs/tasks/configure-pod-container/quality-service-pod/
 네트워크 정책 | https://kubernetes.io/ko/docs/concepts/services-networking/network-policies/
@@ -150,4 +150,4 @@ TLS를 통한 접근 | 코드가 TCP를 통해 통신해야 한다면, 미리 
 * [API 접근 통제](/docs/reference/access-authn-authz/controlling-access/)
 * 컨트롤 플레인을 위한 [전송 데이터 암호화](/docs/tasks/tls/managing-tls-in-a-cluster/)
 * [Rest에서 데이터 암호화](/docs/tasks/administer-cluster/encrypt-data/)
-* [쿠버네티스 시크릿](/docs/concepts/configuration/secret/)
+* [쿠버네티스 시크릿](/ko/docs/concepts/configuration/secret/)
diff --git a/content/ko/docs/concepts/services-networking/connect-applications-service.md b/content/ko/docs/concepts/services-networking/connect-applications-service.md
index 97345c0efb..05f514b26b 100644
--- a/content/ko/docs/concepts/services-networking/connect-applications-service.md
+++ b/content/ko/docs/concepts/services-networking/connect-applications-service.md
@@ -225,7 +225,7 @@ Address 1: 10.0.162.149
 
 * https에 대한 자체 서명한 인증서 (신원 인증서를 가지고 있지 않은 경우)
 * 인증서를 사용하도록 구성된 nginx 서버
-* 파드에 접근할 수 있는 인증서를 만드는 [시크릿](/docs/concepts/configuration/secret/)
+* 파드에 접근할 수 있는 인증서를 만드는 [시크릿](/ko/docs/concepts/configuration/secret/)
 
 [nginx https 예제](https://github.com/kubernetes/examples/tree/{{< param "githubbranch" >}}/staging/https-nginx/)에서 이 모든 것을 얻을 수 있다. 이를 위해서는 도구를 설치해야 한다. 만약 설치하지 않으려면 나중에 수동으로 단계를 수행한다. 한마디로:
 
@@ -419,6 +419,6 @@ LoadBalancer Ingress:   a320587ffd19711e5a37606cf4a74574-1142138393.us-east-1.el
 ## {{% heading "whatsnext" %}}
 
 
-* [서비스를 사용해서 클러스터 내 애플리케이션에 접근하기](/docs/tasks/access-application-cluster/service-access-application-cluster/)를 더 자세히 알아본다.
+* [서비스를 사용해서 클러스터 내 애플리케이션에 접근하기](/ko/docs/tasks/access-application-cluster/service-access-application-cluster/)를 더 자세히 알아본다.
 * [서비스를 사용해서 프론트 엔드부터 백 엔드까지 연결하기](/docs/tasks/access-application-cluster/connecting-frontend-backend/)를 더 자세히 알아본다.
 * [외부 로드 밸런서를 생성하기](/docs/tasks/access-application-cluster/create-external-load-balancer/)를 더 자세히 알아본다.
diff --git a/content/ko/docs/concepts/services-networking/dual-stack.md b/content/ko/docs/concepts/services-networking/dual-stack.md
index 6efe70de75..844ff7bd2b 100644
--- a/content/ko/docs/concepts/services-networking/dual-stack.md
+++ b/content/ko/docs/concepts/services-networking/dual-stack.md
@@ -43,6 +43,7 @@ IPv4/IPv6 이중 스택을 활성화 하려면, 클러스터의 관련 구성요
 
    * kube-apiserver:
       * `--feature-gates="IPv6DualStack=true"`
+      * `--service-cluster-ip-range=<IPv4 CIDR>,<IPv6 CIDR>`
    * kube-controller-manager:
       * `--feature-gates="IPv6DualStack=true"`
       * `--cluster-cidr=<IPv4 CIDR>,<IPv6 CIDR>`
@@ -104,4 +105,4 @@ IPv6가 활성화된 외부 로드 밸런서를 지원하는 클라우드 공급
 ## {{% heading "whatsnext" %}}
 
 
-* [IPv4/IPv6 이중 스택 확인](/docs/tasks/network/validate-dual-stack) 네트워킹
+* [IPv4/IPv6 이중 스택 확인](/ko/docs/tasks/network/validate-dual-stack) 네트워킹
diff --git a/content/ko/docs/concepts/services-networking/ingress.md b/content/ko/docs/concepts/services-networking/ingress.md
index 3f75069300..5656f4d125 100644
--- a/content/ko/docs/concepts/services-networking/ingress.md
+++ b/content/ko/docs/concepts/services-networking/ingress.md
@@ -491,8 +491,6 @@ Events:
 
 장애 도메인에 트래픽을 분산시키는 기술은 클라우드 공급자마다 다르다.
 자세한 내용은 [인그레스 컨트롤러](/ko/docs/concepts/services-networking/ingress-controllers) 설명서를 확인한다.
-페더레이션 클러스터에서 인그레스 배포에 대한 자세한 내용은 [페더레이션 설명서](https://github.com/kubernetes-sigs/federation-v2)를
-참조할 수 있다.
 
 ## 대안
 
diff --git a/content/ko/docs/concepts/services-networking/service.md b/content/ko/docs/concepts/services-networking/service.md
index df51f54ec5..9181e61d83 100644
--- a/content/ko/docs/concepts/services-networking/service.md
+++ b/content/ko/docs/concepts/services-networking/service.md
@@ -1176,7 +1176,7 @@ HTTP / HTTPS 서비스를 노출할 수도 있다.
 
 ### PROXY 프로토콜
 
-클라우드 공급자가 지원하는 경우에 (예: [AWS](/ko/docs/concepts/cluster-administration/cloud-providers/#aws)),
+클라우드 공급자가 지원하는 경우에,
 LoadBalancer 모드의 서비스를 사용하여 쿠버네티스 자체 외부에
 로드 밸런서를 구성할 수 있으며, 이때 접두사가
 [PROXY 프로토콜](https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt) 인 연결을 전달하게 된다.
diff --git a/content/ko/docs/concepts/storage/volumes.md b/content/ko/docs/concepts/storage/volumes.md
index 13917ecfef..2ad8b36f90 100644
--- a/content/ko/docs/concepts/storage/volumes.md
+++ b/content/ko/docs/concepts/storage/volumes.md
@@ -210,8 +210,7 @@ CephFS를 사용하기 위해선 먼저 Ceph 서버를 실행하고 공유를 
 ### cinder {#cinder}
 
 {{< note >}}
-전제 조건: 오픈스택 클라우드 공급자로 구성된 쿠버네티스. 클라우드 공급자
-구성에 대해서는 [오픈스택 클라우드 공급자](/ko/docs/concepts/cluster-administration/cloud-providers/#openstack)를 참조한다.
+전제 조건: 오픈스택 클라우드 공급자로 구성된 쿠버네티스.
 {{< /note >}}
 
 `cinder` 는 오픈스택 Cinder 볼륨을 파드에 마운트하는 데 사용한다.
@@ -1035,7 +1034,7 @@ tmpfs(RAM 기반 파일시스템)로 지원되기 때문에 비 휘발성 스토
 업데이트를 수신하지 못한다.
 {{< /note >}}
 
-시크릿에 대해서 [여기](/docs/concepts/configuration/secret/)에 더 자세한 설명이 있다.
+시크릿에 대해서 [여기](/ko/docs/concepts/configuration/secret/)에 더 자세한 설명이 있다.
 
 ### storageOS {#storageos}
 
diff --git a/content/ko/docs/concepts/workloads/controllers/job.md b/content/ko/docs/concepts/workloads/controllers/job.md
index e69761b9e6..f7c42e9294 100644
--- a/content/ko/docs/concepts/workloads/controllers/job.md
+++ b/content/ko/docs/concepts/workloads/controllers/job.md
@@ -344,7 +344,7 @@ spec:
 
 |                            패턴                                   | 단일 잡 오브젝트 | 작업 항목보다 파드가 적은가? | 수정하지 않은 앱을 사용하는가? |  Kube 1.1에서 작동하는가? |
 | -------------------------------------------------------------------- |:-----------------:|:---------------------------:|:-------------------:|:-------------------:|
-| [잡 템플릿 확장](/docs/tasks/job/parallel-processing-expansion/)            |                   |                             |          ✓          |          ✓          |
+| [잡 템플릿 확장](/ko/docs/tasks/job/parallel-processing-expansion/)            |                   |                             |          ✓          |          ✓          |
 | [작업 항목 당 파드가 있는 큐](/docs/tasks/job/coarse-parallel-processing-work-queue/)   |         ✓         |                             |      때때로      |          ✓          |
 | [가변 파드 수를 가진 큐](/docs/tasks/job/fine-parallel-processing-work-queue/)  |         ✓         |             ✓               |                     |          ✓          |
 | 정적 작업이 할당된 단일 잡                               |         ✓         |                             |          ✓          |                     |
@@ -360,7 +360,7 @@ spec:
 
 |                             패턴                                  | `.spec.completions` |  `.spec.parallelism` |
 | -------------------------------------------------------------------- |:-------------------:|:--------------------:|
-| [잡 템플릿 확장](/docs/tasks/job/parallel-processing-expansion/)           |          1          |     1이어야 함      |
+| [잡 템플릿 확장](/ko/docs/tasks/job/parallel-processing-expansion/)           |          1          |     1이어야 함      |
 | [작업 항목 당 파드가 있는 큐](/docs/tasks/job/coarse-parallel-processing-work-queue/)   |          W          |        any           |
 | [가변 파드 수를 가진 큐](/docs/tasks/job/fine-parallel-processing-work-queue/)  |          1          |        any           |
 | 정적 작업이 할당된 단일 잡                               |          W          |        any           |
diff --git a/content/ko/docs/concepts/workloads/pods/_index.md b/content/ko/docs/concepts/workloads/pods/_index.md
index 1daf452200..6c025fc2a6 100644
--- a/content/ko/docs/concepts/workloads/pods/_index.md
+++ b/content/ko/docs/concepts/workloads/pods/_index.md
@@ -124,7 +124,7 @@ term_id="deployment" >}} 또는 {{< glossary_tooltip text="잡(Job)" term_id="jo
 
 ### 파드와 컨트롤러
 
-워크로드 리소스를 사용하여 여러 파드를 만들고 관리할 수 ​​있다. 리소스에 대한 컨트롤러는
+워크로드 리소스를 사용하여 여러 파드를 만들고 관리할 수 있다. 리소스에 대한 컨트롤러는
 파드 장애 시 복제 및 롤아웃과 자동 복구를
 처리한다. 예를 들어, 노드가 실패하면, 컨트롤러는 해당 노드의 파드가 작동을 중지했음을
 인식하고 대체 파드를 생성한다. 스케줄러는
@@ -142,9 +142,9 @@ term_id="deployment" >}} 또는 {{< glossary_tooltip text="잡(Job)" term_id="jo
 _파드 템플릿_ 에서 파드를 생성하고 사용자 대신 해당 파드를 관리한다.
 
 파드템플릿(PodTemplate)은 파드를 생성하기 위한 명세이며,
-[디플로이먼트](/docs/concepts/workloads/controllers/deployment/),
-[잡](/docs/concepts/jobs/run-to-completion-finite-workloads/) 및
-[데몬셋](/docs/concepts/workloads/controllers/daemonset/)과 같은 워크로드 리소스에 포함된다.
+[디플로이먼트](/ko/docs/concepts/workloads/controllers/deployment/),
+[잡](/ko/docs/concepts/workloads/controllers/job/) 및
+[데몬셋](/ko/docs/concepts/workloads/controllers/daemonset/)과 같은 워크로드 리소스에 포함된다.
 
 워크로드 리소스의 각 컨트롤러는 워크로드 오브젝트 내부의 `PodTemplate` 을
 사용하여 실제 파드를 생성한다. `PodTemplate` 은 앱을 실행하는 데 사용되는 워크로드 리소스가
diff --git a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
index a84fb28b4c..e0579af164 100644
--- a/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
+++ b/content/ko/docs/concepts/workloads/pods/pod-lifecycle.md
@@ -91,7 +91,7 @@ UID로 정의된 특정 파드는 다른 노드로 절대 "다시 스케줄"되
 
 전체 파드의 [단계](#파드의-단계)뿐 아니라, 쿠버네티스는 파드 내부의
 각 컨테이너 상태를 추적한다.
-[컨테이너 라이프사이클 훅(hook)](/docs/concepts/containers/container-lifecycle-hooks/)을
+[컨테이너 라이프사이클 훅(hook)](/ko/docs/concepts/containers/container-lifecycle-hooks/)을
 사용하여 컨테이너 라이프사이클의 특정 지점에서 실행할 이벤트를 트리거할 수 있다.
 
 일단 {{< glossary_tooltip text="스케줄러" term_id="kube-scheduler" >}}가
@@ -437,7 +437,7 @@ API에서 즉시 파드를 제거하므로 동일한 이름으로 새로운 파
 * [활성, 준비성 및 스타트업 프로브 설정](/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)하는
   핸즈온 연습을 해보자.
 
-* [컨테이너 라이프사이클 훅](/docs/concepts/containers/container-lifecycle-hooks/)에 대해 자세히 알아보자.
+* [컨테이너 라이프사이클 훅](/ko/docs/concepts/containers/container-lifecycle-hooks/)에 대해 자세히 알아보자.
 
 * API의 파드 / 컨테이너 상태에 대한 자세한 내용은 [PodStatus](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podstatus-v1-core)
 그리고
diff --git a/content/ko/docs/contribute/localization_ko.md b/content/ko/docs/contribute/localization_ko.md
index 59cde62dea..fe506a7bb1 100644
--- a/content/ko/docs/contribute/localization_ko.md
+++ b/content/ko/docs/contribute/localization_ko.md
@@ -125,9 +125,9 @@ weight: 10
 기존에 번역된 문서를 참고한다.
 
 {{% note %}}
-한영 병기는 페이지 내에서 해당 용어가 처음 사용되는 경우에만 1회 적용하고 이후에는 한글만 표기한다.
-한영 병기의 대상에는 제목도 포함되므로 제목에 한영 병기가 제공된 경우, 문서 내부에는
-한글만 표기한다.
+한영 병기는 페이지 내에서 해당 용어가 처음 사용될 때, 1회 적용하고 이후에는 한글만 표기한다.
+그러나 필요(예: 자연스러움, 명확성 향상 등)에 따라 추가적인 한영 병기를 허용한다.
+한영 병기의 대상에는 제목도 포함된다.
 {{% /note %}}
 
 ### API 오브젝트 용어 한글화 방침
diff --git a/content/ko/docs/contribute/participate/pr-wranglers.md b/content/ko/docs/contribute/participate/pr-wranglers.md
index d614905f0a..a70374295f 100644
--- a/content/ko/docs/contribute/participate/pr-wranglers.md
+++ b/content/ko/docs/contribute/participate/pr-wranglers.md
@@ -16,7 +16,7 @@ SIG Docs [승인자](/ko/docs/contribute/participating/roles-and-responsibilites
 
 PR 랭글러는 일주일 간 매일 다음의 일을 해야 한다.
 
-- 매일 새로 올라오는 이슈를 심사하고 태그를 지정한다. SIG Docs가 메타데이터를 사용하는 방법에 대한 지침은 [이슈 심사 및 분류](/docs/contribute/review/for-approvers/#triage-and-categorize-issues)를 참고한다.
+- 매일 새로 올라오는 이슈를 심사하고 태그를 지정한다. SIG Docs가 메타데이터를 사용하는 방법에 대한 지침은 [이슈 심사 및 분류](/ko/docs/contribute/review/for-approvers/#이슈-심사와-분류)를 참고한다.
 - [스타일](/docs/contribute/style/style-guide/)과 [콘텐츠](/docs/contribute/style/content-guide/) 가이드를 준수하는지에 대해 [열린(open) 풀 리퀘스트](https://github.com/kubernetes/website/pulls)를 매일 리뷰한다.
   - 가장 작은 PR(`size/XS`)부터 시작하고, 가장 큰(`size/XXL`) PR까지 리뷰한다. 가능한 한 많은 PR을 리뷰한다.
 - PR 기여자들이 [CLA]()에 서명했는지 확인한다.
diff --git a/content/ko/docs/contribute/participate/roles-and-responsibilities.md b/content/ko/docs/contribute/participate/roles-and-responsibilities.md
index 252d07b332..354e9d669f 100644
--- a/content/ko/docs/contribute/participate/roles-and-responsibilities.md
+++ b/content/ko/docs/contribute/participate/roles-and-responsibilities.md
@@ -65,7 +65,7 @@ GitHub 계정을 가진 누구나 쿠버네티스에 기여할 수 있다. SIG D
 최소 5개의 실질적인 풀 리퀘스트를 제출하고 다른
 [요구 사항](https://github.com/kubernetes/community/blob/master/community-membership.md#member)을 충족시킨 후, 다음의 단계를 따른다.
 
-1. 멤버십을 [후원](/docs/contribute/advanced#sponsor-a-new-contributor)해줄 두 명의
+1. 멤버십을 [후원](/ko/docs/contribute/advanced#새로운-기여자-후원)해줄 두 명의
    [리뷰어](#리뷰어) 또는 [승인자](#승인자)를
    찾는다.
 
diff --git a/content/ko/docs/home/supported-doc-versions.md b/content/ko/docs/home/supported-doc-versions.md
index 9bf7edfedf..07d33e49b9 100644
--- a/content/ko/docs/home/supported-doc-versions.md
+++ b/content/ko/docs/home/supported-doc-versions.md
@@ -1,28 +1,9 @@
 ---
-title: 쿠버네티스 문서의 버전 지원
-content_type: concept
+title: 사용 가능한 문서의 버전
+content_type: custom
+layout: supported-versions
 card:
   name: about
   weight: 10
-  title: 문서의 버전 지원
+  title: 사용 가능한 문서 버전
 ---
-
-<!-- overview -->
-
-이 웹 사이트에는 현재 버전의 쿠버네티스와 이전 4개 버전의
-쿠버네티스에 대한 문서가 포함되어 있습니다.
-
-
-
-<!-- body -->
-
-## 현재 버전
-
-현재 버전은
-[{{< param "version" >}}](/).
-
-## 이전 버전
-
-{{< versions-other >}}
-
-
diff --git a/content/ko/docs/reference/_index.md b/content/ko/docs/reference/_index.md
index b566402cf0..86c67f4b06 100644
--- a/content/ko/docs/reference/_index.md
+++ b/content/ko/docs/reference/_index.md
@@ -43,7 +43,7 @@ content_type: concept
 * [kube-controller-manager](/docs/reference/command-line-tools-reference/kube-controller-manager/) - 쿠버네티스에 탑재된 핵심 제어 루프를 포함하는 데몬.
 * [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/) - 간단한 TCP/UDP 스트림 포워딩이나 백-엔드 집합에 걸쳐서 라운드-로빈 TCP/UDP 포워딩을 할 수 있다.
 * [kube-scheduler](/docs/reference/command-line-tools-reference/kube-scheduler/) - 가용성, 성능 및 용량을 관리하는 스케줄러.
-  * [kube-scheduler 정책](/docs/reference/scheduling/policies)
+  * [kube-scheduler 정책](/ko/docs/reference/scheduling/policies)
   * [kube-scheduler 프로파일](/docs/reference/scheduling/config#profiles)
 
 ## 설계 문서
diff --git a/content/ko/docs/reference/access-authn-authz/_index.md b/content/ko/docs/reference/access-authn-authz/_index.md
new file mode 100644
index 0000000000..c075922ad1
--- /dev/null
+++ b/content/ko/docs/reference/access-authn-authz/_index.md
@@ -0,0 +1,4 @@
+---
+title: API 접근하기
+weight: 20
+---
\ No newline at end of file
diff --git a/content/ko/docs/reference/access-authn-authz/authorization.md b/content/ko/docs/reference/access-authn-authz/authorization.md
new file mode 100644
index 0000000000..3de1de0276
--- /dev/null
+++ b/content/ko/docs/reference/access-authn-authz/authorization.md
@@ -0,0 +1,201 @@
+---
+title: 인가 개요
+content_type: concept
+weight: 60
+---
+
+<!-- overview -->
+지원되는 인가 모듈을 사용하여 정책을 만드는 방법을 포함한
+쿠버네티스 인가에 대해 자세히 알아보자.
+
+
+<!-- body -->
+쿠버네티스에서는 사용자의 요청이 인가(접근 권한을 부여) 받기 전에 사용자가 인증(로그인)되어야 한다.
+인증에 대한 자세한 내용은 [쿠버네티스 API 접근 제어하기](/docs/reference/access-authn-authz/controlling-access/)를
+참고한다.
+
+쿠버네티스는 REST API 요청에 공통적인 속성을 요구한다.
+이는 쿠버네티스 인가가 쿠버네티스 API 이외에 다른 API를 처리할 수 있는
+기존 조직 전체 또는 클라우드 제공자 전체의 접근 제어 시스템과
+연동된다는 것을 의미한다.
+
+## 요청 허용 또는 거부 결정
+쿠버네티스는 API 서버를 이용하여 API 요청을 인가한다.
+모든 정책과 비교하여 모든 요청 속성을 평가하고 요청을 허용하거나 거부한다.
+계속 진행하려면 API 요청의 모든 부분이 일부 정책에 의해 반드시 허용되어야 한다.
+이는 기본적으로 승인이 거부된다는 것을 의미한다.
+
+(쿠버네티스는 API 서버를 사용하지만,
+특정 오브젝트의 특정 필드에 의존하는 접근 제어 및 정책은
+어드미션 컨트롤러에 의해 처리된다.)
+
+여러 개의 인가 모듈이 구성되면 각 모듈이 순서대로 확인된다.
+어느 인가 모듈이 요청을 승인하거나 거부할 경우, 그 결정은 즉시 반환되며 다른 인가 모듈이 참고되지 않는다.
+모든 모듈에서 요청에 대한 평가가 없으면 요청이 거부된다.
+요청 거부는 HTTP 상태 코드 403을 반환한다.
+
+## 요청 속성 검토
+쿠버네티스는 다음 API 요청 속성만 검토한다.
+
+ * **user** - 인증 중에 제공된 `user` 문자열.
+ * **group** - 인증된 사용자가 속한 그룹 이름 목록.
+ * **extra** - 인증 계층에서 제공하는 문자열 값에 대한 임의의 문자열 키 맵.
+ * **API** - 요청이 API 리소스에 대한 것인지 여부.
+ * **Request path** - `/api` 또는 `/healthz`와 같이 다양한 리소스가 아닌 엔드포인트의 경로.
+ * **API request verb** - `get`, `list`, `create`, `update`, `patch`, `watch`, `delete`, `deletecollection`과 같은 리소스 요청에 사용하는 API 동사. 리소스 API 엔드포인트의 요청 동사를 결정하려면 [요청 동사 결정](/docs/reference/access-authn-authz/authorization/#determine-the-request-verb)을 참고한다.
+ * **HTTP request verb** - `get`, `post`, `put`, `delete`처럼 소문자 HTTP 메서드는 리소스가 아닌 요청에 사용한다.
+ * **Resource** - 접근 중인 리소스의 ID 또는 이름(리소스 요청만 해당) -- `get`, `update`, `patch`, `delete` 동사를 사용하는 리소스 요청의 경우 리소스 이름을 지정해야 한다.
+ * **Subresource** - 접근 중인 하위 리소스(리소스 요청만 해당).
+ * **Namespace** - 접근 중인 오브젝트의 네임스페이스(네임스페이스에 할당된 리소스 요청만 해당)
+ * **API group** - 접근 중인 {{< glossary_tooltip text="API 그룹" term_id="api-group" >}}(리소스 요청에만 해당). 빈 문자열은 [핵심(core) API 그룹](/ko/docs/concepts/overview/kubernetes-api/)을 지정한다.
+
+## 요청 동사 결정
+
+**리소스가 아닌 요청**
+`/api/v1/...` 또는 `/apis/<group>/<version>/...` 이외에 다른 엔드포인트에 대한 요청은
+"리소스가 아닌 요청"으로 간주되며, 요청의 소문자 HTTP 메서드를 동사로 사용한다.
+예를 들어, `/api` 또는 `/healthz`와 같은 엔드포인트에 대한 `GET` 요청은 `get`을 동사로 사용할 것이다.
+
+**리소스 요청**
+리소스 API 엔드포인트에 대한 요청 동사를 결정하려면
+사용된 HTTP 동사와 해당 요청이 개별 리소스 또는 리소스 모음에 적용되는지 여부를
+검토한다.
+
+HTTP 동사 | 요청 동사
+----------|---------------
+POST      | create
+GET, HEAD | get(개별 리소스), list(전체 오브젝트 내용을 포함한 리소스 모음), watch(개별 리소스 또는 리소스 모음을 주시)
+PUT       | update
+PATCH     | patch
+DELETE    | delete(개별 리소스), deletecollection(리소스 모음)
+
+쿠버네티스는 종종 전문 동사를 사용하여 부가적인 권한 인가를 확인한다. 예를 들면,
+
+* [파드시큐리티폴리시(PodSecurityPolicy)](/ko/docs/concepts/policy/pod-security-policy/)
+  * `policy` API 그룹의 `podsecuritypolicies` 리소스에 대한 `use` 동사.
+* [RBAC](/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
+  * `rbac.authorization.k8s.io` API 그룹의 `roles` 및 `clusterroles` 리소스에 대한 `bind` 동사.
+* [인증](/docs/reference/access-authn-authz/authentication/)
+  * 핵심 API 그룹의 `users`, `groups`, `serviceaccounts`와 `authentication.k8s.io` API 그룹의 `userextras` 동사.
+
+## 인가 모드 {#authorization-modules}
+
+쿠버네티스 API 서버는 몇 가지 인가 모드 중 하나를 사용하여 요청을 승인할 수 있다.
+
+ * **Node** - 실행되도록 스케줄된 파드에 따라 kubelet에게 권한을 부여하는 특수 목적 인가 모드. Node 인가 모드 사용에 대한 자세한 내용은 [Node 인가](/docs/reference/access-authn-authz/node/)을 참조한다.
+ * **ABAC** - 속성 기반 접근 제어 (ABAC, Attribute-based access control)는 속성과 결합한 정책의 사용을 통해 사용자에게 접근 권한을 부여하는 접근 제어 패러다임을 말한다. 이 정책은 모든 유형의 속성(사용자 속성, 리소스 속성, 오브젝트, 환경 속성 등)을 사용할 수 있다. ABAC 모드 사용에 대한 자세한 내용은 [ABAC 모드](/docs/reference/access-authn-authz/abac/)를 참조한다.
+ * **RBAC** - 역할 기반 접근 제어(RBAC, Role-based access control)는 기업 내 개별 사용자의 역할을 기반으로 컴퓨터나 네트워크 리소스에 대한 접근을 규제하는 방식이다. 이 맥락에서 접근은 개별 사용자가 파일을 보거나 만들거나 수정하는 것과 같은 특정 작업을 수행할 수 있는 능력이다. RBAC 모드 사용에 대한 자세한 내용은 [RBAC 모드](/docs/reference/access-authn-authz/rbac/)를 참조한다.
+   * 지정된 RBAC(역할 기반 접근 제어)이 인가 결정을 위해 `rbac.authorization.k8s.io` API 그룹을 사용하면, 관리자가 쿠버네티스 API를 통해 권한 정책을 동적으로 구성할 수 있다.
+   * RBAC을 활성화하려면 `--authorization-mode=RBAC`로 API 서버를 시작한다.
+ * **Webhook** - WebHook은 HTTP 콜백이다(어떤 일이 일어날 때 발생하는 HTTP POST와 HTTP POST를 통한 간단한 이벤트 알림). WebHook을 구현하는 웹 애플리케이션은 특정한 일이 발생할 때 URL에 메시지를 POST 할 것이다. Webhook 모드 사용에 대한 자세한 내용은 [Webhook 모드](/docs/reference/access-authn-authz/webhook/)를 참조한다.
+
+#### API 접근 확인
+
+`kubectl`은 API 인증 계층을 신속하게 쿼리하기 위한 "auth can-i" 하위 명령어를 제공한다.
+이 명령은 현재 사용자가 지정된 작업을 수행할 수 있는지 여부를 알아내기 위해 `SelfSubjectAccessReview` API를 사용하며,
+사용되는 인가 모드에 관계없이 작동한다.
+
+
+```bash
+kubectl auth can-i create deployments --namespace dev
+```
+```
+yes
+```
+
+```shell
+kubectl auth can-i create deployments --namespace prod
+```
+```
+no
+```
+
+관리자는 이를 [사용자 가장(impersonation)](/docs/reference/access-authn-authz/authentication/#user-impersonation)과
+병행하여 다른 사용자가 수행할 수 있는 작업을 결정할 수 있다.
+
+```bash
+kubectl auth can-i list secrets --namespace dev --as dave
+```
+```
+no
+```
+
+`SelfSubjectAccessReview`는 `authorization.k8s.io` API 그룹의 일부로서
+API 서버 인가를 외부 서비스에 노출시킨다.
+이 그룹의 기타 리소스에는 다음이 포함된다.
+
+* `SubjectAccessReview` - 현재 사용자뿐만 아니라 모든 사용자에 대한 접근 검토. API 서버에 인가 결정을 위임하는 데 유용하다. 예를 들어, kubelet 및 확장(extension) API 서버는 자신의 API에 대한 사용자 접근을 결정하기 위해 해당 리소스를 사용한다.
+* `LocalSubjectAccessReview` - `SubjectAccessReview`와 비슷하지만 특정 네임스페이스로 제한된다.
+* `SelfSubjectRulesReview` - 사용자가 네임스페이스 안에서 수행할 수 있는 작업 집합을 반환하는 검토. 사용자가 자신의 접근을 빠르게 요약해서 보거나 UI가 작업을 숨기거나 표시하는 데 유용하다.
+
+이러한 API는 반환된 객체의 응답 "status" 필드가 쿼리의 결과인
+일반 쿠버네티스 리소스를 생성하여 쿼리할 수 있다.
+
+```bash
+kubectl create -f - -o yaml << EOF
+apiVersion: authorization.k8s.io/v1
+kind: SelfSubjectAccessReview
+spec:
+  resourceAttributes:
+    group: apps
+    resource: deployments
+    verb: create
+    namespace: dev
+EOF
+```
+
+생성된 `SelfSubjectAccessReview` 는 다음과 같다.
+```
+apiVersion: authorization.k8s.io/v1
+kind: SelfSubjectAccessReview
+metadata:
+  creationTimestamp: null
+spec:
+  resourceAttributes:
+    group: apps
+    resource: deployments
+    namespace: dev
+    verb: create
+status:
+  allowed: true
+  denied: false
+```
+
+## 인가 모듈에 플래그 사용
+
+정책에 포함된 인가 모듈을 나타내기 위해
+정책에 플래그를 포함시켜야 한다.
+
+다음 플래그를 사용할 수 있다.
+
+  * `--authorization-mode=ABAC` 속성 기반 접근 제어(ABAC) 모드를 사용하면 로컬 파일을 사용하여 정책을 구성할 수 있다.
+  * `--authorization-mode=RBAC` 역할 기반 접근 제어(RBAC) 모드를 사용하면 쿠버네티스 API를 사용하여 정책을 만들고 저장할 수 있다.
+  * `--authorization-mode=Webhook` WebHook은 원격 REST 엔드포인트를 사용하여 인가를 관리할 수 있는 HTTP 콜백 모드다.
+  * `--authorization-mode=Node` 노드 인가는 kubelet이 생성한 API 요청을 특별히 인가시키는 특수 목적 인가 모드다.
+  * `--authorization-mode=AlwaysDeny` 이 플래그는 모든 요청을 차단한다. 이 플래그는 테스트에만 사용한다.
+  * `--authorization-mode=AlwaysAllow` 이 플래그는 모든 요청을 허용한다. API 요청에 대한 인가가 필요하지 않은 경우에만 이 플래그를 사용한다.
+
+하나 이상의 인가 모듈을 선택할 수 있다. 모듈이 순서대로 확인되기 때문에
+우선 순위가 더 높은 모듈이 요청을 허용하거나 거부할 수 있다.
+
+## 파드 생성을 통한 권한 확대
+
+네임스페이스에서 파드를 생성할 수 있는 권한을 가진 사용자는
+해당 네임스페이스 안에서 자신의 권한을 확대할 가능성이 있다.
+네임스페이스에서 자신의 권한에 접근할 수 있는 파드를 만들 수 있다.
+사용자가 스스로 읽을 수 없는 시크릿에 접근할 수 있는 파드나
+서로 다른/더 큰 권한을 가진 서비스 어카운트로 실행되는 파드를 생성할 수 있다.
+
+{{< caution >}}
+시스템 관리자는 파드 생성에 대한 접근 권한을 부여할 때 주의한다.
+네임스페이스에서 파드(또는 파드를 생성하는 컨트롤러)를 생성할 수 있는 권한을 부여받은 사용자는
+네임스페이스의 모든 시크릿을 읽을 수 있으며 네임스페이스의 모든 컨피그 맵을 읽을 수 있고
+네임스페이스의 모든 서비스 어카운트를 가장하고 해당 어카운트가 취할 수 있는 모든 작업을 취할 수 있다.
+이는 인가 모드에 관계없이 적용된다.
+{{< /caution >}}
+
+
+## {{% heading "whatsnext" %}}
+
+* 인증에 대한 자세한 내용은 [쿠버네티스 API 접근 제어하기](/docs/reference/access-authn-authz/controlling-access/)에서 **인증**을 참조한다.
+* 어드미션 제어에 대한 자세한 내용은 [어드미션 컨트롤러 사용하기](/docs/reference/access-authn-authz/admission-controllers/)를 참조한다.
diff --git a/content/ko/docs/reference/access-authn-authz/controlling-access.md b/content/ko/docs/reference/access-authn-authz/controlling-access.md
new file mode 100644
index 0000000000..e823ba60a5
--- /dev/null
+++ b/content/ko/docs/reference/access-authn-authz/controlling-access.md
@@ -0,0 +1,162 @@
+---
+title: 쿠버네티스 API 접근 제어하기
+content_type: concept
+weight: 5
+---
+
+<!-- overview -->
+이 페이지는 쿠버네티스 API에 대한 접근 제어의 개요를 제공한다.
+
+
+<!-- body -->
+사용자는 `kubectl`, 클라이언트 라이브러리
+또는 REST 요청을 통해
+[API에 접근한다](/docs/tasks/access-application-cluster/access-cluster/).
+사용자와 쿠버네티스 서비스 어카운트 모두 API에 접근할 수 있다.
+요청이 API에 도달하면,
+다음 다이어그램에 설명된 몇 가지 단계를 거친다.
+
+![Diagram of request handling steps for Kubernetes API request](/images/docs/admin/access-control-overview.svg)
+
+## 전송 보안
+
+일반적인 쿠버네티스 클러스터에서 API는 443번 포트에서 서비스한다.
+API 서버는 인증서를 제시한다.
+이 인증서는 종종 자체 서명되기 때문에 일반적으로 사용자 머신의 `$USER/.kube/config`는
+API 서버의 인증서에 대한 루트 인증서를 포함하며,
+시스템 기본 루트 인증서 대신 사용된다.
+`kube-up.sh`을 사용하여 클러스터를 직접 생성할 때
+이 인증서는 일반적으로 `$USER/.kube/config`에 자동으로 기록된다.
+클러스터에 여러 명의 사용자가 있는 경우, 작성자는 인증서를 다른 사용자와 공유해야 한다.
+
+## 인증
+
+TLS가 설정되면 HTTP 요청이 인증 단계로 넘어간다.
+이는 다이어그램에 **1**단계로 표시되어 있다.
+클러스터 생성 스크립트 또는 클러스터 관리자는
+API 서버가 하나 이상의 인증기 모듈을 실행하도록 구성한다.
+인증기는 [여기](/docs/reference/access-authn-authz/authentication/)에서 더 자세히 서술한다.
+
+인증 단계로 들어가는 것은 온전한 HTTP 요청이지만
+일반적으로 헤더 그리고/또는 클라이언트 인증서만 검사한다.
+
+인증 모듈은 클라이언트 인증서, 암호 및 일반 토큰, 부트스트랩 토큰,
+JWT 토큰(서비스 어카운트에 사용됨)을 포함한다.
+
+여러 개의 인증 모듈을 지정할 수 있으며,
+이 경우 하나의 인증 모듈이 성공할 때까지 각 모듈을 순차적으로 시도한다.
+
+GCE에서는 클라이언트 인증서, 암호, 일반 토큰 및 JWT 토큰이 모두 사용 가능하다.
+
+요청을 인증할 수 없는 경우 HTTP 상태 코드 401과 함께 거부된다.
+이 외에는 사용자가 특정 `username`으로 인증되며,
+이 username은 다음 단계에서 사용자의 결정에 사용할 수 있다.
+일부 인증기는 사용자 그룹 관리 기능을 제공하는 반면,
+이외의 인증기는 그렇지 않다.
+
+쿠버네티스는 접근 제어 결정과 요청 기록 시 `usernames`를 사용하지만,
+`user` 오브젝트를 가지고 있지 않고 usernames 나 기타 사용자 정보를
+오브젝트 저장소에 저장하지도 않는다.
+
+## 인가
+
+특정 사용자로부터 온 요청이 인증된 후에는 인가되어야 한다. 이는 다이어그램에 **2**단계로 표시되어 있다.
+
+요청은 요청자의 username, 요청된 작업 및 해당 작업이 영향을 주는 오브젝트를 포함해야 한다. 기존 정책이 요청된 작업을 완료할 수 있는 권한이 해당 사용자에게 있다고 선언하는 경우 요청이 인가된다.
+
+예를 들어 Bob이 아래와 같은 정책을 가지고 있다면 `projectCaribou` 네임스페이스에서만 파드를 읽을 수 있다.
+
+```json
+{
+    "apiVersion": "abac.authorization.kubernetes.io/v1beta1",
+    "kind": "Policy",
+    "spec": {
+        "user": "bob",
+        "namespace": "projectCaribou",
+        "resource": "pods",
+        "readonly": true
+    }
+}
+```
+Bob이 다음과 같은 요청을 하면 'projectCaribou' 네임스페이스의 오브젝트를 읽을 수 있기 때문에 요청이 인가된다.
+
+```json
+{
+  "apiVersion": "authorization.k8s.io/v1beta1",
+  "kind": "SubjectAccessReview",
+  "spec": {
+    "resourceAttributes": {
+      "namespace": "projectCaribou",
+      "verb": "get",
+      "group": "unicorn.example.org",
+      "resource": "pods"
+    }
+  }
+}
+```
+Bob이 `projectCaribou` 네임스페이스에 있는 오브젝트에 쓰기(`create` 또는 `update`) 요청을 하면 그의 인가는 거부된다. 만약 Bob이 `projectFish`처럼 다른 네임스페이스의 오브젝트 읽기(`get`) 요청을 하면 그의 인가는 거부된다.
+
+쿠버네티스 인가는 공통 REST 속성을 사용하여 기존 조직 전체 또는 클라우드 제공자 전체의 접근 제어 시스템과 상호 작용할 것을 요구한다. 이러한 제어 시스템은 쿠버네티스 API 이외의 다른 API와 상호작용할 수 있으므로 REST 형식을 사용하는 것이 중요하다.
+
+쿠버네티스는 ABAC 모드, RBAC 모드, 웹훅 모드와 같은 여러 개의 인가 모듈을 지원한다. 관리자가 클러스터를 생성할 때 API 서버에서 사용해야 하는 인가 모듈을 구성했다. 인가 모듈이 2개 이상 구성되면 쿠버네티스가 각 모듈을 확인하고, 어느 모듈이 요청을 승인하면 요청을 진행할 수 있다. 모든 모듈이 요청을 거부하면 요청이 거부된다(HTTP 상태 코드 403).
+
+인가 모듈을 사용한 정책 생성을 포함해 쿠버네티스 인가에 대해 더 배우려면 [인가 개요](/docs/reference/access-authz/authorization/)를 참조한다.
+
+
+## 어드미션 제어
+
+어드미션 제어 모듈은 요청을 수정하거나 거부할 수 있는 소프트웨어 모듈이다.
+인가 모듈에서 사용할 수 있는 속성 외에도
+어드미션 제어 모듈은 생성되거나 수정된 오브젝트 내용에 접근할 수 있다.
+
+어드미션 컨트롤러는 오브젝트를 생성, 수정, 삭제 또는 (프록시에) 연결하는 요청에 따라 작동한다.
+어드미션 컨트롤러는 단순히 객체를 읽는 요청에는 작동하지 않는다.
+여러 개의 어드미션 컨트롤러가 구성되면 순서대로 호출된다.
+
+이는 다이어그램에 **3**단계로 표시되어 있다.
+
+인증 및 인가 모듈과 달리,
+어드미션 제어 모듈이 거부되면 요청은 즉시 거부된다.
+
+어드미션 제어 모듈은 오브젝트를 거부하는 것 외에도
+필드의 복잡한 기본값을 설정할 수 있다.
+
+사용 가능한 어드미션 제어 모듈은 [여기](/docs/reference/access-authn-authz/admission-controllers/)에 서술되어 있다.
+
+요청이 모든 어드미션 제어 모듈을 통과하면 유효성 검사 루틴을 사용하여 해당 API 오브젝트를 검증한 후
+오브젝트 저장소에 기록(**4**단계)된다.
+
+
+## API 서버 포트와 IP
+
+이전의 논의는 (일반적인 경우) API 서버의 보안 포트로 전송되는 요청에 적용된다.
+API 서버는 실제로 다음과 같이 2개의 포트에서 서비스할 수 있다.
+
+기본적으로 쿠버네티스 API 서버는 2개의 포트에서 HTTP 서비스를 한다.
+
+  1. `로컬호스트 포트`:
+
+      - 테스트 및 부트스트랩을 하기 위한 것이며 마스터 노드의 다른 구성요소
+        (스케줄러, 컨트롤러 매니저)가 API와 통신하기 위한 것이다.
+      - TLS가 없다.
+      - 기본 포트는 8080이며, `--insecure-port` 플래그를 사용하여 변경한다.
+      - 기본 IP는 로컬호스트(localhost)이며, `--insecure-bind-address` 플래그를 사용하여 변경한다.
+      - 요청이 인증 및 인가 모듈을 **우회한다**.
+      - 요청이 어드미션 제어 모듈(들)에 의해 처리된다.
+      - 호스트 접근 요구로부터 보호를 받는다.
+
+  2. `보안 포트`:
+
+      - 가능한 항상 사용하는 것이 좋다.
+      - TLS를 사용한다. `--tls-cert-file` 플래그로 인증서를 지정하고 `--tls-private-key-file` 플래그로 키를 지정한다.
+      - 기본 포트는 6443이며, `--secure-port` 플래그를 사용하여 변경한다.
+      - 기본 IP는 로컬호스트가 아닌 첫 번째 네트워크 인터페이스이며, `--bind-address` 플래그를 사용하여 변경한다.
+      - 요청이 인증 및 인가 모듈에 의해 처리된다.
+      - 요청이 어드미션 제어 모듈(들)에 의해 처리된다.
+      - 인증 및 인가 모듈을 실행한다.
+
+GCE(구글 컴퓨트 엔진) 및 다른 클라우드 제공자에서 `kube-up.sh`로 클러스터를 생성하면
+API 서버는 포트 443에서 서비스한다.
+GCE에서는 외부 HTTPS가 API에 접근할 수 있도록 프로젝트에서 방화벽 규칙이 구성된다.
+이외에 클러스터 설정 방법은 다양하다.
+
diff --git a/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md b/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
new file mode 100644
index 0000000000..1b7da703dc
--- /dev/null
+++ b/content/ko/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -0,0 +1,112 @@
+---
+title: 서비스 어카운트 관리하기
+content_type: concept
+weight: 50
+---
+
+<!-- overview -->
+이것은 서비스 어카운트에 대한 클러스터 관리자 안내서다.
+독자는 [쿠버네티스 서비스 어카운트 설정](/docs/tasks/configure-pod-container/configure-service-account/)에 익숙하다고 가정한다.
+
+인증 및 사용자 어카운트에 대한 지원은 아직 준비 중이다.
+가끔은 서비스 어카운트를 더 잘 설명하기 위해 준비 중인 기능을 참조한다.
+
+
+<!-- body -->
+## 사용자 어카운트와 서비스 어카운트 비교
+
+쿠버네티스는 여러 가지 이유로 사용자 어카운트와 서비스 어카운트의 개념을
+구분한다.
+
+  - 사용자 어카운트는 사람을 위한 것이다. 서비스 어카운트는 파드에서 실행되는 프로세스를
+    위한 것이다.
+  - 사용자 어카운트는 전역을 대상으로 고려된다.
+    클러스터의 모든 네임스페이스에 걸쳐 이름이 고유해야 하며, 향후 사용자 리소스는 네임스페이스에 할당되지 않는다.
+    서비스 어카운트는 네임스페이스에 할당된다.
+  - 일반적으로 클러스터의 사용자 어카운트는 기업 데이터베이스로부터 동기화될 수 있으며,
+    여기서 새로운 사용자 어카운트를 생성하려면 특별한 권한이 필요하며 복잡한 비즈니스 프로세스에 연결된다.
+    서비스 어카운트 생성은
+    클러스터 사용자가 특정 작업(즉, 최소 권한 원칙)을 위한 서비스 어카운트를 만들 수 있도록
+    보다 가볍게 만들어졌다.
+  - 사람과 서비스 어카운트에 대한 감사 항목은 다를 수 있다.
+  - 복잡한 시스템의 설정들은 그 시스템의 구성요소에 대한 다양한 서비스 어카운트 정의를 포함할 수 있다.
+    서비스 어카운트는 임시(ad-hoc)로 만들 수도 있고 네임스페이스에 할당된 이름을 가질 수도 있기 때문에
+    이러한 설정은 이식성이 좋다.
+
+## 서비스 어카운트 자동화
+
+서비스 계정 자동화를 구현하기 위해 세 가지 개별 요소가 협력한다.
+
+  - 서비스 어카운트 어드미션 컨트롤러
+  - 토큰 컨트롤러
+  - 서비스 어카운트 컨트롤러
+
+### 서비스 어카운트 어드미션 컨트롤러
+
+파드 수정은 [어드미션 컨트롤러](/docs/reference/access-authn-authz/admission-controllers/)
+라는 플러그인을 통해 구현된다. 이것은 apiserver의 일부이다.
+파드가 생성되거나 수정될 때 파드를 수정하기 위해 동기적으로 동작한다.
+이 플러그인이 활성 상태(대부분의 배포에서 기본값)인 경우 파드 생성 또는 수정 시 다음 작업을 수행한다.
+
+  1. 파드에 `ServiceAccount`가 없다면 `ServiceAccount`를 `default`로 설정한다.
+  1. 파드에 참조되는 `ServiceAccount`가 있도록 하고, 그렇지 않으면 이를 거부한다.
+  1. 파드에 `ImagePullSecrets`이 없는 경우 `ServiceAccount`의 `ImagePullSecrets`이 파드에 추가된다.
+  1. 파드에 API 접근 토큰이 포함된 `volume`을 추가한다.
+  1. `/var/run/secrets/kubernetes.io/serviceaccount`에 마운트된 파드의 각 컨테이너에 `volumeSource`를 추가한다.
+
+v1.13부터 `BoundServiceAccountTokenVolume` 기능 게이트가 활성화되면 서비스 어카운트 볼륨을 프로젝티드 볼륨으로 마이그레이션할 수 있다.
+서비스 어카운트 토큰은 1시간 후에 만료되거나 파드가 삭제된다.
+[프로젝티드 볼륨](/docs/tasks/configure-pod-container/configure-projected-volume-storage/)에 대한 자세한 내용을 참조한다.
+
+### 토큰 컨트롤러
+
+토큰컨트롤러는 컨트롤러 매니저의 일부로 실행된다. 이것은 비동기적으로 동작한다. 토큰 컨트롤러는,
+
+- 서비스 어카운트 생성을 지켜보고 API에 접근할 수 있는 시크릿을 생성한다.
+- 서비스 어카운트 삭제를 지켜보고 해당하는 모든 서비스 어카운트 토큰 시크릿을 삭제한다.
+- 시크릿 추가를 지켜보고 참조된 서비스 어카운트가 존재하는지 확인하고 필요한 경우 시크릿에 토큰을 추가한다.
+- 시크릿 삭제를 지켜보고 필요한 경우 해당 서비스 어카운트에서 참조를 제거한다.
+
+서비스 어카운트 개인키 파일은 `--service-account-private-key-file` 옵션을 사용하여 컨트롤러 매니저의 토큰 컨트롤러에 전달해야 한다.
+개인키는 생성된 서비스 어카운트 토큰에 서명하는 데 사용될 것이다.
+마찬가지로 `--service-account-key-file` 옵션을 사용하여 해당 공개키를 쿠버네티스 API 서버에 전달해야 한다.
+공개키는 인증 과정에서 토큰을 검증하는 데 사용될 것이다.
+
+#### 추가적인 API 토큰 생성
+
+컨트롤러 루프는 API 토큰이 포함된 시크릿이 각 서비스 어카운트에 존재하도록 보장한다.
+서비스 어카운트에 대한 추가적인 API 토큰을 생성하기 위해
+서비스 어카운트를 참조하는 어노테이션과 함께 `ServiceAccountToken` 유형의 시크릿을 생성하면
+컨트롤러가 새로 생성된 토큰으로 갱신한다.
+
+secret.json:
+
+```json
+{
+    "kind": "Secret",
+    "apiVersion": "v1",
+    "metadata": {
+        "name": "mysecretname",
+        "annotations": {
+            "kubernetes.io/service-account.name": "myserviceaccount"
+        }
+    },
+    "type": "kubernetes.io/service-account-token"
+}
+```
+
+```shell
+kubectl create -f ./secret.json
+kubectl describe secret mysecretname
+```
+
+#### 서비스 어카운트 토큰 삭제/무효화
+
+```shell
+kubectl delete secret mysecretname
+```
+
+### 서비스 어카운트 컨트롤러
+
+서비스 어카운트 컨트롤러는 네임스페이스에 있는 서비스 어카운트를 관리하고
+"default"라는 이름의 서비스 어카운트가 모든 활성 네임스페이스에 존재하는지 확인한다.
diff --git a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
index 8992cb4999..11dc7f26b6 100644
--- a/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
+++ b/content/ko/docs/reference/command-line-tools-reference/feature-gates.md
@@ -366,13 +366,13 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `AnyVolumeDataSource`: {{< glossary_tooltip text="PVC" term_id="persistent-volume-claim" >}}의
   `DataSource` 로 모든 사용자 정의 리소스 사용을 활성화한다.
 - `APIListChunking`: API 클라이언트가 API 서버에서 (`LIST` 또는 `GET`) 리소스를 청크(chunks)로 검색할 수 있도록 한다.
-- `APIPriorityAndFairness`: 각 서버의 우선 순위와 공정성을 통해 동시 요청을 관리할 수 ​​있다. (`RequestManagement` 에서 이름이 변경됨)
+- `APIPriorityAndFairness`: 각 서버의 우선 순위와 공정성을 통해 동시 요청을 관리할 수 있다. (`RequestManagement` 에서 이름이 변경됨)
 - `APIResponseCompression`: `LIST` 또는 `GET` 요청에 대한 API 응답을 압축한다.
 - `AppArmor`: 도커를 사용할 때 리눅스 노드에서 AppArmor 기반의 필수 접근 제어를 활성화한다.
    자세한 내용은 [AppArmor 튜토리얼](/ko/docs/tutorials/clusters/apparmor/)을 참고한다.
 - `AttachVolumeLimit`: 볼륨 플러그인이 노드에 연결될 수 있는 볼륨 수에
   대한 제한을 보고하도록 한다.
-   자세한 내용은 [동적 볼륨 제한](/docs/concepts/storage/storage-limits/#dynamic-volume-limits)을 참고한다.
+   자세한 내용은 [동적 볼륨 제한](/ko/docs/concepts/storage/storage-limits/#동적-볼륨-한도)을 참고한다.
 - `BalanceAttachedNodeVolumes`: 스케줄링 시 균형 잡힌 리소스 할당을 위해 고려할 노드의 볼륨 수를
   포함한다. 스케줄러가 결정을 내리는 동안 CPU, 메모리 사용률 및 볼륨 수가
   더 가까운 노드가 선호된다.
@@ -423,7 +423,7 @@ kubelet과 같은 컴포넌트의 기능 게이트를 설정하려면, 기능 
 - `CustomResourceWebhookConversion`: [커스텀리소스데피니션](/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources/)에서
   생성된 리소스에 대해 웹 훅 기반의 변환을 활성화한다.
   실행 중인 파드 문제를 해결한다.
-- `DisableAcceleratorUsageMetrics`: [kubelet이 수집한 액셀러레이터 지표 비활성화](/docs/concepts/cluster-administration/monitoring.md).
+- `DisableAcceleratorUsageMetrics`: [kubelet이 수집한 액셀러레이터 지표 비활성화](/ko/docs/concepts/cluster-administration/system-metrics/).
 - `DevicePlugins`: 노드에서 [장치 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/)
   기반 리소스 프로비저닝을 활성화한다.
 - `DefaultPodTopologySpread`: `PodTopologySpread` 스케줄링 플러그인을 사용하여
diff --git a/content/ko/docs/reference/glossary/cloud-provider.md b/content/ko/docs/reference/glossary/cloud-provider.md
index e649147b32..31bf473f46 100644
--- a/content/ko/docs/reference/glossary/cloud-provider.md
+++ b/content/ko/docs/reference/glossary/cloud-provider.md
@@ -2,7 +2,6 @@
 title: 클라우드 공급자
 id: cloud-provider
 date: 2018-04-12
-full_link: /docs/concepts/cluster-administration/cloud-providers
 short_description: >
   클라우드 컴퓨팅 플랫폼을 제공하는 조직.
 
@@ -26,6 +25,6 @@ Infrastructure as a Service 또는 IaaS 라 부른다).
 
 사용자는 쿠버네티스를 관리되는 서비스로 찾을 수 있다. 때로는 이것을
 Platform as a Service 또는 PaaS라 부른다. 관리되는 쿠버네티스를 사용하면
-클라우드 공급자가 쿠버네티스 컨트롤 플레인만 아니라, 
+클라우드 공급자가 쿠버네티스 컨트롤 플레인만 아니라,
 노드와 연관되는 인프라(네트워킹, 스토리지 그리고 로드밸런서와 같은 기타 요소)
 를 책임진다.
diff --git a/content/ko/docs/reference/using-api/client-libraries.md b/content/ko/docs/reference/using-api/client-libraries.md
index 5b9f179cbc..45d43567d7 100644
--- a/content/ko/docs/reference/using-api/client-libraries.md
+++ b/content/ko/docs/reference/using-api/client-libraries.md
@@ -38,6 +38,8 @@ API 호출 또는 요청/응답 타입을 직접 구현할 필요는 없다.
 
 ## 커뮤니티에 의해 관리되는 클라이언트 라이브러리
 
+{{% thirdparty-content %}}
+
 다음의 쿠버네티스 API 클라이언트 라이브러리들은 쿠버네티스 팀이 아닌
 각각의 저자들이 제공하고 관리한다.
 
diff --git a/content/ko/docs/setup/best-practices/certificates.md b/content/ko/docs/setup/best-practices/certificates.md
index 780bd46fa3..5595e0ac3d 100644
--- a/content/ko/docs/setup/best-practices/certificates.md
+++ b/content/ko/docs/setup/best-practices/certificates.md
@@ -29,7 +29,7 @@ weight: 40
 * [front-proxy](/docs/tasks/extend-kubernetes/configure-aggregation-layer/)를 위한 클라이언트와 서버 인증서
 
 {{< note >}}
-`front-proxy` 인증서는 kube-proxy에서 [API 서버 확장](/docs/tasks/extend-kubernetes/setup-extension-api-server/)을 지원할 때만 kube-proxy에서 필요하다.
+`front-proxy` 인증서는 kube-proxy에서 [API 서버 확장](/ko/docs/tasks/extend-kubernetes/setup-extension-api-server/)을 지원할 때만 kube-proxy에서 필요하다.
 {{< /note >}}
 
 etcd 역시 클라이언트와 피어 간에 상호 TLS 인증을 구현한다.
@@ -120,8 +120,8 @@ kubeadm 사용자만 해당:
 
 | 개인키 경로             | 공개 키 경로             | 명령어                 | 파라미터                             |
 |------------------------------|-----------------------------|-------------------------|--------------------------------------|
-|  sa.key                      |                             | kube-controller-manager | --service-account-private-key-file              |
-|                              | sa.pub                      | kube-apiserver          | --service-account-key-file                  |
+|  sa.key                      |                             | kube-controller-manager | --service-account-private-key-file   |
+|                              | sa.pub                      | kube-apiserver          | --service-account-key-file           |
 
 ## 각 사용자 계정을 위한 인증서 설정하기
 
@@ -157,4 +157,3 @@ KUBECONFIG=<filename> kubectl config use-context default-system
 | kubelet.conf            | kubelet                 | 클러스터 각 노드를 위해 필요하다.                            |
 | controller-manager.conf | kube-controller-manager | 반드시 매니페스트를 `manifests/kube-controller-manager.yaml`에 추가해야한다. |
 | scheduler.conf          | kube-scheduler          | 반드시 매니페스트를 `manifests/kube-scheduler.yaml`에 추가해야한다.          |
-
diff --git a/content/ko/docs/setup/learning-environment/minikube.md b/content/ko/docs/setup/learning-environment/minikube.md
index 18e4811457..191da08404 100644
--- a/content/ko/docs/setup/learning-environment/minikube.md
+++ b/content/ko/docs/setup/learning-environment/minikube.md
@@ -447,11 +447,11 @@ spec:
 
 | Driver | OS | HostFolder | VM |
 | --- | --- | --- | --- |
-| VirtualBox | 리눅스 | /home | /hosthome |
-| VirtualBox | macOS | /Users | /Users |
-| VirtualBox | 윈도우 | C://Users | /c/Users |
-| VMware Fusion | macOS | /Users | /mnt/hgfs/Users |
-| Xhyve | macOS | /Users | /Users |
+| VirtualBox | 리눅스 | `/home` | `/hosthome` |
+| VirtualBox | macOS | `/Users` | `/Users` |
+| VirtualBox | 윈도우 | `C://Users` | `/c/Users` |
+| VMware Fusion | macOS | `/Users` | `/mnt/hgfs/Users` |
+| Xhyve | macOS | `/Users` | `/Users` |
 
 ## 프라이빗 컨테이너 레지스트리
 
diff --git a/content/ko/docs/setup/production-environment/container-runtimes.md b/content/ko/docs/setup/production-environment/container-runtimes.md
index aa21c110d4..0437815d1c 100644
--- a/content/ko/docs/setup/production-environment/container-runtimes.md
+++ b/content/ko/docs/setup/production-environment/container-runtimes.md
@@ -68,7 +68,7 @@ kubelet을 재시작 하는 것은 에러를 해결할 수 없을 것이다.
 시스템에 도커를 설치하기 위해서 아래의 커맨드들을 사용한다.
 
 {{< tabs name="tab-cri-docker-installation" >}}
-{{< tab name="Ubuntu 16.04+" >}}
+{{% tab name="Ubuntu 16.04+" %}}
 
 ```shell
 # (도커 CE 설치)
@@ -122,8 +122,8 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{< /tab >}}
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% /tab %}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # (도커 CE 설치)
@@ -177,7 +177,7 @@ mkdir -p /etc/systemd/system/docker.service.d
 systemctl daemon-reload
 systemctl restart docker
 ```
-{{< /tab >}}
+{{% /tab %}}
 {{< /tabs >}}
 
 부팅 시 도커 서비스를 시작하려면, 다음 명령을 실행한다.
@@ -217,7 +217,7 @@ sysctl --system
 ```
 
 {{< tabs name="tab-cri-cri-o-installation" >}}
-{{< tab name="Debian" >}}
+{{% tab name="Debian" %}}
 
 다음의 운영 체제에서 CRI-O를 설치하려면, 환경 변수 $OS를 아래의 표에서 적절한 필드로 설정한다.
 
@@ -244,19 +244,8 @@ curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/
 apt-get update
 apt-get install cri-o cri-o-runc
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-
-{{< tab name="Ubuntu 18.04, 19.04 and 19.10" >}}
-=======
-<<<<<<< HEAD
-{{% /tab %}}
-
-{{% tab name="Ubuntu 18.04, 19.04 and 19.10" %}}
-=======
 
 {{% /tab %}}
->>>>>>> upstream/dev-1.19-ko.1
 
 {{% tab name="Ubuntu" %}}
 
@@ -275,7 +264,6 @@ apt-get install cri-o cri-o-runc
 사용자의 설치를 특정 릴리스에 고정할 수 있다.
 버전 1.18.3을 설치하려면, `VERSION=1.18:1.18.3` 을 설정한다.
 <br />
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 
 그런 다음, 아래를 실행한다.
 ```shell
@@ -313,22 +301,10 @@ curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://downlo
 curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
 yum install cri-o
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-
-{{< tab name="CentOS/RHEL 7.4+" >}}
-=======
-<<<<<<< HEAD
-{{% /tab %}}
-
-{{% tab name="CentOS/RHEL 7.4+" %}}
-=======
 
 {{% /tab %}}
 
 {{% tab name="openSUSE Tumbleweed" %}}
->>>>>>> upstream/dev-1.19-ko.1
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 
 ```shell
 sudo zypper install cri-o
@@ -345,29 +321,13 @@ dnf module list cri-o
 ```
 CRI-O는 Fedora에서 특정 릴리스를 고정하여 설치하는 방법은 지원하지 않는다.
 
-<<<<<<< HEAD
-{{< tab name="openSUSE Tumbleweed" >}}
-=======
-<<<<<<< HEAD
-{{% tab name="openSUSE Tumbleweed" %}}
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
-
-=======
 그런 다음, 아래를 실행한다.
->>>>>>> upstream/dev-1.19-ko.1
 ```shell
 dnf module enable cri-o:$VERSION
 dnf install cri-o
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-=======
-<<<<<<< HEAD
-=======
 
->>>>>>> upstream/dev-1.19-ko.1
 {{% /tab %}}
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### CRI-O 시작
@@ -377,8 +337,8 @@ systemctl daemon-reload
 systemctl start crio
 ```
 
-자세한 사항은 [CRI-O 설치 가이드](https://github.com/kubernetes-sigs/cri-o#getting-started)
-를 참고한다.
+자세한 사항은 [CRI-O 설치 가이드](https://github.com/kubernetes-sigs/cri-o#getting-started)를
+참고한다.
 
 ## Containerd
 
@@ -410,7 +370,7 @@ sysctl --system
 ### containerd 설치
 
 {{< tabs name="tab-cri-containerd-installation" >}}
-{{< tab name="Ubuntu 16.04" >}}
+{{% tab name="Ubuntu 16.04" %}}
 
 ```shell
 # (containerd 설치)
@@ -447,8 +407,8 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-{{< /tab >}}
-{{< tab name="CentOS/RHEL 7.4+" >}}
+{{% /tab %}}
+{{% tab name="CentOS/RHEL 7.4+" %}}
 
 ```shell
 # (containerd 설치)
@@ -479,12 +439,7 @@ containerd config default > /etc/containerd/config.toml
 # containerd 재시작
 systemctl restart containerd
 ```
-<<<<<<< HEAD
-{{< /tab >}}
-=======
-<<<<<<< HEAD
-=======
-{{< /tab >}}
+{{% /tab %}}
 {{% tab name="윈도우 (PowerShell)" %}}
 ```powershell
 # (containerd 설치)
@@ -510,14 +465,17 @@ Get-Content config.toml
 .\containerd.exe --register-service
 Start-Service containerd
 ```
->>>>>>> upstream/dev-1.19-ko.1
 {{% /tab %}}
->>>>>>> 357c22dfe... First Korean l10n work for release-1.19
 {{< /tabs >}}
 
 ### systemd
 
-`systemd` cgroup driver를 사용하려면, `/etc/containerd/config.toml`의 `plugins.cri.systemd_cgroup = true`을 설정한다.
+`systemd` cgroup driver를 사용하려면, `/etc/containerd/config.toml`에 다음을 설정한다.
+
+```
+[plugins.cri]
+systemd_cgroup = true
+```
 kubeadm을 사용하는 경우에도 마찬가지로, 수동으로
 [kubelet을 위한 cgroup 드라이버](/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#configure-cgroup-driver-used-by-kubelet-on-control-plane-node)를 설정한다.
 
diff --git a/content/ko/docs/setup/production-environment/on-premises-vm/_index.md b/content/ko/docs/setup/production-environment/on-premises-vm/_index.md
deleted file mode 100644
index d9b92bea18..0000000000
--- a/content/ko/docs/setup/production-environment/on-premises-vm/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: 온-프레미스 VM
-weight: 40
----
diff --git a/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
new file mode 100644
index 0000000000..a2e0a1852c
--- /dev/null
+++ b/content/ko/docs/setup/production-environment/windows/intro-windows-in-kubernetes.md
@@ -0,0 +1,680 @@
+---
+title: 쿠버네티스의 윈도우 지원 소개
+content_type: concept
+weight: 65
+---
+
+<!-- overview -->
+
+윈도우 애플리케이션은 많은 조직에서 실행되는 서비스 및 애플리케이션의 상당 부분을 구성한다. [윈도우 컨테이너](https://aka.ms/windowscontainers)는 프로세스와 패키지 종속성을 캡슐화하는 현대적인 방법을 제공하여, 데브옵스(DevOps) 사례를 더욱 쉽게 ​​사용하고 윈도우 애플리케이션의 클라우드 네이티브 패턴을 따르도록 한다. 쿠버네티스는 사실상의 표준 컨테이너 오케스트레이터가 되었으며, 쿠버네티스 1.14 릴리스에는 쿠버네티스 클러스터의 윈도우 노드에서 윈도우 컨테이너 스케줄링을 위한 프로덕션 지원이 포함되어 있어, 광범위한 윈도우 애플리케이션 생태계가 쿠버네티스의 강력한 기능을 활용할 수 있다. 윈도우 기반 애플리케이션과 리눅스 기반 애플리케이션에 투자한 조직은 워크로드를 관리하기 위해 별도의 오케스트레이터를 찾을 필요가 없으므로, 운영 체제와 관계없이 배포 전반에 걸쳐 운영 효율성이 향상된다.
+
+
+
+<!-- body -->
+
+## 쿠버네티스의 윈도우 컨테이너
+
+쿠버네티스에서 윈도우 컨테이너 오케스트레이션을 활성화하려면, 기존 리눅스 클러스터에 윈도우 노드를 포함하기만 하면 된다. 쿠버네티스의 [파드](/ko/docs/concepts/workloads/pods/pod-overview/)에서 윈도우 컨테이너를 스케줄링하는 것은 리눅스 기반 컨테이너를 스케줄링하는 것만큼 간단하고 쉽다.
+
+윈도우 컨테이너를 실행하려면, 쿠버네티스 클러스터에 리눅스를 실행하는 컨트롤 플레인 노드와 사용자의 워크로드 요구에 따라 윈도우 또는 리눅스를 실행하는 워커가 있는 여러 운영 체제가 포함되어 있어야 한다. 윈도우 서버 2019는 윈도우에서 [쿠버네티스 노드](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/architecture.md#the-kubernetes-node)를 활성화하는 유일한 윈도우 운영 체제이다(kubelet, [컨테이너 런타임](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/deploy-containers/containerd) 및 kube-proxy 포함). 윈도우 배포 채널에 대한 자세한 설명은 [Microsoft 문서](https://docs.microsoft.com/ko-kr/windows-server/get-started-19/servicing-channels-19)를 참고한다.
+
+{{< note >}}
+[마스터 컴포넌트](/ko/docs/concepts/overview/components/)를 포함한 쿠버네티스 컨트롤 플레인은 리눅스에서 계속 실행된다. 윈도우 전용 쿠버네티스 클러스터는 계획이 없다.
+{{< /note >}}
+
+{{< note >}}
+이 문서에서 윈도우 컨테이너에 대해 이야기할 때 프로세스 격리된 윈도우 컨테이너를 의미한다. [Hyper-V 격리](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/manage-containers/hyperv-container)가 있는 윈도우 컨테이너는 향후 릴리스로 계획되어 있다.
+{{< /note >}}
+
+## 지원되는 기능 및 제한
+
+### 지원되는 기능
+
+#### 윈도우 OS 버전 지원
+
+쿠버네티스의 윈도우 운영 체제 지원은 다음 표를 참조한다. 단일 이기종 쿠버네티스 클러스터에는 윈도우 및 리눅스 워커 노드가 모두 있을 수 있다. 윈도우 컨테이너는 윈도우 노드에서, 리눅스 컨테이너는 리눅스 노드에서 스케줄되어야 한다.
+
+| 쿠버네티스 버전 | 윈도우 서버 LTSC 릴리스 | 윈도우 서버 SAC 릴리스 |
+| --- | --- | --- | --- |
+| *Kubernetes v1.14* | Windows Server 2019 | Windows Server ver 1809 |
+| *Kubernetes v1.15* | Windows Server 2019 | Windows Server ver 1809 |
+| *Kubernetes v1.16* | Windows Server 2019 | Windows Server ver 1809 |
+| *Kubernetes v1.17* | Windows Server 2019 | Windows Server ver 1809 |
+| *Kubernetes v1.18* | Windows Server 2019 | Windows Server ver 1809, Windows Server ver 1903, Windows Server ver 1909 |
+| *Kubernetes v1.19* | Windows Server 2019 | Windows Server ver 1909, Windows Server ver 2004 |
+
+{{< note >}}
+지원 모델을 포함한 다양한 윈도우 서버 서비스 채널에 대한 정보는 [윈도우 서버 서비스 채널](https://docs.microsoft.com/ko-kr/windows-server/get-started-19/servicing-channels-19)에서 확인할 수 있다.
+{{< /note >}}
+{{< note >}}
+모든 윈도우 고객이 앱의 운영 체제를 자주 업데이트하는 것은 아니다. 애플리케이션 업그레이드를 위해서는 클러스터에 새 노드를 업그레이드하거나 도입하는 것이 필요하다. 이 문서에서 쿠버네티스에서 실행되는 컨테이너의 운영 체제를 업그레이드하기로 선택한 고객을 위해 새 운영 체제 버전에 대한 지원을 추가할 때의 가이드와 단계별 지침을 제공한다. 이 가이드에는 클러스터 노드와 함께 사용자 애플리케이션을 업그레이드하기 위한 권장 업그레이드 절차가 포함된다. 윈도우 노드는 현재 리눅스 노드와 동일한 방식으로 쿠버네티스 [버전-스큐(skew) 정책](/docs/setup/release/version-skew-policy/)(노드 대 컨트롤 플레인 버전 관리)을 준수한다.
+{{< /note >}}
+{{< note >}}
+윈도우 서버 호스트 운영 체제에는 [윈도우 서버](https://www.microsoft.com/ko-kr/cloud-platform/windows-server-pricing) 라이선스가 적용된다. 윈도우 컨테이너 이미지에는 [윈도우 컨테이너에 대한 추가 사용 조건](https://docs.microsoft.com/en-us/virtualization/windowscontainers/images-eula)이 적용된다.
+{{< /note >}}
+{{< note >}}
+프로세스 격리가 포함된 윈도우 컨테이너에는 엄격한 호환성 규칙이 있으며, [여기서 호스트 OS 버전은 컨테이너 베이스 이미지 OS 버전과 일치해야 한다](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/deploy-containers/version-compatibility). 일단 쿠버네티스에서 Hyper-V 격리가 포함된 윈도우 컨테이너를 지원하면, 제한 및 호환성 규칙이 변경될 것이다.
+{{< /note >}}
+
+#### 컴퓨트
+
+API 및 kubectl의 관점에서, 윈도우 컨테이너는 리눅스 기반 컨테이너와 거의 같은 방식으로 작동한다. 그러나 [제한 섹션](#제한)에 요약된 주요 기능에는 몇 가지 눈에 띄는 차이점이 있다.
+
+윈도우에서 주요 쿠버네티스 요소는 리눅스와 동일한 방식으로 작동한다. 이 섹션에서는, 주요 워크로드 인에이블러(enabler) 일부와 이들이 윈도우에 매핑되는 방법에 대해 설명한다.
+
+* [파드](/ko/docs/concepts/workloads/pods/pod-overview/)
+
+    파드는 쿠버네티스의 기본 빌딩 블록이다 - 쿠버네티스 오브젝트 모델에서 생성하고 배포하는 가장 작고 간단한 단위. 동일한 파드에 윈도우 및 리눅스 컨테이너를 배포할 수 없다. 파드의 모든 컨테이너는 단일 노드로 스케줄되며 각 노드는 특정 플랫폼 및 아키텍처를 나타낸다. 다음과 같은 파드 기능, 속성 및 이벤트가 윈도우 컨테이너에서 지원된다.
+
+  * 프로세스 분리 및 볼륨 공유 기능을 갖춘 파드 당 하나 또는 여러 개의 컨테이너
+  * 파드 상태 필드
+  * 준비성(readiness) 및 활성 프로브(liveness probe)
+  * postStart 및 preStop 컨테이너 라이프사이클 이벤트
+  * 컨피그맵(ConfigMap), 시크릿(Secrets): 환경 변수 또는 볼륨으로
+  * EmptyDir
+  * 명명된 파이프 호스트 마운트
+  * 리소스 제한
+* [컨트롤러](/ko/docs/concepts/workloads/controllers/)
+
+    쿠버네티스 컨트롤러는 파드의 의도한 상태(desired state)를 처리한다. 윈도우 컨테이너에서 지원되는 워크로드 컨트롤러는 다음과 같다.
+
+  * 레플리카셋(ReplicaSet)
+  * 레플리케이션컨트롤러(ReplicationController)
+  * 디플로이먼트(Deployment)
+  * 스테이트풀셋(StatefulSet)	
+  * 데몬셋(DaemonSet)
+  * 잡(Job)
+  * 크론잡(CronJob)
+* [서비스](/ko/docs/concepts/services-networking/service/)
+
+    쿠버네티스 서비스는 논리적인 파드 집합과 그것에(마이크로 서비스라고도 함) 접근하는 정책을 정의하는 추상화 개념이다. 상호-운영 체제 연결을 위해 서비스를 사용할 수 있다. 윈도우에서 서비스는 다음의 유형, 속성 및 기능을 활용할 수 있다.
+
+  * 서비스 환경 변수
+  * 노드포트(NodePort)
+  * 클러스터IP(ClusterIP)
+  * 로드밸런서(LoadBalancer)
+  * ExternalName
+  * 헤드리스 서비스(Headless services)
+
+파드, 컨트롤러 및 서비스는 쿠버네티스에서 윈도우 워크로드를 관리하는데 중요한 요소이다. 그러나 그 자체로는 동적 클라우드 네이티브 환경에서 윈도우 워크로드의 적절한 수명 주기 관리를 수행하기에 충분하지 않다. 다음 기능에 대한 지원이 추가되었다.
+
+* 파드와 컨테이너 메트릭
+* Horizontal Pod Autoscaler 지원
+* kubectl Exec
+* 리소스쿼터(Resource Quotas)
+* 스케쥴러 선점(preemption)
+
+#### 컨테이너 런타임
+
+##### Docker EE
+
+{{< feature-state for_k8s_version="v1.14" state="stable" >}}
+
+Docker EE-basic 19.03 이상은 모든 윈도우 서버 버전에 대해 권장되는 컨테이너 런타임이다. 이것은 kubelet에 포함된 dockershim 코드와 함께 작동한다.
+
+##### CRI-ContainerD
+
+{{< feature-state for_k8s_version="v1.19" state="beta" >}}
+
+{{< caution >}}
+커널 패치가 필요한 윈도우 네트워크 공유에 접근하기 위해 ContainerD와 함께 GMSA를 사용할 때 [알려진 제한](/docs/tasks/configure-pod-container/configure-gmsa/#gmsa-limitations)이 있다. [Microsoft 윈도우 컨테이너 이슈 트래커](https://github.com/microsoft/Windows-Containers/issues/44)에서 업데이트를 확인한다.
+{{< /caution >}}
+
+{{< glossary_tooltip term_id="containerd" text="ContainerD" >}} 1.4.0-beta.2+는 윈도우 쿠버네티스 노드의 컨테이너 런타임으로도 사용할 수 있다.
+
+쿠버네티스 v1.18은 윈도우에서 ContainerD에 대한 초기 지원을 추가한다. 윈도우에서 ContainerD의 진행 상황은 [enhancements#1001](https://github.com/kubernetes/enhancements/issues/1001)에서 확인할 수 있다.
+
+[윈도우에 ContainerD 설치](/ko/docs/setup/production-environment/container-runtimes/#containerd-설치) 방법을 확인한다.
+
+#### 퍼시스턴트 스토리지(Persistent Storage)
+
+쿠버네티스 [볼륨](/ko/docs/concepts/storage/volumes/)을 사용하면 데이터 지속성(persistence) 및 파드 볼륨 공유 요구 사항이 있는 복잡한 애플리케이션을 쿠버네티스에 배포할 수 있다. 특정 스토리지 백엔드 또는 프로토콜과 관련된 퍼시스턴트 볼륨 관리에는 볼륨 프로비저닝/디-프로비저닝/크기 조정, 쿠버네티스 노드에 볼륨 연결/분리, 데이터를 유지해야 하는 파드의 개별 컨테이너에 볼륨 마운트/분리와 같은 작업이 포함된다. 특정 스토리지 백엔드 또는 프로토콜에 대해 이러한 볼륨 관리 작업을 구현하는 코드는 쿠버네티스 볼륨 [플러그인](/ko/docs/concepts/storage/volumes/#볼륨-유형들)의 형태로 제공된다. 다음과 같은 광범위한 쿠버네티스 볼륨 플러그인 클래스가 윈도우에서 지원된다.
+
+##### 인-트리(In-tree) 볼륨 플러그인
+인-트리 볼륨 플러그인과 관련된 코드는 핵심 쿠버네티스 코드 베이스의 일부로 제공된다. 인-트리 볼륨 플러그인 배포는 추가 스크립트를 설치하거나 별도의 컨테이너화된 플러그인 컴포넌트를 배포할 필요가 없다. 이러한 플러그인들은 볼륨 프로비저닝/디-프로비저닝, 스토리지 백엔드 볼륨 크기 조정, 쿠버네티스 노드에 볼륨 연결/분리, 파드의 개별 컨테이너에 볼륨 마운트/분리를 처리할 수 있다. 다음의 인-트리 플러그인은 윈도우 노드를 지원한다.
+
+* [awsElasticBlockStore](/ko/docs/concepts/storage/volumes/#awselasticblockstore)
+* [azureDisk](/ko/docs/concepts/storage/volumes/#azuredisk)
+* [azureFile](/ko/docs/concepts/storage/volumes/#azurefile)
+* [gcePersistentDisk](/ko/docs/concepts/storage/volumes/#gcepersistentdisk)
+* [vsphereVolume](/ko/docs/concepts/storage/volumes/#vspherevolume)
+
+##### FlexVolume 플러그인
+[FlexVolume](/ko/docs/concepts/storage/volumes/#flexVolume) 플러그인과 관련된 코드는 아웃-오브-트리(out-of-tree) 스크립트 또는 호스트에 직접 배포해야 하는 바이너리로 제공된다. FlexVolume 플러그인은 쿠버네티스 노드에 볼륨 연결/분리 및 파드의 개별 컨테이너에 볼륨 마운트/분리를 처리한다. FlexVolume 플러그인과 관련된 퍼시스턴트 볼륨의 프로비저닝/디-프로비저닝은 일반적으로 FlexVolume 플러그인과는 별도의 외부 프로비저너를 통해 처리될 수 있다. 호스트에서 powershell 스크립트로 배포된 다음의 FlexVolume [플러그인](https://github.com/Microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows)은 윈도우 노드를 지원한다.
+
+* [SMB](https://github.com/microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows/plugins/microsoft.com~smb.cmd)
+* [iSCSI](https://github.com/microsoft/K8s-Storage-Plugins/tree/master/flexvolume/windows/plugins/microsoft.com~iscsi.cmd)
+
+##### CSI 플러그인
+
+{{< feature-state for_k8s_version="v1.16" state="alpha" >}}
+
+{{< glossary_tooltip text="CSI" term_id="csi" >}} 플러그인과 관련된 코드는 일반적으로 컨테이너 이미지로 배포되고 데몬셋(DaemonSets) 및 스테이트풀셋(StatefulSets)과 같은 표준 쿠버네티스 구성을 사용하여 배포되는 아웃-오브-트리 스크립트 및 바이너리로 제공된다. CSI 플러그인은 쿠버네티스에서 볼륨 프로비저닝/디-프로비저닝, 볼륨 크기 조정, 쿠버네티스 노드에 볼륨 연결/분리, 파드의 개별 컨테이너에 볼륨 마운트/분리, 스냅샷 및 복제를 사용하여 퍼시스턴트 데이터 백업/복원과 같은 다양한 볼륨 관리 작업을 처리한다. CSI 플러그인은 일반적으로 (각 노드에서 데몬셋으로 실행되는) 노드 플러그인과 컨트롤러 플러그인으로 구성된다.
+
+CSI 노드 플러그인(특히 블록 디바이스 또는 공유 파일시스템으로 노출된 퍼시스턴트 볼륨과 관련된 플러그인)은 디스크 장치 스캔, 파일 시스템 마운트 등과 같은 다양한 특권이 필요한(privileged) 작업을 수행해야 한다. 이러한 작업은 호스트 운영 체제마다 다르다. 리눅스 워커 노드의 경우 컨테이너화된 CSI 노드 플러그인은 일반적으로 특권을 가진 컨테이너로 배포된다. 윈도우 워커 노드의 경우 컨테이너화된 CSI 노드 플러그인에 대한 특권이 필요한 작업은 커뮤니티에서 관리되고, 각 윈도우 노드에 사전 설치되어야 하는 독립형(stand-alone) 바이너리인 [csi-proxy](https://github.com/kubernetes-csi/csi-proxy)를 사용하여 지원된다. 자세한 내용은 배포하려는 CSI 플러그인의 배포 가이드를 참조한다.
+
+#### 네트워킹
+
+윈도우 컨테이너용 네트워킹은 [CNI 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)을 통해 노출된다. 윈도우 컨테이너는 네트워킹과 관련하여 가상 머신과 유사하게 작동한다. 각 컨테이너에는 Hyper-V 가상 스위치(vSwitch)에 연결된 가상 네트워크 어댑터(vNIC)가 있다. 호스트 네트워킹 서비스(HNS)와 호스트 컴퓨팅 서비스(HCS)는 함께 작동하여 컨테이너를 만들고 컨테이너 vNIC을 네트워크에 연결한다. HCS는 컨테이너 관리를 담당하는 반면 HNS는 다음과 같은 네트워킹 리소스 관리를 담당한다.
+
+* 가상 네트워크(vSwitch 생성 포함)
+* 엔드포인트 / vNIC
+* 네임스페이스
+* 정책(패킷 캡슐화, 로드 밸런싱 규칙, ACL, NAT 규칙 등)
+
+다음의 서비스 사양 유형이 지원된다.
+
+* NodePort
+* ClusterIP
+* LoadBalancer
+* ExternalName
+
+##### 네트워크 모드
+윈도우는 L2bridge, L2tunnel, Overlay, Transparent 및 NAT의 다섯 가지 네트워킹 드라이버/모드를 지원한다. 윈도우와 리눅스 워커 노드가 있는 이기종 클러스터에서는 윈도우와 리눅스 모두에서 호환되는 네트워킹 솔루션을 선택해야 한다. 윈도우에서 다음과 같은 out-of-tree 플러그인이 지원되며 각 CNI 사용 시 권장 사항이 있다.
+
+| 네트워크 드라이버 | 설명 | 컨테이너 패킷 수정 | 네트워크 플러그인 | 네트워크 플러그인 특성 |
+| -------------- | ----------- | ------------------------------ | --------------- | ------------------------------ |
+| L2bridge | 컨테이너는 외부 vSwitch에 연결된다. 컨테이너는 언더레이 네트워크에 연결된다. 하지만 인그레스/이그레스시에 재작성되기 때문에 물리적 네트워크가 컨테이너 MAC을 학습할 필요가 없다. | MAC은 호스트 MAC에 다시 쓰여지고, IP는 HNS OutboundNAT 정책을 사용하여 호스트 IP에 다시 쓰여질 수 있다. | [win-bridge](https://github.com/containernetworking/plugins/tree/master/plugins/main/windows/win-bridge), [Azure-CNI](https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md), Flannel 호스트 게이트웨이는 win-bridge를 사용한다. | win-bridge는 L2bridge 네트워크 모드를 사용하고, 컨테이너를 호스트의 언더레이에 연결하여 최상의 성능을 제공한다. 노드 간 연결을 위해 사용자 정의 경로(user-defined routes, UDR)가 필요하다. |
+| L2Tunnel | 이것은 l2bridge의 특별한 케이스이지만 Azure에서만 사용된다. 모든 패킷은 SDN 정책이 적용되는 가상화 호스트로 전송된다. | MAC 재작성되고, 언더레이 네트워크 상에서 IP가 보인다. | [Azure-CNI](https://github.com/Azure/azure-container-networking/blob/master/docs/cni.md) | Azure-CNI를 사용하면 컨테이너를 Azure vNET과 통합할 수 있으며, [Azure Virtual Network에서 제공하는](https://azure.microsoft.com/ko-kr/services/virtual-network/) 기능 집합을 활용할 수 있다. 예를 들어 Azure 서비스에 안전하게 연결하거나 Azure NSG를 사용한다. [azure-cni 예제](https://docs.microsoft.com/ko-kr/azure/aks/concepts-network#azure-cni-advanced-networking)를 참고한다. |
+| 오버레이(쿠버네티스에서 윈도우용 오버레이 네트워킹은 *알파* 단계에 있음) | 컨테이너에는 외부 vSwitch에 연결된 vNIC이 제공된다. 각 오버레이 네트워크는 사용자 지정 IP 접두사로 정의된 자체 IP 서브넷을 가져온다. 오버레이 네트워크 드라이버는 VXLAN 캡슐화를 사용한다. | 외부 헤더로 캡슐화된다. | [Win-overlay](https://github.com/containernetworking/plugins/tree/master/plugins/main/windows/win-overlay), Flannel VXLAN(win-overlay 사용) | win-overlay는 가상 컨테이너 네트워크를 호스트의 언더레이에서 격리하려는 경우(예: 보안 상의 이유로) 사용해야 한다. 데이터 센터의 IP에 제한이 있는 경우, (다른 VNID 태그가 있는) 다른 오버레이 네트워크에 IP를 재사용할 수 있다. 이 옵션을 사용하려면 윈도우 서버 2019에서 [KB4489899](https://support.microsoft.com/help/4489899)가 필요하다. |
+| Transparent([ovn-kubernetes](https://github.com/openvswitch/ovn-kubernetes)의 특수한 유스케이스) | 외부 vSwitch가 필요하다. 컨테이너는 논리적 네트워크(논리적 스위치 및 라우터)를 통해 파드 내 통신을 가능하게 하는 외부 vSwitch에 연결된다. | 패킷은 [GENEVE](https://datatracker.ietf.org/doc/draft-gross-geneve/) 또는 [STT](https://datatracker.ietf.org/doc/draft-davie-stt)를 통해 캡슐화되는데, 동일한 호스트에 있지 않은 파드에 도달하기 위한 터널링을 한다. <br/> 패킷은 ovn 네트워크 컨트롤러에서 제공하는 터널 메타데이터 정보를 통해 전달되거나 삭제된다. <br/> NAT는 north-south 통신(데이터 센터와 클라이언트, 네트워크 상의 데이터 센터 외부와의 통신)을 위해 수행된다. | [ovn-kubernetes](https://github.com/openvswitch/ovn-kubernetes) | [ansible을 통해 배포](https://github.com/openvswitch/ovn-kubernetes/tree/master/contrib)한다. 분산 ACL은 쿠버네티스 정책을 통해 적용할 수 있다. IPAM을 지원한다. kube-proxy 없이 로드 밸런싱을 수행할 수 있다. NAT를 수행할 때 iptables/netsh를 사용하지 않고 수행된다. |
+| NAT(*쿠버네티스에서 사용되지 않음*) | 컨테이너에는 내부 vSwitch에 연결된 vNIC이 제공된다. DNS/DHCP는 [WinNAT](https://blogs.technet.microsoft.com/virtualization/2016/05/25/windows-nat-winnat-capabilities-and-limitations/)라는 내부 컴포넌트를 사용하여 제공된다. | MAC 및 IP는 호스트 MAC/IP에 다시 작성된다. | [nat](https://github.com/Microsoft/windows-container-networking/tree/master/plugins/nat) | 완전성을 위해 여기에 포함되었다. |
+
+위에서 설명한대로 [플라넬(Flannel)](https://github.com/coreos/flannel) CNI [메타 플러그인](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel)은 [VXLAN 네트워크 백엔드](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan)(**alpha 지원**, win-overlay에 위임) 및 [host-gateway network backend](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#host-gw) (안정적인 지원, win-bridge에 위임)를 통해 [윈도우](https://github.com/containernetworking/plugins/tree/master/plugins/meta/flannel#windows-support-experimental)에서도 지원된다. 이 플러그인은 자동 노드 서브넷 임대 할당과 HNS 네트워크 생성을 위해 윈도우 (Flanneld)에서 Flannel 데몬과 함께 작동하도록 참조 CNI 플러그인 (win-overlay, win-bridge) 중 하나에 대한 위임을 지원한다. 이 플러그인은 자체 구성 파일 (cni.conf)을 읽고, 이를 FlannelD 생성하는 subnet.env 파일의 환경 변수와 함께 집계한다. 이후 네트워크 연결을 위한 참조 CNI 플러그인 중 하나에 위임하고 노드 할당 서브넷을 포함하는 올바른 구성을 IPAM 플러그인 (예: 호스트-로컬)으로 보낸다.
+
+노드, 파드, 서비스 오브젝트의 경우 TCP/UDP 트래픽에 대해 다음 네트워크 흐름이 지원된다.
+
+* 파드 -> 파드(IP)
+* 파드 -> 파드(Name)
+* 파드 -> 서비스(Cluster IP)
+* 파드 -> 서비스(PQDN, 단 "."이 없는 경우에만)
+* 파드 -> 서비스(FQDN)
+* 파드 -> External(IP)
+* 파드 -> External(DNS)
+* 노드 -> 파드
+* 파드 -> 노드
+
+##### IP 주소 관리(IPAM) {#ipam}
+윈도우에서는 다음 IPAM 옵션이 지원된다.
+
+* [호스트-로컬](https://github.com/containernetworking/plugins/tree/master/plugins/ipam/host-local)
+* HNS IPAM(Inbox 플랫폼 IPAM, 이것은 IPAM이 설정되지 않은 경우 폴백(fallback)이다) 
+* [Azure-vnet-ipam](https://github.com/Azure/azure-container-networking/blob/master/docs/ipam.md)(azure-cni 전용)
+
+##### 로드 밸런싱과 서비스
+
+윈도우에서는 다음 설정을 사용하여 서비스 및 로드 밸런싱 동작을 구성할 수 있다.
+
+{{< table caption="윈도우 서비스 구성" >}}
+| 기능 | 설명 | 지원되는 쿠버네티스 버전 | 지원되는 윈도우 OS 빌드 | 활성화하는 방법 |
+| ------- | ----------- | ----------------------------- | -------------------------- | ------------- |
+| 세션 어피니티 | 특정 클라이언트의 연결이 매번 동일한 파드로 전달되도록 한다. | v1.19 이상 | [윈도우 서버 vNext Insider Preview Build 19551](https://blogs.windows.com/windowsexperience/2020/01/28/announcing-windows-server-vnext-insider-preview-build-19551/) 이상 | `service.spec.sessionAffinity`를 "ClientIP"로 설정 |
+| 직접 서버 반환 | IP 주소 수정 및 LBNAT가 컨테이너 vSwitch 포트에서 직접 발생하는 로드 밸런싱 모드. 서비스 트래픽은 소스 IP가 원래 파드 IP로 설정된 상태로 도착한다. 낮은 지연 시간과 확장성을 약속한다. | v1.15 이상 | 윈도우 서버, 버전 2004 | kube-proxy에서 다음 플래그를 설정한다. `--feature-gates="WinDSR=true" --enable-dsr=true` |
+| 대상 보존(Preserve-Destination) | 서비스 트래픽의 DNAT를 스킵하여, 백엔드 파드에 도달하는 패킷에서 대상 서비스의 가상 IP를 보존한다. 이 설정은 또한 수신 패킷의 클라이언트 IP가 보존되도록 한다. | v1.15 이상 | 윈도우 서버, 버전 1903 (이상) | 서비스 어느테이션에서 `"preserve-destination": "true"`를 설정하고 kube-proxy에서 DSR 플래그를 활성화한다. |
+| IPv4/IPv6 이중 스택 네트워킹 | 클러스터 내/외부 기본 IPv4-to-IPv4 통신과 함께 IPv6-to-IPv6 통신 | v1.19 이상 | 윈도우 서버 vNext Insider Preview Build 19603(또는 그 이상) | [IPv4/IPv6 이중 스택](#ipv4ipv6-이중-스택)을 참고한다. |
+{{< /table >}}
+
+#### IPv4/IPv6 이중 스택
+`IPv6DualStack` [기능 게이트](https://kubernetes.io/ko/docs/reference/command-line-tools-reference/feature-gates/)를 사용하여 `l2bridge` 네트워크에 IPv4/IPv6 이중 스택 네트워킹을 활성화할 수 있다. 자세한 내용은 [IPv4/IPv6 이중 스택 활성화](/ko/docs/concepts/services-networking/dual-stack/#ipv4-ipv6-이중-스택-활성화)을 참조한다.
+
+{{< note >}}
+윈도우에서 쿠버네티스와 함께 IPv6를 사용하려면 윈도우 서버 vNext Insider Preview Build 19603 이상이 필요하다.
+{{< /note >}}
+
+{{< note >}}
+윈도우의 오버레이(VXLAN) 네트워크는 현재 이중 스택 네트워킹을 지원하지 않는다.
+{{< /note >}}
+
+### 제한
+
+#### 컨트롤 플레인
+
+윈도우는 쿠버네티스 아키텍처 및 컴포넌트 매트릭스에서 워커 노드로만 지원된다. 즉, 쿠버네티스 클러스터에는 항상 리눅스 마스터 노드가 반드시 포함되어야 하고, 0개 이상의 리눅스 워커 노드 및 0개 이상의 윈도우 워커 노드가 포함된다.
+
+#### 컴퓨트
+
+##### 리소스 관리 및 프로세스 격리
+
+ 리눅스 cgroup은 리눅스에서 리소스 제어를 위한 파드 경계로 사용된다. 컨테이너는 네트워크, 프로세스 및 파일시스템 격리를 위해 해당 경계 내에 생성된다. cgroups API는 cpu/io/memory 통계를 수집하는 데 사용할 수 있다. 반대로 윈도우는 시스템 네임스페이스 필터가 있는 컨테이너별로 잡(Job) 오브젝트를 사용하여 컨테이너의 모든 프로세스를 포함하고 호스트와의 논리적 격리를 제공한다. 네임스페이스 필터링 없이 윈도우 컨테이너를 실행할 수 있는 방법은 없다. 즉, 시스템 권한은 호스트 컨텍스트에서 삽입 될(assert) 수 없으므로 권한이 있는(privileged) 컨테이너는 윈도우에서 사용할 수 없다. 보안 계정 매니져(Security Account Manager, SAM)가 분리되어 있으므로 컨테이너는 호스트의 ID를 가정할 수 없다.
+
+##### 운영 체제 제한
+
+윈도우에는 호스트 OS 버전이 컨테이너 베이스 이미지 OS 버전과 일치해야 하는 엄격한 호환성 규칙이 있다. 윈도우 서버 2019의 컨테이너 운영 체제가 있는 윈도우 컨테이너만 지원된다. 윈도우 컨테이너 이미지 버전의 일부 이전 버전과의 호환성을 가능하게 하는 컨테이너의 Hyper-V 격리는 향후 릴리스로 계획되어 있다.
+
+##### 기능 제한
+
+* TerminationGracePeriod: 구현되지 않음
+* 단일 파일 매핑: CRI-ContainerD로 구현 예정
+* 종료 메시지: CRI-ContainerD로 구현 예정
+* 특권을 가진(Privileged) 컨테이너: 현재 윈도우 컨테이너에서 지원되지 않음
+* HugePages: 현재 윈도우 컨테이너에서 지원되지 않음
+* 기존 노드 문제 감지기는 리눅스 전용이며 특권을 가진 컨테이너가 필요하다. 윈도우에서 특권을 가진 컨테이너를 지원하지 않기 때문에 일반적으로 윈도우에서 이 기능이 사용될 것으로 예상하지 않는다.
+* 공유 네임스페이스의 모든 기능이 지원되는 것은 아니다. (자세한 내용은 API 섹션 참조).
+
+##### 메모리 예약 및 처리
+
+윈도우에는 리눅스처럼 out-of-memory 프로세스 킬러가 없다. 윈도우는 항상 모든 사용자 모드 메모리 할당을 가상으로 처리하며 페이지 파일은 필수이다. 결과적으로 윈도우는 리눅스와 같은 방식으로 메모리 부족 상태에 도달하지 않고, 메모리 부족(OOM)으로 인한 종료 대신 페이지를 디스크로 처리한다. 메모리가 과도하게 프로비저닝되고 모든 실제 메모리가 고갈되면, 페이징으로 인해 성능이 저하될 수 있다.
+
+2단계 프로세스를 통해 적절한 범위 내에서 메모리 사용량을 유지할 수 있다. 먼저, kubelet 파라미터 `--kubelet-reserve` 그리고/또는 `--system-reserve`를 사용하여 노드(컨테이너 외부)의 메모리 사용량을 고려한다. 이렇게 하면 [노드 할당(NodeAllocatable)](/docs/tasks/administer-cluster/reserve-compute-resources/#node-allocatable)이 줄어든다. 워크로드를 배포할 때 컨테이너에 리소스 제한을 사용(limits만 설정하거나 limits이 requests과 같아야 함)한다. 또한 NodeAllocatable에서 빼고 노드가 가득차면 스케줄러가 더 많은 파드를 추가하지 못하도록 한다. 
+
+오버 프로비저닝을 방지하는 모범 사례는 윈도우, 도커 및 쿠버네티스 프로세스를 고려하여 최소 2GB의 시스템 예약 메모리로 kubelet을 구성하는 것이다. 
+
+플래그의 동작은 아래에 설명된대로 다르게 동작한다.
+
+* `--kubelet-reserve`, `--system-reserve`, `--eviction-hard` 플래그는 Node Allocatable 업데이트
+* `--enforce-node-allocable`을 사용한 축출(Eviction)은 구현되지 않았다.
+* `--eviction-hard`와 `--eviction-soft`를 사용한 축출은 구현되지 않았다.
+* MemoryPressure 조건은 구현되지 않았다.
+* kubelet이 취한 OOM 축출 조치가 없다.
+* 윈도우 노드에서 실행되는 Kubelet에는 메모리 제한이 없다. `--kubelet-reserve`와 `--system-reserve`는 호스트에서 실행되는 kubelet 또는 프로세스에 제한을 설정하지 않는다. 이는 호스트의 kubelet 또는 프로세스가 node-allocatable 및 스케줄러 외부에서 메모리 리소스 부족을 유발할 수 있음을 의미한다.
+
+#### 스토리지
+
+윈도우에는 컨테이너 계층을 마운트하고 NTFS를 기반으로 하는 복제 파일시스템을 만드는 레이어드(layered) 파일시스템 드라이버가 있다. 컨테이너의 모든 파일 경로는 해당 컨테이너의 컨텍스트 내에서만 확인된다.
+
+* 볼륨 마운트는 개별 파일이 아닌 컨테이너의 디렉터리만 대상으로 할 수 있다.
+* 볼륨 마운트는 파일이나 디렉터리를 호스트 파일시스템으로 다시 투영할 수 없다.
+* 읽기 전용 파일시스템은 윈도우 레지스트리 및 SAM 데이터베이스에 항상 쓰기 접근이 필요하기 때문에 지원되지 않는다. 그러나 읽기 전용 볼륨은 지원된다.
+* 볼륨 사용자 마스크(user-masks) 및 권한은 사용할 수 없다. SAM은 호스트와 컨테이너 간에 공유되지 않기 때문에 이들 간에 매핑이 없다. 모든 권한은 컨테이너 컨텍스트 내에서 해결된다.
+
+결과적으로, 다음 스토리지 기능은 윈도우 노드에서 지원되지 않는다.
+
+* 볼륨 하위 경로(subpath) 마운트. 전체 볼륨만 윈도우 컨테이너에 마운트할 수 있다.
+* 시크릿에 대한 하위 경로 볼륨 마운트
+* 호스트 마운트 프로젝션
+* DefaultMode(UID/GID 종속성에 기인함)
+* 읽기 전용 루트 파일시스템. 매핑된 볼륨은 여전히 ​​읽기 전용을 지원한다.
+* 블록 디바이스 매핑
+* 저장 매체로서의 메모리
+* uui/guid, 사용자별 리눅스 파일시스템 권한과 같은 파일시스템 기능
+* NFS 기반 스토리지/볼륨 지원
+* 마운트된 볼륨 확장(resizefs)
+
+#### 네트워킹
+
+윈도우 컨테이너 네트워킹은 리눅스 네트워킹과 몇 가지 중요한 면에서 다르다. [윈도우 컨테이너 네트워킹에 대한 Microsoft 문서](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/container-networking/architecture)에는 추가 세부 정보와 배경이 포함되어 있다.
+
+윈도우 호스트 네트워킹 서비스와 가상 스위치는 네임스페이스를 구현하고 파드 또는 컨테이너에 필요한 가상 NIC을 만들 수 있다. 그러나 DNS, 라우트, 메트릭과 같은 많은 구성은 리눅스에서와 같이 /etc/... 파일이 아닌 윈도우 레지스트리 데이터베이스에 저장된다. 컨테이너의 윈도우 레지스트리는 호스트 레지스트리와 별개이므로 호스트에서 컨테이너로 /etc/resolv.conf를 매핑하는 것과 같은 개념은 리눅스에서와 동일한 효과를 갖지 않는다. 해당 컨테이너의 컨텍스트에서 실행되는 윈도우 API를 사용하여 구성해야 한다. 따라서 CNI 구현에서는 파일 매핑에 의존하는 대신 HNS를 호출하여 네트워크 세부 정보를 파드 또는 컨테이너로 전달해야 한다.
+
+다음 네트워킹 기능은 윈도우 노드에서 지원되지 않는다.
+
+* 윈도우 파드에서는 호스트 네트워킹 모드를 사용할 수 없다.
+* 노드 자체에서 로컬 NodePort 접근은 실패한다. (다른 노드 또는 외부 클라이언트에서 작동)
+* 노드에서 서비스 VIP에 접근하는 것은 향후 윈도우 서버 릴리스에서 사용할 수 있다.
+* kube-proxy의 오버레이 네트워킹 지원은 알파 릴리스이다. 또한 윈도우 서버 2019에 [KB4482887](https://support.microsoft.com/ko-kr/help/4482887/windows-10-update-kb4482887)을 설치해야 한다.
+* 로컬 트래픽 정책 및 DSR 모드
+* l2bridge, l2tunnel 또는 오버레이 네트워크에 연결된 윈도우 컨테이너는 IPv6 스택을 통한 통신을 지원하지 않는다. 이러한 네트워크 드라이버가 IPv6 주소를 사용하고 kubelet, kube-proxy 및 CNI 플러그인에서 후속 쿠버네티스 작업을 사용할 수 있도록 하는데 필요한 뛰어난 윈도우 플랫폼 작업이 있다.
+* win-overlay, win-bridge, Azure-CNI 플러그인을 통해 ICMP 프로토콜을 사용하는 아웃바운드 통신. 특히, 윈도우 데이터 플레인([VFP](https://www.microsoft.com/en-us/research/project/azure-virtual-filtering-platform/))은 ICMP 패킷 치환을 지원하지 않는다. 이것은 다음을 의미한다.
+  * 동일한 네트워크(예: ping을 통한 파드 간 통신) 내의 목적지로 전달되는 ICMP 패킷은 예상대로 제한 없이 작동한다.
+  * TCP/UDP 패킷은 예상대로 제한 없이 작동한다.
+  * 원격 네트워크를 통과하도록 지정된 ICMP 패킷(예: ping을 통한 파드에서 외부 인터넷으로의 통신)은 치환될 수 없으므로 소스로 다시 라우팅되지 않는다.
+  * TCP/UDP 패킷은 여전히 ​​치환될 수 있기 때문에 `ping <destination>`을 `curl <destination>`으로 대체하여 외부와의 연결을 디버깅할 수 있다.
+
+해당 기능은 쿠버네티스 v1.15에 추가되었다.
+
+* `kubectl port-forward`
+
+##### CNI 플러그인
+
+* 윈도우 참조 네트워크 플러그인 win-bridge와 win-overlay는 현재 "CHECK" 구현 누락으로 인해 [CNI 사양](https://github.com/containernetworking/cni/blob/master/SPEC.md) v0.4.0을 구현하지 않는다.
+* Flannel VXLAN CNI는 윈도우에서 다음과 같은 제한이 있다.
+
+1. 노드-파드 연결은 설계상 불가능하다. Flannel v0.12.0(또는 그 이상)이 있는 로컬 파드에서만 가능하다.
+2. VNI 4096와 UDP 4789 포트 사용은 제한된다. VNI 제한은 작업 중이며 향후 릴리스(오픈 소스 flannel 변경)에서 구현될 것이다. 이러한 파라미터에 대한 자세한 내용은 공식 [Flannel VXLAN](https://github.com/coreos/flannel/blob/master/Documentation/backends.md#vxlan) 백엔드 문서를 참고한다.
+
+##### DNS {#dns-limitations}
+
+* ClusterFirstWithHostNet은 DNS에서 지원되지 않는다. 윈도우는 '.'이 있는 모든 이름을 FQDN으로 처리하고 PQDN 확인을 건너뛴다.
+* 리눅스에서는 PQDN을 확인하려고 할 때 사용되는 DNS 접미사 목록이 있다. 윈도우에서는 해당 파드의 네임스페이스(예: mydns.svc.cluster.local)와 연결된 DNS 접미사인 DNS 접미사 1개만 있다. 윈도우는 FQDN과 서비스 또는 해당 접미사만으로 확인할 수 있는 이름을 확인할 수 있다. 예를 들어, 디폴트 네임스페이스에서 생성된 파드에는 DNS 접미사 **default.svc.cluster.local**이 있다. 윈도우 파드에서는 **kubernetes.default.svc.cluster.local** 및 **kubernetes**를 모두 확인할 수 있지만 **kubernetes.default** 또는 **kubernetes.default.svc**와 같은 중간 항목은 확인할 수 없다.
+* 윈도우에서는 사용할 수 있는 여러 가지의 DNS 리졸버(resolver)가 있다. 이들은 약간 다른 동작을 제공하므로, 이름 쿼리 확인을 위해 `Resolve-DNSName` 유틸리티를 사용하는 것이 좋다.
+
+##### IPv6
+윈도우의 쿠버네티스는 단일 스택 "IPv6 전용" 네트워킹을 지원하지 않는다. 그러나 단일 제품군 서비스를 사용하는 파드와 노드에 대한 이중 스택 IPv4/IPv6 네트워킹이 지원된다. 자세한 내용은 [IPv4/IPv6 이중 스택 네트워킹](#ipv4ipv6-이중-스택)을 참고한다.
+
+
+##### 세션 어피니티(affinity)
+`service.spec.sessionAffinityConfig.clientIP.timeoutSeconds`를 사용하는 윈도우 서비스의 최대 세션 고정(sticky) 시간 설정은 지원되지 않는다.
+
+##### 보안
+
+시크릿(Secret)은 노드의 볼륨(리눅스의 tmpfs/in-memory와 비교)에 일반 텍스트로 작성된다. 이는 고객이 두 가지 작업을 수행해야 함을 의미한다.
+
+1. 파일 ACL을 사용하여 시크릿 파일 위치를 보호한다.
+2. [BitLocker](https://docs.microsoft.com/ko-kr/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server)를 사용한 볼륨-레벨 암호화를 사용한다.
+
+[RunAsUser](/ko/docs/concepts/policy/pod-security-policy/#사용자-및-그룹)는 현재 윈도우에서 지원되지 않는다. 해결 방법(workaround)은 컨테이너를 패키징하기 전에 로컬 계정을 만드는 것이다. RunAsUsername 기능은 향후 릴리스에 추가될 수 있다.
+
+SELinux, AppArmor, Seccomp, 기능(POSIX 기능)과 같은 리눅스 특유의 파드 시큐리티 컨텍스트 권한은 지원하지 않는다.
+
+또한 이미 언급했듯이 특권을 가진 컨테이너는 윈도우에서 지원되지 않는다.
+
+#### API
+
+대부분의 Kubernetes API가 윈도우에서 작동하는 방식은 차이가 없다. 중요한 차이점은 OS와 컨테이너 런타임의 차이로 귀결된다. 특정 상황에서 파드 또는 컨테이너와 같은 워크로드 API의 일부 속성은 리눅스에서 구현되고 윈도우에서 실행되지 않는다는 가정 하에 설계되었다.
+
+높은 수준에서 이러한 OS 개념은 다르다.
+
+* ID - 리눅스는 정수형으로 표시되는 userID(UID) 및 groupID(GID)를 사용한다. 사용자와 그룹 이름은 정식 이름이 아니다. UID+GID에 대한 `/etc/groups` 또는 `/etc/passwd`의 별칭일 뿐이다. 윈도우는 윈도우 보안 계정 관리자(Security Account Manager, SAM) 데이터베이스에 저장된 더 큰 이진 보안 식별자(SID)를 사용한다. 이 데이터베이스는 호스트와 컨테이너 간에 또는 컨테이너들 간에 공유되지 않는다.
+* 파일 퍼미션 - 윈도우는 권한 및 UUID+GID의 비트 마스크(bitmask) 대신 SID를 기반으로 하는 접근 제어 목록을 사용한다.
+* 파일 경로 - 윈도우의 규칙은 `/` 대신 `\`를 사용하는 것이다. Go IO 라이브러리는 일반적으로 두 가지를 모두 허용하고 작동하도록 하지만, 컨테이너 내부에서 해석되는 경로 또는 커맨드 라인을 설정할 때 `\`가 필요할 수 있다.
+* 신호(Signals) - 윈도우 대화형(interactive) 앱은 종료를 다르게 처리하며, 다음 중 하나 이상을 구현할 수 있다.
+  * UI 스레드는 WM_CLOSE를 포함하여 잘 정의된(well-defined) 메시지를 처리한다.
+  * 콘솔 앱은 컨트롤 핸들러(Control Handler)를 사용하여 ctrl-c 또는 ctrl-break를 처리한다.
+  * 서비스는 SERVICE_CONTROL_STOP 제어 코드를 수용할 수 있는 Service Control Handler 함수를 등록한다.
+
+종료 코드는 0일 때 성공, 0이 아닌 경우 실패인 동일한 규칙을 따른다. 특정 오류 코드는 윈도우와 리눅스에서 다를 수 있다. 그러나 쿠버네티스 컴포넌트(kubelet, kube-proxy)에서 전달된 종료 코드는 변경되지 않는다.
+
+##### V1.Container
+
+* V1.Container.ResourceRequirements.limits.cpu 및 V1.Container.ResourceRequirements.limits.memory - 윈도우는 CPU 할당에 하드 리밋(hard limit)을 사용하지 않는다. 대신 공유 시스템이 사용된다. 밀리코어를 기반으로 하는 기존 필드는 윈도우 스케줄러가 뒤따르는 상대적인 공유로 스케일된다. [참고: kuberuntime/helpers_windows.go](https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/kuberuntime/helpers_windows.go), [참고: Microsoft 문서 내 리소스 제어](https://docs.microsoft.com/ko-kr/virtualization/windowscontainers/manage-containers/resource-controls)
+  * Huge page는 윈도우 컨테이너 런타임에서 구현되지 않으며, 사용할 수 없다. 컨테이너에 대해 구성할 수 없는 [사용자 권한(privilege) 어설트](https://docs.microsoft.com/en-us/windows/desktop/Memory/large-page-support)가 필요하다.
+* V1.Container.ResourceRequirements.requests.cpu 및 V1.Container.ResourceRequirements.requests.memory - 노드의 사용 가능한 리소스에서 요청(requests)을 빼서, 노드에 대한 오버 프로비저닝을 방지하는데 사용할 수 있다. 그러나 오버 프로비저닝된 노드에서 리소스를 보장하는 데는 사용할 수 없다. 운영자가 오버 프로비저닝을 완전히 피하려는 경우 모범 사례로 모든 컨테이너에 적용해야 한다.
+* V1.Container.SecurityContext.allowPrivilegeEscalation - 윈도우에서는 불가능하며, 어떤 기능도 연결되지 않는다.
+* V1.Container.SecurityContext.Capabilities - POSIX 기능은 윈도우에서 구현되지 않는다.
+* V1.Container.SecurityContext.privileged - 윈도우는 특권을 가진 컨테이너를 지원하지 않는다.
+* V1.Container.SecurityContext.procMount - 윈도우에는 /proc 파일시스템이 없다.
+* V1.Container.SecurityContext.readOnlyRootFilesystem - 윈도우에서는 불가능하며, 레지스트리 및 시스템 프로세스가 컨테이너 내부에서 실행되려면 쓰기 권한이 필요하다.
+* V1.Container.SecurityContext.runAsGroup - 윈도우에서는 불가능하며, GID 지원이 없다.
+* V1.Container.SecurityContext.runAsNonRoot - 윈도우에는 root 사용자가 없다. 가장 가까운 항목은 노드에 존재하지 않는 아이덴티티(identity)인 ContainerAdministrator이다.
+* V1.Container.SecurityContext.runAsUser - 윈도우에서는 불가능하며, 정수값으로의 UID 지원이 없다.
+* V1.Container.SecurityContext.seLinuxOptions - 윈도우에서는 불가능하며, SELinux가 없다.
+* V1.Container.terminationMessagePath - 윈도우가 단일 파일 매핑을 지원하지 않는다는 점에서 몇 가지 제한이 있다. 기본값은 /dev/termination-log이며, 기본적으로 윈도우에 존재하지 않기 때문에 작동한다.
+
+##### V1.Pod
+
+* V1.Pod.hostIPC, v1.pod.hostpid - 윈도우에서 호스트 네임스페이스 공유가 불가능하다.
+* V1.Pod.hostNetwork - 호스트 네트워크를 공유하기 위한 윈도우 OS 지원이 없다.
+* V1.Pod.dnsPolicy - ClusterFirstWithHostNet - 윈도우에서 호스트 네트워킹이 지원되지 않기 때문에 지원되지 않는다.
+* V1.Pod.podSecurityContext - 아래 V1.PodSecurityContext 내용을 참고한다.
+* V1.Pod.shareProcessNamespace - 이것은 베타 기능이며, 윈도우에서 구현되지 않은 리눅스 네임스페이스에 따라 다르다. 윈도우는 프로세스 네임스페이스 또는 컨테이너의 루트 파일시스템을 공유할 수 없다. 네트워크만 공유할 수 있다.
+* V1.Pod.terminationGracePeriodSeconds - 이것은 윈도우의 도커에서 완전히 구현되지 않았다. [참조](https://github.com/moby/moby/issues/25982)의 내용을 참고한다. 현재 동작은 ENTRYPOINT 프로세스가 CTRL_SHUTDOWN_EVENT로 전송된 다음, 윈도우가 기본적으로 5초를 기다린 후, 마지막으로 정상적인 윈도우 종료 동작을 사용하여 모든 프로세스를 종료하는 것이다. 5초 기본값은 실제로 [컨테이너 내부](https://github.com/moby/moby/issues/25982#issuecomment-426441183) 윈도우 레지스트리에 있으므로 컨테이너를 빌드할 때 재정의 할 수 있다.
+* V1.Pod.volumeDevices - 이것은 베타 기능이며, 윈도우에서 구현되지 않는다. 윈도우는 원시 블록 장치(raw block device)를 파드에 연결할 수 없다.
+* V1.Pod.volumes - EmptyDir, 시크릿, 컨피그맵, HostPath - 모두 작동하며 TestGrid에 테스트가 있다.
+  * V1.emptyDirVolumeSource - 노드 기본 매체는 윈도우의 디스크이다. 윈도우에는 내장 RAM 디스크가 없기 때문에 메모리는 지원되지 않는다.
+* V1.VolumeMount.mountPropagation - 마운트 전파(propagation)는 윈도우에서 지원되지 않는다.
+
+##### V1.PodSecurityContext
+
+PodSecurityContext 필드는 윈도우에서 작동하지 않는다. 참조를 위해 여기에 나열한다.
+
+* V1.PodSecurityContext.SELinuxOptions - SELinux는 윈도우에서 사용할 수 없다.
+* V1.PodSecurityContext.RunAsUser - 윈도우에서는 사용할 수 없는 UID를 제공한다.
+* V1.PodSecurityContext.RunAsGroup - 윈도우에서는 사용할 수 없는 GID를 제공한다.
+* V1.PodSecurityContext.RunAsNonRoot - 윈도우에는 root 사용자가 없다. 가장 가까운 항목은 노드에 존재하지 않는 아이덴티티인 ContainerAdministrator이다.
+* V1.PodSecurityContext.SupplementalGroups - 윈도우에서는 사용할 수 없는 GID를 제공한다.
+* V1.PodSecurityContext.Sysctls - 이것들은 리눅스 sysctl 인터페이스의 일부이다. 윈도우에는 이에 상응하는 것이 없다.
+
+## 도움 받기 및 트러블슈팅 {#troubleshooting}
+
+쿠버네티스 클러스터 트러블슈팅을 위한 기본 도움말은 이 [섹션](/docs/tasks/debug-application-cluster/troubleshooting/)에서 먼저 찾아야 한다. 이 섹션에는 몇 가지 추가 윈도우 관련 트러블슈팅 도움말이 포함되어 있다. 로그는 쿠버네티스에서 트러블슈팅하는데 중요한 요소이다. 다른 기여자로부터 트러블슈팅 지원을 구할 때마다 이를 포함해야 한다. SIG-Windows [로그 수집에 대한 기여 가이드](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs)의 지침을 따른다.
+
+1. start.ps1이 성공적으로 완료되었는지 어떻게 알 수 있는가?
+
+    kubelet, kube-proxy 및 (Flannel을 네트워킹 솔루션으로 선택한 경우) 노드에서 실행 중인 flanneld 호스트 에이전트 프로세스를 확인할 수 있어야 하는데, 별도의 PowerShell 윈도우에서 실행 중인 로그가 표시된다. 또한 윈도우 노드는 쿠버네티스 클러스터에서 "Ready"로 조회되어야 한다.
+
+1. 백그라운드에서 서비스로 실행되도록 쿠버네티스 노드 프로세스를 구성할 수 있는가?
+
+    Kubelet 및 kube-proxy는 이미 기본 윈도우 서비스로 실행되도록 구성되어 있으며, 실패(예: 프로세스 충돌) 시 서비스를 자동으로 다시 시작하여 복원력(resiliency)을 제공한다. 이러한 노드 컴포넌트를 서비스로 구성하기 위한 두 가지 옵션이 있다.
+
+    1. 네이티브 윈도우 서비스
+
+        Kubelet와 kube-proxy는 `sc.exe`를 사용하여 네이티브 윈도우 서비스로 실행될 수 있다.
+
+        ```powershell
+        # 두 개의 개별 명령으로 kubelet 및 kube-proxy에 대한 서비스 생성
+        sc.exe create <컴포넌트_명> binPath= "<바이너리_경로> --service <다른_인자>"
+
+        # 인자에 공백이 포함된 경우 이스케이프 되어야 한다.
+        sc.exe create kubelet binPath= "C:\kubelet.exe --service --hostname-override 'minion' <다른_인자>"
+
+        # 서비스 시작
+        Start-Service kubelet
+        Start-Service kube-proxy
+
+        # 서비스 중지
+        Stop-Service kubelet (-Force)
+        Stop-Service kube-proxy (-Force)
+
+        # 서비스 상태 질의
+        Get-Service kubelet
+        Get-Service kube-proxy
+        ```
+
+    1. nssm.exe 사용
+
+        또한 언제든지 [nssm.exe](https://nssm.cc/)와 같은 대체 서비스 관리자를 사용하여 백그라운드에서 이러한 프로세스(flanneld, kubelet, kube-proxy)를 실행할 수 있다. 이 [샘플 스크립트](https://github.com/Microsoft/SDN/tree/master/Kubernetes/flannel/register-svc.ps1)를 사용하여 백그라운드에서 윈도우 서비스로 실행하기 위해 nssm.exe를 활용하여 kubelet, kube-proxy, flanneld.exe를 등록할 수 있다.
+
+        ```powershell
+        register-svc.ps1 -NetworkMode <네트워크 모드> -ManagementIP <윈도우 노드 IP> -ClusterCIDR <클러스터 서브넷> -KubeDnsServiceIP <Kube-dns 서비스 IP> -LogDir <로그 위치 디렉터리>
+
+        # NetworkMode      = 네트워크 모드 l2bridge(flannel host-gw, 기본값이기도 함) 또는 네트워크 솔루션으로 선택한 오버레이(flannel vxlan)
+        # ManagementIP     = 윈도우 노드에 할당된 IP 주소. ipconfig를 사용하여 찾을 수 있다.
+        # ClusterCIDR      = 클러스터 서브넷 범위. (기본값 10.244.0.0/16)
+        # KubeDnsServiceIP = 쿠버네티스 DNS 서비스 IP (기본값 10.96.0.10)
+        # LogDir           = kubelet 및 kube-proxy 로그가 각각의 출력 파일로 리다이렉션되는 디렉터리(기본값 C:\k)
+        ```
+
+        위에 언급된 스크립트가 적합하지 않은 경우, 다음 예제를 사용하여 nssm.exe를 수동으로 구성할 수 있다.
+        ```powershell
+        # flanneld.exe 등록
+        nssm install flanneld C:\flannel\flanneld.exe
+        nssm set flanneld AppParameters --kubeconfig-file=c:\k\config --iface=<ManagementIP> --ip-masq=1 --kube-subnet-mgr=1
+        nssm set flanneld AppEnvironmentExtra NODE_NAME=<hostname>
+        nssm set flanneld AppDirectory C:\flannel
+        nssm start flanneld
+
+        # kubelet.exe 등록
+        # Microsoft는 mcr.microsoft.com/k8s/core/pause:1.2.0에서 pause 인프라 컨테이너를 릴리스했다.
+        nssm install kubelet C:\k\kubelet.exe
+        nssm set kubelet AppParameters --hostname-override=<hostname> --v=6 --pod-infra-container-image=mcr.microsoft.com/k8s/core/pause:1.2.0 --resolv-conf="" --allow-privileged=true --enable-debugging-handlers --cluster-dns=<DNS-service-IP> --cluster-domain=cluster.local --kubeconfig=c:\k\config --hairpin-mode=promiscuous-bridge --image-pull-progress-deadline=20m --cgroups-per-qos=false  --log-dir=<log directory> --logtostderr=false --enforce-node-allocatable="" --network-plugin=cni --cni-bin-dir=c:\k\cni --cni-conf-dir=c:\k\cni\config
+        nssm set kubelet AppDirectory C:\k
+        nssm start kubelet
+
+        # kube-proxy.exe 등록 (l2bridge / host-gw)
+        nssm install kube-proxy C:\k\kube-proxy.exe
+        nssm set kube-proxy AppDirectory c:\k
+        nssm set kube-proxy AppParameters --v=4 --proxy-mode=kernelspace --hostname-override=<hostname>--kubeconfig=c:\k\config --enable-dsr=false --log-dir=<log directory> --logtostderr=false
+        nssm.exe set kube-proxy AppEnvironmentExtra KUBE_NETWORK=cbr0
+        nssm set kube-proxy DependOnService kubelet
+        nssm start kube-proxy
+
+        # kube-proxy.exe 등록 (overlay / vxlan)
+        nssm install kube-proxy C:\k\kube-proxy.exe
+        nssm set kube-proxy AppDirectory c:\k
+        nssm set kube-proxy AppParameters --v=4 --proxy-mode=kernelspace --feature-gates="WinOverlay=true" --hostname-override=<hostname> --kubeconfig=c:\k\config --network-name=vxlan0 --source-vip=<source-vip> --enable-dsr=false --log-dir=<log directory> --logtostderr=false
+        nssm set kube-proxy DependOnService kubelet
+        nssm start kube-proxy
+        ```
+
+
+        초기 트러블슈팅을 위해 [nssm.exe](https://nssm.cc/)에서 다음 플래그를 사용하여 stdout 및 stderr을 출력 파일로 리다이렉션할 수 있다.
+
+        ```powershell
+        nssm set <Service Name> AppStdout C:\k\mysvc.log
+        nssm set <Service Name> AppStderr C:\k\mysvc.log
+        ```
+
+        자세한 내용은 공식 [nssm 사용](https://nssm.cc/usage) 문서를 참고한다.
+
+1. 내 윈도우 파드에 네트워크 연결이 없다.
+
+    가상 머신을 사용하는 경우, 모든 VM 네트워크 어댑터에서 MAC 스푸핑이 활성화되어 있는지 확인한다.
+
+1. 내 윈도우 파드가 외부 리소스를 ping 할 수 없다.
+
+    윈도우 파드에는 현재 ICMP 프로토콜용으로 프로그래밍된 아웃바운드 규칙이 없다. 그러나 TCP/UDP는 지원된다. 클러스터 외부 리소스에 대한 연결을 시연하려는 경우, `ping <IP>`를 해당 `curl <IP>`명령으로 대체한다.
+
+    여전히 문제가 발생하는 경우, [cni.conf](https://github.com/Microsoft/SDN/blob/master/Kubernetes/flannel/l2bridge/cni/config/cni.conf)의 네트워크 구성에 특별히 추가 확인이 필요하다. 언제든지 이 정적 파일을 편집할 수 있다. 구성 업데이트는 새로 생성된 모든 쿠버네티스 리소스에 적용된다.
+
+    쿠버네티스 네트워킹 요구 사항 중 하나([쿠버네티스 모델](/ko/docs/concepts/cluster-administration/networking/))는 클러스터 통신이 내부적으로 NAT 없이 발생하는 것이다. 이 요구 사항을 준수하기 위해 아웃바운드 NAT가 발생하지 않도록 하는 모든 통신에 대한 [ExceptionList](https://github.com/Microsoft/SDN/blob/master/Kubernetes/flannel/l2bridge/cni/config/cni.conf#L20)가 있다. 그러나 이것은 쿼리하려는 외부 IP를 ExceptionList에서 제외해야 함도 의미한다. 그래야만 윈도우 파드에서 발생하는 트래픽이 제대로 SNAT 되어 외부에서 응답을 받는다. 이와 관련하여 `cni.conf`의 ExceptionList는 다음과 같아야 한다.
+
+    ```conf
+    "ExceptionList": [
+                    "10.244.0.0/16",  # 클러스터 서브넷
+                    "10.96.0.0/12",   # 서비스 서브넷
+                    "10.127.130.0/24" # 관리(호스트) 서브넷
+                ]
+    ```
+
+1. 내 윈도우 노드가 NodePort 서비스에 접근할 수 없다.
+
+    노드 자체에서는 로컬 NodePort 접근이 실패한다. 이것은 알려진 제약사항이다. NodePort 접근은 다른 노드 또는 외부 클라이언트에서는 가능하다.
+
+1. 컨테이너의 vNIC 및 HNS 엔드포인트가 삭제되었다.
+
+    이 문제는 `hostname-override` 파라미터가 [kube-proxy](/docs/reference/command-line-tools-reference/kube-proxy/)에 전달되지 않은 경우 발생할 수 있다. 이를 해결하려면 사용자는 다음과 같이 hostname을 kube-proxy에 전달해야 한다.
+
+    ```powershell
+    C:\k\kube-proxy.exe --hostname-override=$(hostname)
+    ```
+
+1. 플라넬(flannel)을 사용하면 클러스터에 다시 조인(join)한 후 노드에 이슈가 발생한다.
+
+    이전에 삭제된 노드가 클러스터에 다시 조인될 때마다, flannelD는 새 파드 서브넷을 노드에 할당하려고 한다. 사용자는 다음 경로에서 이전 파드 서브넷 구성 파일을 제거해야 한다.
+
+    ```powershell
+    Remove-Item C:\k\SourceVip.json
+    Remove-Item C:\k\SourceVipRequest.json
+    ```
+
+1. `start.ps1`을 시작한 후, flanneld가 "Waiting for the Network to be created"에서 멈춘다.
+
+    이 [조사 중인 이슈](https://github.com/coreos/flannel/issues/1066)에 대한 수많은 보고가 있다. 플란넬 네트워크의 관리 IP가 설정될 때 타이밍 이슈일 가능성이 높다. 해결 방법은 간단히 start.ps1을 다시 시작하거나 다음과 같이 수동으로 다시 시작하는 것이다.
+
+    ```powershell
+    PS C:> [Environment]::SetEnvironmentVariable("NODE_NAME", "<Windows_Worker_Hostname>")
+    PS C:> C:\flannel\flanneld.exe --kubeconfig-file=c:\k\config --iface=<Windows_Worker_Node_IP> --ip-masq=1 --kube-subnet-mgr=1
+    ```
+
+1. `/run/flannel/subnet.env` 누락으로 인해 윈도우 파드를 시작할 수 없다.
+
+    이것은 플라넬이 제대로 실행되지 않았음을 나타낸다. flanneld.exe를 다시 시작하거나 쿠버네티스 마스터의 `/run/flannel/subnet.env`에서 윈도우 워커 노드의 `C:\run\flannel\subnet.env`로 파일을 수동으로 복사할 수 있고, `FLANNEL_SUBNET` 행을 다른 숫자로 수정한다. 예를 들어, 다음은 노드 서브넷 10.244.4.1/24가 필요한 경우이다.
+
+    ```env
+    FLANNEL_NETWORK=10.244.0.0/16
+    FLANNEL_SUBNET=10.244.4.1/24
+    FLANNEL_MTU=1500
+    FLANNEL_IPMASQ=true
+    ```
+
+1. 내 윈도우 노드가 서비스 IP를 사용하여 내 서비스에 접근할 수 없다.
+
+    이는 윈도우에서 현재 네트워킹 스택의 알려진 제약 사항이다. 그러나 윈도우 파드는 서비스 IP에 접근할 수 있다.
+
+1. kubelet을 시작할 때 네트워크 어댑터를 찾을 수 없다.
+
+    윈도우 네트워킹 스택에는 쿠버네티스 네트워킹이 작동하기 위한 가상 어댑터가 필요하다. 다음 명령이 (어드민 셸에서) 결과를 반환하지 않으면, Kubelet이 작동하는데 필요한 필수 구성 요소인 가상 네트워크 생성이 실패한 것이다.
+
+    ```powershell
+    Get-HnsNetwork | ? Name -ieq "cbr0"
+    Get-NetAdapter | ? Name -Like "vEthernet (Ethernet*"
+    ```
+
+    호스트 네트워크 어댑터가 "Ethernet"이 아닌 경우, 종종 start.ps1 스크립트의 [InterfaceName](https://github.com/microsoft/SDN/blob/master/Kubernetes/flannel/start.ps1#L6) 파라미터를 수정하는 것이 좋다. 그렇지 않으면 `start-kubelet.ps1` 스크립트의 출력을 참조하여 가상 네트워크 생성 중에 오류가 있는지 확인한다.
+
+1. 내 파드가 "Container Creating"에서 멈췄거나 계속해서 다시 시작된다.
+
+    pause 이미지가 OS 버전과 호환되는지 확인한다. [지침](https://docs.microsoft.com/en-us/virtualization/windowscontainers/kubernetes/deploying-resources)에서는 OS와 컨테이너가 모두 버전 1803이라고 가정한다. 이후 버전의 윈도우가 있는 경우, Insider 빌드와 같이 그에 따라 이미지를 조정해야 한다. 이미지는 Microsoft의 [도커 리포지터리](https://hub.docker.com/u/microsoft/)를 참조한다. 그럼에도 불구하고, pause 이미지 Dockerfile과 샘플 서비스는 이미지가 :latest로 태그될 것으로 예상한다.
+
+    쿠버네티스 v1.14부터 Microsoft는 `mcr.microsoft.com/k8s/core/pause:1.2.0`에서 pause 인프라 컨테이너를 릴리스한다.
+
+1. DNS 확인(resolution)이 제대로 작동하지 않는다.
+
+    이 [섹션](#dns-limitations)에서 윈도우에 대한 DNS 제한을 확인한다.
+    
+1. `kubectl port-forward`가 "unable to do port forwarding: wincat not found"로 실패한다.
+
+    이는 쿠버네티스 1.15 및 pause 인프라 컨테이너 `mcr.microsoft.com/k8s/core/pause:1.2.0`에서 구현되었다. 해당 버전 또는 최신 버전을 사용해야 한다.
+    자체 pause 인프라 컨테이너를 빌드하려면 [wincat](https://github.com/kubernetes-sigs/sig-windows-tools/tree/master/cmd/wincat)을 포함해야 한다.
+
+1. 내 윈도우 서버 노드가 프록시 뒤에 있기 때문에 내 쿠버네티스 설치가 실패한다.
+
+    프록시 뒤에 있는 경우 다음 PowerShell 환경 변수를 정의해야 한다.
+
+    ```PowerShell
+    [Environment]::SetEnvironmentVariable("HTTP_PROXY", "http://proxy.example.com:80/", [EnvironmentVariableTarget]::Machine)
+    [Environment]::SetEnvironmentVariable("HTTPS_PROXY", "http://proxy.example.com:443/", [EnvironmentVariableTarget]::Machine)
+    ```
+
+1. `pause` 컨테이너란 무엇인가?
+
+    쿠버네티스 파드에서는 컨테이너 엔드포인트를 호스팅하기 위해 먼저 인프라 또는 "pause" 컨테이너가 생성된다. 인프라 및 워커 컨테이너를 포함하여 동일한 파드에 속하는 컨테이너는 공통 네트워크 네임스페이스 및 엔드포인트(동일한 IP 및 포트 공간)를 공유한다. 네트워크 구성을 잃지 않고 워커 컨테이너가 충돌하거나 다시 시작되도록 하려면 pause 컨테이너가 필요하다.
+
+    "pause" (인프라) 이미지는 Microsoft Container Registry(MCR)에서 호스팅된다. `docker pull mcr.microsoft.com/k8s/core/pause:1.2.0`을 사용하여 접근할 수 있다. 자세한 내용은 [DOCKERFILE](https://github.com/kubernetes-sigs/sig-windows-tools/tree/master/cmd/wincat)을 참고한다.
+
+### 추가 조사
+
+이러한 단계로 문제가 해결되지 않으면, 다음을 통해 쿠버네티스의 윈도우 노드에서 윈도우 컨테이너를 실행하는데 도움을 받을 수 있다.
+
+* 스택오버플로우 [윈도우 서버 컨테이너](https://stackoverflow.com/questions/tagged/windows-server-container) 주제
+* 쿠버네티스 공식 포럼 [discuss.kubernetes.io](https://discuss.kubernetes.io/)
+* 쿠버네티스 슬랙 [#SIG-Windows Channel](https://kubernetes.slack.com/messages/sig-windows)
+
+## 이슈 리포팅 및 기능 요청
+
+버그처럼 보이는 부분이 있거나 기능 요청을 하고 싶다면, [GitHub 이슈 트래킹 시스템](https://github.com/kubernetes/kubernetes/issues)을 활용한다. [GitHub](https://github.com/kubernetes/kubernetes/issues/new/choose)에서 이슈를 열고 SIG-Windows에 할당할 수 있다. 먼저 이전에 보고된 이슈 목록을 검색하고 이슈에 대한 경험을 언급하고 추가 로그를 첨부해야 한다. SIG-Windows 슬랙은 티켓을 만들기 전에 초기 지원 및 트러블슈팅 아이디어를 얻을 수 있는 좋은 방법이기도 하다.
+
+버그를 제출하는 경우, 다음과 같이 문제를 재현하는 방법에 대한 자세한 정보를 포함한다.
+
+* 쿠버네티스 버전: kubectl version
+* 환경 세부사항: 클라우드 공급자, OS 배포판, 네트워킹 선택 및 구성, 도커 버전
+* 문제를 재현하기 위한 세부 단계
+* [관련 로그](https://github.com/kubernetes/community/blob/master/sig-windows/CONTRIBUTING.md#gathering-logs)
+* SIG-Windows 회원의 주의를 끌 수 있도록 `/sig windows`로 이슈에 대해 어노테이션을 달아 이슈에 sig/windows 태그를 지정한다.
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+로드맵에는 많은 기능이 있다. 요약된 높은 수준의 목록이 아래에 포함되어 있지만, [로드맵 프로젝트](https://github.com/orgs/kubernetes/projects/8)를 보고 [기여](https://github.com/kubernetes/community/blob/master/sig-windows/)하여 윈도우 지원을 개선하는데 도움이 주는 것이 좋다.
+
+### Hyper-V 격리(isolation)
+
+쿠버네티스에서 윈도우 컨테이너에 대해 다음 유스케이스를 사용하려면 Hyper-V 격리가 필요하다.
+
+* 추가 보안을 위해 파드 간 하이퍼바이저 기반 격리
+* 하위 호환성을 통해 컨테이너를 다시 빌드할 필요 없이 노드에서 최신 윈도우 서버 버전을 실행할 수 있다.
+* 파드에 대한 특정 CPU/NUMA 설정
+* 메모리 격리 및 예약
+
+v1.10의 실험적(experimental) 기능인 기존 Hyper-V 격리 지원은 위에서 언급한 CRI-ContainerD와 런타임클래스(RuntimeClass) 기능을 위해 향후 사용 중단(deprecated)된다. 현재 기능을 사용하고 Hyper-V 격리된 컨테이너를 만들려면, kubelet을 기능 게이트(feature gates) `HyperVContainer=true`로 시작해야 하고 파드에 `experimental.windows.kubernetes.io/isolation-type=hyperv` 어노테이션을 포함해야 한다. 실험 릴리스에서 이 기능은 파드 당 컨테이너 1개로 제한된다.
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: iis
+spec:
+  selector:
+    matchLabels:
+      app: iis
+  replicas: 3
+  template:
+    metadata:
+      labels:
+        app: iis
+      annotations:
+        experimental.windows.kubernetes.io/isolation-type: hyperv
+    spec:
+      containers:
+      - name: iis
+        image: microsoft/iis
+        ports:
+        - containerPort: 80
+```
+
+### kubeadm 및 클러스터 API를 사용한 배포
+
+Kubeadm은 사용자가 쿠버네티스 클러스터를 배포하기 위한 사실상의 표준이 
+되고 있다. kubeadm의 윈도우 노드 지원은 현재 작업 중이지만 
+[여기](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes/)에서 가이드를 사용할 수 있다.
+또한 윈도우 노드가 적절하게 프로비저닝되도록 클러스터 API에 
+투자하고 있다.
+
+### 몇 가지 기타 주요 기능
+* 그룹 관리 서비스 어카운트(Service Accounts)에 대한 베타 지원
+* 더 많은 CNI
+* 더 많은 스토리지 플러그인
+
+
diff --git a/content/ko/docs/setup/production-environment/windows/user-guide-windows-containers.md b/content/ko/docs/setup/production-environment/windows/user-guide-windows-containers.md
index 41001c38df..f129386a62 100644
--- a/content/ko/docs/setup/production-environment/windows/user-guide-windows-containers.md
+++ b/content/ko/docs/setup/production-environment/windows/user-guide-windows-containers.md
@@ -19,7 +19,7 @@ weight: 75
 
 ## 시작하기 전에
 
-* [윈도우 서버에서 운영하는 마스터와 워커 노드](/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes)를 포함한 쿠버네티스 클러스터를 생성한다.
+* [윈도우 서버에서 운영하는 마스터와 워커 노드](/ko/docs/tasks/administer-cluster/kubeadm/adding-windows-nodes)를 포함한 쿠버네티스 클러스터를 생성한다.
 * 쿠버네티스에서 서비스와 워크로드를 생성하고 배포하는 것은 리눅스나 윈도우 컨테이너 모두 비슷한 방식이라는 것이 중요하다. [Kubectl 커맨드](/ko/docs/reference/kubectl/overview/)로 클러스터에 접속하는 것은 동일하다. 아래 단원의 예시는 윈도우 컨테이너를 경험하기 위해 제공한다.
 
 ## 시작하기: 윈도우 컨테이너 배포하기
diff --git a/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md
index fb67628dec..664a049544 100644
--- a/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/ko/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -150,7 +150,7 @@ Kubeconfig 인증 방법은 외부 아이덴티티 프로파이더 또는 x509 
 
 - **이미지 풀(Pull) 시크릿**:
   특정 도커 컨테이너 이미지가 프라이빗한 경우,
-  [풀(Pull) 시크릿](/docs/concepts/configuration/secret/) 자격 증명을 요구한다.
+  [풀(Pull) 시크릿](/ko/docs/concepts/configuration/secret/) 자격 증명을 요구한다.
 
   대시보드는 가능한 모든 시크릿을 드롭다운 리스트로 제공하며, 새로운 시크릿을 생성할 수 있도록 한다.
   시크릿 이름은 예를 들어 `new.image-pull.secret` 과 같이 DNS 도메인 이름 구문으로 따르기로 한다.
diff --git a/content/ko/docs/tasks/administer-cluster/declare-network-policy.md b/content/ko/docs/tasks/administer-cluster/declare-network-policy.md
index 58865f9443..7a7a97576d 100644
--- a/content/ko/docs/tasks/administer-cluster/declare-network-policy.md
+++ b/content/ko/docs/tasks/administer-cluster/declare-network-policy.md
@@ -6,6 +6,7 @@ content_type: task
 <!-- overview -->
 이 문서는 사용자가 쿠버네티스 [네트워크폴리시 API](/ko/docs/concepts/services-networking/network-policies/)를 사용하여 파드(Pod)가 서로 통신하는 방법을 제어하는 네트워크 폴리시를 선언하는데 도움을 준다.
 
+{{% thirdparty-content %}}
 
 ## {{% heading "prerequisites" %}}
 
@@ -20,11 +21,6 @@ content_type: task
 * [로마나(Romana)](/ko/docs/tasks/administer-cluster/network-policy-provider/romana-network-policy/)
 * [위브넷(Weave Net)](/ko/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy/)
 
-{{< note >}}
-위 목록은 추천순이나 선호도순이 아닌, 제품 이름의 알파벳 순으로 정렬되어 있다. 이 예제는 이러한 제공자 중 하나를 사용하는 쿠버네티스 클러스터에 유효하다.
-{{< /note >}}
-
-
 <!-- steps -->
 
 ## `nginx` 디플로이먼트(Deployment)를 생성하고 서비스(Service)를 통해 노출하기
@@ -63,7 +59,7 @@ NAME                        READY         STATUS        RESTARTS   AGE
 pod/nginx-701339712-e0qfq   1/1           Running       0          35s
 ```
 
-## 다른 파드에서 접근하여 서비스 테스트하기 
+## 다른 파드에서 접근하여 서비스 테스트하기
 
 사용자는 다른 파드에서 새 `nginx` 서비스에 접근할 수 있어야 한다. `default` 네임스페이스에 있는 다른 파드에서 `nginx` 서비스에 접근하기 위하여, busybox 컨테이너를 생성한다.
 
@@ -84,11 +80,11 @@ remote file exists
 
 ## `nginx` 서비스에 대해 접근 제한하기
 
-`access: true` 레이블을 가지고 있는 파드만 `nginx` 서비스에 접근할 수 있도록 하기 위하여, 다음과 같은 네트워크폴리시 오브젝트를 생성한다. 
+`access: true` 레이블을 가지고 있는 파드만 `nginx` 서비스에 접근할 수 있도록 하기 위하여, 다음과 같은 네트워크폴리시 오브젝트를 생성한다.
 
 {{< codenew file="service/networking/nginx-policy.yaml" >}}
 
-네트워크폴리시 오브젝트의 이름은 유효한 
+네트워크폴리시 오브젝트의 이름은 유효한
 [DNS 서브도메인 이름](/ko/docs/concepts/overview/working-with-objects/names#dns-subdomain-names)이어야 한다.
 
 {{< note >}}
diff --git a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
index 60d010936e..e18c3e0808 100644
--- a/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
+++ b/content/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade.md
@@ -155,7 +155,7 @@ min-kubernetes-server-version: 1.19
 {{< note >}}
 또한 `kubeadm upgrade` 는 이 노드에서 관리하는 인증서를 자동으로 갱신한다.
 인증서 갱신을 하지 않으려면 `--certificate-renewal=false` 플래그를 사용할 수 있다.
-자세한 내용은 [인증서 관리 가이드](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs)를 참고한다.
+자세한 내용은 [인증서 관리 가이드](/ko/docs/tasks/administer-cluster/kubeadm/kubeadm-certs)를 참고한다.
 {{</ note >}}
 
 {{< note >}}
diff --git a/content/ko/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md b/content/ko/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
new file mode 100644
index 0000000000..4c1679b8a3
--- /dev/null
+++ b/content/ko/docs/tasks/configure-pod-container/configure-persistent-volume-storage.md
@@ -0,0 +1,287 @@
+---
+title: 스토리지로 퍼시스턴트볼륨(PersistentVolume)을 사용하도록 파드 설정하기
+content_type: task
+weight: 60
+---
+
+<!-- overview -->
+
+이 페이지는 스토리지에 대해
+{{< glossary_tooltip text="퍼시스턴트볼륨클레임(PersistentVolumeClaim)" term_id="persistent-volume-claim" >}}을
+사용하도록 파드를 설정하는 방법을 보여준다.
+과정의 요약은 다음과 같다.
+
+1. 클러스터 관리자로서, 물리적 스토리지와 연결되는 퍼시스턴트볼륨을 
+생성한다. 볼륨을 특정 파드와 연결하지 않는다.
+
+1. 그 다음 개발자 / 클러스터 사용자의 역할로서, 적합한 
+퍼시스턴트볼륨에 자동으로 바인딩되는 퍼시스턴트볼륨클레임을 
+생성한다.
+
+1. 스토리지에 대해 위의 퍼시스턴트볼륨클레임을 사용하는 파드를 생성한다.
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+* 사용자는 노드가 단 하나만 있는 쿠버네티스 클러스터가 필요하고,
+{{< glossary_tooltip text="kubectl" term_id="kubectl" >}}
+커맨드라인 툴이 사용자의 클러스터와 통신할 수 있도록 설정되어 있어야 한다. 만약 사용자가 
+아직 단일 노드 클러스터를 가지고 있지 않다면, [Minikube](/ko/docs/setup/learning-environment/minikube/)를 
+사용하여 클러스터 하나를 생성할 수 있다.
+
+* [퍼시스턴트 볼륨](/ko/docs/concepts/storage/persistent-volumes/)의 
+관련 자료에 익숙해지도록 한다.
+
+<!-- steps -->
+
+## 사용자 노드에 index.html 파일 생성하기
+
+사용자 클러스터의 단일 노드에 연결되는 셸을 연다. 셸을 여는 방법은 
+클러스터 설정에 따라 달라진다. 예를 들어 Minikube를 사용하는 경우, 
+`minikube ssh` 명령어를 입력하여 노드로 연결되는 셸을 열 수 있다. 
+
+해당 노드의 셸에서 `/mnt/data` 디렉터리를 생성한다.
+
+```shell
+# 사용자 노드에서 슈퍼유저로 명령을 수행하기 위하여
+# "sudo"를 사용한다고 가정한다
+sudo mkdir /mnt/data
+```
+
+
+`/mnt/data` 디렉터리에서 `index.html` 파일을 생성한다.
+
+```shell
+# 이번에도 사용자 노드에서 슈퍼유저로 명령을 수행하기 위하여
+# "sudo"를 사용한다고 가정한다
+sudo sh -c "echo 'Hello from Kubernetes storage' > /mnt/data/index.html"
+```
+
+{{< note >}}
+사용자 노드에서 `sudo` 이외의 슈퍼유저 접근 툴을 사용하는 경우,
+`sudo` 를 해당 툴의 이름으로 바꾸면, 동일하게 작업을 수행할 수 있다.
+{{< /note >}}
+
+`index.html` 파일이 존재하는지 테스트한다.
+
+```shell
+cat /mnt/data/index.html
+```
+
+결과는 다음과 같다.
+```
+Hello from Kubernetes storage
+```
+
+이제 사용자 노드에서 셸을 종료해도 된다.
+
+## 퍼시스턴트볼륨 생성하기
+
+이 예제에서, 사용자는 *hostPath* 퍼시스턴트볼륨을 생성한다. 쿠버네티스는 단일 노드에서의 
+개발과 테스트를 위해 hostPath를 지원한다. hostPath 퍼시스턴트볼륨은 
+네트워크로 연결된 스토리지를 모방하기 위해, 노드의 파일이나 디렉터리를 사용한다.
+
+운영 클러스터에서, 사용자가 hostPath를 사용하지는 않는다. 대신, 클러스터 관리자는 
+Google Compute Engine 영구 디스크, NFS 공유 또는 Amazone Elastic 
+Block Store 볼륨과 같은 네트워크 자원을 프로비저닝한다. 클러스터 관리자는 
+[스토리지클래스(StorageClasses)](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#storageclass-v1-storage)를 
+사용하여 
+[동적 프로비저닝](https://kubernetes.io/blog/2016/10/dynamic-provisioning-and-storage-in-kubernetes)을 설정할 수도 있다. 
+
+hostPath 퍼시스턴트볼륨의 설정 파일은 아래와 같다.
+
+{{< codenew file="pods/storage/pv-volume.yaml" >}}
+
+설정 파일에 클러스터 노드의 `/mnt/data` 에 볼륨이 있다고
+지정한다. 또한 설정에서 볼륨 크기를 10 기가바이트로 지정하고 단일 노드가
+읽기-쓰기 모드로 볼륨을 마운트할 수 있는 `ReadWriteOnce` 접근 모드를
+지정한다. 여기서는 
+퍼시스턴트볼륨클레임의 [스토리지클래스 이름](/ko/docs/concepts/storage/persistent-volumes/#클래스)을 
+`manual` 로 정의하며, 퍼시스턴트볼륨클레임의 요청을 
+이 퍼시스턴트볼륨에 바인딩하는데 사용한다.
+
+퍼시스턴트볼륨을 생성한다.
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/storage/pv-volume.yaml
+```
+
+퍼시스턴트볼륨에 대한 정보를 조회한다.
+
+```shell
+kubectl get pv task-pv-volume
+```
+
+결과는 퍼시스턴트볼륨의 `STATUS` 가 `Available` 임을 보여준다. 이는 
+아직 퍼시스턴트볼륨클레임이 바인딩되지 않았다는 것을 의미한다.
+
+    NAME             CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS      CLAIM     STORAGECLASS   REASON    AGE
+    task-pv-volume   10Gi       RWO           Retain          Available             manual                   4s
+
+## 퍼시스턴트볼륨클레임 생성하기
+
+다음 단계는 퍼시스턴트볼륨클레임을 생성하는 단계이다. 파드는 퍼시스턴트볼륨클레임을 
+사용하여 물리적인 스토리지를 요청한다. 이 예제에서, 사용자는 적어도 
+하나 이상의 노드에 대해 읽기-쓰기 접근을 지원하며 최소 3 기가바이트의 볼륨을 요청하는
+퍼시스턴트볼륨클레임을 생성한다.
+
+퍼시스턴트볼륨클레임에 대한 설정 파일은 다음과 같다.
+
+{{< codenew file="pods/storage/pv-claim.yaml" >}}
+
+퍼시스턴트볼륨클레임을 생성한다.
+
+    kubectl apply -f https://k8s.io/examples/pods/storage/pv-claim.yaml
+
+사용자가 퍼시스턴트볼륨클레임을 생성한 후에, 쿠버네티스 컨트롤 플레인은 
+클레임의 요구사항을 만족하는 퍼시스턴트볼륨을 찾는다. 컨트롤 플레인이 
+동일한 스토리지클래스를 갖는 적절한 퍼시스턴트볼륨을 찾으면, 
+볼륨에 클레임을 바인딩한다.
+
+퍼시스턴트볼륨을 다시 확인한다.
+
+```shell
+kubectl get pv task-pv-volume
+```
+
+이제 결과는 `STATUS` 가 `Bound` 임을 보여준다.
+
+    NAME             CAPACITY   ACCESSMODES   RECLAIMPOLICY   STATUS    CLAIM                   STORAGECLASS   REASON    AGE
+    task-pv-volume   10Gi       RWO           Retain          Bound     default/task-pv-claim   manual                   2m
+
+퍼시스턴트볼륨클레임을 확인한다.
+
+```shell
+kubectl get pvc task-pv-claim
+```
+
+결과는 퍼시스턴트볼륨클레임이 사용자의 퍼시스턴트볼륨인 `task-pv-volume` 에 
+바인딩되어 있음을 보여준다.
+
+    NAME            STATUS    VOLUME           CAPACITY   ACCESSMODES   STORAGECLASS   AGE
+    task-pv-claim   Bound     task-pv-volume   10Gi       RWO           manual         30s
+
+## 파드 생성하기
+
+다음 단계는 볼륨으로 퍼시스턴트볼륨클레임을 사용하는 파드를 만드는 단계이다.
+
+파드에 대한 설정 파일은 다음과 같다.
+
+{{< codenew file="pods/storage/pv-pod.yaml" >}}
+
+파드의 설정 파일은 퍼시스턴트볼륨클레임을 지정하지만, 
+퍼시스턴트볼륨을 지정하지는 않는다는 것을 유념하자. 파드의 관점에서 볼때, 
+클레임은 볼륨이다.
+
+파드를 생성한다.
+
+```shell
+kubectl apply -f https://k8s.io/examples/pods/storage/pv-pod.yaml
+```
+
+파드의 컨테이너가 실행 중임을 확인한다.
+
+```shell
+kubectl get pod task-pv-pod
+```
+
+사용자 파드에서 구동되고 있는 컨테이너에 셸로 접근한다.
+
+```shell
+kubectl exec -it task-pv-pod -- /bin/bash
+```
+
+사용자의 셸에서, nginx가 hostPath 볼륨으로부터 `index.html` 파일을 
+제공하는지 확인한다.
+
+```shell
+# 이전 단계에서 "kubectl exec" 명령을 실행한 root 셸 안에서 
+# 다음의 3개 명령을 실행해야 한다.
+apt update
+apt install curl
+curl http://localhost/
+```
+
+결과는 hostPath 볼륨에 있는 `index.html` 파일에 사용자가 작성한 텍스트를
+보여준다.
+
+    Hello from Kubernetes storage
+
+
+만약 사용자가 위와 같은 메시지를 확인하면, 파드가 퍼시스턴트볼륨클레임의 스토리지를 
+사용하도록 성공적으로 설정한 것이다.
+
+## 정리하기
+
+파드, 퍼시스턴트볼륨클레임, 퍼시스턴트볼륨을 삭제한다.
+
+```shell
+kubectl delete pod task-pv-pod
+kubectl delete pvc task-pv-claim
+kubectl delete pv task-pv-volume
+```
+
+만약 클러스터의 노드에 대한 셸이 열려져 있지 않은 경우, 
+이전과 동일한 방식으로 새로운 셸을 연다.
+
+사용자 노드의 셸에서, 생성한 파일과 디렉터리를 제거한다.
+
+```shell
+# 사용자 노드에서 슈퍼유저로 명령을 수행하기 위하여
+# "sudo"를 사용한다고 가정한다
+sudo rm /mnt/data/index.html
+sudo rmdir /mnt/data
+```
+
+이제 사용자 노드에서 셸을 종료해도 된다.
+
+
+
+
+<!-- discussion -->
+
+## 접근 제어
+
+그룹 ID(GID)로 설정된 스토리지는 동일한 GID를 사용하는 파드에서만 쓰기 
+작업을 허용한다. GID가 일치하지 않거나 누락되었을 경우 권한 
+거부 오류가 발생한다. 사용자와의 조정 필요성을 줄이기 위하여 관리자는 
+퍼시스턴트 볼륨에 GID로 어노테이션을 달 수 있다. 그 뒤에, 퍼시스턴트볼륨을 
+사용하는 모든 파드에 대하여 GID가 자동으로 추가된다.
+
+다음과 같이 `pv.beta.kubernetes.io/gid` 어노테이션을 사용한다.
+```yaml
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv1
+  annotations:
+    pv.beta.kubernetes.io/gid: "1234"
+```
+파드가 GID 어노테이션이 있는 퍼시스턴트볼륨을 사용하면, 어노테이션으로
+달린 GID가 파드의 보안 컨텍스트에 지정된 GID와 동일한 방식으로
+파드의 모든 컨테이너에 적용된다. 파드의 명세 혹은 퍼시스턴트볼륨의
+어노테이션으로부터 생성된 모든 GID는, 각 컨테이너에서 실행되는 첫 번째
+프로세스에 적용된다.
+
+{{< note >}}
+파드가 퍼시스턴트볼륨을 사용할 때, 퍼시스턴트볼륨과 연관된 
+GID는 파드 리소스 자체에는 존재하지 않는다.
+{{< /note >}}
+
+
+
+
+## {{% heading "whatsnext" %}}
+
+
+* [퍼시스턴트볼륨](/ko/docs/concepts/storage/persistent-volumes/)에 대해 더 보기.
+* [퍼시스턴트 스토리지 디자인 문서](https://git.k8s.io/community/contributors/design-proposals/storage/persistent-storage.md)에 대해 읽어보기.
+
+### Reference
+
+* [퍼시스턴트볼륨](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolume-v1-core)
+* [PersistentVolumeSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumespec-v1-core)
+* [퍼시스턴트볼륨클레임](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaim-v1-core)
+* [PersistentVolumeClaimSpec](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#persistentvolumeclaimspec-v1-core)
diff --git a/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md b/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md
index 939919b2e6..34cb102f83 100644
--- a/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md
+++ b/content/ko/docs/tasks/configure-pod-container/pull-image-private-registry.md
@@ -206,7 +206,7 @@ kubectl get pod private-reg
 ## {{% heading "whatsnext" %}}
 
 
-* [시크릿](/docs/concepts/configuration/secret/)에 대해 더 배워 보기.
+* [시크릿](/ko/docs/concepts/configuration/secret/)에 대해 더 배워 보기.
 * [프라이빗 레지스트리 사용](/ko/docs/concepts/containers/images/#프라이빗-레지스트리-사용)에 대해 더 배워 보기.
 * [서비스 어카운트에 풀 시크릿(pull secret) 추가하기](/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account)에 대해 더 배워 보기.
 * [kubectl create secret docker-registry](/docs/reference/generated/kubectl/kubectl-commands/#-em-secret-docker-registry-em-)에 대해 읽어보기.
diff --git a/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md b/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
new file mode 100644
index 0000000000..4efe37f77b
--- /dev/null
+++ b/content/ko/docs/tasks/debug-application-cluster/debug-pod-replication-controller.md
@@ -0,0 +1,103 @@
+---
+title: 파드와 레플리케이션컨트롤러(ReplicationController) 디버그하기
+content_type: task
+---
+
+<!-- overview -->
+
+이 페이지에서는 파드와 레플리케이션컨트롤러를 디버깅하는 방법을 소개한다.
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
+
+* 사용자는
+  {{< glossary_tooltip text="파드" term_id="pod" >}} 기본 사항과 파드의  
+  [라이프사이클](/ko/docs/concepts/workloads/pods/pod-lifecycle/)에 대해 잘 알고 있어야 한다.
+
+<!-- steps -->
+
+## 파드 디버깅
+
+파드 디버깅의 첫 번째 단계는 파드를 살펴 보는 것이다. 다음의 명령어를
+사용하여 파드의 현재 상태와 최근 이벤트를 점검한다.
+
+```shell
+kubectl describe pods ${POD_NAME}
+```
+
+파드 내부 컨테이너의 상태를 확인한다. 모두 `Running` 상태인가?
+최근에 재시작 되었는가?
+
+파드의 상태에 따라 디버깅을 계속한다.
+
+### 파드가 pending 상태로 유지
+
+파드가 `Pending` 상태로 멈춰 있는 경우는, 노드에 스케줄 될 수 없음을 의미한다.
+일반적으로 이것은 어떤 유형의 리소스가 부족하거나 스케줄링을 방해하는 다른 요인 때문이다.
+상단의 `kubectl describe ...` 명령의 결과를 확인하자.
+파드를 스케줄 할 수 없는 이유에 대한 스케줄러의 메세지가 있어야 한다.
+이유는 다음과 같다.
+
+#### 부족한 리소스
+
+사용자 클러스터의 CPU 나 Memory의 공급이 소진되었을 수 있다. 이 경우
+몇 가지 방법을 시도할 수 있다.
+
+* 클러스터에 [노드를 더 추가하기](/ko/docs/tasks/administer-cluster/cluster-management/#클러스터-크기-재조정).
+
+* pending 상태인 파드를 위한 공간을 확보하기 위해
+  [불필요한 파드 종료하기](/ko/docs/concepts/workloads/pods/#pod-termination)
+
+* 파드가 노드보다 크지 않은지 확인한다. 예를 들어 모든
+  노드가 `cpu:1` 의 용량을 가지고 있을 경우, `cpu: 1.1` 을 요청하는 파드는
+  절대 스케줄 될 수 없다.
+
+	사용자는 `kubectl get nodes -o <format>` 명령으로 노드의
+	용량을 점검할 수 있다. 다음은 필요한 정보만을 추출하는 몇 가지
+	명령의 예이다.
+
+    ```shell
+    kubectl get nodes -o yaml | egrep '\sname:|cpu:|memory:'
+    kubectl get nodes -o json | jq '.items[] | {name: .metadata.name, cap: .status.capacity}'
+    ```
+
+  [리소스 쿼터](/ko/docs/concepts/policy/resource-quotas/)
+  기능은 사용할 수 있는 전체 리소스의 양을 제한하도록 설정할 수 있다.
+  네임스페이스와 함께 사용하면,
+  한 팀이 모든 리소스를 점유하는 것을 방지할 수 있다.
+
+#### hostPort 사용하기
+
+파드를 `hostPort` 에 바인딩 할 때 파드를 스케줄링 할 수 있는
+위치는 제한되어 있다. 대부분의 경우 `hostPort` 는 불필요하다. 서비스 오브젝트를
+사용하여 파드를 노출하도록 한다. `hostPort` 가 필요한 경우
+컨테이너 클러스터에 있는 노드의 수만큼 파드를 스케줄 할 수 있다.
+
+### 파드가 waiting 상태로 유지
+
+파드가 `Waiting` 상태에서 멈춘 경우, 워커 노드에 스케줄 되었지만, 해당 장비에서 사용할 수 없다.
+거듭 강조하지만, `kubectl describe ...` 의 정보는 유익하게 사용되어야 한다.
+`Waiting` 파드의 가장 일반적인 원인은 이미지를 가져오지 못하는 경우이다.
+확인해야 할 3가지 사항이 있다.
+
+* 이미지 이름이 올바른지 확인한다.
+* 이미지를 저장소에 푸시하였는가?
+* 이미지가 풀 될 수 있는지 보기 위해, 사용자의 장비에서 `docker pull <image>` 를 수동으로
+  실행한다.
+
+### 파드가 손상(crashing)되었거나 양호하지 않을(unhealthy) 경우
+
+일단 사용자의 파드가 스케줄 되면, [구동중인 파드 디버그하기](/docs/tasks/debug-application-cluster/debug-running-pod/)에
+기술된 메서드를 디버깅에 사용할 수 있다.
+
+
+## 레플리케이션컨트롤러 디버깅
+
+레플리케이션컨트롤러는 매우 간단하다. 이 오브젝트는 파드를 만들거나
+만들 수 없는 경우뿐이다. 만약 파드를 만들 수 없는 경우,
+[위의 지침](#파드-디버깅)을 참조하여 파드를 디버그한다.
+
+사용자는 `kubectl describe rc ${CONTROLLER_NAME}` 을 사용하여 레플리케이션 컨트롤러와
+관련된 이벤트를 검사할 수도 있다.
diff --git a/content/ko/docs/tasks/inject-data-application/define-command-argument-container.md b/content/ko/docs/tasks/inject-data-application/define-command-argument-container.md
index 68ee4726a5..aae34dc3b9 100644
--- a/content/ko/docs/tasks/inject-data-application/define-command-argument-container.md
+++ b/content/ko/docs/tasks/inject-data-application/define-command-argument-container.md
@@ -89,8 +89,8 @@ command: ["/bin/echo"]
 args: ["$(MESSAGE)"]
 ```
 
-이것은 [컨피그 맵](/docs/tasks/configure-pod-container/configure
--pod-configmap/)과 [시크릿](/docs/concepts/configuration/secret/)을
+이것은 [컨피그 맵](/docs/tasks/configure-pod-container/configure-pod-configmap/)과
+[시크릿](/ko/docs/concepts/configuration/secret/)을
 포함해, 환경 변수를 정의하는데 활용할 수 있는 모든 방법들을 활용해서 파드를 위한 인자를
 정의할
 수 있다는 것을 의미한다.
diff --git a/content/ko/docs/tasks/job/_index.md b/content/ko/docs/tasks/job/_index.md
new file mode 100644
index 0000000000..b93792b7f8
--- /dev/null
+++ b/content/ko/docs/tasks/job/_index.md
@@ -0,0 +1,5 @@
+---
+title: "잡(Job) 실행"
+description: 병렬 처리를 사용하여 잡을 실행한다.
+weight: 50
+---
diff --git a/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md b/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md
new file mode 100644
index 0000000000..e2b1435464
--- /dev/null
+++ b/content/ko/docs/tasks/job/automated-tasks-with-cron-jobs.md
@@ -0,0 +1,208 @@
+---
+title: 크론잡(CronJob)으로 자동화된 작업 실행
+min-kubernetes-server-version: v1.8
+content_type: task
+weight: 10
+---
+
+<!-- overview -->
+
+시간 기반의 스케줄에 따라 {{< glossary_tooltip text="크론잡" term_id="cronjob" >}}을 이용해서 {{< glossary_tooltip text="잡(Job)" term_id="job" >}}을 실행할 수 있다.
+이러한 자동화된 잡은 리눅스 또는 유닉스 시스템에서 [크론](https://ko.wikipedia.org/wiki/Cron) 작업처럼 실행된다.
+
+크론 잡은 백업을 수행하거나 이메일을 보내는 것과 같이 주기적이고 반복적인 작업들을 생성하는 데 유용하다.
+크론 잡은 시스템 사용이 적은 시간에 잡을 스케줄하려는 경우처럼 특정 시간에 개별 작업을 스케줄할 수도 있다.
+
+크론 잡에는 제한 사항과 특이점이 있다.
+예를 들어, 특정 상황에서는 하나의 크론 잡이 여러 잡을 생성할 수 있다.
+따라서, 잡은 멱등성을 가져야 한다.
+
+제한 사항에 대한 자세한 내용은 [크론잡](/ko/docs/concepts/workloads/controllers/cron-jobs/)을 참고한다.
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+* {{< include "task-tutorial-prereqs.md" >}}
+
+
+
+<!-- steps -->
+
+## 크론 잡 생성
+
+크론 잡은 구성 파일이 필요하다.
+아래의 크론 잡 구성 `.spec` 파일의 예제는 매 분마다 현재 시간과 hello 메시지를 출력한다.
+
+{{< codenew file="application/job/cronjob.yaml" >}}
+
+다음 명령을 사용하여 크론잡 예제를 실행한다.
+
+```shell
+kubectl create -f https://k8s.io/examples/application/job/cronjob.yaml
+```
+출력 결과는 다음과 비슷하다.
+
+```
+cronjob.batch/hello created
+```
+
+크론 잡을 생성한 후, 다음 명령을 사용하여 상태를 가져온다.
+
+```shell
+kubectl get cronjob hello
+```
+출력 결과는 다음과 비슷하다.
+
+```
+NAME    SCHEDULE      SUSPEND   ACTIVE   LAST SCHEDULE   AGE
+hello   */1 * * * *   False     0        <none>          10s
+```
+
+명령의 결과에서 알 수 있듯이, 크론 잡은 아직 잡을 스케줄하거나 실행하지 않았다.
+약 1분 내로 잡이 생성되는지 확인한다.
+
+```shell
+kubectl get jobs --watch
+```
+출력 결과는 다음과 비슷하다.
+
+```
+NAME               COMPLETIONS   DURATION   AGE
+hello-4111706356   0/1                      0s
+hello-4111706356   0/1           0s         0s
+hello-4111706356   1/1           5s         5s
+```
+
+이제 "hello" 크론 잡에 의해 스케줄된 실행 중인 작업을 확인했다.
+잡 감시를 중지한 뒤에 크론 잡이 다시 스케줄되었는지를 확인할 수 있다.
+
+```shell
+kubectl get cronjob hello
+```
+출력 결과는 다음과 비슷하다.
+
+```
+NAME    SCHEDULE      SUSPEND   ACTIVE   LAST SCHEDULE   AGE
+hello   */1 * * * *   False     0        50s             75s
+```
+
+크론 잡 `hello` 가 `LAST SCHEDULE` 에 지정된 시간에 성공적으로 잡을 스케줄했는지 확인해야 한다. 현재는 0개의 활성 잡이 있고, 이는 작업이 완료되었거나 실패했음을 의미한다.
+
+이제, 마지막으로 스케줄된 잡이 생성한 파드를 찾고 생성된 파드 중 하나의 표준 출력을 확인한다.
+
+{{< note >}}
+잡 이름과 파드 이름은 다르다.
+{{< /note >}}
+
+```shell
+# "hello-4111706356"을 사용자의 시스템에 있는 잡 이름으로 바꾼다
+pods=$(kubectl get pods --selector=job-name=hello-4111706356 --output=jsonpath={.items[*].metadata.name})
+```
+파드의 로그를 출력한다.
+
+```shell
+kubectl logs $pods
+```
+출력 결과는 다음과 비슷하다.
+
+```
+Fri Feb 22 11:02:09 UTC 2019
+Hello from the Kubernetes cluster
+```
+
+## 크론 잡 삭제
+
+더 이상 크론 잡이 필요하지 않으면, `kubectl delete cronjob <cronjob name>` 명령을 사용해서 삭제한다.
+
+```shell
+kubectl delete cronjob hello
+```
+
+크론 잡을 삭제하면 생성된 모든 잡과 파드가 제거되고 추가 잡 생성이 중지된다.
+[가비지(garbage) 수집](/ko/docs/concepts/workloads/controllers/garbage-collection/)에서 잡 제거에 대해 상세한 내용을 읽을 수 있다.
+
+## 크론 잡 명세 작성
+
+다른 모든 쿠버네티스 구성과 마찬가지로, 크론 잡은 `apiVersion`, `kind` 그리고 `metadata` 필드가 필요하다. 구성 파일
+작업에 대한 일반적인 정보는 [애플리케이션 배포](/docs/tasks/run-application/run-stateless-application-deployment/)와
+[kubectl을 사용하여 리소스 관리하기](/ko/docs/concepts/overview/working-with-objects/object-management/) 문서를 참고한다.
+
+크론 잡 구성에는 [`.spec` 섹션](https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status)도 필요하다.
+
+{{< note >}}
+크론 잡, 특히 해당 잡의 `.spec` 에 대한 모든 수정 사항은 다음 번 실행에만 적용된다.
+{{< /note >}}
+
+### 스케줄
+
+`.spec.schedule` 은 `.spec` 의 필수 필드이다.
+이는 해당 잡이 생성되고 실행되는 스케줄 시간으로 `0 * * * *` 또는 `@hourly` 와 같이 [크론](https://ko.wikipedia.org/wiki/Cron) 형식의 문자열을 받아들인다.
+
+이 형식은 확장된 `vixie cron` 스텝(step) 값도 포함한다. 이 내용은
+[FreeBSD 매뉴얼](https://www.freebsd.org/cgi/man.cgi?crontab%285%29)에 설명되어 있다.
+
+> 스텝 값은 범위(range)와 함께 사용할 수 있다. 범위 뒤에 `/<number>` 를
+> 지정하여 범위 내에서 숫자만큼의 값을 건너뛴다. 예를 들어,
+> 시간 필드에 `0-23/2` 를 사용하여 매 2시간마다 명령 실행을
+> 지정할 수 있다(V7 표준의 대안은 `0,2,4,6,8,10,12,14,16,18,20,22`
+> 이다). 별표(asterisk) 뒤에 붙이는 스텝도 허용되며,
+> "2시간마다"라고 지정하고 싶으면, 간단히 `*/2` 를 사용하면 된다.
+
+{{< note >}}
+스케줄에서 물음표(`?`)는 별표 `*` 와 동일한 의미를 가지며, 주어진 필드에 대해 사용할 수 있는 모든 값을 나타낸다.
+{{< /note >}}
+
+### 잡 템플릿
+
+`.spec.jobTemplate` 은 잡에 대한 템플릿이며, 이것은 필수 필드다.
+이것은 중첩되고 `apiVersion` 이나 `kind` 가 없는 것을 제외하고 [잡](/ko/docs/concepts/workloads/controllers/job/)과 정확히 같은 스키마를 가진다.
+잡 `.spec` 을 작성하는 것에 대한 내용은 [잡 명세 작성하기](/ko/docs/concepts/workloads/controllers/job/#잡-사양-작성하기)를 참고한다.
+
+### 시작 기한
+
+`.spec.startingDeadlineSeconds` 필드는 선택 사항이다.
+어떤 이유로든 스케줄된 시간을 놓친 경우 잡의 시작 기한을 초 단위로 나타낸다.
+기한이 지나면, 크론 잡이 잡을 시작하지 않는다.
+이러한 방식으로 기한을 맞추지 못한 잡은 실패한 작업으로 간주된다.
+이 필드를 지정하지 않으면, 잡에 기한이 없다.
+
+크론잡 컨트롤러는 크론 잡에 대해 얼마나 많은 스케줄이 누락되었는지를 계산한다. 누락된 스케줄이 100개를 초과 한다면, 크론 잡은 더이상 스케줄되지 않는다. `.spec.startingDeadlineSeconds` 이 설정되지 않았다면, 크론잡 컨트롤러는 `status.lastScheduleTime` 부터 지금까지 누락된 스케줄을 계산한다.
+
+예를 들어, 하나의 크론 잡이 1분마다 실행되도록 설정되어 있고, 크론잡의 `status.lastScheduleTime` 은 새벽 5:00시이지만, 지금은 오전 7:00시라고 가정하자. 즉 120개의 스케줄이 누락되었다는 것이고, 그래서 크론 잡은 더이상 스케줄되지 않는다.
+
+`.spec.startingDeadlineSeconds` 필드가 (null이 아닌) 값으로 설정되어 있다면, 크론잡 컨트롤러는 `.spec.startingDeadlineSeconds` 의 값으로부터 지금까지 얼마나 많은 잡이 누락되었는지를 계산한다.
+
+예를 들어, `200` 으로 설정되었다면, 지난 200초 동안 누락된 스케줄이 몇 번 발생했는지 계산한다. 이 경우, 지난 200초 동안 누락된 스케줄이 100개가 넘으면, 크론 잡이 더이상 스케줄되지 않는다.
+
+### 동시성 정책
+
+`.spec.concurrencyPolicy` 필드도 선택 사항이다.
+이것은 이 크론 잡에 의해 생성된 잡의 동시 실행을 처리하는 방법을 지정한다.
+명세는 다음의 동시성 정책 중 하나만 지정할 수 있다.
+
+* `Allow`(기본값): 크론 잡은 동시에 실행되는 잡을 허용한다.
+* `Forbid`: 크론 잡은 동시 실행을 허용하지 않는다. 새로운 잡을 실행할 시간이고 이전 잡 실행이 아직 완료되지 않은 경우, 크론 잡은 새로운 잡 실행을 건너뛴다.
+* `Replace`: 새로운 잡을 실행할 시간이고 이전 잡 실행이 아직 완료되지 않은 경우, 크론 잡은 현재 실행 중인 잡 실행을 새로운 잡 실행으로 대체한다.
+
+참고로 동시성 정책은 동일한 크론 잡에 의해 생성된 잡에만 적용된다.
+크론 잡이 여러 개인 경우, 각각의 잡은 항상 동시에 실행될 수 있다.
+
+### 일시 정지
+
+`.spec.suspend` 필드도 선택 사항이다.
+`true` 로 설정되면, 모든 후속 실행이 일시 정지된다.
+이 설정은 이미 시작된 실행에는 적용되지 않는다.
+기본값은 false이다.
+
+{{< caution >}}
+스케줄된 시간 동안 잡이 일시 정지되어 있다면 누락된 잡으로 간주한다.
+[시작 기한](#시작-기한) 없이 기존의 크론 잡에 대해 `.spec.suspend` 가 `true` 에서 `false` 로 변경되면, 누락된 잡들이 즉시 스케줄된다.
+{{< /caution >}}
+
+### 잡 히스토리 한도
+
+`.spec.successfulJobsHistoryLimit` 와 `.spec.failedJobsHistoryLimit` 필드는 선택 사항이다.
+이들 필드는 기록을 보관해야 하는 완료 및 실패한 잡의 개수를 지정한다.
+기본적으로, 각각 3과 1로 설정된다. 한도를 `0` 으로 설정하는 것은 잡 완료 후에 해당 잡 유형의 기록을 보관하지 않는다는 것이다.
diff --git a/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md b/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md
new file mode 100644
index 0000000000..8788477c17
--- /dev/null
+++ b/content/ko/docs/tasks/job/fine-parallel-processing-work-queue.md
@@ -0,0 +1,233 @@
+---
+title: 작업 대기열을 사용한 정밀 병렬 처리
+content_type: task
+min-kubernetes-server-version: v1.8
+weight: 40
+---
+
+<!-- overview -->
+
+이 예에서는, 지정된 파드에서 여러 병렬 워커 프로세스가 있는
+쿠버네티스 잡(Job)을 실행한다.
+
+이 예에서는, 각 파드가 생성될 때, 작업 대기열에서 하나의 작업 단위를
+선택하여, 처리하고, 대기열이 비워질 때까지 반복한다.
+
+이 예에서의 단계에 대한 개요는 다음과 같다.
+
+1. **작업 대기열을 보관할 스토리지 서비스를 시작한다.**  이 예에서는, Redis를 사용하여
+   작업 항목을 저장한다. 이전 예에서는, RabbitMQ를 사용했다. 이 예에서는, AMQP가 길이가
+   정해져 있는 작업 대기열이 비어있을 때 클라이언트가 이를 감지할 수 있는 좋은 방법을 제공하지
+   않기 때문에 Redis 및 사용자 지정의 작업 대기열 클라이언트 라이브러리를 사용한다. 실제로는
+   Redis와 같은 저장소를 한 번 설정하고 여러 작업과 다른 것들의 작업 대기열로 재사용한다.
+1. **대기열을 만들고, 메시지로 채운다.**  각 메시지는 수행할 하나의 작업을 나타낸다. 이
+   예에서, 메시지는 긴 계산을 수행할 정수일 뿐이다.
+1. **대기열에서 작업을 수행하는 잡을 시작한다.**  잡은 여러 파드를 시작한다. 각 파드는
+   메시지 대기열에서 하나의 작업을 가져와서, 처리한 다음, 대기열이 비워질 때까지 반복한다.
+
+## {{% heading "prerequisites" %}}
+
+
+{{< include "task-tutorial-prereqs.md" >}}
+
+<!-- steps -->
+
+[잡](/ko/docs/concepts/workloads/controllers/job/)의 기본적이고,
+병렬 작업이 아닌, 사용법에 대해 잘 알고 있어야 한다.
+
+<!-- steps -->
+
+## Redis 시작
+
+이 문서의 예시에서는, 단순함을 위해, Redis의 단일 인스턴스를 시작한다.
+Redis를 확장 가능하고 중복적으로 배포하는 예에 대해서는
+[Redis 예시](https://github.com/kubernetes/examples/tree/master/guestbook)를 참고한다.
+
+다음 파일을 직접 다운로드할 수도 있다.
+
+- [`redis-pod.yaml`](/examples/application/job/redis/redis-pod.yaml)
+- [`redis-service.yaml`](/examples/application/job/redis/redis-service.yaml)
+- [`Dockerfile`](/examples/application/job/redis/Dockerfile)
+- [`job.yaml`](/examples/application/job/redis/job.yaml)
+- [`rediswq.py`](/examples/application/job/redis/rediswq.py)
+- [`worker.py`](/examples/application/job/redis/worker.py)
+
+
+## 작업으로 대기열 채우기
+
+이제 몇 가지 "작업"으로 대기열을 채운다. 이 예제의 작업은 문자열을 출력하는
+것이다.
+
+Redis CLI를 실행하기 위한 임시 대화형 파드를 시작한다.
+
+```shell
+kubectl run -i --tty temp --image redis --command "/bin/sh"
+Waiting for pod default/redis2-c7h78 to be running, status is Pending, pod ready: false
+Hit enter for command prompt
+```
+
+이제 엔터 키를 누르고, redis CLI를 시작하고, 몇몇 작업 항목이 포함된 목록을 생성한다.
+
+```
+# redis-cli -h redis
+redis:6379> rpush job2 "apple"
+(integer) 1
+redis:6379> rpush job2 "banana"
+(integer) 2
+redis:6379> rpush job2 "cherry"
+(integer) 3
+redis:6379> rpush job2 "date"
+(integer) 4
+redis:6379> rpush job2 "fig"
+(integer) 5
+redis:6379> rpush job2 "grape"
+(integer) 6
+redis:6379> rpush job2 "lemon"
+(integer) 7
+redis:6379> rpush job2 "melon"
+(integer) 8
+redis:6379> rpush job2 "orange"
+(integer) 9
+redis:6379> lrange job2 0 -1
+1) "apple"
+2) "banana"
+3) "cherry"
+4) "date"
+5) "fig"
+6) "grape"
+7) "lemon"
+8) "melon"
+9) "orange"
+```
+
+자, 키 `job2` 가 있는 목록이 작업 대기열이 된다.
+
+참고: Kube DNS를 올바르게 설정하지 않은 경우, 위 블록의
+첫 번째 단계를 `redis-cli -h $REDIS_SERVICE_HOST` 로 변경해야 할 수 있다.
+
+
+## 이미지 생성
+
+이제 실행할 이미지를 만들 준비가 되었다.
+
+redis 클라이언트와 함께 python 워커 프로그램을 사용하여
+메시지 큐에서 메시지를 읽는다.
+
+rediswq.py([다운로드](/examples/application/job/redis/rediswq.py))라는
+간단한 Redis 작업 대기열 클라이언트 라이브러리가 제공된다.
+
+잡의 각 파드에 있는 "워커" 프로그램은 작업 대기열
+클라이언트 라이브러리를 사용하여 작업을 가져온다. 다음은 워커 프로그램이다.
+
+{{< codenew language="python" file="application/job/redis/worker.py" >}}
+
+[`worker.py`](/examples/application/job/redis/worker.py),
+[`rediswq.py`](/examples/application/job/redis/rediswq.py) 및
+[`Dockerfile`](/examples/application/job/redis/Dockerfile) 파일을 다운로드할 수 있고, 그런 다음
+이미지를 만들 수도 있다.
+
+```shell
+docker build -t job-wq-2 .
+```
+
+### 이미지 푸시
+
+[도커 허브(Docker Hub)](https://hub.docker.com/)를 위해, 아래 명령으로
+사용자의 username과 앱 이미지에 태그하고 허브에 푸시한다. `<username>` 을
+사용자의 허브 username으로 바꾼다.
+
+```shell
+docker tag job-wq-2 <username>/job-wq-2
+docker push <username>/job-wq-2
+```
+
+공용 저장소로 푸시하거나 [개인 저장소에 접근할 수 있도록
+클러스터를 구성](/ko/docs/concepts/containers/images/)해야 한다.
+
+[Google Container
+Registry](https://cloud.google.com/tools/container-registry/)를 사용하는 경우,
+사용자의 프로젝트 ID로 앱 이미지에 태그를 지정하고 GCR로 푸시한다. `<project>` 를
+사용자의 프로젝트 ID로 바꾼다.
+
+```shell
+docker tag job-wq-2 gcr.io/<project>/job-wq-2
+gcloud docker -- push gcr.io/<project>/job-wq-2
+```
+
+## 잡 정의
+
+다음은 잡 정의이다.
+
+{{< codenew file="application/job/redis/job.yaml" >}}
+
+사용자 자신의 경로로 `gcr.io/myproject` 를
+변경하려면 잡 템플릿을 편집해야 한다.
+
+이 예에서, 각 파드는 대기열의 여러 항목에 대해 작업한 다음 더 이상 항목이 없을 때 종료된다.
+워커는 작업 대기열이 비어있을 때를 감지하고 잡 컨트롤러는 작업 대기열에 대해
+알지 못하기 때문에, 작업이 완료되면 워커에게 신호를 보낸다.
+워커는 성공적으로 종료하여 대기열이 비어 있음을 알린다. 따라서, 워커가 성공적으로
+종료하자마자, 컨트롤러는 작업이 완료되었음을 인식하고, 파드가 곧 종료된다.
+따라서, 잡 완료 횟수를 1로 설정했다. 잡 컨트롤러는 다른 파드도 완료될 때까지
+기다린다.
+
+## 잡 실행
+
+이제 잡을 실행한다.
+
+```shell
+kubectl apply -f ./job.yaml
+```
+
+이제 조금 기다린 다음, 잡을 확인한다.
+
+```shell
+kubectl describe jobs/job-wq-2
+Name:             job-wq-2
+Namespace:        default
+Selector:         controller-uid=b1c7e4e3-92e1-11e7-b85e-fa163ee3c11f
+Labels:           controller-uid=b1c7e4e3-92e1-11e7-b85e-fa163ee3c11f
+                  job-name=job-wq-2
+Annotations:      <none>
+Parallelism:      2
+Completions:      <unset>
+Start Time:       Mon, 11 Jan 2016 17:07:59 -0800
+Pods Statuses:    1 Running / 0 Succeeded / 0 Failed
+Pod Template:
+  Labels:       controller-uid=b1c7e4e3-92e1-11e7-b85e-fa163ee3c11f
+                job-name=job-wq-2
+  Containers:
+   c:
+    Image:              gcr.io/exampleproject/job-wq-2
+    Port:
+    Environment:        <none>
+    Mounts:             <none>
+  Volumes:              <none>
+Events:
+  FirstSeen    LastSeen    Count    From            SubobjectPath    Type        Reason            Message
+  ---------    --------    -----    ----            -------------    --------    ------            -------
+  33s          33s         1        {job-controller }                Normal      SuccessfulCreate  Created pod: job-wq-2-lglf8
+
+
+kubectl logs pods/job-wq-2-7r7b2
+Worker with sessionID: bbd72d0a-9e5c-4dd6-abf6-416cc267991f
+Initial queue state: empty=False
+Working on banana
+Working on date
+Working on lemon
+```
+
+보시다시피, 사용자의 파드 중 하나가 여러 작업 단위에서 작업했다.
+
+<!-- discussion -->
+
+## 대안
+
+대기열 서비스를 실행하거나 작업 대기열을 사용하도록 컨테이너를 수정하는 것이 불편한 경우, 다른
+[잡 패턴](/ko/docs/concepts/workloads/controllers/job/#잡-패턴)
+중 하나를 고려할 수 있다.
+
+만약 실행할 백그라운드 처리 작업의 연속 스트림이 있는 경우,
+`ReplicaSet` 이 있는 백그라운드 워커를 실행하는 것과,
+[https://github.com/resque/resque](https://github.com/resque/resque)와 같은
+백그라운드 처리 라이브러리를 실행하는 것이 좋다.
diff --git a/content/ko/docs/tasks/network/validate-dual-stack.md b/content/ko/docs/tasks/network/validate-dual-stack.md
index 5364e7bebb..7265fd964e 100644
--- a/content/ko/docs/tasks/network/validate-dual-stack.md
+++ b/content/ko/docs/tasks/network/validate-dual-stack.md
@@ -13,7 +13,6 @@ content_type: task
 
 * 이중 스택 네트워킹을 위한 제공자 지원 (클라우드 제공자 또는 기타 제공자들은 라우팅 가능한 IPv4/IPv6 네트워크 인터페이스를 제공하는 쿠버네티스 노드들을 제공해야 한다.)
 * 이중 스택을 지원하는 [네트워크 플러그인](/ko/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)  (예. Kubenet 또는 Calico)
-* IPVS 모드로 구동되는 Kube-proxy
 * [이중 스택 활성화](/ko/docs/concepts/services-networking/dual-stack/) 클러스터
 
 {{< version-check >}}
diff --git a/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md b/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md
index 8642c374af..f3debe8781 100644
--- a/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md
+++ b/content/ko/docs/tasks/run-application/run-single-instance-stateful-application.md
@@ -47,7 +47,7 @@ MySQL을 실행하고 퍼시스턴트볼륨클레임을 참조하는 디플로
 동적 프로비저너에 의해서 충족된다.
 
 참고: config yaml 파일에 정의된 비밀번호는 안전하지 않다. 더 안전한 해결방법을 위해 
-[쿠버네티스 시크릿](/docs/concepts/configuration/secret/)
+[쿠버네티스 시크릿](/ko/docs/concepts/configuration/secret/)
 을 보자
 
 {{< codenew file="application/mysql/mysql-deployment.yaml" >}}
diff --git a/content/ko/docs/tasks/tools/_index.md b/content/ko/docs/tasks/tools/_index.md
index 8f45c8ddc2..208a8ab33d 100755
--- a/content/ko/docs/tasks/tools/_index.md
+++ b/content/ko/docs/tasks/tools/_index.md
@@ -25,10 +25,10 @@ no_list: true
 
 공식 사이트에서의 [시작하기!](https://minikube.sigs.k8s.io/docs/start/)
 가이드를 따라 해볼 수 있고, 또는 도구 설치에 중점을 두고 있다면
-[Minikube 설치](/docs/tasks/tools/install-minikube/)를 읽어볼 수 있다.
+[Minikube 설치](/ko/docs/tasks/tools/install-minikube/)를 읽어볼 수 있다.
 
 Minikube가 작동하면, 이를 사용하여
-[샘플 애플리케이션을 실행](/docs/tutorials/hello-minikube/)해볼 수 있다.
+[샘플 애플리케이션을 실행](/ko/docs/tutorials/hello-minikube/)해볼 수 있다.
 
 ## kind
 
diff --git a/content/ko/docs/tasks/tools/install-kubectl.md b/content/ko/docs/tasks/tools/install-kubectl.md
index 4d65b37503..59b1a58b8a 100644
--- a/content/ko/docs/tasks/tools/install-kubectl.md
+++ b/content/ko/docs/tasks/tools/install-kubectl.md
@@ -523,7 +523,7 @@ compinit
 
 * [Minikube 설치](/ko/docs/tasks/tools/install-minikube/)
 * 클러스터 생성에 대한 자세한 내용은 [시작하기](/ko/docs/setup/)를 참고한다.
-* [애플리케이션을 시작하고 노출하는 방법에 대해 배운다.](/docs/tasks/access-application-cluster/service-access-application-cluster/)
+* [애플리케이션을 시작하고 노출하는 방법에 대해 배운다.](/ko/docs/tasks/access-application-cluster/service-access-application-cluster/)
 * 직접 생성하지 않은 클러스터에 접근해야하는 경우,
   [클러스터 접근 공유 문서](/ko/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)를 참고한다.
 * [kubectl 레퍼런스 문서](/docs/reference/kubectl/kubectl/) 읽기
diff --git a/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
index b9aca86acd..d9d621d867 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/create-cluster/cluster-interactive.html
@@ -21,10 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 화면이 너무 좁아 터미널과 상호작용할 수 없습니다. 데스크톱/태블릿을 사용해주세요.
             </div>
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/1"
-                 data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                
-                 data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/1" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;"></div>
         </div>
         <div class="row">
             <div class="col-md-12">
diff --git a/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
index 3643dfa36b..2cf9daa6e1 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/deploy-app/deploy-interactive.html
@@ -31,10 +31,7 @@ weight: 20
                 터미널로 상호 작용하기 위해서, 데스크탑/태블릿 버전을 사용해주세요
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/7"
-                 data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                
-                 data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/7" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
 
         </div>
diff --git a/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
index a0190373f8..f82846a390 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/explore/explore-interactive.html
@@ -24,10 +24,7 @@ weight: 20
                 터미널과 상호작용하기 위해, 데스크탑/태블릿 버전을 이용한다.
             </div>
 
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/4"
-                 data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                
-                 data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/4" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html b/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
index dca41b91a0..31c1d859a2 100644
--- a/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
+++ b/content/ko/docs/tutorials/kubernetes-basics/scale/scale-interactive.html
@@ -21,10 +21,7 @@ weight: 20
             <div class="katacoda__alert">
                 터미널로 상호 작용하기 위해서, 데스크탑/태블릿 버전을 사용해주세요
             </div>
-            <div class="katacoda__box" id="inline-terminal-1" data-katacoda-id="kubernetes-bootcamp/5"
-                 data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false"
-                
-                 data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
+            <div class="katacoda__box" id="inline-terminal-1"  data-katacoda-id="kubernetes-bootcamp/5" data-katacoda-color="326de6" data-katacoda-secondary="273d6d" data-katacoda-hideintro="false" data-katacoda-prompt="Kubernetes Bootcamp Terminal" style="height: 600px;">
             </div>
         </div>
         <div class="row">
diff --git a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
index 488de4e60c..047fb9b6dd 100644
--- a/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
+++ b/content/ko/docs/tutorials/stateful-application/basic-stateful-set.md
@@ -1026,7 +1026,7 @@ web-1
 다시 생성되고 `web-0`과 `web-1`은 계속
 각 호스트네임을 제공한다.
 
-최종적으로 `web` 스테이트풀셋을 삭제한다.
+최종적으로 `nginx` 서비스를 삭제한다.
 
 ```shell
 kubectl delete service nginx
@@ -1034,7 +1034,7 @@ kubectl delete service nginx
 ```
 service "nginx" deleted
 ```
-그리고 `nginx` 서비스를 삭제한다.
+그리고 `web` 스테이트풀셋을 삭제한다.
 ```shell
 kubectl delete statefulset web
 ```
diff --git a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
index 1e0aefd4a3..7c3721d72c 100644
--- a/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
+++ b/content/ko/docs/tutorials/stateful-application/mysql-wordpress-persistent-volume.md
@@ -2,7 +2,7 @@
 title: "예시: WordPress와 MySQL을 퍼시스턴트 볼륨에 배포하기"
 content_type: tutorial
 weight: 20
-card: 
+card:
   name: tutorials
   weight: 40
   title: "스테이트풀셋 예시: Wordpress와 퍼시스턴트 볼륨"
@@ -13,7 +13,7 @@ card:
 <!-- overview -->
 이 튜토리얼은 WordPress 사이트와 MySQL 데이터베이스를 Minikube를 이용하여 어떻게 배포하는지 보여준다. 애플리케이션 둘 다 퍼시스턴트 볼륨과 퍼시스턴트볼륨클레임을 데이터를 저장하기 위해 사용한다.
 
-[퍼시스턴트볼륨](/ko/docs/concepts/storage/persistent-volumes/)(PV)는 관리자가 수동으로 프로비저닝한 클러스터나 쿠버네티스 [스토리지클래스](/docs/concepts/storage/storage-classes)를 이용해 동적으로 프로비저닝된 저장소의 일부이다. [퍼시스턴트볼륨클레임](/ko/docs/concepts/storage/persistent-volumes/#퍼시스턴트볼륨클레임)(PVC)은 PV로 충족할 수 있는 사용자에 의한 스토리지 요청이다. 퍼시스턴트볼륨은 파드 라이프사이클과 독립적이며 재시작, 재스케줄링이나 파드를 삭제할 때에도 데이터를 보존한다.
+[퍼시스턴트볼륨](/ko/docs/concepts/storage/persistent-volumes/)(PV)는 관리자가 수동으로 프로비저닝한 클러스터나 쿠버네티스 [스토리지클래스](/ko/docs/concepts/storage/storage-classes)를 이용해 동적으로 프로비저닝된 저장소의 일부이다. [퍼시스턴트볼륨클레임](/ko/docs/concepts/storage/persistent-volumes/#퍼시스턴트볼륨클레임)(PVC)은 PV로 충족할 수 있는 사용자에 의한 스토리지 요청이다. 퍼시스턴트볼륨은 파드 라이프사이클과 독립적이며 재시작, 재스케줄링이나 파드를 삭제할 때에도 데이터를 보존한다.
 
 {{< warning >}}
 이 배포는 프로덕션 사용 예로는 적절하지 않은데 이는 단일 인스턴스의 WordPress와 MySQL을 이용했기 때문이다. 프로덕션이라면 [WordPress Helm Chart](https://github.com/kubernetes/charts/tree/master/stable/wordpress)로 배포하기를 고려해보자.
@@ -76,7 +76,7 @@ MySQL과 Wordpress는 각각 데이터를 저장할 퍼시스턴트볼륨이 필
 ## kustomization.yaml 생성하기
 
 ### 시크릿 생성자 추가
-[시크릿](/docs/concepts/configuration/secret/)은 암호나 키 같은 민감한 데이터들을 저장하는 개체이다. 1.14 버전부터 `kubectl`은 kustomization 파일을 이용해서 쿠버네티스 개체를 관리한다. `kustomization.yaml`의 제네레니터로 시크릿을 생성할 수 있다.
+[시크릿](/ko/docs/concepts/configuration/secret/)은 암호나 키 같은 민감한 데이터들을 저장하는 개체이다. 1.14 버전부터 `kubectl`은 kustomization 파일을 이용해서 쿠버네티스 개체를 관리한다. `kustomization.yaml`의 제네레니터로 시크릿을 생성할 수 있다.
 
 다음 명령어로 `kustomization.yaml` 내에 시크릿 제네레이터를 추가한다. `YOUR_PASSWORD`는 사용하기 원하는 암호로 변경해야 한다.
 
@@ -98,7 +98,7 @@ EOF
 다음의 매니페스트는 단일-인스턴스 WordPress 디플로이먼트를 기술한다. WordPress 컨테이너는
 웹사이트 데이터 파일을 위해 `/var/www/html`에 퍼시스턴트볼륨을 마운트한다. `WORDPRESS_DB_HOST` 환경 변수에는
 위에서 정의한 MySQL 서비스의 이름이 설정되며, WordPress는 서비스를 통해 데이터베이스에 접근한다.
-`WORDPRESS_DB_PASSWORD` 환경 변수에는 kustomize가 생성한 데이터베이스 패스워드가 설정된다. 
+`WORDPRESS_DB_PASSWORD` 환경 변수에는 kustomize가 생성한 데이터베이스 패스워드가 설정된다.
 
 {{< codenew file="application/wordpress/wordpress-deployment.yaml" >}}
 
@@ -107,13 +107,13 @@ EOF
       ```shell
       curl -LO https://k8s.io/examples/application/wordpress/mysql-deployment.yaml
       ```
-            
+
 2. WordPress 구성 파일을 다운로드한다.
 
       ```shell
       curl -LO https://k8s.io/examples/application/wordpress/wordpress-deployment.yaml
       ```
-      
+
 3. 두 파일을 `kustomization.yaml`에 추가하자.
 
 ```shell
@@ -151,7 +151,7 @@ kubectl apply -k ./
       ```shell
       kubectl get pvc
       ```
-      
+
       {{< note >}}
       PV를 프로비저닝하고 정착(bound)시키는데 수 분이 걸릴 수 있다.
       {{< /note >}}
@@ -240,6 +240,3 @@ kubectl apply -k ./
 * [잡](/ko/docs/concepts/workloads/controllers/job/)를 알아보자.
 * [포트 포워딩](/ko/docs/tasks/access-application-cluster/port-forward-access-application-cluster/)를 알아보자.
 * 어떻게 [컨테이너에서 셸을 사용하는지](/docs/tasks/debug-application-cluster/get-shell-running-container/)를 알아보자.
-
-
-
diff --git a/content/ko/examples/application/job/redis/job.yaml b/content/ko/examples/application/job/redis/job.yaml
new file mode 100644
index 0000000000..ee7a06c732
--- /dev/null
+++ b/content/ko/examples/application/job/redis/job.yaml
@@ -0,0 +1,14 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: job-wq-2
+spec:
+  parallelism: 2
+  template:
+    metadata:
+      name: job-wq-2
+    spec:
+      containers:
+      - name: c
+        image: gcr.io/myproject/job-wq-2
+      restartPolicy: OnFailure
diff --git a/content/ko/examples/application/job/redis/worker.py b/content/ko/examples/application/job/redis/worker.py
new file mode 100644
index 0000000000..b8abbee917
--- /dev/null
+++ b/content/ko/examples/application/job/redis/worker.py
@@ -0,0 +1,23 @@
+#!/usr/bin/env python
+
+import time
+import rediswq
+
+host="redis"
+# Uncomment next two lines if you do not have Kube-DNS working.
+# import os
+# host = os.getenv("REDIS_SERVICE_HOST")
+
+q = rediswq.RedisWQ(name="job2", host="redis")
+print("Worker with sessionID: " +  q.sessionID())
+print("Initial queue state: empty=" + str(q.empty()))
+while not q.empty():
+  item = q.lease(lease_secs=10, block=True, timeout=2) 
+  if item is not None:
+    itemstr = item.decode("utf-8")
+    print("Working on " + itemstr)
+    time.sleep(10) # Put your actual work here instead of sleep.
+    q.complete(item)
+  else:
+    print("Waiting for work")
+print("Queue empty, exiting")
diff --git a/content/ko/examples/pods/storage/pv-claim.yaml b/content/ko/examples/pods/storage/pv-claim.yaml
new file mode 100644
index 0000000000..b33f6faa4c
--- /dev/null
+++ b/content/ko/examples/pods/storage/pv-claim.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: task-pv-claim
+spec:
+  storageClassName: manual
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 3Gi
diff --git a/content/ko/examples/pods/storage/pv-pod.yaml b/content/ko/examples/pods/storage/pv-pod.yaml
new file mode 100644
index 0000000000..a2eddcf088
--- /dev/null
+++ b/content/ko/examples/pods/storage/pv-pod.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: task-pv-pod
+spec:
+  volumes:
+    - name: task-pv-storage
+      persistentVolumeClaim:
+        claimName: task-pv-claim
+  containers:
+    - name: task-pv-container
+      image: nginx
+      ports:
+        - containerPort: 80
+          name: "http-server"
+      volumeMounts:
+        - mountPath: "/usr/share/nginx/html"
+          name: task-pv-storage
+
+
diff --git a/content/ko/examples/pods/storage/pv-volume.yaml b/content/ko/examples/pods/storage/pv-volume.yaml
new file mode 100644
index 0000000000..36fe3c5424
--- /dev/null
+++ b/content/ko/examples/pods/storage/pv-volume.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: task-pv-volume
+  labels:
+    type: local
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/mnt/data"

From d327117a505178d33d40fe6dfa5832a15c81c55d Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Fri, 25 Sep 2020 13:17:40 +0800
Subject: [PATCH 442/496] [zh] Fix go marker for listMapKey in the merge
 strategy

This is a follow-up of #24069.
---
 content/zh/docs/reference/using-api/api-concepts.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/using-api/api-concepts.md b/content/zh/docs/reference/using-api/api-concepts.md
index 6a3c4946df..c3b7f54fec 100644
--- a/content/zh/docs/reference/using-api/api-concepts.md
+++ b/content/zh/docs/reference/using-api/api-concepts.md
@@ -1172,14 +1172,14 @@ Kubernetes 1.16 和 1.17 中都添加了若干的标志（Markers），便于 AP
 | Golang marker | OpenAPI extension | Accepted values | Description | Introduced in |
 |----|----|----|----|----|
 | `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | Applicable to lists. `atomic` and `set` apply to lists with scalar elements only. `map` applies to lists of nested types only. If configured as `atomic`, the entire list is replaced during merge; a single manager manages the list as a whole at any one time. If `granular`, different managers can manage entries separately. | 1.16          |
-| `//+listMapKeys` | `x-kubernetes-list-map-keys` | Slice of map keys that uniquely identify entries for example `["port", "protocol"]` | Only applicable when `+listType=map`. A slice of strings whose values in combination must uniquely identify list entries. | 1.16 |
+| `//+listMapKey` | `x-kubernetes-list-map-keys` | Slice of map keys that uniquely identify entries for example `["port", "protocol"]` | Only applicable when `+listType=map`. A slice of strings whose values in combination must uniquely identify list entries. While there can be multiple keys, `listMapKey` is singular because keys need to be specified individually in the Go type. | 1.16 |
 | `//+mapType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to maps. `atomic` means that the map can only be entirely replaced by a single manager. `granular` means that the map supports separate managers updating individual fields. | 1.17 |
 | `//+structType` | `x-kubernetes-map-type` | `atomic`/`granular` | Applicable to structs; otherwise same usage and OpenAPI annotation as `//+mapType`.| 1.17 |
 -->
 | Golang 标志 | OpenAPI 扩展 | 可接受的值 | 描述 | 引入版本 |
 |---|---|---|---|---|
 | `//+listType` | `x-kubernetes-list-type` | `atomic`/`set`/`map` | 可应用到 list 类型。`atomic` 和 `set` 适用于仅包含标量的 list。`map` 适用于由内嵌类型组成的  list。如果配置为 `atomic`，则整个 list 会在合并时被替换掉；每次只会有一个管理器负责总体管理这个 list。如果配置为 `granular`，则不同的管理器可以分别管理不同的表项。 | 1.16  |
-| `//+listMapKeys` | `x-kubernetes-list-map-keys` | 由 map 主键构成的可唯一标识表项的切片，例如 `["port", "protocol"]` | 仅当标记了 `+listType=map` 时适用。切片中各个字符串对应的取值的组合必须能够唯一性地标识 list 中的表项。 | 1.16 |
+| `//+listMapKey` | `x-kubernetes-list-map-keys` | 由 map 主键构成的可唯一标识表项的切片，例如 `["port", "protocol"]` | 仅当标记了 `+listType=map` 时适用。切片中各个字符串对应的取值的组合必须能够唯一性地标识 list 中的表项。尽管主键可以有多个，由于在 Go 语言类型中每个键需要独立设置，这里的 `listMapKey` 是单数形式。 | 1.16 |
 | `//+mapType` | `x-kubernetes-map-type` | `atomic`/`granular` | 适用于 map 类型。`atomic` 意味着 map 只能被某管理器整体替换。`granular` 则意味着 map 支持使用不同管理器来更新不同字段。 | 1.17 |
 | `//+structType` | `x-kubernetes-map-type` | `atomic`/`granular` | 适用于 struct 类型。除此以外，其用法和 OpenAPI 注解都与 `//+mapType` 相同。 | 1.17 |
 

From df62ce146c828b03ece7f4b3dff1f5ad4fca0b4b Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Sun, 20 Sep 2020 20:38:53 +0800
Subject: [PATCH 443/496] [zh] add
 zh/docs/concepts/storage/ephemeral-volumes.md, fix 24011 make change
 according to tengqm's comment.

---
 .../concepts/storage/ephemeral-volumes.md     | 462 ++++++++++++++++++
 1 file changed, 462 insertions(+)
 create mode 100644 content/zh/docs/concepts/storage/ephemeral-volumes.md

diff --git a/content/zh/docs/concepts/storage/ephemeral-volumes.md b/content/zh/docs/concepts/storage/ephemeral-volumes.md
new file mode 100644
index 0000000000..ef325eeb79
--- /dev/null
+++ b/content/zh/docs/concepts/storage/ephemeral-volumes.md
@@ -0,0 +1,462 @@
+---
+title: 临时卷
+content_type: concept
+weight: 50
+---
+<!--
+reviewers:
+- jsafrane
+- saad-ali
+- msau42
+- xing-yang
+- pohly
+title: Ephemeral Volumes
+content_type: concept
+weight: 50
+-->
+
+<!-- overview -->
+
+<!--
+This document describes _ephemeral volumes_ in Kubernetes. Familiarity
+with [volumes](/docs/concepts/storage/volumes/) is suggested, in
+particular PersistentVolumeClaim and PersistentVolume.
+-->
+本文档描述 Kubernetes 中的 _临时卷（Ephemeral Volume）_。
+建议先了解[卷](/zh/docs/concepts/storage/volumes/)，特别是 PersistentVolumeClaim 和 PersistentVolume。
+
+<!-- body -->
+<!--
+Some application need additional storage but don't care whether that
+data is stored persistently across restarts. For example, caching
+services are often limited by memory size and can move infrequently
+used data into storage that is slower than memory with little impact
+on overall performance.
+-->
+有些应用程序需要额外的存储，但并不关心数据在重启后仍然可用，既是否被持久地保存。
+例如，缓存服务经常受限于内存大小，将不常用的数据转移到比内存慢、但对总体性能的影响很小的存储中。
+
+<!--
+Other applications expect some read-only input data to be present in
+files, like configuration data or secret keys.
+-->
+另有些应用程序需要以文件形式注入的只读数据，比如配置数据或密钥。
+
+<!--
+_Ephemeral volumes_ are designed for these use cases. Because volumes
+follow the Pod's lifetime and get created and deleted along with the
+Pod, Pods can be stopped and restarted without being limited to where
+some persistent volume is available.
+-->
+_临时卷_ 就是为此类用例设计的。因为卷会遵从 Pod 的生命周期，与 Pod 一起创建和删除，
+所以停止和重新启动 Pod 时，不会受持久卷在何处可用的限制。
+
+<!--
+Ephemeral volumes are specified _inline_ in the Pod spec, which
+simplifies application deployment and management.
+-->
+临时卷在 Pod 规范中以 _内联_ 方式定义，这简化了应用程序的部署和管理。
+
+<!--
+### Types of ephemeral volumes
+-->
+### 临时卷的类型 {#types-of-ephemeral-volumes}
+
+<!--
+Kubernetes supports several different kinds of ephemeral volumes for
+different purposes:
+- [emptyDir](/docs/concepts/storage/volumes/#emptydir): empty at Pod startup,
+  with storage coming locally from the kubelet base directory (usually
+  the root disk) or RAM
+- [configMap](/docs/concepts/storage/volumes/#configmap),
+  [downwardAPI](/docs/concepts/storage/volumes/#downwardapi),
+  [secret](/docs/concepts/storage/volumes/#secret): inject different
+  kinds of Kubernetes data into a Pod
+- [CSI ephemeral
+  volumes](docs/concepts/storage/volumes/#csi-ephemeral-volumes):
+  similar to the previous volume kinds, but provided by special [CSI
+  drivers](https://github.com/container-storage-interface/spec/blob/master/spec.md)
+  which specifically [support this feature](https://kubernetes-csi.github.io/docs/drivers.html)
+- [generic ephemeral volumes](#generic-ephemeral-volumes), which
+  can be provided by all storage drivers that also support persistent volumes
+-->
+Kubernetes 为了不同的目的，支持几种不同类型的临时卷：
+- [emptyDir](/zh/docs/concepts/storage/volumes/#emptydir)：
+  Pod 启动时为空，存储空间来自本地的 kubelet 根目录（通常是根磁盘）或内存
+- [configMap](/zh/docs/concepts/storage/volumes/#configmap)、
+  [downwardAPI](/zh/docs/concepts/storage/volumes/#downwardapi)、
+  [secret](/zh/docs/concepts/storage/volumes/#secret)：
+  将不同类型的 Kubernetes 数据注入到 Pod 中
+- [CSI 临时卷](/zh/docs/concepts/storage/volumes/#csi-ephemeral-volumes)：
+  类似于前面的卷类型，但由专门[支持此特性](https://kubernetes-csi.github.io/docs/drivers.html)
+  的指定
+  [CSI 驱动程序](https://github.com/container-storage-interface/spec/blob/master/spec.md)提供
+- [通用临时卷](#generic-ephemeral-volumes)：
+  它可以由所有支持持久卷的存储驱动程序提供
+
+<!--
+`emptyDir`, `configMap`, `downwardAPI`, `secret` are provided as
+[local ephemeral
+storage](/docs/concepts/configuration/manage-resources-containers/#local-ephemeral-storage).
+They are managed by kubelet on each node.
+
+CSI ephemeral volumes *must* be provided by third-party CSI storage
+drivers.
+-->
+`emptyDir`、`configMap`、`downwardAPI`、`secret` 是作为
+[本地临时存储](/zh/docs/concepts/configuration/manage-resources-containers/#local-ephemeral-storage)
+提供的。它们由各个节点上的 kubelet 管理。
+
+CSI 临时卷 *必须* 由第三方 CSI 存储驱动程序提供。
+
+<!--
+Generic ephemeral volumes *can* be provided by third-party CSI storage
+drivers, but also by any other storage driver that supports dynamic
+provisioning. Some CSI drivers are written specifically for CSI
+ephemeral volumes and do not support dynamic provisioning: those then
+cannot be used for generic ephemeral volumes.
+-->
+通用临时卷 *可以* 由第三方 CSI 存储驱动程序提供，也可以由支持动态配置的任何其他存储驱动程序提供。
+一些专门为 CSI 临时卷编写的 CSI 驱动程序，不支持动态供应：因此这些驱动程序不能用于通用临时卷。
+
+<!--
+The advantage of using third-party drivers is that they can offer
+functionality that Kubernetes itself does not support, for example
+storage with different performance characteristics than the disk that
+is managed by kubelet, or injecting different data.
+-->
+使用第三方驱动程序的优势在于，它们可以提供 Kubernetes 本身不支持的功能，
+例如，与 kubelet 管理的磁盘具有不同运行特征的存储，或者用来注入不同的数据
+
+<!--
+### CSI ephemeral volumes
+-->
+### CSI 临时卷 {#csi-ephemeral-volumes}
+{{< feature-state for_k8s_version="v1.16" state="beta" >}}
+
+<!--
+This feature requires the `CSIInlineVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be enabled. It
+is enabled by default starting with Kubernetes 1.16.
+
+CSI ephemeral volumes are only supported by a subset of CSI drivers.
+The Kubernetes CSI [Drivers list](https://kubernetes-csi.github.io/docs/drivers.html)
+shows which drivers support ephemeral volumes.
+-->
+该特性需要启用参数 `CSIInlineVolume` 
+[特性门控（feature gate）](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+该参数从 Kubernetes 1.16 开始默认启用。
+
+{{< note >}}
+只有一部分 CSI 驱动程序支持 CSI 临时卷。Kubernetes CSI 
+[驱动程序列表](https://kubernetes-csi.github.io/docs/drivers.html)
+显示了支持临时卷的驱动程序。
+{{< /note >}}
+
+<!--
+Conceptually, CSI ephemeral volumes are similar to `configMap`,
+`downwardAPI` and `secret` volume types: the storage is managed locally on each
+ node and is created together with other local resources after a Pod has been
+scheduled onto a node. Kubernetes has no concept of rescheduling Pods
+anymore at this stage. Volume creation has to be unlikely to fail,
+otherwise Pod startup gets stuck. In particular, [storage capacity
+aware Pod scheduling](/docs/concepts/storage-capacity/) is *not*
+supported for these volumes. They are currently also not covered by
+the storage resource usage limits of a Pod, because that is something
+that kubelet can only enforce for storage that it manages itself.
+
+
+Here's an example manifest for a Pod that uses CSI ephemeral storage:
+-->
+从概念上讲，CSI 临时卷类似于 `configMap`、`downwardAPI` 和 `secret` 类型的卷：
+其存储在每个节点本地管理，并在将 Pod 调度到节点后与其他本地资源一起创建。
+在这个阶段，Kubernetes 没有重新调度 Pods 的概念。卷创建不太可能失败，否则 Pod 启动将会受阻。
+特别是，这些卷 *不* 支持[感知存储容量的 Pod 调度](/zh/docs/concepts/storage/storage-capacity/)。
+它们目前也没包括在 Pod 的存储资源使用限制中，因为 kubelet 只能对它自己管理的存储强制执行。
+
+下面是使用 CSI 临时存储的 Pod 的示例清单：
+
+```yaml
+kind: Pod
+apiVersion: v1
+metadata:
+  name: my-csi-app
+spec:
+  containers:
+    - name: my-frontend
+      image: busybox
+      volumeMounts:
+      - mountPath: "/data"
+        name: my-csi-inline-vol
+      command: [ "sleep", "1000000" ]
+  volumes:
+    - name: my-csi-inline-vol
+      csi:
+        driver: inline.storage.kubernetes.io
+        volumeAttributes:
+          foo: bar
+```
+
+<!--
+The `volumeAttributes` determine what volume is prepared by the
+driver. These attributes are specific to each driver and not
+standardized. See the documentation of each CSI driver for further
+instructions.
+
+As a cluster administrator, you can use a [PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/) to control which CSI drivers can be used in a Pod, specified with the
+[`allowedCSIDrivers` field](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritypolicyspec-v1beta1-policy).
+-->
+`volumeAttributes` 决定驱动程序准备什么样的卷。这些属性特定于每个驱动程序，且没有实现标准化。
+有关进一步的说明，请参阅每个 CSI 驱动程序的文档。
+
+作为一个集群管理员，你可以使用 
+[PodSecurityPolicy](/zh/docs/concepts/policy/pod-security-policy/) 
+来控制在 Pod 中可以使用哪些 CSI 驱动程序，
+具体则是通过 [`allowedCSIDrivers` 字段](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#podsecuritypolicyspec-v1beta1-policy)
+指定。
+
+<!--
+### Generic ephemeral volumes
+-->
+### 通用临时卷 {#generic-ephemeral-volumes}
+
+{{< feature-state for_k8s_version="v1.19" state="alpha" >}}
+
+<!--
+This feature requires the `GenericEphemeralVolume` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) to be
+enabled. Because this is an alpha feature, it is disabled by default.
+-->
+这个特性需要启用 `GenericEphemeralVolume` 
+[特性门控](/zh/docs/reference/command-line-tools-reference/feature-gates/)。
+因为这是一个alpha特性，默认禁用。
+
+<!--
+Generic ephemeral volumes are similar to `emptyDir` volumes, just more
+flexible:
+- Storage can be local or network-attached.
+- Volumes can have a fixed size that Pods are not able to exceed.
+- Volumes may have some initial data, depending on the driver and
+  parameters.
+- Typical operations on volumes are supported assuming that the driver
+  supports them, including
+  ([snapshotting](/docs/concepts/storage/volume-snapshots/),
+  [cloning](/docs/concepts/storage/volume-pvc-datasource/),
+  [resizing](/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims),
+  and [storage capacity tracking](/docs/concepts/storage-capacity/).
+
+Example:
+-->
+通用临时卷类似于 `emptyDir` 卷，但更加灵活：
+- 存储可以是本地的，也可以是网络连接的。
+- 卷可以有固定的大小，pod不能超量使用。
+- 卷可能有一些初始数据，这取决于驱动程序和参数。
+- 当驱动程序支持，卷上的典型操作将被支持，包括（[快照](/zh/docs/concepts/storage/volume-snapshots/)、[克隆](/zh/docs/concepts/storage/volume-pvc-datasource/)、[调整大小](/zh/docs/concepts/storage/persistent-volumes/#expanding-persistent-volumes-claims)和[存储容量跟踪](/zh/docs/concepts/storage/storage-capacity/)）。
+
+示例：
+
+```yaml
+kind: Pod
+apiVersion: v1
+metadata:
+  name: my-app
+spec:
+  containers:
+    - name: my-frontend
+      image: busybox
+      volumeMounts:
+      - mountPath: "/scratch"
+        name: scratch-volume
+      command: [ "sleep", "1000000" ]
+  volumes:
+    - name: scratch-volume
+      ephemeral:
+        volumeClaimTemplate:
+          metadata:
+            labels:
+              type: my-frontend-volume
+          spec:
+            accessModes: [ "ReadWriteOnce" ]
+            storageClassName: "scratch-storage-class"
+            resources:
+              requests:
+                storage: 1Gi
+```
+
+<!--
+### Lifecycle and PersistentVolumeClaim
+-->
+### 生命周期和 PersistentVolumeClaim {#lifecycle-and-persistentvolumeclaim}
+
+<!--
+The key design idea is that the [parameters for a
+volume claim](/docs/reference/generated/kubernetes-api/#ephemeralvolumesource-v1alpha1-core)
+are allowed inside a volume source of the Pod. Labels, annotations and
+the whole set of fields for a PersistentVolumeClaim are supported. When such a Pod gets
+created, the ephemeral volume controller then creates an actual PersistentVolumeClaim
+object in the same namespace as the Pod and ensures that the PersistentVolumeClaim
+gets deleted when the Pod gets deleted.
+-->
+关键的设计思想是在 Pod 的卷来源中允许使用
+[卷申领的参数](/docs/reference/generated/kubernetes-api/#ephemeralvolumesource-v1alpha1-core)。
+PersistentVolumeClaim 的标签、注解和整套字段集均被支持。
+创建这样一个 Pod 后，
+临时卷控制器在 Pod 所属的命名空间中创建一个实际的 PersistentVolumeClaim 对象，
+并确保删除 Pod 时， 同步删除PersistentVolumeClaim 。
+
+<!--
+That triggers volume binding and/or provisioning, either immediately if
+the {{< glossary_tooltip text="StorageClass" term_id="storage-class" >}} uses immediate volume binding or when the Pod is
+tentatively scheduled onto a node (`WaitForFirstConsumer` volume
+binding mode). The latter is recommended for generic ephemeral volumes
+because then the scheduler is free to choose a suitable node for
+the Pod. With immediate binding, the scheduler is forced to select a node that has
+access to the volume once it is available.
+-->
+如上设置将触发卷的绑定与/或准备操作，相应动作或者在 
+{{< glossary_tooltip text="StorageClass" term_id="storage-class" >}} 
+使用即时卷绑定时立即执行，
+或者当 Pod 被暂时性调度到某节点时执行 (`WaitForFirstConsumer` 卷绑定模式)。
+对于常见的临时卷，建议采用后者，这样调度器就可以自由地为 Pod 选择合适的节点。
+对于即时绑定，调度器则必须选出一个节点，使得在卷可用时，能立即访问该卷。
+
+<!--
+In terms of [resource ownership](/docs/concepts/workloads/controllers/garbage-collection/#owners-and-dependents),
+a Pod that has generic ephemeral storage is the owner of the PersistentVolumeClaim(s)
+that provide that ephemeral storage. When the Pod is deleted,
+the Kubernetes garbage collector deletes the PVC, which then usually
+triggers deletion of the volume because the default reclaim policy of
+storage classes is to delete volumes. You can create quasi-ephemeral local storage
+using a StorageClass with a reclaim policy of `retain`: the storage outlives the Pod, 
+and in this case you need to ensure that volume clean up happens separately.
+-->
+就[资源所有权](/zh/docs/concepts/workloads/controllers/garbage-collection/#owners-and-dependents)而言，
+拥有通用临时存储的 Pod 是提供临时存储 (ephemeral storage) 的 PersistentVolumeClaim 的所有者。
+当 Pod 被删除时，Kubernetes 垃圾收集器会删除 PVC，
+然后 PVC 通常会触发卷的删除，因为存储类的默认回收策略是删除卷。
+你可以使用带有 `retain` 回收策略的 StorageClass 创建准临时 (quasi-ephemeral) 本地存储：
+该存储比 Pod 寿命长，在这种情况下，你需要确保单独进行卷清理。
+
+<!--
+While these PVCs exist, they can be used like any other PVC. In
+particular, they can be referenced as data source in volume cloning or
+snapshotting. The PVC object also holds the current status of the
+volume.
+-->
+当这些 PVC 存在时，它们可以像其他 PVC 一样使用。
+特别是，它们可以被引用作为批量克隆或快照的数据源。
+PVC对象还保持着卷的当前状态。
+
+<!--
+### PersistentVolumeClaim naming
+-->
+### PersistentVolumeClaim 的命名 {#persistentvolumeclaim-naming}
+
+<!--
+Naming of the automatically created PVCs is deterministic: the name is
+a combination of Pod name and volume name, with a hyphen (`-`) in the
+middle. In the example above, the PVC name will be
+`my-app-scratch-volume`.  This deterministic naming makes it easier to
+interact with the PVC because one does not have to search for it once
+the Pod name and volume name are known.
+-->
+自动创建的 PVCs 的命名是确定的：此名称是 Pod 名称和卷名称的组合，中间由连字符(`-`)连接。
+在上面的示例中，PVC 将命名为 `my-app-scratch-volume` 。
+这种确定性命名方式使得与 PVC 交互变得更容易，因为一旦知道 Pod 名称和卷名，就不必搜索它。
+
+<!--
+The deterministic naming also introduces a potential conflict between different
+Pods (a Pod "pod-a" with volume "scratch" and another Pod with name
+"pod" and volume "a-scratch" both end up with the same PVC name
+"pod-a-scratch") and between Pods and manually created PVCs.
+-->
+这种确定性命名方式也引入了潜在的冲突，
+比如在不同的 Pod 之间（名为 “Pod-a” 的 Pod 挂载名为 "scratch" 的卷，
+名为 "pod" 的 Pod 挂载名为 “a-scratch” 的卷，这两者均会生成名为 "pod-a-scratch" 的PVC），
+或者在 Pod 和手工创建的 PVC 之间。
+
+<!--
+Such conflicts are detected: a PVC is only used for an ephemeral
+volume if it was created for the Pod. This check is based on the
+ownership relationship. An existing PVC is not overwritten or
+modified. But this does not resolve the conflict because without the
+right PVC, the Pod cannot start.
+-->
+以下冲突会被检测到：如果 PVC 是为 Pod 创建的，那么它只用于临时卷。
+此检测基于所有权关系。现有的 PVC 不会被覆盖或修改。
+但这并不能解决冲突，因为如果没有正确的 PVC，Pod 就无法启动。
+
+<!--
+Take care when naming Pods and volumes inside the
+same namespace, so that these conflicts can't occur.
+-->
+{{< caution >}}
+当命名 Pods 和卷出现在同一个命名空间中时，要小心，以防止发生此类冲突。
+{{< /caution >}}
+
+<!--
+### Security
+-->
+### 安全 {#security}
+
+<!--
+Enabling the GenericEphemeralVolume feature allows users to create
+PVCs indirectly if they can create Pods, even if they do not have
+permission to create PVCs directly. Cluster administrators must be
+aware of this. If this does not fit their security model, they have
+two choices:
+-->
+启用 GenericEphemeralVolume 特性会导致那些没有 PVCs 创建权限的用户，
+在创建 Pods 时，被允许间接的创建 PVCs。
+集群管理员必须意识到这一点。
+如果这不符合他们的安全模型，他们有两种选择：
+<!--
+- Explicitly disable the feature through the feature gate, to avoid
+  being surprised when some future Kubernetes version enables it
+  by default.
+- Use a [Pod Security
+  Policy](/docs/concepts/policy/pod-security-policy/) where the
+  `volumes` list does not contain the `ephemeral` volume type.
+-->
+- 通过特性门控显式禁用该特性，可以避免将来的 Kubernetes 版本默认启用时带来混乱。
+- 当`卷`列表不包含 `ephemeral` 卷类型时，使用 [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)。
+
+<!--
+The normal namespace quota for PVCs in a namespace still applies, so
+even if users are allowed to use this new mechanism, they cannot use
+it to circumvent other policies.
+-->
+在一个命名空间中，用于 PVCs 的常规命名空间配额仍然适用，
+因此即使允许用户使用这种新机制，他们也不能使用它来规避其他策略。
+
+## {{% heading "whatsnext" %}}
+
+<!--
+### Ephemeral volumes managed by kubelet
+
+See [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/#local-ephemeral-storage).
+-->
+### kubelet 管理的临时卷 {#ephemeral-volumes-managed-by-kubelet}
+参阅[本地临时存储](/zh/docs/concepts/configuration/manage-resources-containers/#local-ephemeral-storage)。
+
+<!--
+### CSI ephemeral volumes
+
+- For more information on the design, see the [Ephemeral Inline CSI
+  volumes KEP](https://github.com/kubernetes/enhancements/blob/ad6021b3d61a49040a3f835e12c8bb5424db2bbb/keps/sig-storage/20190122-csi-inline-volumes.md).
+- For more information on further development of this feature, see the [enhancement tracking issue #596](https://github.com/kubernetes/enhancements/issues/596).
+-->
+### CSI 临时卷 {#csi-ephemeral-volumes}
+
+- 有关设计的更多信息，参阅 [Ephemeral Inline CSI
+  volumes KEP](https://github.com/kubernetes/enhancements/blob/ad6021b3d61a49040a3f835e12c8bb5424db2bbb/keps/sig-storage/20190122-csi-inline-volumes.md)。
+- 本特性下一步开发的更多信息，参阅 [enhancement tracking issue #596](https://github.com/kubernetes/enhancements/issues/596)。
+
+<!--
+### Generic ephemeral volumes
+
+- For more information on the design, see the
+[Generic ephemeral inline volumes KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/1698-generic-ephemeral-volumes/README.md).
+- For more information on further development of this feature, see the [enhancement tracking issue #1698](https://github.com/kubernetes/enhancements/issues/1698).
+-->
+### 通用临时卷 {#generic-ephemeral-volumes}
+- 有关设计的更多信息，参阅 [Generic ephemeral inline volumes KEP](https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/1698-generic-ephemeral-volumes/README.md)。
+- 本特性下一步开发的更多信息，参阅 [enhancement tracking issue #1698](https://github.com/kubernetes/enhancements/issues/1698).
\ No newline at end of file

From 09d3244e659814c146f70835f47346187119f235 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Thu, 24 Sep 2020 17:27:04 +0800
Subject: [PATCH 444/496] [zh] add
 page:/zh/docs/tasks/administer-cluster/safely-drain-node/ ,fix 24097 change
 according to tengqm's comment

---
 .../administer-cluster/safely-drain-node.md   | 268 ++++++++++++++++++
 1 file changed, 268 insertions(+)
 create mode 100644 content/zh/docs/tasks/administer-cluster/safely-drain-node.md

diff --git a/content/zh/docs/tasks/administer-cluster/safely-drain-node.md b/content/zh/docs/tasks/administer-cluster/safely-drain-node.md
new file mode 100644
index 0000000000..913067f642
--- /dev/null
+++ b/content/zh/docs/tasks/administer-cluster/safely-drain-node.md
@@ -0,0 +1,268 @@
+---
+title: 确保 PodDisruptionBudget 的前提下安全地清空一个节点
+content_type: task
+---
+<!-- 
+reviewers:
+- davidopp
+- mml
+- foxish
+- kow3ns
+title: Safely Drain a Node while Respecting the PodDisruptionBudget
+content_type: task
+-->
+
+<!-- overview -->
+<!-- 
+This page shows how to safely drain a node, respecting the PodDisruptionBudget you have defined.
+ -->
+本页展示了如何在确保 PodDisruptionBudget 的前提下，安全地清空一个节点。
+
+## {{% heading "prerequisites" %}}
+
+<!-- 
+This task assumes that you have met the following prerequisites:
+
+* You are using Kubernetes release >= 1.5.
+* Either:
+  1. You do not require your applications to be highly available during the
+     node drain, or
+  1. You have read about the [PodDisruptionBudget concept](/docs/concepts/workloads/pods/disruptions/)
+     and [Configured PodDisruptionBudgets](/docs/tasks/run-application/configure-pdb/) for
+     applications that need them.
+-->
+此任务假设您已经满足以下先决条件：
+
+* 使用的 Kubernetes 版本 >= 1.5。
+* 以下两项，具备其一：
+  1. 在节点清空期间，不要求应用程序具有高可用性
+  1. 你已经了解了 [PodDisruptionBudget 的概念](/zh/docs/concepts/workloads/pods/disruptions/)，并为需要它的应用程序[配置了 PodDisruptionBudget](/zh/docs/tasks/run-application/configure-pdb/)。
+
+<!-- steps -->
+
+<!-- 
+## Use `kubectl drain` to remove a node from service
+
+You can use `kubectl drain` to safely evict all of your pods from a
+node before you perform maintenance on the node (e.g. kernel upgrade,
+hardware maintenance, etc.). Safe evictions allow the pod's containers
+to [gracefully terminate](/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)
+and will respect the `PodDisruptionBudgets` you have specified.
+-->
+## 使用 `kubectl drain` 从服务中删除一个节点 {#use-kubectl-drain-to-remove-a-node-from-service}
+
+在对节点执行维护（例如内核升级、硬件维护等）之前，
+可以使用 `kubectl drain` 从节点安全地逐出所有 Pods。
+安全的驱逐过程允许 Pod 的容器
+[体面地终止](/zh/docs/concepts/workloads/pods/pod-lifecycle/#pod-termination)，
+并确保满足指定的 `PodDisruptionBudgets` 。
+
+<!-- 
+By default `kubectl drain` will ignore certain system pods on the node
+that cannot be killed; see
+the [kubectl drain](/docs/reference/generated/kubectl/kubectl-commands/#drain)
+documentation for more details.
+-->
+{{< note >}}
+默认情况下， `kubectl drain` 将忽略节点上不能杀死的特定系统 Pod；
+有关更多细节，请参阅
+[kubectl drain](/docs/reference/generated/kubectl/kubectl-commands/#drain) 文档。
+{{< /note >}}
+
+<!-- 
+When `kubectl drain` returns successfully, that indicates that all of
+the pods (except the ones excluded as described in the previous paragraph)
+have been safely evicted (respecting the desired graceful termination period,
+and respecting the PodDisruptionBudget you have defined). It is then safe to
+bring down the node by powering down its physical machine or, if running on a
+cloud platform, deleting its virtual machine.
+
+First, identify the name of the node you wish to drain. You can list all of the nodes in your cluster with
+-->
+`kubectl drain` 的成功返回，表明所有的 Pods（除了上一段中描述的被排除的那些），
+已经被安全地逐出（考虑到期望的终止宽限期和你定义的 PodDisruptionBudget）。
+然后就可以安全地关闭节点，
+比如关闭物理机器的电源，如果它运行在云平台上，则删除它的虚拟机。
+
+```shell
+kubectl get nodes
+```
+
+<!-- 
+Next, tell Kubernetes to drain the node:
+-->
+接下来，告诉 Kubernetes 清空节点：
+
+```shell
+kubectl drain <node name>
+```
+
+<!-- 
+Once it returns (without giving an error), you can power down the node
+(or equivalently, if on a cloud platform, delete the virtual machine backing the node).
+If you leave the node in the cluster during the maintenance operation, you need to run
+-->
+一旦它返回（没有报错），
+你就可以下电此节点（或者等价地，如果在云平台上，删除支持该节点的虚拟机）。
+如果要在维护操作期间将节点留在集群中，则需要运行：
+
+```shell
+kubectl uncordon <node name>
+```
+<!-- 
+afterwards to tell Kubernetes that it can resume scheduling new pods onto the node.
+-->
+然后告诉 Kubernetes，它可以继续在此节点上调度新的 Pods。
+
+<!-- 
+## Draining multiple nodes in parallel
+
+The `kubectl drain` command should only be issued to a single node at a
+time. However, you can run multiple `kubectl drain` commands for
+different nodes in parallel, in different terminals or in the
+background. Multiple drain commands running concurrently will still
+respect the `PodDisruptionBudget` you specify.
+-->
+## 并行清空多个节点  {#draining-multiple-nodes-in-parallel}
+
+ `kubectl drain` 命令一次只能发送给一个节点。
+ 但是，你可以在不同的终端或后台为不同的节点并行地运行多个 `kubectl drain` 命令。
+ 同时运行的多个 drain 命令仍然遵循你指定的 `PodDisruptionBudget` 。
+
+<!-- 
+For example, if you have a StatefulSet with three replicas and have
+set a `PodDisruptionBudget` for that set specifying `minAvailable:
+2`. `kubectl drain` will only evict a pod from the StatefulSet if all
+three pods are ready, and if you issue multiple drain commands in
+parallel, Kubernetes will respect the PodDisruptionBudget and ensure
+that only one pod is unavailable at any given time. Any drains that
+would cause the number of ready replicas to fall below the specified
+budget are blocked.
+-->
+例如，如果你有一个三副本的 StatefulSet，
+并设置了一个 `PodDisruptionBudget`，指定 `minAvailable: 2`。
+如果所有的三个 Pod 均就绪，并且你并行地发出多个 drain 命令，
+那么 `kubectl drain` 只会从 StatefulSet 中逐出一个 Pod，
+因为 Kubernetes 会遵守 PodDisruptionBudget 并确保在任何时候只有一个 Pod 不可用。
+任何会导致就绪副本数量低于指定预算的清空操作都将被阻止。
+
+<!-- 
+## The Eviction API
+
+If you prefer not to use [kubectl drain](/docs/reference/generated/kubectl/kubectl-commands/#drain) (such as
+to avoid calling to an external command, or to get finer control over the pod
+eviction process), you can also programmatically cause evictions using the eviction API.
+-->
+## 驱逐 API {#the-eviction-api}
+如果你不喜欢使用
+[kubectl drain](/zh/docs/reference/generated/kubectl/kubectl-commands/#drain)
+（比如避免调用外部命令，或者更细化地控制 pod 驱逐过程），
+你也可以用驱逐 API 通过编程的方式达到驱逐的效果。
+
+<!-- 
+You should first be familiar with using [Kubernetes language clients](/docs/tasks/administer-cluster/access-cluster-api/#programmatic-access-to-the-api).
+
+The eviction subresource of a
+pod can be thought of as a kind of policy-controlled DELETE operation on the pod
+itself. To attempt an eviction (perhaps more REST-precisely, to attempt to
+*create* an eviction), you POST an attempted operation. Here's an example:
+-->
+首先应该熟悉使用 
+[Kubernetes 语言客户端](/zh/docs/tasks/administer-cluster/access-cluster-api/#programmatic-access-to-the-api)。
+
+Pod 的 Eviction 子资源可以看作是一种策略控制的 DELETE 操作，作用于 Pod 本身。
+要尝试驱逐（更准确地说，尝试 *创建* 一个 Eviction），需要用 POST 发出所尝试的操作。这里有一个例子：
+
+```json
+{
+  "apiVersion": "policy/v1beta1",
+  "kind": "Eviction",
+  "metadata": {
+    "name": "quux",
+    "namespace": "default"
+  }
+}
+```
+
+<!-- 
+You can attempt an eviction using `curl`:
+-->
+你可以使用 `curl` 尝试驱逐：
+
+```bash
+curl -v -H 'Content-type: application/json' http://127.0.0.1:8080/api/v1/namespaces/default/pods/quux/eviction -d @eviction.json
+```
+
+<!-- 
+The API can respond in one of three ways:
+
+- If the eviction is granted, then the pod is deleted just as if you had sent
+  a `DELETE` request to the pod's URL and you get back `200 OK`.
+- If the current state of affairs wouldn't allow an eviction by the rules set
+  forth in the budget, you get back `429 Too Many Requests`. This is
+  typically used for generic rate limiting of *any* requests, but here we mean
+  that this request isn't allowed *right now* but it may be allowed later.
+  Currently, callers do not get any `Retry-After` advice, but they may in
+  future versions.
+- If there is some kind of misconfiguration, like multiple budgets pointing at
+  the same pod, you will get `500 Internal Server Error`.
+-->
+API可以通过以下三种方式之一进行响应：
+
+- 如果驱逐被授权，那么 Pod 将被删掉，并且你会收到 `200 OK`，
+  就像你向 Pod 的 URL 发送了 `DELETE` 请求一样。
+- 如果按照预算中规定，目前的情况不允许的驱逐，你会收到 `429 Too Many Requests`。
+  这通常用于对 *一些* 请求进行通用速率限制，
+  但这里我们的意思是：此请求 *现在* 不允许，但以后可能会允许。
+  目前，调用者不会得到任何 `Retry-After` 的提示，但在将来的版本中可能会得到。
+- 如果有一些错误的配置，比如多个预算指向同一个 Pod，你将得到 `500 Internal Server Error`。
+
+<!-- 
+For a given eviction request, there are two cases:
+
+- There is no budget that matches this pod. In this case, the server always
+  returns `200 OK`.
+- There is at least one budget. In this case, any of the three above responses may
+ apply.
+-->
+对于一个给定的驱逐请求，有两种情况：
+
+- 没有匹配这个 Pod 的预算。这种情况，服务器总是返回 `200 OK`。
+- 至少匹配一个预算。在这种情况下，上述三种回答中的任何一种都可能适用。
+
+<!-- 
+In some cases, an application may reach a broken state where it will never return anything
+other than 429 or 500. This can happen, for example, if the replacement pod created by the
+application's controller does not become ready, or if the last pod evicted has a very long
+termination grace period.
+
+In this case, there are two potential solutions:
+
+- Abort or pause the automated operation. Investigate the reason for the stuck application, and restart the automation.
+- After a suitably long wait, `DELETE` the pod instead of using the eviction API.
+
+Kubernetes does not specify what the behavior should be in this case; it is up to the
+application owners and cluster owners to establish an agreement on behavior in these cases.
+-->
+在某些情况下，应用程序可能会到达一个中断状态，除了 429 或 500 之外，它将永远不会返回任何内容。
+例如应用程序控制器创建的替换 Pod 没有准备好，或者被驱逐的最后一个 Pod 有很长的终止宽限期，就会发生这种情况。
+
+在这种情况下，有两种可能的解决方案：
+
+- 中止或暂停自动操作。调查应用程序卡住的原因，并重新启动自动化。
+- 经过适当的长时间等待后， `DELETE` Pod，而不是使用驱逐 API。
+
+Kubernetes 并没有具体说明在这种情况下应该采取什么行为；
+这应该由应用程序所有者和集群所有者紧密沟通，并达成对行动一致意见。
+
+## {{% heading "whatsnext" %}}
+
+
+<!-- 
+* Follow steps to protect your application by [configuring a Pod Disruption Budget](/docs/tasks/run-application/configure-pdb/).
+* Learn more about [maintenance on a node](/docs/tasks/administer-cluster/cluster-management/#maintenance-on-a-node).
+-->
+* 跟随以下步骤保护应用程序：[配置 Pod 中断预算](/zh/docs/tasks/run-application/configure-pdb/)。
+* 进一步了解[节点维护](/zh/docs/tasks/administer-cluster/cluster-management/#maintenance-on-a-node)。
+
+

From 19259e21b7771488567445c6d6e8c2348bccd270 Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Fri, 25 Sep 2020 18:06:37 +0800
Subject: [PATCH 445/496] fix abnormal display of anchor points

---
 .../admission-controllers.md                  | 30 ++++++++++++-------
 1 file changed, 20 insertions(+), 10 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index 93be72db24..fbd563f9c3 100644
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -178,7 +178,8 @@ This admission controller allows all pods into the cluster. It is deprecated bec
 
 ## 每个准入控制器的作用是什么？
 
-### AlwaysAdmit {#alwaysadmit} {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+### AlwaysAdmit {#alwaysadmit} 
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
 
 该准入控制器会允许所有的 pod 接入集群。已废弃，因为它的行为根本就和没有准入控制器一样。
 
@@ -198,7 +199,8 @@ required.
 如果没有这个准入控制器，一旦镜像被拉取到节点上，任何用户的 pod 都可以通过已了解到的镜像的名称（假设 pod 被调度到正确的节点上）来使用它，而不需要对镜像进行任何授权检查。
 当启用这个准入控制器时，总是在启动容器之前拉取镜像，这意味着需要有效的凭证。
 
-### AlwaysDeny {#alwaysdeny} {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+### AlwaysDeny {#alwaysdeny} 
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
 
 <!--
 Rejects all requests. AlwaysDeny is DEPRECATED as no real meaning.
@@ -245,7 +247,8 @@ if the pods don't already have toleration for taints
 
 该准入控制器为 Pod 设置默认的容忍度，在 5 分钟内容忍 `notready:NoExecute` 和 `unreachable:NoExecute` 污点。（如果 Pod 尚未容忍 `node.kubernetes.io/not-ready：NoExecute` 和 `node.alpha.kubernetes.io/unreachable：NoExecute` 污点的话）
 
-### DenyExecOnPrivileged {#denyexeconprivileged} {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+### DenyExecOnPrivileged {#denyexeconprivileged} 
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
 
 <!--
 This admission controller will intercept all requests to exec a command in a pod if that pod has a privileged container.
@@ -269,7 +272,8 @@ is recommended instead.
 建议使用基于策略的准入插件（例如 [PodSecurityPolicy](#podsecuritypolicy) 和自定义准入插件），
 该插件可以针对特定用户或命名空间，还可以防止创建权限过高的 Pod。
 
-### DenyEscalatingExec {#denyescalatingexec} {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+### DenyEscalatingExec {#denyescalatingexec} 
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
 
 <!--
 This admission controller will deny exec and attach commands to pods that run with escalated privileges that
@@ -292,7 +296,8 @@ DenyExecOnPrivileged 准入插件已被废弃，并将在 v1.18 被移除。
 建议使用基于策略的准入插件（例如 [PodSecurityPolicy](#podsecuritypolicy) 和自定义准入插件），
 该插件可以针对特定用户或命名空间，还可以防止创建权限过高的 Pod。
 
-### EventRateLimit {#eventratelimit} {{< feature-state for_k8s_version="v1.13" state="alpha" >}}
+### EventRateLimit {#eventratelimit} 
+{{< feature-state for_k8s_version="v1.13" state="alpha" >}}
 
 <!--
 This admission controller mitigates the problem where the API server gets flooded by
@@ -685,7 +690,8 @@ See the [limitRange design doc](https://git.k8s.io/community/contributors/design
 
 请查看 [limitRange 设计文档](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_limit_range.md) 和 [Limit Range 例子](/docs/tasks/configure-pod-container/limit-range/)了解更多细节。
 
-### MutatingAdmissionWebhook {#mutatingadmissionwebhook} {{< feature-state for_k8s_version="v1.13" state="beta" >}}
+### MutatingAdmissionWebhook {#mutatingadmissionwebhook} 
+{{< feature-state for_k8s_version="v1.13" state="beta" >}}
 
 <!--
 This admission controller calls any mutating webhooks which match the request. Matching
@@ -836,7 +842,8 @@ subresource of the referenced *owner* can change it.
 
 该准入控制器保护对 `metadata.ownerReferences` 对象的访问，以便只有对该对象具有 “删除” 权限的用户才能对其进行更改。该准入控制器还保护对 `metadata.ownerReferences[x].blockOwnerDeletion` 对象的访问，以便只有对所引用的 **属主（owner）** 的 `finalizers` 子资源具有 “更新” 权限的用户才能对其进行更改。
 
-### PersistentVolumeLabel {#persistentvolumelabel} {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
+### PersistentVolumeLabel {#persistentvolumelabel} 
+{{< feature-state for_k8s_version="v1.13" state="deprecated" >}}
 
 <!--
 This admission controller automatically attaches region or zone labels to PersistentVolumes
@@ -1107,7 +1114,8 @@ See also [Pod Overhead](/docs/concepts/configuration/pod-overhead/)
 for more information.
 -->
 
-### 容器运行时类 {#runtimeclass} {{< feature-state for_k8s_version="v1.16" state="alpha" >}}
+### 容器运行时类 {#runtimeclass} 
+{{< feature-state for_k8s_version="v1.16" state="alpha" >}}
 
 [容器运行时类](/docs/concepts/containers/runtime-class/)定义描述了与运行 Pod 相关的开销。此准入控制器将相应地设置 pod.Spec.Overhead 字段。
 
@@ -1137,7 +1145,8 @@ The `StorageObjectInUseProtection` plugin adds the `kubernetes.io/pvc-protection
 -->
 `StorageObjectInUseProtection` 插件将 `kubernetes.io/pvc-protection` 或 `kubernetes.io/pv-protection` finalizers 添加到新创建的持久化卷声明（PVC）或持久化卷（PV）中。 如果用户尝试删除 PVC/PV，除非 PVC/PV 的保护控制器移除 finalizers，否则 PVC/PV 不会被删除。有关更多详细信息，请参考[保护使用中的存储对象](/docs/concepts/storage/persistent-volumes/#storage-object-in-use-protection)。
 
-### TaintNodesByCondition {#taintnodesbycondition} {{< feature-state for_k8s_version="v1.12" state="beta" >}}
+### TaintNodesByCondition {#taintnodesbycondition} 
+{{< feature-state for_k8s_version="v1.12" state="beta" >}}
 
 <!--
 This admission controller {{< glossary_tooltip text="taints" term_id="taint" >}} newly created Nodes as `NotReady` and `NoSchedule`. That tainting avoids a race condition that could cause Pods to be scheduled on new Nodes before their taints were updated to accurately reflect their reported conditions.
@@ -1145,7 +1154,8 @@ This admission controller {{< glossary_tooltip text="taints" term_id="taint" >}}
 该准入控制器 {{< glossary_tooltip text="污点" term_id="taint" >}} 新创建的 `NotReady` 和 `NoSchedule` 节点。
 避免了可能导致 Pod 在更新其污点以准确反映其所报告状况之前，就安排了在新节点上的竞争条件的情况。
 
-### ValidatingAdmissionWebhook {#validatingadmissionwebhook} {{< feature-state for_k8s_version="v1.13" state="beta" >}}
+### ValidatingAdmissionWebhook {#validatingadmissionwebhook} 
+{{< feature-state for_k8s_version="v1.13" state="beta" >}}
 
 <!--
 This admission controller calls any validating webhooks which match the request. Matching

From 65e706e346851559519eedf0e83d65befd322926 Mon Sep 17 00:00:00 2001
From: Alain De Carolis <6162075+adecarolis@users.noreply.github.com>
Date: Fri, 25 Sep 2020 18:01:21 -0400
Subject: [PATCH 446/496] add  signerName to CertificateSigningRequest

signerName is now mandatory. The provided example fails in 1.19.2 with: `kubernetes missing required field "signerName"`
---
 .../reference/access-authn-authz/certificate-signing-requests.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
index b255aec0d4..0ed039f40e 100644
--- a/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+++ b/content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
@@ -252,6 +252,7 @@ spec:
   groups:
   - system:authenticated
   request: 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
+  signerName: kubernetes.io/kube-apiserver-client
   usages:
   - client auth
 EOF

From 318d17b85fbe851626d14e7267e7f1c14b042856 Mon Sep 17 00:00:00 2001
From: Yecheng Fu <cofyc.jackson@gmail.com>
Date: Tue, 4 Aug 2020 14:19:28 +0800
Subject: [PATCH 447/496] add pre-binding section

---
 .../concepts/storage/persistent-volumes.md    | 39 +++++++++++++++++++
 1 file changed, 39 insertions(+)

diff --git a/content/en/docs/concepts/storage/persistent-volumes.md b/content/en/docs/concepts/storage/persistent-volumes.md
index 8c2ad3ddb1..9fb9fdae45 100644
--- a/content/en/docs/concepts/storage/persistent-volumes.md
+++ b/content/en/docs/concepts/storage/persistent-volumes.md
@@ -174,6 +174,45 @@ spec:
 
 However, the particular path specified in the custom recycler Pod template in the `volumes` part is replaced with the particular path of the volume that is being recycled.
 
+### Reserving a PersistentVolume
+
+The control plane can [bind PersistentVolumeClaims to matching PersistentVolumes](#binding) in the
+cluster. However, if you want a PVC to bind to a specific PV, you need to pre-bind them.
+
+By specifying a PersistentVolume in a PersistentVolumeClaim, you declare a binding between that specific PV and PVC.
+If the PersistentVolume exists and has not reserved PersistentVolumeClaims through its `claimRef` field, then the PersistentVolume and PersistentVolumeClaim will be bound.
+
+The binding happens regardless of some volume matching criteria, including node affinity.
+The control plane still checks that [storage class](https://kubernetes.io/docs/concepts/storage/storage-classes/), access modes, and requested storage size are valid.
+
+```
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: foo-pvc
+  namespace: foo
+spec:
+  volumeName: foo-pv
+  ...
+```
+
+This method does not guarantee any binding privileges to the PersistentVolume. If other PersistentVolumeClaims could use the PV that you specify, you first need to reserve that storage volume. Specify the relevant PersistentVolumeClaim in the `claimRef` field of the PV so that other PVCs can not bind to it.
+
+```
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: foo-pv
+spec:
+  claimRef:
+    name: foo-pvc
+    namespace: foo
+  ...
+```
+
+This is useful if you want to consume PersistentVolumes that have their `claimPolicy` set
+to `Retain`, including cases where you are reusing an existing PV.
+
 ### Expanding Persistent Volumes Claims
 
 {{< feature-state for_k8s_version="v1.11" state="beta" >}}

From a8542542a926b0fec6557e9e16fc4e1294acefbf Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sat, 26 Sep 2020 19:37:56 -0700
Subject: [PATCH 448/496] Update more links

---
 .../docs/reference/access-authn-authz/abac.md |  13 +-
 .../admission-controllers.md                  |  36 +++---
 .../access-authn-authz/authentication.md      |  13 +-
 .../access-authn-authz/authorization.md       |  24 ++--
 .../access-authn-authz/bootstrap-tokens.md    |   4 +-
 .../access-authn-authz/controlling-access.md  |  10 +-
 .../extensible-admission-controllers.md       |  24 ++--
 .../docs/reference/access-authn-authz/node.md | 121 +++++++++---------
 .../docs/reference/access-authn-authz/rbac.md |  28 ++--
 .../service-accounts-admin.md                 |   4 +-
 .../reference/access-authn-authz/webhook.md   |  96 +++++++-------
 11 files changed, 179 insertions(+), 194 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/abac.md b/content/zh/docs/reference/access-authn-authz/abac.md
index 7274053412..789e1cd3db 100644
--- a/content/zh/docs/reference/access-authn-authz/abac.md
+++ b/content/zh/docs/reference/access-authn-authz/abac.md
@@ -63,7 +63,7 @@ properties:
     - Non-resource-matching properties:
       - `nonResourcePath`, type string; non-resource request paths.
         - Ex: `/version` or `/apis`
-        - Wildcard: 
+        - Wildcard:
           - `*` matches all non-resource requests.
           - `/foo/*` matches all subpaths of `/foo/`.
     - `readonly`, type boolean, when true, means that the Resource-matching policy only applies to get, list, and watch operations, Non-resource-matching policy only applies to get operation.
@@ -73,7 +73,7 @@ properties:
 
 基于 `ABAC` 模式，可以这样指定策略文件 `--authorization-policy-file=SOME_FILENAME`。
 
-此文件格式是 [JSON Lines](http://jsonlines.org/)，不应存在封闭的列表或映射，每行一个映射。
+此文件格式是 [JSON Lines](https://jsonlines.org/)，不应存在封闭的列表或映射，每行一个映射。
 
 每一行都是一个策略对象，策略对象是具有以下属性的映射：
 
@@ -213,7 +213,7 @@ Kubectl 使用 api-server 的 `/api` 和 `/apis` 端点来发现服务资源类
     {"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user": "kubelet", "namespace": "*", "resource": "events"}}
     ```
  -->
- 
+
 ## 例子 {#examples}
 
 1. Alice 可以对所有资源做任何事情：
@@ -270,7 +270,7 @@ system:serviceaccount:<namespace>:<serviceaccountname>
 
 -->
 
-[完整文件示例](http://releases.k8s.io/{{< param "githubbranch" >}}/pkg/auth/authorizer/abac/example_policy_file.jsonl)
+[完整文件示例](https://releases.k8s.io/{{< param "githubbranch" >}}/pkg/auth/authorizer/abac/example_policy_file.jsonl)
 
 ## 服务帐户的快速说明
 
@@ -287,7 +287,7 @@ Creating a new namespace leads to the creation of a new service account in the f
 system:serviceaccount:<namespace>:default
 ```
 
-For example, if you wanted to grant the default service account (in the `kube-system` namespace) full 
+For example, if you wanted to grant the default service account (in the `kube-system` namespace) full
 privilege to the API using ABAC, you would add this line to your policy file:
 
 ```json
@@ -310,6 +310,3 @@ system:serviceaccount:<namespace>:default
 ```
 
 需要重新启动 apiserver 以获取新的策略行。
-
-
-
diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index 93be72db24..bf63ab206b 100644
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -48,7 +48,7 @@ webhooks](/docs/reference/access-authn-authz/extensible-admission-controllers/#a
 which are configured in the API.
 -->
 
-准入控制器是一段代码，它会在请求通过认证和授权之后、对象被持久化之前拦截到达 API 服务器的请求。控制器由下面的[列表](#what-does-each-admission-controller-do)组成，并编译进 `kube-apiserver` 二进制文件，并且只能由集群管理员配置。在该列表中，有两个特殊的控制器：MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook。它们根据 API 中的配置，分别执行变更和验证[准入控制 webhook](/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks)。
+准入控制器是一段代码，它会在请求通过认证和授权之后、对象被持久化之前拦截到达 API 服务器的请求。控制器由下面的[列表](#what-does-each-admission-controller-do)组成，并编译进 `kube-apiserver` 二进制文件，并且只能由集群管理员配置。在该列表中，有两个特殊的控制器：MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook。它们根据 API 中的配置，分别执行变更和验证[准入控制 webhook](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks)。
 
 
 <!--
@@ -231,7 +231,7 @@ See [persistent volume](/docs/concepts/storage/persistent-volumes/) documentatio
 storage classes and how to mark a storage class as default.
 -->
 
-关于持久化卷和存储类，以及如何将存储类标记为默认，请参见[持久化卷](/docs/concepts/storage/persistent-volumes/)。
+关于持久化卷和存储类，以及如何将存储类标记为默认，请参见[持久化卷](/zh/docs/concepts/storage/persistent-volumes/)。
 
 ### DefaultTolerationSeconds {#defaulttolerationseconds}
 
@@ -395,7 +395,7 @@ add these tolerations.
 
 该插件有助于创建可扩展资源的专用节点。
 如果运营商想创建可扩展资源的专用节点（如 GPU、FPGA 等），
-那他们应该以扩展资源名称作为键名，[为节点设置污点](/docs/concepts/configuration/taint-and-toleration/#example-use-cases)。
+那他们应该以扩展资源名称作为键名，[为节点设置污点](/zh/docs/concepts/scheduling-eviction/taint-and-toleration/)。
 如果启用了该准入控制器，会将此类污点的容忍自动添加到请求扩展资源的 Pod 中，用户不必再手动添加这些容忍。
 
 ### ImagePolicyWebhook {#imagepolicywebhook}
@@ -505,7 +505,7 @@ plugins:
 The ImagePolicyWebhook config file must reference a [kubeconfig](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) formatted file which sets up the connection to the backend. It is required that the backend communicate over TLS.
 -->
 
-ImagePolicyWebhook 的配置文件必须引用 [kubeconfig](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) 格式的文件，该文件设置了到后端的连接，要求后端使用 TLS 进行通信。
+ImagePolicyWebhook 的配置文件必须引用 [kubeconfig](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) 格式的文件，该文件设置了到后端的连接，要求后端使用 TLS 进行通信。
 
 <!--
 The kubeconfig file's cluster field must point to the remote service, and the user field must contain the returned authorizer.
@@ -550,7 +550,7 @@ users:
 For additional HTTP configuration, refer to the [kubeconfig](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) documentation.
 -->
 
-HTTP 更多的配置，请参阅 [kubeconfig](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) 文档。
+HTTP 更多的配置，请参阅 [kubeconfig](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) 文档。
 
 <!--
 #### Request Payloads
@@ -683,7 +683,7 @@ applies a 0.1 CPU requirement to all Pods in the `default` namespace.
 See the [limitRange design doc](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_limit_range.md) and the [example of Limit Range](/docs/tasks/configure-pod-container/limit-range/) for more details.
 -->
 
-请查看 [limitRange 设计文档](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_limit_range.md) 和 [Limit Range 例子](/docs/tasks/configure-pod-container/limit-range/)了解更多细节。
+请查看 [limitRange 设计文档](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_limit_range.md) 和 [Limit Range 例子](/zh/docs/tasks/administer-cluster/manage-resources/memory-default-namespace/)了解更多细节。
 
 ### MutatingAdmissionWebhook {#mutatingadmissionwebhook} {{< feature-state for_k8s_version="v1.13" state="beta" >}}
 
@@ -852,7 +852,7 @@ Starting from 1.11, this admission controller is disabled by default.
 该准入控制器会自动将区（region）或区域（zone）标签附加到由云提供商（如 GCE、AWS）定义的 PersistentVolumes 中。
 这有助于确保 Pod 和 PersistentVolume 位于相同的区或区域。
 如果准入控制器不支持为 PersistentVolumes 自动添加标签，那你可能需要手动添加标签，以防止 Pod 挂载其他区域的卷。
-PersistentVolumeLabel 已被废弃，标记持久卷已由[云管理控制器](/docs/tasks/administer-cluster/running-cloud-controller/)接管。
+PersistentVolumeLabel 已被废弃，标记持久卷已由[云管理控制器](/zh/docs/tasks/administer-cluster/running-cloud-controller/)接管。
 从 1.11 开始，默认情况下禁用此准入控制器。
 
 ### PodNodeSelector {#podnodeselector}
@@ -1005,7 +1005,7 @@ allowVolumeExpansion: true
 For more information about persistent volume claims, see [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims).
 -->
 
-关于持久化卷申领的更多信息，请参见 [PersistentVolumeClaims](/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)。
+关于持久化卷申领的更多信息，请参见 [PersistentVolumeClaims](/zh/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims)。
 
 ### PodPreset {#podpreset}
 
@@ -1037,7 +1037,7 @@ extensions group (`--runtime-config=extensions/v1beta1/podsecuritypolicy=true`).
 See also [Pod Security Policy documentation](/docs/concepts/policy/pod-security-policy/)
 for more information.
 -->
-查看 [Pod 安全策略文档](/docs/concepts/policy/pod-security-policy/)了解更多细节。
+查看 [Pod 安全策略文档](/zh/docs/concepts/policy/pod-security-policy/)了解更多细节。
 
 ### PodTolerationRestriction {#podtolerationrestriction}
 
@@ -1094,7 +1094,7 @@ objects in your Kubernetes deployment, you MUST use this admission controller to
 <!--
 See the [resourceQuota design doc](https://git.k8s.io/community/contributors/design-proposals/resource-management/admission_control_resource_quota.md) and the [example of Resource Quota](/docs/concepts/policy/resource-quotas/) for more details.
 -->
-请查看 [resourceQuota 设计文档](https://git.k8s.io/community/contributors/design-proposals/admission_control_resource_quota.md)和 [Resource Quota 例子](/docs/concepts/policy/resource-quotas/)了解更多细节。
+请查看 [resourceQuota 设计文档](https://git.k8s.io/community/contributors/design-proposals/admission_control_resource_quota.md)和 [Resource Quota 例子](/zh/docs/concepts/policy/resource-quotas/)了解更多细节。
 
 
 <!--
@@ -1109,17 +1109,17 @@ for more information.
 
 ### 容器运行时类 {#runtimeclass} {{< feature-state for_k8s_version="v1.16" state="alpha" >}}
 
-[容器运行时类](/docs/concepts/containers/runtime-class/)定义描述了与运行 Pod 相关的开销。此准入控制器将相应地设置 pod.Spec.Overhead 字段。
+[容器运行时类](/zh/docs/concepts/containers/runtime-class/)定义描述了与运行 Pod 相关的开销。此准入控制器将相应地设置 pod.Spec.Overhead 字段。
 
-详情请参见 [Pod 开销](/docs/concepts/configuration/pod-overhead/)。
+详情请参见 [Pod 开销](/zh/docs/concepts/configuration/pod-overhead/)。
 
 ### SecurityContextDeny {#securitycontextdeny}
 
 <!--
 This admission controller will deny any pod that attempts to set certain escalating [SecurityContext](/docs/user-guide/security-context) fields. This should be enabled if a cluster doesn't utilize [pod security policies](/docs/user-guide/pod-security-policy) to restrict the set of values a security context can take.
 -->
-该准入控制器将拒绝任何试图设置特定提升 [SecurityContext](/docs/user-guide/security-context) 字段的 pod。
-如果集群没有使用 [pod 安全策略](/docs/user-guide/pod-security-policy)来限制安全上下文所能获取的值集，那么应该启用这个功能。
+该准入控制器将拒绝任何试图设置特定提升 [SecurityContext](/zh/docs/tasks/configure-pod-container/security-context/) 字段的 pod。
+如果集群没有使用 [pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/)来限制安全上下文所能获取的值集，那么应该启用这个功能。
 
 ### ServiceAccount {#serviceaccount}
 
@@ -1127,7 +1127,7 @@ This admission controller will deny any pod that attempts to set certain escalat
 This admission controller implements automation for [serviceAccounts](/docs/user-guide/service-accounts).
 We strongly recommend using this admission controller if you intend to make use of Kubernetes `ServiceAccount` objects.
 -->
-该准入控制器实现了 [serviceAccounts](/docs/user-guide/service-accounts) 的自动化。
+该准入控制器实现了 [serviceAccounts](/zh/docs/tasks/configure-pod-container/configure-service-account/) 的自动化。
 如果您打算使用 Kubernetes 的 ServiceAccount 对象，我们强烈建议您使用这个准入控制器。
 
 ### StorageObjectInUseProtection
@@ -1135,7 +1135,7 @@ We strongly recommend using this admission controller if you intend to make use
 <!--
 The `StorageObjectInUseProtection` plugin adds the `kubernetes.io/pvc-protection` or `kubernetes.io/pv-protection` finalizers to newly created Persistent Volume Claims (PVCs) or Persistent Volumes (PV). In case a user deletes a PVC or PV the PVC or PV is not removed until the finalizer is removed from the PVC or PV by PVC or PV Protection Controller. Refer to the [Storage Object in Use Protection](/docs/concepts/storage/persistent-volumes/#storage-object-in-use-protection) for more detailed information.
 -->
-`StorageObjectInUseProtection` 插件将 `kubernetes.io/pvc-protection` 或 `kubernetes.io/pv-protection` finalizers 添加到新创建的持久化卷声明（PVC）或持久化卷（PV）中。 如果用户尝试删除 PVC/PV，除非 PVC/PV 的保护控制器移除 finalizers，否则 PVC/PV 不会被删除。有关更多详细信息，请参考[保护使用中的存储对象](/docs/concepts/storage/persistent-volumes/#storage-object-in-use-protection)。
+`StorageObjectInUseProtection` 插件将 `kubernetes.io/pvc-protection` 或 `kubernetes.io/pv-protection` finalizers 添加到新创建的持久化卷声明（PVC）或持久化卷（PV）中。 如果用户尝试删除 PVC/PV，除非 PVC/PV 的保护控制器移除 finalizers，否则 PVC/PV 不会被删除。有关更多详细信息，请参考[保护使用中的存储对象](/zh/docs/concepts/storage/persistent-volumes/#storage-object-in-use-protection)。
 
 ### TaintNodesByCondition {#taintnodesbycondition} {{< feature-state for_k8s_version="v1.12" state="beta" >}}
 
@@ -1179,7 +1179,7 @@ Yes. For Kubernetes version 1.10 and later, the recommended admission controller
 -->
 ## 有推荐的准入控制器吗？
 
-有，对于 Kubernetes 1.10 以上的版本，推荐使用的准入控制器默认情况下都处于启用状态（查看[这里](/docs/reference/command-line-tools-reference/kube-apiserver/#options)）。
+有，对于 Kubernetes 1.10 以上的版本，推荐使用的准入控制器默认情况下都处于启用状态（查看[这里](/zh/docs/reference/command-line-tools-reference/kube-apiserver/#options)）。
 因此您无需显式指定它们。您可以使用 `--enable-admission-plugins` 标志（ **顺序不重要** ）来启用默认设置以外的其他准入控制器。
 
 {{< note >}}
@@ -1217,5 +1217,3 @@ in the mutating phase.
 admission controllers ran in the exact order specified.
 -->
     对于更早期版本，没有验证和变更的概念，并且准入控制器按照指定的确切顺序运行。
-
-
diff --git a/content/zh/docs/reference/access-authn-authz/authentication.md b/content/zh/docs/reference/access-authn-authz/authentication.md
index 64c70cf898..3588333018 100644
--- a/content/zh/docs/reference/access-authn-authz/authentication.md
+++ b/content/zh/docs/reference/access-authn-authz/authentication.md
@@ -66,7 +66,7 @@ for more details about this.
 使用证书中的 'subject' 的通用名称（Common Name）字段（例如，"/CN=bob"）来
 确定用户名。接下来，基于角色访问控制（RBAC）子系统会确定用户是否有权针对
 某资源执行特定的操作。进一步的细节可参阅
-[证书请求](/zh/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user)
+[证书请求](/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user)
 下普通用户主题。
 
 <!--
@@ -387,7 +387,7 @@ mounted into pods at well-known locations, and allow in-cluster processes to
 talk to the API server. Accounts may be explicitly associated with pods using the
 `serviceAccountName` field of a `PodSpec`.
 -->
-服务账号通常由 API 服务器自动创建并通过 `ServiceAccount` 
+服务账号通常由 API 服务器自动创建并通过 `ServiceAccount`
 [准入控制器](/zh/docs/reference/access-authn-authz/admission-controllers/)
 关联到集群中运行的 Pod 上。
 持有者令牌会挂载到 Pod 中可预知的为之，允许集群内进程与 API 服务器通信。
@@ -550,7 +550,7 @@ from the OAuth2 [token response](https://openid.net/specs/openid-connect-core-1_
 as a bearer token.  See [above](#putting-a-bearer-token-in-a-request) for how the token
 is included in a request.
 -->
-要识别用户，身份认证组件使用 OAuth2 
+要识别用户，身份认证组件使用 OAuth2
 [令牌响应](https://openid.net/specs/openid-connect-core-1_0.html#TokenResponse)
 中的 `id_token`（而非 `access_token`）作为持有者令牌。
 关于如何在请求中设置令牌，可参见[前文](#putting-a-bearer-token-in-a-request)。
@@ -654,7 +654,7 @@ Kubernetes does not provide an OpenID Connect Identity Provider.
 You can use an existing public OpenID Connect Identity Provider (such as Google, or
 [others](https://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers)).
 Or, you can run your own Identity Provider, such as CoreOS [dex](https://github.com/coreos/dex),
-[Keycloak](https://github.com/keycloak/keycloak), 
+[Keycloak](https://github.com/keycloak/keycloak),
 CloudFoundry [UAA](https://github.com/cloudfoundry/uaa), or
 Tremolo Security's [OpenUnison](https://github.com/tremolosecurity/openunison).
 -->
@@ -814,7 +814,7 @@ The configuration file uses the [kubeconfig](/docs/concepts/configuration/organi
 file format. Within the file, `clusters` refers to the remote service and
 `users` refers to the API server webhook. An example would be:
 -->
-配置文件使用 [kubeconfig](/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
+配置文件使用 [kubeconfig](/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig/)
 文件的格式。文件中，`clusters` 指代远程服务，`users` 指代远程 API 服务
 Webhook。下面是一个例子：
 
@@ -1455,7 +1455,7 @@ Relative command paths are interpreted as relative to the directory of the confi
 KUBECONFIG is set to `/home/jane/kubeconfig` and the exec command is `./bin/example-client-go-exec-plugin`,
 the binary `/home/jane/bin/example-client-go-exec-plugin` is executed.
 -->
-解析相对命令路径时，kubectl 将其视为与配置文件比较而言的相对路径。 
+解析相对命令路径时，kubectl 将其视为与配置文件比较而言的相对路径。
 如果 KUBECONFIG 被设置为 `/home/jane/kubeconfig`，而 exec 命令为
 `./bin/example-client-go-exec-plugin`，则要执行的可执行文件为
 `/home/jane/bin/example-client-go-exec-plugin`。
@@ -1561,4 +1561,3 @@ RFC3339 timestamp. Presence or absence of an expiry has the following impact:
   }
 }
 ```
-
diff --git a/content/zh/docs/reference/access-authn-authz/authorization.md b/content/zh/docs/reference/access-authn-authz/authorization.md
index 49c8616b9a..a2b5e22207 100644
--- a/content/zh/docs/reference/access-authn-authz/authorization.md
+++ b/content/zh/docs/reference/access-authn-authz/authorization.md
@@ -85,12 +85,12 @@ Kubernetes 仅审查以下 API 请求属性：
  * **extra** - 由身份验证层提供的任意字符串键到字符串值的映射。
  * **API** - 指示请求是否针对 API 资源。
  * **Request path** - 各种非资源端点的路径，如 `/api` 或 `/healthz`。
- * **API request verb** - API 动词 `get`，`list`，`create`，`update`，`patch`，`watch`，`proxy`，`redirect`，`delete` 和 `deletecollection` 用于资源请求。要确定资源 API 端点的请求动词，请参阅[确定请求动词](/docs/reference/access-authn-authz/authorization/#determine-whether-a-request-is-allowed-or-denied)。
+ * **API request verb** - API 动词 `get`，`list`，`create`，`update`，`patch`，`watch`，`proxy`，`redirect`，`delete` 和 `deletecollection` 用于资源请求。要确定资源 API 端点的请求动词，请参阅[确定请求动词](/zh/docs/reference/access-authn-authz/authorization/#determine-whether-a-request-is-allowed-or-denied)。
  * **HTTP request verb** - HTTP 动词 `get`，`post`，`put` 和 `delete` 用于非资源请求。
  * **Resource** - 正在访问的资源的 ID 或名称（仅限资源请求） - 对于使用 `get`，`update`，`patch` 和 `delete` 动词的资源请求，您必须提供资源名称。
  * **Subresource** - 正在访问的子资源（仅限资源请求）。
  * **Namespace** - 正在访问的对象的名称空间（仅适用于命名空间资源请求）。
- * **API group** - 正在访问的 API 组（仅限资源请求）。空字符串表示[核心 API 组](/docs/concepts/overview/kubernetes-api/)。
+ * **API group** - 正在访问的 API 组（仅限资源请求）。空字符串表示[核心 API 组](/zh/docs/concepts/overview/kubernetes-api/)。
 
 <!--
 ## Determine the Request Verb
@@ -128,9 +128,9 @@ DELETE    | delete (单个资源)，deletecollection (资源集合)
 
 Kubernetes 有时使用专门的动词检查授权以获得额外的权限。例如：
 
-* [Pod 安全策略](/docs/concepts/policy/pod-security-policy/) 检查 `policy` API 组中 `podsecuritypolicies` 资源的 `use` 动词的授权。
-* [RBAC](/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping) 检查 `rbac.authorization.k8s.io` API 组中 `roles` 和 `clusterroles` 资源的 `bind` 动词的授权。
-* [认证](/docs/reference/access-authn-authz/authentication/) layer 检查核心 API 组中 `users`，`groups` 和 `serviceaccounts` 的 `impersonate` 动词的授权，以及 `authentication.k8s.io` API 组中的 `userextras`。
+* [Pod 安全策略](/zh/docs/concepts/policy/pod-security-policy/) 检查 `policy` API 组中 `podsecuritypolicies` 资源的 `use` 动词的授权。
+* [RBAC](/zh/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping) 检查 `rbac.authorization.k8s.io` API 组中 `roles` 和 `clusterroles` 资源的 `bind` 动词的授权。
+* [认证](/zh/docs/reference/access-authn-authz/authentication/) layer 检查核心 API 组中 `users`，`groups` 和 `serviceaccounts` 的 `impersonate` 动词的授权，以及 `authentication.k8s.io` API 组中的 `userextras`。
 
 <!--
 ## Authorization Modules
@@ -143,12 +143,12 @@ Kubernetes 有时使用专门的动词检查授权以获得额外的权限。例
  -->
 
 ## 授权模块
- * **Node** - 一个专用授权程序，根据计划运行的 pod 为 kubelet 授予权限。了解有关使用节点授权模式的更多信息，请参阅[节点授权](/docs/reference/access-authn-authz/node/).
- * **ABAC** - 基于属性的访问控制（ABAC）定义了一种访问控制范例，通过使用将属性组合在一起的策略，将访问权限授予用户。策略可以使用任何类型的属性（用户属性，资源属性，对象，环境属性等）。要了解有关使用 ABAC 模式的更多信息，请参阅 [ABAC 模式](/docs/reference/access-authn-authz/abac/)。
- * **RBAC** - 基于角色的访问控制（RBAC）是一种基于企业内个人用户的角色来管理对计算机或网络资源的访问的方法。在此上下文中，权限是单个用户执行特定任务的能力，例如查看，创建或修改文件。要了解有关使用 RBAC 模式的更多信息，请参阅 [RBAC 模式](/docs/reference/access-authn-authz/rbac/)。
+ * **Node** - 一个专用授权程序，根据计划运行的 pod 为 kubelet 授予权限。了解有关使用节点授权模式的更多信息，请参阅[节点授权](/zh/docs/reference/access-authn-authz/node/).
+ * **ABAC** - 基于属性的访问控制（ABAC）定义了一种访问控制范例，通过使用将属性组合在一起的策略，将访问权限授予用户。策略可以使用任何类型的属性（用户属性，资源属性，对象，环境属性等）。要了解有关使用 ABAC 模式的更多信息，请参阅 [ABAC 模式](/zh/docs/reference/access-authn-authz/abac/)。
+ * **RBAC** - 基于角色的访问控制（RBAC）是一种基于企业内个人用户的角色来管理对计算机或网络资源的访问的方法。在此上下文中，权限是单个用户执行特定任务的能力，例如查看，创建或修改文件。要了解有关使用 RBAC 模式的更多信息，请参阅 [RBAC 模式](/zh/docs/reference/access-authn-authz/rbac/)。
    * 当指定的 RBAC（基于角色的访问控制）使用 `rbac.authorization.k8s.io` API 组来驱动授权决策时，允许管理员通过 Kubernetes API 动态配置权限策略。
    * 要启用 RBAC，请使用 `--authorization-mode = RBAC` 启动 apiserver 。
- * **Webhook** - WebHook 是一个 HTTP 回调：发生某些事情时调用的 HTTP POST；通过 HTTP POST 进行简单的事件通知。实现 WebHook 的 Web 应用程序会在发生某些事情时将消息发布到 URL。要了解有关使用 Webhook 模式的更多信息，请参阅 [Webhook 模式](/docs/reference/access-authn-authz/webhook/)。
+ * **Webhook** - WebHook 是一个 HTTP 回调：发生某些事情时调用的 HTTP POST；通过 HTTP POST 进行简单的事件通知。实现 WebHook 的 Web 应用程序会在发生某些事情时将消息发布到 URL。要了解有关使用 Webhook 模式的更多信息，请参阅 [Webhook 模式](/zh/docs/reference/access-authn-authz/webhook/)。
 
 <!--
 #### Checking API Access
@@ -173,7 +173,7 @@ no
 Administrators can combine this with [user impersonation](/docs/reference/access-authn-authz/authentication/#user-impersonation)
 to determine what action other users can perform.
 -->
-管理员可以将此与[用户模拟](/docs/reference/access-authn-authz/authentication/#user-impersonation)结合使用，以确定其他用户可以执行的操作。
+管理员可以将此与[用户模拟](/zh/docs/reference/access-authn-authz/authentication/#user-impersonation)结合使用，以确定其他用户可以执行的操作。
 
 ```bash
 $ kubectl auth can-i list secrets --namespace dev --as dave
@@ -300,5 +300,5 @@ mode.
 * To learn more about Authentication, see **Authentication** in [Controlling Access to the Kubernetes API](/docs/reference/access-authn-authz/controlling-access/).
 * To learn more about Admission Control, see [Using Admission Controllers](/docs/reference/access-authn-authz/admission-controllers/).
 -->
-* 要了解有关身份验证的更多信息，请参阅 **身份验证** [控制对 Kubernetes API 的访问](/docs/reference/access-authn-authz/controlling-access/)。
-* 要了解有关准入控制的更多信息，请参阅 [使用准入控制器](/docs/reference/access-authn-authz/admission-controllers/)。
+* 要了解有关身份验证的更多信息，请参阅 **身份验证** [控制对 Kubernetes API 的访问](/zh/docs/reference/access-authn-authz/controlling-access/)。
+* 要了解有关准入控制的更多信息，请参阅 [使用准入控制器](/zh/docs/reference/access-authn-authz/admission-controllers/)。
diff --git a/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md b/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md
index 77ca6f32d5..c36f1f9bba 100644
--- a/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md
+++ b/content/zh/docs/reference/access-authn-authz/bootstrap-tokens.md
@@ -9,9 +9,9 @@ title: 使用启动引导令牌（Bootstrap Tokens）认证
 ## 概述
 
 启动引导令牌是一种简单的持有者令牌（Bearer Token），这种令牌是在新建集群或者在现有集群中添加新节点时使用的。
-它被设计成能够支持 [`kubeadm`](/docs/admin/kubeadm/)，但是也可以被用在其他的案例中以便用户在
+它被设计成能够支持 [`kubeadm`](/zh/docs/reference/setup-tools/kubeadm/)，但是也可以被用在其他的案例中以便用户在
 不使用 `kubeadm` 的情况下启动集群。它也被设计成可以通过 RBAC 策略，结合 [Kubelet TLS
-Bootstrapping](/docs/admin/kubelet-tls-bootstrapping/) 系统进行工作。
+Bootstrapping](/zh/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/) 系统进行工作。
 
 启动引导令牌被定义成一个特定类型的 secrets(`bootstrap.kubernetes.io/token`)，并存在于
 `kube-system` 命名空间中。然后这些 secrets 会被 API 服务器上的启动引导的认证器读取。
diff --git a/content/zh/docs/reference/access-authn-authz/controlling-access.md b/content/zh/docs/reference/access-authn-authz/controlling-access.md
index edfc3aab85..933072d606 100644
--- a/content/zh/docs/reference/access-authn-authz/controlling-access.md
+++ b/content/zh/docs/reference/access-authn-authz/controlling-access.md
@@ -5,7 +5,7 @@ approvers:
 title: Kubernetes API 访问控制
 ---
 
-用户通过 `kubectl`、客户端库或者通过发送 REST 请求[访问 API](/docs/user-guide/accessing-the-cluster)。 用户和 [Kubernetes 服务账户](/docs/tasks/configure-pod-container/configure-service-account/) 都可以被授权进行 API 访问。
+用户通过 `kubectl`、客户端库或者通过发送 REST 请求[访问 API](/zh/docs/tasks/access-application-cluster/access-cluster/)。 用户和 [Kubernetes 服务账户](/zh/docs/tasks/configure-pod-container/configure-service-account/) 都可以被授权进行 API 访问。
 请求到达 API 服务器后会经过几个阶段，具体说明如图：
 
 ![Diagram of request handling steps for Kubernetes API request](/images/docs/admin/access-control-overview.svg)
@@ -20,7 +20,7 @@ API 服务器会提供一份证书。 该证书一般是自签名的， 所以
 
 一旦 TLS 连接建立，HTTP 请求就进入到了认证的步骤。即图中的步骤 **1** 。
 集群创建脚本或集群管理员会为 API 服务器配置一个或多个认证模块。
-更具体的认证相关的描述详见[这里](/docs/admin/authentication/)。
+更具体的认证相关的描述详见[这里](/zh/docs/reference/access-authn-authz/authentication/)。
 
 认证步骤的输入是整个 HTTP 请求，但这里通常只是检查请求头和 / 或客户端证书。
 
@@ -73,13 +73,13 @@ Bootstrap Tokens，以及 JWT Tokens（用于服务账户）。
   }
 }
 ```
-如果 Bob 对 `projectCaribou` 命名空间下的对象发起一个写（`create` 或者 `update`）请求，那么它的授权会被拒绝。 如果 Bob 请求读取 （`get`）其他命名空间，例如 `projectFish` 下的对象，其授权也会被拒绝。 
+如果 Bob 对 `projectCaribou` 命名空间下的对象发起一个写（`create` 或者 `update`）请求，那么它的授权会被拒绝。 如果 Bob 请求读取 （`get`）其他命名空间，例如 `projectFish` 下的对象，其授权也会被拒绝。
 
 Kubernetes 的授权要求使用通用的 REST 属性与现有的组织或云服务提供商的访问控制系统进行交互。 采用 REST 格式是必要的，因为除 Kubernetes 外，这些访问控制系统还可能与其他的 API 进行交互。
 
 Kubernetes 支持多种授权模块，例如 ABAC 模式，RBAC 模式和 Webhook 模式。 管理员创建集群时，会配置 API 服务器应用的授权模块。 如果多种授权模式同时被启用，Kubernetes 将检查所有模块，如果其中一种通过授权，则请求授权通过。 如果所有的模块全部拒绝，则请求被拒绝（HTTP 状态码 403）。
 
-要了解更多的 Kubernetes 授权相关信息，包括使用授权模块创建策略的具体说明等，可参考[授权概述](/docs/admin/authorization)。
+要了解更多的 Kubernetes 授权相关信息，包括使用授权模块创建策略的具体说明等，可参考[授权概述](/zh/docs/reference/access-authn-authz/authorization/)。
 
 
 ## 准入控制
@@ -96,7 +96,7 @@ Kubernetes 支持多种授权模块，例如 ABAC 模式，RBAC 模式和 Webhoo
 
 除了拒绝请求外，准入控制器还可以为对象设置复杂的默认值。
 
-可用的准入控制模块描述 [如下](/docs/admin/admission-controllers/)。
+可用的准入控制模块描述 [如下](/zh/docs/reference/access-authn-authz/admission-controllers/)。
 
 一旦请求通过所有准入控制器，将使用对应 API 对象的验证流程对其进行验证，然后写入对象存储 （如步骤 **4**）。
 
diff --git a/content/zh/docs/reference/access-authn-authz/extensible-admission-controllers.md b/content/zh/docs/reference/access-authn-authz/extensible-admission-controllers.md
index 4b0fcf0584..9e42aa7bdf 100644
--- a/content/zh/docs/reference/access-authn-authz/extensible-admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/extensible-admission-controllers.md
@@ -18,7 +18,7 @@ In addition to [compiled-in admission plugins](/docs/reference/access-authn-auth
 admission plugins can be developed as extensions and run as webhooks configured at runtime.
 This page describes how to build, configure, use, and monitor admission webhooks.
 -->
-除了[内置的 admission 插件](/docs/reference/access-authn-authz/admission-controllers/)，admission 插件可以作为扩展独立开发，并以运行时所配置的 webhook 的形式运行。
+除了[内置的 admission 插件](/zh/docs/reference/access-authn-authz/admission-controllers/)，admission 插件可以作为扩展独立开发，并以运行时所配置的 webhook 的形式运行。
 此页面描述了如何构建、配置、使用和监视 admission webhook。
 
 
@@ -37,7 +37,7 @@ and
 Mutating admission Webhooks are invoked first, and can modify objects sent to the API server to enforce custom defaults.
 -->
 Admission webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。
-可以定义两种类型的 admission webhook，即 [validating admission webhook](/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook) 和 [mutating admission webhook](/docs/reference/access-authn-authz/admission-controllers/#mutatingadmissionwebhook)。
+可以定义两种类型的 admission webhook，即 [validating admission webhook](/zh/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook) 和 [mutating admission webhook](/zh/docs/reference/access-authn-authz/admission-controllers/#mutatingadmissionwebhook)。
 Mutating admission webhook 会先被调用。它们可以更改发送到 API 服务器的对象以执行自定义的设置默认值操作。
 
 <!--
@@ -67,7 +67,7 @@ In the following, we describe how to quickly experiment with admission webhooks.
 ### 尝试 admission webhook
 
 admission webhook 本质上是集群控制平面的一部分。您应该非常谨慎地编写和部署它们。
-如果您打算编写或者部署生产级 admission webhook，请阅读[用户指南](/docs/reference/access-authn-authz/extensible-admission-controllers/#write-an-admission-webhook-server)以获取相关说明。
+如果您打算编写或者部署生产级 admission webhook，请阅读[用户指南](/zh/docs/reference/access-authn-authz/extensible-admission-controllers/#write-an-admission-webhook-server)以获取相关说明。
 在下文中，我们将介绍如何快速试验 admission webhook。
 
 <!--
@@ -88,7 +88,7 @@ admission webhook 本质上是集群控制平面的一部分。您应该非常
 * 确保 Kubernetes 集群版本至少为 v1.16（以便使用 `admissionregistration.k8s.io/v1` API） 或者 v1.9 （以便使用 `admissionregistration.k8s.io/v1beta1` API）。
 
 * 确保启用 MutatingAdmissionWebhook 和 ValidatingAdmissionWebhook 控制器。
-  [这里](/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use)
+  [这里](/zh/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use)
   是一组推荐的 admission 控制器，通常可以启用。
 
 * 确保启用了 `admissionregistration.k8s.io/v1beta1` API。
@@ -281,7 +281,7 @@ the webhooks. There are three steps to complete the configuration.
 * 启动 apiserver 时，通过 `--admission-control-config-file` 参数指定准入控制配置文件的位置。
 
 * 在准入控制配置文件中，指定 MutatingAdmissionWebhook 控制器和 ValidatingAdmissionWebhook 控制器应该读取凭据的位置。
-凭证存储在 kubeConfig 文件中（是​​的，与 kubectl 使用的模式相同），因此字段名称为 `kubeConfigFile`。 
+凭证存储在 kubeConfig 文件中（是​​的，与 kubectl 使用的模式相同），因此字段名称为 `kubeConfigFile`。
 以下是一个准入控制配置文件示例：
 
 <!--
@@ -748,7 +748,7 @@ For `patchType: JSONPatch`, the `patch` field contains a base64-encoded array of
 当允许请求时，mutating admission webhook 也可以选择修改传入的对象。
 这是通过在响应中使用 `patch` 和 `patchType` 字段来完成的。
 当前唯一支持的 `patchType` 是 `JSONPatch`。
-有关更多详细信息，请参见 [JSON patch](http://jsonpatch.com/)。
+有关更多详细信息，请参见 [JSON patch](https://jsonpatch.com/)。
 对于 `patchType: JSONPatch`，`patch` 字段包含一个以 base64 编码的 JSON patch 操作数组。
 
 <!--
@@ -1060,7 +1060,7 @@ webhooks:
 <!--
 See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.
 -->
-有关标签选择器的更多示例，请参见[标签](/docs/concepts/overview/working-with-objects/labels)。
+有关标签选择器的更多示例，请参见[标签](/zh/docs/concepts/overview/working-with-objects/labels)。
 
 <!--
 ### Matching requests: namespaceSelector
@@ -1187,7 +1187,7 @@ webhooks:
 <!--
 See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.
 -->
-有关标签选择器的更多示例，请参见[标签](/docs/concepts/overview/working-with-objects/labels)。
+有关标签选择器的更多示例，请参见[标签](/zh/docs/concepts/overview/working-with-objects/labels)。
 
 <!--
 ### Matching requests: matchPolicy
@@ -1367,7 +1367,7 @@ Fragments ("#...") and query parameters ("?...") are also not allowed.
 <!--
 Here is an example of a mutating webhook configured to call a URL
 (and expects the TLS certificate to be verified using system trust roots, so does not specify a caBundle):
---> 
+-->
 这是配置为调用 URL 的 mutating Webhook 的示例（并且期望使用系统信任根证书来验证 TLS 证书，因此不指定 caBundle）：
 
 {{< tabs name="MutatingWebhookConfiguration_url" >}}
@@ -1793,7 +1793,7 @@ capturing if a request object is mutated by the invocation, and optionally gener
 patch from the webhook admission response. The annotations are set in the audit event for given request on given stage of
 its execution, which is then pre-processed according to a certain policy and written to a backend.
 -->
-在 v1.16+ 中，kube-apiserver 针对每个 mutating webhook 调用执行[审计](/docs/tasks/debug-application-cluster/audit/)操作。
+在 v1.16+ 中，kube-apiserver 针对每个 mutating webhook 调用执行[审计](/zh/docs/tasks/debug-application-cluster/audit/)操作。
 每个调用都会生成一个审计注解，记述请求对象是否发生改变，可选地还可以根据 webhook 的准入响应生成一个注解，记述所应用的修补。
 针对给定请求的给定执行阶段，注解被添加到审计事件中，然后根据特定策略进行预处理并写入后端。
 
@@ -2150,7 +2150,7 @@ If side effects are required during the admission evaluation, they must be suppr
 set to `NoneOnDryRun`. See [Side effects](#side-effects) for more detail.
 -->
 ### Side Effects
- 
+
 建议 admission webhook 应尽可能避免副作用，这意味着该 admission webhook 仅对发送给他们的 `AdmissionReview` 的内容起作用，并且不要进行额外更改。
 如果 Webhook 没有任何副作用，则 `.webhooks[].sideEffects` 字段应设置为 `None`。
 
@@ -2173,5 +2173,3 @@ plane, exclude the `kube-system` namespace from being intercepted using a
 `kube-system` 命名空间包含由 Kubernetes 系统创建的对象，例如用于控制平面组件的服务账号，诸如 `kube-dns` 之类的 Pod 等。
 意外更改或拒绝 `kube-system` 命名空间中的请求可能会导致控制平面组件停止运行或者导致未知行为发生。
 如果您的 admission webhook 不想修改 Kubernetes 控制平面的行为，请使用 [`namespaceSelector`](#matching-requests-namespaceselector) 避免拦截 `kube-system` 命名空间。
-
-
diff --git a/content/zh/docs/reference/access-authn-authz/node.md b/content/zh/docs/reference/access-authn-authz/node.md
index 22573d5e82..dc1c86ee4f 100644
--- a/content/zh/docs/reference/access-authn-authz/node.md
+++ b/content/zh/docs/reference/access-authn-authz/node.md
@@ -3,7 +3,7 @@ title: 使用 Node 鉴权
 content_type: concept
 weight: 90
 ---
-<!-- 
+<!--
 ---
 reviewers:
 - timstclair
@@ -18,145 +18,145 @@ weight: 90
 
 <!-- overview -->
 节点鉴权是一种特殊用途的鉴权模式，专门对 kubelet 发出的 API 请求进行鉴权。
-<!-- 
+<!--
 Node authorization is a special-purpose authorization mode that specifically authorizes API requests made by kubelets.
 -->
 
 
 <!-- body -->
 ## 概述
-<!-- 
-## Overview 
+<!--
+## Overview
 -->
 
 节点鉴权器允许 kubelet 执行 API 操作。包括：
-<!-- 
-The Node authorizer allows a kubelet to perform API operations. This includes: 
+<!--
+The Node authorizer allows a kubelet to perform API operations. This includes:
 -->
 
 读取操作：
-<!-- 
-Read operations: 
+<!--
+Read operations:
 -->
 
 * services
 * endpoints
 * nodes
 * pods
-* secrets、configmaps、pvcs 以及绑定到 kubelet 节点的与 pod 相关的持久卷 
+* secrets、configmaps、pvcs 以及绑定到 kubelet 节点的与 pod 相关的持久卷
 
-<!-- 
+<!--
 * services
 * endpoints
 * nodes
 * pods
-* secrets, configmaps, persistent volume claims and persistent volumes related to pods bound to the kubelet's node 
+* secrets, configmaps, persistent volume claims and persistent volumes related to pods bound to the kubelet's node
 -->
 
 写入操作：
-<!-- 
-Write operations: 
+<!--
+Write operations:
 -->
 
 * 节点和节点状态（启用 `NodeRestriction` 准入插件以限制 kubelet 只能修改自己的节点）
 * Pod 和 Pod 状态 (启用 `NodeRestriction` 准入插件以限制 kubelet 只能修改绑定到自身的 Pod)
 * 事件
 
-<!-- 
+<!--
 * nodes and node status (enable the `NodeRestriction` admission plugin to limit a kubelet to modify its own node)
 * pods and pod status (enable the `NodeRestriction` admission plugin to limit a kubelet to modify pods bound to itself)
-* events 
+* events
 -->
 
 鉴权相关操作：
-<!-- 
-Auth-related operations: 
+<!--
+Auth-related operations:
 -->
 
 * 对于基于 TLS 的启动引导过程时使用的 certificationsigningrequests API 的读/写权限
 * 为委派的身份验证/授权检查创建 tokenreviews 和 subjectaccessreviews 的能力
 
-<!-- 
+<!--
 * read/write access to the certificationsigningrequests API for TLS bootstrapping
-* the ability to create tokenreviews and subjectaccessreviews for delegated authentication/authorization checks 
+* the ability to create tokenreviews and subjectaccessreviews for delegated authentication/authorization checks
 -->
 
 在将来的版本中，节点鉴权器可能会添加或删除权限，以确保 kubelet 具有正确操作所需的最小权限集。
-<!-- 
+<!--
 In future releases, the node authorizer may add or remove permissions to ensure kubelets
-have the minimal set of permissions required to operate correctly. 
+have the minimal set of permissions required to operate correctly.
 -->
 
 为了获得节点鉴权器的授权，kubelet 必须使用一个凭证以表示它在 `system:nodes` 组中，用户名为 `system:node:<nodeName>`。
-上述的组名和用户名格式要与 [kubelet TLS 启动引导](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)过程中为每个 kubelet 创建的标识相匹配。
-<!-- 
-In order to be authorized by the Node authorizer, kubelets must use a credential that identifies them as 
+上述的组名和用户名格式要与 [kubelet TLS 启动引导](/zh/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/)过程中为每个 kubelet 创建的标识相匹配。
+<!--
+In order to be authorized by the Node authorizer, kubelets must use a credential that identifies them as
 being in the `system:nodes` group, with a username of `system:node:<nodeName>`.
-This group and user name format match the identity created for each kubelet as part of 
-[kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/). 
+This group and user name format match the identity created for each kubelet as part of
+[kubelet TLS bootstrapping](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/).
 -->
 
 要启用节点授权器，请使用 `--authorization-mode = Node` 启动 apiserver。
-<!-- 
-To enable the Node authorizer, start the apiserver with `--authorization-mode=Node`. 
+<!--
+To enable the Node authorizer, start the apiserver with `--authorization-mode=Node`.
 -->
 
-要限制 kubelet 具有写入权限的 API 对象，请使用 `--enable-admission-plugins=...,NodeRestriction,...` 启动 apiserver，从而启用 [NodeRestriction](/docs/reference/access-authn-authz/admission-controllers#NodeRestriction) 准入插件。
-<!-- 
+要限制 kubelet 具有写入权限的 API 对象，请使用 `--enable-admission-plugins=...,NodeRestriction,...` 启动 apiserver，从而启用 [NodeRestriction](/zh/docs/reference/access-authn-authz/admission-controllers#NodeRestriction) 准入插件。
+<!--
 To limit the API objects kubelets are able to write, enable the [NodeRestriction](/docs/reference/access-authn-authz/admission-controllers#NodeRestriction) admission plugin by starting the apiserver with `--enable-admission-plugins=...,NodeRestriction,...`
  -->
 
 ## 迁移考虑因素
-<!-- 
-## Migration considerations 
+<!--
+## Migration considerations
 -->
 
 ### 在 `system:nodes` 组之外的 Kubelet
-<!-- 
-### Kubelets outside the `system:nodes` group 
+<!--
+### Kubelets outside the `system:nodes` group
 -->
 
 `system:nodes` 组之外的 kubelet 不会被 `Node` 鉴权模式授权，并且需要继续通过当前授权它们的机制来授权。
 节点准入插件不会限制来自这些 kubelet 的请求。
-<!-- 
+<!--
 Kubelets outside the `system:nodes` group would not be authorized by the `Node` authorization mode,
 and would need to continue to be authorized via whatever mechanism currently authorizes them.
-The node admission plugin would not restrict requests from these kubelets. 
+The node admission plugin would not restrict requests from these kubelets.
 -->
 
 ### 具有无差别用户名的 Kubelet
-<!-- 
-### Kubelets with undifferentiated usernames 
+<!--
+### Kubelets with undifferentiated usernames
 -->
 
 在一些部署中，kubelet 具有 `system:nodes` 组的凭证，但是无法给出它们所关联的节点的标识，因为它们没有 `system:node:...` 格式的用户名。
 这些 kubelet 不会被 `Node` 授权模式授权，并且需要继续通过当前授权它们的任何机制来授权。
-<!-- 
+<!--
 In some deployments, kubelets have credentials that place them in the `system:nodes` group,
 but do not identify the particular node they are associated with,
 because they do not have a username in the `system:node:...` format.
 These kubelets would not be authorized by the `Node` authorization mode,
-and would need to continue to be authorized via whatever mechanism currently authorizes them. 
+and would need to continue to be authorized via whatever mechanism currently authorizes them.
 -->
 
 因为默认的节点标识符实现不会把它当作节点身份标识，`NodeRestriction` 准入插件会忽略来自这些 kubelet 的请求。
-<!-- 
+<!--
 The `NodeRestriction` admission plugin would ignore requests from these kubelets,
-since the default node identifier implementation would not consider that a node identity. 
+since the default node identifier implementation would not consider that a node identity.
 -->
 
 ### 相对于以前使用 RBAC 的版本的更新
-<!-- 
-### Upgrades from previous versions using RBAC 
+<!--
+### Upgrades from previous versions using RBAC
 -->
 
-升级的 1.7 之前的使用 [RBAC](/docs/reference/access-authn-authz/rbac/) 的集群将继续按原样运行，因为 `system:nodes` 组绑定已经存在。
-<!-- 
+升级的 1.7 之前的使用 [RBAC](/zh/docs/reference/access-authn-authz/rbac/) 的集群将继续按原样运行，因为 `system:nodes` 组绑定已经存在。
+<!--
 Upgraded pre-1.7 clusters using [RBAC](/docs/reference/access-authn-authz/rbac/) will continue functioning as-is because the `system:nodes` group binding will already exist.
 -->
 
 如果集群管理员希望开始使用 `Node` 鉴权器和 `NodeRestriction` 准入插件来限制节点对 API 的访问，这一需求可以通过下列操作来完成且不会影响已部署的应用：
-<!-- 
+<!--
 If a cluster admin wishes to start using the `Node` authorizer and `NodeRestriction` admission plugin
 to limit node access to the API, that can be done non-disruptively:
  -->
@@ -165,40 +165,39 @@ to limit node access to the API, that can be done non-disruptively:
 2. 确保所有 kubelet 的凭据符合组/用户名要求
 3. 审核 apiserver 日志以确保 `Node` 鉴权器不会拒绝来自 kubelet 的请求（日志中没有持续的 `NODE DENY` 消息）
 4. 删除 `system:node` 集群角色绑定
-<!-- 
+<!--
 1. Enable the `Node` authorization mode (`--authorization-mode=Node,RBAC`) and the `NodeRestriction` admission plugin
 2. Ensure all kubelets' credentials conform to the group/username requirements
 3. Audit apiserver logs to ensure the `Node` authorizer is not rejecting requests from kubelets (no persistent `NODE DENY` messages logged)
-4. Delete the `system:node` cluster role binding 
+4. Delete the `system:node` cluster role binding
 -->
 
 ### RBAC 节点权限
-<!-- 
-### RBAC Node Permissions 
+<!--
+### RBAC Node Permissions
 -->
 
-在 1.6 版本中，当使用 [RBAC 鉴权模式](/docs/reference/access-authn-authz/rbac/) 时，`system:nodes` 集群角色会被自动绑定到 `system:node` 组。
-<!-- 
-In 1.6, the `system:node` cluster role was automatically bound to the `system:nodes` group when using the [RBAC Authorization mode](/docs/reference/access-authn-authz/rbac/). 
+在 1.6 版本中，当使用 [RBAC 鉴权模式](/zh/docs/reference/access-authn-authz/rbac/) 时，`system:nodes` 集群角色会被自动绑定到 `system:node` 组。
+<!--
+In 1.6, the `system:node` cluster role was automatically bound to the `system:nodes` group when using the [RBAC Authorization mode](/docs/reference/access-authn-authz/rbac/).
 -->
 
 在 1.7 版本中，不再推荐将 `system:nodes` 组自动绑定到 `system:node` 角色，因为节点鉴权器通过对 secret 和 configmap 访问的额外限制完成了相同的任务。
 如果同时启用了 `Node` 和 `RBAC` 授权模式，1.7 版本则不会创建 `system:nodes` 组到 `system:node` 角色的自动绑定。
-<!-- 
+<!--
 In 1.7, the automatic binding of the `system:nodes` group to the `system:node` role is deprecated
 because the node authorizer accomplishes the same purpose with the benefit of additional restrictions
 on secret and configmap access. If the `Node` and `RBAC` authorization modes are both enabled,
-the automatic binding of the `system:nodes` group to the `system:node` role is not created in 1.7. 
+the automatic binding of the `system:nodes` group to the `system:node` role is not created in 1.7.
 -->
 
 在 1.8 版本中，绑定将根本不会被创建。
-<!-- 
-In 1.8, the binding will not be created at all. 
+<!--
+In 1.8, the binding will not be created at all.
 -->
 
 使用 RBAC 时，将继续创建 `system:node` 集群角色，以便与将其他用户或组绑定到该角色的部署方法兼容。
-<!-- 
+<!--
 When using RBAC, the `system:node` cluster role will continue to be created,
-for compatibility with deployment methods that bind other users or groups to that role. 
+for compatibility with deployment methods that bind other users or groups to that role.
 -->
-
diff --git a/content/zh/docs/reference/access-authn-authz/rbac.md b/content/zh/docs/reference/access-authn-authz/rbac.md
index 3d35e4e8bb..8fa82a367d 100644
--- a/content/zh/docs/reference/access-authn-authz/rbac.md
+++ b/content/zh/docs/reference/access-authn-authz/rbac.md
@@ -244,7 +244,7 @@ roleRef:
 
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
-# 这个角色绑定允许 "dave" 用户在 "development" 命名空间中有读取 secrets 的权限。 
+# 这个角色绑定允许 "dave" 用户在 "development" 命名空间中有读取 secrets 的权限。
 kind: RoleBinding
 metadata:
   name: read-secrets
@@ -261,7 +261,7 @@ roleRef:
 
 <!--
 Finally, a `ClusterRoleBinding` may be used to grant permission at the cluster level and in all
-namespaces. The following `ClusterRoleBinding` allows any user in the group "manager" to read 
+namespaces. The following `ClusterRoleBinding` allows any user in the group "manager" to read
 secrets in any namespace.
 
 ```yaml
@@ -288,10 +288,10 @@ There are two primary reasons for this restriction:
 1. A binding to a different role is a fundamentally different binding.
 Requiring a binding to be deleted/recreated in order to change the `roleRef`
 ensures the full list of subjects in the binding is intended to be granted
-the new role (as opposed to enabling accidentally modifying just the roleRef 
+the new role (as opposed to enabling accidentally modifying just the roleRef
 without verifying all of the existing subjects should be given the new role's permissions).
 2. Making `roleRef` immutable allows giving `update` permission on an existing binding object
-to a user, which lets them manage the list of subjects, without being able to change the 
+to a user, which lets them manage the list of subjects, without being able to change the
 role that is granted to those subjects.
 
 The `kubectl auth reconcile` command-line utility creates or updates a manifest file containing RBAC objects,
@@ -709,7 +709,7 @@ reserved for Kubernetes system use, and so the admin should ensure
 usernames do not contain this prefix by accident.
 
 Group information in Kubernetes is currently provided by the Authenticator
-modules. Groups, like users, are represented as strings, and that string 
+modules. Groups, like users, are represented as strings, and that string
 has no format requirements, other than that the prefix `system:` is reserved.
 
 [Service Accounts](/docs/tasks/configure-pod-container/configure-service-account/) have usernames with the `system:serviceaccount:` prefix and belong
@@ -721,14 +721,14 @@ to groups with the `system:serviceaccounts:` prefix.
 主体可以是组，用户或者服务账户。
 
 用户是由字符串表示，它们可以是普通的用户名，像 "alice"，或者是
-邮件格式 "bob@example.com"，或者是数字ID。由 Kubernetes 管理员配置[身份认证模块](/docs/reference/access-authn-authz/authentication/)
+邮件格式 "bob@example.com"，或者是数字ID。由 Kubernetes 管理员配置[身份认证模块](/zh/docs/reference/access-authn-authz/authentication/)
 需要的格式。RBAC 鉴权系统不对格式作任何要求，但是前缀 `system:` 是 Kubernetes 系统保留的，
 所以管理员要确保配置的用户名不能出现上述前缀格式。
 
 用户组信息是 Kubernetes 现在提供的一种身份验证模块，与用户一样，对组的字符串没有格式要求，
 只是不能使用保留的前缀 `system:` 。
 
-[服务账号](/docs/tasks/configure-pod-container/configure-service-account/) 的用户名前缀为`system:serviceaccount:`，
+[服务账号](/zh/docs/tasks/configure-pod-container/configure-service-account/) 的用户名前缀为`system:serviceaccount:`，
 属于前缀为 `system:serviceaccounts:` 的用户组。
 
 <!--
@@ -918,7 +918,7 @@ and updates default cluster role bindings with any missing subjects.
 This allows the cluster to repair accidental modifications,
 and to keep roles and rolebindings up-to-date as permissions and subjects change in new releases.
 
-To opt out of this reconciliation, set the `rbac.authorization.kubernetes.io/autoupdate` 
+To opt out of this reconciliation, set the `rbac.authorization.kubernetes.io/autoupdate`
 annotation on a default cluster role or rolebinding to `false`.
 Be aware that missing default permissions and subjects can result in non-functional clusters.
 
@@ -1321,7 +1321,7 @@ This is commonly used by add-on API servers for unified authentication and autho
 The [Kubernetes controller manager](/docs/admin/kube-controller-manager/) runs core control loops.
 When invoked with `--use-service-account-credentials`, each control loop is started using a separate service account.
 Corresponding roles exist for each control loop, prefixed with `system:controller:`.
-If the controller manager is not started with `--use-service-account-credentials`, 
+If the controller manager is not started with `--use-service-account-credentials`,
 it runs all control loops using its own credential, which must be granted all the relevant roles.
 These roles include:
 
@@ -1355,7 +1355,7 @@ These roles include:
 -->
 ### 控制器角色   {#controller-roles}
 
-[Kubernetes 控制器管理器](/docs/admin/kube-controller-manager/) 运行核心控制环。
+[Kubernetes 控制器管理器](/zh/docs/reference/command-line-tools-reference/kube-controller-manager/) 运行核心控制环。
 当使用 `--use-service-account-credentials` 参数时, 每个控制环使用一个单独的服务账号启动。
 每个控制环都有相应的、前缀为 `system:controller:` 的角色。
 如果控制管理器启动时未设置 `--use-service-account-credentials`，
@@ -1410,7 +1410,7 @@ containing that permission. To allow a user to create/update roles:
     * implicitly, by giving them those permissions (if they attempt to create or modify a `Role` or `ClusterRole` with permissions they themselves have not been granted, the API request will be forbidden)
     * or explicitly allow specifying any permission in a `Role` or `ClusterRole` by giving them permission to perform the `escalate` verb on `roles` or `clusterroles` resources in the `rbac.authorization.k8s.io` API group (Kubernetes 1.12 and newer)
 
-A user can only create/update a role binding if they already have all the permissions contained in the referenced role 
+A user can only create/update a role binding if they already have all the permissions contained in the referenced role
 (at the same scope as the role binding) *or* if they've been given explicit permission to perform the `bind` verb on the referenced role.
 For example, if "user-1" does not have the ability to list secrets cluster-wide, they cannot create a `ClusterRoleBinding`
 to a role that grants that permission. To allow a user to create/update role bindings:
@@ -1422,7 +1422,7 @@ to a role that grants that permission. To allow a user to create/update role bin
 -->
 ## 初始化与预防权限升级
 
-RBAC API 会阻止用户通过编辑角色或者角色绑定来升级权限。 
+RBAC API 会阻止用户通过编辑角色或者角色绑定来升级权限。
 由于这一点是在 API 级别实现的，所以在 RBAC 鉴权器（RBAC authorizer）未启用的状态下依然可以正常工作。
 
 用户只有在符合下列条件之一的情况下，才能创建/更新角色:
@@ -2078,7 +2078,7 @@ in the server logs, you can remove the ABAC authorizer.
 ### 平行鉴权
 
 同时运行 RBAC 和 ABAC 鉴权模式, 并指定包含
-[现有的 ABAC 策略](/docs/reference/access-authn-authz/abac/#policy-file-format) 的策略文件：
+[现有的 ABAC 策略](/zh/docs/reference/access-authn-authz/abac/#policy-file-format) 的策略文件：
 
 ```
 --authorization-mode=RBAC,ABAC --authorization-policy-file=mypolicy.json
@@ -2134,5 +2134,3 @@ kubectl create clusterrolebinding permissive-binding \
   --group=system:serviceaccounts
 ```
 {{< /warning >}}
-
-
diff --git a/content/zh/docs/reference/access-authn-authz/service-accounts-admin.md b/content/zh/docs/reference/access-authn-authz/service-accounts-admin.md
index 0cf89e8ec7..cb559d0505 100644
--- a/content/zh/docs/reference/access-authn-authz/service-accounts-admin.md
+++ b/content/zh/docs/reference/access-authn-authz/service-accounts-admin.md
@@ -7,7 +7,7 @@ approvers:
 title: 管理 Service Accounts
 ---
 
-*这是一篇针对service accounts（服务账户）的集群管理员指南。  它呈现了 [User Guide to Service Accounts](/docs/user-guide/service-accounts)中的信息。*
+*这是一篇针对service accounts（服务账户）的集群管理员指南。  它呈现了 [User Guide to Service Accounts](/zh/docs/tasks/configure-pod-container/configure-service-account/)中的信息。*
 
 *对授权和用户账户的支持已在规划中，当前并不完备，为了更好地描述 service accounts，有时这些不完善的特性也会被提及。*
 
@@ -32,7 +32,7 @@ Kubernetes 区分用户账户和服务账户的概念主要基于以下原因：
 
 ### 服务账户准入控制器
 
-对 pod 的改动通过一个被称为 [Admission Controller](/docs/admin/admission-controllers) 的插件来实现。它是 apiserver 的一部分。
+对 pod 的改动通过一个被称为 [Admission Controller](/zh/docs/reference/access-authn-authz/admission-controllers/) 的插件来实现。它是 apiserver 的一部分。
 当 pod 被创建或更新时，它会同步地修改 pod。 当该插件处于激活状态 ( 在大多数发行版中都是默认的 )，当 pod 被创建或更新时它会进行以下动作：
 
   1. 如果该 pod 没有 `ServiceAccount` 设置，将其 `ServiceAccount` 设为 `default`。
diff --git a/content/zh/docs/reference/access-authn-authz/webhook.md b/content/zh/docs/reference/access-authn-authz/webhook.md
index a77f9df2b5..8cfdc91592 100644
--- a/content/zh/docs/reference/access-authn-authz/webhook.md
+++ b/content/zh/docs/reference/access-authn-authz/webhook.md
@@ -8,7 +8,7 @@ title: Webhook 模式
 content_type: concept
 weight: 95
 ---
-<!-- 
+<!--
 ---
 reviewers:
 - erictune
@@ -18,47 +18,47 @@ reviewers:
 title: Webhook Mode
 content_type: concept
 weight: 95
---- 
+---
 -->
 
 <!-- overview -->
-<!-- 
-A WebHook is an HTTP callback: an HTTP POST that occurs when something happens; a simple event-notification via HTTP POST. A web application implementing WebHooks will POST a message to a URL when certain things happen. 
+<!--
+A WebHook is an HTTP callback: an HTTP POST that occurs when something happens; a simple event-notification via HTTP POST. A web application implementing WebHooks will POST a message to a URL when certain things happen.
 -->
 WebHook 是一种 HTTP 回调：某些条件下触发的 HTTP POST 请求；通过 HTTP POST 发送的简单事件通知。一个基于 web 应用实现的 WebHook 会在特定事件发生时把消息发送给特定的 URL。
 
 
 <!-- body -->
-<!-- 
+<!--
 When specified, mode `Webhook` causes Kubernetes to query an outside REST
-service when determining user privileges. 
+service when determining user privileges.
 -->
 具体来说，当在判断用户权限时，`Webhook` 模式会使 Kubernetes 查询外部的 REST 服务。
 
-<!-- 
-## Configuration File Format 
+<!--
+## Configuration File Format
 -->
 ## 配置文件格式
 
-<!-- 
+<!--
 Mode `Webhook` requires a file for HTTP configuration, specify by the
-`--authorization-webhook-config-file=SOME_FILENAME` flag. 
+`--authorization-webhook-config-file=SOME_FILENAME` flag.
 -->
 `Webhook` 模式需要一个 HTTP 配置文件，通过 `--authorization-webhook-config-file=SOME_FILENAME` 的参数声明。
 
-<!-- 
+<!--
 The configuration file uses the [kubeconfig](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)
 file format. Within the file "users" refers to the API Server webhook and
-"clusters" refers to the remote service. 
+"clusters" refers to the remote service.
 -->
-配置文件的格式使用 [kubeconfig](/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)。在文件中，"users" 代表着 API 服务器的 webhook，而 "cluster" 代表着远程服务。
+配置文件的格式使用 [kubeconfig](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/)。在文件中，"users" 代表着 API 服务器的 webhook，而 "cluster" 代表着远程服务。
 
-<!-- 
-A configuration example which uses HTTPS client auth: 
+<!--
+A configuration example which uses HTTPS client auth:
 -->
 使用 HTTPS 客户端认证的配置例子：
 
-<!-- 
+<!--
 ```yaml
 # Kubernetes API version
 apiVersion: v1
@@ -87,7 +87,7 @@ contexts:
     cluster: name-of-remote-authz-service
     user: name-of-api-server
   name: webhook
-``` 
+```
 -->
 ```yaml
 # Kubernetes API 版本
@@ -119,31 +119,31 @@ contexts:
   name: webhook
 ```
 
-<!-- 
-## Request Payloads 
+<!--
+## Request Payloads
 -->
 ## 请求载荷
 
-<!-- 
+<!--
 When faced with an authorization decision, the API Server POSTs a JSON-
 serialized `authorization.k8s.io/v1beta1` `SubjectAccessReview` object describing the
 action. This object contains fields describing the user attempting to make the
 request, and either details about the resource being accessed or requests
-attributes. 
+attributes.
 -->
 在做认证决策时，API 服务器会 POST 一个 JSON 序列化的 `authorization.k8s.io/v1beta1` `SubjectAccessReview` 对象来描述这个动作。这个对象包含了描述用户请求的字段，同时也包含了需要被访问资源或请求特征的具体信息。
 
-<!-- 
+<!--
 Note that webhook API objects are subject to the same [versioning compatibility rules](/docs/concepts/overview/kubernetes-api/)
 as other Kubernetes API objects. Implementers should be aware of looser
 compatibility promises for beta objects and check the "apiVersion" field of the
 request to ensure correct deserialization. Additionally, the API Server must
-enable the `authorization.k8s.io/v1beta1` API extensions group (`--runtime-config=authorization.k8s.io/v1beta1=true`). 
+enable the `authorization.k8s.io/v1beta1` API extensions group (`--runtime-config=authorization.k8s.io/v1beta1=true`).
 -->
-需要注意的是 webhook API 对象与其他 Kubernetes API 对象一样都同样都服从[版本兼容规则](/docs/concepts/overview/kubernetes-api/)。实施人员应该了解 beta 对象的更宽松的兼容性承诺，同时确认请求的 "apiVersion" 字段能被正确地反序列化。此外，API 服务器还必须启用 `authorization.k8s.io/v1beta1` API 扩展组 (`--runtime-config=authorization.k8s.io/v1beta1=true`)。
+需要注意的是 webhook API 对象与其他 Kubernetes API 对象一样都同样都服从[版本兼容规则](/zh/docs/concepts/overview/kubernetes-api/)。实施人员应该了解 beta 对象的更宽松的兼容性承诺，同时确认请求的 "apiVersion" 字段能被正确地反序列化。此外，API 服务器还必须启用 `authorization.k8s.io/v1beta1` API 扩展组 (`--runtime-config=authorization.k8s.io/v1beta1=true`)。
 
-<!-- 
-An example request body: 
+<!--
+An example request body:
 -->
 一个请求内容的例子：
 
@@ -167,10 +167,10 @@ An example request body:
 }
 ```
 
-<!-- 
+<!--
 The remote service is expected to fill the `status` field of
 the request and respond to either allow or disallow access. The response body's
-`spec` field is ignored and may be omitted. A permissive response would return: 
+`spec` field is ignored and may be omitted. A permissive response would return:
 -->
 期待远程服务填充请求的 `status` 字段并响应允许或禁止访问。响应主体的 `spec` 字段被忽略，可以省略。允许的响应将返回:
 ```json
@@ -183,17 +183,17 @@ the request and respond to either allow or disallow access. The response body's
 }
 ```
 
-<!-- 
-For disallowing access there are two methods. 
+<!--
+For disallowing access there are two methods.
 -->
 为了禁止访问，有两种方法。
 
-<!-- 
+<!--
 The first method is preferred in most cases, and indicates the authorization
-webhook does not allow, or has "no opinion" about the request, but if other 
-authorizers are configured, they are given a chance to allow the request. 
-If there are no other authorizers, or none of them allow the request, the 
-request is forbidden. The webhook would return: 
+webhook does not allow, or has "no opinion" about the request, but if other
+authorizers are configured, they are given a chance to allow the request.
+If there are no other authorizers, or none of them allow the request, the
+request is forbidden. The webhook would return:
 -->
 在大多数情况下，第一种方法是首选方法，它指示授权 webhook 不允许或对请求"无意见"，但是，如果配置了其他授权者，则可以给他们机会允许请求。如果没有其他授权者，或者没有一个授权者，则该请求被禁止。webhook 将返回:
 
@@ -208,11 +208,11 @@ request is forbidden. The webhook would return:
 }
 ```
 
-<!-- 
-The second method denies immediately, short-circuiting evaluation by other 
-configured authorizers. This should only be used by webhooks that have 
-detailed knowledge of the full authorizer configuration of the cluster. 
-The webhook would return: 
+<!--
+The second method denies immediately, short-circuiting evaluation by other
+configured authorizers. This should only be used by webhooks that have
+detailed knowledge of the full authorizer configuration of the cluster.
+The webhook would return:
 -->
 第二种方法立即拒绝其他配置的授权者进行短路评估。仅应由对集群的完整授权者配置有详细了解的 webhook 使用。webhook 将返回:
 
@@ -228,8 +228,8 @@ The webhook would return:
 }
 ```
 
-<!-- 
-Access to non-resource paths are sent as: 
+<!--
+Access to non-resource paths are sent as:
 -->
 对于非资源的路径访问是这么发送的:
 
@@ -251,25 +251,21 @@ Access to non-resource paths are sent as:
 }
 ```
 
-<!-- 
+<!--
 Non-resource paths include: `/api`, `/apis`, `/metrics`, `/resetMetrics`,
 `/logs`, `/debug`, `/healthz`, `/swagger-ui/`, `/swaggerapi/`, `/ui`, and
 `/version.` Clients require access to `/api`, `/api/*`, `/apis`, `/apis/*`,
 and `/version` to discover what resources and versions are present on the server.
 Access to other non-resource paths can be disallowed without restricting access
-to the REST api. 
+to the REST api.
 -->
 非资源类的路径包括：`/api`, `/apis`, `/metrics`, `/resetMetrics`,
 `/logs`, `/debug`, `/healthz`, `/swagger-ui/`, `/swaggerapi/`, `/ui`, 和
 `/version`。客户端需要访问 `/api`, `/api/*`, `/apis`, `/apis/*`, 和 `/version` 以便
 能发现服务器上有什么资源和版本。对于其他非资源类的路径访问在没有 REST API 访问限制的情况下拒绝。
 
-<!-- 
+<!--
 For further documentation refer to the authorization.v1beta1 API objects and
-[webhook.go](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/plugin/pkg/authorizer/webhook/webhook.go). 
+[webhook.go](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/plugin/pkg/authorizer/webhook/webhook.go).
 -->
 更多信息可以参考 authorization.v1beta1 API 对象和[webhook.go](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/plugin/pkg/authorizer/webhook/webhook.go)。
-
-
-
-

From 21b72674d3596d8dede24607fabf2fe91e3a96a4 Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sat, 26 Sep 2020 20:07:24 -0700
Subject: [PATCH 449/496] Update more links

---
 .../reference/access-authn-authz/controlling-access.md    | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/controlling-access.md b/content/zh/docs/reference/access-authn-authz/controlling-access.md
index c33f27a4ef..933072d606 100644
--- a/content/zh/docs/reference/access-authn-authz/controlling-access.md
+++ b/content/zh/docs/reference/access-authn-authz/controlling-access.md
@@ -5,7 +5,7 @@ approvers:
 title: Kubernetes API 访问控制
 ---
 
-用户通过 `kubectl`、客户端库或者通过发送 REST 请求[访问 API](/zh/docs/user-guide/accessing-the-cluster)。 用户和 [Kubernetes 服务账户](/zh/docs/tasks/configure-pod-container/configure-service-account/) 都可以被授权进行 API 访问。
+用户通过 `kubectl`、客户端库或者通过发送 REST 请求[访问 API](/zh/docs/tasks/access-application-cluster/access-cluster/)。 用户和 [Kubernetes 服务账户](/zh/docs/tasks/configure-pod-container/configure-service-account/) 都可以被授权进行 API 访问。
 请求到达 API 服务器后会经过几个阶段，具体说明如图：
 
 ![Diagram of request handling steps for Kubernetes API request](/images/docs/admin/access-control-overview.svg)
@@ -20,7 +20,7 @@ API 服务器会提供一份证书。 该证书一般是自签名的， 所以
 
 一旦 TLS 连接建立，HTTP 请求就进入到了认证的步骤。即图中的步骤 **1** 。
 集群创建脚本或集群管理员会为 API 服务器配置一个或多个认证模块。
-更具体的认证相关的描述详见[这里](/docs/admin/authentication/)。
+更具体的认证相关的描述详见[这里](/zh/docs/reference/access-authn-authz/authentication/)。
 
 认证步骤的输入是整个 HTTP 请求，但这里通常只是检查请求头和 / 或客户端证书。
 
@@ -79,7 +79,7 @@ Kubernetes 的授权要求使用通用的 REST 属性与现有的组织或云服
 
 Kubernetes 支持多种授权模块，例如 ABAC 模式，RBAC 模式和 Webhook 模式。 管理员创建集群时，会配置 API 服务器应用的授权模块。 如果多种授权模式同时被启用，Kubernetes 将检查所有模块，如果其中一种通过授权，则请求授权通过。 如果所有的模块全部拒绝，则请求被拒绝（HTTP 状态码 403）。
 
-要了解更多的 Kubernetes 授权相关信息，包括使用授权模块创建策略的具体说明等，可参考[授权概述](/docs/admin/authorization)。
+要了解更多的 Kubernetes 授权相关信息，包括使用授权模块创建策略的具体说明等，可参考[授权概述](/zh/docs/reference/access-authn-authz/authorization/)。
 
 
 ## 准入控制
@@ -96,7 +96,7 @@ Kubernetes 支持多种授权模块，例如 ABAC 模式，RBAC 模式和 Webhoo
 
 除了拒绝请求外，准入控制器还可以为对象设置复杂的默认值。
 
-可用的准入控制模块描述 [如下](/docs/admin/admission-controllers/)。
+可用的准入控制模块描述 [如下](/zh/docs/reference/access-authn-authz/admission-controllers/)。
 
 一旦请求通过所有准入控制器，将使用对应 API 对象的验证流程对其进行验证，然后写入对象存储 （如步骤 **4**）。
 

From 7686c08fd3bb45e50d251234a55dddebe080c88c Mon Sep 17 00:00:00 2001
From: GoodGameZoo <gaoguangze111@gmail.com>
Date: Sat, 26 Sep 2020 20:20:40 -0700
Subject: [PATCH 450/496] update more links

---
 .../access-cluster.md                          | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/access-cluster.md b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
index cbf2c64633..26b6dca834 100644
--- a/content/zh/docs/tasks/access-application-cluster/access-cluster.md
+++ b/content/zh/docs/tasks/access-application-cluster/access-cluster.md
@@ -71,7 +71,7 @@ curl or wget, or a browser, there are several ways to locate and authenticate:
     - Works with some types of client code that are confused by using a proxy.
     - Need to import a root cert into your browser to protect against MITM.
 -->
-有许多 [例子](/zh/docs/user-guide/kubectl-cheatsheet) 介绍了如何使用 kubectl，可以在 [kubectl手册](/zh/docs/user-guide/kubectl-overview) 中找到更完整的文档。
+有许多 [例子](/zh/docs/reference/kubectl/cheatsheet/) 介绍了如何使用 kubectl，可以在 [kubectl手册](/zh/docs/reference/kubectl/overview/) 中找到更完整的文档。
 
 ## 直接访问 REST API
 Kubectl 处理 apiserver 的定位和身份验证。
@@ -197,7 +197,7 @@ with future high-availability support.
 -->
 上面的例子使用了 `--insecure` 参数，这使得它很容易受到 MITM 攻击。当 kubectl 访问集群时，它使用存储的根证书和客户端证书来访问服务器（这些安装在 `~/.kube` 目录中）。由于集群证书通常是自签名的，因此可能需要特殊配置才能让您的 http 客户端使用根证书。
 
-在一些集群中，apiserver 不需要身份验证；它可能只服务于 localhost，或者被防火墙保护，这个没有一定的标准。 [配置对 API 的访问](/docs/admin/accessing-the-api) 描述了集群管理员如何进行配置。此类方法可能与未来的高可用性支持相冲突。
+在一些集群中，apiserver 不需要身份验证；它可能只服务于 localhost，或者被防火墙保护，这个没有一定的标准。 [配置对 API 的访问](/zh/docs/reference/access-authn-authz/controlling-access/) 描述了集群管理员如何进行配置。此类方法可能与未来的高可用性支持相冲突。
 
 <!--
 ## Programmatic access to the API
@@ -224,7 +224,7 @@ Kubernetes 官方提供对 [Go](#go-client) 和 [Python](#python-client) 的客
 * 想要获得这个库，请运行命令：`go get k8s.io/client-go/<version number>/kubernetes`。参阅 [https://github.com/kubernetes/client-go](https://github.com/kubernetes/client-go) 来查看目前支持哪些版本。
 * 基于这个 client-go 客户端库编写应用程序。 请注意，client-go 定义了自己的 API 对象，因此如果需要，请从 client-go 而不是从主存储库导入 API 定义，例如，`import "k8s.io/client-go/1.4/pkg/api/v1"` 才是对的。
 
-Go 客户端可以像 kubectl CLI 一样使用相同的 [kubeconfig 文件](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) 来定位和验证 apiserver。可参阅 [示例](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go)。
+Go 客户端可以像 kubectl CLI 一样使用相同的 [kubeconfig 文件](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) 来定位和验证 apiserver。可参阅 [示例](https://git.k8s.io/client-go/examples/out-of-cluster-client-configuration/main.go)。
 
 如果应用程序以 Pod 的形式部署在集群中，那么请参阅 [下一章](#accessing-the-api-from-a-pod)。
 
@@ -245,11 +245,11 @@ See documentation for other libraries for how they authenticate.
 
 如果想要使用 [Python 客户端](https://github.com/kubernetes-client/python)，请运行命令：`pip install kubernetes`。参阅 [Python Client Library page](https://github.com/kubernetes-client/python) 以获得更详细的安装参数。
 
-Python 客户端可以像 kubectl CLI 一样使用相同的 [kubeconfig 文件](/docs/concepts/cluster-administration/authenticate-across-clusters-kubeconfig/) 来定位和验证 apiserver，可参阅 [示例](https://github.com/kubernetes-client/python/tree/master/examples)。
+Python 客户端可以像 kubectl CLI 一样使用相同的 [kubeconfig 文件](/zh/docs/tasks/access-application-cluster/configure-access-multiple-clusters/) 来定位和验证 apiserver，可参阅 [示例](https://github.com/kubernetes-client/python/tree/master/examples)。
 
 ### 其它语言
 
-目前有多个 [客户端库](/docs/reference/using-api/client-libraries/) 为其它语言提供访问 API 的方法。
+目前有多个 [客户端库](/zh/docs/reference/using-api/client-libraries/) 为其它语言提供访问 API 的方法。
 参阅其它库的相关文档以获取他们是如何验证的。
 
 <!--
@@ -274,7 +274,7 @@ at `/var/run/secrets/kubernetes.io/serviceaccount/token`.
 
 在 Pod 中定位 apiserver 的推荐方式是通过 `kubernetes.default.svc` 这个 DNS 名称，该名称将会解析为服务 IP，然后服务 IP 将会路由到 apiserver。
 
-向 apiserver 进行身份验证的推荐方法是使用 [服务帐户](/docs/tasks/configure-pod-container/configure-service-account/) 凭据。
+向 apiserver 进行身份验证的推荐方法是使用 [服务帐户](/zh/docs/tasks/configure-pod-container/configure-service-account/) 凭据。
 通过 kube-system，pod 与服务帐户相关联，并且该服务帐户的凭证（token）被放置在该 pod 中每个容器的文件系统中，位于 `/var/run/secrets/kubernetes.io/serviceaccount/token`。
 
 <!--
@@ -322,7 +322,7 @@ such as your desktop machine.
 ## 访问集群中正在运行的服务  {#accessing-services-running-on-the-cluster}
 
 上一节介绍了如何连接 Kubernetes API 服务。本节介绍如何连接到 Kubernetes 集群上运行的其他服务。
-在 Kubernetes 中，[节点](/docs/admin/node)，[pods](/docs/user-guide/pods) 和 [服务](/docs/user-guide/services) 都有自己的 IP。
+在 Kubernetes 中，[节点](/zh/docs/concepts/architecture/nodes/)，[pods](/zh/docs/concepts/workloads/pods/) 和 [服务](/zh/docs/concepts/services-networking/service/) 都有自己的 IP。
 在许多情况下，集群上的节点 IP，pod IP 和某些服务 IP 将无法路由，因此无法从集群外部的计算机（例如桌面计算机）访问它们。
 
 <!--
@@ -361,7 +361,7 @@ You have several options for connecting to nodes, pods and services from outside
 
   - 通过公共 IP 访问服务。
     - 类型为 `NodePort` 或 `LoadBalancer` 的服务，集群外部可以访问。
-      请参阅 [服务](/docs/user-guide/services) 和 [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) 文档。
+      请参阅 [服务](/zh/docs/concepts/services-networking/service/) 和 [kubectl expose](/docs/reference/generated/kubectl/kubectl-commands/#expose) 文档。
     - 取决于您的集群环境，该服务可能仅暴露给您的公司网络，或者也可能暴露给整个互联网。
       请考虑公开该服务是否安全。它是否进行自己的身份验证？
     - 在服务后端放置 pod。要从一组副本中访问一个特定的 pod，例如进行调试，请在 pod 上放置一个唯一的标签，然后创建一个选择此标签的新服务。
@@ -559,7 +559,7 @@ There are several different proxies you may encounter when using Kubernetes:
     - provides load balancing
     - is just used to reach services
 -->
-3.  [kube proxy](/docs/concepts/services-networking/service/#ips-and-vips)：
+3.  [kube proxy](/zh/docs/concepts/services-networking/service/#ips-and-vips)：
 
     - 运行在每个节点上
     - 代理 UDP 和 TCP

From 7eb77ea2a266ffa72620b497a3e26d2726a52fbd Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Sun, 27 Sep 2020 17:25:00 +0800
Subject: [PATCH 451/496] Update service.md

---
 content/zh/docs/concepts/services-networking/service.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index 65f65d4f69..f5b7c629c1 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -32,7 +32,7 @@ and can load-balance across them.
 -->
 使用 Kubernetes，您无需修改应用程序即可使用不熟悉的服务发现机制。
 Kubernetes 为 Pods 提供自己的 IP 地址，并为一组 Pod 提供相同的 DNS 名，
-并且可以在它们之间进行负载平衡。
+并且可以在它们之间进行负载均衡。
 
 <!-- body -->
 

From 2ad06ab73f1c5c71dac1115b4860183351266f03 Mon Sep 17 00:00:00 2001
From: wwgfhf <51694849+wwgfhf@users.noreply.github.com>
Date: Sun, 27 Sep 2020 17:48:01 +0800
Subject: [PATCH 452/496] Update disruptions.md

---
 content/zh/docs/concepts/workloads/pods/disruptions.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/workloads/pods/disruptions.md b/content/zh/docs/concepts/workloads/pods/disruptions.md
index 3b97c72fdf..3c70c6ca68 100644
--- a/content/zh/docs/concepts/workloads/pods/disruptions.md
+++ b/content/zh/docs/concepts/workloads/pods/disruptions.md
@@ -161,7 +161,7 @@ disruptions, if any, to expect.
 自愿干扰的频率各不相同。在一个基本的 Kubernetes 集群中，根本没有自愿干扰。然而，集群管理
 或托管提供商可能运行一些可能导致自愿干扰的额外服务。例如，节点软
 更新可能导致自愿干扰。另外，集群（节点）自动缩放的某些
-现可能导致碎片整理和紧缩节点的自愿干扰。集群
+实现可能导致碎片整理和紧缩节点的自愿干扰。集群
 理员或托管提供商应该已经记录了各级别的自愿干扰（如果有的话）。
 
 <!--

From e3054865e22c725e44907f78b78bdc442719713a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=8E=89=E5=A0=82?= <irichardwang@gmail.com>
Date: Sun, 27 Sep 2020 17:51:36 +0800
Subject: [PATCH 453/496] Update kubeadm_upgrade_plan.md

---
 .../setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md
index 6c64e38f0f..88f2510b6e 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_upgrade_plan.md
@@ -102,15 +102,14 @@ kubeadm upgrade plan [version] [flags]
 
 -->
 
-```
-### 概述
 
+### 概述
 
 检查可升级到哪些版本，并验证您当前的集群是否可升级。 要跳过互联网检查，请传递可选的 [version] 参数 
 
-​```
+```
 kubeadm upgrade plan [version] [flags]
-​```
+```
 
 ### 选项
 
@@ -200,4 +199,3 @@ kubeadm upgrade plan [version] [flags]
 
 </tbody>
 </table>
-```

From e4c0038b14db8ddfad7120ea2aaca122f21fc66d Mon Sep 17 00:00:00 2001
From: Chao Li <l1ch4010@gmail.com>
Date: Sun, 27 Sep 2020 21:02:09 +0800
Subject: [PATCH 454/496] docs: remove duplicate https_proxy variable

This has a duplicate https_proxy variable.
---
 content/zh/docs/setup/learning-environment/minikube.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/setup/learning-environment/minikube.md b/content/zh/docs/setup/learning-environment/minikube.md
index 00d7e0587e..8ee92a3482 100644
--- a/content/zh/docs/setup/learning-environment/minikube.md
+++ b/content/zh/docs/setup/learning-environment/minikube.md
@@ -332,7 +332,7 @@ To switch back to this context, run this command: `kubectl config use-context mi
 如果你启用了 web 代理，则需要将此信息传递给 `minikube start` 命令：
 
 ```shell
-https_proxy=<my proxy> minikube start --docker-env http_proxy=<my proxy> --docker-env https_proxy=<my proxy> --docker-env no_proxy=192.168.99.0/24
+minikube start --docker-env http_proxy=<my proxy> --docker-env https_proxy=<my proxy> --docker-env no_proxy=192.168.99.0/24
 ```
 
 不幸的是，单独设置环境变量不起作用。

From 826d53c81f909b25a1f7fe3fd9c154d537c402a6 Mon Sep 17 00:00:00 2001
From: Casie Oxford <coxford@d2iq.com>
Date: Sun, 27 Sep 2020 15:10:48 -0500
Subject: [PATCH 455/496] Update style guidelines for API object capitalization
 & formatting (#23497)

* Update style-guide.md

updates to api object handling according to SIG email discussion.

* Update content/en/docs/contribute/style/style-guide.md

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>

* Update style-guide.md

updating API Object Examples

* Update content/en/docs/contribute/style/style-guide.md

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>

* Update content/en/docs/contribute/style/style-guide.md

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>

* Update content/en/docs/contribute/style/style-guide.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

Co-authored-by: Zach Corleissen <zacharysarah@users.noreply.github.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
---
 .../en/docs/contribute/style/style-guide.md   | 27 +++++++++----------
 1 file changed, 13 insertions(+), 14 deletions(-)

diff --git a/content/en/docs/contribute/style/style-guide.md b/content/en/docs/contribute/style/style-guide.md
index 9b99ba3abc..c0efac7959 100644
--- a/content/en/docs/contribute/style/style-guide.md
+++ b/content/en/docs/contribute/style/style-guide.md
@@ -42,12 +42,9 @@ The English-language documentation uses U.S. English spelling and grammar.
 
 ## Documentation formatting standards
 
-### Use camel case for API objects
+### Use upper camel case for API objects
 
-When you refer to an API object, use the same uppercase and lowercase letters
-that are used in the actual object name. Typically, the names of API
-objects use
-[camel case](https://en.wikipedia.org/wiki/Camel_case).
+When you refer specifically to interacting with an API object, use [UpperCamelCase](https://en.wikipedia.org/wiki/Camel_case), also known as Pascal Case. When you are generally discussing an API object, use [sentence-style capitalization](https://docs.microsoft.com/en-us/style-guide/text-formatting/using-type/use-sentence-style-capitalization).
 
 Don't split the API object name into separate words. For example, use
 PodTemplateList, not Pod Template List.
@@ -58,9 +55,9 @@ leads to an awkward construction.
 {{< table caption = "Do and Don't - API objects" >}}
 Do | Don't
 :--| :-----
-The Pod has two containers. | The pod has two containers.
-The Deployment is responsible for ... | The Deployment object is responsible for ...
-A PodList is a list of Pods. | A Pod List is a list of pods.
+The pod has two containers. | The Pod has two containers.
+The HorizontalPodAutoscaler is responsible for ... | The HorizontalPodAutoscaler object is responsible for ...
+A PodList is a list of pods. | A Pod List is a list of pods.
 The two ContainerPorts ... | The two ContainerPort objects ...
 The two ContainerStateTerminated objects ... | The two ContainerStateTerminateds ...
 {{< /table >}}
@@ -71,7 +68,7 @@ The two ContainerStateTerminated objects ... | The two ContainerStateTerminateds
 Use angle brackets for placeholders. Tell the reader what a placeholder
 represents.
 
-1. Display information about a Pod:
+1. Display information about a pod:
 
         kubectl describe pod <pod-name> -n <namespace>
 
@@ -116,7 +113,7 @@ The copy is called a "fork". | The copy is called a "fork."
 
 ## Inline code formatting
 
-### Use code style for inline code and commands
+### Use code style for inline code, commands, and API objects
 
 For inline code in an HTML document, use the `<code>` tag. In a Markdown
 document, use the backtick (`` ` ``).
@@ -124,7 +121,9 @@ document, use the backtick (`` ` ``).
 {{< table caption = "Do and Don't - Use code style for inline code and commands" >}}
 Do | Don't
 :--| :-----
-The `kubectl run`command creates a Pod. | The "kubectl run" command creates a Pod.
+The `kubectl run` command creates a `Pod`. | The "kubectl run" command creates a pod.
+The kubelet on each node acquires a `Lease`… | The kubelet on each node acquires a lease…
+A `PersistentVolume` represents durable storage… | A Persistent Volume represents durable storage…
 For declarative management, use `kubectl apply`. | For declarative management, use "kubectl apply".
 Enclose code samples with triple backticks. (\`\`\`)| Enclose code samples with any other syntax.
 Use single backticks to enclose inline code. For example, `var example = true`. | Use two asterisks (`**`) or an underscore (`_`) to enclose inline code. For example, **var example = true**.
@@ -201,7 +200,7 @@ kubectl get pods | $ kubectl get pods
 
 ### Separate commands from output
 
-Verify that the Pod is running on your chosen node:
+Verify that the pod is running on your chosen node:
 
     kubectl get pods --output=wide
 
@@ -513,7 +512,7 @@ Do | Don't
 :--| :-----
 To create a ReplicaSet, ... | In order to create a ReplicaSet, ...
 See the configuration file. | Please see the configuration file.
-View the Pods. | With this next command, we'll view the Pods.
+View the pods. | With this next command, we'll view the pods.
 {{< /table >}}
 
 ### Address the reader as "you"
@@ -552,7 +551,7 @@ Do | Don't
 :--| :-----
 Version 1.4 includes ... | In version 1.4, we have added ...
 Kubernetes provides a new feature for ... | We provide a new feature ...
-This page teaches you how to use Pods. | In this page, we are going to learn about Pods.
+This page teaches you how to use pods. | In this page, we are going to learn about pods.
 {{< /table >}}
 
 

From 1c90c995c3676a2365933e9e45284ab048a1e782 Mon Sep 17 00:00:00 2001
From: Brian Nutt <briankennethnutt@gmail.com>
Date: Sun, 27 Sep 2020 13:28:52 -0700
Subject: [PATCH 456/496] Fix typo in
 en/docs/concepts/scheduling-eviction/scheduling-framework.md

Fixes description for Postfilter plugin. The plugin is called when no feasible nodes were found for the pod being scheduled.
---
 .../docs/concepts/scheduling-eviction/scheduling-framework.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md b/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
index 20ecb6cf6b..5274c2ba24 100644
--- a/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
+++ b/content/en/docs/concepts/scheduling-eviction/scheduling-framework.md
@@ -78,7 +78,7 @@ called for that node. Nodes may be evaluated concurrently.
 ### PostFilter {#post-filter}
 
 These plugins are called after Filter phase, but only when no feasible nodes
-were found for the node. Plugins are called in their configured order. If
+were found for the pod. Plugins are called in their configured order. If
 any postFilter plugin marks the node as `Schedulable`, the remaining plugins
 will not be called. A typical PostFilter implementation is preemption, which
 tries to make the pod schedulable by preempting other Pods.

From 3a9615d2c7f3b8c7ed01ddd772a38eaea7091258 Mon Sep 17 00:00:00 2001
From: zacharysarah <zach@corleissen.com>
Date: Thu, 10 Sep 2020 13:34:58 -0700
Subject: [PATCH 457/496] Update for chair emeritus

---
 OWNERS            | 6 +++---
 OWNERS_ALIASES    | 8 +++-----
 SECURITY_CONTACTS | 3 ++-
 3 files changed, 8 insertions(+), 9 deletions(-)

diff --git a/OWNERS b/OWNERS
index 3dd8f337ba..18bcac1558 100644
--- a/OWNERS
+++ b/OWNERS
@@ -7,10 +7,10 @@ approvers:
 - sig-docs-en-owners # Defined in OWNERS_ALIASES
 
 emeritus_approvers:
-# chenopis, you're welcome to return when you're ready to resume PR wrangling
-# jaredbhatti, you're welcome to return when you're ready to resume PR wrangling
-# stewart-yu, you're welcome to return when you're ready to resume PR wrangling
+# - chenopis, commented out to disable PR assignments
+# - jaredbhatti, commented out to disable PR assignments
 - stewart-yu 
+- zacharysarah
 
 labels:
 - sig/docs
diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
index 17e7880f5f..4eaa882a18 100644
--- a/OWNERS_ALIASES
+++ b/OWNERS_ALIASES
@@ -24,6 +24,7 @@ aliases:
   sig-docs-en-owners: # Admins for English content
     - bradtopol
     - celestehorgan
+    - irvifa
     - jimangel
     - kbarnard10
     - kbhawkey
@@ -48,7 +49,6 @@ aliases:
     - steveperry-53
     - tengqm
     - xiangpengzhao
-    - zacharysarah
     - zparnold
   sig-docs-es-owners: # Admins for Spanish content
     - raelga
@@ -131,7 +131,6 @@ aliases:
     - ianychoi
     - seokho-son
     - ysyukr
-    - zacharysarah
   sig-docs-ko-reviews: # PR reviews for Korean content
     - ClaudiaJKang
     - gochist
@@ -140,12 +139,12 @@ aliases:
     - ysyukr
     - pjhwa
   sig-docs-leads: # Website chairs and tech leads
+    - irvifa
     - jimangel
     - kbarnard10
     - kbhawkey
     - onlydole
     - sftim
-    - zacharysarah
   sig-docs-zh-owners: # Admins for Chinese content
     # chenopis
     - chenrui333
@@ -158,19 +157,18 @@ aliases:
     - tengqm
     - xiangpengzhao
     - xichengliudui
-    # zacharysarah
     # zhangxiaoyu-zidif
   sig-docs-zh-reviews: # PR reviews for Chinese content
     - chenrui333
     - howieyuen
     - idealhack
+    - pigletfly
     - SataQiu
     - tanjunchen
     - tengqm
     - xiangpengzhao
     - xichengliudui
     # zhangxiaoyu-zidif
-    - pigletfly
   sig-docs-pt-owners: # Admins for Portuguese content
     - femrtnz
     - jcjesus
diff --git a/SECURITY_CONTACTS b/SECURITY_CONTACTS
index c87673847c..5b0cc85b45 100644
--- a/SECURITY_CONTACTS
+++ b/SECURITY_CONTACTS
@@ -10,6 +10,7 @@
 # DO NOT REPORT SECURITY VULNERABILITIES DIRECTLY TO THESE NAMES, FOLLOW THE
 # INSTRUCTIONS AT https://kubernetes.io/security/
 
+irvifa
 jimangel
 kbarnard10
-zacharysarah
+sftim
\ No newline at end of file

From b8bc85f8041fa9e440e11d7e8cbcafd7aea99c51 Mon Sep 17 00:00:00 2001
From: Amos Chu <hongweichu.ouc@gmail.com>
Date: Mon, 28 Sep 2020 15:21:31 +0800
Subject: [PATCH 458/496] fix typo in
 content/en/docs/concepts/workloads/pods/_index.md

wrong spelling for comunicate, it should be communicate
---
 content/en/docs/concepts/workloads/pods/_index.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/workloads/pods/_index.md b/content/en/docs/concepts/workloads/pods/_index.md
index bcd2cbcf16..9247cd3a0d 100644
--- a/content/en/docs/concepts/workloads/pods/_index.md
+++ b/content/en/docs/concepts/workloads/pods/_index.md
@@ -217,7 +217,7 @@ or POSIX shared memory.  Containers in different Pods have distinct IP addresses
 and can not communicate by IPC without
 [special configuration](/docs/concepts/policy/pod-security-policy/).
 Containers that want to interact with a container running in a different Pod can
-use IP networking to comunicate.
+use IP networking to communicate.
 
 Containers within the Pod see the system hostname as being the same as the configured
 `name` for the Pod. There's more about this in the [networking](/docs/concepts/cluster-administration/networking/)

From e7414feae15d7792f442b0fad1f26a483741053c Mon Sep 17 00:00:00 2001
From: Arhell <arhell333@gmail.com>
Date: Mon, 28 Sep 2020 10:37:56 +0300
Subject: [PATCH 459/496] remove indent

---
 content/vi/_index.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/vi/_index.html b/content/vi/_index.html
index f782a0fcb2..ec3e946481 100644
--- a/content/vi/_index.html
+++ b/content/vi/_index.html
@@ -41,7 +41,6 @@ Kubernetes là dự án mã nguồn mở cho phép bạn tự do tận dụng c
         <button id="desktopShowVideoButton" onclick="kub.showVideo()">Xem Video</button>
         <br>
         <br>
-        <br>
         <a href="https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-2020/" button id="desktopKCButton">Tham gia KubeCon Amsterdam 30/03-02/04/2020</a>
         <br>
         <br>

From e4c3319ad36b0ac3690d4de86f9cd7a0d345f4c7 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Mon, 28 Sep 2020 17:39:02 +0800
Subject: [PATCH 460/496] add post-filter part

---
 .../scheduling-eviction/scheduling-framework.md  | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md b/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
index 4b3cfd6627..8d17592937 100644
--- a/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
+++ b/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
@@ -156,6 +156,22 @@ called for that node. Nodes may be evaluated concurrently.
 
 过滤插件用于过滤出不能运行该 Pod 的节点。对于每个节点，调度器将按照其配置顺序调用这些过滤插件。如果任何过滤插件将节点标记为不可行，则不会为该节点调用剩下的过滤插件。节点可以被同时进行评估。
 
+<!--
+### PostFilter {#post-filter}
+-->
+
+### 后置过滤 {#post-filter}
+
+<!--
+These plugins are called after Filter phase, but only when no feasible nodes
+were found for the pod. Plugins are called in their configured order. If
+any postFilter plugin marks the node as `Schedulable`, the remaining plugins
+will not be called. A typical PostFilter implementation is preemption, which
+tries to make the pod schedulable by preempting other Pods.
+-->
+
+这些插件在筛选阶段后调用，但仅在该pod没有可行的节点时调用。插件按其配置的顺序调用。如果任何后过滤器插件标记节点为“可调度”， 则其余的插件不会调用。典型的后筛选实现是抢占，试图通过抢占其他pod的资源使该pod可以调度。
+
 <!-- 
 ### PreScore {#pre-score}
  -->

From 48702c35ca6c0f99acf2cabfc9c363fbd0915c32 Mon Sep 17 00:00:00 2001
From: Pratik raj <rajpratik71@gmail.com>
Date: Mon, 28 Sep 2020 17:48:07 +0530
Subject: [PATCH 461/496] docs: Use sudo and tee uniformly everywhere

Added sudo uniformly everywhere it required as it presence doesn't affect anything , but it help new user's of linux , docker or kubernetes who are not much familiar with internals and also for who doesn't read the documentation line by line and use the guides for command reference and just copy paste for their use.

Also , changed  the way of writing or creating files , now using "tee" because previous way gives permission issue for non sudo users.
---
 .../container-runtimes.md                     | 123 +++++++++---------
 1 file changed, 62 insertions(+), 61 deletions(-)

diff --git a/content/en/docs/setup/production-environment/container-runtimes.md b/content/en/docs/setup/production-environment/container-runtimes.md
index bb01d93d36..feb2a72673 100644
--- a/content/en/docs/setup/production-environment/container-runtimes.md
+++ b/content/en/docs/setup/production-environment/container-runtimes.md
@@ -32,9 +32,6 @@ This document is written for users installing CRI onto Linux. For other operatin
 systems, look for documentation specific to your platform.
 {{< /note >}}
 
-You should execute all the commands in this guide as `root`. For example, prefix commands
-with `sudo `, or become `root` and run the commands as that user.
-
 ### Cgroup drivers
 
 When systemd is chosen as the init system for a Linux distribution, the init process generates
@@ -76,18 +73,18 @@ Use the following commands to install Docker on your system:
 # (Install Docker CE)
 ## Set up the repository:
 ### Install packages to allow apt to use a repository over HTTPS
-apt-get update && apt-get install -y \
+sudo apt-get update && sudo apt-get install -y \
   apt-transport-https ca-certificates curl software-properties-common gnupg2
 ```
 
 ```shell
 # Add Docker's official GPG key:
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
+curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
 ```
 
 ```shell
 # Add the Docker apt repository:
-add-apt-repository \
+sudo add-apt-repository \
   "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
   $(lsb_release -cs) \
   stable"
@@ -95,7 +92,7 @@ add-apt-repository \
 
 ```shell
 # Install Docker CE
-apt-get update && apt-get install -y \
+sudo apt-get update && sudo apt-get install -y \
   containerd.io=1.2.13-2 \
   docker-ce=5:19.03.11~3-0~ubuntu-$(lsb_release -cs) \
   docker-ce-cli=5:19.03.11~3-0~ubuntu-$(lsb_release -cs)
@@ -103,7 +100,7 @@ apt-get update && apt-get install -y \
 
 ```shell
 # Set up the Docker daemon
-cat > /etc/docker/daemon.json <<EOF
+cat <<EOF | sudo tee /etc/docker/daemon.json
 {
   "exec-opts": ["native.cgroupdriver=systemd"],
   "log-driver": "json-file",
@@ -116,13 +113,13 @@ EOF
 ```
 
 ```shell
-mkdir -p /etc/systemd/system/docker.service.d
+sudo mkdir -p /etc/systemd/system/docker.service.d
 ```
 
 ```shell
 # Restart Docker
-systemctl daemon-reload
-systemctl restart docker
+sudo systemctl daemon-reload
+sudo systemctl restart docker
 ```
 {{% /tab %}}
 {{% tab name="CentOS/RHEL 7.4+" %}}
@@ -131,18 +128,18 @@ systemctl restart docker
 # (Install Docker CE)
 ## Set up the repository
 ### Install required packages
-yum install -y yum-utils device-mapper-persistent-data lvm2
+sudo yum install -y yum-utils device-mapper-persistent-data lvm2
 ```
 
 ```shell
 ## Add the Docker repository
-yum-config-manager --add-repo \
+sudo yum-config-manager --add-repo \
   https://download.docker.com/linux/centos/docker-ce.repo
 ```
 
 ```shell
 # Install Docker CE
-yum update -y && yum install -y \
+sudo yum update -y && sudo yum install -y \
   containerd.io-1.2.13 \
   docker-ce-19.03.11 \
   docker-ce-cli-19.03.11
@@ -150,12 +147,12 @@ yum update -y && yum install -y \
 
 ```shell
 ## Create /etc/docker
-mkdir /etc/docker
+sudo mkdir /etc/docker
 ```
 
 ```shell
 # Set up the Docker daemon
-cat > /etc/docker/daemon.json <<EOF
+cat <<EOF | sudo tee /etc/docker/daemon.json
 {
   "exec-opts": ["native.cgroupdriver=systemd"],
   "log-driver": "json-file",
@@ -171,13 +168,13 @@ EOF
 ```
 
 ```shell
-mkdir -p /etc/systemd/system/docker.service.d
+sudo mkdir -p /etc/systemd/system/docker.service.d
 ```
 
 ```shell
 # Restart Docker
-systemctl daemon-reload
-systemctl restart docker
+sudo systemctl daemon-reload
+sudo systemctl restart docker
 ```
 {{% /tab %}}
 {{< /tabs >}}
@@ -205,17 +202,17 @@ For more information, see the [CRI-O compatibility matrix](https://github.com/cr
 ### Prerequisites
 
 ```shell
-modprobe overlay
-modprobe br_netfilter
+sudo modprobe overlay
+sudo modprobe br_netfilter
 
 # Set up required sysctl params, these persist across reboots.
-cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
+cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
 net.bridge.bridge-nf-call-iptables  = 1
 net.ipv4.ip_forward                 = 1
 net.bridge.bridge-nf-call-ip6tables = 1
 EOF
 
-sysctl --system
+sudo sysctl --system
 ```
 
 {{< tabs name="tab-cri-cri-o-installation" >}}
@@ -237,14 +234,18 @@ To install version 1.18.3, set `VERSION=1.18:1.18.3`.
 
 Then run
 ```shell
-echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
+cat <<EOF | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
+"deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /"
+EOF
+cat <<EOF | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
+"deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /"
+EOF
 
-curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | apt-key add -
-curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | sudo apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | sudo apt-key add -
 
-apt-get update
-apt-get install cri-o cri-o-runc
+sudo apt-get update
+sudo apt-get install cri-o cri-o-runc
 ```
 
 {{% /tab %}}
@@ -269,14 +270,14 @@ To install version 1.18.3, set `VERSION=1.18:1.18.3`.
 
 Then run
 ```shell
-echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
-echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
+sudo echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
+sudo echo "deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/ /" > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.list
 
-curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | apt-key add -
-curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/Release.key | sudo apt-key add -
+curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/Release.key | sudo apt-key add -
 
-apt-get update
-apt-get install cri-o cri-o-runc
+sudo apt-get update
+sudo apt-get install cri-o cri-o-runc
 ```
 {{% /tab %}}
 
@@ -299,9 +300,9 @@ To install version 1.18.3, set `VERSION=1.18:1.18.3`.
 
 Then run
 ```shell
-curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/devel:kubic:libcontainers:stable.repo
-curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
-yum install cri-o
+sudo curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/$OS/devel:kubic:libcontainers:stable.repo
+sudo curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
+sudo yum install cri-o
 ```
 
 {{% /tab %}}
@@ -318,14 +319,14 @@ Set `$VERSION` to the CRI-O version that matches your Kubernetes version.
 For instance, if you want to install CRI-O 1.18, `VERSION=1.18`                                                                                                                                                                               
 You can find available versions with:
 ```shell
-dnf module list cri-o
+sudo dnf module list cri-o
 ```
 CRI-O does not support pinning to specific releases on Fedora.
 
 Then run
 ```shell
-dnf module enable cri-o:$VERSION
-dnf install cri-o
+sudo dnf module enable cri-o:$VERSION
+sudo dnf install cri-o
 ```
 
 {{% /tab %}}
@@ -334,8 +335,8 @@ dnf install cri-o
 ### Start CRI-O
 
 ```shell
-systemctl daemon-reload
-systemctl start crio
+sudo systemctl daemon-reload
+sudo systemctl start crio
 ```
 
 Refer to the [CRI-O installation guide](https://github.com/kubernetes-sigs/cri-o#getting-started)
@@ -350,22 +351,22 @@ Use the following commands to install Containerd on your system:
 ### Prerequisites
 
 ```shell
-cat > /etc/modules-load.d/containerd.conf <<EOF
+cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf
 overlay
 br_netfilter
 EOF
 
-modprobe overlay
-modprobe br_netfilter
+sudo modprobe overlay
+sudo modprobe br_netfilter
 
 # Setup required sysctl params, these persist across reboots.
-cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
+cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
 net.bridge.bridge-nf-call-iptables  = 1
 net.ipv4.ip_forward                 = 1
 net.bridge.bridge-nf-call-ip6tables = 1
 EOF
 
-sysctl --system
+sudo sysctl --system
 ```
 
 ### Install containerd
@@ -377,17 +378,17 @@ sysctl --system
 # (Install containerd)
 ## Set up the repository
 ### Install packages to allow apt to use a repository over HTTPS
-apt-get update && apt-get install -y apt-transport-https ca-certificates curl software-properties-common
+sudo apt-get update && sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
 ```
 
 ```shell
 ## Add Docker's official GPG key
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
+curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
 ```
 
 ```shell
 ## Add Docker apt repository.
-add-apt-repository \
+sudo add-apt-repository \
     "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
     $(lsb_release -cs) \
     stable"
@@ -395,18 +396,18 @@ add-apt-repository \
 
 ```shell
 ## Install containerd
-apt-get update && apt-get install -y containerd.io
+sudo apt-get update && sudo apt-get install -y containerd.io
 ```
 
 ```shell
 # Configure containerd
-mkdir -p /etc/containerd
-containerd config default > /etc/containerd/config.toml
+sudo mkdir -p /etc/containerd
+sudo containerd config default > /etc/containerd/config.toml
 ```
 
 ```shell
 # Restart containerd
-systemctl restart containerd
+sudo systemctl restart containerd
 ```
 {{% /tab %}}
 {{% tab name="CentOS/RHEL 7.4+" %}}
@@ -415,30 +416,30 @@ systemctl restart containerd
 # (Install containerd)
 ## Set up the repository
 ### Install required packages
-yum install -y yum-utils device-mapper-persistent-data lvm2
+sudo yum install -y yum-utils device-mapper-persistent-data lvm2
 ```
 
 ```shell
 ## Add docker repository
-yum-config-manager \
+sudo yum-config-manager \
     --add-repo \
     https://download.docker.com/linux/centos/docker-ce.repo
 ```
 
 ```shell
 ## Install containerd
-yum update -y && yum install -y containerd.io
+sudo yum update -y && sudo yum install -y containerd.io
 ```
 
 ```shell
 ## Configure containerd
-mkdir -p /etc/containerd
-containerd config default > /etc/containerd/config.toml
+sudo mkdir -p /etc/containerd
+sudo containerd config default > /etc/containerd/config.toml
 ```
 
 ```shell
 # Restart containerd
-systemctl restart containerd
+sudo systemctl restart containerd
 ```
 {{% /tab %}}
 {{% tab name="Windows (PowerShell)" %}}

From f73f527fceee9c55dc645adaf4e84c21e32f9ec2 Mon Sep 17 00:00:00 2001
From: Yong Zhang <npu21@163.com>
Date: Tue, 29 Sep 2020 10:32:26 +0800
Subject: [PATCH 462/496] Update scheduling-framework.md

---
 .../docs/concepts/scheduling-eviction/scheduling-framework.md   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md b/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
index 8d17592937..0d8f356949 100644
--- a/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
+++ b/content/zh/docs/concepts/scheduling-eviction/scheduling-framework.md
@@ -170,7 +170,7 @@ will not be called. A typical PostFilter implementation is preemption, which
 tries to make the pod schedulable by preempting other Pods.
 -->
 
-这些插件在筛选阶段后调用，但仅在该pod没有可行的节点时调用。插件按其配置的顺序调用。如果任何后过滤器插件标记节点为“可调度”， 则其余的插件不会调用。典型的后筛选实现是抢占，试图通过抢占其他pod的资源使该pod可以调度。
+这些插件在筛选阶段后调用，但仅在该 pod 没有可行的节点时调用。插件按其配置的顺序调用。如果任何后过滤器插件标记节点为“可调度”， 则其余的插件不会调用。典型的后筛选实现是抢占，试图通过抢占其他 pod  的资源使该 pod 可以调度。
 
 <!-- 
 ### PreScore {#pre-score}

From 31b8ea74693e4f9ff93e2aa239ad4a5329643126 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Tue, 29 Sep 2020 11:07:13 +0800
Subject: [PATCH 463/496] update run command part

---
 .../tasks/manage-kubernetes-objects/imperative-command.md     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
index 89c86ebb2b..5396621680 100644
--- a/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
+++ b/content/zh/docs/tasks/manage-kubernetes-objects/imperative-command.md
@@ -59,7 +59,7 @@ The `kubectl` tool supports verb-driven commands for creating some of the most c
 object types. The commands are named to be recognizable to users unfamiliar with
 the Kubernetes object types.
 
-- `run`: Create a new Deployment object to run Containers in one or more Pods.
+- `run`: Create a new Pod to run a Container.
 - `expose`: Create a new Service object to load balance traffic across Pods.
 - `autoscale`: Create a new Autoscaler object to automatically horizontally scale a controller, such as a Deployment.
 -->
@@ -68,7 +68,7 @@ the Kubernetes object types.
 `kubectl` 工具支持动词驱动的命令，用来创建一些最常见的对象类别。
 命令的名称设计使得不熟悉 Kubernetes 对象类型的用户也能做出判断。
 
-- `run`：创建一个新的 Deployment 对象来在一个或多个 Pod 中运行 Container。
+- `run`：创建一个新的 Pod 来运行一个容器。
 - `expose`：创建一个新的 Service 对象为若干 Pod 提供流量负载均衡。
 - `autoscale`：创建一个新的 Autoscaler 对象来自动对某控制器（如 Deployment）
   执行水平扩缩。

From 8d28d887fef8eb61874ddf7bf2dc3dd3a4f98701 Mon Sep 17 00:00:00 2001
From: Zhang Yong <npu21@163.com>
Date: Tue, 29 Sep 2020 14:15:02 +0800
Subject: [PATCH 464/496] update thirdpary message part

---
 i18n/zh.toml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/i18n/zh.toml b/i18n/zh.toml
index 7446f8589a..9e776fa440 100644
--- a/i18n/zh.toml
+++ b/i18n/zh.toml
@@ -193,6 +193,9 @@ other = "订阅"
 [synopsis_heading]
 other = "简介"
 
+[thirdparty_message]
+other = """本部分链接到提供 Kubernetes 所需功能的第三方项目。Kubernetes 项目作者不负责这些项目。此页面遵循<a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">CNCF 网站指南</a>，按字母顺序列出项目。要将项目添加到此列表中，请在提交更改之前阅读<a href="/docs/contribute/style/content-guide/#third-party-content">内容指南</a>。"""
+
 [ui_search_placeholder]
 other = "搜索"
 

From 6d2d7d9f43a94ad256f5f4519cb2098b56f6038c Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Tue, 29 Sep 2020 15:20:24 +0800
Subject: [PATCH 465/496] Update web-ui-dashboard.md

---
 .../docs/tasks/access-application-cluster/web-ui-dashboard.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md
index 511ef95ee7..aadcd3d896 100644
--- a/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -96,9 +96,9 @@ kubectl proxy
 ```
 
 <!--
-Kubectl will make Dashboard available at http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/.
+Kubectl will make Dashboard available at [http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/](http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/).
 -->
-kubectl 会使得 Dashboard 可以通过 http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/ 访问。
+kubectl 会使得 Dashboard 可以通过 [http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/](http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/) 访问。
 
 <!--
 The UI can _only_ be accessed from the machine where the command is executed. See `kubectl proxy --help` for more options.

From 2d71388f9632d055dfda591410737254d5622a73 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Tue, 29 Sep 2020 15:30:02 +0800
Subject: [PATCH 466/496] Update rbac.md

---
 content/zh/docs/reference/access-authn-authz/rbac.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/zh/docs/reference/access-authn-authz/rbac.md b/content/zh/docs/reference/access-authn-authz/rbac.md
index 3d35e4e8bb..cc343c8a8a 100644
--- a/content/zh/docs/reference/access-authn-authz/rbac.md
+++ b/content/zh/docs/reference/access-authn-authz/rbac.md
@@ -1465,6 +1465,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources: ["clusterroles"]
   verbs: ["bind"]
+  # omit resourceNames to allow binding any ClusterRole
   resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -1502,6 +1503,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources: ["clusterroles"]
   verbs: ["bind"]
+  # 省略 resourceNames 则允许绑定任何 ClusterRole
   resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1

From 56ceb5311410a95b190eb98c7a56175ce94ccc8f Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Tue, 29 Sep 2020 15:38:32 +0800
Subject: [PATCH 467/496] Update admission-controllers.md

---
 .../reference/access-authn-authz/admission-controllers.md     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index fbd563f9c3..268ec34de8 100644
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -242,10 +242,10 @@ This admission controller sets the default forgiveness toleration for pods to to
 the taints `notready:NoExecute` and `unreachable:NoExecute` for 5 minutes,
 if the pods don't already have toleration for taints
 `node.kubernetes.io/not-ready:NoExecute` or
-`node.alpha.kubernetes.io/unreachable:NoExecute`.
+`node.kubernetes.io/unreachable:NoExecute`.
 -->
 
-该准入控制器为 Pod 设置默认的容忍度，在 5 分钟内容忍 `notready:NoExecute` 和 `unreachable:NoExecute` 污点。（如果 Pod 尚未容忍 `node.kubernetes.io/not-ready：NoExecute` 和 `node.alpha.kubernetes.io/unreachable：NoExecute` 污点的话）
+该准入控制器为 Pod 设置默认的容忍度，在 5 分钟内容忍 `notready:NoExecute` 和 `unreachable:NoExecute` 污点。（如果 Pod 尚未容忍 `node.kubernetes.io/not-ready：NoExecute` 和 `node.kubernetes.io/unreachable：NoExecute` 污点的话）
 
 ### DenyExecOnPrivileged {#denyexeconprivileged} 
 {{< feature-state for_k8s_version="v1.13" state="deprecated" >}}

From 08f42e6f452fb5162b5fda8788945a5e1c814840 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Tue, 29 Sep 2020 15:43:24 +0800
Subject: [PATCH 468/496] Update node-conformance.md

---
 .../docs/setup/best-practices/node-conformance.md | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/content/zh/docs/setup/best-practices/node-conformance.md b/content/zh/docs/setup/best-practices/node-conformance.md
index bef833cf6c..9a5f72fe24 100644
--- a/content/zh/docs/setup/best-practices/node-conformance.md
+++ b/content/zh/docs/setup/best-practices/node-conformance.md
@@ -31,21 +31,6 @@ The test validates whether the node meets the minimum requirements for Kubernete
 -->
 该测试主要检测节点是否满足 Kubernetes 的最低要求，通过检测的节点有资格加入 Kubernetes 集群。
 
-<!--
-## Limitations
--->
-## 限制
-
-<!--
-In Kubernetes version 1.5, node conformance test has the following limitations:
--->
-在 Kubernetes 1.5 版中，节点一致性测试具有以下限制：
-
-<!--
-* Node conformance test only supports Docker as the container runtime.
-* -->
-* 节点一致性测试只支持 Docker 作为容器运行时环境。
-
 <!--
 ## Node Prerequisite
 -->

From 8c5e6dcc2d951c1a26add9c2b49affca1cb50166 Mon Sep 17 00:00:00 2001
From: Vickey Wu <1143604452@qq.com>
Date: Tue, 29 Sep 2020 16:19:36 +0800
Subject: [PATCH 469/496] break the long lines

break the long lines
---
 .../admission-controllers.md                  | 33 +++++++++++++------
 1 file changed, 23 insertions(+), 10 deletions(-)

diff --git a/content/zh/docs/reference/access-authn-authz/admission-controllers.md b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
index 1edc1477a9..1debfacf08 100755
--- a/content/zh/docs/reference/access-authn-authz/admission-controllers.md
+++ b/content/zh/docs/reference/access-authn-authz/admission-controllers.md
@@ -208,38 +208,51 @@ Rejects all requests. AlwaysDeny is DEPRECATED as no real meaning.
 ### CertificateApproval
 
 <!--
-This admission controller observes requests to 'approve' CertificateSigningRequest resources and performs additional authorization checks to ensure the approving user has permission to approve certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
+This admission controller observes requests to 'approve' CertificateSigningRequest resources
+and performs additional authorization checks to ensure the approving user has permission 
+to approve certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
 -->
 
-此准入控制器获取“审批” CertificateSigningRequest 资源的请求并执行额外的授权检查，以确保审批请求的用户有权限审批 `spec.signerName` 请求 CertificateSigningRequest 资源的证书请求。
+此准入控制器获取“审批” CertificateSigningRequest 资源的请求并执行额外的授权检查，
+以确保审批请求的用户有权限审批 `spec.signerName` 请求 CertificateSigningRequest 资源的证书请求。
 
 <!--
-See Certificate Signing Requests for more information on the permissions required to perform different actions on CertificateSigningRequest resources.
+See Certificate Signing Requests for more information on the permissions required 
+to perform different actions on CertificateSigningRequest resources.
 -->
 
-有关对证书签名请求资源执行不同操作所需权限的详细信息，请参阅[证书签名请求](/docs/reference/access-authn-authz/certificate-signing-requests/)
+有关对证书签名请求资源执行不同操作所需权限的详细信息，
+请参阅[证书签名请求](/docs/reference/access-authn-authz/certificate-signing-requests/)
 
 ### CertificateSigning
 
 <!--
-This admission controller observes updates to the status.certificate field of CertificateSigningRequest resources and performs an additional authorization checks to ensure the signing user has permission to sign certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
+This admission controller observes updates to the status.certificate field of CertificateSigningRequest resources 
+and performs an additional authorization checks to ensure the signing user has permission 
+to sign certificate requests with the spec.signerName requested on the CertificateSigningRequest resource.
 -->
 
-此准入控制器获取 CertificateSigningRequest 资源的 `status.certificate` 字段更新请求并执行额外的授权检查，以确保签发证书的用户有权限为 `spec.signerName` 请求 CertificateSigningRequest 资源的证书请求`签发`证书。
+此准入控制器获取 CertificateSigningRequest 资源的 `status.certificate` 字段更新请求并执行额外的授权检查，
+以确保签发证书的用户有权限为 `spec.signerName` 请求 CertificateSigningRequest 资源的证书请求`签发`证书。
 
 <!--
-See Certificate Signing Requests for more information on the permissions required to perform different actions on CertificateSigningRequest resources.
+See Certificate Signing Requests for more information on the permissions required 
+to perform different actions on CertificateSigningRequest resources.
 -->
 
-有关对证书签名请求资源执行不同操作所需权限的详细信息，请参阅[证书签名请求](/docs/reference/access-authn-authz/certificate-signing-requests/)
+有关对证书签名请求资源执行不同操作所需权限的详细信息，
+请参阅[证书签名请求](/docs/reference/access-authn-authz/certificate-signing-requests/)
 
 ### CertificateSubjectRestrictions 
 
 <!--
-This admission controller observes creation of CertificateSigningRequest resources that have a spec.signerName of kubernetes.io/kube-apiserver-client. It rejects any request that specifies a 'group' (or 'organization attribute') of system:masters.
+This admission controller observes creation of CertificateSigningRequest resources 
+that have a spec.signerName of kubernetes.io/kube-apiserver-client. It rejects any request 
+that specifies a 'group' (or 'organization attribute') of system:masters.
 -->
 
-此准入控制器获取具有 `kubernetes.io/kube-apiserver-client` 的 `spec.signerName` 的 CertificateSigningRequest 资源创建请求，它拒绝任何包含了 `system:masters` 一个“组”（或者“组织”）的请求。
+此准入控制器获取具有 `kubernetes.io/kube-apiserver-client` 的 `spec.signerName` 的 CertificateSigningRequest 资源创建请求，
+它拒绝任何包含了 `system:masters` 一个“组”（或者“组织”）的请求。
 
 ### DefaultStorageClass {#defaultstorageclass}
 

From f24bf6f60b2c2678d3dd4e0e4a1e68e6dedb3f9f Mon Sep 17 00:00:00 2001
From: Tomas Menito <tomasmenito@gmail.com>
Date: Tue, 29 Sep 2020 07:25:48 -0300
Subject: [PATCH 470/496] Update dry-run flag

dry-run is deprecated and can be replaced with --dry-run=client.
---
 content/en/docs/reference/kubectl/conventions.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/reference/kubectl/conventions.md b/content/en/docs/reference/kubectl/conventions.md
index 062847c485..9f0d2efe8b 100644
--- a/content/en/docs/reference/kubectl/conventions.md
+++ b/content/en/docs/reference/kubectl/conventions.md
@@ -29,14 +29,14 @@ For `kubectl run` to satisfy infrastructure as code:
 * Check in the script for an image that is heavily parameterized.
 * Switch to configuration files checked into source control for features that are needed, but not expressible via `kubectl run` flags.
 
-You can use the `--dry-run` flag to preview the object that would be sent to your cluster, without really submitting it.
+You can use the `--dry-run=client` flag to preview the object that would be sent to your cluster, without really submitting it.
 
 {{< note >}}
 All `kubectl` generators are deprecated. See the Kubernetes v1.17 documentation for a [list](https://v1-17.docs.kubernetes.io/docs/reference/kubectl/conventions/#generators) of generators and how they were used.
 {{< /note >}}
 
 #### Generators
-You can generate the following resources with a kubectl command, `kubectl create --dry-run -o yaml`:
+You can generate the following resources with a kubectl command, `kubectl create --dry-run=client -o yaml`:
 ```
   clusterrole         Create a ClusterRole.
   clusterrolebinding  Create a ClusterRoleBinding for a particular ClusterRole.

From 7aeaa6e48d4714cbc09cd84870dd4969877703ab Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Mon, 28 Sep 2020 16:00:37 +0700
Subject: [PATCH 471/496] Translate Standardized Glossary page into Bahasa

---
 content/id/docs/reference/glossary/index.md |  11 +
 i18n/id.toml                                | 242 +++++++++++++-------
 2 files changed, 173 insertions(+), 80 deletions(-)
 create mode 100644 content/id/docs/reference/glossary/index.md

diff --git a/content/id/docs/reference/glossary/index.md b/content/id/docs/reference/glossary/index.md
new file mode 100644
index 0000000000..84ed9899da
--- /dev/null
+++ b/content/id/docs/reference/glossary/index.md
@@ -0,0 +1,11 @@
+---
+title: Glosarium
+layout: glossary
+noedit: true
+default_active_tag: fundamental
+weight: 5
+card:
+  name: reference
+  weight: 10
+  title: Glosarium
+---
diff --git a/i18n/id.toml b/i18n/id.toml
index 44eb85784e..101ea071ff 100644
--- a/i18n/id.toml
+++ b/i18n/id.toml
@@ -1,4 +1,35 @@
-# i18n strings for the Indonesian (main) site.
+# i18n strings for the Indonesian version of the site (https://kubernetes.io/id/)
+# NOTE: Please keep the entries in alphabetical order when editing
+
+[caution]
+other = "Perhatian:"
+
+[cleanup_heading]
+other = "Bersihkan"
+
+[community_events_calendar]
+other = "Kalender Acara"
+
+[community_forum_name]
+other = "Forum"
+
+[community_github_name]
+other = "GitHub"
+
+[community_slack_name]
+other = "Slack"
+
+[community_stack_overflow_name]
+other = "Stack Overflow"
+
+[community_twitter_name]
+other = "Twitter"
+
+[community_youtube_name]
+other = "YouTube"
+
+[deprecation_title]
+other = "Kamu sedang menampilkan dokumentasi untuk Kubernetes versi:"
 
 [deprecation_warning]
 other = " dokumentasi sudah tidak dirawat lagi. Versi yang kamu lihat ini hanyalah snapshot statis. Untuk dokumentasi terkini, lihat "
@@ -6,80 +37,128 @@ other = " dokumentasi sudah tidak dirawat lagi. Versi yang kamu lihat ini hanyal
 [deprecation_file_warning]
 other = "Sudah usang"
 
-[objectives_heading]
-other = "Tujuan"
+[docs_label_browse]
+other = "Telusuri Dokumentasi"
 
-[cleanup_heading]
-other = "Bersihkan"
+[docs_label_contributors]
+other = "Kontributor"
 
-[prerequisites_heading]
-other = "Sebelum mulai"
+[docs_label_i_am]
+other = "AKU..."
 
-[subscribe_button]
-other = "Berlangganan"
+[docs_label_users]
+other = "Pengguna"
 
-[whatsnext_heading]
-other = "Selanjutnya"
+[docs_version_current]
+other = "(dokumentasi ini)"
+
+[docs_version_latest_heading]
+other = "Versi terbaru"
+
+[docs_version_other_heading]
+other = "Versi lama"
+
+[error_404_were_you_looking_for]
+other = "Apakah kamu sedang mencari:"
+
+[examples_heading]
+other = "Contoh"
 
 [feedback_heading]
 other = "Masukan"
 
+[feedback_no]
+other = "Tidak"
+
 [feedback_question]
-other = "Apakah halaman ini berguna?"
+other = "Apakah halaman ini membantu?"
 
 [feedback_yes]
 other = "Ya"
 
-[feedback_no]
-other = "Tidak"
+[input_placeholder_email_address]
+other = "alamat email"
 
 [latest_version]
-other = "versi terkini."
+other = "versi terbaru."
 
-[version_check_mustbe]
-other = "Kubernetes servermu harus ada di versi "
+[layouts_blog_pager_prev]
+other = "<< Sebelumnya"
 
-[version_check_mustbeorlater]
-other = "Kubernetes servermu harus ada di versi yang sama atau lebih baru "
+[layouts_blog_pager_next]
+other = "Selanjutnya >>"
 
-[version_check_tocheck]
-other = "Untuk melihat versi, tekan "
+[layouts_case_studies_list_tell]
+other = "Ceritakan kisahmu"
 
-[caution]
-other = "Perhatian:"
+[layouts_docs_glossary_aka]
+other = "Dikenal juga sebagai"
 
-[note]
-other = "Catatan:"
+[layouts_docs_glossary_description]
+other = "Glosarium ini dimaksudkan sebagai daftar terminologi Kubernetes yang komprehensif dan terstandardisasi. Glosarium ini mencakup istilah-istilah teknis yang spesifik digunakan di Kubernetes, serta beberapa istilah umum untuk membantu memberikan konteks."
 
-[warning]
-other = "Peringatan:"
+[layouts_docs_glossary_deselect_all]
+other = "Hapus semua pilihan"
 
-[main_read_about]
-other = "Baca tentang"
+[layouts_docs_glossary_click_details_after]
+other = "indikator di bawah ini untuk mendapatkan penjelasan yang lebih lengkap untuk istilah tertentu."
 
-[main_read_more]
-other = "Baca lebih lanjut"
+[layouts_docs_glossary_click_details_before]
+other = "Klik pada"
 
-[main_github_invite]
-other = "Tertarik untuk ulik kode dari Kubernetes?"
+[layouts_docs_glossary_filter]
+other = "Filter istilah sesuai dengan penandanya"
 
-[main_github_view_on]
-other = "Lihat di GitHub"
+[layouts_docs_glossary_select_all]
+other = "Pilih semua"
 
-[main_github_create_an_issue]
-other = "Buat isu"
+[layouts_docs_partials_feedback_improvement]
+other = "beri saran perbaikan"
 
-[main_community_explore]
-other = "Jelajahi komunitasnya"
+[layouts_docs_partials_feedback_issue]
+other = "Buat isu di repositori GitHub jika kamu ingin "
 
-[main_kubernetes_features]
-other = "Fitur kubernetes"
+[layouts_docs_partials_feedback_or]
+other = "atau"
+
+[layouts_docs_partials_feedback_problem]
+other = "laporkan problem"
+
+[layouts_docs_partials_feedback_thanks]
+other = "Terima kasih atas masukannya. Jika kamu mempunyai pertanyaan yang spesifik terkait bagaimana menggunakan Kubernetes, tanyakanlah di "
+
+[layouts_docs_search_fetching]
+other = "Mengambil hasil..."
+
+[main_by]
+other = "oleh"
 
 [main_cncf_project]
 other = """Kami merupakan proyek yang lulus dari <a href="https://cncf.io/">CNCF</a></p>"""
 
+[main_community_explore]
+other = "Jelajahi komunitas"
+
+[main_contribute]
+other = "Bantu"
+
+[main_copyright_notice]
+other = """Linux Foundation &reg;. Hak cipta dilindungi. Linux Foundation telah mendaftarkan merek dagang dan pengunaannya. Perinciannya bisa dilihat pada <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">halaman penggunaan merek dagang</a>"""
+
+[main_documentation_license]
+other = """Para Pencipta Kubernetes | Dokumentasi didistribusikan di bawah <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+
+[main_github_invite]
+other = "Tertarik untuk mengulik kode dari Kubernetes?"
+
+[main_github_view_on]
+other = "Lihat di GitHub"
+
+[main_kubernetes_features]
+other = "Fitur Kubernetes"
+
 [main_kubeweekly_baseline]
-other = "Tertarik untuk dapatkan info terkini tentang Kubernetes? Daftarkan dirimu di buletin KubeWeekly."
+other = "Tertarik untuk mendapatkan info terbaru tentang Kubernetes? Daftarkan dirimu ke KubeWeekly."
 
 [main_kubernetes_past_link]
 other = "Lihat buletin edisi sebelumnya"
@@ -87,59 +166,62 @@ other = "Lihat buletin edisi sebelumnya"
 [main_kubeweekly_signup]
 other = "Langganan"
 
-[main_contribute]
-other = "Kontribusi"
-
-[main_edit_this_page]
-other = "Ubah halaman ini"
-
 [main_page_history]
-other ="Riwayat halaman"
+other ="Riwayat laman"
 
 [main_page_last_modified_on]
 other = "Halaman diubah terakhir kali pada"
 
-[main_by]
-other = "oleh"
+[main_read_about]
+other = "Baca tentang"
 
-[main_documentation_license]
-other = """Para Pencipta Kubernetes | Dokumentasi didistribusikan melalui <a href="https://git.k8s.io/website/LICENSE" class="light-text">CC BY 4.0</a>"""
+[main_read_more]
+other = "Baca lebih lanjut"
 
-[main_copyright_notice]
-other = """Linux Foundation &reg;. Hak cipta dilindungi. Linux Foundation telah mendaftarkan merek dagang dan pengunaannya. Perinciannya bisa dilihat pada <a href="https://www.linuxfoundation.org/trademark-usage" class="light-text">halaman penggunaan merek dagang</a>"""
+[note]
+other = "Catatan:"
 
-# Labels for the docs portal home page.
-[docs_label_browse]
-other = "Lihat-lihat dokumentasi"
+[objectives_heading]
+other = "Tujuan"
 
-[docs_label_contributors]
-other = "Para kontributor"
+[options_heading]
+other = "Opsi"
 
-[docs_label_users]
-other = "Para pengguna"
+[post_create_issue]
+other = "Buat isu"
 
-[docs_label_i_am]
-other = "AKU ADALAH..."
+[prerequisites_heading]
+other = "Sebelum kamu memulai"
 
+[seealso_heading]
+other = "Lihat juga"
 
+[subscribe_button]
+other = "Langganan"
 
-# Community links
-[community_twitter_name]
-other = "Twitter"
-[community_github_name]
-other = "GitHub"
-[community_slack_name]
-other = "Slack"
-[community_stack_overflow_name]
-other = "Stack Overflow"
-[community_forum_name]
-other = "Forum"
-[community_events_calendar]
-other = "Kalender acara"
+[synopsis_heading]
+other = "Sinopsis"
+
+[thirdparty_message]
+other = """Bagian ini tertaut ke proyek-proyek pihak ketiga yang menyediakan fungsionalitas yang dibutuhkan oleh Kubernetes. Pencipta proyek Kubernetes tidak bertanggung jawab atas proyek-proyek tersebut. Laman ini mengikuti <a href="https://github.com/cncf/foundation/blob/master/website-guidelines.md" target="_blank">pedoman website CNCF</a> dengan membuat daftar proyek menurut abjad. Untuk menambakan proyek ke dalam daftar ini, bacalah <a href="/docs/contribute/style/content-guide/#third-party-content">panduan</a> sebelum mengirimkan perubahan."""
 
-# UI elements
 [ui_search_placeholder]
 other = "Cari"
 
-[input_placeholder_email_address]
-other = "Alamat email"
+[version_check_mustbe]
+other = "Kubernetes servermu harus dalam versi "
+
+[version_check_mustbeorlater]
+other = "Kubernetes servermu harus dalam versi yang sama atau lebih baru dari "
+
+[version_check_tocheck]
+other = "Untuk melihat versi, tekan "
+
+[version_menu]
+other = "Versi"
+
+[warning]
+other = "Peringatan:"
+
+[whatsnext_heading]
+other = "Selanjutnya"

From 03c3c128ed66e8bf4605a3e24826cedb6c4fcf9d Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Tue, 29 Sep 2020 20:57:50 +0800
Subject: [PATCH 472/496] fix typo

---
 content/zh/docs/concepts/architecture/cloud-controller.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/concepts/architecture/cloud-controller.md b/content/zh/docs/concepts/architecture/cloud-controller.md
index 50b4daf85f..b25b48ced0 100644
--- a/content/zh/docs/concepts/architecture/cloud-controller.md
+++ b/content/zh/docs/concepts/architecture/cloud-controller.md
@@ -135,7 +135,7 @@ when you declare a Service resource that requires them.
 ### 服务控制器   {#service-controller}
 
 {{< glossary_tooltip text="服务（Service）" term_id="service" >}}与受控的负载均衡器、
-IP 地址、网络包锅里煮、目标健康检查等云基础设施组件集成。
+IP 地址、网络包过滤、目标健康检查等云基础设施组件集成。
 服务控制器与云驱动的 API 交互，以配置负载均衡器和其他基础设施组件。
 你所创建的 Service 资源会需要这些组件服务。
 

From 28ddd77aac84042736fbaeee294c5679c9dbff5d Mon Sep 17 00:00:00 2001
From: Hao Yuan <haoyuan@mail.ustc.edu.cn>
Date: Tue, 29 Sep 2020 21:07:28 +0800
Subject: [PATCH 473/496] reconcile dns config

---
 .../zh/docs/tasks/administer-cluster/dns-custom-nameservers.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
index 168d01d664..1a189be46d 100644
--- a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -151,12 +151,11 @@ data:
         ready
         kubernetes cluster.local in-addr.arpa ip6.arpa {
            pods insecure
-           upstream
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
         }
         prometheus :9153
-        proxy ./etc/resolv.conf
+        forward ./etc/resolv.conf
         cache 30
         loop
         reload

From 5136f8d55247471f7cc9994231ca6b46230a1ed2 Mon Sep 17 00:00:00 2001
From: Michael Nikitochkin <miry.sof@gmail.com>
Date: Wed, 23 Sep 2020 18:50:02 +0200
Subject: [PATCH 474/496] Use apiversion networking.k8s.io/v1 for ingress in ZH
 version

There is a warning deprecation message for kubernetes v1.19:

```
Warning: networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress
```

Switched apiversion in the example to `networking.k8s.io/v1`
---
 .../ingress-minikube.md                       | 84 ++++++++++---------
 1 file changed, 45 insertions(+), 39 deletions(-)

diff --git a/content/zh/docs/tasks/access-application-cluster/ingress-minikube.md b/content/zh/docs/tasks/access-application-cluster/ingress-minikube.md
index dab03002d3..16f7b00ea7 100644
--- a/content/zh/docs/tasks/access-application-cluster/ingress-minikube.md
+++ b/content/zh/docs/tasks/access-application-cluster/ingress-minikube.md
@@ -12,7 +12,7 @@ weight: 100
 <!-- overview -->
 
 <!--
-An [Ingress](/docs/concepts/services-networking/ingress/) is an API object that defines rules which allow external access 
+An [Ingress](/docs/concepts/services-networking/ingress/) is an API object that defines rules which allow external access
 to services in a cluster. An [Ingress controller](/docs/concepts/services-networking/ingress-controllers/) fulfills the rules set in the Ingress.
 
 This page shows you how to set up a simple Ingress which routes requests to Service web or web2 depending on the HTTP URI.
@@ -65,7 +65,7 @@ This page shows you how to set up a simple Ingress which routes requests to Serv
     minikube addons enable ingress
     ```
 
-<!--      
+<!--
 1. Verify that the NGINX Ingress controller is running
 -->
 2. 检查验证 NGINX Ingress 控制器处于运行状态：
@@ -104,39 +104,39 @@ This page shows you how to set up a simple Ingress which routes requests to Serv
 
    <!--Output:-->
    输出：
-    
+
    ```
    deployment.apps/web created
    ```
 
 <!--
-1. Expose the Deployment: 
+1. Expose the Deployment:
 -->
 2. 将 Deployment 暴露出来：
 
    ```shell
    kubectl expose deployment web --type=NodePort --port=8080
    ```
-    
+
    <!-- Output: -->
-   输出： 
-    
+   输出：
+
    ```
    service/web exposed
    ```
 
-<!--    
+<!--
 1. Verify the Service is created and is available on a node port:
 -->
 3. 验证 Service 已经创建，并且可能从节点端口访问：
 
    ```shell
    kubectl get service web
-   ``` 
-    
+   ```
+
    <!-- Output: -->
    输出：
-    
+
    ```shell
    NAME      TYPE       CLUSTER-IP       EXTERNAL-IP   PORT(S)          AGE
    web       NodePort   10.104.133.249   <none>        8080:31637/TCP   12m
@@ -150,14 +150,14 @@ This page shows you how to set up a simple Ingress which routes requests to Serv
    ```shell
    minikube service web --url
    ```
-    
+
    <!-- Output: -->
    输出：
-    
+
    ```shell
    http://172.17.0.15:31637
    ```
-    
+
    <!--
    Katacoda environment only: at the top of the terminal panel, click the plus sign, and then click **Select port to view on Host 1**. Enter the NodePort, in this case `31637`, and then click **Display Port**.
    -->
@@ -166,18 +166,18 @@ This page shows you how to set up a simple Ingress which routes requests to Serv
    然后点击 **Select port to view on Host 1**。
    输入节点和端口号（这里是`31637`），之后点击 **Display Port**。
    {{< /note >}}
-    
+
    <!-- Output: -->
    输出：
-    
+
    ```shell
    Hello, world!
    Version: 1.0.0
    Hostname: web-55b8c6998d-8k564
    ```
-  
-   <!--  
-   You can now access the sample app via the Minikube IP address and NodePort. The next step lets you access 
+
+   <!--
+   You can now access the sample app via the Minikube IP address and NodePort. The next step lets you access
    the app using the Ingress resource.
    -->
    你现在应该可以通过 Minikube 的 IP 地址和节点端口来访问示例应用了。
@@ -198,7 +198,7 @@ The following file is an Ingress resource that sends traffic to your Service via
 1. 根据下面的 YAML 创建文件 `example-ingress.yaml`：
 
    ```yaml
-   apiVersion: networking.k8s.io/v1beta1
+   apiVersion: networking.k8s.io/v1
    kind: Ingress
    metadata:
      name: example-ingress
@@ -210,32 +210,35 @@ The following file is an Ingress resource that sends traffic to your Service via
        http:
          paths:
          - path: /
+           pathType: Prefix
            backend:
-             serviceName: web
-             servicePort: 8080
+             service:
+               name: web
+               port:
+                 number: 8080
    ```
 
 <!--
 1. Create the Ingress resource by running the following command:
 -->
 2. 通过运行下面的命令创建 Ingress 资源：
-    
+
    ```shell
    kubectl apply -f example-ingress.yaml
    ```
-    
+
    <!-- Output: -->
    输出：
-    
+
    ```shell
    ingress.networking.k8s.io/example-ingress created
    ```
 <!--
-1. Verify the IP address is set: 
+1. Verify the IP address is set:
 -->
 3. 验证 IP 地址已被设置：
 
-   ```shell 
+   ```shell
    kubectl get ingress
    ```
 
@@ -243,12 +246,12 @@ The following file is an Ingress resource that sends traffic to your Service via
    {{< note >}}此操作可能需要几分钟时间。{{< /note >}}
 
    ```shell
-   NAME              HOSTS              ADDRESS       PORTS     AGE
-   example-ingress   hello-world.info   172.17.0.15   80        38s
+   NAME              CLASS    HOSTS              ADDRESS        PORTS   AGE
+   example-ingress   <none>   hello-world.info   172.17.0.15    80      38s
    ```
 
 <!--
-1. Add the following line to the bottom of the `/etc/hosts` file. 
+1. Add the following line to the bottom of the `/etc/hosts` file.
 -->
 4. 在 `/etc/hosts` 文件的末尾添加以下内容：
 
@@ -277,7 +280,7 @@ The following file is an Ingress resource that sends traffic to your Service via
 
    <!-- Output: -->
    输出：
-    
+
    ```shell
    Hello, world!
    Version: 1.0.0
@@ -305,12 +308,12 @@ The following file is an Ingress resource that sends traffic to your Service via
    ```
    <!-- Output: -->
    输出：
-    
+
    ```shell
    deployment.apps/web2 created
    ```
 
-<!--    
+<!--
 1. Expose the Deployment:
 -->
 2. 将 Deployment 暴露出来：
@@ -321,15 +324,15 @@ The following file is an Ingress resource that sends traffic to your Service via
 
    <!-- Output:  -->
    输出：
-    
+
    ```shell
    service/web2 exposed
    ```
 
-<!--    
+<!--
 ## Edit Ingress
 
-1. Edit the existing `example-ingress.yaml` and add the following lines:  
+1. Edit the existing `example-ingress.yaml` and add the following lines:
 -->
 ## 编辑 Ingress
 
@@ -338,9 +341,12 @@ The following file is an Ingress resource that sends traffic to your Service via
 
    ```yaml
      - path: /v2
+       pathType: Prefix
        backend:
-         serviceName: web2
-         servicePort: 8080
+         service:
+           name: web2
+           port:
+             number: 8080
    ```
 
 <!--
@@ -353,7 +359,7 @@ The following file is an Ingress resource that sends traffic to your Service via
    ```
 
    <!-- Output: -->
-   输出： 
+   输出：
 
    ```shell
    ingress.networking/example-ingress configured

From 599e1db6dcbc53c312130f980a92f29a8895bb98 Mon Sep 17 00:00:00 2001
From: Michael Nikitochkin <miry.sof@gmail.com>
Date: Wed, 23 Sep 2020 18:50:02 +0200
Subject: [PATCH 475/496] Use apiversion networking.k8s.io/v1 for ingress for
 EN

There is a warning deprecation message for kubernetes v1.19:

```
Warning: networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress
```

Switched apiversion in the example to `networking.k8s.io/v1`
---
 .../ingress-minikube.md                       | 20 ++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

diff --git a/content/en/docs/tasks/access-application-cluster/ingress-minikube.md b/content/en/docs/tasks/access-application-cluster/ingress-minikube.md
index 6310d15851..df4b49dc19 100644
--- a/content/en/docs/tasks/access-application-cluster/ingress-minikube.md
+++ b/content/en/docs/tasks/access-application-cluster/ingress-minikube.md
@@ -133,7 +133,7 @@ The following file is an Ingress resource that sends traffic to your Service via
 1. Create `example-ingress.yaml` from the following file:
 
     ```yaml
-    apiVersion: networking.k8s.io/v1beta1
+    apiVersion: networking.k8s.io/v1
     kind: Ingress
     metadata:
       name: example-ingress
@@ -145,9 +145,12 @@ The following file is an Ingress resource that sends traffic to your Service via
         http:
           paths:
           - path: /
+            pathType: Prefix
             backend:
-              serviceName: web
-              servicePort: 8080
+              service:
+                name: web
+                port:
+                  number: 8080
     ```
 
 1. Create the Ingress resource by running the following command:
@@ -171,8 +174,8 @@ The following file is an Ingress resource that sends traffic to your Service via
     {{< note >}}This can take a couple of minutes.{{< /note >}}
 
     ```shell
-    NAME              HOSTS              ADDRESS       PORTS     AGE
-    example-ingress   hello-world.info   172.17.0.15   80        38s
+    NAME              CLASS    HOSTS              ADDRESS        PORTS   AGE
+    example-ingress   <none>   hello-world.info   172.17.0.15    80      38s
     ```
 
 1. Add the following line to the bottom of the `/etc/hosts` file.
@@ -232,9 +235,12 @@ The following file is an Ingress resource that sends traffic to your Service via
 
     ```yaml
           - path: /v2
+            pathType: Prefix
             backend:
-              serviceName: web2
-              servicePort: 8080
+              service:
+                name: web2
+                port:
+                  number: 8080
     ```
 
 1. Apply the changes:

From 3fc4a3e8b73ba2ecbca5840d4d3a20df22e0a392 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 29 Sep 2020 20:37:02 -0400
Subject: [PATCH 476/496] fix eviction policy content type

---
 .../concepts/scheduling-eviction/eviction-policy.md | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/content/en/docs/concepts/scheduling-eviction/eviction-policy.md b/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
index 32a7fb14b3..b63c729696 100644
--- a/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
+++ b/content/en/docs/concepts/scheduling-eviction/eviction-policy.md
@@ -1,6 +1,6 @@
 ---
 title: Eviction Policy
-content_template: templates/concept
+content_type: concept
 weight: 60
 ---
 
@@ -12,12 +12,13 @@ This page is an overview of Kubernetes' policy for eviction.
 
 ## Eviction Policy
 
-The {{< glossary_tooltip text="Kubelet" term_id="kubelet" >}} can proactively monitor for and prevent total starvation of a
-compute resource. In those cases, the `kubelet` can reclaim the starved
-resource by proactively failing one or more Pods. When the `kubelet` fails
+The {{< glossary_tooltip text="kubelet" term_id="kubelet" >}} proactively monitors for
+and prevents total starvation of a compute resource. In those cases, the `kubelet` can reclaim
+the starved resource by failing one or more Pods. When the `kubelet` fails
 a Pod, it terminates all of its containers and transitions its `PodPhase` to `Failed`.
-If the evicted Pod is managed by a Deployment, the Deployment will create another Pod
+If the evicted Pod is managed by a Deployment, the Deployment creates another Pod
 to be scheduled by Kubernetes.
 
 ## {{% heading "whatsnext" %}}
-- Read [Configure out of resource handling](/docs/tasks/administer-cluster/out-of-resource/) to learn more about eviction signals, thresholds, and handling.
\ No newline at end of file
+
+- Learn how to [configure out of resource handling](/docs/tasks/administer-cluster/out-of-resource/) with eviction signals and thresholds.

From dfe0530939cfeec266272665613e5a4ce285da43 Mon Sep 17 00:00:00 2001
From: "M. Habib Rosyad" <habib.ryd@gmail.com>
Date: Tue, 29 Sep 2020 15:06:23 +0700
Subject: [PATCH 477/496] Translate glossary for RBAC into Bahasa

---
 content/id/docs/reference/glossary/rbac.md | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 content/id/docs/reference/glossary/rbac.md

diff --git a/content/id/docs/reference/glossary/rbac.md b/content/id/docs/reference/glossary/rbac.md
new file mode 100644
index 0000000000..c856b77f3b
--- /dev/null
+++ b/content/id/docs/reference/glossary/rbac.md
@@ -0,0 +1,19 @@
+---
+title: Kontrol Akses Berbasis Rol
+id: rbac
+date: 2018-04-12
+full_link: /id/docs/reference/access-authn-authz/rbac/
+short_description: >
+  Mengelola keputusan otorisasi, memungkinkan admin untuk mengonfigurasi kebijakan akses secara dinamis melalui API Kubernetes.
+
+aka:
+- Role-Based Access Control (RBAC)
+tags:
+- security
+- fundamental
+---
+Mengelola keputusan otorisasi, memungkinkan admin untuk mengonfigurasi kebijakan akses secara dinamis melalui {{< glossary_tooltip text="API Kubernetes" term_id="kubernetes-api" >}}.
+
+<!--more-->
+
+RBAC menggunakan Role yang memuat aturan perizinan, dan RoleBinding yang memberikan izin sebagaimana telah ditentukan di dalam Role untuk sekumpulan pengguna.

From 02abe6c886c22d73b514a11e3c8c179758b28fe4 Mon Sep 17 00:00:00 2001
From: yuanhao <haoyuan@mail.ustc.edu.cn>
Date: Wed, 30 Sep 2020 11:03:19 +0800
Subject: [PATCH 478/496] fix broken links in
 /zh/docs/reference/glossary/container-env-variables.md

---
 content/zh/docs/reference/glossary/container-env-variables.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/content/zh/docs/reference/glossary/container-env-variables.md b/content/zh/docs/reference/glossary/container-env-variables.md
index d851c14c92..ae2b134643 100644
--- a/content/zh/docs/reference/glossary/container-env-variables.md
+++ b/content/zh/docs/reference/glossary/container-env-variables.md
@@ -2,7 +2,7 @@
 title: 容器环境变量
 id: container-env-variables
 date: 2018-04-12
-full_link: /docs/concepts/containers/container-environment-variables.md
+full_link: /zh/docs/concepts/containers/container-environment/
 short_description: >
   容器环境变量提供了运行容器化应用所必须的一些重要信息。
 
@@ -16,7 +16,7 @@ tags:
 title: Container Environment Variables
 id: container-env-variables
 date: 2018-04-12
-full_link: /docs/concepts/containers/container-environment-variables.md
+full_link: /zh/docs/concepts/containers/container-environment/
 short_description: >
   Container environment variables are name=value pairs that provide useful information into containers running in a Pod.
 

From 8b5eaa6f1a9ce3183e0019fb4be376ffca3a3469 Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 11:20:58 +0800
Subject: [PATCH 479/496] Remove cloud providers page for zh. ref #23517

Signed-off-by: Dominic Yin <yindongchao@inspur.com>
---
 .../cluster-administration/cloud-providers.md | 727 ------------------
 .../concepts/services-networking/service.md   |   4 +-
 content/zh/docs/concepts/storage/volumes.md   |   5 +-
 .../docs/reference/glossary/cloud-provider.md |  38 -
 4 files changed, 3 insertions(+), 771 deletions(-)
 delete mode 100644 content/zh/docs/concepts/cluster-administration/cloud-providers.md
 delete mode 100644 content/zh/docs/reference/glossary/cloud-provider.md

diff --git a/content/zh/docs/concepts/cluster-administration/cloud-providers.md b/content/zh/docs/concepts/cluster-administration/cloud-providers.md
deleted file mode 100644
index b463f1eb1f..0000000000
--- a/content/zh/docs/concepts/cluster-administration/cloud-providers.md
+++ /dev/null
@@ -1,727 +0,0 @@
----
-title: 云驱动
-content_type: concept
-weight: 30
----
-
-<!--
-title: Cloud Providers
-content_type: concept
-weight: 30
--->
-
-<!-- overview -->
-<!--
-This page explains how to manage Kubernetes running on a specific
-cloud provider.
--->
-本文介绍了如何管理运行在特定云驱动上的 Kubernetes 集群。
-
-
-<!-- body -->
-<!--
-### kubeadm
-[kubeadm](/docs/reference/setup-tools/kubeadm/kubeadm/) is a popular option for creating kubernetes clusters.
-kubeadm has configuration options to specify configuration information for cloud providers. For example a typical
-in-tree cloud provider can be configured using kubeadm as shown below:
--->
-### kubeadm
-
-[kubeadm](/zh/docs/reference/setup-tools/kubeadm/kubeadm/) 是创建 kubernetes 集群的一种流行选择。
-kubeadm 通过提供配置选项来指定云驱动的配置信息。例如，一个典型的适用于“树内”云驱动的 kubeadm 配置如下：
-
-```yaml
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: InitConfiguration
-nodeRegistration:
-  kubeletExtraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
----
-apiVersion: kubeadm.k8s.io/v1beta2
-kind: ClusterConfiguration
-kubernetesVersion: v1.13.0
-apiServer:
-  extraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
-  extraVolumes:
-  - name: cloud
-    hostPath: "/etc/kubernetes/cloud.conf"
-    mountPath: "/etc/kubernetes/cloud.conf"
-controllerManager:
-  extraArgs:
-    cloud-provider: "openstack"
-    cloud-config: "/etc/kubernetes/cloud.conf"
-  extraVolumes:
-  - name: cloud
-    hostPath: "/etc/kubernetes/cloud.conf"
-    mountPath: "/etc/kubernetes/cloud.conf"
-```
-
-<!--
-The in-tree cloud providers typically need both `--cloud-provider` and `--cloud-config` specified in the command lines
-for the [kube-apiserver](/docs/admin/kube-apiserver/), [kube-controller-manager](/docs/admin/kube-controller-manager/) and the
-[kubelet](/docs/admin/kubelet/). The contents of the file specified in `--cloud-config` for each provider is documented below as well.
-
-For all external cloud providers, please follow the instructions on the individual repositories,
-which are listed under their headings below, or one may view [the list of all repositories](https://github.com/kubernetes?q=cloud-provider-&type=&language=)
--->
-“树内”的云驱动通常需要在命令行中为
-[kube-apiserver](/zh/docs/reference/command-line-tools-reference/kube-apiserver/)、
-[kube-controller-manager](/zh/docs/reference/command-line-tools-reference/kube-controller-manager/) 和
-[kubelet](/zh/docs/reference/command-line-tools-reference/kubelet/) 指定
-`--cloud-provider` 和 `--cloud-config`。
-在 `--cloud-config` 中为每个供应商指定的文件内容的文档也可参见本文后文。
-对于所有外部云驱动，请遵循各自仓库的说明，或浏览
-[所有仓库清单](https://github.com/kubernetes?q=cloud-provider-&type=&language=)
-
-<!--
-## AWS
-This section describes all the possible configurations which can
-be used when running Kubernetes on Amazon Web Services.
-
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-aws](https://github.com/kubernetes/cloud-provider-aws#readme)
--->
-# AWS
-
-本节介绍在 Amazon Web Services 上运行 Kubernetes 时可以使用的所有配置。
-如果希望使用此外部云驱动，其代码库位于 [kubernetes/cloud-provider-aws](https://github.com/kubernetes/cloud-provider-aws#readme)
-
-<!--
-### Node Name
-
-The AWS cloud provider uses the private DNS name of the AWS instance as the name of the Kubernetes Node object.
--->
-### 节点名称
-
-云驱动 AWS 使用 AWS 实例的私有 DNS 名称作为 Kubernetes 节点对象的名称。
-
-<!--
-### Load Balancers
-You can setup [external load balancers](/docs/tasks/access-application-cluster/create-external-load-balancer/)
-to use specific features in AWS by configuring the annotations as shown below.
--->
-### 负载均衡器
-
-用户可以通过配置注解（annotations）来设置
-[外部负载均衡器](/zh/docs/tasks/access-application-cluster/create-external-load-balancer/)，
-以在 AWS 中使用特定功能，如下所示：
-
-```yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: example
-  namespace: kube-system
-  labels:
-    run: example
-  annotations:
-     service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:xx-xxxx-x:xxxxxxxxx:xxxxxxx/xxxxx-xxxx-xxxx-xxxx-xxxxxxxxx #replace this value
-     service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-spec:
-  type: LoadBalancer
-  ports:
-  - port: 443
-    targetPort: 5556
-    protocol: TCP
-  selector:
-    app: example
-```
-<!--
-Different settings can be applied to a load balancer service in AWS using _annotations_. The following describes the annotations supported on AWS ELBs:
--->
-可以使用 _注解_ 将不同的设置应用于 AWS 中的负载均衡器服务。下面描述了 AWS ELB 所支持的注解：
-
-<!--
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval`: Used to specify access log emit interval.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-enabled`: Used on the service to enable or disable access logs.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name`: Used to specify access log s3 bucket name.
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix`: Used to specify access log s3 bucket prefix.
-* `service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags`: Used on the service to specify a comma-separated list of key-value pairs which will be recorded as additional tags in the ELB. For example: `"Key1=Val1,Key2=Val2,KeyNoVal1=,KeyNoVal2"`.
-* `service.beta.kubernetes.io/aws-load-balancer-backend-protocol`: Used on the service to specify the protocol spoken by the backend (pod) behind a listener. If `http` (default) or `https`, an HTTPS listener that terminates the connection and parses headers is created. If set to `ssl` or `tcp`, a "raw" SSL listener is used. If set to `http` and `aws-load-balancer-ssl-cert` is not used then a HTTP listener is used.
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-cert`: Used on the service to request a secure listener. Value is a valid certificate ARN. For more, see [ELB Listener Config](http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener-config.html) CertARN is an IAM or CM certificate ARN, e.g. `arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012`.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-enabled`: Used on the service to enable or disable connection draining.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-timeout`: Used on the service to specify a connection draining timeout.
-* `service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout`: Used on the service to specify the idle connection timeout.
-* `service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled`: Used on the service to enable or disable cross-zone load balancing.
-* `service.beta.kubernetes.io/aws-load-balancer-security-groups`: Used to specify the security groups to be added to ELB created. This replaces all other security groups previously assigned to the ELB.
-* `service.beta.kubernetes.io/aws-load-balancer-extra-security-groups`: Used on the service to specify additional security groups to be added to ELB created
-* `service.beta.kubernetes.io/aws-load-balancer-internal`: Used on the service to indicate that we want an internal ELB.
-* `service.beta.kubernetes.io/aws-load-balancer-proxy-protocol`: Used on the service to enable the proxy protocol on an ELB. Right now we only accept the value `*` which means enabling the proxy protocol on all ELB backends. In the future we could adjust this to allow setting the proxy protocol only on certain backends.
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-ports`: Used on the service to specify a comma-separated list of ports that will use SSL/HTTPS listeners. Defaults to `*` (all)
--->
-
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval`：用于指定访问日志的间隔。
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-enabled`：用于在服务中启用或禁用访问日志。
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name`：用于指定访问日志的 S3 桶名称。
-* `service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix`：用于指定访问日志的 S3 桶前缀。
-* `service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags`：用于在服务中指定一个逗号分隔的键值对列表，它将作为附加标签被记录在 ELB 中。例如： `"Key1=Val1,Key2=Val2,KeyNoVal1=,KeyNoVal2"`。
-* `service.beta.kubernetes.io/aws-load-balancer-backend-protocol`：用于在服务中指定监听器后端（pod）所使用的协议。
-  如果指定 `http`（默认）或 `https`，将创建一个终止连接和解析头的 HTTPS 监听器。
-  如果设置为 `ssl` 或 `tcp`，将会使用 “原生的” SSL 监听器。
-  如果设置为 `http` 且不使用 `aws-load-balancer-ssl-cert`，将使用 HTTP 监听器。
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-cert`：用于在服务中请求安全监听器，其值为合法的
-  证书 ARN（Amazon Resource Name）。更多内容请参考
-  [ELB 监听器配置](https://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener-config.html)。
-  证书 ARN 是 IAM（身份和访问管理）或 CM（证书管理）类型的 ARN，例如
-  `arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012`。
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-enabled`：用于在服务中启用或禁用连接耗尽（connection draining）。
-* `service.beta.kubernetes.io/aws-load-balancer-connection-draining-timeout`：用于在服务中指定连接耗尽超时时间。
-* `service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout`：用于在服务中指定空闲连接超时时间。
-* `service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled`：用于在服务中启用或禁用跨区域负载平衡。
-* `service.beta.kubernetes.io/aws-load-balancer-extra-security-groups`：用于在服务中指定要添加到创建的 ELB 中的其他安全组。
-* `service.beta.kubernetes.io/aws-load-balancer-internal`：用于在服务中表明需要内部 ELB。
-* `service.beta.kubernetes.io/aws-load-balancer-proxy-protocol`：用于在 ELB 上启用代理协议。 当前仅接受 `*`值，也就是在所有 ELB 后端启用代理协议。将来可能进行调整，只允许特定的后端设置代理协议。
-* `service.beta.kubernetes.io/aws-load-balancer-ssl-ports`：用于在服务中指定一个逗号分隔的端口列表，这些端口会使用 SSL/HTTPS 监听器。默认为 `*`（全部）
-
-<!--
-The information for the annotations for AWS is taken from the comments on [aws.go](https://github.com/kubernetes/cloud-provider-aws/blob/master/pkg/cloudprovider/providers/aws/aws.go)
--->
-AWS 相关的注解信息取自 [aws.go](https://github.com/kubernetes/cloud-provider-aws/blob/master/pkg/cloudprovider/providers/aws/aws.go) 文件的注释。
-
-## Azure
-
-<!--
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-azure](https://github.com/kubernetes/cloud-provider-azure#readme)
--->
-如果希望使用此外部云驱动，其代码库位于 [kubernetes/cloud-provider-azure](https://github.com/kubernetes/cloud-provider-azure#readme)
-
-<!--
-### Node Name
-
-The Azure cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the Kubernetes Node name must match the Azure VM name.
--->
-### 节点名称
-
-云驱动 Azure 使用节点的主机名（由 kubelet 决定，或者用 `--hostname-override` 覆盖）作为 Kubernetes 节点对象的名称。
-注意 Kubernetes 节点名必须与 Azure 虚拟机的名称匹配。
-
-## CloudStack
-
-<!--
-If you wish to use the external cloud provider, its repository is [apache/cloudstack-kubernetes-provider](https://github.com/apache/cloudstack-kubernetes-provider)
--->
-
-如果希望使用此外部云驱动，其代码库位于 [apache/cloudstack-kubernetes-provider](https://github.com/apache/cloudstack-kubernetes-provider)。
-
-<!--
-### Node Name
-
-The CloudStack cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the Kubernetes Node name must match the CloudStack VM name.
--->
-### 节点名称
-
-云驱动 CloudStack 使用节点的主机名（由 kubelet 决定，或者用 `--hostname-override` 覆盖）作为 Kubernetes 节点对象的名称。
-注意 Kubernetes 节点名必须与 CloudStack 虚拟机名匹配。
-
-## GCE
-<!--
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-gcp](https://github.com/kubernetes/cloud-provider-gcp#readme)
--->
-如果希望使用此外部云驱动，其代码库位于 [kubernetes/cloud-provider-gcp](https://github.com/kubernetes/cloud-provider-gcp#readme)
-
-<!--
-### Node Name
-
-The GCE cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the first segment of the Kubernetes Node name must match the GCE instance name (e.g. a Node named `kubernetes-node-2.c.my-proj.internal` must correspond to an instance named `kubernetes-node-2`).
--->
-### 节点名称
-
-GCE 云驱动使用节点的主机名（由 kubelet 确定，或者用 `--hostname-override` 覆盖）作为 Kubernetes 节点对象的名称。
-注意，Kubernetes 节点名的第一个字段必须匹配 GCE 实例名(例如，名为 `kubernetes-node-2.c.my-proj.internal` 的节点必须对应于一个名为 `kubernetes-node-2` 的实例)。
-
-## OpenStack
-<!--
-This section describes all the possible configurations which can
-be used when using OpenStack with Kubernetes.
-
-If you wish to use the external cloud provider, its repository is [kubernetes/cloud-provider-openstack](https://github.com/kubernetes/cloud-provider-openstack#readme)
--->
-
-本节介绍了使用 OpenStack 运行 Kubernetes 时所有可用的配置。
-如果希望使用此外部云驱动，其代码库位于 [kubernetes/cloud-provider-openstack](https://github.com/kubernetes/cloud-provider-openstack#readme)
-
-<!--
-### Node Name
-
-The OpenStack cloud provider uses the instance name (as determined from OpenStack metadata) as the name of the Kubernetes Node object.
-Note that the instance name must be a valid Kubernetes Node name in order for the kubelet to successfully register its Node object.
--->
-### 节点名称
-
-OpenStack 云驱动使用实例名（由 OpenStack 元数据确定）作为 Kubernetes 节点对象的名称。
-请注意，实例名必须是一个有效的 Kubernetes 节点名，以便 kubelet 成功注册其节点对象。
-
-<!--
-### Services
-
-The OpenStack cloud provider
-implementation for Kubernetes supports the use of these OpenStack services from
-the underlying cloud, where available:
-
-| Service                  | API Version(s) | Required |
-|--------------------------|----------------|----------|
-| Block Storage (Cinder)   | V1†, V2, V3    | No       |
-| Compute (Nova)           | V2             | No       |
-| Identity (Keystone)      | V2‡,  V3       | Yes      |
-| Load Balancing (Neutron) | V1§, V2        | No       |
-| Load Balancing (Octavia) | V2             | No       |
-
--->
-### 服务
-
-Kubernetes 的 OpenStack 云驱动实现支持从底层云使用这些 OpenStack 服务：
-
-| 服务                     | API 版本       | 必需     |
-|--------------------------|----------------|----------|
-| 块存储 (Cinder)          | V1†, V2, V3    | No       |
-| 计算    (Nova)           | V2             | No       |
-| 身份认证 (Keystone)      | V2‡,  V3       | Yes      |
-| 负载均衡器 (Neutron)     | V1§, V2        | No       |
-| 负载均衡器 (Octavia)     | V2             | No       |
-
-<!--
-† Block Storage V1 API support is deprecated, Block Storage V3 API support was
-added in Kubernetes 1.9.
-‡ Identity V2 API support is deprecated and will be removed from the provider in
-a future release. As of the "Queens" release, OpenStack will no longer expose the
-Identity V2 API.
-§ Load Balancing V1 API support was removed in Kubernetes 1.9.
--->
-† 块存储 V1 版本的 API 被弃用，从 Kubernetes 1.9 版本开始加入了块存储 V3 版本 API。
-
-‡ 身份认证 V2 API 支持已被弃用，将在未来的版本中从供应商中移除。
-  从 “Queens” 版本开始，OpenStack 将不再支持身份认证 V2 版本的 API。
-
-§ Kubernetes 1.9 中取消了对 V1 版本负载均衡 API 的支持。
-
-<!--
-Service discovery is achieved by listing the service catalog managed by
-OpenStack Identity (Keystone) using the `auth-url` provided in the provider
-configuration. The provider will gracefully degrade in functionality when
-OpenStack services other than Keystone are not available and simply disclaim
-support for impacted features. Certain features are also enabled or disabled
-based on the list of extensions published by Neutron in the underlying cloud.
--->
-服务发现是通过使用供应商配置中提供的 `auth-url` 所列出 OpenStack 身份认证（Keystone）管理的服务目录来实现的。
-当除 Keystone 外的 OpenStack 服务不可用时，供应商将优雅地降低功能，并简单地放弃对受影响特性的支持。
-某些功能还可以根据 Neutron 在底层云中发布的扩展列表启用或禁用。
-
-### cloud.conf
-
-<!--
-Kubernetes knows how to interact with OpenStack via the file cloud.conf. It is
-the file that will provide Kubernetes with credentials and location for the OpenStack auth endpoint.
-You can create a cloud.conf file by specifying the following details in it
--->
-Kubernetes 知道如何通过 cloud.conf 文件与 OpenStack 交互。
-该文件将为 Kubernetes 提供 OpenStack 验证端点的凭据和位置。
-用户可在创建 cloud.conf 文件时指定以下信息：
-
-<!--
-#### Typical configuration
-This is an example of a typical configuration that touches the values that most
-often need to be set. It points the provider at the OpenStack cloud's Keystone
-endpoint, provides details for how to authenticate with it, and configures the
-load balancer:
--->
-#### 典型配置
-
-下面是一个典型配置的例子，它涉及到最常设置的值。它将供应商指向 OpenStack 云的 Keystone 端点，
-提供如何使用它进行身份验证的细节，并配置负载均衡器:
-
-```yaml
-[Global]
-username=user
-password=pass
-auth-url=https://<keystone_ip>/identity/v3
-tenant-id=c869168a828847f39f7f06edd7305637
-domain-id=2a73b8f597c04551a0fdc8e95544be8a
-
-[LoadBalancer]
-subnet-id=6937f8fa-858d-4bc9-a3a5-18d2c957166a
-```
-<!--
-##### Global
-These configuration options for the OpenStack provider pertain to its global
-configuration and should appear in the `[Global]` section of the `cloud.conf`
-file:
--->
-##### 全局配置
-
-这些配置选项属于 OpenStack 驱动的全局配置，并且应该出现在 `cloud.conf` 文件中的 `[global]` 部分:
-
-<!--
-* `auth-url` (Required): The URL of the keystone API used to authenticate. On
-  OpenStack control panels, this can be found at Access and Security > API
-  Access > Credentials.
-* `username` (Required): Refers to the username of a valid user set in keystone.
-* `password` (Required): Refers to the password of a valid user set in keystone.
-* `tenant-id` (Required): Used to specify the id of the project where you want
-  to create your resources.
-* `tenant-name` (Optional): Used to specify the name of the project where you
-  want to create your resources.
-* `trust-id` (Optional): Used to specify the identifier of the trust to use for
-  authorization. A trust represents a user's (the trustor) authorization to
-  delegate roles to another user (the trustee), and optionally allow the trustee
-  to impersonate the trustor. Available trusts are found under the
-  `/v3/OS-TRUST/trusts` endpoint of the Keystone API.
-* `domain-id` (Optional): Used to specify the id of the domain your user belongs
-  to.
-* `domain-name` (Optional): Used to specify the name of the domain your user
-  belongs to.
-* `region` (Optional): Used to specify the identifier of the region to use when
-  running on a multi-region OpenStack cloud. A region is a general division of
-  an OpenStack deployment. Although a region does not have a strict geographical
-  connotation, a deployment can use a geographical name for a region identifier
-  such as `us-east`. Available regions are found under the `/v3/regions`
-  endpoint of the Keystone API.
-* `ca-file` (Optional): Used to specify the path to your custom CA file.
--->
-
-* `auth-url` (必需): 用于认证的 Keystone API 的 URL。在 OpenStack 控制面板中，
-  这可以在“访问和安全（Access and Security）> API 访问（API Access）> 凭证（Credentials）”中找到。
-* `username` (必需): 指 keystone 中一个有效用户的用户名。
-* `password` (必需): 指 keystone 中一个有效用户的密码。
-* `tenant-id` (必需): 用于指定要创建资源的租户 ID。
-* `tenant-name` (可选): 用于指定要在其中创建资源的租户的名称。
-* `trust-id` (可选): 用于指定用于授权的信任的标识符。信任表示用户（委托人）
-  将角色委托给另一个用户(受托人)的授权，并可选的允许受托人模仿委托人。
-  可用的信任可以在 Keystone API 的 `/v3/OS-TRUST/trusts` 端点下找到。
-* `domain-id` (可选): 用于指定用户所属域的 ID。
-* `domain-name` (可选): 用于指定用户所属域的名称。
-* `region` (可选): 用于指定在多区域 OpenStack 云上运行时使用的区域标识符。
-  区域是 OpenStack 部署的一般性划分。虽然区域没有严格的地理含义，但部署可以使用地理名称表示区域标识符，
-  如 `us-east`。可用区域位于 Keystone API 的 `/v3/regions` 端点之下。
-* `ca-file` (可选): 用于指定自定义 CA 文件的路径。
-
-<!--
-When using Keystone V3 - which changes tenant to project - the `tenant-id` value
-is automatically mapped to the project construct in the API.
--->
-当使用 Keystone V3 时(它将tenant更改为project)，`tenant-id` 值会自动映射到 API 中的项目。
-
-<!--
-#####  Load Balancer
-These configuration options for the OpenStack provider pertain to the load
-balancer and should appear in the `[LoadBalancer]` section of the `cloud.conf`
-file:
--->
-####  负载均衡器
-
-这些配置选项属于 OpenStack 驱动的全局配置，并且应该出现在 `cloud.conf` 文件中的 `[LoadBalancer]` 部分:
-
-<!--
-* `lb-version` (Optional): Used to override automatic version detection. Valid
-  values are `v1` or `v2`. Where no value is provided automatic detection will
-  select the highest supported version exposed by the underlying OpenStack
-  cloud.
-* `use-octavia` (Optional): Used to determine whether to look for and use an
-  Octavia LBaaS V2 service catalog endpoint. Valid values are `true` or `false`.
-  Where `true` is specified and an Octaiva LBaaS V2 entry can not be found, the
-  provider will fall back and attempt to find a Neutron LBaaS V2 endpoint
-  instead. The default value is `false`.
-* `subnet-id` (Optional): Used to specify the id of the subnet you want to
-  create your loadbalancer on. Can be found at Network > Networks. Click on the
-  respective network to get its subnets.
-* `floating-network-id` (Optional): If specified, will create a floating IP for
-  the load balancer.
-* `lb-method` (Optional): Used to specify an algorithm by which load will be
-  distributed amongst members of the load balancer pool. The value can be
-  `ROUND_ROBIN`, `LEAST_CONNECTIONS`, or `SOURCE_IP`. The default behavior if
-  none is specified is `ROUND_ROBIN`.
-* `lb-provider` (Optional): Used to specify the provider of the load balancer.
-  If not specified, the default provider service configured in neutron will be
-  used.
-* `create-monitor` (Optional): Indicates whether or not to create a health
-  monitor for the Neutron load balancer. Valid values are `true` and `false`.
-  The default is `false`. When `true` is specified then `monitor-delay`,
-  `monitor-timeout`, and `monitor-max-retries` must also be set.
-* `monitor-delay` (Optional): The time between sending probes to
-  members of the load balancer. Ensure that you specify a valid time unit. The valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-* `monitor-timeout` (Optional): Maximum time for a monitor to wait
-  for a ping reply before it times out. The value must be less than the delay
-  value. Ensure that you specify a valid time unit. The valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
-* `monitor-max-retries` (Optional): Number of permissible ping failures before
-  changing the load balancer member's status to INACTIVE. Must be a number
-  between 1 and 10.
-* `manage-security-groups` (Optional): Determines whether or not the load
-  balancer should automatically manage the security group rules. Valid values
-  are `true` and `false`. The default is `false`. When `true` is specified
-  `node-security-group` must also be supplied.
-* `node-security-group` (Optional): ID of the security group to manage.
--->
-
-* `lb-version` (可选): 用于覆盖自动版本检测。有效值为 `v1` 或 `v2`。
-  如果没有提供值，则自动选择底层 OpenStack 云所支持的最高版本。
-* `use-octavia` (可选): 用于确定是否查找和使用 Octavia LBaaS V2 服务目录端点。
-  有效值是 `true` 或 `false`。
-  如果指定了“true”，并且无法找到 Octaiva LBaaS V2 入口，则提供者将退回并尝试寻找一个
-  Neutron LBaaS V2 端点。默认值是 `false`。
-* `subnet-id` (可选): 用于指定要在其上创建负载均衡器的子网的 ID。
-  可以在 “Network > Networks” 上找到。
-  单击相应的网络以获得其子网。
-* `floating-network-id` (可选): 如果指定，将为负载均衡器创建一个浮动 IP。
-* `lb-method` (可选): 用于指定将负载分配到负载均衡器池成员的算法。
-  值可以是 `ROUND_ROBIN`、`LEAST_CONNECTIONS` 或 `SOURCE_IP`。
-  如果没有指定，默认行为是 `ROUND_ROBIN`。
-* `lb-provider` (可选): 用于指定负载均衡器的提供程序。
-  如果没有指定，将使用在 Neutron 中配置的默认提供者服务。
-* `create-monitor` (可选): 指定是否为 Neutron 负载均衡器创建健康监视器。
-  有效值是 `true` 和 `false`。
-  默认为 `false`。当指定 `true` 时，还必须设置 `monitor-delay`、`monitor-timeout` 和 `monitor-max-retries`。
-* `monitor-delay` (可选): 向负载均衡器的成员发送探测之间的时间间隔。
-  确保您指定了一个有效的时间单位。
-  有效时间单位为 `ns`、`us` (或 `µs`)、`ms`、`s`、`m`、`h`。
-* `monitor-timeout` (可选): 在超时之前，监视器等待 ping 响应的最长时间。
-  该值必须小于延迟值。确保您指定了一个有效的时间单位。
-  有效时间单位为 `ns`、`us` (或 `µs`)、`ms`、`s`、`m`、`h`。
-* `monitor-max-retries` (可选): 在将负载均衡器成员的状态更改为非活动之前，允许 ping 失败的次数。
-  必须是 1 到 10 之间的数字。
-* `manage-security-groups` (可选): 确定负载均衡器是否应自动管理安全组规则。
-  有效值是 `true` 和 `false`。默认为 `false`。当指定 `true` 时，还必须提供 `node-security-group`。
-* `node-security-group` (可选): 要管理的安全组的 ID。
-
-<!--
-##### Block Storage
-These configuration options for the OpenStack provider pertain to block storage
-and should appear in the `[BlockStorage]` section of the `cloud.conf` file:
--->
-##### 块存储
-
-这些配置选项属于 OpenStack 驱动的全局配置，并且应该出现在 `cloud.conf` 文件中的 `[BlockStorage]` 部分：
-
-<!--
-* `bs-version` (可选): Used to override automatic version detection. Valid
-  values are `v1`, `v2`, `v3` and `auto`. When `auto` is specified automatic
-  detection will select the highest supported version exposed by the underlying
-  OpenStack cloud. The default value if none is provided is `auto`.
-* `trust-device-path` (Optional): In most scenarios the block device names
-  provided by Cinder (e.g. `/dev/vda`) can not be trusted. This boolean toggles
-  this behavior. Setting it to `true` results in trusting the block device names
-  provided by Cinder. The default value of `false` results in the discovery of
-  the device path based on its serial number and `/dev/disk/by-id` mapping and is
-  the recommended approach.
-* `ignore-volume-az` (Optional): Used to influence availability zone use when
-  attaching Cinder volumes. When Nova and Cinder have different availability
-  zones, this should be set to `true`. This is most commonly the case where
-  there are many Nova availability zones but only one Cinder availability zone.
-  The default value is `false` to preserve the behavior used in earlier
-  releases, but may change in the future.
-* `node-volume-attach-limit` (Optional): Maximum number of Volumes that can be
-  attached to the node, default is 256 for cinder.
--->
-
-* `bs-version` (可选): 指所使用的块存储 API 版本。其合法值为 `v1`、`v2`、`v3`和 `auto`。
-  `auto` 为默认值，将使用底层 Openstack 所支持的块存储 API 的最新版本。
-* `trust-device-path` (可选): 在大多数情况下，块设备名称由 Cinder 提供（例如：`/dev/vda`）不可信任。
-  此布尔值切换此行为。将其设置为 `true` 将导致信任 Cinder 提供的块设备名称。
-  默认值 `false` 会根据设备序列号和 `/dev/disk/by-id` 映射发现设备路径，推荐这种方法。
-* `ignore-volume-az` (可选): 用于在附加 Cinder 卷时影响可用区使用。
-  当 Nova 和 Cinder 有不同的可用区域时，应该将其设置为 `true`。
-  最常见的情况是，有许多 Nova 可用区，但只有一个 Cinder 可用区。
-  默认值是 `false`，以保持在早期版本中使用的行为，但是将来可能会更改。
-* `node-volume-attach-limit` (可选): 可连接到节点的最大卷数，对于 Cinder 默认为 256。
-   
-<!--
-If deploying Kubernetes versions <= 1.8 on an OpenStack deployment that uses
-paths rather than ports to differentiate between endpoints it may be necessary
-to explicitly set the `bs-version` parameter. A path based endpoint is of the
-form `http://foo.bar/volume` while a port based endpoint is of the form
-`http://foo.bar:xxx`.
-
-In environments that use path based endpoints and Kubernetes is using the older
-auto-detection logic a `BS API version autodetection failed.` error will be
-returned on attempting volume detachment. To workaround this issue it is
-possible to force the use of Cinder API version 2 by adding this to the cloud
-provider configuration:
--->
-如果在 OpenStack 上部署 Kubernetes <= 1.8 的版本，同时使用路径而不是端口来区分端点（Endpoints），
-那么可能需要显式设置 `bs-version` 参数。
-基于路径的端点形如 `http://foo.bar/volume`，而基于端口的的端点形如 `http://foo.bar:xxx`。
-
-在使用基于路径的端点，并且 Kubernetes 使用较旧的自动检索逻辑的环境中，
-尝试卷卸载（Detachment）会返回 `BS API version autodetection failed.` 错误。
-为了解决这个问题，可以通过添加以下内容到云驱动配置中，来强制使用 Cinder API V2 版本。
-
-```yaml
-[BlockStorage]
-bs-version=v2
-```
-
-<!--
-##### Metadata
-These configuration options for the OpenStack provider pertain to metadata and
-should appear in the `[Metadata]` section of the `cloud.conf` file:
-
-* `search-order` (Optional): This configuration key influences the way that the
-  provider retrieves metadata relating to the instance(s) in which it runs. The
-  default value of `configDrive,metadataService` results in the provider
-  retrieving metadata relating to the instance from the config drive first if
-  available and then the metadata service. Alternative values are:
-  * `configDrive` - Only retrieve instance metadata from the configuration
-    drive.
-  * `metadataService` - Only retrieve instance metadata from the metadata
-    service.
-  * `metadataService,configDrive` - Retrieve instance metadata from the metadata
-    service first if available, then the configuration drive.
-
-  Influencing this behavior may be desirable as the metadata on the
-  configuration drive may grow stale over time, whereas the metadata service
-  always provides the most up to date view. Not all OpenStack clouds provide
-  both configuration drive and metadata service though and only one or the other
-  may be available which is why the default is to check both.
--->
-##### 元数据
-
-这些配置选项属于 OpenStack 提供程序的全局配置，并且应该出现在 `cloud.conf` 文件中的 `[Metadata]` 部分：
-
-* `search-order` (可选): 此配置键影响提供者检索与其运行的实例相关的元数据的方式。
-  `configDrive，metadataService` 的默认值导致供应商首先从配置驱动器中检索与实例相关的元数据（如果可用的话），
-  然后检索元数据服务。
-  他们的替代值：
-
-  * `configDrive` - 仅从配置驱动器检索实例元数据。
-  * `metadataService` - 仅从元数据服务检索实例元数据。
-  * `metadataService,configDrive` - 如果可用，首先从元数据服务检索实例元数据，然后从配置驱动器检索。
-
-  影响这种行为可能是可取的，因为配置驱动器上的元数据可能会随着时间的推移而变得陈旧，
-  而元数据服务总是提供最新的数据视图。并不是所有的 OpenStack 云都同时提供配置驱动和元数据服务，
-  可能只有一个或另一个可用，这就是为什么默认情况下要同时检查两个。
-
-<!--
-##### Route
-
-These configuration options for the OpenStack provider pertain to the [kubenet]
-Kubernetes network plugin and should appear in the `[Route]` section of the
-`cloud.conf` file:
-
-* `router-id` (Optional): If the underlying cloud's Neutron deployment supports
-  the `extraroutes` extension then use `router-id` to specify a router to add
-  routes to.  The router chosen must span the private networks containing your
-  cluster nodes (typically there is only one node network, and this value should be
-  the default router for the node network).  This value is required to use
-  [kubenet](/docs/concepts/cluster-administration/network-plugins/#kubenet)
-  on OpenStack.
--->
-
-##### 路由
-
-这些配置选项属于 OpenStack 驱动为 Kubernetes 网络插件 [kubenet] 提供的设置，并且应该出现在 `cloud.conf` 文件中的 `[Route]` 部分:
-
-* `router-id` (可选)：如果底层云的 Neutron 部署支持 `extraroutes` 扩展，
-  则使用 `router-id` 指定要添加路由的路由器。
-  选择的路由器必须跨越包含集群节点的私有网络（通常只有一个节点网络，这个值应该是节点网络的默认路由器）。
-  在 OpenStack 上使用 [kubenet](/zh/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#kubenet)
-  时需要这个值。
-
-
-## OVirt
-
-<!--
-### Node Name
-
-The OVirt cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the Kubernetes Node name must match the VM FQDN (reported by OVirt under `<vm><guest_info><fqdn>...</fqdn></guest_info></vm>`)
--->
-
-### 节点名称
-
-OVirt 云驱动使用节点的主机名（由 kubelet 确定，或者用 `--hostname-override` 覆盖）作为 Kubernetes 节点对象的名称。
-注意 Kubernetes 节点名必须与 VM FQDN 匹配（OVirt 在`<vm><guest_info><fqdn>...</fqdn></guest_info></vm>`中说明）。
-
-## Photon
-
-<!--
-### Node Name
-
-The Photon cloud provider uses the hostname of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the Kubernetes Node name must match the Photon VM name (or if `overrideIP` is set to true in the `--cloud-config`, the Kubernetes Node name must match the Photon VM IP address).
--->
-
-### 节点名称
-
-Photon 云驱动使用节点的主机名（由 kubelet 决定，或者用 `--hostname-override` 覆盖）
-作为 Kubernetes 节点对象的名称。
-注意，Kubernetes 节点名必须与 Photon VM名匹配（或者，如果在 `--cloud-config` 中将
-`overrideIP` 设置为 `true`，则 Kubernetes 节点名必须与 Photon VM IP 地址匹配）。
-
-## VSphere
-
-<!--
-### Node Name
-
-The VSphere cloud provider uses the detected hostname of the node (as determined by the kubelet) as the name of the Kubernetes Node object.
-
-The `--hostname-override` parameter is ignored by the VSphere cloud provider.
--->
-### 节点名称
-
-VSphere 云驱动使用节点检测到的主机名(由 kubelet 确定)作为 Kubernetes 节点对象的名称。
-VSphere 云驱动会忽略 `--hostname-override` 参数。
-
-## IBM Cloud Kubernetes Service
-
-<!--
-### Compute nodes
-By using the IBM Cloud Kubernetes Service provider, you can create clusters with a mixture of virtual and physical (bare metal) nodes in a single zone or across multiple zones in a region. For more information, see [Planning your cluster and worker node setup](https://cloud.ibm.com/docs/containers?topic=containers-plan_clusters#plan_clusters).
-
-The name of the Kubernetes Node object is the private IP address of the IBM Cloud Kubernetes Service worker node instance.
--->
-### 计算节点
-
-通过使用 IBM Cloud Kubernetes Service 驱动，您可以在单个区域或跨区域的多个区（Region）
-中创建虚拟和物理（裸金属）节点的集群。
-有关更多信息，请参见[规划您的集群和工作节点设置](https://cloud.ibm.com/docs/containers?topic=containers-plan_clusters#plan_clusters)。
-
-Kubernetes 节点对象的名称是 IBM Cloud Kubernetes Services 工作节点实例的私有IP地址。
-
-<!--
-### Networking
-
-The IBM Cloud Kubernetes Service provider provides VLANs for quality network performance and network isolation for nodes. You can set up custom firewalls and Calico network policies to add an extra layer of security for your cluster, or connect your cluster to your on-prem data center via VPN. For more information, see [Planning in-cluster and private networking](https://cloud.ibm.com/docs/containers?topic=containers-cs_network_cluster#cs_network_cluster).
-
-To expose apps to the public or within the cluster, you can leverage NodePort, LoadBalancer, or Ingress services. You can also customize the Ingress application load balancer with annotations. For more information, see [Planning to expose your apps with external networking](https://cloud.ibm.com/docs/containers?topic=containers-cs_network_planning#cs_network_planning).
--->
-### 网络
-
-IBM Cloud Kubernetes Services 驱动提供 VLAN，用于提供高质量的网络性能和节点间的网络隔离。
-您可以设置自定义防火墙和 Calico 网络策略来为您的集群添加额外的安全层，或者通过 VPN
-将您的集群连接到自有数据中心。
-有关更多信息，请参见[规划集群内和私有网络](https://cloud.ibm.com/docs/containers?topic=containers-cs_network_cluster#cs_network_cluster)。
-
-要向公众或集群内部公开应用程序，您可以利用 NodePort、LoadBalancer 或 Ingress 服务。
-您还可以使用注释自定义 Ingress 应用程序负载均衡器。
-有关更多信息，请参见[计划使用外部网络公开您的应用程序](https://cloud.ibm.com/docs/containers?topic=containers-cs_network_planning#cs_network_planning)。
-
-<!--
-### Storage
-
-The IBM Cloud Kubernetes Service provider leverages Kubernetes-native persistent volumes to enable users to mount file, block, and cloud object storage to their apps. You can also use database-as-a-service and third-party add-ons for persistent storage of your data. For more information, see [Planning highly available persistent storage](https://cloud.ibm.com/docs/containers?topic=containers-storage_planning#storage_planning).
--->
-
-### 存储
-
-IBM Cloud Kubernetes Services 驱动利用 Kubernetes 原生的持久卷，使用户能够将文件、块和云对象存储
-装载到他们的应用程序中。还可以使用 database-as-a-service 和第三方附加组件来持久存储数据。
-有关更多信息，请参见[规划高可用性持久存储](https://cloud.ibm.com/docs/containers?topic=containers-storage_planning#storage_planning)。
-
-<!--
-## Baidu Cloud Container Engine
-
-### Node Name
-
-The Baidu cloud provider uses the private IP address of the node (as determined by the kubelet or overridden with `--hostname-override`) as the name of the Kubernetes Node object.
-Note that the Kubernetes Node name must match the Baidu VM private IP.
--->
-## 百度云容器引擎
-
-### 节点名称
-
-Baidu 云驱动使用节点的私有 IP 地址（由 kubelet 确定，或者用 `--hostname-override` 覆盖）
-作为 Kubernetes 节点对象的名称。
-注意 Kubernetes 节点名必须匹配百度 VM 的私有 IP。
diff --git a/content/zh/docs/concepts/services-networking/service.md b/content/zh/docs/concepts/services-networking/service.md
index f5b7c629c1..6da8bf54ee 100644
--- a/content/zh/docs/concepts/services-networking/service.md
+++ b/content/zh/docs/concepts/services-networking/service.md
@@ -1872,7 +1872,7 @@ to expose HTTP / HTTPS Services.
 {{< feature-state for_k8s_version="v1.1" state="stable" >}}
 
 <!--
-If your cloud provider supports it (eg, [AWS](/docs/concepts/cluster-administration/cloud-providers/#aws)),
+If your cloud provider supports it,
 you can use a Service in LoadBalancer mode to configure a load balancer outside
 of Kubernetes itself, that will forward connections prefixed with
 [PROXY protocol](https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt).
@@ -1881,7 +1881,7 @@ The load balancer will send an initial series of octets describing the
 incoming connection, similar to this example
 -->
 
-如果您的云提供商支持它（例如, [AWS](/zh/docs/concepts/cluster-administration/cloud-providers/#aws)），
+如果您的云提供商支持它，
 则可以在 LoadBalancer 模式下使用 Service 在 Kubernetes 本身之外配置负载均衡器，
 该负载均衡器将转发前缀为 [PROXY协议](https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt)
 的连接。
diff --git a/content/zh/docs/concepts/storage/volumes.md b/content/zh/docs/concepts/storage/volumes.md
index c6cbd24458..1a6ba538a0 100644
--- a/content/zh/docs/concepts/storage/volumes.md
+++ b/content/zh/docs/concepts/storage/volumes.md
@@ -314,13 +314,10 @@ See the [CephFS example](https://github.com/kubernetes/examples/tree/{{< param "
 ### cinder {#cinder}
 
 <!--
-Prerequisite: Kubernetes with OpenStack Cloud Provider configured. For cloudprovider
-configuration please refer [cloud provider openstack](https://kubernetes.io/docs/concepts/cluster-administration/cloud-providers/#openstack).
+Prerequisite: Kubernetes with OpenStack Cloud Provider configured.
 -->
 {{< note >}}
 先决条件：配置了OpenStack Cloud Provider 的 Kubernetes。
-有关 cloudprovider 配置，请参考
-[cloud provider openstack](/zh/docs/concepts/cluster-administration/cloud-providers/#openstack)。
 {{< /note >}}
 
 <!--
diff --git a/content/zh/docs/reference/glossary/cloud-provider.md b/content/zh/docs/reference/glossary/cloud-provider.md
deleted file mode 100644
index 30462f792b..0000000000
--- a/content/zh/docs/reference/glossary/cloud-provider.md
+++ /dev/null
@@ -1,38 +0,0 @@
----
-title: 云供应商
-id: cloud-provider
-date: 2018-04-12
-full_link: /zh/docs/concepts/cluster-administration/cloud-providers/
-short_description: >
-  云供应商是提供可以用来运行 Kubernetes 集群的云计算平台的公司。
-
-aka: 
-tags:
-- community
----
-
-<!--
----
-title: Cloud Provider
-id: cloud-provider
-date: 2018-04-12
-full_link: /zh/docs/concepts/cluster-administration/cloud-providers/
-short_description: >
-  Cloud provider is a company that offers cloud computing platform that can run Kubernetes clusters.
-
-aka: 
-tags:
-- community
----
--->
-<!--
- Cloud provider is a company that offers cloud computing platform that can run Kubernetes clusters.
--->
- 云供应商是提供可以用来运行 Kubernetes 集群的云计算平台的公司。
-
-<!--more--> 
-<!--
-Cloud providers or sometime called Cloud Service Provider (CSPs) provides cloud computing platforms.  They may offer services such as Infrastructure as a Service (IaaS) or Platform as a Service (PaaS).  Cloud providers host the Kubernetes cluster and also provide services that interact with the cluster, such as Load Balancers, Storage Classes etc. 
--->
-
-云供应商也叫云服务供应商（CSPs），他们可以为用户提供云计算平台。他们提供的服务可以是基础设施即服务（IaaS）或者平台即服务（PaaS）。云供应商除了运行 Kubernetes 集群，还提供一些集群交互的服务，例如负载均衡（Load Balancers）、存储类别（Storage Classes）等。

From 973ecd483b50e57be4f4364a797cc8fe573ebdcb Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 11:32:52 +0800
Subject: [PATCH 480/496] remove atom-snippets for zh

---
 .../zh/docs/doc-contributor-tools/README.md   |   7 -
 .../doc-contributor-tools/snippets/README.md  |  84 -------
 .../snippets/atom-snippets.cson               | 226 ------------------
 3 files changed, 317 deletions(-)
 delete mode 100644 content/zh/docs/doc-contributor-tools/README.md
 delete mode 100644 content/zh/docs/doc-contributor-tools/snippets/README.md
 delete mode 100644 content/zh/docs/doc-contributor-tools/snippets/atom-snippets.cson

diff --git a/content/zh/docs/doc-contributor-tools/README.md b/content/zh/docs/doc-contributor-tools/README.md
deleted file mode 100644
index fe0e37a2c7..0000000000
--- a/content/zh/docs/doc-contributor-tools/README.md
+++ /dev/null
@@ -1,7 +0,0 @@
-Kubernetes 文档贡献者的工具。 查看子目录内的 `README.md` 文件以获取更多信息。
-
-
-<!--
-Tools for Kubernetes docs contributors. View `README.md` files in
-subdirectories for more info.
--->
diff --git a/content/zh/docs/doc-contributor-tools/snippets/README.md b/content/zh/docs/doc-contributor-tools/snippets/README.md
deleted file mode 100644
index 4058cbd4b6..0000000000
--- a/content/zh/docs/doc-contributor-tools/snippets/README.md
+++ /dev/null
@@ -1,84 +0,0 @@
-<!-- # Snippets for Atom -->
-# Atom 的代码段
-
-<!-- Snippets are bits of text that get inserted into your editor, to save typing and
-reduce syntax errors. The snippets provided in `atom-snippets.cson` are scoped to
-only work on Markdown files within Atom. -->
-
-代码段就是可以插入到编辑器中的一段文本，可以节省键入时间，减少语法错误。
-`atom-snippets.cson` 文件中所提供的代码段只用于在 Atom 中的 Markdown 文件。
-
-<!-- ## Installation -->
-## 安装
-
-<!-- Copy the contents of the `atom-snippets.cson` file into your existing
-`~/.atom/snippets.cson`. **Do not replace your existing file.** -->
-
-将 `atom-snippets.cson` 文件中的内容复制到现有的`~/.atom/snippets.cson` 之中。
-**不要替换现有的文件。**
-
-<!-- You do not need to restart Atom. -->
-不需要重启 Atom。
-
-<!-- ## Usage -->
-## 使用
-
-<!-- Have a look through `atom-snippets.cson` and note the titles and `prefix` values
-of the snippets. -->
-
-浏览一遍 `atom-snippets.cson` 文件，记下代码段的标题和 `prefix`。
-
-<!-- You can trigger a given snippet in one of two ways:
-
-- By typing the snippet's `prefix` and pressing the `<TAB>` key
-- By searching for the snippet's title in **Packages / Snippets / Available** -->
-
-你可以使用以下任意一种方式来触发相应的代码段：
-- 键入代码段的`prefix`，按下 `<TAB>` 键
-- 在 **Packages / Snippets / Available** 中搜索代码段的标题
-
-<!-- For example, open a Markdown file and type `anote` and press `<TAB>`. A blank
-note is added, with the correct Hugo shortcodes. -->
-
-例如，打开一个 Markdown 文件，键入 `anote`，按下 `<TAB>`。
-就会插入一段带有正确的 Hugo 短代码的空注释。
-
-<!-- A snippet can insert a single line or multiple lines of text. Some snippets
-have placeholder values. To get to the next placeholder, press `<TAB>` again. -->
-
-代码段可以插入一行或多行文本。一些代码行都设有预留值。想要切换到下一个预留值，再按一次`<TAB>` 键即可。
-
-<!-- Some of the snippets only insert partially-formed Markdown or Hugo syntax.
-For instance, `coverview` inserts the start of a concept overview tag, while
-`cclose` inserts a close-capture tag. This is because every type of capture
-needs a capture-close tab. -->
-
-一些代码段只会插入部分格式的 Markdown 或 Hugo 语法。
-例如，`coverview` 只会插入一个概念概览的开始标签，而`cclose`则会插入一个结束标签。
-这是因为每类 capture 都需要一个 capture-close 标签。
-
-<!-- ## Creating new topics using snippets -->
-## 使用代码段创建新的话题
-
-<!-- To create a new concept, task, or tutorial from a blank file, use one of the
-following: -->
-从空白文件中，创建一个新的概念，任务或者教程，使用以下的代码段：
-
-- `newconcept`
-- `newtask`
-- `newtutorial`
-
-<!-- Placeholder text is included. -->
-预设文本包含其中。
-
-<!-- ## Submitting new snippets -->
-## 提交新的代码段
-
-<!-- 1.  Develop the snippet locally and verify that it works as expected.
-2.  Copy the template's code into the `atom-snippets.cson` file on Github. Raise a
-    pull request, and ask for review from another Atom user in `#sig-docs` on
-    Kubernetes Slack. -->
-
-1. 本地开发代码段，验证是否有效。
-2. 将代码单复制到 Github 的 `atom-snippets.cson` 文件中。
-提交 pull request，邀请 Kubernetes Slack `#sig-docs` 中的另外一名 Atom 用户进行审查。
diff --git a/content/zh/docs/doc-contributor-tools/snippets/atom-snippets.cson b/content/zh/docs/doc-contributor-tools/snippets/atom-snippets.cson
deleted file mode 100644
index 878ccc4ed7..0000000000
--- a/content/zh/docs/doc-contributor-tools/snippets/atom-snippets.cson
+++ /dev/null
@@ -1,226 +0,0 @@
-# Your snippets
-#
-# Atom snippets allow you to enter a simple prefix in the editor and hit tab to
-# expand the prefix into a larger code block with templated values.
-#
-# You can create a new snippet in this file by typing "snip" and then hitting
-# tab.
-#
-# An example CoffeeScript snippet to expand log to console.log:
-#
-# '.source.coffee':
-#   'Console log':
-#     'prefix': 'log'
-#     'body': 'console.log $1'
-#
-# Each scope (e.g. '.source.coffee' above) can only be declared once.
-#
-# This file uses CoffeeScript Object Notation (CSON).
-# If you are unfamiliar with CSON, you can read more about it in the
-# Atom Flight Manual:
-# http://flight-manual.atom.io/using-atom/sections/basic-customization/#_cson
-
-'.source.gfm':
-
-  # Capture variables for concept template
-  # For full concept template see 'newconcept' below
-  'Insert concept template':
-    'prefix': 'ctemplate'
-    'body': 'content_template: templates/concept'
-  'Insert concept overview':
-    'prefix': 'coverview'
-    'body': '{{% capture overview %}}'
-  'Insert concept body':
-    'prefix': 'cbody'
-    'body': '{{% capture body %}}'
-  'Insert concept whatsnext':
-    'prefix': 'cnext'
-    'body': '{{% capture whatsnext %}}'
-
-
-  # Capture variables for task template
-  # For full task template see 'newtask' below
-  'Insert task template':
-    'prefix': 'ttemplate'
-    'body': 'content_template: templates/task'
-  'Insert task overview':
-    'prefix': 'toverview'
-    'body': '{{% capture overview %}}'
-  'Insert task prerequisites':
-    'prefix': 'tprereq'
-    'body': """
-      {{% capture prerequisites %}}
-
-      {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
-      {{% /capture %}}
-    """
-  'Insert task steps':
-    'prefix': 'tsteps'
-    'body': '{{% capture steps %}}'
-  'Insert task discussion':
-    'prefix': 'tdiscuss'
-    'body': '{{% capture discussion %}}'
-
-
-  # Capture variables for tutorial template
-  # For full tutorial template see 'newtutorial' below
-  'Insert tutorial template':
-    'prefix': 'tutemplate'
-    'body': 'content_template: templates/tutorial'
-  'Insert tutorial overview':
-    'prefix': 'tuoverview'
-    'body': '{{% capture overview %}}'
-  'Insert tutorial prerequisites':
-    'prefix': 'tuprereq'
-    'body': '{{% capture prerequisites %}}'  
-  'Insert tutorial objectives':
-    'prefix': 'tuobjectives'
-    'body': '{{% capture objectives %}}'
-  'Insert tutorial lesson content':
-    'prefix': 'tulesson'
-    'body': '{{% capture lessoncontent %}}'
-  'Insert tutorial whatsnext':
-    'prefix': 'tunext'
-    'body': '{{% capture whatsnext %}}'
-  'Close capture':
-    'prefix': 'ccapture'
-    'body': '{{% /capture %}}'
-  'Insert note':
-    'prefix': 'anote'
-    'body': """
-      {{< note >}}
-      $1
-      {{< /note >}}
-    """
-  
-  # Admonitions
-  'Insert caution':
-    'prefix': 'acaution'
-    'body': """
-      {{< caution >}}
-      $1
-      {{< /caution >}}
-    """
-  'Insert warning':
-    'prefix': 'awarning'
-    'body': """
-      {{< warning >}}
-      $1
-      {{< /warning >}}
-    """
-  
-  # Misc one-liners
-  'Insert TOC':
-    'prefix': 'toc'
-    'body': '{{< toc >}}'
-  'Insert code from file':
-    'prefix': 'codefile'
-    'body': '{{< codenew file="$1" >}}'
-  'Insert feature state':
-    'prefix': 'fstate'
-    'body': '{{< feature-state for_k8s_version="$1" state="$2" >}}'
-  'Insert figure':
-    'prefix': 'fig'
-    'body': '{{< figure src="$1" title="$2" alt="$3" caption="$4" >}}'
-  'Insert Youtube link':
-    'prefix': 'yt'
-    'body': '{{< youtube $1 >}}'
-
-
-  # Full concept template
-  'Create new concept':
-    'prefix': 'newconcept'
-    'body': """
-      ---
-      reviewers:
-      - ${1:"github-id-or-group"}
-      title: ${2:"topic-title"}
-      content_template: templates/concept
-      ---
-      {{% capture overview %}}
-      ${3:"overview-content"}
-      {{% /capture %}}
-      
-      {{< toc >}}
-      
-      {{% capture body %}}
-      ${4:"h2-heading-per-subtopic"}
-      {{% /capture %}}
-      
-      {{% capture whatsnext %}}
-      ${5:"next-steps-or-delete"}
-      {{% /capture %}}
-    """
-
-
-  # Full task template
-  'Create new task':
-    'prefix': 'newtask'
-    'body': """
-      ---
-      reviewers:
-      - ${1:"github-id-or-group"}
-      title: ${2:"topic-title"}
-      content_template: templates/task
-      ---
-      {{% capture overview %}}
-      ${3:"overview-content"}
-      {{% /capture %}}
-      
-      {{< toc >}}
-      
-      {{% capture prerequisites %}}
-      
-      {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-      
-      ${4:"additional-prereqs-or-delete"}
-      
-      {{% /capture %}}
-      
-      {{% capture steps %}}
-      ${5:"h2-heading-per-step"}
-      {{% /capture %}}
-      
-      {{% capture discussion %}}
-      ${6:"task-discussion-or-delete"}
-      {{% /capture %}}
-    """
-
-  # Full tutorial template
-  'Create new tutorial':
-    'prefix': 'newtutorial'
-    'body': """
-      ---
-      reviewers:
-      - ${1:"github-id-or-group"}
-      title: ${2:"topic-title"}
-      content_template: templates/tutorial
-      ---
-      {{% capture overview %}}
-      ${3:"overview-content"}
-      {{% /capture %}}
-      
-      {{< toc >}}
-      
-      {{% capture prerequisites %}}
-      
-      {{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-      
-      ${4:"additional-prereqs-or-delete"}
-      
-      {{% /capture %}}
-      
-      {{% capture objectives %}}
-      ${5:"tutorial-objectives"}
-      {{% /capture %}}
-      
-      {{% capture lessoncontent %}}
-      ${6:"lesson-content"}
-      {{% /capture %}}
-      
-      {{% capture whatsnext %}}
-      ${7:"next-steps-or-delete"}
-      {{% /capture %}}
-    """
-  

From 78d93f6119e2f3f95a2e9e292da0fef8eca4bb2f Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 11:43:22 +0800
Subject: [PATCH 481/496] move content/zh/docs/search.md to
 content/zh/search.md

---
 content/zh/{docs => }/search.md | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename content/zh/{docs => }/search.md (100%)

diff --git a/content/zh/docs/search.md b/content/zh/search.md
similarity index 100%
rename from content/zh/docs/search.md
rename to content/zh/search.md

From 677ae0e433ccfca6430a89ceb1a21f71689f3db1 Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 11:50:41 +0800
Subject: [PATCH 482/496] Remove on-premises VMs section fo zh

---
 .../on-premises-vm/_index.md                  |   4 -
 .../on-premises-vm/dcos.md                    |  48 -------
 .../on-premises-vm/ovirt.md                   | 123 ------------------
 3 files changed, 175 deletions(-)
 delete mode 100644 content/zh/docs/setup/production-environment/on-premises-vm/_index.md
 delete mode 100644 content/zh/docs/setup/production-environment/on-premises-vm/dcos.md
 delete mode 100644 content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md

diff --git a/content/zh/docs/setup/production-environment/on-premises-vm/_index.md b/content/zh/docs/setup/production-environment/on-premises-vm/_index.md
deleted file mode 100644
index 13f3c62ce0..0000000000
--- a/content/zh/docs/setup/production-environment/on-premises-vm/_index.md
+++ /dev/null
@@ -1,4 +0,0 @@
----
-title: 本地 VMs
-weight: 40
----
diff --git a/content/zh/docs/setup/production-environment/on-premises-vm/dcos.md b/content/zh/docs/setup/production-environment/on-premises-vm/dcos.md
deleted file mode 100644
index 563701695c..0000000000
--- a/content/zh/docs/setup/production-environment/on-premises-vm/dcos.md
+++ /dev/null
@@ -1,48 +0,0 @@
----
-reviewers:
-- smugcloud
-title: DC/OS 上的 Kubernetes
-content_type: concept
----
-<!--
----
-reviewers:
-- smugcloud
-title: Kubernetes on DC/OS
-content_type: concept
----
--->
-
-<!-- overview -->
-
-<!--
-Mesosphere provides an easy option to provision Kubernetes onto [DC/OS](https://mesosphere.com/product/), offering:
--->
-Mesosphere 提供了一个简单的选项来将 Kubernetes 设置到[DC/OS](https://mesosphere.com/product/)上，它提供：
-
-<!--
-* Pure upstream Kubernetes
-* Single-click cluster provisioning
-* Highly available and secure by default
-* Kubernetes running alongside fast-data platforms (e.g. Akka, Cassandra, Kafka, Spark)
--->
-* 纯上游 Kubernetes
-* 集群一键部署
-* 默认情况下高度可用且安全
-* 与快速数据平台 (例如 Akka、Cassandra、Kafka、Spark) 一起运行的 Kubernetes
-
-
-
-<!-- body -->
-
-<!--
-## Official Mesosphere Guide
--->
-## Mesosphere 官方指南
-
-<!--
-The canonical source of getting started on DC/OS is located in the [quickstart repo](https://github.com/mesosphere/dcos-kubernetes-quickstart).
--->
-DC/OS 入门的正式来源位于[quickstart 仓库](https://github.com/mesosphere/dcos-kubernetes-quickstart)中。
-
-
diff --git a/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md b/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md
deleted file mode 100644
index 5d9c3fdd10..0000000000
--- a/content/zh/docs/setup/production-environment/on-premises-vm/ovirt.md
+++ /dev/null
@@ -1,123 +0,0 @@
----
-title: oVirt
-content_type: concept
----
-<!--
-reviewers:
-- caesarxuchao
-- erictune
-title: oVirt
-content_type: concept
--->
-
-<!-- overview -->
-
-<!--
-oVirt is a virtual datacenter manager that delivers powerful management of multiple virtual machines on multiple hosts. Using KVM and libvirt, oVirt can be installed on Fedora, CentOS, or Red Hat Enterprise Linux hosts to set up and manage your virtual data center.
--->
-oVirt 是一个虚拟数据中心管理器，可以对多个主机上的多个虚拟机进行强大的管理。
-使用 KVM 和 libvirt ，可以将 oVirt 安装在 Fedora、CentOS 或者 Red Hat Enterprise Linux 主机上，以部署和管理您的虚拟数据中心。
-
-<!-- body -->
-
-<!--
-## oVirt Cloud Provider Deployment
-
-The oVirt cloud provider allows to easily discover and automatically add new VM instances as nodes to your Kubernetes cluster.
-At the moment there are no community-supported or pre-loaded VM images including Kubernetes but it is possible to [import] or [install] Project Atomic (or Fedora) in a VM to [generate a template]. Any other distribution that includes Kubernetes may work as well.
--->
-## oVirt 云驱动的部署
-
-oVirt 云驱动可以轻松发现新 VM 实例并自动将其添加为 Kubernetes 集群的节点。
-目前，包括 Kubernetes 在内，尚无社区支持或预加载的 VM 镜像，但可以在 VM 中
-[导入](https://ovedou.blogspot.it/2014/03/importing-glance-images-as-ovirt.html) 或
-[安装](https://www.ovirt.org/documentation/quickstart/quickstart-guide/#create-virtual-machines)
-Project Atomic（或 Fedora）来 
-[生成模版](https://www.ovirt.org/documentation/quickstart/quickstart-guide/#using-templates)。
-包括 Kubernetes 的任何其他 Linux 发行版也可能可行。
-
-<!--
-It is mandatory to [install the ovirt-guest-agent] in the guests for the VM ip address and hostname to be reported to ovirt-engine and ultimately to Kubernetes.
--->
-必须在寄宿系统中
-[安装 ovirt-guest-agent](https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-agent-in-fedora/)，
-才能将 VM 的 IP 地址和主机名报给 ovirt-engine 并最终报告给 Kubernetes。
-
-<!--
-Once the Kubernetes template is available it is possible to start instantiating VMs that can be discovered by the cloud provider.
--->
-一旦 Kubernetes 模版可用，就可以开始创建可由云驱动发现的 VM。
-
-<!--
-## Using the oVirt Cloud Provider
-
-The oVirt Cloud Provider requires access to the oVirt REST-API to gather the proper information,
-the required credential should be specified in the `ovirt-cloud.conf` file:
--->
-## 使用 oVirt 云驱动
-
-oVirt 云驱动需要访问 oVirt REST-API 来收集正确的信息，所需的凭据应在 `ovirt-cloud.conf` 文件中设定：
-
-```none
-[connection]
-uri = https://localhost:8443/ovirt-engine/api
-username = admin@internal
-password = admin
-```
-
-<!--
-In the same file it is possible to specify (using the `filters` section) what search query to use to identify the VMs to be reported to Kubernetes:
--->
-在同一文件中，可以指定（使用 `filters` 节区）搜索查询，用于辨识要报告给 Kubernetes 的 VM：
-
-```none
-[filters]
-# Search query used to find nodes
-vms = tag=kubernetes
-```
-
-<!--
-In the above example all the VMs tagged with the `kubernetes` label will be reported as nodes to Kubernetes.
--->
-在上面的示例中，所有带有 `kubernetes` 标签的虚拟机都将作为节点报告给 Kubernetes。
-
-<!--
-The `ovirt-cloud.conf` file then must be specified in kube-controller-manager:
--->
-然后必须向 kube-controller-manager 提供 `ovirt-cloud.conf` 文件：
-
-```shell
-kube-controller-manager ... --cloud-provider=ovirt --cloud-config=/path/to/ovirt-cloud.conf ...
-```
-
-<!--
-## oVirt Cloud Provider Screencast
--->
-## oVirt 云驱动截屏视频
-
-<!--
-This short screencast demonstrates how the oVirt Cloud Provider can be used to dynamically add VMs to your Kubernetes cluster.
--->
-这段简短的截屏视频演示了如何使用 oVirt 云提供商将 VM 动态添加到 Kubernetes 集群。
-
-<!--
-[![Screencast](https://img.youtube.com/vi/JyyST4ZKne8/0.jpg)](https://www.youtube.com/watch?v=JyyST4ZKne8)
--->
-[![截屏视频](https://img.youtube.com/vi/JyyST4ZKne8/0.jpg)](https://www.youtube.com/watch?v=JyyST4ZKne8)
-
-<!--
-## Support Level
--->
-## 支持级别
-
-
-<!--
-IaaS Provider        | Config. Mgmt | OS     | Networking  | Docs                                              | Conforms | Support Level
--------------------- | ------------ | ------ | ----------  | ---------------------------------------------     | ---------| ----------------------------
-oVirt                |              |        |             | [docs](/docs/setup/production-environment/on-premises-vm/ovirt/)                                  |          | Community ([@simon3z](https://github.com/simon3z))
--->
-IaaS 提供商        | 配置管理 | OS     | 联网  | 文件                                              | 遵从性 | 支持级别
------------------ | ------- | ------ | ---- | ------------------------------------------------- |------| ---------------
-oVirt | | | | [文件](/zh/docs/setup/production-environment/on-premises-vm/ovirt/) | | 社区 ([@simon3z](https://github.com/simon3z))
-
-

From c06a15fc479038de252f08c2f6718e1950ab1f04 Mon Sep 17 00:00:00 2001
From: Radix10 <admin@radix10.me>
Date: Wed, 30 Sep 2020 12:01:06 +0800
Subject: [PATCH 483/496] Fix typo

---
 .../zh/docs/tasks/administer-cluster/dns-custom-nameservers.md  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
index 168d01d664..60f24cd83e 100644
--- a/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
+++ b/content/zh/docs/tasks/administer-cluster/dns-custom-nameservers.md
@@ -221,7 +221,7 @@ You can modify the default CoreDNS behavior by modifying the ConfigMap.
 
 CoreDNS has the ability to configure stubdomains and upstream nameservers using the [forward plugin](https://coredns.io/plugins/forward/).
 -->
-### 使用 CoreDN 配置存根域和上游域名服务器
+### 使用 CoreDNS 配置存根域和上游域名服务器
 
 CoreDNS 能够使用 [forward 插件](https://coredns.io/plugins/forward/)配置存根域和上游域名服务器。
 

From d646c6b4f662f6d2c57c9f39e2656aca50baaa99 Mon Sep 17 00:00:00 2001
From: luzg <hikube@163.com>
Date: Mon, 28 Sep 2020 15:57:11 +0800
Subject: [PATCH 484/496] add page:
 /zh/docs/tasks/debug-application-cluster/debug-running-pod/, fix 24177 make
 change according to howieyuen

---
 .../debug-running-pod.md                      | 298 ++++++++++++++++++
 1 file changed, 298 insertions(+)
 create mode 100644 content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md

diff --git a/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md b/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md
new file mode 100644
index 0000000000..6863fcb723
--- /dev/null
+++ b/content/zh/docs/tasks/debug-application-cluster/debug-running-pod.md
@@ -0,0 +1,298 @@
+---
+title: 调试运行中的 Pod
+content_type: task
+---
+<!--
+reviewers:
+- verb
+- soltysh
+title: Debug Running Pods
+content_type: task
+-->
+
+<!-- overview -->
+
+<!-- 
+This page explains how to debug Pods running (or crashing) on a Node.
+-->
+本页解释了如何调试节点上正在运行(或者正在崩溃)的 Pod。
+
+
+
+## {{% heading "prerequisites" %}}
+
+
+<!-- 
+* Your {{< glossary_tooltip text="Pod" term_id="pod" >}} should already be
+  scheduled and running. If your Pod is not yet running, start with [Troubleshoot
+  Applications](/docs/tasks/debug-application-cluster/debug-application/).
+* For some of the advanced debugging steps you need to know on which Node the
+  Pod is running and have shell access to run commands on that Node. You don't
+  need that access to run the standard debug steps that use `kubectl`.
+-->
+* 你的 {{< glossary_tooltip text="Pod" term_id="pod" >}} 
+  应该已经调度并正在运行。
+  如果 Pod 尚未运行，则从 
+  [应用故障排查](/zh/docs/tasks/debug-application-cluster/debug-application/) 开始。
+* 对于一些高级调试步骤，
+  你需要知道 Pod 在哪个节点上运行，并拥有在该节点上执行 shell 命令的权限。
+  在使用 `kubectl` 运行标准调试步骤时，则不需要这种权限。
+
+
+
+<!-- steps -->
+
+<!--
+## Examining pod logs {#examine-pod-logs}
+
+First, look at the logs of the affected container:
+-->
+## 检查 Pod 日志  {#examine-pod-logs}
+
+首先，查看受影响的容器的日志：
+
+```shell
+kubectl logs ${POD_NAME} ${CONTAINER_NAME}
+```
+
+<!--
+If your container has previously crashed, you can access the previous container's crash log with:
+-->
+如果你的容器以前崩溃过，你可以访问前一个容器的崩溃日志：
+
+```shell
+kubectl logs --previous ${POD_NAME} ${CONTAINER_NAME}
+```
+
+<!--
+## Debugging with container exec {#container-exec}
+
+If the {{< glossary_tooltip text="container image" term_id="image" >}} includes
+debugging utilities, as is the case with images built from Linux and Windows OS
+base images, you can run commands inside a specific container with
+`kubectl exec`:
+-->
+## 使用容器 exec 调试 {#container-exec}
+
+如果 {{< glossary_tooltip text="容器镜像" term_id="image" >}} 
+包含调试工具，就像基于 Linux 和 Windows 基础镜像构建的镜像一样，
+你可以使用 `kubectl exec` 在特定的容器中执行命令：
+
+```shell
+kubectl exec ${POD_NAME} -c ${CONTAINER_NAME} -- ${CMD} ${ARG1} ${ARG2} ... ${ARGN}
+```
+
+<!--
+`-c ${CONTAINER_NAME}` is optional. You can omit it for Pods that only contain a single container.
+-->
+{{< note >}}
+`-c ${CONTAINER_NAME}` 是可选项。
+对于单容器 Pod，可以省略此参数。
+{{< /note >}}
+
+<!--
+As an example, to look at the logs from a running Cassandra pod, you might run
+-->
+例如，要查看正在运行的 Cassandra Pod 的日志，可以执行：
+
+```shell
+kubectl exec cassandra -- cat /var/log/cassandra/system.log
+```
+
+<!--
+You can run a shell that's connected to your terminal using the `-i` and `-t`
+arguments to `kubectl exec`, for example:
+-->
+你可以使用 `kubectl exec` 的 `-i` 和 `-t` 参数启动一个连接到终端的 shell，例如：
+
+```shell
+kubectl exec -it cassandra -- sh
+```
+
+<!--
+For more details, see [Get a Shell to a Running Container](
+/docs/tasks/debug-application-cluster/get-shell-running-container/).
+-->
+更多细节，参见
+[获取运行容器的 Shell](
+/zh/docs/tasks/debug-application-cluster/get-shell-running-container/)。
+
+<!--
+## Debugging with an ephemeral debug container {#ephemeral-container}
+-->
+## 使用临时调试容器进行调试 {#ephemeral-container}
+
+{{< feature-state state="alpha" for_k8s_version="v1.18" >}}
+
+<!--
+{{< glossary_tooltip text="Ephemeral containers" term_id="ephemeral-container" >}}
+are useful for interactive troubleshooting when `kubectl exec` is insufficient
+because a container has crashed or a container image doesn't include debugging
+utilities, such as with [distroless images](
+https://github.com/GoogleContainerTools/distroless). `kubectl` has an alpha
+command that can create ephemeral containers for debugging beginning with version
+`v1.18`.
+-->
+因为容器已经崩溃，或因为容器镜像没有内含调试工具，比如 
+[distroless images](https://github.com/GoogleContainerTools/distroless)，
+导致 `kubectl exec` 不足以解决问题时， 
+{{< glossary_tooltip text="Ephemeral containers" term_id="ephemeral-container" >}} 
+对交互式故障诊断非常有用。
+从 `v1.18` 开始，`kubectl` 提供 alpha 命令，它可以为调试创建临时容器。
+
+<!--
+### Example debugging using ephemeral containers {#ephemeral-container-example}
+
+The examples in this section require the `EphemeralContainers` [feature gate](
+/docs/reference/command-line-tools-reference/feature-gates/) enabled in your
+cluster and `kubectl` version v1.18 or later.
+-->
+## 示例：使用临时容器调试 {#ephemeral-container-example}
+
+{{< note >}}
+本节中的示例要求在集群启用  `EphemeralContainers` [特性门控](
+/zh/docs/reference/command-line-tools-reference/feature-gates/
+)。
+并且要求 `kubectl` v1.18 或更高版本。
+{{< /note >}}
+
+
+<!--
+You can use the `kubectl alpha debug` command to add ephemeral containers to a
+running Pod. First, create a pod for the example:
+-->
+可以使用 `kubectl alpha debug` 命令将临时容器添加到正在运行的 Pod 中。
+首先，为本例创建一个 Pod：
+
+```shell
+kubectl run ephemeral-demo --image=k8s.gcr.io/pause:3.1 --restart=Never
+```
+
+<!--
+This section use the `pause` container image in examples because it does not
+contain userland debugging utilities, but this method works with all container
+images.
+
+If you attempt to use `kubectl exec` to create a shell you will see an error
+because there is no shell in this container image.
+-->
+{{< note >}}
+本节在示例中使用 `pause` 容器镜像，
+是因为它不包含用户态的调试工具。
+但此方法适用于所有容器镜像。
+{{< /note >}}
+
+如果你试图使用 `kubectl exec` 去建立一个 shell，
+你会看到一个报错，
+这是因为在容器镜像中并没有包含 shell。
+
+```shell
+kubectl exec -it ephemeral-demo -- sh
+```
+
+```
+OCI runtime exec failed: exec failed: container_linux.go:346: starting container process caused "exec: \"sh\": executable file not found in $PATH": unknown
+```
+
+<!--
+You can instead add a debugging container using `kubectl alpha debug`. If you
+specify the `-i`/`--interactive` argument, `kubectl` will automatically attach
+to the console of the Ephemeral Container.
+-->
+你可以使用 `kubectl alpha debug` 添加一个调试容器。
+如果指定了 `-i`/`--interactive` 参数，
+`kubectl` 将自动连接到临时容器的控制台。
+
+```shell
+kubectl alpha debug -it ephemeral-demo --image=busybox --target=ephemeral-demo
+```
+
+```
+Defaulting debug container name to debugger-8xzrl.
+If you don't see a command prompt, try pressing enter.
+/ #
+```
+
+<!--
+This command adds a new busybox container and attaches to it. The `--target`
+parameter targets the process namespace of another container. It's necessary
+here because `kubectl run` does not enable [process namespace sharing](
+/docs/tasks/configure-pod-container/share-process-namespace/) in the pod it
+creates.
+
+The `--target` parameter must be supported by the {{< glossary_tooltip
+text="Container Runtime" term_id="container-runtime" >}}. When not supported,
+the Ephemeral Container may not be started, or it may be started with an
+isolated process namespace.
+
+You can view the state of the newly created ephemeral container using `kubectl describe`:
+-->
+此命令添加一个新的 busybox 容器并连接。
+`--target` 参数指定了另一个容器的进程命名空间。
+这里必须这样做，因为 `kubectl run` 没有在它创建的 Pod 中启用
+[进程命名空间共享](/zh/docs/tasks/configure-pod-container/share-process-namespace/) 。
+
+{{< note >}}
+{{< glossary_tooltip text="Container Runtime" term_id="container-runtime" >}}
+必须支持 `--target` 参数。
+如果不支持，临时容器可能无法启动，
+或者可能使用隔离的进程名称空间启动。
+{{< /note >}}
+
+可以使用 `kubectl describe` 查看新创建的临时容器的状态：
+
+```shell
+kubectl describe pod ephemeral-demo
+```
+
+```
+...
+Ephemeral Containers:
+  debugger-8xzrl:
+    Container ID:   docker://b888f9adfd15bd5739fefaa39e1df4dd3c617b9902082b1cfdc29c4028ffb2eb
+    Image:          busybox
+    Image ID:       docker-pullable://busybox@sha256:1828edd60c5efd34b2bf5dd3282ec0cc04d47b2ff9caa0b6d4f07a21d1c08084
+    Port:           <none>
+    Host Port:      <none>
+    State:          Running
+      Started:      Wed, 12 Feb 2020 14:25:42 +0100
+    Ready:          False
+    Restart Count:  0
+    Environment:    <none>
+    Mounts:         <none>
+...
+```
+
+<!--
+Use `kubectl delete` to remove the Pod when you're finished:
+-->
+完成后，使用 `kubectl delete` 删除 Pod：
+
+```shell
+kubectl delete pod ephemeral-demo
+```
+
+<!--
+Planned future sections include:
+
+* Debugging with a copy of the pod
+
+See https://git.k8s.io/enhancements/keps/sig-cli/20190805-kubectl-debug.md
+-->
+
+<!--
+## Debugging via a shell on the node {#node-shell-session}
+
+If none of these approaches work, you can find the host machine that the pod is
+running on and SSH into that host, but this should generally not be necessary
+given tools in the Kubernetes API. Therefore, if you find yourself needing to
+ssh into a machine, please file a feature request on GitHub describing your use
+case and why these tools are insufficient.
+-->
+## 通过节点上的 shell 进行调试 {#node-shell-session}
+
+如果这些方法都不起作用，
+你可以找到运行 Pod 的主机并通过 SSH 连接到该主机，
+但是 Kubernetes API 中的工具通常不需要这样做。
+因此，如果你发现自己需要 ssh 到一台机器上，请在 GitHub 上提交一个功能请求，描述你的用例以及为什么这些工具不够用。
+

From 8c1291f63393b6bfca33f8fc83ee2ae4eae66c45 Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 14:53:08 +0800
Subject: [PATCH 485/496] Add zh trans of linkchecker

---
 .../linkchecker/README.md                     | 161 ++++++++++++++++++
 content/zh/docs/home/_index.md                |   2 +-
 2 files changed, 162 insertions(+), 1 deletion(-)
 create mode 100644 content/zh/docs/doc-contributor-tools/linkchecker/README.md

diff --git a/content/zh/docs/doc-contributor-tools/linkchecker/README.md b/content/zh/docs/doc-contributor-tools/linkchecker/README.md
new file mode 100644
index 0000000000..016907c2eb
--- /dev/null
+++ b/content/zh/docs/doc-contributor-tools/linkchecker/README.md
@@ -0,0 +1,161 @@
+<!-- 
+# Internal link checking tool
+ -->
+# 内置链接检查工具
+
+<!-- 
+You can use [htmltest](https://github.com/wjdp/htmltest) to check for broken links in [`/content/en/`](https://git.k8s.io/website/content/en/). This is useful when refactoring sections of content, moving pages around, or renaming files or page headers.
+ -->
+你可以使用 [htmltest](https://github.com/wjdp/htmltest) 来检查 [`/content/en/`](https://git.k8s.io/website/content/en/) 下面的失效链接。这在重构章节内容、移动页面或者重命名文件或页眉时非常有用。
+
+<!-- 
+## How the tool works
+ -->
+## 工作原理
+
+<!-- 
+`htmltest` scans links in the generated HTML files of the kubernetes website repository. It runs using a `make` command which does the following:
+ -->
+`htmltest` 会扫描 kubernetes website 仓库构建生成的 HTML 文件。通过执行 `make` 命令进行了下列操作：
+
+<!-- 
+- Builds the site and generates output HTML in the `/public` directory of your local `kubernetes/website` repository
+- Pulls the `wdjp/htmltest` Docker image
+- Mounts your local `kubernetes/website` repository to the Docker image
+- Scans the files generated in the `/public` directory and provides command line output when it encounters broken internal links 
+-->
+- 构建站点并输出 HTML 到本地 `kubernetes/website` 仓库下的 `/public` 目录中
+- 拉取 Docker 镜像 `wdjp/htmltest`
+- 挂载本地 `kubernetes/website` 仓库到 Docker 容器中
+- 扫描 `/public` 目录下生成的文件并将遇到的失效链接通过命令行打印出来
+
+<!-- 
+## What it does and doesn't check
+ -->
+## 哪些链接不会检查
+
+<!-- 
+The link checker scans generated HTML files, not raw Markdown. The htmltest tool depends on a configuration file, [`.htmltest.yml`](https://git.k8s.io/website/.htmltest.yml), to determine which content to examine.
+
+The link checker scans the following:
+ -->
+该链接检查器扫描生成的 HTML 文件，而非原始的 Markdown. 该 htmltest 工具依赖于一个配置文件，[`.htmltest.yml`](https://git.k8s.io/website/.htmltest.yml)，来决定检查哪些内容。
+
+该链接检查器扫描以下内容：
+
+<!-- 
+- All content generated from Markdown in [`/content/en/docs`](https://git.k8s.io/website/content/en/docs/) directory, excluding:
+  - Generated API references, for example https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/
+- All internal links, excluding:
+  - Empty hashes (`<a href="#">` or `[title](#)`) and empty hrefs (`<a href="">` or `[title]()`)
+  - Internal links to images and other media files
+ -->
+- 所有由 [`/content/en/docs`](https://git.k8s.io/website/content/en/docs/) 目录下的 Markdown 文件生成的内容，但不包括：
+  - 生成的 API 参考，例如 https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/
+- 所有的内部链接，但不包括：
+  - 空白锚点 (`<a href="#">` 或 `[title](#)`) 以及空白目标地址  (`<a href="">` 或 `[title]()`)
+  - 指向图片或其他媒体文件的内部链接
+
+<!-- 
+The link checker does not scan the following:
+ -->
+该链接检查器不会扫描以下内容：
+
+<!-- 
+- Links included in the top and side nav bars, footer links, or links in a page's `<head>` section, such as links to CSS stylesheets, scripts, and meta information
+- Top level pages and their children, for example: `/training`, `/community`, `/case-studies/adidas`
+- Blog posts
+- API Reference documentation, for example: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/
+- Localizations
+ -->
+- 包含在顶部和侧边导航栏的链接，以及页脚链接或者页面的 `<head>` 部分中的链接，例如 CSS 样式表、脚本以及元信息的链接。
+- 顶级页面及其子页面，例如： `/training`, `/community`, `/case-studies/adidas`
+- 博客文章
+- API 参考文档，例如：https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/
+- 本地化内容
+
+<!-- 
+## Prerequisites and installation
+ -->
+## 先决条件以及安装说明
+
+<!-- 
+You must install
+ -->
+必须安装：
+* [Docker](https://docs.docker.com/get-docker/)
+* [make](https://www.gnu.org/software/make/)
+ 
+<!-- 
+## Running the link checker
+ -->
+## 运行链接检查器
+
+<!-- 
+To run the link checker:
+ -->
+运行链接检查器需要：
+
+<!-- 
+1. Navigate to the root directory of your local `kubernetes/website` repository.
+
+2. Run the following command:
+ -->
+1. 进入本地 `kubernetes/website` 仓库的根目录下。
+
+2. 执行如下命令：
+
+  ```
+  make docker-internal-linkcheck
+  ```
+
+<!-- 
+## Understanding the output
+ -->
+## 理解输出的内容
+
+<!-- 
+If the link checker finds broken links, the output is similar to the following:
+ -->
+如果链接检查器发现了失效链接，则输出内容类似如下：
+
+```
+tasks/access-kubernetes-api/custom-resources/index.html
+  hash does not exist --- tasks/access-kubernetes-api/custom-resources/index.html --> #preserving-unknown-fields
+  hash does not exist --- tasks/access-kubernetes-api/custom-resources/index.html --> #preserving-unknown-fields
+```
+
+<!-- 
+This is one set of broken links. The log adds an output for each page with broken links.
+
+In this output, the file with broken links is `tasks/access-kubernetes-api/custom-resources.md`.
+
+The tool gives a reason: `hash does not exist`. In most cases, you can ignore this.
+
+The target URL is `#preserving-unknown-fields`.
+
+One way to fix this is to:
+ -->
+这是一系列失效链接。该日志附带了每个页面下的失效链接。
+
+在这部分输出中，包含失效链接的文件是 `tasks/access-kubernetes-api/custom-resources.md`.
+
+该工具给出了一个理由：`hash does not exist`. 在大部分情况下，你可以忽略这个。
+
+目标链接是 `#preserving-unknown-fields`.
+
+修复这个问题的一种方式是：
+
+<!-- 
+1. Navigate to the Markdown file with a broken link.
+2. Using a text editor, do a full-text search (usually Ctrl+F or Command+F) for the broken link's URL, `#preserving-unknown-fields`.
+3. Fix the link. For a broken page hash (or _anchor_) link, check whether the topic was renamed or removed.
+ -->
+1. 转到含有失效链接的 Markdown 文件。
+2. 使用文本编辑器全文搜索失效链接的 URL（通常使用 Ctrl+F 或 Command+F）`#preserving-unknown-fields`.
+3. 修复该链接。对于一个失效的锚点（或者 _anchor_ ）链接，检查该主题是否已更名或者移除。
+
+<!-- 
+Run htmltest to verify that broken links are fixed.
+ -->
+运行 htmltest 来验证失效链接是否已修复。
\ No newline at end of file
diff --git a/content/zh/docs/home/_index.md b/content/zh/docs/home/_index.md
index d0e81e59d9..51ceacb973 100644
--- a/content/zh/docs/home/_index.md
+++ b/content/zh/docs/home/_index.md
@@ -13,7 +13,7 @@ menu:
     title: "文档"
     weight: 20
     post: >
-      <p>通过概念、教程和参考文档了解如何使用 Kubernetes。你甚至可以<a href="/editdocs/" data-auto-burger-exclude>帮助贡献文档</a>！</p>
+      <p>通过概念、教程和参考文档了解如何使用 Kubernetes。你甚至可以<a href="/editdocs/" data-auto-burger-exclude data-proofer-ignore>帮助贡献文档</a>！</p>
 # description: >
 #   Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications. The open source project is hosted by the Cloud Native Computing Foundation.
 description: >

From 6d709a1b996ab34670a49c359818c240099c790b Mon Sep 17 00:00:00 2001
From: Hadian Rahmat <hadian.rahmat@gmail.com>
Date: Wed, 30 Sep 2020 15:05:41 +0700
Subject: [PATCH 486/496] fix typo wording dinamsi to dinamis

---
 content/id/docs/concepts/services-networking/service.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/id/docs/concepts/services-networking/service.md b/content/id/docs/concepts/services-networking/service.md
index 00bf4e6241..5136a00415 100644
--- a/content/id/docs/concepts/services-networking/service.md
+++ b/content/id/docs/concepts/services-networking/service.md
@@ -15,7 +15,7 @@ weight: 10
 [`Pod`](/id/docs/concepts/workloads/pods/pod/) pada Kubernetes bersifat *mortal*.
 Artinya apabila _pod-pod_ tersebut dibuat dan kemudian mati, _pod-pod_ tersebut
 tidak akan dihidupkan kembali. [`ReplicaSets`](/id/docs/concepts/workloads/controllers/replicaset/) secara
-khusus bertugas membuat dan menghapus `Pod` secara dinamsi (misalnya, pada proses *scaling out* atau *scaling in*).
+khusus bertugas membuat dan menghapus `Pod` secara dinamis (misalnya, pada proses *scaling out* atau *scaling in*).
 Meskipun setiap `Pod` memiliki alamat IP-nya masing-masing, kamu tidak dapat mengandalkan alamat IP
 yang diberikan pada _pod-pod_ tersebut, karena alamat IP yang diberikan tidak stabil.
 Hal ini kemudian menimbulkan pertanyaan baru: apabila sebuah sekumpulan `Pod` (yang selanjutnya kita sebut _backend_)

From d8419fc244dcffda4d06dc19b8df209c41ba7b64 Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 17:20:02 +0800
Subject: [PATCH 487/496] clean up feature state shortcode for zh

---
 .../zh/docs/templates/feature-state-alpha.txt |  7 -----
 .../zh/docs/templates/feature-state-beta.txt  |  8 -----
 .../templates/feature-state-deprecated.txt    |  2 --
 .../docs/templates/feature-state-stable.txt   |  5 ----
 content/zh/docs/templates/index.md            | 29 -------------------
 5 files changed, 51 deletions(-)
 delete mode 100644 content/zh/docs/templates/feature-state-alpha.txt
 delete mode 100644 content/zh/docs/templates/feature-state-beta.txt
 delete mode 100644 content/zh/docs/templates/feature-state-deprecated.txt
 delete mode 100644 content/zh/docs/templates/feature-state-stable.txt
 delete mode 100644 content/zh/docs/templates/index.md

diff --git a/content/zh/docs/templates/feature-state-alpha.txt b/content/zh/docs/templates/feature-state-alpha.txt
deleted file mode 100644
index 37b3ef9753..0000000000
--- a/content/zh/docs/templates/feature-state-alpha.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-该功能目前处于 *alpha* 状态，意味着：
-
-* 版本名称包含 alpha（例如 v1alpha1）。
-* 可能存在问题，启用该功能可能会暴露 bug。默认情况下被禁用。
-* 对该功能的支持可能在任何时候被取消，而不另行通知。
-* API 可能会在以后的软件版本中以不兼容的方式被更改，而不另行通知。
-* 建议仅在短期测试集群中使用该功能，这是因为使用该功能会增加出现 bug 的风险，而且缺乏长期支持。
\ No newline at end of file
diff --git a/content/zh/docs/templates/feature-state-beta.txt b/content/zh/docs/templates/feature-state-beta.txt
deleted file mode 100644
index 34765b6e8e..0000000000
--- a/content/zh/docs/templates/feature-state-beta.txt
+++ /dev/null
@@ -1,8 +0,0 @@
-该功能目前处于 *beta* 状态，意味着：
-
-* 版本名称包含 beta （例如 v2beta3）。
-* 代码经过了充分测试，启用该功能被认为是安全的。默认情况下被启用。
-* 对整体功能的支持在未来不会被移除，尽管细节上可能会做更改。
-* 在后续的 beta 或稳定版本中，对象的模式、语义可能以不兼容的方式发生变化。当这种情况发生时，我们将提供迁移到下一个版本的说明。这可能需要删除、编辑和重建 API 对象，编辑过程可能需要一些思考。这可能导致依赖该功能的应用程序停机一段时间。
-* 建议仅在非业务关键场景使用该功能，因为在后续版本中可能会发生不兼容的更改。如果您有多个可以独立升级的集群，那么您可能可以放松这个限制。
-* **请尝试使用我们的 beta 版功能，并给出反馈！在它们退出 beta 测试阶段之后，我们将很难去做更多的更改。**
\ No newline at end of file
diff --git a/content/zh/docs/templates/feature-state-deprecated.txt b/content/zh/docs/templates/feature-state-deprecated.txt
deleted file mode 100644
index 06a0a43660..0000000000
--- a/content/zh/docs/templates/feature-state-deprecated.txt
+++ /dev/null
@@ -1,2 +0,0 @@
-
-该功能已被*弃用*。有关此状态的更多信息，请参见[Kubernetes 弃用策略](/docs/reference/deprecation-policy/)。
diff --git a/content/zh/docs/templates/feature-state-stable.txt b/content/zh/docs/templates/feature-state-stable.txt
deleted file mode 100644
index aa422b9f1a..0000000000
--- a/content/zh/docs/templates/feature-state-stable.txt
+++ /dev/null
@@ -1,5 +0,0 @@
-
-该功能是“稳定的”，意味着：
-
-* 版本名是 vX，其中 X 是整数。
-* 该功能将出现在多个后续释出的软件稳定版中。
diff --git a/content/zh/docs/templates/index.md b/content/zh/docs/templates/index.md
deleted file mode 100644
index cddc5576cc..0000000000
--- a/content/zh/docs/templates/index.md
+++ /dev/null
@@ -1,29 +0,0 @@
----
-headless: true
-
-resources:
-- src: "*alpha*"
-  title: "alpha"
-- src: "*beta*"
-  title: "beta"
-- src: "*deprecated*"
-  title: "废弃"
-- src: "*stable*"
-  title: "稳定"
----
-
-<!--
----
-headless: true
-
-resources:
-- src: "*alpha*"
-  title: "alpha"
-- src: "*beta*"
-  title: "beta"
-- src: "*deprecated*"
-  title: "deprecated"
-- src: "*stable*"
-  title: "stable"
----
--->

From 893570b790511143dde8359ef2a58102be1cba53 Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 17:27:28 +0800
Subject: [PATCH 488/496] =?UTF-8?q?Remove=20=E2=80=9CConfigure=20Your=20Cl?=
 =?UTF-8?q?oud=20Provider's=20Firewalls=E2=80=9D=20for=20zh?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../configure-cloud-provider-firewall.md      | 163 ------------------
 .../web-ui-dashboard.md                       |   4 +-
 2 files changed, 1 insertion(+), 166 deletions(-)
 delete mode 100644 content/zh/docs/tasks/access-application-cluster/configure-cloud-provider-firewall.md

diff --git a/content/zh/docs/tasks/access-application-cluster/configure-cloud-provider-firewall.md b/content/zh/docs/tasks/access-application-cluster/configure-cloud-provider-firewall.md
deleted file mode 100644
index a6cee8c2d0..0000000000
--- a/content/zh/docs/tasks/access-application-cluster/configure-cloud-provider-firewall.md
+++ /dev/null
@@ -1,163 +0,0 @@
----
-reviewers:
-- bprashanth
-- davidopp
-title: 配置你的云平台防火墙
-content_type: task
-weight: 90
----
-
-<!-- overview -->
-
-<!--
-Many cloud providers (e.g. Google Compute Engine) define firewalls that help prevent inadvertent
-exposure to the internet.  When exposing a service to the external world, you may need to open up
-one or more ports in these firewalls to serve traffic.  This document describes this process, as
-well as any provider specific details that may be necessary.
--->
-许多云服务提供商（比如 谷歌计算引擎）定义防火墙以防止服务无意间暴露到互联网上。
-当暴露服务给外网时，你可能需要在防火墙上开启一个或者更多的端口来支持服务。
-本文描述了这个过程，以及其他云服务商的具体信息。
-
-
-
-## {{% heading "prerequisites" %}}
-
-
-{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
-
-
-
-<!-- steps -->
-<!--
-## Restrict Access For LoadBalancer Service
--->
-## 负载均衡（LoadBalancer）服务的访问限制
-
-<!--
- When using a Service with `spec.type: LoadBalancer`, you can specify the IP ranges that are allowed to access the load balancer
- by using `spec.loadBalancerSourceRanges`. This field takes a list of IP CIDR ranges, which Kubernetes will use to configure firewall exceptions.
- This feature is currently supported on Google Compute Engine, Google Kubernetes Engine, AWS Elastic Kubernetes Service, and Azure Kubernetes Service. This field will be ignored if the cloud provider does not support the feature.
--->
-当以 `spec.type: LoadBalancer` 方式配置服务时，你可以使用 `spec.loadBalancerSourceRanges` 来指定允许访问负载均衡器的 ip 段。
-这个字段采用 CIDR 的 IP 段， kubernetes 使用该段配置防火墙。目前只有 谷歌计算引擎，谷歌云原生引擎，亚马逊弹性原生云服务 和 微软云原生平台支持此功能。
-如果云服务提供商不支持这个功能，这个字段将被忽略。
-
-<!--
- Assuming 10.0.0.0/8 is the internal subnet. In the following example, a load balancer will be created that is only accessible to cluster internal IPs.
- This will not allow clients from outside of your Kubernetes cluster to access the load balancer.
--->
-假设内部子网为假设10.0.0.0/8，在下面这个例子中，将创建一个仅能由群集内部IP访问的负载均衡器。此负载均衡器不允许来自 kubernetes 集群外部客户端的访问。
-
-```yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: myapp
-spec:
-  ports:
-  - port: 8765
-    targetPort: 9376
-  selector:
-    app: example
-  type: LoadBalancer
-  loadBalancerSourceRanges:
-  - 10.0.0.0/8
-```
-<!--
- In the following example, a load balancer will be created that is only accessible to clients with IP addresses from 130.211.204.1 and 130.211.204.2.
--->
-在下面这个例子中，将创建一个只能被 IP 为 130.211.204.1 和 130.211.204.2 的客户端访问的负载据衡器。
-
-```yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: myapp
-spec:
-  ports:
-  - port: 8765
-    targetPort: 9376
-  selector:
-    app: example
-  type: LoadBalancer
-  loadBalancerSourceRanges:
-  - 130.211.204.1/32
-  - 130.211.204.2/32
-```
-<!--
-## Google Compute Engine
--->
-## 谷歌计算引擎 （Google Compute Engine）
-
-<!--
-When using a Service with `spec.type: LoadBalancer`, the firewall will be
-opened automatically.  When using `spec.type: NodePort`, however, the firewall
-is *not* opened by default.
--->
-当以 `spec.type: LoadBalancer` 方式配置服务时，该服务的防火墙将自动打开。
-当以 `spec.type: NodePort` 方式配置服务时，该服务的防火墙在默认情况下不会打开。
-
-<!--
-Google Compute Engine firewalls are documented [elsewhere](https://cloud.google.com/compute/docs/networking#firewalls_1).
--->
-谷歌计算引擎的防火墙会进行记录 [他处] (https://cloud.google.com/compute/docs/networking#firewalls_1)。
-
-<!--
-You can add a firewall with the `gcloud` command line tool:
--->
-你也可以使用 gcloud 命令行工具自行添加防火墙：
-
-```shell
-gcloud compute firewall-rules create my-rule --allow=tcp:<port>
-```
-
-{{< note >}}
-<!--
-GCE firewalls are defined per-vm, rather than per-ip address. This means that
-when you open a firewall for a service's ports, anything that serves on that
-port on that VM's host IP address may potentially serve traffic. Note that this
-is not a problem for other Kubernetes services, as they listen on IP addresses
-that are different than the host node's external IP address.
--->
-GCE 防火墙是按照虚拟机来定义的，而不是通过ip地址来定义的。
-这就意味着当你在防火墙上打开一个服务端口时，任何在那台虚拟机 IP 上的同一端口的服务
-都有被外部访问的潜在可能。需要注意的是，对于其他的 kubernetes 服务而言，这不是问题。
-因为他们监听的ip 地址与主机节点外部的 ip 地址并不相同。
-
-<!--
-Consider:
--->
-试想一下：
-
-<!--
-   * You create a Service with an external load balancer (IP Address 1.2.3.4)
-     and port 80
--->
-   * 你建立一个（ ip 地址为1.2.3.4）端口为80的外部负载均衡器
-
-<!--
-   * You open the firewall for port 80 for all nodes in your cluster, so that
-     the external Service actually can deliver packets to your Service
--->
-   * 因为在防火墙上为集群的所有节点都打开了 80 端口，所以外部的服务可以向你的
-     服务发送数据包。
-
-<!--
-   * You start an nginx server, running on port 80 on the host virtual machine
-     (IP Address 2.3.4.5).  This nginx is also exposed to the internet on
-     the VM's external IP address.
--->
-   * 最后你又虚拟机上的80端口启动 nginx 服务器（ip地址2.3.4.5）。
-     这个 nginx 在虚拟机的外部 IP 地址上也被暴露到了互联网上。
-
-<!--
-Consequently, please be careful when opening firewalls in Google Compute Engine
-or Google Kubernetes Engine.  You may accidentally be exposing other services to
-the wilds of the internet.
--->
-因此请务必小心，在谷歌计算引擎或者谷歌云原生引擎中打开防火墙时，可能无意间把其他服务也暴露给了互联网。
-
-{{< /note >}}
-
-
diff --git a/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md b/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md
index aadcd3d896..870a030f49 100644
--- a/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md
+++ b/content/zh/docs/tasks/access-application-cluster/web-ui-dashboard.md
@@ -187,13 +187,11 @@ The deploy wizard expects that you provide the following information:
   以保证集群中运行期望的 Pod 数量。
 
 <!--
-- **Service** (optional): For some parts of your application (e.g. frontends) you may want to expose a [Service](/docs/concepts/services-networking/service/) onto an external, maybe public IP address outside of your cluster (external Service). For external Services, you may need to open up one or more ports to do so. Find more details [here](/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/).
+- **Service** (optional): For some parts of your application (e.g. frontends) you may want to expose a [Service](/docs/concepts/services-networking/service/) onto an external, maybe public IP address outside of your cluster (external Service).
  -->
 - **服务**（可选）：对于部分应用（比如前端），你可能想对外暴露一个
   [Service](/zh/docs/concepts/services-networking/service/) ，这个 Service
   可能用的是集群之外的公网 IP 地址（外部 Service）。
-  对于外部 Service 的情况，需要开放一个或者多个端口来满足。
-  更多信息请参考 [这里](/zh/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/)。
 
   <!-- 
   For external Services, you may need to open up one or more ports to do so.

From e25641bf7998325b19e9f9d94908b1414ce1c36b Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 17:51:01 +0800
Subject: [PATCH 489/496] Remove "Running Kubernetes on CenturyLink Cloud" for
 zh

---
 .../production-environment/turnkey/clc.md     | 536 ------------------
 1 file changed, 536 deletions(-)
 delete mode 100644 content/zh/docs/setup/production-environment/turnkey/clc.md

diff --git a/content/zh/docs/setup/production-environment/turnkey/clc.md b/content/zh/docs/setup/production-environment/turnkey/clc.md
deleted file mode 100644
index cba761aab6..0000000000
--- a/content/zh/docs/setup/production-environment/turnkey/clc.md
+++ /dev/null
@@ -1,536 +0,0 @@
----
-title: 在 CenturyLink Cloud 上运行 Kubernetes
----
-<!--
-title: Running Kubernetes on CenturyLink Cloud
---->
-
-<!--
-These scripts handle the creation, deletion and expansion of Kubernetes clusters on CenturyLink Cloud.
-
-You can accomplish all these tasks with a single command. We have made the Ansible playbooks used to perform these tasks available [here](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md).
---->
-这些脚本适用于在 CenturyLink Cloud 上创建、删除和扩展 Kubernetes 集群。
-
-你可以使用单个命令完成所有任务。我们提供了用于执行这些任务的
-[Ansible 手册](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
-
-<!--
-## Find Help
-
-If you run into any problems or want help with anything, we are here to help. Reach out to use via any of the following ways:
-
-- Submit a github issue
-- Send an email to Kubernetes AT ctl DOT io
-- Visit [http://info.ctl.io/kubernetes](http://info.ctl.io/kubernetes)
---->
-## 寻求帮助
-
-如果运行出现问题或者想要寻求帮助，我们非常乐意帮忙。通过以下方式获取帮助：
-
-- 提交 github issue
-- 给 Kubernetes AT ctl DOT io 发送邮件
-- 访问 [https://info.ctl.io/kubernetes](https://info.ctl.io/kubernetes)
-
-<!--
-## Clusters of VMs or Physical Servers, your choice.
-
-- We support Kubernetes clusters on both Virtual Machines or Physical Servers. If you want to use physical servers for the worker nodes (minions), simple use the --minion_type=bareMetal flag.
-- For more information on physical servers, visit: [https://www.ctl.io/bare-metal/](https://www.ctl.io/bare-metal/)
-- Physical serves are only available in the VA1 and GB3 data centers.
-- VMs are available in all 13 of our public cloud locations
---->
-## 基于 VM 或物理服务器的集群可供选择
-
-- 我们在虚拟机或物理服务器上都支持 Kubernetes 集群。如果要将物理服务器用于辅助 Node（minions），则只需使用 --minion_type=bareMetal 标志。
-- 有关物理服务器的更多信息，请访问： [https://www.ctl.io/bare-metal/](https://www.ctl.io/bare-metal/)
-- 仅在 VA1 和 GB3 数据中心提供物理服务。
-- 13个公共云位置都可以使用虚拟机。
-
-<!--
-## Requirements
-
-The requirements to run this script are:
-
-- A linux administrative host (tested on ubuntu and macOS)
-- python 2 (tested on 2.7.11)
-  - pip (installed with python as of 2.7.9)
-- git
-- A CenturyLink Cloud account with rights to create new hosts
-- An active VPN connection to the CenturyLink Cloud from your linux host
---->
-## 要求
-
-运行此脚本的要求有：
-
-- Linux 管理主机（在 ubuntu 和 macOS 上测试）
-- python 2（在 2.7.11 版本上测试）
-   - pip（从 2.7.9 版开始与 python 一起安装）
-- git
-- 具有新建主机权限的 CenturyLink Cloud 帐户
-- 从 Linux 主机到 CenturyLink Cloud 的有效 VPN 连接
-
-<!--
-## Script Installation
-
-After you have all the requirements met, please follow these instructions to install this script.
-
-1) Clone this repository and cd into it.
---->
-## 脚本安装
-
-满足所有要求后，请按照以下说明安装此脚本。
-
-1）克隆此存储库并通过 cd 进入。
-
-```shell
-git clone https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc
-```
-
-<!--
-2) Install all requirements, including
---->
-2）安装所有要求的部分，包括
-
-  * Ansible
-  * CenturyLink Cloud SDK
-  * Ansible Modules
-
-```shell
-sudo pip install -r ansible/requirements.txt
-```
-
-<!--
-3) Create the credentials file from the template and use it to set your ENV variables
---->
-3）从模板创建凭证文件，并使用它来设置你的 ENV 变量
-
-```shell
-cp ansible/credentials.sh.template ansible/credentials.sh
-vi ansible/credentials.sh
-source ansible/credentials.sh
-
-```
-
-<!--
-4) Grant your machine access to the CenturyLink Cloud network by using a VM inside the network or [ configuring a VPN connection to the CenturyLink Cloud network.](https://www.ctl.io/knowledge-base/network/how-to-configure-client-vpn/)
---->
-4）使用内网的虚拟机或 [ 配置与 CenturyLink Cloud 网络的 VPN 连接.](https://www.ctl.io/knowledge-base/network/how-to-configure-client-vpn/)   授予你的计算机对 CenturyLink Cloud 网络的访问权限。
-
-<!--
-#### Script Installation Example: Ubuntu 14 Walkthrough
-
-If you use an ubuntu 14, for your convenience we have provided a step by step guide to install the requirements and install the script.
---->
-#### 脚本安装示例：Ubuntu 14 演练
-
-如果你使用 Ubuntu 14，为方便起见，我们会提供分步指导帮助安装必备条件和脚本。
-
-```shell
-# system
-apt-get update
-apt-get install -y git python python-crypto
-curl -O https://bootstrap.pypa.io/get-pip.py
-python get-pip.py
-
-# installing this repository
-mkdir -p ~home/k8s-on-clc
-cd ~home/k8s-on-clc
-git clone https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc.git
-cd adm-kubernetes-on-clc/
-pip install -r requirements.txt
-
-# getting started
-cd ansible
-cp credentials.sh.template credentials.sh; vi credentials.sh
-source credentials.sh
-```
-
-
-
-<!--
-## Cluster Creation
-
-To create a new Kubernetes cluster, simply run the ```kube-up.sh``` script. A complete
-list of script options and some examples are listed below.
---->
-## 创建集群
-
-要创建一个新的 Kubernetes 集群，只需运行 ```kube-up.sh``` 脚本即可。以下是一套完整的脚本选项列表和一些示例。
-
-```shell
-CLC_CLUSTER_NAME=[name of kubernetes cluster]
-cd ./adm-kubernetes-on-clc
-bash kube-up.sh -c="$CLC_CLUSTER_NAME"
-```
-
-<!--
-It takes about 15 minutes to create the cluster. Once the script completes, it
-will output some commands that will help you setup kubectl on your machine to
-point to the new cluster.
-
-When the cluster creation is complete, the configuration files for it are stored
-locally on your administrative host, in the following directory
---->
-创建集群大约需要15分钟。脚本完成后，它将输出一些命令，这些命令将帮助你在计算机上设置 kubectl 以指向新集群。
-
-完成集群创建后，其配置文件会存储在本地管理主机的以下目录中
-
-```shell
-> CLC_CLUSTER_HOME=$HOME/.clc_kube/$CLC_CLUSTER_NAME/
-```
-
-
-<!--
-#### Cluster Creation: Script Options
---->
-#### 创建集群：脚本选项
-
-```shell
-Usage: kube-up.sh [OPTIONS]
-Create servers in the CenturyLinkCloud environment and initialize a Kubernetes cluster
-Environment variables CLC_V2_API_USERNAME and CLC_V2_API_PASSWD must be set in
-order to access the CenturyLinkCloud API
-
-All options (both short and long form) require arguments, and must include "="
-between option name and option value.
-
-     -h (--help)                   display this help and exit
-     -c= (--clc_cluster_name=)     set the name of the cluster, as used in CLC group names
-     -t= (--minion_type=)          standard -> VM (default), bareMetal -> physical]
-     -d= (--datacenter=)           VA1 (default)
-     -m= (--minion_count=)         number of kubernetes minion nodes
-     -mem= (--vm_memory=)          number of GB ram for each minion
-     -cpu= (--vm_cpu=)             number of virtual cps for each minion node
-     -phyid= (--server_conf_id=)   physical server configuration id, one of
-                                      physical_server_20_core_conf_id
-                                      physical_server_12_core_conf_id
-                                      physical_server_4_core_conf_id (default)
-     -etcd_separate_cluster=yes    create a separate cluster of three etcd nodes,
-                                   otherwise run etcd on the master node
-```
-
-<!--
-## Cluster Expansion
-
-To expand an existing Kubernetes cluster, run the ```add-kube-node.sh```
-script. A complete list of script options and some examples are listed [below](#cluster-expansion-script-options).
-This script must be run from the same host that created the cluster (or a host
-that has the cluster artifact files stored in ```~/.clc_kube/$cluster_name```).
---->
-## 扩展集群
- 
-要扩展现有的Kubernetes集群，请运行```add-kube-node.sh``` 脚本。脚本选项的完整列表和一些示例在 [下面](#cluster-expansion-script-options) 列出。该脚本必须运行在创建集群的同一个主机（或储存集群工件文件的 ```~/.clc_kube/$cluster_name``` 主机）。
-
-```shell
-cd ./adm-kubernetes-on-clc
-bash add-kube-node.sh -c="name_of_kubernetes_cluster" -m=2
-```
-
-<!--
-#### Cluster Expansion: Script Options
---->
-#### 扩展集群：脚本选项
-
-```shell
-Usage: add-kube-node.sh [OPTIONS]
-Create servers in the CenturyLinkCloud environment and add to an
-existing CLC kubernetes cluster
-
-Environment variables CLC_V2_API_USERNAME and CLC_V2_API_PASSWD must be set in
-order to access the CenturyLinkCloud API
-
-     -h (--help)                   display this help and exit
-     -c= (--clc_cluster_name=)     set the name of the cluster, as used in CLC group names
-     -m= (--minion_count=)         number of kubernetes minion nodes to add
-```
-
-<!--
-## Cluster Deletion
-
-There are two ways to delete an existing cluster:
-
-1) Use our python script:
---->
-## 删除集群
-
-有两种方法可以删除集群：
-
-1）使用 Python 脚本：
-
-```shell
-python delete_cluster.py --cluster=clc_cluster_name --datacenter=DC1
-```
-
-<!--
-2) Use the CenturyLink Cloud UI. To delete a cluster, log into the CenturyLink
-Cloud control portal and delete the parent server group that contains the
-Kubernetes Cluster. We hope to add a scripted option to do this soon.
---->
-2）使用 CenturyLink Cloud UI。要删除集群，请登录 CenturyLink Cloud 控制页面并删除包含 Kubernetes 集群的父服务器组。我们希望能够添加脚本选项以尽快完成此操作。
-
-<!--
-## Examples
-
-Create a cluster with name of k8s_1, 1 master node and 3 worker minions (on physical machines), in VA1
---->
-## 示例
-
-在 VA1 中创建一个集群，名称为 k8s_1，具备1个主 Node 和3个辅助 Minion（在物理机上）
-
-```shell
-bash kube-up.sh --clc_cluster_name=k8s_1 --minion_type=bareMetal --minion_count=3 --datacenter=VA1
-```
-
-<!--
-Create a cluster with name of k8s_2, an ha etcd cluster on 3 VMs and 6 worker minions (on VMs), in VA1
---->
-在 VA1 中创建一个 ha etcd 集群，名称为 k8s_2，运行在3个虚拟机和6个辅助 Minion（在虚拟机上）
-
-```shell
-bash kube-up.sh --clc_cluster_name=k8s_2 --minion_type=standard --minion_count=6 --datacenter=VA1 --etcd_separate_cluster=yes
-```
-
-<!--
-Create a cluster with name of k8s_3, 1 master node, and 10 worker minions (on VMs) with higher mem/cpu, in UC1:
---->
-在 UC1 中创建一个集群，名称为k8s_3，具备1个主 Node 和10个具有更高 mem/cpu 的辅助 Minion（在虚拟机上）：
-
-```shell
-bash kube-up.sh --clc_cluster_name=k8s_3 --minion_type=standard --minion_count=10 --datacenter=VA1 -mem=6 -cpu=4
-```
-
-
-
-<!--
-## Cluster Features and Architecture
-
-We configure the Kubernetes cluster with the following features:
-
-* KubeDNS: DNS resolution and service discovery
-* Heapster/InfluxDB: For metric collection. Needed for Grafana and auto-scaling.
-* Grafana: Kubernetes/Docker metric dashboard
-* KubeUI: Simple web interface to view Kubernetes state
-* Kube Dashboard: New web interface to interact with your cluster
---->
-## 集群功能和架构
-
-我们使用以下功能配置 Kubernetes 集群：
-
-* KubeDNS：DNS 解析和服务发现
-* Heapster / InfluxDB：用于指标收集，是 Grafana 和 auto-scaling 需要的。
-* Grafana：Kubernetes/Docker 指标仪表板
-* KubeUI：用于查看 Kubernetes 状态的简单 Web 界面
-* Kube 仪表板：新的 Web 界面可与你的集群进行交互
-
-<!--
-We use the following to create the Kubernetes cluster:
---->
-使用以下工具创建 Kubernetes 集群：
-
-* Kubernetes 1.1.7
-* Ubuntu 14.04
-* Flannel 0.5.4
-* Docker 1.9.1-0~trusty
-* Etcd 2.2.2
-
-<!--
-## Optional add-ons
-
-* Logging: We offer an integrated centralized logging ELK platform so that all
-  Kubernetes and docker logs get sent to the ELK stack. To install the ELK stack
-  and configure Kubernetes to send logs to it, follow [the log
-  aggregation documentation](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/log_aggregration.md). Note: We don't install this by default as
-  the footprint isn't trivial.
---->
-## 可选附件
-* 日志记录：我们提供了一个集成的集中式日志记录 ELK 平台，以便将所有 Kubernetes 和 docker 日志发送到 ELK 堆栈。要安装 ELK 堆栈并配置 Kubernetes 向其发送日志，请遵循 [日志聚合文档](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/log_aggregration.md)。注意：默认情况下我们不安装此程序，因为占用空间并不小。
-
-<!--
-## Cluster management
-
-The most widely used tool for managing a Kubernetes cluster is the command-line
-utility ```kubectl```. If you do not already have a copy of this binary on your
-administrative machine, you may run the script ```install_kubectl.sh``` which will
-download it and install it in ```/usr/bin/local```.
---->
-## 管理集群
-
-管理 Kubernetes 集群最常用工具是 command-line 实用程序 ```kubectl```。如果你的管理器上还没有此二进制文件的副本，可以运行脚本 ```install_kubectl.sh```，它将下载该脚本并将其安装在 ```/usr/bin/local``` 中。 
-
-<!--
-The script requires that the environment variable ```CLC_CLUSTER_NAME``` be defined. ```install_kubectl.sh``` also writes a configuration file which will embed the necessary
-authentication certificates for the particular cluster.  The configuration file is
-written to the  ```${CLC_CLUSTER_HOME}/kube``` directory
---->
-该脚本要求定义环境变量 ```CLC_CLUSTER_NAME```。```install_kubectl.sh``` 还将写入一个配置文件，该文件为特定集群嵌入必要的认证证书。配置文件被写入 ```${CLC_CLUSTER_HOME}/kube``` 目录中
-
-
-```shell
-export KUBECONFIG=${CLC_CLUSTER_HOME}/kube/config
-kubectl version
-kubectl cluster-info
-```
-
-<!--
-### Accessing the cluster programmatically 
-
-It's possible to use the locally stored client certificates to access the apiserver. For example, you may want to use any of the [Kubernetes API client libraries](/docs/reference/using-api/client-libraries/) to program against your Kubernetes cluster in the programming language of your choice. 
-
-To demonstrate how to use these locally stored certificates, we provide the following example of using ```curl``` to communicate to the master apiserver via https:
---->
-### 以编程方式访问集群
-
-可以使用本地存储的客户端证书来访问 apiserver。例如，你可以使用
-[Kubernetes API 客户端库](/zh/docs/reference/using-api/client-libraries/) 选择编程语言对 Kubernetes 集群进行编程。
-
-为了演示如何使用这些本地存储的证书，我们提供以下示例，使用 ```curl``` 通过 https 与主 apiserver 进行通信：
-
-```shell
-curl \
-   --cacert ${CLC_CLUSTER_HOME}/pki/ca.crt  \
-   --key ${CLC_CLUSTER_HOME}/pki/kubecfg.key \
-   --cert ${CLC_CLUSTER_HOME}/pki/kubecfg.crt  https://${MASTER_IP}:6443
-```
-
-<!--
-But please note, this *does not* work out of the box with the ```curl``` binary
-distributed with macOS.
---->
-但是请注意，这 *不能* 与 MacOS 一起发行的 ```curl``` 二进制文件分开使用。
-
-<!--
-### Accessing the cluster with a browser
-
-We install [the kubernetes dashboard](/docs/tasks/web-ui-dashboard/). When you
-create a cluster, the script should output URLs for these interfaces like this:
-
-kubernetes-dashboard is running at ```https://${MASTER_IP}:6443/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy```.
---->
-### 使用浏览器访问集群
-
-安装 [Kubernetes 仪表板](/zh/docs/tasks/access-application-cluster/web-ui-dashboard/)。
-创建集群时，脚本会为这些接口输出 URL，如下所示：
-
-kubernetes-dashboard 在以下位置运行
-
-```
-https://${MASTER_IP}:6443/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy
-```
-
-<!--
-Note on Authentication to the UIs: 
-
-The cluster is set up to use basic authentication for the user _admin_.
-Hitting the url at ```https://${MASTER_IP}:6443``` will 
-require accepting the self-signed certificate
-from the apiserver, and then presenting the admin 
-password written to file at: ```> _${CLC_CLUSTER_HOME}/kube/admin_password.txt_```
---->
-对 UI 进行身份验证的注意事项：
-
-集群设置为对用户 _admin_ 使用基本的身份验证。进入 URL ```https://${MASTER_IP}:6443```  获取从 apiserver 上接收的自签名证书，然后出示管理员密码并写入文件 ```> _${CLC_CLUSTER_HOME}/kube/admin_password.txt_```
-
-
-<!--
-### Configuration files
-
-Various configuration files are written into the home directory *CLC_CLUSTER_HOME* under ```.clc_kube/${CLC_CLUSTER_NAME}``` in several subdirectories. You can use these files
-to access the cluster from machines other than where you created the cluster from.
---->
-### 配置文件
-
-多个配置文件被写入几个子目录，子目录在 ```.clc_kube/${CLC_CLUSTER_NAME}``` 下的主目录 *CLC_CLUSTER_HOME* 中。使用这些文件可以从创建集群的计算机之外的其他计算机访问集群。
-
-<!--
-* ```config/```: Ansible variable files containing parameters describing the master and minion hosts
-* ```hosts/```: hosts files listing access information for the Ansible playbooks
-* ```kube/```: ```kubectl``` configuration files, and the basic-authentication password for admin access to the Kubernetes API
-* ```pki/```: public key infrastructure files enabling TLS communication in the cluster
-* ```ssh/```: SSH keys for root access to the hosts
---->
-* ```config/```：Ansible 变量文件，包含描述主机和从机的参数
-* ```hosts/```: 主机文件，列出了 Ansible 手册的访问信息
-* ```kube/```: ```kubectl``` 配置文件，包含管理员访问 Kubernetes API 所需的基本身份验证密码
-* ```pki/```: 公钥基础结构文件，用于在集群中启用 TLS 通信
-* ```ssh/```: 对主机进行根访问的 SSH 密钥
-
-
-<!--
-## ```kubectl``` usage examples
-
-There are a great many features of _kubectl_.  Here are a few examples
-
-List existing nodes, pods, services and more, in all namespaces, or in just one:
---->
-## ```kubectl``` 使用示例
-
-_kubectl_ 有很多功能，例如
-
-列出所有或者一个命名空间中存在的 Node，Pod，服务等。
-
-```shell
-kubectl get nodes
-kubectl get --all-namespaces pods
-kubectl get --all-namespaces services
-kubectl get --namespace=kube-system replicationcontrollers
-```
-
-<!--
-The Kubernetes API server exposes services on web URLs, which are protected by requiring
-client certificates.  If you run a kubectl proxy locally, ```kubectl``` will provide
-the necessary certificates and serve locally over http.
---->
-Kubernetes API 服务器在 Web URL 上公开服务，这些 URL 受客户端证书的保护。如果你在本地运行 kubectl 代理，```kubectl``` 将提供必要的证书，并通过 http 在本地提供服务。
-
-```shell
-kubectl proxy -p 8001
-```
-
-<!--
-Then, you can access urls like ```http://127.0.0.1:8001/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy/``` without the need for client certificates in your browser.
---->
-然后，你可以访问 ```http://127.0.0.1:8001/api/v1/namespaces/kube-system/services/kubernetes-dashboard/proxy/``` 之类的 URL，不再需要浏览器中的客户端证书 。
-
-
-<!--
-## What Kubernetes features do not work on CenturyLink Cloud
-
-These are the known items that don't work on CenturyLink cloud but do work on other cloud providers:
-
-- At this time, there is no support services of the type [LoadBalancer](/docs/tasks/access-application-cluster/create-external-load-balancer/). We are actively working on this and hope to publish the changes sometime around April 2016.
-
-- At this time, there is no support for persistent storage volumes provided by
-  CenturyLink Cloud. However, customers can bring their own persistent storage
-  offering. We ourselves use Gluster.
---->
-## Kubernetes 的哪些功能无法在 CenturyLink Cloud 上使用
-
-这些是已知的在 CenturyLink Cloud 上不能使用，但在其他云提供商中可以使用：
-
-- 目前，没有 [LoadBalancer](/zh/docs/tasks/access-application-cluster/create-external-load-balancer/)
-  类型的支持服务。我们正在为此积极努力，并希望在2016年4月左右发布更改。
-
-- 目前，不支持 CenturyLink Cloud 提供的永久存储卷。但是，客户可以自带永久性存储产品。我们自己使用 Gluster。
-
-<!--
-## Ansible Files
-
-If you want more information about our Ansible files, please [read this file](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
---->
-## Ansible 文件
-
-如果你想了解有关 Ansible 文件的更多信息，请 [浏览此文件](https://github.com/CenturyLinkCloud/adm-kubernetes-on-clc/blob/master/ansible/README.md)
-
-<!--
-## Further reading
-
-Please see the [Kubernetes docs](/docs/) for more details on administering
-and using a Kubernetes cluster.
---->
-## 更多
-
-有关管理和使用 Kubernetes 集群的更多详细信息，请参见 [Kubernetes 文档](/zh/docs/) 
-
-
-

From f2d5227067504ceaee18f4a9877d497c45ea164e Mon Sep 17 00:00:00 2001
From: Dominic Yin <yindongchao@inspur.com>
Date: Wed, 30 Sep 2020 18:23:02 +0800
Subject: [PATCH 490/496] Remove 'kubeadm alpha kubelet config download' for zh

---
 .../kubeadm_alpha_kubelet_config_download.md  | 129 ------------------
 .../setup-tools/kubeadm/kubeadm-alpha.md      |   8 +-
 2 files changed, 3 insertions(+), 134 deletions(-)
 delete mode 100644 content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_download.md

diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_download.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_download.md
deleted file mode 100644
index e2d07e53e1..0000000000
--- a/content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_kubelet_config_download.md
+++ /dev/null
@@ -1,129 +0,0 @@
-
-<!--
-### Synopsis
--->
-
-### 概要
-
-<!--
-Download the kubelet configuration from a ConfigMap of the form "kubelet-config-1.X" in the cluster, where X is the minor version of the kubelet. Either kubeadm autodetects the kubelet version by exec-ing "kubelet --version" or respects the --kubelet-version parameter.
--->
-
-从集群中形式为 "kubelet-config-1.X" 的 ConfigMap 中下载 kubelet 配置，其中 X 是 kubelet 的次要版本。
-kubeadm 要么通过执行 "kubelet --version" 自动检测 kubelet 版本，要么传递 --kubelet-version 参数。
-
-<!--
-Alpha Disclaimer: this command is currently alpha.
--->
-
-Alpha 免责声明：此命令当前为 Alpha 功能。
-
-```
-kubeadm alpha kubelet config download [flags]
-```
-
-<!--
-### Examples
--->
-
-### 示例
-
-<!--
-  # Download the kubelet configuration from the ConfigMap in the cluster. Autodetect the kubelet version.
-  kubeadm alpha phase kubelet config download
-
-  # Download the kubelet configuration from the ConfigMap in the cluster. Use a specific desired kubelet version.
-  kubeadm alpha phase kubelet config download kubelet-version 1.16.0
--->
-
-```
-# 从集群中的 ConfigMap 下载 kubelet 配置。自动检测 kubelet 版本。
-kubeadm alpha phase kubelet config download
-
-# 从集群中的 ConfigMap 下载 kubelet 配置。使用特定的所需 kubelet 版本。
-kubeadm alpha phase kubelet config download --kubelet-version 1.16.0
-```
-
-<!--
-### Options
--->
-
-### 选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">-h, --help</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-help for download
--->
-download 的帮助命令
-</td>
-</tr>
-
-<tr>
-<td colspan="2">
-<!--
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes/admin.conf"
--->
---kubeconfig string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值："/etc/kubernetes/admin.conf"
-</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.
--->
-与集群通信时使用的 kubeconfig 文件。如果未设置该标志，可以在一组标准位置中搜索现有的 kubeconfig 文件。
-</td>
-</tr>
-
-<tr>
-<td colspan="2">--kubelet-version string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!-- The desired version for the kubelet. Defaults to being autodetected from 'kubelet -version'.  -->
-kubelet 所需版本。默认为从 'kubelet --version' 中自动检测到。
-</td>
-</tr>
-
-</tbody>
-</table>
-
-<!--
-### Options inherited from parent commands
--->
-
-### 从父命令继承的选项
-
-   <table style="width: 100%; table-layout: fixed;">
-<colgroup>
-<col span="1" style="width: 10px;" />
-<col span="1" />
-</colgroup>
-<tbody>
-
-<tr>
-<td colspan="2">--rootfs string</td>
-</tr>
-<tr>
-<td></td><td style="line-height: 130%; word-wrap: break-word;">
-<!--
-[EXPERIMENTAL] The path to the 'real' host root filesystem.
--->
-[实验] 到 '真实' 主机根文件系统的路径。
-</td>
-</tr>
-
-</tbody>
-</table>
-
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
index 856bd9fd21..93782893ae 100644
--- a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-alpha.md
@@ -84,15 +84,13 @@ The `user` subcommand can be used for the creation of kubeconfig files for addit
 ## kubeadm alpha kubelet config {#cmd-phase-kubelet}
 
 <!--
-Use the following commands to either download the kubelet configuration from the cluster or
-to enable the DynamicKubeletConfiguration feature.
+Use the following command to enable the DynamicKubeletConfiguration feature.
 -->
-使用以下命令从集群中下载 kubelet 配置或启用 DynamicKubeletConfiguration 功能。
+使用以下命令启用 DynamicKubeletConfiguration 功能。
 
 {{< tabs name="tab-kubelet" >}}
 {{< tab name="kubelet" include="generated/kubeadm_alpha_kubelet.md" />}}
-{{< tab name="download" include="generated/kubeadm_alpha_kubelet_config_download.md" />}}
-{{< tab name="enable-dynamic" include="generated/kubeadm_alpha_kubelet_config_download.md" />}}
+{{< tab name="enable-dynamic" include="generated/kubeadm_alpha_kubelet_config_enable-dynamic.md" />}}
 {{< /tabs >}}
 
 

From b1fb333fad2301d4d6c30548fb001687f42e24c1 Mon Sep 17 00:00:00 2001
From: ROSHEEN NAEEM <rosheennaeem4@gmail.com>
Date: Wed, 30 Sep 2020 20:30:50 +0500
Subject: [PATCH 491/496] Delete sitemap.md

---
 content/en/docs/sitemap.md | 114 -------------------------------------
 1 file changed, 114 deletions(-)
 delete mode 100644 content/en/docs/sitemap.md

diff --git a/content/en/docs/sitemap.md b/content/en/docs/sitemap.md
deleted file mode 100644
index 133f426a6b..0000000000
--- a/content/en/docs/sitemap.md
+++ /dev/null
@@ -1,114 +0,0 @@
----
----
-<script language="JavaScript">
-var dropDownsPopulated = false;
-$( document ).ready(function() {
-  // When the document loads, get the metadata JSON, and kick off tbl render
-  $.get("/metadata.txt", function(data, status) {
-    metadata = $.parseJSON(data);
-    metadata.pages.sort(dynamicSort("t"));
-    mainLogic()
-    $(window).bind( 'hashchange', function(e) {
-      mainLogic();
-    });
-  });
-});
-function mainLogic()
-{
-  // If there's a tag filter, change the table/drop down output
-  if (!dropDownsPopulated) populateDropdowns();
-  var tag=window.location.hash.replace("#","");
-  if(tag) {
-    tag = $.trim(tag);
-    for (i=0;i<tagName.length;i++) {
-      querystringTag = tagName[i] + "=";
-      if (tag.indexOf(querystringTag) > -1)
-      {
-        console.log("in mainLog: querystringTag of " + querystringTag + " matches tag of " + tag);
-        tag = tag.replace(querystringTag,"");
-        selectDropDown(tagName[i],tag);
-        topicsFilter(tagName[i],tag,"output");
-      }
-    }
-  } else {
-    currentTopics = metadata.pages;
-  }
-  renderTable(currentTopics,"output");
-
-}
-function populateDropdowns()
-{
-  // Keeping mainLogic() brief by functionalizing the initialization of the
-  // drop-down filter boxes
-
-  for(i=0;i<metadata.pages.length;i++)
-  {
-    var metadataArrays = [metadata.pages[i].cr,metadata.pages[i].or,metadata.pages[i].mr];
-    for(j=0;j<metadataArrays.length;j++)
-    {
-      if (metadataArrays[j]) {
-        for (k=0;k<metadataArrays[j].length;k++) {
-          if (typeof storedTagsArrays[j] == 'undefined') storedTagsArrays[j] = new Array();
-          storedTagsArrays[j][metadataArrays[j][k][tagName[j]]] = true;
-          // ^ conceptList[metadata.pages[i].cr[k].concept] = true; (if rolling through concepts)
-          // ^ conceptList['container'] = true; (ultimate result)
-          // ^ objectList[metadata.pages[i].or[k].object] = true; (if rolling through objects)
-          // ^ objectList['restartPolicy'] = true; (ultimate result)
-        }
-      }
-    }
-  }
-  var output = new Array();
-  for(i=0;i<tagName.length;i++)
-  {
-    // Phew! All tags in conceptList, objectList, and commandList!
-    // Loop through them and populate those drop-downs through html() injection
-    output = [];
-    output.push("<select id='" + tagName[i] + "' onchange='dropFilter(this)'>");
-    output.push("<option>---</option>");
-    Object.keys(storedTagsArrays[i]).sort().forEach(function (key) {
-      output.push("<option>" + key + "</option>");
-    });
-    output.push("</select>")
-    $(dropDowns[i]).html(output.join(""));
-  }
-  dropDownsPopulated = true;
-}
-function dropFilter(srcobj)
-{
-  // process the change of a drop-down value
-  // the ID of the drop down is either command, object, or concept
-  // these exact values are what topicsFilter() expects, plus a filter val
-  // which we get from .text() of :selected
-  console.log("dropFilter:" + $(srcobj).attr('id') + ":" + $(srcobj).find(":selected").text());
-  topicsFilter($(srcobj).attr('id').replace("#",""),$(srcobj).find(":selected").text(),"output");
-  for(i=0;i<tagName.length;i++)
-  {
-    if($(srcobj).attr('id')!=tagName[i]) selectDropDown(tagName[i],"---");
-  }
-}
-function selectDropDown(type,tag)
-{
-  // change drop-down selection w/o filtering
-  $("#" + type).val(tag);
-}
-</script>
-<style>
-#filters select{
-  font-size: 14px;
-  border: 1px #000 solid;
-}
-#filters {
-  padding-top: 20px;
-}
-</style>
-
-Click tags or use the drop downs to filter. Click table headers to sort or reverse sort.
-
-<p id="filters">
-Filter by Concept: <span id="conceptFilter" /><br/>
-Filter by Object: <span id="objectFilter" /><br/>
-Filter by Command: <span id="commandFilter" />
-</p>
-
-<div id="output" />

From e84e0c0b7552bbaee7f33a22d280489faf3daf44 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 29 Sep 2020 18:08:12 -0400
Subject: [PATCH 492/496] update tab component, remove jquery-ui

---
 layouts/partials/css.html         |  1 -
 layouts/partials/head.html        |  1 -
 layouts/shortcodes/tabs.html      | 19 +++++++++++++------
 static/css/jquery-ui.min.css      |  7 -------
 static/js/jquery-ui-1.12.1.min.js | 13 -------------
 5 files changed, 13 insertions(+), 28 deletions(-)
 delete mode 100644 static/css/jquery-ui.min.css
 delete mode 100644 static/js/jquery-ui-1.12.1.min.js

diff --git a/layouts/partials/css.html b/layouts/partials/css.html
index 2bde76cab9..a55529844b 100644
--- a/layouts/partials/css.html
+++ b/layouts/partials/css.html
@@ -13,7 +13,6 @@
   {{ end }}
 {{- end }}
 
-<link rel="stylesheet" href="{{ "css/jquery-ui.min.css" | relURL }}">
 <link rel="stylesheet" href="{{ "css/feature-states.css" | relURL }}">
 <link rel="stylesheet" href="{{ "css/custom-jekyll/tags.css" | relURL }}">
 {{- if .Site.Params.announcement }}
diff --git a/layouts/partials/head.html b/layouts/partials/head.html
index fa71b6a700..0383341d36 100644
--- a/layouts/partials/head.html
+++ b/layouts/partials/head.html
@@ -85,7 +85,6 @@
 <meta property="og:image" content="{{ "/images/kubernetes-horizontal-color.png" | relURL }}">
 {{ end }}
 <meta property="og:type" content="{{ $ogType }}">
-<script src="{{ "js/jquery-ui-1.12.1.min.js" | relURL }}"></script>
 <script src="{{ "js/sweetalert-2.1.2.min.js" | relURL }}"></script>
 
 {{ if .HasShortcode "mermaid" }}
diff --git a/layouts/shortcodes/tabs.html b/layouts/shortcodes/tabs.html
index 7abe6c14e8..aeb9582b28 100644
--- a/layouts/shortcodes/tabs.html
+++ b/layouts/shortcodes/tabs.html
@@ -2,16 +2,25 @@
 {{- $tab_set_id := .Get "name" | default (printf "tabset-%s-%d" (.Page.RelPermalink) (.Page.Scratch.Get "tabset-counter") ) | anchorize -}}
 {{- $tabs := .Scratch.Get "tabs" -}}
 {{- if .Inner -}}{{- /* We don't use the inner content, but Hugo will complain if we don't reference it. */ -}}{{- end -}}
-<div id="{{ $tab_set_id }}">
-<ul>
+<ul class="nav nav-tabs" id="{{ $tab_set_id }}" role="tablist">
 	{{- range $i, $e := $tabs -}}
 	  {{- $id := printf "%s-%d" $tab_set_id $i -}}
-<li><a href="#{{ $id }}">{{- trim .name " " -}}</a></li>
+	  {{- if (eq $i 0) -}}
+		<li class="nav-item"><a data-toggle="tab" class="nav-link active" href="#{{ $id }}" role="tab" aria-controls="{{ $id }}" aria-selected="true">{{- trim .name " " -}}</a></li>
+	  {{ else }}
+		<li class="nav-item"><a data-toggle="tab" class="nav-link" href="#{{ $id }}" role="tab" aria-controls="{{ $id }}">{{- trim .name " " -}}</a></li>
+	  {{- end -}}
 {{- end -}}
 </ul>
+<div class="tab-content" id="{{ $tab_set_id }}">
 {{- range $i, $e := $tabs -}}
 {{- $id := printf "%s-%d" $tab_set_id $i -}}
-<div id="{{ $id }}">
+{{- if (eq $i 0) -}}
+  <div id="{{ $id }}" class="tab-pane show active" role="tabpanel" aria-labelledby="{{ $id }}">
+{{ else }}
+  <div id="{{ $id }}" class="tab-pane" role="tabpanel" aria-labelledby="{{ $id }}">
+{{ end }}
+<p>
 	{{- with .content -}}
 		{{- . -}}
 	{{- else -}}
@@ -39,5 +48,3 @@
 </div>
 {{- end -}}
 </div>
-{{- $elem :=  $tab_set_id | safeJS -}}
-<script>$(function(){$("#{{ $elem }}").tabs();});</script>
\ No newline at end of file
diff --git a/static/css/jquery-ui.min.css b/static/css/jquery-ui.min.css
deleted file mode 100644
index dbd7235360..0000000000
--- a/static/css/jquery-ui.min.css
+++ /dev/null
@@ -1,7 +0,0 @@
-/*! jQuery UI - v1.12.1 - 2016-09-14
-* http://jqueryui.com
-* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css
-* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHover=454545&bgColorActive=ffffff&bgTextureActive=glass&bgImgOpacityActive=65&borderColorActive=aaaaaa&fcActive=212121&iconColorActive=454545&bgColorHighlight=fbf9ee&bgTextureHighlight=glass&bgImgOpacityHighlight=55&borderColorHighlight=fcefa1&fcHighlight=363636&iconColorHighlight=2e83ff&bgColorError=fef1ec&bgTextureError=glass&bgImgOpacityError=95&borderColorError=cd0a0a&fcError=cd0a0a&iconColorError=cd0a0a&bgColorOverlay=aaaaaa&bgTextureOverlay=flat&bgImgOpacityOverlay=0&opacityOverlay=30&bgColorShadow=aaaaaa&bgTextureShadow=flat&bgImgOpacityShadow=0&opacityShadow=30&thicknessShadow=8px&offsetTopShadow=-8px&offsetLeftShadow=-8px&cornerRadiusShadow=8px
-* Copyright jQuery Foundation and other contributors; Licensed MIT */
-
-.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{margin:0;padding:0;border:0;outline:0;line-height:1.3;text-decoration:none;font-size:100%;list-style:none}.ui-helper-clearfix:before,.ui-helper-clearfix:after{content:"";display:table;border-collapse:collapse}.ui-helper-clearfix:after{clear:both}.ui-helper-zfix{width:100%;height:100%;top:0;left:0;position:absolute;opacity:0;filter:Alpha(Opacity=0)}.ui-front{z-index:100}.ui-state-disabled{cursor:default!important;pointer-events:none}.ui-icon{display:inline-block;vertical-align:middle;margin-top:-.25em;position:relative;text-indent:-99999px;overflow:hidden;background-repeat:no-repeat}.ui-widget-icon-block{left:50%;margin-left:-8px;display:block}.ui-widget-overlay{position:fixed;top:0;left:0;width:100%;height:100%}.ui-accordion .ui-accordion-header{display:block;cursor:pointer;position:relative;margin:2px 0 0 0;padding:.5em .5em .5em .7em;font-size:100%}.ui-accordion .ui-accordion-content{padding:1em 2.2em;border-top:0;overflow:auto}.ui-autocomplete{position:absolute;top:0;left:0;cursor:default}.ui-menu{list-style:none;padding:0;margin:0;display:block;outline:0}.ui-menu .ui-menu{position:absolute}.ui-menu .ui-menu-item{margin:0;cursor:pointer;list-style-image:url("data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7")}.ui-menu .ui-menu-item-wrapper{position:relative;padding:3px 1em 3px .4em}.ui-menu .ui-menu-divider{margin:5px 0;height:0;font-size:0;line-height:0;border-width:1px 0 0 0}.ui-menu .ui-state-focus,.ui-menu .ui-state-active{margin:-1px}.ui-menu-icons{position:relative}.ui-menu-icons .ui-menu-item-wrapper{padding-left:2em}.ui-menu .ui-icon{position:absolute;top:0;bottom:0;left:.2em;margin:auto 0}.ui-menu .ui-menu-icon{left:auto;right:0}.ui-button{padding:.4em 1em;display:inline-block;position:relative;line-height:normal;margin-right:.1em;cursor:pointer;vertical-align:middle;text-align:center;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;overflow:visible}.ui-button,.ui-button:link,.ui-button:visited,.ui-button:hover,.ui-button:active{text-decoration:none}.ui-button-icon-only{width:2em;box-sizing:border-box;text-indent:-9999px;white-space:nowrap}input.ui-button.ui-button-icon-only{text-indent:0}.ui-button-icon-only .ui-icon{position:absolute;top:50%;left:50%;margin-top:-8px;margin-left:-8px}.ui-button.ui-icon-notext .ui-icon{padding:0;width:2.1em;height:2.1em;text-indent:-9999px;white-space:nowrap}input.ui-button.ui-icon-notext .ui-icon{width:auto;height:auto;text-indent:0;white-space:normal;padding:.4em 1em}input.ui-button::-moz-focus-inner,button.ui-button::-moz-focus-inner{border:0;padding:0}.ui-controlgroup{vertical-align:middle;display:inline-block}.ui-controlgroup > .ui-controlgroup-item{float:left;margin-left:0;margin-right:0}.ui-controlgroup > .ui-controlgroup-item:focus,.ui-controlgroup > .ui-controlgroup-item.ui-visual-focus{z-index:9999}.ui-controlgroup-vertical > .ui-controlgroup-item{display:block;float:none;width:100%;margin-top:0;margin-bottom:0;text-align:left}.ui-controlgroup-vertical .ui-controlgroup-item{box-sizing:border-box}.ui-controlgroup .ui-controlgroup-label{padding:.4em 1em}.ui-controlgroup .ui-controlgroup-label span{font-size:80%}.ui-controlgroup-horizontal .ui-controlgroup-label + .ui-controlgroup-item{border-left:none}.ui-controlgroup-vertical .ui-controlgroup-label + .ui-controlgroup-item{border-top:none}.ui-controlgroup-horizontal .ui-controlgroup-label.ui-widget-content{border-right:none}.ui-controlgroup-vertical .ui-controlgroup-label.ui-widget-content{border-bottom:none}.ui-controlgroup-vertical .ui-spinner-input{width:75%;width:calc( 100% - 2.4em )}.ui-controlgroup-vertical .ui-spinner .ui-spinner-up{border-top-style:solid}.ui-checkboxradio-label .ui-icon-background{box-shadow:inset 1px 1px 1px #ccc;border-radius:.12em;border:none}.ui-checkboxradio-radio-label .ui-icon-background{width:16px;height:16px;border-radius:1em;overflow:visible;border:none}.ui-checkboxradio-radio-label.ui-checkboxradio-checked .ui-icon,.ui-checkboxradio-radio-label.ui-checkboxradio-checked:hover .ui-icon{background-image:none;width:8px;height:8px;border-width:4px;border-style:solid}.ui-checkboxradio-disabled{pointer-events:none}.ui-datepicker{width:17em;padding:.2em .2em 0;display:none}.ui-datepicker .ui-datepicker-header{position:relative;padding:.2em 0}.ui-datepicker .ui-datepicker-prev,.ui-datepicker .ui-datepicker-next{position:absolute;top:2px;width:1.8em;height:1.8em}.ui-datepicker .ui-datepicker-prev-hover,.ui-datepicker .ui-datepicker-next-hover{top:1px}.ui-datepicker .ui-datepicker-prev{left:2px}.ui-datepicker .ui-datepicker-next{right:2px}.ui-datepicker .ui-datepicker-prev-hover{left:1px}.ui-datepicker .ui-datepicker-next-hover{right:1px}.ui-datepicker .ui-datepicker-prev span,.ui-datepicker .ui-datepicker-next span{display:block;position:absolute;left:50%;margin-left:-8px;top:50%;margin-top:-8px}.ui-datepicker .ui-datepicker-title{margin:0 2.3em;line-height:1.8em;text-align:center}.ui-datepicker .ui-datepicker-title select{font-size:1em;margin:1px 0}.ui-datepicker select.ui-datepicker-month,.ui-datepicker select.ui-datepicker-year{width:45%}.ui-datepicker table{width:100%;font-size:.9em;border-collapse:collapse;margin:0 0 .4em}.ui-datepicker th{padding:.7em .3em;text-align:center;font-weight:bold;border:0}.ui-datepicker td{border:0;padding:1px}.ui-datepicker td span,.ui-datepicker td a{display:block;padding:.2em;text-align:right;text-decoration:none}.ui-datepicker .ui-datepicker-buttonpane{background-image:none;margin:.7em 0 0 0;padding:0 .2em;border-left:0;border-right:0;border-bottom:0}.ui-datepicker .ui-datepicker-buttonpane button{float:right;margin:.5em .2em .4em;cursor:pointer;padding:.2em .6em .3em .6em;width:auto;overflow:visible}.ui-datepicker .ui-datepicker-buttonpane button.ui-datepicker-current{float:left}.ui-datepicker.ui-datepicker-multi{width:auto}.ui-datepicker-multi .ui-datepicker-group{float:left}.ui-datepicker-multi .ui-datepicker-group table{width:95%;margin:0 auto .4em}.ui-datepicker-multi-2 .ui-datepicker-group{width:50%}.ui-datepicker-multi-3 .ui-datepicker-group{width:33.3%}.ui-datepicker-multi-4 .ui-datepicker-group{width:25%}.ui-datepicker-multi .ui-datepicker-group-last .ui-datepicker-header,.ui-datepicker-multi .ui-datepicker-group-middle .ui-datepicker-header{border-left-width:0}.ui-datepicker-multi .ui-datepicker-buttonpane{clear:left}.ui-datepicker-row-break{clear:both;width:100%;font-size:0}.ui-datepicker-rtl{direction:rtl}.ui-datepicker-rtl .ui-datepicker-prev{right:2px;left:auto}.ui-datepicker-rtl .ui-datepicker-next{left:2px;right:auto}.ui-datepicker-rtl .ui-datepicker-prev:hover{right:1px;left:auto}.ui-datepicker-rtl .ui-datepicker-next:hover{left:1px;right:auto}.ui-datepicker-rtl .ui-datepicker-buttonpane{clear:right}.ui-datepicker-rtl .ui-datepicker-buttonpane button{float:left}.ui-datepicker-rtl .ui-datepicker-buttonpane button.ui-datepicker-current,.ui-datepicker-rtl .ui-datepicker-group{float:right}.ui-datepicker-rtl .ui-datepicker-group-last .ui-datepicker-header,.ui-datepicker-rtl .ui-datepicker-group-middle .ui-datepicker-header{border-right-width:0;border-left-width:1px}.ui-datepicker .ui-icon{display:block;text-indent:-99999px;overflow:hidden;background-repeat:no-repeat;left:.5em;top:.3em}.ui-dialog{position:absolute;top:0;left:0;padding:.2em;outline:0}.ui-dialog .ui-dialog-titlebar{padding:.4em 1em;position:relative}.ui-dialog .ui-dialog-title{float:left;margin:.1em 0;white-space:nowrap;width:90%;overflow:hidden;text-overflow:ellipsis}.ui-dialog .ui-dialog-titlebar-close{position:absolute;right:.3em;top:50%;width:20px;margin:-10px 0 0 0;padding:1px;height:20px}.ui-dialog .ui-dialog-content{position:relative;border:0;padding:.5em 1em;background:none;overflow:auto}.ui-dialog .ui-dialog-buttonpane{text-align:left;border-width:1px 0 0 0;background-image:none;margin-top:.5em;padding:.3em 1em .5em .4em}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{float:right}.ui-dialog .ui-dialog-buttonpane button{margin:.5em .4em .5em 0;cursor:pointer}.ui-dialog .ui-resizable-n{height:2px;top:0}.ui-dialog .ui-resizable-e{width:2px;right:0}.ui-dialog .ui-resizable-s{height:2px;bottom:0}.ui-dialog .ui-resizable-w{width:2px;left:0}.ui-dialog .ui-resizable-se,.ui-dialog .ui-resizable-sw,.ui-dialog .ui-resizable-ne,.ui-dialog .ui-resizable-nw{width:7px;height:7px}.ui-dialog .ui-resizable-se{right:0;bottom:0}.ui-dialog .ui-resizable-sw{left:0;bottom:0}.ui-dialog .ui-resizable-ne{right:0;top:0}.ui-dialog .ui-resizable-nw{left:0;top:0}.ui-draggable .ui-dialog-titlebar{cursor:move}.ui-draggable-handle{-ms-touch-action:none;touch-action:none}.ui-resizable{position:relative}.ui-resizable-handle{position:absolute;font-size:0.1px;display:block;-ms-touch-action:none;touch-action:none}.ui-resizable-disabled .ui-resizable-handle,.ui-resizable-autohide .ui-resizable-handle{display:none}.ui-resizable-n{cursor:n-resize;height:7px;width:100%;top:-5px;left:0}.ui-resizable-s{cursor:s-resize;height:7px;width:100%;bottom:-5px;left:0}.ui-resizable-e{cursor:e-resize;width:7px;right:-5px;top:0;height:100%}.ui-resizable-w{cursor:w-resize;width:7px;left:-5px;top:0;height:100%}.ui-resizable-se{cursor:se-resize;width:12px;height:12px;right:1px;bottom:1px}.ui-resizable-sw{cursor:sw-resize;width:9px;height:9px;left:-5px;bottom:-5px}.ui-resizable-nw{cursor:nw-resize;width:9px;height:9px;left:-5px;top:-5px}.ui-resizable-ne{cursor:ne-resize;width:9px;height:9px;right:-5px;top:-5px}.ui-progressbar{height:2em;text-align:left;overflow:hidden}.ui-progressbar .ui-progressbar-value{margin:-1px;height:100%}.ui-progressbar .ui-progressbar-overlay{background:url("data:image/gif;base64,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");height:100%;filter:alpha(opacity=25);opacity:0.25}.ui-progressbar-indeterminate .ui-progressbar-value{background-image:none}.ui-selectable{-ms-touch-action:none;touch-action:none}.ui-selectable-helper{position:absolute;z-index:100;border:1px dotted black}.ui-selectmenu-menu{padding:0;margin:0;position:absolute;top:0;left:0;display:none}.ui-selectmenu-menu .ui-menu{overflow:auto;overflow-x:hidden;padding-bottom:1px}.ui-selectmenu-menu .ui-menu .ui-selectmenu-optgroup{font-size:1em;font-weight:bold;line-height:1.5;padding:2px 0.4em;margin:0.5em 0 0 0;height:auto;border:0}.ui-selectmenu-open{display:block}.ui-selectmenu-text{display:block;margin-right:20px;overflow:hidden;text-overflow:ellipsis}.ui-selectmenu-button.ui-button{text-align:left;white-space:nowrap;width:14em}.ui-selectmenu-icon.ui-icon{float:right;margin-top:0}.ui-slider{position:relative;text-align:left}.ui-slider .ui-slider-handle{position:absolute;z-index:2;width:1.2em;height:1.2em;cursor:default;-ms-touch-action:none;touch-action:none}.ui-slider .ui-slider-range{position:absolute;z-index:1;font-size:.7em;display:block;border:0;background-position:0 0}.ui-slider.ui-state-disabled .ui-slider-handle,.ui-slider.ui-state-disabled .ui-slider-range{filter:inherit}.ui-slider-horizontal{height:.8em}.ui-slider-horizontal .ui-slider-handle{top:-.3em;margin-left:-.6em}.ui-slider-horizontal .ui-slider-range{top:0;height:100%}.ui-slider-horizontal .ui-slider-range-min{left:0}.ui-slider-horizontal .ui-slider-range-max{right:0}.ui-slider-vertical{width:.8em;height:100px}.ui-slider-vertical .ui-slider-handle{left:-.3em;margin-left:0;margin-bottom:-.6em}.ui-slider-vertical .ui-slider-range{left:0;width:100%}.ui-slider-vertical .ui-slider-range-min{bottom:0}.ui-slider-vertical .ui-slider-range-max{top:0}.ui-sortable-handle{-ms-touch-action:none;touch-action:none}.ui-spinner{position:relative;display:inline-block;overflow:hidden;padding:0;vertical-align:middle}.ui-spinner-input{border:none;background:none;color:inherit;padding:.222em 0;margin:.2em 0;vertical-align:middle;margin-left:.4em;margin-right:2em}.ui-spinner-button{width:1.6em;height:50%;font-size:.5em;padding:0;margin:0;text-align:center;position:absolute;cursor:default;display:block;overflow:hidden;right:0}.ui-spinner a.ui-spinner-button{border-top-style:none;border-bottom-style:none;border-right-style:none}.ui-spinner-up{top:0}.ui-spinner-down{bottom:0}.ui-tabs{position:relative;padding:.2em}.ui-tabs .ui-tabs-nav{margin:0;padding:.2em .2em 0}.ui-tabs .ui-tabs-nav li{list-style:none;float:left;position:relative;top:0;margin:1px .2em 0 0;border-bottom-width:0;padding:0;white-space:nowrap}.ui-tabs .ui-tabs-nav .ui-tabs-anchor{float:left;padding:.5em 1em;text-decoration:none}.ui-tabs .ui-tabs-nav li.ui-tabs-active{margin-bottom:-1px;padding-bottom:1px}.ui-tabs .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-state-disabled .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-tabs-loading .ui-tabs-anchor{cursor:text}.ui-tabs-collapsible .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor{cursor:pointer}.ui-tabs .ui-tabs-panel{display:block;border-width:0;padding:1em 1.4em;background:none}.ui-tooltip{padding:8px;position:absolute;z-index:9999;max-width:300px}body .ui-tooltip{border-width:2px}.ui-widget{font-family:Verdana,Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Verdana,Arial,sans-serif;font-size:1em}.ui-widget.ui-widget-content{border:1px solid #d3d3d3}.ui-widget-content{border:1px solid #aaa;background:#fff;color:#222}.ui-widget-content a{color:#222}.ui-widget-header{border:1px solid #aaa;background:#ccc url("images/ui-bg_highlight-soft_75_cccccc_1x100.png") 50% 50% repeat-x;color:#222;font-weight:bold}.ui-widget-header a{color:#222}.ui-state-default,.ui-widget-content .ui-state-default,.ui-widget-header .ui-state-default,.ui-button,html .ui-button.ui-state-disabled:hover,html .ui-button.ui-state-disabled:active{border:1px solid #d3d3d3;background:#e6e6e6 url("images/ui-bg_glass_75_e6e6e6_1x400.png") 50% 50% repeat-x;font-weight:normal;color:#555}.ui-state-default a,.ui-state-default a:link,.ui-state-default a:visited,a.ui-button,a:link.ui-button,a:visited.ui-button,.ui-button{color:#555;text-decoration:none}.ui-state-hover,.ui-widget-content .ui-state-hover,.ui-widget-header .ui-state-hover,.ui-state-focus,.ui-widget-content .ui-state-focus,.ui-widget-header .ui-state-focus,.ui-button:hover,.ui-button:focus{border:1px solid #999;background:#dadada url("images/ui-bg_glass_75_dadada_1x400.png") 50% 50% repeat-x;font-weight:normal;color:#212121}.ui-state-hover a,.ui-state-hover a:hover,.ui-state-hover a:link,.ui-state-hover a:visited,.ui-state-focus a,.ui-state-focus a:hover,.ui-state-focus a:link,.ui-state-focus a:visited,a.ui-button:hover,a.ui-button:focus{color:#212121;text-decoration:none}.ui-visual-focus{box-shadow:0 0 3px 1px rgb(94,158,214)}.ui-state-active,.ui-widget-content .ui-state-active,.ui-widget-header .ui-state-active,a.ui-button:active,.ui-button:active,.ui-button.ui-state-active:hover{border:1px solid #aaa;background:#fff url("images/ui-bg_glass_65_ffffff_1x400.png") 50% 50% repeat-x;font-weight:normal;color:#212121}.ui-icon-background,.ui-state-active .ui-icon-background{border:#aaa;background-color:#212121}.ui-state-active a,.ui-state-active a:link,.ui-state-active a:visited{color:#212121;text-decoration:none}.ui-state-highlight,.ui-widget-content .ui-state-highlight,.ui-widget-header .ui-state-highlight{border:1px solid #fcefa1;background:#fbf9ee url("images/ui-bg_glass_55_fbf9ee_1x400.png") 50% 50% repeat-x;color:#363636}.ui-state-checked{border:1px solid #fcefa1;background:#fbf9ee}.ui-state-highlight a,.ui-widget-content .ui-state-highlight a,.ui-widget-header .ui-state-highlight a{color:#363636}.ui-state-error,.ui-widget-content .ui-state-error,.ui-widget-header .ui-state-error{border:1px solid #cd0a0a;background:#fef1ec url("images/ui-bg_glass_95_fef1ec_1x400.png") 50% 50% repeat-x;color:#cd0a0a}.ui-state-error a,.ui-widget-content .ui-state-error a,.ui-widget-header .ui-state-error a{color:#cd0a0a}.ui-state-error-text,.ui-widget-content .ui-state-error-text,.ui-widget-header .ui-state-error-text{color:#cd0a0a}.ui-priority-primary,.ui-widget-content .ui-priority-primary,.ui-widget-header .ui-priority-primary{font-weight:bold}.ui-priority-secondary,.ui-widget-content .ui-priority-secondary,.ui-widget-header .ui-priority-secondary{opacity:.7;filter:Alpha(Opacity=70);font-weight:normal}.ui-state-disabled,.ui-widget-content .ui-state-disabled,.ui-widget-header .ui-state-disabled{opacity:.35;filter:Alpha(Opacity=35);background-image:none}.ui-state-disabled .ui-icon{filter:Alpha(Opacity=35)}.ui-icon{width:16px;height:16px}.ui-icon,.ui-widget-content .ui-icon{background-image:url("images/ui-icons_222222_256x240.png")}.ui-widget-header .ui-icon{background-image:url("images/ui-icons_222222_256x240.png")}.ui-state-hover .ui-icon,.ui-state-focus .ui-icon,.ui-button:hover .ui-icon,.ui-button:focus .ui-icon{background-image:url("images/ui-icons_454545_256x240.png")}.ui-state-active .ui-icon,.ui-button:active .ui-icon{background-image:url("images/ui-icons_454545_256x240.png")}.ui-state-highlight .ui-icon,.ui-button .ui-state-highlight.ui-icon{background-image:url("images/ui-icons_2e83ff_256x240.png")}.ui-state-error .ui-icon,.ui-state-error-text .ui-icon{background-image:url("images/ui-icons_cd0a0a_256x240.png")}.ui-button .ui-icon{background-image:url("images/ui-icons_888888_256x240.png")}.ui-icon-blank{background-position:16px 16px}.ui-icon-caret-1-n{background-position:0 0}.ui-icon-caret-1-ne{background-position:-16px 0}.ui-icon-caret-1-e{background-position:-32px 0}.ui-icon-caret-1-se{background-position:-48px 0}.ui-icon-caret-1-s{background-position:-65px 0}.ui-icon-caret-1-sw{background-position:-80px 0}.ui-icon-caret-1-w{background-position:-96px 0}.ui-icon-caret-1-nw{background-position:-112px 0}.ui-icon-caret-2-n-s{background-position:-128px 0}.ui-icon-caret-2-e-w{background-position:-144px 0}.ui-icon-triangle-1-n{background-position:0 -16px}.ui-icon-triangle-1-ne{background-position:-16px -16px}.ui-icon-triangle-1-e{background-position:-32px -16px}.ui-icon-triangle-1-se{background-position:-48px -16px}.ui-icon-triangle-1-s{background-position:-65px -16px}.ui-icon-triangle-1-sw{background-position:-80px -16px}.ui-icon-triangle-1-w{background-position:-96px -16px}.ui-icon-triangle-1-nw{background-position:-112px -16px}.ui-icon-triangle-2-n-s{background-position:-128px -16px}.ui-icon-triangle-2-e-w{background-position:-144px -16px}.ui-icon-arrow-1-n{background-position:0 -32px}.ui-icon-arrow-1-ne{background-position:-16px -32px}.ui-icon-arrow-1-e{background-position:-32px -32px}.ui-icon-arrow-1-se{background-position:-48px -32px}.ui-icon-arrow-1-s{background-position:-65px -32px}.ui-icon-arrow-1-sw{background-position:-80px -32px}.ui-icon-arrow-1-w{background-position:-96px -32px}.ui-icon-arrow-1-nw{background-position:-112px -32px}.ui-icon-arrow-2-n-s{background-position:-128px -32px}.ui-icon-arrow-2-ne-sw{background-position:-144px -32px}.ui-icon-arrow-2-e-w{background-position:-160px -32px}.ui-icon-arrow-2-se-nw{background-position:-176px -32px}.ui-icon-arrowstop-1-n{background-position:-192px -32px}.ui-icon-arrowstop-1-e{background-position:-208px -32px}.ui-icon-arrowstop-1-s{background-position:-224px -32px}.ui-icon-arrowstop-1-w{background-position:-240px -32px}.ui-icon-arrowthick-1-n{background-position:1px -48px}.ui-icon-arrowthick-1-ne{background-position:-16px -48px}.ui-icon-arrowthick-1-e{background-position:-32px -48px}.ui-icon-arrowthick-1-se{background-position:-48px -48px}.ui-icon-arrowthick-1-s{background-position:-64px -48px}.ui-icon-arrowthick-1-sw{background-position:-80px -48px}.ui-icon-arrowthick-1-w{background-position:-96px -48px}.ui-icon-arrowthick-1-nw{background-position:-112px -48px}.ui-icon-arrowthick-2-n-s{background-position:-128px -48px}.ui-icon-arrowthick-2-ne-sw{background-position:-144px -48px}.ui-icon-arrowthick-2-e-w{background-position:-160px -48px}.ui-icon-arrowthick-2-se-nw{background-position:-176px -48px}.ui-icon-arrowthickstop-1-n{background-position:-192px -48px}.ui-icon-arrowthickstop-1-e{background-position:-208px -48px}.ui-icon-arrowthickstop-1-s{background-position:-224px -48px}.ui-icon-arrowthickstop-1-w{background-position:-240px -48px}.ui-icon-arrowreturnthick-1-w{background-position:0 -64px}.ui-icon-arrowreturnthick-1-n{background-position:-16px -64px}.ui-icon-arrowreturnthick-1-e{background-position:-32px -64px}.ui-icon-arrowreturnthick-1-s{background-position:-48px -64px}.ui-icon-arrowreturn-1-w{background-position:-64px -64px}.ui-icon-arrowreturn-1-n{background-position:-80px -64px}.ui-icon-arrowreturn-1-e{background-position:-96px -64px}.ui-icon-arrowreturn-1-s{background-position:-112px -64px}.ui-icon-arrowrefresh-1-w{background-position:-128px -64px}.ui-icon-arrowrefresh-1-n{background-position:-144px -64px}.ui-icon-arrowrefresh-1-e{background-position:-160px -64px}.ui-icon-arrowrefresh-1-s{background-position:-176px -64px}.ui-icon-arrow-4{background-position:0 -80px}.ui-icon-arrow-4-diag{background-position:-16px -80px}.ui-icon-extlink{background-position:-32px -80px}.ui-icon-newwin{background-position:-48px -80px}.ui-icon-refresh{background-position:-64px -80px}.ui-icon-shuffle{background-position:-80px -80px}.ui-icon-transfer-e-w{background-position:-96px -80px}.ui-icon-transferthick-e-w{background-position:-112px -80px}.ui-icon-folder-collapsed{background-position:0 -96px}.ui-icon-folder-open{background-position:-16px -96px}.ui-icon-document{background-position:-32px -96px}.ui-icon-document-b{background-position:-48px -96px}.ui-icon-note{background-position:-64px -96px}.ui-icon-mail-closed{background-position:-80px -96px}.ui-icon-mail-open{background-position:-96px -96px}.ui-icon-suitcase{background-position:-112px -96px}.ui-icon-comment{background-position:-128px -96px}.ui-icon-person{background-position:-144px -96px}.ui-icon-print{background-position:-160px -96px}.ui-icon-trash{background-position:-176px -96px}.ui-icon-locked{background-position:-192px -96px}.ui-icon-unlocked{background-position:-208px -96px}.ui-icon-bookmark{background-position:-224px -96px}.ui-icon-tag{background-position:-240px -96px}.ui-icon-home{background-position:0 -112px}.ui-icon-flag{background-position:-16px -112px}.ui-icon-calendar{background-position:-32px -112px}.ui-icon-cart{background-position:-48px -112px}.ui-icon-pencil{background-position:-64px -112px}.ui-icon-clock{background-position:-80px -112px}.ui-icon-disk{background-position:-96px -112px}.ui-icon-calculator{background-position:-112px -112px}.ui-icon-zoomin{background-position:-128px -112px}.ui-icon-zoomout{background-position:-144px -112px}.ui-icon-search{background-position:-160px -112px}.ui-icon-wrench{background-position:-176px -112px}.ui-icon-gear{background-position:-192px -112px}.ui-icon-heart{background-position:-208px -112px}.ui-icon-star{background-position:-224px -112px}.ui-icon-link{background-position:-240px -112px}.ui-icon-cancel{background-position:0 -128px}.ui-icon-plus{background-position:-16px -128px}.ui-icon-plusthick{background-position:-32px -128px}.ui-icon-minus{background-position:-48px -128px}.ui-icon-minusthick{background-position:-64px -128px}.ui-icon-close{background-position:-80px -128px}.ui-icon-closethick{background-position:-96px -128px}.ui-icon-key{background-position:-112px -128px}.ui-icon-lightbulb{background-position:-128px -128px}.ui-icon-scissors{background-position:-144px -128px}.ui-icon-clipboard{background-position:-160px -128px}.ui-icon-copy{background-position:-176px -128px}.ui-icon-contact{background-position:-192px -128px}.ui-icon-image{background-position:-208px -128px}.ui-icon-video{background-position:-224px -128px}.ui-icon-script{background-position:-240px -128px}.ui-icon-alert{background-position:0 -144px}.ui-icon-info{background-position:-16px -144px}.ui-icon-notice{background-position:-32px -144px}.ui-icon-help{background-position:-48px -144px}.ui-icon-check{background-position:-64px -144px}.ui-icon-bullet{background-position:-80px -144px}.ui-icon-radio-on{background-position:-96px -144px}.ui-icon-radio-off{background-position:-112px -144px}.ui-icon-pin-w{background-position:-128px -144px}.ui-icon-pin-s{background-position:-144px -144px}.ui-icon-play{background-position:0 -160px}.ui-icon-pause{background-position:-16px -160px}.ui-icon-seek-next{background-position:-32px -160px}.ui-icon-seek-prev{background-position:-48px -160px}.ui-icon-seek-end{background-position:-64px -160px}.ui-icon-seek-start{background-position:-80px -160px}.ui-icon-seek-first{background-position:-80px -160px}.ui-icon-stop{background-position:-96px -160px}.ui-icon-eject{background-position:-112px -160px}.ui-icon-volume-off{background-position:-128px -160px}.ui-icon-volume-on{background-position:-144px -160px}.ui-icon-power{background-position:0 -176px}.ui-icon-signal-diag{background-position:-16px -176px}.ui-icon-signal{background-position:-32px -176px}.ui-icon-battery-0{background-position:-48px -176px}.ui-icon-battery-1{background-position:-64px -176px}.ui-icon-battery-2{background-position:-80px -176px}.ui-icon-battery-3{background-position:-96px -176px}.ui-icon-circle-plus{background-position:0 -192px}.ui-icon-circle-minus{background-position:-16px -192px}.ui-icon-circle-close{background-position:-32px -192px}.ui-icon-circle-triangle-e{background-position:-48px -192px}.ui-icon-circle-triangle-s{background-position:-64px -192px}.ui-icon-circle-triangle-w{background-position:-80px -192px}.ui-icon-circle-triangle-n{background-position:-96px -192px}.ui-icon-circle-arrow-e{background-position:-112px -192px}.ui-icon-circle-arrow-s{background-position:-128px -192px}.ui-icon-circle-arrow-w{background-position:-144px -192px}.ui-icon-circle-arrow-n{background-position:-160px -192px}.ui-icon-circle-zoomin{background-position:-176px -192px}.ui-icon-circle-zoomout{background-position:-192px -192px}.ui-icon-circle-check{background-position:-208px -192px}.ui-icon-circlesmall-plus{background-position:0 -208px}.ui-icon-circlesmall-minus{background-position:-16px -208px}.ui-icon-circlesmall-close{background-position:-32px -208px}.ui-icon-squaresmall-plus{background-position:-48px -208px}.ui-icon-squaresmall-minus{background-position:-64px -208px}.ui-icon-squaresmall-close{background-position:-80px -208px}.ui-icon-grip-dotted-vertical{background-position:0 -224px}.ui-icon-grip-dotted-horizontal{background-position:-16px -224px}.ui-icon-grip-solid-vertical{background-position:-32px -224px}.ui-icon-grip-solid-horizontal{background-position:-48px -224px}.ui-icon-gripsmall-diagonal-se{background-position:-64px -224px}.ui-icon-grip-diagonal-se{background-position:-80px -224px}.ui-corner-all,.ui-corner-top,.ui-corner-left,.ui-corner-tl{border-top-left-radius:4px}.ui-corner-all,.ui-corner-top,.ui-corner-right,.ui-corner-tr{border-top-right-radius:4px}.ui-corner-all,.ui-corner-bottom,.ui-corner-left,.ui-corner-bl{border-bottom-left-radius:4px}.ui-corner-all,.ui-corner-bottom,.ui-corner-right,.ui-corner-br{border-bottom-right-radius:4px}.ui-widget-overlay{background:#aaa;opacity:.3;filter:Alpha(Opacity=30)}.ui-widget-shadow{-webkit-box-shadow:-8px -8px 8px #aaa;box-shadow:-8px -8px 8px #aaa}
\ No newline at end of file
diff --git a/static/js/jquery-ui-1.12.1.min.js b/static/js/jquery-ui-1.12.1.min.js
deleted file mode 100644
index 117cb35e43..0000000000
--- a/static/js/jquery-ui-1.12.1.min.js
+++ /dev/null
@@ -1,13 +0,0 @@
-/*! jQuery UI - v1.12.1 - 2016-09-14
-* http://jqueryui.com
-* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-1-7.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sortable.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js
-* Copyright jQuery Foundation and other contributors; Licensed MIT */
-
-(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(t){function e(t){for(var e=t.css("visibility");"inherit"===e;)t=t.parent(),e=t.css("visibility");return"hidden"!==e}function i(t){for(var e,i;t.length&&t[0]!==document;){if(e=t.css("position"),("absolute"===e||"relative"===e||"fixed"===e)&&(i=parseInt(t.css("zIndex"),10),!isNaN(i)&&0!==i))return i;t=t.parent()}return 0}function s(){this._curInst=null,this._keyEvent=!1,this._disabledInputs=[],this._datepickerShowing=!1,this._inDialog=!1,this._mainDivId="ui-datepicker-div",this._inlineClass="ui-datepicker-inline",this._appendClass="ui-datepicker-append",this._triggerClass="ui-datepicker-trigger",this._dialogClass="ui-datepicker-dialog",this._disableClass="ui-datepicker-disabled",this._unselectableClass="ui-datepicker-unselectable",this._currentClass="ui-datepicker-current-day",this._dayOverClass="ui-datepicker-days-cell-over",this.regional=[],this.regional[""]={closeText:"Done",prevText:"Prev",nextText:"Next",currentText:"Today",monthNames:["January","February","March","April","May","June","July","August","September","October","November","December"],monthNamesShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],dayNames:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],dayNamesShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],dayNamesMin:["Su","Mo","Tu","We","Th","Fr","Sa"],weekHeader:"Wk",dateFormat:"mm/dd/yy",firstDay:0,isRTL:!1,showMonthAfterYear:!1,yearSuffix:""},this._defaults={showOn:"focus",showAnim:"fadeIn",showOptions:{},defaultDate:null,appendText:"",buttonText:"...",buttonImage:"",buttonImageOnly:!1,hideIfNoPrevNext:!1,navigationAsDateFormat:!1,gotoCurrent:!1,changeMonth:!1,changeYear:!1,yearRange:"c-10:c+10",showOtherMonths:!1,selectOtherMonths:!1,showWeek:!1,calculateWeek:this.iso8601Week,shortYearCutoff:"+10",minDate:null,maxDate:null,duration:"fast",beforeShowDay:null,beforeShow:null,onSelect:null,onChangeMonthYear:null,onClose:null,numberOfMonths:1,showCurrentAtPos:0,stepMonths:1,stepBigMonths:12,altField:"",altFormat:"",constrainInput:!0,showButtonPanel:!1,autoSize:!1,disabled:!1},t.extend(this._defaults,this.regional[""]),this.regional.en=t.extend(!0,{},this.regional[""]),this.regional["en-US"]=t.extend(!0,{},this.regional.en),this.dpDiv=n(t("<div id='"+this._mainDivId+"' class='ui-datepicker ui-widget ui-widget-content ui-helper-clearfix ui-corner-all'></div>"))}function n(e){var i="button, .ui-datepicker-prev, .ui-datepicker-next, .ui-datepicker-calendar td a";return e.on("mouseout",i,function(){t(this).removeClass("ui-state-hover"),-1!==this.className.indexOf("ui-datepicker-prev")&&t(this).removeClass("ui-datepicker-prev-hover"),-1!==this.className.indexOf("ui-datepicker-next")&&t(this).removeClass("ui-datepicker-next-hover")}).on("mouseover",i,o)}function o(){t.datepicker._isDisabledDatepicker(m.inline?m.dpDiv.parent()[0]:m.input[0])||(t(this).parents(".ui-datepicker-calendar").find("a").removeClass("ui-state-hover"),t(this).addClass("ui-state-hover"),-1!==this.className.indexOf("ui-datepicker-prev")&&t(this).addClass("ui-datepicker-prev-hover"),-1!==this.className.indexOf("ui-datepicker-next")&&t(this).addClass("ui-datepicker-next-hover"))}function a(e,i){t.extend(e,i);for(var s in i)null==i[s]&&(e[s]=i[s]);return e}function r(t){return function(){var e=this.element.val();t.apply(this,arguments),this._refresh(),e!==this.element.val()&&this._trigger("change")}}t.ui=t.ui||{},t.ui.version="1.12.1";var h=0,l=Array.prototype.slice;t.cleanData=function(e){return function(i){var s,n,o;for(o=0;null!=(n=i[o]);o++)try{s=t._data(n,"events"),s&&s.remove&&t(n).triggerHandler("remove")}catch(a){}e(i)}}(t.cleanData),t.widget=function(e,i,s){var n,o,a,r={},h=e.split(".")[0];e=e.split(".")[1];var l=h+"-"+e;return s||(s=i,i=t.Widget),t.isArray(s)&&(s=t.extend.apply(null,[{}].concat(s))),t.expr[":"][l.toLowerCase()]=function(e){return!!t.data(e,l)},t[h]=t[h]||{},n=t[h][e],o=t[h][e]=function(t,e){return this._createWidget?(arguments.length&&this._createWidget(t,e),void 0):new o(t,e)},t.extend(o,n,{version:s.version,_proto:t.extend({},s),_childConstructors:[]}),a=new i,a.options=t.widget.extend({},a.options),t.each(s,function(e,s){return t.isFunction(s)?(r[e]=function(){function t(){return i.prototype[e].apply(this,arguments)}function n(t){return i.prototype[e].apply(this,t)}return function(){var e,i=this._super,o=this._superApply;return this._super=t,this._superApply=n,e=s.apply(this,arguments),this._super=i,this._superApply=o,e}}(),void 0):(r[e]=s,void 0)}),o.prototype=t.widget.extend(a,{widgetEventPrefix:n?a.widgetEventPrefix||e:e},r,{constructor:o,namespace:h,widgetName:e,widgetFullName:l}),n?(t.each(n._childConstructors,function(e,i){var s=i.prototype;t.widget(s.namespace+"."+s.widgetName,o,i._proto)}),delete n._childConstructors):i._childConstructors.push(o),t.widget.bridge(e,o),o},t.widget.extend=function(e){for(var i,s,n=l.call(arguments,1),o=0,a=n.length;a>o;o++)for(i in n[o])s=n[o][i],n[o].hasOwnProperty(i)&&void 0!==s&&(e[i]=t.isPlainObject(s)?t.isPlainObject(e[i])?t.widget.extend({},e[i],s):t.widget.extend({},s):s);return e},t.widget.bridge=function(e,i){var s=i.prototype.widgetFullName||e;t.fn[e]=function(n){var o="string"==typeof n,a=l.call(arguments,1),r=this;return o?this.length||"instance"!==n?this.each(function(){var i,o=t.data(this,s);return"instance"===n?(r=o,!1):o?t.isFunction(o[n])&&"_"!==n.charAt(0)?(i=o[n].apply(o,a),i!==o&&void 0!==i?(r=i&&i.jquery?r.pushStack(i.get()):i,!1):void 0):t.error("no such method '"+n+"' for "+e+" widget instance"):t.error("cannot call methods on "+e+" prior to initialization; "+"attempted to call method '"+n+"'")}):r=void 0:(a.length&&(n=t.widget.extend.apply(null,[n].concat(a))),this.each(function(){var e=t.data(this,s);e?(e.option(n||{}),e._init&&e._init()):t.data(this,s,new i(n,this))})),r}},t.Widget=function(){},t.Widget._childConstructors=[],t.Widget.prototype={widgetName:"widget",widgetEventPrefix:"",defaultElement:"<div>",options:{classes:{},disabled:!1,create:null},_createWidget:function(e,i){i=t(i||this.defaultElement||this)[0],this.element=t(i),this.uuid=h++,this.eventNamespace="."+this.widgetName+this.uuid,this.bindings=t(),this.hoverable=t(),this.focusable=t(),this.classesElementLookup={},i!==this&&(t.data(i,this.widgetFullName,this),this._on(!0,this.element,{remove:function(t){t.target===i&&this.destroy()}}),this.document=t(i.style?i.ownerDocument:i.document||i),this.window=t(this.document[0].defaultView||this.document[0].parentWindow)),this.options=t.widget.extend({},this.options,this._getCreateOptions(),e),this._create(),this.options.disabled&&this._setOptionDisabled(this.options.disabled),this._trigger("create",null,this._getCreateEventData()),this._init()},_getCreateOptions:function(){return{}},_getCreateEventData:t.noop,_create:t.noop,_init:t.noop,destroy:function(){var e=this;this._destroy(),t.each(this.classesElementLookup,function(t,i){e._removeClass(i,t)}),this.element.off(this.eventNamespace).removeData(this.widgetFullName),this.widget().off(this.eventNamespace).removeAttr("aria-disabled"),this.bindings.off(this.eventNamespace)},_destroy:t.noop,widget:function(){return this.element},option:function(e,i){var s,n,o,a=e;if(0===arguments.length)return t.widget.extend({},this.options);if("string"==typeof e)if(a={},s=e.split("."),e=s.shift(),s.length){for(n=a[e]=t.widget.extend({},this.options[e]),o=0;s.length-1>o;o++)n[s[o]]=n[s[o]]||{},n=n[s[o]];if(e=s.pop(),1===arguments.length)return void 0===n[e]?null:n[e];n[e]=i}else{if(1===arguments.length)return void 0===this.options[e]?null:this.options[e];a[e]=i}return this._setOptions(a),this},_setOptions:function(t){var e;for(e in t)this._setOption(e,t[e]);return this},_setOption:function(t,e){return"classes"===t&&this._setOptionClasses(e),this.options[t]=e,"disabled"===t&&this._setOptionDisabled(e),this},_setOptionClasses:function(e){var i,s,n;for(i in e)n=this.classesElementLookup[i],e[i]!==this.options.classes[i]&&n&&n.length&&(s=t(n.get()),this._removeClass(n,i),s.addClass(this._classes({element:s,keys:i,classes:e,add:!0})))},_setOptionDisabled:function(t){this._toggleClass(this.widget(),this.widgetFullName+"-disabled",null,!!t),t&&(this._removeClass(this.hoverable,null,"ui-state-hover"),this._removeClass(this.focusable,null,"ui-state-focus"))},enable:function(){return this._setOptions({disabled:!1})},disable:function(){return this._setOptions({disabled:!0})},_classes:function(e){function i(i,o){var a,r;for(r=0;i.length>r;r++)a=n.classesElementLookup[i[r]]||t(),a=e.add?t(t.unique(a.get().concat(e.element.get()))):t(a.not(e.element).get()),n.classesElementLookup[i[r]]=a,s.push(i[r]),o&&e.classes[i[r]]&&s.push(e.classes[i[r]])}var s=[],n=this;return e=t.extend({element:this.element,classes:this.options.classes||{}},e),this._on(e.element,{remove:"_untrackClassesElement"}),e.keys&&i(e.keys.match(/\S+/g)||[],!0),e.extra&&i(e.extra.match(/\S+/g)||[]),s.join(" ")},_untrackClassesElement:function(e){var i=this;t.each(i.classesElementLookup,function(s,n){-1!==t.inArray(e.target,n)&&(i.classesElementLookup[s]=t(n.not(e.target).get()))})},_removeClass:function(t,e,i){return this._toggleClass(t,e,i,!1)},_addClass:function(t,e,i){return this._toggleClass(t,e,i,!0)},_toggleClass:function(t,e,i,s){s="boolean"==typeof s?s:i;var n="string"==typeof t||null===t,o={extra:n?e:i,keys:n?t:e,element:n?this.element:t,add:s};return o.element.toggleClass(this._classes(o),s),this},_on:function(e,i,s){var n,o=this;"boolean"!=typeof e&&(s=i,i=e,e=!1),s?(i=n=t(i),this.bindings=this.bindings.add(i)):(s=i,i=this.element,n=this.widget()),t.each(s,function(s,a){function r(){return e||o.options.disabled!==!0&&!t(this).hasClass("ui-state-disabled")?("string"==typeof a?o[a]:a).apply(o,arguments):void 0}"string"!=typeof a&&(r.guid=a.guid=a.guid||r.guid||t.guid++);var h=s.match(/^([\w:-]*)\s*(.*)$/),l=h[1]+o.eventNamespace,c=h[2];c?n.on(l,c,r):i.on(l,r)})},_off:function(e,i){i=(i||"").split(" ").join(this.eventNamespace+" ")+this.eventNamespace,e.off(i).off(i),this.bindings=t(this.bindings.not(e).get()),this.focusable=t(this.focusable.not(e).get()),this.hoverable=t(this.hoverable.not(e).get())},_delay:function(t,e){function i(){return("string"==typeof t?s[t]:t).apply(s,arguments)}var s=this;return setTimeout(i,e||0)},_hoverable:function(e){this.hoverable=this.hoverable.add(e),this._on(e,{mouseenter:function(e){this._addClass(t(e.currentTarget),null,"ui-state-hover")},mouseleave:function(e){this._removeClass(t(e.currentTarget),null,"ui-state-hover")}})},_focusable:function(e){this.focusable=this.focusable.add(e),this._on(e,{focusin:function(e){this._addClass(t(e.currentTarget),null,"ui-state-focus")},focusout:function(e){this._removeClass(t(e.currentTarget),null,"ui-state-focus")}})},_trigger:function(e,i,s){var n,o,a=this.options[e];if(s=s||{},i=t.Event(i),i.type=(e===this.widgetEventPrefix?e:this.widgetEventPrefix+e).toLowerCase(),i.target=this.element[0],o=i.originalEvent)for(n in o)n in i||(i[n]=o[n]);return this.element.trigger(i,s),!(t.isFunction(a)&&a.apply(this.element[0],[i].concat(s))===!1||i.isDefaultPrevented())}},t.each({show:"fadeIn",hide:"fadeOut"},function(e,i){t.Widget.prototype["_"+e]=function(s,n,o){"string"==typeof n&&(n={effect:n});var a,r=n?n===!0||"number"==typeof n?i:n.effect||i:e;n=n||{},"number"==typeof n&&(n={duration:n}),a=!t.isEmptyObject(n),n.complete=o,n.delay&&s.delay(n.delay),a&&t.effects&&t.effects.effect[r]?s[e](n):r!==e&&s[r]?s[r](n.duration,n.easing,o):s.queue(function(i){t(this)[e](),o&&o.call(s[0]),i()})}}),t.widget,function(){function e(t,e,i){return[parseFloat(t[0])*(u.test(t[0])?e/100:1),parseFloat(t[1])*(u.test(t[1])?i/100:1)]}function i(e,i){return parseInt(t.css(e,i),10)||0}function s(e){var i=e[0];return 9===i.nodeType?{width:e.width(),height:e.height(),offset:{top:0,left:0}}:t.isWindow(i)?{width:e.width(),height:e.height(),offset:{top:e.scrollTop(),left:e.scrollLeft()}}:i.preventDefault?{width:0,height:0,offset:{top:i.pageY,left:i.pageX}}:{width:e.outerWidth(),height:e.outerHeight(),offset:e.offset()}}var n,o=Math.max,a=Math.abs,r=/left|center|right/,h=/top|center|bottom/,l=/[\+\-]\d+(\.[\d]+)?%?/,c=/^\w+/,u=/%$/,d=t.fn.position;t.position={scrollbarWidth:function(){if(void 0!==n)return n;var e,i,s=t("<div style='display:block;position:absolute;width:50px;height:50px;overflow:hidden;'><div style='height:100px;width:auto;'></div></div>"),o=s.children()[0];return t("body").append(s),e=o.offsetWidth,s.css("overflow","scroll"),i=o.offsetWidth,e===i&&(i=s[0].clientWidth),s.remove(),n=e-i},getScrollInfo:function(e){var i=e.isWindow||e.isDocument?"":e.element.css("overflow-x"),s=e.isWindow||e.isDocument?"":e.element.css("overflow-y"),n="scroll"===i||"auto"===i&&e.width<e.element[0].scrollWidth,o="scroll"===s||"auto"===s&&e.height<e.element[0].scrollHeight;return{width:o?t.position.scrollbarWidth():0,height:n?t.position.scrollbarWidth():0}},getWithinInfo:function(e){var i=t(e||window),s=t.isWindow(i[0]),n=!!i[0]&&9===i[0].nodeType,o=!s&&!n;return{element:i,isWindow:s,isDocument:n,offset:o?t(e).offset():{left:0,top:0},scrollLeft:i.scrollLeft(),scrollTop:i.scrollTop(),width:i.outerWidth(),height:i.outerHeight()}}},t.fn.position=function(n){if(!n||!n.of)return d.apply(this,arguments);n=t.extend({},n);var u,p,f,g,m,_,v=t(n.of),b=t.position.getWithinInfo(n.within),y=t.position.getScrollInfo(b),w=(n.collision||"flip").split(" "),k={};return _=s(v),v[0].preventDefault&&(n.at="left top"),p=_.width,f=_.height,g=_.offset,m=t.extend({},g),t.each(["my","at"],function(){var t,e,i=(n[this]||"").split(" ");1===i.length&&(i=r.test(i[0])?i.concat(["center"]):h.test(i[0])?["center"].concat(i):["center","center"]),i[0]=r.test(i[0])?i[0]:"center",i[1]=h.test(i[1])?i[1]:"center",t=l.exec(i[0]),e=l.exec(i[1]),k[this]=[t?t[0]:0,e?e[0]:0],n[this]=[c.exec(i[0])[0],c.exec(i[1])[0]]}),1===w.length&&(w[1]=w[0]),"right"===n.at[0]?m.left+=p:"center"===n.at[0]&&(m.left+=p/2),"bottom"===n.at[1]?m.top+=f:"center"===n.at[1]&&(m.top+=f/2),u=e(k.at,p,f),m.left+=u[0],m.top+=u[1],this.each(function(){var s,r,h=t(this),l=h.outerWidth(),c=h.outerHeight(),d=i(this,"marginLeft"),_=i(this,"marginTop"),x=l+d+i(this,"marginRight")+y.width,C=c+_+i(this,"marginBottom")+y.height,D=t.extend({},m),I=e(k.my,h.outerWidth(),h.outerHeight());"right"===n.my[0]?D.left-=l:"center"===n.my[0]&&(D.left-=l/2),"bottom"===n.my[1]?D.top-=c:"center"===n.my[1]&&(D.top-=c/2),D.left+=I[0],D.top+=I[1],s={marginLeft:d,marginTop:_},t.each(["left","top"],function(e,i){t.ui.position[w[e]]&&t.ui.position[w[e]][i](D,{targetWidth:p,targetHeight:f,elemWidth:l,elemHeight:c,collisionPosition:s,collisionWidth:x,collisionHeight:C,offset:[u[0]+I[0],u[1]+I[1]],my:n.my,at:n.at,within:b,elem:h})}),n.using&&(r=function(t){var e=g.left-D.left,i=e+p-l,s=g.top-D.top,r=s+f-c,u={target:{element:v,left:g.left,top:g.top,width:p,height:f},element:{element:h,left:D.left,top:D.top,width:l,height:c},horizontal:0>i?"left":e>0?"right":"center",vertical:0>r?"top":s>0?"bottom":"middle"};l>p&&p>a(e+i)&&(u.horizontal="center"),c>f&&f>a(s+r)&&(u.vertical="middle"),u.important=o(a(e),a(i))>o(a(s),a(r))?"horizontal":"vertical",n.using.call(this,t,u)}),h.offset(t.extend(D,{using:r}))})},t.ui.position={fit:{left:function(t,e){var i,s=e.within,n=s.isWindow?s.scrollLeft:s.offset.left,a=s.width,r=t.left-e.collisionPosition.marginLeft,h=n-r,l=r+e.collisionWidth-a-n;e.collisionWidth>a?h>0&&0>=l?(i=t.left+h+e.collisionWidth-a-n,t.left+=h-i):t.left=l>0&&0>=h?n:h>l?n+a-e.collisionWidth:n:h>0?t.left+=h:l>0?t.left-=l:t.left=o(t.left-r,t.left)},top:function(t,e){var i,s=e.within,n=s.isWindow?s.scrollTop:s.offset.top,a=e.within.height,r=t.top-e.collisionPosition.marginTop,h=n-r,l=r+e.collisionHeight-a-n;e.collisionHeight>a?h>0&&0>=l?(i=t.top+h+e.collisionHeight-a-n,t.top+=h-i):t.top=l>0&&0>=h?n:h>l?n+a-e.collisionHeight:n:h>0?t.top+=h:l>0?t.top-=l:t.top=o(t.top-r,t.top)}},flip:{left:function(t,e){var i,s,n=e.within,o=n.offset.left+n.scrollLeft,r=n.width,h=n.isWindow?n.scrollLeft:n.offset.left,l=t.left-e.collisionPosition.marginLeft,c=l-h,u=l+e.collisionWidth-r-h,d="left"===e.my[0]?-e.elemWidth:"right"===e.my[0]?e.elemWidth:0,p="left"===e.at[0]?e.targetWidth:"right"===e.at[0]?-e.targetWidth:0,f=-2*e.offset[0];0>c?(i=t.left+d+p+f+e.collisionWidth-r-o,(0>i||a(c)>i)&&(t.left+=d+p+f)):u>0&&(s=t.left-e.collisionPosition.marginLeft+d+p+f-h,(s>0||u>a(s))&&(t.left+=d+p+f))},top:function(t,e){var i,s,n=e.within,o=n.offset.top+n.scrollTop,r=n.height,h=n.isWindow?n.scrollTop:n.offset.top,l=t.top-e.collisionPosition.marginTop,c=l-h,u=l+e.collisionHeight-r-h,d="top"===e.my[1],p=d?-e.elemHeight:"bottom"===e.my[1]?e.elemHeight:0,f="top"===e.at[1]?e.targetHeight:"bottom"===e.at[1]?-e.targetHeight:0,g=-2*e.offset[1];0>c?(s=t.top+p+f+g+e.collisionHeight-r-o,(0>s||a(c)>s)&&(t.top+=p+f+g)):u>0&&(i=t.top-e.collisionPosition.marginTop+p+f+g-h,(i>0||u>a(i))&&(t.top+=p+f+g))}},flipfit:{left:function(){t.ui.position.flip.left.apply(this,arguments),t.ui.position.fit.left.apply(this,arguments)},top:function(){t.ui.position.flip.top.apply(this,arguments),t.ui.position.fit.top.apply(this,arguments)}}}}(),t.ui.position,t.extend(t.expr[":"],{data:t.expr.createPseudo?t.expr.createPseudo(function(e){return function(i){return!!t.data(i,e)}}):function(e,i,s){return!!t.data(e,s[3])}}),t.fn.extend({disableSelection:function(){var t="onselectstart"in document.createElement("div")?"selectstart":"mousedown";return function(){return this.on(t+".ui-disableSelection",function(t){t.preventDefault()})}}(),enableSelection:function(){return this.off(".ui-disableSelection")}});var c="ui-effects-",u="ui-effects-style",d="ui-effects-animated",p=t;t.effects={effect:{}},function(t,e){function i(t,e,i){var s=u[e.type]||{};return null==t?i||!e.def?null:e.def:(t=s.floor?~~t:parseFloat(t),isNaN(t)?e.def:s.mod?(t+s.mod)%s.mod:0>t?0:t>s.max?s.max:t)}function s(i){var s=l(),n=s._rgba=[];return i=i.toLowerCase(),f(h,function(t,o){var a,r=o.re.exec(i),h=r&&o.parse(r),l=o.space||"rgba";return h?(a=s[l](h),s[c[l].cache]=a[c[l].cache],n=s._rgba=a._rgba,!1):e}),n.length?("0,0,0,0"===n.join()&&t.extend(n,o.transparent),s):o[i]}function n(t,e,i){return i=(i+1)%1,1>6*i?t+6*(e-t)*i:1>2*i?e:2>3*i?t+6*(e-t)*(2/3-i):t}var o,a="backgroundColor borderBottomColor borderLeftColor borderRightColor borderTopColor color columnRuleColor outlineColor textDecorationColor textEmphasisColor",r=/^([\-+])=\s*(\d+\.?\d*)/,h=[{re:/rgba?\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*(?:,\s*(\d?(?:\.\d+)?)\s*)?\)/,parse:function(t){return[t[1],t[2],t[3],t[4]]}},{re:/rgba?\(\s*(\d+(?:\.\d+)?)\%\s*,\s*(\d+(?:\.\d+)?)\%\s*,\s*(\d+(?:\.\d+)?)\%\s*(?:,\s*(\d?(?:\.\d+)?)\s*)?\)/,parse:function(t){return[2.55*t[1],2.55*t[2],2.55*t[3],t[4]]}},{re:/#([a-f0-9]{2})([a-f0-9]{2})([a-f0-9]{2})/,parse:function(t){return[parseInt(t[1],16),parseInt(t[2],16),parseInt(t[3],16)]}},{re:/#([a-f0-9])([a-f0-9])([a-f0-9])/,parse:function(t){return[parseInt(t[1]+t[1],16),parseInt(t[2]+t[2],16),parseInt(t[3]+t[3],16)]}},{re:/hsla?\(\s*(\d+(?:\.\d+)?)\s*,\s*(\d+(?:\.\d+)?)\%\s*,\s*(\d+(?:\.\d+)?)\%\s*(?:,\s*(\d?(?:\.\d+)?)\s*)?\)/,space:"hsla",parse:function(t){return[t[1],t[2]/100,t[3]/100,t[4]]}}],l=t.Color=function(e,i,s,n){return new t.Color.fn.parse(e,i,s,n)},c={rgba:{props:{red:{idx:0,type:"byte"},green:{idx:1,type:"byte"},blue:{idx:2,type:"byte"}}},hsla:{props:{hue:{idx:0,type:"degrees"},saturation:{idx:1,type:"percent"},lightness:{idx:2,type:"percent"}}}},u={"byte":{floor:!0,max:255},percent:{max:1},degrees:{mod:360,floor:!0}},d=l.support={},p=t("<p>")[0],f=t.each;p.style.cssText="background-color:rgba(1,1,1,.5)",d.rgba=p.style.backgroundColor.indexOf("rgba")>-1,f(c,function(t,e){e.cache="_"+t,e.props.alpha={idx:3,type:"percent",def:1}}),l.fn=t.extend(l.prototype,{parse:function(n,a,r,h){if(n===e)return this._rgba=[null,null,null,null],this;(n.jquery||n.nodeType)&&(n=t(n).css(a),a=e);var u=this,d=t.type(n),p=this._rgba=[];return a!==e&&(n=[n,a,r,h],d="array"),"string"===d?this.parse(s(n)||o._default):"array"===d?(f(c.rgba.props,function(t,e){p[e.idx]=i(n[e.idx],e)}),this):"object"===d?(n instanceof l?f(c,function(t,e){n[e.cache]&&(u[e.cache]=n[e.cache].slice())}):f(c,function(e,s){var o=s.cache;f(s.props,function(t,e){if(!u[o]&&s.to){if("alpha"===t||null==n[t])return;u[o]=s.to(u._rgba)}u[o][e.idx]=i(n[t],e,!0)}),u[o]&&0>t.inArray(null,u[o].slice(0,3))&&(u[o][3]=1,s.from&&(u._rgba=s.from(u[o])))}),this):e},is:function(t){var i=l(t),s=!0,n=this;return f(c,function(t,o){var a,r=i[o.cache];return r&&(a=n[o.cache]||o.to&&o.to(n._rgba)||[],f(o.props,function(t,i){return null!=r[i.idx]?s=r[i.idx]===a[i.idx]:e})),s}),s},_space:function(){var t=[],e=this;return f(c,function(i,s){e[s.cache]&&t.push(i)}),t.pop()},transition:function(t,e){var s=l(t),n=s._space(),o=c[n],a=0===this.alpha()?l("transparent"):this,r=a[o.cache]||o.to(a._rgba),h=r.slice();return s=s[o.cache],f(o.props,function(t,n){var o=n.idx,a=r[o],l=s[o],c=u[n.type]||{};null!==l&&(null===a?h[o]=l:(c.mod&&(l-a>c.mod/2?a+=c.mod:a-l>c.mod/2&&(a-=c.mod)),h[o]=i((l-a)*e+a,n)))}),this[n](h)},blend:function(e){if(1===this._rgba[3])return this;var i=this._rgba.slice(),s=i.pop(),n=l(e)._rgba;return l(t.map(i,function(t,e){return(1-s)*n[e]+s*t}))},toRgbaString:function(){var e="rgba(",i=t.map(this._rgba,function(t,e){return null==t?e>2?1:0:t});return 1===i[3]&&(i.pop(),e="rgb("),e+i.join()+")"},toHslaString:function(){var e="hsla(",i=t.map(this.hsla(),function(t,e){return null==t&&(t=e>2?1:0),e&&3>e&&(t=Math.round(100*t)+"%"),t});return 1===i[3]&&(i.pop(),e="hsl("),e+i.join()+")"},toHexString:function(e){var i=this._rgba.slice(),s=i.pop();return e&&i.push(~~(255*s)),"#"+t.map(i,function(t){return t=(t||0).toString(16),1===t.length?"0"+t:t}).join("")},toString:function(){return 0===this._rgba[3]?"transparent":this.toRgbaString()}}),l.fn.parse.prototype=l.fn,c.hsla.to=function(t){if(null==t[0]||null==t[1]||null==t[2])return[null,null,null,t[3]];var e,i,s=t[0]/255,n=t[1]/255,o=t[2]/255,a=t[3],r=Math.max(s,n,o),h=Math.min(s,n,o),l=r-h,c=r+h,u=.5*c;return e=h===r?0:s===r?60*(n-o)/l+360:n===r?60*(o-s)/l+120:60*(s-n)/l+240,i=0===l?0:.5>=u?l/c:l/(2-c),[Math.round(e)%360,i,u,null==a?1:a]},c.hsla.from=function(t){if(null==t[0]||null==t[1]||null==t[2])return[null,null,null,t[3]];var e=t[0]/360,i=t[1],s=t[2],o=t[3],a=.5>=s?s*(1+i):s+i-s*i,r=2*s-a;return[Math.round(255*n(r,a,e+1/3)),Math.round(255*n(r,a,e)),Math.round(255*n(r,a,e-1/3)),o]},f(c,function(s,n){var o=n.props,a=n.cache,h=n.to,c=n.from;l.fn[s]=function(s){if(h&&!this[a]&&(this[a]=h(this._rgba)),s===e)return this[a].slice();var n,r=t.type(s),u="array"===r||"object"===r?s:arguments,d=this[a].slice();return f(o,function(t,e){var s=u["object"===r?t:e.idx];null==s&&(s=d[e.idx]),d[e.idx]=i(s,e)}),c?(n=l(c(d)),n[a]=d,n):l(d)},f(o,function(e,i){l.fn[e]||(l.fn[e]=function(n){var o,a=t.type(n),h="alpha"===e?this._hsla?"hsla":"rgba":s,l=this[h](),c=l[i.idx];return"undefined"===a?c:("function"===a&&(n=n.call(this,c),a=t.type(n)),null==n&&i.empty?this:("string"===a&&(o=r.exec(n),o&&(n=c+parseFloat(o[2])*("+"===o[1]?1:-1))),l[i.idx]=n,this[h](l)))})})}),l.hook=function(e){var i=e.split(" ");f(i,function(e,i){t.cssHooks[i]={set:function(e,n){var o,a,r="";if("transparent"!==n&&("string"!==t.type(n)||(o=s(n)))){if(n=l(o||n),!d.rgba&&1!==n._rgba[3]){for(a="backgroundColor"===i?e.parentNode:e;(""===r||"transparent"===r)&&a&&a.style;)try{r=t.css(a,"backgroundColor"),a=a.parentNode}catch(h){}n=n.blend(r&&"transparent"!==r?r:"_default")}n=n.toRgbaString()}try{e.style[i]=n}catch(h){}}},t.fx.step[i]=function(e){e.colorInit||(e.start=l(e.elem,i),e.end=l(e.end),e.colorInit=!0),t.cssHooks[i].set(e.elem,e.start.transition(e.end,e.pos))}})},l.hook(a),t.cssHooks.borderColor={expand:function(t){var e={};return f(["Top","Right","Bottom","Left"],function(i,s){e["border"+s+"Color"]=t}),e}},o=t.Color.names={aqua:"#00ffff",black:"#000000",blue:"#0000ff",fuchsia:"#ff00ff",gray:"#808080",green:"#008000",lime:"#00ff00",maroon:"#800000",navy:"#000080",olive:"#808000",purple:"#800080",red:"#ff0000",silver:"#c0c0c0",teal:"#008080",white:"#ffffff",yellow:"#ffff00",transparent:[null,null,null,0],_default:"#ffffff"}}(p),function(){function e(e){var i,s,n=e.ownerDocument.defaultView?e.ownerDocument.defaultView.getComputedStyle(e,null):e.currentStyle,o={};if(n&&n.length&&n[0]&&n[n[0]])for(s=n.length;s--;)i=n[s],"string"==typeof n[i]&&(o[t.camelCase(i)]=n[i]);else for(i in n)"string"==typeof n[i]&&(o[i]=n[i]);return o}function i(e,i){var s,o,a={};for(s in i)o=i[s],e[s]!==o&&(n[s]||(t.fx.step[s]||!isNaN(parseFloat(o)))&&(a[s]=o));return a}var s=["add","remove","toggle"],n={border:1,borderBottom:1,borderColor:1,borderLeft:1,borderRight:1,borderTop:1,borderWidth:1,margin:1,padding:1};t.each(["borderLeftStyle","borderRightStyle","borderBottomStyle","borderTopStyle"],function(e,i){t.fx.step[i]=function(t){("none"!==t.end&&!t.setAttr||1===t.pos&&!t.setAttr)&&(p.style(t.elem,i,t.end),t.setAttr=!0)}}),t.fn.addBack||(t.fn.addBack=function(t){return this.add(null==t?this.prevObject:this.prevObject.filter(t))}),t.effects.animateClass=function(n,o,a,r){var h=t.speed(o,a,r);return this.queue(function(){var o,a=t(this),r=a.attr("class")||"",l=h.children?a.find("*").addBack():a;l=l.map(function(){var i=t(this);return{el:i,start:e(this)}}),o=function(){t.each(s,function(t,e){n[e]&&a[e+"Class"](n[e])})},o(),l=l.map(function(){return this.end=e(this.el[0]),this.diff=i(this.start,this.end),this}),a.attr("class",r),l=l.map(function(){var e=this,i=t.Deferred(),s=t.extend({},h,{queue:!1,complete:function(){i.resolve(e)}});return this.el.animate(this.diff,s),i.promise()}),t.when.apply(t,l.get()).done(function(){o(),t.each(arguments,function(){var e=this.el;t.each(this.diff,function(t){e.css(t,"")})}),h.complete.call(a[0])})})},t.fn.extend({addClass:function(e){return function(i,s,n,o){return s?t.effects.animateClass.call(this,{add:i},s,n,o):e.apply(this,arguments)}}(t.fn.addClass),removeClass:function(e){return function(i,s,n,o){return arguments.length>1?t.effects.animateClass.call(this,{remove:i},s,n,o):e.apply(this,arguments)}}(t.fn.removeClass),toggleClass:function(e){return function(i,s,n,o,a){return"boolean"==typeof s||void 0===s?n?t.effects.animateClass.call(this,s?{add:i}:{remove:i},n,o,a):e.apply(this,arguments):t.effects.animateClass.call(this,{toggle:i},s,n,o)}}(t.fn.toggleClass),switchClass:function(e,i,s,n,o){return t.effects.animateClass.call(this,{add:i,remove:e},s,n,o)}})}(),function(){function e(e,i,s,n){return t.isPlainObject(e)&&(i=e,e=e.effect),e={effect:e},null==i&&(i={}),t.isFunction(i)&&(n=i,s=null,i={}),("number"==typeof i||t.fx.speeds[i])&&(n=s,s=i,i={}),t.isFunction(s)&&(n=s,s=null),i&&t.extend(e,i),s=s||i.duration,e.duration=t.fx.off?0:"number"==typeof s?s:s in t.fx.speeds?t.fx.speeds[s]:t.fx.speeds._default,e.complete=n||i.complete,e}function i(e){return!e||"number"==typeof e||t.fx.speeds[e]?!0:"string"!=typeof e||t.effects.effect[e]?t.isFunction(e)?!0:"object"!=typeof e||e.effect?!1:!0:!0}function s(t,e){var i=e.outerWidth(),s=e.outerHeight(),n=/^rect\((-?\d*\.?\d*px|-?\d+%|auto),?\s*(-?\d*\.?\d*px|-?\d+%|auto),?\s*(-?\d*\.?\d*px|-?\d+%|auto),?\s*(-?\d*\.?\d*px|-?\d+%|auto)\)$/,o=n.exec(t)||["",0,i,s,0];return{top:parseFloat(o[1])||0,right:"auto"===o[2]?i:parseFloat(o[2]),bottom:"auto"===o[3]?s:parseFloat(o[3]),left:parseFloat(o[4])||0}}t.expr&&t.expr.filters&&t.expr.filters.animated&&(t.expr.filters.animated=function(e){return function(i){return!!t(i).data(d)||e(i)}}(t.expr.filters.animated)),t.uiBackCompat!==!1&&t.extend(t.effects,{save:function(t,e){for(var i=0,s=e.length;s>i;i++)null!==e[i]&&t.data(c+e[i],t[0].style[e[i]])},restore:function(t,e){for(var i,s=0,n=e.length;n>s;s++)null!==e[s]&&(i=t.data(c+e[s]),t.css(e[s],i))},setMode:function(t,e){return"toggle"===e&&(e=t.is(":hidden")?"show":"hide"),e},createWrapper:function(e){if(e.parent().is(".ui-effects-wrapper"))return e.parent();var i={width:e.outerWidth(!0),height:e.outerHeight(!0),"float":e.css("float")},s=t("<div></div>").addClass("ui-effects-wrapper").css({fontSize:"100%",background:"transparent",border:"none",margin:0,padding:0}),n={width:e.width(),height:e.height()},o=document.activeElement;try{o.id}catch(a){o=document.body}return e.wrap(s),(e[0]===o||t.contains(e[0],o))&&t(o).trigger("focus"),s=e.parent(),"static"===e.css("position")?(s.css({position:"relative"}),e.css({position:"relative"})):(t.extend(i,{position:e.css("position"),zIndex:e.css("z-index")}),t.each(["top","left","bottom","right"],function(t,s){i[s]=e.css(s),isNaN(parseInt(i[s],10))&&(i[s]="auto")}),e.css({position:"relative",top:0,left:0,right:"auto",bottom:"auto"})),e.css(n),s.css(i).show()},removeWrapper:function(e){var i=document.activeElement;return e.parent().is(".ui-effects-wrapper")&&(e.parent().replaceWith(e),(e[0]===i||t.contains(e[0],i))&&t(i).trigger("focus")),e}}),t.extend(t.effects,{version:"1.12.1",define:function(e,i,s){return s||(s=i,i="effect"),t.effects.effect[e]=s,t.effects.effect[e].mode=i,s},scaledDimensions:function(t,e,i){if(0===e)return{height:0,width:0,outerHeight:0,outerWidth:0};var s="horizontal"!==i?(e||100)/100:1,n="vertical"!==i?(e||100)/100:1;return{height:t.height()*n,width:t.width()*s,outerHeight:t.outerHeight()*n,outerWidth:t.outerWidth()*s}},clipToBox:function(t){return{width:t.clip.right-t.clip.left,height:t.clip.bottom-t.clip.top,left:t.clip.left,top:t.clip.top}},unshift:function(t,e,i){var s=t.queue();e>1&&s.splice.apply(s,[1,0].concat(s.splice(e,i))),t.dequeue()},saveStyle:function(t){t.data(u,t[0].style.cssText)},restoreStyle:function(t){t[0].style.cssText=t.data(u)||"",t.removeData(u)},mode:function(t,e){var i=t.is(":hidden");return"toggle"===e&&(e=i?"show":"hide"),(i?"hide"===e:"show"===e)&&(e="none"),e},getBaseline:function(t,e){var i,s;switch(t[0]){case"top":i=0;break;case"middle":i=.5;break;case"bottom":i=1;break;default:i=t[0]/e.height}switch(t[1]){case"left":s=0;break;case"center":s=.5;break;case"right":s=1;break;default:s=t[1]/e.width}return{x:s,y:i}},createPlaceholder:function(e){var i,s=e.css("position"),n=e.position();return e.css({marginTop:e.css("marginTop"),marginBottom:e.css("marginBottom"),marginLeft:e.css("marginLeft"),marginRight:e.css("marginRight")}).outerWidth(e.outerWidth()).outerHeight(e.outerHeight()),/^(static|relative)/.test(s)&&(s="absolute",i=t("<"+e[0].nodeName+">").insertAfter(e).css({display:/^(inline|ruby)/.test(e.css("display"))?"inline-block":"block",visibility:"hidden",marginTop:e.css("marginTop"),marginBottom:e.css("marginBottom"),marginLeft:e.css("marginLeft"),marginRight:e.css("marginRight"),"float":e.css("float")}).outerWidth(e.outerWidth()).outerHeight(e.outerHeight()).addClass("ui-effects-placeholder"),e.data(c+"placeholder",i)),e.css({position:s,left:n.left,top:n.top}),i},removePlaceholder:function(t){var e=c+"placeholder",i=t.data(e);i&&(i.remove(),t.removeData(e))},cleanUp:function(e){t.effects.restoreStyle(e),t.effects.removePlaceholder(e)},setTransition:function(e,i,s,n){return n=n||{},t.each(i,function(t,i){var o=e.cssUnit(i);o[0]>0&&(n[i]=o[0]*s+o[1])}),n}}),t.fn.extend({effect:function(){function i(e){function i(){r.removeData(d),t.effects.cleanUp(r),"hide"===s.mode&&r.hide(),a()}function a(){t.isFunction(h)&&h.call(r[0]),t.isFunction(e)&&e()}var r=t(this);s.mode=c.shift(),t.uiBackCompat===!1||o?"none"===s.mode?(r[l](),a()):n.call(r[0],s,i):(r.is(":hidden")?"hide"===l:"show"===l)?(r[l](),a()):n.call(r[0],s,a)}var s=e.apply(this,arguments),n=t.effects.effect[s.effect],o=n.mode,a=s.queue,r=a||"fx",h=s.complete,l=s.mode,c=[],u=function(e){var i=t(this),s=t.effects.mode(i,l)||o;i.data(d,!0),c.push(s),o&&("show"===s||s===o&&"hide"===s)&&i.show(),o&&"none"===s||t.effects.saveStyle(i),t.isFunction(e)&&e()};return t.fx.off||!n?l?this[l](s.duration,h):this.each(function(){h&&h.call(this)}):a===!1?this.each(u).each(i):this.queue(r,u).queue(r,i)},show:function(t){return function(s){if(i(s))return t.apply(this,arguments);var n=e.apply(this,arguments);return n.mode="show",this.effect.call(this,n)
-}}(t.fn.show),hide:function(t){return function(s){if(i(s))return t.apply(this,arguments);var n=e.apply(this,arguments);return n.mode="hide",this.effect.call(this,n)}}(t.fn.hide),toggle:function(t){return function(s){if(i(s)||"boolean"==typeof s)return t.apply(this,arguments);var n=e.apply(this,arguments);return n.mode="toggle",this.effect.call(this,n)}}(t.fn.toggle),cssUnit:function(e){var i=this.css(e),s=[];return t.each(["em","px","%","pt"],function(t,e){i.indexOf(e)>0&&(s=[parseFloat(i),e])}),s},cssClip:function(t){return t?this.css("clip","rect("+t.top+"px "+t.right+"px "+t.bottom+"px "+t.left+"px)"):s(this.css("clip"),this)},transfer:function(e,i){var s=t(this),n=t(e.to),o="fixed"===n.css("position"),a=t("body"),r=o?a.scrollTop():0,h=o?a.scrollLeft():0,l=n.offset(),c={top:l.top-r,left:l.left-h,height:n.innerHeight(),width:n.innerWidth()},u=s.offset(),d=t("<div class='ui-effects-transfer'></div>").appendTo("body").addClass(e.className).css({top:u.top-r,left:u.left-h,height:s.innerHeight(),width:s.innerWidth(),position:o?"fixed":"absolute"}).animate(c,e.duration,e.easing,function(){d.remove(),t.isFunction(i)&&i()})}}),t.fx.step.clip=function(e){e.clipInit||(e.start=t(e.elem).cssClip(),"string"==typeof e.end&&(e.end=s(e.end,e.elem)),e.clipInit=!0),t(e.elem).cssClip({top:e.pos*(e.end.top-e.start.top)+e.start.top,right:e.pos*(e.end.right-e.start.right)+e.start.right,bottom:e.pos*(e.end.bottom-e.start.bottom)+e.start.bottom,left:e.pos*(e.end.left-e.start.left)+e.start.left})}}(),function(){var e={};t.each(["Quad","Cubic","Quart","Quint","Expo"],function(t,i){e[i]=function(e){return Math.pow(e,t+2)}}),t.extend(e,{Sine:function(t){return 1-Math.cos(t*Math.PI/2)},Circ:function(t){return 1-Math.sqrt(1-t*t)},Elastic:function(t){return 0===t||1===t?t:-Math.pow(2,8*(t-1))*Math.sin((80*(t-1)-7.5)*Math.PI/15)},Back:function(t){return t*t*(3*t-2)},Bounce:function(t){for(var e,i=4;((e=Math.pow(2,--i))-1)/11>t;);return 1/Math.pow(4,3-i)-7.5625*Math.pow((3*e-2)/22-t,2)}}),t.each(e,function(e,i){t.easing["easeIn"+e]=i,t.easing["easeOut"+e]=function(t){return 1-i(1-t)},t.easing["easeInOut"+e]=function(t){return.5>t?i(2*t)/2:1-i(-2*t+2)/2}})}();var f=t.effects;t.effects.define("blind","hide",function(e,i){var s={up:["bottom","top"],vertical:["bottom","top"],down:["top","bottom"],left:["right","left"],horizontal:["right","left"],right:["left","right"]},n=t(this),o=e.direction||"up",a=n.cssClip(),r={clip:t.extend({},a)},h=t.effects.createPlaceholder(n);r.clip[s[o][0]]=r.clip[s[o][1]],"show"===e.mode&&(n.cssClip(r.clip),h&&h.css(t.effects.clipToBox(r)),r.clip=a),h&&h.animate(t.effects.clipToBox(r),e.duration,e.easing),n.animate(r,{queue:!1,duration:e.duration,easing:e.easing,complete:i})}),t.effects.define("bounce",function(e,i){var s,n,o,a=t(this),r=e.mode,h="hide"===r,l="show"===r,c=e.direction||"up",u=e.distance,d=e.times||5,p=2*d+(l||h?1:0),f=e.duration/p,g=e.easing,m="up"===c||"down"===c?"top":"left",_="up"===c||"left"===c,v=0,b=a.queue().length;for(t.effects.createPlaceholder(a),o=a.css(m),u||(u=a["top"===m?"outerHeight":"outerWidth"]()/3),l&&(n={opacity:1},n[m]=o,a.css("opacity",0).css(m,_?2*-u:2*u).animate(n,f,g)),h&&(u/=Math.pow(2,d-1)),n={},n[m]=o;d>v;v++)s={},s[m]=(_?"-=":"+=")+u,a.animate(s,f,g).animate(n,f,g),u=h?2*u:u/2;h&&(s={opacity:0},s[m]=(_?"-=":"+=")+u,a.animate(s,f,g)),a.queue(i),t.effects.unshift(a,b,p+1)}),t.effects.define("clip","hide",function(e,i){var s,n={},o=t(this),a=e.direction||"vertical",r="both"===a,h=r||"horizontal"===a,l=r||"vertical"===a;s=o.cssClip(),n.clip={top:l?(s.bottom-s.top)/2:s.top,right:h?(s.right-s.left)/2:s.right,bottom:l?(s.bottom-s.top)/2:s.bottom,left:h?(s.right-s.left)/2:s.left},t.effects.createPlaceholder(o),"show"===e.mode&&(o.cssClip(n.clip),n.clip=s),o.animate(n,{queue:!1,duration:e.duration,easing:e.easing,complete:i})}),t.effects.define("drop","hide",function(e,i){var s,n=t(this),o=e.mode,a="show"===o,r=e.direction||"left",h="up"===r||"down"===r?"top":"left",l="up"===r||"left"===r?"-=":"+=",c="+="===l?"-=":"+=",u={opacity:0};t.effects.createPlaceholder(n),s=e.distance||n["top"===h?"outerHeight":"outerWidth"](!0)/2,u[h]=l+s,a&&(n.css(u),u[h]=c+s,u.opacity=1),n.animate(u,{queue:!1,duration:e.duration,easing:e.easing,complete:i})}),t.effects.define("explode","hide",function(e,i){function s(){b.push(this),b.length===u*d&&n()}function n(){p.css({visibility:"visible"}),t(b).remove(),i()}var o,a,r,h,l,c,u=e.pieces?Math.round(Math.sqrt(e.pieces)):3,d=u,p=t(this),f=e.mode,g="show"===f,m=p.show().css("visibility","hidden").offset(),_=Math.ceil(p.outerWidth()/d),v=Math.ceil(p.outerHeight()/u),b=[];for(o=0;u>o;o++)for(h=m.top+o*v,c=o-(u-1)/2,a=0;d>a;a++)r=m.left+a*_,l=a-(d-1)/2,p.clone().appendTo("body").wrap("<div></div>").css({position:"absolute",visibility:"visible",left:-a*_,top:-o*v}).parent().addClass("ui-effects-explode").css({position:"absolute",overflow:"hidden",width:_,height:v,left:r+(g?l*_:0),top:h+(g?c*v:0),opacity:g?0:1}).animate({left:r+(g?0:l*_),top:h+(g?0:c*v),opacity:g?1:0},e.duration||500,e.easing,s)}),t.effects.define("fade","toggle",function(e,i){var s="show"===e.mode;t(this).css("opacity",s?0:1).animate({opacity:s?1:0},{queue:!1,duration:e.duration,easing:e.easing,complete:i})}),t.effects.define("fold","hide",function(e,i){var s=t(this),n=e.mode,o="show"===n,a="hide"===n,r=e.size||15,h=/([0-9]+)%/.exec(r),l=!!e.horizFirst,c=l?["right","bottom"]:["bottom","right"],u=e.duration/2,d=t.effects.createPlaceholder(s),p=s.cssClip(),f={clip:t.extend({},p)},g={clip:t.extend({},p)},m=[p[c[0]],p[c[1]]],_=s.queue().length;h&&(r=parseInt(h[1],10)/100*m[a?0:1]),f.clip[c[0]]=r,g.clip[c[0]]=r,g.clip[c[1]]=0,o&&(s.cssClip(g.clip),d&&d.css(t.effects.clipToBox(g)),g.clip=p),s.queue(function(i){d&&d.animate(t.effects.clipToBox(f),u,e.easing).animate(t.effects.clipToBox(g),u,e.easing),i()}).animate(f,u,e.easing).animate(g,u,e.easing).queue(i),t.effects.unshift(s,_,4)}),t.effects.define("highlight","show",function(e,i){var s=t(this),n={backgroundColor:s.css("backgroundColor")};"hide"===e.mode&&(n.opacity=0),t.effects.saveStyle(s),s.css({backgroundImage:"none",backgroundColor:e.color||"#ffff99"}).animate(n,{queue:!1,duration:e.duration,easing:e.easing,complete:i})}),t.effects.define("size",function(e,i){var s,n,o,a=t(this),r=["fontSize"],h=["borderTopWidth","borderBottomWidth","paddingTop","paddingBottom"],l=["borderLeftWidth","borderRightWidth","paddingLeft","paddingRight"],c=e.mode,u="effect"!==c,d=e.scale||"both",p=e.origin||["middle","center"],f=a.css("position"),g=a.position(),m=t.effects.scaledDimensions(a),_=e.from||m,v=e.to||t.effects.scaledDimensions(a,0);t.effects.createPlaceholder(a),"show"===c&&(o=_,_=v,v=o),n={from:{y:_.height/m.height,x:_.width/m.width},to:{y:v.height/m.height,x:v.width/m.width}},("box"===d||"both"===d)&&(n.from.y!==n.to.y&&(_=t.effects.setTransition(a,h,n.from.y,_),v=t.effects.setTransition(a,h,n.to.y,v)),n.from.x!==n.to.x&&(_=t.effects.setTransition(a,l,n.from.x,_),v=t.effects.setTransition(a,l,n.to.x,v))),("content"===d||"both"===d)&&n.from.y!==n.to.y&&(_=t.effects.setTransition(a,r,n.from.y,_),v=t.effects.setTransition(a,r,n.to.y,v)),p&&(s=t.effects.getBaseline(p,m),_.top=(m.outerHeight-_.outerHeight)*s.y+g.top,_.left=(m.outerWidth-_.outerWidth)*s.x+g.left,v.top=(m.outerHeight-v.outerHeight)*s.y+g.top,v.left=(m.outerWidth-v.outerWidth)*s.x+g.left),a.css(_),("content"===d||"both"===d)&&(h=h.concat(["marginTop","marginBottom"]).concat(r),l=l.concat(["marginLeft","marginRight"]),a.find("*[width]").each(function(){var i=t(this),s=t.effects.scaledDimensions(i),o={height:s.height*n.from.y,width:s.width*n.from.x,outerHeight:s.outerHeight*n.from.y,outerWidth:s.outerWidth*n.from.x},a={height:s.height*n.to.y,width:s.width*n.to.x,outerHeight:s.height*n.to.y,outerWidth:s.width*n.to.x};n.from.y!==n.to.y&&(o=t.effects.setTransition(i,h,n.from.y,o),a=t.effects.setTransition(i,h,n.to.y,a)),n.from.x!==n.to.x&&(o=t.effects.setTransition(i,l,n.from.x,o),a=t.effects.setTransition(i,l,n.to.x,a)),u&&t.effects.saveStyle(i),i.css(o),i.animate(a,e.duration,e.easing,function(){u&&t.effects.restoreStyle(i)})})),a.animate(v,{queue:!1,duration:e.duration,easing:e.easing,complete:function(){var e=a.offset();0===v.opacity&&a.css("opacity",_.opacity),u||(a.css("position","static"===f?"relative":f).offset(e),t.effects.saveStyle(a)),i()}})}),t.effects.define("scale",function(e,i){var s=t(this),n=e.mode,o=parseInt(e.percent,10)||(0===parseInt(e.percent,10)?0:"effect"!==n?0:100),a=t.extend(!0,{from:t.effects.scaledDimensions(s),to:t.effects.scaledDimensions(s,o,e.direction||"both"),origin:e.origin||["middle","center"]},e);e.fade&&(a.from.opacity=1,a.to.opacity=0),t.effects.effect.size.call(this,a,i)}),t.effects.define("puff","hide",function(e,i){var s=t.extend(!0,{},e,{fade:!0,percent:parseInt(e.percent,10)||150});t.effects.effect.scale.call(this,s,i)}),t.effects.define("pulsate","show",function(e,i){var s=t(this),n=e.mode,o="show"===n,a="hide"===n,r=o||a,h=2*(e.times||5)+(r?1:0),l=e.duration/h,c=0,u=1,d=s.queue().length;for((o||!s.is(":visible"))&&(s.css("opacity",0).show(),c=1);h>u;u++)s.animate({opacity:c},l,e.easing),c=1-c;s.animate({opacity:c},l,e.easing),s.queue(i),t.effects.unshift(s,d,h+1)}),t.effects.define("shake",function(e,i){var s=1,n=t(this),o=e.direction||"left",a=e.distance||20,r=e.times||3,h=2*r+1,l=Math.round(e.duration/h),c="up"===o||"down"===o?"top":"left",u="up"===o||"left"===o,d={},p={},f={},g=n.queue().length;for(t.effects.createPlaceholder(n),d[c]=(u?"-=":"+=")+a,p[c]=(u?"+=":"-=")+2*a,f[c]=(u?"-=":"+=")+2*a,n.animate(d,l,e.easing);r>s;s++)n.animate(p,l,e.easing).animate(f,l,e.easing);n.animate(p,l,e.easing).animate(d,l/2,e.easing).queue(i),t.effects.unshift(n,g,h+1)}),t.effects.define("slide","show",function(e,i){var s,n,o=t(this),a={up:["bottom","top"],down:["top","bottom"],left:["right","left"],right:["left","right"]},r=e.mode,h=e.direction||"left",l="up"===h||"down"===h?"top":"left",c="up"===h||"left"===h,u=e.distance||o["top"===l?"outerHeight":"outerWidth"](!0),d={};t.effects.createPlaceholder(o),s=o.cssClip(),n=o.position()[l],d[l]=(c?-1:1)*u+n,d.clip=o.cssClip(),d.clip[a[h][1]]=d.clip[a[h][0]],"show"===r&&(o.cssClip(d.clip),o.css(l,d[l]),d.clip=s,d[l]=n),o.animate(d,{queue:!1,duration:e.duration,easing:e.easing,complete:i})});var f;t.uiBackCompat!==!1&&(f=t.effects.define("transfer",function(e,i){t(this).transfer(e,i)})),t.ui.focusable=function(i,s){var n,o,a,r,h,l=i.nodeName.toLowerCase();return"area"===l?(n=i.parentNode,o=n.name,i.href&&o&&"map"===n.nodeName.toLowerCase()?(a=t("img[usemap='#"+o+"']"),a.length>0&&a.is(":visible")):!1):(/^(input|select|textarea|button|object)$/.test(l)?(r=!i.disabled,r&&(h=t(i).closest("fieldset")[0],h&&(r=!h.disabled))):r="a"===l?i.href||s:s,r&&t(i).is(":visible")&&e(t(i)))},t.extend(t.expr[":"],{focusable:function(e){return t.ui.focusable(e,null!=t.attr(e,"tabindex"))}}),t.ui.focusable,t.fn.form=function(){return"string"==typeof this[0].form?this.closest("form"):t(this[0].form)},t.ui.formResetMixin={_formResetHandler:function(){var e=t(this);setTimeout(function(){var i=e.data("ui-form-reset-instances");t.each(i,function(){this.refresh()})})},_bindFormResetHandler:function(){if(this.form=this.element.form(),this.form.length){var t=this.form.data("ui-form-reset-instances")||[];t.length||this.form.on("reset.ui-form-reset",this._formResetHandler),t.push(this),this.form.data("ui-form-reset-instances",t)}},_unbindFormResetHandler:function(){if(this.form.length){var e=this.form.data("ui-form-reset-instances");e.splice(t.inArray(this,e),1),e.length?this.form.data("ui-form-reset-instances",e):this.form.removeData("ui-form-reset-instances").off("reset.ui-form-reset")}}},"1.7"===t.fn.jquery.substring(0,3)&&(t.each(["Width","Height"],function(e,i){function s(e,i,s,o){return t.each(n,function(){i-=parseFloat(t.css(e,"padding"+this))||0,s&&(i-=parseFloat(t.css(e,"border"+this+"Width"))||0),o&&(i-=parseFloat(t.css(e,"margin"+this))||0)}),i}var n="Width"===i?["Left","Right"]:["Top","Bottom"],o=i.toLowerCase(),a={innerWidth:t.fn.innerWidth,innerHeight:t.fn.innerHeight,outerWidth:t.fn.outerWidth,outerHeight:t.fn.outerHeight};t.fn["inner"+i]=function(e){return void 0===e?a["inner"+i].call(this):this.each(function(){t(this).css(o,s(this,e)+"px")})},t.fn["outer"+i]=function(e,n){return"number"!=typeof e?a["outer"+i].call(this,e):this.each(function(){t(this).css(o,s(this,e,!0,n)+"px")})}}),t.fn.addBack=function(t){return this.add(null==t?this.prevObject:this.prevObject.filter(t))}),t.ui.keyCode={BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:38},t.ui.escapeSelector=function(){var t=/([!"#$%&'()*+,./:;<=>?@[\]^`{|}~])/g;return function(e){return e.replace(t,"\\$1")}}(),t.fn.labels=function(){var e,i,s,n,o;return this[0].labels&&this[0].labels.length?this.pushStack(this[0].labels):(n=this.eq(0).parents("label"),s=this.attr("id"),s&&(e=this.eq(0).parents().last(),o=e.add(e.length?e.siblings():this.siblings()),i="label[for='"+t.ui.escapeSelector(s)+"']",n=n.add(o.find(i).addBack(i))),this.pushStack(n))},t.fn.scrollParent=function(e){var i=this.css("position"),s="absolute"===i,n=e?/(auto|scroll|hidden)/:/(auto|scroll)/,o=this.parents().filter(function(){var e=t(this);return s&&"static"===e.css("position")?!1:n.test(e.css("overflow")+e.css("overflow-y")+e.css("overflow-x"))}).eq(0);return"fixed"!==i&&o.length?o:t(this[0].ownerDocument||document)},t.extend(t.expr[":"],{tabbable:function(e){var i=t.attr(e,"tabindex"),s=null!=i;return(!s||i>=0)&&t.ui.focusable(e,s)}}),t.fn.extend({uniqueId:function(){var t=0;return function(){return this.each(function(){this.id||(this.id="ui-id-"+ ++t)})}}(),removeUniqueId:function(){return this.each(function(){/^ui-id-\d+$/.test(this.id)&&t(this).removeAttr("id")})}}),t.widget("ui.accordion",{version:"1.12.1",options:{active:0,animate:{},classes:{"ui-accordion-header":"ui-corner-top","ui-accordion-header-collapsed":"ui-corner-all","ui-accordion-content":"ui-corner-bottom"},collapsible:!1,event:"click",header:"> li > :first-child, > :not(li):even",heightStyle:"auto",icons:{activeHeader:"ui-icon-triangle-1-s",header:"ui-icon-triangle-1-e"},activate:null,beforeActivate:null},hideProps:{borderTopWidth:"hide",borderBottomWidth:"hide",paddingTop:"hide",paddingBottom:"hide",height:"hide"},showProps:{borderTopWidth:"show",borderBottomWidth:"show",paddingTop:"show",paddingBottom:"show",height:"show"},_create:function(){var e=this.options;this.prevShow=this.prevHide=t(),this._addClass("ui-accordion","ui-widget ui-helper-reset"),this.element.attr("role","tablist"),e.collapsible||e.active!==!1&&null!=e.active||(e.active=0),this._processPanels(),0>e.active&&(e.active+=this.headers.length),this._refresh()},_getCreateEventData:function(){return{header:this.active,panel:this.active.length?this.active.next():t()}},_createIcons:function(){var e,i,s=this.options.icons;s&&(e=t("<span>"),this._addClass(e,"ui-accordion-header-icon","ui-icon "+s.header),e.prependTo(this.headers),i=this.active.children(".ui-accordion-header-icon"),this._removeClass(i,s.header)._addClass(i,null,s.activeHeader)._addClass(this.headers,"ui-accordion-icons"))},_destroyIcons:function(){this._removeClass(this.headers,"ui-accordion-icons"),this.headers.children(".ui-accordion-header-icon").remove()},_destroy:function(){var t;this.element.removeAttr("role"),this.headers.removeAttr("role aria-expanded aria-selected aria-controls tabIndex").removeUniqueId(),this._destroyIcons(),t=this.headers.next().css("display","").removeAttr("role aria-hidden aria-labelledby").removeUniqueId(),"content"!==this.options.heightStyle&&t.css("height","")},_setOption:function(t,e){return"active"===t?(this._activate(e),void 0):("event"===t&&(this.options.event&&this._off(this.headers,this.options.event),this._setupEvents(e)),this._super(t,e),"collapsible"!==t||e||this.options.active!==!1||this._activate(0),"icons"===t&&(this._destroyIcons(),e&&this._createIcons()),void 0)},_setOptionDisabled:function(t){this._super(t),this.element.attr("aria-disabled",t),this._toggleClass(null,"ui-state-disabled",!!t),this._toggleClass(this.headers.add(this.headers.next()),null,"ui-state-disabled",!!t)},_keydown:function(e){if(!e.altKey&&!e.ctrlKey){var i=t.ui.keyCode,s=this.headers.length,n=this.headers.index(e.target),o=!1;switch(e.keyCode){case i.RIGHT:case i.DOWN:o=this.headers[(n+1)%s];break;case i.LEFT:case i.UP:o=this.headers[(n-1+s)%s];break;case i.SPACE:case i.ENTER:this._eventHandler(e);break;case i.HOME:o=this.headers[0];break;case i.END:o=this.headers[s-1]}o&&(t(e.target).attr("tabIndex",-1),t(o).attr("tabIndex",0),t(o).trigger("focus"),e.preventDefault())}},_panelKeyDown:function(e){e.keyCode===t.ui.keyCode.UP&&e.ctrlKey&&t(e.currentTarget).prev().trigger("focus")},refresh:function(){var e=this.options;this._processPanels(),e.active===!1&&e.collapsible===!0||!this.headers.length?(e.active=!1,this.active=t()):e.active===!1?this._activate(0):this.active.length&&!t.contains(this.element[0],this.active[0])?this.headers.length===this.headers.find(".ui-state-disabled").length?(e.active=!1,this.active=t()):this._activate(Math.max(0,e.active-1)):e.active=this.headers.index(this.active),this._destroyIcons(),this._refresh()},_processPanels:function(){var t=this.headers,e=this.panels;this.headers=this.element.find(this.options.header),this._addClass(this.headers,"ui-accordion-header ui-accordion-header-collapsed","ui-state-default"),this.panels=this.headers.next().filter(":not(.ui-accordion-content-active)").hide(),this._addClass(this.panels,"ui-accordion-content","ui-helper-reset ui-widget-content"),e&&(this._off(t.not(this.headers)),this._off(e.not(this.panels)))},_refresh:function(){var e,i=this.options,s=i.heightStyle,n=this.element.parent();this.active=this._findActive(i.active),this._addClass(this.active,"ui-accordion-header-active","ui-state-active")._removeClass(this.active,"ui-accordion-header-collapsed"),this._addClass(this.active.next(),"ui-accordion-content-active"),this.active.next().show(),this.headers.attr("role","tab").each(function(){var e=t(this),i=e.uniqueId().attr("id"),s=e.next(),n=s.uniqueId().attr("id");e.attr("aria-controls",n),s.attr("aria-labelledby",i)}).next().attr("role","tabpanel"),this.headers.not(this.active).attr({"aria-selected":"false","aria-expanded":"false",tabIndex:-1}).next().attr({"aria-hidden":"true"}).hide(),this.active.length?this.active.attr({"aria-selected":"true","aria-expanded":"true",tabIndex:0}).next().attr({"aria-hidden":"false"}):this.headers.eq(0).attr("tabIndex",0),this._createIcons(),this._setupEvents(i.event),"fill"===s?(e=n.height(),this.element.siblings(":visible").each(function(){var i=t(this),s=i.css("position");"absolute"!==s&&"fixed"!==s&&(e-=i.outerHeight(!0))}),this.headers.each(function(){e-=t(this).outerHeight(!0)}),this.headers.next().each(function(){t(this).height(Math.max(0,e-t(this).innerHeight()+t(this).height()))}).css("overflow","auto")):"auto"===s&&(e=0,this.headers.next().each(function(){var i=t(this).is(":visible");i||t(this).show(),e=Math.max(e,t(this).css("height","").height()),i||t(this).hide()}).height(e))},_activate:function(e){var i=this._findActive(e)[0];i!==this.active[0]&&(i=i||this.active[0],this._eventHandler({target:i,currentTarget:i,preventDefault:t.noop}))},_findActive:function(e){return"number"==typeof e?this.headers.eq(e):t()},_setupEvents:function(e){var i={keydown:"_keydown"};e&&t.each(e.split(" "),function(t,e){i[e]="_eventHandler"}),this._off(this.headers.add(this.headers.next())),this._on(this.headers,i),this._on(this.headers.next(),{keydown:"_panelKeyDown"}),this._hoverable(this.headers),this._focusable(this.headers)},_eventHandler:function(e){var i,s,n=this.options,o=this.active,a=t(e.currentTarget),r=a[0]===o[0],h=r&&n.collapsible,l=h?t():a.next(),c=o.next(),u={oldHeader:o,oldPanel:c,newHeader:h?t():a,newPanel:l};e.preventDefault(),r&&!n.collapsible||this._trigger("beforeActivate",e,u)===!1||(n.active=h?!1:this.headers.index(a),this.active=r?t():a,this._toggle(u),this._removeClass(o,"ui-accordion-header-active","ui-state-active"),n.icons&&(i=o.children(".ui-accordion-header-icon"),this._removeClass(i,null,n.icons.activeHeader)._addClass(i,null,n.icons.header)),r||(this._removeClass(a,"ui-accordion-header-collapsed")._addClass(a,"ui-accordion-header-active","ui-state-active"),n.icons&&(s=a.children(".ui-accordion-header-icon"),this._removeClass(s,null,n.icons.header)._addClass(s,null,n.icons.activeHeader)),this._addClass(a.next(),"ui-accordion-content-active")))},_toggle:function(e){var i=e.newPanel,s=this.prevShow.length?this.prevShow:e.oldPanel;this.prevShow.add(this.prevHide).stop(!0,!0),this.prevShow=i,this.prevHide=s,this.options.animate?this._animate(i,s,e):(s.hide(),i.show(),this._toggleComplete(e)),s.attr({"aria-hidden":"true"}),s.prev().attr({"aria-selected":"false","aria-expanded":"false"}),i.length&&s.length?s.prev().attr({tabIndex:-1,"aria-expanded":"false"}):i.length&&this.headers.filter(function(){return 0===parseInt(t(this).attr("tabIndex"),10)}).attr("tabIndex",-1),i.attr("aria-hidden","false").prev().attr({"aria-selected":"true","aria-expanded":"true",tabIndex:0})},_animate:function(t,e,i){var s,n,o,a=this,r=0,h=t.css("box-sizing"),l=t.length&&(!e.length||t.index()<e.index()),c=this.options.animate||{},u=l&&c.down||c,d=function(){a._toggleComplete(i)};return"number"==typeof u&&(o=u),"string"==typeof u&&(n=u),n=n||u.easing||c.easing,o=o||u.duration||c.duration,e.length?t.length?(s=t.show().outerHeight(),e.animate(this.hideProps,{duration:o,easing:n,step:function(t,e){e.now=Math.round(t)}}),t.hide().animate(this.showProps,{duration:o,easing:n,complete:d,step:function(t,i){i.now=Math.round(t),"height"!==i.prop?"content-box"===h&&(r+=i.now):"content"!==a.options.heightStyle&&(i.now=Math.round(s-e.outerHeight()-r),r=0)}}),void 0):e.animate(this.hideProps,o,n,d):t.animate(this.showProps,o,n,d)},_toggleComplete:function(t){var e=t.oldPanel,i=e.prev();this._removeClass(e,"ui-accordion-content-active"),this._removeClass(i,"ui-accordion-header-active")._addClass(i,"ui-accordion-header-collapsed"),e.length&&(e.parent()[0].className=e.parent()[0].className),this._trigger("activate",null,t)}}),t.ui.safeActiveElement=function(t){var e;try{e=t.activeElement}catch(i){e=t.body}return e||(e=t.body),e.nodeName||(e=t.body),e},t.widget("ui.menu",{version:"1.12.1",defaultElement:"<ul>",delay:300,options:{icons:{submenu:"ui-icon-caret-1-e"},items:"> *",menus:"ul",position:{my:"left top",at:"right top"},role:"menu",blur:null,focus:null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.element.uniqueId().attr({role:this.options.role,tabIndex:0}),this._addClass("ui-menu","ui-widget ui-widget-content"),this._on({"mousedown .ui-menu-item":function(t){t.preventDefault()},"click .ui-menu-item":function(e){var i=t(e.target),s=t(t.ui.safeActiveElement(this.document[0]));!this.mouseHandled&&i.not(".ui-state-disabled").length&&(this.select(e),e.isPropagationStopped()||(this.mouseHandled=!0),i.has(".ui-menu").length?this.expand(e):!this.element.is(":focus")&&s.closest(".ui-menu").length&&(this.element.trigger("focus",[!0]),this.active&&1===this.active.parents(".ui-menu").length&&clearTimeout(this.timer)))},"mouseenter .ui-menu-item":function(e){if(!this.previousFilter){var i=t(e.target).closest(".ui-menu-item"),s=t(e.currentTarget);i[0]===s[0]&&(this._removeClass(s.siblings().children(".ui-state-active"),null,"ui-state-active"),this.focus(e,s))}},mouseleave:"collapseAll","mouseleave .ui-menu":"collapseAll",focus:function(t,e){var i=this.active||this.element.find(this.options.items).eq(0);e||this.focus(t,i)},blur:function(e){this._delay(function(){var i=!t.contains(this.element[0],t.ui.safeActiveElement(this.document[0]));i&&this.collapseAll(e)})},keydown:"_keydown"}),this.refresh(),this._on(this.document,{click:function(t){this._closeOnDocumentClick(t)&&this.collapseAll(t),this.mouseHandled=!1}})},_destroy:function(){var e=this.element.find(".ui-menu-item").removeAttr("role aria-disabled"),i=e.children(".ui-menu-item-wrapper").removeUniqueId().removeAttr("tabIndex role aria-haspopup");this.element.removeAttr("aria-activedescendant").find(".ui-menu").addBack().removeAttr("role aria-labelledby aria-expanded aria-hidden aria-disabled tabIndex").removeUniqueId().show(),i.children().each(function(){var e=t(this);e.data("ui-menu-submenu-caret")&&e.remove()})},_keydown:function(e){var i,s,n,o,a=!0;switch(e.keyCode){case t.ui.keyCode.PAGE_UP:this.previousPage(e);break;case t.ui.keyCode.PAGE_DOWN:this.nextPage(e);break;case t.ui.keyCode.HOME:this._move("first","first",e);break;case t.ui.keyCode.END:this._move("last","last",e);break;case t.ui.keyCode.UP:this.previous(e);break;case t.ui.keyCode.DOWN:this.next(e);break;case t.ui.keyCode.LEFT:this.collapse(e);break;case t.ui.keyCode.RIGHT:this.active&&!this.active.is(".ui-state-disabled")&&this.expand(e);break;case t.ui.keyCode.ENTER:case t.ui.keyCode.SPACE:this._activate(e);break;case t.ui.keyCode.ESCAPE:this.collapse(e);break;default:a=!1,s=this.previousFilter||"",o=!1,n=e.keyCode>=96&&105>=e.keyCode?""+(e.keyCode-96):String.fromCharCode(e.keyCode),clearTimeout(this.filterTimer),n===s?o=!0:n=s+n,i=this._filterMenuItems(n),i=o&&-1!==i.index(this.active.next())?this.active.nextAll(".ui-menu-item"):i,i.length||(n=String.fromCharCode(e.keyCode),i=this._filterMenuItems(n)),i.length?(this.focus(e,i),this.previousFilter=n,this.filterTimer=this._delay(function(){delete this.previousFilter},1e3)):delete this.previousFilter}a&&e.preventDefault()},_activate:function(t){this.active&&!this.active.is(".ui-state-disabled")&&(this.active.children("[aria-haspopup='true']").length?this.expand(t):this.select(t))},refresh:function(){var e,i,s,n,o,a=this,r=this.options.icons.submenu,h=this.element.find(this.options.menus);this._toggleClass("ui-menu-icons",null,!!this.element.find(".ui-icon").length),s=h.filter(":not(.ui-menu)").hide().attr({role:this.options.role,"aria-hidden":"true","aria-expanded":"false"}).each(function(){var e=t(this),i=e.prev(),s=t("<span>").data("ui-menu-submenu-caret",!0);a._addClass(s,"ui-menu-icon","ui-icon "+r),i.attr("aria-haspopup","true").prepend(s),e.attr("aria-labelledby",i.attr("id"))}),this._addClass(s,"ui-menu","ui-widget ui-widget-content ui-front"),e=h.add(this.element),i=e.find(this.options.items),i.not(".ui-menu-item").each(function(){var e=t(this);a._isDivider(e)&&a._addClass(e,"ui-menu-divider","ui-widget-content")}),n=i.not(".ui-menu-item, .ui-menu-divider"),o=n.children().not(".ui-menu").uniqueId().attr({tabIndex:-1,role:this._itemRole()}),this._addClass(n,"ui-menu-item")._addClass(o,"ui-menu-item-wrapper"),i.filter(".ui-state-disabled").attr("aria-disabled","true"),this.active&&!t.contains(this.element[0],this.active[0])&&this.blur()},_itemRole:function(){return{menu:"menuitem",listbox:"option"}[this.options.role]},_setOption:function(t,e){if("icons"===t){var i=this.element.find(".ui-menu-icon");this._removeClass(i,null,this.options.icons.submenu)._addClass(i,null,e.submenu)}this._super(t,e)},_setOptionDisabled:function(t){this._super(t),this.element.attr("aria-disabled",t+""),this._toggleClass(null,"ui-state-disabled",!!t)},focus:function(t,e){var i,s,n;this.blur(t,t&&"focus"===t.type),this._scrollIntoView(e),this.active=e.first(),s=this.active.children(".ui-menu-item-wrapper"),this._addClass(s,null,"ui-state-active"),this.options.role&&this.element.attr("aria-activedescendant",s.attr("id")),n=this.active.parent().closest(".ui-menu-item").children(".ui-menu-item-wrapper"),this._addClass(n,null,"ui-state-active"),t&&"keydown"===t.type?this._close():this.timer=this._delay(function(){this._close()},this.delay),i=e.children(".ui-menu"),i.length&&t&&/^mouse/.test(t.type)&&this._startOpening(i),this.activeMenu=e.parent(),this._trigger("focus",t,{item:e})},_scrollIntoView:function(e){var i,s,n,o,a,r;this._hasScroll()&&(i=parseFloat(t.css(this.activeMenu[0],"borderTopWidth"))||0,s=parseFloat(t.css(this.activeMenu[0],"paddingTop"))||0,n=e.offset().top-this.activeMenu.offset().top-i-s,o=this.activeMenu.scrollTop(),a=this.activeMenu.height(),r=e.outerHeight(),0>n?this.activeMenu.scrollTop(o+n):n+r>a&&this.activeMenu.scrollTop(o+n-a+r))},blur:function(t,e){e||clearTimeout(this.timer),this.active&&(this._removeClass(this.active.children(".ui-menu-item-wrapper"),null,"ui-state-active"),this._trigger("blur",t,{item:this.active}),this.active=null)},_startOpening:function(t){clearTimeout(this.timer),"true"===t.attr("aria-hidden")&&(this.timer=this._delay(function(){this._close(),this._open(t)},this.delay))},_open:function(e){var i=t.extend({of:this.active},this.options.position);clearTimeout(this.timer),this.element.find(".ui-menu").not(e.parents(".ui-menu")).hide().attr("aria-hidden","true"),e.show().removeAttr("aria-hidden").attr("aria-expanded","true").position(i)},collapseAll:function(e,i){clearTimeout(this.timer),this.timer=this._delay(function(){var s=i?this.element:t(e&&e.target).closest(this.element.find(".ui-menu"));s.length||(s=this.element),this._close(s),this.blur(e),this._removeClass(s.find(".ui-state-active"),null,"ui-state-active"),this.activeMenu=s},this.delay)},_close:function(t){t||(t=this.active?this.active.parent():this.element),t.find(".ui-menu").hide().attr("aria-hidden","true").attr("aria-expanded","false")},_closeOnDocumentClick:function(e){return!t(e.target).closest(".ui-menu").length},_isDivider:function(t){return!/[^\-\u2014\u2013\s]/.test(t.text())},collapse:function(t){var e=this.active&&this.active.parent().closest(".ui-menu-item",this.element);e&&e.length&&(this._close(),this.focus(t,e))},expand:function(t){var e=this.active&&this.active.children(".ui-menu ").find(this.options.items).first();e&&e.length&&(this._open(e.parent()),this._delay(function(){this.focus(t,e)}))},next:function(t){this._move("next","first",t)},previous:function(t){this._move("prev","last",t)},isFirstItem:function(){return this.active&&!this.active.prevAll(".ui-menu-item").length},isLastItem:function(){return this.active&&!this.active.nextAll(".ui-menu-item").length},_move:function(t,e,i){var s;this.active&&(s="first"===t||"last"===t?this.active["first"===t?"prevAll":"nextAll"](".ui-menu-item").eq(-1):this.active[t+"All"](".ui-menu-item").eq(0)),s&&s.length&&this.active||(s=this.activeMenu.find(this.options.items)[e]()),this.focus(i,s)},nextPage:function(e){var i,s,n;return this.active?(this.isLastItem()||(this._hasScroll()?(s=this.active.offset().top,n=this.element.height(),this.active.nextAll(".ui-menu-item").each(function(){return i=t(this),0>i.offset().top-s-n}),this.focus(e,i)):this.focus(e,this.activeMenu.find(this.options.items)[this.active?"last":"first"]())),void 0):(this.next(e),void 0)},previousPage:function(e){var i,s,n;return this.active?(this.isFirstItem()||(this._hasScroll()?(s=this.active.offset().top,n=this.element.height(),this.active.prevAll(".ui-menu-item").each(function(){return i=t(this),i.offset().top-s+n>0}),this.focus(e,i)):this.focus(e,this.activeMenu.find(this.options.items).first())),void 0):(this.next(e),void 0)},_hasScroll:function(){return this.element.outerHeight()<this.element.prop("scrollHeight")},select:function(e){this.active=this.active||t(e.target).closest(".ui-menu-item");var i={item:this.active};this.active.has(".ui-menu").length||this.collapseAll(e,!0),this._trigger("select",e,i)},_filterMenuItems:function(e){var i=e.replace(/[\-\[\]{}()*+?.,\\\^$|#\s]/g,"\\$&"),s=RegExp("^"+i,"i");return this.activeMenu.find(this.options.items).filter(".ui-menu-item").filter(function(){return s.test(t.trim(t(this).children(".ui-menu-item-wrapper").text()))})}}),t.widget("ui.autocomplete",{version:"1.12.1",defaultElement:"<input>",options:{appendTo:null,autoFocus:!1,delay:300,minLength:1,position:{my:"left top",at:"left bottom",collision:"none"},source:null,change:null,close:null,focus:null,open:null,response:null,search:null,select:null},requestIndex:0,pending:0,_create:function(){var e,i,s,n=this.element[0].nodeName.toLowerCase(),o="textarea"===n,a="input"===n;
-this.isMultiLine=o||!a&&this._isContentEditable(this.element),this.valueMethod=this.element[o||a?"val":"text"],this.isNewMenu=!0,this._addClass("ui-autocomplete-input"),this.element.attr("autocomplete","off"),this._on(this.element,{keydown:function(n){if(this.element.prop("readOnly"))return e=!0,s=!0,i=!0,void 0;e=!1,s=!1,i=!1;var o=t.ui.keyCode;switch(n.keyCode){case o.PAGE_UP:e=!0,this._move("previousPage",n);break;case o.PAGE_DOWN:e=!0,this._move("nextPage",n);break;case o.UP:e=!0,this._keyEvent("previous",n);break;case o.DOWN:e=!0,this._keyEvent("next",n);break;case o.ENTER:this.menu.active&&(e=!0,n.preventDefault(),this.menu.select(n));break;case o.TAB:this.menu.active&&this.menu.select(n);break;case o.ESCAPE:this.menu.element.is(":visible")&&(this.isMultiLine||this._value(this.term),this.close(n),n.preventDefault());break;default:i=!0,this._searchTimeout(n)}},keypress:function(s){if(e)return e=!1,(!this.isMultiLine||this.menu.element.is(":visible"))&&s.preventDefault(),void 0;if(!i){var n=t.ui.keyCode;switch(s.keyCode){case n.PAGE_UP:this._move("previousPage",s);break;case n.PAGE_DOWN:this._move("nextPage",s);break;case n.UP:this._keyEvent("previous",s);break;case n.DOWN:this._keyEvent("next",s)}}},input:function(t){return s?(s=!1,t.preventDefault(),void 0):(this._searchTimeout(t),void 0)},focus:function(){this.selectedItem=null,this.previous=this._value()},blur:function(t){return this.cancelBlur?(delete this.cancelBlur,void 0):(clearTimeout(this.searching),this.close(t),this._change(t),void 0)}}),this._initSource(),this.menu=t("<ul>").appendTo(this._appendTo()).menu({role:null}).hide().menu("instance"),this._addClass(this.menu.element,"ui-autocomplete","ui-front"),this._on(this.menu.element,{mousedown:function(e){e.preventDefault(),this.cancelBlur=!0,this._delay(function(){delete this.cancelBlur,this.element[0]!==t.ui.safeActiveElement(this.document[0])&&this.element.trigger("focus")})},menufocus:function(e,i){var s,n;return this.isNewMenu&&(this.isNewMenu=!1,e.originalEvent&&/^mouse/.test(e.originalEvent.type))?(this.menu.blur(),this.document.one("mousemove",function(){t(e.target).trigger(e.originalEvent)}),void 0):(n=i.item.data("ui-autocomplete-item"),!1!==this._trigger("focus",e,{item:n})&&e.originalEvent&&/^key/.test(e.originalEvent.type)&&this._value(n.value),s=i.item.attr("aria-label")||n.value,s&&t.trim(s).length&&(this.liveRegion.children().hide(),t("<div>").text(s).appendTo(this.liveRegion)),void 0)},menuselect:function(e,i){var s=i.item.data("ui-autocomplete-item"),n=this.previous;this.element[0]!==t.ui.safeActiveElement(this.document[0])&&(this.element.trigger("focus"),this.previous=n,this._delay(function(){this.previous=n,this.selectedItem=s})),!1!==this._trigger("select",e,{item:s})&&this._value(s.value),this.term=this._value(),this.close(e),this.selectedItem=s}}),this.liveRegion=t("<div>",{role:"status","aria-live":"assertive","aria-relevant":"additions"}).appendTo(this.document[0].body),this._addClass(this.liveRegion,null,"ui-helper-hidden-accessible"),this._on(this.window,{beforeunload:function(){this.element.removeAttr("autocomplete")}})},_destroy:function(){clearTimeout(this.searching),this.element.removeAttr("autocomplete"),this.menu.element.remove(),this.liveRegion.remove()},_setOption:function(t,e){this._super(t,e),"source"===t&&this._initSource(),"appendTo"===t&&this.menu.element.appendTo(this._appendTo()),"disabled"===t&&e&&this.xhr&&this.xhr.abort()},_isEventTargetInWidget:function(e){var i=this.menu.element[0];return e.target===this.element[0]||e.target===i||t.contains(i,e.target)},_closeOnClickOutside:function(t){this._isEventTargetInWidget(t)||this.close()},_appendTo:function(){var e=this.options.appendTo;return e&&(e=e.jquery||e.nodeType?t(e):this.document.find(e).eq(0)),e&&e[0]||(e=this.element.closest(".ui-front, dialog")),e.length||(e=this.document[0].body),e},_initSource:function(){var e,i,s=this;t.isArray(this.options.source)?(e=this.options.source,this.source=function(i,s){s(t.ui.autocomplete.filter(e,i.term))}):"string"==typeof this.options.source?(i=this.options.source,this.source=function(e,n){s.xhr&&s.xhr.abort(),s.xhr=t.ajax({url:i,data:e,dataType:"json",success:function(t){n(t)},error:function(){n([])}})}):this.source=this.options.source},_searchTimeout:function(t){clearTimeout(this.searching),this.searching=this._delay(function(){var e=this.term===this._value(),i=this.menu.element.is(":visible"),s=t.altKey||t.ctrlKey||t.metaKey||t.shiftKey;(!e||e&&!i&&!s)&&(this.selectedItem=null,this.search(null,t))},this.options.delay)},search:function(t,e){return t=null!=t?t:this._value(),this.term=this._value(),t.length<this.options.minLength?this.close(e):this._trigger("search",e)!==!1?this._search(t):void 0},_search:function(t){this.pending++,this._addClass("ui-autocomplete-loading"),this.cancelSearch=!1,this.source({term:t},this._response())},_response:function(){var e=++this.requestIndex;return t.proxy(function(t){e===this.requestIndex&&this.__response(t),this.pending--,this.pending||this._removeClass("ui-autocomplete-loading")},this)},__response:function(t){t&&(t=this._normalize(t)),this._trigger("response",null,{content:t}),!this.options.disabled&&t&&t.length&&!this.cancelSearch?(this._suggest(t),this._trigger("open")):this._close()},close:function(t){this.cancelSearch=!0,this._close(t)},_close:function(t){this._off(this.document,"mousedown"),this.menu.element.is(":visible")&&(this.menu.element.hide(),this.menu.blur(),this.isNewMenu=!0,this._trigger("close",t))},_change:function(t){this.previous!==this._value()&&this._trigger("change",t,{item:this.selectedItem})},_normalize:function(e){return e.length&&e[0].label&&e[0].value?e:t.map(e,function(e){return"string"==typeof e?{label:e,value:e}:t.extend({},e,{label:e.label||e.value,value:e.value||e.label})})},_suggest:function(e){var i=this.menu.element.empty();this._renderMenu(i,e),this.isNewMenu=!0,this.menu.refresh(),i.show(),this._resizeMenu(),i.position(t.extend({of:this.element},this.options.position)),this.options.autoFocus&&this.menu.next(),this._on(this.document,{mousedown:"_closeOnClickOutside"})},_resizeMenu:function(){var t=this.menu.element;t.outerWidth(Math.max(t.width("").outerWidth()+1,this.element.outerWidth()))},_renderMenu:function(e,i){var s=this;t.each(i,function(t,i){s._renderItemData(e,i)})},_renderItemData:function(t,e){return this._renderItem(t,e).data("ui-autocomplete-item",e)},_renderItem:function(e,i){return t("<li>").append(t("<div>").text(i.label)).appendTo(e)},_move:function(t,e){return this.menu.element.is(":visible")?this.menu.isFirstItem()&&/^previous/.test(t)||this.menu.isLastItem()&&/^next/.test(t)?(this.isMultiLine||this._value(this.term),this.menu.blur(),void 0):(this.menu[t](e),void 0):(this.search(null,e),void 0)},widget:function(){return this.menu.element},_value:function(){return this.valueMethod.apply(this.element,arguments)},_keyEvent:function(t,e){(!this.isMultiLine||this.menu.element.is(":visible"))&&(this._move(t,e),e.preventDefault())},_isContentEditable:function(t){if(!t.length)return!1;var e=t.prop("contentEditable");return"inherit"===e?this._isContentEditable(t.parent()):"true"===e}}),t.extend(t.ui.autocomplete,{escapeRegex:function(t){return t.replace(/[\-\[\]{}()*+?.,\\\^$|#\s]/g,"\\$&")},filter:function(e,i){var s=RegExp(t.ui.autocomplete.escapeRegex(i),"i");return t.grep(e,function(t){return s.test(t.label||t.value||t)})}}),t.widget("ui.autocomplete",t.ui.autocomplete,{options:{messages:{noResults:"No search results.",results:function(t){return t+(t>1?" results are":" result is")+" available, use up and down arrow keys to navigate."}}},__response:function(e){var i;this._superApply(arguments),this.options.disabled||this.cancelSearch||(i=e&&e.length?this.options.messages.results(e.length):this.options.messages.noResults,this.liveRegion.children().hide(),t("<div>").text(i).appendTo(this.liveRegion))}}),t.ui.autocomplete;var g=/ui-corner-([a-z]){2,6}/g;t.widget("ui.controlgroup",{version:"1.12.1",defaultElement:"<div>",options:{direction:"horizontal",disabled:null,onlyVisible:!0,items:{button:"input[type=button], input[type=submit], input[type=reset], button, a",controlgroupLabel:".ui-controlgroup-label",checkboxradio:"input[type='checkbox'], input[type='radio']",selectmenu:"select",spinner:".ui-spinner-input"}},_create:function(){this._enhance()},_enhance:function(){this.element.attr("role","toolbar"),this.refresh()},_destroy:function(){this._callChildMethod("destroy"),this.childWidgets.removeData("ui-controlgroup-data"),this.element.removeAttr("role"),this.options.items.controlgroupLabel&&this.element.find(this.options.items.controlgroupLabel).find(".ui-controlgroup-label-contents").contents().unwrap()},_initWidgets:function(){var e=this,i=[];t.each(this.options.items,function(s,n){var o,a={};return n?"controlgroupLabel"===s?(o=e.element.find(n),o.each(function(){var e=t(this);e.children(".ui-controlgroup-label-contents").length||e.contents().wrapAll("<span class='ui-controlgroup-label-contents'></span>")}),e._addClass(o,null,"ui-widget ui-widget-content ui-state-default"),i=i.concat(o.get()),void 0):(t.fn[s]&&(a=e["_"+s+"Options"]?e["_"+s+"Options"]("middle"):{classes:{}},e.element.find(n).each(function(){var n=t(this),o=n[s]("instance"),r=t.widget.extend({},a);if("button"!==s||!n.parent(".ui-spinner").length){o||(o=n[s]()[s]("instance")),o&&(r.classes=e._resolveClassesValues(r.classes,o)),n[s](r);var h=n[s]("widget");t.data(h[0],"ui-controlgroup-data",o?o:n[s]("instance")),i.push(h[0])}})),void 0):void 0}),this.childWidgets=t(t.unique(i)),this._addClass(this.childWidgets,"ui-controlgroup-item")},_callChildMethod:function(e){this.childWidgets.each(function(){var i=t(this),s=i.data("ui-controlgroup-data");s&&s[e]&&s[e]()})},_updateCornerClass:function(t,e){var i="ui-corner-top ui-corner-bottom ui-corner-left ui-corner-right ui-corner-all",s=this._buildSimpleOptions(e,"label").classes.label;this._removeClass(t,null,i),this._addClass(t,null,s)},_buildSimpleOptions:function(t,e){var i="vertical"===this.options.direction,s={classes:{}};return s.classes[e]={middle:"",first:"ui-corner-"+(i?"top":"left"),last:"ui-corner-"+(i?"bottom":"right"),only:"ui-corner-all"}[t],s},_spinnerOptions:function(t){var e=this._buildSimpleOptions(t,"ui-spinner");return e.classes["ui-spinner-up"]="",e.classes["ui-spinner-down"]="",e},_buttonOptions:function(t){return this._buildSimpleOptions(t,"ui-button")},_checkboxradioOptions:function(t){return this._buildSimpleOptions(t,"ui-checkboxradio-label")},_selectmenuOptions:function(t){var e="vertical"===this.options.direction;return{width:e?"auto":!1,classes:{middle:{"ui-selectmenu-button-open":"","ui-selectmenu-button-closed":""},first:{"ui-selectmenu-button-open":"ui-corner-"+(e?"top":"tl"),"ui-selectmenu-button-closed":"ui-corner-"+(e?"top":"left")},last:{"ui-selectmenu-button-open":e?"":"ui-corner-tr","ui-selectmenu-button-closed":"ui-corner-"+(e?"bottom":"right")},only:{"ui-selectmenu-button-open":"ui-corner-top","ui-selectmenu-button-closed":"ui-corner-all"}}[t]}},_resolveClassesValues:function(e,i){var s={};return t.each(e,function(n){var o=i.options.classes[n]||"";o=t.trim(o.replace(g,"")),s[n]=(o+" "+e[n]).replace(/\s+/g," ")}),s},_setOption:function(t,e){return"direction"===t&&this._removeClass("ui-controlgroup-"+this.options.direction),this._super(t,e),"disabled"===t?(this._callChildMethod(e?"disable":"enable"),void 0):(this.refresh(),void 0)},refresh:function(){var e,i=this;this._addClass("ui-controlgroup ui-controlgroup-"+this.options.direction),"horizontal"===this.options.direction&&this._addClass(null,"ui-helper-clearfix"),this._initWidgets(),e=this.childWidgets,this.options.onlyVisible&&(e=e.filter(":visible")),e.length&&(t.each(["first","last"],function(t,s){var n=e[s]().data("ui-controlgroup-data");if(n&&i["_"+n.widgetName+"Options"]){var o=i["_"+n.widgetName+"Options"](1===e.length?"only":s);o.classes=i._resolveClassesValues(o.classes,n),n.element[n.widgetName](o)}else i._updateCornerClass(e[s](),s)}),this._callChildMethod("refresh"))}}),t.widget("ui.checkboxradio",[t.ui.formResetMixin,{version:"1.12.1",options:{disabled:null,label:null,icon:!0,classes:{"ui-checkboxradio-label":"ui-corner-all","ui-checkboxradio-icon":"ui-corner-all"}},_getCreateOptions:function(){var e,i,s=this,n=this._super()||{};return this._readType(),i=this.element.labels(),this.label=t(i[i.length-1]),this.label.length||t.error("No label found for checkboxradio widget"),this.originalLabel="",this.label.contents().not(this.element[0]).each(function(){s.originalLabel+=3===this.nodeType?t(this).text():this.outerHTML}),this.originalLabel&&(n.label=this.originalLabel),e=this.element[0].disabled,null!=e&&(n.disabled=e),n},_create:function(){var t=this.element[0].checked;this._bindFormResetHandler(),null==this.options.disabled&&(this.options.disabled=this.element[0].disabled),this._setOption("disabled",this.options.disabled),this._addClass("ui-checkboxradio","ui-helper-hidden-accessible"),this._addClass(this.label,"ui-checkboxradio-label","ui-button ui-widget"),"radio"===this.type&&this._addClass(this.label,"ui-checkboxradio-radio-label"),this.options.label&&this.options.label!==this.originalLabel?this._updateLabel():this.originalLabel&&(this.options.label=this.originalLabel),this._enhance(),t&&(this._addClass(this.label,"ui-checkboxradio-checked","ui-state-active"),this.icon&&this._addClass(this.icon,null,"ui-state-hover")),this._on({change:"_toggleClasses",focus:function(){this._addClass(this.label,null,"ui-state-focus ui-visual-focus")},blur:function(){this._removeClass(this.label,null,"ui-state-focus ui-visual-focus")}})},_readType:function(){var e=this.element[0].nodeName.toLowerCase();this.type=this.element[0].type,"input"===e&&/radio|checkbox/.test(this.type)||t.error("Can't create checkboxradio on element.nodeName="+e+" and element.type="+this.type)},_enhance:function(){this._updateIcon(this.element[0].checked)},widget:function(){return this.label},_getRadioGroup:function(){var e,i=this.element[0].name,s="input[name='"+t.ui.escapeSelector(i)+"']";return i?(e=this.form.length?t(this.form[0].elements).filter(s):t(s).filter(function(){return 0===t(this).form().length}),e.not(this.element)):t([])},_toggleClasses:function(){var e=this.element[0].checked;this._toggleClass(this.label,"ui-checkboxradio-checked","ui-state-active",e),this.options.icon&&"checkbox"===this.type&&this._toggleClass(this.icon,null,"ui-icon-check ui-state-checked",e)._toggleClass(this.icon,null,"ui-icon-blank",!e),"radio"===this.type&&this._getRadioGroup().each(function(){var e=t(this).checkboxradio("instance");e&&e._removeClass(e.label,"ui-checkboxradio-checked","ui-state-active")})},_destroy:function(){this._unbindFormResetHandler(),this.icon&&(this.icon.remove(),this.iconSpace.remove())},_setOption:function(t,e){return"label"!==t||e?(this._super(t,e),"disabled"===t?(this._toggleClass(this.label,null,"ui-state-disabled",e),this.element[0].disabled=e,void 0):(this.refresh(),void 0)):void 0},_updateIcon:function(e){var i="ui-icon ui-icon-background ";this.options.icon?(this.icon||(this.icon=t("<span>"),this.iconSpace=t("<span> </span>"),this._addClass(this.iconSpace,"ui-checkboxradio-icon-space")),"checkbox"===this.type?(i+=e?"ui-icon-check ui-state-checked":"ui-icon-blank",this._removeClass(this.icon,null,e?"ui-icon-blank":"ui-icon-check")):i+="ui-icon-blank",this._addClass(this.icon,"ui-checkboxradio-icon",i),e||this._removeClass(this.icon,null,"ui-icon-check ui-state-checked"),this.icon.prependTo(this.label).after(this.iconSpace)):void 0!==this.icon&&(this.icon.remove(),this.iconSpace.remove(),delete this.icon)},_updateLabel:function(){var t=this.label.contents().not(this.element[0]);this.icon&&(t=t.not(this.icon[0])),this.iconSpace&&(t=t.not(this.iconSpace[0])),t.remove(),this.label.append(this.options.label)},refresh:function(){var t=this.element[0].checked,e=this.element[0].disabled;this._updateIcon(t),this._toggleClass(this.label,"ui-checkboxradio-checked","ui-state-active",t),null!==this.options.label&&this._updateLabel(),e!==this.options.disabled&&this._setOptions({disabled:e})}}]),t.ui.checkboxradio,t.widget("ui.button",{version:"1.12.1",defaultElement:"<button>",options:{classes:{"ui-button":"ui-corner-all"},disabled:null,icon:null,iconPosition:"beginning",label:null,showLabel:!0},_getCreateOptions:function(){var t,e=this._super()||{};return this.isInput=this.element.is("input"),t=this.element[0].disabled,null!=t&&(e.disabled=t),this.originalLabel=this.isInput?this.element.val():this.element.html(),this.originalLabel&&(e.label=this.originalLabel),e},_create:function(){!this.option.showLabel&!this.options.icon&&(this.options.showLabel=!0),null==this.options.disabled&&(this.options.disabled=this.element[0].disabled||!1),this.hasTitle=!!this.element.attr("title"),this.options.label&&this.options.label!==this.originalLabel&&(this.isInput?this.element.val(this.options.label):this.element.html(this.options.label)),this._addClass("ui-button","ui-widget"),this._setOption("disabled",this.options.disabled),this._enhance(),this.element.is("a")&&this._on({keyup:function(e){e.keyCode===t.ui.keyCode.SPACE&&(e.preventDefault(),this.element[0].click?this.element[0].click():this.element.trigger("click"))}})},_enhance:function(){this.element.is("button")||this.element.attr("role","button"),this.options.icon&&(this._updateIcon("icon",this.options.icon),this._updateTooltip())},_updateTooltip:function(){this.title=this.element.attr("title"),this.options.showLabel||this.title||this.element.attr("title",this.options.label)},_updateIcon:function(e,i){var s="iconPosition"!==e,n=s?this.options.iconPosition:i,o="top"===n||"bottom"===n;this.icon?s&&this._removeClass(this.icon,null,this.options.icon):(this.icon=t("<span>"),this._addClass(this.icon,"ui-button-icon","ui-icon"),this.options.showLabel||this._addClass("ui-button-icon-only")),s&&this._addClass(this.icon,null,i),this._attachIcon(n),o?(this._addClass(this.icon,null,"ui-widget-icon-block"),this.iconSpace&&this.iconSpace.remove()):(this.iconSpace||(this.iconSpace=t("<span> </span>"),this._addClass(this.iconSpace,"ui-button-icon-space")),this._removeClass(this.icon,null,"ui-wiget-icon-block"),this._attachIconSpace(n))},_destroy:function(){this.element.removeAttr("role"),this.icon&&this.icon.remove(),this.iconSpace&&this.iconSpace.remove(),this.hasTitle||this.element.removeAttr("title")},_attachIconSpace:function(t){this.icon[/^(?:end|bottom)/.test(t)?"before":"after"](this.iconSpace)},_attachIcon:function(t){this.element[/^(?:end|bottom)/.test(t)?"append":"prepend"](this.icon)},_setOptions:function(t){var e=void 0===t.showLabel?this.options.showLabel:t.showLabel,i=void 0===t.icon?this.options.icon:t.icon;e||i||(t.showLabel=!0),this._super(t)},_setOption:function(t,e){"icon"===t&&(e?this._updateIcon(t,e):this.icon&&(this.icon.remove(),this.iconSpace&&this.iconSpace.remove())),"iconPosition"===t&&this._updateIcon(t,e),"showLabel"===t&&(this._toggleClass("ui-button-icon-only",null,!e),this._updateTooltip()),"label"===t&&(this.isInput?this.element.val(e):(this.element.html(e),this.icon&&(this._attachIcon(this.options.iconPosition),this._attachIconSpace(this.options.iconPosition)))),this._super(t,e),"disabled"===t&&(this._toggleClass(null,"ui-state-disabled",e),this.element[0].disabled=e,e&&this.element.blur())},refresh:function(){var t=this.element.is("input, button")?this.element[0].disabled:this.element.hasClass("ui-button-disabled");t!==this.options.disabled&&this._setOptions({disabled:t}),this._updateTooltip()}}),t.uiBackCompat!==!1&&(t.widget("ui.button",t.ui.button,{options:{text:!0,icons:{primary:null,secondary:null}},_create:function(){this.options.showLabel&&!this.options.text&&(this.options.showLabel=this.options.text),!this.options.showLabel&&this.options.text&&(this.options.text=this.options.showLabel),this.options.icon||!this.options.icons.primary&&!this.options.icons.secondary?this.options.icon&&(this.options.icons.primary=this.options.icon):this.options.icons.primary?this.options.icon=this.options.icons.primary:(this.options.icon=this.options.icons.secondary,this.options.iconPosition="end"),this._super()},_setOption:function(t,e){return"text"===t?(this._super("showLabel",e),void 0):("showLabel"===t&&(this.options.text=e),"icon"===t&&(this.options.icons.primary=e),"icons"===t&&(e.primary?(this._super("icon",e.primary),this._super("iconPosition","beginning")):e.secondary&&(this._super("icon",e.secondary),this._super("iconPosition","end"))),this._superApply(arguments),void 0)}}),t.fn.button=function(e){return function(){return!this.length||this.length&&"INPUT"!==this[0].tagName||this.length&&"INPUT"===this[0].tagName&&"checkbox"!==this.attr("type")&&"radio"!==this.attr("type")?e.apply(this,arguments):(t.ui.checkboxradio||t.error("Checkboxradio widget missing"),0===arguments.length?this.checkboxradio({icon:!1}):this.checkboxradio.apply(this,arguments))}}(t.fn.button),t.fn.buttonset=function(){return t.ui.controlgroup||t.error("Controlgroup widget missing"),"option"===arguments[0]&&"items"===arguments[1]&&arguments[2]?this.controlgroup.apply(this,[arguments[0],"items.button",arguments[2]]):"option"===arguments[0]&&"items"===arguments[1]?this.controlgroup.apply(this,[arguments[0],"items.button"]):("object"==typeof arguments[0]&&arguments[0].items&&(arguments[0].items={button:arguments[0].items}),this.controlgroup.apply(this,arguments))}),t.ui.button,t.extend(t.ui,{datepicker:{version:"1.12.1"}});var m;t.extend(s.prototype,{markerClassName:"hasDatepicker",maxRows:4,_widgetDatepicker:function(){return this.dpDiv},setDefaults:function(t){return a(this._defaults,t||{}),this},_attachDatepicker:function(e,i){var s,n,o;s=e.nodeName.toLowerCase(),n="div"===s||"span"===s,e.id||(this.uuid+=1,e.id="dp"+this.uuid),o=this._newInst(t(e),n),o.settings=t.extend({},i||{}),"input"===s?this._connectDatepicker(e,o):n&&this._inlineDatepicker(e,o)},_newInst:function(e,i){var s=e[0].id.replace(/([^A-Za-z0-9_\-])/g,"\\\\$1");return{id:s,input:e,selectedDay:0,selectedMonth:0,selectedYear:0,drawMonth:0,drawYear:0,inline:i,dpDiv:i?n(t("<div class='"+this._inlineClass+" ui-datepicker ui-widget ui-widget-content ui-helper-clearfix ui-corner-all'></div>")):this.dpDiv}},_connectDatepicker:function(e,i){var s=t(e);i.append=t([]),i.trigger=t([]),s.hasClass(this.markerClassName)||(this._attachments(s,i),s.addClass(this.markerClassName).on("keydown",this._doKeyDown).on("keypress",this._doKeyPress).on("keyup",this._doKeyUp),this._autoSize(i),t.data(e,"datepicker",i),i.settings.disabled&&this._disableDatepicker(e))},_attachments:function(e,i){var s,n,o,a=this._get(i,"appendText"),r=this._get(i,"isRTL");i.append&&i.append.remove(),a&&(i.append=t("<span class='"+this._appendClass+"'>"+a+"</span>"),e[r?"before":"after"](i.append)),e.off("focus",this._showDatepicker),i.trigger&&i.trigger.remove(),s=this._get(i,"showOn"),("focus"===s||"both"===s)&&e.on("focus",this._showDatepicker),("button"===s||"both"===s)&&(n=this._get(i,"buttonText"),o=this._get(i,"buttonImage"),i.trigger=t(this._get(i,"buttonImageOnly")?t("<img/>").addClass(this._triggerClass).attr({src:o,alt:n,title:n}):t("<button type='button'></button>").addClass(this._triggerClass).html(o?t("<img/>").attr({src:o,alt:n,title:n}):n)),e[r?"before":"after"](i.trigger),i.trigger.on("click",function(){return t.datepicker._datepickerShowing&&t.datepicker._lastInput===e[0]?t.datepicker._hideDatepicker():t.datepicker._datepickerShowing&&t.datepicker._lastInput!==e[0]?(t.datepicker._hideDatepicker(),t.datepicker._showDatepicker(e[0])):t.datepicker._showDatepicker(e[0]),!1}))},_autoSize:function(t){if(this._get(t,"autoSize")&&!t.inline){var e,i,s,n,o=new Date(2009,11,20),a=this._get(t,"dateFormat");a.match(/[DM]/)&&(e=function(t){for(i=0,s=0,n=0;t.length>n;n++)t[n].length>i&&(i=t[n].length,s=n);return s},o.setMonth(e(this._get(t,a.match(/MM/)?"monthNames":"monthNamesShort"))),o.setDate(e(this._get(t,a.match(/DD/)?"dayNames":"dayNamesShort"))+20-o.getDay())),t.input.attr("size",this._formatDate(t,o).length)}},_inlineDatepicker:function(e,i){var s=t(e);s.hasClass(this.markerClassName)||(s.addClass(this.markerClassName).append(i.dpDiv),t.data(e,"datepicker",i),this._setDate(i,this._getDefaultDate(i),!0),this._updateDatepicker(i),this._updateAlternate(i),i.settings.disabled&&this._disableDatepicker(e),i.dpDiv.css("display","block"))},_dialogDatepicker:function(e,i,s,n,o){var r,h,l,c,u,d=this._dialogInst;return d||(this.uuid+=1,r="dp"+this.uuid,this._dialogInput=t("<input type='text' id='"+r+"' style='position: absolute; top: -100px; width: 0px;'/>"),this._dialogInput.on("keydown",this._doKeyDown),t("body").append(this._dialogInput),d=this._dialogInst=this._newInst(this._dialogInput,!1),d.settings={},t.data(this._dialogInput[0],"datepicker",d)),a(d.settings,n||{}),i=i&&i.constructor===Date?this._formatDate(d,i):i,this._dialogInput.val(i),this._pos=o?o.length?o:[o.pageX,o.pageY]:null,this._pos||(h=document.documentElement.clientWidth,l=document.documentElement.clientHeight,c=document.documentElement.scrollLeft||document.body.scrollLeft,u=document.documentElement.scrollTop||document.body.scrollTop,this._pos=[h/2-100+c,l/2-150+u]),this._dialogInput.css("left",this._pos[0]+20+"px").css("top",this._pos[1]+"px"),d.settings.onSelect=s,this._inDialog=!0,this.dpDiv.addClass(this._dialogClass),this._showDatepicker(this._dialogInput[0]),t.blockUI&&t.blockUI(this.dpDiv),t.data(this._dialogInput[0],"datepicker",d),this},_destroyDatepicker:function(e){var i,s=t(e),n=t.data(e,"datepicker");s.hasClass(this.markerClassName)&&(i=e.nodeName.toLowerCase(),t.removeData(e,"datepicker"),"input"===i?(n.append.remove(),n.trigger.remove(),s.removeClass(this.markerClassName).off("focus",this._showDatepicker).off("keydown",this._doKeyDown).off("keypress",this._doKeyPress).off("keyup",this._doKeyUp)):("div"===i||"span"===i)&&s.removeClass(this.markerClassName).empty(),m===n&&(m=null))},_enableDatepicker:function(e){var i,s,n=t(e),o=t.data(e,"datepicker");n.hasClass(this.markerClassName)&&(i=e.nodeName.toLowerCase(),"input"===i?(e.disabled=!1,o.trigger.filter("button").each(function(){this.disabled=!1}).end().filter("img").css({opacity:"1.0",cursor:""})):("div"===i||"span"===i)&&(s=n.children("."+this._inlineClass),s.children().removeClass("ui-state-disabled"),s.find("select.ui-datepicker-month, select.ui-datepicker-year").prop("disabled",!1)),this._disabledInputs=t.map(this._disabledInputs,function(t){return t===e?null:t}))},_disableDatepicker:function(e){var i,s,n=t(e),o=t.data(e,"datepicker");n.hasClass(this.markerClassName)&&(i=e.nodeName.toLowerCase(),"input"===i?(e.disabled=!0,o.trigger.filter("button").each(function(){this.disabled=!0}).end().filter("img").css({opacity:"0.5",cursor:"default"})):("div"===i||"span"===i)&&(s=n.children("."+this._inlineClass),s.children().addClass("ui-state-disabled"),s.find("select.ui-datepicker-month, select.ui-datepicker-year").prop("disabled",!0)),this._disabledInputs=t.map(this._disabledInputs,function(t){return t===e?null:t}),this._disabledInputs[this._disabledInputs.length]=e)},_isDisabledDatepicker:function(t){if(!t)return!1;for(var e=0;this._disabledInputs.length>e;e++)if(this._disabledInputs[e]===t)return!0;return!1},_getInst:function(e){try{return t.data(e,"datepicker")}catch(i){throw"Missing instance data for this datepicker"}},_optionDatepicker:function(e,i,s){var n,o,r,h,l=this._getInst(e);return 2===arguments.length&&"string"==typeof i?"defaults"===i?t.extend({},t.datepicker._defaults):l?"all"===i?t.extend({},l.settings):this._get(l,i):null:(n=i||{},"string"==typeof i&&(n={},n[i]=s),l&&(this._curInst===l&&this._hideDatepicker(),o=this._getDateDatepicker(e,!0),r=this._getMinMaxDate(l,"min"),h=this._getMinMaxDate(l,"max"),a(l.settings,n),null!==r&&void 0!==n.dateFormat&&void 0===n.minDate&&(l.settings.minDate=this._formatDate(l,r)),null!==h&&void 0!==n.dateFormat&&void 0===n.maxDate&&(l.settings.maxDate=this._formatDate(l,h)),"disabled"in n&&(n.disabled?this._disableDatepicker(e):this._enableDatepicker(e)),this._attachments(t(e),l),this._autoSize(l),this._setDate(l,o),this._updateAlternate(l),this._updateDatepicker(l)),void 0)},_changeDatepicker:function(t,e,i){this._optionDatepicker(t,e,i)},_refreshDatepicker:function(t){var e=this._getInst(t);e&&this._updateDatepicker(e)},_setDateDatepicker:function(t,e){var i=this._getInst(t);i&&(this._setDate(i,e),this._updateDatepicker(i),this._updateAlternate(i))},_getDateDatepicker:function(t,e){var i=this._getInst(t);return i&&!i.inline&&this._setDateFromField(i,e),i?this._getDate(i):null},_doKeyDown:function(e){var i,s,n,o=t.datepicker._getInst(e.target),a=!0,r=o.dpDiv.is(".ui-datepicker-rtl");if(o._keyEvent=!0,t.datepicker._datepickerShowing)switch(e.keyCode){case 9:t.datepicker._hideDatepicker(),a=!1;break;case 13:return n=t("td."+t.datepicker._dayOverClass+":not(."+t.datepicker._currentClass+")",o.dpDiv),n[0]&&t.datepicker._selectDay(e.target,o.selectedMonth,o.selectedYear,n[0]),i=t.datepicker._get(o,"onSelect"),i?(s=t.datepicker._formatDate(o),i.apply(o.input?o.input[0]:null,[s,o])):t.datepicker._hideDatepicker(),!1;case 27:t.datepicker._hideDatepicker();break;case 33:t.datepicker._adjustDate(e.target,e.ctrlKey?-t.datepicker._get(o,"stepBigMonths"):-t.datepicker._get(o,"stepMonths"),"M");break;case 34:t.datepicker._adjustDate(e.target,e.ctrlKey?+t.datepicker._get(o,"stepBigMonths"):+t.datepicker._get(o,"stepMonths"),"M");break;case 35:(e.ctrlKey||e.metaKey)&&t.datepicker._clearDate(e.target),a=e.ctrlKey||e.metaKey;break;case 36:(e.ctrlKey||e.metaKey)&&t.datepicker._gotoToday(e.target),a=e.ctrlKey||e.metaKey;break;case 37:(e.ctrlKey||e.metaKey)&&t.datepicker._adjustDate(e.target,r?1:-1,"D"),a=e.ctrlKey||e.metaKey,e.originalEvent.altKey&&t.datepicker._adjustDate(e.target,e.ctrlKey?-t.datepicker._get(o,"stepBigMonths"):-t.datepicker._get(o,"stepMonths"),"M");break;case 38:(e.ctrlKey||e.metaKey)&&t.datepicker._adjustDate(e.target,-7,"D"),a=e.ctrlKey||e.metaKey;break;case 39:(e.ctrlKey||e.metaKey)&&t.datepicker._adjustDate(e.target,r?-1:1,"D"),a=e.ctrlKey||e.metaKey,e.originalEvent.altKey&&t.datepicker._adjustDate(e.target,e.ctrlKey?+t.datepicker._get(o,"stepBigMonths"):+t.datepicker._get(o,"stepMonths"),"M");break;case 40:(e.ctrlKey||e.metaKey)&&t.datepicker._adjustDate(e.target,7,"D"),a=e.ctrlKey||e.metaKey;break;default:a=!1}else 36===e.keyCode&&e.ctrlKey?t.datepicker._showDatepicker(this):a=!1;a&&(e.preventDefault(),e.stopPropagation())},_doKeyPress:function(e){var i,s,n=t.datepicker._getInst(e.target);return t.datepicker._get(n,"constrainInput")?(i=t.datepicker._possibleChars(t.datepicker._get(n,"dateFormat")),s=String.fromCharCode(null==e.charCode?e.keyCode:e.charCode),e.ctrlKey||e.metaKey||" ">s||!i||i.indexOf(s)>-1):void 0},_doKeyUp:function(e){var i,s=t.datepicker._getInst(e.target);if(s.input.val()!==s.lastVal)try{i=t.datepicker.parseDate(t.datepicker._get(s,"dateFormat"),s.input?s.input.val():null,t.datepicker._getFormatConfig(s)),i&&(t.datepicker._setDateFromField(s),t.datepicker._updateAlternate(s),t.datepicker._updateDatepicker(s))}catch(n){}return!0},_showDatepicker:function(e){if(e=e.target||e,"input"!==e.nodeName.toLowerCase()&&(e=t("input",e.parentNode)[0]),!t.datepicker._isDisabledDatepicker(e)&&t.datepicker._lastInput!==e){var s,n,o,r,h,l,c;s=t.datepicker._getInst(e),t.datepicker._curInst&&t.datepicker._curInst!==s&&(t.datepicker._curInst.dpDiv.stop(!0,!0),s&&t.datepicker._datepickerShowing&&t.datepicker._hideDatepicker(t.datepicker._curInst.input[0])),n=t.datepicker._get(s,"beforeShow"),o=n?n.apply(e,[e,s]):{},o!==!1&&(a(s.settings,o),s.lastVal=null,t.datepicker._lastInput=e,t.datepicker._setDateFromField(s),t.datepicker._inDialog&&(e.value=""),t.datepicker._pos||(t.datepicker._pos=t.datepicker._findPos(e),t.datepicker._pos[1]+=e.offsetHeight),r=!1,t(e).parents().each(function(){return r|="fixed"===t(this).css("position"),!r}),h={left:t.datepicker._pos[0],top:t.datepicker._pos[1]},t.datepicker._pos=null,s.dpDiv.empty(),s.dpDiv.css({position:"absolute",display:"block",top:"-1000px"}),t.datepicker._updateDatepicker(s),h=t.datepicker._checkOffset(s,h,r),s.dpDiv.css({position:t.datepicker._inDialog&&t.blockUI?"static":r?"fixed":"absolute",display:"none",left:h.left+"px",top:h.top+"px"}),s.inline||(l=t.datepicker._get(s,"showAnim"),c=t.datepicker._get(s,"duration"),s.dpDiv.css("z-index",i(t(e))+1),t.datepicker._datepickerShowing=!0,t.effects&&t.effects.effect[l]?s.dpDiv.show(l,t.datepicker._get(s,"showOptions"),c):s.dpDiv[l||"show"](l?c:null),t.datepicker._shouldFocusInput(s)&&s.input.trigger("focus"),t.datepicker._curInst=s))
-}},_updateDatepicker:function(e){this.maxRows=4,m=e,e.dpDiv.empty().append(this._generateHTML(e)),this._attachHandlers(e);var i,s=this._getNumberOfMonths(e),n=s[1],a=17,r=e.dpDiv.find("."+this._dayOverClass+" a");r.length>0&&o.apply(r.get(0)),e.dpDiv.removeClass("ui-datepicker-multi-2 ui-datepicker-multi-3 ui-datepicker-multi-4").width(""),n>1&&e.dpDiv.addClass("ui-datepicker-multi-"+n).css("width",a*n+"em"),e.dpDiv[(1!==s[0]||1!==s[1]?"add":"remove")+"Class"]("ui-datepicker-multi"),e.dpDiv[(this._get(e,"isRTL")?"add":"remove")+"Class"]("ui-datepicker-rtl"),e===t.datepicker._curInst&&t.datepicker._datepickerShowing&&t.datepicker._shouldFocusInput(e)&&e.input.trigger("focus"),e.yearshtml&&(i=e.yearshtml,setTimeout(function(){i===e.yearshtml&&e.yearshtml&&e.dpDiv.find("select.ui-datepicker-year:first").replaceWith(e.yearshtml),i=e.yearshtml=null},0))},_shouldFocusInput:function(t){return t.input&&t.input.is(":visible")&&!t.input.is(":disabled")&&!t.input.is(":focus")},_checkOffset:function(e,i,s){var n=e.dpDiv.outerWidth(),o=e.dpDiv.outerHeight(),a=e.input?e.input.outerWidth():0,r=e.input?e.input.outerHeight():0,h=document.documentElement.clientWidth+(s?0:t(document).scrollLeft()),l=document.documentElement.clientHeight+(s?0:t(document).scrollTop());return i.left-=this._get(e,"isRTL")?n-a:0,i.left-=s&&i.left===e.input.offset().left?t(document).scrollLeft():0,i.top-=s&&i.top===e.input.offset().top+r?t(document).scrollTop():0,i.left-=Math.min(i.left,i.left+n>h&&h>n?Math.abs(i.left+n-h):0),i.top-=Math.min(i.top,i.top+o>l&&l>o?Math.abs(o+r):0),i},_findPos:function(e){for(var i,s=this._getInst(e),n=this._get(s,"isRTL");e&&("hidden"===e.type||1!==e.nodeType||t.expr.filters.hidden(e));)e=e[n?"previousSibling":"nextSibling"];return i=t(e).offset(),[i.left,i.top]},_hideDatepicker:function(e){var i,s,n,o,a=this._curInst;!a||e&&a!==t.data(e,"datepicker")||this._datepickerShowing&&(i=this._get(a,"showAnim"),s=this._get(a,"duration"),n=function(){t.datepicker._tidyDialog(a)},t.effects&&(t.effects.effect[i]||t.effects[i])?a.dpDiv.hide(i,t.datepicker._get(a,"showOptions"),s,n):a.dpDiv["slideDown"===i?"slideUp":"fadeIn"===i?"fadeOut":"hide"](i?s:null,n),i||n(),this._datepickerShowing=!1,o=this._get(a,"onClose"),o&&o.apply(a.input?a.input[0]:null,[a.input?a.input.val():"",a]),this._lastInput=null,this._inDialog&&(this._dialogInput.css({position:"absolute",left:"0",top:"-100px"}),t.blockUI&&(t.unblockUI(),t("body").append(this.dpDiv))),this._inDialog=!1)},_tidyDialog:function(t){t.dpDiv.removeClass(this._dialogClass).off(".ui-datepicker-calendar")},_checkExternalClick:function(e){if(t.datepicker._curInst){var i=t(e.target),s=t.datepicker._getInst(i[0]);(i[0].id!==t.datepicker._mainDivId&&0===i.parents("#"+t.datepicker._mainDivId).length&&!i.hasClass(t.datepicker.markerClassName)&&!i.closest("."+t.datepicker._triggerClass).length&&t.datepicker._datepickerShowing&&(!t.datepicker._inDialog||!t.blockUI)||i.hasClass(t.datepicker.markerClassName)&&t.datepicker._curInst!==s)&&t.datepicker._hideDatepicker()}},_adjustDate:function(e,i,s){var n=t(e),o=this._getInst(n[0]);this._isDisabledDatepicker(n[0])||(this._adjustInstDate(o,i+("M"===s?this._get(o,"showCurrentAtPos"):0),s),this._updateDatepicker(o))},_gotoToday:function(e){var i,s=t(e),n=this._getInst(s[0]);this._get(n,"gotoCurrent")&&n.currentDay?(n.selectedDay=n.currentDay,n.drawMonth=n.selectedMonth=n.currentMonth,n.drawYear=n.selectedYear=n.currentYear):(i=new Date,n.selectedDay=i.getDate(),n.drawMonth=n.selectedMonth=i.getMonth(),n.drawYear=n.selectedYear=i.getFullYear()),this._notifyChange(n),this._adjustDate(s)},_selectMonthYear:function(e,i,s){var n=t(e),o=this._getInst(n[0]);o["selected"+("M"===s?"Month":"Year")]=o["draw"+("M"===s?"Month":"Year")]=parseInt(i.options[i.selectedIndex].value,10),this._notifyChange(o),this._adjustDate(n)},_selectDay:function(e,i,s,n){var o,a=t(e);t(n).hasClass(this._unselectableClass)||this._isDisabledDatepicker(a[0])||(o=this._getInst(a[0]),o.selectedDay=o.currentDay=t("a",n).html(),o.selectedMonth=o.currentMonth=i,o.selectedYear=o.currentYear=s,this._selectDate(e,this._formatDate(o,o.currentDay,o.currentMonth,o.currentYear)))},_clearDate:function(e){var i=t(e);this._selectDate(i,"")},_selectDate:function(e,i){var s,n=t(e),o=this._getInst(n[0]);i=null!=i?i:this._formatDate(o),o.input&&o.input.val(i),this._updateAlternate(o),s=this._get(o,"onSelect"),s?s.apply(o.input?o.input[0]:null,[i,o]):o.input&&o.input.trigger("change"),o.inline?this._updateDatepicker(o):(this._hideDatepicker(),this._lastInput=o.input[0],"object"!=typeof o.input[0]&&o.input.trigger("focus"),this._lastInput=null)},_updateAlternate:function(e){var i,s,n,o=this._get(e,"altField");o&&(i=this._get(e,"altFormat")||this._get(e,"dateFormat"),s=this._getDate(e),n=this.formatDate(i,s,this._getFormatConfig(e)),t(o).val(n))},noWeekends:function(t){var e=t.getDay();return[e>0&&6>e,""]},iso8601Week:function(t){var e,i=new Date(t.getTime());return i.setDate(i.getDate()+4-(i.getDay()||7)),e=i.getTime(),i.setMonth(0),i.setDate(1),Math.floor(Math.round((e-i)/864e5)/7)+1},parseDate:function(e,i,s){if(null==e||null==i)throw"Invalid arguments";if(i="object"==typeof i?""+i:i+"",""===i)return null;var n,o,a,r,h=0,l=(s?s.shortYearCutoff:null)||this._defaults.shortYearCutoff,c="string"!=typeof l?l:(new Date).getFullYear()%100+parseInt(l,10),u=(s?s.dayNamesShort:null)||this._defaults.dayNamesShort,d=(s?s.dayNames:null)||this._defaults.dayNames,p=(s?s.monthNamesShort:null)||this._defaults.monthNamesShort,f=(s?s.monthNames:null)||this._defaults.monthNames,g=-1,m=-1,_=-1,v=-1,b=!1,y=function(t){var i=e.length>n+1&&e.charAt(n+1)===t;return i&&n++,i},w=function(t){var e=y(t),s="@"===t?14:"!"===t?20:"y"===t&&e?4:"o"===t?3:2,n="y"===t?s:1,o=RegExp("^\\d{"+n+","+s+"}"),a=i.substring(h).match(o);if(!a)throw"Missing number at position "+h;return h+=a[0].length,parseInt(a[0],10)},k=function(e,s,n){var o=-1,a=t.map(y(e)?n:s,function(t,e){return[[e,t]]}).sort(function(t,e){return-(t[1].length-e[1].length)});if(t.each(a,function(t,e){var s=e[1];return i.substr(h,s.length).toLowerCase()===s.toLowerCase()?(o=e[0],h+=s.length,!1):void 0}),-1!==o)return o+1;throw"Unknown name at position "+h},x=function(){if(i.charAt(h)!==e.charAt(n))throw"Unexpected literal at position "+h;h++};for(n=0;e.length>n;n++)if(b)"'"!==e.charAt(n)||y("'")?x():b=!1;else switch(e.charAt(n)){case"d":_=w("d");break;case"D":k("D",u,d);break;case"o":v=w("o");break;case"m":m=w("m");break;case"M":m=k("M",p,f);break;case"y":g=w("y");break;case"@":r=new Date(w("@")),g=r.getFullYear(),m=r.getMonth()+1,_=r.getDate();break;case"!":r=new Date((w("!")-this._ticksTo1970)/1e4),g=r.getFullYear(),m=r.getMonth()+1,_=r.getDate();break;case"'":y("'")?x():b=!0;break;default:x()}if(i.length>h&&(a=i.substr(h),!/^\s+/.test(a)))throw"Extra/unparsed characters found in date: "+a;if(-1===g?g=(new Date).getFullYear():100>g&&(g+=(new Date).getFullYear()-(new Date).getFullYear()%100+(c>=g?0:-100)),v>-1)for(m=1,_=v;;){if(o=this._getDaysInMonth(g,m-1),o>=_)break;m++,_-=o}if(r=this._daylightSavingAdjust(new Date(g,m-1,_)),r.getFullYear()!==g||r.getMonth()+1!==m||r.getDate()!==_)throw"Invalid date";return r},ATOM:"yy-mm-dd",COOKIE:"D, dd M yy",ISO_8601:"yy-mm-dd",RFC_822:"D, d M y",RFC_850:"DD, dd-M-y",RFC_1036:"D, d M y",RFC_1123:"D, d M yy",RFC_2822:"D, d M yy",RSS:"D, d M y",TICKS:"!",TIMESTAMP:"@",W3C:"yy-mm-dd",_ticksTo1970:1e7*60*60*24*(718685+Math.floor(492.5)-Math.floor(19.7)+Math.floor(4.925)),formatDate:function(t,e,i){if(!e)return"";var s,n=(i?i.dayNamesShort:null)||this._defaults.dayNamesShort,o=(i?i.dayNames:null)||this._defaults.dayNames,a=(i?i.monthNamesShort:null)||this._defaults.monthNamesShort,r=(i?i.monthNames:null)||this._defaults.monthNames,h=function(e){var i=t.length>s+1&&t.charAt(s+1)===e;return i&&s++,i},l=function(t,e,i){var s=""+e;if(h(t))for(;i>s.length;)s="0"+s;return s},c=function(t,e,i,s){return h(t)?s[e]:i[e]},u="",d=!1;if(e)for(s=0;t.length>s;s++)if(d)"'"!==t.charAt(s)||h("'")?u+=t.charAt(s):d=!1;else switch(t.charAt(s)){case"d":u+=l("d",e.getDate(),2);break;case"D":u+=c("D",e.getDay(),n,o);break;case"o":u+=l("o",Math.round((new Date(e.getFullYear(),e.getMonth(),e.getDate()).getTime()-new Date(e.getFullYear(),0,0).getTime())/864e5),3);break;case"m":u+=l("m",e.getMonth()+1,2);break;case"M":u+=c("M",e.getMonth(),a,r);break;case"y":u+=h("y")?e.getFullYear():(10>e.getFullYear()%100?"0":"")+e.getFullYear()%100;break;case"@":u+=e.getTime();break;case"!":u+=1e4*e.getTime()+this._ticksTo1970;break;case"'":h("'")?u+="'":d=!0;break;default:u+=t.charAt(s)}return u},_possibleChars:function(t){var e,i="",s=!1,n=function(i){var s=t.length>e+1&&t.charAt(e+1)===i;return s&&e++,s};for(e=0;t.length>e;e++)if(s)"'"!==t.charAt(e)||n("'")?i+=t.charAt(e):s=!1;else switch(t.charAt(e)){case"d":case"m":case"y":case"@":i+="0123456789";break;case"D":case"M":return null;case"'":n("'")?i+="'":s=!0;break;default:i+=t.charAt(e)}return i},_get:function(t,e){return void 0!==t.settings[e]?t.settings[e]:this._defaults[e]},_setDateFromField:function(t,e){if(t.input.val()!==t.lastVal){var i=this._get(t,"dateFormat"),s=t.lastVal=t.input?t.input.val():null,n=this._getDefaultDate(t),o=n,a=this._getFormatConfig(t);try{o=this.parseDate(i,s,a)||n}catch(r){s=e?"":s}t.selectedDay=o.getDate(),t.drawMonth=t.selectedMonth=o.getMonth(),t.drawYear=t.selectedYear=o.getFullYear(),t.currentDay=s?o.getDate():0,t.currentMonth=s?o.getMonth():0,t.currentYear=s?o.getFullYear():0,this._adjustInstDate(t)}},_getDefaultDate:function(t){return this._restrictMinMax(t,this._determineDate(t,this._get(t,"defaultDate"),new Date))},_determineDate:function(e,i,s){var n=function(t){var e=new Date;return e.setDate(e.getDate()+t),e},o=function(i){try{return t.datepicker.parseDate(t.datepicker._get(e,"dateFormat"),i,t.datepicker._getFormatConfig(e))}catch(s){}for(var n=(i.toLowerCase().match(/^c/)?t.datepicker._getDate(e):null)||new Date,o=n.getFullYear(),a=n.getMonth(),r=n.getDate(),h=/([+\-]?[0-9]+)\s*(d|D|w|W|m|M|y|Y)?/g,l=h.exec(i);l;){switch(l[2]||"d"){case"d":case"D":r+=parseInt(l[1],10);break;case"w":case"W":r+=7*parseInt(l[1],10);break;case"m":case"M":a+=parseInt(l[1],10),r=Math.min(r,t.datepicker._getDaysInMonth(o,a));break;case"y":case"Y":o+=parseInt(l[1],10),r=Math.min(r,t.datepicker._getDaysInMonth(o,a))}l=h.exec(i)}return new Date(o,a,r)},a=null==i||""===i?s:"string"==typeof i?o(i):"number"==typeof i?isNaN(i)?s:n(i):new Date(i.getTime());return a=a&&"Invalid Date"==""+a?s:a,a&&(a.setHours(0),a.setMinutes(0),a.setSeconds(0),a.setMilliseconds(0)),this._daylightSavingAdjust(a)},_daylightSavingAdjust:function(t){return t?(t.setHours(t.getHours()>12?t.getHours()+2:0),t):null},_setDate:function(t,e,i){var s=!e,n=t.selectedMonth,o=t.selectedYear,a=this._restrictMinMax(t,this._determineDate(t,e,new Date));t.selectedDay=t.currentDay=a.getDate(),t.drawMonth=t.selectedMonth=t.currentMonth=a.getMonth(),t.drawYear=t.selectedYear=t.currentYear=a.getFullYear(),n===t.selectedMonth&&o===t.selectedYear||i||this._notifyChange(t),this._adjustInstDate(t),t.input&&t.input.val(s?"":this._formatDate(t))},_getDate:function(t){var e=!t.currentYear||t.input&&""===t.input.val()?null:this._daylightSavingAdjust(new Date(t.currentYear,t.currentMonth,t.currentDay));return e},_attachHandlers:function(e){var i=this._get(e,"stepMonths"),s="#"+e.id.replace(/\\\\/g,"\\");e.dpDiv.find("[data-handler]").map(function(){var e={prev:function(){t.datepicker._adjustDate(s,-i,"M")},next:function(){t.datepicker._adjustDate(s,+i,"M")},hide:function(){t.datepicker._hideDatepicker()},today:function(){t.datepicker._gotoToday(s)},selectDay:function(){return t.datepicker._selectDay(s,+this.getAttribute("data-month"),+this.getAttribute("data-year"),this),!1},selectMonth:function(){return t.datepicker._selectMonthYear(s,this,"M"),!1},selectYear:function(){return t.datepicker._selectMonthYear(s,this,"Y"),!1}};t(this).on(this.getAttribute("data-event"),e[this.getAttribute("data-handler")])})},_generateHTML:function(t){var e,i,s,n,o,a,r,h,l,c,u,d,p,f,g,m,_,v,b,y,w,k,x,C,D,I,T,P,M,S,H,z,O,A,N,W,E,F,L,R=new Date,B=this._daylightSavingAdjust(new Date(R.getFullYear(),R.getMonth(),R.getDate())),Y=this._get(t,"isRTL"),j=this._get(t,"showButtonPanel"),q=this._get(t,"hideIfNoPrevNext"),K=this._get(t,"navigationAsDateFormat"),U=this._getNumberOfMonths(t),V=this._get(t,"showCurrentAtPos"),$=this._get(t,"stepMonths"),X=1!==U[0]||1!==U[1],G=this._daylightSavingAdjust(t.currentDay?new Date(t.currentYear,t.currentMonth,t.currentDay):new Date(9999,9,9)),Q=this._getMinMaxDate(t,"min"),J=this._getMinMaxDate(t,"max"),Z=t.drawMonth-V,te=t.drawYear;if(0>Z&&(Z+=12,te--),J)for(e=this._daylightSavingAdjust(new Date(J.getFullYear(),J.getMonth()-U[0]*U[1]+1,J.getDate())),e=Q&&Q>e?Q:e;this._daylightSavingAdjust(new Date(te,Z,1))>e;)Z--,0>Z&&(Z=11,te--);for(t.drawMonth=Z,t.drawYear=te,i=this._get(t,"prevText"),i=K?this.formatDate(i,this._daylightSavingAdjust(new Date(te,Z-$,1)),this._getFormatConfig(t)):i,s=this._canAdjustMonth(t,-1,te,Z)?"<a class='ui-datepicker-prev ui-corner-all' data-handler='prev' data-event='click' title='"+i+"'><span class='ui-icon ui-icon-circle-triangle-"+(Y?"e":"w")+"'>"+i+"</span></a>":q?"":"<a class='ui-datepicker-prev ui-corner-all ui-state-disabled' title='"+i+"'><span class='ui-icon ui-icon-circle-triangle-"+(Y?"e":"w")+"'>"+i+"</span></a>",n=this._get(t,"nextText"),n=K?this.formatDate(n,this._daylightSavingAdjust(new Date(te,Z+$,1)),this._getFormatConfig(t)):n,o=this._canAdjustMonth(t,1,te,Z)?"<a class='ui-datepicker-next ui-corner-all' data-handler='next' data-event='click' title='"+n+"'><span class='ui-icon ui-icon-circle-triangle-"+(Y?"w":"e")+"'>"+n+"</span></a>":q?"":"<a class='ui-datepicker-next ui-corner-all ui-state-disabled' title='"+n+"'><span class='ui-icon ui-icon-circle-triangle-"+(Y?"w":"e")+"'>"+n+"</span></a>",a=this._get(t,"currentText"),r=this._get(t,"gotoCurrent")&&t.currentDay?G:B,a=K?this.formatDate(a,r,this._getFormatConfig(t)):a,h=t.inline?"":"<button type='button' class='ui-datepicker-close ui-state-default ui-priority-primary ui-corner-all' data-handler='hide' data-event='click'>"+this._get(t,"closeText")+"</button>",l=j?"<div class='ui-datepicker-buttonpane ui-widget-content'>"+(Y?h:"")+(this._isInRange(t,r)?"<button type='button' class='ui-datepicker-current ui-state-default ui-priority-secondary ui-corner-all' data-handler='today' data-event='click'>"+a+"</button>":"")+(Y?"":h)+"</div>":"",c=parseInt(this._get(t,"firstDay"),10),c=isNaN(c)?0:c,u=this._get(t,"showWeek"),d=this._get(t,"dayNames"),p=this._get(t,"dayNamesMin"),f=this._get(t,"monthNames"),g=this._get(t,"monthNamesShort"),m=this._get(t,"beforeShowDay"),_=this._get(t,"showOtherMonths"),v=this._get(t,"selectOtherMonths"),b=this._getDefaultDate(t),y="",k=0;U[0]>k;k++){for(x="",this.maxRows=4,C=0;U[1]>C;C++){if(D=this._daylightSavingAdjust(new Date(te,Z,t.selectedDay)),I=" ui-corner-all",T="",X){if(T+="<div class='ui-datepicker-group",U[1]>1)switch(C){case 0:T+=" ui-datepicker-group-first",I=" ui-corner-"+(Y?"right":"left");break;case U[1]-1:T+=" ui-datepicker-group-last",I=" ui-corner-"+(Y?"left":"right");break;default:T+=" ui-datepicker-group-middle",I=""}T+="'>"}for(T+="<div class='ui-datepicker-header ui-widget-header ui-helper-clearfix"+I+"'>"+(/all|left/.test(I)&&0===k?Y?o:s:"")+(/all|right/.test(I)&&0===k?Y?s:o:"")+this._generateMonthYearHeader(t,Z,te,Q,J,k>0||C>0,f,g)+"</div><table class='ui-datepicker-calendar'><thead>"+"<tr>",P=u?"<th class='ui-datepicker-week-col'>"+this._get(t,"weekHeader")+"</th>":"",w=0;7>w;w++)M=(w+c)%7,P+="<th scope='col'"+((w+c+6)%7>=5?" class='ui-datepicker-week-end'":"")+">"+"<span title='"+d[M]+"'>"+p[M]+"</span></th>";for(T+=P+"</tr></thead><tbody>",S=this._getDaysInMonth(te,Z),te===t.selectedYear&&Z===t.selectedMonth&&(t.selectedDay=Math.min(t.selectedDay,S)),H=(this._getFirstDayOfMonth(te,Z)-c+7)%7,z=Math.ceil((H+S)/7),O=X?this.maxRows>z?this.maxRows:z:z,this.maxRows=O,A=this._daylightSavingAdjust(new Date(te,Z,1-H)),N=0;O>N;N++){for(T+="<tr>",W=u?"<td class='ui-datepicker-week-col'>"+this._get(t,"calculateWeek")(A)+"</td>":"",w=0;7>w;w++)E=m?m.apply(t.input?t.input[0]:null,[A]):[!0,""],F=A.getMonth()!==Z,L=F&&!v||!E[0]||Q&&Q>A||J&&A>J,W+="<td class='"+((w+c+6)%7>=5?" ui-datepicker-week-end":"")+(F?" ui-datepicker-other-month":"")+(A.getTime()===D.getTime()&&Z===t.selectedMonth&&t._keyEvent||b.getTime()===A.getTime()&&b.getTime()===D.getTime()?" "+this._dayOverClass:"")+(L?" "+this._unselectableClass+" ui-state-disabled":"")+(F&&!_?"":" "+E[1]+(A.getTime()===G.getTime()?" "+this._currentClass:"")+(A.getTime()===B.getTime()?" ui-datepicker-today":""))+"'"+(F&&!_||!E[2]?"":" title='"+E[2].replace(/'/g,"&#39;")+"'")+(L?"":" data-handler='selectDay' data-event='click' data-month='"+A.getMonth()+"' data-year='"+A.getFullYear()+"'")+">"+(F&&!_?"&#xa0;":L?"<span class='ui-state-default'>"+A.getDate()+"</span>":"<a class='ui-state-default"+(A.getTime()===B.getTime()?" ui-state-highlight":"")+(A.getTime()===G.getTime()?" ui-state-active":"")+(F?" ui-priority-secondary":"")+"' href='#'>"+A.getDate()+"</a>")+"</td>",A.setDate(A.getDate()+1),A=this._daylightSavingAdjust(A);T+=W+"</tr>"}Z++,Z>11&&(Z=0,te++),T+="</tbody></table>"+(X?"</div>"+(U[0]>0&&C===U[1]-1?"<div class='ui-datepicker-row-break'></div>":""):""),x+=T}y+=x}return y+=l,t._keyEvent=!1,y},_generateMonthYearHeader:function(t,e,i,s,n,o,a,r){var h,l,c,u,d,p,f,g,m=this._get(t,"changeMonth"),_=this._get(t,"changeYear"),v=this._get(t,"showMonthAfterYear"),b="<div class='ui-datepicker-title'>",y="";if(o||!m)y+="<span class='ui-datepicker-month'>"+a[e]+"</span>";else{for(h=s&&s.getFullYear()===i,l=n&&n.getFullYear()===i,y+="<select class='ui-datepicker-month' data-handler='selectMonth' data-event='change'>",c=0;12>c;c++)(!h||c>=s.getMonth())&&(!l||n.getMonth()>=c)&&(y+="<option value='"+c+"'"+(c===e?" selected='selected'":"")+">"+r[c]+"</option>");y+="</select>"}if(v||(b+=y+(!o&&m&&_?"":"&#xa0;")),!t.yearshtml)if(t.yearshtml="",o||!_)b+="<span class='ui-datepicker-year'>"+i+"</span>";else{for(u=this._get(t,"yearRange").split(":"),d=(new Date).getFullYear(),p=function(t){var e=t.match(/c[+\-].*/)?i+parseInt(t.substring(1),10):t.match(/[+\-].*/)?d+parseInt(t,10):parseInt(t,10);return isNaN(e)?d:e},f=p(u[0]),g=Math.max(f,p(u[1]||"")),f=s?Math.max(f,s.getFullYear()):f,g=n?Math.min(g,n.getFullYear()):g,t.yearshtml+="<select class='ui-datepicker-year' data-handler='selectYear' data-event='change'>";g>=f;f++)t.yearshtml+="<option value='"+f+"'"+(f===i?" selected='selected'":"")+">"+f+"</option>";t.yearshtml+="</select>",b+=t.yearshtml,t.yearshtml=null}return b+=this._get(t,"yearSuffix"),v&&(b+=(!o&&m&&_?"":"&#xa0;")+y),b+="</div>"},_adjustInstDate:function(t,e,i){var s=t.selectedYear+("Y"===i?e:0),n=t.selectedMonth+("M"===i?e:0),o=Math.min(t.selectedDay,this._getDaysInMonth(s,n))+("D"===i?e:0),a=this._restrictMinMax(t,this._daylightSavingAdjust(new Date(s,n,o)));t.selectedDay=a.getDate(),t.drawMonth=t.selectedMonth=a.getMonth(),t.drawYear=t.selectedYear=a.getFullYear(),("M"===i||"Y"===i)&&this._notifyChange(t)},_restrictMinMax:function(t,e){var i=this._getMinMaxDate(t,"min"),s=this._getMinMaxDate(t,"max"),n=i&&i>e?i:e;return s&&n>s?s:n},_notifyChange:function(t){var e=this._get(t,"onChangeMonthYear");e&&e.apply(t.input?t.input[0]:null,[t.selectedYear,t.selectedMonth+1,t])},_getNumberOfMonths:function(t){var e=this._get(t,"numberOfMonths");return null==e?[1,1]:"number"==typeof e?[1,e]:e},_getMinMaxDate:function(t,e){return this._determineDate(t,this._get(t,e+"Date"),null)},_getDaysInMonth:function(t,e){return 32-this._daylightSavingAdjust(new Date(t,e,32)).getDate()},_getFirstDayOfMonth:function(t,e){return new Date(t,e,1).getDay()},_canAdjustMonth:function(t,e,i,s){var n=this._getNumberOfMonths(t),o=this._daylightSavingAdjust(new Date(i,s+(0>e?e:n[0]*n[1]),1));return 0>e&&o.setDate(this._getDaysInMonth(o.getFullYear(),o.getMonth())),this._isInRange(t,o)},_isInRange:function(t,e){var i,s,n=this._getMinMaxDate(t,"min"),o=this._getMinMaxDate(t,"max"),a=null,r=null,h=this._get(t,"yearRange");return h&&(i=h.split(":"),s=(new Date).getFullYear(),a=parseInt(i[0],10),r=parseInt(i[1],10),i[0].match(/[+\-].*/)&&(a+=s),i[1].match(/[+\-].*/)&&(r+=s)),(!n||e.getTime()>=n.getTime())&&(!o||e.getTime()<=o.getTime())&&(!a||e.getFullYear()>=a)&&(!r||r>=e.getFullYear())},_getFormatConfig:function(t){var e=this._get(t,"shortYearCutoff");return e="string"!=typeof e?e:(new Date).getFullYear()%100+parseInt(e,10),{shortYearCutoff:e,dayNamesShort:this._get(t,"dayNamesShort"),dayNames:this._get(t,"dayNames"),monthNamesShort:this._get(t,"monthNamesShort"),monthNames:this._get(t,"monthNames")}},_formatDate:function(t,e,i,s){e||(t.currentDay=t.selectedDay,t.currentMonth=t.selectedMonth,t.currentYear=t.selectedYear);var n=e?"object"==typeof e?e:this._daylightSavingAdjust(new Date(s,i,e)):this._daylightSavingAdjust(new Date(t.currentYear,t.currentMonth,t.currentDay));return this.formatDate(this._get(t,"dateFormat"),n,this._getFormatConfig(t))}}),t.fn.datepicker=function(e){if(!this.length)return this;t.datepicker.initialized||(t(document).on("mousedown",t.datepicker._checkExternalClick),t.datepicker.initialized=!0),0===t("#"+t.datepicker._mainDivId).length&&t("body").append(t.datepicker.dpDiv);var i=Array.prototype.slice.call(arguments,1);return"string"!=typeof e||"isDisabled"!==e&&"getDate"!==e&&"widget"!==e?"option"===e&&2===arguments.length&&"string"==typeof arguments[1]?t.datepicker["_"+e+"Datepicker"].apply(t.datepicker,[this[0]].concat(i)):this.each(function(){"string"==typeof e?t.datepicker["_"+e+"Datepicker"].apply(t.datepicker,[this].concat(i)):t.datepicker._attachDatepicker(this,e)}):t.datepicker["_"+e+"Datepicker"].apply(t.datepicker,[this[0]].concat(i))},t.datepicker=new s,t.datepicker.initialized=!1,t.datepicker.uuid=(new Date).getTime(),t.datepicker.version="1.12.1",t.datepicker,t.ui.ie=!!/msie [\w.]+/.exec(navigator.userAgent.toLowerCase());var _=!1;t(document).on("mouseup",function(){_=!1}),t.widget("ui.mouse",{version:"1.12.1",options:{cancel:"input, textarea, button, select, option",distance:1,delay:0},_mouseInit:function(){var e=this;this.element.on("mousedown."+this.widgetName,function(t){return e._mouseDown(t)}).on("click."+this.widgetName,function(i){return!0===t.data(i.target,e.widgetName+".preventClickEvent")?(t.removeData(i.target,e.widgetName+".preventClickEvent"),i.stopImmediatePropagation(),!1):void 0}),this.started=!1},_mouseDestroy:function(){this.element.off("."+this.widgetName),this._mouseMoveDelegate&&this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegate).off("mouseup."+this.widgetName,this._mouseUpDelegate)},_mouseDown:function(e){if(!_){this._mouseMoved=!1,this._mouseStarted&&this._mouseUp(e),this._mouseDownEvent=e;var i=this,s=1===e.which,n="string"==typeof this.options.cancel&&e.target.nodeName?t(e.target).closest(this.options.cancel).length:!1;return s&&!n&&this._mouseCapture(e)?(this.mouseDelayMet=!this.options.delay,this.mouseDelayMet||(this._mouseDelayTimer=setTimeout(function(){i.mouseDelayMet=!0},this.options.delay)),this._mouseDistanceMet(e)&&this._mouseDelayMet(e)&&(this._mouseStarted=this._mouseStart(e)!==!1,!this._mouseStarted)?(e.preventDefault(),!0):(!0===t.data(e.target,this.widgetName+".preventClickEvent")&&t.removeData(e.target,this.widgetName+".preventClickEvent"),this._mouseMoveDelegate=function(t){return i._mouseMove(t)},this._mouseUpDelegate=function(t){return i._mouseUp(t)},this.document.on("mousemove."+this.widgetName,this._mouseMoveDelegate).on("mouseup."+this.widgetName,this._mouseUpDelegate),e.preventDefault(),_=!0,!0)):!0}},_mouseMove:function(e){if(this._mouseMoved){if(t.ui.ie&&(!document.documentMode||9>document.documentMode)&&!e.button)return this._mouseUp(e);if(!e.which)if(e.originalEvent.altKey||e.originalEvent.ctrlKey||e.originalEvent.metaKey||e.originalEvent.shiftKey)this.ignoreMissingWhich=!0;else if(!this.ignoreMissingWhich)return this._mouseUp(e)}return(e.which||e.button)&&(this._mouseMoved=!0),this._mouseStarted?(this._mouseDrag(e),e.preventDefault()):(this._mouseDistanceMet(e)&&this._mouseDelayMet(e)&&(this._mouseStarted=this._mouseStart(this._mouseDownEvent,e)!==!1,this._mouseStarted?this._mouseDrag(e):this._mouseUp(e)),!this._mouseStarted)},_mouseUp:function(e){this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegate).off("mouseup."+this.widgetName,this._mouseUpDelegate),this._mouseStarted&&(this._mouseStarted=!1,e.target===this._mouseDownEvent.target&&t.data(e.target,this.widgetName+".preventClickEvent",!0),this._mouseStop(e)),this._mouseDelayTimer&&(clearTimeout(this._mouseDelayTimer),delete this._mouseDelayTimer),this.ignoreMissingWhich=!1,_=!1,e.preventDefault()},_mouseDistanceMet:function(t){return Math.max(Math.abs(this._mouseDownEvent.pageX-t.pageX),Math.abs(this._mouseDownEvent.pageY-t.pageY))>=this.options.distance},_mouseDelayMet:function(){return this.mouseDelayMet},_mouseStart:function(){},_mouseDrag:function(){},_mouseStop:function(){},_mouseCapture:function(){return!0}}),t.ui.plugin={add:function(e,i,s){var n,o=t.ui[e].prototype;for(n in s)o.plugins[n]=o.plugins[n]||[],o.plugins[n].push([i,s[n]])},call:function(t,e,i,s){var n,o=t.plugins[e];if(o&&(s||t.element[0].parentNode&&11!==t.element[0].parentNode.nodeType))for(n=0;o.length>n;n++)t.options[o[n][0]]&&o[n][1].apply(t.element,i)}},t.ui.safeBlur=function(e){e&&"body"!==e.nodeName.toLowerCase()&&t(e).trigger("blur")},t.widget("ui.draggable",t.ui.mouse,{version:"1.12.1",widgetEventPrefix:"drag",options:{addClasses:!0,appendTo:"parent",axis:!1,connectToSortable:!1,containment:!1,cursor:"auto",cursorAt:!1,grid:!1,handle:!1,helper:"original",iframeFix:!1,opacity:!1,refreshPositions:!1,revert:!1,revertDuration:500,scope:"default",scroll:!0,scrollSensitivity:20,scrollSpeed:20,snap:!1,snapMode:"both",snapTolerance:20,stack:!1,zIndex:!1,drag:null,start:null,stop:null},_create:function(){"original"===this.options.helper&&this._setPositionRelative(),this.options.addClasses&&this._addClass("ui-draggable"),this._setHandleClassName(),this._mouseInit()},_setOption:function(t,e){this._super(t,e),"handle"===t&&(this._removeHandleClassName(),this._setHandleClassName())},_destroy:function(){return(this.helper||this.element).is(".ui-draggable-dragging")?(this.destroyOnClear=!0,void 0):(this._removeHandleClassName(),this._mouseDestroy(),void 0)},_mouseCapture:function(e){var i=this.options;return this.helper||i.disabled||t(e.target).closest(".ui-resizable-handle").length>0?!1:(this.handle=this._getHandle(e),this.handle?(this._blurActiveElement(e),this._blockFrames(i.iframeFix===!0?"iframe":i.iframeFix),!0):!1)},_blockFrames:function(e){this.iframeBlocks=this.document.find(e).map(function(){var e=t(this);return t("<div>").css("position","absolute").appendTo(e.parent()).outerWidth(e.outerWidth()).outerHeight(e.outerHeight()).offset(e.offset())[0]})},_unblockFrames:function(){this.iframeBlocks&&(this.iframeBlocks.remove(),delete this.iframeBlocks)},_blurActiveElement:function(e){var i=t.ui.safeActiveElement(this.document[0]),s=t(e.target);s.closest(i).length||t.ui.safeBlur(i)},_mouseStart:function(e){var i=this.options;return this.helper=this._createHelper(e),this._addClass(this.helper,"ui-draggable-dragging"),this._cacheHelperProportions(),t.ui.ddmanager&&(t.ui.ddmanager.current=this),this._cacheMargins(),this.cssPosition=this.helper.css("position"),this.scrollParent=this.helper.scrollParent(!0),this.offsetParent=this.helper.offsetParent(),this.hasFixedAncestor=this.helper.parents().filter(function(){return"fixed"===t(this).css("position")}).length>0,this.positionAbs=this.element.offset(),this._refreshOffsets(e),this.originalPosition=this.position=this._generatePosition(e,!1),this.originalPageX=e.pageX,this.originalPageY=e.pageY,i.cursorAt&&this._adjustOffsetFromHelper(i.cursorAt),this._setContainment(),this._trigger("start",e)===!1?(this._clear(),!1):(this._cacheHelperProportions(),t.ui.ddmanager&&!i.dropBehaviour&&t.ui.ddmanager.prepareOffsets(this,e),this._mouseDrag(e,!0),t.ui.ddmanager&&t.ui.ddmanager.dragStart(this,e),!0)},_refreshOffsets:function(t){this.offset={top:this.positionAbs.top-this.margins.top,left:this.positionAbs.left-this.margins.left,scroll:!1,parent:this._getParentOffset(),relative:this._getRelativeOffset()},this.offset.click={left:t.pageX-this.offset.left,top:t.pageY-this.offset.top}},_mouseDrag:function(e,i){if(this.hasFixedAncestor&&(this.offset.parent=this._getParentOffset()),this.position=this._generatePosition(e,!0),this.positionAbs=this._convertPositionTo("absolute"),!i){var s=this._uiHash();if(this._trigger("drag",e,s)===!1)return this._mouseUp(new t.Event("mouseup",e)),!1;this.position=s.position}return this.helper[0].style.left=this.position.left+"px",this.helper[0].style.top=this.position.top+"px",t.ui.ddmanager&&t.ui.ddmanager.drag(this,e),!1},_mouseStop:function(e){var i=this,s=!1;return t.ui.ddmanager&&!this.options.dropBehaviour&&(s=t.ui.ddmanager.drop(this,e)),this.dropped&&(s=this.dropped,this.dropped=!1),"invalid"===this.options.revert&&!s||"valid"===this.options.revert&&s||this.options.revert===!0||t.isFunction(this.options.revert)&&this.options.revert.call(this.element,s)?t(this.helper).animate(this.originalPosition,parseInt(this.options.revertDuration,10),function(){i._trigger("stop",e)!==!1&&i._clear()}):this._trigger("stop",e)!==!1&&this._clear(),!1},_mouseUp:function(e){return this._unblockFrames(),t.ui.ddmanager&&t.ui.ddmanager.dragStop(this,e),this.handleElement.is(e.target)&&this.element.trigger("focus"),t.ui.mouse.prototype._mouseUp.call(this,e)},cancel:function(){return this.helper.is(".ui-draggable-dragging")?this._mouseUp(new t.Event("mouseup",{target:this.element[0]})):this._clear(),this},_getHandle:function(e){return this.options.handle?!!t(e.target).closest(this.element.find(this.options.handle)).length:!0},_setHandleClassName:function(){this.handleElement=this.options.handle?this.element.find(this.options.handle):this.element,this._addClass(this.handleElement,"ui-draggable-handle")},_removeHandleClassName:function(){this._removeClass(this.handleElement,"ui-draggable-handle")},_createHelper:function(e){var i=this.options,s=t.isFunction(i.helper),n=s?t(i.helper.apply(this.element[0],[e])):"clone"===i.helper?this.element.clone().removeAttr("id"):this.element;return n.parents("body").length||n.appendTo("parent"===i.appendTo?this.element[0].parentNode:i.appendTo),s&&n[0]===this.element[0]&&this._setPositionRelative(),n[0]===this.element[0]||/(fixed|absolute)/.test(n.css("position"))||n.css("position","absolute"),n},_setPositionRelative:function(){/^(?:r|a|f)/.test(this.element.css("position"))||(this.element[0].style.position="relative")},_adjustOffsetFromHelper:function(e){"string"==typeof e&&(e=e.split(" ")),t.isArray(e)&&(e={left:+e[0],top:+e[1]||0}),"left"in e&&(this.offset.click.left=e.left+this.margins.left),"right"in e&&(this.offset.click.left=this.helperProportions.width-e.right+this.margins.left),"top"in e&&(this.offset.click.top=e.top+this.margins.top),"bottom"in e&&(this.offset.click.top=this.helperProportions.height-e.bottom+this.margins.top)},_isRootNode:function(t){return/(html|body)/i.test(t.tagName)||t===this.document[0]},_getParentOffset:function(){var e=this.offsetParent.offset(),i=this.document[0];return"absolute"===this.cssPosition&&this.scrollParent[0]!==i&&t.contains(this.scrollParent[0],this.offsetParent[0])&&(e.left+=this.scrollParent.scrollLeft(),e.top+=this.scrollParent.scrollTop()),this._isRootNode(this.offsetParent[0])&&(e={top:0,left:0}),{top:e.top+(parseInt(this.offsetParent.css("borderTopWidth"),10)||0),left:e.left+(parseInt(this.offsetParent.css("borderLeftWidth"),10)||0)}},_getRelativeOffset:function(){if("relative"!==this.cssPosition)return{top:0,left:0};var t=this.element.position(),e=this._isRootNode(this.scrollParent[0]);return{top:t.top-(parseInt(this.helper.css("top"),10)||0)+(e?0:this.scrollParent.scrollTop()),left:t.left-(parseInt(this.helper.css("left"),10)||0)+(e?0:this.scrollParent.scrollLeft())}
-},_cacheMargins:function(){this.margins={left:parseInt(this.element.css("marginLeft"),10)||0,top:parseInt(this.element.css("marginTop"),10)||0,right:parseInt(this.element.css("marginRight"),10)||0,bottom:parseInt(this.element.css("marginBottom"),10)||0}},_cacheHelperProportions:function(){this.helperProportions={width:this.helper.outerWidth(),height:this.helper.outerHeight()}},_setContainment:function(){var e,i,s,n=this.options,o=this.document[0];return this.relativeContainer=null,n.containment?"window"===n.containment?(this.containment=[t(window).scrollLeft()-this.offset.relative.left-this.offset.parent.left,t(window).scrollTop()-this.offset.relative.top-this.offset.parent.top,t(window).scrollLeft()+t(window).width()-this.helperProportions.width-this.margins.left,t(window).scrollTop()+(t(window).height()||o.body.parentNode.scrollHeight)-this.helperProportions.height-this.margins.top],void 0):"document"===n.containment?(this.containment=[0,0,t(o).width()-this.helperProportions.width-this.margins.left,(t(o).height()||o.body.parentNode.scrollHeight)-this.helperProportions.height-this.margins.top],void 0):n.containment.constructor===Array?(this.containment=n.containment,void 0):("parent"===n.containment&&(n.containment=this.helper[0].parentNode),i=t(n.containment),s=i[0],s&&(e=/(scroll|auto)/.test(i.css("overflow")),this.containment=[(parseInt(i.css("borderLeftWidth"),10)||0)+(parseInt(i.css("paddingLeft"),10)||0),(parseInt(i.css("borderTopWidth"),10)||0)+(parseInt(i.css("paddingTop"),10)||0),(e?Math.max(s.scrollWidth,s.offsetWidth):s.offsetWidth)-(parseInt(i.css("borderRightWidth"),10)||0)-(parseInt(i.css("paddingRight"),10)||0)-this.helperProportions.width-this.margins.left-this.margins.right,(e?Math.max(s.scrollHeight,s.offsetHeight):s.offsetHeight)-(parseInt(i.css("borderBottomWidth"),10)||0)-(parseInt(i.css("paddingBottom"),10)||0)-this.helperProportions.height-this.margins.top-this.margins.bottom],this.relativeContainer=i),void 0):(this.containment=null,void 0)},_convertPositionTo:function(t,e){e||(e=this.position);var i="absolute"===t?1:-1,s=this._isRootNode(this.scrollParent[0]);return{top:e.top+this.offset.relative.top*i+this.offset.parent.top*i-("fixed"===this.cssPosition?-this.offset.scroll.top:s?0:this.offset.scroll.top)*i,left:e.left+this.offset.relative.left*i+this.offset.parent.left*i-("fixed"===this.cssPosition?-this.offset.scroll.left:s?0:this.offset.scroll.left)*i}},_generatePosition:function(t,e){var i,s,n,o,a=this.options,r=this._isRootNode(this.scrollParent[0]),h=t.pageX,l=t.pageY;return r&&this.offset.scroll||(this.offset.scroll={top:this.scrollParent.scrollTop(),left:this.scrollParent.scrollLeft()}),e&&(this.containment&&(this.relativeContainer?(s=this.relativeContainer.offset(),i=[this.containment[0]+s.left,this.containment[1]+s.top,this.containment[2]+s.left,this.containment[3]+s.top]):i=this.containment,t.pageX-this.offset.click.left<i[0]&&(h=i[0]+this.offset.click.left),t.pageY-this.offset.click.top<i[1]&&(l=i[1]+this.offset.click.top),t.pageX-this.offset.click.left>i[2]&&(h=i[2]+this.offset.click.left),t.pageY-this.offset.click.top>i[3]&&(l=i[3]+this.offset.click.top)),a.grid&&(n=a.grid[1]?this.originalPageY+Math.round((l-this.originalPageY)/a.grid[1])*a.grid[1]:this.originalPageY,l=i?n-this.offset.click.top>=i[1]||n-this.offset.click.top>i[3]?n:n-this.offset.click.top>=i[1]?n-a.grid[1]:n+a.grid[1]:n,o=a.grid[0]?this.originalPageX+Math.round((h-this.originalPageX)/a.grid[0])*a.grid[0]:this.originalPageX,h=i?o-this.offset.click.left>=i[0]||o-this.offset.click.left>i[2]?o:o-this.offset.click.left>=i[0]?o-a.grid[0]:o+a.grid[0]:o),"y"===a.axis&&(h=this.originalPageX),"x"===a.axis&&(l=this.originalPageY)),{top:l-this.offset.click.top-this.offset.relative.top-this.offset.parent.top+("fixed"===this.cssPosition?-this.offset.scroll.top:r?0:this.offset.scroll.top),left:h-this.offset.click.left-this.offset.relative.left-this.offset.parent.left+("fixed"===this.cssPosition?-this.offset.scroll.left:r?0:this.offset.scroll.left)}},_clear:function(){this._removeClass(this.helper,"ui-draggable-dragging"),this.helper[0]===this.element[0]||this.cancelHelperRemoval||this.helper.remove(),this.helper=null,this.cancelHelperRemoval=!1,this.destroyOnClear&&this.destroy()},_trigger:function(e,i,s){return s=s||this._uiHash(),t.ui.plugin.call(this,e,[i,s,this],!0),/^(drag|start|stop)/.test(e)&&(this.positionAbs=this._convertPositionTo("absolute"),s.offset=this.positionAbs),t.Widget.prototype._trigger.call(this,e,i,s)},plugins:{},_uiHash:function(){return{helper:this.helper,position:this.position,originalPosition:this.originalPosition,offset:this.positionAbs}}}),t.ui.plugin.add("draggable","connectToSortable",{start:function(e,i,s){var n=t.extend({},i,{item:s.element});s.sortables=[],t(s.options.connectToSortable).each(function(){var i=t(this).sortable("instance");i&&!i.options.disabled&&(s.sortables.push(i),i.refreshPositions(),i._trigger("activate",e,n))})},stop:function(e,i,s){var n=t.extend({},i,{item:s.element});s.cancelHelperRemoval=!1,t.each(s.sortables,function(){var t=this;t.isOver?(t.isOver=0,s.cancelHelperRemoval=!0,t.cancelHelperRemoval=!1,t._storedCSS={position:t.placeholder.css("position"),top:t.placeholder.css("top"),left:t.placeholder.css("left")},t._mouseStop(e),t.options.helper=t.options._helper):(t.cancelHelperRemoval=!0,t._trigger("deactivate",e,n))})},drag:function(e,i,s){t.each(s.sortables,function(){var n=!1,o=this;o.positionAbs=s.positionAbs,o.helperProportions=s.helperProportions,o.offset.click=s.offset.click,o._intersectsWith(o.containerCache)&&(n=!0,t.each(s.sortables,function(){return this.positionAbs=s.positionAbs,this.helperProportions=s.helperProportions,this.offset.click=s.offset.click,this!==o&&this._intersectsWith(this.containerCache)&&t.contains(o.element[0],this.element[0])&&(n=!1),n})),n?(o.isOver||(o.isOver=1,s._parent=i.helper.parent(),o.currentItem=i.helper.appendTo(o.element).data("ui-sortable-item",!0),o.options._helper=o.options.helper,o.options.helper=function(){return i.helper[0]},e.target=o.currentItem[0],o._mouseCapture(e,!0),o._mouseStart(e,!0,!0),o.offset.click.top=s.offset.click.top,o.offset.click.left=s.offset.click.left,o.offset.parent.left-=s.offset.parent.left-o.offset.parent.left,o.offset.parent.top-=s.offset.parent.top-o.offset.parent.top,s._trigger("toSortable",e),s.dropped=o.element,t.each(s.sortables,function(){this.refreshPositions()}),s.currentItem=s.element,o.fromOutside=s),o.currentItem&&(o._mouseDrag(e),i.position=o.position)):o.isOver&&(o.isOver=0,o.cancelHelperRemoval=!0,o.options._revert=o.options.revert,o.options.revert=!1,o._trigger("out",e,o._uiHash(o)),o._mouseStop(e,!0),o.options.revert=o.options._revert,o.options.helper=o.options._helper,o.placeholder&&o.placeholder.remove(),i.helper.appendTo(s._parent),s._refreshOffsets(e),i.position=s._generatePosition(e,!0),s._trigger("fromSortable",e),s.dropped=!1,t.each(s.sortables,function(){this.refreshPositions()}))})}}),t.ui.plugin.add("draggable","cursor",{start:function(e,i,s){var n=t("body"),o=s.options;n.css("cursor")&&(o._cursor=n.css("cursor")),n.css("cursor",o.cursor)},stop:function(e,i,s){var n=s.options;n._cursor&&t("body").css("cursor",n._cursor)}}),t.ui.plugin.add("draggable","opacity",{start:function(e,i,s){var n=t(i.helper),o=s.options;n.css("opacity")&&(o._opacity=n.css("opacity")),n.css("opacity",o.opacity)},stop:function(e,i,s){var n=s.options;n._opacity&&t(i.helper).css("opacity",n._opacity)}}),t.ui.plugin.add("draggable","scroll",{start:function(t,e,i){i.scrollParentNotHidden||(i.scrollParentNotHidden=i.helper.scrollParent(!1)),i.scrollParentNotHidden[0]!==i.document[0]&&"HTML"!==i.scrollParentNotHidden[0].tagName&&(i.overflowOffset=i.scrollParentNotHidden.offset())},drag:function(e,i,s){var n=s.options,o=!1,a=s.scrollParentNotHidden[0],r=s.document[0];a!==r&&"HTML"!==a.tagName?(n.axis&&"x"===n.axis||(s.overflowOffset.top+a.offsetHeight-e.pageY<n.scrollSensitivity?a.scrollTop=o=a.scrollTop+n.scrollSpeed:e.pageY-s.overflowOffset.top<n.scrollSensitivity&&(a.scrollTop=o=a.scrollTop-n.scrollSpeed)),n.axis&&"y"===n.axis||(s.overflowOffset.left+a.offsetWidth-e.pageX<n.scrollSensitivity?a.scrollLeft=o=a.scrollLeft+n.scrollSpeed:e.pageX-s.overflowOffset.left<n.scrollSensitivity&&(a.scrollLeft=o=a.scrollLeft-n.scrollSpeed))):(n.axis&&"x"===n.axis||(e.pageY-t(r).scrollTop()<n.scrollSensitivity?o=t(r).scrollTop(t(r).scrollTop()-n.scrollSpeed):t(window).height()-(e.pageY-t(r).scrollTop())<n.scrollSensitivity&&(o=t(r).scrollTop(t(r).scrollTop()+n.scrollSpeed))),n.axis&&"y"===n.axis||(e.pageX-t(r).scrollLeft()<n.scrollSensitivity?o=t(r).scrollLeft(t(r).scrollLeft()-n.scrollSpeed):t(window).width()-(e.pageX-t(r).scrollLeft())<n.scrollSensitivity&&(o=t(r).scrollLeft(t(r).scrollLeft()+n.scrollSpeed)))),o!==!1&&t.ui.ddmanager&&!n.dropBehaviour&&t.ui.ddmanager.prepareOffsets(s,e)}}),t.ui.plugin.add("draggable","snap",{start:function(e,i,s){var n=s.options;s.snapElements=[],t(n.snap.constructor!==String?n.snap.items||":data(ui-draggable)":n.snap).each(function(){var e=t(this),i=e.offset();this!==s.element[0]&&s.snapElements.push({item:this,width:e.outerWidth(),height:e.outerHeight(),top:i.top,left:i.left})})},drag:function(e,i,s){var n,o,a,r,h,l,c,u,d,p,f=s.options,g=f.snapTolerance,m=i.offset.left,_=m+s.helperProportions.width,v=i.offset.top,b=v+s.helperProportions.height;for(d=s.snapElements.length-1;d>=0;d--)h=s.snapElements[d].left-s.margins.left,l=h+s.snapElements[d].width,c=s.snapElements[d].top-s.margins.top,u=c+s.snapElements[d].height,h-g>_||m>l+g||c-g>b||v>u+g||!t.contains(s.snapElements[d].item.ownerDocument,s.snapElements[d].item)?(s.snapElements[d].snapping&&s.options.snap.release&&s.options.snap.release.call(s.element,e,t.extend(s._uiHash(),{snapItem:s.snapElements[d].item})),s.snapElements[d].snapping=!1):("inner"!==f.snapMode&&(n=g>=Math.abs(c-b),o=g>=Math.abs(u-v),a=g>=Math.abs(h-_),r=g>=Math.abs(l-m),n&&(i.position.top=s._convertPositionTo("relative",{top:c-s.helperProportions.height,left:0}).top),o&&(i.position.top=s._convertPositionTo("relative",{top:u,left:0}).top),a&&(i.position.left=s._convertPositionTo("relative",{top:0,left:h-s.helperProportions.width}).left),r&&(i.position.left=s._convertPositionTo("relative",{top:0,left:l}).left)),p=n||o||a||r,"outer"!==f.snapMode&&(n=g>=Math.abs(c-v),o=g>=Math.abs(u-b),a=g>=Math.abs(h-m),r=g>=Math.abs(l-_),n&&(i.position.top=s._convertPositionTo("relative",{top:c,left:0}).top),o&&(i.position.top=s._convertPositionTo("relative",{top:u-s.helperProportions.height,left:0}).top),a&&(i.position.left=s._convertPositionTo("relative",{top:0,left:h}).left),r&&(i.position.left=s._convertPositionTo("relative",{top:0,left:l-s.helperProportions.width}).left)),!s.snapElements[d].snapping&&(n||o||a||r||p)&&s.options.snap.snap&&s.options.snap.snap.call(s.element,e,t.extend(s._uiHash(),{snapItem:s.snapElements[d].item})),s.snapElements[d].snapping=n||o||a||r||p)}}),t.ui.plugin.add("draggable","stack",{start:function(e,i,s){var n,o=s.options,a=t.makeArray(t(o.stack)).sort(function(e,i){return(parseInt(t(e).css("zIndex"),10)||0)-(parseInt(t(i).css("zIndex"),10)||0)});a.length&&(n=parseInt(t(a[0]).css("zIndex"),10)||0,t(a).each(function(e){t(this).css("zIndex",n+e)}),this.css("zIndex",n+a.length))}}),t.ui.plugin.add("draggable","zIndex",{start:function(e,i,s){var n=t(i.helper),o=s.options;n.css("zIndex")&&(o._zIndex=n.css("zIndex")),n.css("zIndex",o.zIndex)},stop:function(e,i,s){var n=s.options;n._zIndex&&t(i.helper).css("zIndex",n._zIndex)}}),t.ui.draggable,t.widget("ui.resizable",t.ui.mouse,{version:"1.12.1",widgetEventPrefix:"resize",options:{alsoResize:!1,animate:!1,animateDuration:"slow",animateEasing:"swing",aspectRatio:!1,autoHide:!1,classes:{"ui-resizable-se":"ui-icon ui-icon-gripsmall-diagonal-se"},containment:!1,ghost:!1,grid:!1,handles:"e,s,se",helper:!1,maxHeight:null,maxWidth:null,minHeight:10,minWidth:10,zIndex:90,resize:null,start:null,stop:null},_num:function(t){return parseFloat(t)||0},_isNumber:function(t){return!isNaN(parseFloat(t))},_hasScroll:function(e,i){if("hidden"===t(e).css("overflow"))return!1;var s=i&&"left"===i?"scrollLeft":"scrollTop",n=!1;return e[s]>0?!0:(e[s]=1,n=e[s]>0,e[s]=0,n)},_create:function(){var e,i=this.options,s=this;this._addClass("ui-resizable"),t.extend(this,{_aspectRatio:!!i.aspectRatio,aspectRatio:i.aspectRatio,originalElement:this.element,_proportionallyResizeElements:[],_helper:i.helper||i.ghost||i.animate?i.helper||"ui-resizable-helper":null}),this.element[0].nodeName.match(/^(canvas|textarea|input|select|button|img)$/i)&&(this.element.wrap(t("<div class='ui-wrapper' style='overflow: hidden;'></div>").css({position:this.element.css("position"),width:this.element.outerWidth(),height:this.element.outerHeight(),top:this.element.css("top"),left:this.element.css("left")})),this.element=this.element.parent().data("ui-resizable",this.element.resizable("instance")),this.elementIsWrapper=!0,e={marginTop:this.originalElement.css("marginTop"),marginRight:this.originalElement.css("marginRight"),marginBottom:this.originalElement.css("marginBottom"),marginLeft:this.originalElement.css("marginLeft")},this.element.css(e),this.originalElement.css("margin",0),this.originalResizeStyle=this.originalElement.css("resize"),this.originalElement.css("resize","none"),this._proportionallyResizeElements.push(this.originalElement.css({position:"static",zoom:1,display:"block"})),this.originalElement.css(e),this._proportionallyResize()),this._setupHandles(),i.autoHide&&t(this.element).on("mouseenter",function(){i.disabled||(s._removeClass("ui-resizable-autohide"),s._handles.show())}).on("mouseleave",function(){i.disabled||s.resizing||(s._addClass("ui-resizable-autohide"),s._handles.hide())}),this._mouseInit()},_destroy:function(){this._mouseDestroy();var e,i=function(e){t(e).removeData("resizable").removeData("ui-resizable").off(".resizable").find(".ui-resizable-handle").remove()};return this.elementIsWrapper&&(i(this.element),e=this.element,this.originalElement.css({position:e.css("position"),width:e.outerWidth(),height:e.outerHeight(),top:e.css("top"),left:e.css("left")}).insertAfter(e),e.remove()),this.originalElement.css("resize",this.originalResizeStyle),i(this.originalElement),this},_setOption:function(t,e){switch(this._super(t,e),t){case"handles":this._removeHandles(),this._setupHandles();break;default:}},_setupHandles:function(){var e,i,s,n,o,a=this.options,r=this;if(this.handles=a.handles||(t(".ui-resizable-handle",this.element).length?{n:".ui-resizable-n",e:".ui-resizable-e",s:".ui-resizable-s",w:".ui-resizable-w",se:".ui-resizable-se",sw:".ui-resizable-sw",ne:".ui-resizable-ne",nw:".ui-resizable-nw"}:"e,s,se"),this._handles=t(),this.handles.constructor===String)for("all"===this.handles&&(this.handles="n,e,s,w,se,sw,ne,nw"),s=this.handles.split(","),this.handles={},i=0;s.length>i;i++)e=t.trim(s[i]),n="ui-resizable-"+e,o=t("<div>"),this._addClass(o,"ui-resizable-handle "+n),o.css({zIndex:a.zIndex}),this.handles[e]=".ui-resizable-"+e,this.element.append(o);this._renderAxis=function(e){var i,s,n,o;e=e||this.element;for(i in this.handles)this.handles[i].constructor===String?this.handles[i]=this.element.children(this.handles[i]).first().show():(this.handles[i].jquery||this.handles[i].nodeType)&&(this.handles[i]=t(this.handles[i]),this._on(this.handles[i],{mousedown:r._mouseDown})),this.elementIsWrapper&&this.originalElement[0].nodeName.match(/^(textarea|input|select|button)$/i)&&(s=t(this.handles[i],this.element),o=/sw|ne|nw|se|n|s/.test(i)?s.outerHeight():s.outerWidth(),n=["padding",/ne|nw|n/.test(i)?"Top":/se|sw|s/.test(i)?"Bottom":/^e$/.test(i)?"Right":"Left"].join(""),e.css(n,o),this._proportionallyResize()),this._handles=this._handles.add(this.handles[i])},this._renderAxis(this.element),this._handles=this._handles.add(this.element.find(".ui-resizable-handle")),this._handles.disableSelection(),this._handles.on("mouseover",function(){r.resizing||(this.className&&(o=this.className.match(/ui-resizable-(se|sw|ne|nw|n|e|s|w)/i)),r.axis=o&&o[1]?o[1]:"se")}),a.autoHide&&(this._handles.hide(),this._addClass("ui-resizable-autohide"))},_removeHandles:function(){this._handles.remove()},_mouseCapture:function(e){var i,s,n=!1;for(i in this.handles)s=t(this.handles[i])[0],(s===e.target||t.contains(s,e.target))&&(n=!0);return!this.options.disabled&&n},_mouseStart:function(e){var i,s,n,o=this.options,a=this.element;return this.resizing=!0,this._renderProxy(),i=this._num(this.helper.css("left")),s=this._num(this.helper.css("top")),o.containment&&(i+=t(o.containment).scrollLeft()||0,s+=t(o.containment).scrollTop()||0),this.offset=this.helper.offset(),this.position={left:i,top:s},this.size=this._helper?{width:this.helper.width(),height:this.helper.height()}:{width:a.width(),height:a.height()},this.originalSize=this._helper?{width:a.outerWidth(),height:a.outerHeight()}:{width:a.width(),height:a.height()},this.sizeDiff={width:a.outerWidth()-a.width(),height:a.outerHeight()-a.height()},this.originalPosition={left:i,top:s},this.originalMousePosition={left:e.pageX,top:e.pageY},this.aspectRatio="number"==typeof o.aspectRatio?o.aspectRatio:this.originalSize.width/this.originalSize.height||1,n=t(".ui-resizable-"+this.axis).css("cursor"),t("body").css("cursor","auto"===n?this.axis+"-resize":n),this._addClass("ui-resizable-resizing"),this._propagate("start",e),!0},_mouseDrag:function(e){var i,s,n=this.originalMousePosition,o=this.axis,a=e.pageX-n.left||0,r=e.pageY-n.top||0,h=this._change[o];return this._updatePrevProperties(),h?(i=h.apply(this,[e,a,r]),this._updateVirtualBoundaries(e.shiftKey),(this._aspectRatio||e.shiftKey)&&(i=this._updateRatio(i,e)),i=this._respectSize(i,e),this._updateCache(i),this._propagate("resize",e),s=this._applyChanges(),!this._helper&&this._proportionallyResizeElements.length&&this._proportionallyResize(),t.isEmptyObject(s)||(this._updatePrevProperties(),this._trigger("resize",e,this.ui()),this._applyChanges()),!1):!1},_mouseStop:function(e){this.resizing=!1;var i,s,n,o,a,r,h,l=this.options,c=this;return this._helper&&(i=this._proportionallyResizeElements,s=i.length&&/textarea/i.test(i[0].nodeName),n=s&&this._hasScroll(i[0],"left")?0:c.sizeDiff.height,o=s?0:c.sizeDiff.width,a={width:c.helper.width()-o,height:c.helper.height()-n},r=parseFloat(c.element.css("left"))+(c.position.left-c.originalPosition.left)||null,h=parseFloat(c.element.css("top"))+(c.position.top-c.originalPosition.top)||null,l.animate||this.element.css(t.extend(a,{top:h,left:r})),c.helper.height(c.size.height),c.helper.width(c.size.width),this._helper&&!l.animate&&this._proportionallyResize()),t("body").css("cursor","auto"),this._removeClass("ui-resizable-resizing"),this._propagate("stop",e),this._helper&&this.helper.remove(),!1},_updatePrevProperties:function(){this.prevPosition={top:this.position.top,left:this.position.left},this.prevSize={width:this.size.width,height:this.size.height}},_applyChanges:function(){var t={};return this.position.top!==this.prevPosition.top&&(t.top=this.position.top+"px"),this.position.left!==this.prevPosition.left&&(t.left=this.position.left+"px"),this.size.width!==this.prevSize.width&&(t.width=this.size.width+"px"),this.size.height!==this.prevSize.height&&(t.height=this.size.height+"px"),this.helper.css(t),t},_updateVirtualBoundaries:function(t){var e,i,s,n,o,a=this.options;o={minWidth:this._isNumber(a.minWidth)?a.minWidth:0,maxWidth:this._isNumber(a.maxWidth)?a.maxWidth:1/0,minHeight:this._isNumber(a.minHeight)?a.minHeight:0,maxHeight:this._isNumber(a.maxHeight)?a.maxHeight:1/0},(this._aspectRatio||t)&&(e=o.minHeight*this.aspectRatio,s=o.minWidth/this.aspectRatio,i=o.maxHeight*this.aspectRatio,n=o.maxWidth/this.aspectRatio,e>o.minWidth&&(o.minWidth=e),s>o.minHeight&&(o.minHeight=s),o.maxWidth>i&&(o.maxWidth=i),o.maxHeight>n&&(o.maxHeight=n)),this._vBoundaries=o},_updateCache:function(t){this.offset=this.helper.offset(),this._isNumber(t.left)&&(this.position.left=t.left),this._isNumber(t.top)&&(this.position.top=t.top),this._isNumber(t.height)&&(this.size.height=t.height),this._isNumber(t.width)&&(this.size.width=t.width)},_updateRatio:function(t){var e=this.position,i=this.size,s=this.axis;return this._isNumber(t.height)?t.width=t.height*this.aspectRatio:this._isNumber(t.width)&&(t.height=t.width/this.aspectRatio),"sw"===s&&(t.left=e.left+(i.width-t.width),t.top=null),"nw"===s&&(t.top=e.top+(i.height-t.height),t.left=e.left+(i.width-t.width)),t},_respectSize:function(t){var e=this._vBoundaries,i=this.axis,s=this._isNumber(t.width)&&e.maxWidth&&e.maxWidth<t.width,n=this._isNumber(t.height)&&e.maxHeight&&e.maxHeight<t.height,o=this._isNumber(t.width)&&e.minWidth&&e.minWidth>t.width,a=this._isNumber(t.height)&&e.minHeight&&e.minHeight>t.height,r=this.originalPosition.left+this.originalSize.width,h=this.originalPosition.top+this.originalSize.height,l=/sw|nw|w/.test(i),c=/nw|ne|n/.test(i);return o&&(t.width=e.minWidth),a&&(t.height=e.minHeight),s&&(t.width=e.maxWidth),n&&(t.height=e.maxHeight),o&&l&&(t.left=r-e.minWidth),s&&l&&(t.left=r-e.maxWidth),a&&c&&(t.top=h-e.minHeight),n&&c&&(t.top=h-e.maxHeight),t.width||t.height||t.left||!t.top?t.width||t.height||t.top||!t.left||(t.left=null):t.top=null,t},_getPaddingPlusBorderDimensions:function(t){for(var e=0,i=[],s=[t.css("borderTopWidth"),t.css("borderRightWidth"),t.css("borderBottomWidth"),t.css("borderLeftWidth")],n=[t.css("paddingTop"),t.css("paddingRight"),t.css("paddingBottom"),t.css("paddingLeft")];4>e;e++)i[e]=parseFloat(s[e])||0,i[e]+=parseFloat(n[e])||0;return{height:i[0]+i[2],width:i[1]+i[3]}},_proportionallyResize:function(){if(this._proportionallyResizeElements.length)for(var t,e=0,i=this.helper||this.element;this._proportionallyResizeElements.length>e;e++)t=this._proportionallyResizeElements[e],this.outerDimensions||(this.outerDimensions=this._getPaddingPlusBorderDimensions(t)),t.css({height:i.height()-this.outerDimensions.height||0,width:i.width()-this.outerDimensions.width||0})},_renderProxy:function(){var e=this.element,i=this.options;this.elementOffset=e.offset(),this._helper?(this.helper=this.helper||t("<div style='overflow:hidden;'></div>"),this._addClass(this.helper,this._helper),this.helper.css({width:this.element.outerWidth(),height:this.element.outerHeight(),position:"absolute",left:this.elementOffset.left+"px",top:this.elementOffset.top+"px",zIndex:++i.zIndex}),this.helper.appendTo("body").disableSelection()):this.helper=this.element},_change:{e:function(t,e){return{width:this.originalSize.width+e}},w:function(t,e){var i=this.originalSize,s=this.originalPosition;return{left:s.left+e,width:i.width-e}},n:function(t,e,i){var s=this.originalSize,n=this.originalPosition;return{top:n.top+i,height:s.height-i}},s:function(t,e,i){return{height:this.originalSize.height+i}},se:function(e,i,s){return t.extend(this._change.s.apply(this,arguments),this._change.e.apply(this,[e,i,s]))},sw:function(e,i,s){return t.extend(this._change.s.apply(this,arguments),this._change.w.apply(this,[e,i,s]))},ne:function(e,i,s){return t.extend(this._change.n.apply(this,arguments),this._change.e.apply(this,[e,i,s]))},nw:function(e,i,s){return t.extend(this._change.n.apply(this,arguments),this._change.w.apply(this,[e,i,s]))}},_propagate:function(e,i){t.ui.plugin.call(this,e,[i,this.ui()]),"resize"!==e&&this._trigger(e,i,this.ui())},plugins:{},ui:function(){return{originalElement:this.originalElement,element:this.element,helper:this.helper,position:this.position,size:this.size,originalSize:this.originalSize,originalPosition:this.originalPosition}}}),t.ui.plugin.add("resizable","animate",{stop:function(e){var i=t(this).resizable("instance"),s=i.options,n=i._proportionallyResizeElements,o=n.length&&/textarea/i.test(n[0].nodeName),a=o&&i._hasScroll(n[0],"left")?0:i.sizeDiff.height,r=o?0:i.sizeDiff.width,h={width:i.size.width-r,height:i.size.height-a},l=parseFloat(i.element.css("left"))+(i.position.left-i.originalPosition.left)||null,c=parseFloat(i.element.css("top"))+(i.position.top-i.originalPosition.top)||null;i.element.animate(t.extend(h,c&&l?{top:c,left:l}:{}),{duration:s.animateDuration,easing:s.animateEasing,step:function(){var s={width:parseFloat(i.element.css("width")),height:parseFloat(i.element.css("height")),top:parseFloat(i.element.css("top")),left:parseFloat(i.element.css("left"))};n&&n.length&&t(n[0]).css({width:s.width,height:s.height}),i._updateCache(s),i._propagate("resize",e)}})}}),t.ui.plugin.add("resizable","containment",{start:function(){var e,i,s,n,o,a,r,h=t(this).resizable("instance"),l=h.options,c=h.element,u=l.containment,d=u instanceof t?u.get(0):/parent/.test(u)?c.parent().get(0):u;d&&(h.containerElement=t(d),/document/.test(u)||u===document?(h.containerOffset={left:0,top:0},h.containerPosition={left:0,top:0},h.parentData={element:t(document),left:0,top:0,width:t(document).width(),height:t(document).height()||document.body.parentNode.scrollHeight}):(e=t(d),i=[],t(["Top","Right","Left","Bottom"]).each(function(t,s){i[t]=h._num(e.css("padding"+s))}),h.containerOffset=e.offset(),h.containerPosition=e.position(),h.containerSize={height:e.innerHeight()-i[3],width:e.innerWidth()-i[1]},s=h.containerOffset,n=h.containerSize.height,o=h.containerSize.width,a=h._hasScroll(d,"left")?d.scrollWidth:o,r=h._hasScroll(d)?d.scrollHeight:n,h.parentData={element:d,left:s.left,top:s.top,width:a,height:r}))},resize:function(e){var i,s,n,o,a=t(this).resizable("instance"),r=a.options,h=a.containerOffset,l=a.position,c=a._aspectRatio||e.shiftKey,u={top:0,left:0},d=a.containerElement,p=!0;d[0]!==document&&/static/.test(d.css("position"))&&(u=h),l.left<(a._helper?h.left:0)&&(a.size.width=a.size.width+(a._helper?a.position.left-h.left:a.position.left-u.left),c&&(a.size.height=a.size.width/a.aspectRatio,p=!1),a.position.left=r.helper?h.left:0),l.top<(a._helper?h.top:0)&&(a.size.height=a.size.height+(a._helper?a.position.top-h.top:a.position.top),c&&(a.size.width=a.size.height*a.aspectRatio,p=!1),a.position.top=a._helper?h.top:0),n=a.containerElement.get(0)===a.element.parent().get(0),o=/relative|absolute/.test(a.containerElement.css("position")),n&&o?(a.offset.left=a.parentData.left+a.position.left,a.offset.top=a.parentData.top+a.position.top):(a.offset.left=a.element.offset().left,a.offset.top=a.element.offset().top),i=Math.abs(a.sizeDiff.width+(a._helper?a.offset.left-u.left:a.offset.left-h.left)),s=Math.abs(a.sizeDiff.height+(a._helper?a.offset.top-u.top:a.offset.top-h.top)),i+a.size.width>=a.parentData.width&&(a.size.width=a.parentData.width-i,c&&(a.size.height=a.size.width/a.aspectRatio,p=!1)),s+a.size.height>=a.parentData.height&&(a.size.height=a.parentData.height-s,c&&(a.size.width=a.size.height*a.aspectRatio,p=!1)),p||(a.position.left=a.prevPosition.left,a.position.top=a.prevPosition.top,a.size.width=a.prevSize.width,a.size.height=a.prevSize.height)},stop:function(){var e=t(this).resizable("instance"),i=e.options,s=e.containerOffset,n=e.containerPosition,o=e.containerElement,a=t(e.helper),r=a.offset(),h=a.outerWidth()-e.sizeDiff.width,l=a.outerHeight()-e.sizeDiff.height;e._helper&&!i.animate&&/relative/.test(o.css("position"))&&t(this).css({left:r.left-n.left-s.left,width:h,height:l}),e._helper&&!i.animate&&/static/.test(o.css("position"))&&t(this).css({left:r.left-n.left-s.left,width:h,height:l})}}),t.ui.plugin.add("resizable","alsoResize",{start:function(){var e=t(this).resizable("instance"),i=e.options;t(i.alsoResize).each(function(){var e=t(this);e.data("ui-resizable-alsoresize",{width:parseFloat(e.width()),height:parseFloat(e.height()),left:parseFloat(e.css("left")),top:parseFloat(e.css("top"))})})},resize:function(e,i){var s=t(this).resizable("instance"),n=s.options,o=s.originalSize,a=s.originalPosition,r={height:s.size.height-o.height||0,width:s.size.width-o.width||0,top:s.position.top-a.top||0,left:s.position.left-a.left||0};t(n.alsoResize).each(function(){var e=t(this),s=t(this).data("ui-resizable-alsoresize"),n={},o=e.parents(i.originalElement[0]).length?["width","height"]:["width","height","top","left"];t.each(o,function(t,e){var i=(s[e]||0)+(r[e]||0);i&&i>=0&&(n[e]=i||null)}),e.css(n)})},stop:function(){t(this).removeData("ui-resizable-alsoresize")}}),t.ui.plugin.add("resizable","ghost",{start:function(){var e=t(this).resizable("instance"),i=e.size;e.ghost=e.originalElement.clone(),e.ghost.css({opacity:.25,display:"block",position:"relative",height:i.height,width:i.width,margin:0,left:0,top:0}),e._addClass(e.ghost,"ui-resizable-ghost"),t.uiBackCompat!==!1&&"string"==typeof e.options.ghost&&e.ghost.addClass(this.options.ghost),e.ghost.appendTo(e.helper)},resize:function(){var e=t(this).resizable("instance");e.ghost&&e.ghost.css({position:"relative",height:e.size.height,width:e.size.width})},stop:function(){var e=t(this).resizable("instance");e.ghost&&e.helper&&e.helper.get(0).removeChild(e.ghost.get(0))}}),t.ui.plugin.add("resizable","grid",{resize:function(){var e,i=t(this).resizable("instance"),s=i.options,n=i.size,o=i.originalSize,a=i.originalPosition,r=i.axis,h="number"==typeof s.grid?[s.grid,s.grid]:s.grid,l=h[0]||1,c=h[1]||1,u=Math.round((n.width-o.width)/l)*l,d=Math.round((n.height-o.height)/c)*c,p=o.width+u,f=o.height+d,g=s.maxWidth&&p>s.maxWidth,m=s.maxHeight&&f>s.maxHeight,_=s.minWidth&&s.minWidth>p,v=s.minHeight&&s.minHeight>f;s.grid=h,_&&(p+=l),v&&(f+=c),g&&(p-=l),m&&(f-=c),/^(se|s|e)$/.test(r)?(i.size.width=p,i.size.height=f):/^(ne)$/.test(r)?(i.size.width=p,i.size.height=f,i.position.top=a.top-d):/^(sw)$/.test(r)?(i.size.width=p,i.size.height=f,i.position.left=a.left-u):((0>=f-c||0>=p-l)&&(e=i._getPaddingPlusBorderDimensions(this)),f-c>0?(i.size.height=f,i.position.top=a.top-d):(f=c-e.height,i.size.height=f,i.position.top=a.top+o.height-f),p-l>0?(i.size.width=p,i.position.left=a.left-u):(p=l-e.width,i.size.width=p,i.position.left=a.left+o.width-p))}}),t.ui.resizable,t.widget("ui.dialog",{version:"1.12.1",options:{appendTo:"body",autoOpen:!0,buttons:[],classes:{"ui-dialog":"ui-corner-all","ui-dialog-titlebar":"ui-corner-all"},closeOnEscape:!0,closeText:"Close",draggable:!0,hide:null,height:"auto",maxHeight:null,maxWidth:null,minHeight:150,minWidth:150,modal:!1,position:{my:"center",at:"center",of:window,collision:"fit",using:function(e){var i=t(this).css(e).offset().top;0>i&&t(this).css("top",e.top-i)}},resizable:!0,show:null,title:null,width:300,beforeClose:null,close:null,drag:null,dragStart:null,dragStop:null,focus:null,open:null,resize:null,resizeStart:null,resizeStop:null},sizeRelatedOptions:{buttons:!0,height:!0,maxHeight:!0,maxWidth:!0,minHeight:!0,minWidth:!0,width:!0},resizableRelatedOptions:{maxHeight:!0,maxWidth:!0,minHeight:!0,minWidth:!0},_create:function(){this.originalCss={display:this.element[0].style.display,width:this.element[0].style.width,minHeight:this.element[0].style.minHeight,maxHeight:this.element[0].style.maxHeight,height:this.element[0].style.height},this.originalPosition={parent:this.element.parent(),index:this.element.parent().children().index(this.element)},this.originalTitle=this.element.attr("title"),null==this.options.title&&null!=this.originalTitle&&(this.options.title=this.originalTitle),this.options.disabled&&(this.options.disabled=!1),this._createWrapper(),this.element.show().removeAttr("title").appendTo(this.uiDialog),this._addClass("ui-dialog-content","ui-widget-content"),this._createTitlebar(),this._createButtonPane(),this.options.draggable&&t.fn.draggable&&this._makeDraggable(),this.options.resizable&&t.fn.resizable&&this._makeResizable(),this._isOpen=!1,this._trackFocus()},_init:function(){this.options.autoOpen&&this.open()},_appendTo:function(){var e=this.options.appendTo;return e&&(e.jquery||e.nodeType)?t(e):this.document.find(e||"body").eq(0)},_destroy:function(){var t,e=this.originalPosition;this._untrackInstance(),this._destroyOverlay(),this.element.removeUniqueId().css(this.originalCss).detach(),this.uiDialog.remove(),this.originalTitle&&this.element.attr("title",this.originalTitle),t=e.parent.children().eq(e.index),t.length&&t[0]!==this.element[0]?t.before(this.element):e.parent.append(this.element)},widget:function(){return this.uiDialog
-},disable:t.noop,enable:t.noop,close:function(e){var i=this;this._isOpen&&this._trigger("beforeClose",e)!==!1&&(this._isOpen=!1,this._focusedElement=null,this._destroyOverlay(),this._untrackInstance(),this.opener.filter(":focusable").trigger("focus").length||t.ui.safeBlur(t.ui.safeActiveElement(this.document[0])),this._hide(this.uiDialog,this.options.hide,function(){i._trigger("close",e)}))},isOpen:function(){return this._isOpen},moveToTop:function(){this._moveToTop()},_moveToTop:function(e,i){var s=!1,n=this.uiDialog.siblings(".ui-front:visible").map(function(){return+t(this).css("z-index")}).get(),o=Math.max.apply(null,n);return o>=+this.uiDialog.css("z-index")&&(this.uiDialog.css("z-index",o+1),s=!0),s&&!i&&this._trigger("focus",e),s},open:function(){var e=this;return this._isOpen?(this._moveToTop()&&this._focusTabbable(),void 0):(this._isOpen=!0,this.opener=t(t.ui.safeActiveElement(this.document[0])),this._size(),this._position(),this._createOverlay(),this._moveToTop(null,!0),this.overlay&&this.overlay.css("z-index",this.uiDialog.css("z-index")-1),this._show(this.uiDialog,this.options.show,function(){e._focusTabbable(),e._trigger("focus")}),this._makeFocusTarget(),this._trigger("open"),void 0)},_focusTabbable:function(){var t=this._focusedElement;t||(t=this.element.find("[autofocus]")),t.length||(t=this.element.find(":tabbable")),t.length||(t=this.uiDialogButtonPane.find(":tabbable")),t.length||(t=this.uiDialogTitlebarClose.filter(":tabbable")),t.length||(t=this.uiDialog),t.eq(0).trigger("focus")},_keepFocus:function(e){function i(){var e=t.ui.safeActiveElement(this.document[0]),i=this.uiDialog[0]===e||t.contains(this.uiDialog[0],e);i||this._focusTabbable()}e.preventDefault(),i.call(this),this._delay(i)},_createWrapper:function(){this.uiDialog=t("<div>").hide().attr({tabIndex:-1,role:"dialog"}).appendTo(this._appendTo()),this._addClass(this.uiDialog,"ui-dialog","ui-widget ui-widget-content ui-front"),this._on(this.uiDialog,{keydown:function(e){if(this.options.closeOnEscape&&!e.isDefaultPrevented()&&e.keyCode&&e.keyCode===t.ui.keyCode.ESCAPE)return e.preventDefault(),this.close(e),void 0;if(e.keyCode===t.ui.keyCode.TAB&&!e.isDefaultPrevented()){var i=this.uiDialog.find(":tabbable"),s=i.filter(":first"),n=i.filter(":last");e.target!==n[0]&&e.target!==this.uiDialog[0]||e.shiftKey?e.target!==s[0]&&e.target!==this.uiDialog[0]||!e.shiftKey||(this._delay(function(){n.trigger("focus")}),e.preventDefault()):(this._delay(function(){s.trigger("focus")}),e.preventDefault())}},mousedown:function(t){this._moveToTop(t)&&this._focusTabbable()}}),this.element.find("[aria-describedby]").length||this.uiDialog.attr({"aria-describedby":this.element.uniqueId().attr("id")})},_createTitlebar:function(){var e;this.uiDialogTitlebar=t("<div>"),this._addClass(this.uiDialogTitlebar,"ui-dialog-titlebar","ui-widget-header ui-helper-clearfix"),this._on(this.uiDialogTitlebar,{mousedown:function(e){t(e.target).closest(".ui-dialog-titlebar-close")||this.uiDialog.trigger("focus")}}),this.uiDialogTitlebarClose=t("<button type='button'></button>").button({label:t("<a>").text(this.options.closeText).html(),icon:"ui-icon-closethick",showLabel:!1}).appendTo(this.uiDialogTitlebar),this._addClass(this.uiDialogTitlebarClose,"ui-dialog-titlebar-close"),this._on(this.uiDialogTitlebarClose,{click:function(t){t.preventDefault(),this.close(t)}}),e=t("<span>").uniqueId().prependTo(this.uiDialogTitlebar),this._addClass(e,"ui-dialog-title"),this._title(e),this.uiDialogTitlebar.prependTo(this.uiDialog),this.uiDialog.attr({"aria-labelledby":e.attr("id")})},_title:function(t){this.options.title?t.text(this.options.title):t.html("&#160;")},_createButtonPane:function(){this.uiDialogButtonPane=t("<div>"),this._addClass(this.uiDialogButtonPane,"ui-dialog-buttonpane","ui-widget-content ui-helper-clearfix"),this.uiButtonSet=t("<div>").appendTo(this.uiDialogButtonPane),this._addClass(this.uiButtonSet,"ui-dialog-buttonset"),this._createButtons()},_createButtons:function(){var e=this,i=this.options.buttons;return this.uiDialogButtonPane.remove(),this.uiButtonSet.empty(),t.isEmptyObject(i)||t.isArray(i)&&!i.length?(this._removeClass(this.uiDialog,"ui-dialog-buttons"),void 0):(t.each(i,function(i,s){var n,o;s=t.isFunction(s)?{click:s,text:i}:s,s=t.extend({type:"button"},s),n=s.click,o={icon:s.icon,iconPosition:s.iconPosition,showLabel:s.showLabel,icons:s.icons,text:s.text},delete s.click,delete s.icon,delete s.iconPosition,delete s.showLabel,delete s.icons,"boolean"==typeof s.text&&delete s.text,t("<button></button>",s).button(o).appendTo(e.uiButtonSet).on("click",function(){n.apply(e.element[0],arguments)})}),this._addClass(this.uiDialog,"ui-dialog-buttons"),this.uiDialogButtonPane.appendTo(this.uiDialog),void 0)},_makeDraggable:function(){function e(t){return{position:t.position,offset:t.offset}}var i=this,s=this.options;this.uiDialog.draggable({cancel:".ui-dialog-content, .ui-dialog-titlebar-close",handle:".ui-dialog-titlebar",containment:"document",start:function(s,n){i._addClass(t(this),"ui-dialog-dragging"),i._blockFrames(),i._trigger("dragStart",s,e(n))},drag:function(t,s){i._trigger("drag",t,e(s))},stop:function(n,o){var a=o.offset.left-i.document.scrollLeft(),r=o.offset.top-i.document.scrollTop();s.position={my:"left top",at:"left"+(a>=0?"+":"")+a+" "+"top"+(r>=0?"+":"")+r,of:i.window},i._removeClass(t(this),"ui-dialog-dragging"),i._unblockFrames(),i._trigger("dragStop",n,e(o))}})},_makeResizable:function(){function e(t){return{originalPosition:t.originalPosition,originalSize:t.originalSize,position:t.position,size:t.size}}var i=this,s=this.options,n=s.resizable,o=this.uiDialog.css("position"),a="string"==typeof n?n:"n,e,s,w,se,sw,ne,nw";this.uiDialog.resizable({cancel:".ui-dialog-content",containment:"document",alsoResize:this.element,maxWidth:s.maxWidth,maxHeight:s.maxHeight,minWidth:s.minWidth,minHeight:this._minHeight(),handles:a,start:function(s,n){i._addClass(t(this),"ui-dialog-resizing"),i._blockFrames(),i._trigger("resizeStart",s,e(n))},resize:function(t,s){i._trigger("resize",t,e(s))},stop:function(n,o){var a=i.uiDialog.offset(),r=a.left-i.document.scrollLeft(),h=a.top-i.document.scrollTop();s.height=i.uiDialog.height(),s.width=i.uiDialog.width(),s.position={my:"left top",at:"left"+(r>=0?"+":"")+r+" "+"top"+(h>=0?"+":"")+h,of:i.window},i._removeClass(t(this),"ui-dialog-resizing"),i._unblockFrames(),i._trigger("resizeStop",n,e(o))}}).css("position",o)},_trackFocus:function(){this._on(this.widget(),{focusin:function(e){this._makeFocusTarget(),this._focusedElement=t(e.target)}})},_makeFocusTarget:function(){this._untrackInstance(),this._trackingInstances().unshift(this)},_untrackInstance:function(){var e=this._trackingInstances(),i=t.inArray(this,e);-1!==i&&e.splice(i,1)},_trackingInstances:function(){var t=this.document.data("ui-dialog-instances");return t||(t=[],this.document.data("ui-dialog-instances",t)),t},_minHeight:function(){var t=this.options;return"auto"===t.height?t.minHeight:Math.min(t.minHeight,t.height)},_position:function(){var t=this.uiDialog.is(":visible");t||this.uiDialog.show(),this.uiDialog.position(this.options.position),t||this.uiDialog.hide()},_setOptions:function(e){var i=this,s=!1,n={};t.each(e,function(t,e){i._setOption(t,e),t in i.sizeRelatedOptions&&(s=!0),t in i.resizableRelatedOptions&&(n[t]=e)}),s&&(this._size(),this._position()),this.uiDialog.is(":data(ui-resizable)")&&this.uiDialog.resizable("option",n)},_setOption:function(e,i){var s,n,o=this.uiDialog;"disabled"!==e&&(this._super(e,i),"appendTo"===e&&this.uiDialog.appendTo(this._appendTo()),"buttons"===e&&this._createButtons(),"closeText"===e&&this.uiDialogTitlebarClose.button({label:t("<a>").text(""+this.options.closeText).html()}),"draggable"===e&&(s=o.is(":data(ui-draggable)"),s&&!i&&o.draggable("destroy"),!s&&i&&this._makeDraggable()),"position"===e&&this._position(),"resizable"===e&&(n=o.is(":data(ui-resizable)"),n&&!i&&o.resizable("destroy"),n&&"string"==typeof i&&o.resizable("option","handles",i),n||i===!1||this._makeResizable()),"title"===e&&this._title(this.uiDialogTitlebar.find(".ui-dialog-title")))},_size:function(){var t,e,i,s=this.options;this.element.show().css({width:"auto",minHeight:0,maxHeight:"none",height:0}),s.minWidth>s.width&&(s.width=s.minWidth),t=this.uiDialog.css({height:"auto",width:s.width}).outerHeight(),e=Math.max(0,s.minHeight-t),i="number"==typeof s.maxHeight?Math.max(0,s.maxHeight-t):"none","auto"===s.height?this.element.css({minHeight:e,maxHeight:i,height:"auto"}):this.element.height(Math.max(0,s.height-t)),this.uiDialog.is(":data(ui-resizable)")&&this.uiDialog.resizable("option","minHeight",this._minHeight())},_blockFrames:function(){this.iframeBlocks=this.document.find("iframe").map(function(){var e=t(this);return t("<div>").css({position:"absolute",width:e.outerWidth(),height:e.outerHeight()}).appendTo(e.parent()).offset(e.offset())[0]})},_unblockFrames:function(){this.iframeBlocks&&(this.iframeBlocks.remove(),delete this.iframeBlocks)},_allowInteraction:function(e){return t(e.target).closest(".ui-dialog").length?!0:!!t(e.target).closest(".ui-datepicker").length},_createOverlay:function(){if(this.options.modal){var e=!0;this._delay(function(){e=!1}),this.document.data("ui-dialog-overlays")||this._on(this.document,{focusin:function(t){e||this._allowInteraction(t)||(t.preventDefault(),this._trackingInstances()[0]._focusTabbable())}}),this.overlay=t("<div>").appendTo(this._appendTo()),this._addClass(this.overlay,null,"ui-widget-overlay ui-front"),this._on(this.overlay,{mousedown:"_keepFocus"}),this.document.data("ui-dialog-overlays",(this.document.data("ui-dialog-overlays")||0)+1)}},_destroyOverlay:function(){if(this.options.modal&&this.overlay){var t=this.document.data("ui-dialog-overlays")-1;t?this.document.data("ui-dialog-overlays",t):(this._off(this.document,"focusin"),this.document.removeData("ui-dialog-overlays")),this.overlay.remove(),this.overlay=null}}}),t.uiBackCompat!==!1&&t.widget("ui.dialog",t.ui.dialog,{options:{dialogClass:""},_createWrapper:function(){this._super(),this.uiDialog.addClass(this.options.dialogClass)},_setOption:function(t,e){"dialogClass"===t&&this.uiDialog.removeClass(this.options.dialogClass).addClass(e),this._superApply(arguments)}}),t.ui.dialog,t.widget("ui.droppable",{version:"1.12.1",widgetEventPrefix:"drop",options:{accept:"*",addClasses:!0,greedy:!1,scope:"default",tolerance:"intersect",activate:null,deactivate:null,drop:null,out:null,over:null},_create:function(){var e,i=this.options,s=i.accept;this.isover=!1,this.isout=!0,this.accept=t.isFunction(s)?s:function(t){return t.is(s)},this.proportions=function(){return arguments.length?(e=arguments[0],void 0):e?e:e={width:this.element[0].offsetWidth,height:this.element[0].offsetHeight}},this._addToManager(i.scope),i.addClasses&&this._addClass("ui-droppable")},_addToManager:function(e){t.ui.ddmanager.droppables[e]=t.ui.ddmanager.droppables[e]||[],t.ui.ddmanager.droppables[e].push(this)},_splice:function(t){for(var e=0;t.length>e;e++)t[e]===this&&t.splice(e,1)},_destroy:function(){var e=t.ui.ddmanager.droppables[this.options.scope];this._splice(e)},_setOption:function(e,i){if("accept"===e)this.accept=t.isFunction(i)?i:function(t){return t.is(i)};else if("scope"===e){var s=t.ui.ddmanager.droppables[this.options.scope];this._splice(s),this._addToManager(i)}this._super(e,i)},_activate:function(e){var i=t.ui.ddmanager.current;this._addActiveClass(),i&&this._trigger("activate",e,this.ui(i))},_deactivate:function(e){var i=t.ui.ddmanager.current;this._removeActiveClass(),i&&this._trigger("deactivate",e,this.ui(i))},_over:function(e){var i=t.ui.ddmanager.current;i&&(i.currentItem||i.element)[0]!==this.element[0]&&this.accept.call(this.element[0],i.currentItem||i.element)&&(this._addHoverClass(),this._trigger("over",e,this.ui(i)))},_out:function(e){var i=t.ui.ddmanager.current;i&&(i.currentItem||i.element)[0]!==this.element[0]&&this.accept.call(this.element[0],i.currentItem||i.element)&&(this._removeHoverClass(),this._trigger("out",e,this.ui(i)))},_drop:function(e,i){var s=i||t.ui.ddmanager.current,n=!1;return s&&(s.currentItem||s.element)[0]!==this.element[0]?(this.element.find(":data(ui-droppable)").not(".ui-draggable-dragging").each(function(){var i=t(this).droppable("instance");return i.options.greedy&&!i.options.disabled&&i.options.scope===s.options.scope&&i.accept.call(i.element[0],s.currentItem||s.element)&&v(s,t.extend(i,{offset:i.element.offset()}),i.options.tolerance,e)?(n=!0,!1):void 0}),n?!1:this.accept.call(this.element[0],s.currentItem||s.element)?(this._removeActiveClass(),this._removeHoverClass(),this._trigger("drop",e,this.ui(s)),this.element):!1):!1},ui:function(t){return{draggable:t.currentItem||t.element,helper:t.helper,position:t.position,offset:t.positionAbs}},_addHoverClass:function(){this._addClass("ui-droppable-hover")},_removeHoverClass:function(){this._removeClass("ui-droppable-hover")},_addActiveClass:function(){this._addClass("ui-droppable-active")},_removeActiveClass:function(){this._removeClass("ui-droppable-active")}});var v=t.ui.intersect=function(){function t(t,e,i){return t>=e&&e+i>t}return function(e,i,s,n){if(!i.offset)return!1;var o=(e.positionAbs||e.position.absolute).left+e.margins.left,a=(e.positionAbs||e.position.absolute).top+e.margins.top,r=o+e.helperProportions.width,h=a+e.helperProportions.height,l=i.offset.left,c=i.offset.top,u=l+i.proportions().width,d=c+i.proportions().height;switch(s){case"fit":return o>=l&&u>=r&&a>=c&&d>=h;case"intersect":return o+e.helperProportions.width/2>l&&u>r-e.helperProportions.width/2&&a+e.helperProportions.height/2>c&&d>h-e.helperProportions.height/2;case"pointer":return t(n.pageY,c,i.proportions().height)&&t(n.pageX,l,i.proportions().width);case"touch":return(a>=c&&d>=a||h>=c&&d>=h||c>a&&h>d)&&(o>=l&&u>=o||r>=l&&u>=r||l>o&&r>u);default:return!1}}}();t.ui.ddmanager={current:null,droppables:{"default":[]},prepareOffsets:function(e,i){var s,n,o=t.ui.ddmanager.droppables[e.options.scope]||[],a=i?i.type:null,r=(e.currentItem||e.element).find(":data(ui-droppable)").addBack();t:for(s=0;o.length>s;s++)if(!(o[s].options.disabled||e&&!o[s].accept.call(o[s].element[0],e.currentItem||e.element))){for(n=0;r.length>n;n++)if(r[n]===o[s].element[0]){o[s].proportions().height=0;continue t}o[s].visible="none"!==o[s].element.css("display"),o[s].visible&&("mousedown"===a&&o[s]._activate.call(o[s],i),o[s].offset=o[s].element.offset(),o[s].proportions({width:o[s].element[0].offsetWidth,height:o[s].element[0].offsetHeight}))}},drop:function(e,i){var s=!1;return t.each((t.ui.ddmanager.droppables[e.options.scope]||[]).slice(),function(){this.options&&(!this.options.disabled&&this.visible&&v(e,this,this.options.tolerance,i)&&(s=this._drop.call(this,i)||s),!this.options.disabled&&this.visible&&this.accept.call(this.element[0],e.currentItem||e.element)&&(this.isout=!0,this.isover=!1,this._deactivate.call(this,i)))}),s},dragStart:function(e,i){e.element.parentsUntil("body").on("scroll.droppable",function(){e.options.refreshPositions||t.ui.ddmanager.prepareOffsets(e,i)})},drag:function(e,i){e.options.refreshPositions&&t.ui.ddmanager.prepareOffsets(e,i),t.each(t.ui.ddmanager.droppables[e.options.scope]||[],function(){if(!this.options.disabled&&!this.greedyChild&&this.visible){var s,n,o,a=v(e,this,this.options.tolerance,i),r=!a&&this.isover?"isout":a&&!this.isover?"isover":null;r&&(this.options.greedy&&(n=this.options.scope,o=this.element.parents(":data(ui-droppable)").filter(function(){return t(this).droppable("instance").options.scope===n}),o.length&&(s=t(o[0]).droppable("instance"),s.greedyChild="isover"===r)),s&&"isover"===r&&(s.isover=!1,s.isout=!0,s._out.call(s,i)),this[r]=!0,this["isout"===r?"isover":"isout"]=!1,this["isover"===r?"_over":"_out"].call(this,i),s&&"isout"===r&&(s.isout=!1,s.isover=!0,s._over.call(s,i)))}})},dragStop:function(e,i){e.element.parentsUntil("body").off("scroll.droppable"),e.options.refreshPositions||t.ui.ddmanager.prepareOffsets(e,i)}},t.uiBackCompat!==!1&&t.widget("ui.droppable",t.ui.droppable,{options:{hoverClass:!1,activeClass:!1},_addActiveClass:function(){this._super(),this.options.activeClass&&this.element.addClass(this.options.activeClass)},_removeActiveClass:function(){this._super(),this.options.activeClass&&this.element.removeClass(this.options.activeClass)},_addHoverClass:function(){this._super(),this.options.hoverClass&&this.element.addClass(this.options.hoverClass)},_removeHoverClass:function(){this._super(),this.options.hoverClass&&this.element.removeClass(this.options.hoverClass)}}),t.ui.droppable,t.widget("ui.progressbar",{version:"1.12.1",options:{classes:{"ui-progressbar":"ui-corner-all","ui-progressbar-value":"ui-corner-left","ui-progressbar-complete":"ui-corner-right"},max:100,value:0,change:null,complete:null},min:0,_create:function(){this.oldValue=this.options.value=this._constrainedValue(),this.element.attr({role:"progressbar","aria-valuemin":this.min}),this._addClass("ui-progressbar","ui-widget ui-widget-content"),this.valueDiv=t("<div>").appendTo(this.element),this._addClass(this.valueDiv,"ui-progressbar-value","ui-widget-header"),this._refreshValue()},_destroy:function(){this.element.removeAttr("role aria-valuemin aria-valuemax aria-valuenow"),this.valueDiv.remove()},value:function(t){return void 0===t?this.options.value:(this.options.value=this._constrainedValue(t),this._refreshValue(),void 0)},_constrainedValue:function(t){return void 0===t&&(t=this.options.value),this.indeterminate=t===!1,"number"!=typeof t&&(t=0),this.indeterminate?!1:Math.min(this.options.max,Math.max(this.min,t))},_setOptions:function(t){var e=t.value;delete t.value,this._super(t),this.options.value=this._constrainedValue(e),this._refreshValue()},_setOption:function(t,e){"max"===t&&(e=Math.max(this.min,e)),this._super(t,e)},_setOptionDisabled:function(t){this._super(t),this.element.attr("aria-disabled",t),this._toggleClass(null,"ui-state-disabled",!!t)},_percentage:function(){return this.indeterminate?100:100*(this.options.value-this.min)/(this.options.max-this.min)},_refreshValue:function(){var e=this.options.value,i=this._percentage();this.valueDiv.toggle(this.indeterminate||e>this.min).width(i.toFixed(0)+"%"),this._toggleClass(this.valueDiv,"ui-progressbar-complete",null,e===this.options.max)._toggleClass("ui-progressbar-indeterminate",null,this.indeterminate),this.indeterminate?(this.element.removeAttr("aria-valuenow"),this.overlayDiv||(this.overlayDiv=t("<div>").appendTo(this.valueDiv),this._addClass(this.overlayDiv,"ui-progressbar-overlay"))):(this.element.attr({"aria-valuemax":this.options.max,"aria-valuenow":e}),this.overlayDiv&&(this.overlayDiv.remove(),this.overlayDiv=null)),this.oldValue!==e&&(this.oldValue=e,this._trigger("change")),e===this.options.max&&this._trigger("complete")}}),t.widget("ui.selectable",t.ui.mouse,{version:"1.12.1",options:{appendTo:"body",autoRefresh:!0,distance:0,filter:"*",tolerance:"touch",selected:null,selecting:null,start:null,stop:null,unselected:null,unselecting:null},_create:function(){var e=this;this._addClass("ui-selectable"),this.dragged=!1,this.refresh=function(){e.elementPos=t(e.element[0]).offset(),e.selectees=t(e.options.filter,e.element[0]),e._addClass(e.selectees,"ui-selectee"),e.selectees.each(function(){var i=t(this),s=i.offset(),n={left:s.left-e.elementPos.left,top:s.top-e.elementPos.top};t.data(this,"selectable-item",{element:this,$element:i,left:n.left,top:n.top,right:n.left+i.outerWidth(),bottom:n.top+i.outerHeight(),startselected:!1,selected:i.hasClass("ui-selected"),selecting:i.hasClass("ui-selecting"),unselecting:i.hasClass("ui-unselecting")})})},this.refresh(),this._mouseInit(),this.helper=t("<div>"),this._addClass(this.helper,"ui-selectable-helper")},_destroy:function(){this.selectees.removeData("selectable-item"),this._mouseDestroy()},_mouseStart:function(e){var i=this,s=this.options;this.opos=[e.pageX,e.pageY],this.elementPos=t(this.element[0]).offset(),this.options.disabled||(this.selectees=t(s.filter,this.element[0]),this._trigger("start",e),t(s.appendTo).append(this.helper),this.helper.css({left:e.pageX,top:e.pageY,width:0,height:0}),s.autoRefresh&&this.refresh(),this.selectees.filter(".ui-selected").each(function(){var s=t.data(this,"selectable-item");s.startselected=!0,e.metaKey||e.ctrlKey||(i._removeClass(s.$element,"ui-selected"),s.selected=!1,i._addClass(s.$element,"ui-unselecting"),s.unselecting=!0,i._trigger("unselecting",e,{unselecting:s.element}))}),t(e.target).parents().addBack().each(function(){var s,n=t.data(this,"selectable-item");return n?(s=!e.metaKey&&!e.ctrlKey||!n.$element.hasClass("ui-selected"),i._removeClass(n.$element,s?"ui-unselecting":"ui-selected")._addClass(n.$element,s?"ui-selecting":"ui-unselecting"),n.unselecting=!s,n.selecting=s,n.selected=s,s?i._trigger("selecting",e,{selecting:n.element}):i._trigger("unselecting",e,{unselecting:n.element}),!1):void 0}))},_mouseDrag:function(e){if(this.dragged=!0,!this.options.disabled){var i,s=this,n=this.options,o=this.opos[0],a=this.opos[1],r=e.pageX,h=e.pageY;return o>r&&(i=r,r=o,o=i),a>h&&(i=h,h=a,a=i),this.helper.css({left:o,top:a,width:r-o,height:h-a}),this.selectees.each(function(){var i=t.data(this,"selectable-item"),l=!1,c={};i&&i.element!==s.element[0]&&(c.left=i.left+s.elementPos.left,c.right=i.right+s.elementPos.left,c.top=i.top+s.elementPos.top,c.bottom=i.bottom+s.elementPos.top,"touch"===n.tolerance?l=!(c.left>r||o>c.right||c.top>h||a>c.bottom):"fit"===n.tolerance&&(l=c.left>o&&r>c.right&&c.top>a&&h>c.bottom),l?(i.selected&&(s._removeClass(i.$element,"ui-selected"),i.selected=!1),i.unselecting&&(s._removeClass(i.$element,"ui-unselecting"),i.unselecting=!1),i.selecting||(s._addClass(i.$element,"ui-selecting"),i.selecting=!0,s._trigger("selecting",e,{selecting:i.element}))):(i.selecting&&((e.metaKey||e.ctrlKey)&&i.startselected?(s._removeClass(i.$element,"ui-selecting"),i.selecting=!1,s._addClass(i.$element,"ui-selected"),i.selected=!0):(s._removeClass(i.$element,"ui-selecting"),i.selecting=!1,i.startselected&&(s._addClass(i.$element,"ui-unselecting"),i.unselecting=!0),s._trigger("unselecting",e,{unselecting:i.element}))),i.selected&&(e.metaKey||e.ctrlKey||i.startselected||(s._removeClass(i.$element,"ui-selected"),i.selected=!1,s._addClass(i.$element,"ui-unselecting"),i.unselecting=!0,s._trigger("unselecting",e,{unselecting:i.element})))))}),!1}},_mouseStop:function(e){var i=this;return this.dragged=!1,t(".ui-unselecting",this.element[0]).each(function(){var s=t.data(this,"selectable-item");i._removeClass(s.$element,"ui-unselecting"),s.unselecting=!1,s.startselected=!1,i._trigger("unselected",e,{unselected:s.element})}),t(".ui-selecting",this.element[0]).each(function(){var s=t.data(this,"selectable-item");i._removeClass(s.$element,"ui-selecting")._addClass(s.$element,"ui-selected"),s.selecting=!1,s.selected=!0,s.startselected=!0,i._trigger("selected",e,{selected:s.element})}),this._trigger("stop",e),this.helper.remove(),!1}}),t.widget("ui.selectmenu",[t.ui.formResetMixin,{version:"1.12.1",defaultElement:"<select>",options:{appendTo:null,classes:{"ui-selectmenu-button-open":"ui-corner-top","ui-selectmenu-button-closed":"ui-corner-all"},disabled:null,icons:{button:"ui-icon-triangle-1-s"},position:{my:"left top",at:"left bottom",collision:"none"},width:!1,change:null,close:null,focus:null,open:null,select:null},_create:function(){var e=this.element.uniqueId().attr("id");this.ids={element:e,button:e+"-button",menu:e+"-menu"},this._drawButton(),this._drawMenu(),this._bindFormResetHandler(),this._rendered=!1,this.menuItems=t()},_drawButton:function(){var e,i=this,s=this._parseOption(this.element.find("option:selected"),this.element[0].selectedIndex);this.labels=this.element.labels().attr("for",this.ids.button),this._on(this.labels,{click:function(t){this.button.focus(),t.preventDefault()}}),this.element.hide(),this.button=t("<span>",{tabindex:this.options.disabled?-1:0,id:this.ids.button,role:"combobox","aria-expanded":"false","aria-autocomplete":"list","aria-owns":this.ids.menu,"aria-haspopup":"true",title:this.element.attr("title")}).insertAfter(this.element),this._addClass(this.button,"ui-selectmenu-button ui-selectmenu-button-closed","ui-button ui-widget"),e=t("<span>").appendTo(this.button),this._addClass(e,"ui-selectmenu-icon","ui-icon "+this.options.icons.button),this.buttonItem=this._renderButtonItem(s).appendTo(this.button),this.options.width!==!1&&this._resizeButton(),this._on(this.button,this._buttonEvents),this.button.one("focusin",function(){i._rendered||i._refreshMenu()})},_drawMenu:function(){var e=this;this.menu=t("<ul>",{"aria-hidden":"true","aria-labelledby":this.ids.button,id:this.ids.menu}),this.menuWrap=t("<div>").append(this.menu),this._addClass(this.menuWrap,"ui-selectmenu-menu","ui-front"),this.menuWrap.appendTo(this._appendTo()),this.menuInstance=this.menu.menu({classes:{"ui-menu":"ui-corner-bottom"},role:"listbox",select:function(t,i){t.preventDefault(),e._setSelection(),e._select(i.item.data("ui-selectmenu-item"),t)},focus:function(t,i){var s=i.item.data("ui-selectmenu-item");null!=e.focusIndex&&s.index!==e.focusIndex&&(e._trigger("focus",t,{item:s}),e.isOpen||e._select(s,t)),e.focusIndex=s.index,e.button.attr("aria-activedescendant",e.menuItems.eq(s.index).attr("id"))}}).menu("instance"),this.menuInstance._off(this.menu,"mouseleave"),this.menuInstance._closeOnDocumentClick=function(){return!1},this.menuInstance._isDivider=function(){return!1}},refresh:function(){this._refreshMenu(),this.buttonItem.replaceWith(this.buttonItem=this._renderButtonItem(this._getSelectedItem().data("ui-selectmenu-item")||{})),null===this.options.width&&this._resizeButton()},_refreshMenu:function(){var t,e=this.element.find("option");this.menu.empty(),this._parseOptions(e),this._renderMenu(this.menu,this.items),this.menuInstance.refresh(),this.menuItems=this.menu.find("li").not(".ui-selectmenu-optgroup").find(".ui-menu-item-wrapper"),this._rendered=!0,e.length&&(t=this._getSelectedItem(),this.menuInstance.focus(null,t),this._setAria(t.data("ui-selectmenu-item")),this._setOption("disabled",this.element.prop("disabled")))},open:function(t){this.options.disabled||(this._rendered?(this._removeClass(this.menu.find(".ui-state-active"),null,"ui-state-active"),this.menuInstance.focus(null,this._getSelectedItem())):this._refreshMenu(),this.menuItems.length&&(this.isOpen=!0,this._toggleAttr(),this._resizeMenu(),this._position(),this._on(this.document,this._documentClick),this._trigger("open",t)))},_position:function(){this.menuWrap.position(t.extend({of:this.button},this.options.position))},close:function(t){this.isOpen&&(this.isOpen=!1,this._toggleAttr(),this.range=null,this._off(this.document),this._trigger("close",t))},widget:function(){return this.button},menuWidget:function(){return this.menu},_renderButtonItem:function(e){var i=t("<span>");return this._setText(i,e.label),this._addClass(i,"ui-selectmenu-text"),i},_renderMenu:function(e,i){var s=this,n="";t.each(i,function(i,o){var a;o.optgroup!==n&&(a=t("<li>",{text:o.optgroup}),s._addClass(a,"ui-selectmenu-optgroup","ui-menu-divider"+(o.element.parent("optgroup").prop("disabled")?" ui-state-disabled":"")),a.appendTo(e),n=o.optgroup),s._renderItemData(e,o)})},_renderItemData:function(t,e){return this._renderItem(t,e).data("ui-selectmenu-item",e)},_renderItem:function(e,i){var s=t("<li>"),n=t("<div>",{title:i.element.attr("title")});return i.disabled&&this._addClass(s,null,"ui-state-disabled"),this._setText(n,i.label),s.append(n).appendTo(e)},_setText:function(t,e){e?t.text(e):t.html("&#160;")},_move:function(t,e){var i,s,n=".ui-menu-item";this.isOpen?i=this.menuItems.eq(this.focusIndex).parent("li"):(i=this.menuItems.eq(this.element[0].selectedIndex).parent("li"),n+=":not(.ui-state-disabled)"),s="first"===t||"last"===t?i["first"===t?"prevAll":"nextAll"](n).eq(-1):i[t+"All"](n).eq(0),s.length&&this.menuInstance.focus(e,s)},_getSelectedItem:function(){return this.menuItems.eq(this.element[0].selectedIndex).parent("li")},_toggle:function(t){this[this.isOpen?"close":"open"](t)},_setSelection:function(){var t;this.range&&(window.getSelection?(t=window.getSelection(),t.removeAllRanges(),t.addRange(this.range)):this.range.select(),this.button.focus())},_documentClick:{mousedown:function(e){this.isOpen&&(t(e.target).closest(".ui-selectmenu-menu, #"+t.ui.escapeSelector(this.ids.button)).length||this.close(e))}},_buttonEvents:{mousedown:function(){var t;window.getSelection?(t=window.getSelection(),t.rangeCount&&(this.range=t.getRangeAt(0))):this.range=document.selection.createRange()},click:function(t){this._setSelection(),this._toggle(t)},keydown:function(e){var i=!0;switch(e.keyCode){case t.ui.keyCode.TAB:case t.ui.keyCode.ESCAPE:this.close(e),i=!1;break;case t.ui.keyCode.ENTER:this.isOpen&&this._selectFocusedItem(e);break;case t.ui.keyCode.UP:e.altKey?this._toggle(e):this._move("prev",e);break;case t.ui.keyCode.DOWN:e.altKey?this._toggle(e):this._move("next",e);break;case t.ui.keyCode.SPACE:this.isOpen?this._selectFocusedItem(e):this._toggle(e);break;case t.ui.keyCode.LEFT:this._move("prev",e);break;case t.ui.keyCode.RIGHT:this._move("next",e);break;case t.ui.keyCode.HOME:case t.ui.keyCode.PAGE_UP:this._move("first",e);break;case t.ui.keyCode.END:case t.ui.keyCode.PAGE_DOWN:this._move("last",e);break;default:this.menu.trigger(e),i=!1}i&&e.preventDefault()}},_selectFocusedItem:function(t){var e=this.menuItems.eq(this.focusIndex).parent("li");e.hasClass("ui-state-disabled")||this._select(e.data("ui-selectmenu-item"),t)},_select:function(t,e){var i=this.element[0].selectedIndex;this.element[0].selectedIndex=t.index,this.buttonItem.replaceWith(this.buttonItem=this._renderButtonItem(t)),this._setAria(t),this._trigger("select",e,{item:t}),t.index!==i&&this._trigger("change",e,{item:t}),this.close(e)},_setAria:function(t){var e=this.menuItems.eq(t.index).attr("id");this.button.attr({"aria-labelledby":e,"aria-activedescendant":e}),this.menu.attr("aria-activedescendant",e)},_setOption:function(t,e){if("icons"===t){var i=this.button.find("span.ui-icon");this._removeClass(i,null,this.options.icons.button)._addClass(i,null,e.button)}this._super(t,e),"appendTo"===t&&this.menuWrap.appendTo(this._appendTo()),"width"===t&&this._resizeButton()},_setOptionDisabled:function(t){this._super(t),this.menuInstance.option("disabled",t),this.button.attr("aria-disabled",t),this._toggleClass(this.button,null,"ui-state-disabled",t),this.element.prop("disabled",t),t?(this.button.attr("tabindex",-1),this.close()):this.button.attr("tabindex",0)},_appendTo:function(){var e=this.options.appendTo;return e&&(e=e.jquery||e.nodeType?t(e):this.document.find(e).eq(0)),e&&e[0]||(e=this.element.closest(".ui-front, dialog")),e.length||(e=this.document[0].body),e},_toggleAttr:function(){this.button.attr("aria-expanded",this.isOpen),this._removeClass(this.button,"ui-selectmenu-button-"+(this.isOpen?"closed":"open"))._addClass(this.button,"ui-selectmenu-button-"+(this.isOpen?"open":"closed"))._toggleClass(this.menuWrap,"ui-selectmenu-open",null,this.isOpen),this.menu.attr("aria-hidden",!this.isOpen)},_resizeButton:function(){var t=this.options.width;return t===!1?(this.button.css("width",""),void 0):(null===t&&(t=this.element.show().outerWidth(),this.element.hide()),this.button.outerWidth(t),void 0)},_resizeMenu:function(){this.menu.outerWidth(Math.max(this.button.outerWidth(),this.menu.width("").outerWidth()+1))},_getCreateOptions:function(){var t=this._super();return t.disabled=this.element.prop("disabled"),t},_parseOptions:function(e){var i=this,s=[];e.each(function(e,n){s.push(i._parseOption(t(n),e))}),this.items=s},_parseOption:function(t,e){var i=t.parent("optgroup");return{element:t,index:e,value:t.val(),label:t.text(),optgroup:i.attr("label")||"",disabled:i.prop("disabled")||t.prop("disabled")}},_destroy:function(){this._unbindFormResetHandler(),this.menuWrap.remove(),this.button.remove(),this.element.show(),this.element.removeUniqueId(),this.labels.attr("for",this.ids.element)}}]),t.widget("ui.slider",t.ui.mouse,{version:"1.12.1",widgetEventPrefix:"slide",options:{animate:!1,classes:{"ui-slider":"ui-corner-all","ui-slider-handle":"ui-corner-all","ui-slider-range":"ui-corner-all ui-widget-header"},distance:0,max:100,min:0,orientation:"horizontal",range:!1,step:1,value:0,values:null,change:null,slide:null,start:null,stop:null},numPages:5,_create:function(){this._keySliding=!1,this._mouseSliding=!1,this._animateOff=!0,this._handleIndex=null,this._detectOrientation(),this._mouseInit(),this._calculateNewMax(),this._addClass("ui-slider ui-slider-"+this.orientation,"ui-widget ui-widget-content"),this._refresh(),this._animateOff=!1
-},_refresh:function(){this._createRange(),this._createHandles(),this._setupEvents(),this._refreshValue()},_createHandles:function(){var e,i,s=this.options,n=this.element.find(".ui-slider-handle"),o="<span tabindex='0'></span>",a=[];for(i=s.values&&s.values.length||1,n.length>i&&(n.slice(i).remove(),n=n.slice(0,i)),e=n.length;i>e;e++)a.push(o);this.handles=n.add(t(a.join("")).appendTo(this.element)),this._addClass(this.handles,"ui-slider-handle","ui-state-default"),this.handle=this.handles.eq(0),this.handles.each(function(e){t(this).data("ui-slider-handle-index",e).attr("tabIndex",0)})},_createRange:function(){var e=this.options;e.range?(e.range===!0&&(e.values?e.values.length&&2!==e.values.length?e.values=[e.values[0],e.values[0]]:t.isArray(e.values)&&(e.values=e.values.slice(0)):e.values=[this._valueMin(),this._valueMin()]),this.range&&this.range.length?(this._removeClass(this.range,"ui-slider-range-min ui-slider-range-max"),this.range.css({left:"",bottom:""})):(this.range=t("<div>").appendTo(this.element),this._addClass(this.range,"ui-slider-range")),("min"===e.range||"max"===e.range)&&this._addClass(this.range,"ui-slider-range-"+e.range)):(this.range&&this.range.remove(),this.range=null)},_setupEvents:function(){this._off(this.handles),this._on(this.handles,this._handleEvents),this._hoverable(this.handles),this._focusable(this.handles)},_destroy:function(){this.handles.remove(),this.range&&this.range.remove(),this._mouseDestroy()},_mouseCapture:function(e){var i,s,n,o,a,r,h,l,c=this,u=this.options;return u.disabled?!1:(this.elementSize={width:this.element.outerWidth(),height:this.element.outerHeight()},this.elementOffset=this.element.offset(),i={x:e.pageX,y:e.pageY},s=this._normValueFromMouse(i),n=this._valueMax()-this._valueMin()+1,this.handles.each(function(e){var i=Math.abs(s-c.values(e));(n>i||n===i&&(e===c._lastChangedValue||c.values(e)===u.min))&&(n=i,o=t(this),a=e)}),r=this._start(e,a),r===!1?!1:(this._mouseSliding=!0,this._handleIndex=a,this._addClass(o,null,"ui-state-active"),o.trigger("focus"),h=o.offset(),l=!t(e.target).parents().addBack().is(".ui-slider-handle"),this._clickOffset=l?{left:0,top:0}:{left:e.pageX-h.left-o.width()/2,top:e.pageY-h.top-o.height()/2-(parseInt(o.css("borderTopWidth"),10)||0)-(parseInt(o.css("borderBottomWidth"),10)||0)+(parseInt(o.css("marginTop"),10)||0)},this.handles.hasClass("ui-state-hover")||this._slide(e,a,s),this._animateOff=!0,!0))},_mouseStart:function(){return!0},_mouseDrag:function(t){var e={x:t.pageX,y:t.pageY},i=this._normValueFromMouse(e);return this._slide(t,this._handleIndex,i),!1},_mouseStop:function(t){return this._removeClass(this.handles,null,"ui-state-active"),this._mouseSliding=!1,this._stop(t,this._handleIndex),this._change(t,this._handleIndex),this._handleIndex=null,this._clickOffset=null,this._animateOff=!1,!1},_detectOrientation:function(){this.orientation="vertical"===this.options.orientation?"vertical":"horizontal"},_normValueFromMouse:function(t){var e,i,s,n,o;return"horizontal"===this.orientation?(e=this.elementSize.width,i=t.x-this.elementOffset.left-(this._clickOffset?this._clickOffset.left:0)):(e=this.elementSize.height,i=t.y-this.elementOffset.top-(this._clickOffset?this._clickOffset.top:0)),s=i/e,s>1&&(s=1),0>s&&(s=0),"vertical"===this.orientation&&(s=1-s),n=this._valueMax()-this._valueMin(),o=this._valueMin()+s*n,this._trimAlignValue(o)},_uiHash:function(t,e,i){var s={handle:this.handles[t],handleIndex:t,value:void 0!==e?e:this.value()};return this._hasMultipleValues()&&(s.value=void 0!==e?e:this.values(t),s.values=i||this.values()),s},_hasMultipleValues:function(){return this.options.values&&this.options.values.length},_start:function(t,e){return this._trigger("start",t,this._uiHash(e))},_slide:function(t,e,i){var s,n,o=this.value(),a=this.values();this._hasMultipleValues()&&(n=this.values(e?0:1),o=this.values(e),2===this.options.values.length&&this.options.range===!0&&(i=0===e?Math.min(n,i):Math.max(n,i)),a[e]=i),i!==o&&(s=this._trigger("slide",t,this._uiHash(e,i,a)),s!==!1&&(this._hasMultipleValues()?this.values(e,i):this.value(i)))},_stop:function(t,e){this._trigger("stop",t,this._uiHash(e))},_change:function(t,e){this._keySliding||this._mouseSliding||(this._lastChangedValue=e,this._trigger("change",t,this._uiHash(e)))},value:function(t){return arguments.length?(this.options.value=this._trimAlignValue(t),this._refreshValue(),this._change(null,0),void 0):this._value()},values:function(e,i){var s,n,o;if(arguments.length>1)return this.options.values[e]=this._trimAlignValue(i),this._refreshValue(),this._change(null,e),void 0;if(!arguments.length)return this._values();if(!t.isArray(arguments[0]))return this._hasMultipleValues()?this._values(e):this.value();for(s=this.options.values,n=arguments[0],o=0;s.length>o;o+=1)s[o]=this._trimAlignValue(n[o]),this._change(null,o);this._refreshValue()},_setOption:function(e,i){var s,n=0;switch("range"===e&&this.options.range===!0&&("min"===i?(this.options.value=this._values(0),this.options.values=null):"max"===i&&(this.options.value=this._values(this.options.values.length-1),this.options.values=null)),t.isArray(this.options.values)&&(n=this.options.values.length),this._super(e,i),e){case"orientation":this._detectOrientation(),this._removeClass("ui-slider-horizontal ui-slider-vertical")._addClass("ui-slider-"+this.orientation),this._refreshValue(),this.options.range&&this._refreshRange(i),this.handles.css("horizontal"===i?"bottom":"left","");break;case"value":this._animateOff=!0,this._refreshValue(),this._change(null,0),this._animateOff=!1;break;case"values":for(this._animateOff=!0,this._refreshValue(),s=n-1;s>=0;s--)this._change(null,s);this._animateOff=!1;break;case"step":case"min":case"max":this._animateOff=!0,this._calculateNewMax(),this._refreshValue(),this._animateOff=!1;break;case"range":this._animateOff=!0,this._refresh(),this._animateOff=!1}},_setOptionDisabled:function(t){this._super(t),this._toggleClass(null,"ui-state-disabled",!!t)},_value:function(){var t=this.options.value;return t=this._trimAlignValue(t)},_values:function(t){var e,i,s;if(arguments.length)return e=this.options.values[t],e=this._trimAlignValue(e);if(this._hasMultipleValues()){for(i=this.options.values.slice(),s=0;i.length>s;s+=1)i[s]=this._trimAlignValue(i[s]);return i}return[]},_trimAlignValue:function(t){if(this._valueMin()>=t)return this._valueMin();if(t>=this._valueMax())return this._valueMax();var e=this.options.step>0?this.options.step:1,i=(t-this._valueMin())%e,s=t-i;return 2*Math.abs(i)>=e&&(s+=i>0?e:-e),parseFloat(s.toFixed(5))},_calculateNewMax:function(){var t=this.options.max,e=this._valueMin(),i=this.options.step,s=Math.round((t-e)/i)*i;t=s+e,t>this.options.max&&(t-=i),this.max=parseFloat(t.toFixed(this._precision()))},_precision:function(){var t=this._precisionOf(this.options.step);return null!==this.options.min&&(t=Math.max(t,this._precisionOf(this.options.min))),t},_precisionOf:function(t){var e=""+t,i=e.indexOf(".");return-1===i?0:e.length-i-1},_valueMin:function(){return this.options.min},_valueMax:function(){return this.max},_refreshRange:function(t){"vertical"===t&&this.range.css({width:"",left:""}),"horizontal"===t&&this.range.css({height:"",bottom:""})},_refreshValue:function(){var e,i,s,n,o,a=this.options.range,r=this.options,h=this,l=this._animateOff?!1:r.animate,c={};this._hasMultipleValues()?this.handles.each(function(s){i=100*((h.values(s)-h._valueMin())/(h._valueMax()-h._valueMin())),c["horizontal"===h.orientation?"left":"bottom"]=i+"%",t(this).stop(1,1)[l?"animate":"css"](c,r.animate),h.options.range===!0&&("horizontal"===h.orientation?(0===s&&h.range.stop(1,1)[l?"animate":"css"]({left:i+"%"},r.animate),1===s&&h.range[l?"animate":"css"]({width:i-e+"%"},{queue:!1,duration:r.animate})):(0===s&&h.range.stop(1,1)[l?"animate":"css"]({bottom:i+"%"},r.animate),1===s&&h.range[l?"animate":"css"]({height:i-e+"%"},{queue:!1,duration:r.animate}))),e=i}):(s=this.value(),n=this._valueMin(),o=this._valueMax(),i=o!==n?100*((s-n)/(o-n)):0,c["horizontal"===this.orientation?"left":"bottom"]=i+"%",this.handle.stop(1,1)[l?"animate":"css"](c,r.animate),"min"===a&&"horizontal"===this.orientation&&this.range.stop(1,1)[l?"animate":"css"]({width:i+"%"},r.animate),"max"===a&&"horizontal"===this.orientation&&this.range.stop(1,1)[l?"animate":"css"]({width:100-i+"%"},r.animate),"min"===a&&"vertical"===this.orientation&&this.range.stop(1,1)[l?"animate":"css"]({height:i+"%"},r.animate),"max"===a&&"vertical"===this.orientation&&this.range.stop(1,1)[l?"animate":"css"]({height:100-i+"%"},r.animate))},_handleEvents:{keydown:function(e){var i,s,n,o,a=t(e.target).data("ui-slider-handle-index");switch(e.keyCode){case t.ui.keyCode.HOME:case t.ui.keyCode.END:case t.ui.keyCode.PAGE_UP:case t.ui.keyCode.PAGE_DOWN:case t.ui.keyCode.UP:case t.ui.keyCode.RIGHT:case t.ui.keyCode.DOWN:case t.ui.keyCode.LEFT:if(e.preventDefault(),!this._keySliding&&(this._keySliding=!0,this._addClass(t(e.target),null,"ui-state-active"),i=this._start(e,a),i===!1))return}switch(o=this.options.step,s=n=this._hasMultipleValues()?this.values(a):this.value(),e.keyCode){case t.ui.keyCode.HOME:n=this._valueMin();break;case t.ui.keyCode.END:n=this._valueMax();break;case t.ui.keyCode.PAGE_UP:n=this._trimAlignValue(s+(this._valueMax()-this._valueMin())/this.numPages);break;case t.ui.keyCode.PAGE_DOWN:n=this._trimAlignValue(s-(this._valueMax()-this._valueMin())/this.numPages);break;case t.ui.keyCode.UP:case t.ui.keyCode.RIGHT:if(s===this._valueMax())return;n=this._trimAlignValue(s+o);break;case t.ui.keyCode.DOWN:case t.ui.keyCode.LEFT:if(s===this._valueMin())return;n=this._trimAlignValue(s-o)}this._slide(e,a,n)},keyup:function(e){var i=t(e.target).data("ui-slider-handle-index");this._keySliding&&(this._keySliding=!1,this._stop(e,i),this._change(e,i),this._removeClass(t(e.target),null,"ui-state-active"))}}}),t.widget("ui.sortable",t.ui.mouse,{version:"1.12.1",widgetEventPrefix:"sort",ready:!1,options:{appendTo:"parent",axis:!1,connectWith:!1,containment:!1,cursor:"auto",cursorAt:!1,dropOnEmpty:!0,forcePlaceholderSize:!1,forceHelperSize:!1,grid:!1,handle:!1,helper:"original",items:"> *",opacity:!1,placeholder:!1,revert:!1,scroll:!0,scrollSensitivity:20,scrollSpeed:20,scope:"default",tolerance:"intersect",zIndex:1e3,activate:null,beforeStop:null,change:null,deactivate:null,out:null,over:null,receive:null,remove:null,sort:null,start:null,stop:null,update:null},_isOverAxis:function(t,e,i){return t>=e&&e+i>t},_isFloating:function(t){return/left|right/.test(t.css("float"))||/inline|table-cell/.test(t.css("display"))},_create:function(){this.containerCache={},this._addClass("ui-sortable"),this.refresh(),this.offset=this.element.offset(),this._mouseInit(),this._setHandleClassName(),this.ready=!0},_setOption:function(t,e){this._super(t,e),"handle"===t&&this._setHandleClassName()},_setHandleClassName:function(){var e=this;this._removeClass(this.element.find(".ui-sortable-handle"),"ui-sortable-handle"),t.each(this.items,function(){e._addClass(this.instance.options.handle?this.item.find(this.instance.options.handle):this.item,"ui-sortable-handle")})},_destroy:function(){this._mouseDestroy();for(var t=this.items.length-1;t>=0;t--)this.items[t].item.removeData(this.widgetName+"-item");return this},_mouseCapture:function(e,i){var s=null,n=!1,o=this;return this.reverting?!1:this.options.disabled||"static"===this.options.type?!1:(this._refreshItems(e),t(e.target).parents().each(function(){return t.data(this,o.widgetName+"-item")===o?(s=t(this),!1):void 0}),t.data(e.target,o.widgetName+"-item")===o&&(s=t(e.target)),s?!this.options.handle||i||(t(this.options.handle,s).find("*").addBack().each(function(){this===e.target&&(n=!0)}),n)?(this.currentItem=s,this._removeCurrentsFromItems(),!0):!1:!1)},_mouseStart:function(e,i,s){var n,o,a=this.options;if(this.currentContainer=this,this.refreshPositions(),this.helper=this._createHelper(e),this._cacheHelperProportions(),this._cacheMargins(),this.scrollParent=this.helper.scrollParent(),this.offset=this.currentItem.offset(),this.offset={top:this.offset.top-this.margins.top,left:this.offset.left-this.margins.left},t.extend(this.offset,{click:{left:e.pageX-this.offset.left,top:e.pageY-this.offset.top},parent:this._getParentOffset(),relative:this._getRelativeOffset()}),this.helper.css("position","absolute"),this.cssPosition=this.helper.css("position"),this.originalPosition=this._generatePosition(e),this.originalPageX=e.pageX,this.originalPageY=e.pageY,a.cursorAt&&this._adjustOffsetFromHelper(a.cursorAt),this.domPosition={prev:this.currentItem.prev()[0],parent:this.currentItem.parent()[0]},this.helper[0]!==this.currentItem[0]&&this.currentItem.hide(),this._createPlaceholder(),a.containment&&this._setContainment(),a.cursor&&"auto"!==a.cursor&&(o=this.document.find("body"),this.storedCursor=o.css("cursor"),o.css("cursor",a.cursor),this.storedStylesheet=t("<style>*{ cursor: "+a.cursor+" !important; }</style>").appendTo(o)),a.opacity&&(this.helper.css("opacity")&&(this._storedOpacity=this.helper.css("opacity")),this.helper.css("opacity",a.opacity)),a.zIndex&&(this.helper.css("zIndex")&&(this._storedZIndex=this.helper.css("zIndex")),this.helper.css("zIndex",a.zIndex)),this.scrollParent[0]!==this.document[0]&&"HTML"!==this.scrollParent[0].tagName&&(this.overflowOffset=this.scrollParent.offset()),this._trigger("start",e,this._uiHash()),this._preserveHelperProportions||this._cacheHelperProportions(),!s)for(n=this.containers.length-1;n>=0;n--)this.containers[n]._trigger("activate",e,this._uiHash(this));return t.ui.ddmanager&&(t.ui.ddmanager.current=this),t.ui.ddmanager&&!a.dropBehaviour&&t.ui.ddmanager.prepareOffsets(this,e),this.dragging=!0,this._addClass(this.helper,"ui-sortable-helper"),this._mouseDrag(e),!0},_mouseDrag:function(e){var i,s,n,o,a=this.options,r=!1;for(this.position=this._generatePosition(e),this.positionAbs=this._convertPositionTo("absolute"),this.lastPositionAbs||(this.lastPositionAbs=this.positionAbs),this.options.scroll&&(this.scrollParent[0]!==this.document[0]&&"HTML"!==this.scrollParent[0].tagName?(this.overflowOffset.top+this.scrollParent[0].offsetHeight-e.pageY<a.scrollSensitivity?this.scrollParent[0].scrollTop=r=this.scrollParent[0].scrollTop+a.scrollSpeed:e.pageY-this.overflowOffset.top<a.scrollSensitivity&&(this.scrollParent[0].scrollTop=r=this.scrollParent[0].scrollTop-a.scrollSpeed),this.overflowOffset.left+this.scrollParent[0].offsetWidth-e.pageX<a.scrollSensitivity?this.scrollParent[0].scrollLeft=r=this.scrollParent[0].scrollLeft+a.scrollSpeed:e.pageX-this.overflowOffset.left<a.scrollSensitivity&&(this.scrollParent[0].scrollLeft=r=this.scrollParent[0].scrollLeft-a.scrollSpeed)):(e.pageY-this.document.scrollTop()<a.scrollSensitivity?r=this.document.scrollTop(this.document.scrollTop()-a.scrollSpeed):this.window.height()-(e.pageY-this.document.scrollTop())<a.scrollSensitivity&&(r=this.document.scrollTop(this.document.scrollTop()+a.scrollSpeed)),e.pageX-this.document.scrollLeft()<a.scrollSensitivity?r=this.document.scrollLeft(this.document.scrollLeft()-a.scrollSpeed):this.window.width()-(e.pageX-this.document.scrollLeft())<a.scrollSensitivity&&(r=this.document.scrollLeft(this.document.scrollLeft()+a.scrollSpeed))),r!==!1&&t.ui.ddmanager&&!a.dropBehaviour&&t.ui.ddmanager.prepareOffsets(this,e)),this.positionAbs=this._convertPositionTo("absolute"),this.options.axis&&"y"===this.options.axis||(this.helper[0].style.left=this.position.left+"px"),this.options.axis&&"x"===this.options.axis||(this.helper[0].style.top=this.position.top+"px"),i=this.items.length-1;i>=0;i--)if(s=this.items[i],n=s.item[0],o=this._intersectsWithPointer(s),o&&s.instance===this.currentContainer&&n!==this.currentItem[0]&&this.placeholder[1===o?"next":"prev"]()[0]!==n&&!t.contains(this.placeholder[0],n)&&("semi-dynamic"===this.options.type?!t.contains(this.element[0],n):!0)){if(this.direction=1===o?"down":"up","pointer"!==this.options.tolerance&&!this._intersectsWithSides(s))break;this._rearrange(e,s),this._trigger("change",e,this._uiHash());break}return this._contactContainers(e),t.ui.ddmanager&&t.ui.ddmanager.drag(this,e),this._trigger("sort",e,this._uiHash()),this.lastPositionAbs=this.positionAbs,!1},_mouseStop:function(e,i){if(e){if(t.ui.ddmanager&&!this.options.dropBehaviour&&t.ui.ddmanager.drop(this,e),this.options.revert){var s=this,n=this.placeholder.offset(),o=this.options.axis,a={};o&&"x"!==o||(a.left=n.left-this.offset.parent.left-this.margins.left+(this.offsetParent[0]===this.document[0].body?0:this.offsetParent[0].scrollLeft)),o&&"y"!==o||(a.top=n.top-this.offset.parent.top-this.margins.top+(this.offsetParent[0]===this.document[0].body?0:this.offsetParent[0].scrollTop)),this.reverting=!0,t(this.helper).animate(a,parseInt(this.options.revert,10)||500,function(){s._clear(e)})}else this._clear(e,i);return!1}},cancel:function(){if(this.dragging){this._mouseUp(new t.Event("mouseup",{target:null})),"original"===this.options.helper?(this.currentItem.css(this._storedCSS),this._removeClass(this.currentItem,"ui-sortable-helper")):this.currentItem.show();for(var e=this.containers.length-1;e>=0;e--)this.containers[e]._trigger("deactivate",null,this._uiHash(this)),this.containers[e].containerCache.over&&(this.containers[e]._trigger("out",null,this._uiHash(this)),this.containers[e].containerCache.over=0)}return this.placeholder&&(this.placeholder[0].parentNode&&this.placeholder[0].parentNode.removeChild(this.placeholder[0]),"original"!==this.options.helper&&this.helper&&this.helper[0].parentNode&&this.helper.remove(),t.extend(this,{helper:null,dragging:!1,reverting:!1,_noFinalSort:null}),this.domPosition.prev?t(this.domPosition.prev).after(this.currentItem):t(this.domPosition.parent).prepend(this.currentItem)),this},serialize:function(e){var i=this._getItemsAsjQuery(e&&e.connected),s=[];return e=e||{},t(i).each(function(){var i=(t(e.item||this).attr(e.attribute||"id")||"").match(e.expression||/(.+)[\-=_](.+)/);i&&s.push((e.key||i[1]+"[]")+"="+(e.key&&e.expression?i[1]:i[2]))}),!s.length&&e.key&&s.push(e.key+"="),s.join("&")},toArray:function(e){var i=this._getItemsAsjQuery(e&&e.connected),s=[];return e=e||{},i.each(function(){s.push(t(e.item||this).attr(e.attribute||"id")||"")}),s},_intersectsWith:function(t){var e=this.positionAbs.left,i=e+this.helperProportions.width,s=this.positionAbs.top,n=s+this.helperProportions.height,o=t.left,a=o+t.width,r=t.top,h=r+t.height,l=this.offset.click.top,c=this.offset.click.left,u="x"===this.options.axis||s+l>r&&h>s+l,d="y"===this.options.axis||e+c>o&&a>e+c,p=u&&d;return"pointer"===this.options.tolerance||this.options.forcePointerForContainers||"pointer"!==this.options.tolerance&&this.helperProportions[this.floating?"width":"height"]>t[this.floating?"width":"height"]?p:e+this.helperProportions.width/2>o&&a>i-this.helperProportions.width/2&&s+this.helperProportions.height/2>r&&h>n-this.helperProportions.height/2},_intersectsWithPointer:function(t){var e,i,s="x"===this.options.axis||this._isOverAxis(this.positionAbs.top+this.offset.click.top,t.top,t.height),n="y"===this.options.axis||this._isOverAxis(this.positionAbs.left+this.offset.click.left,t.left,t.width),o=s&&n;return o?(e=this._getDragVerticalDirection(),i=this._getDragHorizontalDirection(),this.floating?"right"===i||"down"===e?2:1:e&&("down"===e?2:1)):!1},_intersectsWithSides:function(t){var e=this._isOverAxis(this.positionAbs.top+this.offset.click.top,t.top+t.height/2,t.height),i=this._isOverAxis(this.positionAbs.left+this.offset.click.left,t.left+t.width/2,t.width),s=this._getDragVerticalDirection(),n=this._getDragHorizontalDirection();return this.floating&&n?"right"===n&&i||"left"===n&&!i:s&&("down"===s&&e||"up"===s&&!e)},_getDragVerticalDirection:function(){var t=this.positionAbs.top-this.lastPositionAbs.top;return 0!==t&&(t>0?"down":"up")},_getDragHorizontalDirection:function(){var t=this.positionAbs.left-this.lastPositionAbs.left;return 0!==t&&(t>0?"right":"left")},refresh:function(t){return this._refreshItems(t),this._setHandleClassName(),this.refreshPositions(),this},_connectWith:function(){var t=this.options;return t.connectWith.constructor===String?[t.connectWith]:t.connectWith},_getItemsAsjQuery:function(e){function i(){r.push(this)}var s,n,o,a,r=[],h=[],l=this._connectWith();if(l&&e)for(s=l.length-1;s>=0;s--)for(o=t(l[s],this.document[0]),n=o.length-1;n>=0;n--)a=t.data(o[n],this.widgetFullName),a&&a!==this&&!a.options.disabled&&h.push([t.isFunction(a.options.items)?a.options.items.call(a.element):t(a.options.items,a.element).not(".ui-sortable-helper").not(".ui-sortable-placeholder"),a]);for(h.push([t.isFunction(this.options.items)?this.options.items.call(this.element,null,{options:this.options,item:this.currentItem}):t(this.options.items,this.element).not(".ui-sortable-helper").not(".ui-sortable-placeholder"),this]),s=h.length-1;s>=0;s--)h[s][0].each(i);return t(r)},_removeCurrentsFromItems:function(){var e=this.currentItem.find(":data("+this.widgetName+"-item)");this.items=t.grep(this.items,function(t){for(var i=0;e.length>i;i++)if(e[i]===t.item[0])return!1;return!0})},_refreshItems:function(e){this.items=[],this.containers=[this];var i,s,n,o,a,r,h,l,c=this.items,u=[[t.isFunction(this.options.items)?this.options.items.call(this.element[0],e,{item:this.currentItem}):t(this.options.items,this.element),this]],d=this._connectWith();if(d&&this.ready)for(i=d.length-1;i>=0;i--)for(n=t(d[i],this.document[0]),s=n.length-1;s>=0;s--)o=t.data(n[s],this.widgetFullName),o&&o!==this&&!o.options.disabled&&(u.push([t.isFunction(o.options.items)?o.options.items.call(o.element[0],e,{item:this.currentItem}):t(o.options.items,o.element),o]),this.containers.push(o));for(i=u.length-1;i>=0;i--)for(a=u[i][1],r=u[i][0],s=0,l=r.length;l>s;s++)h=t(r[s]),h.data(this.widgetName+"-item",a),c.push({item:h,instance:a,width:0,height:0,left:0,top:0})},refreshPositions:function(e){this.floating=this.items.length?"x"===this.options.axis||this._isFloating(this.items[0].item):!1,this.offsetParent&&this.helper&&(this.offset.parent=this._getParentOffset());var i,s,n,o;for(i=this.items.length-1;i>=0;i--)s=this.items[i],s.instance!==this.currentContainer&&this.currentContainer&&s.item[0]!==this.currentItem[0]||(n=this.options.toleranceElement?t(this.options.toleranceElement,s.item):s.item,e||(s.width=n.outerWidth(),s.height=n.outerHeight()),o=n.offset(),s.left=o.left,s.top=o.top);if(this.options.custom&&this.options.custom.refreshContainers)this.options.custom.refreshContainers.call(this);else for(i=this.containers.length-1;i>=0;i--)o=this.containers[i].element.offset(),this.containers[i].containerCache.left=o.left,this.containers[i].containerCache.top=o.top,this.containers[i].containerCache.width=this.containers[i].element.outerWidth(),this.containers[i].containerCache.height=this.containers[i].element.outerHeight();return this},_createPlaceholder:function(e){e=e||this;var i,s=e.options;s.placeholder&&s.placeholder.constructor!==String||(i=s.placeholder,s.placeholder={element:function(){var s=e.currentItem[0].nodeName.toLowerCase(),n=t("<"+s+">",e.document[0]);return e._addClass(n,"ui-sortable-placeholder",i||e.currentItem[0].className)._removeClass(n,"ui-sortable-helper"),"tbody"===s?e._createTrPlaceholder(e.currentItem.find("tr").eq(0),t("<tr>",e.document[0]).appendTo(n)):"tr"===s?e._createTrPlaceholder(e.currentItem,n):"img"===s&&n.attr("src",e.currentItem.attr("src")),i||n.css("visibility","hidden"),n},update:function(t,n){(!i||s.forcePlaceholderSize)&&(n.height()||n.height(e.currentItem.innerHeight()-parseInt(e.currentItem.css("paddingTop")||0,10)-parseInt(e.currentItem.css("paddingBottom")||0,10)),n.width()||n.width(e.currentItem.innerWidth()-parseInt(e.currentItem.css("paddingLeft")||0,10)-parseInt(e.currentItem.css("paddingRight")||0,10)))}}),e.placeholder=t(s.placeholder.element.call(e.element,e.currentItem)),e.currentItem.after(e.placeholder),s.placeholder.update(e,e.placeholder)},_createTrPlaceholder:function(e,i){var s=this;e.children().each(function(){t("<td>&#160;</td>",s.document[0]).attr("colspan",t(this).attr("colspan")||1).appendTo(i)})},_contactContainers:function(e){var i,s,n,o,a,r,h,l,c,u,d=null,p=null;for(i=this.containers.length-1;i>=0;i--)if(!t.contains(this.currentItem[0],this.containers[i].element[0]))if(this._intersectsWith(this.containers[i].containerCache)){if(d&&t.contains(this.containers[i].element[0],d.element[0]))continue;d=this.containers[i],p=i}else this.containers[i].containerCache.over&&(this.containers[i]._trigger("out",e,this._uiHash(this)),this.containers[i].containerCache.over=0);if(d)if(1===this.containers.length)this.containers[p].containerCache.over||(this.containers[p]._trigger("over",e,this._uiHash(this)),this.containers[p].containerCache.over=1);else{for(n=1e4,o=null,c=d.floating||this._isFloating(this.currentItem),a=c?"left":"top",r=c?"width":"height",u=c?"pageX":"pageY",s=this.items.length-1;s>=0;s--)t.contains(this.containers[p].element[0],this.items[s].item[0])&&this.items[s].item[0]!==this.currentItem[0]&&(h=this.items[s].item.offset()[a],l=!1,e[u]-h>this.items[s][r]/2&&(l=!0),n>Math.abs(e[u]-h)&&(n=Math.abs(e[u]-h),o=this.items[s],this.direction=l?"up":"down"));if(!o&&!this.options.dropOnEmpty)return;if(this.currentContainer===this.containers[p])return this.currentContainer.containerCache.over||(this.containers[p]._trigger("over",e,this._uiHash()),this.currentContainer.containerCache.over=1),void 0;o?this._rearrange(e,o,null,!0):this._rearrange(e,null,this.containers[p].element,!0),this._trigger("change",e,this._uiHash()),this.containers[p]._trigger("change",e,this._uiHash(this)),this.currentContainer=this.containers[p],this.options.placeholder.update(this.currentContainer,this.placeholder),this.containers[p]._trigger("over",e,this._uiHash(this)),this.containers[p].containerCache.over=1}},_createHelper:function(e){var i=this.options,s=t.isFunction(i.helper)?t(i.helper.apply(this.element[0],[e,this.currentItem])):"clone"===i.helper?this.currentItem.clone():this.currentItem;return s.parents("body").length||t("parent"!==i.appendTo?i.appendTo:this.currentItem[0].parentNode)[0].appendChild(s[0]),s[0]===this.currentItem[0]&&(this._storedCSS={width:this.currentItem[0].style.width,height:this.currentItem[0].style.height,position:this.currentItem.css("position"),top:this.currentItem.css("top"),left:this.currentItem.css("left")}),(!s[0].style.width||i.forceHelperSize)&&s.width(this.currentItem.width()),(!s[0].style.height||i.forceHelperSize)&&s.height(this.currentItem.height()),s},_adjustOffsetFromHelper:function(e){"string"==typeof e&&(e=e.split(" ")),t.isArray(e)&&(e={left:+e[0],top:+e[1]||0}),"left"in e&&(this.offset.click.left=e.left+this.margins.left),"right"in e&&(this.offset.click.left=this.helperProportions.width-e.right+this.margins.left),"top"in e&&(this.offset.click.top=e.top+this.margins.top),"bottom"in e&&(this.offset.click.top=this.helperProportions.height-e.bottom+this.margins.top)},_getParentOffset:function(){this.offsetParent=this.helper.offsetParent();var e=this.offsetParent.offset();return"absolute"===this.cssPosition&&this.scrollParent[0]!==this.document[0]&&t.contains(this.scrollParent[0],this.offsetParent[0])&&(e.left+=this.scrollParent.scrollLeft(),e.top+=this.scrollParent.scrollTop()),(this.offsetParent[0]===this.document[0].body||this.offsetParent[0].tagName&&"html"===this.offsetParent[0].tagName.toLowerCase()&&t.ui.ie)&&(e={top:0,left:0}),{top:e.top+(parseInt(this.offsetParent.css("borderTopWidth"),10)||0),left:e.left+(parseInt(this.offsetParent.css("borderLeftWidth"),10)||0)}},_getRelativeOffset:function(){if("relative"===this.cssPosition){var t=this.currentItem.position();return{top:t.top-(parseInt(this.helper.css("top"),10)||0)+this.scrollParent.scrollTop(),left:t.left-(parseInt(this.helper.css("left"),10)||0)+this.scrollParent.scrollLeft()}}return{top:0,left:0}},_cacheMargins:function(){this.margins={left:parseInt(this.currentItem.css("marginLeft"),10)||0,top:parseInt(this.currentItem.css("marginTop"),10)||0}},_cacheHelperProportions:function(){this.helperProportions={width:this.helper.outerWidth(),height:this.helper.outerHeight()}},_setContainment:function(){var e,i,s,n=this.options;"parent"===n.containment&&(n.containment=this.helper[0].parentNode),("document"===n.containment||"window"===n.containment)&&(this.containment=[0-this.offset.relative.left-this.offset.parent.left,0-this.offset.relative.top-this.offset.parent.top,"document"===n.containment?this.document.width():this.window.width()-this.helperProportions.width-this.margins.left,("document"===n.containment?this.document.height()||document.body.parentNode.scrollHeight:this.window.height()||this.document[0].body.parentNode.scrollHeight)-this.helperProportions.height-this.margins.top]),/^(document|window|parent)$/.test(n.containment)||(e=t(n.containment)[0],i=t(n.containment).offset(),s="hidden"!==t(e).css("overflow"),this.containment=[i.left+(parseInt(t(e).css("borderLeftWidth"),10)||0)+(parseInt(t(e).css("paddingLeft"),10)||0)-this.margins.left,i.top+(parseInt(t(e).css("borderTopWidth"),10)||0)+(parseInt(t(e).css("paddingTop"),10)||0)-this.margins.top,i.left+(s?Math.max(e.scrollWidth,e.offsetWidth):e.offsetWidth)-(parseInt(t(e).css("borderLeftWidth"),10)||0)-(parseInt(t(e).css("paddingRight"),10)||0)-this.helperProportions.width-this.margins.left,i.top+(s?Math.max(e.scrollHeight,e.offsetHeight):e.offsetHeight)-(parseInt(t(e).css("borderTopWidth"),10)||0)-(parseInt(t(e).css("paddingBottom"),10)||0)-this.helperProportions.height-this.margins.top])},_convertPositionTo:function(e,i){i||(i=this.position);var s="absolute"===e?1:-1,n="absolute"!==this.cssPosition||this.scrollParent[0]!==this.document[0]&&t.contains(this.scrollParent[0],this.offsetParent[0])?this.scrollParent:this.offsetParent,o=/(html|body)/i.test(n[0].tagName);return{top:i.top+this.offset.relative.top*s+this.offset.parent.top*s-("fixed"===this.cssPosition?-this.scrollParent.scrollTop():o?0:n.scrollTop())*s,left:i.left+this.offset.relative.left*s+this.offset.parent.left*s-("fixed"===this.cssPosition?-this.scrollParent.scrollLeft():o?0:n.scrollLeft())*s}},_generatePosition:function(e){var i,s,n=this.options,o=e.pageX,a=e.pageY,r="absolute"!==this.cssPosition||this.scrollParent[0]!==this.document[0]&&t.contains(this.scrollParent[0],this.offsetParent[0])?this.scrollParent:this.offsetParent,h=/(html|body)/i.test(r[0].tagName);return"relative"!==this.cssPosition||this.scrollParent[0]!==this.document[0]&&this.scrollParent[0]!==this.offsetParent[0]||(this.offset.relative=this._getRelativeOffset()),this.originalPosition&&(this.containment&&(e.pageX-this.offset.click.left<this.containment[0]&&(o=this.containment[0]+this.offset.click.left),e.pageY-this.offset.click.top<this.containment[1]&&(a=this.containment[1]+this.offset.click.top),e.pageX-this.offset.click.left>this.containment[2]&&(o=this.containment[2]+this.offset.click.left),e.pageY-this.offset.click.top>this.containment[3]&&(a=this.containment[3]+this.offset.click.top)),n.grid&&(i=this.originalPageY+Math.round((a-this.originalPageY)/n.grid[1])*n.grid[1],a=this.containment?i-this.offset.click.top>=this.containment[1]&&i-this.offset.click.top<=this.containment[3]?i:i-this.offset.click.top>=this.containment[1]?i-n.grid[1]:i+n.grid[1]:i,s=this.originalPageX+Math.round((o-this.originalPageX)/n.grid[0])*n.grid[0],o=this.containment?s-this.offset.click.left>=this.containment[0]&&s-this.offset.click.left<=this.containment[2]?s:s-this.offset.click.left>=this.containment[0]?s-n.grid[0]:s+n.grid[0]:s)),{top:a-this.offset.click.top-this.offset.relative.top-this.offset.parent.top+("fixed"===this.cssPosition?-this.scrollParent.scrollTop():h?0:r.scrollTop()),left:o-this.offset.click.left-this.offset.relative.left-this.offset.parent.left+("fixed"===this.cssPosition?-this.scrollParent.scrollLeft():h?0:r.scrollLeft())}},_rearrange:function(t,e,i,s){i?i[0].appendChild(this.placeholder[0]):e.item[0].parentNode.insertBefore(this.placeholder[0],"down"===this.direction?e.item[0]:e.item[0].nextSibling),this.counter=this.counter?++this.counter:1;var n=this.counter;
-this._delay(function(){n===this.counter&&this.refreshPositions(!s)})},_clear:function(t,e){function i(t,e,i){return function(s){i._trigger(t,s,e._uiHash(e))}}this.reverting=!1;var s,n=[];if(!this._noFinalSort&&this.currentItem.parent().length&&this.placeholder.before(this.currentItem),this._noFinalSort=null,this.helper[0]===this.currentItem[0]){for(s in this._storedCSS)("auto"===this._storedCSS[s]||"static"===this._storedCSS[s])&&(this._storedCSS[s]="");this.currentItem.css(this._storedCSS),this._removeClass(this.currentItem,"ui-sortable-helper")}else this.currentItem.show();for(this.fromOutside&&!e&&n.push(function(t){this._trigger("receive",t,this._uiHash(this.fromOutside))}),!this.fromOutside&&this.domPosition.prev===this.currentItem.prev().not(".ui-sortable-helper")[0]&&this.domPosition.parent===this.currentItem.parent()[0]||e||n.push(function(t){this._trigger("update",t,this._uiHash())}),this!==this.currentContainer&&(e||(n.push(function(t){this._trigger("remove",t,this._uiHash())}),n.push(function(t){return function(e){t._trigger("receive",e,this._uiHash(this))}}.call(this,this.currentContainer)),n.push(function(t){return function(e){t._trigger("update",e,this._uiHash(this))}}.call(this,this.currentContainer)))),s=this.containers.length-1;s>=0;s--)e||n.push(i("deactivate",this,this.containers[s])),this.containers[s].containerCache.over&&(n.push(i("out",this,this.containers[s])),this.containers[s].containerCache.over=0);if(this.storedCursor&&(this.document.find("body").css("cursor",this.storedCursor),this.storedStylesheet.remove()),this._storedOpacity&&this.helper.css("opacity",this._storedOpacity),this._storedZIndex&&this.helper.css("zIndex","auto"===this._storedZIndex?"":this._storedZIndex),this.dragging=!1,e||this._trigger("beforeStop",t,this._uiHash()),this.placeholder[0].parentNode.removeChild(this.placeholder[0]),this.cancelHelperRemoval||(this.helper[0]!==this.currentItem[0]&&this.helper.remove(),this.helper=null),!e){for(s=0;n.length>s;s++)n[s].call(this,t);this._trigger("stop",t,this._uiHash())}return this.fromOutside=!1,!this.cancelHelperRemoval},_trigger:function(){t.Widget.prototype._trigger.apply(this,arguments)===!1&&this.cancel()},_uiHash:function(e){var i=e||this;return{helper:i.helper,placeholder:i.placeholder||t([]),position:i.position,originalPosition:i.originalPosition,offset:i.positionAbs,item:i.currentItem,sender:e?e.element:null}}}),t.widget("ui.spinner",{version:"1.12.1",defaultElement:"<input>",widgetEventPrefix:"spin",options:{classes:{"ui-spinner":"ui-corner-all","ui-spinner-down":"ui-corner-br","ui-spinner-up":"ui-corner-tr"},culture:null,icons:{down:"ui-icon-triangle-1-s",up:"ui-icon-triangle-1-n"},incremental:!0,max:null,min:null,numberFormat:null,page:10,step:1,change:null,spin:null,start:null,stop:null},_create:function(){this._setOption("max",this.options.max),this._setOption("min",this.options.min),this._setOption("step",this.options.step),""!==this.value()&&this._value(this.element.val(),!0),this._draw(),this._on(this._events),this._refresh(),this._on(this.window,{beforeunload:function(){this.element.removeAttr("autocomplete")}})},_getCreateOptions:function(){var e=this._super(),i=this.element;return t.each(["min","max","step"],function(t,s){var n=i.attr(s);null!=n&&n.length&&(e[s]=n)}),e},_events:{keydown:function(t){this._start(t)&&this._keydown(t)&&t.preventDefault()},keyup:"_stop",focus:function(){this.previous=this.element.val()},blur:function(t){return this.cancelBlur?(delete this.cancelBlur,void 0):(this._stop(),this._refresh(),this.previous!==this.element.val()&&this._trigger("change",t),void 0)},mousewheel:function(t,e){if(e){if(!this.spinning&&!this._start(t))return!1;this._spin((e>0?1:-1)*this.options.step,t),clearTimeout(this.mousewheelTimer),this.mousewheelTimer=this._delay(function(){this.spinning&&this._stop(t)},100),t.preventDefault()}},"mousedown .ui-spinner-button":function(e){function i(){var e=this.element[0]===t.ui.safeActiveElement(this.document[0]);e||(this.element.trigger("focus"),this.previous=s,this._delay(function(){this.previous=s}))}var s;s=this.element[0]===t.ui.safeActiveElement(this.document[0])?this.previous:this.element.val(),e.preventDefault(),i.call(this),this.cancelBlur=!0,this._delay(function(){delete this.cancelBlur,i.call(this)}),this._start(e)!==!1&&this._repeat(null,t(e.currentTarget).hasClass("ui-spinner-up")?1:-1,e)},"mouseup .ui-spinner-button":"_stop","mouseenter .ui-spinner-button":function(e){return t(e.currentTarget).hasClass("ui-state-active")?this._start(e)===!1?!1:(this._repeat(null,t(e.currentTarget).hasClass("ui-spinner-up")?1:-1,e),void 0):void 0},"mouseleave .ui-spinner-button":"_stop"},_enhance:function(){this.uiSpinner=this.element.attr("autocomplete","off").wrap("<span>").parent().append("<a></a><a></a>")},_draw:function(){this._enhance(),this._addClass(this.uiSpinner,"ui-spinner","ui-widget ui-widget-content"),this._addClass("ui-spinner-input"),this.element.attr("role","spinbutton"),this.buttons=this.uiSpinner.children("a").attr("tabIndex",-1).attr("aria-hidden",!0).button({classes:{"ui-button":""}}),this._removeClass(this.buttons,"ui-corner-all"),this._addClass(this.buttons.first(),"ui-spinner-button ui-spinner-up"),this._addClass(this.buttons.last(),"ui-spinner-button ui-spinner-down"),this.buttons.first().button({icon:this.options.icons.up,showLabel:!1}),this.buttons.last().button({icon:this.options.icons.down,showLabel:!1}),this.buttons.height()>Math.ceil(.5*this.uiSpinner.height())&&this.uiSpinner.height()>0&&this.uiSpinner.height(this.uiSpinner.height())},_keydown:function(e){var i=this.options,s=t.ui.keyCode;switch(e.keyCode){case s.UP:return this._repeat(null,1,e),!0;case s.DOWN:return this._repeat(null,-1,e),!0;case s.PAGE_UP:return this._repeat(null,i.page,e),!0;case s.PAGE_DOWN:return this._repeat(null,-i.page,e),!0}return!1},_start:function(t){return this.spinning||this._trigger("start",t)!==!1?(this.counter||(this.counter=1),this.spinning=!0,!0):!1},_repeat:function(t,e,i){t=t||500,clearTimeout(this.timer),this.timer=this._delay(function(){this._repeat(40,e,i)},t),this._spin(e*this.options.step,i)},_spin:function(t,e){var i=this.value()||0;this.counter||(this.counter=1),i=this._adjustValue(i+t*this._increment(this.counter)),this.spinning&&this._trigger("spin",e,{value:i})===!1||(this._value(i),this.counter++)},_increment:function(e){var i=this.options.incremental;return i?t.isFunction(i)?i(e):Math.floor(e*e*e/5e4-e*e/500+17*e/200+1):1},_precision:function(){var t=this._precisionOf(this.options.step);return null!==this.options.min&&(t=Math.max(t,this._precisionOf(this.options.min))),t},_precisionOf:function(t){var e=""+t,i=e.indexOf(".");return-1===i?0:e.length-i-1},_adjustValue:function(t){var e,i,s=this.options;return e=null!==s.min?s.min:0,i=t-e,i=Math.round(i/s.step)*s.step,t=e+i,t=parseFloat(t.toFixed(this._precision())),null!==s.max&&t>s.max?s.max:null!==s.min&&s.min>t?s.min:t},_stop:function(t){this.spinning&&(clearTimeout(this.timer),clearTimeout(this.mousewheelTimer),this.counter=0,this.spinning=!1,this._trigger("stop",t))},_setOption:function(t,e){var i,s,n;return"culture"===t||"numberFormat"===t?(i=this._parse(this.element.val()),this.options[t]=e,this.element.val(this._format(i)),void 0):(("max"===t||"min"===t||"step"===t)&&"string"==typeof e&&(e=this._parse(e)),"icons"===t&&(s=this.buttons.first().find(".ui-icon"),this._removeClass(s,null,this.options.icons.up),this._addClass(s,null,e.up),n=this.buttons.last().find(".ui-icon"),this._removeClass(n,null,this.options.icons.down),this._addClass(n,null,e.down)),this._super(t,e),void 0)},_setOptionDisabled:function(t){this._super(t),this._toggleClass(this.uiSpinner,null,"ui-state-disabled",!!t),this.element.prop("disabled",!!t),this.buttons.button(t?"disable":"enable")},_setOptions:r(function(t){this._super(t)}),_parse:function(t){return"string"==typeof t&&""!==t&&(t=window.Globalize&&this.options.numberFormat?Globalize.parseFloat(t,10,this.options.culture):+t),""===t||isNaN(t)?null:t},_format:function(t){return""===t?"":window.Globalize&&this.options.numberFormat?Globalize.format(t,this.options.numberFormat,this.options.culture):t},_refresh:function(){this.element.attr({"aria-valuemin":this.options.min,"aria-valuemax":this.options.max,"aria-valuenow":this._parse(this.element.val())})},isValid:function(){var t=this.value();return null===t?!1:t===this._adjustValue(t)},_value:function(t,e){var i;""!==t&&(i=this._parse(t),null!==i&&(e||(i=this._adjustValue(i)),t=this._format(i))),this.element.val(t),this._refresh()},_destroy:function(){this.element.prop("disabled",!1).removeAttr("autocomplete role aria-valuemin aria-valuemax aria-valuenow"),this.uiSpinner.replaceWith(this.element)},stepUp:r(function(t){this._stepUp(t)}),_stepUp:function(t){this._start()&&(this._spin((t||1)*this.options.step),this._stop())},stepDown:r(function(t){this._stepDown(t)}),_stepDown:function(t){this._start()&&(this._spin((t||1)*-this.options.step),this._stop())},pageUp:r(function(t){this._stepUp((t||1)*this.options.page)}),pageDown:r(function(t){this._stepDown((t||1)*this.options.page)}),value:function(t){return arguments.length?(r(this._value).call(this,t),void 0):this._parse(this.element.val())},widget:function(){return this.uiSpinner}}),t.uiBackCompat!==!1&&t.widget("ui.spinner",t.ui.spinner,{_enhance:function(){this.uiSpinner=this.element.attr("autocomplete","off").wrap(this._uiSpinnerHtml()).parent().append(this._buttonHtml())},_uiSpinnerHtml:function(){return"<span>"},_buttonHtml:function(){return"<a></a><a></a>"}}),t.ui.spinner,t.widget("ui.tabs",{version:"1.12.1",delay:300,options:{active:null,classes:{"ui-tabs":"ui-corner-all","ui-tabs-nav":"ui-corner-all","ui-tabs-panel":"ui-corner-bottom","ui-tabs-tab":"ui-corner-top"},collapsible:!1,event:"click",heightStyle:"content",hide:null,show:null,activate:null,beforeActivate:null,beforeLoad:null,load:null},_isLocal:function(){var t=/#.*$/;return function(e){var i,s;i=e.href.replace(t,""),s=location.href.replace(t,"");try{i=decodeURIComponent(i)}catch(n){}try{s=decodeURIComponent(s)}catch(n){}return e.hash.length>1&&i===s}}(),_create:function(){var e=this,i=this.options;this.running=!1,this._addClass("ui-tabs","ui-widget ui-widget-content"),this._toggleClass("ui-tabs-collapsible",null,i.collapsible),this._processTabs(),i.active=this._initialActive(),t.isArray(i.disabled)&&(i.disabled=t.unique(i.disabled.concat(t.map(this.tabs.filter(".ui-state-disabled"),function(t){return e.tabs.index(t)}))).sort()),this.active=this.options.active!==!1&&this.anchors.length?this._findActive(i.active):t(),this._refresh(),this.active.length&&this.load(i.active)},_initialActive:function(){var e=this.options.active,i=this.options.collapsible,s=location.hash.substring(1);return null===e&&(s&&this.tabs.each(function(i,n){return t(n).attr("aria-controls")===s?(e=i,!1):void 0}),null===e&&(e=this.tabs.index(this.tabs.filter(".ui-tabs-active"))),(null===e||-1===e)&&(e=this.tabs.length?0:!1)),e!==!1&&(e=this.tabs.index(this.tabs.eq(e)),-1===e&&(e=i?!1:0)),!i&&e===!1&&this.anchors.length&&(e=0),e},_getCreateEventData:function(){return{tab:this.active,panel:this.active.length?this._getPanelForTab(this.active):t()}},_tabKeydown:function(e){var i=t(t.ui.safeActiveElement(this.document[0])).closest("li"),s=this.tabs.index(i),n=!0;if(!this._handlePageNav(e)){switch(e.keyCode){case t.ui.keyCode.RIGHT:case t.ui.keyCode.DOWN:s++;break;case t.ui.keyCode.UP:case t.ui.keyCode.LEFT:n=!1,s--;break;case t.ui.keyCode.END:s=this.anchors.length-1;break;case t.ui.keyCode.HOME:s=0;break;case t.ui.keyCode.SPACE:return e.preventDefault(),clearTimeout(this.activating),this._activate(s),void 0;case t.ui.keyCode.ENTER:return e.preventDefault(),clearTimeout(this.activating),this._activate(s===this.options.active?!1:s),void 0;default:return}e.preventDefault(),clearTimeout(this.activating),s=this._focusNextTab(s,n),e.ctrlKey||e.metaKey||(i.attr("aria-selected","false"),this.tabs.eq(s).attr("aria-selected","true"),this.activating=this._delay(function(){this.option("active",s)},this.delay))}},_panelKeydown:function(e){this._handlePageNav(e)||e.ctrlKey&&e.keyCode===t.ui.keyCode.UP&&(e.preventDefault(),this.active.trigger("focus"))},_handlePageNav:function(e){return e.altKey&&e.keyCode===t.ui.keyCode.PAGE_UP?(this._activate(this._focusNextTab(this.options.active-1,!1)),!0):e.altKey&&e.keyCode===t.ui.keyCode.PAGE_DOWN?(this._activate(this._focusNextTab(this.options.active+1,!0)),!0):void 0},_findNextTab:function(e,i){function s(){return e>n&&(e=0),0>e&&(e=n),e}for(var n=this.tabs.length-1;-1!==t.inArray(s(),this.options.disabled);)e=i?e+1:e-1;return e},_focusNextTab:function(t,e){return t=this._findNextTab(t,e),this.tabs.eq(t).trigger("focus"),t},_setOption:function(t,e){return"active"===t?(this._activate(e),void 0):(this._super(t,e),"collapsible"===t&&(this._toggleClass("ui-tabs-collapsible",null,e),e||this.options.active!==!1||this._activate(0)),"event"===t&&this._setupEvents(e),"heightStyle"===t&&this._setupHeightStyle(e),void 0)},_sanitizeSelector:function(t){return t?t.replace(/[!"$%&'()*+,.\/:;<=>?@\[\]\^`{|}~]/g,"\\$&"):""},refresh:function(){var e=this.options,i=this.tablist.children(":has(a[href])");e.disabled=t.map(i.filter(".ui-state-disabled"),function(t){return i.index(t)}),this._processTabs(),e.active!==!1&&this.anchors.length?this.active.length&&!t.contains(this.tablist[0],this.active[0])?this.tabs.length===e.disabled.length?(e.active=!1,this.active=t()):this._activate(this._findNextTab(Math.max(0,e.active-1),!1)):e.active=this.tabs.index(this.active):(e.active=!1,this.active=t()),this._refresh()},_refresh:function(){this._setOptionDisabled(this.options.disabled),this._setupEvents(this.options.event),this._setupHeightStyle(this.options.heightStyle),this.tabs.not(this.active).attr({"aria-selected":"false","aria-expanded":"false",tabIndex:-1}),this.panels.not(this._getPanelForTab(this.active)).hide().attr({"aria-hidden":"true"}),this.active.length?(this.active.attr({"aria-selected":"true","aria-expanded":"true",tabIndex:0}),this._addClass(this.active,"ui-tabs-active","ui-state-active"),this._getPanelForTab(this.active).show().attr({"aria-hidden":"false"})):this.tabs.eq(0).attr("tabIndex",0)},_processTabs:function(){var e=this,i=this.tabs,s=this.anchors,n=this.panels;this.tablist=this._getList().attr("role","tablist"),this._addClass(this.tablist,"ui-tabs-nav","ui-helper-reset ui-helper-clearfix ui-widget-header"),this.tablist.on("mousedown"+this.eventNamespace,"> li",function(e){t(this).is(".ui-state-disabled")&&e.preventDefault()}).on("focus"+this.eventNamespace,".ui-tabs-anchor",function(){t(this).closest("li").is(".ui-state-disabled")&&this.blur()}),this.tabs=this.tablist.find("> li:has(a[href])").attr({role:"tab",tabIndex:-1}),this._addClass(this.tabs,"ui-tabs-tab","ui-state-default"),this.anchors=this.tabs.map(function(){return t("a",this)[0]}).attr({role:"presentation",tabIndex:-1}),this._addClass(this.anchors,"ui-tabs-anchor"),this.panels=t(),this.anchors.each(function(i,s){var n,o,a,r=t(s).uniqueId().attr("id"),h=t(s).closest("li"),l=h.attr("aria-controls");e._isLocal(s)?(n=s.hash,a=n.substring(1),o=e.element.find(e._sanitizeSelector(n))):(a=h.attr("aria-controls")||t({}).uniqueId()[0].id,n="#"+a,o=e.element.find(n),o.length||(o=e._createPanel(a),o.insertAfter(e.panels[i-1]||e.tablist)),o.attr("aria-live","polite")),o.length&&(e.panels=e.panels.add(o)),l&&h.data("ui-tabs-aria-controls",l),h.attr({"aria-controls":a,"aria-labelledby":r}),o.attr("aria-labelledby",r)}),this.panels.attr("role","tabpanel"),this._addClass(this.panels,"ui-tabs-panel","ui-widget-content"),i&&(this._off(i.not(this.tabs)),this._off(s.not(this.anchors)),this._off(n.not(this.panels)))},_getList:function(){return this.tablist||this.element.find("ol, ul").eq(0)},_createPanel:function(e){return t("<div>").attr("id",e).data("ui-tabs-destroy",!0)},_setOptionDisabled:function(e){var i,s,n;for(t.isArray(e)&&(e.length?e.length===this.anchors.length&&(e=!0):e=!1),n=0;s=this.tabs[n];n++)i=t(s),e===!0||-1!==t.inArray(n,e)?(i.attr("aria-disabled","true"),this._addClass(i,null,"ui-state-disabled")):(i.removeAttr("aria-disabled"),this._removeClass(i,null,"ui-state-disabled"));this.options.disabled=e,this._toggleClass(this.widget(),this.widgetFullName+"-disabled",null,e===!0)},_setupEvents:function(e){var i={};e&&t.each(e.split(" "),function(t,e){i[e]="_eventHandler"}),this._off(this.anchors.add(this.tabs).add(this.panels)),this._on(!0,this.anchors,{click:function(t){t.preventDefault()}}),this._on(this.anchors,i),this._on(this.tabs,{keydown:"_tabKeydown"}),this._on(this.panels,{keydown:"_panelKeydown"}),this._focusable(this.tabs),this._hoverable(this.tabs)},_setupHeightStyle:function(e){var i,s=this.element.parent();"fill"===e?(i=s.height(),i-=this.element.outerHeight()-this.element.height(),this.element.siblings(":visible").each(function(){var e=t(this),s=e.css("position");"absolute"!==s&&"fixed"!==s&&(i-=e.outerHeight(!0))}),this.element.children().not(this.panels).each(function(){i-=t(this).outerHeight(!0)}),this.panels.each(function(){t(this).height(Math.max(0,i-t(this).innerHeight()+t(this).height()))}).css("overflow","auto")):"auto"===e&&(i=0,this.panels.each(function(){i=Math.max(i,t(this).height("").height())}).height(i))},_eventHandler:function(e){var i=this.options,s=this.active,n=t(e.currentTarget),o=n.closest("li"),a=o[0]===s[0],r=a&&i.collapsible,h=r?t():this._getPanelForTab(o),l=s.length?this._getPanelForTab(s):t(),c={oldTab:s,oldPanel:l,newTab:r?t():o,newPanel:h};e.preventDefault(),o.hasClass("ui-state-disabled")||o.hasClass("ui-tabs-loading")||this.running||a&&!i.collapsible||this._trigger("beforeActivate",e,c)===!1||(i.active=r?!1:this.tabs.index(o),this.active=a?t():o,this.xhr&&this.xhr.abort(),l.length||h.length||t.error("jQuery UI Tabs: Mismatching fragment identifier."),h.length&&this.load(this.tabs.index(o),e),this._toggle(e,c))},_toggle:function(e,i){function s(){o.running=!1,o._trigger("activate",e,i)}function n(){o._addClass(i.newTab.closest("li"),"ui-tabs-active","ui-state-active"),a.length&&o.options.show?o._show(a,o.options.show,s):(a.show(),s())}var o=this,a=i.newPanel,r=i.oldPanel;this.running=!0,r.length&&this.options.hide?this._hide(r,this.options.hide,function(){o._removeClass(i.oldTab.closest("li"),"ui-tabs-active","ui-state-active"),n()}):(this._removeClass(i.oldTab.closest("li"),"ui-tabs-active","ui-state-active"),r.hide(),n()),r.attr("aria-hidden","true"),i.oldTab.attr({"aria-selected":"false","aria-expanded":"false"}),a.length&&r.length?i.oldTab.attr("tabIndex",-1):a.length&&this.tabs.filter(function(){return 0===t(this).attr("tabIndex")}).attr("tabIndex",-1),a.attr("aria-hidden","false"),i.newTab.attr({"aria-selected":"true","aria-expanded":"true",tabIndex:0})},_activate:function(e){var i,s=this._findActive(e);s[0]!==this.active[0]&&(s.length||(s=this.active),i=s.find(".ui-tabs-anchor")[0],this._eventHandler({target:i,currentTarget:i,preventDefault:t.noop}))},_findActive:function(e){return e===!1?t():this.tabs.eq(e)},_getIndex:function(e){return"string"==typeof e&&(e=this.anchors.index(this.anchors.filter("[href$='"+t.ui.escapeSelector(e)+"']"))),e},_destroy:function(){this.xhr&&this.xhr.abort(),this.tablist.removeAttr("role").off(this.eventNamespace),this.anchors.removeAttr("role tabIndex").removeUniqueId(),this.tabs.add(this.panels).each(function(){t.data(this,"ui-tabs-destroy")?t(this).remove():t(this).removeAttr("role tabIndex aria-live aria-busy aria-selected aria-labelledby aria-hidden aria-expanded")}),this.tabs.each(function(){var e=t(this),i=e.data("ui-tabs-aria-controls");i?e.attr("aria-controls",i).removeData("ui-tabs-aria-controls"):e.removeAttr("aria-controls")}),this.panels.show(),"content"!==this.options.heightStyle&&this.panels.css("height","")},enable:function(e){var i=this.options.disabled;i!==!1&&(void 0===e?i=!1:(e=this._getIndex(e),i=t.isArray(i)?t.map(i,function(t){return t!==e?t:null}):t.map(this.tabs,function(t,i){return i!==e?i:null})),this._setOptionDisabled(i))},disable:function(e){var i=this.options.disabled;if(i!==!0){if(void 0===e)i=!0;else{if(e=this._getIndex(e),-1!==t.inArray(e,i))return;i=t.isArray(i)?t.merge([e],i).sort():[e]}this._setOptionDisabled(i)}},load:function(e,i){e=this._getIndex(e);var s=this,n=this.tabs.eq(e),o=n.find(".ui-tabs-anchor"),a=this._getPanelForTab(n),r={tab:n,panel:a},h=function(t,e){"abort"===e&&s.panels.stop(!1,!0),s._removeClass(n,"ui-tabs-loading"),a.removeAttr("aria-busy"),t===s.xhr&&delete s.xhr};this._isLocal(o[0])||(this.xhr=t.ajax(this._ajaxSettings(o,i,r)),this.xhr&&"canceled"!==this.xhr.statusText&&(this._addClass(n,"ui-tabs-loading"),a.attr("aria-busy","true"),this.xhr.done(function(t,e,n){setTimeout(function(){a.html(t),s._trigger("load",i,r),h(n,e)},1)}).fail(function(t,e){setTimeout(function(){h(t,e)},1)})))},_ajaxSettings:function(e,i,s){var n=this;return{url:e.attr("href").replace(/#.*$/,""),beforeSend:function(e,o){return n._trigger("beforeLoad",i,t.extend({jqXHR:e,ajaxSettings:o},s))}}},_getPanelForTab:function(e){var i=t(e).attr("aria-controls");return this.element.find(this._sanitizeSelector("#"+i))}}),t.uiBackCompat!==!1&&t.widget("ui.tabs",t.ui.tabs,{_processTabs:function(){this._superApply(arguments),this._addClass(this.tabs,"ui-tab")}}),t.ui.tabs,t.widget("ui.tooltip",{version:"1.12.1",options:{classes:{"ui-tooltip":"ui-corner-all ui-widget-shadow"},content:function(){var e=t(this).attr("title")||"";return t("<a>").text(e).html()},hide:!0,items:"[title]:not([disabled])",position:{my:"left top+15",at:"left bottom",collision:"flipfit flip"},show:!0,track:!1,close:null,open:null},_addDescribedBy:function(e,i){var s=(e.attr("aria-describedby")||"").split(/\s+/);s.push(i),e.data("ui-tooltip-id",i).attr("aria-describedby",t.trim(s.join(" ")))},_removeDescribedBy:function(e){var i=e.data("ui-tooltip-id"),s=(e.attr("aria-describedby")||"").split(/\s+/),n=t.inArray(i,s);-1!==n&&s.splice(n,1),e.removeData("ui-tooltip-id"),s=t.trim(s.join(" ")),s?e.attr("aria-describedby",s):e.removeAttr("aria-describedby")},_create:function(){this._on({mouseover:"open",focusin:"open"}),this.tooltips={},this.parents={},this.liveRegion=t("<div>").attr({role:"log","aria-live":"assertive","aria-relevant":"additions"}).appendTo(this.document[0].body),this._addClass(this.liveRegion,null,"ui-helper-hidden-accessible"),this.disabledTitles=t([])},_setOption:function(e,i){var s=this;this._super(e,i),"content"===e&&t.each(this.tooltips,function(t,e){s._updateContent(e.element)})},_setOptionDisabled:function(t){this[t?"_disable":"_enable"]()},_disable:function(){var e=this;t.each(this.tooltips,function(i,s){var n=t.Event("blur");n.target=n.currentTarget=s.element[0],e.close(n,!0)}),this.disabledTitles=this.disabledTitles.add(this.element.find(this.options.items).addBack().filter(function(){var e=t(this);return e.is("[title]")?e.data("ui-tooltip-title",e.attr("title")).removeAttr("title"):void 0}))},_enable:function(){this.disabledTitles.each(function(){var e=t(this);e.data("ui-tooltip-title")&&e.attr("title",e.data("ui-tooltip-title"))}),this.disabledTitles=t([])},open:function(e){var i=this,s=t(e?e.target:this.element).closest(this.options.items);s.length&&!s.data("ui-tooltip-id")&&(s.attr("title")&&s.data("ui-tooltip-title",s.attr("title")),s.data("ui-tooltip-open",!0),e&&"mouseover"===e.type&&s.parents().each(function(){var e,s=t(this);s.data("ui-tooltip-open")&&(e=t.Event("blur"),e.target=e.currentTarget=this,i.close(e,!0)),s.attr("title")&&(s.uniqueId(),i.parents[this.id]={element:this,title:s.attr("title")},s.attr("title",""))}),this._registerCloseHandlers(e,s),this._updateContent(s,e))},_updateContent:function(t,e){var i,s=this.options.content,n=this,o=e?e.type:null;return"string"==typeof s||s.nodeType||s.jquery?this._open(e,t,s):(i=s.call(t[0],function(i){n._delay(function(){t.data("ui-tooltip-open")&&(e&&(e.type=o),this._open(e,t,i))})}),i&&this._open(e,t,i),void 0)},_open:function(e,i,s){function n(t){l.of=t,a.is(":hidden")||a.position(l)}var o,a,r,h,l=t.extend({},this.options.position);if(s){if(o=this._find(i))return o.tooltip.find(".ui-tooltip-content").html(s),void 0;i.is("[title]")&&(e&&"mouseover"===e.type?i.attr("title",""):i.removeAttr("title")),o=this._tooltip(i),a=o.tooltip,this._addDescribedBy(i,a.attr("id")),a.find(".ui-tooltip-content").html(s),this.liveRegion.children().hide(),h=t("<div>").html(a.find(".ui-tooltip-content").html()),h.removeAttr("name").find("[name]").removeAttr("name"),h.removeAttr("id").find("[id]").removeAttr("id"),h.appendTo(this.liveRegion),this.options.track&&e&&/^mouse/.test(e.type)?(this._on(this.document,{mousemove:n}),n(e)):a.position(t.extend({of:i},this.options.position)),a.hide(),this._show(a,this.options.show),this.options.track&&this.options.show&&this.options.show.delay&&(r=this.delayedShow=setInterval(function(){a.is(":visible")&&(n(l.of),clearInterval(r))},t.fx.interval)),this._trigger("open",e,{tooltip:a})}},_registerCloseHandlers:function(e,i){var s={keyup:function(e){if(e.keyCode===t.ui.keyCode.ESCAPE){var s=t.Event(e);s.currentTarget=i[0],this.close(s,!0)}}};i[0]!==this.element[0]&&(s.remove=function(){this._removeTooltip(this._find(i).tooltip)}),e&&"mouseover"!==e.type||(s.mouseleave="close"),e&&"focusin"!==e.type||(s.focusout="close"),this._on(!0,i,s)},close:function(e){var i,s=this,n=t(e?e.currentTarget:this.element),o=this._find(n);return o?(i=o.tooltip,o.closing||(clearInterval(this.delayedShow),n.data("ui-tooltip-title")&&!n.attr("title")&&n.attr("title",n.data("ui-tooltip-title")),this._removeDescribedBy(n),o.hiding=!0,i.stop(!0),this._hide(i,this.options.hide,function(){s._removeTooltip(t(this))}),n.removeData("ui-tooltip-open"),this._off(n,"mouseleave focusout keyup"),n[0]!==this.element[0]&&this._off(n,"remove"),this._off(this.document,"mousemove"),e&&"mouseleave"===e.type&&t.each(this.parents,function(e,i){t(i.element).attr("title",i.title),delete s.parents[e]}),o.closing=!0,this._trigger("close",e,{tooltip:i}),o.hiding||(o.closing=!1)),void 0):(n.removeData("ui-tooltip-open"),void 0)},_tooltip:function(e){var i=t("<div>").attr("role","tooltip"),s=t("<div>").appendTo(i),n=i.uniqueId().attr("id");return this._addClass(s,"ui-tooltip-content"),this._addClass(i,"ui-tooltip","ui-widget ui-widget-content"),i.appendTo(this._appendTo(e)),this.tooltips[n]={element:e,tooltip:i}},_find:function(t){var e=t.data("ui-tooltip-id");return e?this.tooltips[e]:null},_removeTooltip:function(t){t.remove(),delete this.tooltips[t.attr("id")]},_appendTo:function(t){var e=t.closest(".ui-front, dialog");return e.length||(e=this.document[0].body),e},_destroy:function(){var e=this;t.each(this.tooltips,function(i,s){var n=t.Event("blur"),o=s.element;n.target=n.currentTarget=o[0],e.close(n,!0),t("#"+i).remove(),o.data("ui-tooltip-title")&&(o.attr("title")||o.attr("title",o.data("ui-tooltip-title")),o.removeData("ui-tooltip-title"))}),this.liveRegion.remove()}}),t.uiBackCompat!==!1&&t.widget("ui.tooltip",t.ui.tooltip,{options:{tooltipClass:null},_tooltip:function(){var t=this._superApply(arguments);return this.options.tooltipClass&&t.tooltip.addClass(this.options.tooltipClass),t}}),t.ui.tooltip});
\ No newline at end of file

From ced6db30d7ebd36a3b9522dd11592bba934f90c9 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Tue, 29 Sep 2020 20:08:42 -0400
Subject: [PATCH 493/496] remove more jquery css

---
 static/css/jquery-ui.structure.min.css | 5 -----
 static/css/jquery-ui.theme.min.css     | 5 -----
 2 files changed, 10 deletions(-)
 delete mode 100644 static/css/jquery-ui.structure.min.css
 delete mode 100644 static/css/jquery-ui.theme.min.css

diff --git a/static/css/jquery-ui.structure.min.css b/static/css/jquery-ui.structure.min.css
deleted file mode 100644
index 92f0049af2..0000000000
--- a/static/css/jquery-ui.structure.min.css
+++ /dev/null
@@ -1,5 +0,0 @@
-/*! jQuery UI - v1.11.4 - 2016-03-13
-* http://jqueryui.com
-* Copyright jQuery Foundation and other contributors; Licensed MIT */
-
-.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{margin:0;padding:0;border:0;outline:0;line-height:1.3;text-decoration:none;font-size:100%;list-style:none}.ui-helper-clearfix:before,.ui-helper-clearfix:after{content:"";display:table;border-collapse:collapse}.ui-helper-clearfix:after{clear:both}.ui-helper-clearfix{min-height:0}.ui-helper-zfix{width:100%;height:100%;top:0;left:0;position:absolute;opacity:0;filter:Alpha(Opacity=0)}.ui-front{z-index:100}.ui-state-disabled{cursor:default!important}.ui-icon{display:block;text-indent:-99999px;overflow:hidden;background-repeat:no-repeat}.ui-widget-overlay{position:fixed;top:0;left:0;width:100%;height:100%}.ui-draggable-handle{-ms-touch-action:none;touch-action:none}.ui-resizable{position:relative}.ui-resizable-handle{position:absolute;font-size:0.1px;display:block;-ms-touch-action:none;touch-action:none}.ui-resizable-disabled .ui-resizable-handle,.ui-resizable-autohide .ui-resizable-handle{display:none}.ui-resizable-n{cursor:n-resize;height:7px;width:100%;top:-5px;left:0}.ui-resizable-s{cursor:s-resize;height:7px;width:100%;bottom:-5px;left:0}.ui-resizable-e{cursor:e-resize;width:7px;right:-5px;top:0;height:100%}.ui-resizable-w{cursor:w-resize;width:7px;left:-5px;top:0;height:100%}.ui-resizable-se{cursor:se-resize;width:12px;height:12px;right:1px;bottom:1px}.ui-resizable-sw{cursor:sw-resize;width:9px;height:9px;left:-5px;bottom:-5px}.ui-resizable-nw{cursor:nw-resize;width:9px;height:9px;left:-5px;top:-5px}.ui-resizable-ne{cursor:ne-resize;width:9px;height:9px;right:-5px;top:-5px}.ui-selectable{-ms-touch-action:none;touch-action:none}.ui-selectable-helper{position:absolute;z-index:100;border:1px dotted black}.ui-sortable-handle{-ms-touch-action:none;touch-action:none}.ui-accordion .ui-accordion-header{display:block;cursor:pointer;position:relative;margin:2px 0 0 0;padding:.5em .5em .5em .7em;min-height:0;font-size:100%}.ui-accordion .ui-accordion-icons{padding-left:2.2em}.ui-accordion .ui-accordion-icons .ui-accordion-icons{padding-left:2.2em}.ui-accordion .ui-accordion-header .ui-accordion-header-icon{position:absolute;left:.5em;top:50%;margin-top:-8px}.ui-accordion .ui-accordion-content{padding:1em 2.2em;border-top:0;overflow:auto}.ui-autocomplete{position:absolute;top:0;left:0;cursor:default}.ui-button{display:inline-block;position:relative;padding:0;line-height:normal;margin-right:.1em;cursor:pointer;vertical-align:middle;text-align:center;overflow:visible}.ui-button,.ui-button:link,.ui-button:visited,.ui-button:hover,.ui-button:active{text-decoration:none}.ui-button-icon-only{width:2.2em}button.ui-button-icon-only{width:2.4em}.ui-button-icons-only{width:3.4em}button.ui-button-icons-only{width:3.7em}.ui-button .ui-button-text{display:block;line-height:normal}.ui-button-text-only .ui-button-text{padding:.4em 1em}.ui-button-icon-only .ui-button-text,.ui-button-icons-only .ui-button-text{padding:.4em;text-indent:-9999999px}.ui-button-text-icon-primary .ui-button-text,.ui-button-text-icons .ui-button-text{padding:.4em 1em .4em 2.1em}.ui-button-text-icon-secondary .ui-button-text,.ui-button-text-icons .ui-button-text{padding:.4em 2.1em .4em 1em}.ui-button-text-icons .ui-button-text{padding-left:2.1em;padding-right:2.1em}input.ui-button{padding:.4em 1em}.ui-button-icon-only .ui-icon,.ui-button-text-icon-primary .ui-icon,.ui-button-text-icon-secondary .ui-icon,.ui-button-text-icons .ui-icon,.ui-button-icons-only .ui-icon{position:absolute;top:50%;margin-top:-8px}.ui-button-icon-only .ui-icon{left:50%;margin-left:-8px}.ui-button-text-icon-primary .ui-button-icon-primary,.ui-button-text-icons .ui-button-icon-primary,.ui-button-icons-only .ui-button-icon-primary{left:.5em}.ui-button-text-icon-secondary .ui-button-icon-secondary,.ui-button-text-icons .ui-button-icon-secondary,.ui-button-icons-only .ui-button-icon-secondary{right:.5em}.ui-buttonset{margin-right:7px}.ui-buttonset .ui-button{margin-left:0;margin-right:-.3em}input.ui-button::-moz-focus-inner,button.ui-button::-moz-focus-inner{border:0;padding:0}.ui-datepicker{width:17em;padding:.2em .2em 0;display:none}.ui-datepicker .ui-datepicker-header{position:relative;padding:.2em 0}.ui-datepicker .ui-datepicker-prev,.ui-datepicker .ui-datepicker-next{position:absolute;top:2px;width:1.8em;height:1.8em}.ui-datepicker .ui-datepicker-prev-hover,.ui-datepicker .ui-datepicker-next-hover{top:1px}.ui-datepicker .ui-datepicker-prev{left:2px}.ui-datepicker .ui-datepicker-next{right:2px}.ui-datepicker .ui-datepicker-prev-hover{left:1px}.ui-datepicker .ui-datepicker-next-hover{right:1px}.ui-datepicker .ui-datepicker-prev span,.ui-datepicker .ui-datepicker-next span{display:block;position:absolute;left:50%;margin-left:-8px;top:50%;margin-top:-8px}.ui-datepicker .ui-datepicker-title{margin:0 2.3em;line-height:1.8em;text-align:center}.ui-datepicker .ui-datepicker-title select{font-size:1em;margin:1px 0}.ui-datepicker select.ui-datepicker-month,.ui-datepicker select.ui-datepicker-year{width:45%}.ui-datepicker table{width:100%;font-size:.9em;border-collapse:collapse;margin:0 0 .4em}.ui-datepicker th{padding:.7em .3em;text-align:center;font-weight:bold;border:0}.ui-datepicker td{border:0;padding:1px}.ui-datepicker td span,.ui-datepicker td a{display:block;padding:.2em;text-align:right;text-decoration:none}.ui-datepicker .ui-datepicker-buttonpane{background-image:none;margin:.7em 0 0 0;padding:0 .2em;border-left:0;border-right:0;border-bottom:0}.ui-datepicker .ui-datepicker-buttonpane button{float:right;margin:.5em .2em .4em;cursor:pointer;padding:.2em .6em .3em .6em;width:auto;overflow:visible}.ui-datepicker .ui-datepicker-buttonpane button.ui-datepicker-current{float:left}.ui-datepicker.ui-datepicker-multi{width:auto}.ui-datepicker-multi .ui-datepicker-group{float:left}.ui-datepicker-multi .ui-datepicker-group table{width:95%;margin:0 auto .4em}.ui-datepicker-multi-2 .ui-datepicker-group{width:50%}.ui-datepicker-multi-3 .ui-datepicker-group{width:33.3%}.ui-datepicker-multi-4 .ui-datepicker-group{width:25%}.ui-datepicker-multi .ui-datepicker-group-last .ui-datepicker-header,.ui-datepicker-multi .ui-datepicker-group-middle .ui-datepicker-header{border-left-width:0}.ui-datepicker-multi .ui-datepicker-buttonpane{clear:left}.ui-datepicker-row-break{clear:both;width:100%;font-size:0}.ui-datepicker-rtl{direction:rtl}.ui-datepicker-rtl .ui-datepicker-prev{right:2px;left:auto}.ui-datepicker-rtl .ui-datepicker-next{left:2px;right:auto}.ui-datepicker-rtl .ui-datepicker-prev:hover{right:1px;left:auto}.ui-datepicker-rtl .ui-datepicker-next:hover{left:1px;right:auto}.ui-datepicker-rtl .ui-datepicker-buttonpane{clear:right}.ui-datepicker-rtl .ui-datepicker-buttonpane button{float:left}.ui-datepicker-rtl .ui-datepicker-buttonpane button.ui-datepicker-current,.ui-datepicker-rtl .ui-datepicker-group{float:right}.ui-datepicker-rtl .ui-datepicker-group-last .ui-datepicker-header,.ui-datepicker-rtl .ui-datepicker-group-middle .ui-datepicker-header{border-right-width:0;border-left-width:1px}.ui-dialog{overflow:hidden;position:absolute;top:0;left:0;padding:.2em;outline:0}.ui-dialog .ui-dialog-titlebar{padding:.4em 1em;position:relative}.ui-dialog .ui-dialog-title{float:left;margin:.1em 0;white-space:nowrap;width:90%;overflow:hidden;text-overflow:ellipsis}.ui-dialog .ui-dialog-titlebar-close{position:absolute;right:.3em;top:50%;width:20px;margin:-10px 0 0 0;padding:1px;height:20px}.ui-dialog .ui-dialog-content{position:relative;border:0;padding:.5em 1em;background:none;overflow:auto}.ui-dialog .ui-dialog-buttonpane{text-align:left;border-width:1px 0 0 0;background-image:none;margin-top:.5em;padding:.3em 1em .5em .4em}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{float:right}.ui-dialog .ui-dialog-buttonpane button{margin:.5em .4em .5em 0;cursor:pointer}.ui-dialog .ui-resizable-se{width:12px;height:12px;right:-5px;bottom:-5px;background-position:16px 16px}.ui-draggable .ui-dialog-titlebar{cursor:move}.ui-menu{list-style:none;padding:0;margin:0;display:block;outline:none}.ui-menu .ui-menu{position:absolute}.ui-menu .ui-menu-item{position:relative;margin:0;padding:3px 1em 3px .4em;cursor:pointer;min-height:0;list-style-image:url("data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7")}.ui-menu .ui-menu-divider{margin:5px 0;height:0;font-size:0;line-height:0;border-width:1px 0 0 0}.ui-menu .ui-state-focus,.ui-menu .ui-state-active{margin:-1px}.ui-menu-icons{position:relative}.ui-menu-icons .ui-menu-item{padding-left:2em}.ui-menu .ui-icon{position:absolute;top:0;bottom:0;left:.2em;margin:auto 0}.ui-menu .ui-menu-icon{left:auto;right:0}.ui-progressbar{height:2em;text-align:left;overflow:hidden}.ui-progressbar .ui-progressbar-value{margin:-1px;height:100%}.ui-progressbar .ui-progressbar-overlay{background:url("data:image/gif;base64,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");height:100%;filter:alpha(opacity=25);opacity:0.25}.ui-progressbar-indeterminate .ui-progressbar-value{background-image:none}.ui-selectmenu-menu{padding:0;margin:0;position:absolute;top:0;left:0;display:none}.ui-selectmenu-menu .ui-menu{overflow:auto;overflow-x:hidden;padding-bottom:1px}.ui-selectmenu-menu .ui-menu .ui-selectmenu-optgroup{font-size:1em;font-weight:bold;line-height:1.5;padding:2px 0.4em;margin:0.5em 0 0 0;height:auto;border:0}.ui-selectmenu-open{display:block}.ui-selectmenu-button{display:inline-block;overflow:hidden;position:relative;text-decoration:none;cursor:pointer}.ui-selectmenu-button span.ui-icon{right:0.5em;left:auto;margin-top:-8px;position:absolute;top:50%}.ui-selectmenu-button span.ui-selectmenu-text{text-align:left;padding:0.4em 2.1em 0.4em 1em;display:block;line-height:1.4;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.ui-slider{position:relative;text-align:left}.ui-slider .ui-slider-handle{position:absolute;z-index:2;width:1.2em;height:1.2em;cursor:default;-ms-touch-action:none;touch-action:none}.ui-slider .ui-slider-range{position:absolute;z-index:1;font-size:.7em;display:block;border:0;background-position:0 0}.ui-slider.ui-state-disabled .ui-slider-handle,.ui-slider.ui-state-disabled .ui-slider-range{filter:inherit}.ui-slider-horizontal{height:.8em}.ui-slider-horizontal .ui-slider-handle{top:-.3em;margin-left:-.6em}.ui-slider-horizontal .ui-slider-range{top:0;height:100%}.ui-slider-horizontal .ui-slider-range-min{left:0}.ui-slider-horizontal .ui-slider-range-max{right:0}.ui-slider-vertical{width:.8em;height:100px}.ui-slider-vertical .ui-slider-handle{left:-.3em;margin-left:0;margin-bottom:-.6em}.ui-slider-vertical .ui-slider-range{left:0;width:100%}.ui-slider-vertical .ui-slider-range-min{bottom:0}.ui-slider-vertical .ui-slider-range-max{top:0}.ui-spinner{position:relative;display:inline-block;overflow:hidden;padding:0;vertical-align:middle}.ui-spinner-input{border:none;background:none;color:inherit;padding:0;margin:.2em 0;vertical-align:middle;margin-left:.4em;margin-right:22px}.ui-spinner-button{width:16px;height:50%;font-size:.5em;padding:0;margin:0;text-align:center;position:absolute;cursor:default;display:block;overflow:hidden;right:0}.ui-spinner a.ui-spinner-button{border-top:none;border-bottom:none;border-right:none}.ui-spinner .ui-icon{position:absolute;margin-top:-8px;top:50%;left:0}.ui-spinner-up{top:0}.ui-spinner-down{bottom:0}.ui-spinner .ui-icon-triangle-1-s{background-position:-65px -16px}.ui-tabs{position:relative;padding:.2em}.ui-tabs .ui-tabs-nav{margin:0;padding:.2em .2em 0}.ui-tabs .ui-tabs-nav li{list-style:none;float:left;position:relative;top:0;margin:1px .2em 0 0;border-bottom-width:0;padding:0;white-space:nowrap}.ui-tabs .ui-tabs-nav .ui-tabs-anchor{float:left;padding:.5em 1em;text-decoration:none}.ui-tabs .ui-tabs-nav li.ui-tabs-active{margin-bottom:-1px;padding-bottom:1px}.ui-tabs .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-state-disabled .ui-tabs-anchor,.ui-tabs .ui-tabs-nav li.ui-tabs-loading .ui-tabs-anchor{cursor:text}.ui-tabs-collapsible .ui-tabs-nav li.ui-tabs-active .ui-tabs-anchor{cursor:pointer}.ui-tabs .ui-tabs-panel{display:block;border-width:0;padding:1em 1.4em;background:none}.ui-tooltip{padding:8px;position:absolute;z-index:9999;max-width:300px;-webkit-box-shadow:0 0 5px #aaa;box-shadow:0 0 5px #aaa}body .ui-tooltip{border-width:2px}
\ No newline at end of file
diff --git a/static/css/jquery-ui.theme.min.css b/static/css/jquery-ui.theme.min.css
deleted file mode 100644
index a7e0b94f99..0000000000
--- a/static/css/jquery-ui.theme.min.css
+++ /dev/null
@@ -1,5 +0,0 @@
-/*! jQuery UI - v1.11.4 - 2016-03-15
-* http://jqueryui.com
-* Copyright jQuery Foundation and other contributors; Licensed MIT */
-
-.ui-widget{font-family:Arial,Helvetica,sans-serif;font-size:1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Arial,Helvetica,sans-serif;font-size:1em}.ui-widget-content{border:1px solid #ddd;background:#fff;color:#333}.ui-widget-content a{color:#333}.ui-widget-header{border:1px solid #ddd;background:#e9e9e9;color:#333;font-weight:bold}.ui-widget-header a{color:#333}.ui-state-default,.ui-widget-content .ui-state-default,.ui-widget-header .ui-state-default{border:1px solid #c5c5c5;background:#f6f6f6;font-weight:normal;color:#454545}.ui-state-default a,.ui-state-default a:link,.ui-state-default a:visited{color:#454545;text-decoration:none}.ui-state-hover,.ui-widget-content .ui-state-hover,.ui-widget-header .ui-state-hover,.ui-state-focus,.ui-widget-content .ui-state-focus,.ui-widget-header .ui-state-focus{border:1px solid #ccc;background:#ededed;font-weight:normal;color:#2b2b2b}.ui-state-hover a,.ui-state-hover a:hover,.ui-state-hover a:link,.ui-state-hover a:visited,.ui-state-focus a,.ui-state-focus a:hover,.ui-state-focus a:link,.ui-state-focus a:visited{color:#2b2b2b;text-decoration:none}.ui-state-active,.ui-widget-content .ui-state-active,.ui-widget-header .ui-state-active{border:1px solid #003eff;background:#007fff;font-weight:normal;color:#fff}.ui-state-active a,.ui-state-active a:link,.ui-state-active a:visited{color:#fff;text-decoration:none}.ui-state-highlight,.ui-widget-content .ui-state-highlight,.ui-widget-header .ui-state-highlight{border:1px solid #dad55e;background:#fffa90;color:#777620}.ui-state-highlight a,.ui-widget-content .ui-state-highlight a,.ui-widget-header .ui-state-highlight a{color:#777620}.ui-state-error,.ui-widget-content .ui-state-error,.ui-widget-header .ui-state-error{border:1px solid #f1a899;background:#fddfdf;color:#5f3f3f}.ui-state-error a,.ui-widget-content .ui-state-error a,.ui-widget-header .ui-state-error a{color:#5f3f3f}.ui-state-error-text,.ui-widget-content .ui-state-error-text,.ui-widget-header .ui-state-error-text{color:#5f3f3f}.ui-priority-primary,.ui-widget-content .ui-priority-primary,.ui-widget-header .ui-priority-primary{font-weight:bold}.ui-priority-secondary,.ui-widget-content .ui-priority-secondary,.ui-widget-header .ui-priority-secondary{opacity:.7;filter:Alpha(Opacity=70);font-weight:normal}.ui-state-disabled,.ui-widget-content .ui-state-disabled,.ui-widget-header .ui-state-disabled{opacity:.35;filter:Alpha(Opacity=35);background-image:none}.ui-state-disabled .ui-icon{filter:Alpha(Opacity=35)}.ui-icon{width:16px;height:16px}.ui-icon,.ui-widget-content .ui-icon{background-image:url("/images/jquery-ui/ui-icons_444444_256x240.png")}.ui-widget-header .ui-icon{background-image:url("/images/jquery-ui/ui-icons_444444_256x240.png")}.ui-state-default .ui-icon{background-image:url("/images/jquery-ui/ui-icons_777777_256x240.png")}.ui-state-hover .ui-icon,.ui-state-focus .ui-icon{background-image:url("/images/jquery-ui/ui-icons_555555_256x240.png")}.ui-state-active .ui-icon{background-image:url("/images/jquery-ui/ui-icons_ffffff_256x240.png")}.ui-state-highlight .ui-icon{background-image:url("/images/jquery-ui/ui-icons_777620_256x240.png")}.ui-state-error .ui-icon,.ui-state-error-text .ui-icon{background-image:url("/images/jquery-ui/ui-icons_cc0000_256x240.png")}.ui-icon-blank{background-position:16px 16px}.ui-icon-carat-1-n{background-position:0 0}.ui-icon-carat-1-ne{background-position:-16px 0}.ui-icon-carat-1-e{background-position:-32px 0}.ui-icon-carat-1-se{background-position:-48px 0}.ui-icon-carat-1-s{background-position:-64px 0}.ui-icon-carat-1-sw{background-position:-80px 0}.ui-icon-carat-1-w{background-position:-96px 0}.ui-icon-carat-1-nw{background-position:-112px 0}.ui-icon-carat-2-n-s{background-position:-128px 0}.ui-icon-carat-2-e-w{background-position:-144px 0}.ui-icon-triangle-1-n{background-position:0 -16px}.ui-icon-triangle-1-ne{background-position:-16px -16px}.ui-icon-triangle-1-e{background-position:-32px -16px}.ui-icon-triangle-1-se{background-position:-48px -16px}.ui-icon-triangle-1-s{background-position:-64px -16px}.ui-icon-triangle-1-sw{background-position:-80px -16px}.ui-icon-triangle-1-w{background-position:-96px -16px}.ui-icon-triangle-1-nw{background-position:-112px -16px}.ui-icon-triangle-2-n-s{background-position:-128px -16px}.ui-icon-triangle-2-e-w{background-position:-144px -16px}.ui-icon-arrow-1-n{background-position:0 -32px}.ui-icon-arrow-1-ne{background-position:-16px -32px}.ui-icon-arrow-1-e{background-position:-32px -32px}.ui-icon-arrow-1-se{background-position:-48px -32px}.ui-icon-arrow-1-s{background-position:-64px -32px}.ui-icon-arrow-1-sw{background-position:-80px -32px}.ui-icon-arrow-1-w{background-position:-96px -32px}.ui-icon-arrow-1-nw{background-position:-112px -32px}.ui-icon-arrow-2-n-s{background-position:-128px -32px}.ui-icon-arrow-2-ne-sw{background-position:-144px -32px}.ui-icon-arrow-2-e-w{background-position:-160px -32px}.ui-icon-arrow-2-se-nw{background-position:-176px -32px}.ui-icon-arrowstop-1-n{background-position:-192px -32px}.ui-icon-arrowstop-1-e{background-position:-208px -32px}.ui-icon-arrowstop-1-s{background-position:-224px -32px}.ui-icon-arrowstop-1-w{background-position:-240px -32px}.ui-icon-arrowthick-1-n{background-position:0 -48px}.ui-icon-arrowthick-1-ne{background-position:-16px -48px}.ui-icon-arrowthick-1-e{background-position:-32px -48px}.ui-icon-arrowthick-1-se{background-position:-48px -48px}.ui-icon-arrowthick-1-s{background-position:-64px -48px}.ui-icon-arrowthick-1-sw{background-position:-80px -48px}.ui-icon-arrowthick-1-w{background-position:-96px -48px}.ui-icon-arrowthick-1-nw{background-position:-112px -48px}.ui-icon-arrowthick-2-n-s{background-position:-128px -48px}.ui-icon-arrowthick-2-ne-sw{background-position:-144px -48px}.ui-icon-arrowthick-2-e-w{background-position:-160px -48px}.ui-icon-arrowthick-2-se-nw{background-position:-176px -48px}.ui-icon-arrowthickstop-1-n{background-position:-192px -48px}.ui-icon-arrowthickstop-1-e{background-position:-208px -48px}.ui-icon-arrowthickstop-1-s{background-position:-224px -48px}.ui-icon-arrowthickstop-1-w{background-position:-240px -48px}.ui-icon-arrowreturnthick-1-w{background-position:0 -64px}.ui-icon-arrowreturnthick-1-n{background-position:-16px -64px}.ui-icon-arrowreturnthick-1-e{background-position:-32px -64px}.ui-icon-arrowreturnthick-1-s{background-position:-48px -64px}.ui-icon-arrowreturn-1-w{background-position:-64px -64px}.ui-icon-arrowreturn-1-n{background-position:-80px -64px}.ui-icon-arrowreturn-1-e{background-position:-96px -64px}.ui-icon-arrowreturn-1-s{background-position:-112px -64px}.ui-icon-arrowrefresh-1-w{background-position:-128px -64px}.ui-icon-arrowrefresh-1-n{background-position:-144px -64px}.ui-icon-arrowrefresh-1-e{background-position:-160px -64px}.ui-icon-arrowrefresh-1-s{background-position:-176px -64px}.ui-icon-arrow-4{background-position:0 -80px}.ui-icon-arrow-4-diag{background-position:-16px -80px}.ui-icon-extlink{background-position:-32px -80px}.ui-icon-newwin{background-position:-48px -80px}.ui-icon-refresh{background-position:-64px -80px}.ui-icon-shuffle{background-position:-80px -80px}.ui-icon-transfer-e-w{background-position:-96px -80px}.ui-icon-transferthick-e-w{background-position:-112px -80px}.ui-icon-folder-collapsed{background-position:0 -96px}.ui-icon-folder-open{background-position:-16px -96px}.ui-icon-document{background-position:-32px -96px}.ui-icon-document-b{background-position:-48px -96px}.ui-icon-note{background-position:-64px -96px}.ui-icon-mail-closed{background-position:-80px -96px}.ui-icon-mail-open{background-position:-96px -96px}.ui-icon-suitcase{background-position:-112px -96px}.ui-icon-comment{background-position:-128px -96px}.ui-icon-person{background-position:-144px -96px}.ui-icon-print{background-position:-160px -96px}.ui-icon-trash{background-position:-176px -96px}.ui-icon-locked{background-position:-192px -96px}.ui-icon-unlocked{background-position:-208px -96px}.ui-icon-bookmark{background-position:-224px -96px}.ui-icon-tag{background-position:-240px -96px}.ui-icon-home{background-position:0 -112px}.ui-icon-flag{background-position:-16px -112px}.ui-icon-calendar{background-position:-32px -112px}.ui-icon-cart{background-position:-48px -112px}.ui-icon-pencil{background-position:-64px -112px}.ui-icon-clock{background-position:-80px -112px}.ui-icon-disk{background-position:-96px -112px}.ui-icon-calculator{background-position:-112px -112px}.ui-icon-zoomin{background-position:-128px -112px}.ui-icon-zoomout{background-position:-144px -112px}.ui-icon-search{background-position:-160px -112px}.ui-icon-wrench{background-position:-176px -112px}.ui-icon-gear{background-position:-192px -112px}.ui-icon-heart{background-position:-208px -112px}.ui-icon-star{background-position:-224px -112px}.ui-icon-link{background-position:-240px -112px}.ui-icon-cancel{background-position:0 -128px}.ui-icon-plus{background-position:-16px -128px}.ui-icon-plusthick{background-position:-32px -128px}.ui-icon-minus{background-position:-48px -128px}.ui-icon-minusthick{background-position:-64px -128px}.ui-icon-close{background-position:-80px -128px}.ui-icon-closethick{background-position:-96px -128px}.ui-icon-key{background-position:-112px -128px}.ui-icon-lightbulb{background-position:-128px -128px}.ui-icon-scissors{background-position:-144px -128px}.ui-icon-clipboard{background-position:-160px -128px}.ui-icon-copy{background-position:-176px -128px}.ui-icon-contact{background-position:-192px -128px}.ui-icon-image{background-position:-208px -128px}.ui-icon-video{background-position:-224px -128px}.ui-icon-script{background-position:-240px -128px}.ui-icon-alert{background-position:0 -144px}.ui-icon-info{background-position:-16px -144px}.ui-icon-notice{background-position:-32px -144px}.ui-icon-help{background-position:-48px -144px}.ui-icon-check{background-position:-64px -144px}.ui-icon-bullet{background-position:-80px -144px}.ui-icon-radio-on{background-position:-96px -144px}.ui-icon-radio-off{background-position:-112px -144px}.ui-icon-pin-w{background-position:-128px -144px}.ui-icon-pin-s{background-position:-144px -144px}.ui-icon-play{background-position:0 -160px}.ui-icon-pause{background-position:-16px -160px}.ui-icon-seek-next{background-position:-32px -160px}.ui-icon-seek-prev{background-position:-48px -160px}.ui-icon-seek-end{background-position:-64px -160px}.ui-icon-seek-start{background-position:-80px -160px}.ui-icon-seek-first{background-position:-80px -160px}.ui-icon-stop{background-position:-96px -160px}.ui-icon-eject{background-position:-112px -160px}.ui-icon-volume-off{background-position:-128px -160px}.ui-icon-volume-on{background-position:-144px -160px}.ui-icon-power{background-position:0 -176px}.ui-icon-signal-diag{background-position:-16px -176px}.ui-icon-signal{background-position:-32px -176px}.ui-icon-battery-0{background-position:-48px -176px}.ui-icon-battery-1{background-position:-64px -176px}.ui-icon-battery-2{background-position:-80px -176px}.ui-icon-battery-3{background-position:-96px -176px}.ui-icon-circle-plus{background-position:0 -192px}.ui-icon-circle-minus{background-position:-16px -192px}.ui-icon-circle-close{background-position:-32px -192px}.ui-icon-circle-triangle-e{background-position:-48px -192px}.ui-icon-circle-triangle-s{background-position:-64px -192px}.ui-icon-circle-triangle-w{background-position:-80px -192px}.ui-icon-circle-triangle-n{background-position:-96px -192px}.ui-icon-circle-arrow-e{background-position:-112px -192px}.ui-icon-circle-arrow-s{background-position:-128px -192px}.ui-icon-circle-arrow-w{background-position:-144px -192px}.ui-icon-circle-arrow-n{background-position:-160px -192px}.ui-icon-circle-zoomin{background-position:-176px -192px}.ui-icon-circle-zoomout{background-position:-192px -192px}.ui-icon-circle-check{background-position:-208px -192px}.ui-icon-circlesmall-plus{background-position:0 -208px}.ui-icon-circlesmall-minus{background-position:-16px -208px}.ui-icon-circlesmall-close{background-position:-32px -208px}.ui-icon-squaresmall-plus{background-position:-48px -208px}.ui-icon-squaresmall-minus{background-position:-64px -208px}.ui-icon-squaresmall-close{background-position:-80px -208px}.ui-icon-grip-dotted-vertical{background-position:0 -224px}.ui-icon-grip-dotted-horizontal{background-position:-16px -224px}.ui-icon-grip-solid-vertical{background-position:-32px -224px}.ui-icon-grip-solid-horizontal{background-position:-48px -224px}.ui-icon-gripsmall-diagonal-se{background-position:-64px -224px}.ui-icon-grip-diagonal-se{background-position:-80px -224px}.ui-corner-all,.ui-corner-top,.ui-corner-left,.ui-corner-tl{border-top-left-radius:3px}.ui-corner-all,.ui-corner-top,.ui-corner-right,.ui-corner-tr{border-top-right-radius:3px}.ui-corner-all,.ui-corner-bottom,.ui-corner-left,.ui-corner-bl{border-bottom-left-radius:3px}.ui-corner-all,.ui-corner-bottom,.ui-corner-right,.ui-corner-br{border-bottom-right-radius:3px}.ui-widget-overlay{background:#aaa;opacity:.3;filter:Alpha(Opacity=30)}.ui-widget-shadow{margin:0 0 0 0;padding:5px;background:#666;opacity:.3;filter:Alpha(Opacity=30);border-radius:8px}
\ No newline at end of file

From a3fbdacef2de9b76d275c0360399d3f4a8f5ba73 Mon Sep 17 00:00:00 2001
From: Karen Bradshaw <kbhawkey@gmail.com>
Date: Wed, 30 Sep 2020 13:40:32 -0400
Subject: [PATCH 494/496] remove header partial

---
 layouts/partials/header.html | 73 ------------------------------------
 1 file changed, 73 deletions(-)
 delete mode 100644 layouts/partials/header.html

diff --git a/layouts/partials/header.html b/layouts/partials/header.html
deleted file mode 100644
index e9ac8b7f66..0000000000
--- a/layouts/partials/header.html
+++ /dev/null
@@ -1,73 +0,0 @@
-<div id="cellophane" onclick="kub.toggleMenu()"></div>
-
-<header>
-    <a href="{{ site.Home.RelPermalink }}" class="logo" title="{{ site.Home.Title }} - {{ site.Params.title }}" aria-label="Kubernetes website" data-proofer-ignore></a>
-
-    <div class="nav-buttons" data-auto-burger="primary">
-        <ul class="global-nav">
-            {{ $sections := slice "docs" "blog" "training" "partners" "community" "case-studies" }}
-            {{ range $sections }}
-            {{ with site.GetPage "section" . }}<li><a href="{{ .RelPermalink }}"{{ if eq .Section $.Section }} class="active"{{ end}} data-proofer-ignore>{{ .Title }}</a></li>{{ end }}
-            {{ end }}
-            {{/* Link directly to documentation etc., if possible. */}}
-            {{ $langPage := cond (gt (len .Translations) 0) . site.Home }}
-             <li>
-                <a href="#" data-proofer-ignore>
-                    {{ $langPage.Language.LanguageName }} <span class="ui-icon ui-icon-carat-1-s"></span>
-                </a>
-                <ul>
-                {{ range $langPage.Translations }}
-                    <li><a href="{{ .RelPermalink }}" data-proofer-ignore>{{ .Language.LanguageName }}</a></li>
-                {{ end }}
-                </ul>
-            </li>
-
-            <li>
-                <a href="#" data-proofer-ignore>
-                    {{ site.Params.version }} <span class="ui-icon ui-icon-carat-1-s"></span>
-                </a>
-                <ul>
-                {{ range site.Params.versions }}
-                    <li><a href="{{ .url }}{{ $.RelPermalink }}" data-proofer-ignore>{{ .version }}</a></li>
-                {{ end }}
-                </ul>
-            </li>
-        </ul>
-        {{ with site.GetPage "section" "docs/tutorials/kubernetes-basics" }}
-        <a href="{{ .RelPermalink }}" class="button" id="tryKubernetes" data-auto-burger-exclude data-proofer-ignore>{{ .LinkTitle }}</a>
-        {{ end }}
-
-        <button id="hamburger" onclick="kub.toggleMenu()" data-auto-burger-exclude><div></div></button>
-    </div>
-
-    <nav id="mainNav">
-        <div class="main-section" data-auto-burger="primary">
-         {{ range site.Menus.main }}
-           <div class="nav-box">
-            <h3><a href="{{ .URL }}" data-proofer-ignore>{{ .Title }}</a></h3>
-           {{ .Post }}
-            </div>
-         {{ end }}
-        </div>
-        <div class="main-section" data-auto-burger="primary">
-            <div class="left">
-                <h5 class="github-invite">{{ T "main_github_invite" }}</h5>
-                <a href="https://github.com/kubernetes/kubernetes" class="button" data-auto-burger-exclude>{{ T "main_github_view_on" }}</a>
-            </div>
-
-            <div class="right">
-                <h5 class="github-invite">{{ T "main_community_explore" }}</h5>
-                <div class="social">
-                    <a href="https://twitter.com/kubernetesio" class="twitter"><span>{{ T "community_twitter_name" }}</span></a>
-                    <a href="https://github.com/kubernetes/kubernetes" class="github"><span>{{ T "community_github_name" }}</span></a>
-                    <a href="http://slack.k8s.io/" class="slack"><span>{{ T "community_slack_name" }}</span></a>
-                    <a href="https://stackoverflow.com/questions/tagged/kubernetes" class="stack-overflow"><span>{{ T "community_stack_overflow_name" }}</span></a>
-                    <a href="https://www.youtube.com/kubernetescommunity" class="youtube"><span>{{ T "community_youtube_name" }}</span></a>
-                    <a href="https://discuss.kubernetes.io" class="mailing-list"><span>{{ T "community_forum_name" }}</span></a>
-                    <a href="https://calendar.google.com/calendar/embed?src=cgnt364vd8s86hr2phapfjc6uk%40group.calendar.google.com" class="calendar"><span>{{ T "community_events_calendar" }}</span></a>
-                </div>
-            </div>
-            <div class="clear" style="clear: both"></div>
-        </div>
-    </nav>
-</header>
\ No newline at end of file

From 56c51724e816fc889e8ffebe4e75e7b90a589a4b Mon Sep 17 00:00:00 2001
From: santadasu <santa_dasu@yahoo.com>
Date: Wed, 30 Sep 2020 15:26:57 -0700
Subject: [PATCH 495/496] Fixing the URL for operator framework

None
---
 content/en/docs/concepts/extend-kubernetes/operator.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/en/docs/concepts/extend-kubernetes/operator.md b/content/en/docs/concepts/extend-kubernetes/operator.md
index 14ed2d5233..892529633f 100644
--- a/content/en/docs/concepts/extend-kubernetes/operator.md
+++ b/content/en/docs/concepts/extend-kubernetes/operator.md
@@ -122,7 +122,7 @@ that can act as a [client for the Kubernetes API](/docs/reference/using-api/clie
   * using [kubebuilder](https://book.kubebuilder.io/)
   * using [Metacontroller](https://metacontroller.app/) along with WebHooks that
     you implement yourself
-  * using the [Operator Framework](https://github.com/operator-framework/getting-started)
+  * using the [Operator Framework](https://operatorframework.io)
 * [Publish](https://operatorhub.io/) your operator for other people to use
 * Read [CoreOS' original article](https://coreos.com/blog/introducing-operators.html) that introduced the Operator pattern
 * Read an [article](https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-building-kubernetes-operators-and-stateful-apps) from Google Cloud about best practices for building Operators

From b1490ef95f9cfd26e207240ae45ebfd044ffaba4 Mon Sep 17 00:00:00 2001
From: Qiming Teng <tengqim@cn.ibm.com>
Date: Fri, 11 Sep 2020 14:22:21 +0800
Subject: [PATCH 496/496] Improve ConfigMap concept

This PR adds some missing information to the ConfigMap concept page.
---
 .../docs/concepts/configuration/configmap.md  | 79 +++++++++++--------
 1 file changed, 47 insertions(+), 32 deletions(-)

diff --git a/content/en/docs/concepts/configuration/configmap.md b/content/en/docs/concepts/configuration/configmap.md
index 93bc555746..4a26381109 100644
--- a/content/en/docs/concepts/configuration/configmap.md
+++ b/content/en/docs/concepts/configuration/configmap.md
@@ -16,7 +16,6 @@ or use additional (third party) tools to keep your data private.
 {{< /caution >}}
 
 
-
 <!-- body -->
 ## Motivation
 
@@ -24,25 +23,38 @@ Use a ConfigMap for setting configuration data separately from application code.
 
 For example, imagine that you are developing an application that you can run on your
 own computer (for development) and in the cloud (to handle real traffic).
-You write the code to
-look in an environment variable named `DATABASE_HOST`. Locally, you set that variable
-to `localhost`. In the cloud, you set it to refer to a Kubernetes
-{{< glossary_tooltip text="Service" term_id="service" >}} that exposes the database
-component to your cluster.
-
+You write the code to look in an environment variable named `DATABASE_HOST`.
+Locally, you set that variable to `localhost`. In the cloud, you set it to
+refer to a Kubernetes {{< glossary_tooltip text="Service" term_id="service" >}}
+that exposes the database component to your cluster.
 This lets you fetch a container image running in the cloud and
 debug the exact same code locally if needed.
 
+A ConfigMap is not designed to hold large chunks of data. The data stored in a
+ConfigMap cannot exeed 1 MiB. If you need to store settings that are
+larger than this limit, you may want to consider mounting a volume or use a
+separate database or file service.
+
 ## ConfigMap object
 
 A ConfigMap is an API [object](/docs/concepts/overview/working-with-objects/kubernetes-objects/)
 that lets you store configuration for other objects to use. Unlike most
-Kubernetes objects that have a `spec`, a ConfigMap has a `data` section to
-store items (keys) and their values.
+Kubernetes objects that have a `spec`, a ConfigMap has `data` and `binaryData`
+fields. These fields accepts key-value pairs as their values.  Both the `data`
+field and the `binaryData` are optional. The `data` field is designed to
+contain UTF-8 byte sequences while the `binaryData` field is designed to
+contain binary data.
 
 The name of a ConfigMap must be a valid
 [DNS subdomain name](/docs/concepts/overview/working-with-objects/names#dns-subdomain-names).
 
+Each key under the `data` or the `binaryData` field must consist of
+alphanumeric characters, `-`, `_` or `.`. The keys stored in `data` must not
+overlap with the keys in the `binaryData` field.
+
+Starting from v1.19, you can add an `immutable` field to a ConfigMap
+definition to create an [immutable ConfigMap](#configmap-immutable).
+
 ## ConfigMaps and Pods
 
 You can write a Pod `spec` that refers to a ConfigMap and configures the container(s)
@@ -62,7 +74,7 @@ data:
   # property-like keys; each key maps to a simple value
   player_initial_lives: "3"
   ui_properties_file_name: "user-interface.properties"
-  #
+
   # file-like keys
   game.properties: |
     enemy.types=aliens,monsters
@@ -94,6 +106,7 @@ when that happens. By accessing the Kubernetes API directly, this
 technique also lets you access a ConfigMap in a different namespace.
 
 Here's an example Pod that uses values from `game-demo` to configure a Pod:
+
 ```yaml
 apiVersion: v1
 kind: Pod
@@ -134,7 +147,6 @@ spec:
           path: "user-interface.properties"
 ```
 
-
 A ConfigMap doesn't differentiate between single line property values and
 multi-line file-like values.
 What matters is how Pods and other objects consume those values.
@@ -153,7 +165,6 @@ ConfigMaps can be mounted as data volumes. ConfigMaps can also be used by other
 parts of the system, without being directly exposed to the Pod. For example,
 ConfigMaps can hold data that other parts of the system should use for configuration.
 
-{{< note >}}
 The most common way to use ConfigMaps is to configure settings for
 containers running in a Pod in the same namespace. You can also use a
 ConfigMap separately.
@@ -162,16 +173,23 @@ For example, you
 might encounter {{< glossary_tooltip text="addons" term_id="addons" >}}
 or {{< glossary_tooltip text="operators" term_id="operator-pattern" >}} that
 adjust their behavior based on a ConfigMap.
-{{< /note >}}
 
 ### Using ConfigMaps as files from a Pod
 
 To consume a ConfigMap in a volume in a Pod:
 
-1. Create a config map or use an existing one. Multiple Pods can reference the same config map.
-1. Modify your Pod definition to add a volume under `.spec.volumes[]`. Name the volume anything, and have a `.spec.volumes[].configMap.name` field set to reference your ConfigMap object.
-1. Add a `.spec.containers[].volumeMounts[]` to each container that needs the config map. Specify `.spec.containers[].volumeMounts[].readOnly = true` and `.spec.containers[].volumeMounts[].mountPath` to an unused directory name where you would like the config map to appear.
-1. Modify your image or command line so that the program looks for files in that directory. Each key in the config map `data` map becomes the filename under `mountPath`.
+1. Create a ConfigMap or use an existing one. Multiple Pods can reference the
+   same ConfigMap.
+1. Modify your Pod definition to add a volume under `.spec.volumes[]`. Name
+   the volume anything, and have a `.spec.volumes[].configMap.name` field set
+   to reference your ConfigMap object.
+1. Add a `.spec.containers[].volumeMounts[]` to each container that needs the
+   ConfigMap. Specify `.spec.containers[].volumeMounts[].readOnly = true` and
+   `.spec.containers[].volumeMounts[].mountPath` to an unused directory name
+   where you would like the ConfigMap to appear.
+1. Modify your image or command line so that the program looks for files in
+   that directory. Each key in the ConfigMap `data` map becomes the filename
+   under `mountPath`.
 
 This is an example of a Pod that mounts a ConfigMap in a volume:
 
@@ -201,8 +219,8 @@ own `volumeMounts` block, but only one `.spec.volumes` is needed per ConfigMap.
 
 #### Mounted ConfigMaps are updated automatically
 
-When a config map currently consumed in a volume is updated, projected keys are eventually updated as well.
-The kubelet checks whether the mounted config map is fresh on every periodic sync.
+When a ConfigMap currently consumed in a volume is updated, projected keys are eventually updated as well.
+The kubelet checks whether the mounted ConfigMap is fresh on every periodic sync.
 However, the kubelet uses its local cache for getting the current value of the ConfigMap.
 The type of the cache is configurable using the `ConfigMapAndSecretChangeDetectionStrategy` field in
 the [KubeletConfiguration struct](https://github.com/kubernetes/kubernetes/blob/{{< param "docsbranch" >}}/staging/src/k8s.io/kubelet/config/v1beta1/types.go).
@@ -224,12 +242,13 @@ data has the following advantages:
 
 - protects you from accidental (or unwanted) updates that could cause applications outages
 - improves performance of your cluster by significantly reducing load on kube-apiserver, by
-closing watches for config maps marked as immutable.
+  closing watches for ConfigMaps marked as immutable.
+
+This feature is controlled by the `ImmutableEphemeralVolumes`
+[feature gate](/docs/reference/command-line-tools-reference/feature-gates/).
+You can create an immutable ConfigMap by setting the `immutable` field to `true`.
+For example:
 
-This feature is controlled by the `ImmutableEphemeralVolumes` [feature
-gate](/docs/reference/command-line-tools-reference/feature-gates/),
-which is enabled by default since v1.19. You can create an immutable
-ConfigMap by setting the `immutable` field to `true`. For example,
 ```yaml
 apiVersion: v1
 kind: ConfigMap
@@ -240,17 +259,13 @@ data:
 immutable: true
 ```
 
-{{< note >}}
-Once a ConfigMap or Secret is marked as immutable, it is _not_ possible to revert this change
-nor to mutate the contents of the `data` field. You can only delete and recreate the ConfigMap.
-Existing Pods maintain a mount point to the deleted ConfigMap - it is recommended to recreate
-these pods.
-{{< /note >}}
-
+Once a ConfigMap is marked as immutable, it is _not_ possible to revert this change
+nor to mutate the contents of the `data` or the `binaryData` field. You can
+only delete and recreate the ConfigMap. Because existing Pods maintain a mount point
+to the deleted ConfigMap, it is recommended to recreate these pods.
 
 ## {{% heading "whatsnext" %}}
 
-
 * Read about [Secrets](/docs/concepts/configuration/secret/).
 * Read [Configure a Pod to Use a ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/).
 * Read [The Twelve-Factor App](https://12factor.net/) to understand the motivation for